From nobody Wed Apr 1 05:47:32 2015 Return-Path: X-Original-To: tram@ietfa.amsl.com Delivered-To: tram@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 8BAB41A8A80 for ; Wed, 1 Apr 2015 05:47:30 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.236 X-Spam-Level: X-Spam-Status: No, score=-1.236 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, SPF_HELO_PASS=-0.001, SPF_SOFTFAIL=0.665] autolearn=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id YNSSSEB_WNJl for ; Wed, 1 Apr 2015 05:47:28 -0700 (PDT) Received: from implementers.org (implementers.org [IPv6:2604:3400:dc1:41:216:3eff:fe5b:8240]) by ietfa.amsl.com (Postfix) with ESMTP id A15A31A8ACD for ; Wed, 1 Apr 2015 05:47:25 -0700 (PDT) Received: from [IPv6:2602:43:2da:6400:84f3:c61f:6a48:69a2] (unknown [IPv6:2602:43:2da:6400:84f3:c61f:6a48:69a2]) (using TLSv1 with cipher DHE-RSA-AES128-SHA (128/128 bits)) (Client CN "Marc Petit-Huguenin", Issuer "implementers.org" (verified OK)) by implementers.org (Postfix) with ESMTPS id 5C3772091F; Wed, 1 Apr 2015 14:47:24 +0200 (CEST) Message-ID: <551BE8DA.1040502@acm.org> Date: Wed, 01 Apr 2015 06:47:22 -0600 From: Marc Petit-Huguenin User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:31.0) Gecko/20100101 Icedove/31.5.0 MIME-Version: 1.0 To: Justin Uberti References: <20150327075539.26326.49374.idtracker@ietfa.amsl.com> <551A9620.5010405@acm.org> In-Reply-To: Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 7bit Archived-At: Cc: "tram@ietf.org" Subject: Re: [tram] I-D Action: draft-ietf-tram-stunbis-04.txt X-BeenThere: tram@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "Discussing the creation of a Turn Revised And Modernized \(TRAM\) WG, which goal is to consolidate the various initiatives to update TURN and STUN." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 01 Apr 2015 12:47:30 -0000 -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 On 03/31/2015 01:43 PM, Justin Uberti wrote: > Especially for short-term auth, do we need to send the entire 256-bit MAC? > I am concerned that some implementations will be slow to switch to stun-bis > because of the increased size (and thereby bandwidth) needed for > connectivity checks. > > Would it make sense to allow use of a truncated SHA-256 MAC (e.g. 80 bits > or less), similar to how this is done in SRTP? Per my calculations, worst case (Binding response with an IPv4 address family) for using MESSAGE-INTEGRITY-SHA256 instead of MESSAGE-INTEGRITY is a 20% increase in size. > > On Tue, Mar 31, 2015 at 5:42 AM, Marc Petit-Huguenin > wrote: > > Changelog: > > o Remove SCTP. > o Remove DANE. > o s/MESSAGE-INTEGRITY2/MESSAGE-INTEGRITY-SHA256/ > o Remove Salted SHA256 password hash. > o The RTO delay between transactions is removed. > o Make clear that reusing NONCE will trigger a wasted round trip. > > Remaining TODO list: > > 1. Add reference to RFC 5769 (stun vectors). > 2. Add flow diagram for long-term authentication. > 3. Add vectors for SHA256 password hash. > > On 03/27/2015 01:55 AM, internet-drafts@ietf.org wrote: >>>> >>>> A New Internet-Draft is available from the on-line Internet-Drafts > directories. >>>> This draft is a work item of the TURN Revised and Modernized Working > Group of the IETF. >>>> >>>> Title : Session Traversal Utilities for NAT (STUN) >>>> Authors : Marc Petit-Huguenin >>>> Gonzalo Salgueiro >>>> Jonathan Rosenberg >>>> Dan Wing >>>> Rohan Mahy >>>> Philip Matthews >>>> Filename : draft-ietf-tram-stunbis-04.txt >>>> Pages : 55 >>>> Date : 2015-03-27 >>>> >>>> Abstract: >>>> Session Traversal Utilities for NAT (STUN) is a protocol that serves >>>> as a tool for other protocols in dealing with Network Address >>>> Translator (NAT) traversal. It can be used by an endpoint to >>>> determine the IP address and port allocated to it by a NAT. It can >>>> also be used to check connectivity between two endpoints, and as a >>>> keep-alive protocol to maintain NAT bindings. STUN works with many >>>> existing NATs, and does not require any special behavior from them. >>>> >>>> STUN is not a NAT traversal solution by itself. Rather, it is a tool >>>> to be used in the context of a NAT traversal solution. >>>> >>>> This document obsoletes RFC 5389. >>>> >>>> >>>> The IETF datatracker status page for this draft is: >>>> https://datatracker.ietf.org/doc/draft-ietf-tram-stunbis/ >>>> >>>> There's also a htmlized version available at: >>>> http://tools.ietf.org/html/draft-ietf-tram-stunbis-04 >>>> >>>> A diff from the previous version is available at: >>>> http://www.ietf.org/rfcdiff?url2=draft-ietf-tram-stunbis-04 >>>> >>>> >>>> Please note that it may take a couple of minutes from the time of > submission >>>> until the htmlized version and diff are available at tools.ietf.org. >>>> >>>> Internet-Drafts are also available by anonymous FTP at: >>>> ftp://ftp.ietf.org/internet-drafts/ >>>> > - -- Marc Petit-Huguenin Email: marc@petit-huguenin.org Blog: http://blog.marc.petit-huguenin.org Profile: http://www.linkedin.com/in/petithug -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iQIcBAEBCAAGBQJVG+jaAAoJECnERZXWan7EVZEP/1rUib4L8Mtg+H+S7+s6kGRk ZIw+VX2GRig2ITNS7BuPowGxxrCpZoXSPtY6qCGYDEBFlFaLrQ3Tq3XG9ZkOTnnl bRXnz/sAZYR2qKzloW+n4ektevgAaO97Tz6KeL0A+Dnl+8Qw5tKejcvxIyR2g5R2 uhwMB6h7wj3VN1IdndgufDwTQlUxYs4/MHUXCYjETP6gjv+tePHYNd2xvupqU8mo m1q9X+xMFwWK4H2Saa87a7sB2wTa2wYpRefNFZaLpXF30DORiEPQs7kCAGTPTAy/ USgfUXO55VJfcSTGKHmBrDlBCwJmPWUIQTQxRU4T4juTMNjD/hLOYDdlwI5C/NNf 7iXPczXES0brVwkeMLHpsdF6lnkWpB6D+ZQ+EpGbRaJaJl6Sa5M3a4MLwh0QKydl BupZpnLfOVsrcbRTvvbOmGOPLMVH2vJUqxCMfPytqiP8DY1/9b2FxX5cTSbGWKqG yVOtYBXx01vpeStj/zXRJji6krCec6qEl+bXrtuqfaF4WAl4sQaw6Qt073wIrSg1 wT3Xr43OxLnwfQmZsuP0Fkp3Oy7INsMEZD9FHAwDl3AmGi5zDnt4pS4HxI64hl80 K5CCKG+ijVfCXhJtVD85nHAjNrtNMmZn/fjUw6ptyz2JaDPTw7VoEvYMWA+zujNV EmjFDIedX3BMETmhtXLK =RNXa -----END PGP SIGNATURE----- From nobody Wed Apr 1 06:40:39 2015 Return-Path: X-Original-To: tram@ietfa.amsl.com Delivered-To: tram@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E6EB51A911B for ; Wed, 1 Apr 2015 06:40:22 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -14.511 X-Spam-Level: X-Spam-Status: No, score=-14.511 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_HI=-5, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id kj7W40ptnqpO for ; Wed, 1 Apr 2015 06:40:20 -0700 (PDT) Received: from alln-iport-1.cisco.com (alln-iport-1.cisco.com [173.37.142.88]) (using TLSv1 with cipher RC4-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 7092C1A9116 for ; Wed, 1 Apr 2015 06:40:20 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=5343; q=dns/txt; s=iport; t=1427895620; x=1429105220; h=from:to:cc:subject:date:message-id:references: in-reply-to:content-transfer-encoding:mime-version; bh=tNwB1WPjjXV4MjrdkEz/rtpH6zEzC/SqCdnR3qJnXqQ=; b=WW7jBgBRb6dsXLaJpiVveZ4y5q68Jap0/0ZuMbh69rHW5ieACoAA5sdZ WWFMEfAEamEXn+bOzITqb0AD+DsCsVekQFXXZekYXfrOgEanQRfch69c/ hbxOcqjz9mA+AT8a61hotQnB6sQLqWCDd4hlUAo2AGov2dJ5lhdDIXnPg k=; X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: A0CFBwCm9BtV/5ldJa1cgwZSVwUFwxmCMgqFcwKBP0wBAQEBAQF9hBQBAQEDAQEBATc0CwwEAgEIEQQBAQEKDgYJBycLFAkIAgQBDQUIARKIDAgIBc5IAQEBAQEBAQEBAQEBAQEBAQEBAQEBF4spgjiBXhEBHzEHBhKCf4EWBZBjg3KHITqCeI9vIoIBHYFQbwEBgQk5fwEBAQ X-IronPort-AV: E=Sophos;i="5.11,503,1422921600"; d="scan'208";a="137277386" Received: from rcdn-core-2.cisco.com ([173.37.93.153]) by alln-iport-1.cisco.com with ESMTP; 01 Apr 2015 13:40:19 +0000 Received: from xhc-aln-x09.cisco.com (xhc-aln-x09.cisco.com [173.36.12.83]) by rcdn-core-2.cisco.com (8.14.5/8.14.5) with ESMTP id t31DeJV5030651 (version=TLSv1/SSLv3 cipher=AES128-SHA bits=128 verify=FAIL); Wed, 1 Apr 2015 13:40:19 GMT Received: from xmb-rcd-x10.cisco.com ([169.254.15.175]) by xhc-aln-x09.cisco.com ([173.36.12.83]) with mapi id 14.03.0195.001; Wed, 1 Apr 2015 08:40:19 -0500 From: "Tirumaleswar Reddy (tireddy)" To: Marc Petit-Huguenin , Justin Uberti Thread-Topic: [tram] I-D Action: draft-ietf-tram-stunbis-04.txt Thread-Index: AQHQaGNuoZDCdCmZDEWaGyqE4xHEdJ024z0AgAB1uwCAAR4QAP//uQ7Q Date: Wed, 1 Apr 2015 13:40:18 +0000 Message-ID: <913383AAA69FF945B8F946018B75898A411F9B01@xmb-rcd-x10.cisco.com> References: <20150327075539.26326.49374.idtracker@ietfa.amsl.com> <551A9620.5010405@acm.org> <551BE8DA.1040502@acm.org> In-Reply-To: <551BE8DA.1040502@acm.org> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.65.75.237] Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 Archived-At: Cc: "tram@ietf.org" Subject: Re: [tram] I-D Action: draft-ietf-tram-stunbis-04.txt X-BeenThere: tram@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "Discussing the creation of a Turn Revised And Modernized \(TRAM\) WG, which goal is to consolidate the various initiatives to update TURN and STUN." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 01 Apr 2015 13:40:23 -0000 > -----Original Message----- > From: tram [mailto:tram-bounces@ietf.org] On Behalf Of Marc Petit- > Huguenin > Sent: Wednesday, April 01, 2015 6:17 PM > To: Justin Uberti > Cc: tram@ietf.org > Subject: Re: [tram] I-D Action: draft-ietf-tram-stunbis-04.txt >=20 > -----BEGIN PGP SIGNED MESSAGE----- > Hash: SHA256 >=20 > On 03/31/2015 01:43 PM, Justin Uberti wrote: > > Especially for short-term auth, do we need to send the entire 256-bit M= AC? > > I am concerned that some implementations will be slow to switch to stun= - > bis > > because of the increased size (and thereby bandwidth) needed for > > connectivity checks. > > > > Would it make sense to allow use of a truncated SHA-256 MAC (e.g. 80 bi= ts > > or less), similar to how this is done in SRTP ? In practice the maximum truncation for HMAC-SHA2 is 128-bit as discussed in= https://tools.ietf.org/html/rfc4868#section-2.6; DTLS-SRTP http://tools.ie= tf.org/html/rfc5764#section-4.1.2 discusses 80 bit of authentication tag bu= t only for HMAC-SH1. -Tiru >=20 > Per my calculations, worst case (Binding response with an IPv4 address > family) for using MESSAGE-INTEGRITY-SHA256 instead of MESSAGE- > INTEGRITY is a 20% increase in size. >=20 > > > > On Tue, Mar 31, 2015 at 5:42 AM, Marc Petit-Huguenin > > > wrote: > > > > Changelog: > > > > o Remove SCTP. > > o Remove DANE. > > o s/MESSAGE-INTEGRITY2/MESSAGE-INTEGRITY-SHA256/ > > o Remove Salted SHA256 password hash. > > o The RTO delay between transactions is removed. > > o Make clear that reusing NONCE will trigger a wasted round trip. > > > > Remaining TODO list: > > > > 1. Add reference to RFC 5769 (stun vectors). > > 2. Add flow diagram for long-term authentication. > > 3. Add vectors for SHA256 password hash. > > > > On 03/27/2015 01:55 AM, internet-drafts@ietf.org wrote: > >>>> > >>>> A New Internet-Draft is available from the on-line Internet-Drafts > > directories. > >>>> This draft is a work item of the TURN Revised and Modernized Workin= g > > Group of the IETF. > >>>> > >>>> Title : Session Traversal Utilities for NAT (STUN) > >>>> Authors : Marc Petit-Huguenin > >>>> Gonzalo Salgueiro > >>>> Jonathan Rosenberg > >>>> Dan Wing > >>>> Rohan Mahy > >>>> Philip Matthews > >>>> Filename : draft-ietf-tram-stunbis-04.txt > >>>> Pages : 55 > >>>> Date : 2015-03-27 > >>>> > >>>> Abstract: > >>>> Session Traversal Utilities for NAT (STUN) is a protocol that ser= ves > >>>> as a tool for other protocols in dealing with Network Address > >>>> Translator (NAT) traversal. It can be used by an endpoint to > >>>> determine the IP address and port allocated to it by a NAT. It c= an > >>>> also be used to check connectivity between two endpoints, and as = a > >>>> keep-alive protocol to maintain NAT bindings. STUN works with > many > >>>> existing NATs, and does not require any special behavior from the= m. > >>>> > >>>> STUN is not a NAT traversal solution by itself. Rather, it is a = tool > >>>> to be used in the context of a NAT traversal solution. > >>>> > >>>> This document obsoletes RFC 5389. > >>>> > >>>> > >>>> The IETF datatracker status page for this draft is: > >>>> https://datatracker.ietf.org/doc/draft-ietf-tram-stunbis/ > >>>> > >>>> There's also a htmlized version available at: > >>>> http://tools.ietf.org/html/draft-ietf-tram-stunbis-04 > >>>> > >>>> A diff from the previous version is available at: > >>>> http://www.ietf.org/rfcdiff?url2=3Ddraft-ietf-tram-stunbis-04 > >>>> > >>>> > >>>> Please note that it may take a couple of minutes from the time of > > submission > >>>> until the htmlized version and diff are available at tools.ietf.org. > >>>> > >>>> Internet-Drafts are also available by anonymous FTP at: > >>>> ftp://ftp.ietf.org/internet-drafts/ > >>>> > > >=20 > - -- > Marc Petit-Huguenin > Email: marc@petit-huguenin.org > Blog: http://blog.marc.petit-huguenin.org > Profile: http://www.linkedin.com/in/petithug > -----BEGIN PGP SIGNATURE----- > Version: GnuPG v1 >=20 > iQIcBAEBCAAGBQJVG+jaAAoJECnERZXWan7EVZEP/1rUib4L8Mtg+H+S7+s6kGR > k > ZIw+VX2GRig2ITNS7BuPowGxxrCpZoXSPtY6qCGYDEBFlFaLrQ3Tq3XG9ZkOTnnl > bRXnz/sAZYR2qKzloW+n4ektevgAaO97Tz6KeL0A+Dnl+8Qw5tKejcvxIyR2g5R2 > uhwMB6h7wj3VN1IdndgufDwTQlUxYs4/MHUXCYjETP6gjv+tePHYNd2xvupqU8 > mo > m1q9X+xMFwWK4H2Saa87a7sB2wTa2wYpRefNFZaLpXF30DORiEPQs7kCAGTPT > Ay/ > USgfUXO55VJfcSTGKHmBrDlBCwJmPWUIQTQxRU4T4juTMNjD/hLOYDdlwI5C/N > Nf > 7iXPczXES0brVwkeMLHpsdF6lnkWpB6D+ZQ+EpGbRaJaJl6Sa5M3a4MLwh0QKy > dl > BupZpnLfOVsrcbRTvvbOmGOPLMVH2vJUqxCMfPytqiP8DY1/9b2FxX5cTSbGWK > qG > yVOtYBXx01vpeStj/zXRJji6krCec6qEl+bXrtuqfaF4WAl4sQaw6Qt073wIrSg1 > wT3Xr43OxLnwfQmZsuP0Fkp3Oy7INsMEZD9FHAwDl3AmGi5zDnt4pS4HxI64hl8 > 0 > K5CCKG+ijVfCXhJtVD85nHAjNrtNMmZn/fjUw6ptyz2JaDPTw7VoEvYMWA+zujN > V > EmjFDIedX3BMETmhtXLK > =3DRNXa > -----END PGP SIGNATURE----- >=20 > _______________________________________________ > tram mailing list > tram@ietf.org > https://www.ietf.org/mailman/listinfo/tram From nobody Wed Apr 1 09:52:19 2015 Return-Path: X-Original-To: tram@ietfa.amsl.com Delivered-To: tram@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 06A171AD28D for ; Wed, 1 Apr 2015 09:52:14 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -14.511 X-Spam-Level: X-Spam-Status: No, score=-14.511 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_HI=-5, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id xk69XdMIA4LF for ; Wed, 1 Apr 2015 09:52:12 -0700 (PDT) Received: from rcdn-iport-8.cisco.com (rcdn-iport-8.cisco.com [173.37.86.79]) (using TLSv1 with cipher RC4-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id C9A4B1AD367 for ; Wed, 1 Apr 2015 09:52:11 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=4410; q=dns/txt; s=iport; t=1427907131; x=1429116731; h=from:to:subject:date:message-id:references:in-reply-to: content-transfer-encoding:mime-version; bh=aOywR82VF1xy8l6XVnlRUMncBTSGO5gdOsshXnaoMkY=; b=NGyWPftGL0QLe3z27C4JIGMSXPTvGJP2kBM90h7mT+roLZ1y6gh7WXDU HNdog5VSYfMF79FUiAwVGsZ7czuKXiQRdgEQpdIyZsPfr+bg8VpL75mvn MmRj5qFx19qS6uzEkYoKXmylT/fgyi/SnoSMeDSfxBViDLsSqleLb1rae c=; X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: A0AxBgAXIRxV/5JdJa1cgwZSVwUFwxqCMgqFcwKBQkwBAQEBAQF9hBQBAQEDAQEBATc0EAcEAgEIEQQBAQEKDgYJBycLFAkIAgQBEggBEogMCAgFzm0BAQEBAQEBAQEBAQEBAQEBAQEBAQEXiymCOIFeEQEGGjgGEoJ/gRYFkGODcochOoJ4j3EiggEdgVBvAYEKOX8BAQE X-IronPort-AV: E=Sophos;i="5.11,504,1422921600"; d="scan'208";a="595136" Received: from rcdn-core-10.cisco.com ([173.37.93.146]) by rcdn-iport-8.cisco.com with ESMTP; 01 Apr 2015 16:52:11 +0000 Received: from xhc-rcd-x12.cisco.com (xhc-rcd-x12.cisco.com [173.37.183.86]) by rcdn-core-10.cisco.com (8.14.5/8.14.5) with ESMTP id t31GqA6d032276 (version=TLSv1/SSLv3 cipher=AES128-SHA bits=128 verify=FAIL); Wed, 1 Apr 2015 16:52:10 GMT Received: from xmb-rcd-x10.cisco.com ([169.254.15.175]) by xhc-rcd-x12.cisco.com ([173.37.183.86]) with mapi id 14.03.0195.001; Wed, 1 Apr 2015 11:52:10 -0500 From: "Tirumaleswar Reddy (tireddy)" To: Marc Petit-Huguenin , "tram@ietf.org" Thread-Topic: [tram] I-D Action: draft-ietf-tram-stunbis-04.txt Thread-Index: AQHQaGNuoZDCdCmZDEWaGyqE4xHEdJ024z0AgAGBvuA= Date: Wed, 1 Apr 2015 16:52:10 +0000 Message-ID: <913383AAA69FF945B8F946018B75898A411F9D69@xmb-rcd-x10.cisco.com> References: <20150327075539.26326.49374.idtracker@ietfa.amsl.com> <551A9620.5010405@acm.org> In-Reply-To: <551A9620.5010405@acm.org> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.65.75.237] Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 Archived-At: Subject: Re: [tram] I-D Action: draft-ietf-tram-stunbis-04.txt X-BeenThere: tram@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "Discussing the creation of a Turn Revised And Modernized \(TRAM\) WG, which goal is to consolidate the various initiatives to update TURN and STUN." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 01 Apr 2015 16:52:14 -0000 For the long-term credential mechanism it's not clear how the client determ= ines to pick MI or MI2. I thought the server in 401 error response conveys = that it supports MI or MI2 or both and the client picks one of the algorith= ms supported by the server for message integrity of subsequent requests.=20 -Tiru > -----Original Message----- > From: tram [mailto:tram-bounces@ietf.org] On Behalf Of Marc Petit- > Huguenin > Sent: Tuesday, March 31, 2015 6:12 PM > To: tram@ietf.org > Subject: Re: [tram] I-D Action: draft-ietf-tram-stunbis-04.txt >=20 > -----BEGIN PGP SIGNED MESSAGE----- > Hash: SHA256 >=20 > Changelog: >=20 > o Remove SCTP. > o Remove DANE. > o s/MESSAGE-INTEGRITY2/MESSAGE-INTEGRITY-SHA256/ > o Remove Salted SHA256 password hash. > o The RTO delay between transactions is removed. > o Make clear that reusing NONCE will trigger a wasted round trip. >=20 > Remaining TODO list: >=20 > 1. Add reference to RFC 5769 (stun vectors). > 2. Add flow diagram for long-term authentication. > 3. Add vectors for SHA256 password hash. >=20 > On 03/27/2015 01:55 AM, internet-drafts@ietf.org wrote: > > > > A New Internet-Draft is available from the on-line Internet-Drafts > directories. > > This draft is a work item of the TURN Revised and Modernized Working > Group of the IETF. > > > > Title : Session Traversal Utilities for NAT (STUN) > > Authors : Marc Petit-Huguenin > > Gonzalo Salgueiro > > Jonathan Rosenberg > > Dan Wing > > Rohan Mahy > > Philip Matthews > > Filename : draft-ietf-tram-stunbis-04.txt > > Pages : 55 > > Date : 2015-03-27 > > > > Abstract: > > Session Traversal Utilities for NAT (STUN) is a protocol that serves > > as a tool for other protocols in dealing with Network Address > > Translator (NAT) traversal. It can be used by an endpoint to > > determine the IP address and port allocated to it by a NAT. It can > > also be used to check connectivity between two endpoints, and as a > > keep-alive protocol to maintain NAT bindings. STUN works with many > > existing NATs, and does not require any special behavior from them. > > > > STUN is not a NAT traversal solution by itself. Rather, it is a too= l > > to be used in the context of a NAT traversal solution. > > > > This document obsoletes RFC 5389. > > > > > > The IETF datatracker status page for this draft is: > > https://datatracker.ietf.org/doc/draft-ietf-tram-stunbis/ > > > > There's also a htmlized version available at: > > http://tools.ietf.org/html/draft-ietf-tram-stunbis-04 > > > > A diff from the previous version is available at: > > http://www.ietf.org/rfcdiff?url2=3Ddraft-ietf-tram-stunbis-04 > > > > > > Please note that it may take a couple of minutes from the time of > > submission until the htmlized version and diff are available at > tools.ietf.org. > > > > Internet-Drafts are also available by anonymous FTP at: > > ftp://ftp.ietf.org/internet-drafts/ > > >=20 > - -- > Marc Petit-Huguenin > Email: marc@petit-huguenin.org > Blog: http://blog.marc.petit-huguenin.org > Profile: http://www.linkedin.com/in/petithug > -----BEGIN PGP SIGNATURE----- > Version: GnuPG v1 >=20 > iQIcBAEBCAAGBQJVGpYgAAoJECnERZXWan7EQxUQAJb3cerMgz+k34+9ms3eX > wVd > vaLxOY4jla7j9Gf4O9Xmyd0wKo3VgG9xnfeil95Y/hBMkoIgiwC1iRMEJT0hH9jO > fe4ekjjuO81wuPyiGOJA7CvsM+dKqc9Y3v+KE43SbYkgoFS12U2m/+0u+emdT4lJ > olbAnJhl3s6+XCH1HqaSd1S7LGl3f2y1eHPLxkvpLQXZFyHZYJo1JNt0yKR/UZWu > JJauXVMMqlVMjauAiY7eWOlNOpM15a7+YZ7ShED/eTForBwWyOMfcqZ+kk1at > 8Fi > b4XfN+bHOvotoxgJ9myZZvlkMZwmne/XGLkr9HIQgJGMYlbattLpAEoaDApBnxK > x > HYQhl9VECis4TGxUWPSvHgoIP6tHxpomSJ1eD0XDzqqad1ZWqK8OsTy8NZdLgK > 1n > H0xaz5QVPaB8k2uVvcmGwzKdsIfUbkFQudTjV8FuuSobsh7QeLL50o8oFdABW/ > 1g > 201Z7aPmYsseti4JGKpCO5j9VNxjNTxbB3XaAketkRA8afHAUuR8JMFUFLi4Rinv > MJLaOaKciFfWrBo1FqqoGCqoy7dC8+UN3LFx6Nn9ygpNZt/n8cVNVniRk4hYkbi0 > XOmIzvWtLURupJSr/Wo29K0gsmKJq2MWOK5TFxEyer9i0fArH5W7H8ueirtvWw > gc > vH8+lFtAOQSjokR/eUhT > =3D/KmB > -----END PGP SIGNATURE----- >=20 > _______________________________________________ > tram mailing list > tram@ietf.org > https://www.ietf.org/mailman/listinfo/tram From nobody Wed Apr 1 09:54:27 2015 Return-Path: X-Original-To: tram@ietfa.amsl.com Delivered-To: tram@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 45D7B1AD36F; Wed, 1 Apr 2015 09:54:19 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -101.9 X-Spam-Level: X-Spam-Status: No, score=-101.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, USER_IN_WHITELIST=-100] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id swjXblgaVXRX; Wed, 1 Apr 2015 09:54:17 -0700 (PDT) Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id BE2271AD357; Wed, 1 Apr 2015 09:54:14 -0700 (PDT) Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit From: The IESG To: "IETF-Announce" X-Test-IDTracker: no X-IETF-IDTracker: 5.13.0 Auto-Submitted: auto-generated Precedence: bulk Sender: Message-ID: <20150401165414.30786.22903.idtracker@ietfa.amsl.com> Date: Wed, 01 Apr 2015 09:54:14 -0700 Archived-At: Cc: tram@ietf.org Subject: [tram] Last Call: (An Origin Attribute for the STUN Protocol) to Proposed Standard X-BeenThere: tram@ietf.org X-Mailman-Version: 2.1.15 Reply-To: ietf@ietf.org List-Id: "Discussing the creation of a Turn Revised And Modernized \(TRAM\) WG, which goal is to consolidate the various initiatives to update TURN and STUN." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 01 Apr 2015 16:54:19 -0000 The IESG has received a request from the TURN Revised and Modernized WG (tram) to consider the following document: - 'An Origin Attribute for the STUN Protocol' as Proposed Standard The IESG plans to make a decision in the next few weeks, and solicits final comments on this action. Please send substantive comments to the ietf@ietf.org mailing lists by 2015-04-15. Exceptionally, comments may be sent to iesg@ietf.org instead. In either case, please retain the beginning of the Subject line to allow automated sorting. Please note: this is a second Last Call. An IPR declaration regarding the individual draft adopted as this draft was made in 2014, but a second IPR declaration regarding the working group draft listed the draft name in the wrong field of the disclosure form, preventing the second IPR disclosure from being linked to the working group draft in the datatracker. This wasn't discovered until after the first Last Call ended, After consultation with the working group chairs, we are issuing a second Last Call to ensure that if the IPR disclosure changes anyone's evaluation of the request for publication as a Proposed Standard, that will be taken into account during IESG Evaluation. Abstract STUN, or Session Traversal Utilities for NAT, is a protocol used to assist other protocols traverse Network Address Translators or NATs. This specification defines an ORIGIN attribute for STUN that can be used in similar ways to the HTTP header field of the same name. WebRTC browsers utilizing STUN and TURN would include this attribute which would provide servers with additional information about the STUN and TURN requests they receive. This specification defines the usage of the STUN ORIGIN attribute for web, SIP, and XMPP contexts. The file can be obtained via http://datatracker.ietf.org/doc/draft-ietf-tram-stun-origin/ IESG discussion can be tracked via http://datatracker.ietf.org/doc/draft-ietf-tram-stun-origin/ballot/ The following IPR Declarations may be related to this I-D: http://datatracker.ietf.org/ipr/2555/ http://datatracker.ietf.org/ipr/2543/ From nobody Wed Apr 1 12:58:48 2015 Return-Path: X-Original-To: tram@ietfa.amsl.com Delivered-To: tram@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 9D5EA1A8825 for ; Wed, 1 Apr 2015 12:58:47 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.388 X-Spam-Level: X-Spam-Status: No, score=-1.388 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FM_FORGED_GMAIL=0.622, HTML_MESSAGE=0.001, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01] autolearn=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id SxzpONPflyRK for ; Wed, 1 Apr 2015 12:58:45 -0700 (PDT) Received: from mail-ig0-x22c.google.com (mail-ig0-x22c.google.com [IPv6:2607:f8b0:4001:c05::22c]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 592DD1A8702 for ; Wed, 1 Apr 2015 12:58:45 -0700 (PDT) Received: by igcxg11 with SMTP id xg11so56317793igc.0 for ; Wed, 01 Apr 2015 12:58:44 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=20120113; h=mime-version:in-reply-to:references:from:date:message-id:subject:to :cc:content-type; bh=n+NJ/YgzZ4jb4m85hBpD4hQBZPX6fAQUFhwPddMT69Y=; b=VguMJFb9EJFK+icJXcBERFW3n/+md2a8LMcWBMzU3ksfnvGr8pV2qMhIiEB52w1kXT WT4gtuWvd7+moEpkabk8cyYTG7O601AJSVu18ollE8NNgxDObfeaAjP9hiakI5aLKFTl dbfl7ILNJAni4nOB0kEmO3wzCUi/xWZYOdOPgXGitezzJrTrPyQ3SShkfgo2TqUC804s Pq3TwuHy0e+VkcP1ag2Vuyc5RlKfyPcnhl4oa+OeqHANIk7IP+gFL/jSIbQcptH9Rchl cANSMHcupKo5z3DbfdZhrTMYX9lBRFpXqqs37Hf73HxoYa5ioYQiNdvlF9WwhcCfioQJ ihlw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:mime-version:in-reply-to:references:from:date :message-id:subject:to:cc:content-type; bh=n+NJ/YgzZ4jb4m85hBpD4hQBZPX6fAQUFhwPddMT69Y=; b=ZgOxAyZbPjFv/SZtSXr/IgEnbqW3412UZIPKfWGFMZqisjaBUMZfFmNCRko4jmQjh3 82ojKbHSMKdCIXus0t4vx2JQSaN3WYAneftoBm2/6VizCHUgeI1+Zd7eMTMOoqfNMM8n kHhlJN1FuR+YxdkUE8i9h7OIwYph5PU5YuLpLMPFoWrjyKWn0pxQrwwFO16168qXZfsz Vdrz05vzpmOOpnVHDq4Pr36QgdEquCSZDCJRtHd81zkCQtZUX6S5R4d7lPkmZHEqsdyf yXboWK1iu4rYMdVD5XGeSe7SYjf5e1gmo75xkp+gmta3HvMu++T21OTTsvUXOyq5bucV jhKQ== X-Gm-Message-State: ALoCoQnWdm3NO6Q1plW5BjfUcaJISmbzpOndaYGRH9wbLFXDEdBQCVHQ43SynxUG0b77ExAfLrR4 X-Received: by 10.50.43.138 with SMTP id w10mr14687161igl.19.1427918324574; Wed, 01 Apr 2015 12:58:44 -0700 (PDT) MIME-Version: 1.0 Received: by 10.64.64.42 with HTTP; Wed, 1 Apr 2015 12:58:24 -0700 (PDT) In-Reply-To: <551BE8DA.1040502@acm.org> References: <20150327075539.26326.49374.idtracker@ietfa.amsl.com> <551A9620.5010405@acm.org> <551BE8DA.1040502@acm.org> From: Justin Uberti Date: Wed, 1 Apr 2015 12:58:24 -0700 Message-ID: To: Marc Petit-Huguenin Content-Type: multipart/alternative; boundary=089e01176c7f815d230512af2411 Archived-At: Cc: "tram@ietf.org" Subject: Re: [tram] I-D Action: draft-ietf-tram-stunbis-04.txt X-BeenThere: tram@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "Discussing the creation of a Turn Revised And Modernized \(TRAM\) WG, which goal is to consolidate the various initiatives to update TURN and STUN." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 01 Apr 2015 19:58:47 -0000 --089e01176c7f815d230512af2411 Content-Type: text/plain; charset=UTF-8 20% seems like a nontrivial increase given that we aren't adding any new functionality. Truncating to 128-bit (16 bytes) would at least prevent any blowup over the existing M-I attribute. On Wed, Apr 1, 2015 at 5:47 AM, Marc Petit-Huguenin wrote: > -----BEGIN PGP SIGNED MESSAGE----- > Hash: SHA256 > > On 03/31/2015 01:43 PM, Justin Uberti wrote: > > Especially for short-term auth, do we need to send the entire 256-bit > MAC? > > I am concerned that some implementations will be slow to switch to > stun-bis > > because of the increased size (and thereby bandwidth) needed for > > connectivity checks. > > > > Would it make sense to allow use of a truncated SHA-256 MAC (e.g. 80 bits > > or less), similar to how this is done in SRTP? > > Per my calculations, worst case (Binding response with an IPv4 address > family) for using MESSAGE-INTEGRITY-SHA256 instead of MESSAGE-INTEGRITY is > a 20% increase in size. > > > > > On Tue, Mar 31, 2015 at 5:42 AM, Marc Petit-Huguenin > > wrote: > > > > Changelog: > > > > o Remove SCTP. > > o Remove DANE. > > o s/MESSAGE-INTEGRITY2/MESSAGE-INTEGRITY-SHA256/ > > o Remove Salted SHA256 password hash. > > o The RTO delay between transactions is removed. > > o Make clear that reusing NONCE will trigger a wasted round trip. > > > > Remaining TODO list: > > > > 1. Add reference to RFC 5769 (stun vectors). > > 2. Add flow diagram for long-term authentication. > > 3. Add vectors for SHA256 password hash. > > > > On 03/27/2015 01:55 AM, internet-drafts@ietf.org wrote: > >>>> > >>>> A New Internet-Draft is available from the on-line Internet-Drafts > > directories. > >>>> This draft is a work item of the TURN Revised and Modernized Working > > Group of the IETF. > >>>> > >>>> Title : Session Traversal Utilities for NAT (STUN) > >>>> Authors : Marc Petit-Huguenin > >>>> Gonzalo Salgueiro > >>>> Jonathan Rosenberg > >>>> Dan Wing > >>>> Rohan Mahy > >>>> Philip Matthews > >>>> Filename : draft-ietf-tram-stunbis-04.txt > >>>> Pages : 55 > >>>> Date : 2015-03-27 > >>>> > >>>> Abstract: > >>>> Session Traversal Utilities for NAT (STUN) is a protocol that > serves > >>>> as a tool for other protocols in dealing with Network Address > >>>> Translator (NAT) traversal. It can be used by an endpoint to > >>>> determine the IP address and port allocated to it by a NAT. It can > >>>> also be used to check connectivity between two endpoints, and as a > >>>> keep-alive protocol to maintain NAT bindings. STUN works with many > >>>> existing NATs, and does not require any special behavior from them. > >>>> > >>>> STUN is not a NAT traversal solution by itself. Rather, it is a > tool > >>>> to be used in the context of a NAT traversal solution. > >>>> > >>>> This document obsoletes RFC 5389. > >>>> > >>>> > >>>> The IETF datatracker status page for this draft is: > >>>> https://datatracker.ietf.org/doc/draft-ietf-tram-stunbis/ > >>>> > >>>> There's also a htmlized version available at: > >>>> http://tools.ietf.org/html/draft-ietf-tram-stunbis-04 > >>>> > >>>> A diff from the previous version is available at: > >>>> http://www.ietf.org/rfcdiff?url2=draft-ietf-tram-stunbis-04 > >>>> > >>>> > >>>> Please note that it may take a couple of minutes from the time of > > submission > >>>> until the htmlized version and diff are available at tools.ietf.org. > >>>> > >>>> Internet-Drafts are also available by anonymous FTP at: > >>>> ftp://ftp.ietf.org/internet-drafts/ > >>>> > > > > - -- > Marc Petit-Huguenin > Email: marc@petit-huguenin.org > Blog: http://blog.marc.petit-huguenin.org > Profile: http://www.linkedin.com/in/petithug > -----BEGIN PGP SIGNATURE----- > Version: GnuPG v1 > > iQIcBAEBCAAGBQJVG+jaAAoJECnERZXWan7EVZEP/1rUib4L8Mtg+H+S7+s6kGRk > ZIw+VX2GRig2ITNS7BuPowGxxrCpZoXSPtY6qCGYDEBFlFaLrQ3Tq3XG9ZkOTnnl > bRXnz/sAZYR2qKzloW+n4ektevgAaO97Tz6KeL0A+Dnl+8Qw5tKejcvxIyR2g5R2 > uhwMB6h7wj3VN1IdndgufDwTQlUxYs4/MHUXCYjETP6gjv+tePHYNd2xvupqU8mo > m1q9X+xMFwWK4H2Saa87a7sB2wTa2wYpRefNFZaLpXF30DORiEPQs7kCAGTPTAy/ > USgfUXO55VJfcSTGKHmBrDlBCwJmPWUIQTQxRU4T4juTMNjD/hLOYDdlwI5C/NNf > 7iXPczXES0brVwkeMLHpsdF6lnkWpB6D+ZQ+EpGbRaJaJl6Sa5M3a4MLwh0QKydl > BupZpnLfOVsrcbRTvvbOmGOPLMVH2vJUqxCMfPytqiP8DY1/9b2FxX5cTSbGWKqG > yVOtYBXx01vpeStj/zXRJji6krCec6qEl+bXrtuqfaF4WAl4sQaw6Qt073wIrSg1 > wT3Xr43OxLnwfQmZsuP0Fkp3Oy7INsMEZD9FHAwDl3AmGi5zDnt4pS4HxI64hl80 > K5CCKG+ijVfCXhJtVD85nHAjNrtNMmZn/fjUw6ptyz2JaDPTw7VoEvYMWA+zujNV > EmjFDIedX3BMETmhtXLK > =RNXa > -----END PGP SIGNATURE----- > --089e01176c7f815d230512af2411 Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: quoted-printable
20% seems like a nontrivial increase given that we aren= 9;t adding any new functionality.

Truncating to 128-bit = (16 bytes) would at least prevent any blowup over the existing M-I attribut= e.

On = Wed, Apr 1, 2015 at 5:47 AM, Marc Petit-Huguenin <petithug@acm.org><= /span> wrote:
-----BEGIN= PGP SIGNED MESSAGE-----
Hash: SHA256

On 03/31/2015 01:43 PM, Justin Uberti wrote:
> Especially for short-term auth, do we need to send the entire 256-bit = MAC?
> I am concerned that some implementations will be slow to switch to stu= n-bis
> because of the increased size (and thereby bandwidth) needed for
> connectivity checks.
>
> Would it make sense to allow use of a truncated SHA-256 MAC (e.g. 80 b= its
> or less), similar to how this is done in SRTP?

Per my calculations, worst case (Binding response with an IPv4 addre= ss family) for using MESSAGE-INTEGRITY-SHA256 instead of MESSAGE-INTEGRITY = is a 20% increase in size.

>
> On Tue, Mar 31, 2015 at 5:42 AM, Marc Petit-Huguenin <petithug@acm.org>
> wrote:
>
> Changelog:
>
> o=C2=A0 Remove SCTP.
> o=C2=A0 Remove DANE.
> o=C2=A0 s/MESSAGE-INTEGRITY2/MESSAGE-INTEGRITY-SHA256/
> o=C2=A0 Remove Salted SHA256 password hash.
> o=C2=A0 The RTO delay between transactions is removed.
> o=C2=A0 Make clear that reusing NONCE will trigger a wasted round trip= .
>
> Remaining TODO list:
>
> 1.=C2=A0 Add reference to RFC 5769 (stun vectors).
> 2.=C2=A0 Add flow diagram for long-term authentication.
> 3.=C2=A0 Add vectors for SHA256 password hash.
>
> On 03/27/2015 01:55 AM, in= ternet-drafts@ietf.org wrote:
>>>>
>>>> A New Internet-Draft is available from the on-line Interne= t-Drafts
> directories.
>>>>=C2=A0 This draft is a work item of the TURN Revised and Mo= dernized Working
> Group of the IETF.
>>>>
>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0Title=C2=A0 =C2=A0 =C2=A0= =C2=A0 =C2=A0 =C2=A0: Session Traversal Utilities for NAT (STUN)
>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0Authors=C2=A0 =C2=A0 =C2= =A0 =C2=A0 =C2=A0: Marc Petit-Huguenin
>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2= =A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0Gonzalo Salgueiro
>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2= =A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0Jonathan Rosenberg
>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2= =A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0Dan Wing
>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2= =A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0Rohan Mahy
>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2= =A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0Philip Matthews
>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0Filename=C2=A0 =C2=A0 =C2=A0 =C2= =A0 : draft-ietf-tram-stunbis-04.txt
>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0Pages=C2=A0 =C2=A0 =C2=A0 =C2=A0= =C2=A0 =C2=A0: 55
>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0Date=C2=A0 =C2=A0 =C2=A0 =C2=A0 = =C2=A0 =C2=A0 : 2015-03-27
>>>>
>>>> Abstract:
>>>>=C2=A0 =C2=A0 Session Traversal Utilities for NAT (STUN) is= a protocol that serves
>>>>=C2=A0 =C2=A0 as a tool for other protocols in dealing with= Network Address
>>>>=C2=A0 =C2=A0 Translator (NAT) traversal.=C2=A0 It can be u= sed by an endpoint to
>>>>=C2=A0 =C2=A0 determine the IP address and port allocated t= o it by a NAT.=C2=A0 It can
>>>>=C2=A0 =C2=A0 also be used to check connectivity between tw= o endpoints, and as a
>>>>=C2=A0 =C2=A0 keep-alive protocol to maintain NAT bindings.= =C2=A0 STUN works with many
>>>>=C2=A0 =C2=A0 existing NATs, and does not require any speci= al behavior from them.
>>>>
>>>>=C2=A0 =C2=A0 STUN is not a NAT traversal solution by itsel= f.=C2=A0 Rather, it is a tool
>>>>=C2=A0 =C2=A0 to be used in the context of a NAT traversal = solution.
>>>>
>>>>=C2=A0 =C2=A0 This document obsoletes RFC 5389.
>>>>
>>>>
>>>> The IETF datatracker status page for this draft is:
>>>> https://datatracker.ietf.org/doc/draft-ietf-t= ram-stunbis/
>>>>
>>>> There's also a htmlized version available at:
>>>> http://tools.ietf.org/html/draft-ietf-tram-stunbi= s-04
>>>>
>>>> A diff from the previous version is available at:
>>>> http://www.ietf.org/rfcdiff?url2=3Ddraft-= ietf-tram-stunbis-04
>>>>
>>>>
>>>> Please note that it may take a couple of minutes from the = time of
> submission
>>>> until the htmlized version and diff are available at tools.ietf.org.
>>>>
>>>> Internet-Drafts are also available by anonymous FTP at: >>>> ftp://ftp.ietf.org/internet-drafts/
>>>>
>

- --
Marc Petit-Huguenin
Email: marc@petit-huguenin.org
Blog: htt= p://blog.marc.petit-huguenin.org
Profile: = http://www.linkedin.com/in/petithug
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1

iQIcBAEBCAAGBQJVG+jaAAoJECnERZXWan7EVZEP/1rUib4L8Mtg+H+S7+s6kGR= k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=3DRNXa
-----END PGP SIGNATURE-----

--089e01176c7f815d230512af2411-- From nobody Wed Apr 1 13:03:05 2015 Return-Path: X-Original-To: tram@ietfa.amsl.com Delivered-To: tram@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 28D531A8AF8 for ; Wed, 1 Apr 2015 13:03:04 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.236 X-Spam-Level: X-Spam-Status: No, score=-1.236 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, SPF_HELO_PASS=-0.001, SPF_SOFTFAIL=0.665] autolearn=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id tH00n0gMAu49 for ; Wed, 1 Apr 2015 13:02:58 -0700 (PDT) Received: from implementers.org (implementers.org [IPv6:2604:3400:dc1:41:216:3eff:fe5b:8240]) by ietfa.amsl.com (Postfix) with ESMTP id E54571A9058 for ; Wed, 1 Apr 2015 13:02:53 -0700 (PDT) Received: from [IPv6:2602:43:2da:6400:784a:60a:2f9a:a17d] (unknown [IPv6:2602:43:2da:6400:784a:60a:2f9a:a17d]) (using TLSv1 with cipher DHE-RSA-AES128-SHA (128/128 bits)) (Client CN "Marc Petit-Huguenin", Issuer "implementers.org" (verified OK)) by implementers.org (Postfix) with ESMTPS id 9E20A2091F; Wed, 1 Apr 2015 22:02:52 +0200 (CEST) Message-ID: <551C4EEA.3080505@acm.org> Date: Wed, 01 Apr 2015 14:02:50 -0600 From: Marc Petit-Huguenin User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:31.0) Gecko/20100101 Icedove/31.5.0 MIME-Version: 1.0 To: "Tirumaleswar Reddy (tireddy)" , "tram@ietf.org" References: <20150327075539.26326.49374.idtracker@ietfa.amsl.com> <551A9620.5010405@acm.org> <913383AAA69FF945B8F946018B75898A411F9D69@xmb-rcd-x10.cisco.com> In-Reply-To: <913383AAA69FF945B8F946018B75898A411F9D69@xmb-rcd-x10.cisco.com> Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 8bit Archived-At: Subject: Re: [tram] I-D Action: draft-ietf-tram-stunbis-04.txt X-BeenThere: tram@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "Discussing the creation of a Turn Revised And Modernized \(TRAM\) WG, which goal is to consolidate the various initiatives to update TURN and STUN." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 01 Apr 2015 20:03:04 -0000 -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 On 04/01/2015 10:52 AM, Tirumaleswar Reddy (tireddy) wrote: > For the long-term credential mechanism it's not clear how the client determines to pick MI or MI2. I thought the server in 401 error response conveys that it supports MI or MI2 or both and the client picks one of the algorithms supported by the server for message integrity of subsequent requests. That's negotiation, and we do not do negotiation for the HMAC. A stunbis client sends both MI and MI256 (fka MI2), in that order. A stunbis server responds with MI256, RFC 5389 servers responds with MI. Subsequent requests uses either MI or MI256 depending on the response. Since -04 a client may know beforehand that the server supports MI or MI256, in which case it can directly use either of them (that's for short term authentication where a to-be-defined SDP/ICE option may permit to pass this information). stun-ter will deprecate MI. > > -Tiru > >> -----Original Message----- >> From: tram [mailto:tram-bounces@ietf.org] On Behalf Of Marc Petit- >> Huguenin >> Sent: Tuesday, March 31, 2015 6:12 PM >> To: tram@ietf.org >> Subject: Re: [tram] I-D Action: draft-ietf-tram-stunbis-04.txt >> > Changelog: > > o Remove SCTP. > o Remove DANE. > o s/MESSAGE-INTEGRITY2/MESSAGE-INTEGRITY-SHA256/ > o Remove Salted SHA256 password hash. > o The RTO delay between transactions is removed. > o Make clear that reusing NONCE will trigger a wasted round trip. > > Remaining TODO list: > > 1. Add reference to RFC 5769 (stun vectors). > 2. Add flow diagram for long-term authentication. > 3. Add vectors for SHA256 password hash. > > On 03/27/2015 01:55 AM, internet-drafts@ietf.org wrote: >>>> >>>> A New Internet-Draft is available from the on-line Internet-Drafts > directories. >>>> This draft is a work item of the TURN Revised and Modernized Working > Group of the IETF. >>>> >>>> Title : Session Traversal Utilities for NAT (STUN) >>>> Authors : Marc Petit-Huguenin >>>> Gonzalo Salgueiro >>>> Jonathan Rosenberg >>>> Dan Wing >>>> Rohan Mahy >>>> Philip Matthews >>>> Filename : draft-ietf-tram-stunbis-04.txt >>>> Pages : 55 >>>> Date : 2015-03-27 >>>> >>>> Abstract: >>>> Session Traversal Utilities for NAT (STUN) is a protocol that serves >>>> as a tool for other protocols in dealing with Network Address >>>> Translator (NAT) traversal. It can be used by an endpoint to >>>> determine the IP address and port allocated to it by a NAT. It can >>>> also be used to check connectivity between two endpoints, and as a >>>> keep-alive protocol to maintain NAT bindings. STUN works with many >>>> existing NATs, and does not require any special behavior from them. >>>> >>>> STUN is not a NAT traversal solution by itself. Rather, it is a tool >>>> to be used in the context of a NAT traversal solution. >>>> >>>> This document obsoletes RFC 5389. >>>> >>>> >>>> The IETF datatracker status page for this draft is: >>>> https://datatracker.ietf.org/doc/draft-ietf-tram-stunbis/ >>>> >>>> There's also a htmlized version available at: >>>> http://tools.ietf.org/html/draft-ietf-tram-stunbis-04 >>>> >>>> A diff from the previous version is available at: >>>> http://www.ietf.org/rfcdiff?url2=draft-ietf-tram-stunbis-04 >>>> >>>> >>>> Please note that it may take a couple of minutes from the time of >>>> submission until the htmlized version and diff are available at > tools.ietf.org. >>>> >>>> Internet-Drafts are also available by anonymous FTP at: >>>> ftp://ftp.ietf.org/internet-drafts/ >>>> > >> >> _______________________________________________ >> tram mailing list >> tram@ietf.org >> https://www.ietf.org/mailman/listinfo/tram > - -- Marc Petit-Huguenin Email: marc@petit-huguenin.org Blog: http://blog.marc.petit-huguenin.org Profile: http://www.linkedin.com/in/petithug -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iQIcBAEBCAAGBQJVHE7qAAoJECnERZXWan7EMIwP/R0PnKE4l2dd+3y1w7P7B7x0 S7mHCjkTt7SIFt6oR1DaFY9XxOCdO9L11NvZATfwV1OF3iILnbzI3k3wZpTPbPhX onWp0pZpCHZmnPiNbOblMpc9I4Ap6U5TJwh602zSK+YcSI6+997CZ+SCvYRxEdJ4 uCax+n8hW/Y/0Ywk9ErEh6ewMHGE2khea0poDFiLT8nSpDOAXtjs7A17jS5DQZfN 9+lFGQ2ftR+fX7+AYKf6JsGEMBcmghMu/xrgmco2mz91R8zHfHT4i1LFhDFKqDGU QVSL9c6IjsKi69Gu3/udJ50Uq68WcPVISSmVAcxOQg3t+Cp0XHenNJu4uRY3fNTN OYD/g6vAssztQ44F1Flm32/FxQKXYxbo32u4eYTeP7S5FrN6CxfVNwhZbFmB0zs6 VYG2UZz5XcAh2HFqAydTWbgWxzcGBFMgrSAeiJm8olrUH4R/vGcLneF+Y82+B8CK 9gChEuj5q2pXV/QmaHGJndLkAQeH15Fhtrwwxoc8A5PgYJpYcu3xwWOnSeagXdfj 6d8C1W9y7lMlowPB7DwQ+heDxxcL5tC+phD8u9M+OIX+KL9iBMqc2RdD4iKSkr8z SMQdYcB9QoeirgdztPL/Eb33WDLrlLYO2H8c274kJF79HUGq6jFycy0UH1K2hoXY EZzbcx7NEQGnC4y4W2Y5 =JpUe -----END PGP SIGNATURE----- From nobody Wed Apr 1 19:36:10 2015 Return-Path: X-Original-To: tram@ietfa.amsl.com Delivered-To: tram@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id BFDFF1A0119 for ; Wed, 1 Apr 2015 19:36:08 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -14.511 X-Spam-Level: X-Spam-Status: No, score=-14.511 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_HI=-5, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 4qmTJLC_KLRN for ; Wed, 1 Apr 2015 19:36:06 -0700 (PDT) Received: from rcdn-iport-3.cisco.com (rcdn-iport-3.cisco.com [173.37.86.74]) (using TLSv1 with cipher RC4-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id BB8A51A00FB for ; Wed, 1 Apr 2015 19:36:06 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=8096; q=dns/txt; s=iport; t=1427942167; x=1429151767; h=from:to:subject:date:message-id:references:in-reply-to: content-transfer-encoding:mime-version; bh=t8pnDoBF6OntFqqfqWT8Np0xSdIZObmfytRTwWjArmk=; b=japVmdXdmAOYvdisHWdUWPGFvIwX7cWNQGMad30aJrhKan+W5Kv34hqm DE0YKtNtDlzM6a1sogSMJPXZxMp4rq2h35C8fAVXjyrMHvwNOcVVV/9hk n5azfysVeQnNR9mAH4KK4DzE9HQAMgc+em504A1zqI7ArqZOpQrZDM3CZ U=; X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: A0DvBgD1qRxV/4oNJK1cgwhSVwUFgxDAEYIyCoVzAhyBK0wBAQEBAQF+hB4BAQEDAQEBASAROhcEAgEIEQQBAQECAgYODwMCAgIlCxQBCAgCBAESCAESiAwICAW0dJgrAQEBAQEBAQEBAQEBAQEBAQEBAQEBF4EhigiCOIFeEQEGGhYiBhKCUC+BFgWQZINygiaEezqCeI9yIoIBHYFQbwGBCjl/AQEB X-IronPort-AV: E=Sophos;i="5.11,507,1422921600"; d="scan'208";a="408569688" Received: from alln-core-5.cisco.com ([173.36.13.138]) by rcdn-iport-3.cisco.com with ESMTP; 02 Apr 2015 02:36:06 +0000 Received: from xhc-aln-x02.cisco.com (xhc-aln-x02.cisco.com [173.36.12.76]) by alln-core-5.cisco.com (8.14.5/8.14.5) with ESMTP id t322a5DC004619 (version=TLSv1/SSLv3 cipher=AES128-SHA bits=128 verify=FAIL); Thu, 2 Apr 2015 02:36:05 GMT Received: from xmb-rcd-x10.cisco.com ([169.254.15.175]) by xhc-aln-x02.cisco.com ([173.36.12.76]) with mapi id 14.03.0195.001; Wed, 1 Apr 2015 21:36:05 -0500 From: "Tirumaleswar Reddy (tireddy)" To: Marc Petit-Huguenin , "tram@ietf.org" Thread-Topic: [tram] I-D Action: draft-ietf-tram-stunbis-04.txt Thread-Index: AQHQaGNuoZDCdCmZDEWaGyqE4xHEdJ024z0AgAGBvuCAAIu4AIAAC3Qw Date: Thu, 2 Apr 2015 02:36:04 +0000 Message-ID: <913383AAA69FF945B8F946018B75898A411FA00A@xmb-rcd-x10.cisco.com> References: <20150327075539.26326.49374.idtracker@ietfa.amsl.com> <551A9620.5010405@acm.org> <913383AAA69FF945B8F946018B75898A411F9D69@xmb-rcd-x10.cisco.com> <551C4EEA.3080505@acm.org> In-Reply-To: <551C4EEA.3080505@acm.org> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.65.64.81] Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 MIME-Version: 1.0 Archived-At: Subject: Re: [tram] I-D Action: draft-ietf-tram-stunbis-04.txt X-BeenThere: tram@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "Discussing the creation of a Turn Revised And Modernized \(TRAM\) WG, which goal is to consolidate the various initiatives to update TURN and STUN." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 02 Apr 2015 02:36:08 -0000 PiAtLS0tLU9yaWdpbmFsIE1lc3NhZ2UtLS0tLQ0KPiBGcm9tOiBNYXJjIFBldGl0LUh1Z3Vlbmlu IFttYWlsdG86cGV0aXRodWdAYWNtLm9yZ10NCj4gU2VudDogVGh1cnNkYXksIEFwcmlsIDAyLCAy MDE1IDE6MzMgQU0NCj4gVG86IFRpcnVtYWxlc3dhciBSZWRkeSAodGlyZWRkeSk7IHRyYW1AaWV0 Zi5vcmcNCj4gU3ViamVjdDogUmU6IFt0cmFtXSBJLUQgQWN0aW9uOiBkcmFmdC1pZXRmLXRyYW0t c3R1bmJpcy0wNC50eHQNCj4gDQo+IC0tLS0tQkVHSU4gUEdQIFNJR05FRCBNRVNTQUdFLS0tLS0N Cj4gSGFzaDogU0hBMjU2DQo+IA0KPiBPbiAwNC8wMS8yMDE1IDEwOjUyIEFNLCBUaXJ1bWFsZXN3 YXIgUmVkZHkgKHRpcmVkZHkpIHdyb3RlOg0KPiA+IEZvciB0aGUgbG9uZy10ZXJtIGNyZWRlbnRp YWwgbWVjaGFuaXNtIGl0J3Mgbm90IGNsZWFyIGhvdyB0aGUgY2xpZW50DQo+IGRldGVybWluZXMg dG8gcGljayBNSSBvciBNSTIuIEkgdGhvdWdodCB0aGUgc2VydmVyIGluIDQwMSBlcnJvciByZXNw b25zZQ0KPiBjb252ZXlzIHRoYXQgaXQgc3VwcG9ydHMgTUkgb3IgTUkyIG9yIGJvdGggYW5kIHRo ZSBjbGllbnQgcGlja3Mgb25lIG9mIHRoZQ0KPiBhbGdvcml0aG1zIHN1cHBvcnRlZCBieSB0aGUg c2VydmVyIGZvciBtZXNzYWdlIGludGVncml0eSBvZiBzdWJzZXF1ZW50DQo+IHJlcXVlc3RzLg0K PiANCj4gVGhhdCdzIG5lZ290aWF0aW9uLCBhbmQgd2UgZG8gbm90IGRvIG5lZ290aWF0aW9uIGZv ciB0aGUgSE1BQy4NCg0KSW4gbG9uZy10ZXJtIGF1dGhlbnRpY2F0aW9uLCBzZXJ2ZXIgaXMgYWxy ZWFkeSBzZW5kaW5nIHJlYWxtLCBub25jZSBhdHRyaWJ1dGVzOyBzbyBhbm90aGVyIGF0dHJpYnV0 ZSB0byB0ZWxsIHRoZSBjbGllbnQgYWJvdXQgdGhlIGFsZ29yaXRobXMgaXQgc3VwcG9ydHMgd2ls bCBoZWxwIHRoZSBjbGllbnQgdG8gY2hvb3NlIGFuIGFsZ29yaXRobSBpbnN0ZWFkIG9mIHNlbmRp bmcgYm90aCBNSSBhbmQgTUkyNTYuIElmIGluIGZ1dHVyZSBOTk4gbnVtYmVyIG9mIGFsZ29yaXRo bXMgYXJlIHN1cHBvcnRlZCBpdCBhdm9pZHMgTk5OIE1JIGF0dHJpYnV0ZXMuDQoNCj4gDQo+IEEg c3R1bmJpcyBjbGllbnQgc2VuZHMgYm90aCBNSSBhbmQgTUkyNTYgKGZrYSBNSTIpLCBpbiB0aGF0 IG9yZGVyLiAgQSBzdHVuYmlzDQo+IHNlcnZlciByZXNwb25kcyB3aXRoIE1JMjU2LCBSRkMgNTM4 OSBzZXJ2ZXJzIHJlc3BvbmRzIHdpdGggTUkuDQo+IFN1YnNlcXVlbnQgcmVxdWVzdHMgdXNlcyBl aXRoZXIgTUkgb3IgTUkyNTYgZGVwZW5kaW5nIG9uIHRoZSByZXNwb25zZS4NCj4gDQo+IFNpbmNl IC0wNCBhIGNsaWVudCBtYXkga25vdyBiZWZvcmVoYW5kIHRoYXQgdGhlIHNlcnZlciBzdXBwb3J0 cyBNSSBvcg0KPiBNSTI1NiwgaW4gd2hpY2ggY2FzZSBpdCBjYW4gZGlyZWN0bHkgdXNlIGVpdGhl ciBvZiB0aGVtICh0aGF0J3MgZm9yIHNob3J0IHRlcm0NCj4gYXV0aGVudGljYXRpb24gd2hlcmUg YSB0by1iZS1kZWZpbmVkIFNEUC9JQ0Ugb3B0aW9uIG1heSBwZXJtaXQgdG8gcGFzcw0KPiB0aGlz IGluZm9ybWF0aW9uKS4NCg0KWWVzLCBidXQgaXQgZG9lcyBub3Qgc29sdmUgdGhlIHByb2JsZW0g Zm9yIFRVUk4uDQoNCi1UaXJ1DQoNCj4gDQo+IHN0dW4tdGVyIHdpbGwgZGVwcmVjYXRlIE1JLg0K PiANCj4gPg0KPiA+IC1UaXJ1DQo+ID4NCj4gPj4gLS0tLS1PcmlnaW5hbCBNZXNzYWdlLS0tLS0N Cj4gPj4gRnJvbTogdHJhbSBbbWFpbHRvOnRyYW0tYm91bmNlc0BpZXRmLm9yZ10gT24gQmVoYWxm IE9mIE1hcmMgUGV0aXQtDQo+ID4+IEh1Z3VlbmluDQo+ID4+IFNlbnQ6IFR1ZXNkYXksIE1hcmNo IDMxLCAyMDE1IDY6MTIgUE0NCj4gPj4gVG86IHRyYW1AaWV0Zi5vcmcNCj4gPj4gU3ViamVjdDog UmU6IFt0cmFtXSBJLUQgQWN0aW9uOiBkcmFmdC1pZXRmLXRyYW0tc3R1bmJpcy0wNC50eHQNCj4g Pj4NCj4gPiBDaGFuZ2Vsb2c6DQo+ID4NCj4gPiBvICBSZW1vdmUgU0NUUC4NCj4gPiBvICBSZW1v dmUgREFORS4NCj4gPiBvICBzL01FU1NBR0UtSU5URUdSSVRZMi9NRVNTQUdFLUlOVEVHUklUWS1T SEEyNTYvDQo+ID4gbyAgUmVtb3ZlIFNhbHRlZCBTSEEyNTYgcGFzc3dvcmQgaGFzaC4NCj4gPiBv ICBUaGUgUlRPIGRlbGF5IGJldHdlZW4gdHJhbnNhY3Rpb25zIGlzIHJlbW92ZWQuDQo+ID4gbyAg TWFrZSBjbGVhciB0aGF0IHJldXNpbmcgTk9OQ0Ugd2lsbCB0cmlnZ2VyIGEgd2FzdGVkIHJvdW5k IHRyaXAuDQo+ID4NCj4gPiBSZW1haW5pbmcgVE9ETyBsaXN0Og0KPiA+DQo+ID4gMS4gIEFkZCBy ZWZlcmVuY2UgdG8gUkZDIDU3NjkgKHN0dW4gdmVjdG9ycykuDQo+ID4gMi4gIEFkZCBmbG93IGRp YWdyYW0gZm9yIGxvbmctdGVybSBhdXRoZW50aWNhdGlvbi4NCj4gPiAzLiAgQWRkIHZlY3RvcnMg Zm9yIFNIQTI1NiBwYXNzd29yZCBoYXNoLg0KPiA+DQo+ID4gT24gMDMvMjcvMjAxNSAwMTo1NSBB TSwgaW50ZXJuZXQtZHJhZnRzQGlldGYub3JnIHdyb3RlOg0KPiA+Pj4+DQo+ID4+Pj4gQSBOZXcg SW50ZXJuZXQtRHJhZnQgaXMgYXZhaWxhYmxlIGZyb20gdGhlIG9uLWxpbmUgSW50ZXJuZXQtRHJh ZnRzDQo+ID4gZGlyZWN0b3JpZXMuDQo+ID4+Pj4gIFRoaXMgZHJhZnQgaXMgYSB3b3JrIGl0ZW0g b2YgdGhlIFRVUk4gUmV2aXNlZCBhbmQgTW9kZXJuaXplZA0KPiA+Pj4+IFdvcmtpbmcNCj4gPiBH cm91cCBvZiB0aGUgSUVURi4NCj4gPj4+Pg0KPiA+Pj4+ICAgICAgICAgVGl0bGUgICAgICAgICAg IDogU2Vzc2lvbiBUcmF2ZXJzYWwgVXRpbGl0aWVzIGZvciBOQVQgKFNUVU4pDQo+ID4+Pj4gICAg ICAgICBBdXRob3JzICAgICAgICAgOiBNYXJjIFBldGl0LUh1Z3VlbmluDQo+ID4+Pj4gICAgICAg ICAgICAgICAgICAgICAgICAgICBHb256YWxvIFNhbGd1ZWlybw0KPiA+Pj4+ICAgICAgICAgICAg ICAgICAgICAgICAgICAgSm9uYXRoYW4gUm9zZW5iZXJnDQo+ID4+Pj4gICAgICAgICAgICAgICAg ICAgICAgICAgICBEYW4gV2luZw0KPiA+Pj4+ICAgICAgICAgICAgICAgICAgICAgICAgICAgUm9o YW4gTWFoeQ0KPiA+Pj4+ICAgICAgICAgICAgICAgICAgICAgICAgICAgUGhpbGlwIE1hdHRoZXdz DQo+ID4+Pj4gCUZpbGVuYW1lICAgICAgICA6IGRyYWZ0LWlldGYtdHJhbS1zdHVuYmlzLTA0LnR4 dA0KPiA+Pj4+IAlQYWdlcyAgICAgICAgICAgOiA1NQ0KPiA+Pj4+IAlEYXRlICAgICAgICAgICAg OiAyMDE1LTAzLTI3DQo+ID4+Pj4NCj4gPj4+PiBBYnN0cmFjdDoNCj4gPj4+PiAgICBTZXNzaW9u IFRyYXZlcnNhbCBVdGlsaXRpZXMgZm9yIE5BVCAoU1RVTikgaXMgYSBwcm90b2NvbCB0aGF0IHNl cnZlcw0KPiA+Pj4+ICAgIGFzIGEgdG9vbCBmb3Igb3RoZXIgcHJvdG9jb2xzIGluIGRlYWxpbmcg d2l0aCBOZXR3b3JrIEFkZHJlc3MNCj4gPj4+PiAgICBUcmFuc2xhdG9yIChOQVQpIHRyYXZlcnNh bC4gIEl0IGNhbiBiZSB1c2VkIGJ5IGFuIGVuZHBvaW50IHRvDQo+ID4+Pj4gICAgZGV0ZXJtaW5l IHRoZSBJUCBhZGRyZXNzIGFuZCBwb3J0IGFsbG9jYXRlZCB0byBpdCBieSBhIE5BVC4gIEl0IGNh bg0KPiA+Pj4+ICAgIGFsc28gYmUgdXNlZCB0byBjaGVjayBjb25uZWN0aXZpdHkgYmV0d2VlbiB0 d28gZW5kcG9pbnRzLCBhbmQgYXMgYQ0KPiA+Pj4+ICAgIGtlZXAtYWxpdmUgcHJvdG9jb2wgdG8g bWFpbnRhaW4gTkFUIGJpbmRpbmdzLiAgU1RVTiB3b3JrcyB3aXRoDQo+IG1hbnkNCj4gPj4+PiAg ICBleGlzdGluZyBOQVRzLCBhbmQgZG9lcyBub3QgcmVxdWlyZSBhbnkgc3BlY2lhbCBiZWhhdmlv ciBmcm9tIHRoZW0uDQo+ID4+Pj4NCj4gPj4+PiAgICBTVFVOIGlzIG5vdCBhIE5BVCB0cmF2ZXJz YWwgc29sdXRpb24gYnkgaXRzZWxmLiAgUmF0aGVyLCBpdCBpcyBhIHRvb2wNCj4gPj4+PiAgICB0 byBiZSB1c2VkIGluIHRoZSBjb250ZXh0IG9mIGEgTkFUIHRyYXZlcnNhbCBzb2x1dGlvbi4NCj4g Pj4+Pg0KPiA+Pj4+ICAgIFRoaXMgZG9jdW1lbnQgb2Jzb2xldGVzIFJGQyA1Mzg5Lg0KPiA+Pj4+ DQo+ID4+Pj4NCj4gPj4+PiBUaGUgSUVURiBkYXRhdHJhY2tlciBzdGF0dXMgcGFnZSBmb3IgdGhp cyBkcmFmdCBpczoNCj4gPj4+PiBodHRwczovL2RhdGF0cmFja2VyLmlldGYub3JnL2RvYy9kcmFm dC1pZXRmLXRyYW0tc3R1bmJpcy8NCj4gPj4+Pg0KPiA+Pj4+IFRoZXJlJ3MgYWxzbyBhIGh0bWxp emVkIHZlcnNpb24gYXZhaWxhYmxlIGF0Og0KPiA+Pj4+IGh0dHA6Ly90b29scy5pZXRmLm9yZy9o dG1sL2RyYWZ0LWlldGYtdHJhbS1zdHVuYmlzLTA0DQo+ID4+Pj4NCj4gPj4+PiBBIGRpZmYgZnJv bSB0aGUgcHJldmlvdXMgdmVyc2lvbiBpcyBhdmFpbGFibGUgYXQ6DQo+ID4+Pj4gaHR0cDovL3d3 dy5pZXRmLm9yZy9yZmNkaWZmP3VybDI9ZHJhZnQtaWV0Zi10cmFtLXN0dW5iaXMtMDQNCj4gPj4+ Pg0KPiA+Pj4+DQo+ID4+Pj4gUGxlYXNlIG5vdGUgdGhhdCBpdCBtYXkgdGFrZSBhIGNvdXBsZSBv ZiBtaW51dGVzIGZyb20gdGhlIHRpbWUgb2YNCj4gPj4+PiBzdWJtaXNzaW9uIHVudGlsIHRoZSBo dG1saXplZCB2ZXJzaW9uIGFuZCBkaWZmIGFyZSBhdmFpbGFibGUgYXQNCj4gPiB0b29scy5pZXRm Lm9yZy4NCj4gPj4+Pg0KPiA+Pj4+IEludGVybmV0LURyYWZ0cyBhcmUgYWxzbyBhdmFpbGFibGUg YnkgYW5vbnltb3VzIEZUUCBhdDoNCj4gPj4+PiBmdHA6Ly9mdHAuaWV0Zi5vcmcvaW50ZXJuZXQt ZHJhZnRzLw0KPiA+Pj4+DQo+ID4NCj4gPj4NCj4gPj4gX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX18NCj4gPj4gdHJhbSBtYWlsaW5nIGxpc3QNCj4gPj4gdHJh bUBpZXRmLm9yZw0KPiA+PiBodHRwczovL3d3dy5pZXRmLm9yZy9tYWlsbWFuL2xpc3RpbmZvL3Ry YW0NCj4gPg0KPiANCj4gLSAtLQ0KPiBNYXJjIFBldGl0LUh1Z3VlbmluDQo+IEVtYWlsOiBtYXJj QHBldGl0LWh1Z3VlbmluLm9yZw0KPiBCbG9nOiBodHRwOi8vYmxvZy5tYXJjLnBldGl0LWh1Z3Vl bmluLm9yZw0KPiBQcm9maWxlOiBodHRwOi8vd3d3LmxpbmtlZGluLmNvbS9pbi9wZXRpdGh1Zw0K PiAtLS0tLUJFR0lOIFBHUCBTSUdOQVRVUkUtLS0tLQ0KPiBWZXJzaW9uOiBHbnVQRyB2MQ0KPiAN Cj4gaVFJY0JBRUJDQUFHQlFKVkhFN3FBQW9KRUNuRVJaWFdhbjdFTUl3UC9SMFBuS0U0bDJkZCsz eTF3N1A3QjcNCj4geDANCj4gUzdtSENqa1R0N1NJRnQ2b1IxRGFGWTlYeE9DZE85TDExTnZaQVRm d1YxT0YzaUlMbmJ6STNrM3dacFRQYlBoWA0KPiBvbldwMHBacENIWm1uUGlOYk9ibE1wYzlJNEFw NlU1VEp3aDYwMnpTSytZY1NJNis5OTdDWitTQ3ZZUnhFZEoNCj4gNA0KPiB1Q2F4K244aFcvWS8w WXdrOUVyRWg2ZXdNSEdFMmtoZWEwcG9ERmlMVDhuU3BET0FYdGpzN0ExN2pTNURRWmYNCj4gTg0K PiA5K2xGR1EyZnRSK2ZYNytBWUtmNkpzR0VNQmNtZ2hNdS94cmdtY28ybXo5MVI4ekhmSFQ0aTFM RmhERktxREcNCj4gVQ0KPiBRVlNMOWM2SWpzS2k2OUd1My91ZEo1MFVxNjhXY1BWSVNTbVZBY3hP UWczdCtDcDBYSGVuTkp1NHVSWTNmTlRODQo+IE9ZRC9nNnZBc3N6dFE0NEYxRmxtMzIvRnhRS1hZ eGJvMzJ1NGVZVGVQN1M1RnJONkN4ZlZOd2haYkZtQjB6czYNCj4gVllHMlVaejVYY0FoMkhGcUF5 ZFRXYmdXeHpjR0JGTWdyU0FlaUptOG9sclVINFIvdkdjTG5lRitZODIrQjgNCj4gQ0sNCj4gOWdD aEV1ajVxMnBYVi9RbWFIR0puZExrQVFlSDE1Rmh0cnd3eG9jOEE1UGdZSnBZY3UzeHdXT25TZWFn WGQNCj4gZmoNCj4gNmQ4QzFXOXk3bE1sb3dQQjdEd1EraGVEeHhjTDV0QytwaEQ4dTlNK09JWCtL TDlpQk1xYzJSZEQ0aUtTa3INCj4gOHoNCj4gU01RZFljQjlRb2VpcmdkenRQTC9FYjMzV0RMcmxM WU8ySDhjMjc0a0pGNzlIVUdxNmpGeWN5MFVIMUsyaG9YWQ0KPiBFWnpiY3g3TkVRR25DNHk0VzJZ NQ0KPiA9SnBVZQ0KPiAtLS0tLUVORCBQR1AgU0lHTkFUVVJFLS0tLS0NCg== From nobody Wed Apr 1 19:51:23 2015 Return-Path: X-Original-To: tram@ietfa.amsl.com Delivered-To: tram@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 71DC01AD363 for ; Wed, 1 Apr 2015 19:51:21 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.75 X-Spam-Level: X-Spam-Status: No, score=-1.75 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_ENVFROM_END_DIGIT=0.25, FREEMAIL_FROM=0.001, SPF_PASS=-0.001] autolearn=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ev3mqMKf7pPv for ; Wed, 1 Apr 2015 19:51:19 -0700 (PDT) Received: from mail-pd0-x22b.google.com (mail-pd0-x22b.google.com [IPv6:2607:f8b0:400e:c02::22b]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 5D51C1AD35E for ; Wed, 1 Apr 2015 19:51:19 -0700 (PDT) Received: by pdrw1 with SMTP id w1so66366564pdr.0 for ; Wed, 01 Apr 2015 19:51:18 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=content-type:mime-version:subject:from:in-reply-to:date:cc :content-transfer-encoding:message-id:references:to; bh=b+t6dr9N49OZhFQ8u2P4/6eTBgln9ASZ8W884F3wN4w=; b=IKwCKvw/+/b90pIXEqrBqeX5TMgUImTAULGJ+TBdcMz4D4cm/+vcgxJ8z257nv6BrZ Ru8j9DH0sM+3fB0CoNdYhB0Lo1HtU4pjqYFsBVqpZ3QI23EKdymSQ53cGhKWgaXlDXpN XliewZQ0fA4Ge9aO/wd2d6v8b1mNI7u7GqDkwF9kZFK3lO+q0881F+/G4qAIuZdjadG5 UkCGicr1LMS6hYtsRB4+O8CDYWWgKrsDqTVZ4RjgzkfEpvd4t/YVRk1aoYEYuDRyQkYY rAFq/wB3uzTnU9Bjc+VrG2t20tv8SC7Vln6OJyOj6GDN7eSIQAJpU+suQMNJprx2dWkS hrcQ== X-Received: by 10.66.228.104 with SMTP id sh8mr81859342pac.63.1427943078833; Wed, 01 Apr 2015 19:51:18 -0700 (PDT) Received: from [17.244.97.162] ([17.244.97.162]) by mx.google.com with ESMTPSA id iz2sm3471593pbc.37.2015.04.01.19.51.17 (version=TLSv1 cipher=ECDHE-RSA-RC4-SHA bits=128/128); Wed, 01 Apr 2015 19:51:17 -0700 (PDT) Content-Type: text/plain; charset=us-ascii Mime-Version: 1.0 (1.0) From: Oleg Moskalenko X-Mailer: iPhone Mail (12F39) In-Reply-To: <913383AAA69FF945B8F946018B75898A411FA00A@xmb-rcd-x10.cisco.com> Date: Wed, 1 Apr 2015 19:51:15 -0700 Content-Transfer-Encoding: quoted-printable Message-Id: <36DD1476-0698-4F39-8B58-630352847C05@gmail.com> References: <20150327075539.26326.49374.idtracker@ietfa.amsl.com> <551A9620.5010405@acm.org> <913383AAA69FF945B8F946018B75898A411F9D69@xmb-rcd-x10.cisco.com> <551C4EEA.3080505@acm.org> <913383AAA69FF945B8F946018B75898A411FA00A@xmb-rcd-x10.cisco.com> To: "Tirumaleswar Reddy (tireddy)" Archived-At: Cc: Marc Petit-Huguenin , "tram@ietf.org" Subject: Re: [tram] I-D Action: draft-ietf-tram-stunbis-04.txt X-BeenThere: tram@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "Discussing the creation of a Turn Revised And Modernized \(TRAM\) WG, which goal is to consolidate the various initiatives to update TURN and STUN." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 02 Apr 2015 02:51:21 -0000 That's right, we already have a sort of negotiation for the long-term creden= tials. It can be used for signaling the server algorithm, in a comprehension= - optional attribute. The default will be sha1. That way, we have full back= ward compatibility and only one integrity token. Oleg On Apr 1, 2015, at 7:36 PM, Tirumaleswar Reddy (tireddy) = wrote: >> -----Original Message----- >> From: Marc Petit-Huguenin [mailto:petithug@acm.org] >> Sent: Thursday, April 02, 2015 1:33 AM >> To: Tirumaleswar Reddy (tireddy); tram@ietf.org >> Subject: Re: [tram] I-D Action: draft-ietf-tram-stunbis-04.txt >>=20 >> -----BEGIN PGP SIGNED MESSAGE----- >> Hash: SHA256 >>=20 >>> On 04/01/2015 10:52 AM, Tirumaleswar Reddy (tireddy) wrote: >>> For the long-term credential mechanism it's not clear how the client >> determines to pick MI or MI2. I thought the server in 401 error response >> conveys that it supports MI or MI2 or both and the client picks one of th= e >> algorithms supported by the server for message integrity of subsequent >> requests. >>=20 >> That's negotiation, and we do not do negotiation for the HMAC. >=20 > In long-term authentication, server is already sending realm, nonce attrib= utes; so another attribute to tell the client about the algorithms it suppor= ts will help the client to choose an algorithm instead of sending both MI an= d MI256. If in future NNN number of algorithms are supported it avoids NNN M= I attributes. >=20 >>=20 >> A stunbis client sends both MI and MI256 (fka MI2), in that order. A stu= nbis >> server responds with MI256, RFC 5389 servers responds with MI. >> Subsequent requests uses either MI or MI256 depending on the response. >>=20 >> Since -04 a client may know beforehand that the server supports MI or >> MI256, in which case it can directly use either of them (that's for short= term >> authentication where a to-be-defined SDP/ICE option may permit to pass >> this information). >=20 > Yes, but it does not solve the problem for TURN. >=20 > -Tiru >=20 >>=20 >> stun-ter will deprecate MI. >>=20 >>>=20 >>> -Tiru >>>=20 >>>> -----Original Message----- >>>> From: tram [mailto:tram-bounces@ietf.org] On Behalf Of Marc Petit- >>>> Huguenin >>>> Sent: Tuesday, March 31, 2015 6:12 PM >>>> To: tram@ietf.org >>>> Subject: Re: [tram] I-D Action: draft-ietf-tram-stunbis-04.txt >>> Changelog: >>>=20 >>> o Remove SCTP. >>> o Remove DANE. >>> o s/MESSAGE-INTEGRITY2/MESSAGE-INTEGRITY-SHA256/ >>> o Remove Salted SHA256 password hash. >>> o The RTO delay between transactions is removed. >>> o Make clear that reusing NONCE will trigger a wasted round trip. >>>=20 >>> Remaining TODO list: >>>=20 >>> 1. Add reference to RFC 5769 (stun vectors). >>> 2. Add flow diagram for long-term authentication. >>> 3. Add vectors for SHA256 password hash. >>>=20 >>> On 03/27/2015 01:55 AM, internet-drafts@ietf.org wrote: >>>>>>=20 >>>>>> A New Internet-Draft is available from the on-line Internet-Drafts >>> directories. >>>>>> This draft is a work item of the TURN Revised and Modernized >>>>>> Working >>> Group of the IETF. >>>>>>=20 >>>>>> Title : Session Traversal Utilities for NAT (STUN) >>>>>> Authors : Marc Petit-Huguenin >>>>>> Gonzalo Salgueiro >>>>>> Jonathan Rosenberg >>>>>> Dan Wing >>>>>> Rohan Mahy >>>>>> Philip Matthews >>>>>> Filename : draft-ietf-tram-stunbis-04.txt >>>>>> Pages : 55 >>>>>> Date : 2015-03-27 >>>>>>=20 >>>>>> Abstract: >>>>>> Session Traversal Utilities for NAT (STUN) is a protocol that serve= s >>>>>> as a tool for other protocols in dealing with Network Address >>>>>> Translator (NAT) traversal. It can be used by an endpoint to >>>>>> determine the IP address and port allocated to it by a NAT. It can= >>>>>> also be used to check connectivity between two endpoints, and as a >>>>>> keep-alive protocol to maintain NAT bindings. STUN works with >> many >>>>>> existing NATs, and does not require any special behavior from them.= >>>>>>=20 >>>>>> STUN is not a NAT traversal solution by itself. Rather, it is a to= ol >>>>>> to be used in the context of a NAT traversal solution. >>>>>>=20 >>>>>> This document obsoletes RFC 5389. >>>>>>=20 >>>>>>=20 >>>>>> The IETF datatracker status page for this draft is: >>>>>> https://datatracker.ietf.org/doc/draft-ietf-tram-stunbis/ >>>>>>=20 >>>>>> There's also a htmlized version available at: >>>>>> http://tools.ietf.org/html/draft-ietf-tram-stunbis-04 >>>>>>=20 >>>>>> A diff from the previous version is available at: >>>>>> http://www.ietf.org/rfcdiff?url2=3Ddraft-ietf-tram-stunbis-04 >>>>>>=20 >>>>>>=20 >>>>>> Please note that it may take a couple of minutes from the time of >>>>>> submission until the htmlized version and diff are available at >>> tools.ietf.org. >>>>>>=20 >>>>>> Internet-Drafts are also available by anonymous FTP at: >>>>>> ftp://ftp.ietf.org/internet-drafts/ >>>=20 >>>>=20 >>>> _______________________________________________ >>>> tram mailing list >>>> tram@ietf.org >>>> https://www.ietf.org/mailman/listinfo/tram >>=20 >> - -- >> Marc Petit-Huguenin >> Email: marc@petit-huguenin.org >> Blog: http://blog.marc.petit-huguenin.org >> Profile: http://www.linkedin.com/in/petithug >> -----BEGIN PGP SIGNATURE----- >> Version: GnuPG v1 >>=20 >> iQIcBAEBCAAGBQJVHE7qAAoJECnERZXWan7EMIwP/R0PnKE4l2dd+3y1w7P7B7 >> x0 >> S7mHCjkTt7SIFt6oR1DaFY9XxOCdO9L11NvZATfwV1OF3iILnbzI3k3wZpTPbPhX >> onWp0pZpCHZmnPiNbOblMpc9I4Ap6U5TJwh602zSK+YcSI6+997CZ+SCvYRxEdJ >> 4 >> uCax+n8hW/Y/0Ywk9ErEh6ewMHGE2khea0poDFiLT8nSpDOAXtjs7A17jS5DQZf >> N >> 9+lFGQ2ftR+fX7+AYKf6JsGEMBcmghMu/xrgmco2mz91R8zHfHT4i1LFhDFKqDG >> U >> QVSL9c6IjsKi69Gu3/udJ50Uq68WcPVISSmVAcxOQg3t+Cp0XHenNJu4uRY3fNTN >> OYD/g6vAssztQ44F1Flm32/FxQKXYxbo32u4eYTeP7S5FrN6CxfVNwhZbFmB0zs6 >> VYG2UZz5XcAh2HFqAydTWbgWxzcGBFMgrSAeiJm8olrUH4R/vGcLneF+Y82+B8 >> CK >> 9gChEuj5q2pXV/QmaHGJndLkAQeH15Fhtrwwxoc8A5PgYJpYcu3xwWOnSeagXd >> fj >> 6d8C1W9y7lMlowPB7DwQ+heDxxcL5tC+phD8u9M+OIX+KL9iBMqc2RdD4iKSkr >> 8z >> SMQdYcB9QoeirgdztPL/Eb33WDLrlLYO2H8c274kJF79HUGq6jFycy0UH1K2hoXY >> EZzbcx7NEQGnC4y4W2Y5 >> =3DJpUe >> -----END PGP SIGNATURE----- > _______________________________________________ > tram mailing list > tram@ietf.org > https://www.ietf.org/mailman/listinfo/tram From nobody Thu Apr 2 05:30:22 2015 Return-Path: X-Original-To: tram@ietfa.amsl.com Delivered-To: tram@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 6A12C1A8A0B for ; Thu, 2 Apr 2015 05:30:21 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.601 X-Spam-Level: X-Spam-Status: No, score=-2.601 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id xCkiZieu5Z6R for ; Thu, 2 Apr 2015 05:30:12 -0700 (PDT) Received: from mail-qc0-f178.google.com (mail-qc0-f178.google.com [209.85.216.178]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 77FD31B2C8B for ; Thu, 2 Apr 2015 05:30:12 -0700 (PDT) Received: by qcrf4 with SMTP id f4so52953180qcr.0 for ; Thu, 02 Apr 2015 05:30:11 -0700 (PDT) X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:message-id:date:from:user-agent:mime-version:to :subject:references:in-reply-to:content-type :content-transfer-encoding; bh=HZy9BPyRZndA5lmQVINXzyXDRkCSPWMwaNF8zTINDx8=; b=TFHczS0ulQ7ee0LoDvEBjDdiJPuKq0P6HC4dD3JoAQtWt25wzNBZ5rPZnH/gBQhBA0 ReGQDkVpjZMmYaHMCWpven5EGoFFv8zJc51rIjVPEAieDFzrRn6v9mJJHjJlgPDRJjDv nOXLBcXsFflYbTUnKES/37Bmz/PqY2RrD8ir4YJZqWGzVJj4tZu24bzzc/EC6jWkvtmt ZVzDXO2T7KCNHVvDmf0rSKAGvauq/bLVHIs7xRQJpjks5ZYvNsm0yOymWaIUznFeD5ME ATeN/5Nh6YSIVgWvoz2RNGqX80zhgJtj2dIMvO6Dh4oXqox/QyI7j1yb0BMCaX5EiCNk +rQw== X-Gm-Message-State: ALoCoQnwgiuisfciGEyVDtpA3lt0Y4d6dNvqmwQRztRH3uCfJe1WbJjjD/JlahDk9BtXCV/G9T6z X-Received: by 10.55.43.220 with SMTP id r89mr36358815qkr.27.1427977811781; Thu, 02 Apr 2015 05:30:11 -0700 (PDT) Received: from [192.168.1.43] (modemcable233.42-178-173.mc.videotron.ca. [173.178.42.233]) by mx.google.com with ESMTPSA id t30sm3368342qge.28.2015.04.02.05.30.10 (version=TLSv1.2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Thu, 02 Apr 2015 05:30:10 -0700 (PDT) Message-ID: <551D3651.1010700@jive.com> Date: Thu, 02 Apr 2015 08:30:09 -0400 From: Simon Perreault User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.10; rv:31.0) Gecko/20100101 Thunderbird/31.5.0 MIME-Version: 1.0 To: "Tirumaleswar Reddy (tireddy)" , Marc Petit-Huguenin , "tram@ietf.org" References: <20150327075539.26326.49374.idtracker@ietfa.amsl.com> <551A9620.5010405@acm.org> <913383AAA69FF945B8F946018B75898A411F9D69@xmb-rcd-x10.cisco.com> <551C4EEA.3080505@acm.org> <913383AAA69FF945B8F946018B75898A411FA00A@xmb-rcd-x10.cisco.com> In-Reply-To: <913383AAA69FF945B8F946018B75898A411FA00A@xmb-rcd-x10.cisco.com> Content-Type: text/plain; charset=windows-1252 Content-Transfer-Encoding: 8bit Archived-At: Subject: Re: [tram] I-D Action: draft-ietf-tram-stunbis-04.txt X-BeenThere: tram@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "Discussing the creation of a Turn Revised And Modernized \(TRAM\) WG, which goal is to consolidate the various initiatives to update TURN and STUN." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 02 Apr 2015 12:30:21 -0000 Le 2015-04-01 22:36, Tirumaleswar Reddy (tireddy) a écrit : >> On 04/01/2015 10:52 AM, Tirumaleswar Reddy (tireddy) wrote: >>> > > For the long-term credential mechanism it's not clear how the client >> > determines to pick MI or MI2. I thought the server in 401 error response >> > conveys that it supports MI or MI2 or both and the client picks one of the >> > algorithms supported by the server for message integrity of subsequent >> > requests. >> > >> > That's negotiation, and we do not do negotiation for the HMAC. > In long-term authentication, server is already sending realm, nonce attributes; so another attribute to tell the client about the algorithms it supports will help the client to choose an algorithm instead of sending both MI and MI256. If in future NNN number of algorithms are supported it avoids NNN MI attributes. The plan presented in Dallas is to have at most 2 MI attributes. When/if HMAC-SHA1 gets broken, we will deprecate MI. Then when/if we start having doubts with HMAC-SHA256, we'll create a third MI. And so on and so forth. So at most we will have 2 MI attributes in a single message, not NNN. I don't see the problem with having 2 MI attributes in Allocation requests. Also keep in mind it's only for the first request: Refresh requests will use only one MI attribute. For connectivity checks it is different but we have that figured out with SDP signalling. Simon From nobody Thu Apr 2 06:55:21 2015 Return-Path: X-Original-To: tram@ietfa.amsl.com Delivered-To: tram@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id A60721A9050 for ; Thu, 2 Apr 2015 06:55:18 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -14.511 X-Spam-Level: X-Spam-Status: No, score=-14.511 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_HI=-5, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id xRQESGeZ8gTF for ; Thu, 2 Apr 2015 06:55:17 -0700 (PDT) Received: from alln-iport-2.cisco.com (alln-iport-2.cisco.com [173.37.142.89]) (using TLSv1 with cipher RC4-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id C75351A904A for ; Thu, 2 Apr 2015 06:55:16 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=2380; q=dns/txt; s=iport; t=1427982917; x=1429192517; h=from:to:subject:date:message-id:references:in-reply-to: content-transfer-encoding:mime-version; bh=pOHt25qJaUhOgHdlkYFdBI4nPLrBNORaPX2CmqnNQq4=; b=J9Nb13lmEUmNZTzA+SzboICatuk1vrG812olltXb11k3/zB8n79vu6sB PlXBzAYCjjEzBFSYt0n4w8pb+F6d15nH5NtdXAiVoP7mv+2AVHJVTg1+T hzJo9JAuhOuezNTK1W4EHW72Cpr61FSzbEa0VpAMRt/gQF+mF+QoW6Xo5 M=; X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: A0BXBwAgSR1V/5ldJa1cgwhSXAXDHoI/hXMCgUNMAQEBAQEBfoQeAQEBAwF+BwQCAQgOAwQBAQEKHQcyFAkIAgQBEgiIHwgNzW8BAQEBAQEBAQEBAQEBAQEBAQEBAQETBIsphC4aOAaDEYEWBYpxg2qCD4N1mlMig25vgUR/AQEB X-IronPort-AV: E=Sophos;i="5.11,511,1422921600"; d="scan'208";a="137687562" Received: from rcdn-core-2.cisco.com ([173.37.93.153]) by alln-iport-2.cisco.com with ESMTP; 02 Apr 2015 13:55:17 +0000 Received: from xhc-rcd-x05.cisco.com (xhc-rcd-x05.cisco.com [173.37.183.79]) by rcdn-core-2.cisco.com (8.14.5/8.14.5) with ESMTP id t32DtGa4012058 (version=TLSv1/SSLv3 cipher=AES128-SHA bits=128 verify=FAIL); Thu, 2 Apr 2015 13:55:16 GMT Received: from xmb-rcd-x10.cisco.com ([169.254.15.175]) by xhc-rcd-x05.cisco.com ([173.37.183.79]) with mapi id 14.03.0195.001; Thu, 2 Apr 2015 08:55:15 -0500 From: "Tirumaleswar Reddy (tireddy)" To: Simon Perreault , Marc Petit-Huguenin , "tram@ietf.org" Thread-Topic: [tram] I-D Action: draft-ietf-tram-stunbis-04.txt Thread-Index: AQHQaGNuoZDCdCmZDEWaGyqE4xHEdJ024z0AgAGBvuCAAIu4AIAAC3QwgAEIZ4D//8DOcA== Date: Thu, 2 Apr 2015 13:55:15 +0000 Message-ID: <913383AAA69FF945B8F946018B75898A411FA5C8@xmb-rcd-x10.cisco.com> References: <20150327075539.26326.49374.idtracker@ietfa.amsl.com> <551A9620.5010405@acm.org> <913383AAA69FF945B8F946018B75898A411F9D69@xmb-rcd-x10.cisco.com> <551C4EEA.3080505@acm.org> <913383AAA69FF945B8F946018B75898A411FA00A@xmb-rcd-x10.cisco.com> <551D3651.1010700@jive.com> In-Reply-To: <551D3651.1010700@jive.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.65.39.196] Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 Archived-At: Subject: Re: [tram] I-D Action: draft-ietf-tram-stunbis-04.txt X-BeenThere: tram@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "Discussing the creation of a Turn Revised And Modernized \(TRAM\) WG, which goal is to consolidate the various initiatives to update TURN and STUN." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 02 Apr 2015 13:55:18 -0000 > -----Original Message----- > From: Simon Perreault [mailto:sperreault@jive.com] > Sent: Thursday, April 02, 2015 6:00 PM > To: Tirumaleswar Reddy (tireddy); Marc Petit-Huguenin; tram@ietf.org > Subject: Re: [tram] I-D Action: draft-ietf-tram-stunbis-04.txt >=20 > Le 2015-04-01 22:36, Tirumaleswar Reddy (tireddy) a =E9crit : > >> On 04/01/2015 10:52 AM, Tirumaleswar Reddy (tireddy) wrote: > >>> > > For the long-term credential mechanism it's not clear how the > >>> > > client > >> > determines to pick MI or MI2. I thought the server in 401 error > >> > response conveys that it supports MI or MI2 or both and the client > >> > picks one of the algorithms supported by the server for message > >> > integrity of subsequent requests. > >> > > >> > That's negotiation, and we do not do negotiation for the HMAC. > > In long-term authentication, server is already sending realm, nonce > attributes; so another attribute to tell the client about the algorithms = it > supports will help the client to choose an algorithm instead of sending b= oth > MI and MI256. If in future NNN number of algorithms are supported it avoi= ds > NNN MI attributes. >=20 > The plan presented in Dallas is to have at most 2 MI attributes. When/if > HMAC-SHA1 gets broken, we will deprecate MI. Then when/if we start having > doubts with HMAC-SHA256, we'll create a third MI. And so on and so forth. > So at most we will have 2 MI attributes in a single message, not NNN. Thanks for the clarification. >=20 > I don't see the problem with having 2 MI attributes in Allocation request= s. It may be problem if the client with multiple interfaces discovers multiple= TURN servers on each interface and the client has to send 2MI attributes t= o each discovered TURN server. I don't understand How it is better than the approach of server signaling t= he algorithms it supports to the client ? Why not add algorithm agility just like other protocols do so that there is= no need to add new MI every few years ? We should consider the guidance given in https://tools.ietf.org/html/draft-= iab-crypto-alg-agility-02 > Also keep in mind it's only for the first request:=20 > Refresh requests will use > only one MI attribute. For connectivity checks it is different but we hav= e that > figured out with SDP signalling. -Tiru >=20 > Simon From nobody Thu Apr 2 07:34:24 2015 Return-Path: X-Original-To: tram@ietfa.amsl.com Delivered-To: tram@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id ADB071B2CD6 for ; Thu, 2 Apr 2015 07:34:17 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.601 X-Spam-Level: X-Spam-Status: No, score=-2.601 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id S9ABjc0YbNr2 for ; Thu, 2 Apr 2015 07:34:16 -0700 (PDT) Received: from mail-ob0-f177.google.com (mail-ob0-f177.google.com [209.85.214.177]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 6D03C1B2CD7 for ; Thu, 2 Apr 2015 07:34:06 -0700 (PDT) Received: by obbfy7 with SMTP id fy7so46572712obb.2 for ; Thu, 02 Apr 2015 07:34:05 -0700 (PDT) X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:message-id:date:from:user-agent:mime-version:to :subject:references:in-reply-to:content-type :content-transfer-encoding; bh=FFM7Yin2VxuKOLVUBsz0td/h+G1Fq3bnRbR0ec0/IfQ=; b=fIM9uH37zw6v7pzbltZmWRlEeOB39IkWpgrF6LIdfJlsPt+j7+F7OuW4IXxu0kB59p 8FCquAA0R6pDsP0HRYF75sAtgfLjRgyAalG6ajl6x0A/AQnOhiht6rQoiy625H5Fdlmi iBmM5Je8l/2E3/XY4znwdLU4IIUbQV9DGkdvWthlSIxWlPtKyAEZRQDC0RvNFli4lICy QM+iXOBNU6fe/QR5bagNKO1Y8CQdLNxn5QrKHLuuzyV1wTe39V/EvNs6wFFrDSy9OCDT t5IJiTFTRSA0a6LLKpQgxsxRV/9w6p3nq+aN/zBZVaANXrIdZgM3YsuBIIn+y2h9Dv3h VoMw== X-Gm-Message-State: ALoCoQm1j25HWv3V+Xy9jZIM0ZXbTnX379a6MjMsDeeMY+6omzR1cx+XrQ6pXOJbjEgEEOyoL2CY X-Received: by 10.60.145.137 with SMTP id su9mr46746485oeb.40.1427985245846; Thu, 02 Apr 2015 07:34:05 -0700 (PDT) Received: from [192.168.1.43] (modemcable233.42-178-173.mc.videotron.ca. [173.178.42.233]) by mx.google.com with ESMTPSA id z5sm4509557obx.14.2015.04.02.07.34.04 (version=TLSv1.2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Thu, 02 Apr 2015 07:34:04 -0700 (PDT) Message-ID: <551D535A.6000600@jive.com> Date: Thu, 02 Apr 2015 10:34:02 -0400 From: Simon Perreault User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.10; rv:31.0) Gecko/20100101 Thunderbird/31.5.0 MIME-Version: 1.0 To: "Tirumaleswar Reddy (tireddy)" , Marc Petit-Huguenin , "tram@ietf.org" References: <20150327075539.26326.49374.idtracker@ietfa.amsl.com> <551A9620.5010405@acm.org> <913383AAA69FF945B8F946018B75898A411F9D69@xmb-rcd-x10.cisco.com> <551C4EEA.3080505@acm.org> <913383AAA69FF945B8F946018B75898A411FA00A@xmb-rcd-x10.cisco.com> <551D3651.1010700@jive.com> <913383AAA69FF945B8F946018B75898A411FA5C8@xmb-rcd-x10.cisco.com> In-Reply-To: <913383AAA69FF945B8F946018B75898A411FA5C8@xmb-rcd-x10.cisco.com> Content-Type: text/plain; charset=windows-1252 Content-Transfer-Encoding: 8bit Archived-At: Subject: Re: [tram] I-D Action: draft-ietf-tram-stunbis-04.txt X-BeenThere: tram@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "Discussing the creation of a Turn Revised And Modernized \(TRAM\) WG, which goal is to consolidate the various initiatives to update TURN and STUN." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 02 Apr 2015 14:34:17 -0000 Le 2015-04-02 09:55, Tirumaleswar Reddy (tireddy) a écrit : > It may be problem if the client with multiple interfaces discovers multiple TURN servers on each interface and the client has to send 2MI attributes to each discovered TURN server. Really? We're talking about an extra 24 bytes on one packet per interface per TURN server. That's much less than what's required for connectivity checks. And keep in mind that the goal is real-time audio/video! > I don't understand How it is better than the approach of server signaling the algorithms it supports to the client ? My understanding from discussions is that negotiation is neither necessary nor desirable. We don't want to end up in the same situation as TLS. I see avoiding negotiation as the major reason why this approach is being proposed. > Why not add algorithm agility just like other protocols do so that there is no need to add new MI every few years ? > We should consider the guidance given in https://tools.ietf.org/html/draft-iab-crypto-alg-agility-02 Adding a new MI attribute *is* agility. The alternative is adding a new negotiation-sub-attribute every few years. Doesn't change anything fundamentally. Simon From nobody Thu Apr 2 08:12:07 2015 Return-Path: X-Original-To: tram@ietfa.amsl.com Delivered-To: tram@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 1BE731AC427 for ; Thu, 2 Apr 2015 08:12:06 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -14.511 X-Spam-Level: X-Spam-Status: No, score=-14.511 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_HI=-5, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 7KWg4p77dYYC for ; Thu, 2 Apr 2015 08:12:04 -0700 (PDT) Received: from alln-iport-2.cisco.com (alln-iport-2.cisco.com [173.37.142.89]) (using TLSv1 with cipher RC4-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id B51061B2D00 for ; Thu, 2 Apr 2015 08:12:03 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=2175; q=dns/txt; s=iport; t=1427987523; x=1429197123; h=from:to:subject:date:message-id:references:in-reply-to: content-transfer-encoding:mime-version; bh=MIhtdB+n4aVZwMpUR3D0ofvnWxteLrySBPcqpNim3pQ=; b=EIIfvmJiVITz50jPsaPiYHHq3DvSjR2WoLWAqFMQ6cT/JwQy/dLuOIe8 mu08uH+/wosR9RDqaziV5kYohvP2D4hsY0lzTb498uCkQNSEsEcojEGGU bsMsboOObck2dF6GEyBaq1wNKxPzXiqJ41naOlLGUnyaOKxdXAOP8QTZl A=; X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: A0BXBwDdWx1V/51dJa1cgwhSXAXDHoJBhXECgUZMAQEBAQEBfoQeAQEBAwGBBQQCAQgOAwQBAQsdBzIUCQgCBAESCIgfCA3NewEBAQEBAQEBAQEBAQEBAQEBAQEBARMEiymELho4BoMRgRYFinGFeYN1mlMigX8CHYFQbwGBQ38BAQE X-IronPort-AV: E=Sophos;i="5.11,511,1422921600"; d="scan'208";a="137712515" Received: from rcdn-core-6.cisco.com ([173.37.93.157]) by alln-iport-2.cisco.com with ESMTP; 02 Apr 2015 15:12:03 +0000 Received: from xhc-rcd-x15.cisco.com (xhc-rcd-x15.cisco.com [173.37.183.89]) by rcdn-core-6.cisco.com (8.14.5/8.14.5) with ESMTP id t32FC2wB030130 (version=TLSv1/SSLv3 cipher=AES128-SHA bits=128 verify=FAIL); Thu, 2 Apr 2015 15:12:02 GMT Received: from xmb-rcd-x10.cisco.com ([169.254.15.175]) by xhc-rcd-x15.cisco.com ([173.37.183.89]) with mapi id 14.03.0195.001; Thu, 2 Apr 2015 10:12:02 -0500 From: "Tirumaleswar Reddy (tireddy)" To: Simon Perreault , Marc Petit-Huguenin , "tram@ietf.org" Thread-Topic: [tram] I-D Action: draft-ietf-tram-stunbis-04.txt Thread-Index: AQHQaGNuoZDCdCmZDEWaGyqE4xHEdJ024z0AgAGBvuCAAIu4AIAAC3QwgAEIZ4D//8DOcIAAYc8A//+w5BA= Date: Thu, 2 Apr 2015 15:12:02 +0000 Message-ID: <913383AAA69FF945B8F946018B75898A411FA6F5@xmb-rcd-x10.cisco.com> References: <20150327075539.26326.49374.idtracker@ietfa.amsl.com> <551A9620.5010405@acm.org> <913383AAA69FF945B8F946018B75898A411F9D69@xmb-rcd-x10.cisco.com> <551C4EEA.3080505@acm.org> <913383AAA69FF945B8F946018B75898A411FA00A@xmb-rcd-x10.cisco.com> <551D3651.1010700@jive.com> <913383AAA69FF945B8F946018B75898A411FA5C8@xmb-rcd-x10.cisco.com> <551D535A.6000600@jive.com> In-Reply-To: <551D535A.6000600@jive.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.65.39.196] Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 Archived-At: Subject: Re: [tram] I-D Action: draft-ietf-tram-stunbis-04.txt X-BeenThere: tram@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "Discussing the creation of a Turn Revised And Modernized \(TRAM\) WG, which goal is to consolidate the various initiatives to update TURN and STUN." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 02 Apr 2015 15:12:06 -0000 > -----Original Message----- > From: Simon Perreault [mailto:sperreault@jive.com] > Sent: Thursday, April 02, 2015 8:04 PM > To: Tirumaleswar Reddy (tireddy); Marc Petit-Huguenin; tram@ietf.org > Subject: Re: [tram] I-D Action: draft-ietf-tram-stunbis-04.txt >=20 > Le 2015-04-02 09:55, Tirumaleswar Reddy (tireddy) a =E9crit : > > It may be problem if the client with multiple interfaces discovers mult= iple > TURN servers on each interface and the client has to send 2MI attributes = to > each discovered TURN server. >=20 > Really? We're talking about an extra 24 bytes on one packet per interface > per TURN server. That's much less than what's required for connectivity > checks. And keep in mind that the goal is real-time audio/video! Yes, but why not avoid this overhead ? >=20 > > I don't understand How it is better than the approach of server signali= ng > the algorithms it supports to the client ? >=20 > My understanding from discussions is that negotiation is neither necessar= y > nor desirable. We don't want to end up in the same situation as TLS. I se= e > avoiding negotiation as the major reason why this approach is being > proposed. What is the problem with negotiation ? >=20 > > Why not add algorithm agility just like other protocols do so that ther= e is > no need to add new MI every few years ? > > We should consider the guidance given in > > https://tools.ietf.org/html/draft-iab-crypto-alg-agility-02 >=20 > Adding a new MI attribute *is* agility. The alternative is adding a new > negotiation-sub-attribute every few years. Doesn't change anything > fundamentally. An approach where server signals algorithm ID it supports (HMAC algorithm I= D are defined by IANA https://tools.ietf.org/html/rfc4868#section-4) and th= e client picks one of them it supports; conveys the algorithm it selected i= n the new MI2 attribute solves the problem. In this approach there is no ne= ed to add new MI attribute or new attributes for hash agility. We used similar approach for PCP authentication https://tools.ietf.org/html= /draft-ietf-pcp-authentication-07#section-5.8 -Tiru >=20 > Simon From nobody Thu Apr 2 10:55:13 2015 Return-Path: X-Original-To: tram@ietfa.amsl.com Delivered-To: tram@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 44C2F1B2D5C for ; Thu, 2 Apr 2015 10:55:12 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.611 X-Spam-Level: X-Spam-Status: No, score=-2.611 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 4yVT5s9DL5OF for ; Thu, 2 Apr 2015 10:55:04 -0700 (PDT) Received: from prod-mail-xrelay07.akamai.com (prod-mail-xrelay07.akamai.com [72.246.2.115]) by ietfa.amsl.com (Postfix) with ESMTP id D2BB51B2D64 for ; Thu, 2 Apr 2015 10:55:03 -0700 (PDT) Received: from prod-mail-xrelay07.akamai.com (localhost.localdomain [127.0.0.1]) by postfix.imss70 (Postfix) with ESMTP id 3D82947679 for ; Thu, 2 Apr 2015 17:55:03 +0000 (GMT) Received: from prod-mail-relay06.akamai.com (prod-mail-relay06.akamai.com [172.17.120.126]) by prod-mail-xrelay07.akamai.com (Postfix) with ESMTP id 2AE7A47677 for ; Thu, 2 Apr 2015 17:55:03 +0000 (GMT) Received: from [172.28.115.172] (bowill.kendall.corp.akamai.com [172.28.115.172]) by prod-mail-relay06.akamai.com (Postfix) with ESMTP id 26F2F202E for ; Thu, 2 Apr 2015 17:55:03 +0000 (GMT) Message-ID: <551D8277.1060000@akamai.com> Date: Thu, 02 Apr 2015 13:55:03 -0400 From: Brandon Williams User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:31.0) Gecko/20100101 Thunderbird/31.5.0 MIME-Version: 1.0 To: tram@ietf.org References: <913383AAA69FF945B8F946018B75898A411F90DF@xmb-rcd-x10.cisco.com> In-Reply-To: Content-Type: text/plain; charset=windows-1252; format=flowed Content-Transfer-Encoding: 7bit Archived-At: Subject: Re: [tram] Adoption of draft-reddy-tram-stun-path-data-01 X-BeenThere: tram@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "Discussing the creation of a Turn Revised And Modernized \(TRAM\) WG, which goal is to consolidate the various initiatives to update TURN and STUN." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 02 Apr 2015 17:55:12 -0000 +1 On 03/31/2015 11:59 AM, Oleg Moskalenko wrote: > On Tue, Mar 31, 2015 at 5:23 AM, Tirumaleswar Reddy (tireddy) > wrote: >>> -----Original Message----- >>> From: tram [mailto:tram-bounces@ietf.org] On Behalf Of Oleg Moskalenko >>> Sent: Tuesday, March 31, 2015 12:25 PM >>> To: Martin Thomson >>> Cc: Simon Perreault; tram@ietf.org >>> Subject: Re: [tram] Adoption of draft-reddy-tram-stun-path-data-01 >>> >>> I agree with Martin that the PATH-CHARACTERISTIC attribute is confusing: >>> >>> 1) In the request it has 4 bytes (1+3), in the response in has 8 bytes >>> (2+2+2+2) - that is bizarre. It would be a good style to keep the attribute of >>> the same size and structure, regardless of the attribute placement. >>> 2) The server is never doing any retransmissions for the responses; all >>> retransmissions in STUN are responsibility of the client. So, the ReqTransCnt >>> and RespTransCnt are always equal. The number of received requests is >>> always equal to the number of responses. So, why do we need two separate >>> fields for the same value ? >>> 3) Why ReTransCnt in the request occupies 1 bytes, but in the response the >>> same value takes 2 bytes ? That is very strange. >> >> Agreed on all the above points; will update the format of PATH-CHARACTERISTIC attribute as follows: >> >> 0 1 2 3 >> 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 >> +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ >> | Reserved, should be 0 | ReTransCnt | RespTransCnt | >> +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ >> >> RespTransCnt must be set to zero in request and ignored by the server. >> RespTransCnt could be zero in response (e.g. server is stateless). > > That's cool. I support the adoption. > > Thanks > Oleg > >> >>> >>> I agree with the usefulness of the approach and I think that the draft has to >>> be adopted >> >> Thanks, >> -Tiru >> >>> - but those things to be clarified before the adoption. >>> >>> Thanks >>> Oleg >>> >>> >>> On Mon, Mar 30, 2015 at 12:55 PM, Martin Thomson >>> wrote: >>>> On 27 March 2015 at 08:35, Simon Perreault wrote: >>>>> This is to confirm the adoption of draft-reddy-tram-stun-path-data-01 >>>>> as a working group draft. If anyone is opposed, now is a good time to >>>>> explain why. >>>> >>>> This looks fine in general, with one issue: >>>> >>>> Issue: >>>> ReTransCnt, ReqTransCnt and RespTransCnt are so similar that this is >>>> very confusing. When I finally parsed this, I realize that the server >>>> isn't going to have three piece of information; it only needs to a) >>>> echo the client's counter, and b) (if stateful) indicate how many >>>> times it has responded over time. As specified, I can't see any way >>>> that having the number of received messages being different to the >>>> number of responses is of any value. >>>> >>>> Finally, I think that you should specify a more regular form for the >>>> parameter. One byte of Client Retransmission Counter, and one byte of >>>> Server Retransmission Counter should be easy to understand. Zero >>>> being an indication that the sender didn't want to say for any reason, >>>> as currently specified. >>>> >>>> Nit: >>>> These metrics can then be used >>>> by the controlling agent to influence the ICE candidate pair >>>> priorities. >>>> Changing priorities is not possible, changing what might be selected is. >>>> >>>> _______________________________________________ >>>> tram mailing list >>>> tram@ietf.org >>>> https://www.ietf.org/mailman/listinfo/tram >>> >>> _______________________________________________ >>> tram mailing list >>> tram@ietf.org >>> https://www.ietf.org/mailman/listinfo/tram > > _______________________________________________ > tram mailing list > tram@ietf.org > https://www.ietf.org/mailman/listinfo/tram > -- Brandon Williams; Senior Principal Software Engineer Emerging Products Engineering; Akamai Technologies Inc. From nobody Thu Apr 2 10:57:31 2015 Return-Path: X-Original-To: tram@ietfa.amsl.com Delivered-To: tram@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C34F81B2D34 for ; Thu, 2 Apr 2015 10:57:28 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -14.511 X-Spam-Level: X-Spam-Status: No, score=-14.511 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_HI=-5, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id WtbqwPcU8uFS for ; Thu, 2 Apr 2015 10:57:26 -0700 (PDT) Received: from alln-iport-3.cisco.com (alln-iport-3.cisco.com [173.37.142.90]) (using TLSv1 with cipher RC4-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 9E5871A002D for ; Thu, 2 Apr 2015 10:57:26 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=4648; q=dns/txt; s=iport; t=1427997446; x=1429207046; h=from:to:subject:date:message-id:references:in-reply-to: content-id:content-transfer-encoding:mime-version; bh=b8mUOyZy7r/K8x10n2rHhuWaRvwNm8qv3f31fJ/B5Xs=; b=WW/cgEZKrTQ+GwN/Zuw1NT24H3RfVD1KAGnRMd902jpMXFYdubxUv+Wx YMMR6t72iOaGDgHAQwfBD2b2wNUa2TGpcORlI7YF3tvJu4MxGB/avK9bX cM1jF1+T7VmpTe7hXObF0l9nOkVwJgNym1/hmDz7P7XFetqjwotgCy8Si 0=; X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: A0BIBgAmgh1V/5RdJa1cgwhSXAXDHmYJgUYKhXMCgUs4FAEBAQEBAQF9hB4BAQEEAQEBNzQXBAIBCBEEAQEBHgkHIQYLFAkIAgQTiBsDEQ3ISQ2FRAEBAQEBAQEBAQEBAQEBAQEBAQEBARMEiymCR4FnUgaEJwWQaogzgU2BHYwuToYvIoF/H4FQb4FEfwEBAQ X-IronPort-AV: E=Sophos;i="5.11,512,1422921600"; d="scan'208";a="137730474" Received: from rcdn-core-12.cisco.com ([173.37.93.148]) by alln-iport-3.cisco.com with ESMTP; 02 Apr 2015 17:57:25 +0000 Received: from xhc-aln-x12.cisco.com (xhc-aln-x12.cisco.com [173.36.12.86]) by rcdn-core-12.cisco.com (8.14.5/8.14.5) with ESMTP id t32HvP28019789 (version=TLSv1/SSLv3 cipher=AES128-SHA bits=128 verify=FAIL) for ; Thu, 2 Apr 2015 17:57:25 GMT Received: from xmb-rcd-x07.cisco.com ([169.254.7.143]) by xhc-aln-x12.cisco.com ([173.36.12.86]) with mapi id 14.03.0195.001; Thu, 2 Apr 2015 12:57:25 -0500 From: "Prashanth Patil (praspati)" To: "tram@ietf.org" Thread-Topic: [tram] Adoption of draft-reddy-tram-stun-path-data-01 Thread-Index: AQHQbW552Ak6N1wXNkC/I0W/dlM/7w== Date: Thu, 2 Apr 2015 17:57:24 +0000 Message-ID: References: <913383AAA69FF945B8F946018B75898A411F90DF@xmb-rcd-x10.cisco.com> <551D8277.1060000@akamai.com> In-Reply-To: <551D8277.1060000@akamai.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/14.4.8.150116 x-originating-ip: [10.155.209.28] Content-Type: text/plain; charset="us-ascii" Content-ID: Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 Archived-At: Subject: Re: [tram] Adoption of draft-reddy-tram-stun-path-data-01 X-BeenThere: tram@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "Discussing the creation of a Turn Revised And Modernized \(TRAM\) WG, which goal is to consolidate the various initiatives to update TURN and STUN." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 02 Apr 2015 17:57:28 -0000 +1 On 4/2/15, 10:55 AM, "Brandon Williams" wrote: >+1 > >On 03/31/2015 11:59 AM, Oleg Moskalenko wrote: >> On Tue, Mar 31, 2015 at 5:23 AM, Tirumaleswar Reddy (tireddy) >> wrote: >>>> -----Original Message----- >>>> From: tram [mailto:tram-bounces@ietf.org] On Behalf Of Oleg Moskalenko >>>> Sent: Tuesday, March 31, 2015 12:25 PM >>>> To: Martin Thomson >>>> Cc: Simon Perreault; tram@ietf.org >>>> Subject: Re: [tram] Adoption of draft-reddy-tram-stun-path-data-01 >>>> >>>> I agree with Martin that the PATH-CHARACTERISTIC attribute is >>>>confusing: >>>> >>>> 1) In the request it has 4 bytes (1+3), in the response in has 8 bytes >>>> (2+2+2+2) - that is bizarre. It would be a good style to keep the >>>>attribute of >>>> the same size and structure, regardless of the attribute placement. >>>> 2) The server is never doing any retransmissions for the responses; >>>>all >>>> retransmissions in STUN are responsibility of the client. So, the >>>>ReqTransCnt >>>> and RespTransCnt are always equal. The number of received requests is >>>> always equal to the number of responses. So, why do we need two >>>>separate >>>> fields for the same value ? >>>> 3) Why ReTransCnt in the request occupies 1 bytes, but in the >>>>response the >>>> same value takes 2 bytes ? That is very strange. >>> >>> Agreed on all the above points; will update the format of >>>PATH-CHARACTERISTIC attribute as follows: >>> >>> 0 1 2 3 >>> 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 >>> =20 >>>+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ >>> | Reserved, should be 0 | ReTransCnt | RespTransCnt >>>| >>> =20 >>>+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ >>> >>> RespTransCnt must be set to zero in request and ignored by the server. >>> RespTransCnt could be zero in response (e.g. server is stateless). >> >> That's cool. I support the adoption. >> >> Thanks >> Oleg >> >>> >>>> >>>> I agree with the usefulness of the approach and I think that the >>>>draft has to >>>> be adopted >>> >>> Thanks, >>> -Tiru >>> >>>> - but those things to be clarified before the adoption. >>>> >>>> Thanks >>>> Oleg >>>> >>>> >>>> On Mon, Mar 30, 2015 at 12:55 PM, Martin Thomson >>>> wrote: >>>>> On 27 March 2015 at 08:35, Simon Perreault >>>>>wrote: >>>>>> This is to confirm the adoption of >>>>>>draft-reddy-tram-stun-path-data-01 >>>>>> as a working group draft. If anyone is opposed, now is a good time >>>>>>to >>>>>> explain why. >>>>> >>>>> This looks fine in general, with one issue: >>>>> >>>>> Issue: >>>>> ReTransCnt, ReqTransCnt and RespTransCnt are so similar that this is >>>>> very confusing. When I finally parsed this, I realize that the >>>>>server >>>>> isn't going to have three piece of information; it only needs to a) >>>>> echo the client's counter, and b) (if stateful) indicate how many >>>>> times it has responded over time. As specified, I can't see any way >>>>> that having the number of received messages being different to the >>>>> number of responses is of any value. >>>>> >>>>> Finally, I think that you should specify a more regular form for the >>>>> parameter. One byte of Client Retransmission Counter, and one byte >>>>>of >>>>> Server Retransmission Counter should be easy to understand. Zero >>>>> being an indication that the sender didn't want to say for any >>>>>reason, >>>>> as currently specified. >>>>> >>>>> Nit: >>>>> These metrics can then be used >>>>> by the controlling agent to influence the ICE candidate pair >>>>> priorities. >>>>> Changing priorities is not possible, changing what might be selected >>>>>is. >>>>> >>>>> _______________________________________________ >>>>> tram mailing list >>>>> tram@ietf.org >>>>> https://www.ietf.org/mailman/listinfo/tram >>>> >>>> _______________________________________________ >>>> tram mailing list >>>> tram@ietf.org >>>> https://www.ietf.org/mailman/listinfo/tram >> >> _______________________________________________ >> tram mailing list >> tram@ietf.org >> https://www.ietf.org/mailman/listinfo/tram >> > >--=20 >Brandon Williams; Senior Principal Software Engineer >Emerging Products Engineering; Akamai Technologies Inc. > >_______________________________________________ >tram mailing list >tram@ietf.org >https://www.ietf.org/mailman/listinfo/tram From nobody Thu Apr 2 11:05:06 2015 Return-Path: X-Original-To: tram@ietfa.amsl.com Delivered-To: tram@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 21A551B2D87 for ; Thu, 2 Apr 2015 11:05:06 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.211 X-Spam-Level: X-Spam-Status: No, score=-4.211 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 1kK-_0W_sLPQ for ; Thu, 2 Apr 2015 11:05:03 -0700 (PDT) Received: from prod-mail-xrelay02.akamai.com (prod-mail-xrelay02.akamai.com [72.246.2.14]) by ietfa.amsl.com (Postfix) with ESMTP id BCC971B2D80 for ; Thu, 2 Apr 2015 11:05:03 -0700 (PDT) Received: from prod-mail-xrelay02.akamai.com (localhost [127.0.0.1]) by postfix.imss70 (Postfix) with ESMTP id B92C02834B; Thu, 2 Apr 2015 18:05:02 +0000 (GMT) Received: from prod-mail-relay07.akamai.com (prod-mail-relay07.akamai.com [172.17.121.112]) by prod-mail-xrelay02.akamai.com (Postfix) with ESMTP id 939A7285A3; Thu, 2 Apr 2015 18:02:34 +0000 (GMT) Received: from [172.28.115.172] (unknown [172.28.115.172]) by prod-mail-relay07.akamai.com (Postfix) with ESMTP id 8A26B80047; Thu, 2 Apr 2015 18:02:34 +0000 (GMT) Message-ID: <551D843A.6000703@akamai.com> Date: Thu, 02 Apr 2015 14:02:34 -0400 From: Brandon Williams User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:31.0) Gecko/20100101 Thunderbird/31.5.0 MIME-Version: 1.0 To: Simon Perreault , "Tirumaleswar Reddy (tireddy)" , Marc Petit-Huguenin , "tram@ietf.org" References: <20150327075539.26326.49374.idtracker@ietfa.amsl.com> <551A9620.5010405@acm.org> <913383AAA69FF945B8F946018B75898A411F9D69@xmb-rcd-x10.cisco.com> <551C4EEA.3080505@acm.org> <913383AAA69FF945B8F946018B75898A411FA00A@xmb-rcd-x10.cisco.com> <551D3651.1010700@jive.com> <913383AAA69FF945B8F946018B75898A411FA5C8@xmb-rcd-x10.cisco.com> <551D535A.6000600@jive.com> In-Reply-To: <551D535A.6000600@jive.com> Content-Type: text/plain; charset=windows-1252; format=flowed Content-Transfer-Encoding: 8bit Archived-At: Subject: Re: [tram] I-D Action: draft-ietf-tram-stunbis-04.txt X-BeenThere: tram@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "Discussing the creation of a Turn Revised And Modernized \(TRAM\) WG, which goal is to consolidate the various initiatives to update TURN and STUN." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 02 Apr 2015 18:05:06 -0000 Considering the fact that the current draft calls for negotiation of the key derivation function, which seems a little unusual to me, I'm having trouble understanding why the WG is opposed to hash algorithm negotiation, which is more typical and could easily be folded into the existing KDF negotiation mechanism. That said, the current KDF negotiation only applies to the long-term credential method, not short-term, so maybe that answers my question. On the other hand, negotiation would be present for short-term credentials, I think, it would just be assumed to be out of band. Also, in my opinion, the currently defined method _is_ a negotiation mechansim. The client offers two options, the server picks one, and that's what's used for the rest of the session. I think the negotiation needs to be made a little more reliable, but I don't object to this being the method of choice. At the meeting, I didn't fully understand the argument that adding a new HMAC algorithm identifier to a registry would be just as much work adding a new MI attribute. It doesn't seem that updating a registry should require as much overhead as publishing a draft to add a new attribute. Am I missing something about that? Or was the argument that the implementation overhead would be roughly equal? --Brandon On 04/02/2015 10:34 AM, Simon Perreault wrote: > Le 2015-04-02 09:55, Tirumaleswar Reddy (tireddy) a écrit : >> It may be problem if the client with multiple interfaces discovers multiple TURN servers on each interface and the client has to send 2MI attributes to each discovered TURN server. > > Really? We're talking about an extra 24 bytes on one packet per > interface per TURN server. That's much less than what's required for > connectivity checks. And keep in mind that the goal is real-time > audio/video! > >> I don't understand How it is better than the approach of server signaling the algorithms it supports to the client ? > > My understanding from discussions is that negotiation is neither > necessary nor desirable. We don't want to end up in the same situation > as TLS. I see avoiding negotiation as the major reason why this approach > is being proposed. > >> Why not add algorithm agility just like other protocols do so that there is no need to add new MI every few years ? >> We should consider the guidance given in https://tools.ietf.org/html/draft-iab-crypto-alg-agility-02 > > Adding a new MI attribute *is* agility. The alternative is adding a new > negotiation-sub-attribute every few years. Doesn't change anything > fundamentally. > > Simon > > _______________________________________________ > tram mailing list > tram@ietf.org > https://www.ietf.org/mailman/listinfo/tram > -- Brandon Williams; Senior Principal Software Engineer Emerging Products Engineering; Akamai Technologies Inc. From nobody Thu Apr 2 11:10:36 2015 Return-Path: X-Original-To: tram@ietfa.amsl.com Delivered-To: tram@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 905DE1A0056 for ; Thu, 2 Apr 2015 11:10:35 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.211 X-Spam-Level: X-Spam-Status: No, score=-4.211 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id nT9mdlnObaFz for ; Thu, 2 Apr 2015 11:10:17 -0700 (PDT) Received: from prod-mail-xrelay02.akamai.com (prod-mail-xrelay02.akamai.com [72.246.2.14]) by ietfa.amsl.com (Postfix) with ESMTP id 111C51A002D for ; Thu, 2 Apr 2015 11:10:16 -0700 (PDT) Received: from prod-mail-xrelay02.akamai.com (localhost [127.0.0.1]) by postfix.imss70 (Postfix) with ESMTP id 6B79528521 for ; Thu, 2 Apr 2015 18:10:16 +0000 (GMT) Received: from prod-mail-relay07.akamai.com (prod-mail-relay07.akamai.com [172.17.121.112]) by prod-mail-xrelay02.akamai.com (Postfix) with ESMTP id 585612851B for ; Thu, 2 Apr 2015 18:10:16 +0000 (GMT) Received: from [172.28.115.172] (unknown [172.28.115.172]) by prod-mail-relay07.akamai.com (Postfix) with ESMTP id 4FC10800F7 for ; Thu, 2 Apr 2015 18:10:16 +0000 (GMT) Message-ID: <551D8608.709@akamai.com> Date: Thu, 02 Apr 2015 14:10:16 -0400 From: Brandon Williams User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:31.0) Gecko/20100101 Thunderbird/31.5.0 MIME-Version: 1.0 To: tram@ietf.org References: <20150326200603.5774.97401.idtracker@ietfa.amsl.com> <5514C516.2090109@acm.org> In-Reply-To: <5514C516.2090109@acm.org> Content-Type: text/plain; charset=windows-1252; format=flowed Content-Transfer-Encoding: 7bit Archived-At: Subject: Re: [tram] I-D Action: draft-ietf-tram-stunbis-03.txt X-BeenThere: tram@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "Discussing the creation of a Turn Revised And Modernized \(TRAM\) WG, which goal is to consolidate the various initiatives to update TURN and STUN." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 02 Apr 2015 18:10:35 -0000 I would prefer to see us fix the down bid attack rather than simply call it out. I think that it can be reasonably mitigated. I see these two options, and I'm sure there are others. 1. In cases where both MI and MI256 are being send, the client sends a comprehension optional attribute indicating that it is sending MI256. This attribute is covered by MI. The server can detect MITM down bid. 2. In cases where both MI and MI256 are received, the server's response includes a comprehension required attribute indicating that it received both. This attribute is covered by the MI256 attribute. The client can detect MITM down bid. I think either of these is a reasonable mitigation, and they are lighter weight than moving to (D)TLS. --Brandon On 03/26/2015 10:48 PM, Marc Petit-Huguenin wrote: > -----BEGIN PGP SIGNED MESSAGE----- > Hash: SHA256 > > Changelog for -03 (before the WG session in Dallas): > > o SCTP prefix is now 0b00000101 instead of 0x11. > o Add SCTP at various places it was needed. > o Update the hash agility plan to take in account HMAC-SHA-256. > o Adds the bid down attack on message-integrity in the security > section. > o Update RFC 4013 to I-D.ietf-precis-saslprepbis. > o Update RFc 5245 to rfc5245bis. > o Cleaned the IANA consideration section. > o Add sodium-free SHA256 password algorithm. > o Add rational for the NONCE magic prefix. > > On 03/26/2015 03:06 PM, internet-drafts@ietf.org wrote: >> >> A New Internet-Draft is available from the on-line Internet-Drafts directories. >> This draft is a work item of the TURN Revised and Modernized Working Group of the IETF. >> >> Title : Session Traversal Utilities for NAT (STUN) >> Authors : Marc Petit-Huguenin >> Gonzalo Salgueiro >> Jonathan Rosenberg >> Dan Wing >> Rohan Mahy >> Philip Matthews >> Filename : draft-ietf-tram-stunbis-03.txt >> Pages : 58 >> Date : 2015-03-26 >> >> Abstract: >> Session Traversal Utilities for NAT (STUN) is a protocol that serves >> as a tool for other protocols in dealing with Network Address >> Translator (NAT) traversal. It can be used by an endpoint to >> determine the IP address and port allocated to it by a NAT. It can >> also be used to check connectivity between two endpoints, and as a >> keep-alive protocol to maintain NAT bindings. STUN works with many >> existing NATs, and does not require any special behavior from them. >> >> STUN is not a NAT traversal solution by itself. Rather, it is a tool >> to be used in the context of a NAT traversal solution. >> >> This document obsoletes RFC 5389. >> >> >> The IETF datatracker status page for this draft is: >> https://datatracker.ietf.org/doc/draft-ietf-tram-stunbis/ >> >> There's also a htmlized version available at: >> http://tools.ietf.org/html/draft-ietf-tram-stunbis-03 >> >> A diff from the previous version is available at: >> http://www.ietf.org/rfcdiff?url2=draft-ietf-tram-stunbis-03 >> >> >> Please note that it may take a couple of minutes from the time of submission >> until the htmlized version and diff are available at tools.ietf.org. >> >> Internet-Drafts are also available by anonymous FTP at: >> ftp://ftp.ietf.org/internet-drafts/ >> >> _______________________________________________ >> tram mailing list >> tram@ietf.org >> https://www.ietf.org/mailman/listinfo/tram >> > > > - -- > Marc Petit-Huguenin > Email: marc@petit-huguenin.org > Blog: http://blog.marc.petit-huguenin.org > Profile: http://www.linkedin.com/in/petithug > -----BEGIN PGP SIGNATURE----- > Version: GnuPG v1 > > iQIcBAEBCAAGBQJVFMUWAAoJECnERZXWan7E8J0P/1FV617SPGg81mmVDvcobGkg > PfPeFN7zIIY8Xs6J/0DqXUQ5+rBqXwjscBWoYNz7/zBercGuKHMEvRV8efPpTq/3 > +OCEXhInOPJtqwTtOTcFKNe4qupbMwWZQHOGU72NDqigIKc44jDis1ioFyeK/t9P > iNnmvxtB20yojVB2ZrANgvvo6FgSEl2kGyOOySeUVbhGtq0kK21z6eqALL1NdS+4 > YJV7B0P6MxG6sg+t5B+I+m7AfQMv6zspEPLxewrIjI9LHIcdVAJW44Mgvp1kIyng > NNa9ZhRIYGNAguLaGTSVClLt9UY2kXUSStPrRvH3bpZ42VyuoYdHHBe38tFt65ob > VTMD24FgFgsDJBUrQQvkY9eA+cGzZJSOXj35tuy/7JYK2Ryw1lW1uwpS+4lBcWRp > tQ6iF9FQ/jq9mIEx2CX8ZiCrhrAMvTs+BmkFxqwI4zEFcAWRASouRekqnMJ0MVFM > rvunKw0Vo7wVwlBxmV1wafZ/Z5NnaUQc4s+NtqzFNrYAzTd1PyVdA7QWIlrMx7vc > hpw4mi/r1mpDD77qba+wzK2wx6P+fquY56UnKdMIC+Xlf/+ggkdDYlSxw+e6jw7S > GtDPrjV4lyV0OsdBleVHeGRAfRwmM7tAw0hQzfduux5Z5Z20i/DpIPLiRK3Wr8yc > XL1B1EJN+ztbLBdJupEJ > =gQ7G > -----END PGP SIGNATURE----- > > _______________________________________________ > tram mailing list > tram@ietf.org > https://www.ietf.org/mailman/listinfo/tram > -- Brandon Williams; Senior Principal Software Engineer Emerging Products Engineering; Akamai Technologies Inc. From nobody Thu Apr 2 11:21:18 2015 Return-Path: X-Original-To: tram@ietfa.amsl.com Delivered-To: tram@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 5C30F1A03D5 for ; Thu, 2 Apr 2015 11:21:17 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.611 X-Spam-Level: X-Spam-Status: No, score=-2.611 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id QAgEVJOp5fLt for ; Thu, 2 Apr 2015 11:21:15 -0700 (PDT) Received: from prod-mail-xrelay07.akamai.com (prod-mail-xrelay07.akamai.com [72.246.2.115]) by ietfa.amsl.com (Postfix) with ESMTP id BE3C91A03C7 for ; Thu, 2 Apr 2015 11:21:15 -0700 (PDT) Received: from prod-mail-xrelay07.akamai.com (localhost.localdomain [127.0.0.1]) by postfix.imss70 (Postfix) with ESMTP id 2ABE347734 for ; Thu, 2 Apr 2015 18:21:15 +0000 (GMT) Received: from prod-mail-relay07.akamai.com (prod-mail-relay07.akamai.com [172.17.121.112]) by prod-mail-xrelay07.akamai.com (Postfix) with ESMTP id 1F2B1476C8 for ; Thu, 2 Apr 2015 18:21:15 +0000 (GMT) Received: from [172.28.115.172] (unknown [172.28.115.172]) by prod-mail-relay07.akamai.com (Postfix) with ESMTP id F3BAA80052 for ; Thu, 2 Apr 2015 18:21:14 +0000 (GMT) Message-ID: <551D889A.2070206@akamai.com> Date: Thu, 02 Apr 2015 14:21:14 -0400 From: Brandon Williams User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:31.0) Gecko/20100101 Thunderbird/31.5.0 MIME-Version: 1.0 To: "tram@ietf.org" Content-Type: text/plain; charset=utf-8; format=flowed Content-Transfer-Encoding: 7bit Archived-At: Subject: [tram] support for adoption of peer-redirect? X-BeenThere: tram@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "Discussing the creation of a Turn Revised And Modernized \(TRAM\) WG, which goal is to consolidate the various initiatives to update TURN and STUN." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 02 Apr 2015 18:21:17 -0000 Hi all, We ran out of time at the Dallas meeting for me to present my updates to the peer-redirect draft. Back in Toronto, we weren't adding milestones because we hadn't made progress on stunbis and turnbis yet, so I didn't have a chance to ask about adoption there either. So ... I would like to ask for WG adoption of this draft. Do you support adoption? If not, are there updates that could be made that would allow you to support adoption? The authors will very much appreciate WG feedback on this effort. Thanks, --Brandon PS: Here is the presentation that I intended to give in Dallas. http://www.ietf.org/proceedings/92/slides/slides-92-tram-1.pdf It summarizes the changes since version 01 which was presented in Toronto. Here is a link to the full draft. https://tools.ietf.org/html/draft-williams-peer-redirect -- Brandon Williams; Senior Principal Software Engineer Emerging Products Engineering; Akamai Technologies Inc. From nobody Thu Apr 2 11:27:26 2015 Return-Path: X-Original-To: tram@ietfa.amsl.com Delivered-To: tram@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id B8B0A1A014E for ; Thu, 2 Apr 2015 11:27:23 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -14.511 X-Spam-Level: X-Spam-Status: No, score=-14.511 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_HI=-5, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ADZYJ9BPmUPo for ; Thu, 2 Apr 2015 11:27:21 -0700 (PDT) Received: from alln-iport-5.cisco.com (alln-iport-5.cisco.com [173.37.142.92]) (using TLSv1 with cipher RC4-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 6600A1A0086 for ; Thu, 2 Apr 2015 11:27:21 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=4690; q=dns/txt; s=iport; t=1427999241; x=1429208841; h=from:to:cc:subject:date:message-id:references: in-reply-to:content-id:content-transfer-encoding: mime-version; bh=hjCYCQoH3bVnsLPEmZiC1P4E/l2zwvf4RLR+BmYhrRQ=; b=nI4Solq5MiyOW926OI3WjFOfSx/tXyUfA/7dpr6bYDoFold9W2EZHn93 14YcIPUR939wk6btBDAhGK4eIaSBnEhgilcfDCH4Weu1d3nng+x2KKblE vSHqcc15EtLXw3bKFksofPNmZhUEprybhggFGMv4jgx0HgsTxw09a9QtF U=; X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: A0A7CQDZiB1V/5ldJa1cgwhSXAXDIYI2CoV9AoFLTAEBAQEBAX6EHgEBAQMBAQEBNzQLBQcEAgEIEQQBAQEeCQchBgsUCQgCBA4FiBsDCQgNyEcNhUQBAQEBAQEBAQEBAQEBAQEBAQEBAQETBIspgkeBZxgzBwaDEYEWBZBqiDOBTYEdjC5Ohi8iggAfgVBvgUR/AQEB X-IronPort-AV: E=Sophos;i="5.11,512,1422921600"; d="scan'208";a="137781185" Received: from rcdn-core-2.cisco.com ([173.37.93.153]) by alln-iport-5.cisco.com with ESMTP; 02 Apr 2015 18:27:20 +0000 Received: from xhc-rcd-x11.cisco.com (xhc-rcd-x11.cisco.com [173.37.183.85]) by rcdn-core-2.cisco.com (8.14.5/8.14.5) with ESMTP id t32IRKl2017023 (version=TLSv1/SSLv3 cipher=AES128-SHA bits=128 verify=FAIL); Thu, 2 Apr 2015 18:27:20 GMT Received: from xmb-rcd-x04.cisco.com ([169.254.8.112]) by xhc-rcd-x11.cisco.com ([173.37.183.85]) with mapi id 14.03.0195.001; Thu, 2 Apr 2015 13:27:20 -0500 From: "Gonzalo Salgueiro (gsalguei)" To: Brandon Williams Thread-Topic: [tram] Adoption of draft-reddy-tram-stun-path-data-01 Thread-Index: AQHQbW4l4Y4vs+i4kU+MtSC501VEbJ06XlUA Date: Thu, 2 Apr 2015 18:27:20 +0000 Message-ID: References: <913383AAA69FF945B8F946018B75898A411F90DF@xmb-rcd-x10.cisco.com> <551D8277.1060000@akamai.com> In-Reply-To: <551D8277.1060000@akamai.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.82.251.44] Content-Type: text/plain; charset="us-ascii" Content-ID: Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 Archived-At: Cc: tram mailing list Subject: Re: [tram] Adoption of draft-reddy-tram-stun-path-data-01 X-BeenThere: tram@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "Discussing the creation of a Turn Revised And Modernized \(TRAM\) WG, which goal is to consolidate the various initiatives to update TURN and STUN." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 02 Apr 2015 18:27:23 -0000 +1 -G > On Apr 2, 2015, at 1:55 PM, Brandon Williams wrote: >=20 > +1 >=20 > On 03/31/2015 11:59 AM, Oleg Moskalenko wrote: >> On Tue, Mar 31, 2015 at 5:23 AM, Tirumaleswar Reddy (tireddy) >> wrote: >>>> -----Original Message----- >>>> From: tram [mailto:tram-bounces@ietf.org] On Behalf Of Oleg Moskalenko >>>> Sent: Tuesday, March 31, 2015 12:25 PM >>>> To: Martin Thomson >>>> Cc: Simon Perreault; tram@ietf.org >>>> Subject: Re: [tram] Adoption of draft-reddy-tram-stun-path-data-01 >>>>=20 >>>> I agree with Martin that the PATH-CHARACTERISTIC attribute is confusin= g: >>>>=20 >>>> 1) In the request it has 4 bytes (1+3), in the response in has 8 bytes >>>> (2+2+2+2) - that is bizarre. It would be a good style to keep the attr= ibute of >>>> the same size and structure, regardless of the attribute placement. >>>> 2) The server is never doing any retransmissions for the responses; al= l >>>> retransmissions in STUN are responsibility of the client. So, the ReqT= ransCnt >>>> and RespTransCnt are always equal. The number of received requests is >>>> always equal to the number of responses. So, why do we need two separa= te >>>> fields for the same value ? >>>> 3) Why ReTransCnt in the request occupies 1 bytes, but in the response= the >>>> same value takes 2 bytes ? That is very strange. >>>=20 >>> Agreed on all the above points; will update the format of PATH-CHARACTE= RISTIC attribute as follows: >>>=20 >>> 0 1 2 3 >>> 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 >>> +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ >>> | Reserved, should be 0 | ReTransCnt | RespTransCnt | >>> +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ >>>=20 >>> RespTransCnt must be set to zero in request and ignored by the server. >>> RespTransCnt could be zero in response (e.g. server is stateless). >>=20 >> That's cool. I support the adoption. >>=20 >> Thanks >> Oleg >>=20 >>>=20 >>>>=20 >>>> I agree with the usefulness of the approach and I think that the draft= has to >>>> be adopted >>>=20 >>> Thanks, >>> -Tiru >>>=20 >>>> - but those things to be clarified before the adoption. >>>>=20 >>>> Thanks >>>> Oleg >>>>=20 >>>>=20 >>>> On Mon, Mar 30, 2015 at 12:55 PM, Martin Thomson >>>> wrote: >>>>> On 27 March 2015 at 08:35, Simon Perreault wrot= e: >>>>>> This is to confirm the adoption of draft-reddy-tram-stun-path-data-0= 1 >>>>>> as a working group draft. If anyone is opposed, now is a good time t= o >>>>>> explain why. >>>>>=20 >>>>> This looks fine in general, with one issue: >>>>>=20 >>>>> Issue: >>>>> ReTransCnt, ReqTransCnt and RespTransCnt are so similar that this is >>>>> very confusing. When I finally parsed this, I realize that the serve= r >>>>> isn't going to have three piece of information; it only needs to a) >>>>> echo the client's counter, and b) (if stateful) indicate how many >>>>> times it has responded over time. As specified, I can't see any way >>>>> that having the number of received messages being different to the >>>>> number of responses is of any value. >>>>>=20 >>>>> Finally, I think that you should specify a more regular form for the >>>>> parameter. One byte of Client Retransmission Counter, and one byte o= f >>>>> Server Retransmission Counter should be easy to understand. Zero >>>>> being an indication that the sender didn't want to say for any reason= , >>>>> as currently specified. >>>>>=20 >>>>> Nit: >>>>> These metrics can then be used >>>>> by the controlling agent to influence the ICE candidate pair >>>>> priorities. >>>>> Changing priorities is not possible, changing what might be selected = is. >>>>>=20 >>>>> _______________________________________________ >>>>> tram mailing list >>>>> tram@ietf.org >>>>> https://www.ietf.org/mailman/listinfo/tram >>>>=20 >>>> _______________________________________________ >>>> tram mailing list >>>> tram@ietf.org >>>> https://www.ietf.org/mailman/listinfo/tram >>=20 >> _______________________________________________ >> tram mailing list >> tram@ietf.org >> https://www.ietf.org/mailman/listinfo/tram >>=20 >=20 > --=20 > Brandon Williams; Senior Principal Software Engineer > Emerging Products Engineering; Akamai Technologies Inc. >=20 > _______________________________________________ > tram mailing list > tram@ietf.org > https://www.ietf.org/mailman/listinfo/tram From nobody Thu Apr 2 11:27:55 2015 Return-Path: X-Original-To: tram@ietfa.amsl.com Delivered-To: tram@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 5D4C71A037C for ; Thu, 2 Apr 2015 11:27:53 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.601 X-Spam-Level: X-Spam-Status: No, score=-2.601 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id xvjlNMlX2jwG for ; Thu, 2 Apr 2015 11:27:52 -0700 (PDT) Received: from mail-qc0-f180.google.com (mail-qc0-f180.google.com [209.85.216.180]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 6A2701A0195 for ; Thu, 2 Apr 2015 11:27:50 -0700 (PDT) Received: by qcrf4 with SMTP id f4so61422897qcr.0 for ; Thu, 02 Apr 2015 11:27:49 -0700 (PDT) X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:message-id:date:from:user-agent:mime-version:to :subject:references:in-reply-to:content-type :content-transfer-encoding; bh=qMSyKl7IKwsEfXyT+bshc0pF+mmWQFOQ4Fw7nfZg6qQ=; b=TN1pdpkn+2rHHly4woA+iBdqdYAyk7l6EUG4OZfdeMNlS+OGsJWpkzsITseG/QOLsu GEEy8HrZpurXY6vVPh8/DKWtC7fWcs2xDmHsoC+/L9xggvj93KO+w2W7x31jeR7O958L hTQKdIIgmVd5JAUlhmQzdsvYpVpDSyLP0JV5Tr6/0YDXsvPHBaaS79vMWZnecNKU0FXn lNPIX6MLse0PA+xfAWtunKXsVU6Q6efvjsbT4FZRpCgmWtL+9ko43vUt/JvNW7ayP05A Dtur/OgKUy3birH1K7/wXGda5fIMb3lEHivN5yIVyUyQVecmi55Q5eW2zGg3os2bYrpN g/UA== X-Gm-Message-State: ALoCoQmvXuiraYQHuuXgWOkp4hvGlEa7/UK+BUN3kTkn+vEKywe71dXaXSbuAN08QLifo+jQQIkS X-Received: by 10.55.25.228 with SMTP id 97mr3973394qkz.105.1427999269711; Thu, 02 Apr 2015 11:27:49 -0700 (PDT) Received: from Simons-MacBook-Air.local (modemcable233.42-178-173.mc.videotron.ca. [173.178.42.233]) by mx.google.com with ESMTPSA id 187sm3991776qhv.8.2015.04.02.11.27.48 (version=TLSv1.2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Thu, 02 Apr 2015 11:27:48 -0700 (PDT) Message-ID: <551D8A23.7010702@jive.com> Date: Thu, 02 Apr 2015 14:27:47 -0400 From: Simon Perreault User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.10; rv:31.0) Gecko/20100101 Thunderbird/31.5.0 MIME-Version: 1.0 To: Brandon Williams , "Tirumaleswar Reddy (tireddy)" , Marc Petit-Huguenin , "tram@ietf.org" References: <20150327075539.26326.49374.idtracker@ietfa.amsl.com> <551A9620.5010405@acm.org> <913383AAA69FF945B8F946018B75898A411F9D69@xmb-rcd-x10.cisco.com> <551C4EEA.3080505@acm.org> <913383AAA69FF945B8F946018B75898A411FA00A@xmb-rcd-x10.cisco.com> <551D3651.1010700@jive.com> <913383AAA69FF945B8F946018B75898A411FA5C8@xmb-rcd-x10.cisco.com> <551D535A.6000600@jive.com> <551D843A.6000703@akamai.com> In-Reply-To: <551D843A.6000703@akamai.com> Content-Type: text/plain; charset=windows-1252 Content-Transfer-Encoding: 8bit Archived-At: Subject: Re: [tram] I-D Action: draft-ietf-tram-stunbis-04.txt X-BeenThere: tram@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "Discussing the creation of a Turn Revised And Modernized \(TRAM\) WG, which goal is to consolidate the various initiatives to update TURN and STUN." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 02 Apr 2015 18:27:53 -0000 Le 2015-04-02 14:02, Brandon Williams a écrit : > Also, in my opinion, the currently defined method _is_ a negotiation > mechansim. The client offers two options, the server picks one, and > that's what's used for the rest of the session. Yes and no. I see it as a backwards-compatibility mechanism. If you support MI2, then you use MI2. You have no choice. In my understanding, egotiation implies choice and configurability. For example on a TLS server or client you configure the crypto suites you are willing to use and their priorities for negotiation. I would prefer not having to configure this sort of thing in STUN. > At the meeting, I didn't fully understand the argument that adding a new > HMAC algorithm identifier to a registry would be just as much work > adding a new MI attribute. It doesn't seem that updating a registry > should require as much overhead as publishing a draft to add a new > attribute. It depends. The registration rules for the STUN attributes registry are either "IETF Review" or "Designated Expert". In theory we could create a new HMAC algorithm identifier registry with a bar lower than "Designated Expert". The question is whether we would really want such a low bar. Or we could reuse an existing IANA registry and automatically import quite a few algorithms into STUN. Or modify an existing one and add an "allowed in STUN" column. Or, since we're doing STUN-bis, we could take a range of STUN attributes and lower the bar further, maybe even to "First Come First Served". The point is that a new STUN attribute is not necessarily harder to get than a new HMAC algorithm identifier. Simon From nobody Thu Apr 2 11:42:10 2015 Return-Path: X-Original-To: tram@ietfa.amsl.com Delivered-To: tram@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id DA76C1A0404 for ; Thu, 2 Apr 2015 11:42:07 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -14.511 X-Spam-Level: X-Spam-Status: No, score=-14.511 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_HI=-5, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id F_VLisAy84Qi for ; Thu, 2 Apr 2015 11:42:06 -0700 (PDT) Received: from alln-iport-1.cisco.com (alln-iport-1.cisco.com [173.37.142.88]) (using TLSv1 with cipher RC4-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 6585D1A03C7 for ; Thu, 2 Apr 2015 11:42:06 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=2194; q=dns/txt; s=iport; t=1428000126; x=1429209726; h=from:to:subject:date:message-id:references:in-reply-to: content-transfer-encoding:mime-version; bh=XurrDAHhQTpRmKKsLrxYNHtd0EjC+zz6Dg++LkF0+jM=; b=iKOlgjM43RG8W60mHCU8o5ggEEh9R6T4PIaaqTfUjKDQB2i2/ZpNG/eV CUP7sR8W7e6kWoOFrFoCvKMsXJZ0yHHvl3i04vYjwOqEHAjedYb644mK3 ax5gES33BOSNC2ESD+uSTy6u146ENe3MuvK2KX7zGo2V/NC+sPMzdA5LW Q=; X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: A0A3CQDajB1V/4wNJK1cgwhSXAXDIYJAhX0CgUtMAQEBAQEBfoQeAQEBAwFrGgQCAQgOAwQBAQsdBzIUCQgCBAESCIgfCA3NcwEBAQEBAQEBAQEBAQEBAQEBAQEBARMEiymELho4BoMRgRYFinGFeYN1mlMig29vgUR/AQEB X-IronPort-AV: E=Sophos;i="5.11,512,1422921600"; d="scan'208";a="137724737" Received: from alln-core-7.cisco.com ([173.36.13.140]) by alln-iport-1.cisco.com with ESMTP; 02 Apr 2015 18:42:05 +0000 Received: from xhc-aln-x02.cisco.com (xhc-aln-x02.cisco.com [173.36.12.76]) by alln-core-7.cisco.com (8.14.5/8.14.5) with ESMTP id t32Ig5qo028839 (version=TLSv1/SSLv3 cipher=AES128-SHA bits=128 verify=FAIL); Thu, 2 Apr 2015 18:42:05 GMT Received: from xmb-rcd-x10.cisco.com ([169.254.15.175]) by xhc-aln-x02.cisco.com ([173.36.12.76]) with mapi id 14.03.0195.001; Thu, 2 Apr 2015 13:42:05 -0500 From: "Tirumaleswar Reddy (tireddy)" To: Simon Perreault , Brandon Williams , Marc Petit-Huguenin , "tram@ietf.org" Thread-Topic: [tram] I-D Action: draft-ietf-tram-stunbis-04.txt Thread-Index: AQHQaGNuoZDCdCmZDEWaGyqE4xHEdJ024z0AgAGBvuCAAIu4AIAAC3QwgAEIZ4D//8DOcIAAYc8AgAA6QwCAAAcMgP//rNhQ Date: Thu, 2 Apr 2015 18:42:05 +0000 Message-ID: <913383AAA69FF945B8F946018B75898A411FAA52@xmb-rcd-x10.cisco.com> References: <20150327075539.26326.49374.idtracker@ietfa.amsl.com> <551A9620.5010405@acm.org> <913383AAA69FF945B8F946018B75898A411F9D69@xmb-rcd-x10.cisco.com> <551C4EEA.3080505@acm.org> <913383AAA69FF945B8F946018B75898A411FA00A@xmb-rcd-x10.cisco.com> <551D3651.1010700@jive.com> <913383AAA69FF945B8F946018B75898A411FA5C8@xmb-rcd-x10.cisco.com> <551D535A.6000600@jive.com> <551D843A.6000703@akamai.com> <551D8A23.7010702@jive.com> In-Reply-To: <551D8A23.7010702@jive.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.65.39.196] Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 Archived-At: Subject: Re: [tram] I-D Action: draft-ietf-tram-stunbis-04.txt X-BeenThere: tram@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "Discussing the creation of a Turn Revised And Modernized \(TRAM\) WG, which goal is to consolidate the various initiatives to update TURN and STUN." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 02 Apr 2015 18:42:08 -0000 > -----Original Message----- > From: Simon Perreault [mailto:sperreault@jive.com] > Sent: Thursday, April 02, 2015 11:58 PM > To: Brandon Williams; Tirumaleswar Reddy (tireddy); Marc Petit-Huguenin; > tram@ietf.org > Subject: Re: [tram] I-D Action: draft-ietf-tram-stunbis-04.txt >=20 > Le 2015-04-02 14:02, Brandon Williams a =E9crit : > > Also, in my opinion, the currently defined method _is_ a negotiation > > mechansim. The client offers two options, the server picks one, and > > that's what's used for the rest of the session. >=20 > Yes and no. I see it as a backwards-compatibility mechanism. If you suppo= rt > MI2, then you use MI2. You have no choice. In my understanding, egotiatio= n > implies choice and configurability. For example on a TLS server or client= you > configure the crypto suites you are willing to use and their priorities f= or > negotiation. I would prefer not having to configure this sort of thing in= STUN. >=20 > > At the meeting, I didn't fully understand the argument that adding a > > new HMAC algorithm identifier to a registry would be just as much work > > adding a new MI attribute. It doesn't seem that updating a registry > > should require as much overhead as publishing a draft to add a new > > attribute. >=20 > It depends. The registration rules for the STUN attributes registry are e= ither > "IETF Review" or "Designated Expert". In theory we could create a new HMA= C > algorithm identifier registry with a bar lower than "Designated Expert". = The > question is whether we would really want such a low bar. >=20 > Or we could reuse an existing IANA registry and automatically import quit= e a > few algorithms into STUN. Or modify an existing one and add an "allowed i= n > STUN" column. Or, since we're doing STUN-bis, we could take a range of > STUN attributes and lower the bar further, maybe even to "First Come Firs= t > Served". >=20 > The point is that a new STUN attribute is not necessarily harder to get t= han a > new HMAC algorithm identifier. HMAC algorithm identifiers are already provided by IANA https://tools.ietf.= org/html/rfc4868#section-4 -Tiru >=20 > Simon From nobody Thu Apr 2 13:15:15 2015 Return-Path: X-Original-To: tram@ietfa.amsl.com Delivered-To: tram@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 3E35D1A19E9 for ; Thu, 2 Apr 2015 13:15:14 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.388 X-Spam-Level: X-Spam-Status: No, score=-1.388 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FM_FORGED_GMAIL=0.622, HTML_MESSAGE=0.001, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01] autolearn=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id CffawP_jl1pK for ; Thu, 2 Apr 2015 13:15:09 -0700 (PDT) Received: from mail-ie0-x22d.google.com (mail-ie0-x22d.google.com [IPv6:2607:f8b0:4001:c03::22d]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 890AB1A0AF8 for ; Thu, 2 Apr 2015 13:15:09 -0700 (PDT) Received: by ierf6 with SMTP id f6so77692924ier.2 for ; Thu, 02 Apr 2015 13:15:09 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=20120113; h=mime-version:in-reply-to:references:from:date:message-id:subject:to :cc:content-type; bh=cxsJO2Met4m8x6mdhaIWHMHewXK1Y4Qau72IODjQu28=; b=APwWDCPJT3inp/ZVeWfxTFDC/SnJFyXV1TDP6AsY4T7uV5mZX+DbZjdtaZK3ms5QCy UMQZnN1y/L0U56HH6jm4zX+AQ9NAjUWC8omN4lwhQ2bDJJPEXR/f88UwSgGANbZEr2bn GhqgGlSdOh6gcZqsKXl9yvf9dLlV3ta0xi7ny8i0vLi8M4Brskj1OXZaFeMREw4lDlpv uTrMe7pEkj5If3qlBCdH1KSZ05ecJBzMASwTeWKeLyvQnPbbGvfhjKYb9SnRRHeJo4VH rStNMcBuVcChmSXAsfThgYy0azxgKqnUUCQCtyxir5AkYAjGte7TS/k0mBeIgNVn7jsq 8bRg== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:mime-version:in-reply-to:references:from:date :message-id:subject:to:cc:content-type; bh=cxsJO2Met4m8x6mdhaIWHMHewXK1Y4Qau72IODjQu28=; b=J3XFZqup9umu1JQ08ksZlloOaot3FcGTJ8x/72R/GamcfliyB7r/6tmYmtVCAJU0ot HlSplcf0jPUCmS2h2OTlKL2PoD6JYbyJ5x0LpjRYCGhkoTwyGxyu2/70UGZFN0Oh7x7s 0OZMO3aq8EYx5yw58jw/SQjC2VUKgF9dU8hCjuW8Y06T0+zhOCmjVyhJV9xrc2D9ow4p KPfULSSdQRaljNWKesv4jdUNEFHAmDSDjnqZ0ezBysC6Zspm8O/eiYr9KAmwsaaKtyPS 8Lfl4N80l4RHBXs6FbqKAvtGdt1DMVq0orxW8RC+Mw+cQh3ertJ4W4j4bUNBRIsmU+Ee wl5Q== X-Gm-Message-State: ALoCoQm5dSsfIEpDqioPGiEfIrqIvB9XId6IFbtSzt7BPHsJ8LoWSKJOf7PJd8M9eLoZevxfQCLb X-Received: by 10.107.137.31 with SMTP id l31mr39148078iod.23.1428005709010; Thu, 02 Apr 2015 13:15:09 -0700 (PDT) MIME-Version: 1.0 Received: by 10.64.64.42 with HTTP; Thu, 2 Apr 2015 13:14:48 -0700 (PDT) In-Reply-To: <551D889A.2070206@akamai.com> References: <551D889A.2070206@akamai.com> From: Justin Uberti Date: Thu, 2 Apr 2015 13:14:48 -0700 Message-ID: To: Brandon Williams Content-Type: multipart/alternative; boundary=001a113ec9c00609c50512c37d43 Archived-At: Cc: "tram@ietf.org" Subject: Re: [tram] support for adoption of peer-redirect? X-BeenThere: tram@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "Discussing the creation of a Turn Revised And Modernized \(TRAM\) WG, which goal is to consolidate the various initiatives to update TURN and STUN." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 02 Apr 2015 20:15:14 -0000 --001a113ec9c00609c50512c37d43 Content-Type: text/plain; charset=UTF-8 There is a lot of promise here, but I think the end-to-end interaction needs to be explained more. For instance, ICE gathering will likely have completed by the time the peer goes to create permissions, so when the peer is informed then that another TURN server might be a good idea, it's not clear how that information will be used. In addition, given the potentially complex topologies involved, you could imagine that the new TURN server could actually be worse than the current one (especially if both ends decide to switch around the same time), and that situation needs to be addressed. This makes me think that some more complete examples are needed to walk through these cases. As a result of these examples, we might also decide that the basic mechanism doesn't need to be as complex (i.e. may not need to handle both success and error responses). On Thu, Apr 2, 2015 at 11:21 AM, Brandon Williams < brandon.williams@akamai.com> wrote: > Hi all, > > We ran out of time at the Dallas meeting for me to present my updates to > the peer-redirect draft. Back in Toronto, we weren't adding milestones > because we hadn't made progress on stunbis and turnbis yet, so I didn't > have a chance to ask about adoption there either. So ... > > I would like to ask for WG adoption of this draft. Do you support > adoption? If not, are there updates that could be made that would allow you > to support adoption? > > The authors will very much appreciate WG feedback on this effort. > > Thanks, > --Brandon > > PS: Here is the presentation that I intended to give in Dallas. > > http://www.ietf.org/proceedings/92/slides/slides-92-tram-1.pdf > > It summarizes the changes since version 01 which was presented in Toronto. > > Here is a link to the full draft. > > https://tools.ietf.org/html/draft-williams-peer-redirect > > -- > Brandon Williams; Senior Principal Software Engineer > Emerging Products Engineering; Akamai Technologies Inc. > > _______________________________________________ > tram mailing list > tram@ietf.org > https://www.ietf.org/mailman/listinfo/tram > --001a113ec9c00609c50512c37d43 Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: quoted-printable
There is a lot of promise here, but I think the end-to-end= interaction needs to be explained more. For instance, ICE gathering will l= ikely have completed by the time the peer goes to create permissions, so wh= en the peer is informed then that another TURN server might be a good idea,= it's not clear how that information will be used. In addition, given t= he potentially complex topologies involved, you could imagine that the new = TURN server could actually be worse than the current one (especially if bot= h ends decide to switch around the same time), and that situation needs to = be addressed.

This makes me think that some more complet= e examples are needed to walk through these cases. As a result of these exa= mples, we might also decide that the basic mechanism doesn't need to be= as complex (i.e. may not need to handle both success and error responses).=

On Th= u, Apr 2, 2015 at 11:21 AM, Brandon Williams <brandon.williams@= akamai.com> wrote:
Hi all,<= br>
We ran out of time at the Dallas meeting for me to present my updates to th= e peer-redirect draft. Back in Toronto, we weren't adding milestones be= cause we hadn't made progress on stunbis and turnbis yet, so I didn'= ;t have a chance to ask about adoption there either. So ...

I would like to ask for WG adoption of this draft. Do you support adoption?= If not, are there updates that could be made that would allow you to suppo= rt adoption?

The authors will very much appreciate WG feedback on this effort.

Thanks,
--Brandon

PS: Here is the presentation that I intended to give in Dallas.

http://www.ietf.org/proceedings/92/slides/slides-<= u>92-tram-1.pdf

It summarizes the changes since version 01 which was presented in Toronto.<= br>
Here is a link to the full draft.

https://tools.ietf.org/html/draft-williams-peer-redirect=

--
Brandon Williams; Senior Principal Software Engineer
Emerging Products Engineering; Akamai Technologies Inc.

_______________________________________________
tram mailing list
tram@ietf.org
ht= tps://www.ietf.org/mailman/listinfo/tram

--001a113ec9c00609c50512c37d43-- From nobody Tue Apr 7 08:06:22 2015 Return-Path: X-Original-To: tram@ietfa.amsl.com Delivered-To: tram@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 859BF1B36BA; Tue, 7 Apr 2015 08:06:20 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.9 X-Spam-Level: X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id cHcD90FDjtsq; Tue, 7 Apr 2015 08:06:19 -0700 (PDT) Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 593D81B3596; Tue, 7 Apr 2015 08:06:04 -0700 (PDT) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: internet-drafts@ietf.org To: X-Test-IDTracker: no X-IETF-IDTracker: 5.13.0 Auto-Submitted: auto-generated Precedence: bulk Message-ID: <20150407150604.15268.39671.idtracker@ietfa.amsl.com> Date: Tue, 07 Apr 2015 08:06:04 -0700 Archived-At: Cc: tram@ietf.org Subject: [tram] I-D Action: draft-ietf-tram-stun-path-data-00.txt X-BeenThere: tram@ietf.org X-Mailman-Version: 2.1.15 List-Id: "Discussing the creation of a Turn Revised And Modernized \(TRAM\) WG, which goal is to consolidate the various initiatives to update TURN and STUN." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 07 Apr 2015 15:06:20 -0000 A New Internet-Draft is available from the on-line Internet-Drafts directories. This draft is a work item of the TURN Revised and Modernized Working Group of the IETF. Title : Discovery of path characteristics using STUN Authors : Tirumaleswar Reddy Dan Wing Paal-Erik Martinsen Varun Singh Filename : draft-ietf-tram-stun-path-data-00.txt Pages : 9 Date : 2015-04-07 Abstract: A host with multiple interfaces needs to choose the best interface for communication. Oftentimes, this decision is based on a static configuration and does not consider the path characteristics, which may affect the user experience. This document describes a mechanism for an endpoint to discover the path characteristics using Session Traversal Utilities for NAT (STUN) messages. The measurement information can then be used to influence the endpoint's Interactive Connectivity Establishment (ICE) candidate pair selection algorithm. The IETF datatracker status page for this draft is: https://datatracker.ietf.org/doc/draft-ietf-tram-stun-path-data/ There's also a htmlized version available at: http://tools.ietf.org/html/draft-ietf-tram-stun-path-data-00 Please note that it may take a couple of minutes from the time of submission until the htmlized version and diff are available at tools.ietf.org. Internet-Drafts are also available by anonymous FTP at: ftp://ftp.ietf.org/internet-drafts/ From nobody Tue Apr 7 08:17:19 2015 Return-Path: X-Original-To: tram@ietfa.amsl.com Delivered-To: tram@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id F21921B36CE for ; Tue, 7 Apr 2015 08:17:18 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -14.511 X-Spam-Level: X-Spam-Status: No, score=-14.511 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_HI=-5, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 2_YvAnrJ3Olp for ; Tue, 7 Apr 2015 08:17:17 -0700 (PDT) Received: from alln-iport-5.cisco.com (alln-iport-5.cisco.com [173.37.142.92]) (using TLSv1 with cipher RC4-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 92F611B36D0 for ; Tue, 7 Apr 2015 08:16:58 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=2314; q=dns/txt; s=iport; t=1428419819; x=1429629419; h=from:to:subject:date:message-id:references:in-reply-to: content-transfer-encoding:mime-version; bh=Q/kazJEVBYxcBq36xr9l7Wi9wTvBYPrgiBg7vho1k78=; b=MUIaT5HmZo8zRZiOF7RG84rmeRj4rMC4+/0AxWLDGl3x1CM15sS1PGwU RjslBwZ8X3bd66XPeqc/ETzxdfMfrvqD/PfSZBpjmdYv+CdiUeLoa9wDJ +7gU1DsV7MZ9gJyLte+eZkH1YrqbU08LYQbxG5djW9vl3DTGUADr7L6ri Y=; X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: A0BICQCJ9CNV/4cNJK1cgwZSXAXDA4I3CoV9AoEuTAEBAQEBAX6EHgEBAQQBAQE3NBcEAgEIEQQBAQsUCQcnCxQJCAIEEwiIIg3MPQEBAQEBAQEBAQEBAQEBAQEBAQEBGIsrhEs4BoMRgRYFkHSDeIcsOoJ9kAcig29vgUR/AQEB X-IronPort-AV: E=Sophos;i="5.11,538,1422921600"; d="scan'208";a="139023938" Received: from alln-core-2.cisco.com ([173.36.13.135]) by alln-iport-5.cisco.com with ESMTP; 07 Apr 2015 15:16:58 +0000 Received: from xhc-aln-x11.cisco.com (xhc-aln-x11.cisco.com [173.36.12.85]) by alln-core-2.cisco.com (8.14.5/8.14.5) with ESMTP id t37FGvXd007914 (version=TLSv1/SSLv3 cipher=AES128-SHA bits=128 verify=FAIL) for ; Tue, 7 Apr 2015 15:16:57 GMT Received: from xmb-rcd-x10.cisco.com ([169.254.15.175]) by xhc-aln-x11.cisco.com ([173.36.12.85]) with mapi id 14.03.0195.001; Tue, 7 Apr 2015 10:16:57 -0500 From: "Tirumaleswar Reddy (tireddy)" To: "tram@ietf.org" Thread-Topic: [tram] I-D Action: draft-ietf-tram-stun-path-data-00.txt Thread-Index: AQHQcUR1nzjpBUkTMkOh3bqOWAjEeJ1BqTQA Date: Tue, 7 Apr 2015 15:16:56 +0000 Message-ID: <913383AAA69FF945B8F946018B75898A411FC9C4@xmb-rcd-x10.cisco.com> References: <20150407150604.15268.39671.idtracker@ietfa.amsl.com> In-Reply-To: <20150407150604.15268.39671.idtracker@ietfa.amsl.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.65.66.176] Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 Archived-At: Subject: Re: [tram] I-D Action: draft-ietf-tram-stun-path-data-00.txt X-BeenThere: tram@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "Discussing the creation of a Turn Revised And Modernized \(TRAM\) WG, which goal is to consolidate the various initiatives to update TURN and STUN." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 07 Apr 2015 15:17:19 -0000 Re-posted draft-reddy-tram-stun-path-data-01 as draft-ietf-tram-stun-path-d= ata-00 without any changes.=20 We will address the comments received from the WG in the revision. -Tiru > -----Original Message----- > From: tram [mailto:tram-bounces@ietf.org] On Behalf Of internet- > drafts@ietf.org > Sent: Tuesday, April 07, 2015 8:36 PM > To: i-d-announce@ietf.org > Cc: tram@ietf.org > Subject: [tram] I-D Action: draft-ietf-tram-stun-path-data-00.txt >=20 >=20 > A New Internet-Draft is available from the on-line Internet-Drafts direct= ories. > This draft is a work item of the TURN Revised and Modernized Working > Group of the IETF. >=20 > Title : Discovery of path characteristics using STUN > Authors : Tirumaleswar Reddy > Dan Wing > Paal-Erik Martinsen > Varun Singh > Filename : draft-ietf-tram-stun-path-data-00.txt > Pages : 9 > Date : 2015-04-07 >=20 > Abstract: > A host with multiple interfaces needs to choose the best interface > for communication. Oftentimes, this decision is based on a static > configuration and does not consider the path characteristics, which > may affect the user experience. >=20 > This document describes a mechanism for an endpoint to discover the > path characteristics using Session Traversal Utilities for NAT (STUN) > messages. The measurement information can then be used to influence > the endpoint's Interactive Connectivity Establishment (ICE) candidate > pair selection algorithm. >=20 >=20 > The IETF datatracker status page for this draft is: > https://datatracker.ietf.org/doc/draft-ietf-tram-stun-path-data/ >=20 > There's also a htmlized version available at: > http://tools.ietf.org/html/draft-ietf-tram-stun-path-data-00 >=20 >=20 > Please note that it may take a couple of minutes from the time of > submission until the htmlized version and diff are available at tools.iet= f.org. >=20 > Internet-Drafts are also available by anonymous FTP at: > ftp://ftp.ietf.org/internet-drafts/ >=20 > _______________________________________________ > tram mailing list > tram@ietf.org > https://www.ietf.org/mailman/listinfo/tram From nobody Tue Apr 7 08:45:27 2015 Return-Path: X-Original-To: tram@ietfa.amsl.com Delivered-To: tram@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 255C11A1F73; Tue, 7 Apr 2015 08:45:22 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.9 X-Spam-Level: X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id rt70THzDM0MB; Tue, 7 Apr 2015 08:45:18 -0700 (PDT) Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 9B9A61A89C7; Tue, 7 Apr 2015 08:43:19 -0700 (PDT) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: internet-drafts@ietf.org To: X-Test-IDTracker: no X-IETF-IDTracker: 5.13.0 Auto-Submitted: auto-generated Precedence: bulk Message-ID: <20150407154319.29754.48546.idtracker@ietfa.amsl.com> Date: Tue, 07 Apr 2015 08:43:19 -0700 Archived-At: Cc: tram@ietf.org Subject: [tram] I-D Action: draft-ietf-tram-stun-path-data-01.txt X-BeenThere: tram@ietf.org X-Mailman-Version: 2.1.15 List-Id: "Discussing the creation of a Turn Revised And Modernized \(TRAM\) WG, which goal is to consolidate the various initiatives to update TURN and STUN." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 07 Apr 2015 15:45:22 -0000 A New Internet-Draft is available from the on-line Internet-Drafts directories. This draft is a work item of the TURN Revised and Modernized Working Group of the IETF. Title : Discovery of path characteristics using STUN Authors : Tirumaleswar Reddy Dan Wing Paal-Erik Martinsen Varun Singh Filename : draft-ietf-tram-stun-path-data-01.txt Pages : 9 Date : 2015-04-07 Abstract: A host with multiple interfaces needs to choose the best interface for communication. Oftentimes, this decision is based on a static configuration and does not consider the path characteristics, which may affect the user experience. This document describes a mechanism for an endpoint to discover the path characteristics using Session Traversal Utilities for NAT (STUN) messages. The measurement information can then be used to influence the endpoint's Interactive Connectivity Establishment (ICE) candidate pair selection algorithm. The IETF datatracker status page for this draft is: https://datatracker.ietf.org/doc/draft-ietf-tram-stun-path-data/ There's also a htmlized version available at: http://tools.ietf.org/html/draft-ietf-tram-stun-path-data-01 A diff from the previous version is available at: http://www.ietf.org/rfcdiff?url2=draft-ietf-tram-stun-path-data-01 Please note that it may take a couple of minutes from the time of submission until the htmlized version and diff are available at tools.ietf.org. Internet-Drafts are also available by anonymous FTP at: ftp://ftp.ietf.org/internet-drafts/ From nobody Tue Apr 7 08:47:36 2015 Return-Path: X-Original-To: tram@ietfa.amsl.com Delivered-To: tram@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 2767D1A88CF for ; Tue, 7 Apr 2015 08:47:35 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -14.511 X-Spam-Level: X-Spam-Status: No, score=-14.511 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_HI=-5, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 0rdclWy-8qzL for ; Tue, 7 Apr 2015 08:47:32 -0700 (PDT) Received: from rcdn-iport-3.cisco.com (rcdn-iport-3.cisco.com [173.37.86.74]) (using TLSv1 with cipher RC4-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 4BFB71A89B0 for ; Tue, 7 Apr 2015 08:46:49 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=2397; q=dns/txt; s=iport; t=1428421609; x=1429631209; h=from:to:subject:date:message-id:references:in-reply-to: content-transfer-encoding:mime-version; bh=eKULs1KTQ9as5yppc+Jheva4p35+Q01HoCVvQkvAhBs=; b=RGQPAjeV6gz0jJH0SMrG8mXCKRJBNSrBB11AAI86M2JTb6g6oZWXxM9G +TFgjWBNSTcBnBpEt1zHwrwEPTTK1yE9BJkFms9KJ/rKvTQT6hgi2T6Po fky2M3outdsHMp9TI0m045XykdnFiuBw4c1YXmnxXcyj5KHXOScnrd1yf s=; X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: A0AFCgCn+iNV/5pdJa1cgwhSVwUFwwOCNwqFfQKBLkwBAQEBAQF+hB4BAQEEAQEBNzQXBAIBCBEEAQELFAkHJwsUCQgCBBMIAYghCAXMQgEBAQEBAQEBAQEBAQEBAQEBAQEBAReLK4RLOAaDEYEWBZB0g3iHLDqCfZAHIoNvb4FEfwEBAQ X-IronPort-AV: E=Sophos;i="5.11,538,1422921600"; d="scan'208";a="409879605" Received: from rcdn-core-3.cisco.com ([173.37.93.154]) by rcdn-iport-3.cisco.com with ESMTP; 07 Apr 2015 15:46:48 +0000 Received: from xhc-rcd-x08.cisco.com (xhc-rcd-x08.cisco.com [173.37.183.82]) by rcdn-core-3.cisco.com (8.14.5/8.14.5) with ESMTP id t37FkmlE010428 (version=TLSv1/SSLv3 cipher=AES128-SHA bits=128 verify=FAIL) for ; Tue, 7 Apr 2015 15:46:48 GMT Received: from xmb-rcd-x10.cisco.com ([169.254.15.175]) by xhc-rcd-x08.cisco.com ([173.37.183.82]) with mapi id 14.03.0195.001; Tue, 7 Apr 2015 10:46:48 -0500 From: "Tirumaleswar Reddy (tireddy)" To: "tram@ietf.org" Thread-Topic: [tram] I-D Action: draft-ietf-tram-stun-path-data-01.txt Thread-Index: AQHQcUnhMavsgfQAKEu+Zb0tz0EvuZ1BsVyQ Date: Tue, 7 Apr 2015 15:46:47 +0000 Message-ID: <913383AAA69FF945B8F946018B75898A411FCAAA@xmb-rcd-x10.cisco.com> References: <20150407154319.29754.48546.idtracker@ietfa.amsl.com> In-Reply-To: <20150407154319.29754.48546.idtracker@ietfa.amsl.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.65.66.176] Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 Archived-At: Subject: Re: [tram] I-D Action: draft-ietf-tram-stun-path-data-01.txt X-BeenThere: tram@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "Discussing the creation of a Turn Revised And Modernized \(TRAM\) WG, which goal is to consolidate the various initiatives to update TURN and STUN." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 07 Apr 2015 15:47:35 -0000 http://tools.ietf.org/html/draft-ietf-tram-stun-path-data-01 addresses comm= ents from Martin and Oleg.=20 Thanks and Regards, -Tiru > -----Original Message----- > From: tram [mailto:tram-bounces@ietf.org] On Behalf Of internet- > drafts@ietf.org > Sent: Tuesday, April 07, 2015 9:13 PM > To: i-d-announce@ietf.org > Cc: tram@ietf.org > Subject: [tram] I-D Action: draft-ietf-tram-stun-path-data-01.txt >=20 >=20 > A New Internet-Draft is available from the on-line Internet-Drafts direct= ories. > This draft is a work item of the TURN Revised and Modernized Working > Group of the IETF. >=20 > Title : Discovery of path characteristics using STUN > Authors : Tirumaleswar Reddy > Dan Wing > Paal-Erik Martinsen > Varun Singh > Filename : draft-ietf-tram-stun-path-data-01.txt > Pages : 9 > Date : 2015-04-07 >=20 > Abstract: > A host with multiple interfaces needs to choose the best interface > for communication. Oftentimes, this decision is based on a static > configuration and does not consider the path characteristics, which > may affect the user experience. >=20 > This document describes a mechanism for an endpoint to discover the > path characteristics using Session Traversal Utilities for NAT (STUN) > messages. The measurement information can then be used to influence > the endpoint's Interactive Connectivity Establishment (ICE) candidate > pair selection algorithm. >=20 >=20 > The IETF datatracker status page for this draft is: > https://datatracker.ietf.org/doc/draft-ietf-tram-stun-path-data/ >=20 > There's also a htmlized version available at: > http://tools.ietf.org/html/draft-ietf-tram-stun-path-data-01 >=20 > A diff from the previous version is available at: > http://www.ietf.org/rfcdiff?url2=3Ddraft-ietf-tram-stun-path-data-01 >=20 >=20 > Please note that it may take a couple of minutes from the time of > submission > until the htmlized version and diff are available at tools.ietf.org. >=20 > Internet-Drafts are also available by anonymous FTP at: > ftp://ftp.ietf.org/internet-drafts/ >=20 > _______________________________________________ > tram mailing list > tram@ietf.org > https://www.ietf.org/mailman/listinfo/tram From nobody Tue Apr 7 08:53:26 2015 Return-Path: X-Original-To: tram@ietfa.amsl.com Delivered-To: tram@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 5FABB1A8A1D for ; Tue, 7 Apr 2015 08:53:24 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.601 X-Spam-Level: X-Spam-Status: No, score=-2.601 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Pex5YYWGsdBG for ; Tue, 7 Apr 2015 08:53:23 -0700 (PDT) Received: from mail-ob0-f172.google.com (mail-ob0-f172.google.com [209.85.214.172]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id EB5F81A8996 for ; Tue, 7 Apr 2015 08:53:22 -0700 (PDT) Received: by obbfy7 with SMTP id fy7so95387381obb.2 for ; Tue, 07 Apr 2015 08:53:22 -0700 (PDT) X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:message-id:date:from:user-agent:mime-version:to :subject:references:in-reply-to:content-type :content-transfer-encoding; bh=X7fQHqbZ+V1L5RG2OizbvMuO/7Kej4iGkN/U3kt7mGE=; b=AJGSk0V2natkXrYbNcUbsaxO32EpbsaUSh5TsukalPKNmQdyYGM3r+iJmk5qj3Jshf lGNDhnMXPPYQFXHheJH0tA7jh3s+9F8i5b64mDgodCoDbPn0SQYIzhqxIzSOUbG20mKn N7yiy8ytYyGdr4/mYSYsIbGSPezA5W5Ukbxowx6K5UmBHWEjoyYrstktFst9b7efA5bT jQUb1/2XQNBeWLKD0ogDYGKMy+Yba4+s4b3+W1FPdnuylEYP5DvD5GrMEh8bpZ/fPylT Lv/rRpltdFPJsilG/QKRs6BC+tmmqM9XQHsT5FOy+QZBtc4IJEwcYkgZl8qxruy4iYmP ns5g== X-Gm-Message-State: ALoCoQnuFC91Y8L0OIgs54Ypfh0uHwHGy7HX4TapqAzhHb8SJvFjPxYH9N+XGRDbJHw86p4wA72Q X-Received: by 10.182.128.234 with SMTP id nr10mr25770488obb.62.1428421990404; Tue, 07 Apr 2015 08:53:10 -0700 (PDT) Received: from Simons-MacBook-Air.local (modemcable233.42-178-173.mc.videotron.ca. [173.178.42.233]) by mx.google.com with ESMTPSA id hc7sm6462057obb.16.2015.04.07.08.53.08 (version=TLSv1.2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Tue, 07 Apr 2015 08:53:09 -0700 (PDT) Message-ID: <5523FD63.5030709@jive.com> Date: Tue, 07 Apr 2015 11:53:07 -0400 From: Simon Perreault User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.10; rv:31.0) Gecko/20100101 Thunderbird/31.6.0 MIME-Version: 1.0 To: "Tirumaleswar Reddy (tireddy)" , "tram@ietf.org" References: <20150407154319.29754.48546.idtracker@ietfa.amsl.com> <913383AAA69FF945B8F946018B75898A411FCAAA@xmb-rcd-x10.cisco.com> In-Reply-To: <913383AAA69FF945B8F946018B75898A411FCAAA@xmb-rcd-x10.cisco.com> Content-Type: text/plain; charset=windows-1252 Content-Transfer-Encoding: 8bit Archived-At: Subject: Re: [tram] I-D Action: draft-ietf-tram-stun-path-data-01.txt X-BeenThere: tram@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "Discussing the creation of a Turn Revised And Modernized \(TRAM\) WG, which goal is to consolidate the various initiatives to update TURN and STUN." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 07 Apr 2015 15:53:24 -0000 Le 2015-04-07 11:46, Tirumaleswar Reddy (tireddy) a écrit : > http://tools.ietf.org/html/draft-ietf-tram-stun-path-data-01 addresses comments from Martin and Oleg. Awesome! Thanks for the very fast response time! Simon From nobody Tue Apr 7 13:00:09 2015 Return-Path: X-Original-To: tram@ietfa.amsl.com Delivered-To: tram@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 4DEA91B3BB6 for ; Tue, 7 Apr 2015 13:00:09 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.9 X-Spam-Level: X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id kQk-0_IDtMPd for ; Tue, 7 Apr 2015 13:00:05 -0700 (PDT) Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 127BC1B3BB9 for ; Tue, 7 Apr 2015 13:00:04 -0700 (PDT) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit To: X-Test-IDTracker: no X-IETF-IDTracker: 5.13.0 Auto-Submitted: auto-generated Precedence: bulk Message-ID: <20150407200004.29633.55197.idtracker@ietfa.amsl.com> Date: Tue, 07 Apr 2015 13:00:04 -0700 From: IETF Secretariat Archived-At: Subject: [tram] Milestones changed for tram WG X-BeenThere: tram@ietf.org X-Mailman-Version: 2.1.15 List-Id: "Discussing the creation of a Turn Revised And Modernized \(TRAM\) WG, which goal is to consolidate the various initiatives to update TURN and STUN." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 07 Apr 2015 20:00:09 -0000 Changed milestone "Send path characteristic measurement mechanism to IESG for publication as Proposed Standard", set state to active from review, accepting new milestone. URL: http://datatracker.ietf.org/wg/tram/charter/ From nobody Wed Apr 8 03:59:04 2015 Return-Path: X-Original-To: tram@ietfa.amsl.com Delivered-To: tram@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id EAD041B2F8B for ; Wed, 8 Apr 2015 03:59:03 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -14.511 X-Spam-Level: X-Spam-Status: No, score=-14.511 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_HI=-5, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id N6YoEvtp9e7e for ; Wed, 8 Apr 2015 03:59:01 -0700 (PDT) Received: from rcdn-iport-6.cisco.com (rcdn-iport-6.cisco.com [173.37.86.77]) (using TLSv1 with cipher RC4-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id BA51B1B2F8A for ; Wed, 8 Apr 2015 03:59:01 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=4754; q=dns/txt; s=iport; t=1428490741; x=1429700341; h=from:to:cc:subject:date:message-id:references: in-reply-to:content-id:content-transfer-encoding: mime-version; bh=XbFV35RW89zTN5WWY8e2pG/SJtd/ymBIj0VDsVzAnUc=; b=WLphHPcAyPfg8qIeu+locNZTTvWTvhrn+sIYgt8+/6pgXfPlYXwwvOkz mjuAIZ4kGhScJqcoV0MaSvw4f/h41vtizECMQXeyn8Rax0leYncgnLCvB LP0UEdQAijJtj4FVygWuLVHj8FQuiGywCmXTaXMgRSa85xj6rmYjuRtf5 8=; X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: A0AWBQD7CCVV/5RdJa1cgwhSUAcFBYMQwikKhX0CHIEPTAEBAQEBAX6EHwEBAQMBAQEBIBE6CwUHBAIBCBEEAQEBAgIjAwICAiULFAEICAIEDgUJiBkICAW0dZZjAQEBAQEBAQEBAQEBAQEBAQEBAQEBF4EhigqEfAcGgmIvgRYFkHSDeIYPgR06gn2CY40kIoNvb4FEfwEBAQ X-IronPort-AV: E=Sophos;i="5.11,544,1422921600"; d="scan'208";a="410119750" Received: from rcdn-core-12.cisco.com ([173.37.93.148]) by rcdn-iport-6.cisco.com with ESMTP; 08 Apr 2015 10:59:00 +0000 Received: from xhc-rcd-x04.cisco.com (xhc-rcd-x04.cisco.com [173.37.183.78]) by rcdn-core-12.cisco.com (8.14.5/8.14.5) with ESMTP id t38Ax0HC016284 (version=TLSv1/SSLv3 cipher=AES128-SHA bits=128 verify=FAIL) for ; Wed, 8 Apr 2015 10:59:00 GMT Received: from xmb-rcd-x06.cisco.com ([169.254.6.233]) by xhc-rcd-x04.cisco.com ([173.37.183.78]) with mapi id 14.03.0195.001; Wed, 8 Apr 2015 05:59:00 -0500 From: "Pal Martinsen (palmarti)" To: "Tirumaleswar Reddy (tireddy)" Thread-Topic: [tram] I-D Action: draft-ietf-tram-stun-path-data-01.txt Thread-Index: AQHQcUnhAtWIDkjGYUmAzbtmlKXyxp1CBVmAgAFB6wA= Date: Wed, 8 Apr 2015 10:58:59 +0000 Message-ID: <7D8077F9-A39A-43CF-A914-DE4FC3F96A18@cisco.com> References: <20150407154319.29754.48546.idtracker@ietfa.amsl.com> <913383AAA69FF945B8F946018B75898A411FCAAA@xmb-rcd-x10.cisco.com> In-Reply-To: <913383AAA69FF945B8F946018B75898A411FCAAA@xmb-rcd-x10.cisco.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.61.81.163] Content-Type: text/plain; charset="utf-8" Content-ID: <557FBBEE72F12247924BA55D75EC4DCE@emea.cisco.com> Content-Transfer-Encoding: base64 MIME-Version: 1.0 Archived-At: Cc: "tram@ietf.org" Subject: Re: [tram] I-D Action: draft-ietf-tram-stun-path-data-01.txt X-BeenThere: tram@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "Discussing the creation of a Turn Revised And Modernized \(TRAM\) WG, which goal is to consolidate the various initiatives to update TURN and STUN." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 08 Apr 2015 10:59:04 -0000 SGksDQoNCkkgdGhpbmsgdGhlIG5hbWUgb2YgdGhlIGRyYWZ0IGlzIGEgYml0IHdpZGUuIFRoZSBk cmFmdCB3aWxsIGRpc2NvdmVyIGxvc3MgYW5kIFJUVCwgd2hlbiBJIHJlYWQg4oCccGF0aCBjaGFy YWN0ZXJpc3RpY3PigJ0gSSBzdGFydCB0aGlua2luZyBhYm91dCBhbGwgc29ydHMgb2YgdGhpbmdz IGxpa2UgYXZhaWxhYmxlIGJhbmR3aWR0aCwgcURlbGF5LCBqaXR0ZXIgYW5kIHNvIG9uLiAgDQoN CkFuZCBkbyB3ZSByZWFsbHkgZGlzY292ZXIgbG9zcyBhbmQgUlRUPyBXb3VsZG7igJl0IHRoYXQg YmUgc29tZXRoaW5nIHdlIG1lYXN1cmU/DQoNCkkgd291bGQgbGlrZSB0aGUgZHJhZnQgdG8gY2hh bmdlIG5hbWUgdG86DQrigJxNZWFzdXJlbWVudCBvZiBsb3NzIGFuZCBSVFQgdXNpbmcgU1RVTiAo TU9MQVIp4oCdDQoNClRoZSDigJxQQVRILUNIQVJBQ1RFUklTVElD4oCdIGF0dHJpYnV0ZSBpcyBh bHNvIGEgYml0IG1pc2xlYWRpbmcgaW4gaXRzIG5hbWUuICBJIHRoaW5rIHNvbWV0aGluZyBsaWtl IOKAnFJFVFJBTlNNSVQtQ09VTlTigJ0gYW5kIHJlbmFtaW5nIHRoZSBmaWVsZHMgdG8gTnVtUmVx dWVzdHMgYW5kIE51bVJlc3BvbnNlcyBpcyBtb3JlIGFwcHJvcHJpYXRlLg0KDQpEZWZpbmluZyB0 aGUgYXR0cmlidXRlIGluIG9uZSBtYWluIHNlY3Rpb24gd291bGQgbWFrZSBpdCBlYXNpZXIgZm9y IGRldmVsb3BlcnMgdG8gc2NhbiB0aHJvdWdoIHRoZSBkcmFmdC4gQW5kIHdvdWxkIGF2b2lkIGhh dmluZyB0byBwb3N0IHRoZSBhdHRyaWJ1dGUgQVNDSSBhcnQgdHdpY2UgKFNlY3Rpb24gMy4xIGFu ZCAzLjIpLiANCg0KLi0uDQpQw6VsLUVyaWsNCg0KDQoNCj4gT24gMDcgQXByIDIwMTUsIGF0IDE3 OjQ2LCBUaXJ1bWFsZXN3YXIgUmVkZHkgKHRpcmVkZHkpIDx0aXJlZGR5QGNpc2NvLmNvbT4gd3Jv dGU6DQo+IA0KPiBodHRwOi8vdG9vbHMuaWV0Zi5vcmcvaHRtbC9kcmFmdC1pZXRmLXRyYW0tc3R1 bi1wYXRoLWRhdGEtMDEgYWRkcmVzc2VzIGNvbW1lbnRzIGZyb20gTWFydGluIGFuZCBPbGVnLiAN Cj4gDQo+IFRoYW5rcyBhbmQgUmVnYXJkcywNCj4gLVRpcnUNCj4gDQo+PiAtLS0tLU9yaWdpbmFs IE1lc3NhZ2UtLS0tLQ0KPj4gRnJvbTogdHJhbSBbbWFpbHRvOnRyYW0tYm91bmNlc0BpZXRmLm9y Z10gT24gQmVoYWxmIE9mIGludGVybmV0LQ0KPj4gZHJhZnRzQGlldGYub3JnDQo+PiBTZW50OiBU dWVzZGF5LCBBcHJpbCAwNywgMjAxNSA5OjEzIFBNDQo+PiBUbzogaS1kLWFubm91bmNlQGlldGYu b3JnDQo+PiBDYzogdHJhbUBpZXRmLm9yZw0KPj4gU3ViamVjdDogW3RyYW1dIEktRCBBY3Rpb246 IGRyYWZ0LWlldGYtdHJhbS1zdHVuLXBhdGgtZGF0YS0wMS50eHQNCj4+IA0KPj4gDQo+PiBBIE5l dyBJbnRlcm5ldC1EcmFmdCBpcyBhdmFpbGFibGUgZnJvbSB0aGUgb24tbGluZSBJbnRlcm5ldC1E cmFmdHMgZGlyZWN0b3JpZXMuDQo+PiBUaGlzIGRyYWZ0IGlzIGEgd29yayBpdGVtIG9mIHRoZSBU VVJOIFJldmlzZWQgYW5kIE1vZGVybml6ZWQgV29ya2luZw0KPj4gR3JvdXAgb2YgdGhlIElFVEYu DQo+PiANCj4+ICAgICAgICBUaXRsZSAgICAgICAgICAgOiBEaXNjb3Zlcnkgb2YgcGF0aCBjaGFy YWN0ZXJpc3RpY3MgdXNpbmcgU1RVTg0KPj4gICAgICAgIEF1dGhvcnMgICAgICAgICA6IFRpcnVt YWxlc3dhciBSZWRkeQ0KPj4gICAgICAgICAgICAgICAgICAgICAgICAgIERhbiBXaW5nDQo+PiAg ICAgICAgICAgICAgICAgICAgICAgICAgUGFhbC1FcmlrIE1hcnRpbnNlbg0KPj4gICAgICAgICAg ICAgICAgICAgICAgICAgIFZhcnVuIFNpbmdoDQo+PiAJRmlsZW5hbWUgICAgICAgIDogZHJhZnQt aWV0Zi10cmFtLXN0dW4tcGF0aC1kYXRhLTAxLnR4dA0KPj4gCVBhZ2VzICAgICAgICAgICA6IDkN Cj4+IAlEYXRlICAgICAgICAgICAgOiAyMDE1LTA0LTA3DQo+PiANCj4+IEFic3RyYWN0Og0KPj4g ICBBIGhvc3Qgd2l0aCBtdWx0aXBsZSBpbnRlcmZhY2VzIG5lZWRzIHRvIGNob29zZSB0aGUgYmVz dCBpbnRlcmZhY2UNCj4+ICAgZm9yIGNvbW11bmljYXRpb24uICBPZnRlbnRpbWVzLCB0aGlzIGRl Y2lzaW9uIGlzIGJhc2VkIG9uIGEgc3RhdGljDQo+PiAgIGNvbmZpZ3VyYXRpb24gYW5kIGRvZXMg bm90IGNvbnNpZGVyIHRoZSBwYXRoIGNoYXJhY3RlcmlzdGljcywgd2hpY2gNCj4+ICAgbWF5IGFm ZmVjdCB0aGUgdXNlciBleHBlcmllbmNlLg0KPj4gDQo+PiAgIFRoaXMgZG9jdW1lbnQgZGVzY3Jp YmVzIGEgbWVjaGFuaXNtIGZvciBhbiBlbmRwb2ludCB0byBkaXNjb3ZlciB0aGUNCj4+ICAgcGF0 aCBjaGFyYWN0ZXJpc3RpY3MgdXNpbmcgU2Vzc2lvbiBUcmF2ZXJzYWwgVXRpbGl0aWVzIGZvciBO QVQgKFNUVU4pDQo+PiAgIG1lc3NhZ2VzLiAgVGhlIG1lYXN1cmVtZW50IGluZm9ybWF0aW9uIGNh biB0aGVuIGJlIHVzZWQgdG8gaW5mbHVlbmNlDQo+PiAgIHRoZSBlbmRwb2ludCdzIEludGVyYWN0 aXZlIENvbm5lY3Rpdml0eSBFc3RhYmxpc2htZW50IChJQ0UpIGNhbmRpZGF0ZQ0KPj4gICBwYWly IHNlbGVjdGlvbiBhbGdvcml0aG0uDQo+PiANCj4+IA0KPj4gVGhlIElFVEYgZGF0YXRyYWNrZXIg c3RhdHVzIHBhZ2UgZm9yIHRoaXMgZHJhZnQgaXM6DQo+PiBodHRwczovL2RhdGF0cmFja2VyLmll dGYub3JnL2RvYy9kcmFmdC1pZXRmLXRyYW0tc3R1bi1wYXRoLWRhdGEvDQo+PiANCj4+IFRoZXJl J3MgYWxzbyBhIGh0bWxpemVkIHZlcnNpb24gYXZhaWxhYmxlIGF0Og0KPj4gaHR0cDovL3Rvb2xz LmlldGYub3JnL2h0bWwvZHJhZnQtaWV0Zi10cmFtLXN0dW4tcGF0aC1kYXRhLTAxDQo+PiANCj4+ IEEgZGlmZiBmcm9tIHRoZSBwcmV2aW91cyB2ZXJzaW9uIGlzIGF2YWlsYWJsZSBhdDoNCj4+IGh0 dHA6Ly93d3cuaWV0Zi5vcmcvcmZjZGlmZj91cmwyPWRyYWZ0LWlldGYtdHJhbS1zdHVuLXBhdGgt ZGF0YS0wMQ0KPj4gDQo+PiANCj4+IFBsZWFzZSBub3RlIHRoYXQgaXQgbWF5IHRha2UgYSBjb3Vw bGUgb2YgbWludXRlcyBmcm9tIHRoZSB0aW1lIG9mDQo+PiBzdWJtaXNzaW9uDQo+PiB1bnRpbCB0 aGUgaHRtbGl6ZWQgdmVyc2lvbiBhbmQgZGlmZiBhcmUgYXZhaWxhYmxlIGF0IHRvb2xzLmlldGYu b3JnLg0KPj4gDQo+PiBJbnRlcm5ldC1EcmFmdHMgYXJlIGFsc28gYXZhaWxhYmxlIGJ5IGFub255 bW91cyBGVFAgYXQ6DQo+PiBmdHA6Ly9mdHAuaWV0Zi5vcmcvaW50ZXJuZXQtZHJhZnRzLw0KPj4g DQo+PiBfX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fXw0KPj4g dHJhbSBtYWlsaW5nIGxpc3QNCj4+IHRyYW1AaWV0Zi5vcmcNCj4+IGh0dHBzOi8vd3d3LmlldGYu b3JnL21haWxtYW4vbGlzdGluZm8vdHJhbQ0KPiANCj4gX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX18NCj4gdHJhbSBtYWlsaW5nIGxpc3QNCj4gdHJhbUBpZXRm Lm9yZw0KPiBodHRwczovL3d3dy5pZXRmLm9yZy9tYWlsbWFuL2xpc3RpbmZvL3RyYW0NCg0K From nobody Wed Apr 8 05:09:05 2015 Return-Path: X-Original-To: tram@ietfa.amsl.com Delivered-To: tram@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id B9CB11B3095 for ; Wed, 8 Apr 2015 05:09:04 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -0.301 X-Spam-Level: X-Spam-Status: No, score=-0.301 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, MANGLED_TRNFER=2.3, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001] autolearn=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id M0h-hl9cVuzd for ; Wed, 8 Apr 2015 05:09:03 -0700 (PDT) Received: from mail-qk0-f179.google.com (mail-qk0-f179.google.com [209.85.220.179]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 71E171B306B for ; Wed, 8 Apr 2015 05:09:03 -0700 (PDT) Received: by qkhg7 with SMTP id g7so82342503qkh.2 for ; Wed, 08 Apr 2015 05:09:02 -0700 (PDT) X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:message-id:date:from:user-agent:mime-version:to :subject:references:in-reply-to:content-type :content-transfer-encoding; bh=4xH7A5hEmCtEFHUiIzJ9hLaEMq/vXH+LPRgQr/Bm2gQ=; b=Ejew7RPBk/n1JIcXeF+O5Zz+bqTJ7vtLx/gkaBR9bYoB2L234n29h4xUyYU47pVW5e 2TrIHLd4lYfOsHvkzbba1/eTbn/yqeA1F1eLxc3QReUFWPe+mYiHrpPveqRTW0P/9m7C 8kEipxekOP/s60PI4NMGQzXLLSxfkOTwTZvcCHlsK0Ehpnz7Kt5Nbfk6hpEy0AR1Ju7q 07TS9PjyEqE4sudtH0IL4z4lDVP8N7Ja1w6PAH3ZUw0y7kZKZ7UtQ7mOPqnPB0UqAo1I qKLqo7YVdTkDhB6iY2aXlKoDOQF3wZkTsJs6+gqYylGdzZrByVnSOUEPIvec+fk0HCTd QWsw== X-Gm-Message-State: ALoCoQmZXg4huyLRqL+RtUgmpLDf4ed6jcWNwVW/jnS0W8alcGcCw0AGY2JwBmkRaTewtgONyES5 X-Received: by 10.140.233.203 with SMTP id e194mr30359247qhc.90.1428494942764; Wed, 08 Apr 2015 05:09:02 -0700 (PDT) Received: from [192.168.1.43] (modemcable233.42-178-173.mc.videotron.ca. [173.178.42.233]) by mx.google.com with ESMTPSA id 9sm7440015qgo.38.2015.04.08.05.09.00 for (version=TLSv1.2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Wed, 08 Apr 2015 05:09:01 -0700 (PDT) Message-ID: <55251A5B.5040909@jive.com> Date: Wed, 08 Apr 2015 08:08:59 -0400 From: Simon Perreault User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.10; rv:31.0) Gecko/20100101 Thunderbird/31.6.0 MIME-Version: 1.0 To: "tram@ietf.org" References: <6042868B-57EB-4C5A-B93E-C58D846E14E4@cisco.com> In-Reply-To: <6042868B-57EB-4C5A-B93E-C58D846E14E4@cisco.com> X-Forwarded-Message-Id: <6042868B-57EB-4C5A-B93E-C58D846E14E4@cisco.com> Content-Type: text/plain; charset=windows-1252 Content-Transfer-Encoding: 8bit Archived-At: Subject: [tram] Fwd: Re: [rtcweb] draft-schwartz-rtcweb-return X-BeenThere: tram@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "Discussing the creation of a Turn Revised And Modernized \(TRAM\) WG, which goal is to consolidate the various initiatives to update TURN and STUN." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 08 Apr 2015 12:09:04 -0000 TRAMsters, I'd like to see some discussion on how this impacts the server-discovery draft. This part in particular... "endpoints MUST NOT implement a configuration based on unauthenticated network multicast (e.g. mDNS)" ...seems at odds with what was decided in Dallas (i.e., define mDNS discovery). Thoughts? I see having a coherent story for return and server-discovery as somewhat required... Simon -------- Message transféré -------- Sujet : Re: [rtcweb] draft-schwartz-rtcweb-return Date : Wed, 8 Apr 2015 00:58:29 +0000 De : Cullen Jennings (fluffy) Pour : rtcweb@ietf.org > On Mar 26, 2015, at 9:20 AM, Cullen Jennings wrote: > > I'd like to point out that the combination of ietf-tram-turn-server-discovery and draft-schwartz-rtcweb-return allow any network you are connected to more or less MITM your media and do things like rate limit it, generate analytics on who you are talking to, force your traffic through an intermediary that is in a different legal jurisdiction and so on. We discussed this after the meeting and came up with a way to resolve this concern. Benjamin has added some text to the -06 to that specifically addresses this issue http://www.ietf.org/rfcdiff?url1=draft-schwartz-rtcweb-return-05&url2=draft-schwartz-rtcweb-return-06 This completely deals with the issue I raised and with that change I support adopting this as a WG document. After adoption, I think the WG should consider if any text is needed around the issue of TURN credentials. (If you run TURN with no credentials and an attacker can spoof the IP address in UDP packets, you can end up with the TURN servers in a nasty forwarding loop that allows an huge amplification factor for an attacker trying do DOS the turn servers - this is still possible with authentication but you know who to blame. When TURN was first done with was one of the reason TURN requires auth and STUN does not). However, I believe this issue can solved and should not block adopting the draft. ) Cullen _______________________________________________ rtcweb mailing list rtcweb@ietf.org https://www.ietf.org/mailman/listinfo/rtcweb From nobody Wed Apr 8 05:41:03 2015 Return-Path: X-Original-To: tram@ietfa.amsl.com Delivered-To: tram@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id A938E1A1A9E for ; Wed, 8 Apr 2015 05:41:01 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -12.211 X-Spam-Level: X-Spam-Status: No, score=-12.211 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, MANGLED_TRNFER=2.3, RCVD_IN_DNSWL_HI=-5, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id K_lPWdZ2BYRt for ; Wed, 8 Apr 2015 05:41:00 -0700 (PDT) Received: from rcdn-iport-8.cisco.com (rcdn-iport-8.cisco.com [173.37.86.79]) (using TLSv1 with cipher RC4-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id DC82E1A1A9A for ; Wed, 8 Apr 2015 05:40:59 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=3209; q=dns/txt; s=iport; t=1428496859; x=1429706459; h=from:to:subject:date:message-id:references:in-reply-to: content-transfer-encoding:mime-version; bh=9A6ODN+Tqab8SyBdXrVy7EKW2KA03cKwWeM2M6SgGM4=; b=hoHV0bEDy5yXY2MxC8cNMCOp/0h6kJXNVmcDp/pXRpTN2Y265xQGB9Wq DVdf0dtBtLBBxJYAVo+4ybp35sq2slWs+kICkIDrX2uC5RlEpNXno0rjw Aw50mN6ou0PQFMn5L2JdyjOBXU+9KSpMWKz0MfTqLI5NZJl8ORVwMrW1i 8=; X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: A0CuBQBBISVV/5BdJa1cgwhSXAXDA4I3DIUtTgKBKUwBAQEBAQF+hB8BAQEDAQEBAQliFwQCAQgOAwQBAQEKHQcnCxQJCAIEARIIAYgZCA3LagEBAQEBAQEBAQEBAQEBAQEBAQEBAReLK4QkDRo4BoMRgRYFinaFfoN4hyw6jzqDSiKDb2+BA0F/AQEB X-IronPort-AV: E=Sophos;i="5.11,544,1422921600"; d="scan'208";a="2295471" Received: from rcdn-core-8.cisco.com ([173.37.93.144]) by rcdn-iport-8.cisco.com with ESMTP; 08 Apr 2015 12:40:59 +0000 Received: from xhc-aln-x06.cisco.com (xhc-aln-x06.cisco.com [173.36.12.80]) by rcdn-core-8.cisco.com (8.14.5/8.14.5) with ESMTP id t38CexR7008361 (version=TLSv1/SSLv3 cipher=AES128-SHA bits=128 verify=FAIL); Wed, 8 Apr 2015 12:40:59 GMT Received: from xmb-rcd-x10.cisco.com ([169.254.15.175]) by xhc-aln-x06.cisco.com ([173.36.12.80]) with mapi id 14.03.0195.001; Wed, 8 Apr 2015 07:40:58 -0500 From: "Tirumaleswar Reddy (tireddy)" To: Simon Perreault , "tram@ietf.org" Thread-Topic: [tram] Fwd: Re: [rtcweb] draft-schwartz-rtcweb-return Thread-Index: AQHQcZcf28hxyyH3AUSBICjncygYyZ1DWjmA//+ykyA= Date: Wed, 8 Apr 2015 12:40:58 +0000 Message-ID: <913383AAA69FF945B8F946018B75898A411FE350@xmb-rcd-x10.cisco.com> References: <6042868B-57EB-4C5A-B93E-C58D846E14E4@cisco.com> <55251A5B.5040909@jive.com> In-Reply-To: <55251A5B.5040909@jive.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [173.39.67.245] Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 Archived-At: Subject: Re: [tram] Fwd: Re: [rtcweb] draft-schwartz-rtcweb-return X-BeenThere: tram@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "Discussing the creation of a Turn Revised And Modernized \(TRAM\) WG, which goal is to consolidate the various initiatives to update TURN and STUN." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 08 Apr 2015 12:41:01 -0000 > -----Original Message----- > From: tram [mailto:tram-bounces@ietf.org] On Behalf Of Simon Perreault > Sent: Wednesday, April 08, 2015 5:39 PM > To: tram@ietf.org > Subject: [tram] Fwd: Re: [rtcweb] draft-schwartz-rtcweb-return >=20 > TRAMsters, >=20 > I'd like to see some discussion on how this impacts the server-discovery > draft. This part in particular... >=20 > "endpoints MUST NOT implement a configuration based on > unauthenticated > network multicast (e.g. mDNS)" >=20 > ...seems at odds with what was decided in Dallas (i.e., define mDNS > discovery). >=20 > Thoughts? Yes. After TURN server is discovered using mDNS, client must authenticate t= he TURN server to avoid some malicious host advertising that it offers TURN= service. Further mDNS http://tools.ietf.org/html/rfc6762#section-21 also r= efers to using DNSSEC so that the client can ensure that the service is pro= vided by a trusted participant and not a rouge participant. -Tiru >=20 > I see having a coherent story for return and server-discovery as somewhat > required... >=20 > Simon >=20 > -------- Message transf=E9r=E9 -------- > Sujet : Re: [rtcweb] draft-schwartz-rtcweb-return Date : Wed, 8 Apr 2015 > 00:58:29 +0000 De : Cullen Jennings (fluffy) Pour : > rtcweb@ietf.org >=20 >=20 > > On Mar 26, 2015, at 9:20 AM, Cullen Jennings wrote: > > > > I'd like to point out that the combination of ietf-tram-turn-server-dis= covery > and draft-schwartz-rtcweb-return allow any network you are connected to > more or less MITM your media and do things like rate limit it, generate > analytics on who you are talking to, force your traffic through an > intermediary that is in a different legal jurisdiction and so on. >=20 > We discussed this after the meeting and came up with a way to resolve th= is > concern. Benjamin has added some text to the -06 to that specifically > addresses this issue >=20 > http://www.ietf.org/rfcdiff?url1=3Ddraft-schwartz-rtcweb-return-05&url2= =3Ddraft- > schwartz-rtcweb-return-06 >=20 > This completely deals with the issue I raised and with that change I supp= ort > adopting this as a WG document. >=20 > After adoption, I think the WG should consider if any text is needed arou= nd > the issue of TURN credentials. (If you run TURN with no credentials and a= n > attacker can spoof the IP address in UDP packets, you can end up with the > TURN servers in a nasty forwarding loop that allows an huge amplification > factor for an attacker trying do DOS the turn servers - this is still pos= sible > with authentication but you know who to blame. When TURN was first done > with was one of the reason TURN requires auth and STUN does not). > However, I believe this issue can solved and should not block adopting th= e > draft. ) >=20 > Cullen >=20 >=20 >=20 >=20 > _______________________________________________ > rtcweb mailing list > rtcweb@ietf.org > https://www.ietf.org/mailman/listinfo/rtcweb >=20 >=20 > _______________________________________________ > tram mailing list > tram@ietf.org > https://www.ietf.org/mailman/listinfo/tram From nobody Wed Apr 8 07:27:24 2015 Return-Path: X-Original-To: tram@ietfa.amsl.com Delivered-To: tram@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 837071B3125 for ; Wed, 8 Apr 2015 07:27:23 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.978 X-Spam-Level: X-Spam-Status: No, score=-1.978 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, FM_FORGED_GMAIL=0.622, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id S2XRD0V1QZVH for ; Wed, 8 Apr 2015 07:27:21 -0700 (PDT) Received: from mail-qk0-f173.google.com (mail-qk0-f173.google.com [209.85.220.173]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id C64AF1B3108 for ; Wed, 8 Apr 2015 07:27:20 -0700 (PDT) Received: by qkhg7 with SMTP id g7so86061821qkh.2 for ; Wed, 08 Apr 2015 07:27:20 -0700 (PDT) X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:mime-version:in-reply-to:references:date :message-id:subject:from:to:cc:content-type; bh=rwGu7jurCktDRiMRHzE6mrU0XCe5lUXM7IUZYOaMDCM=; b=OEmGjasRsR46cU9M1SwJ+C3Xv2HH6bSkqX7SrY/WfjiwFR4sogLxiOqXjOxo8y1nbc i4GvNyx5gosmSCh0q5q+07nG5mRyfbatHdXfp/Xntoe5CRCAfIUshdieHIXEC9iDkVVS QGEF3XgdUzsqbTT0ejsYYauFHrU63SaULzEKm98Ah4i/XlDwCGwDJ17q7oD89QddHqaz FK+8MQZExo+DLDzpFGrudJyib14fnRUfaY5VmQe+K633G1WRFmGEdKzdRH/dFfR4rNqE DVqgLeX4CbtXIJxp3Szg0KXu2Gas5os2iAXzSDIQnTL1nOEn6aDFpdyAj0KzJPdH0B7m 8lnA== X-Gm-Message-State: ALoCoQmICELnGu3AUmGGRGyiQizqwdKfD9Z27lrKgkU4NkgNY/cJ/UA3hv4vCWhzkYflX5Os0hU4 X-Received: by 10.229.29.136 with SMTP id q8mr31355203qcc.2.1428503239998; Wed, 08 Apr 2015 07:27:19 -0700 (PDT) Received: from mail-qg0-f49.google.com (mail-qg0-f49.google.com. [209.85.192.49]) by mx.google.com with ESMTPSA id q34sm7589444qkq.4.2015.04.08.07.27.18 for (version=TLSv1.2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Wed, 08 Apr 2015 07:27:19 -0700 (PDT) Received: by qgej70 with SMTP id j70so29663515qge.2 for ; Wed, 08 Apr 2015 07:27:18 -0700 (PDT) MIME-Version: 1.0 X-Received: by 10.140.134.135 with SMTP id 129mr30696870qhg.7.1428503238634; Wed, 08 Apr 2015 07:27:18 -0700 (PDT) Received: by 10.229.183.138 with HTTP; Wed, 8 Apr 2015 07:27:18 -0700 (PDT) In-Reply-To: <913383AAA69FF945B8F946018B75898A411FE350@xmb-rcd-x10.cisco.com> References: <6042868B-57EB-4C5A-B93E-C58D846E14E4@cisco.com> <55251A5B.5040909@jive.com> <913383AAA69FF945B8F946018B75898A411FE350@xmb-rcd-x10.cisco.com> Date: Wed, 8 Apr 2015 10:27:18 -0400 Message-ID: From: Benjamin Schwartz To: "Tirumaleswar Reddy (tireddy)" Content-Type: multipart/alternative; boundary=001a1136f0c01992d805133754b7 Archived-At: Cc: Simon Perreault , "tram@ietf.org" Subject: Re: [tram] Fwd: Re: [rtcweb] draft-schwartz-rtcweb-return X-BeenThere: tram@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "Discussing the creation of a Turn Revised And Modernized \(TRAM\) WG, which goal is to consolidate the various initiatives to update TURN and STUN." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 08 Apr 2015 14:27:23 -0000 --001a1136f0c01992d805133754b7 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: quoted-printable If the TURN server's identity is discovered over mDNS, then how can the client authenticate the TURN server, except to prove that it's the same one advertised over mDNS? Assuming mDNS is trivial to forge on a broadcast network, this does not seem like sufficient protection. Maybe you are saying that the TURN server's "real identity" is configured by some other mechanism, and only its address is distributed by mDNS? I'm not familiar with the interaction between mDNS and DNSSEC, or how this would help to identify trusted servers. This seems like another case in which a trusted pre-configuration mechanism is still required. On Wed, Apr 8, 2015 at 8:40 AM, Tirumaleswar Reddy (tireddy) < tireddy@cisco.com> wrote: > > -----Original Message----- > > From: tram [mailto:tram-bounces@ietf.org] On Behalf Of Simon Perreault > > Sent: Wednesday, April 08, 2015 5:39 PM > > To: tram@ietf.org > > Subject: [tram] Fwd: Re: [rtcweb] draft-schwartz-rtcweb-return > > > > TRAMsters, > > > > I'd like to see some discussion on how this impacts the server-discover= y > > draft. This part in particular... > > > > "endpoints MUST NOT implement a configuration based on > > unauthenticated > > network multicast (e.g. mDNS)" > > > > ...seems at odds with what was decided in Dallas (i.e., define mDNS > > discovery). > > > > Thoughts? > > Yes. After TURN server is discovered using mDNS, client must authenticate > the TURN server to avoid some malicious host advertising that it offers > TURN service. Further mDNS http://tools.ietf.org/html/rfc6762#section-21 > also refers to using DNSSEC so that the client can ensure that the servic= e > is provided by a trusted participant and not a rouge participant. > > -Tiru > > > > > I see having a coherent story for return and server-discovery as somewh= at > > required... > > > > Simon > > > > -------- Message transf=C3=A9r=C3=A9 -------- > > Sujet : Re: [rtcweb] draft-schwartz-rtcweb-return Date : Wed, 8 Apr 201= 5 > > 00:58:29 +0000 De : Cullen Jennings (fluffy) Pour : > > rtcweb@ietf.org > > > > > > > On Mar 26, 2015, at 9:20 AM, Cullen Jennings wrote= : > > > > > > I'd like to point out that the combination of > ietf-tram-turn-server-discovery > > and draft-schwartz-rtcweb-return allow any network you are connected to > > more or less MITM your media and do things like rate limit it, generate > > analytics on who you are talking to, force your traffic through an > > intermediary that is in a different legal jurisdiction and so on. > > > > We discussed this after the meeting and came up with a way to resolve > this > > concern. Benjamin has added some text to the -06 to that specifically > > addresses this issue > > > > > http://www.ietf.org/rfcdiff?url1=3Ddraft-schwartz-rtcweb-return-05&url2= =3Ddraft- > > schwartz-rtcweb-return-06 > > > > This completely deals with the issue I raised and with that change I > support > > adopting this as a WG document. > > > > After adoption, I think the WG should consider if any text is needed > around > > the issue of TURN credentials. (If you run TURN with no credentials and > an > > attacker can spoof the IP address in UDP packets, you can end up with t= he > > TURN servers in a nasty forwarding loop that allows an huge amplificati= on > > factor for an attacker trying do DOS the turn servers - this is still > possible > > with authentication but you know who to blame. When TURN was first done > > with was one of the reason TURN requires auth and STUN does not). > > However, I believe this issue can solved and should not block adopting > the > > draft. ) > > > > Cullen > > > > > > > > > > _______________________________________________ > > rtcweb mailing list > > rtcweb@ietf.org > > https://www.ietf.org/mailman/listinfo/rtcweb > > > > > > _______________________________________________ > > tram mailing list > > tram@ietf.org > > https://www.ietf.org/mailman/listinfo/tram > > _______________________________________________ > tram mailing list > tram@ietf.org > https://www.ietf.org/mailman/listinfo/tram > --001a1136f0c01992d805133754b7 Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: quoted-printable
If the TURN server's identity is discovered over mDNS,= then how can the client authenticate the TURN server, except to prove that= it's the same one advertised over mDNS?=C2=A0 Assuming mDNS is trivial= to forge on a broadcast network, this does not seem like sufficient protec= tion.=C2=A0 Maybe you are saying that the TURN server's "real iden= tity" is configured by some other mechanism, and only its address is d= istributed by mDNS?

I'm not familiar with the intera= ction between mDNS and DNSSEC, or how this would help to identify trusted s= ervers.=C2=A0 This seems like another case in which a trusted pre-configura= tion mechanism is still required.
On Wed, Apr 8, 2015 at 8:40 AM, Tirumaleswar Re= ddy (tireddy) <tireddy@cisco.com> wrote:
> -----Original Message-----
> From: tram [mailto:tram-bounc= es@ietf.org] On Behalf Of Simon Perreault
> Sent: Wednesday, April 08, 2015 5:39 PM
> To: tram@ietf.org
> Subject: [tram] Fwd: Re: [rtcweb] draft-schwartz-rtcweb-return
>
> TRAMsters,
>
> I'd like to see some discussion on how this impacts the server-dis= covery
> draft. This part in particular...
>
> "endpoints MUST NOT implement a=C2=A0 =C2=A0 =C2=A0 =C2=A0configu= ration based on
> unauthenticated
> network multicast (e.g. mDNS)"
>
> ...seems at odds with what was decided in Dallas (i.e., define mDNS > discovery).
>
> Thoughts?

Yes. After TURN server is discovered using mDNS, client must authent= icate the TURN server to avoid some malicious host advertising that it offe= rs TURN service. Further mDNS http://tools.ietf.org/html/rfc6762#section-2= 1 also refers to using DNSSEC so that the client can ensure that the se= rvice is provided by a trusted participant and not a rouge participant.

-Tiru

>
> I see having a coherent story for return and server-discovery as somew= hat
> required...
>
> Simon
>
> -------- Message transf=C3=A9r=C3=A9 --------
> Sujet : Re: [rtcweb] draft-schwartz-rtcweb-return Date : Wed, 8 Apr 20= 15
> 00:58:29 +0000 De : Cullen Jennings (fluffy) <fluffy@cisco.com> Pour :
> rtcweb@ietf.org <rtcweb@ietf.org>
>
>
> > On Mar 26, 2015, at 9:20 AM, Cullen Jennings <fluffy@cisco.com> wrote:
> >
> > I'd like to point out that the combination of ietf-tram-turn-= server-discovery
> and draft-schwartz-rtcweb-return allow any network you are connected t= o
> more or less MITM your media and do things like rate limit it, generat= e
> analytics on who you are talking to, force your traffic through an
> intermediary that is in a=C2=A0 different legal jurisdiction and so on= .
>
> We discussed this after the meeting and came up with a=C2=A0 way to re= solve this
> concern. Benjamin has added some text to the -06 to that specifically<= br> > addresses this issue
>
> http://www.ietf.org/rfcdiff?ur= l1=3Ddraft-schwartz-rtcweb-return-05&url2=3Ddraft-
> schwartz-rtcweb-return-06
>
> This completely deals with the issue I raised and with that change I s= upport
> adopting this as a WG document.
>
> After adoption, I think the WG should consider if any text is needed a= round
> the issue of TURN credentials. (If you run TURN with no credentials an= d an
> attacker can spoof the IP address in UDP packets, you can end up with = the
> TURN servers in a nasty forwarding loop that allows an huge amplificat= ion
> factor for an attacker trying do DOS the turn servers - this is still = possible
> with authentication but you know who to blame. When TURN was first don= e
> with was one of the reason TURN requires auth and STUN does not).
> However, I believe this issue can solved and should not block adopting= the
> draft. )
>
> Cullen
>
>
>
>
> _______________________________________________
> rtcweb mailing list
> rtcweb@ietf.org
> https://www.ietf.org/mailman/listinfo/rtcweb
>
>
> _______________________________________________
> tram mailing list
> tram@ietf.org
> https://www.ietf.org/mailman/listinfo/tram

_______________________________________________
tram mailing list
tram@ietf.org
ht= tps://www.ietf.org/mailman/listinfo/tram

