From nobody Wed Dec 12 16:20:30 2018 Return-Path: X-Original-To: tram@ietfa.amsl.com Delivered-To: tram@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 3CA9B13133C; Wed, 12 Dec 2018 16:20:23 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.998 X-Spam-Level: X-Spam-Status: No, score=-1.998 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id mI-Qf9SCc5-i; Wed, 12 Dec 2018 16:20:20 -0800 (PST) Received: from mail-lj1-x22e.google.com (mail-lj1-x22e.google.com [IPv6:2a00:1450:4864:20::22e]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id EB99013133D; Wed, 12 Dec 2018 16:20:19 -0800 (PST) Received: by mail-lj1-x22e.google.com with SMTP id s5-v6so180797ljd.12; Wed, 12 Dec 2018 16:20:19 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=WNHWGBPQjAg3961PDFmD7Em1Qra7KuabRzkpED9icIE=; b=ZJ1B4nBevFlTkkQ3pBQ1uYkqFNUkSprAymMWq2/ElH8MnQ4FlR9yFfB8Vf29UEY4n7 QLImo2LCWbzvAnGgFEdbLAdRebs0t0cjhxO8lVqKtd9B2vqU4btW5Kk/tgawZNbgjU6I 51qQEa6m3zYSzQ4Ub9KIWq750Hea1sQUY8wjefgPHEPJmfYz3xKrYSvPyTZLkSW/BfSF cQ0S2+F9dzlzZxoQaNKHj9L+8xG6SfAx/EPmkXhXmOGzGhfL7jHK4vHGXlOBUElNASBW iL4jbXXhHzAEiWjeQyVT4P88fTqqD+AD7S0r/0yKW0j0WuBW8aU2b47ZZpwrEMDLmJdp Ja5w== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=WNHWGBPQjAg3961PDFmD7Em1Qra7KuabRzkpED9icIE=; b=OIbWUgI3IQXRCCZr/W1M9WGIVrZvSnZa/IBYLsHmf0gt/jX9foNdnm3ngipM/quHFA Xx1rZ4CzNz794YAEEjVSXcq9VK0gdp19nzDwi6TY4/C4Tfamh7FBxk8QzlAwVWaYWxu3 IyBwQ53rJRGIi63A+igNEv7eoNoL32lHGpONXAljH/b6N4iqNHo0jZiJ2ZSpjzZY58by xX/g2pNiWKN4GKTUOGIZYJd6OGmSVhUPyYc95+6CSk3fjRiofZGwhU8fVCfRLn5ztsgP Hs9j2ULXgcC/4DUgIFh0t1+d3z1W6Tc6dqiMzvx7woAy10DelnvBS5GB7IcbEeDx1hih Z6Lg== X-Gm-Message-State: AA+aEWY+mouG4OzquuLz32dZ0NOXZRfNQgTs13a8JFATI20DdYzpHWRo l9yxPzI6iG43MXidjRA5LGDeqbXaFzH/ah2voXk= X-Google-Smtp-Source: AFSGD/Xg52Q+wh3i3shL0R5tWBR+DhhQ9gwJCOJJCYOYhph/WL07Wj7a4QKEuuaXKmLFt3M7I94ZqsIQjQ1gOP7BPSs= X-Received: by 2002:a2e:197:: with SMTP id f23-v6mr13572738lji.144.1544660418041; Wed, 12 Dec 2018 16:20:18 -0800 (PST) MIME-Version: 1.0 References: <153834237082.13405.1228259718885034461.idtracker@ietfa.amsl.com> In-Reply-To: From: Spencer Dawkins at IETF Date: Wed, 12 Dec 2018 18:20:07 -0600 Message-ID: To: Simon Perreault Cc: Adam Roach , IESG , "tram-chairs@ietf.org" , "draft-ietf-tram-stun-pmtud@ietf.org" , Gonzalo Camarillo , "Asveren, Tolga" , "tram@ietf.org" Content-Type: multipart/alternative; boundary="000000000000841d16057cdc47ee" Archived-At: Subject: Re: [tram] Adam Roach's Discuss on draft-ietf-tram-stun-pmtud-10: (with DISCUSS and COMMENT) X-BeenThere: tram@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "Discussing the creation of a Turn Revised And Modernized \(TRAM\) WG, which goal is to consolidate the various initiatives to update TURN and STUN." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 13 Dec 2018 00:20:23 -0000 --000000000000841d16057cdc47ee Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable Hi, Simon, On Fri, Nov 23, 2018 at 7:27 AM Simon Perreault wrote: > ---------------------------------------------------------------------- > DISCUSS: > ---------------------------------------------------------------------- > > This seems like an interesting technique that warrants collection of > operational > experience. > > >From a process perspective, I think we have a bit of an issue, unless I'= ve > overlooked something relevant. This is proposed as a Standards-Track > document, > but it relies on the use of the PADDING attribute defined in RFC 5780. RF= C > 5780 is Experimental, so this is a formal downref. And RFC 5780 does not > appear in the downref registry [1], nor did the IETF last call [2] includ= e > a > request that the IETF community consider allowing such a refernce. > > >From a practical perspective, the mechanism described in this document > seems > like the kind of thing that it would be useful to gather operational > experience > with prior to putting it on the standards track. I have some operational > concerns (described below) that I think could be either proven out or > dispelled > by experimental deployment of the technology. > > My recommendation is to recategorize this mechanism as experimental, > adding some > text about the desire to gather operational experience. > > For avoidance of doubt: My DISCUSS is only on the process issue, and I'll > happily clear regardless of how this issue is rationalized (e.g., either = by > running IETF last call again, by reclassifying this mechanism as > experimental, > or perhaps some novel solution that I may not have thought of). Everythin= g > else is merely a recommendation. > > > > I don't think I've seen a specific response to Adam's point here, which I > believe is that one of (at least) three things should happen - > > > > - a second Last Call, explicitly calling out this downref, OR > > > > - approval as an Experimental RFC, which makes the downref issue go away, > OR > > > > - (and this didn't happen in this thread, but in some conversation, I > remember that) Adam wondered if reusing the PADDING attribute was the rig= ht > thing to do (and that was a question, not a concern, but relevant here, > since if this document defined its own attribute, the downref would also = go > away). > > > > Any thoughts on this? > > > > Spencer, Adam, > > > > I see an easy fourth option: > > > > - Pull the definition of PADDING into this document. Declare that we've > gathered sufficient experience with PADDING that it now warrants being > elevated to Standards Track. That is, it's been proven to work. > This is plausible. It solves the first-order problem. I note that RFC 5780 defined a number of new attributes. Is pulling PADDING forward the right thing to do, or are there others that would also qualify (so, perhaps a status change for RFC 5780)? I don't have an opinion about this, but I should ask. Thanks, Spencer > I=E2=80=99m fine with whatever, for the record. > > > > Simon > --000000000000841d16057cdc47ee Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable
Hi, Sim= on,=C2=A0

On Fri, Nov = 23, 2018 at 7:27 AM Simon Perreault <Simon.Perreault@logmein.com> wrote:

--= --------------------------------------------------------------------
DISCUSS:
----------------------------------------------------------------------

This seems like an interesting technique that warrants collection of operat= ional
experience.

>From a process perspective, I think we have a bit of an issue, u= nless I've
overlooked something relevant. This is proposed as a Standards-Track docume= nt,
but it relies on the use of the PADDING attribute defined in RFC 5780. RFC<= br> 5780 is Experimental, so this is a formal downref. And RFC 5780 does not appear in the downref registry [1], nor did the IETF last call [2] include = a
request that the IETF community consider allowing such a refernce.

>From a practical perspective, the mechanism described in this document = seems
like the kind of thing that it would be useful to gather operational experi= ence
with prior to putting it on the standards track. I have some operational concerns (described below) that I think could be either proven out or dispe= lled
by experimental deployment of the technology.

My recommendation is to recategorize this mechanism as experimental, adding= some
text about the desire to gather operational experience.

For avoidance of doubt: My DISCUSS is only on the process issue, and I'= ll
happily clear regardless of how this issue is rationalized (e.g., either by=
running IETF last call again, by reclassifying this mechanism as experiment= al,
or perhaps some novel solution that I may not have thought of). Everything<= br> else is merely a recommendation.

=C2=A0

I don't think I'= ;ve seen a specific response to Adam's point here, which I believe is t= hat one of (at least) three things should happen -

=C2=A0

- a second Last Call, e= xplicitly calling out this downref, OR

=C2=A0

- approval as an Experi= mental RFC, which makes the downref issue go away, OR

=C2=A0

- (and this didn't = happen in this thread, but in some conversation, I remember that) Adam wond= ered if reusing the PADDING attribute was the right thing to do (and that w= as a question, not a concern, but relevant here, since if this document defined its own attribute, the downref would = also go away).

=C2=A0

Any thoughts on this?

=C2=A0

Spencer, Adam,

=C2=A0

I see an easy fourth option:=

=C2=A0

- Pull the definition of PADDIN= G into this document. Declare that we've gathered sufficient experience= with PADDING that it now warrants being elevated to Standards Track. That is, it's been proven to work.


This is plausible. It solves the first-order probl= em.=C2=A0

I note that=C2=A0RFC 5780 defined a numb= er of new attributes. Is pulling PADDING forward the right thing to do, or = are there others that would also qualify (so, perhaps a status change for= =C2=A0RFC 5780)?=C2=A0

I don't have an opinion= about this, but I should ask.

Thanks,
<= br>
Spencer
=C2=A0

I=E2=80=99m fine with whatever,= for the record.

=C2=A0

Simon

--000000000000841d16057cdc47ee-- From nobody Thu Dec 13 05:12:16 2018 Return-Path: X-Original-To: tram@ietfa.amsl.com Delivered-To: tram@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 4B0F5130DD3; Thu, 13 Dec 2018 05:12:14 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -19.16 X-Spam-Level: X-Spam-Status: No, score=-19.16 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-1.46, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001, USER_IN_DEF_DKIM_WL=-7.5, USER_IN_DEF_SPF_WL=-7.5] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=logmein.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ZdM1PX7IS4YN; Thu, 13 Dec 2018 05:12:11 -0800 (PST) Received: from mx0b-001a0901.pphosted.com (mx0b-001a0901.pphosted.com [67.231.152.111]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 7D48B130DD7; Thu, 13 Dec 2018 05:12:05 -0800 (PST) Received: from pps.filterd (m0074899.ppops.net [127.0.0.1]) by mx0b-001a0901.pphosted.com (8.16.0.27/8.16.0.27) with SMTP id wBDCw44Z005878; Thu, 13 Dec 2018 08:12:00 -0500 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=logmein.com; h=from : to : cc : subject : date : message-id : references : in-reply-to : content-type : mime-version; s=email; bh=QrEbcl9akg5a52NjbPjTTYuTvWZT4fh8GVpzMMLDS2w=; b=C2hdA5rrbOv9pKq1eR//UDsCa1DP9MQ/vsJtOo/I2jPQ8NYa7q3qmFrrtmLgMHSNp+yY BEsni6t7WwIGJaUwNXkYfDMrzSDz4/L+uzaCAQlyWhCtRlDiVKEjitv//pJD6EU9VqTP l06jZFn7+Z/754QfKupZPjfWMH35JAmeInQ= Received: from nam01-sn1-obe.outbound.protection.outlook.com (mail-sn1nam01lp2055.outbound.protection.outlook.com [104.47.32.55]) by mx0b-001a0901.pphosted.com with ESMTP id 2pbfbyrv5x-1 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT); Thu, 13 Dec 2018 08:12:00 -0500 Received: from MWHPR15MB1200.namprd15.prod.outlook.com (10.175.2.142) by MWHPR15MB1807.namprd15.prod.outlook.com (10.174.255.135) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.1425.18; Thu, 13 Dec 2018 13:11:58 +0000 Received: from MWHPR15MB1200.namprd15.prod.outlook.com ([fe80::5b9:4a61:9fe0:b7b1]) by MWHPR15MB1200.namprd15.prod.outlook.com ([fe80::5b9:4a61:9fe0:b7b1%2]) with mapi id 15.20.1425.016; Thu, 13 Dec 2018 13:11:58 +0000 From: Simon Perreault To: Spencer Dawkins at IETF CC: Adam Roach , IESG , "tram-chairs@ietf.org" , "draft-ietf-tram-stun-pmtud@ietf.org" , Gonzalo Camarillo , "Asveren, Tolga" , "tram@ietf.org" Thread-Topic: Adam Roach's Discuss on draft-ietf-tram-stun-pmtud-10: (with DISCUSS and COMMENT) Thread-Index: AQHUWQNKbxGEYwDhVEaOcLCOF8V9tqVX4rYAgAV4EwCAHuZkgIAA1NWg Date: Thu, 13 Dec 2018 13:11:58 +0000 Message-ID: References: <153834237082.13405.1228259718885034461.idtracker@ietfa.amsl.com> In-Reply-To: Accept-Language: fr-CA, en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [70.81.184.192] x-ms-publictraffictype: Email x-microsoft-exchange-diagnostics: 1; MWHPR15MB1807; 6:AeRFlVyJ49MYy6H0K9n4bvUA081sQl8hX86K98wGtW/JrCS7VF4wIz9KHAot91Xw8mxuwFTQk2jErwdIRV1vkBNaB6REkrZsPRvuIohtSi31l4XG6dqCWA3e/YnF5yaKkKB3PjzXBUqyR9HflN/dMIaqb6/zSPngbuDhAXxGHXNwTWoQHquJUJGs6THt+4r/V2das4/r5vQFgQ56BUi3H6Xwlnz+RHacmYSEmEdQ+8fHVrbybjFGaZVMMZgXSB5GvjcJ/DHn/DSoYeogZbO94oPqd1FEspWyPsCYSlGq1Zl8hsg96ySJwRbIKRSYzFMhA7EqiWqbiN9HIhHPzZNdJBeiKfkdcvGNNvHGsdxZOHhkz6MqMQIEFjUjthfa4i/YHzg+fKu9A0NmOTz5Jq2354fOFN/Cgly2s+4Hd3noz+4+4Noj3IECqsuQr6Xxxf7+7e85jkPkvf8tFVPNgOY2jg==; 5:0tOWgiE665BkYcSH0+yHfA0IRkMRsrzYFRRSv1jgf6RT8BteEQbABujZXGCfSyH+wkxVC+YBmciu//pHVrG24oL9amK7Zks4cXxq3jTc39cOA7n8kxBeEKWE+OBB/KWMKGgtLXjNEi2w/dIOb1+9QKPcHyOUPhrT9YVcPp0udxI=; 7:/Ah8moSm0Xp2XNK0bR1gHoULScWmLXw1YWY0thFl4Mra3SQzwoYmmFTaDAckkkQkz9G6QkdWV/cRC08NCVkvtRSTrjK0culLA4f7LK83Jm87KcvfOqN0kXa+GItFtPTePof+ekCgu2JZpDE7v5QgbQ== x-ms-exchange-antispam-srfa-diagnostics: SOS; x-ms-office365-filtering-correlation-id: 15dd66ad-a1f8-4e47-53cf-08d660fc8fec x-microsoft-antispam: BCL:0; PCL:0; RULEID:(2390098)(7020095)(4652040)(8989299)(4534185)(4627221)(201703031133081)(201702281549075)(8990200)(5600074)(711020)(2017052603328)(7153060)(7193020); SRVR:MWHPR15MB1807; x-ms-traffictypediagnostic: MWHPR15MB1807: x-microsoft-antispam-prvs: x-ms-exchange-senderadcheck: 1 x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(8211001083)(3230021)(999002)(6040522)(2401047)(5005006)(8121501046)(10201501046)(3002001)(93006095)(93001095)(3231475)(944501520)(52105112)(148016)(149066)(150057)(6041310)(201703131423095)(201702281528075)(20161123555045)(201703061421075)(201703061406153)(20161123562045)(20161123558120)(20161123564045)(20161123560045)(201708071742011)(7699051)(76991095); SRVR:MWHPR15MB1807; BCL:0; PCL:0; RULEID:; SRVR:MWHPR15MB1807; x-forefront-prvs: 088552DE73 x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(39860400002)(376002)(396003)(136003)(366004)(346002)(78642003)(199004)(189003)(6916009)(6246003)(39060400002)(53936002)(4326008)(2906002)(76176011)(256004)(55016002)(54896002)(9686003)(5660300001)(6306002)(14454004)(14444005)(25786009)(26005)(186003)(478600001)(72206003)(81166006)(8676002)(81156014)(6506007)(790700001)(6116002)(3846002)(66066001)(8936002)(68736007)(6436002)(97736004)(33656002)(102836004)(74316002)(54906003)(316002)(7736002)(93886005)(86362001)(486006)(11346002)(446003)(229853002)(476003)(99286004)(71200400001)(71190400001)(106356001)(7696005)(105586002)(69594002); DIR:OUT; SFP:1102; SCL:1; SRVR:MWHPR15MB1807; H:MWHPR15MB1200.namprd15.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; A:1; MX:1; received-spf: None (protection.outlook.com: logmein.com does not designate permitted sender hosts) x-microsoft-antispam-message-info: Cy8FS5xW/DOOaFSghxUvFDAJcN4lpnCDF41znQFp6LnllgZk6B2Exvv5aDR3XVNfKbgcbdaN896F39/xdxy1l2Y4VRSq+u203/8LIqTUgNspNXNIMjLjYJqA/VXIq9jcD7BRMNAGNjWlqCq4/AUNm397TM5LsgBtm9ATDheb7C2C5P0bq3b0/GMP63gVZL5R5vERBvGRc5fn4Do9PExHLpgBqhNPCZQfLs4fUgG2Biynu88va4jotv7ESLLpInTGckZbmlgRXrT5KEw4Uyt3iFum/n3J3UZpEw4N8brKGHDJDqz4kbJBukmiTEFG4Wf8 spamdiagnosticoutput: 1:99 spamdiagnosticmetadata: NSPM Content-Type: multipart/alternative; boundary="_000_MWHPR15MB1200F7BE766A80509FBFBE75FAA00MWHPR15MB1200namp_" MIME-Version: 1.0 X-OriginatorOrg: logmein.com X-MS-Exchange-CrossTenant-Network-Message-Id: 15dd66ad-a1f8-4e47-53cf-08d660fc8fec X-MS-Exchange-CrossTenant-originalarrivaltime: 13 Dec 2018 13:11:58.0837 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 84c4e5b0-26a0-4dac-b686-301d76713569 X-MS-Exchange-Transport-CrossTenantHeadersStamped: MWHPR15MB1807 X-Proofpoint-Virus-Version: vendor=fsecure engine=2.50.10434:, , definitions=2018-12-13_03:, , signatures=0 X-Proofpoint-Spam-Reason: safe Archived-At: Subject: Re: [tram] Adam Roach's Discuss on draft-ietf-tram-stun-pmtud-10: (with DISCUSS and COMMENT) X-BeenThere: tram@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "Discussing the creation of a Turn Revised And Modernized \(TRAM\) WG, which goal is to consolidate the various initiatives to update TURN and STUN." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 13 Dec 2018 13:12:15 -0000 --_000_MWHPR15MB1200F7BE766A80509FBFBE75FAA00MWHPR15MB1200namp_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 LSBQdWxsIHRoZSBkZWZpbml0aW9uIG9mIFBBRERJTkcgaW50byB0aGlzIGRvY3VtZW50LiBEZWNs YXJlIHRoYXQgd2UndmUgZ2F0aGVyZWQgc3VmZmljaWVudCBleHBlcmllbmNlIHdpdGggUEFERElO RyB0aGF0IGl0IG5vdyB3YXJyYW50cyBiZWluZyBlbGV2YXRlZCB0byBTdGFuZGFyZHMgVHJhY2su IFRoYXQgaXMsIGl0J3MgYmVlbiBwcm92ZW4gdG8gd29yay4NCg0KVGhpcyBpcyBwbGF1c2libGUu IEl0IHNvbHZlcyB0aGUgZmlyc3Qtb3JkZXIgcHJvYmxlbS4NCg0KSSBub3RlIHRoYXQgUkZDIDU3 ODAgZGVmaW5lZCBhIG51bWJlciBvZiBuZXcgYXR0cmlidXRlcy4gSXMgcHVsbGluZyBQQURESU5H IGZvcndhcmQgdGhlIHJpZ2h0IHRoaW5nIHRvIGRvLCBvciBhcmUgdGhlcmUgb3RoZXJzIHRoYXQg d291bGQgYWxzbyBxdWFsaWZ5IChzbywgcGVyaGFwcyBhIHN0YXR1cyBjaGFuZ2UgZm9yIFJGQyA1 NzgwKT8NCg0KSSBkb27igJl0IHRoaW5rIHRoZSBvdGhlcnMgaGF2ZSBiZWVuIGltcGxlbWVudGVk IG11Y2gsIHNvIHRoYXTigJlzIHdoeSBJIHRoaW5rIG9ubHkgcHVsbGluZyBQQURESU5HIG1ha2Vz IHNlbnNlLiBJZiBJIHJlbWVtYmVyIGNvcnJlY3RseSwgSSBvbmx5IGltcGxlbWVudGVkIFBBRERJ TkcgaW4gTnVtYiAoSSBkb27igJl0IGhhdmUgYWNjZXNzIHRvIHRoZSBzb3VyY2UgY29kZSBhbnlt b3JlIHNvIGNhbuKAmXQgYmUgc3VyZSkuDQoNCkFueW9uZSBlbHNlIHdpdGggYW4gb3Bpbmlvbj8N Cg0KU2ltb24NCg== --_000_MWHPR15MB1200F7BE766A80509FBFBE75FAA00MWHPR15MB1200namp_ Content-Type: text/html; charset="utf-8" Content-Transfer-Encoding: base64 PGh0bWwgeG1sbnM6dj0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTp2bWwiIHhtbG5zOm89InVy bjpzY2hlbWFzLW1pY3Jvc29mdC1jb206b2ZmaWNlOm9mZmljZSIgeG1sbnM6dz0idXJuOnNjaGVt YXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6d29yZCIgeG1sbnM6bT0iaHR0cDovL3NjaGVtYXMubWlj cm9zb2Z0LmNvbS9vZmZpY2UvMjAwNC8xMi9vbW1sIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcv VFIvUkVDLWh0bWw0MCI+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIg Y29udGVudD0idGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjxtZXRhIG5hbWU9IkdlbmVyYXRv ciIgY29udGVudD0iTWljcm9zb2Z0IFdvcmQgMTUgKGZpbHRlcmVkIG1lZGl1bSkiPg0KPHN0eWxl PjwhLS0NCi8qIEZvbnQgRGVmaW5pdGlvbnMgKi8NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6 IkNhbWJyaWEgTWF0aCI7DQoJcGFub3NlLTE6MiA0IDUgMyA1IDQgNiAzIDIgNDt9DQpAZm9udC1m YWNlDQoJe2ZvbnQtZmFtaWx5OkNhbGlicmk7DQoJcGFub3NlLTE6MiAxNSA1IDIgMiAyIDQgMyAy IDQ7fQ0KLyogU3R5bGUgRGVmaW5pdGlvbnMgKi8NCnAuTXNvTm9ybWFsLCBsaS5Nc29Ob3JtYWws IGRpdi5Nc29Ob3JtYWwNCgl7bWFyZ2luOjBjbTsNCgltYXJnaW4tYm90dG9tOi4wMDAxcHQ7DQoJ Zm9udC1zaXplOjExLjBwdDsNCglmb250LWZhbWlseToiQ2FsaWJyaSIsc2Fucy1zZXJpZjt9DQph OmxpbmssIHNwYW4uTXNvSHlwZXJsaW5rDQoJe21zby1zdHlsZS1wcmlvcml0eTo5OTsNCgljb2xv cjpibHVlOw0KCXRleHQtZGVjb3JhdGlvbjp1bmRlcmxpbmU7fQ0KYTp2aXNpdGVkLCBzcGFuLk1z b0h5cGVybGlua0ZvbGxvd2VkDQoJe21zby1zdHlsZS1wcmlvcml0eTo5OTsNCgljb2xvcjpwdXJw bGU7DQoJdGV4dC1kZWNvcmF0aW9uOnVuZGVybGluZTt9DQpwLm1zb25vcm1hbDAsIGxpLm1zb25v cm1hbDAsIGRpdi5tc29ub3JtYWwwDQoJe21zby1zdHlsZS1uYW1lOm1zb25vcm1hbDsNCgltc28t bWFyZ2luLXRvcC1hbHQ6YXV0bzsNCgltYXJnaW4tcmlnaHQ6MGNtOw0KCW1zby1tYXJnaW4tYm90 dG9tLWFsdDphdXRvOw0KCW1hcmdpbi1sZWZ0OjBjbTsNCglmb250LXNpemU6MTEuMHB0Ow0KCWZv bnQtZmFtaWx5OiJDYWxpYnJpIixzYW5zLXNlcmlmO30NCnNwYW4uRW1haWxTdHlsZTE4DQoJe21z by1zdHlsZS10eXBlOnBlcnNvbmFsLXJlcGx5Ow0KCWZvbnQtZmFtaWx5OiJDYWxpYnJpIixzYW5z LXNlcmlmOw0KCWNvbG9yOndpbmRvd3RleHQ7fQ0KLk1zb0NocERlZmF1bHQNCgl7bXNvLXN0eWxl LXR5cGU6ZXhwb3J0LW9ubHk7DQoJZm9udC1zaXplOjEwLjBwdDsNCglmb250LWZhbWlseToiQ2Fs aWJyaSIsc2Fucy1zZXJpZjsNCgltc28tZmFyZWFzdC1sYW5ndWFnZTpFTi1VUzt9DQpAcGFnZSBX b3JkU2VjdGlvbjENCgl7c2l6ZTo2MTIuMHB0IDc5Mi4wcHQ7DQoJbWFyZ2luOjcyLjBwdCA5MC4w cHQgNzIuMHB0IDkwLjBwdDt9DQpkaXYuV29yZFNlY3Rpb24xDQoJe3BhZ2U6V29yZFNlY3Rpb24x O30NCi0tPjwvc3R5bGU+PCEtLVtpZiBndGUgbXNvIDldPjx4bWw+DQo8bzpzaGFwZWRlZmF1bHRz IHY6ZXh0PSJlZGl0IiBzcGlkbWF4PSIxMDI2IiAvPg0KPC94bWw+PCFbZW5kaWZdLS0+PCEtLVtp ZiBndGUgbXNvIDldPjx4bWw+DQo8bzpzaGFwZWxheW91dCB2OmV4dD0iZWRpdCI+DQo8bzppZG1h cCB2OmV4dD0iZWRpdCIgZGF0YT0iMSIgLz4NCjwvbzpzaGFwZWxheW91dD48L3htbD48IVtlbmRp Zl0tLT4NCjwvaGVhZD4NCjxib2R5IGxhbmc9IkZSLUNBIiBsaW5rPSJibHVlIiB2bGluaz0icHVy cGxlIj4NCjxkaXYgY2xhc3M9IldvcmRTZWN0aW9uMSI+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBz dHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG87 bWFyZ2luLWxlZnQ6MzUuNHB0Ij4NCjxzcGFuIGxhbmc9IkVOLVVTIj4tIFB1bGwgdGhlIGRlZmlu aXRpb24gb2YgUEFERElORyBpbnRvIHRoaXMgZG9jdW1lbnQuIERlY2xhcmUgdGhhdCB3ZSd2ZSBn YXRoZXJlZCBzdWZmaWNpZW50IGV4cGVyaWVuY2Ugd2l0aCBQQURESU5HIHRoYXQgaXQgbm93IHdh cnJhbnRzIGJlaW5nIGVsZXZhdGVkIHRvIFN0YW5kYXJkcyBUcmFjay4gVGhhdCBpcywgaXQncyBi ZWVuIHByb3ZlbiB0byB3b3JrLjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxkaXY+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6MzUuNHB0Ij48c3BhbiBsYW5nPSJFTi1V UyI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9 Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0OjM1LjRwdCI+PHNwYW4gbGFuZz0iRU4tVVMi PlRoaXMgaXMgcGxhdXNpYmxlLiBJdCBzb2x2ZXMgdGhlIGZpcnN0LW9yZGVyIHByb2JsZW0uJm5i c3A7PG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05v cm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0OjM1LjRwdCI+PHNwYW4gbGFuZz0iRU4tVVMiPjxvOnA+ Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3Jt YWwiIHN0eWxlPSJtYXJnaW4tbGVmdDozNS40cHQiPjxzcGFuIGxhbmc9IkVOLVVTIj5JIG5vdGUg dGhhdCZuYnNwO1JGQyA1NzgwIGRlZmluZWQgYSBudW1iZXIgb2YgbmV3IGF0dHJpYnV0ZXMuIElz IHB1bGxpbmcgUEFERElORyBmb3J3YXJkIHRoZSByaWdodCB0aGluZyB0byBkbywgb3IgYXJlIHRo ZXJlIG90aGVycyB0aGF0IHdvdWxkIGFsc28gcXVhbGlmeSAoc28sIHBlcmhhcHMgYSBzdGF0dXMg Y2hhbmdlIGZvciZuYnNwO1JGQyA1NzgwKT8mbmJzcDs8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8 cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1VUyI+PG86cD4mbmJzcDs8L286cD48 L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tVVMiPkkgZG9u 4oCZdCB0aGluayB0aGUgb3RoZXJzIGhhdmUgYmVlbiBpbXBsZW1lbnRlZCBtdWNoLCBzbyB0aGF0 4oCZcyB3aHkgSSB0aGluayBvbmx5IHB1bGxpbmcgUEFERElORyBtYWtlcyBzZW5zZS4gSWYgSSBy ZW1lbWJlciBjb3JyZWN0bHksIEkgb25seSBpbXBsZW1lbnRlZCBQQURESU5HIGluIE51bWIgKEkg ZG9u4oCZdCBoYXZlIGFjY2VzcyB0byB0aGUgc291cmNlIGNvZGUgYW55bW9yZQ0KIHNvIGNhbuKA mXQgYmUgc3VyZSkuPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+ PHNwYW4gbGFuZz0iRU4tVVMiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNz PSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLVVTIj5BbnlvbmUgZWxzZSB3aXRoIGFuIG9waW5p b24/PG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFu Zz0iRU4tVVMiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3Jt YWwiPjxzcGFuIGxhbmc9IkVOLVVTIj5TaW1vbjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2 Pg0KPC9kaXY+DQo8L2JvZHk+DQo8L2h0bWw+DQo= --_000_MWHPR15MB1200F7BE766A80509FBFBE75FAA00MWHPR15MB1200namp_-- From nobody Thu Dec 13 06:27:48 2018 Return-Path: X-Original-To: tram@ietfa.amsl.com Delivered-To: tram@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 25DBB124C04; Thu, 13 Dec 2018 06:27:41 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.999 X-Spam-Level: X-Spam-Status: No, score=-1.999 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id yXADxSXkP72Y; Thu, 13 Dec 2018 06:27:39 -0800 (PST) Received: from mail-lj1-x230.google.com (mail-lj1-x230.google.com [IPv6:2a00:1450:4864:20::230]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 32729124BF6; Thu, 13 Dec 2018 06:27:39 -0800 (PST) Received: by mail-lj1-x230.google.com with SMTP id e5-v6so1946129lja.4; Thu, 13 Dec 2018 06:27:39 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=KBpiXALt3KyTNFyXuVGGr9urCxDFyrvE/aqpQhl6ZWE=; b=bGXMyRXX4+IxFTJpMxw948/qFcCxDOuKBOjmQd+x0dmTdSXTMqvWgETu6PDcT5Qp7P jMG3rlQ3f7fUME21xlf55KEVmWjWFmBk207NCs+r7UhgxuX2IKchMfjQcqfk8LQ1AfsI CK1KEfQ90aVOmtVsKEks0rqQs4CyGmhpxygqBVAphyRjKnYR7T0J/C0wInHzHJgOuQT/ 6HbYz8KOTmM0rooD6WBobY20aC/+foZJ9yMKUYVMXWQTKn9rS+zwplQk6aXcZogr/9x5 xP7kPomw+TuD5NbxatPmeDnvX6+owXTmKSsWzY1Cz36w/eopXDwKGgNGhIkneKOvnlTV cU2w== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=KBpiXALt3KyTNFyXuVGGr9urCxDFyrvE/aqpQhl6ZWE=; b=ii16xaU03sGY8MQmzjuV9lhlbxTS8ouhn9+SRQNR5C//UnNNJ+Qq1xX9huGWFV+Mzk /8EmfGj/WTD9qFI2OleuNKz/ugyqmUerpkDuedfiEINprLKN3hlq4j96sf0opz4wgb6m U79owx9zxcZPD3JgqKu46S7apcD7vGM9qrKq6t5rAMHl6KGVOdcLeBmxncu0Krdw8gts YvO1mXUs5MPqusflPIFkX6Rrc23MTr/g6ypmvy3GoN9P4o4xQLzBWJ2LzJD0FFVe3A// Ei6EvCJDUE5LerVdzjBTaipKCMGFquV9k+F760PgAq+bBasY94zFQZjX2KL/nlfn8qMZ ClxA== X-Gm-Message-State: AA+aEWbMg3OjJoUJtuIBbXrL6CuEPpWq3R+aBi4leCwdwc3eXrIRRgh0 eQyUNSkon6ZJEwXxrCW2CImpx7M/EotfIQxhse4= X-Google-Smtp-Source: AFSGD/Wv6XwfJXzyUvK0IED8sy9D6r1XIZ+B6HWSLxd3oCXS9wMjKR8BFjvyT1azu9wB0ILnZSoXgjkSmB/bxeSJWSo= X-Received: by 2002:a2e:914b:: with SMTP id q11-v6mr14598928ljg.164.1544711257255; Thu, 13 Dec 2018 06:27:37 -0800 (PST) MIME-Version: 1.0 References: <153834237082.13405.1228259718885034461.idtracker@ietfa.amsl.com> In-Reply-To: From: Spencer Dawkins at IETF Date: Thu, 13 Dec 2018 08:27:26 -0600 Message-ID: To: Simon Perreault Cc: Adam Roach , IESG , "tram-chairs@ietf.org" , "draft-ietf-tram-stun-pmtud@ietf.org" , Gonzalo Camarillo , "Asveren, Tolga" , "tram@ietf.org" Content-Type: multipart/alternative; boundary="000000000000c4f1f1057ce81ddb" Archived-At: Subject: Re: [tram] Adam Roach's Discuss on draft-ietf-tram-stun-pmtud-10: (with DISCUSS and COMMENT) X-BeenThere: tram@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "Discussing the creation of a Turn Revised And Modernized \(TRAM\) WG, which goal is to consolidate the various initiatives to update TURN and STUN." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 13 Dec 2018 14:27:42 -0000 --000000000000c4f1f1057ce81ddb Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable Hi, Simon, On Thu, Dec 13, 2018 at 7:12 AM Simon Perreault wrote: > - Pull the definition of PADDING into this document. Declare that we've > gathered sufficient experience with PADDING that it now warrants being > elevated to Standards Track. That is, it's been proven to work. > > > > This is plausible. It solves the first-order problem. > > > > I note that RFC 5780 defined a number of new attributes. Is pulling > PADDING forward the right thing to do, or are there others that would als= o > qualify (so, perhaps a status change for RFC 5780)? > > > > I don=E2=80=99t think the others have been implemented much, so that=E2= =80=99s why I think > only pulling PADDING makes sense. If I remember correctly, I only > implemented PADDING in Numb (I don=E2=80=99t have access to the source co= de anymore > so can=E2=80=99t be sure). > > > > Anyone else with an opinion? > That's helpful information. We should wait for anyone else with information to weigh in, but if it's correct that the other experimental attributes haven't been implemented and deployed in a way that would provide guidance for standards-track use, I think defining PADDING in this document makes more sense to me than adding a downref to an experimental RFC that we wouldn't consider if the reference was using anything except PADDING. Thanks, Spencer > > > Simon > --000000000000c4f1f1057ce81ddb Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable
Hi, Simon,=C2=A0

On Thu, Dec 13, 2018 at 7:12 AM Simon Perreaul= t <Simon.Perreault@logmei= n.com> wrote:

- Pull the definition of PADDING into this document. D= eclare that we've gathered sufficient experience with PADDING that it n= ow warrants being elevated to Standards Track. That is, it's been prove= n to work.