--001a1136f0c01992d805133754b7-- From nobody Wed Apr 8 08:08:39 2015 Return-Path: X-Original-To: tram@ietfa.amsl.com Delivered-To: tram@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id DFF171B3202 for ; Wed, 8 Apr 2015 08:08:38 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -14.51 X-Spam-Level: X-Spam-Status: No, score=-14.51 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_HI=-5, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id KIpqwgNOfvpT for ; Wed, 8 Apr 2015 08:08:36 -0700 (PDT) Received: from alln-iport-3.cisco.com (alln-iport-3.cisco.com [173.37.142.90]) (using TLSv1 with cipher RC4-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 183671B3203 for ; Wed, 8 Apr 2015 08:08:36 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=19652; q=dns/txt; s=iport; t=1428505716; x=1429715316; h=from:to:cc:subject:date:message-id:references: in-reply-to:mime-version; bh=0Q7pzskECEs8pMo+izy1LJ461roqRmXkDCOXd+PE5Qg=; b=K2rxfPp1wy60hxfbNv5gBe2dTLlCqP3orDPX1LoWlZ6VXD6qvY38JPqK /puQfVpeI9cQLXufb31Mxjpa6jEzcib2bUA1BNBaUSGyv7gLBzp98bKfe v9ykrjLPdcuAWAy4vkpSE9I2sffVvouUFcU36dUnKEpGaH6lmvZsPd+4U o=; X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: A0CqBgA1QyVV/4gNJK1SAQmCRUNSXAWCSka/cTwqCYFIAQuFLU4CHIEMOBQBAQEBAQEBfYQfAQEBAwEBAQEJFwpBCwwEAgEGAg4DBAEBAQodAwICAiULFAkIAgQOBQgBiBkIDZh6nH+WNgEBAQEBAQEBAQEBAQEBAQEBAQEBAReLK4QfAQQNGhYXBAYBBoJiL4EWBZB0g3iHLDqPOoNKIoNvb4EDAR4GHH8BAQE X-IronPort-AV: E=Sophos;i="5.11,545,1422921600"; d="scan'208,217";a="139333253" Received: from alln-core-3.cisco.com ([173.36.13.136]) by alln-iport-3.cisco.com with ESMTP; 08 Apr 2015 15:08:34 +0000 Received: from xhc-aln-x05.cisco.com (xhc-aln-x05.cisco.com [173.36.12.79]) by alln-core-3.cisco.com (8.14.5/8.14.5) with ESMTP id t38F8Y0a012822 (version=TLSv1/SSLv3 cipher=AES128-SHA bits=128 verify=FAIL); Wed, 8 Apr 2015 15:08:34 GMT Received: from xmb-rcd-x10.cisco.com ([169.254.15.175]) by xhc-aln-x05.cisco.com ([173.36.12.79]) with mapi id 14.03.0195.001; Wed, 8 Apr 2015 10:08:34 -0500 From: "Tirumaleswar Reddy (tireddy)" To: Benjamin Schwartz Thread-Topic: [tram] Fwd: Re: [rtcweb] draft-schwartz-rtcweb-return Thread-Index: AQHQcZcf28hxyyH3AUSBICjncygYyZ1DWjmA//+ykyCAAHQTAP//scTw Date: Wed, 8 Apr 2015 15:08:33 +0000 Message-ID: <913383AAA69FF945B8F946018B75898A411FE473@xmb-rcd-x10.cisco.com> References: <6042868B-57EB-4C5A-B93E-C58D846E14E4@cisco.com> <55251A5B.5040909@jive.com> <913383AAA69FF945B8F946018B75898A411FE350@xmb-rcd-x10.cisco.com> In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.65.61.25] Content-Type: multipart/alternative; boundary="_000_913383AAA69FF945B8F946018B75898A411FE473xmbrcdx10ciscoc_" MIME-Version: 1.0 Archived-At: Cc: Simon Perreault , "tram@ietf.org" Subject: Re: [tram] Fwd: Re: [rtcweb] draft-schwartz-rtcweb-return X-BeenThere: tram@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "Discussing the creation of a Turn Revised And Modernized \(TRAM\) WG, which goal is to consolidate the various initiatives to update TURN and STUN." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 08 Apr 2015 15:08:39 -0000 --_000_913383AAA69FF945B8F946018B75898A411FE473xmbrcdx10ciscoc_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 bUROUyBvbmx5IGhlbHBzIHRvIGRpc2NvdmVyIFRVUk4gc2VydmljZSBpbiB0aGUgbG9jYWwgbmV0 d29yazsgY2xpZW50IGFuZCBUVVJOIHNlcnZlciBzdGlsbCBoYXZlIHRvIG11dHVhbGx5IGF1dGhl bnRpY2F0ZSBlYWNoIG90aGVyIHVzaW5nIHRoZSBleGlzdGluZyBsb25nLXRlcm0gYXV0aGVudGlj YXRpb24gbWVjaGFuaXNtLiAgVHJ1c3RlZCBwcmUtY29uZmlndXJhdGlvbiBpcyBvbmx5IHJlcXVp cmVkIHRvIHZhbGlkYXRlIHRoZSBkaWdpdGFsIHNpZ25hdHVyZSBvZiB0aGUgbUROUyBhbnN3ZXIg anVzdCBsaWtlIGl04oCZcyBkb25lIGluIEROU1NFQyBidXQgaWYgY2xpZW50IGFuZCBUVVJOIHNl cnZlciBtdXR1YWxseSBhdXRoZW50aWNhdGUgdGhlbiBkaWdpdGFsIHNpZ25hdHVyZSBmb3IgYW5z d2VycyBtYXkgbm90IGJlIHJlcXVpcmVkLg0KDQotVGlydQ0KDQpGcm9tOiBCZW5qYW1pbiBTY2h3 YXJ0eiBbbWFpbHRvOmJlbWFzY0B3ZWJydGMub3JnXQ0KU2VudDogV2VkbmVzZGF5LCBBcHJpbCAw OCwgMjAxNSA3OjU3IFBNDQpUbzogVGlydW1hbGVzd2FyIFJlZGR5ICh0aXJlZGR5KQ0KQ2M6IFNp bW9uIFBlcnJlYXVsdDsgdHJhbUBpZXRmLm9yZw0KU3ViamVjdDogUmU6IFt0cmFtXSBGd2Q6IFJl OiBbcnRjd2ViXSBkcmFmdC1zY2h3YXJ0ei1ydGN3ZWItcmV0dXJuDQoNCklmIHRoZSBUVVJOIHNl cnZlcidzIGlkZW50aXR5IGlzIGRpc2NvdmVyZWQgb3ZlciBtRE5TLCB0aGVuIGhvdyBjYW4gdGhl IGNsaWVudCBhdXRoZW50aWNhdGUgdGhlIFRVUk4gc2VydmVyLCBleGNlcHQgdG8gcHJvdmUgdGhh dCBpdCdzIHRoZSBzYW1lIG9uZSBhZHZlcnRpc2VkIG92ZXIgbUROUz8gIEFzc3VtaW5nIG1ETlMg aXMgdHJpdmlhbCB0byBmb3JnZSBvbiBhIGJyb2FkY2FzdCBuZXR3b3JrLCB0aGlzIGRvZXMgbm90 IHNlZW0gbGlrZSBzdWZmaWNpZW50IHByb3RlY3Rpb24uICBNYXliZSB5b3UgYXJlIHNheWluZyB0 aGF0IHRoZSBUVVJOIHNlcnZlcidzICJyZWFsIGlkZW50aXR5IiBpcyBjb25maWd1cmVkIGJ5IHNv bWUgb3RoZXIgbWVjaGFuaXNtLCBhbmQgb25seSBpdHMgYWRkcmVzcyBpcyBkaXN0cmlidXRlZCBi eSBtRE5TPw0KDQpJJ20gbm90IGZhbWlsaWFyIHdpdGggdGhlIGludGVyYWN0aW9uIGJldHdlZW4g bUROUyBhbmQgRE5TU0VDLCBvciBob3cgdGhpcyB3b3VsZCBoZWxwIHRvIGlkZW50aWZ5IHRydXN0 ZWQgc2VydmVycy4gIFRoaXMgc2VlbXMgbGlrZSBhbm90aGVyIGNhc2UgaW4gd2hpY2ggYSB0cnVz dGVkIHByZS1jb25maWd1cmF0aW9uIG1lY2hhbmlzbSBpcyBzdGlsbCByZXF1aXJlZC4NCg0KT24g V2VkLCBBcHIgOCwgMjAxNSBhdCA4OjQwIEFNLCBUaXJ1bWFsZXN3YXIgUmVkZHkgKHRpcmVkZHkp IDx0aXJlZGR5QGNpc2NvLmNvbTxtYWlsdG86dGlyZWRkeUBjaXNjby5jb20+PiB3cm90ZToNCj4g LS0tLS1PcmlnaW5hbCBNZXNzYWdlLS0tLS0NCj4gRnJvbTogdHJhbSBbbWFpbHRvOnRyYW0tYm91 bmNlc0BpZXRmLm9yZzxtYWlsdG86dHJhbS1ib3VuY2VzQGlldGYub3JnPl0gT24gQmVoYWxmIE9m IFNpbW9uIFBlcnJlYXVsdA0KPiBTZW50OiBXZWRuZXNkYXksIEFwcmlsIDA4LCAyMDE1IDU6Mzkg UE0NCj4gVG86IHRyYW1AaWV0Zi5vcmc8bWFpbHRvOnRyYW1AaWV0Zi5vcmc+DQo+IFN1YmplY3Q6 IFt0cmFtXSBGd2Q6IFJlOiBbcnRjd2ViXSBkcmFmdC1zY2h3YXJ0ei1ydGN3ZWItcmV0dXJuDQo+ DQo+IFRSQU1zdGVycywNCj4NCj4gSSdkIGxpa2UgdG8gc2VlIHNvbWUgZGlzY3Vzc2lvbiBvbiBo b3cgdGhpcyBpbXBhY3RzIHRoZSBzZXJ2ZXItZGlzY292ZXJ5DQo+IGRyYWZ0LiBUaGlzIHBhcnQg aW4gcGFydGljdWxhci4uLg0KPg0KPiAiZW5kcG9pbnRzIE1VU1QgTk9UIGltcGxlbWVudCBhICAg ICAgIGNvbmZpZ3VyYXRpb24gYmFzZWQgb24NCj4gdW5hdXRoZW50aWNhdGVkDQo+IG5ldHdvcmsg bXVsdGljYXN0IChlLmcuIG1ETlMpIg0KPg0KPiAuLi5zZWVtcyBhdCBvZGRzIHdpdGggd2hhdCB3 YXMgZGVjaWRlZCBpbiBEYWxsYXMgKGkuZS4sIGRlZmluZSBtRE5TDQo+IGRpc2NvdmVyeSkuDQo+ DQo+IFRob3VnaHRzPw0KDQpZZXMuIEFmdGVyIFRVUk4gc2VydmVyIGlzIGRpc2NvdmVyZWQgdXNp bmcgbUROUywgY2xpZW50IG11c3QgYXV0aGVudGljYXRlIHRoZSBUVVJOIHNlcnZlciB0byBhdm9p ZCBzb21lIG1hbGljaW91cyBob3N0IGFkdmVydGlzaW5nIHRoYXQgaXQgb2ZmZXJzIFRVUk4gc2Vy dmljZS4gRnVydGhlciBtRE5TIGh0dHA6Ly90b29scy5pZXRmLm9yZy9odG1sL3JmYzY3NjIjc2Vj dGlvbi0yMSBhbHNvIHJlZmVycyB0byB1c2luZyBETlNTRUMgc28gdGhhdCB0aGUgY2xpZW50IGNh biBlbnN1cmUgdGhhdCB0aGUgc2VydmljZSBpcyBwcm92aWRlZCBieSBhIHRydXN0ZWQgcGFydGlj aXBhbnQgYW5kIG5vdCBhIHJvdWdlIHBhcnRpY2lwYW50Lg0KDQotVGlydQ0KDQo+DQo+IEkgc2Vl IGhhdmluZyBhIGNvaGVyZW50IHN0b3J5IGZvciByZXR1cm4gYW5kIHNlcnZlci1kaXNjb3Zlcnkg YXMgc29tZXdoYXQNCj4gcmVxdWlyZWQuLi4NCj4NCj4gU2ltb24NCj4NCj4gLS0tLS0tLS0gTWVz c2FnZSB0cmFuc2bDqXLDqSAtLS0tLS0tLQ0KPiBTdWpldCA6IFJlOiBbcnRjd2ViXSBkcmFmdC1z Y2h3YXJ0ei1ydGN3ZWItcmV0dXJuIERhdGUgOiBXZWQsIDggQXByIDIwMTUNCj4gMDA6NTg6Mjkg KzAwMDAgRGUgOiBDdWxsZW4gSmVubmluZ3MgKGZsdWZmeSkgPGZsdWZmeUBjaXNjby5jb208bWFp bHRvOmZsdWZmeUBjaXNjby5jb20+PiBQb3VyIDoNCj4gcnRjd2ViQGlldGYub3JnPG1haWx0bzpy dGN3ZWJAaWV0Zi5vcmc+IDxydGN3ZWJAaWV0Zi5vcmc8bWFpbHRvOnJ0Y3dlYkBpZXRmLm9yZz4+ DQo+DQo+DQo+ID4gT24gTWFyIDI2LCAyMDE1LCBhdCA5OjIwIEFNLCBDdWxsZW4gSmVubmluZ3Mg PGZsdWZmeUBjaXNjby5jb208bWFpbHRvOmZsdWZmeUBjaXNjby5jb20+PiB3cm90ZToNCj4gPg0K PiA+IEknZCBsaWtlIHRvIHBvaW50IG91dCB0aGF0IHRoZSBjb21iaW5hdGlvbiBvZiBpZXRmLXRy YW0tdHVybi1zZXJ2ZXItZGlzY292ZXJ5DQo+IGFuZCBkcmFmdC1zY2h3YXJ0ei1ydGN3ZWItcmV0 dXJuIGFsbG93IGFueSBuZXR3b3JrIHlvdSBhcmUgY29ubmVjdGVkIHRvDQo+IG1vcmUgb3IgbGVz cyBNSVRNIHlvdXIgbWVkaWEgYW5kIGRvIHRoaW5ncyBsaWtlIHJhdGUgbGltaXQgaXQsIGdlbmVy YXRlDQo+IGFuYWx5dGljcyBvbiB3aG8geW91IGFyZSB0YWxraW5nIHRvLCBmb3JjZSB5b3VyIHRy YWZmaWMgdGhyb3VnaCBhbg0KPiBpbnRlcm1lZGlhcnkgdGhhdCBpcyBpbiBhICBkaWZmZXJlbnQg bGVnYWwganVyaXNkaWN0aW9uIGFuZCBzbyBvbi4NCj4NCj4gV2UgZGlzY3Vzc2VkIHRoaXMgYWZ0 ZXIgdGhlIG1lZXRpbmcgYW5kIGNhbWUgdXAgd2l0aCBhICB3YXkgdG8gcmVzb2x2ZSB0aGlzDQo+ IGNvbmNlcm4uIEJlbmphbWluIGhhcyBhZGRlZCBzb21lIHRleHQgdG8gdGhlIC0wNiB0byB0aGF0 IHNwZWNpZmljYWxseQ0KPiBhZGRyZXNzZXMgdGhpcyBpc3N1ZQ0KPg0KPiBodHRwOi8vd3d3Lmll dGYub3JnL3JmY2RpZmY/dXJsMT1kcmFmdC1zY2h3YXJ0ei1ydGN3ZWItcmV0dXJuLTA1JnVybDI9 ZHJhZnQtDQo+IHNjaHdhcnR6LXJ0Y3dlYi1yZXR1cm4tMDYNCj4NCj4gVGhpcyBjb21wbGV0ZWx5 IGRlYWxzIHdpdGggdGhlIGlzc3VlIEkgcmFpc2VkIGFuZCB3aXRoIHRoYXQgY2hhbmdlIEkgc3Vw cG9ydA0KPiBhZG9wdGluZyB0aGlzIGFzIGEgV0cgZG9jdW1lbnQuDQo+DQo+IEFmdGVyIGFkb3B0 aW9uLCBJIHRoaW5rIHRoZSBXRyBzaG91bGQgY29uc2lkZXIgaWYgYW55IHRleHQgaXMgbmVlZGVk IGFyb3VuZA0KPiB0aGUgaXNzdWUgb2YgVFVSTiBjcmVkZW50aWFscy4gKElmIHlvdSBydW4gVFVS TiB3aXRoIG5vIGNyZWRlbnRpYWxzIGFuZCBhbg0KPiBhdHRhY2tlciBjYW4gc3Bvb2YgdGhlIElQ IGFkZHJlc3MgaW4gVURQIHBhY2tldHMsIHlvdSBjYW4gZW5kIHVwIHdpdGggdGhlDQo+IFRVUk4g c2VydmVycyBpbiBhIG5hc3R5IGZvcndhcmRpbmcgbG9vcCB0aGF0IGFsbG93cyBhbiBodWdlIGFt cGxpZmljYXRpb24NCj4gZmFjdG9yIGZvciBhbiBhdHRhY2tlciB0cnlpbmcgZG8gRE9TIHRoZSB0 dXJuIHNlcnZlcnMgLSB0aGlzIGlzIHN0aWxsIHBvc3NpYmxlDQo+IHdpdGggYXV0aGVudGljYXRp b24gYnV0IHlvdSBrbm93IHdobyB0byBibGFtZS4gV2hlbiBUVVJOIHdhcyBmaXJzdCBkb25lDQo+ IHdpdGggd2FzIG9uZSBvZiB0aGUgcmVhc29uIFRVUk4gcmVxdWlyZXMgYXV0aCBhbmQgU1RVTiBk b2VzIG5vdCkuDQo+IEhvd2V2ZXIsIEkgYmVsaWV2ZSB0aGlzIGlzc3VlIGNhbiBzb2x2ZWQgYW5k IHNob3VsZCBub3QgYmxvY2sgYWRvcHRpbmcgdGhlDQo+IGRyYWZ0LiApDQo+DQo+IEN1bGxlbg0K Pg0KPg0KPg0KPg0KPiBfX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fXw0KPiBydGN3ZWIgbWFpbGluZyBsaXN0DQo+IHJ0Y3dlYkBpZXRmLm9yZzxtYWlsdG86cnRj d2ViQGlldGYub3JnPg0KPiBodHRwczovL3d3dy5pZXRmLm9yZy9tYWlsbWFuL2xpc3RpbmZvL3J0 Y3dlYg0KPg0KPg0KPiBfX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fXw0KPiB0cmFtIG1haWxpbmcgbGlzdA0KPiB0cmFtQGlldGYub3JnPG1haWx0bzp0cmFtQGll dGYub3JnPg0KPiBodHRwczovL3d3dy5pZXRmLm9yZy9tYWlsbWFuL2xpc3RpbmZvL3RyYW0NCg0K X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX18NCnRyYW0gbWFp bGluZyBsaXN0DQp0cmFtQGlldGYub3JnPG1haWx0bzp0cmFtQGlldGYub3JnPg0KaHR0cHM6Ly93 d3cuaWV0Zi5vcmcvbWFpbG1hbi9saXN0aW5mby90cmFtDQoNCg== --_000_913383AAA69FF945B8F946018B75898A411FE473xmbrcdx10ciscoc_ Content-Type: text/html; charset="utf-8" Content-Transfer-Encoding: base64 PGh0bWwgeG1sbnM6dj0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTp2bWwiIHhtbG5zOm89InVy bjpzY2hlbWFzLW1pY3Jvc29mdC1jb206b2ZmaWNlOm9mZmljZSIgeG1sbnM6dz0idXJuOnNjaGVt YXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6d29yZCIgeG1sbnM6bT0iaHR0cDovL3NjaGVtYXMubWlj cm9zb2Z0LmNvbS9vZmZpY2UvMjAwNC8xMi9vbW1sIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcv VFIvUkVDLWh0bWw0MCI+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIg Y29udGVudD0idGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjxtZXRhIG5hbWU9IkdlbmVyYXRv ciIgY29udGVudD0iTWljcm9zb2Z0IFdvcmQgMTQgKGZpbHRlcmVkIG1lZGl1bSkiPg0KPHN0eWxl PjwhLS0NCi8qIEZvbnQgRGVmaW5pdGlvbnMgKi8NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6 Q2FsaWJyaTsNCglwYW5vc2UtMToyIDE1IDUgMiAyIDIgNCAzIDIgNDt9DQpAZm9udC1mYWNlDQoJ e2ZvbnQtZmFtaWx5OlRhaG9tYTsNCglwYW5vc2UtMToyIDExIDYgNCAzIDUgNCA0IDIgNDt9DQov KiBTdHlsZSBEZWZpbml0aW9ucyAqLw0KcC5Nc29Ob3JtYWwsIGxpLk1zb05vcm1hbCwgZGl2Lk1z b05vcm1hbA0KCXttYXJnaW46MGluOw0KCW1hcmdpbi1ib3R0b206LjAwMDFwdDsNCglmb250LXNp emU6MTIuMHB0Ow0KCWZvbnQtZmFtaWx5OiJUaW1lcyBOZXcgUm9tYW4iLCJzZXJpZiI7fQ0KYTps aW5rLCBzcGFuLk1zb0h5cGVybGluaw0KCXttc28tc3R5bGUtcHJpb3JpdHk6OTk7DQoJY29sb3I6 Ymx1ZTsNCgl0ZXh0LWRlY29yYXRpb246dW5kZXJsaW5lO30NCmE6dmlzaXRlZCwgc3Bhbi5Nc29I eXBlcmxpbmtGb2xsb3dlZA0KCXttc28tc3R5bGUtcHJpb3JpdHk6OTk7DQoJY29sb3I6cHVycGxl Ow0KCXRleHQtZGVjb3JhdGlvbjp1bmRlcmxpbmU7fQ0Kc3Bhbi5FbWFpbFN0eWxlMTcNCgl7bXNv LXN0eWxlLXR5cGU6cGVyc29uYWwtcmVwbHk7DQoJZm9udC1mYW1pbHk6IkNhbGlicmkiLCJzYW5z LXNlcmlmIjsNCgljb2xvcjojMUY0OTdEO30NCi5Nc29DaHBEZWZhdWx0DQoJe21zby1zdHlsZS10 eXBlOmV4cG9ydC1vbmx5Ow0KCWZvbnQtZmFtaWx5OiJDYWxpYnJpIiwic2Fucy1zZXJpZiI7fQ0K QHBhZ2UgV29yZFNlY3Rpb24xDQoJe3NpemU6OC41aW4gMTEuMGluOw0KCW1hcmdpbjoxLjBpbiAx LjBpbiAxLjBpbiAxLjBpbjt9DQpkaXYuV29yZFNlY3Rpb24xDQoJe3BhZ2U6V29yZFNlY3Rpb24x O30NCi0tPjwvc3R5bGU+PCEtLVtpZiBndGUgbXNvIDldPjx4bWw+DQo8bzpzaGFwZWRlZmF1bHRz IHY6ZXh0PSJlZGl0IiBzcGlkbWF4PSIxMDI2IiAvPg0KPC94bWw+PCFbZW5kaWZdLS0+PCEtLVtp ZiBndGUgbXNvIDldPjx4bWw+DQo8bzpzaGFwZWxheW91dCB2OmV4dD0iZWRpdCI+DQo8bzppZG1h cCB2OmV4dD0iZWRpdCIgZGF0YT0iMSIgLz4NCjwvbzpzaGFwZWxheW91dD48L3htbD48IVtlbmRp Zl0tLT4NCjwvaGVhZD4NCjxib2R5IGxhbmc9IkVOLVVTIiBsaW5rPSJibHVlIiB2bGluaz0icHVy cGxlIj4NCjxkaXYgY2xhc3M9IldvcmRTZWN0aW9uMSI+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48 c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1 b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDs7Y29sb3I6IzFGNDk3RCI+bUROUyBvbmx5IGhlbHBz IHRvIGRpc2NvdmVyIFRVUk4gc2VydmljZSBpbiB0aGUgbG9jYWwgbmV0d29yazsgY2xpZW50IGFu ZCBUVVJOIHNlcnZlciBzdGlsbCBoYXZlIHRvIG11dHVhbGx5IGF1dGhlbnRpY2F0ZSBlYWNoIG90 aGVyIHVzaW5nIHRoZSBleGlzdGluZyBsb25nLXRlcm0NCiBhdXRoZW50aWNhdGlvbiBtZWNoYW5p c20uICZuYnNwO1RydXN0ZWQgcHJlLWNvbmZpZ3VyYXRpb24gaXMgb25seSByZXF1aXJlZCB0byB2 YWxpZGF0ZSB0aGUgZGlnaXRhbCBzaWduYXR1cmUgb2YgdGhlIG1ETlMgYW5zd2VyIGp1c3QgbGlr ZSBpdOKAmXMgZG9uZSBpbiBETlNTRUMgYnV0IGlmIGNsaWVudCBhbmQgVFVSTiBzZXJ2ZXIgbXV0 dWFsbHkgYXV0aGVudGljYXRlIHRoZW4gZGlnaXRhbCBzaWduYXR1cmUgZm9yIGFuc3dlcnMgbWF5 IG5vdCBiZSByZXF1aXJlZC48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9y bWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxp YnJpJnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDs7Y29sb3I6IzFGNDk3RCI+PG86cD4mbmJz cDs8L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZv bnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OywmcXVvdDtzYW5z LXNlcmlmJnF1b3Q7O2NvbG9yOiMxRjQ5N0QiPi1UaXJ1PG86cD48L286cD48L3NwYW4+PC9wPg0K PHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1m YW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7O2NvbG9yOiMx RjQ5N0QiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxkaXYgc3R5bGU9ImJvcmRlcjpu b25lO2JvcmRlci1sZWZ0OnNvbGlkIGJsdWUgMS41cHQ7cGFkZGluZzowaW4gMGluIDBpbiA0LjBw dCI+DQo8ZGl2Pg0KPGRpdiBzdHlsZT0iYm9yZGVyOm5vbmU7Ym9yZGVyLXRvcDpzb2xpZCAjQjVD NERGIDEuMHB0O3BhZGRpbmc6My4wcHQgMGluIDBpbiAwaW4iPg0KPHAgY2xhc3M9Ik1zb05vcm1h bCI+PGI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7VGFo b21hJnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDsiPkZyb206PC9zcGFuPjwvYj48c3BhbiBz dHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtUYWhvbWEmcXVvdDssJnF1 b3Q7c2Fucy1zZXJpZiZxdW90OyI+IEJlbmphbWluIFNjaHdhcnR6IFttYWlsdG86YmVtYXNjQHdl YnJ0Yy5vcmddDQo8YnI+DQo8Yj5TZW50OjwvYj4gV2VkbmVzZGF5LCBBcHJpbCAwOCwgMjAxNSA3 OjU3IFBNPGJyPg0KPGI+VG86PC9iPiBUaXJ1bWFsZXN3YXIgUmVkZHkgKHRpcmVkZHkpPGJyPg0K PGI+Q2M6PC9iPiBTaW1vbiBQZXJyZWF1bHQ7IHRyYW1AaWV0Zi5vcmc8YnI+DQo8Yj5TdWJqZWN0 OjwvYj4gUmU6IFt0cmFtXSBGd2Q6IFJlOiBbcnRjd2ViXSBkcmFmdC1zY2h3YXJ0ei1ydGN3ZWIt cmV0dXJuPG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjxwIGNsYXNzPSJN c29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3Jt YWwiPklmIHRoZSBUVVJOIHNlcnZlcidzIGlkZW50aXR5IGlzIGRpc2NvdmVyZWQgb3ZlciBtRE5T LCB0aGVuIGhvdyBjYW4gdGhlIGNsaWVudCBhdXRoZW50aWNhdGUgdGhlIFRVUk4gc2VydmVyLCBl eGNlcHQgdG8gcHJvdmUgdGhhdCBpdCdzIHRoZSBzYW1lIG9uZSBhZHZlcnRpc2VkIG92ZXIgbURO Uz8mbmJzcDsgQXNzdW1pbmcgbUROUyBpcyB0cml2aWFsIHRvIGZvcmdlIG9uIGEgYnJvYWRjYXN0 IG5ldHdvcmssIHRoaXMgZG9lcw0KIG5vdCBzZWVtIGxpa2Ugc3VmZmljaWVudCBwcm90ZWN0aW9u LiZuYnNwOyBNYXliZSB5b3UgYXJlIHNheWluZyB0aGF0IHRoZSBUVVJOIHNlcnZlcidzICZxdW90 O3JlYWwgaWRlbnRpdHkmcXVvdDsgaXMgY29uZmlndXJlZCBieSBzb21lIG90aGVyIG1lY2hhbmlz bSwgYW5kIG9ubHkgaXRzIGFkZHJlc3MgaXMgZGlzdHJpYnV0ZWQgYnkgbUROUz88bzpwPjwvbzpw PjwvcD4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4N CjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPkknbSBub3QgZmFtaWxpYXIgd2l0 aCB0aGUgaW50ZXJhY3Rpb24gYmV0d2VlbiBtRE5TIGFuZCBETlNTRUMsIG9yIGhvdyB0aGlzIHdv dWxkIGhlbHAgdG8gaWRlbnRpZnkgdHJ1c3RlZCBzZXJ2ZXJzLiZuYnNwOyBUaGlzIHNlZW1zIGxp a2UgYW5vdGhlciBjYXNlIGluIHdoaWNoIGEgdHJ1c3RlZCBwcmUtY29uZmlndXJhdGlvbiBtZWNo YW5pc20gaXMgc3RpbGwgcmVxdWlyZWQuPG86cD48L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0K PGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPGRpdj4N CjxwIGNsYXNzPSJNc29Ob3JtYWwiPk9uIFdlZCwgQXByIDgsIDIwMTUgYXQgODo0MCBBTSwgVGly dW1hbGVzd2FyIFJlZGR5ICh0aXJlZGR5KSAmbHQ7PGEgaHJlZj0ibWFpbHRvOnRpcmVkZHlAY2lz Y28uY29tIiB0YXJnZXQ9Il9ibGFuayI+dGlyZWRkeUBjaXNjby5jb208L2E+Jmd0OyB3cm90ZTo8 bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPiZndDsgLS0tLS1PcmlnaW5hbCBN ZXNzYWdlLS0tLS08YnI+DQomZ3Q7IEZyb206IHRyYW0gW21haWx0bzo8YSBocmVmPSJtYWlsdG86 dHJhbS1ib3VuY2VzQGlldGYub3JnIj50cmFtLWJvdW5jZXNAaWV0Zi5vcmc8L2E+XSBPbiBCZWhh bGYgT2YgU2ltb24gUGVycmVhdWx0PGJyPg0KJmd0OyBTZW50OiBXZWRuZXNkYXksIEFwcmlsIDA4 LCAyMDE1IDU6MzkgUE08YnI+DQomZ3Q7IFRvOiA8YSBocmVmPSJtYWlsdG86dHJhbUBpZXRmLm9y ZyI+dHJhbUBpZXRmLm9yZzwvYT48YnI+DQomZ3Q7IFN1YmplY3Q6IFt0cmFtXSBGd2Q6IFJlOiBb cnRjd2ViXSBkcmFmdC1zY2h3YXJ0ei1ydGN3ZWItcmV0dXJuPGJyPg0KJmd0Ozxicj4NCiZndDsg VFJBTXN0ZXJzLDxicj4NCiZndDs8YnI+DQomZ3Q7IEknZCBsaWtlIHRvIHNlZSBzb21lIGRpc2N1 c3Npb24gb24gaG93IHRoaXMgaW1wYWN0cyB0aGUgc2VydmVyLWRpc2NvdmVyeTxicj4NCiZndDsg ZHJhZnQuIFRoaXMgcGFydCBpbiBwYXJ0aWN1bGFyLi4uPGJyPg0KJmd0Ozxicj4NCiZndDsgJnF1 b3Q7ZW5kcG9pbnRzIE1VU1QgTk9UIGltcGxlbWVudCBhJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5i c3A7Y29uZmlndXJhdGlvbiBiYXNlZCBvbjxicj4NCiZndDsgdW5hdXRoZW50aWNhdGVkPGJyPg0K Jmd0OyBuZXR3b3JrIG11bHRpY2FzdCAoZS5nLiBtRE5TKSZxdW90Ozxicj4NCiZndDs8YnI+DQom Z3Q7IC4uLnNlZW1zIGF0IG9kZHMgd2l0aCB3aGF0IHdhcyBkZWNpZGVkIGluIERhbGxhcyAoaS5l LiwgZGVmaW5lIG1ETlM8YnI+DQomZ3Q7IGRpc2NvdmVyeSkuPGJyPg0KJmd0Ozxicj4NCiZndDsg VGhvdWdodHM/PGJyPg0KPGJyPg0KWWVzLiBBZnRlciBUVVJOIHNlcnZlciBpcyBkaXNjb3ZlcmVk IHVzaW5nIG1ETlMsIGNsaWVudCBtdXN0IGF1dGhlbnRpY2F0ZSB0aGUgVFVSTiBzZXJ2ZXIgdG8g YXZvaWQgc29tZSBtYWxpY2lvdXMgaG9zdCBhZHZlcnRpc2luZyB0aGF0IGl0IG9mZmVycyBUVVJO IHNlcnZpY2UuIEZ1cnRoZXIgbUROUw0KPGEgaHJlZj0iaHR0cDovL3Rvb2xzLmlldGYub3JnL2h0 bWwvcmZjNjc2MiNzZWN0aW9uLTIxIiB0YXJnZXQ9Il9ibGFuayI+aHR0cDovL3Rvb2xzLmlldGYu b3JnL2h0bWwvcmZjNjc2MiNzZWN0aW9uLTIxPC9hPiBhbHNvIHJlZmVycyB0byB1c2luZyBETlNT RUMgc28gdGhhdCB0aGUgY2xpZW50IGNhbiBlbnN1cmUgdGhhdCB0aGUgc2VydmljZSBpcyBwcm92 aWRlZCBieSBhIHRydXN0ZWQgcGFydGljaXBhbnQgYW5kIG5vdCBhIHJvdWdlIHBhcnRpY2lwYW50 Ljxicj4NCjxicj4NCi1UaXJ1PG86cD48L286cD48L3A+DQo8ZGl2Pg0KPGRpdj4NCjxwIGNsYXNz PSJNc29Ob3JtYWwiPjxicj4NCiZndDs8YnI+DQomZ3Q7IEkgc2VlIGhhdmluZyBhIGNvaGVyZW50 IHN0b3J5IGZvciByZXR1cm4gYW5kIHNlcnZlci1kaXNjb3ZlcnkgYXMgc29tZXdoYXQ8YnI+DQom Z3Q7IHJlcXVpcmVkLi4uPGJyPg0KJmd0Ozxicj4NCiZndDsgU2ltb248YnI+DQomZ3Q7PGJyPg0K Jmd0OyAtLS0tLS0tLSBNZXNzYWdlIHRyYW5zZsOpcsOpIC0tLS0tLS0tPGJyPg0KJmd0OyBTdWpl dCA6IFJlOiBbcnRjd2ViXSBkcmFmdC1zY2h3YXJ0ei1ydGN3ZWItcmV0dXJuIERhdGUgOiBXZWQs IDggQXByIDIwMTU8YnI+DQomZ3Q7IDAwOjU4OjI5ICYjNDM7MDAwMCBEZSA6IEN1bGxlbiBKZW5u aW5ncyAoZmx1ZmZ5KSAmbHQ7PGEgaHJlZj0ibWFpbHRvOmZsdWZmeUBjaXNjby5jb20iPmZsdWZm eUBjaXNjby5jb208L2E+Jmd0OyBQb3VyIDo8YnI+DQomZ3Q7IDxhIGhyZWY9Im1haWx0bzpydGN3 ZWJAaWV0Zi5vcmciPnJ0Y3dlYkBpZXRmLm9yZzwvYT4gJmx0OzxhIGhyZWY9Im1haWx0bzpydGN3 ZWJAaWV0Zi5vcmciPnJ0Y3dlYkBpZXRmLm9yZzwvYT4mZ3Q7PGJyPg0KJmd0Ozxicj4NCiZndDs8 YnI+DQomZ3Q7ICZndDsgT24gTWFyIDI2LCAyMDE1LCBhdCA5OjIwIEFNLCBDdWxsZW4gSmVubmlu Z3MgJmx0OzxhIGhyZWY9Im1haWx0bzpmbHVmZnlAY2lzY28uY29tIj5mbHVmZnlAY2lzY28uY29t PC9hPiZndDsgd3JvdGU6PGJyPg0KJmd0OyAmZ3Q7PGJyPg0KJmd0OyAmZ3Q7IEknZCBsaWtlIHRv IHBvaW50IG91dCB0aGF0IHRoZSBjb21iaW5hdGlvbiBvZiBpZXRmLXRyYW0tdHVybi1zZXJ2ZXIt ZGlzY292ZXJ5PGJyPg0KJmd0OyBhbmQgZHJhZnQtc2Nod2FydHotcnRjd2ViLXJldHVybiBhbGxv dyBhbnkgbmV0d29yayB5b3UgYXJlIGNvbm5lY3RlZCB0bzxicj4NCiZndDsgbW9yZSBvciBsZXNz IE1JVE0geW91ciBtZWRpYSBhbmQgZG8gdGhpbmdzIGxpa2UgcmF0ZSBsaW1pdCBpdCwgZ2VuZXJh dGU8YnI+DQomZ3Q7IGFuYWx5dGljcyBvbiB3aG8geW91IGFyZSB0YWxraW5nIHRvLCBmb3JjZSB5 b3VyIHRyYWZmaWMgdGhyb3VnaCBhbjxicj4NCiZndDsgaW50ZXJtZWRpYXJ5IHRoYXQgaXMgaW4g YSZuYnNwOyBkaWZmZXJlbnQgbGVnYWwganVyaXNkaWN0aW9uIGFuZCBzbyBvbi48YnI+DQomZ3Q7 PGJyPg0KJmd0OyBXZSBkaXNjdXNzZWQgdGhpcyBhZnRlciB0aGUgbWVldGluZyBhbmQgY2FtZSB1 cCB3aXRoIGEmbmJzcDsgd2F5IHRvIHJlc29sdmUgdGhpczxicj4NCiZndDsgY29uY2Vybi4gQmVu amFtaW4gaGFzIGFkZGVkIHNvbWUgdGV4dCB0byB0aGUgLTA2IHRvIHRoYXQgc3BlY2lmaWNhbGx5 PGJyPg0KJmd0OyBhZGRyZXNzZXMgdGhpcyBpc3N1ZTxicj4NCiZndDs8YnI+DQomZ3Q7IDxhIGhy ZWY9Imh0dHA6Ly93d3cuaWV0Zi5vcmcvcmZjZGlmZj91cmwxPWRyYWZ0LXNjaHdhcnR6LXJ0Y3dl Yi1yZXR1cm4tMDUmYW1wO3VybDI9ZHJhZnQtIiB0YXJnZXQ9Il9ibGFuayI+DQpodHRwOi8vd3d3 LmlldGYub3JnL3JmY2RpZmY/dXJsMT1kcmFmdC1zY2h3YXJ0ei1ydGN3ZWItcmV0dXJuLTA1JmFt cDt1cmwyPWRyYWZ0LTwvYT48YnI+DQomZ3Q7IHNjaHdhcnR6LXJ0Y3dlYi1yZXR1cm4tMDY8YnI+ DQomZ3Q7PGJyPg0KJmd0OyBUaGlzIGNvbXBsZXRlbHkgZGVhbHMgd2l0aCB0aGUgaXNzdWUgSSBy YWlzZWQgYW5kIHdpdGggdGhhdCBjaGFuZ2UgSSBzdXBwb3J0PGJyPg0KJmd0OyBhZG9wdGluZyB0 aGlzIGFzIGEgV0cgZG9jdW1lbnQuPGJyPg0KJmd0Ozxicj4NCiZndDsgQWZ0ZXIgYWRvcHRpb24s IEkgdGhpbmsgdGhlIFdHIHNob3VsZCBjb25zaWRlciBpZiBhbnkgdGV4dCBpcyBuZWVkZWQgYXJv dW5kPGJyPg0KJmd0OyB0aGUgaXNzdWUgb2YgVFVSTiBjcmVkZW50aWFscy4gKElmIHlvdSBydW4g VFVSTiB3aXRoIG5vIGNyZWRlbnRpYWxzIGFuZCBhbjxicj4NCiZndDsgYXR0YWNrZXIgY2FuIHNw b29mIHRoZSBJUCBhZGRyZXNzIGluIFVEUCBwYWNrZXRzLCB5b3UgY2FuIGVuZCB1cCB3aXRoIHRo ZTxicj4NCiZndDsgVFVSTiBzZXJ2ZXJzIGluIGEgbmFzdHkgZm9yd2FyZGluZyBsb29wIHRoYXQg YWxsb3dzIGFuIGh1Z2UgYW1wbGlmaWNhdGlvbjxicj4NCiZndDsgZmFjdG9yIGZvciBhbiBhdHRh Y2tlciB0cnlpbmcgZG8gRE9TIHRoZSB0dXJuIHNlcnZlcnMgLSB0aGlzIGlzIHN0aWxsIHBvc3Np YmxlPGJyPg0KJmd0OyB3aXRoIGF1dGhlbnRpY2F0aW9uIGJ1dCB5b3Uga25vdyB3aG8gdG8gYmxh bWUuIFdoZW4gVFVSTiB3YXMgZmlyc3QgZG9uZTxicj4NCiZndDsgd2l0aCB3YXMgb25lIG9mIHRo ZSByZWFzb24gVFVSTiByZXF1aXJlcyBhdXRoIGFuZCBTVFVOIGRvZXMgbm90KS48YnI+DQomZ3Q7 IEhvd2V2ZXIsIEkgYmVsaWV2ZSB0aGlzIGlzc3VlIGNhbiBzb2x2ZWQgYW5kIHNob3VsZCBub3Qg YmxvY2sgYWRvcHRpbmcgdGhlPGJyPg0KJmd0OyBkcmFmdC4gKTxicj4NCiZndDs8YnI+DQomZ3Q7 IEN1bGxlbjxicj4NCiZndDs8YnI+DQomZ3Q7PGJyPg0KJmd0Ozxicj4NCiZndDs8YnI+DQomZ3Q7 IF9fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fPGJyPg0KJmd0 OyBydGN3ZWIgbWFpbGluZyBsaXN0PGJyPg0KJmd0OyA8YSBocmVmPSJtYWlsdG86cnRjd2ViQGll dGYub3JnIj5ydGN3ZWJAaWV0Zi5vcmc8L2E+PGJyPg0KJmd0OyA8YSBocmVmPSJodHRwczovL3d3 dy5pZXRmLm9yZy9tYWlsbWFuL2xpc3RpbmZvL3J0Y3dlYiIgdGFyZ2V0PSJfYmxhbmsiPmh0dHBz Oi8vd3d3LmlldGYub3JnL21haWxtYW4vbGlzdGluZm8vcnRjd2ViPC9hPjxicj4NCiZndDs8YnI+ DQomZ3Q7PGJyPg0KJmd0OyBfX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fXzxicj4NCiZndDsgdHJhbSBtYWlsaW5nIGxpc3Q8YnI+DQomZ3Q7IDxhIGhyZWY9Im1h aWx0bzp0cmFtQGlldGYub3JnIj50cmFtQGlldGYub3JnPC9hPjxicj4NCiZndDsgPGEgaHJlZj0i aHR0cHM6Ly93d3cuaWV0Zi5vcmcvbWFpbG1hbi9saXN0aW5mby90cmFtIiB0YXJnZXQ9Il9ibGFu ayI+aHR0cHM6Ly93d3cuaWV0Zi5vcmcvbWFpbG1hbi9saXN0aW5mby90cmFtPC9hPjxicj4NCjxi cj4NCl9fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fPGJyPg0K dHJhbSBtYWlsaW5nIGxpc3Q8YnI+DQo8YSBocmVmPSJtYWlsdG86dHJhbUBpZXRmLm9yZyI+dHJh bUBpZXRmLm9yZzwvYT48YnI+DQo8YSBocmVmPSJodHRwczovL3d3dy5pZXRmLm9yZy9tYWlsbWFu L2xpc3RpbmZvL3RyYW0iIHRhcmdldD0iX2JsYW5rIj5odHRwczovL3d3dy5pZXRmLm9yZy9tYWls bWFuL2xpc3RpbmZvL3RyYW08L2E+PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9k aXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjwvZGl2Pg0K PC9kaXY+DQo8L2Rpdj4NCjwvYm9keT4NCjwvaHRtbD4NCg== --_000_913383AAA69FF945B8F946018B75898A411FE473xmbrcdx10ciscoc_-- From nobody Wed Apr 8 09:58:36 2015 Return-Path: X-Original-To: tram@ietfa.amsl.com Delivered-To: tram@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 4B5501B3462 for ; Wed, 8 Apr 2015 09:58:36 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2 X-Spam-Level: X-Spam-Status: No, score=-2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, SPF_PASS=-0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id xq5ch11FIRK0 for ; Wed, 8 Apr 2015 09:58:34 -0700 (PDT) Received: from mail-ob0-x229.google.com (mail-ob0-x229.google.com [IPv6:2607:f8b0:4003:c01::229]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id B17F11A88EF for ; Wed, 8 Apr 2015 09:58:34 -0700 (PDT) Received: by obbgh1 with SMTP id gh1so139431758obb.1 for ; Wed, 08 Apr 2015 09:58:34 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :cc:content-type; bh=T+z1B55yHtt+K8GPGphXkhPK6AGjD5B22C9+i5WfS+A=; b=uGBAtrSom//c75uCR/2Pi5fB4l67GYN7YmkfIjIpADMU+JR3zAEfm3GJyQv7S10ujL iSeh2BeqApQvnxi3SOcQsBb6l7TpTvk6e4U8+6Dsq4SXpyNCnFPzM0GVOcDZXZi6ZjKi J7Tlz7+bKW87ly5avQUG0mWcrZAbe57NKN0ZyZZ8HQY/C2wD5wT+YJncS0NWs+xHmioM 06VcauVyFzh3T9MJoyieBQ3Afc6dbbSWiJ67wMDO8+N2ffAsQYSl/j1bap7zoZei087W Wzql9QChvYz+Qdf85tXWNf8r81LeiSWLwYfxIRwJ4z+IQZB/PejS3AE4rFvC59VV1VAB WLwQ== MIME-Version: 1.0 X-Received: by 10.182.63.3 with SMTP id c3mr2055984obs.1.1428512307597; Wed, 08 Apr 2015 09:58:27 -0700 (PDT) Received: by 10.202.48.151 with HTTP; Wed, 8 Apr 2015 09:58:27 -0700 (PDT) In-Reply-To: References: <6042868B-57EB-4C5A-B93E-C58D846E14E4@cisco.com> <55251A5B.5040909@jive.com> <913383AAA69FF945B8F946018B75898A411FE350@xmb-rcd-x10.cisco.com> Date: Wed, 8 Apr 2015 09:58:27 -0700 Message-ID: From: Martin Thomson To: Benjamin Schwartz Content-Type: text/plain; charset=UTF-8 Archived-At: Cc: Simon Perreault , "tram@ietf.org" , "Tirumaleswar Reddy \(tireddy\)" Subject: Re: [tram] Fwd: Re: [rtcweb] draft-schwartz-rtcweb-return X-BeenThere: tram@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "Discussing the creation of a Turn Revised And Modernized \(TRAM\) WG, which goal is to consolidate the various initiatives to update TURN and STUN." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 08 Apr 2015 16:58:36 -0000 On 8 April 2015 at 07:27, Benjamin Schwartz wrote: > If the TURN server's identity is discovered over mDNS, then how can the > client authenticate the TURN server, except to prove that it's the same one > advertised over mDNS? Assuming mDNS is trivial to forge on a broadcast > network, this does not seem like sufficient protection. Maybe you are > saying that the TURN server's "real identity" is configured by some other > mechanism, and only its address is distributed by mDNS? That's one way to deal with the problem. I certainly agree with the view that you should not permit other users on the same network to capture and potentially block traffic. We care more about blocking here than anything other abuse because we have (D)TLS. It's annoying in a sense, because in many cases mDNS would be a perfect solution: networks where you trust the devices not to misbehave in this fashion (i.e., my home) and networks where there are no local broadcast capabilities (i.e., most ISP access networks). If you want a more nuanced view of this, I think that the primary concern is that methods like mDNS allow network users in some cases to block traffic that they would not otherwise be able to do. An equally "unauthenticated" discovery mechanism could rely on capture of a route (something very different from being able to receive and send link-layer broadcast packets). That method would not degrade security. The text, as proposed, fails to allow for that possibility. An anycast-based mDNS discovery method is a potential way of achieving that goal. --Martin (p.s., mDNS + DNSSEC isn't worth pondering too hard, in my opinion.) From nobody Thu Apr 9 02:36:22 2015 Return-Path: X-Original-To: tram@ietfa.amsl.com Delivered-To: tram@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 2B9191B2AC5; Thu, 9 Apr 2015 02:36:20 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.9 X-Spam-Level: X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id JsuMMQxgyyBG; Thu, 9 Apr 2015 02:36:18 -0700 (PDT) Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id B0CFB1B2A73; Thu, 9 Apr 2015 02:36:18 -0700 (PDT) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: internet-drafts@ietf.org To: X-Test-IDTracker: no X-IETF-IDTracker: 5.13.0.p1 Auto-Submitted: auto-generated Precedence: bulk Message-ID: <20150409093618.14426.49362.idtracker@ietfa.amsl.com> Date: Thu, 09 Apr 2015 02:36:18 -0700 Archived-At: Cc: tram@ietf.org Subject: [tram] I-D Action: draft-ietf-tram-turnbis-03.txt X-BeenThere: tram@ietf.org X-Mailman-Version: 2.1.15 List-Id: "Discussing the creation of a Turn Revised And Modernized \(TRAM\) WG, which goal is to consolidate the various initiatives to update TURN and STUN." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 09 Apr 2015 09:36:20 -0000 A New Internet-Draft is available from the on-line Internet-Drafts directories. This draft is a work item of the TURN Revised and Modernized Working Group of the IETF. Title : Traversal Using Relays around NAT (TURN): Relay Extensions to Session Traversal Utilities for NAT (STUN) Authors : Tirumaleswar Reddy Alan Johnston Philip Matthews Jonathan Rosenberg Filename : draft-ietf-tram-turnbis-03.txt Pages : 77 Date : 2015-04-09 Abstract: If a host is located behind a NAT, then in certain situations it can be impossible for that host to communicate directly with other hosts (peers). In these situations, it is necessary for the host to use the services of an intermediate node that acts as a communication relay. This specification defines a protocol, called TURN (Traversal Using Relays around NAT), that allows the host to control the operation of the relay and to exchange packets with its peers using the relay. TURN differs from some other relay control protocols in that it allows a client to communicate with multiple peers using a single relay address. The TURN protocol was designed to be used as part of the ICE (Interactive Connectivity Establishment) approach to NAT traversal, though it also can be used without ICE. The IETF datatracker status page for this draft is: https://datatracker.ietf.org/doc/draft-ietf-tram-turnbis/ There's also a htmlized version available at: http://tools.ietf.org/html/draft-ietf-tram-turnbis-03 A diff from the previous version is available at: http://www.ietf.org/rfcdiff?url2=draft-ietf-tram-turnbis-03 Please note that it may take a couple of minutes from the time of submission until the htmlized version and diff are available at tools.ietf.org. Internet-Drafts are also available by anonymous FTP at: ftp://ftp.ietf.org/internet-drafts/ From nobody Thu Apr 9 02:47:00 2015 Return-Path: X-Original-To: tram@ietfa.amsl.com Delivered-To: tram@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 88F571B2D44 for ; Thu, 9 Apr 2015 02:46:59 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -14.511 X-Spam-Level: X-Spam-Status: No, score=-14.511 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_HI=-5, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id vVnncpsV-pf0 for ; Thu, 9 Apr 2015 02:46:54 -0700 (PDT) Received: from alln-iport-5.cisco.com (alln-iport-5.cisco.com [173.37.142.92]) (using TLSv1 with cipher RC4-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 569271B2D40 for ; Thu, 9 Apr 2015 02:46:54 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=2655; q=dns/txt; s=iport; t=1428572814; x=1429782414; h=from:to:subject:date:message-id:references:in-reply-to: content-transfer-encoding:mime-version; bh=Qot9vcwyOwCqAXKMLHcEydYwcLXv3ZqJH1TYVy0nQAw=; b=VAwcYtiSkjrnESNq9e3/xUABnbP7jqzFeoD3pOv9xBshTWb5SRZ6hDTB 7PP8loi8ojSkXsSPneCExILVc8LHK28O6/3ZpcPludztS/h31nZ92Oui3 k/dmslC3xM1M8lGacTXRBrSVa1IbOd7+D4QHudckezVwuCnqPs5WCvCDy Y=; X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: A0D3BACbSSZV/4oNJK1cgwhSVwUFw1dmCYFJCoV9AoE5OBQBAQEBAQEBfYQfAQEBBAEBATc0FwQCAQgRBAEBCxQJBycLFAkIAgQTCAGIIQgFzF8BAQEBAQEBAQEBAQEBAQEBAQEBAQEXiyuESzgGgxGBFgWQeoN4hzA6gwCQDiKDb2+BRH8BAQE X-IronPort-AV: E=Sophos;i="5.11,549,1422921600"; d="scan'208";a="139636638" Received: from alln-core-5.cisco.com ([173.36.13.138]) by alln-iport-5.cisco.com with ESMTP; 09 Apr 2015 09:46:53 +0000 Received: from xhc-aln-x13.cisco.com (xhc-aln-x13.cisco.com [173.36.12.87]) by alln-core-5.cisco.com (8.14.5/8.14.5) with ESMTP id t399krv2009762 (version=TLSv1/SSLv3 cipher=AES128-SHA bits=128 verify=FAIL) for ; Thu, 9 Apr 2015 09:46:53 GMT Received: from xmb-rcd-x10.cisco.com ([169.254.15.175]) by xhc-aln-x13.cisco.com ([173.36.12.87]) with mapi id 14.03.0195.001; Thu, 9 Apr 2015 04:46:53 -0500 From: "Tirumaleswar Reddy (tireddy)" To: "tram@ietf.org" Thread-Topic: [tram] I-D Action: draft-ietf-tram-turnbis-03.txt Thread-Index: AQHQcqil6Maww8yip0mHg53nxQQrDZ1EbGpA Date: Thu, 9 Apr 2015 09:46:52 +0000 Message-ID: <913383AAA69FF945B8F946018B75898A411FEAF1@xmb-rcd-x10.cisco.com> References: <20150409093618.14426.49362.idtracker@ietfa.amsl.com> In-Reply-To: <20150409093618.14426.49362.idtracker@ietfa.amsl.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.65.71.166] Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 Archived-At: Subject: Re: [tram] I-D Action: draft-ietf-tram-turnbis-03.txt X-BeenThere: tram@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "Discussing the creation of a Turn Revised And Modernized \(TRAM\) WG, which goal is to consolidate the various initiatives to update TURN and STUN." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 09 Apr 2015 09:46:59 -0000 Updated draft addresses comments from Justin on dual allocation. -Tiru > -----Original Message----- > From: tram [mailto:tram-bounces@ietf.org] On Behalf Of internet- > drafts@ietf.org > Sent: Thursday, April 09, 2015 3:06 PM > To: i-d-announce@ietf.org > Cc: tram@ietf.org > Subject: [tram] I-D Action: draft-ietf-tram-turnbis-03.txt >=20 >=20 > A New Internet-Draft is available from the on-line Internet-Drafts direct= ories. > This draft is a work item of the TURN Revised and Modernized Working > Group of the IETF. >=20 > Title : Traversal Using Relays around NAT (TURN): Relay > Extensions to Session Traversal Utilities for NAT (STUN) > Authors : Tirumaleswar Reddy > Alan Johnston > Philip Matthews > Jonathan Rosenberg > Filename : draft-ietf-tram-turnbis-03.txt > Pages : 77 > Date : 2015-04-09 >=20 > Abstract: > If a host is located behind a NAT, then in certain situations it can > be impossible for that host to communicate directly with other hosts > (peers). In these situations, it is necessary for the host to use > the services of an intermediate node that acts as a communication > relay. This specification defines a protocol, called TURN (Traversal > Using Relays around NAT), that allows the host to control the > operation of the relay and to exchange packets with its peers using > the relay. TURN differs from some other relay control protocols in > that it allows a client to communicate with multiple peers using a > single relay address. >=20 > The TURN protocol was designed to be used as part of the ICE > (Interactive Connectivity Establishment) approach to NAT traversal, > though it also can be used without ICE. >=20 >=20 > The IETF datatracker status page for this draft is: > https://datatracker.ietf.org/doc/draft-ietf-tram-turnbis/ >=20 > There's also a htmlized version available at: > http://tools.ietf.org/html/draft-ietf-tram-turnbis-03 >=20 > A diff from the previous version is available at: > http://www.ietf.org/rfcdiff?url2=3Ddraft-ietf-tram-turnbis-03 >=20 >=20 > Please note that it may take a couple of minutes from the time of > submission until the htmlized version and diff are available at tools.iet= f.org. >=20 > Internet-Drafts are also available by anonymous FTP at: > ftp://ftp.ietf.org/internet-drafts/ >=20 > _______________________________________________ > tram mailing list > tram@ietf.org > https://www.ietf.org/mailman/listinfo/tram From nobody Thu Apr 9 23:21:57 2015 Return-Path: X-Original-To: tram@ietfa.amsl.com Delivered-To: tram@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 49FE31ACE8E for ; Thu, 9 Apr 2015 23:21:56 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.75 X-Spam-Level: X-Spam-Status: No, score=-1.75 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_ENVFROM_END_DIGIT=0.25, FREEMAIL_FROM=0.001, SPF_PASS=-0.001] autolearn=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id EMbwbihkvFdu for ; Thu, 9 Apr 2015 23:21:55 -0700 (PDT) Received: from mail-wg0-x235.google.com (mail-wg0-x235.google.com [IPv6:2a00:1450:400c:c00::235]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 899D61ACEC6 for ; Thu, 9 Apr 2015 23:21:32 -0700 (PDT) Received: by wgso17 with SMTP id o17so7735655wgs.1 for ; Thu, 09 Apr 2015 23:21:31 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :cc:content-type; bh=vlnr/PUkEwhEu1CQQ3PTmQFFi/o3jaQIylrrA2pq3kA=; b=S+kg0rifQ8zk2y2krCNzQcxxwYceq5HEMh65Axx7GBQ0BYIbRCfkb+aUU5Tiu8IOQ4 duI37SJnbkXsP+a/3LnoaittVZ8gUDaU/gnQr+SnYc4bM0IEbgLZ2sgOSinuNi2LQtMq 68rb/BKyYfvG3IS42uto9tO648MJMeX0djyZFmQ+2QvWuOFvqX8d7xv7+hxbKDRpIvX+ Ut6xh9EZqEn/hJDIHf6gpoCY6IToDbjISPUCItfmCekkefC+Ae/h/sZtodWztj9sK2gC 4B1Uy2uusio22c7Qmg3Bv9JFYhwqVRcfBC8k2X/n/XbClMUPScf+PA47WTbUHLfi8csM lvbg== MIME-Version: 1.0 X-Received: by 10.180.206.98 with SMTP id ln2mr12190927wic.94.1428646891382; Thu, 09 Apr 2015 23:21:31 -0700 (PDT) Received: by 10.194.190.7 with HTTP; Thu, 9 Apr 2015 23:21:31 -0700 (PDT) In-Reply-To: <20150409093618.14426.49362.idtracker@ietfa.amsl.com> References: <20150409093618.14426.49362.idtracker@ietfa.amsl.com> Date: Thu, 9 Apr 2015 23:21:31 -0700 Message-ID: From: Oleg Moskalenko To: "tram@ietf.org" Content-Type: text/plain; charset=UTF-8 Archived-At: Cc: "Tirumaleswar Reddy \(tireddy\)" Subject: Re: [tram] I-D Action: draft-ietf-tram-turnbis-03.txt X-BeenThere: tram@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "Discussing the creation of a Turn Revised And Modernized \(TRAM\) WG, which goal is to consolidate the various initiatives to update TURN and STUN." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 10 Apr 2015 06:21:56 -0000 I have comments on section 15.11. It has words how the ADDITIONAL-ADDRESS-FAMILY attribute can be present in both ALLOCATE and REFRESH requests. But according to the new 7.1 section, that attribute cannot be present in the REFRESH request. So the mentioning of the REFRESH request has to be removed from 15.11. Thanks Oleg On Thu, Apr 9, 2015 at 2:36 AM, wrote: > > A New Internet-Draft is available from the on-line Internet-Drafts directories. > This draft is a work item of the TURN Revised and Modernized Working Group of the IETF. > > Title : Traversal Using Relays around NAT (TURN): Relay Extensions to Session Traversal Utilities for NAT (STUN) > Authors : Tirumaleswar Reddy > Alan Johnston > Philip Matthews > Jonathan Rosenberg > Filename : draft-ietf-tram-turnbis-03.txt > Pages : 77 > Date : 2015-04-09 > > Abstract: > If a host is located behind a NAT, then in certain situations it can > be impossible for that host to communicate directly with other hosts > (peers). In these situations, it is necessary for the host to use > the services of an intermediate node that acts as a communication > relay. This specification defines a protocol, called TURN (Traversal > Using Relays around NAT), that allows the host to control the > operation of the relay and to exchange packets with its peers using > the relay. TURN differs from some other relay control protocols in > that it allows a client to communicate with multiple peers using a > single relay address. > > The TURN protocol was designed to be used as part of the ICE > (Interactive Connectivity Establishment) approach to NAT traversal, > though it also can be used without ICE. > > > The IETF datatracker status page for this draft is: > https://datatracker.ietf.org/doc/draft-ietf-tram-turnbis/ > > There's also a htmlized version available at: > http://tools.ietf.org/html/draft-ietf-tram-turnbis-03 > > A diff from the previous version is available at: > http://www.ietf.org/rfcdiff?url2=draft-ietf-tram-turnbis-03 > > > Please note that it may take a couple of minutes from the time of submission > until the htmlized version and diff are available at tools.ietf.org. > > Internet-Drafts are also available by anonymous FTP at: > ftp://ftp.ietf.org/internet-drafts/ > > _______________________________________________ > tram mailing list > tram@ietf.org > https://www.ietf.org/mailman/listinfo/tram From nobody Thu Apr 9 23:28:59 2015 Return-Path: X-Original-To: tram@ietfa.amsl.com Delivered-To: tram@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 16F071ACEAC for ; Thu, 9 Apr 2015 23:28:57 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.75 X-Spam-Level: X-Spam-Status: No, score=-1.75 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_ENVFROM_END_DIGIT=0.25, FREEMAIL_FROM=0.001, SPF_PASS=-0.001] autolearn=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id CdBhQnsC2zO9 for ; Thu, 9 Apr 2015 23:28:55 -0700 (PDT) Received: from mail-wg0-x231.google.com (mail-wg0-x231.google.com [IPv6:2a00:1450:400c:c00::231]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 7BC801ACEAA for ; Thu, 9 Apr 2015 23:28:55 -0700 (PDT) Received: by wgyo15 with SMTP id o15so7830554wgy.2 for ; Thu, 09 Apr 2015 23:28:54 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :cc:content-type; bh=7MEUgqAgvU7zMVpUSCQd77aMtgwO7GA0kTgN+OzOHfw=; b=Nt+pKeH93AhtK9z283VGXvxcm9vE1blRVIbzVhagv95qv1yDdLHX8bfmC8uzNs32+p TeXBsqiW4cVZNtD8cIJb+DdcC9vcZ5NLfWDrko9y1udhg1P9NTJXXZNusbhI09mrrQOG SsXexh0BLeqDHJGh5gqkQAzjqJzGHT8NDRifaq/iTdbc0VA+PXb6jXlZiTrtenvaazhG u+v6OpxPZSnJ1Oatli3GgDY6+4vsAevmNfRk9Vd9dpqDUvHH+whdalGpfbRbL+8ZcuE3 qE6z/gOVL9oA7taAQLGWVbyqkLKPSXMv4dobxFugRVaUg/MGTJaZufKrd2CqDOFTyKRW z65g== MIME-Version: 1.0 X-Received: by 10.180.198.110 with SMTP id jb14mr2024773wic.57.1428647334244; Thu, 09 Apr 2015 23:28:54 -0700 (PDT) Received: by 10.194.190.7 with HTTP; Thu, 9 Apr 2015 23:28:54 -0700 (PDT) In-Reply-To: References: <20150409093618.14426.49362.idtracker@ietfa.amsl.com> Date: Thu, 9 Apr 2015 23:28:54 -0700 Message-ID: From: Oleg Moskalenko To: "tram@ietf.org" Content-Type: text/plain; charset=UTF-8 Archived-At: Cc: "Tirumaleswar Reddy \(tireddy\)" Subject: Re: [tram] I-D Action: draft-ietf-tram-turnbis-03.txt X-BeenThere: tram@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "Discussing the creation of a Turn Revised And Modernized \(TRAM\) WG, which goal is to consolidate the various initiatives to update TURN and STUN." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 10 Apr 2015 06:28:57 -0000 I also have the same comment about the discrepancy in sections 7.1 and 7.2. According to the section 7.1, the ADDITIONAL-ADDRESS-FAMILY must not be included into the REFRESH request; but the section 7.2 is discussing that possibility. I think that in both sections 7.2 and 15.11 the ADDITIONAL-ADDRESS-FAMILY has to be changed to the REQUESTED-ADDRESS-FAMILY. Thanks Oleg On Thu, Apr 9, 2015 at 11:21 PM, Oleg Moskalenko wrote: > I have comments on section 15.11. It has words how the > ADDITIONAL-ADDRESS-FAMILY attribute can be present in both ALLOCATE > and REFRESH requests. But according to the new 7.1 section, that > attribute cannot be present in the REFRESH request. So the mentioning > of the REFRESH request has to be removed from 15.11. > > Thanks > Oleg > > On Thu, Apr 9, 2015 at 2:36 AM, wrote: >> >> A New Internet-Draft is available from the on-line Internet-Drafts directories. >> This draft is a work item of the TURN Revised and Modernized Working Group of the IETF. >> >> Title : Traversal Using Relays around NAT (TURN): Relay Extensions to Session Traversal Utilities for NAT (STUN) >> Authors : Tirumaleswar Reddy >> Alan Johnston >> Philip Matthews >> Jonathan Rosenberg >> Filename : draft-ietf-tram-turnbis-03.txt >> Pages : 77 >> Date : 2015-04-09 >> >> Abstract: >> If a host is located behind a NAT, then in certain situations it can >> be impossible for that host to communicate directly with other hosts >> (peers). In these situations, it is necessary for the host to use >> the services of an intermediate node that acts as a communication >> relay. This specification defines a protocol, called TURN (Traversal >> Using Relays around NAT), that allows the host to control the >> operation of the relay and to exchange packets with its peers using >> the relay. TURN differs from some other relay control protocols in >> that it allows a client to communicate with multiple peers using a >> single relay address. >> >> The TURN protocol was designed to be used as part of the ICE >> (Interactive Connectivity Establishment) approach to NAT traversal, >> though it also can be used without ICE. >> >> >> The IETF datatracker status page for this draft is: >> https://datatracker.ietf.org/doc/draft-ietf-tram-turnbis/ >> >> There's also a htmlized version available at: >> http://tools.ietf.org/html/draft-ietf-tram-turnbis-03 >> >> A diff from the previous version is available at: >> http://www.ietf.org/rfcdiff?url2=draft-ietf-tram-turnbis-03 >> >> >> Please note that it may take a couple of minutes from the time of submission >> until the htmlized version and diff are available at tools.ietf.org. >> >> Internet-Drafts are also available by anonymous FTP at: >> ftp://ftp.ietf.org/internet-drafts/ >> >> _______________________________________________ >> tram mailing list >> tram@ietf.org >> https://www.ietf.org/mailman/listinfo/tram From nobody Thu Apr 9 23:31:10 2015 Return-Path: X-Original-To: tram@ietfa.amsl.com Delivered-To: tram@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 5EA741ACEC2 for ; Thu, 9 Apr 2015 23:31:09 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.75 X-Spam-Level: X-Spam-Status: No, score=-1.75 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_ENVFROM_END_DIGIT=0.25, FREEMAIL_FROM=0.001, SPF_PASS=-0.001] autolearn=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id vu93AftLaJPC for ; Thu, 9 Apr 2015 23:31:06 -0700 (PDT) Received: from mail-wi0-x235.google.com (mail-wi0-x235.google.com [IPv6:2a00:1450:400c:c05::235]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 1A7791ACEC6 for ; Thu, 9 Apr 2015 23:31:06 -0700 (PDT) Received: by widdi4 with SMTP id di4so116758566wid.0 for ; Thu, 09 Apr 2015 23:31:04 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :cc:content-type; bh=Jzb5EvYiJQ6btiqTyn3RdPo8E6OGlAfrbJgP+3fFB6g=; b=yG9InvaXKKERf0unk/u05sMNLwD5F5MtKmwEiF0i92EtJjI+e0TUXUR5n0qKU7e9G+ gv8IA08hajLo6AbObtz4F+ilWHZrDmD4Xr3zVMN2XeBmayAbgPsi5SqmwDyX3fx6gVNf bD7YQzAT34rF12sh88cMdxgUa4I8yUIxsvdKv3b3oe+7B0HE2UqxfeemgWR1dIMblqNM 8tn+lwC7f2QCjVsip5RBDWeREOY5hhv1coQ/pEPsYehzL4T0ls4Blrv2G8OuuELQTrVL cABK60zQbwUs4v63NvhKT83S1IzFuHRUmmtKtoQOyIN3Rior+GUpvN29yxmxxj2ruZGg FjXQ== MIME-Version: 1.0 X-Received: by 10.194.157.68 with SMTP id wk4mr79550wjb.130.1428647464862; Thu, 09 Apr 2015 23:31:04 -0700 (PDT) Received: by 10.194.190.7 with HTTP; Thu, 9 Apr 2015 23:31:04 -0700 (PDT) In-Reply-To: References: <20150409093618.14426.49362.idtracker@ietfa.amsl.com> Date: Thu, 9 Apr 2015 23:31:04 -0700 Message-ID: From: Oleg Moskalenko To: "tram@ietf.org" Content-Type: text/plain; charset=UTF-8 Archived-At: Cc: "Tirumaleswar Reddy \(tireddy\)" Subject: Re: [tram] I-D Action: draft-ietf-tram-turnbis-03.txt X-BeenThere: tram@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "Discussing the creation of a Turn Revised And Modernized \(TRAM\) WG, which goal is to consolidate the various initiatives to update TURN and STUN." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 10 Apr 2015 06:31:09 -0000 ... more precisely, in the section 7.2 the attribute name has to be changed; in the section 15.11, the Refresh request mentioning has to be removed. Thanks Oleg On Thu, Apr 9, 2015 at 11:28 PM, Oleg Moskalenko wrote: > I also have the same comment about the discrepancy in sections 7.1 and > 7.2. According to the section 7.1, the ADDITIONAL-ADDRESS-FAMILY must > not be included into the REFRESH request; but the section 7.2 is > discussing that possibility. > > I think that in both sections 7.2 and 15.11 the > ADDITIONAL-ADDRESS-FAMILY has to be changed to the > REQUESTED-ADDRESS-FAMILY. > > Thanks > Oleg > > > On Thu, Apr 9, 2015 at 11:21 PM, Oleg Moskalenko wrote: >> I have comments on section 15.11. It has words how the >> ADDITIONAL-ADDRESS-FAMILY attribute can be present in both ALLOCATE >> and REFRESH requests. But according to the new 7.1 section, that >> attribute cannot be present in the REFRESH request. So the mentioning >> of the REFRESH request has to be removed from 15.11. >> >> Thanks >> Oleg >> >> On Thu, Apr 9, 2015 at 2:36 AM, wrote: >>> >>> A New Internet-Draft is available from the on-line Internet-Drafts directories. >>> This draft is a work item of the TURN Revised and Modernized Working Group of the IETF. >>> >>> Title : Traversal Using Relays around NAT (TURN): Relay Extensions to Session Traversal Utilities for NAT (STUN) >>> Authors : Tirumaleswar Reddy >>> Alan Johnston >>> Philip Matthews >>> Jonathan Rosenberg >>> Filename : draft-ietf-tram-turnbis-03.txt >>> Pages : 77 >>> Date : 2015-04-09 >>> >>> Abstract: >>> If a host is located behind a NAT, then in certain situations it can >>> be impossible for that host to communicate directly with other hosts >>> (peers). In these situations, it is necessary for the host to use >>> the services of an intermediate node that acts as a communication >>> relay. This specification defines a protocol, called TURN (Traversal >>> Using Relays around NAT), that allows the host to control the >>> operation of the relay and to exchange packets with its peers using >>> the relay. TURN differs from some other relay control protocols in >>> that it allows a client to communicate with multiple peers using a >>> single relay address. >>> >>> The TURN protocol was designed to be used as part of the ICE >>> (Interactive Connectivity Establishment) approach to NAT traversal, >>> though it also can be used without ICE. >>> >>> >>> The IETF datatracker status page for this draft is: >>> https://datatracker.ietf.org/doc/draft-ietf-tram-turnbis/ >>> >>> There's also a htmlized version available at: >>> http://tools.ietf.org/html/draft-ietf-tram-turnbis-03 >>> >>> A diff from the previous version is available at: >>> http://www.ietf.org/rfcdiff?url2=draft-ietf-tram-turnbis-03 >>> >>> >>> Please note that it may take a couple of minutes from the time of submission >>> until the htmlized version and diff are available at tools.ietf.org. >>> >>> Internet-Drafts are also available by anonymous FTP at: >>> ftp://ftp.ietf.org/internet-drafts/ >>> >>> _______________________________________________ >>> tram mailing list >>> tram@ietf.org >>> https://www.ietf.org/mailman/listinfo/tram From nobody Fri Apr 10 00:40:42 2015 Return-Path: X-Original-To: tram@ietfa.amsl.com Delivered-To: tram@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 6144D1B2A49 for ; Fri, 10 Apr 2015 00:40:41 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -14.511 X-Spam-Level: X-Spam-Status: No, score=-14.511 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_HI=-5, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id qnr3IUsxE6UZ for ; Fri, 10 Apr 2015 00:40:39 -0700 (PDT) Received: from alln-iport-6.cisco.com (alln-iport-6.cisco.com [173.37.142.93]) (using TLSv1 with cipher RC4-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 801CA1B2A47 for ; Fri, 10 Apr 2015 00:40:39 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=5538; q=dns/txt; s=iport; t=1428651640; x=1429861240; h=from:to:subject:date:message-id:references:in-reply-to: content-transfer-encoding:mime-version; bh=4KfZxjjhzbcbkw/IJlrCMXCp5Knwm87ar4oUbul7GKg=; b=U0/yIG0s5QKeQgHzRymHUb8fEDUhyohtoMA0Uh4zmNYBJoibnhGgXDN3 qhuiZaWhwfT2sy15lHPgyJh76y3dafYGVfa7d4ixFSV/pKefpmduhPDbp ANPPMT3Qi/F+PmZp8OnvHdWq2ZxbEJ7qpkWzxpW+3zXZ5j5wifhFiBf15 c=; X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: A0CaCACtfSdV/5pdJa1cgwxSVwUFgxDAY2YJgUQKhgECHIElOBQBAQEBAQEBfYQfAQEBAwEBAQEgEToXBAIBCA4DBAEBAQICBh0DAgICHwYLFAEICAIEARIIAYgNAwkICAW3aJB7DYVNAQEBAQEBAQEBAQEBAQEBAQEBAQEBF4EhigqCSIIDFiIGgmIvgRYFjluCKIN4hEeCajqCfYM+hh2GNiKDb2+BRH8BAQE X-IronPort-AV: E=Sophos;i="5.11,555,1422921600"; d="scan'208";a="139958414" Received: from rcdn-core-3.cisco.com ([173.37.93.154]) by alln-iport-6.cisco.com with ESMTP; 10 Apr 2015 07:40:39 +0000 Received: from xhc-aln-x14.cisco.com (xhc-aln-x14.cisco.com [173.36.12.88]) by rcdn-core-3.cisco.com (8.14.5/8.14.5) with ESMTP id t3A7ecA2028225 (version=TLSv1/SSLv3 cipher=AES128-SHA bits=128 verify=FAIL); Fri, 10 Apr 2015 07:40:38 GMT Received: from xmb-rcd-x10.cisco.com ([169.254.15.175]) by xhc-aln-x14.cisco.com ([173.36.12.88]) with mapi id 14.03.0195.001; Fri, 10 Apr 2015 02:40:38 -0500 From: "Tirumaleswar Reddy (tireddy)" To: Oleg Moskalenko , "tram@ietf.org" Thread-Topic: [tram] I-D Action: draft-ietf-tram-turnbis-03.txt Thread-Index: AQHQcqil6Maww8yip0mHg53nxQQrDZ1GG6uAgAACEACAAACbAP//v0PQ Date: Fri, 10 Apr 2015 07:40:37 +0000 Message-ID: <913383AAA69FF945B8F946018B75898A411FF5AB@xmb-rcd-x10.cisco.com> References: <20150409093618.14426.49362.idtracker@ietfa.amsl.com> In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.65.62.163] Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 MIME-Version: 1.0 Archived-At: Subject: Re: [tram] I-D Action: draft-ietf-tram-turnbis-03.txt X-BeenThere: tram@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "Discussing the creation of a Turn Revised And Modernized \(TRAM\) WG, which goal is to consolidate the various initiatives to update TURN and STUN." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 10 Apr 2015 07:40:41 -0000 PiAtLS0tLU9yaWdpbmFsIE1lc3NhZ2UtLS0tLQ0KPiBGcm9tOiBPbGVnIE1vc2thbGVua28gW21h aWx0bzptb20wNDAyNjdAZ21haWwuY29tXQ0KPiBTZW50OiBGcmlkYXksIEFwcmlsIDEwLCAyMDE1 IDEyOjAxIFBNDQo+IFRvOiB0cmFtQGlldGYub3JnDQo+IENjOiBUaXJ1bWFsZXN3YXIgUmVkZHkg KHRpcmVkZHkpDQo+IFN1YmplY3Q6IFJlOiBbdHJhbV0gSS1EIEFjdGlvbjogZHJhZnQtaWV0Zi10 cmFtLXR1cm5iaXMtMDMudHh0DQo+IA0KPiAuLi4gbW9yZSBwcmVjaXNlbHksIGluIHRoZSBzZWN0 aW9uIDcuMiB0aGUgYXR0cmlidXRlIG5hbWUgaGFzIHRvIGJlIGNoYW5nZWQ7IGluDQo+IHRoZSBz ZWN0aW9uIDE1LjExLCB0aGUgUmVmcmVzaCByZXF1ZXN0IG1lbnRpb25pbmcgaGFzIHRvIGJlIHJl bW92ZWQuDQoNClRoYW5rcyBmb3IgcG9pbnRpbmcgaXQgb3V0LCBmaXhlZCBpbiBteSBsb2NhbCBj b3B5LiANCg0KLVRpcnUNCg0KPiANCj4gVGhhbmtzDQo+IE9sZWcNCj4gDQo+IA0KPiBPbiBUaHUs IEFwciA5LCAyMDE1IGF0IDExOjI4IFBNLCBPbGVnIE1vc2thbGVua28NCj4gPG1vbTA0MDI2N0Bn bWFpbC5jb20+IHdyb3RlOg0KPiA+IEkgYWxzbyBoYXZlIHRoZSBzYW1lIGNvbW1lbnQgYWJvdXQg dGhlIGRpc2NyZXBhbmN5IGluIHNlY3Rpb25zIDcuMSBhbmQNCj4gPiA3LjIuIEFjY29yZGluZyB0 byB0aGUgc2VjdGlvbiA3LjEsIHRoZSBBRERJVElPTkFMLUFERFJFU1MtRkFNSUxZIG11c3QNCj4g PiBub3QgYmUgaW5jbHVkZWQgaW50byB0aGUgUkVGUkVTSCByZXF1ZXN0OyBidXQgdGhlIHNlY3Rp b24gNy4yIGlzDQo+ID4gZGlzY3Vzc2luZyB0aGF0IHBvc3NpYmlsaXR5Lg0KPiA+DQo+ID4gSSB0 aGluayB0aGF0IGluIGJvdGggc2VjdGlvbnMgNy4yIGFuZCAxNS4xMSB0aGUNCj4gPiBBRERJVElP TkFMLUFERFJFU1MtRkFNSUxZIGhhcyB0byBiZSBjaGFuZ2VkIHRvIHRoZQ0KPiA+IFJFUVVFU1RF RC1BRERSRVNTLUZBTUlMWS4NCj4gPg0KPiA+IFRoYW5rcw0KPiA+IE9sZWcNCj4gPg0KPiA+DQo+ ID4gT24gVGh1LCBBcHIgOSwgMjAxNSBhdCAxMToyMSBQTSwgT2xlZyBNb3NrYWxlbmtvDQo+IDxt b20wNDAyNjdAZ21haWwuY29tPiB3cm90ZToNCj4gPj4gSSBoYXZlIGNvbW1lbnRzIG9uIHNlY3Rp b24gMTUuMTEuIEl0IGhhcyB3b3JkcyBob3cgdGhlDQo+ID4+IEFERElUSU9OQUwtQUREUkVTUy1G QU1JTFkgYXR0cmlidXRlIGNhbiBiZSBwcmVzZW50IGluIGJvdGggQUxMT0NBVEUNCj4gPj4gYW5k IFJFRlJFU0ggcmVxdWVzdHMuIEJ1dCBhY2NvcmRpbmcgdG8gdGhlIG5ldyA3LjEgc2VjdGlvbiwg dGhhdA0KPiA+PiBhdHRyaWJ1dGUgY2Fubm90IGJlIHByZXNlbnQgaW4gdGhlIFJFRlJFU0ggcmVx dWVzdC4gU28gdGhlIG1lbnRpb25pbmcNCj4gPj4gb2YgdGhlIFJFRlJFU0ggcmVxdWVzdCBoYXMg dG8gYmUgcmVtb3ZlZCBmcm9tIDE1LjExLg0KPiA+Pg0KPiA+PiBUaGFua3MNCj4gPj4gT2xlZw0K PiA+Pg0KPiA+PiBPbiBUaHUsIEFwciA5LCAyMDE1IGF0IDI6MzYgQU0sICA8aW50ZXJuZXQtZHJh ZnRzQGlldGYub3JnPiB3cm90ZToNCj4gPj4+DQo+ID4+PiBBIE5ldyBJbnRlcm5ldC1EcmFmdCBp cyBhdmFpbGFibGUgZnJvbSB0aGUgb24tbGluZSBJbnRlcm5ldC1EcmFmdHMNCj4gZGlyZWN0b3Jp ZXMuDQo+ID4+PiAgVGhpcyBkcmFmdCBpcyBhIHdvcmsgaXRlbSBvZiB0aGUgVFVSTiBSZXZpc2Vk IGFuZCBNb2Rlcm5pemVkIFdvcmtpbmcNCj4gR3JvdXAgb2YgdGhlIElFVEYuDQo+ID4+Pg0KPiA+ Pj4gICAgICAgICBUaXRsZSAgICAgICAgICAgOiBUcmF2ZXJzYWwgVXNpbmcgUmVsYXlzIGFyb3Vu ZCBOQVQgKFRVUk4pOiBSZWxheQ0KPiBFeHRlbnNpb25zIHRvIFNlc3Npb24gVHJhdmVyc2FsIFV0 aWxpdGllcyBmb3IgTkFUIChTVFVOKQ0KPiA+Pj4gICAgICAgICBBdXRob3JzICAgICAgICAgOiBU aXJ1bWFsZXN3YXIgUmVkZHkNCj4gPj4+ICAgICAgICAgICAgICAgICAgICAgICAgICAgQWxhbiBK b2huc3Rvbg0KPiA+Pj4gICAgICAgICAgICAgICAgICAgICAgICAgICBQaGlsaXAgTWF0dGhld3MN Cj4gPj4+ICAgICAgICAgICAgICAgICAgICAgICAgICAgSm9uYXRoYW4gUm9zZW5iZXJnDQo+ID4+ PiAgICAgICAgIEZpbGVuYW1lICAgICAgICA6IGRyYWZ0LWlldGYtdHJhbS10dXJuYmlzLTAzLnR4 dA0KPiA+Pj4gICAgICAgICBQYWdlcyAgICAgICAgICAgOiA3Nw0KPiA+Pj4gICAgICAgICBEYXRl ICAgICAgICAgICAgOiAyMDE1LTA0LTA5DQo+ID4+Pg0KPiA+Pj4gQWJzdHJhY3Q6DQo+ID4+PiAg ICBJZiBhIGhvc3QgaXMgbG9jYXRlZCBiZWhpbmQgYSBOQVQsIHRoZW4gaW4gY2VydGFpbiBzaXR1 YXRpb25zIGl0IGNhbg0KPiA+Pj4gICAgYmUgaW1wb3NzaWJsZSBmb3IgdGhhdCBob3N0IHRvIGNv bW11bmljYXRlIGRpcmVjdGx5IHdpdGggb3RoZXIgaG9zdHMNCj4gPj4+ICAgIChwZWVycykuICBJ biB0aGVzZSBzaXR1YXRpb25zLCBpdCBpcyBuZWNlc3NhcnkgZm9yIHRoZSBob3N0IHRvIHVzZQ0K PiA+Pj4gICAgdGhlIHNlcnZpY2VzIG9mIGFuIGludGVybWVkaWF0ZSBub2RlIHRoYXQgYWN0cyBh cyBhIGNvbW11bmljYXRpb24NCj4gPj4+ICAgIHJlbGF5LiAgVGhpcyBzcGVjaWZpY2F0aW9uIGRl ZmluZXMgYSBwcm90b2NvbCwgY2FsbGVkIFRVUk4gKFRyYXZlcnNhbA0KPiA+Pj4gICAgVXNpbmcg UmVsYXlzIGFyb3VuZCBOQVQpLCB0aGF0IGFsbG93cyB0aGUgaG9zdCB0byBjb250cm9sIHRoZQ0K PiA+Pj4gICAgb3BlcmF0aW9uIG9mIHRoZSByZWxheSBhbmQgdG8gZXhjaGFuZ2UgcGFja2V0cyB3 aXRoIGl0cyBwZWVycyB1c2luZw0KPiA+Pj4gICAgdGhlIHJlbGF5LiAgVFVSTiBkaWZmZXJzIGZy b20gc29tZSBvdGhlciByZWxheSBjb250cm9sIHByb3RvY29scyBpbg0KPiA+Pj4gICAgdGhhdCBp dCBhbGxvd3MgYSBjbGllbnQgdG8gY29tbXVuaWNhdGUgd2l0aCBtdWx0aXBsZSBwZWVycyB1c2lu ZyBhDQo+ID4+PiAgICBzaW5nbGUgcmVsYXkgYWRkcmVzcy4NCj4gPj4+DQo+ID4+PiAgICBUaGUg VFVSTiBwcm90b2NvbCB3YXMgZGVzaWduZWQgdG8gYmUgdXNlZCBhcyBwYXJ0IG9mIHRoZSBJQ0UN Cj4gPj4+ICAgIChJbnRlcmFjdGl2ZSBDb25uZWN0aXZpdHkgRXN0YWJsaXNobWVudCkgYXBwcm9h Y2ggdG8gTkFUIHRyYXZlcnNhbCwNCj4gPj4+ICAgIHRob3VnaCBpdCBhbHNvIGNhbiBiZSB1c2Vk IHdpdGhvdXQgSUNFLg0KPiA+Pj4NCj4gPj4+DQo+ID4+PiBUaGUgSUVURiBkYXRhdHJhY2tlciBz dGF0dXMgcGFnZSBmb3IgdGhpcyBkcmFmdCBpczoNCj4gPj4+IGh0dHBzOi8vZGF0YXRyYWNrZXIu aWV0Zi5vcmcvZG9jL2RyYWZ0LWlldGYtdHJhbS10dXJuYmlzLw0KPiA+Pj4NCj4gPj4+IFRoZXJl J3MgYWxzbyBhIGh0bWxpemVkIHZlcnNpb24gYXZhaWxhYmxlIGF0Og0KPiA+Pj4gaHR0cDovL3Rv b2xzLmlldGYub3JnL2h0bWwvZHJhZnQtaWV0Zi10cmFtLXR1cm5iaXMtMDMNCj4gPj4+DQo+ID4+ PiBBIGRpZmYgZnJvbSB0aGUgcHJldmlvdXMgdmVyc2lvbiBpcyBhdmFpbGFibGUgYXQ6DQo+ID4+ PiBodHRwOi8vd3d3LmlldGYub3JnL3JmY2RpZmY/dXJsMj1kcmFmdC1pZXRmLXRyYW0tdHVybmJp cy0wMw0KPiA+Pj4NCj4gPj4+DQo+ID4+PiBQbGVhc2Ugbm90ZSB0aGF0IGl0IG1heSB0YWtlIGEg Y291cGxlIG9mIG1pbnV0ZXMgZnJvbSB0aGUgdGltZSBvZg0KPiA+Pj4gc3VibWlzc2lvbiB1bnRp bCB0aGUgaHRtbGl6ZWQgdmVyc2lvbiBhbmQgZGlmZiBhcmUgYXZhaWxhYmxlIGF0DQo+IHRvb2xz LmlldGYub3JnLg0KPiA+Pj4NCj4gPj4+IEludGVybmV0LURyYWZ0cyBhcmUgYWxzbyBhdmFpbGFi bGUgYnkgYW5vbnltb3VzIEZUUCBhdDoNCj4gPj4+IGZ0cDovL2Z0cC5pZXRmLm9yZy9pbnRlcm5l dC1kcmFmdHMvDQo+ID4+Pg0KPiA+Pj4gX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX18NCj4gPj4+IHRyYW0gbWFpbGluZyBsaXN0DQo+ID4+PiB0cmFtQGlldGYu b3JnDQo+ID4+PiBodHRwczovL3d3dy5pZXRmLm9yZy9tYWlsbWFuL2xpc3RpbmZvL3RyYW0NCg== From nobody Fri Apr 10 12:38:16 2015 Return-Path: X-Original-To: tram@ietfa.amsl.com Delivered-To: tram@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id EFAB81A1A5D; Fri, 10 Apr 2015 12:38:14 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.9 X-Spam-Level: X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 3orF11jQ_Uc5; Fri, 10 Apr 2015 12:38:13 -0700 (PDT) Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 3FC581A1A10; Fri, 10 Apr 2015 12:38:13 -0700 (PDT) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: "Stephen Farrell" To: "The IESG" X-Test-IDTracker: no X-IETF-IDTracker: 5.13.1 Auto-Submitted: auto-generated Precedence: bulk Message-ID: <20150410193813.20376.40907.idtracker@ietfa.amsl.com> Date: Fri, 10 Apr 2015 12:38:13 -0700 Archived-At: Cc: tram-chairs@ietf.org, tram@ietf.org, draft-ietf-tram-turn-third-party-authz@ietf.org, gonzalo.camarillo@ericsson.com, draft-ietf-tram-turn-third-party-authz.ad@ietf.org, draft-ietf-tram-turn-third-party-authz.shepherd@ietf.org Subject: [tram] Stephen Farrell's Discuss on draft-ietf-tram-turn-third-party-authz-13: (with DISCUSS and COMMENT) X-BeenThere: tram@ietf.org X-Mailman-Version: 2.1.15 List-Id: "Discussing the creation of a Turn Revised And Modernized \(TRAM\) WG, which goal is to consolidate the various initiatives to update TURN and STUN." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 10 Apr 2015 19:38:15 -0000 Stephen Farrell has entered the following ballot position for draft-ietf-tram-turn-third-party-authz-13: Discuss When responding, please keep the subject line intact and reply to all email addresses included in the To and CC lines. (Feel free to cut this introductory paragraph, however.) Please refer to http://www.ietf.org/iesg/statement/discuss-criteria.html for more information about IESG DISCUSS and COMMENT positions. The document, along with other ballot positions, can be found here: http://datatracker.ietf.org/doc/draft-ietf-tram-turn-third-party-authz/ ---------------------------------------------------------------------- DISCUSS: ---------------------------------------------------------------------- Edited discuss ballot after chats around Dallas. (1) Please fix the crypto as per Richard's discuss. (I think the plan here is for Rich Salz to help with that, which I'm confident will work out ok.) (2) Please consider whether a signature based scheme that does not require pre-shared keys between the TURN and (in particular) WebRTC server could be useful to support. (Either in this document or elsewhere.) There should be use cases where that offers sufficient accountability for use of TURN and it ought allow some deployments that are less easy with this kind of pre-shared keys approach. The DISCUSS here is to check if the WG want to take that approach, either now or later. (3) I think the plan is to take out some of the options that are not needed so as make interop more likely. Please do so. (I think we discussed taking out the DKSPP stuff at least, but the more options we can get rid of, the better). ---------------------------------------------------------------------- COMMENT: ---------------------------------------------------------------------- - COMMENTS below are unchanged since before Dallas. We can look over then as we go. - I really think this would benefit from some wider review and I don't think it's ready as-is. - I agree with Richard's discuss points. - intro: "impossible in web applications" isn't really true in principle, but impossible in WebRTC as it uses JS is true. - Assuming the AS that can authorize the user shares a secret with the STUN server chosen by the WebRTC server seems very brittle. Why would that be true in general? - 4.1.1: Hmmm. How many people use KeyProv I wonder? - 4.1.2 - which "two servers"? WebRTC can have more servers than that. - 4.1.2 - now we're using TLS mutual auth? And how does the TLS client know which CA to use that'll work with the TLS server here? I don't think that'll scale will it? - 4.1.3 - this looks like what the WG/authors really want, would that be a fair statement? - 9: Figure 2 should be way up at the top of the document and not here - 9: Why 5 seconds? From nobody Fri Apr 10 12:58:10 2015 Return-Path: X-Original-To: tram@ietfa.amsl.com Delivered-To: tram@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 4A8041A87C3; Fri, 10 Apr 2015 12:58:09 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.59 X-Spam-Level: X-Spam-Status: No, score=-1.59 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, MISSING_HEADERS=1.021, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01] autolearn=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id QpfqKJfDKCny; Fri, 10 Apr 2015 12:58:08 -0700 (PDT) Received: from prod-mail-xrelay07.akamai.com (prod-mail-xrelay07.akamai.com [72.246.2.115]) by ietfa.amsl.com (Postfix) with ESMTP id C23E41A86FD; Fri, 10 Apr 2015 12:58:07 -0700 (PDT) Received: from prod-mail-xrelay07.akamai.com (localhost.localdomain [127.0.0.1]) by postfix.imss70 (Postfix) with ESMTP id F24A94773D; Fri, 10 Apr 2015 19:58:06 +0000 (GMT) Received: from prod-mail-relay07.akamai.com (prod-mail-relay07.akamai.com [172.17.121.112]) by prod-mail-xrelay07.akamai.com (Postfix) with ESMTP id DA4A447734; Fri, 10 Apr 2015 19:58:06 +0000 (GMT) Received: from [172.28.115.172] (bowill.kendall.corp.akamai.com [172.28.115.172]) by prod-mail-relay07.akamai.com (Postfix) with ESMTP id C0CE180062; Fri, 10 Apr 2015 19:58:06 +0000 (GMT) Message-ID: <55282B4E.4000409@akamai.com> Date: Fri, 10 Apr 2015 15:58:06 -0400 From: Brandon Williams User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:31.0) Gecko/20100101 Thunderbird/31.5.0 MIME-Version: 1.0 References: <20150410193813.20376.40907.idtracker@ietfa.amsl.com> In-Reply-To: <20150410193813.20376.40907.idtracker@ietfa.amsl.com> Content-Type: text/plain; charset=windows-1252; format=flowed Content-Transfer-Encoding: 7bit Archived-At: Cc: "Salz, Rich" , tram@ietf.org, tram-chairs@ietf.org Subject: Re: [tram] Stephen Farrell's Discuss on draft-ietf-tram-turn-third-party-authz-13: (with DISCUSS and COMMENT) X-BeenThere: tram@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "Discussing the creation of a Turn Revised And Modernized \(TRAM\) WG, which goal is to consolidate the various initiatives to update TURN and STUN." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 10 Apr 2015 19:58:09 -0000 Hi all, I will try to touch base with Rich Salz re: Richard's crypto comments next week in order to help drive getting his feedback. --Brandon On 04/10/2015 03:38 PM, Stephen Farrell wrote: > Stephen Farrell has entered the following ballot position for > draft-ietf-tram-turn-third-party-authz-13: Discuss > > When responding, please keep the subject line intact and reply to all > email addresses included in the To and CC lines. (Feel free to cut this > introductory paragraph, however.) > > > Please refer to http://www.ietf.org/iesg/statement/discuss-criteria.html > for more information about IESG DISCUSS and COMMENT positions. > > > The document, along with other ballot positions, can be found here: > http://datatracker.ietf.org/doc/draft-ietf-tram-turn-third-party-authz/ > > > > ---------------------------------------------------------------------- > DISCUSS: > ---------------------------------------------------------------------- > > > Edited discuss ballot after chats around Dallas. > > (1) Please fix the crypto as per Richard's discuss. (I think > the plan here is for Rich Salz to help with that, which > I'm confident will work out ok.) > > (2) Please consider whether a signature based > scheme that does not require pre-shared keys between > the TURN and (in particular) WebRTC server could > be useful to support. (Either in this document or > elsewhere.) There should be use cases where that > offers sufficient accountability for use of TURN and > it ought allow some deployments that are less easy > with this kind of pre-shared keys approach. The > DISCUSS here is to check if the WG want to take > that approach, either now or later. > > (3) I think the plan is to take out some of the options > that are not needed so as make interop more likely. > Please do so. (I think we discussed taking out the > DKSPP stuff at least, but the more options we can > get rid of, the better). > > > ---------------------------------------------------------------------- > COMMENT: > ---------------------------------------------------------------------- > > > - COMMENTS below are unchanged since before Dallas. > We can look over then as we go. > > - I really think this would benefit from some wider review > and I don't think it's ready as-is. > > - I agree with Richard's discuss points. > > - intro: "impossible in web applications" isn't really > true in principle, but impossible in WebRTC as it uses JS > is true. > > - Assuming the AS that can authorize the user shares a > secret with the STUN server chosen by the WebRTC server > seems very brittle. Why would that be true in general? > > - 4.1.1: Hmmm. How many people use KeyProv I wonder? > > - 4.1.2 - which "two servers"? WebRTC can have more > servers than that. > > - 4.1.2 - now we're using TLS mutual auth? And how does > the TLS client know which CA to use that'll work with the > TLS server here? I don't think that'll scale will it? > > - 4.1.3 - this looks like what the WG/authors really want, > would that be a fair statement? > > - 9: Figure 2 should be way up at the top of the document > and not here > > - 9: Why 5 seconds? > > > _______________________________________________ > tram mailing list > tram@ietf.org > https://www.ietf.org/mailman/listinfo/tram > -- Brandon Williams; Senior Principal Software Engineer Emerging Products Engineering; Akamai Technologies Inc. -- Brandon Williams; Senior Principal Software Engineer Emerging Products Engineering; Akamai Technologies Inc. From nobody Fri Apr 10 18:58:28 2015 Return-Path: X-Original-To: tram@ietfa.amsl.com Delivered-To: tram@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id DBAA31A0045; Fri, 10 Apr 2015 18:58:18 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -6.19 X-Spam-Level: X-Spam-Status: No, score=-6.19 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, HTML_MESSAGE=0.001, J_CHICKENPOX_34=0.6, RCVD_IN_DNSWL_HI=-5, SPF_PASS=-0.001, T_DKIM_INVALID=0.01, T_HTML_ATTACH=0.01, T_RP_MATCHES_RCVD=-0.01] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id hk0Hi1yy9AYG; Fri, 10 Apr 2015 18:58:10 -0700 (PDT) Received: from rcdn-iport-8.cisco.com (rcdn-iport-8.cisco.com [173.37.86.79]) (using TLSv1 with cipher RC4-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 093B51A0033; Fri, 10 Apr 2015 18:58:09 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=322992; q=dns/txt; s=iport; t=1428717490; x=1429927090; h=from:to:cc:subject:date:message-id:references: in-reply-to:mime-version; bh=/mGTgJybxM9YYpfi3zdmExpYv4gZqmMuQP4K3z0fzME=; b=fVeR9ULvJqfUDMd1IF3S3Wv2K4gpamu33eS8R7uxpYe/X0JZPNC1G5t4 /bRbuuGcBHQRwBP8dUss0f+lV/okYCRHxjLio7F+iBo0VY3whqvqbImst 5VFidu99foGzPHHKoqmv6hFt4qjoqHE0QRfNxKlKB013IcX35OdHmWh+D I=; X-Files: Diff draft-ietf-tram-turn-third-party-authz-13.txt - draft-ietf-tram-turn-third-party-authz-14.txt.htm, draft-ietf-tram-turn-third-party-authz-14.txt : 181318, 50401 X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: A0BvCQCWfihV/4sNJK3JEopJAgIB X-IronPort-AV: E=Sophos;i="5.11,559,1422921600"; d="htm'217?txt'217?scan'217,208,217";a="3115104" Received: from alln-core-6.cisco.com ([173.36.13.139]) by rcdn-iport-8.cisco.com with ESMTP; 11 Apr 2015 01:58:09 +0000 Received: from xhc-rcd-x13.cisco.com (xhc-rcd-x13.cisco.com [173.37.183.87]) by alln-core-6.cisco.com (8.14.5/8.14.5) with ESMTP id t3B1w919008345 (version=TLSv1/SSLv3 cipher=AES128-SHA bits=128 verify=FAIL); Sat, 11 Apr 2015 01:58:09 GMT Received: from xmb-rcd-x10.cisco.com ([169.254.15.175]) by xhc-rcd-x13.cisco.com ([173.37.183.87]) with mapi id 14.03.0195.001; Fri, 10 Apr 2015 20:58:08 -0500 From: "Tirumaleswar Reddy (tireddy)" To: Brandon Williams Thread-Topic: [tram] Stephen Farrell's Discuss on draft-ietf-tram-turn-third-party-authz-13: (with DISCUSS and COMMENT) Thread-Index: AQHQc8XlvscJvCv8tEiY7AOvXxiXD51G/ZcAgAALUcA= Date: Sat, 11 Apr 2015 01:58:08 +0000 Message-ID: <913383AAA69FF945B8F946018B75898A411FFC5F@xmb-rcd-x10.cisco.com> References: <20150410193813.20376.40907.idtracker@ietfa.amsl.com> <55282B4E.4000409@akamai.com> In-Reply-To: <55282B4E.4000409@akamai.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: yes X-MS-TNEF-Correlator: x-originating-ip: [10.65.78.245] Content-Type: multipart/mixed; boundary="_003_913383AAA69FF945B8F946018B75898A411FFC5Fxmbrcdx10ciscoc_" MIME-Version: 1.0 Archived-At: Cc: "rlb@ipv.sx" , "Salz, Rich" , "Stephen Farrell \(stephen.farrell@cs.tcd.ie\)" , "tram@ietf.org" , "tram-chairs@ietf.org" Subject: Re: [tram] Stephen Farrell's Discuss on draft-ietf-tram-turn-third-party-authz-13: (with DISCUSS and COMMENT) X-BeenThere: tram@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "Discussing the creation of a Turn Revised And Modernized \(TRAM\) WG, which goal is to consolidate the various initiatives to update TURN and STUN." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 11 Apr 2015 01:58:19 -0000 --_003_913383AAA69FF945B8F946018B75898A411FFC5Fxmbrcdx10ciscoc_ Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable Hi Brandon, Richard and we have already have discussed the comments further and resolve= d them, attached updated draft with diff. Main changes [1] Removed DKSPP [2] Removed non-AEAD algorithms; using AEAD modes AES-GCM and aead-aes-cbc [3] Updated the token format -Tiru > -----Original Message----- > From: tram [mailto:tram-bounces@ietf.org] On Behalf Of Brandon Williams > Sent: Saturday, April 11, 2015 1:28 AM > Cc: Salz, Rich; tram@ietf.org; tram-chairs@ietf.org > Subject: Re: [tram] Stephen Farrell's Discuss on draft-ietf-tram-turn-thi= rd- > party-authz-13: (with DISCUSS and COMMENT) >=20 > Hi all, >=20 > I will try to touch base with Rich Salz re: Richard's crypto comments nex= t > week in order to help drive getting his feedback. >=20 > --Brandon >=20 > On 04/10/2015 03:38 PM, Stephen Farrell wrote: > > Stephen Farrell has entered the following ballot position for > > draft-ietf-tram-turn-third-party-authz-13: Discuss > > > > When responding, please keep the subject line intact and reply to all > > email addresses included in the To and CC lines. (Feel free to cut > > this introductory paragraph, however.) > > > > > > Please refer to > > http://www.ietf.org/iesg/statement/discuss-criteria.html > > for more information about IESG DISCUSS and COMMENT positions. > > > > > > The document, along with other ballot positions, can be found here: > > http://datatracker.ietf.org/doc/draft-ietf-tram-turn-third-party-authz > > / > > > > > > > > ---------------------------------------------------------------------- > > DISCUSS: > > ---------------------------------------------------------------------- > > > > > > Edited discuss ballot after chats around Dallas. > > > > (1) Please fix the crypto as per Richard's discuss. (I think the plan > > here is for Rich Salz to help with that, which I'm confident will work > > out ok.) > > > > (2) Please consider whether a signature based scheme that does not > > require pre-shared keys between the TURN and (in particular) WebRTC > > server could be useful to support. (Either in this document or > > elsewhere.) There should be use cases where that offers sufficient > > accountability for use of TURN and it ought allow some deployments > > that are less easy with this kind of pre-shared keys approach. The > > DISCUSS here is to check if the WG want to take that approach, either > > now or later. > > > > (3) I think the plan is to take out some of the options that are not > > needed so as make interop more likely. > > Please do so. (I think we discussed taking out the DKSPP stuff at > > least, but the more options we can get rid of, the better). > > > > > > ---------------------------------------------------------------------- > > COMMENT: > > ---------------------------------------------------------------------- > > > > > > - COMMENTS below are unchanged since before Dallas. > > We can look over then as we go. > > > > - I really think this would benefit from some wider review and I don't > > think it's ready as-is. > > > > - I agree with Richard's discuss points. > > > > - intro: "impossible in web applications" isn't really true in > > principle, but impossible in WebRTC as it uses JS is true. > > > > - Assuming the AS that can authorize the user shares a secret with the > > STUN server chosen by the WebRTC server seems very brittle. Why would > > that be true in general? > > > > - 4.1.1: Hmmm. How many people use KeyProv I wonder? > > > > - 4.1.2 - which "two servers"? WebRTC can have more servers than that. > > > > - 4.1.2 - now we're using TLS mutual auth? And how does the TLS client > > know which CA to use that'll work with the TLS server here? I don't > > think that'll scale will it? > > > > - 4.1.3 - this looks like what the WG/authors really want, would that > > be a fair statement? > > > > - 9: Figure 2 should be way up at the top of the document and not here > > > > - 9: Why 5 seconds? > > > > > > _______________________________________________ > > tram mailing list > > tram@ietf.org > > https://www.ietf.org/mailman/listinfo/tram > > >=20 > -- > Brandon Williams; Senior Principal Software Engineer Emerging Products > Engineering; Akamai Technologies Inc. >=20 > -- > Brandon Williams; Senior Principal Software Engineer Emerging Products > Engineering; Akamai Technologies Inc. >=20 > _______________________________________________ > tram mailing list > tram@ietf.org > https://www.ietf.org/mailman/listinfo/tram --_003_913383AAA69FF945B8F946018B75898A411FFC5Fxmbrcdx10ciscoc_ Content-Type: text/html; name="Diff draft-ietf-tram-turn-third-party-authz-13.txt - draft-ietf-tram-turn-third-party-authz-14.txt.htm" Content-Description: Diff draft-ietf-tram-turn-third-party-authz-13.txt - draft-ietf-tram-turn-third-party-authz-14.txt.htm Content-Disposition: attachment; filename="Diff draft-ietf-tram-turn-third-party-authz-13.txt - draft-ietf-tram-turn-third-party-authz-14.txt.htm"; size=181318; creation-date="Thu, 09 Apr 2015 03:26:54 GMT"; modification-date="Thu, 09 Apr 2015 03:26:55 GMT" Content-Transfer-Encoding: base64 PCFET0NUWVBFIGh0bWwgUFVCTElDICItLy9XM0MvL0RURCBYSFRNTCAxLjAgVHJhbnNpdGlvbmFs Ly9FTiIgImh0dHA6Ly93d3cudzMub3JnL1RSL3hodG1sMS9EVEQveGh0bWwxLXRyYW5zaXRpb25h bC5kdGQiPg0KPCEtLSBHZW5lcmF0ZWQgYnkgcmZjZGlmZiAxLjQyOiByZmNkaWZmICAtLT4NCjwh LS0gPCFET0NUWVBFIGh0bWwgUFVCTElDICItLy9XM0MvL0RURCBIVE1MIDQuMDEgVHJhbnNpdGlv bmFsIiA+IC0tPg0KPCEtLSBTeXN0ZW06IExpbnV4IHppbmZhbmRlbCAzLjIuMC00LWFtZDY0ICMx IFNNUCBEZWJpYW4gMy4yLjM1LTIgeDg2XzY0IEdOVS9MaW51eCAtLT4NCjwhLS0gVXNpbmcgYXdr OiAvdXNyL2Jpbi9nYXdrOiBHTlUgQXdrIDQuMC4xIC0tPg0KPCEtLSBVc2luZyBkaWZmOiAvdXNy L2Jpbi9kaWZmOiBkaWZmIChHTlUgZGlmZnV0aWxzKSAzLjIgLS0+DQo8IS0tIFVzaW5nIHdkaWZm OiAvdXNyL2Jpbi93ZGlmZjogd2RpZmYgKEdOVSB3ZGlmZikgMS4xLjIgLS0+DQo8aHRtbD48aGVh ZD4gDQogIDxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIgY29udGVudD0idGV4dC9odG1s OyBjaGFyc2V0PVVURi04Ij4gDQogIDxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtU3R5bGUtVHlw ZSIgY29udGVudD0idGV4dC9jc3MiPiANCiAgPHRpdGxlPkRpZmY6IGRyYWZ0LWlldGYtdHJhbS10 dXJuLXRoaXJkLXBhcnR5LWF1dGh6LTEzLnR4dCAtIGRyYWZ0LWlldGYtdHJhbS10dXJuLXRoaXJk LXBhcnR5LWF1dGh6LTE0LnR4dDwvdGl0bGU+IA0KICA8c3R5bGUgdHlwZT0idGV4dC9jc3MiPiAN CiAgICBib2R5ICAgIHsgbWFyZ2luOiAwLjRleDsgbWFyZ2luLXJpZ2h0OiBhdXRvOyB9IA0KICAg IHRyICAgICAgeyB9IA0KICAgIHRkICAgICAgeyB3aGl0ZS1zcGFjZTogcHJlOyBmb250LWZhbWls eTogbW9ub3NwYWNlOyB2ZXJ0aWNhbC1hbGlnbjogdG9wOyBmb250LXNpemU6IDAuODZlbTt9IA0K ICAgIHRoICAgICAgeyBmb250LXNpemU6IDAuODZlbTsgfSANCiAgICAuc21hbGwgIHsgZm9udC1z aXplOiAwLjZlbTsgZm9udC1zdHlsZTogaXRhbGljOyBmb250LWZhbWlseTogVmVyZGFuYSwgSGVs dmV0aWNhLCBzYW5zLXNlcmlmOyB9IA0KICAgIC5sZWZ0ICAgeyBiYWNrZ3JvdW5kLWNvbG9yOiAj RUVFOyB9IA0KICAgIC5yaWdodCAgeyBiYWNrZ3JvdW5kLWNvbG9yOiAjRkZGOyB9IA0KICAgIC5k aWZmICAgeyBiYWNrZ3JvdW5kLWNvbG9yOiAjQ0NGOyB9IA0KICAgIC5sYmxvY2sgeyBiYWNrZ3Jv dW5kLWNvbG9yOiAjQkZCOyB9IA0KICAgIC5yYmxvY2sgeyBiYWNrZ3JvdW5kLWNvbG9yOiAjRkY4 OyB9IA0KICAgIC5pbnNlcnQgeyBiYWNrZ3JvdW5kLWNvbG9yOiAjOEZGOyB9IA0KICAgIC5kZWxl dGUgeyBiYWNrZ3JvdW5kLWNvbG9yOiAjQUNGOyB9IA0KICAgIC52b2lkICAgeyBiYWNrZ3JvdW5k LWNvbG9yOiAjRkZCOyB9IA0KICAgIC5jb250ICAgeyBiYWNrZ3JvdW5kLWNvbG9yOiAjRUVFOyB9 IA0KICAgIC5saW5lYnIgeyBiYWNrZ3JvdW5kLWNvbG9yOiAjQUFBOyB9IA0KICAgIC5saW5lbm8g eyBjb2xvcjogcmVkOyBiYWNrZ3JvdW5kLWNvbG9yOiAjRkZGOyBmb250LXNpemU6IDAuN2VtOyB0 ZXh0LWFsaWduOiByaWdodDsgcGFkZGluZzogMCAycHg7IH0gDQogICAgLmVsaXBzaXN7IGJhY2tn cm91bmQtY29sb3I6ICNBQUE7IH0gDQogICAgLmxlZnQgLmNvbnQgeyBiYWNrZ3JvdW5kLWNvbG9y OiAjREREOyB9IA0KICAgIC5yaWdodCAuY29udCB7IGJhY2tncm91bmQtY29sb3I6ICNFRUU7IH0g DQogICAgLmxibG9jayAuY29udCB7IGJhY2tncm91bmQtY29sb3I6ICM5RDk7IH0gDQogICAgLnJi bG9jayAuY29udCB7IGJhY2tncm91bmQtY29sb3I6ICNERDY7IH0gDQogICAgLmluc2VydCAuY29u dCB7IGJhY2tncm91bmQtY29sb3I6ICMwREQ7IH0gDQogICAgLmRlbGV0ZSAuY29udCB7IGJhY2tn cm91bmQtY29sb3I6ICM4QUQ7IH0gDQogICAgLnN0YXRzLCAuc3RhdHMgdGQsIC5zdGF0cyB0aCB7 IGJhY2tncm91bmQtY29sb3I6ICNFRUU7IHBhZGRpbmc6IDJweCAwOyB9IA0KICA8L3N0eWxlPiAN CjwvaGVhZD4gDQo8Ym9keT4gDQogIDx0YWJsZSBib3JkZXI9IjAiIGNlbGxwYWRkaW5nPSIwIiBj ZWxsc3BhY2luZz0iMCI+IA0KICA8dGJvZHk+PHRyIGJnY29sb3I9Im9yYW5nZSI+PHRoPjwvdGg+ PHRoPjxhIGhyZWY9Imh0dHA6Ly90b29scy5pZXRmLm9yZy9yZmNkaWZmP3VybDI9ZHJhZnQtaWV0 Zi10cmFtLXR1cm4tdGhpcmQtcGFydHktYXV0aHotMTMudHh0IiBzdHlsZT0iY29sb3I6IzAwODsg dGV4dC1kZWNvcmF0aW9uOm5vbmU7Ij4mbHQ7PC9hPiZuYnNwOzxhIGhyZWY9Imh0dHBzOi8vdG9v bHMuaWV0Zi5vcmcvaHRtbC9kcmFmdC1pZXRmLXRyYW0tdHVybi10aGlyZC1wYXJ0eS1hdXRoei0x My50eHQiIHN0eWxlPSJjb2xvcjojMDA4Ij5kcmFmdC1pZXRmLXRyYW0tdHVybi10aGlyZC1wYXJ0 eS1hdXRoei0xMy50eHQ8L2E+Jm5ic3A7PC90aD48dGg+IDwvdGg+PHRoPiZuYnNwOzxhIGhyZWY9 Imh0dHBzOi8vdG9vbHMuaWV0Zi5vcmcvaHRtbC9kcmFmdC1pZXRmLXRyYW0tdHVybi10aGlyZC1w YXJ0eS1hdXRoei0xNC50eHQiIHN0eWxlPSJjb2xvcjojMDA4Ij5kcmFmdC1pZXRmLXRyYW0tdHVy bi10aGlyZC1wYXJ0eS1hdXRoei0xNC50eHQ8L2E+Jm5ic3A7PGEgaHJlZj0iaHR0cDovL3Rvb2xz LmlldGYub3JnL3JmY2RpZmY/dXJsMT1kcmFmdC1pZXRmLXRyYW0tdHVybi10aGlyZC1wYXJ0eS1h dXRoei0xNC50eHQiIHN0eWxlPSJjb2xvcjojMDA4OyB0ZXh0LWRlY29yYXRpb246bm9uZTsiPiZn dDs8L2E+PC90aD48dGg+PC90aD48L3RyPiANCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIg dmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij48L3RkPjx0ZD4gPC90ZD48dGQgY2xh c3M9InJpZ2h0Ij48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3Ry Pg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xh c3M9ImxlZnQiPlRSQU0gICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICBULiBSZWRkeTwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQi PlRSQU0gICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICBULiBSZWRkeTwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3Rk PjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0 ZCBjbGFzcz0ibGVmdCI+SW50ZXJuZXQtRHJhZnQgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgIFAuIFBhdGlsPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJy aWdodCI+SW50ZXJuZXQtRHJhZnQgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgIFAuIFBhdGlsPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3Ai PjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwv dGQ+PHRkIGNsYXNzPSJsZWZ0Ij5JbnRlbmRlZCBzdGF0dXM6IFN0YW5kYXJkcyBUcmFjayAgICAg ICAgICAgICAgICAgICAgICAgICBSLiBSYXZpbmRyYW5hdGg8L3RkPjx0ZD4gPC90ZD48dGQgY2xh c3M9InJpZ2h0Ij5JbnRlbmRlZCBzdGF0dXM6IFN0YW5kYXJkcyBUcmFjayAgICAgICAgICAgICAg ICAgICAgICAgICBSLiBSYXZpbmRyYW5hdGg8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249 InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZD48YSBuYW1lPSJkaWZmMDAwMSI+PC9hPjwv dGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+ PHRkIGNsYXNzPSJsYmxvY2siPkV4cGlyZXM6IDxzcGFuIGNsYXNzPSJkZWxldGUiPkF1Z3VzdCAy OSwgMjAxNSA8L3NwYW4+ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg Q2lzY288L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+RXhwaXJlczogPHNwYW4gY2xh c3M9Imluc2VydCI+T2N0b2JlciAxMCwgMjAxNTwvc3Bhbj4gICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICBDaXNjbzwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0i dG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9w Ij48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgSi4gVWJlcnRpPC90ZD48dGQ+IDwvdGQ+PHRk IGNsYXNzPSJyaWdodCI+ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgSi4gVWJlcnRpPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFs aWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWdu PSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICBHb29nbGU8L3RkPjx0ZD4gPC90 ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICBHb29nbGU8L3RkPjx0ZCBjbGFzcz0ibGluZW5v IiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZD48YSBuYW1lPSJkaWZmMDAw MiI+PC9hPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0 b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPiAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICA8c3BhbiBjbGFzcz0iZGVsZXRlIj5GZWJydWFyeSAy NTwvc3Bhbj4sIDIwMTU8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+ICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIDxzcGFuIGNsYXNz PSJpbnNlcnQiPiAgICBBcHJpbCA4PC9zcGFuPiwgMjAxNTwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8i IHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZh bGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNz PSJyaWdodCI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4N CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNz PSJsZWZ0Ij4gIFNlc3Npb24gVHJhdmVyc2FsIFV0aWxpdGllcyBmb3IgTkFUIChTVFVOKSBFeHRl bnNpb24gZm9yIFRoaXJkIFBhcnR5PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICBT ZXNzaW9uIFRyYXZlcnNhbCBVdGlsaXRpZXMgZm9yIE5BVCAoU1RVTikgRXh0ZW5zaW9uIGZvciBU aGlyZCBQYXJ0eTwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+ DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFz cz0ibGVmdCI+ICAgICAgICAgICAgICAgICAgICAgICAgICAgICBBdXRob3JpemF0aW9uPC90ZD48 dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgICAgICAgICAgICAgICAgICAgICAgICAgICBB dXRob3JpemF0aW9uPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90 cj4NCiAgICAgIDx0cj48dGQ+PGEgbmFtZT0iZGlmZjAwMDMiPjwvYT48L3RkPjwvdHI+DQogICAg ICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJs b2NrIj4gICAgICAgICAgICAgICBkcmFmdC1pZXRmLXRyYW0tdHVybi10aGlyZC1wYXJ0eS1hdXRo ei0xPHNwYW4gY2xhc3M9ImRlbGV0ZSI+Mzwvc3Bhbj48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9 InJibG9jayI+ICAgICAgICAgICAgICAgZHJhZnQtaWV0Zi10cmFtLXR1cm4tdGhpcmQtcGFydHkt YXV0aHotMTxzcGFuIGNsYXNzPSJpbnNlcnQiPjQ8L3NwYW4+PC90ZD48dGQgY2xhc3M9ImxpbmVu byIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIg dmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij48L3RkPjx0ZD4gPC90ZD48dGQgY2xh c3M9InJpZ2h0Ij48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3Ry Pg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xh c3M9ImxlZnQiPkFic3RyYWN0PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+QWJzdHJh Y3Q8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAg PHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQi PjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8i IHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZh bGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgVGhpcyBkb2N1bWVudCBwcm9wb3Nl cyB0aGUgdXNlIG9mIE9BdXRoIDIuMCB0byBvYnRhaW4gYW5kIHZhbGlkYXRlPC90ZD48dGQ+IDwv dGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgVGhpcyBkb2N1bWVudCBwcm9wb3NlcyB0aGUgdXNlIG9m IE9BdXRoIDIuMCB0byBvYnRhaW4gYW5kIHZhbGlkYXRlPC90ZD48dGQgY2xhc3M9ImxpbmVubyIg dmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFs aWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBlcGhlbWVyYWwgdG9rZW5zIHRoYXQg Y2FuIGJlIHVzZWQgZm9yIFNlc3Npb24gVHJhdmVyc2FsIFV0aWxpdGllcyBmb3I8L3RkPjx0ZD4g PC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBlcGhlbWVyYWwgdG9rZW5zIHRoYXQgY2FuIGJlIHVz ZWQgZm9yIFNlc3Npb24gVHJhdmVyc2FsIFV0aWxpdGllcyBmb3I8L3RkPjx0ZCBjbGFzcz0ibGlu ZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5v IiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIE5BVCAoU1RVTikgYXV0aGVu dGljYXRpb24uICBUaGUgdXNhZ2Ugb2YgZXBoZW1lcmFsIHRva2VucyBlbnN1cmVzPC90ZD48dGQ+ IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgTkFUIChTVFVOKSBhdXRoZW50aWNhdGlvbi4gIFRo ZSB1c2FnZSBvZiBlcGhlbWVyYWwgdG9rZW5zIGVuc3VyZXM8L3RkPjx0ZCBjbGFzcz0ibGluZW5v IiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2 YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIHRoYXQgYWNjZXNzIHRvIGEgU1RV TiBzZXJ2ZXIgY2FuIGJlIGNvbnRyb2xsZWQgZXZlbiBpZiB0aGUgdG9rZW5zIGFyZTwvdGQ+PHRk PiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIHRoYXQgYWNjZXNzIHRvIGEgU1RVTiBzZXJ2ZXIg Y2FuIGJlIGNvbnRyb2xsZWQgZXZlbiBpZiB0aGUgdG9rZW5zIGFyZTwvdGQ+PHRkIGNsYXNzPSJs aW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5l bm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgY29tcHJvbWlzZWQuPC90 ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgY29tcHJvbWlzZWQuPC90ZD48dGQgY2xh c3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9 ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij48L3RkPjx0ZD4gPC90 ZD48dGQgY2xhc3M9InJpZ2h0Ij48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+ PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90 ZD48dGQgY2xhc3M9ImxlZnQiPlN0YXR1cyBvZiBUaGlzIE1lbW88L3RkPjx0ZD4gPC90ZD48dGQg Y2xhc3M9InJpZ2h0Ij5TdGF0dXMgb2YgVGhpcyBNZW1vPC90ZD48dGQgY2xhc3M9ImxpbmVubyIg dmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90 ZD48dGQgY2xhc3M9ImxlZnQiPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPjwvdGQ+ PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4NCiAgICAgIDx0ciBiZ2NvbG9yPSJncmF5Ij48 dGQ+PC90ZD48dGg+PGEgbmFtZT0icGFydC1sMiI+PHNtYWxsPnNraXBwaW5nIHRvIGNoYW5nZSBh dDwvc21hbGw+PGVtPiBwYWdlIDEsIGxpbmUgMzg8L2VtPjwvYT48L3RoPjx0aD4gPC90aD48dGg+ PGEgbmFtZT0icGFydC1yMiI+PHNtYWxsPnNraXBwaW5nIHRvIGNoYW5nZSBhdDwvc21hbGw+PGVt PiBwYWdlIDEsIGxpbmUgMzg8L2VtPjwvYT48L3RoPjx0ZD48L3RkPjwvdHI+DQogICAgICA8dHI+ PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAg SW50ZXJuZXQtRHJhZnRzIGFyZSB3b3JraW5nIGRvY3VtZW50cyBvZiB0aGUgSW50ZXJuZXQgRW5n aW5lZXJpbmc8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBJbnRlcm5ldC1EcmFm dHMgYXJlIHdvcmtpbmcgZG9jdW1lbnRzIG9mIHRoZSBJbnRlcm5ldCBFbmdpbmVlcmluZzwvdGQ+ PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRk IGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgVGFz ayBGb3JjZSAoSUVURikuICBOb3RlIHRoYXQgb3RoZXIgZ3JvdXBzIG1heSBhbHNvIGRpc3RyaWJ1 dGU8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBUYXNrIEZvcmNlIChJRVRGKS4g IE5vdGUgdGhhdCBvdGhlciBncm91cHMgbWF5IGFsc28gZGlzdHJpYnV0ZTwvdGQ+PHRkIGNsYXNz PSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJs aW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgd29ya2luZyBkb2N1 bWVudHMgYXMgSW50ZXJuZXQtRHJhZnRzLiAgVGhlIGxpc3Qgb2YgY3VycmVudCBJbnRlcm5ldC08 L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICB3b3JraW5nIGRvY3VtZW50cyBhcyBJ bnRlcm5ldC1EcmFmdHMuICBUaGUgbGlzdCBvZiBjdXJyZW50IEludGVybmV0LTwvdGQ+PHRkIGNs YXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNz PSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgRHJhZnRzIGlz IGF0IGh0dHA6Ly9kYXRhdHJhY2tlci5pZXRmLm9yZy9kcmFmdHMvY3VycmVudC8uPC90ZD48dGQ+ IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgRHJhZnRzIGlzIGF0IGh0dHA6Ly9kYXRhdHJhY2tl ci5pZXRmLm9yZy9kcmFmdHMvY3VycmVudC8uPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWdu PSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0 b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0 Ij48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAg PHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQi PiAgIEludGVybmV0LURyYWZ0cyBhcmUgZHJhZnQgZG9jdW1lbnRzIHZhbGlkIGZvciBhIG1heGlt dW0gb2Ygc2l4IG1vbnRoczwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIEludGVy bmV0LURyYWZ0cyBhcmUgZHJhZnQgZG9jdW1lbnRzIHZhbGlkIGZvciBhIG1heGltdW0gb2Ygc2l4 IG1vbnRoczwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQog ICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0i bGVmdCI+ICAgYW5kIG1heSBiZSB1cGRhdGVkLCByZXBsYWNlZCwgb3Igb2Jzb2xldGVkIGJ5IG90 aGVyIGRvY3VtZW50cyBhdCBhbnk8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBh bmQgbWF5IGJlIHVwZGF0ZWQsIHJlcGxhY2VkLCBvciBvYnNvbGV0ZWQgYnkgb3RoZXIgZG9jdW1l bnRzIGF0IGFueTwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+ DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFz cz0ibGVmdCI+ICAgdGltZS4gIEl0IGlzIGluYXBwcm9wcmlhdGUgdG8gdXNlIEludGVybmV0LURy YWZ0cyBhcyByZWZlcmVuY2U8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICB0aW1l LiAgSXQgaXMgaW5hcHByb3ByaWF0ZSB0byB1c2UgSW50ZXJuZXQtRHJhZnRzIGFzIHJlZmVyZW5j ZTwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8 dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ ICAgbWF0ZXJpYWwgb3IgdG8gY2l0ZSB0aGVtIG90aGVyIHRoYW4gYXMgIndvcmsgaW4gcHJvZ3Jl c3MuIjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIG1hdGVyaWFsIG9yIHRvIGNp dGUgdGhlbSBvdGhlciB0aGFuIGFzICJ3b3JrIGluIHByb2dyZXNzLiI8L3RkPjx0ZCBjbGFzcz0i bGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGlu ZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPjwvdGQ+PHRkPiA8L3RkPjx0 ZCBjbGFzcz0icmlnaHQiPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3Rk PjwvdHI+DQogICAgICA8dHI+PHRkPjxhIG5hbWU9ImRpZmYwMDA0Ij48L2E+PC90ZD48L3RyPg0K ICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9 ImxibG9jayI+ICAgVGhpcyBJbnRlcm5ldC1EcmFmdCB3aWxsIGV4cGlyZSBvbiA8c3BhbiBjbGFz cz0iZGVsZXRlIj5BdWd1c3QgMjk8L3NwYW4+LCAyMDE1LjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFz cz0icmJsb2NrIj4gICBUaGlzIEludGVybmV0LURyYWZ0IHdpbGwgZXhwaXJlIG9uIDxzcGFuIGNs YXNzPSJpbnNlcnQiPk9jdG9iZXIgMTA8L3NwYW4+LCAyMDE1LjwvdGQ+PHRkIGNsYXNzPSJsaW5l bm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8i IHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNs YXNzPSJyaWdodCI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90 cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNs YXNzPSJsZWZ0Ij5Db3B5cmlnaHQgTm90aWNlPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdo dCI+Q29weXJpZ2h0IE5vdGljZTwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48 L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3Rk Pjx0ZCBjbGFzcz0ibGVmdCI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+PC90ZD48 dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQg Y2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBDb3B5 cmlnaHQgKGMpIDIwMTUgSUVURiBUcnVzdCBhbmQgdGhlIHBlcnNvbnMgaWRlbnRpZmllZCBhcyB0 aGU8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBDb3B5cmlnaHQgKGMpIDIwMTUg SUVURiBUcnVzdCBhbmQgdGhlIHBlcnNvbnMgaWRlbnRpZmllZCBhcyB0aGU8L3RkPjx0ZCBjbGFz cz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0i bGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIGRvY3VtZW50IGF1 dGhvcnMuICBBbGwgcmlnaHRzIHJlc2VydmVkLjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmln aHQiPiAgIGRvY3VtZW50IGF1dGhvcnMuICBBbGwgcmlnaHRzIHJlc2VydmVkLjwvdGQ+PHRkIGNs YXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNz PSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+PC90ZD48dGQ+IDwv dGQ+PHRkIGNsYXNzPSJyaWdodCI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3Ai PjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwv dGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBUaGlzIGRvY3VtZW50IGlzIHN1YmplY3QgdG8gQkNQIDc4 IGFuZCB0aGUgSUVURiBUcnVzdCdzIExlZ2FsPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdo dCI+ICAgVGhpcyBkb2N1bWVudCBpcyBzdWJqZWN0IHRvIEJDUCA3OCBhbmQgdGhlIElFVEYgVHJ1 c3QncyBMZWdhbDwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+ DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFz cz0ibGVmdCI+ICAgUHJvdmlzaW9ucyBSZWxhdGluZyB0byBJRVRGIERvY3VtZW50czwvdGQ+PHRk PiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIFByb3Zpc2lvbnMgUmVsYXRpbmcgdG8gSUVURiBE b2N1bWVudHM8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0K ICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9 ImxlZnQiPiAgIChodHRwOi8vdHJ1c3RlZS5pZXRmLm9yZy9saWNlbnNlLWluZm8pIGluIGVmZmVj dCBvbiB0aGUgZGF0ZSBvZjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIChodHRw Oi8vdHJ1c3RlZS5pZXRmLm9yZy9saWNlbnNlLWluZm8pIGluIGVmZmVjdCBvbiB0aGUgZGF0ZSBv ZjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8 dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ ICAgcHVibGljYXRpb24gb2YgdGhpcyBkb2N1bWVudC4gIFBsZWFzZSByZXZpZXcgdGhlc2UgZG9j dW1lbnRzPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgcHVibGljYXRpb24gb2Yg dGhpcyBkb2N1bWVudC4gIFBsZWFzZSByZXZpZXcgdGhlc2UgZG9jdW1lbnRzPC90ZD48dGQgY2xh c3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9 ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0i cmlnaHQiPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4NCiAgICAgIDx0ciBiZ2Nv bG9yPSJncmF5Ij48dGQ+PC90ZD48dGg+PGEgbmFtZT0icGFydC1sMyI+PHNtYWxsPnNraXBwaW5n IHRvIGNoYW5nZSBhdDwvc21hbGw+PGVtPiBwYWdlIDIsIGxpbmUgMTY8L2VtPjwvYT48L3RoPjx0 aD4gPC90aD48dGg+PGEgbmFtZT0icGFydC1yMyI+PHNtYWxsPnNraXBwaW5nIHRvIGNoYW5nZSBh dDwvc21hbGw+PGVtPiBwYWdlIDIsIGxpbmUgMTY8L2VtPjwvYT48L3RoPjx0ZD48L3RkPjwvdHI+ DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFz cz0ibGVmdCI+ICAgdGhlIFRydXN0IExlZ2FsIFByb3Zpc2lvbnMgYW5kIGFyZSBwcm92aWRlZCB3 aXRob3V0IHdhcnJhbnR5IGFzPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgdGhl IFRydXN0IExlZ2FsIFByb3Zpc2lvbnMgYW5kIGFyZSBwcm92aWRlZCB3aXRob3V0IHdhcnJhbnR5 IGFzPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAg IDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0 Ij4gICBkZXNjcmliZWQgaW4gdGhlIFNpbXBsaWZpZWQgQlNEIExpY2Vuc2UuPC90ZD48dGQ+IDwv dGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgZGVzY3JpYmVkIGluIHRoZSBTaW1wbGlmaWVkIEJTRCBM aWNlbnNlLjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQog ICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0i bGVmdCI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+PC90ZD48dGQgY2xhc3M9Imxp bmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVu byIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij5UYWJsZSBvZiBDb250ZW50czwv dGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPlRhYmxlIG9mIENvbnRlbnRzPC90ZD48dGQg Y2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xh c3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij48L3RkPjx0ZD4g PC90ZD48dGQgY2xhc3M9InJpZ2h0Ij48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRv cCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+ PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIDEuICBJbnRyb2R1Y3Rpb24gIC4gLiAuIC4gLiAuIC4g LiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuICAgMjwvdGQ+PHRkPiA8L3RkPjx0ZCBj bGFzcz0icmlnaHQiPiAgIDEuICBJbnRyb2R1Y3Rpb24gIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAu IC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuICAgMjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGln bj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0i dG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgMi4gIFRlcm1pbm9sb2d5IC4gLiAuIC4gLiAu IC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gICAzPC90ZD48dGQ+IDwvdGQ+ PHRkIGNsYXNzPSJyaWdodCI+ICAgMi4gIFRlcm1pbm9sb2d5IC4gLiAuIC4gLiAuIC4gLiAuIC4g LiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gICAzPC90ZD48dGQgY2xhc3M9ImxpbmVubyIg dmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFs aWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICAzLiAgU29sdXRpb24gT3ZlcnZpZXcg LiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAgIDM8L3RkPjx0ZD4g PC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICAzLiAgU29sdXRpb24gT3ZlcnZpZXcgLiAuIC4gLiAu IC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAgIDM8L3RkPjx0ZCBjbGFzcz0ibGlu ZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5v IiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIDQuICBPYnRhaW5pbmcgYSBU b2tlbiBVc2luZyBPQXV0aCAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuICAgNDwvdGQ+ PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIDQuICBPYnRhaW5pbmcgYSBUb2tlbiBVc2lu ZyBPQXV0aCAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuICAgNDwvdGQ+PHRkIGNsYXNz PSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJs aW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgICA0LjEuICBLZXkg RXN0YWJsaXNobWVudCAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gICA0 PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgICA0LjEuICBLZXkgRXN0YWJsaXNo bWVudCAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gICA0PC90ZD48dGQg Y2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQ+PGEg bmFtZT0iZGlmZjAwMDUiPjwvYT48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5l bm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj4gICAgICAgNC4xLjEuICA8 c3BhbiBjbGFzcz0iZGVsZXRlIj5EU0tQUCAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAu IC4gLiAuIC4gLiAuIC4gLiAgIDU8L3NwYW4+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxv Y2siPiAgICAgICA0LjEuMS4gIEhUVFAgaW50ZXJhY3Rpb25zIC4gLiAuIC4gLiAuIC4gLiAuIC4g LiAuIC4gLiAuIC4gLiAuICAgNTwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48 L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3Rk Pjx0ZCBjbGFzcz0ibGJsb2NrIj48c3BhbiBjbGFzcz0iZGVsZXRlIj4gICAgICAgNC4xLjIuPC9z cGFuPiAgSFRUUCBpbnRlcmFjdGlvbnMgLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAu IC4gICA1PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPiAgICAgICA8c3BhbiBjbGFz cz0iaW5zZXJ0Ij40LjEuMi48L3NwYW4+ICBNYW51YWwgcHJvdmlzaW9uaW5nIC4gLiAuIC4gLiAu IC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAgIDY8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249 InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRv cCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+ICAgICAgIDxzcGFuIGNsYXNzPSJkZWxldGUiPjQu MS4zLjwvc3Bhbj4gIE1hbnVhbCBwcm92aXNpb25pbmcgLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4g LiAuIC4gLiAuICAgNjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj4gICA1LiAgRm9y bWluZyBhIFJlcXVlc3QgLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4g LiAgIDxzcGFuIGNsYXNzPSJpbnNlcnQiPjY8L3NwYW4+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIg dmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFs aWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPiAgIDUuICBGb3JtaW5nIGEgUmVxdWVz dCAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuICAgPHNwYW4gY2xh c3M9ImRlbGV0ZSI+Nzwvc3Bhbj48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+ICAg Ni4gIFNUVU4gQXR0cmlidXRlcyAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAu IC4gLiAuIC4gICA8c3BhbiBjbGFzcz0iaW5zZXJ0Ij42PC9zcGFuPjwvdGQ+PHRkIGNsYXNzPSJs aW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5l bm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj4gICA2LiAgU1RVTiBBdHRy aWJ1dGVzIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAgIDxz cGFuIGNsYXNzPSJkZWxldGUiPjc8L3NwYW4+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxv Y2siPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAg ICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVm dCI+ICAgICA2LjEuICBUSElSRC1QQVJUWS1BVVRIT1JJWkFUSU9OIC4gLiAuIC4gLiAuIC4gLiAu IC4gLiAuIC4gLiAuIC4gICA3PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgICA2 LjEuICBUSElSRC1QQVJUWS1BVVRIT1JJWkFUSU9OIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4g LiAuIC4gICA3PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4N CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNz PSJsZWZ0Ij4gICAgIDYuMi4gIEFDQ0VTUy1UT0tFTiAgLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4g LiAuIC4gLiAuIC4gLiAuIC4gLiAgIDc8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4g ICAgIDYuMi4gIEFDQ0VTUy1UT0tFTiAgLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAu IC4gLiAuIC4gLiAgIDc8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48 L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQg Y2xhc3M9ImxlZnQiPiAgIDcuICBTVFVOIFNlcnZlciBCZWhhdmlvdXIgLiAuIC4gLiAuIC4gLiAu IC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuICAgOTwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmln aHQiPiAgIDcuICBTVFVOIFNlcnZlciBCZWhhdmlvdXIgLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4g LiAuIC4gLiAuIC4gLiAuICAgOTwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48 L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3Rk Pjx0ZCBjbGFzcz0ibGVmdCI+ICAgOC4gIFNUVU4gQ2xpZW50IEJlaGF2aW91ciAuIC4gLiAuIC4g LiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gIDEwPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNz PSJyaWdodCI+ICAgOC4gIFNUVU4gQ2xpZW50IEJlaGF2aW91ciAuIC4gLiAuIC4gLiAuIC4gLiAu IC4gLiAuIC4gLiAuIC4gLiAuIC4gIDEwPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0 b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQ+PGEgbmFtZT0iZGlmZjAwMDYiPjwvYT48L3Rk PjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0 ZCBjbGFzcz0ibGJsb2NrIj4gICA5LiAgVXNhZ2Ugd2l0aCBUVVJOIC4gLiAuIC4gLiAuIC4gLiAu IC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAgMTxzcGFuIGNsYXNzPSJkZWxldGUiPjE8L3Nw YW4+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPiAgIDkuICBVc2FnZSB3aXRoIFRV Uk4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuICAxPHNwYW4g Y2xhc3M9Imluc2VydCI+MDwvc3Bhbj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRv cCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+ PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIDEwLiBPcGVyYXRpb25hbCBDb25zaWRlcmF0aW9ucyAg LiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuICAxNDwvdGQ+PHRkPiA8L3RkPjx0ZCBj bGFzcz0icmlnaHQiPiAgIDEwLiBPcGVyYXRpb25hbCBDb25zaWRlcmF0aW9ucyAgLiAuIC4gLiAu IC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuICAxNDwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGln bj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0i dG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgMTEuIFNlY3VyaXR5IENvbnNpZGVyYXRpb25z IC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gIDE0PC90ZD48dGQ+IDwvdGQ+ PHRkIGNsYXNzPSJyaWdodCI+ICAgMTEuIFNlY3VyaXR5IENvbnNpZGVyYXRpb25zIC4gLiAuIC4g LiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gIDE0PC90ZD48dGQgY2xhc3M9ImxpbmVubyIg dmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFs aWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICAxMi4gSUFOQSBDb25zaWRlcmF0aW9u cyAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAgMTU8L3RkPjx0ZD4g PC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICAxMi4gSUFOQSBDb25zaWRlcmF0aW9ucyAuIC4gLiAu IC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAgMTU8L3RkPjx0ZCBjbGFzcz0ibGlu ZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5v IiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIDEzLiBBY2tub3dsZWRnZW1l bnRzICAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuICAxNTwvdGQ+ PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIDEzLiBBY2tub3dsZWRnZW1lbnRzICAuIC4g LiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuICAxNTwvdGQ+PHRkIGNsYXNz PSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJs aW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgMTQuIFJlZmVyZW5j ZXMgIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gIDE1 PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgMTQuIFJlZmVyZW5jZXMgIC4gLiAu IC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gIDE1PC90ZD48dGQg Y2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xh c3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICAgIDE0LjEu ICBOb3JtYXRpdmUgUmVmZXJlbmNlcyAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4g LiAgMTY8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICAgIDE0LjEuICBOb3JtYXRp dmUgUmVmZXJlbmNlcyAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAgMTY8L3Rk Pjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0 ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgICAg MTQuMi4gIEluZm9ybWF0aXZlIFJlZmVyZW5jZXMgLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAu IC4gLiAuICAxNjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgICAgMTQuMi4gIElu Zm9ybWF0aXZlIFJlZmVyZW5jZXMgLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuICAx NjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8 dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ ICAgQXBwZW5kaXggQS4gIFNhbXBsZSB0aWNrZXRzIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4g LiAuIC4gLiAuIC4gIDE4PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgQXBwZW5k aXggQS4gIFNhbXBsZSB0aWNrZXRzIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAu IC4gIDE4PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAg ICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJs ZWZ0Ij4gICBBcHBlbmRpeCBCLiAgSW50ZXJhY3Rpb24gYmV0d2VlbiBjbGllbnQgYW5kIGF1dGhv cml6YXRpb24gc2VydmVyICAgMjA8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBB cHBlbmRpeCBCLiAgSW50ZXJhY3Rpb24gYmV0d2VlbiBjbGllbnQgYW5kIGF1dGhvcml6YXRpb24g c2VydmVyICAgMjA8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3Ry Pg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xh c3M9ImxlZnQiPiAgIEF1dGhvcnMnIEFkZHJlc3NlcyAgLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4g LiAuIC4gLiAuIC4gLiAuIC4gLiAuICAyMjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQi PiAgIEF1dGhvcnMnIEFkZHJlc3NlcyAgLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAu IC4gLiAuIC4gLiAuICAyMjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3Rk PjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0 Ij48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij48L3RkPjx0ZCBjbGFzcz0ibGluZW5v Ij48L3RkPjwvdHI+DQogICAgICA8dHIgYmdjb2xvcj0iZ3JheSI+PHRkPjwvdGQ+PHRoPjxhIG5h bWU9InBhcnQtbDQiPjxzbWFsbD5za2lwcGluZyB0byBjaGFuZ2UgYXQ8L3NtYWxsPjxlbT4gcGFn ZSA0LCBsaW5lIDUwPC9lbT48L2E+PC90aD48dGg+IDwvdGg+PHRoPjxhIG5hbWU9InBhcnQtcjQi PjxzbWFsbD5za2lwcGluZyB0byBjaGFuZ2UgYXQ8L3NtYWxsPjxlbT4gcGFnZSA0LCBsaW5lIDQ5 PC9lbT48L2E+PC90aD48dGQ+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5v IiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPjQuMS4gIEtleSBFc3RhYmxpc2ht ZW50PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+NC4xLiAgS2V5IEVzdGFibGlzaG1l bnQ8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAg PHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQi PjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8i IHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZh bGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgVGhlIGF1dGhvcml6YXRpb24gc2Vy dmVyIHNoYXJlcyBhIGxvbmctdGVybSBzZWNyZXQgKGxpa2UgYXN5bW1ldHJpYzwvdGQ+PHRkPiA8 L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIFRoZSBhdXRob3JpemF0aW9uIHNlcnZlciBzaGFyZXMg YSBsb25nLXRlcm0gc2VjcmV0IChsaWtlIGFzeW1tZXRyaWM8L3RkPjx0ZCBjbGFzcz0ibGluZW5v IiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2 YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIGNyZWRlbnRpYWxzKSB3aXRoIHRo ZSBTVFVOIHNlcnZlciBmb3IgbXV0dWFsIGF1dGhlbnRpY2F0aW9uLjwvdGQ+PHRkPiA8L3RkPjx0 ZCBjbGFzcz0icmlnaHQiPiAgIGNyZWRlbnRpYWxzKSB3aXRoIHRoZSBTVFVOIHNlcnZlciBmb3Ig bXV0dWFsIGF1dGhlbnRpY2F0aW9uLjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9w Ij48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48 L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgU3ltbWV0cmljLWtleSBhbGdvcml0aG0gd2l0aCBIYXNo IGJhc2VkIE1lc3NhZ2UgQXV0aGVudGljYXRpb24gQ29kZXM8L3RkPjx0ZD4gPC90ZD48dGQgY2xh c3M9InJpZ2h0Ij4gICBTeW1tZXRyaWMta2V5IGFsZ29yaXRobSB3aXRoIEhhc2ggYmFzZWQgTWVz c2FnZSBBdXRoZW50aWNhdGlvbiBDb2RlczwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0i dG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9w Ij48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgKEhNQUNzKSBNVVNUIGJlIGNob3NlbiB0byBlbnN1 cmUgdGhhdCB0aGUgc2l6ZSBvZiBlbmNyeXB0ZWQgdG9rZW4gaXM8L3RkPjx0ZD4gPC90ZD48dGQg Y2xhc3M9InJpZ2h0Ij4gICAoSE1BQ3MpIE1VU1QgYmUgY2hvc2VuIHRvIGVuc3VyZSB0aGF0IHRo ZSBzaXplIG9mIGVuY3J5cHRlZCB0b2tlbiBpczwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGln bj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0i dG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgbm90IGxhcmdlIGJlY2F1c2UgdXNhZ2Ugb2Yg YXN5bW1ldHJpYyBrZXlzIHdpbGwgcmVzdWx0IGluIGxhcmdlPC90ZD48dGQ+IDwvdGQ+PHRkIGNs YXNzPSJyaWdodCI+ICAgbm90IGxhcmdlIGJlY2F1c2UgdXNhZ2Ugb2YgYXN5bW1ldHJpYyBrZXlz IHdpbGwgcmVzdWx0IGluIGxhcmdlPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3Ai PjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwv dGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBlbmNyeXB0ZWQgdG9rZW5zIHdoaWNoIG1heSBub3QgZml0 IGludG8gYSBzaW5nbGUgU1RVTiBtZXNzYWdlLjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmln aHQiPiAgIGVuY3J5cHRlZCB0b2tlbnMgd2hpY2ggbWF5IG5vdCBmaXQgaW50byBhIHNpbmdsZSBT VFVOIG1lc3NhZ2UuPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90 cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNs YXNzPSJsZWZ0Ij48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij48L3RkPjx0ZCBjbGFz cz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0i bGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIFRoZSBTVFVOIHNl cnZlciBhbmQgYXV0aG9yaXphdGlvbiBzZXJ2ZXIgY2FuIGVzdGFibGlzaCBhIHN5bW1ldHJpYzwv dGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIFRoZSBTVFVOIHNlcnZlciBhbmQgYXV0 aG9yaXphdGlvbiBzZXJ2ZXIgY2FuIGVzdGFibGlzaCBhIHN5bW1ldHJpYzwvdGQ+PHRkIGNsYXNz PSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkPjxhIG5hbWU9 ImRpZmYwMDA3Ij48L2E+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2 YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+ICAga2V5IDxzcGFuIGNsYXNzPSJk ZWxldGUiPihLKSw8L3NwYW4+IHVzaW5nIGFuIG91dCBvZiBiYW5kIG1lY2hhbmlzbS4gIElmIHN5 bW1ldHJpYyBrZXkgaXMgdXNlZDwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj4gICBr ZXkgPHNwYW4gY2xhc3M9Imluc2VydCI+KEspIGFuZCBjZXJ0YWluIGF1dGhlbnRpY2F0ZWQgZW5j cnlwdGlvbiBhbGdvcml0aG0sPC9zcGFuPiB1c2luZyBhbiBvdXQ8L3RkPjx0ZCBjbGFzcz0ibGlu ZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5v IiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+ICAgdGhlbiB0aGUgQVMtUlMg YW5kIEFVVEgga2V5cyB3aWxsIGJlIGRlcml2ZWQgZnJvbSBLLiAgVGhlIEFTLVJTIGtleTwvdGQ+ PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj4gICBvZiBiYW5kIG1lY2hhbmlzbS4gIElmIHN5 bW1ldHJpYyBrZXkgaXMgdXNlZCB0aGVuIHRoZSBBUy1SUyBhbmQgQVVUSDwvdGQ+PHRkIGNsYXNz PSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJs aW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj4gICBpcyB1c2VkIGZv ciBlbmNyeXB0aW5nIHRoZSBzZWxmLWNvbnRhaW5lZCB0b2tlbiBhbmQgdGhlIG1lc3NhZ2U8L3Rk Pjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+ICAga2V5cyB3aWxsIGJlIGRlcml2ZWQgZnJv bSBLLiAgVGhlIEFTLVJTIGtleSBpcyB1c2VkIGZvciBlbmNyeXB0aW5nPC90ZD48dGQgY2xhc3M9 ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9Imxp bmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPiAgIGludGVncml0eSBv ZiB0aGUgZW5jcnlwdGVkIHRva2VuIGlzIGNhbGN1bGF0ZWQgdXNpbmcgdGhlIEFVVEgga2V5Ljwv dGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj4gICB0aGUgc2VsZi1jb250YWluZWQgdG9r ZW4gYW5kIHRoZSBtZXNzYWdlIGludGVncml0eSBvZiB0aGUgZW5jcnlwdGVkPC90ZD48dGQgY2xh c3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9 ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPiAgIFRoZSBTVFVO IGFuZCBhdXRob3JpemF0aW9uIHNlcnZlcnMgTVVTVCBlc3RhYmxpc2ggdGhlIHN5bW1ldHJpYyBr ZXk8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+ICAgdG9rZW4gaXMgY2FsY3VsYXRl ZCB1c2luZyB0aGUgQVVUSCBrZXkuICBUaGUgU1RVTiBhbmQgYXV0aG9yaXphdGlvbjwvdGQ+PHRk IGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNs YXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj4gICBvdmVy IGFuIGF1dGhlbnRpY2F0ZWQgc2VjdXJlIGNoYW5uZWwuPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNz PSJyYmxvY2siPiAgIHNlcnZlcnMgTVVTVCBlc3RhYmxpc2ggdGhlIHN5bW1ldHJpYyBrZXkgb3Zl ciBhbiBhdXRoZW50aWNhdGVkIHNlY3VyZTwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0i dG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9w Ij48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9j ayI+ICAgY2hhbm5lbC48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48 L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQg Y2xhc3M9ImxlZnQiPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPjwvdGQ+PHRkIGNs YXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNz PSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgVGhlIHByb2Nl ZHVyZSBmb3IgZXN0YWJsaXNobWVudCBvZiB0aGUgc3ltbWV0cmljIGtleSBpcyBvdXRzaWRlIHRo ZTwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIFRoZSBwcm9jZWR1cmUgZm9yIGVz dGFibGlzaG1lbnQgb2YgdGhlIHN5bW1ldHJpYyBrZXkgaXMgb3V0c2lkZSB0aGU8L3RkPjx0ZCBj bGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFz cz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIHNjb3BlIG9m IHRoaXMgc3BlY2lmaWNhdGlvbiwgYW5kIHRoaXMgc3BlY2lmaWNhdGlvbiBkb2VzIG5vdCBtYW5k YXRlPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgc2NvcGUgb2YgdGhpcyBzcGVj aWZpY2F0aW9uLCBhbmQgdGhpcyBzcGVjaWZpY2F0aW9uIGRvZXMgbm90IG1hbmRhdGU8L3RkPjx0 ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZD48 YSBuYW1lPSJkaWZmMDAwOCI+PC9hPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9Imxp bmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPiAgIHN1cHBvcnQgb2Yg YW55IGdpdmVuIG1lY2hhbmlzbS4gIFNlY3Rpb24gPHNwYW4gY2xhc3M9ImRlbGV0ZSI+NC4xLjEs IFNlY3Rpb24gNC4xLjI8L3NwYW4+IGFuZDwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2Nr Ij4gICBzdXBwb3J0IG9mIGFueSBnaXZlbiBtZWNoYW5pc20uICBTZWN0aW9uIDxzcGFuIGNsYXNz PSJpbnNlcnQiPjQuMS4xPC9zcGFuPiBhbmQgU2VjdGlvbiA8c3BhbiBjbGFzcz0iaW5zZXJ0Ij40 LjEuMjwvc3Bhbj4gc2hvdzwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3Rk PjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0 ZCBjbGFzcz0ibGJsb2NrIj4gICBTZWN0aW9uIDxzcGFuIGNsYXNzPSJkZWxldGUiPjQuMS4zPC9z cGFuPiBzaG93IGV4YW1wbGVzIG9mIG1lY2hhbmlzbXMgdGhhdCBjYW4gYmUgdXNlZC48L3RkPjx0 ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+ICAgZXhhbXBsZXMgb2YgbWVjaGFuaXNtcyB0aGF0 IGNhbiBiZSB1c2VkLjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwv dHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBj bGFzcz0ibGJsb2NrIj4gICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJy YmxvY2siPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQog ICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0i bGJsb2NrIj48c3BhbiBjbGFzcz0iZGVsZXRlIj40LjEuMS4gIERTS1BQPC9zcGFuPjwvdGQ+PHRk PiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249 InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRv cCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+PHNwYW4gY2xhc3M9ImRlbGV0ZSI+PC9zcGFuPjwv dGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2 YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxp Z249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+PHNwYW4gY2xhc3M9ImRlbGV0ZSI+ICAg VGhlIFNUVU4gYW5kIEFTIHNlcnZlcnMgY291bGQgY2hvb3NlIHRvIHVzZSBEeW5hbWljIFN5bW1l dHJpYyBLZXk8L3NwYW4+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPjwvdGQ+PHRk IGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNs YXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48c3BhbiBj bGFzcz0iZGVsZXRlIj4gICBQcm92aXNpb25pbmcgUHJvdG9jb2wgKERTS1BQKSBbUkZDNjA2M10g dG8gZXN0YWJsaXNoIGEgc3ltbWV0cmljIGtleTwvc3Bhbj48L3RkPjx0ZD4gPC90ZD48dGQgY2xh c3M9InJibG9jayI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90 cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNs YXNzPSJsYmxvY2siPjxzcGFuIGNsYXNzPSJkZWxldGUiPiAgIChLKS4gIFRoZSBlbmNyeXB0aW9u IGFuZCBNQUMgYWxnb3JpdGhtcyB3aWxsIGJlIG5lZ290aWF0ZWQgdXNpbmcgdGhlPC9zcGFuPjwv dGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2 YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxp Z249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+PHNwYW4gY2xhc3M9ImRlbGV0ZSI+ICAg S2V5UHJvdkNsaWVudEhlbGxvLCBLZXlQcm92U2VydmVySGVsbG8gbWVzc2FnZXMuICBBIHVuaXF1 ZSBrZXk8L3NwYW4+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPjwvdGQ+PHRkIGNs YXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNz PSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48c3BhbiBjbGFz cz0iZGVsZXRlIj4gICBpZGVudGlmaWVyIChyZWZlcnJlZCB0byBhcyBLZXlJRCkgZm9yIHRoZSBz eW1tZXRyaWMga2V5IGlzIGdlbmVyYXRlZDwvc3Bhbj48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9 InJibG9jayI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4N CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNz PSJsYmxvY2siPjxzcGFuIGNsYXNzPSJkZWxldGUiPiAgIGJ5IHRoZSBEU0tQUCBzZXJ2ZXIgKGku ZS4sIEF1dGhvcml6YXRpb24gc2VydmVyKSBhbmQgc2lnbmFsbGVkIHRvIHRoZTwvc3Bhbj48L3Rk Pjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFs aWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWdu PSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPjxzcGFuIGNsYXNzPSJkZWxldGUiPiAgIERT S1BQIGNsaWVudCAoaS5lLiwgU1RVTiBzZXJ2ZXIpIHdoaWNoIGlzIGVxdWl2YWxlbnQgdG8gdGhl IGtpZDwvc3Bhbj48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+PC90ZD48dGQgY2xh c3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9 ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPjxzcGFuIGNsYXNz PSJkZWxldGUiPiAgIGRlZmluZWQgaW4gdGhpcyBzcGVjaWZpY2F0aW9uLiAgVGhlIEFTLVJTLCBB VVRIIGtleXMgd291bGQgYmUgZGVyaXZlZDwvc3Bhbj48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9 InJibG9jayI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4N CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNz PSJsYmxvY2siPjxzcGFuIGNsYXNzPSJkZWxldGUiPiAgIGZyb20gdGhlIHN5bW1ldHJpYyBrZXkg dXNpbmcgKEhNQUMpLWJhc2VkIGtleSBkZXJpdmF0aW9uIGZ1bmN0aW9uPC9zcGFuPjwvdGQ+PHRk PiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249 InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRv cCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+PHNwYW4gY2xhc3M9ImRlbGV0ZSI+ICAgKEhLREYp IFtSRkM1ODY5XSBhbmQgdGhlIGRlZmF1bHQgaGFzaCBmdW5jdGlvbiBNVVNUIGJlIFNIQS0yNTYu ICBGb3I8L3NwYW4+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPjwvdGQ+PHRkIGNs YXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNz PSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48c3BhbiBjbGFz cz0iZGVsZXRlIj4gICBleGFtcGxlIGlmIHRoZSBpbnB1dCBzeW1tZXRyaWMga2V5IChLKSBpcyAz MiBvY3RldHMgbGVuZ3RoLDwvc3Bhbj48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+ PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0 cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2si PjxzcGFuIGNsYXNzPSJkZWxldGUiPiAgIGVuY3J5cHRpb24gYWxnb3JpdGhtIGlzIEFFU18yNTZf Q0JDIGFuZCBITUFDIGFsZ29yaXRobSBpcyBITUFDLVNIQTE8L3NwYW4+PC90ZD48dGQ+IDwvdGQ+ PHRkIGNsYXNzPSJyYmxvY2siPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48 L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3Rk Pjx0ZCBjbGFzcz0ibGJsb2NrIj48c3BhbiBjbGFzcz0iZGVsZXRlIj4gICBbUkZDMjEwNF0gdGhl biB0aGUgc2Vjb25kYXJ5IGtleXMgQVMtUlMsIEFVVEggYXJlIGdlbmVyYXRlZCBmcm9tIHRoZTwv c3Bhbj48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+PC90ZD48dGQgY2xhc3M9Imxp bmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVu byIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPjxzcGFuIGNsYXNzPSJkZWxl dGUiPiAgIGlucHV0IGtleSBLIGFzIGZvbGxvd3M8L3NwYW4+PC90ZD48dGQ+IDwvdGQ+PHRkIGNs YXNzPSJyYmxvY2siPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwv dHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBj bGFzcz0ibGJsb2NrIj48c3BhbiBjbGFzcz0iZGVsZXRlIj48L3NwYW4+PC90ZD48dGQ+IDwvdGQ+ PHRkIGNsYXNzPSJyYmxvY2siPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48 L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3Rk Pjx0ZCBjbGFzcz0ibGJsb2NrIj48c3BhbiBjbGFzcz0iZGVsZXRlIj4gICAxLiAgSEtERi1FeHRy YWN0KHplcm8sIEspIC0mZ3Q7IFBSSzwvc3Bhbj48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJi bG9jayI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAg ICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJs YmxvY2siPjxzcGFuIGNsYXNzPSJkZWxldGUiPjwvc3Bhbj48L3RkPjx0ZD4gPC90ZD48dGQgY2xh c3M9InJibG9jayI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90 cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNs YXNzPSJsYmxvY2siPjxzcGFuIGNsYXNzPSJkZWxldGUiPiAgIDIuICBIS0RGLUV4cGFuZChQUkss ICJBVVRIIGtleSIsIDIwKSAtJmd0OyBBVVRIIGtleTwvc3Bhbj48L3RkPjx0ZD4gPC90ZD48dGQg Y2xhc3M9InJibG9jayI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+ PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRk IGNsYXNzPSJsYmxvY2siPjxzcGFuIGNsYXNzPSJkZWxldGUiPjwvc3Bhbj48L3RkPjx0ZD4gPC90 ZD48dGQgY2xhc3M9InJibG9jayI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3Ai PjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwv dGQ+PHRkIGNsYXNzPSJsYmxvY2siPjxzcGFuIGNsYXNzPSJkZWxldGUiPiAgIDMuICBIS0RGLUV4 cGFuZChQUkssICJBUy1SUyBrZXkiLCAzMikgLSZndDsgQVMtUlMga2V5PC9zcGFuPjwvdGQ+PHRk PiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249 InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRv cCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+PHNwYW4gY2xhc3M9ImRlbGV0ZSI+PC9zcGFuPjwv dGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2 YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxp Z249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+PHNwYW4gY2xhc3M9ImRlbGV0ZSI+ICAg SWYgQXV0aGVudGljYXRlZCBFbmNyeXB0aW9uIHdpdGggQXNzb2NpYXRlZCBEYXRhIChBRUFEKSBh bGdvcml0aG08L3NwYW4+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPjwvdGQ+PHRk IGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNs YXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48c3BhbiBj bGFzcz0iZGVsZXRlIj4gICBkZWZpbmVkIGluIFtSRkM1MTE2XSBpcyB1c2VkIHRoZW4gdGhlcmUg aXMgbm8gbmVlZCB0byBnZW5lcmF0ZSB0aGU8L3NwYW4+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNz PSJyYmxvY2siPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+ DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFz cz0ibGJsb2NrIj48c3BhbiBjbGFzcz0iZGVsZXRlIj4gICBBVVRIIGtleS4gIEFFQUQgc2ltcGxp ZmllcyBpbXBsZW1lbnRhdGlvbiwgc2luY2UgaXQgaW52b2x2ZXMgb25seSBvbmU8L3NwYW4+PC90 ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZh bGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGln bj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48c3BhbiBjbGFzcz0iZGVsZXRlIj4gICBr ZXksIHRoZSB1c2VyIG9mIEFFQUQgbmVlZCBub3QgY29uc2lkZXIgcmVsYXRpdmUgb3JkZXIgb2Yg ZW5jcnlwdGluZzwvc3Bhbj48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+PC90ZD48 dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQg Y2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPjxzcGFu IGNsYXNzPSJkZWxldGUiPiAgIGFuZCBhdXRoZW50aWNhdGluZyB0aGUgdG9rZW4gYW5kIG90aGVy IGJlbmVmaXRzIG9mIEFFQUQgYXJlIGV4cGxhaW5lZDwvc3Bhbj48L3RkPjx0ZD4gPC90ZD48dGQg Y2xhc3M9InJibG9jayI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+ PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRk IGNsYXNzPSJsYmxvY2siPjxzcGFuIGNsYXNzPSJkZWxldGUiPiAgIGluIFNlY3Rpb24gMS4zIG9m IFtSRkM1MTE2XS48L3NwYW4+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPjwvdGQ+ PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRk IGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+PC90ZD48 dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWdu PSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQ+PGEgbmFtZT0iZGlmZjAwMDkiPjwvYT48 L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3Rk Pjx0ZCBjbGFzcz0ibGJsb2NrIj40LjEuPHNwYW4gY2xhc3M9ImRlbGV0ZSI+Mjwvc3Bhbj4uICBI VFRQIGludGVyYWN0aW9uczwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj40LjEuPHNw YW4gY2xhc3M9Imluc2VydCI+MTwvc3Bhbj4uICBIVFRQIGludGVyYWN0aW9uczwvdGQ+PHRkIGNs YXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNz PSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+PC90ZD48dGQ+IDwv dGQ+PHRkIGNsYXNzPSJyaWdodCI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3Ai PjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwv dGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBUaGUgU1RVTiBhbmQgQVMgc2VydmVycyBjb3VsZCBjaG9v c2UgdG8gdXNlIFJFU1QgQVBJIG92ZXIgSFRUUFMgdG88L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9 InJpZ2h0Ij4gICBUaGUgU1RVTiBhbmQgQVMgc2VydmVycyBjb3VsZCBjaG9vc2UgdG8gdXNlIFJF U1QgQVBJIG92ZXIgSFRUUFMgdG88L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+ PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90 ZD48dGQgY2xhc3M9ImxlZnQiPiAgIGVzdGFibGlzaCBhIHN5bW1ldHJpYyBrZXkuICBIVFRQUyBN VVNUIGJlIHVzZWQgZm9yIG11dHVhbDwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAg IGVzdGFibGlzaCBhIHN5bW1ldHJpYyBrZXkuICBIVFRQUyBNVVNUIGJlIHVzZWQgZm9yIG11dHVh bDwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8 dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ ICAgYXV0aGVudGljYXRpb24gYW5kIGNvbmZpZGVudGlhbGl0eS4gIFRvIHJldHJpZXZlIGEgbmV3 IHN5bW1ldHJpYyBrZXksPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgYXV0aGVu dGljYXRpb24gYW5kIGNvbmZpZGVudGlhbGl0eS4gIFRvIHJldHJpZXZlIGEgbmV3IHN5bW1ldHJp YyBrZXksPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAg ICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJs ZWZ0Ij4gICB0aGUgU1RVTiBzZXJ2ZXIgbWFrZXMgYW4gSFRUUCBHRVQgcmVxdWVzdCB0byB0aGUg YXV0aG9yaXphdGlvbjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIHRoZSBTVFVO IHNlcnZlciBtYWtlcyBhbiBIVFRQIEdFVCByZXF1ZXN0IHRvIHRoZSBhdXRob3JpemF0aW9uPC90 ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48 dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBz ZXJ2ZXIsIHNwZWNpZnlpbmcgU1RVTiBhcyB0aGUgc2VydmljZSB0byBhbGxvY2F0ZSB0aGUgc3lt bWV0cmljIGtleXM8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBzZXJ2ZXIsIHNw ZWNpZnlpbmcgU1RVTiBhcyB0aGUgc2VydmljZSB0byBhbGxvY2F0ZSB0aGUgc3ltbWV0cmljIGtl eXM8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAg PHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQi PiAgIGZvciwgYW5kIHNwZWNpZnlpbmcgdGhlIG5hbWUgb2YgdGhlIFNUVU4gc2VydmVyLiAgVGhl IHJlc3BvbnNlIGlzPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgZm9yLCBhbmQg c3BlY2lmeWluZyB0aGUgbmFtZSBvZiB0aGUgU1RVTiBzZXJ2ZXIuICBUaGUgcmVzcG9uc2UgaXM8 L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRy Pjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAg IHJldHVybmVkIHdpdGggY29udGVudC10eXBlICJhcHBsaWNhdGlvbi9qc29uIiwgYW5kIGNvbnNp c3RzIG9mIGE8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICByZXR1cm5lZCB3aXRo IGNvbnRlbnQtdHlwZSAiYXBwbGljYXRpb24vanNvbiIsIGFuZCBjb25zaXN0cyBvZiBhPC90ZD48 dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQg Y2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBKYXZh U2NyaXB0IE9iamVjdCBOb3RhdGlvbiAoSlNPTikgW1JGQzcxNTldIG9iamVjdCBjb250YWluaW5n IHRoZTwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIEphdmFTY3JpcHQgT2JqZWN0 IE5vdGF0aW9uIChKU09OKSBbUkZDNzE1OV0gb2JqZWN0IGNvbnRhaW5pbmcgdGhlPC90ZD48dGQg Y2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xh c3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBzeW1tZXRy aWMga2V5LjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIHN5bW1ldHJpYyBrZXku PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0 cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPjwvdGQ+PHRkPiA8L3Rk Pjx0ZCBjbGFzcz0icmlnaHQiPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4NCiAg ICAgIDx0ciBiZ2NvbG9yPSJncmF5Ij48dGQ+PC90ZD48dGg+PGEgbmFtZT0icGFydC1sNSI+PHNt YWxsPnNraXBwaW5nIHRvIGNoYW5nZSBhdDwvc21hbGw+PGVtPiBwYWdlIDYsIGxpbmUgMjU8L2Vt PjwvYT48L3RoPjx0aD4gPC90aD48dGg+PGEgbmFtZT0icGFydC1yNSI+PHNtYWxsPnNraXBwaW5n IHRvIGNoYW5nZSBhdDwvc21hbGw+PGVtPiBwYWdlIDUsIGxpbmUgNDM8L2VtPjwvYT48L3RoPjx0 ZD48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48 L3RkPjx0ZCBjbGFzcz0ibGVmdCI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+PC90 ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48 dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBS ZXNwb25zZTwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIFJlc3BvbnNlPC90ZD48 dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQg Y2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICAtLS0t LS0tLTwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIC0tLS0tLS0tPC90ZD48dGQg Y2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xh c3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij48L3RkPjx0ZD4g PC90ZD48dGQgY2xhc3M9InJpZ2h0Ij48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRv cCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+ PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIGsgLSBMb25nLXRlcm0ga2V5IChLKTwvdGQ+PHRkPiA8 L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIGsgLSBMb25nLXRlcm0ga2V5IChLKTwvdGQ+PHRkIGNs YXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNz PSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgZXhwIC0gaWRl bnRpZmllcyB0aGUgdGltZSBhZnRlciB3aGljaCB0aGUga2V5IGV4cGlyZXMuPC90ZD48dGQ+IDwv dGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgZXhwIC0gaWRlbnRpZmllcyB0aGUgdGltZSBhZnRlciB3 aGljaCB0aGUga2V5IGV4cGlyZXMuPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3Ai PjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwv dGQ+PHRkIGNsYXNzPSJsZWZ0Ij48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij48L3Rk Pjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0 ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIGV4 YW1wbGU6PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgZXhhbXBsZTo8L3RkPjx0 ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBj bGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIHs8L3Rk Pjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICB7PC90ZD48dGQgY2xhc3M9ImxpbmVubyIg dmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFs aWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICAgICAiayIgOjwvdGQ+PHRkPiA8L3Rk Pjx0ZCBjbGFzcz0icmlnaHQiPiAgICAgICJrIiA6PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFs aWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQ+PGEgbmFtZT0iZGlmZjAwMTAiPjwv YT48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48 L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj4gICA8c3BhbiBjbGFzcz0iZGVsZXRlIj4iRVNJelJGVm1k NGlaQUJFaU0wUlZaZ0tuNldqTGFUQzFGWEFnaFJNVlR6a0JHTmFhTjQ5NjUyM1dJSVNLZXJMaSIs PC9zcGFuPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj4gICA8c3BhbiBjbGFzcz0i aW5zZXJ0Ij4iRVNJelJGVm1kNGlaQUJFaU0wUlZaZ0tuNldqTGFUQzFGWEFnaFJNVlR6a0JHTmFh TjQ5NjUyM1dJSVNLZXJMaTwvc3Bhbj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRv cCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+ PC90ZD48dGQgY2xhc3M9ImxibG9jayI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2si PjxzcGFuIGNsYXNzPSJpbnNlcnQiPiAgICAxcU9Pa3Bad0FJbXdFWHlkZFB5UEdzQk0vd3A0TUZo M2pJWVRwYmdlTHFWTTZsSW51TzNZNjd6dlBqTjQraGd2Iiw8L3NwYW4+PC90ZD48dGQgY2xhc3M9 ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9Imxp bmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICAgICAiZXhwIiA6IDEz MDA4MTkzODAsPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgICAgImV4cCIgOiAx MzAwODE5MzgwLDwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+ DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFz cz0ibGVmdCI+ICAgICAgImtpZCIgOiIyMkJJanhVOTNoL0lnd0ViIjwvdGQ+PHRkPiA8L3RkPjx0 ZCBjbGFzcz0icmlnaHQiPiAgICAgICJraWQiIDoiMjJCSWp4VTkzaC9JZ3dFYiI8L3RkPjx0ZCBj bGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFz cz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgICAgICJlbmMi IDogQTI1NkNCQy1IUzUxMjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgICAgICJl bmMiIDogQTI1NkNCQy1IUzUxMjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48 L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3Rk Pjx0ZCBjbGFzcz0ibGVmdCI+ICAgICB9PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ ICAgICB9PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAg ICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJs ZWZ0Ij48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij48L3RkPjx0ZCBjbGFzcz0ibGlu ZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZD48YSBuYW1lPSJkaWZm MDAxMSI+PC9hPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWdu PSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPiAgIFRoZSA8c3BhbiBjbGFzcz0iZGVsZXRl Ij5BUy1SUywgQVVUSCBrZXlzIGFyZSBkZXJpdmVkIGZyb20gSyB1c2luZyBIS0RGIGFzIGRpc2N1 c3NlZCBpbjwvc3Bhbj48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+ICAgVGhlIGF1 dGhvcml6YXRpb24gc2VydmVyIG11c3QgYWxzbyBzaWduYWwga2lkIHRvIHRoZSBTVFVOIHNlcnZl cjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8 dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2Nr Ij48c3BhbiBjbGFzcz0iZGVsZXRlIj4gICBTZWN0aW9uIDQuMS4xLiAgVGhlPC9zcGFuPiBhdXRo b3JpemF0aW9uIHNlcnZlciBtdXN0IGFsc28gc2lnbmFsIGtpZCB0byB0aGU8L3RkPjx0ZD4gPC90 ZD48dGQgY2xhc3M9InJibG9jayI+ICAgd2hpY2ggd2lsbCBiZSB1c2VkIHRvIHNlbGVjdCB0aGUg YXBwcm9wcmlhdGUga2V5aW5nIG1hdGVyaWFsIGZvcjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZh bGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGln bj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj4gICBTVFVOIHNlcnZlciB3aGljaCB3aWxs IGJlIHVzZWQgdG8gc2VsZWN0IHRoZSBhcHByb3ByaWF0ZSBrZXlpbmc8L3RkPjx0ZD4gPC90ZD48 dGQgY2xhc3M9InJibG9jayI+ICAgZGVjcnlwdGlvbi4gIFRoZSBwYXJhbWV0ZXIgImsiIGlzIGRl ZmluZWQgaW4gU2VjdGlvbiA2LjQuMSBvZjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0i dG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9w Ij48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj4gICBtYXRlcmlhbCBmb3IgZGVjcnlwdGlvbi4gIFRo ZSBwYXJhbWV0ZXIgImsiIGlzIGRlZmluZWQgaW48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJi bG9jayI+ICAgW0ktRC5pZXRmLWpvc2UtanNvbi13ZWItYWxnb3JpdGhtc10sICJlbmMiIGlzIGRl ZmluZWQgaW48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0K ICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9 ImxibG9jayI+ICAgU2VjdGlvbiA2LjQuMSBvZiBbSS1ELmlldGYtam9zZS1qc29uLXdlYi1hbGdv cml0aG1zXSwgImVuYyIgaXM8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+ICAgU2Vj dGlvbiA0LjEuMiBvZiBbSS1ELmlldGYtam9zZS1qc29uLXdlYi1lbmNyeXB0aW9uXSwgImtpZCIg aXM8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAg PHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9j ayI+ICAgZGVmaW5lZCBpbiBTZWN0aW9uIDQuMS4yIG9mIFtJLUQuaWV0Zi1qb3NlLWpzb24td2Vi LWVuY3J5cHRpb25dLDwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj4gICBkZWZpbmVk IGluIFNlY3Rpb24gNC4xLjQgb2YgW0ktRC5pZXRmLWpvc2UtanNvbi13ZWItc2lnbmF0dXJlXSBh bmQ8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAg PHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9j ayI+ICAgImtpZCIgaXMgZGVmaW5lZCBpbiBTZWN0aW9uIDQuMS40IG9mPC90ZD48dGQ+IDwvdGQ+ PHRkIGNsYXNzPSJyYmxvY2siPiAgICJleHAiIGlzIGRlZmluZWQgaW4gU2VjdGlvbiA0LjEuNCBv ZiBbSS1ELmlldGYtb2F1dGgtanNvbi13ZWItdG9rZW5dLjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8i IHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZh bGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj4gICBbSS1ELmlldGYtam9zZS1qc29u LXdlYi1zaWduYXR1cmVdIGFuZCAiZXhwIiBpcyBkZWZpbmVkIGluPC90ZD48dGQ+IDwvdGQ+PHRk IGNsYXNzPSJyYmxvY2siPiAgIEEyNTZDQkMtSFM1MTIgYW5kIG90aGVyIGF1dGhlbnRpY2F0ZWQg ZW5jcnlwdGlvbiBhbGdvcml0aG1zIGFyZTwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0i dG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9w Ij48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj4gICBTZWN0aW9uIDQuMS40IG9mIFtJLUQuaWV0Zi1v YXV0aC1qc29uLXdlYi10b2tlbl0uICBBMjU2Q0JDLUhTNTEyIGFuZDwvdGQ+PHRkPiA8L3RkPjx0 ZCBjbGFzcz0icmJsb2NrIj4gICBkZWZpbmVkIGluIFtJLUQuaWV0Zi1qb3NlLWpzb24td2ViLWFs Z29yaXRobXNdLiAgSW4gdGhpcyBjYXNlIDxzcGFuIGNsYXNzPSJpbnNlcnQiPnRoZSBBUy08L3Nw YW4+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAg IDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxv Y2siPiAgIG90aGVyIGF1dGhlbnRpY2F0ZWQgZW5jcnlwdGlvbiBhbGdvcml0aG1zIGFyZSBkZWZp bmVkIGluPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPjxzcGFuIGNsYXNzPSJpbnNl cnQiPiAgIFJTIGFuZCBBVVRIIGtleXMgYXJlIGRlcml2ZWQgZnJvbSBLIHVzaW5nIHRoZSBtZWNo YW5pc20gZXhwbGFpbmVkIGluPC9zcGFuPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0i dG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9w Ij48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj4gICBbSS1ELmlldGYtam9zZS1qc29uLXdlYi1hbGdv cml0aG1zXS4gIEluIHRoaXMgY2FzZSBBUy1SUyBrZXkgbGVuZ3RoPC90ZD48dGQ+IDwvdGQ+PHRk IGNsYXNzPSJyYmxvY2siPjxzcGFuIGNsYXNzPSJpbnNlcnQiPiAgIHNlY3Rpb24gNS4yLjIuMSBv ZiBbSS1ELmlldGYtam9zZS1qc29uLXdlYi1hbGdvcml0aG1zXS48L3NwYW4+ICBBUy1SUyBrZXk8 L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRy Pjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+ ICAgbXVzdCBiZSAyNTYtYml0LCBBVVRIIGtleSBsZW5ndGggbXVzdCBiZSAyNTYtYml0IChzZWN0 aW9uIDIuNiBvZjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj4gICBsZW5ndGggbXVz dCBiZSAyNTYtYml0LCBBVVRIIGtleSBsZW5ndGggbXVzdCBiZSAyNTYtYml0IChzZWN0aW9uIDIu NjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8 dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2Nr Ij4gICBbUkZDNDg2OF0pLjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj4gICBvZiBb UkZDNDg2OF0pLiAgPHNwYW4gY2xhc3M9Imluc2VydCI+QSBTVFVOIHNlcnZlciBhbmQgYXV0aG9y aXphdGlvbiBzZXJ2ZXIgaW1wbGVtZW50YXRpb248L3NwYW4+PC90ZD48dGQgY2xhc3M9ImxpbmVu byIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIg dmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPjwvdGQ+PHRkPiA8L3RkPjx0ZCBj bGFzcz0icmJsb2NrIj48c3BhbiBjbGFzcz0iaW5zZXJ0Ij4gICBNVVNUIHN1cHBvcnQgQTI1NkdD TUtXIChleHBsYWluZWQgaW48L3NwYW4+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0 b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3Ai PjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2Nr Ij48c3BhbiBjbGFzcz0iaW5zZXJ0Ij4gICBbSS1ELmlldGYtam9zZS1qc29uLXdlYi1hbGdvcml0 aG1zXSkgYXMgdGhlIGF1dGhlbnRpY2F0ZWQgZW5jcnlwdGlvbjwvc3Bhbj48L3RkPjx0ZCBjbGFz cz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0i bGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+PC90ZD48dGQ+IDwv dGQ+PHRkIGNsYXNzPSJyYmxvY2siPjxzcGFuIGNsYXNzPSJpbnNlcnQiPiAgIGFsZ29yaXRobS48 L3NwYW4+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAg ICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJs ZWZ0Ij48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij48L3RkPjx0ZCBjbGFzcz0ibGlu ZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZD48YSBuYW1lPSJkaWZm MDAxMiI+PC9hPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWdu PSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPjQuMS48c3BhbiBjbGFzcz0iZGVsZXRlIj4z PC9zcGFuPi4gIE1hbnVhbCBwcm92aXNpb25pbmc8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJi bG9jayI+NC4xLjxzcGFuIGNsYXNzPSJpbnNlcnQiPjI8L3NwYW4+LiAgTWFudWFsIHByb3Zpc2lv bmluZzwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAg ICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVm dCI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+PC90ZD48dGQgY2xhc3M9ImxpbmVu byIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIg dmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBUaGUgU1RVTiBhbmQgQVMgc2Vy dmVycyBjb3VsZCBiZSBtYW51YWxseSBjb25maWd1cmVkIHdpdGggYSBzeW1tZXRyaWM8L3RkPjx0 ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBUaGUgU1RVTiBhbmQgQVMgc2VydmVycyBjb3Vs ZCBiZSBtYW51YWxseSBjb25maWd1cmVkIHdpdGggYSBzeW1tZXRyaWM8L3RkPjx0ZCBjbGFzcz0i bGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZD48YSBuYW1lPSJk aWZmMDAxMyI+PC9hPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFs aWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPiAgIGtleSA8c3BhbiBjbGFzcz0iZGVs ZXRlIj4oSykgYW5kIGtpZC4gIElmIG1hbnVhbCBwcm92aXNpb25pbmcgaXMgc3VwcG9ydGVkLCBz dXBwb3J0IE1VU1Q8L3NwYW4+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPiAgIGtl eSA8c3BhbiBjbGFzcz0iaW5zZXJ0Ij4oSyksPC9zcGFuPiBhdXRoZW50aWNhdGVkIGVuY3J5cHRp b24gPHNwYW4gY2xhc3M9Imluc2VydCI+YWxnb3JpdGhtIGFuZCBraWQuPC9zcGFuPjwvdGQ+PHRk IGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNs YXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48c3BhbiBj bGFzcz0iZGVsZXRlIj4gICBhbHNvIGJlIHByb3ZpZGVkIGZvciBBRVNfMjU2X0NCQ19ITUFDX1NI QV81MTIgKGV4cGxhaW5lZCBpbjwvc3Bhbj48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9j ayI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAg IDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxv Y2siPjxzcGFuIGNsYXNzPSJkZWxldGUiPjwvc3Bhbj48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9 InJibG9jayI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4N CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNz PSJsYmxvY2siPjxzcGFuIGNsYXNzPSJkZWxldGUiPiAgIFtJLUQuaWV0Zi1qb3NlLWpzb24td2Vi LWFsZ29yaXRobXNdKSBhcyB0aGU8L3NwYW4+IGF1dGhlbnRpY2F0ZWQgZW5jcnlwdGlvbjwvdGQ+ PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxp Z249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249 InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+ICAgPHNwYW4gY2xhc3M9ImRlbGV0ZSI+YWxn b3JpdGhtLjwvc3Bhbj48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+PC90ZD48dGQg Y2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xh c3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij48L3RkPjx0ZD4g PC90ZD48dGQgY2xhc3M9InJpZ2h0Ij48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRv cCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZD48YSBuYW1lPSJkaWZmMDAxNCI+PC9hPjwvdGQ+ PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRk IGNsYXNzPSJsYmxvY2siPiAgIE5vdGUgOiBUaGUgbWVjaGFuaXNtIHNwZWNpZmllZCBpbiBTZWN0 aW9uIDxzcGFuIGNsYXNzPSJkZWxldGUiPjQuMS4zPC9zcGFuPiBjb21wYXJlZCB0byA8c3BhbiBj bGFzcz0iZGVsZXRlIj5EU0tQUCBhbmQ8L3NwYW4+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJy YmxvY2siPiAgIE5vdGUgOiBUaGUgbWVjaGFuaXNtIHNwZWNpZmllZCBpbiBTZWN0aW9uIDxzcGFu IGNsYXNzPSJpbnNlcnQiPjQuMS4yPC9zcGFuPiBjb21wYXJlZCB0byBSRVNUPC90ZD48dGQgY2xh c3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9 ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPiAgIFJFU1QgbGFj a3MgZW5jcnlwdGlvbiBhbmQgSE1BQyBhbGdvcml0aG0gYWdpbGl0eS48L3RkPjx0ZD4gPC90ZD48 dGQgY2xhc3M9InJibG9jayI+ICAgbGFja3MgZW5jcnlwdGlvbiBhbmQgSE1BQyBhbGdvcml0aG0g YWdpbGl0eS4gIDxzcGFuIGNsYXNzPSJpbnNlcnQiPkhlbmNlIGEgU1RVTiBzZXJ2ZXIgYW5kPC9z cGFuPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAg ICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJs b2NrIj48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+PHNwYW4gY2xhc3M9Imluc2Vy dCI+ICAgYXV0aG9yaXphdGlvbiBzZXJ2ZXIgaW1wbGVtZW50YXRpb24gU0hPVUxEIHN1cHBvcnQg UkVTVCBleHBsYWluZWQgaW48L3NwYW4+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0 b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3Ai PjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2Nr Ij48c3BhbiBjbGFzcz0iaW5zZXJ0Ij4gICBTZWN0aW9uIDQuMS4xLjwvc3Bhbj48L3RkPjx0ZCBj bGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFz cz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPjwvdGQ+PHRkPiA8 L3RkPjx0ZCBjbGFzcz0icmlnaHQiPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9w Ij48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48 L3RkPjx0ZCBjbGFzcz0ibGVmdCI+NS4gIEZvcm1pbmcgYSBSZXF1ZXN0PC90ZD48dGQ+IDwvdGQ+ PHRkIGNsYXNzPSJyaWdodCI+NS4gIEZvcm1pbmcgYSBSZXF1ZXN0PC90ZD48dGQgY2xhc3M9Imxp bmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVu byIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij48L3RkPjx0ZD4gPC90ZD48dGQg Y2xhc3M9InJpZ2h0Ij48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48 L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQg Y2xhc3M9ImxlZnQiPiAgIFdoZW4gYSBTVFVOIHNlcnZlciByZXNwb25kcyB0aGF0IHRoaXJkIHBh cnR5IGF1dGhvcml6YXRpb24gaXM8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBX aGVuIGEgU1RVTiBzZXJ2ZXIgcmVzcG9uZHMgdGhhdCB0aGlyZCBwYXJ0eSBhdXRob3JpemF0aW9u IGlzPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAg IDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0 Ij4gICByZXF1aXJlZCwgYSBTVFVOIGNsaWVudCByZS1hdHRlbXB0cyB0aGUgcmVxdWVzdCwgdGhp cyB0aW1lIGluY2x1ZGluZzwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIHJlcXVp cmVkLCBhIFNUVU4gY2xpZW50IHJlLWF0dGVtcHRzIHRoZSByZXF1ZXN0LCB0aGlzIHRpbWUgaW5j bHVkaW5nPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAg ICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJs ZWZ0Ij4gICBhY2Nlc3MgdG9rZW4gYW5kIGtpZCB2YWx1ZXMgaW4gQUNDRVNTLVRPS0VOIGFuZCBV U0VSTkFNRSBTVFVOPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgYWNjZXNzIHRv a2VuIGFuZCBraWQgdmFsdWVzIGluIEFDQ0VTUy1UT0tFTiBhbmQgVVNFUk5BTUUgU1RVTjwvdGQ+ PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRk IGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgYXR0 cmlidXRlcy4gIFRoZSBTVFVOIGNsaWVudCBpbmNsdWRlcyBhIE1FU1NBR0UtSU5URUdSSVRZIGF0 dHJpYnV0ZTwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIGF0dHJpYnV0ZXMuICBU aGUgU1RVTiBjbGllbnQgaW5jbHVkZXMgYSBNRVNTQUdFLUlOVEVHUklUWSBhdHRyaWJ1dGU8L3Rk Pjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0 ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIGFz IHRoZSBsYXN0IGF0dHJpYnV0ZSBpbiB0aGUgbWVzc2FnZSBvdmVyIHRoZSBjb250ZW50cyBvZiB0 aGUgU1RVTjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIGFzIHRoZSBsYXN0IGF0 dHJpYnV0ZSBpbiB0aGUgbWVzc2FnZSBvdmVyIHRoZSBjb250ZW50cyBvZiB0aGUgU1RVTjwvdGQ+ PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRk IGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgbWVz c2FnZS4gIFRoZSBITUFDIGZvciB0aGUgTUVTU0FHRS1JTlRFR1JJVFkgYXR0cmlidXRlIGlzIGNv bXB1dGVkIGFzPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgbWVzc2FnZS4gIFRo ZSBITUFDIGZvciB0aGUgTUVTU0FHRS1JTlRFR1JJVFkgYXR0cmlidXRlIGlzIGNvbXB1dGVkIGFz PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0 cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4g ICBkZXNjcmliZWQgaW4gc2VjdGlvbiAxNS40IG9mIFtSRkM1Mzg5XSB3aGVyZSB0aGUgbWFjX2tl eSBpcyB1c2VkIGFzPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgZGVzY3JpYmVk IGluIHNlY3Rpb24gMTUuNCBvZiBbUkZDNTM4OV0gd2hlcmUgdGhlIG1hY19rZXkgaXMgdXNlZCBh czwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8 dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij48L3RkPjx0ZD4gPC90 ZD48dGQgY2xhc3M9InJpZ2h0Ij48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+DQog ICAgICA8dHIgYmdjb2xvcj0iZ3JheSI+PHRkPjwvdGQ+PHRoPjxhIG5hbWU9InBhcnQtbDYiPjxz bWFsbD5za2lwcGluZyB0byBjaGFuZ2UgYXQ8L3NtYWxsPjxlbT4gcGFnZSA4LCBsaW5lIDEwPC9l bT48L2E+PC90aD48dGg+IDwvdGg+PHRoPjxhIG5hbWU9InBhcnQtcjYiPjxzbWFsbD5za2lwcGlu ZyB0byBjaGFuZ2UgYXQ8L3NtYWxsPjxlbT4gcGFnZSA3LCBsaW5lIDM1PC9lbT48L2E+PC90aD48 dGQ+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+ PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIGlmIHBhdGggTVRVIGlzIHVua25vd24gdGhlbiBTVFVO IG1lc3NhZ2VzIG92ZXIgSVB2NCB3b3VsZCBuZWVkIHRvIGJlPC90ZD48dGQ+IDwvdGQ+PHRkIGNs YXNzPSJyaWdodCI+ICAgaWYgcGF0aCBNVFUgaXMgdW5rbm93biB0aGVuIFNUVU4gbWVzc2FnZXMg b3ZlciBJUHY0IHdvdWxkIG5lZWQgdG8gYmU8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249 InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRv cCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIGxlc3MgdGhhbiA1NDggYnl0ZXMgKFNlY3Rpb24g Ny4xIG9mIFtSRkM1Mzg5XSkuICBUaGUgYWNjZXNzIHRva2VuPC90ZD48dGQ+IDwvdGQ+PHRkIGNs YXNzPSJyaWdodCI+ICAgbGVzcyB0aGFuIDU0OCBieXRlcyAoU2VjdGlvbiA3LjEgb2YgW1JGQzUz ODldKS4gIFRoZSBhY2Nlc3MgdG9rZW48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRv cCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+ PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIGxlbmd0aCBuZWVkcyB0byBiZSByZXN0cmljdGVkIHRv IGZpdCB3aXRoaW4gdGhlIG1heGltdW0gU1RVTiBtZXNzYWdlPC90ZD48dGQ+IDwvdGQ+PHRkIGNs YXNzPSJyaWdodCI+ICAgbGVuZ3RoIG5lZWRzIHRvIGJlIHJlc3RyaWN0ZWQgdG8gZml0IHdpdGhp biB0aGUgbWF4aW11bSBTVFVOIG1lc3NhZ2U8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249 InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRv cCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIHNpemUuICBOb3RlIHRoYXQgdGhlIHNlbGYtY29u dGFpbmVkIHRva2VuIGlzIG9wYXF1ZSB0byB0aGUgY2xpZW50IGFuZDwvdGQ+PHRkPiA8L3RkPjx0 ZCBjbGFzcz0icmlnaHQiPiAgIHNpemUuICBOb3RlIHRoYXQgdGhlIHNlbGYtY29udGFpbmVkIHRv a2VuIGlzIG9wYXF1ZSB0byB0aGUgY2xpZW50IGFuZDwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZh bGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGln bj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgdGhlIGNsaWVudCBNVVNUIE5PVCBleGFt aW5lIHRoZSB0b2tlbi4gIFRoZSBBQ0NFU1MtVE9LRU4gYXR0cmlidXRlIGlzPC90ZD48dGQ+IDwv dGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgdGhlIGNsaWVudCBNVVNUIE5PVCBleGFtaW5lIHRoZSB0 b2tlbi4gIFRoZSBBQ0NFU1MtVE9LRU4gYXR0cmlidXRlIGlzPC90ZD48dGQgY2xhc3M9ImxpbmVu byIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIg dmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBhIGNvbXByZWhlbnNpb24tcmVx dWlyZWQgYXR0cmlidXRlIChzZWUgU2VjdGlvbiAxNSBmcm9tIFtSRkM1Mzg5XSkuPC90ZD48dGQ+ IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgYSBjb21wcmVoZW5zaW9uLXJlcXVpcmVkIGF0dHJp YnV0ZSAoc2VlIFNlY3Rpb24gMTUgZnJvbSBbUkZDNTM4OV0pLjwvdGQ+PHRkIGNsYXNzPSJsaW5l bm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8i IHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNs YXNzPSJyaWdodCI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90 cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNs YXNzPSJsZWZ0Ij4gICBUaGUgdG9rZW4gaXMgc3RydWN0dXJlZCBhcyBmb2xsb3dzOjwvdGQ+PHRk PiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIFRoZSB0b2tlbiBpcyBzdHJ1Y3R1cmVkIGFzIGZv bGxvd3M6PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAg ICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJs ZWZ0Ij48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij48L3RkPjx0ZCBjbGFzcz0ibGlu ZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5v IiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgICAgICAgIHN0cnVjdCB7PC90 ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgICAgICAgc3RydWN0IHs8L3RkPjx0ZCBj bGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZD48YSBu YW1lPSJkaWZmMDAxNSI+PC9hPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVu byIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPjwvdGQ+PHRkPiA8L3RkPjx0 ZCBjbGFzcz0icmJsb2NrIj4gICAgICAgICAgICAgPHNwYW4gY2xhc3M9Imluc2VydCI+dWludDhf dCBub25jZV9sZW5ndGg7PC9zcGFuPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9w Ij48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48 L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+ PHNwYW4gY2xhc3M9Imluc2VydCI+ICAgICAgICAgICAgIG9wYXF1ZSAgbm9uY2Vbbm9uY2VfbGVu Z3RoXTs8L3NwYW4+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90 cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNs YXNzPSJsZWZ0Ij4gICAgICAgICAgICAgb3BhcXVlIHs8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9 InJpZ2h0Ij4gICAgICAgICAgICAgb3BhcXVlIHs8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxp Z249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249 InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgICAgICAgICAgICAgICAgdWludDE2X3Qga2V5 X2xlbmd0aDs8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICAgICAgICAgICAgICAg IHVpbnQxNl90IGtleV9sZW5ndGg7PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3Ai PjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwv dGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICAgICAgICAgICAgICAgIG9wYXF1ZSBtYWNfa2V5W2tleV9s ZW5ndGhdOzwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgICAgICAgICAgICAgICAg b3BhcXVlIG1hY19rZXlba2V5X2xlbmd0aF07PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWdu PSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0 b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICAgICAgICAgICAgICAgIHVpbnQ2NF90IHRpbWVz dGFtcDs8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICAgICAgICAgICAgICAgIHVp bnQ2NF90IHRpbWVzdGFtcDs8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90 ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48 dGQgY2xhc3M9ImxlZnQiPiAgICAgICAgICAgICAgICAgdWludDMyX3QgbGlmZXRpbWU7PC90ZD48 dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgICAgICAgICAgICAgICB1aW50MzJfdCBsaWZl dGltZTs8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAg ICAgPHRyPjx0ZD48YSBuYW1lPSJkaWZmMDAxNiI+PC9hPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48 dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPiAg ICAgICAgICAgICAgICAgPHNwYW4gY2xhc3M9ImRlbGV0ZSI+dWludDhfdCAgcGFkZGluZ19sZW5n dGg7PC9zcGFuPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48L3RkPjx0ZCBjbGFz cz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0i bGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+PHNwYW4gY2xhc3M9 ImRlbGV0ZSI+ICAgICAgICAgICAgICAgICB1aW50OF90IHBhZGRpbmdbcGFkZGluZ19sZW5ndGhd Ozwvc3Bhbj48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+PC90ZD48dGQgY2xhc3M9 ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9Imxp bmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICAgICAgICAgICAgfSBl bmNyeXB0ZWRfYmxvY2s7PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgICAgICAg ICAgIH0gZW5jcnlwdGVkX2Jsb2NrOzwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9w Ij48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkPjxhIG5hbWU9ImRpZmYwMDE3Ij48L2E+PC90ZD48 L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQg Y2xhc3M9ImxibG9jayI+ICAgICAgICAgICAgIDxzcGFuIGNsYXNzPSJkZWxldGUiPm9wYXF1ZSBt YWNbbWFjX2xlbmd0aF07PC9zcGFuPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48 L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRy Pjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+ PHNwYW4gY2xhc3M9ImRlbGV0ZSI+ICAgICAgICAgICAgIHVpbnQ4X3QgbWFjX2xlbmd0aDs8L3Nw YW4+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPjwvdGQ+PHRkIGNsYXNzPSJsaW5l bm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8i IHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgICAgICAgfSB0b2tlbjs8L3Rk Pjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICAgICAgICB9IHRva2VuOzwvdGQ+PHRkIGNs YXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNz PSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+PC90ZD48dGQ+IDwv dGQ+PHRkIGNsYXNzPSJyaWdodCI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3Ai PjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwv dGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICAgICAgICAgICAgICAgICAgRmlndXJlIDE6IFNlbGYtY29u dGFpbmVkIHRva2VuIGZvcm1hdDwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgICAg ICAgICAgICAgICAgICBGaWd1cmUgMTogU2VsZi1jb250YWluZWQgdG9rZW4gZm9ybWF0PC90ZD48 dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQg Y2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij48L3RkPjx0 ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249 InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRv cCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIE5vdGU6IHVpbnROX3QgbWVhbnMgYW4gdW5zaWdu ZWQgaW50ZWdlciBvZiBleGFjdGx5IE4gYml0cy4gIFNpbmdsZS08L3RkPjx0ZD4gPC90ZD48dGQg Y2xhc3M9InJpZ2h0Ij4gICBOb3RlOiB1aW50Tl90IG1lYW5zIGFuIHVuc2lnbmVkIGludGVnZXIg b2YgZXhhY3RseSBOIGJpdHMuICBTaW5nbGUtPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWdu PSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0 b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBieXRlIGVudGl0aWVzIGNvbnRhaW5pbmcgdW5p bnRlcnByZXRlZCBkYXRhIGFyZSBvZiB0eXBlIG9wYXF1ZS4gIEFsbDwvdGQ+PHRkPiA8L3RkPjx0 ZCBjbGFzcz0icmlnaHQiPiAgIGJ5dGUgZW50aXRpZXMgY29udGFpbmluZyB1bmludGVycHJldGVk IGRhdGEgYXJlIG9mIHR5cGUgb3BhcXVlLiAgQWxsPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFs aWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWdu PSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICB2YWx1ZXMgaW4gdGhlIHRva2VuIGFyZSBz dG9yZWQgaW4gbmV0d29yayBieXRlIG9yZGVyLjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmln aHQiPiAgIHZhbHVlcyBpbiB0aGUgdG9rZW4gYXJlIHN0b3JlZCBpbiBuZXR3b3JrIGJ5dGUgb3Jk ZXIuPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAg IDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0 Ij48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij48L3RkPjx0ZCBjbGFzcz0ibGluZW5v IiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZD48YSBuYW1lPSJkaWZmMDAx OCI+PC9hPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0 b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJs b2NrIj4gICA8c3BhbiBjbGFzcz0iaW5zZXJ0Ij5UaGUgYXNzb2NpYXRlZCBkYXRhIChBKSBNVVNU IGJlIHRoZSBTVFVOIHNlcnZlciBuYW1lIChOKS4gIFRoaXM8L3NwYW4+PC90ZD48dGQgY2xhc3M9 ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9Imxp bmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPjwvdGQ+PHRkPiA8L3Rk Pjx0ZCBjbGFzcz0icmJsb2NrIj48c3BhbiBjbGFzcz0iaW5zZXJ0Ij4gICBlbnN1cmVzIHRoYXQg dGhlIGNsaWVudCBkb2VzIG5vdCB1c2UgdGhlIHNhbWUgdG9rZW4gdG8gZ2FpbiBpbGxlZ2FsPC9z cGFuPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAg ICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJs b2NrIj48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+PHNwYW4gY2xhc3M9Imluc2Vy dCI+ICAgYWNjZXNzIHRvIG90aGVyIFNUVU4gc2VydmVycyBwcm92aWRlZCBieSB0aGUgc2FtZSBh ZG1pbmlzdHJhdGl2ZTwvc3Bhbj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+ PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90 ZD48dGQgY2xhc3M9ImxibG9jayI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPjxz cGFuIGNsYXNzPSJpbnNlcnQiPiAgIGRvbWFpbiBpLmUuLCB3aGVuIG11bHRpcGxlIFNUVU4gc2Vy dmVycyBpbiBhIHNpbmdsZSBhZG1pbmlzdHJhdGl2ZTwvc3Bhbj48L3RkPjx0ZCBjbGFzcz0ibGlu ZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5v IiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+PC90ZD48dGQ+IDwvdGQ+PHRk IGNsYXNzPSJyYmxvY2siPjxzcGFuIGNsYXNzPSJpbnNlcnQiPiAgIGRvbWFpbiBzaGFyZSB0aGUg c2FtZSBzeW1tZXRyaWMga2V5IHdpdGggYW4gYXV0aG9yaXphdGlvbiBzZXJ2ZXIuPC9zcGFuPjwv dGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+ PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48 L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+ICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIDwvdGQ+PHRk IGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNs YXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgVGhlIGZp ZWxkcyBhcmUgZGVzY3JpYmVkIGJlbG93OjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQi PiAgIFRoZSBmaWVsZHMgYXJlIGRlc2NyaWJlZCBiZWxvdzo8L3RkPjx0ZCBjbGFzcz0ibGluZW5v IiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2 YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFz cz0icmlnaHQiPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+ DQogICAgICA8dHI+PHRkPjxhIG5hbWU9ImRpZmYwMDE5Ij48L2E+PC90ZD48L3RyPg0KICAgICAg PHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9j ayI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPiAgIDxzcGFuIGNsYXNzPSJpbnNl cnQiPm5vbmNlX2xlbmd0aDogIExlbmd0aCBvZiB0aGUgbm9uY2UgZmllbGQuICBUaGUgbGVuZ3Ro IG9mIG5vbmNlIGZvcjwvc3Bhbj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+ PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90 ZD48dGQgY2xhc3M9ImxibG9jayI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPjxz cGFuIGNsYXNzPSJpbnNlcnQiPiAgICAgIGF1dGhlbnRpY2F0ZWQgZW5jcnlwdGlvbiB3aXRoIGFk ZGl0aW9uYWwgZGF0YSAoQUVBRCkgYWxnb3JpdGhtcyBpczwvc3Bhbj48L3RkPjx0ZCBjbGFzcz0i bGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGlu ZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+PC90ZD48dGQ+IDwvdGQ+ PHRkIGNsYXNzPSJyYmxvY2siPjxzcGFuIGNsYXNzPSJpbnNlcnQiPiAgICAgIGV4cGxhaW5lZCBp biBbUkZDNTExNl0uPC9zcGFuPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48 L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3Rk Pjx0ZCBjbGFzcz0ibGJsb2NrIj48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+PHNw YW4gY2xhc3M9Imluc2VydCI+PC9zcGFuPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0i dG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9w Ij48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9j ayI+PHNwYW4gY2xhc3M9Imluc2VydCI+ICAgTm9uY2U6ICBOb25jZSBmb3JtYXRpb24gaXMgZXhw bGFpbmVkIGluIHNlY3Rpb24gMy4yIG9mIFtSRkM1MTE2XS48L3NwYW4+PC90ZD48dGQgY2xhc3M9 ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9Imxp bmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPjwvdGQ+PHRkPiA8L3Rk Pjx0ZCBjbGFzcz0icmJsb2NrIj4gICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgPC90ZD48dGQgY2xhc3M9ImxpbmVu byIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIg dmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBrZXlfbGVuZ3RoOiAgTGVuZ3Ro IG9mIHRoZSBzZXNzaW9uIGtleSBpbiBvY3RldHMuICBLZXkgbGVuZ3RoIG9mPC90ZD48dGQ+IDwv dGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAga2V5X2xlbmd0aDogIExlbmd0aCBvZiB0aGUgc2Vzc2lv biBrZXkgaW4gb2N0ZXRzLiAgS2V5IGxlbmd0aCBvZjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZh bGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGln bj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgICAgMTYwLWJpdHMgTVVTVCBiZSBzdXBw b3J0ZWQgKGkuZS4sIG9ubHkgMTYwLWJpdCBrZXkgaXMgdXNlZCBieTwvdGQ+PHRkPiA8L3RkPjx0 ZCBjbGFzcz0icmlnaHQiPiAgICAgIDE2MC1iaXRzIE1VU1QgYmUgc3VwcG9ydGVkIChpLmUuLCBv bmx5IDE2MC1iaXQga2V5IGlzIHVzZWQgYnk8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249 InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRv cCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgICAgIEhNQUMtU0hBLTEgZm9yIG1lc3NhZ2UgaW50 ZWdyaXR5IG9mIFNUVU4gbWVzc2FnZSkuICBUaGUga2V5IGxlbmd0aDwvdGQ+PHRkPiA8L3RkPjx0 ZCBjbGFzcz0icmlnaHQiPiAgICAgIEhNQUMtU0hBLTEgZm9yIG1lc3NhZ2UgaW50ZWdyaXR5IG9m IFNUVU4gbWVzc2FnZSkuICBUaGUga2V5IGxlbmd0aDwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZh bGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGln bj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgICAgZmFjaWxpdGF0ZXMgdGhlIGhhc2gg YWdpbGl0eSBwbGFuIGRpc2N1c3NlZCBpbiBzZWN0aW9uIDE2LjMgb2Y8L3RkPjx0ZD4gPC90ZD48 dGQgY2xhc3M9InJpZ2h0Ij4gICAgICBmYWNpbGl0YXRlcyB0aGUgaGFzaCBhZ2lsaXR5IHBsYW4g ZGlzY3Vzc2VkIGluIHNlY3Rpb24gMTYuMyBvZjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGln bj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0i dG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgICAgW1JGQzUzODldLjwvdGQ+PHRkPiA8L3Rk Pjx0ZCBjbGFzcz0icmlnaHQiPiAgICAgIFtSRkM1Mzg5XS48L3RkPjx0ZCBjbGFzcz0ibGluZW5v IiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2 YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFz cz0icmlnaHQiPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+ DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFz cz0ibGVmdCI+ICAgbWFjX2tleTogIFRoZSBzZXNzaW9uIGtleSBnZW5lcmF0ZWQgYnkgdGhlIGF1 dGhvcml6YXRpb24gc2VydmVyLjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIG1h Y19rZXk6ICBUaGUgc2Vzc2lvbiBrZXkgZ2VuZXJhdGVkIGJ5IHRoZSBhdXRob3JpemF0aW9uIHNl cnZlci48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAg ICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9Imxl ZnQiPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPjwvdGQ+PHRkIGNsYXNzPSJsaW5l bm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8i IHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgdGltZXN0YW1wOiAgNjQtYml0 IHVuc2lnbmVkIGludGVnZXIgZmllbGQgY29udGFpbmluZyBhIHRpbWVzdGFtcC48L3RkPjx0ZD4g PC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICB0aW1lc3RhbXA6ICA2NC1iaXQgdW5zaWduZWQgaW50 ZWdlciBmaWVsZCBjb250YWluaW5nIGEgdGltZXN0YW1wLjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8i IHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZh bGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgICAgVGhlIHZhbHVlIGluZGljYXRl cyB0aGUgdGltZSBzaW5jZSBKYW51YXJ5IDEsIDE5NzAsIDAwOjAwIFVUQywgYnk8L3RkPjx0ZD4g PC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICAgICBUaGUgdmFsdWUgaW5kaWNhdGVzIHRoZSB0aW1l IHNpbmNlIEphbnVhcnkgMSwgMTk3MCwgMDA6MDAgVVRDLCBieTwvdGQ+PHRkIGNsYXNzPSJsaW5l bm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8i PjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij48 L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+DQogICAgICA8dHIgYmdjb2xvcj0iZ3Jh eSI+PHRkPjwvdGQ+PHRoPjxhIG5hbWU9InBhcnQtbDciPjxzbWFsbD5za2lwcGluZyB0byBjaGFu Z2UgYXQ8L3NtYWxsPjxlbT4gcGFnZSA5LCBsaW5lIDU8L2VtPjwvYT48L3RoPjx0aD4gPC90aD48 dGg+PGEgbmFtZT0icGFydC1yNyI+PHNtYWxsPnNraXBwaW5nIHRvIGNoYW5nZSBhdDwvc21hbGw+ PGVtPiBwYWdlIDgsIGxpbmUgMzg8L2VtPjwvYT48L3RoPjx0ZD48L3RkPjwvdHI+DQogICAgICA8 dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ ICAgICAgcmVtYWluaW5nIDE2IGJpdHMgaW5kaWNhdGUgdGhlIG51bWJlciBvZiAxLzY0SyBmcmFj dGlvbnMgb2YgYTwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgICAgIHJlbWFpbmlu ZyAxNiBiaXRzIGluZGljYXRlIHRoZSBudW1iZXIgb2YgMS82NEsgZnJhY3Rpb25zIG9mIGE8L3Rk Pjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0 ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgICAg IHNlY29uZCAoTmF0aXZlIGZvcm1hdCAtIFVuaXgpLjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0i cmlnaHQiPiAgICAgIHNlY29uZCAoTmF0aXZlIGZvcm1hdCAtIFVuaXgpLjwvdGQ+PHRkIGNsYXNz PSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJs aW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+PC90ZD48dGQ+IDwvdGQ+ PHRkIGNsYXNzPSJyaWdodCI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwv dGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+ PHRkIGNsYXNzPSJsZWZ0Ij4gICBsaWZldGltZTogIFRoZSBsaWZldGltZSBvZiB0aGUgYWNjZXNz IHRva2VuLCBpbiBzZWNvbmRzLiAgRm9yPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ ICAgbGlmZXRpbWU6ICBUaGUgbGlmZXRpbWUgb2YgdGhlIGFjY2VzcyB0b2tlbiwgaW4gc2Vjb25k cy4gIEZvcjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQog ICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0i bGVmdCI+ICAgICAgZXhhbXBsZSwgdGhlIHZhbHVlIDM2MDAgaW5kaWNhdGVzIG9uZSBob3VyLiAg VGhlIGxpZmV0aW1lIHZhbHVlPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgICAg ZXhhbXBsZSwgdGhlIHZhbHVlIDM2MDAgaW5kaWNhdGVzIG9uZSBob3VyLiAgVGhlIGxpZmV0aW1l IHZhbHVlPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAg ICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJs ZWZ0Ij4gICAgICBNVVNUIGJlIGdyZWF0ZXIgdGhhbiBvciBlcXVhbCB0byB0aGUgImV4cGlyZXNf aW4iIHBhcmFtZXRlcjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgICAgIE1VU1Qg YmUgZ3JlYXRlciB0aGFuIG9yIGVxdWFsIHRvIHRoZSAiZXhwaXJlc19pbiIgcGFyYW1ldGVyPC90 ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48 dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICAg ICBkZWZpbmVkIGluIHNlY3Rpb24gNC4yLjIgb2YgW1JGQzY3NDldLCBvdGhlcndpc2UgcmVzb3Vy Y2Ugc2VydmVyPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgICAgZGVmaW5lZCBp biBzZWN0aW9uIDQuMi4yIG9mIFtSRkM2NzQ5XSwgb3RoZXJ3aXNlIHJlc291cmNlIHNlcnZlcjwv dGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+ PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAg ICAgY291bGQgcmV2b2tlIHRoZSB0b2tlbiBidXQgdGhlIGNsaWVudCB3b3VsZCBhc3N1bWUgdGhh dCB0aGUgdG9rZW48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICAgICBjb3VsZCBy ZXZva2UgdGhlIHRva2VuIGJ1dCB0aGUgY2xpZW50IHdvdWxkIGFzc3VtZSB0aGF0IHRoZSB0b2tl bjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8 dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ ICAgICAgaGFzIG5vdCBleHBpcmVkIGFuZCB3b3VsZCBub3QgcmVmcmVzaCB0aGUgdG9rZW4uPC90 ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgICAgaGFzIG5vdCBleHBpcmVkIGFuZCB3 b3VsZCBub3QgcmVmcmVzaCB0aGUgdG9rZW4uPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWdu PSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0 b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0 Ij48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAg PHRyPjx0ZD48YSBuYW1lPSJkaWZmMDAyMCI+PC9hPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQg Y2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPiAgIDxz cGFuIGNsYXNzPSJkZWxldGUiPnBhZGRpbmdfbGVuZ3RoOjwvc3Bhbj4gIFRoZSA8c3BhbiBjbGFz cz0iZGVsZXRlIj5wYWRkaW5nIGxlbmd0aCBNVVNUIGJlIHN1Y2ggdGhhdCB0aGUgdG90YWwgc2l6 ZTwvc3Bhbj48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+ICAgPHNwYW4gY2xhc3M9 Imluc2VydCI+ZW5jcnlwdGVkX2Jsb2NrOjwvc3Bhbj4gIFRoZSBlbmNyeXB0ZWRfYmxvY2sgaXMg PHNwYW4gY2xhc3M9Imluc2VydCI+ZW5jcnlwdGVkIGFuZCBhdXRoZW50aWNhdGVkPC9zcGFuPjwv dGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+ PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48 c3BhbiBjbGFzcz0iZGVsZXRlIj4gICAgICBvZiB0aGU8L3NwYW4+IGVuY3J5cHRlZF9ibG9jayA8 c3BhbiBjbGFzcz0iZGVsZXRlIj5zdHJ1Y3R1cmUgaXMgYSBtdWx0aXBsZSBvZiB0aGUgY2lwaGVy J3M8L3NwYW4+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPjxzcGFuIGNsYXNzPSJp bnNlcnQiPiAgICAgIHVzaW5nIHRoZSBzeW1tZXRyaWMgbG9uZy10ZXJtIGtleSBlc3RhYmxpc2hl ZCBiZXR3ZWVuIHRoZSBTVFVOPC9zcGFuPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0i dG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9w Ij48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48c3BhbiBjbGFzcz0iZGVsZXRlIj4gICAgICBibG9j ayBsZW5ndGguPC9zcGFuPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48c3BhbiBj bGFzcz0iaW5zZXJ0Ij4gICAgICBzZXJ2ZXIgYW5kPC9zcGFuPiB0aGUgPHNwYW4gY2xhc3M9Imlu c2VydCI+YXV0aG9yaXphdGlvbiBzZXJ2ZXIuPC9zcGFuPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8i IHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZh bGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48c3BhbiBjbGFzcz0iZGVsZXRlIj48 L3NwYW4+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPjwvdGQ+PHRkIGNsYXNzPSJs aW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5l bm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48c3BhbiBjbGFzcz0iZGVs ZXRlIj4gICBwYWRkaW5nOiAgUGFkZGluZyB0aGF0PC9zcGFuPiBpcyA8c3BhbiBjbGFzcz0iZGVs ZXRlIj5hZGRlZCB0byBmb3JjZSB0aGUgbGVuZ3RoIG9mIHRoZSBwbGFpbnRleHQ8L3NwYW4+PC90 ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZh bGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGln bj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48c3BhbiBjbGFzcz0iZGVsZXRlIj4gICAg ICB0byBiZSBhbiBpbnRlZ3JhbCBtdWx0aXBsZSBvZjwvc3Bhbj4gdGhlIDxzcGFuIGNsYXNzPSJk ZWxldGUiPmJsb2NrIGNpcGhlcidzIGJsb2NrIGxlbmd0aC48L3NwYW4+PC90ZD48dGQ+IDwvdGQ+ PHRkIGNsYXNzPSJyYmxvY2siPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48 L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3Rk Pjx0ZCBjbGFzcz0ibGVmdCI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+PC90ZD48 dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQ+ PGEgbmFtZT0iZGlmZjAwMjEiPjwvYT48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJs aW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj4gICA8c3BhbiBjbGFz cz0iZGVsZXRlIj5lbmNyeXB0ZWRfYmxvY2s6PC9zcGFuPiAgVGhlIDxzcGFuIGNsYXNzPSJkZWxl dGUiPmVuY3J5cHRlZF9ibG9jazwvc3Bhbj4gaXMgPHNwYW4gY2xhc3M9ImRlbGV0ZSI+ZW5jcnlw dGVkIHVzaW5nPC9zcGFuPiB0aGU8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+ICAg VGhlIDxzcGFuIGNsYXNzPSJpbnNlcnQiPmF1dGhlbnRpY2F0ZWQgZW5jcnlwdGlvbiBvcGVyYXRp b24gaGFzIGZvdXIgaW5wdXRzOiBLLCBOLCBBLCBhbmQ8L3NwYW4+PC90ZD48dGQgY2xhc3M9Imxp bmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVu byIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPiAgICAgIDxzcGFuIGNsYXNz PSJkZWxldGUiPnN5bW1ldHJpYyBsb25nLXRlcm0ga2V5IGVzdGFibGlzaGVkIGJldHdlZW48L3Nw YW4+IHRoZSBTVFVOIHNlcnZlciA8c3BhbiBjbGFzcz0iZGVsZXRlIj5hbmQ8L3NwYW4+PC90ZD48 dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPjxzcGFuIGNsYXNzPSJpbnNlcnQiPiAgIFAgKGVu Y3J5cHRlZF9ibG9jayksIGFzIGRlZmluZWQgaW4gc2VjdGlvbiAyLjEgb2YgW1JGQzUxMTZdIGFu ZCB0aGVyZTwvc3Bhbj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48 L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQg Y2xhc3M9ImxibG9jayI+PHNwYW4gY2xhc3M9ImRlbGV0ZSI+ICAgICAgdGhlIGF1dGhvcml6YXRp b24gc2VydmVyLiAgU2hvd24gaW4gRmlndXJlIDMgYXMgQVMtUlMga2V5Ljwvc3Bhbj48L3RkPjx0 ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+ICAgaXMgPHNwYW4gY2xhc3M9Imluc2VydCI+YSBz aW5nbGUgb3V0cHV0IGEgY2lwaGVydGV4dCBDIG9yIGFuIGluZGljYXRpb24gdGhhdCB0aGUgcmVx dWVzdGVkPC9zcGFuPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwv dHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBj bGFzcz0ibGJsb2NrIj48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+PHNwYW4gY2xh c3M9Imluc2VydCI+ICAgZW5jcnlwdGlvbiBvcGVyYXRpb24gY291bGQgbm90IGJlIHBlcmZvcm1l ZC4gIEVuY3J5cHRpb24gcHJvY2VzcyB3aXRoPC9zcGFuPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8i IHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZh bGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48L3RkPjx0ZD4gPC90ZD48dGQgY2xh c3M9InJibG9jayI+PHNwYW4gY2xhc3M9Imluc2VydCI+ICAgQUVTX0NCQ19ITUFDX1NIQTIgKGV4 cGxhaW5lZCBpbiBzZWN0aW9uIDIuMSBvZjwvc3Bhbj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2 YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxp Z249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNz PSJyYmxvY2siPjxzcGFuIGNsYXNzPSJpbnNlcnQiPiAgIFtJLUQubWNncmV3LWFlYWQtYWVzLWNi Yy1obWFjLXNoYTJdKSBpcyBpbGx1c3RyYXRlZCBiZWxvdy4gIFRoZTwvc3Bhbj48L3RkPjx0ZCBj bGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFz cz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+PC90ZD48dGQ+ IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPjxzcGFuIGNsYXNzPSJpbnNlcnQiPiAgIGNpcGhlcnRl eHQgY29uc2lzdHMgb2Y8L3NwYW4+IHRoZSA8c3BhbiBjbGFzcz0iaW5zZXJ0Ij5zdHJpbmcgUywg d2l0aDwvc3Bhbj4gdGhlIDxzcGFuIGNsYXNzPSJpbnNlcnQiPnN0cmluZyBUIGFwcGVuZGVkIHRv PC9zcGFuPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQog ICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0i bGJsb2NrIj48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+PHNwYW4gY2xhc3M9Imlu c2VydCI+ICAgaXQuICBIZXJlIEMgYW5kIE4gZGVub3RlIENpcGhlcnRleHQgYW5kPC9zcGFuPiBT VFVOIHNlcnZlciA8c3BhbiBjbGFzcz0iaW5zZXJ0Ij5uYW1lPC9zcGFuPjwvdGQ+PHRkIGNsYXNz PSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJs aW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48L3RkPjx0ZD4gPC90 ZD48dGQgY2xhc3M9InJibG9jayI+PHNwYW4gY2xhc3M9Imluc2VydCI+ICAgcmVzcGVjdGl2ZWx5 LiAgVGhlIG9jdGV0IHN0cmluZyBBTCAoc2VjdGlvbiAyLjEgb2Y8L3NwYW4+PC90ZD48dGQgY2xh c3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9 ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij48L3RkPjx0ZD4gPC90 ZD48dGQgY2xhc3M9InJpZ2h0Ij48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+ PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZD48YSBuYW1lPSJkaWZmMDAyMiI+PC9hPjwvdGQ+PC90 cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNs YXNzPSJsYmxvY2siPiAgIDxzcGFuIGNsYXNzPSJkZWxldGUiPm1hYzogIFRoZSBIYXNoZWQgTWVz c2FnZSBBdXRoZW50aWNhdGlvbiBDb2RlIChITUFDKTwvc3Bhbj4gaXMgPHNwYW4gY2xhc3M9ImRl bGV0ZSI+Y2FsY3VsYXRlZDwvc3Bhbj48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+ ICAgPHNwYW4gY2xhc3M9Imluc2VydCI+W0ktRC5tY2dyZXctYWVhZC1hZXMtY2JjLWhtYWMtc2hh Ml0pPC9zcGFuPiBpcyA8c3BhbiBjbGFzcz0iaW5zZXJ0Ij5lcXVhbDwvc3Bhbj4gdG8gdGhlIDxz cGFuIGNsYXNzPSJpbnNlcnQiPm51bWJlciBvZiBiaXRzPC9zcGFuPjwvdGQ+PHRkIGNsYXNzPSJs aW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5l bm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48c3BhbiBjbGFzcz0iZGVs ZXRlIj4gICAgICB3aXRoIHRoZSBBVVRIIGtleSBvdmVyIHRoZSAnZW5jcnlwdGVkX2Jsb2NrJyBh bmQgdGhlIFNUVU4gc2VydmVyPC9zcGFuPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2Nr Ij4gICBpbiA8c3BhbiBjbGFzcz0iaW5zZXJ0Ij5BIGV4cHJlc3NlZCBhczwvc3Bhbj4gYSA8c3Bh biBjbGFzcz0iaW5zZXJ0Ij42NC1iaXQgdW5zaWduZWQgYmlnIGVuZGlhbiBpbnRlZ2VyLjwvc3Bh bj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAg PHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9j ayI+PHNwYW4gY2xhc3M9ImRlbGV0ZSI+ICAgICAgbmFtZSAoTikgY29udmV5ZWQgaW4gdGhlIFRI SVJELVBBUlRZLUFVVEhPUklaQVRJT04gcmVzcG9uc2UuICBUaGlzPC9zcGFuPjwvdGQ+PHRkPiA8 L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRv cCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+ PC90ZD48dGQgY2xhc3M9ImxibG9jayI+PHNwYW4gY2xhc3M9ImRlbGV0ZSI+ICAgICAgZW5zdXJl cyB0aGF0IHRoZSBjbGllbnQgZG9lcyBub3QgdXNlIHRoZSBzYW1lIHRva2VuPC9zcGFuPiB0byA8 c3BhbiBjbGFzcz0iZGVsZXRlIj5nYWluPC9zcGFuPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0i cmJsb2NrIj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0K ICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9 ImxibG9jayI+PHNwYW4gY2xhc3M9ImRlbGV0ZSI+ICAgICAgaWxsZWdhbCBhY2Nlc3MgdG8gb3Ro ZXIgU1RVTiBzZXJ2ZXJzIHByb3ZpZGVkIGJ5PC9zcGFuPiB0aGUgPHNwYW4gY2xhc3M9ImRlbGV0 ZSI+c2FtZTwvc3Bhbj48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+PC90ZD48dGQg Y2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xh c3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPjxzcGFuIGNs YXNzPSJkZWxldGUiPiAgICAgIGFkbWluaXN0cmF0aXZlIGRvbWFpbiBpLmUuLCB3aGVuIG11bHRp cGxlIFNUVU4gc2VydmVyczwvc3Bhbj4gaW4gYSA8c3BhbiBjbGFzcz0iZGVsZXRlIj5zaW5nbGU8 L3NwYW4+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPjwvdGQ+PHRkIGNsYXNzPSJs aW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5l bm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48c3BhbiBjbGFzcz0iZGVs ZXRlIj4gICAgICBhZG1pbmlzdHJhdGl2ZSBkb21haW4gc2hhcmUgdGhlIHNhbWUgc3ltbWV0cmlj IGtleSB3aXRoIGFuPC9zcGFuPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48L3Rk Pjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0 ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+PHNw YW4gY2xhc3M9ImRlbGV0ZSI+ICAgICAgYXV0aG9yaXphdGlvbiBzZXJ2ZXIuPC9zcGFuPjwvdGQ+ PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxp Z249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249 InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmln aHQiPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAg ICA8dHI+PHRkPjxhIG5hbWU9ImRpZmYwMDIzIj48L2E+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0 ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+ICAg PHNwYW4gY2xhc3M9ImRlbGV0ZSI+bWFjX2xlbmd0aDogIExlbmd0aCBvZiB0aGUgbWFjIGZpZWxk Ljwvc3Bhbj48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+ICAgPHNwYW4gY2xhc3M9 Imluc2VydCI+byAgQVVUSCA9IGluaXRpYWwgYXV0aGVudGljYXRpb24ga2V5IGxlbmd0aCBvY3Rl dHMgb2YgSyw8L3NwYW4+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+ PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRk IGNsYXNzPSJsZWZ0Ij48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij48L3RkPjx0ZCBj bGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZD48YSBu YW1lPSJkaWZmMDAyNCI+PC9hPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVu byIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPiAgIDxzcGFuIGNsYXNzPSJk ZWxldGUiPkFuIGV4YW1wbGU8L3NwYW4+IGVuY3J5cHRpb24gPHNwYW4gY2xhc3M9ImRlbGV0ZSI+ cHJvY2VzcyBpcyBpbGx1c3RyYXRlZCBiZWxvdy4gIEhlcmUgQywgTiBkZW5vdGU8L3NwYW4+PC90 ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPiAgIDxzcGFuIGNsYXNzPSJpbnNlcnQiPm8g IEFTLVJTID0gZmluYWw8L3NwYW4+IGVuY3J5cHRpb24gPHNwYW4gY2xhc3M9Imluc2VydCI+a2V5 IGxlbmd0aCBvY3RldHMgb2YgSyw8L3NwYW4+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWdu PSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0 b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPjxzcGFuIGNsYXNzPSJkZWxldGUiPiAgIENpcGhl cnRleHQgYW5kIFNUVU4gc2VydmVyIG5hbWUgcmVzcGVjdGl2ZWx5Ljwvc3Bhbj48L3RkPjx0ZD4g PC90ZD48dGQgY2xhc3M9InJibG9jayI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0 b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3Ai PjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij48 L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRy Pjx0ZD48YSBuYW1lPSJkaWZmMDAyNSI+PC9hPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xh c3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPiAgIG8gIDxz cGFuIGNsYXNzPSJkZWxldGUiPkMgPSBBRVNfMjU2X0NCQyhBUy1SUywgZW5jcnlwdGVkX2Jsb2Nr KTwvc3Bhbj48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+ICAgbyAgPHNwYW4gY2xh c3M9Imluc2VydCI+UyA9IENCQy1QS0NTNS1FTkMoQVMtUlMsIGVuY3J5cHRlZF9ibG9jayksPC9z cGFuPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAg ICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVm dCI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+PC90ZD48dGQgY2xhc3M9ImxpbmVu byIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQ+PGEgbmFtZT0iZGlmZjAw MjYiPjwvYT48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0i dG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj4gICAgICAqICBJbml0aWFsaXphdGlvbiB2ZWN0 b3IgPHNwYW4gY2xhc3M9ImRlbGV0ZSI+Y2FuIGJlPC9zcGFuPiBzZXQgdG8gemVybyBiZWNhdXNl IHRoZTwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj4gICAgICAqICBJbml0aWFsaXph dGlvbiB2ZWN0b3IgPHNwYW4gY2xhc3M9Imluc2VydCI+aXM8L3NwYW4+IHNldCB0byB6ZXJvIGJl Y2F1c2UgdGhlPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4N CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNz PSJsZWZ0Ij4gICAgICAgICBlbmNyeXB0ZWRfYmxvY2sgaW4gZWFjaCBhY2Nlc3MgdG9rZW4gd2ls bCBub3QgYmUgaWRlbnRpY2FsIGFuZDwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAg ICAgICAgIGVuY3J5cHRlZF9ibG9jayBpbiBlYWNoIGFjY2VzcyB0b2tlbiB3aWxsIG5vdCBiZSBp ZGVudGljYWwgYW5kPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90 cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNs YXNzPSJsZWZ0Ij4gICAgICAgICBoZW5jZSB3aWxsIG5vdCByZXN1bHQgaW4gZ2VuZXJhdGlvbiBv ZiBpZGVudGljYWwgY2lwaGVydGV4dC48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4g ICAgICAgICBoZW5jZSB3aWxsIG5vdCByZXN1bHQgaW4gZ2VuZXJhdGlvbiBvZiBpZGVudGljYWwg Y2lwaGVydGV4dC48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3Ry Pg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xh c3M9ImxlZnQiPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPjwvdGQ+PHRkIGNsYXNz PSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkPjxhIG5hbWU9 ImRpZmYwMDI3Ij48L2E+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2 YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+ICAgbyAgbWFjID0gPHNwYW4gY2xh c3M9ImRlbGV0ZSI+SE1BQy1TSEEtMjU2LTEyOChBVVRILCBDIHwgfCBOKTwvc3Bhbj48L3RkPjx0 ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+ICAgbyAgbWFjID0gPHNwYW4gY2xhc3M9Imluc2Vy dCI+TUFDKEFVVEgsIE4gfHwgbm9uY2UgfHwgQyB8fCBBTCksPC9zcGFuPjwvdGQ+PHRkIGNsYXNz PSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJs aW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+PC90ZD48dGQ+IDwvdGQ+ PHRkIGNsYXNzPSJyaWdodCI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwv dGQ+PC90cj4NCiAgICAgIDx0cj48dGQ+PGEgbmFtZT0iZGlmZjAwMjgiPjwvYT48L3RkPjwvdHI+ DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFz cz0ibGJsb2NrIj4gICA8c3BhbiBjbGFzcz0iZGVsZXRlIj5FbmNyeXB0aW9uIGlzIGFwcGxpZWQg YmVmb3JlIG1lc3NhZ2UgYXV0aGVudGljYXRpb24gb24gdGhlIHNlbmRlcjwvc3Bhbj48L3RkPjx0 ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+ICAgPHNwYW4gY2xhc3M9Imluc2VydCI+byAgVCA9 IGluaXRpYWwgVF9MRU4gb2N0ZXRzIG9mIG1hYyw8L3NwYW4+PC90ZD48dGQgY2xhc3M9ImxpbmVu byIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIg dmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPjxzcGFuIGNsYXNzPSJkZWxldGUi PiAgIHNpZGUgYW5kIGNvbnZlcnNlbHkgb24gdGhlIHJlY2VpdmVyIHNpZGUuPC9zcGFuPiAgVGhl IGVudGlyZSB0b2tlbiBpLmUuLCB0aGU8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+ PHNwYW4gY2xhc3M9Imluc2VydCI+PC9zcGFuPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGln bj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0i dG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj4gICAnZW5jcnlwdGVkX2Jsb2NrJyA8c3BhbiBj bGFzcz0iZGVsZXRlIj5hbmQgJ21hYyc8L3NwYW4+IGlzIGJhc2U2NCBlbmNvZGVkIChzZWUgc2Vj dGlvbiA0IG9mPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPjxzcGFuIGNsYXNzPSJp bnNlcnQiPiAgIG8gIEMgPSBTIHx8IFQuPC9zcGFuPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZh bGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGln bj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj4gICBbUkZDNDY0OF0pIGFuZCB0aGUgcmVz dWx0aW5nIGFjY2VzcyB0b2tlbiBpcyBzaWduYWxlZCB0byB0aGUgY2xpZW50LjwvdGQ+PHRkPiA8 L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj4gICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgPC90ZD48dGQgY2xhc3M9Imxp bmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVu byIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPiAgIDxzcGFuIGNsYXNzPSJk ZWxldGUiPklmIEFFQUQgYWxnb3JpdGhtIGlzIHVzZWQgdGhlbiB0aGVyZSBpcyBubyBuZWVkIHRv IGV4cGxpY2l0bHkgY29tcHV0ZTwvc3Bhbj48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9j ayI+ICAgVGhlIGVudGlyZSB0b2tlbiBpLmUuLCB0aGUgJ2VuY3J5cHRlZF9ibG9jaycgaXMgYmFz ZTY0IGVuY29kZWQgKHNlZTwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3Rk PjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0 ZCBjbGFzcz0ibGJsb2NrIj48c3BhbiBjbGFzcz0iZGVsZXRlIj4gICBITUFDLCB0aGUgYXNzb2Np YXRlZCBkYXRhIE1VU1QgYmUgdGhlIFNUVU4gc2VydmVyIG5hbWUgKE4pIGFuZCB0aGU8L3NwYW4+ PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPiAgIHNlY3Rpb24gNCBvZiBbUkZDNDY0 OF0pIGFuZCB0aGUgcmVzdWx0aW5nIGFjY2VzcyB0b2tlbiBpcyBzaWduYWxlZCB0bzwvdGQ+PHRk IGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNs YXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48c3BhbiBj bGFzcz0iZGVsZXRlIj4gICBtYWMgZmllbGQgTVVTVCBjYXJyeSB0aGUgbm9uY2UuICBUaGUgbGVu Z3RoIG9mIG5vbmNlIGZvciBBRUFEPC9zcGFuPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJs b2NrIj4gICB0aGUgY2xpZW50LjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48 L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3Rk Pjx0ZCBjbGFzcz0ibGJsb2NrIj48c3BhbiBjbGFzcz0iZGVsZXRlIj4gICBhbGdvcml0aG1zIGlz IGV4cGxhaW5lZCBpbiBbUkZDNTExNl0uPC9zcGFuPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0i cmJsb2NrIj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0K ICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9 ImxlZnQiPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPjwvdGQ+PHRkIGNsYXNzPSJs aW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5l bm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+Ny4gIFNUVU4gU2VydmVyIEJl aGF2aW91cjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPjcuICBTVFVOIFNlcnZlciBC ZWhhdmlvdXI8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0K ICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9 ImxlZnQiPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPjwvdGQ+PHRkIGNsYXNzPSJs aW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5l bm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgVGhlIFNUVU4gc2VydmVy LCBvbiByZWNlaXZpbmcgYSByZXF1ZXN0IHdpdGggQUNDRVNTLVRPS0VOIGF0dHJpYnV0ZSw8L3Rk Pjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBUaGUgU1RVTiBzZXJ2ZXIsIG9uIHJlY2Vp dmluZyBhIHJlcXVlc3Qgd2l0aCBBQ0NFU1MtVE9LRU4gYXR0cmlidXRlLDwvdGQ+PHRkIGNsYXNz PSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJs aW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgcGVyZm9ybXMgY2hl Y2tzIGxpc3RlZCBpbiBzZWN0aW9uIDEwLjIuMiBvZiBbUkZDNTM4OV0gaW4gYWRkaXRpb24gdG88 L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBwZXJmb3JtcyBjaGVja3MgbGlzdGVk IGluIHNlY3Rpb24gMTAuMi4yIG9mIFtSRkM1Mzg5XSBpbiBhZGRpdGlvbiB0bzwvdGQ+PHRkIGNs YXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNz PSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgdGhlIGZvbGxv d2luZyBzdGVwcyB0byB2ZXJpZnkgdGhhdCB0aGUgYWNjZXNzIHRva2VuIGlzIHZhbGlkOjwvdGQ+ PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIHRoZSBmb2xsb3dpbmcgc3RlcHMgdG8gdmVy aWZ5IHRoYXQgdGhlIGFjY2VzcyB0b2tlbiBpcyB2YWxpZDo8L3RkPjx0ZCBjbGFzcz0ibGluZW5v IiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2 YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFz cz0icmlnaHQiPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+ DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFz cz0ibGVmdCI+ICAgbyAgU1RVTiBzZXJ2ZXIgc2VsZWN0cyB0aGUga2V5aW5nIG1hdGVyaWFsIGJh c2VkIG9uIGtpZCBzaWduYWxsZWQgaW48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4g ICBvICBTVFVOIHNlcnZlciBzZWxlY3RzIHRoZSBrZXlpbmcgbWF0ZXJpYWwgYmFzZWQgb24ga2lk IHNpZ25hbGxlZCBpbjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwv dHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBj bGFzcz0ibGVmdCI+ICAgICAgdGhlIFVTRVJOQU1FIGF0dHJpYnV0ZS48L3RkPjx0ZD4gPC90ZD48 dGQgY2xhc3M9InJpZ2h0Ij4gICAgICB0aGUgVVNFUk5BTUUgYXR0cmlidXRlLjwvdGQ+PHRkIGNs YXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNz PSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+PC90ZD48dGQ+IDwv dGQ+PHRkIGNsYXNzPSJyaWdodCI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3Ai PjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQ+PGEgbmFtZT0iZGlmZjAwMjkiPjwvYT48L3RkPjwv dHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBj bGFzcz0ibGJsb2NrIj4gICBvICBJdCBwZXJmb3JtcyB0aGUgdmVyaWZpY2F0aW9uIG9mIHRoZSB0 b2tlbiBtZXNzYWdlIGludGVncml0eSBieTwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2Nr Ij4gICBvICA8c3BhbiBjbGFzcz0iaW5zZXJ0Ij5UaGUgYXV0aGVudGljYXRlZCBkZWNyeXB0aW9u IG9wZXJhdGlvbiBoYXMgZm91ciBpbnB1dHM6IEssIE4sIEEsPC9zcGFuPjwvdGQ+PHRkIGNsYXNz PSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJs aW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj4gICAgICBjYWxjdWxh dGluZyBITUFDIG92ZXIgdGhlIGVuY3J5cHRlZCBwb3J0aW9uIGluIHRoZSA8c3BhbiBjbGFzcz0i ZGVsZXRlIj5zZWxmLWNvbnRhaW5lZDwvc3Bhbj48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJi bG9jayI+PHNwYW4gY2xhc3M9Imluc2VydCI+ICAgICAgYW5kIEMsIGFzIGRlZmluZWQgaW4gc2Vj dGlvbiAyLjIgb2YgW1JGQzUxMTZdLiAgQUVBRCBkZWNyeXB0aW9uPC9zcGFuPjwvdGQ+PHRkIGNs YXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNz PSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj4gICAgICB0b2tl biBhbmQgPHNwYW4gY2xhc3M9ImRlbGV0ZSI+U1RVTiBzZXJ2ZXIgbmFtZTwvc3Bhbj4gdXNpbmcg QVVUSCBrZXkgYW5kIGlmIHRoZSByZXN1bHRpbmc8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJi bG9jayI+PHNwYW4gY2xhc3M9Imluc2VydCI+ICAgICAgYWxnb3JpdGhtIGhhcyBvbmx5IGEgc2lu Z2xlIG91dHB1dCwgZWl0aGVyIGEgcGxhaW50ZXh0IG9yIGE8L3NwYW4+PC90ZD48dGQgY2xhc3M9 ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9Imxp bmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPjwvdGQ+PHRkPiA8L3Rk Pjx0ZCBjbGFzcz0icmJsb2NrIj48c3BhbiBjbGFzcz0iaW5zZXJ0Ij4gICAgICBzcGVjaWFsIHN5 bWJvbCBGQUlMIHRoYXQgaW5kaWNhdGVzIHRoYXQgdGhlIGlucHV0cyBhcmUgbm90PC9zcGFuPjwv dGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+ PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48 L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+PHNwYW4gY2xhc3M9Imluc2VydCI+ICAg ICAgYXV0aGVudGljLiAgSWYgYXV0aGVudGljYXRlZCBkZWNyeXB0IG9wZXJhdGlvbiByZXR1cm5z IEZBSUwgdGhlbjwvc3Bhbj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90 ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48 dGQgY2xhc3M9ImxibG9jayI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPjxzcGFu IGNsYXNzPSJpbnNlcnQiPiAgICAgIHRoZSBTVFVOIHNlcnZlciByZWplY3RzIHRoZSByZXF1ZXN0 IHdpdGggYW4gZXJyb3IgcmVzcG9uc2UgNDAxPC9zcGFuPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8i IHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZh bGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48L3RkPjx0ZD4gPC90ZD48dGQgY2xh c3M9InJibG9jayI+PHNwYW4gY2xhc3M9Imluc2VydCI+ICAgICAgKFVuYXV0aG9yaXplZCkuICBJ ZiBBRVNfQ0JDX0hNQUNfU0hBMiBpcyB1c2VkIHRoZW4gdGhlIGZpbmFsIFRfTEVOPC9zcGFuPjwv dGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+ PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48 L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+PHNwYW4gY2xhc3M9Imluc2VydCI+ICAg ICAgb2N0ZXRzIGFyZSBzdHJpcHBlZCBmcm9tIEMuPC9zcGFuPiAgSXQgcGVyZm9ybXMgdGhlIHZl cmlmaWNhdGlvbiBvZiB0aGU8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90 ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48 dGQgY2xhc3M9ImxibG9jayI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPiAgICAg IHRva2VuIG1lc3NhZ2UgaW50ZWdyaXR5IGJ5IGNhbGN1bGF0aW5nIEhNQUMgb3ZlciB0aGUgPHNw YW4gY2xhc3M9Imluc2VydCI+dGhlIFNUVU48L3NwYW4+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIg dmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFs aWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFz cz0icmJsb2NrIj48c3BhbiBjbGFzcz0iaW5zZXJ0Ij4gICAgICBzZXJ2ZXIgbmFtZSwgdGhlIG5v bmNlLCB0aGU8L3NwYW4+IGVuY3J5cHRlZCBwb3J0aW9uIGluIHRoZSA8c3BhbiBjbGFzcz0iaW5z ZXJ0Ij5zZWxmLTwvc3Bhbj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90 ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48 dGQgY2xhc3M9ImxibG9jayI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPjxzcGFu IGNsYXNzPSJpbnNlcnQiPiAgICAgIGNvbnRhaW5lZDwvc3Bhbj4gdG9rZW4gYW5kIDxzcGFuIGNs YXNzPSJpbnNlcnQiPnRoZSBBTDwvc3Bhbj4gdXNpbmcgQVVUSCBrZXkgYW5kIGlmIHRoZSByZXN1 bHRpbmc8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAg ICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9Imxl ZnQiPiAgICAgIHZhbHVlIGRvZXMgbm90IG1hdGNoIHRoZSBtYWMgZmllbGQgaW4gdGhlIHNlbGYt Y29udGFpbmVkIHRva2VuPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgICAgdmFs dWUgZG9lcyBub3QgbWF0Y2ggdGhlIG1hYyBmaWVsZCBpbiB0aGUgc2VsZi1jb250YWluZWQgdG9r ZW48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAg PHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQi PiAgICAgIHRoZW4gaXQgcmVqZWN0cyB0aGUgcmVxdWVzdCB3aXRoIGFuIGVycm9yIHJlc3BvbnNl IDQwMTwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgICAgIHRoZW4gaXQgcmVqZWN0 cyB0aGUgcmVxdWVzdCB3aXRoIGFuIGVycm9yIHJlc3BvbnNlIDQwMTwvdGQ+PHRkIGNsYXNzPSJs aW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkPjxhIG5hbWU9ImRp ZmYwMDMwIj48L2E+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxp Z249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+ICAgICAgKFVuYXV0aG9yaXplZCkuICA8 c3BhbiBjbGFzcz0iZGVsZXRlIj5JZiBBRUFEIGFsZ29yaXRobSBpcyB1c2VkIHRoZW4gaXQgaGFz IG9ubHkgYTwvc3Bhbj48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+ICAgICAgKFVu YXV0aG9yaXplZCkuPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90 cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNs YXNzPSJsYmxvY2siPjxzcGFuIGNsYXNzPSJkZWxldGUiPiAgICAgIHNpbmdsZSBvdXRwdXQsIGVp dGhlciBhIHBsYWludGV4dCBvciBhIHNwZWNpYWwgc3ltYm9sIEZBSUwgdGhhdDwvc3Bhbj48L3Rk Pjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFs aWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWdu PSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPjxzcGFuIGNsYXNzPSJkZWxldGUiPiAgICAg IGluZGljYXRlcyB0aGF0IHRoZSBpbnB1dHMgYXJlIG5vdCBhdXRoZW50aWMuPC9zcGFuPjwvdGQ+ PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxp Z249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249 InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmln aHQiPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAg ICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVm dCI+ICAgbyAgU1RVTiBzZXJ2ZXIgb2J0YWlucyB0aGUgbWFjX2tleSBieSByZXRyaWV2aW5nIHRo ZSBjb250ZW50IG9mIHRoZTwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIG8gIFNU VU4gc2VydmVyIG9idGFpbnMgdGhlIG1hY19rZXkgYnkgcmV0cmlldmluZyB0aGUgY29udGVudCBv ZiB0aGU8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAg ICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9Imxl ZnQiPiAgICAgIGFjY2VzcyB0b2tlbiAod2hpY2ggcmVxdWlyZXMgZGVjcnlwdGlvbiBvZiB0aGUg c2VsZi1jb250YWluZWQ8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICAgICBhY2Nl c3MgdG9rZW4gKHdoaWNoIHJlcXVpcmVzIGRlY3J5cHRpb24gb2YgdGhlIHNlbGYtY29udGFpbmVk PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0 cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4g ICAgICB0b2tlbiB1c2luZyB0aGUgQVMtUlMga2V5KS48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9 InJpZ2h0Ij4gICAgICB0b2tlbiB1c2luZyB0aGUgQVMtUlMga2V5KS48L3RkPjx0ZCBjbGFzcz0i bGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGlu ZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPjwvdGQ+PHRkPiA8L3RkPjx0 ZCBjbGFzcz0icmlnaHQiPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3Rk PjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0 ZCBjbGFzcz0ibGVmdCI+ICAgbyAgVGhlIFNUVU4gc2VydmVyIHZlcmlmaWVzIHRoYXQgbm8gcmVw bGF5IHRvb2sgcGxhY2UgYnkgcGVyZm9ybWluZzwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmln aHQiPiAgIG8gIFRoZSBTVFVOIHNlcnZlciB2ZXJpZmllcyB0aGF0IG5vIHJlcGxheSB0b29rIHBs YWNlIGJ5IHBlcmZvcm1pbmc8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90 ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48 dGQgY2xhc3M9ImxlZnQiPiAgICAgIHRoZSBmb2xsb3dpbmcgY2hlY2s6PC90ZD48dGQ+IDwvdGQ+ PHRkIGNsYXNzPSJyaWdodCI+ICAgICAgdGhlIGZvbGxvd2luZyBjaGVjazo8L3RkPjx0ZCBjbGFz cz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0i bGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPjwvdGQ+PHRkPiA8L3Rk Pjx0ZCBjbGFzcz0icmlnaHQiPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48 L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3Rk Pjx0ZCBjbGFzcz0ibGVmdCI+ICAgICAgKiAgVGhlIGFjY2VzcyB0b2tlbiBpcyBhY2NlcHRlZCBp ZiB0aGUgdGltZXN0YW1wIGZpZWxkIChUUykgaW4gdGhlPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNz PSJyaWdodCI+ICAgICAgKiAgVGhlIGFjY2VzcyB0b2tlbiBpcyBhY2NlcHRlZCBpZiB0aGUgdGlt ZXN0YW1wIGZpZWxkIChUUykgaW4gdGhlPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0 b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3Ai PjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICAgICAgICBzZWxmLWNvbnRhaW5lZCB0b2tlbiBpcyBy ZWNlbnQgZW5vdWdoIHRvIHRoZSByZWNlcHRpb24gdGltZSBvZjwvdGQ+PHRkPiA8L3RkPjx0ZCBj bGFzcz0icmlnaHQiPiAgICAgICAgIHNlbGYtY29udGFpbmVkIHRva2VuIGlzIHJlY2VudCBlbm91 Z2ggdG8gdGhlIHJlY2VwdGlvbiB0aW1lIG9mPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWdu PSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQg Y2xhc3M9ImxlZnQiPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPjwvdGQ+PHRkIGNs YXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4NCiAgICAgIDx0ciBiZ2NvbG9yPSJncmF5Ij48dGQ+PC90 ZD48dGg+PGEgbmFtZT0icGFydC1sOCI+PHNtYWxsPnNraXBwaW5nIHRvIGNoYW5nZSBhdDwvc21h bGw+PGVtPiBwYWdlIDE0LCBsaW5lIDI0PC9lbT48L2E+PC90aD48dGg+IDwvdGg+PHRoPjxhIG5h bWU9InBhcnQtcjgiPjxzbWFsbD5za2lwcGluZyB0byBjaGFuZ2UgYXQ8L3NtYWxsPjxlbT4gcGFn ZSAxNCwgbGluZSAyNDwvZW0+PC9hPjwvdGg+PHRkPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQg Y2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij48L3RkPjx0 ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249 InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRv cCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPjEwLiAgT3BlcmF0aW9uYWwgQ29uc2lkZXJhdGlvbnM8 L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4xMC4gIE9wZXJhdGlvbmFsIENvbnNpZGVy YXRpb25zPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAg ICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJs ZWZ0Ij48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij48L3RkPjx0ZCBjbGFzcz0ibGlu ZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5v IiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIFRoZSBmb2xsb3dpbmcgb3Bl cmF0aW9uYWwgY29uc2lkZXJhdGlvbnMgc2hvdWxkIGJlIHRha2VuIGludG88L3RkPjx0ZD4gPC90 ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBUaGUgZm9sbG93aW5nIG9wZXJhdGlvbmFsIGNvbnNpZGVy YXRpb25zIHNob3VsZCBiZSB0YWtlbiBpbnRvPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWdu PSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0 b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBhY2NvdW50OjwvdGQ+PHRkPiA8L3RkPjx0ZCBj bGFzcz0icmlnaHQiPiAgIGFjY291bnQ6PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0 b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3Ai PjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij48 L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRy Pjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAg IG8gIEVhY2ggYXV0aG9yaXphdGlvbiBzZXJ2ZXIgc2hvdWxkIG1haW50YWluIHRoZSBsaXN0IG9m IFNUVU4gc2VydmVyczwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIG8gIEVhY2gg YXV0aG9yaXphdGlvbiBzZXJ2ZXIgc2hvdWxkIG1haW50YWluIHRoZSBsaXN0IG9mIFNUVU4gc2Vy dmVyczwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAg ICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVm dCI+ICAgICAgZm9yIHdoaWNoIGl0IHdpbGwgZ3JhbnQgdG9rZW5zLCBhbmQgdGhlIGxvbmctdGVy bSBzZWNyZXQgc2hhcmVkPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgICAgZm9y IHdoaWNoIGl0IHdpbGwgZ3JhbnQgdG9rZW5zLCBhbmQgdGhlIGxvbmctdGVybSBzZWNyZXQgc2hh cmVkPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAg IDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0 Ij4gICAgICB3aXRoIGVhY2ggb2YgdGhvc2UgU1RVTiBzZXJ2ZXJzLjwvdGQ+PHRkPiA8L3RkPjx0 ZCBjbGFzcz0icmlnaHQiPiAgICAgIHdpdGggZWFjaCBvZiB0aG9zZSBTVFVOIHNlcnZlcnMuPC90 ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48 dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij48L3Rk Pjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxp Z249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZD48YSBuYW1lPSJkaWZmMDAzMSI+PC9h PjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwv dGQ+PHRkIGNsYXNzPSJsYmxvY2siPiAgIG8gIElmIG1hbnVhbCBjb25maWd1cmF0aW9uIChTZWN0 aW9uIDQuMS48c3BhbiBjbGFzcz0iZGVsZXRlIj4zPC9zcGFuPikgaXMgdXNlZCB0byBlc3RhYmxp c2g8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+ICAgbyAgSWYgbWFudWFsIGNvbmZp Z3VyYXRpb24gKFNlY3Rpb24gNC4xLjxzcGFuIGNsYXNzPSJpbnNlcnQiPjI8L3NwYW4+KSBpcyB1 c2VkIHRvIGVzdGFibGlzaDwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3Rk PjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0 ZCBjbGFzcz0ibGVmdCI+ICAgICAgc3ltbWV0cmljIGtleXMsIHRoZSBuZWNlc3NhcnkgaW5mb3Jt YXRpb24gd2hpY2ggaW5jbHVkZXMgbG9uZy10ZXJtPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJy aWdodCI+ICAgICAgc3ltbWV0cmljIGtleXMsIHRoZSBuZWNlc3NhcnkgaW5mb3JtYXRpb24gd2hp Y2ggaW5jbHVkZXMgbG9uZy10ZXJtPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3Ai PjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwv dGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICAgICBrZXkgKEspLCBlbmNyeXB0aW9uIGFuZCBITUFDIGFs Z29yaXRobXMgaGF2ZSB0byBiZSBjb25maWd1cmVkIG9uPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNz PSJyaWdodCI+ICAgICAga2V5IChLKSwgZW5jcnlwdGlvbiBhbmQgSE1BQyBhbGdvcml0aG1zIGhh dmUgdG8gYmUgY29uZmlndXJlZCBvbjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9w Ij48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48 L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgICAgZWFjaCBhdXRob3JpemF0aW9uIHNlcnZlciBhbmQg U1RVTiBzZXJ2ZXIgZm9yIGVhY2gga2lkLiAgVGhlPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJy aWdodCI+ICAgICAgZWFjaCBhdXRob3JpemF0aW9uIHNlcnZlciBhbmQgU1RVTiBzZXJ2ZXIgZm9y IGVhY2gga2lkLiAgVGhlPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+ PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRk IGNsYXNzPSJsZWZ0Ij4gICAgICBjbGllbnQgb2J0YWlucyB0aGUgc2Vzc2lvbiBrZXkgYW5kIEhN QUMgYWxnb3JpdGhtIGZyb20gdGhlPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAg ICAgY2xpZW50IG9idGFpbnMgdGhlIHNlc3Npb24ga2V5IGFuZCBITUFDIGFsZ29yaXRobSBmcm9t IHRoZTwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAg ICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVm dCI+ICAgICAgYXV0aG9yaXphdGlvbiBzZXJ2ZXIgaW4gY29tcGFueSB3aXRoIHRoZSB0b2tlbi48 L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICAgICBhdXRob3JpemF0aW9uIHNlcnZl ciBpbiBjb21wYW55IHdpdGggdGhlIHRva2VuLjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGln bj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0i dG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdo dCI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAg IDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0 Ij4gICBvICBXaGVuIGEgU1RVTiBjbGllbnQgc2VuZHMgYSByZXF1ZXN0IHRvIGdldCBhY2Nlc3Mg dG8gYSBwYXJ0aWN1bGFyPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgbyAgV2hl biBhIFNUVU4gY2xpZW50IHNlbmRzIGEgcmVxdWVzdCB0byBnZXQgYWNjZXNzIHRvIGEgcGFydGlj dWxhcjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAg ICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVm dCI+ICAgICAgU1RVTiBzZXJ2ZXIgKFMpIHRoZSBhdXRob3JpemF0aW9uIHNlcnZlciBtdXN0IGVu c3VyZSB0aGF0IGl0PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgICAgU1RVTiBz ZXJ2ZXIgKFMpIHRoZSBhdXRob3JpemF0aW9uIHNlcnZlciBtdXN0IGVuc3VyZSB0aGF0IGl0PC90 ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48 dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICAg ICBzZWxlY3RzIHRoZSBhcHByb3ByaWF0ZSBraWQsIGFjY2Vzcy10b2tlbiBkZXBlbmRpbmcgb24g dGhlIHNlcnZlcjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgICAgIHNlbGVjdHMg dGhlIGFwcHJvcHJpYXRlIGtpZCwgYWNjZXNzLXRva2VuIGRlcGVuZGluZyBvbiB0aGUgc2VydmVy PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0 cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4g ICAgICBTLjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgICAgIFMuPC90ZD48dGQg Y2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xh c3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFz cz0icmlnaHQiPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4NCiAgICAgIDx0ciBi Z2NvbG9yPSJncmF5Ij48dGQ+PC90ZD48dGg+PGEgbmFtZT0icGFydC1sOSI+PHNtYWxsPnNraXBw aW5nIHRvIGNoYW5nZSBhdDwvc21hbGw+PGVtPiBwYWdlIDE2LCBsaW5lIDY8L2VtPjwvYT48L3Ro Pjx0aD4gPC90aD48dGg+PGEgbmFtZT0icGFydC1yOSI+PHNtYWxsPnNraXBwaW5nIHRvIGNoYW5n ZSBhdDwvc21hbGw+PGVtPiBwYWdlIDE2LCBsaW5lIDY8L2VtPjwvYT48L3RoPjx0ZD48L3RkPjwv dHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBj bGFzcz0ibGVmdCI+ICAgQmFybmVzLCBTdGVwaGVuIEZhcnJlbGwgYW5kIEFsaXNzYSBDb29wZXIg Zm9yIGNvbW1lbnRzIGFuZCByZXZpZXcuPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ ICAgQmFybmVzLCBTdGVwaGVuIEZhcnJlbGwgYW5kIEFsaXNzYSBDb29wZXIgZm9yIGNvbW1lbnRz IGFuZCByZXZpZXcuPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90 cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNs YXNzPSJsZWZ0Ij4gICBUaGUgYXV0aG9ycyB3b3VsZCBsaWtlIHRvIGdpdmUgc3BlY2lhbCB0aGFu a3MgdG8gQnJhbmRvbiBXaWxsaWFtcyBmb3I8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0 Ij4gICBUaGUgYXV0aG9ycyB3b3VsZCBsaWtlIHRvIGdpdmUgc3BlY2lhbCB0aGFua3MgdG8gQnJh bmRvbiBXaWxsaWFtcyBmb3I8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90 ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48 dGQgY2xhc3M9ImxlZnQiPiAgIGhpcyBoZWxwLjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmln aHQiPiAgIGhpcyBoZWxwLjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3Rk PjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0 ZCBjbGFzcz0ibGVmdCI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+PC90ZD48dGQg Y2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xh c3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBUaGFua3Mg dG8gT2xlZyBNb3NrYWxlbmtvIGZvciBwcm92aWRpbmcgdG9rZW4gc2FtcGxlcyBpbiB0aGU8L3Rk Pjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBUaGFua3MgdG8gT2xlZyBNb3NrYWxlbmtv IGZvciBwcm92aWRpbmcgdG9rZW4gc2FtcGxlcyBpbiB0aGU8L3RkPjx0ZCBjbGFzcz0ibGluZW5v IiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2 YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIEFwcGVuZGl4IHNlY3Rpb24uPC90 ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgQXBwZW5kaXggc2VjdGlvbi48L3RkPjx0 ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBj bGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPjwvdGQ+PHRk PiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0i dG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9w Ij48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+MTQuICBSZWZlcmVuY2VzPC90ZD48dGQ+IDwvdGQ+PHRk IGNsYXNzPSJyaWdodCI+MTQuICBSZWZlcmVuY2VzPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFs aWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWdu PSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4xNC4xLiAgTm9ybWF0aXZlIFJlZmVyZW5jZXM8 L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4xNC4xLiAgTm9ybWF0aXZlIFJlZmVyZW5j ZXM8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAg PHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQi PjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8i IHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkPjxhIG5hbWU9ImRpZmYwMDMy Ij48L2E+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRv cCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxv Y2siPiAgIDxzcGFuIGNsYXNzPSJpbnNlcnQiPltJLUQuaWV0Zi1qb3NlLWpzb24td2ViLWFsZ29y aXRobXNdPC9zcGFuPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwv dHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBj bGFzcz0ibGJsb2NrIj48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+PHNwYW4gY2xh c3M9Imluc2VydCI+ICAgICAgICAgICAgICBKb25lcywgTS4sICJKU09OIFdlYiBBbGdvcml0aG1z IChKV0EpIiwgZHJhZnQtaWV0Zi1qb3NlLTwvc3Bhbj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2 YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxp Z249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNz PSJyYmxvY2siPjxzcGFuIGNsYXNzPSJpbnNlcnQiPiAgICAgICAgICAgICAganNvbi13ZWItYWxn b3JpdGhtcy00MCAod29yayBpbiBwcm9ncmVzcyksIEphbnVhcnkgMjAxNS48L3NwYW4+PC90ZD48 dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQg Y2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPjwvdGQ+ PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj4gICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgPC90ZD48dGQgY2xh c3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9 ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBbUkZDMjExOV0g IEJyYWRuZXIsIFMuLCAiS2V5IHdvcmRzIGZvciB1c2UgaW4gUkZDcyB0byBJbmRpY2F0ZTwvdGQ+ PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIFtSRkMyMTE5XSAgQnJhZG5lciwgUy4sICJL ZXkgd29yZHMgZm9yIHVzZSBpbiBSRkNzIHRvIEluZGljYXRlPC90ZD48dGQgY2xhc3M9ImxpbmVu byIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIg dmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICAgICAgICAgICAgIFJlcXVpcmVt ZW50IExldmVscyIsIEJDUCAxNCwgUkZDIDIxMTksIE1hcmNoIDE5OTcuPC90ZD48dGQ+IDwvdGQ+ PHRkIGNsYXNzPSJyaWdodCI+ICAgICAgICAgICAgICBSZXF1aXJlbWVudCBMZXZlbHMiLCBCQ1Ag MTQsIFJGQyAyMTE5LCBNYXJjaCAxOTk3LjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0i dG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9w Ij48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0 cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4g ICBbUkZDNDY0OF0gIEpvc2Vmc3NvbiwgUy4sICJUaGUgQmFzZTE2LCBCYXNlMzIsIGFuZCBCYXNl NjQgRGF0YTwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIFtSRkM0NjQ4XSAgSm9z ZWZzc29uLCBTLiwgIlRoZSBCYXNlMTYsIEJhc2UzMiwgYW5kIEJhc2U2NCBEYXRhPC90ZD48dGQg Y2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xh c3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICAgICAgICAg ICAgIEVuY29kaW5ncyIsIFJGQyA0NjQ4LCBPY3RvYmVyIDIwMDYuPC90ZD48dGQ+IDwvdGQ+PHRk IGNsYXNzPSJyaWdodCI+ICAgICAgICAgICAgICBFbmNvZGluZ3MiLCBSRkMgNDY0OCwgT2N0b2Jl ciAyMDA2LjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQog ICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0i bGVmdCI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+PC90ZD48dGQgY2xhc3M9Imxp bmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVu byIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBbUkZDNDg2OF0gIEtlbGx5 LCBTLiBhbmQgUy4gRnJhbmtlbCwgIlVzaW5nIEhNQUMtU0hBLTI1NiwgSE1BQy1TSEEtPC90ZD48 dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgW1JGQzQ4NjhdICBLZWxseSwgUy4gYW5kIFMu IEZyYW5rZWwsICJVc2luZyBITUFDLVNIQS0yNTYsIEhNQUMtU0hBLTwvdGQ+PHRkIGNsYXNzPSJs aW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5l bm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgICAgICAgICAgICAzODQs IGFuZCBITUFDLVNIQS01MTIgd2l0aCBJUHNlYyIsIFJGQyA0ODY4LCBNYXkgMjAwNy48L3RkPjx0 ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICAgICAgICAgICAgIDM4NCwgYW5kIEhNQUMtU0hB LTUxMiB3aXRoIElQc2VjIiwgUkZDIDQ4NjgsIE1heSAyMDA3LjwvdGQ+PHRkIGNsYXNzPSJsaW5l bm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8i IHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNs YXNzPSJyaWdodCI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90 cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNs YXNzPSJsZWZ0Ij4gICBbUkZDNTExNl0gIE1jR3JldywgRC4sICJBbiBJbnRlcmZhY2UgYW5kIEFs Z29yaXRobXMgZm9yIEF1dGhlbnRpY2F0ZWQ8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0 Ij4gICBbUkZDNTExNl0gIE1jR3JldywgRC4sICJBbiBJbnRlcmZhY2UgYW5kIEFsZ29yaXRobXMg Zm9yIEF1dGhlbnRpY2F0ZWQ8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90 ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVm dCI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+PC90ZD48dGQgY2xhc3M9ImxpbmVu byI+PC90ZD48L3RyPg0KICAgICAgPHRyIGJnY29sb3I9ImdyYXkiPjx0ZD48L3RkPjx0aD48YSBu YW1lPSJwYXJ0LWwxMCI+PHNtYWxsPnNraXBwaW5nIHRvIGNoYW5nZSBhdDwvc21hbGw+PGVtPiBw YWdlIDE2LCBsaW5lIDMyPC9lbT48L2E+PC90aD48dGg+IDwvdGg+PHRoPjxhIG5hbWU9InBhcnQt cjEwIj48c21hbGw+c2tpcHBpbmcgdG8gY2hhbmdlIGF0PC9zbWFsbD48ZW0+IHBhZ2UgMTYsIGxp bmUgMzY8L2VtPjwvYT48L3RoPjx0ZD48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJs aW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgW1JGQzY3NDldICBI YXJkdCwgRC4sICJUaGUgT0F1dGggMi4wIEF1dGhvcml6YXRpb24gRnJhbWV3b3JrIiwgUkZDPC90 ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgW1JGQzY3NDldICBIYXJkdCwgRC4sICJU aGUgT0F1dGggMi4wIEF1dGhvcml6YXRpb24gRnJhbWV3b3JrIiwgUkZDPC90ZD48dGQgY2xhc3M9 ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9Imxp bmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICAgICAgICAgICAgIDY3 NDksIE9jdG9iZXIgMjAxMi48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICAgICAg ICAgICAgIDY3NDksIE9jdG9iZXIgMjAxMi48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249 InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRv cCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQi PjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8 dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ ICAgW2lhbmEtc3R1bl08L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBbaWFuYS1z dHVuXTwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAg ICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVm dCI+ICAgICAgICAgICAgICBJQU5BLCAsICJJQU5BOiBTVFVOIEF0dHJpYnV0ZXMiLCBBcHJpbCAy MDExLDwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgICAgICAgICAgICAgSUFOQSwg LCAiSUFOQTogU1RVTiBBdHRyaWJ1dGVzIiwgQXByaWwgMjAxMSw8L3RkPjx0ZCBjbGFzcz0ibGlu ZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5v IiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgICAgICAgICAgICAgJmx0O2h0 dHA6Ly93d3cuaWFuYS5vcmcvYXNzaWdubWVudHMvc3R1bi1wYXJhbWV0ZXJzL3N0dW4tcGE8L3Rk Pjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICAgICAgICAgICAgICZsdDtodHRwOi8vd3d3 LmlhbmEub3JnL2Fzc2lnbm1lbnRzL3N0dW4tcGFyYW1ldGVycy9zdHVuLXBhPC90ZD48dGQgY2xh c3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9 ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICAgICAgICAgICAg IHJhbWV0ZXJzLnhtbCZndDsuPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgICAg ICAgICAgICByYW1ldGVycy54bWwmZ3Q7LjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0i dG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9w Ij48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0 cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4x NC4yLiAgSW5mb3JtYXRpdmUgUmVmZXJlbmNlczwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmln aHQiPjE0LjIuICBJbmZvcm1hdGl2ZSBSZWZlcmVuY2VzPC90ZD48dGQgY2xhc3M9ImxpbmVubyIg dmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFs aWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9 InJpZ2h0Ij48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0K ICAgICAgPHRyPjx0ZD48YSBuYW1lPSJkaWZmMDAzMyI+PC9hPjwvdGQ+PC90cj4NCiAgICAgIDx0 cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2si PiAgIDxzcGFuIGNsYXNzPSJkZWxldGUiPltJLUQuaWV0Zi1qb3NlLWpzb24td2ViLWFsZ29yaXRo bXNdPC9zcGFuPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48L3RkPjx0ZCBjbGFz cz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0i bGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+PHNwYW4gY2xhc3M9 ImRlbGV0ZSI+ICAgICAgICAgICAgICBKb25lcywgTS4sICJKU09OIFdlYiBBbGdvcml0aG1zIChK V0EpIiwgZHJhZnQtaWV0Zi1qb3NlLTwvc3Bhbj48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJi bG9jayI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAg ICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJs YmxvY2siPjxzcGFuIGNsYXNzPSJkZWxldGUiPiAgICAgICAgICAgICAganNvbi13ZWItYWxnb3Jp dGhtcy00MCAod29yayBpbiBwcm9ncmVzcyksIEphbnVhcnkgMjAxNS48L3NwYW4+PC90ZD48dGQ+ IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0i dG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9w Ij48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj4gICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgPC90ZD48dGQ+IDwvdGQ+ PHRkIGNsYXNzPSJyYmxvY2siPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48 L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3Rk Pjx0ZCBjbGFzcz0ibGVmdCI+ICAgW0ktRC5pZXRmLWpvc2UtanNvbi13ZWItZW5jcnlwdGlvbl08 L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBbSS1ELmlldGYtam9zZS1qc29uLXdl Yi1lbmNyeXB0aW9uXTwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwv dHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBj bGFzcz0ibGVmdCI+ICAgICAgICAgICAgICBKb25lcywgTS4gYW5kIEouIEhpbGRlYnJhbmQsICJK U09OIFdlYiBFbmNyeXB0aW9uIChKV0UpIiw8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0 Ij4gICAgICAgICAgICAgIEpvbmVzLCBNLiBhbmQgSi4gSGlsZGVicmFuZCwgIkpTT04gV2ViIEVu Y3J5cHRpb24gKEpXRSkiLDwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3Rk PjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0 ZCBjbGFzcz0ibGVmdCI+ICAgICAgICAgICAgICBkcmFmdC1pZXRmLWpvc2UtanNvbi13ZWItZW5j cnlwdGlvbi00MCAod29yayBpbiBwcm9ncmVzcyksPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJy aWdodCI+ICAgICAgICAgICAgICBkcmFmdC1pZXRmLWpvc2UtanNvbi13ZWItZW5jcnlwdGlvbi00 MCAod29yayBpbiBwcm9ncmVzcyksPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3Ai PjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwv dGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICAgICAgICAgICAgIEphbnVhcnkgMjAxNS48L3RkPjx0ZD4g PC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICAgICAgICAgICAgIEphbnVhcnkgMjAxNS48L3RkPjx0 ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBj bGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPjwvdGQ+PHRk PiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0i dG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9w Ij48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgW0ktRC5pZXRmLWpvc2UtanNvbi13ZWItc2lnbmF0 dXJlXTwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIFtJLUQuaWV0Zi1qb3NlLWpz b24td2ViLXNpZ25hdHVyZV08L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90 ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48 dGQgY2xhc3M9ImxlZnQiPiAgICAgICAgICAgICAgSm9uZXMsIE0uLCBCcmFkbGV5LCBKLiwgYW5k IE4uIFNha2ltdXJhLCAiSlNPTiBXZWI8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4g ICAgICAgICAgICAgIEpvbmVzLCBNLiwgQnJhZGxleSwgSi4sIGFuZCBOLiBTYWtpbXVyYSwgIkpT T04gV2ViPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAg ICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJs ZWZ0Ij4gICAgICAgICAgICAgIFNpZ25hdHVyZSAoSldTKSIsIGRyYWZ0LWlldGYtam9zZS1qc29u LXdlYi1zaWduYXR1cmUtNDE8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICAgICAg ICAgICAgIFNpZ25hdHVyZSAoSldTKSIsIGRyYWZ0LWlldGYtam9zZS1qc29uLXdlYi1zaWduYXR1 cmUtNDE8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAg ICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9Imxl ZnQiPiAgICAgICAgICAgICAgKHdvcmsgaW4gcHJvZ3Jlc3MpLCBKYW51YXJ5IDIwMTUuPC90ZD48 dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgICAgICAgICAgICAod29yayBpbiBwcm9ncmVz cyksIEphbnVhcnkgMjAxNS48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90 ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48 dGQgY2xhc3M9ImxlZnQiPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPjwvdGQ+PHRk IGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNs YXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgW0ktRC5p ZXRmLW9hdXRoLWpzb24td2ViLXRva2VuXTwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQi PiAgIFtJLUQuaWV0Zi1vYXV0aC1qc29uLXdlYi10b2tlbl08L3RkPjx0ZCBjbGFzcz0ibGluZW5v IiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2 YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgICAgICAgICAgICAgSm9uZXMsIE0u LCBCcmFkbGV5LCBKLiwgYW5kIE4uIFNha2ltdXJhLCAiSlNPTiBXZWIgVG9rZW48L3RkPjx0ZD4g PC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICAgICAgICAgICAgIEpvbmVzLCBNLiwgQnJhZGxleSwg Si4sIGFuZCBOLiBTYWtpbXVyYSwgIkpTT04gV2ViIFRva2VuPC90ZD48dGQgY2xhc3M9ImxpbmVu byIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIg dmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICAgICAgICAgICAgIChKV1QpIiwg ZHJhZnQtaWV0Zi1vYXV0aC1qc29uLXdlYi10b2tlbi0zMiAod29yayBpbjwvdGQ+PHRkPiA8L3Rk Pjx0ZCBjbGFzcz0icmlnaHQiPiAgICAgICAgICAgICAgKEpXVCkiLCBkcmFmdC1pZXRmLW9hdXRo LWpzb24td2ViLXRva2VuLTMyICh3b3JrIGluPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWdu PSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0 b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICAgICAgICAgICAgIHByb2dyZXNzKSwgRGVjZW1i ZXIgMjAxNC48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICAgICAgICAgICAgIHBy b2dyZXNzKSwgRGVjZW1iZXIgMjAxNC48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRv cCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+ PC90ZD48dGQgY2xhc3M9ImxlZnQiPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPjwv dGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+ PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAg W0ktRC5pZXRmLW9hdXRoLXBvcC1hcmNoaXRlY3R1cmVdPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNz PSJyaWdodCI+ICAgW0ktRC5pZXRmLW9hdXRoLXBvcC1hcmNoaXRlY3R1cmVdPC90ZD48dGQgY2xh c3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9 ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICAgICAgICAgICAg IEh1bnQsIFAuLCBSaWNoZXIsIEouLCBNaWxscywgVy4sIE1pc2hyYSwgUC4sIGFuZCBILjwvdGQ+ PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgICAgICAgICAgICAgSHVudCwgUC4sIFJpY2hl ciwgSi4sIE1pbGxzLCBXLiwgTWlzaHJhLCBQLiwgYW5kIEguPC90ZD48dGQgY2xhc3M9ImxpbmVu byIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIg dmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICAgICAgICAgICAgIFRzY2hvZmVu aWcsICJPQXV0aCAyLjAgUHJvb2Ytb2YtUG9zc2Vzc2lvbiAoUG9QKSBTZWN1cml0eTwvdGQ+PHRk PiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgICAgICAgICAgICAgVHNjaG9mZW5pZywgIk9BdXRo IDIuMCBQcm9vZi1vZi1Qb3NzZXNzaW9uIChQb1ApIFNlY3VyaXR5PC90ZD48dGQgY2xhc3M9Imxp bmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQ+PGEgbmFtZT0iZGlm ZjAwMzQiPjwvYT48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGln bj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj4gICAgICAgICAgICAgIEFyY2hpdGVjdHVy ZSIsIDxzcGFuIGNsYXNzPSJkZWxldGUiPmRyYWZ0LWlldGYtb2F1dGgtcG9wLWFyY2hpdGVjdHVy ZS0wMDwvc3Bhbj4gKHdvcms8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+ICAgICAg ICAgICAgICBBcmNoaXRlY3R1cmUiLCA8c3BhbiBjbGFzcz0iaW5zZXJ0Ij5kcmFmdC1pZXRmLW9h dXRoLXBvcC1hcmNoaXRlY3R1cmUtMDE8L3NwYW4+ICh3b3JrPC90ZD48dGQgY2xhc3M9ImxpbmVu byIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIg dmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPiAgICAgICAgICAgICAgaW4gcHJv Z3Jlc3MpLCA8c3BhbiBjbGFzcz0iZGVsZXRlIj5KdWx5IDIwMTQuPC9zcGFuPjwvdGQ+PHRkPiA8 L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj4gICAgICAgICAgICAgIGluIHByb2dyZXNzKSwgPHNwYW4g Y2xhc3M9Imluc2VydCI+TWFyY2ggMjAxNS48L3NwYW4+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIg dmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFs aWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9 InJpZ2h0Ij48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0K ICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9 ImxlZnQiPiAgIFtJLUQuaWV0Zi1vYXV0aC1wb3Ata2V5LWRpc3RyaWJ1dGlvbl08L3RkPjx0ZD4g PC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBbSS1ELmlldGYtb2F1dGgtcG9wLWtleS1kaXN0cmli dXRpb25dPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAg ICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJs ZWZ0Ij4gICAgICAgICAgICAgIEJyYWRsZXksIEouLCBIdW50LCBQLiwgSm9uZXMsIE0uLCBhbmQg SC4gVHNjaG9mZW5pZyw8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICAgICAgICAg ICAgIEJyYWRsZXksIEouLCBIdW50LCBQLiwgSm9uZXMsIE0uLCBhbmQgSC4gVHNjaG9mZW5pZyw8 L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRy Pjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAg ICAgICAgICAgICAgIk9BdXRoIDIuMCBQcm9vZi1vZi1Qb3NzZXNzaW9uOiBBdXRob3JpemF0aW9u IFNlcnZlciB0bzwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgICAgICAgICAgICAg Ik9BdXRoIDIuMCBQcm9vZi1vZi1Qb3NzZXNzaW9uOiBBdXRob3JpemF0aW9uIFNlcnZlciB0bzwv dGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+ PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAg ICAgICAgICAgICBDbGllbnQgS2V5IERpc3RyaWJ1dGlvbiIsIGRyYWZ0LWlldGYtb2F1dGgtcG9w LWtleS08L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICAgICAgICAgICAgIENsaWVu dCBLZXkgRGlzdHJpYnV0aW9uIiwgZHJhZnQtaWV0Zi1vYXV0aC1wb3Ata2V5LTwvdGQ+PHRkIGNs YXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkPjxhIG5h bWU9ImRpZmYwMDM1Ij48L2E+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5v IiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+ICAgICAgICAgICAgICBkaXN0 cmlidXRpb24tMDxzcGFuIGNsYXNzPSJkZWxldGUiPjAgKHdvcmsgaW4gcHJvZ3Jlc3MpLCBKdWx5 IDIwMTQ8L3NwYW4+LjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj4gICAgICAgICAg ICAgIGRpc3RyaWJ1dGlvbi0wPHNwYW4gY2xhc3M9Imluc2VydCI+MSAod29yayBpbiBwcm9ncmVz cyksIE1hcmNoIDIwMTU8L3NwYW4+LjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9w Ij48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48 L3RkPjx0ZCBjbGFzcz0ibGVmdCI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+PC90 ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48 dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBb SS1ELmlldGYtcnRjd2ViLW92ZXJ2aWV3XTwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQi PiAgIFtJLUQuaWV0Zi1ydGN3ZWItb3ZlcnZpZXddPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFs aWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWdu PSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICAgICAgICAgICAgIEFsdmVzdHJhbmQsIEgu LCAiT3ZlcnZpZXc6IFJlYWwgVGltZSBQcm90b2NvbHMgZm9yPC90ZD48dGQ+IDwvdGQ+PHRkIGNs YXNzPSJyaWdodCI+ICAgICAgICAgICAgICBBbHZlc3RyYW5kLCBILiwgIk92ZXJ2aWV3OiBSZWFs IFRpbWUgUHJvdG9jb2xzIGZvcjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48 L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3Rk Pjx0ZCBjbGFzcz0ibGVmdCI+ICAgICAgICAgICAgICBCcm93c2VyLWJhc2VkIEFwcGxpY2F0aW9u cyIsIGRyYWZ0LWlldGYtcnRjd2ViLW92ZXJ2aWV3LTEzPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNz PSJyaWdodCI+ICAgICAgICAgICAgICBCcm93c2VyLWJhc2VkIEFwcGxpY2F0aW9ucyIsIGRyYWZ0 LWlldGYtcnRjd2ViLW92ZXJ2aWV3LTEzPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0 b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3Ai PjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICAgICAgICAgICAgICh3b3JrIGluIHByb2dyZXNzKSwg Tm92ZW1iZXIgMjAxNC48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICAgICAgICAg ICAgICh3b3JrIGluIHByb2dyZXNzKSwgTm92ZW1iZXIgMjAxNC48L3RkPjx0ZCBjbGFzcz0ibGlu ZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5v IiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPjwvdGQ+PHRkPiA8L3RkPjx0ZCBj bGFzcz0icmlnaHQiPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwv dHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBj bGFzcz0ibGVmdCI+ICAgW0ktRC5pZXRmLXRyYW0tc3R1bmJpc108L3RkPjx0ZD4gPC90ZD48dGQg Y2xhc3M9InJpZ2h0Ij4gICBbSS1ELmlldGYtdHJhbS1zdHVuYmlzXTwvdGQ+PHRkIGNsYXNzPSJs aW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5l bm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgICAgICAgICAgICBQZXRp dC1IdWd1ZW5pbiwgTS4sIFNhbGd1ZWlybywgRy4sIFJvc2VuYmVyZywgSi4sIFdpbmcsPC90ZD48 dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgICAgICAgICAgICBQZXRpdC1IdWd1ZW5pbiwg TS4sIFNhbGd1ZWlybywgRy4sIFJvc2VuYmVyZywgSi4sIFdpbmcsPC90ZD48dGQgY2xhc3M9Imxp bmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVu byIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICAgICAgICAgICAgIEQuLCBN YWh5LCBSLiwgYW5kIFAuIE1hdHRoZXdzLCAiU2Vzc2lvbiBUcmF2ZXJzYWw8L3RkPjx0ZD4gPC90 ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICAgICAgICAgICAgIEQuLCBNYWh5LCBSLiwgYW5kIFAuIE1h dHRoZXdzLCAiU2Vzc2lvbiBUcmF2ZXJzYWw8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249 InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZD48YSBuYW1lPSJkaWZmMDAzNiI+PC9hPjwv dGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+ PHRkIGNsYXNzPSJsYmxvY2siPiAgICAgICAgICAgICAgVXRpbGl0aWVzIGZvciBOQVQgKFNUVU4p IiwgPHNwYW4gY2xhc3M9ImRlbGV0ZSI+ZHJhZnQtaWV0Zi10cmFtLXN0dW5iaXMtMDE8L3NwYW4+ PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPiAgICAgICAgICAgICAgVXRpbGl0aWVz IGZvciBOQVQgKFNUVU4pIiwgPHNwYW4gY2xhc3M9Imluc2VydCI+ZHJhZnQtaWV0Zi10cmFtLXN0 dW5iaXMtMDQ8L3NwYW4+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+ PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRk IGNsYXNzPSJsYmxvY2siPiAgICAgICAgICAgICAgKHdvcmsgaW4gcHJvZ3Jlc3MpLCA8c3BhbiBj bGFzcz0iZGVsZXRlIj5GZWJydWFyeTwvc3Bhbj4gMjAxNS48L3RkPjx0ZD4gPC90ZD48dGQgY2xh c3M9InJibG9jayI+ICAgICAgICAgICAgICAod29yayBpbiBwcm9ncmVzcyksIDxzcGFuIGNsYXNz PSJpbnNlcnQiPk1hcmNoPC9zcGFuPiAyMDE1LjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGln bj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0i dG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdo dCI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAg IDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0 Ij4gICBbSS1ELmlldGYtdXRhLXRscy1iY3BdPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdo dCI+ICAgW0ktRC5pZXRmLXV0YS10bHMtYmNwXTwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGln bj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0i dG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgICAgICAgICAgICBTaGVmZmVyLCBZLiwgSG9s eiwgUi4sIGFuZCBQLiBTYWludC1BbmRyZSw8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0 Ij4gICAgICAgICAgICAgIFNoZWZmZXIsIFkuLCBIb2x6LCBSLiwgYW5kIFAuIFNhaW50LUFuZHJl LDwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8 dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ ICAgICAgICAgICAgICAiUmVjb21tZW5kYXRpb25zIGZvciBTZWN1cmUgVXNlIG9mIFRMUyBhbmQg RFRMUyIsIGRyYWZ0LTwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgICAgICAgICAg ICAgIlJlY29tbWVuZGF0aW9ucyBmb3IgU2VjdXJlIFVzZSBvZiBUTFMgYW5kIERUTFMiLCBkcmFm dC08L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAg PHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQi PiAgICAgICAgICAgICAgaWV0Zi11dGEtdGxzLWJjcC0xMSAod29yayBpbiBwcm9ncmVzcyksIEZl YnJ1YXJ5IDIwMTUuPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgICAgICAgICAg ICBpZXRmLXV0YS10bHMtYmNwLTExICh3b3JrIGluIHByb2dyZXNzKSwgRmVicnVhcnkgMjAxNS48 L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRy Pjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPjwv dGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZh bGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkPjxhIG5hbWU9ImRpZmYwMDM3Ij48 L2E+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+ PC90ZD48dGQgY2xhc3M9ImxibG9jayI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2si PiAgIDxzcGFuIGNsYXNzPSJpbnNlcnQiPltJLUQubWNncmV3LWFlYWQtYWVzLWNiYy1obWFjLXNo YTJdPC9zcGFuPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+ DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFz cz0ibGJsb2NrIj48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+PHNwYW4gY2xhc3M9 Imluc2VydCI+ICAgICAgICAgICAgICBNY0dyZXcsIEQuLCBGb2xleSwgSi4sIGFuZCBLLiBQYXRl cnNvbiwgIkF1dGhlbnRpY2F0ZWQ8L3NwYW4+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWdu PSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0 b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJs b2NrIj48c3BhbiBjbGFzcz0iaW5zZXJ0Ij4gICAgICAgICAgICAgIEVuY3J5cHRpb24gd2l0aCBB RVMtQ0JDIGFuZCBITUFDLVNIQSIsIGRyYWZ0LW1jZ3Jldy1hZWFkLTwvc3Bhbj48L3RkPjx0ZCBj bGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFz cz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+PC90ZD48dGQ+ IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPjxzcGFuIGNsYXNzPSJpbnNlcnQiPiAgICAgICAgICAg ICAgYWVzLWNiYy1obWFjLXNoYTItMDUgKHdvcmsgaW4gcHJvZ3Jlc3MpLCBKdWx5IDIwMTQuPC9z cGFuPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAg ICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJs b2NrIj48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+ICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIDwv dGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+ PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAg W1JGQzIxMDRdICBLcmF3Y3p5aywgSC4sIEJlbGxhcmUsIE0uLCBhbmQgUi4gQ2FuZXR0aSwgIkhN QUM6IEtleWVkLTwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIFtSRkMyMTA0XSAg S3Jhd2N6eWssIEguLCBCZWxsYXJlLCBNLiwgYW5kIFIuIENhbmV0dGksICJITUFDOiBLZXllZC08 L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRy Pjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAg ICAgICAgICAgICAgSGFzaGluZyBmb3IgTWVzc2FnZSBBdXRoZW50aWNhdGlvbiIsIFJGQyAyMTA0 LCBGZWJydWFyeTwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgICAgICAgICAgICAg SGFzaGluZyBmb3IgTWVzc2FnZSBBdXRoZW50aWNhdGlvbiIsIFJGQyAyMTA0LCBGZWJydWFyeTwv dGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+ PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAg ICAgICAgICAgICAxOTk3LjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgICAgICAg ICAgICAgMTk5Ny48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3Ry Pg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xh c3M9ImxlZnQiPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPjwvdGQ+PHRkIGNsYXNz PSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJs aW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgW1JGQzUyNDZdICBE aWVya3MsIFQuIGFuZCBFLiBSZXNjb3JsYSwgIlRoZSBUcmFuc3BvcnQgTGF5ZXIgU2VjdXJpdHk8 L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBbUkZDNTI0Nl0gIERpZXJrcywgVC4g YW5kIEUuIFJlc2NvcmxhLCAiVGhlIFRyYW5zcG9ydCBMYXllciBTZWN1cml0eTwvdGQ+PHRkIGNs YXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNz PSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgICAgICAgICAg ICAoVExTKSBQcm90b2NvbCBWZXJzaW9uIDEuMiIsIFJGQyA1MjQ2LCBBdWd1c3QgMjAwOC48L3Rk Pjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICAgICAgICAgICAgIChUTFMpIFByb3RvY29s IFZlcnNpb24gMS4yIiwgUkZDIDUyNDYsIEF1Z3VzdCAyMDA4LjwvdGQ+PHRkIGNsYXNzPSJsaW5l bm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8i IHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNs YXNzPSJyaWdodCI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90 cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNs YXNzPSJsZWZ0Ij4gICBbUkZDNTc2Nl0gIE1haHksIFIuLCBNYXR0aGV3cywgUC4sIGFuZCBKLiBS b3NlbmJlcmcsICJUcmF2ZXJzYWwgVXNpbmc8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0 Ij4gICBbUkZDNTc2Nl0gIE1haHksIFIuLCBNYXR0aGV3cywgUC4sIGFuZCBKLiBSb3NlbmJlcmcs ICJUcmF2ZXJzYWwgVXNpbmc8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90 ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48 dGQgY2xhc3M9ImxlZnQiPiAgICAgICAgICAgICAgUmVsYXlzIGFyb3VuZCBOQVQgKFRVUk4pOiBS ZWxheSBFeHRlbnNpb25zIHRvIFNlc3Npb248L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0 Ij4gICAgICAgICAgICAgIFJlbGF5cyBhcm91bmQgTkFUIChUVVJOKTogUmVsYXkgRXh0ZW5zaW9u cyB0byBTZXNzaW9uPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90 cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNs YXNzPSJsZWZ0Ij4gICAgICAgICAgICAgIFRyYXZlcnNhbCBVdGlsaXRpZXMgZm9yIE5BVCAoU1RV TikiLCBSRkMgNTc2NiwgQXByaWwgMjAxMC48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0 Ij4gICAgICAgICAgICAgIFRyYXZlcnNhbCBVdGlsaXRpZXMgZm9yIE5BVCAoU1RVTikiLCBSRkMg NTc2NiwgQXByaWwgMjAxMC48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90 ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVm dCI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+PC90ZD48dGQgY2xhc3M9ImxpbmVu byI+PC90ZD48L3RyPg0KICAgICAgPHRyIGJnY29sb3I9ImdyYXkiPjx0ZD48L3RkPjx0aD48YSBu YW1lPSJwYXJ0LWwxMSI+PHNtYWxsPnNraXBwaW5nIHRvIGNoYW5nZSBhdDwvc21hbGw+PGVtPiBw YWdlIDE5LCBsaW5lIDQzPC9lbT48L2E+PC90aD48dGg+IDwvdGg+PHRoPjxhIG5hbWU9InBhcnQt cjExIj48c21hbGw+c2tpcHBpbmcgdG8gY2hhbmdlIGF0PC9zbWFsbD48ZW0+IHBhZ2UgMjAsIGxp bmUgNDwvZW0+PC9hPjwvdGg+PHRkPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9Imxp bmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICAgICAgICAgICAgICAg ICAgICAgICAgXHgzNVx4MzNceDkxXHg5Ylx4NTFceGZjXHhmOVx4ZGVceDI1XHgxOVx4YTlceGEz XHg1NjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgICAgICAgICAgICAgICAgICAg ICAgICBceDM1XHgzM1x4OTFceDliXHg1MVx4ZmNceGY5XHhkZVx4MjVceDE5XHhhOVx4YTNceDU2 PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0 cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4g ICAgICAgICAgICAgICAgICAgICAgICAgXHgyYlx4NTFceDdiXHhlMlx4NzZceDRmPC90ZD48dGQ+ IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgICAgICAgICAgICAgICAgICAgICAgIFx4MmJceDUx XHg3Ylx4ZTJceDc2XHg0ZjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3Rk PjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0 ZCBjbGFzcz0ibGVmdCI+ICBBVVRIIGtleSA9IE4vQTwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0i cmlnaHQiPiAgQVVUSCBrZXkgPSBOL0E8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRv cCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+ PC90ZD48dGQgY2xhc3M9ImxlZnQiPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPjwv dGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+ PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICBF bmNyeXB0ZWQgdG9rZW4gKDYyIGJ5dGVzID0gMzQgKyAxNiArIDEyKSA9PC90ZD48dGQ+IDwvdGQ+ PHRkIGNsYXNzPSJyaWdodCI+ICBFbmNyeXB0ZWQgdG9rZW4gKDYyIGJ5dGVzID0gMzQgKyAxNiAr IDEyKSA9PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAg ICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJs ZWZ0Ij48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij48L3RkPjx0ZCBjbGFzcz0ibGlu ZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5v IiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiBceGQ0XHg4Nlx4NWNceDVkXHg1 OVx4ZmJceDNmXHhlM1x4ZjZceGYxXHhkOFx4YzNceDIyXHhjMlx4MjJceDI2XHg4ZFx4MmVceGYw PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+IFx4ZDRceDg2XHg1Y1x4NWRceDU5XHhm Ylx4M2ZceGUzXHhmNlx4ZjFceGQ4XHhjM1x4MjJceGMyXHgyMlx4MjZceDhkXHgyZVx4ZjA8L3Rk Pjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0 ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiBceGJl XHgyXHg1Ylx4YmRceDEzXHg0OVx4ODlceDZlXHhhNVx4YzVceDUxXHhlZVx4ZWVceDdmXHhkOVx4 ZTRceDQxXHhkN1x4Y2I8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gXHhiZVx4Mlx4 NWJceGJkXHgxM1x4NDlceDg5XHg2ZVx4YTVceGM1XHg1MVx4ZWVceGVlXHg3Zlx4ZDlceGU0XHg0 MVx4ZDdceGNiPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4N CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNz PSJsZWZ0Ij4gXHg1MVx4MjBceDQwXHhjY1x4YzVceDUzXHg5MFx4MmZceGRjXHhiYlx4OGRceDUz XHg2OFx4MzRceDZhXHgzM1x4NmJceDMyXHg2YzwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmln aHQiPiBceDUxXHgyMFx4NDBceGNjXHhjNVx4NTNceDkwXHgyZlx4ZGNceGJiXHg4ZFx4NTNceDY4 XHgzNFx4NmFceDMzXHg2Ylx4MzJceDZjPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0 b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3Ai PjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gXHgzMlx4NmVceDM0XHg2Mlx4MzU8L3RkPjx0ZD4gPC90 ZD48dGQgY2xhc3M9InJpZ2h0Ij4gXHgzMlx4NmVceDM0XHg2Mlx4MzU8L3RkPjx0ZCBjbGFzcz0i bGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZD48YSBuYW1lPSJk aWZmMDAzOCI+PC9hPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFs aWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPiAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICA8L3RkPjx0 ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWdu PSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0 b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPiAgPHNwYW4gY2xhc3M9ImRlbGV0ZSI+Myk8L3Nw YW4+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPjwvdGQ+PHRkIGNsYXNzPSJsaW5l bm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8i IHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48c3BhbiBjbGFzcz0iZGVsZXRl Ij48L3NwYW4+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPjwvdGQ+PHRkIGNsYXNz PSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJs aW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48c3BhbiBjbGFzcz0i ZGVsZXRlIj4gIGhrZGYgaGFzaCBmdW5jdGlvbiA9IFNIQS0xLDwvc3Bhbj48L3RkPjx0ZD4gPC90 ZD48dGQgY2xhc3M9InJibG9jayI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3Ai PjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwv dGQ+PHRkIGNsYXNzPSJsYmxvY2siPjxzcGFuIGNsYXNzPSJkZWxldGUiPiAgdG9rZW4gZW5jcnlw dGlvbiBhbGdvcml0aG0gPSBBRVMtMTI4LUNCQzwvc3Bhbj48L3RkPjx0ZD4gPC90ZD48dGQgY2xh c3M9InJibG9jayI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90 cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNs YXNzPSJsYmxvY2siPjxzcGFuIGNsYXNzPSJkZWxldGUiPiAgdG9rZW4gYXV0aCBhbGdvcml0aG0g PSBITUFDLVNIQS0yNTYtMTI4PC9zcGFuPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2Nr Ij48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAg PHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9j ayI+PHNwYW4gY2xhc3M9ImRlbGV0ZSI+PC9zcGFuPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0i cmJsb2NrIj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0K ICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9 ImxibG9jayI+PHNwYW4gY2xhc3M9ImRlbGV0ZSI+ICBSZXN1bHQ6PC9zcGFuPjwvdGQ+PHRkPiA8 L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRv cCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+ PC90ZD48dGQgY2xhc3M9ImxibG9jayI+PHNwYW4gY2xhc3M9ImRlbGV0ZSI+PC9zcGFuPjwvdGQ+ PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxp Z249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249 InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+PHNwYW4gY2xhc3M9ImRlbGV0ZSI+ICBBU19S UyBrZXkgKDE2IGJ5dGVzKSA9IFx4MjJceDkzXHhkMVx4NFx4YWVceDI5XHg3M1x4M2VceGNkXHgx YVx4MThceGJkXHg1Nlx4NDVceDYzXHg2Nzwvc3Bhbj48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9 InJibG9jayI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4N CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNz PSJsYmxvY2siPjxzcGFuIGNsYXNzPSJkZWxldGUiPiAgQVVUSCBrZXkgKDMyIGJ5dGVzKSA9ICBc eDAwXHhkMlx4NzBceDc4XHg2MFx4YzdceDU0XHhiYlx4MzRceDNlXHg0Y1x4ZDBceGNjXHgwM1x4 NjZceDljPC9zcGFuPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48L3RkPjx0ZCBj bGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFz cz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+PHNwYW4gY2xh c3M9ImRlbGV0ZSI+ICAgICAgICAgICAgICAgICAgICAgICAgIFx4MmVceDFhXHg4OVx4ZTBceGVl XHg5N1x4YjdceDhlXHgzNlx4NGJceDc2XHhiMFx4MzlceDQ2XHgxOVx4NGE8L3NwYW4+PC90ZD48 dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGln bj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0i dG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48c3BhbiBjbGFzcz0iZGVsZXRlIj48L3NwYW4+ PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8i IHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZh bGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48c3BhbiBjbGFzcz0iZGVsZXRlIj4g IEVuY3J5cHRlZCB0b2tlbiAoNjQgYnl0ZXMgPSA0OCsxNikgPTwvc3Bhbj48L3RkPjx0ZD4gPC90 ZD48dGQgY2xhc3M9InJibG9jayI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3Ai PjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwv dGQ+PHRkIGNsYXNzPSJsYmxvY2siPjxzcGFuIGNsYXNzPSJkZWxldGUiPjwvc3Bhbj48L3RkPjx0 ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWdu PSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0 b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPjxzcGFuIGNsYXNzPSJkZWxldGUiPiAgXHhmOFx4 ZWZceDk1XHhkY1x4NmJceDM1XHg1MFx4OGFceDZhXHgzNlx4OGZceGQ5XHhkY1x4NTFceDkyXHgw Y1x4MzlceDJmXHhjYlx4ZjBceDFlPC9zcGFuPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJs b2NrIj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAg ICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9Imxi bG9jayI+PHNwYW4gY2xhc3M9ImRlbGV0ZSI+ICBceDJmXHg2Nlx4OGRceGJjXHg1MFx4YjhceDMw XHg3Y1x4ZDlceDA0XHhmNlx4MjdceGIwXHg5ZVx4NzNceGRjXHgxNVx4YzhceDk2XHhmYlx4NGU8 L3NwYW4+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPjwvdGQ+PHRkIGNsYXNzPSJs aW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5l bm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48c3BhbiBjbGFzcz0iZGVs ZXRlIj4gIFx4M2JceDViXHhlM1x4YzdceDU0XHgyMFx4YzBceGQyXHg5MFx4ODhceDA4XHgzZFx4 NzJceDljXHhkMlx4MTdceDY1XHg0M1x4OGZceGFhPC9zcGFuPjwvdGQ+PHRkPiA8L3RkPjx0ZCBj bGFzcz0icmJsb2NrIj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48 L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQg Y2xhc3M9ImxibG9jayI+PHNwYW4gY2xhc3M9ImRlbGV0ZSI+ICBceDQxXHg0ODwvc3Bhbj48L3Rk Pjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFs aWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWdu PSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPiAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICA8L3RkPjx0ZD4g PC90ZD48dGQgY2xhc3M9InJibG9jayI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0 b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3Ai PjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICAgICAgICAgICAgICAgICAgICAgICAgRmlndXJlIDU6 IFNhbXBsZSB0aWNrZXRzPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgICAgICAg ICAgICAgICAgICAgICAgIEZpZ3VyZSA1OiBTYW1wbGUgdGlja2V0czwvdGQ+PHRkIGNsYXNzPSJs aW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5l bm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+PC90ZD48dGQ+IDwvdGQ+PHRk IGNsYXNzPSJyaWdodCI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+ PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRk IGNsYXNzPSJsZWZ0Ij5BcHBlbmRpeCBCLiAgSW50ZXJhY3Rpb24gYmV0d2VlbiBjbGllbnQgYW5k IGF1dGhvcml6YXRpb24gc2VydmVyPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+QXBw ZW5kaXggQi4gIEludGVyYWN0aW9uIGJldHdlZW4gY2xpZW50IGFuZCBhdXRob3JpemF0aW9uIHNl cnZlcjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAg ICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVm dCI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+PC90ZD48dGQgY2xhc3M9ImxpbmVu byIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIg dmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBDbGllbnQgbWFrZXMgYW4gSFRU UCByZXF1ZXN0IHRvIGFuIGF1dGhvcml6YXRpb24gc2VydmVyIHRvIG9idGFpbiBhPC90ZD48dGQ+ IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgQ2xpZW50IG1ha2VzIGFuIEhUVFAgcmVxdWVzdCB0 byBhbiBhdXRob3JpemF0aW9uIHNlcnZlciB0byBvYnRhaW4gYTwvdGQ+PHRkIGNsYXNzPSJsaW5l bm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8i IHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgdG9rZW4gdGhhdCBjYW4gYmUg dXNlZCB0byBhdmFpbCBpdHNlbGYgb2YgU1RVTiBzZXJ2aWNlcy4gIFRoZSBTVFVOPC90ZD48dGQ+ IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgdG9rZW4gdGhhdCBjYW4gYmUgdXNlZCB0byBhdmFp bCBpdHNlbGYgb2YgU1RVTiBzZXJ2aWNlcy4gIFRoZSBTVFVOPC90ZD48dGQgY2xhc3M9ImxpbmVu byIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIg dmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICB0b2tlbiBpcyByZXR1cm5lZCBp biBKU09OIHN5bnRheCBbUkZDNzE1OV0sIGFsb25nIHdpdGggb3RoZXIgT0F1dGg8L3RkPjx0ZD4g PC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICB0b2tlbiBpcyByZXR1cm5lZCBpbiBKU09OIHN5bnRh eCBbUkZDNzE1OV0sIGFsb25nIHdpdGggb3RoZXIgT0F1dGg8L3RkPjx0ZCBjbGFzcz0ibGluZW5v IiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2 YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIDIuMCBwYXJhbWV0ZXJzIGxpa2Ug dG9rZW4gdHlwZSwga2V5LCB0b2tlbiBsaWZldGltZSBhbmQga2lkIGRlZmluZWQ8L3RkPjx0ZD4g PC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICAyLjAgcGFyYW1ldGVycyBsaWtlIHRva2VuIHR5cGUs IGtleSwgdG9rZW4gbGlmZXRpbWUgYW5kIGtpZCBkZWZpbmVkPC90ZD48dGQgY2xhc3M9ImxpbmVu byIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIg dmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBpbiBbSS1ELmlldGYtb2F1dGgt cG9wLWtleS1kaXN0cmlidXRpb25dLjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAg IGluIFtJLUQuaWV0Zi1vYXV0aC1wb3Ata2V5LWRpc3RyaWJ1dGlvbl0uPC90ZD48dGQgY2xhc3M9 ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9Imxp bmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij48L3RkPjx0ZD4gPC90ZD48 dGQgY2xhc3M9InJpZ2h0Ij48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90 ZD48L3RyPg0KDQogICAgIDx0cj48dGQ+PC90ZD48dGQgY2xhc3M9ImxlZnQiPjwvdGQ+PHRkPiA8 L3RkPjx0ZCBjbGFzcz0icmlnaHQiPjwvdGQ+PHRkPjwvdGQ+PC90cj4NCiAgICAgPHRyIGJnY29s b3I9ImdyYXkiPjx0aCBjb2xzcGFuPSI1IiBhbGlnbj0iY2VudGVyIj48YSBuYW1lPSJlbmQiPiZu YnNwO0VuZCBvZiBjaGFuZ2VzLiAzOCBjaGFuZ2UgYmxvY2tzLiZuYnNwOzwvYT48L3RoPjwvdHI+ DQogICAgIDx0ciBjbGFzcz0ic3RhdHMiPjx0ZD48L3RkPjx0aD48aT4xNDIgbGluZXMgY2hhbmdl ZCBvciBkZWxldGVkPC9pPjwvdGg+PHRoPjxpPiA8L2k+PC90aD48dGg+PGk+MTEwIGxpbmVzIGNo YW5nZWQgb3IgYWRkZWQ8L2k+PC90aD48dGQ+PC90ZD48L3RyPg0KICAgICA8dHI+PHRkIGNvbHNw YW49IjUiIGNsYXNzPSJzbWFsbCIgYWxpZ249ImNlbnRlciI+PGJyPlRoaXMgaHRtbCBkaWZmIHdh cyBwcm9kdWNlZCBieSByZmNkaWZmIDEuNDIuIFRoZSBsYXRlc3QgdmVyc2lvbiBpcyBhdmFpbGFi bGUgZnJvbSA8YSBocmVmPSJodHRwOi8vd3d3LnRvb2xzLmlldGYub3JnL3Rvb2xzL3JmY2RpZmYv Ij5odHRwOi8vdG9vbHMuaWV0Zi5vcmcvdG9vbHMvcmZjZGlmZi88L2E+IDwvdGQ+PC90cj4NCiAg IDwvdGJvZHk+PC90YWJsZT4NCiAgIA0KICAgDQpYLUdlbmVyYXRvcjogcHlodCAwLjM1DQoNCjwh LS0gYXJnczogeyctLW9sZGNvbG91cic6ICdyZWQnLCAnLS13aWR0aCc6ICcnLCAnZGlmZnR5cGUn OiAnLS1odG1sJywgJ2ZpbGVuYW1lMic6ICdcblxuXG5cblRSQU0gICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICBULiBSZWRkeVxuSW50ZXJu ZXQtRHJhZnQgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg IFAuIFBhdGlsXG5JbnRlbmRlZCBzdGF0dXM6IFN0YW5kYXJkcyBUcmFjayAgICAgICAgICAgICAg ICAgICAgICAgICBSLiBSYXZpbmRyYW5hdGhcbkV4cGlyZXM6IE9jdG9iZXIgMTAsIDIwMTUgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICBDaXNjb1xuICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgSi4gVWJl cnRpXG4gICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICBHb29nbGVcbiAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgQXByaWwgOCwgMjAxNVxuXG5cbiAgU2Vzc2lvbiBUcmF2 ZXJzYWwgVXRpbGl0aWVzIGZvciBOQVQgKFNUVU4pIEV4dGVuc2lvbiBmb3IgVGhpcmQgUGFydHlc biAgICAgICAgICAgICAgICAgICAgICAgICAgICAgQXV0aG9yaXphdGlvblxuICAgICAgICAgICAg ICAgZHJhZnQtaWV0Zi10cmFtLXR1cm4tdGhpcmQtcGFydHktYXV0aHotMTRcblxuQWJzdHJhY3Rc blxuICAgVGhpcyBkb2N1bWVudCBwcm9wb3NlcyB0aGUgdXNlIG9mIE9BdXRoIDIuMCB0byBvYnRh aW4gYW5kIHZhbGlkYXRlXG4gICBlcGhlbWVyYWwgdG9rZW5zIHRoYXQgY2FuIGJlIHVzZWQgZm9y IFNlc3Npb24gVHJhdmVyc2FsIFV0aWxpdGllcyBmb3JcbiAgIE5BVCAoU1RVTikgYXV0aGVudGlj YXRpb24uICBUaGUgdXNhZ2Ugb2YgZXBoZW1lcmFsIHRva2VucyBlbnN1cmVzXG4gICB0aGF0IGFj Y2VzcyB0byBhIFNUVU4gc2VydmVyIGNhbiBiZSBjb250cm9sbGVkIGV2ZW4gaWYgdGhlIHRva2Vu cyBhcmVcbiAgIGNvbXByb21pc2VkLlxuXG5TdGF0dXMgb2YgVGhpcyBNZW1vXG5cbiAgIFRoaXMg SW50ZXJuZXQtRHJhZnQgaXMgc3VibWl0dGVkIGluIGZ1bGwgY29uZm9ybWFuY2Ugd2l0aCB0aGVc biAgIHByb3Zpc2lvbnMgb2YgQkNQIDc4IGFuZCBCQ1AgNzkuXG5cbiAgIEludGVybmV0LURyYWZ0 cyBhcmUgd29ya2luZyBkb2N1bWVudHMgb2YgdGhlIEludGVybmV0IEVuZ2luZWVyaW5nXG4gICBU YXNrIEZvcmNlIChJRVRGKS4gIE5vdGUgdGhhdCBvdGhlciBncm91cHMgbWF5IGFsc28gZGlzdHJp YnV0ZVxuICAgd29ya2luZyBkb2N1bWVudHMgYXMgSW50ZXJuZXQtRHJhZnRzLiAgVGhlIGxpc3Qg b2YgY3VycmVudCBJbnRlcm5ldC1cbiAgIERyYWZ0cyBpcyBhdCBodHRwOi8vZGF0YXRyYWNrZXIu aWV0Zi5vcmcvZHJhZnRzL2N1cnJlbnQvLlxuXG4gICBJbnRlcm5ldC1EcmFmdHMgYXJlIGRyYWZ0 IGRvY3VtZW50cyB2YWxpZCBmb3IgYSBtYXhpbXVtIG9mIHNpeCBtb250aHNcbiAgIGFuZCBtYXkg YmUgdXBkYXRlZCwgcmVwbGFjZWQsIG9yIG9ic29sZXRlZCBieSBvdGhlciBkb2N1bWVudHMgYXQg YW55XG4gICB0aW1lLiAgSXQgaXMgaW5hcHByb3ByaWF0ZSB0byB1c2UgSW50ZXJuZXQtRHJhZnRz IGFzIHJlZmVyZW5jZVxuICAgbWF0ZXJpYWwgb3IgdG8gY2l0ZSB0aGVtIG90aGVyIHRoYW4gYXMg IndvcmsgaW4gcHJvZ3Jlc3MuIlxuXG4gICBUaGlzIEludGVybmV0LURyYWZ0IHdpbGwgZXhwaXJl IG9uIE9jdG9iZXIgMTAsIDIwMTUuXG5cbkNvcHlyaWdodCBOb3RpY2VcblxuICAgQ29weXJpZ2h0 IChjKSAyMDE1IElFVEYgVHJ1c3QgYW5kIHRoZSBwZXJzb25zIGlkZW50aWZpZWQgYXMgdGhlXG4g ICBkb2N1bWVudCBhdXRob3JzLiAgQWxsIHJpZ2h0cyByZXNlcnZlZC5cblxuICAgVGhpcyBkb2N1 bWVudCBpcyBzdWJqZWN0IHRvIEJDUCA3OCBhbmQgdGhlIElFVEYgVHJ1c3RcJ3MgTGVnYWxcbiAg IFByb3Zpc2lvbnMgUmVsYXRpbmcgdG8gSUVURiBEb2N1bWVudHNcbiAgIChodHRwOi8vdHJ1c3Rl ZS5pZXRmLm9yZy9saWNlbnNlLWluZm8pIGluIGVmZmVjdCBvbiB0aGUgZGF0ZSBvZlxuICAgcHVi bGljYXRpb24gb2YgdGhpcyBkb2N1bWVudC4gIFBsZWFzZSByZXZpZXcgdGhlc2UgZG9jdW1lbnRz XG4gICBjYXJlZnVsbHksIGFzIHRoZXkgZGVzY3JpYmUgeW91ciByaWdodHMgYW5kIHJlc3RyaWN0 aW9ucyB3aXRoIHJlc3BlY3RcblxuXG5cblJlZGR5LCBldCBhbC4gICAgICAgICAgIEV4cGlyZXMg T2N0b2JlciAxMCwgMjAxNSAgICAgICAgICAgICAgICBbUGFnZSAxXVxuX1xuSW50ZXJuZXQtRHJh ZnQgICAgICBTVFVOIGZvciAzcmQgcGFydHkgQXV0aG9yaXphdGlvbiAgICAgICAgICBBcHJpbCAy MDE1XG5cblxuICAgdG8gdGhpcyBkb2N1bWVudC4gIENvZGUgQ29tcG9uZW50cyBleHRyYWN0ZWQg ZnJvbSB0aGlzIGRvY3VtZW50IG11c3RcbiAgIGluY2x1ZGUgU2ltcGxpZmllZCBCU0QgTGljZW5z ZSB0ZXh0IGFzIGRlc2NyaWJlZCBpbiBTZWN0aW9uIDQuZSBvZlxuICAgdGhlIFRydXN0IExlZ2Fs IFByb3Zpc2lvbnMgYW5kIGFyZSBwcm92aWRlZCB3aXRob3V0IHdhcnJhbnR5IGFzXG4gICBkZXNj cmliZWQgaW4gdGhlIFNpbXBsaWZpZWQgQlNEIExpY2Vuc2UuXG5cblRhYmxlIG9mIENvbnRlbnRz XG5cbiAgIDEuICBJbnRyb2R1Y3Rpb24gIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4g LiAuIC4gLiAuIC4gLiAuICAgMlxuICAgMi4gIFRlcm1pbm9sb2d5IC4gLiAuIC4gLiAuIC4gLiAu IC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gICAzXG4gICAzLiAgU29sdXRpb24gT3Zl cnZpZXcgLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAgIDNcbiAg IDQuICBPYnRhaW5pbmcgYSBUb2tlbiBVc2luZyBPQXV0aCAuIC4gLiAuIC4gLiAuIC4gLiAuIC4g LiAuIC4gLiAuICAgNFxuICAgICA0LjEuICBLZXkgRXN0YWJsaXNobWVudCAuIC4gLiAuIC4gLiAu IC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gICA0XG4gICAgICAgNC4xLjEuICBIVFRQIGludGVy YWN0aW9ucyAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAgIDVcbiAgICAgICA0 LjEuMi4gIE1hbnVhbCBwcm92aXNpb25pbmcgLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4g LiAuICAgNlxuICAgNS4gIEZvcm1pbmcgYSBSZXF1ZXN0IC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAu IC4gLiAuIC4gLiAuIC4gLiAuIC4gICA2XG4gICA2LiAgU1RVTiBBdHRyaWJ1dGVzIC4gLiAuIC4g LiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAgIDZcbiAgICAgNi4xLiAgVEhJ UkQtUEFSVFktQVVUSE9SSVpBVElPTiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuICAg N1xuICAgICA2LjIuICBBQ0NFU1MtVE9LRU4gIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAu IC4gLiAuIC4gLiAuIC4gICA3XG4gICA3LiAgU1RVTiBTZXJ2ZXIgQmVoYXZpb3VyIC4gLiAuIC4g LiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAgIDlcbiAgIDguICBTVFVOIENsaWVudCBC ZWhhdmlvdXIgLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuICAxMFxuICAg OS4gIFVzYWdlIHdpdGggVFVSTiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAu IC4gLiAuIC4gIDEwXG4gICAxMC4gT3BlcmF0aW9uYWwgQ29uc2lkZXJhdGlvbnMgIC4gLiAuIC4g LiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAgMTRcbiAgIDExLiBTZWN1cml0eSBDb25zaWRlcmF0 aW9ucyAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuICAxNFxuICAgMTIuIElB TkEgQ29uc2lkZXJhdGlvbnMgLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAu IC4gIDE1XG4gICAxMy4gQWNrbm93bGVkZ2VtZW50cyAgLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4g LiAuIC4gLiAuIC4gLiAuIC4gLiAgMTVcbiAgIDE0LiBSZWZlcmVuY2VzICAuIC4gLiAuIC4gLiAu IC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuICAxNVxuICAgICAxNC4xLiAgTm9y bWF0aXZlIFJlZmVyZW5jZXMgLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gIDE2 XG4gICAgIDE0LjIuICBJbmZvcm1hdGl2ZSBSZWZlcmVuY2VzIC4gLiAuIC4gLiAuIC4gLiAuIC4g LiAuIC4gLiAuIC4gLiAgMTZcbiAgIEFwcGVuZGl4IEEuICBTYW1wbGUgdGlja2V0cyAuIC4gLiAu IC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuICAxOFxuICAgQXBwZW5kaXggQi4gIEludGVy YWN0aW9uIGJldHdlZW4gY2xpZW50IGFuZCBhdXRob3JpemF0aW9uIHNlcnZlciAgIDIwXG4gICBB dXRob3JzXCcgQWRkcmVzc2VzICAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAu IC4gLiAuIC4gIDIyXG5cbjEuICBJbnRyb2R1Y3Rpb25cblxuICAgU2Vzc2lvbiBUcmF2ZXJzYWwg VXRpbGl0aWVzIGZvciBOQVQgKFNUVU4pIFtSRkM1Mzg5XSBwcm92aWRlcyBhXG4gICBtZWNoYW5p c20gdG8gY29udHJvbCBhY2Nlc3MgdmlhICJsb25nLXRlcm0iIHVzZXJuYW1lLyBwYXNzd29yZFxu ICAgY3JlZGVudGlhbHMgdGhhdCBhcmUgcHJvdmlkZWQgYXMgcGFydCBvZiB0aGUgU1RVTiBwcm90 b2NvbC4gIEl0IGlzXG4gICBleHBlY3RlZCB0aGF0IHRoZXNlIGNyZWRlbnRpYWxzIHdpbGwgYmUg a2VwdCBzZWNyZXQ7IGlmIHRoZVxuICAgY3JlZGVudGlhbHMgYXJlIGRpc2NvdmVyZWQsIHRoZSBT VFVOIHNlcnZlciBjb3VsZCBiZSB1c2VkIGJ5XG4gICB1bmF1dGhvcml6ZWQgdXNlcnMgb3IgYXBw bGljYXRpb25zLiAgSG93ZXZlciwgaW4gd2ViIGFwcGxpY2F0aW9uc1xuICAgbGlrZSBXZWJSVEMg W0ktRC5pZXRmLXJ0Y3dlYi1vdmVydmlld10gd2hlcmUgSmF2YVNjcmlwdCB1c2VzIHRoZVxuICAg YnJvd3NlciBmdW5jdGlvbmFsaXR5IHRvIG1ha2UgcmVhbC10aW1lIGF1ZGlvIGFuZC9vciB2aWRl byBjYWxscywgV2ViXG4gICBjb25mZXJlbmNpbmcsIGFuZCBkaXJlY3QgZGF0YSB0cmFuc2Zlciwg ZW5zdXJpbmcgdGhpcyBzZWNyZWN5IGlzXG4gICB0eXBpY2FsbHkgbm90IHBvc3NpYmxlLlxuXG4g ICBUbyBhZGRyZXNzIHRoaXMgcHJvYmxlbSBhbmQgdGhlIG9uZXMgZGVzY3JpYmVkIGluIFtSRkM3 Mzc2XSwgdGhpc1xuICAgZG9jdW1lbnQgcHJvcG9zZXMgdGhlIHVzZSBvZiB0aGlyZCBwYXJ0eSBh dXRob3JpemF0aW9uIHVzaW5nIE9BdXRoXG4gICAyLjAgW1JGQzY3NDldIGZvciBTVFVOLiAgVXNp bmcgT0F1dGggMi4wLCBhIGNsaWVudCBvYnRhaW5zIGFuXG5cblxuXG5SZWRkeSwgZXQgYWwuICAg ICAgICAgICBFeHBpcmVzIE9jdG9iZXIgMTAsIDIwMTUgICAgICAgICAgICAgICAgW1BhZ2UgMl1c bl9cbkludGVybmV0LURyYWZ0ICAgICAgU1RVTiBmb3IgM3JkIHBhcnR5IEF1dGhvcml6YXRpb24g ICAgICAgICAgQXByaWwgMjAxNVxuXG5cbiAgIGVwaGVtZXJhbCB0b2tlbiBmcm9tIGFuIGF1dGhv cml6YXRpb24gc2VydmVyIGUuZy4gIFdlYlJUQyBzZXJ2ZXIsIGFuZFxuICAgdGhlIHRva2VuIGlz IHByZXNlbnRlZCB0byB0aGUgU1RVTiBzZXJ2ZXIgaW5zdGVhZCBvZiB0aGUgdHJhZGl0aW9uYWxc biAgIG1lY2hhbmlzbSBvZiBwcmVzZW50aW5nIHVzZXJuYW1lL3Bhc3N3b3JkIGNyZWRlbnRpYWxz LiAgVGhlIFNUVU5cbiAgIHNlcnZlciB2YWxpZGF0ZXMgdGhlIGF1dGhlbnRpY2l0eSBvZiB0aGUg dG9rZW4gYW5kIHByb3ZpZGVzIHJlcXVpcmVkXG4gICBzZXJ2aWNlcy4gIFRoaXJkIHBhcnR5IGF1 dGhvcml6YXRpb24gdXNpbmcgT0F1dGggMi4wIGZvciBTVFVOXG4gICBleHBsYWluZWQgaW4gdGhp cyBzcGVjaWZpY2F0aW9uIGNhbiBhbHNvIGJlIHVzZWQgd2l0aCBUcmF2ZXJzYWwgVXNpbmdcbiAg IFJlbGF5cyBhcm91bmQgTkFUIChUVVJOKSBbUkZDNTc2Nl0uXG5cbjIuICBUZXJtaW5vbG9neVxu XG4gICBUaGUga2V5IHdvcmRzICJNVVNUIiwgIk1VU1QgTk9UIiwgIlJFUVVJUkVEIiwgIlNIQUxM IiwgIlNIQUxMIE5PVCIsXG4gICAiU0hPVUxEIiwgIlNIT1VMRCBOT1QiLCAiUkVDT01NRU5ERUQi LCAiTUFZIiwgYW5kICJPUFRJT05BTCIgaW4gdGhpc1xuICAgZG9jdW1lbnQgYXJlIHRvIGJlIGlu dGVycHJldGVkIGFzIGRlc2NyaWJlZCBpbiBbUkZDMjExOV0uXG5cbiAgIG8gIFdlYlJUQyBTZXJ2 ZXI6IEEgd2ViIHNlcnZlciB0aGF0IHN1cHBvcnRzIFdlYlJUQ1xuICAgICAgW0ktRC5pZXRmLXJ0 Y3dlYi1vdmVydmlld10uXG5cbiAgIG8gIEFjY2VzcyBUb2tlbjogT0F1dGggMi4wIGFjY2VzcyB0 b2tlbi5cblxuICAgbyAgbWFjX2tleTogVGhlIHNlc3Npb24ga2V5IGdlbmVyYXRlZCBieSB0aGUg YXV0aG9yaXphdGlvbiBzZXJ2ZXIuXG4gICAgICBUaGlzIHNlc3Npb24ga2V5IGhhcyBhIGxpZmV0 aW1lIHRoYXQgY29ycmVzcG9uZHMgdG8gdGhlIGxpZmV0aW1lXG4gICAgICBvZiB0aGUgYWNjZXNz IHRva2VuLCBpcyBnZW5lcmF0ZWQgYnkgdGhlIGF1dGhvcml6YXRpb24gc2VydmVyIGFuZFxuICAg ICAgYm91bmQgdG8gdGhlIGFjY2VzcyB0b2tlbi5cblxuICAgbyAga2lkOiBBbiBlcGhlbWVyYWwg YW5kIHVuaXF1ZSBrZXkgaWRlbnRpZmllci4gIFRoZSBraWQgYWxzbyBhbGxvd3NcbiAgICAgIHRo ZSByZXNvdXJjZSBzZXJ2ZXIgdG8gc2VsZWN0IHRoZSBhcHByb3ByaWF0ZSBrZXlpbmcgbWF0ZXJp YWwgZm9yXG4gICAgICBkZWNyeXB0aW9uLlxuXG4gICBTb21lIHNlY3Rpb25zIGluIHRoaXMgc3Bl Y2lmaWNhdGlvbiBzaG93IFdlYlJUQyBzZXJ2ZXIgYXMgdGhlXG4gICBhdXRob3JpemF0aW9uIHNl cnZlciBhbmQgY2xpZW50IGFzIHRoZSBXZWJSVEMgY2xpZW50LCBob3dldmVyIFdlYlJUQ1xuICAg aXMgaW50ZW5kZWQgdG8gYmUgdXNlZCBmb3IgaWxsdXN0cmF0aXZlIHB1cnBvc2Ugb25seS5cblxu My4gIFNvbHV0aW9uIE92ZXJ2aWV3XG5cbiAgIFNUVU4gY2xpZW50IGtub3dzIHRoYXQgaXQgY2Fu IHVzZSBPQXV0aCAyLjAgd2l0aCB0aGUgdGFyZ2V0IFNUVU5cbiAgIHNlcnZlciBlaXRoZXIgdGhy b3VnaCBjb25maWd1cmF0aW9uIG9yIHdoZW4gaXQgcmVjZWl2ZXMgdGhlIG5ldyBTVFVOXG4gICBh dHRyaWJ1dGUgVEhJUkQtUEFSVFktQVVUSE9SSVpBVElPTiBpbiB0aGUgZXJyb3IgcmVzcG9uc2Ug d2l0aCBhblxuICAgZXJyb3IgY29kZSBvZiA0MDEoVW5hdXRob3JpemVkKS5cblxuICAgVGhpcyBz cGVjaWZpY2F0aW9uIHVzZXMgdGhlIHRva2VuIHR5cGUgXCdBc3NlcnRpb25cJyAoYWthIHNlbGYt XG4gICBjb250YWluZWQgdG9rZW4pIGRlc2NyaWJlZCBpbiBbUkZDNjgxOV0gd2hlcmUgYWxsIHRo ZSBpbmZvcm1hdGlvblxuICAgbmVjZXNzYXJ5IHRvIGF1dGhlbnRpY2F0ZSB0aGUgdmFsaWRpdHkg b2YgdGhlIHRva2VuIGlzIGNvbnRhaW5lZFxuICAgd2l0aGluIHRoZSB0b2tlbiBpdHNlbGYuICBU aGlzIGFwcHJvYWNoIGhhcyB0aGUgYmVuZWZpdCBvZiBhdm9pZGluZyBhXG4gICBwcm90b2NvbCBi ZXR3ZWVuIHRoZSBTVFVOIHNlcnZlciBhbmQgdGhlIGF1dGhvcml6YXRpb24gc2VydmVyIGZvclxu ICAgdG9rZW4gdmFsaWRhdGlvbiwgdGh1cyByZWR1Y2luZyBsYXRlbmN5LiAgVGhlIGNvbnRlbnQg b2YgdGhlIHRva2VuIGlzXG4gICBvcGFxdWUgdG8gdGhlIGNsaWVudC4gIFRoZSBjbGllbnQgZW1i ZWRzIHRoZSB0b2tlbiB3aXRoaW4gYSBTVFVOXG4gICByZXF1ZXN0IHNlbnQgdG8gdGhlIFNUVU4g c2VydmVyLiAgT25jZSB0aGUgU1RVTiBzZXJ2ZXIgaGFzIGRldGVybWluZWRcbiAgIHRoZSB0b2tl biBpcyB2YWxpZCwgaXRzIHNlcnZpY2VzIGFyZSBvZmZlcmVkIGZvciBhIGRldGVybWluZWQgcGVy aW9kXG5cblxuXG5SZWRkeSwgZXQgYWwuICAgICAgICAgICBFeHBpcmVzIE9jdG9iZXIgMTAsIDIw MTUgICAgICAgICAgICAgICAgW1BhZ2UgM11cbl9cbkludGVybmV0LURyYWZ0ICAgICAgU1RVTiBm b3IgM3JkIHBhcnR5IEF1dGhvcml6YXRpb24gICAgICAgICAgQXByaWwgMjAxNVxuXG5cbiAgIG9m IHRpbWUuICBBY2Nlc3MgdG9rZW4gaXNzdWVkIGJ5IHRoZSBhdXRob3JpemF0aW9uIHNlcnZlciBp c1xuICAgZXhwbGFpbmVkIGluIFNlY3Rpb24gNi4yLiAgT0F1dGggMi4wIGluIFtSRkM2NzQ5XSBk ZWZpbmVzIGZvdXIgZ3JhbnRcbiAgIHR5cGVzLiAgVGhpcyBzcGVjaWZpY2F0aW9uIHVzZXMgdGhl IE9BdXRoIDIuMCBncmFudCB0eXBlICJJbXBsaWNpdCJcbiAgIGV4cGxhaW5lZCBpbiBzZWN0aW9u IDEuMy4yIG9mIFtSRkM2NzQ5XSB3aGVyZSB0aGUgY2xpZW50IGlzIGlzc3VlZCBhblxuICAgYWNj ZXNzIHRva2VuIGRpcmVjdGx5LiAgVGhlIHN0cmluZyBcJ3N0dW5cJyBpcyBkZWZpbmVkIGJ5IHRo aXNcbiAgIHNwZWNpZmljYXRpb24gZm9yIHVzZSBhcyB0aGUgT0F1dGggc2NvcGUgcGFyYW1ldGVy IChzZWUgc2VjdGlvbiAzLjNcbiAgIG9mIFtSRkM2NzQ5XSkgZm9yIHRoZSBPQXV0aCB0b2tlbi5c blxuICAgVGhlIGV4YWN0IG1lY2hhbmlzbSB1c2VkIGJ5IGEgY2xpZW50IHRvIG9idGFpbiBhIHRv a2VuIGZyb20gdGhlIE9BdXRoXG4gICAyLjAgYXV0aG9yaXphdGlvbiBzZXJ2ZXIgaXMgb3V0c2lk ZSB0aGUgc2NvcGUgb2YgdGhpcyBkb2N1bWVudC5cbiAgIEFwcGVuZGl4IEIgcHJvdmlkZXMgYW4g ZXhhbXBsZSBkZXBsb3ltZW50IHNjZW5hcmlvIG9mIGludGVyYWN0aW9uXG4gICBiZXR3ZWVuIHRo ZSBjbGllbnQgYW5kIGF1dGhvcml6YXRpb24gc2VydmVyIHRvIG9idGFpbiBhIHRva2VuLlxuXG40 LiAgT2J0YWluaW5nIGEgVG9rZW4gVXNpbmcgT0F1dGhcblxuICAgQSBTVFVOIGNsaWVudCBuZWVk cyB0byBrbm93IHRoZSBhdXRoZW50aWNhdGlvbiBjYXBhYmlsaXR5IG9mIHRoZSBTVFVOXG4gICBz ZXJ2ZXIgYmVmb3JlIGRlY2lkaW5nIHRvIHVzZSB0aGlyZCBwYXJ0eSBhdXRob3JpemF0aW9uLiAg QSBTVFVOXG4gICBjbGllbnQgaW5pdGlhbGx5IG1ha2VzIGEgcmVxdWVzdCB3aXRob3V0IGFueSBh dXRob3JpemF0aW9uLiAgSWYgdGhlXG4gICBTVFVOIHNlcnZlciBzdXBwb3J0cyB0aGlyZCBwYXJ0 eSBhdXRob3JpemF0aW9uLCBpdCB3aWxsIHJldHVybiBhblxuICAgZXJyb3IgbWVzc2FnZSBpbmRp Y2F0aW5nIHRoYXQgdGhlIGNsaWVudCBjYW4gYXV0aG9yaXplIHRvIHRoZSBTVFVOXG4gICBzZXJ2 ZXIgdXNpbmcgYW4gT0F1dGggMi4wIGFjY2VzcyB0b2tlbi4gIFRoZSBTVFVOIHNlcnZlciBpbmNs dWRlcyBhblxuICAgRVJST1ItQ09ERSBhdHRyaWJ1dGUgd2l0aCBhIHZhbHVlIG9mIDQwMSAoVW5h dXRob3JpemVkKSwgYSBub25jZVxuICAgdmFsdWUgaW4gYSBOT05DRSBhdHRyaWJ1dGUgYW5kIGEg U09GVFdBUkUgYXR0cmlidXRlIHRoYXQgZ2l2ZXNcbiAgIGluZm9ybWF0aW9uIGFib3V0IHRoZSBT VFVOIHNlcnZlclwncyBzb2Z0d2FyZS4gIFRoZSBTVFVOIHNlcnZlciBhbHNvXG4gICBpbmNsdWRl cyB0aGUgYWRkaXRpb25hbCBTVFVOIGF0dHJpYnV0ZSBUSElSRC1QQVJUWS1BVVRIT1JJWkFUSU9O XG4gICBzaWduYWxpbmcgdGhlIFNUVU4gY2xpZW50IHRoYXQgdGhlIFNUVU4gc2VydmVyIHN1cHBv cnRzIHRoaXJkIHBhcnR5XG4gICBhdXRob3JpemF0aW9uLlxuXG4gICBOb3RlOiBBbiBpbXBsZW1l bnRhdGlvbiBtYXkgY2hvb3NlIHRvIGNvbnRhY3QgdGhlIGF1dGhvcml6YXRpb25cbiAgIHNlcnZl ciB0byBvYnRhaW4gYSB0b2tlbiBldmVuIGJlZm9yZSBpdCBtYWtlcyBhIFNUVU4gcmVxdWVzdCwg aWYgaXRcbiAgIGtub3dzIHRoZSBzZXJ2ZXIgZGV0YWlscyBiZWZvcmUgaGFuZC4gIEZvciBleGFt cGxlLCBvbmNlIGEgY2xpZW50IGhhc1xuICAgbGVhcm50IHRoYXQgYSBTVFVOIHNlcnZlciBzdXBw b3J0cyB0aGlyZCBwYXJ0eSBhdXRob3JpemF0aW9uIGZyb20gYVxuICAgYXV0aG9yaXphdGlvbiBz ZXJ2ZXIsIHRoZSBjbGllbnQgY2FuIG9idGFpbiB0aGUgdG9rZW4gYmVmb3JlIG1ha2luZ1xuICAg c3Vic2VxdWVudCBTVFVOIHJlcXVlc3RzLlxuXG40LjEuICBLZXkgRXN0YWJsaXNobWVudFxuXG4g ICBUaGUgYXV0aG9yaXphdGlvbiBzZXJ2ZXIgc2hhcmVzIGEgbG9uZy10ZXJtIHNlY3JldCAobGlr ZSBhc3ltbWV0cmljXG4gICBjcmVkZW50aWFscykgd2l0aCB0aGUgU1RVTiBzZXJ2ZXIgZm9yIG11 dHVhbCBhdXRoZW50aWNhdGlvbi5cbiAgIFN5bW1ldHJpYy1rZXkgYWxnb3JpdGhtIHdpdGggSGFz aCBiYXNlZCBNZXNzYWdlIEF1dGhlbnRpY2F0aW9uIENvZGVzXG4gICAoSE1BQ3MpIE1VU1QgYmUg Y2hvc2VuIHRvIGVuc3VyZSB0aGF0IHRoZSBzaXplIG9mIGVuY3J5cHRlZCB0b2tlbiBpc1xuICAg bm90IGxhcmdlIGJlY2F1c2UgdXNhZ2Ugb2YgYXN5bW1ldHJpYyBrZXlzIHdpbGwgcmVzdWx0IGlu IGxhcmdlXG4gICBlbmNyeXB0ZWQgdG9rZW5zIHdoaWNoIG1heSBub3QgZml0IGludG8gYSBzaW5n bGUgU1RVTiBtZXNzYWdlLlxuXG4gICBUaGUgU1RVTiBzZXJ2ZXIgYW5kIGF1dGhvcml6YXRpb24g c2VydmVyIGNhbiBlc3RhYmxpc2ggYSBzeW1tZXRyaWNcbiAgIGtleSAoSykgYW5kIGNlcnRhaW4g YXV0aGVudGljYXRlZCBlbmNyeXB0aW9uIGFsZ29yaXRobSwgdXNpbmcgYW4gb3V0XG4gICBvZiBi YW5kIG1lY2hhbmlzbS4gIElmIHN5bW1ldHJpYyBrZXkgaXMgdXNlZCB0aGVuIHRoZSBBUy1SUyBh bmQgQVVUSFxuICAga2V5cyB3aWxsIGJlIGRlcml2ZWQgZnJvbSBLLiAgVGhlIEFTLVJTIGtleSBp cyB1c2VkIGZvciBlbmNyeXB0aW5nXG5cblxuXG5SZWRkeSwgZXQgYWwuICAgICAgICAgICBFeHBp cmVzIE9jdG9iZXIgMTAsIDIwMTUgICAgICAgICAgICAgICAgW1BhZ2UgNF1cbl9cbkludGVybmV0 LURyYWZ0ICAgICAgU1RVTiBmb3IgM3JkIHBhcnR5IEF1dGhvcml6YXRpb24gICAgICAgICAgQXBy aWwgMjAxNVxuXG5cbiAgIHRoZSBzZWxmLWNvbnRhaW5lZCB0b2tlbiBhbmQgdGhlIG1lc3NhZ2Ug aW50ZWdyaXR5IG9mIHRoZSBlbmNyeXB0ZWRcbiAgIHRva2VuIGlzIGNhbGN1bGF0ZWQgdXNpbmcg dGhlIEFVVEgga2V5LiAgVGhlIFNUVU4gYW5kIGF1dGhvcml6YXRpb25cbiAgIHNlcnZlcnMgTVVT VCBlc3RhYmxpc2ggdGhlIHN5bW1ldHJpYyBrZXkgb3ZlciBhbiBhdXRoZW50aWNhdGVkIHNlY3Vy ZVxuICAgY2hhbm5lbC5cblxuICAgVGhlIHByb2NlZHVyZSBmb3IgZXN0YWJsaXNobWVudCBvZiB0 aGUgc3ltbWV0cmljIGtleSBpcyBvdXRzaWRlIHRoZVxuICAgc2NvcGUgb2YgdGhpcyBzcGVjaWZp Y2F0aW9uLCBhbmQgdGhpcyBzcGVjaWZpY2F0aW9uIGRvZXMgbm90IG1hbmRhdGVcbiAgIHN1cHBv cnQgb2YgYW55IGdpdmVuIG1lY2hhbmlzbS4gIFNlY3Rpb24gNC4xLjEgYW5kIFNlY3Rpb24gNC4x LjIgc2hvd1xuICAgZXhhbXBsZXMgb2YgbWVjaGFuaXNtcyB0aGF0IGNhbiBiZSB1c2VkLlxuXG40 LjEuMS4gIEhUVFAgaW50ZXJhY3Rpb25zXG5cbiAgIFRoZSBTVFVOIGFuZCBBUyBzZXJ2ZXJzIGNv dWxkIGNob29zZSB0byB1c2UgUkVTVCBBUEkgb3ZlciBIVFRQUyB0b1xuICAgZXN0YWJsaXNoIGEg c3ltbWV0cmljIGtleS4gIEhUVFBTIE1VU1QgYmUgdXNlZCBmb3IgbXV0dWFsXG4gICBhdXRoZW50 aWNhdGlvbiBhbmQgY29uZmlkZW50aWFsaXR5LiAgVG8gcmV0cmlldmUgYSBuZXcgc3ltbWV0cmlj IGtleSxcbiAgIHRoZSBTVFVOIHNlcnZlciBtYWtlcyBhbiBIVFRQIEdFVCByZXF1ZXN0IHRvIHRo ZSBhdXRob3JpemF0aW9uXG4gICBzZXJ2ZXIsIHNwZWNpZnlpbmcgU1RVTiBhcyB0aGUgc2Vydmlj ZSB0byBhbGxvY2F0ZSB0aGUgc3ltbWV0cmljIGtleXNcbiAgIGZvciwgYW5kIHNwZWNpZnlpbmcg dGhlIG5hbWUgb2YgdGhlIFNUVU4gc2VydmVyLiAgVGhlIHJlc3BvbnNlIGlzXG4gICByZXR1cm5l ZCB3aXRoIGNvbnRlbnQtdHlwZSAiYXBwbGljYXRpb24vanNvbiIsIGFuZCBjb25zaXN0cyBvZiBh XG4gICBKYXZhU2NyaXB0IE9iamVjdCBOb3RhdGlvbiAoSlNPTikgW1JGQzcxNTldIG9iamVjdCBj b250YWluaW5nIHRoZVxuICAgc3ltbWV0cmljIGtleS5cblxuICAgUmVxdWVzdFxuICAgLS0tLS0t LVxuXG4gICBzZXJ2aWNlIC0gc3BlY2lmaWVzIHRoZSBkZXNpcmVkIHNlcnZpY2UgKHR1cm4pXG4g ICBuYW1lICAgIC0gIFNUVU4gc2VydmVyIG5hbWUgYmUgYXNzb2NpYXRlZCB3aXRoIHRoZSBrZXlc blxuICAgZXhhbXBsZTogR0VUIC8/c2VydmljZT1zdHVuX25hbWU9dHVybjFAZXhhbXBsZS5jb21c blxuXG4gICBSZXNwb25zZVxuICAgLS0tLS0tLS1cblxuICAgayAtIExvbmctdGVybSBrZXkgKEsp XG4gICBleHAgLSBpZGVudGlmaWVzIHRoZSB0aW1lIGFmdGVyIHdoaWNoIHRoZSBrZXkgZXhwaXJl cy5cblxuXG4gICBleGFtcGxlOlxuICAge1xuICAgICAgImsiIDpcbiAgICJFU0l6UkZWbWQ0aVpB QkVpTTBSVlpnS242V2pMYVRDMUZYQWdoUk1WVHprQkdOYWFONDk2NTIzV0lJU0tlckxpXG4gICAg MXFPT2twWndBSW13RVh5ZGRQeVBHc0JNL3dwNE1GaDNqSVlUcGJnZUxxVk02bEludU8zWTY3enZQ ak40K2hndiIsXG4gICAgICAiZXhwIiA6IDEzMDA4MTkzODAsXG4gICAgICAia2lkIiA6IjIyQklq eFU5M2gvSWd3RWIiXG4gICAgICAiZW5jIiA6IEEyNTZDQkMtSFM1MTJcbiAgICAgfVxuXG5cblxu XG5SZWRkeSwgZXQgYWwuICAgICAgICAgICBFeHBpcmVzIE9jdG9iZXIgMTAsIDIwMTUgICAgICAg ICAgICAgICAgW1BhZ2UgNV1cbl9cbkludGVybmV0LURyYWZ0ICAgICAgU1RVTiBmb3IgM3JkIHBh cnR5IEF1dGhvcml6YXRpb24gICAgICAgICAgQXByaWwgMjAxNVxuXG5cbiAgIFRoZSBhdXRob3Jp emF0aW9uIHNlcnZlciBtdXN0IGFsc28gc2lnbmFsIGtpZCB0byB0aGUgU1RVTiBzZXJ2ZXJcbiAg IHdoaWNoIHdpbGwgYmUgdXNlZCB0byBzZWxlY3QgdGhlIGFwcHJvcHJpYXRlIGtleWluZyBtYXRl cmlhbCBmb3JcbiAgIGRlY3J5cHRpb24uICBUaGUgcGFyYW1ldGVyICJrIiBpcyBkZWZpbmVkIGlu IFNlY3Rpb24gNi40LjEgb2ZcbiAgIFtJLUQuaWV0Zi1qb3NlLWpzb24td2ViLWFsZ29yaXRobXNd LCAiZW5jIiBpcyBkZWZpbmVkIGluXG4gICBTZWN0aW9uIDQuMS4yIG9mIFtJLUQuaWV0Zi1qb3Nl LWpzb24td2ViLWVuY3J5cHRpb25dLCAia2lkIiBpc1xuICAgZGVmaW5lZCBpbiBTZWN0aW9uIDQu MS40IG9mIFtJLUQuaWV0Zi1qb3NlLWpzb24td2ViLXNpZ25hdHVyZV0gYW5kXG4gICAiZXhwIiBp cyBkZWZpbmVkIGluIFNlY3Rpb24gNC4xLjQgb2YgW0ktRC5pZXRmLW9hdXRoLWpzb24td2ViLXRv a2VuXS5cbiAgIEEyNTZDQkMtSFM1MTIgYW5kIG90aGVyIGF1dGhlbnRpY2F0ZWQgZW5jcnlwdGlv biBhbGdvcml0aG1zIGFyZVxuICAgZGVmaW5lZCBpbiBbSS1ELmlldGYtam9zZS1qc29uLXdlYi1h bGdvcml0aG1zXS4gIEluIHRoaXMgY2FzZSB0aGUgQVMtXG4gICBSUyBhbmQgQVVUSCBrZXlzIGFy ZSBkZXJpdmVkIGZyb20gSyB1c2luZyB0aGUgbWVjaGFuaXNtIGV4cGxhaW5lZCBpblxuICAgc2Vj dGlvbiA1LjIuMi4xIG9mIFtJLUQuaWV0Zi1qb3NlLWpzb24td2ViLWFsZ29yaXRobXNdLiAgQVMt UlMga2V5XG4gICBsZW5ndGggbXVzdCBiZSAyNTYtYml0LCBBVVRIIGtleSBsZW5ndGggbXVzdCBi ZSAyNTYtYml0IChzZWN0aW9uIDIuNlxuICAgb2YgW1JGQzQ4NjhdKS4gIEEgU1RVTiBzZXJ2ZXIg YW5kIGF1dGhvcml6YXRpb24gc2VydmVyIGltcGxlbWVudGF0aW9uXG4gICBNVVNUIHN1cHBvcnQg QTI1NkdDTUtXIChleHBsYWluZWQgaW5cbiAgIFtJLUQuaWV0Zi1qb3NlLWpzb24td2ViLWFsZ29y aXRobXNdKSBhcyB0aGUgYXV0aGVudGljYXRlZCBlbmNyeXB0aW9uXG4gICBhbGdvcml0aG0uXG5c bjQuMS4yLiAgTWFudWFsIHByb3Zpc2lvbmluZ1xuXG4gICBUaGUgU1RVTiBhbmQgQVMgc2VydmVy cyBjb3VsZCBiZSBtYW51YWxseSBjb25maWd1cmVkIHdpdGggYSBzeW1tZXRyaWNcbiAgIGtleSAo SyksIGF1dGhlbnRpY2F0ZWQgZW5jcnlwdGlvbiBhbGdvcml0aG0gYW5kIGtpZC5cblxuICAgTm90 ZSA6IFRoZSBtZWNoYW5pc20gc3BlY2lmaWVkIGluIFNlY3Rpb24gNC4xLjIgY29tcGFyZWQgdG8g UkVTVFxuICAgbGFja3MgZW5jcnlwdGlvbiBhbmQgSE1BQyBhbGdvcml0aG0gYWdpbGl0eS4gIEhl bmNlIGEgU1RVTiBzZXJ2ZXIgYW5kXG4gICBhdXRob3JpemF0aW9uIHNlcnZlciBpbXBsZW1lbnRh dGlvbiBTSE9VTEQgc3VwcG9ydCBSRVNUIGV4cGxhaW5lZCBpblxuICAgU2VjdGlvbiA0LjEuMS5c blxuNS4gIEZvcm1pbmcgYSBSZXF1ZXN0XG5cbiAgIFdoZW4gYSBTVFVOIHNlcnZlciByZXNwb25k cyB0aGF0IHRoaXJkIHBhcnR5IGF1dGhvcml6YXRpb24gaXNcbiAgIHJlcXVpcmVkLCBhIFNUVU4g Y2xpZW50IHJlLWF0dGVtcHRzIHRoZSByZXF1ZXN0LCB0aGlzIHRpbWUgaW5jbHVkaW5nXG4gICBh Y2Nlc3MgdG9rZW4gYW5kIGtpZCB2YWx1ZXMgaW4gQUNDRVNTLVRPS0VOIGFuZCBVU0VSTkFNRSBT VFVOXG4gICBhdHRyaWJ1dGVzLiAgVGhlIFNUVU4gY2xpZW50IGluY2x1ZGVzIGEgTUVTU0FHRS1J TlRFR1JJVFkgYXR0cmlidXRlXG4gICBhcyB0aGUgbGFzdCBhdHRyaWJ1dGUgaW4gdGhlIG1lc3Nh Z2Ugb3ZlciB0aGUgY29udGVudHMgb2YgdGhlIFNUVU5cbiAgIG1lc3NhZ2UuICBUaGUgSE1BQyBm b3IgdGhlIE1FU1NBR0UtSU5URUdSSVRZIGF0dHJpYnV0ZSBpcyBjb21wdXRlZCBhc1xuICAgZGVz Y3JpYmVkIGluIHNlY3Rpb24gMTUuNCBvZiBbUkZDNTM4OV0gd2hlcmUgdGhlIG1hY19rZXkgaXMg dXNlZCBhc1xuICAgdGhlIGlucHV0IGtleSBmb3IgdGhlIEhNQUMgY29tcHV0YXRpb24uICBUaGUg U1RVTiBjbGllbnQgYW5kIHNlcnZlclxuICAgd2lsbCB1c2UgdGhlIG1hY19rZXkgdG8gY29tcHV0 ZSB0aGUgbWVzc2FnZSBpbnRlZ3JpdHkgYW5kIGRvIG5vdFxuICAgcGVyZm9ybSBNRDUgaGFzaCBv biB0aGUgY3JlZGVudGlhbHMuXG5cbjYuICBTVFVOIEF0dHJpYnV0ZXNcblxuICAgVGhlIGZvbGxv d2luZyBuZXcgU1RVTiBhdHRyaWJ1dGVzIGFyZSBpbnRyb2R1Y2VkIGJ5IHRoaXNcbiAgIHNwZWNp ZmljYXRpb24gdG8gYWNjb21wbGlzaCB0aGlyZCBwYXJ0eSBhdXRob3JpemF0aW9uLlxuXG5cblxu XG5cblxuXG5SZWRkeSwgZXQgYWwuICAgICAgICAgICBFeHBpcmVzIE9jdG9iZXIgMTAsIDIwMTUg ICAgICAgICAgICAgICAgW1BhZ2UgNl1cbl9cbkludGVybmV0LURyYWZ0ICAgICAgU1RVTiBmb3Ig M3JkIHBhcnR5IEF1dGhvcml6YXRpb24gICAgICAgICAgQXByaWwgMjAxNVxuXG5cbjYuMS4gIFRI SVJELVBBUlRZLUFVVEhPUklaQVRJT05cblxuICAgVGhpcyBhdHRyaWJ1dGUgaXMgdXNlZCBieSB0 aGUgU1RVTiBzZXJ2ZXIgdG8gaW5mb3JtIHRoZSBjbGllbnQgdGhhdFxuICAgaXQgc3VwcG9ydHMg dGhpcmQgcGFydHkgYXV0aG9yaXphdGlvbi4gIFRoaXMgYXR0cmlidXRlIHZhbHVlIGNvbnRhaW5z XG4gICB0aGUgU1RVTiBzZXJ2ZXIgbmFtZS4gIFRoZSBTVFVOIHNlcnZlciBtYXkgaGF2ZSB0aWUt dXBzIHdpdGggbXVsdGlwbGVcbiAgIGF1dGhvcml6YXRpb24gc2VydmVycyBhbmQgdmljZSB2ZXJz YSwgc28gdGhlIGNsaWVudCBNVVNUIHByb3ZpZGUgdGhlXG4gICBTVFVOIHNlcnZlciBuYW1lIHRv IHRoZSBhdXRob3JpemF0aW9uIHNlcnZlciBzbyB0aGF0IGl0IGNhbiBzZWxlY3RcbiAgIHRoZSBh cHByb3ByaWF0ZSBrZXlpbmcgbWF0ZXJpYWwgdG8gZ2VuZXJhdGUgdGhlIHNlbGYtY29udGFpbmVk IHRva2VuLlxuICAgVGhlIFRISVJELVBBUlRZLUFVVEhPUklaQVRJT04gYXR0cmlidXRlIGlzIGEg Y29tcHJlaGVuc2lvbi1vcHRpb25hbFxuICAgYXR0cmlidXRlIChzZWUgU2VjdGlvbiAxNSBmcm9t IFtSRkM1Mzg5XSkuICBJZiB0aGUgY2xpZW50IGlzIGFibGUgdG9cbiAgIGNvbXByZWhlbmQgVEhJ UkQtUEFSVFktQVVUSE9SSVpBVElPTiBpdCBNVVNUIGVuc3VyZSB0aGF0IHRoaXJkIHBhcnR5XG4g ICBhdXRob3JpemF0aW9uIHRha2VzIHByZWNlZGVuY2Ugb3ZlciBmaXJzdCBwYXJ0eSBhdXRoZW50 aWNhdGlvblxuICAgKGV4cGxhaW5lZCBpbiBzZWN0aW9uIDEwIG9mIFtSRkM1Mzg5XSkuICBJZiB0 aGUgY2xpZW50IGRvZXMgbm90XG4gICBzdXBwb3J0IG9yIGlzIG5vdCBjYXBhYmxlIG9mIGRvaW5n IHRoaXJkIHBhcnR5IGF1dGhvcml6YXRpb24gdGhlbiBpdFxuICAgZGVmYXVsdHMgdG8gZmlyc3Qg cGFydHkgYXV0aGVudGljYXRpb24uXG5cbjYuMi4gIEFDQ0VTUy1UT0tFTlxuXG4gICBUaGUgYWNj ZXNzIHRva2VuIGlzIGlzc3VlZCBieSB0aGUgYXV0aG9yaXphdGlvbiBzZXJ2ZXIuICBPQXV0aCAy LjBcbiAgIGRvZXMgbm90IGltcG9zZSBhbnkgbGltaXRhdGlvbiBvbiB0aGUgbGVuZ3RoIG9mIHRo ZSBhY2Nlc3MgdG9rZW4gYnV0XG4gICBpZiBwYXRoIE1UVSBpcyB1bmtub3duIHRoZW4gU1RVTiBt ZXNzYWdlcyBvdmVyIElQdjQgd291bGQgbmVlZCB0byBiZVxuICAgbGVzcyB0aGFuIDU0OCBieXRl cyAoU2VjdGlvbiA3LjEgb2YgW1JGQzUzODldKS4gIFRoZSBhY2Nlc3MgdG9rZW5cbiAgIGxlbmd0 aCBuZWVkcyB0byBiZSByZXN0cmljdGVkIHRvIGZpdCB3aXRoaW4gdGhlIG1heGltdW0gU1RVTiBt ZXNzYWdlXG4gICBzaXplLiAgTm90ZSB0aGF0IHRoZSBzZWxmLWNvbnRhaW5lZCB0b2tlbiBpcyBv cGFxdWUgdG8gdGhlIGNsaWVudCBhbmRcbiAgIHRoZSBjbGllbnQgTVVTVCBOT1QgZXhhbWluZSB0 aGUgdG9rZW4uICBUaGUgQUNDRVNTLVRPS0VOIGF0dHJpYnV0ZSBpc1xuICAgYSBjb21wcmVoZW5z aW9uLXJlcXVpcmVkIGF0dHJpYnV0ZSAoc2VlIFNlY3Rpb24gMTUgZnJvbSBbUkZDNTM4OV0pLlxu XG4gICBUaGUgdG9rZW4gaXMgc3RydWN0dXJlZCBhcyBmb2xsb3dzOlxuXG4gICAgICAgICBzdHJ1 Y3Qge1xuICAgICAgICAgICAgIHVpbnQ4X3Qgbm9uY2VfbGVuZ3RoO1xuICAgICAgICAgICAgIG9w YXF1ZSAgbm9uY2Vbbm9uY2VfbGVuZ3RoXTtcbiAgICAgICAgICAgICBvcGFxdWUge1xuICAgICAg ICAgICAgICAgICB1aW50MTZfdCBrZXlfbGVuZ3RoO1xuICAgICAgICAgICAgICAgICBvcGFxdWUg bWFjX2tleVtrZXlfbGVuZ3RoXTtcbiAgICAgICAgICAgICAgICAgdWludDY0X3QgdGltZXN0YW1w O1xuICAgICAgICAgICAgICAgICB1aW50MzJfdCBsaWZldGltZTtcbiAgICAgICAgICAgICB9IGVu Y3J5cHRlZF9ibG9jaztcbiAgICAgICAgIH0gdG9rZW47XG5cbiAgICAgICAgICAgICAgICAgICBG aWd1cmUgMTogU2VsZi1jb250YWluZWQgdG9rZW4gZm9ybWF0XG5cbiAgIE5vdGU6IHVpbnROX3Qg bWVhbnMgYW4gdW5zaWduZWQgaW50ZWdlciBvZiBleGFjdGx5IE4gYml0cy4gIFNpbmdsZS1cbiAg IGJ5dGUgZW50aXRpZXMgY29udGFpbmluZyB1bmludGVycHJldGVkIGRhdGEgYXJlIG9mIHR5cGUg b3BhcXVlLiAgQWxsXG4gICB2YWx1ZXMgaW4gdGhlIHRva2VuIGFyZSBzdG9yZWQgaW4gbmV0d29y ayBieXRlIG9yZGVyLlxuXG4gICBUaGUgYXNzb2NpYXRlZCBkYXRhIChBKSBNVVNUIGJlIHRoZSBT VFVOIHNlcnZlciBuYW1lIChOKS4gIFRoaXNcbiAgIGVuc3VyZXMgdGhhdCB0aGUgY2xpZW50IGRv ZXMgbm90IHVzZSB0aGUgc2FtZSB0b2tlbiB0byBnYWluIGlsbGVnYWxcblxuXG5cblJlZGR5LCBl dCBhbC4gICAgICAgICAgIEV4cGlyZXMgT2N0b2JlciAxMCwgMjAxNSAgICAgICAgICAgICAgICBb UGFnZSA3XVxuX1xuSW50ZXJuZXQtRHJhZnQgICAgICBTVFVOIGZvciAzcmQgcGFydHkgQXV0aG9y aXphdGlvbiAgICAgICAgICBBcHJpbCAyMDE1XG5cblxuICAgYWNjZXNzIHRvIG90aGVyIFNUVU4g c2VydmVycyBwcm92aWRlZCBieSB0aGUgc2FtZSBhZG1pbmlzdHJhdGl2ZVxuICAgZG9tYWluIGku ZS4sIHdoZW4gbXVsdGlwbGUgU1RVTiBzZXJ2ZXJzIGluIGEgc2luZ2xlIGFkbWluaXN0cmF0aXZl XG4gICBkb21haW4gc2hhcmUgdGhlIHNhbWUgc3ltbWV0cmljIGtleSB3aXRoIGFuIGF1dGhvcml6 YXRpb24gc2VydmVyLlxuXG4gICBUaGUgZmllbGRzIGFyZSBkZXNjcmliZWQgYmVsb3c6XG5cbiAg IG5vbmNlX2xlbmd0aDogIExlbmd0aCBvZiB0aGUgbm9uY2UgZmllbGQuICBUaGUgbGVuZ3RoIG9m IG5vbmNlIGZvclxuICAgICAgYXV0aGVudGljYXRlZCBlbmNyeXB0aW9uIHdpdGggYWRkaXRpb25h bCBkYXRhIChBRUFEKSBhbGdvcml0aG1zIGlzXG4gICAgICBleHBsYWluZWQgaW4gW1JGQzUxMTZd LlxuXG4gICBOb25jZTogIE5vbmNlIGZvcm1hdGlvbiBpcyBleHBsYWluZWQgaW4gc2VjdGlvbiAz LjIgb2YgW1JGQzUxMTZdLlxuXG4gICBrZXlfbGVuZ3RoOiAgTGVuZ3RoIG9mIHRoZSBzZXNzaW9u IGtleSBpbiBvY3RldHMuICBLZXkgbGVuZ3RoIG9mXG4gICAgICAxNjAtYml0cyBNVVNUIGJlIHN1 cHBvcnRlZCAoaS5lLiwgb25seSAxNjAtYml0IGtleSBpcyB1c2VkIGJ5XG4gICAgICBITUFDLVNI QS0xIGZvciBtZXNzYWdlIGludGVncml0eSBvZiBTVFVOIG1lc3NhZ2UpLiAgVGhlIGtleSBsZW5n dGhcbiAgICAgIGZhY2lsaXRhdGVzIHRoZSBoYXNoIGFnaWxpdHkgcGxhbiBkaXNjdXNzZWQgaW4g c2VjdGlvbiAxNi4zIG9mXG4gICAgICBbUkZDNTM4OV0uXG5cbiAgIG1hY19rZXk6ICBUaGUgc2Vz c2lvbiBrZXkgZ2VuZXJhdGVkIGJ5IHRoZSBhdXRob3JpemF0aW9uIHNlcnZlci5cblxuICAgdGlt ZXN0YW1wOiAgNjQtYml0IHVuc2lnbmVkIGludGVnZXIgZmllbGQgY29udGFpbmluZyBhIHRpbWVz dGFtcC5cbiAgICAgIFRoZSB2YWx1ZSBpbmRpY2F0ZXMgdGhlIHRpbWUgc2luY2UgSmFudWFyeSAx LCAxOTcwLCAwMDowMCBVVEMsIGJ5XG4gICAgICB1c2luZyBhIGZpeGVkIHBvaW50IGZvcm1hdC4g IEluIHRoaXMgZm9ybWF0LCB0aGUgaW50ZWdlciBudW1iZXIgb2ZcbiAgICAgIHNlY29uZHMgaXMg Y29udGFpbmVkIGluIHRoZSBmaXJzdCA0OCBiaXRzIG9mIHRoZSBmaWVsZCwgYW5kIHRoZVxuICAg ICAgcmVtYWluaW5nIDE2IGJpdHMgaW5kaWNhdGUgdGhlIG51bWJlciBvZiAxLzY0SyBmcmFjdGlv bnMgb2YgYVxuICAgICAgc2Vjb25kIChOYXRpdmUgZm9ybWF0IC0gVW5peCkuXG5cbiAgIGxpZmV0 aW1lOiAgVGhlIGxpZmV0aW1lIG9mIHRoZSBhY2Nlc3MgdG9rZW4sIGluIHNlY29uZHMuICBGb3Jc biAgICAgIGV4YW1wbGUsIHRoZSB2YWx1ZSAzNjAwIGluZGljYXRlcyBvbmUgaG91ci4gIFRoZSBs aWZldGltZSB2YWx1ZVxuICAgICAgTVVTVCBiZSBncmVhdGVyIHRoYW4gb3IgZXF1YWwgdG8gdGhl ICJleHBpcmVzX2luIiBwYXJhbWV0ZXJcbiAgICAgIGRlZmluZWQgaW4gc2VjdGlvbiA0LjIuMiBv ZiBbUkZDNjc0OV0sIG90aGVyd2lzZSByZXNvdXJjZSBzZXJ2ZXJcbiAgICAgIGNvdWxkIHJldm9r ZSB0aGUgdG9rZW4gYnV0IHRoZSBjbGllbnQgd291bGQgYXNzdW1lIHRoYXQgdGhlIHRva2VuXG4g ICAgICBoYXMgbm90IGV4cGlyZWQgYW5kIHdvdWxkIG5vdCByZWZyZXNoIHRoZSB0b2tlbi5cblxu ICAgZW5jcnlwdGVkX2Jsb2NrOiAgVGhlIGVuY3J5cHRlZF9ibG9jayBpcyBlbmNyeXB0ZWQgYW5k IGF1dGhlbnRpY2F0ZWRcbiAgICAgIHVzaW5nIHRoZSBzeW1tZXRyaWMgbG9uZy10ZXJtIGtleSBl c3RhYmxpc2hlZCBiZXR3ZWVuIHRoZSBTVFVOXG4gICAgICBzZXJ2ZXIgYW5kIHRoZSBhdXRob3Jp emF0aW9uIHNlcnZlci5cblxuICAgVGhlIGF1dGhlbnRpY2F0ZWQgZW5jcnlwdGlvbiBvcGVyYXRp b24gaGFzIGZvdXIgaW5wdXRzOiBLLCBOLCBBLCBhbmRcbiAgIFAgKGVuY3J5cHRlZF9ibG9jayks IGFzIGRlZmluZWQgaW4gc2VjdGlvbiAyLjEgb2YgW1JGQzUxMTZdIGFuZCB0aGVyZVxuICAgaXMg YSBzaW5nbGUgb3V0cHV0IGEgY2lwaGVydGV4dCBDIG9yIGFuIGluZGljYXRpb24gdGhhdCB0aGUg cmVxdWVzdGVkXG4gICBlbmNyeXB0aW9uIG9wZXJhdGlvbiBjb3VsZCBub3QgYmUgcGVyZm9ybWVk LiAgRW5jcnlwdGlvbiBwcm9jZXNzIHdpdGhcbiAgIEFFU19DQkNfSE1BQ19TSEEyIChleHBsYWlu ZWQgaW4gc2VjdGlvbiAyLjEgb2ZcbiAgIFtJLUQubWNncmV3LWFlYWQtYWVzLWNiYy1obWFjLXNo YTJdKSBpcyBpbGx1c3RyYXRlZCBiZWxvdy4gIFRoZVxuICAgY2lwaGVydGV4dCBjb25zaXN0cyBv ZiB0aGUgc3RyaW5nIFMsIHdpdGggdGhlIHN0cmluZyBUIGFwcGVuZGVkIHRvXG4gICBpdC4gIEhl cmUgQyBhbmQgTiBkZW5vdGUgQ2lwaGVydGV4dCBhbmQgU1RVTiBzZXJ2ZXIgbmFtZVxuICAgcmVz cGVjdGl2ZWx5LiAgVGhlIG9jdGV0IHN0cmluZyBBTCAoc2VjdGlvbiAyLjEgb2ZcblxuXG5cblxu UmVkZHksIGV0IGFsLiAgICAgICAgICAgRXhwaXJlcyBPY3RvYmVyIDEwLCAyMDE1ICAgICAgICAg ICAgICAgIFtQYWdlIDhdXG5fXG5JbnRlcm5ldC1EcmFmdCAgICAgIFNUVU4gZm9yIDNyZCBwYXJ0 eSBBdXRob3JpemF0aW9uICAgICAgICAgIEFwcmlsIDIwMTVcblxuXG4gICBbSS1ELm1jZ3Jldy1h ZWFkLWFlcy1jYmMtaG1hYy1zaGEyXSkgaXMgZXF1YWwgdG8gdGhlIG51bWJlciBvZiBiaXRzXG4g ICBpbiBBIGV4cHJlc3NlZCBhcyBhIDY0LWJpdCB1bnNpZ25lZCBiaWcgZW5kaWFuIGludGVnZXIu XG5cbiAgIG8gIEFVVEggPSBpbml0aWFsIGF1dGhlbnRpY2F0aW9uIGtleSBsZW5ndGggb2N0ZXRz IG9mIEssXG5cbiAgIG8gIEFTLVJTID0gZmluYWwgZW5jcnlwdGlvbiBrZXkgbGVuZ3RoIG9jdGV0 cyBvZiBLLFxuXG4gICBvICBTID0gQ0JDLVBLQ1M1LUVOQyhBUy1SUywgZW5jcnlwdGVkX2Jsb2Nr KSxcblxuICAgICAgKiAgSW5pdGlhbGl6YXRpb24gdmVjdG9yIGlzIHNldCB0byB6ZXJvIGJlY2F1 c2UgdGhlXG4gICAgICAgICBlbmNyeXB0ZWRfYmxvY2sgaW4gZWFjaCBhY2Nlc3MgdG9rZW4gd2ls bCBub3QgYmUgaWRlbnRpY2FsIGFuZFxuICAgICAgICAgaGVuY2Ugd2lsbCBub3QgcmVzdWx0IGlu IGdlbmVyYXRpb24gb2YgaWRlbnRpY2FsIGNpcGhlcnRleHQuXG5cbiAgIG8gIG1hYyA9IE1BQyhB VVRILCBOIF9fIG5vbmNlIF9fIEMgX18gQUwpLFxuXG4gICBvICBUID0gaW5pdGlhbCBUX0xFTiBv Y3RldHMgb2YgbWFjLFxuXG4gICBvICBDID0gUyBfXyBULlxuXG4gICBUaGUgZW50aXJlIHRva2Vu IGkuZS4sIHRoZSBcJ2VuY3J5cHRlZF9ibG9ja1wnIGlzIGJhc2U2NCBlbmNvZGVkIChzZWVcbiAg IHNlY3Rpb24gNCBvZiBbUkZDNDY0OF0pIGFuZCB0aGUgcmVzdWx0aW5nIGFjY2VzcyB0b2tlbiBp cyBzaWduYWxlZCB0b1xuICAgdGhlIGNsaWVudC5cblxuNy4gIFNUVU4gU2VydmVyIEJlaGF2aW91 clxuXG4gICBUaGUgU1RVTiBzZXJ2ZXIsIG9uIHJlY2VpdmluZyBhIHJlcXVlc3Qgd2l0aCBBQ0NF U1MtVE9LRU4gYXR0cmlidXRlLFxuICAgcGVyZm9ybXMgY2hlY2tzIGxpc3RlZCBpbiBzZWN0aW9u IDEwLjIuMiBvZiBbUkZDNTM4OV0gaW4gYWRkaXRpb24gdG9cbiAgIHRoZSBmb2xsb3dpbmcgc3Rl cHMgdG8gdmVyaWZ5IHRoYXQgdGhlIGFjY2VzcyB0b2tlbiBpcyB2YWxpZDpcblxuICAgbyAgU1RV TiBzZXJ2ZXIgc2VsZWN0cyB0aGUga2V5aW5nIG1hdGVyaWFsIGJhc2VkIG9uIGtpZCBzaWduYWxs ZWQgaW5cbiAgICAgIHRoZSBVU0VSTkFNRSBhdHRyaWJ1dGUuXG5cbiAgIG8gIFRoZSBhdXRoZW50 aWNhdGVkIGRlY3J5cHRpb24gb3BlcmF0aW9uIGhhcyBmb3VyIGlucHV0czogSywgTiwgQSxcbiAg ICAgIGFuZCBDLCBhcyBkZWZpbmVkIGluIHNlY3Rpb24gMi4yIG9mIFtSRkM1MTE2XS4gIEFFQUQg ZGVjcnlwdGlvblxuICAgICAgYWxnb3JpdGhtIGhhcyBvbmx5IGEgc2luZ2xlIG91dHB1dCwgZWl0 aGVyIGEgcGxhaW50ZXh0IG9yIGFcbiAgICAgIHNwZWNpYWwgc3ltYm9sIEZBSUwgdGhhdCBpbmRp Y2F0ZXMgdGhhdCB0aGUgaW5wdXRzIGFyZSBub3RcbiAgICAgIGF1dGhlbnRpYy4gIElmIGF1dGhl bnRpY2F0ZWQgZGVjcnlwdCBvcGVyYXRpb24gcmV0dXJucyBGQUlMIHRoZW5cbiAgICAgIHRoZSBT VFVOIHNlcnZlciByZWplY3RzIHRoZSByZXF1ZXN0IHdpdGggYW4gZXJyb3IgcmVzcG9uc2UgNDAx XG4gICAgICAoVW5hdXRob3JpemVkKS4gIElmIEFFU19DQkNfSE1BQ19TSEEyIGlzIHVzZWQgdGhl biB0aGUgZmluYWwgVF9MRU5cbiAgICAgIG9jdGV0cyBhcmUgc3RyaXBwZWQgZnJvbSBDLiAgSXQg cGVyZm9ybXMgdGhlIHZlcmlmaWNhdGlvbiBvZiB0aGVcbiAgICAgIHRva2VuIG1lc3NhZ2UgaW50 ZWdyaXR5IGJ5IGNhbGN1bGF0aW5nIEhNQUMgb3ZlciB0aGUgdGhlIFNUVU5cbiAgICAgIHNlcnZl ciBuYW1lLCB0aGUgbm9uY2UsIHRoZSBlbmNyeXB0ZWQgcG9ydGlvbiBpbiB0aGUgc2VsZi1cbiAg ICAgIGNvbnRhaW5lZCB0b2tlbiBhbmQgdGhlIEFMIHVzaW5nIEFVVEgga2V5IGFuZCBpZiB0aGUg cmVzdWx0aW5nXG4gICAgICB2YWx1ZSBkb2VzIG5vdCBtYXRjaCB0aGUgbWFjIGZpZWxkIGluIHRo ZSBzZWxmLWNvbnRhaW5lZCB0b2tlblxuICAgICAgdGhlbiBpdCByZWplY3RzIHRoZSByZXF1ZXN0 IHdpdGggYW4gZXJyb3IgcmVzcG9uc2UgNDAxXG4gICAgICAoVW5hdXRob3JpemVkKS5cblxuXG5c blxuXG5SZWRkeSwgZXQgYWwuICAgICAgICAgICBFeHBpcmVzIE9jdG9iZXIgMTAsIDIwMTUgICAg ICAgICAgICAgICAgW1BhZ2UgOV1cbl9cbkludGVybmV0LURyYWZ0ICAgICAgU1RVTiBmb3IgM3Jk IHBhcnR5IEF1dGhvcml6YXRpb24gICAgICAgICAgQXByaWwgMjAxNVxuXG5cbiAgIG8gIFNUVU4g c2VydmVyIG9idGFpbnMgdGhlIG1hY19rZXkgYnkgcmV0cmlldmluZyB0aGUgY29udGVudCBvZiB0 aGVcbiAgICAgIGFjY2VzcyB0b2tlbiAod2hpY2ggcmVxdWlyZXMgZGVjcnlwdGlvbiBvZiB0aGUg c2VsZi1jb250YWluZWRcbiAgICAgIHRva2VuIHVzaW5nIHRoZSBBUy1SUyBrZXkpLlxuXG4gICBv ICBUaGUgU1RVTiBzZXJ2ZXIgdmVyaWZpZXMgdGhhdCBubyByZXBsYXkgdG9vayBwbGFjZSBieSBw ZXJmb3JtaW5nXG4gICAgICB0aGUgZm9sbG93aW5nIGNoZWNrOlxuXG4gICAgICAqICBUaGUgYWNj ZXNzIHRva2VuIGlzIGFjY2VwdGVkIGlmIHRoZSB0aW1lc3RhbXAgZmllbGQgKFRTKSBpbiB0aGVc biAgICAgICAgIHNlbGYtY29udGFpbmVkIHRva2VuIGlzIHJlY2VudCBlbm91Z2ggdG8gdGhlIHJl Y2VwdGlvbiB0aW1lIG9mXG4gICAgICAgICB0aGUgU1RVTiByZXF1ZXN0IChSRG5ldykgdXNpbmcg dGhlIGZvbGxvd2luZyBmb3JtdWxhOiBMaWZldGltZVxuICAgICAgICAgKyBEZWx0YSBfIGFicyhS RG5ldyAtIFRTKS4gIFRoZSBSRUNPTU1FTkRFRCB2YWx1ZSBmb3IgdGhlXG4gICAgICAgICBhbGxv d2VkIERlbHRhIGlzIDUgc2Vjb25kcy4gIElmIHRoZSB0aW1lc3RhbXAgaXMgTk9UIHdpdGhpbiB0 aGVcbiAgICAgICAgIGJvdW5kYXJpZXMgdGhlbiB0aGUgU1RVTiBzZXJ2ZXIgZGlzY2FyZHMgdGhl IHJlcXVlc3Qgd2l0aCBlcnJvclxuICAgICAgICAgcmVzcG9uc2UgNDAxIChVbmF1dGhvcml6ZWQp LlxuXG4gICBvICBUaGUgU1RVTiBzZXJ2ZXIgdXNlcyB0aGUgbWFjX2tleSB0byBjb21wdXRlIHRo ZSBtZXNzYWdlIGludGVncml0eVxuICAgICAgb3ZlciB0aGUgcmVxdWVzdCBhbmQgaWYgdGhlIHJl c3VsdGluZyB2YWx1ZSBkb2VzIG5vdCBtYXRjaCB0aGVcbiAgICAgIGNvbnRlbnRzIG9mIHRoZSBN RVNTQUdFLUlOVEVHUklUWSBhdHRyaWJ1dGUgdGhlbiBpdCByZWplY3RzIHRoZVxuICAgICAgcmVx dWVzdCB3aXRoIGFuIGVycm9yIHJlc3BvbnNlIDQwMSAoVW5hdXRob3JpemVkKS5cblxuICAgbyAg SWYgYWxsIHRoZSBjaGVja3MgcGFzcywgdGhlIFNUVU4gc2VydmVyIGNvbnRpbnVlcyB0byBwcm9j ZXNzIHRoZVxuICAgICAgcmVxdWVzdC4gIEFueSByZXNwb25zZSBnZW5lcmF0ZWQgYnkgdGhlIHNl cnZlciBNVVNUIGluY2x1ZGUgdGhlXG4gICAgICBNRVNTQUdFLUlOVEVHUklUWSBhdHRyaWJ1dGUs IGNvbXB1dGVkIHVzaW5nIHRoZSBtYWNfa2V5LlxuXG4gICBJZiBhIFNUVU4gc2VydmVyIHJlY2Vp dmVzIGFuIEFDQ0VTUy1UT0tFTiBhdHRyaWJ1dGUgdW5leHBlY3RlZGx5XG4gICAoYmVjYXVzZSBp dCBoYWQgbm90IHByZXZpb3VzbHkgc2VudCBvdXQgYSBUSElSRC1QQVJUWS1BVVRIT1JJWkFUSU9O KSxcbiAgIGl0IHdpbGwgcmVzcG9uZCB3aXRoIGFuIGVycm9yIGNvZGUgb2YgNDIwIChVbmtub3du IEF0dHJpYnV0ZSkgYXNcbiAgIHNwZWNpZmllZCBpbiBTZWN0aW9uIDcuMy4xIG9mIFtSRkM1Mzg5 XS5cblxuOC4gIFNUVU4gQ2xpZW50IEJlaGF2aW91clxuXG4gICBvICBUaGUgY2xpZW50IGxvb2tz IGZvciB0aGUgTUVTU0FHRS1JTlRFR1JJVFkgYXR0cmlidXRlIGluIHRoZVxuICAgICAgcmVzcG9u c2UuICBJZiBNRVNTQUdFLUlOVEVHUklUWSBpcyBhYnNlbnQgb3IgdGhlIHZhbHVlIGNvbXB1dGVk XG4gICAgICBmb3IgbWVzc2FnZSBpbnRlZ3JpdHkgdXNpbmcgbWFjX2tleSBkb2VzIG5vdCBtYXRj aCB0aGUgY29udGVudHMgb2ZcbiAgICAgIHRoZSBNRVNTQUdFLUlOVEVHUklUWSBhdHRyaWJ1dGUg dGhlbiB0aGUgcmVzcG9uc2UgTVVTVCBiZVxuICAgICAgZGlzY2FyZGVkLlxuXG4gICBvICBJZiB0 aGUgYWNjZXNzIHRva2VuIGV4cGlyZXMgdGhlbiB0aGUgY2xpZW50IE1VU1Qgb2J0YWluIGEgbmV3 XG4gICAgICB0b2tlbiBmcm9tIHRoZSBhdXRob3JpemF0aW9uIHNlcnZlciBhbmQgdXNlIGl0IGZv ciBuZXcgU1RVTlxuICAgICAgcmVxdWVzdHMuXG5cbjkuICBVc2FnZSB3aXRoIFRVUk5cblxuICAg VHJhdmVyc2FsIFVzaW5nIFJlbGF5IE5BVCAoVFVSTikgW1JGQzU3NjZdIGFuIGV4dGVuc2lvbiB0 byB0aGUgU1RVTlxuICAgcHJvdG9jb2wgaXMgb2Z0ZW4gdXNlZCB0byBpbXByb3ZlIHRoZSBjb25u ZWN0aXZpdHkgb2YgUDJQXG4gICBhcHBsaWNhdGlvbnMuICBUVVJOIGVuc3VyZXMgdGhhdCBhIGNv bm5lY3Rpb24gY2FuIGJlIGVzdGFibGlzaGVkIGV2ZW5cbiAgIHdoZW4gb25lIG9yIGJvdGggc2lk ZXMgaXMgaW5jYXBhYmxlIG9mIGEgZGlyZWN0IFAyUCBjb25uZWN0aW9uLlxuICAgSG93ZXZlciwg YXMgYSByZWxheSBzZXJ2aWNlLCBpdCBpbXBvc2VzIGEgbm9udHJpdmlhbCBjb3N0IG9uIHRoZVxu XG5cblxuUmVkZHksIGV0IGFsLiAgICAgICAgICAgRXhwaXJlcyBPY3RvYmVyIDEwLCAyMDE1ICAg ICAgICAgICAgICAgW1BhZ2UgMTBdXG5fXG5JbnRlcm5ldC1EcmFmdCAgICAgIFNUVU4gZm9yIDNy ZCBwYXJ0eSBBdXRob3JpemF0aW9uICAgICAgICAgIEFwcmlsIDIwMTVcblxuXG4gICBzZXJ2aWNl IHByb3ZpZGVyLiAgVGhlcmVmb3JlLCBhY2Nlc3MgdG8gYSBUVVJOIHNlcnZpY2UgaXMgYWxtb3N0 XG4gICBhbHdheXMgYWNjZXNzLWNvbnRyb2xsZWQuICBJbiBvcmRlciB0byBhY2hpZXZlIHRoaXJk IHBhcnR5XG4gICBhdXRob3JpemF0aW9uLCBhIHJlc291cmNlIG93bmVyIGUuZy4gIFdlYlJUQyBz ZXJ2ZXIsIGF1dGhvcml6ZXMgYVxuICAgVFVSTiBjbGllbnQgdG8gYWNjZXNzIHJlc291cmNlcyBv biB0aGUgVFVSTiBzZXJ2ZXIuXG5cbiAgIENvbnNpZGVyIHRoZSBmb2xsb3dpbmcgZXhhbXBsZSB0 aGF0IGlsbHVzdHJhdGVzIHRoZSB1c2Ugb2YgT0F1dGggMi4wXG4gICB0byBhY2hpZXZlIHRoaXJk IHBhcnR5IGF1dGhvcml6YXRpb24gZm9yIFRVUk4uICBJbiB0aGlzIGV4YW1wbGUsIGFcbiAgIHJl c291cmNlIG93bmVyIGkuZS4sIFdlYlJUQyBzZXJ2ZXIsIGF1dGhvcml6ZXMgYSBUVVJOIGNsaWVu dCB0b1xuICAgYWNjZXNzIHJlc291cmNlcyBvbiBhIFRVUk4gc2VydmVyLlxuXG4gICAgICAgICAg ICAgICAgICstLS0tLS0tLS0tLS0tLS0tLS0tLS0tKy0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0rXG4gICAgICAgICAgICAgICAgIF8gICAgIE9BdXRoIDIuMCAgICAgICAgXyAgICAgICAgICAg IFdlYlJUQyAgICAgICAgICBfXG4gICAgICAgICAgICAgICAgICs9PT09PT09PT09PT09PT09PT09 PT09Kz09PT09PT09PT09PT09PT09PT09PT09PT09PT0rXG4gICAgICAgICAgICAgICAgIF8gQ2xp ZW50ICAgICAgICAgICAgICAgXyBXZWJSVEMgY2xpZW50ICAgICAgICAgICAgICBfXG4gICAgICAg ICAgICAgICAgICstLS0tLS0tLS0tLS0tLS0tLS0tLS0tKy0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0rXG4gICAgICAgICAgICAgICAgIF8gUmVzb3VyY2Ugb3duZXIgICAgICAgXyBXZWJSVEMg c2VydmVyICAgICAgICAgICAgICBfXG4gICAgICAgICAgICAgICAgICstLS0tLS0tLS0tLS0tLS0t LS0tLS0tKy0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0rXG4gICAgICAgICAgICAgICAgIF8g QXV0aG9yaXphdGlvbiBzZXJ2ZXIgXyBBdXRob3JpemF0aW9uIHNlcnZlciAgICAgICBfXG4gICAg ICAgICAgICAgICAgICstLS0tLS0tLS0tLS0tLS0tLS0tLS0tKy0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0rXG4gICAgICAgICAgICAgICAgIF8gUmVzb3VyY2Ugc2VydmVyICAgICAgXyBUVVJO IFNlcnZlciAgICAgICAgICAgICAgICBfXG4gICAgICAgICAgICAgICAgICstLS0tLS0tLS0tLS0t LS0tLS0tLS0tKy0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0rXG5cbiAgICAgICAgIEZpZ3Vy ZSAyOiBPQXV0aCB0ZXJtaW5vbG9neSBtYXBwZWQgdG8gV2ViUlRDIHRlcm1pbm9sb2d5XG5cbiAg IFVzaW5nIHRoZSBPQXV0aCAyLjAgYXV0aG9yaXphdGlvbiBmcmFtZXdvcmssIGEgV2ViUlRDIGNs aWVudCAodGhpcmQtXG4gICBwYXJ0eSBhcHBsaWNhdGlvbikgb2J0YWlucyBsaW1pdGVkIGFjY2Vz cyB0byBhIFRVUk4gKHJlc291cmNlIHNlcnZlcilcbiAgIG9uIGJlaGFsZiBvZiB0aGUgV2ViUlRD IHNlcnZlciAocmVzb3VyY2Ugb3duZXIgb3IgYXV0aG9yaXphdGlvblxuICAgc2VydmVyKS4gIFRo ZSBXZWJSVEMgY2xpZW50IHJlcXVlc3RzIGFjY2VzcyB0byByZXNvdXJjZXMgY29udHJvbGxlZFxu ICAgYnkgdGhlIHJlc291cmNlIG93bmVyIChXZWJSVEMgc2VydmVyKSBhbmQgaG9zdGVkIGJ5IHRo ZSByZXNvdXJjZVxuICAgc2VydmVyIChUVVJOIHNlcnZlcikuICBUaGUgV2ViUlRDIGNsaWVudCBv YnRhaW5zIGFjY2VzcyB0b2tlbixcbiAgIGxpZmV0aW1lLCBzZXNzaW9uIGtleSBhbmQga2lkLiAg VGhlIFRVUk4gY2xpZW50IGNvbnZleXMgdGhlIGFjY2Vzc1xuICAgdG9rZW4gYW5kIG90aGVyIE9B dXRoIDIuMCBwYXJhbWV0ZXJzIGxlYXJudCBmcm9tIHRoZSBhdXRob3JpemF0aW9uXG4gICBzZXJ2 ZXIgdG8gdGhlIFRVUk4gc2VydmVyLiAgVGhlIFRVUk4gc2VydmVyIG9idGFpbnMgdGhlIHNlc3Np b24ga2V5XG4gICBmcm9tIHRoZSBhY2Nlc3MgdG9rZW4uICBUaGUgVFVSTiBzZXJ2ZXIgdmFsaWRh dGVzIHRoZSB0b2tlbiwgY29tcHV0ZXNcbiAgIHRoZSBtZXNzYWdlIGludGVncml0eSBvZiB0aGUg cmVxdWVzdCBhbmQgdGFrZXMgYXBwcm9wcmlhdGUgYWN0aW9uXG4gICBpLmUsIHBlcm1pdHMgdGhl IFRVUk4gY2xpZW50IHRvIGNyZWF0ZSBhbGxvY2F0aW9ucy4gIFRoaXMgaXMgc2hvd24gaW5cbiAg IGFuIGFic3RyYWN0IHdheSBpbiBGaWd1cmUgMy5cblxuXG5cblxuXG5cblxuXG5cblxuXG5cblxu XG5SZWRkeSwgZXQgYWwuICAgICAgICAgICBFeHBpcmVzIE9jdG9iZXIgMTAsIDIwMTUgICAgICAg ICAgICAgICBbUGFnZSAxMV1cbl9cbkludGVybmV0LURyYWZ0ICAgICAgU1RVTiBmb3IgM3JkIHBh cnR5IEF1dGhvcml6YXRpb24gICAgICAgICAgQXByaWwgMjAxNVxuXG5cbiAgICAgICAgICAgICAg ICAgICAgICAgICAgICstLS0tLS0tLS0tLS0tLS0rXG4gICAgICAgICAgICAgICAgICAgICAgICAg ICBfICAgICAgICAgICAgICAgK18qKioqKiorXG4gICAgICAgICAgICArLS0tLS0tLS0tLS0tLV9f IEF1dGhvcml6YXRpb24gXyAgICAgICAqXG4gICAgICAgICAgICBfICAgICAgICAgICAgICBfIFNl cnZlciAgICAgICAgXyAgICAgICAqXG4gICAgICAgICAgICBfICAgKy0tLS0tLS0tLS1fKFdlYlJU QyBTZXJ2ZXIpXyAgICAgICAqICBBUy1SUyxcbiAgICAgICAgICAgIF8gICBfICAgICAgICAgIF8g ICAgICAgICAgICAgICBfICAgICAgICogIEFVVEgga2V5c1xuICAgKDIpICAgICAgXyAgIF8gICAg ICAgICAgICstLS0tLS0tLS0tLS0tLS0rICAgICAgKiAgICgxKVxuICAgQWNjZXNzICAgXyAgIF8g ICgzKSAgICAgICAgICAgICAgICAgICAgICAgICAgICAgKlxuICAgVG9rZW4gICAgXyAgIF8gQWNj ZXNzIFRva2VuICAgICAgICAgICAgICAgICAgICAgKlxuICAgUmVxdWVzdCAgXyAgIF8gICAgKyAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgKlxuICAgICAgICAgICAgXyAgIF8gU2Vzc2lvbiBL ZXkgICAgICAgICAgICAgICAgICAgICAgKlxuICAgICAgICAgICAgXyAgIF8gICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgKlxuICAgICAgICAgICAgXyAgIFYgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgVlxuICAgICAgICArLS0tLS0tLSstLS0rICAgICAgICAgICAgICAg ICAgICAgICArLSstLS0tPS0tLS0tK1xuICAgICAgICBfICAgICAgICAgICBfICAgICAgICAgKDQp ICAgICAgICAgICBfICAgICAgICAgICAgX1xuICAgICAgICBfICAgICAgICAgICBfIFRVUk4gUmVx dWVzdCArIEFjY2VzcyBfICAgICAgICAgICAgX1xuICAgICAgICBfIFdlYlJUQyAgICBfIFRva2Vu ICAgICAgICAgICAgICAgICBfIFRVUk4gICAgICAgX1xuICAgICAgICBfIENsaWVudCAgICBfLS0t LS0tLS0tLS0tLS0tLS0tLS0tLV9fIFNlcnZlciAgICAgX1xuICAgICAgICBfIChBbGljZSkgICBf IEFsbG9jYXRlIFJlc3BvbnNlICg1KSBfICAgICAgICAgICAgX1xuICAgICAgICBfICAgICAgICAg ICBfXy0tLS0tLS0tLS0tLS0tLS0tLS0tLS1fICAgICAgICAgICAgX1xuICAgICAgICArLS0tLS0t LS0tLS0rICAgICAgICAgICAgICAgICAgICAgICArLS0tLS0tLS0tLS0tK1xuXG4gICBVc2VyIDog QWxpY2VcbiAgICoqKio6IE91dC1vZi1CYW5kIExvbmctVGVybSBLZXkgRXN0YWJsaXNobWVudFxu XG4gICAgICAgICAgICAgICAgICAgICAgICAgIEZpZ3VyZSAzOiBJbnRlcmFjdGlvbnNcblxuICAg SW4gdGhlIGJlbG93IGZpZ3VyZSwgdGhlIGNsaWVudCBzZW5kcyBhbiBBbGxvY2F0ZSByZXF1ZXN0 IHRvIHRoZVxuICAgc2VydmVyIHdpdGhvdXQgY3JlZGVudGlhbHMuICBTaW5jZSB0aGUgc2VydmVy IHJlcXVpcmVzIHRoYXQgYWxsXG4gICByZXF1ZXN0cyBiZSBhdXRoZW50aWNhdGVkIHVzaW5nIE9B dXRoIDIuMCwgdGhlIHNlcnZlciByZWplY3RzIHRoZVxuICAgcmVxdWVzdCB3aXRoIGEgNDAxIChV bmF1dGhvcml6ZWQpIGVycm9yIGNvZGUgYW5kIFNUVU4gYXR0cmlidXRlXG4gICBUSElSRC1QQVJU WS1BVVRIT1JJWkFUSU9OLiAgVGhlIFdlYlJUQyBjbGllbnQgb2J0YWlucyBhY2Nlc3MgdG9rZW5c biAgIGZyb20gdGhlIFdlYlJUQyBzZXJ2ZXIgYW5kIHRoZW4gdHJpZXMgYWdhaW4sIHRoaXMgdGlt ZSBpbmNsdWRpbmdcbiAgIGFjY2VzcyB0b2tlbi4gIFRoaXMgdGltZSwgdGhlIHNlcnZlciB2YWxp ZGF0ZXMgdGhlIHRva2VuLCBhY2NlcHRzIHRoZVxuICAgQWxsb2NhdGUgcmVxdWVzdCBhbmQgcmV0 dXJucyBhbiBBbGxvY2F0ZSBzdWNjZXNzIHJlc3BvbnNlIGNvbnRhaW5pbmdcbiAgIChhbW9uZ3N0 IG90aGVyIHRoaW5ncykgdGhlIHJlbGF5ZWQgdHJhbnNwb3J0IGFkZHJlc3MgYXNzaWduZWQgdG8g dGhlXG4gICBhbGxvY2F0aW9uLlxuXG5cblxuXG5cblxuXG5cblxuXG5cblxuXG5cblJlZGR5LCBl dCBhbC4gICAgICAgICAgIEV4cGlyZXMgT2N0b2JlciAxMCwgMjAxNSAgICAgICAgICAgICAgIFtQ YWdlIDEyXVxuX1xuSW50ZXJuZXQtRHJhZnQgICAgICBTVFVOIGZvciAzcmQgcGFydHkgQXV0aG9y aXphdGlvbiAgICAgICAgICBBcHJpbCAyMDE1XG5cblxuICAgKy0tLS0tLS0tLS0tLS0tLS0tLS0r ICAgICAgICAgICAgICAgICAgICAgICAgICstLS0tLS0tLSsgICstLS0tLS0tLS0rXG4gICBfIC4u Li4uLi4uLiAgVFVSTiAgIF8gICAgICAgICAgICAgICAgICAgICAgICAgXyAgVFVSTiAgXyAgXyAg V2ViUlRDIF9cbiAgIF8gLldlYlJUQyAuICBDbGllbnQgXyAgICAgICAgICAgICAgICAgICAgICAg ICBfICAgICAgICBfICBfICAgICAgICAgX1xuICAgXyAuQ2xpZW50IC4gICAgICAgICBfICAgICAg ICAgICAgICAgICAgICAgICAgIF8gU2VydmVyIF8gIF8gIFNlcnZlciBfXG4gICBfIC4uLi4uLi4u LiAgICAgICAgIF8gICAgICAgICAgICAgICAgICAgICAgICAgXyAgICAgICAgXyAgXyAgICAgICAg IF9cbiAgICstLS0tLS0tLS0tLS0tLS0tLS0tKyAgICAgICAgICAgICAgICAgICAgICAgICArLS0t LS0tLS0rICArLS0tLS0tLS0tK1xuICAgICBfICAgICAgIF8gICAgICAgICAgIEFsbG9jYXRlIHJl cXVlc3QgICAgICAgICAgICAgICAgXyAgICAgICAgIF9cbiAgICAgXyAgICAgICBfLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tX18gICAgICAgICBfXG4gICAgIF8gICAg ICAgXyAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICBfICAgICAgICAg X1xuICAgICBfICAgICAgIF8gICAgICAgICBBbGxvY2F0ZSBlcnJvciByZXNwb25zZSAgICAgICAg ICAgXyAgICAgICAgIF9cbiAgICAgXyAgICAgICBfICAgICAgICAgKDQwMSBVbmF1dGhvcml6ZWQp ICAgICAgICAgICAgICAgIF8gICAgICAgICBfXG4gICAgIF8gICAgICAgX18tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS1fICAgICAgICAgX1xuICAgICBfICAgICAgIF8g ICAgICAgICBUSElSRC1QQVJUWS1BVVRIT1JJWkFUSU9OICAgICAgICAgXyAgICAgICAgIF9cbiAg ICAgXyAgICAgICBfICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIF8g ICAgICAgICBfXG4gICAgIF8gICAgICAgXyAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICBfICAgICAgICAgX1xuICAgICBfICAgICAgIF8gICAgICBIVFRQIFJlcXVlc3Qg Zm9yIHRva2VuICAgICAgICAgICAgICAgXyAgICAgICAgIF9cbiAgICAgXy0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLV9fXG4gICAgIF8g ICAgICAgXyAgICAgIEhUVFAgUmVzcG9uc2Ugd2l0aCB0b2tlbiBwYXJhbWV0ZXJzICBfICAgICAg ICAgX1xuICAgICBfXy0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLV9cbiAgICAgX09BdXRoIDIuMCAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgIF8gICAgICAgICBfXG4gICAgICBBdHRyaWJ1dGVzICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICBfICAgICAgICAgX1xuICAgICBfLS0tLS0t X18gICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgXyAgICAgICAgIF9c biAgICAgXyAgICAgICBfICAgIEFsbG9jYXRlIHJlcXVlc3QgQUNDRVNTLVRPS0VOICAgICAgICAg IF8gICAgICAgICBfXG4gICAgIF8gICAgICAgXy0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLV9fICAgICAgICAgX1xuICAgICBfICAgICAgIF8gICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgXyAgICAgICAgIF9cbiAgICAgXyAgICAgICBfICAg ICAgICAgQWxsb2NhdGUgc3VjY2VzcyByZXNwb25zZSAgICAgICAgIF8gICAgICAgICBfXG4gICAg IF8gICAgICAgX18tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS1fICAg ICAgICAgX1xuICAgICBfICAgICAgIF8gICAgICAgICAgICAgVFVSTiBNZXNzYWdlcyAgICAgICAg ICAgICAgICAgXyAgICAgICAgIF9cbiAgICAgXyAgICAgICBfICAgICAgLy8vLy8vIGludGVncml0 eSBwcm90ZWN0ZWQgLy8vLy8vICAgIF8gICAgICAgICBfXG4gICAgIF8gICAgICAgXyAgICAgIC8v Ly8vLyBpbnRlZ3JpdHkgcHJvdGVjdGVkIC8vLy8vLyAgICBfICAgICAgICAgX1xuICAgICBfICAg ICAgIF8gICAgICAvLy8vLy8gaW50ZWdyaXR5IHByb3RlY3RlZCAvLy8vLy8gICAgXyAgICAgICAg IF9cblxuICAgICAgICAgICAgICAgICBGaWd1cmUgNDogVFVSTiBUaGlyZCBQYXJ0eSBBdXRob3Jp emF0aW9uXG5cbiAgIENoYW5nZXMgc3BlY2lmaWMgdG8gVFVSTiBhcmUgbGlzdGVkIGJlbG93Olxu XG4gICBvICBUaGUgYWNjZXNzIHRva2VuIGNhbiBiZSByZXVzZWQgZm9yIG11bHRpcGxlIEFsbG9j YXRlIHJlcXVlc3RzIHRvXG4gICAgICB0aGUgc2FtZSBUVVJOIHNlcnZlci4gIFRoZSBUVVJOIGNs aWVudCBNVVNUIGluY2x1ZGUgdGhlIEFDQ0VTUy1cbiAgICAgIFRPS0VOIGF0dHJpYnV0ZSBvbmx5 IGluIEFsbG9jYXRlIGFuZCBSZWZyZXNoIHJlcXVlc3RzLiAgU2luY2UgdGhlXG4gICAgICBhY2Nl c3MgdG9rZW4gaXMgdmFsaWQgZm9yIGEgc3BlY2lmaWMgcGVyaW9kIG9mIHRpbWUsIHRoZSBUVVJO XG4gICAgICBzZXJ2ZXIgY2FuIGNhY2hlIGl0IHNvIHRoYXQgaXQgY2FuIGNoZWNrIGlmIHRoZSBh Y2Nlc3MgdG9rZW4gaW4gYVxuICAgICAgbmV3IGFsbG9jYXRpb24gcmVxdWVzdCBtYXRjaGVzIG9u ZSBvZiB0aGUgY2FjaGVkIHRva2VucyBhbmQgYXZvaWRzXG4gICAgICB0aGUgbmVlZCB0byBkZWNy eXB0IHRoZSB0b2tlbi5cblxuICAgbyAgVGhlIGxpZmV0aW1lIHByb3ZpZGVkIGJ5IHRoZSBUVVJO IHNlcnZlciBpbiB0aGUgQWxsb2NhdGUgYW5kXG4gICAgICBSZWZyZXNoIHJlc3BvbnNlcyBNVVNU IGJlIGxlc3MgdGhhbiBvciBlcXVhbCB0byB0aGUgbGlmZXRpbWUgb2ZcbiAgICAgIHRoZSB0b2tl bi4gIEl0IGlzIFJFQ09NTUVOREVEIHRoYXQgdGhlIFRVUk4gc2VydmVyIGNhbGN1bGF0ZSB0aGVc biAgICAgIG1heGltdW0gYWxsb3dlZCBsaWZldGltZSB2YWx1ZSB1c2luZyB0aGUgZm9ybXVsYTpc blxuXG5cblJlZGR5LCBldCBhbC4gICAgICAgICAgIEV4cGlyZXMgT2N0b2JlciAxMCwgMjAxNSAg ICAgICAgICAgICAgIFtQYWdlIDEzXVxuX1xuSW50ZXJuZXQtRHJhZnQgICAgICBTVFVOIGZvciAz cmQgcGFydHkgQXV0aG9yaXphdGlvbiAgICAgICAgICBBcHJpbCAyMDE1XG5cblxuICAgICAgICBs aWZldGltZSArIERlbHRhIC0gYWJzKFJEbmV3IC0gVFMpXG5cbiAgICAgIFRoZSBSRUNPTU1FTkRF RCB2YWx1ZSBmb3IgdGhlIGFsbG93ZWQgRGVsdGEgaXMgNSBzZWNvbmRzLlxuXG4gICBvICBJZiB0 aGUgYWNjZXNzIHRva2VuIGV4cGlyZXMgdGhlbiB0aGUgY2xpZW50IE1VU1Qgb2J0YWluIGEgbmV3 XG4gICAgICB0b2tlbiBmcm9tIHRoZSBhdXRob3JpemF0aW9uIHNlcnZlciBhbmQgdXNlIGl0IGZv ciBuZXdcbiAgICAgIGFsbG9jYXRpb25zLiAgVGhlIGNsaWVudCBNVVNUIHVzZSB0aGUgbmV3IHRv a2VuIHRvIHJlZnJlc2hcbiAgICAgIGV4aXN0aW5nIGFsbG9jYXRpb25zLiAgVGhpcyB3YXkgY2xp ZW50IGhhcyB0byBtYWludGFpbiBvbmx5IG9uZVxuICAgICAgdG9rZW4gcGVyIFRVUk4gc2VydmVy LlxuXG4xMC4gIE9wZXJhdGlvbmFsIENvbnNpZGVyYXRpb25zXG5cbiAgIFRoZSBmb2xsb3dpbmcg b3BlcmF0aW9uYWwgY29uc2lkZXJhdGlvbnMgc2hvdWxkIGJlIHRha2VuIGludG9cbiAgIGFjY291 bnQ6XG5cbiAgIG8gIEVhY2ggYXV0aG9yaXphdGlvbiBzZXJ2ZXIgc2hvdWxkIG1haW50YWluIHRo ZSBsaXN0IG9mIFNUVU4gc2VydmVyc1xuICAgICAgZm9yIHdoaWNoIGl0IHdpbGwgZ3JhbnQgdG9r ZW5zLCBhbmQgdGhlIGxvbmctdGVybSBzZWNyZXQgc2hhcmVkXG4gICAgICB3aXRoIGVhY2ggb2Yg dGhvc2UgU1RVTiBzZXJ2ZXJzLlxuXG4gICBvICBJZiBtYW51YWwgY29uZmlndXJhdGlvbiAoU2Vj dGlvbiA0LjEuMikgaXMgdXNlZCB0byBlc3RhYmxpc2hcbiAgICAgIHN5bW1ldHJpYyBrZXlzLCB0 aGUgbmVjZXNzYXJ5IGluZm9ybWF0aW9uIHdoaWNoIGluY2x1ZGVzIGxvbmctdGVybVxuICAgICAg a2V5IChLKSwgZW5jcnlwdGlvbiBhbmQgSE1BQyBhbGdvcml0aG1zIGhhdmUgdG8gYmUgY29uZmln dXJlZCBvblxuICAgICAgZWFjaCBhdXRob3JpemF0aW9uIHNlcnZlciBhbmQgU1RVTiBzZXJ2ZXIg Zm9yIGVhY2gga2lkLiAgVGhlXG4gICAgICBjbGllbnQgb2J0YWlucyB0aGUgc2Vzc2lvbiBrZXkg YW5kIEhNQUMgYWxnb3JpdGhtIGZyb20gdGhlXG4gICAgICBhdXRob3JpemF0aW9uIHNlcnZlciBp biBjb21wYW55IHdpdGggdGhlIHRva2VuLlxuXG4gICBvICBXaGVuIGEgU1RVTiBjbGllbnQgc2Vu ZHMgYSByZXF1ZXN0IHRvIGdldCBhY2Nlc3MgdG8gYSBwYXJ0aWN1bGFyXG4gICAgICBTVFVOIHNl cnZlciAoUykgdGhlIGF1dGhvcml6YXRpb24gc2VydmVyIG11c3QgZW5zdXJlIHRoYXQgaXRcbiAg ICAgIHNlbGVjdHMgdGhlIGFwcHJvcHJpYXRlIGtpZCwgYWNjZXNzLXRva2VuIGRlcGVuZGluZyBv biB0aGUgc2VydmVyXG4gICAgICBTLlxuXG4xMS4gIFNlY3VyaXR5IENvbnNpZGVyYXRpb25zXG5c biAgIFdoZW4gT0F1dGggMi4wIGlzIHVzZWQgdGhlIGludGVyYWN0aW9uIGJldHdlZW4gdGhlIGNs aWVudCBhbmQgdGhlXG4gICBhdXRob3JpemF0aW9uIHNlcnZlciByZXF1aXJlcyBUcmFuc3BvcnQg TGF5ZXIgU2VjdXJpdHkgKFRMUykgd2l0aCBhXG4gICBjaXBoZXJzdWl0ZSBvZmZlcmluZyBjb25m aWRlbnRpYWxpdHkgcHJvdGVjdGlvbiBhbmQgdGhlIGd1aWRhbmNlXG4gICBnaXZlbiBpbiBbSS1E LmlldGYtdXRhLXRscy1iY3BdIG11c3QgYmUgZm9sbG93ZWQgdG8gYXZvaWQgYXR0YWNrcyBvblxu ICAgVExTLiAgVGhlIHNlc3Npb24ga2V5IE1VU1QgTk9UIGJlIHRyYW5zbWl0dGVkIGluIGNsZWFy IHNpbmNlIHRoaXNcbiAgIHdvdWxkIGNvbXBsZXRlbHkgZGVzdHJveSB0aGUgc2VjdXJpdHkgYmVu ZWZpdHMgb2YgdGhlIHByb3Bvc2VkXG4gICBzY2hlbWUuICBBbiBhdHRhY2tlciB0cnlpbmcgdG8g cmVwbGF5IG1lc3NhZ2Ugd2l0aCBBQ0NFU1MtVE9LRU5cbiAgIGF0dHJpYnV0ZSBjYW4gYmUgbWl0 aWdhdGVkIGJ5IGZyZXF1ZW50IGNoYW5nZXMgb2Ygbm9uY2UgdmFsdWUgYXNcbiAgIGRpc2N1c3Nl ZCBpbiBzZWN0aW9uIDEwLjIgb2YgW1JGQzUzODldLiAgVGhlIGNsaWVudCBtYXkga25vdyBzb21l XG4gICAoYnV0IG5vdCBhbGwpIG9mIHRoZSB0b2tlbiBmaWVsZHMgZW5jcnlwdGVkIHdpdGggYSB1 bmtub3duIHNlY3JldCBrZXlcbiAgIGFuZCB0aGUgdG9rZW4gY2FuIGJlIHN1YmplY3RlZCB0byBr bm93bi1wbGFpbnRleHQgYXR0YWNrLCBidXQgQUVTIGlzXG4gICBzZWN1cmUgYWdhaW5zdCB0aGlz IGF0dGFjay5cblxuICAgQW4gYXR0YWNrZXIgbWF5IHJlbW92ZSB0aGUgVEhJUkQtUEFSVFktQVVU SE9SSVpBVElPTiBTVFVOIGF0dHJpYnV0ZVxuICAgZnJvbSB0aGUgZXJyb3IgbWVzc2FnZSBmb3Jj aW5nIHRoZSBjbGllbnQgdG8gcGljayBmaXJzdCBwYXJ0eVxuXG5cblxuUmVkZHksIGV0IGFsLiAg ICAgICAgICAgRXhwaXJlcyBPY3RvYmVyIDEwLCAyMDE1ICAgICAgICAgICAgICAgW1BhZ2UgMTRd XG5fXG5JbnRlcm5ldC1EcmFmdCAgICAgIFNUVU4gZm9yIDNyZCBwYXJ0eSBBdXRob3JpemF0aW9u ICAgICAgICAgIEFwcmlsIDIwMTVcblxuXG4gICBhdXRoZW50aWNhdGlvbiwgdGhpcyBhdHRhY2sg bWF5IGJlIG1pdGlnYXRlZCBieSBvcHRpbmcgZm9yIFRyYW5zcG9ydFxuICAgTGF5ZXIgU2VjdXJp dHkgKFRMUykgW1JGQzUyNDZdIG9yIERhdGFncmFtIFRyYW5zcG9ydCBMYXllciBTZWN1cml0eVxu ICAgKERUTFMpIFtSRkM2MzQ3XSBhcyBhIHRyYW5zcG9ydCBwcm90b2NvbCBmb3IgU2Vzc2lvbiBU cmF2ZXJzYWxcbiAgIFV0aWxpdGllcyBmb3IgTkFUIChTVFVOKSwgYXMgZGVmaW5lZCBpbiBbUkZD NTM4OV1hbmQgW1JGQzczNTBdLlxuXG4gICBUaHJlYXQgbWl0aWdhdGlvbiBkaXNjdXNzZWQgaW4g c2VjdGlvbiA1IG9mXG4gICBbSS1ELmlldGYtb2F1dGgtcG9wLWFyY2hpdGVjdHVyZV0gYW5kIHNl Y3VyaXR5IGNvbnNpZGVyYXRpb25zIGluXG4gICBbUkZDNTM4OV0gYXJlIHRvIGJlIHRha2VuIGlu dG8gYWNjb3VudC5cblxuMTIuICBJQU5BIENvbnNpZGVyYXRpb25zXG5cbiAgIFtQYXJhZ3JhcGhz IGJlbG93IGluIGJyYWNlcyBzaG91bGQgYmUgcmVtb3ZlZCBieSB0aGUgUkZDIEVkaXRvciB1cG9u XG4gICBwdWJsaWNhdGlvbl1cblxuICAgW0lBTkEgaXMgcmVxdWVzdGVkIHRvIGFkZCB0aGUgZm9s bG93aW5nIGF0dHJpYnV0ZXMgdG8gdGhlIFNUVU5cbiAgIGF0dHJpYnV0ZSByZWdpc3RyeSBbaWFu YS1zdHVuXSwgVGhlIFRISVJELVBBUlRZLUFVVEhPUklaQVRJT05cbiAgIGF0dHJpYnV0ZSByZXF1 aXJlcyB0aGF0IElBTkEgYWxsb2NhdGUgYSB2YWx1ZSBpbiB0aGUgIlNUVU4gYXR0cmlidXRlc1xu ICAgUmVnaXN0cnkiIGZyb20gdGhlIGNvbXByZWhlbnNpb24tb3B0aW9uYWwgcmFuZ2UgKDB4ODAw MC0weEJGRkYpXVxuXG4gICBUaGlzIGRvY3VtZW50IGRlZmluZXMgdGhlIFRISVJELVBBUlRZLUFV VEhPUklaQVRJT04gU1RVTiBhdHRyaWJ1dGUsXG4gICBkZXNjcmliZWQgaW4gU2VjdGlvbiA2LiAg SUFOQSBoYXMgYWxsb2NhdGVkIHRoZSBjb21wcmVoZW5zaW9uLVxuICAgb3B0aW9uYWwgY29kZXBv aW50IFRCRCBmb3IgdGhpcyBhdHRyaWJ1dGUuXG5cbiAgIFtUaGUgQUNDRVNTLVRPS0VOIGF0dHJp YnV0ZSByZXF1aXJlcyB0aGF0IElBTkEgYWxsb2NhdGUgYSB2YWx1ZSBpblxuICAgdGhlICJTVFVO IGF0dHJpYnV0ZXMgUmVnaXN0cnkiIGZyb20gdGhlIGNvbXByZWhlbnNpb24tcmVxdWlyZWQgcmFu Z2VcbiAgICgweDAwMDAtMHgzRkZGKV1cblxuICAgVGhpcyBkb2N1bWVudCBkZWZpbmVzIHRoZSBB Q0NFU1MtVE9LRU4gU1RVTiBhdHRyaWJ1dGUsIGRlc2NyaWJlZCBpblxuICAgU2VjdGlvbiA2LiAg SUFOQSBoYXMgYWxsb2NhdGVkIHRoZSBjb21wcmVoZW5zaW9uLXJlcXVpcmVkIGNvZGVwb2ludFxu ICAgVEJEIGZvciB0aGlzIGF0dHJpYnV0ZS5cblxuMTMuICBBY2tub3dsZWRnZW1lbnRzXG5cbiAg IEF1dGhvcnMgd291bGQgbGlrZSB0byB0aGFuayBEYW4gV2luZywgUGFsIE1hcnRpbnNlbiwgT2xl ZyBNb3NrYWxlbmtvLFxuICAgQ2hhcmxlcyBFY2tlbCwgU3BlbmNlciBEYXdraW5zLCBIYW5uZXMg VHNjaG9mZW5pZywgWWFyb24gU2hlZmZlciwgVG9tXG4gICBUYXlsb3IsIENocmlzdGVyIEhvbG1i ZXJnLCBQZXRlIFJlc25pY2ssIEthdGhsZWVuIE1vcmlhcnR5LCBSaWNoYXJkXG4gICBCYXJuZXMs IFN0ZXBoZW4gRmFycmVsbCBhbmQgQWxpc3NhIENvb3BlciBmb3IgY29tbWVudHMgYW5kIHJldmll dy5cbiAgIFRoZSBhdXRob3JzIHdvdWxkIGxpa2UgdG8gZ2l2ZSBzcGVjaWFsIHRoYW5rcyB0byBC cmFuZG9uIFdpbGxpYW1zIGZvclxuICAgaGlzIGhlbHAuXG5cbiAgIFRoYW5rcyB0byBPbGVnIE1v c2thbGVua28gZm9yIHByb3ZpZGluZyB0b2tlbiBzYW1wbGVzIGluIHRoZVxuICAgQXBwZW5kaXgg c2VjdGlvbi5cblxuMTQuICBSZWZlcmVuY2VzXG5cblxuXG5cblxuXG5cblJlZGR5LCBldCBhbC4g ICAgICAgICAgIEV4cGlyZXMgT2N0b2JlciAxMCwgMjAxNSAgICAgICAgICAgICAgIFtQYWdlIDE1 XVxuX1xuSW50ZXJuZXQtRHJhZnQgICAgICBTVFVOIGZvciAzcmQgcGFydHkgQXV0aG9yaXphdGlv biAgICAgICAgICBBcHJpbCAyMDE1XG5cblxuMTQuMS4gIE5vcm1hdGl2ZSBSZWZlcmVuY2VzXG5c biAgIFtJLUQuaWV0Zi1qb3NlLWpzb24td2ViLWFsZ29yaXRobXNdXG4gICAgICAgICAgICAgIEpv bmVzLCBNLiwgIkpTT04gV2ViIEFsZ29yaXRobXMgKEpXQSkiLCBkcmFmdC1pZXRmLWpvc2UtXG4g ICAgICAgICAgICAgIGpzb24td2ViLWFsZ29yaXRobXMtNDAgKHdvcmsgaW4gcHJvZ3Jlc3MpLCBK YW51YXJ5IDIwMTUuXG5cbiAgIFtSRkMyMTE5XSAgQnJhZG5lciwgUy4sICJLZXkgd29yZHMgZm9y IHVzZSBpbiBSRkNzIHRvIEluZGljYXRlXG4gICAgICAgICAgICAgIFJlcXVpcmVtZW50IExldmVs cyIsIEJDUCAxNCwgUkZDIDIxMTksIE1hcmNoIDE5OTcuXG5cbiAgIFtSRkM0NjQ4XSAgSm9zZWZz c29uLCBTLiwgIlRoZSBCYXNlMTYsIEJhc2UzMiwgYW5kIEJhc2U2NCBEYXRhXG4gICAgICAgICAg ICAgIEVuY29kaW5ncyIsIFJGQyA0NjQ4LCBPY3RvYmVyIDIwMDYuXG5cbiAgIFtSRkM0ODY4XSAg S2VsbHksIFMuIGFuZCBTLiBGcmFua2VsLCAiVXNpbmcgSE1BQy1TSEEtMjU2LCBITUFDLVNIQS1c biAgICAgICAgICAgICAgMzg0LCBhbmQgSE1BQy1TSEEtNTEyIHdpdGggSVBzZWMiLCBSRkMgNDg2 OCwgTWF5IDIwMDcuXG5cbiAgIFtSRkM1MTE2XSAgTWNHcmV3LCBELiwgIkFuIEludGVyZmFjZSBh bmQgQWxnb3JpdGhtcyBmb3IgQXV0aGVudGljYXRlZFxuICAgICAgICAgICAgICBFbmNyeXB0aW9u IiwgUkZDIDUxMTYsIEphbnVhcnkgMjAwOC5cblxuICAgW1JGQzUzODldICBSb3NlbmJlcmcsIEou LCBNYWh5LCBSLiwgTWF0dGhld3MsIFAuLCBhbmQgRC4gV2luZyxcbiAgICAgICAgICAgICAgIlNl c3Npb24gVHJhdmVyc2FsIFV0aWxpdGllcyBmb3IgTkFUIChTVFVOKSIsIFJGQyA1Mzg5LFxuICAg ICAgICAgICAgICBPY3RvYmVyIDIwMDguXG5cbiAgIFtSRkM2NzQ5XSAgSGFyZHQsIEQuLCAiVGhl IE9BdXRoIDIuMCBBdXRob3JpemF0aW9uIEZyYW1ld29yayIsIFJGQ1xuICAgICAgICAgICAgICA2 NzQ5LCBPY3RvYmVyIDIwMTIuXG5cbiAgIFtpYW5hLXN0dW5dXG4gICAgICAgICAgICAgIElBTkEs ICwgIklBTkE6IFNUVU4gQXR0cmlidXRlcyIsIEFwcmlsIDIwMTEsXG4gICAgICAgICAgICAgIF9o dHRwOi8vd3d3LmlhbmEub3JnL2Fzc2lnbm1lbnRzL3N0dW4tcGFyYW1ldGVycy9zdHVuLXBhXG4g ICAgICAgICAgICAgIHJhbWV0ZXJzLnhtbF8uXG5cbjE0LjIuICBJbmZvcm1hdGl2ZSBSZWZlcmVu Y2VzXG5cbiAgIFtJLUQuaWV0Zi1qb3NlLWpzb24td2ViLWVuY3J5cHRpb25dXG4gICAgICAgICAg ICAgIEpvbmVzLCBNLiBhbmQgSi4gSGlsZGVicmFuZCwgIkpTT04gV2ViIEVuY3J5cHRpb24gKEpX RSkiLFxuICAgICAgICAgICAgICBkcmFmdC1pZXRmLWpvc2UtanNvbi13ZWItZW5jcnlwdGlvbi00 MCAod29yayBpbiBwcm9ncmVzcyksXG4gICAgICAgICAgICAgIEphbnVhcnkgMjAxNS5cblxuICAg W0ktRC5pZXRmLWpvc2UtanNvbi13ZWItc2lnbmF0dXJlXVxuICAgICAgICAgICAgICBKb25lcywg TS4sIEJyYWRsZXksIEouLCBhbmQgTi4gU2FraW11cmEsICJKU09OIFdlYlxuICAgICAgICAgICAg ICBTaWduYXR1cmUgKEpXUykiLCBkcmFmdC1pZXRmLWpvc2UtanNvbi13ZWItc2lnbmF0dXJlLTQx XG4gICAgICAgICAgICAgICh3b3JrIGluIHByb2dyZXNzKSwgSmFudWFyeSAyMDE1LlxuXG4gICBb SS1ELmlldGYtb2F1dGgtanNvbi13ZWItdG9rZW5dXG4gICAgICAgICAgICAgIEpvbmVzLCBNLiwg QnJhZGxleSwgSi4sIGFuZCBOLiBTYWtpbXVyYSwgIkpTT04gV2ViIFRva2VuXG4gICAgICAgICAg ICAgIChKV1QpIiwgZHJhZnQtaWV0Zi1vYXV0aC1qc29uLXdlYi10b2tlbi0zMiAod29yayBpblxu ICAgICAgICAgICAgICBwcm9ncmVzcyksIERlY2VtYmVyIDIwMTQuXG5cblxuXG5cblxuUmVkZHks IGV0IGFsLiAgICAgICAgICAgRXhwaXJlcyBPY3RvYmVyIDEwLCAyMDE1ICAgICAgICAgICAgICAg W1BhZ2UgMTZdXG5fXG5JbnRlcm5ldC1EcmFmdCAgICAgIFNUVU4gZm9yIDNyZCBwYXJ0eSBBdXRo b3JpemF0aW9uICAgICAgICAgIEFwcmlsIDIwMTVcblxuXG4gICBbSS1ELmlldGYtb2F1dGgtcG9w LWFyY2hpdGVjdHVyZV1cbiAgICAgICAgICAgICAgSHVudCwgUC4sIFJpY2hlciwgSi4sIE1pbGxz LCBXLiwgTWlzaHJhLCBQLiwgYW5kIEguXG4gICAgICAgICAgICAgIFRzY2hvZmVuaWcsICJPQXV0 aCAyLjAgUHJvb2Ytb2YtUG9zc2Vzc2lvbiAoUG9QKSBTZWN1cml0eVxuICAgICAgICAgICAgICBB cmNoaXRlY3R1cmUiLCBkcmFmdC1pZXRmLW9hdXRoLXBvcC1hcmNoaXRlY3R1cmUtMDEgKHdvcmtc biAgICAgICAgICAgICAgaW4gcHJvZ3Jlc3MpLCBNYXJjaCAyMDE1LlxuXG4gICBbSS1ELmlldGYt b2F1dGgtcG9wLWtleS1kaXN0cmlidXRpb25dXG4gICAgICAgICAgICAgIEJyYWRsZXksIEouLCBI dW50LCBQLiwgSm9uZXMsIE0uLCBhbmQgSC4gVHNjaG9mZW5pZyxcbiAgICAgICAgICAgICAgIk9B dXRoIDIuMCBQcm9vZi1vZi1Qb3NzZXNzaW9uOiBBdXRob3JpemF0aW9uIFNlcnZlciB0b1xuICAg ICAgICAgICAgICBDbGllbnQgS2V5IERpc3RyaWJ1dGlvbiIsIGRyYWZ0LWlldGYtb2F1dGgtcG9w LWtleS1cbiAgICAgICAgICAgICAgZGlzdHJpYnV0aW9uLTAxICh3b3JrIGluIHByb2dyZXNzKSwg TWFyY2ggMjAxNS5cblxuICAgW0ktRC5pZXRmLXJ0Y3dlYi1vdmVydmlld11cbiAgICAgICAgICAg ICAgQWx2ZXN0cmFuZCwgSC4sICJPdmVydmlldzogUmVhbCBUaW1lIFByb3RvY29scyBmb3JcbiAg ICAgICAgICAgICAgQnJvd3Nlci1iYXNlZCBBcHBsaWNhdGlvbnMiLCBkcmFmdC1pZXRmLXJ0Y3dl Yi1vdmVydmlldy0xM1xuICAgICAgICAgICAgICAod29yayBpbiBwcm9ncmVzcyksIE5vdmVtYmVy IDIwMTQuXG5cbiAgIFtJLUQuaWV0Zi10cmFtLXN0dW5iaXNdXG4gICAgICAgICAgICAgIFBldGl0 LUh1Z3VlbmluLCBNLiwgU2FsZ3VlaXJvLCBHLiwgUm9zZW5iZXJnLCBKLiwgV2luZyxcbiAgICAg ICAgICAgICAgRC4sIE1haHksIFIuLCBhbmQgUC4gTWF0dGhld3MsICJTZXNzaW9uIFRyYXZlcnNh bFxuICAgICAgICAgICAgICBVdGlsaXRpZXMgZm9yIE5BVCAoU1RVTikiLCBkcmFmdC1pZXRmLXRy YW0tc3R1bmJpcy0wNFxuICAgICAgICAgICAgICAod29yayBpbiBwcm9ncmVzcyksIE1hcmNoIDIw MTUuXG5cbiAgIFtJLUQuaWV0Zi11dGEtdGxzLWJjcF1cbiAgICAgICAgICAgICAgU2hlZmZlciwg WS4sIEhvbHosIFIuLCBhbmQgUC4gU2FpbnQtQW5kcmUsXG4gICAgICAgICAgICAgICJSZWNvbW1l bmRhdGlvbnMgZm9yIFNlY3VyZSBVc2Ugb2YgVExTIGFuZCBEVExTIiwgZHJhZnQtXG4gICAgICAg ICAgICAgIGlldGYtdXRhLXRscy1iY3AtMTEgKHdvcmsgaW4gcHJvZ3Jlc3MpLCBGZWJydWFyeSAy MDE1LlxuXG4gICBbSS1ELm1jZ3Jldy1hZWFkLWFlcy1jYmMtaG1hYy1zaGEyXVxuICAgICAgICAg ICAgICBNY0dyZXcsIEQuLCBGb2xleSwgSi4sIGFuZCBLLiBQYXRlcnNvbiwgIkF1dGhlbnRpY2F0 ZWRcbiAgICAgICAgICAgICAgRW5jcnlwdGlvbiB3aXRoIEFFUy1DQkMgYW5kIEhNQUMtU0hBIiwg ZHJhZnQtbWNncmV3LWFlYWQtXG4gICAgICAgICAgICAgIGFlcy1jYmMtaG1hYy1zaGEyLTA1ICh3 b3JrIGluIHByb2dyZXNzKSwgSnVseSAyMDE0LlxuXG4gICBbUkZDMjEwNF0gIEtyYXdjenlrLCBI LiwgQmVsbGFyZSwgTS4sIGFuZCBSLiBDYW5ldHRpLCAiSE1BQzogS2V5ZWQtXG4gICAgICAgICAg ICAgIEhhc2hpbmcgZm9yIE1lc3NhZ2UgQXV0aGVudGljYXRpb24iLCBSRkMgMjEwNCwgRmVicnVh cnlcbiAgICAgICAgICAgICAgMTk5Ny5cblxuICAgW1JGQzUyNDZdICBEaWVya3MsIFQuIGFuZCBF LiBSZXNjb3JsYSwgIlRoZSBUcmFuc3BvcnQgTGF5ZXIgU2VjdXJpdHlcbiAgICAgICAgICAgICAg KFRMUykgUHJvdG9jb2wgVmVyc2lvbiAxLjIiLCBSRkMgNTI0NiwgQXVndXN0IDIwMDguXG5cbiAg IFtSRkM1NzY2XSAgTWFoeSwgUi4sIE1hdHRoZXdzLCBQLiwgYW5kIEouIFJvc2VuYmVyZywgIlRy YXZlcnNhbCBVc2luZ1xuICAgICAgICAgICAgICBSZWxheXMgYXJvdW5kIE5BVCAoVFVSTik6IFJl bGF5IEV4dGVuc2lvbnMgdG8gU2Vzc2lvblxuICAgICAgICAgICAgICBUcmF2ZXJzYWwgVXRpbGl0 aWVzIGZvciBOQVQgKFNUVU4pIiwgUkZDIDU3NjYsIEFwcmlsIDIwMTAuXG5cbiAgIFtSRkM1ODY5 XSAgS3Jhd2N6eWssIEguIGFuZCBQLiBFcm9uZW4sICJITUFDLWJhc2VkIEV4dHJhY3QtYW5kLUV4 cGFuZFxuICAgICAgICAgICAgICBLZXkgRGVyaXZhdGlvbiBGdW5jdGlvbiAoSEtERikiLCBSRkMg NTg2OSwgTWF5IDIwMTAuXG5cblxuXG5cblxuUmVkZHksIGV0IGFsLiAgICAgICAgICAgRXhwaXJl cyBPY3RvYmVyIDEwLCAyMDE1ICAgICAgICAgICAgICAgW1BhZ2UgMTddXG5fXG5JbnRlcm5ldC1E cmFmdCAgICAgIFNUVU4gZm9yIDNyZCBwYXJ0eSBBdXRob3JpemF0aW9uICAgICAgICAgIEFwcmls IDIwMTVcblxuXG4gICBbUkZDNjA2M10gIERvaGVydHksIEEuLCBQZWksIE0uLCBNYWNoYW5pLCBT LiwgYW5kIE0uIE55c3Ryb20sXG4gICAgICAgICAgICAgICJEeW5hbWljIFN5bW1ldHJpYyBLZXkg UHJvdmlzaW9uaW5nIFByb3RvY29sIChEU0tQUCkiLCBSRkNcbiAgICAgICAgICAgICAgNjA2Mywg RGVjZW1iZXIgMjAxMC5cblxuICAgW1JGQzYzNDddICBSZXNjb3JsYSwgRS4gYW5kIE4uIE1vZGFk dWd1LCAiRGF0YWdyYW0gVHJhbnNwb3J0IExheWVyXG4gICAgICAgICAgICAgIFNlY3VyaXR5IFZl cnNpb24gMS4yIiwgUkZDIDYzNDcsIEphbnVhcnkgMjAxMi5cblxuICAgW1JGQzY4MTldICBMb2Rk ZXJzdGVkdCwgVC4sIE1jR2xvaW4sIE0uLCBhbmQgUC4gSHVudCwgIk9BdXRoIDIuMFxuICAgICAg ICAgICAgICBUaHJlYXQgTW9kZWwgYW5kIFNlY3VyaXR5IENvbnNpZGVyYXRpb25zIiwgUkZDIDY4 MTksXG4gICAgICAgICAgICAgIEphbnVhcnkgMjAxMy5cblxuICAgW1JGQzcxNTldICBCcmF5LCBU LiwgIlRoZSBKYXZhU2NyaXB0IE9iamVjdCBOb3RhdGlvbiAoSlNPTikgRGF0YVxuICAgICAgICAg ICAgICBJbnRlcmNoYW5nZSBGb3JtYXQiLCBSRkMgNzE1OSwgTWFyY2ggMjAxNC5cblxuICAgW1JG QzczNTBdICBQZXRpdC1IdWd1ZW5pbiwgTS4gYW5kIEcuIFNhbGd1ZWlybywgIkRhdGFncmFtIFRy YW5zcG9ydFxuICAgICAgICAgICAgICBMYXllciBTZWN1cml0eSAoRFRMUykgYXMgVHJhbnNwb3J0 IGZvciBTZXNzaW9uIFRyYXZlcnNhbFxuICAgICAgICAgICAgICBVdGlsaXRpZXMgZm9yIE5BVCAo U1RVTikiLCBSRkMgNzM1MCwgQXVndXN0IDIwMTQuXG5cbiAgIFtSRkM3Mzc2XSAgUmVkZHksIFQu LCBSYXZpbmRyYW5hdGgsIFIuLCBQZXJ1bWFsLCBNLiwgYW5kIEEuIFllZ2luLFxuICAgICAgICAg ICAgICAiUHJvYmxlbXMgd2l0aCBTZXNzaW9uIFRyYXZlcnNhbCBVdGlsaXRpZXMgZm9yIE5BVCAo U1RVTilcbiAgICAgICAgICAgICAgTG9uZy1UZXJtIEF1dGhlbnRpY2F0aW9uIGZvciBUcmF2ZXJz YWwgVXNpbmcgUmVsYXlzIGFyb3VuZFxuICAgICAgICAgICAgICBOQVQgKFRVUk4pIiwgUkZDIDcz NzYsIFNlcHRlbWJlciAyMDE0LlxuXG5BcHBlbmRpeCBBLiAgU2FtcGxlIHRpY2tldHNcblxuSW5w dXQgZGF0YSAoc2FtZSBmb3IgYWxsIHNhbXBsZXMgYmVsb3cpOlxuXG4vL1NUVU4gU0VSVkVSIE5B TUVcbnNlcnZlcl9uYW1lID0gImJsYWNrZG93LmNhcmxlb24uZ292IjtcblxuLy9TaGFyZWQga2V5 IGJldHdlZW4gQVMgYW5kIFJTXG5cbmxvbmdfdGVybV9rZXkgPSBcXHg0OFxceDQ3XFx4NmJcXHg2 YVxceDMzXFx4MzJcXHg0YlxceDRhXFx4NDdcXHg2OVxceDc1XFx4NzlcbiAgICAgICAgICAgICAg ICBcXHgzMFxceDM5XFx4MzhcXHg3M1xceDY0XFx4NjZcXHg2MVxceDcxXFx4NjJcXHg0ZVxceDZh XFx4NGZcbiAgICAgICAgICAgICAgICBcXHg2OVxceDYxXFx4N2FcXHgzN1xceDMxXFx4MzlcXHgz MlxceDMzO1xuXG4vL01BQyBrZXkgb2YgdGhlIHNlc3Npb24gKGluY2x1ZGVkIGluIHRoZSB0b2tl bilcbm1hY19rZXkgPSBcXHg1YVxceDZiXFx4NzNcXHg2YVxceDcwXFx4NzdcXHg2NVxceDZmXFx4 NjlcXHg3OFxceDU4XFx4NmRcXHg3NlxceDZlXG4gICAgICAgICAgXFx4MzZcXHgzN1xceDM1XFx4 MzNcXHgzNFxceDZkO1xuXG4vL2xlbmd0aCBvZiB0aGUgTUFDIGtleVxubWFjX2tleV9sZW5ndGgg ID0gIDIwO1xuXG4vL1RoZSB0aW1lc3RhbXAgZmllbGQgaW4gdGhlIHRva2VuXG50b2tlbl90aW1l c3RhbXAgPSA5MjQ3MDMwMDcwNDc2ODtcblxuLy9UaGUgbGlmZXRpbWUgb2YgdGhlIHRva2VuXG50 b2tlbl9saWZldGltZSA9IDM2MDA7XG5cblxuXG5SZWRkeSwgZXQgYWwuICAgICAgICAgICBFeHBp cmVzIE9jdG9iZXIgMTAsIDIwMTUgICAgICAgICAgICAgICBbUGFnZSAxOF1cbl9cbkludGVybmV0 LURyYWZ0ICAgICAgU1RVTiBmb3IgM3JkIHBhcnR5IEF1dGhvcml6YXRpb24gICAgICAgICAgQXBy aWwgMjAxNVxuXG5cbi8vbm9uY2UgZm9yIEFFQUQgd2hlbiBBRUFEIGlzIHVzZWRcbmFlYWRfbm9u Y2UgPSBcXHg2OFxceDM0XFx4NmFcXHgzM1xceDZiXFx4MzJcXHg2Y1xceDMyXFx4NmVcXHgzNFxc eDYyXFx4MzU7XG5cblNhbXBsZXM6XG5cbjEpXG4gIGhrZGYgaGFzaCBmdW5jdGlvbiA9IFNIQS0y NTYsXG4gIHRva2VuIGVuY3J5cHRpb24gYWxnb3JpdGhtID0gQUVTLTI1Ni1DQkNcbiAgdG9rZW4g YXV0aCBhbGdvcml0aG0gPSBITUFDLVNIQS0yNTZcblxuICBSZXN1bHQ6XG4gIEFTX1JTIGtleSAo MzIgYnl0ZXMpID0gXFx4ZDhcXHhhNFxceDU0XFx4MVxceDY4XFx4YlxceGI4XFx4N2NcXHg2Y1xc eDg2XG4gICAgICAgICAgICAgICAgICAgICAgICAgXFx4YzVcXHgyOVxceDNlXFx4MzVcXHgzM1xc eDkxXFx4OWJcXHg1MVxceGZjXFx4ZjlcbiAgICAgICAgICAgICAgICAgICAgICAgICBcXHhkZVxc eDI1XFx4MTlcXHhhOVxceGEzXFx4NTZcXHgyYlxceDUxXFx4N2JcXHhlMlxceDc2XFx4NGZcblxu ICBBVVRIIGtleSAoMzIgYnl0ZXMpID0gXFx4NzJcXHhlMVxceGY5XFx4YzlcXHhmZVxceGI5XFx4 ZTdcXHhkOFxceDJhXFx4Y2NcXHgyZFxuICAgICAgICAgICAgICAgICAgICAgICAgXFx4YzNcXHgz M1xceGQ0XFx4MmZcXHhjMVxceDdmXFx4M2VcXHgzNlxceDI5XFx4ZmFcXHhmOFxceDUwXG4gICAg ICAgICAgICAgICAgICAgICAgICBcXHgxNlxceDVjXFx4Y2ZcXHg2MFxceGQxXFx4NjdcXHhiOVxc eDhmXFx4NzZcblxuICBFbmNyeXB0ZWQgdG9rZW4gKDgwIGJ5dGVzID0gNDgrMzIpID1cblxuIFxc eDI2XFx4NlxceDM4XFx4ODJcXHhmYVxceDc0XFx4YTZcXHgyXFx4NmFcXHhhNlxceGE0XFx4Mzdc XHgzMFxceGFjXFx4ODNcXHhjNlxceDQ1XFx4NTFcbiBcXHg1Y1xceDllXFx4M2VcXHhlYVxceDg2 XFx4MTFcXHhiOVxceDRlXFx4OGNcXHgyN1xceDM4XFx4OGFcXHg1MVxceGE3XFx4ZFxceGNcXHg3 NFxceDcyXG4gXFx4ZGZcXHhiOFxceDEyXFx4NmFcXHg4ZVxceDE3XFx4YjNcXHg1MFxceDE2XFx4 MTBcXHhlZVxceDdlXFx4NTNcXHhlMVxceDkwXFx4NmVcXHgzYlxceDM3XG4gXFx4ZGFcXHgxN1xc eDU3XFx4YjFcXHhhMlxceDZcXHg2NFxceDVjXFx4NjNcXHg3OVxceDMzXFx4MzRcXHg3ZFxceGFi XFx4NzFcXHg1NlxceDk4XFx4MmJcbiBcXHgxXFx4YTZcXHg2NlxceDI5XFx4Y2VcXHhiMVxceGE1 XFx4YjRcblxuXG4gIDIpXG5cbiAgaGtkZiBoYXNoIGZ1bmN0aW9uID0gU0hBLTI1NixcbiAgdG9r ZW4gZW5jcnlwdGlvbiBhbGdvcml0aG0gPSBBRUFEX0FFU18yNTZfR0NNXG4gIHRva2VuIGF1dGgg YWxnb3JpdGhtID0gTi9BXG5cbiAgUmVzdWx0OlxuICBBU19SUyBrZXkgKDMyIGJ5dGVzKSA9IFxc eGQ4XFx4YTRcXHg1NFxceDFcXHg2OFxceGJcXHhiOFxceDdjXFx4NmNcXHg4NlxceGM1XFx4Mjlc XHgzZVxuICAgICAgICAgICAgICAgICAgICAgICAgIFxceDM1XFx4MzNcXHg5MVxceDliXFx4NTFc XHhmY1xceGY5XFx4ZGVcXHgyNVxceDE5XFx4YTlcXHhhM1xceDU2XG4gICAgICAgICAgICAgICAg ICAgICAgICAgXFx4MmJcXHg1MVxceDdiXFx4ZTJcXHg3NlxceDRmXG4gIEFVVEgga2V5ID0gTi9B XG5cbiAgRW5jcnlwdGVkIHRva2VuICg2MiBieXRlcyA9IDM0ICsgMTYgKyAxMikgPVxuXG4gXFx4 ZDRcXHg4NlxceDVjXFx4NWRcXHg1OVxceGZiXFx4M2ZcXHhlM1xceGY2XFx4ZjFcXHhkOFxceGMz XFx4MjJcXHhjMlxceDIyXFx4MjZcXHg4ZFxceDJlXFx4ZjBcbiBcXHhiZVxceDJcXHg1YlxceGJk XFx4MTNcXHg0OVxceDg5XFx4NmVcXHhhNVxceGM1XFx4NTFcXHhlZVxceGVlXFx4N2ZcXHhkOVxc eGU0XFx4NDFcXHhkN1xceGNiXG4gXFx4NTFcXHgyMFxceDQwXFx4Y2NcXHhjNVxceDUzXFx4OTBc XHgyZlxceGRjXFx4YmJcXHg4ZFxceDUzXFx4NjhcXHgzNFxceDZhXFx4MzNcXHg2YlxceDMyXFx4 NmNcbiBcXHgzMlxceDZlXFx4MzRcXHg2MlxceDM1XG5cblxuXG5cblxuUmVkZHksIGV0IGFsLiAg ICAgICAgICAgRXhwaXJlcyBPY3RvYmVyIDEwLCAyMDE1ICAgICAgICAgICAgICAgW1BhZ2UgMTld XG5fXG5JbnRlcm5ldC1EcmFmdCAgICAgIFNUVU4gZm9yIDNyZCBwYXJ0eSBBdXRob3JpemF0aW9u ICAgICAgICAgIEFwcmlsIDIwMTVcblxuXG4gICAgICAgICAgICAgICAgICAgICAgICAgRmlndXJl IDU6IFNhbXBsZSB0aWNrZXRzXG5cbkFwcGVuZGl4IEIuICBJbnRlcmFjdGlvbiBiZXR3ZWVuIGNs aWVudCBhbmQgYXV0aG9yaXphdGlvbiBzZXJ2ZXJcblxuICAgQ2xpZW50IG1ha2VzIGFuIEhUVFAg cmVxdWVzdCB0byBhbiBhdXRob3JpemF0aW9uIHNlcnZlciB0byBvYnRhaW4gYVxuICAgdG9rZW4g dGhhdCBjYW4gYmUgdXNlZCB0byBhdmFpbCBpdHNlbGYgb2YgU1RVTiBzZXJ2aWNlcy4gIFRoZSBT VFVOXG4gICB0b2tlbiBpcyByZXR1cm5lZCBpbiBKU09OIHN5bnRheCBbUkZDNzE1OV0sIGFsb25n IHdpdGggb3RoZXIgT0F1dGhcbiAgIDIuMCBwYXJhbWV0ZXJzIGxpa2UgdG9rZW4gdHlwZSwga2V5 LCB0b2tlbiBsaWZldGltZSBhbmQga2lkIGRlZmluZWRcbiAgIGluIFtJLUQuaWV0Zi1vYXV0aC1w b3Ata2V5LWRpc3RyaWJ1dGlvbl0uXG5cblxuICAgKy0tLS0tLS0tLS0tLS0tLS0tLS0rICAgICAg ICAgICAgICAgICAgICAgICAgICstLS0tLS0tLSsgICstLS0tLS0tLS0rXG4gICBfIC4uLi4uLi4u LiAgU1RVTiAgIF8gICAgICAgICAgICAgICAgICAgICAgICAgXyAgU1RVTiAgXyAgXyAgV2ViUlRD IF9cbiAgIF8gLldlYlJUQyAuICBDbGllbnQgXyAgICAgICAgICAgICAgICAgICAgICAgICBfICAg ICAgICBfICBfICAgICAgICAgX1xuICAgXyAuQ2xpZW50IC4gICAgICAgICBfICAgICAgICAgICAg ICAgICAgICAgICAgIF8gU2VydmVyIF8gIF8gIFNlcnZlciBfXG4gICBfIC4uLi4uLi4uLiAgICAg ICAgIF8gICAgICAgICAgICAgICAgICAgICAgICAgXyAgICAgICAgXyAgXyAgICAgICAgIF9cbiAg ICstLS0tLS0tLS0tLS0tLS0tLS0tKyAgICAgICAgICAgICAgICAgICAgICAgICArLS0tLS0tLS0r ICArLS0tLS0tLS0tK1xuICAgICBfICAgICAgIF8gICAgICAgICAgIFNUVU4gcmVxdWVzdCAgICAg ICAgICAgICAgICAgICAgXyAgICAgICAgIF9cbiAgICAgXyAgICAgICBfLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tX18gICAgICAgICBfXG4gICAgIF8gICAgICAgXyAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICBfICAgICAgICAgX1xuICAg ICBfICAgICAgIF8gICAgICAgICBTVFVOIGVycm9yIHJlc3BvbnNlICAgICAgICAgICAgICAgXyAg ICAgICAgIF9cbiAgICAgXyAgICAgICBfICAgICAgICAgKDQwMSBVbmF1dGhvcml6ZWQpICAgICAg ICAgICAgICAgIF8gICAgICAgICBfXG4gICAgIF8gICAgICAgX18tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS1fICAgICAgICAgX1xuICAgICBfICAgICAgIF8gICAgICAg ICBUSElSRC1QQVJUWS1BVVRIT1JJWkFUSU9OICAgICAgICAgXyAgICAgICAgIF9cbiAgICAgXyAg ICAgICBfICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIF8gICAgICAg ICBfXG4gICAgIF8gICAgICAgXyAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICBfICAgICAgICAgX1xuICAgICBfICAgICAgIF8gICAgICBIVFRQIFJlcXVlc3QgZm9yIHRv a2VuICAgICAgICAgICAgICAgXyAgICAgICAgIF9cbiAgICAgXy0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLV9fXG4gICAgIF8gICAgICAg XyAgICAgIEhUVFAgUmVzcG9uc2Ugd2l0aCB0b2tlbiBwYXJhbWV0ZXJzICBfICAgICAgICAgX1xu ICAgICBfXy0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLV9cbiAgICAgX09BdXRoIDIuMCAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgIF8gICAgICAgICBfXG4gICAgICBBdHRyaWJ1dGVzICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICBfICAgICAgICAgX1xuICAgICBfLS0tLS0tX18gICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgXyAgICAgICAgIF9cbiAgICAg XyAgICAgICBfICAgIFNUVU4gcmVxdWVzdCB3aXRoIEFDQ0VTUy1UT0tFTiAgICAgICAgIF8gICAg ICAgICBfXG4gICAgIF8gICAgICAgXy0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLV9fICAgICAgICAgX1xuICAgICBfICAgICAgIF8gICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgXyAgICAgICAgIF9cbiAgICAgXyAgICAgICBfICAgICAgICAg U1RVTiBzdWNjZXNzIHJlc3BvbnNlICAgICAgICAgICAgIF8gICAgICAgICBfXG4gICAgIF8gICAg ICAgX18tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS1fICAgICAgICAg X1xuICAgICBfICAgICAgIF8gICAgICAgICAgICAgU1RVTiBNZXNzYWdlcyAgICAgICAgICAgICAg ICAgXyAgICAgICAgIF9cbiAgICAgXyAgICAgICBfICAgICAgLy8vLy8vIGludGVncml0eSBwcm90 ZWN0ZWQgLy8vLy8vICAgIF8gICAgICAgICBfXG4gICAgIF8gICAgICAgXyAgICAgIC8vLy8vLyBp bnRlZ3JpdHkgcHJvdGVjdGVkIC8vLy8vLyAgICBfICAgICAgICAgX1xuICAgICBfICAgICAgIF8g ICAgICAvLy8vLy8gaW50ZWdyaXR5IHByb3RlY3RlZCAvLy8vLy8gICAgXyAgICAgICAgIF9cblxu ICAgICAgICAgICAgICAgICBGaWd1cmUgNjogU1RVTiBUaGlyZCBQYXJ0eSBBdXRob3JpemF0aW9u XG5cbiAgIFtJLUQuaWV0Zi1vYXV0aC1wb3Ata2V5LWRpc3RyaWJ1dGlvbl0gZGVzY3JpYmVzIHRo ZSBpbnRlcmFjdGlvblxuICAgYmV0d2VlbiB0aGUgY2xpZW50IGFuZCB0aGUgYXV0aG9yaXphdGlv biBzZXJ2ZXIuICBGb3IgZXhhbXBsZSwgdGhlXG4gICBjbGllbnQgbGVhcm5zIHRoZSBTVFVOIHNl cnZlciBuYW1lICJzdHVuMUBleGFtcGxlLmNvbSIgZnJvbSBUSElSRC1cblxuXG5cblJlZGR5LCBl dCBhbC4gICAgICAgICAgIEV4cGlyZXMgT2N0b2JlciAxMCwgMjAxNSAgICAgICAgICAgICAgIFtQ YWdlIDIwXVxuX1xuSW50ZXJuZXQtRHJhZnQgICAgICBTVFVOIGZvciAzcmQgcGFydHkgQXV0aG9y aXphdGlvbiAgICAgICAgICBBcHJpbCAyMDE1XG5cblxuICAgUEFSVFktQVVUSE9SSVpBVElPTiBh dHRyaWJ1dGUgdmFsdWUgYW5kIG1ha2VzIHRoZSBmb2xsb3dpbmcgSFRUUFxuICAgcmVxdWVzdCBm b3IgdGhlIGFjY2VzcyB0b2tlbiB1c2luZyB0cmFuc3BvcnQtbGF5ZXIgc2VjdXJpdHkgKHdpdGhc biAgIGV4dHJhIGxpbmUgYnJlYWtzIGZvciBkaXNwbGF5IHB1cnBvc2VzIG9ubHkpOlxuXG4gICAg ICAgIEhUVFAvMS4xXG4gICAgICAgIEhvc3Q6IHNlcnZlci5leGFtcGxlLmNvbVxuICAgICAgICBD b250ZW50LVR5cGU6IGFwcGxpY2F0aW9uL3gtd3d3LWZvcm0tdXJsZW5jb2RlZFxuICAgICAgICBh dWQ9c3R1bjFAZXhhbXBsZS5jb21cbiAgICAgICAgdGltZXN0YW1wPTEzNjE0NzE2MjlcbiAgICAg ICAgZ3JhbnRfdHlwZT1pbXBsaWNpdFxuICAgICAgICB0b2tlbl90eXBlPXBvcFxuICAgICAgICBh bGc9SE1BQy1TSEEtMSBITUFDLVNIQS0yNTYtMTI4XG5cbiAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgRmlndXJlIDc6IFJlcXVlc3RcblxuICAgW0ktRC5pZXRmLXRyYW0tc3R1bmJpc10gd2ls bCBzdXBwb3J0IGhhc2ggYWdpbGl0eSBhbmQgYWNjb21wbGlzaCB0aGlzXG4gICBhZ2lsaXR5IGJ5 IGNvbnZleWluZyB0aGUgSE1BQyBhbGdvcml0aG1zIHN1cHBvcnRlZCBieSB0aGUgU1RVTiBzZXJ2 ZXJcbiAgIGFsb25nIHdpdGggYSBTVFVOIGVycm9yIG1lc3NhZ2UgdG8gdGhlIGNsaWVudC4gIFRo ZSBjbGllbnQgdGhlblxuICAgc2lnbmFscyB0aGUgaW50ZXJzZWN0aW9uLXNldCBvZiBhbGdvcml0 aG1zIHN1cHBvcnRlZCBieSBpdCBhbmQgdGhlXG4gICBTVFVOIHNlcnZlciB0byB0aGUgYXV0aG9y aXphdGlvbiBzZXJ2ZXIgaW4gdGhlIFwnYWxnXCcgcGFyYW1ldGVyXG4gICBkZWZpbmVkIGluIFtJ LUQuaWV0Zi1vYXV0aC1wb3Ata2V5LWRpc3RyaWJ1dGlvbl0uICBUaGUgYXV0aG9yaXphdGlvblxu ICAgc2VydmVyIHNlbGVjdHMgYW4gSE1BQyBhbGdvcml0aG0gZnJvbSB0aGUgbGlzdCBvZiBhbGdv cml0aG1zIHRoZVxuICAgY2xpZW50IHByb3ZpZGVkIGFuZCBkZXRlcm1pbmVzIGxlbmd0aCBvZiB0 aGUgbWFjX2tleSBiYXNlZCBvbiB0aGVcbiAgIHNlbGVjdGVkIEhNQUMgYWxnb3JpdGhtLiAgTm90 ZSB0aGF0IHVudGlsIFNUVU4gc3VwcG9ydHMgaGFzaCBhZ2lsaXR5XG4gICBITUFDLVNIQTEgaXMg dGhlIG9ubHkgdmFsaWQgaGFzaCBhbGdvcml0aG0gdGhhdCB0aGUgY2xpZW50IGNhbiBzaWduYWxc biAgIHRvIHRoZSBhdXRob3JpemF0aW9uIHNlcnZlciBhbmQgdmljZS12ZXJzYS5cblxuICAgSWYg dGhlIGNsaWVudCBpcyBhdXRob3JpemVkIHRoZW4gdGhlIGF1dGhvcml6YXRpb24gc2VydmVyIGlz c3VlcyBhblxuICAgYWNjZXNzIHRva2VuLiAgQW4gZXhhbXBsZSBvZiBzdWNjZXNzZnVsIHJlc3Bv bnNlOlxuXG4gICAgICAgIEhUVFAvMS4xIDIwMCBPS1xuICAgICAgICBDb250ZW50LVR5cGU6IGFw cGxpY2F0aW9uL2pzb25cbiAgICAgICAgQ2FjaGUtQ29udHJvbDogbm8tc3RvcmVcblxuICAgICAg ICB7XG4gICAgICAgICAgImFjY2Vzc190b2tlbiI6XG4gICAiVTJGc2RHVmtYMThxSksva2tXbVJj bmZIZ2xyVlRKU3BTNnlVMzJrbUhtT3JmR3lJM20xZ1FqMWpSUHNyMHVCYlxuICAgSGN0dXljQWdz ZlJYN25KVzJCZHVrR3lLTVhTaU5HTm5Cemlna0FvZlA2K1ozdmtKMVE1cFdiZlNScm9Pa1dCbiIs XG4gICAgICAgICAgInRva2VuX3R5cGUiOiJwb3AiLFxuICAgICAgICAgICJleHBpcmVzX2luIjox ODAwLFxuICAgICAgICAgICJraWQiOiIyMkJJanhVOTNoL0lnd0ViIixcbiAgICAgICAgICAia2V5 IjoidjUxTjYyT002NWt5TXZmVEkwOE8iXG4gICAgICAgICAgImFsZyI6SE1BQy1TSEEtMjU2LTEy OFxuICAgICAgICB9XG5cbiAgICAgICAgICAgICAgICAgICAgICAgICAgICBGaWd1cmUgODogUmVz cG9uc2VcblxuXG5cblxuXG5SZWRkeSwgZXQgYWwuICAgICAgICAgICBFeHBpcmVzIE9jdG9iZXIg MTAsIDIwMTUgICAgICAgICAgICAgICBbUGFnZSAyMV1cbl9cbkludGVybmV0LURyYWZ0ICAgICAg U1RVTiBmb3IgM3JkIHBhcnR5IEF1dGhvcml6YXRpb24gICAgICAgICAgQXByaWwgMjAxNVxuXG5c bkF1dGhvcnNcJyBBZGRyZXNzZXNcblxuICAgVGlydW1hbGVzd2FyIFJlZGR5XG4gICBDaXNjbyBT