=C2=A0

Th= is is plausible. It solves the first-order problem.=C2=A0

=C2=A0

I = note that=C2=A0RFC 5780 defined a number of new attributes. Is pulling PADD= ING forward the right thing to do, or are there others that would also qual= ify (so, perhaps a status change for=C2=A0RFC 5780)?=C2=A0

=C2=A0

I don=E2=80=99t think the other= s have been implemented much, so that=E2=80=99s why I think only pulling PA= DDING makes sense. If I remember correctly, I only implemented PADDING in N= umb (I don=E2=80=99t have access to the source code anymore so can=E2=80=99t be sure).

=C2=A0

Anyone else with an opinion?


That's helpf= ul information.=C2=A0

We should wait for anyone el= se with information to weigh in, but if it's correct that the other exp= erimental attributes haven't been implemented and deployed in a way tha= t would provide guidance for standards-track use, I think defining PADDING = in this document makes more sense to me than adding a downref to an experim= ental RFC that we wouldn't consider if the reference was using anything= except PADDING.=C2=A0=C2=A0

Thanks,
Spencer
=

=C2=A0

Simon

--000000000000c4f1f1057ce81ddb-- From nobody Wed Dec 26 17:06:27 2018 Return-Path: X-Original-To: tram@ietfa.amsl.com Delivered-To: tram@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 5BFAB127B4C for ; Wed, 26 Dec 2018 17:06:19 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.9 X-Spam-Level: X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_MED=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001] autolearn=unavailable autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=rtfm-com.20150623.gappssmtp.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id MrLDJr5yvbb4 for ; Wed, 26 Dec 2018 17:06:14 -0800 (PST) Received: from mail-lf1-f50.google.com (mail-lf1-f50.google.com [209.85.167.50]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 776BE131421 for ; Wed, 26 Dec 2018 17:06:06 -0800 (PST) Received: by mail-lf1-f50.google.com with SMTP id a16so11758738lfg.3 for ; Wed, 26 Dec 2018 17:06:06 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=rtfm-com.20150623.gappssmtp.com; s=20150623; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=/0uQJXjCWcfL+5ZMbutZ60hVb8Lv7ikBQwEMlxISG5I=; b=N22xju/1bYN2L6efeYoGaVVqjG7Dh6V5imk0nQFJXjSD0QvtgHtYGcDllZYtPExTq5 jFGgNl+FPX/Kk5dvCFUixUemR8Vu9K/8vDRgHqw4oQVpFwjfJiV7VZeATHQrgdCU53Cf ctptiFx86ypAqFYtG0zv+r53s+fy968agMdupOZlM9jrAED7ZtOcJthtyWT83Axg6uFa FdggSW5BoQvrBBlzIFDWFJJ0HYT0RRy5/NzS0AZ1bdiXY8QN+s9NVkQqRelQnosOAQ8Y UDXd8gbgY89xVv1KjzoWFPBogorkMdewvJZkm4PlVYYwUSw+dIVl3s2uTmObzEQtFJCQ zPtA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=/0uQJXjCWcfL+5ZMbutZ60hVb8Lv7ikBQwEMlxISG5I=; b=Q6ztqNfYHgWSwlu6xsZkMxV9ILOk5y/a/+vOruboMrZ4780QWCc8U5mPJyabpCrWX3 cFsRaAQ3R3ApsU+I6hGpYYCn51gzrJVZ18bWb0hPsAqhQlTp5KVtDSQ9Gg09XDpO/D5o mqV6/oduOpqEozajEpk/B4MHA7xp5H2KxI2tib6Z9cP9ALiA7FccZSC04bzkh5w/82HT rT9HnH9tqp6GHN3s/g5klyfMOXq0+XPNh45Irbzp7dY3EhzBYJ0FODWrLMXrjpgASkKF XxswYzyV91Vsjm00rdFX8WWH/XuviM3U9O8WDC4/pTexlWhXbnE5anRukmr93N3Vzo5B jYXA== X-Gm-Message-State: AA+aEWZRNlvo6loI23Y+IbxDTusZ9CVnqGiAuuQ7A2p9c/obf5RdXMKk pOu/HXebRq18c9IAT8TF0TDKFvMJES2yrTQjCfEt8w== X-Google-Smtp-Source: AFSGD/Uh/G+Q2T0Bf1+zgiCurjmkiKFn2Qa/KDkw4RXvZZql3I+LoLFXJm5TfLsdx9TDyvx0bPW9Wje0+GMrp1CMH2Q= X-Received: by 2002:a19:5a05:: with SMTP id o5mr11440990lfb.140.1545872763814; Wed, 26 Dec 2018 17:06:03 -0800 (PST) MIME-Version: 1.0 References: <152390863222.19652.10310304989315386136.idtracker@ietfa.amsl.com> <02569943-db8f-654e-7322-49bc1f1a1163@acm.org> <235b838f-2800-2cd0-8b01-947e70837619@ericsson.com> <472563ee-5fc3-655d-8e31-138cc774e608@acm.org> <97c561a7-c33a-6121-00c4-09cd11646b98@ericsson.com> In-Reply-To: <97c561a7-c33a-6121-00c4-09cd11646b98@ericsson.com> From: Eric Rescorla Date: Wed, 26 Dec 2018 17:05:23 -0800 Message-ID: To: Gonzalo Camarillo Cc: Spencer Dawkins at IETF , Marc Petit-Huguenin , "tram-chairs@ietf.org" , "tram@ietf.org" , "Asveren, Tolga" , IESG , "draft-ietf-tram-stunbis@ietf.org" Content-Type: multipart/alternative; boundary="000000000000f49df8057df68c0f" Archived-At: Subject: Re: [tram] Eric Rescorla's Discuss on draft-ietf-tram-stunbis-16: (with DISCUSS and COMMENT) X-BeenThere: tram@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "Discussing the creation of a Turn Revised And Modernized \(TRAM\) WG, which goal is to consolidate the various initiatives to update TURN and STUN." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 27 Dec 2018 01:06:19 -0000 --000000000000f49df8057df68c0f Content-Type: text/plain; charset="UTF-8" We really need to bring this to a close before both Spencer and I step down, I should think. -Ekr On Thu, Nov 22, 2018 at 4:30 AM Gonzalo Camarillo < gonzalo.camarillo@ericsson.com> wrote: > Eric, Spencer, thanks for the status update! > > Authors, could you please let us know when you plan to get to this? > > Gonzalo > > On 19-Nov-18 23:04, Spencer Dawkins at IETF wrote: > > Hi, Gonzalo, > > On Mon, Nov 19, 2018 at 9:06 AM Eric Rescorla > > wrote: > > > > Not really. I have not received any response to my mail of Oct 23. > > As before, I'm happy to have a call, but I believe we're reaching > > the limits of what can be accomplished by email. > > > > > > Eric would know best (it being his Discuss), but this is also my > > understanding. > > > > I can add this to the agenda of the IESG informal telechat on November > > 29, if there hasn't been a call before then, but I don't have a reason > > to wait until then, if it's possible to talk sooner. > > > > Thanks, > > > > Spencer > > > > > > > > -Ekr > > > > > > On Mon, Nov 19, 2018 at 6:35 AM Gonzalo Camarillo > > > > wrote: > > > > Hi Spencer, > > > > what is the status of this? Are the authors and the document > > shepherd > > working with the relevant ADs on the discusses? > > > > > https://datatracker.ietf.org/doc/draft-ietf-tram-stun-pmtud/ballot/ > > > > Cheers, > > > > Gonzalo > > > > On 24-Oct-18 16:40, Spencer Dawkins at IETF wrote: > > > Hi, Marc, > > > > > > On Wed, Oct 24, 2018 at 3:44 AM Marc Petit-Huguenin > > > > > >> wrote: > > > > > > Hi Spencer, > > > > > > I sent my answers to Eric Rescorla questions on 2018-10-07 > > following > > > an in-person meeting with my co-author, but never got a > > response > > > back. Because there was no change proposed by Eric I went > > ahead and > > > published -19 a couple of weeks after that, with the text > > agreed in > > > response to Adam's and Benjamin's comments. > > > > > > > > > https://www.ietf.org/mail-archive/web/tram/current/msg02635.html > > > > > > > > > Ah - I wonder if that was what had happened. > > > > > > It sounds like you did the right thing, and that Eric has now > > responded, > > > which is also the right thing to do. > > > > > > Thanks for helping me understand. > > > > > > Spencer > > > > > > > > > On 10/23/18 7:28 PM, Spencer Dawkins at IETF wrote: > > > > Hi, Marc, > > > > > > > > I see that a -19 has been submitted, but didn't see a > > reply from > > > Eric in > > > > this thread. Do you think that you've converged? > > > > > > > > (I saw an offer of a conference call, so thought an > > out-of-band > > > > conversation might have happened) > > > > > > > > Thanks, > > > > > > > > Spencer > > > > > > > > On Sun, Oct 7, 2018 at 9:35 AM Marc Petit-Huguenin > > > > > >> wrote: > > > > > > > >> Hi Eric, > > > >> > > > >> Please see inline. > > > >> > > > >> On 09/10/2018 03:25 AM, Eric Rescorla wrote: > > > >>> On Sat, Sep 8, 2018 at 2:31 PM, Marc Petit-Huguenin > > > > > >> > > > >>> wrote: > > > >>> > > > >>>> Hi Eric, > > > >>>> > > > >>>> Apologies for the delay in getting back to that. > > > >>>> > > > >>>> I think that there is some misunderstanding in what > > STUNbis is > > > trying to > > > >>>> do, so please see my comments inline. > > > >>>> > > > >>>> On 06/18/2018 10:43 AM, Eric Rescorla wrote: > > > >>>>> Hi folks, > > > >>>>> > > > >>>>> I've reviewed the new version, but I don't think > > that the biddown > > > >>>>> discussion makes much sense. > > > >>>>> > > > >>>>> To recap, there are two hashes here: > > > >>>>> > > > >>>>> - The hash which you use to store the password with > > (currently > > > mostly > > > >>>> MD5) > > > >>>>> - The hash you use to compute the MAC (currently > SHA-1). > > > >>>>> > > > >>>>> First, let's stipulate that MD5 isn't a great choice > > here, > > > though SHA-1 > > > >>>>> isn't a great choice > > > >>>>> either for pwd hashing You want Argon or the like. > > With that said, > > > >>>> there's > > > >>>>> no sensible > > > >>>>> biddown attack on that hash because it's a > > per-server feature, > > > not a > > > >>>>> per-transaction > > > >>>>> feature. So, as long as the server has MD5-hashed > > passwords, the > > > >>>> situation > > > >>>>> is bad. > > > >>>> > > > >>>> In no place in STUNbis we are proposing to use SHA-1 > > for password > > > >>>> encryption, so I am not sure where that come from. > > What we > > > propose is: > > > >>>> > > > >>> > > > >>> You're right, it's SHA-256, but my criticisms apply > > equally there. > > > >> > > > >> SHA-256 was what the WG adopted. Our attempts to add > > other passwords > > > >> encryption mechanisms were denied. It is true that > > Argon2 was > > > not in that > > > >> list (in our defense Argon2 was not known before July > > 2015), but > > > I do not > > > >> see why the WG would have accepted that one over the > > others. > > > Anyway it is > > > >> too late to fix this, as it is my understanding that > > the WG does > > > not have > > > >> enough energy to reach consensus on a new password > > algorithm. > > > Someone can > > > >> just write a draft adding Argon2 as password > > encryption, as we > > > will have a > > > >> IANA registry for that. > > > >> > > > >>> > > > >>> > > > >>>> - Establish a registry for new password algorithms > > (section > > > 18.5), so > > > >>>> algorithms like Argon2 could be added later (but note > > that our own > > > >>>> proposals to add more password algorithms were > > rejected by the > > > working > > > >>>> group). > > > >>>> - Add a new password algorithm to that registry, > > namely SHA-256. > > > >>>> - Register MD5 as an initial password algorithm for > > backward > > > >> compatibility > > > >>>> purpose. > > > >>>> > > > >>>> As for the biddown protection itself, it is my > > recollection that it > > > >>>> happened more or less like that: > > > >>>> > > > >>>> > > > >>>> INT. MEETING ROOM - DAY > > > >>>> > > > >>>> One of the co-editors of STUNBis stands at the > > microphone: > > > >>>> > > > >>>> CO-EDITOR > > > >>>> We added SHA-256 protection for > > passwords > > > >>>> in STUNBis. > > > >>>> > > > >>>> SOMEONE (V.O.) > > > >>>> As MD5 still need to be supported, > > you need to add > > > >>>> protection for bid-down attacks. > > > >>>> > > > >>>> CLOSE-UP on CO-EDITOR ROLLING HIS EYES > > > >>>> > > > >>>> CO-EDITOR > > > >>>> OK, I'll work on that. > > > >>>> > > > >>>> Four to eight months has passed. > > > >>>> > > > >>>> INT. ANOTHER MEETING ROOM - DAY > > > >>>> > > > >>>> The same co-editor of STUNBis stands at the > microphone: > > > >>>> > > > >>>> CO-EDITOR > > > >>>> We added a nice mechanism to prevent > > bid-down > > > >>>> attacks on passwords. Any comments? > > > >>>> > > > >>>> THE ROOM > > > >>>> (silence) > > > >>>> > > > >>>> CO-EDITOR > > > >>>> Moving on... > > > >>>> > > > >>> > > > >>> I don't see how any of this is relevant to my > > technical points > > > above. > > > >> > > > >> My point was that we, the co-editors, did not decide on > > adding > > > bid-down > > > >> protection, someone asked us to do so and no-one in the > > WG saw > > > any problem > > > >> with that. The reasons that person wanted that are not > > known to > > > us but, as > > > >> you insist, here's one reason I can think of: > > > >> > > > >> It is a fact that, for operational reasons, a password > > database > > > cannot be > > > >> re-encrypted at once. Also for operational reasons, > > the MD5 password > > > >> cannot be immediately removed from the database as soon > > the user > > > submitted > > > >> a new one. In fact, and for quite some time, both > > encrypted > > > variants of > > > >> the same password may have to be kept in that database, > > because a > > > single > > > >> user may use a mix of devices, some of them that use an > > RFC 5389 > > > client, > > > >> some that use a STUNbis client. It is up to the STUN > > server owner to > > > >> decide how long the migration to STUNbis will take and > > when it > > > will be > > > >> acceptable to reject all RFC 5389 (i.e. MD5) clients > (that > > > migration time > > > >> can be purposely reduced to 0 seconds but that's the > > choice and > > > >> responsibility of the owner of the server). > > > >> > > > >> Meanwhile we still need to be sure that if the STUN > > client is > > > implementing > > > >> STUNbis it unconditionally gets the additional > > protection of the new > > > >> password encryption algorithm. That's where the biddown > > > protection kicks > > > >> in, by preventing an online attacker to have the server > > > misidentifying a > > > >> STUNbis client as an RFC 5389 client, by preventing an > > online > > > attacker to > > > >> have the client misidentifying a STUNbis server as a > > RFC 5389 > > > server, and > > > >> having both them use the MD5 encrypted password instead > > of the > > > SHA-256 > > > >> encrypted password, all of that easily done by > > stripping the > > > unprotected > > > >> 401 response of the new STUNbis PASSWORD-ALGORITHMS > > attribute. > > > >> > > > >>> > > > >>> > > > >>> > > > >>>>> The second topic is the hash used to compute the > > MAC. However, > > > I don't > > > >>>> see > > > >>>>> how > > > >>>>> this gives you sensible biddown protection because > > that hash > > > is also > > > >> used > > > >>>>> to compute > > > >>>>> MAC over the negotiation: an attacker who has > > compromised a > > > MAC which > > > >> the > > > >>>>> server > > > >>>>> supports will quite likely be able to forge a MAC > > over the > > > transcript > > > >> as > > > >>>>> well. This is, > > > >>>>> I suppose, potentially useful as a defense against > > some other > > > weakness > > > >>>>> (e.g., > > > >>>>> version #), but I don't really see how the current > > design > > > helps against > > > >>>>> attacks on the > > > >>>>> MAC. > > > >>>> > > > >>>> There is no biddown attack protection for the MAC, as > > stated in > > > Section > > > >>>> 16.3: > > > >>>> > > > >>>> "The bid-down protection mechanism described in this > > document > > > is new, > > > >>>> and thus cannot currently protect against a bid-down > > attack that > > > >>>> lowers the strength of the hash algorithm to > HMAC-SHA1." > > > >>>> > > > >>>> What we put in place is a plan for *future* versions > > of STUN to get > > > >>>> biddown protection for the MAC. That's it, no more, > > no less. > > > >>>> > > > >>> > > > >>> Yes, but I don't believe that this will provide > bid-down > > > protection for > > > >> the > > > >>> MAC in the future for the reasons I indicate above. > > > >>> > > > >>> If you think this does something useful, please show > me an > > > example attack > > > >>> and how this fixes it. Note that it's not generally > > useful to > > > just bid > > > >> down > > > >>> the MAC itself unless the MAC you bid down to is weak > > enough to > > > exploit > > > >> in > > > >>> some other way. > > > >> > > > >> I do not know what weaknesses will be discovered in the > > future. > > > I am also > > > >> pretty sure that the cost of not using that mechanism > > is very > > > close to 0. > > > >> What I am sure of is that the cost of reengineering a > > new biddown > > > >> protection mechanism if we ever need it will be high. > > We already > > > went > > > >> through the pains of designing one for the password > > algorithm, so > > > why not > > > >> extend it so it can be used in the aftermath of the > > next Snowden > > > facepalm > > > >> moment? > > > >> > > > >>> Again, happy to have a call to walk though this if that > > > >>> helps. > > > >>> > > > >>> -Ekr > > > >>> > > > >>> > > > >>> > > > >>> > > > >>>>> > > > >>>>> You might think that there was a MAC which was > easier to > > > reverse to > > > >> find > > > >>>>> the original > > > >>>>> password, but the defense you have here doesn't help > > with that > > > because > > > >>>> the > > > >>>>> on-path attacker can do a bid-down and use the > > client as a MAC > > > oracle > > > >> for > > > >>>>> any MAC the client supports. > > > >>>>> > > > >>>>> So, I still don't understand what this is supposed > > to do. Happy to > > > >> have a > > > >>>>> call if you > > > >>>>> think that helps > > > >>>>> > > > >>>>> -Ekr > > > >>>>> > > > >>>>> > > > >>>>> > > > >>>>> > > > >>>>> On Mon, Jun 18, 2018 at 3:40 AM, Gonzalo Camarillo < > > > >>>>> Gonzalo.Camarillo@ericsson.com > > > > > > >> wrote: > > > >>>>> > > > >>>>>> Marc, Eric, > > > >>>>>> > > > >>>>>> what is the status of this discussion? > > > >>>>>> > > > >>>>>> Thanks, > > > >>>>>> > > > >>>>>> Gonzalo > > > >>>>>> > > > >>>>>> On 04/05/2018 2:35 AM, Eric Rescorla wrote: > > > >>>>>>> > > > >>>>>>> > > > >>>>>>> On Mon, Apr 23, 2018 at 11:16 AM, Marc > > Petit-Huguenin < > > > >>>> petithug@acm.org > > > > > > >>>>>>> > > >>> wrote: > > > >>>>>>> > > > >>>>>>> On 04/22/2018 05:22 PM, Eric Rescorla wrote: > > > >>>>>>> > On Sun, Apr 22, 2018 at 2:02 PM, Marc > > Petit-Huguenin < > > > >>>>>> petithug@acm.org > > > > > > > > >>> > > > >>>>>>> > wrote: > > > >>>>>>> > > > > >>>>>>> >> > > > >>>>>>> >>>> For a request or indication message, > > the agent > > > MUST > > > >>>>>> include the > > > >>>>>>> >>>> USERNAME, MESSAGE-INTEGRITY-SHA256, > and > > > >> MESSAGE-INTEGRITY > > > >>>>>>> >> attributes > > > >>>>>>> >>>> in the message unless the agent > > knows from an > > > external > > > >>>>>> indication > > > >>>>>>> >>>> which message integrity algorithm is > > supported > > > by both > > > >>>>>> agents. In > > > >>>>>>> >>>> this case either MESSAGE-INTEGRITY or > > > >>>>>> MESSAGE-INTEGRITY-SHA256 MUST > > > >>>>>>> >>>> be included in addition to > > USERNAME. The HMAC > > > for the > > > >>>>>> MESSAGE- > > > >>>>>>> >>> > > > >>>>>>> >>> This text appears to conflict with S 7.3 of > > > 5245-bis, which > > > >>>> says: > > > >>>>>>> >> > > > >>>>>>> >> [text missing] > > > >>>>>>> >> > > > >>>>>>> >> Hmm, no, RFC245bis is still referencing > > RFC5389, so the > > > >>>> procedure > > > >>>>>> for > > > >>>>>>> >> stunbis does not apply. > > > >>>>>>> >> > > > >>>>>>> > > > > >>>>>>> > I hear what you're saying, but publishing two > > > documents at the > > > >>>>>> same time > > > >>>>>>> > which > > > >>>>>>> > make contrary recommendations about the same > > basic > > > protocol is > > > >>>>>> un-good. > > > >>>>>>> > > > >>>>>>> Sure, but wouldn't it be simpler to have > > rfc5245bis > > > using stunbis > > > >>>>>>> and have them updating their text, more than > > adding some > > > tortuous > > > >>>>>>> text in stunbis? > > > >>>>>>> > > > >>>>>>> > > > > >>>>>>> > > > > >>>>>>> >>> The STUN usage must specify which > > transport > > > protocol is > > > >>>>>> used, and > > > >>>>>>> >> how > > > >>>>>>> >>>> the agent determines the IP address > > and port > > > of the > > > >>>>>> recipient. > > > >>>>>>> >>>> Section 8 describes a DNS-based > > method of > > > determining > > > >> the > > > >>>>>> IP > > > >>>>>>> >> address > > > >>>>>>> >>>> and port of a server that a usage > > may elect to > > > use. > > > >> STUN > > > >>>>>> may be > > > >>>>>>> >> used > > > >>>>>>> >>>> with anycast addresses, but only > > with UDP and > > > in usages > > > >>>>>> where > > > >>>>>>> >>>> authentication is not used. > > > >>>>>>> >>> > > > >>>>>>> >>> Why this restriction? You should be able > > to use > > > anycast with > > > >>>>>> long-term > > > >>>>>>> >>> AUTH for (say) TURN. > > > >>>>>>> >> > > > >>>>>>> >> > > https://www.ietf.org/mail-archive/web/behave/current/ > > > >>>>>> msg03582.html > > > >>>>>>> > > > > >>>> msg03582.html> > > > >>>>>>> >> > > > >>>>>>> >> I think that the decision of permitting > Anycast > > > should be left > > > >>>> to > > > >>>>>> each > > > >>>>>>> >> STUN Usage. Basic STUN Usage does not use > > > authentication and > > > >>>> use > > > >>>>>> only a > > > >>>>>>> >> one round trip for the Binding transaction, > so > > > Unicast can be > > > >>>>>> used. > > > >>>>>>> >> > > > >>>>>>> > > > > >>>>>>> >> OTOH, TURN and ICE should probably say > > something > > > about that, > > > >> so > > > >>>> I > > > >>>>>> added a > > > >>>>>>> >> new bullet point in Section 13: > > > >>>>>>> >> > > > >>>>>>> >> o If Anycast addresses can be used for > > the server > > > in case > > > >>>> TCP > > > >>>>>> or > > > >>>>>>> >> TLS-over-TCP, or authentication are > used. > > > >>>>>>> >> > > > >>>>>>> > > > > >>>>>>> > Are you leaving this text in? That seems > > very confusing. > > > >>>>>>> > > > >>>>>>> In isolation yes, but I think it makes sense > > which the text > > > >> before > > > >>>>>>> the bullet points: > > > >>>>>>> > > > >>>>>>> A STUN usage defines how STUN is actually > > utilized -- > > > when to > > > >>>> send > > > >>>>>>> requests, what to do with the responses, > > and which > > > optional > > > >>>>>>> procedures defined here (or in an extension > > to STUN) > > > are to be > > > >>>>>> used. > > > >>>>>>> A usage also defines: > > > >>>>>>> > > > >>>>>>> [...] > > > >>>>>>> > > > >>>>>>> o If Anycast addresses can be used for the > > server in > > > case TCP > > > >>>> or > > > >>>>>>> TLS-over-TCP, or authentication are used. > > > >>>>>>> > > > >>>>>>> > > > >>>>>>> What is the need for the restriction at all. > > > >>>>>>> > > > >>>>>>> > > > >>>>>>> > > > >>>>>>> >>>> transaction over UDP or > > DTLS-over-UDP is also > > > >> considered > > > >>>>>> failed if > > > >>>>>>> >>>> there has been a hard ICMP error > > [RFC1122]. For > > > >> example, > > > >>>>>> assuming > > > >>>>>>> >> an > > > >>>>>>> >>>> RTO of 500ms, requests would be sent > > at times > > > 0 ms, 500 > > > >>>>>> ms, 1500 > > > >>>>>>> >> ms, > > > >>>>>>> >>>> 3500 ms, 7500 ms, 15500 ms, and > > 31500 ms. If the > > > >> client > > > >>>>>> has not > > > >>>>>>> >>>> received a response after 39500 ms, > > the client > > > will > > > >>>>>> consider the > > > >>>>>>> >>>> transaction to have timed out. > > > >>>>>>> >>> > > > >>>>>>> >>> I note that these recommendations now seem > > crazily > > > long. I > > > >>>>>> assume the > > > >>>>>>> >>> WG had consensus on this, but I wanted to > > note it. > > > >>>>>>> >> > > > >>>>>>> >> Not just the WG, also the IESG that > > approved RFC 5389 > > > too as, > > > >>>> but > > > >>>>>> for the > > > >>>>>>> >> addition of "or DTLS-over-UDP", this is the > > same text > > > than in > > > >>>> RFC > > > >>>>>> 5389. > > > >>>>>>> >> > > > >>>>>>> > > > > >>>>>>> > Yes, I know. My point is that while they > > might have bee > > > >> sensible > > > >>>>>> when > > > >>>>>>> > 5389 was published they *now* seem crazily > > long. Did > > > the WG > > > >>>>>> explicitly > > > >>>>>>> > decide not to update them? > > > >>>>>>> > > > >>>>>>> No, nobody ever suggested that there was an > > issue there. > > > >>>>>>> > > > >>>>>>> > > > >>>>>>> OK, well, this seems like it should be considered, > > then, > > > because this > > > >>>>>>> doesn't > > > >>>>>>> match modern practice. > > > >>>>>>> > > > >>>>>>> > > > >>>>>>> > > > >>>>>>> > This would be good to explain. > > > >>>>>>> > > > >>>>>>> New text: > > > >>>>>>> > > > >>>>>>> [...] > > > >>>>>>> containing the subjectAltName of that > > certificate. > > > The test > > > >> on > > > >>>>>> the > > > >>>>>>> MESSAGE-INTEGRITY-SHA256 attribute > > indicates that the > > > >>>> transaction > > > >>>>>> is > > > >>>>>>> authenticated and that the client > > implements this > > > >> specification > > > >>>>>> and > > > >>>>>>> so can process the ALTERNATE-DOMAIN > attribute. > > > >>>>>>> > > > >>>>>>> > > > >>>>>>> All right. > > > >>>>>>> > > > >>>>>>> > > > >>>>>>> > > > > >>>>>>> > > > > >>>>>>> >>>> o What authentication and > > message-integrity > > > mechanisms > > > >>>>>> are used. > > > >>>>>>> >>>> > > > >>>>>>> >>>> o The considerations around manual > vs. > > > automatic key > > > >>>>>> derivation > > > >>>>>>> >> for > > > >>>>>>> >>>> the integrity mechanism, as > > discussed in > > > [RFC4107]. > > > >>>>>>> >>>> > > > >>>>>>> >>>> o What mechanisms are used to > > distinguish STUN > > > >> messages > > > >>>>>> from other > > > >>>>>>> >>> > > > >>>>>>> >>> Why is this required? It seems like that's > > a generic > > > STUN > > > >>>>>> feature. > > > >>>>>>> >> > > > >>>>>>> >> That text is identical to the text in RFC > > 5389. RFC > > > 5764/7983 > > > >>>> is > > > >>>>>> one such > > > >>>>>>> >> mechanism, but there is nothing that > > prevent another > > > protocol > > > >>>>>> stack to use > > > >>>>>>> >> a different mechanism (inference, shim, > etc...) > > > >>>>>>> >> > > > >>>>>>> > > > > >>>>>>> > But ultimately no matter what the other > protocol > > > provides for > > > >>>>>> demux, STUN > > > >>>>>>> > has its > > > >>>>>>> > own demux. > > > >>>>>>> > > > >>>>>>> In fact I think that the reason for that item > > was because > > > >>>>>>> FINGERPRINT can also be used to demux STUN > > traffic, but > > > it is > > > >>>>>>> optional. So an STUN Usage needs to tell if > > FINGERPRINT is > > > >>>>>>> mandatory (like in ICE). > > > >>>>>>> > > > >>>>>>> > > > >>>>>>> This should be explained. > > > >>>>>>> > > > >>>>>>> > > > >>>>>>> >>> > > > >>>>>>> >>>> that is not readily subject to > > offline dictionary > > > >>>> attacks. > > > >>>>>>> >>>> Protection of the channel itself, > > using TLS or > > > DTLS, > > > >>>>>> mitigates > > > >>>>>>> >> these > > > >>>>>>> >>>> attacks. > > > >>>>>>> >>>> > > > >>>>>>> >>>> STUN supports both MESSAGE-INTEGRITY > and > > > >>>>>>> MESSAGE-INTEGRITY-SHA256, > > > >>>>>>> >>>> which is subject to bid down attacks > > by an on-path > > > >>>>>> attacker. > > > >>>>>>> >>> > > > >>>>>>> >>> By an on-path attacker who can forge > > HMAC-SHA1 in > > > real-time? > > > >>>>>>> That's a > > > >>>>>>> >>> pretty serious adversary, so you should > > clarify here > > > >>>>>>> >>> > > > >>>>>>> >> > > > >>>>>>> >> New text: > > > >>>>>>> >> > > > >>>>>>> >> STUN supports both MESSAGE-INTEGRITY and > > > >>>>>> MESSAGE-INTEGRITY-SHA256, > > > >>>>>>> >> which is subject to bid down attacks by > > an on-path > > > attacker > > > >>>>>> that > > > >>>>>>> >> would strip the MESSAGE-INTEGRITY-SHA256 > > attribute > > > leaving > > > >>>>>>> only the > > > >>>>>>> >> MESSAGE-INTEGRITY attribute and > > exploiting a potential > > > >>>>>>> vulnerability. > > > >>>>>>> >> Protection of the channel itself, using > > TLS or DTLS, > > > >>>> mitigates > > > >>>>>>> these > > > >>>>>>> >> attacks. Timely removal of the support > of > > > >> MESSAGE-INTEGRITY > > > >>>>>> in a > > > >>>>>>> >> future version of STUN is necessary. > > > >>>>>>> >> > > > >>>>>>> > > > > >>>>>>> > I still don't understand the capabilities > > you seem to > > > believe > > > >> the > > > >>>>>>> attacker > > > >>>>>>> > has. > > > >>>>>>> > Can you describe the exact attack. > > > >>>>>>> > > > > >>>>>>> > > > >>>>>>> 1. Vulnerability is found in HMAC-SHA1 > > > >>>>>>> 2. Client Alice still supports M-I and > > M-I-256, does not > > > know > > > >> what > > > >>>>>>> version of STUN server Bob supports and so > > send both. > > > >>>>>>> 3. On-path attacker removes M-I-256. > > > >>>>>>> 5. stunbis server Bob thinks that Alice is an > > RFC 5389 > > > client and > > > >>>>>>> continue with that protocol. > > > >>>>>>> > > > >>>>>>> > > > >>>>>>> This seems like an extremely weak attack. In > > general, any > > > protocol of > > > >>>>>>> this type is as strong > > > >>>>>>> as the weakest integrity algorithm it supports, so > > it's not > > > that the > > > >>>>>>> protocol has a downgrade > > > >>>>>>> attack, but rather that the minimum algorithm > > supported is > > > one you > > > >>>> don't > > > >>>>>>> trust as much > > > >>>>>>> as you might like. > > > >>>>>>> > > > >>>>>>> -Ekr > > > >>>>>>> > > > >>>>>>> > > > >>>>>>> -- > > > >> > > > > > > > > > > > > -- > > > Marc Petit-Huguenin > > > Email: marc@petit-huguenin.org > > > > > > > Blog: https://marc.petit-huguenin.org > > > Profile: https://www.linkedin.com/in/petithug > > > > > > --000000000000f49df8057df68c0f Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: base64 PGRpdiBkaXI9Imx0ciI+PGRpdj5XZSByZWFsbHkgbmVlZCB0byBicmluZyB0aGlzIHRvIGEgY2xv c2UgYmVmb3JlIGJvdGggU3BlbmNlciBhbmQgSSBzdGVwIGRvd24sIEkgc2hvdWxkIHRoaW5rLjwv ZGl2PjxkaXY+PGJyPjwvZGl2PjxkaXY+LUVrcjwvZGl2PjxkaXY+PGJyPjwvZGl2PjwvZGl2Pjxi cj48ZGl2IGNsYXNzPSJnbWFpbF9xdW90ZSI+PGRpdiBkaXI9Imx0ciI+T24gVGh1LCBOb3YgMjIs IDIwMTggYXQgNDozMCBBTSBHb256YWxvIENhbWFyaWxsbyAmbHQ7PGEgaHJlZj0ibWFpbHRvOmdv bnphbG8uY2FtYXJpbGxvQGVyaWNzc29uLmNvbSI+Z29uemFsby5jYW1hcmlsbG9AZXJpY3Nzb24u Y29tPC9hPiZndDsgd3JvdGU6PGJyPjwvZGl2PjxibG9ja3F1b3RlIGNsYXNzPSJnbWFpbF9xdW90 ZSIgc3R5bGU9Im1hcmdpbjowcHggMHB4IDBweCAwLjhleDtib3JkZXItbGVmdDoxcHggc29saWQg cmdiKDIwNCwyMDQsMjA0KTtwYWRkaW5nLWxlZnQ6MWV4Ij5FcmljLCBTcGVuY2VyLCB0aGFua3Mg Zm9yIHRoZSBzdGF0dXMgdXBkYXRlITxicj4NCjxicj4NCkF1dGhvcnMsIGNvdWxkIHlvdSBwbGVh c2UgbGV0IHVzIGtub3cgd2hlbiB5b3UgcGxhbiB0byBnZXQgdG8gdGhpcz88YnI+DQo8YnI+DQpH b256YWxvPGJyPg0KPGJyPg0KT24gMTktTm92LTE4IDIzOjA0LCBTcGVuY2VyIERhd2tpbnMgYXQg SUVURiB3cm90ZTo8YnI+DQomZ3Q7IEhpLCBHb256YWxvLMKgPGJyPg0KJmd0OyBPbiBNb24sIE5v diAxOSwgMjAxOCBhdCA5OjA2IEFNIEVyaWMgUmVzY29ybGEgJmx0OzxhIGhyZWY9Im1haWx0bzpl a3JAcnRmbS5jb20iIHRhcmdldD0iX2JsYW5rIj5la3JAcnRmbS5jb208L2E+PGJyPg0KJmd0OyAm bHQ7bWFpbHRvOjxhIGhyZWY9Im1haWx0bzpla3JAcnRmbS5jb20iIHRhcmdldD0iX2JsYW5rIj5l a3JAcnRmbS5jb208L2E+Jmd0OyZndDsgd3JvdGU6PGJyPg0KJmd0OyA8YnI+DQomZ3Q7wqAgwqAg wqBOb3QgcmVhbGx5LiBJIGhhdmUgbm90IHJlY2VpdmVkIGFueSByZXNwb25zZSB0byBteSBtYWls IG9mIE9jdCAyMy48YnI+DQomZ3Q7wqAgwqAgwqBBcyBiZWZvcmUsIEkmIzM5O20gaGFwcHkgdG8g aGF2ZSBhIGNhbGwsIGJ1dCBJIGJlbGlldmUgd2UmIzM5O3JlIHJlYWNoaW5nPGJyPg0KJmd0O8Kg IMKgIMKgdGhlIGxpbWl0cyBvZiB3aGF0IGNhbiBiZSBhY2NvbXBsaXNoZWQgYnkgZW1haWwuPGJy Pg0KJmd0OyA8YnI+DQomZ3Q7IDxicj4NCiZndDsgRXJpYyB3b3VsZCBrbm93IGJlc3QgKGl0IGJl aW5nIGhpcyBEaXNjdXNzKSwgYnV0IHRoaXMgaXMgYWxzbyBteTxicj4NCiZndDsgdW5kZXJzdGFu ZGluZy7CoDxicj4NCiZndDsgPGJyPg0KJmd0OyBJIGNhbiBhZGQgdGhpcyB0byB0aGUgYWdlbmRh IG9mIHRoZSBJRVNHIGluZm9ybWFsIHRlbGVjaGF0IG9uIE5vdmVtYmVyPGJyPg0KJmd0OyAyOSwg aWYgdGhlcmUgaGFzbiYjMzk7dCBiZWVuIGEgY2FsbCBiZWZvcmUgdGhlbiwgYnV0IEkgZG9uJiMz OTt0IGhhdmUgYSByZWFzb248YnI+DQomZ3Q7IHRvIHdhaXQgdW50aWwgdGhlbiwgaWYgaXQmIzM5 O3MgcG9zc2libGUgdG8gdGFsayBzb29uZXIuPGJyPg0KJmd0OyA8YnI+DQomZ3Q7IFRoYW5rcyw8 YnI+DQomZ3Q7IDxicj4NCiZndDsgU3BlbmNlcjxicj4NCiZndDsgwqA8YnI+DQomZ3Q7IDxicj4N CiZndDsgPGJyPg0KJmd0O8KgIMKgIMKgLUVrcjxicj4NCiZndDsgPGJyPg0KJmd0OyA8YnI+DQom Z3Q7wqAgwqAgwqBPbiBNb24sIE5vdiAxOSwgMjAxOCBhdCA2OjM1IEFNIEdvbnphbG8gQ2FtYXJp bGxvPGJyPg0KJmd0O8KgIMKgIMKgJmx0OzxhIGhyZWY9Im1haWx0bzpnb256YWxvLmNhbWFyaWxs b0Blcmljc3Nvbi5jb20iIHRhcmdldD0iX2JsYW5rIj5nb256YWxvLmNhbWFyaWxsb0Blcmljc3Nv bi5jb208L2E+PGJyPg0KJmd0O8KgIMKgIMKgJmx0O21haWx0bzo8YSBocmVmPSJtYWlsdG86Z29u emFsby5jYW1hcmlsbG9AZXJpY3Nzb24uY29tIiB0YXJnZXQ9Il9ibGFuayI+Z29uemFsby5jYW1h cmlsbG9AZXJpY3Nzb24uY29tPC9hPiZndDsmZ3Q7IHdyb3RlOjxicj4NCiZndDsgPGJyPg0KJmd0 O8KgIMKgIMKgIMKgIMKgSGkgU3BlbmNlciw8YnI+DQomZ3Q7IDxicj4NCiZndDvCoCDCoCDCoCDC oCDCoHdoYXQgaXMgdGhlIHN0YXR1cyBvZiB0aGlzPyBBcmUgdGhlIGF1dGhvcnMgYW5kIHRoZSBk b2N1bWVudDxicj4NCiZndDvCoCDCoCDCoCDCoCDCoHNoZXBoZXJkPGJyPg0KJmd0O8KgIMKgIMKg IMKgIMKgd29ya2luZyB3aXRoIHRoZSByZWxldmFudCBBRHMgb24gdGhlIGRpc2N1c3Nlcz88YnI+ DQomZ3Q7IDxicj4NCiZndDvCoCDCoCDCoCDCoCDCoDxhIGhyZWY9Imh0dHBzOi8vZGF0YXRyYWNr ZXIuaWV0Zi5vcmcvZG9jL2RyYWZ0LWlldGYtdHJhbS1zdHVuLXBtdHVkL2JhbGxvdC8iIHJlbD0i bm9yZWZlcnJlciIgdGFyZ2V0PSJfYmxhbmsiPmh0dHBzOi8vZGF0YXRyYWNrZXIuaWV0Zi5vcmcv ZG9jL2RyYWZ0LWlldGYtdHJhbS1zdHVuLXBtdHVkL2JhbGxvdC88L2E+PGJyPg0KJmd0OyA8YnI+ DQomZ3Q7wqAgwqAgwqAgwqAgwqBDaGVlcnMsPGJyPg0KJmd0OyA8YnI+DQomZ3Q7wqAgwqAgwqAg wqAgwqBHb256YWxvPGJyPg0KJmd0OyA8YnI+DQomZ3Q7wqAgwqAgwqAgwqAgwqBPbiAyNC1PY3Qt MTggMTY6NDAsIFNwZW5jZXIgRGF3a2lucyBhdCBJRVRGIHdyb3RlOjxicj4NCiZndDvCoCDCoCDC oCDCoCDCoCZndDsgSGksIE1hcmMswqA8YnI+DQomZ3Q7wqAgwqAgwqAgwqAgwqAmZ3Q7PGJyPg0K Jmd0O8KgIMKgIMKgIMKgIMKgJmd0OyBPbiBXZWQsIE9jdCAyNCwgMjAxOCBhdCAzOjQ0IEFNIE1h cmMgUGV0aXQtSHVndWVuaW48YnI+DQomZ3Q7wqAgwqAgwqAgwqAgwqAmbHQ7PGEgaHJlZj0ibWFp bHRvOnBldGl0aHVnQGFjbS5vcmciIHRhcmdldD0iX2JsYW5rIj5wZXRpdGh1Z0BhY20ub3JnPC9h PiAmbHQ7bWFpbHRvOjxhIGhyZWY9Im1haWx0bzpwZXRpdGh1Z0BhY20ub3JnIiB0YXJnZXQ9Il9i bGFuayI+cGV0aXRodWdAYWNtLm9yZzwvYT4mZ3Q7PGJyPg0KJmd0O8KgIMKgIMKgIMKgIMKgJmd0 OyAmbHQ7bWFpbHRvOjxhIGhyZWY9Im1haWx0bzpwZXRpdGh1Z0BhY20ub3JnIiB0YXJnZXQ9Il9i bGFuayI+cGV0aXRodWdAYWNtLm9yZzwvYT4gJmx0O21haWx0bzo8YSBocmVmPSJtYWlsdG86cGV0 aXRodWdAYWNtLm9yZyIgdGFyZ2V0PSJfYmxhbmsiPnBldGl0aHVnQGFjbS5vcmc8L2E+Jmd0OyZn dDsmZ3Q7IHdyb3RlOjxicj4NCiZndDvCoCDCoCDCoCDCoCDCoCZndDs8YnI+DQomZ3Q7wqAgwqAg wqAgwqAgwqAmZ3Q7wqAgwqAgwqBIaSBTcGVuY2VyLDxicj4NCiZndDvCoCDCoCDCoCDCoCDCoCZn dDs8YnI+DQomZ3Q7wqAgwqAgwqAgwqAgwqAmZ3Q7wqAgwqAgwqBJIHNlbnQgbXkgYW5zd2VycyB0 byBFcmljIFJlc2NvcmxhIHF1ZXN0aW9ucyBvbiAyMDE4LTEwLTA3PGJyPg0KJmd0O8KgIMKgIMKg IMKgIMKgZm9sbG93aW5nPGJyPg0KJmd0O8KgIMKgIMKgIMKgIMKgJmd0O8KgIMKgIMKgYW4gaW4t cGVyc29uIG1lZXRpbmcgd2l0aCBteSBjby1hdXRob3IsIGJ1dCBuZXZlciBnb3QgYTxicj4NCiZn dDvCoCDCoCDCoCDCoCDCoHJlc3BvbnNlPGJyPg0KJmd0O8KgIMKgIMKgIMKgIMKgJmd0O8KgIMKg IMKgYmFjay7CoCBCZWNhdXNlIHRoZXJlIHdhcyBubyBjaGFuZ2UgcHJvcG9zZWQgYnkgRXJpYyBJ IHdlbnQ8YnI+DQomZ3Q7wqAgwqAgwqAgwqAgwqBhaGVhZCBhbmQ8YnI+DQomZ3Q7wqAgwqAgwqAg wqAgwqAmZ3Q7wqAgwqAgwqBwdWJsaXNoZWQgLTE5IGEgY291cGxlIG9mIHdlZWtzIGFmdGVyIHRo YXQsIHdpdGggdGhlIHRleHQ8YnI+DQomZ3Q7wqAgwqAgwqAgwqAgwqBhZ3JlZWQgaW48YnI+DQom Z3Q7wqAgwqAgwqAgwqAgwqAmZ3Q7wqAgwqAgwqByZXNwb25zZSB0byBBZGFtJiMzOTtzIGFuZCBC ZW5qYW1pbiYjMzk7cyBjb21tZW50cy48YnI+DQomZ3Q7wqAgwqAgwqAgwqAgwqAmZ3Q7PGJyPg0K Jmd0O8KgIMKgIMKgIMKgIMKgJmd0O8KgIMKgPGJyPg0KJmd0O8KgIMKgIMKgIMKgIMKgwqA8YSBo cmVmPSJodHRwczovL3d3dy5pZXRmLm9yZy9tYWlsLWFyY2hpdmUvd2ViL3RyYW0vY3VycmVudC9t c2cwMjYzNS5odG1sIiByZWw9Im5vcmVmZXJyZXIiIHRhcmdldD0iX2JsYW5rIj5odHRwczovL3d3 dy5pZXRmLm9yZy9tYWlsLWFyY2hpdmUvd2ViL3RyYW0vY3VycmVudC9tc2cwMjYzNS5odG1sPC9h Pjxicj4NCiZndDvCoCDCoCDCoCDCoCDCoCZndDs8YnI+DQomZ3Q7wqAgwqAgwqAgwqAgwqAmZ3Q7 PGJyPg0KJmd0O8KgIMKgIMKgIMKgIMKgJmd0OyBBaCAtIEkgd29uZGVyIGlmIHRoYXQgd2FzIHdo YXQgaGFkIGhhcHBlbmVkLsKgPGJyPg0KJmd0O8KgIMKgIMKgIMKgIMKgJmd0Ozxicj4NCiZndDvC oCDCoCDCoCDCoCDCoCZndDsgSXQgc291bmRzIGxpa2UgeW91IGRpZCB0aGUgcmlnaHQgdGhpbmcs IGFuZCB0aGF0IEVyaWMgaGFzIG5vdzxicj4NCiZndDvCoCDCoCDCoCDCoCDCoHJlc3BvbmRlZCw8 YnI+DQomZ3Q7wqAgwqAgwqAgwqAgwqAmZ3Q7IHdoaWNoIGlzIGFsc28gdGhlIHJpZ2h0IHRoaW5n IHRvIGRvLsKgPGJyPg0KJmd0O8KgIMKgIMKgIMKgIMKgJmd0Ozxicj4NCiZndDvCoCDCoCDCoCDC oCDCoCZndDsgVGhhbmtzIGZvciBoZWxwaW5nIG1lIHVuZGVyc3RhbmQuPGJyPg0KJmd0O8KgIMKg IMKgIMKgIMKgJmd0Ozxicj4NCiZndDvCoCDCoCDCoCDCoCDCoCZndDsgU3BlbmNlcjxicj4NCiZn dDvCoCDCoCDCoCDCoCDCoCZndDsgwqA8YnI+DQomZ3Q7wqAgwqAgwqAgwqAgwqAmZ3Q7PGJyPg0K Jmd0O8KgIMKgIMKgIMKgIMKgJmd0O8KgIMKgIMKgT24gMTAvMjMvMTggNzoyOCBQTSwgU3BlbmNl ciBEYXdraW5zIGF0IElFVEYgd3JvdGU6PGJyPg0KJmd0O8KgIMKgIMKgIMKgIMKgJmd0O8KgIMKg IMKgJmd0OyBIaSwgTWFyYyw8YnI+DQomZ3Q7wqAgwqAgwqAgwqAgwqAmZ3Q7wqAgwqAgwqAmZ3Q7 PGJyPg0KJmd0O8KgIMKgIMKgIMKgIMKgJmd0O8KgIMKgIMKgJmd0OyBJIHNlZSB0aGF0IGEgLTE5 IGhhcyBiZWVuIHN1Ym1pdHRlZCwgYnV0IGRpZG4mIzM5O3Qgc2VlIGE8YnI+DQomZ3Q7wqAgwqAg wqAgwqAgwqByZXBseSBmcm9tPGJyPg0KJmd0O8KgIMKgIMKgIMKgIMKgJmd0O8KgIMKgIMKgRXJp YyBpbjxicj4NCiZndDvCoCDCoCDCoCDCoCDCoCZndDvCoCDCoCDCoCZndDsgdGhpcyB0aHJlYWQu IERvIHlvdSB0aGluayB0aGF0IHlvdSYjMzk7dmUgY29udmVyZ2VkPzxicj4NCiZndDvCoCDCoCDC oCDCoCDCoCZndDvCoCDCoCDCoCZndDs8YnI+DQomZ3Q7wqAgwqAgwqAgwqAgwqAmZ3Q7wqAgwqAg wqAmZ3Q7IChJIHNhdyBhbiBvZmZlciBvZiBhIGNvbmZlcmVuY2UgY2FsbCwgc28gdGhvdWdodCBh bjxicj4NCiZndDvCoCDCoCDCoCDCoCDCoG91dC1vZi1iYW5kPGJyPg0KJmd0O8KgIMKgIMKgIMKg IMKgJmd0O8KgIMKgIMKgJmd0OyBjb252ZXJzYXRpb24gbWlnaHQgaGF2ZSBoYXBwZW5lZCk8YnI+ DQomZ3Q7wqAgwqAgwqAgwqAgwqAmZ3Q7wqAgwqAgwqAmZ3Q7PGJyPg0KJmd0O8KgIMKgIMKgIMKg IMKgJmd0O8KgIMKgIMKgJmd0OyBUaGFua3MsPGJyPg0KJmd0O8KgIMKgIMKgIMKgIMKgJmd0O8Kg IMKgIMKgJmd0Ozxicj4NCiZndDvCoCDCoCDCoCDCoCDCoCZndDvCoCDCoCDCoCZndDsgU3BlbmNl cjxicj4NCiZndDvCoCDCoCDCoCDCoCDCoCZndDvCoCDCoCDCoCZndDs8YnI+DQomZ3Q7wqAgwqAg wqAgwqAgwqAmZ3Q7wqAgwqAgwqAmZ3Q7IE9uIFN1biwgT2N0IDcsIDIwMTggYXQgOTozNSBBTSBN YXJjIFBldGl0LUh1Z3VlbmluPGJyPg0KJmd0O8KgIMKgIMKgIMKgIMKgJmd0O8KgIMKgIMKgJmx0 OzxhIGhyZWY9Im1haWx0bzpwZXRpdGh1Z0BhY20ub3JnIiB0YXJnZXQ9Il9ibGFuayI+cGV0aXRo dWdAYWNtLm9yZzwvYT4gJmx0O21haWx0bzo8YSBocmVmPSJtYWlsdG86cGV0aXRodWdAYWNtLm9y ZyIgdGFyZ2V0PSJfYmxhbmsiPnBldGl0aHVnQGFjbS5vcmc8L2E+Jmd0Ozxicj4NCiZndDvCoCDC oCDCoCDCoCDCoCZsdDttYWlsdG86PGEgaHJlZj0ibWFpbHRvOnBldGl0aHVnQGFjbS5vcmciIHRh cmdldD0iX2JsYW5rIj5wZXRpdGh1Z0BhY20ub3JnPC9hPiAmbHQ7bWFpbHRvOjxhIGhyZWY9Im1h aWx0bzpwZXRpdGh1Z0BhY20ub3JnIiB0YXJnZXQ9Il9ibGFuayI+cGV0aXRodWdAYWNtLm9yZzwv YT4mZ3Q7Jmd0OyZndDsgd3JvdGU6PGJyPg0KJmd0O8KgIMKgIMKgIMKgIMKgJmd0O8KgIMKgIMKg Jmd0Ozxicj4NCiZndDvCoCDCoCDCoCDCoCDCoCZndDvCoCDCoCDCoCZndDsmZ3Q7IEhpIEVyaWMs PGJyPg0KJmd0O8KgIMKgIMKgIMKgIMKgJmd0O8KgIMKgIMKgJmd0OyZndDs8YnI+DQomZ3Q7wqAg wqAgwqAgwqAgwqAmZ3Q7wqAgwqAgwqAmZ3Q7Jmd0OyBQbGVhc2Ugc2VlIGlubGluZS48YnI+DQom Z3Q7wqAgwqAgwqAgwqAgwqAmZ3Q7wqAgwqAgwqAmZ3Q7Jmd0Ozxicj4NCiZndDvCoCDCoCDCoCDC oCDCoCZndDvCoCDCoCDCoCZndDsmZ3Q7IE9uIDA5LzEwLzIwMTggMDM6MjUgQU0sIEVyaWMgUmVz Y29ybGEgd3JvdGU6PGJyPg0KJmd0O8KgIMKgIMKgIMKgIMKgJmd0O8KgIMKgIMKgJmd0OyZndDsm Z3Q7IE9uIFNhdCwgU2VwIDgsIDIwMTggYXQgMjozMSBQTSwgTWFyYyBQZXRpdC1IdWd1ZW5pbjxi cj4NCiZndDvCoCDCoCDCoCDCoCDCoCZndDvCoCDCoCDCoCZsdDs8YSBocmVmPSJtYWlsdG86cGV0 aXRodWdAYWNtLm9yZyIgdGFyZ2V0PSJfYmxhbmsiPnBldGl0aHVnQGFjbS5vcmc8L2E+ICZsdDtt YWlsdG86PGEgaHJlZj0ibWFpbHRvOnBldGl0aHVnQGFjbS5vcmciIHRhcmdldD0iX2JsYW5rIj5w ZXRpdGh1Z0BhY20ub3JnPC9hPiZndDs8YnI+DQomZ3Q7wqAgwqAgwqAgwqAgwqAmbHQ7bWFpbHRv OjxhIGhyZWY9Im1haWx0bzpwZXRpdGh1Z0BhY20ub3JnIiB0YXJnZXQ9Il9ibGFuayI+cGV0aXRo dWdAYWNtLm9yZzwvYT4gJmx0O21haWx0bzo8YSBocmVmPSJtYWlsdG86cGV0aXRodWdAYWNtLm9y ZyIgdGFyZ2V0PSJfYmxhbmsiPnBldGl0aHVnQGFjbS5vcmc8L2E+Jmd0OyZndDsmZ3Q7PGJyPg0K Jmd0O8KgIMKgIMKgIMKgIMKgJmd0O8KgIMKgIMKgJmd0OyZndDsmZ3Q7IHdyb3RlOjxicj4NCiZn dDvCoCDCoCDCoCDCoCDCoCZndDvCoCDCoCDCoCZndDsmZ3Q7Jmd0Ozxicj4NCiZndDvCoCDCoCDC oCDCoCDCoCZndDvCoCDCoCDCoCZndDsmZ3Q7Jmd0OyZndDsgSGkgRXJpYyw8YnI+DQomZ3Q7wqAg wqAgwqAgwqAgwqAmZ3Q7wqAgwqAgwqAmZ3Q7Jmd0OyZndDsmZ3Q7PGJyPg0KJmd0O8KgIMKgIMKg IMKgIMKgJmd0O8KgIMKgIMKgJmd0OyZndDsmZ3Q7Jmd0OyBBcG9sb2dpZXMgZm9yIHRoZSBkZWxh eSBpbiBnZXR0aW5nIGJhY2sgdG8gdGhhdC48YnI+DQomZ3Q7wqAgwqAgwqAgwqAgwqAmZ3Q7wqAg wqAgwqAmZ3Q7Jmd0OyZndDsmZ3Q7PGJyPg0KJmd0O8KgIMKgIMKgIMKgIMKgJmd0O8KgIMKgIMKg Jmd0OyZndDsmZ3Q7Jmd0OyBJIHRoaW5rIHRoYXQgdGhlcmUgaXMgc29tZSBtaXN1bmRlcnN0YW5k aW5nIGluIHdoYXQ8YnI+DQomZ3Q7wqAgwqAgwqAgwqAgwqBTVFVOYmlzIGlzPGJyPg0KJmd0O8Kg IMKgIMKgIMKgIMKgJmd0O8KgIMKgIMKgdHJ5aW5nIHRvPGJyPg0KJmd0O8KgIMKgIMKgIMKgIMKg Jmd0O8KgIMKgIMKgJmd0OyZndDsmZ3Q7Jmd0OyBkbywgc28gcGxlYXNlIHNlZSBteSBjb21tZW50 cyBpbmxpbmUuPGJyPg0KJmd0O8KgIMKgIMKgIMKgIMKgJmd0O8KgIMKgIMKgJmd0OyZndDsmZ3Q7 Jmd0Ozxicj4NCiZndDvCoCDCoCDCoCDCoCDCoCZndDvCoCDCoCDCoCZndDsmZ3Q7Jmd0OyZndDsg T24gMDYvMTgvMjAxOCAxMDo0MyBBTSwgRXJpYyBSZXNjb3JsYSB3cm90ZTo8YnI+DQomZ3Q7wqAg wqAgwqAgwqAgwqAmZ3Q7wqAgwqAgwqAmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyBIaSBmb2xrcyw8YnI+ DQomZ3Q7wqAgwqAgwqAgwqAgwqAmZ3Q7wqAgwqAgwqAmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0Ozxicj4N CiZndDvCoCDCoCDCoCDCoCDCoCZndDvCoCDCoCDCoCZndDsmZ3Q7Jmd0OyZndDsmZ3Q7IEkmIzM5 O3ZlIHJldmlld2VkIHRoZSBuZXcgdmVyc2lvbiwgYnV0IEkgZG9uJiMzOTt0IHRoaW5rPGJyPg0K Jmd0O8KgIMKgIMKgIMKgIMKgdGhhdCB0aGUgYmlkZG93bjxicj4NCiZndDvCoCDCoCDCoCDCoCDC oCZndDvCoCDCoCDCoCZndDsmZ3Q7Jmd0OyZndDsmZ3Q7IGRpc2N1c3Npb24gbWFrZXMgbXVjaCBz ZW5zZS48YnI+DQomZ3Q7wqAgwqAgwqAgwqAgwqAmZ3Q7wqAgwqAgwqAmZ3Q7Jmd0OyZndDsmZ3Q7 Jmd0Ozxicj4NCiZndDvCoCDCoCDCoCDCoCDCoCZndDvCoCDCoCDCoCZndDsmZ3Q7Jmd0OyZndDsm Z3Q7IFRvIHJlY2FwLCB0aGVyZSBhcmUgdHdvIGhhc2hlcyBoZXJlOjxicj4NCiZndDvCoCDCoCDC oCDCoCDCoCZndDvCoCDCoCDCoCZndDsmZ3Q7Jmd0OyZndDsmZ3Q7PGJyPg0KJmd0O8KgIMKgIMKg IMKgIMKgJmd0O8KgIMKgIMKgJmd0OyZndDsmZ3Q7Jmd0OyZndDsgLSBUaGUgaGFzaCB3aGljaCB5 b3UgdXNlIHRvIHN0b3JlIHRoZSBwYXNzd29yZCB3aXRoPGJyPg0KJmd0O8KgIMKgIMKgIMKgIMKg KGN1cnJlbnRseTxicj4NCiZndDvCoCDCoCDCoCDCoCDCoCZndDvCoCDCoCDCoG1vc3RseTxicj4N CiZndDvCoCDCoCDCoCDCoCDCoCZndDvCoCDCoCDCoCZndDsmZ3Q7Jmd0OyZndDsgTUQ1KTxicj4N CiZndDvCoCDCoCDCoCDCoCDCoCZndDvCoCDCoCDCoCZndDsmZ3Q7Jmd0OyZndDsmZ3Q7IC0gVGhl IGhhc2ggeW91IHVzZSB0byBjb21wdXRlIHRoZSBNQUMgKGN1cnJlbnRseSBTSEEtMSkuPGJyPg0K Jmd0O8KgIMKgIMKgIMKgIMKgJmd0O8KgIMKgIMKgJmd0OyZndDsmZ3Q7Jmd0OyZndDs8YnI+DQom Z3Q7wqAgwqAgwqAgwqAgwqAmZ3Q7wqAgwqAgwqAmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyBGaXJzdCwg bGV0JiMzOTtzIHN0aXB1bGF0ZSB0aGF0IE1ENSBpc24mIzM5O3QgYSBncmVhdCBjaG9pY2U8YnI+ DQomZ3Q7wqAgwqAgwqAgwqAgwqBoZXJlLDxicj4NCiZndDvCoCDCoCDCoCDCoCDCoCZndDvCoCDC oCDCoHRob3VnaCBTSEEtMTxicj4NCiZndDvCoCDCoCDCoCDCoCDCoCZndDvCoCDCoCDCoCZndDsm Z3Q7Jmd0OyZndDsmZ3Q7IGlzbiYjMzk7dCBhIGdyZWF0IGNob2ljZTxicj4NCiZndDvCoCDCoCDC oCDCoCDCoCZndDvCoCDCoCDCoCZndDsmZ3Q7Jmd0OyZndDsmZ3Q7IGVpdGhlciBmb3IgcHdkIGhh c2hpbmcgWW91IHdhbnQgQXJnb24gb3IgdGhlIGxpa2UuPGJyPg0KJmd0O8KgIMKgIMKgIMKgIMKg V2l0aCB0aGF0IHNhaWQsPGJyPg0KJmd0O8KgIMKgIMKgIMKgIMKgJmd0O8KgIMKgIMKgJmd0OyZn dDsmZ3Q7Jmd0OyB0aGVyZSYjMzk7czxicj4NCiZndDvCoCDCoCDCoCDCoCDCoCZndDvCoCDCoCDC oCZndDsmZ3Q7Jmd0OyZndDsmZ3Q7IG5vIHNlbnNpYmxlPGJyPg0KJmd0O8KgIMKgIMKgIMKgIMKg Jmd0O8KgIMKgIMKgJmd0OyZndDsmZ3Q7Jmd0OyZndDsgYmlkZG93biBhdHRhY2sgb24gdGhhdCBo YXNoIGJlY2F1c2UgaXQmIzM5O3MgYTxicj4NCiZndDvCoCDCoCDCoCDCoCDCoHBlci1zZXJ2ZXIg ZmVhdHVyZSw8YnI+DQomZ3Q7wqAgwqAgwqAgwqAgwqAmZ3Q7wqAgwqAgwqBub3QgYTxicj4NCiZn dDvCoCDCoCDCoCDCoCDCoCZndDvCoCDCoCDCoCZndDsmZ3Q7Jmd0OyZndDsmZ3Q7IHBlci10cmFu c2FjdGlvbjxicj4NCiZndDvCoCDCoCDCoCDCoCDCoCZndDvCoCDCoCDCoCZndDsmZ3Q7Jmd0OyZn dDsmZ3Q7IGZlYXR1cmUuIFNvLCBhcyBsb25nIGFzIHRoZSBzZXJ2ZXIgaGFzIE1ENS1oYXNoZWQ8 YnI+DQomZ3Q7wqAgwqAgwqAgwqAgwqBwYXNzd29yZHMsIHRoZTxicj4NCiZndDvCoCDCoCDCoCDC oCDCoCZndDvCoCDCoCDCoCZndDsmZ3Q7Jmd0OyZndDsgc2l0dWF0aW9uPGJyPg0KJmd0O8KgIMKg IMKgIMKgIMKgJmd0O8KgIMKgIMKgJmd0OyZndDsmZ3Q7Jmd0OyZndDsgaXMgYmFkLjxicj4NCiZn dDvCoCDCoCDCoCDCoCDCoCZndDvCoCDCoCDCoCZndDsmZ3Q7Jmd0OyZndDs8YnI+DQomZ3Q7wqAg wqAgwqAgwqAgwqAmZ3Q7wqAgwqAgwqAmZ3Q7Jmd0OyZndDsmZ3Q7IEluIG5vIHBsYWNlIGluIFNU VU5iaXMgd2UgYXJlIHByb3Bvc2luZyB0byB1c2UgU0hBLTE8YnI+DQomZ3Q7wqAgwqAgwqAgwqAg wqBmb3IgcGFzc3dvcmQ8YnI+DQomZ3Q7wqAgwqAgwqAgwqAgwqAmZ3Q7wqAgwqAgwqAmZ3Q7Jmd0 OyZndDsmZ3Q7IGVuY3J5cHRpb24sIHNvIEkgYW0gbm90IHN1cmUgd2hlcmUgdGhhdCBjb21lIGZy b20uwqA8YnI+DQomZ3Q7wqAgwqAgwqAgwqAgwqBXaGF0IHdlPGJyPg0KJmd0O8KgIMKgIMKgIMKg IMKgJmd0O8KgIMKgIMKgcHJvcG9zZSBpczo8YnI+DQomZ3Q7wqAgwqAgwqAgwqAgwqAmZ3Q7wqAg wqAgwqAmZ3Q7Jmd0OyZndDsmZ3Q7PGJyPg0KJmd0O8KgIMKgIMKgIMKgIMKgJmd0O8KgIMKgIMKg Jmd0OyZndDsmZ3Q7PGJyPg0KJmd0O8KgIMKgIMKgIMKgIMKgJmd0O8KgIMKgIMKgJmd0OyZndDsm Z3Q7IFlvdSYjMzk7cmUgcmlnaHQsIGl0JiMzOTtzIFNIQS0yNTYsIGJ1dCBteSBjcml0aWNpc21z IGFwcGx5PGJyPg0KJmd0O8KgIMKgIMKgIMKgIMKgZXF1YWxseSB0aGVyZS48YnI+DQomZ3Q7wqAg wqAgwqAgwqAgwqAmZ3Q7wqAgwqAgwqAmZ3Q7Jmd0Ozxicj4NCiZndDvCoCDCoCDCoCDCoCDCoCZn dDvCoCDCoCDCoCZndDsmZ3Q7IFNIQS0yNTYgd2FzIHdoYXQgdGhlIFdHIGFkb3B0ZWQuwqAgT3Vy IGF0dGVtcHRzIHRvIGFkZDxicj4NCiZndDvCoCDCoCDCoCDCoCDCoG90aGVyIHBhc3N3b3Jkczxi cj4NCiZndDvCoCDCoCDCoCDCoCDCoCZndDvCoCDCoCDCoCZndDsmZ3Q7IGVuY3J5cHRpb24gbWVj aGFuaXNtcyB3ZXJlIGRlbmllZC7CoCBJdCBpcyB0cnVlIHRoYXQ8YnI+DQomZ3Q7wqAgwqAgwqAg wqAgwqBBcmdvbjIgd2FzPGJyPg0KJmd0O8KgIMKgIMKgIMKgIMKgJmd0O8KgIMKgIMKgbm90IGlu IHRoYXQ8YnI+DQomZ3Q7wqAgwqAgwqAgwqAgwqAmZ3Q7wqAgwqAgwqAmZ3Q7Jmd0OyBsaXN0IChp biBvdXIgZGVmZW5zZSBBcmdvbjIgd2FzIG5vdCBrbm93biBiZWZvcmUgSnVseTxicj4NCiZndDvC oCDCoCDCoCDCoCDCoDIwMTUpLCBidXQ8YnI+DQomZ3Q7wqAgwqAgwqAgwqAgwqAmZ3Q7wqAgwqAg wqBJIGRvIG5vdDxicj4NCiZndDvCoCDCoCDCoCDCoCDCoCZndDvCoCDCoCDCoCZndDsmZ3Q7IHNl ZSB3aHkgdGhlIFdHIHdvdWxkIGhhdmUgYWNjZXB0ZWQgdGhhdCBvbmUgb3ZlciB0aGU8YnI+DQom Z3Q7wqAgwqAgwqAgwqAgwqBvdGhlcnMuwqA8YnI+DQomZ3Q7wqAgwqAgwqAgwqAgwqAmZ3Q7wqAg wqAgwqBBbnl3YXkgaXQgaXM8YnI+DQomZ3Q7wqAgwqAgwqAgwqAgwqAmZ3Q7wqAgwqAgwqAmZ3Q7 Jmd0OyB0b28gbGF0ZSB0byBmaXggdGhpcywgYXMgaXQgaXMgbXkgdW5kZXJzdGFuZGluZyB0aGF0 PGJyPg0KJmd0O8KgIMKgIMKgIMKgIMKgdGhlIFdHIGRvZXM8YnI+DQomZ3Q7wqAgwqAgwqAgwqAg wqAmZ3Q7wqAgwqAgwqBub3QgaGF2ZTxicj4NCiZndDvCoCDCoCDCoCDCoCDCoCZndDvCoCDCoCDC oCZndDsmZ3Q7IGVub3VnaCBlbmVyZ3kgdG8gcmVhY2ggY29uc2Vuc3VzIG9uIGEgbmV3IHBhc3N3 b3JkPGJyPg0KJmd0O8KgIMKgIMKgIMKgIMKgYWxnb3JpdGhtLsKgPGJyPg0KJmd0O8KgIMKgIMKg IMKgIMKgJmd0O8KgIMKgIMKgU29tZW9uZSBjYW48YnI+DQomZ3Q7wqAgwqAgwqAgwqAgwqAmZ3Q7 wqAgwqAgwqAmZ3Q7Jmd0OyBqdXN0IHdyaXRlIGEgZHJhZnQgYWRkaW5nIEFyZ29uMiBhcyBwYXNz d29yZDxicj4NCiZndDvCoCDCoCDCoCDCoCDCoGVuY3J5cHRpb24sIGFzIHdlPGJyPg0KJmd0O8Kg IMKgIMKgIMKgIMKgJmd0O8KgIMKgIMKgd2lsbCBoYXZlIGE8YnI+DQomZ3Q7wqAgwqAgwqAgwqAg wqAmZ3Q7wqAgwqAgwqAmZ3Q7Jmd0OyBJQU5BIHJlZ2lzdHJ5IGZvciB0aGF0Ljxicj4NCiZndDvC oCDCoCDCoCDCoCDCoCZndDvCoCDCoCDCoCZndDsmZ3Q7PGJyPg0KJmd0O8KgIMKgIMKgIMKgIMKg Jmd0O8KgIMKgIMKgJmd0OyZndDsmZ3Q7PGJyPg0KJmd0O8KgIMKgIMKgIMKgIMKgJmd0O8KgIMKg IMKgJmd0OyZndDsmZ3Q7PGJyPg0KJmd0O8KgIMKgIMKgIMKgIMKgJmd0O8KgIMKgIMKgJmd0OyZn dDsmZ3Q7Jmd0OyAtIEVzdGFibGlzaCBhIHJlZ2lzdHJ5IGZvciBuZXcgcGFzc3dvcmQgYWxnb3Jp dGhtczxicj4NCiZndDvCoCDCoCDCoCDCoCDCoChzZWN0aW9uPGJyPg0KJmd0O8KgIMKgIMKgIMKg IMKgJmd0O8KgIMKgIMKgMTguNSksIHNvPGJyPg0KJmd0O8KgIMKgIMKgIMKgIMKgJmd0O8KgIMKg IMKgJmd0OyZndDsmZ3Q7Jmd0OyBhbGdvcml0aG1zIGxpa2UgQXJnb24yIGNvdWxkIGJlIGFkZGVk IGxhdGVyIChidXQgbm90ZTxicj4NCiZndDvCoCDCoCDCoCDCoCDCoHRoYXQgb3VyIG93bjxicj4N CiZndDvCoCDCoCDCoCDCoCDCoCZndDvCoCDCoCDCoCZndDsmZ3Q7Jmd0OyZndDsgcHJvcG9zYWxz IHRvIGFkZCBtb3JlIHBhc3N3b3JkIGFsZ29yaXRobXMgd2VyZTxicj4NCiZndDvCoCDCoCDCoCDC oCDCoHJlamVjdGVkIGJ5IHRoZTxicj4NCiZndDvCoCDCoCDCoCDCoCDCoCZndDvCoCDCoCDCoHdv cmtpbmc8YnI+DQomZ3Q7wqAgwqAgwqAgwqAgwqAmZ3Q7wqAgwqAgwqAmZ3Q7Jmd0OyZndDsmZ3Q7 IGdyb3VwKS48YnI+DQomZ3Q7wqAgwqAgwqAgwqAgwqAmZ3Q7wqAgwqAgwqAmZ3Q7Jmd0OyZndDsm Z3Q7IC0gQWRkIGEgbmV3IHBhc3N3b3JkIGFsZ29yaXRobSB0byB0aGF0IHJlZ2lzdHJ5LDxicj4N CiZndDvCoCDCoCDCoCDCoCDCoG5hbWVseSBTSEEtMjU2Ljxicj4NCiZndDvCoCDCoCDCoCDCoCDC oCZndDvCoCDCoCDCoCZndDsmZ3Q7Jmd0OyZndDsgLSBSZWdpc3RlciBNRDUgYXMgYW4gaW5pdGlh bCBwYXNzd29yZCBhbGdvcml0aG0gZm9yPGJyPg0KJmd0O8KgIMKgIMKgIMKgIMKgYmFja3dhcmQ8 YnI+DQomZ3Q7wqAgwqAgwqAgwqAgwqAmZ3Q7wqAgwqAgwqAmZ3Q7Jmd0OyBjb21wYXRpYmlsaXR5 PGJyPg0KJmd0O8KgIMKgIMKgIMKgIMKgJmd0O8KgIMKgIMKgJmd0OyZndDsmZ3Q7Jmd0OyBwdXJw b3NlLjxicj4NCiZndDvCoCDCoCDCoCDCoCDCoCZndDvCoCDCoCDCoCZndDsmZ3Q7Jmd0OyZndDs8 YnI+DQomZ3Q7wqAgwqAgwqAgwqAgwqAmZ3Q7wqAgwqAgwqAmZ3Q7Jmd0OyZndDsmZ3Q7IEFzIGZv ciB0aGUgYmlkZG93biBwcm90ZWN0aW9uIGl0c2VsZiwgaXQgaXMgbXk8YnI+DQomZ3Q7wqAgwqAg wqAgwqAgwqByZWNvbGxlY3Rpb24gdGhhdCBpdDxicj4NCiZndDvCoCDCoCDCoCDCoCDCoCZndDvC oCDCoCDCoCZndDsmZ3Q7Jmd0OyZndDsgaGFwcGVuZWQgbW9yZSBvciBsZXNzIGxpa2UgdGhhdDo8 YnI+DQomZ3Q7wqAgwqAgwqAgwqAgwqAmZ3Q7wqAgwqAgwqAmZ3Q7Jmd0OyZndDsmZ3Q7PGJyPg0K Jmd0O8KgIMKgIMKgIMKgIMKgJmd0O8KgIMKgIMKgJmd0OyZndDsmZ3Q7Jmd0Ozxicj4NCiZndDvC oCDCoCDCoCDCoCDCoCZndDvCoCDCoCDCoCZndDsmZ3Q7Jmd0OyZndDsgSU5ULiBNRUVUSU5HIFJP T00gLSBEQVk8YnI+DQomZ3Q7wqAgwqAgwqAgwqAgwqAmZ3Q7wqAgwqAgwqAmZ3Q7Jmd0OyZndDsm Z3Q7PGJyPg0KJmd0O8KgIMKgIMKgIMKgIMKgJmd0O8KgIMKgIMKgJmd0OyZndDsmZ3Q7Jmd0OyBP bmUgb2YgdGhlIGNvLWVkaXRvcnMgb2YgU1RVTkJpcyBzdGFuZHMgYXQgdGhlPGJyPg0KJmd0O8Kg IMKgIMKgIMKgIMKgbWljcm9waG9uZTo8YnI+DQomZ3Q7wqAgwqAgwqAgwqAgwqAmZ3Q7wqAgwqAg wqAmZ3Q7Jmd0OyZndDsmZ3Q7PGJyPg0KJmd0O8KgIMKgIMKgIMKgIMKgJmd0O8KgIMKgIMKgJmd0 OyZndDsmZ3Q7Jmd0O8KgIMKgIMKgIMKgIMKgIMKgIMKgIMKgIMKgIMKgIMKgIMKgIMKgIMKgIENP LUVESVRPUjxicj4NCiZndDvCoCDCoCDCoCDCoCDCoCZndDvCoCDCoCDCoCZndDsmZ3Q7Jmd0OyZn dDvCoCDCoCDCoCDCoCDCoCDCoCDCoCDCoCDCoCBXZSBhZGRlZCBTSEEtMjU2IHByb3RlY3Rpb24g Zm9yPGJyPg0KJmd0O8KgIMKgIMKgIMKgIMKgcGFzc3dvcmRzPGJyPg0KJmd0O8KgIMKgIMKgIMKg IMKgJmd0O8KgIMKgIMKgJmd0OyZndDsmZ3Q7Jmd0O8KgIMKgIMKgIMKgIMKgIMKgIMKgIMKgIMKg IGluIFNUVU5CaXMuPGJyPg0KJmd0O8KgIMKgIMKgIMKgIMKgJmd0O8KgIMKgIMKgJmd0OyZndDsm Z3Q7Jmd0Ozxicj4NCiZndDvCoCDCoCDCoCDCoCDCoCZndDvCoCDCoCDCoCZndDsmZ3Q7Jmd0OyZn dDvCoCDCoCDCoCDCoCDCoCDCoCDCoCDCoCDCoCDCoCDCoCDCoCDCoCDCoCBTT01FT05FIChWLk8u KTxicj4NCiZndDvCoCDCoCDCoCDCoCDCoCZndDvCoCDCoCDCoCZndDsmZ3Q7Jmd0OyZndDvCoCDC oCDCoCDCoCDCoCDCoCDCoCDCoCDCoCBBcyBNRDUgc3RpbGwgbmVlZCB0byBiZSBzdXBwb3J0ZWQs PGJyPg0KJmd0O8KgIMKgIMKgIMKgIMKgeW91IG5lZWQgdG8gYWRkPGJyPg0KJmd0O8KgIMKgIMKg IMKgIMKgJmd0O8KgIMKgIMKgJmd0OyZndDsmZ3Q7Jmd0O8KgIMKgIMKgIMKgIMKgIMKgIMKgIMKg IMKgIHByb3RlY3Rpb24gZm9yIGJpZC1kb3duIGF0dGFja3MuPGJyPg0KJmd0O8KgIMKgIMKgIMKg IMKgJmd0O8KgIMKgIMKgJmd0OyZndDsmZ3Q7Jmd0Ozxicj4NCiZndDvCoCDCoCDCoCDCoCDCoCZn dDvCoCDCoCDCoCZndDsmZ3Q7Jmd0OyZndDsgQ0xPU0UtVVAgb24gQ08tRURJVE9SIFJPTExJTkcg SElTIEVZRVM8YnI+DQomZ3Q7wqAgwqAgwqAgwqAgwqAmZ3Q7wqAgwqAgwqAmZ3Q7Jmd0OyZndDsm Z3Q7PGJyPg0KJmd0O8KgIMKgIMKgIMKgIMKgJmd0O8KgIMKgIMKgJmd0OyZndDsmZ3Q7Jmd0O8Kg IMKgIMKgIMKgIMKgIMKgIMKgIMKgIMKgIMKgIMKgIMKgIMKgIMKgIENPLUVESVRPUjxicj4NCiZn dDvCoCDCoCDCoCDCoCDCoCZndDvCoCDCoCDCoCZndDsmZ3Q7Jmd0OyZndDvCoCDCoCDCoCDCoCDC oCDCoCDCoCDCoCDCoCBPSywgSSYjMzk7bGwgd29yayBvbiB0aGF0Ljxicj4NCiZndDvCoCDCoCDC oCDCoCDCoCZndDvCoCDCoCDCoCZndDsmZ3Q7Jmd0OyZndDs8YnI+DQomZ3Q7wqAgwqAgwqAgwqAg wqAmZ3Q7wqAgwqAgwqAmZ3Q7Jmd0OyZndDsmZ3Q7IEZvdXIgdG8gZWlnaHQgbW9udGhzIGhhcyBw YXNzZWQuPGJyPg0KJmd0O8KgIMKgIMKgIMKgIMKgJmd0O8KgIMKgIMKgJmd0OyZndDsmZ3Q7Jmd0 Ozxicj4NCiZndDvCoCDCoCDCoCDCoCDCoCZndDvCoCDCoCDCoCZndDsmZ3Q7Jmd0OyZndDsgSU5U LiBBTk9USEVSIE1FRVRJTkcgUk9PTSAtIERBWTxicj4NCiZndDvCoCDCoCDCoCDCoCDCoCZndDvC oCDCoCDCoCZndDsmZ3Q7Jmd0OyZndDs8YnI+DQomZ3Q7wqAgwqAgwqAgwqAgwqAmZ3Q7wqAgwqAg wqAmZ3Q7Jmd0OyZndDsmZ3Q7IFRoZSBzYW1lIGNvLWVkaXRvciBvZiBTVFVOQmlzIHN0YW5kcyBh dCB0aGUgbWljcm9waG9uZTo8YnI+DQomZ3Q7wqAgwqAgwqAgwqAgwqAmZ3Q7wqAgwqAgwqAmZ3Q7 Jmd0OyZndDsmZ3Q7PGJyPg0KJmd0O8KgIMKgIMKgIMKgIMKgJmd0O8KgIMKgIMKgJmd0OyZndDsm Z3Q7Jmd0O8KgIMKgIMKgIMKgIMKgIMKgIMKgIMKgIMKgIMKgIMKgIMKgIMKgIMKgIENPLUVESVRP Ujxicj4NCiZndDvCoCDCoCDCoCDCoCDCoCZndDvCoCDCoCDCoCZndDsmZ3Q7Jmd0OyZndDvCoCDC oCDCoCDCoCDCoCDCoCDCoCDCoCDCoCBXZSBhZGRlZCBhIG5pY2UgbWVjaGFuaXNtIHRvIHByZXZl bnQ8YnI+DQomZ3Q7wqAgwqAgwqAgwqAgwqBiaWQtZG93bjxicj4NCiZndDvCoCDCoCDCoCDCoCDC oCZndDvCoCDCoCDCoCZndDsmZ3Q7Jmd0OyZndDvCoCDCoCDCoCDCoCDCoCDCoCDCoCDCoCDCoCBh dHRhY2tzIG9uIHBhc3N3b3Jkcy7CoCBBbnkgY29tbWVudHM/PGJyPg0KJmd0O8KgIMKgIMKgIMKg IMKgJmd0O8KgIMKgIMKgJmd0OyZndDsmZ3Q7Jmd0Ozxicj4NCiZndDvCoCDCoCDCoCDCoCDCoCZn dDvCoCDCoCDCoCZndDsmZ3Q7Jmd0OyZndDvCoCDCoCDCoCDCoCDCoCDCoCDCoCDCoCDCoCDCoCDC oCDCoCDCoCDCoCBUSEUgUk9PTTxicj4NCiZndDvCoCDCoCDCoCDCoCDCoCZndDvCoCDCoCDCoCZn dDsmZ3Q7Jmd0OyZndDvCoCDCoCDCoCDCoCDCoCDCoCDCoCDCoCDCoCAoc2lsZW5jZSk8YnI+DQom Z3Q7wqAgwqAgwqAgwqAgwqAmZ3Q7wqAgwqAgwqAmZ3Q7Jmd0OyZndDsmZ3Q7PGJyPg0KJmd0O8Kg IMKgIMKgIMKgIMKgJmd0O8KgIMKgIMKgJmd0OyZndDsmZ3Q7Jmd0O8KgIMKgIMKgIMKgIMKgIMKg