eXN0ZW1zLCBJbmMuXG4gICBDZXNzbmEgQnVzaW5lc3MgUGFyaywgVmFydGh1ciBIb2JsaVxuICAg U2FyamFwdXIgTWFyYXRoYWxsaSBPdXRlciBSaW5nIFJvYWRcbiAgIEJhbmdhbG9yZSwgS2FybmF0 YWthICA1NjAxMDNcbiAgIEluZGlhXG5cbiAgIEVtYWlsOiB0aXJlZGR5QGNpc2NvLmNvbVxuXG5c biAgIFByYXNoYW50aCBQYXRpbFxuICAgQ2lzY28gU3lzdGVtcywgSW5jLlxuICAgQmFuZ2Fsb3Jl XG4gICBJbmRpYVxuXG4gICBFbWFpbDogcHJhc3BhdGlAY2lzY28uY29tXG5cblxuICAgUmFtIE1v aGFuIFJhdmluZHJhbmF0aFxuICAgQ2lzY28gU3lzdGVtcywgSW5jLlxuICAgQ2Vzc25hIEJ1c2lu ZXNzIFBhcmssXG4gICBLYWRhYmVlc2FuYWhhbGxpIFZpbGxhZ2UsIFZhcnRodXIgSG9ibGksXG4g ICBTYXJqYXB1ci1NYXJhdGhhaGFsbGkgT3V0ZXIgUmluZyBSb2FkXG4gICBCYW5nYWxvcmUsIEth cm5hdGFrYSAgNTYwMTAzXG4gICBJbmRpYVxuXG4gICBFbWFpbDogcm1vaGFuckBjaXNjby5jb21c blxuXG4gICBKdXN0aW4gVWJlcnRpXG4gICBHb29nbGVcbiAgIDc0NyA2dGggQXZlIFNcbiAgIEtp cmtsYW5kLCBXQVxuICAgOTgwMzNcbiAgIFVTQVxuXG4gICBFbWFpbDoganVzdGluQHViZXJ0aS5u YW1lXG5cblxuXG5cblxuXG5cblxuXG5cblxuXG5SZWRkeSwgZXQgYWwuICAgICAgICAgICBFeHBp cmVzIE9jdG9iZXIgMTAsIDIwMTUgICAgICAgICAgICAgICBbUGFnZSAyMl1cbicsICdmaWxlbmFt ZTEnOiAnJywgJ3VybDEnOiAnaHR0cHM6Ly90b29scy5pZXRmLm9yZy9pZC9kcmFmdC1pZXRmLXRy YW0tdHVybi10aGlyZC1wYXJ0eS1hdXRoei0xMy50eHQnLCAnc3VibWl0JzogJ0dlbmVyYXRlIGRp ZmYnLCAndXJsMic6ICcnLCAnLS1uZXdjb2xvdXInOiAnZ3JlZW4nfSAtLT48L2JvZHk+PC9odG1s Pg== --_003_913383AAA69FF945B8F946018B75898A411FFC5Fxmbrcdx10ciscoc_ Content-Type: text/plain; name="draft-ietf-tram-turn-third-party-authz-14.txt" Content-Description: draft-ietf-tram-turn-third-party-authz-14.txt Content-Disposition: attachment; filename="draft-ietf-tram-turn-third-party-authz-14.txt"; size=50401; creation-date="Thu, 09 Apr 2015 03:23:55 GMT"; modification-date="Thu, 09 Apr 2015 03:23:57 GMT" Content-Transfer-Encoding: base64 CgoKClRSQU0gICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICBULiBSZWRkeQpJbnRlcm5ldC1EcmFmdCAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgUC4gUGF0aWwKSW50ZW5kZWQgc3RhdHVzOiBTdGFu ZGFyZHMgVHJhY2sgICAgICAgICAgICAgICAgICAgICAgICAgUi4gUmF2aW5kcmFuYXRoCkV4cGly ZXM6IE9jdG9iZXIgMTAsIDIwMTUgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICBDaXNjbwogICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICBKLiBVYmVydGkKICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgR29vZ2xlCiAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgQXByaWwgOCwgMjAx NQoKCiAgU2Vzc2lvbiBUcmF2ZXJzYWwgVXRpbGl0aWVzIGZvciBOQVQgKFNUVU4pIEV4dGVuc2lv biBmb3IgVGhpcmQgUGFydHkKICAgICAgICAgICAgICAgICAgICAgICAgICAgICBBdXRob3JpemF0 aW9uCiAgICAgICAgICAgICAgIGRyYWZ0LWlldGYtdHJhbS10dXJuLXRoaXJkLXBhcnR5LWF1dGh6 LTE0CgpBYnN0cmFjdAoKICAgVGhpcyBkb2N1bWVudCBwcm9wb3NlcyB0aGUgdXNlIG9mIE9BdXRo IDIuMCB0byBvYnRhaW4gYW5kIHZhbGlkYXRlCiAgIGVwaGVtZXJhbCB0b2tlbnMgdGhhdCBjYW4g YmUgdXNlZCBmb3IgU2Vzc2lvbiBUcmF2ZXJzYWwgVXRpbGl0aWVzIGZvcgogICBOQVQgKFNUVU4p IGF1dGhlbnRpY2F0aW9uLiAgVGhlIHVzYWdlIG9mIGVwaGVtZXJhbCB0b2tlbnMgZW5zdXJlcwog ICB0aGF0IGFjY2VzcyB0byBhIFNUVU4gc2VydmVyIGNhbiBiZSBjb250cm9sbGVkIGV2ZW4gaWYg dGhlIHRva2VucyBhcmUKICAgY29tcHJvbWlzZWQuCgpTdGF0dXMgb2YgVGhpcyBNZW1vCgogICBU aGlzIEludGVybmV0LURyYWZ0IGlzIHN1Ym1pdHRlZCBpbiBmdWxsIGNvbmZvcm1hbmNlIHdpdGgg dGhlCiAgIHByb3Zpc2lvbnMgb2YgQkNQIDc4IGFuZCBCQ1AgNzkuCgogICBJbnRlcm5ldC1EcmFm dHMgYXJlIHdvcmtpbmcgZG9jdW1lbnRzIG9mIHRoZSBJbnRlcm5ldCBFbmdpbmVlcmluZwogICBU YXNrIEZvcmNlIChJRVRGKS4gIE5vdGUgdGhhdCBvdGhlciBncm91cHMgbWF5IGFsc28gZGlzdHJp YnV0ZQogICB3b3JraW5nIGRvY3VtZW50cyBhcyBJbnRlcm5ldC1EcmFmdHMuICBUaGUgbGlzdCBv ZiBjdXJyZW50IEludGVybmV0LQogICBEcmFmdHMgaXMgYXQgaHR0cDovL2RhdGF0cmFja2VyLmll dGYub3JnL2RyYWZ0cy9jdXJyZW50Ly4KCiAgIEludGVybmV0LURyYWZ0cyBhcmUgZHJhZnQgZG9j dW1lbnRzIHZhbGlkIGZvciBhIG1heGltdW0gb2Ygc2l4IG1vbnRocwogICBhbmQgbWF5IGJlIHVw ZGF0ZWQsIHJlcGxhY2VkLCBvciBvYnNvbGV0ZWQgYnkgb3RoZXIgZG9jdW1lbnRzIGF0IGFueQog ICB0aW1lLiAgSXQgaXMgaW5hcHByb3ByaWF0ZSB0byB1c2UgSW50ZXJuZXQtRHJhZnRzIGFzIHJl ZmVyZW5jZQogICBtYXRlcmlhbCBvciB0byBjaXRlIHRoZW0gb3RoZXIgdGhhbiBhcyAid29yayBp biBwcm9ncmVzcy4iCgogICBUaGlzIEludGVybmV0LURyYWZ0IHdpbGwgZXhwaXJlIG9uIE9jdG9i ZXIgMTAsIDIwMTUuCgpDb3B5cmlnaHQgTm90aWNlCgogICBDb3B5cmlnaHQgKGMpIDIwMTUgSUVU RiBUcnVzdCBhbmQgdGhlIHBlcnNvbnMgaWRlbnRpZmllZCBhcyB0aGUKICAgZG9jdW1lbnQgYXV0 aG9ycy4gIEFsbCByaWdodHMgcmVzZXJ2ZWQuCgogICBUaGlzIGRvY3VtZW50IGlzIHN1YmplY3Qg dG8gQkNQIDc4IGFuZCB0aGUgSUVURiBUcnVzdCdzIExlZ2FsCiAgIFByb3Zpc2lvbnMgUmVsYXRp bmcgdG8gSUVURiBEb2N1bWVudHMKICAgKGh0dHA6Ly90cnVzdGVlLmlldGYub3JnL2xpY2Vuc2Ut aW5mbykgaW4gZWZmZWN0IG9uIHRoZSBkYXRlIG9mCiAgIHB1YmxpY2F0aW9uIG9mIHRoaXMgZG9j dW1lbnQuICBQbGVhc2UgcmV2aWV3IHRoZXNlIGRvY3VtZW50cwogICBjYXJlZnVsbHksIGFzIHRo ZXkgZGVzY3JpYmUgeW91ciByaWdodHMgYW5kIHJlc3RyaWN0aW9ucyB3aXRoIHJlc3BlY3QKCgoK UmVkZHksIGV0IGFsLiAgICAgICAgICAgRXhwaXJlcyBPY3RvYmVyIDEwLCAyMDE1ICAgICAgICAg ICAgICAgIFtQYWdlIDFdCgwKSW50ZXJuZXQtRHJhZnQgICAgICBTVFVOIGZvciAzcmQgcGFydHkg QXV0aG9yaXphdGlvbiAgICAgICAgICBBcHJpbCAyMDE1CgoKICAgdG8gdGhpcyBkb2N1bWVudC4g IENvZGUgQ29tcG9uZW50cyBleHRyYWN0ZWQgZnJvbSB0aGlzIGRvY3VtZW50IG11c3QKICAgaW5j bHVkZSBTaW1wbGlmaWVkIEJTRCBMaWNlbnNlIHRleHQgYXMgZGVzY3JpYmVkIGluIFNlY3Rpb24g NC5lIG9mCiAgIHRoZSBUcnVzdCBMZWdhbCBQcm92aXNpb25zIGFuZCBhcmUgcHJvdmlkZWQgd2l0 aG91dCB3YXJyYW50eSBhcwogICBkZXNjcmliZWQgaW4gdGhlIFNpbXBsaWZpZWQgQlNEIExpY2Vu c2UuCgpUYWJsZSBvZiBDb250ZW50cwoKICAgMS4gIEludHJvZHVjdGlvbiAgLiAuIC4gLiAuIC4g LiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gICAyCiAgIDIuICBUZXJtaW5vbG9n eSAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuICAgMwog ICAzLiAgU29sdXRpb24gT3ZlcnZpZXcgLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAu IC4gLiAuIC4gLiAgIDMKICAgNC4gIE9idGFpbmluZyBhIFRva2VuIFVzaW5nIE9BdXRoIC4gLiAu IC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gICA0CiAgICAgNC4xLiAgS2V5IEVzdGFibGlzaG1l bnQgLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuICAgNAogICAgICAgNC4x LjEuICBIVFRQIGludGVyYWN0aW9ucyAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4g LiAgIDUKICAgICAgIDQuMS4yLiAgTWFudWFsIHByb3Zpc2lvbmluZyAuIC4gLiAuIC4gLiAuIC4g LiAuIC4gLiAuIC4gLiAuIC4gICA2CiAgIDUuICBGb3JtaW5nIGEgUmVxdWVzdCAuIC4gLiAuIC4g LiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuICAgNgogICA2LiAgU1RVTiBBdHRyaWJ1 dGVzIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAgIDYKICAg ICA2LjEuICBUSElSRC1QQVJUWS1BVVRIT1JJWkFUSU9OIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAu IC4gLiAuIC4gICA3CiAgICAgNi4yLiAgQUNDRVNTLVRPS0VOICAuIC4gLiAuIC4gLiAuIC4gLiAu IC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuICAgNwogICA3LiAgU1RVTiBTZXJ2ZXIgQmVoYXZpb3Vy IC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAgIDkKICAgOC4gIFNUVU4g Q2xpZW50IEJlaGF2aW91ciAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4g IDEwCiAgIDkuICBVc2FnZSB3aXRoIFRVUk4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4g LiAuIC4gLiAuIC4gLiAuICAxMAogICAxMC4gT3BlcmF0aW9uYWwgQ29uc2lkZXJhdGlvbnMgIC4g LiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAgMTQKICAgMTEuIFNlY3VyaXR5IENvbnNp ZGVyYXRpb25zIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gIDE0CiAgIDEy LiBJQU5BIENvbnNpZGVyYXRpb25zIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAu IC4gLiAuICAxNQogICAxMy4gQWNrbm93bGVkZ2VtZW50cyAgLiAuIC4gLiAuIC4gLiAuIC4gLiAu IC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAgMTUKICAgMTQuIFJlZmVyZW5jZXMgIC4gLiAuIC4gLiAu IC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gIDE1CiAgICAgMTQuMS4gIE5v cm1hdGl2ZSBSZWZlcmVuY2VzIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuICAx NgogICAgIDE0LjIuICBJbmZvcm1hdGl2ZSBSZWZlcmVuY2VzIC4gLiAuIC4gLiAuIC4gLiAuIC4g LiAuIC4gLiAuIC4gLiAgMTYKICAgQXBwZW5kaXggQS4gIFNhbXBsZSB0aWNrZXRzIC4gLiAuIC4g LiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gIDE4CiAgIEFwcGVuZGl4IEIuICBJbnRlcmFj dGlvbiBiZXR3ZWVuIGNsaWVudCBhbmQgYXV0aG9yaXphdGlvbiBzZXJ2ZXIgICAyMAogICBBdXRo b3JzJyBBZGRyZXNzZXMgIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAu IC4gLiAgMjIKCjEuICBJbnRyb2R1Y3Rpb24KCiAgIFNlc3Npb24gVHJhdmVyc2FsIFV0aWxpdGll cyBmb3IgTkFUIChTVFVOKSBbUkZDNTM4OV0gcHJvdmlkZXMgYQogICBtZWNoYW5pc20gdG8gY29u dHJvbCBhY2Nlc3MgdmlhICJsb25nLXRlcm0iIHVzZXJuYW1lLyBwYXNzd29yZAogICBjcmVkZW50 aWFscyB0aGF0IGFyZSBwcm92aWRlZCBhcyBwYXJ0IG9mIHRoZSBTVFVOIHByb3RvY29sLiAgSXQg aXMKICAgZXhwZWN0ZWQgdGhhdCB0aGVzZSBjcmVkZW50aWFscyB3aWxsIGJlIGtlcHQgc2VjcmV0 OyBpZiB0aGUKICAgY3JlZGVudGlhbHMgYXJlIGRpc2NvdmVyZWQsIHRoZSBTVFVOIHNlcnZlciBj b3VsZCBiZSB1c2VkIGJ5CiAgIHVuYXV0aG9yaXplZCB1c2VycyBvciBhcHBsaWNhdGlvbnMuICBI b3dldmVyLCBpbiB3ZWIgYXBwbGljYXRpb25zCiAgIGxpa2UgV2ViUlRDIFtJLUQuaWV0Zi1ydGN3 ZWItb3ZlcnZpZXddIHdoZXJlIEphdmFTY3JpcHQgdXNlcyB0aGUKICAgYnJvd3NlciBmdW5jdGlv bmFsaXR5IHRvIG1ha2UgcmVhbC10aW1lIGF1ZGlvIGFuZC9vciB2aWRlbyBjYWxscywgV2ViCiAg IGNvbmZlcmVuY2luZywgYW5kIGRpcmVjdCBkYXRhIHRyYW5zZmVyLCBlbnN1cmluZyB0aGlzIHNl Y3JlY3kgaXMKICAgdHlwaWNhbGx5IG5vdCBwb3NzaWJsZS4KCiAgIFRvIGFkZHJlc3MgdGhpcyBw cm9ibGVtIGFuZCB0aGUgb25lcyBkZXNjcmliZWQgaW4gW1JGQzczNzZdLCB0aGlzCiAgIGRvY3Vt ZW50IHByb3Bvc2VzIHRoZSB1c2Ugb2YgdGhpcmQgcGFydHkgYXV0aG9yaXphdGlvbiB1c2luZyBP QXV0aAogICAyLjAgW1JGQzY3NDldIGZvciBTVFVOLiAgVXNpbmcgT0F1dGggMi4wLCBhIGNsaWVu dCBvYnRhaW5zIGFuCgoKClJlZGR5LCBldCBhbC4gICAgICAgICAgIEV4cGlyZXMgT2N0b2JlciAx MCwgMjAxNSAgICAgICAgICAgICAgICBbUGFnZSAyXQoMCkludGVybmV0LURyYWZ0ICAgICAgU1RV TiBmb3IgM3JkIHBhcnR5IEF1dGhvcml6YXRpb24gICAgICAgICAgQXByaWwgMjAxNQoKCiAgIGVw aGVtZXJhbCB0b2tlbiBmcm9tIGFuIGF1dGhvcml6YXRpb24gc2VydmVyIGUuZy4gIFdlYlJUQyBz ZXJ2ZXIsIGFuZAogICB0aGUgdG9rZW4gaXMgcHJlc2VudGVkIHRvIHRoZSBTVFVOIHNlcnZlciBp bnN0ZWFkIG9mIHRoZSB0cmFkaXRpb25hbAogICBtZWNoYW5pc20gb2YgcHJlc2VudGluZyB1c2Vy bmFtZS9wYXNzd29yZCBjcmVkZW50aWFscy4gIFRoZSBTVFVOCiAgIHNlcnZlciB2YWxpZGF0ZXMg dGhlIGF1dGhlbnRpY2l0eSBvZiB0aGUgdG9rZW4gYW5kIHByb3ZpZGVzIHJlcXVpcmVkCiAgIHNl cnZpY2VzLiAgVGhpcmQgcGFydHkgYXV0aG9yaXphdGlvbiB1c2luZyBPQXV0aCAyLjAgZm9yIFNU VU4KICAgZXhwbGFpbmVkIGluIHRoaXMgc3BlY2lmaWNhdGlvbiBjYW4gYWxzbyBiZSB1c2VkIHdp dGggVHJhdmVyc2FsIFVzaW5nCiAgIFJlbGF5cyBhcm91bmQgTkFUIChUVVJOKSBbUkZDNTc2Nl0u CgoyLiAgVGVybWlub2xvZ3kKCiAgIFRoZSBrZXkgd29yZHMgIk1VU1QiLCAiTVVTVCBOT1QiLCAi UkVRVUlSRUQiLCAiU0hBTEwiLCAiU0hBTEwgTk9UIiwKICAgIlNIT1VMRCIsICJTSE9VTEQgTk9U IiwgIlJFQ09NTUVOREVEIiwgIk1BWSIsIGFuZCAiT1BUSU9OQUwiIGluIHRoaXMKICAgZG9jdW1l bnQgYXJlIHRvIGJlIGludGVycHJldGVkIGFzIGRlc2NyaWJlZCBpbiBbUkZDMjExOV0uCgogICBv ICBXZWJSVEMgU2VydmVyOiBBIHdlYiBzZXJ2ZXIgdGhhdCBzdXBwb3J0cyBXZWJSVEMKICAgICAg W0ktRC5pZXRmLXJ0Y3dlYi1vdmVydmlld10uCgogICBvICBBY2Nlc3MgVG9rZW46IE9BdXRoIDIu MCBhY2Nlc3MgdG9rZW4uCgogICBvICBtYWNfa2V5OiBUaGUgc2Vzc2lvbiBrZXkgZ2VuZXJhdGVk IGJ5IHRoZSBhdXRob3JpemF0aW9uIHNlcnZlci4KICAgICAgVGhpcyBzZXNzaW9uIGtleSBoYXMg YSBsaWZldGltZSB0aGF0IGNvcnJlc3BvbmRzIHRvIHRoZSBsaWZldGltZQogICAgICBvZiB0aGUg YWNjZXNzIHRva2VuLCBpcyBnZW5lcmF0ZWQgYnkgdGhlIGF1dGhvcml6YXRpb24gc2VydmVyIGFu ZAogICAgICBib3VuZCB0byB0aGUgYWNjZXNzIHRva2VuLgoKICAgbyAga2lkOiBBbiBlcGhlbWVy YWwgYW5kIHVuaXF1ZSBrZXkgaWRlbnRpZmllci4gIFRoZSBraWQgYWxzbyBhbGxvd3MKICAgICAg dGhlIHJlc291cmNlIHNlcnZlciB0byBzZWxlY3QgdGhlIGFwcHJvcHJpYXRlIGtleWluZyBtYXRl cmlhbCBmb3IKICAgICAgZGVjcnlwdGlvbi4KCiAgIFNvbWUgc2VjdGlvbnMgaW4gdGhpcyBzcGVj aWZpY2F0aW9uIHNob3cgV2ViUlRDIHNlcnZlciBhcyB0aGUKICAgYXV0aG9yaXphdGlvbiBzZXJ2 ZXIgYW5kIGNsaWVudCBhcyB0aGUgV2ViUlRDIGNsaWVudCwgaG93ZXZlciBXZWJSVEMKICAgaXMg aW50ZW5kZWQgdG8gYmUgdXNlZCBmb3IgaWxsdXN0cmF0aXZlIHB1cnBvc2Ugb25seS4KCjMuICBT b2x1dGlvbiBPdmVydmlldwoKICAgU1RVTiBjbGllbnQga25vd3MgdGhhdCBpdCBjYW4gdXNlIE9B dXRoIDIuMCB3aXRoIHRoZSB0YXJnZXQgU1RVTgogICBzZXJ2ZXIgZWl0aGVyIHRocm91Z2ggY29u ZmlndXJhdGlvbiBvciB3aGVuIGl0IHJlY2VpdmVzIHRoZSBuZXcgU1RVTgogICBhdHRyaWJ1dGUg VEhJUkQtUEFSVFktQVVUSE9SSVpBVElPTiBpbiB0aGUgZXJyb3IgcmVzcG9uc2Ugd2l0aCBhbgog ICBlcnJvciBjb2RlIG9mIDQwMShVbmF1dGhvcml6ZWQpLgoKICAgVGhpcyBzcGVjaWZpY2F0aW9u IHVzZXMgdGhlIHRva2VuIHR5cGUgJ0Fzc2VydGlvbicgKGFrYSBzZWxmLQogICBjb250YWluZWQg dG9rZW4pIGRlc2NyaWJlZCBpbiBbUkZDNjgxOV0gd2hlcmUgYWxsIHRoZSBpbmZvcm1hdGlvbgog ICBuZWNlc3NhcnkgdG8gYXV0aGVudGljYXRlIHRoZSB2YWxpZGl0eSBvZiB0aGUgdG9rZW4gaXMg Y29udGFpbmVkCiAgIHdpdGhpbiB0aGUgdG9rZW4gaXRzZWxmLiAgVGhpcyBhcHByb2FjaCBoYXMg dGhlIGJlbmVmaXQgb2YgYXZvaWRpbmcgYQogICBwcm90b2NvbCBiZXR3ZWVuIHRoZSBTVFVOIHNl cnZlciBhbmQgdGhlIGF1dGhvcml6YXRpb24gc2VydmVyIGZvcgogICB0b2tlbiB2YWxpZGF0aW9u LCB0aHVzIHJlZHVjaW5nIGxhdGVuY3kuICBUaGUgY29udGVudCBvZiB0aGUgdG9rZW4gaXMKICAg b3BhcXVlIHRvIHRoZSBjbGllbnQuICBUaGUgY2xpZW50IGVtYmVkcyB0aGUgdG9rZW4gd2l0aGlu IGEgU1RVTgogICByZXF1ZXN0IHNlbnQgdG8gdGhlIFNUVU4gc2VydmVyLiAgT25jZSB0aGUgU1RV TiBzZXJ2ZXIgaGFzIGRldGVybWluZWQKICAgdGhlIHRva2VuIGlzIHZhbGlkLCBpdHMgc2Vydmlj ZXMgYXJlIG9mZmVyZWQgZm9yIGEgZGV0ZXJtaW5lZCBwZXJpb2QKCgoKUmVkZHksIGV0IGFsLiAg ICAgICAgICAgRXhwaXJlcyBPY3RvYmVyIDEwLCAyMDE1ICAgICAgICAgICAgICAgIFtQYWdlIDNd CgwKSW50ZXJuZXQtRHJhZnQgICAgICBTVFVOIGZvciAzcmQgcGFydHkgQXV0aG9yaXphdGlvbiAg ICAgICAgICBBcHJpbCAyMDE1CgoKICAgb2YgdGltZS4gIEFjY2VzcyB0b2tlbiBpc3N1ZWQgYnkg dGhlIGF1dGhvcml6YXRpb24gc2VydmVyIGlzCiAgIGV4cGxhaW5lZCBpbiBTZWN0aW9uIDYuMi4g IE9BdXRoIDIuMCBpbiBbUkZDNjc0OV0gZGVmaW5lcyBmb3VyIGdyYW50CiAgIHR5cGVzLiAgVGhp cyBzcGVjaWZpY2F0aW9uIHVzZXMgdGhlIE9BdXRoIDIuMCBncmFudCB0eXBlICJJbXBsaWNpdCIK ICAgZXhwbGFpbmVkIGluIHNlY3Rpb24gMS4zLjIgb2YgW1JGQzY3NDldIHdoZXJlIHRoZSBjbGll bnQgaXMgaXNzdWVkIGFuCiAgIGFjY2VzcyB0b2tlbiBkaXJlY3RseS4gIFRoZSBzdHJpbmcgJ3N0 dW4nIGlzIGRlZmluZWQgYnkgdGhpcwogICBzcGVjaWZpY2F0aW9uIGZvciB1c2UgYXMgdGhlIE9B dXRoIHNjb3BlIHBhcmFtZXRlciAoc2VlIHNlY3Rpb24gMy4zCiAgIG9mIFtSRkM2NzQ5XSkgZm9y IHRoZSBPQXV0aCB0b2tlbi4KCiAgIFRoZSBleGFjdCBtZWNoYW5pc20gdXNlZCBieSBhIGNsaWVu dCB0byBvYnRhaW4gYSB0b2tlbiBmcm9tIHRoZSBPQXV0aAogICAyLjAgYXV0aG9yaXphdGlvbiBz ZXJ2ZXIgaXMgb3V0c2lkZSB0aGUgc2NvcGUgb2YgdGhpcyBkb2N1bWVudC4KICAgQXBwZW5kaXgg QiBwcm92aWRlcyBhbiBleGFtcGxlIGRlcGxveW1lbnQgc2NlbmFyaW8gb2YgaW50ZXJhY3Rpb24K ICAgYmV0d2VlbiB0aGUgY2xpZW50IGFuZCBhdXRob3JpemF0aW9uIHNlcnZlciB0byBvYnRhaW4g YSB0b2tlbi4KCjQuICBPYnRhaW5pbmcgYSBUb2tlbiBVc2luZyBPQXV0aAoKICAgQSBTVFVOIGNs aWVudCBuZWVkcyB0byBrbm93IHRoZSBhdXRoZW50aWNhdGlvbiBjYXBhYmlsaXR5IG9mIHRoZSBT VFVOCiAgIHNlcnZlciBiZWZvcmUgZGVjaWRpbmcgdG8gdXNlIHRoaXJkIHBhcnR5IGF1dGhvcml6 YXRpb24uICBBIFNUVU4KICAgY2xpZW50IGluaXRpYWxseSBtYWtlcyBhIHJlcXVlc3Qgd2l0aG91 dCBhbnkgYXV0aG9yaXphdGlvbi4gIElmIHRoZQogICBTVFVOIHNlcnZlciBzdXBwb3J0cyB0aGly ZCBwYXJ0eSBhdXRob3JpemF0aW9uLCBpdCB3aWxsIHJldHVybiBhbgogICBlcnJvciBtZXNzYWdl IGluZGljYXRpbmcgdGhhdCB0aGUgY2xpZW50IGNhbiBhdXRob3JpemUgdG8gdGhlIFNUVU4KICAg c2VydmVyIHVzaW5nIGFuIE9BdXRoIDIuMCBhY2Nlc3MgdG9rZW4uICBUaGUgU1RVTiBzZXJ2ZXIg aW5jbHVkZXMgYW4KICAgRVJST1ItQ09ERSBhdHRyaWJ1dGUgd2l0aCBhIHZhbHVlIG9mIDQwMSAo VW5hdXRob3JpemVkKSwgYSBub25jZQogICB2YWx1ZSBpbiBhIE5PTkNFIGF0dHJpYnV0ZSBhbmQg YSBTT0ZUV0FSRSBhdHRyaWJ1dGUgdGhhdCBnaXZlcwogICBpbmZvcm1hdGlvbiBhYm91dCB0aGUg U1RVTiBzZXJ2ZXIncyBzb2Z0d2FyZS4gIFRoZSBTVFVOIHNlcnZlciBhbHNvCiAgIGluY2x1ZGVz IHRoZSBhZGRpdGlvbmFsIFNUVU4gYXR0cmlidXRlIFRISVJELVBBUlRZLUFVVEhPUklaQVRJT04K ICAgc2lnbmFsaW5nIHRoZSBTVFVOIGNsaWVudCB0aGF0IHRoZSBTVFVOIHNlcnZlciBzdXBwb3J0 cyB0aGlyZCBwYXJ0eQogICBhdXRob3JpemF0aW9uLgoKICAgTm90ZTogQW4gaW1wbGVtZW50YXRp b24gbWF5IGNob29zZSB0byBjb250YWN0IHRoZSBhdXRob3JpemF0aW9uCiAgIHNlcnZlciB0byBv YnRhaW4gYSB0b2tlbiBldmVuIGJlZm9yZSBpdCBtYWtlcyBhIFNUVU4gcmVxdWVzdCwgaWYgaXQK ICAga25vd3MgdGhlIHNlcnZlciBkZXRhaWxzIGJlZm9yZSBoYW5kLiAgRm9yIGV4YW1wbGUsIG9u Y2UgYSBjbGllbnQgaGFzCiAgIGxlYXJudCB0aGF0IGEgU1RVTiBzZXJ2ZXIgc3VwcG9ydHMgdGhp cmQgcGFydHkgYXV0aG9yaXphdGlvbiBmcm9tIGEKICAgYXV0aG9yaXphdGlvbiBzZXJ2ZXIsIHRo ZSBjbGllbnQgY2FuIG9idGFpbiB0aGUgdG9rZW4gYmVmb3JlIG1ha2luZwogICBzdWJzZXF1ZW50 IFNUVU4gcmVxdWVzdHMuCgo0LjEuICBLZXkgRXN0YWJsaXNobWVudAoKICAgVGhlIGF1dGhvcml6 YXRpb24gc2VydmVyIHNoYXJlcyBhIGxvbmctdGVybSBzZWNyZXQgKGxpa2UgYXN5bW1ldHJpYwog ICBjcmVkZW50aWFscykgd2l0aCB0aGUgU1RVTiBzZXJ2ZXIgZm9yIG11dHVhbCBhdXRoZW50aWNh dGlvbi4KICAgU3ltbWV0cmljLWtleSBhbGdvcml0aG0gd2l0aCBIYXNoIGJhc2VkIE1lc3NhZ2Ug QXV0aGVudGljYXRpb24gQ29kZXMKICAgKEhNQUNzKSBNVVNUIGJlIGNob3NlbiB0byBlbnN1cmUg dGhhdCB0aGUgc2l6ZSBvZiBlbmNyeXB0ZWQgdG9rZW4gaXMKICAgbm90IGxhcmdlIGJlY2F1c2Ug dXNhZ2Ugb2YgYXN5bW1ldHJpYyBrZXlzIHdpbGwgcmVzdWx0IGluIGxhcmdlCiAgIGVuY3J5cHRl ZCB0b2tlbnMgd2hpY2ggbWF5IG5vdCBmaXQgaW50byBhIHNpbmdsZSBTVFVOIG1lc3NhZ2UuCgog ICBUaGUgU1RVTiBzZXJ2ZXIgYW5kIGF1dGhvcml6YXRpb24gc2VydmVyIGNhbiBlc3RhYmxpc2gg YSBzeW1tZXRyaWMKICAga2V5IChLKSBhbmQgY2VydGFpbiBhdXRoZW50aWNhdGVkIGVuY3J5cHRp b24gYWxnb3JpdGhtLCB1c2luZyBhbiBvdXQKICAgb2YgYmFuZCBtZWNoYW5pc20uICBJZiBzeW1t ZXRyaWMga2V5IGlzIHVzZWQgdGhlbiB0aGUgQVMtUlMgYW5kIEFVVEgKICAga2V5cyB3aWxsIGJl IGRlcml2ZWQgZnJvbSBLLiAgVGhlIEFTLVJTIGtleSBpcyB1c2VkIGZvciBlbmNyeXB0aW5nCgoK ClJlZGR5LCBldCBhbC4gICAgICAgICAgIEV4cGlyZXMgT2N0b2JlciAxMCwgMjAxNSAgICAgICAg ICAgICAgICBbUGFnZSA0XQoMCkludGVybmV0LURyYWZ0ICAgICAgU1RVTiBmb3IgM3JkIHBhcnR5 IEF1dGhvcml6YXRpb24gICAgICAgICAgQXByaWwgMjAxNQoKCiAgIHRoZSBzZWxmLWNvbnRhaW5l ZCB0b2tlbiBhbmQgdGhlIG1lc3NhZ2UgaW50ZWdyaXR5IG9mIHRoZSBlbmNyeXB0ZWQKICAgdG9r ZW4gaXMgY2FsY3VsYXRlZCB1c2luZyB0aGUgQVVUSCBrZXkuICBUaGUgU1RVTiBhbmQgYXV0aG9y aXphdGlvbgogICBzZXJ2ZXJzIE1VU1QgZXN0YWJsaXNoIHRoZSBzeW1tZXRyaWMga2V5IG92ZXIg YW4gYXV0aGVudGljYXRlZCBzZWN1cmUKICAgY2hhbm5lbC4KCiAgIFRoZSBwcm9jZWR1cmUgZm9y IGVzdGFibGlzaG1lbnQgb2YgdGhlIHN5bW1ldHJpYyBrZXkgaXMgb3V0c2lkZSB0aGUKICAgc2Nv cGUgb2YgdGhpcyBzcGVjaWZpY2F0aW9uLCBhbmQgdGhpcyBzcGVjaWZpY2F0aW9uIGRvZXMgbm90 IG1hbmRhdGUKICAgc3VwcG9ydCBvZiBhbnkgZ2l2ZW4gbWVjaGFuaXNtLiAgU2VjdGlvbiA0LjEu MSBhbmQgU2VjdGlvbiA0LjEuMiBzaG93CiAgIGV4YW1wbGVzIG9mIG1lY2hhbmlzbXMgdGhhdCBj YW4gYmUgdXNlZC4KCjQuMS4xLiAgSFRUUCBpbnRlcmFjdGlvbnMKCiAgIFRoZSBTVFVOIGFuZCBB UyBzZXJ2ZXJzIGNvdWxkIGNob29zZSB0byB1c2UgUkVTVCBBUEkgb3ZlciBIVFRQUyB0bwogICBl c3RhYmxpc2ggYSBzeW1tZXRyaWMga2V5LiAgSFRUUFMgTVVTVCBiZSB1c2VkIGZvciBtdXR1YWwK ICAgYXV0aGVudGljYXRpb24gYW5kIGNvbmZpZGVudGlhbGl0eS4gIFRvIHJldHJpZXZlIGEgbmV3 IHN5bW1ldHJpYyBrZXksCiAgIHRoZSBTVFVOIHNlcnZlciBtYWtlcyBhbiBIVFRQIEdFVCByZXF1 ZXN0IHRvIHRoZSBhdXRob3JpemF0aW9uCiAgIHNlcnZlciwgc3BlY2lmeWluZyBTVFVOIGFzIHRo ZSBzZXJ2aWNlIHRvIGFsbG9jYXRlIHRoZSBzeW1tZXRyaWMga2V5cwogICBmb3IsIGFuZCBzcGVj aWZ5aW5nIHRoZSBuYW1lIG9mIHRoZSBTVFVOIHNlcnZlci4gIFRoZSByZXNwb25zZSBpcwogICBy ZXR1cm5lZCB3aXRoIGNvbnRlbnQtdHlwZSAiYXBwbGljYXRpb24vanNvbiIsIGFuZCBjb25zaXN0 cyBvZiBhCiAgIEphdmFTY3JpcHQgT2JqZWN0IE5vdGF0aW9uIChKU09OKSBbUkZDNzE1OV0gb2Jq ZWN0IGNvbnRhaW5pbmcgdGhlCiAgIHN5bW1ldHJpYyBrZXkuCgogICBSZXF1ZXN0CiAgIC0tLS0t LS0KCiAgIHNlcnZpY2UgLSBzcGVjaWZpZXMgdGhlIGRlc2lyZWQgc2VydmljZSAodHVybikKICAg bmFtZSAgICAtICBTVFVOIHNlcnZlciBuYW1lIGJlIGFzc29jaWF0ZWQgd2l0aCB0aGUga2V5Cgog ICBleGFtcGxlOiBHRVQgLz9zZXJ2aWNlPXN0dW4mbmFtZT10dXJuMUBleGFtcGxlLmNvbQoKCiAg IFJlc3BvbnNlCiAgIC0tLS0tLS0tCgogICBrIC0gTG9uZy10ZXJtIGtleSAoSykKICAgZXhwIC0g aWRlbnRpZmllcyB0aGUgdGltZSBhZnRlciB3aGljaCB0aGUga2V5IGV4cGlyZXMuCgoKICAgZXhh bXBsZToKICAgewogICAgICAiayIgOgogICAiRVNJelJGVm1kNGlaQUJFaU0wUlZaZ0tuNldqTGFU QzFGWEFnaFJNVlR6a0JHTmFhTjQ5NjUyM1dJSVNLZXJMaQogICAgMXFPT2twWndBSW13RVh5ZGRQ eVBHc0JNL3dwNE1GaDNqSVlUcGJnZUxxVk02bEludU8zWTY3enZQak40K2hndiIsCiAgICAgICJl eHAiIDogMTMwMDgxOTM4MCwKICAgICAgImtpZCIgOiIyMkJJanhVOTNoL0lnd0ViIgogICAgICAi ZW5jIiA6IEEyNTZDQkMtSFM1MTIKICAgICB9CgoKCgpSZWRkeSwgZXQgYWwuICAgICAgICAgICBF eHBpcmVzIE9jdG9iZXIgMTAsIDIwMTUgICAgICAgICAgICAgICAgW1BhZ2UgNV0KDApJbnRlcm5l dC1EcmFmdCAgICAgIFNUVU4gZm9yIDNyZCBwYXJ0eSBBdXRob3JpemF0aW9uICAgICAgICAgIEFw cmlsIDIwMTUKCgogICBUaGUgYXV0aG9yaXphdGlvbiBzZXJ2ZXIgbXVzdCBhbHNvIHNpZ25hbCBr aWQgdG8gdGhlIFNUVU4gc2VydmVyCiAgIHdoaWNoIHdpbGwgYmUgdXNlZCB0byBzZWxlY3QgdGhl IGFwcHJvcHJpYXRlIGtleWluZyBtYXRlcmlhbCBmb3IKICAgZGVjcnlwdGlvbi4gIFRoZSBwYXJh bWV0ZXIgImsiIGlzIGRlZmluZWQgaW4gU2VjdGlvbiA2LjQuMSBvZgogICBbSS1ELmlldGYtam9z ZS1qc29uLXdlYi1hbGdvcml0aG1zXSwgImVuYyIgaXMgZGVmaW5lZCBpbgogICBTZWN0aW9uIDQu MS4yIG9mIFtJLUQuaWV0Zi1qb3NlLWpzb24td2ViLWVuY3J5cHRpb25dLCAia2lkIiBpcwogICBk ZWZpbmVkIGluIFNlY3Rpb24gNC4xLjQgb2YgW0ktRC5pZXRmLWpvc2UtanNvbi13ZWItc2lnbmF0 dXJlXSBhbmQKICAgImV4cCIgaXMgZGVmaW5lZCBpbiBTZWN0aW9uIDQuMS40IG9mIFtJLUQuaWV0 Zi1vYXV0aC1qc29uLXdlYi10b2tlbl0uCiAgIEEyNTZDQkMtSFM1MTIgYW5kIG90aGVyIGF1dGhl bnRpY2F0ZWQgZW5jcnlwdGlvbiBhbGdvcml0aG1zIGFyZQogICBkZWZpbmVkIGluIFtJLUQuaWV0 Zi1qb3NlLWpzb24td2ViLWFsZ29yaXRobXNdLiAgSW4gdGhpcyBjYXNlIHRoZSBBUy0KICAgUlMg YW5kIEFVVEgga2V5cyBhcmUgZGVyaXZlZCBmcm9tIEsgdXNpbmcgdGhlIG1lY2hhbmlzbSBleHBs YWluZWQgaW4KICAgc2VjdGlvbiA1LjIuMi4xIG9mIFtJLUQuaWV0Zi1qb3NlLWpzb24td2ViLWFs Z29yaXRobXNdLiAgQVMtUlMga2V5CiAgIGxlbmd0aCBtdXN0IGJlIDI1Ni1iaXQsIEFVVEgga2V5 IGxlbmd0aCBtdXN0IGJlIDI1Ni1iaXQgKHNlY3Rpb24gMi42CiAgIG9mIFtSRkM0ODY4XSkuICBB IFNUVU4gc2VydmVyIGFuZCBhdXRob3JpemF0aW9uIHNlcnZlciBpbXBsZW1lbnRhdGlvbgogICBN VVNUIHN1cHBvcnQgQTI1NkdDTUtXIChleHBsYWluZWQgaW4KICAgW0ktRC5pZXRmLWpvc2UtanNv bi13ZWItYWxnb3JpdGhtc10pIGFzIHRoZSBhdXRoZW50aWNhdGVkIGVuY3J5cHRpb24KICAgYWxn b3JpdGhtLgoKNC4xLjIuICBNYW51YWwgcHJvdmlzaW9uaW5nCgogICBUaGUgU1RVTiBhbmQgQVMg c2VydmVycyBjb3VsZCBiZSBtYW51YWxseSBjb25maWd1cmVkIHdpdGggYSBzeW1tZXRyaWMKICAg a2V5IChLKSwgYXV0aGVudGljYXRlZCBlbmNyeXB0aW9uIGFsZ29yaXRobSBhbmQga2lkLgoKICAg Tm90ZSA6IFRoZSBtZWNoYW5pc20gc3BlY2lmaWVkIGluIFNlY3Rpb24gNC4xLjIgY29tcGFyZWQg dG8gUkVTVAogICBsYWNrcyBlbmNyeXB0aW9uIGFuZCBITUFDIGFsZ29yaXRobSBhZ2lsaXR5LiAg SGVuY2UgYSBTVFVOIHNlcnZlciBhbmQKICAgYXV0aG9yaXphdGlvbiBzZXJ2ZXIgaW1wbGVtZW50 YXRpb24gU0hPVUxEIHN1cHBvcnQgUkVTVCBleHBsYWluZWQgaW4KICAgU2VjdGlvbiA0LjEuMS4K CjUuICBGb3JtaW5nIGEgUmVxdWVzdAoKICAgV2hlbiBhIFNUVU4gc2VydmVyIHJlc3BvbmRzIHRo YXQgdGhpcmQgcGFydHkgYXV0aG9yaXphdGlvbiBpcwogICByZXF1aXJlZCwgYSBTVFVOIGNsaWVu dCByZS1hdHRlbXB0cyB0aGUgcmVxdWVzdCwgdGhpcyB0aW1lIGluY2x1ZGluZwogICBhY2Nlc3Mg dG9rZW4gYW5kIGtpZCB2YWx1ZXMgaW4gQUNDRVNTLVRPS0VOIGFuZCBVU0VSTkFNRSBTVFVOCiAg IGF0dHJpYnV0ZXMuICBUaGUgU1RVTiBjbGllbnQgaW5jbHVkZXMgYSBNRVNTQUdFLUlOVEVHUklU WSBhdHRyaWJ1dGUKICAgYXMgdGhlIGxhc3QgYXR0cmlidXRlIGluIHRoZSBtZXNzYWdlIG92ZXIg dGhlIGNvbnRlbnRzIG9mIHRoZSBTVFVOCiAgIG1lc3NhZ2UuICBUaGUgSE1BQyBmb3IgdGhlIE1F U1NBR0UtSU5URUdSSVRZIGF0dHJpYnV0ZSBpcyBjb21wdXRlZCBhcwogICBkZXNjcmliZWQgaW4g c2VjdGlvbiAxNS40IG9mIFtSRkM1Mzg5XSB3aGVyZSB0aGUgbWFjX2tleSBpcyB1c2VkIGFzCiAg IHRoZSBpbnB1dCBrZXkgZm9yIHRoZSBITUFDIGNvbXB1dGF0aW9uLiAgVGhlIFNUVU4gY2xpZW50 IGFuZCBzZXJ2ZXIKICAgd2lsbCB1c2UgdGhlIG1hY19rZXkgdG8gY29tcHV0ZSB0aGUgbWVzc2Fn ZSBpbnRlZ3JpdHkgYW5kIGRvIG5vdAogICBwZXJmb3JtIE1ENSBoYXNoIG9uIHRoZSBjcmVkZW50 aWFscy4KCjYuICBTVFVOIEF0dHJpYnV0ZXMKCiAgIFRoZSBmb2xsb3dpbmcgbmV3IFNUVU4gYXR0 cmlidXRlcyBhcmUgaW50cm9kdWNlZCBieSB0aGlzCiAgIHNwZWNpZmljYXRpb24gdG8gYWNjb21w bGlzaCB0aGlyZCBwYXJ0eSBhdXRob3JpemF0aW9uLgoKCgoKCgoKUmVkZHksIGV0IGFsLiAgICAg ICAgICAgRXhwaXJlcyBPY3RvYmVyIDEwLCAyMDE1ICAgICAgICAgICAgICAgIFtQYWdlIDZdCgwK SW50ZXJuZXQtRHJhZnQgICAgICBTVFVOIGZvciAzcmQgcGFydHkgQXV0aG9yaXphdGlvbiAgICAg ICAgICBBcHJpbCAyMDE1CgoKNi4xLiAgVEhJUkQtUEFSVFktQVVUSE9SSVpBVElPTgoKICAgVGhp cyBhdHRyaWJ1dGUgaXMgdXNlZCBieSB0aGUgU1RVTiBzZXJ2ZXIgdG8gaW5mb3JtIHRoZSBjbGll bnQgdGhhdAogICBpdCBzdXBwb3J0cyB0aGlyZCBwYXJ0eSBhdXRob3JpemF0aW9uLiAgVGhpcyBh dHRyaWJ1dGUgdmFsdWUgY29udGFpbnMKICAgdGhlIFNUVU4gc2VydmVyIG5hbWUuICBUaGUgU1RV TiBzZXJ2ZXIgbWF5IGhhdmUgdGllLXVwcyB3aXRoIG11bHRpcGxlCiAgIGF1dGhvcml6YXRpb24g c2VydmVycyBhbmQgdmljZSB2ZXJzYSwgc28gdGhlIGNsaWVudCBNVVNUIHByb3ZpZGUgdGhlCiAg IFNUVU4gc2VydmVyIG5hbWUgdG8gdGhlIGF1dGhvcml6YXRpb24gc2VydmVyIHNvIHRoYXQgaXQg Y2FuIHNlbGVjdAogICB0aGUgYXBwcm9wcmlhdGUga2V5aW5nIG1hdGVyaWFsIHRvIGdlbmVyYXRl IHRoZSBzZWxmLWNvbnRhaW5lZCB0b2tlbi4KICAgVGhlIFRISVJELVBBUlRZLUFVVEhPUklaQVRJ T04gYXR0cmlidXRlIGlzIGEgY29tcHJlaGVuc2lvbi1vcHRpb25hbAogICBhdHRyaWJ1dGUgKHNl ZSBTZWN0aW9uIDE1IGZyb20gW1JGQzUzODldKS4gIElmIHRoZSBjbGllbnQgaXMgYWJsZSB0bwog ICBjb21wcmVoZW5kIFRISVJELVBBUlRZLUFVVEhPUklaQVRJT04gaXQgTVVTVCBlbnN1cmUgdGhh dCB0aGlyZCBwYXJ0eQogICBhdXRob3JpemF0aW9uIHRha2VzIHByZWNlZGVuY2Ugb3ZlciBmaXJz dCBwYXJ0eSBhdXRoZW50aWNhdGlvbgogICAoZXhwbGFpbmVkIGluIHNlY3Rpb24gMTAgb2YgW1JG QzUzODldKS4gIElmIHRoZSBjbGllbnQgZG9lcyBub3QKICAgc3VwcG9ydCBvciBpcyBub3QgY2Fw YWJsZSBvZiBkb2luZyB0aGlyZCBwYXJ0eSBhdXRob3JpemF0aW9uIHRoZW4gaXQKICAgZGVmYXVs dHMgdG8gZmlyc3QgcGFydHkgYXV0aGVudGljYXRpb24uCgo2LjIuICBBQ0NFU1MtVE9LRU4KCiAg IFRoZSBhY2Nlc3MgdG9rZW4gaXMgaXNzdWVkIGJ5IHRoZSBhdXRob3JpemF0aW9uIHNlcnZlci4g IE9BdXRoIDIuMAogICBkb2VzIG5vdCBpbXBvc2UgYW55IGxpbWl0YXRpb24gb24gdGhlIGxlbmd0 aCBvZiB0aGUgYWNjZXNzIHRva2VuIGJ1dAogICBpZiBwYXRoIE1UVSBpcyB1bmtub3duIHRoZW4g U1RVTiBtZXNzYWdlcyBvdmVyIElQdjQgd291bGQgbmVlZCB0byBiZQogICBsZXNzIHRoYW4gNTQ4 IGJ5dGVzIChTZWN0aW9uIDcuMSBvZiBbUkZDNTM4OV0pLiAgVGhlIGFjY2VzcyB0b2tlbgogICBs ZW5ndGggbmVlZHMgdG8gYmUgcmVzdHJpY3RlZCB0byBmaXQgd2l0aGluIHRoZSBtYXhpbXVtIFNU VU4gbWVzc2FnZQogICBzaXplLiAgTm90ZSB0aGF0IHRoZSBzZWxmLWNvbnRhaW5lZCB0b2tlbiBp cyBvcGFxdWUgdG8gdGhlIGNsaWVudCBhbmQKICAgdGhlIGNsaWVudCBNVVNUIE5PVCBleGFtaW5l IHRoZSB0b2tlbi4gIFRoZSBBQ0NFU1MtVE9LRU4gYXR0cmlidXRlIGlzCiAgIGEgY29tcHJlaGVu c2lvbi1yZXF1aXJlZCBhdHRyaWJ1dGUgKHNlZSBTZWN0aW9uIDE1IGZyb20gW1JGQzUzODldKS4K CiAgIFRoZSB0b2tlbiBpcyBzdHJ1Y3R1cmVkIGFzIGZvbGxvd3M6CgogICAgICAgICBzdHJ1Y3Qg ewogICAgICAgICAgICAgdWludDhfdCBub25jZV9sZW5ndGg7CiAgICAgICAgICAgICBvcGFxdWUg IG5vbmNlW25vbmNlX2xlbmd0aF07CiAgICAgICAgICAgICBvcGFxdWUgewogICAgICAgICAgICAg ICAgIHVpbnQxNl90IGtleV9sZW5ndGg7CiAgICAgICAgICAgICAgICAgb3BhcXVlIG1hY19rZXlb a2V5X2xlbmd0aF07CiAgICAgICAgICAgICAgICAgdWludDY0X3QgdGltZXN0YW1wOwogICAgICAg ICAgICAgICAgIHVpbnQzMl90IGxpZmV0aW1lOwogICAgICAgICAgICAgfSBlbmNyeXB0ZWRfYmxv Y2s7CiAgICAgICAgIH0gdG9rZW47CgogICAgICAgICAgICAgICAgICAgRmlndXJlIDE6IFNlbGYt Y29udGFpbmVkIHRva2VuIGZvcm1hdAoKICAgTm90ZTogdWludE5fdCBtZWFucyBhbiB1bnNpZ25l ZCBpbnRlZ2VyIG9mIGV4YWN0bHkgTiBiaXRzLiAgU2luZ2xlLQogICBieXRlIGVudGl0aWVzIGNv bnRhaW5pbmcgdW5pbnRlcnByZXRlZCBkYXRhIGFyZSBvZiB0eXBlIG9wYXF1ZS4gIEFsbAogICB2 YWx1ZXMgaW4gdGhlIHRva2VuIGFyZSBzdG9yZWQgaW4gbmV0d29yayBieXRlIG9yZGVyLgoKICAg VGhlIGFzc29jaWF0ZWQgZGF0YSAoQSkgTVVTVCBiZSB0aGUgU1RVTiBzZXJ2ZXIgbmFtZSAoTiku ICBUaGlzCiAgIGVuc3VyZXMgdGhhdCB0aGUgY2xpZW50IGRvZXMgbm90IHVzZSB0aGUgc2FtZSB0 b2tlbiB0byBnYWluIGlsbGVnYWwKCgoKUmVkZHksIGV0IGFsLiAgICAgICAgICAgRXhwaXJlcyBP Y3RvYmVyIDEwLCAyMDE1ICAgICAgICAgICAgICAgIFtQYWdlIDddCgwKSW50ZXJuZXQtRHJhZnQg ICAgICBTVFVOIGZvciAzcmQgcGFydHkgQXV0aG9yaXphdGlvbiAgICAgICAgICBBcHJpbCAyMDE1 CgoKICAgYWNjZXNzIHRvIG90aGVyIFNUVU4gc2VydmVycyBwcm92aWRlZCBieSB0aGUgc2FtZSBh ZG1pbmlzdHJhdGl2ZQogICBkb21haW4gaS5lLiwgd2hlbiBtdWx0aXBsZSBTVFVOIHNlcnZlcnMg aW4gYSBzaW5nbGUgYWRtaW5pc3RyYXRpdmUKICAgZG9tYWluIHNoYXJlIHRoZSBzYW1lIHN5bW1l dHJpYyBrZXkgd2l0aCBhbiBhdXRob3JpemF0aW9uIHNlcnZlci4KCiAgIFRoZSBmaWVsZHMgYXJl IGRlc2NyaWJlZCBiZWxvdzoKCiAgIG5vbmNlX2xlbmd0aDogIExlbmd0aCBvZiB0aGUgbm9uY2Ug ZmllbGQuICBUaGUgbGVuZ3RoIG9mIG5vbmNlIGZvcgogICAgICBhdXRoZW50aWNhdGVkIGVuY3J5 cHRpb24gd2l0aCBhZGRpdGlvbmFsIGRhdGEgKEFFQUQpIGFsZ29yaXRobXMgaXMKICAgICAgZXhw bGFpbmVkIGluIFtSRkM1MTE2XS4KCiAgIE5vbmNlOiAgTm9uY2UgZm9ybWF0aW9uIGlzIGV4cGxh aW5lZCBpbiBzZWN0aW9uIDMuMiBvZiBbUkZDNTExNl0uCgogICBrZXlfbGVuZ3RoOiAgTGVuZ3Ro IG9mIHRoZSBzZXNzaW9uIGtleSBpbiBvY3RldHMuICBLZXkgbGVuZ3RoIG9mCiAgICAgIDE2MC1i aXRzIE1VU1QgYmUgc3VwcG9ydGVkIChpLmUuLCBvbmx5IDE2MC1iaXQga2V5IGlzIHVzZWQgYnkK ICAgICAgSE1BQy1TSEEtMSBmb3IgbWVzc2FnZSBpbnRlZ3JpdHkgb2YgU1RVTiBtZXNzYWdlKS4g IFRoZSBrZXkgbGVuZ3RoCiAgICAgIGZhY2lsaXRhdGVzIHRoZSBoYXNoIGFnaWxpdHkgcGxhbiBk aXNjdXNzZWQgaW4gc2VjdGlvbiAxNi4zIG9mCiAgICAgIFtSRkM1Mzg5XS4KCiAgIG1hY19rZXk6 ICBUaGUgc2Vzc2lvbiBrZXkgZ2VuZXJhdGVkIGJ5IHRoZSBhdXRob3JpemF0aW9uIHNlcnZlci4K CiAgIHRpbWVzdGFtcDogIDY0LWJpdCB1bnNpZ25lZCBpbnRlZ2VyIGZpZWxkIGNvbnRhaW5pbmcg YSB0aW1lc3RhbXAuCiAgICAgIFRoZSB2YWx1ZSBpbmRpY2F0ZXMgdGhlIHRpbWUgc2luY2UgSmFu dWFyeSAxLCAxOTcwLCAwMDowMCBVVEMsIGJ5CiAgICAgIHVzaW5nIGEgZml4ZWQgcG9pbnQgZm9y bWF0LiAgSW4gdGhpcyBmb3JtYXQsIHRoZSBpbnRlZ2VyIG51bWJlciBvZgogICAgICBzZWNvbmRz IGlzIGNvbnRhaW5lZCBpbiB0aGUgZmlyc3QgNDggYml0cyBvZiB0aGUgZmllbGQsIGFuZCB0aGUK ICAgICAgcmVtYWluaW5nIDE2IGJpdHMgaW5kaWNhdGUgdGhlIG51bWJlciBvZiAxLzY0SyBmcmFj dGlvbnMgb2YgYQogICAgICBzZWNvbmQgKE5hdGl2ZSBmb3JtYXQgLSBVbml4KS4KCiAgIGxpZmV0 aW1lOiAgVGhlIGxpZmV0aW1lIG9mIHRoZSBhY2Nlc3MgdG9rZW4sIGluIHNlY29uZHMuICBGb3IK ICAgICAgZXhhbXBsZSwgdGhlIHZhbHVlIDM2MDAgaW5kaWNhdGVzIG9uZSBob3VyLiAgVGhlIGxp ZmV0aW1lIHZhbHVlCiAgICAgIE1VU1QgYmUgZ3JlYXRlciB0aGFuIG9yIGVxdWFsIHRvIHRoZSAi ZXhwaXJlc19pbiIgcGFyYW1ldGVyCiAgICAgIGRlZmluZWQgaW4gc2VjdGlvbiA0LjIuMiBvZiBb UkZDNjc0OV0sIG90aGVyd2lzZSByZXNvdXJjZSBzZXJ2ZXIKICAgICAgY291bGQgcmV2b2tlIHRo ZSB0b2tlbiBidXQgdGhlIGNsaWVudCB3b3VsZCBhc3N1bWUgdGhhdCB0aGUgdG9rZW4KICAgICAg aGFzIG5vdCBleHBpcmVkIGFuZCB3b3VsZCBub3QgcmVmcmVzaCB0aGUgdG9rZW4uCgogICBlbmNy eXB0ZWRfYmxvY2s6ICBUaGUgZW5jcnlwdGVkX2Jsb2NrIGlzIGVuY3J5cHRlZCBhbmQgYXV0aGVu dGljYXRlZAogICAgICB1c2luZyB0aGUgc3ltbWV0cmljIGxvbmctdGVybSBrZXkgZXN0YWJsaXNo ZWQgYmV0d2VlbiB0aGUgU1RVTgogICAgICBzZXJ2ZXIgYW5kIHRoZSBhdXRob3JpemF0aW9uIHNl cnZlci4KCiAgIFRoZSBhdXRoZW50aWNhdGVkIGVuY3J5cHRpb24gb3BlcmF0aW9uIGhhcyBmb3Vy IGlucHV0czogSywgTiwgQSwgYW5kCiAgIFAgKGVuY3J5cHRlZF9ibG9jayksIGFzIGRlZmluZWQg aW4gc2VjdGlvbiAyLjEgb2YgW1JGQzUxMTZdIGFuZCB0aGVyZQogICBpcyBhIHNpbmdsZSBvdXRw dXQgYSBjaXBoZXJ0ZXh0IEMgb3IgYW4gaW5kaWNhdGlvbiB0aGF0IHRoZSByZXF1ZXN0ZWQKICAg ZW5jcnlwdGlvbiBvcGVyYXRpb24gY291bGQgbm90IGJlIHBlcmZvcm1lZC4gIEVuY3J5cHRpb24g cHJvY2VzcyB3aXRoCiAgIEFFU19DQkNfSE1BQ19TSEEyIChleHBsYWluZWQgaW4gc2VjdGlvbiAy LjEgb2YKICAgW0ktRC5tY2dyZXctYWVhZC1hZXMtY2JjLWhtYWMtc2hhMl0pIGlzIGlsbHVzdHJh dGVkIGJlbG93LiAgVGhlCiAgIGNpcGhlcnRleHQgY29uc2lzdHMgb2YgdGhlIHN0cmluZyBTLCB3 aXRoIHRoZSBzdHJpbmcgVCBhcHBlbmRlZCB0bwogICBpdC4gIEhlcmUgQyBhbmQgTiBkZW5vdGUg Q2lwaGVydGV4dCBhbmQgU1RVTiBzZXJ2ZXIgbmFtZQogICByZXNwZWN0aXZlbHkuICBUaGUgb2N0 ZXQgc3RyaW5nIEFMIChzZWN0aW9uIDIuMSBvZgoKCgoKUmVkZHksIGV0IGFsLiAgICAgICAgICAg RXhwaXJlcyBPY3RvYmVyIDEwLCAyMDE1ICAgICAgICAgICAgICAgIFtQYWdlIDhdCgwKSW50ZXJu ZXQtRHJhZnQgICAgICBTVFVOIGZvciAzcmQgcGFydHkgQXV0aG9yaXphdGlvbiAgICAgICAgICBB cHJpbCAyMDE1CgoKICAgW0ktRC5tY2dyZXctYWVhZC1hZXMtY2JjLWhtYWMtc2hhMl0pIGlzIGVx dWFsIHRvIHRoZSBudW1iZXIgb2YgYml0cwogICBpbiBBIGV4cHJlc3NlZCBhcyBhIDY0LWJpdCB1 bnNpZ25lZCBiaWcgZW5kaWFuIGludGVnZXIuCgogICBvICBBVVRIID0gaW5pdGlhbCBhdXRoZW50 aWNhdGlvbiBrZXkgbGVuZ3RoIG9jdGV0cyBvZiBLLAoKICAgbyAgQVMtUlMgPSBmaW5hbCBlbmNy eXB0aW9uIGtleSBsZW5ndGggb2N0ZXRzIG9mIEssCgogICBvICBTID0gQ0JDLVBLQ1M1LUVOQyhB Uy1SUywgZW5jcnlwdGVkX2Jsb2NrKSwKCiAgICAgICogIEluaXRpYWxpemF0aW9uIHZlY3RvciBp cyBzZXQgdG8gemVybyBiZWNhdXNlIHRoZQogICAgICAgICBlbmNyeXB0ZWRfYmxvY2sgaW4gZWFj aCBhY2Nlc3MgdG9rZW4gd2lsbCBub3QgYmUgaWRlbnRpY2FsIGFuZAogICAgICAgICBoZW5jZSB3 aWxsIG5vdCByZXN1bHQgaW4gZ2VuZXJhdGlvbiBvZiBpZGVudGljYWwgY2lwaGVydGV4dC4KCiAg IG8gIG1hYyA9IE1BQyhBVVRILCBOIHx8IG5vbmNlIHx8IEMgfHwgQUwpLAoKICAgbyAgVCA9IGlu aXRpYWwgVF9MRU4gb2N0ZXRzIG9mIG1hYywKCiAgIG8gIEMgPSBTIHx8IFQuCgogICBUaGUgZW50 aXJlIHRva2VuIGkuZS4sIHRoZSAnZW5jcnlwdGVkX2Jsb2NrJyBpcyBiYXNlNjQgZW5jb2RlZCAo c2VlCiAgIHNlY3Rpb24gNCBvZiBbUkZDNDY0OF0pIGFuZCB0aGUgcmVzdWx0aW5nIGFjY2VzcyB0 b2tlbiBpcyBzaWduYWxlZCB0bwogICB0aGUgY2xpZW50LgoKNy4gIFNUVU4gU2VydmVyIEJlaGF2 aW91cgoKICAgVGhlIFNUVU4gc2VydmVyLCBvbiByZWNlaXZpbmcgYSByZXF1ZXN0IHdpdGggQUND RVNTLVRPS0VOIGF0dHJpYnV0ZSwKICAgcGVyZm9ybXMgY2hlY2tzIGxpc3RlZCBpbiBzZWN0aW9u IDEwLjIuMiBvZiBbUkZDNTM4OV0gaW4gYWRkaXRpb24gdG8KICAgdGhlIGZvbGxvd2luZyBzdGVw cyB0byB2ZXJpZnkgdGhhdCB0aGUgYWNjZXNzIHRva2VuIGlzIHZhbGlkOgoKICAgbyAgU1RVTiBz ZXJ2ZXIgc2VsZWN0cyB0aGUga2V5aW5nIG1hdGVyaWFsIGJhc2VkIG9uIGtpZCBzaWduYWxsZWQg aW4KICAgICAgdGhlIFVTRVJOQU1FIGF0dHJpYnV0ZS4KCiAgIG8gIFRoZSBhdXRoZW50aWNhdGVk IGRlY3J5cHRpb24gb3BlcmF0aW9uIGhhcyBmb3VyIGlucHV0czogSywgTiwgQSwKICAgICAgYW5k IEMsIGFzIGRlZmluZWQgaW4gc2VjdGlvbiAyLjIgb2YgW1JGQzUxMTZdLiAgQUVBRCBkZWNyeXB0 aW9uCiAgICAgIGFsZ29yaXRobSBoYXMgb25seSBhIHNpbmdsZSBvdXRwdXQsIGVpdGhlciBhIHBs YWludGV4dCBvciBhCiAgICAgIHNwZWNpYWwgc3ltYm9sIEZBSUwgdGhhdCBpbmRpY2F0ZXMgdGhh dCB0aGUgaW5wdXRzIGFyZSBub3QKICAgICAgYXV0aGVudGljLiAgSWYgYXV0aGVudGljYXRlZCBk ZWNyeXB0IG9wZXJhdGlvbiByZXR1cm5zIEZBSUwgdGhlbgogICAgICB0aGUgU1RVTiBzZXJ2ZXIg cmVqZWN0cyB0aGUgcmVxdWVzdCB3aXRoIGFuIGVycm9yIHJlc3BvbnNlIDQwMQogICAgICAoVW5h dXRob3JpemVkKS4gIElmIEFFU19DQkNfSE1BQ19TSEEyIGlzIHVzZWQgdGhlbiB0aGUgZmluYWwg VF9MRU4KICAgICAgb2N0ZXRzIGFyZSBzdHJpcHBlZCBmcm9tIEMuICBJdCBwZXJmb3JtcyB0aGUg dmVyaWZpY2F0aW9uIG9mIHRoZQogICAgICB0b2tlbiBtZXNzYWdlIGludGVncml0eSBieSBjYWxj dWxhdGluZyBITUFDIG92ZXIgdGhlIHRoZSBTVFVOCiAgICAgIHNlcnZlciBuYW1lLCB0aGUgbm9u Y2UsIHRoZSBlbmNyeXB0ZWQgcG9ydGlvbiBpbiB0aGUgc2VsZi0KICAgICAgY29udGFpbmVkIHRv a2VuIGFuZCB0aGUgQUwgdXNpbmcgQVVUSCBrZXkgYW5kIGlmIHRoZSByZXN1bHRpbmcKICAgICAg dmFsdWUgZG9lcyBub3QgbWF0Y2ggdGhlIG1hYyBmaWVsZCBpbiB0aGUgc2VsZi1jb250YWluZWQg dG9rZW4KICAgICAgdGhlbiBpdCByZWplY3RzIHRoZSByZXF1ZXN0IHdpdGggYW4gZXJyb3IgcmVz cG9uc2UgNDAxCiAgICAgIChVbmF1dGhvcml6ZWQpLgoKCgoKClJlZGR5LCBldCBhbC4gICAgICAg ICAgIEV4cGlyZXMgT2N0b2JlciAxMCwgMjAxNSAgICAgICAgICAgICAgICBbUGFnZSA5XQoMCklu dGVybmV0LURyYWZ0ICAgICAgU1RVTiBmb3IgM3JkIHBhcnR5IEF1dGhvcml6YXRpb24gICAgICAg ICAgQXByaWwgMjAxNQoKCiAgIG8gIFNUVU4gc2VydmVyIG9idGFpbnMgdGhlIG1hY19rZXkgYnkg cmV0cmlldmluZyB0aGUgY29udGVudCBvZiB0aGUKICAgICAgYWNjZXNzIHRva2VuICh3aGljaCBy ZXF1aXJlcyBkZWNyeXB0aW9uIG9mIHRoZSBzZWxmLWNvbnRhaW5lZAogICAgICB0b2tlbiB1c2lu ZyB0aGUgQVMtUlMga2V5KS4KCiAgIG8gIFRoZSBTVFVOIHNlcnZlciB2ZXJpZmllcyB0aGF0IG5v IHJlcGxheSB0b29rIHBsYWNlIGJ5IHBlcmZvcm1pbmcKICAgICAgdGhlIGZvbGxvd2luZyBjaGVj azoKCiAgICAgICogIFRoZSBhY2Nlc3MgdG9rZW4gaXMgYWNjZXB0ZWQgaWYgdGhlIHRpbWVzdGFt cCBmaWVsZCAoVFMpIGluIHRoZQogICAgICAgICBzZWxmLWNvbnRhaW5lZCB0b2tlbiBpcyByZWNl bnQgZW5vdWdoIHRvIHRoZSByZWNlcHRpb24gdGltZSBvZgogICAgICAgICB0aGUgU1RVTiByZXF1 ZXN0IChSRG5ldykgdXNpbmcgdGhlIGZvbGxvd2luZyBmb3JtdWxhOiBMaWZldGltZQogICAgICAg ICArIERlbHRhID4gYWJzKFJEbmV3IC0gVFMpLiAgVGhlIFJFQ09NTUVOREVEIHZhbHVlIGZvciB0 aGUKICAgICAgICAgYWxsb3dlZCBEZWx0YSBpcyA1IHNlY29uZHMuICBJZiB0aGUgdGltZXN0YW1w IGlzIE5PVCB3aXRoaW4gdGhlCiAgICAgICAgIGJvdW5kYXJpZXMgdGhlbiB0aGUgU1RVTiBzZXJ2 ZXIgZGlzY2FyZHMgdGhlIHJlcXVlc3Qgd2l0aCBlcnJvcgogICAgICAgICByZXNwb25zZSA0MDEg KFVuYXV0aG9yaXplZCkuCgogICBvICBUaGUgU1RVTiBzZXJ2ZXIgdXNlcyB0aGUgbWFjX2tleSB0 byBjb21wdXRlIHRoZSBtZXNzYWdlIGludGVncml0eQogICAgICBvdmVyIHRoZSByZXF1ZXN0IGFu ZCBpZiB0aGUgcmVzdWx0aW5nIHZhbHVlIGRvZXMgbm90IG1hdGNoIHRoZQogICAgICBjb250ZW50 cyBvZiB0aGUgTUVTU0FHRS1JTlRFR1JJVFkgYXR0cmlidXRlIHRoZW4gaXQgcmVqZWN0cyB0aGUK ICAgICAgcmVxdWVzdCB3aXRoIGFuIGVycm9yIHJlc3BvbnNlIDQwMSAoVW5hdXRob3JpemVkKS4K CiAgIG8gIElmIGFsbCB0aGUgY2hlY2tzIHBhc3MsIHRoZSBTVFVOIHNlcnZlciBjb250aW51ZXMg dG8gcHJvY2VzcyB0aGUKICAgICAgcmVxdWVzdC4gIEFueSByZXNwb25zZSBnZW5lcmF0ZWQgYnkg dGhlIHNlcnZlciBNVVNUIGluY2x1ZGUgdGhlCiAgICAgIE1FU1NBR0UtSU5URUdSSVRZIGF0dHJp YnV0ZSwgY29tcHV0ZWQgdXNpbmcgdGhlIG1hY19rZXkuCgogICBJZiBhIFNUVU4gc2VydmVyIHJl Y2VpdmVzIGFuIEFDQ0VTUy1UT0tFTiBhdHRyaWJ1dGUgdW5leHBlY3RlZGx5CiAgIChiZWNhdXNl IGl0IGhhZCBub3QgcHJldmlvdXNseSBzZW50IG91dCBhIFRISVJELVBBUlRZLUFVVEhPUklaQVRJ T04pLAogICBpdCB3aWxsIHJlc3BvbmQgd2l0aCBhbiBlcnJvciBjb2RlIG9mIDQyMCAoVW5rbm93 biBBdHRyaWJ1dGUpIGFzCiAgIHNwZWNpZmllZCBpbiBTZWN0aW9uIDcuMy4xIG9mIFtSRkM1Mzg5 XS4KCjguICBTVFVOIENsaWVudCBCZWhhdmlvdXIKCiAgIG8gIFRoZSBjbGllbnQgbG9va3MgZm9y IHRoZSBNRVNTQUdFLUlOVEVHUklUWSBhdHRyaWJ1dGUgaW4gdGhlCiAgICAgIHJlc3BvbnNlLiAg SWYgTUVTU0FHRS1JTlRFR1JJVFkgaXMgYWJzZW50IG9yIHRoZSB2YWx1ZSBjb21wdXRlZAogICAg ICBmb3IgbWVzc2FnZSBpbnRlZ3JpdHkgdXNpbmcgbWFjX2tleSBkb2VzIG5vdCBtYXRjaCB0aGUg Y29udGVudHMgb2YKICAgICAgdGhlIE1FU1NBR0UtSU5URUdSSVRZIGF0dHJpYnV0ZSB0aGVuIHRo ZSByZXNwb25zZSBNVVNUIGJlCiAgICAgIGRpc2NhcmRlZC4KCiAgIG8gIElmIHRoZSBhY2Nlc3Mg dG9rZW4gZXhwaXJlcyB0aGVuIHRoZSBjbGllbnQgTVVTVCBvYnRhaW4gYSBuZXcKICAgICAgdG9r ZW4gZnJvbSB0aGUgYXV0aG9yaXphdGlvbiBzZXJ2ZXIgYW5kIHVzZSBpdCBmb3IgbmV3IFNUVU4K ICAgICAgcmVxdWVzdHMuCgo5LiAgVXNhZ2Ugd2l0aCBUVVJOCgogICBUcmF2ZXJzYWwgVXNpbmcg UmVsYXkgTkFUIChUVVJOKSBbUkZDNTc2Nl0gYW4gZXh0ZW5zaW9uIHRvIHRoZSBTVFVOCiAgIHBy b3RvY29sIGlzIG9mdGVuIHVzZWQgdG8gaW1wcm92ZSB0aGUgY29ubmVjdGl2aXR5IG9mIFAyUAog ICBhcHBsaWNhdGlvbnMuICBUVVJOIGVuc3VyZXMgdGhhdCBhIGNvbm5lY3Rpb24gY2FuIGJlIGVz dGFibGlzaGVkIGV2ZW4KICAgd2hlbiBvbmUgb3IgYm90aCBzaWRlcyBpcyBpbmNhcGFibGUgb2Yg YSBkaXJlY3QgUDJQIGNvbm5lY3Rpb24uCiAgIEhvd2V2ZXIsIGFzIGEgcmVsYXkgc2VydmljZSwg aXQgaW1wb3NlcyBhIG5vbnRyaXZpYWwgY29zdCBvbiB0aGUKCgoKUmVkZHksIGV0IGFsLiAgICAg ICAgICAgRXhwaXJlcyBPY3RvYmVyIDEwLCAyMDE1ICAgICAgICAgICAgICAgW1BhZ2UgMTBdCgwK SW50ZXJuZXQtRHJhZnQgICAgICBTVFVOIGZvciAzcmQgcGFydHkgQXV0aG9yaXphdGlvbiAgICAg ICAgICBBcHJpbCAyMDE1CgoKICAgc2VydmljZSBwcm92aWRlci4gIFRoZXJlZm9yZSwgYWNjZXNz IHRvIGEgVFVSTiBzZXJ2aWNlIGlzIGFsbW9zdAogICBhbHdheXMgYWNjZXNzLWNvbnRyb2xsZWQu ICBJbiBvcmRlciB0byBhY2hpZXZlIHRoaXJkIHBhcnR5CiAgIGF1dGhvcml6YXRpb24sIGEgcmVz b3VyY2Ugb3duZXIgZS5nLiAgV2ViUlRDIHNlcnZlciwgYXV0aG9yaXplcyBhCiAgIFRVUk4gY2xp ZW50IHRvIGFjY2VzcyByZXNvdXJjZXMgb24gdGhlIFRVUk4gc2VydmVyLgoKICAgQ29uc2lkZXIg dGhlIGZvbGxvd2luZyBleGFtcGxlIHRoYXQgaWxsdXN0cmF0ZXMgdGhlIHVzZSBvZiBPQXV0aCAy LjAKICAgdG8gYWNoaWV2ZSB0aGlyZCBwYXJ0eSBhdXRob3JpemF0aW9uIGZvciBUVVJOLiAgSW4g dGhpcyBleGFtcGxlLCBhCiAgIHJlc291cmNlIG93bmVyIGkuZS4sIFdlYlJUQyBzZXJ2ZXIsIGF1 dGhvcml6ZXMgYSBUVVJOIGNsaWVudCB0bwogICBhY2Nlc3MgcmVzb3VyY2VzIG9uIGEgVFVSTiBz ZXJ2ZXIuCgogICAgICAgICAgICAgICAgICstLS0tLS0tLS0tLS0tLS0tLS0tLS0tKy0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0rCiAgICAgICAgICAgICAgICAgfCAgICAgT0F1dGggMi4wICAg ICAgICB8ICAgICAgICAgICAgV2ViUlRDICAgICAgICAgIHwKICAgICAgICAgICAgICAgICArPT09 PT09PT09PT09PT09PT09PT09PSs9PT09PT09PT09PT09PT09PT09PT09PT09PT09KwogICAgICAg ICAgICAgICAgIHwgQ2xpZW50ICAgICAgICAgICAgICAgfCBXZWJSVEMgY2xpZW50ICAgICAgICAg ICAgICB8CiAgICAgICAgICAgICAgICAgKy0tLS0tLS0tLS0tLS0tLS0tLS0tLS0rLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLSsKICAgICAgICAgICAgICAgICB8IFJlc291cmNlIG93bmVyICAg ICAgIHwgV2ViUlRDIHNlcnZlciAgICAgICAgICAgICAgfAogICAgICAgICAgICAgICAgICstLS0t LS0tLS0tLS0tLS0tLS0tLS0tKy0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0rCiAgICAgICAg ICAgICAgICAgfCBBdXRob3JpemF0aW9uIHNlcnZlciB8IEF1dGhvcml6YXRpb24gc2VydmVyICAg ICAgIHwKICAgICAgICAgICAgICAgICArLS0tLS0tLS0tLS0tLS0tLS0tLS0tLSstLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tKwogICAgICAgICAgICAgICAgIHwgUmVzb3VyY2Ugc2VydmVyICAg ICAgfCBUVVJOIFNlcnZlciAgICAgICAgICAgICAgICB8CiAgICAgICAgICAgICAgICAgKy0tLS0t LS0tLS0tLS0tLS0tLS0tLS0rLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLSsKCiAgICAgICAg IEZpZ3VyZSAyOiBPQXV0aCB0ZXJtaW5vbG9neSBtYXBwZWQgdG8gV2ViUlRDIHRlcm1pbm9sb2d5 CgogICBVc2luZyB0aGUgT0F1dGggMi4wIGF1dGhvcml6YXRpb24gZnJhbWV3b3JrLCBhIFdlYlJU QyBjbGllbnQgKHRoaXJkLQogICBwYXJ0eSBhcHBsaWNhdGlvbikgb2J0YWlucyBsaW1pdGVkIGFj Y2VzcyB0byBhIFRVUk4gKHJlc291cmNlIHNlcnZlcikKICAgb24gYmVoYWxmIG9mIHRoZSBXZWJS VEMgc2VydmVyIChyZXNvdXJjZSBvd25lciBvciBhdXRob3JpemF0aW9uCiAgIHNlcnZlcikuICBU aGUgV2ViUlRDIGNsaWVudCByZXF1ZXN0cyBhY2Nlc3MgdG8gcmVzb3VyY2VzIGNvbnRyb2xsZWQK ICAgYnkgdGhlIHJlc291cmNlIG93bmVyIChXZWJSVEMgc2VydmVyKSBhbmQgaG9zdGVkIGJ5IHRo ZSByZXNvdXJjZQogICBzZXJ2ZXIgKFRVUk4gc2VydmVyKS4gIFRoZSBXZWJSVEMgY2xpZW50IG9i dGFpbnMgYWNjZXNzIHRva2VuLAogICBsaWZldGltZSwgc2Vzc2lvbiBrZXkgYW5kIGtpZC4gIFRo ZSBUVVJOIGNsaWVudCBjb252ZXlzIHRoZSBhY2Nlc3MKICAgdG9rZW4gYW5kIG90aGVyIE9BdXRo IDIuMCBwYXJhbWV0ZXJzIGxlYXJudCBmcm9tIHRoZSBhdXRob3JpemF0aW9uCiAgIHNlcnZlciB0 byB0aGUgVFVSTiBzZXJ2ZXIuICBUaGUgVFVSTiBzZXJ2ZXIgb2J0YWlucyB0aGUgc2Vzc2lvbiBr ZXkKICAgZnJvbSB0aGUgYWNjZXNzIHRva2VuLiAgVGhlIFRVUk4gc2VydmVyIHZhbGlkYXRlcyB0 aGUgdG9rZW4sIGNvbXB1dGVzCiAgIHRoZSBtZXNzYWdlIGludGVncml0eSBvZiB0aGUgcmVxdWVz dCBhbmQgdGFrZXMgYXBwcm9wcmlhdGUgYWN0aW9uCiAgIGkuZSwgcGVybWl0cyB0aGUgVFVSTiBj bGllbnQgdG8gY3JlYXRlIGFsbG9jYXRpb25zLiAgVGhpcyBpcyBzaG93biBpbgogICBhbiBhYnN0 cmFjdCB3YXkgaW4gRmlndXJlIDMuCgoKCgoKCgoKCgoKCgoKUmVkZHksIGV0IGFsLiAgICAgICAg ICAgRXhwaXJlcyBPY3RvYmVyIDEwLCAyMDE1ICAgICAgICAgICAgICAgW1BhZ2UgMTFdCgwKSW50 ZXJuZXQtRHJhZnQgICAgICBTVFVOIGZvciAzcmQgcGFydHkgQXV0aG9yaXphdGlvbiAgICAgICAg ICBBcHJpbCAyMDE1CgoKICAgICAgICAgICAgICAgICAgICAgICAgICAgKy0tLS0tLS0tLS0tLS0t LSsKICAgICAgICAgICAgICAgICAgICAgICAgICAgfCAgICAgICAgICAgICAgICs8KioqKioqKwog ICAgICAgICAgICArLS0tLS0tLS0tLS0tLT58IEF1dGhvcml6YXRpb24gfCAgICAgICAqCiAgICAg ICAgICAgIHwgICAgICAgICAgICAgIHwgU2VydmVyICAgICAgICB8ICAgICAgICoKICAgICAgICAg ICAgfCAgICstLS0tLS0tLS0tfChXZWJSVEMgU2VydmVyKXwgICAgICAgKiAgQVMtUlMsCiAgICAg ICAgICAgIHwgICB8ICAgICAgICAgIHwgICAgICAgICAgICAgICB8ICAgICAgICogIEFVVEgga2V5 cwogICAoMikgICAgICB8ICAgfCAgICAgICAgICAgKy0tLS0tLS0tLS0tLS0tLSsgICAgICAqICAg KDEpCiAgIEFjY2VzcyAgIHwgICB8ICAoMykgICAgICAgICAgICAgICAgICAgICAgICAgICAgICoK ICAgVG9rZW4gICAgfCAgIHwgQWNjZXNzIFRva2VuICAgICAgICAgICAgICAgICAgICAgKgogICBS ZXF1ZXN0ICB8ICAgfCAgICArICAgICAgICAgICAgICAgICAgICAgICAgICAgICAqCiAgICAgICAg ICAgIHwgICB8IFNlc3Npb24gS2V5ICAgICAgICAgICAgICAgICAgICAgICoKICAgICAgICAgICAg fCAgIHwgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgKgogICAgICAgICAgICB8ICAg ViAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICBWCiAgICAgICAgKy0tLS0tLS0rLS0t KyAgICAgICAgICAgICAgICAgICAgICAgKy0rLS0tLT0tLS0tLSsKICAgICAgICB8ICAgICAgICAg ICB8ICAgICAgICAgKDQpICAgICAgICAgICB8ICAgICAgICAgICAgfAogICAgICAgIHwgICAgICAg ICAgIHwgVFVSTiBSZXF1ZXN0ICsgQWNjZXNzIHwgICAgICAgICAgICB8CiAgICAgICAgfCBXZWJS VEMgICAgfCBUb2tlbiAgICAgICAgICAgICAgICAgfCBUVVJOICAgICAgIHwKICAgICAgICB8IENs aWVudCAgICB8LS0tLS0tLS0tLS0tLS0tLS0tLS0tLT58IFNlcnZlciAgICAgfAogICAgICAgIHwg KEFsaWNlKSAgIHwgQWxsb2NhdGUgUmVzcG9uc2UgKDUpIHwgICAgICAgICAgICB8CiAgICAgICAg fCAgICAgICAgICAgfDwtLS0tLS0tLS0tLS0tLS0tLS0tLS0tfCAgICAgICAgICAgIHwKICAgICAg ICArLS0tLS0tLS0tLS0rICAgICAgICAgICAgICAgICAgICAgICArLS0tLS0tLS0tLS0tKwoKICAg VXNlciA6IEFsaWNlCiAgICoqKio6IE91dC1vZi1CYW5kIExvbmctVGVybSBLZXkgRXN0YWJsaXNo bWVudAoKICAgICAgICAgICAgICAgICAgICAgICAgICBGaWd1cmUgMzogSW50ZXJhY3Rpb25zCgog ICBJbiB0aGUgYmVsb3cgZmlndXJlLCB0aGUgY2xpZW50IHNlbmRzIGFuIEFsbG9jYXRlIHJlcXVl c3QgdG8gdGhlCiAgIHNlcnZlciB3aXRob3V0IGNyZWRlbnRpYWxzLiAgU2luY2UgdGhlIHNlcnZl ciByZXF1aXJlcyB0aGF0IGFsbAogICByZXF1ZXN0cyBiZSBhdXRoZW50aWNhdGVkIHVzaW5nIE9B dXRoIDIuMCwgdGhlIHNlcnZlciByZWplY3RzIHRoZQogICByZXF1ZXN0IHdpdGggYSA0MDEgKFVu YXV0aG9yaXplZCkgZXJyb3IgY29kZSBhbmQgU1RVTiBhdHRyaWJ1dGUKICAgVEhJUkQtUEFSVFkt QVVUSE9SSVpBVElPTi4gIFRoZSBXZWJSVEMgY2xpZW50IG9idGFpbnMgYWNjZXNzIHRva2VuCiAg IGZyb20gdGhlIFdlYlJUQyBzZXJ2ZXIgYW5kIHRoZW4gdHJpZXMgYWdhaW4sIHRoaXMgdGltZSBp bmNsdWRpbmcKICAgYWNjZXNzIHRva2VuLiAgVGhpcyB0aW1lLCB0aGUgc2VydmVyIHZhbGlkYXRl cyB0aGUgdG9rZW4sIGFjY2VwdHMgdGhlCiAgIEFsbG9jYXRlIHJlcXVlc3QgYW5kIHJldHVybnMg YW4gQWxsb2NhdGUgc3VjY2VzcyByZXNwb25zZSBjb250YWluaW5nCiAgIChhbW9uZ3N0IG90aGVy IHRoaW5ncykgdGhlIHJlbGF5ZWQgdHJhbnNwb3J0IGFkZHJlc3MgYXNzaWduZWQgdG8gdGhlCiAg IGFsbG9jYXRpb24uCgoKCgoKCgoKCgoKCgoKUmVkZHksIGV0IGFsLiAgICAgICAgICAgRXhwaXJl cyBPY3RvYmVyIDEwLCAyMDE1ICAgICAgICAgICAgICAgW1BhZ2UgMTJdCgwKSW50ZXJuZXQtRHJh ZnQgICAgICBTVFVOIGZvciAzcmQgcGFydHkgQXV0aG9yaXphdGlvbiAgICAgICAgICBBcHJpbCAy MDE1CgoKICAgKy0tLS0tLS0tLS0tLS0tLS0tLS0rICAgICAgICAgICAgICAgICAgICAgICAgICst LS0tLS0tLSsgICstLS0tLS0tLS0rCiAgIHwgLi4uLi4uLi4uICBUVVJOICAgfCAgICAgICAgICAg ICAgICAgICAgICAgICB8ICBUVVJOICB8ICB8ICBXZWJSVEMgfAogICB8IC5XZWJSVEMgLiAgQ2xp ZW50IHwgICAgICAgICAgICAgICAgICAgICAgICAgfCAgICAgICAgfCAgfCAgICAgICAgIHwKICAg fCAuQ2xpZW50IC4gICAgICAgICB8ICAgICAgICAgICAgICAgICAgICAgICAgIHwgU2VydmVyIHwg IHwgIFNlcnZlciB8CiAgIHwgLi4uLi4uLi4uICAgICAgICAgfCAgICAgICAgICAgICAgICAgICAg ICAgICB8ICAgICAgICB8ICB8ICAgICAgICAgfAogICArLS0tLS0tLS0tLS0tLS0tLS0tLSsgICAg ICAgICAgICAgICAgICAgICAgICAgKy0tLS0tLS0tKyAgKy0tLS0tLS0tLSsKICAgICB8ICAgICAg IHwgICAgICAgICAgIEFsbG9jYXRlIHJlcXVlc3QgICAgICAgICAgICAgICAgfCAgICAgICAgIHwK ICAgICB8ICAgICAgIHwtLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0+ fCAgICAgICAgIHwKICAgICB8ICAgICAgIHwgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgfCAgICAgICAgIHwKICAgICB8ICAgICAgIHwgICAgICAgICBBbGxvY2F0ZSBl cnJvciByZXNwb25zZSAgICAgICAgICAgfCAgICAgICAgIHwKICAgICB8ICAgICAgIHwgICAgICAg ICAoNDAxIFVuYXV0aG9yaXplZCkgICAgICAgICAgICAgICAgfCAgICAgICAgIHwKICAgICB8ICAg ICAgIHw8LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tfCAgICAgICAg IHwKICAgICB8ICAgICAgIHwgICAgICAgICBUSElSRC1QQVJUWS1BVVRIT1JJWkFUSU9OICAgICAg ICAgfCAgICAgICAgIHwKICAgICB8ICAgICAgIHwgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgfCAgICAgICAgIHwKICAgICB8ICAgICAgIHwgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgfCAgICAgICAgIHwKICAgICB8ICAgICAgIHwgICAg ICBIVFRQIFJlcXVlc3QgZm9yIHRva2VuICAgICAgICAgICAgICAgfCAgICAgICAgIHwKICAgICB8 LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tPnwKICAgICB8ICAgICAgIHwgICAgICBIVFRQIFJlc3BvbnNlIHdpdGggdG9rZW4gcGFyYW1l dGVycyAgfCAgICAgICAgIHwKICAgICB8PC0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLXwKICAgICB8T0F1dGggMi4wICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgfCAgICAgICAgIHwKICAgICAgQXR0cmlidXRl cyAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgfCAgICAgICAgIHwKICAg ICB8LS0tLS0tPnwgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgfCAg ICAgICAgIHwKICAgICB8ICAgICAgIHwgICAgQWxsb2NhdGUgcmVxdWVzdCBBQ0NFU1MtVE9LRU4g ICAgICAgICAgfCAgICAgICAgIHwKICAgICB8ICAgICAgIHwtLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0+fCAgICAgICAgIHwKICAgICB8ICAgICAgIHwgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgfCAgICAgICAgIHwKICAgICB8ICAgICAg IHwgICAgICAgICBBbGxvY2F0ZSBzdWNjZXNzIHJlc3BvbnNlICAgICAgICAgfCAgICAgICAgIHwK ICAgICB8ICAgICAgIHw8LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t fCAgICAgICAgIHwKICAgICB8ICAgICAgIHwgICAgICAgICAgICAgVFVSTiBNZXNzYWdlcyAgICAg ICAgICAgICAgICAgfCAgICAgICAgIHwKICAgICB8ICAgICAgIHwgICAgICAvLy8vLy8gaW50ZWdy aXR5IHByb3RlY3RlZCAvLy8vLy8gICAgfCAgICAgICAgIHwKICAgICB8ICAgICAgIHwgICAgICAv Ly8vLy8gaW50ZWdyaXR5IHByb3RlY3RlZCAvLy8vLy8gICAgfCAgICAgICAgIHwKICAgICB8ICAg ICAgIHwgICAgICAvLy8vLy8gaW50ZWdyaXR5IHByb3RlY3RlZCAvLy8vLy8gICAgfCAgICAgICAg IHwKCiAgICAgICAgICAgICAgICAgRmlndXJlIDQ6IFRVUk4gVGhpcmQgUGFydHkgQXV0aG9yaXph dGlvbgoKICAgQ2hhbmdlcyBzcGVjaWZpYyB0byBUVVJOIGFyZSBsaXN0ZWQgYmVsb3c6CgogICBv ICBUaGUgYWNjZXNzIHRva2VuIGNhbiBiZSByZXVzZWQgZm9yIG11bHRpcGxlIEFsbG9jYXRlIHJl cXVlc3RzIHRvCiAgICAgIHRoZSBzYW1lIFRVUk4gc2VydmVyLiAgVGhlIFRVUk4gY2xpZW50IE1V U1QgaW5jbHVkZSB0aGUgQUNDRVNTLQogICAgICBUT0tFTiBhdHRyaWJ1dGUgb25seSBpbiBBbGxv Y2F0ZSBhbmQgUmVmcmVzaCByZXF1ZXN0cy4gIFNpbmNlIHRoZQogICAgICBhY2Nlc3MgdG9rZW4g aXMgdmFsaWQgZm9yIGEgc3BlY2lmaWMgcGVyaW9kIG9mIHRpbWUsIHRoZSBUVVJOCiAgICAgIHNl cnZlciBjYW4gY2FjaGUgaXQgc28gdGhhdCBpdCBjYW4gY2hlY2sgaWYgdGhlIGFjY2VzcyB0b2tl biBpbiBhCiAgICAgIG5ldyBhbGxvY2F0aW9uIHJlcXVlc3QgbWF0Y2hlcyBvbmUgb2YgdGhlIGNh Y2hlZCB0b2tlbnMgYW5kIGF2b2lkcwogICAgICB0aGUgbmVlZCB0byBkZWNyeXB0IHRoZSB0b2tl bi4KCiAgIG8gIFRoZSBsaWZldGltZSBwcm92aWRlZCBieSB0aGUgVFVSTiBzZXJ2ZXIgaW4gdGhl IEFsbG9jYXRlIGFuZAogICAgICBSZWZyZXNoIHJlc3BvbnNlcyBNVVNUIGJlIGxlc3MgdGhhbiBv ciBlcXVhbCB0byB0aGUgbGlmZXRpbWUgb2YKICAgICAgdGhlIHRva2VuLiAgSXQgaXMgUkVDT01N RU5ERUQgdGhhdCB0aGUgVFVSTiBzZXJ2ZXIgY2FsY3VsYXRlIHRoZQogICAgICBtYXhpbXVtIGFs bG93ZWQgbGlmZXRpbWUgdmFsdWUgdXNpbmcgdGhlIGZvcm11bGE6CgoKClJlZGR5LCBldCBhbC4g ICAgICAgICAgIEV4cGlyZXMgT2N0b2JlciAxMCwgMjAxNSAgICAgICAgICAgICAgIFtQYWdlIDEz XQoMCkludGVybmV0LURyYWZ0ICAgICAgU1RVTiBmb3IgM3JkIHBhcnR5IEF1dGhvcml6YXRpb24g ICAgICAgICAgQXByaWwgMjAxNQoKCiAgICAgICAgbGlmZXRpbWUgKyBEZWx0YSAtIGFicyhSRG5l dyAtIFRTKQoKICAgICAgVGhlIFJFQ09NTUVOREVEIHZhbHVlIGZvciB0aGUgYWxsb3dlZCBEZWx0 YSBpcyA1IHNlY29uZHMuCgogICBvICBJZiB0aGUgYWNjZXNzIHRva2VuIGV4cGlyZXMgdGhlbiB0 aGUgY2xpZW50IE1VU1Qgb2J0YWluIGEgbmV3CiAgICAgIHRva2VuIGZyb20gdGhlIGF1dGhvcml6 YXRpb24gc2VydmVyIGFuZCB1c2UgaXQgZm9yIG5ldwogICAgICBhbGxvY2F0aW9ucy4gIFRoZSBj bGllbnQgTVVTVCB1c2UgdGhlIG5ldyB0b2tlbiB0byByZWZyZXNoCiAgICAgIGV4aXN0aW5nIGFs bG9jYXRpb25zLiAgVGhpcyB3YXkgY2xpZW50IGhhcyB0byBtYWludGFpbiBvbmx5IG9uZQogICAg ICB0b2tlbiBwZXIgVFVSTiBzZXJ2ZXIuCgoxMC4gIE9wZXJhdGlvbmFsIENvbnNpZGVyYXRpb25z CgogICBUaGUgZm9sbG93aW5nIG9wZXJhdGlvbmFsIGNvbnNpZGVyYXRpb25zIHNob3VsZCBiZSB0 YWtlbiBpbnRvCiAgIGFjY291bnQ6CgogICBvICBFYWNoIGF1dGhvcml6YXRpb24gc2VydmVyIHNo b3VsZCBtYWludGFpbiB0aGUgbGlzdCBvZiBTVFVOIHNlcnZlcnMKICAgICAgZm9yIHdoaWNoIGl0 IHdpbGwgZ3JhbnQgdG9rZW5zLCBhbmQgdGhlIGxvbmctdGVybSBzZWNyZXQgc2hhcmVkCiAgICAg IHdpdGggZWFjaCBvZiB0aG9zZSBTVFVOIHNlcnZlcnMuCgogICBvICBJZiBtYW51YWwgY29uZmln dXJhdGlvbiAoU2VjdGlvbiA0LjEuMikgaXMgdXNlZCB0byBlc3RhYmxpc2gKICAgICAgc3ltbWV0 cmljIGtleXMsIHRoZSBuZWNlc3NhcnkgaW5mb3JtYXRpb24gd2hpY2ggaW5jbHVkZXMgbG9uZy10 ZXJtCiAgICAgIGtleSAoSyksIGVuY3J5cHRpb24gYW5kIEhNQUMgYWxnb3JpdGhtcyBoYXZlIHRv IGJlIGNvbmZpZ3VyZWQgb24KICAgICAgZWFjaCBhdXRob3JpemF0aW9uIHNlcnZlciBhbmQgU1RV TiBzZXJ2ZXIgZm9yIGVhY2gga2lkLiAgVGhlCiAgICAgIGNsaWVudCBvYnRhaW5zIHRoZSBzZXNz aW9uIGtleSBhbmQgSE1BQyBhbGdvcml0aG0gZnJvbSB0aGUKICAgICAgYXV0aG9yaXphdGlvbiBz ZXJ2ZXIgaW4gY29tcGFueSB3aXRoIHRoZSB0b2tlbi4KCiAgIG8gIFdoZW4gYSBTVFVOIGNsaWVu dCBzZW5kcyBhIHJlcXVlc3QgdG8gZ2V0IGFjY2VzcyB0byBhIHBhcnRpY3VsYXIKICAgICAgU1RV TiBzZXJ2ZXIgKFMpIHRoZSBhdXRob3JpemF0aW9uIHNlcnZlciBtdXN0IGVuc3VyZSB0aGF0IGl0 CiAgICAgIHNlbGVjdHMgdGhlIGFwcHJvcHJpYXRlIGtpZCwgYWNjZXNzLXRva2VuIGRlcGVuZGlu ZyBvbiB0aGUgc2VydmVyCiAgICAgIFMuCgoxMS4gIFNlY3VyaXR5IENvbnNpZGVyYXRpb25zCgog ICBXaGVuIE9BdXRoIDIuMCBpcyB1c2VkIHRoZSBpbnRlcmFjdGlvbiBiZXR3ZWVuIHRoZSBjbGll bnQgYW5kIHRoZQogICBhdXRob3JpemF0aW9uIHNlcnZlciByZXF1aXJlcyBUcmFuc3BvcnQgTGF5 ZXIgU2VjdXJpdHkgKFRMUykgd2l0aCBhCiAgIGNpcGhlcnN1aXRlIG9mZmVyaW5nIGNvbmZpZGVu dGlhbGl0eSBwcm90ZWN0aW9uIGFuZCB0aGUgZ3VpZGFuY2UKICAgZ2l2ZW4gaW4gW0ktRC5pZXRm LXV0YS10bHMtYmNwXSBtdXN0IGJlIGZvbGxvd2VkIHRvIGF2b2lkIGF0dGFja3Mgb24KICAgVExT LiAgVGhlIHNlc3Npb24ga2V5IE1VU1QgTk9UIGJlIHRyYW5zbWl0dGVkIGluIGNsZWFyIHNpbmNl IHRoaXMKICAgd291bGQgY29tcGxldGVseSBkZXN0cm95IHRoZSBzZWN1cml0eSBiZW5lZml0cyBv ZiB0aGUgcHJvcG9zZWQKICAgc2NoZW1lLiAgQW4gYXR0YWNrZXIgdHJ5aW5nIHRvIHJlcGxheSBt ZXNzYWdlIHdpdGggQUNDRVNTLVRPS0VOCiAgIGF0dHJpYnV0ZSBjYW4gYmUgbWl0aWdhdGVkIGJ5 IGZyZXF1ZW50IGNoYW5nZXMgb2Ygbm9uY2UgdmFsdWUgYXMKICAgZGlzY3Vzc2VkIGluIHNlY3Rp b24gMTAuMiBvZiBbUkZDNTM4OV0uICBUaGUgY2xpZW50IG1heSBrbm93IHNvbWUKICAgKGJ1dCBu b3QgYWxsKSBvZiB0aGUgdG9rZW4gZmllbGRzIGVuY3J5cHRlZCB3aXRoIGEgdW5rbm93biBzZWNy ZXQga2V5CiAgIGFuZCB0aGUgdG9rZW4gY2FuIGJlIHN1YmplY3RlZCB0byBrbm93bi1wbGFpbnRl eHQgYXR0YWNrLCBidXQgQUVTIGlzCiAgIHNlY3VyZSBhZ2FpbnN0IHRoaXMgYXR0YWNrLgoKICAg QW4gYXR0YWNrZXIgbWF5IHJlbW92ZSB0aGUgVEhJUkQtUEFSVFktQVVUSE9SSVpBVElPTiBTVFVO IGF0dHJpYnV0ZQogICBmcm9tIHRoZSBlcnJvciBtZXNzYWdlIGZvcmNpbmcgdGhlIGNsaWVudCB0 byBwaWNrIGZpcnN0IHBhcnR5CgoKClJlZGR5LCBldCBhbC4gICAgICAgICAgIEV4cGlyZXMgT2N0 b2JlciAxMCwgMjAxNSAgICAgICAgICAgICAgIFtQYWdlIDE0XQoMCkludGVybmV0LURyYWZ0ICAg ICAgU1RVTiBmb3IgM3JkIHBhcnR5IEF1dGhvcml6YXRpb24gICAgICAgICAgQXByaWwgMjAxNQoK CiAgIGF1dGhlbnRpY2F0aW9uLCB0aGlzIGF0dGFjayBtYXkgYmUgbWl0aWdhdGVkIGJ5IG9wdGlu ZyBmb3IgVHJhbnNwb3J0CiAgIExheWVyIFNlY3VyaXR5IChUTFMpIFtSRkM1MjQ2XSBvciBEYXRh Z3JhbSBUcmFuc3BvcnQgTGF5ZXIgU2VjdXJpdHkKICAgKERUTFMpIFtSRkM2MzQ3XSBhcyBhIHRy YW5zcG9ydCBwcm90b2NvbCBmb3IgU2Vzc2lvbiBUcmF2ZXJzYWwKICAgVXRpbGl0aWVzIGZvciBO QVQgKFNUVU4pLCBhcyBkZWZpbmVkIGluIFtSRkM1Mzg5XWFuZCBbUkZDNzM1MF0uCgogICBUaHJl YXQgbWl0aWdhdGlvbiBkaXNjdXNzZWQgaW4gc2VjdGlvbiA1IG9mCiAgIFtJLUQuaWV0Zi1vYXV0 aC1wb3AtYXJjaGl0ZWN0dXJlXSBhbmQgc2VjdXJpdHkgY29uc2lkZXJhdGlvbnMgaW4KICAgW1JG QzUzODldIGFyZSB0byBiZSB0YWtlbiBpbnRvIGFjY291bnQuCgoxMi4gIElBTkEgQ29uc2lkZXJh dGlvbnMKCiAgIFtQYXJhZ3JhcGhzIGJlbG93IGluIGJyYWNlcyBzaG91bGQgYmUgcmVtb3ZlZCBi eSB0aGUgUkZDIEVkaXRvciB1cG9uCiAgIHB1YmxpY2F0aW9uXQoKICAgW0lBTkEgaXMgcmVxdWVz dGVkIHRvIGFkZCB0aGUgZm9sbG93aW5nIGF0dHJpYnV0ZXMgdG8gdGhlIFNUVU4KICAgYXR0cmli dXRlIHJlZ2lzdHJ5IFtpYW5hLXN0dW5dLCBUaGUgVEhJUkQtUEFSVFktQVVUSE9SSVpBVElPTgog ICBhdHRyaWJ1dGUgcmVxdWlyZXMgdGhhdCBJQU5BIGFsbG9jYXRlIGEgdmFsdWUgaW4gdGhlICJT VFVOIGF0dHJpYnV0ZXMKICAgUmVnaXN0cnkiIGZyb20gdGhlIGNvbXByZWhlbnNpb24tb3B0aW9u YWwgcmFuZ2UgKDB4ODAwMC0weEJGRkYpXQoKICAgVGhpcyBkb2N1bWVudCBkZWZpbmVzIHRoZSBU SElSRC1QQVJUWS1BVVRIT1JJWkFUSU9OIFNUVU4gYXR0cmlidXRlLAogICBkZXNjcmliZWQgaW4g U2VjdGlvbiA2LiAgSUFOQSBoYXMgYWxsb2NhdGVkIHRoZSBjb21wcmVoZW5zaW9uLQogICBvcHRp b25hbCBjb2RlcG9pbnQgVEJEIGZvciB0aGlzIGF0dHJpYnV0ZS4KCiAgIFtUaGUgQUNDRVNTLVRP S0VOIGF0dHJpYnV0ZSByZXF1aXJlcyB0aGF0IElBTkEgYWxsb2NhdGUgYSB2YWx1ZSBpbgogICB0 aGUgIlNUVU4gYXR0cmlidXRlcyBSZWdpc3RyeSIgZnJvbSB0aGUgY29tcHJlaGVuc2lvbi1yZXF1 aXJlZCByYW5nZQogICAoMHgwMDAwLTB4M0ZGRildCgogICBUaGlzIGRvY3VtZW50IGRlZmluZXMg dGhlIEFDQ0VTUy1UT0tFTiBTVFVOIGF0dHJpYnV0ZSwgZGVzY3JpYmVkIGluCiAgIFNlY3Rpb24g Ni4gIElBTkEgaGFzIGFsbG9jYXRlZCB0aGUgY29tcHJlaGVuc2lvbi1yZXF1aXJlZCBjb2RlcG9p bnQKICAgVEJEIGZvciB0aGlzIGF0dHJpYnV0ZS4KCjEzLiAgQWNrbm93bGVkZ2VtZW50cwoKICAg QXV0aG9ycyB3b3VsZCBsaWtlIHRvIHRoYW5rIERhbiBXaW5nLCBQYWwgTWFydGluc2VuLCBPbGVn IE1vc2thbGVua28sCiAgIENoYXJsZXMgRWNrZWwsIFNwZW5jZXIgRGF3a2lucywgSGFubmVzIFRz Y2hvZmVuaWcsIFlhcm9uIFNoZWZmZXIsIFRvbQogICBUYXlsb3IsIENocmlzdGVyIEhvbG1iZXJn LCBQZXRlIFJlc25pY2ssIEthdGhsZWVuIE1vcmlhcnR5LCBSaWNoYXJkCiAgIEJhcm5lcywgU3Rl cGhlbiBGYXJyZWxsIGFuZCBBbGlzc2EgQ29vcGVyIGZvciBjb21tZW50cyBhbmQgcmV2aWV3Lgog ICBUaGUgYXV0aG9ycyB3b3VsZCBsaWtlIHRvIGdpdmUgc3BlY2lhbCB0aGFua3MgdG8gQnJhbmRv biBXaWxsaWFtcyBmb3IKICAgaGlzIGhlbHAuCgogICBUaGFua3MgdG8gT2xlZyBNb3NrYWxlbmtv IGZvciBwcm92aWRpbmcgdG9rZW4gc2FtcGxlcyBpbiB0aGUKICAgQXBwZW5kaXggc2VjdGlvbi4K CjE0LiAgUmVmZXJlbmNlcwoKCgoKCgoKUmVkZHksIGV0IGFsLiAgICAgICAgICAgRXhwaXJlcyBP Y3RvYmVyIDEwLCAyMDE1ICAgICAgICAgICAgICAgW1BhZ2UgMTVdCgwKSW50ZXJuZXQtRHJhZnQg ICAgICBTVFVOIGZvciAzcmQgcGFydHkgQXV0aG9yaXphdGlvbiAgICAgICAgICBBcHJpbCAyMDE1 CgoKMTQuMS4gIE5vcm1hdGl2ZSBSZWZlcmVuY2VzCgogICBbSS1ELmlldGYtam9zZS1qc29uLXdl Yi1hbGdvcml0aG1zXQogICAgICAgICAgICAgIEpvbmVzLCBNLiwgIkpTT04gV2ViIEFsZ29yaXRo bXMgKEpXQSkiLCBkcmFmdC1pZXRmLWpvc2UtCiAgICAgICAgICAgICAganNvbi13ZWItYWxnb3Jp dGhtcy00MCAod29yayBpbiBwcm9ncmVzcyksIEphbnVhcnkgMjAxNS4KCiAgIFtSRkMyMTE5XSAg QnJhZG5lciwgUy4sICJLZXkgd29yZHMgZm9yIHVzZSBpbiBSRkNzIHRvIEluZGljYXRlCiAgICAg ICAgICAgICAgUmVxdWlyZW1lbnQgTGV2ZWxzIiwgQkNQIDE0LCBSRkMgMjExOSwgTWFyY2ggMTk5 Ny4KCiAgIFtSRkM0NjQ4XSAgSm9zZWZzc29uLCBTLiwgIlRoZSBCYXNlMTYsIEJhc2UzMiwgYW5k IEJhc2U2NCBEYXRhCiAgICAgICAgICAgICAgRW5jb2RpbmdzIiwgUkZDIDQ2NDgsIE9jdG9iZXIg MjAwNi4KCiAgIFtSRkM0ODY4XSAgS2VsbHksIFMuIGFuZCBTLiBGcmFua2VsLCAiVXNpbmcgSE1B Qy1TSEEtMjU2LCBITUFDLVNIQS0KICAgICAgICAgICAgICAzODQsIGFuZCBITUFDLVNIQS01MTIg d2l0aCBJUHNlYyIsIFJGQyA0ODY4LCBNYXkgMjAwNy4KCiAgIFtSRkM1MTE2XSAgTWNHcmV3LCBE LiwgIkFuIEludGVyZmFjZSBhbmQgQWxnb3JpdGhtcyBmb3IgQXV0aGVudGljYXRlZAogICAgICAg ICAgICAgIEVuY3J5cHRpb24iLCBSRkMgNTExNiwgSmFudWFyeSAyMDA4LgoKICAgW1JGQzUzODld ICBSb3NlbmJlcmcsIEouLCBNYWh5LCBSLiwgTWF0dGhld3MsIFAuLCBhbmQgRC4gV2luZywKICAg ICAgICAgICAgICAiU2Vzc2lvbiBUcmF2ZXJzYWwgVXRpbGl0aWVzIGZvciBOQVQgKFNUVU4pIiwg UkZDIDUzODksCiAgICAgICAgICAgICAgT2N0b2JlciAyMDA4LgoKICAgW1JGQzY3NDldICBIYXJk dCwgRC4sICJUaGUgT0F1dGggMi4wIEF1dGhvcml6YXRpb24gRnJhbWV3b3JrIiwgUkZDCiAgICAg ICAgICAgICAgNjc0OSwgT2N0b2JlciAyMDEyLgoKICAgW2lhbmEtc3R1bl0KICAgICAgICAgICAg ICBJQU5BLCAsICJJQU5BOiBTVFVOIEF0dHJpYnV0ZXMiLCBBcHJpbCAyMDExLAogICAgICAgICAg ICAgIDxodHRwOi8vd3d3LmlhbmEub3JnL2Fzc2lnbm1lbnRzL3N0dW4tcGFyYW1ldGVycy9zdHVu LXBhCiAgICAgICAgICAgICAgcmFtZXRlcnMueG1sPi4KCjE0LjIuICBJbmZvcm1hdGl2ZSBSZWZl cmVuY2VzCgogICBbSS1ELmlldGYtam9zZS1qc29uLXdlYi1lbmNyeXB0aW9uXQogICAgICAgICAg ICAgIEpvbmVzLCBNLiBhbmQgSi4gSGlsZGVicmFuZCwgIkpTT04gV2ViIEVuY3J5cHRpb24gKEpX RSkiLAogICAgICAgICAgICAgIGRyYWZ0LWlldGYtam9zZS1qc29uLXdlYi1lbmNyeXB0aW9uLTQw ICh3b3JrIGluIHByb2dyZXNzKSwKICAgICAgICAgICAgICBKYW51YXJ5IDIwMTUuCgogICBbSS1E LmlldGYtam9zZS1qc29uLXdlYi1zaWduYXR1cmVdCiAgICAgICAgICAgICAgSm9uZXMsIE0uLCBC cmFkbGV5LCBKLiwgYW5kIE4uIFNha2ltdXJhLCAiSlNPTiBXZWIKICAgICAgICAgICAgICBTaWdu YXR1cmUgKEpXUykiLCBkcmFmdC1pZXRmLWpvc2UtanNvbi13ZWItc2lnbmF0dXJlLTQxCiAgICAg ICAgICAgICAgKHdvcmsgaW4gcHJvZ3Jlc3MpLCBKYW51YXJ5IDIwMTUuCgogICBbSS1ELmlldGYt b2F1dGgtanNvbi13ZWItdG9rZW5dCiAgICAgICAgICAgICAgSm9uZXMsIE0uLCBCcmFkbGV5LCBK LiwgYW5kIE4uIFNha2ltdXJhLCAiSlNPTiBXZWIgVG9rZW4KICAgICAgICAgICAgICAoSldUKSIs IGRyYWZ0LWlldGYtb2F1dGgtanNvbi13ZWItdG9rZW4tMzIgKHdvcmsgaW4KICAgICAgICAgICAg ICBwcm9ncmVzcyksIERlY2VtYmVyIDIwMTQuCgoKCgoKUmVkZHksIGV0IGFsLiAgICAgICAgICAg RXhwaXJlcyBPY3RvYmVyIDEwLCAyMDE1ICAgICAgICAgICAgICAgW1BhZ2UgMTZdCgwKSW50ZXJu ZXQtRHJhZnQgICAgICBTVFVOIGZvciAzcmQgcGFydHkgQXV0aG9yaXphdGlvbiAgICAgICAgICBB cHJpbCAyMDE1CgoKICAgW0ktRC5pZXRmLW9hdXRoLXBvcC1hcmNoaXRlY3R1cmVdCiAgICAgICAg ICAgICAgSHVudCwgUC4sIFJpY2hlciwgSi4sIE1pbGxzLCBXLiwgTWlzaHJhLCBQLiwgYW5kIEgu CiAgICAgICAgICAgICAgVHNjaG9mZW5pZywgIk9BdXRoIDIuMCBQcm9vZi1vZi1Qb3NzZXNzaW9u IChQb1ApIFNlY3VyaXR5CiAgICAgICAgICAgICAgQXJjaGl0ZWN0dXJlIiwgZHJhZnQtaWV0Zi1v YXV0aC1wb3AtYXJjaGl0ZWN0dXJlLTAxICh3b3JrCiAgICAgICAgICAgICAgaW4gcHJvZ3Jlc3Mp LCBNYXJjaCAyMDE1LgoKICAgW0ktRC5pZXRmLW9hdXRoLXBvcC1rZXktZGlzdHJpYnV0aW9uXQog ICAgICAgICAgICAgIEJyYWRsZXksIEouLCBIdW50LCBQLiwgSm9uZXMsIE0uLCBhbmQgSC4gVHNj aG9mZW5pZywKICAgICAgICAgICAgICAiT0F1dGggMi4wIFByb29mLW9mLVBvc3Nlc3Npb246IEF1 dGhvcml6YXRpb24gU2VydmVyIHRvCiAgICAgICAgICAgICAgQ2xpZW50IEtleSBEaXN0cmlidXRp b24iLCBkcmFmdC1pZXRmLW9hdXRoLXBvcC1rZXktCiAgICAgICAgICAgICAgZGlzdHJpYnV0aW9u LTAxICh3b3JrIGluIHByb2dyZXNzKSwgTWFyY2ggMjAxNS4KCiAgIFtJLUQuaWV0Zi1ydGN3ZWIt b3ZlcnZpZXddCiAgICAgICAgICAgICAgQWx2ZXN0cmFuZCwgSC4sICJPdmVydmlldzogUmVhbCBU aW1lIFByb3RvY29scyBmb3IKICAgICAgICAgICAgICBCcm93c2VyLWJhc2VkIEFwcGxpY2F0aW9u cyIsIGRyYWZ0LWlldGYtcnRjd2ViLW92ZXJ2aWV3LTEzCiAgICAgICAgICAgICAgKHdvcmsgaW4g cHJvZ3Jlc3MpLCBOb3ZlbWJlciAyMDE0LgoKICAgW0ktRC5pZXRmLXRyYW0tc3R1bmJpc10KICAg ICAgICAgICAgICBQZXRpdC1IdWd1ZW5pbiwgTS4sIFNhbGd1ZWlybywgRy4sIFJvc2VuYmVyZywg Si4sIFdpbmcsCiAgICAgICAgICAgICAgRC4sIE1haHksIFIuLCBhbmQgUC4gTWF0dGhld3MsICJT ZXNzaW9uIFRyYXZlcnNhbAogICAgICAgICAgICAgIFV0aWxpdGllcyBmb3IgTkFUIChTVFVOKSIs IGRyYWZ0LWlldGYtdHJhbS1zdHVuYmlzLTA0CiAgICAgICAgICAgICAgKHdvcmsgaW4gcHJvZ3Jl c3MpLCBNYXJjaCAyMDE1LgoKICAgW0ktRC5pZXRmLXV0YS10bHMtYmNwXQogICAgICAgICAgICAg IFNoZWZmZXIsIFkuLCBIb2x6LCBSLiwgYW5kIFAuIFNhaW50LUFuZHJlLAogICAgICAgICAgICAg ICJSZWNvbW1lbmRhdGlvbnMgZm9yIFNlY3VyZSBVc2Ugb2YgVExTIGFuZCBEVExTIiwgZHJhZnQt CiAgICAgICAgICAgICAgaWV0Zi11dGEtdGxzLWJjcC0xMSAod29yayBpbiBwcm9ncmVzcyksIEZl YnJ1YXJ5IDIwMTUuCgogICBbSS1ELm1jZ3Jldy1hZWFkLWFlcy1jYmMtaG1hYy1zaGEyXQogICAg ICAgICAgICAgIE1jR3JldywgRC4sIEZvbGV5LCBKLiwgYW5kIEsuIFBhdGVyc29uLCAiQXV0aGVu dGljYXRlZAogICAgICAgICAgICAgIEVuY3J5cHRpb24gd2l0aCBBRVMtQ0JDIGFuZCBITUFDLVNI QSIsIGRyYWZ0LW1jZ3Jldy1hZWFkLQogICAgICAgICAgICAgIGFlcy1jYmMtaG1hYy1zaGEyLTA1 ICh3b3JrIGluIHByb2dyZXNzKSwgSnVseSAyMDE0LgoKICAgW1JGQzIxMDRdICBLcmF3Y3p5aywg SC4sIEJlbGxhcmUsIE0uLCBhbmQgUi4gQ2FuZXR0aSwgIkhNQUM6IEtleWVkLQogICAgICAgICAg ICAgIEhhc2hpbmcgZm9yIE1lc3NhZ2UgQXV0aGVudGljYXRpb24iLCBSRkMgMjEwNCwgRmVicnVh cnkKICAgICAgICAgICAgICAxOTk3LgoKICAgW1JGQzUyNDZdICBEaWVya3MsIFQuIGFuZCBFLiBS ZXNjb3JsYSwgIlRoZSBUcmFuc3BvcnQgTGF5ZXIgU2VjdXJpdHkKICAgICAgICAgICAgICAoVExT KSBQcm90b2NvbCBWZXJzaW9uIDEuMiIsIFJGQyA1MjQ2LCBBdWd1c3QgMjAwOC4KCiAgIFtSRkM1 NzY2XSAgTWFoeSwgUi4sIE1hdHRoZXdzLCBQLiwgYW5kIEouIFJvc2VuYmVyZywgIlRyYXZlcnNh bCBVc2luZwogICAgICAgICAgICAgIFJlbGF5cyBhcm91bmQgTkFUIChUVVJOKTogUmVsYXkgRXh0 ZW5zaW9ucyB0byBTZXNzaW9uCiAgICAgICAgICAgICAgVHJhdmVyc2FsIFV0aWxpdGllcyBmb3Ig TkFUIChTVFVOKSIsIFJGQyA1NzY2LCBBcHJpbCAyMDEwLgoKICAgW1JGQzU4NjldICBLcmF3Y3p5 aywgSC4gYW5kIFAuIEVyb25lbiwgIkhNQUMtYmFzZWQgRXh0cmFjdC1hbmQtRXhwYW5kCiAgICAg ICAgICAgICAgS2V5IERlcml2YXRpb24gRnVuY3Rpb24gKEhLREYpIiwgUkZDIDU4NjksIE1heSAy MDEwLgoKCgoKClJlZGR5LCBldCBhbC4gICAgICAgICAgIEV4cGlyZXMgT2N0b2JlciAxMCwgMjAx NSAgICAgICAgICAgICAgIFtQYWdlIDE3XQoMCkludGVybmV0LURyYWZ0ICAgICAgU1RVTiBmb3Ig M3JkIHBhcnR5IEF1dGhvcml6YXRpb24gICAgICAgICAgQXByaWwgMjAxNQoKCiAgIFtSRkM2MDYz XSAgRG9oZXJ0eSwgQS4sIFBlaSwgTS4sIE1hY2hhbmksIFMuLCBhbmQgTS4gTnlzdHJvbSwKICAg ICAgICAgICAgICAiRHluYW1pYyBTeW1tZXRyaWMgS2V5IFByb3Zpc2lvbmluZyBQcm90b2NvbCAo RFNLUFApIiwgUkZDCiAgICAgICAgICAgICAgNjA2MywgRGVjZW1iZXIgMjAxMC4KCiAgIFtSRkM2 MzQ3XSAgUmVzY29ybGEsIEUuIGFuZCBOLiBNb2RhZHVndSwgIkRhdGFncmFtIFRyYW5zcG9ydCBM YXllcgogICAgICAgICAgICAgIFNlY3VyaXR5IFZlcnNpb24gMS4yIiwgUkZDIDYzNDcsIEphbnVh cnkgMjAxMi4KCiAgIFtSRkM2ODE5XSAgTG9kZGVyc3RlZHQsIFQuLCBNY0dsb2luLCBNLiwgYW5k IFAuIEh1bnQsICJPQXV0aCAyLjAKICAgICAgICAgICAgICBUaHJlYXQgTW9kZWwgYW5kIFNlY3Vy aXR5IENvbnNpZGVyYXRpb25zIiwgUkZDIDY4MTksCiAgICAgICAgICAgICAgSmFudWFyeSAyMDEz LgoKICAgW1JGQzcxNTldICBCcmF5LCBULiwgIlRoZSBKYXZhU2NyaXB0IE9iamVjdCBOb3RhdGlv biAoSlNPTikgRGF0YQogICAgICAgICAgICAgIEludGVyY2hhbmdlIEZvcm1hdCIsIFJGQyA3MTU5 LCBNYXJjaCAyMDE0LgoKICAgW1JGQzczNTBdICBQZXRpdC1IdWd1ZW5pbiwgTS4gYW5kIEcuIFNh bGd1ZWlybywgIkRhdGFncmFtIFRyYW5zcG9ydAogICAgICAgICAgICAgIExheWVyIFNlY3VyaXR5 IChEVExTKSBhcyBUcmFuc3BvcnQgZm9yIFNlc3Npb24gVHJhdmVyc2FsCiAgICAgICAgICAgICAg VXRpbGl0aWVzIGZvciBOQVQgKFNUVU4pIiwgUkZDIDczNTAsIEF1Z3VzdCAyMDE0LgoKICAgW1JG QzczNzZdICBSZWRkeSwgVC4sIFJhdmluZHJhbmF0aCwgUi4sIFBlcnVtYWwsIE0uLCBhbmQgQS4g WWVnaW4sCiAgICAgICAgICAgICAgIlByb2JsZW1zIHdpdGggU2Vzc2lvbiBUcmF2ZXJzYWwgVXRp bGl0aWVzIGZvciBOQVQgKFNUVU4pCiAgICAgICAgICAgICAgTG9uZy1UZXJtIEF1dGhlbnRpY2F0 aW9uIGZvciBUcmF2ZXJzYWwgVXNpbmcgUmVsYXlzIGFyb3VuZAogICAgICAgICAgICAgIE5BVCAo VFVSTikiLCBSRkMgNzM3NiwgU2VwdGVtYmVyIDIwMTQuCgpBcHBlbmRpeCBBLiAgU2FtcGxlIHRp Y2tldHMKCklucHV0IGRhdGEgKHNhbWUgZm9yIGFsbCBzYW1wbGVzIGJlbG93KToKCi8vU1RVTiBT RVJWRVIgTkFNRQpzZXJ2ZXJfbmFtZSA9ICJibGFja2Rvdy5jYXJsZW9uLmdvdiI7CgovL1NoYXJl ZCBrZXkgYmV0d2VlbiBBUyBhbmQgUlMKCmxvbmdfdGVybV9rZXkgPSBceDQ4XHg0N1x4NmJceDZh XHgzM1x4MzJceDRiXHg0YVx4NDdceDY5XHg3NVx4NzkKICAgICAgICAgICAgICAgIFx4MzBceDM5 XHgzOFx4NzNceDY0XHg2Nlx4NjFceDcxXHg2Mlx4NGVceDZhXHg0ZgogICAgICAgICAgICAgICAg XHg2OVx4NjFceDdhXHgzN1x4MzFceDM5XHgzMlx4MzM7CgovL01BQyBrZXkgb2YgdGhlIHNlc3Np b24gKGluY2x1ZGVkIGluIHRoZSB0b2tlbikKbWFjX2tleSA9IFx4NWFceDZiXHg3M1x4NmFceDcw XHg3N1x4NjVceDZmXHg2OVx4NzhceDU4XHg2ZFx4NzZceDZlCiAgICAgICAgICBceDM2XHgzN1x4 MzVceDMzXHgzNFx4NmQ7CgovL2xlbmd0aCBvZiB0aGUgTUFDIGtleQptYWNfa2V5X2xlbmd0aCAg PSAgMjA7CgovL1RoZSB0aW1lc3RhbXAgZmllbGQgaW4gdGhlIHRva2VuCnRva2VuX3RpbWVzdGFt cCA9IDkyNDcwMzAwNzA0NzY4OwoKLy9UaGUgbGlmZXRpbWUgb2YgdGhlIHRva2VuCnRva2VuX2xp ZmV0aW1lID0gMzYwMDsKCgoKUmVkZHksIGV0IGFsLiAgICAgICAgICAgRXhwaXJlcyBPY3RvYmVy IDEwLCAyMDE1ICAgICAgICAgICAgICAgW1BhZ2UgMThdCgwKSW50ZXJuZXQtRHJhZnQgICAgICBT VFVOIGZvciAzcmQgcGFydHkgQXV0aG9yaXphdGlvbiAgICAgICAgICBBcHJpbCAyMDE1CgoKLy9u b25jZSBmb3IgQUVBRCB3aGVuIEFFQUQgaXMgdXNlZAphZWFkX25vbmNlID0gXHg2OFx4MzRceDZh XHgzM1x4NmJceDMyXHg2Y1x4MzJceDZlXHgzNFx4NjJceDM1OwoKU2FtcGxlczoKCjEpCiAgaGtk ZiBoYXNoIGZ1bmN0aW9uID0gU0hBLTI1NiwKICB0b2tlbiBlbmNyeXB0aW9uIGFsZ29yaXRobSA9 IEFFUy0yNTYtQ0JDCiAgdG9rZW4gYXV0aCBhbGdvcml0aG0gPSBITUFDLVNIQS0yNTYKCiAgUmVz dWx0OgogIEFTX1JTIGtleSAoMzIgYnl0ZXMpID0gXHhkOFx4YTRceDU0XHgxXHg2OFx4Ylx4Yjhc eDdjXHg2Y1x4ODYKICAgICAgICAgICAgICAgICAgICAgICAgIFx4YzVceDI5XHgzZVx4MzVceDMz XHg5MVx4OWJceDUxXHhmY1x4ZjkKICAgICAgICAgICAgICAgICAgICAgICAgIFx4ZGVceDI1XHgx OVx4YTlceGEzXHg1Nlx4MmJceDUxXHg3Ylx4ZTJceDc2XHg0ZgoKICBBVVRIIGtleSAoMzIgYnl0 ZXMpID0gXHg3Mlx4ZTFceGY5XHhjOVx4ZmVceGI5XHhlN1x4ZDhceDJhXHhjY1x4MmQKICAgICAg ICAgICAgICAgICAgICAgICAgXHhjM1x4MzNceGQ0XHgyZlx4YzFceDdmXHgzZVx4MzZceDI5XHhm YVx4ZjhceDUwCiAgICAgICAgICAgICAgICAgICAgICAgIFx4MTZceDVjXHhjZlx4NjBceGQxXHg2 N1x4YjlceDhmXHg3NgoKICBFbmNyeXB0ZWQgdG9rZW4gKDgwIGJ5dGVzID0gNDgrMzIpID0KCiBc eDI2XHg2XHgzOFx4ODJceGZhXHg3NFx4YTZceDJceDZhXHhhNlx4YTRceDM3XHgzMFx4YWNceDgz XHhjNlx4NDVceDUxCiBceDVjXHg5ZVx4M2VceGVhXHg4Nlx4MTFceGI5XHg0ZVx4OGNceDI3XHgz OFx4OGFceDUxXHhhN1x4ZFx4Y1x4NzRceDcyCiBceGRmXHhiOFx4MTJceDZhXHg4ZVx4MTdceGIz XHg1MFx4MTZceDEwXHhlZVx4N2VceDUzXHhlMVx4OTBceDZlXHgzYlx4MzcKIFx4ZGFceDE3XHg1 N1x4YjFceGEyXHg2XHg2NFx4NWNceDYzXHg3OVx4MzNceDM0XHg3ZFx4YWJceDcxXHg1Nlx4OThc eDJiCiBceDFceGE2XHg2Nlx4MjlceGNlXHhiMVx4YTVceGI0CgoKICAyKQoKICBoa2RmIGhhc2gg ZnVuY3Rpb24gPSBTSEEtMjU2LAogIHRva2VuIGVuY3J5cHRpb24gYWxnb3JpdGhtID0gQUVBRF9B RVNfMjU2X0dDTQogIHRva2VuIGF1dGggYWxnb3JpdGhtID0gTi9BCgogIFJlc3VsdDoKICBBU19S UyBrZXkgKDMyIGJ5dGVzKSA9IFx4ZDhceGE0XHg1NFx4MVx4NjhceGJceGI4XHg3Y1x4NmNceDg2 XHhjNVx4MjlceDNlCiAgICAgICAgICAgICAgICAgICAgICAgICBceDM1XHgzM1x4OTFceDliXHg1 MVx4ZmNceGY5XHhkZVx4MjVceDE5XHhhOVx4YTNceDU2CiAgICAgICAgICAgICAgICAgICAgICAg ICBceDJiXHg1MVx4N2JceGUyXHg3Nlx4NGYKICBBVVRIIGtleSA9IE4vQQoKICBFbmNyeXB0ZWQg dG9rZW4gKDYyIGJ5dGVzID0gMzQgKyAxNiArIDEyKSA9CgogXHhkNFx4ODZceDVjXHg1ZFx4NTlc eGZiXHgzZlx4ZTNceGY2XHhmMVx4ZDhceGMzXHgyMlx4YzJceDIyXHgyNlx4OGRceDJlXHhmMAog XHhiZVx4Mlx4NWJceGJkXHgxM1x4NDlceDg5XHg2ZVx4YTVceGM1XHg1MVx4ZWVceGVlXHg3Zlx4 ZDlceGU0XHg0MVx4ZDdceGNiCiBceDUxXHgyMFx4NDBceGNjXHhjNVx4NTNceDkwXHgyZlx4ZGNc eGJiXHg4ZFx4NTNceDY4XHgzNFx4NmFceDMzXHg2Ylx4MzJceDZjCiBceDMyXHg2ZVx4MzRceDYy XHgzNQoKCgoKClJlZGR5LCBldCBhbC4gICAgICAgICAgIEV4cGlyZXMgT2N0b2JlciAxMCwgMjAx NSAgICAgICAgICAgICAgIFtQYWdlIDE5XQoMCkludGVybmV0LURyYWZ0ICAgICAgU1RVTiBmb3Ig M3JkIHBhcnR5IEF1dGhvcml6YXRpb24gICAgICAgICAgQXByaWwgMjAxNQoKCiAgICAgICAgICAg ICAgICAgICAgICAgICBGaWd1cmUgNTogU2FtcGxlIHRpY2tldHMKCkFwcGVuZGl4IEIuICBJbnRl cmFjdGlvbiBiZXR3ZWVuIGNsaWVudCBhbmQgYXV0aG9yaXphdGlvbiBzZXJ2ZXIKCiAgIENsaWVu dCBtYWtlcyBhbiBIVFRQIHJlcXVlc3QgdG8gYW4gYXV0aG9yaXphdGlvbiBzZXJ2ZXIgdG8gb2J0 YWluIGEKICAgdG9rZW4gdGhhdCBjYW4gYmUgdXNlZCB0byBhdmFpbCBpdHNlbGYgb2YgU1RVTiBz ZXJ2aWNlcy4gIFRoZSBTVFVOCiAgIHRva2VuIGlzIHJldHVybmVkIGluIEpTT04gc3ludGF4IFtS RkM3MTU5XSwgYWxvbmcgd2l0aCBvdGhlciBPQXV0aAogICAyLjAgcGFyYW1ldGVycyBsaWtlIHRv a2VuIHR5cGUsIGtleSwgdG9rZW4gbGlmZXRpbWUgYW5kIGtpZCBkZWZpbmVkCiAgIGluIFtJLUQu aWV0Zi1vYXV0aC1wb3Ata2V5LWRpc3RyaWJ1dGlvbl0uCgoKICAgKy0tLS0tLS0tLS0tLS0tLS0t LS0rICAgICAgICAgICAgICAgICAgICAgICAgICstLS0tLS0tLSsgICstLS0tLS0tLS0rCiAgIHwg Li4uLi4uLi4uICBTVFVOICAgfCAgICAgICAgICAgICAgICAgICAgICAgICB8ICBTVFVOICB8ICB8 ICBXZWJSVEMgfAogICB8IC5XZWJSVEMgLiAgQ2xpZW50IHwgICAgICAgICAgICAgICAgICAgICAg ICAgfCAgICAgICAgfCAgfCAgICAgICAgIHwKICAgfCAuQ2xpZW50IC4gICAgICAgICB8ICAgICAg ICAgICAgICAgICAgICAgICAgIHwgU2VydmVyIHwgIHwgIFNlcnZlciB8CiAgIHwgLi4uLi4uLi4u ICAgICAgICAgfCAgICAgICAgICAgICAgICAgICAgICAgICB8ICAgICAgICB8ICB8ICAgICAgICAg fAogICArLS0tLS0tLS0tLS0tLS0tLS0tLSsgICAgICAgICAgICAgICAgICAgICAgICAgKy0tLS0t LS0tKyAgKy0tLS0tLS0tLSsKICAgICB8ICAgICAgIHwgICAgICAgICAgIFNUVU4gcmVxdWVzdCAg ICAgICAgICAgICAgICAgICAgfCAgICAgICAgIHwKICAgICB8ICAgICAgIHwtLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0+fCAgICAgICAgIHwKICAgICB8ICAgICAgIHwg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgfCAgICAgICAgIHwKICAg ICB8ICAgICAgIHwgICAgICAgICBTVFVOIGVycm9yIHJlc3BvbnNlICAgICAgICAgICAgICAgfCAg ICAgICAgIHwKICAgICB8ICAgICAgIHwgICAgICAgICAoNDAxIFVuYXV0aG9yaXplZCkgICAgICAg ICAgICAgICAgfCAgICAgICAgIHwKICAgICB8ICAgICAgIHw8LS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tfCAgICAgICAgIHwKICAgICB8ICAgICAgIHwgICAgICAgICBU SElSRC1QQVJUWS1BVVRIT1JJWkFUSU9OICAgICAgICAgfCAgICAgICAgIHwKICAgICB8ICAgICAg IHwgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgfCAgICAgICAgIHwK ICAgICB8ICAgICAgIHwgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg fCAgICAgICAgIHwKICAgICB8ICAgICAgIHwgICAgICBIVFRQIFJlcXVlc3QgZm9yIHRva2VuICAg ICAgICAgICAgICAgfCAgICAgICAgIHwKICAgICB8LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tPnwKICAgICB8ICAgICAgIHwgICAgICBI VFRQIFJlc3BvbnNlIHdpdGggdG9rZW4gcGFyYW1ldGVycyAgfCAgICAgICAgIHwKICAgICB8PC0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LXwKICAgICB8T0F1dGggMi4wICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgfCAgICAgICAgIHwKICAgICAgQXR0cmlidXRlcyAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgfCAgICAgICAgIHwKICAgICB8LS0tLS0tPnwgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgfCAgICAgICAgIHwKICAgICB8ICAgICAgIHwgICAg U1RVTiByZXF1ZXN0IHdpdGggQUNDRVNTLVRPS0VOICAgICAgICAgfCAgICAgICAgIHwKICAgICB8 ICAgICAgIHwtLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0+fCAgICAg ICAgIHwKICAgICB8ICAgICAgIHwgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgfCAgICAgICAgIHwKICAgICB8ICAgICAgIHwgICAgICAgICBTVFVOIHN1Y2Nlc3MgcmVz cG9uc2UgICAgICAgICAgICAgfCAgICAgICAgIHwKICAgICB8ICAgICAgIHw8LS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tfCAgICAgICAgIHwKICAgICB8ICAgICAgIHwg ICAgICAgICAgICAgU1RVTiBNZXNzYWdlcyAgICAgICAgICAgICAgICAgfCAgICAgICAgIHwKICAg ICB8ICAgICAgIHwgICAgICAvLy8vLy8gaW50ZWdyaXR5IHByb3RlY3RlZCAvLy8vLy8gICAgfCAg ICAgICAgIHwKICAgICB8ICAgICAgIHwgICAgICAvLy8vLy8gaW50ZWdyaXR5IHByb3RlY3RlZCAv Ly8vLy8gICAgfCAgICAgICAgIHwKICAgICB8ICAgICAgIHwgICAgICAvLy8vLy8gaW50ZWdyaXR5 IHByb3RlY3RlZCAvLy8vLy8gICAgfCAgICAgICAgIHwKCiAgICAgICAgICAgICAgICAgRmlndXJl IDY6IFNUVU4gVGhpcmQgUGFydHkgQXV0aG9yaXphdGlvbgoKICAgW0ktRC5pZXRmLW9hdXRoLXBv cC1rZXktZGlzdHJpYnV0aW9uXSBkZXNjcmliZXMgdGhlIGludGVyYWN0aW9uCiAgIGJldHdlZW4g dGhlIGNsaWVudCBhbmQgdGhlIGF1dGhvcml6YXRpb24gc2VydmVyLiAgRm9yIGV4YW1wbGUsIHRo ZQogICBjbGllbnQgbGVhcm5zIHRoZSBTVFVOIHNlcnZlciBuYW1lICJzdHVuMUBleGFtcGxlLmNv bSIgZnJvbSBUSElSRC0KCgoKUmVkZHksIGV0IGFsLiAgICAgICAgICAgRXhwaXJlcyBPY3RvYmVy IDEwLCAyMDE1ICAgICAgICAgICAgICAgW1BhZ2UgMjBdCgwKSW50ZXJuZXQtRHJhZnQgICAgICBT VFVOIGZvciAzcmQgcGFydHkgQXV0aG9yaXphdGlvbiAgICAgICAgICBBcHJpbCAyMDE1CgoKICAg UEFSVFktQVVUSE9SSVpBVElPTiBhdHRyaWJ1dGUgdmFsdWUgYW5kIG1ha2VzIHRoZSBmb2xsb3dp bmcgSFRUUAogICByZXF1ZXN0IGZvciB0aGUgYWNjZXNzIHRva2VuIHVzaW5nIHRyYW5zcG9ydC1s YXllciBzZWN1cml0eSAod2l0aAogICBleHRyYSBsaW5lIGJyZWFrcyBmb3IgZGlzcGxheSBwdXJw b3NlcyBvbmx5KToKCiAgICAgICAgSFRUUC8xLjEKICAgICAgICBIb3N0OiBzZXJ2ZXIuZXhhbXBs ZS5jb20KICAgICAgICBDb250ZW50LVR5cGU6IGFwcGxpY2F0aW9uL3gtd3d3LWZvcm0tdXJsZW5j b2RlZAogICAgICAgIGF1ZD1zdHVuMUBleGFtcGxlLmNvbQogICAgICAgIHRpbWVzdGFtcD0xMzYx NDcxNjI5CiAgICAgICAgZ3JhbnRfdHlwZT1pbXBsaWNpdAogICAgICAgIHRva2VuX3R5cGU9cG9w CiAgICAgICAgYWxnPUhNQUMtU0hBLTEgSE1BQy1TSEEtMjU2LTEyOAoKICAgICAgICAgICAgICAg ICAgICAgICAgICAgICBGaWd1cmUgNzogUmVxdWVzdAoKICAgW0ktRC5pZXRmLXRyYW0tc3R1bmJp c10gd2lsbCBzdXBwb3J0IGhhc2ggYWdpbGl0eSBhbmQgYWNjb21wbGlzaCB0aGlzCiAgIGFnaWxp dHkgYnkgY29udmV5aW5nIHRoZSBITUFDIGFsZ29yaXRobXMgc3VwcG9ydGVkIGJ5IHRoZSBTVFVO IHNlcnZlcgogICBhbG9uZyB3aXRoIGEgU1RVTiBlcnJvciBtZXNzYWdlIHRvIHRoZSBjbGllbnQu ICBUaGUgY2xpZW50IHRoZW4KICAgc2lnbmFscyB0aGUgaW50ZXJzZWN0aW9uLXNldCBvZiBhbGdv cml0aG1zIHN1cHBvcnRlZCBieSBpdCBhbmQgdGhlCiAgIFNUVU4gc2VydmVyIHRvIHRoZSBhdXRo b3JpemF0aW9uIHNlcnZlciBpbiB0aGUgJ2FsZycgcGFyYW1ldGVyCiAgIGRlZmluZWQgaW4gW0kt RC5pZXRmLW9hdXRoLXBvcC1rZXktZGlzdHJpYnV0aW9uXS4gIFRoZSBhdXRob3JpemF0aW9uCiAg IHNlcnZlciBzZWxlY3RzIGFuIEhNQUMgYWxnb3JpdGhtIGZyb20gdGhlIGxpc3Qgb2YgYWxnb3Jp dGhtcyB0aGUKICAgY2xpZW50IHByb3ZpZGVkIGFuZCBkZXRlcm1pbmVzIGxlbmd0aCBvZiB0aGUg bWFjX2tleSBiYXNlZCBvbiB0aGUKICAgc2VsZWN0ZWQgSE1BQyBhbGdvcml0aG0uICBOb3RlIHRo YXQgdW50aWwgU1RVTiBzdXBwb3J0cyBoYXNoIGFnaWxpdHkKICAgSE1BQy1TSEExIGlzIHRoZSBv bmx5IHZhbGlkIGhhc2ggYWxnb3JpdGhtIHRoYXQgdGhlIGNsaWVudCBjYW4gc2lnbmFsCiAgIHRv IHRoZSBhdXRob3JpemF0aW9uIHNlcnZlciBhbmQgdmljZS12ZXJzYS4KCiAgIElmIHRoZSBjbGll bnQgaXMgYXV0aG9yaXplZCB0aGVuIHRoZSBhdXRob3JpemF0aW9uIHNlcnZlciBpc3N1ZXMgYW4K ICAgYWNjZXNzIHRva2VuLiAgQW4gZXhhbXBsZSBvZiBzdWNjZXNzZnVsIHJlc3BvbnNlOgoKICAg ICAgICBIVFRQLzEuMSAyMDAgT0sKICAgICAgICBDb250ZW50LVR5cGU6IGFwcGxpY2F0aW9uL2pz b24KICAgICAgICBDYWNoZS1Db250cm9sOiBuby1zdG9yZQoKICAgICAgICB7CiAgICAgICAgICAi YWNjZXNzX3Rva2VuIjoKICAgIlUyRnNkR1ZrWDE4cUpLL2trV21SY25mSGdsclZUSlNwUzZ5VTMy a21IbU9yZkd5STNtMWdRajFqUlBzcjB1QmIKICAgSGN0dXljQWdzZlJYN25KVzJCZHVrR3lLTVhT aU5HTm5Cemlna0FvZlA2K1ozdmtKMVE1cFdiZlNScm9Pa1dCbiIsCiAgICAgICAgICAidG9rZW5f dHlwZSI6InBvcCIsCiAgICAgICAgICAiZXhwaXJlc19pbiI6MTgwMCwKICAgICAgICAgICJraWQi OiIyMkJJanhVOTNoL0lnd0ViIiwKICAgICAgICAgICJrZXkiOiJ2NTFONjJPTTY1a3lNdmZUSTA4 TyIKICAgICAgICAgICJhbGciOkhNQUMtU0hBLTI1Ni0xMjgKICAgICAgICB9CgogICAgICAgICAg ICAgICAgICAgICAgICAgICAgRmlndXJlIDg6IFJlc3BvbnNlCgoKCgoKUmVkZHksIGV0IGFsLiAg ICAgICAgICAgRXhwaXJlcyBPY3RvYmVyIDEwLCAyMDE1ICAgICAgICAgICAgICAgW1BhZ2UgMjFd CgwKSW50ZXJuZXQtRHJhZnQgICAgICBTVFVOIGZvciAzcmQgcGFydHkgQXV0aG9yaXphdGlvbiAg ICAgICAgICBBcHJpbCAyMDE1CgoKQXV0aG9ycycgQWRkcmVzc2VzCgogICBUaXJ1bWFsZXN3YXIg UmVkZHkKICAgQ2lzY28gU3lzdGVtcywgSW5jLgogICBDZXNzbmEgQnVzaW5lc3MgUGFyaywgVmFy dGh1ciBIb2JsaQogICBTYXJqYXB1ciBNYXJhdGhhbGxpIE91dGVyIFJpbmcgUm9hZAogICBCYW5n YWxvcmUsIEthcm5hdGFrYSAgNTYwMTAzCiAgIEluZGlhCgogICBFbWFpbDogdGlyZWRkeUBjaXNj by5jb20KCgogICBQcmFzaGFudGggUGF0aWwKICAgQ2lzY28gU3lzdGVtcywgSW5jLgogICBCYW5n YWxvcmUKICAgSW5kaWEKCiAgIEVtYWlsOiBwcmFzcGF0aUBjaXNjby5jb20KCgogICBSYW0gTW9o YW4gUmF2aW5kcmFuYXRoCiAgIENpc2NvIFN5c3RlbXMsIEluYy4KICAgQ2Vzc25hIEJ1c2luZXNz IFBhcmssCiAgIEthZGFiZWVzYW5haGFsbGkgVmlsbGFnZSwgVmFydGh1ciBIb2JsaSwKICAgU2Fy amFwdXItTWFyYXRoYWhhbGxpIE91dGVyIFJpbmcgUm9hZAogICBCYW5nYWxvcmUsIEthcm5hdGFr YSAgNTYwMTAzCiAgIEluZGlhCgogICBFbWFpbDogcm1vaGFuckBjaXNjby5jb20KCgogICBKdXN0 aW4gVWJlcnRpCiAgIEdvb2dsZQogICA3NDcgNnRoIEF2ZSBTCiAgIEtpcmtsYW5kLCBXQQogICA5 ODAzMwogICBVU0EKCiAgIEVtYWlsOiBqdXN0aW5AdWJlcnRpLm5hbWUKCgoKCgoKCgoKCgoKUmVk ZHksIGV0IGFsLiAgICAgICAgICAgRXhwaXJlcyBPY3RvYmVyIDEwLCAyMDE1ICAgICAgICAgICAg ICAgW1BhZ2UgMjJdCg== --_003_913383AAA69FF945B8F946018B75898A411FFC5Fxmbrcdx10ciscoc_-- From nobody Fri Apr 10 20:07:11 2015 Return-Path: X-Original-To: tram@ietfa.amsl.com Delivered-To: tram@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id ED9941A8BBE; Fri, 10 Apr 2015 20:07:07 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -14.511 X-Spam-Level: X-Spam-Status: No, score=-14.511 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_HI=-5, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id tjZ1d1qeBbuS; Fri, 10 Apr 2015 20:07:05 -0700 (PDT) Received: from alln-iport-6.cisco.com (alln-iport-6.cisco.com [173.37.142.93]) (using TLSv1 with cipher RC4-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 49B2C1A8BB7; Fri, 10 Apr 2015 20:07:05 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=8256; q=dns/txt; s=iport; t=1428721626; x=1429931226; h=from:to:cc:subject:date:message-id:references: in-reply-to:content-transfer-encoding:mime-version; bh=ZK13JaOsw1nvVEhxHWQp4hjtFelkl6oIvqLTCk78cVc=; b=PUBzfIBWX5YfsHmrW8bC7AELKjr7AX3sxL0HPOPfsqbciAPYiQPz+oLz CAwzO0vA6hAtKHwfYa3Wk8O8CSGJvjM0o5uLPIpRxZ7n7rmoWijAKNDa9 gXGL9dzXWziHDeIXIQHaTth7gZvxt2p1rDg3XrpNNhnQE7IUuHV6UXRzV 8=; X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: A0DYCAD8jihV/4MNJK1cgwxSXAWDEMBnZgmBUIV/AhyBITgUAQEBAQEBAX2EHwEBAQQjEUUMBAIBCBEEAQEDAgYZBAMCAgIwFAEICAIEAQkEBQgBiCENt1eWSwEBAQEBAQEBAQEBAQEBAQEBAQEBAReBIYoKgl+BOhEBBhoxBwaCYi+BFgWGIIg7EYIXg3iHMjqCfYM+jFMiggMcFIE8bwGBAwcXBhx/AQEB X-IronPort-AV: E=Sophos;i="5.11,559,1422921600"; d="scan'208";a="140244163" Received: from alln-core-1.cisco.com ([173.36.13.131]) by alln-iport-6.cisco.com with ESMTP; 11 Apr 2015 03:07:05 +0000 Received: from xhc-aln-x13.cisco.com (xhc-aln-x13.cisco.com [173.36.12.87]) by alln-core-1.cisco.com (8.14.5/8.14.5) with ESMTP id t3B374Bh019535 (version=TLSv1/SSLv3 cipher=AES128-SHA bits=128 verify=FAIL); Sat, 11 Apr 2015 03:07:04 GMT Received: from xmb-rcd-x10.cisco.com ([169.254.15.175]) by xhc-aln-x13.cisco.com ([173.36.12.87]) with mapi id 14.03.0195.001; Fri, 10 Apr 2015 22:07:04 -0500 From: "Tirumaleswar Reddy (tireddy)" To: Stephen Farrell , The IESG Thread-Topic: Stephen Farrell's Discuss on draft-ietf-tram-turn-third-party-authz-13: (with DISCUSS and COMMENT) Thread-Index: AQHQc8XlvscJvCv8tEiY7AOvXxiXD51HGxsA Date: Sat, 11 Apr 2015 03:07:03 +0000 Message-ID: <913383AAA69FF945B8F946018B75898A411FFCB9@xmb-rcd-x10.cisco.com> References: <20150410193813.20376.40907.idtracker@ietfa.amsl.com> In-Reply-To: <20150410193813.20376.40907.idtracker@ietfa.amsl.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.65.78.245] Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 MIME-Version: 1.0 Archived-At: Cc: "tram-chairs@ietf.org" , "tram@ietf.org" , "draft-ietf-tram-turn-third-party-authz@ietf.org" , "gonzalo.camarillo@ericsson.com" , "draft-ietf-tram-turn-third-party-authz.ad@ietf.org" , "draft-ietf-tram-turn-third-party-authz.shepherd@ietf.org" Subject: Re: [tram] Stephen Farrell's Discuss on draft-ietf-tram-turn-third-party-authz-13: (with DISCUSS and COMMENT) X-BeenThere: tram@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "Discussing the creation of a Turn Revised And Modernized \(TRAM\) WG, which goal is to consolidate the various initiatives to update TURN and STUN." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 11 Apr 2015 03:07:08 -0000 PiAtLS0tLU9yaWdpbmFsIE1lc3NhZ2UtLS0tLQ0KPiBGcm9tOiBTdGVwaGVuIEZhcnJlbGwgW21h aWx0bzpzdGVwaGVuLmZhcnJlbGxAY3MudGNkLmllXQ0KPiBTZW50OiBTYXR1cmRheSwgQXByaWwg MTEsIDIwMTUgMTowOCBBTQ0KPiBUbzogVGhlIElFU0cNCj4gQ2M6IHRyYW0tY2hhaXJzQGlldGYu b3JnOyB0cmFtQGlldGYub3JnOyBkcmFmdC1pZXRmLXRyYW0tdHVybi10aGlyZC1wYXJ0eS0NCj4g YXV0aHpAaWV0Zi5vcmc7IGdvbnphbG8uY2FtYXJpbGxvQGVyaWNzc29uLmNvbTsgZHJhZnQtaWV0 Zi10cmFtLXR1cm4tdGhpcmQtDQo+IHBhcnR5LWF1dGh6LmFkQGlldGYub3JnOyBkcmFmdC1pZXRm LXRyYW0tdHVybi10aGlyZC1wYXJ0eS0NCj4gYXV0aHouc2hlcGhlcmRAaWV0Zi5vcmcNCj4gU3Vi amVjdDogU3RlcGhlbiBGYXJyZWxsJ3MgRGlzY3VzcyBvbiBkcmFmdC1pZXRmLXRyYW0tdHVybi10 aGlyZC1wYXJ0eS1hdXRoei0NCj4gMTM6ICh3aXRoIERJU0NVU1MgYW5kIENPTU1FTlQpDQo+IA0K PiBTdGVwaGVuIEZhcnJlbGwgaGFzIGVudGVyZWQgdGhlIGZvbGxvd2luZyBiYWxsb3QgcG9zaXRp b24gZm9yDQo+IGRyYWZ0LWlldGYtdHJhbS10dXJuLXRoaXJkLXBhcnR5LWF1dGh6LTEzOiBEaXNj dXNzDQo+IA0KPiBXaGVuIHJlc3BvbmRpbmcsIHBsZWFzZSBrZWVwIHRoZSBzdWJqZWN0IGxpbmUg aW50YWN0IGFuZCByZXBseSB0byBhbGwgZW1haWwNCj4gYWRkcmVzc2VzIGluY2x1ZGVkIGluIHRo ZSBUbyBhbmQgQ0MgbGluZXMuIChGZWVsIGZyZWUgdG8gY3V0IHRoaXMgaW50cm9kdWN0b3J5DQo+ IHBhcmFncmFwaCwgaG93ZXZlci4pDQo+IA0KPiANCj4gUGxlYXNlIHJlZmVyIHRvIGh0dHA6Ly93 d3cuaWV0Zi5vcmcvaWVzZy9zdGF0ZW1lbnQvZGlzY3Vzcy1jcml0ZXJpYS5odG1sDQo+IGZvciBt b3JlIGluZm9ybWF0aW9uIGFib3V0IElFU0cgRElTQ1VTUyBhbmQgQ09NTUVOVCBwb3NpdGlvbnMu DQo+IA0KPiANCj4gVGhlIGRvY3VtZW50LCBhbG9uZyB3aXRoIG90aGVyIGJhbGxvdCBwb3NpdGlv bnMsIGNhbiBiZSBmb3VuZCBoZXJlOg0KPiBodHRwOi8vZGF0YXRyYWNrZXIuaWV0Zi5vcmcvZG9j L2RyYWZ0LWlldGYtdHJhbS10dXJuLXRoaXJkLXBhcnR5LWF1dGh6Lw0KPiANCj4gDQo+IA0KPiAt LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tDQo+IERJU0NVU1M6DQo+IC0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0NCj4gDQo+IA0KPiBFZGl0 ZWQgZGlzY3VzcyBiYWxsb3QgYWZ0ZXIgY2hhdHMgYXJvdW5kIERhbGxhcy4NCj4gDQo+ICgxKSBQ bGVhc2UgZml4IHRoZSBjcnlwdG8gYXMgcGVyIFJpY2hhcmQncyBkaXNjdXNzLiAoSSB0aGluayB0 aGUgcGxhbiBoZXJlIGlzIGZvcg0KPiBSaWNoIFNhbHogdG8gaGVscCB3aXRoIHRoYXQsIHdoaWNo IEknbSBjb25maWRlbnQgd2lsbCB3b3JrIG91dCBvay4pDQoNClllcywgY29tbWVudHMgZnJvbSBS aWNoYXJkIGFyZSBhZGRyZXNzZWQuDQoNCj4gDQo+ICgyKSBQbGVhc2UgY29uc2lkZXIgd2hldGhl ciBhIHNpZ25hdHVyZSBiYXNlZCBzY2hlbWUgdGhhdCBkb2VzIG5vdCByZXF1aXJlDQo+IHByZS1z aGFyZWQga2V5cyBiZXR3ZWVuIHRoZSBUVVJOIGFuZCAoaW4gcGFydGljdWxhcikgV2ViUlRDIHNl cnZlciBjb3VsZA0KPiBiZSB1c2VmdWwgdG8gc3VwcG9ydC4gKEVpdGhlciBpbiB0aGlzIGRvY3Vt ZW50IG9yDQo+IGVsc2V3aGVyZS4pIFRoZXJlIHNob3VsZCBiZSB1c2UgY2FzZXMgd2hlcmUgdGhh dCBvZmZlcnMgc3VmZmljaWVudA0KPiBhY2NvdW50YWJpbGl0eSBmb3IgdXNlIG9mIFRVUk4gYW5k IGl0IG91Z2h0IGFsbG93IHNvbWUgZGVwbG95bWVudHMgdGhhdA0KPiBhcmUgbGVzcyBlYXN5IHdp dGggdGhpcyBraW5kIG9mIHByZS1zaGFyZWQga2V5cyBhcHByb2FjaC4gVGhlIERJU0NVU1MgaGVy ZSBpcw0KPiB0byBjaGVjayBpZiB0aGUgV0cgd2FudCB0byB0YWtlIHRoYXQgYXBwcm9hY2gsIGVp dGhlciBub3cgb3IgbGF0ZXIuDQoNClBhc3NpdmUgYXR0YWNrcyBjb3VsZCBvY2N1ciBpbiBUVVJO IGR1ZSB0byBsYWNrIG9mIGludGVncml0eSBwcm90ZWN0aW9uLiBGb3IgZXhhbXBsZSwgYSBwYXNz aXZlIGF0dGFja2VyIGNvdWxkIG1vbml0b3IgQWxsb2NhdGUgcmVxdWVzdC9yZXNwb25zZSBiZXR3 ZWVuIHRoZSBjbGllbnQgYW5kIFRVUk4gc2VydmVyIGFuZCBtYWtlIGEgUmVmcmVzaCByZXF1ZXN0 IHdpdGggYSByZXF1ZXN0ZWQgbGlmZXRpbWUgb2YgMCB0byBkZWxldGUgdGhlIGFsbG9jYXRpb24u IE1lc3NhZ2UgaW50ZWdyaXR5IG9mIFRVUk4gbWVzc2FnZXMgZW5zdXJlcyB0aGF0IHBhc3NpdmUg YXR0YWNrZXIgY2Fubm90IHNwb29mIHN1YnNlcXVlbnQgVFVSTiBtZXNzYWdlcy4NCg0KPiANCj4g KDMpIEkgdGhpbmsgdGhlIHBsYW4gaXMgdG8gdGFrZSBvdXQgc29tZSBvZiB0aGUgb3B0aW9ucyB0 aGF0IGFyZSBub3QgbmVlZGVkIHNvDQo+IGFzIG1ha2UgaW50ZXJvcCBtb3JlIGxpa2VseS4NCj4g UGxlYXNlIGRvIHNvLiAoSSB0aGluayB3ZSBkaXNjdXNzZWQgdGFraW5nIG91dCB0aGUgREtTUFAg c3R1ZmYgYXQgbGVhc3QsIGJ1dA0KPiB0aGUgbW9yZSBvcHRpb25zIHdlIGNhbiBnZXQgcmlkIG9m LCB0aGUgYmV0dGVyKS4NCg0KWWVzLCBES1NQUCBpcyByZW1vdmVkIGZyb20gdGhlIGRyYWZ0Lg0K DQo+IA0KPiANCj4gLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLQ0KPiBDT01NRU5UOg0KPiAtLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tDQo+ IA0KPiANCj4gLSBDT01NRU5UUyBiZWxvdyBhcmUgdW5jaGFuZ2VkIHNpbmNlIGJlZm9yZSBEYWxs YXMuDQo+IFdlIGNhbiBsb29rIG92ZXIgdGhlbiBhcyB3ZSBnby4NCj4gDQo+IC0gSSByZWFsbHkg dGhpbmsgdGhpcyB3b3VsZCBiZW5lZml0IGZyb20gc29tZSB3aWRlciByZXZpZXcgYW5kIEkgZG9u J3QgdGhpbmsNCj4gaXQncyByZWFkeSBhcy1pcy4NCg0KVGhpcyBkcmFmdCBpcyBhbHNvIHJldmll d2VkIGluIE9BdXRoIFdHLg0KDQo+IA0KPiAtIEkgYWdyZWUgd2l0aCBSaWNoYXJkJ3MgZGlzY3Vz cyBwb2ludHMuDQo+IA0KPiAtIGludHJvOiAiaW1wb3NzaWJsZSBpbiB3ZWIgYXBwbGljYXRpb25z IiBpc24ndCByZWFsbHkgdHJ1ZSBpbiBwcmluY2lwbGUsIGJ1dA0KPiBpbXBvc3NpYmxlIGluIFdl YlJUQyBhcyBpdCB1c2VzIEpTIGlzIHRydWUuDQoNCk5FVzoNCiAgIEhvd2V2ZXIsIGluIHdlYiBh cHBsaWNhdGlvbnMNCiAgIGxpa2UgV2ViUlRDIFtJLUQuaWV0Zi1ydGN3ZWItb3ZlcnZpZXddIHdo ZXJlIEphdmFTY3JpcHQgdXNlcyB0aGUNCiAgIGJyb3dzZXIgZnVuY3Rpb25hbGl0eSB0byBtYWtl IHJlYWwtdGltZSBhdWRpbyBhbmQvb3IgdmlkZW8gY2FsbHMsIFdlYg0KICAgY29uZmVyZW5jaW5n LCBhbmQgZGlyZWN0IGRhdGEgdHJhbnNmZXIsIGVuc3VyaW5nIHRoaXMgc2VjcmVjeSBpcw0KICAg dHlwaWNhbGx5IG5vdCBwb3NzaWJsZS4NCg0KPiANCj4gLSBBc3N1bWluZyB0aGUgQVMgdGhhdCBj YW4gYXV0aG9yaXplIHRoZSB1c2VyIHNoYXJlcyBhIHNlY3JldCB3aXRoIHRoZSBTVFVODQo+IHNl cnZlciBjaG9zZW4gYnkgdGhlIFdlYlJUQyBzZXJ2ZXIgc2VlbXMgdmVyeSBicml0dGxlLiBXaHkg d291bGQgdGhhdCBiZQ0KPiB0cnVlIGluIGdlbmVyYWw/DQoNClRoZSBBUyBhbmQgV2ViUlRDIHNl cnZlciBhcmUgaW4gdGhlIHNhbWUgYWRtaW5pc3RyYXRpdmUgZG9tYWluIG9mIHRoZSBhcHBsaWNh dGlvbiBwcm92aWRlci4gVGhlIHVzZXIgbmV2ZXIgc2VuZHMgdGhlIHNlc3Npb24ga2V5IGxlYXJu ZWQgIGZyb20gdGhlIEFTIHRvIHRoZSBTVFVOIHNlcnZlciBpdCBvbmx5IHVzZXMgdGhlIHNlc3Np b24ga2V5IHRvIGNvbXB1dGUgIG1lc3NhZ2UgaW50ZWdyaXR5IG9mIFNUVU4gcmVxdWVzdCBhbmQg dG8gdmFsaWRhdGUgdGhlICBtZXNzYWdlIGludGVncml0eSBvZiAgdGhlIFNUVU4gcmVzcG9uc2Uu IFRoZSBTVFVOIHNlcnZlciB3aWxsIG9ubHkga25vdyB0aGUgc2Vzc2lvbiBrZXkgaWYgaXQgY2Fu IGRlY3J5cHQgdGhlIHRva2VuLg0KDQo+IA0KPiAtIDQuMS4xOiBIbW1tLiBIb3cgbWFueSBwZW9w bGUgdXNlIEtleVByb3YgSSB3b25kZXI/DQoNCkFscmVhZHkgcmVtb3ZlZCBES1NQUC4NCiANCj4g DQo+IC0gNC4xLjIgLSB3aGljaCAidHdvIHNlcnZlcnMiPyBXZWJSVEMgY2FuIGhhdmUgbW9yZSBz ZXJ2ZXJzIHRoYW4gdGhhdC4NCg0KVGhlIFNUVU4gc2VydmVyIGFuZCB0aGUgQVMuIEFzIGZhciBh cyB0aGUgU1RVTiBzZXJ2ZXIgaXMgY29uY2VybmVkLCBpdCBvbmx5IGRlYWxzIHdpdGggdGhlIEFT IG9mIGludGVyZXN0IGZvciBrZXkgZXN0YWJsaXNobWVudC4gVGhlIEFTIGNvdWxkIGJlIHRoZSBh cHBsaWNhdGlvbiBzZXJ2ZXIgaXRzZWxmIG9yIGNvdWxkIGJlIGEgS2V5IG1hbmFnZW1lbnQgIGZ1 bmN0aW9uIHN5bmNpbmcgdGhlIGtleWluZyBtYXRlcmlhbCB0byB0aGUgV2ViUlRDIHNlcnZlcnMu DQoNCk5FVzoNCiAgIFRoZSBTVFVOIGFuZCBBUyBzZXJ2ZXJzIGNvdWxkIGNob29zZSB0byB1c2Ug UkVTVCBBUEkgb3ZlciBIVFRQUyB0bw0KICAgZXN0YWJsaXNoIGEgc3ltbWV0cmljIGtleS4NCg0K PiANCj4gLSA0LjEuMiAtIG5vdyB3ZSdyZSB1c2luZyBUTFMgbXV0dWFsIGF1dGg/IEFuZCBob3cg ZG9lcyB0aGUgVExTIGNsaWVudCBrbm93DQo+IHdoaWNoIENBIHRvIHVzZSB0aGF0J2xsIHdvcmsg d2l0aCB0aGUgVExTIHNlcnZlciBoZXJlPyBJIGRvbid0IHRoaW5rIHRoYXQnbGwNCj4gc2NhbGUg d2lsbCBpdD8NCg0KV2UgcHJlc3VtZSB0aGUgdHdvIHBhcnRpZXMgaW52b2x2ZWQga25vdyB3aGF0 IENBIHRvIGNvbnNpZGVyIHdoZW4gdXNpbmcgdGhlIFJFU1QgQVBJcyDCrSB0aGV5IHdvdWxkIGhh dmUgdG8gZG8gdGhpcyB0byB0cnVzdCBlYWNoIG90aGVyLiBQbGVhc2Ugbm90ZSB0aGF0IHRoZSBB UyBpcyBhbGxvY2F0aW5nIHN5bW1ldHJpYyBrZXlzIG1lYW50IGV4Y2x1c2l2ZWx5IGZvciAgdGhh dCBTVFVOIFNlcnZlciwgc28gc29tZSBsZXZlbCBvZiBjby1vcmRpbmF0aW9uIGlzIGFscmVhZHkg aW52b2x2ZWQuDQoNCj4gDQo+IC0gNC4xLjMgLSB0aGlzIGxvb2tzIGxpa2Ugd2hhdCB0aGUgV0cv YXV0aG9ycyByZWFsbHkgd2FudCwgd291bGQgdGhhdCBiZSBhIGZhaXINCj4gc3RhdGVtZW50Pw0K DQpBcyBwZXIgb3VyIGRpc2N1c3Npb24gd2UgaGF2ZSBjaGFuZ2VkIHRoZSBzcGVjaWZpY2F0aW9u IHRvIHJlY29tbWVuZCBSRVNUIA0KDQpORVc6DQoNCiAgIE5vdGUgOiBUaGUgbWVjaGFuaXNtIHNw ZWNpZmllZCBpbiBTZWN0aW9uIDQuMS4yIGNvbXBhcmVkIHRvIFJFU1QNCiAgIGxhY2tzIGVuY3J5 cHRpb24gYW5kIEhNQUMgYWxnb3JpdGhtIGFnaWxpdHkuICBIZW5jZSBhIFNUVU4gc2VydmVyIGFu ZA0KICAgYXV0aG9yaXphdGlvbiBzZXJ2ZXIgaW1wbGVtZW50YXRpb24gU0hPVUxEIHN1cHBvcnQg UkVTVCBleHBsYWluZWQgaW4NCiAgIFNlY3Rpb24gNC4xLjEuDQoNCg0KPiANCj4gLSA5OiBGaWd1 cmUgMiBzaG91bGQgYmUgd2F5IHVwIGF0IHRoZSB0b3Agb2YgdGhlIGRvY3VtZW50IGFuZCBub3Qg aGVyZQ0KDQpJbiB0aGUgcHJldmlvdXMgdmVyc2lvbnMgaXQgd2FzIGluIHRoZSB0b3Agb2YgdGhl IGRvY3VtZW50IGJ1dCBtb3ZlZCBkb3duIGFmdGVyIGNvbW1lbnRzIHJlY2VpdmVkIGZyb20gdGhl IFdHIHRoYXQgV2ViUlRDIGlzIG9ubHkgYW4gIGV4YW1wbGUgdXNhZ2Ugb2YgdGhpcmQgcGFydHkg YXV0aG9yaXphdGlvbi4NCg0KPiANCj4gLSA5OiBXaHkgNSBzZWNvbmRzID8NCg0KU1RVTiBtZXNz YWdlcyBjYW4gYmUgc2VudCBvdmVyIFVEUCwgNSBzZWNvbmRzIGlzIHRvIGFjY29tbW9kYXRlIHBh Y2tldCBsb3NzIGFuZCBSVE8gaW50ZXJ2YWwuDQoNCi1UaXJ1DQoNCj4gDQoNCg== From nobody Mon Apr 13 00:04:39 2015 Return-Path: X-Original-To: tram@ietfa.amsl.com Delivered-To: tram@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 7B4BF1B2E51 for ; Mon, 13 Apr 2015 00:04:37 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: 0.95 X-Spam-Level: X-Spam-Status: No, score=0.95 tagged_above=-999 required=5 tests=[BAYES_50=0.8, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_ENVFROM_END_DIGIT=0.25, FREEMAIL_FROM=0.001, SPF_PASS=-0.001] autolearn=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id P85mT_wni-5u for ; Mon, 13 Apr 2015 00:04:35 -0700 (PDT) Received: from mail-wi0-x233.google.com (mail-wi0-x233.google.com [IPv6:2a00:1450:400c:c05::233]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 7CDEA1B2E4E for ; Mon, 13 Apr 2015 00:04:35 -0700 (PDT) Received: by wizk4 with SMTP id k4so60281934wiz.1 for ; Mon, 13 Apr 2015 00:04:34 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :cc:content-type:content-transfer-encoding; bh=KBHg4rkkyHaHXD/iTQUb13BWWg3VGNmfIJYtgBYq8ys=; b=Sql6iylGcOKaQKg3b/rXOlGxWggKhQVBuZB/v+oAMU5Jm7o7bfg/Om4MGGIUSFV5uC PGRGrlbE7AoyAMwjvBgMfWpf6MzZirpwT5h+dESoXQp+a1pS9wVJCD4JqJEb9woeH5K5 R4XVTTAsTeOaPG1i4TTHfOho2o9k7MMBKBPOaXs19OoO18xoce+mAIW40OopCYSgBkhc YrHlt9ddHc+fit6spG9tGO2xjGRGAEePxRvWCJ0bqGLuEvjVMvXF1nLH//YiP2fmZdrf 8rPb20iVqMiY7uewmKoq8qG44fkSrNV9VLkFeHKR0AdIiSVJkYQJYRhZWKH9XT4huxPW 0Liw== MIME-Version: 1.0 X-Received: by 10.180.206.98 with SMTP id ln2mr18694700wic.94.1428908674225; Mon, 13 Apr 2015 00:04:34 -0700 (PDT) Received: by 10.194.190.7 with HTTP; Mon, 13 Apr 2015 00:04:34 -0700 (PDT) In-Reply-To: <913383AAA69FF945B8F946018B75898A411FFCB9@xmb-rcd-x10.cisco.com> References: <20150410193813.20376.40907.idtracker@ietfa.amsl.com> <913383AAA69FF945B8F946018B75898A411FFCB9@xmb-rcd-x10.cisco.com> Date: Mon, 13 Apr 2015 00:04:34 -0700 Message-ID: From: Oleg Moskalenko To: "Tirumaleswar Reddy (tireddy)" Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: quoted-printable Archived-At: Cc: "tram@ietf.org" Subject: Re: [tram] Stephen Farrell's Discuss on draft-ietf-tram-turn-third-party-authz-13: (with DISCUSS and COMMENT) X-BeenThere: tram@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "Discussing the creation of a Turn Revised And Modernized \(TRAM\) WG, which goal is to consolidate the various initiatives to update TURN and STUN." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 13 Apr 2015 07:04:37 -0000 I noticed that the encrypted token has odd number of bytes, because the nonce_length is just one byte. I'd suggest to make it two bytes. Saving a byte by making the data size odd usually does not work well. It is really not saving any space or CPU cycles. Thanks Oleg On Fri, Apr 10, 2015 at 8:07 PM, Tirumaleswar Reddy (tireddy) wrote: >> -----Original Message----- >> From: Stephen Farrell [mailto:stephen.farrell@cs.tcd.ie] >> Sent: Saturday, April 11, 2015 1:08 AM >> To: The IESG >> Cc: tram-chairs@ietf.org; tram@ietf.org; draft-ietf-tram-turn-third-part= y- >> authz@ietf.org; gonzalo.camarillo@ericsson.com; draft-ietf-tram-turn-thi= rd- >> party-authz.ad@ietf.org; draft-ietf-tram-turn-third-party- >> authz.shepherd@ietf.org >> Subject: Stephen Farrell's Discuss on draft-ietf-tram-turn-third-party-a= uthz- >> 13: (with DISCUSS and COMMENT) >> >> Stephen Farrell has entered the following ballot position for >> draft-ietf-tram-turn-third-party-authz-13: Discuss >> >> When responding, please keep the subject line intact and reply to all em= ail >> addresses included in the To and CC lines. (Feel free to cut this introd= uctory >> paragraph, however.) >> >> >> Please refer to http://www.ietf.org/iesg/statement/discuss-criteria.html >> for more information about IESG DISCUSS and COMMENT positions. >> >> >> The document, along with other ballot positions, can be found here: >> http://datatracker.ietf.org/doc/draft-ietf-tram-turn-third-party-authz/ >> >> >> >> ---------------------------------------------------------------------- >> DISCUSS: >> ---------------------------------------------------------------------- >> >> >> Edited discuss ballot after chats around Dallas. >> >> (1) Please fix the crypto as per Richard's discuss. (I think the plan he= re is for >> Rich Salz to help with that, which I'm confident will work out ok.) > > Yes, comments from Richard are addressed. > >> >> (2) Please consider whether a signature based scheme that does not requi= re >> pre-shared keys between the TURN and (in particular) WebRTC server could >> be useful to support. (Either in this document or >> elsewhere.) There should be use cases where that offers sufficient >> accountability for use of TURN and it ought allow some deployments that >> are less easy with this kind of pre-shared keys approach. The DISCUSS he= re is >> to check if the WG want to take that approach, either now or later. > > Passive attacks could occur in TURN due to lack of integrity protection. = For example, a passive attacker could monitor Allocate request/response bet= ween the client and TURN server and make a Refresh request with a requested= lifetime of 0 to delete the allocation. Message integrity of TURN messages= ensures that passive attacker cannot spoof subsequent TURN messages. > >> >> (3) I think the plan is to take out some of the options that are not nee= ded so >> as make interop more likely. >> Please do so. (I think we discussed taking out the DKSPP stuff at least,= but >> the more options we can get rid of, the better). > > Yes, DKSPP is removed from the draft. > >> >> >> ---------------------------------------------------------------------- >> COMMENT: >> ---------------------------------------------------------------------- >> >> >> - COMMENTS below are unchanged since before Dallas. >> We can look over then as we go. >> >> - I really think this would benefit from some wider review and I don't t= hink >> it's ready as-is. > > This draft is also reviewed in OAuth WG. > >> >> - I agree with Richard's discuss points. >> >> - intro: "impossible in web applications" isn't really true in principle= , but >> impossible in WebRTC as it uses JS is true. > > NEW: > However, in web applications > like WebRTC [I-D.ietf-rtcweb-overview] where JavaScript uses the > browser functionality to make real-time audio and/or video calls, Web > conferencing, and direct data transfer, ensuring this secrecy is > typically not possible. > >> >> - Assuming the AS that can authorize the user shares a secret with the S= TUN >> server chosen by the WebRTC server seems very brittle. Why would that be >> true in general? > > The AS and WebRTC server are in the same administrative domain of the app= lication provider. The user never sends the session key learned from the A= S to the STUN server it only uses the session key to compute message integ= rity of STUN request and to validate the message integrity of the STUN re= sponse. The STUN server will only know the session key if it can decrypt th= e token. > >> >> - 4.1.1: Hmmm. How many people use KeyProv I wonder? > > Already removed DKSPP. > >> >> - 4.1.2 - which "two servers"? WebRTC can have more servers than that. > > The STUN server and the AS. As far as the STUN server is concerned, it on= ly deals with the AS of interest for key establishment. The AS could be the= application server itself or could be a Key management function syncing t= he keying material to the WebRTC servers. > > NEW: > The STUN and AS servers could choose to use REST API over HTTPS to > establish a symmetric key. > >> >> - 4.1.2 - now we're using TLS mutual auth? And how does the TLS client k= now >> which CA to use that'll work with the TLS server here? I don't think tha= t'll >> scale will it? > > We presume the two parties involved know what CA to consider when using t= he REST APIs =C2=AD they would have to do this to trust each other. Please = note that the AS is allocating symmetric keys meant exclusively for that S= TUN Server, so some level of co-ordination is already involved. > >> >> - 4.1.3 - this looks like what the WG/authors really want, would that be= a fair >> statement? > > As per our discussion we have changed the specification to recommend REST > > NEW: > > Note : The mechanism specified in Section 4.1.2 compared to REST > lacks encryption and HMAC algorithm agility. Hence a STUN server and > authorization server implementation SHOULD support REST explained in > Section 4.1.1. > > >> >> - 9: Figure 2 should be way up at the top of the document and not here > > In the previous versions it was in the top of the document but moved down= after comments received from the WG that WebRTC is only an example usage = of third party authorization. > >> >> - 9: Why 5 seconds ? > > STUN messages can be sent over UDP, 5 seconds is to accommodate packet lo= ss and RTO interval. > > -Tiru > >> > > _______________________________________________ > tram mailing list > tram@ietf.org > https://www.ietf.org/mailman/listinfo/tram From nobody Mon Apr 13 00:47:09 2015 Return-Path: X-Original-To: tram@ietfa.amsl.com Delivered-To: tram@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 5EC2B1A1F70; Mon, 13 Apr 2015 00:47:08 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.75 X-Spam-Level: X-Spam-Status: No, score=-1.75 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_ENVFROM_END_DIGIT=0.25, FREEMAIL_FROM=0.001, SPF_PASS=-0.001] autolearn=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ibrGcb8XH5GW; Mon, 13 Apr 2015 00:47:05 -0700 (PDT) Received: from mail-wi0-x234.google.com (mail-wi0-x234.google.com [IPv6:2a00:1450:400c:c05::234]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 5D4111A1EED; Mon, 13 Apr 2015 00:47:05 -0700 (PDT) Received: by widdi4 with SMTP id di4so41522704wid.0; Mon, 13 Apr 2015 00:47:04 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :cc:content-type:content-transfer-encoding; bh=WDLeLrkT3p4zoGaY048YJcVDJEEy9LORIzAPLsNwqcE=; b=Nb/x8Xa9Zsdoqw5tqOD9FoGpSVU9k48VAQ6HGhKAgZY0ZyhD+58EaeV0sKWIw40iHz 889cbxykFNDK3mbQUmvcpoNM5PjD4mZNlgjZEaRqz4S0Mu5FV1bEBtN2WoUsaUoWQK6H 9/zXtwLH2NN7BC8iBAQJAcGOMk31bQtmv5xQj46iS0ZEzPoEOz2XCbaMdOgkKAL//e2y 2ewGTX7FNDIST19y9NXQvehOStEB6MHPaLfGqEg/YyGuBkpzSH5aVtgfuY7KJRiFJIm0 GWtayLEQGTIjsEKh3OBnlJFSdFCILtzQUb7cNyqkXKLC91hI1HmZ+JgrT/XMr0dVka6x 9LeQ== MIME-Version: 1.0 X-Received: by 10.194.6.228 with SMTP id e4mr25120921wja.63.1428911224130; Mon, 13 Apr 2015 00:47:04 -0700 (PDT) Received: by 10.194.190.7 with HTTP; Mon, 13 Apr 2015 00:47:04 -0700 (PDT) In-Reply-To: <913383AAA69FF945B8F946018B75898A411FFCB9@xmb-rcd-x10.cisco.com> References: <20150410193813.20376.40907.idtracker@ietfa.amsl.com> <913383AAA69FF945B8F946018B75898A411FFCB9@xmb-rcd-x10.cisco.com> Date: Mon, 13 Apr 2015 00:47:04 -0700 Message-ID: From: Oleg Moskalenko To: "Tirumaleswar Reddy (tireddy)" Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: quoted-printable Archived-At: Cc: "tram-chairs@ietf.org" , "tram@ietf.org" , "draft-ietf-tram-turn-third-party-authz@ietf.org" , "gonzalo.camarillo@ericsson.com" , "draft-ietf-tram-turn-third-party-authz.ad@ietf.org" , "draft-ietf-tram-turn-third-party-authz.shepherd@ietf.org" , Stephen Farrell Subject: Re: [tram] Stephen Farrell's Discuss on draft-ietf-tram-turn-third-party-authz-13: (with DISCUSS and COMMENT) X-BeenThere: tram@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "Discussing the creation of a Turn Revised And Modernized \(TRAM\) WG, which goal is to consolidate the various initiatives to update TURN and STUN." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 13 Apr 2015 07:47:08 -0000 I noticed another problem in the draft: In the version 13, there was a formal explanation how the keys can be derived from the original K parameter (the keying material); due to that formal algorithm, both AS and STUN servers can perform the same actions over the K and obtain the same keys. That algorithm was based upon HKDF. In the version 14, that algorithm is omitted, and instead a reference to section 5.2.2.1 of [I-D.ietf-jose-json-web-algorithms] is added. But that section explains only how to derive AUTH and RS keys for the AES_CBC_HMAC_SHA algorithm. In the case if other algorithms are used, the derivation of keys from the K is not defined, and that makes AS and STUN server inter-operation problematic. The required STUN server authenticated encryption algorithm is A256GCMKW and it has no defined key derivation procedure in the version 14 of the draft. I propose to restore the HKDF-based universal key derivation procedure for GCM and other algorithms. Overall, I see that sections 4.1 and 4.1.1 have lots of legacy from the previous draft version 13, and it creates a somewhat messy wording. I'd suggest to re-write those two sections from scratch, because just changing/replacing some words in the historical text eventually creates a cryptic text that different people may understand differently. For example, the new 4.1.1 text can be understood so that AUTH and RS keys must always be 256 bites both (and we know that this is not really the case). I think that closing the old text and writing the new one (with clear understanding in mind what we want) would do the trick. Thanks Oleg On Fri, Apr 10, 2015 at 8:07 PM, Tirumaleswar Reddy (tireddy) wrote: >> -----Original Message----- >> From: Stephen Farrell [mailto:stephen.farrell@cs.tcd.ie] >> Sent: Saturday, April 11, 2015 1:08 AM >> To: The IESG >> Cc: tram-chairs@ietf.org; tram@ietf.org; draft-ietf-tram-turn-third-part= y- >> authz@ietf.org; gonzalo.camarillo@ericsson.com; draft-ietf-tram-turn-thi= rd- >> party-authz.ad@ietf.org; draft-ietf-tram-turn-third-party- >> authz.shepherd@ietf.org >> Subject: Stephen Farrell's Discuss on draft-ietf-tram-turn-third-party-a= uthz- >> 13: (with DISCUSS and COMMENT) >> >> Stephen Farrell has entered the following ballot position for >> draft-ietf-tram-turn-third-party-authz-13: Discuss >> >> When responding, please keep the subject line intact and reply to all em= ail >> addresses included in the To and CC lines. (Feel free to cut this introd= uctory >> paragraph, however.) >> >> >> Please refer to http://www.ietf.org/iesg/statement/discuss-criteria.html >> for more information about IESG DISCUSS and COMMENT positions. >> >> >> The document, along with other ballot positions, can be found here: >> http://datatracker.ietf.org/doc/draft-ietf-tram-turn-third-party-authz/ >> >> >> >> ---------------------------------------------------------------------- >> DISCUSS: >> ---------------------------------------------------------------------- >> >> >> Edited discuss ballot after chats around Dallas. >> >> (1) Please fix the crypto as per Richard's discuss. (I think the plan he= re is for >> Rich Salz to help with that, which I'm confident will work out ok.) > > Yes, comments from Richard are addressed. > >> >> (2) Please consider whether a signature based scheme that does not requi= re >> pre-shared keys between the TURN and (in particular) WebRTC server could >> be useful to support. (Either in this document or >> elsewhere.) There should be use cases where that offers sufficient >> accountability for use of TURN and it ought allow some deployments that >> are less easy with this kind of pre-shared keys approach. The DISCUSS he= re is >> to check if the WG want to take that approach, either now or later. > > Passive attacks could occur in TURN due to lack of integrity protection. = For example, a passive attacker could monitor Allocate request/response bet= ween the client and TURN server and make a Refresh request with a requested= lifetime of 0 to delete the allocation. Message integrity of TURN messages= ensures that passive attacker cannot spoof subsequent TURN messages. > >> >> (3) I think the plan is to take out some of the options that are not nee= ded so >> as make interop more likely. >> Please do so. (I think we discussed taking out the DKSPP stuff at least,= but >> the more options we can get rid of, the better). > > Yes, DKSPP is removed from the draft. > >> >> >> ---------------------------------------------------------------------- >> COMMENT: >> ---------------------------------------------------------------------- >> >> >> - COMMENTS below are unchanged since before Dallas. >> We can look over then as we go. >> >> - I really think this would benefit from some wider review and I don't t= hink >> it's ready as-is. > > This draft is also reviewed in OAuth WG. > >> >> - I agree with Richard's discuss points. >> >> - intro: "impossible in web applications" isn't really true in principle= , but >> impossible in WebRTC as it uses JS is true. > > NEW: > However, in web applications > like WebRTC [I-D.ietf-rtcweb-overview] where JavaScript uses the > browser functionality to make real-time audio and/or video calls, Web > conferencing, and direct data transfer, ensuring this secrecy is > typically not possible. > >> >> - Assuming the AS that can authorize the user shares a secret with the S= TUN >> server chosen by the WebRTC server seems very brittle. Why would that be >> true in general? > > The AS and WebRTC server are in the same administrative domain of the app= lication provider. The user never sends the session key learned from the A= S to the STUN server it only uses the session key to compute message integ= rity of STUN request and to validate the message integrity of the STUN re= sponse. The STUN server will only know the session key if it can decrypt th= e token. > >> >> - 4.1.1: Hmmm. How many people use KeyProv I wonder? > > Already removed DKSPP. > >> >> - 4.1.2 - which "two servers"? WebRTC can have more servers than that. > > The STUN server and the AS. As far as the STUN server is concerned, it on= ly deals with the AS of interest for key establishment. The AS could be the= application server itself or could be a Key management function syncing t= he keying material to the WebRTC servers. > > NEW: > The STUN and AS servers could choose to use REST API over HTTPS to > establish a symmetric key. > >> >> - 4.1.2 - now we're using TLS mutual auth? And how does the TLS client k= now >> which CA to use that'll work with the TLS server here? I don't think tha= t'll >> scale will it? > > We presume the two parties involved know what CA to consider when using t= he REST APIs =C2=AD they would have to do this to trust each other. Please = note that the AS is allocating symmetric keys meant exclusively for that S= TUN Server, so some level of co-ordination is already involved. > >> >> - 4.1.3 - this looks like what the WG/authors really want, would that be= a fair >> statement? > > As per our discussion we have changed the specification to recommend REST > > NEW: > > Note : The mechanism specified in Section 4.1.2 compared to REST > lacks encryption and HMAC algorithm agility. Hence a STUN server and > authorization server implementation SHOULD support REST explained in > Section 4.1.1. > > >> >> - 9: Figure 2 should be way up at the top of the document and not here > > In the previous versions it was in the top of the document but moved down= after comments received from the WG that WebRTC is only an example usage = of third party authorization. > >> >> - 9: Why 5 seconds ? > > STUN messages can be sent over UDP, 5 seconds is to accommodate packet lo= ss and RTO interval. > > -Tiru > >> > > _______________________________________________ > tram mailing list > tram@ietf.org > https://www.ietf.org/mailman/listinfo/tram From nobody Mon Apr 13 07:03:35 2015 Return-Path: X-Original-To: tram@ietfa.amsl.com Delivered-To: tram@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 047AE1A6F7A for ; Mon, 13 Apr 2015 07:03:34 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -14.511 X-Spam-Level: X-Spam-Status: No, score=-14.511 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_HI=-5, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 2ITotggB-rmP for ; Mon, 13 Apr 2015 07:03:30 -0700 (PDT) Received: from alln-iport-4.cisco.com (alln-iport-4.cisco.com [173.37.142.91]) (using TLSv1 with cipher RC4-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 7558E1A700F for ; Mon, 13 Apr 2015 07:03:21 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=10482; q=dns/txt; s=iport; t=1428933802; x=1430143402; h=from:to:cc:subject:date:message-id: content-transfer-encoding:mime-version; bh=qCm4E2xJ98f5QAAIm33A/cPXfEMFkjTKnjuUe4omBiI=; b=OALGzk3YaDSKHm7UrRdRHf8/TsKsmZW35H+khMEbQkhjQSrgBJO080/U a1uqYpj42X19rggweWcYBybfgGbvKqVJ5aJ/utUV9xEPSvcrBWZ5twe+O UTNgSiTM8WTWaop41wi36PJlUq7cyu4nTNt2fgCO/uwWMYGE/keimhJWY s=; X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: A0DLBAAXzCtV/5pdJa1cgwxSXAWDEMEXZgmBRAqGAQIcgRs4FAEBAQEBAQF9hB8BAQEDAQEBASAROgsFBwYBCA4DBAEBAQICBhkEAwIEJQsUAQgJAQQKBAUIAYgZCA22UZYsAQEBAQEBAQEBAQEBAQEBAQEBAQEBF4EhigqCX4E6EQEGGhYbDYJiL4EWBYYjiD6CK4N5hzM6gn2DP4xZIoIAAxwUgTxvAYEDBxcGHH8BAQE X-IronPort-AV: E=Sophos;i="5.11,570,1422921600"; d="scan'208";a="140753050" Received: from rcdn-core-3.cisco.com ([173.37.93.154]) by alln-iport-4.cisco.com with ESMTP; 13 Apr 2015 14:03:21 +0000 Received: from xhc-aln-x14.cisco.com (xhc-aln-x14.cisco.com [173.36.12.88]) by rcdn-core-3.cisco.com (8.14.5/8.14.5) with ESMTP id t3DE3K4N030123 (version=TLSv1/SSLv3 cipher=AES128-SHA bits=128 verify=FAIL); Mon, 13 Apr 2015 14:03:20 GMT Received: from xmb-rcd-x10.cisco.com ([169.254.15.220]) by xhc-aln-x14.cisco.com ([173.36.12.88]) with mapi id 14.03.0195.001; Mon, 13 Apr 2015 09:03:20 -0500 From: "Tirumaleswar Reddy (tireddy)" To: Oleg Moskalenko Thread-Topic: [tram] Stephen Farrell's Discuss on draft-ietf-tram-turn-third-party-authz-13: (with DISCUSS and COMMENT) Thread-Index: AdB18rGIQI0mjhjpSxW/g/aJSfQSIw== Date: Mon, 13 Apr 2015 14:03:19 +0000 Message-ID: <913383AAA69FF945B8F946018B75898A4120CC8F@xmb-rcd-x10.cisco.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.65.54.180] Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 MIME-Version: 1.0 Archived-At: Cc: "tram@ietf.org" Subject: Re: [tram] Stephen Farrell's Discuss on draft-ietf-tram-turn-third-party-authz-13: (with DISCUSS and COMMENT) X-BeenThere: tram@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "Discussing the creation of a Turn Revised And Modernized \(TRAM\) WG, which goal is to consolidate the various initiatives to update TURN and STUN." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 13 Apr 2015 14:03:34 -0000 PiAtLS0tLU9yaWdpbmFsIE1lc3NhZ2UtLS0tLQ0KPiBGcm9tOiB0cmFtIFttYWlsdG86dHJhbS1i b3VuY2VzQGlldGYub3JnXSBPbiBCZWhhbGYgT2YgT2xlZyBNb3NrYWxlbmtvDQo+IFNlbnQ6IE1v bmRheSwgQXByaWwgMTMsIDIwMTUgMTI6MzUgUE0NCj4gVG86IFRpcnVtYWxlc3dhciBSZWRkeSAo dGlyZWRkeSkNCj4gQ2M6IHRyYW1AaWV0Zi5vcmcNCj4gU3ViamVjdDogUmU6IFt0cmFtXSBTdGVw aGVuIEZhcnJlbGwncyBEaXNjdXNzIG9uIGRyYWZ0LWlldGYtdHJhbS10dXJuLXRoaXJkLQ0KPiBw YXJ0eS1hdXRoei0xMzogKHdpdGggRElTQ1VTUyBhbmQgQ09NTUVOVCkNCj4gDQo+IEkgbm90aWNl ZCB0aGF0IHRoZSBlbmNyeXB0ZWQgdG9rZW4gaGFzIG9kZCBudW1iZXIgb2YgYnl0ZXMsIGJlY2F1 c2UgdGhlDQo+IG5vbmNlX2xlbmd0aCBpcyBqdXN0IG9uZSBieXRlLiBJJ2Qgc3VnZ2VzdCB0byBt YWtlIGl0IHR3byBieXRlcy4NCg0KWWVzLCBmaXhlZCBpbiBteSBsb2NhbCBjb3B5Lg0KDQpUaGFu a3MgYW5kIFJlZ2FyZHMsDQotVGlydQ0KDQo+IFNhdmluZyBhIGJ5dGUgYnkgbWFraW5nIHRoZSBk YXRhIHNpemUgb2RkIHVzdWFsbHkgZG9lcyBub3Qgd29yayB3ZWxsLg0KPiBJdCBpcyByZWFsbHkg bm90IHNhdmluZyBhbnkgc3BhY2Ugb3IgQ1BVIGN5Y2xlcy4NCj4gDQo+IA0KPiBUaGFua3MNCj4g T2xlZw0KPiANCj4gDQo+IE9uIEZyaSwgQXByIDEwLCAyMDE1IGF0IDg6MDcgUE0sIFRpcnVtYWxl c3dhciBSZWRkeSAodGlyZWRkeSkNCj4gPHRpcmVkZHlAY2lzY28uY29tPiB3cm90ZToNCj4gPj4g LS0tLS1PcmlnaW5hbCBNZXNzYWdlLS0tLS0NCj4gPj4gRnJvbTogU3RlcGhlbiBGYXJyZWxsIFtt YWlsdG86c3RlcGhlbi5mYXJyZWxsQGNzLnRjZC5pZV0NCj4gPj4gU2VudDogU2F0dXJkYXksIEFw cmlsIDExLCAyMDE1IDE6MDggQU0NCj4gPj4gVG86IFRoZSBJRVNHDQo+ID4+IENjOiB0cmFtLWNo YWlyc0BpZXRmLm9yZzsgdHJhbUBpZXRmLm9yZzsNCj4gPj4gZHJhZnQtaWV0Zi10cmFtLXR1cm4t dGhpcmQtcGFydHktIGF1dGh6QGlldGYub3JnOw0KPiA+PiBnb256YWxvLmNhbWFyaWxsb0Blcmlj c3Nvbi5jb207IGRyYWZ0LWlldGYtdHJhbS10dXJuLXRoaXJkLQ0KPiA+PiBwYXJ0eS1hdXRoei5h ZEBpZXRmLm9yZzsgZHJhZnQtaWV0Zi10cmFtLXR1cm4tdGhpcmQtcGFydHktDQo+ID4+IGF1dGh6 LnNoZXBoZXJkQGlldGYub3JnDQo+ID4+IFN1YmplY3Q6IFN0ZXBoZW4gRmFycmVsbCdzIERpc2N1 c3Mgb24NCj4gPj4gZHJhZnQtaWV0Zi10cmFtLXR1cm4tdGhpcmQtcGFydHktYXV0aHotDQo+ID4+ IDEzOiAod2l0aCBESVNDVVNTIGFuZCBDT01NRU5UKQ0KPiA+Pg0KPiA+PiBTdGVwaGVuIEZhcnJl bGwgaGFzIGVudGVyZWQgdGhlIGZvbGxvd2luZyBiYWxsb3QgcG9zaXRpb24gZm9yDQo+ID4+IGRy YWZ0LWlldGYtdHJhbS10dXJuLXRoaXJkLXBhcnR5LWF1dGh6LTEzOiBEaXNjdXNzDQo+ID4+DQo+ ID4+IFdoZW4gcmVzcG9uZGluZywgcGxlYXNlIGtlZXAgdGhlIHN1YmplY3QgbGluZSBpbnRhY3Qg YW5kIHJlcGx5IHRvIGFsbA0KPiA+PiBlbWFpbCBhZGRyZXNzZXMgaW5jbHVkZWQgaW4gdGhlIFRv IGFuZCBDQyBsaW5lcy4gKEZlZWwgZnJlZSB0byBjdXQNCj4gPj4gdGhpcyBpbnRyb2R1Y3Rvcnkg cGFyYWdyYXBoLCBob3dldmVyLikNCj4gPj4NCj4gPj4NCj4gPj4gUGxlYXNlIHJlZmVyIHRvDQo+ ID4+IGh0dHA6Ly93d3cuaWV0Zi5vcmcvaWVzZy9zdGF0ZW1lbnQvZGlzY3Vzcy1jcml0ZXJpYS5o dG1sDQo+ID4+IGZvciBtb3JlIGluZm9ybWF0aW9uIGFib3V0IElFU0cgRElTQ1VTUyBhbmQgQ09N TUVOVCBwb3NpdGlvbnMuDQo+ID4+DQo+ID4+DQo+ID4+IFRoZSBkb2N1bWVudCwgYWxvbmcgd2l0 aCBvdGhlciBiYWxsb3QgcG9zaXRpb25zLCBjYW4gYmUgZm91bmQgaGVyZToNCj4gPj4gaHR0cDov L2RhdGF0cmFja2VyLmlldGYub3JnL2RvYy9kcmFmdC1pZXRmLXRyYW0tdHVybi10aGlyZC1wYXJ0 eS1hdXRoDQo+ID4+IHovDQo+ID4+DQo+ID4+DQo+ID4+DQo+ID4+IC0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLQ0KPiA+ PiAtDQo+ID4+IERJU0NVU1M6DQo+ID4+IC0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLQ0KPiA+PiAtDQo+ID4+DQo+ID4+ DQo+ID4+IEVkaXRlZCBkaXNjdXNzIGJhbGxvdCBhZnRlciBjaGF0cyBhcm91bmQgRGFsbGFzLg0K PiA+Pg0KPiA+PiAoMSkgUGxlYXNlIGZpeCB0aGUgY3J5cHRvIGFzIHBlciBSaWNoYXJkJ3MgZGlz Y3Vzcy4gKEkgdGhpbmsgdGhlIHBsYW4NCj4gPj4gaGVyZSBpcyBmb3IgUmljaCBTYWx6IHRvIGhl bHAgd2l0aCB0aGF0LCB3aGljaCBJJ20gY29uZmlkZW50IHdpbGwNCj4gPj4gd29yayBvdXQgb2su KQ0KPiA+DQo+ID4gWWVzLCBjb21tZW50cyBmcm9tIFJpY2hhcmQgYXJlIGFkZHJlc3NlZC4NCj4g Pg0KPiA+Pg0KPiA+PiAoMikgUGxlYXNlIGNvbnNpZGVyIHdoZXRoZXIgYSBzaWduYXR1cmUgYmFz ZWQgc2NoZW1lIHRoYXQgZG9lcyBub3QNCj4gPj4gcmVxdWlyZSBwcmUtc2hhcmVkIGtleXMgYmV0 d2VlbiB0aGUgVFVSTiBhbmQgKGluIHBhcnRpY3VsYXIpIFdlYlJUQw0KPiA+PiBzZXJ2ZXIgY291 bGQgYmUgdXNlZnVsIHRvIHN1cHBvcnQuIChFaXRoZXIgaW4gdGhpcyBkb2N1bWVudCBvcg0KPiA+ PiBlbHNld2hlcmUuKSBUaGVyZSBzaG91bGQgYmUgdXNlIGNhc2VzIHdoZXJlIHRoYXQgb2ZmZXJz IHN1ZmZpY2llbnQNCj4gPj4gYWNjb3VudGFiaWxpdHkgZm9yIHVzZSBvZiBUVVJOIGFuZCBpdCBv dWdodCBhbGxvdyBzb21lIGRlcGxveW1lbnRzDQo+ID4+IHRoYXQgYXJlIGxlc3MgZWFzeSB3aXRo IHRoaXMga2luZCBvZiBwcmUtc2hhcmVkIGtleXMgYXBwcm9hY2guIFRoZQ0KPiA+PiBESVNDVVNT IGhlcmUgaXMgdG8gY2hlY2sgaWYgdGhlIFdHIHdhbnQgdG8gdGFrZSB0aGF0IGFwcHJvYWNoLCBl aXRoZXINCj4gbm93IG9yIGxhdGVyLg0KPiA+DQo+ID4gUGFzc2l2ZSBhdHRhY2tzIGNvdWxkIG9j Y3VyIGluIFRVUk4gZHVlIHRvIGxhY2sgb2YgaW50ZWdyaXR5IHByb3RlY3Rpb24uIEZvcg0KPiBl eGFtcGxlLCBhIHBhc3NpdmUgYXR0YWNrZXIgY291bGQgbW9uaXRvciBBbGxvY2F0ZSByZXF1ZXN0 L3Jlc3BvbnNlDQo+IGJldHdlZW4gdGhlIGNsaWVudCBhbmQgVFVSTiBzZXJ2ZXIgYW5kIG1ha2Ug YSBSZWZyZXNoIHJlcXVlc3Qgd2l0aCBhDQo+IHJlcXVlc3RlZCBsaWZldGltZSBvZiAwIHRvIGRl bGV0ZSB0aGUgYWxsb2NhdGlvbi4gTWVzc2FnZSBpbnRlZ3JpdHkgb2YgVFVSTg0KPiBtZXNzYWdl cyBlbnN1cmVzIHRoYXQgcGFzc2l2ZSBhdHRhY2tlciBjYW5ub3Qgc3Bvb2Ygc3Vic2VxdWVudCBU VVJODQo+IG1lc3NhZ2VzLg0KPiA+DQo+ID4+DQo+ID4+ICgzKSBJIHRoaW5rIHRoZSBwbGFuIGlz IHRvIHRha2Ugb3V0IHNvbWUgb2YgdGhlIG9wdGlvbnMgdGhhdCBhcmUgbm90DQo+ID4+IG5lZWRl ZCBzbyBhcyBtYWtlIGludGVyb3AgbW9yZSBsaWtlbHkuDQo+ID4+IFBsZWFzZSBkbyBzby4gKEkg dGhpbmsgd2UgZGlzY3Vzc2VkIHRha2luZyBvdXQgdGhlIERLU1BQIHN0dWZmIGF0DQo+ID4+IGxl YXN0LCBidXQgdGhlIG1vcmUgb3B0aW9ucyB3ZSBjYW4gZ2V0IHJpZCBvZiwgdGhlIGJldHRlciku DQo+ID4NCj4gPiBZZXMsIERLU1BQIGlzIHJlbW92ZWQgZnJvbSB0aGUgZHJhZnQuDQo+ID4NCj4g Pj4NCj4gPj4NCj4gPj4gLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tDQo+ID4+IC0NCj4gPj4gQ09NTUVOVDoNCj4gPj4g LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tDQo+ID4+IC0NCj4gPj4NCj4gPj4NCj4gPj4gLSBDT01NRU5UUyBiZWxvdyBh cmUgdW5jaGFuZ2VkIHNpbmNlIGJlZm9yZSBEYWxsYXMuDQo+ID4+IFdlIGNhbiBsb29rIG92ZXIg dGhlbiBhcyB3ZSBnby4NCj4gPj4NCj4gPj4gLSBJIHJlYWxseSB0aGluayB0aGlzIHdvdWxkIGJl bmVmaXQgZnJvbSBzb21lIHdpZGVyIHJldmlldyBhbmQgSQ0KPiA+PiBkb24ndCB0aGluayBpdCdz IHJlYWR5IGFzLWlzLg0KPiA+DQo+ID4gVGhpcyBkcmFmdCBpcyBhbHNvIHJldmlld2VkIGluIE9B dXRoIFdHLg0KPiA+DQo+ID4+DQo+ID4+IC0gSSBhZ3JlZSB3aXRoIFJpY2hhcmQncyBkaXNjdXNz IHBvaW50cy4NCj4gPj4NCj4gPj4gLSBpbnRybzogImltcG9zc2libGUgaW4gd2ViIGFwcGxpY2F0 aW9ucyIgaXNuJ3QgcmVhbGx5IHRydWUgaW4NCj4gPj4gcHJpbmNpcGxlLCBidXQgaW1wb3NzaWJs ZSBpbiBXZWJSVEMgYXMgaXQgdXNlcyBKUyBpcyB0cnVlLg0KPiA+DQo+ID4gTkVXOg0KPiA+ICAg IEhvd2V2ZXIsIGluIHdlYiBhcHBsaWNhdGlvbnMNCj4gPiAgICBsaWtlIFdlYlJUQyBbSS1ELmll dGYtcnRjd2ViLW92ZXJ2aWV3XSB3aGVyZSBKYXZhU2NyaXB0IHVzZXMgdGhlDQo+ID4gICAgYnJv d3NlciBmdW5jdGlvbmFsaXR5IHRvIG1ha2UgcmVhbC10aW1lIGF1ZGlvIGFuZC9vciB2aWRlbyBj YWxscywgV2ViDQo+ID4gICAgY29uZmVyZW5jaW5nLCBhbmQgZGlyZWN0IGRhdGEgdHJhbnNmZXIs IGVuc3VyaW5nIHRoaXMgc2VjcmVjeSBpcw0KPiA+ICAgIHR5cGljYWxseSBub3QgcG9zc2libGUu DQo+ID4NCj4gPj4NCj4gPj4gLSBBc3N1bWluZyB0aGUgQVMgdGhhdCBjYW4gYXV0aG9yaXplIHRo ZSB1c2VyIHNoYXJlcyBhIHNlY3JldCB3aXRoDQo+ID4+IHRoZSBTVFVOIHNlcnZlciBjaG9zZW4g YnkgdGhlIFdlYlJUQyBzZXJ2ZXIgc2VlbXMgdmVyeSBicml0dGxlLiBXaHkNCj4gPj4gd291bGQg dGhhdCBiZSB0cnVlIGluIGdlbmVyYWw/DQo+ID4NCj4gPiBUaGUgQVMgYW5kIFdlYlJUQyBzZXJ2 ZXIgYXJlIGluIHRoZSBzYW1lIGFkbWluaXN0cmF0aXZlIGRvbWFpbiBvZiB0aGUNCj4gYXBwbGlj YXRpb24gcHJvdmlkZXIuIFRoZSB1c2VyIG5ldmVyIHNlbmRzIHRoZSBzZXNzaW9uIGtleSBsZWFy bmVkICBmcm9tIHRoZQ0KPiBBUyB0byB0aGUgU1RVTiBzZXJ2ZXIgaXQgb25seSB1c2VzIHRoZSBz ZXNzaW9uIGtleSB0byBjb21wdXRlICBtZXNzYWdlDQo+IGludGVncml0eSBvZiBTVFVOIHJlcXVl c3QgYW5kIHRvIHZhbGlkYXRlIHRoZSAgbWVzc2FnZSBpbnRlZ3JpdHkgb2YgIHRoZSBTVFVODQo+ IHJlc3BvbnNlLiBUaGUgU1RVTiBzZXJ2ZXIgd2lsbCBvbmx5IGtub3cgdGhlIHNlc3Npb24ga2V5 IGlmIGl0IGNhbiBkZWNyeXB0DQo+IHRoZSB0b2tlbi4NCj4gPg0KPiA+Pg0KPiA+PiAtIDQuMS4x OiBIbW1tLiBIb3cgbWFueSBwZW9wbGUgdXNlIEtleVByb3YgSSB3b25kZXI/DQo+ID4NCj4gPiBB bHJlYWR5IHJlbW92ZWQgREtTUFAuDQo+ID4NCj4gPj4NCj4gPj4gLSA0LjEuMiAtIHdoaWNoICJ0 d28gc2VydmVycyI/IFdlYlJUQyBjYW4gaGF2ZSBtb3JlIHNlcnZlcnMgdGhhbiB0aGF0Lg0KPiA+ DQo+ID4gVGhlIFNUVU4gc2VydmVyIGFuZCB0aGUgQVMuIEFzIGZhciBhcyB0aGUgU1RVTiBzZXJ2 ZXIgaXMgY29uY2VybmVkLCBpdCBvbmx5DQo+IGRlYWxzIHdpdGggdGhlIEFTIG9mIGludGVyZXN0 IGZvciBrZXkgZXN0YWJsaXNobWVudC4gVGhlIEFTIGNvdWxkIGJlIHRoZQ0KPiBhcHBsaWNhdGlv biBzZXJ2ZXIgaXRzZWxmIG9yIGNvdWxkIGJlIGEgS2V5IG1hbmFnZW1lbnQgIGZ1bmN0aW9uIHN5 bmNpbmcgdGhlDQo+IGtleWluZyBtYXRlcmlhbCB0byB0aGUgV2ViUlRDIHNlcnZlcnMuDQo+ID4N Cj4gPiBORVc6DQo+ID4gICAgVGhlIFNUVU4gYW5kIEFTIHNlcnZlcnMgY291bGQgY2hvb3NlIHRv IHVzZSBSRVNUIEFQSSBvdmVyIEhUVFBTIHRvDQo+ID4gICAgZXN0YWJsaXNoIGEgc3ltbWV0cmlj IGtleS4NCj4gPg0KPiA+Pg0KPiA+PiAtIDQuMS4yIC0gbm93IHdlJ3JlIHVzaW5nIFRMUyBtdXR1 YWwgYXV0aD8gQW5kIGhvdyBkb2VzIHRoZSBUTFMNCj4gPj4gY2xpZW50IGtub3cgd2hpY2ggQ0Eg dG8gdXNlIHRoYXQnbGwgd29yayB3aXRoIHRoZSBUTFMgc2VydmVyIGhlcmU/IEkNCj4gPj4gZG9u J3QgdGhpbmsgdGhhdCdsbCBzY2FsZSB3aWxsIGl0Pw0KPiA+DQo+ID4gV2UgcHJlc3VtZSB0aGUg dHdvIHBhcnRpZXMgaW52b2x2ZWQga25vdyB3aGF0IENBIHRvIGNvbnNpZGVyIHdoZW4NCj4gdXNp bmcgdGhlIFJFU1QgQVBJcyDCrSB0aGV5IHdvdWxkIGhhdmUgdG8gZG8gdGhpcyB0byB0cnVzdCBl YWNoIG90aGVyLiBQbGVhc2UNCj4gbm90ZSB0aGF0IHRoZSBBUyBpcyBhbGxvY2F0aW5nIHN5bW1l dHJpYyBrZXlzIG1lYW50IGV4Y2x1c2l2ZWx5IGZvciAgdGhhdA0KPiBTVFVOIFNlcnZlciwgc28g c29tZSBsZXZlbCBvZiBjby1vcmRpbmF0aW9uIGlzIGFscmVhZHkgaW52b2x2ZWQuDQo+ID4NCj4g Pj4NCj4gPj4gLSA0LjEuMyAtIHRoaXMgbG9va3MgbGlrZSB3aGF0IHRoZSBXRy9hdXRob3JzIHJl YWxseSB3YW50LCB3b3VsZCB0aGF0DQo+ID4+IGJlIGEgZmFpciBzdGF0ZW1lbnQ/DQo+ID4NCj4g PiBBcyBwZXIgb3VyIGRpc2N1c3Npb24gd2UgaGF2ZSBjaGFuZ2VkIHRoZSBzcGVjaWZpY2F0aW9u IHRvIHJlY29tbWVuZA0KPiA+IFJFU1QNCj4gPg0KPiA+IE5FVzoNCj4gPg0KPiA+ICAgIE5vdGUg OiBUaGUgbWVjaGFuaXNtIHNwZWNpZmllZCBpbiBTZWN0aW9uIDQuMS4yIGNvbXBhcmVkIHRvIFJF U1QNCj4gPiAgICBsYWNrcyBlbmNyeXB0aW9uIGFuZCBITUFDIGFsZ29yaXRobSBhZ2lsaXR5LiAg SGVuY2UgYSBTVFVOIHNlcnZlciBhbmQNCj4gPiAgICBhdXRob3JpemF0aW9uIHNlcnZlciBpbXBs ZW1lbnRhdGlvbiBTSE9VTEQgc3VwcG9ydCBSRVNUIGV4cGxhaW5lZCBpbg0KPiA+ICAgIFNlY3Rp b24gNC4xLjEuDQo+ID4NCj4gPg0KPiA+Pg0KPiA+PiAtIDk6IEZpZ3VyZSAyIHNob3VsZCBiZSB3 YXkgdXAgYXQgdGhlIHRvcCBvZiB0aGUgZG9jdW1lbnQgYW5kIG5vdA0KPiA+PiBoZXJlDQo+ID4N Cj4gPiBJbiB0aGUgcHJldmlvdXMgdmVyc2lvbnMgaXQgd2FzIGluIHRoZSB0b3Agb2YgdGhlIGRv Y3VtZW50IGJ1dCBtb3ZlZA0KPiBkb3duIGFmdGVyIGNvbW1lbnRzIHJlY2VpdmVkIGZyb20gdGhl IFdHIHRoYXQgV2ViUlRDIGlzIG9ubHkgYW4NCj4gZXhhbXBsZSB1c2FnZSBvZiB0aGlyZCBwYXJ0 eSBhdXRob3JpemF0aW9uLg0KPiA+DQo+ID4+DQo+ID4+IC0gOTogV2h5IDUgc2Vjb25kcyA/DQo+ ID4NCj4gPiBTVFVOIG1lc3NhZ2VzIGNhbiBiZSBzZW50IG92ZXIgVURQLCA1IHNlY29uZHMgaXMg dG8gYWNjb21tb2RhdGUgcGFja2V0DQo+IGxvc3MgYW5kIFJUTyBpbnRlcnZhbC4NCj4gPg0KPiA+ IC1UaXJ1DQo+ID4NCj4gPj4NCj4gPg0KPiA+IF9fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fDQo+ID4gdHJhbSBtYWlsaW5nIGxpc3QNCj4gPiB0cmFtQGlldGYu b3JnDQo+ID4gaHR0cHM6Ly93d3cuaWV0Zi5vcmcvbWFpbG1hbi9saXN0aW5mby90cmFtDQo+IA0K PiBfX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fXw0KPiB0cmFt IG1haWxpbmcgbGlzdA0KPiB0cmFtQGlldGYub3JnDQo+IGh0dHBzOi8vd3d3LmlldGYub3JnL21h aWxtYW4vbGlzdGluZm8vdHJhbQ0K From nobody Mon Apr 13 08:37:28 2015 Return-Path: X-Original-To: tram@ietfa.amsl.com Delivered-To: tram@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id D25C21ACED1; Sat, 11 Apr 2015 04:26:04 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.611 X-Spam-Level: X-Spam-Status: No, score=-2.611 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id c7lJoLGMQvV0; Sat, 11 Apr 2015 04:26:02 -0700 (PDT) Received: from prod-mail-xrelay06.akamai.com (prod-mail-xrelay06.akamai.com [96.6.114.98]) by ietfa.amsl.com (Postfix) with ESMTP id 35AFF1ACED0; Sat, 11 Apr 2015 04:26:02 -0700 (PDT) Received: from prod-mail-xrelay06.akamai.com (localhost.localdomain [127.0.0.1]) by postfix.imss70 (Postfix) with ESMTP id 436251658DD; Sat, 11 Apr 2015 11:26:01 +0000 (GMT) Received: from prod-mail-relay08.akamai.com (prod-mail-relay08.akamai.com [172.27.22.71]) by prod-mail-xrelay06.akamai.com (Postfix) with ESMTP id 37EB21658CF; Sat, 11 Apr 2015 11:26:01 +0000 (GMT) Received: from email.msg.corp.akamai.com (ustx2ex-cas5.msg.corp.akamai.com [172.27.25.34]) by prod-mail-relay08.akamai.com (Postfix) with ESMTP id 3361E980A3; Sat, 11 Apr 2015 11:26:01 +0000 (GMT) Received: from USTX2EX-DAG1MB2.msg.corp.akamai.com (172.27.27.102) by ustx2ex-dag1mb3.msg.corp.akamai.com (172.27.27.103) with Microsoft SMTP Server (TLS) id 15.0.913.22; Sat, 11 Apr 2015 06:25:47 -0500 Received: from USTX2EX-DAG1MB2.msg.corp.akamai.com ([172.27.6.132]) by ustx2ex-dag1mb2.msg.corp.akamai.com ([172.27.6.132]) with mapi id 15.00.0913.011; Sat, 11 Apr 2015 06:25:28 -0500 From: "Salz, Rich" To: "Tirumaleswar Reddy (tireddy)" , "Williams, Brandon" Thread-Topic: [tram] Stephen Farrell's Discuss on draft-ietf-tram-turn-third-party-authz-13: (with DISCUSS and COMMENT) Thread-Index: AQHQc8ipz12ySXkWT06k1SM3uWcWXJ1HYikAgABKddA= Date: Sat, 11 Apr 2015 11:25:28 +0000 Message-ID: <0f0ac93b5a1d4d66b560ba7e4728d3ae@ustx2ex-dag1mb2.msg.corp.akamai.com> References: <20150410193813.20376.40907.idtracker@ietfa.amsl.com> <55282B4E.4000409@akamai.com> <913383AAA69FF945B8F946018B75898A411FFC5F@xmb-rcd-x10.cisco.com> In-Reply-To: <913383AAA69FF945B8F946018B75898A411FFC5F@xmb-rcd-x10.cisco.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [172.19.56.199] Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 Archived-At: X-Mailman-Approved-At: Mon, 13 Apr 2015 08:37:26 -0700 Cc: "rlb@ipv.sx" , "tram-chairs@ietf.org" , "tram@ietf.org" , "Stephen Farrell \(stephen.farrell@cs.tcd.ie\)" Subject: Re: [tram] Stephen Farrell's Discuss on draft-ietf-tram-turn-third-party-authz-13: (with DISCUSS and COMMENT) X-BeenThere: tram@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "Discussing the creation of a Turn Revised And Modernized \(TRAM\) WG, which goal is to consolidate the various initiatives to update TURN and STUN." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 11 Apr 2015 11:26:05 -0000 Great. Brandon, I'm not sure if you still need me, but let's sync up next = week :) I will read the new draft pretty soon. -- =20 Senior Architect, Akamai Technologies IM: richsalz@jabber.at Twitter: RichSalz > -----Original Message----- > From: Tirumaleswar Reddy (tireddy) [mailto:tireddy@cisco.com] > Sent: Friday, April 10, 2015 9:58 PM > To: Williams, Brandon > Cc: Salz, Rich; tram@ietf.org; tram-chairs@ietf.org; rlb@ipv.sx; Stephen > Farrell (stephen.farrell@cs.tcd.ie) > Subject: RE: [tram] Stephen Farrell's Discuss on draft-ietf-tram-turn-thi= rd- > party-authz-13: (with DISCUSS and COMMENT) >=20 > Hi Brandon, >=20 > Richard and we have already have discussed the comments further and > resolved them, attached updated draft with diff. > Main changes >=20 > [1] Removed DKSPP > [2] Removed non-AEAD algorithms; using AEAD modes AES-GCM and aead- > aes-cbc [3] Updated the token format >=20 > -Tiru >=20 > > -----Original Message----- > > From: tram [mailto:tram-bounces@ietf.org] On Behalf Of Brandon > > Williams > > Sent: Saturday, April 11, 2015 1:28 AM > > Cc: Salz, Rich; tram@ietf.org; tram-chairs@ietf.org > > Subject: Re: [tram] Stephen Farrell's Discuss on > > draft-ietf-tram-turn-third- > > party-authz-13: (with DISCUSS and COMMENT) > > > > Hi all, > > > > I will try to touch base with Rich Salz re: Richard's crypto comments > > next week in order to help drive getting his feedback. > > > > --Brandon > > > > On 04/10/2015 03:38 PM, Stephen Farrell wrote: > > > Stephen Farrell has entered the following ballot position for > > > draft-ietf-tram-turn-third-party-authz-13: Discuss > > > > > > When responding, please keep the subject line intact and reply to > > > all email addresses included in the To and CC lines. (Feel free to > > > cut this introductory paragraph, however.) > > > > > > > > > Please refer to > > > http://www.ietf.org/iesg/statement/discuss-criteria.html > > > for more information about IESG DISCUSS and COMMENT positions. > > > > > > > > > The document, along with other ballot positions, can be found here: > > > http://datatracker.ietf.org/doc/draft-ietf-tram-turn-third-party-aut > > > hz > > > / > > > > > > > > > > > > -------------------------------------------------------------------- > > > -- > > > DISCUSS: > > > -------------------------------------------------------------------- > > > -- > > > > > > > > > Edited discuss ballot after chats around Dallas. > > > > > > (1) Please fix the crypto as per Richard's discuss. (I think the > > > plan here is for Rich Salz to help with that, which I'm confident > > > will work out ok.) > > > > > > (2) Please consider whether a signature based scheme that does not > > > require pre-shared keys between the TURN and (in particular) WebRTC > > > server could be useful to support. (Either in this document or > > > elsewhere.) There should be use cases where that offers sufficient > > > accountability for use of TURN and it ought allow some deployments > > > that are less easy with this kind of pre-shared keys approach. The > > > DISCUSS here is to check if the WG want to take that approach, > > > either now or later. > > > > > > (3) I think the plan is to take out some of the options that are not > > > needed so as make interop more likely. > > > Please do so. (I think we discussed taking out the DKSPP stuff at > > > least, but the more options we can get rid of, the better). > > > > > > > > > -------------------------------------------------------------------- > > > -- > > > COMMENT: > > > -------------------------------------------------------------------- > > > -- > > > > > > > > > - COMMENTS below are unchanged since before Dallas. > > > We can look over then as we go. > > > > > > - I really think this would benefit from some wider review and I > > > don't think it's ready as-is. > > > > > > - I agree with Richard's discuss points. > > > > > > - intro: "impossible in web applications" isn't really true in > > > principle, but impossible in WebRTC as it uses JS is true. > > > > > > - Assuming the AS that can authorize the user shares a secret with > > > the STUN server chosen by the WebRTC server seems very brittle. Why > > > would that be true in general? > > > > > > - 4.1.1: Hmmm. How many people use KeyProv I wonder? > > > > > > - 4.1.2 - which "two servers"? WebRTC can have more servers than that= . > > > > > > - 4.1.2 - now we're using TLS mutual auth? And how does the TLS > > > client know which CA to use that'll work with the TLS server here? I > > > don't think that'll scale will it? > > > > > > - 4.1.3 - this looks like what the WG/authors really want, would > > > that be a fair statement? > > > > > > - 9: Figure 2 should be way up at the top of the document and not > > > here > > > > > > - 9: Why 5 seconds? > > > > > > > > > _______________________________________________ > > > tram mailing list > > > tram@ietf.org > > > https://www.ietf.org/mailman/listinfo/tram > > > > > > > -- > > Brandon Williams; Senior Principal Software Engineer Emerging Products > > Engineering; Akamai Technologies Inc. > > > > -- > > Brandon Williams; Senior Principal Software Engineer Emerging Products > > Engineering; Akamai Technologies Inc. > > > > _______________________________________________ > > tram mailing list > > tram@ietf.org > > https://www.ietf.org/mailman/listinfo/tram From nobody Mon Apr 13 11:17:13 2015 Return-Path: X-Original-To: tram@ietfa.amsl.com Delivered-To: tram@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id F37C21B2A2F; Mon, 13 Apr 2015 11:17:11 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2 X-Spam-Level: X-Spam-Status: No, score=-2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, SPF_PASS=-0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ltHWRvBacBdX; Mon, 13 Apr 2015 11:17:10 -0700 (PDT) Received: from mail-oi0-x22c.google.com (mail-oi0-x22c.google.com [IPv6:2607:f8b0:4003:c06::22c]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id E6CAB1B2A32; Mon, 13 Apr 2015 11:17:09 -0700 (PDT) Received: by oign205 with SMTP id n205so11166954oig.2; Mon, 13 Apr 2015 11:17:09 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :cc:content-type; bh=bHKqAXgbrdo/35d3H5HiEFQzyIQlHDoh/7yt2AVXZII=; b=U+HYxZ6Jytuhsf3D36LKM6je2k3hCJGhxclmAz+LW0hE7pQWlPEteaqudaE33+fpZS mNk2U1RVL0gJLBQr+DU0GTO26OeKieet6/iZicPfzcbnCJX0Fo+pk3Avgmhqi17IMIWi PGqVu/SVftn9nKj/VX7sKP2pLuhLalFXUh/lvo0cZNnQ02g37F4rIIoFsrPweJAc16Q9 F/Td/nkipVT2CWNsin3uXN4Ib/zWPr/a0bN4IvRssJrtN68PmgUPL0yRtpjelPZ0CD83 F31Or6PEKQLoFW66iDUQFpoBOiEs/Az6dn2nCtglqIVhNn5pbf1eMLSB1owMWu2CF1Sp zOZA== MIME-Version: 1.0 X-Received: by 10.202.0.75 with SMTP id 72mr8421013oia.131.1428949029403; Mon, 13 Apr 2015 11:17:09 -0700 (PDT) Received: by 10.202.212.212 with HTTP; Mon, 13 Apr 2015 11:17:09 -0700 (PDT) In-Reply-To: <913383AAA69FF945B8F946018B75898A411FFC5F@xmb-rcd-x10.cisco.com> References: <20150410193813.20376.40907.idtracker@ietfa.amsl.com> <55282B4E.4000409@akamai.com> <913383AAA69FF945B8F946018B75898A411FFC5F@xmb-rcd-x10.cisco.com> Date: Mon, 13 Apr 2015 11:17:09 -0700 Message-ID: From: Martin Thomson To: "Tirumaleswar Reddy (tireddy)" Content-Type: text/plain; charset=UTF-8 Archived-At: Cc: "tram-chairs@ietf.org" , "tram@ietf.org" , Brandon Williams , "rlb@ipv.sx" , "Salz, Rich" , "Stephen Farrell \(stephen.farrell@cs.tcd.ie\)" Subject: Re: [tram] Stephen Farrell's Discuss on draft-ietf-tram-turn-third-party-authz-13: (with DISCUSS and COMMENT) X-BeenThere: tram@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "Discussing the creation of a Turn Revised And Modernized \(TRAM\) WG, which goal is to consolidate the various initiatives to update TURN and STUN." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 13 Apr 2015 18:17:12 -0000 On 10 April 2015 at 18:58, Tirumaleswar Reddy (tireddy) wrote: > Richard and we have already have discussed the comments further and resolved them, attached updated draft with diff. > Main changes > > [1] Removed DKSPP > [2] Removed non-AEAD algorithms; using AEAD modes AES-GCM and aead-aes-cbc > [3] Updated the token format I read this just now for the first time in a while. Either I'm a lot stupider this morning than I normally am, or this draft is very confused. There are some serious problems in here. If you intend to use RFC 5116, please clearly specify the inputs, as described in Section 2.1: https://tools.ietf.org/html/rfc5116#section-2.1 Currently, the draft uses N for the name of the server. That conflicts with the label that RFC 5116 uses for the nonce. Also, the draft is very vague about the construction of the nonce. The draft certainly doesn't need to refer to the CBC AEAD draft. It does need to deal with algorithm agility and it currently does not. I apologize for not reviewing this earlier. Here are more comments. Section 1 doesn't really explain what the draft provides. Section 3 claims to be an overview, but it doesn't actually describe what happens. It leaves the token acquisition part out of scope. That's fine, but it doesn't describe how the THIRD-PARTY-AUTHORIZATION attribute might be used, even in the broadest sense. It doesn't explain why it's a server name, or how that name relates to the domain name of the server (i.e., the one that might have been passed to a DNS resolver). Section 4 doesn't permit any additional information to be carried in the token. Therefore, the STUN/TURN server is unable to apply any additional policies that the authorization server might impose, such as limits on the length of the session, the number of ports allocated, or the bandwidth that is allocated. (Or whatever we might later conceive of.) It's not clear what Section 4.1.1 is for. If this is private communications, then it is far too specific. If this is intended to be normative, then it isn't sufficient. What is the base URI? What prevents a random internet denizen from acquiring this symmetric key? Why these two specific parameters? Why does the expiration information in the JWK replicate what HTTP provides? I'd be far happier with hand-waving than with this section in place. Section 5 fails to explicitly state whether the MAC key is used as input to short term or long term credentials. It needs to say short term, I think. Why does this document use 'kid' rather than USERNAME? Isn't the point to get a short term username+password pair from the authorization server? Section 7 seems to imply two layers of authentication: the AEAD and some HMAC. I can't work out what is being authenticated. I'm not sure that anyone else could either. The replay protection in Section 7 is not sufficient. If the intent is to prevent replay, then the server needs to maintain a globally-consistent register of the requests that it has seen so that it can correctly reject replays. However, I think that the intent is to permit replay, so perhaps it is the case that casting this as anti-replay is counter-intuitive. That said, I believe that this is a serious DoS vector and we should be recommending that servers at least account for what has been replayed and limit the number of times a particular token can be used. If the intent of the lifetime in the token is to prevent replay, then this is bad: o The lifetime provided by the TURN server in the Allocate and Refresh responses MUST be less than or equal to the lifetime of the token. Tying the two lifetimes together means that you need to have a long token lifetime in order to support long sessions. But long token lifetimes means long periods of exposure to replay and lots of maintained state. See earlier point about policies being carried in the token. Section 8 seems completely unnecessary. What resource is being conserved here? It's more work to maintain all this state and validate all those tokens than it is to respond in the affirmative to STUN request. (Also, why doesn't STUN usage get a fancy OAuth mapping table like Section 9? Is it somehow different?) In summary, I'm surprised that a document in this state was put before the IESG. From nobody Mon Apr 13 22:26:34 2015 Return-Path: X-Original-To: tram@ietfa.amsl.com Delivered-To: tram@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 28C181B33A4; Mon, 13 Apr 2015 22:26:33 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.75 X-Spam-Level: X-Spam-Status: No, score=-1.75 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_ENVFROM_END_DIGIT=0.25, FREEMAIL_FROM=0.001, SPF_PASS=-0.001] autolearn=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id anm3d1l-YwIo; Mon, 13 Apr 2015 22:26:32 -0700 (PDT) Received: from mail-wg0-x235.google.com (mail-wg0-x235.google.com [IPv6:2a00:1450:400c:c00::235]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id A1AFD1B339E; Mon, 13 Apr 2015 22:26:31 -0700 (PDT) Received: by wgyo15 with SMTP id o15so102908431wgy.2; Mon, 13 Apr 2015 22:26:30 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :cc:content-type; bh=FjHccdJvcl44EaAfLFlOAasgwZw/HXAkSZptJO2z8bE=; b=NClXDfMGLdnNTCLFj0QFC5V9F/37hrOGodQf3CbPX/n9JeRK8v2RAdX2u4JsVtdpbW JIvZy8kwJmL7wt6vTqne1fEKaaIHZQPTGXpOwLKoc/wQy3HGlIIAmh7IQ0F+Ry5yD9xc BnDBhQCDMEUbOKk1I0uGZLm+TdDdAwDfF+SVk4W7TJZvB3+fCkD2CUElL3HPxIwgYG8g GgO6MNbpd91S5zyujtySQzjgb7spUvjX1WQkECnNFC21YA9EwPPacwu6Qx/77YRIReSV eohDdnI4E4F8WFPVD7puXZmsgWjy6jXLe6R5V/jVxFYXdW/6GKERr2yr/MaBkqb2oiUX oi5A== MIME-Version: 1.0 X-Received: by 10.194.157.68 with SMTP id wk4mr33808255wjb.130.1428989190446; Mon, 13 Apr 2015 22:26:30 -0700 (PDT) Received: by 10.194.190.7 with HTTP; Mon, 13 Apr 2015 22:26:30 -0700 (PDT) In-Reply-To: References: <20150410193813.20376.40907.idtracker@ietfa.amsl.com> <55282B4E.4000409@akamai.com> <913383AAA69FF945B8F946018B75898A411FFC5F@xmb-rcd-x10.cisco.com> Date: Mon, 13 Apr 2015 22:26:30 -0700 Message-ID: From: Oleg Moskalenko To: Martin Thomson Content-Type: text/plain; charset=UTF-8 Archived-At: Cc: "tram-chairs@ietf.org" , "tram@ietf.org" , Brandon Williams , "rlb@ipv.sx" , "Salz, Rich" , "Tirumaleswar Reddy \(tireddy\)" , "Stephen Farrell \(stephen.farrell@cs.tcd.ie\)" Subject: Re: [tram] Stephen Farrell's Discuss on draft-ietf-tram-turn-third-party-authz-13: (with DISCUSS and COMMENT) X-BeenThere: tram@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "Discussing the creation of a Turn Revised And Modernized \(TRAM\) WG, which goal is to consolidate the various initiatives to update TURN and STUN." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 14 Apr 2015 05:26:33 -0000 On Mon, Apr 13, 2015 at 11:17 AM, Martin Thomson wrote: > > Section 1 doesn't really explain what the draft provides. I disagree. It is pretty clear on general description what this draft is about. At least, it was obvious to me from the very first reading. > > Section 3 claims to be an overview, but it doesn't actually describe > what happens. It leaves the token acquisition part out of scope. > That's fine, but it doesn't describe how the THIRD-PARTY-AUTHORIZATION > attribute might be used, even in the broadest sense. It describes it in section 6.1. > It doesn't > explain why it's a server name, or how that name relates to the domain > name of the server (i.e., the one that might have been passed to a DNS > resolver). "Server name" is just a logical whatever name. It is not related to anything that you mentioned; that is just a well-known name, set by the STUN server administrator. I believe that this is pretty clear from the text. > > Section 4 doesn't permit any additional information to be carried in > the token. Therefore, the STUN/TURN server is unable to apply any > additional policies that the authorization server might impose, such > as limits on the length of the session, the number of ports allocated, > or the bandwidth that is allocated. (Or whatever we might later > conceive of.) I believe that extra token information is a very very bad idea - it kills the whole interoperability thing in the draft. If we are adding "extra" information to the token, we can as well just kill the draft and tell the STUN server developers "do whatever you want, secure the stuff somehow, we do not care". > > It's not clear what Section 4.1.1 is for. If this is private > communications, then it is far too specific. If this is intended to > be normative, then it isn't sufficient. That is something that I agree with. > What is the base URI? What > prevents a random internet denizen from acquiring this symmetric key? I suppose that's pretty clear that the AS and STUN server mutual communications are protected by TLS certificates that they trust. > Why these two specific parameters? Why does the expiration > information in the JWK replicate what HTTP provides? I'd be far > happier with hand-waving than with this section in place. > > Section 5 fails to explicitly state whether the MAC key is used as > input to short term or long term credentials. It needs to say short > term, I think. No. The whole document is about the LONG-TERM credentials. That's pretty clear for everybody who followed the STUN security, and it is getting mentioned in the text many times (just search for "long-term" on the page). > > Why does this document use 'kid' rather than USERNAME? Isn't the > point to get a short term username+password pair from the > authorization server? > > Section 7 seems to imply two layers of authentication: the AEAD and > some HMAC. I can't work out what is being authenticated. I'm not > sure that anyone else could either. I am afraid that you simply need more time to read that document. Thanks Oleg From nobody Mon Apr 13 22:38:53 2015 Return-Path: X-Original-To: tram@ietfa.amsl.com Delivered-To: tram@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 1EA241B33C2; Mon, 13 Apr 2015 22:38:52 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -5.033 X-Spam-Level: X-Spam-Status: No, score=-5.033 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, HTML_MESSAGE=0.001, HTML_TAG_BALANCE_BODY=1.157, J_CHICKENPOX_34=0.6, RCVD_IN_DNSWL_HI=-5, SPF_PASS=-0.001, T_DKIM_INVALID=0.01, T_HTML_ATTACH=0.01, T_RP_MATCHES_RCVD=-0.01] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id mv-1t4EON4iA; Mon, 13 Apr 2015 22:38:43 -0700 (PDT) Received: from alln-iport-3.cisco.com (alln-iport-3.cisco.com [173.37.142.90]) (using TLSv1 with cipher RC4-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 3F6B31B33C0; Mon, 13 Apr 2015 22:38:42 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=356652; q=dns/txt; s=iport; t=1428989922; x=1430199522; h=from:to:cc:subject:date:message-id:mime-version; bh=f4xD627HB1jFxPeZkj5SRDanQL1JFWdQu0N67w/NQOg=; b=gHaBlg/OtvILui8XCKkbbP8mP0YHOM1eepC3Xwe4+EdDcgiG3RLaRtay FnzFBtKkQFk+HbuH0oPHZzDxIw6sjbLa+qSHB3avs0Yiq+x/WcopL91LZ DEWC3ApvOsqyjtxyH+wuTOuvgw/0dg7fQpXAovtlLyqFKbEa3ySzA4Mi2 A=; X-Files: Diff draft-ietf-tram-turn-third-party-authz-13.txt - draft-ietf-tram-turn-third-party-authz-14.txt.htm, draft-ietf-tram-turn-third-party-authz-14.txt : 200640, 49455 X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: A0CfBABapyxV/4ENJK3JZ4pSAgIBAg X-IronPort-AV: E=Sophos;i="5.11,574,1422921600"; d="htm'217?txt'217?scan'217,208,217";a="140943614" Received: from alln-core-9.cisco.com ([173.36.13.129]) by alln-iport-3.cisco.com with ESMTP; 14 Apr 2015 05:38:41 +0000 Received: from xhc-aln-x12.cisco.com (xhc-aln-x12.cisco.com [173.36.12.86]) by alln-core-9.cisco.com (8.14.5/8.14.5) with ESMTP id t3E5cfIh016395 (version=TLSv1/SSLv3 cipher=AES128-SHA bits=128 verify=FAIL); Tue, 14 Apr 2015 05:38:41 GMT Received: from xmb-rcd-x10.cisco.com ([169.254.15.220]) by xhc-aln-x12.cisco.com ([173.36.12.86]) with mapi id 14.03.0195.001; Tue, 14 Apr 2015 00:38:41 -0500 From: "Tirumaleswar Reddy (tireddy)" To: Oleg Moskalenko Thread-Topic: [tram] Stephen Farrell's Discuss on draft-ietf-tram-turn-third-party-authz-13: (with DISCUSS and COMMENT) Thread-Index: AdB2dU8Rv7R+qaSsQVCcUYaaldxRDA== Date: Tue, 14 Apr 2015 05:38:40 +0000 Message-ID: <913383AAA69FF945B8F946018B75898A4120D5EB@xmb-rcd-x10.cisco.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: yes X-MS-TNEF-Correlator: x-originating-ip: [10.65.68.121] Content-Type: multipart/mixed; boundary="_003_913383AAA69FF945B8F946018B75898A4120D5EBxmbrcdx10ciscoc_" MIME-Version: 1.0 Archived-At: Cc: "tram-chairs@ietf.org" , "tram@ietf.org" , "draft-ietf-tram-turn-third-party-authz@ietf.org" , "gonzalo.camarillo@ericsson.com" , "draft-ietf-tram-turn-third-party-authz.ad@ietf.org" , "draft-ietf-tram-turn-third-party-authz.shepherd@ietf.org" , Stephen Farrell Subject: Re: [tram] Stephen Farrell's Discuss on draft-ietf-tram-turn-third-party-authz-13: (with DISCUSS and COMMENT) X-BeenThere: tram@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "Discussing the creation of a Turn Revised And Modernized \(TRAM\) WG, which goal is to consolidate the various initiatives to update TURN and STUN." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 14 Apr 2015 05:38:52 -0000 --_003_913383AAA69FF945B8F946018B75898A4120D5EBxmbrcdx10ciscoc_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 PiAtLS0tLU9yaWdpbmFsIE1lc3NhZ2UtLS0tLQ0KPiBGcm9tOiBPbGVnIE1vc2thbGVua28gW21h aWx0bzptb20wNDAyNjdAZ21haWwuY29tXQ0KPiBTZW50OiBNb25kYXksIEFwcmlsIDEzLCAyMDE1 IDE6MTcgUE0NCj4gVG86IFRpcnVtYWxlc3dhciBSZWRkeSAodGlyZWRkeSkNCj4gQ2M6IFN0ZXBo ZW4gRmFycmVsbDsgdHJhbS1jaGFpcnNAaWV0Zi5vcmc7IHRyYW1AaWV0Zi5vcmc7IGRyYWZ0LWll dGYtdHJhbS10dXJuLQ0KPiB0aGlyZC1wYXJ0eS1hdXRoekBpZXRmLm9yZzsgZ29uemFsby5jYW1h cmlsbG9AZXJpY3Nzb24uY29tOyBkcmFmdC1pZXRmLXRyYW0tDQo+IHR1cm4tdGhpcmQtcGFydHkt YXV0aHouYWRAaWV0Zi5vcmc7IGRyYWZ0LWlldGYtdHJhbS10dXJuLXRoaXJkLXBhcnR5LQ0KPiBh dXRoei5zaGVwaGVyZEBpZXRmLm9yZw0KPiBTdWJqZWN0OiBSZTogW3RyYW1dIFN0ZXBoZW4gRmFy cmVsbCdzIERpc2N1c3Mgb24gZHJhZnQtaWV0Zi10cmFtLXR1cm4tdGhpcmQtDQo+IHBhcnR5LWF1 dGh6LTEzOiAod2l0aCBESVNDVVNTIGFuZCBDT01NRU5UKQ0KPiANCj4gSSBub3RpY2VkIGFub3Ro ZXIgcHJvYmxlbSBpbiB0aGUgZHJhZnQ6DQo+IA0KPiBJbiB0aGUgdmVyc2lvbiAxMywgdGhlcmUg d2FzIGEgZm9ybWFsIGV4cGxhbmF0aW9uIGhvdyB0aGUga2V5cyBjYW4gYmUNCj4gZGVyaXZlZCBm cm9tIHRoZSBvcmlnaW5hbCBLIHBhcmFtZXRlciAodGhlIGtleWluZyBtYXRlcmlhbCk7IGR1ZSB0 byB0aGF0DQo+IGZvcm1hbCBhbGdvcml0aG0sIGJvdGggQVMgYW5kIFNUVU4gc2VydmVycyBjYW4g cGVyZm9ybSB0aGUgc2FtZSBhY3Rpb25zDQo+IG92ZXIgdGhlIEsgYW5kIG9idGFpbiB0aGUgc2Ft ZSBrZXlzLiBUaGF0IGFsZ29yaXRobSB3YXMgYmFzZWQgdXBvbiBIS0RGLg0KPiBJbiB0aGUgdmVy c2lvbiAxNCwgdGhhdCBhbGdvcml0aG0gaXMgb21pdHRlZCwgYW5kIGluc3RlYWQgYSByZWZlcmVu Y2UgdG8NCj4gc2VjdGlvbiA1LjIuMi4xIG9mIFtJLUQuaWV0Zi1qb3NlLWpzb24td2ViLWFsZ29y aXRobXNdIGlzIGFkZGVkLiBCdXQgdGhhdA0KPiBzZWN0aW9uIGV4cGxhaW5zIG9ubHkgaG93IHRv IGRlcml2ZSBBVVRIIGFuZCBSUyBrZXlzIGZvciB0aGUNCj4gQUVTX0NCQ19ITUFDX1NIQSBhbGdv cml0aG0uIEluIHRoZSBjYXNlIGlmIG90aGVyIGFsZ29yaXRobXMgYXJlIHVzZWQsIHRoZQ0KPiBk ZXJpdmF0aW9uIG9mIGtleXMgZnJvbSB0aGUgSyBpcyBub3QgZGVmaW5lZCwgYW5kIHRoYXQgbWFr ZXMgQVMgYW5kIFNUVU4NCj4gc2VydmVyIGludGVyLW9wZXJhdGlvbiBwcm9ibGVtYXRpYy4gVGhl IHJlcXVpcmVkIFNUVU4gc2VydmVyIGF1dGhlbnRpY2F0ZWQNCj4gZW5jcnlwdGlvbiBhbGdvcml0 aG0gaXMgQTI1NkdDTUtXIGFuZCBpdCBoYXMgbm8gZGVmaW5lZCBrZXkgZGVyaXZhdGlvbg0KPiBw cm9jZWR1cmUgaW4gdGhlIHZlcnNpb24gMTQgb2YgdGhlIGRyYWZ0Lg0KDQpHQ00gb25seSB0YWtl cyBpbnB1dCBrZXkgSyBodHRwczovL3Rvb2xzLmlldGYub3JnL2h0bWwvcmZjNTExNiNzZWN0aW9u LTIuMSwga2V5IGRlcml2YXRpb24gcHJvY2VkdXJlIGlzIG5vdCByZXF1aXJlZCBmb3IgQUVBRC4g DQpVcGRhdGVkIGRyYWZ0IHRvIGJlIG1vcmUgY2xlYXIuDQpORVc6DQogICBJZiBBdXRoZW50aWNh dGVkIEVuY3J5cHRpb24NCiAgIHdpdGggQXNzb2NpYXRlZCBEYXRhIChBRUFEKSBhbGdvcml0aG0g ZGVmaW5lZCBpbiBbUkZDNTExNl0gaXMgdXNlZA0KICAgdGhlbiB0aGVyZSBpcyBubyBuZWVkIHRv IGdlbmVyYXRlIHRoZSBBVVRIIGtleSBhbmQgQVMtUlMga2V5IHdpbGwNCiAgIGhhdmUgdGhlIHNh bWUgdmFsdWUgYXMgdGhlIHN5bW1ldHJpYyBrZXkgKEspLg0KDQo+IA0KPiBJIHByb3Bvc2UgdG8g cmVzdG9yZSB0aGUgSEtERi1iYXNlZCB1bml2ZXJzYWwga2V5IGRlcml2YXRpb24gcHJvY2VkdXJl IGZvcg0KPiBHQ00gYW5kIG90aGVyIGFsZ29yaXRobXMuDQo+IA0KPiBPdmVyYWxsLCBJIHNlZSB0 aGF0IHNlY3Rpb25zIDQuMSBhbmQgNC4xLjEgaGF2ZSBsb3RzIG9mIGxlZ2FjeSBmcm9tIHRoZSBw cmV2aW91cw0KPiBkcmFmdCB2ZXJzaW9uIDEzLCBhbmQgaXQgY3JlYXRlcyBhIHNvbWV3aGF0IG1l c3N5IHdvcmRpbmcuIEknZCBzdWdnZXN0IHRvIHJlLQ0KPiB3cml0ZSB0aG9zZSB0d28gc2VjdGlv bnMgZnJvbSBzY3JhdGNoLCBiZWNhdXNlIGp1c3QgY2hhbmdpbmcvcmVwbGFjaW5nIHNvbWUNCj4g d29yZHMgaW4gdGhlIGhpc3RvcmljYWwgdGV4dCBldmVudHVhbGx5IGNyZWF0ZXMgYSBjcnlwdGlj IHRleHQgdGhhdCBkaWZmZXJlbnQNCj4gcGVvcGxlIG1heSB1bmRlcnN0YW5kIGRpZmZlcmVudGx5 LiBGb3IgZXhhbXBsZSwgdGhlIG5ldyA0LjEuMSB0ZXh0IGNhbiBiZQ0KPiB1bmRlcnN0b29kIHNv IHRoYXQgQVVUSCBhbmQgUlMga2V5cyBtdXN0IGFsd2F5cyBiZSAyNTYgYml0ZXMgYm90aCAoYW5k DQo+IHdlIGtub3cgdGhhdCB0aGlzIGlzIG5vdCByZWFsbHkgdGhlIGNhc2UpLiBJIHRoaW5rIHRo YXQgY2xvc2luZyB0aGUgb2xkIHRleHQgYW5kDQo+IHdyaXRpbmcgdGhlIG5ldyBvbmUgKHdpdGgg Y2xlYXIgdW5kZXJzdGFuZGluZyBpbiBtaW5kIHdoYXQgd2Ugd2FudCkgd291bGQNCj4gZG8gdGhl IHRyaWNrLg0KDQpBZ3JlZWQsIGF0dGFjaGVkIHVwZGF0ZWQgZHJhZnQgd2l0aCBjaGFuZ2VzIHRv IHNlY3Rpb25zIDQuMSBhbmQgNC4xLjENCg0KQ2hlZXJzLA0KLVRpcnUNCg0KPiANCj4gVGhhbmtz DQo+IE9sZWcNCj4gDQo+IE9uIEZyaSwgQXByIDEwLCAyMDE1IGF0IDg6MDcgUE0sIFRpcnVtYWxl c3dhciBSZWRkeSAodGlyZWRkeSkNCj4gPHRpcmVkZHlAY2lzY28uY29tPiB3cm90ZToNCj4gPj4g LS0tLS1PcmlnaW5hbCBNZXNzYWdlLS0tLS0NCj4gPj4gRnJvbTogU3RlcGhlbiBGYXJyZWxsIFtt YWlsdG86c3RlcGhlbi5mYXJyZWxsQGNzLnRjZC5pZV0NCj4gPj4gU2VudDogU2F0dXJkYXksIEFw cmlsIDExLCAyMDE1IDE6MDggQU0NCj4gPj4gVG86IFRoZSBJRVNHDQo+ID4+IENjOiB0cmFtLWNo YWlyc0BpZXRmLm9yZzsgdHJhbUBpZXRmLm9yZzsNCj4gPj4gZHJhZnQtaWV0Zi10cmFtLXR1cm4t dGhpcmQtcGFydHktIGF1dGh6QGlldGYub3JnOw0KPiA+PiBnb256YWxvLmNhbWFyaWxsb0Blcmlj c3Nvbi5jb207IGRyYWZ0LWlldGYtdHJhbS10dXJuLXRoaXJkLQ0KPiA+PiBwYXJ0eS1hdXRoei5h ZEBpZXRmLm9yZzsgZHJhZnQtaWV0Zi10cmFtLXR1cm4tdGhpcmQtcGFydHktDQo+ID4+IGF1dGh6 LnNoZXBoZXJkQGlldGYub3JnDQo+ID4+IFN1YmplY3Q6IFN0ZXBoZW4gRmFycmVsbCdzIERpc2N1 c3Mgb24NCj4gPj4gZHJhZnQtaWV0Zi10cmFtLXR1cm4tdGhpcmQtcGFydHktYXV0aHotDQo+ID4+ IDEzOiAod2l0aCBESVNDVVNTIGFuZCBDT01NRU5UKQ0KPiA+Pg0KPiA+PiBTdGVwaGVuIEZhcnJl bGwgaGFzIGVudGVyZWQgdGhlIGZvbGxvd2luZyBiYWxsb3QgcG9zaXRpb24gZm9yDQo+ID4+IGRy YWZ0LWlldGYtdHJhbS10dXJuLXRoaXJkLXBhcnR5LWF1dGh6LTEzOiBEaXNjdXNzDQo+ID4+DQo+ ID4+IFdoZW4gcmVzcG9uZGluZywgcGxlYXNlIGtlZXAgdGhlIHN1YmplY3QgbGluZSBpbnRhY3Qg YW5kIHJlcGx5IHRvIGFsbA0KPiA+PiBlbWFpbCBhZGRyZXNzZXMgaW5jbHVkZWQgaW4gdGhlIFRv IGFuZCBDQyBsaW5lcy4gKEZlZWwgZnJlZSB0byBjdXQNCj4gPj4gdGhpcyBpbnRyb2R1Y3Rvcnkg cGFyYWdyYXBoLCBob3dldmVyLikNCj4gPj4NCj4gPj4NCj4gPj4gUGxlYXNlIHJlZmVyIHRvDQo+ ID4+IGh0dHA6Ly93d3cuaWV0Zi5vcmcvaWVzZy9zdGF0ZW1lbnQvZGlzY3Vzcy1jcml0ZXJpYS5o dG1sDQo+ID4+IGZvciBtb3JlIGluZm9ybWF0aW9uIGFib3V0IElFU0cgRElTQ1VTUyBhbmQgQ09N TUVOVCBwb3NpdGlvbnMuDQo+ID4+DQo+ID4+DQo+ID4+IFRoZSBkb2N1bWVudCwgYWxvbmcgd2l0 aCBvdGhlciBiYWxsb3QgcG9zaXRpb25zLCBjYW4gYmUgZm91bmQgaGVyZToNCj4gPj4gaHR0cDov L2RhdGF0cmFja2VyLmlldGYub3JnL2RvYy9kcmFmdC1pZXRmLXRyYW0tdHVybi10aGlyZC1wYXJ0 eS1hdXRoDQo+ID4+IHovDQo+ID4+DQo+ID4+DQo+ID4+DQo+ID4+IC0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLQ0KPiA+ PiAtDQo+ID4+IERJU0NVU1M6DQo+ID4+IC0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLQ0KPiA+PiAtDQo+ID4+DQo+ID4+ DQo+ID4+IEVkaXRlZCBkaXNjdXNzIGJhbGxvdCBhZnRlciBjaGF0cyBhcm91bmQgRGFsbGFzLg0K PiA+Pg0KPiA+PiAoMSkgUGxlYXNlIGZpeCB0aGUgY3J5cHRvIGFzIHBlciBSaWNoYXJkJ3MgZGlz Y3Vzcy4gKEkgdGhpbmsgdGhlIHBsYW4NCj4gPj4gaGVyZSBpcyBmb3IgUmljaCBTYWx6IHRvIGhl bHAgd2l0aCB0aGF0LCB3aGljaCBJJ20gY29uZmlkZW50IHdpbGwNCj4gPj4gd29yayBvdXQgb2su KQ0KPiA+DQo+ID4gWWVzLCBjb21tZW50cyBmcm9tIFJpY2hhcmQgYXJlIGFkZHJlc3NlZC4NCj4g Pg0KPiA+Pg0KPiA+PiAoMikgUGxlYXNlIGNvbnNpZGVyIHdoZXRoZXIgYSBzaWduYXR1cmUgYmFz ZWQgc2NoZW1lIHRoYXQgZG9lcyBub3QNCj4gPj4gcmVxdWlyZSBwcmUtc2hhcmVkIGtleXMgYmV0 d2VlbiB0aGUgVFVSTiBhbmQgKGluIHBhcnRpY3VsYXIpIFdlYlJUQw0KPiA+PiBzZXJ2ZXIgY291 bGQgYmUgdXNlZnVsIHRvIHN1cHBvcnQuIChFaXRoZXIgaW4gdGhpcyBkb2N1bWVudCBvcg0KPiA+ PiBlbHNld2hlcmUuKSBUaGVyZSBzaG91bGQgYmUgdXNlIGNhc2VzIHdoZXJlIHRoYXQgb2ZmZXJz IHN1ZmZpY2llbnQNCj4gPj4gYWNjb3VudGFiaWxpdHkgZm9yIHVzZSBvZiBUVVJOIGFuZCBpdCBv dWdodCBhbGxvdyBzb21lIGRlcGxveW1lbnRzDQo+ID4+IHRoYXQgYXJlIGxlc3MgZWFzeSB3aXRo IHRoaXMga2luZCBvZiBwcmUtc2hhcmVkIGtleXMgYXBwcm9hY2guIFRoZQ0KPiA+PiBESVNDVVNT IGhlcmUgaXMgdG8gY2hlY2sgaWYgdGhlIFdHIHdhbnQgdG8gdGFrZSB0aGF0IGFwcHJvYWNoLCBl aXRoZXINCj4gbm93IG9yIGxhdGVyLg0KPiA+DQo+ID4gUGFzc2l2ZSBhdHRhY2tzIGNvdWxkIG9j Y3VyIGluIFRVUk4gZHVlIHRvIGxhY2sgb2YgaW50ZWdyaXR5IHByb3RlY3Rpb24uIEZvcg0KPiBl eGFtcGxlLCBhIHBhc3NpdmUgYXR0YWNrZXIgY291bGQgbW9uaXRvciBBbGxvY2F0ZSByZXF1ZXN0 L3Jlc3BvbnNlDQo+IGJldHdlZW4gdGhlIGNsaWVudCBhbmQgVFVSTiBzZXJ2ZXIgYW5kIG1ha2Ug YSBSZWZyZXNoIHJlcXVlc3Qgd2l0aCBhDQo+IHJlcXVlc3RlZCBsaWZldGltZSBvZiAwIHRvIGRl bGV0ZSB0aGUgYWxsb2NhdGlvbi4gTWVzc2FnZSBpbnRlZ3JpdHkgb2YgVFVSTg0KPiBtZXNzYWdl cyBlbnN1cmVzIHRoYXQgcGFzc2l2ZSBhdHRhY2tlciBjYW5ub3Qgc3Bvb2Ygc3Vic2VxdWVudCBU VVJODQo+IG1lc3NhZ2VzLg0KPiA+DQo+ID4+DQo+ID4+ICgzKSBJIHRoaW5rIHRoZSBwbGFuIGlz IHRvIHRha2Ugb3V0IHNvbWUgb2YgdGhlIG9wdGlvbnMgdGhhdCBhcmUgbm90DQo+ID4+IG5lZWRl ZCBzbyBhcyBtYWtlIGludGVyb3AgbW9yZSBsaWtlbHkuDQo+ID4+IFBsZWFzZSBkbyBzby4gKEkg dGhpbmsgd2UgZGlzY3Vzc2VkIHRha2luZyBvdXQgdGhlIERLU1BQIHN0dWZmIGF0DQo+ID4+IGxl YXN0LCBidXQgdGhlIG1vcmUgb3B0aW9ucyB3ZSBjYW4gZ2V0IHJpZCBvZiwgdGhlIGJldHRlciku DQo+ID4NCj4gPiBZZXMsIERLU1BQIGlzIHJlbW92ZWQgZnJvbSB0aGUgZHJhZnQuDQo+ID4NCj4g Pj4NCj4gPj4NCj4gPj4gLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tDQo+ID4+IC0NCj4gPj4gQ09NTUVOVDoNCj4gPj4g LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tDQo+ID4+IC0NCj4gPj4NCj4gPj4NCj4gPj4gLSBDT01NRU5UUyBiZWxvdyBh cmUgdW5jaGFuZ2VkIHNpbmNlIGJlZm9yZSBEYWxsYXMuDQo+ID4+IFdlIGNhbiBsb29rIG92ZXIg dGhlbiBhcyB3ZSBnby4NCj4gPj4NCj4gPj4gLSBJIHJlYWxseSB0aGluayB0aGlzIHdvdWxkIGJl bmVmaXQgZnJvbSBzb21lIHdpZGVyIHJldmlldyBhbmQgSQ0KPiA+PiBkb24ndCB0aGluayBpdCdz IHJlYWR5IGFzLWlzLg0KPiA+DQo+ID4gVGhpcyBkcmFmdCBpcyBhbHNvIHJldmlld2VkIGluIE9B dXRoIFdHLg0KPiA+DQo+ID4+DQo+ID4+IC0gSSBhZ3JlZSB3aXRoIFJpY2hhcmQncyBkaXNjdXNz IHBvaW50cy4NCj4gPj4NCj4gPj4gLSBpbnRybzogImltcG9zc2libGUgaW4gd2ViIGFwcGxpY2F0 aW9ucyIgaXNuJ3QgcmVhbGx5IHRydWUgaW4NCj4gPj4gcHJpbmNpcGxlLCBidXQgaW1wb3NzaWJs ZSBpbiBXZWJSVEMgYXMgaXQgdXNlcyBKUyBpcyB0cnVlLg0KPiA+DQo+ID4gTkVXOg0KPiA+ICAg IEhvd2V2ZXIsIGluIHdlYiBhcHBsaWNhdGlvbnMNCj4gPiAgICBsaWtlIFdlYlJUQyBbSS1ELmll dGYtcnRjd2ViLW92ZXJ2aWV3XSB3aGVyZSBKYXZhU2NyaXB0IHVzZXMgdGhlDQo+ID4gICAgYnJv d3NlciBmdW5jdGlvbmFsaXR5IHRvIG1ha2UgcmVhbC10aW1lIGF1ZGlvIGFuZC9vciB2aWRlbyBj YWxscywgV2ViDQo+ID4gICAgY29uZmVyZW5jaW5nLCBhbmQgZGlyZWN0IGRhdGEgdHJhbnNmZXIs IGVuc3VyaW5nIHRoaXMgc2VjcmVjeSBpcw0KPiA+ICAgIHR5cGljYWxseSBub3QgcG9zc2libGUu DQo+ID4NCj4gPj4NCj4gPj4gLSBBc3N1bWluZyB0aGUgQVMgdGhhdCBjYW4gYXV0aG9yaXplIHRo ZSB1c2VyIHNoYXJlcyBhIHNlY3JldCB3aXRoDQo+ID4+IHRoZSBTVFVOIHNlcnZlciBjaG9zZW4g YnkgdGhlIFdlYlJUQyBzZXJ2ZXIgc2VlbXMgdmVyeSBicml0dGxlLiBXaHkNCj4gPj4gd291bGQg dGhhdCBiZSB0cnVlIGluIGdlbmVyYWw/DQo+ID4NCj4gPiBUaGUgQVMgYW5kIFdlYlJUQyBzZXJ2 ZXIgYXJlIGluIHRoZSBzYW1lIGFkbWluaXN0cmF0aXZlIGRvbWFpbiBvZiB0aGUNCj4gYXBwbGlj YXRpb24gcHJvdmlkZXIuIFRoZSB1c2VyIG5ldmVyIHNlbmRzIHRoZSBzZXNzaW9uIGtleSBsZWFy bmVkICBmcm9tIHRoZQ0KPiBBUyB0byB0aGUgU1RVTiBzZXJ2ZXIgaXQgb25seSB1c2VzIHRoZSBz ZXNzaW9uIGtleSB0byBjb21wdXRlICBtZXNzYWdlDQo+IGludGVncml0eSBvZiBTVFVOIHJlcXVl c3QgYW5kIHRvIHZhbGlkYXRlIHRoZSAgbWVzc2FnZSBpbnRlZ3JpdHkgb2YgIHRoZSBTVFVODQo+ IHJlc3BvbnNlLiBUaGUgU1RVTiBzZXJ2ZXIgd2lsbCBvbmx5IGtub3cgdGhlIHNlc3Npb24ga2V5 IGlmIGl0IGNhbiBkZWNyeXB0DQo+IHRoZSB0b2tlbi4NCj4gPg0KPiA+Pg0KPiA+PiAtIDQuMS4x OiBIbW1tLiBIb3cgbWFueSBwZW9wbGUgdXNlIEtleVByb3YgSSB3b25kZXI/DQo+ID4NCj4gPiBB bHJlYWR5IHJlbW92ZWQgREtTUFAuDQo+ID4NCj4gPj4NCj4gPj4gLSA0LjEuMiAtIHdoaWNoICJ0 d28gc2VydmVycyI/IFdlYlJUQyBjYW4gaGF2ZSBtb3JlIHNlcnZlcnMgdGhhbiB0aGF0Lg0KPiA+ DQo+ID4gVGhlIFNUVU4gc2VydmVyIGFuZCB0aGUgQVMuIEFzIGZhciBhcyB0aGUgU1RVTiBzZXJ2 ZXIgaXMgY29uY2VybmVkLCBpdCBvbmx5DQo+IGRlYWxzIHdpdGggdGhlIEFTIG9mIGludGVyZXN0 IGZvciBrZXkgZXN0YWJsaXNobWVudC4gVGhlIEFTIGNvdWxkIGJlIHRoZQ0KPiBhcHBsaWNhdGlv biBzZXJ2ZXIgaXRzZWxmIG9yIGNvdWxkIGJlIGEgS2V5IG1hbmFnZW1lbnQgIGZ1bmN0aW9uIHN5 bmNpbmcgdGhlDQo+IGtleWluZyBtYXRlcmlhbCB0byB0aGUgV2ViUlRDIHNlcnZlcnMuDQo+ID4N Cj4gPiBORVc6DQo+ID4gICAgVGhlIFNUVU4gYW5kIEFTIHNlcnZlcnMgY291bGQgY2hvb3NlIHRv IHVzZSBSRVNUIEFQSSBvdmVyIEhUVFBTIHRvDQo+ID4gICAgZXN0YWJsaXNoIGEgc3ltbWV0cmlj IGtleS4NCj4gPg0KPiA+Pg0KPiA+PiAtIDQuMS4yIC0gbm93IHdlJ3JlIHVzaW5nIFRMUyBtdXR1 YWwgYXV0aD8gQW5kIGhvdyBkb2VzIHRoZSBUTFMNCj4gPj4gY2xpZW50IGtub3cgd2hpY2ggQ0Eg dG8gdXNlIHRoYXQnbGwgd29yayB3aXRoIHRoZSBUTFMgc2VydmVyIGhlcmU/IEkNCj4gPj4gZG9u J3QgdGhpbmsgdGhhdCdsbCBzY2FsZSB3aWxsIGl0Pw0KPiA+DQo+ID4gV2UgcHJlc3VtZSB0aGUg dHdvIHBhcnRpZXMgaW52b2x2ZWQga25vdyB3aGF0IENBIHRvIGNvbnNpZGVyIHdoZW4NCj4gdXNp bmcgdGhlIFJFU1QgQVBJcyDCrSB0aGV5IHdvdWxkIGhhdmUgdG8gZG8gdGhpcyB0byB0cnVzdCBl YWNoIG90aGVyLiBQbGVhc2UNCj4gbm90ZSB0aGF0IHRoZSBBUyBpcyBhbGxvY2F0aW5nIHN5bW1l dHJpYyBrZXlzIG1lYW50IGV4Y2x1c2l2ZWx5IGZvciAgdGhhdA0KPiBTVFVOIFNlcnZlciwgc28g c29tZSBsZXZlbCBvZiBjby1vcmRpbmF0aW9uIGlzIGFscmVhZHkgaW52b2x2ZWQuDQo+ID4NCj4g Pj4NCj4gPj4gLSA0LjEuMyAtIHRoaXMgbG9va3MgbGlrZSB3aGF0IHRoZSBXRy9hdXRob3JzIHJl YWxseSB3YW50LCB3b3VsZCB0aGF0DQo+ID4+IGJlIGEgZmFpciBzdGF0ZW1lbnQ/DQo+ID4NCj4g PiBBcyBwZXIgb3VyIGRpc2N1c3Npb24gd2UgaGF2ZSBjaGFuZ2VkIHRoZSBzcGVjaWZpY2F0aW9u IHRvIHJlY29tbWVuZA0KPiA+IFJFU1QNCj4gPg0KPiA+IE5FVzoNCj4gPg0KPiA+ICAgIE5vdGUg OiBUaGUgbWVjaGFuaXNtIHNwZWNpZmllZCBpbiBTZWN0aW9uIDQuMS4yIGNvbXBhcmVkIHRvIFJF U1QNCj4gPiAgICBsYWNrcyBlbmNyeXB0aW9uIGFuZCBITUFDIGFsZ29yaXRobSBhZ2lsaXR5LiAg SGVuY2UgYSBTVFVOIHNlcnZlciBhbmQNCj4gPiAgICBhdXRob3JpemF0aW9uIHNlcnZlciBpbXBs ZW1lbnRhdGlvbiBTSE9VTEQgc3VwcG9ydCBSRVNUIGV4cGxhaW5lZCBpbg0KPiA+ICAgIFNlY3Rp b24gNC4xLjEuDQo+ID4NCj4gPg0KPiA+Pg0KPiA+PiAtIDk6IEZpZ3VyZSAyIHNob3VsZCBiZSB3 YXkgdXAgYXQgdGhlIHRvcCBvZiB0aGUgZG9jdW1lbnQgYW5kIG5vdA0KPiA+PiBoZXJlDQo+ID4N Cj4gPiBJbiB0aGUgcHJldmlvdXMgdmVyc2lvbnMgaXQgd2FzIGluIHRoZSB0b3Agb2YgdGhlIGRv Y3VtZW50IGJ1dCBtb3ZlZA0KPiBkb3duIGFmdGVyIGNvbW1lbnRzIHJlY2VpdmVkIGZyb20gdGhl IFdHIHRoYXQgV2ViUlRDIGlzIG9ubHkgYW4NCj4gZXhhbXBsZSB1c2FnZSBvZiB0aGlyZCBwYXJ0 eSBhdXRob3JpemF0aW9uLg0KPiA+DQo+ID4+DQo+ID4+IC0gOTogV2h5IDUgc2Vjb25kcyA/DQo+ ID4NCj4gPiBTVFVOIG1lc3NhZ2VzIGNhbiBiZSBzZW50IG92ZXIgVURQLCA1IHNlY29uZHMgaXMg dG8gYWNjb21tb2RhdGUgcGFja2V0DQo+IGxvc3MgYW5kIFJUTyBpbnRlcnZhbC4NCj4gPg0KPiA+ IC1UaXJ1DQo+ID4NCj4gPj4NCj4gPg0KPiA+IF9fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fDQo+ID4gdHJhbSBtYWlsaW5nIGxpc3QNCj4gPiB0cmFtQGlldGYu b3JnDQo+ID4gaHR0cHM6Ly93d3cuaWV0Zi5vcmcvbWFpbG1hbi9saXN0aW5mby90cmFtDQo= --_003_913383AAA69FF945B8F946018B75898A4120D5EBxmbrcdx10ciscoc_ Content-Type: text/html; name="Diff draft-ietf-tram-turn-third-party-authz-13.txt - draft-ietf-tram-turn-third-party-authz-14.txt.htm" Content-Description: Diff draft-ietf-tram-turn-third-party-authz-13.txt - draft-ietf-tram-turn-third-party-authz-14.txt.htm Content-Disposition: attachment; filename="Diff draft-ietf-tram-turn-third-party-authz-13.txt - draft-ietf-tram-turn-third-party-authz-14.txt.htm"; size=200640; creation-date="Thu, 09 Apr 2015 03:26:54 GMT"; modification-date="Tue, 14 Apr 2015 05:38:18 GMT" Content-Transfer-Encoding: base64 PCFET0NUWVBFIGh0bWwgUFVCTElDICItLy9XM0MvL0RURCBYSFRNTCAxLjAgVHJhbnNpdGlvbmFs Ly9FTiIgImh0dHA6Ly93d3cudzMub3JnL1RSL3hodG1sMS9EVEQveGh0bWwxLXRyYW5zaXRpb25h bC5kdGQiPg0KPCEtLSBHZW5lcmF0ZWQgYnkgcmZjZGlmZiAxLjQyOiByZmNkaWZmICAtLT4NCjwh LS0gPCFET0NUWVBFIGh0bWwgUFVCTElDICItLy9XM0MvL0RURCBIVE1MIDQuMDEgVHJhbnNpdGlv bmFsIiA+IC0tPg0KPCEtLSBTeXN0ZW06IExpbnV4IHppbmZhbmRlbCAzLjIuMC00LWFtZDY0ICMx IFNNUCBEZWJpYW4gMy4yLjM1LTIgeDg2XzY0IEdOVS9MaW51eCAtLT4NCjwhLS0gVXNpbmcgYXdr OiAvdXNyL2Jpbi9nYXdrOiBHTlUgQXdrIDQuMC4xIC0tPg0KPCEtLSBVc2luZyBkaWZmOiAvdXNy L2Jpbi9kaWZmOiBkaWZmIChHTlUgZGlmZnV0aWxzKSAzLjIgLS0+DQo8IS0tIFVzaW5nIHdkaWZm OiAvdXNyL2Jpbi93ZGlmZjogd2RpZmYgKEdOVSB3ZGlmZikgMS4xLjIgLS0+DQo8aHRtbD48aGVh ZD4gDQogIDxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIgY29udGVudD0idGV4dC9odG1s OyBjaGFyc2V0PVVURi04Ij4gDQogIDxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtU3R5bGUtVHlw ZSIgY29udGVudD0idGV4dC9jc3MiPiANCiAgPHRpdGxlPkRpZmY6IGRyYWZ0LWlldGYtdHJhbS10 dXJuLXRoaXJkLXBhcnR5LWF1dGh6LTEzLnR4dCAtIGRyYWZ0LWlldGYtdHJhbS10dXJuLXRoaXJk LXBhcnR5LWF1dGh6LTE0LnR4dDwvdGl0bGU+IA0KICA8c3R5bGUgdHlwZT0idGV4dC9jc3MiPiAN CiAgICBib2R5ICAgIHsgbWFyZ2luOiAwLjRleDsgbWFyZ2luLXJpZ2h0OiBhdXRvOyB9IA0KICAg IHRyICAgICAgeyB9IA0KICAgIHRkICAgICAgeyB3aGl0ZS1zcGFjZTogcHJlOyBmb250LWZhbWls eTogbW9ub3NwYWNlOyB2ZXJ0aWNhbC1hbGlnbjogdG9wOyBmb250LXNpemU6IDAuODZlbTt9IA0K ICAgIHRoICAgICAgeyBmb250LXNpemU6IDAuODZlbTsgfSANCiAgICAuc21hbGwgIHsgZm9udC1z aXplOiAwLjZlbTsgZm9udC1zdHlsZTogaXRhbGljOyBmb250LWZhbWlseTogVmVyZGFuYSwgSGVs dmV0aWNhLCBzYW5zLXNlcmlmOyB9IA0KICAgIC5sZWZ0ICAgeyBiYWNrZ3JvdW5kLWNvbG9yOiAj RUVFOyB9IA0KICAgIC5yaWdodCAgeyBiYWNrZ3JvdW5kLWNvbG9yOiAjRkZGOyB9IA0KICAgIC5k aWZmICAgeyBiYWNrZ3JvdW5kLWNvbG9yOiAjQ0NGOyB9IA0KICAgIC5sYmxvY2sgeyBiYWNrZ3Jv dW5kLWNvbG9yOiAjQkZCOyB9IA0KICAgIC5yYmxvY2sgeyBiYWNrZ3JvdW5kLWNvbG9yOiAjRkY4 OyB9IA0KICAgIC5pbnNlcnQgeyBiYWNrZ3JvdW5kLWNvbG9yOiAjOEZGOyB9IA0KICAgIC5kZWxl dGUgeyBiYWNrZ3JvdW5kLWNvbG9yOiAjQUNGOyB9IA0KICAgIC52b2lkICAgeyBiYWNrZ3JvdW5k LWNvbG9yOiAjRkZCOyB9IA0KICAgIC5jb250ICAgeyBiYWNrZ3JvdW5kLWNvbG9yOiAjRUVFOyB9 IA0KICAgIC5saW5lYnIgeyBiYWNrZ3JvdW5kLWNvbG9yOiAjQUFBOyB9IA0KICAgIC5saW5lbm8g eyBjb2xvcjogcmVkOyBiYWNrZ3JvdW5kLWNvbG9yOiAjRkZGOyBmb250LXNpemU6IDAuN2VtOyB0 ZXh0LWFsaWduOiByaWdodDsgcGFkZGluZzogMCAycHg7IH0gDQogICAgLmVsaXBzaXN7IGJhY2tn cm91bmQtY29sb3I6ICNBQUE7IH0gDQogICAgLmxlZnQgLmNvbnQgeyBiYWNrZ3JvdW5kLWNvbG9y OiAjREREOyB9IA0KICAgIC5yaWdodCAuY29udCB7IGJhY2tncm91bmQtY29sb3I6ICNFRUU7IH0g DQogICAgLmxibG9jayAuY29udCB7IGJhY2tncm91bmQtY29sb3I6ICM5RDk7IH0gDQogICAgLnJi bG9jayAuY29udCB7IGJhY2tncm91bmQtY29sb3I6ICNERDY7IH0gDQogICAgLmluc2VydCAuY29u dCB7IGJhY2tncm91bmQtY29sb3I6ICMwREQ7IH0gDQogICAgLmRlbGV0ZSAuY29udCB7IGJhY2tn cm91bmQtY29sb3I6ICM4QUQ7IH0gDQogICAgLnN0YXRzLCAuc3RhdHMgdGQsIC5zdGF0cyB0aCB7 IGJhY2tncm91bmQtY29sb3I6ICNFRUU7IHBhZGRpbmc6IDJweCAwOyB9IA0KICA8L3N0eWxlPiAN CjwvaGVhZD4gDQo8Ym9keT4gDQogIDx0YWJsZSBib3JkZXI9IjAiIGNlbGxwYWRkaW5nPSIwIiBj ZWxsc3BhY2luZz0iMCI+IA0KICA8dGJvZHk+PHRyIGJnY29sb3I9Im9yYW5nZSI+PHRoPjwvdGg+ PHRoPjxhIGhyZWY9Imh0dHA6Ly90b29scy5pZXRmLm9yZy9yZmNkaWZmP3VybDI9ZHJhZnQtaWV0 Zi10cmFtLXR1cm4tdGhpcmQtcGFydHktYXV0aHotMTMudHh0IiBzdHlsZT0iY29sb3I6IzAwODsg dGV4dC1kZWNvcmF0aW9uOm5vbmU7Ij4mbHQ7PC9hPiZuYnNwOzxhIGhyZWY9Imh0dHBzOi8vdG9v bHMuaWV0Zi5vcmcvaHRtbC9kcmFmdC1pZXRmLXRyYW0tdHVybi10aGlyZC1wYXJ0eS1hdXRoei0x My50eHQiIHN0eWxlPSJjb2xvcjojMDA4Ij5kcmFmdC1pZXRmLXRyYW0tdHVybi10aGlyZC1wYXJ0 eS1hdXRoei0xMy50eHQ8L2E+Jm5ic3A7PC90aD48dGg+IDwvdGg+PHRoPiZuYnNwOzxhIGhyZWY9 Imh0dHBzOi8vdG9vbHMuaWV0Zi5vcmcvaHRtbC9kcmFmdC1pZXRmLXRyYW0tdHVybi10aGlyZC1w YXJ0eS1hdXRoei0xNC50eHQiIHN0eWxlPSJjb2xvcjojMDA4Ij5kcmFmdC1pZXRmLXRyYW0tdHVy bi10aGlyZC1wYXJ0eS1hdXRoei0xNC50eHQ8L2E+Jm5ic3A7PGEgaHJlZj0iaHR0cDovL3Rvb2xz LmlldGYub3JnL3JmY2RpZmY/dXJsMT1kcmFmdC1pZXRmLXRyYW0tdHVybi10aGlyZC1wYXJ0eS1h dXRoei0xNC50eHQiIHN0eWxlPSJjb2xvcjojMDA4OyB0ZXh0LWRlY29yYXRpb246bm9uZTsiPiZn dDs8L2E+PC90aD48dGg+PC90aD48L3RyPiANCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIg dmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij48L3RkPjx0ZD4gPC90ZD48dGQgY2xh c3M9InJpZ2h0Ij48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3Ry Pg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xh c3M9ImxlZnQiPlRSQU0gICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICBULiBSZWRkeTwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQi PlRSQU0gICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICBULiBSZWRkeTwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3Rk PjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0 ZCBjbGFzcz0ibGVmdCI+SW50ZXJuZXQtRHJhZnQgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgIFAuIFBhdGlsPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJy aWdodCI+SW50ZXJuZXQtRHJhZnQgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgIFAuIFBhdGlsPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3Ai PjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwv dGQ+PHRkIGNsYXNzPSJsZWZ0Ij5JbnRlbmRlZCBzdGF0dXM6IFN0YW5kYXJkcyBUcmFjayAgICAg ICAgICAgICAgICAgICAgICAgICBSLiBSYXZpbmRyYW5hdGg8L3RkPjx0ZD4gPC90ZD48dGQgY2xh c3M9InJpZ2h0Ij5JbnRlbmRlZCBzdGF0dXM6IFN0YW5kYXJkcyBUcmFjayAgICAgICAgICAgICAg ICAgICAgICAgICBSLiBSYXZpbmRyYW5hdGg8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249 InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZD48YSBuYW1lPSJkaWZmMDAwMSI+PC9hPjwv dGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+ PHRkIGNsYXNzPSJsYmxvY2siPkV4cGlyZXM6IDxzcGFuIGNsYXNzPSJkZWxldGUiPkF1Z3VzdCAy OSwgMjAxNSA8L3NwYW4+ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg Q2lzY288L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+RXhwaXJlczogPHNwYW4gY2xh c3M9Imluc2VydCI+T2N0b2JlciAxNSwgMjAxNTwvc3Bhbj4gICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICBDaXNjbzwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0i dG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9w Ij48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgSi4gVWJlcnRpPC90ZD48dGQ+IDwvdGQ+PHRk IGNsYXNzPSJyaWdodCI+ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgSi4gVWJlcnRpPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFs aWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWdu PSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICBHb29nbGU8L3RkPjx0ZD4gPC90 ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICBHb29nbGU8L3RkPjx0ZCBjbGFzcz0ibGluZW5v IiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZD48YSBuYW1lPSJkaWZmMDAw MiI+PC9hPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0 b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPiAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICA8c3BhbiBjbGFzcz0iZGVsZXRlIj5GZWJydWFyeSAy NTwvc3Bhbj4sIDIwMTU8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+ICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIDxzcGFuIGNsYXNz PSJpbnNlcnQiPiAgIEFwcmlsIDEzPC9zcGFuPiwgMjAxNTwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8i IHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZh bGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNz PSJyaWdodCI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4N CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNz PSJsZWZ0Ij4gIFNlc3Npb24gVHJhdmVyc2FsIFV0aWxpdGllcyBmb3IgTkFUIChTVFVOKSBFeHRl bnNpb24gZm9yIFRoaXJkIFBhcnR5PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICBT ZXNzaW9uIFRyYXZlcnNhbCBVdGlsaXRpZXMgZm9yIE5BVCAoU1RVTikgRXh0ZW5zaW9uIGZvciBU aGlyZCBQYXJ0eTwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+ DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFz cz0ibGVmdCI+ICAgICAgICAgICAgICAgICAgICAgICAgICAgICBBdXRob3JpemF0aW9uPC90ZD48 dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgICAgICAgICAgICAgICAgICAgICAgICAgICBB dXRob3JpemF0aW9uPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90 cj4NCiAgICAgIDx0cj48dGQ+PGEgbmFtZT0iZGlmZjAwMDMiPjwvYT48L3RkPjwvdHI+DQogICAg ICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJs b2NrIj4gICAgICAgICAgICAgICBkcmFmdC1pZXRmLXRyYW0tdHVybi10aGlyZC1wYXJ0eS1hdXRo ei0xPHNwYW4gY2xhc3M9ImRlbGV0ZSI+Mzwvc3Bhbj48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9 InJibG9jayI+ICAgICAgICAgICAgICAgZHJhZnQtaWV0Zi10cmFtLXR1cm4tdGhpcmQtcGFydHkt YXV0aHotMTxzcGFuIGNsYXNzPSJpbnNlcnQiPjQ8L3NwYW4+PC90ZD48dGQgY2xhc3M9ImxpbmVu byIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIg dmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij48L3RkPjx0ZD4gPC90ZD48dGQgY2xh c3M9InJpZ2h0Ij48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3Ry Pg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xh c3M9ImxlZnQiPkFic3RyYWN0PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+QWJzdHJh Y3Q8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAg PHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQi PjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8i IHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZh bGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgVGhpcyBkb2N1bWVudCBwcm9wb3Nl cyB0aGUgdXNlIG9mIE9BdXRoIDIuMCB0byBvYnRhaW4gYW5kIHZhbGlkYXRlPC90ZD48dGQ+IDwv dGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgVGhpcyBkb2N1bWVudCBwcm9wb3NlcyB0aGUgdXNlIG9m IE9BdXRoIDIuMCB0byBvYnRhaW4gYW5kIHZhbGlkYXRlPC90ZD48dGQgY2xhc3M9ImxpbmVubyIg dmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFs aWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBlcGhlbWVyYWwgdG9rZW5zIHRoYXQg Y2FuIGJlIHVzZWQgZm9yIFNlc3Npb24gVHJhdmVyc2FsIFV0aWxpdGllcyBmb3I8L3RkPjx0ZD4g PC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBlcGhlbWVyYWwgdG9rZW5zIHRoYXQgY2FuIGJlIHVz ZWQgZm9yIFNlc3Npb24gVHJhdmVyc2FsIFV0aWxpdGllcyBmb3I8L3RkPjx0ZCBjbGFzcz0ibGlu ZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5v IiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIE5BVCAoU1RVTikgYXV0aGVu dGljYXRpb24uICBUaGUgdXNhZ2Ugb2YgZXBoZW1lcmFsIHRva2VucyBlbnN1cmVzPC90ZD48dGQ+ IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgTkFUIChTVFVOKSBhdXRoZW50aWNhdGlvbi4gIFRo ZSB1c2FnZSBvZiBlcGhlbWVyYWwgdG9rZW5zIGVuc3VyZXM8L3RkPjx0ZCBjbGFzcz0ibGluZW5v IiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2 YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIHRoYXQgYWNjZXNzIHRvIGEgU1RV TiBzZXJ2ZXIgY2FuIGJlIGNvbnRyb2xsZWQgZXZlbiBpZiB0aGUgdG9rZW5zIGFyZTwvdGQ+PHRk PiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIHRoYXQgYWNjZXNzIHRvIGEgU1RVTiBzZXJ2ZXIg Y2FuIGJlIGNvbnRyb2xsZWQgZXZlbiBpZiB0aGUgdG9rZW5zIGFyZTwvdGQ+PHRkIGNsYXNzPSJs aW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5l bm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgY29tcHJvbWlzZWQuPC90 ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgY29tcHJvbWlzZWQuPC90ZD48dGQgY2xh c3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9 ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij48L3RkPjx0ZD4gPC90 ZD48dGQgY2xhc3M9InJpZ2h0Ij48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+ PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90 ZD48dGQgY2xhc3M9ImxlZnQiPlN0YXR1cyBvZiBUaGlzIE1lbW88L3RkPjx0ZD4gPC90ZD48dGQg Y2xhc3M9InJpZ2h0Ij5TdGF0dXMgb2YgVGhpcyBNZW1vPC90ZD48dGQgY2xhc3M9ImxpbmVubyIg dmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90 ZD48dGQgY2xhc3M9ImxlZnQiPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPjwvdGQ+ PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4NCiAgICAgIDx0ciBiZ2NvbG9yPSJncmF5Ij48 dGQ+PC90ZD48dGg+PGEgbmFtZT0icGFydC1sMiI+PHNtYWxsPnNraXBwaW5nIHRvIGNoYW5nZSBh dDwvc21hbGw+PGVtPiBwYWdlIDEsIGxpbmUgMzg8L2VtPjwvYT48L3RoPjx0aD4gPC90aD48dGg+ PGEgbmFtZT0icGFydC1yMiI+PHNtYWxsPnNraXBwaW5nIHRvIGNoYW5nZSBhdDwvc21hbGw+PGVt PiBwYWdlIDEsIGxpbmUgMzg8L2VtPjwvYT48L3RoPjx0ZD48L3RkPjwvdHI+DQogICAgICA8dHI+ PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAg SW50ZXJuZXQtRHJhZnRzIGFyZSB3b3JraW5nIGRvY3VtZW50cyBvZiB0aGUgSW50ZXJuZXQgRW5n aW5lZXJpbmc8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBJbnRlcm5ldC1EcmFm dHMgYXJlIHdvcmtpbmcgZG9jdW1lbnRzIG9mIHRoZSBJbnRlcm5ldCBFbmdpbmVlcmluZzwvdGQ+ PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRk IGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgVGFz ayBGb3JjZSAoSUVURikuICBOb3RlIHRoYXQgb3RoZXIgZ3JvdXBzIG1heSBhbHNvIGRpc3RyaWJ1 dGU8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBUYXNrIEZvcmNlIChJRVRGKS4g IE5vdGUgdGhhdCBvdGhlciBncm91cHMgbWF5IGFsc28gZGlzdHJpYnV0ZTwvdGQ+PHRkIGNsYXNz PSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJs aW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgd29ya2luZyBkb2N1 bWVudHMgYXMgSW50ZXJuZXQtRHJhZnRzLiAgVGhlIGxpc3Qgb2YgY3VycmVudCBJbnRlcm5ldC08 L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICB3b3JraW5nIGRvY3VtZW50cyBhcyBJ bnRlcm5ldC1EcmFmdHMuICBUaGUgbGlzdCBvZiBjdXJyZW50IEludGVybmV0LTwvdGQ+PHRkIGNs YXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNz PSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgRHJhZnRzIGlz IGF0IGh0dHA6Ly9kYXRhdHJhY2tlci5pZXRmLm9yZy9kcmFmdHMvY3VycmVudC8uPC90ZD48dGQ+ IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgRHJhZnRzIGlzIGF0IGh0dHA6Ly9kYXRhdHJhY2tl ci5pZXRmLm9yZy9kcmFmdHMvY3VycmVudC8uPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWdu PSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0 b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0 Ij48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAg PHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQi PiAgIEludGVybmV0LURyYWZ0cyBhcmUgZHJhZnQgZG9jdW1lbnRzIHZhbGlkIGZvciBhIG1heGlt dW0gb2Ygc2l4IG1vbnRoczwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIEludGVy bmV0LURyYWZ0cyBhcmUgZHJhZnQgZG9jdW1lbnRzIHZhbGlkIGZvciBhIG1heGltdW0gb2Ygc2l4 IG1vbnRoczwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQog ICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0i bGVmdCI+ICAgYW5kIG1heSBiZSB1cGRhdGVkLCByZXBsYWNlZCwgb3Igb2Jzb2xldGVkIGJ5IG90 aGVyIGRvY3VtZW50cyBhdCBhbnk8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBh bmQgbWF5IGJlIHVwZGF0ZWQsIHJlcGxhY2VkLCBvciBvYnNvbGV0ZWQgYnkgb3RoZXIgZG9jdW1l bnRzIGF0IGFueTwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+ DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFz cz0ibGVmdCI+ICAgdGltZS4gIEl0IGlzIGluYXBwcm9wcmlhdGUgdG8gdXNlIEludGVybmV0LURy YWZ0cyBhcyByZWZlcmVuY2U8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICB0aW1l LiAgSXQgaXMgaW5hcHByb3ByaWF0ZSB0byB1c2UgSW50ZXJuZXQtRHJhZnRzIGFzIHJlZmVyZW5j ZTwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8 dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ ICAgbWF0ZXJpYWwgb3IgdG8gY2l0ZSB0aGVtIG90aGVyIHRoYW4gYXMgIndvcmsgaW4gcHJvZ3Jl c3MuIjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIG1hdGVyaWFsIG9yIHRvIGNp dGUgdGhlbSBvdGhlciB0aGFuIGFzICJ3b3JrIGluIHByb2dyZXNzLiI8L3RkPjx0ZCBjbGFzcz0i bGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGlu ZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPjwvdGQ+PHRkPiA8L3RkPjx0 ZCBjbGFzcz0icmlnaHQiPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3Rk PjwvdHI+DQogICAgICA8dHI+PHRkPjxhIG5hbWU9ImRpZmYwMDA0Ij48L2E+PC90ZD48L3RyPg0K ICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9 ImxibG9jayI+ICAgVGhpcyBJbnRlcm5ldC1EcmFmdCB3aWxsIGV4cGlyZSBvbiA8c3BhbiBjbGFz cz0iZGVsZXRlIj5BdWd1c3QgMjk8L3NwYW4+LCAyMDE1LjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFz cz0icmJsb2NrIj4gICBUaGlzIEludGVybmV0LURyYWZ0IHdpbGwgZXhwaXJlIG9uIDxzcGFuIGNs YXNzPSJpbnNlcnQiPk9jdG9iZXIgMTU8L3NwYW4+LCAyMDE1LjwvdGQ+PHRkIGNsYXNzPSJsaW5l bm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8i IHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNs YXNzPSJyaWdodCI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90 cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNs YXNzPSJsZWZ0Ij5Db3B5cmlnaHQgTm90aWNlPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdo dCI+Q29weXJpZ2h0IE5vdGljZTwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48 L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3Rk Pjx0ZCBjbGFzcz0ibGVmdCI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+PC90ZD48 dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQg Y2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBDb3B5 cmlnaHQgKGMpIDIwMTUgSUVURiBUcnVzdCBhbmQgdGhlIHBlcnNvbnMgaWRlbnRpZmllZCBhcyB0 aGU8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBDb3B5cmlnaHQgKGMpIDIwMTUg SUVURiBUcnVzdCBhbmQgdGhlIHBlcnNvbnMgaWRlbnRpZmllZCBhcyB0aGU8L3RkPjx0ZCBjbGFz cz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0i bGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIGRvY3VtZW50IGF1 dGhvcnMuICBBbGwgcmlnaHRzIHJlc2VydmVkLjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmln aHQiPiAgIGRvY3VtZW50IGF1dGhvcnMuICBBbGwgcmlnaHRzIHJlc2VydmVkLjwvdGQ+PHRkIGNs YXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNz PSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+PC90ZD48dGQ+IDwv dGQ+PHRkIGNsYXNzPSJyaWdodCI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3Ai PjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwv dGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBUaGlzIGRvY3VtZW50IGlzIHN1YmplY3QgdG8gQkNQIDc4 IGFuZCB0aGUgSUVURiBUcnVzdCdzIExlZ2FsPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdo dCI+ICAgVGhpcyBkb2N1bWVudCBpcyBzdWJqZWN0IHRvIEJDUCA3OCBhbmQgdGhlIElFVEYgVHJ1 c3QncyBMZWdhbDwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+ DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFz cz0ibGVmdCI+ICAgUHJvdmlzaW9ucyBSZWxhdGluZyB0byBJRVRGIERvY3VtZW50czwvdGQ+PHRk PiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIFByb3Zpc2lvbnMgUmVsYXRpbmcgdG8gSUVURiBE b2N1bWVudHM8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0K ICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9 ImxlZnQiPiAgIChodHRwOi8vdHJ1c3RlZS5pZXRmLm9yZy9saWNlbnNlLWluZm8pIGluIGVmZmVj dCBvbiB0aGUgZGF0ZSBvZjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIChodHRw Oi8vdHJ1c3RlZS5pZXRmLm9yZy9saWNlbnNlLWluZm8pIGluIGVmZmVjdCBvbiB0aGUgZGF0ZSBv ZjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8 dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ ICAgcHVibGljYXRpb24gb2YgdGhpcyBkb2N1bWVudC4gIFBsZWFzZSByZXZpZXcgdGhlc2UgZG9j dW1lbnRzPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgcHVibGljYXRpb24gb2Yg dGhpcyBkb2N1bWVudC4gIFBsZWFzZSByZXZpZXcgdGhlc2UgZG9jdW1lbnRzPC90ZD48dGQgY2xh c3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9 ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0i cmlnaHQiPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4NCiAgICAgIDx0ciBiZ2Nv bG9yPSJncmF5Ij48dGQ+PC90ZD48dGg+PGEgbmFtZT0icGFydC1sMyI+PHNtYWxsPnNraXBwaW5n IHRvIGNoYW5nZSBhdDwvc21hbGw+PGVtPiBwYWdlIDIsIGxpbmUgMTY8L2VtPjwvYT48L3RoPjx0 aD4gPC90aD48dGg+PGEgbmFtZT0icGFydC1yMyI+PHNtYWxsPnNraXBwaW5nIHRvIGNoYW5nZSBh dDwvc21hbGw+PGVtPiBwYWdlIDIsIGxpbmUgMTY8L2VtPjwvYT48L3RoPjx0ZD48L3RkPjwvdHI+ DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFz cz0ibGVmdCI+ICAgdGhlIFRydXN0IExlZ2FsIFByb3Zpc2lvbnMgYW5kIGFyZSBwcm92aWRlZCB3 aXRob3V0IHdhcnJhbnR5IGFzPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgdGhl IFRydXN0IExlZ2FsIFByb3Zpc2lvbnMgYW5kIGFyZSBwcm92aWRlZCB3aXRob3V0IHdhcnJhbnR5 IGFzPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAg IDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0 Ij4gICBkZXNjcmliZWQgaW4gdGhlIFNpbXBsaWZpZWQgQlNEIExpY2Vuc2UuPC90ZD48dGQ+IDwv dGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgZGVzY3JpYmVkIGluIHRoZSBTaW1wbGlmaWVkIEJTRCBM aWNlbnNlLjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQog ICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0i bGVmdCI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+PC90ZD48dGQgY2xhc3M9Imxp bmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVu byIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij5UYWJsZSBvZiBDb250ZW50czwv dGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPlRhYmxlIG9mIENvbnRlbnRzPC90ZD48dGQg Y2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xh c3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij48L3RkPjx0ZD4g PC90ZD48dGQgY2xhc3M9InJpZ2h0Ij48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRv cCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+ PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIDEuICBJbnRyb2R1Y3Rpb24gIC4gLiAuIC4gLiAuIC4g LiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuICAgMjwvdGQ+PHRkPiA8L3RkPjx0ZCBj bGFzcz0icmlnaHQiPiAgIDEuICBJbnRyb2R1Y3Rpb24gIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAu IC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuICAgMjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGln bj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0i dG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgMi4gIFRlcm1pbm9sb2d5IC4gLiAuIC4gLiAu IC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gICAzPC90ZD48dGQ+IDwvdGQ+ PHRkIGNsYXNzPSJyaWdodCI+ICAgMi4gIFRlcm1pbm9sb2d5IC4gLiAuIC4gLiAuIC4gLiAuIC4g LiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gICAzPC90ZD48dGQgY2xhc3M9ImxpbmVubyIg dmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFs aWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICAzLiAgU29sdXRpb24gT3ZlcnZpZXcg LiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAgIDM8L3RkPjx0ZD4g PC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICAzLiAgU29sdXRpb24gT3ZlcnZpZXcgLiAuIC4gLiAu IC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAgIDM8L3RkPjx0ZCBjbGFzcz0ibGlu ZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5v IiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIDQuICBPYnRhaW5pbmcgYSBU b2tlbiBVc2luZyBPQXV0aCAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuICAgNDwvdGQ+ PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIDQuICBPYnRhaW5pbmcgYSBUb2tlbiBVc2lu ZyBPQXV0aCAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuICAgNDwvdGQ+PHRkIGNsYXNz PSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJs aW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgICA0LjEuICBLZXkg RXN0YWJsaXNobWVudCAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gICA0 PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgICA0LjEuICBLZXkgRXN0YWJsaXNo bWVudCAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gICA0PC90ZD48dGQg Y2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQ+PGEg bmFtZT0iZGlmZjAwMDUiPjwvYT48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5l bm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj4gICAgICAgNC4xLjEuICA8 c3BhbiBjbGFzcz0iZGVsZXRlIj5EU0tQUCAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAu IC4gLiAuIC4gLiAuIC4gLiAgIDU8L3NwYW4+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxv Y2siPiAgICAgICA0LjEuMS4gIEhUVFAgaW50ZXJhY3Rpb25zIC4gLiAuIC4gLiAuIC4gLiAuIC4g LiAuIC4gLiAuIC4gLiAuICAgNTwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48 L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3Rk Pjx0ZCBjbGFzcz0ibGJsb2NrIj48c3BhbiBjbGFzcz0iZGVsZXRlIj4gICAgICAgNC4xLjIuPC9z cGFuPiAgSFRUUCBpbnRlcmFjdGlvbnMgLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAu IC4gICA1PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPiAgICAgICA8c3BhbiBjbGFz cz0iaW5zZXJ0Ij40LjEuMi48L3NwYW4+ICBNYW51YWwgcHJvdmlzaW9uaW5nIC4gLiAuIC4gLiAu IC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAgIDxzcGFuIGNsYXNzPSJpbnNlcnQiPjc8L3NwYW4+PC90 ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48 dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPiAg ICAgICA8c3BhbiBjbGFzcz0iZGVsZXRlIj40LjEuMy48L3NwYW4+ICBNYW51YWwgcHJvdmlzaW9u aW5nIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAgIDxzcGFuIGNsYXNzPSJkZWxl dGUiPjY8L3NwYW4+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPjwvdGQ+PHRkIGNs YXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNz PSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgNS4gIEZvcm1p bmcgYSBSZXF1ZXN0IC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4g ICA3PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgNS4gIEZvcm1pbmcgYSBSZXF1 ZXN0IC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gICA3PC90ZD48 dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQg Y2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICA2LiAg U1RVTiBBdHRyaWJ1dGVzIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAu IC4gLiAgIDc8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICA2LiAgU1RVTiBBdHRy aWJ1dGVzIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAgIDc8 L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRy Pjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAg ICAgNi4xLiAgVEhJUkQtUEFSVFktQVVUSE9SSVpBVElPTiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4g LiAuIC4gLiAuICAgNzwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgICAgNi4xLiAg VEhJUkQtUEFSVFktQVVUSE9SSVpBVElPTiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAu ICAgNzwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAg ICA8dHI+PHRkPjxhIG5hbWU9ImRpZmYwMDA2Ij48L2E+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0 ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+ICAg ICA2LjIuICBBQ0NFU1MtVE9LRU4gIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAu IC4gLiAuIC4gICA8c3BhbiBjbGFzcz0iZGVsZXRlIj43PC9zcGFuPjwvdGQ+PHRkPiA8L3RkPjx0 ZCBjbGFzcz0icmJsb2NrIj4gICAgIDYuMi4gIEFDQ0VTUy1UT0tFTiAgLiAuIC4gLiAuIC4gLiAu IC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAgIDxzcGFuIGNsYXNzPSJpbnNlcnQiPjg8L3Nw YW4+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAg IDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxv Y2siPiAgIDcuICBTVFVOIFNlcnZlciBCZWhhdmlvdXIgLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4g LiAuIC4gLiAuIC4gLiAuICAgPHNwYW4gY2xhc3M9ImRlbGV0ZSI+OTwvc3Bhbj48L3RkPjx0ZD4g PC90ZD48dGQgY2xhc3M9InJibG9jayI+ICAgNy4gIFNUVU4gU2VydmVyIEJlaGF2aW91ciAuIC4g LiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gIDxzcGFuIGNsYXNzPSJpbnNlcnQi PjEwPC9zcGFuPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+ DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFz cz0ibGJsb2NrIj4gICA4LiAgU1RVTiBDbGllbnQgQmVoYXZpb3VyIC4gLiAuIC4gLiAuIC4gLiAu IC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAgPHNwYW4gY2xhc3M9ImRlbGV0ZSI+MTA8L3NwYW4+PC90 ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPiAgIDguICBTVFVOIENsaWVudCBCZWhhdmlv dXIgLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuICA8c3BhbiBjbGFzcz0i aW5zZXJ0Ij4xMTwvc3Bhbj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90 ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48 dGQgY2xhc3M9ImxlZnQiPiAgIDkuICBVc2FnZSB3aXRoIFRVUk4gLiAuIC4gLiAuIC4gLiAuIC4g LiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuICAxMTwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0i cmlnaHQiPiAgIDkuICBVc2FnZSB3aXRoIFRVUk4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAu IC4gLiAuIC4gLiAuIC4gLiAuICAxMTwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9w Ij48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkPjxhIG5hbWU9ImRpZmYwMDA3Ij48L2E+PC90ZD48 L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQg Y2xhc3M9ImxibG9jayI+ICAgMTAuIE9wZXJhdGlvbmFsIENvbnNpZGVyYXRpb25zICAuIC4gLiAu IC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gIDxzcGFuIGNsYXNzPSJkZWxldGUiPjE0PC9zcGFu PjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj4gICAxMC4gT3BlcmF0aW9uYWwgQ29u c2lkZXJhdGlvbnMgIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAgPHNwYW4gY2xh c3M9Imluc2VydCI+MTU8L3NwYW4+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3Ai PjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwv dGQ+PHRkIGNsYXNzPSJsYmxvY2siPiAgIDExLiBTZWN1cml0eSBDb25zaWRlcmF0aW9ucyAuIC4g LiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuICA8c3BhbiBjbGFzcz0iZGVsZXRlIj4x NDwvc3Bhbj48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+ICAgMTEuIFNlY3VyaXR5 IENvbnNpZGVyYXRpb25zIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gIDxz cGFuIGNsYXNzPSJpbnNlcnQiPjE1PC9zcGFuPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGln bj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0i dG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj4gICAxMi4gSUFOQSBDb25zaWRlcmF0aW9ucyAu IC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAgPHNwYW4gY2xhc3M9ImRl bGV0ZSI+MTU8L3NwYW4+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPiAgIDEyLiBJ QU5BIENvbnNpZGVyYXRpb25zIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4g LiAuICA8c3BhbiBjbGFzcz0iaW5zZXJ0Ij4xNjwvc3Bhbj48L3RkPjx0ZCBjbGFzcz0ibGluZW5v IiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2 YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+ICAgMTMuIEFja25vd2xlZGdlbWVu dHMgIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gIDxzcGFuIGNs YXNzPSJkZWxldGUiPjE1PC9zcGFuPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj4g ICAxMy4gQWNrbm93bGVkZ2VtZW50cyAgLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAu IC4gLiAuIC4gLiAgPHNwYW4gY2xhc3M9Imluc2VydCI+MTY8L3NwYW4+PC90ZD48dGQgY2xhc3M9 ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9Imxp bmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPiAgIDE0LiBSZWZlcmVu Y2VzICAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuICA8 c3BhbiBjbGFzcz0iZGVsZXRlIj4xNTwvc3Bhbj48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJi bG9jayI+ICAgMTQuIFJlZmVyZW5jZXMgIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4g LiAuIC4gLiAuIC4gLiAuIC4gIDxzcGFuIGNsYXNzPSJpbnNlcnQiPjE2PC9zcGFuPjwvdGQ+PHRk IGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNs YXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj4gICAgIDE0 LjEuICBOb3JtYXRpdmUgUmVmZXJlbmNlcyAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAu IC4gLiAgPHNwYW4gY2xhc3M9ImRlbGV0ZSI+MTY8L3NwYW4+PC90ZD48dGQ+IDwvdGQ+PHRkIGNs YXNzPSJyYmxvY2siPiAgICAgMTQuMS4gIE5vcm1hdGl2ZSBSZWZlcmVuY2VzIC4gLiAuIC4gLiAu IC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuICA8c3BhbiBjbGFzcz0iaW5zZXJ0Ij4xNzwvc3Bhbj48 L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRy Pjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+ ICAgICAxNC4yLiAgSW5mb3JtYXRpdmUgUmVmZXJlbmNlcyAuIC4gLiAuIC4gLiAuIC4gLiAuIC4g LiAuIC4gLiAuIC4gIDxzcGFuIGNsYXNzPSJkZWxldGUiPjE2PC9zcGFuPjwvdGQ+PHRkPiA8L3Rk Pjx0ZCBjbGFzcz0icmJsb2NrIj4gICAgIDE0LjIuICBJbmZvcm1hdGl2ZSBSZWZlcmVuY2VzIC4g LiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAgPHNwYW4gY2xhc3M9Imluc2VydCI+MTc8 L3NwYW4+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAg ICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJs YmxvY2siPiAgIEFwcGVuZGl4IEEuICBTYW1wbGUgdGlja2V0cyAuIC4gLiAuIC4gLiAuIC4gLiAu IC4gLiAuIC4gLiAuIC4gLiAuICA8c3BhbiBjbGFzcz0iZGVsZXRlIj4xODwvc3Bhbj48L3RkPjx0 ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+ICAgQXBwZW5kaXggQS4gIFNhbXBsZSB0aWNrZXRz IC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gIDxzcGFuIGNsYXNzPSJpbnNl cnQiPjE5PC9zcGFuPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwv dHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBj bGFzcz0ibGVmdCI+ICAgQXBwZW5kaXggQi4gIEludGVyYWN0aW9uIGJldHdlZW4gY2xpZW50IGFu ZCBhdXRob3JpemF0aW9uIHNlcnZlciAgIDIwPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdo dCI+ICAgQXBwZW5kaXggQi4gIEludGVyYWN0aW9uIGJldHdlZW4gY2xpZW50IGFuZCBhdXRob3Jp emF0aW9uIHNlcnZlciAgIDIwPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwv dGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+ PHRkIGNsYXNzPSJsZWZ0Ij4gICBBdXRob3JzJyBBZGRyZXNzZXMgIC4gLiAuIC4gLiAuIC4gLiAu IC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAgMjI8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9 InJpZ2h0Ij4gICBBdXRob3JzJyBBZGRyZXNzZXMgIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4g LiAuIC4gLiAuIC4gLiAuIC4gLiAgMjI8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRv cCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+ PC90ZD48dGQgY2xhc3M9ImxlZnQiPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPjwv dGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+ PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+MS4g IEludHJvZHVjdGlvbjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPjEuICBJbnRyb2R1 Y3Rpb248L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAg ICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9Imxl ZnQiPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPjwvdGQ+PHRkIGNsYXNzPSJsaW5l bm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8i IHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgU2Vzc2lvbiBUcmF2ZXJzYWwg VXRpbGl0aWVzIGZvciBOQVQgKFNUVU4pIFtSRkM1Mzg5XSBwcm92aWRlcyBhPC90ZD48dGQ+IDwv dGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgU2Vzc2lvbiBUcmF2ZXJzYWwgVXRpbGl0aWVzIGZvciBO QVQgKFNUVU4pIFtSRkM1Mzg5XSBwcm92aWRlcyBhPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFs aWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWdu PSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBtZWNoYW5pc20gdG8gY29udHJvbCBhY2Nl c3MgdmlhICJsb25nLXRlcm0iIHVzZXJuYW1lLyBwYXNzd29yZDwvdGQ+PHRkPiA8L3RkPjx0ZCBj bGFzcz0icmlnaHQiPiAgIG1lY2hhbmlzbSB0byBjb250cm9sIGFjY2VzcyB2aWEgImxvbmctdGVy bSIgdXNlcm5hbWUvIHBhc3N3b3JkPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3Ai PjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwv dGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBjcmVkZW50aWFscyB0aGF0IGFyZSBwcm92aWRlZCBhcyBw YXJ0IG9mIHRoZSBTVFVOIHByb3RvY29sLiAgSXQgaXM8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9 InJpZ2h0Ij4gICBjcmVkZW50aWFscyB0aGF0IGFyZSBwcm92aWRlZCBhcyBwYXJ0IG9mIHRoZSBT VFVOIHByb3RvY29sLiAgSXQgaXM8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+ PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90 ZD48dGQgY2xhc3M9ImxlZnQiPiAgIGV4cGVjdGVkIHRoYXQgdGhlc2UgY3JlZGVudGlhbHMgd2ls bCBiZSBrZXB0IHNlY3JldDsgaWYgdGhlPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ ICAgZXhwZWN0ZWQgdGhhdCB0aGVzZSBjcmVkZW50aWFscyB3aWxsIGJlIGtlcHQgc2VjcmV0OyBp ZiB0aGU8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAg ICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9Imxl ZnQiPiAgIGNyZWRlbnRpYWxzIGFyZSBkaXNjb3ZlcmVkLCB0aGUgU1RVTiBzZXJ2ZXIgY291bGQg YmUgdXNlZCBieTwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIGNyZWRlbnRpYWxz IGFyZSBkaXNjb3ZlcmVkLCB0aGUgU1RVTiBzZXJ2ZXIgY291bGQgYmUgdXNlZCBieTwvdGQ+PHRk IGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNs YXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij48L3RkPjx0ZD4gPC90ZD48dGQgY2xh c3M9InJpZ2h0Ij48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+DQogICAgICA8dHIg Ymdjb2xvcj0iZ3JheSI+PHRkPjwvdGQ+PHRoPjxhIG5hbWU9InBhcnQtbDQiPjxzbWFsbD5za2lw cGluZyB0byBjaGFuZ2UgYXQ8L3NtYWxsPjxlbT4gcGFnZSA0LCBsaW5lIDQ0PC9lbT48L2E+PC90 aD48dGg+IDwvdGg+PHRoPjxhIG5hbWU9InBhcnQtcjQiPjxzbWFsbD5za2lwcGluZyB0byBjaGFu Z2UgYXQ8L3NtYWxsPjxlbT4gcGFnZSA0LCBsaW5lIDQzPC9lbT48L2E+PC90aD48dGQ+PC90ZD48 L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQg Y2xhc3M9ImxlZnQiPiAgIHNlcnZlciB0byBvYnRhaW4gYSB0b2tlbiBldmVuIGJlZm9yZSBpdCBt YWtlcyBhIFNUVU4gcmVxdWVzdCwgaWYgaXQ8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0 Ij4gICBzZXJ2ZXIgdG8gb2J0YWluIGEgdG9rZW4gZXZlbiBiZWZvcmUgaXQgbWFrZXMgYSBTVFVO IHJlcXVlc3QsIGlmIGl0PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+ PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRk IGNsYXNzPSJsZWZ0Ij4gICBrbm93cyB0aGUgc2VydmVyIGRldGFpbHMgYmVmb3JlIGhhbmQuICBG b3IgZXhhbXBsZSwgb25jZSBhIGNsaWVudCBoYXM8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJp Z2h0Ij4gICBrbm93cyB0aGUgc2VydmVyIGRldGFpbHMgYmVmb3JlIGhhbmQuICBGb3IgZXhhbXBs ZSwgb25jZSBhIGNsaWVudCBoYXM8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+ PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90 ZD48dGQgY2xhc3M9ImxlZnQiPiAgIGxlYXJudCB0aGF0IGEgU1RVTiBzZXJ2ZXIgc3VwcG9ydHMg dGhpcmQgcGFydHkgYXV0aG9yaXphdGlvbiBmcm9tIGE8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9 InJpZ2h0Ij4gICBsZWFybnQgdGhhdCBhIFNUVU4gc2VydmVyIHN1cHBvcnRzIHRoaXJkIHBhcnR5 IGF1dGhvcml6YXRpb24gZnJvbSBhPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3Ai PjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwv dGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBhdXRob3JpemF0aW9uIHNlcnZlciwgdGhlIGNsaWVudCBj YW4gb2J0YWluIHRoZSB0b2tlbiBiZWZvcmUgbWFraW5nPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNz PSJyaWdodCI+ICAgYXV0aG9yaXphdGlvbiBzZXJ2ZXIsIHRoZSBjbGllbnQgY2FuIG9idGFpbiB0 aGUgdG9rZW4gYmVmb3JlIG1ha2luZzwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9w Ij48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48 L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgc3Vic2VxdWVudCBTVFVOIHJlcXVlc3RzLjwvdGQ+PHRk PiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIHN1YnNlcXVlbnQgU1RVTiByZXF1ZXN0cy48L3Rk Pjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0 ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPjwvdGQ+ PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGln bj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0i dG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+NC4xLiAgS2V5IEVzdGFibGlzaG1lbnQ8L3RkPjx0 ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij40LjEuICBLZXkgRXN0YWJsaXNobWVudDwvdGQ+PHRk IGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNs YXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+PC90ZD48dGQ+ IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0 b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3Ai PjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBUaGUgYXV0aG9yaXphdGlvbiBzZXJ2ZXIgc2hhcmVz IGEgbG9uZy10ZXJtIHNlY3JldCAobGlrZSBhc3ltbWV0cmljPC90ZD48dGQ+IDwvdGQ+PHRkIGNs YXNzPSJyaWdodCI+ICAgVGhlIGF1dGhvcml6YXRpb24gc2VydmVyIHNoYXJlcyBhIGxvbmctdGVy bSBzZWNyZXQgKGxpa2UgYXN5bW1ldHJpYzwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0i dG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9w Ij48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgY3JlZGVudGlhbHMpIHdpdGggdGhlIFNUVU4gc2Vy dmVyIGZvciBtdXR1YWwgYXV0aGVudGljYXRpb24uPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJy aWdodCI+ICAgY3JlZGVudGlhbHMpIHdpdGggdGhlIFNUVU4gc2VydmVyIGZvciBtdXR1YWwgYXV0 aGVudGljYXRpb24uPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90 cj4NCiAgICAgIDx0cj48dGQ+PGEgbmFtZT0iZGlmZjAwMDgiPjwvYT48L3RkPjwvdHI+DQogICAg ICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJs b2NrIj4gICA8c3BhbiBjbGFzcz0iZGVsZXRlIj5TeW1tZXRyaWMta2V5IGFsZ29yaXRobSB3aXRo IEhhc2ggYmFzZWQgTWVzc2FnZSBBdXRoZW50aWNhdGlvbiBDb2Rlczwvc3Bhbj48L3RkPjx0ZD4g PC90ZD48dGQgY2xhc3M9InJibG9jayI+ICAgPHNwYW4gY2xhc3M9Imluc2VydCI+U3ltbWV0cmlj IGNyeXB0b2dyYXBoeTwvc3Bhbj4gTVVTVCBiZSBjaG9zZW4gdG8gZW5zdXJlIHRoYXQgdGhlIHNp emUgb2Y8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAg ICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9Imxi bG9jayI+PHNwYW4gY2xhc3M9ImRlbGV0ZSI+ICAgKEhNQUNzKTwvc3Bhbj4gTVVTVCBiZSBjaG9z ZW4gdG8gZW5zdXJlIHRoYXQgdGhlIHNpemUgb2YgZW5jcnlwdGVkIHRva2VuIGlzPC90ZD48dGQ+ IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPiAgIGVuY3J5cHRlZCB0b2tlbiBpcyBub3QgbGFyZ2Ug YmVjYXVzZSB1c2FnZSBvZiBhc3ltbWV0cmljIDxzcGFuIGNsYXNzPSJpbnNlcnQiPmNyeXB0b2dy YXBoeTwvc3Bhbj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3Ry Pg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xh c3M9ImxibG9jayI+ICAgbm90IGxhcmdlIGJlY2F1c2UgdXNhZ2Ugb2YgYXN5bW1ldHJpYyA8c3Bh biBjbGFzcz0iZGVsZXRlIj5rZXlzPC9zcGFuPiB3aWxsIHJlc3VsdCBpbiBsYXJnZTwvdGQ+PHRk PiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj4gICB3aWxsIHJlc3VsdCBpbiBsYXJnZSBlbmNyeXB0 ZWQgdG9rZW5zIHdoaWNoIG1heSBub3QgZml0IGludG8gYSBzaW5nbGU8L3RkPjx0ZCBjbGFzcz0i bGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGlu ZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+ICAgZW5jcnlwdGVkIHRv a2VucyB3aGljaCBtYXkgbm90IGZpdCBpbnRvIGEgc2luZ2xlIFNUVU4gbWVzc2FnZS48L3RkPjx0 ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+ICAgU1RVTiBtZXNzYWdlLjwvdGQ+PHRkIGNsYXNz PSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJs aW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+PC90ZD48dGQ+IDwvdGQ+ PHRkIGNsYXNzPSJyaWdodCI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwv dGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+ PHRkIGNsYXNzPSJsZWZ0Ij4gICBUaGUgU1RVTiBzZXJ2ZXIgYW5kIGF1dGhvcml6YXRpb24gc2Vy dmVyIGNhbiBlc3RhYmxpc2ggYSBzeW1tZXRyaWM8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJp Z2h0Ij4gICBUaGUgU1RVTiBzZXJ2ZXIgYW5kIGF1dGhvcml6YXRpb24gc2VydmVyIGNhbiBlc3Rh Ymxpc2ggYSBzeW1tZXRyaWM8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90 ZD48L3RyPg0KICAgICAgPHRyPjx0ZD48YSBuYW1lPSJkaWZmMDAwOSI+PC9hPjwvdGQ+PC90cj4N CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNz PSJsYmxvY2siPiAgIGtleSA8c3BhbiBjbGFzcz0iZGVsZXRlIj4oSyksPC9zcGFuPiB1c2luZyBh biBvdXQgb2YgYmFuZCBtZWNoYW5pc20uICA8c3BhbiBjbGFzcz0iZGVsZXRlIj5JZjwvc3Bhbj4g c3ltbWV0cmljIGtleSBpcyB1c2VkPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPiAg IGtleSA8c3BhbiBjbGFzcz0iaW5zZXJ0Ij4oSykgYW5kIGNlcnRhaW4gYXV0aGVudGljYXRlZCBl bmNyeXB0aW9uIGFsZ29yaXRobSw8L3NwYW4+IHVzaW5nIGFuIG91dDwvdGQ+PHRkIGNsYXNzPSJs aW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5l bm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj4gICB0aGVuIHRoZSBBUy1S UyBhbmQgQVVUSCBrZXlzIHdpbGwgYmUgZGVyaXZlZCBmcm9tIEsuICBUaGUgQVMtUlMga2V5PC90 ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPiAgIG9mIGJhbmQgbWVjaGFuaXNtLiAgPHNw YW4gY2xhc3M9Imluc2VydCI+VGhlIFNUVU4gYW5kIGF1dGhvcml6YXRpb24gc2VydmVycyBNVVNU IGVzdGFibGlzaDwvc3Bhbj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90 ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48 dGQgY2xhc3M9ImxibG9jayI+ICAgaXMgdXNlZCBmb3IgZW5jcnlwdGluZyB0aGUgc2VsZi1jb250 YWluZWQgdG9rZW4gYW5kIHRoZSBtZXNzYWdlPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxv Y2siPjxzcGFuIGNsYXNzPSJpbnNlcnQiPiAgIHRoZTwvc3Bhbj4gc3ltbWV0cmljIGtleSA8c3Bh biBjbGFzcz0iaW5zZXJ0Ij5vdmVyIGFuIGF1dGhlbnRpY2F0ZWQgc2VjdXJlIGNoYW5uZWwuICBJ Zjwvc3Bhbj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0K ICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9 ImxibG9jayI+ICAgaW50ZWdyaXR5IG9mIHRoZSBlbmNyeXB0ZWQgdG9rZW4gaXMgY2FsY3VsYXRl ZCB1c2luZyB0aGUgQVVUSCBrZXkuPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPjxz cGFuIGNsYXNzPSJpbnNlcnQiPiAgIEF1dGhlbnRpY2F0ZWQgRW5jcnlwdGlvbiB3aXRoIEFFUy1D QkMgYW5kIEhNQUMtU0hBIChkZWZpbmVkIGluPC9zcGFuPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8i IHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZh bGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj4gICA8c3BhbiBjbGFzcz0iZGVsZXRl Ij5UaGUgU1RVTjwvc3Bhbj4gYW5kIDxzcGFuIGNsYXNzPSJkZWxldGUiPmF1dGhvcml6YXRpb24g c2VydmVycyBNVVNUIGVzdGFibGlzaDwvc3Bhbj4gdGhlIHN5bW1ldHJpYyBrZXk8L3RkPjx0ZD4g PC90ZD48dGQgY2xhc3M9InJibG9jayI+PHNwYW4gY2xhc3M9Imluc2VydCI+ICAgW0ktRC5tY2dy ZXctYWVhZC1hZXMtY2JjLWhtYWMtc2hhMl0pPC9zcGFuPiBpcyB1c2VkIHRoZW4gdGhlIEFTLVJT IGFuZCBBVVRIPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4N CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNz PSJsYmxvY2siPiAgIDxzcGFuIGNsYXNzPSJkZWxldGUiPm92ZXIgYW4gYXV0aGVudGljYXRlZCBz ZWN1cmUgY2hhbm5lbC48L3NwYW4+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPiAg IGtleXMgd2lsbCBiZSBkZXJpdmVkIGZyb20gSy4gIFRoZSBBUy1SUyBrZXkgaXMgdXNlZCBmb3Ig ZW5jcnlwdGluZzwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+ DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFz cz0ibGJsb2NrIj48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+ICAgdGhlIHNlbGYt Y29udGFpbmVkIHRva2VuIGFuZCB0aGUgbWVzc2FnZSBpbnRlZ3JpdHkgb2YgdGhlIGVuY3J5cHRl ZDwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8 dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2Nr Ij48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+ICAgdG9rZW4gaXMgY2FsY3VsYXRl ZCB1c2luZyB0aGUgQVVUSCBrZXkuICA8c3BhbiBjbGFzcz0iaW5zZXJ0Ij5JZiBBdXRoZW50aWNh dGVkIEVuY3J5cHRpb248L3NwYW4+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3Ai PjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwv dGQ+PHRkIGNsYXNzPSJsYmxvY2siPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48 c3BhbiBjbGFzcz0iaW5zZXJ0Ij4gICB3aXRoIEFzc29jaWF0ZWQgRGF0YSAoQUVBRCkgYWxnb3Jp dGhtIGRlZmluZWQgaW4gW1JGQzUxMTZdIGlzIHVzZWQ8L3NwYW4+PC90ZD48dGQgY2xhc3M9Imxp bmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVu byIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPjwvdGQ+PHRkPiA8L3RkPjx0 ZCBjbGFzcz0icmJsb2NrIj48c3BhbiBjbGFzcz0iaW5zZXJ0Ij4gICB0aGVuIHRoZXJlIGlzIG5v IG5lZWQgdG8gZ2VuZXJhdGUgdGhlIEFVVEgga2V5PC9zcGFuPiBhbmQgPHNwYW4gY2xhc3M9Imlu c2VydCI+QVMtUlMga2V5IHdpbGw8L3NwYW4+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWdu PSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0 b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJs b2NrIj48c3BhbiBjbGFzcz0iaW5zZXJ0Ij4gICBoYXZlIHRoZSBzYW1lIHZhbHVlIGFzPC9zcGFu PiB0aGUgc3ltbWV0cmljIGtleSA8c3BhbiBjbGFzcz0iaW5zZXJ0Ij4oSykuPC9zcGFuPjwvdGQ+ PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRk IGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+PC90ZD48 dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWdu PSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0 b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBUaGUgcHJvY2VkdXJlIGZvciBlc3RhYmxpc2ht ZW50IG9mIHRoZSBzeW1tZXRyaWMga2V5IGlzIG91dHNpZGUgdGhlPC90ZD48dGQ+IDwvdGQ+PHRk IGNsYXNzPSJyaWdodCI+ICAgVGhlIHByb2NlZHVyZSBmb3IgZXN0YWJsaXNobWVudCBvZiB0aGUg c3ltbWV0cmljIGtleSBpcyBvdXRzaWRlIHRoZTwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGln bj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0i dG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgc2NvcGUgb2YgdGhpcyBzcGVjaWZpY2F0aW9u LCBhbmQgdGhpcyBzcGVjaWZpY2F0aW9uIGRvZXMgbm90IG1hbmRhdGU8L3RkPjx0ZD4gPC90ZD48 dGQgY2xhc3M9InJpZ2h0Ij4gICBzY29wZSBvZiB0aGlzIHNwZWNpZmljYXRpb24sIGFuZCB0aGlz IHNwZWNpZmljYXRpb24gZG9lcyBub3QgbWFuZGF0ZTwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZh bGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkPjxhIG5hbWU9ImRpZmYwMDEwIj48 L2E+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+ PC90ZD48dGQgY2xhc3M9ImxibG9jayI+ICAgc3VwcG9ydCBvZiBhbnkgZ2l2ZW4gbWVjaGFuaXNt LiAgU2VjdGlvbiA8c3BhbiBjbGFzcz0iZGVsZXRlIj40LjEuMSwgU2VjdGlvbiA0LjEuMjwvc3Bh bj4gYW5kPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPiAgIHN1cHBvcnQgb2YgYW55 IGdpdmVuIG1lY2hhbmlzbS4gIFNlY3Rpb24gPHNwYW4gY2xhc3M9Imluc2VydCI+NC4xLjE8L3Nw YW4+IGFuZCBTZWN0aW9uIDxzcGFuIGNsYXNzPSJpbnNlcnQiPjQuMS4yPC9zcGFuPiBzaG93PC90 ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48 dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPiAg IFNlY3Rpb24gPHNwYW4gY2xhc3M9ImRlbGV0ZSI+NC4xLjM8L3NwYW4+IHNob3cgZXhhbXBsZXMg b2YgbWVjaGFuaXNtcyB0aGF0IGNhbiBiZSB1c2VkLjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0i cmJsb2NrIj4gICBleGFtcGxlcyBvZiBtZWNoYW5pc21zIHRoYXQgY2FuIGJlIHVzZWQuPC90ZD48 dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQg Y2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPiAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICA8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+PC90ZD48dGQgY2xh c3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9 ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPjxzcGFuIGNsYXNz PSJkZWxldGUiPjQuMS4xLiAgRFNLUFA8L3NwYW4+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJy YmxvY2siPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQog ICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0i bGJsb2NrIj48c3BhbiBjbGFzcz0iZGVsZXRlIj48L3NwYW4+PC90ZD48dGQ+IDwvdGQ+PHRkIGNs YXNzPSJyYmxvY2siPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwv dHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBj bGFzcz0ibGJsb2NrIj48c3BhbiBjbGFzcz0iZGVsZXRlIj4gICBUaGUgU1RVTiBhbmQgQVMgc2Vy dmVycyBjb3VsZCBjaG9vc2UgdG8gdXNlIER5bmFtaWMgU3ltbWV0cmljIEtleTwvc3Bhbj48L3Rk Pjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFs aWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWdu PSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPjxzcGFuIGNsYXNzPSJkZWxldGUiPiAgIFBy b3Zpc2lvbmluZyBQcm90b2NvbCAoRFNLUFApIFtSRkM2MDYzXSB0byBlc3RhYmxpc2ggYSBzeW1t ZXRyaWMga2V5PC9zcGFuPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48L3RkPjx0 ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBj bGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+PHNwYW4g Y2xhc3M9ImRlbGV0ZSI+ICAgKEspLiAgVGhlIGVuY3J5cHRpb24gYW5kIE1BQyBhbGdvcml0aG1z IHdpbGwgYmUgbmVnb3RpYXRlZCB1c2luZyB0aGU8L3NwYW4+PC90ZD48dGQ+IDwvdGQ+PHRkIGNs YXNzPSJyYmxvY2siPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwv dHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBj bGFzcz0ibGJsb2NrIj48c3BhbiBjbGFzcz0iZGVsZXRlIj4gICBLZXlQcm92Q2xpZW50SGVsbG8s IEtleVByb3ZTZXJ2ZXJIZWxsbyBtZXNzYWdlcy4gIEEgdW5pcXVlIGtleTwvc3Bhbj48L3RkPjx0 ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWdu PSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0 b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPjxzcGFuIGNsYXNzPSJkZWxldGUiPiAgIGlkZW50 aWZpZXIgKHJlZmVycmVkIHRvIGFzIEtleUlEKSBmb3IgdGhlIHN5bW1ldHJpYyBrZXkgaXMgZ2Vu ZXJhdGVkPC9zcGFuPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48L3RkPjx0ZCBj bGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFz cz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+PHNwYW4gY2xh c3M9ImRlbGV0ZSI+ICAgYnkgdGhlIERTS1BQIHNlcnZlciAoaS5lLiwgQXV0aG9yaXphdGlvbiBz ZXJ2ZXIpIGFuZCBzaWduYWxsZWQgdG8gdGhlPC9zcGFuPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFz cz0icmJsb2NrIj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3Ry Pg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xh c3M9ImxibG9jayI+PHNwYW4gY2xhc3M9ImRlbGV0ZSI+ICAgRFNLUFAgY2xpZW50IChpLmUuLCBT VFVOIHNlcnZlcikgd2hpY2ggaXMgZXF1aXZhbGVudCB0byB0aGUga2lkPC9zcGFuPjwvdGQ+PHRk PiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249 InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRv cCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+PHNwYW4gY2xhc3M9ImRlbGV0ZSI+ICAgZGVmaW5l ZCBpbiB0aGlzIHNwZWNpZmljYXRpb24uICBUaGUgQVMtUlMsIEFVVEgga2V5cyB3b3VsZCBiZSBk ZXJpdmVkPC9zcGFuPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48L3RkPjx0ZCBj bGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFz cz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+PHNwYW4gY2xh c3M9ImRlbGV0ZSI+ICAgZnJvbSB0aGUgc3ltbWV0cmljIGtleSB1c2luZyAoSE1BQyktYmFzZWQg a2V5IGRlcml2YXRpb24gZnVuY3Rpb248L3NwYW4+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJy YmxvY2siPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQog ICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0i bGJsb2NrIj48c3BhbiBjbGFzcz0iZGVsZXRlIj4gICAoSEtERikgW1JGQzU4NjldIGFuZCB0aGUg ZGVmYXVsdCBoYXNoIGZ1bmN0aW9uIE1VU1QgYmUgU0hBLTI1Ni4gIEZvcjwvc3Bhbj48L3RkPjx0 ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWdu PSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0 b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPjxzcGFuIGNsYXNzPSJkZWxldGUiPiAgIGV4YW1w bGUgaWYgdGhlIGlucHV0IHN5bW1ldHJpYyBrZXkgKEspIGlzIDMyIG9jdGV0cyBsZW5ndGgsPC9z cGFuPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48L3RkPjx0ZCBjbGFzcz0ibGlu ZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5v IiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+PHNwYW4gY2xhc3M9ImRlbGV0 ZSI+ICAgZW5jcnlwdGlvbiBhbGdvcml0aG0gaXMgQUVTXzI1Nl9DQkMgYW5kIEhNQUMgYWxnb3Jp dGhtIGlzIEhNQUMtU0hBMTwvc3Bhbj48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+ PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0 cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2si PjxzcGFuIGNsYXNzPSJkZWxldGUiPiAgIFtSRkMyMTA0XSB0aGVuIHRoZSBzZWNvbmRhcnkga2V5 cyBBUy1SUywgQVVUSCBhcmUgZ2VuZXJhdGVkIGZyb20gdGhlPC9zcGFuPjwvdGQ+PHRkPiA8L3Rk Pjx0ZCBjbGFzcz0icmJsb2NrIj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+ PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90 ZD48dGQgY2xhc3M9ImxibG9jayI+PHNwYW4gY2xhc3M9ImRlbGV0ZSI+ICAgaW5wdXQga2V5IEsg YXMgZm9sbG93czwvc3Bhbj48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+PC90ZD48 dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQg Y2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPjxzcGFu IGNsYXNzPSJkZWxldGUiPjwvc3Bhbj48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+ PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0 cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2si PjxzcGFuIGNsYXNzPSJkZWxldGUiPiAgIDEuICBIS0RGLUV4dHJhY3QoemVybywgSykgLSZndDsg UFJLPC9zcGFuPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48L3RkPjx0ZCBjbGFz cz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0i bGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+PHNwYW4gY2xhc3M9 ImRlbGV0ZSI+PC9zcGFuPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48L3RkPjx0 ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBj bGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+PHNwYW4g Y2xhc3M9ImRlbGV0ZSI+ICAgMi4gIEhLREYtRXhwYW5kKFBSSywgIkFVVEgga2V5IiwgMjApIC0m Z3Q7IEFVVEgga2V5PC9zcGFuPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48L3Rk Pjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0 ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+PHNw YW4gY2xhc3M9ImRlbGV0ZSI+PC9zcGFuPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2Nr Ij48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAg PHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9j ayI+PHNwYW4gY2xhc3M9ImRlbGV0ZSI+ICAgMy4gIEhLREYtRXhwYW5kKFBSSywgIkFTLVJTIGtl eSIsIDMyKSAtJmd0OyBBUy1SUyBrZXk8L3NwYW4+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJy YmxvY2siPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQog ICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0i bGJsb2NrIj48c3BhbiBjbGFzcz0iZGVsZXRlIj48L3NwYW4+PC90ZD48dGQ+IDwvdGQ+PHRkIGNs YXNzPSJyYmxvY2siPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwv dHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBj bGFzcz0ibGJsb2NrIj48c3BhbiBjbGFzcz0iZGVsZXRlIj4gICBJZiBBdXRoZW50aWNhdGVkIEVu Y3J5cHRpb24gd2l0aCBBc3NvY2lhdGVkIERhdGEgKEFFQUQpIGFsZ29yaXRobTwvc3Bhbj48L3Rk Pjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFs aWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWdu PSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPjxzcGFuIGNsYXNzPSJkZWxldGUiPiAgIGRl ZmluZWQgaW4gW1JGQzUxMTZdIGlzIHVzZWQgdGhlbiB0aGVyZSBpcyBubyBuZWVkIHRvIGdlbmVy YXRlIHRoZTwvc3Bhbj48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+PC90ZD48dGQg Y2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xh c3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPjxzcGFuIGNs YXNzPSJkZWxldGUiPiAgIEFVVEgga2V5LiAgQUVBRCBzaW1wbGlmaWVzIGltcGxlbWVudGF0aW9u LCBzaW5jZSBpdCBpbnZvbHZlcyBvbmx5IG9uZTwvc3Bhbj48L3RkPjx0ZD4gPC90ZD48dGQgY2xh c3M9InJibG9jayI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90 cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNs YXNzPSJsYmxvY2siPjxzcGFuIGNsYXNzPSJkZWxldGUiPiAgIGtleSwgdGhlIHVzZXIgb2YgQUVB RCBuZWVkIG5vdCBjb25zaWRlciByZWxhdGl2ZSBvcmRlciBvZiBlbmNyeXB0aW5nPC9zcGFuPjwv dGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2 YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxp Z249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+PHNwYW4gY2xhc3M9ImRlbGV0ZSI+ICAg YW5kIGF1dGhlbnRpY2F0aW5nIHRoZSB0b2tlbiBhbmQgb3RoZXIgYmVuZWZpdHMgb2YgQUVBRCBh cmUgZXhwbGFpbmVkPC9zcGFuPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48L3Rk Pjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0 ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+PHNw YW4gY2xhc3M9ImRlbGV0ZSI+ICAgaW4gU2VjdGlvbiAxLjMgb2YgW1JGQzUxMTZdLjwvc3Bhbj48 L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIg dmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFs aWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9 InJpZ2h0Ij48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0K ICAgICAgPHRyPjx0ZD48YSBuYW1lPSJkaWZmMDAxMSI+PC9hPjwvdGQ+PC90cj4NCiAgICAgIDx0 cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2si PjQuMS48c3BhbiBjbGFzcz0iZGVsZXRlIj4yPC9zcGFuPi4gIEhUVFAgaW50ZXJhY3Rpb25zPC90 ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPjQuMS48c3BhbiBjbGFzcz0iaW5zZXJ0Ij4x PC9zcGFuPi4gIEhUVFAgaW50ZXJhY3Rpb25zPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWdu PSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0 b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0 Ij48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAg PHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQi PiAgIFRoZSBTVFVOIGFuZCBBUyBzZXJ2ZXJzIGNvdWxkIGNob29zZSB0byB1c2UgUkVTVCBBUEkg b3ZlciBIVFRQUyB0bzwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIFRoZSBTVFVO IGFuZCBBUyBzZXJ2ZXJzIGNvdWxkIGNob29zZSB0byB1c2UgUkVTVCBBUEkgb3ZlciBIVFRQUyB0 bzwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8 dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ ICAgZXN0YWJsaXNoIGEgc3ltbWV0cmljIGtleS4gIEhUVFBTIE1VU1QgYmUgdXNlZCBmb3IgbXV0 dWFsPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgZXN0YWJsaXNoIGEgc3ltbWV0 cmljIGtleS4gIEhUVFBTIE1VU1QgYmUgdXNlZCBmb3IgbXV0dWFsPC90ZD48dGQgY2xhc3M9Imxp bmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVu byIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBhdXRoZW50aWNhdGlvbiBh bmQgY29uZmlkZW50aWFsaXR5LiAgVG8gcmV0cmlldmUgYSBuZXcgc3ltbWV0cmljIGtleSw8L3Rk Pjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBhdXRoZW50aWNhdGlvbiBhbmQgY29uZmlk ZW50aWFsaXR5LiAgVG8gcmV0cmlldmUgYSBuZXcgc3ltbWV0cmljIGtleSw8L3RkPjx0ZCBjbGFz cz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0i bGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIHRoZSBTVFVOIHNl cnZlciBtYWtlcyBhbiBIVFRQIEdFVCByZXF1ZXN0IHRvIHRoZSBhdXRob3JpemF0aW9uPC90ZD48 dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgdGhlIFNUVU4gc2VydmVyIG1ha2VzIGFuIEhU VFAgR0VUIHJlcXVlc3QgdG8gdGhlIGF1dGhvcml6YXRpb248L3RkPjx0ZCBjbGFzcz0ibGluZW5v IiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2 YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIHNlcnZlciwgc3BlY2lmeWluZyBT VFVOIGFzIHRoZSBzZXJ2aWNlIHRvIGFsbG9jYXRlIHRoZSBzeW1tZXRyaWMga2V5czwvdGQ+PHRk PiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIHNlcnZlciwgc3BlY2lmeWluZyBTVFVOIGFzIHRo ZSBzZXJ2aWNlIHRvIGFsbG9jYXRlIHRoZSBzeW1tZXRyaWMga2V5czwvdGQ+PHRkIGNsYXNzPSJs aW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5l bm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgZm9yLCBhbmQgc3BlY2lm eWluZyB0aGUgbmFtZSBvZiB0aGUgU1RVTiBzZXJ2ZXIuICBUaGUgcmVzcG9uc2UgaXM8L3RkPjx0 ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBmb3IsIGFuZCBzcGVjaWZ5aW5nIHRoZSBuYW1l IG9mIHRoZSBTVFVOIHNlcnZlci4gIFRoZSByZXNwb25zZSBpczwvdGQ+PHRkIGNsYXNzPSJsaW5l bm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8i IHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgcmV0dXJuZWQgd2l0aCBjb250 ZW50LXR5cGUgImFwcGxpY2F0aW9uL2pzb24iLCBhbmQgY29uc2lzdHMgb2YgYTwvdGQ+PHRkPiA8 L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIHJldHVybmVkIHdpdGggY29udGVudC10eXBlICJhcHBs aWNhdGlvbi9qc29uIiwgYW5kIGNvbnNpc3RzIG9mIGE8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2 YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxp Z249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIEphdmFTY3JpcHQgT2JqZWN0IE5vdGF0 aW9uIChKU09OKSBbUkZDNzE1OV0gb2JqZWN0IGNvbnRhaW5pbmcgdGhlPC90ZD48dGQ+IDwvdGQ+ PHRkIGNsYXNzPSJyaWdodCI+ICAgSmF2YVNjcmlwdCBPYmplY3QgTm90YXRpb24gKEpTT04pIFtS RkM3MTU5XSBvYmplY3QgY29udGFpbmluZyB0aGU8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxp Z249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249 InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIHN5bW1ldHJpYyBrZXkuPC90ZD48dGQ+IDwv dGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgc3ltbWV0cmljIGtleS48L3RkPjx0ZCBjbGFzcz0ibGlu ZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5v Ij48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ PC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPg0KICAgICAgPHRyIGJnY29sb3I9Imdy YXkiPjx0ZD48L3RkPjx0aD48YSBuYW1lPSJwYXJ0LWw1Ij48c21hbGw+c2tpcHBpbmcgdG8gY2hh bmdlIGF0PC9zbWFsbD48ZW0+IHBhZ2UgNiwgbGluZSAyODwvZW0+PC9hPjwvdGg+PHRoPiA8L3Ro Pjx0aD48YSBuYW1lPSJwYXJ0LXI1Ij48c21hbGw+c2tpcHBpbmcgdG8gY2hhbmdlIGF0PC9zbWFs bD48ZW0+IHBhZ2UgNiwgbGluZSAyNTwvZW0+PC9hPjwvdGg+PHRkPjwvdGQ+PC90cj4NCiAgICAg IDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0 Ij48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij48L3RkPjx0ZCBjbGFzcz0ibGluZW5v IiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2 YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIGsgLSBMb25nLXRlcm0ga2V5IChL KTwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIGsgLSBMb25nLXRlcm0ga2V5IChL KTwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8 dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ ICAgZXhwIC0gaWRlbnRpZmllcyB0aGUgdGltZSBhZnRlciB3aGljaCB0aGUga2V5IGV4cGlyZXMu PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgZXhwIC0gaWRlbnRpZmllcyB0aGUg dGltZSBhZnRlciB3aGljaCB0aGUga2V5IGV4cGlyZXMuPC90ZD48dGQgY2xhc3M9ImxpbmVubyIg dmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFs aWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9 InJpZ2h0Ij48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0K ICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9 ImxlZnQiPiAgIGV4YW1wbGU6PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgZXhh bXBsZTo8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAg ICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9Imxl ZnQiPiAgIHs8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICB7PC90ZD48dGQgY2xh c3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9 ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICAgICAiayIgOjwv dGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgICAgICJrIiA6PC90ZD48dGQgY2xhc3M9 ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9Imxp bmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICAiRVNJelJGVm1kNGla QUJFaU0wUlZaZ0tuNldqTGFUQzFGWEFnaFJNVlR6a0JHTmFhTjQ5NjUyM1dJSVNLZXJMaSIsPC90 ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgIkVTSXpSRlZtZDRpWkFCRWlNMFJWWmdL bjZXakxhVEMxRlhBZ2hSTVZUemtCR05hYU40OTY1MjNXSUlTS2VyTGkiLDwvdGQ+PHRkIGNsYXNz PSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJs aW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgICAgImV4cCIgOiAx MzAwODE5MzgwLDwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgICAgICJleHAiIDog MTMwMDgxOTM4MCw8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3Ry Pg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xh c3M9ImxlZnQiPiAgICAgICJraWQiIDoiMjJCSWp4VTkzaC9JZ3dFYiI8L3RkPjx0ZD4gPC90ZD48 dGQgY2xhc3M9InJpZ2h0Ij4gICAgICAia2lkIiA6IjIyQklqeFU5M2gvSWd3RWIiPC90ZD48dGQg Y2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQ+PGEg bmFtZT0iZGlmZjAwMTIiPjwvYT48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5l bm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj4gICAgICAiZW5jIiA6IEEy NTY8c3BhbiBjbGFzcz0iZGVsZXRlIj5DQkMtSFM1MTI8L3NwYW4+PC90ZD48dGQ+IDwvdGQ+PHRk IGNsYXNzPSJyYmxvY2siPiAgICAgICJlbmMiIDogQTI1NjxzcGFuIGNsYXNzPSJpbnNlcnQiPkdD TUtXPC9zcGFuPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+ DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFz cz0ibGVmdCI+ICAgICB9PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgICB9PC90 ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48 dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij48L3Rk Pjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxp Z249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZD48YSBuYW1lPSJkaWZmMDAxMyI+PC9h PjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwv dGQ+PHRkIGNsYXNzPSJsYmxvY2siPiAgIFRoZSA8c3BhbiBjbGFzcz0iZGVsZXRlIj5BUy1SUywg QVVUSCBrZXlzIGFyZSBkZXJpdmVkIGZyb20gSyB1c2luZyBIS0RGIGFzIGRpc2N1c3NlZCBpbjwv c3Bhbj48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+ICAgVGhlIGF1dGhvcml6YXRp b24gc2VydmVyIG11c3QgYWxzbyBzaWduYWwga2lkIHRvIHRoZSBTVFVOIHNlcnZlcjwvdGQ+PHRk IGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNs YXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48c3BhbiBj bGFzcz0iZGVsZXRlIj4gICBTZWN0aW9uIDQuMS4xLiAgVGhlPC9zcGFuPiBhdXRob3JpemF0aW9u IHNlcnZlciBtdXN0IGFsc28gc2lnbmFsIGtpZCB0byB0aGU8L3RkPjx0ZD4gPC90ZD48dGQgY2xh c3M9InJibG9jayI+ICAgd2hpY2ggd2lsbCBiZSB1c2VkIHRvIHNlbGVjdCB0aGUgYXBwcm9wcmlh dGUga2V5aW5nIG1hdGVyaWFsIGZvcjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9w Ij48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48 L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj4gICBTVFVOIHNlcnZlciB3aGljaCB3aWxsIGJlIHVzZWQg dG8gc2VsZWN0IHRoZSBhcHByb3ByaWF0ZSBrZXlpbmc8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9 InJibG9jayI+ICAgZGVjcnlwdGlvbi4gIFRoZSBwYXJhbWV0ZXIgImsiIGlzIGRlZmluZWQgaW4g U2VjdGlvbiA2LjQuMSBvZjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3Rk PjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0 ZCBjbGFzcz0ibGJsb2NrIj4gICBtYXRlcmlhbCBmb3IgZGVjcnlwdGlvbi4gIFRoZSBwYXJhbWV0 ZXIgImsiIGlzIGRlZmluZWQgaW48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+ICAg W0ktRC5pZXRmLWpvc2UtanNvbi13ZWItYWxnb3JpdGhtc10sICJlbmMiIGlzIGRlZmluZWQgaW48 L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRy Pjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+ ICAgU2VjdGlvbiA2LjQuMSBvZiBbSS1ELmlldGYtam9zZS1qc29uLXdlYi1hbGdvcml0aG1zXSwg ImVuYyIgaXM8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+ICAgU2VjdGlvbiA0LjEu MiBvZiBbSS1ELmlldGYtam9zZS1qc29uLXdlYi1lbmNyeXB0aW9uXSwgImtpZCIgaXM8L3RkPjx0 ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBj bGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+ICAgZGVm aW5lZCBpbiBTZWN0aW9uIDQuMS4yIG9mIFtJLUQuaWV0Zi1qb3NlLWpzb24td2ViLWVuY3J5cHRp b25dLDwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj4gICBkZWZpbmVkIGluIFNlY3Rp b24gNC4xLjQgb2YgW0ktRC5pZXRmLWpvc2UtanNvbi13ZWItc2lnbmF0dXJlXSBhbmQ8L3RkPjx0 ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBj bGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+ICAgImtp ZCIgaXMgZGVmaW5lZCBpbiBTZWN0aW9uIDQuMS40IG9mPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNz PSJyYmxvY2siPiAgICJleHAiIGlzIGRlZmluZWQgaW4gU2VjdGlvbiA0LjEuNCBvZiBbSS1ELmll dGYtb2F1dGgtanNvbi13ZWItdG9rZW5dLjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0i dG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9w Ij48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj4gICBbSS1ELmlldGYtam9zZS1qc29uLXdlYi1zaWdu YXR1cmVdIGFuZCAiZXhwIiBpcyBkZWZpbmVkIGluPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJy YmxvY2siPiAgIDxzcGFuIGNsYXNzPSJpbnNlcnQiPkEyNTZHQ01LVzwvc3Bhbj4gYW5kIG90aGVy IGF1dGhlbnRpY2F0ZWQgZW5jcnlwdGlvbiBhbGdvcml0aG1zIGFyZSBkZWZpbmVkPC90ZD48dGQg Y2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xh c3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPiAgIFNlY3Rp b24gNC4xLjQgb2YgW0ktRC5pZXRmLW9hdXRoLWpzb24td2ViLXRva2VuXS4gIDxzcGFuIGNsYXNz PSJkZWxldGUiPkEyNTZDQkMtSFM1MTI8L3NwYW4+IGFuZDwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFz cz0icmJsb2NrIj4gICBpbiA8c3BhbiBjbGFzcz0iaW5zZXJ0Ij5bSS1ELmlldGYtam9zZS1qc29u LXdlYi1hbGdvcml0aG1zXS4gIEEgU1RVTiBzZXJ2ZXIgYW5kPC9zcGFuPjwvdGQ+PHRkIGNsYXNz PSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJs aW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj4gICBvdGhlciBhdXRo ZW50aWNhdGVkIGVuY3J5cHRpb24gYWxnb3JpdGhtcyBhcmUgZGVmaW5lZCBpbjwvdGQ+PHRkPiA8 L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48c3BhbiBjbGFzcz0iaW5zZXJ0Ij4gICBhdXRob3JpemF0 aW9uIHNlcnZlciBpbXBsZW1lbnRhdGlvbiBNVVNUIHN1cHBvcnQgQTI1NkdDTUtXIGFzIHRoZTwv c3Bhbj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAg ICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9Imxi bG9jayI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPjxzcGFuIGNsYXNzPSJpbnNl cnQiPiAgIGF1dGhlbnRpY2F0ZWQgZW5jcnlwdGlvbiBhbGdvcml0aG0uPC9zcGFuPjwvdGQ+PHRk IGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNs YXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48L3RkPjx0 ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+PHNwYW4gY2xhc3M9Imluc2VydCI+PC9zcGFuPjwv dGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+ PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48 L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+PHNwYW4gY2xhc3M9Imluc2VydCI+ICAg SWYgQTI1NkNCQy1IUzUxMiBkZWZpbmVkIGluIFtJLUQuaWV0Zi1qb3NlLWpzb24td2ViLWFsZ29y aXRobXNdIGlzPC9zcGFuPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3Rk PjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0 ZCBjbGFzcz0ibGJsb2NrIj48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+PHNwYW4g Y2xhc3M9Imluc2VydCI+ICAgdXNlZCB0aGVuIHRoZSBBUy1SUyBhbmQgQVVUSCBrZXlzIGFyZSBk ZXJpdmVkIGZyb20gSyB1c2luZyB0aGU8L3NwYW4+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFs aWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWdu PSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0i cmJsb2NrIj48c3BhbiBjbGFzcz0iaW5zZXJ0Ij4gICBtZWNoYW5pc20gZXhwbGFpbmVkIGluIHNl Y3Rpb24gNS4yLjIuMSBvZjwvc3Bhbj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRv cCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+ PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIFtJLUQuaWV0Zi1qb3NlLWpzb24td2ViLWFsZ29yaXRo bXNdLiAgSW4gdGhpcyBjYXNlIEFTLVJTIGtleSBsZW5ndGg8L3RkPjx0ZD4gPC90ZD48dGQgY2xh c3M9InJpZ2h0Ij4gICBbSS1ELmlldGYtam9zZS1qc29uLXdlYi1hbGdvcml0aG1zXS4gIEluIHRo aXMgY2FzZSBBUy1SUyBrZXkgbGVuZ3RoPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0 b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3Ai PjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBtdXN0IGJlIDI1Ni1iaXQsIEFVVEgga2V5IGxlbmd0 aCBtdXN0IGJlIDI1Ni1iaXQgKHNlY3Rpb24gMi42IG9mPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNz PSJyaWdodCI+ICAgbXVzdCBiZSAyNTYtYml0LCBBVVRIIGtleSBsZW5ndGggbXVzdCBiZSAyNTYt Yml0IChzZWN0aW9uIDIuNiBvZjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48 L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3Rk Pjx0ZCBjbGFzcz0ibGVmdCI+ICAgW1JGQzQ4NjhdKS48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9 InJpZ2h0Ij4gICBbUkZDNDg2OF0pLjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9w Ij48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48 L3RkPjx0ZCBjbGFzcz0ibGVmdCI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+PC90 ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48 dGQ+PGEgbmFtZT0iZGlmZjAwMTQiPjwvYT48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNz PSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj40LjEuPHNwYW4g Y2xhc3M9ImRlbGV0ZSI+Mzwvc3Bhbj4uICBNYW51YWwgcHJvdmlzaW9uaW5nPC90ZD48dGQ+IDwv dGQ+PHRkIGNsYXNzPSJyYmxvY2siPjQuMS48c3BhbiBjbGFzcz0iaW5zZXJ0Ij4yPC9zcGFuPi4g IE1hbnVhbCBwcm92aXNpb25pbmc8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+ PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90 ZD48dGQgY2xhc3M9ImxlZnQiPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPjwvdGQ+ PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRk IGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgVGhl IFNUVU4gYW5kIEFTIHNlcnZlcnMgY291bGQgYmUgbWFudWFsbHkgY29uZmlndXJlZCB3aXRoIGEg c3ltbWV0cmljPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgVGhlIFNUVU4gYW5k IEFTIHNlcnZlcnMgY291bGQgYmUgbWFudWFsbHkgY29uZmlndXJlZCB3aXRoIGEgc3ltbWV0cmlj PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0 cj48dGQ+PGEgbmFtZT0iZGlmZjAwMTUiPjwvYT48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNs YXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj4gICBrZXkg PHNwYW4gY2xhc3M9ImRlbGV0ZSI+KEspIGFuZCBraWQuICBJZiBtYW51YWwgcHJvdmlzaW9uaW5n IGlzIHN1cHBvcnRlZCwgc3VwcG9ydCBNVVNUPC9zcGFuPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFz cz0icmJsb2NrIj4gICBrZXkgPHNwYW4gY2xhc3M9Imluc2VydCI+KEspLDwvc3Bhbj4gYXV0aGVu dGljYXRlZCBlbmNyeXB0aW9uIDxzcGFuIGNsYXNzPSJpbnNlcnQiPmFsZ29yaXRobSBhbmQga2lk Ljwvc3Bhbj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0K ICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9 ImxibG9jayI+PHNwYW4gY2xhc3M9ImRlbGV0ZSI+ICAgYWxzbyBiZSBwcm92aWRlZCBmb3IgQUVT XzI1Nl9DQkNfSE1BQ19TSEFfNTEyIChleHBsYWluZWQgaW48L3NwYW4+PC90ZD48dGQ+IDwvdGQ+ PHRkIGNsYXNzPSJyYmxvY2siPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48 L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3Rk Pjx0ZCBjbGFzcz0ibGJsb2NrIj48c3BhbiBjbGFzcz0iZGVsZXRlIj48L3NwYW4+PC90ZD48dGQ+ IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0i dG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9w Ij48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48c3BhbiBjbGFzcz0iZGVsZXRlIj4gICBbSS1ELmll dGYtam9zZS1qc29uLXdlYi1hbGdvcml0aG1zXSkgYXMgdGhlPC9zcGFuPiBhdXRoZW50aWNhdGVk IGVuY3J5cHRpb248L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+PC90ZD48dGQgY2xh c3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9 ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPiAgIDxzcGFuIGNs YXNzPSJkZWxldGUiPmFsZ29yaXRobS48L3NwYW4+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJy YmxvY2siPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQog ICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0i bGVmdCI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+PC90ZD48dGQgY2xhc3M9Imxp bmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQ+PGEgbmFtZT0iZGlm ZjAwMTYiPjwvYT48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGln bj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj4gICBOb3RlIDogVGhlIG1lY2hhbmlzbSBz cGVjaWZpZWQgaW4gU2VjdGlvbiA8c3BhbiBjbGFzcz0iZGVsZXRlIj40LjEuMzwvc3Bhbj4gY29t cGFyZWQgdG8gPHNwYW4gY2xhc3M9ImRlbGV0ZSI+RFNLUFAgYW5kPC9zcGFuPjwvdGQ+PHRkPiA8 L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj4gICBOb3RlIDogVGhlIG1lY2hhbmlzbSBzcGVjaWZpZWQg aW4gU2VjdGlvbiA8c3BhbiBjbGFzcz0iaW5zZXJ0Ij40LjEuMjwvc3Bhbj4gY29tcGFyZWQgdG8g UkVTVDwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAg ICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJs b2NrIj4gICBSRVNUIGxhY2tzIGVuY3J5cHRpb24gYW5kIEhNQUMgYWxnb3JpdGhtIGFnaWxpdHku PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPiAgIGxhY2tzIGVuY3J5cHRpb24gYW5k IEhNQUMgYWxnb3JpdGhtIGFnaWxpdHkuICA8c3BhbiBjbGFzcz0iaW5zZXJ0Ij5IZW5jZSBhIFNU VU4gc2VydmVyIGFuZDwvc3Bhbj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+ PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90 ZD48dGQgY2xhc3M9ImxibG9jayI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPjxz cGFuIGNsYXNzPSJpbnNlcnQiPiAgIGF1dGhvcml6YXRpb24gc2VydmVyIGltcGxlbWVudGF0aW9u IFNIT1VMRCBzdXBwb3J0IFJFU1QgZXhwbGFpbmVkIGluPC9zcGFuPjwvdGQ+PHRkIGNsYXNzPSJs aW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5l bm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48L3RkPjx0ZD4gPC90ZD48 dGQgY2xhc3M9InJibG9jayI+PHNwYW4gY2xhc3M9Imluc2VydCI+ICAgU2VjdGlvbiA0LjEuMS48 L3NwYW4+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAg ICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJs ZWZ0Ij48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij48L3RkPjx0ZCBjbGFzcz0ibGlu ZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5v IiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPjUuICBGb3JtaW5nIGEgUmVxdWVz dDwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPjUuICBGb3JtaW5nIGEgUmVxdWVzdDwv dGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+ PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+PC90 ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFs aWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWdu PSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBXaGVuIGEgU1RVTiBzZXJ2ZXIgcmVzcG9u ZHMgdGhhdCB0aGlyZCBwYXJ0eSBhdXRob3JpemF0aW9uIGlzPC90ZD48dGQ+IDwvdGQ+PHRkIGNs YXNzPSJyaWdodCI+ICAgV2hlbiBhIFNUVU4gc2VydmVyIHJlc3BvbmRzIHRoYXQgdGhpcmQgcGFy dHkgYXV0aG9yaXphdGlvbiBpczwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48 L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3Rk Pjx0ZCBjbGFzcz0ibGVmdCI+ICAgcmVxdWlyZWQsIGEgU1RVTiBjbGllbnQgcmUtYXR0ZW1wdHMg dGhlIHJlcXVlc3QsIHRoaXMgdGltZSBpbmNsdWRpbmc8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9 InJpZ2h0Ij4gICByZXF1aXJlZCwgYSBTVFVOIGNsaWVudCByZS1hdHRlbXB0cyB0aGUgcmVxdWVz dCwgdGhpcyB0aW1lIGluY2x1ZGluZzwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9w Ij48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48 L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgYWNjZXNzIHRva2VuIGFuZCBraWQgdmFsdWVzIGluIEFD Q0VTUy1UT0tFTiBhbmQgVVNFUk5BTUUgU1RVTjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmln aHQiPiAgIGFjY2VzcyB0b2tlbiBhbmQga2lkIHZhbHVlcyBpbiBBQ0NFU1MtVE9LRU4gYW5kIFVT RVJOQU1FIFNUVU48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3Ry Pg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xh c3M9ImxlZnQiPiAgIGF0dHJpYnV0ZXMuICBUaGUgU1RVTiBjbGllbnQgaW5jbHVkZXMgYSBNRVNT QUdFLUlOVEVHUklUWSBhdHRyaWJ1dGU8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4g ICBhdHRyaWJ1dGVzLiAgVGhlIFNUVU4gY2xpZW50IGluY2x1ZGVzIGEgTUVTU0FHRS1JTlRFR1JJ VFkgYXR0cmlidXRlPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90 cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNs YXNzPSJsZWZ0Ij4gICBhcyB0aGUgbGFzdCBhdHRyaWJ1dGUgaW4gdGhlIG1lc3NhZ2Ugb3ZlciB0 aGUgY29udGVudHMgb2YgdGhlIFNUVU48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4g ICBhcyB0aGUgbGFzdCBhdHRyaWJ1dGUgaW4gdGhlIG1lc3NhZ2Ugb3ZlciB0aGUgY29udGVudHMg b2YgdGhlIFNUVU48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3Ry Pg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xh c3M9ImxlZnQiPiAgIG1lc3NhZ2UuICBUaGUgSE1BQyBmb3IgdGhlIE1FU1NBR0UtSU5URUdSSVRZ IGF0dHJpYnV0ZSBpcyBjb21wdXRlZCBhczwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQi PiAgIG1lc3NhZ2UuICBUaGUgSE1BQyBmb3IgdGhlIE1FU1NBR0UtSU5URUdSSVRZIGF0dHJpYnV0 ZSBpcyBjb21wdXRlZCBhczwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3Rk PjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0 ZCBjbGFzcz0ibGVmdCI+ICAgZGVzY3JpYmVkIGluIHNlY3Rpb24gMTUuNCBvZiBbUkZDNTM4OV0g d2hlcmUgdGhlIG1hY19rZXkgaXMgdXNlZCBhczwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmln aHQiPiAgIGRlc2NyaWJlZCBpbiBzZWN0aW9uIDE1LjQgb2YgW1JGQzUzODldIHdoZXJlIHRoZSBt YWNfa2V5IGlzIHVzZWQgYXM8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90 ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVm dCI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+PC90ZD48dGQgY2xhc3M9ImxpbmVu byI+PC90ZD48L3RyPg0KICAgICAgPHRyIGJnY29sb3I9ImdyYXkiPjx0ZD48L3RkPjx0aD48YSBu YW1lPSJwYXJ0LWw2Ij48c21hbGw+c2tpcHBpbmcgdG8gY2hhbmdlIGF0PC9zbWFsbD48ZW0+IHBh Z2UgOCwgbGluZSAxMDwvZW0+PC9hPjwvdGg+PHRoPiA8L3RoPjx0aD48YSBuYW1lPSJwYXJ0LXI2 Ij48c21hbGw+c2tpcHBpbmcgdG8gY2hhbmdlIGF0PC9zbWFsbD48ZW0+IHBhZ2UgOCwgbGluZSAx OTwvZW0+PC9hPjwvdGg+PHRkPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVu byIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBpZiBwYXRoIE1UVSBpcyB1 bmtub3duIHRoZW4gU1RVTiBtZXNzYWdlcyBvdmVyIElQdjQgd291bGQgbmVlZCB0byBiZTwvdGQ+ PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIGlmIHBhdGggTVRVIGlzIHVua25vd24gdGhl biBTVFVOIG1lc3NhZ2VzIG92ZXIgSVB2NCB3b3VsZCBuZWVkIHRvIGJlPC90ZD48dGQgY2xhc3M9 ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9Imxp bmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBsZXNzIHRoYW4gNTQ4 IGJ5dGVzIChTZWN0aW9uIDcuMSBvZiBbUkZDNTM4OV0pLiAgVGhlIGFjY2VzcyB0b2tlbjwvdGQ+ PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIGxlc3MgdGhhbiA1NDggYnl0ZXMgKFNlY3Rp b24gNy4xIG9mIFtSRkM1Mzg5XSkuICBUaGUgYWNjZXNzIHRva2VuPC90ZD48dGQgY2xhc3M9Imxp bmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVu byIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBsZW5ndGggbmVlZHMgdG8g YmUgcmVzdHJpY3RlZCB0byBmaXQgd2l0aGluIHRoZSBtYXhpbXVtIFNUVU4gbWVzc2FnZTwvdGQ+ PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIGxlbmd0aCBuZWVkcyB0byBiZSByZXN0cmlj dGVkIHRvIGZpdCB3aXRoaW4gdGhlIG1heGltdW0gU1RVTiBtZXNzYWdlPC90ZD48dGQgY2xhc3M9 ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9Imxp bmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBzaXplLiAgTm90ZSB0 aGF0IHRoZSBzZWxmLWNvbnRhaW5lZCB0b2tlbiBpcyBvcGFxdWUgdG8gdGhlIGNsaWVudCBhbmQ8 L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBzaXplLiAgTm90ZSB0aGF0IHRoZSBz ZWxmLWNvbnRhaW5lZCB0b2tlbiBpcyBvcGFxdWUgdG8gdGhlIGNsaWVudCBhbmQ8L3RkPjx0ZCBj bGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFz cz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIHRoZSBjbGll bnQgTVVTVCBOT1QgZXhhbWluZSB0aGUgdG9rZW4uICBUaGUgQUNDRVNTLVRPS0VOIGF0dHJpYnV0 ZSBpczwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIHRoZSBjbGllbnQgTVVTVCBO T1QgZXhhbWluZSB0aGUgdG9rZW4uICBUaGUgQUNDRVNTLVRPS0VOIGF0dHJpYnV0ZSBpczwvdGQ+ PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRk IGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgYSBj b21wcmVoZW5zaW9uLXJlcXVpcmVkIGF0dHJpYnV0ZSAoc2VlIFNlY3Rpb24gMTUgZnJvbSBbUkZD NTM4OV0pLjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIGEgY29tcHJlaGVuc2lv bi1yZXF1aXJlZCBhdHRyaWJ1dGUgKHNlZSBTZWN0aW9uIDE1IGZyb20gW1JGQzUzODldKS48L3Rk Pjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0 ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPjwvdGQ+ PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGln bj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0i dG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgVGhlIHRva2VuIGlzIHN0cnVjdHVyZWQgYXMg Zm9sbG93czo8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBUaGUgdG9rZW4gaXMg c3RydWN0dXJlZCBhcyBmb2xsb3dzOjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9w Ij48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48 L3RkPjx0ZCBjbGFzcz0ibGVmdCI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+PC90 ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48 dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICAg ICAgICBzdHJ1Y3QgezwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgICAgICAgIHN0 cnVjdCB7PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAg ICAgIDx0cj48dGQ+PGEgbmFtZT0iZGlmZjAwMTciPjwvYT48L3RkPjwvdHI+DQogICAgICA8dHI+ PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48 L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+ICAgICAgICAgICAgIDxzcGFuIGNsYXNz PSJpbnNlcnQiPnVpbnQxNl90IG5vbmNlX2xlbmd0aDs8L3NwYW4+PC90ZD48dGQgY2xhc3M9Imxp bmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVu byIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPjwvdGQ+PHRkPiA8L3RkPjx0 ZCBjbGFzcz0icmJsb2NrIj48c3BhbiBjbGFzcz0iaW5zZXJ0Ij4gICAgICAgICAgICAgb3BhcXVl ICBub25jZVtub25jZV9sZW5ndGhdOzwvc3Bhbj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxp Z249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249 InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgICAgICAgICAgICBvcGFxdWUgezwvdGQ+PHRk PiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgICAgICAgICAgICBvcGFxdWUgezwvdGQ+PHRkIGNs YXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNz PSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgICAgICAgICAg ICAgICB1aW50MTZfdCBrZXlfbGVuZ3RoOzwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQi PiAgICAgICAgICAgICAgICAgdWludDE2X3Qga2V5X2xlbmd0aDs8L3RkPjx0ZCBjbGFzcz0ibGlu ZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5v IiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgICAgICAgICAgICAgICAgb3Bh cXVlIG1hY19rZXlba2V5X2xlbmd0aF07PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ ICAgICAgICAgICAgICAgICBvcGFxdWUgbWFjX2tleVtrZXlfbGVuZ3RoXTs8L3RkPjx0ZCBjbGFz cz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0i bGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgICAgICAgICAgICAg ICAgdWludDY0X3QgdGltZXN0YW1wOzwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAg ICAgICAgICAgICAgICAgdWludDY0X3QgdGltZXN0YW1wOzwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8i IHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZh bGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgICAgICAgICAgICAgICB1aW50MzJf dCBsaWZldGltZTs8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICAgICAgICAgICAg ICAgIHVpbnQzMl90IGxpZmV0aW1lOzwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9w Ij48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkPjxhIG5hbWU9ImRpZmYwMDE4Ij48L2E+PC90ZD48 L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQg Y2xhc3M9ImxibG9jayI+ICAgICAgICAgICAgICAgICA8c3BhbiBjbGFzcz0iZGVsZXRlIj51aW50 OF90ICBwYWRkaW5nX2xlbmd0aDs8L3NwYW4+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxv Y2siPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAg ICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJs b2NrIj48c3BhbiBjbGFzcz0iZGVsZXRlIj4gICAgICAgICAgICAgICAgIHVpbnQ4X3QgcGFkZGlu Z1twYWRkaW5nX2xlbmd0aF07PC9zcGFuPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2Nr Ij48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAg PHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQi PiAgICAgICAgICAgICB9IGVuY3J5cHRlZF9ibG9jazs8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9 InJpZ2h0Ij4gICAgICAgICAgICAgfSBlbmNyeXB0ZWRfYmxvY2s7PC90ZD48dGQgY2xhc3M9Imxp bmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQ+PGEgbmFtZT0iZGlm ZjAwMTkiPjwvYT48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGln bj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj4gICAgICAgICAgICAgPHNwYW4gY2xhc3M9 ImRlbGV0ZSI+b3BhcXVlIG1hY1ttYWNfbGVuZ3RoXTs8L3NwYW4+PC90ZD48dGQ+IDwvdGQ+PHRk IGNsYXNzPSJyYmxvY2siPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3Rk PjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0 ZCBjbGFzcz0ibGJsb2NrIj48c3BhbiBjbGFzcz0iZGVsZXRlIj4gICAgICAgICAgICAgdWludDhf dCBtYWNfbGVuZ3RoOzwvc3Bhbj48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+PC90 ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48 dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICAg ICAgICB9IHRva2VuOzwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgICAgICAgIH0g dG9rZW47PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAg ICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJs ZWZ0Ij48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij48L3RkPjx0ZCBjbGFzcz0ibGlu ZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5v IiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgICAgICAgICAgICAgICAgICBG aWd1cmUgMTogU2VsZi1jb250YWluZWQgdG9rZW4gZm9ybWF0PC90ZD48dGQ+IDwvdGQ+PHRkIGNs YXNzPSJyaWdodCI+ICAgICAgICAgICAgICAgICAgIEZpZ3VyZSAxOiBTZWxmLWNvbnRhaW5lZCB0 b2tlbiBmb3JtYXQ8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3Ry Pg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xh c3M9ImxlZnQiPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPjwvdGQ+PHRkIGNsYXNz PSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJs aW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgTm90ZTogdWludE5f dCBtZWFucyBhbiB1bnNpZ25lZCBpbnRlZ2VyIG9mIGV4YWN0bHkgTiBiaXRzLiAgU2luZ2xlLTwv dGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIE5vdGU6IHVpbnROX3QgbWVhbnMgYW4g dW5zaWduZWQgaW50ZWdlciBvZiBleGFjdGx5IE4gYml0cy4gIFNpbmdsZS08L3RkPjx0ZCBjbGFz cz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0i bGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIGJ5dGUgZW50aXRp ZXMgY29udGFpbmluZyB1bmludGVycHJldGVkIGRhdGEgYXJlIG9mIHR5cGUgb3BhcXVlLiAgQWxs PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgYnl0ZSBlbnRpdGllcyBjb250YWlu aW5nIHVuaW50ZXJwcmV0ZWQgZGF0YSBhcmUgb2YgdHlwZSBvcGFxdWUuICBBbGw8L3RkPjx0ZCBj bGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFz cz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIHZhbHVlcyBp biB0aGUgdG9rZW4gYXJlIHN0b3JlZCBpbiBuZXR3b3JrIGJ5dGUgb3JkZXIuPC90ZD48dGQ+IDwv dGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgdmFsdWVzIGluIHRoZSB0b2tlbiBhcmUgc3RvcmVkIGlu IG5ldHdvcmsgYnl0ZSBvcmRlci48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+ PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90 ZD48dGQgY2xhc3M9ImxlZnQiPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPjwvdGQ+ PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRk PjxhIG5hbWU9ImRpZmYwMDIwIj48L2E+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0i bGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+PC90ZD48dGQ+IDwv dGQ+PHRkIGNsYXNzPSJyYmxvY2siPiAgIDxzcGFuIGNsYXNzPSJpbnNlcnQiPlRoZSBhc3NvY2lh dGVkIGRhdGEgKEEpIE1VU1QgYmUgdGhlIFNUVU4gc2VydmVyIG5hbWUuICBUaGlzIGVuc3VyZXM8 L3NwYW4+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAg ICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJs YmxvY2siPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48c3BhbiBjbGFzcz0iaW5z ZXJ0Ij4gICB0aGF0IHRoZSBjbGllbnQgZG9lcyBub3QgdXNlIHRoZSBzYW1lIHRva2VuIHRvIGdh aW4gaWxsZWdhbCBhY2Nlc3MgdG88L3NwYW4+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWdu PSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0 b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJs b2NrIj48c3BhbiBjbGFzcz0iaW5zZXJ0Ij4gICBvdGhlciBTVFVOIHNlcnZlcnMgcHJvdmlkZWQg YnkgdGhlIHNhbWUgYWRtaW5pc3RyYXRpdmUgZG9tYWluIGkuZS4sPC9zcGFuPjwvdGQ+PHRkIGNs YXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNz PSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48L3RkPjx0ZD4g PC90ZD48dGQgY2xhc3M9InJibG9jayI+PHNwYW4gY2xhc3M9Imluc2VydCI+ICAgd2hlbiBtdWx0 aXBsZSBTVFVOIHNlcnZlcnMgaW4gYSBzaW5nbGUgYWRtaW5pc3RyYXRpdmUgZG9tYWluIHNoYXJl PC9zcGFuPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQog ICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0i bGJsb2NrIj48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+PHNwYW4gY2xhc3M9Imlu c2VydCI+ICAgdGhlIHNhbWUgc3ltbWV0cmljIGtleSB3aXRoIGFuIGF1dGhvcml6YXRpb24gc2Vy dmVyLjwvc3Bhbj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3Ry Pg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xh c3M9ImxibG9jayI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPiAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICA8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAg ICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9Imxl ZnQiPiAgIFRoZSBmaWVsZHMgYXJlIGRlc2NyaWJlZCBiZWxvdzo8L3RkPjx0ZD4gPC90ZD48dGQg Y2xhc3M9InJpZ2h0Ij4gICBUaGUgZmllbGRzIGFyZSBkZXNjcmliZWQgYmVsb3c6PC90ZD48dGQg Y2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xh c3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij48L3RkPjx0ZD4g PC90ZD48dGQgY2xhc3M9InJpZ2h0Ij48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRv cCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZD48YSBuYW1lPSJkaWZmMDAyMSI+PC9hPjwvdGQ+ PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRk IGNsYXNzPSJsYmxvY2siPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj4gICA8c3Bh biBjbGFzcz0iaW5zZXJ0Ij5ub25jZV9sZW5ndGg6ICBMZW5ndGggb2YgdGhlIG5vbmNlIGZpZWxk LiAgVGhlIGxlbmd0aCBvZiBub25jZSBmb3I8L3NwYW4+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIg dmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFs aWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFz cz0icmJsb2NrIj48c3BhbiBjbGFzcz0iaW5zZXJ0Ij4gICAgICBhdXRoZW50aWNhdGVkIGVuY3J5 cHRpb24gd2l0aCBhZGRpdGlvbmFsIGRhdGEgKEFFQUQpIGFsZ29yaXRobXMgaXM8L3NwYW4+PC90 ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48 dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPjwv dGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48c3BhbiBjbGFzcz0iaW5zZXJ0Ij4gICAg ICBleHBsYWluZWQgaW4gW1JGQzUxMTZdLjwvc3Bhbj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2 YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxp Z249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNz PSJyYmxvY2siPjxzcGFuIGNsYXNzPSJpbnNlcnQiPjwvc3Bhbj48L3RkPjx0ZCBjbGFzcz0ibGlu ZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5v IiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+PC90ZD48dGQ+IDwvdGQ+PHRk IGNsYXNzPSJyYmxvY2siPjxzcGFuIGNsYXNzPSJpbnNlcnQiPiAgIE5vbmNlOiAgTm9uY2UgZm9y bWF0aW9uIGlzIGV4cGxhaW5lZCBpbiBzZWN0aW9uIDMuMiBvZiBbUkZDNTExNl0uPC9zcGFuPjwv dGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+ PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48 L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+ICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIDwvdGQ+PHRk IGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNs YXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAga2V5X2xl bmd0aDogIExlbmd0aCBvZiB0aGUgc2Vzc2lvbiBrZXkgaW4gb2N0ZXRzLiAgS2V5IGxlbmd0aCBv ZjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIGtleV9sZW5ndGg6ICBMZW5ndGgg b2YgdGhlIHNlc3Npb24ga2V5IGluIG9jdGV0cy4gIEtleSBsZW5ndGggb2Y8L3RkPjx0ZCBjbGFz cz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0i bGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgICAgIDE2MC1iaXRz IE1VU1QgYmUgc3VwcG9ydGVkIChpLmUuLCBvbmx5IDE2MC1iaXQga2V5IGlzIHVzZWQgYnk8L3Rk Pjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICAgICAxNjAtYml0cyBNVVNUIGJlIHN1cHBv cnRlZCAoaS5lLiwgb25seSAxNjAtYml0IGtleSBpcyB1c2VkIGJ5PC90ZD48dGQgY2xhc3M9Imxp bmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVu byIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICAgICBITUFDLVNIQS0xIGZv ciBtZXNzYWdlIGludGVncml0eSBvZiBTVFVOIG1lc3NhZ2UpLiAgVGhlIGtleSBsZW5ndGg8L3Rk Pjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICAgICBITUFDLVNIQS0xIGZvciBtZXNzYWdl IGludGVncml0eSBvZiBTVFVOIG1lc3NhZ2UpLiAgVGhlIGtleSBsZW5ndGg8L3RkPjx0ZCBjbGFz cz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0i bGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgICAgIGZhY2lsaXRh dGVzIHRoZSBoYXNoIGFnaWxpdHkgcGxhbiBkaXNjdXNzZWQgaW4gc2VjdGlvbiAxNi4zIG9mPC90 ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgICAgZmFjaWxpdGF0ZXMgdGhlIGhhc2gg YWdpbGl0eSBwbGFuIGRpc2N1c3NlZCBpbiBzZWN0aW9uIDE2LjMgb2Y8L3RkPjx0ZCBjbGFzcz0i bGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGlu ZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgICAgIFtSRkM1Mzg5XS48 L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICAgICBbUkZDNTM4OV0uPC90ZD48dGQg Y2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xh c3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij48L3RkPjx0ZD4g PC90ZD48dGQgY2xhc3M9InJpZ2h0Ij48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRv cCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+ PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIG1hY19rZXk6ICBUaGUgc2Vzc2lvbiBrZXkgZ2VuZXJh dGVkIGJ5IHRoZSBhdXRob3JpemF0aW9uIHNlcnZlci48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9 InJpZ2h0Ij4gICBtYWNfa2V5OiAgVGhlIHNlc3Npb24ga2V5IGdlbmVyYXRlZCBieSB0aGUgYXV0 aG9yaXphdGlvbiBzZXJ2ZXIuPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwv dGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+ PHRkIGNsYXNzPSJsZWZ0Ij48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij48L3RkPjx0 ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBj bGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIHRpbWVz dGFtcDogIDY0LWJpdCB1bnNpZ25lZCBpbnRlZ2VyIGZpZWxkIGNvbnRhaW5pbmcgYSB0aW1lc3Rh bXAuPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgdGltZXN0YW1wOiAgNjQtYml0 IHVuc2lnbmVkIGludGVnZXIgZmllbGQgY29udGFpbmluZyBhIHRpbWVzdGFtcC48L3RkPjx0ZCBj bGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFz cz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgICAgIFRoZSB2 YWx1ZSBpbmRpY2F0ZXMgdGhlIHRpbWUgc2luY2UgSmFudWFyeSAxLCAxOTcwLCAwMDowMCBVVEMs IGJ5PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgICAgVGhlIHZhbHVlIGluZGlj YXRlcyB0aGUgdGltZSBzaW5jZSBKYW51YXJ5IDEsIDE5NzAsIDAwOjAwIFVUQywgYnk8L3RkPjx0 ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBj bGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNs YXNzPSJyaWdodCI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPg0KICAgICAgPHRy IGJnY29sb3I9ImdyYXkiPjx0ZD48L3RkPjx0aD48YSBuYW1lPSJwYXJ0LWw3Ij48c21hbGw+c2tp cHBpbmcgdG8gY2hhbmdlIGF0PC9zbWFsbD48ZW0+IHBhZ2UgOSwgbGluZSA1PC9lbT48L2E+PC90 aD48dGg+IDwvdGg+PHRoPjxhIG5hbWU9InBhcnQtcjciPjxzbWFsbD5za2lwcGluZyB0byBjaGFu Z2UgYXQ8L3NtYWxsPjxlbT4gcGFnZSA5LCBsaW5lIDIzPC9lbT48L2E+PC90aD48dGQ+PC90ZD48 L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQg Y2xhc3M9ImxlZnQiPiAgICAgIHJlbWFpbmluZyAxNiBiaXRzIGluZGljYXRlIHRoZSBudW1iZXIg b2YgMS82NEsgZnJhY3Rpb25zIG9mIGE8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4g ICAgICByZW1haW5pbmcgMTYgYml0cyBpbmRpY2F0ZSB0aGUgbnVtYmVyIG9mIDEvNjRLIGZyYWN0 aW9ucyBvZiBhPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4N CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNz PSJsZWZ0Ij4gICAgICBzZWNvbmQgKE5hdGl2ZSBmb3JtYXQgLSBVbml4KS48L3RkPjx0ZD4gPC90 ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICAgICBzZWNvbmQgKE5hdGl2ZSBmb3JtYXQgLSBVbml4KS48 L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRy Pjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPjwv dGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZh bGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGln bj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgbGlmZXRpbWU6ICBUaGUgbGlmZXRpbWUg b2YgdGhlIGFjY2VzcyB0b2tlbiwgaW4gc2Vjb25kcy4gIEZvcjwvdGQ+PHRkPiA8L3RkPjx0ZCBj bGFzcz0icmlnaHQiPiAgIGxpZmV0aW1lOiAgVGhlIGxpZmV0aW1lIG9mIHRoZSBhY2Nlc3MgdG9r ZW4sIGluIHNlY29uZHMuICBGb3I8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+ PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90 ZD48dGQgY2xhc3M9ImxlZnQiPiAgICAgIGV4YW1wbGUsIHRoZSB2YWx1ZSAzNjAwIGluZGljYXRl cyBvbmUgaG91ci4gIFRoZSBsaWZldGltZSB2YWx1ZTwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0i cmlnaHQiPiAgICAgIGV4YW1wbGUsIHRoZSB2YWx1ZSAzNjAwIGluZGljYXRlcyBvbmUgaG91ci4g IFRoZSBsaWZldGltZSB2YWx1ZTwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48 L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3Rk Pjx0ZCBjbGFzcz0ibGVmdCI+ICAgICAgTVVTVCBiZSBncmVhdGVyIHRoYW4gb3IgZXF1YWwgdG8g dGhlICJleHBpcmVzX2luIiBwYXJhbWV0ZXI8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0 Ij4gICAgICBNVVNUIGJlIGdyZWF0ZXIgdGhhbiBvciBlcXVhbCB0byB0aGUgImV4cGlyZXNfaW4i IHBhcmFtZXRlcjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+ DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFz cz0ibGVmdCI+ICAgICAgZGVmaW5lZCBpbiBzZWN0aW9uIDQuMi4yIG9mIFtSRkM2NzQ5XSwgb3Ro ZXJ3aXNlIHJlc291cmNlIHNlcnZlcjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAg ICAgIGRlZmluZWQgaW4gc2VjdGlvbiA0LjIuMiBvZiBbUkZDNjc0OV0sIG90aGVyd2lzZSByZXNv dXJjZSBzZXJ2ZXI8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3Ry Pg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xh c3M9ImxlZnQiPiAgICAgIGNvdWxkIHJldm9rZSB0aGUgdG9rZW4gYnV0IHRoZSBjbGllbnQgd291 bGQgYXNzdW1lIHRoYXQgdGhlIHRva2VuPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ ICAgICAgY291bGQgcmV2b2tlIHRoZSB0b2tlbiBidXQgdGhlIGNsaWVudCB3b3VsZCBhc3N1bWUg dGhhdCB0aGUgdG9rZW48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48 L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQg Y2xhc3M9ImxlZnQiPiAgICAgIGhhcyBub3QgZXhwaXJlZCBhbmQgd291bGQgbm90IHJlZnJlc2gg dGhlIHRva2VuLjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgICAgIGhhcyBub3Qg ZXhwaXJlZCBhbmQgd291bGQgbm90IHJlZnJlc2ggdGhlIHRva2VuLjwvdGQ+PHRkIGNsYXNzPSJs aW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5l bm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+PC90ZD48dGQ+IDwvdGQ+PHRk IGNsYXNzPSJyaWdodCI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+ PC90cj4NCiAgICAgIDx0cj48dGQ+PGEgbmFtZT0iZGlmZjAwMjIiPjwvYT48L3RkPjwvdHI+DQog ICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0i bGJsb2NrIj4gICA8c3BhbiBjbGFzcz0iZGVsZXRlIj5wYWRkaW5nX2xlbmd0aDo8L3NwYW4+ICBU aGUgPHNwYW4gY2xhc3M9ImRlbGV0ZSI+cGFkZGluZyBsZW5ndGggTVVTVCBiZSBzdWNoIHRoYXQg dGhlIHRvdGFsIHNpemU8L3NwYW4+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPiAg IDxzcGFuIGNsYXNzPSJpbnNlcnQiPmVuY3J5cHRlZF9ibG9jazo8L3NwYW4+ICBUaGUgZW5jcnlw dGVkX2Jsb2NrIGlzIDxzcGFuIGNsYXNzPSJpbnNlcnQiPmVuY3J5cHRlZCBhbmQgYXV0aGVudGlj YXRlZDwvc3Bhbj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3Ry Pg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xh c3M9ImxibG9jayI+PHNwYW4gY2xhc3M9ImRlbGV0ZSI+ICAgICAgb2YgdGhlPC9zcGFuPiBlbmNy eXB0ZWRfYmxvY2sgPHNwYW4gY2xhc3M9ImRlbGV0ZSI+c3RydWN0dXJlIGlzIGEgbXVsdGlwbGUg b2YgdGhlIGNpcGhlcidzPC9zcGFuPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48 c3BhbiBjbGFzcz0iaW5zZXJ0Ij4gICAgICB1c2luZyB0aGUgc3ltbWV0cmljIGxvbmctdGVybSBr ZXkgZXN0YWJsaXNoZWQgYmV0d2VlbiB0aGUgU1RVTjwvc3Bhbj48L3RkPjx0ZCBjbGFzcz0ibGlu ZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5v IiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+PHNwYW4gY2xhc3M9ImRlbGV0 ZSI+ICAgICAgYmxvY2sgbGVuZ3RoLjwvc3Bhbj48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJi bG9jayI+PHNwYW4gY2xhc3M9Imluc2VydCI+ICAgICAgc2VydmVyIGFuZDwvc3Bhbj4gdGhlIDxz cGFuIGNsYXNzPSJpbnNlcnQiPmF1dGhvcml6YXRpb24gc2VydmVyLjwvc3Bhbj48L3RkPjx0ZCBj bGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFz cz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+PHNwYW4gY2xh c3M9ImRlbGV0ZSI+PC9zcGFuPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48L3Rk Pjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0 ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+PHNw YW4gY2xhc3M9ImRlbGV0ZSI+ICAgcGFkZGluZzogIFBhZGRpbmcgdGhhdDwvc3Bhbj4gaXMgPHNw YW4gY2xhc3M9ImRlbGV0ZSI+YWRkZWQgdG8gZm9yY2UgdGhlIGxlbmd0aCBvZiB0aGUgcGxhaW50 ZXh0PC9zcGFuPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48L3RkPjx0ZCBjbGFz cz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0i bGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+PHNwYW4gY2xhc3M9 ImRlbGV0ZSI+ICAgICAgdG8gYmUgYW4gaW50ZWdyYWwgbXVsdGlwbGUgb2Y8L3NwYW4+IHRoZSA8 c3BhbiBjbGFzcz0iZGVsZXRlIj5ibG9jayBjaXBoZXIncyBibG9jayBsZW5ndGguPC9zcGFuPjwv dGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2 YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxp Z249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0i cmlnaHQiPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQog ICAgICA8dHI+PHRkPjxhIG5hbWU9ImRpZmYwMDIzIj48L2E+PC90ZD48L3RyPg0KICAgICAgPHRy Pjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+ ICAgPHNwYW4gY2xhc3M9ImRlbGV0ZSI+ZW5jcnlwdGVkX2Jsb2NrOjwvc3Bhbj4gIFRoZSA8c3Bh biBjbGFzcz0iZGVsZXRlIj5lbmNyeXB0ZWRfYmxvY2sgaXMgZW5jcnlwdGVkIHVzaW5nIHRoZTwv c3Bhbj48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+ICAgVGhlIDxzcGFuIGNsYXNz PSJpbnNlcnQiPmF1dGhlbnRpY2F0ZWQgZW5jcnlwdGlvbiBvcGVyYXRpb24gaGFzIGZvdXIgaW5w dXRzOiBLICwgTiwgQSw8L3NwYW4+IGFuZDwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0i dG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9w Ij48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48c3BhbiBjbGFzcz0iZGVsZXRlIj4gICAgICBzeW1t ZXRyaWMgbG9uZy10ZXJtIGtleSBlc3RhYmxpc2hlZCBiZXR3ZWVuIHRoZSBTVFVOIHNlcnZlcjwv c3Bhbj4gYW5kPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPiAgIDxzcGFuIGNsYXNz PSJpbnNlcnQiPlAgKGVuY3J5cHRlZF9ibG9jayksPC9zcGFuPiBhcyA8c3BhbiBjbGFzcz0iaW5z ZXJ0Ij5kZWZpbmVkIGluIHNlY3Rpb24gMi4xIG9mIFtSRkM1MTE2XSBhbmQgdGhlcmU8L3NwYW4+ PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0 cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2si PiAgICAgIDxzcGFuIGNsYXNzPSJkZWxldGUiPnRoZSBhdXRob3JpemF0aW9uIHNlcnZlci4gIFNo b3duIGluIEZpZ3VyZSAzPC9zcGFuPiBhcyA8c3BhbiBjbGFzcz0iZGVsZXRlIj5BUy1SUyBrZXku PC9zcGFuPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48c3BhbiBjbGFzcz0iaW5z ZXJ0Ij4gICBpcyBhIHNpbmdsZSBvdXRwdXQgYSBjaXBoZXJ0ZXh0IEMgb3IgYW4gaW5kaWNhdGlv biB0aGF0IHRoZSByZXF1ZXN0ZWQ8L3NwYW4+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWdu PSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0 b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJs b2NrIj48c3BhbiBjbGFzcz0iaW5zZXJ0Ij4gICBlbmNyeXB0aW9uIG9wZXJhdGlvbiBjb3VsZCBu b3QgYmUgcGVyZm9ybWVkLjwvc3Bhbj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRv cCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+ PC90ZD48dGQgY2xhc3M9ImxlZnQiPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPjwv dGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+ PHRkPjxhIG5hbWU9ImRpZmYwMDI0Ij48L2E+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFz cz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+ICAgPHNwYW4g Y2xhc3M9ImRlbGV0ZSI+bWFjOiAgVGhlIEhhc2hlZCBNZXNzYWdlIEF1dGhlbnRpY2F0aW9uIENv ZGUgKEhNQUMpIGlzIGNhbGN1bGF0ZWQ8L3NwYW4+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJy YmxvY2siPiAgIDxzcGFuIGNsYXNzPSJpbnNlcnQiPkVuY3J5cHRpb24gcHJvY2Vzczwvc3Bhbj4g d2l0aCA8c3BhbiBjbGFzcz0iaW5zZXJ0Ij5BRVNfQ0JDX0hNQUNfU0hBMiAoZXhwbGFpbmVkIGlu IHNlY3Rpb24gMi4xPC9zcGFuPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48 L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3Rk Pjx0ZCBjbGFzcz0ibGJsb2NrIj4gICAgICB3aXRoIHRoZSA8c3BhbiBjbGFzcz0iZGVsZXRlIj5B VVRIIGtleSBvdmVyPC9zcGFuPiB0aGUgPHNwYW4gY2xhc3M9ImRlbGV0ZSI+J2VuY3J5cHRlZF9i bG9jayc8L3NwYW4+IGFuZCA8c3BhbiBjbGFzcz0iZGVsZXRlIj50aGU8L3NwYW4+IFNUVU4gc2Vy dmVyPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPjxzcGFuIGNsYXNzPSJpbnNlcnQi PiAgIG9mIFtJLUQubWNncmV3LWFlYWQtYWVzLWNiYy1obWFjLXNoYTJdKSBpcyBpbGx1c3RyYXRl ZCBiZWxvdy4gIFRoZTwvc3Bhbj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+ PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90 ZD48dGQgY2xhc3M9ImxibG9jayI+ICAgICAgbmFtZSA8c3BhbiBjbGFzcz0iZGVsZXRlIj4oTikg Y29udmV5ZWQgaW4gdGhlIFRISVJELVBBUlRZLUFVVEhPUklaQVRJT04gcmVzcG9uc2UuICBUaGlz PC9zcGFuPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48c3BhbiBjbGFzcz0iaW5z ZXJ0Ij4gICBjaXBoZXJ0ZXh0IGNvbnNpc3RzIG9mPC9zcGFuPiB0aGUgPHNwYW4gY2xhc3M9Imlu c2VydCI+c3RyaW5nIFMsIHdpdGg8L3NwYW4+IHRoZSA8c3BhbiBjbGFzcz0iaW5zZXJ0Ij5zdHJp bmcgVCBhcHBlbmRlZCB0bzwvc3Bhbj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRv cCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+ PC90ZD48dGQgY2xhc3M9ImxibG9jayI+PHNwYW4gY2xhc3M9ImRlbGV0ZSI+ICAgICAgZW5zdXJl cyB0aGF0IHRoZSBjbGllbnQgZG9lcyBub3QgdXNlIHRoZSBzYW1lIHRva2VuIHRvIGdhaW48L3Nw YW4+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPjxzcGFuIGNsYXNzPSJpbnNlcnQi PiAgIGl0LiAgSGVyZSBDIGFuZCBBIGRlbm90ZSBDaXBoZXJ0ZXh0PC9zcGFuPiBhbmQgU1RVTiBz ZXJ2ZXIgbmFtZTwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+ DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFz cz0ibGJsb2NrIj48c3BhbiBjbGFzcz0iZGVsZXRlIj4gICAgICBpbGxlZ2FsIGFjY2Vzczwvc3Bh bj4gdG8gPHNwYW4gY2xhc3M9ImRlbGV0ZSI+b3RoZXIgU1RVTiBzZXJ2ZXJzIHByb3ZpZGVkIGJ5 PC9zcGFuPiB0aGUgPHNwYW4gY2xhc3M9ImRlbGV0ZSI+c2FtZTwvc3Bhbj48L3RkPjx0ZD4gPC90 ZD48dGQgY2xhc3M9InJibG9jayI+ICAgPHNwYW4gY2xhc3M9Imluc2VydCI+cmVzcGVjdGl2ZWx5 LiAgVGhlIG9jdGV0IHN0cmluZyBBTCAoc2VjdGlvbiAyLjEgb2Y8L3NwYW4+PC90ZD48dGQgY2xh c3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9 ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPjxzcGFuIGNsYXNz PSJkZWxldGUiPiAgICAgIGFkbWluaXN0cmF0aXZlIGRvbWFpbiBpLmUuLCB3aGVuIG11bHRpcGxl IFNUVU4gc2VydmVyczwvc3Bhbj4gaW4gYSA8c3BhbiBjbGFzcz0iZGVsZXRlIj5zaW5nbGU8L3Nw YW4+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPjxzcGFuIGNsYXNzPSJpbnNlcnQi PiAgIFtJLUQubWNncmV3LWFlYWQtYWVzLWNiYy1obWFjLXNoYTJdKSBpcyBlcXVhbDwvc3Bhbj4g dG8gdGhlIDxzcGFuIGNsYXNzPSJpbnNlcnQiPm51bWJlciBvZiBiaXRzPC9zcGFuPjwvdGQ+PHRk IGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNs YXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48c3BhbiBj bGFzcz0iZGVsZXRlIj4gICAgICBhZG1pbmlzdHJhdGl2ZSBkb21haW4gc2hhcmUgdGhlIHNhbWUg c3ltbWV0cmljIGtleSB3aXRoIGFuPC9zcGFuPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJs b2NrIj4gICBpbiA8c3BhbiBjbGFzcz0iaW5zZXJ0Ij5BIGV4cHJlc3NlZCBhczwvc3Bhbj4gYSA8 c3BhbiBjbGFzcz0iaW5zZXJ0Ij42NC1iaXQgdW5zaWduZWQgYmlnIGVuZGlhbiBpbnRlZ2VyLjwv c3Bhbj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAg ICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9Imxi bG9jayI+PHNwYW4gY2xhc3M9ImRlbGV0ZSI+ICAgICAgYXV0aG9yaXphdGlvbiBzZXJ2ZXIuPC9z cGFuPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48L3RkPjx0ZCBjbGFzcz0ibGlu ZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5v IiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPjwvdGQ+PHRkPiA8L3RkPjx0ZCBj bGFzcz0icmlnaHQiPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwv dHI+DQogICAgICA8dHI+PHRkPjxhIG5hbWU9ImRpZmYwMDI1Ij48L2E+PC90ZD48L3RyPg0KICAg ICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9Imxi bG9jayI+ICAgPHNwYW4gY2xhc3M9ImRlbGV0ZSI+bWFjX2xlbmd0aDogIExlbmd0aCBvZiB0aGUg bWFjIGZpZWxkLjwvc3Bhbj48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+ICAgPHNw YW4gY2xhc3M9Imluc2VydCI+byAgQVVUSCA9IGluaXRpYWwgYXV0aGVudGljYXRpb24ga2V5IGxl bmd0aCBvY3RldHMgb2YgSyw8L3NwYW4+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0 b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3Ai PjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij48 L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRy Pjx0ZD48YSBuYW1lPSJkaWZmMDAyNiI+PC9hPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xh c3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPiAgIDxzcGFu IGNsYXNzPSJkZWxldGUiPkFuIGV4YW1wbGU8L3NwYW4+IGVuY3J5cHRpb24gPHNwYW4gY2xhc3M9 ImRlbGV0ZSI+cHJvY2VzcyBpcyBpbGx1c3RyYXRlZCBiZWxvdy4gIEhlcmUgQywgTiBkZW5vdGU8 L3NwYW4+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPiAgIDxzcGFuIGNsYXNzPSJp bnNlcnQiPm8gIEFTLVJTID0gZmluYWw8L3NwYW4+IGVuY3J5cHRpb24gPHNwYW4gY2xhc3M9Imlu c2VydCI+a2V5IGxlbmd0aCBvY3RldHMgb2YgSyw8L3NwYW4+PC90ZD48dGQgY2xhc3M9ImxpbmVu byIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIg dmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPjxzcGFuIGNsYXNzPSJkZWxldGUi PiAgIENpcGhlcnRleHQgYW5kIFNUVU4gc2VydmVyIG5hbWUgcmVzcGVjdGl2ZWx5Ljwvc3Bhbj48 L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIg dmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFs aWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9 InJpZ2h0Ij48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0K ICAgICAgPHRyPjx0ZD48YSBuYW1lPSJkaWZmMDAyNyI+PC9hPjwvdGQ+PC90cj4NCiAgICAgIDx0 cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2si PiAgIG8gIDxzcGFuIGNsYXNzPSJkZWxldGUiPkMgPSBBRVNfMjU2X0NCQyhBUy1SUywgZW5jcnlw dGVkX2Jsb2NrKTwvc3Bhbj48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+ICAgbyAg PHNwYW4gY2xhc3M9Imluc2VydCI+UyA9IENCQy1QS0NTNS1FTkMoQVMtUlMsIGVuY3J5cHRlZF9i bG9jayksPC9zcGFuPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwv dHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBj bGFzcz0ibGVmdCI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+PC90ZD48dGQgY2xh c3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQ+PGEgbmFt ZT0iZGlmZjAwMjgiPjwvYT48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8i IHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj4gICAgICAqICBJbml0aWFsaXph dGlvbiB2ZWN0b3IgPHNwYW4gY2xhc3M9ImRlbGV0ZSI+Y2FuIGJlPC9zcGFuPiBzZXQgdG8gemVy byBiZWNhdXNlIHRoZTwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj4gICAgICAqICBJ bml0aWFsaXphdGlvbiB2ZWN0b3IgPHNwYW4gY2xhc3M9Imluc2VydCI+aXM8L3NwYW4+IHNldCB0 byB6ZXJvIGJlY2F1c2UgdGhlPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwv dGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+ PHRkIGNsYXNzPSJsZWZ0Ij4gICAgICAgICBlbmNyeXB0ZWRfYmxvY2sgaW4gZWFjaCBhY2Nlc3Mg dG9rZW4gd2lsbCBub3QgYmUgaWRlbnRpY2FsIGFuZDwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0i cmlnaHQiPiAgICAgICAgIGVuY3J5cHRlZF9ibG9jayBpbiBlYWNoIGFjY2VzcyB0b2tlbiB3aWxs IG5vdCBiZSBpZGVudGljYWwgYW5kPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3Ai PjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwv dGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICAgICAgICBoZW5jZSB3aWxsIG5vdCByZXN1bHQgaW4gZ2Vu ZXJhdGlvbiBvZiBpZGVudGljYWwgY2lwaGVydGV4dC48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9 InJpZ2h0Ij4gICAgICAgICBoZW5jZSB3aWxsIG5vdCByZXN1bHQgaW4gZ2VuZXJhdGlvbiBvZiBp ZGVudGljYWwgY2lwaGVydGV4dC48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+ PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90 ZD48dGQgY2xhc3M9ImxlZnQiPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPjwvdGQ+ PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRk PjxhIG5hbWU9ImRpZmYwMDI5Ij48L2E+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0i bGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+ICAgbyAgbWFjID0g PHNwYW4gY2xhc3M9ImRlbGV0ZSI+SE1BQy1TSEEtMjU2LTEyOChBVVRILCBDIHwgfCBOKTwvc3Bh bj48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+ICAgbyAgbWFjID0gPHNwYW4gY2xh c3M9Imluc2VydCI+TUFDKEFVVEgsIEEgfHwgUyB8fCBBTCksPC9zcGFuPjwvdGQ+PHRkIGNsYXNz PSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJs aW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48L3RkPjx0ZD4gPC90 ZD48dGQgY2xhc3M9InJibG9jayI+PHNwYW4gY2xhc3M9Imluc2VydCI+ICAgbyAgVCA9IGluaXRp YWwgVF9MRU4gb2N0ZXRzIG9mIG1hYyw8L3NwYW4+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFs aWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWdu PSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJp Z2h0Ij48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAg ICAgPHRyPjx0ZD48YSBuYW1lPSJkaWZmMDAzMCI+PC9hPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48 dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPiAg IDxzcGFuIGNsYXNzPSJkZWxldGUiPkVuY3J5cHRpb24gaXMgYXBwbGllZCBiZWZvcmUgbWVzc2Fn ZSBhdXRoZW50aWNhdGlvbiBvbiB0aGUgc2VuZGVyPC9zcGFuPjwvdGQ+PHRkPiA8L3RkPjx0ZCBj bGFzcz0icmJsb2NrIj4gICA8c3BhbiBjbGFzcz0iaW5zZXJ0Ij5vICBDID0gUyB8fCBULjwvc3Bh bj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAg PHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9j ayI+PHNwYW4gY2xhc3M9ImRlbGV0ZSI+ICAgc2lkZSBhbmQgY29udmVyc2VseSBvbiB0aGUgcmVj ZWl2ZXIgc2lkZS48L3NwYW4+ICBUaGUgZW50aXJlIHRva2VuIGkuZS4sIHRoZTwvdGQ+PHRkPiA8 L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj4gICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgPC90ZD48dGQgY2xhc3M9Imxp bmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVu byIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPiAgICdlbmNyeXB0ZWRfYmxv Y2snIDxzcGFuIGNsYXNzPSJkZWxldGUiPmFuZCAnbWFjJzwvc3Bhbj4gaXMgYmFzZTY0IGVuY29k ZWQgKHNlZSBzZWN0aW9uIDQgb2Y8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+ICAg VGhlIGVudGlyZSB0b2tlbiBpLmUuLCB0aGUgJ2VuY3J5cHRlZF9ibG9jaycgaXMgYmFzZTY0IGVu Y29kZWQgKHNlZTwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+ DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFz cz0ibGJsb2NrIj4gICBbUkZDNDY0OF0pIGFuZCB0aGUgcmVzdWx0aW5nIGFjY2VzcyB0b2tlbiBp cyBzaWduYWxlZCB0byB0aGUgY2xpZW50LjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2Nr Ij4gICBzZWN0aW9uIDQgb2YgW1JGQzQ2NDhdKSBhbmQgdGhlIHJlc3VsdGluZyBhY2Nlc3MgdG9r ZW4gaXMgc2lnbmFsZWQgdG88L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90 ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48 dGQgY2xhc3M9ImxibG9jayI+ICAgPHNwYW4gY2xhc3M9ImRlbGV0ZSI+SWYgQUVBRCBhbGdvcml0 aG0gaXMgdXNlZCB0aGVuIHRoZXJlIGlzIG5vIG5lZWQgdG8gZXhwbGljaXRseSBjb21wdXRlPC9z cGFuPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj4gICB0aGUgY2xpZW50LjwvdGQ+ PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRk IGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48c3Bh biBjbGFzcz0iZGVsZXRlIj4gICBITUFDLCB0aGUgYXNzb2NpYXRlZCBkYXRhIE1VU1QgYmUgdGhl IFNUVU4gc2VydmVyIG5hbWUgKE4pIGFuZCB0aGU8L3NwYW4+PC90ZD48dGQ+IDwvdGQ+PHRkIGNs YXNzPSJyYmxvY2siPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwv dHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBj bGFzcz0ibGJsb2NrIj48c3BhbiBjbGFzcz0iZGVsZXRlIj4gICBtYWMgZmllbGQgTVVTVCBjYXJy eSB0aGUgbm9uY2UuICBUaGUgbGVuZ3RoIG9mIG5vbmNlIGZvciBBRUFEPC9zcGFuPjwvdGQ+PHRk PiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249 InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRv cCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+PHNwYW4gY2xhc3M9ImRlbGV0ZSI+ICAgYWxnb3Jp dGhtcyBpcyBleHBsYWluZWQgaW4gW1JGQzUxMTZdLjwvc3Bhbj48L3RkPjx0ZD4gPC90ZD48dGQg Y2xhc3M9InJibG9jayI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+ PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRk IGNsYXNzPSJsZWZ0Ij48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij48L3RkPjx0ZCBj bGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFz cz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPjcuICBTVFVOIFNl cnZlciBCZWhhdmlvdXI8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij43LiAgU1RVTiBT ZXJ2ZXIgQmVoYXZpb3VyPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+ PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRk IGNsYXNzPSJsZWZ0Ij48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij48L3RkPjx0ZCBj bGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFz cz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIFRoZSBTVFVO IHNlcnZlciwgb24gcmVjZWl2aW5nIGEgcmVxdWVzdCB3aXRoIEFDQ0VTUy1UT0tFTiBhdHRyaWJ1 dGUsPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgVGhlIFNUVU4gc2VydmVyLCBv biByZWNlaXZpbmcgYSByZXF1ZXN0IHdpdGggQUNDRVNTLVRPS0VOIGF0dHJpYnV0ZSw8L3RkPjx0 ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBj bGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIHBlcmZv cm1zIGNoZWNrcyBsaXN0ZWQgaW4gc2VjdGlvbiAxMC4yLjIgb2YgW1JGQzUzODldIGluIGFkZGl0 aW9uIHRvPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgcGVyZm9ybXMgY2hlY2tz IGxpc3RlZCBpbiBzZWN0aW9uIDEwLjIuMiBvZiBbUkZDNTM4OV0gaW4gYWRkaXRpb24gdG88L3Rk Pjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0 ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIHRo ZSBmb2xsb3dpbmcgc3RlcHMgdG8gdmVyaWZ5IHRoYXQgdGhlIGFjY2VzcyB0b2tlbiBpcyB2YWxp ZDo8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICB0aGUgZm9sbG93aW5nIHN0ZXBz IHRvIHZlcmlmeSB0aGF0IHRoZSBhY2Nlc3MgdG9rZW4gaXMgdmFsaWQ6PC90ZD48dGQgY2xhc3M9 ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9Imxp bmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij48L3RkPjx0ZD4gPC90ZD48 dGQgY2xhc3M9InJpZ2h0Ij48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90 ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48 dGQgY2xhc3M9ImxlZnQiPiAgIG8gIFNUVU4gc2VydmVyIHNlbGVjdHMgdGhlIGtleWluZyBtYXRl cmlhbCBiYXNlZCBvbiBraWQgc2lnbmFsbGVkIGluPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJy aWdodCI+ICAgbyAgU1RVTiBzZXJ2ZXIgc2VsZWN0cyB0aGUga2V5aW5nIG1hdGVyaWFsIGJhc2Vk IG9uIGtpZCBzaWduYWxsZWQgaW48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+ PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90 ZD48dGQgY2xhc3M9ImxlZnQiPiAgICAgIHRoZSBVU0VSTkFNRSBhdHRyaWJ1dGUuPC90ZD48dGQ+ IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgICAgdGhlIFVTRVJOQU1FIGF0dHJpYnV0ZS48L3Rk Pjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0 ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPjwvdGQ+ PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGln bj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkPjxhIG5hbWU9ImRpZmYwMDMxIj48L2E+ PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90 ZD48dGQgY2xhc3M9ImxibG9jayI+ICAgbyAgSXQgcGVyZm9ybXMgdGhlIHZlcmlmaWNhdGlvbiBv ZiB0aGUgdG9rZW4gbWVzc2FnZSBpbnRlZ3JpdHkgYnk8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9 InJibG9jayI+ICAgbyAgPHNwYW4gY2xhc3M9Imluc2VydCI+VGhlIGF1dGhlbnRpY2F0ZWQgZGVj cnlwdGlvbiBvcGVyYXRpb24gaGFzIGZvdXIgaW5wdXRzOiBLLCBOLCBBLDwvc3Bhbj48L3RkPjx0 ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBj bGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+ICAgICAg Y2FsY3VsYXRpbmcgSE1BQyBvdmVyIHRoZSBlbmNyeXB0ZWQgcG9ydGlvbiBpbiB0aGUgc2VsZi1j b250YWluZWQ8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+PHNwYW4gY2xhc3M9Imlu c2VydCI+ICAgICAgYW5kIEMsIGFzIGRlZmluZWQgaW4gc2VjdGlvbiAyLjIgb2YgW1JGQzUxMTZd LiAgQUVBRCBkZWNyeXB0aW9uPC9zcGFuPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0i dG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9w Ij48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj4gICAgICB0b2tlbiBhbmQgPHNwYW4gY2xhc3M9ImRl bGV0ZSI+U1RVTiBzZXJ2ZXIgbmFtZTwvc3Bhbj4gdXNpbmcgQVVUSCBrZXkgYW5kIGlmIHRoZSBy ZXN1bHRpbmc8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+PHNwYW4gY2xhc3M9Imlu c2VydCI+ICAgICAgYWxnb3JpdGhtIGhhcyBvbmx5IGEgc2luZ2xlIG91dHB1dCwgZWl0aGVyIGEg cGxhaW50ZXh0IG9yIGE8L3NwYW4+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3Ai PjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwv dGQ+PHRkIGNsYXNzPSJsYmxvY2siPiAgICAgIHZhbHVlIGRvZXMgbm90IG1hdGNoIHRoZSBtYWMg ZmllbGQgaW4gdGhlIHNlbGYtY29udGFpbmVkIHRva2VuPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNz PSJyYmxvY2siPjxzcGFuIGNsYXNzPSJpbnNlcnQiPiAgICAgIHNwZWNpYWwgc3ltYm9sIEZBSUwg dGhhdCBpbmRpY2F0ZXMgdGhhdCB0aGUgaW5wdXRzIGFyZSBub3Q8L3NwYW4+PC90ZD48dGQgY2xh c3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9 ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPiAgICAgIHRoZW4g aXQgcmVqZWN0cyB0aGUgcmVxdWVzdCB3aXRoIGFuIGVycm9yIHJlc3BvbnNlIDQwMTwvdGQ+PHRk PiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48c3BhbiBjbGFzcz0iaW5zZXJ0Ij4gICAgICBhdXRo ZW50aWMuICBJZiBhdXRoZW50aWNhdGVkIGRlY3J5cHQgb3BlcmF0aW9uIHJldHVybnMgRkFJTCB0 aGVuPC9zcGFuPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+ DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFz cz0ibGJsb2NrIj4gICAgICAoVW5hdXRob3JpemVkKS4gIDxzcGFuIGNsYXNzPSJkZWxldGUiPklm IEFFQUQgYWxnb3JpdGhtIGlzIHVzZWQgdGhlbiBpdCBoYXMgb25seSBhPC9zcGFuPjwvdGQ+PHRk PiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48c3BhbiBjbGFzcz0iaW5zZXJ0Ij4gICAgICB0aGUg U1RVTiBzZXJ2ZXIgcmVqZWN0cyB0aGUgcmVxdWVzdCB3aXRoIGFuIGVycm9yIHJlc3BvbnNlIDQw MTwvc3Bhbj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0K ICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9 ImxibG9jayI+PHNwYW4gY2xhc3M9ImRlbGV0ZSI+ICAgICAgc2luZ2xlIG91dHB1dCwgZWl0aGVy IGEgcGxhaW50ZXh0IG9yIGEgc3BlY2lhbCBzeW1ib2wgRkFJTCB0aGF0PC9zcGFuPjwvdGQ+PHRk PiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48c3BhbiBjbGFzcz0iaW5zZXJ0Ij4gICAgICAoVW5h dXRob3JpemVkKS4gIElmIEFFU19DQkNfSE1BQ19TSEEyIGlzIHVzZWQgdGhlbiB0aGUgZmluYWwg VF9MRU48L3NwYW4+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90 cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNs YXNzPSJsYmxvY2siPjxzcGFuIGNsYXNzPSJkZWxldGUiPiAgICAgIGluZGljYXRlcyB0aGF0IHRo ZSBpbnB1dHMgYXJlIG5vdCBhdXRoZW50aWMuPC9zcGFuPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFz cz0icmJsb2NrIj48c3BhbiBjbGFzcz0iaW5zZXJ0Ij4gICAgICBvY3RldHMgYXJlIHN0cmlwcGVk IGZyb20gQy48L3NwYW4+ICBJdCBwZXJmb3JtcyB0aGUgdmVyaWZpY2F0aW9uIG9mIHRoZTwvdGQ+ PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRk IGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48L3Rk Pjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+ICAgICAgdG9rZW4gbWVzc2FnZSBpbnRlZ3Jp dHkgYnkgY2FsY3VsYXRpbmcgSE1BQyBvdmVyIHRoZSA8c3BhbiBjbGFzcz0iaW5zZXJ0Ij50aGUg U1RVTjwvc3Bhbj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3Ry Pg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xh c3M9ImxibG9jayI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPjxzcGFuIGNsYXNz PSJpbnNlcnQiPiAgICAgIHNlcnZlciBuYW1lLCB0aGU8L3NwYW4+IGVuY3J5cHRlZCBwb3J0aW9u IGluIHRoZSBzZWxmLWNvbnRhaW5lZCB0b2tlbiBhbmQ8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2 YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxp Z249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNz PSJyYmxvY2siPiAgICAgIDxzcGFuIGNsYXNzPSJpbnNlcnQiPnRoZSBBTDwvc3Bhbj4gdXNpbmcg QVVUSCBrZXkgYW5kIGlmIHRoZSByZXN1bHRpbmcgdmFsdWUgZG9lcyBub3QgbWF0Y2g8L3RkPjx0 ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBj bGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+PC90ZD48 dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPiAgICAgIHRoZSBtYWMgZmllbGQgaW4gdGhlIHNl bGYtY29udGFpbmVkIHRva2VuIHRoZW4gaXQgcmVqZWN0cyB0aGU8L3RkPjx0ZCBjbGFzcz0ibGlu ZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5v IiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+PC90ZD48dGQ+IDwvdGQ+PHRk IGNsYXNzPSJyYmxvY2siPiAgICAgIHJlcXVlc3Qgd2l0aCBhbiBlcnJvciByZXNwb25zZSA0MDEg KFVuYXV0aG9yaXplZCkuPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+ PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRk IGNsYXNzPSJsZWZ0Ij48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij48L3RkPjx0ZCBj bGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFz cz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIG8gIFNUVU4g c2VydmVyIG9idGFpbnMgdGhlIG1hY19rZXkgYnkgcmV0cmlldmluZyB0aGUgY29udGVudCBvZiB0 aGU8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBvICBTVFVOIHNlcnZlciBvYnRh aW5zIHRoZSBtYWNfa2V5IGJ5IHJldHJpZXZpbmcgdGhlIGNvbnRlbnQgb2YgdGhlPC90ZD48dGQg Y2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xh c3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICAgICBhY2Nl c3MgdG9rZW4gKHdoaWNoIHJlcXVpcmVzIGRlY3J5cHRpb24gb2YgdGhlIHNlbGYtY29udGFpbmVk PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgICAgYWNjZXNzIHRva2VuICh3aGlj aCByZXF1aXJlcyBkZWNyeXB0aW9uIG9mIHRoZSBzZWxmLWNvbnRhaW5lZDwvdGQ+PHRkIGNsYXNz PSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJs aW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgICAgdG9rZW4gdXNp bmcgdGhlIEFTLVJTIGtleSkuPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgICAg dG9rZW4gdXNpbmcgdGhlIEFTLVJTIGtleSkuPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWdu PSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0 b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0 Ij48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAg PHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQi PiAgIG8gIFRoZSBTVFVOIHNlcnZlciB2ZXJpZmllcyB0aGF0IG5vIHJlcGxheSB0b29rIHBsYWNl IGJ5IHBlcmZvcm1pbmc8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBvICBUaGUg U1RVTiBzZXJ2ZXIgdmVyaWZpZXMgdGhhdCBubyByZXBsYXkgdG9vayBwbGFjZSBieSBwZXJmb3Jt aW5nPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAg IDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0 Ij4gICAgICB0aGUgZm9sbG93aW5nIGNoZWNrOjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmln aHQiPiAgICAgIHRoZSBmb2xsb3dpbmcgY2hlY2s6PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFs aWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWdu PSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJp Z2h0Ij48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAg ICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9Imxl ZnQiPiAgICAgICogIFRoZSBhY2Nlc3MgdG9rZW4gaXMgYWNjZXB0ZWQgaWYgdGhlIHRpbWVzdGFt cCBmaWVsZCAoVFMpIGluIHRoZTwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgICAg ICogIFRoZSBhY2Nlc3MgdG9rZW4gaXMgYWNjZXB0ZWQgaWYgdGhlIHRpbWVzdGFtcCBmaWVsZCAo VFMpIGluIHRoZTwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+ DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFz cz0ibGVmdCI+ICAgICAgICAgc2VsZi1jb250YWluZWQgdG9rZW4gaXMgcmVjZW50IGVub3VnaCB0 byB0aGUgcmVjZXB0aW9uIHRpbWUgb2Y8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4g ICAgICAgICBzZWxmLWNvbnRhaW5lZCB0b2tlbiBpcyByZWNlbnQgZW5vdWdoIHRvIHRoZSByZWNl cHRpb24gdGltZSBvZjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwv dHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij48 L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48 L3RkPjwvdHI+DQogICAgICA8dHIgYmdjb2xvcj0iZ3JheSI+PHRkPjwvdGQ+PHRoPjxhIG5hbWU9 InBhcnQtbDgiPjxzbWFsbD5za2lwcGluZyB0byBjaGFuZ2UgYXQ8L3NtYWxsPjxlbT4gcGFnZSAx NCwgbGluZSAyNDwvZW0+PC9hPjwvdGg+PHRoPiA8L3RoPjx0aD48YSBuYW1lPSJwYXJ0LXI4Ij48 c21hbGw+c2tpcHBpbmcgdG8gY2hhbmdlIGF0PC9zbWFsbD48ZW0+IHBhZ2UgMTUsIGxpbmUgMjQ8 L2VtPjwvYT48L3RoPjx0ZD48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8i IHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNs YXNzPSJyaWdodCI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90 cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNs YXNzPSJsZWZ0Ij4xMC4gIE9wZXJhdGlvbmFsIENvbnNpZGVyYXRpb25zPC90ZD48dGQ+IDwvdGQ+ PHRkIGNsYXNzPSJyaWdodCI+MTAuICBPcGVyYXRpb25hbCBDb25zaWRlcmF0aW9uczwvdGQ+PHRk IGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNs YXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+PC90ZD48dGQ+ IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0 b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3Ai PjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBUaGUgZm9sbG93aW5nIG9wZXJhdGlvbmFsIGNvbnNp ZGVyYXRpb25zIHNob3VsZCBiZSB0YWtlbiBpbnRvPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJy aWdodCI+ICAgVGhlIGZvbGxvd2luZyBvcGVyYXRpb25hbCBjb25zaWRlcmF0aW9ucyBzaG91bGQg YmUgdGFrZW4gaW50bzwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwv dHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBj bGFzcz0ibGVmdCI+ICAgYWNjb3VudDo8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4g ICBhY2NvdW50OjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+ DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFz cz0ibGVmdCI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+PC90ZD48dGQgY2xhc3M9 ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9Imxp bmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBvICBFYWNoIGF1dGhv cml6YXRpb24gc2VydmVyIHNob3VsZCBtYWludGFpbiB0aGUgbGlzdCBvZiBTVFVOIHNlcnZlcnM8 L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBvICBFYWNoIGF1dGhvcml6YXRpb24g c2VydmVyIHNob3VsZCBtYWludGFpbiB0aGUgbGlzdCBvZiBTVFVOIHNlcnZlcnM8L3RkPjx0ZCBj bGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFz cz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgICAgIGZvciB3 aGljaCBpdCB3aWxsIGdyYW50IHRva2VucywgYW5kIHRoZSBsb25nLXRlcm0gc2VjcmV0IHNoYXJl ZDwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgICAgIGZvciB3aGljaCBpdCB3aWxs IGdyYW50IHRva2VucywgYW5kIHRoZSBsb25nLXRlcm0gc2VjcmV0IHNoYXJlZDwvdGQ+PHRkIGNs YXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNz PSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgICAgd2l0aCBl YWNoIG9mIHRob3NlIFNUVU4gc2VydmVycy48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0 Ij4gICAgICB3aXRoIGVhY2ggb2YgdGhvc2UgU1RVTiBzZXJ2ZXJzLjwvdGQ+PHRkIGNsYXNzPSJs aW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5l bm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+PC90ZD48dGQ+IDwvdGQ+PHRk IGNsYXNzPSJyaWdodCI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+ PC90cj4NCiAgICAgIDx0cj48dGQ+PGEgbmFtZT0iZGlmZjAwMzIiPjwvYT48L3RkPjwvdHI+DQog ICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0i bGJsb2NrIj4gICBvICBJZiBtYW51YWwgY29uZmlndXJhdGlvbiAoU2VjdGlvbiA0LjEuPHNwYW4g Y2xhc3M9ImRlbGV0ZSI+Mzwvc3Bhbj4pIGlzIHVzZWQgdG8gZXN0YWJsaXNoPC90ZD48dGQ+IDwv dGQ+PHRkIGNsYXNzPSJyYmxvY2siPiAgIG8gIElmIG1hbnVhbCBjb25maWd1cmF0aW9uIChTZWN0 aW9uIDQuMS48c3BhbiBjbGFzcz0iaW5zZXJ0Ij4yPC9zcGFuPikgaXMgdXNlZCB0byBlc3RhYmxp c2g8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAg PHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQi PiAgICAgIHN5bW1ldHJpYyBrZXlzLCB0aGUgbmVjZXNzYXJ5IGluZm9ybWF0aW9uIHdoaWNoIGlu Y2x1ZGVzIGxvbmctdGVybTwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgICAgIHN5 bW1ldHJpYyBrZXlzLCB0aGUgbmVjZXNzYXJ5IGluZm9ybWF0aW9uIHdoaWNoIGluY2x1ZGVzIGxv bmctdGVybTwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQog ICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0i bGVmdCI+ICAgICAga2V5IChLKSwgZW5jcnlwdGlvbiBhbmQgSE1BQyBhbGdvcml0aG1zIGhhdmUg dG8gYmUgY29uZmlndXJlZCBvbjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgICAg IGtleSAoSyksIGVuY3J5cHRpb24gYW5kIEhNQUMgYWxnb3JpdGhtcyBoYXZlIHRvIGJlIGNvbmZp Z3VyZWQgb248L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0K ICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9 ImxlZnQiPiAgICAgIGVhY2ggYXV0aG9yaXphdGlvbiBzZXJ2ZXIgYW5kIFNUVU4gc2VydmVyIGZv ciBlYWNoIGtpZC4gIFRoZTwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgICAgIGVh Y2ggYXV0aG9yaXphdGlvbiBzZXJ2ZXIgYW5kIFNUVU4gc2VydmVyIGZvciBlYWNoIGtpZC4gIFRo ZTwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8 dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ ICAgICAgY2xpZW50IG9idGFpbnMgdGhlIHNlc3Npb24ga2V5IGFuZCBITUFDIGFsZ29yaXRobSBm cm9tIHRoZTwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgICAgIGNsaWVudCBvYnRh aW5zIHRoZSBzZXNzaW9uIGtleSBhbmQgSE1BQyBhbGdvcml0aG0gZnJvbSB0aGU8L3RkPjx0ZCBj bGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFz cz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgICAgIGF1dGhv cml6YXRpb24gc2VydmVyIGluIGNvbXBhbnkgd2l0aCB0aGUgdG9rZW4uPC90ZD48dGQ+IDwvdGQ+ PHRkIGNsYXNzPSJyaWdodCI+ICAgICAgYXV0aG9yaXphdGlvbiBzZXJ2ZXIgaW4gY29tcGFueSB3 aXRoIHRoZSB0b2tlbi48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48 L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQg Y2xhc3M9ImxlZnQiPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPjwvdGQ+PHRkIGNs YXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNz PSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgbyAgV2hlbiBh IFNUVU4gY2xpZW50IHNlbmRzIGEgcmVxdWVzdCB0byBnZXQgYWNjZXNzIHRvIGEgcGFydGljdWxh cjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIG8gIFdoZW4gYSBTVFVOIGNsaWVu dCBzZW5kcyBhIHJlcXVlc3QgdG8gZ2V0IGFjY2VzcyB0byBhIHBhcnRpY3VsYXI8L3RkPjx0ZCBj bGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFz cz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgICAgIFNUVU4g c2VydmVyIChTKSB0aGUgYXV0aG9yaXphdGlvbiBzZXJ2ZXIgbXVzdCBlbnN1cmUgdGhhdCBpdDwv dGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgICAgIFNUVU4gc2VydmVyIChTKSB0aGUg YXV0aG9yaXphdGlvbiBzZXJ2ZXIgbXVzdCBlbnN1cmUgdGhhdCBpdDwvdGQ+PHRkIGNsYXNzPSJs aW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5l bm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgICAgc2VsZWN0cyB0aGUg YXBwcm9wcmlhdGUga2lkLCBhY2Nlc3MtdG9rZW4gZGVwZW5kaW5nIG9uIHRoZSBzZXJ2ZXI8L3Rk Pjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICAgICBzZWxlY3RzIHRoZSBhcHByb3ByaWF0 ZSBraWQsIGFjY2Vzcy10b2tlbiBkZXBlbmRpbmcgb24gdGhlIHNlcnZlcjwvdGQ+PHRkIGNsYXNz PSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJs aW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgICAgUy48L3RkPjx0 ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICAgICBTLjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8i IHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwv dGQ+PHRkIGNsYXNzPSJsZWZ0Ij48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij48L3Rk Pjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+DQogICAgICA8dHIgYmdjb2xvcj0iZ3JheSI+ PHRkPjwvdGQ+PHRoPjxhIG5hbWU9InBhcnQtbDkiPjxzbWFsbD5za2lwcGluZyB0byBjaGFuZ2Ug YXQ8L3NtYWxsPjxlbT4gcGFnZSAxNiwgbGluZSA2PC9lbT48L2E+PC90aD48dGg+IDwvdGg+PHRo PjxhIG5hbWU9InBhcnQtcjkiPjxzbWFsbD5za2lwcGluZyB0byBjaGFuZ2UgYXQ8L3NtYWxsPjxl bT4gcGFnZSAxNywgbGluZSA2PC9lbT48L2E+PC90aD48dGQ+PC90ZD48L3RyPg0KICAgICAgPHRy Pjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAg IEJhcm5lcywgU3RlcGhlbiBGYXJyZWxsIGFuZCBBbGlzc2EgQ29vcGVyIGZvciBjb21tZW50cyBh bmQgcmV2aWV3LjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIEJhcm5lcywgU3Rl cGhlbiBGYXJyZWxsIGFuZCBBbGlzc2EgQ29vcGVyIGZvciBjb21tZW50cyBhbmQgcmV2aWV3Ljwv dGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+ PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAg VGhlIGF1dGhvcnMgd291bGQgbGlrZSB0byBnaXZlIHNwZWNpYWwgdGhhbmtzIHRvIEJyYW5kb24g V2lsbGlhbXMgZm9yPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgVGhlIGF1dGhv cnMgd291bGQgbGlrZSB0byBnaXZlIHNwZWNpYWwgdGhhbmtzIHRvIEJyYW5kb24gV2lsbGlhbXMg Zm9yPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAg IDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0 Ij4gICBoaXMgaGVscC48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBoaXMgaGVs cC48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAg PHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQi PjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8i IHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZh bGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgVGhhbmtzIHRvIE9sZWcgTW9za2Fs ZW5rbyBmb3IgcHJvdmlkaW5nIHRva2VuIHNhbXBsZXMgaW4gdGhlPC90ZD48dGQ+IDwvdGQ+PHRk IGNsYXNzPSJyaWdodCI+ICAgVGhhbmtzIHRvIE9sZWcgTW9za2FsZW5rbyBmb3IgcHJvdmlkaW5n IHRva2VuIHNhbXBsZXMgaW4gdGhlPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3Ai PjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwv dGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBBcHBlbmRpeCBzZWN0aW9uLjwvdGQ+PHRkPiA8L3RkPjx0 ZCBjbGFzcz0icmlnaHQiPiAgIEFwcGVuZGl4IHNlY3Rpb24uPC90ZD48dGQgY2xhc3M9ImxpbmVu byIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIg dmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij48L3RkPjx0ZD4gPC90ZD48dGQgY2xh c3M9InJpZ2h0Ij48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3Ry Pg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xh c3M9ImxlZnQiPjE0LiAgUmVmZXJlbmNlczwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQi PjE0LiAgUmVmZXJlbmNlczwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3Rk PjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0 ZCBjbGFzcz0ibGVmdCI+MTQuMS4gIE5vcm1hdGl2ZSBSZWZlcmVuY2VzPC90ZD48dGQ+IDwvdGQ+ PHRkIGNsYXNzPSJyaWdodCI+MTQuMS4gIE5vcm1hdGl2ZSBSZWZlcmVuY2VzPC90ZD48dGQgY2xh c3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9 ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij48L3RkPjx0ZD4gPC90 ZD48dGQgY2xhc3M9InJpZ2h0Ij48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+ PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZD48YSBuYW1lPSJkaWZmMDAzMyI+PC9hPjwvdGQ+PC90 cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNs YXNzPSJsYmxvY2siPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj4gICA8c3BhbiBj bGFzcz0iaW5zZXJ0Ij5bSS1ELmlldGYtam9zZS1qc29uLXdlYi1hbGdvcml0aG1zXTwvc3Bhbj48 L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRy Pjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+ PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPjxzcGFuIGNsYXNzPSJpbnNlcnQiPiAg ICAgICAgICAgICAgSm9uZXMsIE0uLCAiSlNPTiBXZWIgQWxnb3JpdGhtcyAoSldBKSIsIGRyYWZ0 LWlldGYtam9zZS08L3NwYW4+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwv dGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+ PHRkIGNsYXNzPSJsYmxvY2siPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48c3Bh biBjbGFzcz0iaW5zZXJ0Ij4gICAgICAgICAgICAgIGpzb24td2ViLWFsZ29yaXRobXMtNDAgKHdv cmsgaW4gcHJvZ3Jlc3MpLCBKYW51YXJ5IDIwMTUuPC9zcGFuPjwvdGQ+PHRkIGNsYXNzPSJsaW5l bm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8i IHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48L3RkPjx0ZD4gPC90ZD48dGQg Y2xhc3M9InJibG9jayI+ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIDwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZh bGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGln bj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgW1JGQzIxMTldICBCcmFkbmVyLCBTLiwg IktleSB3b3JkcyBmb3IgdXNlIGluIFJGQ3MgdG8gSW5kaWNhdGU8L3RkPjx0ZD4gPC90ZD48dGQg Y2xhc3M9InJpZ2h0Ij4gICBbUkZDMjExOV0gIEJyYWRuZXIsIFMuLCAiS2V5IHdvcmRzIGZvciB1 c2UgaW4gUkZDcyB0byBJbmRpY2F0ZTwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9w Ij48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48 L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgICAgICAgICAgICBSZXF1aXJlbWVudCBMZXZlbHMiLCBC Q1AgMTQsIFJGQyAyMTE5LCBNYXJjaCAxOTk3LjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmln aHQiPiAgICAgICAgICAgICAgUmVxdWlyZW1lbnQgTGV2ZWxzIiwgQkNQIDE0LCBSRkMgMjExOSwg TWFyY2ggMTk5Ny48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3Ry Pg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xh c3M9ImxlZnQiPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPjwvdGQ+PHRkIGNsYXNz PSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJs aW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgW1JGQzQ2NDhdICBK b3NlZnNzb24sIFMuLCAiVGhlIEJhc2UxNiwgQmFzZTMyLCBhbmQgQmFzZTY0IERhdGE8L3RkPjx0 ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBbUkZDNDY0OF0gIEpvc2Vmc3NvbiwgUy4sICJU aGUgQmFzZTE2LCBCYXNlMzIsIGFuZCBCYXNlNjQgRGF0YTwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8i IHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZh bGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgICAgICAgICAgICBFbmNvZGluZ3Mi LCBSRkMgNDY0OCwgT2N0b2JlciAyMDA2LjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQi PiAgICAgICAgICAgICAgRW5jb2RpbmdzIiwgUkZDIDQ2NDgsIE9jdG9iZXIgMjAwNi48L3RkPjx0 ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBj bGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPjwvdGQ+PHRk PiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0i dG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9w Ij48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgW1JGQzQ4NjhdICBLZWxseSwgUy4gYW5kIFMuIEZy YW5rZWwsICJVc2luZyBITUFDLVNIQS0yNTYsIEhNQUMtU0hBLTwvdGQ+PHRkPiA8L3RkPjx0ZCBj bGFzcz0icmlnaHQiPiAgIFtSRkM0ODY4XSAgS2VsbHksIFMuIGFuZCBTLiBGcmFua2VsLCAiVXNp bmcgSE1BQy1TSEEtMjU2LCBITUFDLVNIQS08L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249 InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRv cCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgICAgICAgICAgICAgMzg0LCBhbmQgSE1BQy1TSEEt NTEyIHdpdGggSVBzZWMiLCBSRkMgNDg2OCwgTWF5IDIwMDcuPC90ZD48dGQ+IDwvdGQ+PHRkIGNs YXNzPSJyaWdodCI+ICAgICAgICAgICAgICAzODQsIGFuZCBITUFDLVNIQS01MTIgd2l0aCBJUHNl YyIsIFJGQyA0ODY4LCBNYXkgMjAwNy48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRv cCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+ PC90ZD48dGQgY2xhc3M9ImxlZnQiPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPjwv dGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+ PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAg W1JGQzUxMTZdICBNY0dyZXcsIEQuLCAiQW4gSW50ZXJmYWNlIGFuZCBBbGdvcml0aG1zIGZvciBB dXRoZW50aWNhdGVkPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgW1JGQzUxMTZd ICBNY0dyZXcsIEQuLCAiQW4gSW50ZXJmYWNlIGFuZCBBbGdvcml0aG1zIGZvciBBdXRoZW50aWNh dGVkPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAg IDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPjwvdGQ+PHRkPiA8 L3RkPjx0ZCBjbGFzcz0icmlnaHQiPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4N CiAgICAgIDx0ciBiZ2NvbG9yPSJncmF5Ij48dGQ+PC90ZD48dGg+PGEgbmFtZT0icGFydC1sMTAi PjxzbWFsbD5za2lwcGluZyB0byBjaGFuZ2UgYXQ8L3NtYWxsPjxlbT4gcGFnZSAxNiwgbGluZSAz MjwvZW0+PC9hPjwvdGg+PHRoPiA8L3RoPjx0aD48YSBuYW1lPSJwYXJ0LXIxMCI+PHNtYWxsPnNr aXBwaW5nIHRvIGNoYW5nZSBhdDwvc21hbGw+PGVtPiBwYWdlIDE3LCBsaW5lIDM2PC9lbT48L2E+ PC90aD48dGQ+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249 InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIFtSRkM2NzQ5XSAgSGFyZHQsIEQuLCAiVGhl IE9BdXRoIDIuMCBBdXRob3JpemF0aW9uIEZyYW1ld29yayIsIFJGQzwvdGQ+PHRkPiA8L3RkPjx0 ZCBjbGFzcz0icmlnaHQiPiAgIFtSRkM2NzQ5XSAgSGFyZHQsIEQuLCAiVGhlIE9BdXRoIDIuMCBB dXRob3JpemF0aW9uIEZyYW1ld29yayIsIFJGQzwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGln bj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0i dG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgICAgICAgICAgICA2NzQ5LCBPY3RvYmVyIDIw MTIuPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgICAgICAgICAgICA2NzQ5LCBP Y3RvYmVyIDIwMTIuPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90 cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNs YXNzPSJsZWZ0Ij48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij48L3RkPjx0ZCBjbGFz cz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0i bGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIFtpYW5hLXN0dW5d PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgW2lhbmEtc3R1bl08L3RkPjx0ZCBj bGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFz cz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgICAgICAgICAg ICAgSUFOQSwgLCAiSUFOQTogU1RVTiBBdHRyaWJ1dGVzIiwgQXByaWwgMjAxMSw8L3RkPjx0ZD4g PC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICAgICAgICAgICAgIElBTkEsICwgIklBTkE6IFNUVU4g QXR0cmlidXRlcyIsIEFwcmlsIDIwMTEsPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0 b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3Ai PjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICAgICAgICAgICAgICZsdDtodHRwOi8vd3d3LmlhbmEu b3JnL2Fzc2lnbm1lbnRzL3N0dW4tcGFyYW1ldGVycy9zdHVuLXBhPC90ZD48dGQ+IDwvdGQ+PHRk IGNsYXNzPSJyaWdodCI+ICAgICAgICAgICAgICAmbHQ7aHR0cDovL3d3dy5pYW5hLm9yZy9hc3Np Z25tZW50cy9zdHVuLXBhcmFtZXRlcnMvc3R1bi1wYTwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZh bGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGln bj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgICAgICAgICAgICByYW1ldGVycy54bWwm Z3Q7LjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgICAgICAgICAgICAgcmFtZXRl cnMueG1sJmd0Oy48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3Ry Pg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xh c3M9ImxlZnQiPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPjwvdGQ+PHRkIGNsYXNz PSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJs aW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+MTQuMi4gIEluZm9ybWF0 aXZlIFJlZmVyZW5jZXM8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4xNC4yLiAgSW5m b3JtYXRpdmUgUmVmZXJlbmNlczwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48 L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3Rk Pjx0ZCBjbGFzcz0ibGVmdCI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+PC90ZD48 dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQ+ PGEgbmFtZT0iZGlmZjAwMzQiPjwvYT48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJs aW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj4gICA8c3BhbiBjbGFz cz0iZGVsZXRlIj5bSS1ELmlldGYtam9zZS1qc29uLXdlYi1hbGdvcml0aG1zXTwvc3Bhbj48L3Rk Pjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFs aWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWdu PSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPjxzcGFuIGNsYXNzPSJkZWxldGUiPiAgICAg ICAgICAgICAgSm9uZXMsIE0uLCAiSlNPTiBXZWIgQWxnb3JpdGhtcyAoSldBKSIsIGRyYWZ0LWll dGYtam9zZS08L3NwYW4+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPjwvdGQ+PHRk IGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNs YXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48c3BhbiBj bGFzcz0iZGVsZXRlIj4gICAgICAgICAgICAgIGpzb24td2ViLWFsZ29yaXRobXMtNDAgKHdvcmsg aW4gcHJvZ3Jlc3MpLCBKYW51YXJ5IDIwMTUuPC9zcGFuPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFz cz0icmJsb2NrIj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3Ry Pg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xh c3M9ImxibG9jayI+ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgIDwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJs b2NrIj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAg ICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9Imxl ZnQiPiAgIFtJLUQuaWV0Zi1qb3NlLWpzb24td2ViLWVuY3J5cHRpb25dPC90ZD48dGQ+IDwvdGQ+ PHRkIGNsYXNzPSJyaWdodCI+ICAgW0ktRC5pZXRmLWpvc2UtanNvbi13ZWItZW5jcnlwdGlvbl08 L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRy Pjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAg ICAgICAgICAgICAgSm9uZXMsIE0uIGFuZCBKLiBIaWxkZWJyYW5kLCAiSlNPTiBXZWIgRW5jcnlw dGlvbiAoSldFKSIsPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgICAgICAgICAg ICBKb25lcywgTS4gYW5kIEouIEhpbGRlYnJhbmQsICJKU09OIFdlYiBFbmNyeXB0aW9uIChKV0Up Iiw8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAg PHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQi PiAgICAgICAgICAgICAgZHJhZnQtaWV0Zi1qb3NlLWpzb24td2ViLWVuY3J5cHRpb24tNDAgKHdv cmsgaW4gcHJvZ3Jlc3MpLDwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgICAgICAg ICAgICAgZHJhZnQtaWV0Zi1qb3NlLWpzb24td2ViLWVuY3J5cHRpb24tNDAgKHdvcmsgaW4gcHJv Z3Jlc3MpLDwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQog ICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0i bGVmdCI+ICAgICAgICAgICAgICBKYW51YXJ5IDIwMTUuPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNz PSJyaWdodCI+ICAgICAgICAgICAgICBKYW51YXJ5IDIwMTUuPC90ZD48dGQgY2xhc3M9ImxpbmVu byIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIg dmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij48L3RkPjx0ZD4gPC90ZD48dGQgY2xh c3M9InJpZ2h0Ij48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3Ry Pg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xh c3M9ImxlZnQiPiAgIFtJLUQuaWV0Zi1qb3NlLWpzb24td2ViLXNpZ25hdHVyZV08L3RkPjx0ZD4g PC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBbSS1ELmlldGYtam9zZS1qc29uLXdlYi1zaWduYXR1 cmVdPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAg IDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0 Ij4gICAgICAgICAgICAgIEpvbmVzLCBNLiwgQnJhZGxleSwgSi4sIGFuZCBOLiBTYWtpbXVyYSwg IkpTT04gV2ViPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgICAgICAgICAgICBK b25lcywgTS4sIEJyYWRsZXksIEouLCBhbmQgTi4gU2FraW11cmEsICJKU09OIFdlYjwvdGQ+PHRk IGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNs YXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgICAgICAg ICAgICBTaWduYXR1cmUgKEpXUykiLCBkcmFmdC1pZXRmLWpvc2UtanNvbi13ZWItc2lnbmF0dXJl LTQxPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgICAgICAgICAgICBTaWduYXR1 cmUgKEpXUykiLCBkcmFmdC1pZXRmLWpvc2UtanNvbi13ZWItc2lnbmF0dXJlLTQxPC90ZD48dGQg Y2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xh c3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICAgICAgICAg ICAgICh3b3JrIGluIHByb2dyZXNzKSwgSmFudWFyeSAyMDE1LjwvdGQ+PHRkPiA8L3RkPjx0ZCBj bGFzcz0icmlnaHQiPiAgICAgICAgICAgICAgKHdvcmsgaW4gcHJvZ3Jlc3MpLCBKYW51YXJ5IDIw MTUuPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAg IDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0 Ij48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij48L3RkPjx0ZCBjbGFzcz0ibGluZW5v IiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2 YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIFtJLUQuaWV0Zi1vYXV0aC1qc29u LXdlYi10b2tlbl08L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBbSS1ELmlldGYt b2F1dGgtanNvbi13ZWItdG9rZW5dPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3Ai PjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwv dGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICAgICAgICAgICAgIEpvbmVzLCBNLiwgQnJhZGxleSwgSi4s IGFuZCBOLiBTYWtpbXVyYSwgIkpTT04gV2ViIFRva2VuPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNz PSJyaWdodCI+ICAgICAgICAgICAgICBKb25lcywgTS4sIEJyYWRsZXksIEouLCBhbmQgTi4gU2Fr aW11cmEsICJKU09OIFdlYiBUb2tlbjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9w Ij48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48 L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgICAgICAgICAgICAoSldUKSIsIGRyYWZ0LWlldGYtb2F1 dGgtanNvbi13ZWItdG9rZW4tMzIgKHdvcmsgaW48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJp Z2h0Ij4gICAgICAgICAgICAgIChKV1QpIiwgZHJhZnQtaWV0Zi1vYXV0aC1qc29uLXdlYi10b2tl bi0zMiAod29yayBpbjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwv dHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBj bGFzcz0ibGVmdCI+ICAgICAgICAgICAgICBwcm9ncmVzcyksIERlY2VtYmVyIDIwMTQuPC90ZD48 dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgICAgICAgICAgICBwcm9ncmVzcyksIERlY2Vt YmVyIDIwMTQuPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4N CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNz PSJsZWZ0Ij48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij48L3RkPjx0ZCBjbGFzcz0i bGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGlu ZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIFtJLUQuaWV0Zi1vYXV0 aC1wb3AtYXJjaGl0ZWN0dXJlXTwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIFtJ LUQuaWV0Zi1vYXV0aC1wb3AtYXJjaGl0ZWN0dXJlXTwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZh bGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGln bj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgICAgICAgICAgICBIdW50LCBQLiwgUmlj aGVyLCBKLiwgTWlsbHMsIFcuLCBNaXNocmEsIFAuLCBhbmQgSC48L3RkPjx0ZD4gPC90ZD48dGQg Y2xhc3M9InJpZ2h0Ij4gICAgICAgICAgICAgIEh1bnQsIFAuLCBSaWNoZXIsIEouLCBNaWxscywg Vy4sIE1pc2hyYSwgUC4sIGFuZCBILjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9w Ij48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48 L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgICAgICAgICAgICBUc2Nob2ZlbmlnLCAiT0F1dGggMi4w IFByb29mLW9mLVBvc3Nlc3Npb24gKFBvUCkgU2VjdXJpdHk8L3RkPjx0ZD4gPC90ZD48dGQgY2xh c3M9InJpZ2h0Ij4gICAgICAgICAgICAgIFRzY2hvZmVuaWcsICJPQXV0aCAyLjAgUHJvb2Ytb2Yt UG9zc2Vzc2lvbiAoUG9QKSBTZWN1cml0eTwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0i dG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkPjxhIG5hbWU9ImRpZmYwMDM1Ij48L2E+PC90 ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48 dGQgY2xhc3M9ImxibG9jayI+ICAgICAgICAgICAgICBBcmNoaXRlY3R1cmUiLCA8c3BhbiBjbGFz cz0iZGVsZXRlIj5kcmFmdC1pZXRmLW9hdXRoLXBvcC1hcmNoaXRlY3R1cmUtMDA8L3NwYW4+ICh3 b3JrPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPiAgICAgICAgICAgICAgQXJjaGl0 ZWN0dXJlIiwgPHNwYW4gY2xhc3M9Imluc2VydCI+ZHJhZnQtaWV0Zi1vYXV0aC1wb3AtYXJjaGl0 ZWN0dXJlLTAxPC9zcGFuPiAod29yazwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9w Ij48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48 L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj4gICAgICAgICAgICAgIGluIHByb2dyZXNzKSwgPHNwYW4g Y2xhc3M9ImRlbGV0ZSI+SnVseSAyMDE0Ljwvc3Bhbj48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9 InJibG9jayI+ICAgICAgICAgICAgICBpbiBwcm9ncmVzcyksIDxzcGFuIGNsYXNzPSJpbnNlcnQi Pk1hcmNoIDIwMTUuPC9zcGFuPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48 L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3Rk Pjx0ZCBjbGFzcz0ibGVmdCI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+PC90ZD48 dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQg Y2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBbSS1E LmlldGYtb2F1dGgtcG9wLWtleS1kaXN0cmlidXRpb25dPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNz PSJyaWdodCI+ICAgW0ktRC5pZXRmLW9hdXRoLXBvcC1rZXktZGlzdHJpYnV0aW9uXTwvdGQ+PHRk IGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNs YXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgICAgICAg ICAgICBCcmFkbGV5LCBKLiwgSHVudCwgUC4sIEpvbmVzLCBNLiwgYW5kIEguIFRzY2hvZmVuaWcs PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgICAgICAgICAgICBCcmFkbGV5LCBK LiwgSHVudCwgUC4sIEpvbmVzLCBNLiwgYW5kIEguIFRzY2hvZmVuaWcsPC90ZD48dGQgY2xhc3M9 ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9Imxp bmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICAgICAgICAgICAgICJP QXV0aCAyLjAgUHJvb2Ytb2YtUG9zc2Vzc2lvbjogQXV0aG9yaXphdGlvbiBTZXJ2ZXIgdG88L3Rk Pjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICAgICAgICAgICAgICJPQXV0aCAyLjAgUHJv b2Ytb2YtUG9zc2Vzc2lvbjogQXV0aG9yaXphdGlvbiBTZXJ2ZXIgdG88L3RkPjx0ZCBjbGFzcz0i bGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGlu ZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgICAgICAgICAgICAgQ2xp ZW50IEtleSBEaXN0cmlidXRpb24iLCBkcmFmdC1pZXRmLW9hdXRoLXBvcC1rZXktPC90ZD48dGQ+ IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgICAgICAgICAgICBDbGllbnQgS2V5IERpc3RyaWJ1 dGlvbiIsIGRyYWZ0LWlldGYtb2F1dGgtcG9wLWtleS08L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2 YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZD48YSBuYW1lPSJkaWZmMDAzNiI+ PC9hPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3Ai PjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPiAgICAgICAgICAgICAgZGlzdHJpYnV0aW9uLTA8c3Bh biBjbGFzcz0iZGVsZXRlIj4wICh3b3JrIGluIHByb2dyZXNzKSwgSnVseSAyMDE0PC9zcGFuPi48 L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+ICAgICAgICAgICAgICBkaXN0cmlidXRp b24tMDxzcGFuIGNsYXNzPSJpbnNlcnQiPjEgKHdvcmsgaW4gcHJvZ3Jlc3MpLCBNYXJjaCAyMDE1 PC9zcGFuPi48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0K ICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9 ImxlZnQiPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPjwvdGQ+PHRkIGNsYXNzPSJs aW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5l bm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgW0ktRC5pZXRmLXJ0Y3dl Yi1vdmVydmlld108L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBbSS1ELmlldGYt cnRjd2ViLW92ZXJ2aWV3XTwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3Rk PjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0 ZCBjbGFzcz0ibGVmdCI+ICAgICAgICAgICAgICBBbHZlc3RyYW5kLCBILiwgIk92ZXJ2aWV3OiBS ZWFsIFRpbWUgUHJvdG9jb2xzIGZvcjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAg ICAgICAgICAgICAgQWx2ZXN0cmFuZCwgSC4sICJPdmVydmlldzogUmVhbCBUaW1lIFByb3RvY29s cyBmb3I8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAg ICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9Imxl ZnQiPiAgICAgICAgICAgICAgQnJvd3Nlci1iYXNlZCBBcHBsaWNhdGlvbnMiLCBkcmFmdC1pZXRm LXJ0Y3dlYi1vdmVydmlldy0xMzwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgICAg ICAgICAgICAgQnJvd3Nlci1iYXNlZCBBcHBsaWNhdGlvbnMiLCBkcmFmdC1pZXRmLXJ0Y3dlYi1v dmVydmlldy0xMzwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+ DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFz cz0ibGVmdCI+ICAgICAgICAgICAgICAod29yayBpbiBwcm9ncmVzcyksIE5vdmVtYmVyIDIwMTQu PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgICAgICAgICAgICAod29yayBpbiBw cm9ncmVzcyksIE5vdmVtYmVyIDIwMTQuPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0 b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3Ai PjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij48 L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRy Pjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAg IFtJLUQuaWV0Zi10cmFtLXN0dW5iaXNdPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ ICAgW0ktRC5pZXRmLXRyYW0tc3R1bmJpc108L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249 InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRv cCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgICAgICAgICAgICAgUGV0aXQtSHVndWVuaW4sIE0u LCBTYWxndWVpcm8sIEcuLCBSb3NlbmJlcmcsIEouLCBXaW5nLDwvdGQ+PHRkPiA8L3RkPjx0ZCBj bGFzcz0icmlnaHQiPiAgICAgICAgICAgICAgUGV0aXQtSHVndWVuaW4sIE0uLCBTYWxndWVpcm8s IEcuLCBSb3NlbmJlcmcsIEouLCBXaW5nLDwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0i dG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9w Ij48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgICAgICAgICAgICBELiwgTWFoeSwgUi4sIGFuZCBQ LiBNYXR0aGV3cywgIlNlc3Npb24gVHJhdmVyc2FsPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJy aWdodCI+ICAgICAgICAgICAgICBELiwgTWFoeSwgUi4sIGFuZCBQLiBNYXR0aGV3cywgIlNlc3Np b24gVHJhdmVyc2FsPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90 cj4NCiAgICAgIDx0cj48dGQ+PGEgbmFtZT0iZGlmZjAwMzciPjwvYT48L3RkPjwvdHI+DQogICAg ICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJs b2NrIj4gICAgICAgICAgICAgIFV0aWxpdGllcyBmb3IgTkFUIChTVFVOKSIsIDxzcGFuIGNsYXNz PSJkZWxldGUiPmRyYWZ0LWlldGYtdHJhbS1zdHVuYmlzLTAxPC9zcGFuPjwvdGQ+PHRkPiA8L3Rk Pjx0ZCBjbGFzcz0icmJsb2NrIj4gICAgICAgICAgICAgIFV0aWxpdGllcyBmb3IgTkFUIChTVFVO KSIsIDxzcGFuIGNsYXNzPSJpbnNlcnQiPmRyYWZ0LWlldGYtdHJhbS1zdHVuYmlzLTA0PC9zcGFu PjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8 dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2Nr Ij4gICAgICAgICAgICAgICh3b3JrIGluIHByb2dyZXNzKSwgPHNwYW4gY2xhc3M9ImRlbGV0ZSI+ RmVicnVhcnk8L3NwYW4+IDIwMTUuPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPiAg ICAgICAgICAgICAgKHdvcmsgaW4gcHJvZ3Jlc3MpLCA8c3BhbiBjbGFzcz0iaW5zZXJ0Ij5NYXJj aDwvc3Bhbj4gMjAxNS48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48 L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQg Y2xhc3M9ImxlZnQiPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPjwvdGQ+PHRkIGNs YXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNz PSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgW0ktRC5pZXRm LXV0YS10bHMtYmNwXTwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIFtJLUQuaWV0 Zi11dGEtdGxzLWJjcF08L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48 L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQg Y2xhc3M9ImxlZnQiPiAgICAgICAgICAgICAgU2hlZmZlciwgWS4sIEhvbHosIFIuLCBhbmQgUC4g U2FpbnQtQW5kcmUsPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgICAgICAgICAg ICBTaGVmZmVyLCBZLiwgSG9seiwgUi4sIGFuZCBQLiBTYWludC1BbmRyZSw8L3RkPjx0ZCBjbGFz cz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0i bGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgICAgICAgICAgICAg IlJlY29tbWVuZGF0aW9ucyBmb3IgU2VjdXJlIFVzZSBvZiBUTFMgYW5kIERUTFMiLCBkcmFmdC08 L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICAgICAgICAgICAgICJSZWNvbW1lbmRh dGlvbnMgZm9yIFNlY3VyZSBVc2Ugb2YgVExTIGFuZCBEVExTIiwgZHJhZnQtPC90ZD48dGQgY2xh c3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9 ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICAgICAgICAgICAg IGlldGYtdXRhLXRscy1iY3AtMTEgKHdvcmsgaW4gcHJvZ3Jlc3MpLCBGZWJydWFyeSAyMDE1Ljwv dGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgICAgICAgICAgICAgaWV0Zi11dGEtdGxz LWJjcC0xMSAod29yayBpbiBwcm9ncmVzcyksIEZlYnJ1YXJ5IDIwMTUuPC90ZD48dGQgY2xhc3M9 ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9Imxp bmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij48L3RkPjx0ZD4gPC90ZD48 dGQgY2xhc3M9InJpZ2h0Ij48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90 ZD48L3RyPg0KICAgICAgPHRyPjx0ZD48YSBuYW1lPSJkaWZmMDAzOCI+PC9hPjwvdGQ+PC90cj4N CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNz PSJsYmxvY2siPiAgIDxzcGFuIGNsYXNzPSJkZWxldGUiPltSRkMyMTA0XSAgS3Jhd2N6eWssIEgu LCBCZWxsYXJlLCBNLiw8L3NwYW4+IGFuZCA8c3BhbiBjbGFzcz0iZGVsZXRlIj5SLiBDYW5ldHRp LCAiSE1BQzogS2V5ZWQtPC9zcGFuPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj4g ICA8c3BhbiBjbGFzcz0iaW5zZXJ0Ij5bSS1ELm1jZ3Jldy1hZWFkLWFlcy1jYmMtaG1hYy1zaGEy XTwvc3Bhbj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0K ICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9 ImxibG9jayI+PHNwYW4gY2xhc3M9ImRlbGV0ZSI+ICAgICAgICAgICAgICBIYXNoaW5nIGZvciBN ZXNzYWdlIEF1dGhlbnRpY2F0aW9uIiwgUkZDIDIxMDQsIEZlYnJ1YXJ5PC9zcGFuPjwvdGQ+PHRk PiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48c3BhbiBjbGFzcz0iaW5zZXJ0Ij4gICAgICAgICAg ICAgIE1jR3JldywgRC4sIEZvbGV5LCBKLiw8L3NwYW4+IGFuZCA8c3BhbiBjbGFzcz0iaW5zZXJ0 Ij5LLiBQYXRlcnNvbiwgIkF1dGhlbnRpY2F0ZWQ8L3NwYW4+PC90ZD48dGQgY2xhc3M9ImxpbmVu byIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIg dmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPjxzcGFuIGNsYXNzPSJkZWxldGUi PiAgICAgICAgICAgICAgMTk5Ny48L3NwYW4+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxv Y2siPjxzcGFuIGNsYXNzPSJpbnNlcnQiPiAgICAgICAgICAgICAgRW5jcnlwdGlvbiB3aXRoIEFF Uy1DQkMgYW5kIEhNQUMtU0hBIiwgZHJhZnQtbWNncmV3LWFlYWQtPC9zcGFuPjwvdGQ+PHRkIGNs YXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNz PSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48L3RkPjx0ZD4g PC90ZD48dGQgY2xhc3M9InJibG9jayI+PHNwYW4gY2xhc3M9Imluc2VydCI+ICAgICAgICAgICAg ICBhZXMtY2JjLWhtYWMtc2hhMi0wNSAod29yayBpbiBwcm9ncmVzcyksIEp1bHkgMjAxNC48L3Nw YW4+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAg IDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0 Ij48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij48L3RkPjx0ZCBjbGFzcz0ibGluZW5v IiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2 YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIFtSRkM1MjQ2XSAgRGllcmtzLCBU LiBhbmQgRS4gUmVzY29ybGEsICJUaGUgVHJhbnNwb3J0IExheWVyIFNlY3VyaXR5PC90ZD48dGQ+ IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgW1JGQzUyNDZdICBEaWVya3MsIFQuIGFuZCBFLiBS ZXNjb3JsYSwgIlRoZSBUcmFuc3BvcnQgTGF5ZXIgU2VjdXJpdHk8L3RkPjx0ZCBjbGFzcz0ibGlu ZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5v IiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgICAgICAgICAgICAgKFRMUykg UHJvdG9jb2wgVmVyc2lvbiAxLjIiLCBSRkMgNTI0NiwgQXVndXN0IDIwMDguPC90ZD48dGQ+IDwv dGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgICAgICAgICAgICAoVExTKSBQcm90b2NvbCBWZXJzaW9u IDEuMiIsIFJGQyA1MjQ2LCBBdWd1c3QgMjAwOC48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxp Z249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249 InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmln aHQiPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAg ICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVm dCI+ICAgW1JGQzU3NjZdICBNYWh5LCBSLiwgTWF0dGhld3MsIFAuLCBhbmQgSi4gUm9zZW5iZXJn LCAiVHJhdmVyc2FsIFVzaW5nPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgW1JG QzU3NjZdICBNYWh5LCBSLiwgTWF0dGhld3MsIFAuLCBhbmQgSi4gUm9zZW5iZXJnLCAiVHJhdmVy c2FsIFVzaW5nPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4N CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNz PSJsZWZ0Ij4gICAgICAgICAgICAgIFJlbGF5cyBhcm91bmQgTkFUIChUVVJOKTogUmVsYXkgRXh0 ZW5zaW9ucyB0byBTZXNzaW9uPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgICAg ICAgICAgICBSZWxheXMgYXJvdW5kIE5BVCAoVFVSTik6IFJlbGF5IEV4dGVuc2lvbnMgdG8gU2Vz c2lvbjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAg ICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVm dCI+ICAgICAgICAgICAgICBUcmF2ZXJzYWwgVXRpbGl0aWVzIGZvciBOQVQgKFNUVU4pIiwgUkZD IDU3NjYsIEFwcmlsIDIwMTAuPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgICAg ICAgICAgICBUcmF2ZXJzYWwgVXRpbGl0aWVzIGZvciBOQVQgKFNUVU4pIiwgUkZDIDU3NjYsIEFw cmlsIDIwMTAuPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4N CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNz PSJsZWZ0Ij48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij48L3RkPjx0ZCBjbGFzcz0i bGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZD48YSBuYW1lPSJk aWZmMDAzOSI+PC9hPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFs aWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPiAgIDxzcGFuIGNsYXNzPSJkZWxldGUi PltSRkM1ODY5XSAgS3Jhd2N6eWssIEguIGFuZCBQLiBFcm9uZW4sICJITUFDLWJhc2VkIEV4dHJh Y3QtYW5kLUV4cGFuZDwvc3Bhbj48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+PC90 ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48 dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPjxz cGFuIGNsYXNzPSJkZWxldGUiPiAgICAgICAgICAgICAgS2V5IERlcml2YXRpb24gRnVuY3Rpb24g KEhLREYpIiwgUkZDIDU4NjksIE1heSAyMDEwLjwvc3Bhbj48L3RkPjx0ZD4gPC90ZD48dGQgY2xh c3M9InJibG9jayI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90 cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNs YXNzPSJsYmxvY2siPjxzcGFuIGNsYXNzPSJkZWxldGUiPjwvc3Bhbj48L3RkPjx0ZD4gPC90ZD48 dGQgY2xhc3M9InJibG9jayI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwv dGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+ PHRkIGNsYXNzPSJsYmxvY2siPjxzcGFuIGNsYXNzPSJkZWxldGUiPiAgIFtSRkM2MDYzXSAgRG9o ZXJ0eSwgQS4sIFBlaSwgTS4sIE1hY2hhbmksIFMuLCBhbmQgTS4gTnlzdHJvbSw8L3NwYW4+PC90 ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZh bGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGln bj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48c3BhbiBjbGFzcz0iZGVsZXRlIj4gICAg ICAgICAgICAgICJEeW5hbWljIFN5bW1ldHJpYyBLZXkgUHJvdmlzaW9uaW5nIFByb3RvY29sIChE U0tQUCkiLCBSRkM8L3NwYW4+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPjwvdGQ+ PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRk IGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48c3Bh biBjbGFzcz0iZGVsZXRlIj4gICAgICAgICAgICAgIDYwNjMsIERlY2VtYmVyIDIwMTAuPC9zcGFu PjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48L3RkPjx0ZCBjbGFzcz0ibGluZW5v IiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2 YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+ICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIDwvdGQ+ PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxp Z249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249 InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIFtSRkM2MzQ3XSAgUmVzY29ybGEsIEUuIGFu ZCBOLiBNb2RhZHVndSwgIkRhdGFncmFtIFRyYW5zcG9ydCBMYXllcjwvdGQ+PHRkPiA8L3RkPjx0 ZCBjbGFzcz0icmlnaHQiPiAgIFtSRkM2MzQ3XSAgUmVzY29ybGEsIEUuIGFuZCBOLiBNb2RhZHVn dSwgIkRhdGFncmFtIFRyYW5zcG9ydCBMYXllcjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGln bj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0i dG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgICAgICAgICAgICBTZWN1cml0eSBWZXJzaW9u IDEuMiIsIFJGQyA2MzQ3LCBKYW51YXJ5IDIwMTIuPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJy aWdodCI+ICAgICAgICAgICAgICBTZWN1cml0eSBWZXJzaW9uIDEuMiIsIFJGQyA2MzQ3LCBKYW51 YXJ5IDIwMTIuPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4N CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNz PSJsZWZ0Ij48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij48L3RkPjx0ZCBjbGFzcz0i bGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGlu ZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIFtSRkM2ODE5XSAgTG9k ZGVyc3RlZHQsIFQuLCBNY0dsb2luLCBNLiwgYW5kIFAuIEh1bnQsICJPQXV0aCAyLjA8L3RkPjx0 ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBbUkZDNjgxOV0gIExvZGRlcnN0ZWR0LCBULiwg TWNHbG9pbiwgTS4sIGFuZCBQLiBIdW50LCAiT0F1dGggMi4wPC90ZD48dGQgY2xhc3M9ImxpbmVu byIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIg dmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICAgICAgICAgICAgIFRocmVhdCBN b2RlbCBhbmQgU2VjdXJpdHkgQ29uc2lkZXJhdGlvbnMiLCBSRkMgNjgxOSw8L3RkPjx0ZD4gPC90 ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICAgICAgICAgICAgIFRocmVhdCBNb2RlbCBhbmQgU2VjdXJp dHkgQ29uc2lkZXJhdGlvbnMiLCBSRkMgNjgxOSw8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxp Z249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249 InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgICAgICAgICAgICAgSmFudWFyeSAyMDEzLjwv dGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgICAgICAgICAgICAgSmFudWFyeSAyMDEz LjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8 dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIg dmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFs aWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBbUkZDNzE1OV0gIEJyYXksIFQuLCAi VGhlIEphdmFTY3JpcHQgT2JqZWN0IE5vdGF0aW9uIChKU09OKSBEYXRhPC90ZD48dGQ+IDwvdGQ+ PHRkIGNsYXNzPSJyaWdodCI+ICAgW1JGQzcxNTldICBCcmF5LCBULiwgIlRoZSBKYXZhU2NyaXB0 IE9iamVjdCBOb3RhdGlvbiAoSlNPTikgRGF0YTwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGln bj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0i dG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgICAgICAgICAgICBJbnRlcmNoYW5nZSBGb3Jt YXQiLCBSRkMgNzE1OSwgTWFyY2ggMjAxNC48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0 Ij4gICAgICAgICAgICAgIEludGVyY2hhbmdlIEZvcm1hdCIsIFJGQyA3MTU5LCBNYXJjaCAyMDE0 LjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8 dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIg dmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90 ZD48dGQgY2xhc3M9ImxlZnQiPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPjwvdGQ+ PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4NCiAgICAgIDx0ciBiZ2NvbG9yPSJncmF5Ij48 dGQ+PC90ZD48dGg+PGEgbmFtZT0icGFydC1sMTEiPjxzbWFsbD5za2lwcGluZyB0byBjaGFuZ2Ug YXQ8L3NtYWxsPjxlbT4gcGFnZSAxOCwgbGluZSAzMjwvZW0+PC9hPjwvdGg+PHRoPiA8L3RoPjx0 aD48YSBuYW1lPSJwYXJ0LXIxMSI+PHNtYWxsPnNraXBwaW5nIHRvIGNoYW5nZSBhdDwvc21hbGw+ PGVtPiBwYWdlIDE5LCBsaW5lIDI4PC9lbT48L2E+PC90aD48dGQ+PC90ZD48L3RyPg0KICAgICAg PHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQi PjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8i IHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZh bGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+SW5wdXQgZGF0YSAoc2FtZSBmb3IgYWxs IHNhbXBsZXMgYmVsb3cpOjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPklucHV0IGRh dGEgKHNhbWUgZm9yIGFsbCBzYW1wbGVzIGJlbG93KTo8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2 YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxp Z249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0i cmlnaHQiPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQog ICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0i bGVmdCI+Ly9TVFVOIFNFUlZFUiBOQU1FPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ Ly9TVFVOIFNFUlZFUiBOQU1FPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwv dGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+ PHRkIGNsYXNzPSJsZWZ0Ij5zZXJ2ZXJfbmFtZSA9ICJibGFja2Rvdy5jYXJsZW9uLmdvdiI7PC90 ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+c2VydmVyX25hbWUgPSAiYmxhY2tkb3cuY2Fy bGVvbi5nb3YiOzwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+ DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFz cz0ibGVmdCI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+PC90ZD48dGQgY2xhc3M9 ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9Imxp bmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4vL1NoYXJlZCBrZXkgYmV0 d2VlbiBBUyBhbmQgUlM8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4vL1NoYXJlZCBr ZXkgYmV0d2VlbiBBUyBhbmQgUlM8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+ PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90 ZD48dGQgY2xhc3M9ImxlZnQiPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPjwvdGQ+ PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRk IGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+bG9uZ190 ZXJtX2tleSA9IFx4NDhceDQ3XHg2Ylx4NmFceDMzXHgzMlx4NGJceDRhXHg0N1x4NjlceDc1XHg3 OTwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPmxvbmdfdGVybV9rZXkgPSBceDQ4XHg0 N1x4NmJceDZhXHgzM1x4MzJceDRiXHg0YVx4NDdceDY5XHg3NVx4Nzk8L3RkPjx0ZCBjbGFzcz0i bGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGlu ZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgICAgICAgICAgICAgICBc eDMwXHgzOVx4MzhceDczXHg2NFx4NjZceDYxXHg3MVx4NjJceDRlXHg2YVx4NGY8L3RkPjx0ZD4g PC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICAgICAgICAgICAgICAgXHgzMFx4MzlceDM4XHg3M1x4 NjRceDY2XHg2MVx4NzFceDYyXHg0ZVx4NmFceDRmPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFs aWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQ+PGEgbmFtZT0iZGlmZjAwNDAiPjwv YT48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48 L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj4gICAgICAgICAgICAgICAgPHNwYW4gY2xhc3M9ImRlbGV0 ZSI+XHg2OVx4NjFceDdhXHgzN1x4MzFceDM5XHgzMlx4MzM7PC9zcGFuPjwvdGQ+PHRkPiA8L3Rk Pjx0ZCBjbGFzcz0icmJsb2NrIj4gICAgICAgICAgICAgICAgPHNwYW4gY2xhc3M9Imluc2VydCI+ ICAgXHg2OVx4NjFceDdhXHgzN1x4MzFceDM5XHgzMlx4MzM8L3NwYW4+PC90ZD48dGQgY2xhc3M9 ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9Imxp bmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij48L3RkPjx0ZD4gPC90ZD48 dGQgY2xhc3M9InJpZ2h0Ij48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90 ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48 dGQgY2xhc3M9ImxlZnQiPi8vTUFDIGtleSBvZiB0aGUgc2Vzc2lvbiAoaW5jbHVkZWQgaW4gdGhl IHRva2VuKTwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPi8vTUFDIGtleSBvZiB0aGUg c2Vzc2lvbiAoaW5jbHVkZWQgaW4gdGhlIHRva2VuKTwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZh bGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGln bj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+bWFjX2tleSA9IFx4NWFceDZiXHg3M1x4NmFc eDcwXHg3N1x4NjVceDZmXHg2OVx4NzhceDU4XHg2ZFx4NzZceDZlPC90ZD48dGQ+IDwvdGQ+PHRk IGNsYXNzPSJyaWdodCI+bWFjX2tleSA9IFx4NWFceDZiXHg3M1x4NmFceDcwXHg3N1x4NjVceDZm XHg2OVx4NzhceDU4XHg2ZFx4NzZceDZlPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0 b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3Ai PjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICAgICAgICAgXHgzNlx4MzdceDM1XHgzM1x4MzRceDZk OzwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgICAgICAgICBceDM2XHgzN1x4MzVc eDMzXHgzNFx4NmQ7PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90 cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNs YXNzPSJsZWZ0Ij48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij48L3RkPjx0ZCBjbGFz cz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0i bGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPi8vbGVuZ3RoIG9mIHRo ZSBNQUMga2V5PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+Ly9sZW5ndGggb2YgdGhl IE1BQyBrZXk8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0K ICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9 ImxlZnQiPm1hY19rZXlfbGVuZ3RoICA9ICAyMDs8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJp Z2h0Ij5tYWNfa2V5X2xlbmd0aCAgPSAgMjA7PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWdu PSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0 b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0 Ij48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAg PHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQi Pi8vVGhlIHRpbWVzdGFtcCBmaWVsZCBpbiB0aGUgdG9rZW48L3RkPjx0ZD4gPC90ZD48dGQgY2xh c3M9InJpZ2h0Ij4vL1RoZSB0aW1lc3RhbXAgZmllbGQgaW4gdGhlIHRva2VuPC90ZD48dGQgY2xh c3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9 ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij50b2tlbl90aW1lc3Rh bXAgPSA5MjQ3MDMwMDcwNDc2ODs8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij50b2tl bl90aW1lc3RhbXAgPSA5MjQ3MDMwMDcwNDc2ODs8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxp Z249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249 InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmln aHQiPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAg ICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVm dCI+Ly9UaGUgbGlmZXRpbWUgb2YgdGhlIHRva2VuPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJy aWdodCI+Ly9UaGUgbGlmZXRpbWUgb2YgdGhlIHRva2VuPC90ZD48dGQgY2xhc3M9ImxpbmVubyIg dmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFs aWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij50b2tlbl9saWZldGltZSA9IDM2MDA7PC90 ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+dG9rZW5fbGlmZXRpbWUgPSAzNjAwOzwvdGQ+ PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRk IGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+PC90ZD48 dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWdu PSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0 b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4vL25vbmNlIGZvciBBRUFEIHdoZW4gQUVBRCBpcyB1 c2VkPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+Ly9ub25jZSBmb3IgQUVBRCB3aGVu IEFFQUQgaXMgdXNlZDwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwv dHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBj bGFzcz0ibGVmdCI+YWVhZF9ub25jZSA9IFx4NjhceDM0XHg2YVx4MzNceDZiXHgzMlx4NmNceDMy XHg2ZVx4MzRceDYyXHgzNTs8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij5hZWFkX25v bmNlID0gXHg2OFx4MzRceDZhXHgzM1x4NmJceDMyXHg2Y1x4MzJceDZlXHgzNFx4NjJceDM1Ozwv dGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+ PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+PC90 ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFs aWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQ+PGEgbmFtZT0iZGlmZjAwNDEiPjwv YT48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48 L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48c3BhbiBjbGFzcz0iZGVsZXRlIj5TYW1wbGVzPC9zcGFu Pjo8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+PHNwYW4gY2xhc3M9Imluc2VydCI+ ICAgU2FtcGxlPC9zcGFuPjo8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90 ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48 dGQgY2xhc3M9ImxlZnQiPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPjwvdGQ+PHRk IGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNs YXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+MSk8L3RkPjx0 ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4xKTwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGln bj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkPjxhIG5hbWU9ImRpZmYwMDQyIj48L2E+ PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90 ZD48dGQgY2xhc3M9ImxibG9jayI+ICA8c3BhbiBjbGFzcz0iZGVsZXRlIj5oa2RmIGhhc2ggZnVu Y3Rpb24gPSBTSEEtMjU2LDwvc3Bhbj48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+ PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0 cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2si PjxzcGFuIGNsYXNzPSJkZWxldGUiPiAgdG9rZW4gZW5jcnlwdGlvbiBhbGdvcml0aG0gPSBBRVMt MjU2LUNCQzwvc3Bhbj48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+PC90ZD48dGQg Y2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xh c3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPjxzcGFuIGNs YXNzPSJkZWxldGUiPiAgdG9rZW4gYXV0aCBhbGdvcml0aG0gPSBITUFDLVNIQS0yNTY8L3NwYW4+ PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8i IHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZh bGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48c3BhbiBjbGFzcz0iZGVsZXRlIj48 L3NwYW4+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPjwvdGQ+PHRkIGNsYXNzPSJs aW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5l bm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48c3BhbiBjbGFzcz0iZGVs ZXRlIj4gIFJlc3VsdDo8L3NwYW4+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPjwv dGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+ PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48 c3BhbiBjbGFzcz0iZGVsZXRlIj4gIEFTX1JTIGtleSAoMzIgYnl0ZXMpID0gXHhkOFx4YTRceDU0 XHgxXHg2OFx4Ylx4YjhceDdjXHg2Y1x4ODY8L3NwYW4+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNz PSJyYmxvY2siPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+ DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFz cz0ibGJsb2NrIj48c3BhbiBjbGFzcz0iZGVsZXRlIj4gICAgICAgICAgICAgICAgICAgICAgICAg XHhjNVx4MjlceDNlXHgzNVx4MzNceDkxXHg5Ylx4NTFceGZjXHhmOTwvc3Bhbj48L3RkPjx0ZD4g PC90ZD48dGQgY2xhc3M9InJibG9jayI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0 b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3Ai PjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPjxzcGFuIGNsYXNzPSJkZWxldGUiPiAgICAgICAgICAg ICAgICAgICAgICAgICBceGRlXHgyNVx4MTlceGE5XHhhM1x4NTZceDJiXHg1MVx4N2JceGUyXHg3 Nlx4NGY8L3NwYW4+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPjwvdGQ+PHRkIGNs YXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNz PSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48c3BhbiBjbGFz cz0iZGVsZXRlIj48L3NwYW4+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPjwvdGQ+ PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRk IGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48c3Bh biBjbGFzcz0iZGVsZXRlIj4gIEFVVEgga2V5ICgzMiBieXRlcykgPSBceDcyXHhlMVx4ZjlceGM5 XHhmZVx4YjlceGU3XHhkOFx4MmFceGNjXHgyZDwvc3Bhbj48L3RkPjx0ZD4gPC90ZD48dGQgY2xh c3M9InJibG9jayI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90 cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNs YXNzPSJsYmxvY2siPjxzcGFuIGNsYXNzPSJkZWxldGUiPiAgICAgICAgICAgICAgICAgICAgICAg IFx4YzNceDMzXHhkNFx4MmZceGMxXHg3Zlx4M2VceDM2XHgyOVx4ZmFceGY4XHg1MDwvc3Bhbj48 L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIg dmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFs aWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPjxzcGFuIGNsYXNzPSJkZWxldGUiPiAg ICAgICAgICAgICAgICAgICAgICAgIFx4MTZceDVjXHhjZlx4NjBceGQxXHg2N1x4YjlceDhmXHg3 Njwvc3Bhbj48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+PC90ZD48dGQgY2xhc3M9 ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9Imxp bmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPjxzcGFuIGNsYXNzPSJk ZWxldGUiPjwvc3Bhbj48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+PC90ZD48dGQg Y2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xh c3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPjxzcGFuIGNs YXNzPSJkZWxldGUiPiAgRW5jcnlwdGVkIHRva2VuICg4MCBieXRlcyA9IDQ4KzMyKSA9PC9zcGFu PjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48L3RkPjx0ZCBjbGFzcz0ibGluZW5v IiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2 YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+PHNwYW4gY2xhc3M9ImRlbGV0ZSI+ PC9zcGFuPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48L3RkPjx0ZCBjbGFzcz0i bGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGlu ZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+PHNwYW4gY2xhc3M9ImRl bGV0ZSI+IFx4MjZceDZceDM4XHg4Mlx4ZmFceDc0XHhhNlx4Mlx4NmFceGE2XHhhNFx4MzdceDMw XHhhY1x4ODNceGM2XHg0NVx4NTE8L3NwYW4+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxv Y2siPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAg ICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJs b2NrIj48c3BhbiBjbGFzcz0iZGVsZXRlIj4gXHg1Y1x4OWVceDNlXHhlYVx4ODZceDExXHhiOVx4 NGVceDhjXHgyN1x4MzhceDhhXHg1MVx4YTdceGRceGNceDc0XHg3Mjwvc3Bhbj48L3RkPjx0ZD4g PC90ZD48dGQgY2xhc3M9InJibG9jayI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0 b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3Ai PjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPjxzcGFuIGNsYXNzPSJkZWxldGUiPiBceGRmXHhiOFx4 MTJceDZhXHg4ZVx4MTdceGIzXHg1MFx4MTZceDEwXHhlZVx4N2VceDUzXHhlMVx4OTBceDZlXHgz Ylx4Mzc8L3NwYW4+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPjwvdGQ+PHRkIGNs YXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNz PSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48c3BhbiBjbGFz cz0iZGVsZXRlIj4gXHhkYVx4MTdceDU3XHhiMVx4YTJceDZceDY0XHg1Y1x4NjNceDc5XHgzM1x4 MzRceDdkXHhhYlx4NzFceDU2XHg5OFx4MmI8L3NwYW4+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNz PSJyYmxvY2siPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+ DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFz cz0ibGJsb2NrIj48c3BhbiBjbGFzcz0iZGVsZXRlIj4gXHgxXHhhNlx4NjZceDI5XHhjZVx4YjFc eGE1XHhiNDwvc3Bhbj48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+PC90ZD48dGQg Y2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xh c3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPjxzcGFuIGNs YXNzPSJkZWxldGUiPjwvc3Bhbj48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+PC90 ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48 dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPjxz cGFuIGNsYXNzPSJkZWxldGUiPiAgMik8L3NwYW4+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJy YmxvY2siPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQog ICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0i bGVmdCI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+PC90ZD48dGQgY2xhc3M9Imxp bmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQ+PGEgbmFtZT0iZGlm ZjAwNDMiPjwvYT48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGln bj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48c3BhbiBjbGFzcz0iZGVsZXRlIj4gIGhr ZGYgaGFzaCBmdW5jdGlvbiA9IFNIQS0yNTYsPC9zcGFuPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFz cz0icmJsb2NrIj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3Ry Pg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xh c3M9ImxlZnQiPiAgdG9rZW4gZW5jcnlwdGlvbiBhbGdvcml0aG0gPSBBRUFEX0FFU18yNTZfR0NN PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICB0b2tlbiBlbmNyeXB0aW9uIGFsZ29y aXRobSA9IEFFQURfQUVTXzI1Nl9HQ008L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRv cCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+ PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgdG9rZW4gYXV0aCBhbGdvcml0aG0gPSBOL0E8L3RkPjx0 ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gIHRva2VuIGF1dGggYWxnb3JpdGhtID0gTi9BPC90 ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48 dGQ+PGEgbmFtZT0iZGlmZjAwNDQiPjwvYT48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNz PSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48c3BhbiBjbGFz cz0iZGVsZXRlIj4gICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgPC9zcGFuPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFz cz0icmJsb2NrIj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3Ry Pg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xh c3M9ImxlZnQiPiAgUmVzdWx0OjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgUmVz dWx0OjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAg ICA8dHI+PHRkPjxhIG5hbWU9ImRpZmYwMDQ1Ij48L2E+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0 ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+ICBB U19SUyBrZXkgKDMyIGJ5dGVzKSA9IDxzcGFuIGNsYXNzPSJkZWxldGUiPlx4ZDhceGE0XHg1NFx4 MVx4NjhceGJceGI4XHg3Y1x4NmNceDg2XHhjNVx4MjlceDNlPC9zcGFuPjwvdGQ+PHRkPiA8L3Rk Pjx0ZCBjbGFzcz0icmJsb2NrIj4gICAgIEFTX1JTIGtleSAoMzIgYnl0ZXMpID08L3RkPjx0ZCBj bGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFz cz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+PHNwYW4gY2xh c3M9ImRlbGV0ZSI+ICAgICAgICAgICAgICAgICAgICAgICAgIFx4MzVceDMzXHg5MVx4OWJceDUx XHhmY1x4ZjlceGRlXHgyNVx4MTlceGE5XHhhM1x4NTY8L3NwYW4+PC90ZD48dGQ+IDwvdGQ+PHRk IGNsYXNzPSJyYmxvY2siPiAgICAgPHNwYW4gY2xhc3M9Imluc2VydCI+XHg0OFx4NDdceDZiXHg2 YVx4MzNceDMyXHg0Ylx4NGFceDQ3XHg2OVx4NzVceDc5PC9zcGFuPjwvdGQ+PHRkIGNsYXNzPSJs aW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5l bm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48c3BhbiBjbGFzcz0iZGVs ZXRlIj4gICAgICAgICAgICAgICAgICAgICAgICAgXHgyYlx4NTFceDdiXHhlMlx4NzZceDRmPC9z cGFuPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48c3BhbiBjbGFzcz0iaW5zZXJ0 Ij4gICAgIFx4MzBceDM5XHgzOFx4NzNceDY0XHg2Nlx4NjFceDcxXHg2Mlx4NGVceDZhXHg0Zjwv c3Bhbj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAg ICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9Imxi bG9jayI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPjxzcGFuIGNsYXNzPSJpbnNl cnQiPiAgICAgXHg2OVx4NjFceDdhXHgzN1x4MzFceDM5XHgzMlx4MzM8L3NwYW4+PC90ZD48dGQg Y2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xh c3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPjwvdGQ+PHRk PiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj4gICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgPC90ZD48dGQgY2xhc3M9 ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9Imxp bmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gIEFVVEgga2V5ID0gTi9B PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICBBVVRIIGtleSA9IE4vQTwvdGQ+PHRk IGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNs YXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+PC90ZD48dGQ+ IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0 b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3Ai PjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gIEVuY3J5cHRlZCB0b2tlbiAoNjIgYnl0ZXMgPSAzNCAr IDE2ICsgMTIpID08L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gIEVuY3J5cHRlZCB0 b2tlbiAoNjIgYnl0ZXMgPSAzNCArIDE2ICsgMTIpID08L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2 YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxp Z249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0i cmlnaHQiPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQog ICAgICA8dHI+PHRkPjxhIG5hbWU9ImRpZmYwMDQ2Ij48L2E+PC90ZD48L3RyPg0KICAgICAgPHRy Pjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+ IDxzcGFuIGNsYXNzPSJkZWxldGUiPlx4ZDRceDg2XHg1Y1x4NWRceDU5XHhmYlx4M2ZceGUzXHhm Nlx4ZjFceGQ4XHhjM1x4MjJceGMyXHgyMlx4MjZceDhkXHgyZVx4ZjA8L3NwYW4+PC90ZD48dGQ+ IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPiAgICA8c3BhbiBjbGFzcz0iaW5zZXJ0Ij5ceGQ0XHg4 Nlx4NWNceDVkXHg1OVx4ZmJceDNmXHhlM1x4ZjZceGYxXHhkOFx4YzNceDIyXHhjMlx4MjJceDI2 XHg4ZDwvc3Bhbj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3Ry Pg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xh c3M9ImxibG9jayI+PHNwYW4gY2xhc3M9ImRlbGV0ZSI+IFx4YmVceDJceDViXHhiZFx4MTNceDQ5 XHg4OVx4NmVceGE1XHhjNVx4NTFceGVlXHhlZVx4N2ZceGQ5XHhlNFx4NDFceGQ3XHhjYjwvc3Bh bj48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+PHNwYW4gY2xhc3M9Imluc2VydCI+ ICAgIFx4MmVceGYwXHhiZVx4Mlx4NWJceGJkXHgxM1x4NDlceDg5XHg2ZVx4YTVceGM1XHg1MVx4 ZWVceGVlXHg3Zlx4ZDk8L3NwYW4+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3Ai PjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwv dGQ+PHRkIGNsYXNzPSJsYmxvY2siPjxzcGFuIGNsYXNzPSJkZWxldGUiPiBceDUxXHgyMFx4NDBc eGNjXHhjNVx4NTNceDkwXHgyZlx4ZGNceGJiXHg4ZFx4NTNceDY4XHgzNFx4NmFceDMzXHg2Ylx4 MzJceDZjPC9zcGFuPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48c3BhbiBjbGFz cz0iaW5zZXJ0Ij4gICAgXHhlNFx4NDFceGQ3XHhjYlx4NTFceDIwXHg0MFx4Y2NceGM1XHg1M1x4 OTBceDJmXHhkY1x4YmJceDhkXHg1M1x4Njg8L3NwYW4+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIg dmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFs aWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPjxzcGFuIGNsYXNzPSJkZWxldGUiPiBc eDMyXHg2ZVx4MzRceDYyXHgzNTwvc3Bhbj48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9j ayI+PHNwYW4gY2xhc3M9Imluc2VydCI+ICAgIFx4MzRceDZhXHgzM1x4NmJceDMyXHg2Y1x4MzJc eDZlXHgzNFx4NjJceDM1PC9zcGFuPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9w Ij48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48 L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48c3BhbiBjbGFzcz0iZGVsZXRlIj48L3NwYW4+PC90ZD48 dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGln bj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0i dG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48c3BhbiBjbGFzcz0iZGVsZXRlIj4gIDMpPC9z cGFuPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48L3RkPjx0ZCBjbGFzcz0ibGlu ZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5v IiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+PHNwYW4gY2xhc3M9ImRlbGV0 ZSI+PC9zcGFuPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48L3RkPjx0ZCBjbGFz cz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0i bGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+PHNwYW4gY2xhc3M9 ImRlbGV0ZSI+ICBoa2RmIGhhc2ggZnVuY3Rpb24gPSBTSEEtMSw8L3NwYW4+PC90ZD48dGQ+IDwv dGQ+PHRkIGNsYXNzPSJyYmxvY2siPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9w Ij48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48 L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48c3BhbiBjbGFzcz0iZGVsZXRlIj4gIHRva2VuIGVuY3J5 cHRpb24gYWxnb3JpdGhtID0gQUVTLTEyOC1DQkM8L3NwYW4+PC90ZD48dGQ+IDwvdGQ+PHRkIGNs YXNzPSJyYmxvY2siPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwv dHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBj bGFzcz0ibGJsb2NrIj48c3BhbiBjbGFzcz0iZGVsZXRlIj4gIHRva2VuIGF1dGggYWxnb3JpdGht ID0gSE1BQy1TSEEtMjU2LTEyODwvc3Bhbj48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9j ayI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAg IDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxv Y2siPjxzcGFuIGNsYXNzPSJkZWxldGUiPjwvc3Bhbj48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9 InJibG9jayI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4N CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNz PSJsYmxvY2siPjxzcGFuIGNsYXNzPSJkZWxldGUiPiAgUmVzdWx0Ojwvc3Bhbj48L3RkPjx0ZD4g PC90ZD48dGQgY2xhc3M9InJibG9jayI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0 b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3Ai PjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPjxzcGFuIGNsYXNzPSJkZWxldGUiPjwvc3Bhbj48L3Rk Pjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFs aWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWdu PSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPjxzcGFuIGNsYXNzPSJkZWxldGUiPiAgQVNf UlMga2V5ICgxNiBieXRlcykgPSBceDIyXHg5M1x4ZDFceDRceGFlXHgyOVx4NzNceDNlXHhjZFx4 MWFceDE4XHhiZFx4NTZceDQ1XHg2M1x4Njc8L3NwYW4+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNz PSJyYmxvY2siPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+ DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFz cz0ibGJsb2NrIj48c3BhbiBjbGFzcz0iZGVsZXRlIj4gIEFVVEgga2V5ICgzMiBieXRlcykgPSAg XHgwMFx4ZDJceDcwXHg3OFx4NjBceGM3XHg1NFx4YmJceDM0XHgzZVx4NGNceGQwXHhjY1x4MDNc eDY2XHg5Yzwvc3Bhbj48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+PC90ZD48dGQg Y2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xh c3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPjxzcGFuIGNs YXNzPSJkZWxldGUiPiAgICAgICAgICAgICAgICAgICAgICAgICBceDJlXHgxYVx4ODlceGUwXHhl ZVx4OTdceGI3XHg4ZVx4MzZceDRiXHg3Nlx4YjBceDM5XHg0Nlx4MTlceDRhPC9zcGFuPjwvdGQ+ PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxp Z249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249 InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+PHNwYW4gY2xhc3M9ImRlbGV0ZSI+PC9zcGFu PjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48L3RkPjx0ZCBjbGFzcz0ibGluZW5v IiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2 YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+PHNwYW4gY2xhc3M9ImRlbGV0ZSI+ ICBFbmNyeXB0ZWQgdG9rZW4gKDY0IGJ5dGVzID0gNDgrMTYpID08L3NwYW4+PC90ZD48dGQ+IDwv dGQ+PHRkIGNsYXNzPSJyYmxvY2siPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9w Ij48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48 L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48c3BhbiBjbGFzcz0iZGVsZXRlIj48L3NwYW4+PC90ZD48 dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGln bj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0i dG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48c3BhbiBjbGFzcz0iZGVsZXRlIj4gIFx4Zjhc eGVmXHg5NVx4ZGNceDZiXHgzNVx4NTBceDhhXHg2YVx4MzZceDhmXHhkOVx4ZGNceDUxXHg5Mlx4 MGNceDM5XHgyZlx4Y2JceGYwXHgxZTwvc3Bhbj48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJi bG9jayI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAg ICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJs YmxvY2siPjxzcGFuIGNsYXNzPSJkZWxldGUiPiAgXHgyZlx4NjZceDhkXHhiY1x4NTBceGI4XHgz MFx4N2NceGQ5XHgwNFx4ZjZceDI3XHhiMFx4OWVceDczXHhkY1x4MTVceGM4XHg5Nlx4ZmJceDRl PC9zcGFuPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48L3RkPjx0ZCBjbGFzcz0i bGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGlu ZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+PHNwYW4gY2xhc3M9ImRl bGV0ZSI+ICBceDNiXHg1Ylx4ZTNceGM3XHg1NFx4MjBceGMwXHhkMlx4OTBceDg4XHgwOFx4M2Rc eDcyXHg5Y1x4ZDJceDE3XHg2NVx4NDNceDhmXHhhYTwvc3Bhbj48L3RkPjx0ZD4gPC90ZD48dGQg Y2xhc3M9InJibG9jayI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+ PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRk IGNsYXNzPSJsYmxvY2siPjxzcGFuIGNsYXNzPSJkZWxldGUiPiAgXHg0MVx4NDg8L3NwYW4+PC90 ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZh bGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGln bj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJy aWdodCI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAg ICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJs ZWZ0Ij4gICAgICAgICAgICAgICAgICAgICAgICAgRmlndXJlIDU6IFNhbXBsZSB0aWNrZXRzPC90 ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgICAgICAgICAgICAgICAgICAgICAgIEZp Z3VyZSA1OiBTYW1wbGUgdGlja2V0czwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9w Ij48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48 L3RkPjx0ZCBjbGFzcz0ibGVmdCI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+PC90 ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48 dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij5BcHBl bmRpeCBCLiAgSW50ZXJhY3Rpb24gYmV0d2VlbiBjbGllbnQgYW5kIGF1dGhvcml6YXRpb24gc2Vy dmVyPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+QXBwZW5kaXggQi4gIEludGVyYWN0 aW9uIGJldHdlZW4gY2xpZW50IGFuZCBhdXRob3JpemF0aW9uIHNlcnZlcjwvdGQ+PHRkIGNsYXNz PSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJs aW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+PC90ZD48dGQ+IDwvdGQ+ PHRkIGNsYXNzPSJyaWdodCI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwv dGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+ PHRkIGNsYXNzPSJsZWZ0Ij4gICBDbGllbnQgbWFrZXMgYW4gSFRUUCByZXF1ZXN0IHRvIGFuIGF1 dGhvcml6YXRpb24gc2VydmVyIHRvIG9idGFpbiBhPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJy aWdodCI+ICAgQ2xpZW50IG1ha2VzIGFuIEhUVFAgcmVxdWVzdCB0byBhbiBhdXRob3JpemF0aW9u IHNlcnZlciB0byBvYnRhaW4gYTwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48 L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3Rk Pjx0ZCBjbGFzcz0ibGVmdCI+ICAgdG9rZW4gdGhhdCBjYW4gYmUgdXNlZCB0byBhdmFpbCBpdHNl bGYgb2YgU1RVTiBzZXJ2aWNlcy4gIFRoZSBTVFVOPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJy aWdodCI+ICAgdG9rZW4gdGhhdCBjYW4gYmUgdXNlZCB0byBhdmFpbCBpdHNlbGYgb2YgU1RVTiBz ZXJ2aWNlcy4gIFRoZSBTVFVOPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwv dGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+ PHRkIGNsYXNzPSJsZWZ0Ij4gICB0b2tlbiBpcyByZXR1cm5lZCBpbiBKU09OIHN5bnRheCBbUkZD NzE1OV0sIGFsb25nIHdpdGggb3RoZXIgT0F1dGg8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJp Z2h0Ij4gICB0b2tlbiBpcyByZXR1cm5lZCBpbiBKU09OIHN5bnRheCBbUkZDNzE1OV0sIGFsb25n IHdpdGggb3RoZXIgT0F1dGg8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90 ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48 dGQgY2xhc3M9ImxlZnQiPiAgIDIuMCBwYXJhbWV0ZXJzIGxpa2UgdG9rZW4gdHlwZSwga2V5LCB0 b2tlbiBsaWZldGltZSBhbmQga2lkIGRlZmluZWQ8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJp Z2h0Ij4gICAyLjAgcGFyYW1ldGVycyBsaWtlIHRva2VuIHR5cGUsIGtleSwgdG9rZW4gbGlmZXRp bWUgYW5kIGtpZCBkZWZpbmVkPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwv dGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+ PHRkIGNsYXNzPSJsZWZ0Ij4gICBpbiBbSS1ELmlldGYtb2F1dGgtcG9wLWtleS1kaXN0cmlidXRp b25dLjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIGluIFtJLUQuaWV0Zi1vYXV0 aC1wb3Ata2V5LWRpc3RyaWJ1dGlvbl0uPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0 b3AiPjwvdGQ+PC90cj4NCg0KICAgICA8dHI+PHRkPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij48L3Rk Pjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij48L3RkPjx0ZD48L3RkPjwvdHI+DQogICAgIDx0 ciBiZ2NvbG9yPSJncmF5Ij48dGggY29sc3Bhbj0iNSIgYWxpZ249ImNlbnRlciI+PGEgbmFtZT0i ZW5kIj4mbmJzcDtFbmQgb2YgY2hhbmdlcy4gNDYgY2hhbmdlIGJsb2Nrcy4mbmJzcDs8L2E+PC90 aD48L3RyPg0KICAgICA8dHIgY2xhc3M9InN0YXRzIj48dGQ+PC90ZD48dGg+PGk+MTk1IGxpbmVz IGNoYW5nZWQgb3IgZGVsZXRlZDwvaT48L3RoPjx0aD48aT4gPC9pPjwvdGg+PHRoPjxpPjEzNCBs aW5lcyBjaGFuZ2VkIG9yIGFkZGVkPC9pPjwvdGg+PHRkPjwvdGQ+PC90cj4NCiAgICAgPHRyPjx0 ZCBjb2xzcGFuPSI1IiBjbGFzcz0ic21hbGwiIGFsaWduPSJjZW50ZXIiPjxicj5UaGlzIGh0bWwg ZGlmZiB3YXMgcHJvZHVjZWQgYnkgcmZjZGlmZiAxLjQyLiBUaGUgbGF0ZXN0IHZlcnNpb24gaXMg YXZhaWxhYmxlIGZyb20gPGEgaHJlZj0iaHR0cDovL3d3dy50b29scy5pZXRmLm9yZy90b29scy9y ZmNkaWZmLyI+aHR0cDovL3Rvb2xzLmlldGYub3JnL3Rvb2xzL3JmY2RpZmYvPC9hPiA8L3RkPjwv dHI+DQogICA8L3Rib2R5PjwvdGFibGU+DQogICANCiAgIA0KWC1HZW5lcmF0b3I6IHB5aHQgMC4z NQ0KDQo8IS0tIGFyZ3M6IHsnLS1vbGRjb2xvdXInOiAncmVkJywgJy0td2lkdGgnOiAnJywgJ2Rp ZmZ0eXBlJzogJy0taHRtbCcsICdmaWxlbmFtZTInOiAnXG5cblxuXG5UUkFNICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgVC4gUmVkZHlc bkludGVybmV0LURyYWZ0ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICBQLiBQYXRpbFxuSW50ZW5kZWQgc3RhdHVzOiBTdGFuZGFyZHMgVHJhY2sgICAgICAg ICAgICAgICAgICAgICAgICAgUi4gUmF2aW5kcmFuYXRoXG5FeHBpcmVzOiBPY3RvYmVyIDE1LCAy MDE1ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgQ2lzY29cbiAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg IEouIFViZXJ0aVxuICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgR29vZ2xlXG4gICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgQXByaWwgMTMsIDIwMTVcblxuXG4gIFNlc3Np b24gVHJhdmVyc2FsIFV0aWxpdGllcyBmb3IgTkFUIChTVFVOKSBFeHRlbnNpb24gZm9yIFRoaXJk IFBhcnR5XG4gICAgICAgICAgICAgICAgICAgICAgICAgICAgIEF1dGhvcml6YXRpb25cbiAgICAg ICAgICAgICAgIGRyYWZ0LWlldGYtdHJhbS10dXJuLXRoaXJkLXBhcnR5LWF1dGh6LTE0XG5cbkFi c3RyYWN0XG5cbiAgIFRoaXMgZG9jdW1lbnQgcHJvcG9zZXMgdGhlIHVzZSBvZiBPQXV0aCAyLjAg dG8gb2J0YWluIGFuZCB2YWxpZGF0ZVxuICAgZXBoZW1lcmFsIHRva2VucyB0aGF0IGNhbiBiZSB1 c2VkIGZvciBTZXNzaW9uIFRyYXZlcnNhbCBVdGlsaXRpZXMgZm9yXG4gICBOQVQgKFNUVU4pIGF1 dGhlbnRpY2F0aW9uLiAgVGhlIHVzYWdlIG9mIGVwaGVtZXJhbCB0b2tlbnMgZW5zdXJlc1xuICAg dGhhdCBhY2Nlc3MgdG8gYSBTVFVOIHNlcnZlciBjYW4gYmUgY29udHJvbGxlZCBldmVuIGlmIHRo ZSB0b2tlbnMgYXJlXG4gICBjb21wcm9taXNlZC5cblxuU3RhdHVzIG9mIFRoaXMgTWVtb1xuXG4g ICBUaGlzIEludGVybmV0LURyYWZ0IGlzIHN1Ym1pdHRlZCBpbiBmdWxsIGNvbmZvcm1hbmNlIHdp dGggdGhlXG4gICBwcm92aXNpb25zIG9mIEJDUCA3OCBhbmQgQkNQIDc5LlxuXG4gICBJbnRlcm5l dC1EcmFmdHMgYXJlIHdvcmtpbmcgZG9jdW1lbnRzIG9mIHRoZSBJbnRlcm5ldCBFbmdpbmVlcmlu Z1xuICAgVGFzayBGb3JjZSAoSUVURikuICBOb3RlIHRoYXQgb3RoZXIgZ3JvdXBzIG1heSBhbHNv IGRpc3RyaWJ1dGVcbiAgIHdvcmtpbmcgZG9jdW1lbnRzIGFzIEludGVybmV0LURyYWZ0cy4gIFRo ZSBsaXN0IG9mIGN1cnJlbnQgSW50ZXJuZXQtXG4gICBEcmFmdHMgaXMgYXQgaHR0cDovL2RhdGF0 cmFja2VyLmlldGYub3JnL2RyYWZ0cy9jdXJyZW50Ly5cblxuICAgSW50ZXJuZXQtRHJhZnRzIGFy ZSBkcmFmdCBkb2N1bWVudHMgdmFsaWQgZm9yIGEgbWF4aW11bSBvZiBzaXggbW9udGhzXG4gICBh bmQgbWF5IGJlIHVwZGF0ZWQsIHJlcGxhY2VkLCBvciBvYnNvbGV0ZWQgYnkgb3RoZXIgZG9jdW1l bnRzIGF0IGFueVxuICAgdGltZS4gIEl0IGlzIGluYXBwcm9wcmlhdGUgdG8gdXNlIEludGVybmV0 LURyYWZ0cyBhcyByZWZlcmVuY2VcbiAgIG1hdGVyaWFsIG9yIHRvIGNpdGUgdGhlbSBvdGhlciB0 aGFuIGFzICJ3b3JrIGluIHByb2dyZXNzLiJcblxuICAgVGhpcyBJbnRlcm5ldC1EcmFmdCB3aWxs IGV4cGlyZSBvbiBPY3RvYmVyIDE1LCAyMDE1LlxuXG5Db3B5cmlnaHQgTm90aWNlXG5cbiAgIENv cHlyaWdodCAoYykgMjAxNSBJRVRGIFRydXN0IGFuZCB0aGUgcGVyc29ucyBpZGVudGlmaWVkIGFz IHRoZVxuICAgZG9jdW1lbnQgYXV0aG9ycy4gIEFsbCByaWdodHMgcmVzZXJ2ZWQuXG5cbiAgIFRo aXMgZG9jdW1lbnQgaXMgc3ViamVjdCB0byBCQ1AgNzggYW5kIHRoZSBJRVRGIFRydXN0XCdzIExl Z2FsXG4gICBQcm92aXNpb25zIFJlbGF0aW5nIHRvIElFVEYgRG9jdW1lbnRzXG4gICAoaHR0cDov L3RydXN0ZWUuaWV0Zi5vcmcvbGljZW5zZS1pbmZvKSBpbiBlZmZlY3Qgb24gdGhlIGRhdGUgb2Zc biAgIHB1YmxpY2F0aW9uIG9mIHRoaXMgZG9jdW1lbnQuICBQbGVhc2UgcmV2aWV3IHRoZXNlIGRv Y3VtZW50c1xuICAgY2FyZWZ1bGx5LCBhcyB0aGV5IGRlc2NyaWJlIHlvdXIgcmlnaHRzIGFuZCBy ZXN0cmljdGlvbnMgd2l0aCByZXNwZWN0XG5cblxuXG5SZWRkeSwgZXQgYWwuICAgICAgICAgICBF eHBpcmVzIE9jdG9iZXIgMTUsIDIwMTUgICAgICAgICAgICAgICAgW1BhZ2UgMV1cbl9cbkludGVy bmV0LURyYWZ0ICAgICAgU1RVTiBmb3IgM3JkIHBhcnR5IEF1dGhvcml6YXRpb24gICAgICAgICAg QXByaWwgMjAxNVxuXG5cbiAgIHRvIHRoaXMgZG9jdW1lbnQuICBDb2RlIENvbXBvbmVudHMgZXh0 cmFjdGVkIGZyb20gdGhpcyBkb2N1bWVudCBtdXN0XG4gICBpbmNsdWRlIFNpbXBsaWZpZWQgQlNE IExpY2Vuc2UgdGV4dCBhcyBkZXNjcmliZWQgaW4gU2VjdGlvbiA0LmUgb2ZcbiAgIHRoZSBUcnVz dCBMZWdhbCBQcm92aXNpb25zIGFuZCBhcmUgcHJvdmlkZWQgd2l0aG91dCB3YXJyYW50eSBhc1xu ICAgZGVzY3JpYmVkIGluIHRoZSBTaW1wbGlmaWVkIEJTRCBMaWNlbnNlLlxuXG5UYWJsZSBvZiBD b250ZW50c1xuXG4gICAxLiAgSW50cm9kdWN0aW9uICAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAu IC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAgIDJcbiAgIDIuICBUZXJtaW5vbG9neSAuIC4gLiAuIC4g LiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuICAgM1xuICAgMy4gIFNvbHV0 aW9uIE92ZXJ2aWV3IC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4g ICAzXG4gICA0LiAgT2J0YWluaW5nIGEgVG9rZW4gVXNpbmcgT0F1dGggLiAuIC4gLiAuIC4gLiAu IC4gLiAuIC4gLiAuIC4gLiAgIDRcbiAgICAgNC4xLiAgS2V5IEVzdGFibGlzaG1lbnQgLiAuIC4g LiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuICAgNFxuICAgICAgIDQuMS4xLiAgSFRU UCBpbnRlcmFjdGlvbnMgLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gICA1XG4g ICAgICAgNC4xLjIuICBNYW51YWwgcHJvdmlzaW9uaW5nIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAu IC4gLiAuIC4gLiAgIDdcbiAgIDUuICBGb3JtaW5nIGEgUmVxdWVzdCAuIC4gLiAuIC4gLiAuIC4g LiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuICAgN1xuICAgNi4gIFNUVU4gQXR0cmlidXRlcyAu IC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gICA3XG4gICAgIDYu MS4gIFRISVJELVBBUlRZLUFVVEhPUklaQVRJT04gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAu IC4gLiAgIDdcbiAgICAgNi4yLiAgQUNDRVNTLVRPS0VOICAuIC4gLiAuIC4gLiAuIC4gLiAuIC4g LiAuIC4gLiAuIC4gLiAuIC4gLiAuICAgOFxuICAgNy4gIFNUVU4gU2VydmVyIEJlaGF2aW91ciAu IC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gIDEwXG4gICA4LiAgU1RVTiBD bGllbnQgQmVoYXZpb3VyIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAg MTFcbiAgIDkuICBVc2FnZSB3aXRoIFRVUk4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4g LiAuIC4gLiAuIC4gLiAuICAxMVxuICAgMTAuIE9wZXJhdGlvbmFsIENvbnNpZGVyYXRpb25zICAu IC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gIDE1XG4gICAxMS4gU2VjdXJpdHkgQ29u c2lkZXJhdGlvbnMgLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAgMTVcbiAg IDEyLiBJQU5BIENvbnNpZGVyYXRpb25zIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4g LiAuIC4gLiAuICAxNlxuICAgMTMuIEFja25vd2xlZGdlbWVudHMgIC4gLiAuIC4gLiAuIC4gLiAu IC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gIDE2XG4gICAxNC4gUmVmZXJlbmNlcyAgLiAuIC4g LiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAgMTZcbiAgICAgMTQu MS4gIE5vcm1hdGl2ZSBSZWZlcmVuY2VzIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4g LiAuICAxN1xuICAgICAxNC4yLiAgSW5mb3JtYXRpdmUgUmVmZXJlbmNlcyAuIC4gLiAuIC4gLiAu IC4gLiAuIC4gLiAuIC4gLiAuIC4gIDE3XG4gICBBcHBlbmRpeCBBLiAgU2FtcGxlIHRpY2tldHMg LiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAgMTlcbiAgIEFwcGVuZGl4IEIu ICBJbnRlcmFjdGlvbiBiZXR3ZWVuIGNsaWVudCBhbmQgYXV0aG9yaXphdGlvbiBzZXJ2ZXIgICAy MFxuICAgQXV0aG9yc1wnIEFkZHJlc3NlcyAgLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4g LiAuIC4gLiAuIC4gLiAuICAyMlxuXG4xLiAgSW50cm9kdWN0aW9uXG5cbiAgIFNlc3Npb24gVHJh dmVyc2FsIFV0aWxpdGllcyBmb3IgTkFUIChTVFVOKSBbUkZDNTM4OV0gcHJvdmlkZXMgYVxuICAg bWVjaGFuaXNtIHRvIGNvbnRyb2wgYWNjZXNzIHZpYSAibG9uZy10ZXJtIiB1c2VybmFtZS8gcGFz c3dvcmRcbiAgIGNyZWRlbnRpYWxzIHRoYXQgYXJlIHByb3ZpZGVkIGFzIHBhcnQgb2YgdGhlIFNU VU4gcHJvdG9jb2wuICBJdCBpc1xuICAgZXhwZWN0ZWQgdGhhdCB0aGVzZSBjcmVkZW50aWFscyB3 aWxsIGJlIGtlcHQgc2VjcmV0OyBpZiB0aGVcbiAgIGNyZWRlbnRpYWxzIGFyZSBkaXNjb3ZlcmVk LCB0aGUgU1RVTiBzZXJ2ZXIgY291bGQgYmUgdXNlZCBieVxuICAgdW5hdXRob3JpemVkIHVzZXJz IG9yIGFwcGxpY2F0aW9ucy4gIEhvd2V2ZXIsIGluIHdlYiBhcHBsaWNhdGlvbnNcbiAgIGxpa2Ug V2ViUlRDIFtJLUQuaWV0Zi1ydGN3ZWItb3ZlcnZpZXddIHdoZXJlIEphdmFTY3JpcHQgdXNlcyB0 aGVcbiAgIGJyb3dzZXIgZnVuY3Rpb25hbGl0eSB0byBtYWtlIHJlYWwtdGltZSBhdWRpbyBhbmQv b3IgdmlkZW8gY2FsbHMsIFdlYlxuICAgY29uZmVyZW5jaW5nLCBhbmQgZGlyZWN0IGRhdGEgdHJh bnNmZXIsIGVuc3VyaW5nIHRoaXMgc2VjcmVjeSBpc1xuICAgdHlwaWNhbGx5IG5vdCBwb3NzaWJs ZS5cblxuICAgVG8gYWRkcmVzcyB0aGlzIHByb2JsZW0gYW5kIHRoZSBvbmVzIGRlc2NyaWJlZCBp biBbUkZDNzM3Nl0sIHRoaXNcbiAgIGRvY3VtZW50IHByb3Bvc2VzIHRoZSB1c2Ugb2YgdGhpcmQg cGFydHkgYXV0aG9yaXphdGlvbiB1c2luZyBPQXV0aFxuICAgMi4wIFtSRkM2NzQ5XSBmb3IgU1RV Ti4gIFVzaW5nIE9BdXRoIDIuMCwgYSBjbGllbnQgb2J0YWlucyBhblxuXG5cblxuUmVkZHksIGV0 IGFsLiAgICAgICAgICAgRXhwaXJlcyBPY3RvYmVyIDE1LCAyMDE1ICAgICAgICAgICAgICAgIFtQ YWdlIDJdXG5fXG5JbnRlcm5ldC1EcmFmdCAgICAgIFNUVU4gZm9yIDNyZCBwYXJ0eSBBdXRob3Jp emF0aW9uICAgICAgICAgIEFwcmlsIDIwMTVcblxuXG4gICBlcGhlbWVyYWwgdG9rZW4gZnJvbSBh biBhdXRob3JpemF0aW9uIHNlcnZlciBlLmcuICBXZWJSVEMgc2VydmVyLCBhbmRcbiAgIHRoZSB0 b2tlbiBpcyBwcmVzZW50ZWQgdG8gdGhlIFNUVU4gc2VydmVyIGluc3RlYWQgb2YgdGhlIHRyYWRp dGlvbmFsXG4gICBtZWNoYW5pc20gb2YgcHJlc2VudGluZyB1c2VybmFtZS9wYXNzd29yZCBjcmVk ZW50aWFscy4gIFRoZSBTVFVOXG4gICBzZXJ2ZXIgdmFsaWRhdGVzIHRoZSBhdXRoZW50aWNpdHkg b2YgdGhlIHRva2VuIGFuZCBwcm92aWRlcyByZXF1aXJlZFxuICAgc2VydmljZXMuICBUaGlyZCBw YXJ0eSBhdXRob3JpemF0aW9uIHVzaW5nIE9BdXRoIDIuMCBmb3IgU1RVTlxuICAgZXhwbGFpbmVk IGluIHRoaXMgc3BlY2lmaWNhdGlvbiBjYW4gYWxzbyBiZSB1c2VkIHdpdGggVHJhdmVyc2FsIFVz aW5nXG4gICBSZWxheXMgYXJvdW5kIE5BVCAoVFVSTikgW1JGQzU3NjZdLlxuXG4yLiAgVGVybWlu b2xvZ3lcblxuICAgVGhlIGtleSB3b3JkcyAiTVVTVCIsICJNVVNUIE5PVCIsICJSRVFVSVJFRCIs ICJTSEFMTCIsICJTSEFMTCBOT1QiLFxuICAgIlNIT1VMRCIsICJTSE9VTEQgTk9UIiwgIlJFQ09N TUVOREVEIiwgIk1BWSIsIGFuZCAiT1BUSU9OQUwiIGluIHRoaXNcbiAgIGRvY3VtZW50IGFyZSB0 byBiZSBpbnRlcnByZXRlZCBhcyBkZXNjcmliZWQgaW4gW1JGQzIxMTldLlxuXG4gICBvICBXZWJS VEMgU2VydmVyOiBBIHdlYiBzZXJ2ZXIgdGhhdCBzdXBwb3J0cyBXZWJSVENcbiAgICAgIFtJLUQu aWV0Zi1ydGN3ZWItb3ZlcnZpZXddLlxuXG4gICBvICBBY2Nlc3MgVG9rZW46IE9BdXRoIDIuMCBh Y2Nlc3MgdG9rZW4uXG5cbiAgIG8gIG1hY19rZXk6IFRoZSBzZXNzaW9uIGtleSBnZW5lcmF0ZWQg YnkgdGhlIGF1dGhvcml6YXRpb24gc2VydmVyLlxuICAgICAgVGhpcyBzZXNzaW9uIGtleSBoYXMg YSBsaWZldGltZSB0aGF0IGNvcnJlc3BvbmRzIHRvIHRoZSBsaWZldGltZVxuICAgICAgb2YgdGhl IGFjY2VzcyB0b2tlbiwgaXMgZ2VuZXJhdGVkIGJ5IHRoZSBhdXRob3JpemF0aW9uIHNlcnZlciBh bmRcbiAgICAgIGJvdW5kIHRvIHRoZSBhY2Nlc3MgdG9rZW4uXG5cbiAgIG8gIGtpZDogQW4gZXBo ZW1lcmFsIGFuZCB1bmlxdWUga2V5IGlkZW50aWZpZXIuICBUaGUga2lkIGFsc28gYWxsb3dzXG4g ICAgICB0aGUgcmVzb3VyY2Ugc2VydmVyIHRvIHNlbGVjdCB0aGUgYXBwcm9wcmlhdGUga2V5aW5n IG1hdGVyaWFsIGZvclxuICAgICAgZGVjcnlwdGlvbi5cblxuICAgU29tZSBzZWN0aW9ucyBpbiB0 aGlzIHNwZWNpZmljYXRpb24gc2hvdyBXZWJSVEMgc2VydmVyIGFzIHRoZVxuICAgYXV0aG9yaXph dGlvbiBzZXJ2ZXIgYW5kIGNsaWVudCBhcyB0aGUgV2ViUlRDIGNsaWVudCwgaG93ZXZlciBXZWJS VENcbiAgIGlzIGludGVuZGVkIHRvIGJlIHVzZWQgZm9yIGlsbHVzdHJhdGl2ZSBwdXJwb3NlIG9u bHkuXG5cbjMuICBTb2x1dGlvbiBPdmVydmlld1xuXG4gICBTVFVOIGNsaWVudCBrbm93cyB0aGF0 IGl0IGNhbiB1c2UgT0F1dGggMi4wIHdpdGggdGhlIHRhcmdldCBTVFVOXG4gICBzZXJ2ZXIgZWl0 aGVyIHRocm91Z2ggY29uZmlndXJhdGlvbiBvciB3aGVuIGl0IHJlY2VpdmVzIHRoZSBuZXcgU1RV TlxuICAgYXR0cmlidXRlIFRISVJELVBBUlRZLUFVVEhPUklaQVRJT04gaW4gdGhlIGVycm9yIHJl c3BvbnNlIHdpdGggYW5cbiAgIGVycm9yIGNvZGUgb2YgNDAxKFVuYXV0aG9yaXplZCkuXG5cbiAg IFRoaXMgc3BlY2lmaWNhdGlvbiB1c2VzIHRoZSB0b2tlbiB0eXBlIFwnQXNzZXJ0aW9uXCcgKGFr YSBzZWxmLVxuICAgY29udGFpbmVkIHRva2VuKSBkZXNjcmliZWQgaW4gW1JGQzY4MTldIHdoZXJl IGFsbCB0aGUgaW5mb3JtYXRpb25cbiAgIG5lY2Vzc2FyeSB0byBhdXRoZW50aWNhdGUgdGhlIHZh bGlkaXR5IG9mIHRoZSB0b2tlbiBpcyBjb250YWluZWRcbiAgIHdpdGhpbiB0aGUgdG9rZW4gaXRz ZWxmLiAgVGhpcyBhcHByb2FjaCBoYXMgdGhlIGJlbmVmaXQgb2YgYXZvaWRpbmcgYVxuICAgcHJv dG9jb2wgYmV0d2VlbiB0aGUgU1RVTiBzZXJ2ZXIgYW5kIHRoZSBhdXRob3JpemF0aW9uIHNlcnZl ciBmb3JcbiAgIHRva2VuIHZhbGlkYXRpb24sIHRodXMgcmVkdWNpbmcgbGF0ZW5jeS4gIFRoZSBj b250ZW50IG9mIHRoZSB0b2tlbiBpc1xuICAgb3BhcXVlIHRvIHRoZSBjbGllbnQuICBUaGUgY2xp ZW50IGVtYmVkcyB0aGUgdG9rZW4gd2l0aGluIGEgU1RVTlxuICAgcmVxdWVzdCBzZW50IHRvIHRo ZSBTVFVOIHNlcnZlci4gIE9uY2UgdGhlIFNUVU4gc2VydmVyIGhhcyBkZXRlcm1pbmVkXG4gICB0 aGUgdG9rZW4gaXMgdmFsaWQsIGl0cyBzZXJ2aWNlcyBhcmUgb2ZmZXJlZCBmb3IgYSBkZXRlcm1p bmVkIHBlcmlvZFxuXG5cblxuUmVkZHksIGV0IGFsLiAgICAgICAgICAgRXhwaXJlcyBPY3RvYmVy IDE1LCAyMDE1ICAgICAgICAgICAgICAgIFtQYWdlIDNdXG5fXG5JbnRlcm5ldC1EcmFmdCAgICAg IFNUVU4gZm9yIDNyZCBwYXJ0eSBBdXRob3JpemF0aW9uICAgICAgICAgIEFwcmlsIDIwMTVcblxu XG4gICBvZiB0aW1lLiAgQWNjZXNzIHRva2VuIGlzc3VlZCBieSB0aGUgYXV0aG9yaXphdGlvbiBz ZXJ2ZXIgaXNcbiAgIGV4cGxhaW5lZCBpbiBTZWN0aW9uIDYuMi4gIE9BdXRoIDIuMCBpbiBbUkZD Njc0OV0gZGVmaW5lcyBmb3VyIGdyYW50XG4gICB0eXBlcy4gIFRoaXMgc3BlY2lmaWNhdGlvbiB1 c2VzIHRoZSBPQXV0aCAyLjAgZ3JhbnQgdHlwZSAiSW1wbGljaXQiXG4gICBleHBsYWluZWQgaW4g c2VjdGlvbiAxLjMuMiBvZiBbUkZDNjc0OV0gd2hlcmUgdGhlIGNsaWVudCBpcyBpc3N1ZWQgYW5c biAgIGFjY2VzcyB0b2tlbiBkaXJlY3RseS4gIFRoZSBzdHJpbmcgXCdzdHVuXCcgaXMgZGVmaW5l ZCBieSB0aGlzXG4gICBzcGVjaWZpY2F0aW9uIGZvciB1c2UgYXMgdGhlIE9BdXRoIHNjb3BlIHBh cmFtZXRlciAoc2VlIHNlY3Rpb24gMy4zXG4gICBvZiBbUkZDNjc0OV0pIGZvciB0aGUgT0F1dGgg dG9rZW4uXG5cbiAgIFRoZSBleGFjdCBtZWNoYW5pc20gdXNlZCBieSBhIGNsaWVudCB0byBvYnRh aW4gYSB0b2tlbiBmcm9tIHRoZSBPQXV0aFxuICAgMi4wIGF1dGhvcml6YXRpb24gc2VydmVyIGlz IG91dHNpZGUgdGhlIHNjb3BlIG9mIHRoaXMgZG9jdW1lbnQuXG4gICBBcHBlbmRpeCBCIHByb3Zp ZGVzIGFuIGV4YW1wbGUgZGVwbG95bWVudCBzY2VuYXJpbyBvZiBpbnRlcmFjdGlvblxuICAgYmV0 d2VlbiB0aGUgY2xpZW50IGFuZCBhdXRob3JpemF0aW9uIHNlcnZlciB0byBvYnRhaW4gYSB0b2tl bi5cblxuNC4gIE9idGFpbmluZyBhIFRva2VuIFVzaW5nIE9BdXRoXG5cbiAgIEEgU1RVTiBjbGll bnQgbmVlZHMgdG8ga25vdyB0aGUgYXV0aGVudGljYXRpb24gY2FwYWJpbGl0eSBvZiB0aGUgU1RV TlxuICAgc2VydmVyIGJlZm9yZSBkZWNpZGluZyB0byB1c2UgdGhpcmQgcGFydHkgYXV0aG9yaXph dGlvbi4gIEEgU1RVTlxuICAgY2xpZW50IGluaXRpYWxseSBtYWtlcyBhIHJlcXVlc3Qgd2l0aG91 dCBhbnkgYXV0aG9yaXphdGlvbi4gIElmIHRoZVxuICAgU1RVTiBzZXJ2ZXIgc3VwcG9ydHMgdGhp cmQgcGFydHkgYXV0aG9yaXphdGlvbiwgaXQgd2lsbCByZXR1cm4gYW5cbiAgIGVycm9yIG1lc3Nh Z2UgaW5kaWNhdGluZyB0aGF0IHRoZSBjbGllbnQgY2FuIGF1dGhvcml6ZSB0byB0aGUgU1RVTlxu ICAgc2VydmVyIHVzaW5nIGFuIE9BdXRoIDIuMCBhY2Nlc3MgdG9rZW4uICBUaGUgU1RVTiBzZXJ2 ZXIgaW5jbHVkZXMgYW5cbiAgIEVSUk9SLUNPREUgYXR0cmlidXRlIHdpdGggYSB2YWx1ZSBvZiA0 MDEgKFVuYXV0aG9yaXplZCksIGEgbm9uY2VcbiAgIHZhbHVlIGluIGEgTk9OQ0UgYXR0cmlidXRl IGFuZCBhIFNPRlRXQVJFIGF0dHJpYnV0ZSB0aGF0IGdpdmVzXG4gICBpbmZvcm1hdGlvbiBhYm91 dCB0aGUgU1RVTiBzZXJ2ZXJcJ3Mgc29mdHdhcmUuICBUaGUgU1RVTiBzZXJ2ZXIgYWxzb1xuICAg aW5jbHVkZXMgdGhlIGFkZGl0aW9uYWwgU1RVTiBhdHRyaWJ1dGUgVEhJUkQtUEFSVFktQVVUSE9S SVpBVElPTlxuICAgc2lnbmFsaW5nIHRoZSBTVFVOIGNsaWVudCB0aGF0IHRoZSBTVFVOIHNlcnZl ciBzdXBwb3J0cyB0aGlyZCBwYXJ0eVxuICAgYXV0aG9yaXphdGlvbi5cblxuICAgTm90ZTogQW4g aW1wbGVtZW50YXRpb24gbWF5IGNob29zZSB0byBjb250YWN0IHRoZSBhdXRob3JpemF0aW9uXG4g ICBzZXJ2ZXIgdG8gb2J0YWluIGEgdG9rZW4gZXZlbiBiZWZvcmUgaXQgbWFrZXMgYSBTVFVOIHJl cXVlc3QsIGlmIGl0XG4gICBrbm93cyB0aGUgc2VydmVyIGRldGFpbHMgYmVmb3JlIGhhbmQuICBG b3IgZXhhbXBsZSwgb25jZSBhIGNsaWVudCBoYXNcbiAgIGxlYXJudCB0aGF0IGEgU1RVTiBzZXJ2 ZXIgc3VwcG9ydHMgdGhpcmQgcGFydHkgYXV0aG9yaXphdGlvbiBmcm9tIGFcbiAgIGF1dGhvcml6 YXRpb24gc2VydmVyLCB0aGUgY2xpZW50IGNhbiBvYnRhaW4gdGhlIHRva2VuIGJlZm9yZSBtYWtp bmdcbiAgIHN1YnNlcXVlbnQgU1RVTiByZXF1ZXN0cy5cblxuNC4xLiAgS2V5IEVzdGFibGlzaG1l bnRcblxuICAgVGhlIGF1dGhvcml6YXRpb24gc2VydmVyIHNoYXJlcyBhIGxvbmctdGVybSBzZWNy ZXQgKGxpa2UgYXN5bW1ldHJpY1xuICAgY3JlZGVudGlhbHMpIHdpdGggdGhlIFNUVU4gc2VydmVy IGZvciBtdXR1YWwgYXV0aGVudGljYXRpb24uXG4gICBTeW1tZXRyaWMgY3J5cHRvZ3JhcGh5IE1V U1QgYmUgY2hvc2VuIHRvIGVuc3VyZSB0aGF0IHRoZSBzaXplIG9mXG4gICBlbmNyeXB0ZWQgdG9r ZW4gaXMgbm90IGxhcmdlIGJlY2F1c2UgdXNhZ2Ugb2YgYXN5bW1ldHJpYyBjcnlwdG9ncmFwaHlc biAgIHdpbGwgcmVzdWx0IGluIGxhcmdlIGVuY3J5cHRlZCB0b2tlbnMgd2hpY2ggbWF5IG5vdCBm aXQgaW50byBhIHNpbmdsZVxuICAgU1RVTiBtZXNzYWdlLlxuXG4gICBUaGUgU1RVTiBzZXJ2ZXIg YW5kIGF1dGhvcml6YXRpb24gc2VydmVyIGNhbiBlc3RhYmxpc2ggYSBzeW1tZXRyaWNcbiAgIGtl eSAoSykgYW5kIGNlcnRhaW4gYXV0aGVudGljYXRlZCBlbmNyeXB0aW9uIGFsZ29yaXRobSwgdXNp bmcgYW4gb3V0XG4gICBvZiBiYW5kIG1lY2hhbmlzbS4gIFRoZSBTVFVOIGFuZCBhdXRob3JpemF0 aW9uIHNlcnZlcnMgTVVTVCBlc3RhYmxpc2hcbiAgIHRoZSBzeW1tZXRyaWMga2V5IG92ZXIgYW4g YXV0aGVudGljYXRlZCBzZWN1cmUgY2hhbm5lbC4gIElmXG5cblxuXG5SZWRkeSwgZXQgYWwuICAg ICAgICAgICBFeHBpcmVzIE9jdG9iZXIgMTUsIDIwMTUgICAgICAgICAgICAgICAgW1BhZ2UgNF1c bl9cbkludGVybmV0LURyYWZ0ICAgICAgU1RVTiBmb3IgM3JkIHBhcnR5IEF1dGhvcml6YXRpb24g ICAgICAgICAgQXByaWwgMjAxNVxuXG5cbiAgIEF1dGhlbnRpY2F0ZWQgRW5jcnlwdGlvbiB3aXRo IEFFUy1DQkMgYW5kIEhNQUMtU0hBIChkZWZpbmVkIGluXG4gICBbSS1ELm1jZ3Jldy1hZWFkLWFl cy1jYmMtaG1hYy1zaGEyXSkgaXMgdXNlZCB0aGVuIHRoZSBBUy1SUyBhbmQgQVVUSFxuICAga2V5 cyB3aWxsIGJlIGRlcml2ZWQgZnJvbSBLLiAgVGhlIEFTLVJTIGtleSBpcyB1c2VkIGZvciBlbmNy eXB0aW5nXG4gICB0aGUgc2VsZi1jb250YWluZWQgdG9rZW4gYW5kIHRoZSBtZXNzYWdlIGludGVn cml0eSBvZiB0aGUgZW5jcnlwdGVkXG4gICB0b2tlbiBpcyBjYWxjdWxhdGVkIHVzaW5nIHRoZSBB VVRIIGtleS4gIElmIEF1dGhlbnRpY2F0ZWQgRW5jcnlwdGlvblxuICAgd2l0aCBBc3NvY2lhdGVk IERhdGEgKEFFQUQpIGFsZ29yaXRobSBkZWZpbmVkIGluIFtSRkM1MTE2XSBpcyB1c2VkXG4gICB0 aGVuIHRoZXJlIGlzIG5vIG5lZWQgdG8gZ2VuZXJhdGUgdGhlIEFVVEgga2V5IGFuZCBBUy1SUyBr ZXkgd2lsbFxuICAgaGF2ZSB0aGUgc2FtZSB2YWx1ZSBhcyB0aGUgc3ltbWV0cmljIGtleSAoSyku XG5cbiAgIFRoZSBwcm9jZWR1cmUgZm9yIGVzdGFibGlzaG1lbnQgb2YgdGhlIHN5bW1ldHJpYyBr ZXkgaXMgb3V0c2lkZSB0aGVcbiAgIHNjb3BlIG9mIHRoaXMgc3BlY2lmaWNhdGlvbiwgYW5kIHRo aXMgc3BlY2lmaWNhdGlvbiBkb2VzIG5vdCBtYW5kYXRlXG4gICBzdXBwb3J0IG9mIGFueSBnaXZl biBtZWNoYW5pc20uICBTZWN0aW9uIDQuMS4xIGFuZCBTZWN0aW9uIDQuMS4yIHNob3dcbiAgIGV4 YW1wbGVzIG9mIG1lY2hhbmlzbXMgdGhhdCBjYW4gYmUgdXNlZC5cblxuNC4xLjEuICBIVFRQIGlu dGVyYWN0aW9uc1xuXG4gICBUaGUgU1RVTiBhbmQgQVMgc2VydmVycyBjb3VsZCBjaG9vc2UgdG8g dXNlIFJFU1QgQVBJIG92ZXIgSFRUUFMgdG9cbiAgIGVzdGFibGlzaCBhIHN5bW1ldHJpYyBrZXku ICBIVFRQUyBNVVNUIGJlIHVzZWQgZm9yIG11dHVhbFxuICAgYXV0aGVudGljYXRpb24gYW5kIGNv bmZpZGVudGlhbGl0eS4gIFRvIHJldHJpZXZlIGEgbmV3IHN5bW1ldHJpYyBrZXksXG4gICB0aGUg U1RVTiBzZXJ2ZXIgbWFrZXMgYW4gSFRUUCBHRVQgcmVxdWVzdCB0byB0aGUgYXV0aG9yaXphdGlv blxuICAgc2VydmVyLCBzcGVjaWZ5aW5nIFNUVU4gYXMgdGhlIHNlcnZpY2UgdG8gYWxsb2NhdGUg dGhlIHN5bW1ldHJpYyBrZXlzXG4gICBmb3IsIGFuZCBzcGVjaWZ5aW5nIHRoZSBuYW1lIG9mIHRo ZSBTVFVOIHNlcnZlci4gIFRoZSByZXNwb25zZSBpc1xuICAgcmV0dXJuZWQgd2l0aCBjb250ZW50 LXR5cGUgImFwcGxpY2F0aW9uL2pzb24iLCBhbmQgY29uc2lzdHMgb2YgYVxuICAgSmF2YVNjcmlw dCBPYmplY3QgTm90YXRpb24gKEpTT04pIFtSRkM3MTU5XSBvYmplY3QgY29udGFpbmluZyB0aGVc biAgIHN5bW1ldHJpYyBrZXkuXG5cblxuXG5cblxuXG5cblxuXG5cblxuXG5cblxuXG5cblxuXG5c blxuXG5cblxuXG5cblxuUmVkZHksIGV0IGFsLiAgICAgICAgICAgRXhwaXJlcyBPY3RvYmVyIDE1 LCAyMDE1ICAgICAgICAgICAgICAgIFtQYWdlIDVdXG5fXG5JbnRlcm5ldC1EcmFmdCAgICAgIFNU VU4gZm9yIDNyZCBwYXJ0eSBBdXRob3JpemF0aW9uICAgICAgICAgIEFwcmlsIDIwMTVcblxuXG4g ICBSZXF1ZXN0XG4gICAtLS0tLS0tXG5cbiAgIHNlcnZpY2UgLSBzcGVjaWZpZXMgdGhlIGRlc2ly ZWQgc2VydmljZSAodHVybilcbiAgIG5hbWUgICAgLSAgU1RVTiBzZXJ2ZXIgbmFtZSBiZSBhc3Nv Y2lhdGVkIHdpdGggdGhlIGtleVxuXG4gICBleGFtcGxlOiBHRVQgLz9zZXJ2aWNlPXN0dW5fbmFt ZT10dXJuMUBleGFtcGxlLmNvbVxuXG5cbiAgIFJlc3BvbnNlXG4gICAtLS0tLS0tLVxuXG4gICBr IC0gTG9uZy10ZXJtIGtleSAoSylcbiAgIGV4cCAtIGlkZW50aWZpZXMgdGhlIHRpbWUgYWZ0ZXIg d2hpY2ggdGhlIGtleSBleHBpcmVzLlxuXG5cbiAgIGV4YW1wbGU6XG4gICB7XG4gICAgICAiayIg OlxuICAgIkVTSXpSRlZtZDRpWkFCRWlNMFJWWmdLbjZXakxhVEMxRlhBZ2hSTVZUemtCR05hYU40 OTY1MjNXSUlTS2VyTGkiLFxuICAgICAgImV4cCIgOiAxMzAwODE5MzgwLFxuICAgICAgImtpZCIg OiIyMkJJanhVOTNoL0lnd0ViIlxuICAgICAgImVuYyIgOiBBMjU2R0NNS1dcbiAgICAgfVxuXG4g ICBUaGUgYXV0aG9yaXphdGlvbiBzZXJ2ZXIgbXVzdCBhbHNvIHNpZ25hbCBraWQgdG8gdGhlIFNU VU4gc2VydmVyXG4gICB3aGljaCB3aWxsIGJlIHVzZWQgdG8gc2VsZWN0IHRoZSBhcHByb3ByaWF0 ZSBrZXlpbmcgbWF0ZXJpYWwgZm9yXG4gICBkZWNyeXB0aW9uLiAgVGhlIHBhcmFtZXRlciAiayIg aXMgZGVmaW5lZCBpbiBTZWN0aW9uIDYuNC4xIG9mXG4gICBbSS1ELmlldGYtam9zZS1qc29uLXdl Yi1hbGdvcml0aG1zXSwgImVuYyIgaXMgZGVmaW5lZCBpblxuICAgU2VjdGlvbiA0LjEuMiBvZiBb SS1ELmlldGYtam9zZS1qc29uLXdlYi1lbmNyeXB0aW9uXSwgImtpZCIgaXNcbiAgIGRlZmluZWQg aW4gU2VjdGlvbiA0LjEuNCBvZiBbSS1ELmlldGYtam9zZS1qc29uLXdlYi1zaWduYXR1cmVdIGFu ZFxuICAgImV4cCIgaXMgZGVmaW5lZCBpbiBTZWN0aW9uIDQuMS40IG9mIFtJLUQuaWV0Zi1vYXV0 aC1qc29uLXdlYi10b2tlbl0uXG4gICBBMjU2R0NNS1cgYW5kIG90aGVyIGF1dGhlbnRpY2F0ZWQg ZW5jcnlwdGlvbiBhbGdvcml0aG1zIGFyZSBkZWZpbmVkXG4gICBpbiBbSS1ELmlldGYtam9zZS1q c29uLXdlYi1hbGdvcml0aG1zXS4gIEEgU1RVTiBzZXJ2ZXIgYW5kXG4gICBhdXRob3JpemF0aW9u IHNlcnZlciBpbXBsZW1lbnRhdGlvbiBNVVNUIHN1cHBvcnQgQTI1NkdDTUtXIGFzIHRoZVxuICAg YXV0aGVudGljYXRlZCBlbmNyeXB0aW9uIGFsZ29yaXRobS5cblxuICAgSWYgQTI1NkNCQy1IUzUx MiBkZWZpbmVkIGluIFtJLUQuaWV0Zi1qb3NlLWpzb24td2ViLWFsZ29yaXRobXNdIGlzXG4gICB1 c2VkIHRoZW4gdGhlIEFTLVJTIGFuZCBBVVRIIGtleXMgYXJlIGRlcml2ZWQgZnJvbSBLIHVzaW5n IHRoZVxuICAgbWVjaGFuaXNtIGV4cGxhaW5lZCBpbiBzZWN0aW9uIDUuMi4yLjEgb2ZcbiAgIFtJ LUQuaWV0Zi1qb3NlLWpzb24td2ViLWFsZ29yaXRobXNdLiAgSW4gdGhpcyBjYXNlIEFTLVJTIGtl eSBsZW5ndGhcbiAgIG11c3QgYmUgMjU2LWJpdCwgQVVUSCBrZXkgbGVuZ3RoIG11c3QgYmUgMjU2 LWJpdCAoc2VjdGlvbiAyLjYgb2ZcbiAgIFtSRkM0ODY4XSkuXG5cblxuXG5cblxuXG5cblxuUmVk ZHksIGV0IGFsLiAgICAgICAgICAgRXhwaXJlcyBPY3RvYmVyIDE1LCAyMDE1ICAgICAgICAgICAg ICAgIFtQYWdlIDZdXG5fXG5JbnRlcm5ldC1EcmFmdCAgICAgIFNUVU4gZm9yIDNyZCBwYXJ0eSBB dXRob3JpemF0aW9uICAgICAgICAgIEFwcmlsIDIwMTVcblxuXG40LjEuMi4gIE1hbnVhbCBwcm92 aXNpb25pbmdcblxuICAgVGhlIFNUVU4gYW5kIEFTIHNlcnZlcnMgY291bGQgYmUgbWFudWFsbHkg Y29uZmlndXJlZCB3aXRoIGEgc3ltbWV0cmljXG4gICBrZXkgKEspLCBhdXRoZW50aWNhdGVkIGVu Y3J5cHRpb24gYWxnb3JpdGhtIGFuZCBraWQuXG5cbiAgIE5vdGUgOiBUaGUgbWVjaGFuaXNtIHNw ZWNpZmllZCBpbiBTZWN0aW9uIDQuMS4yIGNvbXBhcmVkIHRvIFJFU1RcbiAgIGxhY2tzIGVuY3J5 cHRpb24gYW5kIEhNQUMgYWxnb3JpdGhtIGFnaWxpdHkuICBIZW5jZSBhIFNUVU4gc2VydmVyIGFu ZFxuICAgYXV0aG9yaXphdGlvbiBzZXJ2ZXIgaW1wbGVtZW50YXRpb24gU0hPVUxEIHN1cHBvcnQg UkVTVCBleHBsYWluZWQgaW5cbiAgIFNlY3Rpb24gNC4xLjEuXG5cbjUuICBGb3JtaW5nIGEgUmVx dWVzdFxuXG4gICBXaGVuIGEgU1RVTiBzZXJ2ZXIgcmVzcG9uZHMgdGhhdCB0aGlyZCBwYXJ0eSBh dXRob3JpemF0aW9uIGlzXG4gICByZXF1aXJlZCwgYSBTVFVOIGNsaWVudCByZS1hdHRlbXB0cyB0 aGUgcmVxdWVzdCwgdGhpcyB0aW1lIGluY2x1ZGluZ1xuICAgYWNjZXNzIHRva2VuIGFuZCBraWQg dmFsdWVzIGluIEFDQ0VTUy1UT0tFTiBhbmQgVVNFUk5BTUUgU1RVTlxuICAgYXR0cmlidXRlcy4g IFRoZSBTVFVOIGNsaWVudCBpbmNsdWRlcyBhIE1FU1NBR0UtSU5URUdSSVRZIGF0dHJpYnV0ZVxu ICAgYXMgdGhlIGxhc3QgYXR0cmlidXRlIGluIHRoZSBtZXNzYWdlIG92ZXIgdGhlIGNvbnRlbnRz IG9mIHRoZSBTVFVOXG4gICBtZXNzYWdlLiAgVGhlIEhNQUMgZm9yIHRoZSBNRVNTQUdFLUlOVEVH UklUWSBhdHRyaWJ1dGUgaXMgY29tcHV0ZWQgYXNcbiAgIGRlc2NyaWJlZCBpbiBzZWN0aW9uIDE1 LjQgb2YgW1JGQzUzODldIHdoZXJlIHRoZSBtYWNfa2V5IGlzIHVzZWQgYXNcbiAgIHRoZSBpbnB1 dCBrZXkgZm9yIHRoZSBITUFDIGNvbXB1dGF0aW9uLiAgVGhlIFNUVU4gY2xpZW50IGFuZCBzZXJ2 ZXJcbiAgIHdpbGwgdXNlIHRoZSBtYWNfa2V5IHRvIGNvbXB1dGUgdGhlIG1lc3NhZ2UgaW50ZWdy aXR5IGFuZCBkbyBub3RcbiAgIHBlcmZvcm0gTUQ1IGhhc2ggb24gdGhlIGNyZWRlbnRpYWxzLlxu XG42LiAgU1RVTiBBdHRyaWJ1dGVzXG5cbiAgIFRoZSBmb2xsb3dpbmcgbmV3IFNUVU4gYXR0cmli dXRlcyBhcmUgaW50cm9kdWNlZCBieSB0aGlzXG4gICBzcGVjaWZpY2F0aW9uIHRvIGFjY29tcGxp c2ggdGhpcmQgcGFydHkgYXV0aG9yaXphdGlvbi5cblxuNi4xLiAgVEhJUkQtUEFSVFktQVVUSE9S SVpBVElPTlxuXG4gICBUaGlzIGF0dHJpYnV0ZSBpcyB1c2VkIGJ5IHRoZSBTVFVOIHNlcnZlciB0 byBpbmZvcm0gdGhlIGNsaWVudCB0aGF0XG4gICBpdCBzdXBwb3J0cyB0aGlyZCBwYXJ0eSBhdXRo b3JpemF0aW9uLiAgVGhpcyBhdHRyaWJ1dGUgdmFsdWUgY29udGFpbnNcbiAgIHRoZSBTVFVOIHNl cnZlciBuYW1lLiAgVGhlIFNUVU4gc2VydmVyIG1heSBoYXZlIHRpZS11cHMgd2l0aCBtdWx0aXBs ZVxuICAgYXV0aG9yaXphdGlvbiBzZXJ2ZXJzIGFuZCB2aWNlIHZlcnNhLCBzbyB0aGUgY2xpZW50 IE1VU1QgcHJvdmlkZSB0aGVcbiAgIFNUVU4gc2VydmVyIG5hbWUgdG8gdGhlIGF1dGhvcml6YXRp b24gc2VydmVyIHNvIHRoYXQgaXQgY2FuIHNlbGVjdFxuICAgdGhlIGFwcHJvcHJpYXRlIGtleWlu ZyBtYXRlcmlhbCB0byBnZW5lcmF0ZSB0aGUgc2VsZi1jb250YWluZWQgdG9rZW4uXG4gICBUaGUg VEhJUkQtUEFSVFktQVVUSE9SSVpBVElPTiBhdHRyaWJ1dGUgaXMgYSBjb21wcmVoZW5zaW9uLW9w dGlvbmFsXG4gICBhdHRyaWJ1dGUgKHNlZSBTZWN0aW9uIDE1IGZyb20gW1JGQzUzODldKS4gIElm IHRoZSBjbGllbnQgaXMgYWJsZSB0b1xuICAgY29tcHJlaGVuZCBUSElSRC1QQVJUWS1BVVRIT1JJ WkFUSU9OIGl0IE1VU1QgZW5zdXJlIHRoYXQgdGhpcmQgcGFydHlcbiAgIGF1dGhvcml6YXRpb24g dGFrZXMgcHJlY2VkZW5jZSBvdmVyIGZpcnN0IHBhcnR5IGF1dGhlbnRpY2F0aW9uXG4gICAoZXhw bGFpbmVkIGluIHNlY3Rpb24gMTAgb2YgW1JGQzUzODldKS4gIElmIHRoZSBjbGllbnQgZG9lcyBu b3RcbiAgIHN1cHBvcnQgb3IgaXMgbm90IGNhcGFibGUgb2YgZG9pbmcgdGhpcmQgcGFydHkgYXV0 aG9yaXphdGlvbiB0aGVuIGl0XG4gICBkZWZhdWx0cyB0byBmaXJzdCBwYXJ0eSBhdXRoZW50aWNh dGlvbi5cblxuXG5cblxuXG5cblxuXG5SZWRkeSwgZXQgYWwuICAgICAgICAgICBFeHBpcmVzIE9j dG9iZXIgMTUsIDIwMTUgICAgICAgICAgICAgICAgW1BhZ2UgN11cbl9cbkludGVybmV0LURyYWZ0 ICAgICAgU1RVTiBmb3IgM3JkIHBhcnR5IEF1dGhvcml6YXRpb24gICAgICAgICAgQXByaWwgMjAx NVxuXG5cbjYuMi4gIEFDQ0VTUy1UT0tFTlxuXG4gICBUaGUgYWNjZXNzIHRva2VuIGlzIGlzc3Vl ZCBieSB0aGUgYXV0aG9yaXphdGlvbiBzZXJ2ZXIuICBPQXV0aCAyLjBcbiAgIGRvZXMgbm90IGlt cG9zZSBhbnkgbGltaXRhdGlvbiBvbiB0aGUgbGVuZ3RoIG9mIHRoZSBhY2Nlc3MgdG9rZW4gYnV0 XG4gICBpZiBwYXRoIE1UVSBpcyB1bmtub3duIHRoZW4gU1RVTiBtZXNzYWdlcyBvdmVyIElQdjQg d291bGQgbmVlZCB0byBiZVxuICAgbGVzcyB0aGFuIDU0OCBieXRlcyAoU2VjdGlvbiA3LjEgb2Yg W1JGQzUzODldKS4gIFRoZSBhY2Nlc3MgdG9rZW5cbiAgIGxlbmd0aCBuZWVkcyB0byBiZSByZXN0 cmljdGVkIHRvIGZpdCB3aXRoaW4gdGhlIG1heGltdW0gU1RVTiBtZXNzYWdlXG4gICBzaXplLiAg Tm90ZSB0aGF0IHRoZSBzZWxmLWNvbnRhaW5lZCB0b2tlbiBpcyBvcGFxdWUgdG8gdGhlIGNsaWVu dCBhbmRcbiAgIHRoZSBjbGllbnQgTVVTVCBOT1QgZXhhbWluZSB0aGUgdG9rZW4uICBUaGUgQUND RVNTLVRPS0VOIGF0dHJpYnV0ZSBpc1xuICAgYSBjb21wcmVoZW5zaW9uLXJlcXVpcmVkIGF0dHJp YnV0ZSAoc2VlIFNlY3Rpb24gMTUgZnJvbSBbUkZDNTM4OV0pLlxuXG4gICBUaGUgdG9rZW4gaXMg c3RydWN0dXJlZCBhcyBmb2xsb3dzOlxuXG4gICAgICAgICBzdHJ1Y3Qge1xuICAgICAgICAgICAg IHVpbnQxNl90IG5vbmNlX2xlbmd0aDtcbiAgICAgICAgICAgICBvcGFxdWUgIG5vbmNlW25vbmNl X2xlbmd0aF07XG4gICAgICAgICAgICAgb3BhcXVlIHtcbiAgICAgICAgICAgICAgICAgdWludDE2 X3Qga2V5X2xlbmd0aDtcbiAgICAgICAgICAgICAgICAgb3BhcXVlIG1hY19rZXlba2V5X2xlbmd0 aF07XG4gICAgICAgICAgICAgICAgIHVpbnQ2NF90IHRpbWVzdGFtcDtcbiAgICAgICAgICAgICAg ICAgdWludDMyX3QgbGlmZXRpbWU7XG4gICAgICAgICAgICAgfSBlbmNyeXB0ZWRfYmxvY2s7XG4g ICAgICAgICB9IHRva2VuO1xuXG4gICAgICAgICAgICAgICAgICAgRmlndXJlIDE6IFNlbGYtY29u dGFpbmVkIHRva2VuIGZvcm1hdFxuXG4gICBOb3RlOiB1aW50Tl90IG1lYW5zIGFuIHVuc2lnbmVk IGludGVnZXIgb2YgZXhhY3RseSBOIGJpdHMuICBTaW5nbGUtXG4gICBieXRlIGVudGl0aWVzIGNv bnRhaW5pbmcgdW5pbnRlcnByZXRlZCBkYXRhIGFyZSBvZiB0eXBlIG9wYXF1ZS4gIEFsbFxuICAg dmFsdWVzIGluIHRoZSB0b2tlbiBhcmUgc3RvcmVkIGluIG5ldHdvcmsgYnl0ZSBvcmRlci5cblxu ICAgVGhlIGFzc29jaWF0ZWQgZGF0YSAoQSkgTVVTVCBiZSB0aGUgU1RVTiBzZXJ2ZXIgbmFtZS4g IFRoaXMgZW5zdXJlc1xuICAgdGhhdCB0aGUgY2xpZW50IGRvZXMgbm90IHVzZSB0aGUgc2FtZSB0 b2tlbiB0byBnYWluIGlsbGVnYWwgYWNjZXNzIHRvXG4gICBvdGhlciBTVFVOIHNlcnZlcnMgcHJv dmlkZWQgYnkgdGhlIHNhbWUgYWRtaW5pc3RyYXRpdmUgZG9tYWluIGkuZS4sXG4gICB3aGVuIG11 bHRpcGxlIFNUVU4gc2VydmVycyBpbiBhIHNpbmdsZSBhZG1pbmlzdHJhdGl2ZSBkb21haW4gc2hh cmVcbiAgIHRoZSBzYW1lIHN5bW1ldHJpYyBrZXkgd2l0aCBhbiBhdXRob3JpemF0aW9uIHNlcnZl ci5cblxuICAgVGhlIGZpZWxkcyBhcmUgZGVzY3JpYmVkIGJlbG93OlxuXG4gICBub25jZV9sZW5n dGg6ICBMZW5ndGggb2YgdGhlIG5vbmNlIGZpZWxkLiAgVGhlIGxlbmd0aCBvZiBub25jZSBmb3Jc biAgICAgIGF1dGhlbnRpY2F0ZWQgZW5jcnlwdGlvbiB3aXRoIGFkZGl0aW9uYWwgZGF0YSAoQUVB RCkgYWxnb3JpdGhtcyBpc1xuICAgICAgZXhwbGFpbmVkIGluIFtSRkM1MTE2XS5cblxuICAgTm9u Y2U6ICBOb25jZSBmb3JtYXRpb24gaXMgZXhwbGFpbmVkIGluIHNlY3Rpb24gMy4yIG9mIFtSRkM1 MTE2XS5cblxuICAga2V5X2xlbmd0aDogIExlbmd0aCBvZiB0aGUgc2Vzc2lvbiBrZXkgaW4gb2N0 ZXRzLiAgS2V5IGxlbmd0aCBvZlxuICAgICAgMTYwLWJpdHMgTVVTVCBiZSBzdXBwb3J0ZWQgKGku ZS4sIG9ubHkgMTYwLWJpdCBrZXkgaXMgdXNlZCBieVxuICAgICAgSE1BQy1TSEEtMSBmb3IgbWVz c2FnZSBpbnRlZ3JpdHkgb2YgU1RVTiBtZXNzYWdlKS4gIFRoZSBrZXkgbGVuZ3RoXG5cblxuXG5c blJlZGR5LCBldCBhbC4gICAgICAgICAgIEV4cGlyZXMgT2N0b2JlciAxNSwgMjAxNSAgICAgICAg ICAgICAgICBbUGFnZSA4XVxuX1xuSW50ZXJuZXQtRHJhZnQgICAgICBTVFVOIGZvciAzcmQgcGFy dHkgQXV0aG9yaXphdGlvbiAgICAgICAgICBBcHJpbCAyMDE1XG5cblxuICAgICAgZmFjaWxpdGF0 ZXMgdGhlIGhhc2ggYWdpbGl0eSBwbGFuIGRpc2N1c3NlZCBpbiBzZWN0aW9uIDE2LjMgb2ZcbiAg ICAgIFtSRkM1Mzg5XS5cblxuICAgbWFjX2tleTogIFRoZSBzZXNzaW9uIGtleSBnZW5lcmF0ZWQg YnkgdGhlIGF1dGhvcml6YXRpb24gc2VydmVyLlxuXG4gICB0aW1lc3RhbXA6ICA2NC1iaXQgdW5z aWduZWQgaW50ZWdlciBmaWVsZCBjb250YWluaW5nIGEgdGltZXN0YW1wLlxuICAgICAgVGhlIHZh bHVlIGluZGljYXRlcyB0aGUgdGltZSBzaW5jZSBKYW51YXJ5IDEsIDE5NzAsIDAwOjAwIFVUQywg YnlcbiAgICAgIHVzaW5nIGEgZml4ZWQgcG9pbnQgZm9ybWF0LiAgSW4gdGhpcyBmb3JtYXQsIHRo ZSBpbnRlZ2VyIG51bWJlciBvZlxuICAgICAgc2Vjb25kcyBpcyBjb250YWluZWQgaW4gdGhlIGZp cnN0IDQ4IGJpdHMgb2YgdGhlIGZpZWxkLCBhbmQgdGhlXG4gICAgICByZW1haW5pbmcgMTYgYml0 cyBpbmRpY2F0ZSB0aGUgbnVtYmVyIG9mIDEvNjRLIGZyYWN0aW9ucyBvZiBhXG4gICAgICBzZWNv bmQgKE5hdGl2ZSBmb3JtYXQgLSBVbml4KS5cblxuICAgbGlmZXRpbWU6ICBUaGUgbGlmZXRpbWUg b2YgdGhlIGFjY2VzcyB0b2tlbiwgaW4gc2Vjb25kcy4gIEZvclxuICAgICAgZXhhbXBsZSwgdGhl IHZhbHVlIDM2MDAgaW5kaWNhdGVzIG9uZSBob3VyLiAgVGhlIGxpZmV0aW1lIHZhbHVlXG4gICAg ICBNVVNUIGJlIGdyZWF0ZXIgdGhhbiBvciBlcXVhbCB0byB0aGUgImV4cGlyZXNfaW4iIHBhcmFt ZXRlclxuICAgICAgZGVmaW5lZCBpbiBzZWN0aW9uIDQuMi4yIG9mIFtSRkM2NzQ5XSwgb3RoZXJ3 aXNlIHJlc291cmNlIHNlcnZlclxuICAgICAgY291bGQgcmV2b2tlIHRoZSB0b2tlbiBidXQgdGhl IGNsaWVudCB3b3VsZCBhc3N1bWUgdGhhdCB0aGUgdG9rZW5cbiAgICAgIGhhcyBub3QgZXhwaXJl ZCBhbmQgd291bGQgbm90IHJlZnJlc2ggdGhlIHRva2VuLlxuXG4gICBlbmNyeXB0ZWRfYmxvY2s6 ICBUaGUgZW5jcnlwdGVkX2Jsb2NrIGlzIGVuY3J5cHRlZCBhbmQgYXV0aGVudGljYXRlZFxuICAg ICAgdXNpbmcgdGhlIHN5bW1ldHJpYyBsb25nLXRlcm0ga2V5IGVzdGFibGlzaGVkIGJldHdlZW4g dGhlIFNUVU5cbiAgICAgIHNlcnZlciBhbmQgdGhlIGF1dGhvcml6YXRpb24gc2VydmVyLlxuXG4g ICBUaGUgYXV0aGVudGljYXRlZCBlbmNyeXB0aW9uIG9wZXJhdGlvbiBoYXMgZm91ciBpbnB1dHM6 IEsgLCBOLCBBLCBhbmRcbiAgIFAgKGVuY3J5cHRlZF9ibG9jayksIGFzIGRlZmluZWQgaW4gc2Vj dGlvbiAyLjEgb2YgW1JGQzUxMTZdIGFuZCB0aGVyZVxuICAgaXMgYSBzaW5nbGUgb3V0cHV0IGEg Y2lwaGVydGV4dCBDIG9yIGFuIGluZGljYXRpb24gdGhhdCB0aGUgcmVxdWVzdGVkXG4gICBlbmNy eXB0aW9uIG9wZXJhdGlvbiBjb3VsZCBub3QgYmUgcGVyZm9ybWVkLlxuXG4gICBFbmNyeXB0aW9u IHByb2Nlc3Mgd2l0aCBBRVNfQ0JDX0hNQUNfU0hBMiAoZXhwbGFpbmVkIGluIHNlY3Rpb24gMi4x XG4gICBvZiBbSS1ELm1jZ3Jldy1hZWFkLWFlcy1jYmMtaG1hYy1zaGEyXSkgaXMgaWxsdXN0cmF0 ZWQgYmVsb3cuICBUaGVcbiAgIGNpcGhlcnRleHQgY29uc2lzdHMgb2YgdGhlIHN0cmluZyBTLCB3 aXRoIHRoZSBzdHJpbmcgVCBhcHBlbmRlZCB0b1xuICAgaXQuICBIZXJlIEMgYW5kIEEgZGVub3Rl IENpcGhlcnRleHQgYW5kIFNUVU4gc2VydmVyIG5hbWVcbiAgIHJlc3BlY3RpdmVseS4gIFRoZSBv Y3RldCBzdHJpbmcgQUwgKHNlY3Rpb24gMi4xIG9mXG4gICBbSS1ELm1jZ3Jldy1hZWFkLWFlcy1j YmMtaG1hYy1zaGEyXSkgaXMgZXF1YWwgdG8gdGhlIG51bWJlciBvZiBiaXRzXG4gICBpbiBBIGV4 cHJlc3NlZCBhcyBhIDY0LWJpdCB1bnNpZ25lZCBiaWcgZW5kaWFuIGludGVnZXIuXG5cbiAgIG8g IEFVVEggPSBpbml0aWFsIGF1dGhlbnRpY2F0aW9uIGtleSBsZW5ndGggb2N0ZXRzIG9mIEssXG5c biAgIG8gIEFTLVJTID0gZmluYWwgZW5jcnlwdGlvbiBrZXkgbGVuZ3RoIG9jdGV0cyBvZiBLLFxu XG4gICBvICBTID0gQ0JDLVBLQ1M1LUVOQyhBUy1SUywgZW5jcnlwdGVkX2Jsb2NrKSxcblxuICAg ICAgKiAgSW5pdGlhbGl6YXRpb24gdmVjdG9yIGlzIHNldCB0byB6ZXJvIGJlY2F1c2UgdGhlXG4g ICAgICAgICBlbmNyeXB0ZWRfYmxvY2sgaW4gZWFjaCBhY2Nlc3MgdG9rZW4gd2lsbCBub3QgYmUg aWRlbnRpY2FsIGFuZFxuICAgICAgICAgaGVuY2Ugd2lsbCBub3QgcmVzdWx0IGluIGdlbmVyYXRp b24gb2YgaWRlbnRpY2FsIGNpcGhlcnRleHQuXG5cbiAgIG8gIG1hYyA9IE1BQyhBVVRILCBBIF9f IFMgX18gQUwpLFxuXG5cblxuXG5SZWRkeSwgZXQgYWwuICAgICAgICAgICBFeHBpcmVzIE9jdG9i ZXIgMTUsIDIwMTUgICAgICAgICAgICAgICAgW1BhZ2UgOV1cbl9cbkludGVybmV0LURyYWZ0ICAg ICAgU1RVTiBmb3IgM3JkIHBhcnR5IEF1dGhvcml6YXRpb24gICAgICAgICAgQXByaWwgMjAxNVxu XG5cbiAgIG8gIFQgPSBpbml0aWFsIFRfTEVOIG9jdGV0cyBvZiBtYWMsXG5cbiAgIG8gIEMgPSBT IF9fIFQuXG5cbiAgIFRoZSBlbnRpcmUgdG9rZW4gaS5lLiwgdGhlIFwnZW5jcnlwdGVkX2Jsb2Nr XCcgaXMgYmFzZTY0IGVuY29kZWQgKHNlZVxuICAgc2VjdGlvbiA0IG9mIFtSRkM0NjQ4XSkgYW5k IHRoZSByZXN1bHRpbmcgYWNjZXNzIHRva2VuIGlzIHNpZ25hbGVkIHRvXG4gICB0aGUgY2xpZW50 LlxuXG43LiAgU1RVTiBTZXJ2ZXIgQmVoYXZpb3VyXG5cbiAgIFRoZSBTVFVOIHNlcnZlciwgb24g cmVjZWl2aW5nIGEgcmVxdWVzdCB3aXRoIEFDQ0VTUy1UT0tFTiBhdHRyaWJ1dGUsXG4gICBwZXJm b3JtcyBjaGVja3MgbGlzdGVkIGluIHNlY3Rpb24gMTAuMi4yIG9mIFtSRkM1Mzg5XSBpbiBhZGRp dGlvbiB0b1xuICAgdGhlIGZvbGxvd2luZyBzdGVwcyB0byB2ZXJpZnkgdGhhdCB0aGUgYWNjZXNz IHRva2VuIGlzIHZhbGlkOlxuXG4gICBvICBTVFVOIHNlcnZlciBzZWxlY3RzIHRoZSBrZXlpbmcg bWF0ZXJpYWwgYmFzZWQgb24ga2lkIHNpZ25hbGxlZCBpblxuICAgICAgdGhlIFVTRVJOQU1FIGF0 dHJpYnV0ZS5cblxuICAgbyAgVGhlIGF1dGhlbnRpY2F0ZWQgZGVjcnlwdGlvbiBvcGVyYXRpb24g aGFzIGZvdXIgaW5wdXRzOiBLLCBOLCBBLFxuICAgICAgYW5kIEMsIGFzIGRlZmluZWQgaW4gc2Vj dGlvbiAyLjIgb2YgW1JGQzUxMTZdLiAgQUVBRCBkZWNyeXB0aW9uXG4gICAgICBhbGdvcml0aG0g aGFzIG9ubHkgYSBzaW5nbGUgb3V0cHV0LCBlaXRoZXIgYSBwbGFpbnRleHQgb3IgYVxuICAgICAg c3BlY2lhbCBzeW1ib2wgRkFJTCB0aGF0IGluZGljYXRlcyB0aGF0IHRoZSBpbnB1dHMgYXJlIG5v dFxuICAgICAgYXV0aGVudGljLiAgSWYgYXV0aGVudGljYXRlZCBkZWNyeXB0IG9wZXJhdGlvbiBy ZXR1cm5zIEZBSUwgdGhlblxuICAgICAgdGhlIFNUVU4gc2VydmVyIHJlamVjdHMgdGhlIHJlcXVl c3Qgd2l0aCBhbiBlcnJvciByZXNwb25zZSA0MDFcbiAgICAgIChVbmF1dGhvcml6ZWQpLiAgSWYg QUVTX0NCQ19ITUFDX1NIQTIgaXMgdXNlZCB0aGVuIHRoZSBmaW5hbCBUX0xFTlxuICAgICAgb2N0 ZXRzIGFyZSBzdHJpcHBlZCBmcm9tIEMuICBJdCBwZXJmb3JtcyB0aGUgdmVyaWZpY2F0aW9uIG9m IHRoZVxuICAgICAgdG9rZW4gbWVzc2FnZSBpbnRlZ3JpdHkgYnkgY2FsY3VsYXRpbmcgSE1BQyBv dmVyIHRoZSB0aGUgU1RVTlxuICAgICAgc2VydmVyIG5hbWUsIHRoZSBlbmNyeXB0ZWQgcG9ydGlv biBpbiB0aGUgc2VsZi1jb250YWluZWQgdG9rZW4gYW5kXG4gICAgICB0aGUgQUwgdXNpbmcgQVVU SCBrZXkgYW5kIGlmIHRoZSByZXN1bHRpbmcgdmFsdWUgZG9lcyBub3QgbWF0Y2hcbiAgICAgIHRo ZSBtYWMgZmllbGQgaW4gdGhlIHNlbGYtY29udGFpbmVkIHRva2VuIHRoZW4gaXQgcmVqZWN0cyB0 aGVcbiAgICAgIHJlcXVlc3Qgd2l0aCBhbiBlcnJvciByZXNwb25zZSA0MDEgKFVuYXV0aG9yaXpl ZCkuXG5cbiAgIG8gIFNUVU4gc2VydmVyIG9idGFpbnMgdGhlIG1hY19rZXkgYnkgcmV0cmlldmlu ZyB0aGUgY29udGVudCBvZiB0aGVcbiAgICAgIGFjY2VzcyB0b2tlbiAod2hpY2ggcmVxdWlyZXMg ZGVjcnlwdGlvbiBvZiB0aGUgc2VsZi1jb250YWluZWRcbiAgICAgIHRva2VuIHVzaW5nIHRoZSBB Uy1SUyBrZXkpLlxuXG4gICBvICBUaGUgU1RVTiBzZXJ2ZXIgdmVyaWZpZXMgdGhhdCBubyByZXBs YXkgdG9vayBwbGFjZSBieSBwZXJmb3JtaW5nXG4gICAgICB0aGUgZm9sbG93aW5nIGNoZWNrOlxu XG4gICAgICAqICBUaGUgYWNjZXNzIHRva2VuIGlzIGFjY2VwdGVkIGlmIHRoZSB0aW1lc3RhbXAg ZmllbGQgKFRTKSBpbiB0aGVcbiAgICAgICAgIHNlbGYtY29udGFpbmVkIHRva2VuIGlzIHJlY2Vu dCBlbm91Z2ggdG8gdGhlIHJlY2VwdGlvbiB0aW1lIG9mXG4gICAgICAgICB0aGUgU1RVTiByZXF1 ZXN0IChSRG5ldykgdXNpbmcgdGhlIGZvbGxvd2luZyBmb3JtdWxhOiBMaWZldGltZVxuICAgICAg ICAgKyBEZWx0YSBfIGFicyhSRG5ldyAtIFRTKS4gIFRoZSBSRUNPTU1FTkRFRCB2YWx1ZSBmb3Ig dGhlXG4gICAgICAgICBhbGxvd2VkIERlbHRhIGlzIDUgc2Vjb25kcy4gIElmIHRoZSB0aW1lc3Rh bXAgaXMgTk9UIHdpdGhpbiB0aGVcbiAgICAgICAgIGJvdW5kYXJpZXMgdGhlbiB0aGUgU1RVTiBz ZXJ2ZXIgZGlzY2FyZHMgdGhlIHJlcXVlc3Qgd2l0aCBlcnJvclxuICAgICAgICAgcmVzcG9uc2Ug NDAxIChVbmF1dGhvcml6ZWQpLlxuXG4gICBvICBUaGUgU1RVTiBzZXJ2ZXIgdXNlcyB0aGUgbWFj X2tleSB0byBjb21wdXRlIHRoZSBtZXNzYWdlIGludGVncml0eVxuICAgICAgb3ZlciB0aGUgcmVx dWVzdCBhbmQgaWYgdGhlIHJlc3VsdGluZyB2YWx1ZSBkb2VzIG5vdCBtYXRjaCB0aGVcblxuXG5c blJlZGR5LCBldCBhbC4gICAgICAgICAgIEV4cGlyZXMgT2N0b2JlciAxNSwgMjAxNSAgICAgICAg ICAgICAgIFtQYWdlIDEwXVxuX1xuSW50ZXJuZXQtRHJhZnQgICAgICBTVFVOIGZvciAzcmQgcGFy dHkgQXV0aG9yaXphdGlvbiAgICAgICAgICBBcHJpbCAyMDE1XG5cblxuICAgICAgY29udGVudHMg b2YgdGhlIE1FU1NBR0UtSU5URUdSSVRZIGF0dHJpYnV0ZSB0aGVuIGl0IHJlamVjdHMgdGhlXG4g ICAgICByZXF1ZXN0IHdpdGggYW4gZXJyb3IgcmVzcG9uc2UgNDAxIChVbmF1dGhvcml6ZWQpLlxu XG4gICBvICBJZiBhbGwgdGhlIGNoZWNrcyBwYXNzLCB0aGUgU1RVTiBzZXJ2ZXIgY29udGludWVz IHRvIHByb2Nlc3MgdGhlXG4gICAgICByZXF1ZXN0LiAgQW55IHJlc3BvbnNlIGdlbmVyYXRlZCBi eSB0aGUgc2VydmVyIE1VU1QgaW5jbHVkZSB0aGVcbiAgICAgIE1FU1NBR0UtSU5URUdSSVRZIGF0 dHJpYnV0ZSwgY29tcHV0ZWQgdXNpbmcgdGhlIG1hY19rZXkuXG5cbiAgIElmIGEgU1RVTiBzZXJ2 ZXIgcmVjZWl2ZXMgYW4gQUNDRVNTLVRPS0VOIGF0dHJpYnV0ZSB1bmV4cGVjdGVkbHlcbiAgIChi ZWNhdXNlIGl0IGhhZCBub3QgcHJldmlvdXNseSBzZW50IG91dCBhIFRISVJELVBBUlRZLUFVVEhP UklaQVRJT04pLFxuICAgaXQgd2lsbCByZXNwb25kIHdpdGggYW4gZXJyb3IgY29kZSBvZiA0MjAg KFVua25vd24gQXR0cmlidXRlKSBhc1xuICAgc3BlY2lmaWVkIGluIFNlY3Rpb24gNy4zLjEgb2Yg W1JGQzUzODldLlxuXG44LiAgU1RVTiBDbGllbnQgQmVoYXZpb3VyXG5cbiAgIG8gIFRoZSBjbGll bnQgbG9va3MgZm9yIHRoZSBNRVNTQUdFLUlOVEVHUklUWSBhdHRyaWJ1dGUgaW4gdGhlXG4gICAg ICByZXNwb25zZS4gIElmIE1FU1NBR0UtSU5URUdSSVRZIGlzIGFic2VudCBvciB0aGUgdmFsdWUg Y29tcHV0ZWRcbiAgICAgIGZvciBtZXNzYWdlIGludGVncml0eSB1c2luZyBtYWNfa2V5IGRvZXMg bm90IG1hdGNoIHRoZSBjb250ZW50cyBvZlxuICAgICAgdGhlIE1FU1NBR0UtSU5URUdSSVRZIGF0 dHJpYnV0ZSB0aGVuIHRoZSByZXNwb25zZSBNVVNUIGJlXG4gICAgICBkaXNjYXJkZWQuXG5cbiAg IG8gIElmIHRoZSBhY2Nlc3MgdG9rZW4gZXhwaXJlcyB0aGVuIHRoZSBjbGllbnQgTVVTVCBvYnRh aW4gYSBuZXdcbiAgICAgIHRva2VuIGZyb20gdGhlIGF1dGhvcml6YXRpb24gc2VydmVyIGFuZCB1 c2UgaXQgZm9yIG5ldyBTVFVOXG4gICAgICByZXF1ZXN0cy5cblxuOS4gIFVzYWdlIHdpdGggVFVS TlxuXG4gICBUcmF2ZXJzYWwgVXNpbmcgUmVsYXkgTkFUIChUVVJOKSBbUkZDNTc2Nl0gYW4gZXh0 ZW5zaW9uIHRvIHRoZSBTVFVOXG4gICBwcm90b2NvbCBpcyBvZnRlbiB1c2VkIHRvIGltcHJvdmUg dGhlIGNvbm5lY3Rpdml0eSBvZiBQMlBcbiAgIGFwcGxpY2F0aW9ucy4gIFRVUk4gZW5zdXJlcyB0 aGF0IGEgY29ubmVjdGlvbiBjYW4gYmUgZXN0YWJsaXNoZWQgZXZlblxuICAgd2hlbiBvbmUgb3Ig Ym90aCBzaWRlcyBpcyBpbmNhcGFibGUgb2YgYSBkaXJlY3QgUDJQIGNvbm5lY3Rpb24uXG4gICBI b3dldmVyLCBhcyBhIHJlbGF5IHNlcnZpY2UsIGl0IGltcG9zZXMgYSBub250cml2aWFsIGNvc3Qg b24gdGhlXG4gICBzZXJ2aWNlIHByb3ZpZGVyLiAgVGhlcmVmb3JlLCBhY2Nlc3MgdG8gYSBUVVJO IHNlcnZpY2UgaXMgYWxtb3N0XG4gICBhbHdheXMgYWNjZXNzLWNvbnRyb2xsZWQuICBJbiBvcmRl ciB0byBhY2hpZXZlIHRoaXJkIHBhcnR5XG4gICBhdXRob3JpemF0aW9uLCBhIHJlc291cmNlIG93 bmVyIGUuZy4gIFdlYlJUQyBzZXJ2ZXIsIGF1dGhvcml6ZXMgYVxuICAgVFVSTiBjbGllbnQgdG8g YWNjZXNzIHJlc291cmNlcyBvbiB0aGUgVFVSTiBzZXJ2ZXIuXG5cbiAgIENvbnNpZGVyIHRoZSBm b2xsb3dpbmcgZXhhbXBsZSB0aGF0IGlsbHVzdHJhdGVzIHRoZSB1c2Ugb2YgT0F1dGggMi4wXG4g ICB0byBhY2hpZXZlIHRoaXJkIHBhcnR5IGF1dGhvcml6YXRpb24gZm9yIFRVUk4uICBJbiB0aGlz IGV4YW1wbGUsIGFcbiAgIHJlc291cmNlIG93bmVyIGkuZS4sIFdlYlJUQyBzZXJ2ZXIsIGF1dGhv cml6ZXMgYSBUVVJOIGNsaWVudCB0b1xuICAgYWNjZXNzIHJlc291cmNlcyBvbiBhIFRVUk4gc2Vy dmVyLlxuXG5cblxuXG5cblxuXG5cblxuXG5cblJlZGR5LCBldCBhbC4gICAgICAgICAgIEV4cGly ZXMgT2N0b2JlciAxNSwgMjAxNSAgICAgICAgICAgICAgIFtQYWdlIDExXVxuX1xuSW50ZXJuZXQt RHJhZnQgICAgICBTVFVOIGZvciAzcmQgcGFydHkgQXV0aG9yaXphdGlvbiAgICAgICAgICBBcHJp bCAyMDE1XG5cblxuICAgICAgICAgICAgICAgICArLS0tLS0tLS0tLS0tLS0tLS0tLS0tLSstLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tK1xuICAgICAgICAgICAgICAgICBfICAgICBPQXV0aCAy LjAgICAgICAgIF8gICAgICAgICAgICBXZWJSVEMgICAgICAgICAgX1xuICAgICAgICAgICAgICAg ICArPT09PT09PT09PT09PT09PT09PT09PSs9PT09PT09PT09PT09PT09PT09PT09PT09PT09K1xu ICAgICAgICAgICAgICAgICBfIENsaWVudCAgICAgICAgICAgICAgIF8gV2ViUlRDIGNsaWVudCAg ICAgICAgICAgICAgX1xuICAgICAgICAgICAgICAgICArLS0tLS0tLS0tLS0tLS0tLS0tLS0tLSst LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tK1xuICAgICAgICAgICAgICAgICBfIFJlc291cmNl IG93bmVyICAgICAgIF8gV2ViUlRDIHNlcnZlciAgICAgICAgICAgICAgX1xuICAgICAgICAgICAg ICAgICArLS0tLS0tLS0tLS0tLS0tLS0tLS0tLSstLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t K1xuICAgICAgICAgICAgICAgICBfIEF1dGhvcml6YXRpb24gc2VydmVyIF8gQXV0aG9yaXphdGlv biBzZXJ2ZXIgICAgICAgX1xuICAgICAgICAgICAgICAgICArLS0tLS0tLS0tLS0tLS0tLS0tLS0t LSstLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tK1xuICAgICAgICAgICAgICAgICBfIFJlc291 cmNlIHNlcnZlciAgICAgIF8gVFVSTiBTZXJ2ZXIgICAgICAgICAgICAgICAgX1xuICAgICAgICAg ICAgICAgICArLS0tLS0tLS0tLS0tLS0tLS0tLS0tLSstLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tK1xuXG4gICAgICAgICBGaWd1cmUgMjogT0F1dGggdGVybWlub2xvZ3kgbWFwcGVkIHRvIFdl YlJUQyB0ZXJtaW5vbG9neVxuXG4gICBVc2luZyB0aGUgT0F1dGggMi4wIGF1dGhvcml6YXRpb24g ZnJhbWV3b3JrLCBhIFdlYlJUQyBjbGllbnQgKHRoaXJkLVxuICAgcGFydHkgYXBwbGljYXRpb24p IG9idGFpbnMgbGltaXRlZCBhY2Nlc3MgdG8gYSBUVVJOIChyZXNvdXJjZSBzZXJ2ZXIpXG4gICBv biBiZWhhbGYgb2YgdGhlIFdlYlJUQyBzZXJ2ZXIgKHJlc291cmNlIG93bmVyIG9yIGF1dGhvcml6 YXRpb25cbiAgIHNlcnZlcikuICBUaGUgV2ViUlRDIGNsaWVudCByZXF1ZXN0cyBhY2Nlc3MgdG8g cmVzb3VyY2VzIGNvbnRyb2xsZWRcbiAgIGJ5IHRoZSByZXNvdXJjZSBvd25lciAoV2ViUlRDIHNl cnZlcikgYW5kIGhvc3RlZCBieSB0aGUgcmVzb3VyY2VcbiAgIHNlcnZlciAoVFVSTiBzZXJ2ZXIp LiAgVGhlIFdlYlJUQyBjbGllbnQgb2J0YWlucyBhY2Nlc3MgdG9rZW4sXG4gICBsaWZldGltZSwg c2Vzc2lvbiBrZXkgYW5kIGtpZC4gIFRoZSBUVVJOIGNsaWVudCBjb252ZXlzIHRoZSBhY2Nlc3Nc biAgIHRva2VuIGFuZCBvdGhlciBPQXV0aCAyLjAgcGFyYW1ldGVycyBsZWFybnQgZnJvbSB0aGUg YXV0aG9yaXphdGlvblxuICAgc2VydmVyIHRvIHRoZSBUVVJOIHNlcnZlci4gIFRoZSBUVVJOIHNl cnZlciBvYnRhaW5zIHRoZSBzZXNzaW9uIGtleVxuICAgZnJvbSB0aGUgYWNjZXNzIHRva2VuLiAg VGhlIFRVUk4gc2VydmVyIHZhbGlkYXRlcyB0aGUgdG9rZW4sIGNvbXB1dGVzXG4gICB0aGUgbWVz c2FnZSBpbnRlZ3JpdHkgb2YgdGhlIHJlcXVlc3QgYW5kIHRha2VzIGFwcHJvcHJpYXRlIGFjdGlv blxuICAgaS5lLCBwZXJtaXRzIHRoZSBUVVJOIGNsaWVudCB0byBjcmVhdGUgYWxsb2NhdGlvbnMu ICBUaGlzIGlzIHNob3duIGluXG4gICBhbiBhYnN0cmFjdCB3YXkgaW4gRmlndXJlIDMuXG5cblxu XG5cblxuXG5cblxuXG5cblxuXG5cblxuXG5cblxuXG5cblxuXG5cblxuXG5SZWRkeSwgZXQgYWwu ICAgICAgICAgICBFeHBpcmVzIE9jdG9iZXIgMTUsIDIwMTUgICAgICAgICAgICAgICBbUGFnZSAx Ml1cbl9cbkludGVybmV0LURyYWZ0ICAgICAgU1RVTiBmb3IgM3JkIHBhcnR5IEF1dGhvcml6YXRp b24gICAgICAgICAgQXByaWwgMjAxNVxuXG5cbiAgICAgICAgICAgICAgICAgICAgICAgICAgICst LS0tLS0tLS0tLS0tLS0rXG4gICAgICAgICAgICAgICAgICAgICAgICAgICBfICAgICAgICAgICAg ICAgK18qKioqKiorXG4gICAgICAgICAgICArLS0tLS0tLS0tLS0tLV9fIEF1dGhvcml6YXRpb24g XyAgICAgICAqXG4gICAgICAgICAgICBfICAgICAgICAgICAgICBfIFNlcnZlciAgICAgICAgXyAg ICAgICAqXG4gICAgICAgICAgICBfICAgKy0tLS0tLS0tLS1fKFdlYlJUQyBTZXJ2ZXIpXyAgICAg ICAqICBBUy1SUyxcbiAgICAgICAgICAgIF8gICBfICAgICAgICAgIF8gICAgICAgICAgICAgICBf ICAgICAgICogIEFVVEgga2V5c1xuICAgKDIpICAgICAgXyAgIF8gICAgICAgICAgICstLS0tLS0t LS0tLS0tLS0rICAgICAgKiAgICgxKVxuICAgQWNjZXNzICAgXyAgIF8gICgzKSAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgKlxuICAgVG9rZW4gICAgXyAgIF8gQWNjZXNzIFRva2VuICAgICAg ICAgICAgICAgICAgICAgKlxuICAgUmVxdWVzdCAgXyAgIF8gICAgKyAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgKlxuICAgICAgICAgICAgXyAgIF8gU2Vzc2lvbiBLZXkgICAgICAgICAgICAg ICAgICAgICAgKlxuICAgICAgICAgICAgXyAgIF8gICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgKlxuICAgICAgICAgICAgXyAgIFYgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgVlxuICAgICAgICArLS0tLS0tLSstLS0rICAgICAgICAgICAgICAgICAgICAgICArLSstLS0t PS0tLS0tK1xuICAgICAgICBfICAgICAgICAgICBfICAgICAgICAgKDQpICAgICAgICAgICBfICAg ICAgICAgICAgX1xuICAgICAgICBfICAgICAgICAgICBfIFRVUk4gUmVxdWVzdCArIEFjY2VzcyBf ICAgICAgICAgICAgX1xuICAgICAgICBfIFdlYlJUQyAgICBfIFRva2VuICAgICAgICAgICAgICAg ICBfIFRVUk4gICAgICAgX1xuICAgICAgICBfIENsaWVudCAgICBfLS0tLS0tLS0tLS0tLS0tLS0t LS0tLV9fIFNlcnZlciAgICAgX1xuICAgICAgICBfIChBbGljZSkgICBfIEFsbG9jYXRlIFJlc3Bv bnNlICg1KSBfICAgICAgICAgICAgX1xuICAgICAgICBfICAgICAgICAgICBfXy0tLS0tLS0tLS0t LS0tLS0tLS0tLS1fICAgICAgICAgICAgX1xuICAgICAgICArLS0tLS0tLS0tLS0rICAgICAgICAg ICAgICAgICAgICAgICArLS0tLS0tLS0tLS0tK1xuXG4gICBVc2VyIDogQWxpY2VcbiAgICoqKio6 IE91dC1vZi1CYW5kIExvbmctVGVybSBLZXkgRXN0YWJsaXNobWVudFxuXG4gICAgICAgICAgICAg ICAgICAgICAgICAgIEZpZ3VyZSAzOiBJbnRlcmFjdGlvbnNcblxuICAgSW4gdGhlIGJlbG93IGZp Z3VyZSwgdGhlIGNsaWVudCBzZW5kcyBhbiBBbGxvY2F0ZSByZXF1ZXN0IHRvIHRoZVxuICAgc2Vy dmVyIHdpdGhvdXQgY3JlZGVudGlhbHMuICBTaW5jZSB0aGUgc2VydmVyIHJlcXVpcmVzIHRoYXQg YWxsXG4gICByZXF1ZXN0cyBiZSBhdXRoZW50aWNhdGVkIHVzaW5nIE9BdXRoIDIuMCwgdGhlIHNl cnZlciByZWplY3RzIHRoZVxuICAgcmVxdWVzdCB3aXRoIGEgNDAxIChVbmF1dGhvcml6ZWQpIGVy cm9yIGNvZGUgYW5kIFNUVU4gYXR0cmlidXRlXG4gICBUSElSRC1QQVJUWS1BVVRIT1JJWkFUSU9O LiAgVGhlIFdlYlJUQyBjbGllbnQgb2J0YWlucyBhY2Nlc3MgdG9rZW5cbiAgIGZyb20gdGhlIFdl YlJUQyBzZXJ2ZXIgYW5kIHRoZW4gdHJpZXMgYWdhaW4sIHRoaXMgdGltZSBpbmNsdWRpbmdcbiAg IGFjY2VzcyB0b2tlbi4gIFRoaXMgdGltZSwgdGhlIHNlcnZlciB2YWxpZGF0ZXMgdGhlIHRva2Vu LCBhY2NlcHRzIHRoZVxuICAgQWxsb2NhdGUgcmVxdWVzdCBhbmQgcmV0dXJucyBhbiBBbGxvY2F0 ZSBzdWNjZXNzIHJlc3BvbnNlIGNvbnRhaW5pbmdcbiAgIChhbW9uZ3N0IG90aGVyIHRoaW5ncykg dGhlIHJlbGF5ZWQgdHJhbnNwb3J0IGFkZHJlc3MgYXNzaWduZWQgdG8gdGhlXG4gICBhbGxvY2F0 aW9uLlxuXG5cblxuXG5cblxuXG5cblxuXG5cblxuXG5cblJlZGR5LCBldCBhbC4gICAgICAgICAg IEV4cGlyZXMgT2N0b2JlciAxNSwgMjAxNSAgICAgICAgICAgICAgIFtQYWdlIDEzXVxuX1xuSW50 ZXJuZXQtRHJhZnQgICAgICBTVFVOIGZvciAzcmQgcGFydHkgQXV0aG9yaXphdGlvbiAgICAgICAg ICBBcHJpbCAyMDE1XG5cblxuICAgKy0tLS0tLS0tLS0tLS0tLS0tLS0rICAgICAgICAgICAgICAg ICAgICAgICAgICstLS0tLS0tLSsgICstLS0tLS0tLS0rXG4gICBfIC4uLi4uLi4uLiAgVFVSTiAg IF8gICAgICAgICAgICAgICAgICAgICAgICAgXyAgVFVSTiAgXyAgXyAgV2ViUlRDIF9cbiAgIF8g LldlYlJUQyAuICBDbGllbnQgXyAgICAgICAgICAgICAgICAgICAgICAgICBfICAgICAgICBfICBf ICAgICAgICAgX1xuICAgXyAuQ2xpZW50IC4gICAgICAgICBfICAgICAgICAgICAgICAgICAgICAg ICAgIF8gU2VydmVyIF8gIF8gIFNlcnZlciBfXG4gICBfIC4uLi4uLi4uLiAgICAgICAgIF8gICAg ICAgICAgICAgICAgICAgICAgICAgXyAgICAgICAgXyAgXyAgICAgICAgIF9cbiAgICstLS0tLS0t LS0tLS0tLS0tLS0tKyAgICAgICAgICAgICAgICAgICAgICAgICArLS0tLS0tLS0rICArLS0tLS0t LS0tK1xuICAgICBfICAgICAgIF8gICAgICAgICAgIEFsbG9jYXRlIHJlcXVlc3QgICAgICAgICAg ICAgICAgXyAgICAgICAgIF9cbiAgICAgXyAgICAgICBfLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tX18gICAgICAgICBfXG4gICAgIF8gICAgICAgXyAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICBfICAgICAgICAgX1xuICAgICBfICAgICAg IF8gICAgICAgICBBbGxvY2F0ZSBlcnJvciByZXNwb25zZSAgICAgICAgICAgXyAgICAgICAgIF9c biAgICAgXyAgICAgICBfICAgICAgICAgKDQwMSBVbmF1dGhvcml6ZWQpICAgICAgICAgICAgICAg IF8gICAgICAgICBfXG4gICAgIF8gICAgICAgX18tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS1fICAgICAgICAgX1xuICAgICBfICAgICAgIF8gICAgICAgICBUSElSRC1Q QVJUWS1BVVRIT1JJWkFUSU9OICAgICAgICAgXyAgICAgICAgIF9cbiAgICAgXyAgICAgICBfICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIF8gICAgICAgICBfXG4gICAg IF8gICAgICAgXyAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICBfICAg ICAgICAgX1xuICAgICBfICAgICAgIF8gICAgICBIVFRQIFJlcXVlc3QgZm9yIHRva2VuICAgICAg ICAgICAgICAgXyAgICAgICAgIF9cbiAgICAgXy0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLV9fXG4gICAgIF8gICAgICAgXyAgICAgIEhU VFAgUmVzcG9uc2Ugd2l0aCB0b2tlbiBwYXJhbWV0ZXJzICBfICAgICAgICAgX1xuICAgICBfXy0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LV9cbiAgICAgX09BdXRoIDIuMCAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgIF8gICAgICAgICBfXG4gICAgICBBdHRyaWJ1dGVzICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICBfICAgICAgICAgX1xuICAgICBfLS0tLS0tX18gICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgXyAgICAgICAgIF9cbiAgICAgXyAgICAgICBf ICAgIEFsbG9jYXRlIHJlcXVlc3QgQUNDRVNTLVRPS0VOICAgICAgICAgIF8gICAgICAgICBfXG4g ICAgIF8gICAgICAgXy0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLV9f ICAgICAgICAgX1xuICAgICBfICAgICAgIF8gICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgXyAgICAgICAgIF9cbiAgICAgXyAgICAgICBfICAgICAgICAgQWxsb2NhdGUg c3VjY2VzcyByZXNwb25zZSAgICAgICAgIF8gICAgICAgICBfXG4gICAgIF8gICAgICAgX18tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS1fICAgICAgICAgX1xuICAgICBf ICAgICAgIF8gICAgICAgICAgICAgVFVSTiBNZXNzYWdlcyAgICAgICAgICAgICAgICAgXyAgICAg ICAgIF9cbiAgICAgXyAgICAgICBfICAgICAgLy8vLy8vIGludGVncml0eSBwcm90ZWN0ZWQgLy8v Ly8vICAgIF8gICAgICAgICBfXG4gICAgIF8gICAgICAgXyAgICAgIC8vLy8vLyBpbnRlZ3JpdHkg cHJvdGVjdGVkIC8vLy8vLyAgICBfICAgICAgICAgX1xuICAgICBfICAgICAgIF8gICAgICAvLy8v Ly8gaW50ZWdyaXR5IHByb3RlY3RlZCAvLy8vLy8gICAgXyAgICAgICAgIF9cblxuICAgICAgICAg ICAgICAgICBGaWd1cmUgNDogVFVSTiBUaGlyZCBQYXJ0eSBBdXRob3JpemF0aW9uXG5cbiAgIENo YW5nZXMgc3BlY2lmaWMgdG8gVFVSTiBhcmUgbGlzdGVkIGJlbG93OlxuXG4gICBvICBUaGUgYWNj ZXNzIHRva2VuIGNhbiBiZSByZXVzZWQgZm9yIG11bHRpcGxlIEFsbG9jYXRlIHJlcXVlc3RzIHRv XG4gICAgICB0aGUgc2FtZSBUVVJOIHNlcnZlci4gIFRoZSBUVVJOIGNsaWVudCBNVVNUIGluY2x1 ZGUgdGhlIEFDQ0VTUy1cbiAgICAgIFRPS0VOIGF0dHJpYnV0ZSBvbmx5IGluIEFsbG9jYXRlIGFu ZCBSZWZyZXNoIHJlcXVlc3RzLiAgU2luY2UgdGhlXG4gICAgICBhY2Nlc3MgdG9rZW4gaXMgdmFs aWQgZm9yIGEgc3BlY2lmaWMgcGVyaW9kIG9mIHRpbWUsIHRoZSBUVVJOXG4gICAgICBzZXJ2ZXIg Y2FuIGNhY2hlIGl0IHNvIHRoYXQgaXQgY2FuIGNoZWNrIGlmIHRoZSBhY2Nlc3MgdG9rZW4gaW4g YVxuICAgICAgbmV3IGFsbG9jYXRpb24gcmVxdWVzdCBtYXRjaGVzIG9uZSBvZiB0aGUgY2FjaGVk IHRva2VucyBhbmQgYXZvaWRzXG4gICAgICB0aGUgbmVlZCB0byBkZWNyeXB0IHRoZSB0b2tlbi5c blxuICAgbyAgVGhlIGxpZmV0aW1lIHByb3ZpZGVkIGJ5IHRoZSBUVVJOIHNlcnZlciBpbiB0aGUg QWxsb2NhdGUgYW5kXG4gICAgICBSZWZyZXNoIHJlc3BvbnNlcyBNVVNUIGJlIGxlc3MgdGhhbiBv ciBlcXVhbCB0byB0aGUgbGlmZXRpbWUgb2ZcbiAgICAgIHRoZSB0b2tlbi4gIEl0IGlzIFJFQ09N TUVOREVEIHRoYXQgdGhlIFRVUk4gc2VydmVyIGNhbGN1bGF0ZSB0aGVcbiAgICAgIG1heGltdW0g YWxsb3dlZCBsaWZldGltZSB2YWx1ZSB1c2luZyB0aGUgZm9ybXVsYTpcblxuXG5cblJlZGR5LCBl dCBhbC4gICAgICAgICAgIEV4cGlyZXMgT2N0b2JlciAxNSwgMjAxNSAgICAgICAgICAgICAgIFtQ YWdlIDE0XVxuX1xuSW50ZXJuZXQtRHJhZnQgICAgICBTVFVOIGZvciAzcmQgcGFydHkgQXV0aG9y aXphdGlvbiAgICAgICAgICBBcHJpbCAyMDE1XG5cblxuICAgICAgICBsaWZldGltZSArIERlbHRh IC0gYWJzKFJEbmV3IC0gVFMpXG5cbiAgICAgIFRoZSBSRUNPTU1FTkRFRCB2YWx1ZSBmb3IgdGhl IGFsbG93ZWQgRGVsdGEgaXMgNSBzZWNvbmRzLlxuXG4gICBvICBJZiB0aGUgYWNjZXNzIHRva2Vu IGV4cGlyZXMgdGhlbiB0aGUgY2xpZW50IE1VU1Qgb2J0YWluIGEgbmV3XG4gICAgICB0b2tlbiBm cm9tIHRoZSBhdXRob3JpemF0aW9uIHNlcnZlciBhbmQgdXNlIGl0IGZvciBuZXdcbiAgICAgIGFs bG9jYXRpb25zLiAgVGhlIGNsaWVudCBNVVNUIHVzZSB0aGUgbmV3IHRva2VuIHRvIHJlZnJlc2hc biAgICAgIGV4aXN0aW5nIGFsbG9jYXRpb25zLiAgVGhpcyB3YXkgY2xpZW50IGhhcyB0byBtYWlu dGFpbiBvbmx5IG9uZVxuICAgICAgdG9rZW4gcGVyIFRVUk4gc2VydmVyLlxuXG4xMC4gIE9wZXJh dGlvbmFsIENvbnNpZGVyYXRpb25zXG5cbiAgIFRoZSBmb2xsb3dpbmcgb3BlcmF0aW9uYWwgY29u c2lkZXJhdGlvbnMgc2hvdWxkIGJlIHRha2VuIGludG9cbiAgIGFjY291bnQ6XG5cbiAgIG8gIEVh Y2ggYXV0aG9yaXphdGlvbiBzZXJ2ZXIgc2hvdWxkIG1haW50YWluIHRoZSBsaXN0IG9mIFNUVU4g c2VydmVyc1xuICAgICAgZm9yIHdoaWNoIGl0IHdpbGwgZ3JhbnQgdG9rZW5zLCBhbmQgdGhlIGxv bmctdGVybSBzZWNyZXQgc2hhcmVkXG4gICAgICB3aXRoIGVhY2ggb2YgdGhvc2UgU1RVTiBzZXJ2 ZXJzLlxuXG4gICBvICBJZiBtYW51YWwgY29uZmlndXJhdGlvbiAoU2VjdGlvbiA0LjEuMikgaXMg dXNlZCB0byBlc3RhYmxpc2hcbiAgICAgIHN5bW1ldHJpYyBrZXlzLCB0aGUgbmVjZXNzYXJ5IGlu Zm9ybWF0aW9uIHdoaWNoIGluY2x1ZGVzIGxvbmctdGVybVxuICAgICAga2V5IChLKSwgZW5jcnlw dGlvbiBhbmQgSE1BQyBhbGdvcml0aG1zIGhhdmUgdG8gYmUgY29uZmlndXJlZCBvblxuICAgICAg ZWFjaCBhdXRob3JpemF0aW9uIHNlcnZlciBhbmQgU1RVTiBzZXJ2ZXIgZm9yIGVhY2gga2lkLiAg VGhlXG4gICAgICBjbGllbnQgb2J0YWlucyB0aGUgc2Vzc2lvbiBrZXkgYW5kIEhNQUMgYWxnb3Jp dGhtIGZyb20gdGhlXG4gICAgICBhdXRob3JpemF0aW9uIHNlcnZlciBpbiBjb21wYW55IHdpdGgg dGhlIHRva2VuLlxuXG4gICBvICBXaGVuIGEgU1RVTiBjbGllbnQgc2VuZHMgYSByZXF1ZXN0IHRv IGdldCBhY2Nlc3MgdG8gYSBwYXJ0aWN1bGFyXG4gICAgICBTVFVOIHNlcnZlciAoUykgdGhlIGF1 dGhvcml6YXRpb24gc2VydmVyIG11c3QgZW5zdXJlIHRoYXQgaXRcbiAgICAgIHNlbGVjdHMgdGhl IGFwcHJvcHJpYXRlIGtpZCwgYWNjZXNzLXRva2VuIGRlcGVuZGluZyBvbiB0aGUgc2VydmVyXG4g ICAgICBTLlxuXG4xMS4gIFNlY3VyaXR5IENvbnNpZGVyYXRpb25zXG5cbiAgIFdoZW4gT0F1dGgg Mi4wIGlzIHVzZWQgdGhlIGludGVyYWN0aW9uIGJldHdlZW4gdGhlIGNsaWVudCBhbmQgdGhlXG4g ICBhdXRob3JpemF0aW9uIHNlcnZlciByZXF1aXJlcyBUcmFuc3BvcnQgTGF5ZXIgU2VjdXJpdHkg KFRMUykgd2l0aCBhXG4gICBjaXBoZXJzdWl0ZSBvZmZlcmluZyBjb25maWRlbnRpYWxpdHkgcHJv dGVjdGlvbiBhbmQgdGhlIGd1aWRhbmNlXG4gICBnaXZlbiBpbiBbSS1ELmlldGYtdXRhLXRscy1i Y3BdIG11c3QgYmUgZm9sbG93ZWQgdG8gYXZvaWQgYXR0YWNrcyBvblxuICAgVExTLiAgVGhlIHNl c3Npb24ga2V5IE1VU1QgTk9UIGJlIHRyYW5zbWl0dGVkIGluIGNsZWFyIHNpbmNlIHRoaXNcbiAg IHdvdWxkIGNvbXBsZXRlbHkgZGVzdHJveSB0aGUgc2VjdXJpdHkgYmVuZWZpdHMgb2YgdGhlIHBy b3Bvc2VkXG4gICBzY2hlbWUuICBBbiBhdHRhY2tlciB0cnlpbmcgdG8gcmVwbGF5IG1lc3NhZ2Ug d2l0aCBBQ0NFU1MtVE9LRU5cbiAgIGF0dHJpYnV0ZSBjYW4gYmUgbWl0aWdhdGVkIGJ5IGZyZXF1 ZW50IGNoYW5nZXMgb2Ygbm9uY2UgdmFsdWUgYXNcbiAgIGRpc2N1c3NlZCBpbiBzZWN0aW9uIDEw LjIgb2YgW1JGQzUzODldLiAgVGhlIGNsaWVudCBtYXkga25vdyBzb21lXG4gICAoYnV0IG5vdCBh bGwpIG9mIHRoZSB0b2tlbiBmaWVsZHMgZW5jcnlwdGVkIHdpdGggYSB1bmtub3duIHNlY3JldCBr ZXlcbiAgIGFuZCB0aGUgdG9rZW4gY2FuIGJlIHN1YmplY3RlZCB0byBrbm93bi1wbGFpbnRleHQg YXR0YWNrLCBidXQgQUVTIGlzXG4gICBzZWN1cmUgYWdhaW5zdCB0aGlzIGF0dGFjay5cblxuICAg QW4gYXR0YWNrZXIgbWF5IHJlbW92ZSB0aGUgVEhJUkQtUEFSVFktQVVUSE9SSVpBVElPTiBTVFVO IGF0dHJpYnV0ZVxuICAgZnJvbSB0aGUgZXJyb3IgbWVzc2FnZSBmb3JjaW5nIHRoZSBjbGllbnQg dG8gcGljayBmaXJzdCBwYXJ0eVxuXG5cblxuUmVkZHksIGV0IGFsLiAgICAgICAgICAgRXhwaXJl cyBPY3RvYmVyIDE1LCAyMDE1ICAgICAgICAgICAgICAgW1BhZ2UgMTVdXG5fXG5JbnRlcm5ldC1E cmFmdCAgICAgIFNUVU4gZm9yIDNyZCBwYXJ0eSBBdXRob3JpemF0aW9uICAgICAgICAgIEFwcmls IDIwMTVcblxuXG4gICBhdXRoZW50aWNhdGlvbiwgdGhpcyBhdHRhY2sgbWF5IGJlIG1pdGlnYXRl ZCBieSBvcHRpbmcgZm9yIFRyYW5zcG9ydFxuICAgTGF5ZXIgU2VjdXJpdHkgKFRMUykgW1JGQzUy NDZdIG9yIERhdGFncmFtIFRyYW5zcG9ydCBMYXllciBTZWN1cml0eVxuICAgKERUTFMpIFtSRkM2 MzQ3XSBhcyBhIHRyYW5zcG9ydCBwcm90b2NvbCBmb3IgU2Vzc2lvbiBUcmF2ZXJzYWxcbiAgIFV0 aWxpdGllcyBmb3IgTkFUIChTVFVOKSwgYXMgZGVmaW5lZCBpbiBbUkZDNTM4OV1hbmQgW1JGQzcz NTBdLlxuXG4gICBUaHJlYXQgbWl0aWdhdGlvbiBkaXNjdXNzZWQgaW4gc2VjdGlvbiA1IG9mXG4g ICBbSS1ELmlldGYtb2F1dGgtcG9wLWFyY2hpdGVjdHVyZV0gYW5kIHNlY3VyaXR5IGNvbnNpZGVy YXRpb25zIGluXG4gICBbUkZDNTM4OV0gYXJlIHRvIGJlIHRha2VuIGludG8gYWNjb3VudC5cblxu MTIuICBJQU5BIENvbnNpZGVyYXRpb25zXG5cbiAgIFtQYXJhZ3JhcGhzIGJlbG93IGluIGJyYWNl cyBzaG91bGQgYmUgcmVtb3ZlZCBieSB0aGUgUkZDIEVkaXRvciB1cG9uXG4gICBwdWJsaWNhdGlv bl1cblxuICAgW0lBTkEgaXMgcmVxdWVzdGVkIHRvIGFkZCB0aGUgZm9sbG93aW5nIGF0dHJpYnV0 ZXMgdG8gdGhlIFNUVU5cbiAgIGF0dHJpYnV0ZSByZWdpc3RyeSBbaWFuYS1zdHVuXSwgVGhlIFRI SVJELVBBUlRZLUFVVEhPUklaQVRJT05cbiAgIGF0dHJpYnV0ZSByZXF1aXJlcyB0aGF0IElBTkEg YWxsb2NhdGUgYSB2YWx1ZSBpbiB0aGUgIlNUVU4gYXR0cmlidXRlc1xuICAgUmVnaXN0cnkiIGZy b20gdGhlIGNvbXByZWhlbnNpb24tb3B0aW9uYWwgcmFuZ2UgKDB4ODAwMC0weEJGRkYpXVxuXG4g ICBUaGlzIGRvY3VtZW50IGRlZmluZXMgdGhlIFRISVJELVBBUlRZLUFVVEhPUklaQVRJT04gU1RV TiBhdHRyaWJ1dGUsXG4gICBkZXNjcmliZWQgaW4gU2VjdGlvbiA2LiAgSUFOQSBoYXMgYWxsb2Nh dGVkIHRoZSBjb21wcmVoZW5zaW9uLVxuICAgb3B0aW9uYWwgY29kZXBvaW50IFRCRCBmb3IgdGhp cyBhdHRyaWJ1dGUuXG5cbiAgIFtUaGUgQUNDRVNTLVRPS0VOIGF0dHJpYnV0ZSByZXF1aXJlcyB0 aGF0IElBTkEgYWxsb2NhdGUgYSB2YWx1ZSBpblxuICAgdGhlICJTVFVOIGF0dHJpYnV0ZXMgUmVn aXN0cnkiIGZyb20gdGhlIGNvbXByZWhlbnNpb24tcmVxdWlyZWQgcmFuZ2VcbiAgICgweDAwMDAt MHgzRkZGKV1cblxuICAgVGhpcyBkb2N1bWVudCBkZWZpbmVzIHRoZSBBQ0NFU1MtVE9LRU4gU1RV TiBhdHRyaWJ1dGUsIGRlc2NyaWJlZCBpblxuICAgU2VjdGlvbiA2LiAgSUFOQSBoYXMgYWxsb2Nh dGVkIHRoZSBjb21wcmVoZW5zaW9uLXJlcXVpcmVkIGNvZGVwb2ludFxuICAgVEJEIGZvciB0aGlz IGF0dHJpYnV0ZS5cblxuMTMuICBBY2tub3dsZWRnZW1lbnRzXG5cbiAgIEF1dGhvcnMgd291bGQg bGlrZSB0byB0aGFuayBEYW4gV2luZywgUGFsIE1hcnRpbnNlbiwgT2xlZyBNb3NrYWxlbmtvLFxu ICAgQ2hhcmxlcyBFY2tlbCwgU3BlbmNlciBEYXdraW5zLCBIYW5uZXMgVHNjaG9mZW5pZywgWWFy b24gU2hlZmZlciwgVG9tXG4gICBUYXlsb3IsIENocmlzdGVyIEhvbG1iZXJnLCBQZXRlIFJlc25p Y2ssIEthdGhsZWVuIE1vcmlhcnR5LCBSaWNoYXJkXG4gICBCYXJuZXMsIFN0ZXBoZW4gRmFycmVs bCBhbmQgQWxpc3NhIENvb3BlciBmb3IgY29tbWVudHMgYW5kIHJldmlldy5cbiAgIFRoZSBhdXRo b3JzIHdvdWxkIGxpa2UgdG8gZ2l2ZSBzcGVjaWFsIHRoYW5rcyB0byBCcmFuZG9uIFdpbGxpYW1z IGZvclxuICAgaGlzIGhlbHAuXG5cbiAgIFRoYW5rcyB0byBPbGVnIE1vc2thbGVua28gZm9yIHBy b3ZpZGluZyB0b2tlbiBzYW1wbGVzIGluIHRoZVxuICAgQXBwZW5kaXggc2VjdGlvbi5cblxuMTQu ICBSZWZlcmVuY2VzXG5cblxuXG5cblxuXG5cblJlZGR5LCBldCBhbC4gICAgICAgICAgIEV4cGly ZXMgT2N0b2JlciAxNSwgMjAxNSAgICAgICAgICAgICAgIFtQYWdlIDE2XVxuX1xuSW50ZXJuZXQt RHJhZnQgICAgICBTVFVOIGZvciAzcmQgcGFydHkgQXV0aG9yaXphdGlvbiAgICAgICAgICBBcHJp bCAyMDE1XG5cblxuMTQuMS4gIE5vcm1hdGl2ZSBSZWZlcmVuY2VzXG5cbiAgIFtJLUQuaWV0Zi1q b3NlLWpzb24td2ViLWFsZ29yaXRobXNdXG4gICAgICAgICAgICAgIEpvbmVzLCBNLiwgIkpTT04g V2ViIEFsZ29yaXRobXMgKEpXQSkiLCBkcmFmdC1pZXRmLWpvc2UtXG4gICAgICAgICAgICAgIGpz b24td2ViLWFsZ29yaXRobXMtNDAgKHdvcmsgaW4gcHJvZ3Jlc3MpLCBKYW51YXJ5IDIwMTUuXG5c biAgIFtSRkMyMTE5XSAgQnJhZG5lciwgUy4sICJLZXkgd29yZHMgZm9yIHVzZSBpbiBSRkNzIHRv IEluZGljYXRlXG4gICAgICAgICAgICAgIFJlcXVpcmVtZW50IExldmVscyIsIEJDUCAxNCwgUkZD IDIxMTksIE1hcmNoIDE5OTcuXG5cbiAgIFtSRkM0NjQ4XSAgSm9zZWZzc29uLCBTLiwgIlRoZSBC YXNlMTYsIEJhc2UzMiwgYW5kIEJhc2U2NCBEYXRhXG4gICAgICAgICAgICAgIEVuY29kaW5ncyIs IFJGQyA0NjQ4LCBPY3RvYmVyIDIwMDYuXG5cbiAgIFtSRkM0ODY4XSAgS2VsbHksIFMuIGFuZCBT LiBGcmFua2VsLCAiVXNpbmcgSE1BQy1TSEEtMjU2LCBITUFDLVNIQS1cbiAgICAgICAgICAgICAg Mzg0LCBhbmQgSE1BQy1TSEEtNTEyIHdpdGggSVBzZWMiLCBSRkMgNDg2OCwgTWF5IDIwMDcuXG5c biAgIFtSRkM1MTE2XSAgTWNHcmV3LCBELiwgIkFuIEludGVyZmFjZSBhbmQgQWxnb3JpdGhtcyBm b3IgQXV0aGVudGljYXRlZFxuICAgICAgICAgICAgICBFbmNyeXB0aW9uIiwgUkZDIDUxMTYsIEph bnVhcnkgMjAwOC5cblxuICAgW1JGQzUzODldICBSb3NlbmJlcmcsIEouLCBNYWh5LCBSLiwgTWF0 dGhld3MsIFAuLCBhbmQgRC4gV2luZyxcbiAgICAgICAgICAgICAgIlNlc3Npb24gVHJhdmVyc2Fs IFV0aWxpdGllcyBmb3IgTkFUIChTVFVOKSIsIFJGQyA1Mzg5LFxuICAgICAgICAgICAgICBPY3Rv YmVyIDIwMDguXG5cbiAgIFtSRkM2NzQ5XSAgSGFyZHQsIEQuLCAiVGhlIE9BdXRoIDIuMCBBdXRo b3JpemF0aW9uIEZyYW1ld29yayIsIFJGQ1xuICAgICAgICAgICAgICA2NzQ5LCBPY3RvYmVyIDIw MTIuXG5cbiAgIFtpYW5hLXN0dW5dXG4gICAgICAgICAgICAgIElBTkEsICwgIklBTkE6IFNUVU4g QXR0cmlidXRlcyIsIEFwcmlsIDIwMTEsXG4gICAgICAgICAgICAgIF9odHRwOi8vd3d3LmlhbmEu b3JnL2Fzc2lnbm1lbnRzL3N0dW4tcGFyYW1ldGVycy9zdHVuLXBhXG4gICAgICAgICAgICAgIHJh bWV0ZXJzLnhtbF8uXG5cbjE0LjIuICBJbmZvcm1hdGl2ZSBSZWZlcmVuY2VzXG5cbiAgIFtJLUQu aWV0Zi1qb3NlLWpzb24td2ViLWVuY3J5cHRpb25dXG4gICAgICAgICAgICAgIEpvbmVzLCBNLiBh bmQgSi4gSGlsZGVicmFuZCwgIkpTT04gV2ViIEVuY3J5cHRpb24gKEpXRSkiLFxuICAgICAgICAg ICAgICBkcmFmdC1pZXRmLWpvc2UtanNvbi13ZWItZW5jcnlwdGlvbi00MCAod29yayBpbiBwcm9n cmVzcyksXG4gICAgICAgICAgICAgIEphbnVhcnkgMjAxNS5cblxuICAgW0ktRC5pZXRmLWpvc2Ut anNvbi13ZWItc2lnbmF0dXJlXVxuICAgICAgICAgICAgICBKb25lcywgTS4sIEJyYWRsZXksIEou LCBhbmQgTi4gU2FraW11cmEsICJKU09OIFdlYlxuICAgICAgICAgICAgICBTaWduYXR1cmUgKEpX UykiLCBkcmFmdC1pZXRmLWpvc2UtanNvbi13ZWItc2lnbmF0dXJlLTQxXG4gICAgICAgICAgICAg ICh3b3JrIGluIHByb2dyZXNzKSwgSmFudWFyeSAyMDE1LlxuXG4gICBbSS1ELmlldGYtb2F1dGgt anNvbi13ZWItdG9rZW5dXG4gICAgICAgICAgICAgIEpvbmVzLCBNLiwgQnJhZGxleSwgSi4sIGFu ZCBOLiBTYWtpbXVyYSwgIkpTT04gV2ViIFRva2VuXG4gICAgICAgICAgICAgIChKV1QpIiwgZHJh ZnQtaWV0Zi1vYXV0aC1qc29uLXdlYi10b2tlbi0zMiAod29yayBpblxuICAgICAgICAgICAgICBw cm9ncmVzcyksIERlY2VtYmVyIDIwMTQuXG5cblxuXG5cblxuUmVkZHksIGV0IGFsLiAgICAgICAg ICAgRXhwaXJlcyBPY3RvYmVyIDE1LCAyMDE1ICAgICAgICAgICAgICAgW1BhZ2UgMTddXG5fXG5J bnRlcm5ldC1EcmFmdCAgICAgIFNUVU4gZm9yIDNyZCBwYXJ0eSBBdXRob3JpemF0aW9uICAgICAg ICAgIEFwcmlsIDIwMTVcblxuXG4gICBbSS1ELmlldGYtb2F1dGgtcG9wLWFyY2hpdGVjdHVyZV1c biAgICAgICAgICAgICAgSHVudCwgUC4sIFJpY2hlciwgSi4sIE1pbGxzLCBXLiwgTWlzaHJhLCBQ LiwgYW5kIEguXG4gICAgICAgICAgICAgIFRzY2hvZmVuaWcsICJPQXV0aCAyLjAgUHJvb2Ytb2Yt UG9zc2Vzc2lvbiAoUG9QKSBTZWN1cml0eVxuICAgICAgICAgICAgICBBcmNoaXRlY3R1cmUiLCBk cmFmdC1pZXRmLW9hdXRoLXBvcC1hcmNoaXRlY3R1cmUtMDEgKHdvcmtcbiAgICAgICAgICAgICAg aW4gcHJvZ3Jlc3MpLCBNYXJjaCAyMDE1LlxuXG4gICBbSS1ELmlldGYtb2F1dGgtcG9wLWtleS1k aXN0cmlidXRpb25dXG4gICAgICAgICAgICAgIEJyYWRsZXksIEouLCBIdW50LCBQLiwgSm9uZXMs IE0uLCBhbmQgSC4gVHNjaG9mZW5pZyxcbiAgICAgICAgICAgICAgIk9BdXRoIDIuMCBQcm9vZi1v Zi1Qb3NzZXNzaW9uOiBBdXRob3JpemF0aW9uIFNlcnZlciB0b1xuICAgICAgICAgICAgICBDbGll bnQgS2V5IERpc3RyaWJ1dGlvbiIsIGRyYWZ0LWlldGYtb2F1dGgtcG9wLWtleS1cbiAgICAgICAg ICAgICAgZGlzdHJpYnV0aW9uLTAxICh3b3JrIGluIHByb2dyZXNzKSwgTWFyY2ggMjAxNS5cblxu ICAgW0ktRC5pZXRmLXJ0Y3dlYi1vdmVydmlld11cbiAgICAgICAgICAgICAgQWx2ZXN0cmFuZCwg SC4sICJPdmVydmlldzogUmVhbCBUaW1lIFByb3RvY29scyBmb3JcbiAgICAgICAgICAgICAgQnJv d3Nlci1iYXNlZCBBcHBsaWNhdGlvbnMiLCBkcmFmdC1pZXRmLXJ0Y3dlYi1vdmVydmlldy0xM1xu ICAgICAgICAgICAgICAod29yayBpbiBwcm9ncmVzcyksIE5vdmVtYmVyIDIwMTQuXG5cbiAgIFtJ LUQuaWV0Zi10cmFtLXN0dW5iaXNdXG4gICAgICAgICAgICAgIFBldGl0LUh1Z3VlbmluLCBNLiwg U2FsZ3VlaXJvLCBHLiwgUm9zZW5iZXJnLCBKLiwgV2luZyxcbiAgICAgICAgICAgICAgRC4sIE1h aHksIFIuLCBhbmQgUC4gTWF0dGhld3MsICJTZXNzaW9uIFRyYXZlcnNhbFxuICAgICAgICAgICAg ICBVdGlsaXRpZXMgZm9yIE5BVCAoU1RVTikiLCBkcmFmdC1pZXRmLXRyYW0tc3R1bmJpcy0wNFxu ICAgICAgICAgICAgICAod29yayBpbiBwcm9ncmVzcyksIE1hcmNoIDIwMTUuXG5cbiAgIFtJLUQu aWV0Zi11dGEtdGxzLWJjcF1cbiAgICAgICAgICAgICAgU2hlZmZlciwgWS4sIEhvbHosIFIuLCBh bmQgUC4gU2FpbnQtQW5kcmUsXG4gICAgICAgICAgICAgICJSZWNvbW1lbmRhdGlvbnMgZm9yIFNl Y3VyZSBVc2Ugb2YgVExTIGFuZCBEVExTIiwgZHJhZnQtXG4gICAgICAgICAgICAgIGlldGYtdXRh LXRscy1iY3AtMTEgKHdvcmsgaW4gcHJvZ3Jlc3MpLCBGZWJydWFyeSAyMDE1LlxuXG4gICBbSS1E Lm1jZ3Jldy1hZWFkLWFlcy1jYmMtaG1hYy1zaGEyXVxuICAgICAgICAgICAgICBNY0dyZXcsIEQu LCBGb2xleSwgSi4sIGFuZCBLLiBQYXRlcnNvbiwgIkF1dGhlbnRpY2F0ZWRcbiAgICAgICAgICAg ICAgRW5jcnlwdGlvbiB3aXRoIEFFUy1DQkMgYW5kIEhNQUMtU0hBIiwgZHJhZnQtbWNncmV3LWFl YWQtXG4gICAgICAgICAgICAgIGFlcy1jYmMtaG1hYy1zaGEyLTA1ICh3b3JrIGluIHByb2dyZXNz KSwgSnVseSAyMDE0LlxuXG4gICBbUkZDNTI0Nl0gIERpZXJrcywgVC4gYW5kIEUuIFJlc2Nvcmxh LCAiVGhlIFRyYW5zcG9ydCBMYXllciBTZWN1cml0eVxuICAgICAgICAgICAgICAoVExTKSBQcm90 b2NvbCBWZXJzaW9uIDEuMiIsIFJGQyA1MjQ2LCBBdWd1c3QgMjAwOC5cblxuICAgW1JGQzU3NjZd ICBNYWh5LCBSLiwgTWF0dGhld3MsIFAuLCBhbmQgSi4gUm9zZW5iZXJnLCAiVHJhdmVyc2FsIFVz aW5nXG4gICAgICAgICAgICAgIFJlbGF5cyBhcm91bmQgTkFUIChUVVJOKTogUmVsYXkgRXh0ZW5z aW9ucyB0byBTZXNzaW9uXG4gICAgICAgICAgICAgIFRyYXZlcnNhbCBVdGlsaXRpZXMgZm9yIE5B VCAoU1RVTikiLCBSRkMgNTc2NiwgQXByaWwgMjAxMC5cblxuICAgW1JGQzYzNDddICBSZXNjb3Js YSwgRS4gYW5kIE4uIE1vZGFkdWd1LCAiRGF0YWdyYW0gVHJhbnNwb3J0IExheWVyXG4gICAgICAg ICAgICAgIFNlY3VyaXR5IFZlcnNpb24gMS4yIiwgUkZDIDYzNDcsIEphbnVhcnkgMjAxMi5cblxu ICAgW1JGQzY4MTldICBMb2RkZXJzdGVkdCwgVC4sIE1jR2xvaW4sIE0uLCBhbmQgUC4gSHVudCwg Ik9BdXRoIDIuMFxuICAgICAgICAgICAgICBUaHJlYXQgTW9kZWwgYW5kIFNlY3VyaXR5IENvbnNp ZGVyYXRpb25zIiwgUkZDIDY4MTksXG4gICAgICAgICAgICAgIEphbnVhcnkgMjAxMy5cblxuXG5c blxuXG5SZWRkeSwgZXQgYWwuICAgICAgICAgICBFeHBpcmVzIE9jdG9iZXIgMTUsIDIwMTUgICAg ICAgICAgICAgICBbUGFnZSAxOF1cbl9cbkludGVybmV0LURyYWZ0ICAgICAgU1RVTiBmb3IgM3Jk IHBhcnR5IEF1dGhvcml6YXRpb24gICAgICAgICAgQXByaWwgMjAxNVxuXG5cbiAgIFtSRkM3MTU5 XSAgQnJheSwgVC4sICJUaGUgSmF2YVNjcmlwdCBPYmplY3QgTm90YXRpb24gKEpTT04pIERhdGFc biAgICAgICAgICAgICAgSW50ZXJjaGFuZ2UgRm9ybWF0IiwgUkZDIDcxNTksIE1hcmNoIDIwMTQu XG5cbiAgIFtSRkM3MzUwXSAgUGV0aXQtSHVndWVuaW4sIE0uIGFuZCBHLiBTYWxndWVpcm8sICJE YXRhZ3JhbSBUcmFuc3BvcnRcbiAgICAgICAgICAgICAgTGF5ZXIgU2VjdXJpdHkgKERUTFMpIGFz IFRyYW5zcG9ydCBmb3IgU2Vzc2lvbiBUcmF2ZXJzYWxcbiAgICAgICAgICAgICAgVXRpbGl0aWVz IGZvciBOQVQgKFNUVU4pIiwgUkZDIDczNTAsIEF1Z3VzdCAyMDE0LlxuXG4gICBbUkZDNzM3Nl0g IFJlZGR5LCBULiwgUmF2aW5kcmFuYXRoLCBSLiwgUGVydW1hbCwgTS4sIGFuZCBBLiBZZWdpbixc biAgICAgICAgICAgICAgIlByb2JsZW1zIHdpdGggU2Vzc2lvbiBUcmF2ZXJzYWwgVXRpbGl0aWVz IGZvciBOQVQgKFNUVU4pXG4gICAgICAgICAgICAgIExvbmctVGVybSBBdXRoZW50aWNhdGlvbiBm b3IgVHJhdmVyc2FsIFVzaW5nIFJlbGF5cyBhcm91bmRcbiAgICAgICAgICAgICAgTkFUIChUVVJO KSIsIFJGQyA3Mzc2LCBTZXB0ZW1iZXIgMjAxNC5cblxuQXBwZW5kaXggQS4gIFNhbXBsZSB0aWNr ZXRzXG5cbiAgIElucHV0IGRhdGEgKHNhbWUgZm9yIGFsbCBzYW1wbGVzIGJlbG93KTpcblxuICAg Ly9TVFVOIFNFUlZFUiBOQU1FXG4gICBzZXJ2ZXJfbmFtZSA9ICJibGFja2Rvdy5jYXJsZW9uLmdv diI7XG5cbiAgIC8vU2hhcmVkIGtleSBiZXR3ZWVuIEFTIGFuZCBSU1xuXG4gICBsb25nX3Rlcm1f a2V5ID0gXFx4NDhcXHg0N1xceDZiXFx4NmFcXHgzM1xceDMyXFx4NGJcXHg0YVxceDQ3XFx4Njlc XHg3NVxceDc5XG4gICAgICAgICAgICAgICAgICAgXFx4MzBcXHgzOVxceDM4XFx4NzNcXHg2NFxc eDY2XFx4NjFcXHg3MVxceDYyXFx4NGVcXHg2YVxceDRmXG4gICAgICAgICAgICAgICAgICAgXFx4 NjlcXHg2MVxceDdhXFx4MzdcXHgzMVxceDM5XFx4MzJcXHgzM1xuXG4gICAvL01BQyBrZXkgb2Yg dGhlIHNlc3Npb24gKGluY2x1ZGVkIGluIHRoZSB0b2tlbilcbiAgIG1hY19rZXkgPSBcXHg1YVxc eDZiXFx4NzNcXHg2YVxceDcwXFx4NzdcXHg2NVxceDZmXFx4NjlcXHg3OFxceDU4XFx4NmRcXHg3 NlxceDZlXG4gICAgICAgICAgICAgXFx4MzZcXHgzN1xceDM1XFx4MzNcXHgzNFxceDZkO1xuXG4g ICAvL2xlbmd0aCBvZiB0aGUgTUFDIGtleVxuICAgbWFjX2tleV9sZW5ndGggID0gIDIwO1xuXG4g ICAvL1RoZSB0aW1lc3RhbXAgZmllbGQgaW4gdGhlIHRva2VuXG4gICB0b2tlbl90aW1lc3RhbXAg PSA5MjQ3MDMwMDcwNDc2ODtcblxuICAgLy9UaGUgbGlmZXRpbWUgb2YgdGhlIHRva2VuXG4gICB0 b2tlbl9saWZldGltZSA9IDM2MDA7XG5cbiAgIC8vbm9uY2UgZm9yIEFFQUQgd2hlbiBBRUFEIGlz IHVzZWRcbiAgIGFlYWRfbm9uY2UgPSBcXHg2OFxceDM0XFx4NmFcXHgzM1xceDZiXFx4MzJcXHg2 Y1xceDMyXFx4NmVcXHgzNFxceDYyXFx4MzU7XG5cbiAgIFNhbXBsZTpcblxuICAgMSlcblxuICAg ICB0b2tlbiBlbmNyeXB0aW9uIGFsZ29yaXRobSA9IEFFQURfQUVTXzI1Nl9HQ01cbiAgICAgdG9r ZW4gYXV0aCBhbGdvcml0aG0gPSBOL0FcblxuXG5cblxuUmVkZHksIGV0IGFsLiAgICAgICAgICAg RXhwaXJlcyBPY3RvYmVyIDE1LCAyMDE1ICAgICAgICAgICAgICAgW1BhZ2UgMTldXG5fXG5JbnRl cm5ldC1EcmFmdCAgICAgIFNUVU4gZm9yIDNyZCBwYXJ0eSBBdXRob3JpemF0aW9uICAgICAgICAg IEFwcmlsIDIwMTVcblxuXG4gICAgIFJlc3VsdDpcbiAgICAgQVNfUlMga2V5ICgzMiBieXRlcykg PVxuICAgICBcXHg0OFxceDQ3XFx4NmJcXHg2YVxceDMzXFx4MzJcXHg0YlxceDRhXFx4NDdcXHg2 OVxceDc1XFx4NzlcbiAgICAgXFx4MzBcXHgzOVxceDM4XFx4NzNcXHg2NFxceDY2XFx4NjFcXHg3 MVxceDYyXFx4NGVcXHg2YVxceDRmXG4gICAgIFxceDY5XFx4NjFcXHg3YVxceDM3XFx4MzFcXHgz OVxceDMyXFx4MzNcblxuICAgICBBVVRIIGtleSA9IE4vQVxuXG4gICAgIEVuY3J5cHRlZCB0b2tl biAoNjIgYnl0ZXMgPSAzNCArIDE2ICsgMTIpID1cblxuICAgIFxceGQ0XFx4ODZcXHg1Y1xceDVk XFx4NTlcXHhmYlxceDNmXFx4ZTNcXHhmNlxceGYxXFx4ZDhcXHhjM1xceDIyXFx4YzJcXHgyMlxc eDI2XFx4OGRcbiAgICBcXHgyZVxceGYwXFx4YmVcXHgyXFx4NWJcXHhiZFxceDEzXFx4NDlcXHg4 OVxceDZlXFx4YTVcXHhjNVxceDUxXFx4ZWVcXHhlZVxceDdmXFx4ZDlcbiAgICBcXHhlNFxceDQx XFx4ZDdcXHhjYlxceDUxXFx4MjBcXHg0MFxceGNjXFx4YzVcXHg1M1xceDkwXFx4MmZcXHhkY1xc eGJiXFx4OGRcXHg1M1xceDY4XG4gICAgXFx4MzRcXHg2YVxceDMzXFx4NmJcXHgzMlxceDZjXFx4 MzJcXHg2ZVxceDM0XFx4NjJcXHgzNVxuXG5cblxuICAgICAgICAgICAgICAgICAgICAgICAgIEZp Z3VyZSA1OiBTYW1wbGUgdGlja2V0c1xuXG5BcHBlbmRpeCBCLiAgSW50ZXJhY3Rpb24gYmV0d2Vl biBjbGllbnQgYW5kIGF1dGhvcml6YXRpb24gc2VydmVyXG5cbiAgIENsaWVudCBtYWtlcyBhbiBI VFRQIHJlcXVlc3QgdG8gYW4gYXV0aG9yaXphdGlvbiBzZXJ2ZXIgdG8gb2J0YWluIGFcbiAgIHRv a2VuIHRoYXQgY2FuIGJlIHVzZWQgdG8gYXZhaWwgaXRzZWxmIG9mIFNUVU4gc2VydmljZXMuICBU aGUgU1RVTlxuICAgdG9rZW4gaXMgcmV0dXJuZWQgaW4gSlNPTiBzeW50YXggW1JGQzcxNTldLCBh bG9uZyB3aXRoIG90aGVyIE9BdXRoXG4gICAyLjAgcGFyYW1ldGVycyBsaWtlIHRva2VuIHR5cGUs IGtleSwgdG9rZW4gbGlmZXRpbWUgYW5kIGtpZCBkZWZpbmVkXG4gICBpbiBbSS1ELmlldGYtb2F1 dGgtcG9wLWtleS1kaXN0cmlidXRpb25dLlxuXG5cblxuXG5cblxuXG5cblxuXG5cblxuXG5cblxu XG5cblxuXG5cblxuXG5cblxuXG5SZWRkeSwgZXQgYWwuICAgICAgICAgICBFeHBpcmVzIE9jdG9i ZXIgMTUsIDIwMTUgICAgICAgICAgICAgICBbUGFnZSAyMF1cbl9cbkludGVybmV0LURyYWZ0ICAg ICAgU1RVTiBmb3IgM3JkIHBhcnR5IEF1dGhvcml6YXRpb24gICAgICAgICAgQXByaWwgMjAxNVxu XG5cbiAgICstLS0tLS0tLS0tLS0tLS0tLS0tKyAgICAgICAgICAgICAgICAgICAgICAgICArLS0t LS0tLS0rICArLS0tLS0tLS0tK1xuICAgXyAuLi4uLi4uLi4gIFNUVU4gICBfICAgICAgICAgICAg ICAgICAgICAgICAgIF8gIFNUVU4gIF8gIF8gIFdlYlJUQyBfXG4gICBfIC5XZWJSVEMgLiAgQ2xp ZW50IF8gICAgICAgICAgICAgICAgICAgICAgICAgXyAgICAgICAgXyAgXyAgICAgICAgIF9cbiAg IF8gLkNsaWVudCAuICAgICAgICAgXyAgICAgICAgICAgICAgICAgICAgICAgICBfIFNlcnZlciBf ICBfICBTZXJ2ZXIgX1xuICAgXyAuLi4uLi4uLi4gICAgICAgICBfICAgICAgICAgICAgICAgICAg ICAgICAgIF8gICAgICAgIF8gIF8gICAgICAgICBfXG4gICArLS0tLS0tLS0tLS0tLS0tLS0tLSsg ICAgICAgICAgICAgICAgICAgICAgICAgKy0tLS0tLS0tKyAgKy0tLS0tLS0tLStcbiAgICAgXyAg ICAgICBfICAgICAgICAgICBTVFVOIHJlcXVlc3QgICAgICAgICAgICAgICAgICAgIF8gICAgICAg ICBfXG4gICAgIF8gICAgICAgXy0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLV9fICAgICAgICAgX1xuICAgICBfICAgICAgIF8gICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgXyAgICAgICAgIF9cbiAgICAgXyAgICAgICBfICAgICAgICAgU1RV TiBlcnJvciByZXNwb25zZSAgICAgICAgICAgICAgIF8gICAgICAgICBfXG4gICAgIF8gICAgICAg XyAgICAgICAgICg0MDEgVW5hdXRob3JpemVkKSAgICAgICAgICAgICAgICBfICAgICAgICAgX1xu ICAgICBfICAgICAgIF9fLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t XyAgICAgICAgIF9cbiAgICAgXyAgICAgICBfICAgICAgICAgVEhJUkQtUEFSVFktQVVUSE9SSVpB VElPTiAgICAgICAgIF8gICAgICAgICBfXG4gICAgIF8gICAgICAgXyAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICBfICAgICAgICAgX1xuICAgICBfICAgICAgIF8gICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgXyAgICAgICAgIF9cbiAgICAg XyAgICAgICBfICAgICAgSFRUUCBSZXF1ZXN0IGZvciB0b2tlbiAgICAgICAgICAgICAgIF8gICAg ICAgICBfXG4gICAgIF8tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS1fX1xuICAgICBfICAgICAgIF8gICAgICBIVFRQIFJlc3BvbnNlIHdp dGggdG9rZW4gcGFyYW1ldGVycyAgXyAgICAgICAgIF9cbiAgICAgX18tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS1fXG4gICAgIF9PQXV0 aCAyLjAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICBfICAgICAgICAg X1xuICAgICAgQXR0cmlidXRlcyAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgXyAgICAgICAgIF9cbiAgICAgXy0tLS0tLV9fICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgIF8gICAgICAgICBfXG4gICAgIF8gICAgICAgXyAgICBTVFVOIHJlcXVl c3Qgd2l0aCBBQ0NFU1MtVE9LRU4gICAgICAgICBfICAgICAgICAgX1xuICAgICBfICAgICAgIF8t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS1fXyAgICAgICAgIF9cbiAg ICAgXyAgICAgICBfICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIF8g ICAgICAgICBfXG4gICAgIF8gICAgICAgXyAgICAgICAgIFNUVU4gc3VjY2VzcyByZXNwb25zZSAg ICAgICAgICAgICBfICAgICAgICAgX1xuICAgICBfICAgICAgIF9fLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tXyAgICAgICAgIF9cbiAgICAgXyAgICAgICBfICAgICAg ICAgICAgIFNUVU4gTWVzc2FnZXMgICAgICAgICAgICAgICAgIF8gICAgICAgICBfXG4gICAgIF8g ICAgICAgXyAgICAgIC8vLy8vLyBpbnRlZ3JpdHkgcHJvdGVjdGVkIC8vLy8vLyAgICBfICAgICAg ICAgX1xuICAgICBfICAgICAgIF8gICAgICAvLy8vLy8gaW50ZWdyaXR5IHByb3RlY3RlZCAvLy8v Ly8gICAgXyAgICAgICAgIF9cbiAgICAgXyAgICAgICBfICAgICAgLy8vLy8vIGludGVncml0eSBw cm90ZWN0ZWQgLy8vLy8vICAgIF8gICAgICAgICBfXG5cbiAgICAgICAgICAgICAgICAgRmlndXJl IDY6IFNUVU4gVGhpcmQgUGFydHkgQXV0aG9yaXphdGlvblxuXG4gICBbSS1ELmlldGYtb2F1dGgt cG9wLWtleS1kaXN0cmlidXRpb25dIGRlc2NyaWJlcyB0aGUgaW50ZXJhY3Rpb25cbiAgIGJldHdl ZW4gdGhlIGNsaWVudCBhbmQgdGhlIGF1dGhvcml6YXRpb24gc2VydmVyLiAgRm9yIGV4YW1wbGUs IHRoZVxuICAgY2xpZW50IGxlYXJucyB0aGUgU1RVTiBzZXJ2ZXIgbmFtZSAic3R1bjFAZXhhbXBs ZS5jb20iIGZyb20gVEhJUkQtXG4gICBQQVJUWS1BVVRIT1JJWkFUSU9OIGF0dHJpYnV0ZSB2YWx1 ZSBhbmQgbWFrZXMgdGhlIGZvbGxvd2luZyBIVFRQXG4gICByZXF1ZXN0IGZvciB0aGUgYWNjZXNz IHRva2VuIHVzaW5nIHRyYW5zcG9ydC1sYXllciBzZWN1cml0eSAod2l0aFxuICAgZXh0cmEgbGlu ZSBicmVha3MgZm9yIGRpc3BsYXkgcHVycG9zZXMgb25seSk6XG5cblxuXG5cblxuXG5cblxuXG5c blxuUmVkZHksIGV0IGFsLiAgICAgICAgICAgRXhwaXJlcyBPY3RvYmVyIDE1LCAyMDE1ICAgICAg ICAgICAgICAgW1BhZ2UgMjFdXG5fXG5JbnRlcm5ldC1EcmFmdCAgICAgIFNUVU4gZm9yIDNyZCBw YXJ0eSBBdXRob3JpemF0aW9uICAgICAgICAgIEFwcmlsIDIwMTVcblxuXG4gICAgICAgIEhUVFAv MS4xXG4gICAgICAgIEhvc3Q6IHNlcnZlci5leGFtcGxlLmNvbVxuICAgICAgICBDb250ZW50LVR5 cGU6IGFwcGxpY2F0aW9uL3gtd3d3LWZvcm0tdXJsZW5jb2RlZFxuICAgICAgICBhdWQ9c3R1bjFA ZXhhbXBsZS5jb21cbiAgICAgICAgdGltZXN0YW1wPTEzNjE0NzE2MjlcbiAgICAgICAgZ3JhbnRf dHlwZT1pbXBsaWNpdFxuICAgICAgICB0b2tlbl90eXBlPXBvcFxuICAgICAgICBhbGc9SE1BQy1T SEEtMSBITUFDLVNIQS0yNTYtMTI4XG5cbiAgICAgICAgICAgICAgICAgICAgICAgICAgICAgRmln dXJlIDc6IFJlcXVlc3RcblxuICAgW0ktRC5pZXRmLXRyYW0tc3R1bmJpc10gd2lsbCBzdXBwb3J0 IGhhc2ggYWdpbGl0eSBhbmQgYWNjb21wbGlzaCB0aGlzXG4gICBhZ2lsaXR5IGJ5IGNvbnZleWlu ZyB0aGUgSE1BQyBhbGdvcml0aG1zIHN1cHBvcnRlZCBieSB0aGUgU1RVTiBzZXJ2ZXJcbiAgIGFs b25nIHdpdGggYSBTVFVOIGVycm9yIG1lc3NhZ2UgdG8gdGhlIGNsaWVudC4gIFRoZSBjbGllbnQg dGhlblxuICAgc2lnbmFscyB0aGUgaW50ZXJzZWN0aW9uLXNldCBvZiBhbGdvcml0aG1zIHN1cHBv cnRlZCBieSBpdCBhbmQgdGhlXG4gICBTVFVOIHNlcnZlciB0byB0aGUgYXV0aG9yaXphdGlvbiBz ZXJ2ZXIgaW4gdGhlIFwnYWxnXCcgcGFyYW1ldGVyXG4gICBkZWZpbmVkIGluIFtJLUQuaWV0Zi1v YXV0aC1wb3Ata2V5LWRpc3RyaWJ1dGlvbl0uICBUaGUgYXV0aG9yaXphdGlvblxuICAgc2VydmVy IHNlbGVjdHMgYW4gSE1BQyBhbGdvcml0aG0gZnJvbSB0aGUgbGlzdCBvZiBhbGdvcml0aG1zIHRo ZVxuICAgY2xpZW50IHByb3ZpZGVkIGFuZCBkZXRlcm1pbmVzIGxlbmd0aCBvZiB0aGUgbWFjX2tl eSBiYXNlZCBvbiB0aGVcbiAgIHNlbGVjdGVkIEhNQUMgYWxnb3JpdGhtLiAgTm90ZSB0aGF0IHVu dGlsIFNUVU4gc3VwcG9ydHMgaGFzaCBhZ2lsaXR5XG4gICBITUFDLVNIQTEgaXMgdGhlIG9ubHkg dmFsaWQgaGFzaCBhbGdvcml0aG0gdGhhdCB0aGUgY2xpZW50IGNhbiBzaWduYWxcbiAgIHRvIHRo ZSBhdXRob3JpemF0aW9uIHNlcnZlciBhbmQgdmljZS12ZXJzYS5cblxuICAgSWYgdGhlIGNsaWVu dCBpcyBhdXRob3JpemVkIHRoZW4gdGhlIGF1dGhvcml6YXRpb24gc2VydmVyIGlzc3VlcyBhblxu ICAgYWNjZXNzIHRva2VuLiAgQW4gZXhhbXBsZSBvZiBzdWNjZXNzZnVsIHJlc3BvbnNlOlxuXG4g ICAgICAgIEhUVFAvMS4xIDIwMCBPS1xuICAgICAgICBDb250ZW50LVR5cGU6IGFwcGxpY2F0aW9u L2pzb25cbiAgICAgICAgQ2FjaGUtQ29udHJvbDogbm8tc3RvcmVcblxuICAgICAgICB7XG4gICAg ICAgICAgImFjY2Vzc190b2tlbiI6XG4gICAiVTJGc2RHVmtYMThxSksva2tXbVJjbmZIZ2xyVlRK U3BTNnlVMzJrbUhtT3JmR3lJM20xZ1FqMWpSUHNyMHVCYlxuICAgSGN0dXljQWdzZlJYN25KVzJC ZHVrR3lLTVhTaU5HTm5Cemlna0FvZlA2K1ozdmtKMVE1cFdiZlNScm9Pa1dCbiIsXG4gICAgICAg ICAgInRva2VuX3R5cGUiOiJwb3AiLFxuICAgICAgICAgICJleHBpcmVzX2luIjoxODAwLFxuICAg ICAgICAgICJraWQiOiIyMkJJanhVOTNoL0lnd0ViIixcbiAgICAgICAgICAia2V5IjoidjUxTjYy T002NWt5TXZmVEkwOE8iXG4gICAgICAgICAgImFsZyI6SE1BQy1TSEEtMjU2LTEyOFxuICAgICAg ICB9XG5cbiAgICAgICAgICAgICAgICAgICAgICAgICAgICBGaWd1cmUgODogUmVzcG9uc2Vcblxu QXV0aG9yc1wnIEFkZHJlc3Nlc1xuXG5cblxuXG5cblxuXG5SZWRkeSwgZXQgYWwuICAgICAgICAg ICBFeHBpcmVzIE9jdG9iZXIgMTUsIDIwMTUgICAgICAgICAgICAgICBbUGFnZSAyMl1cbl9cbklu dGVybmV0LURyYWZ0ICAgICAgU1RVTiBmb3IgM3JkIHBhcnR5IEF1dGhvcml6YXRpb24gICAgICAg ICAgQXByaWwgMjAxNVxuXG5cbiAgIFRpcnVtYWxlc3dhciBSZWRkeVxuICAgQ2lzY28gU3lzdGVt cywgSW5jLlxuICAgQ2Vzc25hIEJ1c2luZXNzIFBhcmssIFZhcnRodXIgSG9ibGlcbiAgIFNhcmph cHVyIE1hcmF0aGFsbGkgT3V0ZXIgUmluZyBSb2FkXG4gICBCYW5nYWxvcmUsIEthcm5hdGFrYSAg NTYwMTAzXG4gICBJbmRpYVxuXG4gICBFbWFpbDogdGlyZWRkeUBjaXNjby5jb21cblxuXG4gICBQ cmFzaGFudGggUGF0aWxcbiAgIENpc2NvIFN5c3RlbXMsIEluYy5cbiAgIEJhbmdhbG9yZVxuICAg SW5kaWFcblxuICAgRW1haWw6IHByYXNwYXRpQGNpc2NvLmNvbVxuXG5cbiAgIFJhbSBNb2hhbiBS YXZpbmRyYW5hdGhcbiAgIENpc2NvIFN5c3RlbXMsIEluYy5cbiAgIENlc3NuYSBCdXNpbmVzcyBQ YXJrLFxuICAgS2FkYWJlZXNhbmFoYWxsaSBWaWxsYWdlLCBWYXJ0aHVyIEhvYmxpLFxuICAgU2Fy amFwdXItTWFyYXRoYWhhbGxpIE91dGVyIFJpbmcgUm9hZFxuICAgQmFuZ2Fsb3JlLCBLYXJuYXRh a2EgIDU2MDEwM1xuICAgSW5kaWFcblxuICAgRW1haWw6IHJtb2hhbnJAY2lzY28uY29tXG5cblxu ICAgSnVzdGluIFViZXJ0aVxuICAgR29vZ2xlXG4gICA3NDcgNnRoIEF2ZSBTXG4gICBLaXJrbGFu ZCwgV0FcbiAgIDk4MDMzXG4gICBVU0FcblxuICAgRW1haWw6IGp1c3RpbkB1YmVydGkubmFtZVxu XG5cblxuXG5cblxuXG5cblxuXG5cblxuXG5cblJlZGR5LCBldCBhbC4gICAgICAgICAgIEV4cGly ZXMgT2N0b2JlciAxNSwgMjAxNSAgICAgICAgICAgICAgIFtQYWdlIDIzXVxuJywgJ2ZpbGVuYW1l MSc6ICcnLCAndXJsMSc6ICdodHRwczovL3Rvb2xzLmlldGYub3JnL2lkL2RyYWZ0LWlldGYtdHJh bS10dXJuLXRoaXJkLXBhcnR5LWF1dGh6LTEzLnR4dCcsICdzdWJtaXQnOiAnR2VuZXJhdGUgZGlm ZicsICd1cmwyJzogJycsICctLW5ld2NvbG91cic6ICdncmVlbid9IC0tPjwvYm9keT48L2h0bWw+ --_003_913383AAA69FF945B8F946018B75898A4120D5EBxmbrcdx10ciscoc_ Content-Type: text/plain; name="draft-ietf-tram-turn-third-party-authz-14.txt" Content-Description: draft-ietf-tram-turn-third-party-authz-14.txt Content-Disposition: attachment; filename="draft-ietf-tram-turn-third-party-authz-14.txt"; size=49455; creation-date="Tue, 14 Apr 2015 05:33:17 GMT"; modification-date="Tue, 14 Apr 2015 05:33:19 GMT" Content-Transfer-Encoding: base64 CgoKClRSQU0gICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICBULiBSZWRkeQpJbnRlcm5ldC1EcmFmdCAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgUC4gUGF0aWwKSW50ZW5kZWQgc3RhdHVzOiBTdGFu ZGFyZHMgVHJhY2sgICAgICAgICAgICAgICAgICAgICAgICAgUi4gUmF2aW5kcmFuYXRoCkV4cGly ZXM6IE9jdG9iZXIgMTUsIDIwMTUgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICBDaXNjbwogICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICBKLiBVYmVydGkKICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgR29vZ2xlCiAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICBBcHJpbCAxMywgMjAx NQoKCiAgU2Vzc2lvbiBUcmF2ZXJzYWwgVXRpbGl0aWVzIGZvciBOQVQgKFNUVU4pIEV4dGVuc2lv biBmb3IgVGhpcmQgUGFydHkKICAgICAgICAgICAgICAgICAgICAgICAgICAgICBBdXRob3JpemF0 aW9uCiAgICAgICAgICAgICAgIGRyYWZ0LWlldGYtdHJhbS10dXJuLXRoaXJkLXBhcnR5LWF1dGh6 LTE0CgpBYnN0cmFjdAoKICAgVGhpcyBkb2N1bWVudCBwcm9wb3NlcyB0aGUgdXNlIG9mIE9BdXRo IDIuMCB0byBvYnRhaW4gYW5kIHZhbGlkYXRlCiAgIGVwaGVtZXJhbCB0b2tlbnMgdGhhdCBjYW4g YmUgdXNlZCBmb3IgU2Vzc2lvbiBUcmF2ZXJzYWwgVXRpbGl0aWVzIGZvcgogICBOQVQgKFNUVU4p IGF1dGhlbnRpY2F0aW9uLiAgVGhlIHVzYWdlIG9mIGVwaGVtZXJhbCB0b2tlbnMgZW5zdXJlcwog ICB0aGF0IGFjY2VzcyB0byBhIFNUVU4gc2VydmVyIGNhbiBiZSBjb250cm9sbGVkIGV2ZW4gaWYg dGhlIHRva2VucyBhcmUKICAgY29tcHJvbWlzZWQuCgpTdGF0dXMgb2YgVGhpcyBNZW1vCgogICBU aGlzIEludGVybmV0LURyYWZ0IGlzIHN1Ym1pdHRlZCBpbiBmdWxsIGNvbmZvcm1hbmNlIHdpdGgg dGhlCiAgIHByb3Zpc2lvbnMgb2YgQkNQIDc4IGFuZCBCQ1AgNzkuCgogICBJbnRlcm5ldC1EcmFm dHMgYXJlIHdvcmtpbmcgZG9jdW1lbnRzIG9mIHRoZSBJbnRlcm5ldCBFbmdpbmVlcmluZwogICBU YXNrIEZvcmNlIChJRVRGKS4gIE5vdGUgdGhhdCBvdGhlciBncm91cHMgbWF5IGFsc28gZGlzdHJp YnV0ZQogICB3b3JraW5nIGRvY3VtZW50cyBhcyBJbnRlcm5ldC1EcmFmdHMuICBUaGUgbGlzdCBv ZiBjdXJyZW50IEludGVybmV0LQogICBEcmFmdHMgaXMgYXQgaHR0cDovL2RhdGF0cmFja2VyLmll dGYub3JnL2RyYWZ0cy9jdXJyZW50Ly4KCiAgIEludGVybmV0LURyYWZ0cyBhcmUgZHJhZnQgZG9j dW1lbnRzIHZhbGlkIGZvciBhIG1heGltdW0gb2Ygc2l4IG1vbnRocwogICBhbmQgbWF5IGJlIHVw ZGF0ZWQsIHJlcGxhY2VkLCBvciBvYnNvbGV0ZWQgYnkgb3RoZXIgZG9jdW1lbnRzIGF0IGFueQog ICB0aW1lLiAgSXQgaXMgaW5hcHByb3ByaWF0ZSB0byB1c2UgSW50ZXJuZXQtRHJhZnRzIGFzIHJl ZmVyZW5jZQogICBtYXRlcmlhbCBvciB0byBjaXRlIHRoZW0gb3RoZXIgdGhhbiBhcyAid29yayBp biBwcm9ncmVzcy4iCgogICBUaGlzIEludGVybmV0LURyYWZ0IHdpbGwgZXhwaXJlIG9uIE9jdG9i ZXIgMTUsIDIwMTUuCgpDb3B5cmlnaHQgTm90aWNlCgogICBDb3B5cmlnaHQgKGMpIDIwMTUgSUVU RiBUcnVzdCBhbmQgdGhlIHBlcnNvbnMgaWRlbnRpZmllZCBhcyB0aGUKICAgZG9jdW1lbnQgYXV0 aG9ycy4gIEFsbCByaWdodHMgcmVzZXJ2ZWQuCgogICBUaGlzIGRvY3VtZW50IGlzIHN1YmplY3Qg dG8gQkNQIDc4IGFuZCB0aGUgSUVURiBUcnVzdCdzIExlZ2FsCiAgIFByb3Zpc2lvbnMgUmVsYXRp bmcgdG8gSUVURiBEb2N1bWVudHMKICAgKGh0dHA6Ly90cnVzdGVlLmlldGYub3JnL2xpY2Vuc2Ut aW5mbykgaW4gZWZmZWN0IG9uIHRoZSBkYXRlIG9mCiAgIHB1YmxpY2F0aW9uIG9mIHRoaXMgZG9j dW1lbnQuICBQbGVhc2UgcmV2aWV3IHRoZXNlIGRvY3VtZW50cwogICBjYXJlZnVsbHksIGFzIHRo ZXkgZGVzY3JpYmUgeW91ciByaWdodHMgYW5kIHJlc3RyaWN0aW9ucyB3aXRoIHJlc3BlY3QKCgoK UmVkZHksIGV0IGFsLiAgICAgICAgICAgRXhwaXJlcyBPY3RvYmVyIDE1LCAyMDE1ICAgICAgICAg ICAgICAgIFtQYWdlIDFdCgwKSW50ZXJuZXQtRHJhZnQgICAgICBTVFVOIGZvciAzcmQgcGFydHkg QXV0aG9yaXphdGlvbiAgICAgICAgICBBcHJpbCAyMDE1CgoKICAgdG8gdGhpcyBkb2N1bWVudC4g IENvZGUgQ29tcG9uZW50cyBleHRyYWN0ZWQgZnJvbSB0aGlzIGRvY3VtZW50IG11c3QKICAgaW5j bHVkZSBTaW1wbGlmaWVkIEJTRCBMaWNlbnNlIHRleHQgYXMgZGVzY3JpYmVkIGluIFNlY3Rpb24g NC5lIG9mCiAgIHRoZSBUcnVzdCBMZWdhbCBQcm92aXNpb25zIGFuZCBhcmUgcHJvdmlkZWQgd2l0 aG91dCB3YXJyYW50eSBhcwogICBkZXNjcmliZWQgaW4gdGhlIFNpbXBsaWZpZWQgQlNEIExpY2Vu c2UuCgpUYWJsZSBvZiBDb250ZW50cwoKICAgMS4gIEludHJvZHVjdGlvbiAgLiAuIC4gLiAuIC4g LiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gICAyCiAgIDIuICBUZXJtaW5vbG9n eSAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuICAgMwog ICAzLiAgU29sdXRpb24gT3ZlcnZpZXcgLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAu IC4gLiAuIC4gLiAgIDMKICAgNC4gIE9idGFpbmluZyBhIFRva2VuIFVzaW5nIE9BdXRoIC4gLiAu IC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gICA0CiAgICAgNC4xLiAgS2V5IEVzdGFibGlzaG1l bnQgLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuICAgNAogICAgICAgNC4x LjEuICBIVFRQIGludGVyYWN0aW9ucyAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4g LiAgIDUKICAgICAgIDQuMS4yLiAgTWFudWFsIHByb3Zpc2lvbmluZyAuIC4gLiAuIC4gLiAuIC4g LiAuIC4gLiAuIC4gLiAuIC4gICA3CiAgIDUuICBGb3JtaW5nIGEgUmVxdWVzdCAuIC4gLiAuIC4g LiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuICAgNwogICA2LiAgU1RVTiBBdHRyaWJ1 dGVzIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAgIDcKICAg ICA2LjEuICBUSElSRC1QQVJUWS1BVVRIT1JJWkFUSU9OIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAu IC4gLiAuIC4gICA3CiAgICAgNi4yLiAgQUNDRVNTLVRPS0VOICAuIC4gLiAuIC4gLiAuIC4gLiAu IC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuICAgOAogICA3LiAgU1RVTiBTZXJ2ZXIgQmVoYXZpb3Vy IC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAgMTAKICAgOC4gIFNUVU4g Q2xpZW50IEJlaGF2aW91ciAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4g IDExCiAgIDkuICBVc2FnZSB3aXRoIFRVUk4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4g LiAuIC4gLiAuIC4gLiAuICAxMQogICAxMC4gT3BlcmF0aW9uYWwgQ29uc2lkZXJhdGlvbnMgIC4g LiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAgMTUKICAgMTEuIFNlY3VyaXR5IENvbnNp ZGVyYXRpb25zIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gIDE1CiAgIDEy LiBJQU5BIENvbnNpZGVyYXRpb25zIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAu IC4gLiAuICAxNgogICAxMy4gQWNrbm93bGVkZ2VtZW50cyAgLiAuIC4gLiAuIC4gLiAuIC4gLiAu IC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAgMTYKICAgMTQuIFJlZmVyZW5jZXMgIC4gLiAuIC4gLiAu IC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gIDE2CiAgICAgMTQuMS4gIE5v cm1hdGl2ZSBSZWZlcmVuY2VzIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuICAx NwogICAgIDE0LjIuICBJbmZvcm1hdGl2ZSBSZWZlcmVuY2VzIC4gLiAuIC4gLiAuIC4gLiAuIC4g LiAuIC4gLiAuIC4gLiAgMTcKICAgQXBwZW5kaXggQS4gIFNhbXBsZSB0aWNrZXRzIC4gLiAuIC4g LiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gIDE5CiAgIEFwcGVuZGl4IEIuICBJbnRlcmFj dGlvbiBiZXR3ZWVuIGNsaWVudCBhbmQgYXV0aG9yaXphdGlvbiBzZXJ2ZXIgICAyMAogICBBdXRo b3JzJyBBZGRyZXNzZXMgIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAu IC4gLiAgMjIKCjEuICBJbnRyb2R1Y3Rpb24KCiAgIFNlc3Npb24gVHJhdmVyc2FsIFV0aWxpdGll cyBmb3IgTkFUIChTVFVOKSBbUkZDNTM4OV0gcHJvdmlkZXMgYQogICBtZWNoYW5pc20gdG8gY29u dHJvbCBhY2Nlc3MgdmlhICJsb25nLXRlcm0iIHVzZXJuYW1lLyBwYXNzd29yZAogICBjcmVkZW50 aWFscyB0aGF0IGFyZSBwcm92aWRlZCBhcyBwYXJ0IG9mIHRoZSBTVFVOIHByb3RvY29sLiAgSXQg aXMKICAgZXhwZWN0ZWQgdGhhdCB0aGVzZSBjcmVkZW50aWFscyB3aWxsIGJlIGtlcHQgc2VjcmV0 OyBpZiB0aGUKICAgY3JlZGVudGlhbHMgYXJlIGRpc2NvdmVyZWQsIHRoZSBTVFVOIHNlcnZlciBj b3VsZCBiZSB1c2VkIGJ5CiAgIHVuYXV0aG9yaXplZCB1c2VycyBvciBhcHBsaWNhdGlvbnMuICBI b3dldmVyLCBpbiB3ZWIgYXBwbGljYXRpb25zCiAgIGxpa2UgV2ViUlRDIFtJLUQuaWV0Zi1ydGN3 ZWItb3ZlcnZpZXddIHdoZXJlIEphdmFTY3JpcHQgdXNlcyB0aGUKICAgYnJvd3NlciBmdW5jdGlv bmFsaXR5IHRvIG1ha2UgcmVhbC10aW1lIGF1ZGlvIGFuZC9vciB2aWRlbyBjYWxscywgV2ViCiAg IGNvbmZlcmVuY2luZywgYW5kIGRpcmVjdCBkYXRhIHRyYW5zZmVyLCBlbnN1cmluZyB0aGlzIHNl Y3JlY3kgaXMKICAgdHlwaWNhbGx5IG5vdCBwb3NzaWJsZS4KCiAgIFRvIGFkZHJlc3MgdGhpcyBw cm9ibGVtIGFuZCB0aGUgb25lcyBkZXNjcmliZWQgaW4gW1JGQzczNzZdLCB0aGlzCiAgIGRvY3Vt ZW50IHByb3Bvc2VzIHRoZSB1c2Ugb2YgdGhpcmQgcGFydHkgYXV0aG9yaXphdGlvbiB1c2luZyBP QXV0aAogICAyLjAgW1JGQzY3NDldIGZvciBTVFVOLiAgVXNpbmcgT0F1dGggMi4wLCBhIGNsaWVu dCBvYnRhaW5zIGFuCgoKClJlZGR5LCBldCBhbC4gICAgICAgICAgIEV4cGlyZXMgT2N0b2JlciAx NSwgMjAxNSAgICAgICAgICAgICAgICBbUGFnZSAyXQoMCkludGVybmV0LURyYWZ0ICAgICAgU1RV TiBmb3IgM3JkIHBhcnR5IEF1dGhvcml6YXRpb24gICAgICAgICAgQXByaWwgMjAxNQoKCiAgIGVw aGVtZXJhbCB0b2tlbiBmcm9tIGFuIGF1dGhvcml6YXRpb24gc2VydmVyIGUuZy4gIFdlYlJUQyBz ZXJ2ZXIsIGFuZAogICB0aGUgdG9rZW4gaXMgcHJlc2VudGVkIHRvIHRoZSBTVFVOIHNlcnZlciBp bnN0ZWFkIG9mIHRoZSB0cmFkaXRpb25hbAogICBtZWNoYW5pc20gb2YgcHJlc2VudGluZyB1c2Vy bmFtZS9wYXNzd29yZCBjcmVkZW50aWFscy4gIFRoZSBTVFVOCiAgIHNlcnZlciB2YWxpZGF0ZXMg dGhlIGF1dGhlbnRpY2l0eSBvZiB0aGUgdG9rZW4gYW5kIHByb3ZpZGVzIHJlcXVpcmVkCiAgIHNl cnZpY2VzLiAgVGhpcmQgcGFydHkgYXV0aG9yaXphdGlvbiB1c2luZyBPQXV0aCAyLjAgZm9yIFNU VU4KICAgZXhwbGFpbmVkIGluIHRoaXMgc3BlY2lmaWNhdGlvbiBjYW4gYWxzbyBiZSB1c2VkIHdp dGggVHJhdmVyc2FsIFVzaW5nCiAgIFJlbGF5cyBhcm91bmQgTkFUIChUVVJOKSBbUkZDNTc2Nl0u CgoyLiAgVGVybWlub2xvZ3kKCiAgIFRoZSBrZXkgd29yZHMgIk1VU1QiLCAiTVVTVCBOT1QiLCAi UkVRVUlSRUQiLCAiU0hBTEwiLCAiU0hBTEwgTk9UIiwKICAgIlNIT1VMRCIsICJTSE9VTEQgTk9U IiwgIlJFQ09NTUVOREVEIiwgIk1BWSIsIGFuZCAiT1BUSU9OQUwiIGluIHRoaXMKICAgZG9jdW1l bnQgYXJlIHRvIGJlIGludGVycHJldGVkIGFzIGRlc2NyaWJlZCBpbiBbUkZDMjExOV0uCgogICBv ICBXZWJSVEMgU2VydmVyOiBBIHdlYiBzZXJ2ZXIgdGhhdCBzdXBwb3J0cyBXZWJSVEMKICAgICAg W0ktRC5pZXRmLXJ0Y3dlYi1vdmVydmlld10uCgogICBvICBBY2Nlc3MgVG9rZW46IE9BdXRoIDIu MCBhY2Nlc3MgdG9rZW4uCgogICBvICBtYWNfa2V5OiBUaGUgc2Vzc2lvbiBrZXkgZ2VuZXJhdGVk IGJ5IHRoZSBhdXRob3JpemF0aW9uIHNlcnZlci4KICAgICAgVGhpcyBzZXNzaW9uIGtleSBoYXMg YSBsaWZldGltZSB0aGF0IGNvcnJlc3BvbmRzIHRvIHRoZSBsaWZldGltZQogICAgICBvZiB0aGUg YWNjZXNzIHRva2VuLCBpcyBnZW5lcmF0ZWQgYnkgdGhlIGF1dGhvcml6YXRpb24gc2VydmVyIGFu ZAogICAgICBib3VuZCB0byB0aGUgYWNjZXNzIHRva2VuLgoKICAgbyAga2lkOiBBbiBlcGhlbWVy YWwgYW5kIHVuaXF1ZSBrZXkgaWRlbnRpZmllci4gIFRoZSBraWQgYWxzbyBhbGxvd3MKICAgICAg dGhlIHJlc291cmNlIHNlcnZlciB0byBzZWxlY3QgdGhlIGFwcHJvcHJpYXRlIGtleWluZyBtYXRl cmlhbCBmb3IKICAgICAgZGVjcnlwdGlvbi4KCiAgIFNvbWUgc2VjdGlvbnMgaW4gdGhpcyBzcGVj aWZpY2F0aW9uIHNob3cgV2ViUlRDIHNlcnZlciBhcyB0aGUKICAgYXV0aG9yaXphdGlvbiBzZXJ2 ZXIgYW5kIGNsaWVudCBhcyB0aGUgV2ViUlRDIGNsaWVudCwgaG93ZXZlciBXZWJSVEMKICAgaXMg aW50ZW5kZWQgdG8gYmUgdXNlZCBmb3IgaWxsdXN0cmF0aXZlIHB1cnBvc2Ugb25seS4KCjMuICBT b2x1dGlvbiBPdmVydmlldwoKICAgU1RVTiBjbGllbnQga25vd3MgdGhhdCBpdCBjYW4gdXNlIE9B dXRoIDIuMCB3aXRoIHRoZSB0YXJnZXQgU1RVTgogICBzZXJ2ZXIgZWl0aGVyIHRocm91Z2ggY29u ZmlndXJhdGlvbiBvciB3aGVuIGl0IHJlY2VpdmVzIHRoZSBuZXcgU1RVTgogICBhdHRyaWJ1dGUg VEhJUkQtUEFSVFktQVVUSE9SSVpBVElPTiBpbiB0aGUgZXJyb3IgcmVzcG9uc2Ugd2l0aCBhbgog ICBlcnJvciBjb2RlIG9mIDQwMShVbmF1dGhvcml6ZWQpLgoKICAgVGhpcyBzcGVjaWZpY2F0aW9u IHVzZXMgdGhlIHRva2VuIHR5cGUgJ0Fzc2VydGlvbicgKGFrYSBzZWxmLQogICBjb250YWluZWQg dG9rZW4pIGRlc2NyaWJlZCBpbiBbUkZDNjgxOV0gd2hlcmUgYWxsIHRoZSBpbmZvcm1hdGlvbgog ICBuZWNlc3NhcnkgdG8gYXV0aGVudGljYXRlIHRoZSB2YWxpZGl0eSBvZiB0aGUgdG9rZW4gaXMg Y29udGFpbmVkCiAgIHdpdGhpbiB0aGUgdG9rZW4gaXRzZWxmLiAgVGhpcyBhcHByb2FjaCBoYXMg dGhlIGJlbmVmaXQgb2YgYXZvaWRpbmcgYQogICBwcm90b2NvbCBiZXR3ZWVuIHRoZSBTVFVOIHNl cnZlciBhbmQgdGhlIGF1dGhvcml6YXRpb24gc2VydmVyIGZvcgogICB0b2tlbiB2YWxpZGF0aW9u LCB0aHVzIHJlZHVjaW5nIGxhdGVuY3kuICBUaGUgY29udGVudCBvZiB0aGUgdG9rZW4gaXMKICAg b3BhcXVlIHRvIHRoZSBjbGllbnQuICBUaGUgY2xpZW50IGVtYmVkcyB0aGUgdG9rZW4gd2l0aGlu IGEgU1RVTgogICByZXF1ZXN0IHNlbnQgdG8gdGhlIFNUVU4gc2VydmVyLiAgT25jZSB0aGUgU1RV TiBzZXJ2ZXIgaGFzIGRldGVybWluZWQKICAgdGhlIHRva2VuIGlzIHZhbGlkLCBpdHMgc2Vydmlj ZXMgYXJlIG9mZmVyZWQgZm9yIGEgZGV0ZXJtaW5lZCBwZXJpb2QKCgoKUmVkZHksIGV0IGFsLiAg ICAgICAgICAgRXhwaXJlcyBPY3RvYmVyIDE1LCAyMDE1ICAgICAgICAgICAgICAgIFtQYWdlIDNd CgwKSW50ZXJuZXQtRHJhZnQgICAgICBTVFVOIGZvciAzcmQgcGFydHkgQXV0aG9yaXphdGlvbiAg ICAgICAgICBBcHJpbCAyMDE1CgoKICAgb2YgdGltZS4gIEFjY2VzcyB0b2tlbiBpc3N1ZWQgYnkg dGhlIGF1dGhvcml6YXRpb24gc2VydmVyIGlzCiAgIGV4cGxhaW5lZCBpbiBTZWN0aW9uIDYuMi4g IE9BdXRoIDIuMCBpbiBbUkZDNjc0OV0gZGVmaW5lcyBmb3VyIGdyYW50CiAgIHR5cGVzLiAgVGhp cyBzcGVjaWZpY2F0aW9uIHVzZXMgdGhlIE9BdXRoIDIuMCBncmFudCB0eXBlICJJbXBsaWNpdCIK ICAgZXhwbGFpbmVkIGluIHNlY3Rpb24gMS4zLjIgb2YgW1JGQzY3NDldIHdoZXJlIHRoZSBjbGll bnQgaXMgaXNzdWVkIGFuCiAgIGFjY2VzcyB0b2tlbiBkaXJlY3RseS4gIFRoZSBzdHJpbmcgJ3N0 dW4nIGlzIGRlZmluZWQgYnkgdGhpcwogICBzcGVjaWZpY2F0aW9uIGZvciB1c2UgYXMgdGhlIE9B dXRoIHNjb3BlIHBhcmFtZXRlciAoc2VlIHNlY3Rpb24gMy4zCiAgIG9mIFtSRkM2NzQ5XSkgZm9y IHRoZSBPQXV0aCB0b2tlbi4KCiAgIFRoZSBleGFjdCBtZWNoYW5pc20gdXNlZCBieSBhIGNsaWVu dCB0byBvYnRhaW4gYSB0b2tlbiBmcm9tIHRoZSBPQXV0aAogICAyLjAgYXV0aG9yaXphdGlvbiBz ZXJ2ZXIgaXMgb3V0c2lkZSB0aGUgc2NvcGUgb2YgdGhpcyBkb2N1bWVudC4KICAgQXBwZW5kaXgg QiBwcm92aWRlcyBhbiBleGFtcGxlIGRlcGxveW1lbnQgc2NlbmFyaW8gb2YgaW50ZXJhY3Rpb24K ICAgYmV0d2VlbiB0aGUgY2xpZW50IGFuZCBhdXRob3JpemF0aW9uIHNlcnZlciB0byBvYnRhaW4g YSB0b2tlbi4KCjQuICBPYnRhaW5pbmcgYSBUb2tlbiBVc2luZyBPQXV0aAoKICAgQSBTVFVOIGNs aWVudCBuZWVkcyB0byBrbm93IHRoZSBhdXRoZW50aWNhdGlvbiBjYXBhYmlsaXR5IG9mIHRoZSBT VFVOCiAgIHNlcnZlciBiZWZvcmUgZGVjaWRpbmcgdG8gdXNlIHRoaXJkIHBhcnR5IGF1dGhvcml6 YXRpb24uICBBIFNUVU4KICAgY2xpZW50IGluaXRpYWxseSBtYWtlcyBhIHJlcXVlc3Qgd2l0aG91 dCBhbnkgYXV0aG9yaXphdGlvbi4gIElmIHRoZQogICBTVFVOIHNlcnZlciBzdXBwb3J0cyB0aGly ZCBwYXJ0eSBhdXRob3JpemF0aW9uLCBpdCB3aWxsIHJldHVybiBhbgogICBlcnJvciBtZXNzYWdl IGluZGljYXRpbmcgdGhhdCB0aGUgY2xpZW50IGNhbiBhdXRob3JpemUgdG8gdGhlIFNUVU4KICAg c2VydmVyIHVzaW5nIGFuIE9BdXRoIDIuMCBhY2Nlc3MgdG9rZW4uICBUaGUgU1RVTiBzZXJ2ZXIg aW5jbHVkZXMgYW4KICAgRVJST1ItQ09ERSBhdHRyaWJ1dGUgd2l0aCBhIHZhbHVlIG9mIDQwMSAo VW5hdXRob3JpemVkKSwgYSBub25jZQogICB2YWx1ZSBpbiBhIE5PTkNFIGF0dHJpYnV0ZSBhbmQg YSBTT0ZUV0FSRSBhdHRyaWJ1dGUgdGhhdCBnaXZlcwogICBpbmZvcm1hdGlvbiBhYm91dCB0aGUg U1RVTiBzZXJ2ZXIncyBzb2Z0d2FyZS4gIFRoZSBTVFVOIHNlcnZlciBhbHNvCiAgIGluY2x1ZGVz IHRoZSBhZGRpdGlvbmFsIFNUVU4gYXR0cmlidXRlIFRISVJELVBBUlRZLUFVVEhPUklaQVRJT04K ICAgc2lnbmFsaW5nIHRoZSBTVFVOIGNsaWVudCB0aGF0IHRoZSBTVFVOIHNlcnZlciBzdXBwb3J0 cyB0aGlyZCBwYXJ0eQogICBhdXRob3JpemF0aW9uLgoKICAgTm90ZTogQW4gaW1wbGVtZW50YXRp b24gbWF5IGNob29zZSB0byBjb250YWN0IHRoZSBhdXRob3JpemF0aW9uCiAgIHNlcnZlciB0byBv YnRhaW4gYSB0b2tlbiBldmVuIGJlZm9yZSBpdCBtYWtlcyBhIFNUVU4gcmVxdWVzdCwgaWYgaXQK ICAga25vd3MgdGhlIHNlcnZlciBkZXRhaWxzIGJlZm9yZSBoYW5kLiAgRm9yIGV4YW1wbGUsIG9u Y2UgYSBjbGllbnQgaGFzCiAgIGxlYXJudCB0aGF0IGEgU1RVTiBzZXJ2ZXIgc3VwcG9ydHMgdGhp cmQgcGFydHkgYXV0aG9yaXphdGlvbiBmcm9tIGEKICAgYXV0aG9yaXphdGlvbiBzZXJ2ZXIsIHRo ZSBjbGllbnQgY2FuIG9idGFpbiB0aGUgdG9rZW4gYmVmb3JlIG1ha2luZwogICBzdWJzZXF1ZW50 IFNUVU4gcmVxdWVzdHMuCgo0LjEuICBLZXkgRXN0YWJsaXNobWVudAoKICAgVGhlIGF1dGhvcml6 YXRpb24gc2VydmVyIHNoYXJlcyBhIGxvbmctdGVybSBzZWNyZXQgKGxpa2UgYXN5bW1ldHJpYwog ICBjcmVkZW50aWFscykgd2l0aCB0aGUgU1RVTiBzZXJ2ZXIgZm9yIG11dHVhbCBhdXRoZW50aWNh dGlvbi4KICAgU3ltbWV0cmljIGNyeXB0b2dyYXBoeSBNVVNUIGJlIGNob3NlbiB0byBlbnN1cmUg dGhhdCB0aGUgc2l6ZSBvZgogICBlbmNyeXB0ZWQgdG9rZW4gaXMgbm90IGxhcmdlIGJlY2F1c2Ug dXNhZ2Ugb2YgYXN5bW1ldHJpYyBjcnlwdG9ncmFwaHkKICAgd2lsbCByZXN1bHQgaW4gbGFyZ2Ug ZW5jcnlwdGVkIHRva2VucyB3aGljaCBtYXkgbm90IGZpdCBpbnRvIGEgc2luZ2xlCiAgIFNUVU4g bWVzc2FnZS4KCiAgIFRoZSBTVFVOIHNlcnZlciBhbmQgYXV0aG9yaXphdGlvbiBzZXJ2ZXIgY2Fu IGVzdGFibGlzaCBhIHN5bW1ldHJpYwogICBrZXkgKEspIGFuZCBjZXJ0YWluIGF1dGhlbnRpY2F0 ZWQgZW5jcnlwdGlvbiBhbGdvcml0aG0sIHVzaW5nIGFuIG91dAogICBvZiBiYW5kIG1lY2hhbmlz bS4gIFRoZSBTVFVOIGFuZCBhdXRob3JpemF0aW9uIHNlcnZlcnMgTVVTVCBlc3RhYmxpc2gKICAg dGhlIHN5bW1ldHJpYyBrZXkgb3ZlciBhbiBhdXRoZW50aWNhdGVkIHNlY3VyZSBjaGFubmVsLiAg SWYKCgoKUmVkZHksIGV0IGFsLiAgICAgICAgICAgRXhwaXJlcyBPY3RvYmVyIDE1LCAyMDE1ICAg ICAgICAgICAgICAgIFtQYWdlIDRdCgwKSW50ZXJuZXQtRHJhZnQgICAgICBTVFVOIGZvciAzcmQg cGFydHkgQXV0aG9yaXphdGlvbiAgICAgICAgICBBcHJpbCAyMDE1CgoKICAgQXV0aGVudGljYXRl ZCBFbmNyeXB0aW9uIHdpdGggQUVTLUNCQyBhbmQgSE1BQy1TSEEgKGRlZmluZWQgaW4KICAgW0kt RC5tY2dyZXctYWVhZC1hZXMtY2JjLWhtYWMtc2hhMl0pIGlzIHVzZWQgdGhlbiB0aGUgQVMtUlMg YW5kIEFVVEgKICAga2V5cyB3aWxsIGJlIGRlcml2ZWQgZnJvbSBLLiAgVGhlIEFTLVJTIGtleSBp cyB1c2VkIGZvciBlbmNyeXB0aW5nCiAgIHRoZSBzZWxmLWNvbnRhaW5lZCB0b2tlbiBhbmQgdGhl IG1lc3NhZ2UgaW50ZWdyaXR5IG9mIHRoZSBlbmNyeXB0ZWQKICAgdG9rZW4gaXMgY2FsY3VsYXRl ZCB1c2luZyB0aGUgQVVUSCBrZXkuICBJZiBBdXRoZW50aWNhdGVkIEVuY3J5cHRpb24KICAgd2l0 aCBBc3NvY2lhdGVkIERhdGEgKEFFQUQpIGFsZ29yaXRobSBkZWZpbmVkIGluIFtSRkM1MTE2XSBp cyB1c2VkCiAgIHRoZW4gdGhlcmUgaXMgbm8gbmVlZCB0byBnZW5lcmF0ZSB0aGUgQVVUSCBrZXkg YW5kIEFTLVJTIGtleSB3aWxsCiAgIGhhdmUgdGhlIHNhbWUgdmFsdWUgYXMgdGhlIHN5bW1ldHJp YyBrZXkgKEspLgoKICAgVGhlIHByb2NlZHVyZSBmb3IgZXN0YWJsaXNobWVudCBvZiB0aGUgc3lt bWV0cmljIGtleSBpcyBvdXRzaWRlIHRoZQogICBzY29wZSBvZiB0aGlzIHNwZWNpZmljYXRpb24s IGFuZCB0aGlzIHNwZWNpZmljYXRpb24gZG9lcyBub3QgbWFuZGF0ZQogICBzdXBwb3J0IG9mIGFu eSBnaXZlbiBtZWNoYW5pc20uICBTZWN0aW9uIDQuMS4xIGFuZCBTZWN0aW9uIDQuMS4yIHNob3cK ICAgZXhhbXBsZXMgb2YgbWVjaGFuaXNtcyB0aGF0IGNhbiBiZSB1c2VkLgoKNC4xLjEuICBIVFRQ IGludGVyYWN0aW9ucwoKICAgVGhlIFNUVU4gYW5kIEFTIHNlcnZlcnMgY291bGQgY2hvb3NlIHRv IHVzZSBSRVNUIEFQSSBvdmVyIEhUVFBTIHRvCiAgIGVzdGFibGlzaCBhIHN5bW1ldHJpYyBrZXku ICBIVFRQUyBNVVNUIGJlIHVzZWQgZm9yIG11dHVhbAogICBhdXRoZW50aWNhdGlvbiBhbmQgY29u ZmlkZW50aWFsaXR5LiAgVG8gcmV0cmlldmUgYSBuZXcgc3ltbWV0cmljIGtleSwKICAgdGhlIFNU VU4gc2VydmVyIG1ha2VzIGFuIEhUVFAgR0VUIHJlcXVlc3QgdG8gdGhlIGF1dGhvcml6YXRpb24K ICAgc2VydmVyLCBzcGVjaWZ5aW5nIFNUVU4gYXMgdGhlIHNlcnZpY2UgdG8gYWxsb2NhdGUgdGhl IHN5bW1ldHJpYyBrZXlzCiAgIGZvciwgYW5kIHNwZWNpZnlpbmcgdGhlIG5hbWUgb2YgdGhlIFNU VU4gc2VydmVyLiAgVGhlIHJlc3BvbnNlIGlzCiAgIHJldHVybmVkIHdpdGggY29udGVudC10eXBl ICJhcHBsaWNhdGlvbi9qc29uIiwgYW5kIGNvbnNpc3RzIG9mIGEKICAgSmF2YVNjcmlwdCBPYmpl Y3QgTm90YXRpb24gKEpTT04pIFtSRkM3MTU5XSBvYmplY3QgY29udGFpbmluZyB0aGUKICAgc3lt bWV0cmljIGtleS4KCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgpSZWRkeSwgZXQgYWwuICAgICAg ICAgICBFeHBpcmVzIE9jdG9iZXIgMTUsIDIwMTUgICAgICAgICAgICAgICAgW1BhZ2UgNV0KDApJ bnRlcm5ldC1EcmFmdCAgICAgIFNUVU4gZm9yIDNyZCBwYXJ0eSBBdXRob3JpemF0aW9uICAgICAg ICAgIEFwcmlsIDIwMTUKCgogICBSZXF1ZXN0CiAgIC0tLS0tLS0KCiAgIHNlcnZpY2UgLSBzcGVj aWZpZXMgdGhlIGRlc2lyZWQgc2VydmljZSAodHVybikKICAgbmFtZSAgICAtICBTVFVOIHNlcnZl ciBuYW1lIGJlIGFzc29jaWF0ZWQgd2l0aCB0aGUga2V5CgogICBleGFtcGxlOiBHRVQgLz9zZXJ2 aWNlPXN0dW4mbmFtZT10dXJuMUBleGFtcGxlLmNvbQoKCiAgIFJlc3BvbnNlCiAgIC0tLS0tLS0t CgogICBrIC0gTG9uZy10ZXJtIGtleSAoSykKICAgZXhwIC0gaWRlbnRpZmllcyB0aGUgdGltZSBh ZnRlciB3aGljaCB0aGUga2V5IGV4cGlyZXMuCgoKICAgZXhhbXBsZToKICAgewogICAgICAiayIg OgogICAiRVNJelJGVm1kNGlaQUJFaU0wUlZaZ0tuNldqTGFUQzFGWEFnaFJNVlR6a0JHTmFhTjQ5 NjUyM1dJSVNLZXJMaSIsCiAgICAgICJleHAiIDogMTMwMDgxOTM4MCwKICAgICAgImtpZCIgOiIy MkJJanhVOTNoL0lnd0ViIgogICAgICAiZW5jIiA6IEEyNTZHQ01LVwogICAgIH0KCiAgIFRoZSBh dXRob3JpemF0aW9uIHNlcnZlciBtdXN0IGFsc28gc2lnbmFsIGtpZCB0byB0aGUgU1RVTiBzZXJ2 ZXIKICAgd2hpY2ggd2lsbCBiZSB1c2VkIHRvIHNlbGVjdCB0aGUgYXBwcm9wcmlhdGUga2V5aW5n IG1hdGVyaWFsIGZvcgogICBkZWNyeXB0aW9uLiAgVGhlIHBhcmFtZXRlciAiayIgaXMgZGVmaW5l ZCBpbiBTZWN0aW9uIDYuNC4xIG9mCiAgIFtJLUQuaWV0Zi1qb3NlLWpzb24td2ViLWFsZ29yaXRo bXNdLCAiZW5jIiBpcyBkZWZpbmVkIGluCiAgIFNlY3Rpb24gNC4xLjIgb2YgW0ktRC5pZXRmLWpv c2UtanNvbi13ZWItZW5jcnlwdGlvbl0sICJraWQiIGlzCiAgIGRlZmluZWQgaW4gU2VjdGlvbiA0 LjEuNCBvZiBbSS1ELmlldGYtam9zZS1qc29uLXdlYi1zaWduYXR1cmVdIGFuZAogICAiZXhwIiBp cyBkZWZpbmVkIGluIFNlY3Rpb24gNC4xLjQgb2YgW0ktRC5pZXRmLW9hdXRoLWpzb24td2ViLXRv a2VuXS4KICAgQTI1NkdDTUtXIGFuZCBvdGhlciBhdXRoZW50aWNhdGVkIGVuY3J5cHRpb24gYWxn b3JpdGhtcyBhcmUgZGVmaW5lZAogICBpbiBbSS1ELmlldGYtam9zZS1qc29uLXdlYi1hbGdvcml0 aG1zXS4gIEEgU1RVTiBzZXJ2ZXIgYW5kCiAgIGF1dGhvcml6YXRpb24gc2VydmVyIGltcGxlbWVu dGF0aW9uIE1VU1Qgc3VwcG9ydCBBMjU2R0NNS1cgYXMgdGhlCiAgIGF1dGhlbnRpY2F0ZWQgZW5j cnlwdGlvbiBhbGdvcml0aG0uCgogICBJZiBBMjU2Q0JDLUhTNTEyIGRlZmluZWQgaW4gW0ktRC5p ZXRmLWpvc2UtanNvbi13ZWItYWxnb3JpdGhtc10gaXMKICAgdXNlZCB0aGVuIHRoZSBBUy1SUyBh bmQgQVVUSCBrZXlzIGFyZSBkZXJpdmVkIGZyb20gSyB1c2luZyB0aGUKICAgbWVjaGFuaXNtIGV4 cGxhaW5lZCBpbiBzZWN0aW9uIDUuMi4yLjEgb2YKICAgW0ktRC5pZXRmLWpvc2UtanNvbi13ZWIt YWxnb3JpdGhtc10uICBJbiB0aGlzIGNhc2UgQVMtUlMga2V5IGxlbmd0aAogICBtdXN0IGJlIDI1 Ni1iaXQsIEFVVEgga2V5IGxlbmd0aCBtdXN0IGJlIDI1Ni1iaXQgKHNlY3Rpb24gMi42IG9mCiAg IFtSRkM0ODY4XSkuCgoKCgoKCgoKUmVkZHksIGV0IGFsLiAgICAgICAgICAgRXhwaXJlcyBPY3Rv YmVyIDE1LCAyMDE1ICAgICAgICAgICAgICAgIFtQYWdlIDZdCgwKSW50ZXJuZXQtRHJhZnQgICAg ICBTVFVOIGZvciAzcmQgcGFydHkgQXV0aG9yaXphdGlvbiAgICAgICAgICBBcHJpbCAyMDE1CgoK NC4xLjIuICBNYW51YWwgcHJvdmlzaW9uaW5nCgogICBUaGUgU1RVTiBhbmQgQVMgc2VydmVycyBj b3VsZCBiZSBtYW51YWxseSBjb25maWd1cmVkIHdpdGggYSBzeW1tZXRyaWMKICAga2V5IChLKSwg YXV0aGVudGljYXRlZCBlbmNyeXB0aW9uIGFsZ29yaXRobSBhbmQga2lkLgoKICAgTm90ZSA6IFRo ZSBtZWNoYW5pc20gc3BlY2lmaWVkIGluIFNlY3Rpb24gNC4xLjIgY29tcGFyZWQgdG8gUkVTVAog ICBsYWNrcyBlbmNyeXB0aW9uIGFuZCBITUFDIGFsZ29yaXRobSBhZ2lsaXR5LiAgSGVuY2UgYSBT VFVOIHNlcnZlciBhbmQKICAgYXV0aG9yaXphdGlvbiBzZXJ2ZXIgaW1wbGVtZW50YXRpb24gU0hP VUxEIHN1cHBvcnQgUkVTVCBleHBsYWluZWQgaW4KICAgU2VjdGlvbiA0LjEuMS4KCjUuICBGb3Jt aW5nIGEgUmVxdWVzdAoKICAgV2hlbiBhIFNUVU4gc2VydmVyIHJlc3BvbmRzIHRoYXQgdGhpcmQg cGFydHkgYXV0aG9yaXphdGlvbiBpcwogICByZXF1aXJlZCwgYSBTVFVOIGNsaWVudCByZS1hdHRl bXB0cyB0aGUgcmVxdWVzdCwgdGhpcyB0aW1lIGluY2x1ZGluZwogICBhY2Nlc3MgdG9rZW4gYW5k IGtpZCB2YWx1ZXMgaW4gQUNDRVNTLVRPS0VOIGFuZCBVU0VSTkFNRSBTVFVOCiAgIGF0dHJpYnV0 ZXMuICBUaGUgU1RVTiBjbGllbnQgaW5jbHVkZXMgYSBNRVNTQUdFLUlOVEVHUklUWSBhdHRyaWJ1 dGUKICAgYXMgdGhlIGxhc3QgYXR0cmlidXRlIGluIHRoZSBtZXNzYWdlIG92ZXIgdGhlIGNvbnRl bnRzIG9mIHRoZSBTVFVOCiAgIG1lc3NhZ2UuICBUaGUgSE1BQyBmb3IgdGhlIE1FU1NBR0UtSU5U RUdSSVRZIGF0dHJpYnV0ZSBpcyBjb21wdXRlZCBhcwogICBkZXNjcmliZWQgaW4gc2VjdGlvbiAx NS40IG9mIFtSRkM1Mzg5XSB3aGVyZSB0aGUgbWFjX2tleSBpcyB1c2VkIGFzCiAgIHRoZSBpbnB1 dCBrZXkgZm9yIHRoZSBITUFDIGNvbXB1dGF0aW9uLiAgVGhlIFNUVU4gY2xpZW50IGFuZCBzZXJ2 ZXIKICAgd2lsbCB1c2UgdGhlIG1hY19rZXkgdG8gY29tcHV0ZSB0aGUgbWVzc2FnZSBpbnRlZ3Jp dHkgYW5kIGRvIG5vdAogICBwZXJmb3JtIE1ENSBoYXNoIG9uIHRoZSBjcmVkZW50aWFscy4KCjYu ICBTVFVOIEF0dHJpYnV0ZXMKCiAgIFRoZSBmb2xsb3dpbmcgbmV3IFNUVU4gYXR0cmlidXRlcyBh cmUgaW50cm9kdWNlZCBieSB0aGlzCiAgIHNwZWNpZmljYXRpb24gdG8gYWNjb21wbGlzaCB0aGly ZCBwYXJ0eSBhdXRob3JpemF0aW9uLgoKNi4xLiAgVEhJUkQtUEFSVFktQVVUSE9SSVpBVElPTgoK ICAgVGhpcyBhdHRyaWJ1dGUgaXMgdXNlZCBieSB0aGUgU1RVTiBzZXJ2ZXIgdG8gaW5mb3JtIHRo ZSBjbGllbnQgdGhhdAogICBpdCBzdXBwb3J0cyB0aGlyZCBwYXJ0eSBhdXRob3JpemF0aW9uLiAg VGhpcyBhdHRyaWJ1dGUgdmFsdWUgY29udGFpbnMKICAgdGhlIFNUVU4gc2VydmVyIG5hbWUuICBU aGUgU1RVTiBzZXJ2ZXIgbWF5IGhhdmUgdGllLXVwcyB3aXRoIG11bHRpcGxlCiAgIGF1dGhvcml6 YXRpb24gc2VydmVycyBhbmQgdmljZSB2ZXJzYSwgc28gdGhlIGNsaWVudCBNVVNUIHByb3ZpZGUg dGhlCiAgIFNUVU4gc2VydmVyIG5hbWUgdG8gdGhlIGF1dGhvcml6YXRpb24gc2VydmVyIHNvIHRo YXQgaXQgY2FuIHNlbGVjdAogICB0aGUgYXBwcm9wcmlhdGUga2V5aW5nIG1hdGVyaWFsIHRvIGdl bmVyYXRlIHRoZSBzZWxmLWNvbnRhaW5lZCB0b2tlbi4KICAgVGhlIFRISVJELVBBUlRZLUFVVEhP UklaQVRJT04gYXR0cmlidXRlIGlzIGEgY29tcHJlaGVuc2lvbi1vcHRpb25hbAogICBhdHRyaWJ1 dGUgKHNlZSBTZWN0aW9uIDE1IGZyb20gW1JGQzUzODldKS4gIElmIHRoZSBjbGllbnQgaXMgYWJs ZSB0bwogICBjb21wcmVoZW5kIFRISVJELVBBUlRZLUFVVEhPUklaQVRJT04gaXQgTVVTVCBlbnN1 cmUgdGhhdCB0aGlyZCBwYXJ0eQogICBhdXRob3JpemF0aW9uIHRha2VzIHByZWNlZGVuY2Ugb3Zl ciBmaXJzdCBwYXJ0eSBhdXRoZW50aWNhdGlvbgogICAoZXhwbGFpbmVkIGluIHNlY3Rpb24gMTAg b2YgW1JGQzUzODldKS4gIElmIHRoZSBjbGllbnQgZG9lcyBub3QKICAgc3VwcG9ydCBvciBpcyBu b3QgY2FwYWJsZSBvZiBkb2luZyB0aGlyZCBwYXJ0eSBhdXRob3JpemF0aW9uIHRoZW4gaXQKICAg ZGVmYXVsdHMgdG8gZmlyc3QgcGFydHkgYXV0aGVudGljYXRpb24uCgoKCgoKCgoKUmVkZHksIGV0 IGFsLiAgICAgICAgICAgRXhwaXJlcyBPY3RvYmVyIDE1LCAyMDE1ICAgICAgICAgICAgICAgIFtQ YWdlIDddCgwKSW50ZXJuZXQtRHJhZnQgICAgICBTVFVOIGZvciAzcmQgcGFydHkgQXV0aG9yaXph dGlvbiAgICAgICAgICBBcHJpbCAyMDE1CgoKNi4yLiAgQUNDRVNTLVRPS0VOCgogICBUaGUgYWNj ZXNzIHRva2VuIGlzIGlzc3VlZCBieSB0aGUgYXV0aG9yaXphdGlvbiBzZXJ2ZXIuICBPQXV0aCAy LjAKICAgZG9lcyBub3QgaW1wb3NlIGFueSBsaW1pdGF0aW9uIG9uIHRoZSBsZW5ndGggb2YgdGhl IGFjY2VzcyB0b2tlbiBidXQKICAgaWYgcGF0aCBNVFUgaXMgdW5rbm93biB0aGVuIFNUVU4gbWVz c2FnZXMgb3ZlciBJUHY0IHdvdWxkIG5lZWQgdG8gYmUKICAgbGVzcyB0aGFuIDU0OCBieXRlcyAo U2VjdGlvbiA3LjEgb2YgW1JGQzUzODldKS4gIFRoZSBhY2Nlc3MgdG9rZW4KICAgbGVuZ3RoIG5l ZWRzIHRvIGJlIHJlc3RyaWN0ZWQgdG8gZml0IHdpdGhpbiB0aGUgbWF4aW11bSBTVFVOIG1lc3Nh Z2UKICAgc2l6ZS4gIE5vdGUgdGhhdCB0aGUgc2VsZi1jb250YWluZWQgdG9rZW4gaXMgb3BhcXVl IHRvIHRoZSBjbGllbnQgYW5kCiAgIHRoZSBjbGllbnQgTVVTVCBOT1QgZXhhbWluZSB0aGUgdG9r ZW4uICBUaGUgQUNDRVNTLVRPS0VOIGF0dHJpYnV0ZSBpcwogICBhIGNvbXByZWhlbnNpb24tcmVx dWlyZWQgYXR0cmlidXRlIChzZWUgU2VjdGlvbiAxNSBmcm9tIFtSRkM1Mzg5XSkuCgogICBUaGUg dG9rZW4gaXMgc3RydWN0dXJlZCBhcyBmb2xsb3dzOgoKICAgICAgICAgc3RydWN0IHsKICAgICAg ICAgICAgIHVpbnQxNl90IG5vbmNlX2xlbmd0aDsKICAgICAgICAgICAgIG9wYXF1ZSAgbm9uY2Vb bm9uY2VfbGVuZ3RoXTsKICAgICAgICAgICAgIG9wYXF1ZSB7CiAgICAgICAgICAgICAgICAgdWlu dDE2X3Qga2V5X2xlbmd0aDsKICAgICAgICAgICAgICAgICBvcGFxdWUgbWFjX2tleVtrZXlfbGVu Z3RoXTsKICAgICAgICAgICAgICAgICB1aW50NjRfdCB0aW1lc3RhbXA7CiAgICAgICAgICAgICAg ICAgdWludDMyX3QgbGlmZXRpbWU7CiAgICAgICAgICAgICB9IGVuY3J5cHRlZF9ibG9jazsKICAg ICAgICAgfSB0b2tlbjsKCiAgICAgICAgICAgICAgICAgICBGaWd1cmUgMTogU2VsZi1jb250YWlu ZWQgdG9rZW4gZm9ybWF0CgogICBOb3RlOiB1aW50Tl90IG1lYW5zIGFuIHVuc2lnbmVkIGludGVn ZXIgb2YgZXhhY3RseSBOIGJpdHMuICBTaW5nbGUtCiAgIGJ5dGUgZW50aXRpZXMgY29udGFpbmlu ZyB1bmludGVycHJldGVkIGRhdGEgYXJlIG9mIHR5cGUgb3BhcXVlLiAgQWxsCiAgIHZhbHVlcyBp biB0aGUgdG9rZW4gYXJlIHN0b3JlZCBpbiBuZXR3b3JrIGJ5dGUgb3JkZXIuCgogICBUaGUgYXNz b2NpYXRlZCBkYXRhIChBKSBNVVNUIGJlIHRoZSBTVFVOIHNlcnZlciBuYW1lLiAgVGhpcyBlbnN1 cmVzCiAgIHRoYXQgdGhlIGNsaWVudCBkb2VzIG5vdCB1c2UgdGhlIHNhbWUgdG9rZW4gdG8gZ2Fp biBpbGxlZ2FsIGFjY2VzcyB0bwogICBvdGhlciBTVFVOIHNlcnZlcnMgcHJvdmlkZWQgYnkgdGhl IHNhbWUgYWRtaW5pc3RyYXRpdmUgZG9tYWluIGkuZS4sCiAgIHdoZW4gbXVsdGlwbGUgU1RVTiBz ZXJ2ZXJzIGluIGEgc2luZ2xlIGFkbWluaXN0cmF0aXZlIGRvbWFpbiBzaGFyZQogICB0aGUgc2Ft ZSBzeW1tZXRyaWMga2V5IHdpdGggYW4gYXV0aG9yaXphdGlvbiBzZXJ2ZXIuCgogICBUaGUgZmll bGRzIGFyZSBkZXNjcmliZWQgYmVsb3c6CgogICBub25jZV9sZW5ndGg6ICBMZW5ndGggb2YgdGhl IG5vbmNlIGZpZWxkLiAgVGhlIGxlbmd0aCBvZiBub25jZSBmb3IKICAgICAgYXV0aGVudGljYXRl ZCBlbmNyeXB0aW9uIHdpdGggYWRkaXRpb25hbCBkYXRhIChBRUFEKSBhbGdvcml0aG1zIGlzCiAg ICAgIGV4cGxhaW5lZCBpbiBbUkZDNTExNl0uCgogICBOb25jZTogIE5vbmNlIGZvcm1hdGlvbiBp cyBleHBsYWluZWQgaW4gc2VjdGlvbiAzLjIgb2YgW1JGQzUxMTZdLgoKICAga2V5X2xlbmd0aDog IExlbmd0aCBvZiB0aGUgc2Vzc2lvbiBrZXkgaW4gb2N0ZXRzLiAgS2V5IGxlbmd0aCBvZgogICAg ICAxNjAtYml0cyBNVVNUIGJlIHN1cHBvcnRlZCAoaS5lLiwgb25seSAxNjAtYml0IGtleSBpcyB1 c2VkIGJ5CiAgICAgIEhNQUMtU0hBLTEgZm9yIG1lc3NhZ2UgaW50ZWdyaXR5IG9mIFNUVU4gbWVz c2FnZSkuICBUaGUga2V5IGxlbmd0aAoKCgoKUmVkZHksIGV0IGFsLiAgICAgICAgICAgRXhwaXJl cyBPY3RvYmVyIDE1LCAyMDE1ICAgICAgICAgICAgICAgIFtQYWdlIDhdCgwKSW50ZXJuZXQtRHJh ZnQgICAgICBTVFVOIGZvciAzcmQgcGFydHkgQXV0aG9yaXphdGlvbiAgICAgICAgICBBcHJpbCAy MDE1CgoKICAgICAgZmFjaWxpdGF0ZXMgdGhlIGhhc2ggYWdpbGl0eSBwbGFuIGRpc2N1c3NlZCBp biBzZWN0aW9uIDE2LjMgb2YKICAgICAgW1JGQzUzODldLgoKICAgbWFjX2tleTogIFRoZSBzZXNz aW9uIGtleSBnZW5lcmF0ZWQgYnkgdGhlIGF1dGhvcml6YXRpb24gc2VydmVyLgoKICAgdGltZXN0 YW1wOiAgNjQtYml0IHVuc2lnbmVkIGludGVnZXIgZmllbGQgY29udGFpbmluZyBhIHRpbWVzdGFt cC4KICAgICAgVGhlIHZhbHVlIGluZGljYXRlcyB0aGUgdGltZSBzaW5jZSBKYW51YXJ5IDEsIDE5 NzAsIDAwOjAwIFVUQywgYnkKICAgICAgdXNpbmcgYSBmaXhlZCBwb2ludCBmb3JtYXQuICBJbiB0 aGlzIGZvcm1hdCwgdGhlIGludGVnZXIgbnVtYmVyIG9mCiAgICAgIHNlY29uZHMgaXMgY29udGFp bmVkIGluIHRoZSBmaXJzdCA0OCBiaXRzIG9mIHRoZSBmaWVsZCwgYW5kIHRoZQogICAgICByZW1h aW5pbmcgMTYgYml0cyBpbmRpY2F0ZSB0aGUgbnVtYmVyIG9mIDEvNjRLIGZyYWN0aW9ucyBvZiBh CiAgICAgIHNlY29uZCAoTmF0aXZlIGZvcm1hdCAtIFVuaXgpLgoKICAgbGlmZXRpbWU6ICBUaGUg bGlmZXRpbWUgb2YgdGhlIGFjY2VzcyB0b2tlbiwgaW4gc2Vjb25kcy4gIEZvcgogICAgICBleGFt cGxlLCB0aGUgdmFsdWUgMzYwMCBpbmRpY2F0ZXMgb25lIGhvdXIuICBUaGUgbGlmZXRpbWUgdmFs dWUKICAgICAgTVVTVCBiZSBncmVhdGVyIHRoYW4gb3IgZXF1YWwgdG8gdGhlICJleHBpcmVzX2lu IiBwYXJhbWV0ZXIKICAgICAgZGVmaW5lZCBpbiBzZWN0aW9uIDQuMi4yIG9mIFtSRkM2NzQ5XSwg b3RoZXJ3aXNlIHJlc291cmNlIHNlcnZlcgogICAgICBjb3VsZCByZXZva2UgdGhlIHRva2VuIGJ1 dCB0aGUgY2xpZW50IHdvdWxkIGFzc3VtZSB0aGF0IHRoZSB0b2tlbgogICAgICBoYXMgbm90IGV4 cGlyZWQgYW5kIHdvdWxkIG5vdCByZWZyZXNoIHRoZSB0b2tlbi4KCiAgIGVuY3J5cHRlZF9ibG9j azogIFRoZSBlbmNyeXB0ZWRfYmxvY2sgaXMgZW5jcnlwdGVkIGFuZCBhdXRoZW50aWNhdGVkCiAg ICAgIHVzaW5nIHRoZSBzeW1tZXRyaWMgbG9uZy10ZXJtIGtleSBlc3RhYmxpc2hlZCBiZXR3ZWVu IHRoZSBTVFVOCiAgICAgIHNlcnZlciBhbmQgdGhlIGF1dGhvcml6YXRpb24gc2VydmVyLgoKICAg VGhlIGF1dGhlbnRpY2F0ZWQgZW5jcnlwdGlvbiBvcGVyYXRpb24gaGFzIGZvdXIgaW5wdXRzOiBL ICwgTiwgQSwgYW5kCiAgIFAgKGVuY3J5cHRlZF9ibG9jayksIGFzIGRlZmluZWQgaW4gc2VjdGlv biAyLjEgb2YgW1JGQzUxMTZdIGFuZCB0aGVyZQogICBpcyBhIHNpbmdsZSBvdXRwdXQgYSBjaXBo ZXJ0ZXh0IEMgb3IgYW4gaW5kaWNhdGlvbiB0aGF0IHRoZSByZXF1ZXN0ZWQKICAgZW5jcnlwdGlv biBvcGVyYXRpb24gY291bGQgbm90IGJlIHBlcmZvcm1lZC4KCiAgIEVuY3J5cHRpb24gcHJvY2Vz cyB3aXRoIEFFU19DQkNfSE1BQ19TSEEyIChleHBsYWluZWQgaW4gc2VjdGlvbiAyLjEKICAgb2Yg W0ktRC5tY2dyZXctYWVhZC1hZXMtY2JjLWhtYWMtc2hhMl0pIGlzIGlsbHVzdHJhdGVkIGJlbG93 LiAgVGhlCiAgIGNpcGhlcnRleHQgY29uc2lzdHMgb2YgdGhlIHN0cmluZyBTLCB3aXRoIHRoZSBz dHJpbmcgVCBhcHBlbmRlZCB0bwogICBpdC4gIEhlcmUgQyBhbmQgQSBkZW5vdGUgQ2lwaGVydGV4 dCBhbmQgU1RVTiBzZXJ2ZXIgbmFtZQogICByZXNwZWN0aXZlbHkuICBUaGUgb2N0ZXQgc3RyaW5n IEFMIChzZWN0aW9uIDIuMSBvZgogICBbSS1ELm1jZ3Jldy1hZWFkLWFlcy1jYmMtaG1hYy1zaGEy XSkgaXMgZXF1YWwgdG8gdGhlIG51bWJlciBvZiBiaXRzCiAgIGluIEEgZXhwcmVzc2VkIGFzIGEg NjQtYml0IHVuc2lnbmVkIGJpZyBlbmRpYW4gaW50ZWdlci4KCiAgIG8gIEFVVEggPSBpbml0aWFs IGF1dGhlbnRpY2F0aW9uIGtleSBsZW5ndGggb2N0ZXRzIG9mIEssCgogICBvICBBUy1SUyA9IGZp bmFsIGVuY3J5cHRpb24ga2V5IGxlbmd0aCBvY3RldHMgb2YgSywKCiAgIG8gIFMgPSBDQkMtUEtD UzUtRU5DKEFTLVJTLCBlbmNyeXB0ZWRfYmxvY2spLAoKICAgICAgKiAgSW5pdGlhbGl6YXRpb24g dmVjdG9yIGlzIHNldCB0byB6ZXJvIGJlY2F1c2UgdGhlCiAgICAgICAgIGVuY3J5cHRlZF9ibG9j ayBpbiBlYWNoIGFjY2VzcyB0b2tlbiB3aWxsIG5vdCBiZSBpZGVudGljYWwgYW5kCiAgICAgICAg IGhlbmNlIHdpbGwgbm90IHJlc3VsdCBpbiBnZW5lcmF0aW9uIG9mIGlkZW50aWNhbCBjaXBoZXJ0 ZXh0LgoKICAgbyAgbWFjID0gTUFDKEFVVEgsIEEgfHwgUyB8fCBBTCksCgoKCgpSZWRkeSwgZXQg YWwuICAgICAgICAgICBFeHBpcmVzIE9jdG9iZXIgMTUsIDIwMTUgICAgICAgICAgICAgICAgW1Bh Z2UgOV0KDApJbnRlcm5ldC1EcmFmdCAgICAgIFNUVU4gZm9yIDNyZCBwYXJ0eSBBdXRob3JpemF0 aW9uICAgICAgICAgIEFwcmlsIDIwMTUKCgogICBvICBUID0gaW5pdGlhbCBUX0xFTiBvY3RldHMg b2YgbWFjLAoKICAgbyAgQyA9IFMgfHwgVC4KCiAgIFRoZSBlbnRpcmUgdG9rZW4gaS5lLiwgdGhl ICdlbmNyeXB0ZWRfYmxvY2snIGlzIGJhc2U2NCBlbmNvZGVkIChzZWUKICAgc2VjdGlvbiA0IG9m IFtSRkM0NjQ4XSkgYW5kIHRoZSByZXN1bHRpbmcgYWNjZXNzIHRva2VuIGlzIHNpZ25hbGVkIHRv CiAgIHRoZSBjbGllbnQuCgo3LiAgU1RVTiBTZXJ2ZXIgQmVoYXZpb3VyCgogICBUaGUgU1RVTiBz ZXJ2ZXIsIG9uIHJlY2VpdmluZyBhIHJlcXVlc3Qgd2l0aCBBQ0NFU1MtVE9LRU4gYXR0cmlidXRl LAogICBwZXJmb3JtcyBjaGVja3MgbGlzdGVkIGluIHNlY3Rpb24gMTAuMi4yIG9mIFtSRkM1Mzg5 XSBpbiBhZGRpdGlvbiB0bwogICB0aGUgZm9sbG93aW5nIHN0ZXBzIHRvIHZlcmlmeSB0aGF0IHRo ZSBhY2Nlc3MgdG9rZW4gaXMgdmFsaWQ6CgogICBvICBTVFVOIHNlcnZlciBzZWxlY3RzIHRoZSBr ZXlpbmcgbWF0ZXJpYWwgYmFzZWQgb24ga2lkIHNpZ25hbGxlZCBpbgogICAgICB0aGUgVVNFUk5B TUUgYXR0cmlidXRlLgoKICAgbyAgVGhlIGF1dGhlbnRpY2F0ZWQgZGVjcnlwdGlvbiBvcGVyYXRp b24gaGFzIGZvdXIgaW5wdXRzOiBLLCBOLCBBLAogICAgICBhbmQgQywgYXMgZGVmaW5lZCBpbiBz ZWN0aW9uIDIuMiBvZiBbUkZDNTExNl0uICBBRUFEIGRlY3J5cHRpb24KICAgICAgYWxnb3JpdGht IGhhcyBvbmx5IGEgc2luZ2xlIG91dHB1dCwgZWl0aGVyIGEgcGxhaW50ZXh0IG9yIGEKICAgICAg c3BlY2lhbCBzeW1ib2wgRkFJTCB0aGF0IGluZGljYXRlcyB0aGF0IHRoZSBpbnB1dHMgYXJlIG5v dAogICAgICBhdXRoZW50aWMuICBJZiBhdXRoZW50aWNhdGVkIGRlY3J5cHQgb3BlcmF0aW9uIHJl dHVybnMgRkFJTCB0aGVuCiAgICAgIHRoZSBTVFVOIHNlcnZlciByZWplY3RzIHRoZSByZXF1ZXN0 IHdpdGggYW4gZXJyb3IgcmVzcG9uc2UgNDAxCiAgICAgIChVbmF1dGhvcml6ZWQpLiAgSWYgQUVT X0NCQ19ITUFDX1NIQTIgaXMgdXNlZCB0aGVuIHRoZSBmaW5hbCBUX0xFTgogICAgICBvY3RldHMg YXJlIHN0cmlwcGVkIGZyb20gQy4gIEl0IHBlcmZvcm1zIHRoZSB2ZXJpZmljYXRpb24gb2YgdGhl CiAgICAgIHRva2VuIG1lc3NhZ2UgaW50ZWdyaXR5IGJ5IGNhbGN1bGF0aW5nIEhNQUMgb3ZlciB0 aGUgdGhlIFNUVU4KICAgICAgc2VydmVyIG5hbWUsIHRoZSBlbmNyeXB0ZWQgcG9ydGlvbiBpbiB0 aGUgc2VsZi1jb250YWluZWQgdG9rZW4gYW5kCiAgICAgIHRoZSBBTCB1c2luZyBBVVRIIGtleSBh bmQgaWYgdGhlIHJlc3VsdGluZyB2YWx1ZSBkb2VzIG5vdCBtYXRjaAogICAgICB0aGUgbWFjIGZp ZWxkIGluIHRoZSBzZWxmLWNvbnRhaW5lZCB0b2tlbiB0aGVuIGl0IHJlamVjdHMgdGhlCiAgICAg IHJlcXVlc3Qgd2l0aCBhbiBlcnJvciByZXNwb25zZSA0MDEgKFVuYXV0aG9yaXplZCkuCgogICBv ICBTVFVOIHNlcnZlciBvYnRhaW5zIHRoZSBtYWNfa2V5IGJ5IHJldHJpZXZpbmcgdGhlIGNvbnRl bnQgb2YgdGhlCiAgICAgIGFjY2VzcyB0b2tlbiAod2hpY2ggcmVxdWlyZXMgZGVjcnlwdGlvbiBv ZiB0aGUgc2VsZi1jb250YWluZWQKICAgICAgdG9rZW4gdXNpbmcgdGhlIEFTLVJTIGtleSkuCgog ICBvICBUaGUgU1RVTiBzZXJ2ZXIgdmVyaWZpZXMgdGhhdCBubyByZXBsYXkgdG9vayBwbGFjZSBi eSBwZXJmb3JtaW5nCiAgICAgIHRoZSBmb2xsb3dpbmcgY2hlY2s6CgogICAgICAqICBUaGUgYWNj ZXNzIHRva2VuIGlzIGFjY2VwdGVkIGlmIHRoZSB0aW1lc3RhbXAgZmllbGQgKFRTKSBpbiB0aGUK ICAgICAgICAgc2VsZi1jb250YWluZWQgdG9rZW4gaXMgcmVjZW50IGVub3VnaCB0byB0aGUgcmVj ZXB0aW9uIHRpbWUgb2YKICAgICAgICAgdGhlIFNUVU4gcmVxdWVzdCAoUkRuZXcpIHVzaW5nIHRo ZSBmb2xsb3dpbmcgZm9ybXVsYTogTGlmZXRpbWUKICAgICAgICAgKyBEZWx0YSA+IGFicyhSRG5l dyAtIFRTKS4gIFRoZSBSRUNPTU1FTkRFRCB2YWx1ZSBmb3IgdGhlCiAgICAgICAgIGFsbG93ZWQg RGVsdGEgaXMgNSBzZWNvbmRzLiAgSWYgdGhlIHRpbWVzdGFtcCBpcyBOT1Qgd2l0aGluIHRoZQog ICAgICAgICBib3VuZGFyaWVzIHRoZW4gdGhlIFNUVU4gc2VydmVyIGRpc2NhcmRzIHRoZSByZXF1 ZXN0IHdpdGggZXJyb3IKICAgICAgICAgcmVzcG9uc2UgNDAxIChVbmF1dGhvcml6ZWQpLgoKICAg byAgVGhlIFNUVU4gc2VydmVyIHVzZXMgdGhlIG1hY19rZXkgdG8gY29tcHV0ZSB0aGUgbWVzc2Fn ZSBpbnRlZ3JpdHkKICAgICAgb3ZlciB0aGUgcmVxdWVzdCBhbmQgaWYgdGhlIHJlc3VsdGluZyB2 YWx1ZSBkb2VzIG5vdCBtYXRjaCB0aGUKCgoKUmVkZHksIGV0IGFsLiAgICAgICAgICAgRXhwaXJl cyBPY3RvYmVyIDE1LCAyMDE1ICAgICAgICAgICAgICAgW1BhZ2UgMTBdCgwKSW50ZXJuZXQtRHJh ZnQgICAgICBTVFVOIGZvciAzcmQgcGFydHkgQXV0aG9yaXphdGlvbiAgICAgICAgICBBcHJpbCAy MDE1CgoKICAgICAgY29udGVudHMgb2YgdGhlIE1FU1NBR0UtSU5URUdSSVRZIGF0dHJpYnV0ZSB0 aGVuIGl0IHJlamVjdHMgdGhlCiAgICAgIHJlcXVlc3Qgd2l0aCBhbiBlcnJvciByZXNwb25zZSA0 MDEgKFVuYXV0aG9yaXplZCkuCgogICBvICBJZiBhbGwgdGhlIGNoZWNrcyBwYXNzLCB0aGUgU1RV TiBzZXJ2ZXIgY29udGludWVzIHRvIHByb2Nlc3MgdGhlCiAgICAgIHJlcXVlc3QuICBBbnkgcmVz cG9uc2UgZ2VuZXJhdGVkIGJ5IHRoZSBzZXJ2ZXIgTVVTVCBpbmNsdWRlIHRoZQogICAgICBNRVNT QUdFLUlOVEVHUklUWSBhdHRyaWJ1dGUsIGNvbXB1dGVkIHVzaW5nIHRoZSBtYWNfa2V5LgoKICAg SWYgYSBTVFVOIHNlcnZlciByZWNlaXZlcyBhbiBBQ0NFU1MtVE9LRU4gYXR0cmlidXRlIHVuZXhw ZWN0ZWRseQogICAoYmVjYXVzZSBpdCBoYWQgbm90IHByZXZpb3VzbHkgc2VudCBvdXQgYSBUSElS RC1QQVJUWS1BVVRIT1JJWkFUSU9OKSwKICAgaXQgd2lsbCByZXNwb25kIHdpdGggYW4gZXJyb3Ig Y29kZSBvZiA0MjAgKFVua25vd24gQXR0cmlidXRlKSBhcwogICBzcGVjaWZpZWQgaW4gU2VjdGlv biA3LjMuMSBvZiBbUkZDNTM4OV0uCgo4LiAgU1RVTiBDbGllbnQgQmVoYXZpb3VyCgogICBvICBU aGUgY2xpZW50IGxvb2tzIGZvciB0aGUgTUVTU0FHRS1JTlRFR1JJVFkgYXR0cmlidXRlIGluIHRo ZQogICAgICByZXNwb25zZS4gIElmIE1FU1NBR0UtSU5URUdSSVRZIGlzIGFic2VudCBvciB0aGUg dmFsdWUgY29tcHV0ZWQKICAgICAgZm9yIG1lc3NhZ2UgaW50ZWdyaXR5IHVzaW5nIG1hY19rZXkg ZG9lcyBub3QgbWF0Y2ggdGhlIGNvbnRlbnRzIG9mCiAgICAgIHRoZSBNRVNTQUdFLUlOVEVHUklU WSBhdHRyaWJ1dGUgdGhlbiB0aGUgcmVzcG9uc2UgTVVTVCBiZQogICAgICBkaXNjYXJkZWQuCgog ICBvICBJZiB0aGUgYWNjZXNzIHRva2VuIGV4cGlyZXMgdGhlbiB0aGUgY2xpZW50IE1VU1Qgb2J0 YWluIGEgbmV3CiAgICAgIHRva2VuIGZyb20gdGhlIGF1dGhvcml6YXRpb24gc2VydmVyIGFuZCB1 c2UgaXQgZm9yIG5ldyBTVFVOCiAgICAgIHJlcXVlc3RzLgoKOS4gIFVzYWdlIHdpdGggVFVSTgoK ICAgVHJhdmVyc2FsIFVzaW5nIFJlbGF5IE5BVCAoVFVSTikgW1JGQzU3NjZdIGFuIGV4dGVuc2lv biB0byB0aGUgU1RVTgogICBwcm90b2NvbCBpcyBvZnRlbiB1c2VkIHRvIGltcHJvdmUgdGhlIGNv bm5lY3Rpdml0eSBvZiBQMlAKICAgYXBwbGljYXRpb25zLiAgVFVSTiBlbnN1cmVzIHRoYXQgYSBj b25uZWN0aW9uIGNhbiBiZSBlc3RhYmxpc2hlZCBldmVuCiAgIHdoZW4gb25lIG9yIGJvdGggc2lk ZXMgaXMgaW5jYXBhYmxlIG9mIGEgZGlyZWN0IFAyUCBjb25uZWN0aW9uLgogICBIb3dldmVyLCBh cyBhIHJlbGF5IHNlcnZpY2UsIGl0IGltcG9zZXMgYSBub250cml2aWFsIGNvc3Qgb24gdGhlCiAg IHNlcnZpY2UgcHJvdmlkZXIuICBUaGVyZWZvcmUsIGFjY2VzcyB0byBhIFRVUk4gc2VydmljZSBp cyBhbG1vc3QKICAgYWx3YXlzIGFjY2Vzcy1jb250cm9sbGVkLiAgSW4gb3JkZXIgdG8gYWNoaWV2 ZSB0aGlyZCBwYXJ0eQogICBhdXRob3JpemF0aW9uLCBhIHJlc291cmNlIG93bmVyIGUuZy4gIFdl YlJUQyBzZXJ2ZXIsIGF1dGhvcml6ZXMgYQogICBUVVJOIGNsaWVudCB0byBhY2Nlc3MgcmVzb3Vy Y2VzIG9uIHRoZSBUVVJOIHNlcnZlci4KCiAgIENvbnNpZGVyIHRoZSBmb2xsb3dpbmcgZXhhbXBs ZSB0aGF0IGlsbHVzdHJhdGVzIHRoZSB1c2Ugb2YgT0F1dGggMi4wCiAgIHRvIGFjaGlldmUgdGhp cmQgcGFydHkgYXV0aG9yaXphdGlvbiBmb3IgVFVSTi4gIEluIHRoaXMgZXhhbXBsZSwgYQogICBy ZXNvdXJjZSBvd25lciBpLmUuLCBXZWJSVEMgc2VydmVyLCBhdXRob3JpemVzIGEgVFVSTiBjbGll bnQgdG8KICAgYWNjZXNzIHJlc291cmNlcyBvbiBhIFRVUk4gc2VydmVyLgoKCgoKCgoKCgoKClJl ZGR5LCBldCBhbC4gICAgICAgICAgIEV4cGlyZXMgT2N0b2JlciAxNSwgMjAxNSAgICAgICAgICAg ICAgIFtQYWdlIDExXQoMCkludGVybmV0LURyYWZ0ICAgICAgU1RVTiBmb3IgM3JkIHBhcnR5IEF1 dGhvcml6YXRpb24gICAgICAgICAgQXByaWwgMjAxNQoKCiAgICAgICAgICAgICAgICAgKy0tLS0t LS0tLS0tLS0tLS0tLS0tLS0rLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLSsKICAgICAgICAg ICAgICAgICB8ICAgICBPQXV0aCAyLjAgICAgICAgIHwgICAgICAgICAgICBXZWJSVEMgICAgICAg ICAgfAogICAgICAgICAgICAgICAgICs9PT09PT09PT09PT09PT09PT09PT09Kz09PT09PT09PT09 PT09PT09PT09PT09PT09PT0rCiAgICAgICAgICAgICAgICAgfCBDbGllbnQgICAgICAgICAgICAg ICB8IFdlYlJUQyBjbGllbnQgICAgICAgICAgICAgIHwKICAgICAgICAgICAgICAgICArLS0tLS0t LS0tLS0tLS0tLS0tLS0tLSstLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tKwogICAgICAgICAg ICAgICAgIHwgUmVzb3VyY2Ugb3duZXIgICAgICAgfCBXZWJSVEMgc2VydmVyICAgICAgICAgICAg ICB8CiAgICAgICAgICAgICAgICAgKy0tLS0tLS0tLS0tLS0tLS0tLS0tLS0rLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLSsKICAgICAgICAgICAgICAgICB8IEF1dGhvcml6YXRpb24gc2VydmVy IHwgQXV0aG9yaXphdGlvbiBzZXJ2ZXIgICAgICAgfAogICAgICAgICAgICAgICAgICstLS0tLS0t LS0tLS0tLS0tLS0tLS0tKy0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0rCiAgICAgICAgICAg ICAgICAgfCBSZXNvdXJjZSBzZXJ2ZXIgICAgICB8IFRVUk4gU2VydmVyICAgICAgICAgICAgICAg IHwKICAgICAgICAgICAgICAgICArLS0tLS0tLS0tLS0tLS0tLS0tLS0tLSstLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tKwoKICAgICAgICAgRmlndXJlIDI6IE9BdXRoIHRlcm1pbm9sb2d5IG1h cHBlZCB0byBXZWJSVEMgdGVybWlub2xvZ3kKCiAgIFVzaW5nIHRoZSBPQXV0aCAyLjAgYXV0aG9y aXphdGlvbiBmcmFtZXdvcmssIGEgV2ViUlRDIGNsaWVudCAodGhpcmQtCiAgIHBhcnR5IGFwcGxp Y2F0aW9uKSBvYnRhaW5zIGxpbWl0ZWQgYWNjZXNzIHRvIGEgVFVSTiAocmVzb3VyY2Ugc2VydmVy KQogICBvbiBiZWhhbGYgb2YgdGhlIFdlYlJUQyBzZXJ2ZXIgKHJlc291cmNlIG93bmVyIG9yIGF1 dGhvcml6YXRpb24KICAgc2VydmVyKS4gIFRoZSBXZWJSVEMgY2xpZW50IHJlcXVlc3RzIGFjY2Vz cyB0byByZXNvdXJjZXMgY29udHJvbGxlZAogICBieSB0aGUgcmVzb3VyY2Ugb3duZXIgKFdlYlJU QyBzZXJ2ZXIpIGFuZCBob3N0ZWQgYnkgdGhlIHJlc291cmNlCiAgIHNlcnZlciAoVFVSTiBzZXJ2 ZXIpLiAgVGhlIFdlYlJUQyBjbGllbnQgb2J0YWlucyBhY2Nlc3MgdG9rZW4sCiAgIGxpZmV0aW1l LCBzZXNzaW9uIGtleSBhbmQga2lkLiAgVGhlIFRVUk4gY2xpZW50IGNvbnZleXMgdGhlIGFjY2Vz cwogICB0b2tlbiBhbmQgb3RoZXIgT0F1dGggMi4wIHBhcmFtZXRlcnMgbGVhcm50IGZyb20gdGhl IGF1dGhvcml6YXRpb24KICAgc2VydmVyIHRvIHRoZSBUVVJOIHNlcnZlci4gIFRoZSBUVVJOIHNl cnZlciBvYnRhaW5zIHRoZSBzZXNzaW9uIGtleQogICBmcm9tIHRoZSBhY2Nlc3MgdG9rZW4uICBU aGUgVFVSTiBzZXJ2ZXIgdmFsaWRhdGVzIHRoZSB0b2tlbiwgY29tcHV0ZXMKICAgdGhlIG1lc3Nh Z2UgaW50ZWdyaXR5IG9mIHRoZSByZXF1ZXN0IGFuZCB0YWtlcyBhcHByb3ByaWF0ZSBhY3Rpb24K ICAgaS5lLCBwZXJtaXRzIHRoZSBUVVJOIGNsaWVudCB0byBjcmVhdGUgYWxsb2NhdGlvbnMuICBU aGlzIGlzIHNob3duIGluCiAgIGFuIGFic3RyYWN0IHdheSBpbiBGaWd1cmUgMy4KCgoKCgoKCgoK CgoKCgoKCgoKCgoKCgoKUmVkZHksIGV0IGFsLiAgICAgICAgICAgRXhwaXJlcyBPY3RvYmVyIDE1 LCAyMDE1ICAgICAgICAgICAgICAgW1BhZ2UgMTJdCgwKSW50ZXJuZXQtRHJhZnQgICAgICBTVFVO IGZvciAzcmQgcGFydHkgQXV0aG9yaXphdGlvbiAgICAgICAgICBBcHJpbCAyMDE1CgoKICAgICAg ICAgICAgICAgICAgICAgICAgICAgKy0tLS0tLS0tLS0tLS0tLSsKICAgICAgICAgICAgICAgICAg ICAgICAgICAgfCAgICAgICAgICAgICAgICs8KioqKioqKwogICAgICAgICAgICArLS0tLS0tLS0t LS0tLT58IEF1dGhvcml6YXRpb24gfCAgICAgICAqCiAgICAgICAgICAgIHwgICAgICAgICAgICAg IHwgU2VydmVyICAgICAgICB8ICAgICAgICoKICAgICAgICAgICAgfCAgICstLS0tLS0tLS0tfChX ZWJSVEMgU2VydmVyKXwgICAgICAgKiAgQVMtUlMsCiAgICAgICAgICAgIHwgICB8ICAgICAgICAg IHwgICAgICAgICAgICAgICB8ICAgICAgICogIEFVVEgga2V5cwogICAoMikgICAgICB8ICAgfCAg ICAgICAgICAgKy0tLS0tLS0tLS0tLS0tLSsgICAgICAqICAgKDEpCiAgIEFjY2VzcyAgIHwgICB8 ICAoMykgICAgICAgICAgICAgICAgICAgICAgICAgICAgICoKICAgVG9rZW4gICAgfCAgIHwgQWNj ZXNzIFRva2VuICAgICAgICAgICAgICAgICAgICAgKgogICBSZXF1ZXN0ICB8ICAgfCAgICArICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAqCiAgICAgICAgICAgIHwgICB8IFNlc3Npb24gS2V5 ICAgICAgICAgICAgICAgICAgICAgICoKICAgICAgICAgICAgfCAgIHwgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgKgogICAgICAgICAgICB8ICAgViAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICBWCiAgICAgICAgKy0tLS0tLS0rLS0tKyAgICAgICAgICAgICAgICAgICAg ICAgKy0rLS0tLT0tLS0tLSsKICAgICAgICB8ICAgICAgICAgICB8ICAgICAgICAgKDQpICAgICAg ICAgICB8ICAgICAgICAgICAgfAogICAgICAgIHwgICAgICAgICAgIHwgVFVSTiBSZXF1ZXN0ICsg QWNjZXNzIHwgICAgICAgICAgICB8CiAgICAgICAgfCBXZWJSVEMgICAgfCBUb2tlbiAgICAgICAg ICAgICAgICAgfCBUVVJOICAgICAgIHwKICAgICAgICB8IENsaWVudCAgICB8LS0tLS0tLS0tLS0t LS0tLS0tLS0tLT58IFNlcnZlciAgICAgfAogICAgICAgIHwgKEFsaWNlKSAgIHwgQWxsb2NhdGUg UmVzcG9uc2UgKDUpIHwgICAgICAgICAgICB8CiAgICAgICAgfCAgICAgICAgICAgfDwtLS0tLS0t LS0tLS0tLS0tLS0tLS0tfCAgICAgICAgICAgIHwKICAgICAgICArLS0tLS0tLS0tLS0rICAgICAg ICAgICAgICAgICAgICAgICArLS0tLS0tLS0tLS0tKwoKICAgVXNlciA6IEFsaWNlCiAgICoqKio6 IE91dC1vZi1CYW5kIExvbmctVGVybSBLZXkgRXN0YWJsaXNobWVudAoKICAgICAgICAgICAgICAg ICAgICAgICAgICBGaWd1cmUgMzogSW50ZXJhY3Rpb25zCgogICBJbiB0aGUgYmVsb3cgZmlndXJl LCB0aGUgY2xpZW50IHNlbmRzIGFuIEFsbG9jYXRlIHJlcXVlc3QgdG8gdGhlCiAgIHNlcnZlciB3 aXRob3V0IGNyZWRlbnRpYWxzLiAgU2luY2UgdGhlIHNlcnZlciByZXF1aXJlcyB0aGF0IGFsbAog ICByZXF1ZXN0cyBiZSBhdXRoZW50aWNhdGVkIHVzaW5nIE9BdXRoIDIuMCwgdGhlIHNlcnZlciBy ZWplY3RzIHRoZQogICByZXF1ZXN0IHdpdGggYSA0MDEgKFVuYXV0aG9yaXplZCkgZXJyb3IgY29k ZSBhbmQgU1RVTiBhdHRyaWJ1dGUKICAgVEhJUkQtUEFSVFktQVVUSE9SSVpBVElPTi4gIFRoZSBX ZWJSVEMgY2xpZW50IG9idGFpbnMgYWNjZXNzIHRva2VuCiAgIGZyb20gdGhlIFdlYlJUQyBzZXJ2 ZXIgYW5kIHRoZW4gdHJpZXMgYWdhaW4sIHRoaXMgdGltZSBpbmNsdWRpbmcKICAgYWNjZXNzIHRv a2VuLiAgVGhpcyB0aW1lLCB0aGUgc2VydmVyIHZhbGlkYXRlcyB0aGUgdG9rZW4sIGFjY2VwdHMg dGhlCiAgIEFsbG9jYXRlIHJlcXVlc3QgYW5kIHJldHVybnMgYW4gQWxsb2NhdGUgc3VjY2VzcyBy ZXNwb25zZSBjb250YWluaW5nCiAgIChhbW9uZ3N0IG90aGVyIHRoaW5ncykgdGhlIHJlbGF5ZWQg dHJhbnNwb3J0IGFkZHJlc3MgYXNzaWduZWQgdG8gdGhlCiAgIGFsbG9jYXRpb24uCgoKCgoKCgoK CgoKCgoKUmVkZHksIGV0IGFsLiAgICAgICAgICAgRXhwaXJlcyBPY3RvYmVyIDE1LCAyMDE1ICAg ICAgICAgICAgICAgW1BhZ2UgMTNdCgwKSW50ZXJuZXQtRHJhZnQgICAgICBTVFVOIGZvciAzcmQg cGFydHkgQXV0aG9yaXphdGlvbiAgICAgICAgICBBcHJpbCAyMDE1CgoKICAgKy0tLS0tLS0tLS0t LS0tLS0tLS0rICAgICAgICAgICAgICAgICAgICAgICAgICstLS0tLS0tLSsgICstLS0tLS0tLS0r CiAgIHwgLi4uLi4uLi4uICBUVVJOICAgfCAgICAgICAgICAgICAgICAgICAgICAgICB8ICBUVVJO ICB8ICB8ICBXZWJSVEMgfAogICB8IC5XZWJSVEMgLiAgQ2xpZW50IHwgICAgICAgICAgICAgICAg ICAgICAgICAgfCAgICAgICAgfCAgfCAgICAgICAgIHwKICAgfCAuQ2xpZW50IC4gICAgICAgICB8 ICAgICAgICAgICAgICAgICAgICAgICAgIHwgU2VydmVyIHwgIHwgIFNlcnZlciB8CiAgIHwgLi4u Li4uLi4uICAgICAgICAgfCAgICAgICAgICAgICAgICAgICAgICAgICB8ICAgICAgICB8ICB8ICAg ICAgICAgfAogICArLS0tLS0tLS0tLS0tLS0tLS0tLSsgICAgICAgICAgICAgICAgICAgICAgICAg Ky0tLS0tLS0tKyAgKy0tLS0tLS0tLSsKICAgICB8ICAgICAgIHwgICAgICAgICAgIEFsbG9jYXRl IHJlcXVlc3QgICAgICAgICAgICAgICAgfCAgICAgICAgIHwKICAgICB8ICAgICAgIHwtLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0+fCAgICAgICAgIHwKICAgICB8ICAg ICAgIHwgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgfCAgICAgICAg IHwKICAgICB8ICAgICAgIHwgICAgICAgICBBbGxvY2F0ZSBlcnJvciByZXNwb25zZSAgICAgICAg ICAgfCAgICAgICAgIHwKICAgICB8ICAgICAgIHwgICAgICAgICAoNDAxIFVuYXV0aG9yaXplZCkg ICAgICAgICAgICAgICAgfCAgICAgICAgIHwKICAgICB8ICAgICAgIHw8LS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tfCAgICAgICAgIHwKICAgICB8ICAgICAgIHwgICAg ICAgICBUSElSRC1QQVJUWS1BVVRIT1JJWkFUSU9OICAgICAgICAgfCAgICAgICAgIHwKICAgICB8 ICAgICAgIHwgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgfCAgICAg ICAgIHwKICAgICB8ICAgICAgIHwgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgfCAgICAgICAgIHwKICAgICB8ICAgICAgIHwgICAgICBIVFRQIFJlcXVlc3QgZm9yIHRv a2VuICAgICAgICAgICAgICAgfCAgICAgICAgIHwKICAgICB8LS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tPnwKICAgICB8ICAgICAgIHwg ICAgICBIVFRQIFJlc3BvbnNlIHdpdGggdG9rZW4gcGFyYW1ldGVycyAgfCAgICAgICAgIHwKICAg ICB8PC0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLXwKICAgICB8T0F1dGggMi4wICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgfCAgICAgICAgIHwKICAgICAgQXR0cmlidXRlcyAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgfCAgICAgICAgIHwKICAgICB8LS0tLS0tPnwgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgfCAgICAgICAgIHwKICAgICB8ICAgICAg IHwgICAgQWxsb2NhdGUgcmVxdWVzdCBBQ0NFU1MtVE9LRU4gICAgICAgICAgfCAgICAgICAgIHwK ICAgICB8ICAgICAgIHwtLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0+ fCAgICAgICAgIHwKICAgICB8ICAgICAgIHwgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgfCAgICAgICAgIHwKICAgICB8ICAgICAgIHwgICAgICAgICBBbGxvY2F0ZSBz dWNjZXNzIHJlc3BvbnNlICAgICAgICAgfCAgICAgICAgIHwKICAgICB8ICAgICAgIHw8LS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tfCAgICAgICAgIHwKICAgICB8ICAg ICAgIHwgICAgICAgICAgICAgVFVSTiBNZXNzYWdlcyAgICAgICAgICAgICAgICAgfCAgICAgICAg IHwKICAgICB8ICAgICAgIHwgICAgICAvLy8vLy8gaW50ZWdyaXR5IHByb3RlY3RlZCAvLy8vLy8g ICAgfCAgICAgICAgIHwKICAgICB8ICAgICAgIHwgICAgICAvLy8vLy8gaW50ZWdyaXR5IHByb3Rl Y3RlZCAvLy8vLy8gICAgfCAgICAgICAgIHwKICAgICB8ICAgICAgIHwgICAgICAvLy8vLy8gaW50 ZWdyaXR5IHByb3RlY3RlZCAvLy8vLy8gICAgfCAgICAgICAgIHwKCiAgICAgICAgICAgICAgICAg RmlndXJlIDQ6IFRVUk4gVGhpcmQgUGFydHkgQXV0aG9yaXphdGlvbgoKICAgQ2hhbmdlcyBzcGVj aWZpYyB0byBUVVJOIGFyZSBsaXN0ZWQgYmVsb3c6CgogICBvICBUaGUgYWNjZXNzIHRva2VuIGNh biBiZSByZXVzZWQgZm9yIG11bHRpcGxlIEFsbG9jYXRlIHJlcXVlc3RzIHRvCiAgICAgIHRoZSBz YW1lIFRVUk4gc2VydmVyLiAgVGhlIFRVUk4gY2xpZW50IE1VU1QgaW5jbHVkZSB0aGUgQUNDRVNT LQogICAgICBUT0tFTiBhdHRyaWJ1dGUgb25seSBpbiBBbGxvY2F0ZSBhbmQgUmVmcmVzaCByZXF1 ZXN0cy4gIFNpbmNlIHRoZQogICAgICBhY2Nlc3MgdG9rZW4gaXMgdmFsaWQgZm9yIGEgc3BlY2lm aWMgcGVyaW9kIG9mIHRpbWUsIHRoZSBUVVJOCiAgICAgIHNlcnZlciBjYW4gY2FjaGUgaXQgc28g dGhhdCBpdCBjYW4gY2hlY2sgaWYgdGhlIGFjY2VzcyB0b2tlbiBpbiBhCiAgICAgIG5ldyBhbGxv Y2F0aW9uIHJlcXVlc3QgbWF0Y2hlcyBvbmUgb2YgdGhlIGNhY2hlZCB0b2tlbnMgYW5kIGF2b2lk cwogICAgICB0aGUgbmVlZCB0byBkZWNyeXB0IHRoZSB0b2tlbi4KCiAgIG8gIFRoZSBsaWZldGlt ZSBwcm92aWRlZCBieSB0aGUgVFVSTiBzZXJ2ZXIgaW4gdGhlIEFsbG9jYXRlIGFuZAogICAgICBS ZWZyZXNoIHJlc3BvbnNlcyBNVVNUIGJlIGxlc3MgdGhhbiBvciBlcXVhbCB0byB0aGUgbGlmZXRp bWUgb2YKICAgICAgdGhlIHRva2VuLiAgSXQgaXMgUkVDT01NRU5ERUQgdGhhdCB0aGUgVFVSTiBz ZXJ2ZXIgY2FsY3VsYXRlIHRoZQogICAgICBtYXhpbXVtIGFsbG93ZWQgbGlmZXRpbWUgdmFsdWUg dXNpbmcgdGhlIGZvcm11bGE6CgoKClJlZGR5LCBldCBhbC4gICAgICAgICAgIEV4cGlyZXMgT2N0 b2JlciAxNSwgMjAxNSAgICAgICAgICAgICAgIFtQYWdlIDE0XQoMCkludGVybmV0LURyYWZ0ICAg ICAgU1RVTiBmb3IgM3JkIHBhcnR5IEF1dGhvcml6YXRpb24gICAgICAgICAgQXByaWwgMjAxNQoK CiAgICAgICAgbGlmZXRpbWUgKyBEZWx0YSAtIGFicyhSRG5ldyAtIFRTKQoKICAgICAgVGhlIFJF Q09NTUVOREVEIHZhbHVlIGZvciB0aGUgYWxsb3dlZCBEZWx0YSBpcyA1IHNlY29uZHMuCgogICBv ICBJZiB0aGUgYWNjZXNzIHRva2VuIGV4cGlyZXMgdGhlbiB0aGUgY2xpZW50IE1VU1Qgb2J0YWlu IGEgbmV3CiAgICAgIHRva2VuIGZyb20gdGhlIGF1dGhvcml6YXRpb24gc2VydmVyIGFuZCB1c2Ug aXQgZm9yIG5ldwogICAgICBhbGxvY2F0aW9ucy4gIFRoZSBjbGllbnQgTVVTVCB1c2UgdGhlIG5l dyB0b2tlbiB0byByZWZyZXNoCiAgICAgIGV4aXN0aW5nIGFsbG9jYXRpb25zLiAgVGhpcyB3YXkg Y2xpZW50IGhhcyB0byBtYWludGFpbiBvbmx5IG9uZQogICAgICB0b2tlbiBwZXIgVFVSTiBzZXJ2 ZXIuCgoxMC4gIE9wZXJhdGlvbmFsIENvbnNpZGVyYXRpb25zCgogICBUaGUgZm9sbG93aW5nIG9w ZXJhdGlvbmFsIGNvbnNpZGVyYXRpb25zIHNob3VsZCBiZSB0YWtlbiBpbnRvCiAgIGFjY291bnQ6 CgogICBvICBFYWNoIGF1dGhvcml6YXRpb24gc2VydmVyIHNob3VsZCBtYWludGFpbiB0aGUgbGlz dCBvZiBTVFVOIHNlcnZlcnMKICAgICAgZm9yIHdoaWNoIGl0IHdpbGwgZ3JhbnQgdG9rZW5zLCBh bmQgdGhlIGxvbmctdGVybSBzZWNyZXQgc2hhcmVkCiAgICAgIHdpdGggZWFjaCBvZiB0aG9zZSBT VFVOIHNlcnZlcnMuCgogICBvICBJZiBtYW51YWwgY29uZmlndXJhdGlvbiAoU2VjdGlvbiA0LjEu MikgaXMgdXNlZCB0byBlc3RhYmxpc2gKICAgICAgc3ltbWV0cmljIGtleXMsIHRoZSBuZWNlc3Nh cnkgaW5mb3JtYXRpb24gd2hpY2ggaW5jbHVkZXMgbG9uZy10ZXJtCiAgICAgIGtleSAoSyksIGVu Y3J5cHRpb24gYW5kIEhNQUMgYWxnb3JpdGhtcyBoYXZlIHRvIGJlIGNvbmZpZ3VyZWQgb24KICAg ICAgZWFjaCBhdXRob3JpemF0aW9uIHNlcnZlciBhbmQgU1RVTiBzZXJ2ZXIgZm9yIGVhY2gga2lk LiAgVGhlCiAgICAgIGNsaWVudCBvYnRhaW5zIHRoZSBzZXNzaW9uIGtleSBhbmQgSE1BQyBhbGdv cml0aG0gZnJvbSB0aGUKICAgICAgYXV0aG9yaXphdGlvbiBzZXJ2ZXIgaW4gY29tcGFueSB3aXRo IHRoZSB0b2tlbi4KCiAgIG8gIFdoZW4gYSBTVFVOIGNsaWVudCBzZW5kcyBhIHJlcXVlc3QgdG8g Z2V0IGFjY2VzcyB0byBhIHBhcnRpY3VsYXIKICAgICAgU1RVTiBzZXJ2ZXIgKFMpIHRoZSBhdXRo b3JpemF0aW9uIHNlcnZlciBtdXN0IGVuc3VyZSB0aGF0IGl0CiAgICAgIHNlbGVjdHMgdGhlIGFw cHJvcHJpYXRlIGtpZCwgYWNjZXNzLXRva2VuIGRlcGVuZGluZyBvbiB0aGUgc2VydmVyCiAgICAg IFMuCgoxMS4gIFNlY3VyaXR5IENvbnNpZGVyYXRpb25zCgogICBXaGVuIE9BdXRoIDIuMCBpcyB1 c2VkIHRoZSBpbnRlcmFjdGlvbiBiZXR3ZWVuIHRoZSBjbGllbnQgYW5kIHRoZQogICBhdXRob3Jp emF0aW9uIHNlcnZlciByZXF1aXJlcyBUcmFuc3BvcnQgTGF5ZXIgU2VjdXJpdHkgKFRMUykgd2l0 aCBhCiAgIGNpcGhlcnN1aXRlIG9mZmVyaW5nIGNvbmZpZGVudGlhbGl0eSBwcm90ZWN0aW9uIGFu ZCB0aGUgZ3VpZGFuY2UKICAgZ2l2ZW4gaW4gW0ktRC5pZXRmLXV0YS10bHMtYmNwXSBtdXN0IGJl IGZvbGxvd2VkIHRvIGF2b2lkIGF0dGFja3Mgb24KICAgVExTLiAgVGhlIHNlc3Npb24ga2V5IE1V U1QgTk9UIGJlIHRyYW5zbWl0dGVkIGluIGNsZWFyIHNpbmNlIHRoaXMKICAgd291bGQgY29tcGxl dGVseSBkZXN0cm95IHRoZSBzZWN1cml0eSBiZW5lZml0cyBvZiB0aGUgcHJvcG9zZWQKICAgc2No ZW1lLiAgQW4gYXR0YWNrZXIgdHJ5aW5nIHRvIHJlcGxheSBtZXNzYWdlIHdpdGggQUNDRVNTLVRP S0VOCiAgIGF0dHJpYnV0ZSBjYW4gYmUgbWl0aWdhdGVkIGJ5IGZyZXF1ZW50IGNoYW5nZXMgb2Yg bm9uY2UgdmFsdWUgYXMKICAgZGlzY3Vzc2VkIGluIHNlY3Rpb24gMTAuMiBvZiBbUkZDNTM4OV0u ICBUaGUgY2xpZW50IG1heSBrbm93IHNvbWUKICAgKGJ1dCBub3QgYWxsKSBvZiB0aGUgdG9rZW4g ZmllbGRzIGVuY3J5cHRlZCB3aXRoIGEgdW5rbm93biBzZWNyZXQga2V5CiAgIGFuZCB0aGUgdG9r ZW4gY2FuIGJlIHN1YmplY3RlZCB0byBrbm93bi1wbGFpbnRleHQgYXR0YWNrLCBidXQgQUVTIGlz CiAgIHNlY3VyZSBhZ2FpbnN0IHRoaXMgYXR0YWNrLgoKICAgQW4gYXR0YWNrZXIgbWF5IHJlbW92 ZSB0aGUgVEhJUkQtUEFSVFktQVVUSE9SSVpBVElPTiBTVFVOIGF0dHJpYnV0ZQogICBmcm9tIHRo ZSBlcnJvciBtZXNzYWdlIGZvcmNpbmcgdGhlIGNsaWVudCB0byBwaWNrIGZpcnN0IHBhcnR5CgoK ClJlZGR5LCBldCBhbC4gICAgICAgICAgIEV4cGlyZXMgT2N0b2JlciAxNSwgMjAxNSAgICAgICAg ICAgICAgIFtQYWdlIDE1XQoMCkludGVybmV0LURyYWZ0ICAgICAgU1RVTiBmb3IgM3JkIHBhcnR5 IEF1dGhvcml6YXRpb24gICAgICAgICAgQXByaWwgMjAxNQoKCiAgIGF1dGhlbnRpY2F0aW9uLCB0 aGlzIGF0dGFjayBtYXkgYmUgbWl0aWdhdGVkIGJ5IG9wdGluZyBmb3IgVHJhbnNwb3J0CiAgIExh eWVyIFNlY3VyaXR5IChUTFMpIFtSRkM1MjQ2XSBvciBEYXRhZ3JhbSBUcmFuc3BvcnQgTGF5ZXIg U2VjdXJpdHkKICAgKERUTFMpIFtSRkM2MzQ3XSBhcyBhIHRyYW5zcG9ydCBwcm90b2NvbCBmb3Ig U2Vzc2lvbiBUcmF2ZXJzYWwKICAgVXRpbGl0aWVzIGZvciBOQVQgKFNUVU4pLCBhcyBkZWZpbmVk IGluIFtSRkM1Mzg5XWFuZCBbUkZDNzM1MF0uCgogICBUaHJlYXQgbWl0aWdhdGlvbiBkaXNjdXNz ZWQgaW4gc2VjdGlvbiA1IG9mCiAgIFtJLUQuaWV0Zi1vYXV0aC1wb3AtYXJjaGl0ZWN0dXJlXSBh bmQgc2VjdXJpdHkgY29uc2lkZXJhdGlvbnMgaW4KICAgW1JGQzUzODldIGFyZSB0byBiZSB0YWtl biBpbnRvIGFjY291bnQuCgoxMi4gIElBTkEgQ29uc2lkZXJhdGlvbnMKCiAgIFtQYXJhZ3JhcGhz IGJlbG93IGluIGJyYWNlcyBzaG91bGQgYmUgcmVtb3ZlZCBieSB0aGUgUkZDIEVkaXRvciB1cG9u CiAgIHB1YmxpY2F0aW9uXQoKICAgW0lBTkEgaXMgcmVxdWVzdGVkIHRvIGFkZCB0aGUgZm9sbG93 aW5nIGF0dHJpYnV0ZXMgdG8gdGhlIFNUVU4KICAgYXR0cmlidXRlIHJlZ2lzdHJ5IFtpYW5hLXN0 dW5dLCBUaGUgVEhJUkQtUEFSVFktQVVUSE9SSVpBVElPTgogICBhdHRyaWJ1dGUgcmVxdWlyZXMg dGhhdCBJQU5BIGFsbG9jYXRlIGEgdmFsdWUgaW4gdGhlICJTVFVOIGF0dHJpYnV0ZXMKICAgUmVn aXN0cnkiIGZyb20gdGhlIGNvbXByZWhlbnNpb24tb3B0aW9uYWwgcmFuZ2UgKDB4ODAwMC0weEJG RkYpXQoKICAgVGhpcyBkb2N1bWVudCBkZWZpbmVzIHRoZSBUSElSRC1QQVJUWS1BVVRIT1JJWkFU SU9OIFNUVU4gYXR0cmlidXRlLAogICBkZXNjcmliZWQgaW4gU2VjdGlvbiA2LiAgSUFOQSBoYXMg YWxsb2NhdGVkIHRoZSBjb21wcmVoZW5zaW9uLQogICBvcHRpb25hbCBjb2RlcG9pbnQgVEJEIGZv ciB0aGlzIGF0dHJpYnV0ZS4KCiAgIFtUaGUgQUNDRVNTLVRPS0VOIGF0dHJpYnV0ZSByZXF1aXJl cyB0aGF0IElBTkEgYWxsb2NhdGUgYSB2YWx1ZSBpbgogICB0aGUgIlNUVU4gYXR0cmlidXRlcyBS ZWdpc3RyeSIgZnJvbSB0aGUgY29tcHJlaGVuc2lvbi1yZXF1aXJlZCByYW5nZQogICAoMHgwMDAw LTB4M0ZGRildCgogICBUaGlzIGRvY3VtZW50IGRlZmluZXMgdGhlIEFDQ0VTUy1UT0tFTiBTVFVO IGF0dHJpYnV0ZSwgZGVzY3JpYmVkIGluCiAgIFNlY3Rpb24gNi4gIElBTkEgaGFzIGFsbG9jYXRl ZCB0aGUgY29tcHJlaGVuc2lvbi1yZXF1aXJlZCBjb2RlcG9pbnQKICAgVEJEIGZvciB0aGlzIGF0 dHJpYnV0ZS4KCjEzLiAgQWNrbm93bGVkZ2VtZW50cwoKICAgQXV0aG9ycyB3b3VsZCBsaWtlIHRv IHRoYW5rIERhbiBXaW5nLCBQYWwgTWFydGluc2VuLCBPbGVnIE1vc2thbGVua28sCiAgIENoYXJs ZXMgRWNrZWwsIFNwZW5jZXIgRGF3a2lucywgSGFubmVzIFRzY2hvZmVuaWcsIFlhcm9uIFNoZWZm ZXIsIFRvbQogICBUYXlsb3IsIENocmlzdGVyIEhvbG1iZXJnLCBQZXRlIFJlc25pY2ssIEthdGhs ZWVuIE1vcmlhcnR5LCBSaWNoYXJkCiAgIEJhcm5lcywgU3RlcGhlbiBGYXJyZWxsIGFuZCBBbGlz c2EgQ29vcGVyIGZvciBjb21tZW50cyBhbmQgcmV2aWV3LgogICBUaGUgYXV0aG9ycyB3b3VsZCBs aWtlIHRvIGdpdmUgc3BlY2lhbCB0aGFua3MgdG8gQnJhbmRvbiBXaWxsaWFtcyBmb3IKICAgaGlz IGhlbHAuCgogICBUaGFua3MgdG8gT2xlZyBNb3NrYWxlbmtvIGZvciBwcm92aWRpbmcgdG9rZW4g c2FtcGxlcyBpbiB0aGUKICAgQXBwZW5kaXggc2VjdGlvbi4KCjE0LiAgUmVmZXJlbmNlcwoKCgoK CgoKUmVkZHksIGV0IGFsLiAgICAgICAgICAgRXhwaXJlcyBPY3RvYmVyIDE1LCAyMDE1ICAgICAg ICAgICAgICAgW1BhZ2UgMTZdCgwKSW50ZXJuZXQtRHJhZnQgICAgICBTVFVOIGZvciAzcmQgcGFy dHkgQXV0aG9yaXphdGlvbiAgICAgICAgICBBcHJpbCAyMDE1CgoKMTQuMS4gIE5vcm1hdGl2ZSBS ZWZlcmVuY2VzCgogICBbSS1ELmlldGYtam9zZS1qc29uLXdlYi1hbGdvcml0aG1zXQogICAgICAg ICAgICAgIEpvbmVzLCBNLiwgIkpTT04gV2ViIEFsZ29yaXRobXMgKEpXQSkiLCBkcmFmdC1pZXRm LWpvc2UtCiAgICAgICAgICAgICAganNvbi13ZWItYWxnb3JpdGhtcy00MCAod29yayBpbiBwcm9n cmVzcyksIEphbnVhcnkgMjAxNS4KCiAgIFtSRkMyMTE5XSAgQnJhZG5lciwgUy4sICJLZXkgd29y ZHMgZm9yIHVzZSBpbiBSRkNzIHRvIEluZGljYXRlCiAgICAgICAgICAgICAgUmVxdWlyZW1lbnQg TGV2ZWxzIiwgQkNQIDE0LCBSRkMgMjExOSwgTWFyY2ggMTk5Ny4KCiAgIFtSRkM0NjQ4XSAgSm9z ZWZzc29uLCBTLiwgIlRoZSBCYXNlMTYsIEJhc2UzMiwgYW5kIEJhc2U2NCBEYXRhCiAgICAgICAg ICAgICAgRW5jb2RpbmdzIiwgUkZDIDQ2NDgsIE9jdG9iZXIgMjAwNi4KCiAgIFtSRkM0ODY4XSAg S2VsbHksIFMuIGFuZCBTLiBGcmFua2VsLCAiVXNpbmcgSE1BQy1TSEEtMjU2LCBITUFDLVNIQS0K ICAgICAgICAgICAgICAzODQsIGFuZCBITUFDLVNIQS01MTIgd2l0aCBJUHNlYyIsIFJGQyA0ODY4 LCBNYXkgMjAwNy4KCiAgIFtSRkM1MTE2XSAgTWNHcmV3LCBELiwgIkFuIEludGVyZmFjZSBhbmQg QWxnb3JpdGhtcyBmb3IgQXV0aGVudGljYXRlZAogICAgICAgICAgICAgIEVuY3J5cHRpb24iLCBS RkMgNTExNiwgSmFudWFyeSAyMDA4LgoKICAgW1JGQzUzODldICBSb3NlbmJlcmcsIEouLCBNYWh5 LCBSLiwgTWF0dGhld3MsIFAuLCBhbmQgRC4gV2luZywKICAgICAgICAgICAgICAiU2Vzc2lvbiBU cmF2ZXJzYWwgVXRpbGl0aWVzIGZvciBOQVQgKFNUVU4pIiwgUkZDIDUzODksCiAgICAgICAgICAg ICAgT2N0b2JlciAyMDA4LgoKICAgW1JGQzY3NDldICBIYXJkdCwgRC4sICJUaGUgT0F1dGggMi4w IEF1dGhvcml6YXRpb24gRnJhbWV3b3JrIiwgUkZDCiAgICAgICAgICAgICAgNjc0OSwgT2N0b2Jl ciAyMDEyLgoKICAgW2lhbmEtc3R1bl0KICAgICAgICAgICAgICBJQU5BLCAsICJJQU5BOiBTVFVO IEF0dHJpYnV0ZXMiLCBBcHJpbCAyMDExLAogICAgICAgICAgICAgIDxodHRwOi8vd3d3LmlhbmEu b3JnL2Fzc2lnbm1lbnRzL3N0dW4tcGFyYW1ldGVycy9zdHVuLXBhCiAgICAgICAgICAgICAgcmFt ZXRlcnMueG1sPi4KCjE0LjIuICBJbmZvcm1hdGl2ZSBSZWZlcmVuY2VzCgogICBbSS1ELmlldGYt am9zZS1qc29uLXdlYi1lbmNyeXB0aW9uXQogICAgICAgICAgICAgIEpvbmVzLCBNLiBhbmQgSi4g SGlsZGVicmFuZCwgIkpTT04gV2ViIEVuY3J5cHRpb24gKEpXRSkiLAogICAgICAgICAgICAgIGRy YWZ0LWlldGYtam9zZS1qc29uLXdlYi1lbmNyeXB0aW9uLTQwICh3b3JrIGluIHByb2dyZXNzKSwK ICAgICAgICAgICAgICBKYW51YXJ5IDIwMTUuCgogICBbSS1ELmlldGYtam9zZS1qc29uLXdlYi1z aWduYXR1cmVdCiAgICAgICAgICAgICAgSm9uZXMsIE0uLCBCcmFkbGV5LCBKLiwgYW5kIE4uIFNh a2ltdXJhLCAiSlNPTiBXZWIKICAgICAgICAgICAgICBTaWduYXR1cmUgKEpXUykiLCBkcmFmdC1p ZXRmLWpvc2UtanNvbi13ZWItc2lnbmF0dXJlLTQxCiAgICAgICAgICAgICAgKHdvcmsgaW4gcHJv Z3Jlc3MpLCBKYW51YXJ5IDIwMTUuCgogICBbSS1ELmlldGYtb2F1dGgtanNvbi13ZWItdG9rZW5d CiAgICAgICAgICAgICAgSm9uZXMsIE0uLCBCcmFkbGV5LCBKLiwgYW5kIE4uIFNha2ltdXJhLCAi SlNPTiBXZWIgVG9rZW4KICAgICAgICAgICAgICAoSldUKSIsIGRyYWZ0LWlldGYtb2F1dGgtanNv bi13ZWItdG9rZW4tMzIgKHdvcmsgaW4KICAgICAgICAgICAgICBwcm9ncmVzcyksIERlY2VtYmVy IDIwMTQuCgoKCgoKUmVkZHksIGV0IGFsLiAgICAgICAgICAgRXhwaXJlcyBPY3RvYmVyIDE1LCAy MDE1ICAgICAgICAgICAgICAgW1BhZ2UgMTddCgwKSW50ZXJuZXQtRHJhZnQgICAgICBTVFVOIGZv ciAzcmQgcGFydHkgQXV0aG9yaXphdGlvbiAgICAgICAgICBBcHJpbCAyMDE1CgoKICAgW0ktRC5p ZXRmLW9hdXRoLXBvcC1hcmNoaXRlY3R1cmVdCiAgICAgICAgICAgICAgSHVudCwgUC4sIFJpY2hl ciwgSi4sIE1pbGxzLCBXLiwgTWlzaHJhLCBQLiwgYW5kIEguCiAgICAgICAgICAgICAgVHNjaG9m ZW5pZywgIk9BdXRoIDIuMCBQcm9vZi1vZi1Qb3NzZXNzaW9uIChQb1ApIFNlY3VyaXR5CiAgICAg ICAgICAgICAgQXJjaGl0ZWN0dXJlIiwgZHJhZnQtaWV0Zi1vYXV0aC1wb3AtYXJjaGl0ZWN0dXJl LTAxICh3b3JrCiAgICAgICAgICAgICAgaW4gcHJvZ3Jlc3MpLCBNYXJjaCAyMDE1LgoKICAgW0kt RC5pZXRmLW9hdXRoLXBvcC1rZXktZGlzdHJpYnV0aW9uXQogICAgICAgICAgICAgIEJyYWRsZXks IEouLCBIdW50LCBQLiwgSm9uZXMsIE0uLCBhbmQgSC4gVHNjaG9mZW5pZywKICAgICAgICAgICAg ICAiT0F1dGggMi4wIFByb29mLW9mLVBvc3Nlc3Npb246IEF1dGhvcml6YXRpb24gU2VydmVyIHRv CiAgICAgICAgICAgICAgQ2xpZW50IEtleSBEaXN0cmlidXRpb24iLCBkcmFmdC1pZXRmLW9hdXRo LXBvcC1rZXktCiAgICAgICAgICAgICAgZGlzdHJpYnV0aW9uLTAxICh3b3JrIGluIHByb2dyZXNz KSwgTWFyY2ggMjAxNS4KCiAgIFtJLUQuaWV0Zi1ydGN3ZWItb3ZlcnZpZXddCiAgICAgICAgICAg ICAgQWx2ZXN0cmFuZCwgSC4sICJPdmVydmlldzogUmVhbCBUaW1lIFByb3RvY29scyBmb3IKICAg ICAgICAgICAgICBCcm93c2VyLWJhc2VkIEFwcGxpY2F0aW9ucyIsIGRyYWZ0LWlldGYtcnRjd2Vi LW92ZXJ2aWV3LTEzCiAgICAgICAgICAgICAgKHdvcmsgaW4gcHJvZ3Jlc3MpLCBOb3ZlbWJlciAy MDE0LgoKICAgW0ktRC5pZXRmLXRyYW0tc3R1bmJpc10KICAgICAgICAgICAgICBQZXRpdC1IdWd1 ZW5pbiwgTS4sIFNhbGd1ZWlybywgRy4sIFJvc2VuYmVyZywgSi4sIFdpbmcsCiAgICAgICAgICAg ICAgRC4sIE1haHksIFIuLCBhbmQgUC4gTWF0dGhld3MsICJTZXNzaW9uIFRyYXZlcnNhbAogICAg ICAgICAgICAgIFV0aWxpdGllcyBmb3IgTkFUIChTVFVOKSIsIGRyYWZ0LWlldGYtdHJhbS1zdHVu YmlzLTA0CiAgICAgICAgICAgICAgKHdvcmsgaW4gcHJvZ3Jlc3MpLCBNYXJjaCAyMDE1LgoKICAg W0ktRC5pZXRmLXV0YS10bHMtYmNwXQogICAgICAgICAgICAgIFNoZWZmZXIsIFkuLCBIb2x6LCBS LiwgYW5kIFAuIFNhaW50LUFuZHJlLAogICAgICAgICAgICAgICJSZWNvbW1lbmRhdGlvbnMgZm9y IFNlY3VyZSBVc2Ugb2YgVExTIGFuZCBEVExTIiwgZHJhZnQtCiAgICAgICAgICAgICAgaWV0Zi11 dGEtdGxzLWJjcC0xMSAod29yayBpbiBwcm9ncmVzcyksIEZlYnJ1YXJ5IDIwMTUuCgogICBbSS1E Lm1jZ3Jldy1hZWFkLWFlcy1jYmMtaG1hYy1zaGEyXQogICAgICAgICAgICAgIE1jR3JldywgRC4s IEZvbGV5LCBKLiwgYW5kIEsuIFBhdGVyc29uLCAiQXV0aGVudGljYXRlZAogICAgICAgICAgICAg IEVuY3J5cHRpb24gd2l0aCBBRVMtQ0JDIGFuZCBITUFDLVNIQSIsIGRyYWZ0LW1jZ3Jldy1hZWFk LQogICAgICAgICAgICAgIGFlcy1jYmMtaG1hYy1zaGEyLTA1ICh3b3JrIGluIHByb2dyZXNzKSwg SnVseSAyMDE0LgoKICAgW1JGQzUyNDZdICBEaWVya3MsIFQuIGFuZCBFLiBSZXNjb3JsYSwgIlRo ZSBUcmFuc3BvcnQgTGF5ZXIgU2VjdXJpdHkKICAgICAgICAgICAgICAoVExTKSBQcm90b2NvbCBW ZXJzaW9uIDEuMiIsIFJGQyA1MjQ2LCBBdWd1c3QgMjAwOC4KCiAgIFtSRkM1NzY2XSAgTWFoeSwg Ui4sIE1hdHRoZXdzLCBQLiwgYW5kIEouIFJvc2VuYmVyZywgIlRyYXZlcnNhbCBVc2luZwogICAg ICAgICAgICAgIFJlbGF5cyBhcm91bmQgTkFUIChUVVJOKTogUmVsYXkgRXh0ZW5zaW9ucyB0byBT ZXNzaW9uCiAgICAgICAgICAgICAgVHJhdmVyc2FsIFV0aWxpdGllcyBmb3IgTkFUIChTVFVOKSIs IFJGQyA1NzY2LCBBcHJpbCAyMDEwLgoKICAgW1JGQzYzNDddICBSZXNjb3JsYSwgRS4gYW5kIE4u IE1vZGFkdWd1LCAiRGF0YWdyYW0gVHJhbnNwb3J0IExheWVyCiAgICAgICAgICAgICAgU2VjdXJp dHkgVmVyc2lvbiAxLjIiLCBSRkMgNjM0NywgSmFudWFyeSAyMDEyLgoKICAgW1JGQzY4MTldICBM b2RkZXJzdGVkdCwgVC4sIE1jR2xvaW4sIE0uLCBhbmQgUC4gSHVudCwgIk9BdXRoIDIuMAogICAg ICAgICAgICAgIFRocmVhdCBNb2RlbCBhbmQgU2VjdXJpdHkgQ29uc2lkZXJhdGlvbnMiLCBSRkMg NjgxOSwKICAgICAgICAgICAgICBKYW51YXJ5IDIwMTMuCgoKCgoKUmVkZHksIGV0IGFsLiAgICAg ICAgICAgRXhwaXJlcyBPY3RvYmVyIDE1LCAyMDE1ICAgICAgICAgICAgICAgW1BhZ2UgMThdCgwK SW50ZXJuZXQtRHJhZnQgICAgICBTVFVOIGZvciAzcmQgcGFydHkgQXV0aG9yaXphdGlvbiAgICAg ICAgICBBcHJpbCAyMDE1CgoKICAgW1JGQzcxNTldICBCcmF5LCBULiwgIlRoZSBKYXZhU2NyaXB0 IE9iamVjdCBOb3RhdGlvbiAoSlNPTikgRGF0YQogICAgICAgICAgICAgIEludGVyY2hhbmdlIEZv cm1hdCIsIFJGQyA3MTU5LCBNYXJjaCAyMDE0LgoKICAgW1JGQzczNTBdICBQZXRpdC1IdWd1ZW5p biwgTS4gYW5kIEcuIFNhbGd1ZWlybywgIkRhdGFncmFtIFRyYW5zcG9ydAogICAgICAgICAgICAg IExheWVyIFNlY3VyaXR5IChEVExTKSBhcyBUcmFuc3BvcnQgZm9yIFNlc3Npb24gVHJhdmVyc2Fs CiAgICAgICAgICAgICAgVXRpbGl0aWVzIGZvciBOQVQgKFNUVU4pIiwgUkZDIDczNTAsIEF1Z3Vz dCAyMDE0LgoKICAgW1JGQzczNzZdICBSZWRkeSwgVC4sIFJhdmluZHJhbmF0aCwgUi4sIFBlcnVt YWwsIE0uLCBhbmQgQS4gWWVnaW4sCiAgICAgICAgICAgICAgIlByb2JsZW1zIHdpdGggU2Vzc2lv biBUcmF2ZXJzYWwgVXRpbGl0aWVzIGZvciBOQVQgKFNUVU4pCiAgICAgICAgICAgICAgTG9uZy1U ZXJtIEF1dGhlbnRpY2F0aW9uIGZvciBUcmF2ZXJzYWwgVXNpbmcgUmVsYXlzIGFyb3VuZAogICAg ICAgICAgICAgIE5BVCAoVFVSTikiLCBSRkMgNzM3NiwgU2VwdGVtYmVyIDIwMTQuCgpBcHBlbmRp eCBBLiAgU2FtcGxlIHRpY2tldHMKCiAgIElucHV0IGRhdGEgKHNhbWUgZm9yIGFsbCBzYW1wbGVz IGJlbG93KToKCiAgIC8vU1RVTiBTRVJWRVIgTkFNRQogICBzZXJ2ZXJfbmFtZSA9ICJibGFja2Rv dy5jYXJsZW9uLmdvdiI7CgogICAvL1NoYXJlZCBrZXkgYmV0d2VlbiBBUyBhbmQgUlMKCiAgIGxv bmdfdGVybV9rZXkgPSBceDQ4XHg0N1x4NmJceDZhXHgzM1x4MzJceDRiXHg0YVx4NDdceDY5XHg3 NVx4NzkKICAgICAgICAgICAgICAgICAgIFx4MzBceDM5XHgzOFx4NzNceDY0XHg2Nlx4NjFceDcx XHg2Mlx4NGVceDZhXHg0ZgogICAgICAgICAgICAgICAgICAgXHg2OVx4NjFceDdhXHgzN1x4MzFc eDM5XHgzMlx4MzMKCiAgIC8vTUFDIGtleSBvZiB0aGUgc2Vzc2lvbiAoaW5jbHVkZWQgaW4gdGhl IHRva2VuKQogICBtYWNfa2V5ID0gXHg1YVx4NmJceDczXHg2YVx4NzBceDc3XHg2NVx4NmZceDY5 XHg3OFx4NThceDZkXHg3Nlx4NmUKICAgICAgICAgICAgIFx4MzZceDM3XHgzNVx4MzNceDM0XHg2 ZDsKCiAgIC8vbGVuZ3RoIG9mIHRoZSBNQUMga2V5CiAgIG1hY19rZXlfbGVuZ3RoICA9ICAyMDsK CiAgIC8vVGhlIHRpbWVzdGFtcCBmaWVsZCBpbiB0aGUgdG9rZW4KICAgdG9rZW5fdGltZXN0YW1w ID0gOTI0NzAzMDA3MDQ3Njg7CgogICAvL1RoZSBsaWZldGltZSBvZiB0aGUgdG9rZW4KICAgdG9r ZW5fbGlmZXRpbWUgPSAzNjAwOwoKICAgLy9ub25jZSBmb3IgQUVBRCB3aGVuIEFFQUQgaXMgdXNl ZAogICBhZWFkX25vbmNlID0gXHg2OFx4MzRceDZhXHgzM1x4NmJceDMyXHg2Y1x4MzJceDZlXHgz NFx4NjJceDM1OwoKICAgU2FtcGxlOgoKICAgMSkKCiAgICAgdG9rZW4gZW5jcnlwdGlvbiBhbGdv cml0aG0gPSBBRUFEX0FFU18yNTZfR0NNCiAgICAgdG9rZW4gYXV0aCBhbGdvcml0aG0gPSBOL0EK CgoKClJlZGR5LCBldCBhbC4gICAgICAgICAgIEV4cGlyZXMgT2N0b2JlciAxNSwgMjAxNSAgICAg ICAgICAgICAgIFtQYWdlIDE5XQoMCkludGVybmV0LURyYWZ0ICAgICAgU1RVTiBmb3IgM3JkIHBh cnR5IEF1dGhvcml6YXRpb24gICAgICAgICAgQXByaWwgMjAxNQoKCiAgICAgUmVzdWx0OgogICAg IEFTX1JTIGtleSAoMzIgYnl0ZXMpID0KICAgICBceDQ4XHg0N1x4NmJceDZhXHgzM1x4MzJceDRi XHg0YVx4NDdceDY5XHg3NVx4NzkKICAgICBceDMwXHgzOVx4MzhceDczXHg2NFx4NjZceDYxXHg3 MVx4NjJceDRlXHg2YVx4NGYKICAgICBceDY5XHg2MVx4N2FceDM3XHgzMVx4MzlceDMyXHgzMwoK ICAgICBBVVRIIGtleSA9IE4vQQoKICAgICBFbmNyeXB0ZWQgdG9rZW4gKDYyIGJ5dGVzID0gMzQg KyAxNiArIDEyKSA9CgogICAgXHhkNFx4ODZceDVjXHg1ZFx4NTlceGZiXHgzZlx4ZTNceGY2XHhm MVx4ZDhceGMzXHgyMlx4YzJceDIyXHgyNlx4OGQKICAgIFx4MmVceGYwXHhiZVx4Mlx4NWJceGJk XHgxM1x4NDlceDg5XHg2ZVx4YTVceGM1XHg1MVx4ZWVceGVlXHg3Zlx4ZDkKICAgIFx4ZTRceDQx XHhkN1x4Y2JceDUxXHgyMFx4NDBceGNjXHhjNVx4NTNceDkwXHgyZlx4ZGNceGJiXHg4ZFx4NTNc eDY4CiAgICBceDM0XHg2YVx4MzNceDZiXHgzMlx4NmNceDMyXHg2ZVx4MzRceDYyXHgzNQoKCgog ICAgICAgICAgICAgICAgICAgICAgICAgRmlndXJlIDU6IFNhbXBsZSB0aWNrZXRzCgpBcHBlbmRp eCBCLiAgSW50ZXJhY3Rpb24gYmV0d2VlbiBjbGllbnQgYW5kIGF1dGhvcml6YXRpb24gc2VydmVy CgogICBDbGllbnQgbWFrZXMgYW4gSFRUUCByZXF1ZXN0IHRvIGFuIGF1dGhvcml6YXRpb24gc2Vy dmVyIHRvIG9idGFpbiBhCiAgIHRva2VuIHRoYXQgY2FuIGJlIHVzZWQgdG8gYXZhaWwgaXRzZWxm IG9mIFNUVU4gc2VydmljZXMuICBUaGUgU1RVTgogICB0b2tlbiBpcyByZXR1cm5lZCBpbiBKU09O IHN5bnRheCBbUkZDNzE1OV0sIGFsb25nIHdpdGggb3RoZXIgT0F1dGgKICAgMi4wIHBhcmFtZXRl cnMgbGlrZSB0b2tlbiB0eXBlLCBrZXksIHRva2VuIGxpZmV0aW1lIGFuZCBraWQgZGVmaW5lZAog ICBpbiBbSS1ELmlldGYtb2F1dGgtcG9wLWtleS1kaXN0cmlidXRpb25dLgoKCgoKCgoKCgoKCgoK CgoKCgoKCgoKCgoKUmVkZHksIGV0IGFsLiAgICAgICAgICAgRXhwaXJlcyBPY3RvYmVyIDE1LCAy MDE1ICAgICAgICAgICAgICAgW1BhZ2UgMjBdCgwKSW50ZXJuZXQtRHJhZnQgICAgICBTVFVOIGZv ciAzcmQgcGFydHkgQXV0aG9yaXphdGlvbiAgICAgICAgICBBcHJpbCAyMDE1CgoKICAgKy0tLS0t LS0tLS0tLS0tLS0tLS0rICAgICAgICAgICAgICAgICAgICAgICAgICstLS0tLS0tLSsgICstLS0t LS0tLS0rCiAgIHwgLi4uLi4uLi4uICBTVFVOICAgfCAgICAgICAgICAgICAgICAgICAgICAgICB8 ICBTVFVOICB8ICB8ICBXZWJSVEMgfAogICB8IC5XZWJSVEMgLiAgQ2xpZW50IHwgICAgICAgICAg ICAgICAgICAgICAgICAgfCAgICAgICAgfCAgfCAgICAgICAgIHwKICAgfCAuQ2xpZW50IC4gICAg ICAgICB8ICAgICAgICAgICAgICAgICAgICAgICAgIHwgU2VydmVyIHwgIHwgIFNlcnZlciB8CiAg IHwgLi4uLi4uLi4uICAgICAgICAgfCAgICAgICAgICAgICAgICAgICAgICAgICB8ICAgICAgICB8 ICB8ICAgICAgICAgfAogICArLS0tLS0tLS0tLS0tLS0tLS0tLSsgICAgICAgICAgICAgICAgICAg ICAgICAgKy0tLS0tLS0tKyAgKy0tLS0tLS0tLSsKICAgICB8ICAgICAgIHwgICAgICAgICAgIFNU VU4gcmVxdWVzdCAgICAgICAgICAgICAgICAgICAgfCAgICAgICAgIHwKICAgICB8ICAgICAgIHwt LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0+fCAgICAgICAgIHwKICAg ICB8ICAgICAgIHwgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgfCAg ICAgICAgIHwKICAgICB8ICAgICAgIHwgICAgICAgICBTVFVOIGVycm9yIHJlc3BvbnNlICAgICAg ICAgICAgICAgfCAgICAgICAgIHwKICAgICB8ICAgICAgIHwgICAgICAgICAoNDAxIFVuYXV0aG9y aXplZCkgICAgICAgICAgICAgICAgfCAgICAgICAgIHwKICAgICB8ICAgICAgIHw8LS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tfCAgICAgICAgIHwKICAgICB8ICAgICAg IHwgICAgICAgICBUSElSRC1QQVJUWS1BVVRIT1JJWkFUSU9OICAgICAgICAgfCAgICAgICAgIHwK ICAgICB8ICAgICAgIHwgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg fCAgICAgICAgIHwKICAgICB8ICAgICAgIHwgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgfCAgICAgICAgIHwKICAgICB8ICAgICAgIHwgICAgICBIVFRQIFJlcXVlc3Qg Zm9yIHRva2VuICAgICAgICAgICAgICAgfCAgICAgICAgIHwKICAgICB8LS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tPnwKICAgICB8ICAg ICAgIHwgICAgICBIVFRQIFJlc3BvbnNlIHdpdGggdG9rZW4gcGFyYW1ldGVycyAgfCAgICAgICAg IHwKICAgICB8PC0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLXwKICAgICB8T0F1dGggMi4wICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgfCAgICAgICAgIHwKICAgICAgQXR0cmlidXRlcyAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgfCAgICAgICAgIHwKICAgICB8LS0tLS0tPnwgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgfCAgICAgICAgIHwKICAgICB8 ICAgICAgIHwgICAgU1RVTiByZXF1ZXN0IHdpdGggQUNDRVNTLVRPS0VOICAgICAgICAgfCAgICAg ICAgIHwKICAgICB8ICAgICAgIHwtLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0+fCAgICAgICAgIHwKICAgICB8ICAgICAgIHwgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgfCAgICAgICAgIHwKICAgICB8ICAgICAgIHwgICAgICAgICBTVFVO IHN1Y2Nlc3MgcmVzcG9uc2UgICAgICAgICAgICAgfCAgICAgICAgIHwKICAgICB8ICAgICAgIHw8 LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tfCAgICAgICAgIHwKICAg ICB8ICAgICAgIHwgICAgICAgICAgICAgU1RVTiBNZXNzYWdlcyAgICAgICAgICAgICAgICAgfCAg ICAgICAgIHwKICAgICB8ICAgICAgIHwgICAgICAvLy8vLy8gaW50ZWdyaXR5IHByb3RlY3RlZCAv Ly8vLy8gICAgfCAgICAgICAgIHwKICAgICB8ICAgICAgIHwgICAgICAvLy8vLy8gaW50ZWdyaXR5 IHByb3RlY3RlZCAvLy8vLy8gICAgfCAgICAgICAgIHwKICAgICB8ICAgICAgIHwgICAgICAvLy8v Ly8gaW50ZWdyaXR5IHByb3RlY3RlZCAvLy8vLy8gICAgfCAgICAgICAgIHwKCiAgICAgICAgICAg ICAgICAgRmlndXJlIDY6IFNUVU4gVGhpcmQgUGFydHkgQXV0aG9yaXphdGlvbgoKICAgW0ktRC5p ZXRmLW9hdXRoLXBvcC1rZXktZGlzdHJpYnV0aW9uXSBkZXNjcmliZXMgdGhlIGludGVyYWN0aW9u CiAgIGJldHdlZW4gdGhlIGNsaWVudCBhbmQgdGhlIGF1dGhvcml6YXRpb24gc2VydmVyLiAgRm9y IGV4YW1wbGUsIHRoZQogICBjbGllbnQgbGVhcm5zIHRoZSBTVFVOIHNlcnZlciBuYW1lICJzdHVu MUBleGFtcGxlLmNvbSIgZnJvbSBUSElSRC0KICAgUEFSVFktQVVUSE9SSVpBVElPTiBhdHRyaWJ1 dGUgdmFsdWUgYW5kIG1ha2VzIHRoZSBmb2xsb3dpbmcgSFRUUAogICByZXF1ZXN0IGZvciB0aGUg YWNjZXNzIHRva2VuIHVzaW5nIHRyYW5zcG9ydC1sYXllciBzZWN1cml0eSAod2l0aAogICBleHRy YSBsaW5lIGJyZWFrcyBmb3IgZGlzcGxheSBwdXJwb3NlcyBvbmx5KToKCgoKCgoKCgoKCgpSZWRk eSwgZXQgYWwuICAgICAgICAgICBFeHBpcmVzIE9jdG9iZXIgMTUsIDIwMTUgICAgICAgICAgICAg ICBbUGFnZSAyMV0KDApJbnRlcm5ldC1EcmFmdCAgICAgIFNUVU4gZm9yIDNyZCBwYXJ0eSBBdXRo b3JpemF0aW9uICAgICAgICAgIEFwcmlsIDIwMTUKCgogICAgICAgIEhUVFAvMS4xCiAgICAgICAg SG9zdDogc2VydmVyLmV4YW1wbGUuY29tCiAgICAgICAgQ29udGVudC1UeXBlOiBhcHBsaWNhdGlv bi94LXd3dy1mb3JtLXVybGVuY29kZWQKICAgICAgICBhdWQ9c3R1bjFAZXhhbXBsZS5jb20KICAg ICAgICB0aW1lc3RhbXA9MTM2MTQ3MTYyOQogICAgICAgIGdyYW50X3R5cGU9aW1wbGljaXQKICAg ICAgICB0b2tlbl90eXBlPXBvcAogICAgICAgIGFsZz1ITUFDLVNIQS0xIEhNQUMtU0hBLTI1Ni0x MjgKCiAgICAgICAgICAgICAgICAgICAgICAgICAgICAgRmlndXJlIDc6IFJlcXVlc3QKCiAgIFtJ LUQuaWV0Zi10cmFtLXN0dW5iaXNdIHdpbGwgc3VwcG9ydCBoYXNoIGFnaWxpdHkgYW5kIGFjY29t cGxpc2ggdGhpcwogICBhZ2lsaXR5IGJ5IGNvbnZleWluZyB0aGUgSE1BQyBhbGdvcml0aG1zIHN1 cHBvcnRlZCBieSB0aGUgU1RVTiBzZXJ2ZXIKICAgYWxvbmcgd2l0aCBhIFNUVU4gZXJyb3IgbWVz c2FnZSB0byB0aGUgY2xpZW50LiAgVGhlIGNsaWVudCB0aGVuCiAgIHNpZ25hbHMgdGhlIGludGVy c2VjdGlvbi1zZXQgb2YgYWxnb3JpdGhtcyBzdXBwb3J0ZWQgYnkgaXQgYW5kIHRoZQogICBTVFVO IHNlcnZlciB0byB0aGUgYXV0aG9yaXphdGlvbiBzZXJ2ZXIgaW4gdGhlICdhbGcnIHBhcmFtZXRl cgogICBkZWZpbmVkIGluIFtJLUQuaWV0Zi1vYXV0aC1wb3Ata2V5LWRpc3RyaWJ1dGlvbl0uICBU aGUgYXV0aG9yaXphdGlvbgogICBzZXJ2ZXIgc2VsZWN0cyBhbiBITUFDIGFsZ29yaXRobSBmcm9t IHRoZSBsaXN0IG9mIGFsZ29yaXRobXMgdGhlCiAgIGNsaWVudCBwcm92aWRlZCBhbmQgZGV0ZXJt aW5lcyBsZW5ndGggb2YgdGhlIG1hY19rZXkgYmFzZWQgb24gdGhlCiAgIHNlbGVjdGVkIEhNQUMg YWxnb3JpdGhtLiAgTm90ZSB0aGF0IHVudGlsIFNUVU4gc3VwcG9ydHMgaGFzaCBhZ2lsaXR5CiAg IEhNQUMtU0hBMSBpcyB0aGUgb25seSB2YWxpZCBoYXNoIGFsZ29yaXRobSB0aGF0IHRoZSBjbGll bnQgY2FuIHNpZ25hbAogICB0byB0aGUgYXV0aG9yaXphdGlvbiBzZXJ2ZXIgYW5kIHZpY2UtdmVy c2EuCgogICBJZiB0aGUgY2xpZW50IGlzIGF1dGhvcml6ZWQgdGhlbiB0aGUgYXV0aG9yaXphdGlv biBzZXJ2ZXIgaXNzdWVzIGFuCiAgIGFjY2VzcyB0b2tlbi4gIEFuIGV4YW1wbGUgb2Ygc3VjY2Vz c2Z1bCByZXNwb25zZToKCiAgICAgICAgSFRUUC8xLjEgMjAwIE9LCiAgICAgICAgQ29udGVudC1U eXBlOiBhcHBsaWNhdGlvbi9qc29uCiAgICAgICAgQ2FjaGUtQ29udHJvbDogbm8tc3RvcmUKCiAg ICAgICAgewogICAgICAgICAgImFjY2Vzc190b2tlbiI6CiAgICJVMkZzZEdWa1gxOHFKSy9ra1dt UmNuZkhnbHJWVEpTcFM2eVUzMmttSG1PcmZHeUkzbTFnUWoxalJQc3IwdUJiCiAgIEhjdHV5Y0Fn c2ZSWDduSlcyQmR1a0d5S01YU2lOR05uQnppZ2tBb2ZQNitaM3ZrSjFRNXBXYmZTUnJvT2tXQm4i LAogICAgICAgICAgInRva2VuX3R5cGUiOiJwb3AiLAogICAgICAgICAgImV4cGlyZXNfaW4iOjE4 MDAsCiAgICAgICAgICAia2lkIjoiMjJCSWp4VTkzaC9JZ3dFYiIsCiAgICAgICAgICAia2V5Ijoi djUxTjYyT002NWt5TXZmVEkwOE8iCiAgICAgICAgICAiYWxnIjpITUFDLVNIQS0yNTYtMTI4CiAg ICAgICAgfQoKICAgICAgICAgICAgICAgICAgICAgICAgICAgIEZpZ3VyZSA4OiBSZXNwb25zZQoK QXV0aG9ycycgQWRkcmVzc2VzCgoKCgoKCgpSZWRkeSwgZXQgYWwuICAgICAgICAgICBFeHBpcmVz IE9jdG9iZXIgMTUsIDIwMTUgICAgICAgICAgICAgICBbUGFnZSAyMl0KDApJbnRlcm5ldC1EcmFm dCAgICAgIFNUVU4gZm9yIDNyZCBwYXJ0eSBBdXRob3JpemF0aW9uICAgICAgICAgIEFwcmlsIDIw MTUKCgogICBUaXJ1bWFsZXN3YXIgUmVkZHkKICAgQ2lzY28gU3lzdGVtcywgSW5jLgogICBDZXNz bmEgQnVzaW5lc3MgUGFyaywgVmFydGh1ciBIb2JsaQogICBTYXJqYXB1ciBNYXJhdGhhbGxpIE91 dGVyIFJpbmcgUm9hZAogICBCYW5nYWxvcmUsIEthcm5hdGFrYSAgNTYwMTAzCiAgIEluZGlhCgog ICBFbWFpbDogdGlyZWRkeUBjaXNjby5jb20KCgogICBQcmFzaGFudGggUGF0aWwKICAgQ2lzY28g U3lzdGVtcywgSW5jLgogICBCYW5nYWxvcmUKICAgSW5kaWEKCiAgIEVtYWlsOiBwcmFzcGF0aUBj aXNjby5jb20KCgogICBSYW0gTW9oYW4gUmF2aW5kcmFuYXRoCiAgIENpc2NvIFN5c3RlbXMsIElu Yy4KICAgQ2Vzc25hIEJ1c2luZXNzIFBhcmssCiAgIEthZGFiZWVzYW5haGFsbGkgVmlsbGFnZSwg VmFydGh1ciBIb2JsaSwKICAgU2FyamFwdXItTWFyYXRoYWhhbGxpIE91dGVyIFJpbmcgUm9hZAog ICBCYW5nYWxvcmUsIEthcm5hdGFrYSAgNTYwMTAzCiAgIEluZGlhCgogICBFbWFpbDogcm1vaGFu ckBjaXNjby5jb20KCgogICBKdXN0aW4gVWJlcnRpCiAgIEdvb2dsZQogICA3NDcgNnRoIEF2ZSBT CiAgIEtpcmtsYW5kLCBXQQogICA5ODAzMwogICBVU0EKCiAgIEVtYWlsOiBqdXN0aW5AdWJlcnRp Lm5hbWUKCgoKCgoKCgoKCgoKCgpSZWRkeSwgZXQgYWwuICAgICAgICAgICBFeHBpcmVzIE9jdG9i ZXIgMTUsIDIwMTUgICAgICAgICAgICAgICBbUGFnZSAyM10K --_003_913383AAA69FF945B8F946018B75898A4120D5EBxmbrcdx10ciscoc_-- From nobody Mon Apr 13 23:02:41 2015 Return-Path: X-Original-To: tram@ietfa.amsl.com Delivered-To: tram@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 72ECA1B33FE; Mon, 13 Apr 2015 23:02:38 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -14.511 X-Spam-Level: X-Spam-Status: No, score=-14.511 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_HI=-5, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id DqCGMOlvXVO7; Mon, 13 Apr 2015 23:02:37 -0700 (PDT) Received: from rcdn-iport-3.cisco.com (rcdn-iport-3.cisco.com [173.37.86.74]) (using TLSv1 with cipher RC4-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 06F291B33FB; Mon, 13 Apr 2015 23:02:36 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=2258; q=dns/txt; s=iport; t=1428991357; x=1430200957; h=from:to:cc:subject:date:message-id:references: in-reply-to:content-transfer-encoding:mime-version; bh=gVrEF8tgI9yBNeLg7Pt28WA/qohyOZYLJVyoiifNTA4=; b=Dc5jxeOKrIFxQbkJVPHDqSakayZ3kOHLqUjvgLn8FVLCpeodzSzoYgRS gMGXXPOAr+De86qIXV7fpZ/XcRS4QQJtWA/bkdx4uckNSqR9Fa+JizdQU tBUkcifQ/fcVjAGMtfHLhipNJU1RcZ/X1yQ3bEQ0e7LKeEBnedhADgqX/ U=; X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: A0ARBQA5rCxV/4gNJK1cgwxSXAWDEMFAgj2GAQIcgSpMAQEBAQEBfoQfAQEBBCMRMxIMBAIBCA4DBAEBAQICBhkEAwICAh8RFAEICAIEAQ0FCIgOAxENth+QTw2FPwEBAQEBAQEBAQEBAQEBAQEBAQEBARMEgSGKCoJIgWkaFhsHBoJiL4EWAQSRDIN5hEmPf4Y6IoIzgTxvgUR/AQEB X-IronPort-AV: E=Sophos;i="5.11,574,1422921600"; d="scan'208";a="411613691" Received: from alln-core-3.cisco.com ([173.36.13.136]) by rcdn-iport-3.cisco.com with ESMTP; 14 Apr 2015 06:02:37 +0000 Received: from xhc-aln-x05.cisco.com (xhc-aln-x05.cisco.com [173.36.12.79]) by alln-core-3.cisco.com (8.14.5/8.14.5) with ESMTP id t3E62asC017997 (version=TLSv1/SSLv3 cipher=AES128-SHA bits=128 verify=FAIL); Tue, 14 Apr 2015 06:02:36 GMT Received: from xmb-rcd-x10.cisco.com ([169.254.15.220]) by xhc-aln-x05.cisco.com ([173.36.12.79]) with mapi id 14.03.0195.001; Tue, 14 Apr 2015 01:02:35 -0500 From: "Tirumaleswar Reddy (tireddy)" To: Oleg Moskalenko , Martin Thomson Thread-Topic: [tram] Stephen Farrell's Discuss on draft-ietf-tram-turn-third-party-authz-13: (with DISCUSS and COMMENT) Thread-Index: AQHQc8XlvscJvCv8tEiY7AOvXxiXD51G/ZcAgAALUcCABI95gIAAuwQA//+zguA= Date: Tue, 14 Apr 2015 06:02:34 +0000 Message-ID: <913383AAA69FF945B8F946018B75898A4120D628@xmb-rcd-x10.cisco.com> References: <20150410193813.20376.40907.idtracker@ietfa.amsl.com> <55282B4E.4000409@akamai.com> <913383AAA69FF945B8F946018B75898A411FFC5F@xmb-rcd-x10.cisco.com> In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.65.68.121] Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 MIME-Version: 1.0 Archived-At: Cc: "tram-chairs@ietf.org" , "tram@ietf.org" , Brandon Williams , "rlb@ipv.sx" , "Salz, Rich" , "Stephen Farrell \(stephen.farrell@cs.tcd.ie\)" Subject: Re: [tram] Stephen Farrell's Discuss on draft-ietf-tram-turn-third-party-authz-13: (with DISCUSS and COMMENT) X-BeenThere: tram@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "Discussing the creation of a Turn Revised And Modernized \(TRAM\) WG, which goal is to consolidate the various initiatives to update TURN and STUN." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 14 Apr 2015 06:02:38 -0000 PiAtLS0tLU9yaWdpbmFsIE1lc3NhZ2UtLS0tLQ0KPiBGcm9tOiBPbGVnIE1vc2thbGVua28gW21h aWx0bzptb20wNDAyNjdAZ21haWwuY29tXQ0KPiBTZW50OiBUdWVzZGF5LCBBcHJpbCAxNCwgMjAx NSAxMDo1NyBBTQ0KPiBUbzogTWFydGluIFRob21zb24NCj4gQ2M6IFRpcnVtYWxlc3dhciBSZWRk eSAodGlyZWRkeSk7IHRyYW0tY2hhaXJzQGlldGYub3JnOyB0cmFtQGlldGYub3JnOw0KPiBCcmFu ZG9uIFdpbGxpYW1zOyBybGJAaXB2LnN4OyBTYWx6LCBSaWNoOyBTdGVwaGVuIEZhcnJlbGwNCj4g KHN0ZXBoZW4uZmFycmVsbEBjcy50Y2QuaWUpDQo+IFN1YmplY3Q6IFJlOiBbdHJhbV0gU3RlcGhl biBGYXJyZWxsJ3MgRGlzY3VzcyBvbiBkcmFmdC1pZXRmLXRyYW0tdHVybi10aGlyZC0NCj4gcGFy dHktYXV0aHotMTM6ICh3aXRoIERJU0NVU1MgYW5kIENPTU1FTlQpDQo+IA0KPiBPbiBNb24sIEFw ciAxMywgMjAxNSBhdCAxMToxNyBBTSwgTWFydGluIFRob21zb24NCj4gPG1hcnRpbi50aG9tc29u QGdtYWlsLmNvbT4gd3JvdGU6DQo+ID4NCj4gPiBTZWN0aW9uIDQgZG9lc24ndCBwZXJtaXQgYW55 IGFkZGl0aW9uYWwgaW5mb3JtYXRpb24gdG8gYmUgY2FycmllZCBpbg0KPiA+IHRoZSB0b2tlbi4g IFRoZXJlZm9yZSwgdGhlIFNUVU4vVFVSTiBzZXJ2ZXIgaXMgdW5hYmxlIHRvIGFwcGx5IGFueQ0K PiA+IGFkZGl0aW9uYWwgcG9saWNpZXMgdGhhdCB0aGUgYXV0aG9yaXphdGlvbiBzZXJ2ZXIgbWln aHQgaW1wb3NlLCBzdWNoDQo+ID4gYXMgbGltaXRzIG9uIHRoZSBsZW5ndGggb2YgdGhlIHNlc3Np b24sIHRoZSBudW1iZXIgb2YgcG9ydHMgYWxsb2NhdGVkLA0KPiA+IG9yIHRoZSBiYW5kd2lkdGgg dGhhdCBpcyBhbGxvY2F0ZWQuICAoT3Igd2hhdGV2ZXIgd2UgbWlnaHQgbGF0ZXINCj4gPiBjb25j ZWl2ZSBvZi4pDQo+IA0KPiBJIGJlbGlldmUgdGhhdCBleHRyYSB0b2tlbiBpbmZvcm1hdGlvbiBp cyBhIHZlcnkgdmVyeSBiYWQgaWRlYSAtIGl0IGtpbGxzIHRoZQ0KPiB3aG9sZSBpbnRlcm9wZXJh YmlsaXR5IHRoaW5nIGluIHRoZSBkcmFmdC4gSWYgd2UgYXJlIGFkZGluZyAiZXh0cmEiDQo+IGlu Zm9ybWF0aW9uIHRvIHRoZSB0b2tlbiwgd2UgY2FuIGFzIHdlbGwganVzdCBraWxsIHRoZSBkcmFm dCBhbmQgdGVsbCB0aGUgU1RVTg0KPiBzZXJ2ZXIgZGV2ZWxvcGVycyAiZG8gd2hhdGV2ZXIgeW91 IHdhbnQsIHNlY3VyZSB0aGUgc3R1ZmYgc29tZWhvdywgd2UgZG8NCj4gbm90IGNhcmUiLg0KDQpJ dCB3YXMgZGlzY3Vzc2VkIGluIHRoZSBXRyBhbmQgZGVjaXNpb24gd2FzIG5vdCB0byBjYXJyeSBh bnkgZXh0cmEgdG9rZW4gaW5mb3JtYXRpb24gc28gYXMgdG8ga2VlcCB0aGUgdG9rZW4gc2l6ZSBz bWFsbC4gSW4gZnV0dXJlIGFuIG91dC1vZi1iYW5kIGNvbW11bmljYXRpb24gbWVjaGFuaXNtIGIv dyBTVFVOIGFuZCBhdXRob3JpemF0aW9uIHNlcnZlciB0byBleGNoYW5nZSB0aGUgdG9rZW4gcmVs YXRlZCBtZXRhZGF0YSBjYW4gYmUgZGVmaW5lZCBzaW1pbGFyIHRvIHRoZSBPQXV0aCAyLjAgVG9r ZW4gSW50cm9zcGVjdGlvbiBtZXRob2QgZGVmaW5lZCBpbiBodHRwczovL3Rvb2xzLmlldGYub3Jn L2h0bWwvZHJhZnQtaWV0Zi1vYXV0aC1pbnRyb3NwZWN0aW9uLTA3LiANCg0KLVRpcnUNCg== From nobody Mon Apr 13 23:11:58 2015 Return-Path: X-Original-To: tram@ietfa.amsl.com Delivered-To: tram@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 6716E1B3413; Mon, 13 Apr 2015 23:11:55 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.75 X-Spam-Level: X-Spam-Status: No, score=-1.75 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_ENVFROM_END_DIGIT=0.25, FREEMAIL_FROM=0.001, SPF_PASS=-0.001] autolearn=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Mj7NvGk6bCJf; Mon, 13 Apr 2015 23:11:54 -0700 (PDT) Received: from mail-wg0-x230.google.com (mail-wg0-x230.google.com [IPv6:2a00:1450:400c:c00::230]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 10A431B3412; Mon, 13 Apr 2015 23:11:54 -0700 (PDT) Received: by wgso17 with SMTP id o17so36423wgs.1; Mon, 13 Apr 2015 23:11:52 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :cc:content-type:content-transfer-encoding; bh=7apUoGYf4DiBBW/M7UoDrnUiw5N0UnZcgm6TMILVEHs=; b=Y7nf2GtZrXXkmpUlLuWbROhLIWDjLnTRMvZjcEgjj5ei30pPS7NkRqPVgxMzLEWjFV q0OjOMJyP/TWXO6HsBx8EcrTBX1cg/bE2MpA4hp2AsFOZyFeNcNennA5y2ciydpbpACU YZvz2nwHx9EqwM9afw594aPU3hUSdT5wsB/Ytt/axMPjigWLo3mbuACmharqYyfY7UN2 zDtTdWZmDrbKg4OTBRxrXvUSgtxpiByehcHQxCU3DzoUZdF3By+WjY9w4VuMzBC7OLvU dWLA8tCASkXI5WEDcwrfenmDBDmVFcRAsVYWAcUzAo1tcSHnSjuWb5Jfj9icaPoZmbAV 4Zng== MIME-Version: 1.0 X-Received: by 10.180.80.105 with SMTP id q9mr9856332wix.52.1428991912858; Mon, 13 Apr 2015 23:11:52 -0700 (PDT) Received: by 10.194.190.7 with HTTP; Mon, 13 Apr 2015 23:11:52 -0700 (PDT) In-Reply-To: <913383AAA69FF945B8F946018B75898A4120D628@xmb-rcd-x10.cisco.com> References: <20150410193813.20376.40907.idtracker@ietfa.amsl.com> <55282B4E.4000409@akamai.com> <913383AAA69FF945B8F946018B75898A411FFC5F@xmb-rcd-x10.cisco.com> <913383AAA69FF945B8F946018B75898A4120D628@xmb-rcd-x10.cisco.com> Date: Mon, 13 Apr 2015 23:11:52 -0700 Message-ID: From: Oleg Moskalenko To: "Tirumaleswar Reddy (tireddy)" Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: quoted-printable Archived-At: Cc: "tram-chairs@ietf.org" , "tram@ietf.org" , Brandon Williams , "rlb@ipv.sx" , "Salz, Rich" , Martin Thomson , "Stephen Farrell \(stephen.farrell@cs.tcd.ie\)" Subject: Re: [tram] Stephen Farrell's Discuss on draft-ietf-tram-turn-third-party-authz-13: (with DISCUSS and COMMENT) X-BeenThere: tram@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "Discussing the creation of a Turn Revised And Modernized \(TRAM\) WG, which goal is to consolidate the various initiatives to update TURN and STUN." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 14 Apr 2015 06:11:55 -0000 On Mon, Apr 13, 2015 at 11:02 PM, Tirumaleswar Reddy (tireddy) wrote: >> >> >> I believe that extra token information is a very very bad idea - it kill= s the >> whole interoperability thing in the draft. If we are adding "extra" >> information to the token, we can as well just kill the draft and tell th= e STUN >> server developers "do whatever you want, secure the stuff somehow, we do >> not care". > > It was discussed in the WG and decision was not to carry any extra token = information so as to keep the token size small. In future an out-of-band co= mmunication mechanism b/w STUN and authorization server to exchange the tok= en related metadata can be defined similar to the OAuth 2.0 Token Introspec= tion method defined in https://tools.ietf.org/html/draft-ietf-oauth-introsp= ection-07. > if that extra information is formal and well-defined, then that's fine. I was against free-formated extra fields. Thanks Oleg From nobody Tue Apr 14 05:37:22 2015 Return-Path: X-Original-To: tram@ietfa.amsl.com Delivered-To: tram@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id DB14D1A0067 for ; Tue, 14 Apr 2015 05:37:21 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.611 X-Spam-Level: X-Spam-Status: No, score=-2.611 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id EOX7t_4nWmcV for ; Tue, 14 Apr 2015 05:37:19 -0700 (PDT) Received: from prod-mail-xrelay07.akamai.com (prod-mail-xrelay07.akamai.com [72.246.2.115]) by ietfa.amsl.com (Postfix) with ESMTP id D4D901A00A7 for ; Tue, 14 Apr 2015 05:37:14 -0700 (PDT) Received: from prod-mail-xrelay07.akamai.com (localhost.localdomain [127.0.0.1]) by postfix.imss70 (Postfix) with ESMTP id 9B30447723 for ; Tue, 14 Apr 2015 12:37:13 +0000 (GMT) Received: from prod-mail-relay07.akamai.com (prod-mail-relay07.akamai.com [172.17.121.112]) by prod-mail-xrelay07.akamai.com (Postfix) with ESMTP id 7DF164774F for ; Tue, 14 Apr 2015 12:37:13 +0000 (GMT) Received: from [172.28.115.172] (unknown [172.28.115.172]) by prod-mail-relay07.akamai.com (Postfix) with ESMTP id 7A48B80047 for ; Tue, 14 Apr 2015 12:37:13 +0000 (GMT) Message-ID: <552D09F9.9090404@akamai.com> Date: Tue, 14 Apr 2015 08:37:13 -0400 From: Brandon Williams User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:31.0) Gecko/20100101 Thunderbird/31.5.0 MIME-Version: 1.0 To: tram@ietf.org References: <20150410193813.20376.40907.idtracker@ietfa.amsl.com> <55282B4E.4000409@akamai.com> <913383AAA69FF945B8F946018B75898A411FFC5F@xmb-rcd-x10.cisco.com> <913383AAA69FF945B8F946018B75898A4120D628@xmb-rcd-x10.cisco.com> In-Reply-To: <913383AAA69FF945B8F946018B75898A4120D628@xmb-rcd-x10.cisco.com> Content-Type: text/plain; charset=windows-1252; format=flowed Content-Transfer-Encoding: 7bit Archived-At: Subject: Re: [tram] Stephen Farrell's Discuss on draft-ietf-tram-turn-third-party-authz-13: (with DISCUSS and COMMENT) X-BeenThere: tram@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "Discussing the creation of a Turn Revised And Modernized \(TRAM\) WG, which goal is to consolidate the various initiatives to update TURN and STUN." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 14 Apr 2015 12:37:22 -0000 I don't think OOB communication b/w the STUN and auth servers is a solution to the problem of wanting to provide additional details in the token. It defeats a large part of the purpose of moving to a token model in the first place, which was to avoid the need for these two servers to have to communicate directly with each other. I agree with Martin that it would be useful to have the capability to communicate additional information in the token, and I don't recall that it was decided that the token wouldn't have this capability (unless by decided you mean there wasn't enough interest in the discussion). I don't agree that this would necessarily be bad for interoperability, provided that individual bits of additional information are never required to be present or required to be understood if they are present. A list of TLVs at the end of the data space would not be particularly difficult to support. I don't feel strongly enough about providing such a mechanism to push for it, but I would be supportive if someone else does. --Brandon On 04/14/2015 02:02 AM, Tirumaleswar Reddy (tireddy) wrote: >> -----Original Message----- >> From: Oleg Moskalenko [mailto:mom040267@gmail.com] >> Sent: Tuesday, April 14, 2015 10:57 AM >> To: Martin Thomson >> Cc: Tirumaleswar Reddy (tireddy); tram-chairs@ietf.org; tram@ietf.org; >> Brandon Williams; rlb@ipv.sx; Salz, Rich; Stephen Farrell >> (stephen.farrell@cs.tcd.ie) >> Subject: Re: [tram] Stephen Farrell's Discuss on draft-ietf-tram-turn-third- >> party-authz-13: (with DISCUSS and COMMENT) >> >> On Mon, Apr 13, 2015 at 11:17 AM, Martin Thomson >> wrote: >>> >>> Section 4 doesn't permit any additional information to be carried in >>> the token. Therefore, the STUN/TURN server is unable to apply any >>> additional policies that the authorization server might impose, such >>> as limits on the length of the session, the number of ports allocated, >>> or the bandwidth that is allocated. (Or whatever we might later >>> conceive of.) >> >> I believe that extra token information is a very very bad idea - it kills the >> whole interoperability thing in the draft. If we are adding "extra" >> information to the token, we can as well just kill the draft and tell the STUN >> server developers "do whatever you want, secure the stuff somehow, we do >> not care". > > It was discussed in the WG and decision was not to carry any extra token information so as to keep the token size small. In future an out-of-band communication mechanism b/w STUN and authorization server to exchange the token related metadata can be defined similar to the OAuth 2.0 Token Introspection method defined in https://tools.ietf.org/html/draft-ietf-oauth-introspection-07. > > -Tiru > _______________________________________________ > tram mailing list > tram@ietf.org > https://www.ietf.org/mailman/listinfo/tram > -- Brandon Williams; Senior Principal Software Engineer Emerging Products Engineering; Akamai Technologies Inc. From nobody Tue Apr 14 06:06:22 2015 Return-Path: X-Original-To: tram@ietfa.amsl.com Delivered-To: tram@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 5CB5C1A9070; Tue, 14 Apr 2015 06:06:20 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.211 X-Spam-Level: X-Spam-Status: No, score=-4.211 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id A-LPHRlrbyEf; Tue, 14 Apr 2015 06:06:17 -0700 (PDT) Received: from prod-mail-xrelay02.akamai.com (prod-mail-xrelay02.akamai.com [72.246.2.14]) by ietfa.amsl.com (Postfix) with ESMTP id 22A321A90A6; Tue, 14 Apr 2015 06:06:17 -0700 (PDT) Received: from prod-mail-xrelay02.akamai.com (localhost [127.0.0.1]) by postfix.imss70 (Postfix) with ESMTP id 5AC6628554; Tue, 14 Apr 2015 13:06:16 +0000 (GMT) Received: from prod-mail-relay07.akamai.com (prod-mail-relay07.akamai.com [172.17.121.112]) by prod-mail-xrelay02.akamai.com (Postfix) with ESMTP id 3981C28553; Tue, 14 Apr 2015 13:06:16 +0000 (GMT) Received: from [172.28.115.172] (unknown [172.28.115.172]) by prod-mail-relay07.akamai.com (Postfix) with ESMTP id 2CF8A80047; Tue, 14 Apr 2015 13:06:16 +0000 (GMT) Message-ID: <552D10C8.8060104@akamai.com> Date: Tue, 14 Apr 2015 09:06:16 -0400 From: Brandon Williams User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:31.0) Gecko/20100101 Thunderbird/31.5.0 MIME-Version: 1.0 To: "Tirumaleswar Reddy (tireddy)" , Stephen Farrell , The IESG References: <20150410193813.20376.40907.idtracker@ietfa.amsl.com> <913383AAA69FF945B8F946018B75898A411FFCB9@xmb-rcd-x10.cisco.com> In-Reply-To: <913383AAA69FF945B8F946018B75898A411FFCB9@xmb-rcd-x10.cisco.com> Content-Type: text/plain; charset=utf-8; format=flowed Content-Transfer-Encoding: 7bit Archived-At: Cc: "tram-chairs@ietf.org" , "tram@ietf.org" , "draft-ietf-tram-turn-third-party-authz@ietf.org" , "gonzalo.camarillo@ericsson.com" , "draft-ietf-tram-turn-third-party-authz.ad@ietf.org" , "draft-ietf-tram-turn-third-party-authz.shepherd@ietf.org" Subject: Re: [tram] Stephen Farrell's Discuss on draft-ietf-tram-turn-third-party-authz-13: (with DISCUSS and COMMENT) X-BeenThere: tram@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "Discussing the creation of a Turn Revised And Modernized \(TRAM\) WG, which goal is to consolidate the various initiatives to update TURN and STUN." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 14 Apr 2015 13:06:20 -0000 On 04/10/2015 11:07 PM, Tirumaleswar Reddy (tireddy) wrote: >> -----Original Message----- >> From: Stephen Farrell [mailto:stephen.farrell@cs.tcd.ie] >> Sent: Saturday, April 11, 2015 1:08 AM >> To: The IESG >> Cc: tram-chairs@ietf.org; tram@ietf.org; draft-ietf-tram-turn-third-party- >> authz@ietf.org; gonzalo.camarillo@ericsson.com; draft-ietf-tram-turn-third- >> party-authz.ad@ietf.org; draft-ietf-tram-turn-third-party- >> authz.shepherd@ietf.org >> Subject: Stephen Farrell's Discuss on draft-ietf-tram-turn-third-party-authz- >> 13: (with DISCUSS and COMMENT) >> >> >> (2) Please consider whether a signature based scheme that does not require >> pre-shared keys between the TURN and (in particular) WebRTC server could >> be useful to support. (Either in this document or >> elsewhere.) There should be use cases where that offers sufficient >> accountability for use of TURN and it ought allow some deployments that >> are less easy with this kind of pre-shared keys approach. The DISCUSS here is >> to check if the WG want to take that approach, either now or later. > > Passive attacks could occur in TURN due to lack of integrity protection. For example, a passive attacker could monitor Allocate request/response between the client and TURN server and make a Refresh request with a requested lifetime of 0 to delete the allocation. Message integrity of TURN messages ensures that passive attacker cannot spoof subsequent TURN messages. > I think Stephen was thinking primarily about cases with (D)TLS involved between the UA and the STUN server. If there's already a security layer then perhaps it's enough to prove that the auth server approved the communication and it's OK to skip STUN integrity protection altogether. My experience suggests that even in a case where (D)TLS isn't involved some application providers will not consider the risk of skipping STUN HMACs big enough to justify doing it. >> - 9: Figure 2 should be way up at the top of the document and not here > > In the previous versions it was in the top of the document but moved down after comments received from the WG that WebRTC is only an example usage of third party authorization. A few people from outside the WG have commented on having trouble following the flow of the document on their first read, primarily due to the lack of a high-level picture early in the document. Moving section 9 back up toward the top of the document would help by giving readers such a high-level overview early on. The discussion might need to be generalized a bit in order to serve this purpose, but comments we've received on the document's usability indicate that this change would be helpful. --Brandon -- Brandon Williams; Senior Principal Software Engineer Emerging Products Engineering; Akamai Technologies Inc. From nobody Tue Apr 14 09:45:51 2015 Return-Path: X-Original-To: tram@ietfa.amsl.com Delivered-To: tram@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 0C8191B2EAE; Tue, 14 Apr 2015 09:45:51 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2 X-Spam-Level: X-Spam-Status: No, score=-2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, SPF_PASS=-0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 3DZ2jWbDvuJT; Tue, 14 Apr 2015 09:45:49 -0700 (PDT) Received: from mail-oi0-x22d.google.com (mail-oi0-x22d.google.com [IPv6:2607:f8b0:4003:c06::22d]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 1CD841B2EAA; Tue, 14 Apr 2015 09:45:49 -0700 (PDT) Received: by oiko83 with SMTP id o83so6379386oik.1; Tue, 14 Apr 2015 09:45:48 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :cc:content-type; bh=dcsLg8pEH7NPAgmzNUXAm6YeTQmWPGvcbiBpyZQsJ5w=; b=0ioDfLtEKHKiY14Q4TeYsGbH7JkifOUD8VmbuzLglV51/HsjOQDfW3I0VDlKkgTf0D jazLCabdVyQFUhUBG4SNNxTsNw/QWJWvkzLhfiZ54F12jgKcjWXEjMMorA3ZUDYeh+IZ izjCx+GLhu3QwQdpu3uLospqPo/Aef/qBwaKPZVsbrYZxYoTK9go9+ynfjtdSSOOs7v5 4nue97YPqTk9VKfJRlKydGhLapmkKqecJX9Vj7Pi1AX9gRuge+rSfJF6oybGfv5tgvja o3KnzZ4OG0CW6EpVrdNJZeV78ya6PHxY4PHkcN0OTholJa+xA1wqhqPz8gMRMo7txdZM cJzQ== MIME-Version: 1.0 X-Received: by 10.202.200.209 with SMTP id y200mr12062611oif.20.1429029948619; Tue, 14 Apr 2015 09:45:48 -0700 (PDT) Received: by 10.202.212.212 with HTTP; Tue, 14 Apr 2015 09:45:48 -0700 (PDT) In-Reply-To: References: <20150410193813.20376.40907.idtracker@ietfa.amsl.com> <55282B4E.4000409@akamai.com> <913383AAA69FF945B8F946018B75898A411FFC5F@xmb-rcd-x10.cisco.com> Date: Tue, 14 Apr 2015 09:45:48 -0700 Message-ID: From: Martin Thomson To: Oleg Moskalenko Content-Type: text/plain; charset=UTF-8 Archived-At: Cc: "tram-chairs@ietf.org" , "tram@ietf.org" , Brandon Williams , "rlb@ipv.sx" , "Salz, Rich" , "Tirumaleswar Reddy \(tireddy\)" , "Stephen Farrell \(stephen.farrell@cs.tcd.ie\)" Subject: Re: [tram] Stephen Farrell's Discuss on draft-ietf-tram-turn-third-party-authz-13: (with DISCUSS and COMMENT) X-BeenThere: tram@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "Discussing the creation of a Turn Revised And Modernized \(TRAM\) WG, which goal is to consolidate the various initiatives to update TURN and STUN." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 14 Apr 2015 16:45:51 -0000 On 13 April 2015 at 22:26, Oleg Moskalenko wrote: > On Mon, Apr 13, 2015 at 11:17 AM, Martin Thomson > wrote: >> >> Section 1 doesn't really explain what the draft provides. > > I disagree. It is pretty clear on general description what this draft > is about. At least, it was obvious to me from the very first reading. I've read it again. It's clearer on second reading, but still confused. The abstract says: This document proposes the use of OAuth 2.0 to obtain and validate ephemeral tokens that can be used for Session Traversal Utilities for NAT (STUN) authentication. But the document doesn't do that at all. It describes the communications between the authorization server and the STUN server. Sort of. Here's what I'd say: 1. Long-term secrets can't be sent to untrusted TURN clients, such as a browser using WebRTC. These clients need to be given short-lived credentials. 2. This document describes how the OAuth framework can be applied to this problem. - A client is directed to an authorization server to retrieve an access token. Clients are configured with the authorization server and the method of retrieval. - Clients retrieve a token from the authorization server (using whatever proprietary method they choose). - Clients sends the token in a TURN server in Allocate or Refresh requests. - TURN servers use information in the token in authorizing these requests. 3. This document defines the ACCESS-TOKEN STUN attribute that is used to carry the authorization token provided by an authorization server. I see no value in standardizing protocol interactions (4.1.1) or the access token format. I can't work out how to make the THIRD-PARTY-AUTHORIZATION work at all. >> Section 3 claims to be an overview, but it doesn't actually describe >> what happens. It leaves the token acquisition part out of scope. >> That's fine, but it doesn't describe how the THIRD-PARTY-AUTHORIZATION >> attribute might be used, even in the broadest sense. > > It describes it in section 6.1. Not really. 6.1 says that the presence of the attribute indicates that third party authorization is needed. It doesn't describe what the value is *for*. Given that it's not actually possible to act on the information that it does provide without some external information, I fail to see the value of the attribute. > "Server name" is just a logical whatever name. It is not related to > anything that you mentioned; that is just a well-known name, set by > the STUN server administrator. I believe that this is pretty clear > from the text. Are you saying that the value has no protocol value? > I believe that extra token information is a very very bad idea - it > kills the whole interoperability thing in the draft. If we are adding > "extra" information to the token, we can as well just kill the draft > and tell the STUN server developers "do whatever you want, secure the > stuff somehow, we do not care". Well, we can disagree about this. I also disagree with the idea that this interface between STUN server and authorization server can be standardized in such a half-hearted fashion. If the HTTP interaction is out of scope, then why isn't the token construction also out of scope? > I suppose that's pretty clear that the AS and STUN server mutual > communications are protected by TLS certificates that they trust. I suppose that you mean this: "HTTPS MUST be used for mutual authentication and confidentiality." HTTPS doesn't provide client authentication natively, so I attributed this to a misunderstanding about what HTTPS could provide. If you say that this is important, authorizing access to the long-term key is not given proper treatment. There's nothing in the security considerations; there should be. >> Section 5 fails to explicitly state whether the MAC key is used as >> input to short term or long term credentials. It needs to say short >> term, I think. > > No. The whole document is about the LONG-TERM credentials. That's > pretty clear for everybody who followed the STUN security, and it is > getting mentioned in the text many times (just search for "long-term" > on the page). "long-term" is used in the introduction as part of an explanation that essentially says that long-term credentials are broken for the WebRTC use case. That much is true. Elsewhere it is used exclusively to describe the long-term credentials shared between the authorization server and the STUN server. Nothing is said at all regarding what method to use for STUN MESSAGE-INTEGRITY. >> Section 7 seems to imply two layers of authentication: the AEAD and >> some HMAC. I can't work out what is being authenticated. I'm not >> sure that anyone else could either. > > I am afraid that you simply need more time to read that document. I did spend more time. I now understand why I was so confused by the text. Why would this document repeat text from a document that it doesn't even need to cite? Also, I just noticed that this uses base64. That's arbitrary. Does the client remove that encoding before including the token in the STUN message? There's no MUST there, but it seems like it's part of the process somehow. From nobody Tue Apr 14 12:53:34 2015 Return-Path: X-Original-To: tram@ietfa.amsl.com Delivered-To: tram@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C307C1A19FA; Tue, 14 Apr 2015 12:53:32 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.75 X-Spam-Level: X-Spam-Status: No, score=-1.75 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_ENVFROM_END_DIGIT=0.25, FREEMAIL_FROM=0.001, SPF_PASS=-0.001] autolearn=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 5mWijMkoqtcV; Tue, 14 Apr 2015 12:53:31 -0700 (PDT) Received: from mail-wi0-x235.google.com (mail-wi0-x235.google.com [IPv6:2a00:1450:400c:c05::235]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id AC68B1A1A14; Tue, 14 Apr 2015 12:53:30 -0700 (PDT) Received: by widdi4 with SMTP id di4so127563816wid.0; Tue, 14 Apr 2015 12:53:29 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :cc:content-type; bh=lV6UsliSOdDTdzylq+PaNqAxjLAmCvyHAVZOf3tHWkk=; b=qSA4bZp2K5o+fpMMTyt0SBc0dXGbNnxRoT3CDP295+JYfXF8zFSPzYzMLXO41wHof6 oW7A+SnsffzHKxccp4ckfjL7oVSghkPgci2MFc0crJhQKsiccKguyOtbUpMavNCKeX77 PG5PedbP6K4NbxMF8VEPL7sIYwvnrPZyuSt666XAefzVgrxM8Kj3q3mzVIDCcg7BrlYe PsfZ26wNdFyUOkdNG6NgQkZ5uWKzzjFaQh3/bjZfmB9DtGMGDL8NF+/UFMoJHcAYU+FT 50EYQGagPMi19wjPdXqrzl6O6uLMrHzEsZ/LF1/ck1CVL5Yt4NJw6HfmtZI66ILIej/+ azQQ== MIME-Version: 1.0 X-Received: by 10.180.80.199 with SMTP id t7mr36331068wix.52.1429041209482; Tue, 14 Apr 2015 12:53:29 -0700 (PDT) Received: by 10.194.190.7 with HTTP; Tue, 14 Apr 2015 12:53:29 -0700 (PDT) In-Reply-To: References: <20150410193813.20376.40907.idtracker@ietfa.amsl.com> <55282B4E.4000409@akamai.com> <913383AAA69FF945B8F946018B75898A411FFC5F@xmb-rcd-x10.cisco.com> Date: Tue, 14 Apr 2015 12:53:29 -0700 Message-ID: From: Oleg Moskalenko To: Martin Thomson Content-Type: text/plain; charset=UTF-8 Archived-At: Cc: "tram-chairs@ietf.org" , "tram@ietf.org" , Brandon Williams , "rlb@ipv.sx" , "Salz, Rich" , "Tirumaleswar Reddy \(tireddy\)" , "Stephen Farrell \(stephen.farrell@cs.tcd.ie\)" Subject: Re: [tram] Stephen Farrell's Discuss on draft-ietf-tram-turn-third-party-authz-13: (with DISCUSS and COMMENT) X-BeenThere: tram@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "Discussing the creation of a Turn Revised And Modernized \(TRAM\) WG, which goal is to consolidate the various initiatives to update TURN and STUN." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 14 Apr 2015 19:53:32 -0000 On Tue, Apr 14, 2015 at 9:45 AM, Martin Thomson wrote: > > > I've read it again. It's clearer on second reading, but still confused. It requires some time to sink in, I admit. But after some time, you will see that it correctly describes the procedures needed to get a third-party authorization for the STUN operations. I agree that this is not an easiest of the readings. > > The abstract says: > > This document proposes the use of OAuth 2.0 to obtain and validate > ephemeral tokens that can be used for Session Traversal Utilities for > NAT (STUN) authentication. > > But the document doesn't do that at all. It describes the > communications between the authorization server and the STUN server. Not true. It also describes how to organize new secure communications between STUN client and STUN server. > Sort of. > > Here's what I'd say: > > 1. Long-term secrets can't be sent to untrusted TURN clients, such as > a browser using WebRTC. These clients need to be given short-lived > credentials. In the STUN terminology, there is a very big difference between "short-lived" and "short-term" credentials. You were formerly used the second term, now you are using the first one. So it is not clear what exactly you are talking about. > > 2. This document describes how the OAuth framework can be applied to > this problem. > - A client is directed to an authorization server to retrieve an > access token. Clients are configured with the authorization server > and the method of retrieval. > - Clients retrieve a token from the authorization server (using > whatever proprietary method they choose). > - Clients sends the token in a TURN server in Allocate or Refresh requests. > - TURN servers use information in the token in authorizing these requests. > > 3. This document defines the ACCESS-TOKEN STUN attribute that is used > to carry the authorization token provided by an authorization server. > > I see no value in standardizing protocol interactions (4.1.1) or the > access token format. I can't work out how to make the > THIRD-PARTY-AUTHORIZATION work at all. I was working on implementation of this thing, and somehow I had no difficulty understanding that (and I am not an author of the document). > >>> Section 3 claims to be an overview, but it doesn't actually describe >>> what happens. It leaves the token acquisition part out of scope. >>> That's fine, but it doesn't describe how the THIRD-PARTY-AUTHORIZATION >>> attribute might be used, even in the broadest sense. >> >> It describes it in section 6.1. > > Not really. > > 6.1 says that the presence of the attribute indicates that third party > authorization is needed. It doesn't describe what the value is *for*. > Given that it's not actually possible to act on the information that > it does provide without some external information, I fail to see the > value of the attribute. > >> "Server name" is just a logical whatever name. It is not related to >> anything that you mentioned; that is just a well-known name, set by >> the STUN server administrator. I believe that this is pretty clear >> from the text. > > Are you saying that the value has no protocol value? It has a value in security procedures. But the STUN server administrator is free to set whatever value to the server name, and it may be not related to DNS or anything. You can set the server name to "Martin Thomson" and it will be perfectly OK. > >> I believe that extra token information is a very very bad idea - it >> kills the whole interoperability thing in the draft. If we are adding >> "extra" information to the token, we can as well just kill the draft >> and tell the STUN server developers "do whatever you want, secure the >> stuff somehow, we do not care". > > Well, we can disagree about this. I disagree with the "free-style" extra information in the token. If that extra information is strictly formalized (a formal meta-data with definite structure) then I am OK with that. > > I also disagree with the idea that this interface between STUN server > and authorization server can be standardized in such a half-hearted > fashion. If the HTTP interaction is out of scope, then why isn't the > token construction also out of scope? >From the system and software architecture and design point of view, the communications between a standard AS and a standard STUN server are not very relevant - a simple utility can transfer information between them, and that utility must not be an integral part of AS or STUN server. We can take various STUN and AS servers off-the-shelf and make the communications work between them. The token structure, on the other hand, affects the core internal functionality of the STUN server, and this is why it must be strictly specified. > >> I suppose that's pretty clear that the AS and STUN server mutual >> communications are protected by TLS certificates that they trust. > > I suppose that you mean this: "HTTPS MUST be used for mutual > authentication and confidentiality." HTTPS doesn't provide client > authentication natively, so I attributed this to a misunderstanding > about what HTTPS could provide. If you say that this is important, > authorizing access to the long-term key is not given proper treatment. I am not talking about the client authentication. HTTPS servers can authorize the clients with the client's certificate - the same way as the clients can authorize the servers. A dedicated AS HTTPS server will allow only TLS (HTTPS) connections from a few authorized STUN servers with known certificates. This is an optional feature of the TLS protocol (that is used by HTTPS) that can be used here to secure AS-STUN communications. > > There's nothing in the security considerations; there should be. > >>> Section 5 fails to explicitly state whether the MAC key is used as >>> input to short term or long term credentials. It needs to say short >>> term, I think. >> >> No. The whole document is about the LONG-TERM credentials. That's >> pretty clear for everybody who followed the STUN security, and it is >> getting mentioned in the text many times (just search for "long-term" >> on the page). > > "long-term" is used in the introduction as part of an explanation that > essentially says that long-term credentials are broken for the WebRTC > use case. That much is true. > > Elsewhere it is used exclusively to describe the long-term credentials > shared between the authorization server and the STUN server. > > Nothing is said at all regarding what method to use for STUN MESSAGE-INTEGRITY. > >>> Section 7 seems to imply two layers of authentication: the AEAD and >>> some HMAC. I can't work out what is being authenticated. I'm not >>> sure that anyone else could either. >> >> I am afraid that you simply need more time to read that document. > > I did spend more time. I now understand why I was so confused by the > text. Why would this document repeat text from a document that it > doesn't even need to cite? give it more time... > > Also, I just noticed that this uses base64. That's arbitrary. Does > the client remove that encoding before including the token in the STUN > message? There's no MUST there, but it seems like it's part of the > process somehow. more clarifications in the text are always welcome. From nobody Tue Apr 14 13:18:31 2015 Return-Path: X-Original-To: tram@ietfa.amsl.com Delivered-To: tram@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 68B521AD0BC; Tue, 14 Apr 2015 13:18:30 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2 X-Spam-Level: X-Spam-Status: No, score=-2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, SPF_PASS=-0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id LTtRO-MpOo0f; Tue, 14 Apr 2015 13:18:29 -0700 (PDT) Received: from mail-ob0-x233.google.com (mail-ob0-x233.google.com [IPv6:2607:f8b0:4003:c01::233]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 0DDAD1AD0B1; Tue, 14 Apr 2015 13:18:29 -0700 (PDT) Received: by oblw8 with SMTP id w8so9352401obl.0; Tue, 14 Apr 2015 13:18:28 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :cc:content-type; bh=wK6mIW1hakEG2kXXNJ4j0z7wgcARGQci1Mi0tPyp4Hc=; b=IHZPtTs6DPH+S1glsLmzI8X/NlOSXt++6q19K0AKlSpeYrIgh9hqu79HxCPyfvxt1n GQaN46j9DRQoWlp0w6OfaKe8eLJ4x5mD0LaV+xW7vt/Taq40xoOPeDdm5x0qRZWADtcw JrPELSKi2IXiWChoUrZK4SB57a+scpSkIrNBKoFPkDmgyWxmW/urCiRfyCj92IYWrQm2 AiruPxo20sI+ejB4RONtBZT4Tul4/gJj55lPaHIqriVe+NPiHS4PhxO3dhlzX6jSnjlw C47ihqgbFvG6Ioq1hn9TiloWFyoAwtu9EHKIN/TO/dbmBV6vwpGuu+4y+c73C3bUiKQt pUXw== MIME-Version: 1.0 X-Received: by 10.182.39.195 with SMTP id r3mr17866494obk.44.1429042708556; Tue, 14 Apr 2015 13:18:28 -0700 (PDT) Received: by 10.202.212.212 with HTTP; Tue, 14 Apr 2015 13:18:28 -0700 (PDT) In-Reply-To: References: <20150410193813.20376.40907.idtracker@ietfa.amsl.com> <55282B4E.4000409@akamai.com> <913383AAA69FF945B8F946018B75898A411FFC5F@xmb-rcd-x10.cisco.com> Date: Tue, 14 Apr 2015 13:18:28 -0700 Message-ID: From: Martin Thomson To: Oleg Moskalenko Content-Type: text/plain; charset=UTF-8 Archived-At: Cc: "tram-chairs@ietf.org" , "tram@ietf.org" , Brandon Williams , "rlb@ipv.sx" , "Salz, Rich" , "Tirumaleswar Reddy \(tireddy\)" , "Stephen Farrell \(stephen.farrell@cs.tcd.ie\)" Subject: Re: [tram] Stephen Farrell's Discuss on draft-ietf-tram-turn-third-party-authz-13: (with DISCUSS and COMMENT) X-BeenThere: tram@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "Discussing the creation of a Turn Revised And Modernized \(TRAM\) WG, which goal is to consolidate the various initiatives to update TURN and STUN." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 14 Apr 2015 20:18:30 -0000 On 14 April 2015 at 12:53, Oleg Moskalenko wrote: > It requires some time to sink in, I admit. But after some time, you > will see that it correctly describes the procedures needed to get a > third-party authorization for the STUN operations. I agree that this > is not an easiest of the readings. A document that requires multiple readings and repeated admonishments of "give it more time" is not fit for publication. > You can set the server name to "Martin Thomson" and it will be perfectly OK. OK, you still haven't explained why such a field needs to be defined in an RFC. Ideally, the draft should contain that explanation. From nobody Tue Apr 14 14:24:39 2015 Return-Path: X-Original-To: tram@ietfa.amsl.com Delivered-To: tram@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id BB75A1A0378; Tue, 14 Apr 2015 14:24:37 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.75 X-Spam-Level: X-Spam-Status: No, score=-1.75 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_ENVFROM_END_DIGIT=0.25, FREEMAIL_FROM=0.001, SPF_PASS=-0.001] autolearn=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id aSuTXD41BKPS; Tue, 14 Apr 2015 14:24:37 -0700 (PDT) Received: from mail-wg0-x231.google.com (mail-wg0-x231.google.com [IPv6:2a00:1450:400c:c00::231]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id B05931A1A62; Tue, 14 Apr 2015 14:20:22 -0700 (PDT) Received: by wgso17 with SMTP id o17so26513239wgs.1; Tue, 14 Apr 2015 14:20:21 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :cc:content-type; bh=XB/EWXVXLb440vKdbcisA56yJdVaU7aCeSBuOVo7U3c=; b=D7KCptAsyBjPduOm9KJhvid+RWrgSCsziXayHhbwO9qIvxXIiXoxUShgjXkLrGvVbh Y/kbOQfqyGLD4Mu7KM9CD1hFbmOR0ch3Uv3/e2UoIrfNWhUHeEapkm3FMiWT5eGNj/WR /oiJtyhcMKv+fDUry+gmnBs2rXB+h4+QxEkGxq98AEwC/phxBxRT/9JaYJrniezcuhho ODmQ05Z2u1I8dMxo3JN2Svc4VAAyc3h5D5pECwjmGTKr2Q/aWt/5qpNYw6DFTNZOcGq7 skp7fBeoRXGXVG2SxzpMuBr7JrIXrw5H9a63F3PwKk8xak1Gk3/NJEE0zrEi8bGPkUnX RIAg== MIME-Version: 1.0 X-Received: by 10.194.159.105 with SMTP id xb9mr43455804wjb.156.1429046421456; Tue, 14 Apr 2015 14:20:21 -0700 (PDT) Received: by 10.194.190.7 with HTTP; Tue, 14 Apr 2015 14:20:21 -0700 (PDT) In-Reply-To: References: <20150410193813.20376.40907.idtracker@ietfa.amsl.com> <55282B4E.4000409@akamai.com> <913383AAA69FF945B8F946018B75898A411FFC5F@xmb-rcd-x10.cisco.com> Date: Tue, 14 Apr 2015 14:20:21 -0700 Message-ID: From: Oleg Moskalenko To: Martin Thomson Content-Type: text/plain; charset=UTF-8 Archived-At: Cc: "tram-chairs@ietf.org" , "tram@ietf.org" , Brandon Williams , "rlb@ipv.sx" , "Salz, Rich" , "Tirumaleswar Reddy \(tireddy\)" , "Stephen Farrell \(stephen.farrell@cs.tcd.ie\)" Subject: Re: [tram] Stephen Farrell's Discuss on draft-ietf-tram-turn-third-party-authz-13: (with DISCUSS and COMMENT) X-BeenThere: tram@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "Discussing the creation of a Turn Revised And Modernized \(TRAM\) WG, which goal is to consolidate the various initiatives to update TURN and STUN." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 14 Apr 2015 21:24:37 -0000 On Tue, Apr 14, 2015 at 1:18 PM, Martin Thomson wrote: > On 14 April 2015 at 12:53, Oleg Moskalenko wrote: >> It requires some time to sink in, I admit. But after some time, you >> will see that it correctly describes the procedures needed to get a >> third-party authorization for the STUN operations. I agree that this >> is not an easiest of the readings. > > > A document that requires multiple readings and repeated admonishments > of "give it more time" is not fit for publication. Tell us please how many times did you read RFC 5766 until it fully sunk. If you tell "once" then I'll not believe you. It may be "zero" or "many times", but not "once". > >> You can set the server name to > "Martin Thomson" and it will be perfectly OK. > > OK, you still haven't explained why such a field needs to be defined > in an RFC. Ideally, the draft should contain that explanation. The draft fully explains why we need that field for the sake of encryption/authorization. I do not believe that it can be explained clearer. From nobody Tue Apr 14 15:08:24 2015 Return-Path: X-Original-To: tram@ietfa.amsl.com Delivered-To: tram@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id AE2121A873B; Tue, 14 Apr 2015 15:08:23 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2 X-Spam-Level: X-Spam-Status: No, score=-2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, SPF_PASS=-0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Nhf77C--suid; Tue, 14 Apr 2015 15:08:22 -0700 (PDT) Received: from mail-vn0-x22d.google.com (mail-vn0-x22d.google.com [IPv6:2607:f8b0:400c:c0f::22d]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 4479B1A8729; Tue, 14 Apr 2015 15:08:22 -0700 (PDT) Received: by vnbf1 with SMTP id f1so8935841vnb.5; Tue, 14 Apr 2015 15:08:21 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :cc:content-type; bh=Rrztb//5DSnpToYSMzDFlZi6M0PwI7ZvQfk4gP9SXfg=; b=nVXKnUS3ZLXJSgYgKtdHSUHQm+DAQBj8WtKPeovSr3fyiV4nE0KpH6syINpPR2r5HG U9YmTEdVGDSM/+A8xN1LlP7Hpb3zF0ONO5R2PlCBd8+VqmiYHfv3bzZbKLGlvCbPhmye HVMmOIoV/8VQFqZWCjMfQyTJHzZlr47EmCC9gz6x99zODE7dXzMdszrkQaF80l/baY5m Ig1wD54E0LuUiuf6gm7E85PdmWswyOTNg32/sIENjvmFTX3BOredP8kRJfAkB1HJD3K5 Umo79kldwm7+BzZgrPmBtte9Hrt3lGKsVekpYKfQjXoEAeFYwHfNtN1n/5wqLNanKvwu NdXw== MIME-Version: 1.0 X-Received: by 10.202.0.75 with SMTP id 72mr13212417oia.131.1429049301570; Tue, 14 Apr 2015 15:08:21 -0700 (PDT) Received: by 10.202.212.212 with HTTP; Tue, 14 Apr 2015 15:08:21 -0700 (PDT) In-Reply-To: References: <20150410193813.20376.40907.idtracker@ietfa.amsl.com> <55282B4E.4000409@akamai.com> <913383AAA69FF945B8F946018B75898A411FFC5F@xmb-rcd-x10.cisco.com> Date: Tue, 14 Apr 2015 15:08:21 -0700 Message-ID: From: Martin Thomson To: Oleg Moskalenko Content-Type: text/plain; charset=UTF-8 Archived-At: Cc: "tram-chairs@ietf.org" , "tram@ietf.org" , Brandon Williams , "rlb@ipv.sx" , "Salz, Rich" , "Tirumaleswar Reddy \(tireddy\)" , "Stephen Farrell \(stephen.farrell@cs.tcd.ie\)" Subject: Re: [tram] Stephen Farrell's Discuss on draft-ietf-tram-turn-third-party-authz-13: (with DISCUSS and COMMENT) X-BeenThere: tram@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "Discussing the creation of a Turn Revised And Modernized \(TRAM\) WG, which goal is to consolidate the various initiatives to update TURN and STUN." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 14 Apr 2015 22:08:23 -0000 On 14 April 2015 at 14:20, Oleg Moskalenko wrote: > Tell us please how many times did you read RFC 5766 until it fully > sunk. If you tell "once" then I'll not believe you. It may be "zero" > or "many times", but not "once". I still don't understand RFC 5245. But that's an *excuse*. This doesn't even pass a sanity check. From nobody Tue Apr 14 15:39:11 2015 Return-Path: X-Original-To: tram@ietfa.amsl.com Delivered-To: tram@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 72F8F1B3019; Tue, 14 Apr 2015 15:39:09 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.75 X-Spam-Level: X-Spam-Status: No, score=-1.75 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_ENVFROM_END_DIGIT=0.25, FREEMAIL_FROM=0.001, SPF_PASS=-0.001] autolearn=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id lR60R_pKU95Q; Tue, 14 Apr 2015 15:39:08 -0700 (PDT) Received: from mail-wi0-x231.google.com (mail-wi0-x231.google.com [IPv6:2a00:1450:400c:c05::231]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 4B9011B3018; Tue, 14 Apr 2015 15:39:08 -0700 (PDT) Received: by wizk4 with SMTP id k4so132329605wiz.1; Tue, 14 Apr 2015 15:39:07 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :cc:content-type; bh=iNyBBP6NOA3n0KW8gsSfrCwPYJieoC1wXdJCo5y+xvw=; b=j/6LS2B/9U8PE03j0Pe+uumI6VCUfA8K7rqNWdSgZQkwPZQWe7lEwl+kR9bakm8VLU KvHjGR1WVajNWLChkzcNi76HyzL2+kKA/KLyClMAzZPv3gxWWU9WiFRQYxVNaculhn9r 8+q/s4yyn4crfJg+v9/jSl+W+L1zeYdLuzUx/GoUU18yf77cMSCLlZuWI5Oy8QFD+IAt 7YLElm72nckCp04HXjxIOin4KTTPCseN1pY1g8wUHfbiRYvZCYiempCk92S78Uk5syf8 o1rHIgfurIbp/l6Ed7S0QJrH4gsmkhx15o9o5M/Qu+PbXASN001hvUPC80l/3u/G6a77 hcnQ== MIME-Version: 1.0 X-Received: by 10.181.11.129 with SMTP id ei1mr36422181wid.57.1429051147105; Tue, 14 Apr 2015 15:39:07 -0700 (PDT) Received: by 10.194.190.7 with HTTP; Tue, 14 Apr 2015 15:39:06 -0700 (PDT) In-Reply-To: References: <20150410193813.20376.40907.idtracker@ietfa.amsl.com> <55282B4E.4000409@akamai.com> <913383AAA69FF945B8F946018B75898A411FFC5F@xmb-rcd-x10.cisco.com> Date: Tue, 14 Apr 2015 15:39:06 -0700 Message-ID: From: Oleg Moskalenko To: Martin Thomson Content-Type: text/plain; charset=UTF-8 Archived-At: Cc: "tram-chairs@ietf.org" , "tram@ietf.org" , Brandon Williams , "rlb@ipv.sx" , "Salz, Rich" , "Tirumaleswar Reddy \(tireddy\)" , "Stephen Farrell \(stephen.farrell@cs.tcd.ie\)" Subject: Re: [tram] Stephen Farrell's Discuss on draft-ietf-tram-turn-third-party-authz-13: (with DISCUSS and COMMENT) X-BeenThere: tram@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "Discussing the creation of a Turn Revised And Modernized \(TRAM\) WG, which goal is to consolidate the various initiatives to update TURN and STUN." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 14 Apr 2015 22:39:09 -0000 On Tue, Apr 14, 2015 at 3:08 PM, Martin Thomson wrote: > > > I still don't understand RFC 5245. But that's an *excuse*. This > doesn't even pass a sanity check. "sanity" may have a very different meaning for different folks :) From nobody Wed Apr 15 02:47:59 2015 Return-Path: X-Original-To: tram@ietfa.amsl.com Delivered-To: tram@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 646BF1A002D; Wed, 15 Apr 2015 02:47:58 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -14.511 X-Spam-Level: X-Spam-Status: No, score=-14.511 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_HI=-5, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id S6Q5zz_jOXFE; Wed, 15 Apr 2015 02:47:54 -0700 (PDT) Received: from rcdn-iport-7.cisco.com (rcdn-iport-7.cisco.com [173.37.86.78]) (using TLSv1 with cipher RC4-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id E43D31A002C; Wed, 15 Apr 2015 02:47:53 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=9640; q=dns/txt; s=iport; t=1429091274; x=1430300874; h=from:to:cc:subject:date:message-id: content-transfer-encoding:mime-version; bh=taRdfHIZqkVBwW5aDC94WGwKuiinkRT36WmBOy7+Rfo=; b=AC7CsFVzIctYXfm5yXUTpCAk+cQwiueJkXTVe98ceEyDaa++y/HWjjn9 aeyMUmHHGLsjStWJSztWbSaQUYPdTusHlRC0VZ9dQNODlhmJ97paFqUgw fL/zrFJn4qu7sDLV8I2ukIP4p7ygfCdgTgJuFh+oW8CsR9K7SeSKZCeSI 8=; X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: A0BXBQAxMy5V/4QNJK1cgwxSXAWDEMFggkCGAQIcgSBMAQEBAQEBfoQgAQEBAwEjBA0zEgUHBgEIEQQBAQECAgYLAwsEAwIEHxEUAQgJAQQOBQiIDgMJCA2uUZBcDYVHAQEBAQEBAQEBAQEBAQEBAQEBAQEBF4EhigqCSIFcDRoWGw0EDoJQL4EWBZEOg3mCLIIfgmo6gn2CZoZ6hjsiggIBARsUgTxvAYECAR4GHH8BAQE X-IronPort-AV: E=Sophos;i="5.11,581,1422921600"; d="scan'208";a="411941608" Received: from alln-core-10.cisco.com ([173.36.13.132]) by rcdn-iport-7.cisco.com with ESMTP; 15 Apr 2015 09:47:53 +0000 Received: from xhc-rcd-x10.cisco.com (xhc-rcd-x10.cisco.com [173.37.183.84]) by alln-core-10.cisco.com (8.14.5/8.14.5) with ESMTP id t3F9lqGH003706 (version=TLSv1/SSLv3 cipher=AES128-SHA bits=128 verify=FAIL); Wed, 15 Apr 2015 09:47:52 GMT Received: from xmb-rcd-x10.cisco.com ([169.254.15.220]) by xhc-rcd-x10.cisco.com ([173.37.183.84]) with mapi id 14.03.0195.001; Wed, 15 Apr 2015 04:47:52 -0500 From: "Tirumaleswar Reddy (tireddy)" To: Martin Thomson Thread-Topic: [tram] Stephen Farrell's Discuss on draft-ietf-tram-turn-third-party-authz-13: (with DISCUSS and COMMENT) Thread-Index: AdB3YVGPL1OX25drRTSYceNRW1Eoww== Date: Wed, 15 Apr 2015 09:47:52 +0000 Message-ID: <913383AAA69FF945B8F946018B75898A4120E0BD@xmb-rcd-x10.cisco.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.65.73.110] Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 MIME-Version: 1.0 Archived-At: Cc: "tram-chairs@ietf.org" , "tram@ietf.org" , Brandon Williams , "rlb@ipv.sx" , "Salz, Rich" , "Stephen Farrell \(stephen.farrell@cs.tcd.ie\)" Subject: Re: [tram] Stephen Farrell's Discuss on draft-ietf-tram-turn-third-party-authz-13: (with DISCUSS and COMMENT) X-BeenThere: tram@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "Discussing the creation of a Turn Revised And Modernized \(TRAM\) WG, which goal is to consolidate the various initiatives to update TURN and STUN." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 15 Apr 2015 09:47:58 -0000 PiAtLS0tLU9yaWdpbmFsIE1lc3NhZ2UtLS0tLQ0KPiBGcm9tOiBNYXJ0aW4gVGhvbXNvbiBbbWFp bHRvOm1hcnRpbi50aG9tc29uQGdtYWlsLmNvbV0NCj4gU2VudDogTW9uZGF5LCBBcHJpbCAxMywg MjAxNSAxMTo0NyBQTQ0KPiBUbzogVGlydW1hbGVzd2FyIFJlZGR5ICh0aXJlZGR5KQ0KPiBDYzog QnJhbmRvbiBXaWxsaWFtczsgcmxiQGlwdi5zeDsgU2FseiwgUmljaDsgU3RlcGhlbiBGYXJyZWxs DQo+IChzdGVwaGVuLmZhcnJlbGxAY3MudGNkLmllKTsgdHJhbUBpZXRmLm9yZzsgdHJhbS1jaGFp cnNAaWV0Zi5vcmcNCj4gU3ViamVjdDogUmU6IFt0cmFtXSBTdGVwaGVuIEZhcnJlbGwncyBEaXNj dXNzIG9uIGRyYWZ0LWlldGYtdHJhbS10dXJuLXRoaXJkLQ0KPiBwYXJ0eS1hdXRoei0xMzogKHdp dGggRElTQ1VTUyBhbmQgQ09NTUVOVCkNCj4gDQo+IE9uIDEwIEFwcmlsIDIwMTUgYXQgMTg6NTgs IFRpcnVtYWxlc3dhciBSZWRkeSAodGlyZWRkeSkNCj4gPHRpcmVkZHlAY2lzY28uY29tPiB3cm90 ZToNCj4gPiBSaWNoYXJkIGFuZCB3ZSBoYXZlIGFscmVhZHkgaGF2ZSBkaXNjdXNzZWQgdGhlIGNv bW1lbnRzIGZ1cnRoZXIgYW5kDQo+IHJlc29sdmVkIHRoZW0sIGF0dGFjaGVkIHVwZGF0ZWQgZHJh ZnQgd2l0aCBkaWZmLg0KPiA+IE1haW4gY2hhbmdlcw0KPiA+DQo+ID4gWzFdIFJlbW92ZWQgREtT UFANCj4gPiBbMl0gUmVtb3ZlZCBub24tQUVBRCBhbGdvcml0aG1zOyB1c2luZyBBRUFEIG1vZGVz IEFFUy1HQ00gYW5kIGFlYWQtDQo+IGFlcy1jYmMNCj4gPiBbM10gVXBkYXRlZCB0aGUgdG9rZW4g Zm9ybWF0DQo+IA0KPiANCj4gSSByZWFkIHRoaXMganVzdCBub3cgZm9yIHRoZSBmaXJzdCB0aW1l IGluIGEgd2hpbGUuICBFaXRoZXIgSSdtIGEgbG90DQo+IHN0dXBpZGVyIHRoaXMgbW9ybmluZyB0 aGFuIEkgbm9ybWFsbHkgYW0sIG9yIHRoaXMgZHJhZnQgaXMgdmVyeQ0KPiBjb25mdXNlZC4gIFRo ZXJlIGFyZSBzb21lIHNlcmlvdXMgcHJvYmxlbXMgaW4gaGVyZS4NCj4gDQo+IElmIHlvdSBpbnRl bmQgdG8gdXNlIFJGQyA1MTE2LCBwbGVhc2UgY2xlYXJseSBzcGVjaWZ5IHRoZSBpbnB1dHMsIGFz DQo+IGRlc2NyaWJlZCBpbiBTZWN0aW9uIDIuMToNCj4gaHR0cHM6Ly90b29scy5pZXRmLm9yZy9o dG1sL3JmYzUxMTYjc2VjdGlvbi0yLjEgQ3VycmVudGx5LCB0aGUgZHJhZnQNCj4gdXNlcyBOIGZv ciB0aGUgbmFtZSBvZiB0aGUgc2VydmVyLiAgVGhhdCBjb25mbGljdHMgd2l0aCB0aGUgbGFiZWwg dGhhdA0KPiBSRkMgNTExNiB1c2VzIGZvciB0aGUgbm9uY2UuICBBbHNvLCB0aGUgZHJhZnQgaXMg dmVyeSB2YWd1ZSBhYm91dCB0aGUNCj4gY29uc3RydWN0aW9uIG9mIHRoZSBub25jZS4gIA0KDQpT VFVOIHNlcnZlciBuYW1lIGlzIHRoZSBhc3NvY2lhdGVkIGRhdGEgKEEpIGFuZCBub25jZSBpcyBm b3JtZWQgYXMgZXhwbGFpbmVkIGluIHNlY3Rpb24gMy4yIG9mIFtSRkM1MTE2XS4gDQoNCj4gVGhl IGRyYWZ0IGNlcnRhaW5seSBkb2Vzbid0IG5lZWQgdG8gcmVmZXINCj4gdG8gdGhlIENCQyBBRUFE IGRyYWZ0Lg0KDQpDQkMgQUVBRCBkcmFmdCBpcyByZWZlcnJlZCBiZWNhdXNlIGJvdGggQUVBRCBB RVMgR0NNIGFuZCBDQkMgQUVBRCBhcmUgc3VwcG9ydGVkLg0KIA0KPiANCj4gSXQgZG9lcyBuZWVk IHRvIGRlYWwgd2l0aCBhbGdvcml0aG0gYWdpbGl0eSBhbmQgaXQgY3VycmVudGx5IGRvZXMgbm90 Lg0KDQpJdCBzdXBwb3J0cyBhbGdvcml0aG0gYWdpbGl0eS4gUGxlYXNlIHJlZmVyIHRvIGh0dHA6 Ly90b29scy5pZXRmLm9yZy9odG1sL2RyYWZ0LWlldGYtdHJhbS10dXJuLXRoaXJkLXBhcnR5LWF1 dGh6LTEzI2FwcGVuZGl4LUIgIGZvciB0aGUgaW50ZXJhY3Rpb24gYi93IHRoZSBjbGllbnQgYW5k IGF1dGhvcml6YXRpb24gc2VydmVyIHdoZXJlIHRoZSBjbGllbnQgc2lnbmFscyB0aGUgYWxnb3Jp dGhtcyBpdCBzdXBwb3J0cyBhbmQgc2VydmVyIHNlbGVjdHMgYW4gSE1BQyBhbGdvcml0aG0gZnJv bSB0aGUgbGlzdCBvZiBhbGdvcml0aG1zIHRoZSAgY2xpZW50IHByb3ZpZGVkIGFuZCBkZXRlcm1p bmVzIGxlbmd0aCBvZiB0aGUgbWFjX2tleSBiYXNlZCBvbiB0aGUgc2VsZWN0ZWQgSE1BQyBhbGdv cml0aG0uDQoNCj4gDQo+IA0KPiBJIGFwb2xvZ2l6ZSBmb3Igbm90IHJldmlld2luZyB0aGlzIGVh cmxpZXIuICBIZXJlIGFyZSBtb3JlIGNvbW1lbnRzLg0KPiANCj4gU2VjdGlvbiAxIGRvZXNuJ3Qg cmVhbGx5IGV4cGxhaW4gd2hhdCB0aGUgZHJhZnQgcHJvdmlkZXMuDQoNClBsZWFzZSBwcm92aWRl IG1vcmUgaW5mbyBvbiBkZXRhaWxzIHlvdSBhcmUgbG9va2luZyBmb3IgdG8gYmUgYWRkZWQgaW4g c2VjdGlvbiAxIA0KDQo+IA0KPiBTZWN0aW9uIDMgY2xhaW1zIHRvIGJlIGFuIG92ZXJ2aWV3LCBi dXQgaXQgZG9lc24ndCBhY3R1YWxseSBkZXNjcmliZQ0KPiB3aGF0IGhhcHBlbnMuICBJdCBsZWF2 ZXMgdGhlIHRva2VuIGFjcXVpc2l0aW9uIHBhcnQgb3V0IG9mIHNjb3BlLg0KPiBUaGF0J3MgZmlu ZSwgYnV0IGl0IGRvZXNuJ3QgZGVzY3JpYmUgaG93IHRoZSBUSElSRC1QQVJUWS1BVVRIT1JJWkFU SU9ODQo+IGF0dHJpYnV0ZSBtaWdodCBiZSB1c2VkLCBldmVuIGluIHRoZSBicm9hZGVzdCBzZW5z ZS4gIEl0IGRvZXNuJ3QNCj4gZXhwbGFpbiB3aHkgaXQncyBhIHNlcnZlciBuYW1lLCBvciBob3cg dGhhdCBuYW1lIHJlbGF0ZXMgdG8gdGhlIGRvbWFpbg0KPiBuYW1lIG9mIHRoZSBzZXJ2ZXIgKGku ZS4sIHRoZSBvbmUgdGhhdCBtaWdodCBoYXZlIGJlZW4gcGFzc2VkIHRvIGEgRE5TDQo+IHJlc29s dmVyKS4NCg0KU2VjdGlvbiA2LjEgaXMgY2xlYXIgb24gdGhpcy4NCg0KPiANCj4gU2VjdGlvbiA0 IGRvZXNuJ3QgcGVybWl0IGFueSBhZGRpdGlvbmFsIGluZm9ybWF0aW9uIHRvIGJlIGNhcnJpZWQg aW4NCj4gdGhlIHRva2VuLiAgVGhlcmVmb3JlLCB0aGUgU1RVTi9UVVJOIHNlcnZlciBpcyB1bmFi bGUgdG8gYXBwbHkgYW55DQo+IGFkZGl0aW9uYWwgcG9saWNpZXMgdGhhdCB0aGUgYXV0aG9yaXph dGlvbiBzZXJ2ZXIgbWlnaHQgaW1wb3NlLCBzdWNoDQo+IGFzIGxpbWl0cyBvbiB0aGUgbGVuZ3Ro IG9mIHRoZSBzZXNzaW9uLCB0aGUgbnVtYmVyIG9mIHBvcnRzIGFsbG9jYXRlZCwNCj4gb3IgdGhl IGJhbmR3aWR0aCB0aGF0IGlzIGFsbG9jYXRlZC4gIChPciB3aGF0ZXZlciB3ZSBtaWdodCBsYXRl cg0KPiBjb25jZWl2ZSBvZi4pDQo+IA0KPiBJdCdzIG5vdCBjbGVhciB3aGF0IFNlY3Rpb24gNC4x LjEgaXMgZm9yLiAgSWYgdGhpcyBpcyBwcml2YXRlDQo+IGNvbW11bmljYXRpb25zLCB0aGVuIGl0 IGlzIGZhciB0b28gc3BlY2lmaWMuICBJZiB0aGlzIGlzIGludGVuZGVkIHRvDQo+IGJlIG5vcm1h dGl2ZSwgdGhlbiBpdCBpc24ndCBzdWZmaWNpZW50LiAgV2hhdCBpcyB0aGUgYmFzZSBVUkk/ICBX aGF0DQo+IHByZXZlbnRzIGEgcmFuZG9tIGludGVybmV0IGRlbml6ZW4gZnJvbSBhY3F1aXJpbmcg dGhpcyBzeW1tZXRyaWMga2V5Pw0KPiBXaHkgdGhlc2UgdHdvIHNwZWNpZmljIHBhcmFtZXRlcnM/ ICBXaHkgZG9lcyB0aGUgZXhwaXJhdGlvbg0KPiBpbmZvcm1hdGlvbiBpbiB0aGUgSldLIHJlcGxp Y2F0ZSB3aGF0IEhUVFAgcHJvdmlkZXM/ICBJJ2QgYmUgZmFyDQo+IGhhcHBpZXIgd2l0aCBoYW5k LXdhdmluZyB0aGFuIHdpdGggdGhpcyBzZWN0aW9uIGluIHBsYWNlLg0KDQpJdCBpcyBwcml2YXRl IGNvbW11bmljYXRpb24gYW5kIHRoaXMgc2VjdGlvbiBpcyBvbmx5IGFuIGV4YW1wbGUgb2YgaG93 IHRoaXMgY291bGQgYmUgYWNoaWV2ZWQuDQoNCj4gDQo+IFNlY3Rpb24gNSBmYWlscyB0byBleHBs aWNpdGx5IHN0YXRlIHdoZXRoZXIgdGhlIE1BQyBrZXkgaXMgdXNlZCBhcw0KPiBpbnB1dCB0byBz aG9ydCB0ZXJtIG9yIGxvbmcgdGVybSBjcmVkZW50aWFscy4gIEl0IG5lZWRzIHRvIHNheSBzaG9y dA0KPiB0ZXJtLCBJIHRoaW5rLg0KDQpZZXMsIGl0J3MgbWVudGlvbmVkIHRoYXQgbWFjX2tleSBp cyB1c2VkIGFzIGlucHV0DQoNCjxzbmlwPg0KDQogICBUaGUgU1RVTiBjbGllbnQgaW5jbHVkZXMg YSBNRVNTQUdFLUlOVEVHUklUWSBhdHRyaWJ1dGUNCiAgIGFzIHRoZSBsYXN0IGF0dHJpYnV0ZSBp biB0aGUgbWVzc2FnZSBvdmVyIHRoZSBjb250ZW50cyBvZiB0aGUgU1RVTg0KICAgbWVzc2FnZS4g IFRoZSBITUFDIGZvciB0aGUgTUVTU0FHRS1JTlRFR1JJVFkgYXR0cmlidXRlIGlzIGNvbXB1dGVk IGFzDQogICBkZXNjcmliZWQgaW4gc2VjdGlvbiAxNS40IG9mIFtSRkM1Mzg5XSB3aGVyZSB0aGUg bWFjX2tleSBpcyB1c2VkIGFzDQogICB0aGUgaW5wdXQga2V5IGZvciB0aGUgSE1BQyBjb21wdXRh dGlvbi4gIFRoZSBTVFVOIGNsaWVudCBhbmQgc2VydmVyDQogICB3aWxsIHVzZSB0aGUgbWFjX2tl eSB0byBjb21wdXRlIHRoZSBtZXNzYWdlIGludGVncml0eSBhbmQgZG8gbm90DQogICBwZXJmb3Jt IE1ENSBoYXNoIG9uIHRoZSBjcmVkZW50aWFscy4NCg0KPC9zbmlwPg0KDQo+IA0KPiBXaHkgZG9l cyB0aGlzIGRvY3VtZW50IHVzZSAna2lkJyByYXRoZXIgdGhhbiBVU0VSTkFNRT8gIElzbid0IHRo ZQ0KPiBwb2ludCB0byBnZXQgYSBzaG9ydCB0ZXJtICB1c2VybmFtZStwYXNzd29yZCBwYWlyIGZy b20gdGhlDQo+IGF1dGhvcml6YXRpb24gc2VydmVyID8NCg0KVGhpcyBkb2N1bWVudCB1c2VzIHVz ZXJuYW1lLCBraWQgaXMgc2lnbmFsZWQgaW4gdGhlIHVzZXJuYW1lIGF0dHJpYnV0ZS4NCg0KPiAN Cj4gU2VjdGlvbiA3IHNlZW1zIHRvIGltcGx5IHR3byBsYXllcnMgb2YgYXV0aGVudGljYXRpb246 IHRoZSBBRUFEIGFuZA0KPiBzb21lIEhNQUMuICBJIGNhbid0IHdvcmsgb3V0IHdoYXQgaXMgYmVp bmcgYXV0aGVudGljYXRlZC4gIEknbSBub3QNCj4gc3VyZSB0aGF0IGFueW9uZSBlbHNlIGNvdWxk IGVpdGhlci4NCg0KSXQncyBvbmx5IG9uZSBsYXllciBvZiBhdXRoZW50aWNhdGlvbiBlaXRoZXIg QUVBRCBBRVMgR0NNIG9yIEFFQUQgQ0JDIEhNQUMuDQoNCj4gDQo+IFRoZSByZXBsYXkgcHJvdGVj dGlvbiBpbiBTZWN0aW9uIDcgaXMgbm90IHN1ZmZpY2llbnQuICBJZiB0aGUgaW50ZW50DQo+IGlz IHRvIHByZXZlbnQgcmVwbGF5LCB0aGVuIHRoZSBzZXJ2ZXIgbmVlZHMgdG8gbWFpbnRhaW4gYQ0K PiBnbG9iYWxseS1jb25zaXN0ZW50IHJlZ2lzdGVyIG9mIHRoZSByZXF1ZXN0cyB0aGF0IGl0IGhh cyBzZWVuIHNvIHRoYXQNCj4gaXQgY2FuIGNvcnJlY3RseSByZWplY3QgcmVwbGF5cy4gIEhvd2V2 ZXIsIEkgdGhpbmsgdGhhdCB0aGUgaW50ZW50IGlzDQo+IHRvIHBlcm1pdCByZXBsYXksIHNvIHBl cmhhcHMgaXQgaXMgdGhlIGNhc2UgdGhhdCBjYXN0aW5nIHRoaXMgYXMNCj4gYW50aS1yZXBsYXkg aXMgY291bnRlci1pbnR1aXRpdmUuICBUaGF0IHNhaWQsIEkgYmVsaWV2ZSB0aGF0IHRoaXMgaXMg YQ0KPiBzZXJpb3VzIERvUyB2ZWN0b3IgYW5kIHdlIHNob3VsZCBiZSByZWNvbW1lbmRpbmcgdGhh dCBzZXJ2ZXJzIGF0IGxlYXN0DQo+IGFjY291bnQgZm9yIHdoYXQgaGFzIGJlZW4gcmVwbGF5ZWQg YW5kIGxpbWl0IHRoZSBudW1iZXIgb2YgdGltZXMgYQ0KPiBwYXJ0aWN1bGFyIHRva2VuIGNhbiBi ZSB1c2VkLg0KPiANCj4gSWYgdGhlIGludGVudCBvZiB0aGUgbGlmZXRpbWUgaW4gdGhlIHRva2Vu IGlzIHRvIHByZXZlbnQgcmVwbGF5LCB0aGVuDQo+IHRoaXMgaXMgYmFkOg0KPiANCj4gICBvICBU aGUgbGlmZXRpbWUgcHJvdmlkZWQgYnkgdGhlIFRVUk4gc2VydmVyIGluIHRoZSBBbGxvY2F0ZSBh bmQNCj4gICAgICAgUmVmcmVzaCByZXNwb25zZXMgTVVTVCBiZSBsZXNzIHRoYW4gb3IgZXF1YWwg dG8gdGhlIGxpZmV0aW1lIG9mDQo+ICAgICAgIHRoZSB0b2tlbi4NCj4gDQo+IFR5aW5nIHRoZSB0 d28gbGlmZXRpbWVzIHRvZ2V0aGVyIG1lYW5zIHRoYXQgeW91IG5lZWQgdG8gaGF2ZSBhIGxvbmcN Cj4gdG9rZW4gbGlmZXRpbWUgaW4gb3JkZXIgdG8gc3VwcG9ydCBsb25nIHNlc3Npb25zLiAgQnV0 IGxvbmcgdG9rZW4NCj4gbGlmZXRpbWVzIG1lYW5zIGxvbmcgcGVyaW9kcyBvZiBleHBvc3VyZSB0 byByZXBsYXkgYW5kIGxvdHMgb2YNCj4gbWFpbnRhaW5lZCBzdGF0ZS4gIFNlZSBlYXJsaWVyIHBv aW50IGFib3V0IHBvbGljaWVzIGJlaW5nIGNhcnJpZWQgaW4NCj4gdGhlIHRva2VuLg0KDQpSZXBs YXkgYXR0YWNrcyBhcmUgbm90IHBvc3NpYmxlIGJlY2F1c2Ugb2Ygbm9uY2UsIGFuIGF0dGFja2Vy IHRyeWluZyB0byByZXBsYXkgbWVzc2FnZSB3aXRoIEFDQ0VTUy1UT0tFTiBhdHRyaWJ1dGUgY2Fu IGJlIG1pdGlnYXRlZCBieSBmcmVxdWVudCBjaGFuZ2VzIG9mIG5vbmNlIHZhbHVlIGFzIGRpc2N1 c3NlZCBpbiBodHRwczovL3Rvb2xzLmlldGYub3JnL2h0bWwvcmZjNTM4OSNzZWN0aW9uLTEwLjIu DQoNCj4gDQo+IFNlY3Rpb24gOCBzZWVtcyBjb21wbGV0ZWx5IHVubmVjZXNzYXJ5LiAgV2hhdCBy ZXNvdXJjZSBpcyBiZWluZw0KPiBjb25zZXJ2ZWQgaGVyZT8gIA0KDQpTZWN0aW9uIDggaXMgcmVx dWlyZWQgZm9yIHRoZSBjbGllbnQgdG8gYXV0aGVudGljYXRlIHRoZSBTVFVOIHNlcnZlci4NCg0K PiBJdCdzIG1vcmUgd29yayB0byBtYWludGFpbiBhbGwgdGhpcyBzdGF0ZSBhbmQNCj4gdmFsaWRh dGUgYWxsIHRob3NlIHRva2VucyB0aGFuIGl0IGlzIHRvIHJlc3BvbmQgaW4gdGhlIGFmZmlybWF0 aXZlIHRvDQo+IFNUVU4gcmVxdWVzdC4gIChBbHNvLCB3aHkgZG9lc24ndCBTVFVOIHVzYWdlIGdl dCBhIGZhbmN5IE9BdXRoIG1hcHBpbmcNCj4gdGFibGUgbGlrZSBTZWN0aW9uIDk/ICBJcyBpdCBz b21laG93IGRpZmZlcmVudD8pDQoNClRoZSBtYXBwaW5nIHRvIFNUVU4gaXMgYWxzbyBzaW1pbGFy IA0KQ2xpZW50IC0+IFNUVU4gY2xpZW50OyBSZXNvdXJjZSBzZXJ2ZXIgLT4gU1RVTiBzZXJ2ZXI7 DQpSZXNvdXJjZSBvd25lciAtPiBBdXRob3JpemF0aW9uIHNlcnZlci4NCg0KLVRpcnUNCg0KPiAN Cj4gSW4gc3VtbWFyeSwgSSdtIHN1cnByaXNlZCB0aGF0IGEgZG9jdW1lbnQgaW4gdGhpcyBzdGF0 ZSB3YXMgcHV0IGJlZm9yZSB0aGUNCj4gSUVTRy4NCg0K From nobody Wed Apr 15 09:06:32 2015 Return-Path: X-Original-To: tram@ietfa.amsl.com Delivered-To: tram@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 7DCDD1B2C98; Wed, 15 Apr 2015 09:06:28 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -14.511 X-Spam-Level: X-Spam-Status: No, score=-14.511 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_HI=-5, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id x19LRH605Teo; Wed, 15 Apr 2015 09:06:26 -0700 (PDT) Received: from rcdn-iport-5.cisco.com (rcdn-iport-5.cisco.com [173.37.86.76]) (using TLSv1 with cipher RC4-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 7FF9F1B2BCB; Wed, 15 Apr 2015 09:06:26 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=5144; q=dns/txt; s=iport; t=1429113987; x=1430323587; h=from:to:cc:subject:date:message-id: content-transfer-encoding:mime-version; bh=cqMKFRfTWpcH6Mg2PYWtIsQfqEs1gk+yQsRIxviC+Jo=; b=OlHS7oieTeike7WqtBWEML07YVaKYtvCfzsA2ozrcpKbacN02mHP7ay9 srbZw9ydBZJ9NwTpgg4QaDwntVLIT86rWUTHZbieAE5LsiVNqDjmO7Mh7 RKD1T2FAST6qtOslDRbRlXEVpGtzoHEpgrTzb8GvGe5NEIIFAN6xRUSha Q=; X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: A0BUBQDJiy5V/4wNJK1cgwyBLgWDEMFniEECHIEfTAEBAQEBAX6EIAEBAQQjEUUMBgEIEQQBAQECAgYZBAMCBDAUAQgJAQQBDQUIiCKvFZYAAQEBAQEBAQEBAQEBAQEBAQEBAQEBF4EhigqEMRoWGw2CYi+BFgWRDoYlhQmDN4JmjTUigjOBPG+BRH8BAQE X-IronPort-AV: E=Sophos;i="5.11,582,1422921600"; d="scan'208";a="412080481" Received: from alln-core-7.cisco.com ([173.36.13.140]) by rcdn-iport-5.cisco.com with ESMTP; 15 Apr 2015 16:06:26 +0000 Received: from xhc-rcd-x12.cisco.com (xhc-rcd-x12.cisco.com [173.37.183.86]) by alln-core-7.cisco.com (8.14.5/8.14.5) with ESMTP id t3FG6PMP023794 (version=TLSv1/SSLv3 cipher=AES128-SHA bits=128 verify=FAIL); Wed, 15 Apr 2015 16:06:25 GMT Received: from xmb-rcd-x10.cisco.com ([169.254.15.220]) by xhc-rcd-x12.cisco.com ([173.37.183.86]) with mapi id 14.03.0195.001; Wed, 15 Apr 2015 11:06:25 -0500 From: "Tirumaleswar Reddy (tireddy)" To: Brandon Williams , Stephen Farrell , The IESG Thread-Topic: [tram] Stephen Farrell's Discuss on draft-ietf-tram-turn-third-party-authz-13: (with DISCUSS and COMMENT) Thread-Index: AdB3ljKzAA33GpUaTLec5SjFMg7ybg== Date: Wed, 15 Apr 2015 16:06:24 +0000 Message-ID: <913383AAA69FF945B8F946018B75898A4120E55C@xmb-rcd-x10.cisco.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.65.73.110] Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 MIME-Version: 1.0 Archived-At: Cc: "tram-chairs@ietf.org" , "tram@ietf.org" , "draft-ietf-tram-turn-third-party-authz@ietf.org" , "gonzalo.camarillo@ericsson.com" , "draft-ietf-tram-turn-third-party-authz.ad@ietf.org" , "draft-ietf-tram-turn-third-party-authz.shepherd@ietf.org" Subject: Re: [tram] Stephen Farrell's Discuss on draft-ietf-tram-turn-third-party-authz-13: (with DISCUSS and COMMENT) X-BeenThere: tram@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "Discussing the creation of a Turn Revised And Modernized \(TRAM\) WG, which goal is to consolidate the various initiatives to update TURN and STUN." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 15 Apr 2015 16:06:28 -0000 PiAtLS0tLU9yaWdpbmFsIE1lc3NhZ2UtLS0tLQ0KPiBGcm9tOiBCcmFuZG9uIFdpbGxpYW1zIFtt YWlsdG86YnJhbmRvbi53aWxsaWFtc0Bha2FtYWkuY29tXQ0KPiBTZW50OiBUdWVzZGF5LCBBcHJp bCAxNCwgMjAxNSA2OjM2IFBNDQo+IFRvOiBUaXJ1bWFsZXN3YXIgUmVkZHkgKHRpcmVkZHkpOyBT dGVwaGVuIEZhcnJlbGw7IFRoZSBJRVNHDQo+IENjOiB0cmFtLWNoYWlyc0BpZXRmLm9yZzsgdHJh bUBpZXRmLm9yZzsgZHJhZnQtaWV0Zi10cmFtLXR1cm4tdGhpcmQtcGFydHktDQo+IGF1dGh6QGll dGYub3JnOyBnb256YWxvLmNhbWFyaWxsb0Blcmljc3Nvbi5jb207IGRyYWZ0LWlldGYtdHJhbS10 dXJuLXRoaXJkLQ0KPiBwYXJ0eS1hdXRoei5hZEBpZXRmLm9yZzsgZHJhZnQtaWV0Zi10cmFtLXR1 cm4tdGhpcmQtcGFydHktDQo+IGF1dGh6LnNoZXBoZXJkQGlldGYub3JnDQo+IFN1YmplY3Q6IFJl OiBbdHJhbV0gU3RlcGhlbiBGYXJyZWxsJ3MgRGlzY3VzcyBvbiBkcmFmdC1pZXRmLXRyYW0tdHVy bi10aGlyZC0NCj4gcGFydHktYXV0aHotMTM6ICh3aXRoIERJU0NVU1MgYW5kIENPTU1FTlQpDQo+ IA0KPiBPbiAwNC8xMC8yMDE1IDExOjA3IFBNLCBUaXJ1bWFsZXN3YXIgUmVkZHkgKHRpcmVkZHkp IHdyb3RlOg0KPiA+PiAtLS0tLU9yaWdpbmFsIE1lc3NhZ2UtLS0tLQ0KPiA+PiBGcm9tOiBTdGVw aGVuIEZhcnJlbGwgW21haWx0bzpzdGVwaGVuLmZhcnJlbGxAY3MudGNkLmllXQ0KPiA+PiBTZW50 OiBTYXR1cmRheSwgQXByaWwgMTEsIDIwMTUgMTowOCBBTQ0KPiA+PiBUbzogVGhlIElFU0cNCj4g Pj4gQ2M6IHRyYW0tY2hhaXJzQGlldGYub3JnOyB0cmFtQGlldGYub3JnOw0KPiA+PiBkcmFmdC1p ZXRmLXRyYW0tdHVybi10aGlyZC1wYXJ0eS0gYXV0aHpAaWV0Zi5vcmc7DQo+ID4+IGdvbnphbG8u Y2FtYXJpbGxvQGVyaWNzc29uLmNvbTsgZHJhZnQtaWV0Zi10cmFtLXR1cm4tdGhpcmQtDQo+ID4+ IHBhcnR5LWF1dGh6LmFkQGlldGYub3JnOyBkcmFmdC1pZXRmLXRyYW0tdHVybi10aGlyZC1wYXJ0 eS0NCj4gPj4gYXV0aHouc2hlcGhlcmRAaWV0Zi5vcmcNCj4gPj4gU3ViamVjdDogU3RlcGhlbiBG YXJyZWxsJ3MgRGlzY3VzcyBvbg0KPiA+PiBkcmFmdC1pZXRmLXRyYW0tdHVybi10aGlyZC1wYXJ0 eS1hdXRoei0NCj4gPj4gMTM6ICh3aXRoIERJU0NVU1MgYW5kIENPTU1FTlQpDQo+ID4+DQo+ID4+ DQo+ID4+ICgyKSBQbGVhc2UgY29uc2lkZXIgd2hldGhlciBhIHNpZ25hdHVyZSBiYXNlZCBzY2hl bWUgdGhhdCBkb2VzIG5vdA0KPiA+PiByZXF1aXJlIHByZS1zaGFyZWQga2V5cyBiZXR3ZWVuIHRo ZSBUVVJOIGFuZCAoaW4gcGFydGljdWxhcikgV2ViUlRDDQo+ID4+IHNlcnZlciBjb3VsZCBiZSB1 c2VmdWwgdG8gc3VwcG9ydC4gKEVpdGhlciBpbiB0aGlzIGRvY3VtZW50IG9yDQo+ID4+IGVsc2V3 aGVyZS4pIFRoZXJlIHNob3VsZCBiZSB1c2UgY2FzZXMgd2hlcmUgdGhhdCBvZmZlcnMgc3VmZmlj aWVudA0KPiA+PiBhY2NvdW50YWJpbGl0eSBmb3IgdXNlIG9mIFRVUk4gYW5kIGl0IG91Z2h0IGFs bG93IHNvbWUgZGVwbG95bWVudHMNCj4gPj4gdGhhdCBhcmUgbGVzcyBlYXN5IHdpdGggdGhpcyBr aW5kIG9mIHByZS1zaGFyZWQga2V5cyBhcHByb2FjaC4gVGhlDQo+ID4+IERJU0NVU1MgaGVyZSBp cyB0byBjaGVjayBpZiB0aGUgV0cgd2FudCB0byB0YWtlIHRoYXQgYXBwcm9hY2gsIGVpdGhlcg0K PiBub3cgb3IgbGF0ZXIuDQo+ID4NCj4gPiBQYXNzaXZlIGF0dGFja3MgY291bGQgb2NjdXIgaW4g VFVSTiBkdWUgdG8gbGFjayBvZiBpbnRlZ3JpdHkgcHJvdGVjdGlvbi4gRm9yDQo+IGV4YW1wbGUs IGEgcGFzc2l2ZSBhdHRhY2tlciBjb3VsZCBtb25pdG9yIEFsbG9jYXRlIHJlcXVlc3QvcmVzcG9u c2UNCj4gYmV0d2VlbiB0aGUgY2xpZW50IGFuZCBUVVJOIHNlcnZlciBhbmQgbWFrZSBhIFJlZnJl c2ggcmVxdWVzdCB3aXRoIGENCj4gcmVxdWVzdGVkIGxpZmV0aW1lIG9mIDAgdG8gZGVsZXRlIHRo ZSBhbGxvY2F0aW9uLiBNZXNzYWdlIGludGVncml0eSBvZiBUVVJODQo+IG1lc3NhZ2VzIGVuc3Vy ZXMgdGhhdCBwYXNzaXZlIGF0dGFja2VyIGNhbm5vdCBzcG9vZiBzdWJzZXF1ZW50IFRVUk4NCj4g bWVzc2FnZXMuDQo+ID4NCj4gDQo+IEkgdGhpbmsgU3RlcGhlbiB3YXMgdGhpbmtpbmcgcHJpbWFy aWx5IGFib3V0IGNhc2VzIHdpdGggKEQpVExTIGludm9sdmVkDQo+IGJldHdlZW4gdGhlIFVBIGFu ZCB0aGUgU1RVTiBzZXJ2ZXIuIElmIHRoZXJlJ3MgYWxyZWFkeSBhIHNlY3VyaXR5IGxheWVyIHRo ZW4NCj4gcGVyaGFwcyBpdCdzIGVub3VnaCB0byBwcm92ZSB0aGF0IHRoZSBhdXRoIHNlcnZlciBh cHByb3ZlZCB0aGUNCj4gY29tbXVuaWNhdGlvbiBhbmQgaXQncyBPSyB0byBza2lwIFNUVU4gaW50 ZWdyaXR5IHByb3RlY3Rpb24gYWx0b2dldGhlci4NCj4gTXkgZXhwZXJpZW5jZSBzdWdnZXN0cyB0 aGF0IGV2ZW4gaW4gYSBjYXNlIHdoZXJlIChEKVRMUyBpc24ndCBpbnZvbHZlZCBzb21lDQo+IGFw cGxpY2F0aW9uIHByb3ZpZGVycyB3aWxsIG5vdCBjb25zaWRlciB0aGUgcmlzayBvZiBza2lwcGlu ZyBTVFVOIEhNQUNzIGJpZw0KPiBlbm91Z2ggdG8ganVzdGlmeSBkb2luZyBpdC4NCg0KR290IGl0 LCB0aGFua3MuDQoNCj4gDQo+IA0KPiA+PiAtIDk6IEZpZ3VyZSAyIHNob3VsZCBiZSB3YXkgdXAg YXQgdGhlIHRvcCBvZiB0aGUgZG9jdW1lbnQgYW5kIG5vdA0KPiA+PiBoZXJlDQo+ID4NCj4gPiBJ biB0aGUgcHJldmlvdXMgdmVyc2lvbnMgaXQgd2FzIGluIHRoZSB0b3Agb2YgdGhlIGRvY3VtZW50 IGJ1dCBtb3ZlZA0KPiBkb3duIGFmdGVyIGNvbW1lbnRzIHJlY2VpdmVkIGZyb20gdGhlIFdHIHRo YXQgV2ViUlRDIGlzIG9ubHkgYW4NCj4gZXhhbXBsZSB1c2FnZSBvZiB0aGlyZCBwYXJ0eSBhdXRo b3JpemF0aW9uLg0KPiANCj4gQSBmZXcgcGVvcGxlIGZyb20gb3V0c2lkZSB0aGUgV0cgaGF2ZSBj b21tZW50ZWQgb24gaGF2aW5nIHRyb3VibGUNCj4gZm9sbG93aW5nIHRoZSBmbG93IG9mIHRoZSBk b2N1bWVudCBvbiB0aGVpciBmaXJzdCByZWFkLCBwcmltYXJpbHkgZHVlIHRvIHRoZQ0KPiBsYWNr IG9mIGEgaGlnaC1sZXZlbCBwaWN0dXJlIGVhcmx5IGluIHRoZSBkb2N1bWVudC4gTW92aW5nIHNl Y3Rpb24gOSBiYWNrIHVwDQo+IHRvd2FyZCB0aGUgdG9wIG9mIHRoZSBkb2N1bWVudCB3b3VsZCBo ZWxwIGJ5IGdpdmluZyByZWFkZXJzIHN1Y2ggYSBoaWdoLQ0KPiBsZXZlbCBvdmVydmlldyBlYXJs eSBvbi4gVGhlIGRpc2N1c3Npb24gbWlnaHQgbmVlZCB0byBiZSBnZW5lcmFsaXplZCBhIGJpdCBp bg0KPiBvcmRlciB0byBzZXJ2ZSB0aGlzIHB1cnBvc2UsIGJ1dCBjb21tZW50cyB3ZSd2ZSByZWNl aXZlZCBvbiB0aGUNCj4gZG9jdW1lbnQncyB1c2FiaWxpdHkgaW5kaWNhdGUgdGhhdCB0aGlzIGNo YW5nZSB3b3VsZCBiZSBoZWxwZnVsLg0KDQpTZWN0aW9uIDkgaXMgc3BlY2lmaWMgdG8gVFVSTiBh bmQgdGhlIGFzayBmcm9tIHRoZSBXRyBpcyB0byBkaXNjdXNzIGl0IGluIGEgc2VwYXJhdGUgc2Vj dGlvbiBhZnRlciB0aGlyZCBwYXJ0eSBhdXRob3JpemF0aW9uIHdpdGggU1RVTiBwcm90b2NvbCBp cyBleHBsYWluZWQuDQoNCi1UaXJ1DQoNCj4gDQo+IC0tQnJhbmRvbg0KPiANCj4gLS0NCj4gQnJh bmRvbiBXaWxsaWFtczsgU2VuaW9yIFByaW5jaXBhbCBTb2Z0d2FyZSBFbmdpbmVlciBFbWVyZ2lu ZyBQcm9kdWN0cw0KPiBFbmdpbmVlcmluZzsgQWthbWFpIFRlY2hub2xvZ2llcyBJbmMuDQo= From nobody Wed Apr 15 09:09:05 2015 Return-Path: X-Original-To: tram@ietfa.amsl.com Delivered-To: tram@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E14061B2CDF for ; Wed, 15 Apr 2015 09:09:03 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -14.511 X-Spam-Level: X-Spam-Status: No, score=-14.511 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_HI=-5, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id lBl5ey_zdCuA for ; Wed, 15 Apr 2015 09:09:02 -0700 (PDT) Received: from rcdn-iport-2.cisco.com (rcdn-iport-2.cisco.com [173.37.86.73]) (using TLSv1 with cipher RC4-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 01BFC1B2CD8 for ; Wed, 15 Apr 2015 09:09:01 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=3840; q=dns/txt; s=iport; t=1429114142; x=1430323742; h=from:to:subject:date:message-id: content-transfer-encoding:mime-version; bh=ENbTQpGqdtXDEy+ze5fcLNjYC9w2UwdcZxTe8bUaBJM=; b=cAUyGBPWLLPNmJzHS9+Y5uK4IMIOtrWSwG4rAkoq3AGPGYhP2n5pzoS2 2WVKkAsOQ4pr3sQ0KbjtU51HuQF+Se1HRzW8+pZEfnOTCV+u8i+ftXt9X P+fv0YaskaND7536iFlJB27kRQJULSu8l90581XSmFM0ri4FO9Xb1lsxl c=; X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: A0BVBQDJiy5V/4cNJK1cgwxSXAXEd4I0CoYDAoE7TAEBAQEBAX6EIAEBAQMBAQEBNy0HEAcGAQgRBAEBAQoUBQQoBgsUCQkBBAESCBOHewMJCA2/UA2FKwEBAQEBAQEBAQEBAQEBAQEBAQEBARMEiyuCSIFpGj6DEYEWBZEOg3mES5ABhjsigjOBPG+BRH8BAQE X-IronPort-AV: E=Sophos;i="5.11,582,1422921600"; d="scan'208";a="412444519" Received: from alln-core-2.cisco.com ([173.36.13.135]) by rcdn-iport-2.cisco.com with ESMTP; 15 Apr 2015 16:09:01 +0000 Received: from xhc-rcd-x02.cisco.com (xhc-rcd-x02.cisco.com [173.37.183.76]) by alln-core-2.cisco.com (8.14.5/8.14.5) with ESMTP id t3FG919C027335 (version=TLSv1/SSLv3 cipher=AES128-SHA bits=128 verify=FAIL); Wed, 15 Apr 2015 16:09:01 GMT Received: from xmb-rcd-x10.cisco.com ([169.254.15.220]) by xhc-rcd-x02.cisco.com ([173.37.183.76]) with mapi id 14.03.0195.001; Wed, 15 Apr 2015 11:09:00 -0500 From: "Tirumaleswar Reddy (tireddy)" To: Brandon Williams , "tram@ietf.org" Thread-Topic: [tram] Stephen Farrell's Discuss on draft-ietf-tram-turn-third-party-authz-13: (with DISCUSS and COMMENT) Thread-Index: AdB3louUjzyHQog6Snaz2q2+zUT+kQ== Date: Wed, 15 Apr 2015 16:09:00 +0000 Message-ID: <913383AAA69FF945B8F946018B75898A4120E570@xmb-rcd-x10.cisco.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.65.73.110] Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 Archived-At: Subject: Re: [tram] Stephen Farrell's Discuss on draft-ietf-tram-turn-third-party-authz-13: (with DISCUSS and COMMENT) X-BeenThere: tram@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "Discussing the creation of a Turn Revised And Modernized \(TRAM\) WG, which goal is to consolidate the various initiatives to update TURN and STUN." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 15 Apr 2015 16:09:04 -0000 > -----Original Message----- > From: tram [mailto:tram-bounces@ietf.org] On Behalf Of Brandon Williams > Sent: Tuesday, April 14, 2015 6:07 PM > To: tram@ietf.org > Subject: Re: [tram] Stephen Farrell's Discuss on draft-ietf-tram-turn-thi= rd- > party-authz-13: (with DISCUSS and COMMENT) >=20 > I don't think OOB communication b/w the STUN and auth servers is a > solution to the problem of wanting to provide additional details in the > token. It defeats a large part of the purpose of moving to a token model = in > the first place, which was to avoid the need for these two servers to hav= e to > communicate directly with each other. The size of the metadata will determine if in-band or OOB is required. >=20 > I agree with Martin that it would be useful to have the capability to > communicate additional information in the token, and I don't recall that = it > was decided that the token wouldn't have this capability (unless by decid= ed > you mean there wasn't enough interest in the discussion).=20 Yes, there was not enough interest in the discussion. -Tiru > I don't agree that > this would necessarily be bad for interoperability, provided that individ= ual > bits of additional information are never required to be present or requir= ed > to be understood if they are present. > A list of TLVs at the end of the data space would not be particularly dif= ficult > to support. >=20 > I don't feel strongly enough about providing such a mechanism to push for > it, but I would be supportive if someone else does. >=20 > --Brandon >=20 > On 04/14/2015 02:02 AM, Tirumaleswar Reddy (tireddy) wrote: > >> -----Original Message----- > >> From: Oleg Moskalenko [mailto:mom040267@gmail.com] > >> Sent: Tuesday, April 14, 2015 10:57 AM > >> To: Martin Thomson > >> Cc: Tirumaleswar Reddy (tireddy); tram-chairs@ietf.org; > >> tram@ietf.org; Brandon Williams; rlb@ipv.sx; Salz, Rich; Stephen > >> Farrell > >> (stephen.farrell@cs.tcd.ie) > >> Subject: Re: [tram] Stephen Farrell's Discuss on > >> draft-ietf-tram-turn-third- > >> party-authz-13: (with DISCUSS and COMMENT) > >> > >> On Mon, Apr 13, 2015 at 11:17 AM, Martin Thomson > >> wrote: > >>> > >>> Section 4 doesn't permit any additional information to be carried in > >>> the token. Therefore, the STUN/TURN server is unable to apply any > >>> additional policies that the authorization server might impose, such > >>> as limits on the length of the session, the number of ports > >>> allocated, or the bandwidth that is allocated. (Or whatever we > >>> might later conceive of.) > >> > >> I believe that extra token information is a very very bad idea - it > >> kills the whole interoperability thing in the draft. If we are adding = "extra" > >> information to the token, we can as well just kill the draft and tell > >> the STUN server developers "do whatever you want, secure the stuff > >> somehow, we do not care". > > > > It was discussed in the WG and decision was not to carry any extra toke= n > information so as to keep the token size small. In future an out-of-band > communication mechanism b/w STUN and authorization server to exchange > the token related metadata can be defined similar to the OAuth 2.0 Token > Introspection method defined in https://tools.ietf.org/html/draft-ietf-oa= uth- > introspection-07. > > > > -Tiru > > _______________________________________________ > > tram mailing list > > tram@ietf.org > > https://www.ietf.org/mailman/listinfo/tram > > >=20 > -- > Brandon Williams; Senior Principal Software Engineer Emerging Products > Engineering; Akamai Technologies Inc. >=20 > _______________________________________________ > tram mailing list > tram@ietf.org > https://www.ietf.org/mailman/listinfo/tram From nobody Wed Apr 15 09:10:07 2015 Return-Path: X-Original-To: tram@ietfa.amsl.com Delivered-To: tram@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E88C51B2CD8; Wed, 15 Apr 2015 09:10:05 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -14.511 X-Spam-Level: X-Spam-Status: No, score=-14.511 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_HI=-5, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id HdEj6zVgd1M6; Wed, 15 Apr 2015 09:10:04 -0700 (PDT) Received: from rcdn-iport-6.cisco.com (rcdn-iport-6.cisco.com [173.37.86.77]) (using TLSv1 with cipher RC4-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 97B961B2CD2; Wed, 15 Apr 2015 09:10:04 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=1922; q=dns/txt; s=iport; t=1429114205; x=1430323805; h=from:to:cc:subject:date:message-id: content-transfer-encoding:mime-version; bh=65G/SC1dzjTZu2pp2Wybes/AAp7LiLDJgDpwW56rjo4=; b=JpnmLV3/pUSMP62NVa3AlPTZe2j/tbsm4MZfiQkCI6JiUAY+CQ44uRXQ ly/P5ZEDPBzvSq7CsK50bRA+uBgEqOxrIDca87xVf2Pyfhln596/Slv8U 9Bbf2ayGl3ZTsbaNqAeBCzk843lXetE677N1/jBJhomFM+VpB4LOkeHLa I=; X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: A0BVBQAXjS5V/4sNJK1cgwyBLgWDEMFoiEECHIEfTAEBAQEBAX6EIAEBAQQjETgKAwwGAQgOAwQBAQECAgYZBAMCBB8RFAEICQEEAQ0FCIgOAxGvHJBHDYUrAQEBAQEBAQEBAQEBAQEBAQEBAQEBF4EhigqCSIFpGjENgmIvgRYBBJEOiESQAYY7IoIzgTxvgUR/AQEB X-IronPort-AV: E=Sophos;i="5.11,582,1422921600"; d="scan'208";a="412099753" Received: from alln-core-6.cisco.com ([173.36.13.139]) by rcdn-iport-6.cisco.com with ESMTP; 15 Apr 2015 16:10:04 +0000 Received: from xhc-rcd-x06.cisco.com (xhc-rcd-x06.cisco.com [173.37.183.80]) by alln-core-6.cisco.com (8.14.5/8.14.5) with ESMTP id t3FGA3bM018652 (version=TLSv1/SSLv3 cipher=AES128-SHA bits=128 verify=FAIL); Wed, 15 Apr 2015 16:10:03 GMT Received: from xmb-rcd-x10.cisco.com ([169.254.15.220]) by xhc-rcd-x06.cisco.com ([173.37.183.80]) with mapi id 14.03.0195.001; Wed, 15 Apr 2015 11:10:03 -0500 From: "Tirumaleswar Reddy (tireddy)" To: Oleg Moskalenko , Martin Thomson Thread-Topic: [tram] Stephen Farrell's Discuss on draft-ietf-tram-turn-third-party-authz-13: (with DISCUSS and COMMENT) Thread-Index: AdB3lrTivwSQTgMcQK2cznUvsf1wvA== Date: Wed, 15 Apr 2015 16:10:03 +0000 Message-ID: <913383AAA69FF945B8F946018B75898A4120E588@xmb-rcd-x10.cisco.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.65.73.110] Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 MIME-Version: 1.0 Archived-At: Cc: "tram-chairs@ietf.org" , "tram@ietf.org" , Brandon Williams , "rlb@ipv.sx" , "Salz, Rich" , "Stephen Farrell \(stephen.farrell@cs.tcd.ie\)" Subject: Re: [tram] Stephen Farrell's Discuss on draft-ietf-tram-turn-third-party-authz-13: (with DISCUSS and COMMENT) X-BeenThere: tram@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "Discussing the creation of a Turn Revised And Modernized \(TRAM\) WG, which goal is to consolidate the various initiatives to update TURN and STUN." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 15 Apr 2015 16:10:06 -0000 PiAtLS0tLU9yaWdpbmFsIE1lc3NhZ2UtLS0tLQ0KPiBGcm9tOiBPbGVnIE1vc2thbGVua28gW21h aWx0bzptb20wNDAyNjdAZ21haWwuY29tXQ0KPiBTZW50OiBXZWRuZXNkYXksIEFwcmlsIDE1LCAy MDE1IDI6NTAgQU0NCj4gVG86IE1hcnRpbiBUaG9tc29uDQo+IENjOiBUaXJ1bWFsZXN3YXIgUmVk ZHkgKHRpcmVkZHkpOyB0cmFtLWNoYWlyc0BpZXRmLm9yZzsgdHJhbUBpZXRmLm9yZzsNCj4gQnJh bmRvbiBXaWxsaWFtczsgcmxiQGlwdi5zeDsgU2FseiwgUmljaDsgU3RlcGhlbiBGYXJyZWxsDQo+ IChzdGVwaGVuLmZhcnJlbGxAY3MudGNkLmllKQ0KPiBTdWJqZWN0OiBSZTogW3RyYW1dIFN0ZXBo ZW4gRmFycmVsbCdzIERpc2N1c3Mgb24gZHJhZnQtaWV0Zi10cmFtLXR1cm4tdGhpcmQtDQo+IHBh cnR5LWF1dGh6LTEzOiAod2l0aCBESVNDVVNTIGFuZCBDT01NRU5UKQ0KPiANCj4gT24gVHVlLCBB cHIgMTQsIDIwMTUgYXQgMToxOCBQTSwgTWFydGluIFRob21zb24NCj4gPG1hcnRpbi50aG9tc29u QGdtYWlsLmNvbT4gd3JvdGU6DQo+ID4gT24gMTQgQXByaWwgMjAxNSBhdCAxMjo1MywgT2xlZyBN b3NrYWxlbmtvIDxtb20wNDAyNjdAZ21haWwuY29tPg0KPiB3cm90ZToNCj4gPj4gWW91IGNhbiBz ZXQgdGhlIHNlcnZlciBuYW1lIHRvDQo+ID4gIk1hcnRpbiBUaG9tc29uIiBhbmQgaXQgd2lsbCBi ZSBwZXJmZWN0bHkgT0suDQo+ID4NCj4gPiBPSywgeW91IHN0aWxsIGhhdmVuJ3QgZXhwbGFpbmVk IHdoeSBzdWNoIGEgZmllbGQgbmVlZHMgdG8gYmUgZGVmaW5lZA0KPiA+IGluIGFuIFJGQy4gIElk ZWFsbHksIHRoZSBkcmFmdCBzaG91bGQgY29udGFpbiB0aGF0IGV4cGxhbmF0aW9uLg0KPiANCj4g VGhlIGRyYWZ0IGZ1bGx5IGV4cGxhaW5zIHdoeSB3ZSBuZWVkIHRoYXQgZmllbGQgZm9yIHRoZSBz YWtlIG9mDQo+IGVuY3J5cHRpb24vYXV0aG9yaXphdGlvbi4gSSBkbyBub3QgYmVsaWV2ZSB0aGF0 IGl0IGNhbiBiZSBleHBsYWluZWQgY2xlYXJlci4NCg0KWWVzLCBpdCdzIGV4cGxhaW5lZCBpbiBz ZWN0aW9uIDYuMg0KDQo8c25pcD4NCiAgIFRoZSBhc3NvY2lhdGVkIGRhdGEgKEEpIE1VU1QgYmUg dGhlIFNUVU4gc2VydmVyIG5hbWUuICBUaGlzIGVuc3VyZXMNCiAgIHRoYXQgdGhlIGNsaWVudCBk b2VzIG5vdCB1c2UgdGhlIHNhbWUgdG9rZW4gdG8gZ2FpbiBpbGxlZ2FsIGFjY2VzcyB0bw0KICAg b3RoZXIgU1RVTiBzZXJ2ZXJzIHByb3ZpZGVkIGJ5IHRoZSBzYW1lIGFkbWluaXN0cmF0aXZlIGRv bWFpbiBpLmUuLA0KICAgd2hlbiBtdWx0aXBsZSBTVFVOIHNlcnZlcnMgaW4gYSBzaW5nbGUgYWRt aW5pc3RyYXRpdmUgZG9tYWluIHNoYXJlDQogICB0aGUgc2FtZSBzeW1tZXRyaWMga2V5IHdpdGgg YW4gYXV0aG9yaXphdGlvbiBzZXJ2ZXIuDQo8L3NuaXA+DQo= From nobody Wed Apr 15 09:10:55 2015 Return-Path: X-Original-To: tram@ietfa.amsl.com Delivered-To: tram@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id DF2E61B2CEC; Wed, 15 Apr 2015 09:10:53 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -14.511 X-Spam-Level: X-Spam-Status: No, score=-14.511 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_HI=-5, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id coKHI_KQxPAs; Wed, 15 Apr 2015 09:10:52 -0700 (PDT) Received: from alln-iport-1.cisco.com (alln-iport-1.cisco.com [173.37.142.88]) (using TLSv1 with cipher RC4-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 7BD5B1B2CC0; Wed, 15 Apr 2015 09:10:52 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=814; q=dns/txt; s=iport; t=1429114253; x=1430323853; h=from:to:cc:subject:date:message-id: content-transfer-encoding:mime-version; bh=5QukTozKKgjY7CJkuLKSITsmaViCE4e+dqYpdfr8ewY=; b=fU8srGKdGuwX6ixic8McQD/7l7fTpypIHz0QYu5G91sz1thYEa7DlTC7 jWbDYyD192wynDB5QxsgJsEGokf55gMHZpyor6xskQaZ395C6sX6neaCR on+ondyAlsKJsfNHtScGQA1UwGqcsyR7tOV664j+U+THVTSoQNp3M8b6h w=; X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: A0CLBAAtjS5V/4oNJK1cgwyBM4MQwWhmCYdSAhyBHzgUAQEBAQEBAX2EIQEBBCMRRRIBCA4MAgYZBwIEMBURAQQBDQ2IIq8dlX8BAQEBAQEBAQEBAQEBAQEBAQEBAQEXgSGKCoQxGjGCby+BFgEEkQ6fACKCM4E8gjN/AQEB X-IronPort-AV: E=Sophos;i="5.11,582,1422921600"; d="scan'208";a="141470142" Received: from alln-core-5.cisco.com ([173.36.13.138]) by alln-iport-1.cisco.com with ESMTP; 15 Apr 2015 16:10:33 +0000 Received: from xhc-rcd-x14.cisco.com (xhc-rcd-x14.cisco.com [173.37.183.88]) by alln-core-5.cisco.com (8.14.5/8.14.5) with ESMTP id t3FGAXQu008746 (version=TLSv1/SSLv3 cipher=AES128-SHA bits=128 verify=FAIL); Wed, 15 Apr 2015 16:10:33 GMT Received: from xmb-rcd-x10.cisco.com ([169.254.15.220]) by xhc-rcd-x14.cisco.com ([173.37.183.88]) with mapi id 14.03.0195.001; Wed, 15 Apr 2015 11:10:32 -0500 From: "Tirumaleswar Reddy (tireddy)" To: Oleg Moskalenko , Martin Thomson Thread-Topic: [tram] Stephen Farrell's Discuss on draft-ietf-tram-turn-third-party-authz-13: (with DISCUSS and COMMENT) Thread-Index: AdB3lsdc47GGptTVRH68rVdYieKk/Q== Date: Wed, 15 Apr 2015 16:10:32 +0000 Message-ID: <913383AAA69FF945B8F946018B75898A4120E593@xmb-rcd-x10.cisco.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.65.73.110] Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 MIME-Version: 1.0 Archived-At: Cc: "tram-chairs@ietf.org" , "tram@ietf.org" , Brandon Williams , "rlb@ipv.sx" , "Salz, Rich" , "Stephen Farrell \(stephen.farrell@cs.tcd.ie\)" Subject: Re: [tram] Stephen Farrell's Discuss on draft-ietf-tram-turn-third-party-authz-13: (with DISCUSS and COMMENT) X-BeenThere: tram@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "Discussing the creation of a Turn Revised And Modernized \(TRAM\) WG, which goal is to consolidate the various initiatives to update TURN and STUN." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 15 Apr 2015 16:10:54 -0000 PiA+DQo+ID4gQWxzbywgSSBqdXN0IG5vdGljZWQgdGhhdCB0aGlzIHVzZXMgYmFzZTY0LiAgVGhh dCdzIGFyYml0cmFyeS4gIERvZXMNCj4gPiB0aGUgY2xpZW50IHJlbW92ZSB0aGF0IGVuY29kaW5n IGJlZm9yZSBpbmNsdWRpbmcgdGhlIHRva2VuIGluIHRoZSBTVFVODQo+ID4gbWVzc2FnZT8gIFRo ZXJlJ3Mgbm8gTVVTVCB0aGVyZSwgYnV0IGl0IHNlZW1zIGxpa2UgaXQncyBwYXJ0IG9mIHRoZQ0K PiA+IHByb2Nlc3Mgc29tZWhvdy4NCj4gDQo+IG1vcmUgY2xhcmlmaWNhdGlvbnMgaW4gdGhlIHRl eHQgYXJlIGFsd2F5cyB3ZWxjb21lLg0KDQpUaGUgdG9rZW4gaXMgb3BhcXVlIHRvIHRoZSBjbGll bnQgYW5kIGl0IGluY2x1ZGVzIHRoZSB0b2tlbiBpbiB0aGUgU1RVTiBtZXNzYWdlIGFzIHByb3Zp ZGVkIGJ5IHRoZSBhdXRob3JpemF0aW9uIHNlcnZlci4gSXQncyBhbHJlYWR5IGRpc2N1c3NlZCBp biBzZWN0aW9uIDYuMg0KPHNuaXA+DQpOb3RlIHRoYXQgdGhlIHNlbGYtY29udGFpbmVkIHRva2Vu IGlzIG9wYXF1ZSB0byB0aGUgY2xpZW50IGFuZCB0aGUgY2xpZW50IE1VU1QgTk9UIGV4YW1pbmUg dGhlIHRva2VuLiAgDQo8L3NuaXA+DQo= From nobody Wed Apr 15 23:21:25 2015 Return-Path: X-Original-To: tram@ietfa.amsl.com Delivered-To: tram@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 02FC61B29B3; Wed, 15 Apr 2015 23:21:22 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.9 X-Spam-Level: X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ygwX_nbgRT34; Wed, 15 Apr 2015 23:21:20 -0700 (PDT) Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id A7BD21B29A3; Wed, 15 Apr 2015 23:21:19 -0700 (PDT) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: internet-drafts@ietf.org To: X-Test-IDTracker: no X-IETF-IDTracker: 6.0.1 Auto-Submitted: auto-generated Precedence: bulk Message-ID: <20150416062119.29675.46007.idtracker@ietfa.amsl.com> Date: Wed, 15 Apr 2015 23:21:19 -0700 Archived-At: Cc: tram@ietf.org Subject: [tram] I-D Action: draft-ietf-tram-turn-third-party-authz-14.txt X-BeenThere: tram@ietf.org X-Mailman-Version: 2.1.15 List-Id: "Discussing the creation of a Turn Revised And Modernized \(TRAM\) WG, which goal is to consolidate the various initiatives to update TURN and STUN." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 16 Apr 2015 06:21:22 -0000 A New Internet-Draft is available from the on-line Internet-Drafts directories. This draft is a work item of the TURN Revised and Modernized Working Group of the IETF. Title : Session Traversal Utilities for NAT (STUN) Extension for Third Party Authorization Authors : Tirumaleswar Reddy Prashanth Patil Ram Mohan Ravindranath Justin Uberti Filename : draft-ietf-tram-turn-third-party-authz-14.txt Pages : 23 Date : 2015-04-15 Abstract: This document proposes the use of OAuth 2.0 to obtain and validate ephemeral tokens that can be used for Session Traversal Utilities for NAT (STUN) authentication. The usage of ephemeral tokens ensures that access to a STUN server can be controlled even if the tokens are compromised. The IETF datatracker status page for this draft is: https://datatracker.ietf.org/doc/draft-ietf-tram-turn-third-party-authz/ There's also a htmlized version available at: http://tools.ietf.org/html/draft-ietf-tram-turn-third-party-authz-14 A diff from the previous version is available at: http://www.ietf.org/rfcdiff?url2=draft-ietf-tram-turn-third-party-authz-14 Please note that it may take a couple of minutes from the time of submission until the htmlized version and diff are available at tools.ietf.org. Internet-Drafts are also available by anonymous FTP at: ftp://ftp.ietf.org/internet-drafts/ From nobody Wed Apr 15 23:21:26 2015 Return-Path: X-Original-To: tram@ietfa.amsl.com Delivered-To: tram@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 82FE01B29BB; Wed, 15 Apr 2015 23:21:23 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.9 X-Spam-Level: X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id YkpfV_wLD6Mp; Wed, 15 Apr 2015 23:21:22 -0700 (PDT) Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id D8AD11B29AC; Wed, 15 Apr 2015 23:21:19 -0700 (PDT) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: internet-drafts@ietf.org To: , , , , , , , X-Test-IDTracker: no X-IETF-IDTracker: 6.0.1 Auto-Submitted: auto-generated Precedence: bulk Message-ID: <20150416062119.29675.43452.idtracker@ietfa.amsl.com> Date: Wed, 15 Apr 2015 23:21:19 -0700 Archived-At: Subject: [tram] New Version Notification - draft-ietf-tram-turn-third-party-authz-14.txt X-BeenThere: tram@ietf.org X-Mailman-Version: 2.1.15 List-Id: "Discussing the creation of a Turn Revised And Modernized \(TRAM\) WG, which goal is to consolidate the various initiatives to update TURN and STUN." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 16 Apr 2015 06:21:23 -0000 A new version (-14) has been submitted for draft-ietf-tram-turn-third-party-authz: http://www.ietf.org/internet-drafts/draft-ietf-tram-turn-third-party-authz-14.txt The IETF datatracker page for this Internet-Draft is: https://datatracker.ietf.org/doc/draft-ietf-tram-turn-third-party-authz/ Diff from previous version: http://www.ietf.org/rfcdiff?url2=draft-ietf-tram-turn-third-party-authz-14 Please note that it may take a couple of minutes from the time of submission until the htmlized version and diff are available at tools.ietf.org. IETF Secretariat. From nobody Wed Apr 15 23:26:07 2015 Return-Path: X-Original-To: tram@ietfa.amsl.com Delivered-To: tram@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 0CA221B29CE for ; Wed, 15 Apr 2015 23:26:07 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -14.511 X-Spam-Level: X-Spam-Status: No, score=-14.511 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_HI=-5, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id lrjWIII6TLit for ; Wed, 15 Apr 2015 23:26:05 -0700 (PDT) Received: from rcdn-iport-8.cisco.com (rcdn-iport-8.cisco.com [173.37.86.79]) (using TLSv1 with cipher RC4-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id AAE3A1B29C9 for ; Wed, 15 Apr 2015 23:25:58 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=2101; q=dns/txt; s=iport; t=1429165559; x=1430375159; h=from:to:subject:date:message-id:references:in-reply-to: content-transfer-encoding:mime-version; bh=tq6YgX3Ug3O5QtvPh1J9K/bN62IB5Iwg6igmpWLcW3Q=; b=gnw4RaHgyuW/EWJEdvtbojF3N3C/9Snjrg9ZqmZQNWSW5tS2MWEn8bHO CVUPRfa1xVdIM7FiZEMjk9/sEPG30zU3OrIMcKet/VBa3te7jB8B024JN J5FqFTajL8O4EPHHMZaFBmbNpI8Mbd4ybPr8gBFMYlr5eaDjyV7jn34tO s=; X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: A0AeBQCZVS9V/5JdJa1cgwxSVwUFxQ2CNAyGAQKBPkwBAQEBAQF+hCABAQEEAQEBNzQXBAIBCBEEAQELFAkHJwsUBwEBBQMCBBMIAYghCAXGMwEBAQEBAQEBAQEBAQEBAQEBAQEBAReLK4QxGjgGgxGBFgWRFoN8hzo6gn+QJSKDb2+BBCQcfwEBAQ X-IronPort-AV: E=Sophos;i="5.11,586,1422921600"; d="scan'208";a="4409222" Received: from rcdn-core-10.cisco.com ([173.37.93.146]) by rcdn-iport-8.cisco.com with ESMTP; 16 Apr 2015 06:25:58 +0000 Received: from xhc-rcd-x02.cisco.com (xhc-rcd-x02.cisco.com [173.37.183.76]) by rcdn-core-10.cisco.com (8.14.5/8.14.5) with ESMTP id t3G6PwQG032083 (version=TLSv1/SSLv3 cipher=AES128-SHA bits=128 verify=FAIL) for ; Thu, 16 Apr 2015 06:25:58 GMT Received: from xmb-rcd-x10.cisco.com ([169.254.15.220]) by xhc-rcd-x02.cisco.com ([173.37.183.76]) with mapi id 14.03.0195.001; Thu, 16 Apr 2015 01:25:58 -0500 From: "Tirumaleswar Reddy (tireddy)" To: "tram@ietf.org" Thread-Topic: [tram] I-D Action: draft-ietf-tram-turn-third-party-authz-14.txt Thread-Index: AQHQeA2j7w1W3bzdu0KCHdo6LvcCtp1PK+bg Date: Thu, 16 Apr 2015 06:25:57 +0000 Message-ID: <913383AAA69FF945B8F946018B75898A4120FA4F@xmb-rcd-x10.cisco.com> References: <20150416062119.29675.46007.idtracker@ietfa.amsl.com> In-Reply-To: <20150416062119.29675.46007.idtracker@ietfa.amsl.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.65.56.40] Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 Archived-At: Subject: [tram] FW: I-D Action: draft-ietf-tram-turn-third-party-authz-14.txt X-BeenThere: tram@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "Discussing the creation of a Turn Revised And Modernized \(TRAM\) WG, which goal is to consolidate the various initiatives to update TURN and STUN." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 16 Apr 2015 06:26:07 -0000 This reversion addresses comments received from Richard, Stephen and Kathle= en as part of ISEG review and comments from Oleg. Cheers, -Tiru -----Original Message----- From: tram [mailto:tram-bounces@ietf.org] On Behalf Of internet-drafts@ietf= .org Sent: Thursday, April 16, 2015 11:51 AM To: i-d-announce@ietf.org Cc: tram@ietf.org Subject: [tram] I-D Action: draft-ietf-tram-turn-third-party-authz-14.txt A New Internet-Draft is available from the on-line Internet-Drafts director= ies. This draft is a work item of the TURN Revised and Modernized Working Group= of the IETF. Title : Session Traversal Utilities for NAT (STUN) Extens= ion for Third Party Authorization Authors : Tirumaleswar Reddy Prashanth Patil Ram Mohan Ravindranath Justin Uberti Filename : draft-ietf-tram-turn-third-party-authz-14.txt Pages : 23 Date : 2015-04-15 Abstract: This document proposes the use of OAuth 2.0 to obtain and validate ephemeral tokens that can be used for Session Traversal Utilities for NAT (STUN) authentication. The usage of ephemeral tokens ensures that access to a STUN server can be controlled even if the tokens are compromised. The IETF datatracker status page for this draft is: https://datatracker.ietf.org/doc/draft-ietf-tram-turn-third-party-authz/ There's also a htmlized version available at: http://tools.ietf.org/html/draft-ietf-tram-turn-third-party-authz-14 A diff from the previous version is available at: http://www.ietf.org/rfcdiff?url2=3Ddraft-ietf-tram-turn-third-party-authz-1= 4 Please note that it may take a couple of minutes from the time of submissio= n until the htmlized version and diff are available at tools.ietf.org. Internet-Drafts are also available by anonymous FTP at: ftp://ftp.ietf.org/internet-drafts/ _______________________________________________ tram mailing list tram@ietf.org https://www.ietf.org/mailman/listinfo/tram From nobody Wed Apr 15 23:39:54 2015 Return-Path: X-Original-To: tram@ietfa.amsl.com Delivered-To: tram@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 57BF61B2A13; Wed, 15 Apr 2015 23:39:53 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.9 X-Spam-Level: X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id bH2YktuLYMgi; Wed, 15 Apr 2015 23:39:52 -0700 (PDT) Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 22CFE1B2A09; Wed, 15 Apr 2015 23:39:52 -0700 (PDT) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: internet-drafts@ietf.org To: X-Test-IDTracker: no X-IETF-IDTracker: 6.0.1 Auto-Submitted: auto-generated Precedence: bulk Message-ID: <20150416063952.29651.99134.idtracker@ietfa.amsl.com> Date: Wed, 15 Apr 2015 23:39:52 -0700 Archived-At: Cc: tram@ietf.org Subject: [tram] I-D Action: draft-ietf-tram-turnbis-04.txt X-BeenThere: tram@ietf.org X-Mailman-Version: 2.1.15 List-Id: "Discussing the creation of a Turn Revised And Modernized \(TRAM\) WG, which goal is to consolidate the various initiatives to update TURN and STUN." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 16 Apr 2015 06:39:53 -0000 A New Internet-Draft is available from the on-line Internet-Drafts directories. This draft is a work item of the TURN Revised and Modernized Working Group of the IETF. Title : Traversal Using Relays around NAT (TURN): Relay Extensions to Session Traversal Utilities for NAT (STUN) Authors : Tirumaleswar Reddy Alan Johnston Philip Matthews Jonathan Rosenberg Filename : draft-ietf-tram-turnbis-04.txt Pages : 77 Date : 2015-04-15 Abstract: If a host is located behind a NAT, then in certain situations it can be impossible for that host to communicate directly with other hosts (peers). In these situations, it is necessary for the host to use the services of an intermediate node that acts as a communication relay. This specification defines a protocol, called TURN (Traversal Using Relays around NAT), that allows the host to control the operation of the relay and to exchange packets with its peers using the relay. TURN differs from some other relay control protocols in that it allows a client to communicate with multiple peers using a single relay address. The TURN protocol was designed to be used as part of the ICE (Interactive Connectivity Establishment) approach to NAT traversal, though it also can be used without ICE. The IETF datatracker status page for this draft is: https://datatracker.ietf.org/doc/draft-ietf-tram-turnbis/ There's also a htmlized version available at: http://tools.ietf.org/html/draft-ietf-tram-turnbis-04 A diff from the previous version is available at: http://www.ietf.org/rfcdiff?url2=draft-ietf-tram-turnbis-04 Please note that it may take a couple of minutes from the time of submission until the htmlized version and diff are available at tools.ietf.org. Internet-Drafts are also available by anonymous FTP at: ftp://ftp.ietf.org/internet-drafts/ From nobody Wed Apr 15 23:43:29 2015 Return-Path: X-Original-To: tram@ietfa.amsl.com Delivered-To: tram@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 1A4BE1B2A24 for ; Wed, 15 Apr 2015 23:43:28 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -14.511 X-Spam-Level: X-Spam-Status: No, score=-14.511 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_HI=-5, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id x2TEydMi7EXi for ; Wed, 15 Apr 2015 23:43:26 -0700 (PDT) Received: from alln-iport-1.cisco.com (alln-iport-1.cisco.com [173.37.142.88]) (using TLSv1 with cipher RC4-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id A80121B2A26 for ; Wed, 15 Apr 2015 23:43:25 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=2644; q=dns/txt; s=iport; t=1429166605; x=1430376205; h=from:to:subject:date:message-id:references:in-reply-to: content-transfer-encoding:mime-version; bh=0XxDzSdto9UX9moOda+AZP9s++95iqv3y5GZmM8GGsI=; b=OX6wjKFX2j4dWXbXugvy1nR1rrX9UQrtOd619E8nrIKdvcMm4iQoD6pE I59i/jbsD9RJklabb3NTKv5EvWtdFuMU0YCTYfcWywhru3LMynNs1dweN Txo/5HFPbCgInUXLp05VD2VuIuEOeiikf2da/1aLHzQ/DZcSDUdvf7qoR U=; X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: A0BeBABbWS9V/4YNJK1cgwxSVwUFxQ1mCYFFCoYDAoE+OBQBAQEBAQEBfYQgAQEBBAEBATc0FwQCAQgRBAEBCxQJBycLFAkIAgQTCAGIIQgFxisBAQEBAQEBAQEBAQEBAQEBAQEBAQEXiyuESzgGgxGBFgWRFoN8hzo6gn+QJSKDb2+BRH8BAQE X-IronPort-AV: E=Sophos;i="5.11,586,1422921600"; d="scan'208";a="141651821" Received: from alln-core-12.cisco.com ([173.36.13.134]) by alln-iport-1.cisco.com with ESMTP; 16 Apr 2015 06:43:24 +0000 Received: from xhc-aln-x02.cisco.com (xhc-aln-x02.cisco.com [173.36.12.76]) by alln-core-12.cisco.com (8.14.5/8.14.5) with ESMTP id t3G6hOnP000407 (version=TLSv1/SSLv3 cipher=AES128-SHA bits=128 verify=FAIL) for ; Thu, 16 Apr 2015 06:43:24 GMT Received: from xmb-rcd-x10.cisco.com ([169.254.15.220]) by xhc-aln-x02.cisco.com ([173.36.12.76]) with mapi id 14.03.0195.001; Thu, 16 Apr 2015 01:43:24 -0500 From: "Tirumaleswar Reddy (tireddy)" To: "tram@ietf.org" Thread-Topic: [tram] I-D Action: draft-ietf-tram-turnbis-04.txt Thread-Index: AQHQeBApFZooryinE0GsTFieZ7wevp1PMOAA Date: Thu, 16 Apr 2015 06:43:24 +0000 Message-ID: <913383AAA69FF945B8F946018B75898A4120FAA1@xmb-rcd-x10.cisco.com> References: <20150416063952.29651.99134.idtracker@ietfa.amsl.com> In-Reply-To: <20150416063952.29651.99134.idtracker@ietfa.amsl.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.65.56.40] Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 Archived-At: Subject: Re: [tram] I-D Action: draft-ietf-tram-turnbis-04.txt X-BeenThere: tram@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "Discussing the creation of a Turn Revised And Modernized \(TRAM\) WG, which goal is to consolidate the various initiatives to update TURN and STUN." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 16 Apr 2015 06:43:28 -0000 This revision addresses comments from Oleg on SSODA. -Tiru > -----Original Message----- > From: tram [mailto:tram-bounces@ietf.org] On Behalf Of internet- > drafts@ietf.org > Sent: Thursday, April 16, 2015 12:10 PM > To: i-d-announce@ietf.org > Cc: tram@ietf.org > Subject: [tram] I-D Action: draft-ietf-tram-turnbis-04.txt >=20 >=20 > A New Internet-Draft is available from the on-line Internet-Drafts direct= ories. > This draft is a work item of the TURN Revised and Modernized Working > Group of the IETF. >=20 > Title : Traversal Using Relays around NAT (TURN): Relay > Extensions to Session Traversal Utilities for NAT (STUN) > Authors : Tirumaleswar Reddy > Alan Johnston > Philip Matthews > Jonathan Rosenberg > Filename : draft-ietf-tram-turnbis-04.txt > Pages : 77 > Date : 2015-04-15 >=20 > Abstract: > If a host is located behind a NAT, then in certain situations it can > be impossible for that host to communicate directly with other hosts > (peers). In these situations, it is necessary for the host to use > the services of an intermediate node that acts as a communication > relay. This specification defines a protocol, called TURN (Traversal > Using Relays around NAT), that allows the host to control the > operation of the relay and to exchange packets with its peers using > the relay. TURN differs from some other relay control protocols in > that it allows a client to communicate with multiple peers using a > single relay address. >=20 > The TURN protocol was designed to be used as part of the ICE > (Interactive Connectivity Establishment) approach to NAT traversal, > though it also can be used without ICE. >=20 >=20 > The IETF datatracker status page for this draft is: > https://datatracker.ietf.org/doc/draft-ietf-tram-turnbis/ >=20 > There's also a htmlized version available at: > http://tools.ietf.org/html/draft-ietf-tram-turnbis-04 >=20 > A diff from the previous version is available at: > http://www.ietf.org/rfcdiff?url2=3Ddraft-ietf-tram-turnbis-04 >=20 >=20 > Please note that it may take a couple of minutes from the time of > submission until the htmlized version and diff are available at tools.iet= f.org. >=20 > Internet-Drafts are also available by anonymous FTP at: > ftp://ftp.ietf.org/internet-drafts/ >=20 > _______________________________________________ > tram mailing list > tram@ietf.org > https://www.ietf.org/mailman/listinfo/tram From nobody Sun Apr 19 02:35:51 2015 Return-Path: X-Original-To: tram@ietfa.amsl.com Delivered-To: tram@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 8D7311B2B20 for ; Sun, 19 Apr 2015 02:35:49 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.75 X-Spam-Level: X-Spam-Status: No, score=-1.75 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_ENVFROM_END_DIGIT=0.25, FREEMAIL_FROM=0.001, SPF_PASS=-0.001] autolearn=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 8O0CC4WeLZB3 for ; Sun, 19 Apr 2015 02:35:48 -0700 (PDT) Received: from mail-wg0-x229.google.com (mail-wg0-x229.google.com [IPv6:2a00:1450:400c:c00::229]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id D931F1B2B1E for ; Sun, 19 Apr 2015 02:35:47 -0700 (PDT) Received: by wgin8 with SMTP id n8so150900467wgi.0 for ; Sun, 19 Apr 2015 02:35:46 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :cc:content-type; bh=yQDqOmzzC33N9zS5V5RBORPwmbU8OPW/BZQ42ghr7Lc=; b=ATXWEqTtkI5j4cNaUf/c2sX70Z+Ix8xm39i/0/EmSWN5Y/FTcXiVoQVx5EQCw64Wuf ZAlHeyxvuAbOU/x8XYAIyV41FViZ+MofDiUaMmKpjgNuUCEyIh3EzX1fViKeV6Fak9ek aefBLrtoI+vbFxIt8UGtr/MgGxqSzPHtkwED3MDHNnWhHIaTLV0yYDZYxEP8eE6yxFSq h3P1T1gCRKJ+TBJ632glG+Ib6i2p9T/UTXgKqbbpMiZob/U1hOOq6LRo4/TBmEqZ0yoo vjlJf2gaP9LQ3urrAHBkIcftA1WWKqxbqW3xP7eEFf/rRjyKn2uko1vH7klvRHcMOto8 jffQ== MIME-Version: 1.0 X-Received: by 10.194.159.105 with SMTP id xb9mr21301955wjb.156.1429436146662; Sun, 19 Apr 2015 02:35:46 -0700 (PDT) Received: by 10.194.190.7 with HTTP; Sun, 19 Apr 2015 02:35:46 -0700 (PDT) In-Reply-To: <913383AAA69FF945B8F946018B75898A4120FA4F@xmb-rcd-x10.cisco.com> References: <20150416062119.29675.46007.idtracker@ietfa.amsl.com> <913383AAA69FF945B8F946018B75898A4120FA4F@xmb-rcd-x10.cisco.com> Date: Sun, 19 Apr 2015 02:35:46 -0700 Message-ID: From: Oleg Moskalenko To: "Tirumaleswar Reddy (tireddy)" Content-Type: text/plain; charset=UTF-8 Archived-At: Cc: "tram@ietf.org" Subject: Re: [tram] FW: I-D Action: draft-ietf-tram-turn-third-party-authz-14.txt X-BeenThere: tram@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "Discussing the creation of a Turn Revised And Modernized \(TRAM\) WG, which goal is to consolidate the various initiatives to update TURN and STUN." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 19 Apr 2015 09:35:49 -0000 I'd suggest another minor cosmetic change. In the edition 14, the GCM algorithm names are taken from section 4.1 of http://tools.ietf.org/html/draft-ietf-jose-json-web-algorithms-40; but the non-GCM algorithm names are taken from section 5.1. I'd suggest, for consistency, use the section 5.1 for all supported algorithm names: A256GCMKW change to A256GCM Thanks Oleg On Wed, Apr 15, 2015 at 11:25 PM, Tirumaleswar Reddy (tireddy) wrote: > This reversion addresses comments received from Richard, Stephen and Kathleen as part of ISEG review and comments from Oleg. > > Cheers, > -Tiru > > -----Original Message----- > From: tram [mailto:tram-bounces@ietf.org] On Behalf Of internet-drafts@ietf.org > Sent: Thursday, April 16, 2015 11:51 AM > To: i-d-announce@ietf.org > Cc: tram@ietf.org > Subject: [tram] I-D Action: draft-ietf-tram-turn-third-party-authz-14.txt > > > A New Internet-Draft is available from the on-line Internet-Drafts directories. > This draft is a work item of the TURN Revised and Modernized Working Group of the IETF. > > Title : Session Traversal Utilities for NAT (STUN) Extension for Third Party Authorization > Authors : Tirumaleswar Reddy > Prashanth Patil > Ram Mohan Ravindranath > Justin Uberti > Filename : draft-ietf-tram-turn-third-party-authz-14.txt > Pages : 23 > Date : 2015-04-15 > > Abstract: > This document proposes the use of OAuth 2.0 to obtain and validate > ephemeral tokens that can be used for Session Traversal Utilities for > NAT (STUN) authentication. The usage of ephemeral tokens ensures > that access to a STUN server can be controlled even if the tokens are > compromised. > > > The IETF datatracker status page for this draft is: > https://datatracker.ietf.org/doc/draft-ietf-tram-turn-third-party-authz/ > > There's also a htmlized version available at: > http://tools.ietf.org/html/draft-ietf-tram-turn-third-party-authz-14 > > A diff from the previous version is available at: > http://www.ietf.org/rfcdiff?url2=draft-ietf-tram-turn-third-party-authz-14 > > > Please note that it may take a couple of minutes from the time of submission until the htmlized version and diff are available at tools.ietf.org. > > Internet-Drafts are also available by anonymous FTP at: > ftp://ftp.ietf.org/internet-drafts/ > > _______________________________________________ > tram mailing list > tram@ietf.org > https://www.ietf.org/mailman/listinfo/tram > > _______________________________________________ > tram mailing list > tram@ietf.org > https://www.ietf.org/mailman/listinfo/tram From nobody Sun Apr 19 03:09:08 2015 Return-Path: X-Original-To: tram@ietfa.amsl.com Delivered-To: tram@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 87EA91A038A for ; Sun, 19 Apr 2015 03:09:07 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -14.511 X-Spam-Level: X-Spam-Status: No, score=-14.511 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_HI=-5, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id iJ3T6RZyIXTQ for ; Sun, 19 Apr 2015 03:09:05 -0700 (PDT) Received: from rcdn-iport-4.cisco.com (rcdn-iport-4.cisco.com [173.37.86.75]) (using TLSv1 with cipher RC4-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 731F91A03FF for ; Sun, 19 Apr 2015 03:09:05 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=4520; q=dns/txt; s=iport; t=1429438145; x=1430647745; h=from:to:cc:subject:date:message-id:references: in-reply-to:content-transfer-encoding:mime-version; bh=Yp57Y6lrCuXhlyP7Jm579MGpHU7/sOMggkwSlhtk2VE=; b=h1PppHbshF7n93LX4zAIVeEM3jR4to31Be3Kc7AIojuKBgeERyYRWfe+ GkQ4aIHINpFrJ3OGGsLNt4FFc09OdfDE0vC3CEFioxhg+iVoLTxHKC+q6 eO5z6C7MlyZv6UH4ln2jqrpbW+a5d1Os0srrAKX107Sv82MvTn3Cdbrs+ o=; X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: A0AhBgDdfTNV/5ldJa1cgwxSVwUFgxLCPYI0CoYDAhyBBUwBAQEBAQF+hCABAQEDAQEBASAROgsMBAIBCA4DBAEBAQICBh0DAgICHwYLFAEHAQgCBA4FCAGIDgMJCAgFtAWOSA2FOwEBAQEBAQEBAQEBAQEBAQEBAQEBAReBIYoWgk2BbBoWGwcGgmIvgRYFkSuDfIRXgm06gwKKAIZHIoIegVVvgQQkHIEAAQEB X-IronPort-AV: E=Sophos;i="5.11,602,1422921600"; d="scan'208";a="413068937" Received: from rcdn-core-2.cisco.com ([173.37.93.153]) by rcdn-iport-4.cisco.com with ESMTP; 19 Apr 2015 10:09:04 +0000 Received: from xhc-rcd-x14.cisco.com (xhc-rcd-x14.cisco.com [173.37.183.88]) by rcdn-core-2.cisco.com (8.14.5/8.14.5) with ESMTP id t3JA94NV027122 (version=TLSv1/SSLv3 cipher=AES128-SHA bits=128 verify=FAIL); Sun, 19 Apr 2015 10:09:04 GMT Received: from xmb-rcd-x10.cisco.com ([169.254.15.220]) by xhc-rcd-x14.cisco.com ([173.37.183.88]) with mapi id 14.03.0195.001; Sun, 19 Apr 2015 05:09:04 -0500 From: "Tirumaleswar Reddy (tireddy)" To: Oleg Moskalenko Thread-Topic: [tram] FW: I-D Action: draft-ietf-tram-turn-third-party-authz-14.txt Thread-Index: AQHQeoQ4rIt4BEmLvEyfJaUFFfj9pZ1UHMeQ Date: Sun, 19 Apr 2015 10:09:04 +0000 Message-ID: <913383AAA69FF945B8F946018B75898A41210C79@xmb-rcd-x10.cisco.com> References: <20150416062119.29675.46007.idtracker@ietfa.amsl.com> <913383AAA69FF945B8F946018B75898A4120FA4F@xmb-rcd-x10.cisco.com> In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.65.69.89] Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 MIME-Version: 1.0 Archived-At: Cc: "tram@ietf.org" Subject: Re: [tram] FW: I-D Action: draft-ietf-tram-turn-third-party-authz-14.txt X-BeenThere: tram@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "Discussing the creation of a Turn Revised And Modernized \(TRAM\) WG, which goal is to consolidate the various initiatives to update TURN and STUN." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 19 Apr 2015 10:09:07 -0000 PiAtLS0tLU9yaWdpbmFsIE1lc3NhZ2UtLS0tLQ0KPiBGcm9tOiBPbGVnIE1vc2thbGVua28gW21h aWx0bzptb20wNDAyNjdAZ21haWwuY29tXQ0KPiBTZW50OiBTdW5kYXksIEFwcmlsIDE5LCAyMDE1 IDM6MDYgUE0NCj4gVG86IFRpcnVtYWxlc3dhciBSZWRkeSAodGlyZWRkeSkNCj4gQ2M6IHRyYW1A aWV0Zi5vcmcNCj4gU3ViamVjdDogUmU6IFt0cmFtXSBGVzogSS1EIEFjdGlvbjogZHJhZnQtaWV0 Zi10cmFtLXR1cm4tdGhpcmQtcGFydHktYXV0aHotDQo+IDE0LnR4dA0KPiANCj4gSSdkIHN1Z2dl c3QgYW5vdGhlciBtaW5vciBjb3NtZXRpYyBjaGFuZ2UuIEluIHRoZSBlZGl0aW9uIDE0LCB0aGUg R0NNDQo+IGFsZ29yaXRobSBuYW1lcyBhcmUgdGFrZW4gZnJvbSBzZWN0aW9uIDQuMSBvZg0KPiBo dHRwOi8vdG9vbHMuaWV0Zi5vcmcvaHRtbC9kcmFmdC1pZXRmLWpvc2UtanNvbi13ZWItYWxnb3Jp dGhtcy00MDsgYnV0IHRoZQ0KPiBub24tR0NNIGFsZ29yaXRobSBuYW1lcyBhcmUgdGFrZW4gZnJv bSBzZWN0aW9uIDUuMS4gSSdkIHN1Z2dlc3QsIGZvcg0KPiBjb25zaXN0ZW5jeSwgdXNlIHRoZSBz ZWN0aW9uIDUuMSBmb3IgYWxsIHN1cHBvcnRlZCBhbGdvcml0aG0NCj4gbmFtZXM6DQo+IA0KPiBB MjU2R0NNS1cgY2hhbmdlIHRvIEEyNTZHQ00NCg0KWWVzLCBjaGFuZ2VkIGluIG15IGxvY2FsIGNv cHkuIA0KDQotVGlydQ0KDQo+IA0KPiBUaGFua3MNCj4gT2xlZw0KPiANCj4gT24gV2VkLCBBcHIg MTUsIDIwMTUgYXQgMTE6MjUgUE0sIFRpcnVtYWxlc3dhciBSZWRkeSAodGlyZWRkeSkNCj4gPHRp cmVkZHlAY2lzY28uY29tPiB3cm90ZToNCj4gPiBUaGlzIHJldmVyc2lvbiBhZGRyZXNzZXMgY29t bWVudHMgcmVjZWl2ZWQgZnJvbSBSaWNoYXJkLCBTdGVwaGVuIGFuZA0KPiBLYXRobGVlbiBhcyBw YXJ0IG9mIElTRUcgcmV2aWV3IGFuZCBjb21tZW50cyBmcm9tIE9sZWcuDQo+ID4NCj4gPiBDaGVl cnMsDQo+ID4gLVRpcnUNCj4gPg0KPiA+IC0tLS0tT3JpZ2luYWwgTWVzc2FnZS0tLS0tDQo+ID4g RnJvbTogdHJhbSBbbWFpbHRvOnRyYW0tYm91bmNlc0BpZXRmLm9yZ10gT24gQmVoYWxmIE9mDQo+ ID4gaW50ZXJuZXQtZHJhZnRzQGlldGYub3JnDQo+ID4gU2VudDogVGh1cnNkYXksIEFwcmlsIDE2 LCAyMDE1IDExOjUxIEFNDQo+ID4gVG86IGktZC1hbm5vdW5jZUBpZXRmLm9yZw0KPiA+IENjOiB0 cmFtQGlldGYub3JnDQo+ID4gU3ViamVjdDogW3RyYW1dIEktRCBBY3Rpb246DQo+ID4gZHJhZnQt aWV0Zi10cmFtLXR1cm4tdGhpcmQtcGFydHktYXV0aHotMTQudHh0DQo+ID4NCj4gPg0KPiA+IEEg TmV3IEludGVybmV0LURyYWZ0IGlzIGF2YWlsYWJsZSBmcm9tIHRoZSBvbi1saW5lIEludGVybmV0 LURyYWZ0cw0KPiBkaXJlY3Rvcmllcy4NCj4gPiAgVGhpcyBkcmFmdCBpcyBhIHdvcmsgaXRlbSBv ZiB0aGUgVFVSTiBSZXZpc2VkIGFuZCBNb2Rlcm5pemVkIFdvcmtpbmcNCj4gR3JvdXAgb2YgdGhl IElFVEYuDQo+ID4NCj4gPiAgICAgICAgIFRpdGxlICAgICAgICAgICA6IFNlc3Npb24gVHJhdmVy c2FsIFV0aWxpdGllcyBmb3IgTkFUIChTVFVOKSBFeHRlbnNpb24gZm9yDQo+IFRoaXJkIFBhcnR5 IEF1dGhvcml6YXRpb24NCj4gPiAgICAgICAgIEF1dGhvcnMgICAgICAgICA6IFRpcnVtYWxlc3dh ciBSZWRkeQ0KPiA+ICAgICAgICAgICAgICAgICAgICAgICAgICAgUHJhc2hhbnRoIFBhdGlsDQo+ ID4gICAgICAgICAgICAgICAgICAgICAgICAgICBSYW0gTW9oYW4gUmF2aW5kcmFuYXRoDQo+ID4g ICAgICAgICAgICAgICAgICAgICAgICAgICBKdXN0aW4gVWJlcnRpDQo+ID4gICAgICAgICBGaWxl bmFtZSAgICAgICAgOiBkcmFmdC1pZXRmLXRyYW0tdHVybi10aGlyZC1wYXJ0eS1hdXRoei0xNC50 eHQNCj4gPiAgICAgICAgIFBhZ2VzICAgICAgICAgICA6IDIzDQo+ID4gICAgICAgICBEYXRlICAg ICAgICAgICAgOiAyMDE1LTA0LTE1DQo+ID4NCj4gPiBBYnN0cmFjdDoNCj4gPiAgICBUaGlzIGRv Y3VtZW50IHByb3Bvc2VzIHRoZSB1c2Ugb2YgT0F1dGggMi4wIHRvIG9idGFpbiBhbmQgdmFsaWRh dGUNCj4gPiAgICBlcGhlbWVyYWwgdG9rZW5zIHRoYXQgY2FuIGJlIHVzZWQgZm9yIFNlc3Npb24g VHJhdmVyc2FsIFV0aWxpdGllcyBmb3INCj4gPiAgICBOQVQgKFNUVU4pIGF1dGhlbnRpY2F0aW9u LiAgVGhlIHVzYWdlIG9mIGVwaGVtZXJhbCB0b2tlbnMgZW5zdXJlcw0KPiA+ICAgIHRoYXQgYWNj ZXNzIHRvIGEgU1RVTiBzZXJ2ZXIgY2FuIGJlIGNvbnRyb2xsZWQgZXZlbiBpZiB0aGUgdG9rZW5z IGFyZQ0KPiA+ICAgIGNvbXByb21pc2VkLg0KPiA+DQo+ID4NCj4gPiBUaGUgSUVURiBkYXRhdHJh Y2tlciBzdGF0dXMgcGFnZSBmb3IgdGhpcyBkcmFmdCBpczoNCj4gPiBodHRwczovL2RhdGF0cmFj a2VyLmlldGYub3JnL2RvYy9kcmFmdC1pZXRmLXRyYW0tdHVybi10aGlyZC1wYXJ0eS1hdXRoDQo+ ID4gei8NCj4gPg0KPiA+IFRoZXJlJ3MgYWxzbyBhIGh0bWxpemVkIHZlcnNpb24gYXZhaWxhYmxl IGF0Og0KPiA+IGh0dHA6Ly90b29scy5pZXRmLm9yZy9odG1sL2RyYWZ0LWlldGYtdHJhbS10dXJu LXRoaXJkLXBhcnR5LWF1dGh6LTE0DQo+ID4NCj4gPiBBIGRpZmYgZnJvbSB0aGUgcHJldmlvdXMg dmVyc2lvbiBpcyBhdmFpbGFibGUgYXQ6DQo+ID4gaHR0cDovL3d3dy5pZXRmLm9yZy9yZmNkaWZm P3VybDI9ZHJhZnQtaWV0Zi10cmFtLXR1cm4tdGhpcmQtcGFydHktYXV0aA0KPiA+IHotMTQNCj4g Pg0KPiA+DQo+ID4gUGxlYXNlIG5vdGUgdGhhdCBpdCBtYXkgdGFrZSBhIGNvdXBsZSBvZiBtaW51 dGVzIGZyb20gdGhlIHRpbWUgb2YNCj4gc3VibWlzc2lvbiB1bnRpbCB0aGUgaHRtbGl6ZWQgdmVy c2lvbiBhbmQgZGlmZiBhcmUgYXZhaWxhYmxlIGF0IHRvb2xzLmlldGYub3JnLg0KPiA+DQo+ID4g SW50ZXJuZXQtRHJhZnRzIGFyZSBhbHNvIGF2YWlsYWJsZSBieSBhbm9ueW1vdXMgRlRQIGF0Og0K PiA+IGZ0cDovL2Z0cC5pZXRmLm9yZy9pbnRlcm5ldC1kcmFmdHMvDQo+ID4NCj4gPiBfX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fXw0KPiA+IHRyYW0gbWFpbGlu ZyBsaXN0DQo+ID4gdHJhbUBpZXRmLm9yZw0KPiA+IGh0dHBzOi8vd3d3LmlldGYub3JnL21haWxt YW4vbGlzdGluZm8vdHJhbQ0KPiA+DQo+ID4gX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX18NCj4gPiB0cmFtIG1haWxpbmcgbGlzdA0KPiA+IHRyYW1AaWV0Zi5v cmcNCj4gPiBodHRwczovL3d3dy5pZXRmLm9yZy9tYWlsbWFuL2xpc3RpbmZvL3RyYW0NCg== From nobody Mon Apr 20 09:36:18 2015 Return-Path: X-Original-To: tram@ietfa.amsl.com Delivered-To: tram@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id AF9F51A0187; Mon, 20 Apr 2015 09:36:15 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.898 X-Spam-Level: X-Spam-Status: No, score=-1.898 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_ADSP_CUSTOM_MED=0.001, FREEMAIL_FROM=0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id KPCaDxrmjqbe; Mon, 20 Apr 2015 09:36:14 -0700 (PDT) Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 94B9A1A017A; Mon, 20 Apr 2015 09:36:14 -0700 (PDT) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: "Spencer Dawkins" To: "The IESG" X-Test-IDTracker: no X-IETF-IDTracker: 6.0.1 Auto-Submitted: auto-generated Precedence: bulk Message-ID: <20150420163614.5136.98504.idtracker@ietfa.amsl.com> Date: Mon, 20 Apr 2015 09:36:14 -0700 Archived-At: Cc: tram-chairs@ietf.org, tram@ietf.org, draft-ietf-tram-stun-origin.shepherd@ietf.org, draft-ietf-tram-stun-origin.ad@ietf.org, sperreault@jive.com, draft-ietf-tram-stun-origin@ietf.org Subject: [tram] Spencer Dawkins' Yes on draft-ietf-tram-stun-origin-05: (with COMMENT) X-BeenThere: tram@ietf.org X-Mailman-Version: 2.1.15 List-Id: "Discussing the creation of a Turn Revised And Modernized \(TRAM\) WG, which goal is to consolidate the various initiatives to update TURN and STUN." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 20 Apr 2015 16:36:15 -0000 Spencer Dawkins has entered the following ballot position for draft-ietf-tram-stun-origin-05: Yes When responding, please keep the subject line intact and reply to all email addresses included in the To and CC lines. (Feel free to cut this introductory paragraph, however.) Please refer to http://www.ietf.org/iesg/statement/discuss-criteria.html for more information about IESG DISCUSS and COMMENT positions. The document, along with other ballot positions, can be found here: http://datatracker.ietf.org/doc/draft-ietf-tram-stun-origin/ ---------------------------------------------------------------------- COMMENT: ---------------------------------------------------------------------- Just to keep the IESG in the loop, without revising the document during balloting ... In discussion in Dallas, the editor agreed to remove this sentence from Section 2. of draft-ietf-stun-origin: "The size of ORIGINs included in a STUN message can have a major impact on the size of a STUN packet, and could potentially cause UDP fragmentation." This mention of fragmentation had raised the possibility of requiring support for SCTP in STUN and other things that there was no interest in doing, so the decision was to just remove this non-normative statement. Also, this statement is highly speculative as there are no known use cases where multiple ORIGINs will be included for WebRTC, SIP, or XMPP. From nobody Mon Apr 20 12:49:44 2015 Return-Path: X-Original-To: tram@ietfa.amsl.com Delivered-To: tram@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 68EA11A8AE5; Mon, 20 Apr 2015 12:49:44 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.9 X-Spam-Level: X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id QbeThtIOnfkc; Mon, 20 Apr 2015 12:49:43 -0700 (PDT) Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 4CCBC1A8AD9; Mon, 20 Apr 2015 12:49:43 -0700 (PDT) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit To: , , , , , X-Test-IDTracker: no X-IETF-IDTracker: 6.0.1 Auto-Submitted: auto-generated Precedence: bulk Message-ID: <20150420194943.31799.68110.idtracker@ietfa.amsl.com> Date: Mon, 20 Apr 2015 12:49:43 -0700 From: IETF Secretariat Archived-At: Subject: [tram] ID Tracker State Update Notice: X-BeenThere: tram@ietf.org X-Mailman-Version: 2.1.15 List-Id: "Discussing the creation of a Turn Revised And Modernized \(TRAM\) WG, which goal is to consolidate the various initiatives to update TURN and STUN." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 20 Apr 2015 19:49:44 -0000 IESG state changed to IESG Evaluation from Waiting for Writeup ID Tracker URL: http://datatracker.ietf.org/doc/draft-ietf-tram-stun-origin/ From nobody Mon Apr 20 13:47:39 2015 Return-Path: X-Original-To: tram@ietfa.amsl.com Delivered-To: tram@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 80B1B1B3173; Mon, 20 Apr 2015 13:47:36 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.9 X-Spam-Level: X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 3BwedFWwl-Y3; Mon, 20 Apr 2015 13:47:34 -0700 (PDT) Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id A15901B3161; Mon, 20 Apr 2015 13:47:34 -0700 (PDT) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: "Barry Leiba" To: "The IESG" X-Test-IDTracker: no X-IETF-IDTracker: 6.0.1 Auto-Submitted: auto-generated Precedence: bulk Message-ID: <20150420204734.30634.69630.idtracker@ietfa.amsl.com> Date: Mon, 20 Apr 2015 13:47:34 -0700 Archived-At: Cc: tram-chairs@ietf.org, tram@ietf.org, draft-ietf-tram-stun-origin.shepherd@ietf.org, draft-ietf-tram-stun-origin.ad@ietf.org, sperreault@jive.com, draft-ietf-tram-stun-origin@ietf.org Subject: [tram] Barry Leiba's Discuss on draft-ietf-tram-stun-origin-05: (with DISCUSS and COMMENT) X-BeenThere: tram@ietf.org X-Mailman-Version: 2.1.15 List-Id: "Discussing the creation of a Turn Revised And Modernized \(TRAM\) WG, which goal is to consolidate the various initiatives to update TURN and STUN." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 20 Apr 2015 20:47:36 -0000 Barry Leiba has entered the following ballot position for draft-ietf-tram-stun-origin-05: Discuss When responding, please keep the subject line intact and reply to all email addresses included in the To and CC lines. (Feel free to cut this introductory paragraph, however.) Please refer to http://www.ietf.org/iesg/statement/discuss-criteria.html for more information about IESG DISCUSS and COMMENT positions. The document, along with other ballot positions, can be found here: http://datatracker.ietf.org/doc/draft-ietf-tram-stun-origin/ ---------------------------------------------------------------------- DISCUSS: ---------------------------------------------------------------------- I have three questions I'd like to discuss. The discussion might or might not lead to any document changes, so let's please have the discussion first, and see where it leads. 1. In Sections 2.1 and 2.2, I find this combination odd: a. For non-web origins, you SHOULD (not MUST) send ORIGIN. b. But for web origins, you MUST send ORIGIN. c. But that ORIGIN can be empty. If you're allowed to send an empty origin, and you can sometimes not send ORIGIN at all, why is ORIGIN REQUIRED (but can be empty) in some cases? How does that help interoperability or security or whatnot? 2. In Sections 2.2 and 2.6, about the SHOULD NOT ("NOT RECOMMENDED"): Why? What happens if you use it? Under what conditions might you do so, even though this says you SHOULD NOT? (Why is it not "MUST NOT"?) 3. In Section 2.7: Therefore, if a STUN request contains multiple origins, the first origin MUST be used and the remaining origins ignored. For all cases (that's what it says)? Or was this just meant to apply to SIP and XMPP? Or SIP, XMPP, and WebRTC? But not to other HTTP uses? Or yes to HTTP? If this really does apply to all cases, why are multiple origins allowed in the first place? ---------------------------------------------------------------------- COMMENT: ---------------------------------------------------------------------- -- Section 1 -- A minor thing: the citation for STUN in the first two sentences seems odd. Instead of citing 5389 with the first use of "STUN" in the first sentence, you cite it in the second sentence where it appears to be a reference for "a STUN extension". I suggest moving the citation to the first sentence, so: "STUN, or Session Traversal Utilities for NAT [RFC5389], is a protocol used...." It wouldn't be a bad thing to add an informative reference to CORS and to cite it when you mention it. There is no Section 4.5 in RFC 7376. Perhaps you mean Section 4, bullet 5? -- Section 2.1 -- For STUN requests sent without authentication to a STUN server (i.e. STUN binding requests sent to a STUN server), the STUN client MUST include the ORIGIN attribute when the origin is a web origin. For other origins, such as SIP or XMPP, the STUN client SHOULD include the ORIGIN attribute. Note that for privacy reasons, an empty ORIGIN attribute can be sent, as described in the Security Considerations. The "i.e." tells me that the two things are synonymous: that "STUN requests sent without authentication" is the same as "STUN binding requests". Is that really true? Is it true that all binding requests are sent without authentication? Or am I quite misunderstanding what you're trying to say here? What, exactly, do you mean by "when the origin is a web origin"? From the previous section, that seems to refer to something sent by a web browser. But a web browser is just a piece of software, and a web browser could happen to be a SIP or XMPP client, as well. Do you really mean to refer to origins that use the "http" scheme? You might clarify this, particularly because it's involved in a "MUST". A STUN server can derive additional information for logging and analytics about the request through the ORIGIN attribute, such as the source of the request. For example, an enterprise STUN server might only reply to STUN binding requests from certain domains. In the example case, does that mean that such a server would not reply to binding requests that lacked ORIGIN (or had an empty one)? If so, that would be a good bit of explanation to add. I don't think that what's in the Security Considerations is enough to answer that question up here. -- Section 2.2 -- When the origin is a web origin, TURN [RFC5766] Allocate requests MUST include the ORIGIN attribute. For all other TURN requests, including the Send method, the use of the ORIGIN attribute is NOT RECOMMENDED. For other origins, such as SIP or XMPP, TURN Allocate requests SHOULD include the ORIGIN attribute. The order here is odd, and made me read it a few times to be sure that I (thought I) understood it. I would switch the order of the second and third sentences. Apart from that, I have the same comments here that I had about Section 2.1. -- Section 4 -- DTLS or TLS transport SHOULD be used when integrity protection for the ORIGIN attribute is important. Just curious here: When is integrity protection for it *not* important (and how will the client know that), given that the server might use it to determine whether it should respond, or to affect the authentication challenge? (And, actually, the first sentence of the next paragraph repeats the SHOULD without the qualifier. I suggest just removing the qualifier and merging the "TLS/DTLS SHOULD be used" advice from the two paragraphs. Also, given that Section 2.1 says that the server might use it for logging and analytics, it might be good to add that the server SHOULD NOT rely on information from the ORIGIN attribute in the absence of secure transport. I suggest factoring out the ends of the last two paragraphs (the parts that start with "In cases where") into a new last paragraph, rather than saying the same thing twice saying the same thing twice. From nobody Mon Apr 20 14:34:12 2015 Return-Path: X-Original-To: tram@ietfa.amsl.com Delivered-To: tram@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id BB2761B3254; Mon, 20 Apr 2015 14:34:08 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.75 X-Spam-Level: X-Spam-Status: No, score=-1.75 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_ENVFROM_END_DIGIT=0.25, FREEMAIL_FROM=0.001, SPF_PASS=-0.001] autolearn=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Ule_Gj_c_S7a; Mon, 20 Apr 2015 14:34:07 -0700 (PDT) Received: from mail-wi0-x232.google.com (mail-wi0-x232.google.com [IPv6:2a00:1450:400c:c05::232]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id BD7231B3245; Mon, 20 Apr 2015 14:34:00 -0700 (PDT) Received: by wizk4 with SMTP id k4so116121368wiz.1; Mon, 20 Apr 2015 14:33:59 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :cc:content-type; bh=gUODa51mc8XUmS+ldF4muvQmDiM+werCEJ+SsKFlRlg=; b=y2J3142GNMRqVYhPt2VykX4rKE7HgXmjHoWst9bFxT5ZYDNqmkIMl/xw190OMinhD4 KMAGEI0IsdW/WHkYBXOk6hjFgdSgDQDrunla/EtPvBTIhK+f3KpEuE/8vsXZWSH8nAek HoJ+THWP04MSHGmmFZRl6s6vC4LdQs4QSbDxBETbF57rYciYh/mxQRG5Eo9jTqH1ohoH AzLeCeaMwb3b4xevEVYOrFp1E9xrhtRtJ3LIuwGordPUBZrsudcN5iM6Zgz4GLEcs4iX UpgA1AG7Qq16+QPp7TWpSis4ImDfPOIBDFx6OYqSPmrh85cL6BythEkgdRDuYDNoKp+i 4cjA== MIME-Version: 1.0 X-Received: by 10.180.98.195 with SMTP id ek3mr28905593wib.57.1429565639521; Mon, 20 Apr 2015 14:33:59 -0700 (PDT) Received: by 10.194.190.7 with HTTP; Mon, 20 Apr 2015 14:33:59 -0700 (PDT) In-Reply-To: <20150420204734.30634.69630.idtracker@ietfa.amsl.com> References: <20150420204734.30634.69630.idtracker@ietfa.amsl.com> Date: Mon, 20 Apr 2015 14:33:59 -0700 Message-ID: From: Oleg Moskalenko To: Barry Leiba Content-Type: text/plain; charset=UTF-8 Archived-At: Cc: tram-chairs@ietf.org, "tram@ietf.org" , draft-ietf-tram-stun-origin.shepherd@ietf.org, draft-ietf-tram-stun-origin.ad@ietf.org, Simon Perreault , The IESG , draft-ietf-tram-stun-origin@ietf.org Subject: Re: [tram] Barry Leiba's Discuss on draft-ietf-tram-stun-origin-05: (with DISCUSS and COMMENT) X-BeenThere: tram@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "Discussing the creation of a Turn Revised And Modernized \(TRAM\) WG, which goal is to consolidate the various initiatives to update TURN and STUN." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 20 Apr 2015 21:34:08 -0000 On Mon, Apr 20, 2015 at 1:47 PM, Barry Leiba wrote: > Barry Leiba has entered the following ballot position for > draft-ietf-tram-stun-origin-05: Discuss > > ---------------------------------------------------------------------- > DISCUSS: > ---------------------------------------------------------------------- > > I have three questions I'd like to discuss. The discussion might or > might not lead to any document changes, so let's please have the > discussion first, and see where it leads. > > 1. In Sections 2.1 and 2.2, I find this combination odd: > > a. For non-web origins, you SHOULD (not MUST) send ORIGIN. > b. But for web origins, you MUST send ORIGIN. > c. But that ORIGIN can be empty. That rule just defines the Web browser compliant implementation. > > If you're allowed to send an empty origin, and you can sometimes not send > ORIGIN at all, why is ORIGIN REQUIRED (but can be empty) in some cases? > How does that help interoperability or security or whatnot? There may be two reasons: 1) obtaining an empty ORIGIN, the server may know that the client is ORIGIN-compliant, but it has no ORIGIN defined. 2) Empty ORIGIN may signal to the server that a "default" domain (whatever it is) has to be used. > > 2. In Sections 2.2 and 2.6, about the SHOULD NOT ("NOT RECOMMENDED"): > Why? What happens if you use it? Under what conditions might you do so, > even though this says you SHOULD NOT? (Why is it not "MUST NOT"?) > > 3. In Section 2.7: > > Therefore, if > a STUN request contains multiple origins, the first origin MUST be > used and the remaining origins ignored. > > For all cases (that's what it says)? Or was this just meant to apply to > SIP and XMPP? Or SIP, XMPP, and WebRTC? But not to other HTTP uses? Or > yes to HTTP? TURN server is not performing deep inspections of the traffic and it has no means to learn that the traffic is related to SIP, XMPP, WebRTC or anything else. So the rules must be universal. > If this really does apply to all cases, why are multiple > origins allowed in the first place? That section just explains what happens if the server got a request with multiple ORIGIN attributes. It is not forbidden, and it is not recommended. Those are just the rules that define the server's behavior. > > > ---------------------------------------------------------------------- > COMMENT: > ---------------------------------------------------------------------- > > -- Section 1 -- > A minor thing: the citation for STUN in the first two sentences seems > odd. Instead of citing 5389 with the first use of "STUN" in the first > sentence, you cite it in the second sentence where it appears to be a > reference for "a STUN extension". I suggest moving the citation to the > first sentence, so: "STUN, or Session Traversal Utilities for NAT > [RFC5389], is a protocol used...." > > It wouldn't be a bad thing to add an informative reference to CORS and to > cite it when you mention it. > > There is no Section 4.5 in RFC 7376. Perhaps you mean Section 4, bullet > 5? > > -- Section 2.1 -- > > For STUN requests sent without authentication to a STUN server (i.e. > STUN binding requests sent to a STUN server), the STUN client MUST > include the ORIGIN attribute when the origin is a web origin. For > other origins, such as SIP or XMPP, the STUN client SHOULD include > the ORIGIN attribute. > > Note that for privacy reasons, an empty ORIGIN attribute can be > sent, as described in the Security Considerations. > > The "i.e." tells me that the two things are synonymous: that "STUN > requests sent without authentication" is the same as "STUN binding > requests". Is that really true? Is it true that all binding requests > are sent without authentication? Or am I quite misunderstanding what > you're trying to say here? > > What, exactly, do you mean by "when the origin is a web origin"? From > the previous section, that seems to refer to something sent by a web > browser. But a web browser is just a piece of software, and a web > browser could happen to be a SIP or XMPP client, as well. Do you really > mean to refer to origins that use the "http" scheme? You might clarify > this, particularly because it's involved in a "MUST". > > A STUN server can derive additional information for logging and > analytics about the request through the ORIGIN attribute, such as the > source of the request. For example, an enterprise STUN server might > only reply to STUN binding requests from certain domains. > > In the example case, does that mean that such a server would not reply to > binding requests that lacked ORIGIN (or had an empty one)? If so, that > would be a good bit of explanation to add. I don't think that what's in > the Security Considerations is enough to answer that question up here. > > -- Section 2.2 -- > > When the origin is a web origin, TURN [RFC5766] Allocate requests > MUST include the ORIGIN attribute. For all other TURN requests, > including the Send method, the use of the ORIGIN attribute is NOT > RECOMMENDED. For other origins, such as SIP or XMPP, TURN Allocate > requests SHOULD include the ORIGIN attribute. > > The order here is odd, and made me read it a few times to be sure that I > (thought I) understood it. I would switch the order of the second and > third sentences. Apart from that, I have the same comments here that I > had about Section 2.1. > > -- Section 4 -- > > DTLS or TLS transport SHOULD be > used when integrity protection for the ORIGIN attribute is important. > > Just curious here: When is integrity protection for it *not* important > (and how will the client know that), given that the server might use it > to determine whether it should respond, or to affect the authentication > challenge? (And, actually, the first sentence of the next paragraph > repeats the SHOULD without the qualifier. I suggest just removing the > qualifier and merging the "TLS/DTLS SHOULD be used" advice from the two > paragraphs. > > Also, given that Section 2.1 says that the server might use it for > logging and analytics, it might be good to add that the server SHOULD NOT > rely on information from the ORIGIN attribute in the absence of secure > transport. > > I suggest factoring out the ends of the last two paragraphs (the parts > that start with "In cases where") into a new last paragraph, rather than > saying the same thing twice saying the same thing twice. > > > _______________________________________________ > tram mailing list > tram@ietf.org > https://www.ietf.org/mailman/listinfo/tram From nobody Mon Apr 20 14:52:46 2015 Return-Path: X-Original-To: tram@ietfa.amsl.com Delivered-To: tram@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 4B8311B3297; Mon, 20 Apr 2015 14:52:46 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.278 X-Spam-Level: X-Spam-Status: No, score=-1.278 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, FM_FORGED_GMAIL=0.622, FREEMAIL_FROM=0.001, SPF_PASS=-0.001] autolearn=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id VDcOtb2ol-oM; Mon, 20 Apr 2015 14:52:45 -0700 (PDT) Received: from mail-ie0-x22f.google.com (mail-ie0-x22f.google.com [IPv6:2607:f8b0:4001:c03::22f]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 35F2D1B3296; Mon, 20 Apr 2015 14:52:45 -0700 (PDT) Received: by iebrs15 with SMTP id rs15so166572ieb.3; Mon, 20 Apr 2015 14:52:44 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:sender:in-reply-to:references:date:message-id:subject :from:to:cc:content-type; bh=7ZQaRK38v4pPZqNKkTkCl9QkNJjD9NPwzxaRUhF6HR0=; b=DWFb7qK8Z6a0295hkck17AeuUM691FhOlVpP+WmJX+08PEnEfxme7x/kAZwKyJzIvu hqdZADiYWtjMexDIvCPJIyuknSpK6RxrYIK81geSkSYyr6nzo7no947INc5vY22od9aJ ufjC02V3sUlh8am7hI/8p4eCJOuS5y9z7cP4h5hi0m331UJUksk50D2e5lCU0D7IfFyn OCFZfXF+EFKF0hCig1hPfHKfXxy+kXAYbp3Qc4rsUpd59kiMlIXZE87rJUsStu/fJ4am T8vu6Fp16vT6r9ybeTS8wbfdNiiR/o/u0cGgyv3cKVfUROFzkBRA7qCjv6coXn1dJIhf TAew== MIME-Version: 1.0 X-Received: by 10.107.15.82 with SMTP id x79mr24760500ioi.75.1429566764541; Mon, 20 Apr 2015 14:52:44 -0700 (PDT) Sender: barryleiba@gmail.com Received: by 10.107.7.130 with HTTP; Mon, 20 Apr 2015 14:52:44 -0700 (PDT) In-Reply-To: References: <20150420204734.30634.69630.idtracker@ietfa.amsl.com> Date: Mon, 20 Apr 2015 17:52:44 -0400 X-Google-Sender-Auth: wI4Z9y-00Xir4rk_BUpqQFqeuU4 Message-ID: From: Barry Leiba To: Oleg Moskalenko Content-Type: text/plain; charset=ISO-8859-1 Archived-At: Cc: tram-chairs@ietf.org, "tram@ietf.org" , draft-ietf-tram-stun-origin.shepherd@ietf.org, draft-ietf-tram-stun-origin.ad@ietf.org, Simon Perreault , The IESG , draft-ietf-tram-stun-origin@ietf.org Subject: Re: [tram] Barry Leiba's Discuss on draft-ietf-tram-stun-origin-05: (with DISCUSS and COMMENT) X-BeenThere: tram@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "Discussing the creation of a Turn Revised And Modernized \(TRAM\) WG, which goal is to consolidate the various initiatives to update TURN and STUN." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 20 Apr 2015 21:52:46 -0000 Ho, Oleg. Thanks for responding. >> 1. In Sections 2.1 and 2.2, I find this combination odd: >> >> a. For non-web origins, you SHOULD (not MUST) send ORIGIN. >> b. But for web origins, you MUST send ORIGIN. >> c. But that ORIGIN can be empty. > > That rule just defines the Web browser compliant implementation. I don't understand what that means. >> If you're allowed to send an empty origin, and you can sometimes not send >> ORIGIN at all, why is ORIGIN REQUIRED (but can be empty) in some cases? >> How does that help interoperability or security or whatnot? > > There may be two reasons: > > 1) obtaining an empty ORIGIN, the server may know that the client is > ORIGIN-compliant, but it has no ORIGIN defined. > 2) Empty ORIGIN may signal to the server that a "default" domain > (whatever it is) has to be used. That explains why you might or might not want to do one thing or the other. It doesn't answer why you have MUST or SHOULD there. >> 2. In Sections 2.2 and 2.6, about the SHOULD NOT ("NOT RECOMMENDED"): >> Why? What happens if you use it? Under what conditions might you do so, >> even though this says you SHOULD NOT? (Why is it not "MUST NOT"?) I didn't see a response to this. >> 3. In Section 2.7: >> >> Therefore, if >> a STUN request contains multiple origins, the first origin MUST be >> used and the remaining origins ignored. >> >> For all cases (that's what it says)? Or was this just meant to apply to >> SIP and XMPP? Or SIP, XMPP, and WebRTC? But not to other HTTP uses? Or >> yes to HTTP? > > TURN server is not performing deep inspections of the traffic and it > has no means to learn that the traffic is related to SIP, XMPP, WebRTC > or anything else. So the rules must be universal. In other words, your answer is "Yes, for all cases," right? >> If this really does apply to all cases, why are multiple >> origins allowed in the first place? > > That section just explains what happens if the server got a request > with multiple ORIGIN attributes. It is not forbidden, and it is not > recommended. Those are just the rules that define the server's > behavior. Again, you haven't answered the question I asked, then. You're defining a new protocol here. Why are you allowing a feature and then saying that it SHOULD NOT be used? Barry From nobody Mon Apr 20 19:04:46 2015 Return-Path: X-Original-To: tram@ietfa.amsl.com Delivered-To: tram@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 397821A854D; Mon, 20 Apr 2015 19:04:44 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.999 X-Spam-Level: X-Spam-Status: No, score=-1.999 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, SPF_PASS=-0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id WWD2j9F4l05c; Mon, 20 Apr 2015 19:04:41 -0700 (PDT) Received: from mail-vn0-x236.google.com (mail-vn0-x236.google.com [IPv6:2607:f8b0:400c:c0f::236]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id ED9921A86EF; Mon, 20 Apr 2015 19:04:39 -0700 (PDT) Received: by vnbg62 with SMTP id g62so31897059vnb.7; Mon, 20 Apr 2015 19:04:39 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :cc:content-type; bh=7r7OgJvMEhqu2PmpE/tAO66+i/dB2zVcuXac4jsjlXY=; b=T6JFcjVOfIS+wrjki5E+J+zG6K4bMewffE13BVY4u3OaEWPgdOc9VTt8Oia4b+ckkA GVdMV+m4eaKDoizbO/h8N4fPRnFtupvRGcoxv+oTQT12FQJ1yNsOyCP7OWp5ZzmIz3k9 Vc+ixR8FYlg9pJxvmXYxK5tFHqk71EpLyCSBWDpjKcAzcj3BS0566vpc77M8ncevK0LB CVrlukLS/HthHCYe7tpL7SAj7KS1BPhXXbnHuNyQIDi8ENZ5pEo9qIBpS+5ML4gfUfbH ikbHRItc65hWsvfj7bHHRxSdZY9bveu+0MX6Kxbf1IB61fqNUENs79P58uO8+7CpRBJu YglA== MIME-Version: 1.0 X-Received: by 10.52.163.81 with SMTP id yg17mr20125907vdb.97.1429581879129; Mon, 20 Apr 2015 19:04:39 -0700 (PDT) Received: by 10.52.106.100 with HTTP; Mon, 20 Apr 2015 19:04:39 -0700 (PDT) In-Reply-To: References: <20150420204734.30634.69630.idtracker@ietfa.amsl.com> Date: Mon, 20 Apr 2015 21:04:39 -0500 Message-ID: From: Alan Johnston To: Barry Leiba Content-Type: multipart/alternative; boundary=001a11c20b02153dd30514327849 Archived-At: Cc: tram-chairs@ietf.org, Oleg Moskalenko , "tram@ietf.org" , draft-ietf-tram-stun-origin.shepherd@ietf.org, draft-ietf-tram-stun-origin.ad@ietf.org, Simon Perreault , The IESG , draft-ietf-tram-stun-origin@ietf.org Subject: Re: [tram] Barry Leiba's Discuss on draft-ietf-tram-stun-origin-05: (with DISCUSS and COMMENT) X-BeenThere: tram@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "Discussing the creation of a Turn Revised And Modernized \(TRAM\) WG, which goal is to consolidate the various initiatives to update TURN and STUN." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 21 Apr 2015 02:04:44 -0000 --001a11c20b02153dd30514327849 Content-Type: text/plain; charset=UTF-8 Hi Barry, See below for my response to your DISCUSS. I'll respond to your COMMENTs in another thread. - Alan - On Mon, Apr 20, 2015 at 4:52 PM, Barry Leiba wrote: > Ho, Oleg. Thanks for responding. > > >> 1. In Sections 2.1 and 2.2, I find this combination odd: > >> > >> a. For non-web origins, you SHOULD (not MUST) send ORIGIN. > >> b. But for web origins, you MUST send ORIGIN. > >> c. But that ORIGIN can be empty. > > > > That rule just defines the Web browser compliant implementation. > > I don't understand what that means. > > >> If you're allowed to send an empty origin, and you can sometimes not > send > >> ORIGIN at all, why is ORIGIN REQUIRED (but can be empty) in some cases? > >> How does that help interoperability or security or whatnot? > > > > There may be two reasons: > > > > 1) obtaining an empty ORIGIN, the server may know that the client is > > ORIGIN-compliant, but it has no ORIGIN defined. > > 2) Empty ORIGIN may signal to the server that a "default" domain > > (whatever it is) has to be used. > > That explains why you might or might not want to do one thing or the > other. It doesn't answer why you have MUST or SHOULD there. > You are correct. The thinking was that we could put a MUST requirement on browsers (a limited set of implementations currently making lots of changes in order to implement WebRTC). For non-browsers, there is a huge number of implementations that often are deployed in walled gardens, and some may not have an origin - for this, we felt a SHOULD was more appropriate. However, I don't have a good reason as to why a non-browser implementation would support ORIGIN but not send it. I'm fine with simplifying it to say that if an implementation is compliant with this RFC, they always (MUST) send ORIGIN, but can send an empty one if the info is not available (i.e. configured, since with HTTP there will always be an origin, but with other uses, it might need to be manually configured) or want to withhold it for privacy reasons. > > >> 2. In Sections 2.2 and 2.6, about the SHOULD NOT ("NOT RECOMMENDED"): > >> Why? What happens if you use it? Under what conditions might you do > so, > >> even though this says you SHOULD NOT? (Why is it not "MUST NOT"?) > > I didn't see a response to this. > In these cases, it just wastes bandwidth, but it doesn't do any harm. However TURN SEND requests can be sent frequently (RTP media can be sent over it), so putting it there would waste a lot of bandwidth. Based on that it could be that in a Send it would be MUST NOT (very wasteful of bandwidth) but it isn't really a big deal on other non-Allocate requests. > > >> 3. In Section 2.7: > >> > >> Therefore, if > >> a STUN request contains multiple origins, the first origin MUST be > >> used and the remaining origins ignored. > >> > >> For all cases (that's what it says)? Or was this just meant to apply to > >> SIP and XMPP? Or SIP, XMPP, and WebRTC? But not to other HTTP uses? > Or > >> yes to HTTP? > > > > TURN server is not performing deep inspections of the traffic and it > > has no means to learn that the traffic is related to SIP, XMPP, WebRTC > > or anything else. So the rules must be universal. > > In other words, your answer is "Yes, for all cases," right? > Actually, we have since discovered that the STUN RFC 5389 says that if an attribute appears multiple times, the first is processed and the others are ignored. So we can actually remove this text, since we aren't trying to change STUN behavior. Also, we haven't come up with any valid use cases where multiple ORIGINs are generated and useful. Our Gen-ART reviewer David Black also had issues with this text ( https://www.ietf.org/mail-archive/web/tram/current/msg01457.html) but due to an error we haven't replied to him about it. I think the best solution is to leave in this statement in section 2: "Senders MAY include multiple ORIGIN attributes in a request, and receivers MUST support parsing and receiving multiple ORIGIN attributes. " Since there is a theoretical chance of there being multiple ORIGINs. But I think we should delete this statement in section 2.7: "Therefore, if a STUN request contains multiple origins, the first origin MUST be used and the remaining origins ignored." since it is not needed given STUN's default behavior. > > >> If this really does apply to all cases, why are multiple > >> origins allowed in the first place? > > > > That section just explains what happens if the server got a request > > with multiple ORIGIN attributes. It is not forbidden, and it is not > > recommended. Those are just the rules that define the server's > > behavior. > > Again, you haven't answered the question I asked, then. You're > defining a new protocol here. Why are you allowing a feature and then > saying that it SHOULD NOT be used? > > Barry > --001a11c20b02153dd30514327849 Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: quoted-printable
Hi Barry,