IMKgIMKgIMKgIMKgIMKgIMKgIMKgIMKgIENPLUVESVRPUjxicj4NCiZndDvCoCDCoCDCoCDCoCDC oCZndDvCoCDCoCDCoCZndDsmZ3Q7Jmd0OyZndDvCoCDCoCDCoCDCoCDCoCDCoCDCoCDCoCDCoCBN b3Zpbmcgb24uLi48YnI+DQomZ3Q7wqAgwqAgwqAgwqAgwqAmZ3Q7wqAgwqAgwqAmZ3Q7Jmd0OyZn dDsmZ3Q7PGJyPg0KJmd0O8KgIMKgIMKgIMKgIMKgJmd0O8KgIMKgIMKgJmd0OyZndDsmZ3Q7PGJy Pg0KJmd0O8KgIMKgIMKgIMKgIMKgJmd0O8KgIMKgIMKgJmd0OyZndDsmZ3Q7IEkgZG9uJiMzOTt0 IHNlZSBob3cgYW55IG9mIHRoaXMgaXMgcmVsZXZhbnQgdG8gbXk8YnI+DQomZ3Q7wqAgwqAgwqAg wqAgwqB0ZWNobmljYWwgcG9pbnRzPGJyPg0KJmd0O8KgIMKgIMKgIMKgIMKgJmd0O8KgIMKgIMKg YWJvdmUuPGJyPg0KJmd0O8KgIMKgIMKgIMKgIMKgJmd0O8KgIMKgIMKgJmd0OyZndDs8YnI+DQom Z3Q7wqAgwqAgwqAgwqAgwqAmZ3Q7wqAgwqAgwqAmZ3Q7Jmd0OyBNeSBwb2ludCB3YXMgdGhhdCB3 ZSwgdGhlIGNvLWVkaXRvcnMsIGRpZCBub3QgZGVjaWRlIG9uPGJyPg0KJmd0O8KgIMKgIMKgIMKg IMKgYWRkaW5nPGJyPg0KJmd0O8KgIMKgIMKgIMKgIMKgJmd0O8KgIMKgIMKgYmlkLWRvd248YnI+ DQomZ3Q7wqAgwqAgwqAgwqAgwqAmZ3Q7wqAgwqAgwqAmZ3Q7Jmd0OyBwcm90ZWN0aW9uLCBzb21l b25lIGFza2VkIHVzIHRvIGRvIHNvIGFuZCBuby1vbmUgaW4gdGhlPGJyPg0KJmd0O8KgIMKgIMKg IMKgIMKgV0cgc2F3PGJyPg0KJmd0O8KgIMKgIMKgIMKgIMKgJmd0O8KgIMKgIMKgYW55IHByb2Js ZW08YnI+DQomZ3Q7wqAgwqAgwqAgwqAgwqAmZ3Q7wqAgwqAgwqAmZ3Q7Jmd0OyB3aXRoIHRoYXQu wqAgVGhlIHJlYXNvbnMgdGhhdCBwZXJzb24gd2FudGVkIHRoYXQgYXJlIG5vdDxicj4NCiZndDvC oCDCoCDCoCDCoCDCoGtub3duIHRvPGJyPg0KJmd0O8KgIMKgIMKgIMKgIMKgJmd0O8KgIMKgIMKg dXMgYnV0LCBhczxicj4NCiZndDvCoCDCoCDCoCDCoCDCoCZndDvCoCDCoCDCoCZndDsmZ3Q7IHlv dSBpbnNpc3QsIGhlcmUmIzM5O3Mgb25lIHJlYXNvbiBJIGNhbiB0aGluayBvZjo8YnI+DQomZ3Q7 wqAgwqAgwqAgwqAgwqAmZ3Q7wqAgwqAgwqAmZ3Q7Jmd0Ozxicj4NCiZndDvCoCDCoCDCoCDCoCDC oCZndDvCoCDCoCDCoCZndDsmZ3Q7IEl0IGlzIGEgZmFjdCB0aGF0LCBmb3Igb3BlcmF0aW9uYWwg cmVhc29ucywgYSBwYXNzd29yZDxicj4NCiZndDvCoCDCoCDCoCDCoCDCoGRhdGFiYXNlPGJyPg0K Jmd0O8KgIMKgIMKgIMKgIMKgJmd0O8KgIMKgIMKgY2Fubm90IGJlPGJyPg0KJmd0O8KgIMKgIMKg IMKgIMKgJmd0O8KgIMKgIMKgJmd0OyZndDsgcmUtZW5jcnlwdGVkIGF0IG9uY2UuwqAgQWxzbyBm b3Igb3BlcmF0aW9uYWwgcmVhc29ucyw8YnI+DQomZ3Q7wqAgwqAgwqAgwqAgwqB0aGUgTUQ1IHBh c3N3b3JkPGJyPg0KJmd0O8KgIMKgIMKgIMKgIMKgJmd0O8KgIMKgIMKgJmd0OyZndDsgY2Fubm90 IGJlIGltbWVkaWF0ZWx5IHJlbW92ZWQgZnJvbSB0aGUgZGF0YWJhc2UgYXMgc29vbjxicj4NCiZn dDvCoCDCoCDCoCDCoCDCoHRoZSB1c2VyPGJyPg0KJmd0O8KgIMKgIMKgIMKgIMKgJmd0O8KgIMKg IMKgc3VibWl0dGVkPGJyPg0KJmd0O8KgIMKgIMKgIMKgIMKgJmd0O8KgIMKgIMKgJmd0OyZndDsg YSBuZXcgb25lLsKgIEluIGZhY3QsIGFuZCBmb3IgcXVpdGUgc29tZSB0aW1lLCBib3RoPGJyPg0K Jmd0O8KgIMKgIMKgIMKgIMKgZW5jcnlwdGVkPGJyPg0KJmd0O8KgIMKgIMKgIMKgIMKgJmd0O8Kg IMKgIMKgdmFyaWFudHMgb2Y8YnI+DQomZ3Q7wqAgwqAgwqAgwqAgwqAmZ3Q7wqAgwqAgwqAmZ3Q7 Jmd0OyB0aGUgc2FtZSBwYXNzd29yZCBtYXkgaGF2ZSB0byBiZSBrZXB0IGluIHRoYXQgZGF0YWJh c2UsPGJyPg0KJmd0O8KgIMKgIMKgIMKgIMKgYmVjYXVzZSBhPGJyPg0KJmd0O8KgIMKgIMKgIMKg IMKgJmd0O8KgIMKgIMKgc2luZ2xlPGJyPg0KJmd0O8KgIMKgIMKgIMKgIMKgJmd0O8KgIMKgIMKg Jmd0OyZndDsgdXNlciBtYXkgdXNlIGEgbWl4IG9mIGRldmljZXMsIHNvbWUgb2YgdGhlbSB0aGF0 IHVzZSBhbjxicj4NCiZndDvCoCDCoCDCoCDCoCDCoFJGQyA1Mzg5PGJyPg0KJmd0O8KgIMKgIMKg IMKgIMKgJmd0O8KgIMKgIMKgY2xpZW50LDxicj4NCiZndDvCoCDCoCDCoCDCoCDCoCZndDvCoCDC oCDCoCZndDsmZ3Q7IHNvbWUgdGhhdCB1c2UgYSBTVFVOYmlzIGNsaWVudC7CoCBJdCBpcyB1cCB0 byB0aGUgU1RVTjxicj4NCiZndDvCoCDCoCDCoCDCoCDCoHNlcnZlciBvd25lciB0bzxicj4NCiZn dDvCoCDCoCDCoCDCoCDCoCZndDvCoCDCoCDCoCZndDsmZ3Q7IGRlY2lkZSBob3cgbG9uZyB0aGUg bWlncmF0aW9uIHRvIFNUVU5iaXMgd2lsbCB0YWtlIGFuZDxicj4NCiZndDvCoCDCoCDCoCDCoCDC oHdoZW4gaXQ8YnI+DQomZ3Q7wqAgwqAgwqAgwqAgwqAmZ3Q7wqAgwqAgwqB3aWxsIGJlPGJyPg0K Jmd0O8KgIMKgIMKgIMKgIMKgJmd0O8KgIMKgIMKgJmd0OyZndDsgYWNjZXB0YWJsZSB0byByZWpl Y3QgYWxsIFJGQyA1Mzg5IChpLmUuIE1ENSkgY2xpZW50cyAodGhhdDxicj4NCiZndDvCoCDCoCDC oCDCoCDCoCZndDvCoCDCoCDCoG1pZ3JhdGlvbiB0aW1lPGJyPg0KJmd0O8KgIMKgIMKgIMKgIMKg Jmd0O8KgIMKgIMKgJmd0OyZndDsgY2FuIGJlIHB1cnBvc2VseSByZWR1Y2VkIHRvIDAgc2Vjb25k cyBidXQgdGhhdCYjMzk7cyB0aGU8YnI+DQomZ3Q7wqAgwqAgwqAgwqAgwqBjaG9pY2UgYW5kPGJy Pg0KJmd0O8KgIMKgIMKgIMKgIMKgJmd0O8KgIMKgIMKgJmd0OyZndDsgcmVzcG9uc2liaWxpdHkg b2YgdGhlIG93bmVyIG9mIHRoZSBzZXJ2ZXIpLjxicj4NCiZndDvCoCDCoCDCoCDCoCDCoCZndDvC oCDCoCDCoCZndDsmZ3Q7PGJyPg0KJmd0O8KgIMKgIMKgIMKgIMKgJmd0O8KgIMKgIMKgJmd0OyZn dDsgTWVhbndoaWxlIHdlIHN0aWxsIG5lZWQgdG8gYmUgc3VyZSB0aGF0IGlmIHRoZSBTVFVOPGJy Pg0KJmd0O8KgIMKgIMKgIMKgIMKgY2xpZW50IGlzPGJyPg0KJmd0O8KgIMKgIMKgIMKgIMKgJmd0 O8KgIMKgIMKgaW1wbGVtZW50aW5nPGJyPg0KJmd0O8KgIMKgIMKgIMKgIMKgJmd0O8KgIMKgIMKg Jmd0OyZndDsgU1RVTmJpcyBpdCB1bmNvbmRpdGlvbmFsbHkgZ2V0cyB0aGUgYWRkaXRpb25hbDxi cj4NCiZndDvCoCDCoCDCoCDCoCDCoHByb3RlY3Rpb24gb2YgdGhlIG5ldzxicj4NCiZndDvCoCDC oCDCoCDCoCDCoCZndDvCoCDCoCDCoCZndDsmZ3Q7IHBhc3N3b3JkIGVuY3J5cHRpb24gYWxnb3Jp dGhtLsKgIFRoYXQmIzM5O3Mgd2hlcmUgdGhlIGJpZGRvd248YnI+DQomZ3Q7wqAgwqAgwqAgwqAg wqAmZ3Q7wqAgwqAgwqBwcm90ZWN0aW9uIGtpY2tzPGJyPg0KJmd0O8KgIMKgIMKgIMKgIMKgJmd0 O8KgIMKgIMKgJmd0OyZndDsgaW4sIGJ5IHByZXZlbnRpbmcgYW4gb25saW5lIGF0dGFja2VyIHRv IGhhdmUgdGhlIHNlcnZlcjxicj4NCiZndDvCoCDCoCDCoCDCoCDCoCZndDvCoCDCoCDCoG1pc2lk ZW50aWZ5aW5nIGE8YnI+DQomZ3Q7wqAgwqAgwqAgwqAgwqAmZ3Q7wqAgwqAgwqAmZ3Q7Jmd0OyBT VFVOYmlzIGNsaWVudCBhcyBhbiBSRkMgNTM4OSBjbGllbnQsIGJ5IHByZXZlbnRpbmcgYW48YnI+ DQomZ3Q7wqAgwqAgwqAgwqAgwqBvbmxpbmU8YnI+DQomZ3Q7wqAgwqAgwqAgwqAgwqAmZ3Q7wqAg wqAgwqBhdHRhY2tlciB0bzxicj4NCiZndDvCoCDCoCDCoCDCoCDCoCZndDvCoCDCoCDCoCZndDsm Z3Q7IGhhdmUgdGhlIGNsaWVudCBtaXNpZGVudGlmeWluZyBhIFNUVU5iaXMgc2VydmVyIGFzIGE8 YnI+DQomZ3Q7wqAgwqAgwqAgwqAgwqBSRkMgNTM4OTxicj4NCiZndDvCoCDCoCDCoCDCoCDCoCZn dDvCoCDCoCDCoHNlcnZlciwgYW5kPGJyPg0KJmd0O8KgIMKgIMKgIMKgIMKgJmd0O8KgIMKgIMKg Jmd0OyZndDsgaGF2aW5nIGJvdGggdGhlbSB1c2UgdGhlIE1ENSBlbmNyeXB0ZWQgcGFzc3dvcmQg aW5zdGVhZDxicj4NCiZndDvCoCDCoCDCoCDCoCDCoG9mIHRoZTxicj4NCiZndDvCoCDCoCDCoCDC oCDCoCZndDvCoCDCoCDCoFNIQS0yNTY8YnI+DQomZ3Q7wqAgwqAgwqAgwqAgwqAmZ3Q7wqAgwqAg wqAmZ3Q7Jmd0OyBlbmNyeXB0ZWQgcGFzc3dvcmQsIGFsbCBvZiB0aGF0IGVhc2lseSBkb25lIGJ5 PGJyPg0KJmd0O8KgIMKgIMKgIMKgIMKgc3RyaXBwaW5nIHRoZTxicj4NCiZndDvCoCDCoCDCoCDC oCDCoCZndDvCoCDCoCDCoHVucHJvdGVjdGVkPGJyPg0KJmd0O8KgIMKgIMKgIMKgIMKgJmd0O8Kg IMKgIMKgJmd0OyZndDsgNDAxIHJlc3BvbnNlIG9mIHRoZSBuZXcgU1RVTmJpcyBQQVNTV09SRC1B TEdPUklUSE1TPGJyPg0KJmd0O8KgIMKgIMKgIMKgIMKgYXR0cmlidXRlLjxicj4NCiZndDvCoCDC oCDCoCDCoCDCoCZndDvCoCDCoCDCoCZndDsmZ3Q7PGJyPg0KJmd0O8KgIMKgIMKgIMKgIMKgJmd0 O8KgIMKgIMKgJmd0OyZndDsmZ3Q7PGJyPg0KJmd0O8KgIMKgIMKgIMKgIMKgJmd0O8KgIMKgIMKg Jmd0OyZndDsmZ3Q7PGJyPg0KJmd0O8KgIMKgIMKgIMKgIMKgJmd0O8KgIMKgIMKgJmd0OyZndDsm Z3Q7PGJyPg0KJmd0O8KgIMKgIMKgIMKgIMKgJmd0O8KgIMKgIMKgJmd0OyZndDsmZ3Q7Jmd0OyZn dDsgVGhlIHNlY29uZCB0b3BpYyBpcyB0aGUgaGFzaCB1c2VkIHRvIGNvbXB1dGUgdGhlPGJyPg0K Jmd0O8KgIMKgIMKgIMKgIMKgTUFDLiBIb3dldmVyLDxicj4NCiZndDvCoCDCoCDCoCDCoCDCoCZn dDvCoCDCoCDCoEkgZG9uJiMzOTt0PGJyPg0KJmd0O8KgIMKgIMKgIMKgIMKgJmd0O8KgIMKgIMKg Jmd0OyZndDsmZ3Q7Jmd0OyBzZWU8YnI+DQomZ3Q7wqAgwqAgwqAgwqAgwqAmZ3Q7wqAgwqAgwqAm Z3Q7Jmd0OyZndDsmZ3Q7Jmd0OyBob3c8YnI+DQomZ3Q7wqAgwqAgwqAgwqAgwqAmZ3Q7wqAgwqAg wqAmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyB0aGlzIGdpdmVzIHlvdSBzZW5zaWJsZSBiaWRkb3duIHBy b3RlY3Rpb24gYmVjYXVzZTxicj4NCiZndDvCoCDCoCDCoCDCoCDCoHRoYXQgaGFzaDxicj4NCiZn dDvCoCDCoCDCoCDCoCDCoCZndDvCoCDCoCDCoGlzIGFsc288YnI+DQomZ3Q7wqAgwqAgwqAgwqAg wqAmZ3Q7wqAgwqAgwqAmZ3Q7Jmd0OyB1c2VkPGJyPg0KJmd0O8KgIMKgIMKgIMKgIMKgJmd0O8Kg IMKgIMKgJmd0OyZndDsmZ3Q7Jmd0OyZndDsgdG8gY29tcHV0ZTxicj4NCiZndDvCoCDCoCDCoCDC oCDCoCZndDvCoCDCoCDCoCZndDsmZ3Q7Jmd0OyZndDsmZ3Q7IE1BQyBvdmVyIHRoZSBuZWdvdGlh dGlvbjogYW4gYXR0YWNrZXIgd2hvIGhhczxicj4NCiZndDvCoCDCoCDCoCDCoCDCoGNvbXByb21p c2VkIGE8YnI+DQomZ3Q7wqAgwqAgwqAgwqAgwqAmZ3Q7wqAgwqAgwqBNQUMgd2hpY2g8YnI+DQom Z3Q7wqAgwqAgwqAgwqAgwqAmZ3Q7wqAgwqAgwqAmZ3Q7Jmd0OyB0aGU8YnI+DQomZ3Q7wqAgwqAg wqAgwqAgwqAmZ3Q7wqAgwqAgwqAmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyBzZXJ2ZXI8YnI+DQomZ3Q7 wqAgwqAgwqAgwqAgwqAmZ3Q7wqAgwqAgwqAmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyBzdXBwb3J0cyB3 aWxsIHF1aXRlIGxpa2VseSBiZSBhYmxlIHRvIGZvcmdlIGEgTUFDPGJyPg0KJmd0O8KgIMKgIMKg IMKgIMKgb3ZlciB0aGU8YnI+DQomZ3Q7wqAgwqAgwqAgwqAgwqAmZ3Q7wqAgwqAgwqB0cmFuc2Ny aXB0PGJyPg0KJmd0O8KgIMKgIMKgIMKgIMKgJmd0O8KgIMKgIMKgJmd0OyZndDsgYXM8YnI+DQom Z3Q7wqAgwqAgwqAgwqAgwqAmZ3Q7wqAgwqAgwqAmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyB3ZWxsLiBU aGlzIGlzLDxicj4NCiZndDvCoCDCoCDCoCDCoCDCoCZndDvCoCDCoCDCoCZndDsmZ3Q7Jmd0OyZn dDsmZ3Q7IEkgc3VwcG9zZSwgcG90ZW50aWFsbHkgdXNlZnVsIGFzIGEgZGVmZW5zZSBhZ2FpbnN0 PGJyPg0KJmd0O8KgIMKgIMKgIMKgIMKgc29tZSBvdGhlcjxicj4NCiZndDvCoCDCoCDCoCDCoCDC oCZndDvCoCDCoCDCoHdlYWtuZXNzPGJyPg0KJmd0O8KgIMKgIMKgIMKgIMKgJmd0O8KgIMKgIMKg Jmd0OyZndDsmZ3Q7Jmd0OyZndDsgKGUuZy4sPGJyPg0KJmd0O8KgIMKgIMKgIMKgIMKgJmd0O8Kg IMKgIMKgJmd0OyZndDsmZ3Q7Jmd0OyZndDsgdmVyc2lvbiAjKSwgYnV0IEkgZG9uJiMzOTt0IHJl YWxseSBzZWUgaG93IHRoZSBjdXJyZW50PGJyPg0KJmd0O8KgIMKgIMKgIMKgIMKgZGVzaWduPGJy Pg0KJmd0O8KgIMKgIMKgIMKgIMKgJmd0O8KgIMKgIMKgaGVscHMgYWdhaW5zdDxicj4NCiZndDvC oCDCoCDCoCDCoCDCoCZndDvCoCDCoCDCoCZndDsmZ3Q7Jmd0OyZndDsmZ3Q7IGF0dGFja3Mgb24g dGhlPGJyPg0KJmd0O8KgIMKgIMKgIMKgIMKgJmd0O8KgIMKgIMKgJmd0OyZndDsmZ3Q7Jmd0OyZn dDsgTUFDLjxicj4NCiZndDvCoCDCoCDCoCDCoCDCoCZndDvCoCDCoCDCoCZndDsmZ3Q7Jmd0OyZn dDs8YnI+DQomZ3Q7wqAgwqAgwqAgwqAgwqAmZ3Q7wqAgwqAgwqAmZ3Q7Jmd0OyZndDsmZ3Q7IFRo ZXJlIGlzIG5vIGJpZGRvd24gYXR0YWNrIHByb3RlY3Rpb24gZm9yIHRoZSBNQUMsIGFzPGJyPg0K Jmd0O8KgIMKgIMKgIMKgIMKgc3RhdGVkIGluPGJyPg0KJmd0O8KgIMKgIMKgIMKgIMKgJmd0O8Kg IMKgIMKgU2VjdGlvbjxicj4NCiZndDvCoCDCoCDCoCDCoCDCoCZndDvCoCDCoCDCoCZndDsmZ3Q7 Jmd0OyZndDsgMTYuMzo8YnI+DQomZ3Q7wqAgwqAgwqAgwqAgwqAmZ3Q7wqAgwqAgwqAmZ3Q7Jmd0 OyZndDsmZ3Q7PGJyPg0KJmd0O8KgIMKgIMKgIMKgIMKgJmd0O8KgIMKgIMKgJmd0OyZndDsmZ3Q7 Jmd0OyAmcXVvdDtUaGUgYmlkLWRvd24gcHJvdGVjdGlvbiBtZWNoYW5pc20gZGVzY3JpYmVkIGlu IHRoaXM8YnI+DQomZ3Q7wqAgwqAgwqAgwqAgwqBkb2N1bWVudDxicj4NCiZndDvCoCDCoCDCoCDC oCDCoCZndDvCoCDCoCDCoGlzIG5ldyw8YnI+DQomZ3Q7wqAgwqAgwqAgwqAgwqAmZ3Q7wqAgwqAg wqAmZ3Q7Jmd0OyZndDsmZ3Q7wqAgYW5kIHRodXMgY2Fubm90IGN1cnJlbnRseSBwcm90ZWN0IGFn YWluc3QgYSBiaWQtZG93bjxicj4NCiZndDvCoCDCoCDCoCDCoCDCoGF0dGFjayB0aGF0PGJyPg0K Jmd0O8KgIMKgIMKgIMKgIMKgJmd0O8KgIMKgIMKgJmd0OyZndDsmZ3Q7Jmd0O8KgIGxvd2VycyB0 aGUgc3RyZW5ndGggb2YgdGhlIGhhc2ggYWxnb3JpdGhtIHRvIEhNQUMtU0hBMS4mcXVvdDs8YnI+ DQomZ3Q7wqAgwqAgwqAgwqAgwqAmZ3Q7wqAgwqAgwqAmZ3Q7Jmd0OyZndDsmZ3Q7PGJyPg0KJmd0 O8KgIMKgIMKgIMKgIMKgJmd0O8KgIMKgIMKgJmd0OyZndDsmZ3Q7Jmd0OyBXaGF0IHdlIHB1dCBp biBwbGFjZSBpcyBhIHBsYW4gZm9yICpmdXR1cmUqIHZlcnNpb25zPGJyPg0KJmd0O8KgIMKgIMKg IMKgIMKgb2YgU1RVTiB0byBnZXQ8YnI+DQomZ3Q7wqAgwqAgwqAgwqAgwqAmZ3Q7wqAgwqAgwqAm Z3Q7Jmd0OyZndDsmZ3Q7IGJpZGRvd24gcHJvdGVjdGlvbiBmb3IgdGhlIE1BQy7CoCBUaGF0JiMz OTtzIGl0LCBubyBtb3JlLDxicj4NCiZndDvCoCDCoCDCoCDCoCDCoG5vIGxlc3MuPGJyPg0KJmd0 O8KgIMKgIMKgIMKgIMKgJmd0O8KgIMKgIMKgJmd0OyZndDsmZ3Q7Jmd0Ozxicj4NCiZndDvCoCDC oCDCoCDCoCDCoCZndDvCoCDCoCDCoCZndDsmZ3Q7Jmd0Ozxicj4NCiZndDvCoCDCoCDCoCDCoCDC oCZndDvCoCDCoCDCoCZndDsmZ3Q7Jmd0OyBZZXMsIGJ1dCBJIGRvbiYjMzk7dCBiZWxpZXZlIHRo YXQgdGhpcyB3aWxsIHByb3ZpZGUgYmlkLWRvd248YnI+DQomZ3Q7wqAgwqAgwqAgwqAgwqAmZ3Q7 wqAgwqAgwqBwcm90ZWN0aW9uIGZvcjxicj4NCiZndDvCoCDCoCDCoCDCoCDCoCZndDvCoCDCoCDC oCZndDsmZ3Q7IHRoZTxicj4NCiZndDvCoCDCoCDCoCDCoCDCoCZndDvCoCDCoCDCoCZndDsmZ3Q7 Jmd0OyBNQUMgaW4gdGhlIGZ1dHVyZSBmb3IgdGhlIHJlYXNvbnMgSSBpbmRpY2F0ZSBhYm92ZS48 YnI+DQomZ3Q7wqAgwqAgwqAgwqAgwqAmZ3Q7wqAgwqAgwqAmZ3Q7Jmd0OyZndDs8YnI+DQomZ3Q7 wqAgwqAgwqAgwqAgwqAmZ3Q7wqAgwqAgwqAmZ3Q7Jmd0OyZndDsgSWYgeW91IHRoaW5rIHRoaXMg ZG9lcyBzb21ldGhpbmcgdXNlZnVsLCBwbGVhc2Ugc2hvdyBtZSBhbjxicj4NCiZndDvCoCDCoCDC oCDCoCDCoCZndDvCoCDCoCDCoGV4YW1wbGUgYXR0YWNrPGJyPg0KJmd0O8KgIMKgIMKgIMKgIMKg Jmd0O8KgIMKgIMKgJmd0OyZndDsmZ3Q7IGFuZCBob3cgdGhpcyBmaXhlcyBpdC4gTm90ZSB0aGF0 IGl0JiMzOTtzIG5vdCBnZW5lcmFsbHk8YnI+DQomZ3Q7wqAgwqAgwqAgwqAgwqB1c2VmdWwgdG88 YnI+DQomZ3Q7wqAgwqAgwqAgwqAgwqAmZ3Q7wqAgwqAgwqBqdXN0IGJpZDxicj4NCiZndDvCoCDC oCDCoCDCoCDCoCZndDvCoCDCoCDCoCZndDsmZ3Q7IGRvd248YnI+DQomZ3Q7wqAgwqAgwqAgwqAg wqAmZ3Q7wqAgwqAgwqAmZ3Q7Jmd0OyZndDsgdGhlIE1BQyBpdHNlbGYgdW5sZXNzIHRoZSBNQUMg eW91IGJpZCBkb3duIHRvIGlzIHdlYWs8YnI+DQomZ3Q7wqAgwqAgwqAgwqAgwqBlbm91Z2ggdG88 YnI+DQomZ3Q7wqAgwqAgwqAgwqAgwqAmZ3Q7wqAgwqAgwqBleHBsb2l0PGJyPg0KJmd0O8KgIMKg IMKgIMKgIMKgJmd0O8KgIMKgIMKgJmd0OyZndDsgaW48YnI+DQomZ3Q7wqAgwqAgwqAgwqAgwqAm Z3Q7wqAgwqAgwqAmZ3Q7Jmd0OyZndDsgc29tZSBvdGhlciB3YXkuPGJyPg0KJmd0O8KgIMKgIMKg IMKgIMKgJmd0O8KgIMKgIMKgJmd0OyZndDs8YnI+DQomZ3Q7wqAgwqAgwqAgwqAgwqAmZ3Q7wqAg wqAgwqAmZ3Q7Jmd0OyBJIGRvIG5vdCBrbm93IHdoYXQgd2Vha25lc3NlcyB3aWxsIGJlIGRpc2Nv dmVyZWQgaW4gdGhlPGJyPg0KJmd0O8KgIMKgIMKgIMKgIMKgZnV0dXJlLsKgPGJyPg0KJmd0O8Kg IMKgIMKgIMKgIMKgJmd0O8KgIMKgIMKgSSBhbSBhbHNvPGJyPg0KJmd0O8KgIMKgIMKgIMKgIMKg Jmd0O8KgIMKgIMKgJmd0OyZndDsgcHJldHR5IHN1cmUgdGhhdCB0aGUgY29zdCBvZiBub3QgdXNp bmcgdGhhdCBtZWNoYW5pc208YnI+DQomZ3Q7wqAgwqAgwqAgwqAgwqBpcyB2ZXJ5PGJyPg0KJmd0 O8KgIMKgIMKgIMKgIMKgJmd0O8KgIMKgIMKgY2xvc2UgdG8gMC48YnI+DQomZ3Q7wqAgwqAgwqAg wqAgwqAmZ3Q7wqAgwqAgwqAmZ3Q7Jmd0OyBXaGF0IEkgYW0gc3VyZSBvZiBpcyB0aGF0IHRoZSBj b3N0IG9mIHJlZW5naW5lZXJpbmcgYTxicj4NCiZndDvCoCDCoCDCoCDCoCDCoG5ldyBiaWRkb3du PGJyPg0KJmd0O8KgIMKgIMKgIMKgIMKgJmd0O8KgIMKgIMKgJmd0OyZndDsgcHJvdGVjdGlvbiBt ZWNoYW5pc20gaWYgd2UgZXZlciBuZWVkIGl0IHdpbGwgYmUgaGlnaC7CoDxicj4NCiZndDvCoCDC oCDCoCDCoCDCoFdlIGFscmVhZHk8YnI+DQomZ3Q7wqAgwqAgwqAgwqAgwqAmZ3Q7wqAgwqAgwqB3 ZW50PGJyPg0KJmd0O8KgIMKgIMKgIMKgIMKgJmd0O8KgIMKgIMKgJmd0OyZndDsgdGhyb3VnaCB0 aGUgcGFpbnMgb2YgZGVzaWduaW5nIG9uZSBmb3IgdGhlIHBhc3N3b3JkPGJyPg0KJmd0O8KgIMKg IMKgIMKgIMKgYWxnb3JpdGhtLCBzbzxicj4NCiZndDvCoCDCoCDCoCDCoCDCoCZndDvCoCDCoCDC oHdoeSBub3Q8YnI+DQomZ3Q7wqAgwqAgwqAgwqAgwqAmZ3Q7wqAgwqAgwqAmZ3Q7Jmd0OyBleHRl bmQgaXQgc28gaXQgY2FuIGJlIHVzZWQgaW4gdGhlIGFmdGVybWF0aCBvZiB0aGU8YnI+DQomZ3Q7 wqAgwqAgwqAgwqAgwqBuZXh0IFNub3dkZW48YnI+DQomZ3Q7wqAgwqAgwqAgwqAgwqAmZ3Q7wqAg wqAgwqBmYWNlcGFsbTxicj4NCiZndDvCoCDCoCDCoCDCoCDCoCZndDvCoCDCoCDCoCZndDsmZ3Q7 IG1vbWVudD88YnI+DQomZ3Q7wqAgwqAgwqAgwqAgwqAmZ3Q7wqAgwqAgwqAmZ3Q7Jmd0Ozxicj4N CiZndDvCoCDCoCDCoCDCoCDCoCZndDvCoCDCoCDCoCZndDsmZ3Q7Jmd0OyBBZ2FpbiwgaGFwcHkg dG8gaGF2ZSBhIGNhbGwgdG8gd2FsayB0aG91Z2ggdGhpcyBpZiB0aGF0PGJyPg0KJmd0O8KgIMKg IMKgIMKgIMKgJmd0O8KgIMKgIMKgJmd0OyZndDsmZ3Q7IGhlbHBzLjxicj4NCiZndDvCoCDCoCDC oCDCoCDCoCZndDvCoCDCoCDCoCZndDsmZ3Q7Jmd0Ozxicj4NCiZndDvCoCDCoCDCoCDCoCDCoCZn dDvCoCDCoCDCoCZndDsmZ3Q7Jmd0OyAtRWtyPGJyPg0KJmd0O8KgIMKgIMKgIMKgIMKgJmd0O8Kg IMKgIMKgJmd0OyZndDsmZ3Q7PGJyPg0KJmd0O8KgIMKgIMKgIMKgIMKgJmd0O8KgIMKgIMKgJmd0 OyZndDsmZ3Q7PGJyPg0KJmd0O8KgIMKgIMKgIMKgIMKgJmd0O8KgIMKgIMKgJmd0OyZndDsmZ3Q7 PGJyPg0KJmd0O8KgIMKgIMKgIMKgIMKgJmd0O8KgIMKgIMKgJmd0OyZndDsmZ3Q7PGJyPg0KJmd0 O8KgIMKgIMKgIMKgIMKgJmd0O8KgIMKgIMKgJmd0OyZndDsmZ3Q7Jmd0OyZndDs8YnI+DQomZ3Q7 wqAgwqAgwqAgwqAgwqAmZ3Q7wqAgwqAgwqAmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyBZb3UgbWlnaHQg dGhpbmsgdGhhdCB0aGVyZSB3YXMgYSBNQUMgd2hpY2ggd2FzIGVhc2llciB0bzxicj4NCiZndDvC oCDCoCDCoCDCoCDCoCZndDvCoCDCoCDCoHJldmVyc2UgdG88YnI+DQomZ3Q7wqAgwqAgwqAgwqAg wqAmZ3Q7wqAgwqAgwqAmZ3Q7Jmd0OyBmaW5kPGJyPg0KJmd0O8KgIMKgIMKgIMKgIMKgJmd0O8Kg IMKgIMKgJmd0OyZndDsmZ3Q7Jmd0OyZndDsgdGhlIG9yaWdpbmFsPGJyPg0KJmd0O8KgIMKgIMKg IMKgIMKgJmd0O8KgIMKgIMKgJmd0OyZndDsmZ3Q7Jmd0OyZndDsgcGFzc3dvcmQsIGJ1dCB0aGUg ZGVmZW5zZSB5b3UgaGF2ZSBoZXJlIGRvZXNuJiMzOTt0IGhlbHA8YnI+DQomZ3Q7wqAgwqAgwqAg wqAgwqB3aXRoIHRoYXQ8YnI+DQomZ3Q7wqAgwqAgwqAgwqAgwqAmZ3Q7wqAgwqAgwqBiZWNhdXNl PGJyPg0KJmd0O8KgIMKgIMKgIMKgIMKgJmd0O8KgIMKgIMKgJmd0OyZndDsmZ3Q7Jmd0OyB0aGU8 YnI+DQomZ3Q7wqAgwqAgwqAgwqAgwqAmZ3Q7wqAgwqAgwqAmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyBv bi1wYXRoIGF0dGFja2VyIGNhbiBkbyBhIGJpZC1kb3duIGFuZCB1c2UgdGhlPGJyPg0KJmd0O8Kg IMKgIMKgIMKgIMKgY2xpZW50IGFzIGEgTUFDPGJyPg0KJmd0O8KgIMKgIMKgIMKgIMKgJmd0O8Kg IMKgIMKgb3JhY2xlPGJyPg0KJmd0O8KgIMKgIMKgIMKgIMKgJmd0O8KgIMKgIMKgJmd0OyZndDsg Zm9yPGJyPg0KJmd0O8KgIMKgIMKgIMKgIMKgJmd0O8KgIMKgIMKgJmd0OyZndDsmZ3Q7Jmd0OyZn dDsgYW55IE1BQyB0aGUgY2xpZW50IHN1cHBvcnRzLjxicj4NCiZndDvCoCDCoCDCoCDCoCDCoCZn dDvCoCDCoCDCoCZndDsmZ3Q7Jmd0OyZndDsmZ3Q7PGJyPg0KJmd0O8KgIMKgIMKgIMKgIMKgJmd0 O8KgIMKgIMKgJmd0OyZndDsmZ3Q7Jmd0OyZndDsgU28sIEkgc3RpbGwgZG9uJiMzOTt0IHVuZGVy c3RhbmQgd2hhdCB0aGlzIGlzIHN1cHBvc2VkPGJyPg0KJmd0O8KgIMKgIMKgIMKgIMKgdG8gZG8u IEhhcHB5IHRvPGJyPg0KJmd0O8KgIMKgIMKgIMKgIMKgJmd0O8KgIMKgIMKgJmd0OyZndDsgaGF2 ZSBhPGJyPg0KJmd0O8KgIMKgIMKgIMKgIMKgJmd0O8KgIMKgIMKgJmd0OyZndDsmZ3Q7Jmd0OyZn dDsgY2FsbCBpZiB5b3U8YnI+DQomZ3Q7wqAgwqAgwqAgwqAgwqAmZ3Q7wqAgwqAgwqAmZ3Q7Jmd0 OyZndDsmZ3Q7Jmd0OyB0aGluayB0aGF0IGhlbHBzPGJyPg0KJmd0O8KgIMKgIMKgIMKgIMKgJmd0 O8KgIMKgIMKgJmd0OyZndDsmZ3Q7Jmd0OyZndDs8YnI+DQomZ3Q7wqAgwqAgwqAgwqAgwqAmZ3Q7 wqAgwqAgwqAmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyAtRWtyPGJyPg0KJmd0O8KgIMKgIMKgIMKgIMKg Jmd0O8KgIMKgIMKgJmd0OyZndDsmZ3Q7Jmd0OyZndDs8YnI+DQomZ3Q7wqAgwqAgwqAgwqAgwqAm Z3Q7wqAgwqAgwqAmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0Ozxicj4NCiZndDvCoCDCoCDCoCDCoCDCoCZn dDvCoCDCoCDCoCZndDsmZ3Q7Jmd0OyZndDsmZ3Q7PGJyPg0KJmd0O8KgIMKgIMKgIMKgIMKgJmd0 O8KgIMKgIMKgJmd0OyZndDsmZ3Q7Jmd0OyZndDs8YnI+DQomZ3Q7wqAgwqAgwqAgwqAgwqAmZ3Q7 wqAgwqAgwqAmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyBPbiBNb24sIEp1biAxOCwgMjAxOCBhdCAzOjQw IEFNLCBHb256YWxvIENhbWFyaWxsbyAmbHQ7PGJyPg0KJmd0O8KgIMKgIMKgIMKgIMKgJmd0O8Kg IMKgIMKgJmd0OyZndDsmZ3Q7Jmd0OyZndDsgPGEgaHJlZj0ibWFpbHRvOkdvbnphbG8uQ2FtYXJp bGxvQGVyaWNzc29uLmNvbSIgdGFyZ2V0PSJfYmxhbmsiPkdvbnphbG8uQ2FtYXJpbGxvQGVyaWNz c29uLmNvbTwvYT48YnI+DQomZ3Q7wqAgwqAgwqAgwqAgwqAmbHQ7bWFpbHRvOjxhIGhyZWY9Im1h aWx0bzpHb256YWxvLkNhbWFyaWxsb0Blcmljc3Nvbi5jb20iIHRhcmdldD0iX2JsYW5rIj5Hb256 YWxvLkNhbWFyaWxsb0Blcmljc3Nvbi5jb208L2E+Jmd0Ozxicj4NCiZndDvCoCDCoCDCoCDCoCDC