See below for my response to = your DISCUSS.=C2=A0 I'll respond to your COMMENTs in another thread.

- Alan -

On Mon, Apr 20, 2015 at 4:52 PM, Barry Leiba <b= arryleiba@computer.org> wrote:
Ho, Oleg.= =C2=A0 Thanks for responding.

>> 1. In Sections 2.1 and 2.2, I find this combination odd:
>>
>> a. For non-web origins, you SHOULD (not MUST) send ORIGIN.
>> b. But for web origins, you MUST send ORIGIN.
>> c. But that ORIGIN can be empty.
>
> That rule just defines the Web browser compliant implementation.

I don't understand what that means.

>> If you're allowed to send an empty origin, and you can sometim= es not send
>> ORIGIN at all, why is ORIGIN REQUIRED (but can be empty) in some c= ases?
>> How does that help interoperability or security or whatnot?
>
> There may be two reasons:
>
> 1) obtaining an empty ORIGIN, the server may know that the client is > ORIGIN-compliant, but it has no ORIGIN defined.
> 2) Empty ORIGIN may signal to the server that a "default" do= main
> (whatever it is) has to be used.

That explains why you might or might not want to do one thing or the
other.=C2=A0 It doesn't answer why you have MUST or SHOULD there.

You are correct.=C2=A0 The thinking was that= we could put a MUST requirement on browsers (a limited set of implementati= ons currently making lots of changes in order to implement WebRTC).=C2=A0 F= or non-browsers, there is a huge number of implementations that often are d= eployed in walled gardens, and some may not have an origin - for this, we f= elt a SHOULD was more appropriate. =C2=A0

However,= I don't have a good reason as to why a non-browser implementation woul= d support ORIGIN but not send it.

I'm fine wit= h simplifying it to say that if an implementation is compliant with this RF= C, they always (MUST) send ORIGIN, but can send an empty one if the info is= not available (i.e. configured, since with HTTP there will always be an or= igin, but with other uses, it might need to be manually configured) or want= to withhold it for privacy reasons.
=C2=A0

>> 2. In Sections 2.2 and 2.6, about the SHOULD NOT ("NOT RECOMM= ENDED"):
>> Why?=C2=A0 What happens if you use it?=C2=A0 Under what conditions= might you do so,
>> even though this says you SHOULD NOT?=C2=A0 (Why is it not "M= UST NOT"?)

I didn't see a response to this.

In= these cases, it just wastes bandwidth, but it doesn't do any harm.=C2= =A0 However TURN SEND requests can be sent frequently (RTP media can be sen= t over it), so putting it there would waste a lot of bandwidth.=C2=A0 Based= on that it could be that in a Send it would be MUST NOT (very wasteful of = bandwidth) but it isn't really a big deal on other non-Allocate request= s.
=C2=A0

>> 3. In Section 2.7:
>>
>>=C2=A0 =C2=A0 Therefore, if
>>=C2=A0 =C2=A0 a STUN request contains multiple origins, the first o= rigin MUST be
>>=C2=A0 =C2=A0 used and the remaining origins ignored.
>>
>> For all cases (that's what it says)?=C2=A0 Or was this just me= ant to apply to
>> SIP and XMPP?=C2=A0 Or SIP, XMPP, and WebRTC?=C2=A0 But not to oth= er HTTP uses?=C2=A0 Or
>> yes to HTTP?
>
> TURN server is not performing deep inspections of the traffic and it > has no means to learn that the traffic is related to SIP, XMPP, WebRTC=
> or anything else. So the rules must be universal.

In other words, your answer is "Yes, for all cases," right?

Actually, we have since discovered that the = STUN RFC 5389 says that if an attribute appears multiple times, the first i= s processed and the others are ignored.=C2=A0 So we can actually remove thi= s text, since we aren't trying to change STUN behavior.=C2=A0 Also, we = haven't come up with any valid use cases where multiple ORIGINs are gen= erated and useful.

Our Gen-ART reviewer David Blac= k also had issues with this text (https://www.ietf.org/mail-archive/web/t= ram/current/msg01457.html) but due to an error we haven't replied t= o him about it.

I think the best solution is to le= ave in this statement in section 2:

"Senders = MAY include multiple ORIGIN attributes in a request, and receivers MUST sup= port parsing and receiving multiple ORIGIN attributes. =C2=A0"

Since there is a theoretical chance of there being multip= le ORIGINs.=C2=A0 But I think we should delete this statement in section 2.= 7:

"Therefore, if a STUN request contains mul= tiple origins, the first origin MUST be used and the remaining origins igno= red."

since it is not needed given STUN's= default behavior.
=C2=A0

>>=C2=A0 If this really does apply to all cases, why are multiple
>> origins allowed in the first place?
>
> That section just explains what happens if the server got a request > with multiple ORIGIN attributes. It is not forbidden, and it is not > recommended. Those are just the rules that define the server's
> behavior.

Again, you haven't answered the question I asked, then.=C2=A0 You'r= e
defining a new protocol here.=C2=A0 Why are you allowing a feature and then=
saying that it SHOULD NOT be used?

Barry

--001a11c20b02153dd30514327849-- From nobody Mon Apr 20 19:25:22 2015 Return-Path: X-Original-To: tram@ietfa.amsl.com Delivered-To: tram@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 2166D1A87A3; Mon, 20 Apr 2015 19:25:18 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.999 X-Spam-Level: X-Spam-Status: No, score=-1.999 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, SPF_PASS=-0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id iSy4jIuR7IAq; Mon, 20 Apr 2015 19:25:15 -0700 (PDT) Received: from mail-vn0-x233.google.com (mail-vn0-x233.google.com [IPv6:2607:f8b0:400c:c0f::233]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id DC9551A87A1; Mon, 20 Apr 2015 19:25:14 -0700 (PDT) Received: by vnbg62 with SMTP id g62so31921628vnb.7; Mon, 20 Apr 2015 19:25:14 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :cc:content-type; bh=KhmHxSglQOg1+jeGABzetqrpIjzev1sMOXHL8jCsDo8=; b=VEnT6QefQfCuxNYrm3wdgYg9QSnmMXePYz4ayaXSbVNTQKZuam5Uz05DLPkJTQ4Rj0 mUMCxd46hltcmHdg1yjmhSxU6iGV+SDs7rZI/FkhoSVDEvSStO2FOoaMswi9zKN2nuby 9Fm/KHo4+HrI7cZnauJgHRpe1bUP7npcW0Hu36AcXCLVBCvkvaeckU5RH/Dm3QhriAN0 LpJminl9S652net0L5iukBqwVinelC5skiq18hulhBZbjomRh5sVEb4YB25H5bjt1s5v l5+Pm0YtWD7rlZRVHyq0MqowDc2/1uNUr0gVCKKhVf5wMV7Nz0rlXu7Eln+Mq4UmIV2r 7TKQ== MIME-Version: 1.0 X-Received: by 10.52.170.238 with SMTP id ap14mr20128412vdc.92.1429583114151; Mon, 20 Apr 2015 19:25:14 -0700 (PDT) Received: by 10.52.106.100 with HTTP; Mon, 20 Apr 2015 19:25:14 -0700 (PDT) In-Reply-To: <20150420204734.30634.69630.idtracker@ietfa.amsl.com> References: <20150420204734.30634.69630.idtracker@ietfa.amsl.com> Date: Mon, 20 Apr 2015 21:25:14 -0500 Message-ID: From: Alan Johnston To: Barry Leiba Content-Type: multipart/alternative; boundary=047d7bacb9a4b22b86051432c1c8 Archived-At: Cc: tram-chairs@ietf.org, "tram@ietf.org" , draft-ietf-tram-stun-origin.shepherd@ietf.org, draft-ietf-tram-stun-origin.ad@ietf.org, Simon Perreault , The IESG , draft-ietf-tram-stun-origin@ietf.org Subject: Re: [tram] Barry Leiba's Discuss on draft-ietf-tram-stun-origin-05: (with DISCUSS and COMMENT) X-BeenThere: tram@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "Discussing the creation of a Turn Revised And Modernized \(TRAM\) WG, which goal is to consolidate the various initiatives to update TURN and STUN." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 21 Apr 2015 02:25:18 -0000 --047d7bacb9a4b22b86051432c1c8 Content-Type: text/plain; charset=UTF-8 Barry, Here's my reply on your COMMENTs (see the other thread for the DISCUSS). - Alan - On Mon, Apr 20, 2015 at 3:47 PM, Barry Leiba wrote: > Barry Leiba has entered the following ballot position for > draft-ietf-tram-stun-origin-05: Discuss > > > ---------------------------------------------------------------------- > COMMENT: > ---------------------------------------------------------------------- > > -- Section 1 -- > A minor thing: the citation for STUN in the first two sentences seems > odd. Instead of citing 5389 with the first use of "STUN" in the first > sentence, you cite it in the second sentence where it appears to be a > reference for "a STUN extension". I suggest moving the citation to the > first sentence, so: "STUN, or Session Traversal Utilities for NAT > [RFC5389], is a protocol used...." > > It wouldn't be a bad thing to add an informative reference to CORS and to > cite it when you mention it. > Agreed - these are good points to fix. > > There is no Section 4.5 in RFC 7376. Perhaps you mean Section 4, bullet > 5? > We mean Section 4, bullet 6, as this is the major use case for STUN ORIGIN: " 6. Hosting multiple realms on a single IP address is challenging with TURN. When a TURN server needs to send the REALM attribute in response to an unauthenticated request, it has no useful information for determining which realm it should send in the response, except the source transport address of the TURN request. Note that this is a problem with multi-tenant scenarios only; this may not be a problem when the TURN server is located in enterprise premises." > > -- Section 2.1 -- > > For STUN requests sent without authentication to a STUN server (i.e. > STUN binding requests sent to a STUN server), the STUN client MUST > include the ORIGIN attribute when the origin is a web origin. For > other origins, such as SIP or XMPP, the STUN client SHOULD include > the ORIGIN attribute. > > Note that for privacy reasons, an empty ORIGIN attribute can be > sent, as described in the Security Considerations. > > The "i.e." tells me that the two things are synonymous: that "STUN > requests sent without authentication" is the same as "STUN binding > requests". Is that really true? Is it true that all binding requests > are sent without authentication? Or am I quite misunderstanding what > you're trying to say here? > Yes, it really is true. STUN binding requests to a STUN server are never authenticated - it is more work to authenticate them than to just respond, since it really is just a glorified Ping server. > > What, exactly, do you mean by "when the origin is a web origin"? From > the previous section, that seems to refer to something sent by a web > browser. But a web browser is just a piece of software, and a web > browser could happen to be a SIP or XMPP client, as well. Do you really > mean to refer to origins that use the "http" scheme? You might clarify > this, particularly because it's involved in a "MUST". > Sure, a web origin would always have an http/https origin, so we can phrase it that way. > > A STUN server can derive additional information for logging and > analytics about the request through the ORIGIN attribute, such as the > source of the request. For example, an enterprise STUN server might > only reply to STUN binding requests from certain domains. > > In the example case, does that mean that such a server would not reply to > binding requests that lacked ORIGIN (or had an empty one)? If so, that > would be a good bit of explanation to add. I don't think that what's in > the Security Considerations is enough to answer that question up here. > That is what is meant, so if you think stating that makes it more clear, then we can do so. > > -- Section 2.2 -- > > When the origin is a web origin, TURN [RFC5766] Allocate requests > MUST include the ORIGIN attribute. For all other TURN requests, > including the Send method, the use of the ORIGIN attribute is NOT > RECOMMENDED. For other origins, such as SIP or XMPP, TURN Allocate > requests SHOULD include the ORIGIN attribute. > > The order here is odd, and made me read it a few times to be sure that I > (thought I) understood it. I would switch the order of the second and > third sentences. Apart from that, I have the same comments here that I > had about Section 2.1. > OK, as I said in the DISCUSS thread, I'm fine with simplifying the behavior so that all usages MUST include ORIGIN. > > -- Section 4 -- > > DTLS or TLS transport SHOULD be > used when integrity protection for the ORIGIN attribute is important. > > Just curious here: When is integrity protection for it *not* important > (and how will the client know that), given that the server might use it > to determine whether it should respond, or to affect the authentication > challenge? (And, actually, the first sentence of the next paragraph > repeats the SHOULD without the qualifier. I suggest just removing the > qualifier and merging the "TLS/DTLS SHOULD be used" advice from the two > paragraphs. > The scenario is an eavesdropper who can learn the web sites visited from the ORIGIN attribute in an unencrypted STUN message. This is basically the same information in a DNS query, which is also currently unencrypted. If some form of confidentiality is being used for DNS, then it should also be used for STUN. But I'm fine with dropping this qualifier and just saying SHOULD. > > Also, given that Section 2.1 says that the server might use it for > logging and analytics, it might be good to add that the server SHOULD NOT > rely on information from the ORIGIN attribute in the absence of secure > transport. > That seems reasonable. > > I suggest factoring out the ends of the last two paragraphs (the parts > that start with "In cases where") into a new last paragraph, rather than > saying the same thing twice saying the same thing twice. > > > Are you saying that we should start new paragraphs at the "In cases where..."? These statements are the summation of the discussion earlier in the paragraphs, so putting them in a separate paragraph seems to me will leave the earlier paragraphs lacking. But maybe others have a good way of phrasing this. --047d7bacb9a4b22b86051432c1c8 Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: quoted-printable
Barry,

Here's my reply on your COMM= ENTs (see the other thread for the DISCUSS).

- Ala= n -

On Mon, = Apr 20, 2015 at 3:47 PM, Barry Leiba <barryleiba@computer.org>= ; wrote:
Barry Leiba has entered the following b= allot position for
draft-ietf-tram-stun-origin-05: Discuss


----------------------------------------------------------------------
COMMENT:
----------------------------------------------------------------------

-- Section 1 --
A minor thing: the citation for STUN in the first two sentences seems
odd.=C2=A0 Instead of citing 5389 with the first use of "STUN" in= the first
sentence, you cite it in the second sentence where it appears to be a
reference for "a STUN extension".=C2=A0 I suggest moving the cita= tion to the
first sentence, so: "STUN, or Session Traversal Utilities for NAT
[RFC5389], is a protocol used...."

It wouldn't be a bad thing to add an informative reference to CORS and = to
cite it when you mention it.=C2=A0 <http://www.w3.org/TR/cors/>

Agreed - these are good points to fix.
=C2=A0

There is no Section 4.5 in RFC 7376.=C2=A0 Perhaps you mean Section 4, bull= et
5?

We mean Section 4, bullet 6, as this= is the major use case for STUN ORIGIN:

" 6.= =C2=A0 Hosting multiple realms on a single IP address is challenging
<= div>=C2=A0 =C2=A0 =C2=A0 =C2=A0with TURN.=C2=A0 When a TURN server needs to= send the REALM attribute
=C2=A0 =C2=A0 =C2=A0 =C2=A0in response = to an unauthenticated request, it has no useful
=C2=A0 =C2=A0 =C2= =A0 =C2=A0information for determining which realm it should send in the
=C2=A0 =C2=A0 =C2=A0 =C2=A0response, except the source transport add= ress of the TURN
=C2=A0 =C2=A0 =C2=A0 =C2=A0request.=C2=A0 Note t= hat this is a problem with multi-tenant scenarios
=C2=A0 =C2=A0 = =C2=A0 =C2=A0only; this may not be a problem when the TURN server is locate= d
=C2=A0 =C2=A0 =C2=A0 =C2=A0in enterprise premises."
<= div>=C2=A0

-- Section 2.1 --

=C2=A0 =C2=A0For STUN requests sent without authentication to a STUN server= (i.e.
=C2=A0 =C2=A0STUN binding requests sent to a STUN server), the STUN client = MUST
=C2=A0 =C2=A0include the ORIGIN attribute when the origin is a web origin.= =C2=A0 For
=C2=A0 =C2=A0other origins, such as SIP or XMPP, the STUN client SHOULD inc= lude
=C2=A0 =C2=A0the ORIGIN attribute.

=C2=A0 =C2=A0 =C2=A0 Note that for privacy reasons, an empty ORIGIN attribu= te can be
=C2=A0 =C2=A0 =C2=A0 sent, as described in the Security Considerations.

The "i.e." tells me that the two things are synonymous: that &quo= t;STUN
requests sent without authentication" is the same as "STUN bindin= g
requests".=C2=A0 Is that really true?=C2=A0 Is it true that all bindin= g requests
are sent without authentication?=C2=A0 Or am I quite misunderstanding what<= br> you're trying to say here?

Yes, it = really is true.=C2=A0 STUN binding requests to a STUN server are never auth= enticated - it is more work to authenticate them than to just respond, sinc= e it really is just a glorified Ping server.
=C2=A0

What, exactly, do you mean by "when the origin is a web origin"?= =C2=A0 From
the previous section, that seems to refer to something sent by a web
browser.=C2=A0 But a web browser is just a piece of software, and a web
browser could happen to be a SIP or XMPP client, as well.=C2=A0 Do you real= ly
mean to refer to origins that use the "http" scheme?=C2=A0 You mi= ght clarify
this, particularly because it's involved in a "MUST".

Sure, a web origin would always have an http/h= ttps origin, so we can phrase it that way.
=C2=A0

=C2=A0 =C2=A0A STUN server can derive additional information for logging an= d
=C2=A0 =C2=A0analytics about the request through the ORIGIN attribute, such= as the
=C2=A0 =C2=A0source of the request.=C2=A0 For example, an enterprise STUN s= erver might
=C2=A0 =C2=A0only reply to STUN binding requests from certain domains.

In the example case, does that mean that such a server would not reply to binding requests that lacked ORIGIN (or had an empty one)?=C2=A0 If so, tha= t
would be a good bit of explanation to add.=C2=A0 I don't think that wha= t's in
the Security Considerations is enough to answer that question up here.
<= /blockquote>

That is what is meant, so if you think stat= ing that makes it more clear, then we can do so.
=C2=A0

-- Section 2.2 --

=C2=A0 =C2=A0When the origin is a web origin, TURN [RFC5766] Allocate reque= sts
=C2=A0 =C2=A0MUST include the ORIGIN attribute.=C2=A0 For all other TURN re= quests,
=C2=A0 =C2=A0including the Send method, the use of the ORIGIN attribute is = NOT
=C2=A0 =C2=A0RECOMMENDED.=C2=A0 For other origins, such as SIP or XMPP, TUR= N Allocate
=C2=A0 =C2=A0requests SHOULD include the ORIGIN attribute.

The order here is odd, and made me read it a few times to be sure that I (thought I) understood it.=C2=A0 I would switch the order of the second and=
third sentences.=C2=A0 Apart from that, I have the same comments here that = I
had about Section 2.1.

OK, as I said in= the DISCUSS thread, I'm fine with simplifying the behavior so that all= usages MUST include ORIGIN.
=C2=A0

-- Section 4 --

=C2=A0 =C2=A0DTLS or TLS transport SHOULD be
=C2=A0 =C2=A0used when integrity protection for the ORIGIN attribute is imp= ortant.

Just curious here: When is integrity protection for it *not* important
(and how will the client know that), given that the server might use it
to determine whether it should respond, or to affect the authentication
challenge?=C2=A0 (And, actually, the first sentence of the next paragraph repeats the SHOULD without the qualifier.=C2=A0 I suggest just removing the=
qualifier and merging the "TLS/DTLS SHOULD be used" advice from t= he two
paragraphs.

The scenario is an eavesdro= pper who can learn the web sites visited from the ORIGIN attribute in an un= encrypted STUN message.=C2=A0 This is basically the same information in a D= NS query, which is also currently unencrypted.=C2=A0 If some form of confid= entiality is being used for DNS, then it should also be used for STUN.

But I'm fine with dropping this qualifier and just= saying SHOULD.

=C2=A0

Also, given that Section 2.1 says that the server might use it for
logging and analytics, it might be good to add that the server SHOULD NOT rely on information from the ORIGIN attribute in the absence of secure
transport.

That seems reasonable.
=
=C2=A0

I suggest factoring out the ends of the last two paragraphs (the parts
that start with "In cases where") into a new last paragraph, rath= er than
saying the same thing twice saying the same thing twice.



Are you saying that= we should start new paragraphs at the "In cases where..."?=C2=A0= These statements are the summation of the discussion earlier in the paragr= aphs, so putting them in a separate paragraph seems to me will leave the ea= rlier paragraphs lacking.=C2=A0 But maybe others have a good way of phrasin= g this.

--047d7bacb9a4b22b86051432c1c8-- From nobody Mon Apr 20 20:08:42 2015 Return-Path: X-Original-To: tram@ietfa.amsl.com Delivered-To: tram@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id EAB3C1A88F5; Mon, 20 Apr 2015 20:08:39 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.278 X-Spam-Level: X-Spam-Status: No, score=-1.278 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, FM_FORGED_GMAIL=0.622, FREEMAIL_FROM=0.001, SPF_PASS=-0.001] autolearn=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id lLWqVpXjFwMa; Mon, 20 Apr 2015 20:08:38 -0700 (PDT) Received: from mail-ig0-x233.google.com (mail-ig0-x233.google.com [IPv6:2607:f8b0:4001:c05::233]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id E2FF81A893F; Mon, 20 Apr 2015 20:08:37 -0700 (PDT) Received: by igblo3 with SMTP id lo3so76384917igb.1; Mon, 20 Apr 2015 20:08:37 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:sender:in-reply-to:references:date:message-id:subject :from:to:cc:content-type; bh=KduYTTHZYYC7q1pWqaLf0w4QXe6EFYH8pahJARiFXrM=; b=PLNeJ+yU+a6/NkCFJOJmWrBNumlnPcEL4v473BnUDULw56xn56sT3UzsbEGPnPTzxV 2jLGqhBvrX3r5yrK6JP/bfTpz/Avnn99nlGLWmu4oIghNw2GzST2+ajIw8kFLJcCzkp2 F5lGKWNrfQ3QOk/jUFIaGbYozyXDKRVHLWw+eb1BsO3KUtmyHEXEQPE3fVHj7IQpifh8 0SiU8xZMEZOdFBWyn290cU/KCdmpPt39UKTv1YdCmC2INj7rOKmyENd0hxXsu4255cyQ aaO8UkvfkwBC/3CuQ+crOgMoXDWjNW5x0GoySgk+mKdcvAtlX5JHe+4Dc7zaOqHnFGWX BIPA== MIME-Version: 1.0 X-Received: by 10.50.1.47 with SMTP id 15mr25449796igj.40.1429585717468; Mon, 20 Apr 2015 20:08:37 -0700 (PDT) Sender: barryleiba@gmail.com Received: by 10.107.7.130 with HTTP; Mon, 20 Apr 2015 20:08:37 -0700 (PDT) In-Reply-To: References: <20150420204734.30634.69630.idtracker@ietfa.amsl.com> Date: Mon, 20 Apr 2015 23:08:37 -0400 X-Google-Sender-Auth: Wl-ityCaT-9VtTav0zQXDjL0XRE Message-ID: From: Barry Leiba To: Alan Johnston Content-Type: text/plain; charset=ISO-8859-1 Archived-At: Cc: tram-chairs@ietf.org, Oleg Moskalenko , "tram@ietf.org" , draft-ietf-tram-stun-origin.shepherd@ietf.org, draft-ietf-tram-stun-origin.ad@ietf.org, Simon Perreault , The IESG , draft-ietf-tram-stun-origin@ietf.org Subject: Re: [tram] Barry Leiba's Discuss on draft-ietf-tram-stun-origin-05: (with DISCUSS and COMMENT) X-BeenThere: tram@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "Discussing the creation of a Turn Revised And Modernized \(TRAM\) WG, which goal is to consolidate the various initiatives to update TURN and STUN." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 21 Apr 2015 03:08:40 -0000 Hi, Alan. Thanks for your response. It fully resolves my DISCUSS; see below. >> 1. In Sections 2.1 and 2.2, I find this combination odd: >> >> a. For non-web origins, you SHOULD (not MUST) send ORIGIN. >> b. But for web origins, you MUST send ORIGIN. >> c. But that ORIGIN can be empty. >> >> If you're allowed to send an empty origin, and you can sometimes not send >> ORIGIN at all, why is ORIGIN REQUIRED (but can be empty) in some cases? >> How does that help interoperability or security or whatnot? > > The thinking was that we could put a MUST requirement on > browsers (a limited set of implementations currently making lots of changes > in order to implement WebRTC). For non-browsers, there is a huge number of > implementations that often are deployed in walled gardens, and some may not > have an origin - for this, we felt a SHOULD was more appropriate. > > However, I don't have a good reason as to why a non-browser implementation > would support ORIGIN but not send it. > > I'm fine with simplifying it to say that if an implementation is compliant > with this RFC, they always (MUST) send ORIGIN, but can send an empty one if > the info is not available (i.e. configured, since with HTTP there will > always be an origin, but with other uses, it might need to be manually > configured) or want to withhold it for privacy reasons. That'd be a good solution; thanks. The key points to me are (1) being consistent about sending empty ORIGIN or none at all, and (2) explaining when it's appropriate to do that. What you have above covers both. >> 2. In Sections 2.2 and 2.6, about the SHOULD NOT ("NOT RECOMMENDED"): >> Why? What happens if you use it? Under what conditions might you do so, >> even though this says you SHOULD NOT? (Why is it not "MUST NOT"?) > > In these cases, it just wastes bandwidth, but it doesn't do any harm. > However TURN SEND requests can be sent frequently (RTP media can be sent > over it), so putting it there would waste a lot of bandwidth. Based on that > it could be that in a Send it would be MUST NOT (very wasteful of bandwidth) > but it isn't really a big deal on other non-Allocate requests. OK. I prefer having it be MUST NOT for all cases where it's not appropriate, but do what you see best. What I need for the DISCUSS is the explanation -- that it is not used in those cases and wastes bandwidth. Thanks. >> 3. In Section 2.7: >> >> Therefore, if >> a STUN request contains multiple origins, the first origin MUST be >> used and the remaining origins ignored. >> >> For all cases (that's what it says)? Or was this just meant to apply to >> SIP and XMPP? Or SIP, XMPP, and WebRTC? But not to other HTTP uses? >> Or yes to HTTP? > > Actually, we have since discovered that the STUN RFC 5389 says that if an > attribute appears multiple times, the first is processed and the others are > ignored. So we can actually remove this text, since we aren't trying to > change STUN behavior. Also, we haven't come up with any valid use cases > where multiple ORIGINs are generated and useful. > > Our Gen-ART reviewer David Black also had issues with this text > (https://www.ietf.org/mail-archive/web/tram/current/msg01457.html) but due > to an error we haven't replied to him about it. > > I think the best solution is to leave in this statement in section 2: > > "Senders MAY include multiple ORIGIN attributes in a request, and receivers > MUST support parsing and receiving multiple ORIGIN attributes. " > > Since there is a theoretical chance of there being multiple ORIGINs. But I > think we should delete this statement in section 2.7: > > "Therefore, if a STUN request contains multiple origins, the first origin > MUST be used and the remaining origins ignored." > > since it is not needed given STUN's default behavior. OK. If you don't think there are valid cases to use multiple ORIGINs, I think it's best not to allow them, or at least to discourage them. Perhaps best would be to say "SHOULD NOT include multiple ORIGIN attributes", rather than "MAY", with an explanation that it's theoretically a reasonable situation, but there are no actual valid cases (but still leave the "MUST support" on the receiving side, in case valid cases arise later). But that's my preference, not a requirement. I'm already OK with clearing the DISCUSS based on the explanation and the removal of the confusing sentence. Barry From nobody Mon Apr 20 20:21:37 2015 Return-Path: X-Original-To: tram@ietfa.amsl.com Delivered-To: tram@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 13BD51A8A4B; Mon, 20 Apr 2015 20:21:36 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.278 X-Spam-Level: X-Spam-Status: No, score=-1.278 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, FM_FORGED_GMAIL=0.622, FREEMAIL_FROM=0.001, SPF_PASS=-0.001] autolearn=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 6LRhGBT1_tj3; Mon, 20 Apr 2015 20:21:34 -0700 (PDT) Received: from mail-ie0-x22e.google.com (mail-ie0-x22e.google.com [IPv6:2607:f8b0:4001:c03::22e]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 74E961A8A4A; Mon, 20 Apr 2015 20:21:34 -0700 (PDT) Received: by iecrt8 with SMTP id rt8so4808255iec.0; Mon, 20 Apr 2015 20:21:34 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:sender:in-reply-to:references:date:message-id:subject :from:to:cc:content-type; bh=ePTZgsQdgxD9ApFwQHpgOQU1IceAulEgXjo+JsY/Pkg=; b=O+qqGrtBurBvR+Bc8r1ohJJHN04rKY59CLUK3SwcCobPzzn5aAQi4QihgPCT6fETv3 fNbLirZ971RxUT5Ac+1z90mKJHN36LwIExMv7MMYLJtE2PkuWLv4hnm0juU5rrIT+lC0 0O/ym3VubySARZQXl1/6eSIWOYqKJUJy3DXWG6NtpmcSSBdlR9CDeP8ttE6QCw19J9/n De7pvHlqGQ35DY03pgyReRIB8q1CodGynOPgCCvGMOI/Gkkqr5VDU7l5RpqlUwglzpbZ LOreCRI31nVCshi4lOB2D1VEgk5pMj6INtyUS8xNMqY4UehzynM5qjA7ujftDwkkElQz y/LA== MIME-Version: 1.0 X-Received: by 10.50.138.70 with SMTP id qo6mr1279526igb.40.1429586493975; Mon, 20 Apr 2015 20:21:33 -0700 (PDT) Sender: barryleiba@gmail.com Received: by 10.107.7.130 with HTTP; Mon, 20 Apr 2015 20:21:33 -0700 (PDT) In-Reply-To: References: <20150420204734.30634.69630.idtracker@ietfa.amsl.com> Date: Mon, 20 Apr 2015 23:21:33 -0400 X-Google-Sender-Auth: dLm-YzRUJLugz5QlyHflWj7Cp-s Message-ID: From: Barry Leiba To: Alan Johnston Content-Type: text/plain; charset=ISO-8859-1 Archived-At: Cc: tram-chairs@ietf.org, "tram@ietf.org" , draft-ietf-tram-stun-origin.shepherd@ietf.org, draft-ietf-tram-stun-origin.ad@ietf.org, Simon Perreault , The IESG , draft-ietf-tram-stun-origin@ietf.org Subject: Re: [tram] Barry Leiba's Discuss on draft-ietf-tram-stun-origin-05: (with DISCUSS and COMMENT) X-BeenThere: tram@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "Discussing the creation of a Turn Revised And Modernized \(TRAM\) WG, which goal is to consolidate the various initiatives to update TURN and STUN." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 21 Apr 2015 03:21:36 -0000 > Here's my reply on your COMMENTs (see the other thread for the DISCUSS). And thanks for considering my comments (and accepting most of them). I'll leave the edits to you. Below is just a response on the point where you weren't sure what I was suggesting. >> I suggest factoring out the ends of the last two paragraphs (the parts >> that start with "In cases where") into a new last paragraph, rather than >> saying the same thing twice saying the same thing twice. > > Are you saying that we should start new paragraphs at the "In cases > where..."? These statements are the summation of the discussion earlier in > the paragraphs, so putting them in a separate paragraph seems to me will > leave the earlier paragraphs lacking. But maybe others have a good way of > phrasing this. Sorry for not being clear. Here's what I meant, specifically (and it's purely a suggestion, so do as you think reads best): OLD The STUN ORIGIN attribute has privacy implications. As a result, TLS or DTLS transport SHOULD be used. If STUN requests containing the origin attribute are not encrypted with TLS or DTLS, an on-path attacker could determine this information by inspecting STUN messages between the STUN client and STUN server. This information is often available in other messages sent by the browser, such as DNS or HTTP requests. However, in cases where secure HTTP is used, including the ORIGIN attribute over an unencrypted transport could leak this information. In cases where privacy is paramount, but TLS or DTLS transport is not available, the ORIGIN attribute MAY be sent with an empty (null) origin value. It is up to the server what to do when receiving such an empty origin. The server could fail the request, or the server could assume an origin and attempt to process the request. The STUN ORIGIN attribute also has privacy implications in that the origin information is shared with a STUN or TURN server which otherwise might not know this information. This information could be used to track usage of real-time communication services. A STUN or TURN server will always know the public IP address of each user, but the ORIGIN attribute provides more information about which service or provider is being used. The particular STUN and TURN servers used are usually selected by the real-time communications service provider (i.e. the web provider for WebRTC or the SIP or XMPP service provider). In addition, they are usually also run by the same provider, or by a trusted partner, especially for TURN. However, a service or provider using an untrusted third party STUN or TURN server needs to recognize that the operator of the third party STUN or TURN server will learn the identity of the service or provider through this extension. In cases where the STUN or TURN client does not wish to share origin information with the server for privacy reasons, the ORIGIN attribute MAY be sent with an empty (null) origin value. It is up to the server what to do when receiving such an empty origin. The server could fail the request, or the server could assume an origin and attempt to process the request. NEW The STUN ORIGIN attribute has privacy implications. As a result, TLS or DTLS transport SHOULD be used. If STUN requests containing the origin attribute are not encrypted with TLS or DTLS, an on-path attacker could determine this information by inspecting STUN messages between the STUN client and STUN server. This information is often available in other messages sent by the browser, such as DNS or HTTP requests. However, in cases where secure HTTP is used, including the ORIGIN attribute over an unencrypted transport could leak this information. The STUN ORIGIN attribute also has privacy implications in that the origin information is shared with a STUN or TURN server which otherwise might not know this information. This information could be used to track usage of real-time communication services. A STUN or TURN server will always know the public IP address of each user, but the ORIGIN attribute provides more information about which service or provider is being used. The particular STUN and TURN servers used are usually selected by the real-time communications service provider (i.e. the web provider for WebRTC or the SIP or XMPP service provider). In addition, they are usually also run by the same provider, or by a trusted partner, especially for TURN. However, a service or provider using an untrusted third party STUN or TURN server needs to recognize that the operator of the third party STUN or TURN server will learn the identity of the service or provider through this extension. Because of these privacy implications, in cases where TLS or DTLS is not available or the client does not wish to share origin information with the server the ORIGIN attribute MAY be sent with an empty (null) origin value. It is up to the server what to do when receiving such an empty origin. The server could fail the request, or the server could assume an origin and attempt to process the request. END The changes are just to cut the last sentences of each paragraph and to consolidate the cut part into the third paragraph. Barry From nobody Mon Apr 20 23:56:03 2015 Return-Path: X-Original-To: tram@ietfa.amsl.com Delivered-To: tram@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id B414E1B3675; Mon, 20 Apr 2015 23:55:58 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.91 X-Spam-Level: X-Spam-Status: No, score=-1.91 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, T_RP_MATCHES_RCVD=-0.01] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id PDLk5-KFVmfn; Mon, 20 Apr 2015 23:55:55 -0700 (PDT) Received: from p130.piuha.net (p130.piuha.net [193.234.218.130]) by ietfa.amsl.com (Postfix) with ESMTP id 1B26D1B2DD9; Mon, 20 Apr 2015 23:55:55 -0700 (PDT) Received: from localhost (localhost [127.0.0.1]) by p130.piuha.net (Postfix) with ESMTP id 8A2612CC5F; Tue, 21 Apr 2015 09:55:53 +0300 (EEST) (envelope-from jari.arkko@piuha.net) X-Virus-Scanned: amavisd-new at piuha.net Received: from p130.piuha.net ([127.0.0.1]) by localhost (p130.piuha.net [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Imet61IjEPTj; Tue, 21 Apr 2015 09:55:52 +0300 (EEST) Received: from [127.0.0.1] (p130.piuha.net [IPv6:2a00:1d50:2::130]) by p130.piuha.net (Postfix) with ESMTP id F36792CC5D; Tue, 21 Apr 2015 09:55:51 +0300 (EEST) (envelope-from jari.arkko@piuha.net) Content-Type: multipart/signed; boundary="Apple-Mail=_2E3E8439-CB28-4C8B-9518-DAB1F30712F8"; protocol="application/pgp-signature"; micalg=pgp-sha512 Mime-Version: 1.0 (Mac OS X Mail 7.3 \(1878.6\)) From: Jari Arkko In-Reply-To: Date: Tue, 21 Apr 2015 09:55:50 +0300 Message-Id: References: To: "Black, David" , "alan.b.johnston@gmail.com" , "justin@uberti.name" , "yoakum@avaya.com" X-Mailer: Apple Mail (2.1878.6) Archived-At: Cc: "General Area Review Team \(gen-art@ietf.org\)" , "ietf@ietf.org" , "tram@ietf.org" Subject: Re: [tram] [Gen-art] Gen-ART review of draft-ietf-tram-stun-origin-05 X-BeenThere: tram@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "Discussing the creation of a Turn Revised And Modernized \(TRAM\) WG, which goal is to consolidate the various initiatives to update TURN and STUN." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 21 Apr 2015 06:55:58 -0000 --Apple-Mail=_2E3E8439-CB28-4C8B-9518-DAB1F30712F8 Content-Transfer-Encoding: 7bit Content-Type: text/plain; charset=iso-8859-1 Thanks for your review, David. I am trying to determine how to deal with this draft in the upcoming IESG telechat. Has there been any discussion of the issue you raise? Do the authors have a response? Jari On 21 Mar 2015, at 06:12, Black, David wrote: > I am the assigned Gen-ART reviewer for this draft. For background on > Gen-ART, please see the FAQ at > > . > > Please resolve these comments along with any other Last Call comments > you may receive. > > Document: draft-ietf-tram-stun-origin-05 > Reviewer: David L. Black > Review Date: March 20, 2015 > IETF LC End Date: March 17, 2015 > > Summary: This draft is on the right track, but has open issues > described in the review. > > This draft describes the addition of a web origin attribute to STUN and > usage of that attribute in several protocol contexts. The draft is well- > written and easy to read. I found one minor issue which may be editorial. > > Major issues: None. > > Minor issues: > > Section 2.7 discusses use of multiple STUN origins with Web RTC and > concludes by imposing a "MUST" requirement on use of multiple STUN > origins with HTTP in general (use first origin, ignore others). While > Web RTC may be the predominant or only current use of STUN and TURN with > HTTP, this "MUST" could foreclose the use of STUN origins with other > uses of HTTP. I'm not sure what those possible future uses might be, > but at a minimum this draft ought to more tightly scope its discussion > of use of STUN origins with HTTP to limit that usage to Web RTC. If > there's a good way for a STUN or TURN server to detect Web RTC usage, > requiring STUN and TURN servers to look for Web RTC as the use of > HTTP, and only impose this "MUST" requirement if Web RTC is detected > would better align that requirement with the discussion in this draft. > > Nits/editorial comments: > > idnits 2.13.01 turned up a reference problem: > > == Unused Reference: 'RFC7350' is defined on line 490, but no explicit > reference was found in the text > > That RFC should be cited somewhere. In addition, there are no RFCs cited > or referenced for TLS and DTLS - they should be added (I believe that > RFC 5246 and RFC 6347 are appropriate, respectively). > > Thanks, > --David > ---------------------------------------------------- > David L. Black, Distinguished Engineer > EMC Corporation, 176 South St., Hopkinton, MA 01748 > +1 (508) 293-7953 FAX: +1 (508) 293-7786 > david.black@emc.com Mobile: +1 (978) 394-7754 > ---------------------------------------------------- > > > _______________________________________________ > Gen-art mailing list > Gen-art@ietf.org > https://www.ietf.org/mailman/listinfo/gen-art --Apple-Mail=_2E3E8439-CB28-4C8B-9518-DAB1F30712F8 Content-Transfer-Encoding: 7bit Content-Disposition: attachment; filename=signature.asc Content-Type: application/pgp-signature; name=signature.asc Content-Description: Message signed with OpenPGP using GPGMail -----BEGIN PGP SIGNATURE----- Comment: GPGTools - https://gpgtools.org iQIcBAEBCgAGBQJVNfR3AAoJEM80gCTQU46qiUIP/ip/7MvSY8n5dBaMgWDf+2KV Ny66NaYmyEEXfCFnBE8NmA/NOLzR56uxW2wwyi5P7xd0mhbq5g4w2xdVtkIimV8j NVuKeNudNapnnPMMnd5e6B7nYId0PDysOM7xZFkQOvTbD2X5VuPhpEi8G8YWR+PC bXd1KnX1RIXUC5AbjDN60kuUOx62scpENVk/+GFbXLgYB2PVVIvyCqLveJoKcQlH r8ZahN+31V2c5xr5S7fxkGMmjFjiYTth6oDf8fdC5h5em7RkS4SqfZoVZbkwu1vC lGepJbgnt7v+JWeXJ6oeSNxEnORJ9oSLyih24xtzYeqBoDpQncESJpT4pxcG2qz1 +3YZHMAw+bwbAv8Mne4zhxUlEU+iRkK6Zgm5te3elmBKYQU9t/UMpJIsh4yvSU9F Z4SPjn+2fshTxsPZq/yeMXbZVhHKYGfWCjgxFspBGDK/ZTdKXgx03OA7RhyHRblR dTukFJqdw1XtyiMSIM3X53vM66VRtBAYWCpEl8XGxS0BNrh/9YSoUWVBSlaNBCLK yth1GhRViFy0aMg/wmZJmgAwz+pW5Ort75uJdXXo11DTxY6fxzcI73ESdh1ky4Mw iO9N9/KbEdDyngP0mTmhVKVlztJ+6bzj8mqkD19AtQAV6PYNXaciDrqjhVbUFNfa BmzWb3+Ve6NkJBGezzIA =pEpp -----END PGP SIGNATURE----- --Apple-Mail=_2E3E8439-CB28-4C8B-9518-DAB1F30712F8-- From nobody Tue Apr 21 00:05:16 2015 Return-Path: X-Original-To: tram@ietfa.amsl.com Delivered-To: tram@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id B94161A87B2; Mon, 20 Apr 2015 19:29:23 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.9 X-Spam-Level: X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 0Xo9BUheFS4d; Mon, 20 Apr 2015 19:29:22 -0700 (PDT) Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 48CAF1A87B0; Mon, 20 Apr 2015 19:29:22 -0700 (PDT) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: "Ben Campbell" To: "The IESG" X-Test-IDTracker: no X-IETF-IDTracker: 6.0.1 Auto-Submitted: auto-generated Precedence: bulk Message-ID: <20150421022922.506.53723.idtracker@ietfa.amsl.com> Date: Mon, 20 Apr 2015 19:29:22 -0700 Archived-At: X-Mailman-Approved-At: Tue, 21 Apr 2015 00:05:15 -0700 Cc: tram-chairs@ietf.org, tram@ietf.org, draft-ietf-tram-stun-origin.shepherd@ietf.org, draft-ietf-tram-stun-origin.ad@ietf.org, sperreault@jive.com, draft-ietf-tram-stun-origin@ietf.org Subject: [tram] Ben Campbell's Discuss on draft-ietf-tram-stun-origin-05: (with DISCUSS and COMMENT) X-BeenThere: tram@ietf.org X-Mailman-Version: 2.1.15 List-Id: "Discussing the creation of a Turn Revised And Modernized \(TRAM\) WG, which goal is to consolidate the various initiatives to update TURN and STUN." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 21 Apr 2015 02:29:23 -0000 Ben Campbell has entered the following ballot position for draft-ietf-tram-stun-origin-05: Discuss When responding, please keep the subject line intact and reply to all email addresses included in the To and CC lines. (Feel free to cut this introductory paragraph, however.) Please refer to http://www.ietf.org/iesg/statement/discuss-criteria.html for more information about IESG DISCUSS and COMMENT positions. The document, along with other ballot positions, can be found here: http://datatracker.ietf.org/doc/draft-ietf-tram-stun-origin/ ---------------------------------------------------------------------- DISCUSS: ---------------------------------------------------------------------- Is the normative language in section 2.1 intended to mean that all stun implementations used by a browser, SIP, or XMPP MUST/SHOULD comply with this draft? If so, then this draft should probably update STUN. (This might also be the case for section 2.2 and TURN). If on the other hand, these sections are intended to apply only to implementations that understand STUN Origin, then I agree no update is needed, but it might help to make that unambiguous in the text. (Normally I think this sort of thing goes without saying, but I am not sure of the intent in this case.) ---------------------------------------------------------------------- COMMENT: ---------------------------------------------------------------------- I agree with all 3 points of Barry's discuss. Does Spencer's comment about removing the mention of UDP fragmentation mean people don't think this will be a problem? In section 4, paragraph 4, can the STUN client reasonably expected to know when privacy is paramount? I am a bit surprised not to find a stronger statement about needing DTLS or TLS for HTTPS origins. Nits: -- Section 1: I agree with Barry that the first reference to STUN should probably go in the previous sentence. Should reference to " Section 4.5 of [RFC7376]" really be 4.6"? 4.5 talks about a MiTM learning USERNAME. 4.6 talks about hosting multiple realms from the same IP address. (And as Barry mentioned, these are really "List entries 5 or 6 in Section 4") From nobody Tue Apr 21 04:09:03 2015 Return-Path: X-Original-To: tram@ietfa.amsl.com Delivered-To: tram@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 09C4B1A9172; Tue, 21 Apr 2015 04:08:57 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.999 X-Spam-Level: X-Spam-Status: No, score=-1.999 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, SPF_PASS=-0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id jsSxfXma0TYF; Tue, 21 Apr 2015 04:08:49 -0700 (PDT) Received: from mail-vn0-x234.google.com (mail-vn0-x234.google.com [IPv6:2607:f8b0:400c:c0f::234]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id D770E1A9231; Tue, 21 Apr 2015 04:08:42 -0700 (PDT) Received: by vnbg1 with SMTP id g1so32688490vnb.2; Tue, 21 Apr 2015 04:08:42 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :cc:content-type; bh=9I4bjSq89WDXjSMMwqItyiPPwbc/k6a04Ioy6+MsBs4=; b=HZ0aMPyI9ZHxMaVqiXh1MYpO1JpscfjD/qXZ5xkTCcJHr3cJfNNxIQw0uu2OHjLSy+ /gIT+z9zutCeVemc1vptmByGp8oOEatXa69+nYf61kYs706VZzGwVzbY0vf2+E2Aiqwe S6r1cKrELhYfIC9atbN1veQfOBBUyWRSUuJrBSC6DfWNc76RiLj0A+JdaaQuNZi8BBNm mDJdK4akbNUBxSrOvUtycg3Fit1zhjrrqYguCC1P2ZapiZ01muNT7LL0B8TVFV80B8qa O6Vb8doSsr6JrozEdhffP2luw9GL6VAq5YwljJ+p45qJvXIciczZbAB3Xdb2HnfvnHPr vpdA== MIME-Version: 1.0 X-Received: by 10.52.14.200 with SMTP id r8mr21683496vdc.79.1429614522013; Tue, 21 Apr 2015 04:08:42 -0700 (PDT) Received: by 10.52.106.100 with HTTP; Tue, 21 Apr 2015 04:08:41 -0700 (PDT) In-Reply-To: <20150421022922.506.53723.idtracker@ietfa.amsl.com> References: <20150421022922.506.53723.idtracker@ietfa.amsl.com> Date: Tue, 21 Apr 2015 06:08:41 -0500 Message-ID: From: Alan Johnston To: Ben Campbell Content-Type: multipart/alternative; boundary=20cf3030c5ffc01d1705143a1189 Archived-At: Cc: tram-chairs@ietf.org, "tram@ietf.org" , draft-ietf-tram-stun-origin.shepherd@ietf.org, draft-ietf-tram-stun-origin.ad@ietf.org, Simon Perreault , The IESG , draft-ietf-tram-stun-origin@ietf.org Subject: Re: [tram] Ben Campbell's Discuss on draft-ietf-tram-stun-origin-05: (with DISCUSS and COMMENT) X-BeenThere: tram@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "Discussing the creation of a Turn Revised And Modernized \(TRAM\) WG, which goal is to consolidate the various initiatives to update TURN and STUN." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 21 Apr 2015 11:08:57 -0000 --20cf3030c5ffc01d1705143a1189 Content-Type: text/plain; charset=UTF-8 Hi Ben, See my response below. - Alan - On Mon, Apr 20, 2015 at 9:29 PM, Ben Campbell wrote: > Ben Campbell has entered the following ballot position for > draft-ietf-tram-stun-origin-05: Discuss > > When responding, please keep the subject line intact and reply to all > email addresses included in the To and CC lines. (Feel free to cut this > introductory paragraph, however.) > > > Please refer to http://www.ietf.org/iesg/statement/discuss-criteria.html > for more information about IESG DISCUSS and COMMENT positions. > > > The document, along with other ballot positions, can be found here: > http://datatracker.ietf.org/doc/draft-ietf-tram-stun-origin/ > > > > ---------------------------------------------------------------------- > DISCUSS: > ---------------------------------------------------------------------- > > Is the normative language in section 2.1 intended to mean that all stun > implementations used by a browser, SIP, or XMPP MUST/SHOULD comply with > this draft? If so, then this draft should probably update STUN. (This > might also be the case for section 2.2 and TURN). > > If on the other hand, these sections are intended to apply only to > implementations that understand STUN Origin, then I agree no update is > needed, but it might help to make that unambiguous in the text. > (Normally I think this sort of thing goes without saying, but I am not > sure of the intent in this case.) > We meant the latter, that the normative language in this document applies to implementations of this specification. Right now there is a STUNbis draft in TRAM, so if we want the latter, then we could normatively reference it there. > > > ---------------------------------------------------------------------- > COMMENT: > ---------------------------------------------------------------------- > > I agree with all 3 points of Barry's discuss. > OK, let us know if the discussion in the other thread is heading in the right direction. > > Does Spencer's comment about removing the mention of UDP fragmentation > mean people don't think this will be a problem? > We originally thought that there might be a real UDP fragmentation issue back when we thought there were: 1. Valid use cases for multiple Origins, and 2. Multiple ORIGINs if included would be processed. However, since then, we have ruled out multiple Origins for HTTP, SIP, and XMPP. And, we have realized that unless we change core STUN behavior, multiple ORIGIN attributes wouldn't even be processed. So, there is a highly theoretical problem that we can't rule out, but we have considered it and discussed it in Dallas. The consensus was not to address it. > > In section 4, paragraph 4, can the STUN client reasonably expected to > know when privacy is paramount? I am a bit surprised not to find a > stronger statement about needing DTLS or TLS for HTTPS origins. > Even an HTTPS request will still, in general, send DNS queries in the clear, and that is effectively what is going on here with STUN Origin. If there was no real penalty for DTLS or TLS, then we might put in a stronger statement, but remember STUN and TURN are used to create candidates for ICE, so the transport used becomes the transport for the resulting media flow. Running TURN over DTLS results in SRTP over DTLS which is double encryption on the leg between the client and the TURN server. > > Nits: > > -- Section 1: > > I agree with Barry that the first reference to STUN should probably go in > the previous sentence. > Yes, we'll fix that. > > Should reference to " Section 4.5 of [RFC7376]" really be 4.6"? 4.5 talks > about a MiTM learning USERNAME. 4.6 talks about hosting multiple realms > from the same IP address. (And as Barry mentioned, these are really "List > entries 5 or 6 in Section 4") > > > You are correct. --20cf3030c5ffc01d1705143a1189 Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: quoted-printable
Hi Ben,

See my response below.

- Alan -

On Mon, Apr 20, 2015 at 9:29 PM, Ben Campbell <ben@nostrum.com= > wrote:
Ben Campbell has e= ntered the following ballot position for
draft-ietf-tram-stun-origin-05: Discuss

When responding, please keep the subject line intact and reply to all
email addresses included in the To and CC lines. (Feel free to cut this
introductory paragraph, however.)


Please refer to http://www.ietf.org/iesg/statement/discuss-crit= eria.html
for more information about IESG DISCUSS and COMMENT positions.


The document, along with other ballot positions, can be found here:
http://datatracker.ietf.org/doc/draft-ietf-tram-stun-origin= /



----------------------------------------------------------------------
DISCUSS:
----------------------------------------------------------------------

Is the normative language in section 2.1 intended to=C2=A0 mean that all st= un
implementations used by a browser, SIP, or XMPP MUST/SHOULD comply with
this draft? If so, then this draft should probably update STUN. (This
might also be the case for section 2.2 and TURN).

If on the other hand, these sections are intended to apply only to
implementations that understand STUN Origin, then I agree no update is
needed,=C2=A0 but it might help to make that unambiguous in the text.
(Normally I think this sort of thing goes without saying, but I am not
sure of the intent in this case.)

We me= ant the latter, that the normative language in this document applies to imp= lementations of this specification.=C2=A0 Right now there is a STUNbis draf= t in TRAM, so if we want the latter, then we could normatively reference it= there.
=C2=A0


----------------------------------------------------------------------
COMMENT:
----------------------------------------------------------------------

I agree with all 3 points of Barry's discuss.

=
OK, let us know if the discussion in the other thread is heading= in the right direction.
=C2=A0

Does Spencer's comment about removing the mention of UDP fragmentation<= br> mean people don't think this will be a problem?
We originally thought that there might be a real UDP fragmenta= tion issue back when we thought there were:

1. Val= id use cases for multiple Origins, and
2. Multiple ORIGINs if inc= luded would be processed.

However, since then, we = have ruled out multiple Origins for HTTP, SIP, and XMPP.=C2=A0 And, we have= realized that unless we change core STUN behavior, multiple ORIGIN attribu= tes wouldn't even be processed.

So, there is a= highly theoretical problem that we can't rule out, but we have conside= red it and discussed it in Dallas.=C2=A0 The consensus was not to address i= t.
=C2=A0

In section 4, paragraph 4, can the STUN client reasonably expected to
know when privacy is paramount? I am a bit surprised not to find a
stronger statement about needing DTLS or TLS for=C2=A0 HTTPS origins.

Even an HTTPS request will still, in general= , send DNS queries in the clear, and that is effectively what is going on h= ere with STUN Origin.=C2=A0 If there was no real penalty for DTLS or TLS, t= hen we might put in a stronger statement, but remember STUN and TURN are us= ed to create candidates for ICE, so the transport used becomes the transpor= t for the resulting media flow.=C2=A0 Running TURN over DTLS results in SRT= P over DTLS which is double encryption on the leg between the client and th= e TURN server.
=C2=A0

Nits:

-- Section 1:

I agree with Barry that the first reference to STUN should probably go in the previous sentence.

Yes, we'll f= ix that.
=C2=A0

Should reference to " Section 4.5 of [RFC7376]" really be 4.6&quo= t;? 4.5 talks
about a MiTM learning USERNAME.=C2=A0 4.6 talks about hosting multiple real= ms
from the same IP address. (And as Barry mentioned, these are really "L= ist
entries 5 or 6 in Section 4")



You are correct.=C2=A0

=
--20cf3030c5ffc01d1705143a1189-- From nobody Tue Apr 21 04:21:30 2015 Return-Path: X-Original-To: tram@ietfa.amsl.com Delivered-To: tram@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 1DD481A9244; Tue, 21 Apr 2015 04:21:25 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.999 X-Spam-Level: X-Spam-Status: No, score=-1.999 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, SPF_PASS=-0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id BB7U19qXxHOl; Tue, 21 Apr 2015 04:21:22 -0700 (PDT) Received: from mail-vn0-x22e.google.com (mail-vn0-x22e.google.com [IPv6:2607:f8b0:400c:c0f::22e]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 6BC0D1A9240; Tue, 21 Apr 2015 04:21:22 -0700 (PDT) Received: by vnbg62 with SMTP id g62so32590846vnb.7; Tue, 21 Apr 2015 04:21:21 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :cc:content-type; bh=HkR0NddXgbOCTRMfKe2msMXO5MhDBEcxxdGdGLZn0vA=; b=BxD1QVSX0mpe2oWKZHB+V9tA/oIrlay4GTHs5aIRTb+BsRRiYtSLqWuif5Egsis/02 NnDlnb+VTG6cxMQ1hHwNsmIzX5nGBxLBXXwA92lo7NAdzs1x4pTe1kaE/nblkMCGWbVz UauyswdG+yRj7MV7VuuoeFC1ye0lbL3Tj34pNxWCOWHRGEuJpHsjzw6S7J3YWi9dQqy8 CkBb6CNZVXcdBsxcaouMIUhwce0E3Ptiwxqx7rqdLfMe54iq29DrRZclILguaf+IERtS VU01u1L0oBt9HyLYn/vi5PSokICKDwbnXl7Y6/myqDzvLccclQ9KfoPP2Uslsom2OOcE LXCw== MIME-Version: 1.0 X-Received: by 10.52.24.113 with SMTP id t17mr21470817vdf.89.1429615281622; Tue, 21 Apr 2015 04:21:21 -0700 (PDT) Received: by 10.52.106.100 with HTTP; Tue, 21 Apr 2015 04:21:21 -0700 (PDT) In-Reply-To: References: Date: Tue, 21 Apr 2015 06:21:21 -0500 Message-ID: From: Alan Johnston To: Jari Arkko Content-Type: multipart/alternative; boundary=20cf307c9d9e06d3c805143a3f43 Archived-At: Cc: "justin@uberti.name" , "tram@ietf.org" , "Black, David" , "yoakum@avaya.com" , "General Area Review Team \(gen-art@ietf.org\)" , "ietf@ietf.org" Subject: Re: [tram] [Gen-art] Gen-ART review of draft-ietf-tram-stun-origin-05 X-BeenThere: tram@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "Discussing the creation of a Turn Revised And Modernized \(TRAM\) WG, which goal is to consolidate the various initiatives to update TURN and STUN." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 21 Apr 2015 11:21:25 -0000 --20cf307c9d9e06d3c805143a3f43 Content-Type: text/plain; charset=UTF-8 Hi Jari, We unfortunately did not reply to David for his review - our mistake. See below for our response. - Alan - On Tue, Apr 21, 2015 at 1:55 AM, Jari Arkko wrote: > Thanks for your review, David. I am trying to determine > how to deal with this draft in the upcoming IESG telechat. > Has there been any discussion of the issue you raise? > Do the authors have a response? > > Jari > > On 21 Mar 2015, at 06:12, Black, David wrote: > > > I am the assigned Gen-ART reviewer for this draft. For background on > > Gen-ART, please see the FAQ at > > > > . > > > > Please resolve these comments along with any other Last Call comments > > you may receive. > > > > Document: draft-ietf-tram-stun-origin-05 > > Reviewer: David L. Black > > Review Date: March 20, 2015 > > IETF LC End Date: March 17, 2015 > > > > Summary: This draft is on the right track, but has open issues > > described in the review. > > > > This draft describes the addition of a web origin attribute to STUN and > > usage of that attribute in several protocol contexts. The draft is well- > > written and easy to read. I found one minor issue which may be > editorial. > > > > Major issues: None. > > > > Minor issues: > > > > Section 2.7 discusses use of multiple STUN origins with Web RTC and > > concludes by imposing a "MUST" requirement on use of multiple STUN > > origins with HTTP in general (use first origin, ignore others). While > > Web RTC may be the predominant or only current use of STUN and TURN with > > HTTP, this "MUST" could foreclose the use of STUN origins with other > > uses of HTTP. I'm not sure what those possible future uses might be, > > but at a minimum this draft ought to more tightly scope its discussion > > of use of STUN origins with HTTP to limit that usage to Web RTC. If > > there's a good way for a STUN or TURN server to detect Web RTC usage, > > requiring STUN and TURN servers to look for Web RTC as the use of > > HTTP, and only impose this "MUST" requirement if Web RTC is detected > > would better align that requirement with the discussion in this draft. > David, Apologies for not responding to you earlier earlier. Since this text was written, we have realized that there are no valid use cases for HTTP, SIP, or XMPP for multiple Origins, and also that the STUN specification says that even if multiples were sent, only the first will be processed. So we are dropping the MUST that you reference here. We also plan to change the multiple Origins language in section 2 to say: "Senders SHOULD NOT include multiple ORIGIN attributes in a request since per STUN rules, only the first will be processed and the rest ignored." > > > > Nits/editorial comments: > > > > idnits 2.13.01 turned up a reference problem: > > > > == Unused Reference: 'RFC7350' is defined on line 490, but no explicit > > reference was found in the text > > > > That RFC should be cited somewhere. In addition, there are no RFCs cited > > or referenced for TLS and DTLS - they should be added (I believe that > > RFC 5246 and RFC 6347 are appropriate, respectively). > RFC 7350 is DTLS transport for STUN, so we should reference it in the Security Considerations when we discuss DTLS. > > > > Thanks, > > --David > > ---------------------------------------------------- > > David L. Black, Distinguished Engineer > > EMC Corporation, 176 South St., Hopkinton, MA 01748 > > +1 (508) 293-7953 FAX: +1 (508) 293-7786 > > david.black@emc.com Mobile: +1 (978) 394-7754 > > ---------------------------------------------------- > > > > > > _______________________________________________ > > Gen-art mailing list > > Gen-art@ietf.org > > https://www.ietf.org/mailman/listinfo/gen-art > > --20cf307c9d9e06d3c805143a3f43 Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: quoted-printable
Hi Jari,

We unfortunately did not reply= to David for his review - our mistake.=C2=A0 See below for our response.

- Alan -

On Tue, Apr 21, 2015 at 1:55 AM, Jari Arkko <jari.ar= kko@piuha.net> wrote:
Thanks for your rev= iew, David. I am trying to determine
how to deal with this draft in the upcoming IESG telechat.
Has there been any discussion of the issue you raise?
Do the authors have a response?

Jari

On 21 Mar 2015, at 06:12, Black, David <david.black@emc.com> wrote:

> I am the assigned Gen-ART reviewer for this draft. For background on > Gen-ART, please see the FAQ at
>
> <http://wiki.tools.ietf.org/area/gen/trac/wiki/GenArtfaq= >.
>
> Please resolve these comments along with any other Last Call comments<= br> > you may receive.
>
> Document: draft-ietf-tram-stun-origin-05
> Reviewer: David L. Black
> Review Date: March 20, 2015
> IETF LC End Date: March 17, 2015
>
> Summary: This draft is on the right track, but has open issues
>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0described in the= review.
>
> This draft describes the addition of a web origin attribute to STUN an= d
> usage of that attribute in several protocol contexts.=C2=A0 The draft = is well-
> written and easy to read.=C2=A0 I found one minor issue which may be e= ditorial.
>
> Major issues: None.
>
> Minor issues:
>
> Section 2.7 discusses use of multiple STUN origins with Web RTC and > concludes by imposing a "MUST" requirement on use of multipl= e STUN
> origins with HTTP in general (use first origin, ignore others).=C2=A0 = While
> Web RTC may be the predominant or only current use of STUN and TURN wi= th
> HTTP, this "MUST" could foreclose the use of STUN origins wi= th other
> uses of HTTP.=C2=A0 I'm not sure what those possible future uses m= ight be,
> but at a minimum this draft ought to more tightly scope its discussion=
> of use of STUN origins with HTTP to limit that usage to Web RTC.=C2=A0= If
> there's a good way for a STUN or TURN server to detect Web RTC usa= ge,
> requiring STUN and TURN servers to look for Web RTC as the use of
> HTTP, and only impose this "MUST" requirement if Web RTC is = detected
> would better align that requirement with the discussion in this draft.=

David,

Apolog= ies for not responding to you earlier earlier.=C2=A0 Since this text was wr= itten, we have realized that there are no valid use cases for HTTP, SIP, or= XMPP for multiple Origins, and also that the STUN specification says that = even if multiples were sent, only the first will be processed.=C2=A0 So we = are dropping the MUST that you reference here.=C2=A0 We also plan to change= the multiple Origins language in section 2 to say: =C2=A0

"Senders SHOULD NOT include multiple ORIGIN attributes in a r= equest since per STUN rules, only the first will be processed and the rest = ignored."
=C2=A0
>
> Nits/editorial comments:
>
> idnits 2.13.01 turned up a reference problem:
>
>=C2=A0 =3D=3D Unused Reference: 'RFC7350' is defined on line 49= 0, but no explicit
>=C2=A0 =C2=A0 =C2=A0reference was found in the text
>
> That RFC should be cited somewhere.=C2=A0 In addition, there are no RF= Cs cited
> or referenced for TLS and DTLS - they should be added (I believe that<= br> > RFC 5246 and RFC 6347 are appropriate, respectively).
=

RFC 7350 is DTLS transport for STUN, so we should refer= ence it in the Security Considerations when we discuss DTLS.
=C2= =A0
>
> Thanks,
> --David
> ----------------------------------------------------
> David L. Black, Distinguished Engineer
> EMC Corporation, 176 South St., Hopkinton, MA=C2=A0 01748
> +1 (508) 293-7953=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0FAX: = +1 (508) 293-7786
> david.black@emc.com=C2=A0 = =C2=A0 =C2=A0 =C2=A0 Mobile: +1 (978) 394-7754
> ----------------------------------------------------
>
>
> _______________________________________________
> Gen-art mailing list
> Gen-art@ietf.org
> https://www.ietf.org/mailman/listinfo/gen-art


--20cf307c9d9e06d3c805143a3f43-- From nobody Tue Apr 21 06:57:56 2015 Return-Path: X-Original-To: tram@ietfa.amsl.com Delivered-To: tram@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 218B51A6F34 for ; Tue, 21 Apr 2015 06:57:55 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.601 X-Spam-Level: X-Spam-Status: No, score=-2.601 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001] autolearn=unavailable Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id vm1Ma3X2nSOY for ; Tue, 21 Apr 2015 06:57:53 -0700 (PDT) Received: from mail-qg0-f44.google.com (mail-qg0-f44.google.com [209.85.192.44]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 4E1B21A6F7A for ; Tue, 21 Apr 2015 06:57:50 -0700 (PDT) Received: by qgej70 with SMTP id j70so68433254qge.2 for ; Tue, 21 Apr 2015 06:57:49 -0700 (PDT) X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:message-id:date:from:user-agent:mime-version:to :cc:subject:references:in-reply-to:content-type :content-transfer-encoding; bh=38/m/X+uxwhUPMi/T0umYtpHsg0B6mSo7hGyodFWaAE=; b=WW9qiduxXPRpjnDoZNufUNbDEBcW0zn57RLlDrKnp8j7rplYCpi1C+EROep2M7BJDg P/ZNxJ1HBd4hRnma1NJF+tTUMBbj3dG5TJzpxYrGHRCvCx1H1AR3ba3LbLbh6S+pnX+W 02vkZl31cuiAXsiMmccKbOfCCrhO13B1ZJXvcCLbR0iLNzI4lTVl5MopiEG3cXzT/t0d drk4nwWHYpxJoLNtsASj5EZshP7R4/l9M7jCI3jwpFnBNBCj3hQFX7tCgebl0CpQNRsj AkGoFgT9VM7hbCjqR4hHu2LvslryOKBnhgSTyrpjcwLTEnfKAkLAKpNZIGqxlAXIkMko vxIQ== X-Gm-Message-State: ALoCoQkeOPmDU36pIzjwmHAfDFi9xOnS5idlYwGqXoNUVp97cLmGfgBTdEf1I/n+CMiUpOcbQujy X-Received: by 10.55.22.88 with SMTP id g85mr33133552qkh.48.1429624669519; Tue, 21 Apr 2015 06:57:49 -0700 (PDT) Received: from [192.168.1.43] (modemcable233.42-178-173.mc.videotron.ca. [173.178.42.233]) by mx.google.com with ESMTPSA id r198sm1417575qha.2.2015.04.21.06.57.47 (version=TLSv1.2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Tue, 21 Apr 2015 06:57:48 -0700 (PDT) Message-ID: <5536575A.3030605@jive.com> Date: Tue, 21 Apr 2015 09:57:46 -0400 From: Simon Perreault User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.10; rv:31.0) Gecko/20100101 Thunderbird/31.6.0 MIME-Version: 1.0 To: Alan Johnston , Ben Campbell References: <20150421022922.506.53723.idtracker@ietfa.amsl.com> In-Reply-To: Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 8bit Archived-At: Cc: tram-chairs@ietf.org, "tram@ietf.org" , draft-ietf-tram-stun-origin.shepherd@ietf.org, draft-ietf-tram-stun-origin.ad@ietf.org, The IESG , draft-ietf-tram-stun-origin@ietf.org Subject: Re: [tram] Ben Campbell's Discuss on draft-ietf-tram-stun-origin-05: (with DISCUSS and COMMENT) X-BeenThere: tram@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "Discussing the creation of a Turn Revised And Modernized \(TRAM\) WG, which goal is to consolidate the various initiatives to update TURN and STUN." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 21 Apr 2015 13:57:55 -0000 Le 2015-04-21 07:08, Alan Johnston a écrit : > Does Spencer's comment about removing the mention of UDP fragmentation > mean people don't think this will be a problem? > > > We originally thought that there might be a real UDP fragmentation issue > back when we thought there were: > > 1. Valid use cases for multiple Origins, and > 2. Multiple ORIGINs if included would be processed. > > However, since then, we have ruled out multiple Origins for HTTP, SIP, > and XMPP. And, we have realized that unless we change core STUN > behavior, multiple ORIGIN attributes wouldn't even be processed. > > So, there is a highly theoretical problem that we can't rule out, but we > have considered it and discussed it in Dallas. The consensus was not to > address it. In addition, fragmentation issues are being discussed more generally as part of the STUNbis effort. Any new mechanism we end up inventing there would implicitly be applicable to packets containing the ORIGIN attribute. Simon From nobody Tue Apr 21 07:12:03 2015 Return-Path: X-Original-To: tram@ietfa.amsl.com Delivered-To: tram@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 134081A854B; Tue, 21 Apr 2015 07:12:01 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.999 X-Spam-Level: X-Spam-Status: No, score=-1.999 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, SPF_PASS=-0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id NakiEFRHlKqf; Tue, 21 Apr 2015 07:11:59 -0700 (PDT) Received: from mail-vn0-x22c.google.com (mail-vn0-x22c.google.com [IPv6:2607:f8b0:400c:c0f::22c]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id B46201A802A; Tue, 21 Apr 2015 07:11:58 -0700 (PDT) Received: by vnbf129 with SMTP id f129so32956981vnb.9; Tue, 21 Apr 2015 07:11:58 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :cc:content-type; bh=SBa8ug/HovybkkFpqYNOLW6gKBbXDr2oVUcp/MkwFsc=; b=iCKIZCa6mkaov0j8f4u+2oG8OJ75HjrPe7X2sNcCwkqdRNLnlBDZMuG1MQ3PArJz2t TlB4azYbGeJ6w9G5WAG/weEghPRVZyF8p/HnbPvvPB75mK6xIXhlUt66XWNB0YD8i4w7 rhEHiSG0NZR4R5wLfXKPrgmW2mFGsrfY8nuAoweHrkD8TFBlXK4nIGIzjGqmdCpJE1xK bscer+QCI7nRsrKiluf+TyLkEWXezctWxuiBqr6MLh9S7IMj4p8xW6iUrHXytOtT09gm qYQFJTZG31PxdtP4w63IKkQpMLjW4Ov8r9kNhuCeBqWzZ5j4gRKM5xUBSl2Qt4hs1d3D GPng== MIME-Version: 1.0 X-Received: by 10.52.14.200 with SMTP id r8mr22340111vdc.79.1429625517975; Tue, 21 Apr 2015 07:11:57 -0700 (PDT) Received: by 10.52.106.100 with HTTP; Tue, 21 Apr 2015 07:11:57 -0700 (PDT) In-Reply-To: <4C556E3B-B1C3-4BDA-8488-8539194B7D18@nostrum.com> References: <20150421022922.506.53723.idtracker@ietfa.amsl.com> <4C556E3B-B1C3-4BDA-8488-8539194B7D18@nostrum.com> Date: Tue, 21 Apr 2015 09:11:57 -0500 Message-ID: From: Alan Johnston To: Ben Campbell Content-Type: multipart/alternative; boundary=20cf3030c5ff2930d505143ca144 Archived-At: Cc: tram-chairs@ietf.org, "tram@ietf.org" , draft-ietf-tram-stun-origin.shepherd@ietf.org, draft-ietf-tram-stun-origin.ad@ietf.org, Simon Perreault , The IESG , draft-ietf-tram-stun-origin@ietf.org Subject: Re: [tram] Ben Campbell's Discuss on draft-ietf-tram-stun-origin-05: (with DISCUSS and COMMENT) X-BeenThere: tram@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "Discussing the creation of a Turn Revised And Modernized \(TRAM\) WG, which goal is to consolidate the various initiatives to update TURN and STUN." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 21 Apr 2015 14:12:01 -0000 --20cf3030c5ff2930d505143ca144 Content-Type: text/plain; charset=UTF-8 Ben, Thanks for your quick response. See a few comments below. - Alan- On Tue, Apr 21, 2015 at 9:00 AM, Ben Campbell wrote: > Hi Alan, please see response to your responses, below. > > On 21 Apr 2015, at 6:08, Alan Johnston wrote: > > Hi Ben, >> >> See my response below. >> >> - Alan - >> >> On Mon, Apr 20, 2015 at 9:29 PM, Ben Campbell wrote: >> > > [...] > > ---------------------------------------------------------------------- >> >>> DISCUSS: >>> ---------------------------------------------------------------------- >>> >>> Is the normative language in section 2.1 intended to mean that all stun >>> implementations used by a browser, SIP, or XMPP MUST/SHOULD comply with >>> this draft? If so, then this draft should probably update STUN. (This >>> might also be the case for section 2.2 and TURN). >>> >>> If on the other hand, these sections are intended to apply only to >>> implementations that understand STUN Origin, then I agree no update is >>> needed, but it might help to make that unambiguous in the text. >>> (Normally I think this sort of thing goes without saying, but I am not >>> sure of the intent in this case.) >>> >>> >> We meant the latter, that the normative language in this document applies >> to implementations of this specification. >> > > Okay, I will clear the discuss, and add a (non-binding, of course) comment > that I think the language could be read either way. > > If we changed the first of these MUST statements to this, would it be more clear: "STUN clients compliant with this specification sending STUN requests sent without authentication to a STUN server (i.e.STUN binding requests sent to a STUN server) MUST include the ORIGIN attribute." I removed the web origin part, as we plan to drop this distinction. Or do you think every MUST should have this qualifier? > Right now there is a STUNbis >> draft in TRAM, so if we want the latter, then we could normatively >> reference it there. >> > > I assume you meant "former"? > Oops - yes. > > >> >> >>> >>> ---------------------------------------------------------------------- >>> COMMENT: >>> ---------------------------------------------------------------------- >>> >>> I agree with all 3 points of Barry's discuss. >>> >>> >> OK, let us know if the discussion in the other thread is heading in the >> right direction. >> >> >> >>> Does Spencer's comment about removing the mention of UDP fragmentation >>> mean people don't think this will be a problem? >>> >>> >> We originally thought that there might be a real UDP fragmentation issue >> back when we thought there were: >> >> 1. Valid use cases for multiple Origins, and >> 2. Multiple ORIGINs if included would be processed. >> >> However, since then, we have ruled out multiple Origins for HTTP, SIP, and >> XMPP. And, we have realized that unless we change core STUN behavior, >> multiple ORIGIN attributes wouldn't even be processed. >> >> So, there is a highly theoretical problem that we can't rule out, but we >> have considered it and discussed it in Dallas. The consensus was not to >> address it. >> >> >> > Okay, that sounds perfectly reasonable. > > >>> In section 4, paragraph 4, can the STUN client reasonably expected to >>> know when privacy is paramount? I am a bit surprised not to find a >>> stronger statement about needing DTLS or TLS for HTTPS origins. >>> >>> >> Even an HTTPS request will still, in general, send DNS queries in the >> clear, and that is effectively what is going on here with STUN Origin. If >> there was no real penalty for DTLS or TLS, then we might put in a stronger >> statement, but remember STUN and TURN are used to create candidates for >> ICE, so the transport used becomes the transport for the resulting media >> flow. Running TURN over DTLS results in SRTP over DTLS which is double >> encryption on the leg between the client and the TURN server. >> >> > I can live with that if the security guys can :-) > > [...] > --20cf3030c5ff2930d505143ca144 Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: quoted-printable
Ben,

Thanks for your quick response.=C2=A0 See a f= ew comments below.

- Alan-

On Tue, Apr 21, 2015 at 9:00 AM, Be= n Campbell <ben@nostrum.com> wrote:
Hi Al= an, please see response to your responses, below.

On 21 Apr 2015, at 6:08, Alan Johnston wrote:

Hi Ben,

See my response below.

- Alan -

On Mon, Apr 20, 2015 at 9:29 PM, Ben Campbell <ben@nostrum.com> wrote:

[...]

----------------------------------------------------------------------
DISCUSS:
----------------------------------------------------------------------

Is the normative language in section 2.1 intended to=C2=A0 mean that all st= un
implementations used by a browser, SIP, or XMPP MUST/SHOULD comply with
this draft? If so, then this draft should probably update STUN. (This
might also be the case for section 2.2 and TURN).

If on the other hand, these sections are intended to apply only to
implementations that understand STUN Origin, then I agree no update is
needed,=C2=A0 but it might help to make that unambiguous in the text.
(Normally I think this sort of thing goes without saying, but I am not
sure of the intent in this case.)


We meant the latter, that the normative language in this document applies to implementations of this specification.

Okay, I will clear the discuss, and add a (non-binding, of course) comment = that I think the language could be read either way.


If we changed the first of these MUST = statements to this, would it be more clear:

"= STUN clients compliant with this specification sending STUN requests sent w= ithout authentication to a STUN server (i.e.STUN binding requests sent to a= STUN server) MUST include the ORIGIN attribute."

=
I removed the web origin part, as we plan to drop this distinction.

Or do you think every MUST should have this qualifie= r?

=C2=A0
Right now there is a STUNbis
draft in TRAM, so if we want the latter, then we could normatively
reference it there.

I assume you meant "former"?

= Oops - yes.
=C2=A0





----------------------------------------------------------------------
COMMENT:
----------------------------------------------------------------------

I agree with all 3 points of Barry's discuss.


OK, let us know if the discussion in the other thread is heading in the
right direction.



Does Spencer's comment about removing the mention of UDP fragmentation<= br> mean people don't think this will be a problem?


We originally thought that there might be a real UDP fragmentation issue back when we thought there were:

1. Valid use cases for multiple Origins, and
2. Multiple ORIGINs if included would be processed.

However, since then, we have ruled out multiple Origins for HTTP, SIP, and<= br> XMPP.=C2=A0 And, we have realized that unless we change core STUN behavior,=
multiple ORIGIN attributes wouldn't even be processed.

So, there is a highly theoretical problem that we can't rule out, but w= e
have considered it and discussed it in Dallas.=C2=A0 The consensus was not = to
address it.



Okay, that sounds perfectly reasonable.


In section 4, paragraph 4, can the STUN client reasonably expected to
know when privacy is paramount? I am a bit surprised not to find a
stronger statement about needing DTLS or TLS for=C2=A0 HTTPS origins.


Even an HTTPS request will still, in general, send DNS queries in the
clear, and that is effectively what is going on here with STUN Origin.=C2= =A0 If
there was no real penalty for DTLS or TLS, then we might put in a stronger<= br> statement, but remember STUN and TURN are used to create candidates for
ICE, so the transport used becomes the transport for the resulting media flow.=C2=A0 Running TURN over DTLS results in SRTP over DTLS which is doubl= e
encryption on the leg between the client and the TURN server.


I can live with that if the security guys can :-)

[...]

--20cf3030c5ff2930d505143ca144-- From nobody Tue Apr 21 08:09:20 2015 Return-Path: X-Original-To: tram@ietfa.amsl.com Delivered-To: tram@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id B368A1ACDD1; Tue, 21 Apr 2015 08:09:15 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.31 X-Spam-Level: X-Spam-Status: No, score=-4.31 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 8M5qSyiLB4QR; Tue, 21 Apr 2015 08:09:12 -0700 (PDT) Received: from mailuogwhop.emc.com (mailuogwhop.emc.com [168.159.213.141]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 34E911ACE03; Tue, 21 Apr 2015 08:09:07 -0700 (PDT) Received: from maildlpprd06.lss.emc.com (maildlpprd06.lss.emc.com [10.253.24.38]) by mailuogwprd01.lss.emc.com (Sentrion-MTA-4.3.1/Sentrion-MTA-4.3.0) with ESMTP id t3LF8vpU032511 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=NO); Tue, 21 Apr 2015 11:09:01 -0400 X-DKIM: OpenDKIM Filter v2.4.3 mailuogwprd01.lss.emc.com t3LF8vpU032511 DKIM-Signature: v=1; a=rsa-sha1; c=relaxed/relaxed; d=emc.com; s=jan2013; t=1429628942; bh=Y2PjAmZ6Na181iC89b30EeXp7wQ=; h=From:To:CC:Subject:Date:Message-ID:References:In-Reply-To: Content-Type:MIME-Version; b=LWElXycbfibVwqTGgCCUnpj9a5hyrr5+P2CeLGQ+PDAgT53MQtf+A18Ps/vANpka0 6oUcd+umvlJXIdl5aPwZBQmPVNSIuaDLK0IBO4H7fGBL7wMA6/nHjyyBZFAD2gRL+6 w+CSVD6cbqx7gGx77SZefq3MUu63gRBbqjMjIcI8= X-DKIM: OpenDKIM Filter v2.4.3 mailuogwprd01.lss.emc.com t3LF8vpU032511 Received: from mailusrhubprd04.lss.emc.com (mailusrhubprd04.lss.emc.com [10.253.24.22]) by maildlpprd06.lss.emc.com (RSA Interceptor); Tue, 21 Apr 2015 11:08:40 -0400 Received: from mxhub17.corp.emc.com (mxhub17.corp.emc.com [10.254.93.46]) by mailusrhubprd04.lss.emc.com (Sentrion-MTA-4.3.1/Sentrion-MTA-4.3.0) with ESMTP id t3LF8i1K012144 (version=TLSv1 cipher=AES128-SHA bits=128 verify=FAIL); Tue, 21 Apr 2015 11:08:44 -0400 Received: from MXHUB206.corp.emc.com (10.253.68.32) by mxhub17.corp.emc.com (10.254.93.46) with Microsoft SMTP Server (TLS) id 8.3.327.1; Tue, 21 Apr 2015 11:08:43 -0400 Received: from MX104CL02.corp.emc.com ([169.254.8.55]) by MXHUB206.corp.emc.com ([10.253.68.32]) with mapi id 14.03.0224.002; Tue, 21 Apr 2015 11:08:44 -0400 From: "Black, David" To: Alan Johnston , Jari Arkko Thread-Topic: [Gen-art] Gen-ART review of draft-ietf-tram-stun-origin-05 Thread-Index: AdBjhNiYXvzTSPo6RjeFsz+Pyn+RaAYnOH8AAAlF6IAAAIMksA== Date: Tue, 21 Apr 2015 15:08:43 +0000 Message-ID: References: In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.105.38.163] Content-Type: multipart/alternative; boundary="_000_CE03DB3D7B45C245BCA0D24327794936468095MX104CL02corpemcc_" MIME-Version: 1.0 X-Sentrion-Hostname: mailusrhubprd04.lss.emc.com X-RSA-Classifications: public, Resumes Archived-At: Cc: "justin@uberti.name" , "tram@ietf.org" , "General Area Review Team \(gen-art@ietf.org\)" , "yoakum@avaya.com" , "Black, David" , "ietf@ietf.org" Subject: Re: [tram] [Gen-art] Gen-ART review of draft-ietf-tram-stun-origin-05 X-BeenThere: tram@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "Discussing the creation of a Turn Revised And Modernized \(TRAM\) WG, which goal is to consolidate the various initiatives to update TURN and STUN." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 21 Apr 2015 15:09:15 -0000 --_000_CE03DB3D7B45C245BCA0D24327794936468095MX104CL02corpemcc_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 QWxhbiwNCg0KVGhpcyBhcHByb2FjaCBzZWVtcyBmaW5lLiAgUGxlYXNlIGFkZCBhbiBSRkMgcmVm ZXJlbmNlIGZvciB0aGUgU1RVTiBydWxlcywgcHJlZmVyYWJseSBjaXRpbmcgYSBzZWN0aW9uICMg dG8gbWFrZSB0aGUgcnVsZXMgZWFzeSB0byBmaW5kIChpZiB5b3UgaGFkIHRyb3VibGUgbG9jYXRp bmcgdGhlbSwgaXTigJlsbCBiZSBldmVuIGhhcmRlciBmb3Igb3RoZXIgcmVhZGVycyAuLi4pLg0K DQpUaGFua3MsDQotLURhdmlkDQoNCkZyb206IEFsYW4gSm9obnN0b24gW21haWx0bzphbGFuLmIu am9obnN0b25AZ21haWwuY29tXQ0KU2VudDogVHVlc2RheSwgQXByaWwgMjEsIDIwMTUgNzoyMSBB TQ0KVG86IEphcmkgQXJra28NCkNjOiBCbGFjaywgRGF2aWQ7IGp1c3RpbkB1YmVydGkubmFtZTsg eW9ha3VtQGF2YXlhLmNvbTsgR2VuZXJhbCBBcmVhIFJldmlldyBUZWFtIChnZW4tYXJ0QGlldGYu b3JnKTsgaWV0ZkBpZXRmLm9yZzsgdHJhbUBpZXRmLm9yZw0KU3ViamVjdDogUmU6IFtHZW4tYXJ0 XSBHZW4tQVJUIHJldmlldyBvZiBkcmFmdC1pZXRmLXRyYW0tc3R1bi1vcmlnaW4tMDUNCg0KSGkg SmFyaSwNCg0KV2UgdW5mb3J0dW5hdGVseSBkaWQgbm90IHJlcGx5IHRvIERhdmlkIGZvciBoaXMg cmV2aWV3IC0gb3VyIG1pc3Rha2UuICBTZWUgYmVsb3cgZm9yIG91ciByZXNwb25zZS4NCg0KLSBB bGFuIC0NCg0KT24gVHVlLCBBcHIgMjEsIDIwMTUgYXQgMTo1NSBBTSwgSmFyaSBBcmtrbyA8amFy aS5hcmtrb0BwaXVoYS5uZXQ8bWFpbHRvOmphcmkuYXJra29AcGl1aGEubmV0Pj4gd3JvdGU6DQpU aGFua3MgZm9yIHlvdXIgcmV2aWV3LCBEYXZpZC4gSSBhbSB0cnlpbmcgdG8gZGV0ZXJtaW5lDQpo b3cgdG8gZGVhbCB3aXRoIHRoaXMgZHJhZnQgaW4gdGhlIHVwY29taW5nIElFU0cgdGVsZWNoYXQu DQpIYXMgdGhlcmUgYmVlbiBhbnkgZGlzY3Vzc2lvbiBvZiB0aGUgaXNzdWUgeW91IHJhaXNlPw0K RG8gdGhlIGF1dGhvcnMgaGF2ZSBhIHJlc3BvbnNlPw0KDQpKYXJpDQoNCk9uIDIxIE1hciAyMDE1 LCBhdCAwNjoxMiwgQmxhY2ssIERhdmlkIDxkYXZpZC5ibGFja0BlbWMuY29tPG1haWx0bzpkYXZp ZC5ibGFja0BlbWMuY29tPj4gd3JvdGU6DQoNCj4gSSBhbSB0aGUgYXNzaWduZWQgR2VuLUFSVCBy ZXZpZXdlciBmb3IgdGhpcyBkcmFmdC4gRm9yIGJhY2tncm91bmQgb24NCj4gR2VuLUFSVCwgcGxl YXNlIHNlZSB0aGUgRkFRIGF0DQo+DQo+IDxodHRwOi8vd2lraS50b29scy5pZXRmLm9yZy9hcmVh L2dlbi90cmFjL3dpa2kvR2VuQXJ0ZmFxPi4NCj4NCj4gUGxlYXNlIHJlc29sdmUgdGhlc2UgY29t bWVudHMgYWxvbmcgd2l0aCBhbnkgb3RoZXIgTGFzdCBDYWxsIGNvbW1lbnRzDQo+IHlvdSBtYXkg cmVjZWl2ZS4NCj4NCj4gRG9jdW1lbnQ6IGRyYWZ0LWlldGYtdHJhbS1zdHVuLW9yaWdpbi0wNQ0K PiBSZXZpZXdlcjogRGF2aWQgTC4gQmxhY2sNCj4gUmV2aWV3IERhdGU6IE1hcmNoIDIwLCAyMDE1 DQo+IElFVEYgTEMgRW5kIERhdGU6IE1hcmNoIDE3LCAyMDE1DQo+DQo+IFN1bW1hcnk6IFRoaXMg ZHJhZnQgaXMgb24gdGhlIHJpZ2h0IHRyYWNrLCBidXQgaGFzIG9wZW4gaXNzdWVzDQo+ICAgICAg ICAgICAgICAgZGVzY3JpYmVkIGluIHRoZSByZXZpZXcuDQo+DQo+IFRoaXMgZHJhZnQgZGVzY3Jp YmVzIHRoZSBhZGRpdGlvbiBvZiBhIHdlYiBvcmlnaW4gYXR0cmlidXRlIHRvIFNUVU4gYW5kDQo+ IHVzYWdlIG9mIHRoYXQgYXR0cmlidXRlIGluIHNldmVyYWwgcHJvdG9jb2wgY29udGV4dHMuICBU aGUgZHJhZnQgaXMgd2VsbC0NCj4gd3JpdHRlbiBhbmQgZWFzeSB0byByZWFkLiAgSSBmb3VuZCBv bmUgbWlub3IgaXNzdWUgd2hpY2ggbWF5IGJlIGVkaXRvcmlhbC4NCj4NCj4gTWFqb3IgaXNzdWVz OiBOb25lLg0KPg0KPiBNaW5vciBpc3N1ZXM6DQo+DQo+IFNlY3Rpb24gMi43IGRpc2N1c3NlcyB1 c2Ugb2YgbXVsdGlwbGUgU1RVTiBvcmlnaW5zIHdpdGggV2ViIFJUQyBhbmQNCj4gY29uY2x1ZGVz IGJ5IGltcG9zaW5nIGEgIk1VU1QiIHJlcXVpcmVtZW50IG9uIHVzZSBvZiBtdWx0aXBsZSBTVFVO DQo+IG9yaWdpbnMgd2l0aCBIVFRQIGluIGdlbmVyYWwgKHVzZSBmaXJzdCBvcmlnaW4sIGlnbm9y ZSBvdGhlcnMpLiAgV2hpbGUNCj4gV2ViIFJUQyBtYXkgYmUgdGhlIHByZWRvbWluYW50IG9yIG9u bHkgY3VycmVudCB1c2Ugb2YgU1RVTiBhbmQgVFVSTiB3aXRoDQo+IEhUVFAsIHRoaXMgIk1VU1Qi IGNvdWxkIGZvcmVjbG9zZSB0aGUgdXNlIG9mIFNUVU4gb3JpZ2lucyB3aXRoIG90aGVyDQo+IHVz ZXMgb2YgSFRUUC4gIEknbSBub3Qgc3VyZSB3aGF0IHRob3NlIHBvc3NpYmxlIGZ1dHVyZSB1c2Vz IG1pZ2h0IGJlLA0KPiBidXQgYXQgYSBtaW5pbXVtIHRoaXMgZHJhZnQgb3VnaHQgdG8gbW9yZSB0 aWdodGx5IHNjb3BlIGl0cyBkaXNjdXNzaW9uDQo+IG9mIHVzZSBvZiBTVFVOIG9yaWdpbnMgd2l0 aCBIVFRQIHRvIGxpbWl0IHRoYXQgdXNhZ2UgdG8gV2ViIFJUQy4gIElmDQo+IHRoZXJlJ3MgYSBn b29kIHdheSBmb3IgYSBTVFVOIG9yIFRVUk4gc2VydmVyIHRvIGRldGVjdCBXZWIgUlRDIHVzYWdl LA0KPiByZXF1aXJpbmcgU1RVTiBhbmQgVFVSTiBzZXJ2ZXJzIHRvIGxvb2sgZm9yIFdlYiBSVEMg YXMgdGhlIHVzZSBvZg0KPiBIVFRQLCBhbmQgb25seSBpbXBvc2UgdGhpcyAiTVVTVCIgcmVxdWly ZW1lbnQgaWYgV2ViIFJUQyBpcyBkZXRlY3RlZA0KPiB3b3VsZCBiZXR0ZXIgYWxpZ24gdGhhdCBy ZXF1aXJlbWVudCB3aXRoIHRoZSBkaXNjdXNzaW9uIGluIHRoaXMgZHJhZnQuDQoNCkRhdmlkLA0K DQpBcG9sb2dpZXMgZm9yIG5vdCByZXNwb25kaW5nIHRvIHlvdSBlYXJsaWVyIGVhcmxpZXIuICBT aW5jZSB0aGlzIHRleHQgd2FzIHdyaXR0ZW4sIHdlIGhhdmUgcmVhbGl6ZWQgdGhhdCB0aGVyZSBh cmUgbm8gdmFsaWQgdXNlIGNhc2VzIGZvciBIVFRQLCBTSVAsIG9yIFhNUFAgZm9yIG11bHRpcGxl IE9yaWdpbnMsIGFuZCBhbHNvIHRoYXQgdGhlIFNUVU4gc3BlY2lmaWNhdGlvbiBzYXlzIHRoYXQg ZXZlbiBpZiBtdWx0aXBsZXMgd2VyZSBzZW50LCBvbmx5IHRoZSBmaXJzdCB3aWxsIGJlIHByb2Nl c3NlZC4gIFNvIHdlIGFyZSBkcm9wcGluZyB0aGUgTVVTVCB0aGF0IHlvdSByZWZlcmVuY2UgaGVy ZS4gIFdlIGFsc28gcGxhbiB0byBjaGFuZ2UgdGhlIG11bHRpcGxlIE9yaWdpbnMgbGFuZ3VhZ2Ug aW4gc2VjdGlvbiAyIHRvIHNheToNCg0KIlNlbmRlcnMgU0hPVUxEIE5PVCBpbmNsdWRlIG11bHRp cGxlIE9SSUdJTiBhdHRyaWJ1dGVzIGluIGEgcmVxdWVzdCBzaW5jZSBwZXIgU1RVTiBydWxlcywg b25seSB0aGUgZmlyc3Qgd2lsbCBiZSBwcm9jZXNzZWQgYW5kIHRoZSByZXN0IGlnbm9yZWQuIg0K DQo+DQo+IE5pdHMvZWRpdG9yaWFsIGNvbW1lbnRzOg0KPg0KPiBpZG5pdHMgMi4xMy4wMSB0dXJu ZWQgdXAgYSByZWZlcmVuY2UgcHJvYmxlbToNCj4NCj4gID09IFVudXNlZCBSZWZlcmVuY2U6ICdS RkM3MzUwJyBpcyBkZWZpbmVkIG9uIGxpbmUgNDkwLCBidXQgbm8gZXhwbGljaXQNCj4gICAgIHJl ZmVyZW5jZSB3YXMgZm91bmQgaW4gdGhlIHRleHQNCj4NCj4gVGhhdCBSRkMgc2hvdWxkIGJlIGNp dGVkIHNvbWV3aGVyZS4gIEluIGFkZGl0aW9uLCB0aGVyZSBhcmUgbm8gUkZDcyBjaXRlZA0KPiBv ciByZWZlcmVuY2VkIGZvciBUTFMgYW5kIERUTFMgLSB0aGV5IHNob3VsZCBiZSBhZGRlZCAoSSBi ZWxpZXZlIHRoYXQNCj4gUkZDIDUyNDYgYW5kIFJGQyA2MzQ3IGFyZSBhcHByb3ByaWF0ZSwgcmVz cGVjdGl2ZWx5KS4NCg0KUkZDIDczNTAgaXMgRFRMUyB0cmFuc3BvcnQgZm9yIFNUVU4sIHNvIHdl IHNob3VsZCByZWZlcmVuY2UgaXQgaW4gdGhlIFNlY3VyaXR5IENvbnNpZGVyYXRpb25zIHdoZW4g d2UgZGlzY3VzcyBEVExTLg0KDQo+DQo+IFRoYW5rcywNCj4gLS1EYXZpZA0KPiAtLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tDQo+IERhdmlkIEwuIEJs YWNrLCBEaXN0aW5ndWlzaGVkIEVuZ2luZWVyDQo+IEVNQyBDb3Jwb3JhdGlvbiwgMTc2IFNvdXRo IFN0LiwgSG9wa2ludG9uLCBNQSAgMDE3NDgNCj4gKzEgKDUwOCkgMjkzLTc5NTMgICAgICAgICAg ICAgRkFYOiArMSAoNTA4KSAyOTMtNzc4Ng0KPiBkYXZpZC5ibGFja0BlbWMuY29tPG1haWx0bzpk YXZpZC5ibGFja0BlbWMuY29tPiAgICAgICAgTW9iaWxlOiArMSAoOTc4KSAzOTQtNzc1NDx0ZWw6 JTJCMSUyMCUyODk3OCUyOSUyMDM5NC03NzU0Pg0KPiAtLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tDQo+DQo+DQo+IF9fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fDQo+IEdlbi1hcnQgbWFpbGluZyBsaXN0DQo+IEdl bi1hcnRAaWV0Zi5vcmc8bWFpbHRvOkdlbi1hcnRAaWV0Zi5vcmc+DQo+IGh0dHBzOi8vd3d3Lmll dGYub3JnL21haWxtYW4vbGlzdGluZm8vZ2VuLWFydA0KDQo= --_000_CE03DB3D7B45C245BCA0D24327794936468095MX104CL02corpemcc_ Content-Type: text/html; charset="utf-8" Content-Transfer-Encoding: base64 PGh0bWwgeG1sbnM6dj0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTp2bWwiIHhtbG5zOm89InVy bjpzY2hlbWFzLW1pY3Jvc29mdC1jb206b2ZmaWNlOm9mZmljZSIgeG1sbnM6dz0idXJuOnNjaGVt YXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6d29yZCIgeG1sbnM6bT0iaHR0cDovL3NjaGVtYXMubWlj cm9zb2Z0LmNvbS9vZmZpY2UvMjAwNC8xMi9vbW1sIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcv VFIvUkVDLWh0bWw0MCI+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIg Y29udGVudD0idGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjxtZXRhIG5hbWU9IkdlbmVyYXRv ciIgY29udGVudD0iTWljcm9zb2Z0IFdvcmQgMTQgKGZpbHRlcmVkIG1lZGl1bSkiPg0KPHN0eWxl PjwhLS0NCi8qIEZvbnQgRGVmaW5pdGlvbnMgKi8NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6 Q2FsaWJyaTsNCglwYW5vc2UtMToyIDE1IDUgMiAyIDIgNCAzIDIgNDt9DQpAZm9udC1mYWNlDQoJ e2ZvbnQtZmFtaWx5OlRhaG9tYTsNCglwYW5vc2UtMToyIDExIDYgNCAzIDUgNCA0IDIgNDt9DQov KiBTdHlsZSBEZWZpbml0aW9ucyAqLw0KcC5Nc29Ob3JtYWwsIGxpLk1zb05vcm1hbCwgZGl2Lk1z b05vcm1hbA0KCXttYXJnaW46MGluOw0KCW1hcmdpbi1ib3R0b206LjAwMDFwdDsNCglmb250LXNp emU6MTIuMHB0Ow0KCWZvbnQtZmFtaWx5OiJUaW1lcyBOZXcgUm9tYW4iLCJzZXJpZiI7fQ0KYTps aW5rLCBzcGFuLk1zb0h5cGVybGluaw0KCXttc28tc3R5bGUtcHJpb3JpdHk6OTk7DQoJY29sb3I6 Ymx1ZTsNCgl0ZXh0LWRlY29yYXRpb246dW5kZXJsaW5lO30NCmE6dmlzaXRlZCwgc3Bhbi5Nc29I eXBlcmxpbmtGb2xsb3dlZA0KCXttc28tc3R5bGUtcHJpb3JpdHk6OTk7DQoJY29sb3I6cHVycGxl Ow0KCXRleHQtZGVjb3JhdGlvbjp1bmRlcmxpbmU7fQ0Kc3Bhbi5FbWFpbFN0eWxlMTcNCgl7bXNv LXN0eWxlLXR5cGU6cGVyc29uYWwtcmVwbHk7DQoJZm9udC1mYW1pbHk6IkNvdXJpZXIgTmV3IjsN Cgljb2xvcjpibGFjazsNCglmb250LXdlaWdodDpub3JtYWw7DQoJZm9udC1zdHlsZTpub3JtYWw7 DQoJdGV4dC1kZWNvcmF0aW9uOm5vbmUgbm9uZTt9DQouTXNvQ2hwRGVmYXVsdA0KCXttc28tc3R5 bGUtdHlwZTpleHBvcnQtb25seTsNCglmb250LWZhbWlseToiQ2FsaWJyaSIsInNhbnMtc2VyaWYi O30NCkBwYWdlIFdvcmRTZWN0aW9uMQ0KCXtzaXplOjguNWluIDExLjBpbjsNCgltYXJnaW46MS4w aW4gMS4waW4gMS4waW4gMS4waW47fQ0KZGl2LldvcmRTZWN0aW9uMQ0KCXtwYWdlOldvcmRTZWN0 aW9uMTt9DQotLT48L3N0eWxlPjwhLS1baWYgZ3RlIG1zbyA5XT48eG1sPg0KPG86c2hhcGVkZWZh dWx0cyB2OmV4dD0iZWRpdCIgc3BpZG1heD0iMTAyNiIgLz4NCjwveG1sPjwhW2VuZGlmXS0tPjwh LS1baWYgZ3RlIG1zbyA5XT48eG1sPg0KPG86c2hhcGVsYXlvdXQgdjpleHQ9ImVkaXQiPg0KPG86 aWRtYXAgdjpleHQ9ImVkaXQiIGRhdGE9IjEiIC8+DQo8L286c2hhcGVsYXlvdXQ+PC94bWw+PCFb ZW5kaWZdLS0+DQo8L2hlYWQ+DQo8Ym9keSBsYW5nPSJFTi1VUyIgbGluaz0iYmx1ZSIgdmxpbms9 InB1cnBsZSI+DQo8ZGl2IGNsYXNzPSJXb3JkU2VjdGlvbjEiPg0KPHAgY2xhc3M9Ik1zb05vcm1h bCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmll ciBOZXcmcXVvdDs7Y29sb3I6YmxhY2siPkFsYW4sPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1p bHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDs7Y29sb3I6YmxhY2siPjxvOnA+Jm5ic3A7PC9vOnA+ PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6 MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7O2NvbG9yOmJsYWNrIj5U aGlzIGFwcHJvYWNoIHNlZW1zIGZpbmUuICZuYnNwO1BsZWFzZSBhZGQgYW4gUkZDIHJlZmVyZW5j ZSBmb3IgdGhlIFNUVU4gcnVsZXMsIHByZWZlcmFibHkgY2l0aW5nIGEgc2VjdGlvbiAjIHRvIG1h a2UgdGhlIHJ1bGVzIGVhc3kgdG8gZmluZCAoaWYgeW91IGhhZCB0cm91YmxlIGxvY2F0aW5nIHRo ZW0sDQogaXTigJlsbCBiZSBldmVuIGhhcmRlciBmb3Igb3RoZXIgcmVhZGVycyAuLi4pLjxvOnA+ PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250 LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7O2NvbG9yOmJs YWNrIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05v cm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291 cmllciBOZXcmcXVvdDs7Y29sb3I6YmxhY2siPlRoYW5rcyw8YnI+DQotLURhdmlkPC9zcGFuPjxz cGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3 JnF1b3Q7O2NvbG9yOmJsYWNrIj48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxwIGNs YXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5 OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7O2NvbG9yOmJsYWNrIj48bzpwPiZuYnNwOzwvbzpwPjwv c3Bhbj48L3A+DQo8ZGl2IHN0eWxlPSJib3JkZXI6bm9uZTtib3JkZXItbGVmdDpzb2xpZCBibHVl IDEuNXB0O3BhZGRpbmc6MGluIDBpbiAwaW4gNC4wcHQiPg0KPGRpdj4NCjxkaXYgc3R5bGU9ImJv cmRlcjpub25lO2JvcmRlci10b3A6c29saWQgI0I1QzRERiAxLjBwdDtwYWRkaW5nOjMuMHB0IDBp biAwaW4gMGluIj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxiPjxzcGFuIHN0eWxlPSJmb250LXNp emU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O1RhaG9tYSZxdW90OywmcXVvdDtzYW5zLXNlcmlm JnF1b3Q7Ij5Gcm9tOjwvc3Bhbj48L2I+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9u dC1mYW1pbHk6JnF1b3Q7VGFob21hJnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDsiPiBBbGFu IEpvaG5zdG9uIFttYWlsdG86YWxhbi5iLmpvaG5zdG9uQGdtYWlsLmNvbV0NCjxicj4NCjxiPlNl bnQ6PC9iPiBUdWVzZGF5LCBBcHJpbCAyMSwgMjAxNSA3OjIxIEFNPGJyPg0KPGI+VG86PC9iPiBK YXJpIEFya2tvPGJyPg0KPGI+Q2M6PC9iPiBCbGFjaywgRGF2aWQ7IGp1c3RpbkB1YmVydGkubmFt ZTsgeW9ha3VtQGF2YXlhLmNvbTsgR2VuZXJhbCBBcmVhIFJldmlldyBUZWFtIChnZW4tYXJ0QGll dGYub3JnKTsgaWV0ZkBpZXRmLm9yZzsgdHJhbUBpZXRmLm9yZzxicj4NCjxiPlN1YmplY3Q6PC9i PiBSZTogW0dlbi1hcnRdIEdlbi1BUlQgcmV2aWV3IG9mIGRyYWZ0LWlldGYtdHJhbS1zdHVuLW9y aWdpbi0wNTxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8cCBjbGFzcz0i TXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9y bWFsIj5IaSBKYXJpLDxvOnA+PC9vOnA+PC9wPg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi PjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1h bCI+V2UgdW5mb3J0dW5hdGVseSBkaWQgbm90IHJlcGx5IHRvIERhdmlkIGZvciBoaXMgcmV2aWV3 IC0gb3VyIG1pc3Rha2UuJm5ic3A7IFNlZSBiZWxvdyBmb3Igb3VyIHJlc3BvbnNlLjxvOnA+PC9v OnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8 L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj4tIEFsYW4gLTxv OnA+PC9vOnA+PC9wPg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9v OnA+PC9wPg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPk9uIFR1ZSwgQXByIDIxLCAyMDE1 IGF0IDE6NTUgQU0sIEphcmkgQXJra28gJmx0OzxhIGhyZWY9Im1haWx0bzpqYXJpLmFya2tvQHBp dWhhLm5ldCIgdGFyZ2V0PSJfYmxhbmsiPmphcmkuYXJra29AcGl1aGEubmV0PC9hPiZndDsgd3Jv dGU6PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5UaGFua3MgZm9yIHlvdXIg cmV2aWV3LCBEYXZpZC4gSSBhbSB0cnlpbmcgdG8gZGV0ZXJtaW5lPGJyPg0KaG93IHRvIGRlYWwg d2l0aCB0aGlzIGRyYWZ0IGluIHRoZSB1cGNvbWluZyBJRVNHIHRlbGVjaGF0Ljxicj4NCkhhcyB0 aGVyZSBiZWVuIGFueSBkaXNjdXNzaW9uIG9mIHRoZSBpc3N1ZSB5b3UgcmFpc2U/PGJyPg0KRG8g dGhlIGF1dGhvcnMgaGF2ZSBhIHJlc3BvbnNlPzxicj4NCjxicj4NCkphcmk8YnI+DQo8YnI+DQpP biAyMSBNYXIgMjAxNSwgYXQgMDY6MTIsIEJsYWNrLCBEYXZpZCAmbHQ7PGEgaHJlZj0ibWFpbHRv OmRhdmlkLmJsYWNrQGVtYy5jb20iPmRhdmlkLmJsYWNrQGVtYy5jb208L2E+Jmd0OyB3cm90ZTo8 YnI+DQo8YnI+DQomZ3Q7IEkgYW0gdGhlIGFzc2lnbmVkIEdlbi1BUlQgcmV2aWV3ZXIgZm9yIHRo aXMgZHJhZnQuIEZvciBiYWNrZ3JvdW5kIG9uPGJyPg0KJmd0OyBHZW4tQVJULCBwbGVhc2Ugc2Vl IHRoZSBGQVEgYXQ8YnI+DQomZ3Q7PGJyPg0KJmd0OyAmbHQ7PGEgaHJlZj0iaHR0cDovL3dpa2ku dG9vbHMuaWV0Zi5vcmcvYXJlYS9nZW4vdHJhYy93aWtpL0dlbkFydGZhcSIgdGFyZ2V0PSJfYmxh bmsiPmh0dHA6Ly93aWtpLnRvb2xzLmlldGYub3JnL2FyZWEvZ2VuL3RyYWMvd2lraS9HZW5BcnRm YXE8L2E+Jmd0Oy48YnI+DQomZ3Q7PGJyPg0KJmd0OyBQbGVhc2UgcmVzb2x2ZSB0aGVzZSBjb21t ZW50cyBhbG9uZyB3aXRoIGFueSBvdGhlciBMYXN0IENhbGwgY29tbWVudHM8YnI+DQomZ3Q7IHlv dSBtYXkgcmVjZWl2ZS48YnI+DQomZ3Q7PGJyPg0KJmd0OyBEb2N1bWVudDogZHJhZnQtaWV0Zi10 cmFtLXN0dW4tb3JpZ2luLTA1PGJyPg0KJmd0OyBSZXZpZXdlcjogRGF2aWQgTC4gQmxhY2s8YnI+ DQomZ3Q7IFJldmlldyBEYXRlOiBNYXJjaCAyMCwgMjAxNTxicj4NCiZndDsgSUVURiBMQyBFbmQg RGF0ZTogTWFyY2ggMTcsIDIwMTU8YnI+DQomZ3Q7PGJyPg0KJmd0OyBTdW1tYXJ5OiBUaGlzIGRy YWZ0IGlzIG9uIHRoZSByaWdodCB0cmFjaywgYnV0IGhhcyBvcGVuIGlzc3Vlczxicj4NCiZndDsm bmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ZGVz Y3JpYmVkIGluIHRoZSByZXZpZXcuPGJyPg0KJmd0Ozxicj4NCiZndDsgVGhpcyBkcmFmdCBkZXNj cmliZXMgdGhlIGFkZGl0aW9uIG9mIGEgd2ViIG9yaWdpbiBhdHRyaWJ1dGUgdG8gU1RVTiBhbmQ8 YnI+DQomZ3Q7IHVzYWdlIG9mIHRoYXQgYXR0cmlidXRlIGluIHNldmVyYWwgcHJvdG9jb2wgY29u dGV4dHMuJm5ic3A7IFRoZSBkcmFmdCBpcyB3ZWxsLTxicj4NCiZndDsgd3JpdHRlbiBhbmQgZWFz eSB0byByZWFkLiZuYnNwOyBJIGZvdW5kIG9uZSBtaW5vciBpc3N1ZSB3aGljaCBtYXkgYmUgZWRp dG9yaWFsLjxicj4NCiZndDs8YnI+DQomZ3Q7IE1ham9yIGlzc3VlczogTm9uZS48YnI+DQomZ3Q7 PGJyPg0KJmd0OyBNaW5vciBpc3N1ZXM6PGJyPg0KJmd0Ozxicj4NCiZndDsgU2VjdGlvbiAyLjcg ZGlzY3Vzc2VzIHVzZSBvZiBtdWx0aXBsZSBTVFVOIG9yaWdpbnMgd2l0aCBXZWIgUlRDIGFuZDxi cj4NCiZndDsgY29uY2x1ZGVzIGJ5IGltcG9zaW5nIGEgJnF1b3Q7TVVTVCZxdW90OyByZXF1aXJl bWVudCBvbiB1c2Ugb2YgbXVsdGlwbGUgU1RVTjxicj4NCiZndDsgb3JpZ2lucyB3aXRoIEhUVFAg aW4gZ2VuZXJhbCAodXNlIGZpcnN0IG9yaWdpbiwgaWdub3JlIG90aGVycykuJm5ic3A7IFdoaWxl PGJyPg0KJmd0OyBXZWIgUlRDIG1heSBiZSB0aGUgcHJlZG9taW5hbnQgb3Igb25seSBjdXJyZW50 IHVzZSBvZiBTVFVOIGFuZCBUVVJOIHdpdGg8YnI+DQomZ3Q7IEhUVFAsIHRoaXMgJnF1b3Q7TVVT VCZxdW90OyBjb3VsZCBmb3JlY2xvc2UgdGhlIHVzZSBvZiBTVFVOIG9yaWdpbnMgd2l0aCBvdGhl cjxicj4NCiZndDsgdXNlcyBvZiBIVFRQLiZuYnNwOyBJJ20gbm90IHN1cmUgd2hhdCB0aG9zZSBw b3NzaWJsZSBmdXR1cmUgdXNlcyBtaWdodCBiZSw8YnI+DQomZ3Q7IGJ1dCBhdCBhIG1pbmltdW0g dGhpcyBkcmFmdCBvdWdodCB0byBtb3JlIHRpZ2h0bHkgc2NvcGUgaXRzIGRpc2N1c3Npb248YnI+ DQomZ3Q7IG9mIHVzZSBvZiBTVFVOIG9yaWdpbnMgd2l0aCBIVFRQIHRvIGxpbWl0IHRoYXQgdXNh Z2UgdG8gV2ViIFJUQy4mbmJzcDsgSWY8YnI+DQomZ3Q7IHRoZXJlJ3MgYSBnb29kIHdheSBmb3Ig YSBTVFVOIG9yIFRVUk4gc2VydmVyIHRvIGRldGVjdCBXZWIgUlRDIHVzYWdlLDxicj4NCiZndDsg cmVxdWlyaW5nIFNUVU4gYW5kIFRVUk4gc2VydmVycyB0byBsb29rIGZvciBXZWIgUlRDIGFzIHRo ZSB1c2Ugb2Y8YnI+DQomZ3Q7IEhUVFAsIGFuZCBvbmx5IGltcG9zZSB0aGlzICZxdW90O01VU1Qm cXVvdDsgcmVxdWlyZW1lbnQgaWYgV2ViIFJUQyBpcyBkZXRlY3RlZDxicj4NCiZndDsgd291bGQg YmV0dGVyIGFsaWduIHRoYXQgcmVxdWlyZW1lbnQgd2l0aCB0aGUgZGlzY3Vzc2lvbiBpbiB0aGlz IGRyYWZ0LjxvOnA+PC9vOnA+PC9wPg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+ Jm5ic3A7PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+RGF2 aWQsPG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48 bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi PkFwb2xvZ2llcyBmb3Igbm90IHJlc3BvbmRpbmcgdG8geW91IGVhcmxpZXIgZWFybGllci4mbmJz cDsgU2luY2UgdGhpcyB0ZXh0IHdhcyB3cml0dGVuLCB3ZSBoYXZlIHJlYWxpemVkIHRoYXQgdGhl cmUgYXJlIG5vIHZhbGlkIHVzZSBjYXNlcyBmb3IgSFRUUCwgU0lQLCBvciBYTVBQIGZvciBtdWx0 aXBsZSBPcmlnaW5zLCBhbmQgYWxzbyB0aGF0IHRoZSBTVFVOIHNwZWNpZmljYXRpb24gc2F5cyB0 aGF0IGV2ZW4gaWYgbXVsdGlwbGVzDQogd2VyZSBzZW50LCBvbmx5IHRoZSBmaXJzdCB3aWxsIGJl IHByb2Nlc3NlZC4mbmJzcDsgU28gd2UgYXJlIGRyb3BwaW5nIHRoZSBNVVNUIHRoYXQgeW91IHJl ZmVyZW5jZSBoZXJlLiZuYnNwOyBXZSBhbHNvIHBsYW4gdG8gY2hhbmdlIHRoZSBtdWx0aXBsZSBP cmlnaW5zIGxhbmd1YWdlIGluIHNlY3Rpb24gMiB0byBzYXk6ICZuYnNwOzxvOnA+PC9vOnA+PC9w Pg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48 L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj4mcXVvdDtTZW5kZXJzIFNI T1VMRCBOT1QgaW5jbHVkZSBtdWx0aXBsZSBPUklHSU4gYXR0cmlidXRlcyBpbiBhIHJlcXVlc3Qg c2luY2UgcGVyIFNUVU4gcnVsZXMsIG9ubHkgdGhlIGZpcnN0IHdpbGwgYmUgcHJvY2Vzc2VkIGFu ZCB0aGUgcmVzdCBpZ25vcmVkLiZxdW90OzxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0K PHAgY2xhc3M9Ik1zb05vcm1hbCI+Jm5ic3A7PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxibG9j a3F1b3RlIHN0eWxlPSJib3JkZXI6bm9uZTtib3JkZXItbGVmdDpzb2xpZCAjQ0NDQ0NDIDEuMHB0 O3BhZGRpbmc6MGluIDBpbiAwaW4gNi4wcHQ7bWFyZ2luLWxlZnQ6NC44cHQ7bWFyZ2luLXJpZ2h0 OjBpbiI+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj4mZ3Q7PGJyPg0KJmd0OyBOaXRzL2VkaXRvcmlh bCBjb21tZW50czo8YnI+DQomZ3Q7PGJyPg0KJmd0OyBpZG5pdHMgMi4xMy4wMSB0dXJuZWQgdXAg YSByZWZlcmVuY2UgcHJvYmxlbTo8YnI+DQomZ3Q7PGJyPg0KJmd0OyZuYnNwOyA9PSBVbnVzZWQg UmVmZXJlbmNlOiAnUkZDNzM1MCcgaXMgZGVmaW5lZCBvbiBsaW5lIDQ5MCwgYnV0IG5vIGV4cGxp Y2l0PGJyPg0KJmd0OyZuYnNwOyAmbmJzcDsgJm5ic3A7cmVmZXJlbmNlIHdhcyBmb3VuZCBpbiB0 aGUgdGV4dDxicj4NCiZndDs8YnI+DQomZ3Q7IFRoYXQgUkZDIHNob3VsZCBiZSBjaXRlZCBzb21l d2hlcmUuJm5ic3A7IEluIGFkZGl0aW9uLCB0aGVyZSBhcmUgbm8gUkZDcyBjaXRlZDxicj4NCiZn dDsgb3IgcmVmZXJlbmNlZCBmb3IgVExTIGFuZCBEVExTIC0gdGhleSBzaG91bGQgYmUgYWRkZWQg KEkgYmVsaWV2ZSB0aGF0PGJyPg0KJmd0OyBSRkMgNTI0NiBhbmQgUkZDIDYzNDcgYXJlIGFwcHJv cHJpYXRlLCByZXNwZWN0aXZlbHkpLjxvOnA+PC9vOnA+PC9wPg0KPC9ibG9ja3F1b3RlPg0KPGRp dj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPC9kaXY+DQo8 ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+UkZDIDczNTAgaXMgRFRMUyB0cmFuc3BvcnQgZm9y IFNUVU4sIHNvIHdlIHNob3VsZCByZWZlcmVuY2UgaXQgaW4gdGhlIFNlY3VyaXR5IENvbnNpZGVy YXRpb25zIHdoZW4gd2UgZGlzY3VzcyBEVExTLjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2 Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+Jm5ic3A7PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxi bG9ja3F1b3RlIHN0eWxlPSJib3JkZXI6bm9uZTtib3JkZXItbGVmdDpzb2xpZCAjQ0NDQ0NDIDEu MHB0O3BhZGRpbmc6MGluIDBpbiAwaW4gNi4wcHQ7bWFyZ2luLWxlZnQ6NC44cHQ7bWFyZ2luLXJp Z2h0OjBpbiI+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWJvdHRvbToxMi4w cHQiPiZndDs8YnI+DQomZ3Q7IFRoYW5rcyw8YnI+DQomZ3Q7IC0tRGF2aWQ8YnI+DQomZ3Q7IC0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS08YnI+DQom Z3Q7IERhdmlkIEwuIEJsYWNrLCBEaXN0aW5ndWlzaGVkIEVuZ2luZWVyPGJyPg0KJmd0OyBFTUMg Q29ycG9yYXRpb24sIDE3NiBTb3V0aCBTdC4sIEhvcGtpbnRvbiwgTUEmbmJzcDsgMDE3NDg8YnI+ DQomZ3Q7ICYjNDM7MSAoNTA4KSAyOTMtNzk1MyZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAm bmJzcDsgJm5ic3A7ICZuYnNwO0ZBWDogJiM0MzsxICg1MDgpIDI5My03Nzg2PGJyPg0KJmd0OyA8 YSBocmVmPSJtYWlsdG86ZGF2aWQuYmxhY2tAZW1jLmNvbSI+ZGF2aWQuYmxhY2tAZW1jLmNvbTwv YT4mbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgTW9iaWxlOiA8YSBocmVmPSJ0ZWw6JTJCMSUy MCUyODk3OCUyOSUyMDM5NC03NzU0Ij4NCiYjNDM7MSAoOTc4KSAzOTQtNzc1NDwvYT48YnI+DQom Z3Q7IC0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS08 YnI+DQomZ3Q7PGJyPg0KJmd0Ozxicj4NCiZndDsgX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX188YnI+DQomZ3Q7IEdlbi1hcnQgbWFpbGluZyBsaXN0PGJyPg0K Jmd0OyA8YSBocmVmPSJtYWlsdG86R2VuLWFydEBpZXRmLm9yZyI+R2VuLWFydEBpZXRmLm9yZzwv YT48YnI+DQomZ3Q7IDxhIGhyZWY9Imh0dHBzOi8vd3d3LmlldGYub3JnL21haWxtYW4vbGlzdGlu Zm8vZ2VuLWFydCIgdGFyZ2V0PSJfYmxhbmsiPmh0dHBzOi8vd3d3LmlldGYub3JnL21haWxtYW4v bGlzdGluZm8vZ2VuLWFydDwvYT48bzpwPjwvbzpwPjwvcD4NCjwvYmxvY2txdW90ZT4NCjwvZGl2 Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8L2Rpdj4NCjwv ZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9ib2R5Pg0KPC9odG1sPg0K --_000_CE03DB3D7B45C245BCA0D24327794936468095MX104CL02corpemcc_-- From nobody Tue Apr 21 08:37:05 2015 Return-Path: X-Original-To: tram@ietfa.amsl.com Delivered-To: tram@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id A4FB01ACE95; Tue, 21 Apr 2015 08:37:02 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.9 X-Spam-Level: X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 09d26jfUsvzF; Tue, 21 Apr 2015 08:37:00 -0700 (PDT) Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 72DB71ACEAE; Tue, 21 Apr 2015 08:36:35 -0700 (PDT) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: "Stephen Farrell" To: "The IESG" X-Test-IDTracker: no X-IETF-IDTracker: 6.0.1.p1 Auto-Submitted: auto-generated Precedence: bulk Message-ID: <20150421153635.27696.5302.idtracker@ietfa.amsl.com> Date: Tue, 21 Apr 2015 08:36:35 -0700 Archived-At: Cc: tram-chairs@ietf.org, tram@ietf.org, draft-ietf-tram-stun-origin.shepherd@ietf.org, draft-ietf-tram-stun-origin.ad@ietf.org, sperreault@jive.com, draft-ietf-tram-stun-origin@ietf.org Subject: [tram] Stephen Farrell's Discuss on draft-ietf-tram-stun-origin-05: (with DISCUSS and COMMENT) X-BeenThere: tram@ietf.org X-Mailman-Version: 2.1.15 List-Id: "Discussing the creation of a Turn Revised And Modernized \(TRAM\) WG, which goal is to consolidate the various initiatives to update TURN and STUN." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 21 Apr 2015 15:37:02 -0000 Stephen Farrell has entered the following ballot position for draft-ietf-tram-stun-origin-05: Discuss When responding, please keep the subject line intact and reply to all email addresses included in the To and CC lines. (Feel free to cut this introductory paragraph, however.) Please refer to http://www.ietf.org/iesg/statement/discuss-criteria.html for more information about IESG DISCUSS and COMMENT positions. The document, along with other ballot positions, can be found here: http://datatracker.ietf.org/doc/draft-ietf-tram-stun-origin/ ---------------------------------------------------------------------- DISCUSS: ---------------------------------------------------------------------- "Analytics" here together with the MUST include statements could amount to a fancy way to describe monetizing people's WebRTC calls in ways that the end user will just not expect. I'd like to check that we're not doing that, as it'd arguably run counter to e.g. RFC7258 or to the general trend towards data minimisation. And making privacy worse, even by a little, seems worse than making it better. (Note: I am here asking about the STUN/TURN server being perhaps unnecessarily told the origin, not the risk that someone sees that in-transit, which is handled in the draft already.) I do agree that the TURN 401-like challenge use-case is perhaps needed, but I do not see that other use cases need to see the origin for them to work at all. And I'm not sure that such a spoofable origin is so useful for that TURN case, esp. when there's parallel work on an authenticated equivalent. (I mean the tram 3rd party thing.) I also don't see that that is needed for network management reasons - surely everything needed for network managment is no more nor less visible to the STUN or TURN servers when this is used vs. when this is not used. So why are we pushing for this? If it is really only for so-called "analytics" then is that ok? (And where can I find a definition of what that means?) Apologies if this discuss seems somewhat high level, but as well as the general concern, the last paragraph of the current tram charter seems to me to me to say that tram ought not make privacy worse. But maybe I'm missing the networking function that needs this - if so, I'm sure someone will point that out. ---------------------------------------------------------------------- COMMENT: ---------------------------------------------------------------------- - intro, para 2: STUN only defines two auth modes that I can see, and you only mention two here - what's the 3rd one you mean? (Is it DTLS?) - What if >1 TURN session with different origins is being setup from same client/browser? Does that work? (Say two parallel calls, not the case where the same resource is being accessed at the same time loaded from different referring web pages.) - I'd suggest to not allow >1 ORIGIN in a STUN request? But that discussion seems to be in-hand. - section 2: suggest providng similar examples for all schemes, http(s),sip & xmpp. - 2.1 & 2.2: MUST include web origin - couldn't there be "private browsing" scenarios where that MUST would be a problem? I'm not suggesting that the origin exposes very much but I think a SHOULD would be more appropriate. - 2.1 last para: source here means the webrtc server right? That's a bit ambiguous and would be better clarified. - What is the benefit of sending an empty origin as opposed to no origin attribute? I don't see any and the former just advertises that the client is "privacy sensitive" which seems incongruous. From nobody Tue Apr 21 08:41:51 2015 Return-Path: X-Original-To: tram@ietfa.amsl.com Delivered-To: tram@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 440C41ACE3F; Tue, 21 Apr 2015 08:41:47 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.278 X-Spam-Level: X-Spam-Status: No, score=-1.278 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, FM_FORGED_GMAIL=0.622, FREEMAIL_FROM=0.001, SPF_PASS=-0.001] autolearn=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ri6RFreik2N8; Tue, 21 Apr 2015 08:41:46 -0700 (PDT) Received: from mail-ie0-x234.google.com (mail-ie0-x234.google.com [IPv6:2607:f8b0:4001:c03::234]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 0CC311ACE7B; Tue, 21 Apr 2015 08:41:46 -0700 (PDT) Received: by iejt8 with SMTP id t8so16668261iej.2; Tue, 21 Apr 2015 08:41:45 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:sender:in-reply-to:references:date:message-id:subject :from:to:cc:content-type; bh=cTy3k4iypPURbF8saDNC/LU00wMk79w8/Bcf5HOOk3M=; b=GS1vQl9KqyI7tHzfkJyE82yMPX1CdfxDptTkb0hUpMUYa2jZRuNX/vMMG4IlFQYWls ABNK4WFseIp5IpMlDEo+sNj3LmKvoGbP6Es56Wgv8X+lRxiYOPLHnOhXx89bg24Xo66G zSUn/OyeGotzGMFeRTCmVwdH/OrqfDf+DzWK71otDPSgpUvUqba7dNOD3aureJEZA7Xy EDWMJlRRkzHODW0kFxMnz0wFuDTkT93PmLz624suHB5XccoIxr85jLBpU8tRvp5458wf 62KybVs3yaPcDGmCs+uojktQbCqhEHN2lznfrPHfxbFov/dru13uAZUCPDA1so0rXWGQ PdAg== MIME-Version: 1.0 X-Received: by 10.42.23.17 with SMTP id q17mr4205447icb.4.1429630905544; Tue, 21 Apr 2015 08:41:45 -0700 (PDT) Sender: barryleiba@gmail.com Received: by 10.107.7.130 with HTTP; Tue, 21 Apr 2015 08:41:45 -0700 (PDT) In-Reply-To: <20150421153635.27696.5302.idtracker@ietfa.amsl.com> References: <20150421153635.27696.5302.idtracker@ietfa.amsl.com> Date: Tue, 21 Apr 2015 11:41:45 -0400 X-Google-Sender-Auth: MGJdOkAbVCDU5Fkt3n1TmvbRWWU Message-ID: From: Barry Leiba To: Stephen Farrell Content-Type: text/plain; charset=ISO-8859-1 Archived-At: Cc: tram-chairs@ietf.org, "tram@ietf.org" , draft-ietf-tram-stun-origin.shepherd@ietf.org, draft-ietf-tram-stun-origin.ad@ietf.org, Simon Perrault , The IESG , draft-ietf-tram-stun-origin@ietf.org Subject: Re: [tram] Stephen Farrell's Discuss on draft-ietf-tram-stun-origin-05: (with DISCUSS and COMMENT) X-BeenThere: tram@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "Discussing the creation of a Turn Revised And Modernized \(TRAM\) WG, which goal is to consolidate the various initiatives to update TURN and STUN." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 21 Apr 2015 15:41:47 -0000 Just on one of the comment points: > - 2.1 & 2.2: MUST include web origin - couldn't > there be "private browsing" scenarios where that > MUST would be a problem? I'm not suggesting that > the origin exposes very much but I think a SHOULD > would be more appropriate. The discussion of my DISCUSS (about making the advice consistent for all schemes) came down to whether it should be SHOULD include on all... or MUST include on all, but it MAY be empty. I think the authors plan to make it the latter. The "MAY be empty" part should take care of your concern here. In a private browsing scenario, the browser would send an empty origin, and the "client doesn't want to share the origin info with the server" issue is discussed in the last paragraph of the Security Considerations. b From nobody Tue Apr 21 08:43:38 2015 Return-Path: X-Original-To: tram@ietfa.amsl.com Delivered-To: tram@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 355011ACED1; Tue, 21 Apr 2015 08:43:34 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.21 X-Spam-Level: X-Spam-Status: No, score=-4.21 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, T_RP_MATCHES_RCVD=-0.01] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id E9ZvfbM3xmdJ; Tue, 21 Apr 2015 08:43:32 -0700 (PDT) Received: from mercury.scss.tcd.ie (mercury.scss.tcd.ie [134.226.56.6]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 009F91ACEA9; Tue, 21 Apr 2015 08:43:29 -0700 (PDT) Received: from localhost (localhost [127.0.0.1]) by mercury.scss.tcd.ie (Postfix) with ESMTP id 76EB1BED0; Tue, 21 Apr 2015 16:43:28 +0100 (IST) X-Virus-Scanned: Debian amavisd-new at scss.tcd.ie Received: from mercury.scss.tcd.ie ([127.0.0.1]) by localhost (mercury.scss.tcd.ie [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ugLIy5hjTtDn; Tue, 21 Apr 2015 16:43:27 +0100 (IST) Received: from [10.87.48.73] (unknown [86.46.17.62]) by mercury.scss.tcd.ie (Postfix) with ESMTPSA id 2646BBECA; Tue, 21 Apr 2015 16:43:27 +0100 (IST) Message-ID: <5536701E.4070707@cs.tcd.ie> Date: Tue, 21 Apr 2015 16:43:26 +0100 From: Stephen Farrell User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:31.0) Gecko/20100101 Thunderbird/31.6.0 MIME-Version: 1.0 To: Barry Leiba References: <20150421153635.27696.5302.idtracker@ietfa.amsl.com> In-Reply-To: OpenPGP: id=D66EA7906F0B897FB2E97D582F3C8736805F8DA2; url= Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 7bit Archived-At: Cc: tram-chairs@ietf.org, "tram@ietf.org" , draft-ietf-tram-stun-origin.shepherd@ietf.org, draft-ietf-tram-stun-origin.ad@ietf.org, Simon Perrault , The IESG , draft-ietf-tram-stun-origin@ietf.org Subject: Re: [tram] Stephen Farrell's Discuss on draft-ietf-tram-stun-origin-05: (with DISCUSS and COMMENT) X-BeenThere: tram@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "Discussing the creation of a Turn Revised And Modernized \(TRAM\) WG, which goal is to consolidate the various initiatives to update TURN and STUN." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 21 Apr 2015 15:43:34 -0000 On 21/04/15 16:41, Barry Leiba wrote: > Just on one of the comment points: > >> - 2.1 & 2.2: MUST include web origin - couldn't >> there be "private browsing" scenarios where that >> MUST would be a problem? I'm not suggesting that >> the origin exposes very much but I think a SHOULD >> would be more appropriate. > > The discussion of my DISCUSS (about making the advice consistent for > all schemes) came down to whether it should be SHOULD include on > all... or MUST include on all, but it MAY be empty. I think the > authors plan to make it the latter. The "MAY be empty" part should > take care of your concern here. In a private browsing scenario, the > browser would send an empty origin, and the "client doesn't want to > share the origin info with the server" issue is discussed in the last > paragraph of the Security Considerations. That may be the answer, but see my last comment:-) Given that I'd assume STUN/TURN servers will have to live with browsers or other client that never send an origin, I don't see why one would ever want to send an origin with no value. S. > > b > From nobody Tue Apr 21 11:35:14 2015 Return-Path: X-Original-To: tram@ietfa.amsl.com Delivered-To: tram@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 56BAA1A88E6; Tue, 21 Apr 2015 11:35:13 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.611 X-Spam-Level: X-Spam-Status: No, score=-2.611 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id uOKUQvQg00eG; Tue, 21 Apr 2015 11:35:11 -0700 (PDT) Received: from prod-mail-xrelay07.akamai.com (prod-mail-xrelay07.akamai.com [72.246.2.115]) by ietfa.amsl.com (Postfix) with ESMTP id 8BBAB1A88F3; Tue, 21 Apr 2015 11:35:03 -0700 (PDT) Received: from prod-mail-xrelay07.akamai.com (localhost.localdomain [127.0.0.1]) by postfix.imss70 (Postfix) with ESMTP id B4E6747713; Tue, 21 Apr 2015 18:35:02 +0000 (GMT) Received: from prod-mail-relay07.akamai.com (prod-mail-relay07.akamai.com [172.17.121.112]) by prod-mail-xrelay07.akamai.com (Postfix) with ESMTP id A7BAD4770C; Tue, 21 Apr 2015 18:35:02 +0000 (GMT) Received: from [172.28.115.172] (unknown [172.28.115.172]) by prod-mail-relay07.akamai.com (Postfix) with ESMTP id 99A7F8003C; Tue, 21 Apr 2015 18:35:02 +0000 (GMT) Message-ID: <55369856.7050203@akamai.com> Date: Tue, 21 Apr 2015 14:35:02 -0400 From: Brandon Williams User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:31.0) Gecko/20100101 Thunderbird/31.6.0 MIME-Version: 1.0 To: "Tirumaleswar Reddy (tireddy)" , Martin Thomson References: <913383AAA69FF945B8F946018B75898A4120E0BD@xmb-rcd-x10.cisco.com> In-Reply-To: <913383AAA69FF945B8F946018B75898A4120E0BD@xmb-rcd-x10.cisco.com> Content-Type: text/plain; charset=windows-1252; format=flowed Content-Transfer-Encoding: 7bit Archived-At: Cc: "rlb@ipv.sx" , "tram-chairs@ietf.org" , "Stephen Farrell \(stephen.farrell@cs.tcd.ie\)" , "tram@ietf.org" , "Salz, Rich" Subject: Re: [tram] Stephen Farrell's Discuss on draft-ietf-tram-turn-third-party-authz-13: (with DISCUSS and COMMENT) X-BeenThere: tram@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "Discussing the creation of a Turn Revised And Modernized \(TRAM\) WG, which goal is to consolidate the various initiatives to update TURN and STUN." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 21 Apr 2015 18:35:13 -0000 On 04/15/2015 05:47 AM, Tirumaleswar Reddy (tireddy) wrote: >> -----Original Message----- >> From: Martin Thomson [mailto:martin.thomson@gmail.com] >> Sent: Monday, April 13, 2015 11:47 PM >> To: Tirumaleswar Reddy (tireddy) >> Cc: Brandon Williams; rlb@ipv.sx; Salz, Rich; Stephen Farrell >> (stephen.farrell@cs.tcd.ie); tram@ietf.org; tram-chairs@ietf.org >> Subject: Re: [tram] Stephen Farrell's Discuss on draft-ietf-tram-turn-third- >> party-authz-13: (with DISCUSS and COMMENT) >> >> >> It does need to deal with algorithm agility and it currently does not. > > It supports algorithm agility. Please refer to http://tools.ietf.org/html/draft-ietf-tram-turn-third-party-authz-13#appendix-B for the interaction b/w the client and authorization server where the client signals the algorithms it supports and server selects an HMAC algorithm from the list of algorithms the client provided and determines length of the mac_key based on the selected HMAC algorithm. > I'm not sure that key length alone is enough to facilitate the current hash agility plan, which is to require a client to send both SHA256 and SHA1 HMACs. IMO, either this draft should require 256 bit keys minimum and describe what to do to generate a SHA1 key (probably run SHA1 on the SHA256 key) or the stunbis editors should commit to providing this information in stunbis. I just want to be certain that we will be telling implementors what to do somewhere. --Brandon -- Brandon Williams; Chief Architect Cloud Networking; Akamai Technologies Inc. From nobody Tue Apr 21 11:39:31 2015 Return-Path: X-Original-To: tram@ietfa.amsl.com Delivered-To: tram@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id D2CC11A88C8; Tue, 21 Apr 2015 11:39:29 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.611 X-Spam-Level: X-Spam-Status: No, score=-2.611 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id VGa4JQ9Obf51; Tue, 21 Apr 2015 11:39:28 -0700 (PDT) Received: from prod-mail-xrelay07.akamai.com (prod-mail-xrelay07.akamai.com [72.246.2.115]) by ietfa.amsl.com (Postfix) with ESMTP id 89B631A883E; Tue, 21 Apr 2015 11:39:28 -0700 (PDT) Received: from prod-mail-xrelay07.akamai.com (localhost.localdomain [127.0.0.1]) by postfix.imss70 (Postfix) with ESMTP id 393F347F42; Tue, 21 Apr 2015 18:39:28 +0000 (GMT) Received: from prod-mail-relay06.akamai.com (prod-mail-relay06.akamai.com [172.17.120.126]) by prod-mail-xrelay07.akamai.com (Postfix) with ESMTP id 2C27347F3E; Tue, 21 Apr 2015 18:39:28 +0000 (GMT) Received: from [172.28.115.172] (bowill.kendall.corp.akamai.com [172.28.115.172]) by prod-mail-relay06.akamai.com (Postfix) with ESMTP id 1D82D202A; Tue, 21 Apr 2015 18:39:28 +0000 (GMT) Message-ID: <55369960.9070609@akamai.com> Date: Tue, 21 Apr 2015 14:39:28 -0400 From: Brandon Williams User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:31.0) Gecko/20100101 Thunderbird/31.6.0 MIME-Version: 1.0 To: "Tirumaleswar Reddy (tireddy)" , Stephen Farrell , The IESG References: <913383AAA69FF945B8F946018B75898A4120E55C@xmb-rcd-x10.cisco.com> In-Reply-To: <913383AAA69FF945B8F946018B75898A4120E55C@xmb-rcd-x10.cisco.com> Content-Type: text/plain; charset=utf-8; format=flowed Content-Transfer-Encoding: 7bit Archived-At: Cc: "tram-chairs@ietf.org" , "tram@ietf.org" , "draft-ietf-tram-turn-third-party-authz@ietf.org" , "gonzalo.camarillo@ericsson.com" , "draft-ietf-tram-turn-third-party-authz.ad@ietf.org" , "draft-ietf-tram-turn-third-party-authz.shepherd@ietf.org" Subject: Re: [tram] Stephen Farrell's Discuss on draft-ietf-tram-turn-third-party-authz-13: (with DISCUSS and COMMENT) X-BeenThere: tram@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "Discussing the creation of a Turn Revised And Modernized \(TRAM\) WG, which goal is to consolidate the various initiatives to update TURN and STUN." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 21 Apr 2015 18:39:30 -0000 On 04/15/2015 12:06 PM, Tirumaleswar Reddy (tireddy) wrote: >> -----Original Message----- >> From: Brandon Williams [mailto:brandon.williams@akamai.com] >> Sent: Tuesday, April 14, 2015 6:36 PM >> >> On 04/10/2015 11:07 PM, Tirumaleswar Reddy (tireddy) wrote: >>>> -----Original Message----- >>>> From: Stephen Farrell [mailto:stephen.farrell@cs.tcd.ie] >>>> Sent: Saturday, April 11, 2015 1:08 AM >>>> - 9: Figure 2 should be way up at the top of the document and not >>>> here >>> >>> In the previous versions it was in the top of the document but moved >> down after comments received from the WG that WebRTC is only an >> example usage of third party authorization. >> >> A few people from outside the WG have commented on having trouble >> following the flow of the document on their first read, primarily due to the >> lack of a high-level picture early in the document. Moving section 9 back up >> toward the top of the document would help by giving readers such a high- >> level overview early on. The discussion might need to be generalized a bit in >> order to serve this purpose, but comments we've received on the >> document's usability indicate that this change would be helpful. > > Section 9 is specific to TURN and the ask from the WG is to discuss it in a separate section after third party authorization with STUN protocol is explained. Enough people who were not actively involved in formulation of the draft have commented on understandability issues that I think it would be good to make some effort in that area. If section 9 cannot be generalized and moved earlier in the document as a way to help readers from outside the WG understand the context, then I think something else probably still needs to be done. --Brandon -- Brandon Williams; Chief Architect Cloud Networking; Akamai Technologies Inc. From nobody Tue Apr 21 11:46:23 2015 Return-Path: X-Original-To: tram@ietfa.amsl.com Delivered-To: tram@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 146DA1A88C8 for ; Tue, 21 Apr 2015 11:46:22 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.211 X-Spam-Level: X-Spam-Status: No, score=-4.211 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 41-7nxfe0Lxm for ; Tue, 21 Apr 2015 11:46:20 -0700 (PDT) Received: from prod-mail-xrelay02.akamai.com (prod-mail-xrelay02.akamai.com [72.246.2.14]) by ietfa.amsl.com (Postfix) with ESMTP id A29A41A893E for ; Tue, 21 Apr 2015 11:46:20 -0700 (PDT) Received: from prod-mail-xrelay02.akamai.com (localhost [127.0.0.1]) by postfix.imss70 (Postfix) with ESMTP id CAE892852D for ; Tue, 21 Apr 2015 18:46:19 +0000 (GMT) Received: from prod-mail-relay07.akamai.com (prod-mail-relay07.akamai.com [172.17.121.112]) by prod-mail-xrelay02.akamai.com (Postfix) with ESMTP id B8D642852B for ; Tue, 21 Apr 2015 18:46:19 +0000 (GMT) Received: from [172.28.115.172] (unknown [172.28.115.172]) by prod-mail-relay07.akamai.com (Postfix) with ESMTP id A902E80059 for ; Tue, 21 Apr 2015 18:46:19 +0000 (GMT) Message-ID: <55369AFB.4050907@akamai.com> Date: Tue, 21 Apr 2015 14:46:19 -0400 From: Brandon Williams User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:31.0) Gecko/20100101 Thunderbird/31.6.0 MIME-Version: 1.0 To: tram@ietf.org References: <913383AAA69FF945B8F946018B75898A4120E570@xmb-rcd-x10.cisco.com> In-Reply-To: <913383AAA69FF945B8F946018B75898A4120E570@xmb-rcd-x10.cisco.com> Content-Type: text/plain; charset=windows-1252; format=flowed Content-Transfer-Encoding: 7bit Archived-At: Subject: Re: [tram] Stephen Farrell's Discuss on draft-ietf-tram-turn-third-party-authz-13: (with DISCUSS and COMMENT) X-BeenThere: tram@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "Discussing the creation of a Turn Revised And Modernized \(TRAM\) WG, which goal is to consolidate the various initiatives to update TURN and STUN." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 21 Apr 2015 18:46:22 -0000 On 04/15/2015 12:09 PM, Tirumaleswar Reddy (tireddy) wrote: >> -----Original Message----- >> From: tram [mailto:tram-bounces@ietf.org] On Behalf Of Brandon Williams >> Sent: Tuesday, April 14, 2015 6:07 PM >> >> I don't think OOB communication b/w the STUN and auth servers is a >> solution to the problem of wanting to provide additional details in the >> token. It defeats a large part of the purpose of moving to a token model in >> the first place, which was to avoid the need for these two servers to have to >> communicate directly with each other. > > The size of the metadata will determine if in-band or OOB is required. The point is that OOB direct communication between the STUN and auth servers is not even an option for many 3rd party auth use cases. Also, if we don't provide a mechanism now then I think it may hurt interop to do so later, since servers that don't understand the extra information won't know how to handle it. --Brandon -- Brandon Williams; Chief Architect Cloud Networking; Akamai Technologies Inc. From nobody Tue Apr 21 13:01:47 2015 Return-Path: X-Original-To: tram@ietfa.amsl.com Delivered-To: tram@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id EB1601A6F34; Tue, 21 Apr 2015 07:00:24 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.91 X-Spam-Level: X-Spam-Status: No, score=-1.91 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, T_RP_MATCHES_RCVD=-0.01] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id c0rfbQgG4ZMY; Tue, 21 Apr 2015 07:00:23 -0700 (PDT) Received: from nostrum.com (raven-v6.nostrum.com [IPv6:2001:470:d:1130::1]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 388DE1A8A98; Tue, 21 Apr 2015 07:00:17 -0700 (PDT) Received: from [10.0.1.23] (cpe-70-119-203-4.tx.res.rr.com [70.119.203.4]) (authenticated bits=0) by nostrum.com (8.15.1/8.14.9) with ESMTPSA id t3LE03SM045169 (version=TLSv1 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO); Tue, 21 Apr 2015 09:00:13 -0500 (CDT) (envelope-from ben@nostrum.com) X-Authentication-Warning: raven.nostrum.com: Host cpe-70-119-203-4.tx.res.rr.com [70.119.203.4] claimed to be [10.0.1.23] From: "Ben Campbell" To: "Alan Johnston" Date: Tue, 21 Apr 2015 09:00:03 -0500 Message-ID: <4C556E3B-B1C3-4BDA-8488-8539194B7D18@nostrum.com> In-Reply-To: References: <20150421022922.506.53723.idtracker@ietfa.amsl.com> MIME-Version: 1.0 Content-Type: text/plain; format=flowed X-Mailer: MailMate (1.9.1r5084) Archived-At: X-Mailman-Approved-At: Tue, 21 Apr 2015 13:01:45 -0700 Cc: tram-chairs@ietf.org, "tram@ietf.org" , draft-ietf-tram-stun-origin.shepherd@ietf.org, draft-ietf-tram-stun-origin.ad@ietf.org, Simon Perreault , The IESG , draft-ietf-tram-stun-origin@ietf.org Subject: Re: [tram] Ben Campbell's Discuss on draft-ietf-tram-stun-origin-05: (with DISCUSS and COMMENT) X-BeenThere: tram@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "Discussing the creation of a Turn Revised And Modernized \(TRAM\) WG, which goal is to consolidate the various initiatives to update TURN and STUN." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 21 Apr 2015 14:00:25 -0000 Hi Alan, please see response to your responses, below. On 21 Apr 2015, at 6:08, Alan Johnston wrote: > Hi Ben, > > See my response below. > > - Alan - > > On Mon, Apr 20, 2015 at 9:29 PM, Ben Campbell wrote: [...] > ---------------------------------------------------------------------- >> DISCUSS: >> ---------------------------------------------------------------------- >> >> Is the normative language in section 2.1 intended to mean that all >> stun >> implementations used by a browser, SIP, or XMPP MUST/SHOULD comply >> with >> this draft? If so, then this draft should probably update STUN. (This >> might also be the case for section 2.2 and TURN). >> >> If on the other hand, these sections are intended to apply only to >> implementations that understand STUN Origin, then I agree no update >> is >> needed, but it might help to make that unambiguous in the text. >> (Normally I think this sort of thing goes without saying, but I am >> not >> sure of the intent in this case.) >> > > We meant the latter, that the normative language in this document > applies > to implementations of this specification. Okay, I will clear the discuss, and add a (non-binding, of course) comment that I think the language could be read either way. > Right now there is a STUNbis > draft in TRAM, so if we want the latter, then we could normatively > reference it there. I assume you meant "former"? > > >> >> >> ---------------------------------------------------------------------- >> COMMENT: >> ---------------------------------------------------------------------- >> >> I agree with all 3 points of Barry's discuss. >> > > OK, let us know if the discussion in the other thread is heading in > the > right direction. > > >> >> Does Spencer's comment about removing the mention of UDP >> fragmentation >> mean people don't think this will be a problem? >> > > We originally thought that there might be a real UDP fragmentation > issue > back when we thought there were: > > 1. Valid use cases for multiple Origins, and > 2. Multiple ORIGINs if included would be processed. > > However, since then, we have ruled out multiple Origins for HTTP, SIP, > and > XMPP. And, we have realized that unless we change core STUN behavior, > multiple ORIGIN attributes wouldn't even be processed. > > So, there is a highly theoretical problem that we can't rule out, but > we > have considered it and discussed it in Dallas. The consensus was not > to > address it. > > Okay, that sounds perfectly reasonable. >> >> In section 4, paragraph 4, can the STUN client reasonably expected to >> know when privacy is paramount? I am a bit surprised not to find a >> stronger statement about needing DTLS or TLS for HTTPS origins. >> > > Even an HTTPS request will still, in general, send DNS queries in the > clear, and that is effectively what is going on here with STUN Origin. > If > there was no real penalty for DTLS or TLS, then we might put in a > stronger > statement, but remember STUN and TURN are used to create candidates > for > ICE, so the transport used becomes the transport for the resulting > media > flow. Running TURN over DTLS results in SRTP over DTLS which is > double > encryption on the leg between the client and the TURN server. > I can live with that if the security guys can :-) [...] From nobody Tue Apr 21 13:01:48 2015 Return-Path: X-Original-To: tram@ietfa.amsl.com Delivered-To: tram@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 6101D1ACD55; Tue, 21 Apr 2015 07:04:37 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.9 X-Spam-Level: X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id DVNNY0oUJ1FL; Tue, 21 Apr 2015 07:04:36 -0700 (PDT) Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 8A78B1ACD54; Tue, 21 Apr 2015 07:04:21 -0700 (PDT) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: "Ben Campbell" To: "The IESG" X-Test-IDTracker: no X-IETF-IDTracker: 6.0.1.p1 Auto-Submitted: auto-generated Precedence: bulk Message-ID: <20150421140421.7293.50851.idtracker@ietfa.amsl.com> Date: Tue, 21 Apr 2015 07:04:21 -0700 Archived-At: X-Mailman-Approved-At: Tue, 21 Apr 2015 13:01:45 -0700 Cc: tram-chairs@ietf.org, tram@ietf.org, draft-ietf-tram-stun-origin.shepherd@ietf.org, draft-ietf-tram-stun-origin.ad@ietf.org, sperreault@jive.com, draft-ietf-tram-stun-origin@ietf.org Subject: [tram] Ben Campbell's No Objection on draft-ietf-tram-stun-origin-05: (with COMMENT) X-BeenThere: tram@ietf.org X-Mailman-Version: 2.1.15 List-Id: "Discussing the creation of a Turn Revised And Modernized \(TRAM\) WG, which goal is to consolidate the various initiatives to update TURN and STUN." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 21 Apr 2015 14:04:37 -0000 Ben Campbell has entered the following ballot position for draft-ietf-tram-stun-origin-05: No Objection When responding, please keep the subject line intact and reply to all email addresses included in the To and CC lines. (Feel free to cut this introductory paragraph, however.) Please refer to http://www.ietf.org/iesg/statement/discuss-criteria.html for more information about IESG DISCUSS and COMMENT positions. The document, along with other ballot positions, can be found here: http://datatracker.ietf.org/doc/draft-ietf-tram-stun-origin/ ---------------------------------------------------------------------- COMMENT: ---------------------------------------------------------------------- I agree with all 3 points of Barry's discuss. I think the normative language in section 2.1 is ambiguous about whether it applies to all stun implementations used by a browser, SIP, or XMPP, or just those that "implement this draft". A thoughtful reader can infer the answer from the fact that the draft does not update STUN, but it might be helpful to clarify. [Removed some comments that have been explained to my satisfaction] Nits: -- Section 1: I agree with Barry that the first reference to STUN should probably go in the previous sentence. Should reference to " Section 4.5 of [RFC7376]" really be 4.6"? 4.5 talks about a MiTM learning USERNAME. 4.6 talks about hosting multiple realms from the same IP address. (And as Barry mentioned, these are really "List entries 5 or 6 in Section 4") From nobody Tue Apr 21 13:01:49 2015 Return-Path: X-Original-To: tram@ietfa.amsl.com Delivered-To: tram@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id A54BE1A891F; Tue, 21 Apr 2015 07:27:52 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.91 X-Spam-Level: X-Spam-Status: No, score=-1.91 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, T_RP_MATCHES_RCVD=-0.01] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id XydhUO5MT7Op; Tue, 21 Apr 2015 07:27:51 -0700 (PDT) Received: from nostrum.com (raven-v6.nostrum.com [IPv6:2001:470:d:1130::1]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 258361A914A; Tue, 21 Apr 2015 07:27:50 -0700 (PDT) Received: from [10.0.1.23] (cpe-70-119-203-4.tx.res.rr.com [70.119.203.4]) (authenticated bits=0) by nostrum.com (8.15.1/8.14.9) with ESMTPSA id t3LERbsv047695 (version=TLSv1 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO); Tue, 21 Apr 2015 09:27:47 -0500 (CDT) (envelope-from ben@nostrum.com) X-Authentication-Warning: raven.nostrum.com: Host cpe-70-119-203-4.tx.res.rr.com [70.119.203.4] claimed to be [10.0.1.23] From: "Ben Campbell" To: "Alan Johnston" Date: Tue, 21 Apr 2015 09:27:37 -0500 Message-ID: In-Reply-To: References: <20150421022922.506.53723.idtracker@ietfa.amsl.com> <4C556E3B-B1C3-4BDA-8488-8539194B7D18@nostrum.com> MIME-Version: 1.0 Content-Type: text/plain; format=flowed X-Mailer: MailMate (1.9.1r5084) Archived-At: X-Mailman-Approved-At: Tue, 21 Apr 2015 13:01:45 -0700 Cc: tram-chairs@ietf.org, "tram@ietf.org" , draft-ietf-tram-stun-origin.shepherd@ietf.org, draft-ietf-tram-stun-origin.ad@ietf.org, Simon Perreault , The IESG , draft-ietf-tram-stun-origin@ietf.org Subject: Re: [tram] Ben Campbell's Discuss on draft-ietf-tram-stun-origin-05: (with DISCUSS and COMMENT) X-BeenThere: tram@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "Discussing the creation of a Turn Revised And Modernized \(TRAM\) WG, which goal is to consolidate the various initiatives to update TURN and STUN." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 21 Apr 2015 14:27:52 -0000 On 21 Apr 2015, at 9:11, Alan Johnston wrote: > Ben, > > Thanks for your quick response. See a few comments below. > > - Alan- > > On Tue, Apr 21, 2015 at 9:00 AM, Ben Campbell wrote: >> >> [...] >> [...] >>> >> >> Okay, I will clear the discuss, and add a (non-binding, of course) >> comment >> that I think the language could be read either way. >> >> > If we changed the first of these MUST statements to this, would it be > more > clear: > > "STUN clients compliant with this specification sending STUN requests > sent > without authentication to a STUN server (i.e.STUN binding requests > sent to > a STUN server) MUST include the ORIGIN attribute." > > I removed the web origin part, as we plan to drop this distinction. > > Or do you think every MUST should have this qualifier? No, that way lies madness :-) 2.1 (and to a lesser degree 2.2) were the only parts that stood out in my mind as readable to mean "... MUST implement this spec" >>>> >>>> ---------------------------------------------------------------------- >>>> COMMENT: >>>> ---------------------------------------------------------------------- >>>> >>>> I agree with all 3 points of Barry's discuss. >>>> >>>> >>> OK, let us know if the discussion in the other thread is heading in >>> the >>> right direction. >>> I see that Barry agreed to clear, and I'm okay with the discussion. [...] From nobody Tue Apr 21 13:01:51 2015 Return-Path: X-Original-To: tram@ietfa.amsl.com Delivered-To: tram@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 3ABE11A8938; Tue, 21 Apr 2015 11:40:18 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.611 X-Spam-Level: X-Spam-Status: No, score=-2.611 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id FxIl8MfNVs5c; Tue, 21 Apr 2015 11:40:14 -0700 (PDT) Received: from prod-mail-xrelay07.akamai.com (prod-mail-xrelay07.akamai.com [72.246.2.115]) by ietfa.amsl.com (Postfix) with ESMTP id 614CE1A892E; Tue, 21 Apr 2015 11:40:14 -0700 (PDT) Received: from prod-mail-xrelay07.akamai.com (localhost.localdomain [127.0.0.1]) by postfix.imss70 (Postfix) with ESMTP id D4A17477C4; Tue, 21 Apr 2015 18:40:13 +0000 (GMT) Received: from prod-mail-relay06.akamai.com (prod-mail-relay06.akamai.com [172.17.120.126]) by prod-mail-xrelay07.akamai.com (Postfix) with ESMTP id 92CB047843; Tue, 21 Apr 2015 18:40:08 +0000 (GMT) Received: from email.msg.corp.akamai.com (usma1ex-cas1.msg.corp.akamai.com [172.27.123.30]) by prod-mail-relay06.akamai.com (Postfix) with ESMTP id 8E1CC202A; Tue, 21 Apr 2015 18:40:08 +0000 (GMT) Received: from USMA1EX-DAG1MB2.msg.corp.akamai.com (172.27.123.102) by usma1ex-dag1mb1.msg.corp.akamai.com (172.27.123.101) with Microsoft SMTP Server (TLS) id 15.0.913.22; Tue, 21 Apr 2015 14:40:07 -0400 Received: from USMA1EX-DAG1MB2.msg.corp.akamai.com ([172.27.123.102]) by usma1ex-dag1mb2.msg.corp.akamai.com ([172.27.123.102]) with mapi id 15.00.0913.011; Tue, 21 Apr 2015 14:40:07 -0400 From: "Salz, Rich" To: "Williams, Brandon" , "Tirumaleswar Reddy (tireddy)" , Martin Thomson Thread-Topic: [tram] Stephen Farrell's Discuss on draft-ietf-tram-turn-third-party-authz-13: (with DISCUSS and COMMENT) Thread-Index: AdB3YVGPz12ySXkWT06k1SM3uWcWXAFIhZcAAAhS4bA= Date: Tue, 21 Apr 2015 18:40:07 +0000 Message-ID: References: <913383AAA69FF945B8F946018B75898A4120E0BD@xmb-rcd-x10.cisco.com> <55369856.7050203@akamai.com> In-Reply-To: <55369856.7050203@akamai.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [172.19.44.228] Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 Archived-At: X-Mailman-Approved-At: Tue, 21 Apr 2015 13:01:45 -0700 Cc: "rlb@ipv.sx" , "tram-chairs@ietf.org" , "tram@ietf.org" , "Stephen Farrell \(stephen.farrell@cs.tcd.ie\)" Subject: Re: [tram] Stephen Farrell's Discuss on draft-ietf-tram-turn-third-party-authz-13: (with DISCUSS and COMMENT) X-BeenThere: tram@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "Discussing the creation of a Turn Revised And Modernized \(TRAM\) WG, which goal is to consolidate the various initiatives to update TURN and STUN." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 21 Apr 2015 18:40:18 -0000 > I'm not sure that key length alone is enough to facilitate the current ha= sh > agility plan, which is to require a client to send both SHA256 and > SHA1 HMACs. IMO, either this draft should require 256 bit keys minimum an= d > describe what to do to generate a SHA1 key (probably run SHA1 on the > SHA256 key) or the stunbis editors should commit to providing this > information in stunbis. I just want to be certain that we will be telling > implementors what to do somewhere. +1. It seems that this draft is the place to put "how to turn the 256bit HMAC k= ey into something usable for the sha1 hmac" Key size is not an unambiguous algorithm identifier. From nobody Tue Apr 21 18:58:38 2015 Return-Path: X-Original-To: tram@ietfa.amsl.com Delivered-To: tram@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id A64971B3042; Tue, 21 Apr 2015 18:58:36 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -14.511 X-Spam-Level: X-Spam-Status: No, score=-14.511 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_HI=-5, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id xvDH-ve93Lwc; Tue, 21 Apr 2015 18:58:35 -0700 (PDT) Received: from rcdn-iport-8.cisco.com (rcdn-iport-8.cisco.com [173.37.86.79]) (using TLSv1 with cipher RC4-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id AEDE71B304D; Tue, 21 Apr 2015 18:58:25 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=2397; q=dns/txt; s=iport; t=1429667906; x=1430877506; h=from:to:cc:subject:date:message-id:references: in-reply-to:content-transfer-encoding:mime-version; bh=pOk2L5yY22EYOilDuxwj6JYBJG6NlRcDn2u3uA/VI4c=; b=eVBJzYzO7/L843+IoNAK15047KOmtr0lKQAXTO477HA/g490VgRD3++0 +4soMrU5CxvSJEwKoPEpKrmhzYvM2TfJTqqvXHcHt2k3Uuzn3PhizsvsN IdSCFJwGb02sJctkl0miFMQQZBso7t8vqLc9qOxkEUAEmAy+UOye2oS4f I=; X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: A0AWBQBE/zZV/4wNJK1bgwxSXAXFNII+hgQCgTlMAQEBAQEBfoQgAQEBBDo/DAQCAQgRBAEBAQoUBQQHIREUCQgBAQQBDQUIAYgOAxENxg8NhTcBAQEBAQEBAQEBAQEBAQEBAQEBAQEXizeCTYFlAQEFGjECBQaDEYEWBZEzhAGEWoJwOoMCigWGSiKCBAEZBBWBPG8BgQo5gQABAQE X-IronPort-AV: E=Sophos;i="5.11,620,1422921600"; d="scan'208";a="5890389" Received: from alln-core-7.cisco.com ([173.36.13.140]) by rcdn-iport-8.cisco.com with ESMTP; 22 Apr 2015 01:58:25 +0000 Received: from xhc-aln-x11.cisco.com (xhc-aln-x11.cisco.com [173.36.12.85]) by alln-core-7.cisco.com (8.14.5/8.14.5) with ESMTP id t3M1wOsd011060 (version=TLSv1/SSLv3 cipher=AES128-SHA bits=128 verify=FAIL); Wed, 22 Apr 2015 01:58:24 GMT Received: from xmb-rcd-x10.cisco.com ([169.254.15.220]) by xhc-aln-x11.cisco.com ([173.36.12.85]) with mapi id 14.03.0195.001; Tue, 21 Apr 2015 20:58:24 -0500 From: "Tirumaleswar Reddy (tireddy)" To: Brandon Williams , Martin Thomson Thread-Topic: [tram] Stephen Farrell's Discuss on draft-ietf-tram-turn-third-party-authz-13: (with DISCUSS and COMMENT) Thread-Index: AdB3YVGPL1OX25drRTSYceNRW1EowwFKngkAAAS+0+A= Date: Wed, 22 Apr 2015 01:58:24 +0000 Message-ID: <913383AAA69FF945B8F946018B75898A41214674@xmb-rcd-x10.cisco.com> References: <913383AAA69FF945B8F946018B75898A4120E0BD@xmb-rcd-x10.cisco.com> <55369856.7050203@akamai.com> In-Reply-To: <55369856.7050203@akamai.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.65.50.120] Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 Archived-At: Cc: "rlb@ipv.sx" , "tram-chairs@ietf.org" , "Stephen Farrell \(stephen.farrell@cs.tcd.ie\)" , "tram@ietf.org" , "Salz, Rich" Subject: Re: [tram] Stephen Farrell's Discuss on draft-ietf-tram-turn-third-party-authz-13: (with DISCUSS and COMMENT) X-BeenThere: tram@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "Discussing the creation of a Turn Revised And Modernized \(TRAM\) WG, which goal is to consolidate the various initiatives to update TURN and STUN." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 22 Apr 2015 01:58:36 -0000 > -----Original Message----- > From: Brandon Williams [mailto:brandon.williams@akamai.com] > Sent: Wednesday, April 22, 2015 12:05 AM > To: Tirumaleswar Reddy (tireddy); Martin Thomson > Cc: tram-chairs@ietf.org; tram@ietf.org; rlb@ipv.sx; Salz, Rich; Stephen > Farrell (stephen.farrell@cs.tcd.ie) > Subject: Re: [tram] Stephen Farrell's Discuss on draft-ietf-tram-turn-thi= rd- > party-authz-13: (with DISCUSS and COMMENT) >=20 > On 04/15/2015 05:47 AM, Tirumaleswar Reddy (tireddy) wrote: > >> -----Original Message----- > >> From: Martin Thomson [mailto:martin.thomson@gmail.com] > >> Sent: Monday, April 13, 2015 11:47 PM > >> To: Tirumaleswar Reddy (tireddy) > >> Cc: Brandon Williams; rlb@ipv.sx; Salz, Rich; Stephen Farrell > >> (stephen.farrell@cs.tcd.ie); tram@ietf.org; tram-chairs@ietf.org > >> Subject: Re: [tram] Stephen Farrell's Discuss on draft-ietf-tram-turn-= third- > >> party-authz-13: (with DISCUSS and COMMENT) > >> > >> > >> It does need to deal with algorithm agility and it currently does not. > > > > It supports algorithm agility. Please refer to > http://tools.ietf.org/html/draft-ietf-tram-turn-third-party-authz- > 13#appendix-B for the interaction b/w the client and authorization serve= r > where the client signals the algorithms it supports and server selects an > HMAC algorithm from the list of algorithms the client provided and > determines length of the mac_key based on the selected HMAC algorithm. > > >=20 > I'm not sure that key length alone is enough to facilitate the current > hash agility plan, which is to require a client to send both SHA256 and > SHA1 HMACs. IMO, either this draft should require 256 bit keys minimum > and describe what to do to generate a SHA1 key (probably run SHA1 on the > SHA256 key) or the stunbis editors should commit to providing this > information in stunbis. I just want to be certain that we will be > telling implementors what to do somewhere. HKDF https://tools.ietf.org/html/rfc5869 can be used to derive the key for = SHA1 from 256-bit key but as per the last mail thread http://www.ietf.org/m= ail-archive/web/tram/current/msg01525.html, I did not see any consensus if = TURN client must include MI calculated using both SHA1 and SHA2.=20 -Tiru >=20 > --Brandon >=20 > -- > Brandon Williams; Chief Architect > Cloud Networking; Akamai Technologies Inc. From nobody Tue Apr 21 19:25:52 2015 Return-Path: X-Original-To: tram@ietfa.amsl.com Delivered-To: tram@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 1D9F61B30A3 for ; Tue, 21 Apr 2015 19:25:50 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -14.511 X-Spam-Level: X-Spam-Status: No, score=-14.511 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_HI=-5, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id pVe9TiA4zddw for ; Tue, 21 Apr 2015 19:25:48 -0700 (PDT) Received: from alln-iport-2.cisco.com (alln-iport-2.cisco.com [173.37.142.89]) (using TLSv1 with cipher RC4-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id A34451B30A0 for ; Tue, 21 Apr 2015 19:25:48 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=2011; q=dns/txt; s=iport; t=1429669549; x=1430879149; h=from:to:subject:date:message-id:references:in-reply-to: content-transfer-encoding:mime-version; bh=cKlE/TaDoRaFcKwExwaQlnmZu74s6Lt9UAPs3EdEvpY=; b=lpTMtyRo4NDLMnQSQcU3Ro4hrn5RdNLVpo9kBM+1Ae0xXNhXtWMCd/8C TMXrolau8gnlH5oaw/+O57bkD7HAhXL16fjwrON3Fz1R+8+gsEhm4KnnR /1AooEZVw18rUd1BeC6oRyiAkYyXxGjUTecjO4mKYMze4w3Pzqk5dy130 M=; X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: A0BZBABoBTdV/5NdJa1RCoMMUlwFxTRmCYFFCoYEAoE4OBQBAQEBAQEBfYQgAQEBAwEBAQE3NBAHBAIBCBEEAQEBChQFBAcnCxQJCAEBBAESCBOICAgNy1YBAQEBAQEBAQEBAQEBAQEBAQEBAQETBIs3hCcsOAaDEYEWBZEzn1Yigh4ZgTxvgUSBAAEBAQ X-IronPort-AV: E=Sophos;i="5.11,620,1422921600"; d="scan'208";a="143367986" Received: from rcdn-core-11.cisco.com ([173.37.93.147]) by alln-iport-2.cisco.com with ESMTP; 22 Apr 2015 02:25:48 +0000 Received: from xhc-rcd-x11.cisco.com (xhc-rcd-x11.cisco.com [173.37.183.85]) by rcdn-core-11.cisco.com (8.14.5/8.14.5) with ESMTP id t3M2Plw0008806 (version=TLSv1/SSLv3 cipher=AES128-SHA bits=128 verify=FAIL); Wed, 22 Apr 2015 02:25:47 GMT Received: from xmb-rcd-x10.cisco.com ([169.254.15.220]) by xhc-rcd-x11.cisco.com ([173.37.183.85]) with mapi id 14.03.0195.001; Tue, 21 Apr 2015 21:25:47 -0500 From: "Tirumaleswar Reddy (tireddy)" To: Brandon Williams , "tram@ietf.org" Thread-Topic: [tram] Stephen Farrell's Discuss on draft-ietf-tram-turn-third-party-authz-13: (with DISCUSS and COMMENT) Thread-Index: AdB3louUjzyHQog6Snaz2q2+zUT+kQE9tGmAAATBqZA= Date: Wed, 22 Apr 2015 02:25:46 +0000 Message-ID: <913383AAA69FF945B8F946018B75898A412146CB@xmb-rcd-x10.cisco.com> References: <913383AAA69FF945B8F946018B75898A4120E570@xmb-rcd-x10.cisco.com> <55369AFB.4050907@akamai.com> In-Reply-To: <55369AFB.4050907@akamai.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.65.50.120] Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 Archived-At: Subject: Re: [tram] Stephen Farrell's Discuss on draft-ietf-tram-turn-third-party-authz-13: (with DISCUSS and COMMENT) X-BeenThere: tram@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "Discussing the creation of a Turn Revised And Modernized \(TRAM\) WG, which goal is to consolidate the various initiatives to update TURN and STUN." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 22 Apr 2015 02:25:50 -0000 > -----Original Message----- > From: tram [mailto:tram-bounces@ietf.org] On Behalf Of Brandon Williams > Sent: Wednesday, April 22, 2015 12:16 AM > To: tram@ietf.org > Subject: Re: [tram] Stephen Farrell's Discuss on draft-ietf-tram-turn-thi= rd- > party-authz-13: (with DISCUSS and COMMENT) >=20 > On 04/15/2015 12:09 PM, Tirumaleswar Reddy (tireddy) wrote: > >> -----Original Message----- > >> From: tram [mailto:tram-bounces@ietf.org] On Behalf Of Brandon > >> Williams > >> Sent: Tuesday, April 14, 2015 6:07 PM > >> > >> I don't think OOB communication b/w the STUN and auth servers is a > >> solution to the problem of wanting to provide additional details in > >> the token. It defeats a large part of the purpose of moving to a > >> token model in the first place, which was to avoid the need for these > >> two servers to have to communicate directly with each other. > > > > The size of the metadata will determine if in-band or OOB is required. >=20 > The point is that OOB direct communication between the STUN and auth > servers is not even an option for many 3rd party auth use cases.=20 We have to first identify the metadata, the problems it solves, it's format= , if we want to support both proprietary and standard TLV, how to handle ca= ses if metadata is large and could cause fragmentation of request, OOB vers= es in-band communication etc. All the above work requires a separate draft. > Also, if we > don't provide a mechanism now then I think it may hurt interop to do so > later, since servers that don't understand the extra information won't kn= ow > how to handle it. One possible way could be add an opaque field at the end of the encrypted_b= lock for future enhancements. -Tiru >=20 > --Brandon >=20 > -- > Brandon Williams; Chief Architect > Cloud Networking; Akamai Technologies Inc. >=20 > _______________________________________________ > tram mailing list > tram@ietf.org > https://www.ietf.org/mailman/listinfo/tram From nobody Tue Apr 21 21:11:41 2015 Return-Path: X-Original-To: tram@ietfa.amsl.com Delivered-To: tram@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 8681A1B3180; Tue, 21 Apr 2015 21:11:40 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -14.511 X-Spam-Level: X-Spam-Status: No, score=-14.511 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_HI=-5, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id UDPylNAb5fgE; Tue, 21 Apr 2015 21:11:39 -0700 (PDT) Received: from rcdn-iport-6.cisco.com (rcdn-iport-6.cisco.com [173.37.86.77]) (using TLSv1 with cipher RC4-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 3D0B51B3189; Tue, 21 Apr 2015 21:11:35 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=828; q=dns/txt; s=iport; t=1429675895; x=1430885495; h=from:to:cc:subject:date:message-id:references: in-reply-to:content-transfer-encoding:mime-version; bh=REngUFoA4N3X52BmXEJHC3KHHg5sYjiAjQH71lnh4zY=; b=BciyJCgzhPNfPjGkoImXRSXKPmmrKnsxwXuT05S72UjSBEn1exne1Prs Kj3zIA5wgN46dy77rwIhT1SaQItHnPeAMndoOBFIMPYoLW0kubQWK+mRZ a86x30sExMizSxnUONN/rKhrwzDQ0X42oaaUGiKxCfomDkpExoFDZPTm9 0=; X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: A0AVBQDoHjdV/40NJK1bgwtSXAXFNoI+hgQCgTpMAQEBAQEBfoQgAQEBBDo/DAQCAQgRBAEBCxQFBAcyFAkIAQEEAQ0FCIgjDcs+AQEBAQEBAQEBAQEBAQEBAQEBAQEBEwSLN4RTMQcGgxGBFgEEkTOEAZtVIoIeGYE8b4FEgQABAQE X-IronPort-AV: E=Sophos;i="5.11,621,1422921600"; d="scan'208";a="413758623" Received: from alln-core-8.cisco.com ([173.36.13.141]) by rcdn-iport-6.cisco.com with ESMTP; 22 Apr 2015 04:11:34 +0000 Received: from xhc-aln-x12.cisco.com (xhc-aln-x12.cisco.com [173.36.12.86]) by alln-core-8.cisco.com (8.14.5/8.14.5) with ESMTP id t3M4BYRo022327 (version=TLSv1/SSLv3 cipher=AES128-SHA bits=128 verify=FAIL); Wed, 22 Apr 2015 04:11:34 GMT Received: from xmb-rcd-x10.cisco.com ([169.254.15.220]) by xhc-aln-x12.cisco.com ([173.36.12.86]) with mapi id 14.03.0195.001; Tue, 21 Apr 2015 23:11:34 -0500 From: "Tirumaleswar Reddy (tireddy)" To: "Salz, Rich" , "Williams, Brandon" , Martin Thomson Thread-Topic: [tram] Stephen Farrell's Discuss on draft-ietf-tram-turn-third-party-authz-13: (with DISCUSS and COMMENT) Thread-Index: AdB3YVGPL1OX25drRTSYceNRW1EowwFKngkAAAS+0+AAC5E5gAAHR7Ag Date: Wed, 22 Apr 2015 04:11:34 +0000 Message-ID: <913383AAA69FF945B8F946018B75898A4121478B@xmb-rcd-x10.cisco.com> References: <913383AAA69FF945B8F946018B75898A4120E0BD@xmb-rcd-x10.cisco.com> <55369856.7050203@akamai.com> <913383AAA69FF945B8F946018B75898A41214674@xmb-rcd-x10.cisco.com> In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.65.50.120] Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 Archived-At: Cc: "rlb@ipv.sx" , "tram-chairs@ietf.org" , "tram@ietf.org" , "Stephen Farrell \(stephen.farrell@cs.tcd.ie\)" Subject: Re: [tram] Stephen Farrell's Discuss on draft-ietf-tram-turn-third-party-authz-13: (with DISCUSS and COMMENT) X-BeenThere: tram@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "Discussing the creation of a Turn Revised And Modernized \(TRAM\) WG, which goal is to consolidate the various initiatives to update TURN and STUN." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 22 Apr 2015 04:11:40 -0000 > -----Original Message----- > From: Salz, Rich [mailto:rsalz@akamai.com] > Sent: Wednesday, April 22, 2015 7:52 AM > To: Tirumaleswar Reddy (tireddy); Williams, Brandon; Martin Thomson > Cc: tram-chairs@ietf.org; tram@ietf.org; rlb@ipv.sx; Stephen Farrell > (stephen.farrell@cs.tcd.ie) > Subject: RE: [tram] Stephen Farrell's Discuss on draft-ietf-tram-turn-thi= rd- > party-authz-13: (with DISCUSS and COMMENT) >=20 > > HKDF https://tools.ietf.org/html/rfc5869 can be used to derive the key = for > > SHA1 from 256-bit key >=20 > Too complicated. Just do a SHA1 on the 256 bit key. https://tools.ietf.org/html/rfc6194#section-3 discusses problems with SHA1.= Is it safe to derive key using SHA1 ? -Tiru >=20 > -- > Senior Architect, Akamai Technologies > IM: richsalz@jabber.at Twitter: RichSalz From nobody Tue Apr 21 21:20:08 2015 Return-Path: X-Original-To: tram@ietfa.amsl.com Delivered-To: tram@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 2177A1A871F; Tue, 21 Apr 2015 21:20:06 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -14.511 X-Spam-Level: X-Spam-Status: No, score=-14.511 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_HI=-5, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id HKM9RL2PG0Sv; Tue, 21 Apr 2015 21:20:04 -0700 (PDT) Received: from rcdn-iport-1.cisco.com (rcdn-iport-1.cisco.com [173.37.86.72]) (using TLSv1 with cipher RC4-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 69E541A023E; Tue, 21 Apr 2015 21:20:04 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=2252; q=dns/txt; s=iport; t=1429676405; x=1430886005; h=from:to:cc:subject:date:message-id:references: in-reply-to:content-transfer-encoding:mime-version; bh=uW7Gp2zu1HV5KC/s8ZiM73hTg4bDC/7nDsl6LQUsglA=; b=jbTaGMCU987uBS89eJTDeZTn2dgmD4r/bjMQuRp7lSwD+SECk+NKvUBg bmbb5OCmtymGakJSD1MCWB3P3f6uTIAhdwJph9YQx32uSVCqsSJ0kVtl8 3obHmrdEWVmcsuTexp5s/gH0THOoZccJfUzNAWVleam4WvwSylpIUsg16 Q=; X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: A0AVBQDSIDdV/5JdJa1bgwtSXAXFNoI+hgQCgTpMAQEBAQEBfoQgAQEBBDo/DAQCAQgRBAEBCxQFBAcyFAkIAgQBDQUIiCMNyzsBAQEBAQEBAQEBAQEBAQEBAQEBAQETBIs3hDkaMQcGgxGBFgEEkTOEAZtVIoIEGgQVgTxvgUSBAAEBAQ X-IronPort-AV: E=Sophos;i="5.11,621,1422921600"; d="scan'208";a="410626069" Received: from rcdn-core-10.cisco.com ([173.37.93.146]) by rcdn-iport-1.cisco.com with ESMTP; 22 Apr 2015 04:20:04 +0000 Received: from xhc-aln-x12.cisco.com (xhc-aln-x12.cisco.com [173.36.12.86]) by rcdn-core-10.cisco.com (8.14.5/8.14.5) with ESMTP id t3M4K3tr014944 (version=TLSv1/SSLv3 cipher=AES128-SHA bits=128 verify=FAIL); Wed, 22 Apr 2015 04:20:03 GMT Received: from xmb-rcd-x10.cisco.com ([169.254.15.220]) by xhc-aln-x12.cisco.com ([173.36.12.86]) with mapi id 14.03.0195.001; Tue, 21 Apr 2015 23:20:03 -0500 From: "Tirumaleswar Reddy (tireddy)" To: "Salz, Rich" , "Williams, Brandon" , Martin Thomson Thread-Topic: [tram] Stephen Farrell's Discuss on draft-ietf-tram-turn-third-party-authz-13: (with DISCUSS and COMMENT) Thread-Index: AdB3YVGPL1OX25drRTSYceNRW1EowwFKngkAAAS+0+AAC5E5gAAHR7Ag///lFQCAAFJ4QA== Date: Wed, 22 Apr 2015 04:20:02 +0000 Message-ID: <913383AAA69FF945B8F946018B75898A412147B3@xmb-rcd-x10.cisco.com> References: <913383AAA69FF945B8F946018B75898A4120E0BD@xmb-rcd-x10.cisco.com> <55369856.7050203@akamai.com> <913383AAA69FF945B8F946018B75898A41214674@xmb-rcd-x10.cisco.com> <913383AAA69FF945B8F946018B75898A4121478B@xmb-rcd-x10.cisco.com> <30eaf35d875745128662076920f72ae8@usma1ex-dag1mb2.msg.corp.akamai.com> In-Reply-To: <30eaf35d875745128662076920f72ae8@usma1ex-dag1mb2.msg.corp.akamai.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.65.50.120] Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 Archived-At: Cc: "rlb@ipv.sx" , "tram-chairs@ietf.org" , "tram@ietf.org" , "Stephen Farrell \(stephen.farrell@cs.tcd.ie\)" Subject: Re: [tram] Stephen Farrell's Discuss on draft-ietf-tram-turn-third-party-authz-13: (with DISCUSS and COMMENT) X-BeenThere: tram@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "Discussing the creation of a Turn Revised And Modernized \(TRAM\) WG, which goal is to consolidate the various initiatives to update TURN and STUN." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 22 Apr 2015 04:20:06 -0000 > -----Original Message----- > From: Salz, Rich [mailto:rsalz@akamai.com] > Sent: Wednesday, April 22, 2015 9:44 AM > To: Tirumaleswar Reddy (tireddy); Williams, Brandon; Martin Thomson > Cc: tram-chairs@ietf.org; tram@ietf.org; rlb@ipv.sx; Stephen Farrell > (stephen.farrell@cs.tcd.ie) > Subject: RE: [tram] Stephen Farrell's Discuss on draft-ietf-tram-turn-thi= rd- > party-authz-13: (with DISCUSS and COMMENT) >=20 > > https://tools.ietf.org/html/rfc6194#section-3 discusses problems with > SHA1. > > Is it safe to derive key using SHA1 ? >=20 > Those concerns do not apply here. Yes, absolutely safe. Thanks, updated draft in my local copy. OLD: [I-D.ietf-tram-stunbis] will support hash agility and accomplish this agility by conveying the HMAC algorithms supported by the STUN server along with a STUN error message to the client. The client then signals the intersection-set of algorithms supported by it and the STUN server to the authorization server in the 'alg' parameter defined in [I-D.ietf-oauth-pop-key-distribution]. The authorization server selects an HMAC algorithm from the list of algorithms the client provided and determines length of the mac_key based on the selected HMAC algorithm. Note that until STUN supports hash agility HMAC-SHA1 is the only valid hash algorithm that the client can signal to the authorization server and vice-versa. NEW: [I-D.ietf-tram-stunbis] supports hash agility and accomplish this agilit= y by computing message integrity using both HMAC-SHA-1 and HMAC-SHA-256-12= 8. The client signals the algorithm supported by it to the authorization se= rver in the 'alg' parameter defined in [I-D.ietf-oauth-pop-key-distribution]. The authorization dete= rmines length of the mac_key based on the HMAC algorithm conveyed by the client. If the client supports=20 both HMAC-SHA-1 and HMAC-SHA-256-128 then it signals HMAC-SHA-256-128 to= the authorization server, gets 256-bit key from the authorization server and calculates 160-bit key for HMAC-SHA-1 using SHA1 taking the 256-bit = key as input. -Tiru >=20 > -- > Senior Architect, Akamai Technologies > IM: richsalz@jabber.at Twitter: RichSalz From nobody Wed Apr 22 00:30:26 2015 Return-Path: X-Original-To: tram@ietfa.amsl.com Delivered-To: tram@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id D08D31B3090; Tue, 21 Apr 2015 19:22:23 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.211 X-Spam-Level: X-Spam-Status: No, score=-4.211 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ISLOktQW40so; Tue, 21 Apr 2015 19:22:22 -0700 (PDT) Received: from prod-mail-xrelay02.akamai.com (prod-mail-xrelay02.akamai.com [72.246.2.14]) by ietfa.amsl.com (Postfix) with ESMTP id 4245F1B308D; Tue, 21 Apr 2015 19:22:21 -0700 (PDT) Received: from prod-mail-xrelay02.akamai.com (localhost [127.0.0.1]) by postfix.imss70 (Postfix) with ESMTP id 0D4AC28540; Wed, 22 Apr 2015 02:22:21 +0000 (GMT) Received: from prod-mail-relay06.akamai.com (prod-mail-relay06.akamai.com [172.17.120.126]) by prod-mail-xrelay02.akamai.com (Postfix) with ESMTP id EEC0028538; Wed, 22 Apr 2015 02:22:20 +0000 (GMT) Received: from email.msg.corp.akamai.com (usma1ex-casadmn.msg.corp.akamai.com [172.27.123.33]) by prod-mail-relay06.akamai.com (Postfix) with ESMTP id E9A7B2027; Wed, 22 Apr 2015 02:22:20 +0000 (GMT) Received: from USMA1EX-DAG1MB2.msg.corp.akamai.com (172.27.123.102) by usma1ex-dag1mb5.msg.corp.akamai.com (172.27.123.105) with Microsoft SMTP Server (TLS) id 15.0.913.22; Tue, 21 Apr 2015 22:22:08 -0400 Received: from USMA1EX-DAG1MB2.msg.corp.akamai.com ([172.27.123.102]) by usma1ex-dag1mb2.msg.corp.akamai.com ([172.27.123.102]) with mapi id 15.00.0913.011; Tue, 21 Apr 2015 22:22:08 -0400 From: "Salz, Rich" To: "Tirumaleswar Reddy (tireddy)" , "Williams, Brandon" , Martin Thomson Thread-Topic: [tram] Stephen Farrell's Discuss on draft-ietf-tram-turn-third-party-authz-13: (with DISCUSS and COMMENT) Thread-Index: AdB3YVGPz12ySXkWT06k1SM3uWcWXAFIhZcAAA98AgAAB6HLsA== Date: Wed, 22 Apr 2015 02:22:07 +0000 Message-ID: References: <913383AAA69FF945B8F946018B75898A4120E0BD@xmb-rcd-x10.cisco.com> <55369856.7050203@akamai.com> <913383AAA69FF945B8F946018B75898A41214674@xmb-rcd-x10.cisco.com> In-Reply-To: <913383AAA69FF945B8F946018B75898A41214674@xmb-rcd-x10.cisco.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [172.19.56.195] Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 Archived-At: X-Mailman-Approved-At: Wed, 22 Apr 2015 00:30:26 -0700 Cc: "rlb@ipv.sx" , "tram-chairs@ietf.org" , "tram@ietf.org" , "Stephen Farrell \(stephen.farrell@cs.tcd.ie\)" Subject: Re: [tram] Stephen Farrell's Discuss on draft-ietf-tram-turn-third-party-authz-13: (with DISCUSS and COMMENT) X-BeenThere: tram@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "Discussing the creation of a Turn Revised And Modernized \(TRAM\) WG, which goal is to consolidate the various initiatives to update TURN and STUN." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 22 Apr 2015 02:22:24 -0000 > HKDF https://tools.ietf.org/html/rfc5869 can be used to derive the key fo= r > SHA1 from 256-bit key Too complicated. Just do a SHA1 on the 256 bit key. -- =20 Senior Architect, Akamai Technologies IM: richsalz@jabber.at Twitter: RichSalz From nobody Wed Apr 22 00:30:28 2015 Return-Path: X-Original-To: tram@ietfa.amsl.com Delivered-To: tram@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 1F4521B318B; Tue, 21 Apr 2015 21:14:21 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.611 X-Spam-Level: X-Spam-Status: No, score=-2.611 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id cbZ357q_tfB3; Tue, 21 Apr 2015 21:14:19 -0700 (PDT) Received: from prod-mail-xrelay07.akamai.com (prod-mail-xrelay07.akamai.com [72.246.2.115]) by ietfa.amsl.com (Postfix) with ESMTP id C0E6A1B3191; Tue, 21 Apr 2015 21:14:15 -0700 (PDT) Received: from prod-mail-xrelay07.akamai.com (localhost.localdomain [127.0.0.1]) by postfix.imss70 (Postfix) with ESMTP id 0DDEA484BF; Wed, 22 Apr 2015 04:14:15 +0000 (GMT) Received: from prod-mail-relay06.akamai.com (prod-mail-relay06.akamai.com [172.17.120.126]) by prod-mail-xrelay07.akamai.com (Postfix) with ESMTP id 0226D484BE; Wed, 22 Apr 2015 04:14:15 +0000 (GMT) Received: from email.msg.corp.akamai.com (usma1ex-cas1.msg.corp.akamai.com [172.27.123.30]) by prod-mail-relay06.akamai.com (Postfix) with ESMTP id EFF6C2026; Wed, 22 Apr 2015 04:14:14 +0000 (GMT) Received: from USMA1EX-DAG1MB2.msg.corp.akamai.com (172.27.123.102) by usma1ex-dag1mb4.msg.corp.akamai.com (172.27.123.104) with Microsoft SMTP Server (TLS) id 15.0.913.22; Wed, 22 Apr 2015 00:14:14 -0400 Received: from USMA1EX-DAG1MB2.msg.corp.akamai.com ([172.27.123.102]) by usma1ex-dag1mb2.msg.corp.akamai.com ([172.27.123.102]) with mapi id 15.00.0913.011; Wed, 22 Apr 2015 00:14:14 -0400 From: "Salz, Rich" To: "Tirumaleswar Reddy (tireddy)" , "Williams, Brandon" , Martin Thomson Thread-Topic: [tram] Stephen Farrell's Discuss on draft-ietf-tram-turn-third-party-authz-13: (with DISCUSS and COMMENT) Thread-Index: AdB3YVGPz12ySXkWT06k1SM3uWcWXAFIhZcAAA98AgAAB6HLsP//6CYAgABCdGA= Date: Wed, 22 Apr 2015 04:14:14 +0000 Message-ID: <30eaf35d875745128662076920f72ae8@usma1ex-dag1mb2.msg.corp.akamai.com> References: <913383AAA69FF945B8F946018B75898A4120E0BD@xmb-rcd-x10.cisco.com> <55369856.7050203@akamai.com> <913383AAA69FF945B8F946018B75898A41214674@xmb-rcd-x10.cisco.com> <913383AAA69FF945B8F946018B75898A4121478B@xmb-rcd-x10.cisco.com> In-Reply-To: <913383AAA69FF945B8F946018B75898A4121478B@xmb-rcd-x10.cisco.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [172.19.56.195] Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 Archived-At: X-Mailman-Approved-At: Wed, 22 Apr 2015 00:30:26 -0700 Cc: "rlb@ipv.sx" , "tram-chairs@ietf.org" , "tram@ietf.org" , "Stephen Farrell \(stephen.farrell@cs.tcd.ie\)" Subject: Re: [tram] Stephen Farrell's Discuss on draft-ietf-tram-turn-third-party-authz-13: (with DISCUSS and COMMENT) X-BeenThere: tram@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "Discussing the creation of a Turn Revised And Modernized \(TRAM\) WG, which goal is to consolidate the various initiatives to update TURN and STUN." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 22 Apr 2015 04:14:21 -0000 > https://tools.ietf.org/html/rfc6194#section-3 discusses problems with SHA= 1. > Is it safe to derive key using SHA1 ? Those concerns do not apply here. Yes, absolutely safe. -- =20 Senior Architect, Akamai Technologies IM: richsalz@jabber.at Twitter: RichSalz From nobody Wed Apr 22 05:29:41 2015 Return-Path: X-Original-To: tram@ietfa.amsl.com Delivered-To: tram@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 651491B355C; Wed, 22 Apr 2015 05:29:34 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.9 X-Spam-Level: X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id mxlYUDM1vwZv; Wed, 22 Apr 2015 05:29:32 -0700 (PDT) Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id CC69F1B3560; Wed, 22 Apr 2015 05:29:27 -0700 (PDT) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: "Benoit Claise" To: "The IESG" X-Test-IDTracker: no X-IETF-IDTracker: 6.0.1.p1 Auto-Submitted: auto-generated Precedence: bulk Message-ID: <20150422122927.12413.25626.idtracker@ietfa.amsl.com> Date: Wed, 22 Apr 2015 05:29:27 -0700 Archived-At: Cc: tram-chairs@ietf.org, tram@ietf.org, draft-ietf-tram-stun-origin.shepherd@ietf.org, draft-ietf-tram-stun-origin.ad@ietf.org, sperreault@jive.com, draft-ietf-tram-stun-origin@ietf.org Subject: [tram] Benoit Claise's No Objection on draft-ietf-tram-stun-origin-05: (with COMMENT) X-BeenThere: tram@ietf.org X-Mailman-Version: 2.1.15 List-Id: "Discussing the creation of a Turn Revised And Modernized \(TRAM\) WG, which goal is to consolidate the various initiatives to update TURN and STUN." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 22 Apr 2015 12:29:34 -0000 Benoit Claise has entered the following ballot position for draft-ietf-tram-stun-origin-05: No Objection When responding, please keep the subject line intact and reply to all email addresses included in the To and CC lines. (Feel free to cut this introductory paragraph, however.) Please refer to http://www.ietf.org/iesg/statement/discuss-criteria.html for more information about IESG DISCUSS and COMMENT positions. The document, along with other ballot positions, can be found here: http://datatracker.ietf.org/doc/draft-ietf-tram-stun-origin/ ---------------------------------------------------------------------- COMMENT: ---------------------------------------------------------------------- A point of detail, really, if you update the draft. For a web application provider STUN or TURN server, the server will have no idea which web pages or sites are sending binding requests to the service. In conventional applications, the SOFTWARE attribute would provide some identifying information to the service, but that no longer works when the browser is the application. SOFTWARE attribute: a reference to http://tools.ietf.org/html/rfc5389#section-15.10 would be beneficial From nobody Wed Apr 22 09:56:05 2015 Return-Path: X-Original-To: tram@ietfa.amsl.com Delivered-To: tram@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E18A31B3718; Wed, 22 Apr 2015 09:56:01 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.999 X-Spam-Level: X-Spam-Status: No, score=-1.999 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, SPF_PASS=-0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id RBCMLCg0Viel; Wed, 22 Apr 2015 09:56:00 -0700 (PDT) Received: from mail-la0-x231.google.com (mail-la0-x231.google.com [IPv6:2a00:1450:4010:c03::231]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 2F75A1B3806; Wed, 22 Apr 2015 09:55:44 -0700 (PDT) Received: by laat2 with SMTP id t2so179664961laa.1; Wed, 22 Apr 2015 09:55:42 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :cc:content-type; bh=+0dTnxyHW2vJ8CRfatkFlTLpGjjk8AiikQUIEL9leDs=; b=MtqY63sqWgfEU2X0RZegNrzLaynA5GqP71kaINKOZQ8rWhIiO1+PeWpMHktoSST1iH B9Zn3Nf9E9U/92hnQLOUQEXgWsy33NAKPth3G8rC1A6bNybzyLQ5I2nx3z0hMvuUVTXC KbfT5KXHFNO1Py/zIo5z4jBkm1nIrsq4i+KnNqswUyr+TtGqZujoSiX0KTdEIyzfAVRD 8suuoWBE2FrW93SxuMN9SbsmCqBYDtq/gRhCwIhRHAqy9kn+kfzbODTd2PQHh4MlR3p2 /gwzYTjUupqj2iZZswBfZpHhBaUhAWJsTHgQWjQlklQYBEhYMIDP+FFjjnqrh3lpmaGn XHAw== MIME-Version: 1.0 X-Received: by 10.152.203.162 with SMTP id kr2mr25566863lac.68.1429721742684; Wed, 22 Apr 2015 09:55:42 -0700 (PDT) Received: by 10.152.129.3 with HTTP; Wed, 22 Apr 2015 09:55:42 -0700 (PDT) In-Reply-To: <30eaf35d875745128662076920f72ae8@usma1ex-dag1mb2.msg.corp.akamai.com> References: <913383AAA69FF945B8F946018B75898A4120E0BD@xmb-rcd-x10.cisco.com> <55369856.7050203@akamai.com> <913383AAA69FF945B8F946018B75898A41214674@xmb-rcd-x10.cisco.com> <913383AAA69FF945B8F946018B75898A4121478B@xmb-rcd-x10.cisco.com> <30eaf35d875745128662076920f72ae8@usma1ex-dag1mb2.msg.corp.akamai.com> Date: Wed, 22 Apr 2015 11:55:42 -0500 Message-ID: From: Spencer Dawkins at IETF To: "Salz, Rich" Content-Type: multipart/alternative; boundary=001a1134632699b9640514530894 Archived-At: Cc: "tram-chairs@ietf.org" , "tram@ietf.org" , "rlb@ipv.sx" , "Tirumaleswar Reddy \(tireddy\)" , "Williams, Brandon" , Martin Thomson , "Stephen Farrell \(stephen.farrell@cs.tcd.ie\)" Subject: Re: [tram] Stephen Farrell's Discuss on draft-ietf-tram-turn-third-party-authz-13: (with DISCUSS and COMMENT) X-BeenThere: tram@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "Discussing the creation of a Turn Revised And Modernized \(TRAM\) WG, which goal is to consolidate the various initiatives to update TURN and STUN." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 22 Apr 2015 16:56:02 -0000 --001a1134632699b9640514530894 Content-Type: text/plain; charset=UTF-8 Hi, Rich, On Tue, Apr 21, 2015 at 11:14 PM, Salz, Rich wrote: > > https://tools.ietf.org/html/rfc6194#section-3 discusses problems with > SHA1. > > Is it safe to derive key using SHA1 ? > > Those concerns do not apply here. Yes, absolutely safe. > I saw that Tiru has already made that change in a later mail in this thread, and that's fine. This is just for my education. I'm not in my native element here, so I'm not questioning your statement, but could you explain to me (I'm thinking like a sentence, not like a thesis) on why those concerns don't apply? Another AD could reasonably ask during balloting or the telechat, because we all know to twitch when SHA-1 is mentioned, and I'd like to be able to provide more than a shrug :-) > -- > Senior Architect, Akamai Technologies > IM: richsalz@jabber.at Twitter: RichSalz > > _______________________________________________ > tram mailing list > tram@ietf.org > https://www.ietf.org/mailman/listinfo/tram > --001a1134632699b9640514530894 Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: quoted-printable
Hi, Rich,

On Tue, Apr 21, 2015 at 11:14 PM, Salz, Rich <= ;rsalz@akamai.com= > wrote:
> https://tools= .ietf.org/html/rfc6194#section-3 discusses problems with SHA1.
> Is it safe to derive key using SHA1 ?

Those concerns do not apply here.=C2=A0 Yes, absolutely safe.

I saw that Tiru has already made that change = in a later mail in this thread, and that's fine. This is just for my ed= ucation.=C2=A0

I'm not in my native element he= re, so I'm not questioning your statement, but could you explain to me = (I'm thinking like a sentence, not like a thesis) on why those concerns= don't apply?

Another AD could reasonably ask = during balloting or the telechat, because we all know to twitch when SHA-1 = is mentioned, and I'd like to be able to provide more than a shrug :-)<= /div>
=C2=A0
--
Senior Architect, Akamai Technologies
IM: richsalz@jabber.at Twitter: R= ichSalz

_______________________________________________
tram mailing list
tram@ietf.org
ht= tps://www.ietf.org/mailman/listinfo/tram

--001a1134632699b9640514530894-- From nobody Wed Apr 22 13:44:47 2015 Return-Path: X-Original-To: tram@ietfa.amsl.com Delivered-To: tram@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 0598C1A00BD; Wed, 22 Apr 2015 13:44:46 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.999 X-Spam-Level: X-Spam-Status: No, score=-1.999 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, SPF_PASS=-0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id K2v2AtM-iiBB; Wed, 22 Apr 2015 13:44:44 -0700 (PDT) Received: from mail-lb0-x22d.google.com (mail-lb0-x22d.google.com [IPv6:2a00:1450:4010:c04::22d]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id BA5551A0084; Wed, 22 Apr 2015 13:44:40 -0700 (PDT) Received: by lbbzk7 with SMTP id zk7so189689375lbb.0; Wed, 22 Apr 2015 13:44:39 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :cc:content-type; bh=ULPThhiWJnUrbsHgDNnGyM03jtBKWi5rdCyhAA4UQRo=; b=YwLLyD1LlKU/I43vu8upkbP+nW8cqBUvs68iNbtT+SLJ9nHvp2aDosMTRMcLjIn2rs y/meb5SkZjyKh7dUbaigLH55K7L7SvEJgHQ0XcmDPYPSsFR22ANb9LUSeE6LU8iX56RC EBKjFBQzqnuT14SSmsBzI+suKcSX1XLF35yCWgxE58BSp063SXjG43af8i42U4+EKGaR oVEx2/GUVeUcDiB4FHuHWpcyYO/356VloF4QNH8PCWsXzxE4YA0WI7KsXv87TEqCaEFs 8Bpp5ske1OaVpu2kuvwnzlkketEJbJ4ldXDitIc+CP6z2UqmL19aqk4cgfOGiXFOA7SK W+pg== MIME-Version: 1.0 X-Received: by 10.152.203.162 with SMTP id kr2mr26379864lac.68.1429735479302; Wed, 22 Apr 2015 13:44:39 -0700 (PDT) Received: by 10.152.129.3 with HTTP; Wed, 22 Apr 2015 13:44:39 -0700 (PDT) In-Reply-To: References: <913383AAA69FF945B8F946018B75898A4120E0BD@xmb-rcd-x10.cisco.com> <55369856.7050203@akamai.com> <913383AAA69FF945B8F946018B75898A41214674@xmb-rcd-x10.cisco.com> <913383AAA69FF945B8F946018B75898A4121478B@xmb-rcd-x10.cisco.com> <30eaf35d875745128662076920f72ae8@usma1ex-dag1mb2.msg.corp.akamai.com> Date: Wed, 22 Apr 2015 15:44:39 -0500 Message-ID: From: Spencer Dawkins at IETF To: "Salz, Rich" Content-Type: multipart/alternative; boundary=001a113463265de0d40514563b98 Archived-At: Cc: "tram-chairs@ietf.org" , "tram@ietf.org" , "rlb@ipv.sx" , "Tirumaleswar Reddy \(tireddy\)" , "Williams, Brandon" , Martin Thomson , "Stephen Farrell \(stephen.farrell@cs.tcd.ie\)" Subject: Re: [tram] Stephen Farrell's Discuss on draft-ietf-tram-turn-third-party-authz-13: (with DISCUSS and COMMENT) X-BeenThere: tram@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "Discussing the creation of a Turn Revised And Modernized \(TRAM\) WG, which goal is to consolidate the various initiatives to update TURN and STUN." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 22 Apr 2015 20:44:46 -0000 --001a113463265de0d40514563b98 Content-Type: text/plain; charset=UTF-8 Hi, Rich, On Wed, Apr 22, 2015 at 12:13 PM, Salz, Rich wrote: > > but could you explain to me (I'm thinking like a sentence, not like a > thesis) on why those concerns don't apply? > > Sure. First, look at https://tools.ietf.org/html/rfc6194#section-3 and > quote that :) > > Second, this is not being used as a public signature mechanism, but as a > private key for an HMAC. That was my uninformed guess ... and I knew how uninformed it was. > So you can't modify "original content" to find a collision since you don't > have the content, and more importantly, you don't have the digest value for > which the attacker is trying to find a collision. > > Hope that helps. > Extremely. My uninformed guess was a much less detailed version of that, and the details are very helpful. Thank you for investing a moment in helping to raise the average AD IQ! Spencer --001a113463265de0d40514563b98 Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: quoted-printable
Hi, Rich,

On Wed, Apr 22, 2015 at 12:13 PM, Salz, Rich <= ;rsalz@akamai.com= > wrote:
> = but could you explain to me (I'm thinking like a sentence, not like a t= hesis) on why those concerns don't apply?

Sure.=C2=A0 First, look at https://tools.ietf.org/html/rfc6194#sect= ion-3=C2=A0 and quote that :)

Second, this is not being used as a public signature mechanism, but as a pr= ivate key for an HMAC.

That was my uninfor= med guess ... and I knew how uninformed it was.
=C2=A0
So you can't modify "original content&qu= ot; to find a collision since you don't have the content, and more impo= rtantly, you don't have the digest value for which the attacker is tryi= ng to find a collision.

Hope that helps.

Extremely. My uninf= ormed guess was a much less detailed version of that, and the details are v= ery helpful.

Thank you for investing a moment in helping to raise the average AD = IQ!