oCZndDvCoCDCoCDCoCZsdDttYWlsdG86PGEgaHJlZj0ibWFpbHRvOkdvbnphbG8uQ2FtYXJpbGxv QGVyaWNzc29uLmNvbSIgdGFyZ2V0PSJfYmxhbmsiPkdvbnphbG8uQ2FtYXJpbGxvQGVyaWNzc29u LmNvbTwvYT48YnI+DQomZ3Q7wqAgwqAgwqAgwqAgwqAmbHQ7bWFpbHRvOjxhIGhyZWY9Im1haWx0 bzpHb256YWxvLkNhbWFyaWxsb0Blcmljc3Nvbi5jb20iIHRhcmdldD0iX2JsYW5rIj5Hb256YWxv LkNhbWFyaWxsb0Blcmljc3Nvbi5jb208L2E+Jmd0OyZndDsmZ3Q7IHdyb3RlOjxicj4NCiZndDvC oCDCoCDCoCDCoCDCoCZndDvCoCDCoCDCoCZndDsmZ3Q7Jmd0OyZndDsmZ3Q7PGJyPg0KJmd0O8Kg IMKgIMKgIMKgIMKgJmd0O8KgIMKgIMKgJmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7IE1hcmMsIEVy aWMsPGJyPg0KJmd0O8KgIMKgIMKgIMKgIMKgJmd0O8KgIMKgIMKgJmd0OyZndDsmZ3Q7Jmd0OyZn dDsmZ3Q7PGJyPg0KJmd0O8KgIMKgIMKgIMKgIMKgJmd0O8KgIMKgIMKgJmd0OyZndDsmZ3Q7Jmd0 OyZndDsmZ3Q7IHdoYXQgaXMgdGhlIHN0YXR1cyBvZiB0aGlzIGRpc2N1c3Npb24/PGJyPg0KJmd0 O8KgIMKgIMKgIMKgIMKgJmd0O8KgIMKgIMKgJmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7PGJyPg0K Jmd0O8KgIMKgIMKgIMKgIMKgJmd0O8KgIMKgIMKgJmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7IFRo YW5rcyw8YnI+DQomZ3Q7wqAgwqAgwqAgwqAgwqAmZ3Q7wqAgwqAgwqAmZ3Q7Jmd0OyZndDsmZ3Q7 Jmd0OyZndDs8YnI+DQomZ3Q7wqAgwqAgwqAgwqAgwqAmZ3Q7wqAgwqAgwqAmZ3Q7Jmd0OyZndDsm Z3Q7Jmd0OyZndDsgR29uemFsbzxicj4NCiZndDvCoCDCoCDCoCDCoCDCoCZndDvCoCDCoCDCoCZn dDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0Ozxicj4NCiZndDvCoCDCoCDCoCDCoCDCoCZndDvCoCDCoCDC oCZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyBPbiAwNC8wNS8yMDE4IDI6MzUgQU0sIEVyaWMgUmVz Y29ybGEgd3JvdGU6PGJyPg0KJmd0O8KgIMKgIMKgIMKgIMKgJmd0O8KgIMKgIMKgJmd0OyZndDsm Z3Q7Jmd0OyZndDsmZ3Q7Jmd0Ozxicj4NCiZndDvCoCDCoCDCoCDCoCDCoCZndDvCoCDCoCDCoCZn dDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDs8YnI+DQomZ3Q7wqAgwqAgwqAgwqAgwqAmZ3Q7wqAg wqAgwqAmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7IE9uIE1vbiwgQXByIDIzLCAyMDE4IGF0 IDExOjE2IEFNLCBNYXJjPGJyPg0KJmd0O8KgIMKgIMKgIMKgIMKgUGV0aXQtSHVndWVuaW4gJmx0 Ozxicj4NCiZndDvCoCDCoCDCoCDCoCDCoCZndDvCoCDCoCDCoCZndDsmZ3Q7Jmd0OyZndDsgPGEg aHJlZj0ibWFpbHRvOnBldGl0aHVnQGFjbS5vcmciIHRhcmdldD0iX2JsYW5rIj5wZXRpdGh1Z0Bh Y20ub3JnPC9hPiAmbHQ7bWFpbHRvOjxhIGhyZWY9Im1haWx0bzpwZXRpdGh1Z0BhY20ub3JnIiB0 YXJnZXQ9Il9ibGFuayI+cGV0aXRodWdAYWNtLm9yZzwvYT4mZ3Q7PGJyPg0KJmd0O8KgIMKgIMKg IMKgIMKgJmx0O21haWx0bzo8YSBocmVmPSJtYWlsdG86cGV0aXRodWdAYWNtLm9yZyIgdGFyZ2V0 PSJfYmxhbmsiPnBldGl0aHVnQGFjbS5vcmc8L2E+ICZsdDttYWlsdG86PGEgaHJlZj0ibWFpbHRv OnBldGl0aHVnQGFjbS5vcmciIHRhcmdldD0iX2JsYW5rIj5wZXRpdGh1Z0BhY20ub3JnPC9hPiZn dDsmZ3Q7PGJyPg0KJmd0O8KgIMKgIMKgIMKgIMKgJmd0O8KgIMKgIMKgJmd0OyZndDsmZ3Q7Jmd0 OyZndDsmZ3Q7Jmd0OyAmbHQ7bWFpbHRvOjxhIGhyZWY9Im1haWx0bzpwZXRpdGh1Z0BhY20ub3Jn IiB0YXJnZXQ9Il9ibGFuayI+cGV0aXRodWdAYWNtLm9yZzwvYT4gJmx0O21haWx0bzo8YSBocmVm PSJtYWlsdG86cGV0aXRodWdAYWNtLm9yZyIgdGFyZ2V0PSJfYmxhbmsiPnBldGl0aHVnQGFjbS5v cmc8L2E+Jmd0Ozxicj4NCiZndDvCoCDCoCDCoCDCoCDCoCZsdDttYWlsdG86PGEgaHJlZj0ibWFp bHRvOnBldGl0aHVnQGFjbS5vcmciIHRhcmdldD0iX2JsYW5rIj5wZXRpdGh1Z0BhY20ub3JnPC9h PiAmbHQ7bWFpbHRvOjxhIGhyZWY9Im1haWx0bzpwZXRpdGh1Z0BhY20ub3JnIiB0YXJnZXQ9Il9i bGFuayI+cGV0aXRodWdAYWNtLm9yZzwvYT4mZ3Q7Jmd0OyZndDsmZ3Q7IHdyb3RlOjxicj4NCiZn dDvCoCDCoCDCoCDCoCDCoCZndDvCoCDCoCDCoCZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDs8 YnI+DQomZ3Q7wqAgwqAgwqAgwqAgwqAmZ3Q7wqAgwqAgwqAmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZn dDsmZ3Q7wqAgwqAgwqBPbiAwNC8yMi8yMDE4IDA1OjIyIFBNLCBFcmljIFJlc2NvcmxhIHdyb3Rl Ojxicj4NCiZndDvCoCDCoCDCoCDCoCDCoCZndDvCoCDCoCDCoCZndDsmZ3Q7Jmd0OyZndDsmZ3Q7 Jmd0OyZndDvCoCDCoCDCoCZndDsgT24gU3VuLCBBcHIgMjIsIDIwMTggYXQgMjowMiBQTSwgTWFy Yzxicj4NCiZndDvCoCDCoCDCoCDCoCDCoFBldGl0LUh1Z3VlbmluICZsdDs8YnI+DQomZ3Q7wqAg wqAgwqAgwqAgwqAmZ3Q7wqAgwqAgwqAmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsgPGEgaHJlZj0i bWFpbHRvOnBldGl0aHVnQGFjbS5vcmciIHRhcmdldD0iX2JsYW5rIj5wZXRpdGh1Z0BhY20ub3Jn PC9hPiAmbHQ7bWFpbHRvOjxhIGhyZWY9Im1haWx0bzpwZXRpdGh1Z0BhY20ub3JnIiB0YXJnZXQ9 Il9ibGFuayI+cGV0aXRodWdAYWNtLm9yZzwvYT4mZ3Q7PGJyPg0KJmd0O8KgIMKgIMKgIMKgIMKg Jmx0O21haWx0bzo8YSBocmVmPSJtYWlsdG86cGV0aXRodWdAYWNtLm9yZyIgdGFyZ2V0PSJfYmxh bmsiPnBldGl0aHVnQGFjbS5vcmc8L2E+ICZsdDttYWlsdG86PGEgaHJlZj0ibWFpbHRvOnBldGl0 aHVnQGFjbS5vcmciIHRhcmdldD0iX2JsYW5rIj5wZXRpdGh1Z0BhY20ub3JnPC9hPiZndDsmZ3Q7 PGJyPg0KJmd0O8KgIMKgIMKgIMKgIMKgJmd0O8KgIMKgIMKgJmx0O21haWx0bzo8YSBocmVmPSJt YWlsdG86cGV0aXRodWdAYWNtLm9yZyIgdGFyZ2V0PSJfYmxhbmsiPnBldGl0aHVnQGFjbS5vcmc8 L2E+ICZsdDttYWlsdG86PGEgaHJlZj0ibWFpbHRvOnBldGl0aHVnQGFjbS5vcmciIHRhcmdldD0i X2JsYW5rIj5wZXRpdGh1Z0BhY20ub3JnPC9hPiZndDs8YnI+DQomZ3Q7wqAgwqAgwqAgwqAgwqAm bHQ7bWFpbHRvOjxhIGhyZWY9Im1haWx0bzpwZXRpdGh1Z0BhY20ub3JnIiB0YXJnZXQ9Il9ibGFu ayI+cGV0aXRodWdAYWNtLm9yZzwvYT4gJmx0O21haWx0bzo8YSBocmVmPSJtYWlsdG86cGV0aXRo dWdAYWNtLm9yZyIgdGFyZ2V0PSJfYmxhbmsiPnBldGl0aHVnQGFjbS5vcmc8L2E+Jmd0OyZndDsm Z3Q7Jmd0Ozxicj4NCiZndDvCoCDCoCDCoCDCoCDCoCZndDvCoCDCoCDCoCZndDsmZ3Q7Jmd0OyZn dDsmZ3Q7Jmd0OyZndDvCoCDCoCDCoCZndDsgd3JvdGU6PGJyPg0KJmd0O8KgIMKgIMKgIMKgIMKg Jmd0O8KgIMKgIMKgJmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0O8KgIMKgIMKgJmd0Ozxicj4N CiZndDvCoCDCoCDCoCDCoCDCoCZndDvCoCDCoCDCoCZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZn dDvCoCDCoCDCoCZndDsmZ3Q7PGJyPg0KJmd0O8KgIMKgIMKgIMKgIMKgJmd0O8KgIMKgIMKgJmd0 OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0O8KgIMKgIMKgJmd0OyZndDsmZ3Q7Jmd0O8KgIMKgIMKg IEZvciBhIHJlcXVlc3Qgb3IgaW5kaWNhdGlvbiBtZXNzYWdlLDxicj4NCiZndDvCoCDCoCDCoCDC oCDCoHRoZSBhZ2VudDxicj4NCiZndDvCoCDCoCDCoCDCoCDCoCZndDvCoCDCoCDCoE1VU1Q8YnI+ DQomZ3Q7wqAgwqAgwqAgwqAgwqAmZ3Q7wqAgwqAgwqAmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsg aW5jbHVkZSB0aGU8YnI+DQomZ3Q7wqAgwqAgwqAgwqAgwqAmZ3Q7wqAgwqAgwqAmZ3Q7Jmd0OyZn dDsmZ3Q7Jmd0OyZndDsmZ3Q7wqAgwqAgwqAmZ3Q7Jmd0OyZndDsmZ3Q7wqAgwqAgwqAgVVNFUk5B TUUsIE1FU1NBR0UtSU5URUdSSVRZLVNIQTI1NiwgYW5kPGJyPg0KJmd0O8KgIMKgIMKgIMKgIMKg Jmd0O8KgIMKgIMKgJmd0OyZndDsgTUVTU0FHRS1JTlRFR1JJVFk8YnI+DQomZ3Q7wqAgwqAgwqAg wqAgwqAmZ3Q7wqAgwqAgwqAmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7wqAgwqAgwqAmZ3Q7 Jmd0OyBhdHRyaWJ1dGVzPGJyPg0KJmd0O8KgIMKgIMKgIMKgIMKgJmd0O8KgIMKgIMKgJmd0OyZn dDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0O8KgIMKgIMKgJmd0OyZndDsmZ3Q7Jmd0O8KgIMKgIMKgIGlu IHRoZSBtZXNzYWdlIHVubGVzcyB0aGUgYWdlbnQ8YnI+DQomZ3Q7wqAgwqAgwqAgwqAgwqBrbm93 cyBmcm9tIGFuPGJyPg0KJmd0O8KgIMKgIMKgIMKgIMKgJmd0O8KgIMKgIMKgZXh0ZXJuYWw8YnI+ DQomZ3Q7wqAgwqAgwqAgwqAgwqAmZ3Q7wqAgwqAgwqAmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsg aW5kaWNhdGlvbjxicj4NCiZndDvCoCDCoCDCoCDCoCDCoCZndDvCoCDCoCDCoCZndDsmZ3Q7Jmd0 OyZndDsmZ3Q7Jmd0OyZndDvCoCDCoCDCoCZndDsmZ3Q7Jmd0OyZndDvCoCDCoCDCoCB3aGljaCBt ZXNzYWdlIGludGVncml0eSBhbGdvcml0aG0gaXM8YnI+DQomZ3Q7wqAgwqAgwqAgwqAgwqBzdXBw b3J0ZWQ8YnI+DQomZ3Q7wqAgwqAgwqAgwqAgwqAmZ3Q7wqAgwqAgwqBieSBib3RoPGJyPg0KJmd0 O8KgIMKgIMKgIMKgIMKgJmd0O8KgIMKgIMKgJmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7IGFnZW50 cy7CoCBJbjxicj4NCiZndDvCoCDCoCDCoCDCoCDCoCZndDvCoCDCoCDCoCZndDsmZ3Q7Jmd0OyZn dDsmZ3Q7Jmd0OyZndDvCoCDCoCDCoCZndDsmZ3Q7Jmd0OyZndDvCoCDCoCDCoCB0aGlzIGNhc2Ug ZWl0aGVyIE1FU1NBR0UtSU5URUdSSVRZIG9yPGJyPg0KJmd0O8KgIMKgIMKgIMKgIMKgJmd0O8Kg IMKgIMKgJmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7IE1FU1NBR0UtSU5URUdSSVRZLVNIQTI1NiBN VVNUPGJyPg0KJmd0O8KgIMKgIMKgIMKgIMKgJmd0O8KgIMKgIMKgJmd0OyZndDsmZ3Q7Jmd0OyZn dDsmZ3Q7Jmd0O8KgIMKgIMKgJmd0OyZndDsmZ3Q7Jmd0O8KgIMKgIMKgIGJlIGluY2x1ZGVkIGlu IGFkZGl0aW9uIHRvPGJyPg0KJmd0O8KgIMKgIMKgIMKgIMKgVVNFUk5BTUUuwqAgVGhlIEhNQUM8 YnI+DQomZ3Q7wqAgwqAgwqAgwqAgwqAmZ3Q7wqAgwqAgwqBmb3IgdGhlPGJyPg0KJmd0O8KgIMKg IMKgIMKgIMKgJmd0O8KgIMKgIMKgJmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7IE1FU1NBR0UtPGJy Pg0KJmd0O8KgIMKgIMKgIMKgIMKgJmd0O8KgIMKgIMKgJmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7 Jmd0O8KgIMKgIMKgJmd0OyZndDsmZ3Q7PGJyPg0KJmd0O8KgIMKgIMKgIMKgIMKgJmd0O8KgIMKg IMKgJmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0O8KgIMKgIMKgJmd0OyZndDsmZ3Q7IFRoaXMg dGV4dCBhcHBlYXJzIHRvIGNvbmZsaWN0IHdpdGggUyA3LjMgb2Y8YnI+DQomZ3Q7wqAgwqAgwqAg wqAgwqAmZ3Q7wqAgwqAgwqA1MjQ1LWJpcywgd2hpY2g8YnI+DQomZ3Q7wqAgwqAgwqAgwqAgwqAm Z3Q7wqAgwqAgwqAmZ3Q7Jmd0OyZndDsmZ3Q7IHNheXM6PGJyPg0KJmd0O8KgIMKgIMKgIMKgIMKg Jmd0O8KgIMKgIMKgJmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0O8KgIMKgIMKgJmd0OyZndDs8 YnI+DQomZ3Q7wqAgwqAgwqAgwqAgwqAmZ3Q7wqAgwqAgwqAmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZn dDsmZ3Q7wqAgwqAgwqAmZ3Q7Jmd0OyBbdGV4dCBtaXNzaW5nXTxicj4NCiZndDvCoCDCoCDCoCDC oCDCoCZndDvCoCDCoCDCoCZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDvCoCDCoCDCoCZndDsm Z3Q7PGJyPg0KJmd0O8KgIMKgIMKgIMKgIMKgJmd0O8KgIMKgIMKgJmd0OyZndDsmZ3Q7Jmd0OyZn dDsmZ3Q7Jmd0O8KgIMKgIMKgJmd0OyZndDsgSG1tLCBubywgUkZDMjQ1YmlzIGlzIHN0aWxsIHJl ZmVyZW5jaW5nPGJyPg0KJmd0O8KgIMKgIMKgIMKgIMKgUkZDNTM4OSwgc28gdGhlPGJyPg0KJmd0 O8KgIMKgIMKgIMKgIMKgJmd0O8KgIMKgIMKgJmd0OyZndDsmZ3Q7Jmd0OyBwcm9jZWR1cmU8YnI+ DQomZ3Q7wqAgwqAgwqAgwqAgwqAmZ3Q7wqAgwqAgwqAmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsg Zm9yPGJyPg0KJmd0O8KgIMKgIMKgIMKgIMKgJmd0O8KgIMKgIMKgJmd0OyZndDsmZ3Q7Jmd0OyZn dDsmZ3Q7Jmd0O8KgIMKgIMKgJmd0OyZndDsgc3R1bmJpcyBkb2VzIG5vdCBhcHBseS48YnI+DQom Z3Q7wqAgwqAgwqAgwqAgwqAmZ3Q7wqAgwqAgwqAmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7 wqAgwqAgwqAmZ3Q7Jmd0Ozxicj4NCiZndDvCoCDCoCDCoCDCoCDCoCZndDvCoCDCoCDCoCZndDsm Z3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDvCoCDCoCDCoCZndDs8YnI+DQomZ3Q7wqAgwqAgwqAgwqAg wqAmZ3Q7wqAgwqAgwqAmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7wqAgwqAgwqAmZ3Q7IEkg aGVhciB3aGF0IHlvdSYjMzk7cmUgc2F5aW5nLCBidXQgcHVibGlzaGluZyB0d288YnI+DQomZ3Q7 wqAgwqAgwqAgwqAgwqAmZ3Q7wqAgwqAgwqBkb2N1bWVudHMgYXQgdGhlPGJyPg0KJmd0O8KgIMKg IMKgIMKgIMKgJmd0O8KgIMKgIMKgJmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7IHNhbWUgdGltZTxi cj4NCiZndDvCoCDCoCDCoCDCoCDCoCZndDvCoCDCoCDCoCZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0 OyZndDvCoCDCoCDCoCZndDsgd2hpY2g8YnI+DQomZ3Q7wqAgwqAgwqAgwqAgwqAmZ3Q7wqAgwqAg wqAmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7wqAgwqAgwqAmZ3Q7IG1ha2UgY29udHJhcnkg cmVjb21tZW5kYXRpb25zIGFib3V0IHRoZSBzYW1lPGJyPg0KJmd0O8KgIMKgIMKgIMKgIMKgYmFz aWM8YnI+DQomZ3Q7wqAgwqAgwqAgwqAgwqAmZ3Q7wqAgwqAgwqBwcm90b2NvbCBpczxicj4NCiZn dDvCoCDCoCDCoCDCoCDCoCZndDvCoCDCoCDCoCZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyB1bi1n b29kLjxicj4NCiZndDvCoCDCoCDCoCDCoCDCoCZndDvCoCDCoCDCoCZndDsmZ3Q7Jmd0OyZndDsm Z3Q7Jmd0OyZndDs8YnI+DQomZ3Q7wqAgwqAgwqAgwqAgwqAmZ3Q7wqAgwqAgwqAmZ3Q7Jmd0OyZn dDsmZ3Q7Jmd0OyZndDsmZ3Q7wqAgwqAgwqBTdXJlLCBidXQgd291bGRuJiMzOTt0IGl0IGJlIHNp bXBsZXIgdG8gaGF2ZTxicj4NCiZndDvCoCDCoCDCoCDCoCDCoHJmYzUyNDViaXM8YnI+DQomZ3Q7 wqAgwqAgwqAgwqAgwqAmZ3Q7wqAgwqAgwqB1c2luZyBzdHVuYmlzPGJyPg0KJmd0O8KgIMKgIMKg IMKgIMKgJmd0O8KgIMKgIMKgJmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0O8KgIMKgIMKgYW5k IGhhdmUgdGhlbSB1cGRhdGluZyB0aGVpciB0ZXh0LCBtb3JlIHRoYW48YnI+DQomZ3Q7wqAgwqAg wqAgwqAgwqBhZGRpbmcgc29tZTxicj4NCiZndDvCoCDCoCDCoCDCoCDCoCZndDvCoCDCoCDCoHRv cnR1b3VzPGJyPg0KJmd0O8KgIMKgIMKgIMKgIMKgJmd0O8KgIMKgIMKgJmd0OyZndDsmZ3Q7Jmd0 OyZndDsmZ3Q7Jmd0O8KgIMKgIMKgdGV4dCBpbiBzdHVuYmlzPzxicj4NCiZndDvCoCDCoCDCoCDC oCDCoCZndDvCoCDCoCDCoCZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDs8YnI+DQomZ3Q7wqAg wqAgwqAgwqAgwqAmZ3Q7wqAgwqAgwqAmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7wqAgwqAg wqAmZ3Q7PGJyPg0KJmd0O8KgIMKgIMKgIMKgIMKgJmd0O8KgIMKgIMKgJmd0OyZndDsmZ3Q7Jmd0 OyZndDsmZ3Q7Jmd0O8KgIMKgIMKgJmd0Ozxicj4NCiZndDvCoCDCoCDCoCDCoCDCoCZndDvCoCDC oCDCoCZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDvCoCDCoCDCoCZndDsmZ3Q7Jmd0O8KgIMKg IMKgIFRoZSBTVFVOIHVzYWdlIG11c3Qgc3BlY2lmeSB3aGljaDxicj4NCiZndDvCoCDCoCDCoCDC oCDCoHRyYW5zcG9ydDxicj4NCiZndDvCoCDCoCDCoCDCoCDCoCZndDvCoCDCoCDCoHByb3RvY29s IGlzPGJyPg0KJmd0O8KgIMKgIMKgIMKgIMKgJmd0O8KgIMKgIMKgJmd0OyZndDsmZ3Q7Jmd0OyZn dDsmZ3Q7IHVzZWQsIGFuZDxicj4NCiZndDvCoCDCoCDCoCDCoCDCoCZndDvCoCDCoCDCoCZndDsm Z3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDvCoCDCoCDCoCZndDsmZ3Q7IGhvdzxicj4NCiZndDvCoCDC oCDCoCDCoCDCoCZndDvCoCDCoCDCoCZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDvCoCDCoCDC oCZndDsmZ3Q7Jmd0OyZndDvCoCDCoCDCoCB0aGUgYWdlbnQgZGV0ZXJtaW5lcyB0aGUgSVAgYWRk cmVzczxicj4NCiZndDvCoCDCoCDCoCDCoCDCoGFuZCBwb3J0PGJyPg0KJmd0O8KgIMKgIMKgIMKg IMKgJmd0O8KgIMKgIMKgb2YgdGhlPGJyPg0KJmd0O8KgIMKgIMKgIMKgIMKgJmd0O8KgIMKgIMKg Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7IHJlY2lwaWVudC48YnI+DQomZ3Q7wqAgwqAgwqAgwqAg wqAmZ3Q7wqAgwqAgwqAmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7wqAgwqAgwqAmZ3Q7Jmd0 OyZndDsmZ3Q7wqAgwqAgwqAgU2VjdGlvbiA4IGRlc2NyaWJlcyBhIEROUy1iYXNlZDxicj4NCiZn dDvCoCDCoCDCoCDCoCDCoG1ldGhvZCBvZjxicj4NCiZndDvCoCDCoCDCoCDCoCDCoCZndDvCoCDC oCDCoGRldGVybWluaW5nPGJyPg0KJmd0O8KgIMKgIMKgIMKgIMKgJmd0O8KgIMKgIMKgJmd0OyZn dDsgdGhlPGJyPg0KJmd0O8KgIMKgIMKgIMKgIMKgJmd0O8KgIMKgIMKgJmd0OyZndDsmZ3Q7Jmd0 OyZndDsmZ3Q7IElQPGJyPg0KJmd0O8KgIMKgIMKgIMKgIMKgJmd0O8KgIMKgIMKgJmd0OyZndDsm Z3Q7Jmd0OyZndDsmZ3Q7Jmd0O8KgIMKgIMKgJmd0OyZndDsgYWRkcmVzczxicj4NCiZndDvCoCDC oCDCoCDCoCDCoCZndDvCoCDCoCDCoCZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDvCoCDCoCDC oCZndDsmZ3Q7Jmd0OyZndDvCoCDCoCDCoCBhbmQgcG9ydCBvZiBhIHNlcnZlciB0aGF0IGEgdXNh Z2U8YnI+DQomZ3Q7wqAgwqAgwqAgwqAgwqBtYXkgZWxlY3QgdG88YnI+DQomZ3Q7wqAgwqAgwqAg wqAgwqAmZ3Q7wqAgwqAgwqB1c2UuPGJyPg0KJmd0O8KgIMKgIMKgIMKgIMKgJmd0O8KgIMKgIMKg Jmd0OyZndDsgU1RVTjxicj4NCiZndDvCoCDCoCDCoCDCoCDCoCZndDvCoCDCoCDCoCZndDsmZ3Q7 Jmd0OyZndDsmZ3Q7Jmd0OyBtYXkgYmU8YnI+DQomZ3Q7wqAgwqAgwqAgwqAgwqAmZ3Q7wqAgwqAg wqAmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7wqAgwqAgwqAmZ3Q7Jmd0OyB1c2VkPGJyPg0K Jmd0O8KgIMKgIMKgIMKgIMKgJmd0O8KgIMKgIMKgJmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0 O8KgIMKgIMKgJmd0OyZndDsmZ3Q7Jmd0O8KgIMKgIMKgIHdpdGggYW55Y2FzdCBhZGRyZXNzZXMs IGJ1dCBvbmx5PGJyPg0KJmd0O8KgIMKgIMKgIMKgIMKgd2l0aCBVRFAgYW5kPGJyPg0KJmd0O8Kg IMKgIMKgIMKgIMKgJmd0O8KgIMKgIMKgaW4gdXNhZ2VzPGJyPg0KJmd0O8KgIMKgIMKgIMKgIMKg Jmd0O8KgIMKgIMKgJmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7IHdoZXJlPGJyPg0KJmd0O8KgIMKg IMKgIMKgIMKgJmd0O8KgIMKgIMKgJmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0O8KgIMKgIMKg Jmd0OyZndDsmZ3Q7Jmd0O8KgIMKgIMKgIGF1dGhlbnRpY2F0aW9uIGlzIG5vdCB1c2VkLjxicj4N CiZndDvCoCDCoCDCoCDCoCDCoCZndDvCoCDCoCDCoCZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZn dDvCoCDCoCDCoCZndDsmZ3Q7Jmd0Ozxicj4NCiZndDvCoCDCoCDCoCDCoCDCoCZndDvCoCDCoCDC oCZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDvCoCDCoCDCoCZndDsmZ3Q7Jmd0OyBXaHkgdGhp cyByZXN0cmljdGlvbj8gWW91IHNob3VsZCBiZSBhYmxlPGJyPg0KJmd0O8KgIMKgIMKgIMKgIMKg dG8gdXNlPGJyPg0KJmd0O8KgIMKgIMKgIMKgIMKgJmd0O8KgIMKgIMKgYW55Y2FzdCB3aXRoPGJy Pg0KJmd0O8KgIMKgIMKgIMKgIMKgJmd0O8KgIMKgIMKgJmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7 IGxvbmctdGVybTxicj4NCiZndDvCoCDCoCDCoCDCoCDCoCZndDvCoCDCoCDCoCZndDsmZ3Q7Jmd0 OyZndDsmZ3Q7Jmd0OyZndDvCoCDCoCDCoCZndDsmZ3Q7Jmd0OyBBVVRIIGZvciAoc2F5KSBUVVJO Ljxicj4NCiZndDvCoCDCoCDCoCDCoCDCoCZndDvCoCDCoCDCoCZndDsmZ3Q7Jmd0OyZndDsmZ3Q7 Jmd0OyZndDvCoCDCoCDCoCZndDsmZ3Q7PGJyPg0KJmd0O8KgIMKgIMKgIMKgIMKgJmd0O8KgIMKg IMKgJmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0O8KgIMKgIMKgJmd0OyZndDs8YnI+DQomZ3Q7 wqAgwqAgwqAgwqAgwqA8YSBocmVmPSJodHRwczovL3d3dy5pZXRmLm9yZy9tYWlsLWFyY2hpdmUv d2ViL2JlaGF2ZS9jdXJyZW50LyIgcmVsPSJub3JlZmVycmVyIiB0YXJnZXQ9Il9ibGFuayI+aHR0 cHM6Ly93d3cuaWV0Zi5vcmcvbWFpbC1hcmNoaXZlL3dlYi9iZWhhdmUvY3VycmVudC88L2E+PGJy Pg0KJmd0O8KgIMKgIMKgIMKgIMKgJmd0O8KgIMKgIMKgJmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7 IG1zZzAzNTgyLmh0bWw8YnI+DQomZ3Q7wqAgwqAgwqAgwqAgwqAmZ3Q7wqAgwqAgwqAmZ3Q7Jmd0 OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7wqAgwqA8YnI+DQomZ3Q7wqAgwqAgwqAgwqAgwqDCoCZsdDs8 YSBocmVmPSJodHRwczovL3d3dy5pZXRmLm9yZy9tYWlsLWFyY2hpdmUvd2ViL2JlaGF2ZS9jdXJy ZW50LyIgcmVsPSJub3JlZmVycmVyIiB0YXJnZXQ9Il9ibGFuayI+aHR0cHM6Ly93d3cuaWV0Zi5v cmcvbWFpbC1hcmNoaXZlL3dlYi9iZWhhdmUvY3VycmVudC88L2E+PGJyPg0KJmd0O8KgIMKgIMKg IMKgIMKgJmd0O8KgIMKgIMKgJmd0OyZndDsmZ3Q7Jmd0OyBtc2cwMzU4Mi5odG1sJmd0Ozxicj4N CiZndDvCoCDCoCDCoCDCoCDCoCZndDvCoCDCoCDCoCZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZn dDvCoCDCoCDCoCZndDsmZ3Q7PGJyPg0KJmd0O8KgIMKgIMKgIMKgIMKgJmd0O8KgIMKgIMKgJmd0 OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0O8KgIMKgIMKgJmd0OyZndDsgSSB0aGluayB0aGF0IHRo ZSBkZWNpc2lvbiBvZiBwZXJtaXR0aW5nIEFueWNhc3Q8YnI+DQomZ3Q7wqAgwqAgwqAgwqAgwqAm Z3Q7wqAgwqAgwqBzaG91bGQgYmUgbGVmdDxicj4NCiZndDvCoCDCoCDCoCDCoCDCoCZndDvCoCDC oCDCoCZndDsmZ3Q7Jmd0OyZndDsgdG88YnI+DQomZ3Q7wqAgwqAgwqAgwqAgwqAmZ3Q7wqAgwqAg wqAmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsgZWFjaDxicj4NCiZndDvCoCDCoCDCoCDCoCDCoCZn dDvCoCDCoCDCoCZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDvCoCDCoCDCoCZndDsmZ3Q7IFNU VU4gVXNhZ2UuwqAgQmFzaWMgU1RVTiBVc2FnZSBkb2VzIG5vdCB1c2U8YnI+DQomZ3Q7wqAgwqAg wqAgwqAgwqAmZ3Q7wqAgwqAgwqBhdXRoZW50aWNhdGlvbiBhbmQ8YnI+DQomZ3Q7wqAgwqAgwqAg wqAgwqAmZ3Q7wqAgwqAgwqAmZ3Q7Jmd0OyZndDsmZ3Q7IHVzZTxicj4NCiZndDvCoCDCoCDCoCDC oCDCoCZndDvCoCDCoCDCoCZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyBvbmx5IGE8YnI+DQomZ3Q7 wqAgwqAgwqAgwqAgwqAmZ3Q7wqAgwqAgwqAmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7wqAg wqAgwqAmZ3Q7Jmd0OyBvbmUgcm91bmQgdHJpcCBmb3IgdGhlIEJpbmRpbmcgdHJhbnNhY3Rpb24s