Sp= encer
--001a113463265de0d40514563b98-- From nobody Thu Apr 23 05:22:37 2015 Return-Path: X-Original-To: tram@ietfa.amsl.com Delivered-To: tram@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 3BA911B3057; Thu, 23 Apr 2015 05:22:33 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -5.033 X-Spam-Level: X-Spam-Status: No, score=-5.033 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, HTML_MESSAGE=0.001, HTML_TAG_BALANCE_BODY=1.157, J_CHICKENPOX_34=0.6, RCVD_IN_DNSWL_HI=-5, SPF_PASS=-0.001, T_DKIM_INVALID=0.01, T_HTML_ATTACH=0.01, T_RP_MATCHES_RCVD=-0.01] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 2mvytnNh1rvr; Thu, 23 Apr 2015 05:22:24 -0700 (PDT) Received: from alln-iport-5.cisco.com (alln-iport-5.cisco.com [173.37.142.92]) (using TLSv1 with cipher RC4-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 0C1991B305C; Thu, 23 Apr 2015 05:22:19 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=484902; q=dns/txt; s=iport; t=1429791741; x=1431001341; h=from:to:cc:subject:date:message-id:references: in-reply-to:mime-version; bh=aqNbsRs94vztcBGoRTU+erM/Zt5vJC4B7wj2tHH0VPQ=; b=Q8OPHIZE24oA4AJ1X4es+9nNNRE7q4xDY1Cr9ZGr8vZkN8aUTgoa6qG1 Hn8srAM8NuP1X4ksbpVLtLFVi+wqubELqMhaBxnoiCMTU1qLDQXJ5KjNy UpTRjmy5roNfT3gyQ4iJPf5dfzx07jmVSqGxBYlNMc3aYMirnoV5mN1H1 M=; X-Files: Diff draft-ietf-tram-turn-third-party-authz-14.txt - draft-ietf-tram-turn-third-party-authz-15.txt.htm, draft-ietf-tram-turn-third-party-authz-15.txt : 288815, 61933 X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: A0DdBABN4zhV/51dJa3KUYpJAgIBAoEK X-IronPort-AV: E=Sophos;i="5.11,630,1422921600"; d="htm'217?txt'217?scan'217,208,217";a="143853607" Received: from rcdn-core-6.cisco.com ([173.37.93.157]) by alln-iport-5.cisco.com with ESMTP; 23 Apr 2015 12:22:20 +0000 Received: from xhc-aln-x06.cisco.com (xhc-aln-x06.cisco.com [173.36.12.80]) by rcdn-core-6.cisco.com (8.14.5/8.14.5) with ESMTP id t3NCMJt2003370 (version=TLSv1/SSLv3 cipher=AES128-SHA bits=128 verify=FAIL); Thu, 23 Apr 2015 12:22:19 GMT Received: from xmb-rcd-x10.cisco.com ([169.254.15.218]) by xhc-aln-x06.cisco.com ([173.36.12.80]) with mapi id 14.03.0195.001; Thu, 23 Apr 2015 07:22:18 -0500 From: "Tirumaleswar Reddy (tireddy)" To: Brandon Williams , Stephen Farrell , The IESG Thread-Topic: [tram] Stephen Farrell's Discuss on draft-ietf-tram-turn-third-party-authz-13: (with DISCUSS and COMMENT) Thread-Index: AdB3ljKzAA33GpUaTLec5SjFMg7ybgE9jWMAAEzg3nA= Date: Thu, 23 Apr 2015 12:22:18 +0000 Message-ID: <913383AAA69FF945B8F946018B75898A4781BD48@xmb-rcd-x10.cisco.com> References: <913383AAA69FF945B8F946018B75898A4120E55C@xmb-rcd-x10.cisco.com> <55369960.9070609@akamai.com> In-Reply-To: <55369960.9070609@akamai.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: yes X-MS-TNEF-Correlator: x-originating-ip: [10.65.47.202] Content-Type: multipart/mixed; boundary="_003_913383AAA69FF945B8F946018B75898A4781BD48xmbrcdx10ciscoc_" MIME-Version: 1.0 Archived-At: Cc: "tram-chairs@ietf.org" , "tram@ietf.org" , "draft-ietf-tram-turn-third-party-authz@ietf.org" , "gonzalo.camarillo@ericsson.com" , "draft-ietf-tram-turn-third-party-authz.ad@ietf.org" , "draft-ietf-tram-turn-third-party-authz.shepherd@ietf.org" Subject: Re: [tram] Stephen Farrell's Discuss on draft-ietf-tram-turn-third-party-authz-13: (with DISCUSS and COMMENT) X-BeenThere: tram@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "Discussing the creation of a Turn Revised And Modernized \(TRAM\) WG, which goal is to consolidate the various initiatives to update TURN and STUN." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 23 Apr 2015 12:22:33 -0000 --_003_913383AAA69FF945B8F946018B75898A4781BD48xmbrcdx10ciscoc_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 PiAtLS0tLU9yaWdpbmFsIE1lc3NhZ2UtLS0tLQ0KPiBGcm9tOiBCcmFuZG9uIFdpbGxpYW1zIFtt YWlsdG86YnJhbmRvbi53aWxsaWFtc0Bha2FtYWkuY29tXQ0KPiBTZW50OiBXZWRuZXNkYXksIEFw cmlsIDIyLCAyMDE1IDEyOjA5IEFNDQo+IFRvOiBUaXJ1bWFsZXN3YXIgUmVkZHkgKHRpcmVkZHkp OyBTdGVwaGVuIEZhcnJlbGw7IFRoZSBJRVNHDQo+IENjOiB0cmFtLWNoYWlyc0BpZXRmLm9yZzsg dHJhbUBpZXRmLm9yZzsgZHJhZnQtaWV0Zi10cmFtLXR1cm4tdGhpcmQtcGFydHktDQo+IGF1dGh6 QGlldGYub3JnOyBnb256YWxvLmNhbWFyaWxsb0Blcmljc3Nvbi5jb207IGRyYWZ0LWlldGYtdHJh bS10dXJuLXRoaXJkLQ0KPiBwYXJ0eS1hdXRoei5hZEBpZXRmLm9yZzsgZHJhZnQtaWV0Zi10cmFt LXR1cm4tdGhpcmQtcGFydHktDQo+IGF1dGh6LnNoZXBoZXJkQGlldGYub3JnDQo+IFN1YmplY3Q6 IFJlOiBbdHJhbV0gU3RlcGhlbiBGYXJyZWxsJ3MgRGlzY3VzcyBvbiBkcmFmdC1pZXRmLXRyYW0t dHVybi10aGlyZC0NCj4gcGFydHktYXV0aHotMTM6ICh3aXRoIERJU0NVU1MgYW5kIENPTU1FTlQp DQo+IA0KPiBPbiAwNC8xNS8yMDE1IDEyOjA2IFBNLCBUaXJ1bWFsZXN3YXIgUmVkZHkgKHRpcmVk ZHkpIHdyb3RlOg0KPiA+PiAtLS0tLU9yaWdpbmFsIE1lc3NhZ2UtLS0tLQ0KPiA+PiBGcm9tOiBC cmFuZG9uIFdpbGxpYW1zIFttYWlsdG86YnJhbmRvbi53aWxsaWFtc0Bha2FtYWkuY29tXQ0KPiA+ PiBTZW50OiBUdWVzZGF5LCBBcHJpbCAxNCwgMjAxNSA2OjM2IFBNDQo+ID4+DQo+ID4+IE9uIDA0 LzEwLzIwMTUgMTE6MDcgUE0sIFRpcnVtYWxlc3dhciBSZWRkeSAodGlyZWRkeSkgd3JvdGU6DQo+ ID4+Pj4gLS0tLS1PcmlnaW5hbCBNZXNzYWdlLS0tLS0NCj4gPj4+PiBGcm9tOiBTdGVwaGVuIEZh cnJlbGwgW21haWx0bzpzdGVwaGVuLmZhcnJlbGxAY3MudGNkLmllXQ0KPiA+Pj4+IFNlbnQ6IFNh dHVyZGF5LCBBcHJpbCAxMSwgMjAxNSAxOjA4IEFNDQo+ID4+Pj4gLSA5OiBGaWd1cmUgMiBzaG91 bGQgYmUgd2F5IHVwIGF0IHRoZSB0b3Agb2YgdGhlIGRvY3VtZW50IGFuZCBub3QNCj4gPj4+PiBo ZXJlDQo+ID4+Pg0KPiA+Pj4gSW4gdGhlIHByZXZpb3VzIHZlcnNpb25zIGl0IHdhcyBpbiB0aGUg dG9wIG9mIHRoZSBkb2N1bWVudCBidXQgbW92ZWQNCj4gPj4gZG93biBhZnRlciBjb21tZW50cyBy ZWNlaXZlZCBmcm9tIHRoZSBXRyB0aGF0IFdlYlJUQyBpcyBvbmx5IGFuDQo+ID4+IGV4YW1wbGUg dXNhZ2Ugb2YgdGhpcmQgcGFydHkgYXV0aG9yaXphdGlvbi4NCj4gPj4NCj4gPj4gQSBmZXcgcGVv cGxlIGZyb20gb3V0c2lkZSB0aGUgV0cgaGF2ZSBjb21tZW50ZWQgb24gaGF2aW5nIHRyb3VibGUN Cj4gPj4gZm9sbG93aW5nIHRoZSBmbG93IG9mIHRoZSBkb2N1bWVudCBvbiB0aGVpciBmaXJzdCBy ZWFkLCBwcmltYXJpbHkgZHVlDQo+ID4+IHRvIHRoZSBsYWNrIG9mIGEgaGlnaC1sZXZlbCBwaWN0 dXJlIGVhcmx5IGluIHRoZSBkb2N1bWVudC4gTW92aW5nDQo+ID4+IHNlY3Rpb24gOSBiYWNrIHVw IHRvd2FyZCB0aGUgdG9wIG9mIHRoZSBkb2N1bWVudCB3b3VsZCBoZWxwIGJ5IGdpdmluZw0KPiA+ PiByZWFkZXJzIHN1Y2ggYSBoaWdoLSBsZXZlbCBvdmVydmlldyBlYXJseSBvbi4gVGhlIGRpc2N1 c3Npb24gbWlnaHQNCj4gPj4gbmVlZCB0byBiZSBnZW5lcmFsaXplZCBhIGJpdCBpbiBvcmRlciB0 byBzZXJ2ZSB0aGlzIHB1cnBvc2UsIGJ1dA0KPiA+PiBjb21tZW50cyB3ZSd2ZSByZWNlaXZlZCBv biB0aGUgZG9jdW1lbnQncyB1c2FiaWxpdHkgaW5kaWNhdGUgdGhhdCB0aGlzDQo+IGNoYW5nZSB3 b3VsZCBiZSBoZWxwZnVsLg0KPiA+DQo+ID4gU2VjdGlvbiA5IGlzIHNwZWNpZmljIHRvIFRVUk4g YW5kIHRoZSBhc2sgZnJvbSB0aGUgV0cgaXMgdG8gZGlzY3VzcyBpdCBpbiBhDQo+IHNlcGFyYXRl IHNlY3Rpb24gYWZ0ZXIgdGhpcmQgcGFydHkgYXV0aG9yaXphdGlvbiB3aXRoIFNUVU4gcHJvdG9j b2wgaXMNCj4gZXhwbGFpbmVkLg0KPiANCj4gRW5vdWdoIHBlb3BsZSB3aG8gd2VyZSBub3QgYWN0 aXZlbHkgaW52b2x2ZWQgaW4gZm9ybXVsYXRpb24gb2YgdGhlIGRyYWZ0DQo+IGhhdmUgY29tbWVu dGVkIG9uIHVuZGVyc3RhbmRhYmlsaXR5IGlzc3VlcyB0aGF0IEkgdGhpbmsgaXQgd291bGQgYmUg Z29vZA0KPiB0byBtYWtlIHNvbWUgZWZmb3J0IGluIHRoYXQgYXJlYS4gDQoNCkkgaGF2ZSByZS1h cnJhbmdlZCBzZWN0aW9ucyA5IGFuZCAzLiBBdHRhY2hlZCB1cGRhdGVkIGRyYWZ0IHdpdGggZGlm ZiwgUGxlYXNlIGhhdmUgYSBsb29rLg0KDQotVGlydQ0KDQo+IElmIHNlY3Rpb24gOSBjYW5ub3Qg YmUgZ2VuZXJhbGl6ZWQgYW5kDQo+IG1vdmVkIGVhcmxpZXIgaW4gdGhlIGRvY3VtZW50IGFzIGEg d2F5IHRvIGhlbHAgcmVhZGVycyBmcm9tIG91dHNpZGUgdGhlDQo+IFdHIHVuZGVyc3RhbmQgdGhl IGNvbnRleHQsIHRoZW4gSSB0aGluayBzb21ldGhpbmcgZWxzZSBwcm9iYWJseSBzdGlsbCBuZWVk cw0KPiB0byBiZSBkb25lLg0KPiANCj4gLS1CcmFuZG9uDQo+IA0KPiAtLQ0KPiBCcmFuZG9uIFdp bGxpYW1zOyBDaGllZiBBcmNoaXRlY3QNCj4gQ2xvdWQgTmV0d29ya2luZzsgQWthbWFpIFRlY2hu b2xvZ2llcyBJbmMuDQo= --_003_913383AAA69FF945B8F946018B75898A4781BD48xmbrcdx10ciscoc_ Content-Type: text/html; name="Diff draft-ietf-tram-turn-third-party-authz-14.txt - draft-ietf-tram-turn-third-party-authz-15.txt.htm" Content-Description: Diff draft-ietf-tram-turn-third-party-authz-14.txt - draft-ietf-tram-turn-third-party-authz-15.txt.htm Content-Disposition: attachment; filename="Diff draft-ietf-tram-turn-third-party-authz-14.txt - draft-ietf-tram-turn-third-party-authz-15.txt.htm"; size=288815; creation-date="Thu, 16 Apr 2015 11:02:45 GMT"; modification-date="Wed, 22 Apr 2015 06:09:34 GMT" Content-Transfer-Encoding: base64 PCFET0NUWVBFIGh0bWwgUFVCTElDICItLy9XM0MvL0RURCBYSFRNTCAxLjAgVHJhbnNpdGlvbmFs Ly9FTiIgImh0dHA6Ly93d3cudzMub3JnL1RSL3hodG1sMS9EVEQveGh0bWwxLXRyYW5zaXRpb25h bC5kdGQiPg0KPCEtLSBHZW5lcmF0ZWQgYnkgcmZjZGlmZiAxLjQyOiByZmNkaWZmICAtLT4NCjwh LS0gPCFET0NUWVBFIGh0bWwgUFVCTElDICItLy9XM0MvL0RURCBIVE1MIDQuMDEgVHJhbnNpdGlv bmFsIiA+IC0tPg0KPCEtLSBTeXN0ZW06IExpbnV4IHppbmZhbmRlbCAzLjIuMC00LWFtZDY0ICMx IFNNUCBEZWJpYW4gMy4yLjM1LTIgeDg2XzY0IEdOVS9MaW51eCAtLT4NCjwhLS0gVXNpbmcgYXdr OiAvdXNyL2Jpbi9nYXdrOiBHTlUgQXdrIDQuMC4xIC0tPg0KPCEtLSBVc2luZyBkaWZmOiAvdXNy L2Jpbi9kaWZmOiBkaWZmIChHTlUgZGlmZnV0aWxzKSAzLjIgLS0+DQo8IS0tIFVzaW5nIHdkaWZm OiAvdXNyL2Jpbi93ZGlmZjogd2RpZmYgKEdOVSB3ZGlmZikgMS4xLjIgLS0+DQo8aHRtbD48aGVh ZD4gDQogIDxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIgY29udGVudD0idGV4dC9odG1s OyBjaGFyc2V0PVVURi04Ij4gDQogIDxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtU3R5bGUtVHlw ZSIgY29udGVudD0idGV4dC9jc3MiPiANCiAgPHRpdGxlPkRpZmY6IGRyYWZ0LWlldGYtdHJhbS10 dXJuLXRoaXJkLXBhcnR5LWF1dGh6LTE0LnR4dCAtIGRyYWZ0LWlldGYtdHJhbS10dXJuLXRoaXJk LXBhcnR5LWF1dGh6LTE1LnR4dDwvdGl0bGU+IA0KICA8c3R5bGUgdHlwZT0idGV4dC9jc3MiPiAN CiAgICBib2R5ICAgIHsgbWFyZ2luOiAwLjRleDsgbWFyZ2luLXJpZ2h0OiBhdXRvOyB9IA0KICAg IHRyICAgICAgeyB9IA0KICAgIHRkICAgICAgeyB3aGl0ZS1zcGFjZTogcHJlOyBmb250LWZhbWls eTogbW9ub3NwYWNlOyB2ZXJ0aWNhbC1hbGlnbjogdG9wOyBmb250LXNpemU6IDAuODZlbTt9IA0K ICAgIHRoICAgICAgeyBmb250LXNpemU6IDAuODZlbTsgfSANCiAgICAuc21hbGwgIHsgZm9udC1z aXplOiAwLjZlbTsgZm9udC1zdHlsZTogaXRhbGljOyBmb250LWZhbWlseTogVmVyZGFuYSwgSGVs dmV0aWNhLCBzYW5zLXNlcmlmOyB9IA0KICAgIC5sZWZ0ICAgeyBiYWNrZ3JvdW5kLWNvbG9yOiAj RUVFOyB9IA0KICAgIC5yaWdodCAgeyBiYWNrZ3JvdW5kLWNvbG9yOiAjRkZGOyB9IA0KICAgIC5k aWZmICAgeyBiYWNrZ3JvdW5kLWNvbG9yOiAjQ0NGOyB9IA0KICAgIC5sYmxvY2sgeyBiYWNrZ3Jv dW5kLWNvbG9yOiAjQkZCOyB9IA0KICAgIC5yYmxvY2sgeyBiYWNrZ3JvdW5kLWNvbG9yOiAjRkY4 OyB9IA0KICAgIC5pbnNlcnQgeyBiYWNrZ3JvdW5kLWNvbG9yOiAjOEZGOyB9IA0KICAgIC5kZWxl dGUgeyBiYWNrZ3JvdW5kLWNvbG9yOiAjQUNGOyB9IA0KICAgIC52b2lkICAgeyBiYWNrZ3JvdW5k LWNvbG9yOiAjRkZCOyB9IA0KICAgIC5jb250ICAgeyBiYWNrZ3JvdW5kLWNvbG9yOiAjRUVFOyB9 IA0KICAgIC5saW5lYnIgeyBiYWNrZ3JvdW5kLWNvbG9yOiAjQUFBOyB9IA0KICAgIC5saW5lbm8g eyBjb2xvcjogcmVkOyBiYWNrZ3JvdW5kLWNvbG9yOiAjRkZGOyBmb250LXNpemU6IDAuN2VtOyB0 ZXh0LWFsaWduOiByaWdodDsgcGFkZGluZzogMCAycHg7IH0gDQogICAgLmVsaXBzaXN7IGJhY2tn cm91bmQtY29sb3I6ICNBQUE7IH0gDQogICAgLmxlZnQgLmNvbnQgeyBiYWNrZ3JvdW5kLWNvbG9y OiAjREREOyB9IA0KICAgIC5yaWdodCAuY29udCB7IGJhY2tncm91bmQtY29sb3I6ICNFRUU7IH0g DQogICAgLmxibG9jayAuY29udCB7IGJhY2tncm91bmQtY29sb3I6ICM5RDk7IH0gDQogICAgLnJi bG9jayAuY29udCB7IGJhY2tncm91bmQtY29sb3I6ICNERDY7IH0gDQogICAgLmluc2VydCAuY29u dCB7IGJhY2tncm91bmQtY29sb3I6ICMwREQ7IH0gDQogICAgLmRlbGV0ZSAuY29udCB7IGJhY2tn cm91bmQtY29sb3I6ICM4QUQ7IH0gDQogICAgLnN0YXRzLCAuc3RhdHMgdGQsIC5zdGF0cyB0aCB7 IGJhY2tncm91bmQtY29sb3I6ICNFRUU7IHBhZGRpbmc6IDJweCAwOyB9IA0KICA8L3N0eWxlPiAN CjwvaGVhZD4gDQo8Ym9keT4gDQogIDx0YWJsZSBib3JkZXI9IjAiIGNlbGxwYWRkaW5nPSIwIiBj ZWxsc3BhY2luZz0iMCI+IA0KICA8dGJvZHk+PHRyIGJnY29sb3I9Im9yYW5nZSI+PHRoPjwvdGg+ PHRoPjxhIGhyZWY9Imh0dHA6Ly90b29scy5pZXRmLm9yZy9yZmNkaWZmP3VybDI9ZHJhZnQtaWV0 Zi10cmFtLXR1cm4tdGhpcmQtcGFydHktYXV0aHotMTQudHh0IiBzdHlsZT0iY29sb3I6IzAwODsg dGV4dC1kZWNvcmF0aW9uOm5vbmU7Ij4mbHQ7PC9hPiZuYnNwOzxhIGhyZWY9Imh0dHBzOi8vdG9v bHMuaWV0Zi5vcmcvaHRtbC9kcmFmdC1pZXRmLXRyYW0tdHVybi10aGlyZC1wYXJ0eS1hdXRoei0x NC50eHQiIHN0eWxlPSJjb2xvcjojMDA4Ij5kcmFmdC1pZXRmLXRyYW0tdHVybi10aGlyZC1wYXJ0 eS1hdXRoei0xNC50eHQ8L2E+Jm5ic3A7PC90aD48dGg+IDwvdGg+PHRoPiZuYnNwOzxhIGhyZWY9 Imh0dHBzOi8vdG9vbHMuaWV0Zi5vcmcvaHRtbC9kcmFmdC1pZXRmLXRyYW0tdHVybi10aGlyZC1w YXJ0eS1hdXRoei0xNS50eHQiIHN0eWxlPSJjb2xvcjojMDA4Ij5kcmFmdC1pZXRmLXRyYW0tdHVy bi10aGlyZC1wYXJ0eS1hdXRoei0xNS50eHQ8L2E+Jm5ic3A7PGEgaHJlZj0iaHR0cDovL3Rvb2xz LmlldGYub3JnL3JmY2RpZmY/dXJsMT1kcmFmdC1pZXRmLXRyYW0tdHVybi10aGlyZC1wYXJ0eS1h dXRoei0xNS50eHQiIHN0eWxlPSJjb2xvcjojMDA4OyB0ZXh0LWRlY29yYXRpb246bm9uZTsiPiZn dDs8L2E+PC90aD48dGg+PC90aD48L3RyPiANCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIg dmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij48L3RkPjx0ZD4gPC90ZD48dGQgY2xh c3M9InJpZ2h0Ij48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3Ry Pg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xh c3M9ImxlZnQiPlRSQU0gICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICBULiBSZWRkeTwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQi PlRSQU0gICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICBULiBSZWRkeTwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3Rk PjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0 ZCBjbGFzcz0ibGVmdCI+SW50ZXJuZXQtRHJhZnQgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgIFAuIFBhdGlsPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJy aWdodCI+SW50ZXJuZXQtRHJhZnQgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgIFAuIFBhdGlsPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3Ai PjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwv dGQ+PHRkIGNsYXNzPSJsZWZ0Ij5JbnRlbmRlZCBzdGF0dXM6IFN0YW5kYXJkcyBUcmFjayAgICAg ICAgICAgICAgICAgICAgICAgICBSLiBSYXZpbmRyYW5hdGg8L3RkPjx0ZD4gPC90ZD48dGQgY2xh c3M9InJpZ2h0Ij5JbnRlbmRlZCBzdGF0dXM6IFN0YW5kYXJkcyBUcmFjayAgICAgICAgICAgICAg ICAgICAgICAgICBSLiBSYXZpbmRyYW5hdGg8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249 InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZD48YSBuYW1lPSJkaWZmMDAwMSI+PC9hPjwv dGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+ PHRkIGNsYXNzPSJsYmxvY2siPkV4cGlyZXM6IE9jdG9iZXIgPHNwYW4gY2xhc3M9ImRlbGV0ZSI+ MTc8L3NwYW4+LCAyMDE1ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg Q2lzY288L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+RXhwaXJlczogT2N0b2JlciA8 c3BhbiBjbGFzcz0iaW5zZXJ0Ij4yMzwvc3Bhbj4sIDIwMTUgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICBDaXNjbzwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0i dG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9w Ij48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgSi4gVWJlcnRpPC90ZD48dGQ+IDwvdGQ+PHRk IGNsYXNzPSJyaWdodCI+ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgSi4gVWJlcnRpPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFs aWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWdu PSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICBHb29nbGU8L3RkPjx0ZD4gPC90 ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICBHb29nbGU8L3RkPjx0ZCBjbGFzcz0ibGluZW5v IiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZD48YSBuYW1lPSJkaWZmMDAw MiI+PC9hPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0 b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPiAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICBBcHJpbCA8c3BhbiBjbGFzcz0iZGVsZXRlIj4x NTwvc3Bhbj4sIDIwMTU8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+ICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIEFwcmlsIDxz cGFuIGNsYXNzPSJpbnNlcnQiPjIxPC9zcGFuPiwgMjAxNTwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8i IHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZh bGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNz PSJyaWdodCI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4N CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNz PSJsZWZ0Ij4gIFNlc3Npb24gVHJhdmVyc2FsIFV0aWxpdGllcyBmb3IgTkFUIChTVFVOKSBFeHRl bnNpb24gZm9yIFRoaXJkIFBhcnR5PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICBT ZXNzaW9uIFRyYXZlcnNhbCBVdGlsaXRpZXMgZm9yIE5BVCAoU1RVTikgRXh0ZW5zaW9uIGZvciBU aGlyZCBQYXJ0eTwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+ DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFz cz0ibGVmdCI+ICAgICAgICAgICAgICAgICAgICAgICAgICAgICBBdXRob3JpemF0aW9uPC90ZD48 dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgICAgICAgICAgICAgICAgICAgICAgICAgICBB dXRob3JpemF0aW9uPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90 cj4NCiAgICAgIDx0cj48dGQ+PGEgbmFtZT0iZGlmZjAwMDMiPjwvYT48L3RkPjwvdHI+DQogICAg ICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJs b2NrIj4gICAgICAgICAgICAgICBkcmFmdC1pZXRmLXRyYW0tdHVybi10aGlyZC1wYXJ0eS1hdXRo ei0xPHNwYW4gY2xhc3M9ImRlbGV0ZSI+NDwvc3Bhbj48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9 InJibG9jayI+ICAgICAgICAgICAgICAgZHJhZnQtaWV0Zi10cmFtLXR1cm4tdGhpcmQtcGFydHkt YXV0aHotMTxzcGFuIGNsYXNzPSJpbnNlcnQiPjU8L3NwYW4+PC90ZD48dGQgY2xhc3M9ImxpbmVu byIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIg dmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij48L3RkPjx0ZD4gPC90ZD48dGQgY2xh c3M9InJpZ2h0Ij48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3Ry Pg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xh c3M9ImxlZnQiPkFic3RyYWN0PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+QWJzdHJh Y3Q8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAg PHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQi PjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8i IHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZh bGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgVGhpcyBkb2N1bWVudCBwcm9wb3Nl cyB0aGUgdXNlIG9mIE9BdXRoIDIuMCB0byBvYnRhaW4gYW5kIHZhbGlkYXRlPC90ZD48dGQ+IDwv dGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgVGhpcyBkb2N1bWVudCBwcm9wb3NlcyB0aGUgdXNlIG9m IE9BdXRoIDIuMCB0byBvYnRhaW4gYW5kIHZhbGlkYXRlPC90ZD48dGQgY2xhc3M9ImxpbmVubyIg dmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFs aWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBlcGhlbWVyYWwgdG9rZW5zIHRoYXQg Y2FuIGJlIHVzZWQgZm9yIFNlc3Npb24gVHJhdmVyc2FsIFV0aWxpdGllcyBmb3I8L3RkPjx0ZD4g PC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBlcGhlbWVyYWwgdG9rZW5zIHRoYXQgY2FuIGJlIHVz ZWQgZm9yIFNlc3Npb24gVHJhdmVyc2FsIFV0aWxpdGllcyBmb3I8L3RkPjx0ZCBjbGFzcz0ibGlu ZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5v IiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIE5BVCAoU1RVTikgYXV0aGVu dGljYXRpb24uICBUaGUgdXNhZ2Ugb2YgZXBoZW1lcmFsIHRva2VucyBlbnN1cmVzPC90ZD48dGQ+ IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgTkFUIChTVFVOKSBhdXRoZW50aWNhdGlvbi4gIFRo ZSB1c2FnZSBvZiBlcGhlbWVyYWwgdG9rZW5zIGVuc3VyZXM8L3RkPjx0ZCBjbGFzcz0ibGluZW5v IiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2 YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIHRoYXQgYWNjZXNzIHRvIGEgU1RV TiBzZXJ2ZXIgY2FuIGJlIGNvbnRyb2xsZWQgZXZlbiBpZiB0aGUgdG9rZW5zIGFyZTwvdGQ+PHRk PiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIHRoYXQgYWNjZXNzIHRvIGEgU1RVTiBzZXJ2ZXIg Y2FuIGJlIGNvbnRyb2xsZWQgZXZlbiBpZiB0aGUgdG9rZW5zIGFyZTwvdGQ+PHRkIGNsYXNzPSJs aW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5l bm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgY29tcHJvbWlzZWQuPC90 ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgY29tcHJvbWlzZWQuPC90ZD48dGQgY2xh c3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9 ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij48L3RkPjx0ZD4gPC90 ZD48dGQgY2xhc3M9InJpZ2h0Ij48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+ PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90 ZD48dGQgY2xhc3M9ImxlZnQiPlN0YXR1cyBvZiBUaGlzIE1lbW88L3RkPjx0ZD4gPC90ZD48dGQg Y2xhc3M9InJpZ2h0Ij5TdGF0dXMgb2YgVGhpcyBNZW1vPC90ZD48dGQgY2xhc3M9ImxpbmVubyIg dmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90 ZD48dGQgY2xhc3M9ImxlZnQiPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPjwvdGQ+ PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4NCiAgICAgIDx0ciBiZ2NvbG9yPSJncmF5Ij48 dGQ+PC90ZD48dGg+PGEgbmFtZT0icGFydC1sMiI+PHNtYWxsPnNraXBwaW5nIHRvIGNoYW5nZSBh dDwvc21hbGw+PGVtPiBwYWdlIDEsIGxpbmUgMzg8L2VtPjwvYT48L3RoPjx0aD4gPC90aD48dGg+ PGEgbmFtZT0icGFydC1yMiI+PHNtYWxsPnNraXBwaW5nIHRvIGNoYW5nZSBhdDwvc21hbGw+PGVt PiBwYWdlIDEsIGxpbmUgMzg8L2VtPjwvYT48L3RoPjx0ZD48L3RkPjwvdHI+DQogICAgICA8dHI+ PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAg SW50ZXJuZXQtRHJhZnRzIGFyZSB3b3JraW5nIGRvY3VtZW50cyBvZiB0aGUgSW50ZXJuZXQgRW5n aW5lZXJpbmc8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBJbnRlcm5ldC1EcmFm dHMgYXJlIHdvcmtpbmcgZG9jdW1lbnRzIG9mIHRoZSBJbnRlcm5ldCBFbmdpbmVlcmluZzwvdGQ+ PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRk IGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgVGFz ayBGb3JjZSAoSUVURikuICBOb3RlIHRoYXQgb3RoZXIgZ3JvdXBzIG1heSBhbHNvIGRpc3RyaWJ1 dGU8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBUYXNrIEZvcmNlIChJRVRGKS4g IE5vdGUgdGhhdCBvdGhlciBncm91cHMgbWF5IGFsc28gZGlzdHJpYnV0ZTwvdGQ+PHRkIGNsYXNz PSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJs aW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgd29ya2luZyBkb2N1 bWVudHMgYXMgSW50ZXJuZXQtRHJhZnRzLiAgVGhlIGxpc3Qgb2YgY3VycmVudCBJbnRlcm5ldC08 L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICB3b3JraW5nIGRvY3VtZW50cyBhcyBJ bnRlcm5ldC1EcmFmdHMuICBUaGUgbGlzdCBvZiBjdXJyZW50IEludGVybmV0LTwvdGQ+PHRkIGNs YXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNz PSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgRHJhZnRzIGlz IGF0IGh0dHA6Ly9kYXRhdHJhY2tlci5pZXRmLm9yZy9kcmFmdHMvY3VycmVudC8uPC90ZD48dGQ+ IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgRHJhZnRzIGlzIGF0IGh0dHA6Ly9kYXRhdHJhY2tl ci5pZXRmLm9yZy9kcmFmdHMvY3VycmVudC8uPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWdu PSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0 b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0 Ij48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAg PHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQi PiAgIEludGVybmV0LURyYWZ0cyBhcmUgZHJhZnQgZG9jdW1lbnRzIHZhbGlkIGZvciBhIG1heGlt dW0gb2Ygc2l4IG1vbnRoczwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIEludGVy bmV0LURyYWZ0cyBhcmUgZHJhZnQgZG9jdW1lbnRzIHZhbGlkIGZvciBhIG1heGltdW0gb2Ygc2l4 IG1vbnRoczwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQog ICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0i bGVmdCI+ICAgYW5kIG1heSBiZSB1cGRhdGVkLCByZXBsYWNlZCwgb3Igb2Jzb2xldGVkIGJ5IG90 aGVyIGRvY3VtZW50cyBhdCBhbnk8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBh bmQgbWF5IGJlIHVwZGF0ZWQsIHJlcGxhY2VkLCBvciBvYnNvbGV0ZWQgYnkgb3RoZXIgZG9jdW1l bnRzIGF0IGFueTwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+ DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFz cz0ibGVmdCI+ICAgdGltZS4gIEl0IGlzIGluYXBwcm9wcmlhdGUgdG8gdXNlIEludGVybmV0LURy YWZ0cyBhcyByZWZlcmVuY2U8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICB0aW1l LiAgSXQgaXMgaW5hcHByb3ByaWF0ZSB0byB1c2UgSW50ZXJuZXQtRHJhZnRzIGFzIHJlZmVyZW5j ZTwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8 dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ ICAgbWF0ZXJpYWwgb3IgdG8gY2l0ZSB0aGVtIG90aGVyIHRoYW4gYXMgIndvcmsgaW4gcHJvZ3Jl c3MuIjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIG1hdGVyaWFsIG9yIHRvIGNp dGUgdGhlbSBvdGhlciB0aGFuIGFzICJ3b3JrIGluIHByb2dyZXNzLiI8L3RkPjx0ZCBjbGFzcz0i bGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGlu ZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPjwvdGQ+PHRkPiA8L3RkPjx0 ZCBjbGFzcz0icmlnaHQiPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3Rk PjwvdHI+DQogICAgICA8dHI+PHRkPjxhIG5hbWU9ImRpZmYwMDA0Ij48L2E+PC90ZD48L3RyPg0K ICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9 ImxibG9jayI+ICAgVGhpcyBJbnRlcm5ldC1EcmFmdCB3aWxsIGV4cGlyZSBvbiBPY3RvYmVyIDxz cGFuIGNsYXNzPSJkZWxldGUiPjE3PC9zcGFuPiwgMjAxNS48L3RkPjx0ZD4gPC90ZD48dGQgY2xh c3M9InJibG9jayI+ICAgVGhpcyBJbnRlcm5ldC1EcmFmdCB3aWxsIGV4cGlyZSBvbiBPY3RvYmVy IDxzcGFuIGNsYXNzPSJpbnNlcnQiPjIzPC9zcGFuPiwgMjAxNS48L3RkPjx0ZCBjbGFzcz0ibGlu ZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5v IiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPjwvdGQ+PHRkPiA8L3RkPjx0ZCBj bGFzcz0icmlnaHQiPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwv dHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBj bGFzcz0ibGVmdCI+Q29weXJpZ2h0IE5vdGljZTwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmln aHQiPkNvcHlyaWdodCBOb3RpY2U8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+ PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90 ZD48dGQgY2xhc3M9ImxlZnQiPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPjwvdGQ+ PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRk IGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgQ29w eXJpZ2h0IChjKSAyMDE1IElFVEYgVHJ1c3QgYW5kIHRoZSBwZXJzb25zIGlkZW50aWZpZWQgYXMg dGhlPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgQ29weXJpZ2h0IChjKSAyMDE1 IElFVEYgVHJ1c3QgYW5kIHRoZSBwZXJzb25zIGlkZW50aWZpZWQgYXMgdGhlPC90ZD48dGQgY2xh c3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9 ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBkb2N1bWVudCBh dXRob3JzLiAgQWxsIHJpZ2h0cyByZXNlcnZlZC48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJp Z2h0Ij4gICBkb2N1bWVudCBhdXRob3JzLiAgQWxsIHJpZ2h0cyByZXNlcnZlZC48L3RkPjx0ZCBj bGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFz cz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPjwvdGQ+PHRkPiA8 L3RkPjx0ZCBjbGFzcz0icmlnaHQiPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9w Ij48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48 L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgVGhpcyBkb2N1bWVudCBpcyBzdWJqZWN0IHRvIEJDUCA3 OCBhbmQgdGhlIElFVEYgVHJ1c3QncyBMZWdhbDwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmln aHQiPiAgIFRoaXMgZG9jdW1lbnQgaXMgc3ViamVjdCB0byBCQ1AgNzggYW5kIHRoZSBJRVRGIFRy dXN0J3MgTGVnYWw8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3Ry Pg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xh c3M9ImxlZnQiPiAgIFByb3Zpc2lvbnMgUmVsYXRpbmcgdG8gSUVURiBEb2N1bWVudHM8L3RkPjx0 ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBQcm92aXNpb25zIFJlbGF0aW5nIHRvIElFVEYg RG9jdW1lbnRzPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4N CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNz PSJsZWZ0Ij4gICAoaHR0cDovL3RydXN0ZWUuaWV0Zi5vcmcvbGljZW5zZS1pbmZvKSBpbiBlZmZl Y3Qgb24gdGhlIGRhdGUgb2Y8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICAoaHR0 cDovL3RydXN0ZWUuaWV0Zi5vcmcvbGljZW5zZS1pbmZvKSBpbiBlZmZlY3Qgb24gdGhlIGRhdGUg b2Y8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAg PHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQi PiAgIHB1YmxpY2F0aW9uIG9mIHRoaXMgZG9jdW1lbnQuICBQbGVhc2UgcmV2aWV3IHRoZXNlIGRv Y3VtZW50czwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIHB1YmxpY2F0aW9uIG9m IHRoaXMgZG9jdW1lbnQuICBQbGVhc2UgcmV2aWV3IHRoZXNlIGRvY3VtZW50czwvdGQ+PHRkIGNs YXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNz PSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9 InJpZ2h0Ij48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+DQogICAgICA8dHIgYmdj b2xvcj0iZ3JheSI+PHRkPjwvdGQ+PHRoPjxhIG5hbWU9InBhcnQtbDMiPjxzbWFsbD5za2lwcGlu ZyB0byBjaGFuZ2UgYXQ8L3NtYWxsPjxlbT4gcGFnZSAyLCBsaW5lIDE0PC9lbT48L2E+PC90aD48 dGg+IDwvdGg+PHRoPjxhIG5hbWU9InBhcnQtcjMiPjxzbWFsbD5za2lwcGluZyB0byBjaGFuZ2Ug YXQ8L3NtYWxsPjxlbT4gcGFnZSAyLCBsaW5lIDE0PC9lbT48L2E+PC90aD48dGQ+PC90ZD48L3Ry Pg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xh c3M9ImxlZnQiPiAgIHRvIHRoaXMgZG9jdW1lbnQuICBDb2RlIENvbXBvbmVudHMgZXh0cmFjdGVk IGZyb20gdGhpcyBkb2N1bWVudCBtdXN0PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ ICAgdG8gdGhpcyBkb2N1bWVudC4gIENvZGUgQ29tcG9uZW50cyBleHRyYWN0ZWQgZnJvbSB0aGlz IGRvY3VtZW50IG11c3Q8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48 L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQg Y2xhc3M9ImxlZnQiPiAgIGluY2x1ZGUgU2ltcGxpZmllZCBCU0QgTGljZW5zZSB0ZXh0IGFzIGRl c2NyaWJlZCBpbiBTZWN0aW9uIDQuZSBvZjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQi PiAgIGluY2x1ZGUgU2ltcGxpZmllZCBCU0QgTGljZW5zZSB0ZXh0IGFzIGRlc2NyaWJlZCBpbiBT ZWN0aW9uIDQuZSBvZjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwv dHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBj bGFzcz0ibGVmdCI+ICAgdGhlIFRydXN0IExlZ2FsIFByb3Zpc2lvbnMgYW5kIGFyZSBwcm92aWRl ZCB3aXRob3V0IHdhcnJhbnR5IGFzPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAg dGhlIFRydXN0IExlZ2FsIFByb3Zpc2lvbnMgYW5kIGFyZSBwcm92aWRlZCB3aXRob3V0IHdhcnJh bnR5IGFzPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAg ICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJs ZWZ0Ij4gICBkZXNjcmliZWQgaW4gdGhlIFNpbXBsaWZpZWQgQlNEIExpY2Vuc2UuPC90ZD48dGQ+ IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgZGVzY3JpYmVkIGluIHRoZSBTaW1wbGlmaWVkIEJT RCBMaWNlbnNlLjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+ DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFz cz0ibGVmdCI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+PC90ZD48dGQgY2xhc3M9 ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9Imxp bmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij5UYWJsZSBvZiBDb250ZW50 czwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPlRhYmxlIG9mIENvbnRlbnRzPC90ZD48 dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQg Y2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij48L3RkPjx0 ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249 InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRv cCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIDEuICBJbnRyb2R1Y3Rpb24gIC4gLiAuIC4gLiAu IC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuICAgMjwvdGQ+PHRkPiA8L3RkPjx0 ZCBjbGFzcz0icmlnaHQiPiAgIDEuICBJbnRyb2R1Y3Rpb24gIC4gLiAuIC4gLiAuIC4gLiAuIC4g LiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuICAgMjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZh bGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGln bj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgMi4gIFRlcm1pbm9sb2d5IC4gLiAuIC4g LiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gICAzPC90ZD48dGQ+IDwv dGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgMi4gIFRlcm1pbm9sb2d5IC4gLiAuIC4gLiAuIC4gLiAu IC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gICAzPC90ZD48dGQgY2xhc3M9ImxpbmVu byIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIg dmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICAzLiAgU29sdXRpb24gT3ZlcnZp ZXcgLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAgIDM8L3RkPjx0 ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICAzLiAgU29sdXRpb24gT3ZlcnZpZXcgLiAuIC4g LiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAgIDM8L3RkPjx0ZCBjbGFzcz0i bGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZD48YSBuYW1lPSJk aWZmMDAwNSI+PC9hPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFs aWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPiAgIDQuICBPYnRhaW5pbmcgYSBUb2tl biBVc2luZyBPQXV0aCAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuICAgPHNwYW4gY2xh c3M9ImRlbGV0ZSI+NDwvc3Bhbj48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+ICAg ICA8c3BhbiBjbGFzcz0iaW5zZXJ0Ij4zLjEuICBUVVJOICAuIC4gLiAuIC4gLiAuIC4gLiAuIC4g LiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gICA0PC9zcGFuPjwvdGQ+PHRkIGNsYXNzPSJs aW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5l bm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj4gICAgIDQuMS4gIEtleSBF c3RhYmxpc2htZW50IC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAgIDxz cGFuIGNsYXNzPSJkZWxldGUiPjQ8L3NwYW4+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxv Y2siPiAgIDQuICBPYnRhaW5pbmcgYSBUb2tlbiBVc2luZyBPQXV0aCAuIC4gLiAuIC4gLiAuIC4g LiAuIC4gLiAuIC4gLiAuICAgPHNwYW4gY2xhc3M9Imluc2VydCI+Nzwvc3Bhbj48L3RkPjx0ZCBj bGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFz cz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+ICAgICAgIDQu MS4xLiAgSFRUUCBpbnRlcmFjdGlvbnMgLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAu IC4gICA8c3BhbiBjbGFzcz0iZGVsZXRlIj41PC9zcGFuPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFz cz0icmJsb2NrIj4gICAgIDQuMS4gIEtleSBFc3RhYmxpc2htZW50IC4gLiAuIC4gLiAuIC4gLiAu IC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAgIDxzcGFuIGNsYXNzPSJpbnNlcnQiPjg8L3NwYW4+PC90 ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48 dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPiAg ICAgICA0LjEuMi4gIE1hbnVhbCBwcm92aXNpb25pbmcgLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4g LiAuIC4gLiAuICAgPHNwYW4gY2xhc3M9ImRlbGV0ZSI+Nzwvc3Bhbj48L3RkPjx0ZD4gPC90ZD48 dGQgY2xhc3M9InJibG9jayI+ICAgICAgIDQuMS4xLiAgSFRUUCBpbnRlcmFjdGlvbnMgLiAuIC4g LiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gICA8c3BhbiBjbGFzcz0iaW5zZXJ0Ij44PC9z cGFuPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAg ICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJs b2NrIj4gICA1LiAgRm9ybWluZyBhIFJlcXVlc3QgLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAu IC4gLiAuIC4gLiAuIC4gLiAgIDxzcGFuIGNsYXNzPSJkZWxldGUiPjc8L3NwYW4+PC90ZD48dGQ+ IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPiAgICAgICA0LjEuMi4gIE1hbnVhbCBwcm92aXNpb25p bmcgLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuICA8c3BhbiBjbGFzcz0iaW5zZXJ0 Ij4xMDwvc3Bhbj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3Ry Pg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xh c3M9ImxibG9jayI+ICAgNi4gIFNUVU4gQXR0cmlidXRlcyAuIC4gLiAuIC4gLiAuIC4gLiAuIC4g LiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gICA8c3BhbiBjbGFzcz0iZGVsZXRlIj43PC9zcGFuPjwv dGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj4gICA1LiAgRm9ybWluZyBhIFJlcXVlc3Qg LiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAgPHNwYW4gY2xhc3M9 Imluc2VydCI+MTA8L3NwYW4+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwv dGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+ PHRkIGNsYXNzPSJsYmxvY2siPiAgICAgNi4xLiAgVEhJUkQtUEFSVFktQVVUSE9SSVpBVElPTiAu IC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuICAgPHNwYW4gY2xhc3M9ImRlbGV0ZSI+Nzwv c3Bhbj48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+ICAgNi4gIFNUVU4gQXR0cmli dXRlcyAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gIDxzcGFu IGNsYXNzPSJpbnNlcnQiPjEwPC9zcGFuPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0i dG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9w Ij48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj4gICAgIDYuMi4gIEFDQ0VTUy1UT0tFTiAgLiAuIC4g LiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAgIDxzcGFuIGNsYXNzPSJkZWxl dGUiPjg8L3NwYW4+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPiAgICAgNi4xLiAg VEhJUkQtUEFSVFktQVVUSE9SSVpBVElPTiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAu ICA8c3BhbiBjbGFzcz0iaW5zZXJ0Ij4xMDwvc3Bhbj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2 YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxp Z249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+ICAgNy4gIFNUVU4gU2VydmVyIEJlaGF2 aW91ciAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gIDxzcGFuIGNsYXNz PSJkZWxldGUiPjEwPC9zcGFuPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj4gICAg IDYuMi4gIEFDQ0VTUy1UT0tFTiAgLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4g LiAuIC4gLiAgPHNwYW4gY2xhc3M9Imluc2VydCI+MTE8L3NwYW4+PC90ZD48dGQgY2xhc3M9Imxp bmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVu byIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPiAgIDguICBTVFVOIDxzcGFu IGNsYXNzPSJkZWxldGUiPkNsaWVudCBCZWhhdmlvdXI8L3NwYW4+IC4gLiAuIC4gLiAuIC4gLiAu IC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAgPHNwYW4gY2xhc3M9ImRlbGV0ZSI+MTE8L3NwYW4+PC90 ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPiAgIDcuICBTVFVOIFNlcnZlciBCZWhhdmlv dXIgLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuICA8c3BhbiBjbGFzcz0i aW5zZXJ0Ij4xMzwvc3Bhbj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90 ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48 dGQgY2xhc3M9ImxibG9jayI+ICAgOS4gIDxzcGFuIGNsYXNzPSJkZWxldGUiPlVzYWdlIHdpdGg8 L3NwYW4+IFRVUk4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIDxzcGFuIGNsYXNzPSJkZWxl dGUiPi4gLiAuIC4gLiAuIC4gLiAuICAxMTwvc3Bhbj48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9 InJibG9jayI+ICAgOC4gIFNUVU4gPHNwYW4gY2xhc3M9Imluc2VydCI+Y2xpZW50IGJlaGF2aW91 cjwvc3Bhbj4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuICA8c3BhbiBj bGFzcz0iaW5zZXJ0Ij4xNDwvc3Bhbj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRv cCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+ PC90ZD48dGQgY2xhc3M9ImxibG9jayI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2si PiAgIDkuICBUVVJOIDxzcGFuIGNsYXNzPSJpbnNlcnQiPmNsaWVudCBhbmQgc2VydmVyIGJlaGF2 aW91cjwvc3Bhbj4gIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAgPHNwYW4gY2xhc3M9Imlu c2VydCI+MTQ8L3NwYW4+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+ PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRk IGNsYXNzPSJsZWZ0Ij4gICAxMC4gT3BlcmF0aW9uYWwgQ29uc2lkZXJhdGlvbnMgIC4gLiAuIC4g LiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAgMTU8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJp Z2h0Ij4gICAxMC4gT3BlcmF0aW9uYWwgQ29uc2lkZXJhdGlvbnMgIC4gLiAuIC4gLiAuIC4gLiAu IC4gLiAuIC4gLiAuIC4gLiAgMTU8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+ PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90 ZD48dGQgY2xhc3M9ImxlZnQiPiAgIDExLiBTZWN1cml0eSBDb25zaWRlcmF0aW9ucyAuIC4gLiAu IC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuICAxNTwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFz cz0icmlnaHQiPiAgIDExLiBTZWN1cml0eSBDb25zaWRlcmF0aW9ucyAuIC4gLiAuIC4gLiAuIC4g LiAuIC4gLiAuIC4gLiAuIC4gLiAuICAxNTwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0i dG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9w Ij48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgMTIuIElBTkEgQ29uc2lkZXJhdGlvbnMgLiAuIC4g LiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gIDE2PC90ZD48dGQ+IDwvdGQ+PHRk IGNsYXNzPSJyaWdodCI+ICAgMTIuIElBTkEgQ29uc2lkZXJhdGlvbnMgLiAuIC4gLiAuIC4gLiAu IC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gIDE2PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFs aWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWdu PSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICAxMy4gQWNrbm93bGVkZ2VtZW50cyAgLiAu IC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAgMTY8L3RkPjx0ZD4gPC90 ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICAxMy4gQWNrbm93bGVkZ2VtZW50cyAgLiAuIC4gLiAuIC4g LiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAgMTY8L3RkPjx0ZCBjbGFzcz0ibGluZW5v IiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2 YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIDE0LiBSZWZlcmVuY2VzICAuIC4g LiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuICAxNjwvdGQ+PHRk PiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIDE0LiBSZWZlcmVuY2VzICAuIC4gLiAuIC4gLiAu IC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuICAxNjwvdGQ+PHRkIGNsYXNzPSJs aW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkPjxhIG5hbWU9ImRp ZmYwMDA2Ij48L2E+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxp Z249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+ICAgICAxNC4xLiAgTm9ybWF0aXZlIFJl ZmVyZW5jZXMgLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gIDE8c3BhbiBjbGFz cz0iZGVsZXRlIj43PC9zcGFuPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj4gICAg IDE0LjEuICBOb3JtYXRpdmUgUmVmZXJlbmNlcyAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4g LiAuIC4gLiAgMTxzcGFuIGNsYXNzPSJpbnNlcnQiPjY8L3NwYW4+PC90ZD48dGQgY2xhc3M9Imxp bmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVu byIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICAgIDE0LjIuICBJbmZvcm1h dGl2ZSBSZWZlcmVuY2VzIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAgMTc8L3Rk Pjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICAgIDE0LjIuICBJbmZvcm1hdGl2ZSBSZWZl cmVuY2VzIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAgMTc8L3RkPjx0ZCBjbGFz cz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZD48YSBuYW1l PSJkaWZmMDAwNyI+PC9hPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIg dmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPiAgIEFwcGVuZGl4IEEuICA8c3Bh biBjbGFzcz0iZGVsZXRlIj5TYW1wbGUgdGlja2V0cyAuIC4gLiAuIC4gLiAuIC4gLiAuPC9zcGFu PiAuIC4gLiAuIC4gLiAuIC4gLiAgMTk8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+ ICAgQXBwZW5kaXggQS4gIDxzcGFuIGNsYXNzPSJpbnNlcnQiPkMgU25pcHBldCB0byBlbmNyeXB0 L2RlY3J5cHQgdG9rZW48L3NwYW4+IC4gLiAuIC4gLiAuIC4gLiAuICAxOTwvdGQ+PHRkIGNsYXNz PSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJs aW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj4gICBBcHBlbmRpeCBC LiAgSW50ZXJhY3Rpb24gYmV0d2VlbiBjbGllbnQgYW5kIGF1dGhvcml6YXRpb24gc2VydmVyICAg PHNwYW4gY2xhc3M9ImRlbGV0ZSI+MjA8L3NwYW4+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJy YmxvY2siPiAgIEFwcGVuZGl4IEIuICBJbnRlcmFjdGlvbiBiZXR3ZWVuIGNsaWVudCBhbmQgYXV0 aG9yaXphdGlvbiBzZXJ2ZXIgICA8c3BhbiBjbGFzcz0iaW5zZXJ0Ij4yNjwvc3Bhbj48L3RkPjx0 ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBj bGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+ICAgQXV0 aG9ycycgQWRkcmVzc2VzICAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4g LiAuIC4gIDxzcGFuIGNsYXNzPSJkZWxldGUiPjIyPC9zcGFuPjwvdGQ+PHRkPiA8L3RkPjx0ZCBj bGFzcz0icmJsb2NrIj4gICBBdXRob3JzJyBBZGRyZXNzZXMgIC4gLiAuIC4gLiAuIC4gLiAuIC4g LiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAgPHNwYW4gY2xhc3M9Imluc2VydCI+Mjg8L3NwYW4+ PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0 cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij48 L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2 YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxp Z249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPjEuICBJbnRyb2R1Y3Rpb248L3RkPjx0ZD4g PC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4xLiAgSW50cm9kdWN0aW9uPC90ZD48dGQgY2xhc3M9Imxp bmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVu byIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij48L3RkPjx0ZD4gPC90ZD48dGQg Y2xhc3M9InJpZ2h0Ij48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48 L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQg Y2xhc3M9ImxlZnQiPiAgIFNlc3Npb24gVHJhdmVyc2FsIFV0aWxpdGllcyBmb3IgTkFUIChTVFVO KSBbUkZDNTM4OV0gcHJvdmlkZXMgYTwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAg IFNlc3Npb24gVHJhdmVyc2FsIFV0aWxpdGllcyBmb3IgTkFUIChTVFVOKSBbUkZDNTM4OV0gcHJv dmlkZXMgYTwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQog ICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0i bGVmdCI+ICAgbWVjaGFuaXNtIHRvIGNvbnRyb2wgYWNjZXNzIHZpYSAibG9uZy10ZXJtIiB1c2Vy bmFtZS8gcGFzc3dvcmQ8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBtZWNoYW5p c20gdG8gY29udHJvbCBhY2Nlc3MgdmlhICJsb25nLXRlcm0iIHVzZXJuYW1lLyBwYXNzd29yZDwv dGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+ PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAg Y3JlZGVudGlhbHMgdGhhdCBhcmUgcHJvdmlkZWQgYXMgcGFydCBvZiB0aGUgU1RVTiBwcm90b2Nv bC4gIEl0IGlzPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgY3JlZGVudGlhbHMg dGhhdCBhcmUgcHJvdmlkZWQgYXMgcGFydCBvZiB0aGUgU1RVTiBwcm90b2NvbC4gIEl0IGlzPC90 ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48 dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBl eHBlY3RlZCB0aGF0IHRoZXNlIGNyZWRlbnRpYWxzIHdpbGwgYmUga2VwdCBzZWNyZXQ7IGlmIHRo ZTwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIGV4cGVjdGVkIHRoYXQgdGhlc2Ug Y3JlZGVudGlhbHMgd2lsbCBiZSBrZXB0IHNlY3JldDsgaWYgdGhlPC90ZD48dGQgY2xhc3M9Imxp bmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVu byIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBjcmVkZW50aWFscyBhcmUg ZGlzY292ZXJlZCwgdGhlIFNUVU4gc2VydmVyIGNvdWxkIGJlIHVzZWQgYnk8L3RkPjx0ZD4gPC90 ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBjcmVkZW50aWFscyBhcmUgZGlzY292ZXJlZCwgdGhlIFNU VU4gc2VydmVyIGNvdWxkIGJlIHVzZWQgYnk8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249 InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRv cCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIHVuYXV0aG9yaXplZCB1c2VycyBvciBhcHBsaWNh dGlvbnMuICBIb3dldmVyLCBpbiB3ZWIgYXBwbGljYXRpb25zPC90ZD48dGQ+IDwvdGQ+PHRkIGNs YXNzPSJyaWdodCI+ICAgdW5hdXRob3JpemVkIHVzZXJzIG9yIGFwcGxpY2F0aW9ucy4gIEhvd2V2 ZXIsIGluIHdlYiBhcHBsaWNhdGlvbnM8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRv cCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+ PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIGxpa2UgV2ViUlRDIFtJLUQuaWV0Zi1ydGN3ZWItb3Zl cnZpZXddIHdoZXJlIEphdmFTY3JpcHQgdXNlcyB0aGU8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9 InJpZ2h0Ij4gICBsaWtlIFdlYlJUQyBbSS1ELmlldGYtcnRjd2ViLW92ZXJ2aWV3XSB3aGVyZSBK YXZhU2NyaXB0IHVzZXMgdGhlPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwv dGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9Imxl ZnQiPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPjwvdGQ+PHRkIGNsYXNzPSJsaW5l bm8iPjwvdGQ+PC90cj4NCiAgICAgIDx0ciBiZ2NvbG9yPSJncmF5Ij48dGQ+PC90ZD48dGg+PGEg bmFtZT0icGFydC1sNCI+PHNtYWxsPnNraXBwaW5nIHRvIGNoYW5nZSBhdDwvc21hbGw+PGVtPiBw YWdlIDMsIGxpbmUgMTg8L2VtPjwvYT48L3RoPjx0aD4gPC90aD48dGg+PGEgbmFtZT0icGFydC1y NCI+PHNtYWxsPnNraXBwaW5nIHRvIGNoYW5nZSBhdDwvc21hbGw+PGVtPiBwYWdlIDMsIGxpbmUg MTk8L2VtPjwvYT48L3RoPjx0ZD48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5l bm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgc2VydmljZXMuICBUaGly ZCBwYXJ0eSBhdXRob3JpemF0aW9uIHVzaW5nIE9BdXRoIDIuMCBmb3IgU1RVTjwvdGQ+PHRkPiA8 L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIHNlcnZpY2VzLiAgVGhpcmQgcGFydHkgYXV0aG9yaXph dGlvbiB1c2luZyBPQXV0aCAyLjAgZm9yIFNUVU48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxp Z249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249 InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIGV4cGxhaW5lZCBpbiB0aGlzIHNwZWNpZmlj YXRpb24gY2FuIGFsc28gYmUgdXNlZCB3aXRoIFRyYXZlcnNhbCBVc2luZzwvdGQ+PHRkPiA8L3Rk Pjx0ZCBjbGFzcz0icmlnaHQiPiAgIGV4cGxhaW5lZCBpbiB0aGlzIHNwZWNpZmljYXRpb24gY2Fu IGFsc28gYmUgdXNlZCB3aXRoIFRyYXZlcnNhbCBVc2luZzwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8i IHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZh bGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgUmVsYXlzIGFyb3VuZCBOQVQgKFRV Uk4pIFtSRkM1NzY2XS48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBSZWxheXMg YXJvdW5kIE5BVCAoVFVSTikgW1JGQzU3NjZdLjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGln bj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0i dG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdo dCI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAg IDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0 Ij4yLiAgVGVybWlub2xvZ3k8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4yLiAgVGVy bWlub2xvZ3k8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0K ICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9 ImxlZnQiPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPjwvdGQ+PHRkIGNsYXNzPSJs aW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5l bm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgVGhlIGtleSB3b3JkcyAi TVVTVCIsICJNVVNUIE5PVCIsICJSRVFVSVJFRCIsICJTSEFMTCIsICJTSEFMTCBOT1QiLDwvdGQ+ PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIFRoZSBrZXkgd29yZHMgIk1VU1QiLCAiTVVT VCBOT1QiLCAiUkVRVUlSRUQiLCAiU0hBTEwiLCAiU0hBTEwgTk9UIiw8L3RkPjx0ZCBjbGFzcz0i bGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGlu ZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgICJTSE9VTEQiLCAiU0hP VUxEIE5PVCIsICJSRUNPTU1FTkRFRCIsICJNQVkiLCBhbmQgIk9QVElPTkFMIiBpbiB0aGlzPC90 ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgIlNIT1VMRCIsICJTSE9VTEQgTk9UIiwg IlJFQ09NTUVOREVEIiwgIk1BWSIsIGFuZCAiT1BUSU9OQUwiIGluIHRoaXM8L3RkPjx0ZCBjbGFz cz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0i bGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIGRvY3VtZW50IGFy ZSB0byBiZSBpbnRlcnByZXRlZCBhcyBkZXNjcmliZWQgaW4gW1JGQzIxMTldLjwvdGQ+PHRkPiA8 L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIGRvY3VtZW50IGFyZSB0byBiZSBpbnRlcnByZXRlZCBh cyBkZXNjcmliZWQgaW4gW1JGQzIxMTldLjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0i dG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9w Ij48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0 cj48dGQ+PGEgbmFtZT0iZGlmZjAwMDgiPjwvYT48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNs YXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48L3RkPjx0 ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+ICAgPHNwYW4gY2xhc3M9Imluc2VydCI+VGhpcyBk b2N1bWVudCB1c2VzIHRoZSBmb2xsb3dpbmcgYWJicmV2aWF0aW9uczo8L3NwYW4+PC90ZD48dGQg Y2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xh c3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPjwvdGQ+PHRk PiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj4gICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgPC90ZD48dGQgY2xhc3M9 ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9Imxp bmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBvICBXZWJSVEMgU2Vy dmVyOiBBIHdlYiBzZXJ2ZXIgdGhhdCBzdXBwb3J0cyBXZWJSVEM8L3RkPjx0ZD4gPC90ZD48dGQg Y2xhc3M9InJpZ2h0Ij4gICBvICBXZWJSVEMgU2VydmVyOiBBIHdlYiBzZXJ2ZXIgdGhhdCBzdXBw b3J0cyBXZWJSVEM8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3Ry Pg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xh c3M9ImxlZnQiPiAgICAgIFtJLUQuaWV0Zi1ydGN3ZWItb3ZlcnZpZXddLjwvdGQ+PHRkPiA8L3Rk Pjx0ZCBjbGFzcz0icmlnaHQiPiAgICAgIFtJLUQuaWV0Zi1ydGN3ZWItb3ZlcnZpZXddLjwvdGQ+ PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRk IGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+PC90ZD48 dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWdu PSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0 b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBvICBBY2Nlc3MgVG9rZW46IE9BdXRoIDIuMCBh Y2Nlc3MgdG9rZW4uPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgbyAgQWNjZXNz IFRva2VuOiBPQXV0aCAyLjAgYWNjZXNzIHRva2VuLjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZh bGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGln bj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJy aWdodCI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAg ICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJs ZWZ0Ij4gICBvICBtYWNfa2V5OiBUaGUgc2Vzc2lvbiBrZXkgZ2VuZXJhdGVkIGJ5IHRoZSBhdXRo b3JpemF0aW9uIHNlcnZlci48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBvICBt YWNfa2V5OiBUaGUgc2Vzc2lvbiBrZXkgZ2VuZXJhdGVkIGJ5IHRoZSBhdXRob3JpemF0aW9uIHNl cnZlci48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAg ICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9Imxl ZnQiPiAgICAgIFRoaXMgc2Vzc2lvbiBrZXkgaGFzIGEgbGlmZXRpbWUgdGhhdCBjb3JyZXNwb25k cyB0byB0aGUgbGlmZXRpbWU8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICAgICBU aGlzIHNlc3Npb24ga2V5IGhhcyBhIGxpZmV0aW1lIHRoYXQgY29ycmVzcG9uZHMgdG8gdGhlIGxp ZmV0aW1lPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAg ICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJs ZWZ0Ij4gICAgICBvZiB0aGUgYWNjZXNzIHRva2VuLCBpcyBnZW5lcmF0ZWQgYnkgdGhlIGF1dGhv cml6YXRpb24gc2VydmVyIGFuZDwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgICAg IG9mIHRoZSBhY2Nlc3MgdG9rZW4sIGlzIGdlbmVyYXRlZCBieSB0aGUgYXV0aG9yaXphdGlvbiBz ZXJ2ZXIgYW5kPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4N CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNz PSJsZWZ0Ij4gICAgICBib3VuZCB0byB0aGUgYWNjZXNzIHRva2VuLjwvdGQ+PHRkPiA8L3RkPjx0 ZCBjbGFzcz0icmlnaHQiPiAgICAgIGJvdW5kIHRvIHRoZSBhY2Nlc3MgdG9rZW4uPC90ZD48dGQg Y2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xh c3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij48L3RkPjx0ZD4g PC90ZD48dGQgY2xhc3M9InJpZ2h0Ij48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRv cCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+ PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIG8gIGtpZDogQW4gZXBoZW1lcmFsIGFuZCB1bmlxdWUg a2V5IGlkZW50aWZpZXIuICBUaGUga2lkIGFsc28gYWxsb3dzPC90ZD48dGQ+IDwvdGQ+PHRkIGNs YXNzPSJyaWdodCI+ICAgbyAga2lkOiBBbiBlcGhlbWVyYWwgYW5kIHVuaXF1ZSBrZXkgaWRlbnRp Zmllci4gIFRoZSBraWQgYWxzbyBhbGxvd3M8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249 InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRv cCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgICAgIHRoZSByZXNvdXJjZSBzZXJ2ZXIgdG8gc2Vs ZWN0IHRoZSBhcHByb3ByaWF0ZSBrZXlpbmcgbWF0ZXJpYWwgZm9yPC90ZD48dGQ+IDwvdGQ+PHRk IGNsYXNzPSJyaWdodCI+ICAgICAgdGhlIHJlc291cmNlIHNlcnZlciB0byBzZWxlY3QgdGhlIGFw cHJvcHJpYXRlIGtleWluZyBtYXRlcmlhbCBmb3I8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxp Z249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249 InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgICAgIGRlY3J5cHRpb24uPC90ZD48dGQ+IDwv dGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgICAgZGVjcnlwdGlvbi48L3RkPjx0ZCBjbGFzcz0ibGlu ZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5v IiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPjwvdGQ+PHRkPiA8L3RkPjx0ZCBj bGFzcz0icmlnaHQiPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwv dHI+DQogICAgICA8dHI+PHRkPjxhIG5hbWU9ImRpZmYwMDA5Ij48L2E+PC90ZD48L3RyPg0KICAg ICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9Imxi bG9jayI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPiAgIDxzcGFuIGNsYXNzPSJp bnNlcnQiPm8gIEFTOiBBdXRob3JpemF0aW9uIHNlcnZlcjwvc3Bhbj48L3RkPjx0ZCBjbGFzcz0i bGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGlu ZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+PC90ZD48dGQ+IDwvdGQ+ PHRkIGNsYXNzPSJyYmxvY2siPiAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICA8L3RkPjx0ZCBjbGFzcz0ibGluZW5v IiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2 YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIFNvbWUgc2VjdGlvbnMgaW4gdGhp cyBzcGVjaWZpY2F0aW9uIHNob3cgV2ViUlRDIHNlcnZlciBhcyB0aGU8L3RkPjx0ZD4gPC90ZD48 dGQgY2xhc3M9InJpZ2h0Ij4gICBTb21lIHNlY3Rpb25zIGluIHRoaXMgc3BlY2lmaWNhdGlvbiBz aG93IFdlYlJUQyBzZXJ2ZXIgYXMgdGhlPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0 b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3Ai PjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBhdXRob3JpemF0aW9uIHNlcnZlciBhbmQgY2xpZW50 IGFzIHRoZSBXZWJSVEMgY2xpZW50LCBob3dldmVyIFdlYlJUQzwvdGQ+PHRkPiA8L3RkPjx0ZCBj bGFzcz0icmlnaHQiPiAgIGF1dGhvcml6YXRpb24gc2VydmVyIGFuZCBjbGllbnQgYXMgdGhlIFdl YlJUQyBjbGllbnQsIGhvd2V2ZXIgV2ViUlRDPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWdu PSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0 b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBpcyBpbnRlbmRlZCB0byBiZSB1c2VkIGZvciBp bGx1c3RyYXRpdmUgcHVycG9zZSBvbmx5LjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQi PiAgIGlzIGludGVuZGVkIHRvIGJlIHVzZWQgZm9yIGlsbHVzdHJhdGl2ZSBwdXJwb3NlIG9ubHku PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0 cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij48 L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2 YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxp Z249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPjMuICBTb2x1dGlvbiBPdmVydmlldzwvdGQ+ PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPjMuICBTb2x1dGlvbiBPdmVydmlldzwvdGQ+PHRk IGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNs YXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+PC90ZD48dGQ+ IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0 b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3Ai PjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBTVFVOIGNsaWVudCBrbm93cyB0aGF0IGl0IGNhbiB1 c2UgT0F1dGggMi4wIHdpdGggdGhlIHRhcmdldCBTVFVOPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNz PSJyaWdodCI+ICAgU1RVTiBjbGllbnQga25vd3MgdGhhdCBpdCBjYW4gdXNlIE9BdXRoIDIuMCB3 aXRoIHRoZSB0YXJnZXQgU1RVTjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48 L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3Rk Pjx0ZCBjbGFzcz0ibGVmdCI+ICAgc2VydmVyIGVpdGhlciB0aHJvdWdoIGNvbmZpZ3VyYXRpb24g b3Igd2hlbiBpdCByZWNlaXZlcyB0aGUgbmV3IFNUVU48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9 InJpZ2h0Ij4gICBzZXJ2ZXIgZWl0aGVyIHRocm91Z2ggY29uZmlndXJhdGlvbiBvciB3aGVuIGl0 IHJlY2VpdmVzIHRoZSBuZXcgU1RVTjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9w Ij48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48 L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgYXR0cmlidXRlIFRISVJELVBBUlRZLUFVVEhPUklaQVRJ T04gaW4gdGhlIGVycm9yIHJlc3BvbnNlIHdpdGggYW48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9 InJpZ2h0Ij4gICBhdHRyaWJ1dGUgVEhJUkQtUEFSVFktQVVUSE9SSVpBVElPTiBpbiB0aGUgZXJy b3IgcmVzcG9uc2Ugd2l0aCBhbjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48 L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3Rk Pjx0ZCBjbGFzcz0ibGVmdCI+ICAgZXJyb3IgY29kZSBvZiA0MDEoVW5hdXRob3JpemVkKS48L3Rk Pjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBlcnJvciBjb2RlIG9mIDQwMShVbmF1dGhv cml6ZWQpLjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQog ICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij48L3RkPjx0 ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwv dHI+DQogICAgICA8dHIgYmdjb2xvcj0iZ3JheSI+PHRkPjwvdGQ+PHRoPjxhIG5hbWU9InBhcnQt bDUiPjxzbWFsbD5za2lwcGluZyB0byBjaGFuZ2UgYXQ8L3NtYWxsPjxlbT4gcGFnZSA0LCBsaW5l IDEyPC9lbT48L2E+PC90aD48dGg+IDwvdGg+PHRoPjxhIG5hbWU9InBhcnQtcjUiPjxzbWFsbD5z a2lwcGluZyB0byBjaGFuZ2UgYXQ8L3NtYWxsPjxlbT4gcGFnZSA0LCBsaW5lIDE3PC9lbT48L2E+ PC90aD48dGQ+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249 InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIHJlcXVlc3Qgc2VudCB0byB0aGUgU1RVTiBz ZXJ2ZXIuICBPbmNlIHRoZSBTVFVOIHNlcnZlciBoYXMgZGV0ZXJtaW5lZDwvdGQ+PHRkPiA8L3Rk Pjx0ZCBjbGFzcz0icmlnaHQiPiAgIHJlcXVlc3Qgc2VudCB0byB0aGUgU1RVTiBzZXJ2ZXIuICBP bmNlIHRoZSBTVFVOIHNlcnZlciBoYXMgZGV0ZXJtaW5lZDwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8i IHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZh bGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgdGhlIHRva2VuIGlzIHZhbGlkLCBp dHMgc2VydmljZXMgYXJlIG9mZmVyZWQgZm9yIGEgZGV0ZXJtaW5lZCBwZXJpb2Q8L3RkPjx0ZD4g PC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICB0aGUgdG9rZW4gaXMgdmFsaWQsIGl0cyBzZXJ2aWNl cyBhcmUgb2ZmZXJlZCBmb3IgYSBkZXRlcm1pbmVkIHBlcmlvZDwvdGQ+PHRkIGNsYXNzPSJsaW5l bm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8i IHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgb2YgdGltZS4gIEFjY2VzcyB0 b2tlbiBpc3N1ZWQgYnkgdGhlIGF1dGhvcml6YXRpb24gc2VydmVyIGlzPC90ZD48dGQ+IDwvdGQ+ PHRkIGNsYXNzPSJyaWdodCI+ICAgb2YgdGltZS4gIEFjY2VzcyB0b2tlbiBpc3N1ZWQgYnkgdGhl IGF1dGhvcml6YXRpb24gc2VydmVyIGlzPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0 b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3Ai PjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBleHBsYWluZWQgaW4gU2VjdGlvbiA2LjIuICBPQXV0 aCAyLjAgaW4gW1JGQzY3NDldIGRlZmluZXMgZm91ciBncmFudDwvdGQ+PHRkPiA8L3RkPjx0ZCBj bGFzcz0icmlnaHQiPiAgIGV4cGxhaW5lZCBpbiBTZWN0aW9uIDYuMi4gIE9BdXRoIDIuMCBpbiBb UkZDNjc0OV0gZGVmaW5lcyBmb3VyIGdyYW50PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWdu PSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0 b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICB0eXBlcy4gIFRoaXMgc3BlY2lmaWNhdGlvbiB1 c2VzIHRoZSBPQXV0aCAyLjAgZ3JhbnQgdHlwZSAiSW1wbGljaXQiPC90ZD48dGQ+IDwvdGQ+PHRk IGNsYXNzPSJyaWdodCI+ICAgdHlwZXMuICBUaGlzIHNwZWNpZmljYXRpb24gdXNlcyB0aGUgT0F1 dGggMi4wIGdyYW50IHR5cGUgIkltcGxpY2l0IjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGln bj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0i dG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgZXhwbGFpbmVkIGluIHNlY3Rpb24gMS4zLjIg b2YgW1JGQzY3NDldIHdoZXJlIHRoZSBjbGllbnQgaXMgaXNzdWVkIGFuPC90ZD48dGQ+IDwvdGQ+ PHRkIGNsYXNzPSJyaWdodCI+ICAgZXhwbGFpbmVkIGluIHNlY3Rpb24gMS4zLjIgb2YgW1JGQzY3 NDldIHdoZXJlIHRoZSBjbGllbnQgaXMgaXNzdWVkIGFuPC90ZD48dGQgY2xhc3M9ImxpbmVubyIg dmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFs aWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBhY2Nlc3MgdG9rZW4gZGlyZWN0bHku ICBUaGUgc3RyaW5nICdzdHVuJyBpcyBkZWZpbmVkIGJ5IHRoaXM8L3RkPjx0ZD4gPC90ZD48dGQg Y2xhc3M9InJpZ2h0Ij4gICBhY2Nlc3MgdG9rZW4gZGlyZWN0bHkuICBUaGUgc3RyaW5nICdzdHVu JyBpcyBkZWZpbmVkIGJ5IHRoaXM8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+ PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90 ZD48dGQgY2xhc3M9ImxlZnQiPiAgIHNwZWNpZmljYXRpb24gZm9yIHVzZSBhcyB0aGUgT0F1dGgg c2NvcGUgcGFyYW1ldGVyIChzZWUgc2VjdGlvbiAzLjM8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9 InJpZ2h0Ij4gICBzcGVjaWZpY2F0aW9uIGZvciB1c2UgYXMgdGhlIE9BdXRoIHNjb3BlIHBhcmFt ZXRlciAoc2VlIHNlY3Rpb24gMy4zPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3Ai PjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwv dGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBvZiBbUkZDNjc0OV0pIGZvciB0aGUgT0F1dGggdG9rZW4u PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgb2YgW1JGQzY3NDldKSBmb3IgdGhl IE9BdXRoIHRva2VuLjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwv dHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBj bGFzcz0ibGVmdCI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+PC90ZD48dGQgY2xh c3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQ+PGEgbmFt ZT0iZGlmZjAwMTAiPjwvYT48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8i IHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj4gICBUaGUgZXhhY3QgbWVjaGFu aXNtIHVzZWQgYnkgYSBjbGllbnQgdG8gb2J0YWluIGEgdG9rZW4gPHNwYW4gY2xhc3M9ImRlbGV0 ZSI+ZnJvbSB0aGU8L3NwYW4+IE9BdXRoPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2si PiAgIFRoZSBleGFjdCBtZWNoYW5pc20gdXNlZCBieSBhIGNsaWVudCB0byBvYnRhaW4gYSB0b2tl biA8c3BhbiBjbGFzcz0iaW5zZXJ0Ij5hbmQgb3RoZXI8L3NwYW4+PC90ZD48dGQgY2xhc3M9Imxp bmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVu byIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPiAgIDIuMCA8c3BhbiBjbGFz cz0iZGVsZXRlIj5hdXRob3JpemF0aW9uIHNlcnZlcjwvc3Bhbj4gaXMgb3V0c2lkZSB0aGUgc2Nv cGUgb2YgdGhpcyBkb2N1bWVudC48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+ICAg T0F1dGggMi4wIDxzcGFuIGNsYXNzPSJpbnNlcnQiPnBhcmFtZXRlcnMgbGlrZSB0b2tlbiB0eXBl LCBtYWNfa2V5LCB0b2tlbiBsaWZldGltZSBhbmQga2lkPC9zcGFuPjwvdGQ+PHRkIGNsYXNzPSJs aW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5l bm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj4gICBBcHBlbmRpeCBCIHBy b3ZpZGVzIGFuIGV4YW1wbGUgZGVwbG95bWVudCBzY2VuYXJpbyBvZiBpbnRlcmFjdGlvbjwvdGQ+ PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj4gICBpcyBvdXRzaWRlIHRoZSBzY29wZSBvZiB0 aGlzIGRvY3VtZW50LiAgQXBwZW5kaXggQiBwcm92aWRlcyBhbjwvdGQ+PHRkIGNsYXNzPSJsaW5l bm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8i IHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj4gICBiZXR3ZWVuIHRoZSBjbGll bnQgYW5kIGF1dGhvcml6YXRpb24gc2VydmVyIHRvIG9idGFpbiBhIHRva2VuLjwvdGQ+PHRkPiA8 L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj4gICBleGFtcGxlIGRlcGxveW1lbnQgc2NlbmFyaW8gb2Yg aW50ZXJhY3Rpb24gYmV0d2VlbiB0aGUgY2xpZW50IGFuZDwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8i IHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZh bGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48L3RkPjx0ZD4gPC90ZD48dGQgY2xh c3M9InJibG9jayI+ICAgYXV0aG9yaXphdGlvbiBzZXJ2ZXIgdG8gb2J0YWluIGEgPHNwYW4gY2xh c3M9Imluc2VydCI+dG9rZW4gYW5kIG90aGVyIE9BdXRoIDIuMDwvc3Bhbj48L3RkPjx0ZCBjbGFz cz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0i bGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+PC90ZD48dGQ+IDwv dGQ+PHRkIGNsYXNzPSJyYmxvY2siPjxzcGFuIGNsYXNzPSJpbnNlcnQiPiAgIHBhcmFtZXRlcnMu PC9zcGFuPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQog ICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0i bGJsb2NrIj48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+PHNwYW4gY2xhc3M9Imlu c2VydCI+PC9zcGFuPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwv dHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBj bGFzcz0ibGJsb2NrIj48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+PHNwYW4gY2xh c3M9Imluc2VydCI+ICAgQ29uc2lkZXIgdGhlIGZvbGxvd2luZyBleGFtcGxlIHRoYXQgaWxsdXN0 cmF0ZXMgdGhlIHVzZSBvZiBPQXV0aCAyLjA8L3NwYW4+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIg dmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFs aWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFz cz0icmJsb2NrIj48c3BhbiBjbGFzcz0iaW5zZXJ0Ij4gICB0byBhY2hpZXZlIHRoaXJkIHBhcnR5 IGF1dGhvcml6YXRpb24gZm9yIFRyYXZlcnNhbCBVc2luZyBSZWxheSBOQVQ8L3NwYW4+PC90ZD48 dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQg Y2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPjwvdGQ+ PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48c3BhbiBjbGFzcz0iaW5zZXJ0Ij4gICAoVFVS TikgW1JGQzU3NjZdIC48L3NwYW4+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3Ai PjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwv dGQ+PHRkIGNsYXNzPSJsYmxvY2siPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48 c3BhbiBjbGFzcz0iaW5zZXJ0Ij48L3NwYW4+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWdu PSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0 b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJs b2NrIj48c3BhbiBjbGFzcz0iaW5zZXJ0Ij4zLjEuICBUVVJOPC9zcGFuPjwvdGQ+PHRkIGNsYXNz PSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJs aW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48L3RkPjx0ZD4gPC90 ZD48dGQgY2xhc3M9InJibG9jayI+PHNwYW4gY2xhc3M9Imluc2VydCI+PC9zcGFuPjwvdGQ+PHRk IGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNs YXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48L3RkPjx0 ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+PHNwYW4gY2xhc3M9Imluc2VydCI+ICAgVFVSTiBh biBleHRlbnNpb24gdG8gdGhlIFNUVU4gcHJvdG9jb2wgaXMgb2Z0ZW4gdXNlZCB0byBpbXByb3Zl IHRoZTwvc3Bhbj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3Ry Pg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xh c3M9ImxibG9jayI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPjxzcGFuIGNsYXNz PSJpbnNlcnQiPiAgIGNvbm5lY3Rpdml0eSBvZiBQMlAgYXBwbGljYXRpb25zLiAgVFVSTiBlbnN1 cmVzIHRoYXQgYSBjb25uZWN0aW9uIGNhbjwvc3Bhbj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2 YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxp Z249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNz PSJyYmxvY2siPjxzcGFuIGNsYXNzPSJpbnNlcnQiPiAgIGJlIGVzdGFibGlzaGVkIGV2ZW4gd2hl biBvbmUgb3IgYm90aCBzaWRlcyBpcyBpbmNhcGFibGUgb2YgYSBkaXJlY3Q8L3NwYW4+PC90ZD48 dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQg Y2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPjwvdGQ+ PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48c3BhbiBjbGFzcz0iaW5zZXJ0Ij4gICBQMlAg Y29ubmVjdGlvbi4gIEhvd2V2ZXIsIGFzIGEgcmVsYXkgc2VydmljZSwgaXQgaW1wb3NlcyBhIG5v bnRyaXZpYWw8L3NwYW4+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+ PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRk IGNsYXNzPSJsYmxvY2siPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48c3BhbiBj bGFzcz0iaW5zZXJ0Ij4gICBjb3N0IG9uIHRoZSBzZXJ2aWNlIHByb3ZpZGVyLiAgVGhlcmVmb3Jl LCBhY2Nlc3MgdG8gYSBUVVJOIHNlcnZpY2UgaXM8L3NwYW4+PC90ZD48dGQgY2xhc3M9ImxpbmVu byIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIg dmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPjwvdGQ+PHRkPiA8L3RkPjx0ZCBj bGFzcz0icmJsb2NrIj48c3BhbiBjbGFzcz0iaW5zZXJ0Ij4gICBhbG1vc3QgYWx3YXlzIGFjY2Vz cy1jb250cm9sbGVkLiAgSW4gb3JkZXIgdG8gYWNoaWV2ZSB0aGlyZCBwYXJ0eTwvc3Bhbj48L3Rk Pjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0 ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+PC90 ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPjxzcGFuIGNsYXNzPSJpbnNlcnQiPiAgIGF1 dGhvcml6YXRpb24sIGEgcmVzb3VyY2Ugb3duZXIgZS5nLiAgV2ViUlRDIHNlcnZlciwgYXV0aG9y aXplcyBhPC9zcGFuPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwv dHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBj bGFzcz0ibGJsb2NrIj48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+PHNwYW4gY2xh c3M9Imluc2VydCI+ICAgVFVSTiBjbGllbnQgdG8gYWNjZXNzIHJlc291cmNlcyBvbiB0aGUgVFVS TiBzZXJ2ZXIuPC9zcGFuPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3Rk PjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0 ZCBjbGFzcz0ibGJsb2NrIj48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+PHNwYW4g Y2xhc3M9Imluc2VydCI+PC9zcGFuPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9w Ij48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48 L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+ PHNwYW4gY2xhc3M9Imluc2VydCI+ICAgSW4gdGhpcyBleGFtcGxlLCBhIHJlc291cmNlIG93bmVy IGkuZS4sIFdlYlJUQyBzZXJ2ZXIsIGF1dGhvcml6ZXMgYTwvc3Bhbj48L3RkPjx0ZCBjbGFzcz0i bGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGlu ZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+PC90ZD48dGQ+IDwvdGQ+ PHRkIGNsYXNzPSJyYmxvY2siPjxzcGFuIGNsYXNzPSJpbnNlcnQiPiAgIFRVUk4gY2xpZW50IHRv IGFjY2VzcyByZXNvdXJjZXMgb24gYSBUVVJOIHNlcnZlci48L3NwYW4+PC90ZD48dGQgY2xhc3M9 ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9Imxp bmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPjwvdGQ+PHRkPiA8L3Rk Pjx0ZCBjbGFzcz0icmJsb2NrIj48c3BhbiBjbGFzcz0iaW5zZXJ0Ij48L3NwYW4+PC90ZD48dGQg Y2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xh c3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPjwvdGQ+PHRk PiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48c3BhbiBjbGFzcz0iaW5zZXJ0Ij4gICAgICAgICAg ICAgICAgICstLS0tLS0tLS0tLS0tLS0tLS0tLS0tKy0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0rPC9zcGFuPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+ DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFz cz0ibGJsb2NrIj48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+PHNwYW4gY2xhc3M9 Imluc2VydCI+ICAgICAgICAgICAgICAgICB8ICAgICBPQXV0aCAyLjAgICAgICAgIHwgICAgICAg ICAgICBXZWJSVEMgICAgICAgICAgfDwvc3Bhbj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxp Z249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249 InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJy YmxvY2siPjxzcGFuIGNsYXNzPSJpbnNlcnQiPiAgICAgICAgICAgICAgICAgKz09PT09PT09PT09 PT09PT09PT09PT0rPT09PT09PT09PT09PT09PT09PT09PT09PT09PSs8L3NwYW4+PC90ZD48dGQg Y2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xh c3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPjwvdGQ+PHRk PiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48c3BhbiBjbGFzcz0iaW5zZXJ0Ij4gICAgICAgICAg ICAgICAgIHwgQ2xpZW50ICAgICAgICAgICAgICAgfCBXZWJSVEMgY2xpZW50ICAgICAgICAgICAg ICB8PC9zcGFuPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+ DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFz cz0ibGJsb2NrIj48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+PHNwYW4gY2xhc3M9 Imluc2VydCI+ICAgICAgICAgICAgICAgICArLS0tLS0tLS0tLS0tLS0tLS0tLS0tLSstLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tKzwvc3Bhbj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxp Z249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249 InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJy YmxvY2siPjxzcGFuIGNsYXNzPSJpbnNlcnQiPiAgICAgICAgICAgICAgICAgfCBSZXNvdXJjZSBv d25lciAgICAgICB8IFdlYlJUQyBzZXJ2ZXIgICAgICAgICAgICAgIHw8L3NwYW4+PC90ZD48dGQg Y2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xh c3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPjwvdGQ+PHRk PiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48c3BhbiBjbGFzcz0iaW5zZXJ0Ij4gICAgICAgICAg ICAgICAgICstLS0tLS0tLS0tLS0tLS0tLS0tLS0tKy0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0rPC9zcGFuPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+ DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFz cz0ibGJsb2NrIj48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+PHNwYW4gY2xhc3M9 Imluc2VydCI+ICAgICAgICAgICAgICAgICB8IEF1dGhvcml6YXRpb24gc2VydmVyIHwgQXV0aG9y aXphdGlvbiBzZXJ2ZXIgICAgICAgfDwvc3Bhbj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxp Z249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249 InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJy YmxvY2siPjxzcGFuIGNsYXNzPSJpbnNlcnQiPiAgICAgICAgICAgICAgICAgKy0tLS0tLS0tLS0t LS0tLS0tLS0tLS0rLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLSs8L3NwYW4+PC90ZD48dGQg Y2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xh c3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPjwvdGQ+PHRk PiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48c3BhbiBjbGFzcz0iaW5zZXJ0Ij4gICAgICAgICAg ICAgICAgIHwgUmVzb3VyY2Ugc2VydmVyICAgICAgfCBUVVJOIFNlcnZlciAgICAgICAgICAgICAg ICB8PC9zcGFuPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+ DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFz cz0ibGJsb2NrIj48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+PHNwYW4gY2xhc3M9 Imluc2VydCI+ICAgICAgICAgICAgICAgICArLS0tLS0tLS0tLS0tLS0tLS0tLS0tLSstLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tKzwvc3Bhbj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxp Z249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249 InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJy YmxvY2siPjxzcGFuIGNsYXNzPSJpbnNlcnQiPjwvc3Bhbj48L3RkPjx0ZCBjbGFzcz0ibGluZW5v IiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2 YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNs YXNzPSJyYmxvY2siPjxzcGFuIGNsYXNzPSJpbnNlcnQiPiAgICAgICAgIEZpZ3VyZSAxOiBPQXV0 aCB0ZXJtaW5vbG9neSBtYXBwZWQgdG8gV2ViUlRDIHRlcm1pbm9sb2d5PC9zcGFuPjwvdGQ+PHRk IGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNs YXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48L3RkPjx0 ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+PHNwYW4gY2xhc3M9Imluc2VydCI+PC9zcGFuPjwv dGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+ PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48 L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+PHNwYW4gY2xhc3M9Imluc2VydCI+ICAg VXNpbmcgdGhlIE9BdXRoIDIuMCBhdXRob3JpemF0aW9uIGZyYW1ld29yaywgYSBXZWJSVEMgY2xp ZW50ICh0aGlyZC08L3NwYW4+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwv dGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+ PHRkIGNsYXNzPSJsYmxvY2siPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48c3Bh biBjbGFzcz0iaW5zZXJ0Ij4gICBwYXJ0eSBhcHBsaWNhdGlvbikgb2J0YWlucyBsaW1pdGVkIGFj Y2VzcyB0byBhIFRVUk4gKHJlc291cmNlIHNlcnZlcik8L3NwYW4+PC90ZD48dGQgY2xhc3M9Imxp bmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVu byIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPjwvdGQ+PHRkPiA8L3RkPjx0 ZCBjbGFzcz0icmJsb2NrIj48c3BhbiBjbGFzcz0iaW5zZXJ0Ij4gICBvbiBiZWhhbGYgb2YgdGhl IFdlYlJUQyBzZXJ2ZXIgKHJlc291cmNlIG93bmVyIG9yIGF1dGhvcml6YXRpb248L3NwYW4+PC90 ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48 dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPjwv dGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48c3BhbiBjbGFzcz0iaW5zZXJ0Ij4gICBz ZXJ2ZXIpLiAgVGhlIFdlYlJUQyBjbGllbnQgcmVxdWVzdHMgYWNjZXNzIHRvIHJlc291cmNlcyBj b250cm9sbGVkPC9zcGFuPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3Rk PjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0 ZCBjbGFzcz0ibGJsb2NrIj48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+PHNwYW4g Y2xhc3M9Imluc2VydCI+ICAgYnkgdGhlIHJlc291cmNlIG93bmVyIChXZWJSVEMgc2VydmVyKSBh bmQgaG9zdGVkIGJ5IHRoZSByZXNvdXJjZTwvc3Bhbj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2 YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxp Z249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNz PSJyYmxvY2siPjxzcGFuIGNsYXNzPSJpbnNlcnQiPiAgIHNlcnZlciAoVFVSTiBzZXJ2ZXIpLiAg VGhlIFdlYlJUQyBjbGllbnQgb2J0YWlucyBhY2Nlc3MgdG9rZW4sPC9zcGFuPjwvdGQ+PHRkIGNs YXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNz PSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48L3RkPjx0ZD4g PC90ZD48dGQgY2xhc3M9InJibG9jayI+PHNwYW4gY2xhc3M9Imluc2VydCI+ICAgbGlmZXRpbWUs IHNlc3Npb24ga2V5IGFuZCBraWQuICBUaGUgVFVSTiBjbGllbnQgY29udmV5cyB0aGUgYWNjZXNz PC9zcGFuPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQog ICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0i bGJsb2NrIj48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+PHNwYW4gY2xhc3M9Imlu c2VydCI+ICAgdG9rZW4gYW5kIG90aGVyIE9BdXRoIDIuMCBwYXJhbWV0ZXJzIGxlYXJudCBmcm9t IHRoZSBhdXRob3JpemF0aW9uPC9zcGFuPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0i dG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9w Ij48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9j ayI+PHNwYW4gY2xhc3M9Imluc2VydCI+ICAgc2VydmVyIHRvIHRoZSBUVVJOIHNlcnZlci4gIFRo ZSBUVVJOIHNlcnZlciBvYnRhaW5zIHRoZSBzZXNzaW9uIGtleTwvc3Bhbj48L3RkPjx0ZCBjbGFz cz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0i bGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+PC90ZD48dGQ+IDwv dGQ+PHRkIGNsYXNzPSJyYmxvY2siPjxzcGFuIGNsYXNzPSJpbnNlcnQiPiAgIGZyb20gdGhlIGFj Y2VzcyB0b2tlbi4gIFRoZSBUVVJOIHNlcnZlciB2YWxpZGF0ZXMgdGhlIHRva2VuLCBjb21wdXRl czwvc3Bhbj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0K ICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9 ImxibG9jayI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPjxzcGFuIGNsYXNzPSJp bnNlcnQiPiAgIHRoZSBtZXNzYWdlIGludGVncml0eSBvZiB0aGUgcmVxdWVzdCBhbmQgdGFrZXMg YXBwcm9wcmlhdGUgYWN0aW9uPC9zcGFuPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0i dG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9w Ij48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9j ayI+PHNwYW4gY2xhc3M9Imluc2VydCI+ICAgaS5lLCBwZXJtaXRzIHRoZSBUVVJOIGNsaWVudCB0 byBjcmVhdGUgYWxsb2NhdGlvbnMuICBUaGlzIGlzIHNob3duIGluPC9zcGFuPjwvdGQ+PHRkIGNs YXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNz PSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48L3RkPjx0ZD4g PC90ZD48dGQgY2xhc3M9InJibG9jayI+PHNwYW4gY2xhc3M9Imluc2VydCI+ICAgYW4gYWJzdHJh Y3Qgd2F5IGluIEZpZ3VyZSAyLjwvc3Bhbj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249 InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRv cCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxv Y2siPjxzcGFuIGNsYXNzPSJpbnNlcnQiPjwvc3Bhbj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2 YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxp Z249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNz PSJyYmxvY2siPjxzcGFuIGNsYXNzPSJpbnNlcnQiPiAgICAgICAgICAgICAgICAgICAgICAgICAg ICstLS0tLS0tLS0tLS0tLS0rPC9zcGFuPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0i dG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9w Ij48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9j ayI+PHNwYW4gY2xhc3M9Imluc2VydCI+ICAgICAgICAgICAgICAgICAgICAgICAgICAgfCAgICAg ICAgICAgICAgICsmbHQ7KioqKioqKzwvc3Bhbj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxp Z249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249 InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJy YmxvY2siPjxzcGFuIGNsYXNzPSJpbnNlcnQiPiAgICAgICAgICAgICstLS0tLS0tLS0tLS0tJmd0 O3wgQXV0aG9yaXphdGlvbiB8ICAgICAgICo8L3NwYW4+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIg dmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFs aWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFz cz0icmJsb2NrIj48c3BhbiBjbGFzcz0iaW5zZXJ0Ij4gICAgICAgICAgICB8ICAgICAgICAgICAg ICB8IFNlcnZlciAgICAgICAgfCAgICAgICAqPC9zcGFuPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8i IHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZh bGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48L3RkPjx0ZD4gPC90ZD48dGQgY2xh c3M9InJibG9jayI+PHNwYW4gY2xhc3M9Imluc2VydCI+ICAgICAgICAgICAgfCAgICstLS0tLS0t LS0tfChXZWJSVEMgU2VydmVyKXwgICAgICAgKiAgQVMtUlMsPC9zcGFuPjwvdGQ+PHRkIGNsYXNz PSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJs aW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48L3RkPjx0ZD4gPC90 ZD48dGQgY2xhc3M9InJibG9jayI+PHNwYW4gY2xhc3M9Imluc2VydCI+ICAgICAgICAgICAgfCAg IHwgICAgICAgICAgfCAgICAgICAgICAgICAgIHwgICAgICAgKiAgQVVUSCBrZXlzPC9zcGFuPjwv dGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+ PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48 L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+PHNwYW4gY2xhc3M9Imluc2VydCI+ICAg KDIpICAgICAgfCAgIHwgICAgICAgICAgICstLS0tLS0tLS0tLS0tLS0rICAgICAgKiAgICgxKTwv c3Bhbj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAg ICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9Imxi bG9jayI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPjxzcGFuIGNsYXNzPSJpbnNl cnQiPiAgIEFjY2VzcyAgIHwgICB8ICAoMykgICAgICAgICAgICAgICAgICAgICAgICAgICAgICo8 L3NwYW4+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAg ICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJs YmxvY2siPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48c3BhbiBjbGFzcz0iaW5z ZXJ0Ij4gICBUb2tlbiAgICB8ICAgfCBBY2Nlc3MgVG9rZW4gICAgICAgICAgICAgICAgICAgICAq PC9zcGFuPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQog ICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0i bGJsb2NrIj48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+PHNwYW4gY2xhc3M9Imlu c2VydCI+ICAgUmVxdWVzdCAgfCAgIHwgICAgKyAgICAgICAgICAgICAgICAgICAgICAgICAgICAg Kjwvc3Bhbj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0K ICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9 ImxibG9jayI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPjxzcGFuIGNsYXNzPSJp bnNlcnQiPiAgICAgICAgICAgIHwgICB8IFNlc3Npb24gS2V5ICAgICAgICAgICAgICAgICAgICAg ICo8L3NwYW4+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4N CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNz PSJsYmxvY2siPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48c3BhbiBjbGFzcz0i aW5zZXJ0Ij4gICAgICAgICAgICB8ICAgfCAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAqPC9zcGFuPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+ DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFz cz0ibGJsb2NrIj48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+PHNwYW4gY2xhc3M9 Imluc2VydCI+ICAgICAgICAgICAgfCAgIFYgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgVjwvc3Bhbj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3Ry Pg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xh c3M9ImxibG9jayI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPjxzcGFuIGNsYXNz PSJpbnNlcnQiPiAgICAgICAgKy0tLS0tLS0rLS0tKyAgICAgICAgICAgICAgICAgICAgICAgKy0r LS0tLT0tLS0tLSs8L3NwYW4+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwv dGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+ PHRkIGNsYXNzPSJsYmxvY2siPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48c3Bh biBjbGFzcz0iaW5zZXJ0Ij4gICAgICAgIHwgICAgICAgICAgIHwgICAgICAgICAoNCkgICAgICAg ICAgIHwgICAgICAgICAgICB8PC9zcGFuPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0i dG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9w Ij48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9j ayI+PHNwYW4gY2xhc3M9Imluc2VydCI+ICAgICAgICB8ICAgICAgICAgICB8IFRVUk4gUmVxdWVz dCArIEFjY2VzcyB8ICAgICAgICAgICAgfDwvc3Bhbj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2 YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxp Z249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNz PSJyYmxvY2siPjxzcGFuIGNsYXNzPSJpbnNlcnQiPiAgICAgICAgfCBXZWJSVEMgICAgfCBUb2tl biAgICAgICAgICAgICAgICAgfCBUVVJOICAgICAgIHw8L3NwYW4+PC90ZD48dGQgY2xhc3M9Imxp bmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVu byIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPjwvdGQ+PHRkPiA8L3RkPjx0 ZCBjbGFzcz0icmJsb2NrIj48c3BhbiBjbGFzcz0iaW5zZXJ0Ij4gICAgICAgIHwgQ2xpZW50ICAg IHwtLS0tLS0tLS0tLS0tLS0tLS0tLS0tJmd0O3wgU2VydmVyICAgICB8PC9zcGFuPjwvdGQ+PHRk IGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNs YXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48L3RkPjx0 ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+PHNwYW4gY2xhc3M9Imluc2VydCI+ICAgICAgICB8 IChBbGljZSkgICB8IEFsbG9jYXRlIFJlc3BvbnNlICg1KSB8ICAgICAgICAgICAgfDwvc3Bhbj48 L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRy Pjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+ PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPjxzcGFuIGNsYXNzPSJpbnNlcnQiPiAg ICAgICAgfCAgICAgICAgICAgfCZsdDstLS0tLS0tLS0tLS0tLS0tLS0tLS0tfCAgICAgICAgICAg IHw8L3NwYW4+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4N CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNz PSJsYmxvY2siPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48c3BhbiBjbGFzcz0i aW5zZXJ0Ij4gICAgICAgICstLS0tLS0tLS0tLSsgICAgICAgICAgICAgICAgICAgICAgICstLS0t LS0tLS0tLS0rPC9zcGFuPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3Rk PjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0 ZCBjbGFzcz0ibGJsb2NrIj48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+PHNwYW4g Y2xhc3M9Imluc2VydCI+PC9zcGFuPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9w Ij48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48 L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+ PHNwYW4gY2xhc3M9Imluc2VydCI+ICAgVXNlciA6IEFsaWNlPC9zcGFuPjwvdGQ+PHRkIGNsYXNz PSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJs aW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48L3RkPjx0ZD4gPC90 ZD48dGQgY2xhc3M9InJibG9jayI+PHNwYW4gY2xhc3M9Imluc2VydCI+ICAgKioqKjogT3V0LW9m LUJhbmQgTG9uZy1UZXJtIEtleSBFc3RhYmxpc2htZW50PC9zcGFuPjwvdGQ+PHRkIGNsYXNzPSJs aW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5l bm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48L3RkPjx0ZD4gPC90ZD48 dGQgY2xhc3M9InJibG9jayI+PHNwYW4gY2xhc3M9Imluc2VydCI+PC9zcGFuPjwvdGQ+PHRkIGNs YXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNz PSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48L3RkPjx0ZD4g PC90ZD48dGQgY2xhc3M9InJibG9jayI+PHNwYW4gY2xhc3M9Imluc2VydCI+ICAgICAgICAgICAg ICAgICAgICAgICAgICBGaWd1cmUgMjogSW50ZXJhY3Rpb25zPC9zcGFuPjwvdGQ+PHRkIGNsYXNz PSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJs aW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48L3RkPjx0ZD4gPC90 ZD48dGQgY2xhc3M9InJibG9jayI+PHNwYW4gY2xhc3M9Imluc2VydCI+PC9zcGFuPjwvdGQ+PHRk IGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNs YXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48L3RkPjx0 ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+PHNwYW4gY2xhc3M9Imluc2VydCI+ICAgSW4gdGhl IGJlbG93IGZpZ3VyZSwgdGhlIGNsaWVudCBzZW5kcyBhbiBBbGxvY2F0ZSByZXF1ZXN0IHRvIHRo ZTwvc3Bhbj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0K ICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9 ImxibG9jayI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPjxzcGFuIGNsYXNzPSJp bnNlcnQiPiAgIHNlcnZlciB3aXRob3V0IGNyZWRlbnRpYWxzLiAgU2luY2UgdGhlIHNlcnZlciBy ZXF1aXJlcyB0aGF0IGFsbDwvc3Bhbj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRv cCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+ PC90ZD48dGQgY2xhc3M9ImxibG9jayI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2si PjxzcGFuIGNsYXNzPSJpbnNlcnQiPiAgIHJlcXVlc3RzIGJlIGF1dGhlbnRpY2F0ZWQgdXNpbmcg T0F1dGggMi4wLCB0aGUgc2VydmVyIHJlamVjdHMgdGhlPC9zcGFuPjwvdGQ+PHRkIGNsYXNzPSJs aW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5l bm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48L3RkPjx0ZD4gPC90ZD48 dGQgY2xhc3M9InJibG9jayI+PHNwYW4gY2xhc3M9Imluc2VydCI+ICAgcmVxdWVzdCB3aXRoIGEg NDAxIChVbmF1dGhvcml6ZWQpIGVycm9yIGNvZGUgYW5kIFNUVU4gYXR0cmlidXRlPC9zcGFuPjwv dGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+ PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48 L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+PHNwYW4gY2xhc3M9Imluc2VydCI+ICAg VEhJUkQtUEFSVFktQVVUSE9SSVpBVElPTi4gIFRoZSBXZWJSVEMgY2xpZW50IG9idGFpbnMgYWNj ZXNzIHRva2VuPC9zcGFuPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3Rk PjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0 ZCBjbGFzcz0ibGJsb2NrIj48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+PHNwYW4g Y2xhc3M9Imluc2VydCI+ICAgZnJvbSB0aGUgV2ViUlRDIHNlcnZlciBhbmQgdGhlbiB0cmllcyBh Z2FpbiwgdGhpcyB0aW1lIGluY2x1ZGluZzwvc3Bhbj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2 YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxp Z249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNz PSJyYmxvY2siPjxzcGFuIGNsYXNzPSJpbnNlcnQiPiAgIGFjY2Vzczwvc3Bhbj4gdG9rZW4uICA8 c3BhbiBjbGFzcz0iaW5zZXJ0Ij5UaGlzIHRpbWUsIHRoZSBzZXJ2ZXIgdmFsaWRhdGVzIHRoZSB0 b2tlbiwgYWNjZXB0cyB0aGU8L3NwYW4+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0 b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3Ai PjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2Nr Ij48c3BhbiBjbGFzcz0iaW5zZXJ0Ij4gICBBbGxvY2F0ZSByZXF1ZXN0IGFuZCByZXR1cm5zIGFu IEFsbG9jYXRlIHN1Y2Nlc3MgcmVzcG9uc2UgY29udGFpbmluZzwvc3Bhbj48L3RkPjx0ZCBjbGFz cz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0i bGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+PC90ZD48dGQ+IDwv dGQ+PHRkIGNsYXNzPSJyYmxvY2siPjxzcGFuIGNsYXNzPSJpbnNlcnQiPiAgIChhbW9uZ3N0IG90 aGVyIHRoaW5ncykgdGhlIHJlbGF5ZWQgdHJhbnNwb3J0IGFkZHJlc3MgYXNzaWduZWQgdG8gdGhl PC9zcGFuPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQog ICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0i bGJsb2NrIj48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+PHNwYW4gY2xhc3M9Imlu c2VydCI+ICAgYWxsb2NhdGlvbi48L3NwYW4+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWdu PSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0 b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJs b2NrIj48c3BhbiBjbGFzcz0iaW5zZXJ0Ij48L3NwYW4+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIg dmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFs aWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFz cz0icmJsb2NrIj48c3BhbiBjbGFzcz0iaW5zZXJ0Ij4gICArLS0tLS0tLS0tLS0tLS0tLS0tLSsg ICAgICAgICAgICAgICAgICAgICAgICAgKy0tLS0tLS0tKyAgKy0tLS0tLS0tLSs8L3NwYW4+PC90 ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48 dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPjwv dGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48c3BhbiBjbGFzcz0iaW5zZXJ0Ij4gICB8 IC4uLi4uLi4uLiAgVFVSTiAgIHwgICAgICAgICAgICAgICAgICAgICAgICAgfCAgVFVSTiAgfCAg fCAgV2ViUlRDIHw8L3NwYW4+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwv dGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+ PHRkIGNsYXNzPSJsYmxvY2siPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48c3Bh biBjbGFzcz0iaW5zZXJ0Ij4gICB8IC5XZWJSVEMgLiAgQ2xpZW50IHwgICAgICAgICAgICAgICAg ICAgICAgICAgfCAgICAgICAgfCAgfCAgICAgICAgIHw8L3NwYW4+PC90ZD48dGQgY2xhc3M9Imxp bmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVu byIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPjwvdGQ+PHRkPiA8L3RkPjx0 ZCBjbGFzcz0icmJsb2NrIj48c3BhbiBjbGFzcz0iaW5zZXJ0Ij4gICB8IC5DbGllbnQgLiAgICAg ICAgIHwgICAgICAgICAgICAgICAgICAgICAgICAgfCBTZXJ2ZXIgfCAgfCAgU2VydmVyIHw8L3Nw YW4+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAg IDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxv Y2siPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48c3BhbiBjbGFzcz0iaW5zZXJ0 Ij4gICB8IC4uLi4uLi4uLiAgICAgICAgIHwgICAgICAgICAgICAgICAgICAgICAgICAgfCAgICAg ICAgfCAgfCAgICAgICAgIHw8L3NwYW4+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0 b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3Ai PjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2Nr Ij48c3BhbiBjbGFzcz0iaW5zZXJ0Ij4gICArLS0tLS0tLS0tLS0tLS0tLS0tLSsgICAgICAgICAg ICAgICAgICAgICAgICAgKy0tLS0tLS0tKyAgKy0tLS0tLS0tLSs8L3NwYW4+PC90ZD48dGQgY2xh c3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9 ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPjwvdGQ+PHRkPiA8 L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48c3BhbiBjbGFzcz0iaW5zZXJ0Ij4gICAgIHwgICAgICAg fCAgICAgICAgICAgQWxsb2NhdGUgcmVxdWVzdCAgICAgICAgICAgICAgICB8ICAgICAgICAgfDwv c3Bhbj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAg ICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9Imxi bG9jayI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPjxzcGFuIGNsYXNzPSJpbnNl cnQiPiAgICAgfCAgICAgICB8LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tJmd0O3wgICAgICAgICB8PC9zcGFuPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0i dG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9w Ij48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9j ayI+PHNwYW4gY2xhc3M9Imluc2VydCI+ICAgICB8ICAgICAgIHwgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgfCAgICAgICAgIHw8L3NwYW4+PC90ZD48dGQgY2xhc3M9 ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9Imxp bmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPjwvdGQ+PHRkPiA8L3Rk Pjx0ZCBjbGFzcz0icmJsb2NrIj48c3BhbiBjbGFzcz0iaW5zZXJ0Ij4gICAgIHwgICAgICAgfCAg ICAgICAgIEFsbG9jYXRlIGVycm9yIHJlc3BvbnNlICAgICAgICAgICB8ICAgICAgICAgfDwvc3Bh bj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAg PHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9j ayI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPjxzcGFuIGNsYXNzPSJpbnNlcnQi PiAgICAgfCAgICAgICB8ICAgICAgICAgKDQwMSBVbmF1dGhvcml6ZWQpICAgICAgICAgICAgICAg IHwgICAgICAgICB8PC9zcGFuPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48 L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3Rk Pjx0ZCBjbGFzcz0ibGJsb2NrIj48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+PHNw YW4gY2xhc3M9Imluc2VydCI+ICAgICB8ICAgICAgIHwmbHQ7LS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tfCAgICAgICAgIHw8L3NwYW4+PC90ZD48dGQgY2xhc3M9Imxp bmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVu byIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPjwvdGQ+PHRkPiA8L3RkPjx0 ZCBjbGFzcz0icmJsb2NrIj48c3BhbiBjbGFzcz0iaW5zZXJ0Ij4gICAgIHwgICAgICAgfCAgICAg ICAgIFRISVJELVBBUlRZLUFVVEhPUklaQVRJT04gICAgICAgICB8ICAgICAgICAgfDwvc3Bhbj48 L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRy Pjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+ PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPjxzcGFuIGNsYXNzPSJpbnNlcnQiPiAg ICAgfCAgICAgICB8ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIHwg ICAgICAgICB8PC9zcGFuPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3Rk PjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0 ZCBjbGFzcz0ibGJsb2NrIj48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+PHNwYW4g Y2xhc3M9Imluc2VydCI+ICAgICB8ICAgICAgIHwgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgfCAgICAgICAgIHw8L3NwYW4+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIg dmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFs aWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFz cz0icmJsb2NrIj48c3BhbiBjbGFzcz0iaW5zZXJ0Ij4gICAgIHwgICAgICAgfCAgICAgIEhUVFAg UmVxdWVzdCBmb3IgdG9rZW4gICAgICAgICAgICAgICB8ICAgICAgICAgfDwvc3Bhbj48L3RkPjx0 ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBj bGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+PC90ZD48 dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPjxzcGFuIGNsYXNzPSJpbnNlcnQiPiAgICAgfC0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LSZndDt8PC9zcGFuPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwv dHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBj bGFzcz0ibGJsb2NrIj48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+PHNwYW4gY2xh c3M9Imluc2VydCI+ICAgICB8ICAgICAgIHwgICAgICBIVFRQIFJlc3BvbnNlIHdpdGggdG9rZW4g cGFyYW1ldGVycyAgfCAgICAgICAgIHw8L3NwYW4+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFs aWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWdu PSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0i cmJsb2NrIj48c3BhbiBjbGFzcz0iaW5zZXJ0Ij4gICAgIHwmbHQ7LS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tfDwvc3Bhbj48L3RkPjx0 ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBj bGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+PC90ZD48 dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPjxzcGFuIGNsYXNzPSJpbnNlcnQiPiAgICAgfE9B dXRoIDIuMCAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIHwgICAgICAg ICB8PC9zcGFuPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+ DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFz cz0ibGJsb2NrIj48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+PHNwYW4gY2xhc3M9 Imluc2VydCI+ICAgICAgQXR0cmlidXRlcyAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgfCAgICAgICAgIHw8L3NwYW4+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWdu PSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0 b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJs b2NrIj48c3BhbiBjbGFzcz0iaW5zZXJ0Ij4gICAgIHwtLS0tLS0mZ3Q7fCAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICB8ICAgICAgICAgfDwvc3Bhbj48L3RkPjx0ZCBj bGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFz cz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+PC90ZD48dGQ+ IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPjxzcGFuIGNsYXNzPSJpbnNlcnQiPiAgICAgfCAgICAg ICB8ICAgIEFsbG9jYXRlIHJlcXVlc3QgQUNDRVNTLVRPS0VOICAgICAgICAgIHwgICAgICAgICB8 PC9zcGFuPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQog ICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0i bGJsb2NrIj48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+PHNwYW4gY2xhc3M9Imlu c2VydCI+ICAgICB8ICAgICAgIHwtLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0mZ3Q7fCAgICAgICAgIHw8L3NwYW4+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWdu PSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0 b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJs b2NrIj48c3BhbiBjbGFzcz0iaW5zZXJ0Ij4gICAgIHwgICAgICAgfCAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICB8ICAgICAgICAgfDwvc3Bhbj48L3RkPjx0ZCBjbGFz cz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0i bGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+PC90ZD48dGQ+IDwv dGQ+PHRkIGNsYXNzPSJyYmxvY2siPjxzcGFuIGNsYXNzPSJpbnNlcnQiPiAgICAgfCAgICAgICB8 ICAgICAgICAgQWxsb2NhdGUgc3VjY2VzcyByZXNwb25zZSAgICAgICAgIHwgICAgICAgICB8PC9z cGFuPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAg ICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJs b2NrIj48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+PHNwYW4gY2xhc3M9Imluc2Vy dCI+ICAgICB8ICAgICAgIHwmbHQ7LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tfCAgICAgICAgIHw8L3NwYW4+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0 b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3Ai PjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2Nr Ij48c3BhbiBjbGFzcz0iaW5zZXJ0Ij4gICAgIHwgICAgICAgfCAgICAgICAgICAgICBUVVJOIE1l c3NhZ2VzICAgICAgICAgICAgICAgICB8ICAgICAgICAgfDwvc3Bhbj48L3RkPjx0ZCBjbGFzcz0i bGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGlu ZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+PC90ZD48dGQ+IDwvdGQ+ PHRkIGNsYXNzPSJyYmxvY2siPjxzcGFuIGNsYXNzPSJpbnNlcnQiPiAgICAgfCAgICAgICB8ICAg ICAgLy8vLy8vIGludGVncml0eSBwcm90ZWN0ZWQgLy8vLy8vICAgIHwgICAgICAgICB8PC9zcGFu PjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8 dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2Nr Ij48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+PHNwYW4gY2xhc3M9Imluc2VydCI+ ICAgICB8ICAgICAgIHwgICAgICAvLy8vLy8gaW50ZWdyaXR5IHByb3RlY3RlZCAvLy8vLy8gICAg fCAgICAgICAgIHw8L3NwYW4+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwv dGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+ PHRkIGNsYXNzPSJsYmxvY2siPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48c3Bh biBjbGFzcz0iaW5zZXJ0Ij4gICAgIHwgICAgICAgfCAgICAgIC8vLy8vLyBpbnRlZ3JpdHkgcHJv dGVjdGVkIC8vLy8vLyAgICB8ICAgICAgICAgfDwvc3Bhbj48L3RkPjx0ZCBjbGFzcz0ibGluZW5v IiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2 YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNs YXNzPSJyYmxvY2siPjxzcGFuIGNsYXNzPSJpbnNlcnQiPjwvc3Bhbj48L3RkPjx0ZCBjbGFzcz0i bGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGlu ZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+PC90ZD48dGQ+IDwvdGQ+ PHRkIGNsYXNzPSJyYmxvY2siPjxzcGFuIGNsYXNzPSJpbnNlcnQiPiAgICAgICAgICAgICAgICAg RmlndXJlIDM6IFRVUk4gVGhpcmQgUGFydHkgQXV0aG9yaXphdGlvbjwvc3Bhbj48L3RkPjx0ZCBj bGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFz cz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPjwvdGQ+PHRkPiA8 L3RkPjx0ZCBjbGFzcz0icmlnaHQiPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9w Ij48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48 L3RkPjx0ZCBjbGFzcz0ibGVmdCI+NC4gIE9idGFpbmluZyBhIFRva2VuIFVzaW5nIE9BdXRoPC90 ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+NC4gIE9idGFpbmluZyBhIFRva2VuIFVzaW5n IE9BdXRoPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAg ICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJs ZWZ0Ij48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij48L3RkPjx0ZCBjbGFzcz0ibGlu ZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5v IiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIEEgU1RVTiBjbGllbnQgbmVl ZHMgdG8ga25vdyB0aGUgYXV0aGVudGljYXRpb24gY2FwYWJpbGl0eSBvZiB0aGUgU1RVTjwvdGQ+ PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIEEgU1RVTiBjbGllbnQgbmVlZHMgdG8ga25v dyB0aGUgYXV0aGVudGljYXRpb24gY2FwYWJpbGl0eSBvZiB0aGUgU1RVTjwvdGQ+PHRkIGNsYXNz PSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJs aW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgc2VydmVyIGJlZm9y ZSBkZWNpZGluZyB0byB1c2UgdGhpcmQgcGFydHkgYXV0aG9yaXphdGlvbi4gIEEgU1RVTjwvdGQ+ PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIHNlcnZlciBiZWZvcmUgZGVjaWRpbmcgdG8g dXNlIHRoaXJkIHBhcnR5IGF1dGhvcml6YXRpb24uICBBIFNUVU48L3RkPjx0ZCBjbGFzcz0ibGlu ZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5v IiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIGNsaWVudCBpbml0aWFsbHkg bWFrZXMgYSByZXF1ZXN0IHdpdGhvdXQgYW55IGF1dGhvcml6YXRpb24uICBJZiB0aGU8L3RkPjx0 ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBjbGllbnQgaW5pdGlhbGx5IG1ha2VzIGEgcmVx dWVzdCB3aXRob3V0IGFueSBhdXRob3JpemF0aW9uLiAgSWYgdGhlPC90ZD48dGQgY2xhc3M9Imxp bmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVu byIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBTVFVOIHNlcnZlciBzdXBw b3J0cyB0aGlyZCBwYXJ0eSBhdXRob3JpemF0aW9uLCBpdCB3aWxsIHJldHVybiBhbjwvdGQ+PHRk PiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIFNUVU4gc2VydmVyIHN1cHBvcnRzIHRoaXJkIHBh cnR5IGF1dGhvcml6YXRpb24sIGl0IHdpbGwgcmV0dXJuIGFuPC90ZD48dGQgY2xhc3M9ImxpbmVu byIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIg dmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBlcnJvciBtZXNzYWdlIGluZGlj YXRpbmcgdGhhdCB0aGUgY2xpZW50IGNhbiBhdXRob3JpemUgdG8gdGhlIFNUVU48L3RkPjx0ZD4g PC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBlcnJvciBtZXNzYWdlIGluZGljYXRpbmcgdGhhdCB0 aGUgY2xpZW50IGNhbiBhdXRob3JpemUgdG8gdGhlIFNUVU48L3RkPjx0ZCBjbGFzcz0ibGluZW5v IiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2 YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIHNlcnZlciB1c2luZyBhbiBPQXV0 aCAyLjAgYWNjZXNzIHRva2VuLiAgVGhlIFNUVU4gc2VydmVyIGluY2x1ZGVzIGFuPC90ZD48dGQ+ IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgc2VydmVyIHVzaW5nIGFuIE9BdXRoIDIuMCBhY2Nl c3MgdG9rZW4uICBUaGUgU1RVTiBzZXJ2ZXIgaW5jbHVkZXMgYW48L3RkPjx0ZCBjbGFzcz0ibGlu ZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5v IiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIEVSUk9SLUNPREUgYXR0cmli dXRlIHdpdGggYSB2YWx1ZSBvZiA0MDEgKFVuYXV0aG9yaXplZCksIGEgbm9uY2U8L3RkPjx0ZD4g PC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBFUlJPUi1DT0RFIGF0dHJpYnV0ZSB3aXRoIGEgdmFs dWUgb2YgNDAxIChVbmF1dGhvcml6ZWQpLCBhIG5vbmNlPC90ZD48dGQgY2xhc3M9ImxpbmVubyIg dmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90 ZD48dGQgY2xhc3M9ImxlZnQiPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPjwvdGQ+ PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4NCiAgICAgIDx0ciBiZ2NvbG9yPSJncmF5Ij48 dGQ+PC90ZD48dGg+PGEgbmFtZT0icGFydC1sNiI+PHNtYWxsPnNraXBwaW5nIHRvIGNoYW5nZSBh dDwvc21hbGw+PGVtPiBwYWdlIDYsIGxpbmUgMjU8L2VtPjwvYT48L3RoPjx0aD4gPC90aD48dGg+ PGEgbmFtZT0icGFydC1yNiI+PHNtYWxsPnNraXBwaW5nIHRvIGNoYW5nZSBhdDwvc21hbGw+PGVt PiBwYWdlIDksIGxpbmUgMjk8L2VtPjwvYT48L3RoPjx0ZD48L3RkPjwvdHI+DQogICAgICA8dHI+ PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+PC90 ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFs aWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWdu PSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBrIC0gTG9uZy10ZXJtIGtleSAoSyk8L3Rk Pjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBrIC0gTG9uZy10ZXJtIGtleSAoSyk8L3Rk Pjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0 ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIGV4 cCAtIGlkZW50aWZpZXMgdGhlIHRpbWUgYWZ0ZXIgd2hpY2ggdGhlIGtleSBleHBpcmVzLjwvdGQ+ PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIGV4cCAtIGlkZW50aWZpZXMgdGhlIHRpbWUg YWZ0ZXIgd2hpY2ggdGhlIGtleSBleHBpcmVzLjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGln bj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0i dG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdo dCI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAg IDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0 Ij4gICBleGFtcGxlOjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIGV4YW1wbGU6 PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0 cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4g ICB7PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgezwvdGQ+PHRkIGNsYXNzPSJs aW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5l bm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgICAgImsiIDo8L3RkPjx0 ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICAgICAiayIgOjwvdGQ+PHRkIGNsYXNzPSJsaW5l bm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8i IHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgIkVTSXpSRlZtZDRpWkFCRWlN MFJWWmdLbjZXakxhVEMxRlhBZ2hSTVZUemtCR05hYU40OTY1MjNXSUlTS2VyTGkiLDwvdGQ+PHRk PiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgICJFU0l6UkZWbWQ0aVpBQkVpTTBSVlpnS242V2pM YVRDMUZYQWdoUk1WVHprQkdOYWFONDk2NTIzV0lJU0tlckxpIiw8L3RkPjx0ZCBjbGFzcz0ibGlu ZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5v IiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgICAgICJleHAiIDogMTMwMDgx OTM4MCw8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICAgICAiZXhwIiA6IDEzMDA4 MTkzODAsPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAg ICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJs ZWZ0Ij4gICAgICAia2lkIiA6IjIyQklqeFU5M2gvSWd3RWIiPC90ZD48dGQ+IDwvdGQ+PHRkIGNs YXNzPSJyaWdodCI+ICAgICAgImtpZCIgOiIyMkJJanhVOTNoL0lnd0ViIjwvdGQ+PHRkIGNsYXNz PSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkPjxhIG5hbWU9 ImRpZmYwMDExIj48L2E+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2 YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+ICAgICAgImVuYyIgOiBBMjU2R0NN PHNwYW4gY2xhc3M9ImRlbGV0ZSI+S1c8L3NwYW4+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJy YmxvY2siPiAgICAgICJlbmMiIDogQTI1NkdDTTwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGln bj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0i dG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgICB9PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNz PSJyaWdodCI+ICAgICB9PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+ PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRk IGNsYXNzPSJsZWZ0Ij48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij48L3RkPjx0ZCBj bGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFz cz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIFRoZSBhdXRo b3JpemF0aW9uIHNlcnZlciBtdXN0IGFsc28gc2lnbmFsIGtpZCB0byB0aGUgU1RVTiBzZXJ2ZXI8 L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBUaGUgYXV0aG9yaXphdGlvbiBzZXJ2 ZXIgbXVzdCBhbHNvIHNpZ25hbCBraWQgdG8gdGhlIFNUVU4gc2VydmVyPC90ZD48dGQgY2xhc3M9 ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9Imxp bmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICB3aGljaCB3aWxsIGJl IHVzZWQgdG8gc2VsZWN0IHRoZSBhcHByb3ByaWF0ZSBrZXlpbmcgbWF0ZXJpYWwgZm9yPC90ZD48 dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgd2hpY2ggd2lsbCBiZSB1c2VkIHRvIHNlbGVj dCB0aGUgYXBwcm9wcmlhdGUga2V5aW5nIG1hdGVyaWFsIGZvcjwvdGQ+PHRkIGNsYXNzPSJsaW5l bm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8i IHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgZGVjcnlwdGlvbi4gIFRoZSBw YXJhbWV0ZXIgImsiIGlzIGRlZmluZWQgaW4gU2VjdGlvbiA2LjQuMSBvZjwvdGQ+PHRkPiA8L3Rk Pjx0ZCBjbGFzcz0icmlnaHQiPiAgIGRlY3J5cHRpb24uICBUaGUgcGFyYW1ldGVyICJrIiBpcyBk ZWZpbmVkIGluIFNlY3Rpb24gNi40LjEgb2Y8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249 InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRv cCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIFtJLUQuaWV0Zi1qb3NlLWpzb24td2ViLWFsZ29y aXRobXNdLCAiZW5jIiBpcyBkZWZpbmVkIGluPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdo dCI+ICAgW0ktRC5pZXRmLWpvc2UtanNvbi13ZWItYWxnb3JpdGhtc10sICJlbmMiIGlzIGRlZmlu ZWQgaW48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAg ICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9Imxl ZnQiPiAgIFNlY3Rpb24gNC4xLjIgb2YgW0ktRC5pZXRmLWpvc2UtanNvbi13ZWItZW5jcnlwdGlv bl0sICJraWQiIGlzPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgU2VjdGlvbiA0 LjEuMiBvZiBbSS1ELmlldGYtam9zZS1qc29uLXdlYi1lbmNyeXB0aW9uXSwgImtpZCIgaXM8L3Rk Pjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0 ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIGRl ZmluZWQgaW4gU2VjdGlvbiA0LjEuNCBvZiBbSS1ELmlldGYtam9zZS1qc29uLXdlYi1zaWduYXR1 cmVdIGFuZDwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIGRlZmluZWQgaW4gU2Vj dGlvbiA0LjEuNCBvZiBbSS1ELmlldGYtam9zZS1qc29uLXdlYi1zaWduYXR1cmVdIGFuZDwvdGQ+ PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRk IGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgImV4 cCIgaXMgZGVmaW5lZCBpbiBTZWN0aW9uIDQuMS40IG9mIFtJLUQuaWV0Zi1vYXV0aC1qc29uLXdl Yi10b2tlbl0uPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgImV4cCIgaXMgZGVm aW5lZCBpbiBTZWN0aW9uIDQuMS40IG9mIFtJLUQuaWV0Zi1vYXV0aC1qc29uLXdlYi10b2tlbl0u PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0 cj48dGQ+PGEgbmFtZT0iZGlmZjAwMTIiPjwvYT48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNs YXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj4gICA8c3Bh biBjbGFzcz0iZGVsZXRlIj5BMjU2R0NNS1c8L3NwYW4+IGFuZCBvdGhlciBhdXRoZW50aWNhdGVk IGVuY3J5cHRpb24gYWxnb3JpdGhtcyBhcmUgZGVmaW5lZDwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFz cz0icmJsb2NrIj4gICA8c3BhbiBjbGFzcz0iaW5zZXJ0Ij5BMjU2R0NNPC9zcGFuPiBhbmQgb3Ro ZXIgYXV0aGVudGljYXRlZCBlbmNyeXB0aW9uIGFsZ29yaXRobXMgYXJlIGRlZmluZWQgaW48L3Rk Pjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0 ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+ICAg aW4gW0ktRC5pZXRmLWpvc2UtanNvbi13ZWItYWxnb3JpdGhtc10uICBBIFNUVU4gc2VydmVyIGFu ZDwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj4gICA8c3BhbiBjbGFzcz0iaW5zZXJ0 Ij5zZWN0aW9uIDUuMSBvZjwvc3Bhbj4gW0ktRC5pZXRmLWpvc2UtanNvbi13ZWItYWxnb3JpdGht c10uICBBIFNUVU4gc2VydmVyPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwv dGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+ PHRkIGNsYXNzPSJsYmxvY2siPiAgIGF1dGhvcml6YXRpb24gc2VydmVyIGltcGxlbWVudGF0aW9u IE1VU1Qgc3VwcG9ydCA8c3BhbiBjbGFzcz0iZGVsZXRlIj5BMjU2R0NNS1c8L3NwYW4+IGFzIHRo ZTwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj4gICBhbmQgYXV0aG9yaXphdGlvbiBz ZXJ2ZXIgaW1wbGVtZW50YXRpb24gTVVTVCBzdXBwb3J0IDxzcGFuIGNsYXNzPSJpbnNlcnQiPkEy NTZHQ008L3NwYW4+IGFzIHRoZTwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48 L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3Rk Pjx0ZCBjbGFzcz0ibGVmdCI+ICAgYXV0aGVudGljYXRlZCBlbmNyeXB0aW9uIGFsZ29yaXRobS48 L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBhdXRoZW50aWNhdGVkIGVuY3J5cHRp b24gYWxnb3JpdGhtLjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwv dHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBj bGFzcz0ibGVmdCI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+PC90ZD48dGQgY2xh c3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9 ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBJZiBBMjU2Q0JD LUhTNTEyIGRlZmluZWQgaW4gW0ktRC5pZXRmLWpvc2UtanNvbi13ZWItYWxnb3JpdGhtc10gaXM8 L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBJZiBBMjU2Q0JDLUhTNTEyIGRlZmlu ZWQgaW4gW0ktRC5pZXRmLWpvc2UtanNvbi13ZWItYWxnb3JpdGhtc10gaXM8L3RkPjx0ZCBjbGFz cz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0i bGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIHVzZWQgdGhlbiB0 aGUgQVMtUlMgYW5kIEFVVEgga2V5cyBhcmUgZGVyaXZlZCBmcm9tIEsgdXNpbmcgdGhlPC90ZD48 dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgdXNlZCB0aGVuIHRoZSBBUy1SUyBhbmQgQVVU SCBrZXlzIGFyZSBkZXJpdmVkIGZyb20gSyB1c2luZyB0aGU8L3RkPjx0ZCBjbGFzcz0ibGluZW5v IiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2 YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIG1lY2hhbmlzbSBleHBsYWluZWQg aW4gc2VjdGlvbiA1LjIuMi4xIG9mPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAg bWVjaGFuaXNtIGV4cGxhaW5lZCBpbiBzZWN0aW9uIDUuMi4yLjEgb2Y8L3RkPjx0ZCBjbGFzcz0i bGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGlu ZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIFtJLUQuaWV0Zi1qb3Nl LWpzb24td2ViLWFsZ29yaXRobXNdLiAgSW4gdGhpcyBjYXNlIEFTLVJTIGtleSBsZW5ndGg8L3Rk Pjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBbSS1ELmlldGYtam9zZS1qc29uLXdlYi1h bGdvcml0aG1zXS4gIEluIHRoaXMgY2FzZSBBUy1SUyBrZXkgbGVuZ3RoPC90ZD48dGQgY2xhc3M9 ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9Imxp bmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBtdXN0IGJlIDI1Ni1i aXQsIEFVVEgga2V5IGxlbmd0aCBtdXN0IGJlIDI1Ni1iaXQgKHNlY3Rpb24gMi42IG9mPC90ZD48 dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgbXVzdCBiZSAyNTYtYml0LCBBVVRIIGtleSBs ZW5ndGggbXVzdCBiZSAyNTYtYml0IChzZWN0aW9uIDIuNiBvZjwvdGQ+PHRkIGNsYXNzPSJsaW5l bm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8i IHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgW1JGQzQ4NjhdKS48L3RkPjx0 ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBbUkZDNDg2OF0pLjwvdGQ+PHRkIGNsYXNzPSJs aW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5l bm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+PC90ZD48dGQ+IDwvdGQ+PHRk IGNsYXNzPSJyaWdodCI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+ PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRk IGNsYXNzPSJsZWZ0Ij40LjEuMi4gIE1hbnVhbCBwcm92aXNpb25pbmc8L3RkPjx0ZD4gPC90ZD48 dGQgY2xhc3M9InJpZ2h0Ij40LjEuMi4gIE1hbnVhbCBwcm92aXNpb25pbmc8L3RkPjx0ZCBjbGFz cz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0i bGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJy aWdodCI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPg0KICAgICAgPHRyIGJnY29s b3I9ImdyYXkiPjx0ZD48L3RkPjx0aD48YSBuYW1lPSJwYXJ0LWw3Ij48c21hbGw+c2tpcHBpbmcg dG8gY2hhbmdlIGF0PC9zbWFsbD48ZW0+IHBhZ2UgOCwgbGluZSAyOTwvZW0+PC9hPjwvdGg+PHRo PiA8L3RoPjx0aD48YSBuYW1lPSJwYXJ0LXI3Ij48c21hbGw+c2tpcHBpbmcgdG8gY2hhbmdlIGF0 PC9zbWFsbD48ZW0+IHBhZ2UgMTEsIGxpbmUgMjk8L2VtPjwvYT48L3RoPjx0ZD48L3RkPjwvdHI+ DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFz cz0ibGVmdCI+ICAgICAgICAgICAgIHVpbnQxNl90IG5vbmNlX2xlbmd0aDs8L3RkPjx0ZD4gPC90 ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICAgICAgICAgICAgdWludDE2X3Qgbm9uY2VfbGVuZ3RoOzwv dGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+ PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAg ICAgICAgICAgIG9wYXF1ZSAgbm9uY2Vbbm9uY2VfbGVuZ3RoXTs8L3RkPjx0ZD4gPC90ZD48dGQg Y2xhc3M9InJpZ2h0Ij4gICAgICAgICAgICAgb3BhcXVlICBub25jZVtub25jZV9sZW5ndGhdOzwv dGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+ PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAg ICAgICAgICAgIG9wYXF1ZSB7PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgICAg ICAgICAgIG9wYXF1ZSB7PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+ PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRk IGNsYXNzPSJsZWZ0Ij4gICAgICAgICAgICAgICAgIHVpbnQxNl90IGtleV9sZW5ndGg7PC90ZD48 dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgICAgICAgICAgICAgICB1aW50MTZfdCBrZXlf bGVuZ3RoOzwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQog ICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0i bGVmdCI+ICAgICAgICAgICAgICAgICBvcGFxdWUgbWFjX2tleVtrZXlfbGVuZ3RoXTs8L3RkPjx0 ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICAgICAgICAgICAgICAgIG9wYXF1ZSBtYWNfa2V5 W2tleV9sZW5ndGhdOzwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwv dHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBj bGFzcz0ibGVmdCI+ICAgICAgICAgICAgICAgICB1aW50NjRfdCB0aW1lc3RhbXA7PC90ZD48dGQ+ IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgICAgICAgICAgICAgICB1aW50NjRfdCB0aW1lc3Rh bXA7PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAg IDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0 Ij4gICAgICAgICAgICAgICAgIHVpbnQzMl90IGxpZmV0aW1lOzwvdGQ+PHRkPiA8L3RkPjx0ZCBj bGFzcz0icmlnaHQiPiAgICAgICAgICAgICAgICAgdWludDMyX3QgbGlmZXRpbWU7PC90ZD48dGQg Y2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xh c3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICAgICAgICAg ICAgfSBlbmNyeXB0ZWRfYmxvY2s7PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAg ICAgICAgICAgIH0gZW5jcnlwdGVkX2Jsb2NrOzwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGln bj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0i dG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgICAgICAgfSB0b2tlbjs8L3RkPjx0ZD4gPC90 ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICAgICAgICB9IHRva2VuOzwvdGQ+PHRkIGNsYXNzPSJsaW5l bm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8i IHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNs YXNzPSJyaWdodCI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90 cj4NCiAgICAgIDx0cj48dGQ+PGEgbmFtZT0iZGlmZjAwMTMiPjwvYT48L3RkPjwvdHI+DQogICAg ICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJs b2NrIj4gICAgICAgICAgICAgICAgICAgRmlndXJlIDxzcGFuIGNsYXNzPSJkZWxldGUiPjE8L3Nw YW4+OiBTZWxmLWNvbnRhaW5lZCB0b2tlbiBmb3JtYXQ8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9 InJibG9jayI+ICAgICAgICAgICAgICAgICAgIEZpZ3VyZSA8c3BhbiBjbGFzcz0iaW5zZXJ0Ij40 PC9zcGFuPjogU2VsZi1jb250YWluZWQgdG9rZW4gZm9ybWF0PC90ZD48dGQgY2xhc3M9ImxpbmVu byIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIg dmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij48L3RkPjx0ZD4gPC90ZD48dGQgY2xh c3M9InJpZ2h0Ij48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3Ry Pg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xh c3M9ImxlZnQiPiAgIE5vdGU6IHVpbnROX3QgbWVhbnMgYW4gdW5zaWduZWQgaW50ZWdlciBvZiBl eGFjdGx5IE4gYml0cy4gIFNpbmdsZS08L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4g ICBOb3RlOiB1aW50Tl90IG1lYW5zIGFuIHVuc2lnbmVkIGludGVnZXIgb2YgZXhhY3RseSBOIGJp dHMuICBTaW5nbGUtPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90 cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNs YXNzPSJsZWZ0Ij4gICBieXRlIGVudGl0aWVzIGNvbnRhaW5pbmcgdW5pbnRlcnByZXRlZCBkYXRh IGFyZSBvZiB0eXBlIG9wYXF1ZS4gIEFsbDwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQi PiAgIGJ5dGUgZW50aXRpZXMgY29udGFpbmluZyB1bmludGVycHJldGVkIGRhdGEgYXJlIG9mIHR5 cGUgb3BhcXVlLiAgQWxsPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+ PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRk IGNsYXNzPSJsZWZ0Ij4gICB2YWx1ZXMgaW4gdGhlIHRva2VuIGFyZSBzdG9yZWQgaW4gbmV0d29y ayBieXRlIG9yZGVyLjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIHZhbHVlcyBp biB0aGUgdG9rZW4gYXJlIHN0b3JlZCBpbiBuZXR3b3JrIGJ5dGUgb3JkZXIuPC90ZD48dGQgY2xh c3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9 ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij48L3RkPjx0ZD4gPC90 ZD48dGQgY2xhc3M9InJpZ2h0Ij48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+ PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90 ZD48dGQgY2xhc3M9ImxlZnQiPiAgIFRoZSBhc3NvY2lhdGVkIGRhdGEgKEEpIE1VU1QgYmUgdGhl IFNUVU4gc2VydmVyIG5hbWUuICBUaGlzIGVuc3VyZXM8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9 InJpZ2h0Ij4gICBUaGUgYXNzb2NpYXRlZCBkYXRhIChBKSBNVVNUIGJlIHRoZSBTVFVOIHNlcnZl ciBuYW1lLiAgVGhpcyBlbnN1cmVzPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3Ai PjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwv dGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICB0aGF0IHRoZSBjbGllbnQgZG9lcyBub3QgdXNlIHRoZSBz YW1lIHRva2VuIHRvIGdhaW4gaWxsZWdhbCBhY2Nlc3MgdG88L3RkPjx0ZD4gPC90ZD48dGQgY2xh c3M9InJpZ2h0Ij4gICB0aGF0IHRoZSBjbGllbnQgZG9lcyBub3QgdXNlIHRoZSBzYW1lIHRva2Vu IHRvIGdhaW4gaWxsZWdhbCBhY2Nlc3MgdG88L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249 InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRv cCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIG90aGVyIFNUVU4gc2VydmVycyBwcm92aWRlZCBi eSB0aGUgc2FtZSBhZG1pbmlzdHJhdGl2ZSBkb21haW4gaS5lLiw8L3RkPjx0ZD4gPC90ZD48dGQg Y2xhc3M9InJpZ2h0Ij4gICBvdGhlciBTVFVOIHNlcnZlcnMgcHJvdmlkZWQgYnkgdGhlIHNhbWUg YWRtaW5pc3RyYXRpdmUgZG9tYWluIGkuZS4sPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWdu PSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0 b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICB3aGVuIG11bHRpcGxlIFNUVU4gc2VydmVycyBp biBhIHNpbmdsZSBhZG1pbmlzdHJhdGl2ZSBkb21haW4gc2hhcmU8L3RkPjx0ZD4gPC90ZD48dGQg Y2xhc3M9InJpZ2h0Ij4gICB3aGVuIG11bHRpcGxlIFNUVU4gc2VydmVycyBpbiBhIHNpbmdsZSBh ZG1pbmlzdHJhdGl2ZSBkb21haW4gc2hhcmU8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249 InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRv cCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIHRoZSBzYW1lIHN5bW1ldHJpYyBrZXkgd2l0aCBh biBhdXRob3JpemF0aW9uIHNlcnZlci48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4g ICB0aGUgc2FtZSBzeW1tZXRyaWMga2V5IHdpdGggYW4gYXV0aG9yaXphdGlvbiBzZXJ2ZXIuPC90 ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48 dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPjwvdGQ+PHRkPiA8L3RkPjx0 ZCBjbGFzcz0icmlnaHQiPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4NCiAgICAg IDx0ciBiZ2NvbG9yPSJncmF5Ij48dGQ+PC90ZD48dGg+PGEgbmFtZT0icGFydC1sOCI+PHNtYWxs PnNraXBwaW5nIHRvIGNoYW5nZSBhdDwvc21hbGw+PGVtPiBwYWdlIDksIGxpbmUgNDQ8L2VtPjwv YT48L3RoPjx0aD4gPC90aD48dGg+PGEgbmFtZT0icGFydC1yOCI+PHNtYWxsPnNraXBwaW5nIHRv IGNoYW5nZSBhdDwvc21hbGw+PGVtPiBwYWdlIDEyLCBsaW5lIDQ0PC9lbT48L2E+PC90aD48dGQ+ PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90 ZD48dGQgY2xhc3M9ImxlZnQiPiAgIHByb2Nlc3MgaXMgaWxsdXN0cmF0ZWQgYmVsb3cuICBUaGUg Y2lwaGVydGV4dCBjb25zaXN0cyBvZiB0aGUgc3RyaW5nPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNz PSJyaWdodCI+ICAgcHJvY2VzcyBpcyBpbGx1c3RyYXRlZCBiZWxvdy4gIFRoZSBjaXBoZXJ0ZXh0 IGNvbnNpc3RzIG9mIHRoZSBzdHJpbmc8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRv cCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+ PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIFMsIHdpdGggdGhlIHN0cmluZyBUIGFwcGVuZGVkIHRv IGl0LiAgSGVyZSBDIGFuZCBBIGRlbm90ZSBDaXBoZXJ0ZXh0PC90ZD48dGQ+IDwvdGQ+PHRkIGNs YXNzPSJyaWdodCI+ICAgUywgd2l0aCB0aGUgc3RyaW5nIFQgYXBwZW5kZWQgdG8gaXQuICBIZXJl IEMgYW5kIEEgZGVub3RlIENpcGhlcnRleHQ8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249 InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRv cCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIGFuZCBTVFVOIHNlcnZlciBuYW1lIHJlc3BlY3Rp dmVseS4gIFRoZSBvY3RldCBzdHJpbmcgQUwgKHNlY3Rpb24gMi4xPC90ZD48dGQ+IDwvdGQ+PHRk IGNsYXNzPSJyaWdodCI+ICAgYW5kIFNUVU4gc2VydmVyIG5hbWUgcmVzcGVjdGl2ZWx5LiAgVGhl IG9jdGV0IHN0cmluZyBBTCAoc2VjdGlvbiAyLjE8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxp Z249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249 InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIG9mIFtJLUQubWNncmV3LWFlYWQtYWVzLWNi Yy1obWFjLXNoYTJdKSBpcyBlcXVhbCB0byB0aGUgbnVtYmVyIG9mPC90ZD48dGQ+IDwvdGQ+PHRk IGNsYXNzPSJyaWdodCI+ICAgb2YgW0ktRC5tY2dyZXctYWVhZC1hZXMtY2JjLWhtYWMtc2hhMl0p IGlzIGVxdWFsIHRvIHRoZSBudW1iZXIgb2Y8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249 InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRv cCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIGJpdHMgaW4gQSBleHByZXNzZWQgYXMgYSA2NC1i aXQgdW5zaWduZWQgYmlnIGVuZGlhbiBpbnRlZ2VyLjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0i cmlnaHQiPiAgIGJpdHMgaW4gQSBleHByZXNzZWQgYXMgYSA2NC1iaXQgdW5zaWduZWQgYmlnIGVu ZGlhbiBpbnRlZ2VyLjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwv dHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBj bGFzcz0ibGVmdCI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+PC90ZD48dGQgY2xh c3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9 ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBvICBBVVRIID0g aW5pdGlhbCBhdXRoZW50aWNhdGlvbiBrZXkgbGVuZ3RoIG9jdGV0cyBvZiBLLDwvdGQ+PHRkPiA8 L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIG8gIEFVVEggPSBpbml0aWFsIGF1dGhlbnRpY2F0aW9u IGtleSBsZW5ndGggb2N0ZXRzIG9mIEssPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0 b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3Ai PjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij48 L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRy Pjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAg IG8gIEFTLVJTID0gZmluYWwgZW5jcnlwdGlvbiBrZXkgbGVuZ3RoIG9jdGV0cyBvZiBLLDwvdGQ+ PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIG8gIEFTLVJTID0gZmluYWwgZW5jcnlwdGlv biBrZXkgbGVuZ3RoIG9jdGV0cyBvZiBLLDwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0i dG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9w Ij48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0 cj48dGQ+PGEgbmFtZT0iZGlmZjAwMTQiPjwvYT48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNs YXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj4gICBvICBT ID0gQ0JDLVBLQ1M8c3BhbiBjbGFzcz0iZGVsZXRlIj41PC9zcGFuPi1FTkMoQVMtUlMsIGVuY3J5 cHRlZF9ibG9jayksPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPiAgIG8gIFMgPSBD QkMtUEtDUzxzcGFuIGNsYXNzPSJpbnNlcnQiPjc8L3NwYW4+LUVOQyhBUy1SUywgZW5jcnlwdGVk X2Jsb2NrKSw8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0K ICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9 ImxlZnQiPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPjwvdGQ+PHRkIGNsYXNzPSJs aW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5l bm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgICAgKiAgSW5pdGlhbGl6 YXRpb24gdmVjdG9yIGlzIHNldCB0byB6ZXJvIGJlY2F1c2UgdGhlPC90ZD48dGQ+IDwvdGQ+PHRk IGNsYXNzPSJyaWdodCI+ICAgICAgKiAgSW5pdGlhbGl6YXRpb24gdmVjdG9yIGlzIHNldCB0byB6 ZXJvIGJlY2F1c2UgdGhlPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+ PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRk IGNsYXNzPSJsZWZ0Ij4gICAgICAgICBlbmNyeXB0ZWRfYmxvY2sgaW4gZWFjaCBhY2Nlc3MgdG9r ZW4gd2lsbCBub3QgYmUgaWRlbnRpY2FsIGFuZDwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmln aHQiPiAgICAgICAgIGVuY3J5cHRlZF9ibG9jayBpbiBlYWNoIGFjY2VzcyB0b2tlbiB3aWxsIG5v dCBiZSBpZGVudGljYWwgYW5kPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwv dGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+ PHRkIGNsYXNzPSJsZWZ0Ij4gICAgICAgICBoZW5jZSB3aWxsIG5vdCByZXN1bHQgaW4gZ2VuZXJh dGlvbiBvZiBpZGVudGljYWwgY2lwaGVydGV4dC48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJp Z2h0Ij4gICAgICAgICBoZW5jZSB3aWxsIG5vdCByZXN1bHQgaW4gZ2VuZXJhdGlvbiBvZiBpZGVu dGljYWwgY2lwaGVydGV4dC48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90 ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48 dGQgY2xhc3M9ImxlZnQiPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPjwvdGQ+PHRk IGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNs YXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgbyAgbWFj ID0gTUFDKEFVVEgsIEEgfHwgUyB8fCBBTCksPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdo dCI+ICAgbyAgbWFjID0gTUFDKEFVVEgsIEEgfHwgUyB8fCBBTCksPC90ZD48dGQgY2xhc3M9Imxp bmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVu byIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBvICBUID0gaW5pdGlhbCBU X0xFTiBvY3RldHMgb2YgbWFjLDwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIG8g IFQgPSBpbml0aWFsIFRfTEVOIG9jdGV0cyBvZiBtYWMsPC90ZD48dGQgY2xhc3M9ImxpbmVubyIg dmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFs aWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9 InJpZ2h0Ij48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0K ICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9 ImxlZnQiPiAgIG8gIEMgPSBTIHx8IFQuPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ ICAgbyAgQyA9IFMgfHwgVC48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90 ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48 dGQgY2xhc3M9ImxlZnQiPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPjwvdGQ+PHRk IGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNs YXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij48L3RkPjx0ZD4gPC90ZD48dGQgY2xh c3M9InJpZ2h0Ij48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+DQogICAgICA8dHIg Ymdjb2xvcj0iZ3JheSI+PHRkPjwvdGQ+PHRoPjxhIG5hbWU9InBhcnQtbDkiPjxzbWFsbD5za2lw cGluZyB0byBjaGFuZ2UgYXQ8L3NtYWxsPjxlbT4gcGFnZSAxMSwgbGluZSAxOTwvZW0+PC9hPjwv dGg+PHRoPiA8L3RoPjx0aD48YSBuYW1lPSJwYXJ0LXI5Ij48c21hbGw+c2tpcHBpbmcgdG8gY2hh bmdlIGF0PC9zbWFsbD48ZW0+IHBhZ2UgMTQsIGxpbmUgMTk8L2VtPjwvYT48L3RoPjx0ZD48L3Rk PjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0 ZCBjbGFzcz0ibGVmdCI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+PC90ZD48dGQg Y2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xh c3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBvICBJZiBh bGwgdGhlIGNoZWNrcyBwYXNzLCB0aGUgU1RVTiBzZXJ2ZXIgY29udGludWVzIHRvIHByb2Nlc3Mg dGhlPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgbyAgSWYgYWxsIHRoZSBjaGVj a3MgcGFzcywgdGhlIFNUVU4gc2VydmVyIGNvbnRpbnVlcyB0byBwcm9jZXNzIHRoZTwvdGQ+PHRk IGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNs YXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgICAgcmVx dWVzdC4gIEFueSByZXNwb25zZSBnZW5lcmF0ZWQgYnkgdGhlIHNlcnZlciBNVVNUIGluY2x1ZGUg dGhlPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgICAgcmVxdWVzdC4gIEFueSBy ZXNwb25zZSBnZW5lcmF0ZWQgYnkgdGhlIHNlcnZlciBNVVNUIGluY2x1ZGUgdGhlPC90ZD48dGQg Y2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xh c3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICAgICBNRVNT QUdFLUlOVEVHUklUWSBhdHRyaWJ1dGUsIGNvbXB1dGVkIHVzaW5nIHRoZSBtYWNfa2V5LjwvdGQ+ PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgICAgIE1FU1NBR0UtSU5URUdSSVRZIGF0dHJp YnV0ZSwgY29tcHV0ZWQgdXNpbmcgdGhlIG1hY19rZXkuPC90ZD48dGQgY2xhc3M9ImxpbmVubyIg dmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFs aWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9 InJpZ2h0Ij48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0K ICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9 ImxlZnQiPiAgIElmIGEgU1RVTiBzZXJ2ZXIgcmVjZWl2ZXMgYW4gQUNDRVNTLVRPS0VOIGF0dHJp YnV0ZSB1bmV4cGVjdGVkbHk8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBJZiBh IFNUVU4gc2VydmVyIHJlY2VpdmVzIGFuIEFDQ0VTUy1UT0tFTiBhdHRyaWJ1dGUgdW5leHBlY3Rl ZGx5PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAg IDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0 Ij4gICAoYmVjYXVzZSBpdCBoYWQgbm90IHByZXZpb3VzbHkgc2VudCBvdXQgYSBUSElSRC1QQVJU WS1BVVRIT1JJWkFUSU9OKSw8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICAoYmVj YXVzZSBpdCBoYWQgbm90IHByZXZpb3VzbHkgc2VudCBvdXQgYSBUSElSRC1QQVJUWS1BVVRIT1JJ WkFUSU9OKSw8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0K ICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9 ImxlZnQiPiAgIGl0IHdpbGwgcmVzcG9uZCB3aXRoIGFuIGVycm9yIGNvZGUgb2YgNDIwIChVbmtu b3duIEF0dHJpYnV0ZSkgYXM8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBpdCB3 aWxsIHJlc3BvbmQgd2l0aCBhbiBlcnJvciBjb2RlIG9mIDQyMCAoVW5rbm93biBBdHRyaWJ1dGUp IGFzPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAg IDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0 Ij4gICBzcGVjaWZpZWQgaW4gU2VjdGlvbiA3LjMuMSBvZiBbUkZDNTM4OV0uPC90ZD48dGQ+IDwv dGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgc3BlY2lmaWVkIGluIFNlY3Rpb24gNy4zLjEgb2YgW1JG QzUzODldLjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQog ICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0i bGVmdCI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+PC90ZD48dGQgY2xhc3M9Imxp bmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQ+PGEgbmFtZT0iZGlm ZjAwMTUiPjwvYT48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGln bj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj44LiAgU1RVTiA8c3BhbiBjbGFzcz0iZGVs ZXRlIj5DbGllbnQgQjwvc3Bhbj5laGF2aW91cjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJs b2NrIj44LiAgU1RVTiA8c3BhbiBjbGFzcz0iaW5zZXJ0Ij5jbGllbnQgYjwvc3Bhbj5laGF2aW91 cjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8 dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIg dmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFs aWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBvICBUaGUgY2xpZW50IGxvb2tzIGZv ciB0aGUgTUVTU0FHRS1JTlRFR1JJVFkgYXR0cmlidXRlIGluIHRoZTwvdGQ+PHRkPiA8L3RkPjx0 ZCBjbGFzcz0icmlnaHQiPiAgIG8gIFRoZSBjbGllbnQgbG9va3MgZm9yIHRoZSBNRVNTQUdFLUlO VEVHUklUWSBhdHRyaWJ1dGUgaW4gdGhlPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0 b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3Ai PjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICAgICByZXNwb25zZS4gIElmIE1FU1NBR0UtSU5URUdS SVRZIGlzIGFic2VudCBvciB0aGUgdmFsdWUgY29tcHV0ZWQ8L3RkPjx0ZD4gPC90ZD48dGQgY2xh c3M9InJpZ2h0Ij4gICAgICByZXNwb25zZS4gIElmIE1FU1NBR0UtSU5URUdSSVRZIGlzIGFic2Vu dCBvciB0aGUgdmFsdWUgY29tcHV0ZWQ8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRv cCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+ PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgICAgIGZvciBtZXNzYWdlIGludGVncml0eSB1c2luZyBt YWNfa2V5IGRvZXMgbm90IG1hdGNoIHRoZSBjb250ZW50cyBvZjwvdGQ+PHRkPiA8L3RkPjx0ZCBj bGFzcz0icmlnaHQiPiAgICAgIGZvciBtZXNzYWdlIGludGVncml0eSB1c2luZyBtYWNfa2V5IGRv ZXMgbm90IG1hdGNoIHRoZSBjb250ZW50cyBvZjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGln bj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0i dG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgICAgdGhlIE1FU1NBR0UtSU5URUdSSVRZIGF0 dHJpYnV0ZSB0aGVuIHRoZSByZXNwb25zZSBNVVNUIGJlPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNz PSJyaWdodCI+ICAgICAgdGhlIE1FU1NBR0UtSU5URUdSSVRZIGF0dHJpYnV0ZSB0aGVuIHRoZSBy ZXNwb25zZSBNVVNUIGJlPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+ PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRk IGNsYXNzPSJsZWZ0Ij4gICAgICBkaXNjYXJkZWQuPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJy aWdodCI+ICAgICAgZGlzY2FyZGVkLjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9w Ij48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48 L3RkPjx0ZCBjbGFzcz0ibGVmdCI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+PC90 ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48 dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBv ICBJZiB0aGUgYWNjZXNzIHRva2VuIGV4cGlyZXMgdGhlbiB0aGUgY2xpZW50IE1VU1Qgb2J0YWlu IGEgbmV3PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgbyAgSWYgdGhlIGFjY2Vz cyB0b2tlbiBleHBpcmVzIHRoZW4gdGhlIGNsaWVudCBNVVNUIG9idGFpbiBhIG5ldzwvdGQ+PHRk IGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNs YXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgICAgdG9r ZW4gZnJvbSB0aGUgYXV0aG9yaXphdGlvbiBzZXJ2ZXIgYW5kIHVzZSBpdCBmb3IgbmV3IFNUVU48 L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICAgICB0b2tlbiBmcm9tIHRoZSBhdXRo b3JpemF0aW9uIHNlcnZlciBhbmQgdXNlIGl0IGZvciBuZXcgU1RVTjwvdGQ+PHRkIGNsYXNzPSJs aW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5l bm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgICAgcmVxdWVzdHMuPC90 ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgICAgcmVxdWVzdHMuPC90ZD48dGQgY2xh c3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9 ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij48L3RkPjx0ZD4gPC90 ZD48dGQgY2xhc3M9InJpZ2h0Ij48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+ PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZD48YSBuYW1lPSJkaWZmMDAxNiI+PC9hPjwvdGQ+PC90 cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNs YXNzPSJsYmxvY2siPjkuICA8c3BhbiBjbGFzcz0iZGVsZXRlIj5Vc2FnZSB3aXRoIFRVUk48L3Nw YW4+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPjkuICBUVVJOIGNsaWVudCBhbmQg c2VydmVyIDxzcGFuIGNsYXNzPSJpbnNlcnQiPmJlaGF2aW91cjwvc3Bhbj48L3RkPjx0ZCBjbGFz cz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0i bGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+PHNwYW4gY2xhc3M9 ImRlbGV0ZSI+PC9zcGFuPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48L3RkPjx0 ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBj bGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+PHNwYW4g Y2xhc3M9ImRlbGV0ZSI+ICAgVHJhdmVyc2FsIFVzaW5nIFJlbGF5IE5BVCAoVFVSTikgW1JGQzU3 NjZdIGFuIGV4dGVuc2lvbiB0byB0aGUgU1RVTjwvc3Bhbj48L3RkPjx0ZD4gPC90ZD48dGQgY2xh c3M9InJibG9jayI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90 cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNs YXNzPSJsYmxvY2siPjxzcGFuIGNsYXNzPSJkZWxldGUiPiAgIHByb3RvY29sIGlzIG9mdGVuIHVz ZWQgdG8gaW1wcm92ZSB0aGUgY29ubmVjdGl2aXR5IG9mIFAyUDwvc3Bhbj48L3RkPjx0ZD4gPC90 ZD48dGQgY2xhc3M9InJibG9jayI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3Ai PjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwv dGQ+PHRkIGNsYXNzPSJsYmxvY2siPjxzcGFuIGNsYXNzPSJkZWxldGUiPiAgIGFwcGxpY2F0aW9u cy4gIFRVUk4gZW5zdXJlcyB0aGF0IGEgY29ubmVjdGlvbiBjYW4gYmUgZXN0YWJsaXNoZWQgZXZl bjwvc3Bhbj48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+PC90ZD48dGQgY2xhc3M9 ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9Imxp bmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPjxzcGFuIGNsYXNzPSJk ZWxldGUiPiAgIHdoZW4gb25lIG9yIGJvdGggc2lkZXMgaXMgaW5jYXBhYmxlIG9mIGEgZGlyZWN0 IFAyUCBjb25uZWN0aW9uLjwvc3Bhbj48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+ PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0 cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2si PjxzcGFuIGNsYXNzPSJkZWxldGUiPiAgIEhvd2V2ZXIsIGFzIGEgcmVsYXkgc2VydmljZSwgaXQg aW1wb3NlcyBhIG5vbnRyaXZpYWwgY29zdCBvbiB0aGU8L3NwYW4+PC90ZD48dGQ+IDwvdGQ+PHRk IGNsYXNzPSJyYmxvY2siPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3Rk PjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0 ZCBjbGFzcz0ibGJsb2NrIj48c3BhbiBjbGFzcz0iZGVsZXRlIj4gICBzZXJ2aWNlIHByb3ZpZGVy LiAgVGhlcmVmb3JlLCBhY2Nlc3MgdG8gYSBUVVJOIHNlcnZpY2UgaXMgYWxtb3N0PC9zcGFuPjwv dGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2 YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxp Z249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+PHNwYW4gY2xhc3M9ImRlbGV0ZSI+ICAg YWx3YXlzIGFjY2Vzcy1jb250cm9sbGVkLiAgSW4gb3JkZXIgdG8gYWNoaWV2ZSB0aGlyZCBwYXJ0 eTwvc3Bhbj48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+PC90ZD48dGQgY2xhc3M9 ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9Imxp bmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPjxzcGFuIGNsYXNzPSJk ZWxldGUiPiAgIGF1dGhvcml6YXRpb24sIGEgcmVzb3VyY2Ugb3duZXIgZS5nLiAgV2ViUlRDIHNl cnZlciwgYXV0aG9yaXplcyBhPC9zcGFuPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2Nr Ij48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAg PHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9j ayI+PHNwYW4gY2xhc3M9ImRlbGV0ZSI+ICAgVFVSTiBjbGllbnQgdG8gYWNjZXNzIHJlc291cmNl cyBvbiB0aGUgVFVSTiBzZXJ2ZXIuPC9zcGFuPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJs b2NrIj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAg ICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9Imxi bG9jayI+PHNwYW4gY2xhc3M9ImRlbGV0ZSI+PC9zcGFuPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFz cz0icmJsb2NrIj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3Ry Pg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xh c3M9ImxibG9jayI+PHNwYW4gY2xhc3M9ImRlbGV0ZSI+ICAgQ29uc2lkZXIgdGhlIGZvbGxvd2lu ZyBleGFtcGxlIHRoYXQgaWxsdXN0cmF0ZXMgdGhlIHVzZSBvZiBPQXV0aCAyLjA8L3NwYW4+PC90 ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZh bGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGln bj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48c3BhbiBjbGFzcz0iZGVsZXRlIj4gICB0 byBhY2hpZXZlIHRoaXJkIHBhcnR5IGF1dGhvcml6YXRpb24gZm9yIFRVUk4uICBJbiB0aGlzIGV4 YW1wbGUsIGE8L3NwYW4+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPjwvdGQ+PHRk IGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNs YXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48c3BhbiBj bGFzcz0iZGVsZXRlIj4gICByZXNvdXJjZSBvd25lciBpLmUuLCBXZWJSVEMgc2VydmVyLCBhdXRo b3JpemVzIGEgVFVSTiBjbGllbnQgdG88L3NwYW4+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJy YmxvY2siPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQog ICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0i bGJsb2NrIj48c3BhbiBjbGFzcz0iZGVsZXRlIj4gICBhY2Nlc3MgcmVzb3VyY2VzIG9uIGEgVFVS TiBzZXJ2ZXIuPC9zcGFuPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48L3RkPjx0 ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBj bGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+PHNwYW4g Y2xhc3M9ImRlbGV0ZSI+PC9zcGFuPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48 L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRy Pjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+ PHNwYW4gY2xhc3M9ImRlbGV0ZSI+ICAgICAgICAgICAgICAgICArLS0tLS0tLS0tLS0tLS0tLS0t LS0tLSstLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tKzwvc3Bhbj48L3RkPjx0ZD4gPC90ZD48 dGQgY2xhc3M9InJibG9jayI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwv dGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+ PHRkIGNsYXNzPSJsYmxvY2siPjxzcGFuIGNsYXNzPSJkZWxldGUiPiAgICAgICAgICAgICAgICAg fCAgICAgT0F1dGggMi4wICAgICAgICB8ICAgICAgICAgICAgV2ViUlRDICAgICAgICAgIHw8L3Nw YW4+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPjwvdGQ+PHRkIGNsYXNzPSJsaW5l bm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8i IHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48c3BhbiBjbGFzcz0iZGVsZXRl Ij4gICAgICAgICAgICAgICAgICs9PT09PT09PT09PT09PT09PT09PT09Kz09PT09PT09PT09PT09 PT09PT09PT09PT09PT0rPC9zcGFuPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48 L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRy Pjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+ PHNwYW4gY2xhc3M9ImRlbGV0ZSI+ICAgICAgICAgICAgICAgICB8IENsaWVudCAgICAgICAgICAg ICAgIHwgV2ViUlRDIGNsaWVudCAgICAgICAgICAgICAgfDwvc3Bhbj48L3RkPjx0ZD4gPC90ZD48 dGQgY2xhc3M9InJibG9jayI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwv dGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+ PHRkIGNsYXNzPSJsYmxvY2siPjxzcGFuIGNsYXNzPSJkZWxldGUiPiAgICAgICAgICAgICAgICAg Ky0tLS0tLS0tLS0tLS0tLS0tLS0tLS0rLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLSs8L3Nw YW4+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPjwvdGQ+PHRkIGNsYXNzPSJsaW5l bm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8i IHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48c3BhbiBjbGFzcz0iZGVsZXRl Ij4gICAgICAgICAgICAgICAgIHwgUmVzb3VyY2Ugb3duZXIgICAgICAgfCBXZWJSVEMgc2VydmVy ICAgICAgICAgICAgICB8PC9zcGFuPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48 L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRy Pjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+ PHNwYW4gY2xhc3M9ImRlbGV0ZSI+ICAgICAgICAgICAgICAgICArLS0tLS0tLS0tLS0tLS0tLS0t LS0tLSstLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tKzwvc3Bhbj48L3RkPjx0ZD4gPC90ZD48 dGQgY2xhc3M9InJibG9jayI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwv dGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+ PHRkIGNsYXNzPSJsYmxvY2siPjxzcGFuIGNsYXNzPSJkZWxldGUiPiAgICAgICAgICAgICAgICAg fCBBdXRob3JpemF0aW9uIHNlcnZlciB8IEF1dGhvcml6YXRpb24gc2VydmVyICAgICAgIHw8L3Nw YW4+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPjwvdGQ+PHRkIGNsYXNzPSJsaW5l bm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8i IHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48c3BhbiBjbGFzcz0iZGVsZXRl Ij4gICAgICAgICAgICAgICAgICstLS0tLS0tLS0tLS0tLS0tLS0tLS0tKy0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0rPC9zcGFuPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48 L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRy Pjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+ PHNwYW4gY2xhc3M9ImRlbGV0ZSI+ICAgICAgICAgICAgICAgICB8IFJlc291cmNlIHNlcnZlciAg ICAgIHwgVFVSTiBTZXJ2ZXIgICAgICAgICAgICAgICAgfDwvc3Bhbj48L3RkPjx0ZD4gPC90ZD48 dGQgY2xhc3M9InJibG9jayI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwv dGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+ PHRkIGNsYXNzPSJsYmxvY2siPjxzcGFuIGNsYXNzPSJkZWxldGUiPiAgICAgICAgICAgICAgICAg Ky0tLS0tLS0tLS0tLS0tLS0tLS0tLS0rLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLSs8L3Nw YW4+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPjwvdGQ+PHRkIGNsYXNzPSJsaW5l bm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8i IHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48c3BhbiBjbGFzcz0iZGVsZXRl Ij48L3NwYW4+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPjwvdGQ+PHRkIGNsYXNz PSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJs aW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48c3BhbiBjbGFzcz0i ZGVsZXRlIj4gICAgICAgICBGaWd1cmUgMjogT0F1dGggdGVybWlub2xvZ3kgbWFwcGVkIHRvIFdl YlJUQyB0ZXJtaW5vbG9neTwvc3Bhbj48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+ PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0 cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2si PjxzcGFuIGNsYXNzPSJkZWxldGUiPjwvc3Bhbj48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJi bG9jayI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAg ICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJs YmxvY2siPjxzcGFuIGNsYXNzPSJkZWxldGUiPiAgIFVzaW5nIHRoZSBPQXV0aCAyLjAgYXV0aG9y aXphdGlvbiBmcmFtZXdvcmssIGEgV2ViUlRDIGNsaWVudCAodGhpcmQtPC9zcGFuPjwvdGQ+PHRk PiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249 InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRv cCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+PHNwYW4gY2xhc3M9ImRlbGV0ZSI+ICAgcGFydHkg YXBwbGljYXRpb24pIG9idGFpbnMgbGltaXRlZCBhY2Nlc3MgdG8gYSBUVVJOIChyZXNvdXJjZSBz ZXJ2ZXIpPC9zcGFuPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48L3RkPjx0ZCBj bGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFz cz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+PHNwYW4gY2xh c3M9ImRlbGV0ZSI+ICAgb24gYmVoYWxmIG9mIHRoZSBXZWJSVEMgc2VydmVyIChyZXNvdXJjZSBv d25lciBvciBhdXRob3JpemF0aW9uPC9zcGFuPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJs b2NrIj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAg ICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9Imxi bG9jayI+PHNwYW4gY2xhc3M9ImRlbGV0ZSI+ICAgc2VydmVyKS4gIFRoZSBXZWJSVEMgY2xpZW50 IHJlcXVlc3RzIGFjY2VzcyB0byByZXNvdXJjZXMgY29udHJvbGxlZDwvc3Bhbj48L3RkPjx0ZD4g PC90ZD48dGQgY2xhc3M9InJibG9jayI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0 b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3Ai PjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPjxzcGFuIGNsYXNzPSJkZWxldGUiPiAgIGJ5IHRoZSBy ZXNvdXJjZSBvd25lciAoV2ViUlRDIHNlcnZlcikgYW5kIGhvc3RlZCBieSB0aGUgcmVzb3VyY2U8 L3NwYW4+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPjwvdGQ+PHRkIGNsYXNzPSJs aW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5l bm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48c3BhbiBjbGFzcz0iZGVs ZXRlIj4gICBzZXJ2ZXIgKFRVUk4gc2VydmVyKS4gIFRoZSBXZWJSVEMgY2xpZW50IG9idGFpbnMg YWNjZXNzIHRva2VuLDwvc3Bhbj48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+PC90 ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48 dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPjxz cGFuIGNsYXNzPSJkZWxldGUiPiAgIGxpZmV0aW1lLCBzZXNzaW9uIGtleSBhbmQga2lkLiAgVGhl PC9zcGFuPiBUVVJOIGNsaWVudCA8c3BhbiBjbGFzcz0iZGVsZXRlIj5jb252ZXlzIHRoZSBhY2Nl c3M8L3NwYW4+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPjwvdGQ+PHRkIGNsYXNz PSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJs aW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48c3BhbiBjbGFzcz0i ZGVsZXRlIj4gICB0b2tlbjwvc3Bhbj4gYW5kIDxzcGFuIGNsYXNzPSJkZWxldGUiPm90aGVyIE9B dXRoIDIuMCBwYXJhbWV0ZXJzIGxlYXJudCBmcm9tIHRoZSBhdXRob3JpemF0aW9uPC9zcGFuPjwv dGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2 YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxp Z249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+ICAgc2VydmVyIDxzcGFuIGNsYXNzPSJk ZWxldGUiPnRvIHRoZSBUVVJOIHNlcnZlci4gIFRoZSBUVVJOIHNlcnZlciBvYnRhaW5zIHRoZSBz ZXNzaW9uIGtleTwvc3Bhbj48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+PC90ZD48 dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQg Y2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPjxzcGFu IGNsYXNzPSJkZWxldGUiPiAgIGZyb20gdGhlIGFjY2VzcyB0b2tlbi4gIFRoZSBUVVJOIHNlcnZl ciB2YWxpZGF0ZXMgdGhlIHRva2VuLCBjb21wdXRlczwvc3Bhbj48L3RkPjx0ZD4gPC90ZD48dGQg Y2xhc3M9InJibG9jayI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+ PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRk IGNsYXNzPSJsYmxvY2siPjxzcGFuIGNsYXNzPSJkZWxldGUiPiAgIHRoZSBtZXNzYWdlIGludGVn cml0eSBvZiB0aGUgcmVxdWVzdCBhbmQgdGFrZXMgYXBwcm9wcmlhdGUgYWN0aW9uPC9zcGFuPjwv dGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2 YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxp Z249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+PHNwYW4gY2xhc3M9ImRlbGV0ZSI+ICAg aS5lLCBwZXJtaXRzIHRoZSBUVVJOIGNsaWVudCB0byBjcmVhdGUgYWxsb2NhdGlvbnMuICBUaGlz IGlzIHNob3duIGluPC9zcGFuPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48L3Rk Pjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0 ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+PHNw YW4gY2xhc3M9ImRlbGV0ZSI+ICAgYW4gYWJzdHJhY3Qgd2F5IGluIEZpZ3VyZSAzLjwvc3Bhbj48 L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIg dmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFs aWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPjxzcGFuIGNsYXNzPSJkZWxldGUiPjwv c3Bhbj48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+PC90ZD48dGQgY2xhc3M9Imxp bmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVu byIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPjxzcGFuIGNsYXNzPSJkZWxl dGUiPiAgICAgICAgICAgICAgICAgICAgICAgICAgICstLS0tLS0tLS0tLS0tLS0rPC9zcGFuPjwv dGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2 YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxp Z249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+PHNwYW4gY2xhc3M9ImRlbGV0ZSI+ICAg ICAgICAgICAgICAgICAgICAgICAgICAgfCAgICAgICAgICAgICAgICsmbHQ7KioqKioqKzwvc3Bh bj48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+PC90ZD48dGQgY2xhc3M9ImxpbmVu byIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIg dmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPjxzcGFuIGNsYXNzPSJkZWxldGUi PiAgICAgICAgICAgICstLS0tLS0tLS0tLS0tJmd0O3wgQXV0aG9yaXphdGlvbiB8ICAgICAgICo8 L3NwYW4+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPjwvdGQ+PHRkIGNsYXNzPSJs aW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5l bm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48c3BhbiBjbGFzcz0iZGVs ZXRlIj4gICAgICAgICAgICB8ICAgICAgICAgICAgICB8IFNlcnZlciAgICAgICAgfCAgICAgICAq PC9zcGFuPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48L3RkPjx0ZCBjbGFzcz0i bGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGlu ZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+PHNwYW4gY2xhc3M9ImRl bGV0ZSI+ICAgICAgICAgICAgfCAgICstLS0tLS0tLS0tfChXZWJSVEMgU2VydmVyKXwgICAgICAg KiAgQVMtUlMsPC9zcGFuPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48L3RkPjx0 ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBj bGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+PHNwYW4g Y2xhc3M9ImRlbGV0ZSI+ICAgICAgICAgICAgfCAgIHwgICAgICAgICAgfCAgICAgICAgICAgICAg IHwgICAgICAgKiAgQVVUSCBrZXlzPC9zcGFuPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJs b2NrIj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAg ICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9Imxi bG9jayI+PHNwYW4gY2xhc3M9ImRlbGV0ZSI+ICAgKDIpICAgICAgfCAgIHwgICAgICAgICAgICst LS0tLS0tLS0tLS0tLS0rICAgICAgKiAgICgxKTwvc3Bhbj48L3RkPjx0ZD4gPC90ZD48dGQgY2xh c3M9InJibG9jayI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90 cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNs YXNzPSJsYmxvY2siPjxzcGFuIGNsYXNzPSJkZWxldGUiPiAgIEFjY2VzcyAgIHwgICB8ICAoMykg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICo8L3NwYW4+PC90ZD48dGQ+IDwvdGQ+PHRkIGNs YXNzPSJyYmxvY2siPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwv dHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBj bGFzcz0ibGJsb2NrIj48c3BhbiBjbGFzcz0iZGVsZXRlIj4gICBUb2tlbiAgICB8ICAgfCBBY2Nl c3MgVG9rZW4gICAgICAgICAgICAgICAgICAgICAqPC9zcGFuPjwvdGQ+PHRkPiA8L3RkPjx0ZCBj bGFzcz0icmJsb2NrIj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48 L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQg Y2xhc3M9ImxibG9jayI+PHNwYW4gY2xhc3M9ImRlbGV0ZSI+ICAgUmVxdWVzdCAgfCAgIHwgICAg KyAgICAgICAgICAgICAgICAgICAgICAgICAgICAgKjwvc3Bhbj48L3RkPjx0ZD4gPC90ZD48dGQg Y2xhc3M9InJibG9jayI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+ PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRk IGNsYXNzPSJsYmxvY2siPjxzcGFuIGNsYXNzPSJkZWxldGUiPiAgICAgICAgICAgIHwgICB8IFNl c3Npb24gS2V5ICAgICAgICAgICAgICAgICAgICAgICo8L3NwYW4+PC90ZD48dGQ+IDwvdGQ+PHRk IGNsYXNzPSJyYmxvY2siPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3Rk PjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0 ZCBjbGFzcz0ibGJsb2NrIj48c3BhbiBjbGFzcz0iZGVsZXRlIj4gICAgICAgICAgICB8ICAgfCAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAqPC9zcGFuPjwvdGQ+PHRkPiA8L3RkPjx0 ZCBjbGFzcz0icmJsb2NrIj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90 ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48 dGQgY2xhc3M9ImxibG9jayI+PHNwYW4gY2xhc3M9ImRlbGV0ZSI+ICAgICAgICAgICAgfCAgIFYg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgVjwvc3Bhbj48L3RkPjx0ZD4gPC90ZD48 dGQgY2xhc3M9InJibG9jayI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwv dGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+ PHRkIGNsYXNzPSJsYmxvY2siPjxzcGFuIGNsYXNzPSJkZWxldGUiPiAgICAgICAgKy0tLS0tLS0r LS0tKyAgICAgICAgICAgICAgICAgICAgICAgKy0rLS0tLT0tLS0tLSs8L3NwYW4+PC90ZD48dGQ+ IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0i dG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9w Ij48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48c3BhbiBjbGFzcz0iZGVsZXRlIj4gICAgICAgIHwg ICAgICAgICAgIHwgICAgICAgICAoNCkgICAgICAgICAgIHwgICAgICAgICAgICB8PC9zcGFuPjwv dGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2 YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxp Z249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+PHNwYW4gY2xhc3M9ImRlbGV0ZSI+ICAg ICAgICB8ICAgICAgICAgICB8IFRVUk4gUmVxdWVzdCArIEFjY2VzcyB8ICAgICAgICAgICAgfDwv c3Bhbj48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+PC90ZD48dGQgY2xhc3M9Imxp bmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVu byIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPjxzcGFuIGNsYXNzPSJkZWxl dGUiPiAgICAgICAgfCBXZWJSVEMgICAgfCBUb2tlbiAgICAgICAgICAgICAgICAgfCBUVVJOICAg ICAgIHw8L3NwYW4+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPjwvdGQ+PHRkIGNs YXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNz PSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48c3BhbiBjbGFz cz0iZGVsZXRlIj4gICAgICAgIHwgQ2xpZW50ICAgIHwtLS0tLS0tLS0tLS0tLS0tLS0tLS0tJmd0 O3wgU2VydmVyICAgICB8PC9zcGFuPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48 L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRy Pjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+ PHNwYW4gY2xhc3M9ImRlbGV0ZSI+ICAgICAgICB8IChBbGljZSkgICB8IEFsbG9jYXRlIFJlc3Bv bnNlICg1KSB8ICAgICAgICAgICAgfDwvc3Bhbj48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJi bG9jayI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAg ICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJs YmxvY2siPjxzcGFuIGNsYXNzPSJkZWxldGUiPiAgICAgICAgfCAgICAgICAgICAgfCZsdDstLS0t LS0tLS0tLS0tLS0tLS0tLS0tfCAgICAgICAgICAgIHw8L3NwYW4+PC90ZD48dGQ+IDwvdGQ+PHRk IGNsYXNzPSJyYmxvY2siPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3Rk PjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0 ZCBjbGFzcz0ibGJsb2NrIj48c3BhbiBjbGFzcz0iZGVsZXRlIj4gICAgICAgICstLS0tLS0tLS0t LSsgICAgICAgICAgICAgICAgICAgICAgICstLS0tLS0tLS0tLS0rPC9zcGFuPjwvdGQ+PHRkPiA8 L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRv cCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+ PC90ZD48dGQgY2xhc3M9ImxibG9jayI+PHNwYW4gY2xhc3M9ImRlbGV0ZSI+PC9zcGFuPjwvdGQ+ PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxp Z249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249 InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+PHNwYW4gY2xhc3M9ImRlbGV0ZSI+ICAgVXNl ciA6IEFsaWNlPC9zcGFuPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48L3RkPjx0 ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBj bGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+PHNwYW4g Y2xhc3M9ImRlbGV0ZSI+ICAgKioqKjogT3V0LW9mLUJhbmQgTG9uZy1UZXJtIEtleSBFc3RhYmxp c2htZW50PC9zcGFuPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48L3RkPjx0ZCBj bGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFz cz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+PHNwYW4gY2xh c3M9ImRlbGV0ZSI+PC9zcGFuPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48L3Rk Pjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0 ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+PHNw YW4gY2xhc3M9ImRlbGV0ZSI+ICAgICAgICAgICAgICAgICAgICAgICAgICBGaWd1cmUgMzogSW50 ZXJhY3Rpb25zPC9zcGFuPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48L3RkPjx0 ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBj bGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+PHNwYW4g Y2xhc3M9ImRlbGV0ZSI+PC9zcGFuPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48 L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRy Pjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+ PHNwYW4gY2xhc3M9ImRlbGV0ZSI+ICAgSW4gdGhlIGJlbG93IGZpZ3VyZSwgdGhlIGNsaWVudCBz ZW5kcyBhbiBBbGxvY2F0ZSByZXF1ZXN0IHRvIHRoZTwvc3Bhbj48L3RkPjx0ZD4gPC90ZD48dGQg Y2xhc3M9InJibG9jayI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+ PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRk IGNsYXNzPSJsYmxvY2siPjxzcGFuIGNsYXNzPSJkZWxldGUiPiAgIHNlcnZlciB3aXRob3V0IGNy ZWRlbnRpYWxzLiAgU2luY2UgdGhlIHNlcnZlciByZXF1aXJlcyB0aGF0IGFsbDwvc3Bhbj48L3Rk Pjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFs aWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWdu PSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPjxzcGFuIGNsYXNzPSJkZWxldGUiPiAgIHJl cXVlc3RzIGJlIGF1dGhlbnRpY2F0ZWQgdXNpbmcgT0F1dGggMi4wLCB0aGUgc2VydmVyIHJlamVj dHMgdGhlPC9zcGFuPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48L3RkPjx0ZCBj bGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFz cz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+PHNwYW4gY2xh c3M9ImRlbGV0ZSI+ICAgcmVxdWVzdCB3aXRoIGEgNDAxIChVbmF1dGhvcml6ZWQpIGVycm9yIGNv ZGUgYW5kIFNUVU4gYXR0cmlidXRlPC9zcGFuPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJs b2NrIj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAg ICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9Imxi bG9jayI+PHNwYW4gY2xhc3M9ImRlbGV0ZSI+ICAgVEhJUkQtUEFSVFktQVVUSE9SSVpBVElPTi4g IFRoZSBXZWJSVEMgY2xpZW50IG9idGFpbnMgYWNjZXNzIHRva2VuPC9zcGFuPjwvdGQ+PHRkPiA8 L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRv cCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+ PC90ZD48dGQgY2xhc3M9ImxibG9jayI+PHNwYW4gY2xhc3M9ImRlbGV0ZSI+ICAgZnJvbSB0aGUg V2ViUlRDIHNlcnZlciBhbmQgdGhlbiB0cmllcyBhZ2FpbiwgdGhpcyB0aW1lIGluY2x1ZGluZzwv c3Bhbj48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+PC90ZD48dGQgY2xhc3M9Imxp bmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVu byIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPjxzcGFuIGNsYXNzPSJkZWxl dGUiPiAgIGFjY2VzcyB0b2tlbi4gIFRoaXMgdGltZSwgdGhlIHNlcnZlciB2YWxpZGF0ZXMgdGhl IHRva2VuLCBhY2NlcHRzIHRoZTwvc3Bhbj48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9j ayI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAg IDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxv Y2siPjxzcGFuIGNsYXNzPSJkZWxldGUiPiAgIEFsbG9jYXRlIHJlcXVlc3QgYW5kIHJldHVybnMg YW4gQWxsb2NhdGUgc3VjY2VzcyByZXNwb25zZSBjb250YWluaW5nPC9zcGFuPjwvdGQ+PHRkPiA8 L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRv cCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+ PC90ZD48dGQgY2xhc3M9ImxibG9jayI+PHNwYW4gY2xhc3M9ImRlbGV0ZSI+ICAgKGFtb25nc3Qg b3RoZXIgdGhpbmdzKSB0aGUgcmVsYXllZCB0cmFuc3BvcnQgYWRkcmVzcyBhc3NpZ25lZCB0byB0 aGU8L3NwYW4+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPjwvdGQ+PHRkIGNsYXNz PSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJs aW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48c3BhbiBjbGFzcz0i ZGVsZXRlIj4gICBhbGxvY2F0aW9uLjwvc3Bhbj48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJi bG9jayI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAg ICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJs YmxvY2siPjxzcGFuIGNsYXNzPSJkZWxldGUiPjwvc3Bhbj48L3RkPjx0ZD4gPC90ZD48dGQgY2xh c3M9InJibG9jayI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90 cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNs YXNzPSJsYmxvY2siPjxzcGFuIGNsYXNzPSJkZWxldGUiPiAgICstLS0tLS0tLS0tLS0tLS0tLS0t KyAgICAgICAgICAgICAgICAgICAgICAgICArLS0tLS0tLS0rICArLS0tLS0tLS0tKzwvc3Bhbj48 L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIg dmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFs aWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPjxzcGFuIGNsYXNzPSJkZWxldGUiPiAg IHwgLi4uLi4uLi4uICBUVVJOICAgfCAgICAgICAgICAgICAgICAgICAgICAgICB8ICBUVVJOICB8 ICB8ICBXZWJSVEMgfDwvc3Bhbj48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+PC90 ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48 dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPjxz cGFuIGNsYXNzPSJkZWxldGUiPiAgIHwgLldlYlJUQyAuICBDbGllbnQgfCAgICAgICAgICAgICAg ICAgICAgICAgICB8ICAgICAgICB8ICB8ICAgICAgICAgfDwvc3Bhbj48L3RkPjx0ZD4gPC90ZD48 dGQgY2xhc3M9InJibG9jayI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwv dGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+ PHRkIGNsYXNzPSJsYmxvY2siPjxzcGFuIGNsYXNzPSJkZWxldGUiPiAgIHwgLkNsaWVudCAuICAg ICAgICAgfCAgICAgICAgICAgICAgICAgICAgICAgICB8IFNlcnZlciB8ICB8ICBTZXJ2ZXIgfDwv c3Bhbj48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+PC90ZD48dGQgY2xhc3M9Imxp bmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVu byIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPjxzcGFuIGNsYXNzPSJkZWxl dGUiPiAgIHwgLi4uLi4uLi4uICAgICAgICAgfCAgICAgICAgICAgICAgICAgICAgICAgICB8ICAg ICAgICB8ICB8ICAgICAgICAgfDwvc3Bhbj48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9j ayI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAg IDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxv Y2siPjxzcGFuIGNsYXNzPSJkZWxldGUiPiAgICstLS0tLS0tLS0tLS0tLS0tLS0tKyAgICAgICAg ICAgICAgICAgICAgICAgICArLS0tLS0tLS0rICArLS0tLS0tLS0tKzwvc3Bhbj48L3RkPjx0ZD4g PC90ZD48dGQgY2xhc3M9InJibG9jayI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0 b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3Ai PjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPjxzcGFuIGNsYXNzPSJkZWxldGUiPiAgICAgfCAgICAg ICB8ICAgICAgICAgICBBbGxvY2F0ZSByZXF1ZXN0ICAgICAgICAgICAgICAgIHwgICAgICAgICB8 PC9zcGFuPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48L3RkPjx0ZCBjbGFzcz0i bGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGlu ZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+PHNwYW4gY2xhc3M9ImRl bGV0ZSI+ICAgICB8ICAgICAgIHwtLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0mZ3Q7fCAgICAgICAgIHw8L3NwYW4+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxv Y2siPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAg ICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJs b2NrIj48c3BhbiBjbGFzcz0iZGVsZXRlIj4gICAgIHwgICAgICAgfCAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICB8ICAgICAgICAgfDwvc3Bhbj48L3RkPjx0ZD4gPC90 ZD48dGQgY2xhc3M9InJibG9jayI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3Ai PjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwv dGQ+PHRkIGNsYXNzPSJsYmxvY2siPjxzcGFuIGNsYXNzPSJkZWxldGUiPiAgICAgfCAgICAgICB8 ICAgICAgICAgQWxsb2NhdGUgZXJyb3IgcmVzcG9uc2UgICAgICAgICAgIHwgICAgICAgICB8PC9z cGFuPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48L3RkPjx0ZCBjbGFzcz0ibGlu ZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5v IiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+PHNwYW4gY2xhc3M9ImRlbGV0 ZSI+ICAgICB8ICAgICAgIHwgICAgICAgICAoNDAxIFVuYXV0aG9yaXplZCkgICAgICAgICAgICAg ICAgfCAgICAgICAgIHw8L3NwYW4+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPjwv dGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+ PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48 c3BhbiBjbGFzcz0iZGVsZXRlIj4gICAgIHwgICAgICAgfCZsdDstLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS18ICAgICAgICAgfDwvc3Bhbj48L3RkPjx0ZD4gPC90ZD48 dGQgY2xhc3M9InJibG9jayI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwv dGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+ PHRkIGNsYXNzPSJsYmxvY2siPjxzcGFuIGNsYXNzPSJkZWxldGUiPiAgICAgfCAgICAgICB8ICAg ICAgICAgVEhJUkQtUEFSVFktQVVUSE9SSVpBVElPTiAgICAgICAgIHwgICAgICAgICB8PC9zcGFu PjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48L3RkPjx0ZCBjbGFzcz0ibGluZW5v IiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2 YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+PHNwYW4gY2xhc3M9ImRlbGV0ZSI+ ICAgICB8ICAgICAgIHwgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg fCAgICAgICAgIHw8L3NwYW4+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPjwvdGQ+ PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRk IGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48c3Bh biBjbGFzcz0iZGVsZXRlIj4gICAgIHwgICAgICAgfCAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICB8ICAgICAgICAgfDwvc3Bhbj48L3RkPjx0ZD4gPC90ZD48dGQgY2xh c3M9InJibG9jayI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90 cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNs YXNzPSJsYmxvY2siPjxzcGFuIGNsYXNzPSJkZWxldGUiPiAgICAgfCAgICAgICB8ICAgICAgSFRU UCBSZXF1ZXN0IGZvciB0b2tlbiAgICAgICAgICAgICAgIHwgICAgICAgICB8PC9zcGFuPjwvdGQ+ PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxp Z249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249 InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+PHNwYW4gY2xhc3M9ImRlbGV0ZSI+ICAgICB8 LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tJmd0O3w8L3NwYW4+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPjwvdGQ+PHRk IGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNs YXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48c3BhbiBj bGFzcz0iZGVsZXRlIj4gICAgIHwgICAgICAgfCAgICAgIEhUVFAgUmVzcG9uc2Ugd2l0aCB0b2tl biBwYXJhbWV0ZXJzICB8ICAgICAgICAgfDwvc3Bhbj48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9 InJibG9jayI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4N CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNz PSJsYmxvY2siPjxzcGFuIGNsYXNzPSJkZWxldGUiPiAgICAgfCZsdDstLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS18PC9zcGFuPjwvdGQ+ PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxp Z249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249 InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+PHNwYW4gY2xhc3M9ImRlbGV0ZSI+ICAgICB8 T0F1dGggMi4wICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgfCAgICAg ICAgIHw8L3NwYW4+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPjwvdGQ+PHRkIGNs YXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNz PSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48c3BhbiBjbGFz cz0iZGVsZXRlIj4gICAgICBBdHRyaWJ1dGVzICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICB8ICAgICAgICAgfDwvc3Bhbj48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJi bG9jayI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAg ICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJs YmxvY2siPjxzcGFuIGNsYXNzPSJkZWxldGUiPiAgICAgfC0tLS0tLSZndDt8ICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIHwgICAgICAgICB8PC9zcGFuPjwvdGQ+PHRk PiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249 InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRv cCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+PHNwYW4gY2xhc3M9ImRlbGV0ZSI+ICAgICB8ICAg ICAgIHwgICAgQWxsb2NhdGUgcmVxdWVzdCBBQ0NFU1MtVE9LRU4gICAgICAgICAgfCAgICAgICAg IHw8L3NwYW4+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPjwvdGQ+PHRkIGNsYXNz PSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJs aW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48c3BhbiBjbGFzcz0i ZGVsZXRlIj4gICAgIHwgICAgICAgfC0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLSZndDt8ICAgICAgICAgfDwvc3Bhbj48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJi bG9jayI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAg ICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJs YmxvY2siPjxzcGFuIGNsYXNzPSJkZWxldGUiPiAgICAgfCAgICAgICB8ICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgIHwgICAgICAgICB8PC9zcGFuPjwvdGQ+PHRkPiA8 L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRv cCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+ PC90ZD48dGQgY2xhc3M9ImxibG9jayI+PHNwYW4gY2xhc3M9ImRlbGV0ZSI+ICAgICB8ICAgICAg IHwgICAgICAgICBBbGxvY2F0ZSBzdWNjZXNzIHJlc3BvbnNlICAgICAgICAgfCAgICAgICAgIHw8 L3NwYW4+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPjwvdGQ+PHRkIGNsYXNzPSJs aW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5l bm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48c3BhbiBjbGFzcz0iZGVs ZXRlIj4gICAgIHwgICAgICAgfCZsdDstLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS18ICAgICAgICAgfDwvc3Bhbj48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9j ayI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAg IDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxv Y2siPjxzcGFuIGNsYXNzPSJkZWxldGUiPiAgICAgfCAgICAgICB8ICAgICAgICAgICAgIFRVUk4g TWVzc2FnZXMgICAgICAgICAgICAgICAgIHwgICAgICAgICB8PC9zcGFuPjwvdGQ+PHRkPiA8L3Rk Pjx0ZCBjbGFzcz0icmJsb2NrIj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+ PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90 ZD48dGQgY2xhc3M9ImxibG9jayI+PHNwYW4gY2xhc3M9ImRlbGV0ZSI+ICAgICB8ICAgICAgIHwg ICAgICAvLy8vLy8gaW50ZWdyaXR5IHByb3RlY3RlZCAvLy8vLy8gICAgfCAgICAgICAgIHw8L3Nw YW4+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPjwvdGQ+PHRkIGNsYXNzPSJsaW5l bm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8i IHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48c3BhbiBjbGFzcz0iZGVsZXRl Ij4gICAgIHwgICAgICAgfCAgICAgIC8vLy8vLyBpbnRlZ3JpdHkgcHJvdGVjdGVkIC8vLy8vLyAg ICB8ICAgICAgICAgfDwvc3Bhbj48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+PC90 ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48 dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPjxz cGFuIGNsYXNzPSJkZWxldGUiPiAgICAgfCAgICAgICB8ICAgICAgLy8vLy8vIGludGVncml0eSBw cm90ZWN0ZWQgLy8vLy8vICAgIHwgICAgICAgICB8PC9zcGFuPjwvdGQ+PHRkPiA8L3RkPjx0ZCBj bGFzcz0icmJsb2NrIj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48 L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQg Y2xhc3M9ImxibG9jayI+PHNwYW4gY2xhc3M9ImRlbGV0ZSI+PC9zcGFuPjwvdGQ+PHRkPiA8L3Rk Pjx0ZCBjbGFzcz0icmJsb2NrIj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+ PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90 ZD48dGQgY2xhc3M9ImxibG9jayI+PHNwYW4gY2xhc3M9ImRlbGV0ZSI+ICAgICAgICAgICAgICAg ICBGaWd1cmUgNDogVFVSTiBUaGlyZCBQYXJ0eSBBdXRob3JpemF0aW9uPC9zcGFuPjwvdGQ+PHRk PiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249 InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRv cCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQi PjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8 dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ ICAgQ2hhbmdlcyBzcGVjaWZpYyB0byBUVVJOIGFyZSBsaXN0ZWQgYmVsb3c6PC90ZD48dGQ+IDwv dGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgQ2hhbmdlcyBzcGVjaWZpYyB0byBUVVJOIGFyZSBsaXN0 ZWQgYmVsb3c6PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4N CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNz PSJsZWZ0Ij48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij48L3RkPjx0ZCBjbGFzcz0i bGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGlu ZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIG8gIFRoZSBhY2Nlc3Mg dG9rZW4gY2FuIGJlIHJldXNlZCBmb3IgbXVsdGlwbGUgQWxsb2NhdGUgcmVxdWVzdHMgdG88L3Rk Pjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBvICBUaGUgYWNjZXNzIHRva2VuIGNhbiBi ZSByZXVzZWQgZm9yIG11bHRpcGxlIEFsbG9jYXRlIHJlcXVlc3RzIHRvPC90ZD48dGQgY2xhc3M9 ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9Imxp bmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICAgICB0aGUgc2FtZSBU VVJOIHNlcnZlci4gIFRoZSBUVVJOIGNsaWVudCBNVVNUIGluY2x1ZGUgdGhlIEFDQ0VTUy08L3Rk Pjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICAgICB0aGUgc2FtZSBUVVJOIHNlcnZlci4g IFRoZSBUVVJOIGNsaWVudCBNVVNUIGluY2x1ZGUgdGhlIEFDQ0VTUy08L3RkPjx0ZCBjbGFzcz0i bGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGlu ZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgICAgIFRPS0VOIGF0dHJp YnV0ZSBvbmx5IGluIEFsbG9jYXRlIGFuZCBSZWZyZXNoIHJlcXVlc3RzLiAgU2luY2UgdGhlPC90 ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgICAgVE9LRU4gYXR0cmlidXRlIG9ubHkg aW4gQWxsb2NhdGUgYW5kIFJlZnJlc2ggcmVxdWVzdHMuICBTaW5jZSB0aGU8L3RkPjx0ZCBjbGFz cz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0i bGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgICAgIGFjY2VzcyB0 b2tlbiBpcyB2YWxpZCBmb3IgYSBzcGVjaWZpYyBwZXJpb2Qgb2YgdGltZSwgdGhlIFRVUk48L3Rk Pjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICAgICBhY2Nlc3MgdG9rZW4gaXMgdmFsaWQg Zm9yIGEgc3BlY2lmaWMgcGVyaW9kIG9mIHRpbWUsIHRoZSBUVVJOPC90ZD48dGQgY2xhc3M9Imxp bmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVu byIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICAgICBzZXJ2ZXIgY2FuIGNh Y2hlIGl0IHNvIHRoYXQgaXQgY2FuIGNoZWNrIGlmIHRoZSBhY2Nlc3MgdG9rZW4gaW4gYTwvdGQ+ PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgICAgIHNlcnZlciBjYW4gY2FjaGUgaXQgc28g dGhhdCBpdCBjYW4gY2hlY2sgaWYgdGhlIGFjY2VzcyB0b2tlbiBpbiBhPC90ZD48dGQgY2xhc3M9 ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9Imxp bmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICAgICBuZXcgYWxsb2Nh dGlvbiByZXF1ZXN0IG1hdGNoZXMgb25lIG9mIHRoZSBjYWNoZWQgdG9rZW5zIGFuZCBhdm9pZHM8 L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICAgICBuZXcgYWxsb2NhdGlvbiByZXF1 ZXN0IG1hdGNoZXMgb25lIG9mIHRoZSBjYWNoZWQgdG9rZW5zIGFuZCBhdm9pZHM8L3RkPjx0ZCBj bGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFz cz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgICAgIHRoZSBu ZWVkIHRvIGRlY3J5cHQgdGhlIHRva2VuLjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQi PiAgICAgIHRoZSBuZWVkIHRvIGRlY3J5cHQgdGhlIHRva2VuLjwvdGQ+PHRkIGNsYXNzPSJsaW5l bm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8i PjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij48 L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+DQogICAgICA8dHIgYmdjb2xvcj0iZ3Jh eSI+PHRkPjwvdGQ+PHRoPjxhIG5hbWU9InBhcnQtbDEwIj48c21hbGw+c2tpcHBpbmcgdG8gY2hh bmdlIGF0PC9zbWFsbD48ZW0+IHBhZ2UgMTYsIGxpbmUgNDA8L2VtPjwvYT48L3RoPjx0aD4gPC90 aD48dGg+PGEgbmFtZT0icGFydC1yMTAiPjxzbWFsbD5za2lwcGluZyB0byBjaGFuZ2UgYXQ8L3Nt YWxsPjxlbT4gcGFnZSAxNiwgbGluZSAzNjwvZW0+PC9hPjwvdGg+PHRkPjwvdGQ+PC90cj4NCiAg ICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJs ZWZ0Ij48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij48L3RkPjx0ZCBjbGFzcz0ibGlu ZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5v IiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIFRoaXMgZG9jdW1lbnQgZGVm aW5lcyB0aGUgQUNDRVNTLVRPS0VOIFNUVU4gYXR0cmlidXRlLCBkZXNjcmliZWQgaW48L3RkPjx0 ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBUaGlzIGRvY3VtZW50IGRlZmluZXMgdGhlIEFD Q0VTUy1UT0tFTiBTVFVOIGF0dHJpYnV0ZSwgZGVzY3JpYmVkIGluPC90ZD48dGQgY2xhc3M9Imxp bmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVu byIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBTZWN0aW9uIDYuICBJQU5B IGhhcyBhbGxvY2F0ZWQgdGhlIGNvbXByZWhlbnNpb24tcmVxdWlyZWQgY29kZXBvaW50PC90ZD48 dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgU2VjdGlvbiA2LiAgSUFOQSBoYXMgYWxsb2Nh dGVkIHRoZSBjb21wcmVoZW5zaW9uLXJlcXVpcmVkIGNvZGVwb2ludDwvdGQ+PHRkIGNsYXNzPSJs aW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5l bm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgVEJEIGZvciB0aGlzIGF0 dHJpYnV0ZS48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBUQkQgZm9yIHRoaXMg YXR0cmlidXRlLjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+ DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFz cz0ibGVmdCI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+PC90ZD48dGQgY2xhc3M9 ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9Imxp bmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4xMy4gIEFja25vd2xlZGdl bWVudHM8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4xMy4gIEFja25vd2xlZGdlbWVu dHM8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAg PHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQi PjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8i IHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZh bGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgQXV0aG9ycyB3b3VsZCBsaWtlIHRv IHRoYW5rIERhbiBXaW5nLCBQYWwgTWFydGluc2VuLCBPbGVnIE1vc2thbGVua28sPC90ZD48dGQ+ IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgQXV0aG9ycyB3b3VsZCBsaWtlIHRvIHRoYW5rIERh biBXaW5nLCBQYWwgTWFydGluc2VuLCBPbGVnIE1vc2thbGVua28sPC90ZD48dGQgY2xhc3M9Imxp bmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVu byIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBDaGFybGVzIEVja2VsLCBT cGVuY2VyIERhd2tpbnMsIEhhbm5lcyBUc2Nob2ZlbmlnLCBZYXJvbiBTaGVmZmVyLCBUb208L3Rk Pjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBDaGFybGVzIEVja2VsLCBTcGVuY2VyIERh d2tpbnMsIEhhbm5lcyBUc2Nob2ZlbmlnLCBZYXJvbiBTaGVmZmVyLCBUb208L3RkPjx0ZCBjbGFz cz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0i bGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIFRheWxvciwgQ2hy aXN0ZXIgSG9sbWJlcmcsIFBldGUgUmVzbmljaywgS2F0aGxlZW4gTW9yaWFydHksIFJpY2hhcmQ8 L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBUYXlsb3IsIENocmlzdGVyIEhvbG1i ZXJnLCBQZXRlIFJlc25pY2ssIEthdGhsZWVuIE1vcmlhcnR5LCBSaWNoYXJkPC90ZD48dGQgY2xh c3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQ+PGEgbmFt ZT0iZGlmZjAwMTciPjwvYT48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8i IHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj4gICBCYXJuZXMsIFN0ZXBoZW4g PHNwYW4gY2xhc3M9ImRlbGV0ZSI+RmFycmVsbCBhbmQ8L3NwYW4+IEFsaXNzYSBDb29wZXIgZm9y IGNvbW1lbnRzIGFuZCByZXZpZXcuPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPiAg IEJhcm5lcywgU3RlcGhlbiA8c3BhbiBjbGFzcz0iaW5zZXJ0Ij5GYXJyZWxsLDwvc3Bhbj4gQWxp c3NhIENvb3BlciA8c3BhbiBjbGFzcz0iaW5zZXJ0Ij5hbmQgUmljaCBTYWx6PC9zcGFuPiBmb3Ig Y29tbWVudHMgYW5kPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90 cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNs YXNzPSJsYmxvY2siPiAgIFRoZSBhdXRob3JzIHdvdWxkIGxpa2UgdG8gZ2l2ZSBzcGVjaWFsIHRo YW5rcyB0byBCcmFuZG9uIFdpbGxpYW1zIGZvcjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJs b2NrIj4gICByZXZpZXcuICBUaGUgYXV0aG9ycyB3b3VsZCBsaWtlIHRvIGdpdmUgc3BlY2lhbCB0 aGFua3MgdG8gQnJhbmRvbjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3Rk PjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0 ZCBjbGFzcz0ibGJsb2NrIj4gICBoaXMgaGVscC48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJi bG9jayI+ICAgV2lsbGlhbXMgZm9yIGhpcyBoZWxwLjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZh bGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGln bj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJy aWdodCI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAg ICAgIDx0cj48dGQ+PGEgbmFtZT0iZGlmZjAwMTgiPjwvYT48L3RkPjwvdHI+DQogICAgICA8dHI+ PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj4g ICBUaGFua3MgdG8gT2xlZyBNb3NrYWxlbmtvIGZvciBwcm92aWRpbmcgPHNwYW4gY2xhc3M9ImRl bGV0ZSI+dG9rZW4gc2FtcGxlczwvc3Bhbj4gaW4gdGhlPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNz PSJyYmxvY2siPiAgIFRoYW5rcyB0byBPbGVnIE1vc2thbGVua28gZm9yIHByb3ZpZGluZyA8c3Bh biBjbGFzcz0iaW5zZXJ0Ij5jb2RlIHNuaXBwZW50PC9zcGFuPiBpbiB0aGU8L3RkPjx0ZCBjbGFz cz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0i bGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIEFwcGVuZGl4IHNl Y3Rpb24uPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgQXBwZW5kaXggc2VjdGlv bi48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAg PHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQi PjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8i IHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZh bGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+MTQuICBSZWZlcmVuY2VzPC90ZD48dGQ+ IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+MTQuICBSZWZlcmVuY2VzPC90ZD48dGQgY2xhc3M9Imxp bmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQ+PGEgbmFtZT0iZGlm ZjAwMTkiPjwvYT48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGln bj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9 InJibG9jayI+PHNwYW4gY2xhc3M9Imluc2VydCI+ICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIDwvc3Bhbj48L3Rk Pjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0 ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPjE0LjEu ICBOb3JtYXRpdmUgUmVmZXJlbmNlczwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPjE0 LjEuICBOb3JtYXRpdmUgUmVmZXJlbmNlczwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0i dG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9w Ij48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0 cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4g ICBbSS1ELmlldGYtam9zZS1qc29uLXdlYi1hbGdvcml0aG1zXTwvdGQ+PHRkPiA8L3RkPjx0ZCBj bGFzcz0icmlnaHQiPiAgIFtJLUQuaWV0Zi1qb3NlLWpzb24td2ViLWFsZ29yaXRobXNdPC90ZD48 dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQg Y2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICAgICAg ICAgICAgIEpvbmVzLCBNLiwgIkpTT04gV2ViIEFsZ29yaXRobXMgKEpXQSkiLCBkcmFmdC1pZXRm LWpvc2UtPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgICAgICAgICAgICBKb25l cywgTS4sICJKU09OIFdlYiBBbGdvcml0aG1zIChKV0EpIiwgZHJhZnQtaWV0Zi1qb3NlLTwvdGQ+ PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRk IGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgICAg ICAgICAgICBqc29uLXdlYi1hbGdvcml0aG1zLTQwICh3b3JrIGluIHByb2dyZXNzKSwgSmFudWFy eSAyMDE1LjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgICAgICAgICAgICAganNv bi13ZWItYWxnb3JpdGhtcy00MCAod29yayBpbiBwcm9ncmVzcyksIEphbnVhcnkgMjAxNS48L3Rk Pjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0 ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPjwvdGQ+ PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGln bj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0i dG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgW1JGQzIxMTldICBCcmFkbmVyLCBTLiwgIktl eSB3b3JkcyBmb3IgdXNlIGluIFJGQ3MgdG8gSW5kaWNhdGU8L3RkPjx0ZD4gPC90ZD48dGQgY2xh c3M9InJpZ2h0Ij4gICBbUkZDMjExOV0gIEJyYWRuZXIsIFMuLCAiS2V5IHdvcmRzIGZvciB1c2Ug aW4gUkZDcyB0byBJbmRpY2F0ZTwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48 L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3Rk Pjx0ZCBjbGFzcz0ibGVmdCI+ICAgICAgICAgICAgICBSZXF1aXJlbWVudCBMZXZlbHMiLCBCQ1Ag MTQsIFJGQyAyMTE5LCBNYXJjaCAxOTk3LjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQi PiAgICAgICAgICAgICAgUmVxdWlyZW1lbnQgTGV2ZWxzIiwgQkNQIDE0LCBSRkMgMjExOSwgTWFy Y2ggMTk5Ny48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0K ICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9 ImxlZnQiPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPjwvdGQ+PHRkIGNsYXNzPSJs aW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5l bm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgW1JGQzQ2NDhdICBKb3Nl ZnNzb24sIFMuLCAiVGhlIEJhc2UxNiwgQmFzZTMyLCBhbmQgQmFzZTY0IERhdGE8L3RkPjx0ZD4g PC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBbUkZDNDY0OF0gIEpvc2Vmc3NvbiwgUy4sICJUaGUg QmFzZTE2LCBCYXNlMzIsIGFuZCBCYXNlNjQgRGF0YTwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZh bGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+ PHRkIGNsYXNzPSJsZWZ0Ij48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij48L3RkPjx0 ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+DQogICAgICA8dHIgYmdjb2xvcj0iZ3JheSI+PHRk PjwvdGQ+PHRoPjxhIG5hbWU9InBhcnQtbDExIj48c21hbGw+c2tpcHBpbmcgdG8gY2hhbmdlIGF0 PC9zbWFsbD48ZW0+IHBhZ2UgMTksIGxpbmUgMTc8L2VtPjwvYT48L3RoPjx0aD4gPC90aD48dGg+ PGEgbmFtZT0icGFydC1yMTEiPjxzbWFsbD5za2lwcGluZyB0byBjaGFuZ2UgYXQ8L3NtYWxsPjxl bT4gcGFnZSAxOSwgbGluZSAxMDwvZW0+PC9hPjwvdGg+PHRkPjwvdGQ+PC90cj4NCiAgICAgIDx0 cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij48 L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2 YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxp Z249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIFtSRkM3MzUwXSAgUGV0aXQtSHVndWVu aW4sIE0uIGFuZCBHLiBTYWxndWVpcm8sICJEYXRhZ3JhbSBUcmFuc3BvcnQ8L3RkPjx0ZD4gPC90 ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBbUkZDNzM1MF0gIFBldGl0LUh1Z3VlbmluLCBNLiBhbmQg Ry4gU2FsZ3VlaXJvLCAiRGF0YWdyYW0gVHJhbnNwb3J0PC90ZD48dGQgY2xhc3M9ImxpbmVubyIg dmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFs aWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICAgICAgICAgICAgIExheWVyIFNlY3Vy aXR5IChEVExTKSBhcyBUcmFuc3BvcnQgZm9yIFNlc3Npb24gVHJhdmVyc2FsPC90ZD48dGQ+IDwv dGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgICAgICAgICAgICBMYXllciBTZWN1cml0eSAoRFRMUykg YXMgVHJhbnNwb3J0IGZvciBTZXNzaW9uIFRyYXZlcnNhbDwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8i IHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZh bGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgICAgICAgICAgICBVdGlsaXRpZXMg Zm9yIE5BVCAoU1RVTikiLCBSRkMgNzM1MCwgQXVndXN0IDIwMTQuPC90ZD48dGQ+IDwvdGQ+PHRk IGNsYXNzPSJyaWdodCI+ICAgICAgICAgICAgICBVdGlsaXRpZXMgZm9yIE5BVCAoU1RVTikiLCBS RkMgNzM1MCwgQXVndXN0IDIwMTQuPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3Ai PjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwv dGQ+PHRkIGNsYXNzPSJsZWZ0Ij48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij48L3Rk Pjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0 ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIFtS RkM3Mzc2XSAgUmVkZHksIFQuLCBSYXZpbmRyYW5hdGgsIFIuLCBQZXJ1bWFsLCBNLiwgYW5kIEEu IFllZ2luLDwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIFtSRkM3Mzc2XSAgUmVk ZHksIFQuLCBSYXZpbmRyYW5hdGgsIFIuLCBQZXJ1bWFsLCBNLiwgYW5kIEEuIFllZ2luLDwvdGQ+ PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRk IGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgICAg ICAgICAgICAiUHJvYmxlbXMgd2l0aCBTZXNzaW9uIFRyYXZlcnNhbCBVdGlsaXRpZXMgZm9yIE5B VCAoU1RVTik8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICAgICAgICAgICAgICJQ cm9ibGVtcyB3aXRoIFNlc3Npb24gVHJhdmVyc2FsIFV0aWxpdGllcyBmb3IgTkFUIChTVFVOKTwv dGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+ PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAg ICAgICAgICAgICBMb25nLVRlcm0gQXV0aGVudGljYXRpb24gZm9yIFRyYXZlcnNhbCBVc2luZyBS ZWxheXMgYXJvdW5kPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgICAgICAgICAg ICBMb25nLVRlcm0gQXV0aGVudGljYXRpb24gZm9yIFRyYXZlcnNhbCBVc2luZyBSZWxheXMgYXJv dW5kPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAg IDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0 Ij4gICAgICAgICAgICAgIE5BVCAoVFVSTikiLCBSRkMgNzM3NiwgU2VwdGVtYmVyIDIwMTQuPC90 ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgICAgICAgICAgICBOQVQgKFRVUk4pIiwg UkZDIDczNzYsIFNlcHRlbWJlciAyMDE0LjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0i dG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9w Ij48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0 cj48dGQ+PGEgbmFtZT0iZGlmZjAwMjAiPjwvYT48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNs YXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj5BcHBlbmRp eCBBLiAgPHNwYW4gY2xhc3M9ImRlbGV0ZSI+U2FtcGxlIHRpY2tldHM8L3NwYW4+PC90ZD48dGQ+ IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPkFwcGVuZGl4IEEuICA8c3BhbiBjbGFzcz0iaW5zZXJ0 Ij5DIFNuaXBwZXQgdG8gZW5jcnlwdC9kZWNyeXB0IHRva2VuPC9zcGFuPjwvdGQ+PHRkIGNsYXNz PSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJs aW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48L3RkPjx0ZD4gPC90 ZD48dGQgY2xhc3M9InJibG9jayI+PHNwYW4gY2xhc3M9Imluc2VydCI+PC9zcGFuPjwvdGQ+PHRk IGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNs YXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48L3RkPjx0 ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+PHNwYW4gY2xhc3M9Imluc2VydCI+Jmx0O0NPREUg QkVHSU5TJmd0Ozwvc3Bhbj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90 ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48 dGQgY2xhc3M9ImxibG9jayI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPjxzcGFu IGNsYXNzPSJpbnNlcnQiPjwvc3Bhbj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRv cCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+ PC90ZD48dGQgY2xhc3M9ImxibG9jayI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2si PjxzcGFuIGNsYXNzPSJpbnNlcnQiPiNpbmNsdWRlICZsdDtzdGRpby5oJmd0Ozwvc3Bhbj48L3Rk Pjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0 ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+PC90 ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPjxzcGFuIGNsYXNzPSJpbnNlcnQiPiNpbmNs dWRlICZsdDtzdGRsaWIuaCZndDs8L3NwYW4+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWdu PSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0 b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJs b2NrIj48c3BhbiBjbGFzcz0iaW5zZXJ0Ij4jaW5jbHVkZSAmbHQ7c3RkaW50LmgmZ3Q7PC9zcGFu PjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8 dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2Nr Ij48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+PHNwYW4gY2xhc3M9Imluc2VydCI+ I2luY2x1ZGUgJmx0O3N0cmluZ3MuaCZndDs8L3NwYW4+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIg dmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFs aWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFz cz0icmJsb2NrIj48c3BhbiBjbGFzcz0iaW5zZXJ0Ij4jaW5jbHVkZSAmbHQ7bmV0aW5ldC9pbi5o Jmd0Ozwvc3Bhbj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3Ry Pg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xh c3M9ImxibG9jayI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPjxzcGFuIGNsYXNz PSJpbnNlcnQiPiNpbmNsdWRlICZsdDtzeXMvdHlwZXMuaCZndDs8L3NwYW4+PC90ZD48dGQgY2xh c3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9 ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPjwvdGQ+PHRkPiA8 L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48c3BhbiBjbGFzcz0iaW5zZXJ0Ij48L3NwYW4+PC90ZD48 dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQg Y2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPjwvdGQ+ PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48c3BhbiBjbGFzcz0iaW5zZXJ0Ij4jaW5jbHVk ZSAmbHQ7b3BlbnNzbC9zc2wuaCZndDs8L3NwYW4+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFs aWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWdu PSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0i cmJsb2NrIj48c3BhbiBjbGFzcz0iaW5zZXJ0Ij4jaW5jbHVkZSAmbHQ7b3BlbnNzbC9ldnAuaCZn dDs8L3NwYW4+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4N CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNz PSJsYmxvY2siPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48c3BhbiBjbGFzcz0i aW5zZXJ0Ij48L3NwYW4+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+ PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRk IGNsYXNzPSJsYmxvY2siPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48c3BhbiBj bGFzcz0iaW5zZXJ0Ij4jZGVmaW5lIE9BVVRIX0dDTV9OT05DRV9TSVpFICgxMik8L3NwYW4+PC90 ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48 dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPjwv dGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48c3BhbiBjbGFzcz0iaW5zZXJ0Ij4jZGVm aW5lIE9BVVRIX0dDTV9UQUdfU0laRSAoMTYpPC9zcGFuPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8i IHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZh bGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48L3RkPjx0ZD4gPC90ZD48dGQgY2xh c3M9InJibG9jayI+PHNwYW4gY2xhc3M9Imluc2VydCI+PC9zcGFuPjwvdGQ+PHRkIGNsYXNzPSJs aW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5l bm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48L3RkPjx0ZD4gPC90ZD48 dGQgY2xhc3M9InJibG9jayI+PHNwYW4gY2xhc3M9Imluc2VydCI+I2RlZmluZSBNQVhfTk9OQ0Vf TEVOR1RIICgxMjgpPC9zcGFuPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48 L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3Rk Pjx0ZCBjbGFzcz0ibGJsb2NrIj48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+PHNw YW4gY2xhc3M9Imluc2VydCI+I2RlZmluZSBNQVhfTUFDX0tFWV9MRU5HVEggKDEyOCk8L3NwYW4+ PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0 cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2si PjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48c3BhbiBjbGFzcz0iaW5zZXJ0Ij48 L3NwYW4+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAg ICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJs YmxvY2siPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48c3BhbiBjbGFzcz0iaW5z ZXJ0Ij4jZGVmaW5lIE1BWF9FTkNPREVEX09BVVRIX1RPS0VOX1NJWkUgKDEwMjQpPC9zcGFuPjwv dGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+ PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48 L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+PHNwYW4gY2xhc3M9Imluc2VydCI+PC9z cGFuPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAg ICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJs b2NrIj48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+PHNwYW4gY2xhc3M9Imluc2Vy dCI+c3RydWN0IF9vYXV0aF90b2tlbiB7PC9zcGFuPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZh bGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGln bj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9 InJibG9jayI+PHNwYW4gY2xhc3M9Imluc2VydCI+ICAgICAgICB1aW50MTZfdCBub25jZV9sZW5n dGg7PC9zcGFuPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+ DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFz cz0ibGJsb2NrIj48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+PHNwYW4gY2xhc3M9 Imluc2VydCI+ICAgICAgICB1aW50OF90IG5vbmNlW01BWF9OT05DRV9MRU5HVEhdOzwvc3Bhbj48 L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRy Pjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+ PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPjxzcGFuIGNsYXNzPSJpbnNlcnQiPiAg ICAgICAgdWludDE2X3QgbWFjX2tleV9sZW5ndGg7PC9zcGFuPjwvdGQ+PHRkIGNsYXNzPSJsaW5l bm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8i IHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48L3RkPjx0ZD4gPC90ZD48dGQg Y2xhc3M9InJibG9jayI+PHNwYW4gY2xhc3M9Imluc2VydCI+ICAgICAgICB1aW50OF90IG1hY19r ZXlbTUFYX01BQ19LRVlfTEVOR1RIXTs8L3NwYW4+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFs aWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWdu PSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0i cmJsb2NrIj48c3BhbiBjbGFzcz0iaW5zZXJ0Ij4gICAgICAgIHVpbnQ2NF90IHRpbWVzdGFtcDs8 L3NwYW4+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAg ICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJs YmxvY2siPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48c3BhbiBjbGFzcz0iaW5z ZXJ0Ij4gICAgICAgIHVpbnQzMl90IGxpZmV0aW1lOzwvc3Bhbj48L3RkPjx0ZCBjbGFzcz0ibGlu ZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5v IiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+PC90ZD48dGQ+IDwvdGQ+PHRk IGNsYXNzPSJyYmxvY2siPjxzcGFuIGNsYXNzPSJpbnNlcnQiPn07PC9zcGFuPjwvdGQ+PHRkIGNs YXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNz PSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48L3RkPjx0ZD4g PC90ZD48dGQgY2xhc3M9InJibG9jayI+PHNwYW4gY2xhc3M9Imluc2VydCI+PC9zcGFuPjwvdGQ+ PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRk IGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48L3Rk Pjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+PHNwYW4gY2xhc3M9Imluc2VydCI+dHlwZWRl ZiBzdHJ1Y3QgX29hdXRoX3Rva2VuIG9hdXRoX3Rva2VuX3Q7PC9zcGFuPjwvdGQ+PHRkIGNsYXNz PSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJs aW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48L3RkPjx0ZD4gPC90 ZD48dGQgY2xhc3M9InJibG9jayI+PHNwYW4gY2xhc3M9Imluc2VydCI+PC9zcGFuPjwvdGQ+PHRk IGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNs YXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48L3RkPjx0 ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+PHNwYW4gY2xhc3M9Imluc2VydCI+c3RhdGljIGlu dCBteV9FVlBfRW5jcnlwdFVwZGF0ZShFVlBfQ0lQSEVSX0NUWCAqY3R4LCB1aW50OF90ICpvdXQs IGludCAqb3V0bCwgY29uc3QgdWludDhfdCAqaW4sIGludCBpbmwpPC9zcGFuPjwvdGQ+PHRkIGNs YXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNz PSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48L3RkPjx0ZD4g PC90ZD48dGQgY2xhc3M9InJibG9jayI+PHNwYW4gY2xhc3M9Imluc2VydCI+ezwvc3Bhbj48L3Rk Pjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0 ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+PC90 ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPjxzcGFuIGNsYXNzPSJpbnNlcnQiPiAgICAg ICAgaW50IGN5Y2xlID0gMDs8L3NwYW4+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0 b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3Ai PjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2Nr Ij48c3BhbiBjbGFzcz0iaW5zZXJ0Ij4gICAgICAgIGludCBvdXRfbGVuID0gMDs8L3NwYW4+PC90 ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48 dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPjwv dGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48c3BhbiBjbGFzcz0iaW5zZXJ0Ij4gICAg ICAgIHdoaWxlKChvdXRfbGVuJmx0O2lubCkmYW1wOyZhbXA7KCsrY3ljbGUmbHQ7MTI4KSkgezwv c3Bhbj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAg ICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9Imxi bG9jayI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPjxzcGFuIGNsYXNzPSJpbnNl cnQiPiAgICAgICAgICAgICAgICBpbnQgdG1wX291dGw9MDs8L3NwYW4+PC90ZD48dGQgY2xhc3M9 ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9Imxp bmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPjwvdGQ+PHRkPiA8L3Rk Pjx0ZCBjbGFzcz0icmJsb2NrIj48c3BhbiBjbGFzcz0iaW5zZXJ0Ij4gICAgICAgICAgICAgICAg dW5zaWduZWQgY2hhciAqcHRyID0gTlVMTDs8L3NwYW4+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIg dmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFs aWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFz cz0icmJsb2NrIj48c3BhbiBjbGFzcz0iaW5zZXJ0Ij4gICAgICAgICAgICAgICAgaWYob3V0KTwv c3Bhbj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAg ICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9Imxi bG9jayI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPjxzcGFuIGNsYXNzPSJpbnNl cnQiPiAgICAgICAgICAgICAgICAgICAgICAgIHB0ciA9IG91dCtvdXRfbGVuOzwvc3Bhbj48L3Rk Pjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0 ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+PC90 ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPjxzcGFuIGNsYXNzPSJpbnNlcnQiPiAgICAg ICAgICAgICAgICBpbnQgcmV0ID0gRVZQX0VuY3J5cHRVcGRhdGUoY3R4LCBwdHIsICZhbXA7dG1w X291dGwsIGluK291dF9sZW4sIGlubC1vdXRfbGVuKTs8L3NwYW4+PC90ZD48dGQgY2xhc3M9Imxp bmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVu byIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPjwvdGQ+PHRkPiA8L3RkPjx0 ZCBjbGFzcz0icmJsb2NrIj48c3BhbiBjbGFzcz0iaW5zZXJ0Ij4gICAgICAgICAgICAgICAgb3V0 X2xlbiArPSB0bXBfb3V0bDs8L3NwYW4+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0 b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3Ai PjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2Nr Ij48c3BhbiBjbGFzcz0iaW5zZXJ0Ij4gICAgICAgICAgICAgICAgaWYocmV0Jmx0OzEpPC9zcGFu PjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8 dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2Nr Ij48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+PHNwYW4gY2xhc3M9Imluc2VydCI+ ICAgICAgICAgICAgICAgICAgICAgICAgcmV0dXJuIHJldDs8L3NwYW4+PC90ZD48dGQgY2xhc3M9 ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9Imxp bmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPjwvdGQ+PHRkPiA8L3Rk Pjx0ZCBjbGFzcz0icmJsb2NrIj48c3BhbiBjbGFzcz0iaW5zZXJ0Ij4gICAgICAgIH08L3NwYW4+ PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0 cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2si PjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48c3BhbiBjbGFzcz0iaW5zZXJ0Ij4g ICAgICAgICpvdXRsID0gb3V0X2xlbjs8L3NwYW4+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFs aWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWdu PSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0i cmJsb2NrIj48c3BhbiBjbGFzcz0iaW5zZXJ0Ij4gICAgICAgIHJldHVybiAxOzwvc3Bhbj48L3Rk Pjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0 ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+PC90 ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPjxzcGFuIGNsYXNzPSJpbnNlcnQiPn08L3Nw YW4+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAg IDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxv Y2siPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48c3BhbiBjbGFzcz0iaW5zZXJ0 Ij48L3NwYW4+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4N CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNz PSJsYmxvY2siPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48c3BhbiBjbGFzcz0i aW5zZXJ0Ij5zdGF0aWMgaW50IG15X0VWUF9EZWNyeXB0VXBkYXRlKEVWUF9DSVBIRVJfQ1RYICpj dHgsIHVpbnQ4X3QgKm91dCw8L3NwYW4+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0 b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3Ai PjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2Nr Ij48c3BhbiBjbGFzcz0iaW5zZXJ0Ij4gICAgICAgICAgICAgICAgaW50ICpvdXRsLCBjb25zdCB1 aW50OF90ICppbiwgaW50IGlubCk8L3NwYW4+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWdu PSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0 b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJs b2NrIj48c3BhbiBjbGFzcz0iaW5zZXJ0Ij57PC9zcGFuPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8i IHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZh bGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48L3RkPjx0ZD4gPC90ZD48dGQgY2xh c3M9InJibG9jayI+PHNwYW4gY2xhc3M9Imluc2VydCI+ICAgICAgICBpbnQgY3ljbGUgPSAwOzwv c3Bhbj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAg ICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9Imxi bG9jayI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPjxzcGFuIGNsYXNzPSJpbnNl cnQiPiAgICAgICAgaW50IG91dF9sZW4gPSAwOzwvc3Bhbj48L3RkPjx0ZCBjbGFzcz0ibGluZW5v IiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2 YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNs YXNzPSJyYmxvY2siPjxzcGFuIGNsYXNzPSJpbnNlcnQiPiAgICAgICAgd2hpbGUoKG91dF9sZW4m bHQ7aW5sKSZhbXA7JmFtcDsoKytjeWNsZSZsdDsxMjgpKSB7PC9zcGFuPjwvdGQ+PHRkIGNsYXNz PSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJs aW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48L3RkPjx0ZD4gPC90 ZD48dGQgY2xhc3M9InJibG9jayI+PHNwYW4gY2xhc3M9Imluc2VydCI+ICAgICAgICAgICAgICAg IGludCB0bXBfb3V0bD0wOzwvc3Bhbj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRv cCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+ PC90ZD48dGQgY2xhc3M9ImxibG9jayI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2si PjxzcGFuIGNsYXNzPSJpbnNlcnQiPiAgICAgICAgICAgICAgICB1bnNpZ25lZCBjaGFyICpwdHIg PSBOVUxMOzwvc3Bhbj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48 L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQg Y2xhc3M9ImxibG9jayI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPjxzcGFuIGNs YXNzPSJpbnNlcnQiPiAgICAgICAgICAgICAgICBpZihvdXQpPC9zcGFuPjwvdGQ+PHRkIGNsYXNz PSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJs aW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48L3RkPjx0ZD4gPC90 ZD48dGQgY2xhc3M9InJibG9jayI+PHNwYW4gY2xhc3M9Imluc2VydCI+ICAgICAgICAgICAgICAg ICAgICAgICAgcHRyID0gb3V0K291dF9sZW47PC9zcGFuPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8i IHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZh bGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48L3RkPjx0ZD4gPC90ZD48dGQgY2xh c3M9InJibG9jayI+PHNwYW4gY2xhc3M9Imluc2VydCI+ICAgICAgICAgICAgICAgIGludCByZXQg PSBFVlBfRGVjcnlwdFVwZGF0ZShjdHgsIHB0ciwgJmFtcDt0bXBfb3V0bCwgaW4rb3V0X2xlbiwg aW5sLW91dF9sZW4pOzwvc3Bhbj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+ PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90 ZD48dGQgY2xhc3M9ImxibG9jayI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPjxz cGFuIGNsYXNzPSJpbnNlcnQiPiAgICAgICAgICAgICAgICBvdXRfbGVuICs9IHRtcF9vdXRsOzwv c3Bhbj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAg ICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9Imxi bG9jayI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPjxzcGFuIGNsYXNzPSJpbnNl cnQiPiAgICAgICAgICAgICAgICBpZihyZXQmbHQ7MSk8L3NwYW4+PC90ZD48dGQgY2xhc3M9Imxp bmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVu byIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPjwvdGQ+PHRkPiA8L3RkPjx0 ZCBjbGFzcz0icmJsb2NrIj48c3BhbiBjbGFzcz0iaW5zZXJ0Ij4gICAgICAgICAgICAgICAgICAg ICAgICByZXR1cm4gcmV0Ozwvc3Bhbj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRv cCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+ PC90ZD48dGQgY2xhc3M9ImxibG9jayI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2si PjxzcGFuIGNsYXNzPSJpbnNlcnQiPiAgICAgICAgfTwvc3Bhbj48L3RkPjx0ZCBjbGFzcz0ibGlu ZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5v IiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+PC90ZD48dGQ+IDwvdGQ+PHRk IGNsYXNzPSJyYmxvY2siPjxzcGFuIGNsYXNzPSJpbnNlcnQiPiAgICAgICAgKm91dGwgPSBvdXRf bGVuOzwvc3Bhbj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3Ry Pg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xh c3M9ImxibG9jayI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPjxzcGFuIGNsYXNz PSJpbnNlcnQiPiAgICAgICAgcmV0dXJuIDE7PC9zcGFuPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8i IHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZh bGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48L3RkPjx0ZD4gPC90ZD48dGQgY2xh c3M9InJibG9jayI+PHNwYW4gY2xhc3M9Imluc2VydCI+fTwvc3Bhbj48L3RkPjx0ZCBjbGFzcz0i bGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGlu ZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+PC90ZD48dGQ+IDwvdGQ+ PHRkIGNsYXNzPSJyYmxvY2siPjxzcGFuIGNsYXNzPSJpbnNlcnQiPjwvc3Bhbj48L3RkPjx0ZCBj bGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFz cz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+PC90ZD48dGQ+ IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPjxzcGFuIGNsYXNzPSJpbnNlcnQiPnN0YXRpYyBpbmxp bmUgdWludDY0X3QgbnRvaGxsKHVpbnQ2NF90IHYpPC9zcGFuPjwvdGQ+PHRkIGNsYXNzPSJsaW5l bm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8i IHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48L3RkPjx0ZD4gPC90ZD48dGQg Y2xhc3M9InJibG9jayI+PHNwYW4gY2xhc3M9Imluc2VydCI+ezwvc3Bhbj48L3RkPjx0ZCBjbGFz cz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0i bGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+PC90ZD48dGQ+IDwv dGQ+PHRkIGNsYXNzPSJyYmxvY2siPjxzcGFuIGNsYXNzPSJpbnNlcnQiPiNpZiBCWVRFX09SREVS ID09IExJVFRMRV9FTkRJQU48L3NwYW4+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0 b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3Ai PjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2Nr Ij48c3BhbiBjbGFzcz0iaW5zZXJ0Ij4gICAgICAgIHVpbnQ4X3QgKnNyYyA9ICh1aW50OF90Kikg JmFtcDt2Ozwvc3Bhbj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48 L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQg Y2xhc3M9ImxibG9jayI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPjxzcGFuIGNs YXNzPSJpbnNlcnQiPiAgICAgICAgdWludDhfdCogZHN0ID0gc3JjICsgNzs8L3NwYW4+PC90ZD48 dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQg Y2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPjwvdGQ+ PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48c3BhbiBjbGFzcz0iaW5zZXJ0Ij4gICAgICAg IHdoaWxlIChzcmMgJmx0OyBkc3QpIHs8L3NwYW4+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFs aWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWdu PSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0i cmJsb2NrIj48c3BhbiBjbGFzcz0iaW5zZXJ0Ij4gICAgICAgICAgICAgICAgdWludDhfdCB2ZHN0 ID0gKmRzdDs8L3NwYW4+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+ PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRk IGNsYXNzPSJsYmxvY2siPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48c3BhbiBj bGFzcz0iaW5zZXJ0Ij4gICAgICAgICAgICAgICAgKihkc3QtLSkgPSAqc3JjOzwvc3Bhbj48L3Rk Pjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0 ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+PC90 ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPjxzcGFuIGNsYXNzPSJpbnNlcnQiPiAgICAg ICAgICAgICAgICAqKHNyYysrKSA9IHZkc3Q7PC9zcGFuPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8i IHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZh bGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48L3RkPjx0ZD4gPC90ZD48dGQgY2xh c3M9InJibG9jayI+PHNwYW4gY2xhc3M9Imluc2VydCI+ICAgICAgICB9PC9zcGFuPjwvdGQ+PHRk IGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNs YXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48L3RkPjx0 ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+PHNwYW4gY2xhc3M9Imluc2VydCI+I2VsaWYgQllU RV9PUkRFUiA9PSBCSUdfRU5ESUFOPC9zcGFuPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGln bj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0i dG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJi bG9jayI+PHNwYW4gY2xhc3M9Imluc2VydCI+ICAgICAgICAvKiBPSyAqLzwvc3Bhbj48L3RkPjx0 ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBj bGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+PC90ZD48 dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPjxzcGFuIGNsYXNzPSJpbnNlcnQiPiNlbHNlPC9z cGFuPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAg ICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJs b2NrIj48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+PHNwYW4gY2xhc3M9Imluc2Vy dCI+I2Vycm9yIFdST05HIEJZVEVfT1JERVIgU0VUVElORzwvc3Bhbj48L3RkPjx0ZCBjbGFzcz0i bGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGlu ZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+PC90ZD48dGQ+IDwvdGQ+ PHRkIGNsYXNzPSJyYmxvY2siPjxzcGFuIGNsYXNzPSJpbnNlcnQiPiNlbmRpZjwvc3Bhbj48L3Rk Pjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0 ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+PC90 ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPjxzcGFuIGNsYXNzPSJpbnNlcnQiPiAgICAg ICAgcmV0dXJuIHY7PC9zcGFuPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48 L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3Rk Pjx0ZCBjbGFzcz0ibGJsb2NrIj48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+PHNw YW4gY2xhc3M9Imluc2VydCI+fTwvc3Bhbj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249 InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRv cCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxv Y2siPjxzcGFuIGNsYXNzPSJpbnNlcnQiPjwvc3Bhbj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2 YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxp Z249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNz PSJyYmxvY2siPjxzcGFuIGNsYXNzPSJpbnNlcnQiPnN0YXRpYyBpbnQgZW5jb2RlX29hdXRoX3Rv a2VuX2djbShjb25zdCB1aW50OF90ICpzZXJ2ZXJfbmFtZSwgY29uc3QgdWludDhfdCAqa2V5LDwv c3Bhbj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAg ICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9Imxi bG9jayI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPjxzcGFuIGNsYXNzPSJpbnNl cnQiPiAgICAgICAgICAgICAgICBjb25zdCBvYXV0aF90b2tlbl90ICpvYXV0aF90b2tlbiw8L3Nw YW4+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAg IDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxv Y2siPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48c3BhbiBjbGFzcz0iaW5zZXJ0 Ij4gICAgICAgICAgICAgICAgdWludDhfdCAqZW5jb2RlZF9idWZmZXIpIHs8L3NwYW4+PC90ZD48 dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQg Y2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPjwvdGQ+ PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48c3BhbiBjbGFzcz0iaW5zZXJ0Ij48L3NwYW4+ PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0 cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2si PjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48c3BhbiBjbGFzcz0iaW5zZXJ0Ij4g ICAgICAgIGludCByZXQgPSAtMTs8L3NwYW4+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWdu PSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0 b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJs b2NrIj48c3BhbiBjbGFzcz0iaW5zZXJ0Ij48L3NwYW4+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIg dmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFs aWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFz cz0icmJsb2NrIj48c3BhbiBjbGFzcz0iaW5zZXJ0Ij4gICAgICAgIGlmKHNlcnZlcl9uYW1lICZh bXA7JmFtcDsga2V5ICZhbXA7JmFtcDsgb2F1dGhfdG9rZW4gJmFtcDsmYW1wOyBlbmNvZGVkX2J1 ZmZlcikgezwvc3Bhbj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48 L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQg Y2xhc3M9ImxibG9jayI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPjxzcGFuIGNs YXNzPSJpbnNlcnQiPjwvc3Bhbj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+ PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90 ZD48dGQgY2xhc3M9ImxibG9jayI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPjxz cGFuIGNsYXNzPSJpbnNlcnQiPiAgICAgICAgICAgICAgICB1aW50OF90IG9yaWdfZmllbGRbTUFY X0VOQ09ERURfT0FVVEhfVE9LRU5fU0laRV07PC9zcGFuPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8i IHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZh bGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48L3RkPjx0ZD4gPC90ZD48dGQgY2xh c3M9InJibG9jayI+PHNwYW4gY2xhc3M9Imluc2VydCI+ICAgICAgICAgICAgICAgIGJ6ZXJvKG9y aWdfZmllbGQsc2l6ZW9mKG9yaWdfZmllbGQpKTs8L3NwYW4+PC90ZD48dGQgY2xhc3M9ImxpbmVu byIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIg dmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPjwvdGQ+PHRkPiA8L3RkPjx0ZCBj bGFzcz0icmJsb2NrIj48c3BhbiBjbGFzcz0iaW5zZXJ0Ij48L3NwYW4+PC90ZD48dGQgY2xhc3M9 ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9Imxp bmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPjwvdGQ+PHRkPiA8L3Rk Pjx0ZCBjbGFzcz0icmJsb2NrIj48c3BhbiBjbGFzcz0iaW5zZXJ0Ij4gICAgICAgICAgICAgICAg c2l6ZV90IGxlbiA9IDA7PC9zcGFuPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9w Ij48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48 L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+ PHNwYW4gY2xhc3M9Imluc2VydCI+PC9zcGFuPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGln bj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0i dG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJi bG9jayI+PHNwYW4gY2xhc3M9Imluc2VydCI+ICAgICAgICAgICAgICAgICooKHVpbnQxNl90Kiko b3JpZ19maWVsZCtsZW4pKSA9IG50b2hzKG9hdXRoX3Rva2VuLSZndDtub25jZV9sZW5ndGgpOzwv c3Bhbj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAg ICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9Imxi bG9jayI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPjxzcGFuIGNsYXNzPSJpbnNl cnQiPiAgICAgICAgICAgICAgICBsZW4gKz0yOzwvc3Bhbj48L3RkPjx0ZCBjbGFzcz0ibGluZW5v IiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2 YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNs YXNzPSJyYmxvY2siPjxzcGFuIGNsYXNzPSJpbnNlcnQiPjwvc3Bhbj48L3RkPjx0ZCBjbGFzcz0i bGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGlu ZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+PC90ZD48dGQ+IDwvdGQ+ PHRkIGNsYXNzPSJyYmxvY2siPjxzcGFuIGNsYXNzPSJpbnNlcnQiPiAgICAgICAgICAgICAgICBi Y29weShvYXV0aF90b2tlbi0mZ3Q7bm9uY2Usb3JpZ19maWVsZCtsZW4sb2F1dGhfdG9rZW4tJmd0 O25vbmNlX2xlbmd0aCk7PC9zcGFuPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9w Ij48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48 L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+ PHNwYW4gY2xhc3M9Imluc2VydCI+ICAgICAgICAgICAgICAgIGxlbiArPSBvYXV0aF90b2tlbi0m Z3Q7bm9uY2VfbGVuZ3RoOzwvc3Bhbj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRv cCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+ PC90ZD48dGQgY2xhc3M9ImxibG9jayI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2si PjxzcGFuIGNsYXNzPSJpbnNlcnQiPjwvc3Bhbj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxp Z249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249 InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJy YmxvY2siPjxzcGFuIGNsYXNzPSJpbnNlcnQiPiAgICAgICAgICAgICAgICAqKCh1aW50MTZfdCop KG9yaWdfZmllbGQrbGVuKSkgPSBudG9ocyhvYXV0aF90b2tlbi0mZ3Q7bWFjX2tleV9sZW5ndGgp Ozwvc3Bhbj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0K ICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9 ImxibG9jayI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPjxzcGFuIGNsYXNzPSJp bnNlcnQiPiAgICAgICAgICAgICAgICBsZW4gKz0yOzwvc3Bhbj48L3RkPjx0ZCBjbGFzcz0ibGlu ZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5v IiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+PC90ZD48dGQ+IDwvdGQ+PHRk IGNsYXNzPSJyYmxvY2siPjxzcGFuIGNsYXNzPSJpbnNlcnQiPjwvc3Bhbj48L3RkPjx0ZCBjbGFz cz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0i bGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+PC90ZD48dGQ+IDwv dGQ+PHRkIGNsYXNzPSJyYmxvY2siPjxzcGFuIGNsYXNzPSJpbnNlcnQiPiAgICAgICAgICAgICAg ICBiY29weShvYXV0aF90b2tlbi0mZ3Q7bWFjX2tleSxvcmlnX2ZpZWxkK2xlbixvYXV0aF90b2tl bi0mZ3Q7bWFjX2tleV9sZW5ndGgpOzwvc3Bhbj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxp Z249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249 InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJy YmxvY2siPjxzcGFuIGNsYXNzPSJpbnNlcnQiPiAgICAgICAgICAgICAgICBsZW4gKz0gb2F1dGhf dG9rZW4tJmd0O21hY19rZXlfbGVuZ3RoOzwvc3Bhbj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2 YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxp Z249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNz PSJyYmxvY2siPjxzcGFuIGNsYXNzPSJpbnNlcnQiPjwvc3Bhbj48L3RkPjx0ZCBjbGFzcz0ibGlu ZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5v IiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+PC90ZD48dGQ+IDwvdGQ+PHRk IGNsYXNzPSJyYmxvY2siPjxzcGFuIGNsYXNzPSJpbnNlcnQiPiAgICAgICAgICAgICAgICAqKCh1 aW50NjRfdCopKG9yaWdfZmllbGQrbGVuKSkgPSBudG9obGwob2F1dGhfdG9rZW4tJmd0O3RpbWVz dGFtcCk7PC9zcGFuPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwv dHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBj bGFzcz0ibGJsb2NrIj48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+PHNwYW4gY2xh c3M9Imluc2VydCI+ICAgICAgICAgICAgICAgIGxlbiArPSA4Ozwvc3Bhbj48L3RkPjx0ZCBjbGFz cz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0i bGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+PC90ZD48dGQ+IDwv dGQ+PHRkIGNsYXNzPSJyYmxvY2siPjxzcGFuIGNsYXNzPSJpbnNlcnQiPjwvc3Bhbj48L3RkPjx0 ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBj bGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+PC90ZD48 dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPjxzcGFuIGNsYXNzPSJpbnNlcnQiPiAgICAgICAg ICAgICAgICAqKCh1aW50MzJfdCopKG9yaWdfZmllbGQrbGVuKSkgPSBudG9obChvYXV0aF90b2tl bi0mZ3Q7bGlmZXRpbWUpOzwvc3Bhbj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRv cCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+ PC90ZD48dGQgY2xhc3M9ImxibG9jayI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2si PjxzcGFuIGNsYXNzPSJpbnNlcnQiPiAgICAgICAgICAgICAgICBsZW4gKz0gNDs8L3NwYW4+PC90 ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48 dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPjwv dGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48c3BhbiBjbGFzcz0iaW5zZXJ0Ij48L3Nw YW4+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAg IDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxv Y2siPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48c3BhbiBjbGFzcz0iaW5zZXJ0 Ij4gICAgICAgICAgICAgICAgY29uc3QgRVZQX0NJUEhFUiAqIGNpcGhlciA9IEVWUF9hZXNfMjU2 X2djbSgpOzwvc3Bhbj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48 L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQg Y2xhc3M9ImxibG9jayI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPjxzcGFuIGNs YXNzPSJpbnNlcnQiPiAgICAgICAgICAgICAgICBpZighY2lwaGVyKTwvc3Bhbj48L3RkPjx0ZCBj bGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFz cz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+PC90ZD48dGQ+ IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPjxzcGFuIGNsYXNzPSJpbnNlcnQiPiAgICAgICAgICAg ICAgICAgICAgICAgIHJldHVybiAtMTs8L3NwYW4+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFs aWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWdu PSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0i cmJsb2NrIj48c3BhbiBjbGFzcz0iaW5zZXJ0Ij48L3NwYW4+PC90ZD48dGQgY2xhc3M9ImxpbmVu byIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIg dmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPjwvdGQ+PHRkPiA8L3RkPjx0ZCBj bGFzcz0icmJsb2NrIj48c3BhbiBjbGFzcz0iaW5zZXJ0Ij4gICAgICAgICAgICAgICAgRVZQX0NJ UEhFUl9DVFggY3R4Ozwvc3Bhbj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+ PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90 ZD48dGQgY2xhc3M9ImxibG9jayI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPjxz cGFuIGNsYXNzPSJpbnNlcnQiPiAgICAgICAgICAgICAgICBFVlBfQ0lQSEVSX0NUWF9pbml0KCZh bXA7Y3R4KTs8L3NwYW4+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+ PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRk IGNsYXNzPSJsYmxvY2siPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48c3BhbiBj bGFzcz0iaW5zZXJ0Ij48L3NwYW4+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3Ai PjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwv dGQ+PHRkIGNsYXNzPSJsYmxvY2siPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48 c3BhbiBjbGFzcz0iaW5zZXJ0Ij4gICAgICAgICAgICAgICAgLyogSW5pdGlhbGl6ZSB0aGUgZW5j cnlwdGlvbiBvcGVyYXRpb24uICovPC9zcGFuPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGln bj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0i dG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJi bG9jayI+PHNwYW4gY2xhc3M9Imluc2VydCI+ICAgICAgICAgICAgICAgIGlmKDEgIT0gRVZQX0Vu Y3J5cHRJbml0X2V4KCZhbXA7Y3R4LCBjaXBoZXIsIE5VTEwsIE5VTEwsIE5VTEwpKTwvc3Bhbj48 L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRy Pjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+ PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPjxzcGFuIGNsYXNzPSJpbnNlcnQiPiAg ICAgICAgICAgICAgICAgICAgICAgIHJldHVybiAtMTs8L3NwYW4+PC90ZD48dGQgY2xhc3M9Imxp bmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVu byIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPjwvdGQ+PHRkPiA8L3RkPjx0 ZCBjbGFzcz0icmJsb2NrIj48c3BhbiBjbGFzcz0iaW5zZXJ0Ij48L3NwYW4+PC90ZD48dGQgY2xh c3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9 ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPjwvdGQ+PHRkPiA8 L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48c3BhbiBjbGFzcz0iaW5zZXJ0Ij4gICAgICAgICAgICAg ICAgRVZQX0NJUEhFUl9DVFhfc2V0X3BhZGRpbmcoJmFtcDtjdHgsMSk7PC9zcGFuPjwvdGQ+PHRk IGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNs YXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48L3RkPjx0 ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+PHNwYW4gY2xhc3M9Imluc2VydCI+PC9zcGFuPjwv dGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+ PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48 L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+PHNwYW4gY2xhc3M9Imluc2VydCI+ICAg ICAgICAgICAgICAgIC8qIFNldCBJViBsZW5ndGggaWYgZGVmYXVsdCAxMiBieXRlcyAoOTYgYml0 cykgaXMgbm90IGFwcHJvcHJpYXRlICovPC9zcGFuPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZh bGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGln bj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9 InJibG9jayI+PHNwYW4gY2xhc3M9Imluc2VydCI+ICAgICAgICAgICAgICAgIGlmKDEgIT0gRVZQ X0NJUEhFUl9DVFhfY3RybCgmYW1wO2N0eCwgRVZQX0NUUkxfR0NNX1NFVF9JVkxFTiwgb2F1dGhf dG9rZW4tJmd0O25vbmNlX2xlbmd0aCwgTlVMTCkpPC9zcGFuPjwvdGQ+PHRkIGNsYXNzPSJsaW5l bm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8i IHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48L3RkPjx0ZD4gPC90ZD48dGQg Y2xhc3M9InJibG9jayI+PHNwYW4gY2xhc3M9Imluc2VydCI+ICAgICAgICAgICAgICAgICAgICAg ICAgcmV0dXJuIC0xOzwvc3Bhbj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+ PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90 ZD48dGQgY2xhc3M9ImxibG9jayI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPjxz cGFuIGNsYXNzPSJpbnNlcnQiPjwvc3Bhbj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249 InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRv cCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxv Y2siPjxzcGFuIGNsYXNzPSJpbnNlcnQiPiAgICAgICAgICAgICAgICAvKiBJbml0aWFsaXplIGtl eSBhbmQgSVYgKi88L3NwYW4+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwv dGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+ PHRkIGNsYXNzPSJsYmxvY2siPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48c3Bh biBjbGFzcz0iaW5zZXJ0Ij4gICAgICAgICAgICAgICAgaWYoMSAhPSBFVlBfRW5jcnlwdEluaXRf ZXgoJmFtcDtjdHgsIE5VTEwsIE5VTEwsIGtleSwgb2F1dGhfdG9rZW4tJmd0O25vbmNlKSk8L3Nw YW4+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAg IDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxv Y2siPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48c3BhbiBjbGFzcz0iaW5zZXJ0 Ij4gICAgICAgICAgICAgICAgICAgICAgICByZXR1cm4gLTE7PC9zcGFuPjwvdGQ+PHRkIGNsYXNz PSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJs aW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48L3RkPjx0ZD4gPC90 ZD48dGQgY2xhc3M9InJibG9jayI+PHNwYW4gY2xhc3M9Imluc2VydCI+PC9zcGFuPjwvdGQ+PHRk IGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNs YXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48L3RkPjx0 ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+PHNwYW4gY2xhc3M9Imluc2VydCI+ICAgICAgICAg ICAgICAgIGludCBvdXRsPTA7PC9zcGFuPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0i dG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9w Ij48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9j ayI+PHNwYW4gY2xhc3M9Imluc2VydCI+ICAgICAgICAgICAgICAgIHNpemVfdCBzbl9sZW4gPSBz dHJsZW4oKGNvbnN0IGNoYXIqKXNlcnZlcl9uYW1lKTs8L3NwYW4+PC90ZD48dGQgY2xhc3M9Imxp bmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVu byIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPjwvdGQ+PHRkPiA8L3RkPjx0 ZCBjbGFzcz0icmJsb2NrIj48c3BhbiBjbGFzcz0iaW5zZXJ0Ij48L3NwYW4+PC90ZD48dGQgY2xh c3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9 ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPjwvdGQ+PHRkPiA8 L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48c3BhbiBjbGFzcz0iaW5zZXJ0Ij4gICAgICAgICAgICAg ICAgLyogUHJvdmlkZSBhbnkgQUFEIGRhdGEuIFRoaXMgY2FuIGJlIGNhbGxlZCB6ZXJvIG9yIG1v cmUgdGltZXMgYXM8L3NwYW4+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwv dGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+ PHRkIGNsYXNzPSJsYmxvY2siPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48c3Bh biBjbGFzcz0iaW5zZXJ0Ij4gICAgICAgICAgICAgICAgICogcmVxdWlyZWQ8L3NwYW4+PC90ZD48 dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQg Y2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPjwvdGQ+ PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48c3BhbiBjbGFzcz0iaW5zZXJ0Ij4gICAgICAg ICAgICAgICAgICovPC9zcGFuPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48 L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3Rk Pjx0ZCBjbGFzcz0ibGJsb2NrIj48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+PHNw YW4gY2xhc3M9Imluc2VydCI+ICAgICAgICAgICAgICAgIGlmKDEgIT0gbXlfRVZQX0VuY3J5cHRV cGRhdGUoJmFtcDtjdHgsIE5VTEwsICZhbXA7b3V0bCwgc2VydmVyX25hbWUsIChpbnQpc25fbGVu KSk8L3NwYW4+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4N CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNz PSJsYmxvY2siPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48c3BhbiBjbGFzcz0i aW5zZXJ0Ij4gICAgICAgICAgICAgICAgICAgICAgICByZXR1cm4gLTE7PC9zcGFuPjwvdGQ+PHRk IGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNs YXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48L3RkPjx0 ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+PHNwYW4gY2xhc3M9Imluc2VydCI+PC9zcGFuPjwv dGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+ PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48 L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+PHNwYW4gY2xhc3M9Imluc2VydCI+ICAg ICAgICAgICAgICAgIG91dGw9MDs8L3NwYW4+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWdu PSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0 b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJs b2NrIj48c3BhbiBjbGFzcz0iaW5zZXJ0Ij4gICAgICAgICAgICAgICAgYmNvcHkob3JpZ19maWVs ZCxlbmNvZGVkX2J1ZmZlcixvYXV0aF90b2tlbi0mZ3Q7bm9uY2VfbGVuZ3RoICsgMik7PC9zcGFu PjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8 dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2Nr Ij48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+PHNwYW4gY2xhc3M9Imluc2VydCI+ ICAgICAgICAgICAgICAgIGVuY29kZWRfYnVmZmVyICs9IG9hdXRoX3Rva2VuLSZndDtub25jZV9s ZW5ndGggKyAyOzwvc3Bhbj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90 ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48 dGQgY2xhc3M9ImxibG9jayI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPjxzcGFu IGNsYXNzPSJpbnNlcnQiPiAgICAgICAgICAgICAgICB1aW50OF90ICpzdGFydF9maWVsZCA9IG9y aWdfZmllbGQgKyBvYXV0aF90b2tlbi0mZ3Q7bm9uY2VfbGVuZ3RoICsgMjs8L3NwYW4+PC90ZD48 dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQg Y2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPjwvdGQ+ PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48c3BhbiBjbGFzcz0iaW5zZXJ0Ij4gICAgICAg ICAgICAgICAgbGVuIC09IG9hdXRoX3Rva2VuLSZndDtub25jZV9sZW5ndGggKyAyOzwvc3Bhbj48 L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRy Pjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+ PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPjxzcGFuIGNsYXNzPSJpbnNlcnQiPjwv c3Bhbj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAg ICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9Imxi bG9jayI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPjxzcGFuIGNsYXNzPSJpbnNl cnQiPiAgICAgICAgICAgICAgICBpZigxICE9IG15X0VWUF9FbmNyeXB0VXBkYXRlKCZhbXA7Y3R4 LCBlbmNvZGVkX2J1ZmZlciwgJmFtcDtvdXRsLCBzdGFydF9maWVsZCwgKGludClsZW4pKTwvc3Bh bj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAg PHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9j ayI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPjxzcGFuIGNsYXNzPSJpbnNlcnQi PiAgICAgICAgICAgICAgICAgICAgICAgIHJldHVybiAtMTs8L3NwYW4+PC90ZD48dGQgY2xhc3M9 ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9Imxp bmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPjwvdGQ+PHRkPiA8L3Rk Pjx0ZCBjbGFzcz0icmJsb2NrIj48c3BhbiBjbGFzcz0iaW5zZXJ0Ij48L3NwYW4+PC90ZD48dGQg Y2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xh c3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPjwvdGQ+PHRk PiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48c3BhbiBjbGFzcz0iaW5zZXJ0Ij4gICAgICAgICAg ICAgICAgaW50IHRtcF9vdXRsID0gMDs8L3NwYW4+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFs aWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWdu PSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0i cmJsb2NrIj48c3BhbiBjbGFzcz0iaW5zZXJ0Ij4gICAgICAgICAgICAgICAgRVZQX0VuY3J5cHRG aW5hbF9leCgmYW1wO2N0eCwgZW5jb2RlZF9idWZmZXIgKyBvdXRsLCAmYW1wO3RtcF9vdXRsKTs8 L3NwYW4+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAg ICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJs YmxvY2siPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48c3BhbiBjbGFzcz0iaW5z ZXJ0Ij4gICAgICAgICAgICAgICAgb3V0bCArPSB0bXBfb3V0bDs8L3NwYW4+PC90ZD48dGQgY2xh c3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9 ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPjwvdGQ+PHRkPiA8 L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48c3BhbiBjbGFzcz0iaW5zZXJ0Ij48L3NwYW4+PC90ZD48 dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQg Y2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPjwvdGQ+ PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48c3BhbiBjbGFzcz0iaW5zZXJ0Ij4gICAgICAg ICAgICAgICAgRVZQX0NJUEhFUl9DVFhfY3RybCgmYW1wO2N0eCwgRVZQX0NUUkxfR0NNX0dFVF9U QUcsIE9BVVRIX0dDTV9UQUdfU0laRSwgZW5jb2RlZF9idWZmZXIgKyBvdXRsKTs8L3NwYW4+PC90 ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48 dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPjwv dGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48c3BhbiBjbGFzcz0iaW5zZXJ0Ij4gICAg ICAgICAgICAgICAgb3V0bCArPSBPQVVUSF9HQ01fVEFHX1NJWkU7PC9zcGFuPjwvdGQ+PHRkIGNs YXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNz PSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48L3RkPjx0ZD4g PC90ZD48dGQgY2xhc3M9InJibG9jayI+PHNwYW4gY2xhc3M9Imluc2VydCI+PC9zcGFuPjwvdGQ+ PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRk IGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48L3Rk Pjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+PHNwYW4gY2xhc3M9Imluc2VydCI+ICAgICAg ICAgICAgICAgIHJldCA9IChpbnQpKDIgKyBvYXV0aF90b2tlbi0mZ3Q7bm9uY2VfbGVuZ3RoICsg b3V0bCk7PC9zcGFuPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwv dHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBj bGFzcz0ibGJsb2NrIj48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+PHNwYW4gY2xh c3M9Imluc2VydCI+PC9zcGFuPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48 L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3Rk Pjx0ZCBjbGFzcz0ibGJsb2NrIj48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+PHNw YW4gY2xhc3M9Imluc2VydCI+ICAgICAgICAgICAgICAgIEVWUF9DSVBIRVJfQ1RYX2NsZWFudXAo JmFtcDtjdHgpOzwvc3Bhbj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90 ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48 dGQgY2xhc3M9ImxibG9jayI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPjxzcGFu IGNsYXNzPSJpbnNlcnQiPiAgICAgICAgfTwvc3Bhbj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2 YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxp Z249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNz PSJyYmxvY2siPjxzcGFuIGNsYXNzPSJpbnNlcnQiPjwvc3Bhbj48L3RkPjx0ZCBjbGFzcz0ibGlu ZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5v IiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+PC90ZD48dGQ+IDwvdGQ+PHRk IGNsYXNzPSJyYmxvY2siPjxzcGFuIGNsYXNzPSJpbnNlcnQiPiAgICAgICAgcmV0dXJuIHJldDs8 L3NwYW4+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAg ICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJs YmxvY2siPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48c3BhbiBjbGFzcz0iaW5z ZXJ0Ij59PC9zcGFuPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwv dHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBj bGFzcz0ibGJsb2NrIj48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+PHNwYW4gY2xh c3M9Imluc2VydCI+PC9zcGFuPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48 L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3Rk Pjx0ZCBjbGFzcz0ibGJsb2NrIj48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+PHNw YW4gY2xhc3M9Imluc2VydCI+c3RhdGljIGludCBkZWNvZGVfb2F1dGhfdG9rZW5fZ2NtKGNvbnN0 IHVpbnQ4X3QgKnNlcnZlcl9uYW1lLCBjb25zdCB1aW50OF90ICprZXksPC9zcGFuPjwvdGQ+PHRk IGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNs YXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48L3RkPjx0 ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+PHNwYW4gY2xhc3M9Imluc2VydCI+ICAgICAgICAg ICAgICAgIG9hdXRoX3Rva2VuX3QgKm9hdXRoX3Rva2VuLDwvc3Bhbj48L3RkPjx0ZCBjbGFzcz0i bGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGlu ZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+PC90ZD48dGQ+IDwvdGQ+ PHRkIGNsYXNzPSJyYmxvY2siPjxzcGFuIGNsYXNzPSJpbnNlcnQiPiAgICAgICAgICAgICAgICBj b25zdCB1aW50OF90ICplbmNvZGVkX2J1ZmZlciwgc2l6ZV90IGVuY29kZWRfYnVmZmVyX3NpemUp PC9zcGFuPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQog ICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0i bGJsb2NrIj48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+PHNwYW4gY2xhc3M9Imlu c2VydCI+ezwvc3Bhbj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48 L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQg Y2xhc3M9ImxibG9jayI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPjxzcGFuIGNs YXNzPSJpbnNlcnQiPiAgICAgICAgaW50IHJldCA9IC0xOzwvc3Bhbj48L3RkPjx0ZCBjbGFzcz0i bGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGlu ZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+PC90ZD48dGQ+IDwvdGQ+ PHRkIGNsYXNzPSJyYmxvY2siPjxzcGFuIGNsYXNzPSJpbnNlcnQiPjwvc3Bhbj48L3RkPjx0ZCBj bGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFz cz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+PC90ZD48dGQ+ IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPjxzcGFuIGNsYXNzPSJpbnNlcnQiPiAgICAgICAgaWYo c2VydmVyX25hbWUgJmFtcDsmYW1wOyBrZXkgJmFtcDsmYW1wOyBvYXV0aF90b2tlbiAmYW1wOyZh bXA7IGVuY29kZWRfYnVmZmVyKSB7PC9zcGFuPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGln bj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0i dG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJi bG9jayI+PHNwYW4gY2xhc3M9Imluc2VydCI+PC9zcGFuPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8i IHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZh bGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48L3RkPjx0ZD4gPC90ZD48dGQgY2xh c3M9InJibG9jayI+PHNwYW4gY2xhc3M9Imluc2VydCI+ICAgICAgICAgICAgICAgIG9hdXRoX3Rv a2VuLSZndDtub25jZV9sZW5ndGggPSBudG9ocygqKChjb25zdCB1aW50MTZfdCopZW5jb2RlZF9i dWZmZXIpKTs8L3NwYW4+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+ PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRk IGNsYXNzPSJsYmxvY2siPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48c3BhbiBj bGFzcz0iaW5zZXJ0Ij4gICAgICAgICAgICAgICAgYmNvcHkoZW5jb2RlZF9idWZmZXIrMixvYXV0 aF90b2tlbi0mZ3Q7bm9uY2Usb2F1dGhfdG9rZW4tJmd0O25vbmNlX2xlbmd0aCk7PC9zcGFuPjwv dGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+ PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48 L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+PHNwYW4gY2xhc3M9Imluc2VydCI+PC9z cGFuPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAg ICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJs b2NrIj48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+PHNwYW4gY2xhc3M9Imluc2Vy dCI+ICAgICAgICAgICAgICAgIGNvbnN0IHVpbnQ4X3QqIGVuY3J5cHRlZF9maWVsZCA9IChjb25z dCB1aW50OF90KikoZW5jb2RlZF9idWZmZXIgKyBvYXV0aF90b2tlbi0mZ3Q7bm9uY2VfbGVuZ3Ro ICsgMik7PC9zcGFuPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwv dHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBj bGFzcz0ibGJsb2NrIj48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+PHNwYW4gY2xh c3M9Imluc2VydCI+DQogICAgICAgICAgICAgICAgc2l6ZV90IGVuY3J5cHRlZF9maWVsZF9zaXpl ID0gDQooc2l6ZV90KShlbmNvZGVkX2J1ZmZlcl9zaXplIC0gb2F1dGhfdG9rZW4tJmd0O25vbmNl X2xlbmd0aCAtIDIgLSANCk9BVVRIX0dDTV9UQUdfU0laRSk7PC9zcGFuPjwvdGQ+PHRkIGNsYXNz PSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJs aW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48L3RkPjx0ZD4gPC90 ZD48dGQgY2xhc3M9InJibG9jayI+PHNwYW4gY2xhc3M9Imluc2VydCI+PC9zcGFuPjwvdGQ+PHRk IGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNs YXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48L3RkPjx0 ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+PHNwYW4gY2xhc3M9Imluc2VydCI+ICAgICAgICAg ICAgICAgIHVpbnQ4X3QgdGFnW09BVVRIX0dDTV9UQUdfU0laRV07PC9zcGFuPjwvdGQ+PHRkIGNs YXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNz PSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48L3RkPjx0ZD4g PC90ZD48dGQgY2xhc3M9InJibG9jayI+PHNwYW4gY2xhc3M9Imluc2VydCI+ICAgICAgICAgICAg ICAgIGJjb3B5KGVuY3J5cHRlZF9maWVsZCArIGVuY3J5cHRlZF9maWVsZF9zaXplLCB0YWcgLHNp emVvZih0YWcpKTs8L3NwYW4+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwv dGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+ PHRkIGNsYXNzPSJsYmxvY2siPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48c3Bh biBjbGFzcz0iaW5zZXJ0Ij48L3NwYW4+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0 b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3Ai PjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2Nr Ij48c3BhbiBjbGFzcz0iaW5zZXJ0Ij4gICAgICAgICAgICAgICAgdWludDhfdCBkZWNvZGVkX2Zp ZWxkW01BWF9FTkNPREVEX09BVVRIX1RPS0VOX1NJWkVdOzwvc3Bhbj48L3RkPjx0ZCBjbGFzcz0i bGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGlu ZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+PC90ZD48dGQ+IDwvdGQ+ PHRkIGNsYXNzPSJyYmxvY2siPjxzcGFuIGNsYXNzPSJpbnNlcnQiPjwvc3Bhbj48L3RkPjx0ZCBj bGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFz cz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+PC90ZD48dGQ+ IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPjxzcGFuIGNsYXNzPSJpbnNlcnQiPiAgICAgICAgICAg ICAgICBjb25zdCBFVlBfQ0lQSEVSICogY2lwaGVyID0gRVZQX2Flc18yNTZfZ2NtKCk7PC9zcGFu PjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8 dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2Nr Ij48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+PHNwYW4gY2xhc3M9Imluc2VydCI+ ICAgICAgICAgICAgICAgIGlmKCFjaXBoZXIpIHs8L3NwYW4+PC90ZD48dGQgY2xhc3M9ImxpbmVu byIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIg dmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPjwvdGQ+PHRkPiA8L3RkPjx0ZCBj bGFzcz0icmJsb2NrIj48c3BhbiBjbGFzcz0iaW5zZXJ0Ij4gICAgICAgICAgICAgICAgICAgICAg ICByZXR1cm4gLTE7PC9zcGFuPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48 L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3Rk Pjx0ZCBjbGFzcz0ibGJsb2NrIj48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+PHNw YW4gY2xhc3M9Imluc2VydCI+ICAgICAgICAgICAgICAgIH08L3NwYW4+PC90ZD48dGQgY2xhc3M9 ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9Imxp bmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPjwvdGQ+PHRkPiA8L3Rk Pjx0ZCBjbGFzcz0icmJsb2NrIj48c3BhbiBjbGFzcz0iaW5zZXJ0Ij48L3NwYW4+PC90ZD48dGQg Y2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xh c3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPjwvdGQ+PHRk PiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48c3BhbiBjbGFzcz0iaW5zZXJ0Ij4gICAgICAgICAg ICAgICAgRVZQX0NJUEhFUl9DVFggY3R4Ozwvc3Bhbj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2 YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxp Z249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNz PSJyYmxvY2siPjxzcGFuIGNsYXNzPSJpbnNlcnQiPiAgICAgICAgICAgICAgICBFVlBfQ0lQSEVS X0NUWF9pbml0KCZhbXA7Y3R4KTs8L3NwYW4+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWdu PSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0 b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJs b2NrIj48c3BhbiBjbGFzcz0iaW5zZXJ0Ij4gICAgICAgICAgICAgICAgLyogSW5pdGlhbGl6ZSB0 aGUgZGVjcnlwdGlvbiBvcGVyYXRpb24uICovPC9zcGFuPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8i IHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZh bGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48L3RkPjx0ZD4gPC90ZD48dGQgY2xh c3M9InJibG9jayI+PHNwYW4gY2xhc3M9Imluc2VydCI+ICAgICAgICAgICAgICAgIGlmKDEgIT0g RVZQX0RlY3J5cHRJbml0X2V4KCZhbXA7Y3R4LCBjaXBoZXIsIE5VTEwsIE5VTEwsIE5VTEwpKSB7 PC9zcGFuPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQog ICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0i bGJsb2NrIj48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+PHNwYW4gY2xhc3M9Imlu c2VydCI+ICAgICAgICAgICAgICAgICAgICAgICAgcmV0dXJuIC0xOzwvc3Bhbj48L3RkPjx0ZCBj bGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFz cz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+PC90ZD48dGQ+ IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPjxzcGFuIGNsYXNzPSJpbnNlcnQiPiAgICAgICAgICAg ICAgICB9PC9zcGFuPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwv dHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBj bGFzcz0ibGJsb2NrIj48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+PHNwYW4gY2xh c3M9Imluc2VydCI+PC9zcGFuPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48 L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3Rk Pjx0ZCBjbGFzcz0ibGJsb2NrIj48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+PHNw YW4gY2xhc3M9Imluc2VydCI+ICAgICAgICAgICAgICAgIC8qIFNldCBJViBsZW5ndGggaWYgZGVm YXVsdCAxMiBieXRlcyAoOTYgYml0cykgaXMgbm90IGFwcHJvcHJpYXRlICovPC9zcGFuPjwvdGQ+ PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRk IGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48L3Rk Pjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+PHNwYW4gY2xhc3M9Imluc2VydCI+ICAgICAg ICAgICAgICAgIGlmKDEgIT0gRVZQX0NJUEhFUl9DVFhfY3RybCgmYW1wO2N0eCwgRVZQX0NUUkxf R0NNX1NFVF9JVkxFTiwgb2F1dGhfdG9rZW4tJmd0O25vbmNlX2xlbmd0aCwgTlVMTCkpIHs8L3Nw YW4+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAg IDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxv Y2siPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48c3BhbiBjbGFzcz0iaW5zZXJ0 Ij4gICAgICAgICAgICAgICAgICAgICAgICByZXR1cm4gLTE7PC9zcGFuPjwvdGQ+PHRkIGNsYXNz PSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJs aW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48L3RkPjx0ZD4gPC90 ZD48dGQgY2xhc3M9InJibG9jayI+PHNwYW4gY2xhc3M9Imluc2VydCI+ICAgICAgICAgICAgICAg IH08L3NwYW4+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4N CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNz PSJsYmxvY2siPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48c3BhbiBjbGFzcz0i aW5zZXJ0Ij48L3NwYW4+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+ PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRk IGNsYXNzPSJsYmxvY2siPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48c3BhbiBj bGFzcz0iaW5zZXJ0Ij4gICAgICAgICAgICAgICAgLyogSW5pdGlhbGl6ZSBrZXkgYW5kIElWICov PC9zcGFuPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQog ICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0i bGJsb2NrIj48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+PHNwYW4gY2xhc3M9Imlu c2VydCI+ICAgICAgICAgICAgICAgIGlmKDEgIT0gRVZQX0RlY3J5cHRJbml0X2V4KCZhbXA7Y3R4 LCBOVUxMLCBOVUxMLCAoY29uc3QgdW5zaWduZWQgY2hhciAqKWtleSwgb2F1dGhfdG9rZW4tJmd0 O25vbmNlKSkgezwvc3Bhbj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90 ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48 dGQgY2xhc3M9ImxibG9jayI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPjxzcGFu IGNsYXNzPSJpbnNlcnQiPiAgICAgICAgICAgICAgICAgICAgICAgIHJldHVybiAtMTs8L3NwYW4+ PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0 cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2si PjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48c3BhbiBjbGFzcz0iaW5zZXJ0Ij4g ICAgICAgICAgICAgICAgfTwvc3Bhbj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRv cCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+ PC90ZD48dGQgY2xhc3M9ImxibG9jayI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2si PjxzcGFuIGNsYXNzPSJpbnNlcnQiPjwvc3Bhbj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxp Z249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249 InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJy YmxvY2siPjxzcGFuIGNsYXNzPSJpbnNlcnQiPiAgICAgICAgICAgICAgICAvKiBTZXQgZXhwZWN0 ZWQgdGFnIHZhbHVlLiBBIHJlc3RyaWN0aW9uIGluIE9wZW5TU0wgMS4wLjFjIGFuZCBlYXJsaWVy PC9zcGFuPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQog ICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0i bGJsb2NrIj48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+PHNwYW4gY2xhc3M9Imlu c2VydCI+ICAgICAgICAgICAgICAgICAgKyAgICAgICAgICogcmVxdWlyZWQgdGhlIHRhZyBiZWZv cmUgYW55IEFBRCBvciBjaXBoZXJ0ZXh0ICovPC9zcGFuPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8i IHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZh bGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48L3RkPjx0ZD4gPC90ZD48dGQgY2xh c3M9InJibG9jayI+PHNwYW4gY2xhc3M9Imluc2VydCI+ICAgICAgICAgICAgICAgIEVWUF9DSVBI RVJfQ1RYX2N0cmwgKCZhbXA7Y3R4LCBFVlBfQ1RSTF9HQ01fU0VUX1RBRywgT0FVVEhfR0NNX1RB R19TSVpFLCB0YWcpOzwvc3Bhbj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+ PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90 ZD48dGQgY2xhc3M9ImxibG9jayI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPjxz cGFuIGNsYXNzPSJpbnNlcnQiPjwvc3Bhbj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249 InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRv cCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxv Y2siPjxzcGFuIGNsYXNzPSJpbnNlcnQiPiAgICAgICAgICAgICAgICBpbnQgb3V0bD0wOzwvc3Bh bj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAg PHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9j ayI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPjxzcGFuIGNsYXNzPSJpbnNlcnQi PiAgICAgICAgICAgICAgICBzaXplX3Qgc25fbGVuID0gc3RybGVuKChjb25zdCBjaGFyKilzZXJ2 ZXJfbmFtZSk7PC9zcGFuPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3Rk PjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0 ZCBjbGFzcz0ibGJsb2NrIj48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+PHNwYW4g Y2xhc3M9Imluc2VydCI+PC9zcGFuPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9w Ij48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48 L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+ PHNwYW4gY2xhc3M9Imluc2VydCI+ICAgICAgICAgICAgICAgIC8qIFByb3ZpZGUgYW55IEFBRCBk YXRhLiBUaGlzIGNhbiBiZSBjYWxsZWQgemVybyBvciBtb3JlIHRpbWVzIGFzPC9zcGFuPjwvdGQ+ PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRk IGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48L3Rk Pjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+PHNwYW4gY2xhc3M9Imluc2VydCI+ICAgICAg ICAgICAgICAgICAqIHJlcXVpcmVkPC9zcGFuPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGln bj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0i dG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJi bG9jayI+PHNwYW4gY2xhc3M9Imluc2VydCI+ICAgICAgICAgICAgICAgICAqLzwvc3Bhbj48L3Rk Pjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0 ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+PC90 ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPjxzcGFuIGNsYXNzPSJpbnNlcnQiPiAgICAg ICAgICAgICAgICBpZigxICE9IG15X0VWUF9EZWNyeXB0VXBkYXRlKCZhbXA7Y3R4LCBOVUxMLCAm YW1wO291dGwsIHNlcnZlcl9uYW1lLCAoaW50KXNuX2xlbikpIHs8L3NwYW4+PC90ZD48dGQgY2xh c3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9 ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPjwvdGQ+PHRkPiA8 L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48c3BhbiBjbGFzcz0iaW5zZXJ0Ij4gICAgICAgICAgICAg ICAgICAgICAgICByZXR1cm4gLTE7PC9zcGFuPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGln bj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0i dG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJi bG9jayI+PHNwYW4gY2xhc3M9Imluc2VydCI+ICAgICAgICAgICAgICAgIH08L3NwYW4+PC90ZD48 dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQg Y2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPjwvdGQ+ PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48c3BhbiBjbGFzcz0iaW5zZXJ0Ij4gICAgICAg ICAgICAgICAgaWYoMSAhPSBteV9FVlBfRGVjcnlwdFVwZGF0ZSgmYW1wO2N0eCwgZGVjb2RlZF9m aWVsZCwgJmFtcDtvdXRsLCBlbmNyeXB0ZWRfZmllbGQsIChpbnQpZW5jcnlwdGVkX2ZpZWxkX3Np emUpKSB7PC9zcGFuPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwv dHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBj bGFzcz0ibGJsb2NrIj48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+PHNwYW4gY2xh c3M9Imluc2VydCI+ICAgICAgICAgICAgICAgICAgICAgICAgcmV0dXJuIC0xOzwvc3Bhbj48L3Rk Pjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0 ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+PC90 ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPjxzcGFuIGNsYXNzPSJpbnNlcnQiPiAgICAg ICAgICAgICAgICB9PC9zcGFuPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48 L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3Rk Pjx0ZCBjbGFzcz0ibGJsb2NrIj48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+PHNw YW4gY2xhc3M9Imluc2VydCI+PC9zcGFuPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0i dG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9w Ij48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9j ayI+PHNwYW4gY2xhc3M9Imluc2VydCI+ICAgICAgICAgICAgICAgIGludCB0bXBfb3V0bCA9IDA7 PC9zcGFuPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQog ICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0i bGJsb2NrIj48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+PHNwYW4gY2xhc3M9Imlu c2VydCI+ICAgICAgICAgICAgICAgIGlmKEVWUF9EZWNyeXB0RmluYWxfZXgoJmFtcDtjdHgsIGRl Y29kZWRfZmllbGQgKyBvdXRsLCAmYW1wO3RtcF9vdXRsKSZsdDsxKSB7PC9zcGFuPjwvdGQ+PHRk IGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNs YXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48L3RkPjx0 ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+PHNwYW4gY2xhc3M9Imluc2VydCI+ICAgICAgICAg ICAgICAgICAgICAgICAgRVZQX0NJUEhFUl9DVFhfY2xlYW51cCgmYW1wO2N0eCk7PC9zcGFuPjwv dGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+ PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48 L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+PHNwYW4gY2xhc3M9Imluc2VydCI+ICAg ICAgICAgICAgICAgICAgICAgICAgcmV0dXJuIC0xOzwvc3Bhbj48L3RkPjx0ZCBjbGFzcz0ibGlu ZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5v IiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+PC90ZD48dGQ+IDwvdGQ+PHRk IGNsYXNzPSJyYmxvY2siPjxzcGFuIGNsYXNzPSJpbnNlcnQiPiAgICAgICAgICAgICAgICB9PC9z cGFuPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAg ICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJs b2NrIj48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+PHNwYW4gY2xhc3M9Imluc2Vy dCI+ICAgICAgICAgICAgICAgIG91dGwgKz0gdG1wX291dGw7PC9zcGFuPjwvdGQ+PHRkIGNsYXNz PSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJs aW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48L3RkPjx0ZD4gPC90 ZD48dGQgY2xhc3M9InJibG9jayI+PHNwYW4gY2xhc3M9Imluc2VydCI+PC9zcGFuPjwvdGQ+PHRk IGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNs YXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48L3RkPjx0 ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+PHNwYW4gY2xhc3M9Imluc2VydCI+ICAgICAgICAg ICAgICAgIEVWUF9DSVBIRVJfQ1RYX2NsZWFudXAoJmFtcDtjdHgpOzwvc3Bhbj48L3RkPjx0ZCBj bGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFz cz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+PC90ZD48dGQ+ IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPjxzcGFuIGNsYXNzPSJpbnNlcnQiPjwvc3Bhbj48L3Rk Pjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0 ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+PC90 ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPjxzcGFuIGNsYXNzPSJpbnNlcnQiPiAgICAg ICAgICAgICAgICBzaXplX3QgbGVuID0gMDs8L3NwYW4+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIg dmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFs aWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFz cz0icmJsb2NrIj48c3BhbiBjbGFzcz0iaW5zZXJ0Ij48L3NwYW4+PC90ZD48dGQgY2xhc3M9Imxp bmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVu byIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPjwvdGQ+PHRkPiA8L3RkPjx0 ZCBjbGFzcz0icmJsb2NrIj48c3BhbiBjbGFzcz0iaW5zZXJ0Ij4gICAgICAgICAgICAgICAgb2F1 dGhfdG9rZW4tJmd0O21hY19rZXlfbGVuZ3RoID0gbnRvaHMoKigodWludDE2X3QqKShkZWNvZGVk X2ZpZWxkK2xlbikpKTs8L3NwYW4+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3Ai PjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwv dGQ+PHRkIGNsYXNzPSJsYmxvY2siPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48 c3BhbiBjbGFzcz0iaW5zZXJ0Ij4gICAgICAgICAgICAgICAgbGVuICs9IDI7PC9zcGFuPjwvdGQ+ PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRk IGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48L3Rk Pjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+PHNwYW4gY2xhc3M9Imluc2VydCI+PC9zcGFu PjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8 dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2Nr Ij48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+PHNwYW4gY2xhc3M9Imluc2VydCI+ ICAgICAgICAgICAgICAgIGJjb3B5KGRlY29kZWRfZmllbGQrbGVuLG9hdXRoX3Rva2VuLSZndDtt YWNfa2V5LG9hdXRoX3Rva2VuLSZndDttYWNfa2V5X2xlbmd0aCk7PC9zcGFuPjwvdGQ+PHRkIGNs YXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNz PSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48L3RkPjx0ZD4g PC90ZD48dGQgY2xhc3M9InJibG9jayI+PHNwYW4gY2xhc3M9Imluc2VydCI+ICAgICAgICAgICAg ICAgIGxlbiArPSBvYXV0aF90b2tlbi0mZ3Q7bWFjX2tleV9sZW5ndGg7PC9zcGFuPjwvdGQ+PHRk IGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNs YXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48L3RkPjx0 ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+PHNwYW4gY2xhc3M9Imluc2VydCI+PC9zcGFuPjwv dGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+ PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48 L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+PHNwYW4gY2xhc3M9Imluc2VydCI+ICAg ICAgICAgICAgICAgIG9hdXRoX3Rva2VuLSZndDt0aW1lc3RhbXAgPSBudG9obGwoKigodWludDY0 X3QqKShkZWNvZGVkX2ZpZWxkK2xlbikpKTs8L3NwYW4+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIg dmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFs aWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFz cz0icmJsb2NrIj48c3BhbiBjbGFzcz0iaW5zZXJ0Ij4gICAgICAgICAgICAgICAgbGVuICs9IDg7 PC9zcGFuPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQog ICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0i bGJsb2NrIj48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+PHNwYW4gY2xhc3M9Imlu c2VydCI+PC9zcGFuPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwv dHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBj bGFzcz0ibGJsb2NrIj48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+PHNwYW4gY2xh c3M9Imluc2VydCI+ICAgICAgICAgICAgICAgIG9hdXRoX3Rva2VuLSZndDtsaWZldGltZSA9IG50 b2hsKCooKHVpbnQzMl90KikoZGVjb2RlZF9maWVsZCtsZW4pKSk7PC9zcGFuPjwvdGQ+PHRkIGNs YXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNz PSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48L3RkPjx0ZD4g PC90ZD48dGQgY2xhc3M9InJibG9jayI+PHNwYW4gY2xhc3M9Imluc2VydCI+ICAgICAgICAgICAg ICAgIGxlbiArPSA0Ozwvc3Bhbj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+ PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90 ZD48dGQgY2xhc3M9ImxibG9jayI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPjxz cGFuIGNsYXNzPSJpbnNlcnQiPjwvc3Bhbj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249 InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRv cCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxv Y2siPjxzcGFuIGNsYXNzPSJpbnNlcnQiPiAgICAgICAgICAgICAgICByZXQgPSBsZW47PC9zcGFu PjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8 dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2Nr Ij48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+PHNwYW4gY2xhc3M9Imluc2VydCI+ ICAgICAgICB9PC9zcGFuPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3Rk PjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0 ZCBjbGFzcz0ibGJsb2NrIj48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+PHNwYW4g Y2xhc3M9Imluc2VydCI+ICAgICAgICByZXR1cm4gcmV0Ozwvc3Bhbj48L3RkPjx0ZCBjbGFzcz0i bGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGlu ZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+PC90ZD48dGQ+IDwvdGQ+ PHRkIGNsYXNzPSJyYmxvY2siPjxzcGFuIGNsYXNzPSJpbnNlcnQiPn08L3NwYW4+PC90ZD48dGQg Y2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xh c3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPjwvdGQ+PHRk PiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48c3BhbiBjbGFzcz0iaW5zZXJ0Ij48L3NwYW4+PC90 ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48 dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPjwv dGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48c3BhbiBjbGFzcz0iaW5zZXJ0Ij5pbnQg bWFpbigpIHs8L3NwYW4+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+ PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRk IGNsYXNzPSJsYmxvY2siPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48c3BhbiBj bGFzcz0iaW5zZXJ0Ij48L3NwYW4+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3Ai PjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwv dGQ+PHRkIGNsYXNzPSJsYmxvY2siPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48 c3BhbiBjbGFzcz0iaW5zZXJ0Ij4gICAgICAgIFNTTF9sb2FkX2Vycm9yX3N0cmluZ3MoKTs8L3Nw YW4+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAg IDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxv Y2siPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48c3BhbiBjbGFzcz0iaW5zZXJ0 Ij4gICAgICAgIE9wZW5TU0xfYWRkX3NzbF9hbGdvcml0aG1zKCk7PC9zcGFuPjwvdGQ+PHRkIGNs YXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNz PSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48L3RkPjx0ZD4g PC90ZD48dGQgY2xhc3M9InJibG9jayI+PHNwYW4gY2xhc3M9Imluc2VydCI+PC9zcGFuPjwvdGQ+ PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRk IGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48L3Rk Pjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+PHNwYW4gY2xhc3M9Imluc2VydCI+ICAgICAg ICBvYXV0aF90b2tlbl90IG9hdXRoX3Rva2VuID0geyBPQVVUSF9HQ01fTk9OQ0VfU0laRSwgImg0 ajNrMmwybjRiNSIsPC9zcGFuPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48 L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3Rk Pjx0ZCBjbGFzcz0ibGJsb2NrIj48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+PHNw YW4gY2xhc3M9Imluc2VydCI+ICAgICAgICAgICAgICAgIDIwLCAiWmtzanB3ZW9peFhtdm42NzUz NG0iLDwvc3Bhbj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3Ry Pg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xh c3M9ImxibG9jayI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPjxzcGFuIGNsYXNz PSJpbnNlcnQiPiAgICAgICAgICAgICAgICAodWludDY0X3QpKDkyNDcwMzAwNzA0NzY4TEwpLCAz NjAwPC9zcGFuPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+ DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFz cz0ibGJsb2NrIj48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+PHNwYW4gY2xhc3M9 Imluc2VydCI+ICAgICAgICB9Ozwvc3Bhbj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249 InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRv cCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxv Y2siPjxzcGFuIGNsYXNzPSJpbnNlcnQiPjwvc3Bhbj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2 YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxp Z249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNz PSJyYmxvY2siPjxzcGFuIGNsYXNzPSJpbnNlcnQiPiAgICAgICAgY29uc3QgY2hhciBzZXJ2ZXJf bmFtZVszM10gPSAiYmxhY2tkb3cuY2FybGVvbi5nb3YiOzwvc3Bhbj48L3RkPjx0ZCBjbGFzcz0i bGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGlu ZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+PC90ZD48dGQ+IDwvdGQ+ PHRkIGNsYXNzPSJyYmxvY2siPjxzcGFuIGNsYXNzPSJpbnNlcnQiPjwvc3Bhbj48L3RkPjx0ZCBj bGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFz cz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+PC90ZD48dGQ+ IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPjxzcGFuIGNsYXNzPSJpbnNlcnQiPiAgICAgICAgY29u c3QgY2hhciBrZXlbMzNdID0gIkhHa2ozMktKR2l1eTA5OHNkZmFxYk5qT2lhejcxOTIzIjs8L3Nw YW4+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAg IDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxv Y2siPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48c3BhbiBjbGFzcz0iaW5zZXJ0 Ij48L3NwYW4+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4N CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNz PSJsYmxvY2siPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48c3BhbiBjbGFzcz0i aW5zZXJ0Ij4gICAgICAgIHVpbnQ4X3QgZW5jb2RlZF9idWZmZXJbTUFYX0VOQ09ERURfT0FVVEhf VE9LRU5fU0laRV07PC9zcGFuPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48 L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3Rk Pjx0ZCBjbGFzcz0ibGJsb2NrIj48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+PHNw YW4gY2xhc3M9Imluc2VydCI+PC9zcGFuPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0i dG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9w Ij48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9j ayI+PHNwYW4gY2xhc3M9Imluc2VydCI+ICAgICAgICBpbnQgbGVuID0gZW5jb2RlX29hdXRoX3Rv a2VuX2djbSgoY29uc3QgdWludDhfdCAqKXNlcnZlcl9uYW1lLCAoY29uc3QgdWludDhfdCAqKWtl eSw8L3NwYW4+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4N CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNz PSJsYmxvY2siPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48c3BhbiBjbGFzcz0i aW5zZXJ0Ij4gICAgICAgICAgICAgICAgICAgICAgICAmYW1wO29hdXRoX3Rva2VuLDwvc3Bhbj48 L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRy Pjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+ PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPjxzcGFuIGNsYXNzPSJpbnNlcnQiPiAg ICAgICAgICAgICAgICAgICAgICAgIGVuY29kZWRfYnVmZmVyKTs8L3NwYW4+PC90ZD48dGQgY2xh c3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9 ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPjwvdGQ+PHRkPiA8 L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48c3BhbiBjbGFzcz0iaW5zZXJ0Ij48L3NwYW4+PC90ZD48 dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQg Y2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPjwvdGQ+ PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48c3BhbiBjbGFzcz0iaW5zZXJ0Ij4gICAgICAg IGlmKGxlbiZsdDswKSB7PC9zcGFuPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9w Ij48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48 L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+ PHNwYW4gY2xhc3M9Imluc2VydCI+ICAgICAgICAgICAgICAgIGZwcmludGYoc3RkZXJyLCJDYW5u b3QgZW5jb2RlIHRva2VuXG4iKTs8L3NwYW4+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWdu PSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0 b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJs b2NrIj48c3BhbiBjbGFzcz0iaW5zZXJ0Ij4gICAgICAgICAgICAgICAgZXhpdCgtMSk7PC9zcGFu PjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8 dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2Nr Ij48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+PHNwYW4gY2xhc3M9Imluc2VydCI+ ICAgICAgICB9PC9zcGFuPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3Rk PjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0 ZCBjbGFzcz0ibGJsb2NrIj48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+PHNwYW4g Y2xhc3M9Imluc2VydCI+ICAgICAgICBvYXV0aF90b2tlbl90IG9hdXRoX3Rva2VuX2RlY29kZWQ7 PC9zcGFuPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQog ICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0i bGJsb2NrIj48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+PHNwYW4gY2xhc3M9Imlu c2VydCI+PC9zcGFuPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwv dHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBj bGFzcz0ibGJsb2NrIj48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+PHNwYW4gY2xh c3M9Imluc2VydCI+ICAgICAgICBsZW4gPSBkZWNvZGVfb2F1dGhfdG9rZW5fZ2NtKChjb25zdCB1 aW50OF90ICopc2VydmVyX25hbWUsIChjb25zdCB1aW50OF90ICopa2V5LDwvc3Bhbj48L3RkPjx0 ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBj bGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+PC90ZD48 dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPjxzcGFuIGNsYXNzPSJpbnNlcnQiPiAgICAgICAg ICAgICAgICAgICAgICAgICZhbXA7b2F1dGhfdG9rZW5fZGVjb2RlZCw8L3NwYW4+PC90ZD48dGQg Y2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xh c3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPjwvdGQ+PHRk PiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48c3BhbiBjbGFzcz0iaW5zZXJ0Ij4gICAgICAgICAg ICAgICAgICAgICAgICBlbmNvZGVkX2J1ZmZlciwgKHNpemVfdClsZW4pOzwvc3Bhbj48L3RkPjx0 ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBj bGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+PC90ZD48 dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPjxzcGFuIGNsYXNzPSJpbnNlcnQiPjwvc3Bhbj48 L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRy Pjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+ PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPjxzcGFuIGNsYXNzPSJpbnNlcnQiPiAg ICAgICAgaWYobGVuJmx0OzApIHs8L3NwYW4+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWdu PSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0 b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJs b2NrIj48c3BhbiBjbGFzcz0iaW5zZXJ0Ij4gICAgICAgICAgICAgICAgZnByaW50ZihzdGRlcnIs IkNhbm5vdCBkZWNvZGUgdG9rZW5cbiIpOzwvc3Bhbj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2 YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxp Z249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNz PSJyYmxvY2siPjxzcGFuIGNsYXNzPSJpbnNlcnQiPiAgICAgICAgICAgICAgICBleGl0KC0xKTs8 L3NwYW4+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAg ICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJs YmxvY2siPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48c3BhbiBjbGFzcz0iaW5z ZXJ0Ij4gICAgICAgIH08L3NwYW4+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3Ai PjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwv dGQ+PHRkIGNsYXNzPSJsYmxvY2siPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48 c3BhbiBjbGFzcz0iaW5zZXJ0Ij48L3NwYW4+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWdu PSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0 b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJs b2NrIj48c3BhbiBjbGFzcz0iaW5zZXJ0Ij4gICAgICAgIGlmKDwvc3Bhbj48L3RkPjx0ZCBjbGFz cz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0i bGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+PC90ZD48dGQ+IDwv dGQ+PHRkIGNsYXNzPSJyYmxvY2siPjxzcGFuIGNsYXNzPSJpbnNlcnQiPiAgICAgICAgICAgICAg ICAgICAgICAgIChvYXV0aF90b2tlbi5ub25jZV9sZW5ndGggIT0gb2F1dGhfdG9rZW5fZGVjb2Rl ZC5ub25jZV9sZW5ndGgpIHx8PC9zcGFuPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0i dG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9w Ij48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9j ayI+PHNwYW4gY2xhc3M9Imluc2VydCI+ICAgICAgICAgICAgICAgICAgICAgICAgKGJjbXAob2F1 dGhfdG9rZW4ubm9uY2Usb2F1dGhfdG9rZW5fZGVjb2RlZC5ub25jZSxvYXV0aF90b2tlbi5ub25j ZV9sZW5ndGgpIT0wKSB8fDwvc3Bhbj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRv cCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+ PC90ZD48dGQgY2xhc3M9ImxibG9jayI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2si PjxzcGFuIGNsYXNzPSJpbnNlcnQiPiAgICAgICAgICAgICAgICAgICAgICAgIChvYXV0aF90b2tl bi5tYWNfa2V5X2xlbmd0aCAhPSBvYXV0aF90b2tlbl9kZWNvZGVkLm1hY19rZXlfbGVuZ3RoKSB8 fDwvc3Bhbj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0K ICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9 ImxibG9jayI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPjxzcGFuIGNsYXNzPSJp bnNlcnQiPiAgICAgICAgICAgICAgICAgICAgICAgIChiY21wKG9hdXRoX3Rva2VuLm1hY19rZXks b2F1dGhfdG9rZW5fZGVjb2RlZC5tYWNfa2V5LG9hdXRoX3Rva2VuLm1hY19rZXlfbGVuZ3RoKSE9 MCkgfHw8L3NwYW4+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90 cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNs YXNzPSJsYmxvY2siPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48c3BhbiBjbGFz cz0iaW5zZXJ0Ij4gICAgICAgICAgICAgICAgICAgICAgICAob2F1dGhfdG9rZW4udGltZXN0YW1w ICE9IG9hdXRoX3Rva2VuX2RlY29kZWQudGltZXN0YW1wKSB8fDwvc3Bhbj48L3RkPjx0ZCBjbGFz cz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0i bGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+PC90ZD48dGQ+IDwv dGQ+PHRkIGNsYXNzPSJyYmxvY2siPjxzcGFuIGNsYXNzPSJpbnNlcnQiPiAgICAgICAgICAgICAg ICAgICAgICAgIChvYXV0aF90b2tlbi5saWZldGltZSAhPSBvYXV0aF90b2tlbl9kZWNvZGVkLmxp ZmV0aW1lKSkgezwvc3Bhbj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90 ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48 dGQgY2xhc3M9ImxibG9jayI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPjxzcGFu IGNsYXNzPSJpbnNlcnQiPiAgICAgICAgICAgICAgICBmcHJpbnRmKHN0ZGVyciwiSW5jb3JyZWN0 bHkgZGVjb2RlZCB0b2tlblxuIik7PC9zcGFuPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGln bj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0i dG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJi bG9jayI+PHNwYW4gY2xhc3M9Imluc2VydCI+ICAgICAgICAgICAgICAgIGV4aXQoLTEpOzwvc3Bh bj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAg PHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9j ayI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPjxzcGFuIGNsYXNzPSJpbnNlcnQi PiAgICAgICAgfTwvc3Bhbj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90 ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48 dGQgY2xhc3M9ImxibG9jayI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPjxzcGFu IGNsYXNzPSJpbnNlcnQiPjwvc3Bhbj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRv cCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+ PC90ZD48dGQgY2xhc3M9ImxibG9jayI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2si PjxzcGFuIGNsYXNzPSJpbnNlcnQiPiAgICAgICAgZnByaW50ZihzdGRvdXQsIlNVQ0NFU1MgIVxu Iik7PC9zcGFuPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+ DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFz cz0ibGJsb2NrIj48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+PHNwYW4gY2xhc3M9 Imluc2VydCI+PC9zcGFuPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3Rk PjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0 ZCBjbGFzcz0ibGJsb2NrIj48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+PHNwYW4g Y2xhc3M9Imluc2VydCI+ICAgICAgICByZXR1cm4gMDs8L3NwYW4+PC90ZD48dGQgY2xhc3M9Imxp bmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVu byIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPjwvdGQ+PHRkPiA8L3RkPjx0 ZCBjbGFzcz0icmJsb2NrIj48c3BhbiBjbGFzcz0iaW5zZXJ0Ij59PC9zcGFuPjwvdGQ+PHRkIGNs YXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNz PSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48L3RkPjx0ZD4g PC90ZD48dGQgY2xhc3M9InJibG9jayI+PHNwYW4gY2xhc3M9Imluc2VydCI+PC9zcGFuPjwvdGQ+ PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRk IGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48L3Rk Pjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+PHNwYW4gY2xhc3M9Imluc2VydCI+Jmx0O0NP REUgRU5EUyZndDs8L3NwYW4+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwv dGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+ PHRkIGNsYXNzPSJsZWZ0Ij48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij48L3RkPjx0 ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBj bGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIElucHV0 IGRhdGEgKHNhbWUgZm9yIGFsbCBzYW1wbGVzIGJlbG93KTo8L3RkPjx0ZD4gPC90ZD48dGQgY2xh c3M9InJpZ2h0Ij4gICBJbnB1dCBkYXRhIChzYW1lIGZvciBhbGwgc2FtcGxlcyBiZWxvdyk6PC90 ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48 dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij48L3Rk Pjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxp Z249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249 InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIC8vU1RVTiBTRVJWRVIgTkFNRTwvdGQ+PHRk PiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIC8vU1RVTiBTRVJWRVIgTkFNRTwvdGQ+PHRkIGNs YXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNz PSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgc2VydmVyX25h bWUgPSAiYmxhY2tkb3cuY2FybGVvbi5nb3YiOzwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmln aHQiPiAgIHNlcnZlcl9uYW1lID0gImJsYWNrZG93LmNhcmxlb24uZ292Ijs8L3RkPjx0ZCBjbGFz cz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0i bGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPjwvdGQ+PHRkPiA8L3Rk Pjx0ZCBjbGFzcz0icmlnaHQiPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48 L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3Rk Pjx0ZCBjbGFzcz0ibGVmdCI+ICAgLy9TaGFyZWQga2V5IGJldHdlZW4gQVMgYW5kIFJTPC90ZD48 dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgLy9TaGFyZWQga2V5IGJldHdlZW4gQVMgYW5k IFJTPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAg IDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0 Ij48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij48L3RkPjx0ZCBjbGFzcz0ibGluZW5v IiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2 YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIGxvbmdfdGVybV9rZXkgPSBceDQ4 XHg0N1x4NmJceDZhXHgzM1x4MzJceDRiXHg0YVx4NDdceDY5XHg3NVx4Nzk8L3RkPjx0ZD4gPC90 ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBsb25nX3Rlcm1fa2V5ID0gXHg0OFx4NDdceDZiXHg2YVx4 MzNceDMyXHg0Ylx4NGFceDQ3XHg2OVx4NzVceDc5PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFs aWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWdu PSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICAgICAgICAgICAgICAgICAgXHgzMFx4Mzlc eDM4XHg3M1x4NjRceDY2XHg2MVx4NzFceDYyXHg0ZVx4NmFceDRmPC90ZD48dGQ+IDwvdGQ+PHRk IGNsYXNzPSJyaWdodCI+ICAgICAgICAgICAgICAgICAgIFx4MzBceDM5XHgzOFx4NzNceDY0XHg2 Nlx4NjFceDcxXHg2Mlx4NGVceDZhXHg0ZjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0i dG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNs YXNzPSJsZWZ0Ij48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij48L3RkPjx0ZCBjbGFz cz0ibGluZW5vIj48L3RkPjwvdHI+DQogICAgICA8dHIgYmdjb2xvcj0iZ3JheSI+PHRkPjwvdGQ+ PHRoPjxhIG5hbWU9InBhcnQtbDEyIj48c21hbGw+c2tpcHBpbmcgdG8gY2hhbmdlIGF0PC9zbWFs bD48ZW0+IHBhZ2UgMTksIGxpbmUgNDM8L2VtPjwvYT48L3RoPjx0aD4gPC90aD48dGg+PGEgbmFt ZT0icGFydC1yMTIiPjxzbWFsbD5za2lwcGluZyB0byBjaGFuZ2UgYXQ8L3NtYWxsPjxlbT4gcGFn ZSAyNiwgbGluZSA5PC9lbT48L2E+PC90aD48dGQ+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBj bGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPjwvdGQ+PHRk PiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0i dG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9w Ij48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgLy9sZW5ndGggb2YgdGhlIE1BQyBrZXk8L3RkPjx0 ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICAvL2xlbmd0aCBvZiB0aGUgTUFDIGtleTwvdGQ+ PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRk IGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgbWFj X2tleV9sZW5ndGggID0gIDIwOzwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIG1h Y19rZXlfbGVuZ3RoICA9ICAyMDs8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+ PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90 ZD48dGQgY2xhc3M9ImxlZnQiPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPjwvdGQ+ PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRk IGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgLy9U aGUgdGltZXN0YW1wIGZpZWxkIGluIHRoZSB0b2tlbjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0i cmlnaHQiPiAgIC8vVGhlIHRpbWVzdGFtcCBmaWVsZCBpbiB0aGUgdG9rZW48L3RkPjx0ZCBjbGFz cz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0i bGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIHRva2VuX3RpbWVz dGFtcCA9IDkyNDcwMzAwNzA0NzY4OzwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAg IHRva2VuX3RpbWVzdGFtcCA9IDkyNDcwMzAwNzA0NzY4OzwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8i IHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZh bGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNz PSJyaWdodCI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4N CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNz PSJsZWZ0Ij4gICAvL1RoZSBsaWZldGltZSBvZiB0aGUgdG9rZW48L3RkPjx0ZD4gPC90ZD48dGQg Y2xhc3M9InJpZ2h0Ij4gICAvL1RoZSBsaWZldGltZSBvZiB0aGUgdG9rZW48L3RkPjx0ZCBjbGFz cz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0i bGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIHRva2VuX2xpZmV0 aW1lID0gMzYwMDs8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICB0b2tlbl9saWZl dGltZSA9IDM2MDA7PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90 cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNs YXNzPSJsZWZ0Ij48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij48L3RkPjx0ZCBjbGFz cz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZD48YSBuYW1l PSJkaWZmMDAyMSI+PC9hPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIg dmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPiAgIC8vbm9uY2UgZm9yIEFFQUQ8 c3BhbiBjbGFzcz0iZGVsZXRlIj4gd2hlbiBBRUFEIGlzIHVzZWQ8L3NwYW4+PC90ZD48dGQ+IDwv dGQ+PHRkIGNsYXNzPSJyYmxvY2siPiAgIC8vbm9uY2UgZm9yIEFFQUQ8L3RkPjx0ZCBjbGFzcz0i bGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGlu ZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIGFlYWRfbm9uY2UgPSBc eDY4XHgzNFx4NmFceDMzXHg2Ylx4MzJceDZjXHgzMlx4NmVceDM0XHg2Mlx4MzU7PC90ZD48dGQ+ IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgYWVhZF9ub25jZSA9IFx4NjhceDM0XHg2YVx4MzNc eDZiXHgzMlx4NmNceDMyXHg2ZVx4MzRceDYyXHgzNTs8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2 YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxp Z249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0i cmlnaHQiPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQog ICAgICA8dHI+PHRkPjxhIG5hbWU9ImRpZmYwMDIyIj48L2E+PC90ZD48L3RyPg0KICAgICAgPHRy Pjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+ ICAgU2FtcGxlOjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj4gICBTYW1wbGU8c3Bh biBjbGFzcz0iaW5zZXJ0Ij5zPC9zcGFuPjo8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249 InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRv cCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQi PjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8 dHI+PHRkPjxhIG5hbWU9ImRpZmYwMDIzIj48L2E+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBj bGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+ICAgPHNw YW4gY2xhc3M9ImRlbGV0ZSI+MSk8L3NwYW4+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxv Y2siPiAgIDxzcGFuIGNsYXNzPSJpbnNlcnQiPiAgMSkgdG9rZW4gZW5jcnlwdGlvbiBhbGdvcml0 aG0gPSBBRUFEX0FFU18yNTZfR0NNPC9zcGFuPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGln bj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0i dG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdo dCI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAg IDx0cj48dGQ+PGEgbmFtZT0iZGlmZjAwMjQiPjwvYT48L3RkPjwvdHI+DQogICAgICA8dHI+PHRk IGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj4gICAg IHRva2VuIDxzcGFuIGNsYXNzPSJkZWxldGUiPmVuY3J5cHRpb24gYWxnb3JpdGhtPC9zcGFuPiA9 IDxzcGFuIGNsYXNzPSJkZWxldGUiPkFFQURfQUVTXzI1Nl9HQ008L3NwYW4+PC90ZD48dGQ+IDwv dGQ+PHRkIGNsYXNzPSJyYmxvY2siPiAgICAgPHNwYW4gY2xhc3M9Imluc2VydCI+RW5jcnlwdGVk PC9zcGFuPiB0b2tlbiA8c3BhbiBjbGFzcz0iaW5zZXJ0Ij4oNjQgYnl0ZXM8L3NwYW4+ID0gPHNw YW4gY2xhc3M9Imluc2VydCI+MiArIDEyICszNCArIDE2KTwvc3Bhbj4gPTwvdGQ+PHRkIGNsYXNz PSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJs aW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48c3BhbiBjbGFzcz0i ZGVsZXRlIj4gICAgIHRva2VuIGF1dGggYWxnb3JpdGhtID0gTi9BPC9zcGFuPjwvdGQ+PHRkPiA8 L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRv cCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+ PC90ZD48dGQgY2xhc3M9ImxibG9jayI+PHNwYW4gY2xhc3M9ImRlbGV0ZSI+ICAgICBSZXN1bHQ6 PC9zcGFuPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48L3RkPjx0ZCBjbGFzcz0i bGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGlu ZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+PHNwYW4gY2xhc3M9ImRl bGV0ZSI+ICAgICBBU19SUyBrZXkgKDMyIGJ5dGVzKTwvc3Bhbj4gPTwvdGQ+PHRkPiA8L3RkPjx0 ZCBjbGFzcz0icmJsb2NrIj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90 ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48 dGQgY2xhc3M9ImxibG9jayI+ICAgICA8c3BhbiBjbGFzcz0iZGVsZXRlIj5ceDQ4XHg0N1x4NmJc eDZhXHgzM1x4MzJceDRiXHg0YVx4NDdceDY5XHg3NVx4Nzk8L3NwYW4+PC90ZD48dGQ+IDwvdGQ+ PHRkIGNsYXNzPSJyYmxvY2siPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48 L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3Rk Pjx0ZCBjbGFzcz0ibGJsb2NrIj48c3BhbiBjbGFzcz0iZGVsZXRlIj4gICAgIFx4MzBceDM5XHgz OFx4NzNceDY0XHg2Nlx4NjFceDcxXHg2Mlx4NGVceDZhXHg0Zjwvc3Bhbj48L3RkPjx0ZD4gPC90 ZD48dGQgY2xhc3M9InJibG9jayI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3Ai PjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwv dGQ+PHRkIGNsYXNzPSJsYmxvY2siPjxzcGFuIGNsYXNzPSJkZWxldGUiPiAgICAgXHg2OVx4NjFc eDdhXHgzN1x4MzFceDM5XHgzMlx4MzM8L3NwYW4+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJy YmxvY2siPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQog ICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0i bGVmdCI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+PC90ZD48dGQgY2xhc3M9Imxp bmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQ+PGEgbmFtZT0iZGlm ZjAwMjUiPjwvYT48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGln bj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj4gICAgIDxzcGFuIGNsYXNzPSJkZWxldGUi PkFVVEgga2V5ID0gTi9BPC9zcGFuPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj4g ICAgPHNwYW4gY2xhc3M9Imluc2VydCI+XHgwMFx4MGNceDY4XHgzNFx4NmFceDMzXHg2Ylx4MzJc eDZjXHgzMlx4NmVceDM0XHg2Mjwvc3Bhbj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249 InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRv cCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxv Y2siPjxzcGFuIGNsYXNzPSJpbnNlcnQiPiAgICBceDM1XHg2MVx4N2VceGYxXHgzNFx4YTNceGQ1 XHhlNFx4NGVceDlhXHgxOVx4Y2NceDdkPC9zcGFuPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZh bGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGln bj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9 InJibG9jayI+PHNwYW4gY2xhc3M9Imluc2VydCI+ICAgIFx4YzFceDA0XHhiMFx4YzBceDNkXHgw M1x4YjJceGE1XHg1MVx4ZDhceGZkXHhmNVx4Y2Q8L3NwYW4+PC90ZD48dGQgY2xhc3M9ImxpbmVu byIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIg dmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPjwvdGQ+PHRkPiA8L3RkPjx0ZCBj bGFzcz0icmJsb2NrIj48c3BhbiBjbGFzcz0iaW5zZXJ0Ij4gICAgXHgzYlx4NmRceGNhXHg2Zlx4 MTBceGNmXHhiN1x4N2VceDViXHgyZFx4ZGVceGM4XHg0ZDwvc3Bhbj48L3RkPjx0ZCBjbGFzcz0i bGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGlu ZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+PC90ZD48dGQ+IDwvdGQ+ PHRkIGNsYXNzPSJyYmxvY2siPjxzcGFuIGNsYXNzPSJpbnNlcnQiPiAgICBceDI5XHgzYVx4NWNc eDUwXHg0OVx4OTNceDU5XHhmMFx4YzJceGUyXHg2Zlx4NzY8L3NwYW4+PC90ZD48dGQgY2xhc3M9 ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9Imxp bmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij48L3RkPjx0ZD4gPC90ZD48 dGQgY2xhc3M9InJpZ2h0Ij48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90 ZD48L3RyPg0KICAgICAgPHRyPjx0ZD48YSBuYW1lPSJkaWZmMDAyNiI+PC9hPjwvdGQ+PC90cj4N CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNz PSJsYmxvY2siPiAgPHNwYW4gY2xhc3M9ImRlbGV0ZSI+ICAgRW5jcnlwdGVkIHRva2VuICg2MiBi eXRlcyA9IDM0ICsgMTYgKyAxMikgPTwvc3Bhbj48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJi bG9jayI+ICA8c3BhbiBjbGFzcz0iaW5zZXJ0Ij4yKSB0b2tlbiBlbmNyeXB0aW9uIGFsZ29yaXRo bSA9IEFFQURfQUVTXzEyOF9HQ008L3NwYW4+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWdu PSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0 b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0 Ij48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAg PHRyPjx0ZD48YSBuYW1lPSJkaWZmMDAyNyI+PC9hPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQg Y2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPiAgICA8 c3BhbiBjbGFzcz0iZGVsZXRlIj5ceGQ0XHg4Nlx4NWNceDVkXHg1OVx4ZmJceDNmXHhlM1x4ZjZc eGYxXHhkOFx4YzNceDIyXHhjMlx4MjJceDI2XHg4ZDwvc3Bhbj48L3RkPjx0ZD4gPC90ZD48dGQg Y2xhc3M9InJibG9jayI+ICAgICA8c3BhbiBjbGFzcz0iaW5zZXJ0Ij5FbmNyeXB0ZWQgdG9rZW4g KDY0IGJ5dGVzID0gMiArIDEyICszNCArIDE2KSA9PC9zcGFuPjwvdGQ+PHRkIGNsYXNzPSJsaW5l bm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8i IHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48c3BhbiBjbGFzcz0iZGVsZXRl Ij4gICAgXHgyZVx4ZjBceGJlXHgyXHg1Ylx4YmRceDEzXHg0OVx4ODlceDZlXHhhNVx4YzVceDUx XHhlZVx4ZWVceDdmXHhkOTwvc3Bhbj48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+ PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0 cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2si PjxzcGFuIGNsYXNzPSJkZWxldGUiPiAgICBceGU0XHg0MVx4ZDdceGNiXHg1MVx4MjBceDQwXHhj Y1x4YzVceDUzXHg5MFx4MmZceGRjXHhiYlx4OGRceDUzXHg2ODwvc3Bhbj48L3RkPjx0ZD4gPC90 ZD48dGQgY2xhc3M9InJibG9jayI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3Ai PjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwv dGQ+PHRkIGNsYXNzPSJsYmxvY2siPjxzcGFuIGNsYXNzPSJkZWxldGUiPiAgICBceDM0XHg2YVx4 MzNceDZiXHgzMlx4NmNceDMyXHg2ZVx4MzRceDYyXHgzNTwvc3Bhbj48L3RkPjx0ZD4gPC90ZD48 dGQgY2xhc3M9InJibG9jayI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwv dGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+ PHRkIGNsYXNzPSJsZWZ0Ij48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij48L3RkPjx0 ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZD48 YSBuYW1lPSJkaWZmMDAyOCI+PC9hPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9Imxp bmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPiAgICAgICAgICAgICAg ICAgICAgICAgICBGaWd1cmUgNTogU2FtcGxlIDxzcGFuIGNsYXNzPSJkZWxldGUiPnRpY2tldHM8 L3NwYW4+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPiAgIDxzcGFuIGNsYXNzPSJp bnNlcnQiPlx4MDBceDBjXHg2OFx4MzRceDZhXHgzM1x4NmJceDMyXHg2Y1x4MzJceDZlXHgzNFx4 NjI8L3NwYW4+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4N CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNz PSJsYmxvY2siPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48c3BhbiBjbGFzcz0i aW5zZXJ0Ij4gICBceDM1XHg3Zlx4YjlceGU5XHg5Zlx4MDhceDI3XHhiZVx4M2RceGYxXHhlMVx4 YmRceDY1PC9zcGFuPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwv dHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBj bGFzcz0ibGJsb2NrIj48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+PHNwYW4gY2xh c3M9Imluc2VydCI+ICAgXHgxNFx4OTNceGQzXHgwM1x4MWRceDM2XHhkZlx4NTdceDA3XHg5N1x4 ODRceGFlXHhlNTwvc3Bhbj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90 ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48 dGQgY2xhc3M9ImxibG9jayI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPjxzcGFu IGNsYXNzPSJpbnNlcnQiPiAgIFx4ZWFceGNiXHg2NVx4ZmFceGQ0XHhmMlx4N2ZceGFiXHgxYVx4 M2ZceDk3XHg5N1x4NGI8L3NwYW4+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3Ai PjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwv dGQ+PHRkIGNsYXNzPSJsYmxvY2siPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48 c3BhbiBjbGFzcz0iaW5zZXJ0Ij4gICBceDY5XHhmOFx4NTFceGIyXHg0Ylx4ZjVceGFmXHgwOVx4 ZWRceGEzXHg1N1x4ZTA8L3NwYW4+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3Ai PjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwv dGQ+PHRkIGNsYXNzPSJsYmxvY2siPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj4g ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+ PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRk IGNsYXNzPSJsYmxvY2siPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj4gICAgICAg ICAgICAgICAgICAgICAgICAgICBGaWd1cmUgNTogU2FtcGxlIDxzcGFuIGNsYXNzPSJpbnNlcnQi PmNvZGU8L3NwYW4+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90 cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNs YXNzPSJsZWZ0Ij48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij48L3RkPjx0ZCBjbGFz cz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0i bGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPkFwcGVuZGl4IEIuICBJ bnRlcmFjdGlvbiBiZXR3ZWVuIGNsaWVudCBhbmQgYXV0aG9yaXphdGlvbiBzZXJ2ZXI8L3RkPjx0 ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij5BcHBlbmRpeCBCLiAgSW50ZXJhY3Rpb24gYmV0d2Vl biBjbGllbnQgYW5kIGF1dGhvcml6YXRpb24gc2VydmVyPC90ZD48dGQgY2xhc3M9ImxpbmVubyIg dmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFs aWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9 InJpZ2h0Ij48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0K ICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9 ImxlZnQiPiAgIENsaWVudCBtYWtlcyBhbiBIVFRQIHJlcXVlc3QgdG8gYW4gYXV0aG9yaXphdGlv biBzZXJ2ZXIgdG8gb2J0YWluIGE8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBD bGllbnQgbWFrZXMgYW4gSFRUUCByZXF1ZXN0IHRvIGFuIGF1dGhvcml6YXRpb24gc2VydmVyIHRv IG9idGFpbiBhPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4N CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNz PSJsZWZ0Ij4gICB0b2tlbiB0aGF0IGNhbiBiZSB1c2VkIHRvIGF2YWlsIGl0c2VsZiBvZiBTVFVO IHNlcnZpY2VzLiAgVGhlIFNUVU48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICB0 b2tlbiB0aGF0IGNhbiBiZSB1c2VkIHRvIGF2YWlsIGl0c2VsZiBvZiBTVFVOIHNlcnZpY2VzLiAg VGhlIFNUVU48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0K ICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9 ImxlZnQiPiAgIHRva2VuIGlzIHJldHVybmVkIGluIEpTT04gc3ludGF4IFtSRkM3MTU5XSwgYWxv bmcgd2l0aCBvdGhlciBPQXV0aDwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIHRv a2VuIGlzIHJldHVybmVkIGluIEpTT04gc3ludGF4IFtSRkM3MTU5XSwgYWxvbmcgd2l0aCBvdGhl ciBPQXV0aDwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQog ICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0i bGVmdCI+ICAgMi4wIHBhcmFtZXRlcnMgbGlrZSB0b2tlbiB0eXBlLCBrZXksIHRva2VuIGxpZmV0 aW1lIGFuZCBraWQgZGVmaW5lZDwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIDIu MCBwYXJhbWV0ZXJzIGxpa2UgdG9rZW4gdHlwZSwga2V5LCB0b2tlbiBsaWZldGltZSBhbmQga2lk IGRlZmluZWQ8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0K ICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9 ImxlZnQiPiAgIGluIFtJLUQuaWV0Zi1vYXV0aC1wb3Ata2V5LWRpc3RyaWJ1dGlvbl0uPC90ZD48 dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgaW4gW0ktRC5pZXRmLW9hdXRoLXBvcC1rZXkt ZGlzdHJpYnV0aW9uXS48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48 L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQg Y2xhc3M9ImxlZnQiPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPjwvdGQ+PHRkIGNs YXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNz PSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgKy0tLS0tLS0t LS0tLS0tLS0tLS0rICAgICAgICAgICAgICAgICAgICAgICAgICstLS0tLS0tLSsgICstLS0tLS0t LS0rPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgKy0tLS0tLS0tLS0tLS0tLS0t LS0rICAgICAgICAgICAgICAgICAgICAgICAgICstLS0tLS0tLSsgICstLS0tLS0tLS0rPC90ZD48 dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQg Y2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPjwvdGQ+PHRkPiA8L3RkPjx0ZCBj bGFzcz0icmlnaHQiPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4NCiAgICAgIDx0 ciBiZ2NvbG9yPSJncmF5Ij48dGQ+PC90ZD48dGg+PGEgbmFtZT0icGFydC1sMTMiPjxzbWFsbD5z a2lwcGluZyB0byBjaGFuZ2UgYXQ8L3NtYWxsPjxlbT4gcGFnZSAyMiwgbGluZSAxMjwvZW0+PC9h PjwvdGg+PHRoPiA8L3RoPjx0aD48YSBuYW1lPSJwYXJ0LXIxMyI+PHNtYWxsPnNraXBwaW5nIHRv IGNoYW5nZSBhdDwvc21hbGw+PGVtPiBwYWdlIDI4LCBsaW5lIDEyPC9lbT48L2E+PC90aD48dGQ+ PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90 ZD48dGQgY2xhc3M9ImxlZnQiPiAgIHJlcXVlc3QgZm9yIHRoZSBhY2Nlc3MgdG9rZW4gdXNpbmcg dHJhbnNwb3J0LWxheWVyIHNlY3VyaXR5ICh3aXRoPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJy aWdodCI+ICAgcmVxdWVzdCBmb3IgdGhlIGFjY2VzcyB0b2tlbiB1c2luZyB0cmFuc3BvcnQtbGF5 ZXIgc2VjdXJpdHkgKHdpdGg8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90 ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48 dGQgY2xhc3M9ImxlZnQiPiAgIGV4dHJhIGxpbmUgYnJlYWtzIGZvciBkaXNwbGF5IHB1cnBvc2Vz IG9ubHkpOjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIGV4dHJhIGxpbmUgYnJl YWtzIGZvciBkaXNwbGF5IHB1cnBvc2VzIG9ubHkpOjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZh bGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGln bj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJy aWdodCI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAg ICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJs ZWZ0Ij4gICAgICAgIEhUVFAvMS4xPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAg ICAgICBIVFRQLzEuMTwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwv dHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBj bGFzcz0ibGVmdCI+ICAgICAgICBIb3N0OiBzZXJ2ZXIuZXhhbXBsZS5jb208L3RkPjx0ZD4gPC90 ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICAgICAgIEhvc3Q6IHNlcnZlci5leGFtcGxlLmNvbTwvdGQ+ PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRk IGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgICAg ICBDb250ZW50LVR5cGU6IGFwcGxpY2F0aW9uL3gtd3d3LWZvcm0tdXJsZW5jb2RlZDwvdGQ+PHRk PiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgICAgICAgQ29udGVudC1UeXBlOiBhcHBsaWNhdGlv bi94LXd3dy1mb3JtLXVybGVuY29kZWQ8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRv cCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+ PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgICAgICAgYXVkPXN0dW4xQGV4YW1wbGUuY29tPC90ZD48 dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgICAgICBhdWQ9c3R1bjFAZXhhbXBsZS5jb208 L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRy Pjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAg ICAgICAgdGltZXN0YW1wPTEzNjE0NzE2Mjk8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0 Ij4gICAgICAgIHRpbWVzdGFtcD0xMzYxNDcxNjI5PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFs aWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWdu PSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICAgICAgIGdyYW50X3R5cGU9aW1wbGljaXQ8 L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICAgICAgIGdyYW50X3R5cGU9aW1wbGlj aXQ8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAg PHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQi PiAgICAgICAgdG9rZW5fdHlwZT1wb3A8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4g ICAgICAgIHRva2VuX3R5cGU9cG9wPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3Ai PjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQ+PGEgbmFtZT0iZGlmZjAwMjkiPjwvYT48L3RkPjwv dHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBj bGFzcz0ibGJsb2NrIj4gICAgICAgIGFsZz1ITUFDLVNIQS08c3BhbiBjbGFzcz0iZGVsZXRlIj4x IEhNQUMtU0hBLTwvc3Bhbj4yNTYtMTI4PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2si PiAgICAgICAgYWxnPUhNQUMtU0hBLTI1Ni0xMjg8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxp Z249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249 InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmln aHQiPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAg ICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVm dCI+ICAgICAgICAgICAgICAgICAgICAgICAgICAgICBGaWd1cmUgNzogUmVxdWVzdDwvdGQ+PHRk PiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgICAgICAgICAgICAgICAgICAgICAgICAgICAgRmln dXJlIDc6IFJlcXVlc3Q8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48 L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQg Y2xhc3M9ImxlZnQiPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPjwvdGQ+PHRkIGNs YXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkPjxhIG5h bWU9ImRpZmYwMDMwIj48L2E+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5v IiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+ICAgW0ktRC5pZXRmLXRyYW0t c3R1bmJpc10gPHNwYW4gY2xhc3M9ImRlbGV0ZSI+d2lsbCBzdXBwb3J0PC9zcGFuPiBoYXNoIGFn aWxpdHkgYW5kIGFjY29tcGxpc2ggdGhpczwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2Nr Ij4gICBbSS1ELmlldGYtdHJhbS1zdHVuYmlzXSA8c3BhbiBjbGFzcz0iaW5zZXJ0Ij5zdXBwb3J0 czwvc3Bhbj4gaGFzaCBhZ2lsaXR5IGFuZCBhY2NvbXBsaXNoIHRoaXM8L3RkPjx0ZCBjbGFzcz0i bGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGlu ZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+ICAgYWdpbGl0eSBieSA8 c3BhbiBjbGFzcz0iZGVsZXRlIj5jb252ZXlpbmcgdGhlIEhNQUMgYWxnb3JpdGhtcyBzdXBwb3J0 ZWQgYnkgdGhlIFNUVU4gc2VydmVyPC9zcGFuPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJs b2NrIj4gICBhZ2lsaXR5IGJ5IDxzcGFuIGNsYXNzPSJpbnNlcnQiPmNvbXB1dGluZzwvc3Bhbj4g bWVzc2FnZSA8c3BhbiBjbGFzcz0iaW5zZXJ0Ij5pbnRlZ3JpdHkgdXNpbmcgYm90aCBITUFDLVNI QS0xIGFuZDwvc3Bhbj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48 L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQg Y2xhc3M9ImxibG9jayI+PHNwYW4gY2xhc3M9ImRlbGV0ZSI+ICAgYWxvbmcgd2l0aCBhIFNUVU4g ZXJyb3I8L3NwYW4+IG1lc3NhZ2UgPHNwYW4gY2xhc3M9ImRlbGV0ZSI+dG8gdGhlIGNsaWVudC48 L3NwYW4+ICBUaGUgY2xpZW50IDxzcGFuIGNsYXNzPSJkZWxldGUiPnRoZW48L3NwYW4+PC90ZD48 dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPjxzcGFuIGNsYXNzPSJpbnNlcnQiPiAgIEhNQUMt U0hBLTI1Ni0xMjguPC9zcGFuPiAgVGhlIGNsaWVudCBzaWduYWxzIHRoZSA8c3BhbiBjbGFzcz0i aW5zZXJ0Ij5hbGdvcml0aG08L3NwYW4+IHN1cHBvcnRlZCBieSBpdDwvdGQ+PHRkIGNsYXNzPSJs aW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5l bm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj4gICBzaWduYWxzIHRoZSA8 c3BhbiBjbGFzcz0iZGVsZXRlIj5pbnRlcnNlY3Rpb24tc2V0IG9mIGFsZ29yaXRobXM8L3NwYW4+ IHN1cHBvcnRlZCBieSBpdCA8c3BhbiBjbGFzcz0iZGVsZXRlIj5hbmQgdGhlPC9zcGFuPjwvdGQ+ PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj4gICB0byB0aGUgYXV0aG9yaXphdGlvbiBzZXJ2 ZXIgaW4gdGhlICdhbGcnIHBhcmFtZXRlciBkZWZpbmVkIGluPC90ZD48dGQgY2xhc3M9ImxpbmVu byIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIg dmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPjxzcGFuIGNsYXNzPSJkZWxldGUi PiAgIFNUVU4gc2VydmVyPC9zcGFuPiB0byB0aGUgYXV0aG9yaXphdGlvbiBzZXJ2ZXIgaW4gdGhl ICdhbGcnIHBhcmFtZXRlcjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj4gICBbSS1E LmlldGYtb2F1dGgtcG9wLWtleS1kaXN0cmlidXRpb25dLiAgVGhlIGF1dGhvcml6YXRpb24gZGV0 ZXJtaW5lczwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQog ICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0i bGJsb2NrIj4gICBkZWZpbmVkIGluIFtJLUQuaWV0Zi1vYXV0aC1wb3Ata2V5LWRpc3RyaWJ1dGlv bl0uICBUaGUgYXV0aG9yaXphdGlvbjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj4g ICBsZW5ndGggb2YgdGhlIG1hY19rZXkgYmFzZWQgb24gdGhlIEhNQUMgYWxnb3JpdGhtIDxzcGFu IGNsYXNzPSJpbnNlcnQiPmNvbnZleWVkIGJ5IHRoZTwvc3Bhbj48L3RkPjx0ZCBjbGFzcz0ibGlu ZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5v IiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+ICAgPHNwYW4gY2xhc3M9ImRl bGV0ZSI+c2VydmVyIHNlbGVjdHMgYW4gSE1BQyBhbGdvcml0aG0gZnJvbSB0aGUgbGlzdCBvZiBh bGdvcml0aG1zIHRoZTwvc3Bhbj48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+PHNw YW4gY2xhc3M9Imluc2VydCI+ICAgY2xpZW50LiAgSWY8L3NwYW4+IHRoZSBjbGllbnQgPHNwYW4g Y2xhc3M9Imluc2VydCI+c3VwcG9ydHMgYm90aCBITUFDLVNIQS0xIGFuZCBITUFDLVNIQS0yNTYt MTI4PC9zcGFuPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+ DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFz cz0ibGJsb2NrIj48c3BhbiBjbGFzcz0iZGVsZXRlIj4gICBjbGllbnQgcHJvdmlkZWQgYW5kPC9z cGFuPiBkZXRlcm1pbmVzIGxlbmd0aCBvZiB0aGUgbWFjX2tleSBiYXNlZCBvbiB0aGU8L3RkPjx0 ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+PHNwYW4gY2xhc3M9Imluc2VydCI+ICAgdGhlbiBp dCBzaWduYWxzIEhNQUMtU0hBLTI1Ni0xMjg8L3NwYW4+IHRvIHRoZSBhdXRob3JpemF0aW9uIDxz cGFuIGNsYXNzPSJpbnNlcnQiPnNlcnZlciwgZ2V0czwvc3Bhbj48L3RkPjx0ZCBjbGFzcz0ibGlu ZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5v IiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+ICAgPHNwYW4gY2xhc3M9ImRl bGV0ZSI+c2VsZWN0ZWQ8L3NwYW4+IEhNQUMgPHNwYW4gY2xhc3M9ImRlbGV0ZSI+YWxnb3JpdGht LiAgTm90ZSB0aGF0IHVudGlsIFNUVU4gc3VwcG9ydHMgaGFzaCBhZ2lsaXR5PC9zcGFuPjwvdGQ+ PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48c3BhbiBjbGFzcz0iaW5zZXJ0Ij4gICAyNTYt Yml0IGtleSBmcm9tIHRoZSBhdXRob3JpemF0aW9uPC9zcGFuPiBzZXJ2ZXIgYW5kIDxzcGFuIGNs YXNzPSJpbnNlcnQiPmNhbGN1bGF0ZXMgMTYwLWJpdCBrZXk8L3NwYW4+PC90ZD48dGQgY2xhc3M9 ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9Imxp bmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPjxzcGFuIGNsYXNzPSJk ZWxldGUiPiAgIEhNQUMtU0hBMSBpcyB0aGUgb25seSB2YWxpZCBoYXNoPC9zcGFuPiBhbGdvcml0 aG0gPHNwYW4gY2xhc3M9ImRlbGV0ZSI+dGhhdDwvc3Bhbj4gdGhlIGNsaWVudCA8c3BhbiBjbGFz cz0iZGVsZXRlIj5jYW4gc2lnbmFsPC9zcGFuPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJs b2NrIj48c3BhbiBjbGFzcz0iaW5zZXJ0Ij4gICBmb3IgSE1BQy1TSEEtMSB1c2luZyBTSEExIHRh a2luZyB0aGUgMjU2LWJpdCBrZXkgYXMgaW5wdXQuPC9zcGFuPjwvdGQ+PHRkIGNsYXNzPSJsaW5l bm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8i IHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj4gICB0byB0aGUgYXV0aG9yaXph dGlvbiBzZXJ2ZXIgYW5kIDxzcGFuIGNsYXNzPSJkZWxldGUiPnZpY2UtdmVyc2EuPC9zcGFuPjwv dGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2 YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxp Z249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0i cmlnaHQiPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQog ICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0i bGVmdCI+ICAgSWYgdGhlIGNsaWVudCBpcyBhdXRob3JpemVkIHRoZW4gdGhlIGF1dGhvcml6YXRp b24gc2VydmVyIGlzc3VlcyBhbjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIElm IHRoZSBjbGllbnQgaXMgYXV0aG9yaXplZCB0aGVuIHRoZSBhdXRob3JpemF0aW9uIHNlcnZlciBp c3N1ZXMgYW48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0K ICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9 ImxlZnQiPiAgIGFjY2VzcyB0b2tlbi4gIEFuIGV4YW1wbGUgb2Ygc3VjY2Vzc2Z1bCByZXNwb25z ZTo8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBhY2Nlc3MgdG9rZW4uICBBbiBl eGFtcGxlIG9mIHN1Y2Nlc3NmdWwgcmVzcG9uc2U6PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFs aWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWdu PSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJp Z2h0Ij48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAg ICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9Imxl ZnQiPiAgICAgICAgSFRUUC8xLjEgMjAwIE9LPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdo dCI+ICAgICAgICBIVFRQLzEuMSAyMDAgT0s8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249 InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRv cCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgICAgICAgQ29udGVudC1UeXBlOiBhcHBsaWNhdGlv bi9qc29uPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgICAgICBDb250ZW50LVR5 cGU6IGFwcGxpY2F0aW9uL2pzb248L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+ PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90 ZD48dGQgY2xhc3M9ImxlZnQiPiAgICAgICAgQ2FjaGUtQ29udHJvbDogbm8tc3RvcmU8L3RkPjx0 ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICAgICAgIENhY2hlLUNvbnRyb2w6IG5vLXN0b3Jl PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0 cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij48 L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2 YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxp Z249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgICAgICAgezwvdGQ+PHRkPiA8L3RkPjx0 ZCBjbGFzcz0icmlnaHQiPiAgICAgICAgezwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0i dG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9w Ij48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgICAgICAgICJhY2Nlc3NfdG9rZW4iOjwvdGQ+PHRk PiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgICAgICAgICAiYWNjZXNzX3Rva2VuIjo8L3RkPjx0 ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KDQogICAgIDx0cj48dGQ+ PC90ZD48dGQgY2xhc3M9ImxlZnQiPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPjwv dGQ+PHRkPjwvdGQ+PC90cj4NCiAgICAgPHRyIGJnY29sb3I9ImdyYXkiPjx0aCBjb2xzcGFuPSI1 IiBhbGlnbj0iY2VudGVyIj48YSBuYW1lPSJlbmQiPiZuYnNwO0VuZCBvZiBjaGFuZ2VzLiAzMCBj aGFuZ2UgYmxvY2tzLiZuYnNwOzwvYT48L3RoPjwvdHI+DQogICAgIDx0ciBjbGFzcz0ic3RhdHMi Pjx0ZD48L3RkPjx0aD48aT4xODAgbGluZXMgY2hhbmdlZCBvciBkZWxldGVkPC9pPjwvdGg+PHRo PjxpPiA8L2k+PC90aD48dGg+PGk+NTAxIGxpbmVzIGNoYW5nZWQgb3IgYWRkZWQ8L2k+PC90aD48 dGQ+PC90ZD48L3RyPg0KICAgICA8dHI+PHRkIGNvbHNwYW49IjUiIGNsYXNzPSJzbWFsbCIgYWxp Z249ImNlbnRlciI+PGJyPlRoaXMgaHRtbCBkaWZmIHdhcyBwcm9kdWNlZCBieSByZmNkaWZmIDEu NDIuIFRoZSBsYXRlc3QgdmVyc2lvbiBpcyBhdmFpbGFibGUgZnJvbSA8YSBocmVmPSJodHRwOi8v d3d3LnRvb2xzLmlldGYub3JnL3Rvb2xzL3JmY2RpZmYvIj5odHRwOi8vdG9vbHMuaWV0Zi5vcmcv dG9vbHMvcmZjZGlmZi88L2E+IDwvdGQ+PC90cj4NCiAgIDwvdGJvZHk+PC90YWJsZT4NCiAgIA0K ICAgDQpYLUdlbmVyYXRvcjogcHlodCAwLjM1DQoNCjwhLS0gYXJnczogeyctLW9sZGNvbG91cic6 ICdyZWQnLCAnLS13aWR0aCc6ICcnLCAnZGlmZnR5cGUnOiAnLS1odG1sJywgJ2ZpbGVuYW1lMic6 ICdcblxuXG5cblRSQU0gICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICBULiBSZWRkeVxuSW50ZXJuZXQtRHJhZnQgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIFAuIFBhdGlsXG5JbnRlbmRlZCBzdGF0 dXM6IFN0YW5kYXJkcyBUcmFjayAgICAgICAgICAgICAgICAgICAgICAgICBSLiBSYXZpbmRyYW5h dGhcbkV4cGlyZXM6IE9jdG9iZXIgMjMsIDIwMTUgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICBDaXNjb1xuICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgSi4gVWJlcnRpXG4gICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICBHb29nbGVcbiAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICBB cHJpbCAyMSwgMjAxNVxuXG5cbiAgU2Vzc2lvbiBUcmF2ZXJzYWwgVXRpbGl0aWVzIGZvciBOQVQg KFNUVU4pIEV4dGVuc2lvbiBmb3IgVGhpcmQgUGFydHlcbiAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgQXV0aG9yaXphdGlvblxuICAgICAgICAgICAgICAgZHJhZnQtaWV0Zi10cmFtLXR1cm4t dGhpcmQtcGFydHktYXV0aHotMTVcblxuQWJzdHJhY3RcblxuICAgVGhpcyBkb2N1bWVudCBwcm9w b3NlcyB0aGUgdXNlIG9mIE9BdXRoIDIuMCB0byBvYnRhaW4gYW5kIHZhbGlkYXRlXG4gICBlcGhl bWVyYWwgdG9rZW5zIHRoYXQgY2FuIGJlIHVzZWQgZm9yIFNlc3Npb24gVHJhdmVyc2FsIFV0aWxp dGllcyBmb3JcbiAgIE5BVCAoU1RVTikgYXV0aGVudGljYXRpb24uICBUaGUgdXNhZ2Ugb2YgZXBo ZW1lcmFsIHRva2VucyBlbnN1cmVzXG4gICB0aGF0IGFjY2VzcyB0byBhIFNUVU4gc2VydmVyIGNh biBiZSBjb250cm9sbGVkIGV2ZW4gaWYgdGhlIHRva2VucyBhcmVcbiAgIGNvbXByb21pc2VkLlxu XG5TdGF0dXMgb2YgVGhpcyBNZW1vXG5cbiAgIFRoaXMgSW50ZXJuZXQtRHJhZnQgaXMgc3VibWl0 dGVkIGluIGZ1bGwgY29uZm9ybWFuY2Ugd2l0aCB0aGVcbiAgIHByb3Zpc2lvbnMgb2YgQkNQIDc4 IGFuZCBCQ1AgNzkuXG5cbiAgIEludGVybmV0LURyYWZ0cyBhcmUgd29ya2luZyBkb2N1bWVudHMg b2YgdGhlIEludGVybmV0IEVuZ2luZWVyaW5nXG4gICBUYXNrIEZvcmNlIChJRVRGKS4gIE5vdGUg dGhhdCBvdGhlciBncm91cHMgbWF5IGFsc28gZGlzdHJpYnV0ZVxuICAgd29ya2luZyBkb2N1bWVu dHMgYXMgSW50ZXJuZXQtRHJhZnRzLiAgVGhlIGxpc3Qgb2YgY3VycmVudCBJbnRlcm5ldC1cbiAg IERyYWZ0cyBpcyBhdCBodHRwOi8vZGF0YXRyYWNrZXIuaWV0Zi5vcmcvZHJhZnRzL2N1cnJlbnQv LlxuXG4gICBJbnRlcm5ldC1EcmFmdHMgYXJlIGRyYWZ0IGRvY3VtZW50cyB2YWxpZCBmb3IgYSBt YXhpbXVtIG9mIHNpeCBtb250aHNcbiAgIGFuZCBtYXkgYmUgdXBkYXRlZCwgcmVwbGFjZWQsIG9y IG9ic29sZXRlZCBieSBvdGhlciBkb2N1bWVudHMgYXQgYW55XG4gICB0aW1lLiAgSXQgaXMgaW5h cHByb3ByaWF0ZSB0byB1c2UgSW50ZXJuZXQtRHJhZnRzIGFzIHJlZmVyZW5jZVxuICAgbWF0ZXJp YWwgb3IgdG8gY2l0ZSB0aGVtIG90aGVyIHRoYW4gYXMgIndvcmsgaW4gcHJvZ3Jlc3MuIlxuXG4g ICBUaGlzIEludGVybmV0LURyYWZ0IHdpbGwgZXhwaXJlIG9uIE9jdG9iZXIgMjMsIDIwMTUuXG5c bkNvcHlyaWdodCBOb3RpY2VcblxuICAgQ29weXJpZ2h0IChjKSAyMDE1IElFVEYgVHJ1c3QgYW5k IHRoZSBwZXJzb25zIGlkZW50aWZpZWQgYXMgdGhlXG4gICBkb2N1bWVudCBhdXRob3JzLiAgQWxs IHJpZ2h0cyByZXNlcnZlZC5cblxuICAgVGhpcyBkb2N1bWVudCBpcyBzdWJqZWN0IHRvIEJDUCA3 OCBhbmQgdGhlIElFVEYgVHJ1c3RcJ3MgTGVnYWxcbiAgIFByb3Zpc2lvbnMgUmVsYXRpbmcgdG8g SUVURiBEb2N1bWVudHNcbiAgIChodHRwOi8vdHJ1c3RlZS5pZXRmLm9yZy9saWNlbnNlLWluZm8p IGluIGVmZmVjdCBvbiB0aGUgZGF0ZSBvZlxuICAgcHVibGljYXRpb24gb2YgdGhpcyBkb2N1bWVu dC4gIFBsZWFzZSByZXZpZXcgdGhlc2UgZG9jdW1lbnRzXG4gICBjYXJlZnVsbHksIGFzIHRoZXkg ZGVzY3JpYmUgeW91ciByaWdodHMgYW5kIHJlc3RyaWN0aW9ucyB3aXRoIHJlc3BlY3RcblxuXG5c blJlZGR5LCBldCBhbC4gICAgICAgICAgIEV4cGlyZXMgT2N0b2JlciAyMywgMjAxNSAgICAgICAg ICAgICAgICBbUGFnZSAxXVxuX1xuSW50ZXJuZXQtRHJhZnQgICAgICBTVFVOIGZvciAzcmQgcGFy dHkgQXV0aG9yaXphdGlvbiAgICAgICAgICBBcHJpbCAyMDE1XG5cblxuICAgdG8gdGhpcyBkb2N1 bWVudC4gIENvZGUgQ29tcG9uZW50cyBleHRyYWN0ZWQgZnJvbSB0aGlzIGRvY3VtZW50IG11c3Rc biAgIGluY2x1ZGUgU2ltcGxpZmllZCBCU0QgTGljZW5zZSB0ZXh0IGFzIGRlc2NyaWJlZCBpbiBT ZWN0aW9uIDQuZSBvZlxuICAgdGhlIFRydXN0IExlZ2FsIFByb3Zpc2lvbnMgYW5kIGFyZSBwcm92 aWRlZCB3aXRob3V0IHdhcnJhbnR5IGFzXG4gICBkZXNjcmliZWQgaW4gdGhlIFNpbXBsaWZpZWQg QlNEIExpY2Vuc2UuXG5cblRhYmxlIG9mIENvbnRlbnRzXG5cbiAgIDEuICBJbnRyb2R1Y3Rpb24g IC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuICAgMlxuICAg Mi4gIFRlcm1pbm9sb2d5IC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAu IC4gLiAuIC4gICAzXG4gICAzLiAgU29sdXRpb24gT3ZlcnZpZXcgLiAuIC4gLiAuIC4gLiAuIC4g LiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAgIDNcbiAgICAgMy4xLiAgVFVSTiAgLiAuIC4gLiAu IC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuICAgNFxuICAgNC4gIE9i dGFpbmluZyBhIFRva2VuIFVzaW5nIE9BdXRoIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAu IC4gICA3XG4gICAgIDQuMS4gIEtleSBFc3RhYmxpc2htZW50IC4gLiAuIC4gLiAuIC4gLiAuIC4g LiAuIC4gLiAuIC4gLiAuIC4gLiAgIDhcbiAgICAgICA0LjEuMS4gIEhUVFAgaW50ZXJhY3Rpb25z IC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuICAgOFxuICAgICAgIDQuMS4yLiAg TWFudWFsIHByb3Zpc2lvbmluZyAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gIDEw XG4gICA1LiAgRm9ybWluZyBhIFJlcXVlc3QgLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4g LiAuIC4gLiAuIC4gLiAgMTBcbiAgIDYuICBTVFVOIEF0dHJpYnV0ZXMgLiAuIC4gLiAuIC4gLiAu IC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuICAxMFxuICAgICA2LjEuICBUSElSRC1QQVJU WS1BVVRIT1JJWkFUSU9OIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gIDEwXG4gICAg IDYuMi4gIEFDQ0VTUy1UT0tFTiAgLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4g LiAuIC4gLiAgMTFcbiAgIDcuICBTVFVOIFNlcnZlciBCZWhhdmlvdXIgLiAuIC4gLiAuIC4gLiAu IC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuICAxM1xuICAgOC4gIFNUVU4gY2xpZW50IGJlaGF2aW91 ciAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gIDE0XG4gICA5LiAgVFVS TiBjbGllbnQgYW5kIHNlcnZlciBiZWhhdmlvdXIgIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4g LiAgMTRcbiAgIDEwLiBPcGVyYXRpb25hbCBDb25zaWRlcmF0aW9ucyAgLiAuIC4gLiAuIC4gLiAu IC4gLiAuIC4gLiAuIC4gLiAuICAxNVxuICAgMTEuIFNlY3VyaXR5IENvbnNpZGVyYXRpb25zIC4g LiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gIDE1XG4gICAxMi4gSUFOQSBDb25z aWRlcmF0aW9ucyAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAgMTZc biAgIDEzLiBBY2tub3dsZWRnZW1lbnRzICAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAu IC4gLiAuIC4gLiAuICAxNlxuICAgMTQuIFJlZmVyZW5jZXMgIC4gLiAuIC4gLiAuIC4gLiAuIC4g LiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gIDE2XG4gICAgIDE0LjEuICBOb3JtYXRpdmUg UmVmZXJlbmNlcyAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAgMTZcbiAgICAg MTQuMi4gIEluZm9ybWF0aXZlIFJlZmVyZW5jZXMgLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAu IC4gLiAuICAxN1xuICAgQXBwZW5kaXggQS4gIEMgU25pcHBldCB0byBlbmNyeXB0L2RlY3J5cHQg dG9rZW4gLiAuIC4gLiAuIC4gLiAuIC4gIDE5XG4gICBBcHBlbmRpeCBCLiAgSW50ZXJhY3Rpb24g YmV0d2VlbiBjbGllbnQgYW5kIGF1dGhvcml6YXRpb24gc2VydmVyICAgMjZcbiAgIEF1dGhvcnNc JyBBZGRyZXNzZXMgIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4g LiAgMjhcblxuMS4gIEludHJvZHVjdGlvblxuXG4gICBTZXNzaW9uIFRyYXZlcnNhbCBVdGlsaXRp ZXMgZm9yIE5BVCAoU1RVTikgW1JGQzUzODldIHByb3ZpZGVzIGFcbiAgIG1lY2hhbmlzbSB0byBj b250cm9sIGFjY2VzcyB2aWEgImxvbmctdGVybSIgdXNlcm5hbWUvIHBhc3N3b3JkXG4gICBjcmVk ZW50aWFscyB0aGF0IGFyZSBwcm92aWRlZCBhcyBwYXJ0IG9mIHRoZSBTVFVOIHByb3RvY29sLiAg SXQgaXNcbiAgIGV4cGVjdGVkIHRoYXQgdGhlc2UgY3JlZGVudGlhbHMgd2lsbCBiZSBrZXB0IHNl Y3JldDsgaWYgdGhlXG4gICBjcmVkZW50aWFscyBhcmUgZGlzY292ZXJlZCwgdGhlIFNUVU4gc2Vy dmVyIGNvdWxkIGJlIHVzZWQgYnlcbiAgIHVuYXV0aG9yaXplZCB1c2VycyBvciBhcHBsaWNhdGlv bnMuICBIb3dldmVyLCBpbiB3ZWIgYXBwbGljYXRpb25zXG4gICBsaWtlIFdlYlJUQyBbSS1ELmll dGYtcnRjd2ViLW92ZXJ2aWV3XSB3aGVyZSBKYXZhU2NyaXB0IHVzZXMgdGhlXG4gICBicm93c2Vy IGZ1bmN0aW9uYWxpdHkgdG8gbWFrZSByZWFsLXRpbWUgYXVkaW8gYW5kL29yIHZpZGVvIGNhbGxz LCBXZWJcbiAgIGNvbmZlcmVuY2luZywgYW5kIGRpcmVjdCBkYXRhIHRyYW5zZmVyLCBlbnN1cmlu ZyB0aGlzIHNlY3JlY3kgaXNcbiAgIHR5cGljYWxseSBub3QgcG9zc2libGUuXG5cbiAgIFRvIGFk ZHJlc3MgdGhpcyBwcm9ibGVtIGFuZCB0aGUgb25lcyBkZXNjcmliZWQgaW4gW1JGQzczNzZdLCB0 aGlzXG4gICBkb2N1bWVudCBwcm9wb3NlcyB0aGUgdXNlIG9mIHRoaXJkIHBhcnR5IGF1dGhvcml6 YXRpb24gdXNpbmcgT0F1dGhcblxuXG5cblJlZGR5LCBldCBhbC4gICAgICAgICAgIEV4cGlyZXMg T2N0b2JlciAyMywgMjAxNSAgICAgICAgICAgICAgICBbUGFnZSAyXVxuX1xuSW50ZXJuZXQtRHJh ZnQgICAgICBTVFVOIGZvciAzcmQgcGFydHkgQXV0aG9yaXphdGlvbiAgICAgICAgICBBcHJpbCAy MDE1XG5cblxuICAgMi4wIFtSRkM2NzQ5XSBmb3IgU1RVTi4gIFVzaW5nIE9BdXRoIDIuMCwgYSBj bGllbnQgb2J0YWlucyBhblxuICAgZXBoZW1lcmFsIHRva2VuIGZyb20gYW4gYXV0aG9yaXphdGlv biBzZXJ2ZXIgZS5nLiAgV2ViUlRDIHNlcnZlciwgYW5kXG4gICB0aGUgdG9rZW4gaXMgcHJlc2Vu dGVkIHRvIHRoZSBTVFVOIHNlcnZlciBpbnN0ZWFkIG9mIHRoZSB0cmFkaXRpb25hbFxuICAgbWVj aGFuaXNtIG9mIHByZXNlbnRpbmcgdXNlcm5hbWUvcGFzc3dvcmQgY3JlZGVudGlhbHMuICBUaGUg U1RVTlxuICAgc2VydmVyIHZhbGlkYXRlcyB0aGUgYXV0aGVudGljaXR5IG9mIHRoZSB0b2tlbiBh bmQgcHJvdmlkZXMgcmVxdWlyZWRcbiAgIHNlcnZpY2VzLiAgVGhpcmQgcGFydHkgYXV0aG9yaXph dGlvbiB1c2luZyBPQXV0aCAyLjAgZm9yIFNUVU5cbiAgIGV4cGxhaW5lZCBpbiB0aGlzIHNwZWNp ZmljYXRpb24gY2FuIGFsc28gYmUgdXNlZCB3aXRoIFRyYXZlcnNhbCBVc2luZ1xuICAgUmVsYXlz IGFyb3VuZCBOQVQgKFRVUk4pIFtSRkM1NzY2XS5cblxuMi4gIFRlcm1pbm9sb2d5XG5cbiAgIFRo ZSBrZXkgd29yZHMgIk1VU1QiLCAiTVVTVCBOT1QiLCAiUkVRVUlSRUQiLCAiU0hBTEwiLCAiU0hB TEwgTk9UIixcbiAgICJTSE9VTEQiLCAiU0hPVUxEIE5PVCIsICJSRUNPTU1FTkRFRCIsICJNQVki LCBhbmQgIk9QVElPTkFMIiBpbiB0aGlzXG4gICBkb2N1bWVudCBhcmUgdG8gYmUgaW50ZXJwcmV0 ZWQgYXMgZGVzY3JpYmVkIGluIFtSRkMyMTE5XS5cblxuICAgVGhpcyBkb2N1bWVudCB1c2VzIHRo ZSBmb2xsb3dpbmcgYWJicmV2aWF0aW9uczpcblxuICAgbyAgV2ViUlRDIFNlcnZlcjogQSB3ZWIg c2VydmVyIHRoYXQgc3VwcG9ydHMgV2ViUlRDXG4gICAgICBbSS1ELmlldGYtcnRjd2ViLW92ZXJ2 aWV3XS5cblxuICAgbyAgQWNjZXNzIFRva2VuOiBPQXV0aCAyLjAgYWNjZXNzIHRva2VuLlxuXG4g ICBvICBtYWNfa2V5OiBUaGUgc2Vzc2lvbiBrZXkgZ2VuZXJhdGVkIGJ5IHRoZSBhdXRob3JpemF0 aW9uIHNlcnZlci5cbiAgICAgIFRoaXMgc2Vzc2lvbiBrZXkgaGFzIGEgbGlmZXRpbWUgdGhhdCBj b3JyZXNwb25kcyB0byB0aGUgbGlmZXRpbWVcbiAgICAgIG9mIHRoZSBhY2Nlc3MgdG9rZW4sIGlz IGdlbmVyYXRlZCBieSB0aGUgYXV0aG9yaXphdGlvbiBzZXJ2ZXIgYW5kXG4gICAgICBib3VuZCB0 byB0aGUgYWNjZXNzIHRva2VuLlxuXG4gICBvICBraWQ6IEFuIGVwaGVtZXJhbCBhbmQgdW5pcXVl IGtleSBpZGVudGlmaWVyLiAgVGhlIGtpZCBhbHNvIGFsbG93c1xuICAgICAgdGhlIHJlc291cmNl IHNlcnZlciB0byBzZWxlY3QgdGhlIGFwcHJvcHJpYXRlIGtleWluZyBtYXRlcmlhbCBmb3JcbiAg ICAgIGRlY3J5cHRpb24uXG5cbiAgIG8gIEFTOiBBdXRob3JpemF0aW9uIHNlcnZlclxuXG4gICBT b21lIHNlY3Rpb25zIGluIHRoaXMgc3BlY2lmaWNhdGlvbiBzaG93IFdlYlJUQyBzZXJ2ZXIgYXMg dGhlXG4gICBhdXRob3JpemF0aW9uIHNlcnZlciBhbmQgY2xpZW50IGFzIHRoZSBXZWJSVEMgY2xp ZW50LCBob3dldmVyIFdlYlJUQ1xuICAgaXMgaW50ZW5kZWQgdG8gYmUgdXNlZCBmb3IgaWxsdXN0 cmF0aXZlIHB1cnBvc2Ugb25seS5cblxuMy4gIFNvbHV0aW9uIE92ZXJ2aWV3XG5cbiAgIFNUVU4g Y2xpZW50IGtub3dzIHRoYXQgaXQgY2FuIHVzZSBPQXV0aCAyLjAgd2l0aCB0aGUgdGFyZ2V0IFNU VU5cbiAgIHNlcnZlciBlaXRoZXIgdGhyb3VnaCBjb25maWd1cmF0aW9uIG9yIHdoZW4gaXQgcmVj ZWl2ZXMgdGhlIG5ldyBTVFVOXG4gICBhdHRyaWJ1dGUgVEhJUkQtUEFSVFktQVVUSE9SSVpBVElP TiBpbiB0aGUgZXJyb3IgcmVzcG9uc2Ugd2l0aCBhblxuICAgZXJyb3IgY29kZSBvZiA0MDEoVW5h dXRob3JpemVkKS5cblxuICAgVGhpcyBzcGVjaWZpY2F0aW9uIHVzZXMgdGhlIHRva2VuIHR5cGUg XCdBc3NlcnRpb25cJyAoYWthIHNlbGYtXG4gICBjb250YWluZWQgdG9rZW4pIGRlc2NyaWJlZCBp biBbUkZDNjgxOV0gd2hlcmUgYWxsIHRoZSBpbmZvcm1hdGlvblxuICAgbmVjZXNzYXJ5IHRvIGF1 dGhlbnRpY2F0ZSB0aGUgdmFsaWRpdHkgb2YgdGhlIHRva2VuIGlzIGNvbnRhaW5lZFxuICAgd2l0 aGluIHRoZSB0b2tlbiBpdHNlbGYuICBUaGlzIGFwcHJvYWNoIGhhcyB0aGUgYmVuZWZpdCBvZiBh dm9pZGluZyBhXG5cblxuXG5SZWRkeSwgZXQgYWwuICAgICAgICAgICBFeHBpcmVzIE9jdG9iZXIg MjMsIDIwMTUgICAgICAgICAgICAgICAgW1BhZ2UgM11cbl9cbkludGVybmV0LURyYWZ0ICAgICAg U1RVTiBmb3IgM3JkIHBhcnR5IEF1dGhvcml6YXRpb24gICAgICAgICAgQXByaWwgMjAxNVxuXG5c biAgIHByb3RvY29sIGJldHdlZW4gdGhlIFNUVU4gc2VydmVyIGFuZCB0aGUgYXV0aG9yaXphdGlv biBzZXJ2ZXIgZm9yXG4gICB0b2tlbiB2YWxpZGF0aW9uLCB0aHVzIHJlZHVjaW5nIGxhdGVuY3ku ICBUaGUgY29udGVudCBvZiB0aGUgdG9rZW4gaXNcbiAgIG9wYXF1ZSB0byB0aGUgY2xpZW50LiAg VGhlIGNsaWVudCBlbWJlZHMgdGhlIHRva2VuIHdpdGhpbiBhIFNUVU5cbiAgIHJlcXVlc3Qgc2Vu dCB0byB0aGUgU1RVTiBzZXJ2ZXIuICBPbmNlIHRoZSBTVFVOIHNlcnZlciBoYXMgZGV0ZXJtaW5l ZFxuICAgdGhlIHRva2VuIGlzIHZhbGlkLCBpdHMgc2VydmljZXMgYXJlIG9mZmVyZWQgZm9yIGEg ZGV0ZXJtaW5lZCBwZXJpb2RcbiAgIG9mIHRpbWUuICBBY2Nlc3MgdG9rZW4gaXNzdWVkIGJ5IHRo ZSBhdXRob3JpemF0aW9uIHNlcnZlciBpc1xuICAgZXhwbGFpbmVkIGluIFNlY3Rpb24gNi4yLiAg T0F1dGggMi4wIGluIFtSRkM2NzQ5XSBkZWZpbmVzIGZvdXIgZ3JhbnRcbiAgIHR5cGVzLiAgVGhp cyBzcGVjaWZpY2F0aW9uIHVzZXMgdGhlIE9BdXRoIDIuMCBncmFudCB0eXBlICJJbXBsaWNpdCJc biAgIGV4cGxhaW5lZCBpbiBzZWN0aW9uIDEuMy4yIG9mIFtSRkM2NzQ5XSB3aGVyZSB0aGUgY2xp ZW50IGlzIGlzc3VlZCBhblxuICAgYWNjZXNzIHRva2VuIGRpcmVjdGx5LiAgVGhlIHN0cmluZyBc J3N0dW5cJyBpcyBkZWZpbmVkIGJ5IHRoaXNcbiAgIHNwZWNpZmljYXRpb24gZm9yIHVzZSBhcyB0 aGUgT0F1dGggc2NvcGUgcGFyYW1ldGVyIChzZWUgc2VjdGlvbiAzLjNcbiAgIG9mIFtSRkM2NzQ5 XSkgZm9yIHRoZSBPQXV0aCB0b2tlbi5cblxuICAgVGhlIGV4YWN0IG1lY2hhbmlzbSB1c2VkIGJ5 IGEgY2xpZW50IHRvIG9idGFpbiBhIHRva2VuIGFuZCBvdGhlclxuICAgT0F1dGggMi4wIHBhcmFt ZXRlcnMgbGlrZSB0b2tlbiB0eXBlLCBtYWNfa2V5LCB0b2tlbiBsaWZldGltZSBhbmQga2lkXG4g ICBpcyBvdXRzaWRlIHRoZSBzY29wZSBvZiB0aGlzIGRvY3VtZW50LiAgQXBwZW5kaXggQiBwcm92 aWRlcyBhblxuICAgZXhhbXBsZSBkZXBsb3ltZW50IHNjZW5hcmlvIG9mIGludGVyYWN0aW9uIGJl dHdlZW4gdGhlIGNsaWVudCBhbmRcbiAgIGF1dGhvcml6YXRpb24gc2VydmVyIHRvIG9idGFpbiBh IHRva2VuIGFuZCBvdGhlciBPQXV0aCAyLjBcbiAgIHBhcmFtZXRlcnMuXG5cbiAgIENvbnNpZGVy IHRoZSBmb2xsb3dpbmcgZXhhbXBsZSB0aGF0IGlsbHVzdHJhdGVzIHRoZSB1c2Ugb2YgT0F1dGgg Mi4wXG4gICB0byBhY2hpZXZlIHRoaXJkIHBhcnR5IGF1dGhvcml6YXRpb24gZm9yIFRyYXZlcnNh bCBVc2luZyBSZWxheSBOQVRcbiAgIChUVVJOKSBbUkZDNTc2Nl0gLlxuXG4zLjEuICBUVVJOXG5c biAgIFRVUk4gYW4gZXh0ZW5zaW9uIHRvIHRoZSBTVFVOIHByb3RvY29sIGlzIG9mdGVuIHVzZWQg dG8gaW1wcm92ZSB0aGVcbiAgIGNvbm5lY3Rpdml0eSBvZiBQMlAgYXBwbGljYXRpb25zLiAgVFVS TiBlbnN1cmVzIHRoYXQgYSBjb25uZWN0aW9uIGNhblxuICAgYmUgZXN0YWJsaXNoZWQgZXZlbiB3 aGVuIG9uZSBvciBib3RoIHNpZGVzIGlzIGluY2FwYWJsZSBvZiBhIGRpcmVjdFxuICAgUDJQIGNv bm5lY3Rpb24uICBIb3dldmVyLCBhcyBhIHJlbGF5IHNlcnZpY2UsIGl0IGltcG9zZXMgYSBub250 cml2aWFsXG4gICBjb3N0IG9uIHRoZSBzZXJ2aWNlIHByb3ZpZGVyLiAgVGhlcmVmb3JlLCBhY2Nl c3MgdG8gYSBUVVJOIHNlcnZpY2UgaXNcbiAgIGFsbW9zdCBhbHdheXMgYWNjZXNzLWNvbnRyb2xs ZWQuICBJbiBvcmRlciB0byBhY2hpZXZlIHRoaXJkIHBhcnR5XG4gICBhdXRob3JpemF0aW9uLCBh IHJlc291cmNlIG93bmVyIGUuZy4gIFdlYlJUQyBzZXJ2ZXIsIGF1dGhvcml6ZXMgYVxuICAgVFVS TiBjbGllbnQgdG8gYWNjZXNzIHJlc291cmNlcyBvbiB0aGUgVFVSTiBzZXJ2ZXIuXG5cbiAgIElu IHRoaXMgZXhhbXBsZSwgYSByZXNvdXJjZSBvd25lciBpLmUuLCBXZWJSVEMgc2VydmVyLCBhdXRo b3JpemVzIGFcbiAgIFRVUk4gY2xpZW50IHRvIGFjY2VzcyByZXNvdXJjZXMgb24gYSBUVVJOIHNl cnZlci5cblxuXG5cblxuXG5cblxuXG5cblxuXG5cblxuXG5SZWRkeSwgZXQgYWwuICAgICAgICAg ICBFeHBpcmVzIE9jdG9iZXIgMjMsIDIwMTUgICAgICAgICAgICAgICAgW1BhZ2UgNF1cbl9cbklu dGVybmV0LURyYWZ0ICAgICAgU1RVTiBmb3IgM3JkIHBhcnR5IEF1dGhvcml6YXRpb24gICAgICAg ICAgQXByaWwgMjAxNVxuXG5cbiAgICAgICAgICAgICAgICAgKy0tLS0tLS0tLS0tLS0tLS0tLS0t LS0rLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLStcbiAgICAgICAgICAgICAgICAgXyAgICAg T0F1dGggMi4wICAgICAgICBfICAgICAgICAgICAgV2ViUlRDICAgICAgICAgIF9cbiAgICAgICAg ICAgICAgICAgKz09PT09PT09PT09PT09PT09PT09PT0rPT09PT09PT09PT09PT09PT09PT09PT09 PT09PStcbiAgICAgICAgICAgICAgICAgXyBDbGllbnQgICAgICAgICAgICAgICBfIFdlYlJUQyBj bGllbnQgICAgICAgICAgICAgIF9cbiAgICAgICAgICAgICAgICAgKy0tLS0tLS0tLS0tLS0tLS0t LS0tLS0rLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLStcbiAgICAgICAgICAgICAgICAgXyBS ZXNvdXJjZSBvd25lciAgICAgICBfIFdlYlJUQyBzZXJ2ZXIgICAgICAgICAgICAgIF9cbiAgICAg ICAgICAgICAgICAgKy0tLS0tLS0tLS0tLS0tLS0tLS0tLS0rLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLStcbiAgICAgICAgICAgICAgICAgXyBBdXRob3JpemF0aW9uIHNlcnZlciBfIEF1dGhv cml6YXRpb24gc2VydmVyICAgICAgIF9cbiAgICAgICAgICAgICAgICAgKy0tLS0tLS0tLS0tLS0t LS0tLS0tLS0rLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLStcbiAgICAgICAgICAgICAgICAg XyBSZXNvdXJjZSBzZXJ2ZXIgICAgICBfIFRVUk4gU2VydmVyICAgICAgICAgICAgICAgIF9cbiAg ICAgICAgICAgICAgICAgKy0tLS0tLS0tLS0tLS0tLS0tLS0tLS0rLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLStcblxuICAgICAgICAgRmlndXJlIDE6IE9BdXRoIHRlcm1pbm9sb2d5IG1hcHBl ZCB0byBXZWJSVEMgdGVybWlub2xvZ3lcblxuICAgVXNpbmcgdGhlIE9BdXRoIDIuMCBhdXRob3Jp emF0aW9uIGZyYW1ld29yaywgYSBXZWJSVEMgY2xpZW50ICh0aGlyZC1cbiAgIHBhcnR5IGFwcGxp Y2F0aW9uKSBvYnRhaW5zIGxpbWl0ZWQgYWNjZXNzIHRvIGEgVFVSTiAocmVzb3VyY2Ugc2VydmVy KVxuICAgb24gYmVoYWxmIG9mIHRoZSBXZWJSVEMgc2VydmVyIChyZXNvdXJjZSBvd25lciBvciBh dXRob3JpemF0aW9uXG4gICBzZXJ2ZXIpLiAgVGhlIFdlYlJUQyBjbGllbnQgcmVxdWVzdHMgYWNj ZXNzIHRvIHJlc291cmNlcyBjb250cm9sbGVkXG4gICBieSB0aGUgcmVzb3VyY2Ugb3duZXIgKFdl YlJUQyBzZXJ2ZXIpIGFuZCBob3N0ZWQgYnkgdGhlIHJlc291cmNlXG4gICBzZXJ2ZXIgKFRVUk4g c2VydmVyKS4gIFRoZSBXZWJSVEMgY2xpZW50IG9idGFpbnMgYWNjZXNzIHRva2VuLFxuICAgbGlm ZXRpbWUsIHNlc3Npb24ga2V5IGFuZCBraWQuICBUaGUgVFVSTiBjbGllbnQgY29udmV5cyB0aGUg YWNjZXNzXG4gICB0b2tlbiBhbmQgb3RoZXIgT0F1dGggMi4wIHBhcmFtZXRlcnMgbGVhcm50IGZy b20gdGhlIGF1dGhvcml6YXRpb25cbiAgIHNlcnZlciB0byB0aGUgVFVSTiBzZXJ2ZXIuICBUaGUg VFVSTiBzZXJ2ZXIgb2J0YWlucyB0aGUgc2Vzc2lvbiBrZXlcbiAgIGZyb20gdGhlIGFjY2VzcyB0 b2tlbi4gIFRoZSBUVVJOIHNlcnZlciB2YWxpZGF0ZXMgdGhlIHRva2VuLCBjb21wdXRlc1xuICAg dGhlIG1lc3NhZ2UgaW50ZWdyaXR5IG9mIHRoZSByZXF1ZXN0IGFuZCB0YWtlcyBhcHByb3ByaWF0 ZSBhY3Rpb25cbiAgIGkuZSwgcGVybWl0cyB0aGUgVFVSTiBjbGllbnQgdG8gY3JlYXRlIGFsbG9j YXRpb25zLiAgVGhpcyBpcyBzaG93biBpblxuICAgYW4gYWJzdHJhY3Qgd2F5IGluIEZpZ3VyZSAy LlxuXG5cblxuXG5cblxuXG5cblxuXG5cblxuXG5cblxuXG5cblxuXG5cblxuXG5cblxuUmVkZHks IGV0IGFsLiAgICAgICAgICAgRXhwaXJlcyBPY3RvYmVyIDIzLCAyMDE1ICAgICAgICAgICAgICAg IFtQYWdlIDVdXG5fXG5JbnRlcm5ldC1EcmFmdCAgICAgIFNUVU4gZm9yIDNyZCBwYXJ0eSBBdXRo b3JpemF0aW9uICAgICAgICAgIEFwcmlsIDIwMTVcblxuXG4gICAgICAgICAgICAgICAgICAgICAg ICAgICArLS0tLS0tLS0tLS0tLS0tK1xuICAgICAgICAgICAgICAgICAgICAgICAgICAgXyAgICAg ICAgICAgICAgICtfKioqKioqK1xuICAgICAgICAgICAgKy0tLS0tLS0tLS0tLS1fXyBBdXRob3Jp emF0aW9uIF8gICAgICAgKlxuICAgICAgICAgICAgXyAgICAgICAgICAgICAgXyBTZXJ2ZXIgICAg ICAgIF8gICAgICAgKlxuICAgICAgICAgICAgXyAgICstLS0tLS0tLS0tXyhXZWJSVEMgU2VydmVy KV8gICAgICAgKiAgQVMtUlMsXG4gICAgICAgICAgICBfICAgXyAgICAgICAgICBfICAgICAgICAg ICAgICAgXyAgICAgICAqICBBVVRIIGtleXNcbiAgICgyKSAgICAgIF8gICBfICAgICAgICAgICAr LS0tLS0tLS0tLS0tLS0tKyAgICAgICogICAoMSlcbiAgIEFjY2VzcyAgIF8gICBfICAoMykgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICpcbiAgIFRva2VuICAgIF8gICBfIEFjY2VzcyBUb2tl biAgICAgICAgICAgICAgICAgICAgICpcbiAgIFJlcXVlc3QgIF8gICBfICAgICsgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICpcbiAgICAgICAgICAgIF8gICBfIFNlc3Npb24gS2V5ICAgICAg ICAgICAgICAgICAgICAgICpcbiAgICAgICAgICAgIF8gICBfICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICpcbiAgICAgICAgICAgIF8gICBWICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgIFZcbiAgICAgICAgKy0tLS0tLS0rLS0tKyAgICAgICAgICAgICAgICAgICAgICAg Ky0rLS0tLT0tLS0tLStcbiAgICAgICAgXyAgICAgICAgICAgXyAgICAgICAgICg0KSAgICAgICAg ICAgXyAgICAgICAgICAgIF9cbiAgICAgICAgXyAgICAgICAgICAgXyBUVVJOIFJlcXVlc3QgKyBB Y2Nlc3MgXyAgICAgICAgICAgIF9cbiAgICAgICAgXyBXZWJSVEMgICAgXyBUb2tlbiAgICAgICAg ICAgICAgICAgXyBUVVJOICAgICAgIF9cbiAgICAgICAgXyBDbGllbnQgICAgXy0tLS0tLS0tLS0t LS0tLS0tLS0tLS1fXyBTZXJ2ZXIgICAgIF9cbiAgICAgICAgXyAoQWxpY2UpICAgXyBBbGxvY2F0 ZSBSZXNwb25zZSAoNSkgXyAgICAgICAgICAgIF9cbiAgICAgICAgXyAgICAgICAgICAgX18tLS0t LS0tLS0tLS0tLS0tLS0tLS0tXyAgICAgICAgICAgIF9cbiAgICAgICAgKy0tLS0tLS0tLS0tKyAg ICAgICAgICAgICAgICAgICAgICAgKy0tLS0tLS0tLS0tLStcblxuICAgVXNlciA6IEFsaWNlXG4g ICAqKioqOiBPdXQtb2YtQmFuZCBMb25nLVRlcm0gS2V5IEVzdGFibGlzaG1lbnRcblxuICAgICAg ICAgICAgICAgICAgICAgICAgICBGaWd1cmUgMjogSW50ZXJhY3Rpb25zXG5cbiAgIEluIHRoZSBi ZWxvdyBmaWd1cmUsIHRoZSBjbGllbnQgc2VuZHMgYW4gQWxsb2NhdGUgcmVxdWVzdCB0byB0aGVc biAgIHNlcnZlciB3aXRob3V0IGNyZWRlbnRpYWxzLiAgU2luY2UgdGhlIHNlcnZlciByZXF1aXJl cyB0aGF0IGFsbFxuICAgcmVxdWVzdHMgYmUgYXV0aGVudGljYXRlZCB1c2luZyBPQXV0aCAyLjAs IHRoZSBzZXJ2ZXIgcmVqZWN0cyB0aGVcbiAgIHJlcXVlc3Qgd2l0aCBhIDQwMSAoVW5hdXRob3Jp emVkKSBlcnJvciBjb2RlIGFuZCBTVFVOIGF0dHJpYnV0ZVxuICAgVEhJUkQtUEFSVFktQVVUSE9S SVpBVElPTi4gIFRoZSBXZWJSVEMgY2xpZW50IG9idGFpbnMgYWNjZXNzIHRva2VuXG4gICBmcm9t IHRoZSBXZWJSVEMgc2VydmVyIGFuZCB0aGVuIHRyaWVzIGFnYWluLCB0aGlzIHRpbWUgaW5jbHVk aW5nXG4gICBhY2Nlc3MgdG9rZW4uICBUaGlzIHRpbWUsIHRoZSBzZXJ2ZXIgdmFsaWRhdGVzIHRo ZSB0b2tlbiwgYWNjZXB0cyB0aGVcbiAgIEFsbG9jYXRlIHJlcXVlc3QgYW5kIHJldHVybnMgYW4g QWxsb2NhdGUgc3VjY2VzcyByZXNwb25zZSBjb250YWluaW5nXG4gICAoYW1vbmdzdCBvdGhlciB0 aGluZ3MpIHRoZSByZWxheWVkIHRyYW5zcG9ydCBhZGRyZXNzIGFzc2lnbmVkIHRvIHRoZVxuICAg YWxsb2NhdGlvbi5cblxuXG5cblxuXG5cblxuXG5cblxuXG5cblxuXG5SZWRkeSwgZXQgYWwuICAg ICAgICAgICBFeHBpcmVzIE9jdG9iZXIgMjMsIDIwMTUgICAgICAgICAgICAgICAgW1BhZ2UgNl1c bl9cbkludGVybmV0LURyYWZ0ICAgICAgU1RVTiBmb3IgM3JkIHBhcnR5IEF1dGhvcml6YXRpb24g ICAgICAgICAgQXByaWwgMjAxNVxuXG5cbiAgICstLS0tLS0tLS0tLS0tLS0tLS0tKyAgICAgICAg ICAgICAgICAgICAgICAgICArLS0tLS0tLS0rICArLS0tLS0tLS0tK1xuICAgXyAuLi4uLi4uLi4g IFRVUk4gICBfICAgICAgICAgICAgICAgICAgICAgICAgIF8gIFRVUk4gIF8gIF8gIFdlYlJUQyBf XG4gICBfIC5XZWJSVEMgLiAgQ2xpZW50IF8gICAgICAgICAgICAgICAgICAgICAgICAgXyAgICAg ICAgXyAgXyAgICAgICAgIF9cbiAgIF8gLkNsaWVudCAuICAgICAgICAgXyAgICAgICAgICAgICAg ICAgICAgICAgICBfIFNlcnZlciBfICBfICBTZXJ2ZXIgX1xuICAgXyAuLi4uLi4uLi4gICAgICAg ICBfICAgICAgICAgICAgICAgICAgICAgICAgIF8gICAgICAgIF8gIF8gICAgICAgICBfXG4gICAr LS0tLS0tLS0tLS0tLS0tLS0tLSsgICAgICAgICAgICAgICAgICAgICAgICAgKy0tLS0tLS0tKyAg Ky0tLS0tLS0tLStcbiAgICAgXyAgICAgICBfICAgICAgICAgICBBbGxvY2F0ZSByZXF1ZXN0ICAg ICAgICAgICAgICAgIF8gICAgICAgICBfXG4gICAgIF8gICAgICAgXy0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLV9fICAgICAgICAgX1xuICAgICBfICAgICAgIF8gICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgXyAgICAgICAgIF9cbiAgICAg XyAgICAgICBfICAgICAgICAgQWxsb2NhdGUgZXJyb3IgcmVzcG9uc2UgICAgICAgICAgIF8gICAg ICAgICBfXG4gICAgIF8gICAgICAgXyAgICAgICAgICg0MDEgVW5hdXRob3JpemVkKSAgICAgICAg ICAgICAgICBfICAgICAgICAgX1xuICAgICBfICAgICAgIF9fLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tXyAgICAgICAgIF9cbiAgICAgXyAgICAgICBfICAgICAgICAg VEhJUkQtUEFSVFktQVVUSE9SSVpBVElPTiAgICAgICAgIF8gICAgICAgICBfXG4gICAgIF8gICAg ICAgXyAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICBfICAgICAgICAg X1xuICAgICBfICAgICAgIF8gICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgXyAgICAgICAgIF9cbiAgICAgXyAgICAgICBfICAgICAgSFRUUCBSZXF1ZXN0IGZvciB0b2tl biAgICAgICAgICAgICAgIF8gICAgICAgICBfXG4gICAgIF8tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS1fX1xuICAgICBfICAgICAgIF8g ICAgICBIVFRQIFJlc3BvbnNlIHdpdGggdG9rZW4gcGFyYW1ldGVycyAgXyAgICAgICAgIF9cbiAg ICAgX18tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS1fXG4gICAgIF9PQXV0aCAyLjAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICBfICAgICAgICAgX1xuICAgICAgQXR0cmlidXRlcyAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgXyAgICAgICAgIF9cbiAgICAgXy0tLS0tLV9fICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIF8gICAgICAgICBfXG4gICAgIF8g ICAgICAgXyAgICBBbGxvY2F0ZSByZXF1ZXN0IEFDQ0VTUy1UT0tFTiAgICAgICAgICBfICAgICAg ICAgX1xuICAgICBfICAgICAgIF8tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS1fXyAgICAgICAgIF9cbiAgICAgXyAgICAgICBfICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgIF8gICAgICAgICBfXG4gICAgIF8gICAgICAgXyAgICAgICAgIEFs bG9jYXRlIHN1Y2Nlc3MgcmVzcG9uc2UgICAgICAgICBfICAgICAgICAgX1xuICAgICBfICAgICAg IF9fLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tXyAgICAgICAgIF9c biAgICAgXyAgICAgICBfICAgICAgICAgICAgIFRVUk4gTWVzc2FnZXMgICAgICAgICAgICAgICAg IF8gICAgICAgICBfXG4gICAgIF8gICAgICAgXyAgICAgIC8vLy8vLyBpbnRlZ3JpdHkgcHJvdGVj dGVkIC8vLy8vLyAgICBfICAgICAgICAgX1xuICAgICBfICAgICAgIF8gICAgICAvLy8vLy8gaW50 ZWdyaXR5IHByb3RlY3RlZCAvLy8vLy8gICAgXyAgICAgICAgIF9cbiAgICAgXyAgICAgICBfICAg ICAgLy8vLy8vIGludGVncml0eSBwcm90ZWN0ZWQgLy8vLy8vICAgIF8gICAgICAgICBfXG5cbiAg ICAgICAgICAgICAgICAgRmlndXJlIDM6IFRVUk4gVGhpcmQgUGFydHkgQXV0aG9yaXphdGlvblxu XG40LiAgT2J0YWluaW5nIGEgVG9rZW4gVXNpbmcgT0F1dGhcblxuICAgQSBTVFVOIGNsaWVudCBu ZWVkcyB0byBrbm93IHRoZSBhdXRoZW50aWNhdGlvbiBjYXBhYmlsaXR5IG9mIHRoZSBTVFVOXG4g ICBzZXJ2ZXIgYmVmb3JlIGRlY2lkaW5nIHRvIHVzZSB0aGlyZCBwYXJ0eSBhdXRob3JpemF0aW9u LiAgQSBTVFVOXG4gICBjbGllbnQgaW5pdGlhbGx5IG1ha2VzIGEgcmVxdWVzdCB3aXRob3V0IGFu eSBhdXRob3JpemF0aW9uLiAgSWYgdGhlXG4gICBTVFVOIHNlcnZlciBzdXBwb3J0cyB0aGlyZCBw YXJ0eSBhdXRob3JpemF0aW9uLCBpdCB3aWxsIHJldHVybiBhblxuICAgZXJyb3IgbWVzc2FnZSBp bmRpY2F0aW5nIHRoYXQgdGhlIGNsaWVudCBjYW4gYXV0aG9yaXplIHRvIHRoZSBTVFVOXG4gICBz ZXJ2ZXIgdXNpbmcgYW4gT0F1dGggMi4wIGFjY2VzcyB0b2tlbi4gIFRoZSBTVFVOIHNlcnZlciBp bmNsdWRlcyBhblxuICAgRVJST1ItQ09ERSBhdHRyaWJ1dGUgd2l0aCBhIHZhbHVlIG9mIDQwMSAo VW5hdXRob3JpemVkKSwgYSBub25jZVxuICAgdmFsdWUgaW4gYSBOT05DRSBhdHRyaWJ1dGUgYW5k IGEgU09GVFdBUkUgYXR0cmlidXRlIHRoYXQgZ2l2ZXNcbiAgIGluZm9ybWF0aW9uIGFib3V0IHRo ZSBTVFVOIHNlcnZlclwncyBzb2Z0d2FyZS4gIFRoZSBTVFVOIHNlcnZlciBhbHNvXG4gICBpbmNs dWRlcyB0aGUgYWRkaXRpb25hbCBTVFVOIGF0dHJpYnV0ZSBUSElSRC1QQVJUWS1BVVRIT1JJWkFU SU9OXG4gICBzaWduYWxpbmcgdGhlIFNUVU4gY2xpZW50IHRoYXQgdGhlIFNUVU4gc2VydmVyIHN1 cHBvcnRzIHRoaXJkIHBhcnR5XG4gICBhdXRob3JpemF0aW9uLlxuXG5cblxuUmVkZHksIGV0IGFs LiAgICAgICAgICAgRXhwaXJlcyBPY3RvYmVyIDIzLCAyMDE1ICAgICAgICAgICAgICAgIFtQYWdl IDddXG5fXG5JbnRlcm5ldC1EcmFmdCAgICAgIFNUVU4gZm9yIDNyZCBwYXJ0eSBBdXRob3JpemF0 aW9uICAgICAgICAgIEFwcmlsIDIwMTVcblxuXG4gICBOb3RlOiBBbiBpbXBsZW1lbnRhdGlvbiBt YXkgY2hvb3NlIHRvIGNvbnRhY3QgdGhlIGF1dGhvcml6YXRpb25cbiAgIHNlcnZlciB0byBvYnRh aW4gYSB0b2tlbiBldmVuIGJlZm9yZSBpdCBtYWtlcyBhIFNUVU4gcmVxdWVzdCwgaWYgaXRcbiAg IGtub3dzIHRoZSBzZXJ2ZXIgZGV0YWlscyBiZWZvcmUgaGFuZC4gIEZvciBleGFtcGxlLCBvbmNl IGEgY2xpZW50IGhhc1xuICAgbGVhcm50IHRoYXQgYSBTVFVOIHNlcnZlciBzdXBwb3J0cyB0aGly ZCBwYXJ0eSBhdXRob3JpemF0aW9uIGZyb20gYVxuICAgYXV0aG9yaXphdGlvbiBzZXJ2ZXIsIHRo ZSBjbGllbnQgY2FuIG9idGFpbiB0aGUgdG9rZW4gYmVmb3JlIG1ha2luZ1xuICAgc3Vic2VxdWVu dCBTVFVOIHJlcXVlc3RzLlxuXG40LjEuICBLZXkgRXN0YWJsaXNobWVudFxuXG4gICBJbiB0aGlz IG1vZGVsIHRoZSBTVFVOIHNlcnZlciB3b3VsZCBub3QgYXV0aGVudGljYXRlIHRoZSBjbGllbnRc biAgIGl0c2VsZiBidXQgd291bGQgcmF0aGVyIHZlcmlmeSB3aGV0aGVyIHRoZSBjbGllbnQga25v d3MgdGhlIHNlc3Npb25cbiAgIGtleSBhc3NvY2lhdGVkIHdpdGggYSBzcGVjaWZpYyBhY2Nlc3Mg dG9rZW4uICBFeGFtcGxlIG9mIHRoaXNcbiAgIGFwcHJvYWNoIGNhbiBiZSBmb3VuZCB3aXRoIHRo ZSBPQXV0aCAyLjAgUHJvb2Ytb2YtUG9zc2Vzc2lvbiAoUG9QKVxuICAgU2VjdXJpdHkgQXJjaGl0 ZWN0dXJlIFtJLUQuaWV0Zi1vYXV0aC1wb3AtYXJjaGl0ZWN0dXJlXS4gIFRoZVxuICAgYXV0aG9y aXphdGlvbiBzZXJ2ZXIgc2hhcmVzIGEgbG9uZy10ZXJtIHNlY3JldCAoSykgd2l0aCB0aGUgU1RV TlxuICAgc2VydmVyLiAgV2hlbiB0aGUgY2xpZW50IHJlcXVlc3RzIGFuIGFjY2VzcyB0b2tlbiB0 aGUgYXV0aG9yaXphdGlvblxuICAgc2VydmVyIGNyZWF0ZXMgYSBmcmVzaCBhbmQgdW5pcXVlIHNl c3Npb24ga2V5IChtYWNfa2V5KSBhbmQgcGxhY2VzIGl0XG4gICBpbnRvIHRoZSB0b2tlbiBlbmNy eXB0ZWQgd2l0aCB0aGUgbG9uZyB0ZXJtIHNlY3JldC4gIFN5bW1ldHJpY1xuICAgY3J5cHRvZ3Jh cGh5IE1VU1QgYmUgY2hvc2VuIHRvIGVuc3VyZSB0aGF0IHRoZSBzaXplIG9mIGVuY3J5cHRlZFxu ICAgdG9rZW4gaXMgbm90IGxhcmdlIGJlY2F1c2UgdXNhZ2Ugb2YgYXN5bW1ldHJpYyBjcnlwdG9n cmFwaHkgd2lsbFxuICAgcmVzdWx0IGluIGxhcmdlIGVuY3J5cHRlZCB0b2tlbnMgd2hpY2ggbWF5 IG5vdCBmaXQgaW50byBhIHNpbmdsZSBTVFVOXG4gICBtZXNzYWdlLlxuXG4gICBUaGUgU1RVTiBz ZXJ2ZXIgYW5kIGF1dGhvcml6YXRpb24gc2VydmVyIGNhbiBlc3RhYmxpc2ggYSBzeW1tZXRyaWNc biAgIGtleSAoSykgYW5kIGNlcnRhaW4gYXV0aGVudGljYXRlZCBlbmNyeXB0aW9uIGFsZ29yaXRo bSwgdXNpbmcgYW4gb3V0XG4gICBvZiBiYW5kIG1lY2hhbmlzbS4gIFRoZSBTVFVOIGFuZCBhdXRo b3JpemF0aW9uIHNlcnZlcnMgTVVTVCBlc3RhYmxpc2hcbiAgIEsgb3ZlciBhbiBhdXRoZW50aWNh dGVkIHNlY3VyZSBjaGFubmVsLiAgSWYgQXV0aGVudGljYXRlZCBFbmNyeXB0aW9uXG4gICB3aXRo IEFFUy1DQkMgYW5kIEhNQUMtU0hBIChkZWZpbmVkIGluXG4gICBbSS1ELm1jZ3Jldy1hZWFkLWFl cy1jYmMtaG1hYy1zaGEyXSkgaXMgdXNlZCB0aGVuIHRoZSBBUy1SUyBhbmQgQVVUSFxuICAga2V5 cyB3aWxsIGJlIGRlcml2ZWQgZnJvbSBLLiAgVGhlIEFTLVJTIGtleSBpcyB1c2VkIGZvciBlbmNy eXB0aW5nXG4gICB0aGUgc2VsZi1jb250YWluZWQgdG9rZW4gYW5kIHRoZSBtZXNzYWdlIGludGVn cml0eSBvZiB0aGUgZW5jcnlwdGVkXG4gICB0b2tlbiBpcyBjYWxjdWxhdGVkIHVzaW5nIHRoZSBB VVRIIGtleS4gIElmIEF1dGhlbnRpY2F0ZWQgRW5jcnlwdGlvblxuICAgd2l0aCBBc3NvY2lhdGVk IERhdGEgKEFFQUQpIGFsZ29yaXRobSBkZWZpbmVkIGluIFtSRkM1MTE2XSBpcyB1c2VkXG4gICB0 aGVuIHRoZXJlIGlzIG5vIG5lZWQgdG8gZ2VuZXJhdGUgdGhlIEFVVEgga2V5IGFuZCBBUy1SUyBr ZXkgd2lsbFxuICAgaGF2ZSB0aGUgc2FtZSB2YWx1ZSBhcyBLLlxuXG4gICBUaGUgcHJvY2VkdXJl IGZvciBlc3RhYmxpc2htZW50IG9mIHRoZSBzeW1tZXRyaWMga2V5IGlzIG91dHNpZGUgdGhlXG4g ICBzY29wZSBvZiB0aGlzIHNwZWNpZmljYXRpb24sIGFuZCB0aGlzIHNwZWNpZmljYXRpb24gZG9l cyBub3QgbWFuZGF0ZVxuICAgc3VwcG9ydCBvZiBhbnkgZ2l2ZW4gbWVjaGFuaXNtLiAgU2VjdGlv biA0LjEuMSBhbmQgU2VjdGlvbiA0LjEuMiBzaG93XG4gICBleGFtcGxlcyBvZiBtZWNoYW5pc21z IHRoYXQgY2FuIGJlIHVzZWQuXG5cbjQuMS4xLiAgSFRUUCBpbnRlcmFjdGlvbnNcblxuICAgVGhl IFNUVU4gYW5kIEFTIHNlcnZlcnMgY291bGQgY2hvb3NlIHRvIHVzZSBSRVNUIEFQSSBvdmVyIEhU VFBTIHRvXG4gICBlc3RhYmxpc2ggYSBzeW1tZXRyaWMga2V5LiAgSFRUUFMgTVVTVCBiZSB1c2Vk IGZvciBtdXR1YWxcbiAgIGF1dGhlbnRpY2F0aW9uIGFuZCBjb25maWRlbnRpYWxpdHkuICBUbyBy ZXRyaWV2ZSBhIG5ldyBzeW1tZXRyaWMga2V5LFxuICAgdGhlIFNUVU4gc2VydmVyIG1ha2VzIGFu IEhUVFAgR0VUIHJlcXVlc3QgdG8gdGhlIGF1dGhvcml6YXRpb25cbiAgIHNlcnZlciwgc3BlY2lm eWluZyBTVFVOIGFzIHRoZSBzZXJ2aWNlIHRvIGFsbG9jYXRlIHRoZSBzeW1tZXRyaWMga2V5c1xu XG5cblxuUmVkZHksIGV0IGFsLiAgICAgICAgICAgRXhwaXJlcyBPY3RvYmVyIDIzLCAyMDE1ICAg ICAgICAgICAgICAgIFtQYWdlIDhdXG5fXG5JbnRlcm5ldC1EcmFmdCAgICAgIFNUVU4gZm9yIDNy ZCBwYXJ0eSBBdXRob3JpemF0aW9uICAgICAgICAgIEFwcmlsIDIwMTVcblxuXG4gICBmb3IsIGFu ZCBzcGVjaWZ5aW5nIHRoZSBuYW1lIG9mIHRoZSBTVFVOIHNlcnZlci4gIFRoZSByZXNwb25zZSBp c1xuICAgcmV0dXJuZWQgd2l0aCBjb250ZW50LXR5cGUgImFwcGxpY2F0aW9uL2pzb24iLCBhbmQg Y29uc2lzdHMgb2YgYVxuICAgSmF2YVNjcmlwdCBPYmplY3QgTm90YXRpb24gKEpTT04pIFtSRkM3 MTU5XSBvYmplY3QgY29udGFpbmluZyB0aGVcbiAgIHN5bW1ldHJpYyBrZXkuXG5cbiAgIFJlcXVl c3RcbiAgIC0tLS0tLS1cblxuICAgc2VydmljZSAtIHNwZWNpZmllcyB0aGUgZGVzaXJlZCBzZXJ2 aWNlICh0dXJuKVxuICAgbmFtZSAgICAtICBTVFVOIHNlcnZlciBuYW1lIGJlIGFzc29jaWF0ZWQg d2l0aCB0aGUga2V5XG5cbiAgIGV4YW1wbGU6IEdFVCAvP3NlcnZpY2U9c3R1bl9uYW1lPXR1cm4x QGV4YW1wbGUuY29tXG5cblxuICAgUmVzcG9uc2VcbiAgIC0tLS0tLS0tXG5cbiAgIGsgLSBMb25n LXRlcm0ga2V5IChLKVxuICAgZXhwIC0gaWRlbnRpZmllcyB0aGUgdGltZSBhZnRlciB3aGljaCB0 aGUga2V5IGV4cGlyZXMuXG5cblxuICAgZXhhbXBsZTpcbiAgIHtcbiAgICAgICJrIiA6XG4gICAi RVNJelJGVm1kNGlaQUJFaU0wUlZaZ0tuNldqTGFUQzFGWEFnaFJNVlR6a0JHTmFhTjQ5NjUyM1dJ SVNLZXJMaSIsXG4gICAgICAiZXhwIiA6IDEzMDA4MTkzODAsXG4gICAgICAia2lkIiA6IjIyQklq eFU5M2gvSWd3RWIiXG4gICAgICAiZW5jIiA6IEEyNTZHQ01cbiAgICAgfVxuXG4gICBUaGUgYXV0 aG9yaXphdGlvbiBzZXJ2ZXIgbXVzdCBhbHNvIHNpZ25hbCBraWQgdG8gdGhlIFNUVU4gc2VydmVy XG4gICB3aGljaCB3aWxsIGJlIHVzZWQgdG8gc2VsZWN0IHRoZSBhcHByb3ByaWF0ZSBrZXlpbmcg bWF0ZXJpYWwgZm9yXG4gICBkZWNyeXB0aW9uLiAgVGhlIHBhcmFtZXRlciAiayIgaXMgZGVmaW5l ZCBpbiBTZWN0aW9uIDYuNC4xIG9mXG4gICBbSS1ELmlldGYtam9zZS1qc29uLXdlYi1hbGdvcml0 aG1zXSwgImVuYyIgaXMgZGVmaW5lZCBpblxuICAgU2VjdGlvbiA0LjEuMiBvZiBbSS1ELmlldGYt am9zZS1qc29uLXdlYi1lbmNyeXB0aW9uXSwgImtpZCIgaXNcbiAgIGRlZmluZWQgaW4gU2VjdGlv biA0LjEuNCBvZiBbSS1ELmlldGYtam9zZS1qc29uLXdlYi1zaWduYXR1cmVdIGFuZFxuICAgImV4 cCIgaXMgZGVmaW5lZCBpbiBTZWN0aW9uIDQuMS40IG9mIFtJLUQuaWV0Zi1vYXV0aC1qc29uLXdl Yi10b2tlbl0uXG4gICBBMjU2R0NNIGFuZCBvdGhlciBhdXRoZW50aWNhdGVkIGVuY3J5cHRpb24g YWxnb3JpdGhtcyBhcmUgZGVmaW5lZCBpblxuICAgc2VjdGlvbiA1LjEgb2YgW0ktRC5pZXRmLWpv c2UtanNvbi13ZWItYWxnb3JpdGhtc10uICBBIFNUVU4gc2VydmVyXG4gICBhbmQgYXV0aG9yaXph dGlvbiBzZXJ2ZXIgaW1wbGVtZW50YXRpb24gTVVTVCBzdXBwb3J0IEEyNTZHQ00gYXMgdGhlXG4g ICBhdXRoZW50aWNhdGVkIGVuY3J5cHRpb24gYWxnb3JpdGhtLlxuXG4gICBJZiBBMjU2Q0JDLUhT NTEyIGRlZmluZWQgaW4gW0ktRC5pZXRmLWpvc2UtanNvbi13ZWItYWxnb3JpdGhtc10gaXNcbiAg IHVzZWQgdGhlbiB0aGUgQVMtUlMgYW5kIEFVVEgga2V5cyBhcmUgZGVyaXZlZCBmcm9tIEsgdXNp bmcgdGhlXG4gICBtZWNoYW5pc20gZXhwbGFpbmVkIGluIHNlY3Rpb24gNS4yLjIuMSBvZlxuICAg W0ktRC5pZXRmLWpvc2UtanNvbi13ZWItYWxnb3JpdGhtc10uICBJbiB0aGlzIGNhc2UgQVMtUlMg a2V5IGxlbmd0aFxuICAgbXVzdCBiZSAyNTYtYml0LCBBVVRIIGtleSBsZW5ndGggbXVzdCBiZSAy NTYtYml0IChzZWN0aW9uIDIuNiBvZlxuICAgW1JGQzQ4NjhdKS5cblxuXG5cblJlZGR5LCBldCBh bC4gICAgICAgICAgIEV4cGlyZXMgT2N0b2JlciAyMywgMjAxNSAgICAgICAgICAgICAgICBbUGFn ZSA5XVxuX1xuSW50ZXJuZXQtRHJhZnQgICAgICBTVFVOIGZvciAzcmQgcGFydHkgQXV0aG9yaXph dGlvbiAgICAgICAgICBBcHJpbCAyMDE1XG5cblxuNC4xLjIuICBNYW51YWwgcHJvdmlzaW9uaW5n XG5cbiAgIFRoZSBTVFVOIGFuZCBBUyBzZXJ2ZXJzIGNvdWxkIGJlIG1hbnVhbGx5IGNvbmZpZ3Vy ZWQgd2l0aCBhIHN5bW1ldHJpY1xuICAga2V5IChLKSwgYXV0aGVudGljYXRlZCBlbmNyeXB0aW9u IGFsZ29yaXRobSBhbmQga2lkLlxuXG4gICBOb3RlIDogVGhlIG1lY2hhbmlzbSBzcGVjaWZpZWQg aW4gU2VjdGlvbiA0LjEuMiByZXF1aXJlc1xuICAgY29uZmlndXJhdGlvbiB0byBjaGFuZ2UgdGhl IHN5bW1ldHJpYyBrZXkgKEspIGFuZC9vciBhdXRoZW50aWNhdGVkXG4gICBlbmNyeXB0aW9uIGFs Z29yaXRobS4gIEhlbmNlIGEgU1RVTiBzZXJ2ZXIgYW5kIGF1dGhvcml6YXRpb24gc2VydmVyXG4g ICBpbXBsZW1lbnRhdGlvbiBTSE9VTEQgc3VwcG9ydCBSRVNUIGV4cGxhaW5lZCBpbiBTZWN0aW9u IDQuMS4xLlxuXG41LiAgRm9ybWluZyBhIFJlcXVlc3RcblxuICAgV2hlbiBhIFNUVU4gc2VydmVy IHJlc3BvbmRzIHRoYXQgdGhpcmQgcGFydHkgYXV0aG9yaXphdGlvbiBpc1xuICAgcmVxdWlyZWQs IGEgU1RVTiBjbGllbnQgcmUtYXR0ZW1wdHMgdGhlIHJlcXVlc3QsIHRoaXMgdGltZSBpbmNsdWRp bmdcbiAgIGFjY2VzcyB0b2tlbiBhbmQga2lkIHZhbHVlcyBpbiBBQ0NFU1MtVE9LRU4gYW5kIFVT RVJOQU1FIFNUVU5cbiAgIGF0dHJpYnV0ZXMuICBUaGUgU1RVTiBjbGllbnQgaW5jbHVkZXMgYSBN RVNTQUdFLUlOVEVHUklUWSBhdHRyaWJ1dGVcbiAgIGFzIHRoZSBsYXN0IGF0dHJpYnV0ZSBpbiB0 aGUgbWVzc2FnZSBvdmVyIHRoZSBjb250ZW50cyBvZiB0aGUgU1RVTlxuICAgbWVzc2FnZS4gIFRo ZSBITUFDIGZvciB0aGUgTUVTU0FHRS1JTlRFR1JJVFkgYXR0cmlidXRlIGlzIGNvbXB1dGVkIGFz XG4gICBkZXNjcmliZWQgaW4gc2VjdGlvbiAxNS40IG9mIFtSRkM1Mzg5XSB3aGVyZSB0aGUgbWFj X2tleSBpcyB1c2VkIGFzXG4gICB0aGUgaW5wdXQga2V5IGZvciB0aGUgSE1BQyBjb21wdXRhdGlv bi4gIFRoZSBTVFVOIGNsaWVudCBhbmQgc2VydmVyXG4gICB3aWxsIHVzZSB0aGUgbWFjX2tleSB0 byBjb21wdXRlIHRoZSBtZXNzYWdlIGludGVncml0eSBhbmQgZG8gbm90XG4gICBwZXJmb3JtIE1E NSBoYXNoIG9uIHRoZSBjcmVkZW50aWFscy5cblxuNi4gIFNUVU4gQXR0cmlidXRlc1xuXG4gICBU aGUgZm9sbG93aW5nIG5ldyBTVFVOIGF0dHJpYnV0ZXMgYXJlIGludHJvZHVjZWQgYnkgdGhpc1xu ICAgc3BlY2lmaWNhdGlvbiB0byBhY2NvbXBsaXNoIHRoaXJkIHBhcnR5IGF1dGhvcml6YXRpb24u XG5cbjYuMS4gIFRISVJELVBBUlRZLUFVVEhPUklaQVRJT05cblxuICAgVGhpcyBhdHRyaWJ1dGUg aXMgdXNlZCBieSB0aGUgU1RVTiBzZXJ2ZXIgdG8gaW5mb3JtIHRoZSBjbGllbnQgdGhhdFxuICAg aXQgc3VwcG9ydHMgdGhpcmQgcGFydHkgYXV0aG9yaXphdGlvbi4gIFRoaXMgYXR0cmlidXRlIHZh bHVlIGNvbnRhaW5zXG4gICB0aGUgU1RVTiBzZXJ2ZXIgbmFtZS4gIFRoZSBTVFVOIHNlcnZlciBt YXkgaGF2ZSB0aWUtdXBzIHdpdGggbXVsdGlwbGVcbiAgIGF1dGhvcml6YXRpb24gc2VydmVycyBh bmQgdmljZSB2ZXJzYSwgc28gdGhlIGNsaWVudCBNVVNUIHByb3ZpZGUgdGhlXG4gICBTVFVOIHNl cnZlciBuYW1lIHRvIHRoZSBhdXRob3JpemF0aW9uIHNlcnZlciBzbyB0aGF0IGl0IGNhbiBzZWxl Y3RcbiAgIHRoZSBhcHByb3ByaWF0ZSBrZXlpbmcgbWF0ZXJpYWwgdG8gZ2VuZXJhdGUgdGhlIHNl bGYtY29udGFpbmVkIHRva2VuLlxuICAgVGhlIFRISVJELVBBUlRZLUFVVEhPUklaQVRJT04gYXR0 cmlidXRlIGlzIGEgY29tcHJlaGVuc2lvbi1vcHRpb25hbFxuICAgYXR0cmlidXRlIChzZWUgU2Vj dGlvbiAxNSBmcm9tIFtSRkM1Mzg5XSkuICBJZiB0aGUgY2xpZW50IGlzIGFibGUgdG9cbiAgIGNv bXByZWhlbmQgVEhJUkQtUEFSVFktQVVUSE9SSVpBVElPTiBpdCBNVVNUIGVuc3VyZSB0aGF0IHRo aXJkIHBhcnR5XG4gICBhdXRob3JpemF0aW9uIHRha2VzIHByZWNlZGVuY2Ugb3ZlciBmaXJzdCBw YXJ0eSBhdXRoZW50aWNhdGlvblxuICAgKGV4cGxhaW5lZCBpbiBzZWN0aW9uIDEwIG9mIFtSRkM1 Mzg5XSkuICBJZiB0aGUgY2xpZW50IGRvZXMgbm90XG4gICBzdXBwb3J0IG9yIGlzIG5vdCBjYXBh YmxlIG9mIGRvaW5nIHRoaXJkIHBhcnR5IGF1dGhvcml6YXRpb24gdGhlbiBpdFxuICAgZGVmYXVs dHMgdG8gZmlyc3QgcGFydHkgYXV0aGVudGljYXRpb24uXG5cblxuXG5cblxuXG5cblxuUmVkZHks IGV0IGFsLiAgICAgICAgICAgRXhwaXJlcyBPY3RvYmVyIDIzLCAyMDE1ICAgICAgICAgICAgICAg W1BhZ2UgMTBdXG5fXG5JbnRlcm5ldC1EcmFmdCAgICAgIFNUVU4gZm9yIDNyZCBwYXJ0eSBBdXRo b3JpemF0aW9uICAgICAgICAgIEFwcmlsIDIwMTVcblxuXG42LjIuICBBQ0NFU1MtVE9LRU5cblxu ICAgVGhlIGFjY2VzcyB0b2tlbiBpcyBpc3N1ZWQgYnkgdGhlIGF1dGhvcml6YXRpb24gc2VydmVy LiAgT0F1dGggMi4wXG4gICBkb2VzIG5vdCBpbXBvc2UgYW55IGxpbWl0YXRpb24gb24gdGhlIGxl bmd0aCBvZiB0aGUgYWNjZXNzIHRva2VuIGJ1dFxuICAgaWYgcGF0aCBNVFUgaXMgdW5rbm93biB0 aGVuIFNUVU4gbWVzc2FnZXMgb3ZlciBJUHY0IHdvdWxkIG5lZWQgdG8gYmVcbiAgIGxlc3MgdGhh biA1NDggYnl0ZXMgKFNlY3Rpb24gNy4xIG9mIFtSRkM1Mzg5XSkuICBUaGUgYWNjZXNzIHRva2Vu XG4gICBsZW5ndGggbmVlZHMgdG8gYmUgcmVzdHJpY3RlZCB0byBmaXQgd2l0aGluIHRoZSBtYXhp bXVtIFNUVU4gbWVzc2FnZVxuICAgc2l6ZS4gIE5vdGUgdGhhdCB0aGUgc2VsZi1jb250YWluZWQg dG9rZW4gaXMgb3BhcXVlIHRvIHRoZSBjbGllbnQgYW5kXG4gICB0aGUgY2xpZW50IE1VU1QgTk9U IGV4YW1pbmUgdGhlIHRva2VuLiAgVGhlIEFDQ0VTUy1UT0tFTiBhdHRyaWJ1dGUgaXNcbiAgIGEg Y29tcHJlaGVuc2lvbi1yZXF1aXJlZCBhdHRyaWJ1dGUgKHNlZSBTZWN0aW9uIDE1IGZyb20gW1JG QzUzODldKS5cblxuICAgVGhlIHRva2VuIGlzIHN0cnVjdHVyZWQgYXMgZm9sbG93czpcblxuICAg ICAgICAgc3RydWN0IHtcbiAgICAgICAgICAgICB1aW50MTZfdCBub25jZV9sZW5ndGg7XG4gICAg ICAgICAgICAgb3BhcXVlIG5vbmNlW25vbmNlX2xlbmd0aF07XG4gICAgICAgICAgICAgb3BhcXVl IHtcbiAgICAgICAgICAgICAgICAgdWludDE2X3Qga2V5X2xlbmd0aDtcbiAgICAgICAgICAgICAg ICAgb3BhcXVlIG1hY19rZXlba2V5X2xlbmd0aF07XG4gICAgICAgICAgICAgICAgIHVpbnQ2NF90 IHRpbWVzdGFtcDtcbiAgICAgICAgICAgICAgICAgdWludDMyX3QgbGlmZXRpbWU7XG4gICAgICAg ICAgICAgfSBlbmNyeXB0ZWRfYmxvY2s7XG4gICAgICAgICB9IHRva2VuO1xuXG4gICAgICAgICAg ICAgICAgICAgRmlndXJlIDQ6IFNlbGYtY29udGFpbmVkIHRva2VuIGZvcm1hdFxuXG4gICBOb3Rl OiB1aW50Tl90IG1lYW5zIGFuIHVuc2lnbmVkIGludGVnZXIgb2YgZXhhY3RseSBOIGJpdHMuICBT aW5nbGUtXG4gICBieXRlIGVudGl0aWVzIGNvbnRhaW5pbmcgdW5pbnRlcnByZXRlZCBkYXRhIGFy ZSBvZiB0eXBlIG9wYXF1ZS4gIEFsbFxuICAgdmFsdWVzIGluIHRoZSB0b2tlbiBhcmUgc3RvcmVk IGluIG5ldHdvcmsgYnl0ZSBvcmRlci5cblxuICAgVGhlIGFzc29jaWF0ZWQgZGF0YSAoQSkgTVVT VCBiZSB0aGUgU1RVTiBzZXJ2ZXIgbmFtZS4gIFRoaXMgZW5zdXJlc1xuICAgdGhhdCB0aGUgY2xp ZW50IGRvZXMgbm90IHVzZSB0aGUgc2FtZSB0b2tlbiB0byBnYWluIGlsbGVnYWwgYWNjZXNzIHRv XG4gICBvdGhlciBTVFVOIHNlcnZlcnMgcHJvdmlkZWQgYnkgdGhlIHNhbWUgYWRtaW5pc3RyYXRp dmUgZG9tYWluIGkuZS4sXG4gICB3aGVuIG11bHRpcGxlIFNUVU4gc2VydmVycyBpbiBhIHNpbmds ZSBhZG1pbmlzdHJhdGl2ZSBkb21haW4gc2hhcmVcbiAgIHRoZSBzYW1lIHN5bW1ldHJpYyBrZXkg d2l0aCBhbiBhdXRob3JpemF0aW9uIHNlcnZlci5cblxuICAgVGhlIGZpZWxkcyBhcmUgZGVzY3Jp YmVkIGJlbG93OlxuXG4gICBub25jZV9sZW5ndGg6ICBMZW5ndGggb2YgdGhlIG5vbmNlIGZpZWxk LiAgVGhlIGxlbmd0aCBvZiBub25jZSBmb3JcbiAgICAgIGF1dGhlbnRpY2F0ZWQgZW5jcnlwdGlv biB3aXRoIGFkZGl0aW9uYWwgZGF0YSAoQUVBRCkgYWxnb3JpdGhtcyBpc1xuICAgICAgZXhwbGFp bmVkIGluIFtSRkM1MTE2XS5cblxuICAgTm9uY2U6ICBOb25jZSAoTikgZm9ybWF0aW9uIGlzIGV4 cGxhaW5lZCBpbiBzZWN0aW9uIDMuMiBvZiBbUkZDNTExNl0uXG5cbiAgIGtleV9sZW5ndGg6ICBM ZW5ndGggb2YgdGhlIHNlc3Npb24ga2V5IGluIG9jdGV0cy4gIEtleSBsZW5ndGggb2ZcbiAgICAg IDE2MC1iaXRzIE1VU1QgYmUgc3VwcG9ydGVkIChpLmUuLCBvbmx5IDE2MC1iaXQga2V5IGlzIHVz ZWQgYnlcbiAgICAgIEhNQUMtU0hBLTEgZm9yIG1lc3NhZ2UgaW50ZWdyaXR5IG9mIFNUVU4gbWVz c2FnZSkuICBUaGUga2V5IGxlbmd0aFxuXG5cblxuXG5SZWRkeSwgZXQgYWwuICAgICAgICAgICBF eHBpcmVzIE9jdG9iZXIgMjMsIDIwMTUgICAgICAgICAgICAgICBbUGFnZSAxMV1cbl9cbkludGVy bmV0LURyYWZ0ICAgICAgU1RVTiBmb3IgM3JkIHBhcnR5IEF1dGhvcml6YXRpb24gICAgICAgICAg QXByaWwgMjAxNVxuXG5cbiAgICAgIGZhY2lsaXRhdGVzIHRoZSBoYXNoIGFnaWxpdHkgcGxhbiBk aXNjdXNzZWQgaW4gc2VjdGlvbiAxNi4zIG9mXG4gICAgICBbUkZDNTM4OV0uXG5cbiAgIG1hY19r ZXk6ICBUaGUgc2Vzc2lvbiBrZXkgZ2VuZXJhdGVkIGJ5IHRoZSBhdXRob3JpemF0aW9uIHNlcnZl ci5cblxuICAgdGltZXN0YW1wOiAgNjQtYml0IHVuc2lnbmVkIGludGVnZXIgZmllbGQgY29udGFp bmluZyBhIHRpbWVzdGFtcC5cbiAgICAgIFRoZSB2YWx1ZSBpbmRpY2F0ZXMgdGhlIHRpbWUgc2lu Y2UgSmFudWFyeSAxLCAxOTcwLCAwMDowMCBVVEMsIGJ5XG4gICAgICB1c2luZyBhIGZpeGVkIHBv aW50IGZvcm1hdC4gIEluIHRoaXMgZm9ybWF0LCB0aGUgaW50ZWdlciBudW1iZXIgb2ZcbiAgICAg IHNlY29uZHMgaXMgY29udGFpbmVkIGluIHRoZSBmaXJzdCA0OCBiaXRzIG9mIHRoZSBmaWVsZCwg YW5kIHRoZVxuICAgICAgcmVtYWluaW5nIDE2IGJpdHMgaW5kaWNhdGUgdGhlIG51bWJlciBvZiAx LzY0SyBmcmFjdGlvbnMgb2YgYVxuICAgICAgc2Vjb25kIChOYXRpdmUgZm9ybWF0IC0gVW5peCku XG5cbiAgIGxpZmV0aW1lOiAgVGhlIGxpZmV0aW1lIG9mIHRoZSBhY2Nlc3MgdG9rZW4sIGluIHNl Y29uZHMuICBGb3JcbiAgICAgIGV4YW1wbGUsIHRoZSB2YWx1ZSAzNjAwIGluZGljYXRlcyBvbmUg aG91ci4gIFRoZSBsaWZldGltZSB2YWx1ZVxuICAgICAgTVVTVCBiZSBncmVhdGVyIHRoYW4gb3Ig ZXF1YWwgdG8gdGhlICJleHBpcmVzX2luIiBwYXJhbWV0ZXJcbiAgICAgIGRlZmluZWQgaW4gc2Vj dGlvbiA0LjIuMiBvZiBbUkZDNjc0OV0sIG90aGVyd2lzZSByZXNvdXJjZSBzZXJ2ZXJcbiAgICAg IGNvdWxkIHJldm9rZSB0aGUgdG9rZW4gYnV0IHRoZSBjbGllbnQgd291bGQgYXNzdW1lIHRoYXQg dGhlIHRva2VuXG4gICAgICBoYXMgbm90IGV4cGlyZWQgYW5kIHdvdWxkIG5vdCByZWZyZXNoIHRo ZSB0b2tlbi5cblxuICAgZW5jcnlwdGVkX2Jsb2NrOiAgVGhlIGVuY3J5cHRlZF9ibG9jayAoUCkg aXMgZW5jcnlwdGVkIGFuZFxuICAgICAgYXV0aGVudGljYXRlZCB1c2luZyB0aGUgc3ltbWV0cmlj IGxvbmctdGVybSBrZXkgZXN0YWJsaXNoZWRcbiAgICAgIGJldHdlZW4gdGhlIFNUVU4gc2VydmVy IGFuZCB0aGUgYXV0aG9yaXphdGlvbiBzZXJ2ZXIuXG5cbiAgIFRoZSBBRUFEIGVuY3J5cHRpb24g b3BlcmF0aW9uIGhhcyBmb3VyIGlucHV0czogSyAsIE4sIEEsIGFuZCBQLCBhc1xuICAgZGVmaW5l ZCBpbiBzZWN0aW9uIDIuMSBvZiBbUkZDNTExNl0gYW5kIHRoZXJlIGlzIGEgc2luZ2xlIG91dHB1 dCBhXG4gICBjaXBoZXJ0ZXh0IEMgb3IgYW4gaW5kaWNhdGlvbiB0aGF0IHRoZSByZXF1ZXN0ZWQg ZW5jcnlwdGlvbiBvcGVyYXRpb25cbiAgIGNvdWxkIG5vdCBiZSBwZXJmb3JtZWQuXG5cbiAgIElm IEFFU19DQkNfSE1BQ19TSEEyIChleHBsYWluZWQgaW4gc2VjdGlvbiAyLjEgb2ZcbiAgIFtJLUQu bWNncmV3LWFlYWQtYWVzLWNiYy1obWFjLXNoYTJdKSkgaXMgdXNlZCB0aGVuIHRoZSBlbmNyeXB0 aW9uXG4gICBwcm9jZXNzIGlzIGlsbHVzdHJhdGVkIGJlbG93LiAgVGhlIGNpcGhlcnRleHQgY29u c2lzdHMgb2YgdGhlIHN0cmluZ1xuICAgUywgd2l0aCB0aGUgc3RyaW5nIFQgYXBwZW5kZWQgdG8g aXQuICBIZXJlIEMgYW5kIEEgZGVub3RlIENpcGhlcnRleHRcbiAgIGFuZCBTVFVOIHNlcnZlciBu YW1lIHJlc3BlY3RpdmVseS4gIFRoZSBvY3RldCBzdHJpbmcgQUwgKHNlY3Rpb24gMi4xXG4gICBv ZiBbSS1ELm1jZ3Jldy1hZWFkLWFlcy1jYmMtaG1hYy1zaGEyXSkgaXMgZXF1YWwgdG8gdGhlIG51 bWJlciBvZlxuICAgYml0cyBpbiBBIGV4cHJlc3NlZCBhcyBhIDY0LWJpdCB1bnNpZ25lZCBiaWcg ZW5kaWFuIGludGVnZXIuXG5cbiAgIG8gIEFVVEggPSBpbml0aWFsIGF1dGhlbnRpY2F0aW9uIGtl eSBsZW5ndGggb2N0ZXRzIG9mIEssXG5cbiAgIG8gIEFTLVJTID0gZmluYWwgZW5jcnlwdGlvbiBr ZXkgbGVuZ3RoIG9jdGV0cyBvZiBLLFxuXG4gICBvICBTID0gQ0JDLVBLQ1M3LUVOQyhBUy1SUywg ZW5jcnlwdGVkX2Jsb2NrKSxcblxuICAgICAgKiAgSW5pdGlhbGl6YXRpb24gdmVjdG9yIGlzIHNl dCB0byB6ZXJvIGJlY2F1c2UgdGhlXG4gICAgICAgICBlbmNyeXB0ZWRfYmxvY2sgaW4gZWFjaCBh Y2Nlc3MgdG9rZW4gd2lsbCBub3QgYmUgaWRlbnRpY2FsIGFuZFxuICAgICAgICAgaGVuY2Ugd2ls bCBub3QgcmVzdWx0IGluIGdlbmVyYXRpb24gb2YgaWRlbnRpY2FsIGNpcGhlcnRleHQuXG5cbiAg IG8gIG1hYyA9IE1BQyhBVVRILCBBIF9fIFMgX18gQUwpLFxuXG5cblxuXG5SZWRkeSwgZXQgYWwu ICAgICAgICAgICBFeHBpcmVzIE9jdG9iZXIgMjMsIDIwMTUgICAgICAgICAgICAgICBbUGFnZSAx Ml1cbl9cbkludGVybmV0LURyYWZ0ICAgICAgU1RVTiBmb3IgM3JkIHBhcnR5IEF1dGhvcml6YXRp b24gICAgICAgICAgQXByaWwgMjAxNVxuXG5cbiAgIG8gIFQgPSBpbml0aWFsIFRfTEVOIG9jdGV0 cyBvZiBtYWMsXG5cbiAgIG8gIEMgPSBTIF9fIFQuXG5cbiAgIFRoZSBlbnRpcmUgdG9rZW4gaS5l LiwgdGhlIFwnZW5jcnlwdGVkX2Jsb2NrXCcgaXMgYmFzZTY0IGVuY29kZWQgKHNlZVxuICAgc2Vj dGlvbiA0IG9mIFtSRkM0NjQ4XSkgYW5kIHRoZSByZXN1bHRpbmcgYWNjZXNzIHRva2VuIGlzIHNp Z25hbGVkIHRvXG4gICB0aGUgY2xpZW50LlxuXG43LiAgU1RVTiBTZXJ2ZXIgQmVoYXZpb3VyXG5c biAgIFRoZSBTVFVOIHNlcnZlciwgb24gcmVjZWl2aW5nIGEgcmVxdWVzdCB3aXRoIEFDQ0VTUy1U T0tFTiBhdHRyaWJ1dGUsXG4gICBwZXJmb3JtcyBjaGVja3MgbGlzdGVkIGluIHNlY3Rpb24gMTAu Mi4yIG9mIFtSRkM1Mzg5XSBpbiBhZGRpdGlvbiB0b1xuICAgdGhlIGZvbGxvd2luZyBzdGVwcyB0 byB2ZXJpZnkgdGhhdCB0aGUgYWNjZXNzIHRva2VuIGlzIHZhbGlkOlxuXG4gICBvICBTVFVOIHNl cnZlciBzZWxlY3RzIHRoZSBrZXlpbmcgbWF0ZXJpYWwgYmFzZWQgb24ga2lkIHNpZ25hbGxlZCBp blxuICAgICAgdGhlIFVTRVJOQU1FIGF0dHJpYnV0ZS5cblxuICAgbyAgVGhlIEFFQUQgZGVjcnlw dGlvbiBvcGVyYXRpb24gaGFzIGZvdXIgaW5wdXRzOiBLLCBOLCBBLCBhbmQgQywgYXNcbiAgICAg IGRlZmluZWQgaW4gc2VjdGlvbiAyLjIgb2YgW1JGQzUxMTZdLiAgQUVBRCBkZWNyeXB0aW9uIGFs Z29yaXRobVxuICAgICAgaGFzIG9ubHkgYSBzaW5nbGUgb3V0cHV0LCBlaXRoZXIgYSBwbGFpbnRl eHQgb3IgYSBzcGVjaWFsIHN5bWJvbFxuICAgICAgRkFJTCB0aGF0IGluZGljYXRlcyB0aGF0IHRo ZSBpbnB1dHMgYXJlIG5vdCBhdXRoZW50aWMuICBJZlxuICAgICAgYXV0aGVudGljYXRlZCBkZWNy eXB0IG9wZXJhdGlvbiByZXR1cm5zIEZBSUwgdGhlbiB0aGUgU1RVTiBzZXJ2ZXJcbiAgICAgIHJl amVjdHMgdGhlIHJlcXVlc3Qgd2l0aCBhbiBlcnJvciByZXNwb25zZSA0MDEgKFVuYXV0aG9yaXpl ZCkuXG5cbiAgIG8gIElmIEFFU19DQkNfSE1BQ19TSEEyIGlzIHVzZWQgdGhlbiB0aGUgZmluYWwg VF9MRU4gb2N0ZXRzIGFyZVxuICAgICAgc3RyaXBwZWQgZnJvbSBDLiAgSXQgcGVyZm9ybXMgdGhl IHZlcmlmaWNhdGlvbiBvZiB0aGUgdG9rZW5cbiAgICAgIG1lc3NhZ2UgaW50ZWdyaXR5IGJ5IGNh bGN1bGF0aW5nIEhNQUMgb3ZlciB0aGUgdGhlIFNUVU4gc2VydmVyXG4gICAgICBuYW1lLCB0aGUg ZW5jcnlwdGVkIHBvcnRpb24gaW4gdGhlIHNlbGYtY29udGFpbmVkIHRva2VuIGFuZCB0aGUgQUxc biAgICAgIHVzaW5nIEFVVEgga2V5IGFuZCBpZiB0aGUgcmVzdWx0aW5nIHZhbHVlIGRvZXMgbm90 IG1hdGNoIHRoZSBtYWNcbiAgICAgIGZpZWxkIGluIHRoZSBzZWxmLWNvbnRhaW5lZCB0b2tlbiB0 aGVuIGl0IHJlamVjdHMgdGhlIHJlcXVlc3Qgd2l0aFxuICAgICAgYW4gZXJyb3IgcmVzcG9uc2Ug NDAxIChVbmF1dGhvcml6ZWQpLlxuXG4gICBvICBTVFVOIHNlcnZlciBvYnRhaW5zIHRoZSBtYWNf a2V5IGJ5IHJldHJpZXZpbmcgdGhlIGNvbnRlbnQgb2YgdGhlXG4gICAgICBhY2Nlc3MgdG9rZW4g KHdoaWNoIHJlcXVpcmVzIGRlY3J5cHRpb24gb2YgdGhlIHNlbGYtY29udGFpbmVkXG4gICAgICB0 b2tlbiB1c2luZyB0aGUgQVMtUlMga2V5KS5cblxuICAgbyAgVGhlIFNUVU4gc2VydmVyIHZlcmlm aWVzIHRoYXQgbm8gcmVwbGF5IHRvb2sgcGxhY2UgYnkgcGVyZm9ybWluZ1xuICAgICAgdGhlIGZv bGxvd2luZyBjaGVjazpcblxuICAgICAgKiAgVGhlIGFjY2VzcyB0b2tlbiBpcyBhY2NlcHRlZCBp ZiB0aGUgdGltZXN0YW1wIGZpZWxkIChUUykgaW4gdGhlXG4gICAgICAgICBzZWxmLWNvbnRhaW5l ZCB0b2tlbiBpcyByZWNlbnQgZW5vdWdoIHRvIHRoZSByZWNlcHRpb24gdGltZSBvZlxuICAgICAg ICAgdGhlIFNUVU4gcmVxdWVzdCAoUkRuZXcpIHVzaW5nIHRoZSBmb2xsb3dpbmcgZm9ybXVsYTog TGlmZXRpbWVcbiAgICAgICAgICsgRGVsdGEgXyBhYnMoUkRuZXcgLSBUUykuICBUaGUgUkVDT01N RU5ERUQgdmFsdWUgZm9yIHRoZVxuICAgICAgICAgYWxsb3dlZCBEZWx0YSBpcyA1IHNlY29uZHMu ICBJZiB0aGUgdGltZXN0YW1wIGlzIE5PVCB3aXRoaW4gdGhlXG4gICAgICAgICBib3VuZGFyaWVz IHRoZW4gdGhlIFNUVU4gc2VydmVyIGRpc2NhcmRzIHRoZSByZXF1ZXN0IHdpdGggZXJyb3JcbiAg ICAgICAgIHJlc3BvbnNlIDQwMSAoVW5hdXRob3JpemVkKS5cblxuXG5cblxuXG5SZWRkeSwgZXQg YWwuICAgICAgICAgICBFeHBpcmVzIE9jdG9iZXIgMjMsIDIwMTUgICAgICAgICAgICAgICBbUGFn ZSAxM11cbl9cbkludGVybmV0LURyYWZ0ICAgICAgU1RVTiBmb3IgM3JkIHBhcnR5IEF1dGhvcml6 YXRpb24gICAgICAgICAgQXByaWwgMjAxNVxuXG5cbiAgIG8gIFRoZSBTVFVOIHNlcnZlciB1c2Vz IHRoZSBtYWNfa2V5IHRvIGNvbXB1dGUgdGhlIG1lc3NhZ2UgaW50ZWdyaXR5XG4gICAgICBvdmVy IHRoZSByZXF1ZXN0IGFuZCBpZiB0aGUgcmVzdWx0aW5nIHZhbHVlIGRvZXMgbm90IG1hdGNoIHRo ZVxuICAgICAgY29udGVudHMgb2YgdGhlIE1FU1NBR0UtSU5URUdSSVRZIGF0dHJpYnV0ZSB0aGVu IGl0IHJlamVjdHMgdGhlXG4gICAgICByZXF1ZXN0IHdpdGggYW4gZXJyb3IgcmVzcG9uc2UgNDAx IChVbmF1dGhvcml6ZWQpLlxuXG4gICBvICBJZiBhbGwgdGhlIGNoZWNrcyBwYXNzLCB0aGUgU1RV TiBzZXJ2ZXIgY29udGludWVzIHRvIHByb2Nlc3MgdGhlXG4gICAgICByZXF1ZXN0LiAgQW55IHJl c3BvbnNlIGdlbmVyYXRlZCBieSB0aGUgc2VydmVyIE1VU1QgaW5jbHVkZSB0aGVcbiAgICAgIE1F U1NBR0UtSU5URUdSSVRZIGF0dHJpYnV0ZSwgY29tcHV0ZWQgdXNpbmcgdGhlIG1hY19rZXkuXG5c biAgIElmIGEgU1RVTiBzZXJ2ZXIgcmVjZWl2ZXMgYW4gQUNDRVNTLVRPS0VOIGF0dHJpYnV0ZSB1 bmV4cGVjdGVkbHlcbiAgIChiZWNhdXNlIGl0IGhhZCBub3QgcHJldmlvdXNseSBzZW50IG91dCBh IFRISVJELVBBUlRZLUFVVEhPUklaQVRJT04pLFxuICAgaXQgd2lsbCByZXNwb25kIHdpdGggYW4g ZXJyb3IgY29kZSBvZiA0MjAgKFVua25vd24gQXR0cmlidXRlKSBhc1xuICAgc3BlY2lmaWVkIGlu IFNlY3Rpb24gNy4zLjEgb2YgW1JGQzUzODldLlxuXG44LiAgU1RVTiBjbGllbnQgYmVoYXZpb3Vy XG5cbiAgIG8gIFRoZSBjbGllbnQgbG9va3MgZm9yIHRoZSBNRVNTQUdFLUlOVEVHUklUWSBhdHRy aWJ1dGUgaW4gdGhlXG4gICAgICByZXNwb25zZS4gIElmIE1FU1NBR0UtSU5URUdSSVRZIGlzIGFi c2VudCBvciB0aGUgdmFsdWUgY29tcHV0ZWRcbiAgICAgIGZvciBtZXNzYWdlIGludGVncml0eSB1 c2luZyBtYWNfa2V5IGRvZXMgbm90IG1hdGNoIHRoZSBjb250ZW50cyBvZlxuICAgICAgdGhlIE1F U1NBR0UtSU5URUdSSVRZIGF0dHJpYnV0ZSB0aGVuIHRoZSByZXNwb25zZSBNVVNUIGJlXG4gICAg ICBkaXNjYXJkZWQuXG5cbiAgIG8gIElmIHRoZSBhY2Nlc3MgdG9rZW4gZXhwaXJlcyB0aGVuIHRo ZSBjbGllbnQgTVVTVCBvYnRhaW4gYSBuZXdcbiAgICAgIHRva2VuIGZyb20gdGhlIGF1dGhvcml6 YXRpb24gc2VydmVyIGFuZCB1c2UgaXQgZm9yIG5ldyBTVFVOXG4gICAgICByZXF1ZXN0cy5cblxu OS4gIFRVUk4gY2xpZW50IGFuZCBzZXJ2ZXIgYmVoYXZpb3VyXG5cbiAgIENoYW5nZXMgc3BlY2lm aWMgdG8gVFVSTiBhcmUgbGlzdGVkIGJlbG93OlxuXG4gICBvICBUaGUgYWNjZXNzIHRva2VuIGNh biBiZSByZXVzZWQgZm9yIG11bHRpcGxlIEFsbG9jYXRlIHJlcXVlc3RzIHRvXG4gICAgICB0aGUg c2FtZSBUVVJOIHNlcnZlci4gIFRoZSBUVVJOIGNsaWVudCBNVVNUIGluY2x1ZGUgdGhlIEFDQ0VT Uy1cbiAgICAgIFRPS0VOIGF0dHJpYnV0ZSBvbmx5IGluIEFsbG9jYXRlIGFuZCBSZWZyZXNoIHJl cXVlc3RzLiAgU2luY2UgdGhlXG4gICAgICBhY2Nlc3MgdG9rZW4gaXMgdmFsaWQgZm9yIGEgc3Bl Y2lmaWMgcGVyaW9kIG9mIHRpbWUsIHRoZSBUVVJOXG4gICAgICBzZXJ2ZXIgY2FuIGNhY2hlIGl0 IHNvIHRoYXQgaXQgY2FuIGNoZWNrIGlmIHRoZSBhY2Nlc3MgdG9rZW4gaW4gYVxuICAgICAgbmV3 IGFsbG9jYXRpb24gcmVxdWVzdCBtYXRjaGVzIG9uZSBvZiB0aGUgY2FjaGVkIHRva2VucyBhbmQg YXZvaWRzXG4gICAgICB0aGUgbmVlZCB0byBkZWNyeXB0IHRoZSB0b2tlbi5cblxuICAgbyAgVGhl IGxpZmV0aW1lIHByb3ZpZGVkIGJ5IHRoZSBUVVJOIHNlcnZlciBpbiB0aGUgQWxsb2NhdGUgYW5k XG4gICAgICBSZWZyZXNoIHJlc3BvbnNlcyBNVVNUIGJlIGxlc3MgdGhhbiBvciBlcXVhbCB0byB0 aGUgbGlmZXRpbWUgb2ZcbiAgICAgIHRoZSB0b2tlbi4gIEl0IGlzIFJFQ09NTUVOREVEIHRoYXQg dGhlIFRVUk4gc2VydmVyIGNhbGN1bGF0ZSB0aGVcbiAgICAgIG1heGltdW0gYWxsb3dlZCBsaWZl dGltZSB2YWx1ZSB1c2luZyB0aGUgZm9ybXVsYTpcblxuICAgICAgICBsaWZldGltZSArIERlbHRh IC0gYWJzKFJEbmV3IC0gVFMpXG5cbiAgICAgIFRoZSBSRUNPTU1FTkRFRCB2YWx1ZSBmb3IgdGhl IGFsbG93ZWQgRGVsdGEgaXMgNSBzZWNvbmRzLlxuXG5cblxuXG5cblJlZGR5LCBldCBhbC4gICAg ICAgICAgIEV4cGlyZXMgT2N0b2JlciAyMywgMjAxNSAgICAgICAgICAgICAgIFtQYWdlIDE0XVxu X1xuSW50ZXJuZXQtRHJhZnQgICAgICBTVFVOIGZvciAzcmQgcGFydHkgQXV0aG9yaXphdGlvbiAg ICAgICAgICBBcHJpbCAyMDE1XG5cblxuICAgbyAgSWYgdGhlIGFjY2VzcyB0b2tlbiBleHBpcmVz IHRoZW4gdGhlIGNsaWVudCBNVVNUIG9idGFpbiBhIG5ld1xuICAgICAgdG9rZW4gZnJvbSB0aGUg YXV0aG9yaXphdGlvbiBzZXJ2ZXIgYW5kIHVzZSBpdCBmb3IgbmV3XG4gICAgICBhbGxvY2F0aW9u cy4gIFRoZSBjbGllbnQgTVVTVCB1c2UgdGhlIG5ldyB0b2tlbiB0byByZWZyZXNoXG4gICAgICBl eGlzdGluZyBhbGxvY2F0aW9ucy4gIFRoaXMgd2F5IGNsaWVudCBoYXMgdG8gbWFpbnRhaW4gb25s eSBvbmVcbiAgICAgIHRva2VuIHBlciBUVVJOIHNlcnZlci5cblxuMTAuICBPcGVyYXRpb25hbCBD b25zaWRlcmF0aW9uc1xuXG4gICBUaGUgZm9sbG93aW5nIG9wZXJhdGlvbmFsIGNvbnNpZGVyYXRp b25zIHNob3VsZCBiZSB0YWtlbiBpbnRvXG4gICBhY2NvdW50OlxuXG4gICBvICBFYWNoIGF1dGhv cml6YXRpb24gc2VydmVyIHNob3VsZCBtYWludGFpbiB0aGUgbGlzdCBvZiBTVFVOIHNlcnZlcnNc biAgICAgIGZvciB3aGljaCBpdCB3aWxsIGdyYW50IHRva2VucywgYW5kIHRoZSBsb25nLXRlcm0g c2VjcmV0IHNoYXJlZFxuICAgICAgd2l0aCBlYWNoIG9mIHRob3NlIFNUVU4gc2VydmVycy5cblxu ICAgbyAgSWYgbWFudWFsIGNvbmZpZ3VyYXRpb24gKFNlY3Rpb24gNC4xLjIpIGlzIHVzZWQgdG8g ZXN0YWJsaXNoXG4gICAgICBzeW1tZXRyaWMga2V5cywgdGhlIG5lY2Vzc2FyeSBpbmZvcm1hdGlv biB3aGljaCBpbmNsdWRlcyBsb25nLXRlcm1cbiAgICAgIHNlY3JldCAoSykgYW5kIGF1dGhlbnRp Y2F0ZWQgZW5jcnlwdGlvbiBhbGdvcml0aG0gaGF2ZSB0byBiZVxuICAgICAgY29uZmlndXJlZCBv biBlYWNoIGF1dGhvcml6YXRpb24gc2VydmVyIGFuZCBTVFVOIHNlcnZlciBmb3IgZWFjaFxuICAg ICAga2lkLiAgVGhlIGNsaWVudCBvYnRhaW5zIHRoZSBzZXNzaW9uIGtleSBhbmQgSE1BQyBhbGdv cml0aG0gZnJvbVxuICAgICAgdGhlIGF1dGhvcml6YXRpb24gc2VydmVyIGluIGNvbXBhbnkgd2l0 aCB0aGUgdG9rZW4uXG5cbiAgIG8gIFdoZW4gYSBTVFVOIGNsaWVudCBzZW5kcyBhIHJlcXVlc3Qg dG8gZ2V0IGFjY2VzcyB0byBhIHBhcnRpY3VsYXJcbiAgICAgIFNUVU4gc2VydmVyIChTKSB0aGUg YXV0aG9yaXphdGlvbiBzZXJ2ZXIgbXVzdCBlbnN1cmUgdGhhdCBpdFxuICAgICAgc2VsZWN0cyB0 aGUgYXBwcm9wcmlhdGUga2lkLCBhY2Nlc3MtdG9rZW4gZGVwZW5kaW5nIG9uIHRoZSBzZXJ2ZXJc biAgICAgIFMuXG5cbjExLiAgU2VjdXJpdHkgQ29uc2lkZXJhdGlvbnNcblxuICAgV2hlbiBPQXV0 aCAyLjAgaXMgdXNlZCB0aGUgaW50ZXJhY3Rpb24gYmV0d2VlbiB0aGUgY2xpZW50IGFuZCB0aGVc biAgIGF1dGhvcml6YXRpb24gc2VydmVyIHJlcXVpcmVzIFRyYW5zcG9ydCBMYXllciBTZWN1cml0 eSAoVExTKSB3aXRoIGFcbiAgIGNpcGhlcnN1aXRlIG9mZmVyaW5nIGNvbmZpZGVudGlhbGl0eSBw cm90ZWN0aW9uIGFuZCB0aGUgZ3VpZGFuY2VcbiAgIGdpdmVuIGluIFtJLUQuaWV0Zi11dGEtdGxz LWJjcF0gbXVzdCBiZSBmb2xsb3dlZCB0byBhdm9pZCBhdHRhY2tzIG9uXG4gICBUTFMuICBUaGUg c2Vzc2lvbiBrZXkgTVVTVCBOT1QgYmUgdHJhbnNtaXR0ZWQgaW4gY2xlYXIgc2luY2UgdGhpc1xu ICAgd291bGQgY29tcGxldGVseSBkZXN0cm95IHRoZSBzZWN1cml0eSBiZW5lZml0cyBvZiB0aGUg cHJvcG9zZWRcbiAgIHNjaGVtZS4gIEFuIGF0dGFja2VyIHRyeWluZyB0byByZXBsYXkgbWVzc2Fn ZSB3aXRoIEFDQ0VTUy1UT0tFTlxuICAgYXR0cmlidXRlIGNhbiBiZSBtaXRpZ2F0ZWQgYnkgZnJl cXVlbnQgY2hhbmdlcyBvZiBub25jZSB2YWx1ZSBhc1xuICAgZGlzY3Vzc2VkIGluIHNlY3Rpb24g MTAuMiBvZiBbUkZDNTM4OV0uICBUaGUgY2xpZW50IG1heSBrbm93IHNvbWVcbiAgIChidXQgbm90 IGFsbCkgb2YgdGhlIHRva2VuIGZpZWxkcyBlbmNyeXB0ZWQgd2l0aCBhIHVua25vd24gc2VjcmV0 IGtleVxuICAgYW5kIHRoZSB0b2tlbiBjYW4gYmUgc3ViamVjdGVkIHRvIGtub3duLXBsYWludGV4 dCBhdHRhY2ssIGJ1dCBBRVMgaXNcbiAgIHNlY3VyZSBhZ2FpbnN0IHRoaXMgYXR0YWNrLlxuXG4g ICBBbiBhdHRhY2tlciBtYXkgcmVtb3ZlIHRoZSBUSElSRC1QQVJUWS1BVVRIT1JJWkFUSU9OIFNU VU4gYXR0cmlidXRlXG4gICBmcm9tIHRoZSBlcnJvciBtZXNzYWdlIGZvcmNpbmcgdGhlIGNsaWVu dCB0byBwaWNrIGZpcnN0IHBhcnR5XG4gICBhdXRoZW50aWNhdGlvbiwgdGhpcyBhdHRhY2sgbWF5 IGJlIG1pdGlnYXRlZCBieSBvcHRpbmcgZm9yIFRyYW5zcG9ydFxuICAgTGF5ZXIgU2VjdXJpdHkg KFRMUykgW1JGQzUyNDZdIG9yIERhdGFncmFtIFRyYW5zcG9ydCBMYXllciBTZWN1cml0eVxuICAg KERUTFMpIFtSRkM2MzQ3XSBhcyBhIHRyYW5zcG9ydCBwcm90b2NvbCBmb3IgU2Vzc2lvbiBUcmF2 ZXJzYWxcbiAgIFV0aWxpdGllcyBmb3IgTkFUIChTVFVOKSwgYXMgZGVmaW5lZCBpbiBbUkZDNTM4 OV1hbmQgW1JGQzczNTBdLlxuXG5cblxuUmVkZHksIGV0IGFsLiAgICAgICAgICAgRXhwaXJlcyBP Y3RvYmVyIDIzLCAyMDE1ICAgICAgICAgICAgICAgW1BhZ2UgMTVdXG5fXG5JbnRlcm5ldC1EcmFm dCAgICAgIFNUVU4gZm9yIDNyZCBwYXJ0eSBBdXRob3JpemF0aW9uICAgICAgICAgIEFwcmlsIDIw MTVcblxuXG4gICBUaHJlYXQgbWl0aWdhdGlvbiBkaXNjdXNzZWQgaW4gc2VjdGlvbiA1IG9mXG4g ICBbSS1ELmlldGYtb2F1dGgtcG9wLWFyY2hpdGVjdHVyZV0gYW5kIHNlY3VyaXR5IGNvbnNpZGVy YXRpb25zIGluXG4gICBbUkZDNTM4OV0gYXJlIHRvIGJlIHRha2VuIGludG8gYWNjb3VudC5cblxu MTIuICBJQU5BIENvbnNpZGVyYXRpb25zXG5cbiAgIFtQYXJhZ3JhcGhzIGJlbG93IGluIGJyYWNl cyBzaG91bGQgYmUgcmVtb3ZlZCBieSB0aGUgUkZDIEVkaXRvciB1cG9uXG4gICBwdWJsaWNhdGlv bl1cblxuICAgW0lBTkEgaXMgcmVxdWVzdGVkIHRvIGFkZCB0aGUgZm9sbG93aW5nIGF0dHJpYnV0 ZXMgdG8gdGhlIFNUVU5cbiAgIGF0dHJpYnV0ZSByZWdpc3RyeSBbaWFuYS1zdHVuXSwgVGhlIFRI SVJELVBBUlRZLUFVVEhPUklaQVRJT05cbiAgIGF0dHJpYnV0ZSByZXF1aXJlcyB0aGF0IElBTkEg YWxsb2NhdGUgYSB2YWx1ZSBpbiB0aGUgIlNUVU4gYXR0cmlidXRlc1xuICAgUmVnaXN0cnkiIGZy b20gdGhlIGNvbXByZWhlbnNpb24tb3B0aW9uYWwgcmFuZ2UgKDB4ODAwMC0weEJGRkYpXVxuXG4g ICBUaGlzIGRvY3VtZW50IGRlZmluZXMgdGhlIFRISVJELVBBUlRZLUFVVEhPUklaQVRJT04gU1RV TiBhdHRyaWJ1dGUsXG4gICBkZXNjcmliZWQgaW4gU2VjdGlvbiA2LiAgSUFOQSBoYXMgYWxsb2Nh dGVkIHRoZSBjb21wcmVoZW5zaW9uLVxuICAgb3B0aW9uYWwgY29kZXBvaW50IFRCRCBmb3IgdGhp cyBhdHRyaWJ1dGUuXG5cbiAgIFtUaGUgQUNDRVNTLVRPS0VOIGF0dHJpYnV0ZSByZXF1aXJlcyB0 aGF0IElBTkEgYWxsb2NhdGUgYSB2YWx1ZSBpblxuICAgdGhlICJTVFVOIGF0dHJpYnV0ZXMgUmVn aXN0cnkiIGZyb20gdGhlIGNvbXByZWhlbnNpb24tcmVxdWlyZWQgcmFuZ2VcbiAgICgweDAwMDAt MHgzRkZGKV1cblxuICAgVGhpcyBkb2N1bWVudCBkZWZpbmVzIHRoZSBBQ0NFU1MtVE9LRU4gU1RV TiBhdHRyaWJ1dGUsIGRlc2NyaWJlZCBpblxuICAgU2VjdGlvbiA2LiAgSUFOQSBoYXMgYWxsb2Nh dGVkIHRoZSBjb21wcmVoZW5zaW9uLXJlcXVpcmVkIGNvZGVwb2ludFxuICAgVEJEIGZvciB0aGlz IGF0dHJpYnV0ZS5cblxuMTMuICBBY2tub3dsZWRnZW1lbnRzXG5cbiAgIEF1dGhvcnMgd291bGQg bGlrZSB0byB0aGFuayBEYW4gV2luZywgUGFsIE1hcnRpbnNlbiwgT2xlZyBNb3NrYWxlbmtvLFxu ICAgQ2hhcmxlcyBFY2tlbCwgU3BlbmNlciBEYXdraW5zLCBIYW5uZXMgVHNjaG9mZW5pZywgWWFy b24gU2hlZmZlciwgVG9tXG4gICBUYXlsb3IsIENocmlzdGVyIEhvbG1iZXJnLCBQZXRlIFJlc25p Y2ssIEthdGhsZWVuIE1vcmlhcnR5LCBSaWNoYXJkXG4gICBCYXJuZXMsIFN0ZXBoZW4gRmFycmVs bCwgQWxpc3NhIENvb3BlciBhbmQgUmljaCBTYWx6IGZvciBjb21tZW50cyBhbmRcbiAgIHJldmll dy4gIFRoZSBhdXRob3JzIHdvdWxkIGxpa2UgdG8gZ2l2ZSBzcGVjaWFsIHRoYW5rcyB0byBCcmFu ZG9uXG4gICBXaWxsaWFtcyBmb3IgaGlzIGhlbHAuXG5cbiAgIFRoYW5rcyB0byBPbGVnIE1vc2th bGVua28gZm9yIHByb3ZpZGluZyBjb2RlIHNuaXBwZW50IGluIHRoZVxuICAgQXBwZW5kaXggc2Vj dGlvbi5cblxuMTQuICBSZWZlcmVuY2VzXG5cbjE0LjEuICBOb3JtYXRpdmUgUmVmZXJlbmNlc1xu XG4gICBbSS1ELmlldGYtam9zZS1qc29uLXdlYi1hbGdvcml0aG1zXVxuICAgICAgICAgICAgICBK b25lcywgTS4sICJKU09OIFdlYiBBbGdvcml0aG1zIChKV0EpIiwgZHJhZnQtaWV0Zi1qb3NlLVxu ICAgICAgICAgICAgICBqc29uLXdlYi1hbGdvcml0aG1zLTQwICh3b3JrIGluIHByb2dyZXNzKSwg SmFudWFyeSAyMDE1LlxuXG4gICBbUkZDMjExOV0gIEJyYWRuZXIsIFMuLCAiS2V5IHdvcmRzIGZv ciB1c2UgaW4gUkZDcyB0byBJbmRpY2F0ZVxuICAgICAgICAgICAgICBSZXF1aXJlbWVudCBMZXZl bHMiLCBCQ1AgMTQsIFJGQyAyMTE5LCBNYXJjaCAxOTk3LlxuXG5cblxuUmVkZHksIGV0IGFsLiAg ICAgICAgICAgRXhwaXJlcyBPY3RvYmVyIDIzLCAyMDE1ICAgICAgICAgICAgICAgW1BhZ2UgMTZd XG5fXG5JbnRlcm5ldC1EcmFmdCAgICAgIFNUVU4gZm9yIDNyZCBwYXJ0eSBBdXRob3JpemF0aW9u ICAgICAgICAgIEFwcmlsIDIwMTVcblxuXG4gICBbUkZDNDY0OF0gIEpvc2Vmc3NvbiwgUy4sICJU aGUgQmFzZTE2LCBCYXNlMzIsIGFuZCBCYXNlNjQgRGF0YVxuICAgICAgICAgICAgICBFbmNvZGlu Z3MiLCBSRkMgNDY0OCwgT2N0b2JlciAyMDA2LlxuXG4gICBbUkZDNDg2OF0gIEtlbGx5LCBTLiBh bmQgUy4gRnJhbmtlbCwgIlVzaW5nIEhNQUMtU0hBLTI1NiwgSE1BQy1TSEEtXG4gICAgICAgICAg ICAgIDM4NCwgYW5kIEhNQUMtU0hBLTUxMiB3aXRoIElQc2VjIiwgUkZDIDQ4NjgsIE1heSAyMDA3 LlxuXG4gICBbUkZDNTExNl0gIE1jR3JldywgRC4sICJBbiBJbnRlcmZhY2UgYW5kIEFsZ29yaXRo bXMgZm9yIEF1dGhlbnRpY2F0ZWRcbiAgICAgICAgICAgICAgRW5jcnlwdGlvbiIsIFJGQyA1MTE2 LCBKYW51YXJ5IDIwMDguXG5cbiAgIFtSRkM1Mzg5XSAgUm9zZW5iZXJnLCBKLiwgTWFoeSwgUi4s IE1hdHRoZXdzLCBQLiwgYW5kIEQuIFdpbmcsXG4gICAgICAgICAgICAgICJTZXNzaW9uIFRyYXZl cnNhbCBVdGlsaXRpZXMgZm9yIE5BVCAoU1RVTikiLCBSRkMgNTM4OSxcbiAgICAgICAgICAgICAg T2N0b2JlciAyMDA4LlxuXG4gICBbUkZDNjc0OV0gIEhhcmR0LCBELiwgIlRoZSBPQXV0aCAyLjAg QXV0aG9yaXphdGlvbiBGcmFtZXdvcmsiLCBSRkNcbiAgICAgICAgICAgICAgNjc0OSwgT2N0b2Jl ciAyMDEyLlxuXG4gICBbaWFuYS1zdHVuXVxuICAgICAgICAgICAgICBJQU5BLCAsICJJQU5BOiBT VFVOIEF0dHJpYnV0ZXMiLCBBcHJpbCAyMDExLFxuICAgICAgICAgICAgICBfaHR0cDovL3d3dy5p YW5hLm9yZy9hc3NpZ25tZW50cy9zdHVuLXBhcmFtZXRlcnMvc3R1bi1wYVxuICAgICAgICAgICAg ICByYW1ldGVycy54bWxfLlxuXG4xNC4yLiAgSW5mb3JtYXRpdmUgUmVmZXJlbmNlc1xuXG4gICBb SS1ELmlldGYtam9zZS1qc29uLXdlYi1lbmNyeXB0aW9uXVxuICAgICAgICAgICAgICBKb25lcywg TS4gYW5kIEouIEhpbGRlYnJhbmQsICJKU09OIFdlYiBFbmNyeXB0aW9uIChKV0UpIixcbiAgICAg ICAgICAgICAgZHJhZnQtaWV0Zi1qb3NlLWpzb24td2ViLWVuY3J5cHRpb24tNDAgKHdvcmsgaW4g cHJvZ3Jlc3MpLFxuICAgICAgICAgICAgICBKYW51YXJ5IDIwMTUuXG5cbiAgIFtJLUQuaWV0Zi1q b3NlLWpzb24td2ViLXNpZ25hdHVyZV1cbiAgICAgICAgICAgICAgSm9uZXMsIE0uLCBCcmFkbGV5 LCBKLiwgYW5kIE4uIFNha2ltdXJhLCAiSlNPTiBXZWJcbiAgICAgICAgICAgICAgU2lnbmF0dXJl IChKV1MpIiwgZHJhZnQtaWV0Zi1qb3NlLWpzb24td2ViLXNpZ25hdHVyZS00MVxuICAgICAgICAg ICAgICAod29yayBpbiBwcm9ncmVzcyksIEphbnVhcnkgMjAxNS5cblxuICAgW0ktRC5pZXRmLW9h dXRoLWpzb24td2ViLXRva2VuXVxuICAgICAgICAgICAgICBKb25lcywgTS4sIEJyYWRsZXksIEou LCBhbmQgTi4gU2FraW11cmEsICJKU09OIFdlYiBUb2tlblxuICAgICAgICAgICAgICAoSldUKSIs IGRyYWZ0LWlldGYtb2F1dGgtanNvbi13ZWItdG9rZW4tMzIgKHdvcmsgaW5cbiAgICAgICAgICAg ICAgcHJvZ3Jlc3MpLCBEZWNlbWJlciAyMDE0LlxuXG4gICBbSS1ELmlldGYtb2F1dGgtcG9wLWFy Y2hpdGVjdHVyZV1cbiAgICAgICAgICAgICAgSHVudCwgUC4sIFJpY2hlciwgSi4sIE1pbGxzLCBX LiwgTWlzaHJhLCBQLiwgYW5kIEguXG4gICAgICAgICAgICAgIFRzY2hvZmVuaWcsICJPQXV0aCAy LjAgUHJvb2Ytb2YtUG9zc2Vzc2lvbiAoUG9QKSBTZWN1cml0eVxuICAgICAgICAgICAgICBBcmNo aXRlY3R1cmUiLCBkcmFmdC1pZXRmLW9hdXRoLXBvcC1hcmNoaXRlY3R1cmUtMDEgKHdvcmtcbiAg ICAgICAgICAgICAgaW4gcHJvZ3Jlc3MpLCBNYXJjaCAyMDE1LlxuXG5cblxuXG5cblxuXG5cblJl ZGR5LCBldCBhbC4gICAgICAgICAgIEV4cGlyZXMgT2N0b2JlciAyMywgMjAxNSAgICAgICAgICAg ICAgIFtQYWdlIDE3XVxuX1xuSW50ZXJuZXQtRHJhZnQgICAgICBTVFVOIGZvciAzcmQgcGFydHkg QXV0aG9yaXphdGlvbiAgICAgICAgICBBcHJpbCAyMDE1XG5cblxuICAgW0ktRC5pZXRmLW9hdXRo LXBvcC1rZXktZGlzdHJpYnV0aW9uXVxuICAgICAgICAgICAgICBCcmFkbGV5LCBKLiwgSHVudCwg UC4sIEpvbmVzLCBNLiwgYW5kIEguIFRzY2hvZmVuaWcsXG4gICAgICAgICAgICAgICJPQXV0aCAy LjAgUHJvb2Ytb2YtUG9zc2Vzc2lvbjogQXV0aG9yaXphdGlvbiBTZXJ2ZXIgdG9cbiAgICAgICAg ICAgICAgQ2xpZW50IEtleSBEaXN0cmlidXRpb24iLCBkcmFmdC1pZXRmLW9hdXRoLXBvcC1rZXkt XG4gICAgICAgICAgICAgIGRpc3RyaWJ1dGlvbi0wMSAod29yayBpbiBwcm9ncmVzcyksIE1hcmNo IDIwMTUuXG5cbiAgIFtJLUQuaWV0Zi1ydGN3ZWItb3ZlcnZpZXddXG4gICAgICAgICAgICAgIEFs dmVzdHJhbmQsIEguLCAiT3ZlcnZpZXc6IFJlYWwgVGltZSBQcm90b2NvbHMgZm9yXG4gICAgICAg ICAgICAgIEJyb3dzZXItYmFzZWQgQXBwbGljYXRpb25zIiwgZHJhZnQtaWV0Zi1ydGN3ZWItb3Zl cnZpZXctMTNcbiAgICAgICAgICAgICAgKHdvcmsgaW4gcHJvZ3Jlc3MpLCBOb3ZlbWJlciAyMDE0 LlxuXG4gICBbSS1ELmlldGYtdHJhbS1zdHVuYmlzXVxuICAgICAgICAgICAgICBQZXRpdC1IdWd1 ZW5pbiwgTS4sIFNhbGd1ZWlybywgRy4sIFJvc2VuYmVyZywgSi4sIFdpbmcsXG4gICAgICAgICAg ICAgIEQuLCBNYWh5LCBSLiwgYW5kIFAuIE1hdHRoZXdzLCAiU2Vzc2lvbiBUcmF2ZXJzYWxcbiAg ICAgICAgICAgICAgVXRpbGl0aWVzIGZvciBOQVQgKFNUVU4pIiwgZHJhZnQtaWV0Zi10cmFtLXN0 dW5iaXMtMDRcbiAgICAgICAgICAgICAgKHdvcmsgaW4gcHJvZ3Jlc3MpLCBNYXJjaCAyMDE1Llxu XG4gICBbSS1ELmlldGYtdXRhLXRscy1iY3BdXG4gICAgICAgICAgICAgIFNoZWZmZXIsIFkuLCBI b2x6LCBSLiwgYW5kIFAuIFNhaW50LUFuZHJlLFxuICAgICAgICAgICAgICAiUmVjb21tZW5kYXRp b25zIGZvciBTZWN1cmUgVXNlIG9mIFRMUyBhbmQgRFRMUyIsIGRyYWZ0LVxuICAgICAgICAgICAg ICBpZXRmLXV0YS10bHMtYmNwLTExICh3b3JrIGluIHByb2dyZXNzKSwgRmVicnVhcnkgMjAxNS5c blxuICAgW0ktRC5tY2dyZXctYWVhZC1hZXMtY2JjLWhtYWMtc2hhMl1cbiAgICAgICAgICAgICAg TWNHcmV3LCBELiwgRm9sZXksIEouLCBhbmQgSy4gUGF0ZXJzb24sICJBdXRoZW50aWNhdGVkXG4g ICAgICAgICAgICAgIEVuY3J5cHRpb24gd2l0aCBBRVMtQ0JDIGFuZCBITUFDLVNIQSIsIGRyYWZ0 LW1jZ3Jldy1hZWFkLVxuICAgICAgICAgICAgICBhZXMtY2JjLWhtYWMtc2hhMi0wNSAod29yayBp biBwcm9ncmVzcyksIEp1bHkgMjAxNC5cblxuICAgW1JGQzUyNDZdICBEaWVya3MsIFQuIGFuZCBF LiBSZXNjb3JsYSwgIlRoZSBUcmFuc3BvcnQgTGF5ZXIgU2VjdXJpdHlcbiAgICAgICAgICAgICAg KFRMUykgUHJvdG9jb2wgVmVyc2lvbiAxLjIiLCBSRkMgNTI0NiwgQXVndXN0IDIwMDguXG5cbiAg IFtSRkM1NzY2XSAgTWFoeSwgUi4sIE1hdHRoZXdzLCBQLiwgYW5kIEouIFJvc2VuYmVyZywgIlRy YXZlcnNhbCBVc2luZ1xuICAgICAgICAgICAgICBSZWxheXMgYXJvdW5kIE5BVCAoVFVSTik6IFJl bGF5IEV4dGVuc2lvbnMgdG8gU2Vzc2lvblxuICAgICAgICAgICAgICBUcmF2ZXJzYWwgVXRpbGl0 aWVzIGZvciBOQVQgKFNUVU4pIiwgUkZDIDU3NjYsIEFwcmlsIDIwMTAuXG5cbiAgIFtSRkM2MzQ3 XSAgUmVzY29ybGEsIEUuIGFuZCBOLiBNb2RhZHVndSwgIkRhdGFncmFtIFRyYW5zcG9ydCBMYXll clxuICAgICAgICAgICAgICBTZWN1cml0eSBWZXJzaW9uIDEuMiIsIFJGQyA2MzQ3LCBKYW51YXJ5 IDIwMTIuXG5cbiAgIFtSRkM2ODE5XSAgTG9kZGVyc3RlZHQsIFQuLCBNY0dsb2luLCBNLiwgYW5k IFAuIEh1bnQsICJPQXV0aCAyLjBcbiAgICAgICAgICAgICAgVGhyZWF0IE1vZGVsIGFuZCBTZWN1 cml0eSBDb25zaWRlcmF0aW9ucyIsIFJGQyA2ODE5LFxuICAgICAgICAgICAgICBKYW51YXJ5IDIw MTMuXG5cbiAgIFtSRkM3MTU5XSAgQnJheSwgVC4sICJUaGUgSmF2YVNjcmlwdCBPYmplY3QgTm90 YXRpb24gKEpTT04pIERhdGFcbiAgICAgICAgICAgICAgSW50ZXJjaGFuZ2UgRm9ybWF0IiwgUkZD IDcxNTksIE1hcmNoIDIwMTQuXG5cbiAgIFtSRkM3MzUwXSAgUGV0aXQtSHVndWVuaW4sIE0uIGFu ZCBHLiBTYWxndWVpcm8sICJEYXRhZ3JhbSBUcmFuc3BvcnRcbiAgICAgICAgICAgICAgTGF5ZXIg U2VjdXJpdHkgKERUTFMpIGFzIFRyYW5zcG9ydCBmb3IgU2Vzc2lvbiBUcmF2ZXJzYWxcbiAgICAg ICAgICAgICAgVXRpbGl0aWVzIGZvciBOQVQgKFNUVU4pIiwgUkZDIDczNTAsIEF1Z3VzdCAyMDE0 LlxuXG5cblxuXG5SZWRkeSwgZXQgYWwuICAgICAgICAgICBFeHBpcmVzIE9jdG9iZXIgMjMsIDIw MTUgICAgICAgICAgICAgICBbUGFnZSAxOF1cbl9cbkludGVybmV0LURyYWZ0ICAgICAgU1RVTiBm b3IgM3JkIHBhcnR5IEF1dGhvcml6YXRpb24gICAgICAgICAgQXByaWwgMjAxNVxuXG5cbiAgIFtS RkM3Mzc2XSAgUmVkZHksIFQuLCBSYXZpbmRyYW5hdGgsIFIuLCBQZXJ1bWFsLCBNLiwgYW5kIEEu IFllZ2luLFxuICAgICAgICAgICAgICAiUHJvYmxlbXMgd2l0aCBTZXNzaW9uIFRyYXZlcnNhbCBV dGlsaXRpZXMgZm9yIE5BVCAoU1RVTilcbiAgICAgICAgICAgICAgTG9uZy1UZXJtIEF1dGhlbnRp Y2F0aW9uIGZvciBUcmF2ZXJzYWwgVXNpbmcgUmVsYXlzIGFyb3VuZFxuICAgICAgICAgICAgICBO QVQgKFRVUk4pIiwgUkZDIDczNzYsIFNlcHRlbWJlciAyMDE0LlxuXG5BcHBlbmRpeCBBLiAgQyBT bmlwcGV0IHRvIGVuY3J5cHQvZGVjcnlwdCB0b2tlblxuXG5fQ09ERSBCRUdJTlNfXG5cbiNpbmNs dWRlIF9zdGRpby5oX1xuI2luY2x1ZGUgX3N0ZGxpYi5oX1xuI2luY2x1ZGUgX3N0ZGludC5oX1xu I2luY2x1ZGUgX3N0cmluZ3MuaF9cbiNpbmNsdWRlIF9uZXRpbmV0L2luLmhfXG4jaW5jbHVkZSBf c3lzL3R5cGVzLmhfXG5cbiNpbmNsdWRlIF9vcGVuc3NsL3NzbC5oX1xuI2luY2x1ZGUgX29wZW5z c2wvZXZwLmhfXG5cbiNkZWZpbmUgT0FVVEhfR0NNX05PTkNFX1NJWkUgKDEyKVxuI2RlZmluZSBP QVVUSF9HQ01fVEFHX1NJWkUgKDE2KVxuXG4jZGVmaW5lIE1BWF9OT05DRV9MRU5HVEggKDEyOClc biNkZWZpbmUgTUFYX01BQ19LRVlfTEVOR1RIICgxMjgpXG5cbiNkZWZpbmUgTUFYX0VOQ09ERURf T0FVVEhfVE9LRU5fU0laRSAoMTAyNClcblxuc3RydWN0IF9vYXV0aF90b2tlbiB7XG4gICAgICAg IHVpbnQxNl90IG5vbmNlX2xlbmd0aDtcbiAgICAgICAgdWludDhfdCBub25jZVtNQVhfTk9OQ0Vf TEVOR1RIXTtcbiAgICAgICAgdWludDE2X3QgbWFjX2tleV9sZW5ndGg7XG4gICAgICAgIHVpbnQ4 X3QgbWFjX2tleVtNQVhfTUFDX0tFWV9MRU5HVEhdO1xuICAgICAgICB1aW50NjRfdCB0aW1lc3Rh bXA7XG4gICAgICAgIHVpbnQzMl90IGxpZmV0aW1lO1xufTtcblxudHlwZWRlZiBzdHJ1Y3QgX29h dXRoX3Rva2VuIG9hdXRoX3Rva2VuX3Q7XG5cbnN0YXRpYyBpbnQgbXlfRVZQX0VuY3J5cHRVcGRh dGUoRVZQX0NJUEhFUl9DVFggKmN0eCwgdWludDhfdCAqb3V0LCBpbnQgKm91dGwsIGNvbnN0IHVp bnQ4X3QgKmluLCBpbnQgaW5sKVxue1xuICAgICAgICBpbnQgY3ljbGUgPSAwO1xuICAgICAgICBp bnQgb3V0X2xlbiA9IDA7XG4gICAgICAgIHdoaWxlKChvdXRfbGVuX2lubClfXygrK2N5Y2xlXzEy OCkpIHtcbiAgICAgICAgICAgICAgICBpbnQgdG1wX291dGw9MDtcbiAgICAgICAgICAgICAgICB1 bnNpZ25lZCBjaGFyICpwdHIgPSBOVUxMO1xuICAgICAgICAgICAgICAgIGlmKG91dClcbiAgICAg ICAgICAgICAgICAgICAgICAgIHB0ciA9IG91dCtvdXRfbGVuO1xuICAgICAgICAgICAgICAgIGlu dCByZXQgPSBFVlBfRW5jcnlwdFVwZGF0ZShjdHgsIHB0ciwgX3RtcF9vdXRsLCBpbitvdXRfbGVu LCBpbmwtb3V0X2xlbik7XG5cblxuXG5SZWRkeSwgZXQgYWwuICAgICAgICAgICBFeHBpcmVzIE9j dG9iZXIgMjMsIDIwMTUgICAgICAgICAgICAgICBbUGFnZSAxOV1cbl9cbkludGVybmV0LURyYWZ0 ICAgICAgU1RVTiBmb3IgM3JkIHBhcnR5IEF1dGhvcml6YXRpb24gICAgICAgICAgQXByaWwgMjAx NVxuXG5cbiAgICAgICAgICAgICAgICBvdXRfbGVuICs9IHRtcF9vdXRsO1xuICAgICAgICAgICAg ICAgIGlmKHJldF8xKVxuICAgICAgICAgICAgICAgICAgICAgICAgcmV0dXJuIHJldDtcbiAgICAg ICAgfVxuICAgICAgICAqb3V0bCA9IG91dF9sZW47XG4gICAgICAgIHJldHVybiAxO1xufVxuXG5z dGF0aWMgaW50IG15X0VWUF9EZWNyeXB0VXBkYXRlKEVWUF9DSVBIRVJfQ1RYICpjdHgsIHVpbnQ4 X3QgKm91dCxcbiAgICAgICAgICAgICAgICBpbnQgKm91dGwsIGNvbnN0IHVpbnQ4X3QgKmluLCBp bnQgaW5sKVxue1xuICAgICAgICBpbnQgY3ljbGUgPSAwO1xuICAgICAgICBpbnQgb3V0X2xlbiA9 IDA7XG4gICAgICAgIHdoaWxlKChvdXRfbGVuX2lubClfXygrK2N5Y2xlXzEyOCkpIHtcbiAgICAg ICAgICAgICAgICBpbnQgdG1wX291dGw9MDtcbiAgICAgICAgICAgICAgICB1bnNpZ25lZCBjaGFy ICpwdHIgPSBOVUxMO1xuICAgICAgICAgICAgICAgIGlmKG91dClcbiAgICAgICAgICAgICAgICAg ICAgICAgIHB0ciA9IG91dCtvdXRfbGVuO1xuICAgICAgICAgICAgICAgIGludCByZXQgPSBFVlBf RGVjcnlwdFVwZGF0ZShjdHgsIHB0ciwgX3RtcF9vdXRsLCBpbitvdXRfbGVuLCBpbmwtb3V0X2xl bik7XG4gICAgICAgICAgICAgICAgb3V0X2xlbiArPSB0bXBfb3V0bDtcbiAgICAgICAgICAgICAg ICBpZihyZXRfMSlcbiAgICAgICAgICAgICAgICAgICAgICAgIHJldHVybiByZXQ7XG4gICAgICAg IH1cbiAgICAgICAgKm91dGwgPSBvdXRfbGVuO1xuICAgICAgICByZXR1cm4gMTtcbn1cblxuc3Rh dGljIGlubGluZSB1aW50NjRfdCBudG9obGwodWludDY0X3QgdilcbntcbiNpZiBCWVRFX09SREVS ID09IExJVFRMRV9FTkRJQU5cbiAgICAgICAgdWludDhfdCAqc3JjID0gKHVpbnQ4X3QqKSBfdjtc biAgICAgICAgdWludDhfdCogZHN0ID0gc3JjICsgNztcbiAgICAgICAgd2hpbGUgKHNyYyBfIGRz dCkge1xuICAgICAgICAgICAgICAgIHVpbnQ4X3QgdmRzdCA9ICpkc3Q7XG4gICAgICAgICAgICAg ICAgKihkc3QtLSkgPSAqc3JjO1xuICAgICAgICAgICAgICAgICooc3JjKyspID0gdmRzdDtcbiAg ICAgICAgfVxuI2VsaWYgQllURV9PUkRFUiA9PSBCSUdfRU5ESUFOXG4gICAgICAgIC8qIE9LICov XG4jZWxzZVxuI2Vycm9yIFdST05HIEJZVEVfT1JERVIgU0VUVElOR1xuI2VuZGlmXG4gICAgICAg IHJldHVybiB2O1xufVxuXG5zdGF0aWMgaW50IGVuY29kZV9vYXV0aF90b2tlbl9nY20oY29uc3Qg dWludDhfdCAqc2VydmVyX25hbWUsIGNvbnN0IHVpbnQ4X3QgKmtleSxcbiAgICAgICAgICAgICAg ICBjb25zdCBvYXV0aF90b2tlbl90ICpvYXV0aF90b2tlbixcbiAgICAgICAgICAgICAgICB1aW50 OF90ICplbmNvZGVkX2J1ZmZlcikge1xuXG5cblxuUmVkZHksIGV0IGFsLiAgICAgICAgICAgRXhw aXJlcyBPY3RvYmVyIDIzLCAyMDE1ICAgICAgICAgICAgICAgW1BhZ2UgMjBdXG5fXG5JbnRlcm5l dC1EcmFmdCAgICAgIFNUVU4gZm9yIDNyZCBwYXJ0eSBBdXRob3JpemF0aW9uICAgICAgICAgIEFw cmlsIDIwMTVcblxuXG4gICAgICAgIGludCByZXQgPSAtMTtcblxuICAgICAgICBpZihzZXJ2ZXJf bmFtZSBfXyBrZXkgX18gb2F1dGhfdG9rZW4gX18gZW5jb2RlZF9idWZmZXIpIHtcblxuICAgICAg ICAgICAgICAgIHVpbnQ4X3Qgb3JpZ19maWVsZFtNQVhfRU5DT0RFRF9PQVVUSF9UT0tFTl9TSVpF XTtcbiAgICAgICAgICAgICAgICBiemVybyhvcmlnX2ZpZWxkLHNpemVvZihvcmlnX2ZpZWxkKSk7 XG5cbiAgICAgICAgICAgICAgICBzaXplX3QgbGVuID0gMDtcblxuICAgICAgICAgICAgICAgICoo KHVpbnQxNl90Kikob3JpZ19maWVsZCtsZW4pKSA9IG50b2hzKG9hdXRoX3Rva2VuLV9ub25jZV9s ZW5ndGgpO1xuICAgICAgICAgICAgICAgIGxlbiArPTI7XG5cbiAgICAgICAgICAgICAgICBiY29w eShvYXV0aF90b2tlbi1fbm9uY2Usb3JpZ19maWVsZCtsZW4sb2F1dGhfdG9rZW4tX25vbmNlX2xl bmd0aCk7XG4gICAgICAgICAgICAgICAgbGVuICs9IG9hdXRoX3Rva2VuLV9ub25jZV9sZW5ndGg7 XG5cbiAgICAgICAgICAgICAgICAqKCh1aW50MTZfdCopKG9yaWdfZmllbGQrbGVuKSkgPSBudG9o cyhvYXV0aF90b2tlbi1fbWFjX2tleV9sZW5ndGgpO1xuICAgICAgICAgICAgICAgIGxlbiArPTI7 XG5cbiAgICAgICAgICAgICAgICBiY29weShvYXV0aF90b2tlbi1fbWFjX2tleSxvcmlnX2ZpZWxk K2xlbixvYXV0aF90b2tlbi1fbWFjX2tleV9sZW5ndGgpO1xuICAgICAgICAgICAgICAgIGxlbiAr PSBvYXV0aF90b2tlbi1fbWFjX2tleV9sZW5ndGg7XG5cbiAgICAgICAgICAgICAgICAqKCh1aW50 NjRfdCopKG9yaWdfZmllbGQrbGVuKSkgPSBudG9obGwob2F1dGhfdG9rZW4tX3RpbWVzdGFtcCk7 XG4gICAgICAgICAgICAgICAgbGVuICs9IDg7XG5cbiAgICAgICAgICAgICAgICAqKCh1aW50MzJf dCopKG9yaWdfZmllbGQrbGVuKSkgPSBudG9obChvYXV0aF90b2tlbi1fbGlmZXRpbWUpO1xuICAg ICAgICAgICAgICAgIGxlbiArPSA0O1xuXG4gICAgICAgICAgICAgICAgY29uc3QgRVZQX0NJUEhF UiAqIGNpcGhlciA9IEVWUF9hZXNfMjU2X2djbSgpO1xuICAgICAgICAgICAgICAgIGlmKF9jaXBo ZXIpXG4gICAgICAgICAgICAgICAgICAgICAgICByZXR1cm4gLTE7XG5cbiAgICAgICAgICAgICAg ICBFVlBfQ0lQSEVSX0NUWCBjdHg7XG4gICAgICAgICAgICAgICAgRVZQX0NJUEhFUl9DVFhfaW5p dChfY3R4KTtcblxuICAgICAgICAgICAgICAgIC8qIEluaXRpYWxpemUgdGhlIGVuY3J5cHRpb24g b3BlcmF0aW9uLiAqL1xuICAgICAgICAgICAgICAgIGlmKDEgXz0gRVZQX0VuY3J5cHRJbml0X2V4 KF9jdHgsIGNpcGhlciwgTlVMTCwgTlVMTCwgTlVMTCkpXG4gICAgICAgICAgICAgICAgICAgICAg ICByZXR1cm4gLTE7XG5cbiAgICAgICAgICAgICAgICBFVlBfQ0lQSEVSX0NUWF9zZXRfcGFkZGlu ZyhfY3R4LDEpO1xuXG4gICAgICAgICAgICAgICAgLyogU2V0IElWIGxlbmd0aCBpZiBkZWZhdWx0 IDEyIGJ5dGVzICg5NiBiaXRzKSBpcyBub3QgYXBwcm9wcmlhdGUgKi9cbiAgICAgICAgICAgICAg ICBpZigxIF89IEVWUF9DSVBIRVJfQ1RYX2N0cmwoX2N0eCwgRVZQX0NUUkxfR0NNX1NFVF9JVkxF Tiwgb2F1dGhfdG9rZW4tX25vbmNlX2xlbmd0aCwgTlVMTCkpXG4gICAgICAgICAgICAgICAgICAg ICAgICByZXR1cm4gLTE7XG5cbiAgICAgICAgICAgICAgICAvKiBJbml0aWFsaXplIGtleSBhbmQg SVYgKi9cbiAgICAgICAgICAgICAgICBpZigxIF89IEVWUF9FbmNyeXB0SW5pdF9leChfY3R4LCBO VUxMLCBOVUxMLCBrZXksIG9hdXRoX3Rva2VuLV9ub25jZSkpXG4gICAgICAgICAgICAgICAgICAg ICAgICByZXR1cm4gLTE7XG5cblxuXG5cblJlZGR5LCBldCBhbC4gICAgICAgICAgIEV4cGlyZXMg T2N0b2JlciAyMywgMjAxNSAgICAgICAgICAgICAgIFtQYWdlIDIxXVxuX1xuSW50ZXJuZXQtRHJh ZnQgICAgICBTVFVOIGZvciAzcmQgcGFydHkgQXV0aG9yaXphdGlvbiAgICAgICAgICBBcHJpbCAy MDE1XG5cblxuICAgICAgICAgICAgICAgIGludCBvdXRsPTA7XG4gICAgICAgICAgICAgICAgc2l6 ZV90IHNuX2xlbiA9IHN0cmxlbigoY29uc3QgY2hhciopc2VydmVyX25hbWUpO1xuXG4gICAgICAg ICAgICAgICAgLyogUHJvdmlkZSBhbnkgQUFEIGRhdGEuIFRoaXMgY2FuIGJlIGNhbGxlZCB6ZXJv IG9yIG1vcmUgdGltZXMgYXNcbiAgICAgICAgICAgICAgICAgKiByZXF1aXJlZFxuICAgICAgICAg ICAgICAgICAqL1xuICAgICAgICAgICAgICAgIGlmKDEgXz0gbXlfRVZQX0VuY3J5cHRVcGRhdGUo X2N0eCwgTlVMTCwgX291dGwsIHNlcnZlcl9uYW1lLCAoaW50KXNuX2xlbikpXG4gICAgICAgICAg ICAgICAgICAgICAgICByZXR1cm4gLTE7XG5cbiAgICAgICAgICAgICAgICBvdXRsPTA7XG4gICAg ICAgICAgICAgICAgYmNvcHkob3JpZ19maWVsZCxlbmNvZGVkX2J1ZmZlcixvYXV0aF90b2tlbi1f bm9uY2VfbGVuZ3RoICsgMik7XG4gICAgICAgICAgICAgICAgZW5jb2RlZF9idWZmZXIgKz0gb2F1 dGhfdG9rZW4tX25vbmNlX2xlbmd0aCArIDI7XG4gICAgICAgICAgICAgICAgdWludDhfdCAqc3Rh cnRfZmllbGQgPSBvcmlnX2ZpZWxkICsgb2F1dGhfdG9rZW4tX25vbmNlX2xlbmd0aCArIDI7XG4g ICAgICAgICAgICAgICAgbGVuIC09IG9hdXRoX3Rva2VuLV9ub25jZV9sZW5ndGggKyAyO1xuXG4g ICAgICAgICAgICAgICAgaWYoMSBfPSBteV9FVlBfRW5jcnlwdFVwZGF0ZShfY3R4LCBlbmNvZGVk X2J1ZmZlciwgX291dGwsIHN0YXJ0X2ZpZWxkLCAoaW50KWxlbikpXG4gICAgICAgICAgICAgICAg ICAgICAgICByZXR1cm4gLTE7XG5cbiAgICAgICAgICAgICAgICBpbnQgdG1wX291dGwgPSAwO1xu ICAgICAgICAgICAgICAgIEVWUF9FbmNyeXB0RmluYWxfZXgoX2N0eCwgZW5jb2RlZF9idWZmZXIg KyBvdXRsLCBfdG1wX291dGwpO1xuICAgICAgICAgICAgICAgIG91dGwgKz0gdG1wX291dGw7XG5c biAgICAgICAgICAgICAgICBFVlBfQ0lQSEVSX0NUWF9jdHJsKF9jdHgsIEVWUF9DVFJMX0dDTV9H RVRfVEFHLCBPQVVUSF9HQ01fVEFHX1NJWkUsIGVuY29kZWRfYnVmZmVyICsgb3V0bCk7XG4gICAg ICAgICAgICAgICAgb3V0bCArPSBPQVVUSF9HQ01fVEFHX1NJWkU7XG5cbiAgICAgICAgICAgICAg ICByZXQgPSAoaW50KSgyICsgb2F1dGhfdG9rZW4tX25vbmNlX2xlbmd0aCArIG91dGwpO1xuXG4g ICAgICAgICAgICAgICAgRVZQX0NJUEhFUl9DVFhfY2xlYW51cChfY3R4KTtcbiAgICAgICAgfVxu XG4gICAgICAgIHJldHVybiByZXQ7XG59XG5cbnN0YXRpYyBpbnQgZGVjb2RlX29hdXRoX3Rva2Vu X2djbShjb25zdCB1aW50OF90ICpzZXJ2ZXJfbmFtZSwgY29uc3QgdWludDhfdCAqa2V5LFxuICAg ICAgICAgICAgICAgIG9hdXRoX3Rva2VuX3QgKm9hdXRoX3Rva2VuLFxuICAgICAgICAgICAgICAg IGNvbnN0IHVpbnQ4X3QgKmVuY29kZWRfYnVmZmVyLCBzaXplX3QgZW5jb2RlZF9idWZmZXJfc2l6 ZSlcbntcbiAgICAgICAgaW50IHJldCA9IC0xO1xuXG4gICAgICAgIGlmKHNlcnZlcl9uYW1lIF9f IGtleSBfXyBvYXV0aF90b2tlbiBfXyBlbmNvZGVkX2J1ZmZlcikge1xuXG4gICAgICAgICAgICAg ICAgb2F1dGhfdG9rZW4tX25vbmNlX2xlbmd0aCA9IG50b2hzKCooKGNvbnN0IHVpbnQxNl90Kill bmNvZGVkX2J1ZmZlcikpO1xuICAgICAgICAgICAgICAgIGJjb3B5KGVuY29kZWRfYnVmZmVyKzIs b2F1dGhfdG9rZW4tX25vbmNlLG9hdXRoX3Rva2VuLV9ub25jZV9sZW5ndGgpO1xuXG4gICAgICAg ICAgICAgICAgY29uc3QgdWludDhfdCogZW5jcnlwdGVkX2ZpZWxkID0gKGNvbnN0IHVpbnQ4X3Qq KShlbmNvZGVkX2J1ZmZlciArIG9hdXRoX3Rva2VuLV9ub25jZV9sZW5ndGggKyAyKTtcbiAgICAg ICAgICAgICAgICBzaXplX3QgZW5jcnlwdGVkX2ZpZWxkX3NpemUgPSAoc2l6ZV90KShlbmNvZGVk X2J1ZmZlcl9zaXplIC0gb2F1dGhfdG9rZW4tX25vbmNlX2xlbmd0aCAtIDIgLSBPQVVUSF9HQ01f VEFHX1NJWkUpO1xuXG4gICAgICAgICAgICAgICAgdWludDhfdCB0YWdbT0FVVEhfR0NNX1RBR19T SVpFXTtcblxuXG5cblJlZGR5LCBldCBhbC4gICAgICAgICAgIEV4cGlyZXMgT2N0b2JlciAyMywg MjAxNSAgICAgICAgICAgICAgIFtQYWdlIDIyXVxuX1xuSW50ZXJuZXQtRHJhZnQgICAgICBTVFVO IGZvciAzcmQgcGFydHkgQXV0aG9yaXphdGlvbiAgICAgICAgICBBcHJpbCAyMDE1XG5cblxuICAg ICAgICAgICAgICAgIGJjb3B5KGVuY3J5cHRlZF9maWVsZCArIGVuY3J5cHRlZF9maWVsZF9zaXpl LCB0YWcgLHNpemVvZih0YWcpKTtcblxuICAgICAgICAgICAgICAgIHVpbnQ4X3QgZGVjb2RlZF9m aWVsZFtNQVhfRU5DT0RFRF9PQVVUSF9UT0tFTl9TSVpFXTtcblxuICAgICAgICAgICAgICAgIGNv bnN0IEVWUF9DSVBIRVIgKiBjaXBoZXIgPSBFVlBfYWVzXzI1Nl9nY20oKTtcbiAgICAgICAgICAg ICAgICBpZihfY2lwaGVyKSB7XG4gICAgICAgICAgICAgICAgICAgICAgICByZXR1cm4gLTE7XG4g ICAgICAgICAgICAgICAgfVxuXG4gICAgICAgICAgICAgICAgRVZQX0NJUEhFUl9DVFggY3R4O1xu ICAgICAgICAgICAgICAgIEVWUF9DSVBIRVJfQ1RYX2luaXQoX2N0eCk7XG4gICAgICAgICAgICAg ICAgLyogSW5pdGlhbGl6ZSB0aGUgZGVjcnlwdGlvbiBvcGVyYXRpb24uICovXG4gICAgICAgICAg ICAgICAgaWYoMSBfPSBFVlBfRGVjcnlwdEluaXRfZXgoX2N0eCwgY2lwaGVyLCBOVUxMLCBOVUxM LCBOVUxMKSkge1xuICAgICAgICAgICAgICAgICAgICAgICAgcmV0dXJuIC0xO1xuICAgICAgICAg ICAgICAgIH1cblxuICAgICAgICAgICAgICAgIC8qIFNldCBJViBsZW5ndGggaWYgZGVmYXVsdCAx MiBieXRlcyAoOTYgYml0cykgaXMgbm90IGFwcHJvcHJpYXRlICovXG4gICAgICAgICAgICAgICAg aWYoMSBfPSBFVlBfQ0lQSEVSX0NUWF9jdHJsKF9jdHgsIEVWUF9DVFJMX0dDTV9TRVRfSVZMRU4s IG9hdXRoX3Rva2VuLV9ub25jZV9sZW5ndGgsIE5VTEwpKSB7XG4gICAgICAgICAgICAgICAgICAg ICAgICByZXR1cm4gLTE7XG4gICAgICAgICAgICAgICAgfVxuXG4gICAgICAgICAgICAgICAgLyog SW5pdGlhbGl6ZSBrZXkgYW5kIElWICovXG4gICAgICAgICAgICAgICAgaWYoMSBfPSBFVlBfRGVj cnlwdEluaXRfZXgoX2N0eCwgTlVMTCwgTlVMTCwgKGNvbnN0IHVuc2lnbmVkIGNoYXIgKilrZXks IG9hdXRoX3Rva2VuLV9ub25jZSkpIHtcbiAgICAgICAgICAgICAgICAgICAgICAgIHJldHVybiAt MTtcbiAgICAgICAgICAgICAgICB9XG5cbiAgICAgICAgICAgICAgICAvKiBTZXQgZXhwZWN0ZWQg dGFnIHZhbHVlLiBBIHJlc3RyaWN0aW9uIGluIE9wZW5TU0wgMS4wLjFjIGFuZCBlYXJsaWVyXG4g ICAgICAgICAgICAgICAgICArICAgICAgICAgKiByZXF1aXJlZCB0aGUgdGFnIGJlZm9yZSBhbnkg QUFEIG9yIGNpcGhlcnRleHQgKi9cbiAgICAgICAgICAgICAgICBFVlBfQ0lQSEVSX0NUWF9jdHJs IChfY3R4LCBFVlBfQ1RSTF9HQ01fU0VUX1RBRywgT0FVVEhfR0NNX1RBR19TSVpFLCB0YWcpO1xu XG4gICAgICAgICAgICAgICAgaW50IG91dGw9MDtcbiAgICAgICAgICAgICAgICBzaXplX3Qgc25f bGVuID0gc3RybGVuKChjb25zdCBjaGFyKilzZXJ2ZXJfbmFtZSk7XG5cbiAgICAgICAgICAgICAg ICAvKiBQcm92aWRlIGFueSBBQUQgZGF0YS4gVGhpcyBjYW4gYmUgY2FsbGVkIHplcm8gb3IgbW9y ZSB0aW1lcyBhc1xuICAgICAgICAgICAgICAgICAqIHJlcXVpcmVkXG4gICAgICAgICAgICAgICAg ICovXG4gICAgICAgICAgICAgICAgaWYoMSBfPSBteV9FVlBfRGVjcnlwdFVwZGF0ZShfY3R4LCBO VUxMLCBfb3V0bCwgc2VydmVyX25hbWUsIChpbnQpc25fbGVuKSkge1xuICAgICAgICAgICAgICAg ICAgICAgICAgcmV0dXJuIC0xO1xuICAgICAgICAgICAgICAgIH1cbiAgICAgICAgICAgICAgICBp ZigxIF89IG15X0VWUF9EZWNyeXB0VXBkYXRlKF9jdHgsIGRlY29kZWRfZmllbGQsIF9vdXRsLCBl bmNyeXB0ZWRfZmllbGQsIChpbnQpZW5jcnlwdGVkX2ZpZWxkX3NpemUpKSB7XG4gICAgICAgICAg ICAgICAgICAgICAgICByZXR1cm4gLTE7XG4gICAgICAgICAgICAgICAgfVxuXG4gICAgICAgICAg ICAgICAgaW50IHRtcF9vdXRsID0gMDtcbiAgICAgICAgICAgICAgICBpZihFVlBfRGVjcnlwdEZp bmFsX2V4KF9jdHgsIGRlY29kZWRfZmllbGQgKyBvdXRsLCBfdG1wX291dGwpXzEpIHtcbiAgICAg ICAgICAgICAgICAgICAgICAgIEVWUF9DSVBIRVJfQ1RYX2NsZWFudXAoX2N0eCk7XG4gICAgICAg ICAgICAgICAgICAgICAgICByZXR1cm4gLTE7XG4gICAgICAgICAgICAgICAgfVxuXG5cblxuUmVk ZHksIGV0IGFsLiAgICAgICAgICAgRXhwaXJlcyBPY3RvYmVyIDIzLCAyMDE1ICAgICAgICAgICAg ICAgW1BhZ2UgMjNdXG5fXG5JbnRlcm5ldC1EcmFmdCAgICAgIFNUVU4gZm9yIDNyZCBwYXJ0eSBB dXRob3JpemF0aW9uICAgICAgICAgIEFwcmlsIDIwMTVcblxuXG4gICAgICAgICAgICAgICAgb3V0 bCArPSB0bXBfb3V0bDtcblxuICAgICAgICAgICAgICAgIEVWUF9DSVBIRVJfQ1RYX2NsZWFudXAo X2N0eCk7XG5cbiAgICAgICAgICAgICAgICBzaXplX3QgbGVuID0gMDtcblxuICAgICAgICAgICAg ICAgIG9hdXRoX3Rva2VuLV9tYWNfa2V5X2xlbmd0aCA9IG50b2hzKCooKHVpbnQxNl90KikoZGVj b2RlZF9maWVsZCtsZW4pKSk7XG4gICAgICAgICAgICAgICAgbGVuICs9IDI7XG5cbiAgICAgICAg ICAgICAgICBiY29weShkZWNvZGVkX2ZpZWxkK2xlbixvYXV0aF90b2tlbi1fbWFjX2tleSxvYXV0 aF90b2tlbi1fbWFjX2tleV9sZW5ndGgpO1xuICAgICAgICAgICAgICAgIGxlbiArPSBvYXV0aF90 b2tlbi1fbWFjX2tleV9sZW5ndGg7XG5cbiAgICAgICAgICAgICAgICBvYXV0aF90b2tlbi1fdGlt ZXN0YW1wID0gbnRvaGxsKCooKHVpbnQ2NF90KikoZGVjb2RlZF9maWVsZCtsZW4pKSk7XG4gICAg ICAgICAgICAgICAgbGVuICs9IDg7XG5cbiAgICAgICAgICAgICAgICBvYXV0aF90b2tlbi1fbGlm ZXRpbWUgPSBudG9obCgqKCh1aW50MzJfdCopKGRlY29kZWRfZmllbGQrbGVuKSkpO1xuICAgICAg ICAgICAgICAgIGxlbiArPSA0O1xuXG4gICAgICAgICAgICAgICAgcmV0ID0gbGVuO1xuICAgICAg ICB9XG4gICAgICAgIHJldHVybiByZXQ7XG59XG5cbmludCBtYWluKCkge1xuXG4gICAgICAgIFNT TF9sb2FkX2Vycm9yX3N0cmluZ3MoKTtcbiAgICAgICAgT3BlblNTTF9hZGRfc3NsX2FsZ29yaXRo bXMoKTtcblxuICAgICAgICBvYXV0aF90b2tlbl90IG9hdXRoX3Rva2VuID0geyBPQVVUSF9HQ01f Tk9OQ0VfU0laRSwgImg0ajNrMmwybjRiNSIsXG4gICAgICAgICAgICAgICAgMjAsICJaa3NqcHdl b2l4WG12bjY3NTM0bSIsXG4gICAgICAgICAgICAgICAgKHVpbnQ2NF90KSg5MjQ3MDMwMDcwNDc2 OExMKSwgMzYwMFxuICAgICAgICB9O1xuXG4gICAgICAgIGNvbnN0IGNoYXIgc2VydmVyX25hbWVb MzNdID0gImJsYWNrZG93LmNhcmxlb24uZ292IjtcblxuICAgICAgICBjb25zdCBjaGFyIGtleVsz M10gPSAiSEdrajMyS0pHaXV5MDk4c2RmYXFiTmpPaWF6NzE5MjMiO1xuXG4gICAgICAgIHVpbnQ4 X3QgZW5jb2RlZF9idWZmZXJbTUFYX0VOQ09ERURfT0FVVEhfVE9LRU5fU0laRV07XG5cbiAgICAg ICAgaW50IGxlbiA9IGVuY29kZV9vYXV0aF90b2tlbl9nY20oKGNvbnN0IHVpbnQ4X3QgKilzZXJ2 ZXJfbmFtZSwgKGNvbnN0IHVpbnQ4X3QgKilrZXksXG4gICAgICAgICAgICAgICAgICAgICAgICBf b2F1dGhfdG9rZW4sXG4gICAgICAgICAgICAgICAgICAgICAgICBlbmNvZGVkX2J1ZmZlcik7XG5c biAgICAgICAgaWYobGVuXzApIHtcbiAgICAgICAgICAgICAgICBmcHJpbnRmKHN0ZGVyciwiQ2Fu bm90IGVuY29kZSB0b2tlblxcbiIpO1xuICAgICAgICAgICAgICAgIGV4aXQoLTEpO1xuICAgICAg ICB9XG5cblxuXG5cblJlZGR5LCBldCBhbC4gICAgICAgICAgIEV4cGlyZXMgT2N0b2JlciAyMywg MjAxNSAgICAgICAgICAgICAgIFtQYWdlIDI0XVxuX1xuSW50ZXJuZXQtRHJhZnQgICAgICBTVFVO IGZvciAzcmQgcGFydHkgQXV0aG9yaXphdGlvbiAgICAgICAgICBBcHJpbCAyMDE1XG5cblxuICAg ICAgICBvYXV0aF90b2tlbl90IG9hdXRoX3Rva2VuX2RlY29kZWQ7XG5cbiAgICAgICAgbGVuID0g ZGVjb2RlX29hdXRoX3Rva2VuX2djbSgoY29uc3QgdWludDhfdCAqKXNlcnZlcl9uYW1lLCAoY29u c3QgdWludDhfdCAqKWtleSxcbiAgICAgICAgICAgICAgICAgICAgICAgIF9vYXV0aF90b2tlbl9k ZWNvZGVkLFxuICAgICAgICAgICAgICAgICAgICAgICAgZW5jb2RlZF9idWZmZXIsIChzaXplX3Qp bGVuKTtcblxuICAgICAgICBpZihsZW5fMCkge1xuICAgICAgICAgICAgICAgIGZwcmludGYoc3Rk ZXJyLCJDYW5ub3QgZGVjb2RlIHRva2VuXFxuIik7XG4gICAgICAgICAgICAgICAgZXhpdCgtMSk7 XG4gICAgICAgIH1cblxuICAgICAgICBpZihcbiAgICAgICAgICAgICAgICAgICAgICAgIChvYXV0 aF90b2tlbi5ub25jZV9sZW5ndGggXz0gb2F1dGhfdG9rZW5fZGVjb2RlZC5ub25jZV9sZW5ndGgp IF9fXG4gICAgICAgICAgICAgICAgICAgICAgICAoYmNtcChvYXV0aF90b2tlbi5ub25jZSxvYXV0 aF90b2tlbl9kZWNvZGVkLm5vbmNlLG9hdXRoX3Rva2VuLm5vbmNlX2xlbmd0aClfPTApIF9fXG4g ICAgICAgICAgICAgICAgICAgICAgICAob2F1dGhfdG9rZW4ubWFjX2tleV9sZW5ndGggXz0gb2F1 dGhfdG9rZW5fZGVjb2RlZC5tYWNfa2V5X2xlbmd0aCkgX19cbiAgICAgICAgICAgICAgICAgICAg ICAgIChiY21wKG9hdXRoX3Rva2VuLm1hY19rZXksb2F1dGhfdG9rZW5fZGVjb2RlZC5tYWNfa2V5 LG9hdXRoX3Rva2VuLm1hY19rZXlfbGVuZ3RoKV89MCkgX19cbiAgICAgICAgICAgICAgICAgICAg ICAgIChvYXV0aF90b2tlbi50aW1lc3RhbXAgXz0gb2F1dGhfdG9rZW5fZGVjb2RlZC50aW1lc3Rh bXApIF9fXG4gICAgICAgICAgICAgICAgICAgICAgICAob2F1dGhfdG9rZW4ubGlmZXRpbWUgXz0g b2F1dGhfdG9rZW5fZGVjb2RlZC5saWZldGltZSkpIHtcbiAgICAgICAgICAgICAgICBmcHJpbnRm KHN0ZGVyciwiSW5jb3JyZWN0bHkgZGVjb2RlZCB0b2tlblxcbiIpO1xuICAgICAgICAgICAgICAg IGV4aXQoLTEpO1xuICAgICAgICB9XG5cbiAgICAgICAgZnByaW50ZihzdGRvdXQsIlNVQ0NFU1Mg X1xcbiIpO1xuXG4gICAgICAgIHJldHVybiAwO1xufVxuXG5fQ09ERSBFTkRTX1xuXG5JbnB1dCBk YXRhIChzYW1lIGZvciBhbGwgc2FtcGxlcyBiZWxvdyk6XG5cbiAgIC8vU1RVTiBTRVJWRVIgTkFN RVxuICAgc2VydmVyX25hbWUgPSAiYmxhY2tkb3cuY2FybGVvbi5nb3YiO1xuXG4gICAvL1NoYXJl ZCBrZXkgYmV0d2VlbiBBUyBhbmQgUlNcblxuICAgbG9uZ190ZXJtX2tleSA9IFxceDQ4XFx4NDdc XHg2YlxceDZhXFx4MzNcXHgzMlxceDRiXFx4NGFcXHg0N1xceDY5XFx4NzVcXHg3OVxuICAgICAg ICAgICAgICAgICAgIFxceDMwXFx4MzlcXHgzOFxceDczXFx4NjRcXHg2NlxceDYxXFx4NzFcXHg2 MlxceDRlXFx4NmFcXHg0ZlxuICAgICAgICAgICAgICAgICAgIFxceDY5XFx4NjFcXHg3YVxceDM3 XFx4MzFcXHgzOVxceDMyXFx4MzNcblxuICAgLy9NQUMga2V5IG9mIHRoZSBzZXNzaW9uIChpbmNs dWRlZCBpbiB0aGUgdG9rZW4pXG4gICBtYWNfa2V5ID0gXFx4NWFcXHg2YlxceDczXFx4NmFcXHg3 MFxceDc3XFx4NjVcXHg2ZlxceDY5XFx4NzhcXHg1OFxceDZkXFx4NzZcXHg2ZVxuICAgICAgICAg ICAgIFxceDM2XFx4MzdcXHgzNVxceDMzXFx4MzRcXHg2ZDtcblxuICAgLy9sZW5ndGggb2YgdGhl IE1BQyBrZXlcbiAgIG1hY19rZXlfbGVuZ3RoICA9ICAyMDtcblxuICAgLy9UaGUgdGltZXN0YW1w IGZpZWxkIGluIHRoZSB0b2tlblxuXG5cblxuUmVkZHksIGV0IGFsLiAgICAgICAgICAgRXhwaXJl cyBPY3RvYmVyIDIzLCAyMDE1ICAgICAgICAgICAgICAgW1BhZ2UgMjVdXG5fXG5JbnRlcm5ldC1E cmFmdCAgICAgIFNUVU4gZm9yIDNyZCBwYXJ0eSBBdXRob3JpemF0aW9uICAgICAgICAgIEFwcmls IDIwMTVcblxuXG4gICB0b2tlbl90aW1lc3RhbXAgPSA5MjQ3MDMwMDcwNDc2ODtcblxuICAgLy9U aGUgbGlmZXRpbWUgb2YgdGhlIHRva2VuXG4gICB0b2tlbl9saWZldGltZSA9IDM2MDA7XG5cbiAg IC8vbm9uY2UgZm9yIEFFQURcbiAgIGFlYWRfbm9uY2UgPSBcXHg2OFxceDM0XFx4NmFcXHgzM1xc eDZiXFx4MzJcXHg2Y1xceDMyXFx4NmVcXHgzNFxceDYyXFx4MzU7XG5cbiAgIFNhbXBsZXM6XG5c biAgICAgMSkgdG9rZW4gZW5jcnlwdGlvbiBhbGdvcml0aG0gPSBBRUFEX0FFU18yNTZfR0NNXG5c biAgICAgRW5jcnlwdGVkIHRva2VuICg2NCBieXRlcyA9IDIgKyAxMiArMzQgKyAxNikgPVxuXG4g ICAgXFx4MDBcXHgwY1xceDY4XFx4MzRcXHg2YVxceDMzXFx4NmJcXHgzMlxceDZjXFx4MzJcXHg2 ZVxceDM0XFx4NjJcbiAgICBcXHgzNVxceDYxXFx4N2VcXHhmMVxceDM0XFx4YTNcXHhkNVxceGU0 XFx4NGVcXHg5YVxceDE5XFx4Y2NcXHg3ZFxuICAgIFxceGMxXFx4MDRcXHhiMFxceGMwXFx4M2Rc XHgwM1xceGIyXFx4YTVcXHg1MVxceGQ4XFx4ZmRcXHhmNVxceGNkXG4gICAgXFx4M2JcXHg2ZFxc eGNhXFx4NmZcXHgxMFxceGNmXFx4YjdcXHg3ZVxceDViXFx4MmRcXHhkZVxceGM4XFx4NGRcbiAg ICBcXHgyOVxceDNhXFx4NWNcXHg1MFxceDQ5XFx4OTNcXHg1OVxceGYwXFx4YzJcXHhlMlxceDZm XFx4NzZcblxuICAyKSB0b2tlbiBlbmNyeXB0aW9uIGFsZ29yaXRobSA9IEFFQURfQUVTXzEyOF9H Q01cblxuICAgICBFbmNyeXB0ZWQgdG9rZW4gKDY0IGJ5dGVzID0gMiArIDEyICszNCArIDE2KSA9 XG5cbiAgIFxceDAwXFx4MGNcXHg2OFxceDM0XFx4NmFcXHgzM1xceDZiXFx4MzJcXHg2Y1xceDMy XFx4NmVcXHgzNFxceDYyXG4gICBcXHgzNVxceDdmXFx4YjlcXHhlOVxceDlmXFx4MDhcXHgyN1xc eGJlXFx4M2RcXHhmMVxceGUxXFx4YmRcXHg2NVxuICAgXFx4MTRcXHg5M1xceGQzXFx4MDNcXHgx ZFxceDM2XFx4ZGZcXHg1N1xceDA3XFx4OTdcXHg4NFxceGFlXFx4ZTVcbiAgIFxceGVhXFx4Y2Jc XHg2NVxceGZhXFx4ZDRcXHhmMlxceDdmXFx4YWJcXHgxYVxceDNmXFx4OTdcXHg5N1xceDRiXG4g ICBcXHg2OVxceGY4XFx4NTFcXHhiMlxceDRiXFx4ZjVcXHhhZlxceDA5XFx4ZWRcXHhhM1xceDU3 XFx4ZTBcblxuXG5cblxuICAgICAgICAgICAgICAgICAgICAgICAgICAgRmlndXJlIDU6IFNhbXBs ZSBjb2RlXG5cbkFwcGVuZGl4IEIuICBJbnRlcmFjdGlvbiBiZXR3ZWVuIGNsaWVudCBhbmQgYXV0 aG9yaXphdGlvbiBzZXJ2ZXJcblxuICAgQ2xpZW50IG1ha2VzIGFuIEhUVFAgcmVxdWVzdCB0byBh biBhdXRob3JpemF0aW9uIHNlcnZlciB0byBvYnRhaW4gYVxuICAgdG9rZW4gdGhhdCBjYW4gYmUg dXNlZCB0byBhdmFpbCBpdHNlbGYgb2YgU1RVTiBzZXJ2aWNlcy4gIFRoZSBTVFVOXG4gICB0b2tl biBpcyByZXR1cm5lZCBpbiBKU09OIHN5bnRheCBbUkZDNzE1OV0sIGFsb25nIHdpdGggb3RoZXIg T0F1dGhcbiAgIDIuMCBwYXJhbWV0ZXJzIGxpa2UgdG9rZW4gdHlwZSwga2V5LCB0b2tlbiBsaWZl dGltZSBhbmQga2lkIGRlZmluZWRcbiAgIGluIFtJLUQuaWV0Zi1vYXV0aC1wb3Ata2V5LWRpc3Ry aWJ1dGlvbl0uXG5cblxuXG5cblxuXG5cblxuXG5SZWRkeSwgZXQgYWwuICAgICAgICAgICBFeHBp cmVzIE9jdG9iZXIgMjMsIDIwMTUgICAgICAgICAgICAgICBbUGFnZSAyNl1cbl9cbkludGVybmV0 LURyYWZ0ICAgICAgU1RVTiBmb3IgM3JkIHBhcnR5IEF1dGhvcml6YXRpb24gICAgICAgICAgQXBy aWwgMjAxNVxuXG5cbiAgICstLS0tLS0tLS0tLS0tLS0tLS0tKyAgICAgICAgICAgICAgICAgICAg ICAgICArLS0tLS0tLS0rICArLS0tLS0tLS0tK1xuICAgXyAuLi4uLi4uLi4gIFNUVU4gICBfICAg ICAgICAgICAgICAgICAgICAgICAgIF8gIFNUVU4gIF8gIF8gIFdlYlJUQyBfXG4gICBfIC5XZWJS VEMgLiAgQ2xpZW50IF8gICAgICAgICAgICAgICAgICAgICAgICAgXyAgICAgICAgXyAgXyAgICAg ICAgIF9cbiAgIF8gLkNsaWVudCAuICAgICAgICAgXyAgICAgICAgICAgICAgICAgICAgICAgICBf IFNlcnZlciBfICBfICBTZXJ2ZXIgX1xuICAgXyAuLi4uLi4uLi4gICAgICAgICBfICAgICAgICAg ICAgICAgICAgICAgICAgIF8gICAgICAgIF8gIF8gICAgICAgICBfXG4gICArLS0tLS0tLS0tLS0t LS0tLS0tLSsgICAgICAgICAgICAgICAgICAgICAgICAgKy0tLS0tLS0tKyAgKy0tLS0tLS0tLStc biAgICAgXyAgICAgICBfICAgICAgICAgICBTVFVOIHJlcXVlc3QgICAgICAgICAgICAgICAgICAg IF8gICAgICAgICBfXG4gICAgIF8gICAgICAgXy0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLV9fICAgICAgICAgX1xuICAgICBfICAgICAgIF8gICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgXyAgICAgICAgIF9cbiAgICAgXyAgICAgICBfICAg ICAgICAgU1RVTiBlcnJvciByZXNwb25zZSAgICAgICAgICAgICAgIF8gICAgICAgICBfXG4gICAg IF8gICAgICAgXyAgICAgICAgICg0MDEgVW5hdXRob3JpemVkKSAgICAgICAgICAgICAgICBfICAg ICAgICAgX1xuICAgICBfICAgICAgIF9fLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tXyAgICAgICAgIF9cbiAgICAgXyAgICAgICBfICAgICAgICAgVEhJUkQtUEFSVFkt QVVUSE9SSVpBVElPTiAgICAgICAgIF8gICAgICAgICBfXG4gICAgIF8gICAgICAgXyAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICBfICAgICAgICAgX1xuICAgICBfICAg ICAgIF8gICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgXyAgICAgICAg IF9cbiAgICAgXyAgICAgICBfICAgICAgSFRUUCBSZXF1ZXN0IGZvciB0b2tlbiAgICAgICAgICAg ICAgIF8gICAgICAgICBfXG4gICAgIF8tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS1fX1xuICAgICBfICAgICAgIF8gICAgICBIVFRQIFJl c3BvbnNlIHdpdGggdG9rZW4gcGFyYW1ldGVycyAgXyAgICAgICAgIF9cbiAgICAgX18tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS1fXG4g ICAgIF9PQXV0aCAyLjAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICBf ICAgICAgICAgX1xuICAgICAgQXR0cmlidXRlcyAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgXyAgICAgICAgIF9cbiAgICAgXy0tLS0tLV9fICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgIF8gICAgICAgICBfXG4gICAgIF8gICAgICAgXyAgICBT VFVOIHJlcXVlc3Qgd2l0aCBBQ0NFU1MtVE9LRU4gICAgICAgICBfICAgICAgICAgX1xuICAgICBf ICAgICAgIF8tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS1fXyAgICAg ICAgIF9cbiAgICAgXyAgICAgICBfICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgIF8gICAgICAgICBfXG4gICAgIF8gICAgICAgXyAgICAgICAgIFNUVU4gc3VjY2VzcyBy ZXNwb25zZSAgICAgICAgICAgICBfICAgICAgICAgX1xuICAgICBfICAgICAgIF9fLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tXyAgICAgICAgIF9cbiAgICAgXyAgICAg ICBfICAgICAgICAgICAgIFNUVU4gTWVzc2FnZXMgICAgICAgICAgICAgICAgIF8gICAgICAgICBf XG4gICAgIF8gICAgICAgXyAgICAgIC8vLy8vLyBpbnRlZ3JpdHkgcHJvdGVjdGVkIC8vLy8vLyAg ICBfICAgICAgICAgX1xuICAgICBfICAgICAgIF8gICAgICAvLy8vLy8gaW50ZWdyaXR5IHByb3Rl Y3RlZCAvLy8vLy8gICAgXyAgICAgICAgIF9cbiAgICAgXyAgICAgICBfICAgICAgLy8vLy8vIGlu dGVncml0eSBwcm90ZWN0ZWQgLy8vLy8vICAgIF8gICAgICAgICBfXG5cbiAgICAgICAgICAgICAg ICAgRmlndXJlIDY6IFNUVU4gVGhpcmQgUGFydHkgQXV0aG9yaXphdGlvblxuXG4gICBbSS1ELmll dGYtb2F1dGgtcG9wLWtleS1kaXN0cmlidXRpb25dIGRlc2NyaWJlcyB0aGUgaW50ZXJhY3Rpb25c biAgIGJldHdlZW4gdGhlIGNsaWVudCBhbmQgdGhlIGF1dGhvcml6YXRpb24gc2VydmVyLiAgRm9y IGV4YW1wbGUsIHRoZVxuICAgY2xpZW50IGxlYXJucyB0aGUgU1RVTiBzZXJ2ZXIgbmFtZSAic3R1 bjFAZXhhbXBsZS5jb20iIGZyb20gVEhJUkQtXG4gICBQQVJUWS1BVVRIT1JJWkFUSU9OIGF0dHJp YnV0ZSB2YWx1ZSBhbmQgbWFrZXMgdGhlIGZvbGxvd2luZyBIVFRQXG4gICByZXF1ZXN0IGZvciB0 aGUgYWNjZXNzIHRva2VuIHVzaW5nIHRyYW5zcG9ydC1sYXllciBzZWN1cml0eSAod2l0aFxuICAg ZXh0cmEgbGluZSBicmVha3MgZm9yIGRpc3BsYXkgcHVycG9zZXMgb25seSk6XG5cblxuXG5cblxu XG5cblxuXG5cblxuUmVkZHksIGV0IGFsLiAgICAgICAgICAgRXhwaXJlcyBPY3RvYmVyIDIzLCAy MDE1ICAgICAgICAgICAgICAgW1BhZ2UgMjddXG5fXG5JbnRlcm5ldC1EcmFmdCAgICAgIFNUVU4g Zm9yIDNyZCBwYXJ0eSBBdXRob3JpemF0aW9uICAgICAgICAgIEFwcmlsIDIwMTVcblxuXG4gICAg ICAgIEhUVFAvMS4xXG4gICAgICAgIEhvc3Q6IHNlcnZlci5leGFtcGxlLmNvbVxuICAgICAgICBD b250ZW50LVR5cGU6IGFwcGxpY2F0aW9uL3gtd3d3LWZvcm0tdXJsZW5jb2RlZFxuICAgICAgICBh dWQ9c3R1bjFAZXhhbXBsZS5jb21cbiAgICAgICAgdGltZXN0YW1wPTEzNjE0NzE2MjlcbiAgICAg ICAgZ3JhbnRfdHlwZT1pbXBsaWNpdFxuICAgICAgICB0b2tlbl90eXBlPXBvcFxuICAgICAgICBh bGc9SE1BQy1TSEEtMjU2LTEyOFxuXG4gICAgICAgICAgICAgICAgICAgICAgICAgICAgIEZpZ3Vy ZSA3OiBSZXF1ZXN0XG5cbiAgIFtJLUQuaWV0Zi10cmFtLXN0dW5iaXNdIHN1cHBvcnRzIGhhc2gg YWdpbGl0eSBhbmQgYWNjb21wbGlzaCB0aGlzXG4gICBhZ2lsaXR5IGJ5IGNvbXB1dGluZyBtZXNz YWdlIGludGVncml0eSB1c2luZyBib3RoIEhNQUMtU0hBLTEgYW5kXG4gICBITUFDLVNIQS0yNTYt MTI4LiAgVGhlIGNsaWVudCBzaWduYWxzIHRoZSBhbGdvcml0aG0gc3VwcG9ydGVkIGJ5IGl0XG4g ICB0byB0aGUgYXV0aG9yaXphdGlvbiBzZXJ2ZXIgaW4gdGhlIFwnYWxnXCcgcGFyYW1ldGVyIGRl ZmluZWQgaW5cbiAgIFtJLUQuaWV0Zi1vYXV0aC1wb3Ata2V5LWRpc3RyaWJ1dGlvbl0uICBUaGUg YXV0aG9yaXphdGlvbiBkZXRlcm1pbmVzXG4gICBsZW5ndGggb2YgdGhlIG1hY19rZXkgYmFzZWQg b24gdGhlIEhNQUMgYWxnb3JpdGhtIGNvbnZleWVkIGJ5IHRoZVxuICAgY2xpZW50LiAgSWYgdGhl IGNsaWVudCBzdXBwb3J0cyBib3RoIEhNQUMtU0hBLTEgYW5kIEhNQUMtU0hBLTI1Ni0xMjhcbiAg IHRoZW4gaXQgc2lnbmFscyBITUFDLVNIQS0yNTYtMTI4IHRvIHRoZSBhdXRob3JpemF0aW9uIHNl cnZlciwgZ2V0c1xuICAgMjU2LWJpdCBrZXkgZnJvbSB0aGUgYXV0aG9yaXphdGlvbiBzZXJ2ZXIg YW5kIGNhbGN1bGF0ZXMgMTYwLWJpdCBrZXlcbiAgIGZvciBITUFDLVNIQS0xIHVzaW5nIFNIQTEg dGFraW5nIHRoZSAyNTYtYml0IGtleSBhcyBpbnB1dC5cblxuICAgSWYgdGhlIGNsaWVudCBpcyBh dXRob3JpemVkIHRoZW4gdGhlIGF1dGhvcml6YXRpb24gc2VydmVyIGlzc3VlcyBhblxuICAgYWNj ZXNzIHRva2VuLiAgQW4gZXhhbXBsZSBvZiBzdWNjZXNzZnVsIHJlc3BvbnNlOlxuXG4gICAgICAg IEhUVFAvMS4xIDIwMCBPS1xuICAgICAgICBDb250ZW50LVR5cGU6IGFwcGxpY2F0aW9uL2pzb25c biAgICAgICAgQ2FjaGUtQ29udHJvbDogbm8tc3RvcmVcblxuICAgICAgICB7XG4gICAgICAgICAg ImFjY2Vzc190b2tlbiI6XG4gICAiVTJGc2RHVmtYMThxSksva2tXbVJjbmZIZ2xyVlRKU3BTNnlV MzJrbUhtT3JmR3lJM20xZ1FqMWpSUHNyMHVCYlxuICAgSGN0dXljQWdzZlJYN25KVzJCZHVrR3lL TVhTaU5HTm5Cemlna0FvZlA2K1ozdmtKMVE1cFdiZlNScm9Pa1dCbiIsXG4gICAgICAgICAgInRv a2VuX3R5cGUiOiJwb3AiLFxuICAgICAgICAgICJleHBpcmVzX2luIjoxODAwLFxuICAgICAgICAg ICJraWQiOiIyMkJJanhVOTNoL0lnd0ViIixcbiAgICAgICAgICAia2V5IjoidjUxTjYyT002NWt5 TXZmVEkwOE8iXG4gICAgICAgICAgImFsZyI6SE1BQy1TSEEtMjU2LTEyOFxuICAgICAgICB9XG5c biAgICAgICAgICAgICAgICAgICAgICAgICAgICBGaWd1cmUgODogUmVzcG9uc2VcblxuQXV0aG9y c1wnIEFkZHJlc3Nlc1xuXG5cblxuXG5cblxuXG5cblJlZGR5LCBldCBhbC4gICAgICAgICAgIEV4 cGlyZXMgT2N0b2JlciAyMywgMjAxNSAgICAgICAgICAgICAgIFtQYWdlIDI4XVxuX1xuSW50ZXJu ZXQtRHJhZnQgICAgICBTVFVOIGZvciAzcmQgcGFydHkgQXV0aG9yaXphdGlvbiAgICAgICAgICBB cHJpbCAyMDE1XG5cblxuICAgVGlydW1hbGVzd2FyIFJlZGR5XG4gICBDaXNjbyBTeXN0ZW1zLCBJ bmMuXG4gICBDZXNzbmEgQnVzaW5lc3MgUGFyaywgVmFydGh1ciBIb2JsaVxuICAgU2FyamFwdXIg TWFyYXRoYWxsaSBPdXRlciBSaW5nIFJvYWRcbiAgIEJhbmdhbG9yZSwgS2FybmF0YWthICA1NjAx MDNcbiAgIEluZGlhXG5cbiAgIEVtYWlsOiB0aXJlZGR5QGNpc2NvLmNvbVxuXG5cbiAgIFByYXNo YW50aCBQYXRpbFxuICAgQ2lzY28gU3lzdGVtcywgSW5jLlxuICAgQmFuZ2Fsb3JlXG4gICBJbmRp YVxuXG4gICBFbWFpbDogcHJhc3BhdGlAY2lzY28uY29tXG5cblxuICAgUmFtIE1vaGFuIFJhdmlu ZHJhbmF0aFxuICAgQ2lzY28gU3lzdGVtcywgSW5jLlxuICAgQ2Vzc25hIEJ1c2luZXNzIFBhcmss XG4gICBLYWRhYmVlc2FuYWhhbGxpIFZpbGxhZ2UsIFZhcnRodXIgSG9ibGksXG4gICBTYXJqYXB1 ci1NYXJhdGhhaGFsbGkgT3V0ZXIgUmluZyBSb2FkXG4gICBCYW5nYWxvcmUsIEthcm5hdGFrYSAg NTYwMTAzXG4gICBJbmRpYVxuXG4gICBFbWFpbDogcm1vaGFuckBjaXNjby5jb21cblxuXG4gICBK dXN0aW4gVWJlcnRpXG4gICBHb29nbGVcbiAgIDc0NyA2dGggQXZlIFNcbiAgIEtpcmtsYW5kLCBX QVxuICAgOTgwMzNcbiAgIFVTQVxuXG4gICBFbWFpbDoganVzdGluQHViZXJ0aS5uYW1lXG5cblxu XG5cblxuXG5cblxuXG5cblxuXG5cblxuUmVkZHksIGV0IGFsLiAgICAgICAgICAgRXhwaXJlcyBP Y3RvYmVyIDIzLCAyMDE1ICAgICAgICAgICAgICAgW1BhZ2UgMjldXG4nLCAnZmlsZW5hbWUxJzog JycsICd1cmwxJzogJ2h0dHBzOi8vdG9vbHMuaWV0Zi5vcmcvaWQvZHJhZnQtaWV0Zi10cmFtLXR1 cm4tdGhpcmQtcGFydHktYXV0aHotMTQudHh0JywgJ3N1Ym1pdCc6ICdHZW5lcmF0ZSBkaWZmJywg J3VybDInOiAnJywgJy0tbmV3Y29sb3VyJzogJ2dyZWVuJ30gLS0+PC9ib2R5PjwvaHRtbD4= --_003_913383AAA69FF945B8F946018B75898A4781BD48xmbrcdx10ciscoc_ Content-Type: text/plain; name="draft-ietf-tram-turn-third-party-authz-15.txt" Content-Description: draft-ietf-tram-turn-third-party-authz-15.txt Content-Disposition: attachment; filename="draft-ietf-tram-turn-third-party-authz-15.txt"; size=61933; creation-date="Wed, 22 Apr 2015 06:09:06 GMT"; modification-date="Wed, 22 Apr 2015 06:09:10 GMT" Content-Transfer-Encoding: base64 CgoKClRSQU0gICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICBULiBSZWRkeQpJbnRlcm5ldC1EcmFmdCAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgUC4gUGF0aWwKSW50ZW5kZWQgc3RhdHVzOiBTdGFu ZGFyZHMgVHJhY2sgICAgICAgICAgICAgICAgICAgICAgICAgUi4gUmF2aW5kcmFuYXRoCkV4cGly ZXM6IE9jdG9iZXIgMjMsIDIwMTUgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICBDaXNjbwogICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICBKLiBVYmVydGkKICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgR29vZ2xlCiAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICBBcHJpbCAyMSwgMjAx NQoKCiAgU2Vzc2lvbiBUcmF2ZXJzYWwgVXRpbGl0aWVzIGZvciBOQVQgKFNUVU4pIEV4dGVuc2lv biBmb3IgVGhpcmQgUGFydHkKICAgICAgICAgICAgICAgICAgICAgICAgICAgICBBdXRob3JpemF0 aW9uCiAgICAgICAgICAgICAgIGRyYWZ0LWlldGYtdHJhbS10dXJuLXRoaXJkLXBhcnR5LWF1dGh6 LTE1CgpBYnN0cmFjdAoKICAgVGhpcyBkb2N1bWVudCBwcm9wb3NlcyB0aGUgdXNlIG9mIE9BdXRo IDIuMCB0byBvYnRhaW4gYW5kIHZhbGlkYXRlCiAgIGVwaGVtZXJhbCB0b2tlbnMgdGhhdCBjYW4g YmUgdXNlZCBmb3IgU2Vzc2lvbiBUcmF2ZXJzYWwgVXRpbGl0aWVzIGZvcgogICBOQVQgKFNUVU4p IGF1dGhlbnRpY2F0aW9uLiAgVGhlIHVzYWdlIG9mIGVwaGVtZXJhbCB0b2tlbnMgZW5zdXJlcwog ICB0aGF0IGFjY2VzcyB0byBhIFNUVU4gc2VydmVyIGNhbiBiZSBjb250cm9sbGVkIGV2ZW4gaWYg dGhlIHRva2VucyBhcmUKICAgY29tcHJvbWlzZWQuCgpTdGF0dXMgb2YgVGhpcyBNZW1vCgogICBU aGlzIEludGVybmV0LURyYWZ0IGlzIHN1Ym1pdHRlZCBpbiBmdWxsIGNvbmZvcm1hbmNlIHdpdGgg dGhlCiAgIHByb3Zpc2lvbnMgb2YgQkNQIDc4IGFuZCBCQ1AgNzkuCgogICBJbnRlcm5ldC1EcmFm dHMgYXJlIHdvcmtpbmcgZG9jdW1lbnRzIG9mIHRoZSBJbnRlcm5ldCBFbmdpbmVlcmluZwogICBU YXNrIEZvcmNlIChJRVRGKS4gIE5vdGUgdGhhdCBvdGhlciBncm91cHMgbWF5IGFsc28gZGlzdHJp YnV0ZQogICB3b3JraW5nIGRvY3VtZW50cyBhcyBJbnRlcm5ldC1EcmFmdHMuICBUaGUgbGlzdCBv ZiBjdXJyZW50IEludGVybmV0LQogICBEcmFmdHMgaXMgYXQgaHR0cDovL2RhdGF0cmFja2VyLmll dGYub3JnL2RyYWZ0cy9jdXJyZW50Ly4KCiAgIEludGVybmV0LURyYWZ0cyBhcmUgZHJhZnQgZG9j dW1lbnRzIHZhbGlkIGZvciBhIG1heGltdW0gb2Ygc2l4IG1vbnRocwogICBhbmQgbWF5IGJlIHVw ZGF0ZWQsIHJlcGxhY2VkLCBvciBvYnNvbGV0ZWQgYnkgb3RoZXIgZG9jdW1lbnRzIGF0IGFueQog ICB0aW1lLiAgSXQgaXMgaW5hcHByb3ByaWF0ZSB0byB1c2UgSW50ZXJuZXQtRHJhZnRzIGFzIHJl ZmVyZW5jZQogICBtYXRlcmlhbCBvciB0byBjaXRlIHRoZW0gb3RoZXIgdGhhbiBhcyAid29yayBp biBwcm9ncmVzcy4iCgogICBUaGlzIEludGVybmV0LURyYWZ0IHdpbGwgZXhwaXJlIG9uIE9jdG9i ZXIgMjMsIDIwMTUuCgpDb3B5cmlnaHQgTm90aWNlCgogICBDb3B5cmlnaHQgKGMpIDIwMTUgSUVU RiBUcnVzdCBhbmQgdGhlIHBlcnNvbnMgaWRlbnRpZmllZCBhcyB0aGUKICAgZG9jdW1lbnQgYXV0 aG9ycy4gIEFsbCByaWdodHMgcmVzZXJ2ZWQuCgogICBUaGlzIGRvY3VtZW50IGlzIHN1YmplY3Qg dG8gQkNQIDc4IGFuZCB0aGUgSUVURiBUcnVzdCdzIExlZ2FsCiAgIFByb3Zpc2lvbnMgUmVsYXRp bmcgdG8gSUVURiBEb2N1bWVudHMKICAgKGh0dHA6Ly90cnVzdGVlLmlldGYub3JnL2xpY2Vuc2Ut aW5mbykgaW4gZWZmZWN0IG9uIHRoZSBkYXRlIG9mCiAgIHB1YmxpY2F0aW9uIG9mIHRoaXMgZG9j dW1lbnQuICBQbGVhc2UgcmV2aWV3IHRoZXNlIGRvY3VtZW50cwogICBjYXJlZnVsbHksIGFzIHRo ZXkgZGVzY3JpYmUgeW91ciByaWdodHMgYW5kIHJlc3RyaWN0aW9ucyB3aXRoIHJlc3BlY3QKCgoK UmVkZHksIGV0IGFsLiAgICAgICAgICAgRXhwaXJlcyBPY3RvYmVyIDIzLCAyMDE1ICAgICAgICAg ICAgICAgIFtQYWdlIDFdCgwKSW50ZXJuZXQtRHJhZnQgICAgICBTVFVOIGZvciAzcmQgcGFydHkg QXV0aG9yaXphdGlvbiAgICAgICAgICBBcHJpbCAyMDE1CgoKICAgdG8gdGhpcyBkb2N1bWVudC4g IENvZGUgQ29tcG9uZW50cyBleHRyYWN0ZWQgZnJvbSB0aGlzIGRvY3VtZW50IG11c3QKICAgaW5j bHVkZSBTaW1wbGlmaWVkIEJTRCBMaWNlbnNlIHRleHQgYXMgZGVzY3JpYmVkIGluIFNlY3Rpb24g NC5lIG9mCiAgIHRoZSBUcnVzdCBMZWdhbCBQcm92aXNpb25zIGFuZCBhcmUgcHJvdmlkZWQgd2l0 aG91dCB3YXJyYW50eSBhcwogICBkZXNjcmliZWQgaW4gdGhlIFNpbXBsaWZpZWQgQlNEIExpY2Vu c2UuCgpUYWJsZSBvZiBDb250ZW50cwoKICAgMS4gIEludHJvZHVjdGlvbiAgLiAuIC4gLiAuIC4g LiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gICAyCiAgIDIuICBUZXJtaW5vbG9n eSAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuICAgMwog ICAzLiAgU29sdXRpb24gT3ZlcnZpZXcgLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAu IC4gLiAuIC4gLiAgIDMKICAgICAzLjEuICBUVVJOICAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAu IC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gICA0CiAgIDQuICBPYnRhaW5pbmcgYSBUb2tlbiBV c2luZyBPQXV0aCAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuICAgNwogICAgIDQuMS4g IEtleSBFc3RhYmxpc2htZW50IC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4g LiAgIDgKICAgICAgIDQuMS4xLiAgSFRUUCBpbnRlcmFjdGlvbnMgLiAuIC4gLiAuIC4gLiAuIC4g LiAuIC4gLiAuIC4gLiAuIC4gICA4CiAgICAgICA0LjEuMi4gIE1hbnVhbCBwcm92aXNpb25pbmcg LiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuICAxMAogICA1LiAgRm9ybWluZyBhIFJl cXVlc3QgLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAgMTAKICAg Ni4gIFNUVU4gQXR0cmlidXRlcyAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAu IC4gLiAuIC4gIDEwCiAgICAgNi4xLiAgVEhJUkQtUEFSVFktQVVUSE9SSVpBVElPTiAuIC4gLiAu IC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuICAxMAogICAgIDYuMi4gIEFDQ0VTUy1UT0tFTiAgLiAu IC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAgMTEKICAgNy4gIFNUVU4g U2VydmVyIEJlaGF2aW91ciAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4g IDEzCiAgIDguICBTVFVOIGNsaWVudCBiZWhhdmlvdXIgLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4g LiAuIC4gLiAuIC4gLiAuICAxNAogICA5LiAgVFVSTiBjbGllbnQgYW5kIHNlcnZlciBiZWhhdmlv dXIgIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAgMTQKICAgMTAuIE9wZXJhdGlvbmFsIENv bnNpZGVyYXRpb25zICAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gIDE1CiAgIDEx LiBTZWN1cml0eSBDb25zaWRlcmF0aW9ucyAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAu IC4gLiAuICAxNQogICAxMi4gSUFOQSBDb25zaWRlcmF0aW9ucyAuIC4gLiAuIC4gLiAuIC4gLiAu IC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAgMTYKICAgMTMuIEFja25vd2xlZGdlbWVudHMgIC4gLiAu IC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gIDE2CiAgIDE0LiBSZWZlcmVu Y2VzICAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuICAx NgogICAgIDE0LjEuICBOb3JtYXRpdmUgUmVmZXJlbmNlcyAuIC4gLiAuIC4gLiAuIC4gLiAuIC4g LiAuIC4gLiAuIC4gLiAgMTYKICAgICAxNC4yLiAgSW5mb3JtYXRpdmUgUmVmZXJlbmNlcyAuIC4g LiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gIDE3CiAgIEFwcGVuZGl4IEEuICBDIFNuaXBw ZXQgdG8gZW5jcnlwdC9kZWNyeXB0IHRva2VuIC4gLiAuIC4gLiAuIC4gLiAuICAxOQogICBBcHBl bmRpeCBCLiAgSW50ZXJhY3Rpb24gYmV0d2VlbiBjbGllbnQgYW5kIGF1dGhvcml6YXRpb24gc2Vy dmVyICAgMjYKICAgQXV0aG9ycycgQWRkcmVzc2VzICAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAu IC4gLiAuIC4gLiAuIC4gLiAuIC4gIDI4CgoxLiAgSW50cm9kdWN0aW9uCgogICBTZXNzaW9uIFRy YXZlcnNhbCBVdGlsaXRpZXMgZm9yIE5BVCAoU1RVTikgW1JGQzUzODldIHByb3ZpZGVzIGEKICAg bWVjaGFuaXNtIHRvIGNvbnRyb2wgYWNjZXNzIHZpYSAibG9uZy10ZXJtIiB1c2VybmFtZS8gcGFz c3dvcmQKICAgY3JlZGVudGlhbHMgdGhhdCBhcmUgcHJvdmlkZWQgYXMgcGFydCBvZiB0aGUgU1RV TiBwcm90b2NvbC4gIEl0IGlzCiAgIGV4cGVjdGVkIHRoYXQgdGhlc2UgY3JlZGVudGlhbHMgd2ls bCBiZSBrZXB0IHNlY3JldDsgaWYgdGhlCiAgIGNyZWRlbnRpYWxzIGFyZSBkaXNjb3ZlcmVkLCB0 aGUgU1RVTiBzZXJ2ZXIgY291bGQgYmUgdXNlZCBieQogICB1bmF1dGhvcml6ZWQgdXNlcnMgb3Ig YXBwbGljYXRpb25zLiAgSG93ZXZlciwgaW4gd2ViIGFwcGxpY2F0aW9ucwogICBsaWtlIFdlYlJU QyBbSS1ELmlldGYtcnRjd2ViLW92ZXJ2aWV3XSB3aGVyZSBKYXZhU2NyaXB0IHVzZXMgdGhlCiAg IGJyb3dzZXIgZnVuY3Rpb25hbGl0eSB0byBtYWtlIHJlYWwtdGltZSBhdWRpbyBhbmQvb3Igdmlk ZW8gY2FsbHMsIFdlYgogICBjb25mZXJlbmNpbmcsIGFuZCBkaXJlY3QgZGF0YSB0cmFuc2Zlciwg ZW5zdXJpbmcgdGhpcyBzZWNyZWN5IGlzCiAgIHR5cGljYWxseSBub3QgcG9zc2libGUuCgogICBU byBhZGRyZXNzIHRoaXMgcHJvYmxlbSBhbmQgdGhlIG9uZXMgZGVzY3JpYmVkIGluIFtSRkM3Mzc2 XSwgdGhpcwogICBkb2N1bWVudCBwcm9wb3NlcyB0aGUgdXNlIG9mIHRoaXJkIHBhcnR5IGF1dGhv cml6YXRpb24gdXNpbmcgT0F1dGgKCgoKUmVkZHksIGV0IGFsLiAgICAgICAgICAgRXhwaXJlcyBP Y3RvYmVyIDIzLCAyMDE1ICAgICAgICAgICAgICAgIFtQYWdlIDJdCgwKSW50ZXJuZXQtRHJhZnQg ICAgICBTVFVOIGZvciAzcmQgcGFydHkgQXV0aG9yaXphdGlvbiAgICAgICAgICBBcHJpbCAyMDE1 CgoKICAgMi4wIFtSRkM2NzQ5XSBmb3IgU1RVTi4gIFVzaW5nIE9BdXRoIDIuMCwgYSBjbGllbnQg b2J0YWlucyBhbgogICBlcGhlbWVyYWwgdG9rZW4gZnJvbSBhbiBhdXRob3JpemF0aW9uIHNlcnZl ciBlLmcuICBXZWJSVEMgc2VydmVyLCBhbmQKICAgdGhlIHRva2VuIGlzIHByZXNlbnRlZCB0byB0 aGUgU1RVTiBzZXJ2ZXIgaW5zdGVhZCBvZiB0aGUgdHJhZGl0aW9uYWwKICAgbWVjaGFuaXNtIG9m IHByZXNlbnRpbmcgdXNlcm5hbWUvcGFzc3dvcmQgY3JlZGVudGlhbHMuICBUaGUgU1RVTgogICBz ZXJ2ZXIgdmFsaWRhdGVzIHRoZSBhdXRoZW50aWNpdHkgb2YgdGhlIHRva2VuIGFuZCBwcm92aWRl cyByZXF1aXJlZAogICBzZXJ2aWNlcy4gIFRoaXJkIHBhcnR5IGF1dGhvcml6YXRpb24gdXNpbmcg T0F1dGggMi4wIGZvciBTVFVOCiAgIGV4cGxhaW5lZCBpbiB0aGlzIHNwZWNpZmljYXRpb24gY2Fu IGFsc28gYmUgdXNlZCB3aXRoIFRyYXZlcnNhbCBVc2luZwogICBSZWxheXMgYXJvdW5kIE5BVCAo VFVSTikgW1JGQzU3NjZdLgoKMi4gIFRlcm1pbm9sb2d5CgogICBUaGUga2V5IHdvcmRzICJNVVNU IiwgIk1VU1QgTk9UIiwgIlJFUVVJUkVEIiwgIlNIQUxMIiwgIlNIQUxMIE5PVCIsCiAgICJTSE9V TEQiLCAiU0hPVUxEIE5PVCIsICJSRUNPTU1FTkRFRCIsICJNQVkiLCBhbmQgIk9QVElPTkFMIiBp biB0aGlzCiAgIGRvY3VtZW50IGFyZSB0byBiZSBpbnRlcnByZXRlZCBhcyBkZXNjcmliZWQgaW4g W1JGQzIxMTldLgoKICAgVGhpcyBkb2N1bWVudCB1c2VzIHRoZSBmb2xsb3dpbmcgYWJicmV2aWF0 aW9uczoKCiAgIG8gIFdlYlJUQyBTZXJ2ZXI6IEEgd2ViIHNlcnZlciB0aGF0IHN1cHBvcnRzIFdl YlJUQwogICAgICBbSS1ELmlldGYtcnRjd2ViLW92ZXJ2aWV3XS4KCiAgIG8gIEFjY2VzcyBUb2tl bjogT0F1dGggMi4wIGFjY2VzcyB0b2tlbi4KCiAgIG8gIG1hY19rZXk6IFRoZSBzZXNzaW9uIGtl eSBnZW5lcmF0ZWQgYnkgdGhlIGF1dGhvcml6YXRpb24gc2VydmVyLgogICAgICBUaGlzIHNlc3Np b24ga2V5IGhhcyBhIGxpZmV0aW1lIHRoYXQgY29ycmVzcG9uZHMgdG8gdGhlIGxpZmV0aW1lCiAg ICAgIG9mIHRoZSBhY2Nlc3MgdG9rZW4sIGlzIGdlbmVyYXRlZCBieSB0aGUgYXV0aG9yaXphdGlv biBzZXJ2ZXIgYW5kCiAgICAgIGJvdW5kIHRvIHRoZSBhY2Nlc3MgdG9rZW4uCgogICBvICBraWQ6 IEFuIGVwaGVtZXJhbCBhbmQgdW5pcXVlIGtleSBpZGVudGlmaWVyLiAgVGhlIGtpZCBhbHNvIGFs bG93cwogICAgICB0aGUgcmVzb3VyY2Ugc2VydmVyIHRvIHNlbGVjdCB0aGUgYXBwcm9wcmlhdGUg a2V5aW5nIG1hdGVyaWFsIGZvcgogICAgICBkZWNyeXB0aW9uLgoKICAgbyAgQVM6IEF1dGhvcml6 YXRpb24gc2VydmVyCgogICBTb21lIHNlY3Rpb25zIGluIHRoaXMgc3BlY2lmaWNhdGlvbiBzaG93 IFdlYlJUQyBzZXJ2ZXIgYXMgdGhlCiAgIGF1dGhvcml6YXRpb24gc2VydmVyIGFuZCBjbGllbnQg YXMgdGhlIFdlYlJUQyBjbGllbnQsIGhvd2V2ZXIgV2ViUlRDCiAgIGlzIGludGVuZGVkIHRvIGJl IHVzZWQgZm9yIGlsbHVzdHJhdGl2ZSBwdXJwb3NlIG9ubHkuCgozLiAgU29sdXRpb24gT3ZlcnZp ZXcKCiAgIFNUVU4gY2xpZW50IGtub3dzIHRoYXQgaXQgY2FuIHVzZSBPQXV0aCAyLjAgd2l0aCB0 aGUgdGFyZ2V0IFNUVU4KICAgc2VydmVyIGVpdGhlciB0aHJvdWdoIGNvbmZpZ3VyYXRpb24gb3Ig d2hlbiBpdCByZWNlaXZlcyB0aGUgbmV3IFNUVU4KICAgYXR0cmlidXRlIFRISVJELVBBUlRZLUFV VEhPUklaQVRJT04gaW4gdGhlIGVycm9yIHJlc3BvbnNlIHdpdGggYW4KICAgZXJyb3IgY29kZSBv ZiA0MDEoVW5hdXRob3JpemVkKS4KCiAgIFRoaXMgc3BlY2lmaWNhdGlvbiB1c2VzIHRoZSB0b2tl biB0eXBlICdBc3NlcnRpb24nIChha2Egc2VsZi0KICAgY29udGFpbmVkIHRva2VuKSBkZXNjcmli ZWQgaW4gW1JGQzY4MTldIHdoZXJlIGFsbCB0aGUgaW5mb3JtYXRpb24KICAgbmVjZXNzYXJ5IHRv IGF1dGhlbnRpY2F0ZSB0aGUgdmFsaWRpdHkgb2YgdGhlIHRva2VuIGlzIGNvbnRhaW5lZAogICB3 aXRoaW4gdGhlIHRva2VuIGl0c2VsZi4gIFRoaXMgYXBwcm9hY2ggaGFzIHRoZSBiZW5lZml0IG9m IGF2b2lkaW5nIGEKCgoKUmVkZHksIGV0IGFsLiAgICAgICAgICAgRXhwaXJlcyBPY3RvYmVyIDIz LCAyMDE1ICAgICAgICAgICAgICAgIFtQYWdlIDNdCgwKSW50ZXJuZXQtRHJhZnQgICAgICBTVFVO IGZvciAzcmQgcGFydHkgQXV0aG9yaXphdGlvbiAgICAgICAgICBBcHJpbCAyMDE1CgoKICAgcHJv dG9jb2wgYmV0d2VlbiB0aGUgU1RVTiBzZXJ2ZXIgYW5kIHRoZSBhdXRob3JpemF0aW9uIHNlcnZl ciBmb3IKICAgdG9rZW4gdmFsaWRhdGlvbiwgdGh1cyByZWR1Y2luZyBsYXRlbmN5LiAgVGhlIGNv bnRlbnQgb2YgdGhlIHRva2VuIGlzCiAgIG9wYXF1ZSB0byB0aGUgY2xpZW50LiAgVGhlIGNsaWVu dCBlbWJlZHMgdGhlIHRva2VuIHdpdGhpbiBhIFNUVU4KICAgcmVxdWVzdCBzZW50IHRvIHRoZSBT VFVOIHNlcnZlci4gIE9uY2UgdGhlIFNUVU4gc2VydmVyIGhhcyBkZXRlcm1pbmVkCiAgIHRoZSB0 b2tlbiBpcyB2YWxpZCwgaXRzIHNlcnZpY2VzIGFyZSBvZmZlcmVkIGZvciBhIGRldGVybWluZWQg cGVyaW9kCiAgIG9mIHRpbWUuICBBY2Nlc3MgdG9rZW4gaXNzdWVkIGJ5IHRoZSBhdXRob3JpemF0 aW9uIHNlcnZlciBpcwogICBleHBsYWluZWQgaW4gU2VjdGlvbiA2LjIuICBPQXV0aCAyLjAgaW4g W1JGQzY3NDldIGRlZmluZXMgZm91ciBncmFudAogICB0eXBlcy4gIFRoaXMgc3BlY2lmaWNhdGlv biB1c2VzIHRoZSBPQXV0aCAyLjAgZ3JhbnQgdHlwZSAiSW1wbGljaXQiCiAgIGV4cGxhaW5lZCBp biBzZWN0aW9uIDEuMy4yIG9mIFtSRkM2NzQ5XSB3aGVyZSB0aGUgY2xpZW50IGlzIGlzc3VlZCBh bgogICBhY2Nlc3MgdG9rZW4gZGlyZWN0bHkuICBUaGUgc3RyaW5nICdzdHVuJyBpcyBkZWZpbmVk IGJ5IHRoaXMKICAgc3BlY2lmaWNhdGlvbiBmb3IgdXNlIGFzIHRoZSBPQXV0aCBzY29wZSBwYXJh bWV0ZXIgKHNlZSBzZWN0aW9uIDMuMwogICBvZiBbUkZDNjc0OV0pIGZvciB0aGUgT0F1dGggdG9r ZW4uCgogICBUaGUgZXhhY3QgbWVjaGFuaXNtIHVzZWQgYnkgYSBjbGllbnQgdG8gb2J0YWluIGEg dG9rZW4gYW5kIG90aGVyCiAgIE9BdXRoIDIuMCBwYXJhbWV0ZXJzIGxpa2UgdG9rZW4gdHlwZSwg bWFjX2tleSwgdG9rZW4gbGlmZXRpbWUgYW5kIGtpZAogICBpcyBvdXRzaWRlIHRoZSBzY29wZSBv ZiB0aGlzIGRvY3VtZW50LiAgQXBwZW5kaXggQiBwcm92aWRlcyBhbgogICBleGFtcGxlIGRlcGxv eW1lbnQgc2NlbmFyaW8gb2YgaW50ZXJhY3Rpb24gYmV0d2VlbiB0aGUgY2xpZW50IGFuZAogICBh dXRob3JpemF0aW9uIHNlcnZlciB0byBvYnRhaW4gYSB0b2tlbiBhbmQgb3RoZXIgT0F1dGggMi4w CiAgIHBhcmFtZXRlcnMuCgogICBDb25zaWRlciB0aGUgZm9sbG93aW5nIGV4YW1wbGUgdGhhdCBp bGx1c3RyYXRlcyB0aGUgdXNlIG9mIE9BdXRoIDIuMAogICB0byBhY2hpZXZlIHRoaXJkIHBhcnR5 IGF1dGhvcml6YXRpb24gZm9yIFRyYXZlcnNhbCBVc2luZyBSZWxheSBOQVQKICAgKFRVUk4pIFtS RkM1NzY2XSAuCgozLjEuICBUVVJOCgogICBUVVJOIGFuIGV4dGVuc2lvbiB0byB0aGUgU1RVTiBw cm90b2NvbCBpcyBvZnRlbiB1c2VkIHRvIGltcHJvdmUgdGhlCiAgIGNvbm5lY3Rpdml0eSBvZiBQ MlAgYXBwbGljYXRpb25zLiAgVFVSTiBlbnN1cmVzIHRoYXQgYSBjb25uZWN0aW9uIGNhbgogICBi ZSBlc3RhYmxpc2hlZCBldmVuIHdoZW4gb25lIG9yIGJvdGggc2lkZXMgaXMgaW5jYXBhYmxlIG9m IGEgZGlyZWN0CiAgIFAyUCBjb25uZWN0aW9uLiAgSG93ZXZlciwgYXMgYSByZWxheSBzZXJ2aWNl LCBpdCBpbXBvc2VzIGEgbm9udHJpdmlhbAogICBjb3N0IG9uIHRoZSBzZXJ2aWNlIHByb3ZpZGVy LiAgVGhlcmVmb3JlLCBhY2Nlc3MgdG8gYSBUVVJOIHNlcnZpY2UgaXMKICAgYWxtb3N0IGFsd2F5 cyBhY2Nlc3MtY29udHJvbGxlZC4gIEluIG9yZGVyIHRvIGFjaGlldmUgdGhpcmQgcGFydHkKICAg YXV0aG9yaXphdGlvbiwgYSByZXNvdXJjZSBvd25lciBlLmcuICBXZWJSVEMgc2VydmVyLCBhdXRo b3JpemVzIGEKICAgVFVSTiBjbGllbnQgdG8gYWNjZXNzIHJlc291cmNlcyBvbiB0aGUgVFVSTiBz ZXJ2ZXIuCgogICBJbiB0aGlzIGV4YW1wbGUsIGEgcmVzb3VyY2Ugb3duZXIgaS5lLiwgV2ViUlRD IHNlcnZlciwgYXV0aG9yaXplcyBhCiAgIFRVUk4gY2xpZW50IHRvIGFjY2VzcyByZXNvdXJjZXMg b24gYSBUVVJOIHNlcnZlci4KCgoKCgoKCgoKCgoKCgpSZWRkeSwgZXQgYWwuICAgICAgICAgICBF eHBpcmVzIE9jdG9iZXIgMjMsIDIwMTUgICAgICAgICAgICAgICAgW1BhZ2UgNF0KDApJbnRlcm5l dC1EcmFmdCAgICAgIFNUVU4gZm9yIDNyZCBwYXJ0eSBBdXRob3JpemF0aW9uICAgICAgICAgIEFw cmlsIDIwMTUKCgogICAgICAgICAgICAgICAgICstLS0tLS0tLS0tLS0tLS0tLS0tLS0tKy0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0rCiAgICAgICAgICAgICAgICAgfCAgICAgT0F1dGggMi4w ICAgICAgICB8ICAgICAgICAgICAgV2ViUlRDICAgICAgICAgIHwKICAgICAgICAgICAgICAgICAr PT09PT09PT09PT09PT09PT09PT09PSs9PT09PT09PT09PT09PT09PT09PT09PT09PT09KwogICAg ICAgICAgICAgICAgIHwgQ2xpZW50ICAgICAgICAgICAgICAgfCBXZWJSVEMgY2xpZW50ICAgICAg ICAgICAgICB8CiAgICAgICAgICAgICAgICAgKy0tLS0tLS0tLS0tLS0tLS0tLS0tLS0rLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLSsKICAgICAgICAgICAgICAgICB8IFJlc291cmNlIG93bmVy ICAgICAgIHwgV2ViUlRDIHNlcnZlciAgICAgICAgICAgICAgfAogICAgICAgICAgICAgICAgICst LS0tLS0tLS0tLS0tLS0tLS0tLS0tKy0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0rCiAgICAg ICAgICAgICAgICAgfCBBdXRob3JpemF0aW9uIHNlcnZlciB8IEF1dGhvcml6YXRpb24gc2VydmVy ICAgICAgIHwKICAgICAgICAgICAgICAgICArLS0tLS0tLS0tLS0tLS0tLS0tLS0tLSstLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tKwogICAgICAgICAgICAgICAgIHwgUmVzb3VyY2Ugc2VydmVy ICAgICAgfCBUVVJOIFNlcnZlciAgICAgICAgICAgICAgICB8CiAgICAgICAgICAgICAgICAgKy0t LS0tLS0tLS0tLS0tLS0tLS0tLS0rLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLSsKCiAgICAg ICAgIEZpZ3VyZSAxOiBPQXV0aCB0ZXJtaW5vbG9neSBtYXBwZWQgdG8gV2ViUlRDIHRlcm1pbm9s b2d5CgogICBVc2luZyB0aGUgT0F1dGggMi4wIGF1dGhvcml6YXRpb24gZnJhbWV3b3JrLCBhIFdl YlJUQyBjbGllbnQgKHRoaXJkLQogICBwYXJ0eSBhcHBsaWNhdGlvbikgb2J0YWlucyBsaW1pdGVk IGFjY2VzcyB0byBhIFRVUk4gKHJlc291cmNlIHNlcnZlcikKICAgb24gYmVoYWxmIG9mIHRoZSBX ZWJSVEMgc2VydmVyIChyZXNvdXJjZSBvd25lciBvciBhdXRob3JpemF0aW9uCiAgIHNlcnZlciku ICBUaGUgV2ViUlRDIGNsaWVudCByZXF1ZXN0cyBhY2Nlc3MgdG8gcmVzb3VyY2VzIGNvbnRyb2xs ZWQKICAgYnkgdGhlIHJlc291cmNlIG93bmVyIChXZWJSVEMgc2VydmVyKSBhbmQgaG9zdGVkIGJ5 IHRoZSByZXNvdXJjZQogICBzZXJ2ZXIgKFRVUk4gc2VydmVyKS4gIFRoZSBXZWJSVEMgY2xpZW50 IG9idGFpbnMgYWNjZXNzIHRva2VuLAogICBsaWZldGltZSwgc2Vzc2lvbiBrZXkgYW5kIGtpZC4g IFRoZSBUVVJOIGNsaWVudCBjb252ZXlzIHRoZSBhY2Nlc3MKICAgdG9rZW4gYW5kIG90aGVyIE9B dXRoIDIuMCBwYXJhbWV0ZXJzIGxlYXJudCBmcm9tIHRoZSBhdXRob3JpemF0aW9uCiAgIHNlcnZl ciB0byB0aGUgVFVSTiBzZXJ2ZXIuICBUaGUgVFVSTiBzZXJ2ZXIgb2J0YWlucyB0aGUgc2Vzc2lv biBrZXkKICAgZnJvbSB0aGUgYWNjZXNzIHRva2VuLiAgVGhlIFRVUk4gc2VydmVyIHZhbGlkYXRl cyB0aGUgdG9rZW4sIGNvbXB1dGVzCiAgIHRoZSBtZXNzYWdlIGludGVncml0eSBvZiB0aGUgcmVx dWVzdCBhbmQgdGFrZXMgYXBwcm9wcmlhdGUgYWN0aW9uCiAgIGkuZSwgcGVybWl0cyB0aGUgVFVS TiBjbGllbnQgdG8gY3JlYXRlIGFsbG9jYXRpb25zLiAgVGhpcyBpcyBzaG93biBpbgogICBhbiBh YnN0cmFjdCB3YXkgaW4gRmlndXJlIDIuCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKClJlZGR5LCBl dCBhbC4gICAgICAgICAgIEV4cGlyZXMgT2N0b2JlciAyMywgMjAxNSAgICAgICAgICAgICAgICBb UGFnZSA1XQoMCkludGVybmV0LURyYWZ0ICAgICAgU1RVTiBmb3IgM3JkIHBhcnR5IEF1dGhvcml6 YXRpb24gICAgICAgICAgQXByaWwgMjAxNQoKCiAgICAgICAgICAgICAgICAgICAgICAgICAgICst LS0tLS0tLS0tLS0tLS0rCiAgICAgICAgICAgICAgICAgICAgICAgICAgIHwgICAgICAgICAgICAg ICArPCoqKioqKisKICAgICAgICAgICAgKy0tLS0tLS0tLS0tLS0+fCBBdXRob3JpemF0aW9uIHwg ICAgICAgKgogICAgICAgICAgICB8ICAgICAgICAgICAgICB8IFNlcnZlciAgICAgICAgfCAgICAg ICAqCiAgICAgICAgICAgIHwgICArLS0tLS0tLS0tLXwoV2ViUlRDIFNlcnZlcil8ICAgICAgICog IEFTLVJTLAogICAgICAgICAgICB8ICAgfCAgICAgICAgICB8ICAgICAgICAgICAgICAgfCAgICAg ICAqICBBVVRIIGtleXMKICAgKDIpICAgICAgfCAgIHwgICAgICAgICAgICstLS0tLS0tLS0tLS0t LS0rICAgICAgKiAgICgxKQogICBBY2Nlc3MgICB8ICAgfCAgKDMpICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAqCiAgIFRva2VuICAgIHwgICB8IEFjY2VzcyBUb2tlbiAgICAgICAgICAgICAg ICAgICAgICoKICAgUmVxdWVzdCAgfCAgIHwgICAgKyAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgKgogICAgICAgICAgICB8ICAgfCBTZXNzaW9uIEtleSAgICAgICAgICAgICAgICAgICAgICAq CiAgICAgICAgICAgIHwgICB8ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICoKICAg ICAgICAgICAgfCAgIFYgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgVgogICAgICAg ICstLS0tLS0tKy0tLSsgICAgICAgICAgICAgICAgICAgICAgICstKy0tLS09LS0tLS0rCiAgICAg ICAgfCAgICAgICAgICAgfCAgICAgICAgICg0KSAgICAgICAgICAgfCAgICAgICAgICAgIHwKICAg ICAgICB8ICAgICAgICAgICB8IFRVUk4gUmVxdWVzdCArIEFjY2VzcyB8ICAgICAgICAgICAgfAog ICAgICAgIHwgV2ViUlRDICAgIHwgVG9rZW4gICAgICAgICAgICAgICAgIHwgVFVSTiAgICAgICB8 CiAgICAgICAgfCBDbGllbnQgICAgfC0tLS0tLS0tLS0tLS0tLS0tLS0tLS0+fCBTZXJ2ZXIgICAg IHwKICAgICAgICB8IChBbGljZSkgICB8IEFsbG9jYXRlIFJlc3BvbnNlICg1KSB8ICAgICAgICAg ICAgfAogICAgICAgIHwgICAgICAgICAgIHw8LS0tLS0tLS0tLS0tLS0tLS0tLS0tLXwgICAgICAg ICAgICB8CiAgICAgICAgKy0tLS0tLS0tLS0tKyAgICAgICAgICAgICAgICAgICAgICAgKy0tLS0t LS0tLS0tLSsKCiAgIFVzZXIgOiBBbGljZQogICAqKioqOiBPdXQtb2YtQmFuZCBMb25nLVRlcm0g S2V5IEVzdGFibGlzaG1lbnQKCiAgICAgICAgICAgICAgICAgICAgICAgICAgRmlndXJlIDI6IElu dGVyYWN0aW9ucwoKICAgSW4gdGhlIGJlbG93IGZpZ3VyZSwgdGhlIGNsaWVudCBzZW5kcyBhbiBB bGxvY2F0ZSByZXF1ZXN0IHRvIHRoZQogICBzZXJ2ZXIgd2l0aG91dCBjcmVkZW50aWFscy4gIFNp bmNlIHRoZSBzZXJ2ZXIgcmVxdWlyZXMgdGhhdCBhbGwKICAgcmVxdWVzdHMgYmUgYXV0aGVudGlj YXRlZCB1c2luZyBPQXV0aCAyLjAsIHRoZSBzZXJ2ZXIgcmVqZWN0cyB0aGUKICAgcmVxdWVzdCB3 aXRoIGEgNDAxIChVbmF1dGhvcml6ZWQpIGVycm9yIGNvZGUgYW5kIFNUVU4gYXR0cmlidXRlCiAg IFRISVJELVBBUlRZLUFVVEhPUklaQVRJT04uICBUaGUgV2ViUlRDIGNsaWVudCBvYnRhaW5zIGFj Y2VzcyB0b2tlbgogICBmcm9tIHRoZSBXZWJSVEMgc2VydmVyIGFuZCB0aGVuIHRyaWVzIGFnYWlu LCB0aGlzIHRpbWUgaW5jbHVkaW5nCiAgIGFjY2VzcyB0b2tlbi4gIFRoaXMgdGltZSwgdGhlIHNl cnZlciB2YWxpZGF0ZXMgdGhlIHRva2VuLCBhY2NlcHRzIHRoZQogICBBbGxvY2F0ZSByZXF1ZXN0 IGFuZCByZXR1cm5zIGFuIEFsbG9jYXRlIHN1Y2Nlc3MgcmVzcG9uc2UgY29udGFpbmluZwogICAo YW1vbmdzdCBvdGhlciB0aGluZ3MpIHRoZSByZWxheWVkIHRyYW5zcG9ydCBhZGRyZXNzIGFzc2ln bmVkIHRvIHRoZQogICBhbGxvY2F0aW9uLgoKCgoKCgoKCgoKCgoKClJlZGR5LCBldCBhbC4gICAg ICAgICAgIEV4cGlyZXMgT2N0b2JlciAyMywgMjAxNSAgICAgICAgICAgICAgICBbUGFnZSA2XQoM CkludGVybmV0LURyYWZ0ICAgICAgU1RVTiBmb3IgM3JkIHBhcnR5IEF1dGhvcml6YXRpb24gICAg ICAgICAgQXByaWwgMjAxNQoKCiAgICstLS0tLS0tLS0tLS0tLS0tLS0tKyAgICAgICAgICAgICAg ICAgICAgICAgICArLS0tLS0tLS0rICArLS0tLS0tLS0tKwogICB8IC4uLi4uLi4uLiAgVFVSTiAg IHwgICAgICAgICAgICAgICAgICAgICAgICAgfCAgVFVSTiAgfCAgfCAgV2ViUlRDIHwKICAgfCAu V2ViUlRDIC4gIENsaWVudCB8ICAgICAgICAgICAgICAgICAgICAgICAgIHwgICAgICAgIHwgIHwg ICAgICAgICB8CiAgIHwgLkNsaWVudCAuICAgICAgICAgfCAgICAgICAgICAgICAgICAgICAgICAg ICB8IFNlcnZlciB8ICB8ICBTZXJ2ZXIgfAogICB8IC4uLi4uLi4uLiAgICAgICAgIHwgICAgICAg ICAgICAgICAgICAgICAgICAgfCAgICAgICAgfCAgfCAgICAgICAgIHwKICAgKy0tLS0tLS0tLS0t LS0tLS0tLS0rICAgICAgICAgICAgICAgICAgICAgICAgICstLS0tLS0tLSsgICstLS0tLS0tLS0r CiAgICAgfCAgICAgICB8ICAgICAgICAgICBBbGxvY2F0ZSByZXF1ZXN0ICAgICAgICAgICAgICAg IHwgICAgICAgICB8CiAgICAgfCAgICAgICB8LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tPnwgICAgICAgICB8CiAgICAgfCAgICAgICB8ICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgIHwgICAgICAgICB8CiAgICAgfCAgICAgICB8ICAgICAg ICAgQWxsb2NhdGUgZXJyb3IgcmVzcG9uc2UgICAgICAgICAgIHwgICAgICAgICB8CiAgICAgfCAg ICAgICB8ICAgICAgICAgKDQwMSBVbmF1dGhvcml6ZWQpICAgICAgICAgICAgICAgIHwgICAgICAg ICB8CiAgICAgfCAgICAgICB8PC0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLXwgICAgICAgICB8CiAgICAgfCAgICAgICB8ICAgICAgICAgVEhJUkQtUEFSVFktQVVUSE9S SVpBVElPTiAgICAgICAgIHwgICAgICAgICB8CiAgICAgfCAgICAgICB8ICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgIHwgICAgICAgICB8CiAgICAgfCAgICAgICB8ICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIHwgICAgICAgICB8CiAgICAg fCAgICAgICB8ICAgICAgSFRUUCBSZXF1ZXN0IGZvciB0b2tlbiAgICAgICAgICAgICAgIHwgICAg ICAgICB8CiAgICAgfC0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLT58CiAgICAgfCAgICAgICB8ICAgICAgSFRUUCBSZXNwb25zZSB3aXRo IHRva2VuIHBhcmFtZXRlcnMgIHwgICAgICAgICB8CiAgICAgfDwtLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS18CiAgICAgfE9BdXRoIDIu MCAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIHwgICAgICAgICB8CiAg ICAgIEF0dHJpYnV0ZXMgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIHwg ICAgICAgICB8CiAgICAgfC0tLS0tLT58ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgIHwgICAgICAgICB8CiAgICAgfCAgICAgICB8ICAgIEFsbG9jYXRlIHJlcXVlc3Qg QUNDRVNTLVRPS0VOICAgICAgICAgIHwgICAgICAgICB8CiAgICAgfCAgICAgICB8LS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tPnwgICAgICAgICB8CiAgICAgfCAgICAg ICB8ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIHwgICAgICAgICB8 CiAgICAgfCAgICAgICB8ICAgICAgICAgQWxsb2NhdGUgc3VjY2VzcyByZXNwb25zZSAgICAgICAg IHwgICAgICAgICB8CiAgICAgfCAgICAgICB8PC0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLXwgICAgICAgICB8CiAgICAgfCAgICAgICB8ICAgICAgICAgICAgIFRVUk4g TWVzc2FnZXMgICAgICAgICAgICAgICAgIHwgICAgICAgICB8CiAgICAgfCAgICAgICB8ICAgICAg Ly8vLy8vIGludGVncml0eSBwcm90ZWN0ZWQgLy8vLy8vICAgIHwgICAgICAgICB8CiAgICAgfCAg ICAgICB8ICAgICAgLy8vLy8vIGludGVncml0eSBwcm90ZWN0ZWQgLy8vLy8vICAgIHwgICAgICAg ICB8CiAgICAgfCAgICAgICB8ICAgICAgLy8vLy8vIGludGVncml0eSBwcm90ZWN0ZWQgLy8vLy8v ICAgIHwgICAgICAgICB8CgogICAgICAgICAgICAgICAgIEZpZ3VyZSAzOiBUVVJOIFRoaXJkIFBh cnR5IEF1dGhvcml6YXRpb24KCjQuICBPYnRhaW5pbmcgYSBUb2tlbiBVc2luZyBPQXV0aAoKICAg QSBTVFVOIGNsaWVudCBuZWVkcyB0byBrbm93IHRoZSBhdXRoZW50aWNhdGlvbiBjYXBhYmlsaXR5 IG9mIHRoZSBTVFVOCiAgIHNlcnZlciBiZWZvcmUgZGVjaWRpbmcgdG8gdXNlIHRoaXJkIHBhcnR5 IGF1dGhvcml6YXRpb24uICBBIFNUVU4KICAgY2xpZW50IGluaXRpYWxseSBtYWtlcyBhIHJlcXVl c3Qgd2l0aG91dCBhbnkgYXV0aG9yaXphdGlvbi4gIElmIHRoZQogICBTVFVOIHNlcnZlciBzdXBw b3J0cyB0aGlyZCBwYXJ0eSBhdXRob3JpemF0aW9uLCBpdCB3aWxsIHJldHVybiBhbgogICBlcnJv ciBtZXNzYWdlIGluZGljYXRpbmcgdGhhdCB0aGUgY2xpZW50IGNhbiBhdXRob3JpemUgdG8gdGhl IFNUVU4KICAgc2VydmVyIHVzaW5nIGFuIE9BdXRoIDIuMCBhY2Nlc3MgdG9rZW4uICBUaGUgU1RV TiBzZXJ2ZXIgaW5jbHVkZXMgYW4KICAgRVJST1ItQ09ERSBhdHRyaWJ1dGUgd2l0aCBhIHZhbHVl IG9mIDQwMSAoVW5hdXRob3JpemVkKSwgYSBub25jZQogICB2YWx1ZSBpbiBhIE5PTkNFIGF0dHJp YnV0ZSBhbmQgYSBTT0ZUV0FSRSBhdHRyaWJ1dGUgdGhhdCBnaXZlcwogICBpbmZvcm1hdGlvbiBh Ym91dCB0aGUgU1RVTiBzZXJ2ZXIncyBzb2Z0d2FyZS4gIFRoZSBTVFVOIHNlcnZlciBhbHNvCiAg IGluY2x1ZGVzIHRoZSBhZGRpdGlvbmFsIFNUVU4gYXR0cmlidXRlIFRISVJELVBBUlRZLUFVVEhP UklaQVRJT04KICAgc2lnbmFsaW5nIHRoZSBTVFVOIGNsaWVudCB0aGF0IHRoZSBTVFVOIHNlcnZl ciBzdXBwb3J0cyB0aGlyZCBwYXJ0eQogICBhdXRob3JpemF0aW9uLgoKCgpSZWRkeSwgZXQgYWwu ICAgICAgICAgICBFeHBpcmVzIE9jdG9iZXIgMjMsIDIwMTUgICAgICAgICAgICAgICAgW1BhZ2Ug N10KDApJbnRlcm5ldC1EcmFmdCAgICAgIFNUVU4gZm9yIDNyZCBwYXJ0eSBBdXRob3JpemF0aW9u ICAgICAgICAgIEFwcmlsIDIwMTUKCgogICBOb3RlOiBBbiBpbXBsZW1lbnRhdGlvbiBtYXkgY2hv b3NlIHRvIGNvbnRhY3QgdGhlIGF1dGhvcml6YXRpb24KICAgc2VydmVyIHRvIG9idGFpbiBhIHRv a2VuIGV2ZW4gYmVmb3JlIGl0IG1ha2VzIGEgU1RVTiByZXF1ZXN0LCBpZiBpdAogICBrbm93cyB0 aGUgc2VydmVyIGRldGFpbHMgYmVmb3JlIGhhbmQuICBGb3IgZXhhbXBsZSwgb25jZSBhIGNsaWVu dCBoYXMKICAgbGVhcm50IHRoYXQgYSBTVFVOIHNlcnZlciBzdXBwb3J0cyB0aGlyZCBwYXJ0eSBh dXRob3JpemF0aW9uIGZyb20gYQogICBhdXRob3JpemF0aW9uIHNlcnZlciwgdGhlIGNsaWVudCBj YW4gb2J0YWluIHRoZSB0b2tlbiBiZWZvcmUgbWFraW5nCiAgIHN1YnNlcXVlbnQgU1RVTiByZXF1 ZXN0cy4KCjQuMS4gIEtleSBFc3RhYmxpc2htZW50CgogICBJbiB0aGlzIG1vZGVsIHRoZSBTVFVO IHNlcnZlciB3b3VsZCBub3QgYXV0aGVudGljYXRlIHRoZSBjbGllbnQKICAgaXRzZWxmIGJ1dCB3 b3VsZCByYXRoZXIgdmVyaWZ5IHdoZXRoZXIgdGhlIGNsaWVudCBrbm93cyB0aGUgc2Vzc2lvbgog ICBrZXkgYXNzb2NpYXRlZCB3aXRoIGEgc3BlY2lmaWMgYWNjZXNzIHRva2VuLiAgRXhhbXBsZSBv ZiB0aGlzCiAgIGFwcHJvYWNoIGNhbiBiZSBmb3VuZCB3aXRoIHRoZSBPQXV0aCAyLjAgUHJvb2Yt b2YtUG9zc2Vzc2lvbiAoUG9QKQogICBTZWN1cml0eSBBcmNoaXRlY3R1cmUgW0ktRC5pZXRmLW9h dXRoLXBvcC1hcmNoaXRlY3R1cmVdLiAgVGhlCiAgIGF1dGhvcml6YXRpb24gc2VydmVyIHNoYXJl cyBhIGxvbmctdGVybSBzZWNyZXQgKEspIHdpdGggdGhlIFNUVU4KICAgc2VydmVyLiAgV2hlbiB0 aGUgY2xpZW50IHJlcXVlc3RzIGFuIGFjY2VzcyB0b2tlbiB0aGUgYXV0aG9yaXphdGlvbgogICBz ZXJ2ZXIgY3JlYXRlcyBhIGZyZXNoIGFuZCB1bmlxdWUgc2Vzc2lvbiBrZXkgKG1hY19rZXkpIGFu ZCBwbGFjZXMgaXQKICAgaW50byB0aGUgdG9rZW4gZW5jcnlwdGVkIHdpdGggdGhlIGxvbmcgdGVy bSBzZWNyZXQuICBTeW1tZXRyaWMKICAgY3J5cHRvZ3JhcGh5IE1VU1QgYmUgY2hvc2VuIHRvIGVu c3VyZSB0aGF0IHRoZSBzaXplIG9mIGVuY3J5cHRlZAogICB0b2tlbiBpcyBub3QgbGFyZ2UgYmVj YXVzZSB1c2FnZSBvZiBhc3ltbWV0cmljIGNyeXB0b2dyYXBoeSB3aWxsCiAgIHJlc3VsdCBpbiBs YXJnZSBlbmNyeXB0ZWQgdG9rZW5zIHdoaWNoIG1heSBub3QgZml0IGludG8gYSBzaW5nbGUgU1RV TgogICBtZXNzYWdlLgoKICAgVGhlIFNUVU4gc2VydmVyIGFuZCBhdXRob3JpemF0aW9uIHNlcnZl ciBjYW4gZXN0YWJsaXNoIGEgc3ltbWV0cmljCiAgIGtleSAoSykgYW5kIGNlcnRhaW4gYXV0aGVu dGljYXRlZCBlbmNyeXB0aW9uIGFsZ29yaXRobSwgdXNpbmcgYW4gb3V0CiAgIG9mIGJhbmQgbWVj aGFuaXNtLiAgVGhlIFNUVU4gYW5kIGF1dGhvcml6YXRpb24gc2VydmVycyBNVVNUIGVzdGFibGlz aAogICBLIG92ZXIgYW4gYXV0aGVudGljYXRlZCBzZWN1cmUgY2hhbm5lbC4gIElmIEF1dGhlbnRp Y2F0ZWQgRW5jcnlwdGlvbgogICB3aXRoIEFFUy1DQkMgYW5kIEhNQUMtU0hBIChkZWZpbmVkIGlu CiAgIFtJLUQubWNncmV3LWFlYWQtYWVzLWNiYy1obWFjLXNoYTJdKSBpcyB1c2VkIHRoZW4gdGhl IEFTLVJTIGFuZCBBVVRICiAgIGtleXMgd2lsbCBiZSBkZXJpdmVkIGZyb20gSy4gIFRoZSBBUy1S UyBrZXkgaXMgdXNlZCBmb3IgZW5jcnlwdGluZwogICB0aGUgc2VsZi1jb250YWluZWQgdG9rZW4g YW5kIHRoZSBtZXNzYWdlIGludGVncml0eSBvZiB0aGUgZW5jcnlwdGVkCiAgIHRva2VuIGlzIGNh bGN1bGF0ZWQgdXNpbmcgdGhlIEFVVEgga2V5LiAgSWYgQXV0aGVudGljYXRlZCBFbmNyeXB0aW9u CiAgIHdpdGggQXNzb2NpYXRlZCBEYXRhIChBRUFEKSBhbGdvcml0aG0gZGVmaW5lZCBpbiBbUkZD NTExNl0gaXMgdXNlZAogICB0aGVuIHRoZXJlIGlzIG5vIG5lZWQgdG8gZ2VuZXJhdGUgdGhlIEFV VEgga2V5IGFuZCBBUy1SUyBrZXkgd2lsbAogICBoYXZlIHRoZSBzYW1lIHZhbHVlIGFzIEsuCgog ICBUaGUgcHJvY2VkdXJlIGZvciBlc3RhYmxpc2htZW50IG9mIHRoZSBzeW1tZXRyaWMga2V5IGlz IG91dHNpZGUgdGhlCiAgIHNjb3BlIG9mIHRoaXMgc3BlY2lmaWNhdGlvbiwgYW5kIHRoaXMgc3Bl Y2lmaWNhdGlvbiBkb2VzIG5vdCBtYW5kYXRlCiAgIHN1cHBvcnQgb2YgYW55IGdpdmVuIG1lY2hh bmlzbS4gIFNlY3Rpb24gNC4xLjEgYW5kIFNlY3Rpb24gNC4xLjIgc2hvdwogICBleGFtcGxlcyBv ZiBtZWNoYW5pc21zIHRoYXQgY2FuIGJlIHVzZWQuCgo0LjEuMS4gIEhUVFAgaW50ZXJhY3Rpb25z CgogICBUaGUgU1RVTiBhbmQgQVMgc2VydmVycyBjb3VsZCBjaG9vc2UgdG8gdXNlIFJFU1QgQVBJ IG92ZXIgSFRUUFMgdG8KICAgZXN0YWJsaXNoIGEgc3ltbWV0cmljIGtleS4gIEhUVFBTIE1VU1Qg YmUgdXNlZCBmb3IgbXV0dWFsCiAgIGF1dGhlbnRpY2F0aW9uIGFuZCBjb25maWRlbnRpYWxpdHku ICBUbyByZXRyaWV2ZSBhIG5ldyBzeW1tZXRyaWMga2V5LAogICB0aGUgU1RVTiBzZXJ2ZXIgbWFr ZXMgYW4gSFRUUCBHRVQgcmVxdWVzdCB0byB0aGUgYXV0aG9yaXphdGlvbgogICBzZXJ2ZXIsIHNw ZWNpZnlpbmcgU1RVTiBhcyB0aGUgc2VydmljZSB0byBhbGxvY2F0ZSB0aGUgc3ltbWV0cmljIGtl eXMKCgoKUmVkZHksIGV0IGFsLiAgICAgICAgICAgRXhwaXJlcyBPY3RvYmVyIDIzLCAyMDE1ICAg ICAgICAgICAgICAgIFtQYWdlIDhdCgwKSW50ZXJuZXQtRHJhZnQgICAgICBTVFVOIGZvciAzcmQg cGFydHkgQXV0aG9yaXphdGlvbiAgICAgICAgICBBcHJpbCAyMDE1CgoKICAgZm9yLCBhbmQgc3Bl Y2lmeWluZyB0aGUgbmFtZSBvZiB0aGUgU1RVTiBzZXJ2ZXIuICBUaGUgcmVzcG9uc2UgaXMKICAg cmV0dXJuZWQgd2l0aCBjb250ZW50LXR5cGUgImFwcGxpY2F0aW9uL2pzb24iLCBhbmQgY29uc2lz dHMgb2YgYQogICBKYXZhU2NyaXB0IE9iamVjdCBOb3RhdGlvbiAoSlNPTikgW1JGQzcxNTldIG9i amVjdCBjb250YWluaW5nIHRoZQogICBzeW1tZXRyaWMga2V5LgoKICAgUmVxdWVzdAogICAtLS0t LS0tCgogICBzZXJ2aWNlIC0gc3BlY2lmaWVzIHRoZSBkZXNpcmVkIHNlcnZpY2UgKHR1cm4pCiAg IG5hbWUgICAgLSAgU1RVTiBzZXJ2ZXIgbmFtZSBiZSBhc3NvY2lhdGVkIHdpdGggdGhlIGtleQoK ICAgZXhhbXBsZTogR0VUIC8/c2VydmljZT1zdHVuJm5hbWU9dHVybjFAZXhhbXBsZS5jb20KCgog ICBSZXNwb25zZQogICAtLS0tLS0tLQoKICAgayAtIExvbmctdGVybSBrZXkgKEspCiAgIGV4cCAt IGlkZW50aWZpZXMgdGhlIHRpbWUgYWZ0ZXIgd2hpY2ggdGhlIGtleSBleHBpcmVzLgoKCiAgIGV4 YW1wbGU6CiAgIHsKICAgICAgImsiIDoKICAgIkVTSXpSRlZtZDRpWkFCRWlNMFJWWmdLbjZXakxh VEMxRlhBZ2hSTVZUemtCR05hYU40OTY1MjNXSUlTS2VyTGkiLAogICAgICAiZXhwIiA6IDEzMDA4 MTkzODAsCiAgICAgICJraWQiIDoiMjJCSWp4VTkzaC9JZ3dFYiIKICAgICAgImVuYyIgOiBBMjU2 R0NNCiAgICAgfQoKICAgVGhlIGF1dGhvcml6YXRpb24gc2VydmVyIG11c3QgYWxzbyBzaWduYWwg a2lkIHRvIHRoZSBTVFVOIHNlcnZlcgogICB3aGljaCB3aWxsIGJlIHVzZWQgdG8gc2VsZWN0IHRo ZSBhcHByb3ByaWF0ZSBrZXlpbmcgbWF0ZXJpYWwgZm9yCiAgIGRlY3J5cHRpb24uICBUaGUgcGFy YW1ldGVyICJrIiBpcyBkZWZpbmVkIGluIFNlY3Rpb24gNi40LjEgb2YKICAgW0ktRC5pZXRmLWpv c2UtanNvbi13ZWItYWxnb3JpdGhtc10sICJlbmMiIGlzIGRlZmluZWQgaW4KICAgU2VjdGlvbiA0 LjEuMiBvZiBbSS1ELmlldGYtam9zZS1qc29uLXdlYi1lbmNyeXB0aW9uXSwgImtpZCIgaXMKICAg ZGVmaW5lZCBpbiBTZWN0aW9uIDQuMS40IG9mIFtJLUQuaWV0Zi1qb3NlLWpzb24td2ViLXNpZ25h dHVyZV0gYW5kCiAgICJleHAiIGlzIGRlZmluZWQgaW4gU2VjdGlvbiA0LjEuNCBvZiBbSS1ELmll dGYtb2F1dGgtanNvbi13ZWItdG9rZW5dLgogICBBMjU2R0NNIGFuZCBvdGhlciBhdXRoZW50aWNh dGVkIGVuY3J5cHRpb24gYWxnb3JpdGhtcyBhcmUgZGVmaW5lZCBpbgogICBzZWN0aW9uIDUuMSBv ZiBbSS1ELmlldGYtam9zZS1qc29uLXdlYi1hbGdvcml0aG1zXS4gIEEgU1RVTiBzZXJ2ZXIKICAg YW5kIGF1dGhvcml6YXRpb24gc2VydmVyIGltcGxlbWVudGF0aW9uIE1VU1Qgc3VwcG9ydCBBMjU2 R0NNIGFzIHRoZQogICBhdXRoZW50aWNhdGVkIGVuY3J5cHRpb24gYWxnb3JpdGhtLgoKICAgSWYg QTI1NkNCQy1IUzUxMiBkZWZpbmVkIGluIFtJLUQuaWV0Zi1qb3NlLWpzb24td2ViLWFsZ29yaXRo bXNdIGlzCiAgIHVzZWQgdGhlbiB0aGUgQVMtUlMgYW5kIEFVVEgga2V5cyBhcmUgZGVyaXZlZCBm cm9tIEsgdXNpbmcgdGhlCiAgIG1lY2hhbmlzbSBleHBsYWluZWQgaW4gc2VjdGlvbiA1LjIuMi4x IG9mCiAgIFtJLUQuaWV0Zi1qb3NlLWpzb24td2ViLWFsZ29yaXRobXNdLiAgSW4gdGhpcyBjYXNl IEFTLVJTIGtleSBsZW5ndGgKICAgbXVzdCBiZSAyNTYtYml0LCBBVVRIIGtleSBsZW5ndGggbXVz dCBiZSAyNTYtYml0IChzZWN0aW9uIDIuNiBvZgogICBbUkZDNDg2OF0pLgoKCgpSZWRkeSwgZXQg YWwuICAgICAgICAgICBFeHBpcmVzIE9jdG9iZXIgMjMsIDIwMTUgICAgICAgICAgICAgICAgW1Bh Z2UgOV0KDApJbnRlcm5ldC1EcmFmdCAgICAgIFNUVU4gZm9yIDNyZCBwYXJ0eSBBdXRob3JpemF0 aW9uICAgICAgICAgIEFwcmlsIDIwMTUKCgo0LjEuMi4gIE1hbnVhbCBwcm92aXNpb25pbmcKCiAg IFRoZSBTVFVOIGFuZCBBUyBzZXJ2ZXJzIGNvdWxkIGJlIG1hbnVhbGx5IGNvbmZpZ3VyZWQgd2l0 aCBhIHN5bW1ldHJpYwogICBrZXkgKEspLCBhdXRoZW50aWNhdGVkIGVuY3J5cHRpb24gYWxnb3Jp dGhtIGFuZCBraWQuCgogICBOb3RlIDogVGhlIG1lY2hhbmlzbSBzcGVjaWZpZWQgaW4gU2VjdGlv biA0LjEuMiByZXF1aXJlcwogICBjb25maWd1cmF0aW9uIHRvIGNoYW5nZSB0aGUgc3ltbWV0cmlj IGtleSAoSykgYW5kL29yIGF1dGhlbnRpY2F0ZWQKICAgZW5jcnlwdGlvbiBhbGdvcml0aG0uICBI ZW5jZSBhIFNUVU4gc2VydmVyIGFuZCBhdXRob3JpemF0aW9uIHNlcnZlcgogICBpbXBsZW1lbnRh dGlvbiBTSE9VTEQgc3VwcG9ydCBSRVNUIGV4cGxhaW5lZCBpbiBTZWN0aW9uIDQuMS4xLgoKNS4g IEZvcm1pbmcgYSBSZXF1ZXN0CgogICBXaGVuIGEgU1RVTiBzZXJ2ZXIgcmVzcG9uZHMgdGhhdCB0 aGlyZCBwYXJ0eSBhdXRob3JpemF0aW9uIGlzCiAgIHJlcXVpcmVkLCBhIFNUVU4gY2xpZW50IHJl LWF0dGVtcHRzIHRoZSByZXF1ZXN0LCB0aGlzIHRpbWUgaW5jbHVkaW5nCiAgIGFjY2VzcyB0b2tl biBhbmQga2lkIHZhbHVlcyBpbiBBQ0NFU1MtVE9LRU4gYW5kIFVTRVJOQU1FIFNUVU4KICAgYXR0 cmlidXRlcy4gIFRoZSBTVFVOIGNsaWVudCBpbmNsdWRlcyBhIE1FU1NBR0UtSU5URUdSSVRZIGF0 dHJpYnV0ZQogICBhcyB0aGUgbGFzdCBhdHRyaWJ1dGUgaW4gdGhlIG1lc3NhZ2Ugb3ZlciB0aGUg Y29udGVudHMgb2YgdGhlIFNUVU4KICAgbWVzc2FnZS4gIFRoZSBITUFDIGZvciB0aGUgTUVTU0FH RS1JTlRFR1JJVFkgYXR0cmlidXRlIGlzIGNvbXB1dGVkIGFzCiAgIGRlc2NyaWJlZCBpbiBzZWN0 aW9uIDE1LjQgb2YgW1JGQzUzODldIHdoZXJlIHRoZSBtYWNfa2V5IGlzIHVzZWQgYXMKICAgdGhl IGlucHV0IGtleSBmb3IgdGhlIEhNQUMgY29tcHV0YXRpb24uICBUaGUgU1RVTiBjbGllbnQgYW5k IHNlcnZlcgogICB3aWxsIHVzZSB0aGUgbWFjX2tleSB0byBjb21wdXRlIHRoZSBtZXNzYWdlIGlu dGVncml0eSBhbmQgZG8gbm90CiAgIHBlcmZvcm0gTUQ1IGhhc2ggb24gdGhlIGNyZWRlbnRpYWxz LgoKNi4gIFNUVU4gQXR0cmlidXRlcwoKICAgVGhlIGZvbGxvd2luZyBuZXcgU1RVTiBhdHRyaWJ1 dGVzIGFyZSBpbnRyb2R1Y2VkIGJ5IHRoaXMKICAgc3BlY2lmaWNhdGlvbiB0byBhY2NvbXBsaXNo IHRoaXJkIHBhcnR5IGF1dGhvcml6YXRpb24uCgo2LjEuICBUSElSRC1QQVJUWS1BVVRIT1JJWkFU SU9OCgogICBUaGlzIGF0dHJpYnV0ZSBpcyB1c2VkIGJ5IHRoZSBTVFVOIHNlcnZlciB0byBpbmZv cm0gdGhlIGNsaWVudCB0aGF0CiAgIGl0IHN1cHBvcnRzIHRoaXJkIHBhcnR5IGF1dGhvcml6YXRp b24uICBUaGlzIGF0dHJpYnV0ZSB2YWx1ZSBjb250YWlucwogICB0aGUgU1RVTiBzZXJ2ZXIgbmFt ZS4gIFRoZSBTVFVOIHNlcnZlciBtYXkgaGF2ZSB0aWUtdXBzIHdpdGggbXVsdGlwbGUKICAgYXV0 aG9yaXphdGlvbiBzZXJ2ZXJzIGFuZCB2aWNlIHZlcnNhLCBzbyB0aGUgY2xpZW50IE1VU1QgcHJv dmlkZSB0aGUKICAgU1RVTiBzZXJ2ZXIgbmFtZSB0byB0aGUgYXV0aG9yaXphdGlvbiBzZXJ2ZXIg c28gdGhhdCBpdCBjYW4gc2VsZWN0CiAgIHRoZSBhcHByb3ByaWF0ZSBrZXlpbmcgbWF0ZXJpYWwg dG8gZ2VuZXJhdGUgdGhlIHNlbGYtY29udGFpbmVkIHRva2VuLgogICBUaGUgVEhJUkQtUEFSVFkt QVVUSE9SSVpBVElPTiBhdHRyaWJ1dGUgaXMgYSBjb21wcmVoZW5zaW9uLW9wdGlvbmFsCiAgIGF0 dHJpYnV0ZSAoc2VlIFNlY3Rpb24gMTUgZnJvbSBbUkZDNTM4OV0pLiAgSWYgdGhlIGNsaWVudCBp cyBhYmxlIHRvCiAgIGNvbXByZWhlbmQgVEhJUkQtUEFSVFktQVVUSE9SSVpBVElPTiBpdCBNVVNU IGVuc3VyZSB0aGF0IHRoaXJkIHBhcnR5CiAgIGF1dGhvcml6YXRpb24gdGFrZXMgcHJlY2VkZW5j ZSBvdmVyIGZpcnN0IHBhcnR5IGF1dGhlbnRpY2F0aW9uCiAgIChleHBsYWluZWQgaW4gc2VjdGlv biAxMCBvZiBbUkZDNTM4OV0pLiAgSWYgdGhlIGNsaWVudCBkb2VzIG5vdAogICBzdXBwb3J0IG9y IGlzIG5vdCBjYXBhYmxlIG9mIGRvaW5nIHRoaXJkIHBhcnR5IGF1dGhvcml6YXRpb24gdGhlbiBp dAogICBkZWZhdWx0cyB0byBmaXJzdCBwYXJ0eSBhdXRoZW50aWNhdGlvbi4KCgoKCgoKCgpSZWRk eSwgZXQgYWwuICAgICAgICAgICBFeHBpcmVzIE9jdG9iZXIgMjMsIDIwMTUgICAgICAgICAgICAg ICBbUGFnZSAxMF0KDApJbnRlcm5ldC1EcmFmdCAgICAgIFNUVU4gZm9yIDNyZCBwYXJ0eSBBdXRo b3JpemF0aW9uICAgICAgICAgIEFwcmlsIDIwMTUKCgo2LjIuICBBQ0NFU1MtVE9LRU4KCiAgIFRo ZSBhY2Nlc3MgdG9rZW4gaXMgaXNzdWVkIGJ5IHRoZSBhdXRob3JpemF0aW9uIHNlcnZlci4gIE9B dXRoIDIuMAogICBkb2VzIG5vdCBpbXBvc2UgYW55IGxpbWl0YXRpb24gb24gdGhlIGxlbmd0aCBv ZiB0aGUgYWNjZXNzIHRva2VuIGJ1dAogICBpZiBwYXRoIE1UVSBpcyB1bmtub3duIHRoZW4gU1RV TiBtZXNzYWdlcyBvdmVyIElQdjQgd291bGQgbmVlZCB0byBiZQogICBsZXNzIHRoYW4gNTQ4IGJ5 dGVzIChTZWN0aW9uIDcuMSBvZiBbUkZDNTM4OV0pLiAgVGhlIGFjY2VzcyB0b2tlbgogICBsZW5n dGggbmVlZHMgdG8gYmUgcmVzdHJpY3RlZCB0byBmaXQgd2l0aGluIHRoZSBtYXhpbXVtIFNUVU4g bWVzc2FnZQogICBzaXplLiAgTm90ZSB0aGF0IHRoZSBzZWxmLWNvbnRhaW5lZCB0b2tlbiBpcyBv cGFxdWUgdG8gdGhlIGNsaWVudCBhbmQKICAgdGhlIGNsaWVudCBNVVNUIE5PVCBleGFtaW5lIHRo ZSB0b2tlbi4gIFRoZSBBQ0NFU1MtVE9LRU4gYXR0cmlidXRlIGlzCiAgIGEgY29tcHJlaGVuc2lv bi1yZXF1aXJlZCBhdHRyaWJ1dGUgKHNlZSBTZWN0aW9uIDE1IGZyb20gW1JGQzUzODldKS4KCiAg IFRoZSB0b2tlbiBpcyBzdHJ1Y3R1cmVkIGFzIGZvbGxvd3M6CgogICAgICAgICBzdHJ1Y3Qgewog ICAgICAgICAgICAgdWludDE2X3Qgbm9uY2VfbGVuZ3RoOwogICAgICAgICAgICAgb3BhcXVlIG5v bmNlW25vbmNlX2xlbmd0aF07CiAgICAgICAgICAgICBvcGFxdWUgewogICAgICAgICAgICAgICAg IHVpbnQxNl90IGtleV9sZW5ndGg7CiAgICAgICAgICAgICAgICAgb3BhcXVlIG1hY19rZXlba2V5 X2xlbmd0aF07CiAgICAgICAgICAgICAgICAgdWludDY0X3QgdGltZXN0YW1wOwogICAgICAgICAg ICAgICAgIHVpbnQzMl90IGxpZmV0aW1lOwogICAgICAgICAgICAgfSBlbmNyeXB0ZWRfYmxvY2s7 CiAgICAgICAgIH0gdG9rZW47CgogICAgICAgICAgICAgICAgICAgRmlndXJlIDQ6IFNlbGYtY29u dGFpbmVkIHRva2VuIGZvcm1hdAoKICAgTm90ZTogdWludE5fdCBtZWFucyBhbiB1bnNpZ25lZCBp bnRlZ2VyIG9mIGV4YWN0bHkgTiBiaXRzLiAgU2luZ2xlLQogICBieXRlIGVudGl0aWVzIGNvbnRh aW5pbmcgdW5pbnRlcnByZXRlZCBkYXRhIGFyZSBvZiB0eXBlIG9wYXF1ZS4gIEFsbAogICB2YWx1 ZXMgaW4gdGhlIHRva2VuIGFyZSBzdG9yZWQgaW4gbmV0d29yayBieXRlIG9yZGVyLgoKICAgVGhl IGFzc29jaWF0ZWQgZGF0YSAoQSkgTVVTVCBiZSB0aGUgU1RVTiBzZXJ2ZXIgbmFtZS4gIFRoaXMg ZW5zdXJlcwogICB0aGF0IHRoZSBjbGllbnQgZG9lcyBub3QgdXNlIHRoZSBzYW1lIHRva2VuIHRv IGdhaW4gaWxsZWdhbCBhY2Nlc3MgdG8KICAgb3RoZXIgU1RVTiBzZXJ2ZXJzIHByb3ZpZGVkIGJ5 IHRoZSBzYW1lIGFkbWluaXN0cmF0aXZlIGRvbWFpbiBpLmUuLAogICB3aGVuIG11bHRpcGxlIFNU VU4gc2VydmVycyBpbiBhIHNpbmdsZSBhZG1pbmlzdHJhdGl2ZSBkb21haW4gc2hhcmUKICAgdGhl IHNhbWUgc3ltbWV0cmljIGtleSB3aXRoIGFuIGF1dGhvcml6YXRpb24gc2VydmVyLgoKICAgVGhl IGZpZWxkcyBhcmUgZGVzY3JpYmVkIGJlbG93OgoKICAgbm9uY2VfbGVuZ3RoOiAgTGVuZ3RoIG9m IHRoZSBub25jZSBmaWVsZC4gIFRoZSBsZW5ndGggb2Ygbm9uY2UgZm9yCiAgICAgIGF1dGhlbnRp Y2F0ZWQgZW5jcnlwdGlvbiB3aXRoIGFkZGl0aW9uYWwgZGF0YSAoQUVBRCkgYWxnb3JpdGhtcyBp cwogICAgICBleHBsYWluZWQgaW4gW1JGQzUxMTZdLgoKICAgTm9uY2U6ICBOb25jZSAoTikgZm9y bWF0aW9uIGlzIGV4cGxhaW5lZCBpbiBzZWN0aW9uIDMuMiBvZiBbUkZDNTExNl0uCgogICBrZXlf bGVuZ3RoOiAgTGVuZ3RoIG9mIHRoZSBzZXNzaW9uIGtleSBpbiBvY3RldHMuICBLZXkgbGVuZ3Ro IG9mCiAgICAgIDE2MC1iaXRzIE1VU1QgYmUgc3VwcG9ydGVkIChpLmUuLCBvbmx5IDE2MC1iaXQg a2V5IGlzIHVzZWQgYnkKICAgICAgSE1BQy1TSEEtMSBmb3IgbWVzc2FnZSBpbnRlZ3JpdHkgb2Yg U1RVTiBtZXNzYWdlKS4gIFRoZSBrZXkgbGVuZ3RoCgoKCgpSZWRkeSwgZXQgYWwuICAgICAgICAg ICBFeHBpcmVzIE9jdG9iZXIgMjMsIDIwMTUgICAgICAgICAgICAgICBbUGFnZSAxMV0KDApJbnRl cm5ldC1EcmFmdCAgICAgIFNUVU4gZm9yIDNyZCBwYXJ0eSBBdXRob3JpemF0aW9uICAgICAgICAg IEFwcmlsIDIwMTUKCgogICAgICBmYWNpbGl0YXRlcyB0aGUgaGFzaCBhZ2lsaXR5IHBsYW4gZGlz Y3Vzc2VkIGluIHNlY3Rpb24gMTYuMyBvZgogICAgICBbUkZDNTM4OV0uCgogICBtYWNfa2V5OiAg VGhlIHNlc3Npb24ga2V5IGdlbmVyYXRlZCBieSB0aGUgYXV0aG9yaXphdGlvbiBzZXJ2ZXIuCgog ICB0aW1lc3RhbXA6ICA2NC1iaXQgdW5zaWduZWQgaW50ZWdlciBmaWVsZCBjb250YWluaW5nIGEg dGltZXN0YW1wLgogICAgICBUaGUgdmFsdWUgaW5kaWNhdGVzIHRoZSB0aW1lIHNpbmNlIEphbnVh cnkgMSwgMTk3MCwgMDA6MDAgVVRDLCBieQogICAgICB1c2luZyBhIGZpeGVkIHBvaW50IGZvcm1h dC4gIEluIHRoaXMgZm9ybWF0LCB0aGUgaW50ZWdlciBudW1iZXIgb2YKICAgICAgc2Vjb25kcyBp cyBjb250YWluZWQgaW4gdGhlIGZpcnN0IDQ4IGJpdHMgb2YgdGhlIGZpZWxkLCBhbmQgdGhlCiAg ICAgIHJlbWFpbmluZyAxNiBiaXRzIGluZGljYXRlIHRoZSBudW1iZXIgb2YgMS82NEsgZnJhY3Rp b25zIG9mIGEKICAgICAgc2Vjb25kIChOYXRpdmUgZm9ybWF0IC0gVW5peCkuCgogICBsaWZldGlt ZTogIFRoZSBsaWZldGltZSBvZiB0aGUgYWNjZXNzIHRva2VuLCBpbiBzZWNvbmRzLiAgRm9yCiAg ICAgIGV4YW1wbGUsIHRoZSB2YWx1ZSAzNjAwIGluZGljYXRlcyBvbmUgaG91ci4gIFRoZSBsaWZl dGltZSB2YWx1ZQogICAgICBNVVNUIGJlIGdyZWF0ZXIgdGhhbiBvciBlcXVhbCB0byB0aGUgImV4 cGlyZXNfaW4iIHBhcmFtZXRlcgogICAgICBkZWZpbmVkIGluIHNlY3Rpb24gNC4yLjIgb2YgW1JG QzY3NDldLCBvdGhlcndpc2UgcmVzb3VyY2Ugc2VydmVyCiAgICAgIGNvdWxkIHJldm9rZSB0aGUg dG9rZW4gYnV0IHRoZSBjbGllbnQgd291bGQgYXNzdW1lIHRoYXQgdGhlIHRva2VuCiAgICAgIGhh cyBub3QgZXhwaXJlZCBhbmQgd291bGQgbm90IHJlZnJlc2ggdGhlIHRva2VuLgoKICAgZW5jcnlw dGVkX2Jsb2NrOiAgVGhlIGVuY3J5cHRlZF9ibG9jayAoUCkgaXMgZW5jcnlwdGVkIGFuZAogICAg ICBhdXRoZW50aWNhdGVkIHVzaW5nIHRoZSBzeW1tZXRyaWMgbG9uZy10ZXJtIGtleSBlc3RhYmxp c2hlZAogICAgICBiZXR3ZWVuIHRoZSBTVFVOIHNlcnZlciBhbmQgdGhlIGF1dGhvcml6YXRpb24g c2VydmVyLgoKICAgVGhlIEFFQUQgZW5jcnlwdGlvbiBvcGVyYXRpb24gaGFzIGZvdXIgaW5wdXRz OiBLICwgTiwgQSwgYW5kIFAsIGFzCiAgIGRlZmluZWQgaW4gc2VjdGlvbiAyLjEgb2YgW1JGQzUx MTZdIGFuZCB0aGVyZSBpcyBhIHNpbmdsZSBvdXRwdXQgYQogICBjaXBoZXJ0ZXh0IEMgb3IgYW4g aW5kaWNhdGlvbiB0aGF0IHRoZSByZXF1ZXN0ZWQgZW5jcnlwdGlvbiBvcGVyYXRpb24KICAgY291 bGQgbm90IGJlIHBlcmZvcm1lZC4KCiAgIElmIEFFU19DQkNfSE1BQ19TSEEyIChleHBsYWluZWQg aW4gc2VjdGlvbiAyLjEgb2YKICAgW0ktRC5tY2dyZXctYWVhZC1hZXMtY2JjLWhtYWMtc2hhMl0p KSBpcyB1c2VkIHRoZW4gdGhlIGVuY3J5cHRpb24KICAgcHJvY2VzcyBpcyBpbGx1c3RyYXRlZCBi ZWxvdy4gIFRoZSBjaXBoZXJ0ZXh0IGNvbnNpc3RzIG9mIHRoZSBzdHJpbmcKICAgUywgd2l0aCB0 aGUgc3RyaW5nIFQgYXBwZW5kZWQgdG8gaXQuICBIZXJlIEMgYW5kIEEgZGVub3RlIENpcGhlcnRl eHQKICAgYW5kIFNUVU4gc2VydmVyIG5hbWUgcmVzcGVjdGl2ZWx5LiAgVGhlIG9jdGV0IHN0cmlu ZyBBTCAoc2VjdGlvbiAyLjEKICAgb2YgW0ktRC5tY2dyZXctYWVhZC1hZXMtY2JjLWhtYWMtc2hh Ml0pIGlzIGVxdWFsIHRvIHRoZSBudW1iZXIgb2YKICAgYml0cyBpbiBBIGV4cHJlc3NlZCBhcyBh IDY0LWJpdCB1bnNpZ25lZCBiaWcgZW5kaWFuIGludGVnZXIuCgogICBvICBBVVRIID0gaW5pdGlh bCBhdXRoZW50aWNhdGlvbiBrZXkgbGVuZ3RoIG9jdGV0cyBvZiBLLAoKICAgbyAgQVMtUlMgPSBm aW5hbCBlbmNyeXB0aW9uIGtleSBsZW5ndGggb2N0ZXRzIG9mIEssCgogICBvICBTID0gQ0JDLVBL Q1M3LUVOQyhBUy1SUywgZW5jcnlwdGVkX2Jsb2NrKSwKCiAgICAgICogIEluaXRpYWxpemF0aW9u IHZlY3RvciBpcyBzZXQgdG8gemVybyBiZWNhdXNlIHRoZQogICAgICAgICBlbmNyeXB0ZWRfYmxv Y2sgaW4gZWFjaCBhY2Nlc3MgdG9rZW4gd2lsbCBub3QgYmUgaWRlbnRpY2FsIGFuZAogICAgICAg ICBoZW5jZSB3aWxsIG5vdCByZXN1bHQgaW4gZ2VuZXJhdGlvbiBvZiBpZGVudGljYWwgY2lwaGVy dGV4dC4KCiAgIG8gIG1hYyA9IE1BQyhBVVRILCBBIHx8IFMgfHwgQUwpLAoKCgoKUmVkZHksIGV0 IGFsLiAgICAgICAgICAgRXhwaXJlcyBPY3RvYmVyIDIzLCAyMDE1ICAgICAgICAgICAgICAgW1Bh Z2UgMTJdCgwKSW50ZXJuZXQtRHJhZnQgICAgICBTVFVOIGZvciAzcmQgcGFydHkgQXV0aG9yaXph dGlvbiAgICAgICAgICBBcHJpbCAyMDE1CgoKICAgbyAgVCA9IGluaXRpYWwgVF9MRU4gb2N0ZXRz IG9mIG1hYywKCiAgIG8gIEMgPSBTIHx8IFQuCgogICBUaGUgZW50aXJlIHRva2VuIGkuZS4sIHRo ZSAnZW5jcnlwdGVkX2Jsb2NrJyBpcyBiYXNlNjQgZW5jb2RlZCAoc2VlCiAgIHNlY3Rpb24gNCBv ZiBbUkZDNDY0OF0pIGFuZCB0aGUgcmVzdWx0aW5nIGFjY2VzcyB0b2tlbiBpcyBzaWduYWxlZCB0 bwogICB0aGUgY2xpZW50LgoKNy4gIFNUVU4gU2VydmVyIEJlaGF2aW91cgoKICAgVGhlIFNUVU4g c2VydmVyLCBvbiByZWNlaXZpbmcgYSByZXF1ZXN0IHdpdGggQUNDRVNTLVRPS0VOIGF0dHJpYnV0 ZSwKICAgcGVyZm9ybXMgY2hlY2tzIGxpc3RlZCBpbiBzZWN0aW9uIDEwLjIuMiBvZiBbUkZDNTM4 OV0gaW4gYWRkaXRpb24gdG8KICAgdGhlIGZvbGxvd2luZyBzdGVwcyB0byB2ZXJpZnkgdGhhdCB0 aGUgYWNjZXNzIHRva2VuIGlzIHZhbGlkOgoKICAgbyAgU1RVTiBzZXJ2ZXIgc2VsZWN0cyB0aGUg a2V5aW5nIG1hdGVyaWFsIGJhc2VkIG9uIGtpZCBzaWduYWxsZWQgaW4KICAgICAgdGhlIFVTRVJO QU1FIGF0dHJpYnV0ZS4KCiAgIG8gIFRoZSBBRUFEIGRlY3J5cHRpb24gb3BlcmF0aW9uIGhhcyBm b3VyIGlucHV0czogSywgTiwgQSwgYW5kIEMsIGFzCiAgICAgIGRlZmluZWQgaW4gc2VjdGlvbiAy LjIgb2YgW1JGQzUxMTZdLiAgQUVBRCBkZWNyeXB0aW9uIGFsZ29yaXRobQogICAgICBoYXMgb25s eSBhIHNpbmdsZSBvdXRwdXQsIGVpdGhlciBhIHBsYWludGV4dCBvciBhIHNwZWNpYWwgc3ltYm9s CiAgICAgIEZBSUwgdGhhdCBpbmRpY2F0ZXMgdGhhdCB0aGUgaW5wdXRzIGFyZSBub3QgYXV0aGVu dGljLiAgSWYKICAgICAgYXV0aGVudGljYXRlZCBkZWNyeXB0IG9wZXJhdGlvbiByZXR1cm5zIEZB SUwgdGhlbiB0aGUgU1RVTiBzZXJ2ZXIKICAgICAgcmVqZWN0cyB0aGUgcmVxdWVzdCB3aXRoIGFu IGVycm9yIHJlc3BvbnNlIDQwMSAoVW5hdXRob3JpemVkKS4KCiAgIG8gIElmIEFFU19DQkNfSE1B Q19TSEEyIGlzIHVzZWQgdGhlbiB0aGUgZmluYWwgVF9MRU4gb2N0ZXRzIGFyZQogICAgICBzdHJp cHBlZCBmcm9tIEMuICBJdCBwZXJmb3JtcyB0aGUgdmVyaWZpY2F0aW9uIG9mIHRoZSB0b2tlbgog ICAgICBtZXNzYWdlIGludGVncml0eSBieSBjYWxjdWxhdGluZyBITUFDIG92ZXIgdGhlIHRoZSBT VFVOIHNlcnZlcgogICAgICBuYW1lLCB0aGUgZW5jcnlwdGVkIHBvcnRpb24gaW4gdGhlIHNlbGYt Y29udGFpbmVkIHRva2VuIGFuZCB0aGUgQUwKICAgICAgdXNpbmcgQVVUSCBrZXkgYW5kIGlmIHRo ZSByZXN1bHRpbmcgdmFsdWUgZG9lcyBub3QgbWF0Y2ggdGhlIG1hYwogICAgICBmaWVsZCBpbiB0 aGUgc2VsZi1jb250YWluZWQgdG9rZW4gdGhlbiBpdCByZWplY3RzIHRoZSByZXF1ZXN0IHdpdGgK ICAgICAgYW4gZXJyb3IgcmVzcG9uc2UgNDAxIChVbmF1dGhvcml6ZWQpLgoKICAgbyAgU1RVTiBz ZXJ2ZXIgb2J0YWlucyB0aGUgbWFjX2tleSBieSByZXRyaWV2aW5nIHRoZSBjb250ZW50IG9mIHRo ZQogICAgICBhY2Nlc3MgdG9rZW4gKHdoaWNoIHJlcXVpcmVzIGRlY3J5cHRpb24gb2YgdGhlIHNl bGYtY29udGFpbmVkCiAgICAgIHRva2VuIHVzaW5nIHRoZSBBUy1SUyBrZXkpLgoKICAgbyAgVGhl IFNUVU4gc2VydmVyIHZlcmlmaWVzIHRoYXQgbm8gcmVwbGF5IHRvb2sgcGxhY2UgYnkgcGVyZm9y bWluZwogICAgICB0aGUgZm9sbG93aW5nIGNoZWNrOgoKICAgICAgKiAgVGhlIGFjY2VzcyB0b2tl biBpcyBhY2NlcHRlZCBpZiB0aGUgdGltZXN0YW1wIGZpZWxkIChUUykgaW4gdGhlCiAgICAgICAg IHNlbGYtY29udGFpbmVkIHRva2VuIGlzIHJlY2VudCBlbm91Z2ggdG8gdGhlIHJlY2VwdGlvbiB0 aW1lIG9mCiAgICAgICAgIHRoZSBTVFVOIHJlcXVlc3QgKFJEbmV3KSB1c2luZyB0aGUgZm9sbG93 aW5nIGZvcm11bGE6IExpZmV0aW1lCiAgICAgICAgICsgRGVsdGEgPiBhYnMoUkRuZXcgLSBUUyku ICBUaGUgUkVDT01NRU5ERUQgdmFsdWUgZm9yIHRoZQogICAgICAgICBhbGxvd2VkIERlbHRhIGlz IDUgc2Vjb25kcy4gIElmIHRoZSB0aW1lc3RhbXAgaXMgTk9UIHdpdGhpbiB0aGUKICAgICAgICAg Ym91bmRhcmllcyB0aGVuIHRoZSBTVFVOIHNlcnZlciBkaXNjYXJkcyB0aGUgcmVxdWVzdCB3aXRo IGVycm9yCiAgICAgICAgIHJlc3BvbnNlIDQwMSAoVW5hdXRob3JpemVkKS4KCgoKCgpSZWRkeSwg ZXQgYWwuICAgICAgICAgICBFeHBpcmVzIE9jdG9iZXIgMjMsIDIwMTUgICAgICAgICAgICAgICBb UGFnZSAxM10KDApJbnRlcm5ldC1EcmFmdCAgICAgIFNUVU4gZm9yIDNyZCBwYXJ0eSBBdXRob3Jp emF0aW9uICAgICAgICAgIEFwcmlsIDIwMTUKCgogICBvICBUaGUgU1RVTiBzZXJ2ZXIgdXNlcyB0 aGUgbWFjX2tleSB0byBjb21wdXRlIHRoZSBtZXNzYWdlIGludGVncml0eQogICAgICBvdmVyIHRo ZSByZXF1ZXN0IGFuZCBpZiB0aGUgcmVzdWx0aW5nIHZhbHVlIGRvZXMgbm90IG1hdGNoIHRoZQog ICAgICBjb250ZW50cyBvZiB0aGUgTUVTU0FHRS1JTlRFR1JJVFkgYXR0cmlidXRlIHRoZW4gaXQg cmVqZWN0cyB0aGUKICAgICAgcmVxdWVzdCB3aXRoIGFuIGVycm9yIHJlc3BvbnNlIDQwMSAoVW5h dXRob3JpemVkKS4KCiAgIG8gIElmIGFsbCB0aGUgY2hlY2tzIHBhc3MsIHRoZSBTVFVOIHNlcnZl ciBjb250aW51ZXMgdG8gcHJvY2VzcyB0aGUKICAgICAgcmVxdWVzdC4gIEFueSByZXNwb25zZSBn ZW5lcmF0ZWQgYnkgdGhlIHNlcnZlciBNVVNUIGluY2x1ZGUgdGhlCiAgICAgIE1FU1NBR0UtSU5U RUdSSVRZIGF0dHJpYnV0ZSwgY29tcHV0ZWQgdXNpbmcgdGhlIG1hY19rZXkuCgogICBJZiBhIFNU VU4gc2VydmVyIHJlY2VpdmVzIGFuIEFDQ0VTUy1UT0tFTiBhdHRyaWJ1dGUgdW5leHBlY3RlZGx5 CiAgIChiZWNhdXNlIGl0IGhhZCBub3QgcHJldmlvdXNseSBzZW50IG91dCBhIFRISVJELVBBUlRZ LUFVVEhPUklaQVRJT04pLAogICBpdCB3aWxsIHJlc3BvbmQgd2l0aCBhbiBlcnJvciBjb2RlIG9m IDQyMCAoVW5rbm93biBBdHRyaWJ1dGUpIGFzCiAgIHNwZWNpZmllZCBpbiBTZWN0aW9uIDcuMy4x IG9mIFtSRkM1Mzg5XS4KCjguICBTVFVOIGNsaWVudCBiZWhhdmlvdXIKCiAgIG8gIFRoZSBjbGll bnQgbG9va3MgZm9yIHRoZSBNRVNTQUdFLUlOVEVHUklUWSBhdHRyaWJ1dGUgaW4gdGhlCiAgICAg IHJlc3BvbnNlLiAgSWYgTUVTU0FHRS1JTlRFR1JJVFkgaXMgYWJzZW50IG9yIHRoZSB2YWx1ZSBj b21wdXRlZAogICAgICBmb3IgbWVzc2FnZSBpbnRlZ3JpdHkgdXNpbmcgbWFjX2tleSBkb2VzIG5v dCBtYXRjaCB0aGUgY29udGVudHMgb2YKICAgICAgdGhlIE1FU1NBR0UtSU5URUdSSVRZIGF0dHJp YnV0ZSB0aGVuIHRoZSByZXNwb25zZSBNVVNUIGJlCiAgICAgIGRpc2NhcmRlZC4KCiAgIG8gIElm IHRoZSBhY2Nlc3MgdG9rZW4gZXhwaXJlcyB0aGVuIHRoZSBjbGllbnQgTVVTVCBvYnRhaW4gYSBu ZXcKICAgICAgdG9rZW4gZnJvbSB0aGUgYXV0aG9yaXphdGlvbiBzZXJ2ZXIgYW5kIHVzZSBpdCBm b3IgbmV3IFNUVU4KICAgICAgcmVxdWVzdHMuCgo5LiAgVFVSTiBjbGllbnQgYW5kIHNlcnZlciBi ZWhhdmlvdXIKCiAgIENoYW5nZXMgc3BlY2lmaWMgdG8gVFVSTiBhcmUgbGlzdGVkIGJlbG93OgoK ICAgbyAgVGhlIGFjY2VzcyB0b2tlbiBjYW4gYmUgcmV1c2VkIGZvciBtdWx0aXBsZSBBbGxvY2F0 ZSByZXF1ZXN0cyB0bwogICAgICB0aGUgc2FtZSBUVVJOIHNlcnZlci4gIFRoZSBUVVJOIGNsaWVu dCBNVVNUIGluY2x1ZGUgdGhlIEFDQ0VTUy0KICAgICAgVE9LRU4gYXR0cmlidXRlIG9ubHkgaW4g QWxsb2NhdGUgYW5kIFJlZnJlc2ggcmVxdWVzdHMuICBTaW5jZSB0aGUKICAgICAgYWNjZXNzIHRv a2VuIGlzIHZhbGlkIGZvciBhIHNwZWNpZmljIHBlcmlvZCBvZiB0aW1lLCB0aGUgVFVSTgogICAg ICBzZXJ2ZXIgY2FuIGNhY2hlIGl0IHNvIHRoYXQgaXQgY2FuIGNoZWNrIGlmIHRoZSBhY2Nlc3Mg dG9rZW4gaW4gYQogICAgICBuZXcgYWxsb2NhdGlvbiByZXF1ZXN0IG1hdGNoZXMgb25lIG9mIHRo ZSBjYWNoZWQgdG9rZW5zIGFuZCBhdm9pZHMKICAgICAgdGhlIG5lZWQgdG8gZGVjcnlwdCB0aGUg dG9rZW4uCgogICBvICBUaGUgbGlmZXRpbWUgcHJvdmlkZWQgYnkgdGhlIFRVUk4gc2VydmVyIGlu IHRoZSBBbGxvY2F0ZSBhbmQKICAgICAgUmVmcmVzaCByZXNwb25zZXMgTVVTVCBiZSBsZXNzIHRo YW4gb3IgZXF1YWwgdG8gdGhlIGxpZmV0aW1lIG9mCiAgICAgIHRoZSB0b2tlbi4gIEl0IGlzIFJF Q09NTUVOREVEIHRoYXQgdGhlIFRVUk4gc2VydmVyIGNhbGN1bGF0ZSB0aGUKICAgICAgbWF4aW11 bSBhbGxvd2VkIGxpZmV0aW1lIHZhbHVlIHVzaW5nIHRoZSBmb3JtdWxhOgoKICAgICAgICBsaWZl dGltZSArIERlbHRhIC0gYWJzKFJEbmV3IC0gVFMpCgogICAgICBUaGUgUkVDT01NRU5ERUQgdmFs dWUgZm9yIHRoZSBhbGxvd2VkIERlbHRhIGlzIDUgc2Vjb25kcy4KCgoKCgpSZWRkeSwgZXQgYWwu ICAgICAgICAgICBFeHBpcmVzIE9jdG9iZXIgMjMsIDIwMTUgICAgICAgICAgICAgICBbUGFnZSAx NF0KDApJbnRlcm5ldC1EcmFmdCAgICAgIFNUVU4gZm9yIDNyZCBwYXJ0eSBBdXRob3JpemF0aW9u ICAgICAgICAgIEFwcmlsIDIwMTUKCgogICBvICBJZiB0aGUgYWNjZXNzIHRva2VuIGV4cGlyZXMg dGhlbiB0aGUgY2xpZW50IE1VU1Qgb2J0YWluIGEgbmV3CiAgICAgIHRva2VuIGZyb20gdGhlIGF1 dGhvcml6YXRpb24gc2VydmVyIGFuZCB1c2UgaXQgZm9yIG5ldwogICAgICBhbGxvY2F0aW9ucy4g IFRoZSBjbGllbnQgTVVTVCB1c2UgdGhlIG5ldyB0b2tlbiB0byByZWZyZXNoCiAgICAgIGV4aXN0 aW5nIGFsbG9jYXRpb25zLiAgVGhpcyB3YXkgY2xpZW50IGhhcyB0byBtYWludGFpbiBvbmx5IG9u ZQogICAgICB0b2tlbiBwZXIgVFVSTiBzZXJ2ZXIuCgoxMC4gIE9wZXJhdGlvbmFsIENvbnNpZGVy YXRpb25zCgogICBUaGUgZm9sbG93aW5nIG9wZXJhdGlvbmFsIGNvbnNpZGVyYXRpb25zIHNob3Vs ZCBiZSB0YWtlbiBpbnRvCiAgIGFjY291bnQ6CgogICBvICBFYWNoIGF1dGhvcml6YXRpb24gc2Vy dmVyIHNob3VsZCBtYWludGFpbiB0aGUgbGlzdCBvZiBTVFVOIHNlcnZlcnMKICAgICAgZm9yIHdo aWNoIGl0IHdpbGwgZ3JhbnQgdG9rZW5zLCBhbmQgdGhlIGxvbmctdGVybSBzZWNyZXQgc2hhcmVk CiAgICAgIHdpdGggZWFjaCBvZiB0aG9zZSBTVFVOIHNlcnZlcnMuCgogICBvICBJZiBtYW51YWwg Y29uZmlndXJhdGlvbiAoU2VjdGlvbiA0LjEuMikgaXMgdXNlZCB0byBlc3RhYmxpc2gKICAgICAg c3ltbWV0cmljIGtleXMsIHRoZSBuZWNlc3NhcnkgaW5mb3JtYXRpb24gd2hpY2ggaW5jbHVkZXMg bG9uZy10ZXJtCiAgICAgIHNlY3JldCAoSykgYW5kIGF1dGhlbnRpY2F0ZWQgZW5jcnlwdGlvbiBh bGdvcml0aG0gaGF2ZSB0byBiZQogICAgICBjb25maWd1cmVkIG9uIGVhY2ggYXV0aG9yaXphdGlv biBzZXJ2ZXIgYW5kIFNUVU4gc2VydmVyIGZvciBlYWNoCiAgICAgIGtpZC4gIFRoZSBjbGllbnQg b2J0YWlucyB0aGUgc2Vzc2lvbiBrZXkgYW5kIEhNQUMgYWxnb3JpdGhtIGZyb20KICAgICAgdGhl IGF1dGhvcml6YXRpb24gc2VydmVyIGluIGNvbXBhbnkgd2l0aCB0aGUgdG9rZW4uCgogICBvICBX aGVuIGEgU1RVTiBjbGllbnQgc2VuZHMgYSByZXF1ZXN0IHRvIGdldCBhY2Nlc3MgdG8gYSBwYXJ0 aWN1bGFyCiAgICAgIFNUVU4gc2VydmVyIChTKSB0aGUgYXV0aG9yaXphdGlvbiBzZXJ2ZXIgbXVz dCBlbnN1cmUgdGhhdCBpdAogICAgICBzZWxlY3RzIHRoZSBhcHByb3ByaWF0ZSBraWQsIGFjY2Vz cy10b2tlbiBkZXBlbmRpbmcgb24gdGhlIHNlcnZlcgogICAgICBTLgoKMTEuICBTZWN1cml0eSBD b25zaWRlcmF0aW9ucwoKICAgV2hlbiBPQXV0aCAyLjAgaXMgdXNlZCB0aGUgaW50ZXJhY3Rpb24g YmV0d2VlbiB0aGUgY2xpZW50IGFuZCB0aGUKICAgYXV0aG9yaXphdGlvbiBzZXJ2ZXIgcmVxdWly ZXMgVHJhbnNwb3J0IExheWVyIFNlY3VyaXR5IChUTFMpIHdpdGggYQogICBjaXBoZXJzdWl0ZSBv ZmZlcmluZyBjb25maWRlbnRpYWxpdHkgcHJvdGVjdGlvbiBhbmQgdGhlIGd1aWRhbmNlCiAgIGdp dmVuIGluIFtJLUQuaWV0Zi11dGEtdGxzLWJjcF0gbXVzdCBiZSBmb2xsb3dlZCB0byBhdm9pZCBh dHRhY2tzIG9uCiAgIFRMUy4gIFRoZSBzZXNzaW9uIGtleSBNVVNUIE5PVCBiZSB0cmFuc21pdHRl ZCBpbiBjbGVhciBzaW5jZSB0aGlzCiAgIHdvdWxkIGNvbXBsZXRlbHkgZGVzdHJveSB0aGUgc2Vj dXJpdHkgYmVuZWZpdHMgb2YgdGhlIHByb3Bvc2VkCiAgIHNjaGVtZS4gIEFuIGF0dGFja2VyIHRy eWluZyB0byByZXBsYXkgbWVzc2FnZSB3aXRoIEFDQ0VTUy1UT0tFTgogICBhdHRyaWJ1dGUgY2Fu IGJlIG1pdGlnYXRlZCBieSBmcmVxdWVudCBjaGFuZ2VzIG9mIG5vbmNlIHZhbHVlIGFzCiAgIGRp c2N1c3NlZCBpbiBzZWN0aW9uIDEwLjIgb2YgW1JGQzUzODldLiAgVGhlIGNsaWVudCBtYXkga25v dyBzb21lCiAgIChidXQgbm90IGFsbCkgb2YgdGhlIHRva2VuIGZpZWxkcyBlbmNyeXB0ZWQgd2l0 aCBhIHVua25vd24gc2VjcmV0IGtleQogICBhbmQgdGhlIHRva2VuIGNhbiBiZSBzdWJqZWN0ZWQg dG8ga25vd24tcGxhaW50ZXh0IGF0dGFjaywgYnV0IEFFUyBpcwogICBzZWN1cmUgYWdhaW5zdCB0 aGlzIGF0dGFjay4KCiAgIEFuIGF0dGFja2VyIG1heSByZW1vdmUgdGhlIFRISVJELVBBUlRZLUFV VEhPUklaQVRJT04gU1RVTiBhdHRyaWJ1dGUKICAgZnJvbSB0aGUgZXJyb3IgbWVzc2FnZSBmb3Jj aW5nIHRoZSBjbGllbnQgdG8gcGljayBmaXJzdCBwYXJ0eQogICBhdXRoZW50aWNhdGlvbiwgdGhp cyBhdHRhY2sgbWF5IGJlIG1pdGlnYXRlZCBieSBvcHRpbmcgZm9yIFRyYW5zcG9ydAogICBMYXll ciBTZWN1cml0eSAoVExTKSBbUkZDNTI0Nl0gb3IgRGF0YWdyYW0gVHJhbnNwb3J0IExheWVyIFNl Y3VyaXR5CiAgIChEVExTKSBbUkZDNjM0N10gYXMgYSB0cmFuc3BvcnQgcHJvdG9jb2wgZm9yIFNl c3Npb24gVHJhdmVyc2FsCiAgIFV0aWxpdGllcyBmb3IgTkFUIChTVFVOKSwgYXMgZGVmaW5lZCBp biBbUkZDNTM4OV1hbmQgW1JGQzczNTBdLgoKCgpSZWRkeSwgZXQgYWwuICAgICAgICAgICBFeHBp cmVzIE9jdG9iZXIgMjMsIDIwMTUgICAgICAgICAgICAgICBbUGFnZSAxNV0KDApJbnRlcm5ldC1E cmFmdCAgICAgIFNUVU4gZm9yIDNyZCBwYXJ0eSBBdXRob3JpemF0aW9uICAgICAgICAgIEFwcmls IDIwMTUKCgogICBUaHJlYXQgbWl0aWdhdGlvbiBkaXNjdXNzZWQgaW4gc2VjdGlvbiA1IG9mCiAg IFtJLUQuaWV0Zi1vYXV0aC1wb3AtYXJjaGl0ZWN0dXJlXSBhbmQgc2VjdXJpdHkgY29uc2lkZXJh dGlvbnMgaW4KICAgW1JGQzUzODldIGFyZSB0byBiZSB0YWtlbiBpbnRvIGFjY291bnQuCgoxMi4g IElBTkEgQ29uc2lkZXJhdGlvbnMKCiAgIFtQYXJhZ3JhcGhzIGJlbG93IGluIGJyYWNlcyBzaG91 bGQgYmUgcmVtb3ZlZCBieSB0aGUgUkZDIEVkaXRvciB1cG9uCiAgIHB1YmxpY2F0aW9uXQoKICAg W0lBTkEgaXMgcmVxdWVzdGVkIHRvIGFkZCB0aGUgZm9sbG93aW5nIGF0dHJpYnV0ZXMgdG8gdGhl IFNUVU4KICAgYXR0cmlidXRlIHJlZ2lzdHJ5IFtpYW5hLXN0dW5dLCBUaGUgVEhJUkQtUEFSVFkt QVVUSE9SSVpBVElPTgogICBhdHRyaWJ1dGUgcmVxdWlyZXMgdGhhdCBJQU5BIGFsbG9jYXRlIGEg dmFsdWUgaW4gdGhlICJTVFVOIGF0dHJpYnV0ZXMKICAgUmVnaXN0cnkiIGZyb20gdGhlIGNvbXBy ZWhlbnNpb24tb3B0aW9uYWwgcmFuZ2UgKDB4ODAwMC0weEJGRkYpXQoKICAgVGhpcyBkb2N1bWVu dCBkZWZpbmVzIHRoZSBUSElSRC1QQVJUWS1BVVRIT1JJWkFUSU9OIFNUVU4gYXR0cmlidXRlLAog ICBkZXNjcmliZWQgaW4gU2VjdGlvbiA2LiAgSUFOQSBoYXMgYWxsb2NhdGVkIHRoZSBjb21wcmVo ZW5zaW9uLQogICBvcHRpb25hbCBjb2RlcG9pbnQgVEJEIGZvciB0aGlzIGF0dHJpYnV0ZS4KCiAg IFtUaGUgQUNDRVNTLVRPS0VOIGF0dHJpYnV0ZSByZXF1aXJlcyB0aGF0IElBTkEgYWxsb2NhdGUg YSB2YWx1ZSBpbgogICB0aGUgIlNUVU4gYXR0cmlidXRlcyBSZWdpc3RyeSIgZnJvbSB0aGUgY29t cHJlaGVuc2lvbi1yZXF1aXJlZCByYW5nZQogICAoMHgwMDAwLTB4M0ZGRildCgogICBUaGlzIGRv Y3VtZW50IGRlZmluZXMgdGhlIEFDQ0VTUy1UT0tFTiBTVFVOIGF0dHJpYnV0ZSwgZGVzY3JpYmVk IGluCiAgIFNlY3Rpb24gNi4gIElBTkEgaGFzIGFsbG9jYXRlZCB0aGUgY29tcHJlaGVuc2lvbi1y ZXF1aXJlZCBjb2RlcG9pbnQKICAgVEJEIGZvciB0aGlzIGF0dHJpYnV0ZS4KCjEzLiAgQWNrbm93 bGVkZ2VtZW50cwoKICAgQXV0aG9ycyB3b3VsZCBsaWtlIHRvIHRoYW5rIERhbiBXaW5nLCBQYWwg TWFydGluc2VuLCBPbGVnIE1vc2thbGVua28sCiAgIENoYXJsZXMgRWNrZWwsIFNwZW5jZXIgRGF3 a2lucywgSGFubmVzIFRzY2hvZmVuaWcsIFlhcm9uIFNoZWZmZXIsIFRvbQogICBUYXlsb3IsIENo cmlzdGVyIEhvbG1iZXJnLCBQZXRlIFJlc25pY2ssIEthdGhsZWVuIE1vcmlhcnR5LCBSaWNoYXJk CiAgIEJhcm5lcywgU3RlcGhlbiBGYXJyZWxsLCBBbGlzc2EgQ29vcGVyIGFuZCBSaWNoIFNhbHog Zm9yIGNvbW1lbnRzIGFuZAogICByZXZpZXcuICBUaGUgYXV0aG9ycyB3b3VsZCBsaWtlIHRvIGdp dmUgc3BlY2lhbCB0aGFua3MgdG8gQnJhbmRvbgogICBXaWxsaWFtcyBmb3IgaGlzIGhlbHAuCgog ICBUaGFua3MgdG8gT2xlZyBNb3NrYWxlbmtvIGZvciBwcm92aWRpbmcgY29kZSBzbmlwcGVudCBp biB0aGUKICAgQXBwZW5kaXggc2VjdGlvbi4KCjE0LiAgUmVmZXJlbmNlcwoKMTQuMS4gIE5vcm1h dGl2ZSBSZWZlcmVuY2VzCgogICBbSS1ELmlldGYtam9zZS1qc29uLXdlYi1hbGdvcml0aG1zXQog ICAgICAgICAgICAgIEpvbmVzLCBNLiwgIkpTT04gV2ViIEFsZ29yaXRobXMgKEpXQSkiLCBkcmFm dC1pZXRmLWpvc2UtCiAgICAgICAgICAgICAganNvbi13ZWItYWxnb3JpdGhtcy00MCAod29yayBp biBwcm9ncmVzcyksIEphbnVhcnkgMjAxNS4KCiAgIFtSRkMyMTE5XSAgQnJhZG5lciwgUy4sICJL ZXkgd29yZHMgZm9yIHVzZSBpbiBSRkNzIHRvIEluZGljYXRlCiAgICAgICAgICAgICAgUmVxdWly ZW1lbnQgTGV2ZWxzIiwgQkNQIDE0LCBSRkMgMjExOSwgTWFyY2ggMTk5Ny4KCgoKUmVkZHksIGV0 IGFsLiAgICAgICAgICAgRXhwaXJlcyBPY3RvYmVyIDIzLCAyMDE1ICAgICAgICAgICAgICAgW1Bh Z2UgMTZdCgwKSW50ZXJuZXQtRHJhZnQgICAgICBTVFVOIGZvciAzcmQgcGFydHkgQXV0aG9yaXph dGlvbiAgICAgICAgICBBcHJpbCAyMDE1CgoKICAgW1JGQzQ2NDhdICBKb3NlZnNzb24sIFMuLCAi VGhlIEJhc2UxNiwgQmFzZTMyLCBhbmQgQmFzZTY0IERhdGEKICAgICAgICAgICAgICBFbmNvZGlu Z3MiLCBSRkMgNDY0OCwgT2N0b2JlciAyMDA2LgoKICAgW1JGQzQ4NjhdICBLZWxseSwgUy4gYW5k IFMuIEZyYW5rZWwsICJVc2luZyBITUFDLVNIQS0yNTYsIEhNQUMtU0hBLQogICAgICAgICAgICAg IDM4NCwgYW5kIEhNQUMtU0hBLTUxMiB3aXRoIElQc2VjIiwgUkZDIDQ4NjgsIE1heSAyMDA3LgoK ICAgW1JGQzUxMTZdICBNY0dyZXcsIEQuLCAiQW4gSW50ZXJmYWNlIGFuZCBBbGdvcml0aG1zIGZv ciBBdXRoZW50aWNhdGVkCiAgICAgICAgICAgICAgRW5jcnlwdGlvbiIsIFJGQyA1MTE2LCBKYW51 YXJ5IDIwMDguCgogICBbUkZDNTM4OV0gIFJvc2VuYmVyZywgSi4sIE1haHksIFIuLCBNYXR0aGV3 cywgUC4sIGFuZCBELiBXaW5nLAogICAgICAgICAgICAgICJTZXNzaW9uIFRyYXZlcnNhbCBVdGls aXRpZXMgZm9yIE5BVCAoU1RVTikiLCBSRkMgNTM4OSwKICAgICAgICAgICAgICBPY3RvYmVyIDIw MDguCgogICBbUkZDNjc0OV0gIEhhcmR0LCBELiwgIlRoZSBPQXV0aCAyLjAgQXV0aG9yaXphdGlv biBGcmFtZXdvcmsiLCBSRkMKICAgICAgICAgICAgICA2NzQ5LCBPY3RvYmVyIDIwMTIuCgogICBb aWFuYS1zdHVuXQogICAgICAgICAgICAgIElBTkEsICwgIklBTkE6IFNUVU4gQXR0cmlidXRlcyIs IEFwcmlsIDIwMTEsCiAgICAgICAgICAgICAgPGh0dHA6Ly93d3cuaWFuYS5vcmcvYXNzaWdubWVu dHMvc3R1bi1wYXJhbWV0ZXJzL3N0dW4tcGEKICAgICAgICAgICAgICByYW1ldGVycy54bWw+LgoK MTQuMi4gIEluZm9ybWF0aXZlIFJlZmVyZW5jZXMKCiAgIFtJLUQuaWV0Zi1qb3NlLWpzb24td2Vi LWVuY3J5cHRpb25dCiAgICAgICAgICAgICAgSm9uZXMsIE0uIGFuZCBKLiBIaWxkZWJyYW5kLCAi SlNPTiBXZWIgRW5jcnlwdGlvbiAoSldFKSIsCiAgICAgICAgICAgICAgZHJhZnQtaWV0Zi1qb3Nl LWpzb24td2ViLWVuY3J5cHRpb24tNDAgKHdvcmsgaW4gcHJvZ3Jlc3MpLAogICAgICAgICAgICAg IEphbnVhcnkgMjAxNS4KCiAgIFtJLUQuaWV0Zi1qb3NlLWpzb24td2ViLXNpZ25hdHVyZV0KICAg ICAgICAgICAgICBKb25lcywgTS4sIEJyYWRsZXksIEouLCBhbmQgTi4gU2FraW11cmEsICJKU09O IFdlYgogICAgICAgICAgICAgIFNpZ25hdHVyZSAoSldTKSIsIGRyYWZ0LWlldGYtam9zZS1qc29u LXdlYi1zaWduYXR1cmUtNDEKICAgICAgICAgICAgICAod29yayBpbiBwcm9ncmVzcyksIEphbnVh cnkgMjAxNS4KCiAgIFtJLUQuaWV0Zi1vYXV0aC1qc29uLXdlYi10b2tlbl0KICAgICAgICAgICAg ICBKb25lcywgTS4sIEJyYWRsZXksIEouLCBhbmQgTi4gU2FraW11cmEsICJKU09OIFdlYiBUb2tl bgogICAgICAgICAgICAgIChKV1QpIiwgZHJhZnQtaWV0Zi1vYXV0aC1qc29uLXdlYi10b2tlbi0z MiAod29yayBpbgogICAgICAgICAgICAgIHByb2dyZXNzKSwgRGVjZW1iZXIgMjAxNC4KCiAgIFtJ LUQuaWV0Zi1vYXV0aC1wb3AtYXJjaGl0ZWN0dXJlXQogICAgICAgICAgICAgIEh1bnQsIFAuLCBS aWNoZXIsIEouLCBNaWxscywgVy4sIE1pc2hyYSwgUC4sIGFuZCBILgogICAgICAgICAgICAgIFRz Y2hvZmVuaWcsICJPQXV0aCAyLjAgUHJvb2Ytb2YtUG9zc2Vzc2lvbiAoUG9QKSBTZWN1cml0eQog ICAgICAgICAgICAgIEFyY2hpdGVjdHVyZSIsIGRyYWZ0LWlldGYtb2F1dGgtcG9wLWFyY2hpdGVj dHVyZS0wMSAod29yawogICAgICAgICAgICAgIGluIHByb2dyZXNzKSwgTWFyY2ggMjAxNS4KCgoK CgoKCgpSZWRkeSwgZXQgYWwuICAgICAgICAgICBFeHBpcmVzIE9jdG9iZXIgMjMsIDIwMTUgICAg ICAgICAgICAgICBbUGFnZSAxN10KDApJbnRlcm5ldC1EcmFmdCAgICAgIFNUVU4gZm9yIDNyZCBw YXJ0eSBBdXRob3JpemF0aW9uICAgICAgICAgIEFwcmlsIDIwMTUKCgogICBbSS1ELmlldGYtb2F1 dGgtcG9wLWtleS1kaXN0cmlidXRpb25dCiAgICAgICAgICAgICAgQnJhZGxleSwgSi4sIEh1bnQs IFAuLCBKb25lcywgTS4sIGFuZCBILiBUc2Nob2ZlbmlnLAogICAgICAgICAgICAgICJPQXV0aCAy LjAgUHJvb2Ytb2YtUG9zc2Vzc2lvbjogQXV0aG9yaXphdGlvbiBTZXJ2ZXIgdG8KICAgICAgICAg ICAgICBDbGllbnQgS2V5IERpc3RyaWJ1dGlvbiIsIGRyYWZ0LWlldGYtb2F1dGgtcG9wLWtleS0K ICAgICAgICAgICAgICBkaXN0cmlidXRpb24tMDEgKHdvcmsgaW4gcHJvZ3Jlc3MpLCBNYXJjaCAy MDE1LgoKICAgW0ktRC5pZXRmLXJ0Y3dlYi1vdmVydmlld10KICAgICAgICAgICAgICBBbHZlc3Ry YW5kLCBILiwgIk92ZXJ2aWV3OiBSZWFsIFRpbWUgUHJvdG9jb2xzIGZvcgogICAgICAgICAgICAg IEJyb3dzZXItYmFzZWQgQXBwbGljYXRpb25zIiwgZHJhZnQtaWV0Zi1ydGN3ZWItb3ZlcnZpZXct MTMKICAgICAgICAgICAgICAod29yayBpbiBwcm9ncmVzcyksIE5vdmVtYmVyIDIwMTQuCgogICBb SS1ELmlldGYtdHJhbS1zdHVuYmlzXQogICAgICAgICAgICAgIFBldGl0LUh1Z3VlbmluLCBNLiwg U2FsZ3VlaXJvLCBHLiwgUm9zZW5iZXJnLCBKLiwgV2luZywKICAgICAgICAgICAgICBELiwgTWFo eSwgUi4sIGFuZCBQLiBNYXR0aGV3cywgIlNlc3Npb24gVHJhdmVyc2FsCiAgICAgICAgICAgICAg VXRpbGl0aWVzIGZvciBOQVQgKFNUVU4pIiwgZHJhZnQtaWV0Zi10cmFtLXN0dW5iaXMtMDQKICAg ICAgICAgICAgICAod29yayBpbiBwcm9ncmVzcyksIE1hcmNoIDIwMTUuCgogICBbSS1ELmlldGYt dXRhLXRscy1iY3BdCiAgICAgICAgICAgICAgU2hlZmZlciwgWS4sIEhvbHosIFIuLCBhbmQgUC4g U2FpbnQtQW5kcmUsCiAgICAgICAgICAgICAgIlJlY29tbWVuZGF0aW9ucyBmb3IgU2VjdXJlIFVz ZSBvZiBUTFMgYW5kIERUTFMiLCBkcmFmdC0KICAgICAgICAgICAgICBpZXRmLXV0YS10bHMtYmNw LTExICh3b3JrIGluIHByb2dyZXNzKSwgRmVicnVhcnkgMjAxNS4KCiAgIFtJLUQubWNncmV3LWFl YWQtYWVzLWNiYy1obWFjLXNoYTJdCiAgICAgICAgICAgICAgTWNHcmV3LCBELiwgRm9sZXksIEou LCBhbmQgSy4gUGF0ZXJzb24sICJBdXRoZW50aWNhdGVkCiAgICAgICAgICAgICAgRW5jcnlwdGlv biB3aXRoIEFFUy1DQkMgYW5kIEhNQUMtU0hBIiwgZHJhZnQtbWNncmV3LWFlYWQtCiAgICAgICAg ICAgICAgYWVzLWNiYy1obWFjLXNoYTItMDUgKHdvcmsgaW4gcHJvZ3Jlc3MpLCBKdWx5IDIwMTQu CgogICBbUkZDNTI0Nl0gIERpZXJrcywgVC4gYW5kIEUuIFJlc2NvcmxhLCAiVGhlIFRyYW5zcG9y dCBMYXllciBTZWN1cml0eQogICAgICAgICAgICAgIChUTFMpIFByb3RvY29sIFZlcnNpb24gMS4y IiwgUkZDIDUyNDYsIEF1Z3VzdCAyMDA4LgoKICAgW1JGQzU3NjZdICBNYWh5LCBSLiwgTWF0dGhl d3MsIFAuLCBhbmQgSi4gUm9zZW5iZXJnLCAiVHJhdmVyc2FsIFVzaW5nCiAgICAgICAgICAgICAg UmVsYXlzIGFyb3VuZCBOQVQgKFRVUk4pOiBSZWxheSBFeHRlbnNpb25zIHRvIFNlc3Npb24KICAg ICAgICAgICAgICBUcmF2ZXJzYWwgVXRpbGl0aWVzIGZvciBOQVQgKFNUVU4pIiwgUkZDIDU3NjYs IEFwcmlsIDIwMTAuCgogICBbUkZDNjM0N10gIFJlc2NvcmxhLCBFLiBhbmQgTi4gTW9kYWR1Z3Us ICJEYXRhZ3JhbSBUcmFuc3BvcnQgTGF5ZXIKICAgICAgICAgICAgICBTZWN1cml0eSBWZXJzaW9u IDEuMiIsIFJGQyA2MzQ3LCBKYW51YXJ5IDIwMTIuCgogICBbUkZDNjgxOV0gIExvZGRlcnN0ZWR0 LCBULiwgTWNHbG9pbiwgTS4sIGFuZCBQLiBIdW50LCAiT0F1dGggMi4wCiAgICAgICAgICAgICAg VGhyZWF0IE1vZGVsIGFuZCBTZWN1cml0eSBDb25zaWRlcmF0aW9ucyIsIFJGQyA2ODE5LAogICAg ICAgICAgICAgIEphbnVhcnkgMjAxMy4KCiAgIFtSRkM3MTU5XSAgQnJheSwgVC4sICJUaGUgSmF2 YVNjcmlwdCBPYmplY3QgTm90YXRpb24gKEpTT04pIERhdGEKICAgICAgICAgICAgICBJbnRlcmNo YW5nZSBGb3JtYXQiLCBSRkMgNzE1OSwgTWFyY2ggMjAxNC4KCiAgIFtSRkM3MzUwXSAgUGV0aXQt SHVndWVuaW4sIE0uIGFuZCBHLiBTYWxndWVpcm8sICJEYXRhZ3JhbSBUcmFuc3BvcnQKICAgICAg ICAgICAgICBMYXllciBTZWN1cml0eSAoRFRMUykgYXMgVHJhbnNwb3J0IGZvciBTZXNzaW9uIFRy YXZlcnNhbAogICAgICAgICAgICAgIFV0aWxpdGllcyBmb3IgTkFUIChTVFVOKSIsIFJGQyA3MzUw LCBBdWd1c3QgMjAxNC4KCgoKClJlZGR5LCBldCBhbC4gICAgICAgICAgIEV4cGlyZXMgT2N0b2Jl ciAyMywgMjAxNSAgICAgICAgICAgICAgIFtQYWdlIDE4XQoMCkludGVybmV0LURyYWZ0ICAgICAg U1RVTiBmb3IgM3JkIHBhcnR5IEF1dGhvcml6YXRpb24gICAgICAgICAgQXByaWwgMjAxNQoKCiAg IFtSRkM3Mzc2XSAgUmVkZHksIFQuLCBSYXZpbmRyYW5hdGgsIFIuLCBQZXJ1bWFsLCBNLiwgYW5k IEEuIFllZ2luLAogICAgICAgICAgICAgICJQcm9ibGVtcyB3aXRoIFNlc3Npb24gVHJhdmVyc2Fs IFV0aWxpdGllcyBmb3IgTkFUIChTVFVOKQogICAgICAgICAgICAgIExvbmctVGVybSBBdXRoZW50 aWNhdGlvbiBmb3IgVHJhdmVyc2FsIFVzaW5nIFJlbGF5cyBhcm91bmQKICAgICAgICAgICAgICBO QVQgKFRVUk4pIiwgUkZDIDczNzYsIFNlcHRlbWJlciAyMDE0LgoKQXBwZW5kaXggQS4gIEMgU25p cHBldCB0byBlbmNyeXB0L2RlY3J5cHQgdG9rZW4KCjxDT0RFIEJFR0lOUz4KCiNpbmNsdWRlIDxz dGRpby5oPgojaW5jbHVkZSA8c3RkbGliLmg+CiNpbmNsdWRlIDxzdGRpbnQuaD4KI2luY2x1ZGUg PHN0cmluZ3MuaD4KI2luY2x1ZGUgPG5ldGluZXQvaW4uaD4KI2luY2x1ZGUgPHN5cy90eXBlcy5o PgoKI2luY2x1ZGUgPG9wZW5zc2wvc3NsLmg+CiNpbmNsdWRlIDxvcGVuc3NsL2V2cC5oPgoKI2Rl ZmluZSBPQVVUSF9HQ01fTk9OQ0VfU0laRSAoMTIpCiNkZWZpbmUgT0FVVEhfR0NNX1RBR19TSVpF ICgxNikKCiNkZWZpbmUgTUFYX05PTkNFX0xFTkdUSCAoMTI4KQojZGVmaW5lIE1BWF9NQUNfS0VZ X0xFTkdUSCAoMTI4KQoKI2RlZmluZSBNQVhfRU5DT0RFRF9PQVVUSF9UT0tFTl9TSVpFICgxMDI0 KQoKc3RydWN0IF9vYXV0aF90b2tlbiB7CiAgICAgICAgdWludDE2X3Qgbm9uY2VfbGVuZ3RoOwog ICAgICAgIHVpbnQ4X3Qgbm9uY2VbTUFYX05PTkNFX0xFTkdUSF07CiAgICAgICAgdWludDE2X3Qg bWFjX2tleV9sZW5ndGg7CiAgICAgICAgdWludDhfdCBtYWNfa2V5W01BWF9NQUNfS0VZX0xFTkdU SF07CiAgICAgICAgdWludDY0X3QgdGltZXN0YW1wOwogICAgICAgIHVpbnQzMl90IGxpZmV0aW1l Owp9OwoKdHlwZWRlZiBzdHJ1Y3QgX29hdXRoX3Rva2VuIG9hdXRoX3Rva2VuX3Q7CgpzdGF0aWMg aW50IG15X0VWUF9FbmNyeXB0VXBkYXRlKEVWUF9DSVBIRVJfQ1RYICpjdHgsIHVpbnQ4X3QgKm91 dCwgaW50ICpvdXRsLCBjb25zdCB1aW50OF90ICppbiwgaW50IGlubCkKewogICAgICAgIGludCBj eWNsZSA9IDA7CiAgICAgICAgaW50IG91dF9sZW4gPSAwOwogICAgICAgIHdoaWxlKChvdXRfbGVu PGlubCkmJigrK2N5Y2xlPDEyOCkpIHsKICAgICAgICAgICAgICAgIGludCB0bXBfb3V0bD0wOwog ICAgICAgICAgICAgICAgdW5zaWduZWQgY2hhciAqcHRyID0gTlVMTDsKICAgICAgICAgICAgICAg IGlmKG91dCkKICAgICAgICAgICAgICAgICAgICAgICAgcHRyID0gb3V0K291dF9sZW47CiAgICAg ICAgICAgICAgICBpbnQgcmV0ID0gRVZQX0VuY3J5cHRVcGRhdGUoY3R4LCBwdHIsICZ0bXBfb3V0 bCwgaW4rb3V0X2xlbiwgaW5sLW91dF9sZW4pOwoKCgpSZWRkeSwgZXQgYWwuICAgICAgICAgICBF eHBpcmVzIE9jdG9iZXIgMjMsIDIwMTUgICAgICAgICAgICAgICBbUGFnZSAxOV0KDApJbnRlcm5l dC1EcmFmdCAgICAgIFNUVU4gZm9yIDNyZCBwYXJ0eSBBdXRob3JpemF0aW9uICAgICAgICAgIEFw cmlsIDIwMTUKCgogICAgICAgICAgICAgICAgb3V0X2xlbiArPSB0bXBfb3V0bDsKICAgICAgICAg ICAgICAgIGlmKHJldDwxKQogICAgICAgICAgICAgICAgICAgICAgICByZXR1cm4gcmV0OwogICAg ICAgIH0KICAgICAgICAqb3V0bCA9IG91dF9sZW47CiAgICAgICAgcmV0dXJuIDE7Cn0KCnN0YXRp YyBpbnQgbXlfRVZQX0RlY3J5cHRVcGRhdGUoRVZQX0NJUEhFUl9DVFggKmN0eCwgdWludDhfdCAq b3V0LAogICAgICAgICAgICAgICAgaW50ICpvdXRsLCBjb25zdCB1aW50OF90ICppbiwgaW50IGlu bCkKewogICAgICAgIGludCBjeWNsZSA9IDA7CiAgICAgICAgaW50IG91dF9sZW4gPSAwOwogICAg ICAgIHdoaWxlKChvdXRfbGVuPGlubCkmJigrK2N5Y2xlPDEyOCkpIHsKICAgICAgICAgICAgICAg IGludCB0bXBfb3V0bD0wOwogICAgICAgICAgICAgICAgdW5zaWduZWQgY2hhciAqcHRyID0gTlVM TDsKICAgICAgICAgICAgICAgIGlmKG91dCkKICAgICAgICAgICAgICAgICAgICAgICAgcHRyID0g b3V0K291dF9sZW47CiAgICAgICAgICAgICAgICBpbnQgcmV0ID0gRVZQX0RlY3J5cHRVcGRhdGUo Y3R4LCBwdHIsICZ0bXBfb3V0bCwgaW4rb3V0X2xlbiwgaW5sLW91dF9sZW4pOwogICAgICAgICAg ICAgICAgb3V0X2xlbiArPSB0bXBfb3V0bDsKICAgICAgICAgICAgICAgIGlmKHJldDwxKQogICAg ICAgICAgICAgICAgICAgICAgICByZXR1cm4gcmV0OwogICAgICAgIH0KICAgICAgICAqb3V0bCA9 IG91dF9sZW47CiAgICAgICAgcmV0dXJuIDE7Cn0KCnN0YXRpYyBpbmxpbmUgdWludDY0X3QgbnRv aGxsKHVpbnQ2NF90IHYpCnsKI2lmIEJZVEVfT1JERVIgPT0gTElUVExFX0VORElBTgogICAgICAg IHVpbnQ4X3QgKnNyYyA9ICh1aW50OF90KikgJnY7CiAgICAgICAgdWludDhfdCogZHN0ID0gc3Jj ICsgNzsKICAgICAgICB3aGlsZSAoc3JjIDwgZHN0KSB7CiAgICAgICAgICAgICAgICB1aW50OF90 IHZkc3QgPSAqZHN0OwogICAgICAgICAgICAgICAgKihkc3QtLSkgPSAqc3JjOwogICAgICAgICAg ICAgICAgKihzcmMrKykgPSB2ZHN0OwogICAgICAgIH0KI2VsaWYgQllURV9PUkRFUiA9PSBCSUdf RU5ESUFOCiAgICAgICAgLyogT0sgKi8KI2Vsc2UKI2Vycm9yIFdST05HIEJZVEVfT1JERVIgU0VU VElORwojZW5kaWYKICAgICAgICByZXR1cm4gdjsKfQoKc3RhdGljIGludCBlbmNvZGVfb2F1dGhf dG9rZW5fZ2NtKGNvbnN0IHVpbnQ4X3QgKnNlcnZlcl9uYW1lLCBjb25zdCB1aW50OF90ICprZXks CiAgICAgICAgICAgICAgICBjb25zdCBvYXV0aF90b2tlbl90ICpvYXV0aF90b2tlbiwKICAgICAg ICAgICAgICAgIHVpbnQ4X3QgKmVuY29kZWRfYnVmZmVyKSB7CgoKClJlZGR5LCBldCBhbC4gICAg ICAgICAgIEV4cGlyZXMgT2N0b2JlciAyMywgMjAxNSAgICAgICAgICAgICAgIFtQYWdlIDIwXQoM CkludGVybmV0LURyYWZ0ICAgICAgU1RVTiBmb3IgM3JkIHBhcnR5IEF1dGhvcml6YXRpb24gICAg ICAgICAgQXByaWwgMjAxNQoKCiAgICAgICAgaW50IHJldCA9IC0xOwoKICAgICAgICBpZihzZXJ2 ZXJfbmFtZSAmJiBrZXkgJiYgb2F1dGhfdG9rZW4gJiYgZW5jb2RlZF9idWZmZXIpIHsKCiAgICAg ICAgICAgICAgICB1aW50OF90IG9yaWdfZmllbGRbTUFYX0VOQ09ERURfT0FVVEhfVE9LRU5fU0la RV07CiAgICAgICAgICAgICAgICBiemVybyhvcmlnX2ZpZWxkLHNpemVvZihvcmlnX2ZpZWxkKSk7 CgogICAgICAgICAgICAgICAgc2l6ZV90IGxlbiA9IDA7CgogICAgICAgICAgICAgICAgKigodWlu dDE2X3QqKShvcmlnX2ZpZWxkK2xlbikpID0gbnRvaHMob2F1dGhfdG9rZW4tPm5vbmNlX2xlbmd0 aCk7CiAgICAgICAgICAgICAgICBsZW4gKz0yOwoKICAgICAgICAgICAgICAgIGJjb3B5KG9hdXRo X3Rva2VuLT5ub25jZSxvcmlnX2ZpZWxkK2xlbixvYXV0aF90b2tlbi0+bm9uY2VfbGVuZ3RoKTsK ICAgICAgICAgICAgICAgIGxlbiArPSBvYXV0aF90b2tlbi0+bm9uY2VfbGVuZ3RoOwoKICAgICAg ICAgICAgICAgICooKHVpbnQxNl90Kikob3JpZ19maWVsZCtsZW4pKSA9IG50b2hzKG9hdXRoX3Rv a2VuLT5tYWNfa2V5X2xlbmd0aCk7CiAgICAgICAgICAgICAgICBsZW4gKz0yOwoKICAgICAgICAg ICAgICAgIGJjb3B5KG9hdXRoX3Rva2VuLT5tYWNfa2V5LG9yaWdfZmllbGQrbGVuLG9hdXRoX3Rv a2VuLT5tYWNfa2V5X2xlbmd0aCk7CiAgICAgICAgICAgICAgICBsZW4gKz0gb2F1dGhfdG9rZW4t Pm1hY19rZXlfbGVuZ3RoOwoKICAgICAgICAgICAgICAgICooKHVpbnQ2NF90Kikob3JpZ19maWVs ZCtsZW4pKSA9IG50b2hsbChvYXV0aF90b2tlbi0+dGltZXN0YW1wKTsKICAgICAgICAgICAgICAg IGxlbiArPSA4OwoKICAgICAgICAgICAgICAgICooKHVpbnQzMl90Kikob3JpZ19maWVsZCtsZW4p KSA9IG50b2hsKG9hdXRoX3Rva2VuLT5saWZldGltZSk7CiAgICAgICAgICAgICAgICBsZW4gKz0g NDsKCiAgICAgICAgICAgICAgICBjb25zdCBFVlBfQ0lQSEVSICogY2lwaGVyID0gRVZQX2Flc18y NTZfZ2NtKCk7CiAgICAgICAgICAgICAgICBpZighY2lwaGVyKQogICAgICAgICAgICAgICAgICAg ICAgICByZXR1cm4gLTE7CgogICAgICAgICAgICAgICAgRVZQX0NJUEhFUl9DVFggY3R4OwogICAg ICAgICAgICAgICAgRVZQX0NJUEhFUl9DVFhfaW5pdCgmY3R4KTsKCiAgICAgICAgICAgICAgICAv KiBJbml0aWFsaXplIHRoZSBlbmNyeXB0aW9uIG9wZXJhdGlvbi4gKi8KICAgICAgICAgICAgICAg IGlmKDEgIT0gRVZQX0VuY3J5cHRJbml0X2V4KCZjdHgsIGNpcGhlciwgTlVMTCwgTlVMTCwgTlVM TCkpCiAgICAgICAgICAgICAgICAgICAgICAgIHJldHVybiAtMTsKCiAgICAgICAgICAgICAgICBF VlBfQ0lQSEVSX0NUWF9zZXRfcGFkZGluZygmY3R4LDEpOwoKICAgICAgICAgICAgICAgIC8qIFNl dCBJViBsZW5ndGggaWYgZGVmYXVsdCAxMiBieXRlcyAoOTYgYml0cykgaXMgbm90IGFwcHJvcHJp YXRlICovCiAgICAgICAgICAgICAgICBpZigxICE9IEVWUF9DSVBIRVJfQ1RYX2N0cmwoJmN0eCwg RVZQX0NUUkxfR0NNX1NFVF9JVkxFTiwgb2F1dGhfdG9rZW4tPm5vbmNlX2xlbmd0aCwgTlVMTCkp CiAgICAgICAgICAgICAgICAgICAgICAgIHJldHVybiAtMTsKCiAgICAgICAgICAgICAgICAvKiBJ bml0aWFsaXplIGtleSBhbmQgSVYgKi8KICAgICAgICAgICAgICAgIGlmKDEgIT0gRVZQX0VuY3J5 cHRJbml0X2V4KCZjdHgsIE5VTEwsIE5VTEwsIGtleSwgb2F1dGhfdG9rZW4tPm5vbmNlKSkKICAg ICAgICAgICAgICAgICAgICAgICAgcmV0dXJuIC0xOwoKCgoKUmVkZHksIGV0IGFsLiAgICAgICAg ICAgRXhwaXJlcyBPY3RvYmVyIDIzLCAyMDE1ICAgICAgICAgICAgICAgW1BhZ2UgMjFdCgwKSW50 ZXJuZXQtRHJhZnQgICAgICBTVFVOIGZvciAzcmQgcGFydHkgQXV0aG9yaXphdGlvbiAgICAgICAg ICBBcHJpbCAyMDE1CgoKICAgICAgICAgICAgICAgIGludCBvdXRsPTA7CiAgICAgICAgICAgICAg ICBzaXplX3Qgc25fbGVuID0gc3RybGVuKChjb25zdCBjaGFyKilzZXJ2ZXJfbmFtZSk7CgogICAg ICAgICAgICAgICAgLyogUHJvdmlkZSBhbnkgQUFEIGRhdGEuIFRoaXMgY2FuIGJlIGNhbGxlZCB6 ZXJvIG9yIG1vcmUgdGltZXMgYXMKICAgICAgICAgICAgICAgICAqIHJlcXVpcmVkCiAgICAgICAg ICAgICAgICAgKi8KICAgICAgICAgICAgICAgIGlmKDEgIT0gbXlfRVZQX0VuY3J5cHRVcGRhdGUo JmN0eCwgTlVMTCwgJm91dGwsIHNlcnZlcl9uYW1lLCAoaW50KXNuX2xlbikpCiAgICAgICAgICAg ICAgICAgICAgICAgIHJldHVybiAtMTsKCiAgICAgICAgICAgICAgICBvdXRsPTA7CiAgICAgICAg ICAgICAgICBiY29weShvcmlnX2ZpZWxkLGVuY29kZWRfYnVmZmVyLG9hdXRoX3Rva2VuLT5ub25j ZV9sZW5ndGggKyAyKTsKICAgICAgICAgICAgICAgIGVuY29kZWRfYnVmZmVyICs9IG9hdXRoX3Rv a2VuLT5ub25jZV9sZW5ndGggKyAyOwogICAgICAgICAgICAgICAgdWludDhfdCAqc3RhcnRfZmll bGQgPSBvcmlnX2ZpZWxkICsgb2F1dGhfdG9rZW4tPm5vbmNlX2xlbmd0aCArIDI7CiAgICAgICAg ICAgICAgICBsZW4gLT0gb2F1dGhfdG9rZW4tPm5vbmNlX2xlbmd0aCArIDI7CgogICAgICAgICAg ICAgICAgaWYoMSAhPSBteV9FVlBfRW5jcnlwdFVwZGF0ZSgmY3R4LCBlbmNvZGVkX2J1ZmZlciwg Jm91dGwsIHN0YXJ0X2ZpZWxkLCAoaW50KWxlbikpCiAgICAgICAgICAgICAgICAgICAgICAgIHJl dHVybiAtMTsKCiAgICAgICAgICAgICAgICBpbnQgdG1wX291dGwgPSAwOwogICAgICAgICAgICAg ICAgRVZQX0VuY3J5cHRGaW5hbF9leCgmY3R4LCBlbmNvZGVkX2J1ZmZlciArIG91dGwsICZ0bXBf b3V0bCk7CiAgICAgICAgICAgICAgICBvdXRsICs9IHRtcF9vdXRsOwoKICAgICAgICAgICAgICAg IEVWUF9DSVBIRVJfQ1RYX2N0cmwoJmN0eCwgRVZQX0NUUkxfR0NNX0dFVF9UQUcsIE9BVVRIX0dD TV9UQUdfU0laRSwgZW5jb2RlZF9idWZmZXIgKyBvdXRsKTsKICAgICAgICAgICAgICAgIG91dGwg Kz0gT0FVVEhfR0NNX1RBR19TSVpFOwoKICAgICAgICAgICAgICAgIHJldCA9IChpbnQpKDIgKyBv YXV0aF90b2tlbi0+bm9uY2VfbGVuZ3RoICsgb3V0bCk7CgogICAgICAgICAgICAgICAgRVZQX0NJ UEhFUl9DVFhfY2xlYW51cCgmY3R4KTsKICAgICAgICB9CgogICAgICAgIHJldHVybiByZXQ7Cn0K CnN0YXRpYyBpbnQgZGVjb2RlX29hdXRoX3Rva2VuX2djbShjb25zdCB1aW50OF90ICpzZXJ2ZXJf bmFtZSwgY29uc3QgdWludDhfdCAqa2V5LAogICAgICAgICAgICAgICAgb2F1dGhfdG9rZW5fdCAq b2F1dGhfdG9rZW4sCiAgICAgICAgICAgICAgICBjb25zdCB1aW50OF90ICplbmNvZGVkX2J1ZmZl ciwgc2l6ZV90IGVuY29kZWRfYnVmZmVyX3NpemUpCnsKICAgICAgICBpbnQgcmV0ID0gLTE7Cgog ICAgICAgIGlmKHNlcnZlcl9uYW1lICYmIGtleSAmJiBvYXV0aF90b2tlbiAmJiBlbmNvZGVkX2J1 ZmZlcikgewoKICAgICAgICAgICAgICAgIG9hdXRoX3Rva2VuLT5ub25jZV9sZW5ndGggPSBudG9o cygqKChjb25zdCB1aW50MTZfdCopZW5jb2RlZF9idWZmZXIpKTsKICAgICAgICAgICAgICAgIGJj b3B5KGVuY29kZWRfYnVmZmVyKzIsb2F1dGhfdG9rZW4tPm5vbmNlLG9hdXRoX3Rva2VuLT5ub25j ZV9sZW5ndGgpOwoKICAgICAgICAgICAgICAgIGNvbnN0IHVpbnQ4X3QqIGVuY3J5cHRlZF9maWVs ZCA9IChjb25zdCB1aW50OF90KikoZW5jb2RlZF9idWZmZXIgKyBvYXV0aF90b2tlbi0+bm9uY2Vf bGVuZ3RoICsgMik7CiAgICAgICAgICAgICAgICBzaXplX3QgZW5jcnlwdGVkX2ZpZWxkX3NpemUg PSAoc2l6ZV90KShlbmNvZGVkX2J1ZmZlcl9zaXplIC0gb2F1dGhfdG9rZW4tPm5vbmNlX2xlbmd0 aCAtIDIgLSBPQVVUSF9HQ01fVEFHX1NJWkUpOwoKICAgICAgICAgICAgICAgIHVpbnQ4X3QgdGFn W09BVVRIX0dDTV9UQUdfU0laRV07CgoKClJlZGR5LCBldCBhbC4gICAgICAgICAgIEV4cGlyZXMg T2N0b2JlciAyMywgMjAxNSAgICAgICAgICAgICAgIFtQYWdlIDIyXQoMCkludGVybmV0LURyYWZ0 ICAgICAgU1RVTiBmb3IgM3JkIHBhcnR5IEF1dGhvcml6YXRpb24gICAgICAgICAgQXByaWwgMjAx NQoKCiAgICAgICAgICAgICAgICBiY29weShlbmNyeXB0ZWRfZmllbGQgKyBlbmNyeXB0ZWRfZmll bGRfc2l6ZSwgdGFnICxzaXplb2YodGFnKSk7CgogICAgICAgICAgICAgICAgdWludDhfdCBkZWNv ZGVkX2ZpZWxkW01BWF9FTkNPREVEX09BVVRIX1RPS0VOX1NJWkVdOwoKICAgICAgICAgICAgICAg IGNvbnN0IEVWUF9DSVBIRVIgKiBjaXBoZXIgPSBFVlBfYWVzXzI1Nl9nY20oKTsKICAgICAgICAg ICAgICAgIGlmKCFjaXBoZXIpIHsKICAgICAgICAgICAgICAgICAgICAgICAgcmV0dXJuIC0xOwog ICAgICAgICAgICAgICAgfQoKICAgICAgICAgICAgICAgIEVWUF9DSVBIRVJfQ1RYIGN0eDsKICAg ICAgICAgICAgICAgIEVWUF9DSVBIRVJfQ1RYX2luaXQoJmN0eCk7CiAgICAgICAgICAgICAgICAv KiBJbml0aWFsaXplIHRoZSBkZWNyeXB0aW9uIG9wZXJhdGlvbi4gKi8KICAgICAgICAgICAgICAg IGlmKDEgIT0gRVZQX0RlY3J5cHRJbml0X2V4KCZjdHgsIGNpcGhlciwgTlVMTCwgTlVMTCwgTlVM TCkpIHsKICAgICAgICAgICAgICAgICAgICAgICAgcmV0dXJuIC0xOwogICAgICAgICAgICAgICAg fQoKICAgICAgICAgICAgICAgIC8qIFNldCBJViBsZW5ndGggaWYgZGVmYXVsdCAxMiBieXRlcyAo OTYgYml0cykgaXMgbm90IGFwcHJvcHJpYXRlICovCiAgICAgICAgICAgICAgICBpZigxICE9IEVW UF9DSVBIRVJfQ1RYX2N0cmwoJmN0eCwgRVZQX0NUUkxfR0NNX1NFVF9JVkxFTiwgb2F1dGhfdG9r ZW4tPm5vbmNlX2xlbmd0aCwgTlVMTCkpIHsKICAgICAgICAgICAgICAgICAgICAgICAgcmV0dXJu IC0xOwogICAgICAgICAgICAgICAgfQoKICAgICAgICAgICAgICAgIC8qIEluaXRpYWxpemUga2V5 IGFuZCBJViAqLwogICAgICAgICAgICAgICAgaWYoMSAhPSBFVlBfRGVjcnlwdEluaXRfZXgoJmN0 eCwgTlVMTCwgTlVMTCwgKGNvbnN0IHVuc2lnbmVkIGNoYXIgKilrZXksIG9hdXRoX3Rva2VuLT5u b25jZSkpIHsKICAgICAgICAgICAgICAgICAgICAgICAgcmV0dXJuIC0xOwogICAgICAgICAgICAg ICAgfQoKICAgICAgICAgICAgICAgIC8qIFNldCBleHBlY3RlZCB0YWcgdmFsdWUuIEEgcmVzdHJp Y3Rpb24gaW4gT3BlblNTTCAxLjAuMWMgYW5kIGVhcmxpZXIKICAgICAgICAgICAgICAgICAgKyAg ICAgICAgICogcmVxdWlyZWQgdGhlIHRhZyBiZWZvcmUgYW55IEFBRCBvciBjaXBoZXJ0ZXh0ICov CiAgICAgICAgICAgICAgICBFVlBfQ0lQSEVSX0NUWF9jdHJsICgmY3R4LCBFVlBfQ1RSTF9HQ01f U0VUX1RBRywgT0FVVEhfR0NNX1RBR19TSVpFLCB0YWcpOwoKICAgICAgICAgICAgICAgIGludCBv dXRsPTA7CiAgICAgICAgICAgICAgICBzaXplX3Qgc25fbGVuID0gc3RybGVuKChjb25zdCBjaGFy KilzZXJ2ZXJfbmFtZSk7CgogICAgICAgICAgICAgICAgLyogUHJvdmlkZSBhbnkgQUFEIGRhdGEu IFRoaXMgY2FuIGJlIGNhbGxlZCB6ZXJvIG9yIG1vcmUgdGltZXMgYXMKICAgICAgICAgICAgICAg ICAqIHJlcXVpcmVkCiAgICAgICAgICAgICAgICAgKi8KICAgICAgICAgICAgICAgIGlmKDEgIT0g bXlfRVZQX0RlY3J5cHRVcGRhdGUoJmN0eCwgTlVMTCwgJm91dGwsIHNlcnZlcl9uYW1lLCAoaW50 KXNuX2xlbikpIHsKICAgICAgICAgICAgICAgICAgICAgICAgcmV0dXJuIC0xOwogICAgICAgICAg ICAgICAgfQogICAgICAgICAgICAgICAgaWYoMSAhPSBteV9FVlBfRGVjcnlwdFVwZGF0ZSgmY3R4 LCBkZWNvZGVkX2ZpZWxkLCAmb3V0bCwgZW5jcnlwdGVkX2ZpZWxkLCAoaW50KWVuY3J5cHRlZF9m aWVsZF9zaXplKSkgewogICAgICAgICAgICAgICAgICAgICAgICByZXR1cm4gLTE7CiAgICAgICAg ICAgICAgICB9CgogICAgICAgICAgICAgICAgaW50IHRtcF9vdXRsID0gMDsKICAgICAgICAgICAg ICAgIGlmKEVWUF9EZWNyeXB0RmluYWxfZXgoJmN0eCwgZGVjb2RlZF9maWVsZCArIG91dGwsICZ0 bXBfb3V0bCk8MSkgewogICAgICAgICAgICAgICAgICAgICAgICBFVlBfQ0lQSEVSX0NUWF9jbGVh bnVwKCZjdHgpOwogICAgICAgICAgICAgICAgICAgICAgICByZXR1cm4gLTE7CiAgICAgICAgICAg ICAgICB9CgoKClJlZGR5LCBldCBhbC4gICAgICAgICAgIEV4cGlyZXMgT2N0b2JlciAyMywgMjAx NSAgICAgICAgICAgICAgIFtQYWdlIDIzXQoMCkludGVybmV0LURyYWZ0ICAgICAgU1RVTiBmb3Ig M3JkIHBhcnR5IEF1dGhvcml6YXRpb24gICAgICAgICAgQXByaWwgMjAxNQoKCiAgICAgICAgICAg ICAgICBvdXRsICs9IHRtcF9vdXRsOwoKICAgICAgICAgICAgICAgIEVWUF9DSVBIRVJfQ1RYX2Ns ZWFudXAoJmN0eCk7CgogICAgICAgICAgICAgICAgc2l6ZV90IGxlbiA9IDA7CgogICAgICAgICAg ICAgICAgb2F1dGhfdG9rZW4tPm1hY19rZXlfbGVuZ3RoID0gbnRvaHMoKigodWludDE2X3QqKShk ZWNvZGVkX2ZpZWxkK2xlbikpKTsKICAgICAgICAgICAgICAgIGxlbiArPSAyOwoKICAgICAgICAg ICAgICAgIGJjb3B5KGRlY29kZWRfZmllbGQrbGVuLG9hdXRoX3Rva2VuLT5tYWNfa2V5LG9hdXRo X3Rva2VuLT5tYWNfa2V5X2xlbmd0aCk7CiAgICAgICAgICAgICAgICBsZW4gKz0gb2F1dGhfdG9r ZW4tPm1hY19rZXlfbGVuZ3RoOwoKICAgICAgICAgICAgICAgIG9hdXRoX3Rva2VuLT50aW1lc3Rh bXAgPSBudG9obGwoKigodWludDY0X3QqKShkZWNvZGVkX2ZpZWxkK2xlbikpKTsKICAgICAgICAg ICAgICAgIGxlbiArPSA4OwoKICAgICAgICAgICAgICAgIG9hdXRoX3Rva2VuLT5saWZldGltZSA9 IG50b2hsKCooKHVpbnQzMl90KikoZGVjb2RlZF9maWVsZCtsZW4pKSk7CiAgICAgICAgICAgICAg ICBsZW4gKz0gNDsKCiAgICAgICAgICAgICAgICByZXQgPSBsZW47CiAgICAgICAgfQogICAgICAg IHJldHVybiByZXQ7Cn0KCmludCBtYWluKCkgewoKICAgICAgICBTU0xfbG9hZF9lcnJvcl9zdHJp bmdzKCk7CiAgICAgICAgT3BlblNTTF9hZGRfc3NsX2FsZ29yaXRobXMoKTsKCiAgICAgICAgb2F1 dGhfdG9rZW5fdCBvYXV0aF90b2tlbiA9IHsgT0FVVEhfR0NNX05PTkNFX1NJWkUsICJoNGozazJs Mm40YjUiLAogICAgICAgICAgICAgICAgMjAsICJaa3NqcHdlb2l4WG12bjY3NTM0bSIsCiAgICAg ICAgICAgICAgICAodWludDY0X3QpKDkyNDcwMzAwNzA0NzY4TEwpLCAzNjAwCiAgICAgICAgfTsK CiAgICAgICAgY29uc3QgY2hhciBzZXJ2ZXJfbmFtZVszM10gPSAiYmxhY2tkb3cuY2FybGVvbi5n b3YiOwoKICAgICAgICBjb25zdCBjaGFyIGtleVszM10gPSAiSEdrajMyS0pHaXV5MDk4c2RmYXFi TmpPaWF6NzE5MjMiOwoKICAgICAgICB1aW50OF90IGVuY29kZWRfYnVmZmVyW01BWF9FTkNPREVE X09BVVRIX1RPS0VOX1NJWkVdOwoKICAgICAgICBpbnQgbGVuID0gZW5jb2RlX29hdXRoX3Rva2Vu X2djbSgoY29uc3QgdWludDhfdCAqKXNlcnZlcl9uYW1lLCAoY29uc3QgdWludDhfdCAqKWtleSwK ICAgICAgICAgICAgICAgICAgICAgICAgJm9hdXRoX3Rva2VuLAogICAgICAgICAgICAgICAgICAg ICAgICBlbmNvZGVkX2J1ZmZlcik7CgogICAgICAgIGlmKGxlbjwwKSB7CiAgICAgICAgICAgICAg ICBmcHJpbnRmKHN0ZGVyciwiQ2Fubm90IGVuY29kZSB0b2tlblxuIik7CiAgICAgICAgICAgICAg ICBleGl0KC0xKTsKICAgICAgICB9CgoKCgpSZWRkeSwgZXQgYWwuICAgICAgICAgICBFeHBpcmVz IE9jdG9iZXIgMjMsIDIwMTUgICAgICAgICAgICAgICBbUGFnZSAyNF0KDApJbnRlcm5ldC1EcmFm dCAgICAgIFNUVU4gZm9yIDNyZCBwYXJ0eSBBdXRob3JpemF0aW9uICAgICAgICAgIEFwcmlsIDIw MTUKCgogICAgICAgIG9hdXRoX3Rva2VuX3Qgb2F1dGhfdG9rZW5fZGVjb2RlZDsKCiAgICAgICAg bGVuID0gZGVjb2RlX29hdXRoX3Rva2VuX2djbSgoY29uc3QgdWludDhfdCAqKXNlcnZlcl9uYW1l LCAoY29uc3QgdWludDhfdCAqKWtleSwKICAgICAgICAgICAgICAgICAgICAgICAgJm9hdXRoX3Rv a2VuX2RlY29kZWQsCiAgICAgICAgICAgICAgICAgICAgICAgIGVuY29kZWRfYnVmZmVyLCAoc2l6 ZV90KWxlbik7CgogICAgICAgIGlmKGxlbjwwKSB7CiAgICAgICAgICAgICAgICBmcHJpbnRmKHN0 ZGVyciwiQ2Fubm90IGRlY29kZSB0b2tlblxuIik7CiAgICAgICAgICAgICAgICBleGl0KC0xKTsK ICAgICAgICB9CgogICAgICAgIGlmKAogICAgICAgICAgICAgICAgICAgICAgICAob2F1dGhfdG9r ZW4ubm9uY2VfbGVuZ3RoICE9IG9hdXRoX3Rva2VuX2RlY29kZWQubm9uY2VfbGVuZ3RoKSB8fAog ICAgICAgICAgICAgICAgICAgICAgICAoYmNtcChvYXV0aF90b2tlbi5ub25jZSxvYXV0aF90b2tl bl9kZWNvZGVkLm5vbmNlLG9hdXRoX3Rva2VuLm5vbmNlX2xlbmd0aCkhPTApIHx8CiAgICAgICAg ICAgICAgICAgICAgICAgIChvYXV0aF90b2tlbi5tYWNfa2V5X2xlbmd0aCAhPSBvYXV0aF90b2tl bl9kZWNvZGVkLm1hY19rZXlfbGVuZ3RoKSB8fAogICAgICAgICAgICAgICAgICAgICAgICAoYmNt cChvYXV0aF90b2tlbi5tYWNfa2V5LG9hdXRoX3Rva2VuX2RlY29kZWQubWFjX2tleSxvYXV0aF90 b2tlbi5tYWNfa2V5X2xlbmd0aCkhPTApIHx8CiAgICAgICAgICAgICAgICAgICAgICAgIChvYXV0 aF90b2tlbi50aW1lc3RhbXAgIT0gb2F1dGhfdG9rZW5fZGVjb2RlZC50aW1lc3RhbXApIHx8CiAg ICAgICAgICAgICAgICAgICAgICAgIChvYXV0aF90b2tlbi5saWZldGltZSAhPSBvYXV0aF90b2tl bl9kZWNvZGVkLmxpZmV0aW1lKSkgewogICAgICAgICAgICAgICAgZnByaW50ZihzdGRlcnIsIklu Y29ycmVjdGx5IGRlY29kZWQgdG9rZW5cbiIpOwogICAgICAgICAgICAgICAgZXhpdCgtMSk7CiAg ICAgICAgfQoKICAgICAgICBmcHJpbnRmKHN0ZG91dCwiU1VDQ0VTUyAhXG4iKTsKCiAgICAgICAg cmV0dXJuIDA7Cn0KCjxDT0RFIEVORFM+CgpJbnB1dCBkYXRhIChzYW1lIGZvciBhbGwgc2FtcGxl cyBiZWxvdyk6CgogICAvL1NUVU4gU0VSVkVSIE5BTUUKICAgc2VydmVyX25hbWUgPSAiYmxhY2tk b3cuY2FybGVvbi5nb3YiOwoKICAgLy9TaGFyZWQga2V5IGJldHdlZW4gQVMgYW5kIFJTCgogICBs b25nX3Rlcm1fa2V5ID0gXHg0OFx4NDdceDZiXHg2YVx4MzNceDMyXHg0Ylx4NGFceDQ3XHg2OVx4 NzVceDc5CiAgICAgICAgICAgICAgICAgICBceDMwXHgzOVx4MzhceDczXHg2NFx4NjZceDYxXHg3 MVx4NjJceDRlXHg2YVx4NGYKICAgICAgICAgICAgICAgICAgIFx4NjlceDYxXHg3YVx4MzdceDMx XHgzOVx4MzJceDMzCgogICAvL01BQyBrZXkgb2YgdGhlIHNlc3Npb24gKGluY2x1ZGVkIGluIHRo ZSB0b2tlbikKICAgbWFjX2tleSA9IFx4NWFceDZiXHg3M1x4NmFceDcwXHg3N1x4NjVceDZmXHg2 OVx4NzhceDU4XHg2ZFx4NzZceDZlCiAgICAgICAgICAgICBceDM2XHgzN1x4MzVceDMzXHgzNFx4 NmQ7CgogICAvL2xlbmd0aCBvZiB0aGUgTUFDIGtleQogICBtYWNfa2V5X2xlbmd0aCAgPSAgMjA7 CgogICAvL1RoZSB0aW1lc3RhbXAgZmllbGQgaW4gdGhlIHRva2VuCgoKClJlZGR5LCBldCBhbC4g ICAgICAgICAgIEV4cGlyZXMgT2N0b2JlciAyMywgMjAxNSAgICAgICAgICAgICAgIFtQYWdlIDI1 XQoMCkludGVybmV0LURyYWZ0ICAgICAgU1RVTiBmb3IgM3JkIHBhcnR5IEF1dGhvcml6YXRpb24g ICAgICAgICAgQXByaWwgMjAxNQoKCiAgIHRva2VuX3RpbWVzdGFtcCA9IDkyNDcwMzAwNzA0NzY4 OwoKICAgLy9UaGUgbGlmZXRpbWUgb2YgdGhlIHRva2VuCiAgIHRva2VuX2xpZmV0aW1lID0gMzYw MDsKCiAgIC8vbm9uY2UgZm9yIEFFQUQKICAgYWVhZF9ub25jZSA9IFx4NjhceDM0XHg2YVx4MzNc eDZiXHgzMlx4NmNceDMyXHg2ZVx4MzRceDYyXHgzNTsKCiAgIFNhbXBsZXM6CgogICAgIDEpIHRv a2VuIGVuY3J5cHRpb24gYWxnb3JpdGhtID0gQUVBRF9BRVNfMjU2X0dDTQoKICAgICBFbmNyeXB0 ZWQgdG9rZW4gKDY0IGJ5dGVzID0gMiArIDEyICszNCArIDE2KSA9CgogICAgXHgwMFx4MGNceDY4 XHgzNFx4NmFceDMzXHg2Ylx4MzJceDZjXHgzMlx4NmVceDM0XHg2MgogICAgXHgzNVx4NjFceDdl XHhmMVx4MzRceGEzXHhkNVx4ZTRceDRlXHg5YVx4MTlceGNjXHg3ZAogICAgXHhjMVx4MDRceGIw XHhjMFx4M2RceDAzXHhiMlx4YTVceDUxXHhkOFx4ZmRceGY1XHhjZAogICAgXHgzYlx4NmRceGNh XHg2Zlx4MTBceGNmXHhiN1x4N2VceDViXHgyZFx4ZGVceGM4XHg0ZAogICAgXHgyOVx4M2FceDVj XHg1MFx4NDlceDkzXHg1OVx4ZjBceGMyXHhlMlx4NmZceDc2CgogIDIpIHRva2VuIGVuY3J5cHRp b24gYWxnb3JpdGhtID0gQUVBRF9BRVNfMTI4X0dDTQoKICAgICBFbmNyeXB0ZWQgdG9rZW4gKDY0 IGJ5dGVzID0gMiArIDEyICszNCArIDE2KSA9CgogICBceDAwXHgwY1x4NjhceDM0XHg2YVx4MzNc eDZiXHgzMlx4NmNceDMyXHg2ZVx4MzRceDYyCiAgIFx4MzVceDdmXHhiOVx4ZTlceDlmXHgwOFx4 MjdceGJlXHgzZFx4ZjFceGUxXHhiZFx4NjUKICAgXHgxNFx4OTNceGQzXHgwM1x4MWRceDM2XHhk Zlx4NTdceDA3XHg5N1x4ODRceGFlXHhlNQogICBceGVhXHhjYlx4NjVceGZhXHhkNFx4ZjJceDdm XHhhYlx4MWFceDNmXHg5N1x4OTdceDRiCiAgIFx4NjlceGY4XHg1MVx4YjJceDRiXHhmNVx4YWZc eDA5XHhlZFx4YTNceDU3XHhlMAoKCgoKICAgICAgICAgICAgICAgICAgICAgICAgICAgRmlndXJl IDU6IFNhbXBsZSBjb2RlCgpBcHBlbmRpeCBCLiAgSW50ZXJhY3Rpb24gYmV0d2VlbiBjbGllbnQg YW5kIGF1dGhvcml6YXRpb24gc2VydmVyCgogICBDbGllbnQgbWFrZXMgYW4gSFRUUCByZXF1ZXN0 IHRvIGFuIGF1dGhvcml6YXRpb24gc2VydmVyIHRvIG9idGFpbiBhCiAgIHRva2VuIHRoYXQgY2Fu IGJlIHVzZWQgdG8gYXZhaWwgaXRzZWxmIG9mIFNUVU4gc2VydmljZXMuICBUaGUgU1RVTgogICB0 b2tlbiBpcyByZXR1cm5lZCBpbiBKU09OIHN5bnRheCBbUkZDNzE1OV0sIGFsb25nIHdpdGggb3Ro ZXIgT0F1dGgKICAgMi4wIHBhcmFtZXRlcnMgbGlrZSB0b2tlbiB0eXBlLCBrZXksIHRva2VuIGxp ZmV0aW1lIGFuZCBraWQgZGVmaW5lZAogICBpbiBbSS1ELmlldGYtb2F1dGgtcG9wLWtleS1kaXN0 cmlidXRpb25dLgoKCgoKCgoKCgpSZWRkeSwgZXQgYWwuICAgICAgICAgICBFeHBpcmVzIE9jdG9i ZXIgMjMsIDIwMTUgICAgICAgICAgICAgICBbUGFnZSAyNl0KDApJbnRlcm5ldC1EcmFmdCAgICAg IFNUVU4gZm9yIDNyZCBwYXJ0eSBBdXRob3JpemF0aW9uICAgICAgICAgIEFwcmlsIDIwMTUKCgog ICArLS0tLS0tLS0tLS0tLS0tLS0tLSsgICAgICAgICAgICAgICAgICAgICAgICAgKy0tLS0tLS0t KyAgKy0tLS0tLS0tLSsKICAgfCAuLi4uLi4uLi4gIFNUVU4gICB8ICAgICAgICAgICAgICAgICAg ICAgICAgIHwgIFNUVU4gIHwgIHwgIFdlYlJUQyB8CiAgIHwgLldlYlJUQyAuICBDbGllbnQgfCAg ICAgICAgICAgICAgICAgICAgICAgICB8ICAgICAgICB8ICB8ICAgICAgICAgfAogICB8IC5DbGll bnQgLiAgICAgICAgIHwgICAgICAgICAgICAgICAgICAgICAgICAgfCBTZXJ2ZXIgfCAgfCAgU2Vy dmVyIHwKICAgfCAuLi4uLi4uLi4gICAgICAgICB8ICAgICAgICAgICAgICAgICAgICAgICAgIHwg ICAgICAgIHwgIHwgICAgICAgICB8CiAgICstLS0tLS0tLS0tLS0tLS0tLS0tKyAgICAgICAgICAg ICAgICAgICAgICAgICArLS0tLS0tLS0rICArLS0tLS0tLS0tKwogICAgIHwgICAgICAgfCAgICAg ICAgICAgU1RVTiByZXF1ZXN0ICAgICAgICAgICAgICAgICAgICB8ICAgICAgICAgfAogICAgIHwg ICAgICAgfC0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLT58ICAgICAg ICAgfAogICAgIHwgICAgICAgfCAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICB8ICAgICAgICAgfAogICAgIHwgICAgICAgfCAgICAgICAgIFNUVU4gZXJyb3IgcmVzcG9u c2UgICAgICAgICAgICAgICB8ICAgICAgICAgfAogICAgIHwgICAgICAgfCAgICAgICAgICg0MDEg VW5hdXRob3JpemVkKSAgICAgICAgICAgICAgICB8ICAgICAgICAgfAogICAgIHwgICAgICAgfDwt LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS18ICAgICAgICAgfAogICAg IHwgICAgICAgfCAgICAgICAgIFRISVJELVBBUlRZLUFVVEhPUklaQVRJT04gICAgICAgICB8ICAg ICAgICAgfAogICAgIHwgICAgICAgfCAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICB8ICAgICAgICAgfAogICAgIHwgICAgICAgfCAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICB8ICAgICAgICAgfAogICAgIHwgICAgICAgfCAgICAgIEhUVFAg UmVxdWVzdCBmb3IgdG9rZW4gICAgICAgICAgICAgICB8ICAgICAgICAgfAogICAgIHwtLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0+fAog ICAgIHwgICAgICAgfCAgICAgIEhUVFAgUmVzcG9uc2Ugd2l0aCB0b2tlbiBwYXJhbWV0ZXJzICB8 ICAgICAgICAgfAogICAgIHw8LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tfAogICAgIHxPQXV0aCAyLjAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICB8ICAgICAgICAgfAogICAgICBBdHRyaWJ1dGVzICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICB8ICAgICAgICAgfAogICAgIHwtLS0t LS0+fCAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICB8ICAgICAgICAg fAogICAgIHwgICAgICAgfCAgICBTVFVOIHJlcXVlc3Qgd2l0aCBBQ0NFU1MtVE9LRU4gICAgICAg ICB8ICAgICAgICAgfAogICAgIHwgICAgICAgfC0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLT58ICAgICAgICAgfAogICAgIHwgICAgICAgfCAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICB8ICAgICAgICAgfAogICAgIHwgICAgICAgfCAgICAg ICAgIFNUVU4gc3VjY2VzcyByZXNwb25zZSAgICAgICAgICAgICB8ICAgICAgICAgfAogICAgIHwg ICAgICAgfDwtLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS18ICAgICAg ICAgfAogICAgIHwgICAgICAgfCAgICAgICAgICAgICBTVFVOIE1lc3NhZ2VzICAgICAgICAgICAg ICAgICB8ICAgICAgICAgfAogICAgIHwgICAgICAgfCAgICAgIC8vLy8vLyBpbnRlZ3JpdHkgcHJv dGVjdGVkIC8vLy8vLyAgICB8ICAgICAgICAgfAogICAgIHwgICAgICAgfCAgICAgIC8vLy8vLyBp bnRlZ3JpdHkgcHJvdGVjdGVkIC8vLy8vLyAgICB8ICAgICAgICAgfAogICAgIHwgICAgICAgfCAg ICAgIC8vLy8vLyBpbnRlZ3JpdHkgcHJvdGVjdGVkIC8vLy8vLyAgICB8ICAgICAgICAgfAoKICAg ICAgICAgICAgICAgICBGaWd1cmUgNjogU1RVTiBUaGlyZCBQYXJ0eSBBdXRob3JpemF0aW9uCgog ICBbSS1ELmlldGYtb2F1dGgtcG9wLWtleS1kaXN0cmlidXRpb25dIGRlc2NyaWJlcyB0aGUgaW50 ZXJhY3Rpb24KICAgYmV0d2VlbiB0aGUgY2xpZW50IGFuZCB0aGUgYXV0aG9yaXphdGlvbiBzZXJ2 ZXIuICBGb3IgZXhhbXBsZSwgdGhlCiAgIGNsaWVudCBsZWFybnMgdGhlIFNUVU4gc2VydmVyIG5h bWUgInN0dW4xQGV4YW1wbGUuY29tIiBmcm9tIFRISVJELQogICBQQVJUWS1BVVRIT1JJWkFUSU9O IGF0dHJpYnV0ZSB2YWx1ZSBhbmQgbWFrZXMgdGhlIGZvbGxvd2luZyBIVFRQCiAgIHJlcXVlc3Qg Zm9yIHRoZSBhY2Nlc3MgdG9rZW4gdXNpbmcgdHJhbnNwb3J0LWxheWVyIHNlY3VyaXR5ICh3aXRo CiAgIGV4dHJhIGxpbmUgYnJlYWtzIGZvciBkaXNwbGF5IHB1cnBvc2VzIG9ubHkpOgoKCgoKCgoK CgoKClJlZGR5LCBldCBhbC4gICAgICAgICAgIEV4cGlyZXMgT2N0b2JlciAyMywgMjAxNSAgICAg ICAgICAgICAgIFtQYWdlIDI3XQoMCkludGVybmV0LURyYWZ0ICAgICAgU1RVTiBmb3IgM3JkIHBh cnR5IEF1dGhvcml6YXRpb24gICAgICAgICAgQXByaWwgMjAxNQoKCiAgICAgICAgSFRUUC8xLjEK ICAgICAgICBIb3N0OiBzZXJ2ZXIuZXhhbXBsZS5jb20KICAgICAgICBDb250ZW50LVR5cGU6IGFw cGxpY2F0aW9uL3gtd3d3LWZvcm0tdXJsZW5jb2RlZAogICAgICAgIGF1ZD1zdHVuMUBleGFtcGxl LmNvbQogICAgICAgIHRpbWVzdGFtcD0xMzYxNDcxNjI5CiAgICAgICAgZ3JhbnRfdHlwZT1pbXBs aWNpdAogICAgICAgIHRva2VuX3R5cGU9cG9wCiAgICAgICAgYWxnPUhNQUMtU0hBLTI1Ni0xMjgK CiAgICAgICAgICAgICAgICAgICAgICAgICAgICAgRmlndXJlIDc6IFJlcXVlc3QKCiAgIFtJLUQu aWV0Zi10cmFtLXN0dW5iaXNdIHN1cHBvcnRzIGhhc2ggYWdpbGl0eSBhbmQgYWNjb21wbGlzaCB0 aGlzCiAgIGFnaWxpdHkgYnkgY29tcHV0aW5nIG1lc3NhZ2UgaW50ZWdyaXR5IHVzaW5nIGJvdGgg SE1BQy1TSEEtMSBhbmQKICAgSE1BQy1TSEEtMjU2LTEyOC4gIFRoZSBjbGllbnQgc2lnbmFscyB0 aGUgYWxnb3JpdGhtIHN1cHBvcnRlZCBieSBpdAogICB0byB0aGUgYXV0aG9yaXphdGlvbiBzZXJ2 ZXIgaW4gdGhlICdhbGcnIHBhcmFtZXRlciBkZWZpbmVkIGluCiAgIFtJLUQuaWV0Zi1vYXV0aC1w b3Ata2V5LWRpc3RyaWJ1dGlvbl0uICBUaGUgYXV0aG9yaXphdGlvbiBkZXRlcm1pbmVzCiAgIGxl bmd0aCBvZiB0aGUgbWFjX2tleSBiYXNlZCBvbiB0aGUgSE1BQyBhbGdvcml0aG0gY29udmV5ZWQg YnkgdGhlCiAgIGNsaWVudC4gIElmIHRoZSBjbGllbnQgc3VwcG9ydHMgYm90aCBITUFDLVNIQS0x IGFuZCBITUFDLVNIQS0yNTYtMTI4CiAgIHRoZW4gaXQgc2lnbmFscyBITUFDLVNIQS0yNTYtMTI4 IHRvIHRoZSBhdXRob3JpemF0aW9uIHNlcnZlciwgZ2V0cwogICAyNTYtYml0IGtleSBmcm9tIHRo ZSBhdXRob3JpemF0aW9uIHNlcnZlciBhbmQgY2FsY3VsYXRlcyAxNjAtYml0IGtleQogICBmb3Ig SE1BQy1TSEEtMSB1c2luZyBTSEExIHRha2luZyB0aGUgMjU2LWJpdCBrZXkgYXMgaW5wdXQuCgog ICBJZiB0aGUgY2xpZW50IGlzIGF1dGhvcml6ZWQgdGhlbiB0aGUgYXV0aG9yaXphdGlvbiBzZXJ2 ZXIgaXNzdWVzIGFuCiAgIGFjY2VzcyB0b2tlbi4gIEFuIGV4YW1wbGUgb2Ygc3VjY2Vzc2Z1bCBy ZXNwb25zZToKCiAgICAgICAgSFRUUC8xLjEgMjAwIE9LCiAgICAgICAgQ29udGVudC1UeXBlOiBh cHBsaWNhdGlvbi9qc29uCiAgICAgICAgQ2FjaGUtQ29udHJvbDogbm8tc3RvcmUKCiAgICAgICAg ewogICAgICAgICAgImFjY2Vzc190b2tlbiI6CiAgICJVMkZzZEdWa1gxOHFKSy9ra1dtUmNuZkhn bHJWVEpTcFM2eVUzMmttSG1PcmZHeUkzbTFnUWoxalJQc3IwdUJiCiAgIEhjdHV5Y0Fnc2ZSWDdu SlcyQmR1a0d5S01YU2lOR05uQnppZ2tBb2ZQNitaM3ZrSjFRNXBXYmZTUnJvT2tXQm4iLAogICAg ICAgICAgInRva2VuX3R5cGUiOiJwb3AiLAogICAgICAgICAgImV4cGlyZXNfaW4iOjE4MDAsCiAg ICAgICAgICAia2lkIjoiMjJCSWp4VTkzaC9JZ3dFYiIsCiAgICAgICAgICAia2V5IjoidjUxTjYy T002NWt5TXZmVEkwOE8iCiAgICAgICAgICAiYWxnIjpITUFDLVNIQS0yNTYtMTI4CiAgICAgICAg fQoKICAgICAgICAgICAgICAgICAgICAgICAgICAgIEZpZ3VyZSA4OiBSZXNwb25zZQoKQXV0aG9y cycgQWRkcmVzc2VzCgoKCgoKCgoKUmVkZHksIGV0IGFsLiAgICAgICAgICAgRXhwaXJlcyBPY3Rv YmVyIDIzLCAyMDE1ICAgICAgICAgICAgICAgW1BhZ2UgMjhdCgwKSW50ZXJuZXQtRHJhZnQgICAg ICBTVFVOIGZvciAzcmQgcGFydHkgQXV0aG9yaXphdGlvbiAgICAgICAgICBBcHJpbCAyMDE1CgoK ICAgVGlydW1hbGVzd2FyIFJlZGR5CiAgIENpc2NvIFN5c3RlbXMsIEluYy4KICAgQ2Vzc25hIEJ1 c2luZXNzIFBhcmssIFZhcnRodXIgSG9ibGkKICAgU2FyamFwdXIgTWFyYXRoYWxsaSBPdXRlciBS aW5nIFJvYWQKICAgQmFuZ2Fsb3JlLCBLYXJuYXRha2EgIDU2MDEwMwogICBJbmRpYQoKICAgRW1h aWw6IHRpcmVkZHlAY2lzY28uY29tCgoKICAgUHJhc2hhbnRoIFBhdGlsCiAgIENpc2NvIFN5c3Rl bXMsIEluYy4KICAgQmFuZ2Fsb3JlCiAgIEluZGlhCgogICBFbWFpbDogcHJhc3BhdGlAY2lzY28u Y29tCgoKICAgUmFtIE1vaGFuIFJhdmluZHJhbmF0aAogICBDaXNjbyBTeXN0ZW1zLCBJbmMuCiAg IENlc3NuYSBCdXNpbmVzcyBQYXJrLAogICBLYWRhYmVlc2FuYWhhbGxpIFZpbGxhZ2UsIFZhcnRo dXIgSG9ibGksCiAgIFNhcmphcHVyLU1hcmF0aGFoYWxsaSBPdXRlciBSaW5nIFJvYWQKICAgQmFu Z2Fsb3JlLCBLYXJuYXRha2EgIDU2MDEwMwogICBJbmRpYQoKICAgRW1haWw6IHJtb2hhbnJAY2lz Y28uY29tCgoKICAgSnVzdGluIFViZXJ0aQogICBHb29nbGUKICAgNzQ3IDZ0aCBBdmUgUwogICBL aXJrbGFuZCwgV0EKICAgOTgwMzMKICAgVVNBCgogICBFbWFpbDoganVzdGluQHViZXJ0aS5uYW1l CgoKCgoKCgoKCgoKCgoKUmVkZHksIGV0IGFsLiAgICAgICAgICAgRXhwaXJlcyBPY3RvYmVyIDIz LCAyMDE1ICAgICAgICAgICAgICAgW1BhZ2UgMjldCg== --_003_913383AAA69FF945B8F946018B75898A4781BD48xmbrcdx10ciscoc_-- From nobody Thu Apr 23 06:32:54 2015 Return-Path: X-Original-To: tram@ietfa.amsl.com Delivered-To: tram@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 3CAB41ACD44; Thu, 23 Apr 2015 06:32:50 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.999 X-Spam-Level: X-Spam-Status: No, score=-1.999 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, SPF_PASS=-0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id FpDSJAatsmCL; Thu, 23 Apr 2015 06:32:47 -0700 (PDT) Received: from mail-la0-x233.google.com (mail-la0-x233.google.com [IPv6:2a00:1450:4010:c03::233]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 224641AC42C; Thu, 23 Apr 2015 06:32:47 -0700 (PDT) Received: by layy10 with SMTP id y10so12752133lay.0; Thu, 23 Apr 2015 06:32:45 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :cc:content-type; bh=T2JAE4yDCmK9jjdh3fPyo7PuI+Tu+HOkXHXQkMwlS4g=; b=xQeAm3+s83fje4QcREcVqTzTN8r3csXXJ472H40BxR11viKE6tWf1kUyuzbi4VNqP/ /iP18n9HN7LOMNG96DnVtAgTgM4oU+kcSrvjHUQ3gE/T1zk/sAeR+cqPOydTJAvTl8Ig 0r7AljLhYdoKN2/Hbm9nVZ310wI96sSRJWghPxe+6qkRAuyEjSUsN3PKXX41uOixUpbt ABW/Yn9oGrOjKqF4OX+htVj4pD6n+C6kNey1m2HSNpgF3ERjpz7Klpw9JWlgJR7Jleqx 16SsLqbiik5F0MTzjmO7NGssJXBqxP+GCekpzGghgzv9sTBYz87ZJ1C8AxGLIfyB+9gY 4tdQ== MIME-Version: 1.0 X-Received: by 10.152.184.72 with SMTP id es8mr2529471lac.77.1429795965668; Thu, 23 Apr 2015 06:32:45 -0700 (PDT) Received: by 10.152.129.3 with HTTP; Thu, 23 Apr 2015 06:32:45 -0700 (PDT) In-Reply-To: <20150421153635.27696.5302.idtracker@ietfa.amsl.com> References: <20150421153635.27696.5302.idtracker@ietfa.amsl.com> Date: Thu, 23 Apr 2015 08:32:45 -0500 Message-ID: From: Spencer Dawkins at IETF To: Stephen Farrell Content-Type: multipart/alternative; boundary=001a1135e50ea293f2051464505a Archived-At: Cc: "tram-chairs@ietf.org" , "tram@ietf.org" , draft-ietf-tram-stun-origin.shepherd@ietf.org, draft-ietf-tram-stun-origin.ad@ietf.org, Simon Perreault , The IESG , draft-ietf-tram-stun-origin@ietf.org Subject: Re: [tram] Stephen Farrell's Discuss on draft-ietf-tram-stun-origin-05: (with DISCUSS and COMMENT) X-BeenThere: tram@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "Discussing the creation of a Turn Revised And Modernized \(TRAM\) WG, which goal is to consolidate the various initiatives to update TURN and STUN." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 23 Apr 2015 13:32:50 -0000 --001a1135e50ea293f2051464505a Content-Type: text/plain; charset=UTF-8 Dear Tramsters, On Tue, Apr 21, 2015 at 10:36 AM, Stephen Farrell wrote: > Stephen Farrell has entered the following ballot position for > draft-ietf-tram-stun-origin-05: Discuss I saw an excellent exchange with Barry on his Discuss for this draft, but haven't seen a response to Stephen's yet. Did I miss it? If the answer is "as Stephen said, it IS a high-level Discuss, and we need to confer before responding", that's fine, or really any other answer could be fine - I just didn't want the draft to get stalled ... Thanks! Spencer > When responding, please keep the subject line intact and reply to all > email addresses included in the To and CC lines. (Feel free to cut this > introductory paragraph, however.) > > > Please refer to http://www.ietf.org/iesg/statement/discuss-criteria.html > for more information about IESG DISCUSS and COMMENT positions. > > > The document, along with other ballot positions, can be found here: > http://datatracker.ietf.org/doc/draft-ietf-tram-stun-origin/ > > > > ---------------------------------------------------------------------- > DISCUSS: > ---------------------------------------------------------------------- > > > "Analytics" here together with the MUST include > statements could amount to a fancy way to > describe monetizing people's WebRTC calls in ways > that the end user will just not expect. I'd like > to check that we're not doing that, as it'd > arguably run counter to e.g. RFC7258 or to the > general trend towards data minimisation. And > making privacy worse, even by a little, seems > worse than making it better. (Note: I am here > asking about the STUN/TURN server being perhaps > unnecessarily told the origin, not the risk that > someone sees that in-transit, which is handled in > the draft already.) > > I do agree that the TURN 401-like challenge > use-case is perhaps needed, but I do not see that > other use cases need to see the origin for them > to work at all. And I'm not sure that such a > spoofable origin is so useful for that TURN case, > esp. when there's parallel work on an > authenticated equivalent. (I mean the tram 3rd > party thing.) I also don't see that that is > needed for network management reasons - surely > everything needed for network managment is no > more nor less visible to the STUN or TURN servers > when this is used vs. when this is not used. > > So why are we pushing for this? If it is really > only for so-called "analytics" then is that ok? > (And where can I find a definition of what that > means?) > > Apologies if this discuss seems somewhat high > level, but as well as the general concern, the > last paragraph of the current tram charter seems > to me to me to say that tram ought not make > privacy worse. But maybe I'm missing the > networking function that needs this - if so, I'm > sure someone will point that out. > > > ---------------------------------------------------------------------- > COMMENT: > ---------------------------------------------------------------------- > > > > - intro, para 2: STUN only defines two auth modes > that I can see, and you only mention two here - > what's the 3rd one you mean? (Is it DTLS?) > > - What if >1 TURN session with different origins > is being setup from same client/browser? Does > that work? (Say two parallel calls, not the case > where the same resource is being accessed at the > same time loaded from different referring web > pages.) > > - I'd suggest to not allow >1 ORIGIN in a STUN > request? But that discussion seems to be in-hand. > > - section 2: suggest providng similar examples > for all schemes, http(s),sip & xmpp. > > - 2.1 & 2.2: MUST include web origin - couldn't > there be "private browsing" scenarios where that > MUST would be a problem? I'm not suggesting that > the origin exposes very much but I think a SHOULD > would be more appropriate. > > - 2.1 last para: source here means the webrtc > server right? That's a bit ambiguous and would be > better clarified. > > - What is the benefit of sending an empty origin > as opposed to no origin attribute? I don't see > any and the former just advertises that the > client is "privacy sensitive" which seems > incongruous. > > > --001a1135e50ea293f2051464505a Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: quoted-printable
Dear Tramsters,

On Tue, Apr 21, 2015 at 10:36 AM, Stephen Farrell <stephen.farrell@cs.tcd.ie> wrote:
Stephen Farrell has entered the following ballot position for draft-ietf-tram-stun-origin-05: Discuss

I s= aw an excellent exchange with Barry on his Discuss for this draft, but have= n't seen a response to Stephen's yet. Did I miss it?

=
If the answer is "as Stephen said, it IS a high-level Discu= ss, and we need to confer before responding", that's fine, or real= ly any other answer could be fine - I just didn't want the draft to get= stalled ...

Thanks!

Spen= cer
=C2=A0
When responding, p= lease keep the subject line intact and reply to all
email addresses included in the To and CC lines. (Feel free to cut this
introductory paragraph, however.)


Please refer to http://www.ietf.org/iesg/statement/discuss-crit= eria.html
for more information about IESG DISCUSS and COMMENT positions.


The document, along with other ballot positions, can be found here:
http://datatracker.ietf.org/doc/draft-ietf-tram-stun-origin= /



----------------------------------------------------------------------
DISCUSS:
----------------------------------------------------------------------


"Analytics" here together with the MUST include
statements could amount to a fancy way to
describe monetizing people's WebRTC calls in ways
that the end user will just not expect. I'd like
to check that we're not doing that, as it'd
arguably run counter to e.g. RFC7258 or to the
general trend towards data minimisation. And
making privacy worse, even by a little, seems
worse than making it better. (Note: I am here
asking about the STUN/TURN server being perhaps
unnecessarily told the origin, not the risk that
someone sees that in-transit, which is handled in
the draft already.)

I do agree that the TURN 401-like challenge
use-case is perhaps needed, but I do not see that
other use cases need to see the origin for them
to work at all.=C2=A0 And I'm not sure that such a
spoofable origin is so useful for that TURN case,
esp. when there's parallel work on an
authenticated equivalent. (I mean the tram 3rd
party thing.) I also don't see that that is
needed for network management reasons - surely
everything needed for network managment is no
more nor less visible to the STUN or TURN servers
when this is used vs. when this is not used.

So why are we pushing for this?=C2=A0 If it is really
only for so-called "analytics" then is that ok?
(And where can I find a definition of what that
means?)

Apologies if this discuss seems somewhat high
level, but as well as the general concern, the
last paragraph of the current tram charter seems
to me to me to say that tram ought not make
privacy worse. But maybe I'm missing the
networking function that needs this - if so, I'm
sure someone will point that out.


----------------------------------------------------------------------
COMMENT:
----------------------------------------------------------------------



- intro, para 2: STUN only defines two auth modes
that I can see, and you only mention two here -
what's the 3rd one you mean? (Is it DTLS?)

- What if >1 TURN session with different origins
is being setup from same client/browser? Does
that work? (Say two parallel calls, not the case
where the same resource is being accessed at the
same time loaded from different referring web
pages.)

- I'd suggest to not allow >1 ORIGIN in a STUN
request? But that discussion seems to be in-hand.

- section 2: suggest providng similar examples
for all schemes, http(s),sip & xmpp.

- 2.1 & 2.2: MUST include web origin - couldn't
there be "private browsing" scenarios where that
MUST would be a problem? I'm not suggesting that
the origin exposes very much but I think a SHOULD
would be more appropriate.

- 2.1 last para: source here means the webrtc
server right? That's a bit ambiguous and would be
better clarified.

- What is the benefit of sending an empty origin
as opposed to no origin attribute? I don't see
any and the former just advertises that the
client is "privacy sensitive" which seems
incongruous.



--001a1135e50ea293f2051464505a-- From nobody Thu Apr 23 06:36:23 2015 Return-Path: X-Original-To: tram@ietfa.amsl.com Delivered-To: tram@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 92FE51B300A; Thu, 23 Apr 2015 06:36:20 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.21 X-Spam-Level: X-Spam-Status: No, score=-4.21 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, T_RP_MATCHES_RCVD=-0.01] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 1S78wYqL2TSy; Thu, 23 Apr 2015 06:36:17 -0700 (PDT) Received: from mercury.scss.tcd.ie (mercury.scss.tcd.ie [134.226.56.6]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 926C61B308C; Thu, 23 Apr 2015 06:36:00 -0700 (PDT) Received: from localhost (localhost [127.0.0.1]) by mercury.scss.tcd.ie (Postfix) with ESMTP id 11E8ABEE9; Thu, 23 Apr 2015 14:35:59 +0100 (IST) X-Virus-Scanned: Debian amavisd-new at scss.tcd.ie Received: from mercury.scss.tcd.ie ([127.0.0.1]) by localhost (mercury.scss.tcd.ie [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Y6rseeWwW9YU; Thu, 23 Apr 2015 14:35:56 +0100 (IST) Received: from [10.87.48.73] (unknown [86.42.29.198]) by mercury.scss.tcd.ie (Postfix) with ESMTPSA id ACD0BBEE6; Thu, 23 Apr 2015 14:35:56 +0100 (IST) Message-ID: <5538F53C.8060608@cs.tcd.ie> Date: Thu, 23 Apr 2015 14:35:56 +0100 From: Stephen Farrell User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:31.0) Gecko/20100101 Thunderbird/31.6.0 MIME-Version: 1.0 To: Spencer Dawkins at IETF References: <20150421153635.27696.5302.idtracker@ietfa.amsl.com> In-Reply-To: OpenPGP: id=D66EA7906F0B897FB2E97D582F3C8736805F8DA2; url= Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 7bit Archived-At: Cc: "tram-chairs@ietf.org" , "tram@ietf.org" , draft-ietf-tram-stun-origin.shepherd@ietf.org, draft-ietf-tram-stun-origin.ad@ietf.org, Simon Perreault , The IESG , draft-ietf-tram-stun-origin@ietf.org Subject: Re: [tram] Stephen Farrell's Discuss on draft-ietf-tram-stun-origin-05: (with DISCUSS and COMMENT) X-BeenThere: tram@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "Discussing the creation of a Turn Revised And Modernized \(TRAM\) WG, which goal is to consolidate the various initiatives to update TURN and STUN." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 23 Apr 2015 13:36:20 -0000 On 23/04/15 14:32, Spencer Dawkins at IETF wrote: > Dear Tramsters, > > On Tue, Apr 21, 2015 at 10:36 AM, Stephen Farrell > wrote: > >> Stephen Farrell has entered the following ballot position for >> draft-ietf-tram-stun-origin-05: Discussn > > > I saw an excellent exchange with Barry on his Discuss for this draft, but > haven't seen a response to Stephen's yet. Did I miss it? > > If the answer is "as Stephen said, it IS a high-level Discuss, and we need > to confer before responding", that's fine, or really any other answer could > be fine - I just didn't want the draft to get stalled ... And I'd also like to chat about it today if possible - I think this is one where getting a sense of the IESG's location on the [crazy-farell,it-needed-to-be-said] spectrum would be good I think. So I hope we don't skip over talking about this for the lack of an author/WG response too. S. > > Thanks! > > Spencer > > >> When responding, please keep the subject line intact and reply to all >> email addresses included in the To and CC lines. (Feel free to cut this >> introductory paragraph, however.) >> >> >> Please refer to http://www.ietf.org/iesg/statement/discuss-criteria.html >> for more information about IESG DISCUSS and COMMENT positions. >> >> >> The document, along with other ballot positions, can be found here: >> http://datatracker.ietf.org/doc/draft-ietf-tram-stun-origin/ >> >> >> >> ---------------------------------------------------------------------- >> DISCUSS: >> ---------------------------------------------------------------------- >> >> >> "Analytics" here together with the MUST include >> statements could amount to a fancy way to >> describe monetizing people's WebRTC calls in ways >> that the end user will just not expect. I'd like >> to check that we're not doing that, as it'd >> arguably run counter to e.g. RFC7258 or to the >> general trend towards data minimisation. And >> making privacy worse, even by a little, seems >> worse than making it better. (Note: I am here >> asking about the STUN/TURN server being perhaps >> unnecessarily told the origin, not the risk that >> someone sees that in-transit, which is handled in >> the draft already.) >> >> I do agree that the TURN 401-like challenge >> use-case is perhaps needed, but I do not see that >> other use cases need to see the origin for them >> to work at all. And I'm not sure that such a >> spoofable origin is so useful for that TURN case, >> esp. when there's parallel work on an >> authenticated equivalent. (I mean the tram 3rd >> party thing.) I also don't see that that is >> needed for network management reasons - surely >> everything needed for network managment is no >> more nor less visible to the STUN or TURN servers >> when this is used vs. when this is not used. >> >> So why are we pushing for this? If it is really >> only for so-called "analytics" then is that ok? >> (And where can I find a definition of what that >> means?) >> >> Apologies if this discuss seems somewhat high >> level, but as well as the general concern, the >> last paragraph of the current tram charter seems >> to me to me to say that tram ought not make >> privacy worse. But maybe I'm missing the >> networking function that needs this - if so, I'm >> sure someone will point that out. >> >> >> ---------------------------------------------------------------------- >> COMMENT: >> ---------------------------------------------------------------------- >> >> >> >> - intro, para 2: STUN only defines two auth modes >> that I can see, and you only mention two here - >> what's the 3rd one you mean? (Is it DTLS?) >> >> - What if >1 TURN session with different origins >> is being setup from same client/browser? Does >> that work? (Say two parallel calls, not the case >> where the same resource is being accessed at the >> same time loaded from different referring web >> pages.) >> >> - I'd suggest to not allow >1 ORIGIN in a STUN >> request? But that discussion seems to be in-hand. >> >> - section 2: suggest providng similar examples >> for all schemes, http(s),sip & xmpp. >> >> - 2.1 & 2.2: MUST include web origin - couldn't >> there be "private browsing" scenarios where that >> MUST would be a problem? I'm not suggesting that >> the origin exposes very much but I think a SHOULD >> would be more appropriate. >> >> - 2.1 last para: source here means the webrtc >> server right? That's a bit ambiguous and would be >> better clarified. >> >> - What is the benefit of sending an empty origin >> as opposed to no origin attribute? I don't see >> any and the former just advertises that the >> client is "privacy sensitive" which seems >> incongruous. >> >> >> > From nobody Thu Apr 23 06:43:04 2015 Return-Path: X-Original-To: tram@ietfa.amsl.com Delivered-To: tram@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 768931B30B0; Thu, 23 Apr 2015 06:43:02 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.999 X-Spam-Level: X-Spam-Status: No, score=-1.999 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, SPF_PASS=-0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id e3G8nsyzzDLL; Thu, 23 Apr 2015 06:42:59 -0700 (PDT) Received: from mail-vn0-x22c.google.com (mail-vn0-x22c.google.com [IPv6:2607:f8b0:400c:c0f::22c]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 9FA771B30B6; Thu, 23 Apr 2015 06:42:52 -0700 (PDT) Received: by vnbg62 with SMTP id g62so1274421vnb.6; Thu, 23 Apr 2015 06:42:51 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :cc:content-type; bh=zkidRGXQJHy8kDboONE7bfQfkO2bO7mD8evs3jy3dCA=; b=1C5M1ty/fyPBRG1YIgefolPBzPWeaXvz8DPHZpMFub5OTJFY+/anx2OwcXLsO2wAz5 5pi3vzJ2/mfw+sHHLABO1HH8Na9UGB3ZmIjuTPOou/P9kS0AL7St9cMFKZOliRFuHLte BQiik5hHxd8/3gNq+Bc8rqA4sJkE5oAfHOdRChe2DtNfR4xx+Q3yG+iNbzQNRmq9IuTL IMwfz5Nn82O1itxLlJtoLKdeG3cYd0JWcqnkoyrQu4AdiHosMECA+z47lVZ6/9EMuBXv OCLPhNjWTzKcIUT7EBpgjYk+5cVNlKZQDt8rsE8bBimVn5dTd0uw8bI9rczz/A6FntLp /OGw== MIME-Version: 1.0 X-Received: by 10.52.115.132 with SMTP id jo4mr2297381vdb.43.1429796571838; Thu, 23 Apr 2015 06:42:51 -0700 (PDT) Received: by 10.52.106.100 with HTTP; Thu, 23 Apr 2015 06:42:51 -0700 (PDT) In-Reply-To: <5538F53C.8060608@cs.tcd.ie> References: <20150421153635.27696.5302.idtracker@ietfa.amsl.com> <5538F53C.8060608@cs.tcd.ie> Date: Thu, 23 Apr 2015 08:42:51 -0500 Message-ID: From: Alan Johnston To: Stephen Farrell Content-Type: multipart/alternative; boundary=bcaec548a791c3fccd0514647434 Archived-At: Cc: "tram-chairs@ietf.org" , "tram@ietf.org" , draft-ietf-tram-stun-origin.shepherd@ietf.org, draft-ietf-tram-stun-origin.ad@ietf.org, Simon Perreault , Spencer Dawkins at IETF , draft-ietf-tram-stun-origin@ietf.org, The IESG Subject: Re: [tram] Stephen Farrell's Discuss on draft-ietf-tram-stun-origin-05: (with DISCUSS and COMMENT) X-BeenThere: tram@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "Discussing the creation of a Turn Revised And Modernized \(TRAM\) WG, which goal is to consolidate the various initiatives to update TURN and STUN." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 23 Apr 2015 13:43:02 -0000 --bcaec548a791c3fccd0514647434 Content-Type: text/plain; charset=UTF-8 Hi Stephen & Spencer, The authors and implementors of STUN Origin have been discussing it - we'll send our reply later today to the list. - Alan - On Thu, Apr 23, 2015 at 8:35 AM, Stephen Farrell wrote: > > > On 23/04/15 14:32, Spencer Dawkins at IETF wrote: > > Dear Tramsters, > > > > On Tue, Apr 21, 2015 at 10:36 AM, Stephen Farrell < > stephen.farrell@cs.tcd.ie > >> wrote: > > > >> Stephen Farrell has entered the following ballot position for > >> draft-ietf-tram-stun-origin-05: Discussn > > > > > > I saw an excellent exchange with Barry on his Discuss for this draft, but > > haven't seen a response to Stephen's yet. Did I miss it? > > > > If the answer is "as Stephen said, it IS a high-level Discuss, and we > need > > to confer before responding", that's fine, or really any other answer > could > > be fine - I just didn't want the draft to get stalled ... > > And I'd also like to chat about it today if possible - I think > this is one where getting a sense of the IESG's location on the > [crazy-farell,it-needed-to-be-said] spectrum would be good I > think. So I hope we don't skip over talking about this for the > lack of an author/WG response too. > > S. > > > > > Thanks! > > > > Spencer > > > > > >> When responding, please keep the subject line intact and reply to all > >> email addresses included in the To and CC lines. (Feel free to cut this > >> introductory paragraph, however.) > >> > >> > >> Please refer to > http://www.ietf.org/iesg/statement/discuss-criteria.html > >> for more information about IESG DISCUSS and COMMENT positions. > >> > >> > >> The document, along with other ballot positions, can be found here: > >> http://datatracker.ietf.org/doc/draft-ietf-tram-stun-origin/ > >> > >> > >> > >> ---------------------------------------------------------------------- > >> DISCUSS: > >> ---------------------------------------------------------------------- > >> > >> > >> "Analytics" here together with the MUST include > >> statements could amount to a fancy way to > >> describe monetizing people's WebRTC calls in ways > >> that the end user will just not expect. I'd like > >> to check that we're not doing that, as it'd > >> arguably run counter to e.g. RFC7258 or to the > >> general trend towards data minimisation. And > >> making privacy worse, even by a little, seems > >> worse than making it better. (Note: I am here > >> asking about the STUN/TURN server being perhaps > >> unnecessarily told the origin, not the risk that > >> someone sees that in-transit, which is handled in > >> the draft already.) > >> > >> I do agree that the TURN 401-like challenge > >> use-case is perhaps needed, but I do not see that > >> other use cases need to see the origin for them > >> to work at all. And I'm not sure that such a > >> spoofable origin is so useful for that TURN case, > >> esp. when there's parallel work on an > >> authenticated equivalent. (I mean the tram 3rd > >> party thing.) I also don't see that that is > >> needed for network management reasons - surely > >> everything needed for network managment is no > >> more nor less visible to the STUN or TURN servers > >> when this is used vs. when this is not used. > >> > >> So why are we pushing for this? If it is really > >> only for so-called "analytics" then is that ok? > >> (And where can I find a definition of what that > >> means?) > >> > >> Apologies if this discuss seems somewhat high > >> level, but as well as the general concern, the > >> last paragraph of the current tram charter seems > >> to me to me to say that tram ought not make > >> privacy worse. But maybe I'm missing the > >> networking function that needs this - if so, I'm > >> sure someone will point that out. > >> > >> > >> ---------------------------------------------------------------------- > >> COMMENT: > >> ---------------------------------------------------------------------- > >> > >> > >> > >> - intro, para 2: STUN only defines two auth modes > >> that I can see, and you only mention two here - > >> what's the 3rd one you mean? (Is it DTLS?) > >> > >> - What if >1 TURN session with different origins > >> is being setup from same client/browser? Does > >> that work? (Say two parallel calls, not the case > >> where the same resource is being accessed at the > >> same time loaded from different referring web > >> pages.) > >> > >> - I'd suggest to not allow >1 ORIGIN in a STUN > >> request? But that discussion seems to be in-hand. > >> > >> - section 2: suggest providng similar examples > >> for all schemes, http(s),sip & xmpp. > >> > >> - 2.1 & 2.2: MUST include web origin - couldn't > >> there be "private browsing" scenarios where that > >> MUST would be a problem? I'm not suggesting that > >> the origin exposes very much but I think a SHOULD > >> would be more appropriate. > >> > >> - 2.1 last para: source here means the webrtc > >> server right? That's a bit ambiguous and would be > >> better clarified. > >> > >> - What is the benefit of sending an empty origin > >> as opposed to no origin attribute? I don't see > >> any and the former just advertises that the > >> client is "privacy sensitive" which seems > >> incongruous. > >> > >> > >> > > > --bcaec548a791c3fccd0514647434 Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: quoted-printable
Hi Stephen & Spencer,

The authors a= nd implementors of STUN Origin have been discussing it - we'll send our= reply later today to the list.

- Alan -

On Thu, Apr 23,= 2015 at 8:35 AM, Stephen Farrell <stephen.farrell@cs.tcd.ie&g= t; wrote:


On 23/04/15 14:32, Spencer Dawkins at IETF wrote:
> Dear Tramsters,
>
> On Tue, Apr 21, 2015 at 10:36 AM, Stephen Farrell <stephen.farrell@cs.tcd.ie
>> wrote:
>
>> Stephen Farrell has entered the following ballot position for
>> draft-ietf-tram-stun-origin-05: Discussn
>
>
> I saw an excellent exchange with Barry on his Discuss for this draft, = but
> haven't seen a response to Stephen's yet. Did I miss it?
>
> If the answer is "as Stephen said, it IS a high-level Discuss, an= d we need
> to confer before responding", that's fine, or really any othe= r answer could
> be fine - I just didn't want the draft to get stalled ...

And I'd also like to chat about it today if possible - I think
this is one where getting a sense of the IESG's location on the
[crazy-farell,it-needed-to-be-said] spectrum would be good I
think. So I hope we don't skip over talking about this for the
lack of an author/WG response too.

S.

>
> Thanks!
>
> Spencer
>
>
>> When responding, please keep the subject line intact and reply to = all
>> email addresses included in the To and CC lines. (Feel free to cut= this
>> introductory paragraph, however.)
>>
>>
>> Please refer to http://www.ietf.org/iesg/statement/dis= cuss-criteria.html
>> for more information about IESG DISCUSS and COMMENT positions.
>>
>>
>> The document, along with other ballot positions, can be found here= :
>> http://datatracker.ietf.org/doc/draft-ietf-tram-st= un-origin/
>>
>>
>>
>> ------------------------------------------------------------------= ----
>> DISCUSS:
>> ------------------------------------------------------------------= ----
>>
>>
>> "Analytics" here together with the MUST include
>> statements could amount to a fancy way to
>> describe monetizing people's WebRTC calls in ways
>> that the end user will just not expect. I'd like
>> to check that we're not doing that, as it'd
>> arguably run counter to e.g. RFC7258 or to the
>> general trend towards data minimisation. And
>> making privacy worse, even by a little, seems
>> worse than making it better. (Note: I am here
>> asking about the STUN/TURN server being perhaps
>> unnecessarily told the origin, not the risk that
>> someone sees that in-transit, which is handled in
>> the draft already.)
>>
>> I do agree that the TURN 401-like challenge
>> use-case is perhaps needed, but I do not see that
>> other use cases need to see the origin for them
>> to work at all.=C2=A0 And I'm not sure that such a
>> spoofable origin is so useful for that TURN case,
>> esp. when there's parallel work on an
>> authenticated equivalent. (I mean the tram 3rd
>> party thing.) I also don't see that that is
>> needed for network management reasons - surely
>> everything needed for network managment is no
>> more nor less visible to the STUN or TURN servers
>> when this is used vs. when this is not used.
>>
>> So why are we pushing for this?=C2=A0 If it is really
>> only for so-called "analytics" then is that ok?
>> (And where can I find a definition of what that
>> means?)
>>
>> Apologies if this discuss seems somewhat high
>> level, but as well as the general concern, the
>> last paragraph of the current tram charter seems
>> to me to me to say that tram ought not make
>> privacy worse. But maybe I'm missing the
>> networking function that needs this - if so, I'm
>> sure someone will point that out.
>>
>>
>> ------------------------------------------------------------------= ----
>> COMMENT:
>> ------------------------------------------------------------------= ----
>>
>>
>>
>> - intro, para 2: STUN only defines two auth modes
>> that I can see, and you only mention two here -
>> what's the 3rd one you mean? (Is it DTLS?)
>>
>> - What if >1 TURN session with different origins
>> is being setup from same client/browser? Does
>> that work? (Say two parallel calls, not the case
>> where the same resource is being accessed at the
>> same time loaded from different referring web
>> pages.)
>>
>> - I'd suggest to not allow >1 ORIGIN in a STUN
>> request? But that discussion seems to be in-hand.
>>
>> - section 2: suggest providng similar examples
>> for all schemes, http(s),sip & xmpp.
>>
>> - 2.1 & 2.2: MUST include web origin - couldn't
>> there be "private browsing" scenarios where that
>> MUST would be a problem? I'm not suggesting that
>> the origin exposes very much but I think a SHOULD
>> would be more appropriate.
>>
>> - 2.1 last para: source here means the webrtc
>> server right? That's a bit ambiguous and would be
>> better clarified.
>>
>> - What is the benefit of sending an empty origin
>> as opposed to no origin attribute? I don't see
>> any and the former just advertises that the
>> client is "privacy sensitive" which seems
>> incongruous.
>>
>>
>>
>

--bcaec548a791c3fccd0514647434-- From nobody Thu Apr 23 07:20:29 2015 Return-Path: X-Original-To: tram@ietfa.amsl.com Delivered-To: tram@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 57AC41B30C7; Thu, 23 Apr 2015 07:20:28 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.999 X-Spam-Level: X-Spam-Status: No, score=-1.999 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, SPF_PASS=-0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id XKgNqdT6I3Mf; Thu, 23 Apr 2015 07:20:25 -0700 (PDT) Received: from mail-la0-x235.google.com (mail-la0-x235.google.com [IPv6:2a00:1450:4010:c03::235]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id E1F611B30D2; Thu, 23 Apr 2015 07:18:51 -0700 (PDT) Received: by laat2 with SMTP id t2so13748020laa.1; Thu, 23 Apr 2015 07:18:50 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :cc:content-type; bh=fNc+AQ0qkKKAC71wKXQpmPJmtflb1A+juSsod7Ms7bY=; b=XLkiWIrwX6itHGSzZs0zFHtCCz3blsaCps7pQQ9g0bFjso0DQZL4wi5GrNANi/P+8H EiSc5Z7cTE8Vrm6EQxk1Cotpl6m0jQ/p6gdhnPw+lAP44/0BDwITXI6D9Hznv24bqenn WcVZTjJ0A/8Rx0tLZyaDDyCNHmujsdLFQ4XsY1ebh6HLCqRjHzf5odxgTcoWPc7LSBKl g1L9uSzrpmUtyh7e4OUscQXzVY+pUWSOl3e7SpQLdAsIad43bF/Q7h4LEma62dtDmS+T pGXm4Y6RwP+bYB6RkWdWfmUoM6fC/GoLty/xrH/KHJweYUr6w4eQril0v1fj83XZTReN Nk4g== MIME-Version: 1.0 X-Received: by 10.152.1.227 with SMTP id 3mr2630313lap.61.1429798730400; Thu, 23 Apr 2015 07:18:50 -0700 (PDT) Received: by 10.152.129.3 with HTTP; Thu, 23 Apr 2015 07:18:50 -0700 (PDT) In-Reply-To: References: <20150421153635.27696.5302.idtracker@ietfa.amsl.com> <5538F53C.8060608@cs.tcd.ie> Date: Thu, 23 Apr 2015 09:18:50 -0500 Message-ID: From: Spencer Dawkins at IETF To: Alan Johnston Content-Type: multipart/alternative; boundary=089e013c66686d072e051464f51e Archived-At: Cc: "tram-chairs@ietf.org" , "tram@ietf.org" , draft-ietf-tram-stun-origin.shepherd@ietf.org, draft-ietf-tram-stun-origin.ad@ietf.org, Simon Perreault , The IESG , draft-ietf-tram-stun-origin@ietf.org, Stephen Farrell Subject: Re: [tram] Stephen Farrell's Discuss on draft-ietf-tram-stun-origin-05: (with DISCUSS and COMMENT) X-BeenThere: tram@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "Discussing the creation of a Turn Revised And Modernized \(TRAM\) WG, which goal is to consolidate the various initiatives to update TURN and STUN." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 23 Apr 2015 14:20:28 -0000 --089e013c66686d072e051464f51e Content-Type: text/plain; charset=UTF-8 Hi, Alan, Thanks for the update. The IESG would like to talk about this on the next telechat ("deserves voice discussion"), which is 5-14. Telechats are now open to anyone as observer (details for today's call at http://www.ietf.org/mail-archive/web/ietf-announce/current/msg14032.html would be the same for the 5-14 call), and if Simon would like to be on the call to answer questions, shepherds are always invited to do that ... And thanks to you all for addressing Barry's Discuss quickly. Spencer On Thu, Apr 23, 2015 at 8:42 AM, Alan Johnston wrote: > Hi Stephen & Spencer, > > The authors and implementors of STUN Origin have been discussing it - > we'll send our reply later today to the list. > > - Alan - > > On Thu, Apr 23, 2015 at 8:35 AM, Stephen Farrell < > stephen.farrell@cs.tcd.ie> wrote: > >> >> >> On 23/04/15 14:32, Spencer Dawkins at IETF wrote: >> > Dear Tramsters, >> > >> > On Tue, Apr 21, 2015 at 10:36 AM, Stephen Farrell < >> stephen.farrell@cs.tcd.ie >> >> wrote: >> > >> >> Stephen Farrell has entered the following ballot position for >> >> draft-ietf-tram-stun-origin-05: Discussn >> > >> > >> > I saw an excellent exchange with Barry on his Discuss for this draft, >> but >> > haven't seen a response to Stephen's yet. Did I miss it? >> > >> > If the answer is "as Stephen said, it IS a high-level Discuss, and we >> need >> > to confer before responding", that's fine, or really any other answer >> could >> > be fine - I just didn't want the draft to get stalled ... >> >> And I'd also like to chat about it today if possible - I think >> this is one where getting a sense of the IESG's location on the >> [crazy-farell,it-needed-to-be-said] spectrum would be good I >> think. So I hope we don't skip over talking about this for the >> lack of an author/WG response too. >> >> S. >> >> > >> > Thanks! >> > >> > Spencer >> > >> > >> >> When responding, please keep the subject line intact and reply to all >> >> email addresses included in the To and CC lines. (Feel free to cut this >> >> introductory paragraph, however.) >> >> >> >> >> >> Please refer to >> http://www.ietf.org/iesg/statement/discuss-criteria.html >> >> for more information about IESG DISCUSS and COMMENT positions. >> >> >> >> >> >> The document, along with other ballot positions, can be found here: >> >> http://datatracker.ietf.org/doc/draft-ietf-tram-stun-origin/ >> >> >> >> >> >> >> >> ---------------------------------------------------------------------- >> >> DISCUSS: >> >> ---------------------------------------------------------------------- >> >> >> >> >> >> "Analytics" here together with the MUST include >> >> statements could amount to a fancy way to >> >> describe monetizing people's WebRTC calls in ways >> >> that the end user will just not expect. I'd like >> >> to check that we're not doing that, as it'd >> >> arguably run counter to e.g. RFC7258 or to the >> >> general trend towards data minimisation. And >> >> making privacy worse, even by a little, seems >> >> worse than making it better. (Note: I am here >> >> asking about the STUN/TURN server being perhaps >> >> unnecessarily told the origin, not the risk that >> >> someone sees that in-transit, which is handled in >> >> the draft already.) >> >> >> >> I do agree that the TURN 401-like challenge >> >> use-case is perhaps needed, but I do not see that >> >> other use cases need to see the origin for them >> >> to work at all. And I'm not sure that such a >> >> spoofable origin is so useful for that TURN case, >> >> esp. when there's parallel work on an >> >> authenticated equivalent. (I mean the tram 3rd >> >> party thing.) I also don't see that that is >> >> needed for network management reasons - surely >> >> everything needed for network managment is no >> >> more nor less visible to the STUN or TURN servers >> >> when this is used vs. when this is not used. >> >> >> >> So why are we pushing for this? If it is really >> >> only for so-called "analytics" then is that ok? >> >> (And where can I find a definition of what that >> >> means?) >> >> >> >> Apologies if this discuss seems somewhat high >> >> level, but as well as the general concern, the >> >> last paragraph of the current tram charter seems >> >> to me to me to say that tram ought not make >> >> privacy worse. But maybe I'm missing the >> >> networking function that needs this - if so, I'm >> >> sure someone will point that out. >> >> >> >> >> >> ---------------------------------------------------------------------- >> >> COMMENT: >> >> ---------------------------------------------------------------------- >> >> >> >> >> >> >> >> - intro, para 2: STUN only defines two auth modes >> >> that I can see, and you only mention two here - >> >> what's the 3rd one you mean? (Is it DTLS?) >> >> >> >> - What if >1 TURN session with different origins >> >> is being setup from same client/browser? Does >> >> that work? (Say two parallel calls, not the case >> >> where the same resource is being accessed at the >> >> same time loaded from different referring web >> >> pages.) >> >> >> >> - I'd suggest to not allow >1 ORIGIN in a STUN >> >> request? But that discussion seems to be in-hand. >> >> >> >> - section 2: suggest providng similar examples >> >> for all schemes, http(s),sip & xmpp. >> >> >> >> - 2.1 & 2.2: MUST include web origin - couldn't >> >> there be "private browsing" scenarios where that >> >> MUST would be a problem? I'm not suggesting that >> >> the origin exposes very much but I think a SHOULD >> >> would be more appropriate. >> >> >> >> - 2.1 last para: source here means the webrtc >> >> server right? That's a bit ambiguous and would be >> >> better clarified. >> >> >> >> - What is the benefit of sending an empty origin >> >> as opposed to no origin attribute? I don't see >> >> any and the former just advertises that the >> >> client is "privacy sensitive" which seems >> >> incongruous. >> >> >> >> >> >> >> > >> > > --089e013c66686d072e051464f51e Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: quoted-printable
Hi, Alan,

Thanks for the update.=C2=A0<= /div>

The IESG would like to talk about this on the next= telechat ("deserves voice discussion"), which is 5-14.=C2=A0

Telechats are now open to anyone as observer (details= for today's call at=C2=A0http://www.ietf.org/mail-archive/we= b/ietf-announce/current/msg14032.html would be the same for the 5-14 ca= ll), and if Simon would like to be on the call to answer questions, shepher= ds are always invited to do that ...

And thanks to= you all for addressing Barry's Discuss quickly.

Spencer

On = Thu, Apr 23, 2015 at 8:42 AM, Alan Johnston <alan.b.johnston@gma= il.com> wrote:
Hi Stephe= n & Spencer,

The authors and implementors of STUN Or= igin have been discussing it - we'll send our reply later today to the = list.

- A= lan -

On Thu, Apr 23, 2015 at 8:3= 5 AM, Stephen Farrell <stephen.farrell@cs.tcd.ie> wr= ote:


On 23/04/15 14:32, Spencer Dawkins at IETF wrote:
> Dear Tramsters,
>
> On Tue, Apr 21, 2015 at 10:36 AM, Stephen Farrell <stephen.farrell@cs.tcd.ie
>> wrote:
>
>> Stephen Farrell has entered the following ballot position for
>> draft-ietf-tram-stun-origin-05: Discussn
>
>
> I saw an excellent exchange with Barry on his Discuss for this draft, = but
> haven't seen a response to Stephen's yet. Did I miss it?
>
> If the answer is "as Stephen said, it IS a high-level Discuss, an= d we need
> to confer before responding", that's fine, or really any othe= r answer could
> be fine - I just didn't want the draft to get stalled ...

And I'd also like to chat about it today if possible - I think
this is one where getting a sense of the IESG's location on the
[crazy-farell,it-needed-to-be-said] spectrum would be good I
think. So I hope we don't skip over talking about this for the
lack of an author/WG response too.

S.

>
> Thanks!
>
> Spencer
>
>
>> When responding, please keep the subject line intact and reply to = all
>> email addresses included in the To and CC lines. (Feel free to cut= this
>> introductory paragraph, however.)
>>
>>
>> Please refer to http://www.ietf.org/iesg/statement/dis= cuss-criteria.html
>> for more information about IESG DISCUSS and COMMENT positions.
>>
>>
>> The document, along with other ballot positions, can be found here= :
>> http://datatracker.ietf.org/doc/draft-ietf-tram-st= un-origin/
>>
>>
>>
>> ------------------------------------------------------------------= ----
>> DISCUSS:
>> ------------------------------------------------------------------= ----
>>
>>
>> "Analytics" here together with the MUST include
>> statements could amount to a fancy way to
>> describe monetizing people's WebRTC calls in ways
>> that the end user will just not expect. I'd like
>> to check that we're not doing that, as it'd
>> arguably run counter to e.g. RFC7258 or to the
>> general trend towards data minimisation. And
>> making privacy worse, even by a little, seems
>> worse than making it better. (Note: I am here
>> asking about the STUN/TURN server being perhaps
>> unnecessarily told the origin, not the risk that
>> someone sees that in-transit, which is handled in
>> the draft already.)
>>
>> I do agree that the TURN 401-like challenge
>> use-case is perhaps needed, but I do not see that
>> other use cases need to see the origin for them
>> to work at all.=C2=A0 And I'm not sure that such a
>> spoofable origin is so useful for that TURN case,
>> esp. when there's parallel work on an
>> authenticated equivalent. (I mean the tram 3rd
>> party thing.) I also don't see that that is
>> needed for network management reasons - surely
>> everything needed for network managment is no
>> more nor less visible to the STUN or TURN servers
>> when this is used vs. when this is not used.
>>
>> So why are we pushing for this?=C2=A0 If it is really
>> only for so-called "analytics" then is that ok?
>> (And where can I find a definition of what that
>> means?)
>>
>> Apologies if this discuss seems somewhat high
>> level, but as well as the general concern, the
>> last paragraph of the current tram charter seems
>> to me to me to say that tram ought not make
>> privacy worse. But maybe I'm missing the
>> networking function that needs this - if so, I'm
>> sure someone will point that out.
>>
>>
>> ------------------------------------------------------------------= ----
>> COMMENT:
>> ------------------------------------------------------------------= ----
>>
>>
>>
>> - intro, para 2: STUN only defines two auth modes
>> that I can see, and you only mention two here -
>> what's the 3rd one you mean? (Is it DTLS?)
>>
>> - What if >1 TURN session with different origins
>> is being setup from same client/browser? Does
>> that work? (Say two parallel calls, not the case
>> where the same resource is being accessed at the
>> same time loaded from different referring web
>> pages.)
>>
>> - I'd suggest to not allow >1 ORIGIN in a STUN
>> request? But that discussion seems to be in-hand.
>>
>> - section 2: suggest providng similar examples
>> for all schemes, http(s),sip & xmpp.
>>
>> - 2.1 & 2.2: MUST include web origin - couldn't
>> there be "private browsing" scenarios where that
>> MUST would be a problem? I'm not suggesting that
>> the origin exposes very much but I think a SHOULD
>> would be more appropriate.
>>
>> - 2.1 last para: source here means the webrtc
>> server right? That's a bit ambiguous and would be
>> better clarified.
>>
>> - What is the benefit of sending an empty origin
>> as opposed to no origin attribute? I don't see
>> any and the former just advertises that the
>> client is "privacy sensitive" which seems
>> incongruous.
>>
>>
>>
>


--089e013c66686d072e051464f51e-- From nobody Thu Apr 23 10:18:47 2015 Return-Path: X-Original-To: tram@ietfa.amsl.com Delivered-To: tram@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 677B21ACDEA; Thu, 23 Apr 2015 10:18:46 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.899 X-Spam-Level: X-Spam-Status: No, score=-1.899 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, TVD_SPACE_RATIO=0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id alzQ43H3_adt; Thu, 23 Apr 2015 10:18:45 -0700 (PDT) Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 4B9291ACDFD; Thu, 23 Apr 2015 10:18:23 -0700 (PDT) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit To: , , , , , X-Test-IDTracker: no X-IETF-IDTracker: 6.0.1.p1 Auto-Submitted: auto-generated Precedence: bulk Message-ID: <20150423171823.16505.994.idtracker@ietfa.amsl.com> Date: Thu, 23 Apr 2015 10:18:23 -0700 From: IETF Secretariat Archived-At: Subject: [tram] ID Tracker State Update Notice: X-BeenThere: tram@ietf.org X-Mailman-Version: 2.1.15 List-Id: "Discussing the creation of a Turn Revised And Modernized \(TRAM\) WG, which goal is to consolidate the various initiatives to update TURN and STUN." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 23 Apr 2015 17:18:46 -0000 IESG state changed to IESG Evaluation::Revised I-D Needed from IESG Evaluation ID Tracker URL: http://datatracker.ietf.org/doc/draft-ietf-tram-stun-origin/ From nobody Thu Apr 23 10:18:55 2015 Return-Path: X-Original-To: tram@ietfa.amsl.com Delivered-To: tram@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 05C5E1ACDCA; Thu, 23 Apr 2015 10:18:54 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.899 X-Spam-Level: X-Spam-Status: No, score=-1.899 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, TVD_SPACE_RATIO=0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Q62wEQMM13Dh; Thu, 23 Apr 2015 10:18:53 -0700 (PDT) Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id A2AE31ACDD2; Thu, 23 Apr 2015 10:18:36 -0700 (PDT) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit To: , , , , , , , X-Test-IDTracker: no X-IETF-IDTracker: 6.0.1.p1 Auto-Submitted: auto-generated Precedence: bulk Message-ID: <20150423171836.12744.83948.idtracker@ietfa.amsl.com> Date: Thu, 23 Apr 2015 10:18:36 -0700 From: IETF Secretariat Archived-At: Subject: [tram] Telechat update notice: X-BeenThere: tram@ietf.org X-Mailman-Version: 2.1.15 List-Id: "Discussing the creation of a Turn Revised And Modernized \(TRAM\) WG, which goal is to consolidate the various initiatives to update TURN and STUN." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 23 Apr 2015 17:18:54 -0000 Telechat date has been changed to 2015-05-14 from 2015-04-23 ID Tracker URL: http://datatracker.ietf.org/doc/draft-ietf-tram-stun-origin/ From nobody Fri Apr 24 03:43:14 2015 Return-Path: X-Original-To: tram@ietfa.amsl.com Delivered-To: tram@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 3B3251B3884; Wed, 22 Apr 2015 10:14:08 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.611 X-Spam-Level: X-Spam-Status: No, score=-2.611 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id YD6tUGkyZlge; Wed, 22 Apr 2015 10:14:06 -0700 (PDT) Received: from prod-mail-xrelay07.akamai.com (prod-mail-xrelay07.akamai.com [72.246.2.115]) by ietfa.amsl.com (Postfix) with ESMTP id 8D83F1AD1A6; Wed, 22 Apr 2015 10:14:02 -0700 (PDT) Received: from prod-mail-xrelay07.akamai.com (localhost.localdomain [127.0.0.1]) by postfix.imss70 (Postfix) with ESMTP id E138148F39; Wed, 22 Apr 2015 17:14:01 +0000 (GMT) Received: from prod-mail-relay07.akamai.com (prod-mail-relay07.akamai.com [172.17.121.112]) by prod-mail-xrelay07.akamai.com (Postfix) with ESMTP id D4CE748F38; Wed, 22 Apr 2015 17:14:01 +0000 (GMT) Received: from email.msg.corp.akamai.com (ecp.msg.corp.akamai.com [172.27.123.34]) by prod-mail-relay07.akamai.com (Postfix) with ESMTP id C959380040; Wed, 22 Apr 2015 17:14:01 +0000 (GMT) Received: from USMA1EX-DAG1MB2.msg.corp.akamai.com (172.27.123.102) by usma1ex-dag1mb4.msg.corp.akamai.com (172.27.123.104) with Microsoft SMTP Server (TLS) id 15.0.913.22; Wed, 22 Apr 2015 13:14:01 -0400 Received: from USMA1EX-DAG1MB2.msg.corp.akamai.com ([172.27.123.102]) by usma1ex-dag1mb2.msg.corp.akamai.com ([172.27.123.102]) with mapi id 15.00.0913.011; Wed, 22 Apr 2015 13:13:42 -0400 From: "Salz, Rich" To: Spencer Dawkins at IETF Thread-Topic: [tram] Stephen Farrell's Discuss on draft-ietf-tram-turn-third-party-authz-13: (with DISCUSS and COMMENT) Thread-Index: AdB3YVGPz12ySXkWT06k1SM3uWcWXAFIhZcAAA98AgAAB6HLsP//6CYAgABCdGCAAJMLAIAAPutw Date: Wed, 22 Apr 2015 17:13:42 +0000 Message-ID: References: <913383AAA69FF945B8F946018B75898A4120E0BD@xmb-rcd-x10.cisco.com> <55369856.7050203@akamai.com> <913383AAA69FF945B8F946018B75898A41214674@xmb-rcd-x10.cisco.com> <913383AAA69FF945B8F946018B75898A4121478B@xmb-rcd-x10.cisco.com> <30eaf35d875745128662076920f72ae8@usma1ex-dag1mb2.msg.corp.akamai.com> In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [172.19.41.188] Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 MIME-Version: 1.0 Archived-At: X-Mailman-Approved-At: Fri, 24 Apr 2015 03:43:12 -0700 Cc: "tram-chairs@ietf.org" , "tram@ietf.org" , "rlb@ipv.sx" , "Tirumaleswar Reddy \(tireddy\)" , "Williams, Brandon" , Martin Thomson , "Stephen Farrell \(stephen.farrell@cs.tcd.ie\)" Subject: Re: [tram] Stephen Farrell's Discuss on draft-ietf-tram-turn-third-party-authz-13: (with DISCUSS and COMMENT) X-BeenThere: tram@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "Discussing the creation of a Turn Revised And Modernized \(TRAM\) WG, which goal is to consolidate the various initiatives to update TURN and STUN." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 22 Apr 2015 17:14:08 -0000 PiBidXQgY291bGQgeW91IGV4cGxhaW4gdG8gbWUgKEknbSB0aGlua2luZyBsaWtlIGEgc2VudGVu Y2UsIG5vdCBsaWtlIGEgdGhlc2lzKSBvbiB3aHkgdGhvc2UgY29uY2VybnMgZG9uJ3QgYXBwbHk/ DQoNClN1cmUuICBGaXJzdCwgbG9vayBhdCBodHRwczovL3Rvb2xzLmlldGYub3JnL2h0bWwvcmZj NjE5NCNzZWN0aW9uLTMgIGFuZCBxdW90ZSB0aGF0IDopDQoNClNlY29uZCwgdGhpcyBpcyBub3Qg YmVpbmcgdXNlZCBhcyBhIHB1YmxpYyBzaWduYXR1cmUgbWVjaGFuaXNtLCBidXQgYXMgYSBwcml2 YXRlIGtleSBmb3IgYW4gSE1BQy4gIFNvIHlvdSBjYW4ndCBtb2RpZnkgIm9yaWdpbmFsIGNvbnRl bnQiIHRvIGZpbmQgYSBjb2xsaXNpb24gc2luY2UgeW91IGRvbid0IGhhdmUgdGhlIGNvbnRlbnQs IGFuZCBtb3JlIGltcG9ydGFudGx5LCB5b3UgZG9uJ3QgaGF2ZSB0aGUgZGlnZXN0IHZhbHVlIGZv ciB3aGljaCB0aGUgYXR0YWNrZXIgaXMgdHJ5aW5nIHRvIGZpbmQgYSBjb2xsaXNpb24uDQoNCkhv cGUgdGhhdCBoZWxwcy4gDQo= From nobody Sun Apr 26 23:50:18 2015 Return-Path: X-Original-To: tram@ietfa.amsl.com Delivered-To: tram@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 2B6A81A017D; Sun, 26 Apr 2015 23:50:16 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.9 X-Spam-Level: X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Vtd7etnvaobE; Sun, 26 Apr 2015 23:50:15 -0700 (PDT) Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 04F721A012D; Sun, 26 Apr 2015 23:50:15 -0700 (PDT) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: internet-drafts@ietf.org To: X-Test-IDTracker: no X-IETF-IDTracker: 6.0.1.p1 Auto-Submitted: auto-generated Precedence: bulk Message-ID: <20150427065015.25723.40101.idtracker@ietfa.amsl.com> Date: Sun, 26 Apr 2015 23:50:15 -0700 Archived-At: Cc: tram@ietf.org Subject: [tram] I-D Action: draft-ietf-tram-turn-third-party-authz-15.txt X-BeenThere: tram@ietf.org X-Mailman-Version: 2.1.15 List-Id: "Discussing the creation of a Turn Revised And Modernized \(TRAM\) WG, which goal is to consolidate the various initiatives to update TURN and STUN." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 27 Apr 2015 06:50:16 -0000 A New Internet-Draft is available from the on-line Internet-Drafts directories. This draft is a work item of the TURN Revised and Modernized Working Group of the IETF. Title : Session Traversal Utilities for NAT (STUN) Extension for Third Party Authorization Authors : Tirumaleswar Reddy Prashanth Patil Ram Mohan Ravindranath Justin Uberti Filename : draft-ietf-tram-turn-third-party-authz-15.txt Pages : 23 Date : 2015-04-26 Abstract: This document proposes the use of OAuth 2.0 to obtain and validate ephemeral tokens that can be used for Session Traversal Utilities for NAT (STUN) authentication. The usage of ephemeral tokens ensures that access to a STUN server can be controlled even if the tokens are compromised. The IETF datatracker status page for this draft is: https://datatracker.ietf.org/doc/draft-ietf-tram-turn-third-party-authz/ There's also a htmlized version available at: http://tools.ietf.org/html/draft-ietf-tram-turn-third-party-authz-15 A diff from the previous version is available at: http://www.ietf.org/rfcdiff?url2=draft-ietf-tram-turn-third-party-authz-15 Please note that it may take a couple of minutes from the time of submission until the htmlized version and diff are available at tools.ietf.org. Internet-Drafts are also available by anonymous FTP at: ftp://ftp.ietf.org/internet-drafts/ From nobody Sun Apr 26 23:56:03 2015 Return-Path: X-Original-To: tram@ietfa.amsl.com Delivered-To: tram@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 69EDC1A0235; Sun, 26 Apr 2015 23:56:01 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -14.511 X-Spam-Level: X-Spam-Status: No, score=-14.511 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_HI=-5, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id YchHQ8eF-aU7; Sun, 26 Apr 2015 23:56:00 -0700 (PDT) Received: from alln-iport-4.cisco.com (alln-iport-4.cisco.com [173.37.142.91]) (using TLSv1 with cipher RC4-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id A372A1A017D; Sun, 26 Apr 2015 23:55:59 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=1668; q=dns/txt; s=iport; t=1430117759; x=1431327359; h=from:to:subject:date:message-id:references:in-reply-to: content-transfer-encoding:mime-version; bh=ont2NiT5Efq32WtnPoIIwLIlw31fVd9jTh/Dj4qozFg=; b=gvbVbpKVzpB43neTxDfLF6oEkJH5624w5C4zFolaPKmLlPcJ54zY3khh wyYlA5GuQcpmV00Ufmpg2+oEgIW0l2JJyHoKMh8d0twxYfKdhFIF3iKsa AwIzxjsVRXSqPcLWYX9bLkN9isddrhCYbCwiNp5JBNfrX9RelrW9/SCpj I=; X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: A0BxBABj3D1V/4sNJK1cgwxTVwUFgxXCOmYJgVSGAgIcgRA4FAEBAQEBAQGBCoQgAQEBBCMRQw4EAgEIEQQBAQMCBh0DAgICHxEUAQgIAgQBEggBiA4DEQgFsSqOAQ2FQQEBAQEBAQEBAQEBAQEBAQEBAQEBAReBIYoXgk2CBxYiBoJiL4EWBZFVhAGEZIJ2PYMLiiKGVSODdG+BRIEAAQEB X-IronPort-AV: E=Sophos;i="5.11,655,1422921600"; d="scan'208";a="144801399" Received: from alln-core-6.cisco.com ([173.36.13.139]) by alln-iport-4.cisco.com with ESMTP; 27 Apr 2015 06:55:58 +0000 Received: from xhc-rcd-x14.cisco.com (xhc-rcd-x14.cisco.com [173.37.183.88]) by alln-core-6.cisco.com (8.14.5/8.14.5) with ESMTP id t3R6twZM004167 (version=TLSv1/SSLv3 cipher=AES128-SHA bits=128 verify=FAIL); Mon, 27 Apr 2015 06:55:58 GMT Received: from xmb-rcd-x10.cisco.com ([169.254.15.218]) by xhc-rcd-x14.cisco.com ([173.37.183.88]) with mapi id 14.03.0195.001; Mon, 27 Apr 2015 01:55:58 -0500 From: "Tirumaleswar Reddy (tireddy)" To: "tram-chairs@ietf.org" , "draft-ietf-tram-turn-third-party-authz@ietf.org" , "gonzalo.camarillo@ericsson.com" , "draft-ietf-tram-turn-third-party-authz.ad@ietf.org" , "draft-ietf-tram-turn-third-party-authz.shepherd@ietf.org" , "spencerdawkins.ietf@gmail.com" , "stephen.farrell@cs.tcd.ie" , "tram@ietf.org" Thread-Topic: New Version Notification - draft-ietf-tram-turn-third-party-authz-15.txt Thread-Index: AQHQgLZtUvcSIxUMxkKEqo/9y6vXxJ1gbNkg Date: Mon, 27 Apr 2015 06:55:57 +0000 Message-ID: <913383AAA69FF945B8F946018B75898A4781FC5E@xmb-rcd-x10.cisco.com> References: <20150427065015.25723.2654.idtracker@ietfa.amsl.com> In-Reply-To: <20150427065015.25723.2654.idtracker@ietfa.amsl.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.65.18.69] Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 MIME-Version: 1.0 Archived-At: Subject: Re: [tram] New Version Notification - draft-ietf-tram-turn-third-party-authz-15.txt X-BeenThere: tram@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "Discussing the creation of a Turn Revised And Modernized \(TRAM\) WG, which goal is to consolidate the various initiatives to update TURN and STUN." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 27 Apr 2015 06:56:01 -0000 VGhpcyByZXZpc2lvbiBhZGRyZXNzZXMgY29tbWVudHMgZnJvbSBTdGVwaGVuLCBCcmFuZG9uIGFu ZCBSaWNoLg0KDQotVGlydQ0KDQo+IC0tLS0tT3JpZ2luYWwgTWVzc2FnZS0tLS0tDQo+IEZyb206 IGludGVybmV0LWRyYWZ0c0BpZXRmLm9yZyBbbWFpbHRvOmludGVybmV0LWRyYWZ0c0BpZXRmLm9y Z10NCj4gU2VudDogTW9uZGF5LCBBcHJpbCAyNywgMjAxNSAxMjoyMCBQTQ0KPiBUbzogdHJhbS1j aGFpcnNAaWV0Zi5vcmc7IGRyYWZ0LWlldGYtdHJhbS10dXJuLXRoaXJkLXBhcnR5LWF1dGh6QGll dGYub3JnOw0KPiBnb256YWxvLmNhbWFyaWxsb0Blcmljc3Nvbi5jb207IGRyYWZ0LWlldGYtdHJh bS10dXJuLXRoaXJkLXBhcnR5LQ0KPiBhdXRoei5hZEBpZXRmLm9yZzsgZHJhZnQtaWV0Zi10cmFt LXR1cm4tdGhpcmQtcGFydHktYXV0aHouc2hlcGhlcmRAaWV0Zi5vcmc7DQo+IHNwZW5jZXJkYXdr aW5zLmlldGZAZ21haWwuY29tOyBzdGVwaGVuLmZhcnJlbGxAY3MudGNkLmllDQo+IFN1YmplY3Q6 IE5ldyBWZXJzaW9uIE5vdGlmaWNhdGlvbiAtIGRyYWZ0LWlldGYtdHJhbS10dXJuLXRoaXJkLXBh cnR5LWF1dGh6LQ0KPiAxNS50eHQNCj4gDQo+IA0KPiBBIG5ldyB2ZXJzaW9uICgtMTUpIGhhcyBi ZWVuIHN1Ym1pdHRlZCBmb3IgZHJhZnQtaWV0Zi10cmFtLXR1cm4tdGhpcmQtcGFydHktDQo+IGF1 dGh6Og0KPiBodHRwOi8vd3d3LmlldGYub3JnL2ludGVybmV0LWRyYWZ0cy9kcmFmdC1pZXRmLXRy YW0tdHVybi10aGlyZC1wYXJ0eS1hdXRoei0NCj4gMTUudHh0DQo+IA0KPiANCj4gVGhlIElFVEYg ZGF0YXRyYWNrZXIgcGFnZSBmb3IgdGhpcyBJbnRlcm5ldC1EcmFmdCBpczoNCj4gaHR0cHM6Ly9k YXRhdHJhY2tlci5pZXRmLm9yZy9kb2MvZHJhZnQtaWV0Zi10cmFtLXR1cm4tdGhpcmQtcGFydHkt YXV0aHovDQo+IA0KPiBEaWZmIGZyb20gcHJldmlvdXMgdmVyc2lvbjoNCj4gaHR0cDovL3d3dy5p ZXRmLm9yZy9yZmNkaWZmP3VybDI9ZHJhZnQtaWV0Zi10cmFtLXR1cm4tdGhpcmQtcGFydHktYXV0 aHotMTUNCj4gDQo+IFBsZWFzZSBub3RlIHRoYXQgaXQgbWF5IHRha2UgYSBjb3VwbGUgb2YgbWlu dXRlcyBmcm9tIHRoZSB0aW1lIG9mDQo+IHN1Ym1pc3Npb24gdW50aWwgdGhlIGh0bWxpemVkIHZl cnNpb24gYW5kIGRpZmYgYXJlIGF2YWlsYWJsZSBhdCB0b29scy5pZXRmLm9yZy4NCj4gDQo+IElF VEYgU2VjcmV0YXJpYXQuDQoNCg== From nobody Tue Apr 28 13:56:27 2015 Return-Path: X-Original-To: tram@ietfa.amsl.com Delivered-To: tram@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 653941A8A06 for ; Tue, 28 Apr 2015 13:56:21 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.21 X-Spam-Level: X-Spam-Status: No, score=-4.21 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, T_RP_MATCHES_RCVD=-0.01] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id o3uxV9xmVJmi for ; Tue, 28 Apr 2015 13:56:16 -0700 (PDT) Received: from mercury.scss.tcd.ie (mercury.scss.tcd.ie [134.226.56.6]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 6A8481A8942 for ; Tue, 28 Apr 2015 13:53:54 -0700 (PDT) Received: from localhost (localhost [127.0.0.1]) by mercury.scss.tcd.ie (Postfix) with ESMTP id 73124BE35 for ; Tue, 28 Apr 2015 21:53:52 +0100 (IST) X-Virus-Scanned: Debian amavisd-new at scss.tcd.ie Received: from mercury.scss.tcd.ie ([127.0.0.1]) by localhost (mercury.scss.tcd.ie [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id t8HC0pBbzhQs for ; Tue, 28 Apr 2015 21:53:51 +0100 (IST) Received: from [10.87.48.73] (unknown [86.42.29.198]) by mercury.scss.tcd.ie (Postfix) with ESMTPSA id D22B6BDCC for ; Tue, 28 Apr 2015 21:53:50 +0100 (IST) Message-ID: <553FF35E.4030203@cs.tcd.ie> Date: Tue, 28 Apr 2015 21:53:50 +0100 From: Stephen Farrell User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:31.0) Gecko/20100101 Thunderbird/31.6.0 MIME-Version: 1.0 To: "tram@ietf.org" OpenPGP: id=D66EA7906F0B897FB2E97D582F3C8736805F8DA2; url= Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 8bit Archived-At: Subject: [tram] signature based 3rd party scheme X-BeenThere: tram@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "Discussing the creation of a Turn Revised And Modernized \(TRAM\) WG, which goal is to consolidate the various initiatives to update TURN and STUN." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 28 Apr 2015 20:56:21 -0000 Hiya, As part of my discuss [1] on draft-ietf-tram-turn-third-party-authz [2] I questioned why the WG have only defined a shared secret based scheme (with the secret between the TURN and WebRTC servers in that case). That requires pre-arrangement between WebRTC servers and TURN servers, which I think isn't always going to be easily done, and seems to me to assume certain business models and to be more suited for larger providers (for both servers) and less suited for what may well be a fairly substantial long tail of WebRTC and TURN servers. Note that I am not saying that the scheme from [2] is broken but that it has some properties that are less desirable and the DISCUSS point is to ask if the WG had looked at other possibilities. I'm told that the WG have not, so this mail is to ask the question in more detail. (When this thread has run it's course, or if the response to this is crickets, I'll clear that discuss point.) I could envisage a signature based scheme, where the WebRTC server digitally signs some form of token that the browser can then present to the TURN server and that the TURN server can then validate (if it wants to). That could provide accountability and be a sufficient counter against abuse of the TURN server's bandwidth. I could actually see lots of potential usage models that could be built on such a scheme, some involving someone billing someone and others not. But the main point is that the would be no a-priori need for co-ordination between the TURN server and the WebRTC server ahead of time. The above is obviously just a sketch and a real scheme derived from that would not have otherwise identical properties to [2] but should I think be something that could be used and more easily deployed than the scheme from [2]. So - would such a scheme be attractive to the WG, and if so, then what's the right course of action wrt [2]? (That could be to push [2] along and start another draft on a signature based scheme, or to just push [2[ along, or something else.) Thanks, S. PS: I'm not subscribed to this list, so would appreciate if you'd cc me on responses. [1] https://datatracker.ietf.org/doc/draft-ietf-tram-turn-third-party-authz/ballot/#stephen-farrell [2] https://tools.ietf.org/html/draft-ietf-tram-turn-third-party-authz-15 From nobody Tue Apr 28 14:22:06 2015 Return-Path: X-Original-To: tram@ietfa.amsl.com Delivered-To: tram@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id ADCAC1A89AF; Tue, 28 Apr 2015 14:22:05 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.9 X-Spam-Level: X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id wKjZBT_ZgNbg; Tue, 28 Apr 2015 14:22:04 -0700 (PDT) Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 06D651A032D; Tue, 28 Apr 2015 14:22:04 -0700 (PDT) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: "Stephen Farrell" To: "The IESG" X-Test-IDTracker: no X-IETF-IDTracker: 6.0.2 Auto-Submitted: auto-generated Precedence: bulk Message-ID: <20150428212204.9453.5930.idtracker@ietfa.amsl.com> Date: Tue, 28 Apr 2015 14:22:04 -0700 Archived-At: Cc: tram-chairs@ietf.org, tram@ietf.org, draft-ietf-tram-turn-third-party-authz@ietf.org, gonzalo.camarillo@ericsson.com, draft-ietf-tram-turn-third-party-authz.ad@ietf.org, draft-ietf-tram-turn-third-party-authz.shepherd@ietf.org Subject: [tram] Stephen Farrell's Discuss on draft-ietf-tram-turn-third-party-authz-15: (with DISCUSS and COMMENT) X-BeenThere: tram@ietf.org X-Mailman-Version: 2.1.15 List-Id: "Discussing the creation of a Turn Revised And Modernized \(TRAM\) WG, which goal is to consolidate the various initiatives to update TURN and STUN." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 28 Apr 2015 21:22:05 -0000 Stephen Farrell has entered the following ballot position for draft-ietf-tram-turn-third-party-authz-15: Discuss When responding, please keep the subject line intact and reply to all email addresses included in the To and CC lines. (Feel free to cut this introductory paragraph, however.) Please refer to https://www.ietf.org/iesg/statement/discuss-criteria.html for more information about IESG DISCUSS and COMMENT positions. The document, along with other ballot positions, can be found here: https://datatracker.ietf.org/doc/draft-ietf-tram-turn-third-party-authz/ ---------------------------------------------------------------------- DISCUSS: ---------------------------------------------------------------------- Edited discuss ballot after chats around Dallas. (1) cleared (2) Please consider whether a signature based scheme that does not require pre-shared keys between the TURN and (in particular) WebRTC server could be useful to support. (Either in this document or elsewhere.) There should be use cases where that offers sufficient accountability for use of TURN and it ought allow some deployments that are less easy with this kind of pre-shared keys approach. The DISCUSS here is to check if the WG want to take that approach, either now or later. (I've sent a mail to the WG list, this will clear shortly once that is discussed.) (3) cleared (but see now comments below this is still badly done IMO) ---------------------------------------------------------------------- COMMENT: ---------------------------------------------------------------------- NEW COMMENTS: - As some others have said before, this is still not an easy read and though better, could still do with more editorial work. - Why are 4.1.1 and 4.1.2 still just examples. You need one to be MTI or you won't get interop. Indeed 4.1.2 says you SHOULD do 4.1.1! Please just bite the bullet and clearly say that 4.1.1 is MTI. - 4.1.1, "HTTPS MUST be used for mutual authentication" is not a very clear way to say it. You mean that HTTPS MUST be used and that TLS with mutual authentication based on client certificates MUST be used. How does the WebRTC server know what CA the TURN server is going to use? That's another point of pre-arrangement that will be needed. - 4.1.1, I thought the web folks frowned upon specifying URI parameters like that. Shouldn't you at least use a .well-known URL or something so as to not get on someone eles's lawn? - 6.2, PATH_MTU is not the correct term. There are two paths involved, from WebRTC to browser and from browser to TURN server and MTUs need not be the same on those paths. OLD COMMENTS BELOW HERE, I DIDN'T CHECK THOSE. - I really think this would benefit from some wider review and I don't think it's ready as-is. - I agree with Richard's discuss points. - intro: "impossible in web applications" isn't really true in principle, but impossible in WebRTC as it uses JS is true. - Assuming the AS that can authorize the user shares a secret with the STUN server chosen by the WebRTC server seems very brittle. Why would that be true in general? - 4.1.1: Hmmm. How many people use KeyProv I wonder? - 4.1.2 - which "two servers"? WebRTC can have more servers than that. - 4.1.2 - now we're using TLS mutual auth? And how does the TLS client know which CA to use that'll work with the TLS server here? I don't think that'll scale will it? - 4.1.3 - this looks like what the WG/authors really want, would that be a fair statement? - 9: Figure 2 should be way up at the top of the document and not here - 9: Why 5 seconds? From nobody Tue Apr 28 19:59:22 2015 Return-Path: X-Original-To: tram@ietfa.amsl.com Delivered-To: tram@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 404BE1A872C for ; Tue, 28 Apr 2015 19:59:21 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -14.511 X-Spam-Level: X-Spam-Status: No, score=-14.511 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_HI=-5, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id bBUjqIv-Dp9l for ; Tue, 28 Apr 2015 19:59:19 -0700 (PDT) Received: from rcdn-iport-4.cisco.com (rcdn-iport-4.cisco.com [173.37.86.75]) (using TLSv1 with cipher RC4-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 4B45A1A870C for ; Tue, 28 Apr 2015 19:59:15 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=3454; q=dns/txt; s=iport; t=1430276355; x=1431485955; h=from:to:subject:date:message-id: content-transfer-encoding:mime-version; bh=hC4n1A+AQVva3S4dHXIvyjWGUBsUJfgKgUmAUcZs3FA=; b=QCw6w6rIseWqkTTJ0ZGrmT7jCdZ7yScgISZYRHNqBwH1e1Rj2LmCixWS MrxDBWy+amqiSg1c1jgv4MOoLHNBST1nXg4QSoXXSv6cuOj6JgOyv3giF jv5eE85FII+ljTWBlv3ouVhQKr+FJrzQ2dirgzcd+afzkj5OGGd4BlXH0 U=; X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: A0BCBQDDSEBV/5JdJa1cgwxTXAXGOoI4CoYEAoE2TAEBAQEBAYELhCABAQEDAQEBATc0FwYBCBEEAQELFAkuCxQJCQEEARIIiBsIDcctAQEBAQEBAQEBAQEBAQEBAQEBAQEBEwSLOIQzAQEFGj6DEYEWBZFlhAScJyOBZYIPb4EEBxcGHIEBAQEB X-IronPort-AV: E=Sophos;i="5.11,668,1422921600"; d="scan'208";a="415664848" Received: from rcdn-core-10.cisco.com ([173.37.93.146]) by rcdn-iport-4.cisco.com with ESMTP; 29 Apr 2015 02:59:14 +0000 Received: from xhc-aln-x09.cisco.com (xhc-aln-x09.cisco.com [173.36.12.83]) by rcdn-core-10.cisco.com (8.14.5/8.14.5) with ESMTP id t3T2xEa9032341 (version=TLSv1/SSLv3 cipher=AES128-SHA bits=128 verify=FAIL); Wed, 29 Apr 2015 02:59:14 GMT Received: from xmb-rcd-x10.cisco.com ([169.254.15.218]) by xhc-aln-x09.cisco.com ([173.36.12.83]) with mapi id 14.03.0195.001; Tue, 28 Apr 2015 21:59:14 -0500 From: "Tirumaleswar Reddy (tireddy)" To: Stephen Farrell , "tram@ietf.org" Thread-Topic: [tram] signature based 3rd party scheme Thread-Index: AdCCKHW9CjsMzThwTKab4ELJ3vVgMQ== Date: Wed, 29 Apr 2015 02:59:13 +0000 Message-ID: <913383AAA69FF945B8F946018B75898A47821E90@xmb-rcd-x10.cisco.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.65.67.11] Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 Archived-At: Subject: Re: [tram] signature based 3rd party scheme X-BeenThere: tram@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "Discussing the creation of a Turn Revised And Modernized \(TRAM\) WG, which goal is to consolidate the various initiatives to update TURN and STUN." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 29 Apr 2015 02:59:21 -0000 > -----Original Message----- > From: tram [mailto:tram-bounces@ietf.org] On Behalf Of Stephen Farrell > Sent: Wednesday, April 29, 2015 2:24 AM > To: tram@ietf.org > Subject: [tram] signature based 3rd party scheme >=20 >=20 > Hiya, >=20 > As part of my discuss [1] on draft-ietf-tram-turn-third-party-authz [2] I > questioned why the WG have only defined a shared secret based scheme > (with the secret between the TURN and WebRTC servers in that case). That > requires pre-arrangement between WebRTC servers and TURN servers, which > I think isn't always going to be easily done, and seems to me to assume > certain business models and to be more suited for larger providers (for b= oth > servers) and less suited for what may well be a fairly substantial long t= ail of > WebRTC and TURN servers. Note that I am not saying that the scheme from > [2] is broken but that it has some properties that are less desirable and= the > DISCUSS point is to ask if the WG had looked at other possibilities. I'm = told > that the WG have not, so this mail is to ask the question in more detail. > (When this thread has run it's course, or if the response to this is cric= kets, I'll > clear that discuss point.) >=20 > I could envisage a signature based scheme, where the WebRTC server > digitally signs some form of token that the browser can then present to t= he > TURN server and that the TURN server can then validate (if it wants to). = That > could provide accountability and be a sufficient counter against abuse of= the > TURN server's bandwidth. I could actually see lots of potential usage mod= els > that could be built on such a scheme, some involving someone billing > someone and others not. But the main point is that the would be no a-prio= ri > need for co-ordination between the TURN server and the WebRTC server > ahead of time. >=20 > The above is obviously just a sketch and a real scheme derived from that > would not have otherwise identical properties to [2] but should I think b= e > something that could be used and more easily deployed than the scheme > from [2]. >=20 > So - would such a scheme be attractive to the WG, and if so, then what's = the > right course of action wrt [2]? (That could be to push [2] along and star= t > another draft on a signature based scheme, or to just push [2[ along, or > something else.) Passive attacks could occur in TURN due to lack of integrity protection. Fo= r example, a passive attacker could monitor Allocate request/response betwe= en the client and TURN server and make a Refresh request with a requested l= ifetime of 0 to delete the allocation. Message integrity of TURN messages e= nsures that passive attacker cannot spoof TURN messages. TURN client and se= rver can compute message integrity using [2], but it is not possible with t= he signature based scheme. However signature scheme could work if (D)TLS is= used b/w TURN client and server.=20 -Tiru >=20 > Thanks, > S. >=20 > PS: I'm not subscribed to this list, so would appreciate if you'd cc me o= n > responses. >=20 > [1] > https://datatracker.ietf.org/doc/draft-ietf-tram-turn-third-party- > authz/ballot/#stephen-farrell > [2] https://tools.ietf.org/html/draft-ietf-tram-turn-third-party-authz-15 >=20 > _______________________________________________ > tram mailing list > tram@ietf.org > https://www.ietf.org/mailman/listinfo/tram From nobody Wed Apr 29 02:07:40 2015 Return-Path: X-Original-To: tram@ietfa.amsl.com Delivered-To: tram@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id BAE071A9077 for ; Wed, 29 Apr 2015 02:07:39 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.21 X-Spam-Level: X-Spam-Status: No, score=-4.21 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, T_RP_MATCHES_RCVD=-0.01] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Jz6jXq0IhHwB for ; Wed, 29 Apr 2015 02:07:37 -0700 (PDT) Received: from mercury.scss.tcd.ie (mercury.scss.tcd.ie [134.226.56.6]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id F389A1A8750 for ; Wed, 29 Apr 2015 02:07:36 -0700 (PDT) Received: from localhost (localhost [127.0.0.1]) by mercury.scss.tcd.ie (Postfix) with ESMTP id B00E1BE2F; Wed, 29 Apr 2015 10:07:34 +0100 (IST) Received: from mercury.scss.tcd.ie ([127.0.0.1]) by localhost (mercury.scss.tcd.ie [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id j02LgMWLRMtD; Wed, 29 Apr 2015 10:07:34 +0100 (IST) Received: from [134.226.36.180] (stephen-think.dsg.cs.tcd.ie [134.226.36.180]) by mercury.scss.tcd.ie (Postfix) with ESMTPSA id 8865FBDCB; Wed, 29 Apr 2015 10:07:34 +0100 (IST) Message-ID: <55409F56.3090003@cs.tcd.ie> Date: Wed, 29 Apr 2015 10:07:34 +0100 From: Stephen Farrell User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:31.0) Gecko/20100101 Thunderbird/31.6.0 MIME-Version: 1.0 To: "Tirumaleswar Reddy (tireddy)" , "tram@ietf.org" References: <913383AAA69FF945B8F946018B75898A47821E90@xmb-rcd-x10.cisco.com> In-Reply-To: <913383AAA69FF945B8F946018B75898A47821E90@xmb-rcd-x10.cisco.com> OpenPGP: id=D66EA7906F0B897FB2E97D582F3C8736805F8DA2; url= Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 7bit Archived-At: Subject: Re: [tram] signature based 3rd party scheme X-BeenThere: tram@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "Discussing the creation of a Turn Revised And Modernized \(TRAM\) WG, which goal is to consolidate the various initiatives to update TURN and STUN." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 29 Apr 2015 09:07:39 -0000 Hiya, On 29/04/15 03:59, Tirumaleswar Reddy (tireddy) wrote: > Passive attacks could occur in TURN due to lack of integrity > protection. For example, a passive attacker could monitor Allocate > request/response between the client and TURN server and make a > Refresh request with a requested lifetime of 0 to delete the > allocation. Well, that'd be an active attack as the adversary is sending messages, but that's a minor point of terminology only. > Message integrity of TURN messages ensures that passive > attacker cannot spoof TURN messages. TURN client and server can > compute message integrity using [2], but it is not possible with the > signature based scheme. However signature scheme could work if (D)TLS > is used b/w TURN client and server. Yes, it is the case that [2] (the current draft) does provide a key to the browser and TURN server that can be used for that. Getting that key to the TURN server however, requires the pre-arrangement stuff, including TLS client auth between the TURN server and WebRTC server (with the TURN server as TLS client), and doing that requires the TURN server to have signed up with a CA that the WebRTC server can verify, so that really is quite a lot of organisation (essentially a whole new thing like, but smaller than, the Web PKI just for TURN servers to authenticate themselves to the WebRTC servers). So what you consider a downside may actually be another advantage of a signature based scheme - if you need to worry about attacks on the STUN protocol, then you can choose how you handle that "locally" (between the browser and TURN server, e.g. using DTLS as you suggest) and not have to depend on the establishment of yet another Web PKI equivalent. Cheers, S. From nobody Wed Apr 29 06:29:05 2015 Return-Path: X-Original-To: tram@ietfa.amsl.com Delivered-To: tram@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id D01C81A9135 for ; Wed, 29 Apr 2015 06:29:03 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -0.712 X-Spam-Level: X-Spam-Status: No, score=-0.712 tagged_above=-999 required=5 tests=[BAYES_20=-0.001, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 1otrJmmxc6Dd for ; Wed, 29 Apr 2015 06:28:58 -0700 (PDT) Received: from prod-mail-xrelay07.akamai.com (prod-mail-xrelay07.akamai.com [72.246.2.115]) by ietfa.amsl.com (Postfix) with ESMTP id E3DF51B2CD5 for ; Wed, 29 Apr 2015 06:28:57 -0700 (PDT) Received: from prod-mail-xrelay07.akamai.com (localhost.localdomain [127.0.0.1]) by postfix.imss70 (Postfix) with ESMTP id 4BAB147901; Wed, 29 Apr 2015 13:28:57 +0000 (GMT) Received: from prod-mail-relay06.akamai.com (prod-mail-relay06.akamai.com [172.17.120.126]) by prod-mail-xrelay07.akamai.com (Postfix) with ESMTP id 3F90447900; Wed, 29 Apr 2015 13:28:57 +0000 (GMT) Received: from [172.28.115.172] (bowill.kendall.corp.akamai.com [172.28.115.172]) by prod-mail-relay06.akamai.com (Postfix) with ESMTP id 20F192026; Wed, 29 Apr 2015 13:28:57 +0000 (GMT) Message-ID: <5540DC99.1020105@akamai.com> Date: Wed, 29 Apr 2015 09:28:57 -0400 From: Brandon Williams User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:31.0) Gecko/20100101 Thunderbird/31.6.0 MIME-Version: 1.0 To: Justin Uberti References: <551D889A.2070206@akamai.com> In-Reply-To: Content-Type: text/plain; charset=utf-8; format=flowed Content-Transfer-Encoding: 7bit Archived-At: Cc: "tram@ietf.org" Subject: Re: [tram] support for adoption of peer-redirect? X-BeenThere: tram@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "Discussing the creation of a Turn Revised And Modernized \(TRAM\) WG, which goal is to consolidate the various initiatives to update TURN and STUN." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 29 Apr 2015 13:29:04 -0000 Tiru reminded me that I had forgotten to respond to Justin's comment on the list. I agree with Justin's point here. The draft should probably have some content providing a bit of detail about how use of this mechanism fits into ICE. Such discussion might also lead to some simplification of the method. I plan to update the draft based on his comments prior to Prague and will test the waters again at that point. --Brandon On 04/02/2015 04:14 PM, Justin Uberti wrote: > There is a lot of promise here, but I think the end-to-end interaction > needs to be explained more. For instance, ICE gathering will likely have > completed by the time the peer goes to create permissions, so when the > peer is informed then that another TURN server might be a good idea, > it's not clear how that information will be used. In addition, given the > potentially complex topologies involved, you could imagine that the new > TURN server could actually be worse than the current one (especially if > both ends decide to switch around the same time), and that situation > needs to be addressed. > > This makes me think that some more complete examples are needed to walk > through these cases. As a result of these examples, we might also decide > that the basic mechanism doesn't need to be as complex (i.e. may not > need to handle both success and error responses). > > On Thu, Apr 2, 2015 at 11:21 AM, Brandon Williams > > wrote: > > Hi all, > > We ran out of time at the Dallas meeting for me to present my > updates to the peer-redirect draft. Back in Toronto, we weren't > adding milestones because we hadn't made progress on stunbis and > turnbis yet, so I didn't have a chance to ask about adoption there > either. So ... > > I would like to ask for WG adoption of this draft. Do you support > adoption? If not, are there updates that could be made that would > allow you to support adoption? > > The authors will very much appreciate WG feedback on this effort. > > Thanks, > --Brandon > > PS: Here is the presentation that I intended to give in Dallas. > > http://www.ietf.org/proceedings/92/slides/slides-92-tram-1.pdf > > It summarizes the changes since version 01 which was presented in > Toronto. > > Here is a link to the full draft. > > https://tools.ietf.org/html/draft-williams-peer-redirect > > -- > Brandon Williams; Senior Principal Software Engineer > Emerging Products Engineering; Akamai Technologies Inc. > > _________________________________________________ > tram mailing list > tram@ietf.org > https://www.ietf.org/mailman/listinfo/tram > > -- Brandon Williams; Chief Architect Cloud Networking; Akamai Technologies Inc. From nobody Wed Apr 29 12:18:39 2015 Return-Path: X-Original-To: tram@ietfa.amsl.com Delivered-To: tram@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 48DA11A90E6; Wed, 29 Apr 2015 12:18:35 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -14.511 X-Spam-Level: X-Spam-Status: No, score=-14.511 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_HI=-5, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id XOlET_tZdhMT; Wed, 29 Apr 2015 12:18:33 -0700 (PDT) Received: from rcdn-iport-4.cisco.com (rcdn-iport-4.cisco.com [173.37.86.75]) (using TLSv1 with cipher RC4-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id CE4BF1ACE0A; Wed, 29 Apr 2015 12:18:13 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=5686; q=dns/txt; s=iport; t=1430335094; x=1431544694; h=from:to:cc:subject:date:message-id:references: in-reply-to:content-id:content-transfer-encoding: mime-version; bh=5a17DaiwoO+nVwqVcc2RKoyMtwgmWzdW6zJG3sQ68OY=; b=dwLAJGJKirrxyd8gn6yBeMe+shnl+YXFFCwdc/rPM+eoZuW0DJWTr1NI KH5Jx3YKRd+n4rgluAs1CL/N2ywY+ckqxXkfuCF/BW1DJ1chmeWSVWqde QCfigPpwPiwFXiaQl0mEVqs8KMBg/SLZ96d9KUzv4MhwplQrZ685y4uiY c=; X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: A0BGBQBqLUFV/5ldJa1cgwxTXAXFFYI4DIYCAoFFTAEBAQEBAYELhCEBAQMBAQEBawsFCwIBCDsLJwslAgQBDQWIIwgNx24BAQEBAQEBAQEBAQEBAQEBAQEBAQEXiziEIhACAQVLAgWELQWGSIRxhA2CJIQJhj+BIz2DDIJxhm+HLCNggSccFYE8bwGBAyQcgQEBAQE X-IronPort-AV: E=Sophos;i="5.11,672,1422921600"; d="scan'208";a="415884440" Received: from rcdn-core-2.cisco.com ([173.37.93.153]) by rcdn-iport-4.cisco.com with ESMTP; 29 Apr 2015 19:18:13 +0000 Received: from xhc-aln-x01.cisco.com (xhc-aln-x01.cisco.com [173.36.12.75]) by rcdn-core-2.cisco.com (8.14.5/8.14.5) with ESMTP id t3TJICVs008406 (version=TLSv1/SSLv3 cipher=AES128-SHA bits=128 verify=FAIL); Wed, 29 Apr 2015 19:18:12 GMT Received: from xmb-rcd-x07.cisco.com ([169.254.7.109]) by xhc-aln-x01.cisco.com ([173.36.12.75]) with mapi id 14.03.0195.001; Wed, 29 Apr 2015 14:18:12 -0500 From: "Prashanth Patil (praspati)" To: Stephen Farrell , The IESG Thread-Topic: [tram] Stephen Farrell's Discuss on draft-ietf-tram-turn-third-party-authz-15: (with DISCUSS and COMMENT) Thread-Index: AQHQgrE7g73JlZnB50K3J/BCot1RbQ== Date: Wed, 29 Apr 2015 19:18:11 +0000 Message-ID: References: <20150428212204.9453.5930.idtracker@ietfa.amsl.com> In-Reply-To: <20150428212204.9453.5930.idtracker@ietfa.amsl.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/14.4.9.150325 x-originating-ip: [10.24.143.131] Content-Type: text/plain; charset="iso-8859-1" Content-ID: <4F7C09723E2FC045B5701FA86CA26789@emea.cisco.com> Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 Archived-At: Cc: "tram-chairs@ietf.org" , "tram@ietf.org" , "draft-ietf-tram-turn-third-party-authz@ietf.org" , "gonzalo.camarillo@ericsson.com" , "draft-ietf-tram-turn-third-party-authz.ad@ietf.org" , "draft-ietf-tram-turn-third-party-authz.shepherd@ietf.org" Subject: Re: [tram] Stephen Farrell's Discuss on draft-ietf-tram-turn-third-party-authz-15: (with DISCUSS and COMMENT) X-BeenThere: tram@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "Discussing the creation of a Turn Revised And Modernized \(TRAM\) WG, which goal is to consolidate the various initiatives to update TURN and STUN." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 29 Apr 2015 19:18:35 -0000 Hi Stephen, On 4/28/15, 2:22 PM, "Stephen Farrell" wrote: >Stephen Farrell has entered the following ballot position for >draft-ietf-tram-turn-third-party-authz-15: Discuss > >When responding, please keep the subject line intact and reply to all >email addresses included in the To and CC lines. (Feel free to cut this >introductory paragraph, however.) > > >Please refer to https://www.ietf.org/iesg/statement/discuss-criteria.html >for more information about IESG DISCUSS and COMMENT positions. > > >The document, along with other ballot positions, can be found here: >https://datatracker.ietf.org/doc/draft-ietf-tram-turn-third-party-authz/ > > > >---------------------------------------------------------------------- >DISCUSS: >---------------------------------------------------------------------- > > >Edited discuss ballot after chats around Dallas. > >(1) cleared > >(2) Please consider whether a signature based >scheme that does not require pre-shared keys between >the TURN and (in particular) WebRTC server could >be useful to support. (Either in this document or >elsewhere.) There should be use cases where that >offers sufficient accountability for use of TURN and >it ought allow some deployments that are less easy >with this kind of pre-shared keys approach. The >DISCUSS here is to check if the WG want to take >that approach, either now or later. (I've sent a >mail to the WG list, this will clear shortly once >that is discussed.) > >(3) cleared (but see now comments below this is >still badly done IMO) > > >---------------------------------------------------------------------- >COMMENT: >---------------------------------------------------------------------- > > >NEW COMMENTS:=20 > >- As some others have said before, this is still not an easy >read and though better, could still do with more editorial >work. > >- Why are 4.1.1 and 4.1.2 still just examples. You need one >to be MTI or you won't get interop. Indeed 4.1.2 says you >SHOULD do 4.1.1! Please just bite the bullet and clearly say >that 4.1.1 is MTI. The WG consensus was for it to be SHOULD. We=B9d have to get consensus for it to be MTI, I suppose. > >- 4.1.1, "HTTPS MUST be used for mutual authentication" is >not a very clear way to say it. You mean that HTTPS MUST be >used and that TLS with mutual authentication based on client >certificates MUST be used. Sure, we=B9ll reword to make this more obvious. > How does the WebRTC server know >what CA the TURN server is going to use? That's another point >of pre-arrangement that will be needed. Yes, there has to be pre-arrangement. Pre-arrangement is required nonetheless because the WebRTC server needs to trust the TURN server to establish symmetric keys. > >- 4.1.1, I thought the web folks frowned upon specifying URI >parameters like that. Shouldn't you at least use a >.well-known URL or something so as to not get on someone >eles's lawn? Yes, will update. > >- 6.2, PATH_MTU is not the correct term. There are >two paths involved, from WebRTC to browser and from >browser to TURN server and MTUs need not be the same >on those paths. Path MTU, in this context, refers to the one between the client and TURN server. Since the WebRTC server is never aware of the path MTU between the client and TURN server, we=B9ve tried to keep the token size as small as possible. > >OLD COMMENTS BELOW HERE, I DIDN'T CHECK >THOSE. > >- I really think this would benefit from some wider review >and I don't think it's ready as-is. The draft was reviewed by the OAuth WG. > >- I agree with Richard's discuss points. Richard=B9s comments are addressed in the latest version http://tools.ietf.org/html/draft-ietf-tram-turn-third-party-authz-15. > >- intro: "impossible in web applications" isn't really >true in principle, but impossible in WebRTC as it uses JS >is true. >=20 The latest revision reflects this change. http://tools.ietf.org/html/draft-ietf-tram-turn-third-party-authz-15#sectio n-1 > >- Assuming the AS that can authorize the user shares a >secret with the STUN server chosen by the WebRTC server >seems very brittle. Why would that be true in general? The AS and WebRTC server are in the same administrative domain of the application provider. The user never sends the session key learned from the AS to the STUN server; the session key is only used to compute message integrity of STUN request and validate message integrity of STUN response. The STUN server will only know the session key if it can decrypt the token. > >- 4.1.1: Hmmm. How many people use KeyProv I wonder? DKSPP is removed in the latest version. > >- 4.1.2 - which "two servers"? WebRTC can have more >servers than that. The STUN server and the AS. The latest revision reflects this change. > >- 4.1.2 - now we're using TLS mutual auth? And how does >the TLS client know which CA to use that'll work with the >TLS server here? I don't think that'll scale will it? Already answered earlier. > >- 4.1.3 - this looks like what the WG/authors really want, >would that be a fair statement? 4.1.3 has been removed. > >- 9: Figure 2 should be way up at the top of the document >and not here Yes. The latest revision reflects this change. =20 > >- 9: Why 5 seconds? STUN messages can be sent over UDP, 5 seconds is to accommodate packet loss and RTO interval. Thanks, Prashanth > > >_______________________________________________ >tram mailing list >tram@ietf.org >https://www.ietf.org/mailman/listinfo/tram From nobody Wed Apr 29 13:44:59 2015 Return-Path: X-Original-To: tram@ietfa.amsl.com Delivered-To: tram@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 494D81A039D; Wed, 29 Apr 2015 13:44:58 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.21 X-Spam-Level: X-Spam-Status: No, score=-4.21 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, T_RP_MATCHES_RCVD=-0.01] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id h7JtnqSdXWFk; Wed, 29 Apr 2015 13:44:56 -0700 (PDT) Received: from mercury.scss.tcd.ie (mercury.scss.tcd.ie [134.226.56.6]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 5A3DD1A0461; Wed, 29 Apr 2015 13:44:56 -0700 (PDT) Received: from localhost (localhost [127.0.0.1]) by mercury.scss.tcd.ie (Postfix) with ESMTP id 9B0F9BE3E; Wed, 29 Apr 2015 21:44:54 +0100 (IST) X-Virus-Scanned: Debian amavisd-new at scss.tcd.ie Received: from mercury.scss.tcd.ie ([127.0.0.1]) by localhost (mercury.scss.tcd.ie [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 4HoifFDGdN7e; Wed, 29 Apr 2015 21:44:53 +0100 (IST) Received: from [10.87.48.73] (unknown [86.46.18.22]) by mercury.scss.tcd.ie (Postfix) with ESMTPSA id 79353BDD8; Wed, 29 Apr 2015 21:44:53 +0100 (IST) Message-ID: <554142C5.6030505@cs.tcd.ie> Date: Wed, 29 Apr 2015 21:44:53 +0100 From: Stephen Farrell User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:31.0) Gecko/20100101 Thunderbird/31.6.0 MIME-Version: 1.0 To: "Prashanth Patil (praspati)" , The IESG References: <20150428212204.9453.5930.idtracker@ietfa.amsl.com> In-Reply-To: OpenPGP: id=D66EA7906F0B897FB2E97D582F3C8736805F8DA2; url= Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 8bit Archived-At: Cc: "tram-chairs@ietf.org" , "tram@ietf.org" , "draft-ietf-tram-turn-third-party-authz@ietf.org" , "gonzalo.camarillo@ericsson.com" , "draft-ietf-tram-turn-third-party-authz.ad@ietf.org" , "draft-ietf-tram-turn-third-party-authz.shepherd@ietf.org" Subject: Re: [tram] Stephen Farrell's Discuss on draft-ietf-tram-turn-third-party-authz-15: (with DISCUSS and COMMENT) X-BeenThere: tram@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "Discussing the creation of a Turn Revised And Modernized \(TRAM\) WG, which goal is to consolidate the various initiatives to update TURN and STUN." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 29 Apr 2015 20:44:58 -0000 On 29/04/15 20:18, Prashanth Patil (praspati) wrote: >> >- Why are 4.1.1 and 4.1.2 still just examples. You need one >> >to be MTI or you won't get interop. Indeed 4.1.2 says you >> >SHOULD do 4.1.1! Please just bite the bullet and clearly say >> >that 4.1.1 is MTI. > The WG consensus was for it to be SHOULD. We¹d have to get consensus for > it to be MTI, I suppose. > I'd encourage you to really try hard on that. As you have it, different implementations just might not work with one another at all if developers make varying choices about 4.1.1 vs. 4.1.2 vs. something else entirely. That seems to me to be an interop failure by the WG. S From nobody Wed Apr 29 18:02:28 2015 Return-Path: X-Original-To: tram@ietfa.amsl.com Delivered-To: tram@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 9B0051A8F49; Wed, 29 Apr 2015 18:02:27 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.75 X-Spam-Level: X-Spam-Status: No, score=-1.75 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_ENVFROM_END_DIGIT=0.25, FREEMAIL_FROM=0.001, SPF_PASS=-0.001] autolearn=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id uqulyvkGJ00G; Wed, 29 Apr 2015 18:02:26 -0700 (PDT) Received: from mail-wi0-x22c.google.com (mail-wi0-x22c.google.com [IPv6:2a00:1450:400c:c05::22c]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 612071A1BED; Wed, 29 Apr 2015 18:02:26 -0700 (PDT) Received: by wizk4 with SMTP id k4so421630wiz.1; Wed, 29 Apr 2015 18:02:25 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :cc:content-type:content-transfer-encoding; bh=aK5+fRotu9vH38gjZx2DlwNkxbw4dliGfMYKOEF+OOw=; b=0tXUcP4Ju7OFTk8HPrVcwd+RPl/bmoobzLEnZ0P8KAFpVrv8n2YR1V0z8xNBIbSF3e sxO6iR0v/VXpfjAfHoP1eTJM92X8Az+ZdPXNvC9gCIkt5h9lpDpbWenbMAB0SMgjTgyV T4MAZAOaiFiZpUw/b0mS59N/eEpIm1jLpAFlGYLZJGng5iDYrDnRipOaRaYZ+PSy9Dcu BlPONad7eS7jgCqGJFqZb38UrV+ZVxtmRenkwld0KJzroWKhuJhp5De3OpHt59BoVt02 WTJON5chbpFPmYs5BOWZjYL+nzloM+hkvMWg4/K592uZoQnsloj4kESDtwZgzgT7WFFQ A0vA== MIME-Version: 1.0 X-Received: by 10.180.106.73 with SMTP id gs9mr655148wib.52.1430355745177; Wed, 29 Apr 2015 18:02:25 -0700 (PDT) Received: by 10.194.190.7 with HTTP; Wed, 29 Apr 2015 18:02:25 -0700 (PDT) In-Reply-To: <554142C5.6030505@cs.tcd.ie> References: <20150428212204.9453.5930.idtracker@ietfa.amsl.com> <554142C5.6030505@cs.tcd.ie> Date: Wed, 29 Apr 2015 18:02:25 -0700 Message-ID: From: Oleg Moskalenko To: Stephen Farrell Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: quoted-printable Archived-At: Cc: "Prashanth Patil \(praspati\)" , "tram-chairs@ietf.org" , "tram@ietf.org" , "draft-ietf-tram-turn-third-party-authz@ietf.org" , "gonzalo.camarillo@ericsson.com" , "draft-ietf-tram-turn-third-party-authz.ad@ietf.org" , The IESG , "draft-ietf-tram-turn-third-party-authz.shepherd@ietf.org" Subject: Re: [tram] Stephen Farrell's Discuss on draft-ietf-tram-turn-third-party-authz-15: (with DISCUSS and COMMENT) X-BeenThere: tram@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "Discussing the creation of a Turn Revised And Modernized \(TRAM\) WG, which goal is to consolidate the various initiatives to update TURN and STUN." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 30 Apr 2015 01:02:27 -0000 On Wed, Apr 29, 2015 at 1:44 PM, Stephen Farrell wrote: > > > On 29/04/15 20:18, Prashanth Patil (praspati) wrote: >>> >- Why are 4.1.1 and 4.1.2 still just examples. You need one >>> >to be MTI or you won't get interop. Indeed 4.1.2 says you >>> >SHOULD do 4.1.1! Please just bite the bullet and clearly say >>> >that 4.1.1 is MTI. >> The WG consensus was for it to be SHOULD. We=C2=B9d have to get consensu= s for >> it to be MTI, I suppose. >> > > > I'd encourage you to really try hard on that. As you have it, > different implementations just might not work with one another > at all if developers make varying choices about 4.1.1 vs. 4.1.2 > vs. something else entirely. That seems to me to be an interop > failure by the WG. > different implementations of what ? TURN Servers do not have to interact with each other. The interactions are between WebRTC server and TURN servers. I see it as perfectly OK if different TURN servers access different WebRTC servers in a different manner. This WG is about STUN and TURN; I do not think that we have to deal with WebRTC servers standardization. I believe that the document addresses the TURN server operations standard in a proper way, and leaves the question of WebRTC to their WG. How the TURN server stores the credentials, amd how those credentials are getting filled in the database, is not the topic of this WG, I believe. Thanks Oleg From nobody Thu Apr 30 00:47:35 2015 Return-Path: X-Original-To: tram@ietfa.amsl.com Delivered-To: tram@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 95E761ACED0; Thu, 30 Apr 2015 00:47:31 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.21 X-Spam-Level: X-Spam-Status: No, score=-4.21 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, T_RP_MATCHES_RCVD=-0.01] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id jXnSUf8b_rcw; Thu, 30 Apr 2015 00:47:29 -0700 (PDT) Received: from mercury.scss.tcd.ie (mercury.scss.tcd.ie [134.226.56.6]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id B46BE1ACECF; Thu, 30 Apr 2015 00:47:05 -0700 (PDT) Received: from localhost (localhost [127.0.0.1]) by mercury.scss.tcd.ie (Postfix) with ESMTP id 1B6D6BDD8; Thu, 30 Apr 2015 08:47:04 +0100 (IST) X-Virus-Scanned: Debian amavisd-new at scss.tcd.ie Received: from mercury.scss.tcd.ie ([127.0.0.1]) by localhost (mercury.scss.tcd.ie [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id BDkSu39RUocE; Thu, 30 Apr 2015 08:47:03 +0100 (IST) Received: from [10.87.48.73] (unknown [86.46.18.22]) by mercury.scss.tcd.ie (Postfix) with ESMTPSA id DC6D9BDCC; Thu, 30 Apr 2015 08:47:02 +0100 (IST) Message-ID: <5541DDF6.7000205@cs.tcd.ie> Date: Thu, 30 Apr 2015 08:47:02 +0100 From: Stephen Farrell User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:31.0) Gecko/20100101 Thunderbird/31.6.0 MIME-Version: 1.0 To: Oleg Moskalenko References: <20150428212204.9453.5930.idtracker@ietfa.amsl.com> <554142C5.6030505@cs.tcd.ie> In-Reply-To: OpenPGP: id=D66EA7906F0B897FB2E97D582F3C8736805F8DA2; url= Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 7bit Archived-At: Cc: "Prashanth Patil \(praspati\)" , "tram-chairs@ietf.org" , "tram@ietf.org" , "draft-ietf-tram-turn-third-party-authz@ietf.org" , "gonzalo.camarillo@ericsson.com" , "draft-ietf-tram-turn-third-party-authz.ad@ietf.org" , The IESG , "draft-ietf-tram-turn-third-party-authz.shepherd@ietf.org" Subject: Re: [tram] Stephen Farrell's Discuss on draft-ietf-tram-turn-third-party-authz-15: (with DISCUSS and COMMENT) X-BeenThere: tram@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "Discussing the creation of a Turn Revised And Modernized \(TRAM\) WG, which goal is to consolidate the various initiatives to update TURN and STUN." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 30 Apr 2015 07:47:31 -0000 On 30/04/15 02:02, Oleg Moskalenko wrote: > > different implementations of what ? TURN Servers do not have to > interact with each other. The interactions are between WebRTC server > and TURN servers. Clearly. > I see it as perfectly OK if different TURN servers > access different WebRTC servers in a different manner. That is not the same as picking a mandatory to implement method, which is what I'm arguing for. > This WG is > about STUN and TURN; I do not think that we have to deal with WebRTC > servers standardization. I believe that the document addresses the > TURN server operations standard in a proper way, and leaves the > question of WebRTC to their WG. > > How the TURN server stores the credentials, amd how those credentials > are getting filled in the database, is not the topic of this WG, I > believe. We disagree then. ISTM that either everyone will implement 4.1.1 or else this specification will produce interop failures or go unused when the probability that a WebRTC server and TURN server share a key is not sufficiently high for people to bother turning this on. (And yes, that's as fallible prediction as most people's:-) S. From nobody Thu Apr 30 01:22:54 2015 Return-Path: X-Original-To: tram@ietfa.amsl.com Delivered-To: tram@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 850661ACF04; Thu, 30 Apr 2015 01:22:50 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.75 X-Spam-Level: X-Spam-Status: No, score=-1.75 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_ENVFROM_END_DIGIT=0.25, FREEMAIL_FROM=0.001, SPF_PASS=-0.001] autolearn=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id wl71hZ4zJ0T4; Thu, 30 Apr 2015 01:22:49 -0700 (PDT) Received: from mail-wi0-x233.google.com (mail-wi0-x233.google.com [IPv6:2a00:1450:400c:c05::233]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 3AAF41ACEEF; Thu, 30 Apr 2015 01:22:49 -0700 (PDT) Received: by wicmx19 with SMTP id mx19so7249687wic.1; Thu, 30 Apr 2015 01:22:48 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :cc:content-type; bh=pSxZNrYOn9p2jXvsxYqX24yMcDk7E8JIaO3jT8EKNxs=; b=0X/qRo2bu4TgtC7E7/XMg7lWsyLNIflgEzv52MdOkXziS3fzNn4DSNJqcghYBk4lxy fIl173r8GXjv/UIEzduwM5ON8ramdtqsJzX/pQIEyms8EHh7TL3oIbdMkqqS9goAr36E g1rtCQ/LCSxnqtu2Mm3Xj26dI9aq7Witeo3LoiE0fVYbKj5Czl9Xd3lb9GKgyQn/mA5V XfncZQ6hyuFkbiw+HB8z0hku1fAMTab1Kx0aj1tYxTgWPowdy4NneI4IkL6yeSMPSJH/ PypmHPgjPgi2NCTyWvogescO++xvOujiXQzf3sf2PHMYbIhQZOUrG9u9UdFq2Llapoy5 EQzQ== MIME-Version: 1.0 X-Received: by 10.194.77.98 with SMTP id r2mr5954050wjw.130.1430382168019; Thu, 30 Apr 2015 01:22:48 -0700 (PDT) Received: by 10.194.190.7 with HTTP; Thu, 30 Apr 2015 01:22:47 -0700 (PDT) In-Reply-To: <5541DDF6.7000205@cs.tcd.ie> References: <20150428212204.9453.5930.idtracker@ietfa.amsl.com> <554142C5.6030505@cs.tcd.ie> <5541DDF6.7000205@cs.tcd.ie> Date: Thu, 30 Apr 2015 01:22:47 -0700 Message-ID: From: Oleg Moskalenko To: Stephen Farrell Content-Type: text/plain; charset=UTF-8 Archived-At: Cc: "Prashanth Patil \(praspati\)" , "tram-chairs@ietf.org" , "tram@ietf.org" , "draft-ietf-tram-turn-third-party-authz@ietf.org" , "gonzalo.camarillo@ericsson.com" , "draft-ietf-tram-turn-third-party-authz.ad@ietf.org" , The IESG , "draft-ietf-tram-turn-third-party-authz.shepherd@ietf.org" Subject: Re: [tram] Stephen Farrell's Discuss on draft-ietf-tram-turn-third-party-authz-15: (with DISCUSS and COMMENT) X-BeenThere: tram@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "Discussing the creation of a Turn Revised And Modernized \(TRAM\) WG, which goal is to consolidate the various initiatives to update TURN and STUN." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 30 Apr 2015 08:22:50 -0000 On Thu, Apr 30, 2015 at 12:47 AM, Stephen Farrell wrote: > > > On 30/04/15 02:02, Oleg Moskalenko wrote: >> >> different implementations of what ? TURN Servers do not have to >> interact with each other. The interactions are between WebRTC server >> and TURN servers. > > Clearly. > >> I see it as perfectly OK if different TURN servers >> access different WebRTC servers in a different manner. > > That is not the same as picking a mandatory to implement method, > which is what I'm arguing for. I am against a mandatory method - because that topic has nothing to do with STUN and TURN functionality. The implementation method sections must be just an examples. There may be million different ways to exchange the keys between WebRTC and the TURN server. > >> This WG is >> about STUN and TURN; I do not think that we have to deal with WebRTC >> servers standardization. I believe that the document addresses the >> TURN server operations standard in a proper way, and leaves the >> question of WebRTC to their WG. >> >> How the TURN server stores the credentials, amd how those credentials >> are getting filled in the database, is not the topic of this WG, I >> believe. > > We disagree then. ISTM that either everyone will implement 4.1.1 or > else this specification will produce interop failures or go unused > when the probability that a WebRTC server and TURN server share a key > is not sufficiently high for people to bother turning this on. (And > yes, that's as fallible prediction as most people's:-) Yes, we disagree. With your proposal, you will achieve exactly opposite from what you are declaring. WebRTC server and TURN server are modular servers. They have different semi-independent parts. The essential parts functionality is dictated by the corresponding standards. There is absolutely no necessity to mandate one way or another in the key exchange parts. In reality, as it is usually deployed, the same people are controlling both servers. They may decide how they want to implement the key exchange. Today, they can take off-the-shelf parts for WebRTC and TURN servers, and then they can write a set of simple scripts for the key replication/exchange/etc. If there will be a mandatory method, I predict that there will be less available parts and less supply of the necessary parts for the deployment. Overall, I do not think that any TURN standard has to be containing the exact HTTP/HTTPS details, protocols and APIs. Those are just foreign particles and they can be easily left out of scope. From nobody Thu Apr 30 01:35:57 2015 Return-Path: X-Original-To: tram@ietfa.amsl.com Delivered-To: tram@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 6978C1AD060; Thu, 30 Apr 2015 01:35:55 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.21 X-Spam-Level: X-Spam-Status: No, score=-4.21 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, T_RP_MATCHES_RCVD=-0.01] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id y_2X9v0vZjgT; Thu, 30 Apr 2015 01:35:54 -0700 (PDT) Received: from mercury.scss.tcd.ie (mercury.scss.tcd.ie [134.226.56.6]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 8F32F1AD05E; Thu, 30 Apr 2015 01:35:53 -0700 (PDT) Received: from localhost (localhost [127.0.0.1]) by mercury.scss.tcd.ie (Postfix) with ESMTP id 40FFFBE2F; Thu, 30 Apr 2015 09:35:52 +0100 (IST) X-Virus-Scanned: Debian amavisd-new at scss.tcd.ie Received: from mercury.scss.tcd.ie ([127.0.0.1]) by localhost (mercury.scss.tcd.ie [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id LUk8bGw2SsVc; Thu, 30 Apr 2015 09:35:50 +0100 (IST) Received: from [10.87.48.73] (unknown [86.46.18.22]) by mercury.scss.tcd.ie (Postfix) with ESMTPSA id A9D71BDD8; Thu, 30 Apr 2015 09:35:50 +0100 (IST) Message-ID: <5541E966.80602@cs.tcd.ie> Date: Thu, 30 Apr 2015 09:35:50 +0100 From: Stephen Farrell User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:31.0) Gecko/20100101 Thunderbird/31.6.0 MIME-Version: 1.0 To: Oleg Moskalenko References: <20150428212204.9453.5930.idtracker@ietfa.amsl.com> <554142C5.6030505@cs.tcd.ie> <5541DDF6.7000205@cs.tcd.ie> In-Reply-To: OpenPGP: id=D66EA7906F0B897FB2E97D582F3C8736805F8DA2; url= Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 7bit Archived-At: Cc: "Prashanth Patil \(praspati\)" , "tram-chairs@ietf.org" , "tram@ietf.org" , "draft-ietf-tram-turn-third-party-authz@ietf.org" , "gonzalo.camarillo@ericsson.com" , "draft-ietf-tram-turn-third-party-authz.ad@ietf.org" , The IESG , "draft-ietf-tram-turn-third-party-authz.shepherd@ietf.org" Subject: Re: [tram] Stephen Farrell's Discuss on draft-ietf-tram-turn-third-party-authz-15: (with DISCUSS and COMMENT) X-BeenThere: tram@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "Discussing the creation of a Turn Revised And Modernized \(TRAM\) WG, which goal is to consolidate the various initiatives to update TURN and STUN." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 30 Apr 2015 08:35:55 -0000 On 30/04/15 09:22, Oleg Moskalenko wrote: > On Thu, Apr 30, 2015 at 12:47 AM, Stephen Farrell > wrote: >> >> >> On 30/04/15 02:02, Oleg Moskalenko wrote: >>> >>> different implementations of what ? TURN Servers do not have to >>> interact with each other. The interactions are between WebRTC server >>> and TURN servers. >> >> Clearly. >> >>> I see it as perfectly OK if different TURN servers >>> access different WebRTC servers in a different manner. >> >> That is not the same as picking a mandatory to implement method, >> which is what I'm arguing for. > > I am against a mandatory method - because that topic has nothing to do > with STUN and TURN functionality. The implementation method sections > must be just an examples. There may be million different ways to > exchange the keys between WebRTC and the TURN server. > >> >>> This WG is >>> about STUN and TURN; I do not think that we have to deal with WebRTC >>> servers standardization. I believe that the document addresses the >>> TURN server operations standard in a proper way, and leaves the >>> question of WebRTC to their WG. >>> >>> How the TURN server stores the credentials, amd how those credentials >>> are getting filled in the database, is not the topic of this WG, I >>> believe. >> >> We disagree then. ISTM that either everyone will implement 4.1.1 or >> else this specification will produce interop failures or go unused >> when the probability that a WebRTC server and TURN server share a key >> is not sufficiently high for people to bother turning this on. (And >> yes, that's as fallible prediction as most people's:-) > > Yes, we disagree. With your proposal, you will achieve exactly > opposite from what you are declaring. > > WebRTC server and TURN server are modular servers. They have different > semi-independent parts. The essential parts functionality is dictated > by the corresponding standards. There is absolutely no necessity to > mandate one way or another in the key exchange parts. In reality, as > it is usually deployed, the same people are controlling both servers. I don't believe that assumption was stated as being the basis for tram was it? It is certainly not what I assume when reading the description for a 3 party protocol as in this draft. And nor does this draft make any such statement that I recall. If that is to be an assumption for this work, then I'd suggest that be affirmed by the WG and documented in the draft. > They may decide how they want to implement the key exchange. Today, > they can take off-the-shelf parts for WebRTC and TURN servers, and > then they can write a set of simple scripts for the key > replication/exchange/etc. If there will be a mandatory method, I > predict that there will be less available parts and less supply of the > necessary parts for the deployment. > > Overall, I do not think that any TURN standard has to be containing > the exact HTTP/HTTPS details, protocols and APIs. Those are just > foreign particles and they can be easily left out of scope. That seems to me like a really odd way to consider interoperability. But, we have sufficient clarity in our disagreement I think:-) S. From nobody Thu Apr 30 06:14:57 2015 Return-Path: X-Original-To: tram@ietfa.amsl.com Delivered-To: tram@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 030EC1B29D8 for ; Thu, 30 Apr 2015 06:14:57 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -14.511 X-Spam-Level: X-Spam-Status: No, score=-14.511 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_HI=-5, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id G1IjghO5Kdok for ; Thu, 30 Apr 2015 06:14:55 -0700 (PDT) Received: from alln-iport-5.cisco.com (alln-iport-5.cisco.com [173.37.142.92]) (using TLSv1 with cipher RC4-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 3FF641B29D4 for ; Thu, 30 Apr 2015 06:14:55 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=3564; q=dns/txt; s=iport; t=1430399695; x=1431609295; h=from:to:subject:date:message-id:references:in-reply-to: content-transfer-encoding:mime-version; bh=W1vX9lzgElEcWfpayXDUT5n5mOdGq8ce8LhZLpvtOS4=; b=kHgDx3empxzbG3qWjwxUp4lL7coOH65Ls/V4OhPGEU/xFSBGp5j8elma DWtetURahmW47OyGI1ZVrFXHmrr2vfzsxctNK0CdxWIMLnzUz8IqIo36v GEPSXtOoUgWPpkABu8G0lk1jMESqpzRppXn5YrgTXjjBDiokSNQr9tS2p g=; X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: A0C3BAC8KUJV/4kNJK1cgwxTXAWDFsFOZgmBU4YEAhyBNDgUAQEBAQEBAYEKhCABAQEDASMRUQQCAQgRBAEBAQICBh0DAgICMBQBCAgBAQQBEgiIGwgNtBWTSgEBAQEBAQEBAQEBAQEBAQEBAQEBARMEgSGKF4Q6GhYiBoJiL4EWBZFqhAmcPCOBZYIPb4FEgQEBAQE X-IronPort-AV: E=Sophos;i="5.11,677,1422921600"; d="scan'208";a="145948766" Received: from alln-core-4.cisco.com ([173.36.13.137]) by alln-iport-5.cisco.com with ESMTP; 30 Apr 2015 13:14:54 +0000 Received: from xhc-aln-x01.cisco.com (xhc-aln-x01.cisco.com [173.36.12.75]) by alln-core-4.cisco.com (8.14.5/8.14.5) with ESMTP id t3UDEsxu024191 (version=TLSv1/SSLv3 cipher=AES128-SHA bits=128 verify=FAIL); Thu, 30 Apr 2015 13:14:54 GMT Received: from xmb-rcd-x10.cisco.com ([169.254.15.218]) by xhc-aln-x01.cisco.com ([173.36.12.75]) with mapi id 14.03.0195.001; Thu, 30 Apr 2015 08:14:54 -0500 From: "Tirumaleswar Reddy (tireddy)" To: Stephen Farrell , "tram@ietf.org" Thread-Topic: [tram] signature based 3rd party scheme Thread-Index: AdCCKHW9CjsMzThwTKab4ELJ3vVgMQAXWEQAADAwUsA= Date: Thu, 30 Apr 2015 13:14:53 +0000 Message-ID: <913383AAA69FF945B8F946018B75898A47822B94@xmb-rcd-x10.cisco.com> References: <913383AAA69FF945B8F946018B75898A47821E90@xmb-rcd-x10.cisco.com> <55409F56.3090003@cs.tcd.ie> In-Reply-To: <55409F56.3090003@cs.tcd.ie> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.65.36.242] Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 MIME-Version: 1.0 Archived-At: Subject: Re: [tram] signature based 3rd party scheme X-BeenThere: tram@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "Discussing the creation of a Turn Revised And Modernized \(TRAM\) WG, which goal is to consolidate the various initiatives to update TURN and STUN." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 30 Apr 2015 13:14:57 -0000 PiAtLS0tLU9yaWdpbmFsIE1lc3NhZ2UtLS0tLQ0KPiBGcm9tOiBTdGVwaGVuIEZhcnJlbGwgW21h aWx0bzpzdGVwaGVuLmZhcnJlbGxAY3MudGNkLmllXQ0KPiBTZW50OiBXZWRuZXNkYXksIEFwcmls IDI5LCAyMDE1IDI6MzggUE0NCj4gVG86IFRpcnVtYWxlc3dhciBSZWRkeSAodGlyZWRkeSk7IHRy YW1AaWV0Zi5vcmcNCj4gU3ViamVjdDogUmU6IFt0cmFtXSBzaWduYXR1cmUgYmFzZWQgM3JkIHBh cnR5IHNjaGVtZQ0KPiANCj4gDQo+IEhpeWEsDQo+IA0KPiBPbiAyOS8wNC8xNSAwMzo1OSwgVGly dW1hbGVzd2FyIFJlZGR5ICh0aXJlZGR5KSB3cm90ZToNCj4gPiBQYXNzaXZlIGF0dGFja3MgY291 bGQgb2NjdXIgaW4gVFVSTiBkdWUgdG8gbGFjayBvZiBpbnRlZ3JpdHkNCj4gPiBwcm90ZWN0aW9u LiBGb3IgZXhhbXBsZSwgYSBwYXNzaXZlIGF0dGFja2VyIGNvdWxkIG1vbml0b3IgQWxsb2NhdGUN Cj4gPiByZXF1ZXN0L3Jlc3BvbnNlIGJldHdlZW4gdGhlIGNsaWVudCBhbmQgVFVSTiBzZXJ2ZXIg YW5kIG1ha2UgYSBSZWZyZXNoDQo+ID4gcmVxdWVzdCB3aXRoIGEgcmVxdWVzdGVkIGxpZmV0aW1l IG9mIDAgdG8gZGVsZXRlIHRoZSBhbGxvY2F0aW9uLg0KPiANCj4gV2VsbCwgdGhhdCdkIGJlIGFu IGFjdGl2ZSBhdHRhY2sgYXMgdGhlIGFkdmVyc2FyeSBpcyBzZW5kaW5nIG1lc3NhZ2VzLCBidXQN Cj4gdGhhdCdzIGEgbWlub3IgcG9pbnQgb2YgdGVybWlub2xvZ3kgb25seS4NCj4gDQo+ID4gTWVz c2FnZSBpbnRlZ3JpdHkgb2YgVFVSTiBtZXNzYWdlcyBlbnN1cmVzIHRoYXQgcGFzc2l2ZSBhdHRh Y2tlcg0KPiA+IGNhbm5vdCBzcG9vZiBUVVJOIG1lc3NhZ2VzLiBUVVJOIGNsaWVudCBhbmQgc2Vy dmVyIGNhbiBjb21wdXRlDQo+IG1lc3NhZ2UNCj4gPiBpbnRlZ3JpdHkgdXNpbmcgWzJdLCBidXQg aXQgaXMgbm90IHBvc3NpYmxlIHdpdGggdGhlIHNpZ25hdHVyZSBiYXNlZA0KPiA+IHNjaGVtZS4g SG93ZXZlciBzaWduYXR1cmUgc2NoZW1lIGNvdWxkIHdvcmsgaWYgKEQpVExTIGlzIHVzZWQgYi93 IFRVUk4NCj4gPiBjbGllbnQgYW5kIHNlcnZlci4NCj4gDQo+IFllcywgaXQgaXMgdGhlIGNhc2Ug dGhhdCBbMl0gKHRoZSBjdXJyZW50IGRyYWZ0KSBkb2VzIHByb3ZpZGUgYSBrZXkgdG8gdGhlDQo+ IGJyb3dzZXIgYW5kIFRVUk4gc2VydmVyIHRoYXQgY2FuIGJlIHVzZWQgZm9yIHRoYXQuIEdldHRp bmcgdGhhdCBrZXkgdG8gdGhlDQo+IFRVUk4gc2VydmVyIGhvd2V2ZXIsIHJlcXVpcmVzIHRoZSBw cmUtYXJyYW5nZW1lbnQgc3R1ZmYsIGluY2x1ZGluZyBUTFMNCj4gY2xpZW50IGF1dGggYmV0d2Vl biB0aGUgVFVSTiBzZXJ2ZXIgYW5kIFdlYlJUQyBzZXJ2ZXIgKHdpdGggdGhlIFRVUk4NCj4gc2Vy dmVyIGFzIFRMUyBjbGllbnQpLCBhbmQgZG9pbmcgdGhhdCByZXF1aXJlcyB0aGUgVFVSTiBzZXJ2 ZXIgdG8gaGF2ZSBzaWduZWQNCj4gdXAgd2l0aCBhIENBIHRoYXQgdGhlIFdlYlJUQyBzZXJ2ZXIg Y2FuIHZlcmlmeSwgc28gdGhhdCByZWFsbHkgaXMgcXVpdGUgYSBsb3QNCj4gb2Ygb3JnYW5pc2F0 aW9uIChlc3NlbnRpYWxseSBhIHdob2xlIG5ldyB0aGluZyBsaWtlLCBidXQgc21hbGxlciB0aGFu LCB0aGUNCj4gV2ViIFBLSSBqdXN0IGZvciBUVVJOIHNlcnZlcnMgdG8gYXV0aGVudGljYXRlIHRo ZW1zZWx2ZXMgdG8gdGhlIFdlYlJUQw0KPiBzZXJ2ZXJzKS4NCg0KVFVSTiBzZXJ2ZXIgYW5kIEFT IGNvdWxkIGJlIGluIHRoZSBzYW1lIGFkbWluaXN0cmF0aXZlIGRvbWFpbiBhbmQgcHJlLWFycmFu Z2VtZW50IGlzIHNpbXBsZSBpbiB0aGlzIGNhc2UuIFRoZSBvdGhlciBkZXBsb3ltZW50IHNjZW5h cmlvIGlzIFdlYlJUQyBzZXJ2aWNlIHByb3ZpZGVyIGhhcyB0aWUtdXAgd2l0aCBUVVJOIHNlcnZp Y2UgcHJvdmlkZXIgdG8gdXNlIGl0cyBzZXJ2aWNlOyBwcmUtYXJyYW5nZW1lbnQgaGVscHMgYWNj b3VudGluZyBhbmQgaW4gZnV0dXJlIHN1cHBvcnQgZm9yIHRva2VuIGludHJvc3BlY3Rpb24gaHR0 cHM6Ly90b29scy5pZXRmLm9yZy9odG1sL2RyYWZ0LWlldGYtb2F1dGgtaW50cm9zcGVjdGlvbi0w OC4NCihUaGVyZSBpcyBubyBXRyBjb25zZW5zdXMgeWV0IGlmIHRva2VuIGludHJvc3BlY3Rpb24g aXMgcmVxdWlyZWQpDQoNCj4gDQo+IFNvIHdoYXQgeW91IGNvbnNpZGVyIGEgZG93bnNpZGUgbWF5 IGFjdHVhbGx5IGJlIGFub3RoZXIgYWR2YW50YWdlIG9mIGENCj4gc2lnbmF0dXJlIGJhc2VkIHNj aGVtZSAtIGlmIHlvdSBuZWVkIHRvIHdvcnJ5IGFib3V0IGF0dGFja3Mgb24gdGhlIFNUVU4NCj4g cHJvdG9jb2wsIHRoZW4geW91IGNhbiBjaG9vc2UgaG93IHlvdSBoYW5kbGUgdGhhdCAibG9jYWxs eSIgKGJldHdlZW4gdGhlDQo+IGJyb3dzZXIgYW5kIFRVUk4gc2VydmVyLCBlLmcuIHVzaW5nIERU TFMgYXMgeW91IHN1Z2dlc3QpIGFuZCBub3QgaGF2ZSB0bw0KPiBkZXBlbmQgb24gdGhlIGVzdGFi bGlzaG1lbnQgb2YgeWV0IGFub3RoZXIgV2ViIFBLSSBlcXVpdmFsZW50Lg0KDQpZZXMgYW5kIGlu IHRoaXMgc2NlbmFyaW8gV2ViUlRDIHNlcnZlciBtdXN0IGZvcmNlIHRoZSBjbGllbnQgdG8gcGlj ayBEVExTLg0KDQotVGlydQ0KPiANCj4gQ2hlZXJzLA0KPiBTLg0K From nobody Thu Apr 30 06:21:54 2015 Return-Path: X-Original-To: tram@ietfa.amsl.com Delivered-To: tram@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 011B11A8F3C for ; Thu, 30 Apr 2015 06:21:51 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.21 X-Spam-Level: X-Spam-Status: No, score=-4.21 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, T_RP_MATCHES_RCVD=-0.01] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id n9F14EW5juTf for ; Thu, 30 Apr 2015 06:21:48 -0700 (PDT) Received: from mercury.scss.tcd.ie (mercury.scss.tcd.ie [134.226.56.6]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id E37E11A8930 for ; Thu, 30 Apr 2015 06:21:47 -0700 (PDT) Received: from localhost (localhost [127.0.0.1]) by mercury.scss.tcd.ie (Postfix) with ESMTP id 6DF38BE53; Thu, 30 Apr 2015 14:21:46 +0100 (IST) X-Virus-Scanned: Debian amavisd-new at scss.tcd.ie Received: from mercury.scss.tcd.ie ([127.0.0.1]) by localhost (mercury.scss.tcd.ie [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id d2R5KO7tgvXL; Thu, 30 Apr 2015 14:21:45 +0100 (IST) Received: from [10.87.48.73] (unknown [86.46.18.22]) by mercury.scss.tcd.ie (Postfix) with ESMTPSA id 16872BE51; Thu, 30 Apr 2015 14:21:45 +0100 (IST) Message-ID: <55422C68.8010505@cs.tcd.ie> Date: Thu, 30 Apr 2015 14:21:44 +0100 From: Stephen Farrell User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:31.0) Gecko/20100101 Thunderbird/31.6.0 MIME-Version: 1.0 To: "Tirumaleswar Reddy (tireddy)" , "tram@ietf.org" References: <913383AAA69FF945B8F946018B75898A47821E90@xmb-rcd-x10.cisco.com> <55409F56.3090003@cs.tcd.ie> <913383AAA69FF945B8F946018B75898A47822B94@xmb-rcd-x10.cisco.com> In-Reply-To: <913383AAA69FF945B8F946018B75898A47822B94@xmb-rcd-x10.cisco.com> OpenPGP: id=D66EA7906F0B897FB2E97D582F3C8736805F8DA2; url= Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 7bit Archived-At: Subject: Re: [tram] signature based 3rd party scheme X-BeenThere: tram@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "Discussing the creation of a Turn Revised And Modernized \(TRAM\) WG, which goal is to consolidate the various initiatives to update TURN and STUN." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 30 Apr 2015 13:21:51 -0000 On 30/04/15 14:14, Tirumaleswar Reddy (tireddy) wrote: > TURN server and AS could be in the same administrative domain and > pre-arrangement is simple in this case. The other deployment scenario > is WebRTC service provider has tie-up with TURN service provider to > use its service; pre-arrangement helps accounting I don't see that that is necessarily true. It depends on who is accounting for what to whom. > and in future > support for token introspection > https://tools.ietf.org/html/draft-ietf-oauth-introspection-08. (There > is no WG consensus yet if token introspection is required) > >>> >>> So what you consider a downside may actually be another advantage >>> of a signature based scheme - if you need to worry about attacks >>> on the STUN protocol, then you can choose how you handle that >>> "locally" (between the browser and TURN server, e.g. using DTLS >>> as you suggest) and not have to depend on the establishment of >>> yet another Web PKI equivalent. > Yes and in this scenario WebRTC server must force the client to pick > DTLS. Again, that depends. If the TURN server is run by an enterprise then it might just be fine with allowing calls setup by any WebRTC server that can be held accountable or could use a white or block list of WebRTC servers. S. From nobody Thu Apr 30 09:36:32 2015 Return-Path: X-Original-To: tram@ietfa.amsl.com Delivered-To: tram@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 496201B2DB7 for ; Thu, 30 Apr 2015 09:36:31 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -14.511 X-Spam-Level: X-Spam-Status: No, score=-14.511 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_HI=-5, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id vukkPo7pIwnV for ; Thu, 30 Apr 2015 09:36:29 -0700 (PDT) Received: from alln-iport-6.cisco.com (alln-iport-6.cisco.com [173.37.142.93]) (using TLSv1 with cipher RC4-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id B46431B2DAC for ; Thu, 30 Apr 2015 09:36:29 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=2554; q=dns/txt; s=iport; t=1430411789; x=1431621389; h=from:to:subject:date:message-id:references:in-reply-to: content-transfer-encoding:mime-version; bh=UEvHvB4PDWcGEc0mizGbcnaDcgowKarlnH6GciwYOiE=; b=jrtfQozeoO9Tb0d4R4k81eV+sLEPFhpbws6x/zVNvL+tIUBeowZsgGMo W9e2qI/2HG56lSD8gWi+3YPKeb0seFw35q/iYafyNa+2FSYwWVhmFQ5Uv RxZYcalMvwkXLclmciZ6SOXi67RUdHq30BGAEYFDIDsLNpfXk7AlTC5VZ c=; X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: A0C3BACHWUJV/4wNJK1SCoMMU1wFgxbBTmYJgVOGBAIcgTk4FAEBAQEBAQGBCoQgAQEBAwEjEVEEAgEIEQQBAQECAgYdAwICAjAUAQgIAQEEARIIiBsIDbUAk0wBAQEBAQEBAQEBAQEBAQEBAQEBAQETBIEhiheEKBIaFiIGgmIvgRYFkWqECZw8I4Flgg9vgUSBAQEBAQ X-IronPort-AV: E=Sophos;i="5.11,677,1422921600"; d="scan'208";a="146033419" Received: from alln-core-7.cisco.com ([173.36.13.140]) by alln-iport-6.cisco.com with ESMTP; 30 Apr 2015 16:36:29 +0000 Received: from xhc-aln-x08.cisco.com (xhc-aln-x08.cisco.com [173.36.12.82]) by alln-core-7.cisco.com (8.14.5/8.14.5) with ESMTP id t3UGaSWJ018276 (version=TLSv1/SSLv3 cipher=AES128-SHA bits=128 verify=FAIL); Thu, 30 Apr 2015 16:36:29 GMT Received: from xmb-rcd-x10.cisco.com ([169.254.15.218]) by xhc-aln-x08.cisco.com ([173.36.12.82]) with mapi id 14.03.0195.001; Thu, 30 Apr 2015 11:36:28 -0500 From: "Tirumaleswar Reddy (tireddy)" To: Stephen Farrell , "tram@ietf.org" Thread-Topic: [tram] signature based 3rd party scheme Thread-Index: AdCCKHW9CjsMzThwTKab4ELJ3vVgMQAXWEQAADAwUsAACvq2AAAE52Og Date: Thu, 30 Apr 2015 16:36:28 +0000 Message-ID: <913383AAA69FF945B8F946018B75898A47822E1B@xmb-rcd-x10.cisco.com> References: <913383AAA69FF945B8F946018B75898A47821E90@xmb-rcd-x10.cisco.com> <55409F56.3090003@cs.tcd.ie> <913383AAA69FF945B8F946018B75898A47822B94@xmb-rcd-x10.cisco.com> <55422C68.8010505@cs.tcd.ie> In-Reply-To: <55422C68.8010505@cs.tcd.ie> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.65.68.186] Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 MIME-Version: 1.0 Archived-At: Subject: Re: [tram] signature based 3rd party scheme X-BeenThere: tram@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "Discussing the creation of a Turn Revised And Modernized \(TRAM\) WG, which goal is to consolidate the various initiatives to update TURN and STUN." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 30 Apr 2015 16:36:31 -0000 PiAtLS0tLU9yaWdpbmFsIE1lc3NhZ2UtLS0tLQ0KPiBGcm9tOiBTdGVwaGVuIEZhcnJlbGwgW21h aWx0bzpzdGVwaGVuLmZhcnJlbGxAY3MudGNkLmllXQ0KPiBTZW50OiBUaHVyc2RheSwgQXByaWwg MzAsIDIwMTUgNjo1MiBQTQ0KPiBUbzogVGlydW1hbGVzd2FyIFJlZGR5ICh0aXJlZGR5KTsgdHJh bUBpZXRmLm9yZw0KPiBTdWJqZWN0OiBSZTogW3RyYW1dIHNpZ25hdHVyZSBiYXNlZCAzcmQgcGFy dHkgc2NoZW1lDQo+IA0KPiANCj4gDQo+IE9uIDMwLzA0LzE1IDE0OjE0LCBUaXJ1bWFsZXN3YXIg UmVkZHkgKHRpcmVkZHkpIHdyb3RlOg0KPiA+IFRVUk4gc2VydmVyIGFuZCBBUyBjb3VsZCBiZSBp biB0aGUgc2FtZSBhZG1pbmlzdHJhdGl2ZSBkb21haW4gYW5kDQo+ID4gcHJlLWFycmFuZ2VtZW50 IGlzIHNpbXBsZSBpbiB0aGlzIGNhc2UuIFRoZSBvdGhlciBkZXBsb3ltZW50IHNjZW5hcmlvDQo+ ID4gaXMgV2ViUlRDIHNlcnZpY2UgcHJvdmlkZXIgaGFzIHRpZS11cCB3aXRoIFRVUk4gc2Vydmlj ZSBwcm92aWRlciB0bw0KPiA+IHVzZSBpdHMgc2VydmljZTsgcHJlLWFycmFuZ2VtZW50IGhlbHBz IGFjY291bnRpbmcNCj4gDQo+IEkgZG9uJ3Qgc2VlIHRoYXQgdGhhdCBpcyBuZWNlc3NhcmlseSB0 cnVlLiBJdCBkZXBlbmRzIG9uIHdobyBpcyBhY2NvdW50aW5nIGZvcg0KPiB3aGF0IHRvIHdob20u DQoNClRoZSBXZWJSVEMgc2VydmVyIGNvdWxkIGJlIGFjY291bnRpbmcgdGhlIHJlc291cmNlIHNl cnZlciAoVFVSTiBzZXJ2ZXIpIHVzZWQgYnkgdGhlIGNsaWVudCBmb3IgdGhlIGNhbGwuDQoNCj4g DQo+ID4gYW5kIGluIGZ1dHVyZQ0KPiA+IHN1cHBvcnQgZm9yIHRva2VuIGludHJvc3BlY3Rpb24N Cj4gPiBodHRwczovL3Rvb2xzLmlldGYub3JnL2h0bWwvZHJhZnQtaWV0Zi1vYXV0aC1pbnRyb3Nw ZWN0aW9uLTA4LiAoVGhlcmUNCj4gPiBpcyBubyBXRyBjb25zZW5zdXMgeWV0IGlmIHRva2VuIGlu dHJvc3BlY3Rpb24gaXMgcmVxdWlyZWQpDQo+ID4NCj4gPj4+DQo+ID4+PiBTbyB3aGF0IHlvdSBj b25zaWRlciBhIGRvd25zaWRlIG1heSBhY3R1YWxseSBiZSBhbm90aGVyIGFkdmFudGFnZSBvZg0K PiA+Pj4gYSBzaWduYXR1cmUgYmFzZWQgc2NoZW1lIC0gaWYgeW91IG5lZWQgdG8gd29ycnkgYWJv dXQgYXR0YWNrcyBvbiB0aGUNCj4gPj4+IFNUVU4gcHJvdG9jb2wsIHRoZW4geW91IGNhbiBjaG9v c2UgaG93IHlvdSBoYW5kbGUgdGhhdCAibG9jYWxseSINCj4gPj4+IChiZXR3ZWVuIHRoZSBicm93 c2VyIGFuZCBUVVJOIHNlcnZlciwgZS5nLiB1c2luZyBEVExTIGFzIHlvdQ0KPiA+Pj4gc3VnZ2Vz dCkgYW5kIG5vdCBoYXZlIHRvIGRlcGVuZCBvbiB0aGUgZXN0YWJsaXNobWVudCBvZiB5ZXQgYW5v dGhlcg0KPiA+Pj4gV2ViIFBLSSBlcXVpdmFsZW50Lg0KPiA+IFllcyBhbmQgaW4gdGhpcyBzY2Vu YXJpbyBXZWJSVEMgc2VydmVyIG11c3QgZm9yY2UgdGhlIGNsaWVudCB0byBwaWNrDQo+ID4gRFRM Uy4NCj4gDQo+IEFnYWluLCB0aGF0IGRlcGVuZHMuIElmIHRoZSBUVVJOIHNlcnZlciBpcyBydW4g YnkgYW4gZW50ZXJwcmlzZSB0aGVuIGl0IG1pZ2h0DQo+IGp1c3QgYmUgZmluZSB3aXRoIGFsbG93 aW5nIGNhbGxzIHNldHVwIGJ5IGFueSBXZWJSVEMgc2VydmVyIHRoYXQgY2FuIGJlIGhlbGQNCj4g YWNjb3VudGFibGUgb3IgY291bGQgdXNlIGEgd2hpdGUgb3IgYmxvY2sgbGlzdCBvZiBXZWJSVEMg c2VydmVycy4NCg0KWWVzLCB0aGlyZCBwYXJ0eSBhdXRob3JpemF0aW9uIGNhbiBiZSB1c2VkIGJ5 IHRoZSBUVVJOIHNlcnZlciBpbiB0aGUgRW50ZXJwcmlzZSBuZXR3b3JrIHRvIGlkZW50aWZ5IHRo ZSBXZWJSVEMgc2VydmVyLg0KIA0KLVRpcnUNCg0KPiANCj4gUy4NCg== From nobody Thu Apr 30 09:42:23 2015 Return-Path: X-Original-To: tram@ietfa.amsl.com Delivered-To: tram@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 8AAEE1A8898 for ; Thu, 30 Apr 2015 09:42:21 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.21 X-Spam-Level: X-Spam-Status: No, score=-4.21 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, T_RP_MATCHES_RCVD=-0.01] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id a5rB8c5zTtGE for ; Thu, 30 Apr 2015 09:42:20 -0700 (PDT) Received: from mercury.scss.tcd.ie (mercury.scss.tcd.ie [134.226.56.6]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 6FA251A87D4 for ; Thu, 30 Apr 2015 09:42:20 -0700 (PDT) Received: from localhost (localhost [127.0.0.1]) by mercury.scss.tcd.ie (Postfix) with ESMTP id 3A571BE59; Thu, 30 Apr 2015 17:42:19 +0100 (IST) X-Virus-Scanned: Debian amavisd-new at scss.tcd.ie Received: from mercury.scss.tcd.ie ([127.0.0.1]) by localhost (mercury.scss.tcd.ie [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id yGUoHBnALfNy; Thu, 30 Apr 2015 17:42:18 +0100 (IST) Received: from [10.87.48.73] (unknown [86.46.30.127]) by mercury.scss.tcd.ie (Postfix) with ESMTPSA id 29051BE58; Thu, 30 Apr 2015 17:42:18 +0100 (IST) Message-ID: <55425B69.6080008@cs.tcd.ie> Date: Thu, 30 Apr 2015 17:42:17 +0100 From: Stephen Farrell User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:31.0) Gecko/20100101 Thunderbird/31.6.0 MIME-Version: 1.0 To: "Tirumaleswar Reddy (tireddy)" , "tram@ietf.org" References: <913383AAA69FF945B8F946018B75898A47821E90@xmb-rcd-x10.cisco.com> <55409F56.3090003@cs.tcd.ie> <913383AAA69FF945B8F946018B75898A47822B94@xmb-rcd-x10.cisco.com> <55422C68.8010505@cs.tcd.ie> <913383AAA69FF945B8F946018B75898A47822E1B@xmb-rcd-x10.cisco.com> In-Reply-To: <913383AAA69FF945B8F946018B75898A47822E1B@xmb-rcd-x10.cisco.com> OpenPGP: id=D66EA7906F0B897FB2E97D582F3C8736805F8DA2; url= Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 7bit Archived-At: Subject: Re: [tram] signature based 3rd party scheme X-BeenThere: tram@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "Discussing the creation of a Turn Revised And Modernized \(TRAM\) WG, which goal is to consolidate the various initiatives to update TURN and STUN." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 30 Apr 2015 16:42:21 -0000 On 30/04/15 17:36, Tirumaleswar Reddy (tireddy) wrote: > Yes, third party authorization can be used by the TURN server in the > Enterprise network to identify the WebRTC server. > Indeed, if the current draft were the only way to do this then all enterprises would have to pre-arrange things with all WebRTC servers. IMO that won't work well, if at all. A signature based scheme could be used in various ways, e.g. to allow calls that don't consume much b/w regardless but to only allow calls setup by whitelisted WebRTC servers when those calls collectively consume a lot of b/w consumption. The latter sounds like something that's much easier to deploy to me and seems to meet some real use cases. I really think the current wg draft is terribly limited in terms of the kinds of use cases for which it'll work. I hope that the wg consider those limitations seriously. (Or if you have already please just point me at the archive/minutes that reflect that discussion.) S. From nobody Thu Apr 30 09:58:21 2015 Return-Path: X-Original-To: tram@ietfa.amsl.com Delivered-To: tram@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C2AB41A8748 for ; Thu, 30 Apr 2015 09:58:18 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -14.511 X-Spam-Level: X-Spam-Status: No, score=-14.511 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_HI=-5, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Ie-2zH9GuNZY for ; Thu, 30 Apr 2015 09:58:13 -0700 (PDT) Received: from rcdn-iport-5.cisco.com (rcdn-iport-5.cisco.com [173.37.86.76]) (using TLSv1 with cipher RC4-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id D90F41B2E51 for ; Thu, 30 Apr 2015 09:58:12 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=2198; q=dns/txt; s=iport; t=1430413093; x=1431622693; h=from:to:subject:date:message-id:references:in-reply-to: content-transfer-encoding:mime-version; bh=sevoj4dch9sjEpjROjsZE0CvVTIzr/NIA9fQ8yd2dvg=; b=bQWHt+69eO9PzGAjopJrUi1aheaPZIDyLlxXFwVXqVDbolc5EXPTHV0f Q1K0dflx1gW+BqjDAJ3+XLpanpDdwyRMavy+sImQBTga1bAX6Yno1BJXU 72V6BEqvot3VWpcYHF2tkxz1b2bo+a6v3O6FFjTuslDiyI/wKfGQ94Atu k=; X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: A0CGBQBnXkJV/5xdJa1SCoMMU1wFgxbBToJChgQCHIE5TAEBAQEBAYELhCABAQECAQEjEUoHBAIBCBEEAQEBAgIGHQMCAgIwFAEICAIEARIIiBsIDbRpk0wBAQEBAQEBAQEBAQEBAQEBAQEBAQETBIEhiheCO4FtBA4aFiIGgmIvgRYFkWqLa4NLkQ8jgWWCD28BgQFCgQEBAQE X-IronPort-AV: E=Sophos;i="5.11,677,1422921600"; d="scan'208";a="416081868" Received: from rcdn-core-5.cisco.com ([173.37.93.156]) by rcdn-iport-5.cisco.com with ESMTP; 30 Apr 2015 16:58:12 +0000 Received: from xhc-aln-x07.cisco.com (xhc-aln-x07.cisco.com [173.36.12.81]) by rcdn-core-5.cisco.com (8.14.5/8.14.5) with ESMTP id t3UGwCSF028699 (version=TLSv1/SSLv3 cipher=AES128-SHA bits=128 verify=FAIL); Thu, 30 Apr 2015 16:58:12 GMT Received: from xmb-rcd-x10.cisco.com ([169.254.15.218]) by xhc-aln-x07.cisco.com ([173.36.12.81]) with mapi id 14.03.0195.001; Thu, 30 Apr 2015 11:58:11 -0500 From: "Tirumaleswar Reddy (tireddy)" To: Stephen Farrell , "tram@ietf.org" Thread-Topic: [tram] signature based 3rd party scheme Thread-Index: AdCCKHW9CjsMzThwTKab4ELJ3vVgMQAXWEQAADAwUsAACvq2AAAE52OgAAIZrIAACjJEoA== Date: Thu, 30 Apr 2015 16:58:10 +0000 Message-ID: <913383AAA69FF945B8F946018B75898A47823028@xmb-rcd-x10.cisco.com> References: <913383AAA69FF945B8F946018B75898A47821E90@xmb-rcd-x10.cisco.com> <55409F56.3090003@cs.tcd.ie> <913383AAA69FF945B8F946018B75898A47822B94@xmb-rcd-x10.cisco.com> <55422C68.8010505@cs.tcd.ie> <913383AAA69FF945B8F946018B75898A47822E1B@xmb-rcd-x10.cisco.com> <55425B69.6080008@cs.tcd.ie> In-Reply-To: <55425B69.6080008@cs.tcd.ie> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.65.68.186] Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 MIME-Version: 1.0 Archived-At: Subject: Re: [tram] signature based 3rd party scheme X-BeenThere: tram@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "Discussing the creation of a Turn Revised And Modernized \(TRAM\) WG, which goal is to consolidate the various initiatives to update TURN and STUN." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 30 Apr 2015 16:58:18 -0000 PiAtLS0tLU9yaWdpbmFsIE1lc3NhZ2UtLS0tLQ0KPiBGcm9tOiBTdGVwaGVuIEZhcnJlbGwgW21h aWx0bzpzdGVwaGVuLmZhcnJlbGxAY3MudGNkLmllXQ0KPiBTZW50OiBUaHVyc2RheSwgQXByaWwg MzAsIDIwMTUgMTA6MTIgUE0NCj4gVG86IFRpcnVtYWxlc3dhciBSZWRkeSAodGlyZWRkeSk7IHRy YW1AaWV0Zi5vcmcNCj4gU3ViamVjdDogUmU6IFt0cmFtXSBzaWduYXR1cmUgYmFzZWQgM3JkIHBh cnR5IHNjaGVtZQ0KPiANCj4gDQo+IA0KPiBPbiAzMC8wNC8xNSAxNzozNiwgVGlydW1hbGVzd2Fy IFJlZGR5ICh0aXJlZGR5KSB3cm90ZToNCj4gPiBZZXMsIHRoaXJkIHBhcnR5IGF1dGhvcml6YXRp b24gY2FuIGJlIHVzZWQgYnkgdGhlIFRVUk4gc2VydmVyIGluIHRoZQ0KPiA+IEVudGVycHJpc2Ug bmV0d29yayB0byBpZGVudGlmeSB0aGUgV2ViUlRDIHNlcnZlci4NCj4gPg0KPiANCj4gSW5kZWVk LCBpZiB0aGUgY3VycmVudCBkcmFmdCB3ZXJlIHRoZSBvbmx5IHdheSB0byBkbyB0aGlzIHRoZW4g YWxsDQo+IGVudGVycHJpc2VzIHdvdWxkIGhhdmUgdG8gcHJlLWFycmFuZ2UgdGhpbmdzIHdpdGgg YWxsIFdlYlJUQyBzZXJ2ZXJzLg0KDQpObywgcHJlLWFycmFuZ2VtZW50IGlzIG5vdCByZXF1aXJl ZCB3aXRoIGFsbCBXZWJSVEMgc2VydmVycy4gDQoNCj4gSU1PIHRoYXQgd29uJ3Qgd29yayB3ZWxs LCBpZiBhdCBhbGwuDQo+IA0KPiBBIHNpZ25hdHVyZSBiYXNlZCBzY2hlbWUgY291bGQgYmUgdXNl ZCBpbiB2YXJpb3VzIHdheXMsIGUuZy4gdG8NCj4gYWxsb3cgY2FsbHMgdGhhdCBkb24ndCBjb25z dW1lIG11Y2ggYi93IHJlZ2FyZGxlc3MgYnV0IHRvIG9ubHkNCj4gYWxsb3cgY2FsbHMgc2V0dXAg Ynkgd2hpdGVsaXN0ZWQgV2ViUlRDIHNlcnZlcnMgd2hlbiB0aG9zZSBjYWxscw0KPiBjb2xsZWN0 aXZlbHkgY29uc3VtZSBhIGxvdCBvZiBiL3cgY29uc3VtcHRpb24uDQoNClRoZSBhYm92ZSBwcm9i bGVtIGNhbiBhbHNvIGJlIHNvbHZlZCBieSB0aGUgcHJvcG9zZWQgbWVjaGFuaXNtIGluIHRoZSBk cmFmdCBhbmQgc2ltaWxhciBlbnRlcnByaXNlIHVzZSBjYXNlIHdhcyBkaXNjdXNzZWQgaW4gSUFC IHdvcmtzaG9wIHNvbWV0aW1lIGJhY2sgaHR0cHM6Ly93d3cuaWFiLm9yZy93cC1jb250ZW50L0lB Qi11cGxvYWRzLzIwMTQvMTIvc2VtaTIwMTVfcmVkZHkucGRmLg0KDQotVGlydQ0KDQo+IA0KPiBU aGUgbGF0dGVyIHNvdW5kcyBsaWtlIHNvbWV0aGluZyB0aGF0J3MgbXVjaCBlYXNpZXIgdG8gZGVw bG95DQo+IHRvIG1lIGFuZCBzZWVtcyB0byBtZWV0IHNvbWUgcmVhbCB1c2UgY2FzZXMuDQo+IA0K PiBJIHJlYWxseSB0aGluayB0aGUgY3VycmVudCB3ZyBkcmFmdCBpcyB0ZXJyaWJseSBsaW1pdGVk IGluIHRlcm1zDQo+IG9mIHRoZSBraW5kcyBvZiB1c2UgY2FzZXMgZm9yIHdoaWNoIGl0J2xsIHdv cmsuIEkgaG9wZSB0aGF0IHRoZQ0KPiB3ZyBjb25zaWRlciB0aG9zZSBsaW1pdGF0aW9ucyBzZXJp b3VzbHkuIChPciBpZiB5b3UgaGF2ZSBhbHJlYWR5DQo+IHBsZWFzZSBqdXN0IHBvaW50IG1lIGF0 IHRoZSBhcmNoaXZlL21pbnV0ZXMgdGhhdCByZWZsZWN0IHRoYXQNCj4gZGlzY3Vzc2lvbi4pDQo+ IA0KPiBTLg0K From nobody Thu Apr 30 10:06:55 2015 Return-Path: X-Original-To: tram@ietfa.amsl.com Delivered-To: tram@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id D85AF1A888B for ; Thu, 30 Apr 2015 10:06:54 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.21 X-Spam-Level: X-Spam-Status: No, score=-4.21 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, T_RP_MATCHES_RCVD=-0.01] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id yLqC-bwW5BbJ for ; Thu, 30 Apr 2015 10:06:53 -0700 (PDT) Received: from mercury.scss.tcd.ie (mercury.scss.tcd.ie [134.226.56.6]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id D9E9A1A8731 for ; Thu, 30 Apr 2015 10:06:50 -0700 (PDT) Received: from localhost (localhost [127.0.0.1]) by mercury.scss.tcd.ie (Postfix) with ESMTP id A4AF3BE75; Thu, 30 Apr 2015 18:06:49 +0100 (IST) X-Virus-Scanned: Debian amavisd-new at scss.tcd.ie Received: from mercury.scss.tcd.ie ([127.0.0.1]) by localhost (mercury.scss.tcd.ie [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id swgo9CB0oQ5p; Thu, 30 Apr 2015 18:06:48 +0100 (IST) Received: from [10.87.48.73] (unknown [86.46.30.127]) by mercury.scss.tcd.ie (Postfix) with ESMTPSA id 2037ABE64; Thu, 30 Apr 2015 18:06:47 +0100 (IST) Message-ID: <55426126.9020605@cs.tcd.ie> Date: Thu, 30 Apr 2015 18:06:46 +0100 From: Stephen Farrell User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:31.0) Gecko/20100101 Thunderbird/31.6.0 MIME-Version: 1.0 To: "Tirumaleswar Reddy (tireddy)" , "tram@ietf.org" References: <913383AAA69FF945B8F946018B75898A47821E90@xmb-rcd-x10.cisco.com> <55409F56.3090003@cs.tcd.ie> <913383AAA69FF945B8F946018B75898A47822B94@xmb-rcd-x10.cisco.com> <55422C68.8010505@cs.tcd.ie> <913383AAA69FF945B8F946018B75898A47822E1B@xmb-rcd-x10.cisco.com> <55425B69.6080008@cs.tcd.ie> <913383AAA69FF945B8F946018B75898A47823028@xmb-rcd-x10.cisco.com> In-Reply-To: <913383AAA69FF945B8F946018B75898A47823028@xmb-rcd-x10.cisco.com> OpenPGP: id=D66EA7906F0B897FB2E97D582F3C8736805F8DA2; url= Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 7bit Archived-At: Subject: Re: [tram] signature based 3rd party scheme X-BeenThere: tram@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "Discussing the creation of a Turn Revised And Modernized \(TRAM\) WG, which goal is to consolidate the various initiatives to update TURN and STUN." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 30 Apr 2015 17:06:55 -0000 On 30/04/15 17:58, Tirumaleswar Reddy (tireddy) wrote: >> > >> > Indeed, if the current draft were the only way to do this then all >> > enterprises would have to pre-arrange things with all WebRTC servers. > No, pre-arrangement is not required with all WebRTC servers. Sorry, how? S. From nobody Thu Apr 30 20:56:15 2015 Return-Path: X-Original-To: tram@ietfa.amsl.com Delivered-To: tram@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E010D1B301E for ; Thu, 30 Apr 2015 20:56:13 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -14.511 X-Spam-Level: X-Spam-Status: No, score=-14.511 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_HI=-5, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Xk0kSMuoMKVg for ; Thu, 30 Apr 2015 20:56:12 -0700 (PDT) Received: from rcdn-iport-8.cisco.com (rcdn-iport-8.cisco.com [173.37.86.79]) (using TLSv1 with cipher RC4-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 710C11B301D for ; Thu, 30 Apr 2015 20:56:12 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=1360; q=dns/txt; s=iport; t=1430452572; x=1431662172; h=from:to:subject:date:message-id:references:in-reply-to: content-transfer-encoding:mime-version; bh=t6VL894MG1OcIPh/kiHz5v8kSEE+5mxy5+TqjhcdaXs=; b=L1UJ/ijp5ybPmWivwRNY8QvIko1DSI0fwy9iJQnJpOA4IkYmCl+QgogM pT4MuQXs65BA6EHh/nGJl3khBD9G73qlvtql+yETN2+onSu3ej0vPK+yw EQTNExuI8jkcBzrBEsTSE8BKWywYPavhR8jkqzOt/X9l46xSxMfjOyXvo U=; X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: A0AUBQAi+UJV/51dJa1cgwxTXAWDGMFSgkWGAgIcgTxMAQEBAQEBgQuEIAEBAQMBIxFRBAIBCBEEAQEBAgIGHQMCAgIwFAEICAIEARIIiBsIDbN0kz0BAQEBAQEBAQEBAQEBAQEBAQEBAQEXgSGKF4Q6GhYiBoJiL4EWBZFvhAqIIJQdI4N0bwGBQ4EBAQEB X-IronPort-AV: E=Sophos;i="5.13,348,1427760000"; d="scan'208";a="8391660" Received: from rcdn-core-6.cisco.com ([173.37.93.157]) by rcdn-iport-8.cisco.com with ESMTP; 01 May 2015 03:56:10 +0000 Received: from xhc-aln-x05.cisco.com (xhc-aln-x05.cisco.com [173.36.12.79]) by rcdn-core-6.cisco.com (8.14.5/8.14.5) with ESMTP id t413uATT019646 (version=TLSv1/SSLv3 cipher=AES128-SHA bits=128 verify=FAIL); Fri, 1 May 2015 03:56:10 GMT Received: from xmb-rcd-x10.cisco.com ([169.254.15.218]) by xhc-aln-x05.cisco.com ([173.36.12.79]) with mapi id 14.03.0195.001; Thu, 30 Apr 2015 22:56:10 -0500 From: "Tirumaleswar Reddy (tireddy)" To: Stephen Farrell , "tram@ietf.org" Thread-Topic: [tram] signature based 3rd party scheme Thread-Index: AdCCKHW9CjsMzThwTKab4ELJ3vVgMQAXWEQAADAwUsAACvq2AAAE52OgAAIZrIAACjJEoP//tUUA//+1hfA= Date: Fri, 1 May 2015 03:56:09 +0000 Message-ID: <913383AAA69FF945B8F946018B75898A4782322D@xmb-rcd-x10.cisco.com> References: <913383AAA69FF945B8F946018B75898A47821E90@xmb-rcd-x10.cisco.com> <55409F56.3090003@cs.tcd.ie> <913383AAA69FF945B8F946018B75898A47822B94@xmb-rcd-x10.cisco.com> <55422C68.8010505@cs.tcd.ie> <913383AAA69FF945B8F946018B75898A47822E1B@xmb-rcd-x10.cisco.com> <55425B69.6080008@cs.tcd.ie> <913383AAA69FF945B8F946018B75898A47823028@xmb-rcd-x10.cisco.com> <55426126.9020605@cs.tcd.ie> In-Reply-To: <55426126.9020605@cs.tcd.ie> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.65.74.86] Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 MIME-Version: 1.0 Archived-At: Subject: Re: [tram] signature based 3rd party scheme X-BeenThere: tram@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "Discussing the creation of a Turn Revised And Modernized \(TRAM\) WG, which goal is to consolidate the various initiatives to update TURN and STUN." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 01 May 2015 03:56:14 -0000 PiAtLS0tLU9yaWdpbmFsIE1lc3NhZ2UtLS0tLQ0KPiBGcm9tOiBTdGVwaGVuIEZhcnJlbGwgW21h aWx0bzpzdGVwaGVuLmZhcnJlbGxAY3MudGNkLmllXQ0KPiBTZW50OiBUaHVyc2RheSwgQXByaWwg MzAsIDIwMTUgMTA6MzcgUE0NCj4gVG86IFRpcnVtYWxlc3dhciBSZWRkeSAodGlyZWRkeSk7IHRy YW1AaWV0Zi5vcmcNCj4gU3ViamVjdDogUmU6IFt0cmFtXSBzaWduYXR1cmUgYmFzZWQgM3JkIHBh cnR5IHNjaGVtZQ0KPiANCj4gDQo+IA0KPiBPbiAzMC8wNC8xNSAxNzo1OCwgVGlydW1hbGVzd2Fy IFJlZGR5ICh0aXJlZGR5KSB3cm90ZToNCj4gPj4gPg0KPiA+PiA+IEluZGVlZCwgaWYgdGhlIGN1 cnJlbnQgZHJhZnQgd2VyZSB0aGUgb25seSB3YXkgdG8gZG8gdGhpcyB0aGVuIGFsbA0KPiA+PiA+ IGVudGVycHJpc2VzIHdvdWxkIGhhdmUgdG8gcHJlLWFycmFuZ2UgdGhpbmdzIHdpdGggYWxsIFdl YlJUQyBzZXJ2ZXJzLg0KPiA+IE5vLCBwcmUtYXJyYW5nZW1lbnQgaXMgbm90IHJlcXVpcmVkIHdp dGggYWxsIFdlYlJUQyBzZXJ2ZXJzLg0KPiANCj4gU29ycnksIGhvdz8NCg0KSXQgaXMgZGlzY3Vz c2VkIGluIGh0dHA6Ly90b29scy5pZXRmLm9yZy9odG1sL2RyYWZ0LWlldGYtdHJhbS10dXJuLXRo aXJkLXBhcnR5LWF1dGh6LTE1I3NlY3Rpb24tNi4xLiBJZiBXZWJSVEMgc2VydmVyIGhhcyBwcmUt YXJyYW5nZW1lbnQgd2l0aCB0aGUgRW50ZXJwcmlzZSBuZXR3b3JrIHRoZW4gY2xpZW50IHVzZXMg dGhpcmQgcGFydHkgYXV0aG9yaXphdGlvbiB3aXRoIHRoZSBUVVJOIHNlcnZlciBpbiBFbnRlcnBy aXNlIG5ldHdvcmsgYW5kIHdoZW4gV2ViUlRDIHNlcnZlcihzKSBkbyBub3QgaGF2ZSBhbnkgcHJl LWFycmFuZ2VtZW50IHdpdGggdGhlIEVudGVycHJpc2UgbmV0d29yayB0aGVuIHRoZSBjbGllbnQg dXNlcyBmaXJzdCBwYXJ0eSBhdXRoZW50aWNhdGlvbiB3aXRoIHRoZSBUVVJOIHNlcnZlci4NCiAN Ci1UaXJ1DQoNCj4gDQo+IFMuDQoNCg==