IHNvPGJyPg0KJmd0O8KgIMKgIMKgIMKgIMKgJmd0O8KgIMKgIMKgVW5pY2FzdCBjYW4gYmU8YnI+ DQomZ3Q7wqAgwqAgwqAgwqAgwqAmZ3Q7wqAgwqAgwqAmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsg dXNlZC48YnI+DQomZ3Q7wqAgwqAgwqAgwqAgwqAmZ3Q7wqAgwqAgwqAmZ3Q7Jmd0OyZndDsmZ3Q7 Jmd0OyZndDsmZ3Q7wqAgwqAgwqAmZ3Q7Jmd0Ozxicj4NCiZndDvCoCDCoCDCoCDCoCDCoCZndDvC oCDCoCDCoCZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDvCoCDCoCDCoCZndDs8YnI+DQomZ3Q7 wqAgwqAgwqAgwqAgwqAmZ3Q7wqAgwqAgwqAmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7wqAg wqAgwqAmZ3Q7Jmd0OyBPVE9ILCBUVVJOIGFuZCBJQ0Ugc2hvdWxkIHByb2JhYmx5IHNheTxicj4N CiZndDvCoCDCoCDCoCDCoCDCoHNvbWV0aGluZzxicj4NCiZndDvCoCDCoCDCoCDCoCDCoCZndDvC oCDCoCDCoGFib3V0IHRoYXQsPGJyPg0KJmd0O8KgIMKgIMKgIMKgIMKgJmd0O8KgIMKgIMKgJmd0 OyZndDsgc288YnI+DQomZ3Q7wqAgwqAgwqAgwqAgwqAmZ3Q7wqAgwqAgwqAmZ3Q7Jmd0OyZndDsm Z3Q7IEk8YnI+DQomZ3Q7wqAgwqAgwqAgwqAgwqAmZ3Q7wqAgwqAgwqAmZ3Q7Jmd0OyZndDsmZ3Q7 Jmd0OyZndDsgYWRkZWQgYTxicj4NCiZndDvCoCDCoCDCoCDCoCDCoCZndDvCoCDCoCDCoCZndDsm Z3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDvCoCDCoCDCoCZndDsmZ3Q7IG5ldyBidWxsZXQgcG9pbnQg aW4gU2VjdGlvbiAxMzo8YnI+DQomZ3Q7wqAgwqAgwqAgwqAgwqAmZ3Q7wqAgwqAgwqAmZ3Q7Jmd0 OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7wqAgwqAgwqAmZ3Q7Jmd0Ozxicj4NCiZndDvCoCDCoCDCoCDC oCDCoCZndDvCoCDCoCDCoCZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDvCoCDCoCDCoCZndDsm Z3Q7wqAgwqAgb8KgIElmIEFueWNhc3QgYWRkcmVzc2VzIGNhbiBiZSB1c2VkIGZvcjxicj4NCiZn dDvCoCDCoCDCoCDCoCDCoHRoZSBzZXJ2ZXI8YnI+DQomZ3Q7wqAgwqAgwqAgwqAgwqAmZ3Q7wqAg wqAgwqBpbiBjYXNlPGJyPg0KJmd0O8KgIMKgIMKgIMKgIMKgJmd0O8KgIMKgIMKgJmd0OyZndDsm Z3Q7Jmd0OyBUQ1A8YnI+DQomZ3Q7wqAgwqAgwqAgwqAgwqAmZ3Q7wqAgwqAgwqAmZ3Q7Jmd0OyZn dDsmZ3Q7Jmd0OyZndDsgb3I8YnI+DQomZ3Q7wqAgwqAgwqAgwqAgwqAmZ3Q7wqAgwqAgwqAmZ3Q7 Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7wqAgwqAgwqAmZ3Q7Jmd0O8KgIMKgIMKgIMKgVExTLW92 ZXItVENQLCBvciBhdXRoZW50aWNhdGlvbiBhcmUgdXNlZC48YnI+DQomZ3Q7wqAgwqAgwqAgwqAg wqAmZ3Q7wqAgwqAgwqAmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7wqAgwqAgwqAmZ3Q7Jmd0 Ozxicj4NCiZndDvCoCDCoCDCoCDCoCDCoCZndDvCoCDCoCDCoCZndDsmZ3Q7Jmd0OyZndDsmZ3Q7 Jmd0OyZndDvCoCDCoCDCoCZndDs8YnI+DQomZ3Q7wqAgwqAgwqAgwqAgwqAmZ3Q7wqAgwqAgwqAm Z3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7wqAgwqAgwqAmZ3Q7IEFyZSB5b3UgbGVhdmluZyB0 aGlzIHRleHQgaW4/IFRoYXQgc2VlbXM8YnI+DQomZ3Q7wqAgwqAgwqAgwqAgwqB2ZXJ5IGNvbmZ1 c2luZy48YnI+DQomZ3Q7wqAgwqAgwqAgwqAgwqAmZ3Q7wqAgwqAgwqAmZ3Q7Jmd0OyZndDsmZ3Q7 Jmd0OyZndDsmZ3Q7PGJyPg0KJmd0O8KgIMKgIMKgIMKgIMKgJmd0O8KgIMKgIMKgJmd0OyZndDsm Z3Q7Jmd0OyZndDsmZ3Q7Jmd0O8KgIMKgIMKgSW4gaXNvbGF0aW9uIHllcywgYnV0IEkgdGhpbmsg aXQgbWFrZXMgc2Vuc2U8YnI+DQomZ3Q7wqAgwqAgwqAgwqAgwqB3aGljaCB0aGUgdGV4dDxicj4N CiZndDvCoCDCoCDCoCDCoCDCoCZndDvCoCDCoCDCoCZndDsmZ3Q7IGJlZm9yZTxicj4NCiZndDvC oCDCoCDCoCDCoCDCoCZndDvCoCDCoCDCoCZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDvCoCDC oCDCoHRoZSBidWxsZXQgcG9pbnRzOjxicj4NCiZndDvCoCDCoCDCoCDCoCDCoCZndDvCoCDCoCDC oCZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDs8YnI+DQomZ3Q7wqAgwqAgwqAgwqAgwqAmZ3Q7 wqAgwqAgwqAmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7wqAgwqAgwqAgwqAgQSBTVFVOIHVz YWdlIGRlZmluZXMgaG93IFNUVU4gaXMgYWN0dWFsbHk8YnI+DQomZ3Q7wqAgwqAgwqAgwqAgwqB1 dGlsaXplZCAtLTxicj4NCiZndDvCoCDCoCDCoCDCoCDCoCZndDvCoCDCoCDCoHdoZW4gdG88YnI+ DQomZ3Q7wqAgwqAgwqAgwqAgwqAmZ3Q7wqAgwqAgwqAmZ3Q7Jmd0OyZndDsmZ3Q7IHNlbmQ8YnI+ DQomZ3Q7wqAgwqAgwqAgwqAgwqAmZ3Q7wqAgwqAgwqAmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsm Z3Q7wqAgwqAgwqAgwqAgcmVxdWVzdHMsIHdoYXQgdG8gZG8gd2l0aCB0aGUgcmVzcG9uc2VzLDxi cj4NCiZndDvCoCDCoCDCoCDCoCDCoGFuZCB3aGljaDxicj4NCiZndDvCoCDCoCDCoCDCoCDCoCZn dDvCoCDCoCDCoG9wdGlvbmFsPGJyPg0KJmd0O8KgIMKgIMKgIMKgIMKgJmd0O8KgIMKgIMKgJmd0 OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0O8KgIMKgIMKgIMKgIHByb2NlZHVyZXMgZGVmaW5lZCBo ZXJlIChvciBpbiBhbiBleHRlbnNpb248YnI+DQomZ3Q7wqAgwqAgwqAgwqAgwqB0byBTVFVOKTxi cj4NCiZndDvCoCDCoCDCoCDCoCDCoCZndDvCoCDCoCDCoGFyZSB0byBiZTxicj4NCiZndDvCoCDC oCDCoCDCoCDCoCZndDvCoCDCoCDCoCZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyB1c2VkLjxicj4N CiZndDvCoCDCoCDCoCDCoCDCoCZndDvCoCDCoCDCoCZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZn dDvCoCDCoCDCoCDCoCBBIHVzYWdlIGFsc28gZGVmaW5lczo8YnI+DQomZ3Q7wqAgwqAgwqAgwqAg wqAmZ3Q7wqAgwqAgwqAmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7PGJyPg0KJmd0O8KgIMKg IMKgIMKgIMKgJmd0O8KgIMKgIMKgJmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0O8KgIMKgIMKg Wy4uLl08YnI+DQomZ3Q7wqAgwqAgwqAgwqAgwqAmZ3Q7wqAgwqAgwqAmZ3Q7Jmd0OyZndDsmZ3Q7 Jmd0OyZndDsmZ3Q7PGJyPg0KJmd0O8KgIMKgIMKgIMKgIMKgJmd0O8KgIMKgIMKgJmd0OyZndDsm Z3Q7Jmd0OyZndDsmZ3Q7Jmd0O8KgIMKgIMKgIMKgIG/CoCBJZiBBbnljYXN0IGFkZHJlc3NlcyBj YW4gYmUgdXNlZCBmb3IgdGhlPGJyPg0KJmd0O8KgIMKgIMKgIMKgIMKgc2VydmVyIGluPGJyPg0K Jmd0O8KgIMKgIMKgIMKgIMKgJmd0O8KgIMKgIMKgY2FzZSBUQ1A8YnI+DQomZ3Q7wqAgwqAgwqAg wqAgwqAmZ3Q7wqAgwqAgwqAmZ3Q7Jmd0OyZndDsmZ3Q7IG9yPGJyPg0KJmd0O8KgIMKgIMKgIMKg IMKgJmd0O8KgIMKgIMKgJmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0O8KgIMKgIMKgIMKgIMKg IMKgVExTLW92ZXItVENQLCBvciBhdXRoZW50aWNhdGlvbiBhcmUgdXNlZC48YnI+DQomZ3Q7wqAg wqAgwqAgwqAgwqAmZ3Q7wqAgwqAgwqAmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7PGJyPg0K Jmd0O8KgIMKgIMKgIMKgIMKgJmd0O8KgIMKgIMKgJmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0 Ozxicj4NCiZndDvCoCDCoCDCoCDCoCDCoCZndDvCoCDCoCDCoCZndDsmZ3Q7Jmd0OyZndDsmZ3Q7 Jmd0OyZndDsgV2hhdCBpcyB0aGUgbmVlZCBmb3IgdGhlIHJlc3RyaWN0aW9uIGF0IGFsbC48YnI+ DQomZ3Q7wqAgwqAgwqAgwqAgwqAmZ3Q7wqAgwqAgwqAmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsm Z3Q7PGJyPg0KJmd0O8KgIMKgIMKgIMKgIMKgJmd0O8KgIMKgIMKgJmd0OyZndDsmZ3Q7Jmd0OyZn dDsmZ3Q7Jmd0Ozxicj4NCiZndDvCoCDCoCDCoCDCoCDCoCZndDvCoCDCoCDCoCZndDsmZ3Q7Jmd0 OyZndDsmZ3Q7Jmd0OyZndDs8YnI+DQomZ3Q7wqAgwqAgwqAgwqAgwqAmZ3Q7wqAgwqAgwqAmZ3Q7 Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7wqAgwqAgwqAmZ3Q7Jmd0OyZndDsmZ3Q7wqAgwqAgwqAg dHJhbnNhY3Rpb24gb3ZlciBVRFAgb3I8YnI+DQomZ3Q7wqAgwqAgwqAgwqAgwqBEVExTLW92ZXIt VURQIGlzIGFsc288YnI+DQomZ3Q7wqAgwqAgwqAgwqAgwqAmZ3Q7wqAgwqAgwqAmZ3Q7Jmd0OyBj b25zaWRlcmVkPGJyPg0KJmd0O8KgIMKgIMKgIMKgIMKgJmd0O8KgIMKgIMKgJmd0OyZndDsmZ3Q7 Jmd0OyZndDsmZ3Q7IGZhaWxlZCBpZjxicj4NCiZndDvCoCDCoCDCoCDCoCDCoCZndDvCoCDCoCDC oCZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDvCoCDCoCDCoCZndDsmZ3Q7Jmd0OyZndDvCoCDC oCDCoCB0aGVyZSBoYXMgYmVlbiBhIGhhcmQgSUNNUCBlcnJvcjxicj4NCiZndDvCoCDCoCDCoCDC oCDCoFtSRkMxMTIyXS7CoCBGb3I8YnI+DQomZ3Q7wqAgwqAgwqAgwqAgwqAmZ3Q7wqAgwqAgwqAm Z3Q7Jmd0OyBleGFtcGxlLDxicj4NCiZndDvCoCDCoCDCoCDCoCDCoCZndDvCoCDCoCDCoCZndDsm Z3Q7Jmd0OyZndDsmZ3Q7Jmd0OyBhc3N1bWluZzxicj4NCiZndDvCoCDCoCDCoCDCoCDCoCZndDvC oCDCoCDCoCZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDvCoCDCoCDCoCZndDsmZ3Q7IGFuPGJy Pg0KJmd0O8KgIMKgIMKgIMKgIMKgJmd0O8KgIMKgIMKgJmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7 Jmd0O8KgIMKgIMKgJmd0OyZndDsmZ3Q7Jmd0O8KgIMKgIMKgIFJUTyBvZiA1MDBtcywgcmVxdWVz dHMgd291bGQgYmUgc2VudDxicj4NCiZndDvCoCDCoCDCoCDCoCDCoGF0IHRpbWVzPGJyPg0KJmd0 O8KgIMKgIMKgIMKgIMKgJmd0O8KgIMKgIMKgMCBtcywgNTAwPGJyPg0KJmd0O8KgIMKgIMKgIMKg IMKgJmd0O8KgIMKgIMKgJmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7IG1zLCAxNTAwPGJyPg0KJmd0 O8KgIMKgIMKgIMKgIMKgJmd0O8KgIMKgIMKgJmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0O8Kg IMKgIMKgJmd0OyZndDsgbXMsPGJyPg0KJmd0O8KgIMKgIMKgIMKgIMKgJmd0O8KgIMKgIMKgJmd0 OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0O8KgIMKgIMKgJmd0OyZndDsmZ3Q7Jmd0O8KgIMKgIMKg IDM1MDAgbXMsIDc1MDAgbXMsIDE1NTAwIG1zLCBhbmQ8YnI+DQomZ3Q7wqAgwqAgwqAgwqAgwqAz MTUwMCBtcy7CoCBJZiB0aGU8YnI+DQomZ3Q7wqAgwqAgwqAgwqAgwqAmZ3Q7wqAgwqAgwqAmZ3Q7 Jmd0OyBjbGllbnQ8YnI+DQomZ3Q7wqAgwqAgwqAgwqAgwqAmZ3Q7wqAgwqAgwqAmZ3Q7Jmd0OyZn dDsmZ3Q7Jmd0OyZndDsgaGFzIG5vdDxicj4NCiZndDvCoCDCoCDCoCDCoCDCoCZndDvCoCDCoCDC oCZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDvCoCDCoCDCoCZndDsmZ3Q7Jmd0OyZndDvCoCDC oCDCoCByZWNlaXZlZCBhIHJlc3BvbnNlIGFmdGVyIDM5NTAwIG1zLDxicj4NCiZndDvCoCDCoCDC oCDCoCDCoHRoZSBjbGllbnQ8YnI+DQomZ3Q7wqAgwqAgwqAgwqAgwqAmZ3Q7wqAgwqAgwqB3aWxs PGJyPg0KJmd0O8KgIMKgIMKgIMKgIMKgJmd0O8KgIMKgIMKgJmd0OyZndDsmZ3Q7Jmd0OyZndDsm Z3Q7IGNvbnNpZGVyIHRoZTxicj4NCiZndDvCoCDCoCDCoCDCoCDCoCZndDvCoCDCoCDCoCZndDsm Z3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDvCoCDCoCDCoCZndDsmZ3Q7Jmd0OyZndDvCoCDCoCDCoCB0 cmFuc2FjdGlvbiB0byBoYXZlIHRpbWVkIG91dC48YnI+DQomZ3Q7wqAgwqAgwqAgwqAgwqAmZ3Q7 wqAgwqAgwqAmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7wqAgwqAgwqAmZ3Q7Jmd0OyZndDs8 YnI+DQomZ3Q7wqAgwqAgwqAgwqAgwqAmZ3Q7wqAgwqAgwqAmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZn dDsmZ3Q7wqAgwqAgwqAmZ3Q7Jmd0OyZndDsgSSBub3RlIHRoYXQgdGhlc2UgcmVjb21tZW5kYXRp b25zIG5vdyBzZWVtPGJyPg0KJmd0O8KgIMKgIMKgIMKgIMKgY3JhemlseTxicj4NCiZndDvCoCDC oCDCoCDCoCDCoCZndDvCoCDCoCDCoGxvbmcuIEk8YnI+DQomZ3Q7wqAgwqAgwqAgwqAgwqAmZ3Q7 wqAgwqAgwqAmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsgYXNzdW1lIHRoZTxicj4NCiZndDvCoCDC oCDCoCDCoCDCoCZndDvCoCDCoCDCoCZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDvCoCDCoCDC oCZndDsmZ3Q7Jmd0OyBXRyBoYWQgY29uc2Vuc3VzIG9uIHRoaXMsIGJ1dCBJIHdhbnRlZCB0bzxi cj4NCiZndDvCoCDCoCDCoCDCoCDCoG5vdGUgaXQuPGJyPg0KJmd0O8KgIMKgIMKgIMKgIMKgJmd0 O8KgIMKgIMKgJmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0O8KgIMKgIMKgJmd0OyZndDs8YnI+ DQomZ3Q7wqAgwqAgwqAgwqAgwqAmZ3Q7wqAgwqAgwqAmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsm Z3Q7wqAgwqAgwqAmZ3Q7Jmd0OyBOb3QganVzdCB0aGUgV0csIGFsc28gdGhlIElFU0cgdGhhdDxi cj4NCiZndDvCoCDCoCDCoCDCoCDCoGFwcHJvdmVkIFJGQyA1Mzg5PGJyPg0KJmd0O8KgIMKgIMKg IMKgIMKgJmd0O8KgIMKgIMKgdG9vIGFzLDxicj4NCiZndDvCoCDCoCDCoCDCoCDCoCZndDvCoCDC oCDCoCZndDsmZ3Q7Jmd0OyZndDsgYnV0PGJyPg0KJmd0O8KgIMKgIMKgIMKgIMKgJmd0O8KgIMKg IMKgJmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7IGZvciB0aGU8YnI+DQomZ3Q7wqAgwqAgwqAgwqAg wqAmZ3Q7wqAgwqAgwqAmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7wqAgwqAgwqAmZ3Q7Jmd0 OyBhZGRpdGlvbiBvZiAmcXVvdDtvciBEVExTLW92ZXItVURQJnF1b3Q7LCB0aGlzIGlzIHRoZTxi cj4NCiZndDvCoCDCoCDCoCDCoCDCoHNhbWUgdGV4dDxicj4NCiZndDvCoCDCoCDCoCDCoCDCoCZn dDvCoCDCoCDCoHRoYW4gaW48YnI+DQomZ3Q7wqAgwqAgwqAgwqAgwqAmZ3Q7wqAgwqAgwqAmZ3Q7 Jmd0OyZndDsmZ3Q7IFJGQzxicj4NCiZndDvCoCDCoCDCoCDCoCDCoCZndDvCoCDCoCDCoCZndDsm Z3Q7Jmd0OyZndDsmZ3Q7Jmd0OyA1Mzg5Ljxicj4NCiZndDvCoCDCoCDCoCDCoCDCoCZndDvCoCDC oCDCoCZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDvCoCDCoCDCoCZndDsmZ3Q7PGJyPg0KJmd0 O8KgIMKgIMKgIMKgIMKgJmd0O8KgIMKgIMKgJmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0O8Kg IMKgIMKgJmd0Ozxicj4NCiZndDvCoCDCoCDCoCDCoCDCoCZndDvCoCDCoCDCoCZndDsmZ3Q7Jmd0 OyZndDsmZ3Q7Jmd0OyZndDvCoCDCoCDCoCZndDsgWWVzLCBJIGtub3cuIE15IHBvaW50IGlzIHRo YXQgd2hpbGUgdGhleTxicj4NCiZndDvCoCDCoCDCoCDCoCDCoG1pZ2h0IGhhdmUgYmVlPGJyPg0K Jmd0O8KgIMKgIMKgIMKgIMKgJmd0O8KgIMKgIMKgJmd0OyZndDsgc2Vuc2libGU8YnI+DQomZ3Q7 wqAgwqAgwqAgwqAgwqAmZ3Q7wqAgwqAgwqAmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsgd2hlbjxi cj4NCiZndDvCoCDCoCDCoCDCoCDCoCZndDvCoCDCoCDCoCZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0 OyZndDvCoCDCoCDCoCZndDsgNTM4OSB3YXMgcHVibGlzaGVkIHRoZXkgKm5vdyogc2VlbSBjcmF6 aWx5PGJyPg0KJmd0O8KgIMKgIMKgIMKgIMKgbG9uZy4gRGlkPGJyPg0KJmd0O8KgIMKgIMKgIMKg IMKgJmd0O8KgIMKgIMKgdGhlIFdHPGJyPg0KJmd0O8KgIMKgIMKgIMKgIMKgJmd0O8KgIMKgIMKg Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7IGV4cGxpY2l0bHk8YnI+DQomZ3Q7wqAgwqAgwqAgwqAg wqAmZ3Q7wqAgwqAgwqAmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7wqAgwqAgwqAmZ3Q7IGRl Y2lkZSBub3QgdG8gdXBkYXRlIHRoZW0/PGJyPg0KJmd0O8KgIMKgIMKgIMKgIMKgJmd0O8KgIMKg IMKgJmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0Ozxicj4NCiZndDvCoCDCoCDCoCDCoCDCoCZn dDvCoCDCoCDCoCZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDvCoCDCoCDCoE5vLCBub2JvZHkg ZXZlciBzdWdnZXN0ZWQgdGhhdCB0aGVyZSB3YXMgYW48YnI+DQomZ3Q7wqAgwqAgwqAgwqAgwqBp c3N1ZSB0aGVyZS48YnI+DQomZ3Q7wqAgwqAgwqAgwqAgwqAmZ3Q7wqAgwqAgwqAmZ3Q7Jmd0OyZn dDsmZ3Q7Jmd0OyZndDsmZ3Q7PGJyPg0KJmd0O8KgIMKgIMKgIMKgIMKgJmd0O8KgIMKgIMKgJmd0 OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0Ozxicj4NCiZndDvCoCDCoCDCoCDCoCDCoCZndDvCoCDC oCDCoCZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsgT0ssIHdlbGwsIHRoaXMgc2VlbXMgbGlr ZSBpdCBzaG91bGQgYmUgY29uc2lkZXJlZCw8YnI+DQomZ3Q7wqAgwqAgwqAgwqAgwqB0aGVuLDxi cj4NCiZndDvCoCDCoCDCoCDCoCDCoCZndDvCoCDCoCDCoGJlY2F1c2UgdGhpczxicj4NCiZndDvC oCDCoCDCoCDCoCDCoCZndDvCoCDCoCDCoCZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsgZG9l c24mIzM5O3Q8YnI+DQomZ3Q7wqAgwqAgwqAgwqAgwqAmZ3Q7wqAgwqAgwqAmZ3Q7Jmd0OyZndDsm Z3Q7Jmd0OyZndDsmZ3Q7IG1hdGNoIG1vZGVybiBwcmFjdGljZS48YnI+DQomZ3Q7wqAgwqAgwqAg wqAgwqAmZ3Q7wqAgwqAgwqAmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7PGJyPg0KJmd0O8Kg IMKgIMKgIMKgIMKgJmd0O8KgIMKgIMKgJmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0Ozxicj4N CiZndDvCoCDCoCDCoCDCoCDCoCZndDvCoCDCoCDCoCZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZn dDs8YnI+DQomZ3Q7wqAgwqAgwqAgwqAgwqAmZ3Q7wqAgwqAgwqAmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0 OyZndDsmZ3Q7wqAgwqAgwqAmZ3Q7IFRoaXMgd291bGQgYmUgZ29vZCB0byBleHBsYWluLjxicj4N CiZndDvCoCDCoCDCoCDCoCDCoCZndDvCoCDCoCDCoCZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZn dDs8YnI+DQomZ3Q7wqAgwqAgwqAgwqAgwqAmZ3Q7wqAgwqAgwqAmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0 OyZndDsmZ3Q7wqAgwqAgwqBOZXcgdGV4dDo8YnI+DQomZ3Q7wqAgwqAgwqAgwqAgwqAmZ3Q7wqAg wqAgwqAmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7PGJyPg0KJmd0O8KgIMKgIMKgIMKgIMKg Jmd0O8KgIMKgIMKgJmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0O8KgIMKgIMKgIMKgIFsuLi5d PGJyPg0KJmd0O8KgIMKgIMKgIMKgIMKgJmd0O8KgIMKgIMKgJmd0OyZndDsmZ3Q7Jmd0OyZndDsm Z3Q7Jmd0O8KgIMKgIMKgIMKgIGNvbnRhaW5pbmcgdGhlIHN1YmplY3RBbHROYW1lIG9mIHRoYXQ8 YnI+DQomZ3Q7wqAgwqAgwqAgwqAgwqBjZXJ0aWZpY2F0ZS7CoDxicj4NCiZndDvCoCDCoCDCoCDC oCDCoCZndDvCoCDCoCDCoFRoZSB0ZXN0PGJyPg0KJmd0O8KgIMKgIMKgIMKgIMKgJmd0O8KgIMKg IMKgJmd0OyZndDsgb248YnI+DQomZ3Q7wqAgwqAgwqAgwqAgwqAmZ3Q7wqAgwqAgwqAmZ3Q7Jmd0 OyZndDsmZ3Q7Jmd0OyZndDsgdGhlPGJyPg0KJmd0O8KgIMKgIMKgIMKgIMKgJmd0O8KgIMKgIMKg Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0O8KgIMKgIMKgIMKgIE1FU1NBR0UtSU5URUdSSVRZ LVNIQTI1NiBhdHRyaWJ1dGU8YnI+DQomZ3Q7wqAgwqAgwqAgwqAgwqBpbmRpY2F0ZXMgdGhhdCB0 aGU8YnI+DQomZ3Q7wqAgwqAgwqAgwqAgwqAmZ3Q7wqAgwqAgwqAmZ3Q7Jmd0OyZndDsmZ3Q7IHRy YW5zYWN0aW9uPGJyPg0KJmd0O8KgIMKgIMKgIMKgIMKgJmd0O8KgIMKgIMKgJmd0OyZndDsmZ3Q7 Jmd0OyZndDsmZ3Q7IGlzPGJyPg0KJmd0O8KgIMKgIMKgIMKgIMKgJmd0O8KgIMKgIMKgJmd0OyZn dDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0O8KgIMKgIMKgIMKgIGF1dGhlbnRpY2F0ZWQgYW5kIHRoYXQg dGhlIGNsaWVudDxicj4NCiZndDvCoCDCoCDCoCDCoCDCoGltcGxlbWVudHMgdGhpczxicj4NCiZn dDvCoCDCoCDCoCDCoCDCoCZndDvCoCDCoCDCoCZndDsmZ3Q7IHNwZWNpZmljYXRpb248YnI+DQom Z3Q7wqAgwqAgwqAgwqAgwqAmZ3Q7wqAgwqAgwqAmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsgYW5k PGJyPg0KJmd0O8KgIMKgIMKgIMKgIMKgJmd0O8KgIMKgIMKgJmd0OyZndDsmZ3Q7Jmd0OyZndDsm Z3Q7Jmd0O8KgIMKgIMKgIMKgIHNvIGNhbiBwcm9jZXNzIHRoZSBBTFRFUk5BVEUtRE9NQUlOIGF0 dHJpYnV0ZS48YnI+DQomZ3Q7wqAgwqAgwqAgwqAgwqAmZ3Q7wqAgwqAgwqAmZ3Q7Jmd0OyZndDsm Z3Q7Jmd0OyZndDsmZ3Q7PGJyPg0KJmd0O8KgIMKgIMKgIMKgIMKgJmd0O8KgIMKgIMKgJmd0OyZn dDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0Ozxicj4NCiZndDvCoCDCoCDCoCDCoCDCoCZndDvCoCDCoCDC oCZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsgQWxsIHJpZ2h0Ljxicj4NCiZndDvCoCDCoCDC oCDCoCDCoCZndDvCoCDCoCDCoCZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDs8YnI+DQomZ3Q7 wqAgwqAgwqAgwqAgwqAmZ3Q7wqAgwqAgwqAmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7PGJy Pg0KJmd0O8KgIMKgIMKgIMKgIMKgJmd0O8KgIMKgIMKgJmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7 Jmd0O8KgIMKgIMKgJmd0Ozxicj4NCiZndDvCoCDCoCDCoCDCoCDCoCZndDvCoCDCoCDCoCZndDsm Z3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDvCoCDCoCDCoCZndDs8YnI+DQomZ3Q7wqAgwqAgwqAgwqAg wqAmZ3Q7wqAgwqAgwqAmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7wqAgwqAgwqAmZ3Q7Jmd0 OyZndDsmZ3Q7wqAgwqAgwqAgb8KgIFdoYXQgYXV0aGVudGljYXRpb24gYW5kPGJyPg0KJmd0O8Kg IMKgIMKgIMKgIMKgbWVzc2FnZS1pbnRlZ3JpdHk8YnI+DQomZ3Q7wqAgwqAgwqAgwqAgwqAmZ3Q7 wqAgwqAgwqBtZWNoYW5pc21zPGJyPg0KJmd0O8KgIMKgIMKgIMKgIMKgJmd0O8KgIMKgIMKgJmd0 OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7IGFyZSB1c2VkLjxicj4NCiZndDvCoCDCoCDCoCDCoCDCoCZn dDvCoCDCoCDCoCZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDvCoCDCoCDCoCZndDsmZ3Q7Jmd0 OyZndDs8YnI+DQomZ3Q7wqAgwqAgwqAgwqAgwqAmZ3Q7wqAgwqAgwqAmZ3Q7Jmd0OyZndDsmZ3Q7 Jmd0OyZndDsmZ3Q7wqAgwqAgwqAmZ3Q7Jmd0OyZndDsmZ3Q7wqAgwqAgwqAgb8KgIFRoZSBjb25z aWRlcmF0aW9ucyBhcm91bmQgbWFudWFsIHZzLjxicj4NCiZndDvCoCDCoCDCoCDCoCDCoCZndDvC oCDCoCDCoGF1dG9tYXRpYyBrZXk8YnI+DQomZ3Q7wqAgwqAgwqAgwqAgwqAmZ3Q7wqAgwqAgwqAm Z3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsgZGVyaXZhdGlvbjxicj4NCiZndDvCoCDCoCDCoCDCoCDC oCZndDvCoCDCoCDCoCZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDvCoCDCoCDCoCZndDsmZ3Q7 IGZvcjxicj4NCiZndDvCoCDCoCDCoCDCoCDCoCZndDvCoCDCoCDCoCZndDsmZ3Q7Jmd0OyZndDsm Z3Q7Jmd0OyZndDvCoCDCoCDCoCZndDsmZ3Q7Jmd0OyZndDvCoCDCoCDCoCDCoCDCoHRoZSBpbnRl Z3JpdHkgbWVjaGFuaXNtLCBhczxicj4NCiZndDvCoCDCoCDCoCDCoCDCoGRpc2N1c3NlZCBpbjxi cj4NCiZndDvCoCDCoCDCoCDCoCDCoCZndDvCoCDCoCDCoFtSRkM0MTA3XS48YnI+DQomZ3Q7wqAg wqAgwqAgwqAgwqAmZ3Q7wqAgwqAgwqAmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7wqAgwqAg wqAmZ3Q7Jmd0OyZndDsmZ3Q7PGJyPg0KJmd0O8KgIMKgIMKgIMKgIMKgJmd0O8KgIMKgIMKgJmd0 OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0O8KgIMKgIMKgJmd0OyZndDsmZ3Q7Jmd0O8KgIMKgIMKg IG/CoCBXaGF0IG1lY2hhbmlzbXMgYXJlIHVzZWQgdG88YnI+DQomZ3Q7wqAgwqAgwqAgwqAgwqBk aXN0aW5ndWlzaCBTVFVOPGJyPg0KJmd0O8KgIMKgIMKgIMKgIMKgJmd0O8KgIMKgIMKgJmd0OyZn dDsgbWVzc2FnZXM8YnI+DQomZ3Q7wqAgwqAgwqAgwqAgwqAmZ3Q7wqAgwqAgwqAmZ3Q7Jmd0OyZn dDsmZ3Q7Jmd0OyZndDsgZnJvbSBvdGhlcjxicj4NCiZndDvCoCDCoCDCoCDCoCDCoCZndDvCoCDC oCDCoCZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDvCoCDCoCDCoCZndDsmZ3Q7Jmd0Ozxicj4N CiZndDvCoCDCoCDCoCDCoCDCoCZndDvCoCDCoCDCoCZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZn dDvCoCDCoCDCoCZndDsmZ3Q7Jmd0OyBXaHkgaXMgdGhpcyByZXF1aXJlZD8gSXQgc2VlbXMgbGlr ZSB0aGF0JiMzOTtzPGJyPg0KJmd0O8KgIMKgIMKgIMKgIMKgYSBnZW5lcmljPGJyPg0KJmd0O8Kg IMKgIMKgIMKgIMKgJmd0O8KgIMKgIMKgU1RVTjxicj4NCiZndDvCoCDCoCDCoCDCoCDCoCZndDvC oCDCoCDCoCZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyBmZWF0dXJlLjxicj4NCiZndDvCoCDCoCDC oCDCoCDCoCZndDvCoCDCoCDCoCZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDvCoCDCoCDCoCZn dDsmZ3Q7PGJyPg0KJmd0O8KgIMKgIMKgIMKgIMKgJmd0O8KgIMKgIMKgJmd0OyZndDsmZ3Q7Jmd0 OyZndDsmZ3Q7Jmd0O8KgIMKgIMKgJmd0OyZndDsgVGhhdCB0ZXh0IGlzIGlkZW50aWNhbCB0byB0 aGUgdGV4dCBpbiBSRkM8YnI+DQomZ3Q7wqAgwqAgwqAgwqAgwqA1Mzg5LsKgIFJGQzxicj4NCiZn dDvCoCDCoCDCoCDCoCDCoCZndDvCoCDCoCDCoDU3NjQvNzk4Mzxicj4NCiZndDvCoCDCoCDCoCDC oCDCoCZndDvCoCDCoCDCoCZndDsmZ3Q7Jmd0OyZndDsgaXM8YnI+DQomZ3Q7wqAgwqAgwqAgwqAg wqAmZ3Q7wqAgwqAgwqAmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsgb25lIHN1Y2g8YnI+DQomZ3Q7 wqAgwqAgwqAgwqAgwqAmZ3Q7wqAgwqAgwqAmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7wqAg wqAgwqAmZ3Q7Jmd0OyBtZWNoYW5pc20sIGJ1dCB0aGVyZSBpcyBub3RoaW5nIHRoYXQ8YnI+DQom Z3Q7wqAgwqAgwqAgwqAgwqBwcmV2ZW50IGFub3RoZXI8YnI+DQomZ3Q7wqAgwqAgwqAgwqAgwqAm Z3Q7wqAgwqAgwqBwcm90b2NvbDxicj4NCiZndDvCoCDCoCDCoCDCoCDCoCZndDvCoCDCoCDCoCZn dDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyBzdGFjayB0byB1c2U8YnI+DQomZ3Q7wqAgwqAgwqAgwqAg wqAmZ3Q7wqAgwqAgwqAmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7wqAgwqAgwqAmZ3Q7Jmd0 OyBhIGRpZmZlcmVudCBtZWNoYW5pc20gKGluZmVyZW5jZSwgc2hpbSwgZXRjLi4uKTxicj4NCiZn dDvCoCDCoCDCoCDCoCDCoCZndDvCoCDCoCDCoCZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDvC oCDCoCDCoCZndDsmZ3Q7PGJyPg0KJmd0O8KgIMKgIMKgIMKgIMKgJmd0O8KgIMKgIMKgJmd0OyZn dDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0O8KgIMKgIMKgJmd0Ozxicj4NCiZndDvCoCDCoCDCoCDCoCDC oCZndDvCoCDCoCDCoCZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDvCoCDCoCDCoCZndDsgQnV0 IHVsdGltYXRlbHkgbm8gbWF0dGVyIHdoYXQgdGhlIG90aGVyIHByb3RvY29sPGJyPg0KJmd0O8Kg IMKgIMKgIMKgIMKgJmd0O8KgIMKgIMKgcHJvdmlkZXMgZm9yPGJyPg0KJmd0O8KgIMKgIMKgIMKg IMKgJmd0O8KgIMKgIMKgJmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7IGRlbXV4LCBTVFVOPGJyPg0K Jmd0O8KgIMKgIMKgIMKgIMKgJmd0O8KgIMKgIMKgJmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0 O8KgIMKgIMKgJmd0OyBoYXMgaXRzPGJyPg0KJmd0O8KgIMKgIMKgIMKgIMKgJmd0O8KgIMKgIMKg Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0O8KgIMKgIMKgJmd0OyBvd24gZGVtdXguPGJyPg0K Jmd0O8KgIMKgIMKgIMKgIMKgJmd0O8KgIMKgIMKgJmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0 Ozxicj4NCiZndDvCoCDCoCDCoCDCoCDCoCZndDvCoCDCoCDCoCZndDsmZ3Q7Jmd0OyZndDsmZ3Q7 Jmd0OyZndDvCoCDCoCDCoEluIGZhY3QgSSB0aGluayB0aGF0IHRoZSByZWFzb24gZm9yIHRoYXQg aXRlbTxicj4NCiZndDvCoCDCoCDCoCDCoCDCoHdhcyBiZWNhdXNlPGJyPg0KJmd0O8KgIMKgIMKg IMKgIMKgJmd0O8KgIMKgIMKgJmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0O8KgIMKgIMKgRklO R0VSUFJJTlQgY2FuIGFsc28gYmUgdXNlZCB0byBkZW11eCBTVFVOPGJyPg0KJmd0O8KgIMKgIMKg IMKgIMKgdHJhZmZpYywgYnV0PGJyPg0KJmd0O8KgIMKgIMKgIMKgIMKgJmd0O8KgIMKgIMKgaXQg aXM8YnI+DQomZ3Q7wqAgwqAgwqAgwqAgwqAmZ3Q7wqAgwqAgwqAmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0 OyZndDsmZ3Q7wqAgwqAgwqBvcHRpb25hbC7CoCBTbyBhbiBTVFVOIFVzYWdlIG5lZWRzIHRvIHRl bGwgaWY8YnI+DQomZ3Q7wqAgwqAgwqAgwqAgwqBGSU5HRVJQUklOVCBpczxicj4NCiZndDvCoCDC oCDCoCDCoCDCoCZndDvCoCDCoCDCoCZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDvCoCDCoCDC oG1hbmRhdG9yeSAobGlrZSBpbiBJQ0UpLjxicj4NCiZndDvCoCDCoCDCoCDCoCDCoCZndDvCoCDC oCDCoCZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDs8YnI+DQomZ3Q7wqAgwqAgwqAgwqAgwqAm Z3Q7wqAgwqAgwqAmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7PGJyPg0KJmd0O8KgIMKgIMKg IMKgIMKgJmd0O8KgIMKgIMKgJmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyBUaGlzIHNob3Vs ZCBiZSBleHBsYWluZWQuPGJyPg0KJmd0O8KgIMKgIMKgIMKgIMKgJmd0O8KgIMKgIMKgJmd0OyZn dDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0Ozxicj4NCiZndDvCoCDCoCDCoCDCoCDCoCZndDvCoCDCoCDC oCZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDs8YnI+DQomZ3Q7wqAgwqAgwqAgwqAgwqAmZ3Q7 wqAgwqAgwqAmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7wqAgwqAgwqAmZ3Q7Jmd0OyZndDs8 YnI+DQomZ3Q7wqAgwqAgwqAgwqAgwqAmZ3Q7wqAgwqAgwqAmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZn dDsmZ3Q7wqAgwqAgwqAmZ3Q7Jmd0OyZndDsmZ3Q7wqAgwqAgwqAgdGhhdCBpcyBub3QgcmVhZGls eSBzdWJqZWN0IHRvPGJyPg0KJmd0O8KgIMKgIMKgIMKgIMKgb2ZmbGluZSBkaWN0aW9uYXJ5PGJy Pg0KJmd0O8KgIMKgIMKgIMKgIMKgJmd0O8KgIMKgIMKgJmd0OyZndDsmZ3Q7Jmd0OyBhdHRhY2tz Ljxicj4NCiZndDvCoCDCoCDCoCDCoCDCoCZndDvCoCDCoCDCoCZndDsmZ3Q7Jmd0OyZndDsmZ3Q7 Jmd0OyZndDvCoCDCoCDCoCZndDsmZ3Q7Jmd0OyZndDvCoCDCoCDCoCBQcm90ZWN0aW9uIG9mIHRo ZSBjaGFubmVsIGl0c2VsZiw8YnI+DQomZ3Q7wqAgwqAgwqAgwqAgwqB1c2luZyBUTFMgb3I8YnI+ DQomZ3Q7wqAgwqAgwqAgwqAgwqAmZ3Q7wqAgwqAgwqBEVExTLDxicj4NCiZndDvCoCDCoCDCoCDC oCDCoCZndDvCoCDCoCDCoCZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyBtaXRpZ2F0ZXM8YnI+DQom Z3Q7wqAgwqAgwqAgwqAgwqAmZ3Q7wqAgwqAgwqAmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7 wqAgwqAgwqAmZ3Q7Jmd0OyB0aGVzZTxicj4NCiZndDvCoCDCoCDCoCDCoCDCoCZndDvCoCDCoCDC oCZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDvCoCDCoCDCoCZndDsmZ3Q7Jmd0OyZndDvCoCDC oCDCoCBhdHRhY2tzLjxicj4NCiZndDvCoCDCoCDCoCDCoCDCoCZndDvCoCDCoCDCoCZndDsmZ3Q7 Jmd0OyZndDsmZ3Q7Jmd0OyZndDvCoCDCoCDCoCZndDsmZ3Q7Jmd0OyZndDs8YnI+DQomZ3Q7wqAg wqAgwqAgwqAgwqAmZ3Q7wqAgwqAgwqAmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7wqAgwqAg wqAmZ3Q7Jmd0OyZndDsmZ3Q7wqAgwqAgwqAgU1RVTiBzdXBwb3J0cyBib3RoIE1FU1NBR0UtSU5U RUdSSVRZIGFuZDxicj4NCiZndDvCoCDCoCDCoCDCoCDCoCZndDvCoCDCoCDCoCZndDsmZ3Q7Jmd0 OyZndDsmZ3Q7Jmd0OyZndDvCoCDCoCDCoE1FU1NBR0UtSU5URUdSSVRZLVNIQTI1Niw8YnI+DQom Z3Q7wqAgwqAgwqAgwqAgwqAmZ3Q7wqAgwqAgwqAmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7 wqAgwqAgwqAmZ3Q7Jmd0OyZndDsmZ3Q7wqAgwqAgwqAgd2hpY2ggaXMgc3ViamVjdCB0byBiaWQg ZG93biBhdHRhY2tzPGJyPg0KJmd0O8KgIMKgIMKgIMKgIMKgYnkgYW4gb24tcGF0aDxicj4NCiZn dDvCoCDCoCDCoCDCoCDCoCZndDvCoCDCoCDCoCZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyBhdHRh Y2tlci48YnI+DQomZ3Q7wqAgwqAgwqAgwqAgwqAmZ3Q7wqAgwqAgwqAmZ3Q7Jmd0OyZndDsmZ3Q7 Jmd0OyZndDsmZ3Q7wqAgwqAgwqAmZ3Q7Jmd0OyZndDs8YnI+DQomZ3Q7wqAgwqAgwqAgwqAgwqAm Z3Q7wqAgwqAgwqAmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7wqAgwqAgwqAmZ3Q7Jmd0OyZn dDsgQnkgYW4gb24tcGF0aCBhdHRhY2tlciB3aG8gY2FuIGZvcmdlPGJyPg0KJmd0O8KgIMKgIMKg IMKgIMKgSE1BQy1TSEExIGluPGJyPg0KJmd0O8KgIMKgIMKgIMKgIMKgJmd0O8KgIMKgIMKgcmVh bC10aW1lPzxicj4NCiZndDvCoCDCoCDCoCDCoCDCoCZndDvCoCDCoCDCoCZndDsmZ3Q7Jmd0OyZn dDsmZ3Q7Jmd0OyZndDvCoCDCoCDCoFRoYXQmIzM5O3MgYTxicj4NCiZndDvCoCDCoCDCoCDCoCDC oCZndDvCoCDCoCDCoCZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDvCoCDCoCDCoCZndDsmZ3Q7 Jmd0OyBwcmV0dHkgc2VyaW91cyBhZHZlcnNhcnksIHNvIHlvdSBzaG91bGQ8YnI+DQomZ3Q7wqAg wqAgwqAgwqAgwqBjbGFyaWZ5IGhlcmU8YnI+DQomZ3Q7wqAgwqAgwqAgwqAgwqAmZ3Q7wqAgwqAg wqAmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7wqAgwqAgwqAmZ3Q7Jmd0OyZndDs8YnI+DQom Z3Q7wqAgwqAgwqAgwqAgwqAmZ3Q7wqAgwqAgwqAmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7 wqAgwqAgwqAmZ3Q7Jmd0Ozxicj4NCiZndDvCoCDCoCDCoCDCoCDCoCZndDvCoCDCoCDCoCZndDsm Z3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDvCoCDCoCDCoCZndDsmZ3Q7IE5ldyB0ZXh0Ojxicj4NCiZn dDvCoCDCoCDCoCDCoCDCoCZndDvCoCDCoCDCoCZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDvC oCDCoCDCoCZndDsmZ3Q7PGJyPg0KJmd0O8KgIMKgIMKgIMKgIMKgJmd0O8KgIMKgIMKgJmd0OyZn dDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0O8KgIMKgIMKgJmd0OyZndDvCoCDCoCBTVFVOIHN1cHBvcnRz IGJvdGggTUVTU0FHRS1JTlRFR1JJVFkgYW5kPGJyPg0KJmd0O8KgIMKgIMKgIMKgIMKgJmd0O8Kg IMKgIMKgJmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7IE1FU1NBR0UtSU5URUdSSVRZLVNIQTI1Niw8 YnI+DQomZ3Q7wqAgwqAgwqAgwqAgwqAmZ3Q7wqAgwqAgwqAmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZn dDsmZ3Q7wqAgwqAgwqAmZ3Q7Jmd0O8KgIMKgIHdoaWNoIGlzIHN1YmplY3QgdG8gYmlkIGRvd24g YXR0YWNrcyBieTxicj4NCiZndDvCoCDCoCDCoCDCoCDCoGFuIG9uLXBhdGg8YnI+DQomZ3Q7wqAg wqAgwqAgwqAgwqAmZ3Q7wqAgwqAgwqBhdHRhY2tlcjxicj4NCiZndDvCoCDCoCDCoCDCoCDCoCZn dDvCoCDCoCDCoCZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyB0aGF0PGJyPg0KJmd0O8KgIMKgIMKg IMKgIMKgJmd0O8KgIMKgIMKgJmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0O8KgIMKgIMKgJmd0 OyZndDvCoCDCoCB3b3VsZCBzdHJpcCB0aGUgTUVTU0FHRS1JTlRFR1JJVFktU0hBMjU2PGJyPg0K Jmd0O8KgIMKgIMKgIMKgIMKgYXR0cmlidXRlPGJyPg0KJmd0O8KgIMKgIMKgIMKgIMKgJmd0O8Kg IMKgIMKgbGVhdmluZzxicj4NCiZndDvCoCDCoCDCoCDCoCDCoCZndDvCoCDCoCDCoCZndDsmZ3Q7 Jmd0OyZndDsmZ3Q7Jmd0OyZndDvCoCDCoCDCoG9ubHkgdGhlPGJyPg0KJmd0O8KgIMKgIMKgIMKg IMKgJmd0O8KgIMKgIMKgJmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0O8KgIMKgIMKgJmd0OyZn dDvCoCDCoCBNRVNTQUdFLUlOVEVHUklUWSBhdHRyaWJ1dGUgYW5kPGJyPg0KJmd0O8KgIMKgIMKg IMKgIMKgZXhwbG9pdGluZyBhIHBvdGVudGlhbDxicj4NCiZndDvCoCDCoCDCoCDCoCDCoCZndDvC oCDCoCDCoCZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDvCoCDCoCDCoHZ1bG5lcmFiaWxpdHku PGJyPg0KJmd0O8KgIMKgIMKgIMKgIMKgJmd0O8KgIMKgIMKgJmd0OyZndDsmZ3Q7Jmd0OyZndDsm Z3Q7Jmd0O8KgIMKgIMKgJmd0OyZndDvCoCDCoCBQcm90ZWN0aW9uIG9mIHRoZSBjaGFubmVsIGl0 c2VsZiwgdXNpbmc8YnI+DQomZ3Q7wqAgwqAgwqAgwqAgwqBUTFMgb3IgRFRMUyw8YnI+DQomZ3Q7 wqAgwqAgwqAgwqAgwqAmZ3Q7wqAgwqAgwqAmZ3Q7Jmd0OyZndDsmZ3Q7IG1pdGlnYXRlczxicj4N CiZndDvCoCDCoCDCoCDCoCDCoCZndDvCoCDCoCDCoCZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZn dDvCoCDCoCDCoHRoZXNlPGJyPg0KJmd0O8KgIMKgIMKgIMKgIMKgJmd0O8KgIMKgIMKgJmd0OyZn dDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0O8KgIMKgIMKgJmd0OyZndDvCoCDCoCBhdHRhY2tzLsKgIFRp bWVseSByZW1vdmFsIG9mIHRoZSBzdXBwb3J0IG9mPGJyPg0KJmd0O8KgIMKgIMKgIMKgIMKgJmd0 O8KgIMKgIMKgJmd0OyZndDsgTUVTU0FHRS1JTlRFR1JJVFk8YnI+DQomZ3Q7wqAgwqAgwqAgwqAg wqAmZ3Q7wqAgwqAgwqAmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsgaW4gYTxicj4NCiZndDvCoCDC oCDCoCDCoCDCoCZndDvCoCDCoCDCoCZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDvCoCDCoCDC oCZndDsmZ3Q7wqAgwqAgZnV0dXJlIHZlcnNpb24gb2YgU1RVTiBpcyBuZWNlc3NhcnkuPGJyPg0K Jmd0O8KgIMKgIMKgIMKgIMKgJmd0O8KgIMKgIMKgJmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0 O8KgIMKgIMKgJmd0OyZndDs8YnI+DQomZ3Q7wqAgwqAgwqAgwqAgwqAmZ3Q7wqAgwqAgwqAmZ3Q7 Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7wqAgwqAgwqAmZ3Q7PGJyPg0KJmd0O8KgIMKgIMKgIMKg IMKgJmd0O8KgIMKgIMKgJmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0O8KgIMKgIMKgJmd0OyBJ IHN0aWxsIGRvbiYjMzk7dCB1bmRlcnN0YW5kIHRoZSBjYXBhYmlsaXRpZXM8YnI+DQomZ3Q7wqAg wqAgwqAgwqAgwqB5b3Ugc2VlbSB0bzxicj4NCiZndDvCoCDCoCDCoCDCoCDCoCZndDvCoCDCoCDC oGJlbGlldmU8YnI+DQomZ3Q7wqAgwqAgwqAgwqAgwqAmZ3Q7wqAgwqAgwqAmZ3Q7Jmd0OyB0aGU8 YnI+DQomZ3Q7wqAgwqAgwqAgwqAgwqAmZ3Q7wqAgwqAgwqAmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZn dDsmZ3Q7wqAgwqAgwqBhdHRhY2tlcjxicj4NCiZndDvCoCDCoCDCoCDCoCDCoCZndDvCoCDCoCDC oCZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDvCoCDCoCDCoCZndDsgaGFzLjxicj4NCiZndDvC oCDCoCDCoCDCoCDCoCZndDvCoCDCoCDCoCZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDvCoCDC oCDCoCZndDsgQ2FuIHlvdSBkZXNjcmliZSB0aGUgZXhhY3QgYXR0YWNrLjxicj4NCiZndDvCoCDC oCDCoCDCoCDCoCZndDvCoCDCoCDCoCZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDvCoCDCoCDC oCZndDs8YnI+DQomZ3Q7wqAgwqAgwqAgwqAgwqAmZ3Q7wqAgwqAgwqAmZ3Q7Jmd0OyZndDsmZ3Q7 Jmd0OyZndDsmZ3Q7PGJyPg0KJmd0O8KgIMKgIMKgIMKgIMKgJmd0O8KgIMKgIMKgJmd0OyZndDsm Z3Q7Jmd0OyZndDsmZ3Q7Jmd0O8KgIMKgIMKgMS4gVnVsbmVyYWJpbGl0eSBpcyBmb3VuZCBpbiBI TUFDLVNIQTE8YnI+DQomZ3Q7wqAgwqAgwqAgwqAgwqAmZ3Q7wqAgwqAgwqAmZ3Q7Jmd0OyZndDsm Z3Q7Jmd0OyZndDsmZ3Q7wqAgwqAgwqAyLiBDbGllbnQgQWxpY2Ugc3RpbGwgc3VwcG9ydHMgTS1J IGFuZDxicj4NCiZndDvCoCDCoCDCoCDCoCDCoE0tSS0yNTYsIGRvZXMgbm90PGJyPg0KJmd0O8Kg IMKgIMKgIMKgIMKgJmd0O8KgIMKgIMKga25vdzxicj4NCiZndDvCoCDCoCDCoCDCoCDCoCZndDvC oCDCoCDCoCZndDsmZ3Q7IHdoYXQ8YnI+DQomZ3Q7wqAgwqAgwqAgwqAgwqAmZ3Q7wqAgwqAgwqAm Z3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7wqAgwqAgwqB2ZXJzaW9uIG9mIFNUVU4gc2VydmVy IEJvYiBzdXBwb3J0cyBhbmQgc288YnI+DQomZ3Q7wqAgwqAgwqAgwqAgwqBzZW5kIGJvdGguPGJy Pg0KJmd0O8KgIMKgIMKgIMKgIMKgJmd0O8KgIMKgIMKgJmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7 Jmd0O8KgIMKgIMKgMy4gT24tcGF0aCBhdHRhY2tlciByZW1vdmVzIE0tSS0yNTYuPGJyPg0KJmd0 O8KgIMKgIMKgIMKgIMKgJmd0O8KgIMKgIMKgJmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0O8Kg IMKgIMKgNS4gc3R1bmJpcyBzZXJ2ZXIgQm9iIHRoaW5rcyB0aGF0IEFsaWNlIGlzIGFuPGJyPg0K Jmd0O8KgIMKgIMKgIMKgIMKgUkZDIDUzODk8YnI+DQomZ3Q7wqAgwqAgwqAgwqAgwqAmZ3Q7wqAg wqAgwqBjbGllbnQgYW5kPGJyPg0KJmd0O8KgIMKgIMKgIMKgIMKgJmd0O8KgIMKgIMKgJmd0OyZn dDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0O8KgIMKgIMKgY29udGludWUgd2l0aCB0aGF0IHByb3RvY29s Ljxicj4NCiZndDvCoCDCoCDCoCDCoCDCoCZndDvCoCDCoCDCoCZndDsmZ3Q7Jmd0OyZndDsmZ3Q7 Jmd0OyZndDs8YnI+DQomZ3Q7wqAgwqAgwqAgwqAgwqAmZ3Q7wqAgwqAgwqAmZ3Q7Jmd0OyZndDsm Z3Q7Jmd0OyZndDsmZ3Q7PGJyPg0KJmd0O8KgIMKgIMKgIMKgIMKgJmd0O8KgIMKgIMKgJmd0OyZn dDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyBUaGlzIHNlZW1zIGxpa2UgYW4gZXh0cmVtZWx5IHdlYWsg YXR0YWNrLiBJbjxicj4NCiZndDvCoCDCoCDCoCDCoCDCoGdlbmVyYWwsIGFueTxicj4NCiZndDvC oCDCoCDCoCDCoCDCoCZndDvCoCDCoCDCoHByb3RvY29sIG9mPGJyPg0KJmd0O8KgIMKgIMKgIMKg IMKgJmd0O8KgIMKgIMKgJmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyB0aGlzIHR5cGUgaXMg YXMgc3Ryb25nPGJyPg0KJmd0O8KgIMKgIMKgIMKgIMKgJmd0O8KgIMKgIMKgJmd0OyZndDsmZ3Q7 Jmd0OyZndDsmZ3Q7Jmd0OyBhcyB0aGUgd2Vha2VzdCBpbnRlZ3JpdHkgYWxnb3JpdGhtIGl0IHN1 cHBvcnRzLCBzbzxicj4NCiZndDvCoCDCoCDCoCDCoCDCoGl0JiMzOTtzIG5vdDxicj4NCiZndDvC oCDCoCDCoCDCoCDCoCZndDvCoCDCoCDCoHRoYXQgdGhlPGJyPg0KJmd0O8KgIMKgIMKgIMKgIMKg Jmd0O8KgIMKgIMKgJmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyBwcm90b2NvbCBoYXMgYSBk b3duZ3JhZGU8YnI+DQomZ3Q7wqAgwqAgwqAgwqAgwqAmZ3Q7wqAgwqAgwqAmZ3Q7Jmd0OyZndDsm Z3Q7Jmd0OyZndDsmZ3Q7IGF0dGFjaywgYnV0IHJhdGhlciB0aGF0IHRoZSBtaW5pbXVtIGFsZ29y aXRobTxicj4NCiZndDvCoCDCoCDCoCDCoCDCoHN1cHBvcnRlZCBpczxicj4NCiZndDvCoCDCoCDC oCDCoCDCoCZndDvCoCDCoCDCoG9uZSB5b3U8YnI+DQomZ3Q7wqAgwqAgwqAgwqAgwqAmZ3Q7wqAg wqAgwqAmZ3Q7Jmd0OyZndDsmZ3Q7IGRvbiYjMzk7dDxicj4NCiZndDvCoCDCoCDCoCDCoCDCoCZn dDvCoCDCoCDCoCZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsgdHJ1c3QgYXMgbXVjaDxicj4N CiZndDvCoCDCoCDCoCDCoCDCoCZndDvCoCDCoCDCoCZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZn dDsgYXMgeW91IG1pZ2h0IGxpa2UuPGJyPg0KJmd0O8KgIMKgIMKgIMKgIMKgJmd0O8KgIMKgIMKg Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0Ozxicj4NCiZndDvCoCDCoCDCoCDCoCDCoCZndDvC oCDCoCDCoCZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsgLUVrcjxicj4NCiZndDvCoCDCoCDC oCDCoCDCoCZndDvCoCDCoCDCoCZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDs8YnI+DQomZ3Q7 wqAgwqAgwqAgwqAgwqAmZ3Q7wqAgwqAgwqAmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7PGJy Pg0KJmd0O8KgIMKgIMKgIMKgIMKgJmd0O8KgIMKgIMKgJmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7 Jmd0O8KgIMKgIMKgLS08YnI+DQomZ3Q7wqAgwqAgwqAgwqAgwqAmZ3Q7wqAgwqAgwqAmZ3Q7Jmd0 Ozxicj4NCiZndDvCoCDCoCDCoCDCoCDCoCZndDs8YnI+DQomZ3Q7wqAgwqAgwqAgwqAgwqAmZ3Q7 PGJyPg0KJmd0O8KgIMKgIMKgIMKgIMKgJmd0Ozxicj4NCiZndDvCoCDCoCDCoCDCoCDCoCZndDvC oCDCoCDCoC0tPGJyPg0KJmd0O8KgIMKgIMKgIMKgIMKgJmd0O8KgIMKgIMKgTWFyYyBQZXRpdC1I dWd1ZW5pbjxicj4NCiZndDvCoCDCoCDCoCDCoCDCoCZndDvCoCDCoCDCoEVtYWlsOiA8YSBocmVm PSJtYWlsdG86bWFyY0BwZXRpdC1odWd1ZW5pbi5vcmciIHRhcmdldD0iX2JsYW5rIj5tYXJjQHBl dGl0LWh1Z3VlbmluLm9yZzwvYT48YnI+DQomZ3Q7wqAgwqAgwqAgwqAgwqAmbHQ7bWFpbHRvOjxh IGhyZWY9Im1haWx0bzptYXJjQHBldGl0LWh1Z3VlbmluLm9yZyIgdGFyZ2V0PSJfYmxhbmsiPm1h cmNAcGV0aXQtaHVndWVuaW4ub3JnPC9hPiZndDsgJmx0O21haWx0bzo8YSBocmVmPSJtYWlsdG86 bWFyY0BwZXRpdC1odWd1ZW5pbi5vcmciIHRhcmdldD0iX2JsYW5rIj5tYXJjQHBldGl0LWh1Z3Vl bmluLm9yZzwvYT48YnI+DQomZ3Q7wqAgwqAgwqAgwqAgwqAmbHQ7bWFpbHRvOjxhIGhyZWY9Im1h aWx0bzptYXJjQHBldGl0LWh1Z3VlbmluLm9yZyIgdGFyZ2V0PSJfYmxhbmsiPm1hcmNAcGV0aXQt aHVndWVuaW4ub3JnPC9hPiZndDsmZ3Q7PGJyPg0KJmd0O8KgIMKgIMKgIMKgIMKgJmd0O8KgIMKg IMKgQmxvZzogPGEgaHJlZj0iaHR0cHM6Ly9tYXJjLnBldGl0LWh1Z3VlbmluLm9yZyIgcmVsPSJu b3JlZmVycmVyIiB0YXJnZXQ9Il9ibGFuayI+aHR0cHM6Ly9tYXJjLnBldGl0LWh1Z3VlbmluLm9y ZzwvYT48YnI+DQomZ3Q7wqAgwqAgwqAgwqAgwqAmZ3Q7wqAgwqAgwqBQcm9maWxlOiA8YSBocmVm PSJodHRwczovL3d3dy5saW5rZWRpbi5jb20vaW4vcGV0aXRodWciIHJlbD0ibm9yZWZlcnJlciIg dGFyZ2V0PSJfYmxhbmsiPmh0dHBzOi8vd3d3LmxpbmtlZGluLmNvbS9pbi9wZXRpdGh1ZzwvYT48 YnI+DQomZ3Q7wqAgwqAgwqAgwqAgwqAmZ3Q7PGJyPg0KJmd0OyA8YnI+DQo8L2Jsb2NrcXVvdGU+ PC9kaXY+DQo= --000000000000f49df8057df68c0f--