From nobody Fri Mar 1 07:32:19 2019 Return-Path: X-Original-To: tram@ietf.org Delivered-To: tram@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 0389012894E; Fri, 1 Mar 2019 07:32:18 -0800 (PST) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: Gonzalo Camarillo To: X-Test-IDTracker: no X-IETF-IDTracker: 6.92.1 Auto-Submitted: auto-generated Precedence: bulk Cc: tram-chairs@ietf.org, iesg-secretary@ietf.org, tram@ietf.org, brandon.williams@akamai.com, Brandon Williams Message-ID: <155145433800.6254.6851203649502728448.idtracker@ietfa.amsl.com> Date: Fri, 01 Mar 2019 07:32:18 -0800 Archived-At: Subject: [tram] Publication has been requested for draft-ietf-tram-turnbis-23 X-BeenThere: tram@ietf.org X-Mailman-Version: 2.1.29 List-Id: "Discussing the creation of a Turn Revised And Modernized \(TRAM\) WG, which goal is to consolidate the various initiatives to update TURN and STUN." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 01 Mar 2019 15:32:18 -0000 Gonzalo Camarillo has requested publication of draft-ietf-tram-turnbis-23 as Proposed Standard on behalf of the TRAM working group. Please verify the document's state at https://datatracker.ietf.org/doc/draft-ietf-tram-turnbis/ From nobody Fri Mar 8 18:10:56 2019 Return-Path: X-Original-To: tram@ietfa.amsl.com Delivered-To: tram@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 60AB1128678 for ; Fri, 8 Mar 2019 18:10:54 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.899 X-Spam-Level: X-Spam-Status: No, score=-1.899 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_MED=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=rtfm-com.20150623.gappssmtp.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id D0jqZkacl0tF for ; Fri, 8 Mar 2019 18:10:48 -0800 (PST) Received: from mail-lf1-x12e.google.com (mail-lf1-x12e.google.com [IPv6:2a00:1450:4864:20::12e]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 5DDB112796B for ; Fri, 8 Mar 2019 18:10:47 -0800 (PST) Received: by mail-lf1-x12e.google.com with SMTP id a8so15577739lfi.7 for ; Fri, 08 Mar 2019 18:10:47 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=rtfm-com.20150623.gappssmtp.com; s=20150623; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=1mGVFqaIAF6icM2BZW2fT88+JHlmzbSUS/2gSjkW4k4=; b=h2dqGzuMp96KJ7H8QWCeRFj7ZAumYy76VwDjAQROraB/IfMxIgDtUooxyomj2KuLf0 8hzRBc24CdT1QkMsGIXVHUz0ygPUqZ1J4SOFLupip1GaXKaxt/OGHwStecGX0aSOBbte u+4Yahmc1L6QTZrbcz32cZl/ZEsGNsxhgRTSnWaFmDXDvMAsASGOOTMJulDSwIl25iQD GL0x9RFpg0qzgBdiN8nNdh81p33vOFrWp+noNTNNMBm5WqziqxX+0FIudKB2dhJXiGMb pHtZP18tgaZcugirdXJ3u1XqQRZhWCn3FaQYSUk4Ehvx98sSFK84trU/uui51ukUFkXB GWEA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=1mGVFqaIAF6icM2BZW2fT88+JHlmzbSUS/2gSjkW4k4=; b=pRDR+H3C/25OKxa/XcufZKx62I43db4OIQBDnIvdS6nfN5OdHEUQAbAU/9jRESquhY 2bhAZfDgAV1ONF/86YD8tVjLLwi64B/rPtg39l3CJZCA1BBwFM5JhxxemnLnA8g3tcG5 2buHt7LVdgpGsMLa7ej+MPRPs3YytOGKVIO6P2t4h4FKhqGWmjBD3hF4QadT8yn4dE2i iu+wXwH5R/0dZrNcgE49BGXMRinLbeHiFYp56H3xfgod1ET5Z6xv91DiT/S1EdUAa5/h Uy78LJdX9OaqMd36gj3Q799SPFfLMPUkNUQ1JV6ntwB9ZOF24udnJRTteZKNLhLljnyj XnJA== X-Gm-Message-State: APjAAAVF/87nQnuiSf4DlCgkO9tNwT7MhhC7hurSR5lejwAc/T4Qm5ha Qm2MzjyqJ+awKaPgCmdvpoVCaeAgLAPS4R7wN9Z8EA== X-Google-Smtp-Source: APXvYqyToGl9NtcMTErr2L4PnmTX+mZAleXWlAgMh7w6dxW6IogGN4wdEl4YR4I4VYE9E95OLpTQEBvJDwkfbo1rtfw= X-Received: by 2002:ac2:529c:: with SMTP id q28mr7860409lfm.123.1552097445091; Fri, 08 Mar 2019 18:10:45 -0800 (PST) MIME-Version: 1.0 References: <152390863222.19652.10310304989315386136.idtracker@ietfa.amsl.com> <472563ee-5fc3-655d-8e31-138cc774e608@acm.org> <97c561a7-c33a-6121-00c4-09cd11646b98@ericsson.com> <4b8f10f7-1eee-c8bc-d9ee-e3f18473de32@ericsson.com> In-Reply-To: <4b8f10f7-1eee-c8bc-d9ee-e3f18473de32@ericsson.com> From: Eric Rescorla Date: Fri, 8 Mar 2019 18:10:07 -0800 Message-ID: To: Gonzalo Camarillo Cc: "Gonzalo Salgueiro (gsalguei)" , Spencer Dawkins at IETF , Marc Petit-Huguenin , "tram-chairs@ietf.org" , "tram@ietf.org" , IESG , "draft-ietf-tram-stunbis@ietf.org" Content-Type: multipart/alternative; boundary="000000000000df312105839fd8d6" Archived-At: Subject: Re: [tram] Eric Rescorla's Discuss on draft-ietf-tram-stunbis-16: (with DISCUSS and COMMENT) X-BeenThere: tram@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "Discussing the creation of a Turn Revised And Modernized \(TRAM\) WG, which goal is to consolidate the various initiatives to update TURN and STUN." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 09 Mar 2019 02:10:54 -0000 --000000000000df312105839fd8d6 Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable Thanks for the call yesterday. First, here is what I recommend for the question of SHA-256 for password hashing: Note: the use of SHA-256 for password hashing does not meet modern standards, which are aimed at slowing down exhaustive password search by providing a relatively slow minimum time to compute the hash. Although better algorithms such as Argon2 [https://datatracker.ietf.org/doc/draft-irtf-cfrg-argon2/] are available, SHA-256 was chosen for consistency with RFC 7616. Now, WRT to the anti-downgrade situation. Here's a stylized version of the protocol: Client Server Hello -> <- Nonce, Algorithms HMAC-H1(H2(Password), Nonce, Algorithms, Msg) -> <- HMAC-H1(H2(Password), ...) Where H1 and H2 are the HMAC hash functions and the password hashing function respectively. Now, if we assume that the attacker does not know Password and that both H1 and H2 are secure, then it is not possible for the attacker to complete the transaction or modify any of the messages. Further, if the weakest joint algorithm that both sides support is still strong, then an attacker cannot influence the algorithm negotiation [0]. This property is provided by covering the algorithms under the MAC. However, my point is that this is not a very useful property. First, consider the case in which the implementations jointly support one strong algorithm and one weak algorithm. E.g., for H1 they support SHA-256 and the function Z(x) which always emits 0s. This allows an attacker to force the client and server into using Z, as follows. Client Attacker Server Hello -> Hello -> <- Nonce, Alg=3DSHA256, Z <- Nonce, Alg=3DZ Z(H2(Password), Nonce, Alg=3DZ)) -> Z(H2(Password), Nonce, Alg=3DSHA256, Z)) The issue here is that the only thing that the MAC is doing is authenticating the transaction, and if you can't trust it to do that, you can't trust it to authenticate the bid-down defense either. During our discussion, there was a suggestion that it was useful to have biddown defense to defend against weaknesses in H2. I don't think that that's true either. First, remember that the purpose of H2 is to prevent an attacker who recovers the password database from learning the user's true password. This is not about defending the server from attack (because knowing A1 is enough to attack the server) but about preventing the attacker from learning a password which might have been reused on another site. Now, it's also possible to brute-force the user's password just from the protocol transcript: if you capture the client's first message with MESSAGE-INTEGRITY or MESSAGE-INTEGRITY-SHA256, you can just keep trying passwords until you get the right MAC. Note that this is a passive attack. This is comparatively fast because SHA256 and MD5 are fast. A much stronger H2 (e.g., Argon) would help against this, but the problem now becomes that the client supports H2 =3D=3D MD5 (or SHA-256) and so even if the server supports Argon, the attacker can mount a bid-down defense in which it modifies the server's first message to just advertise MD5 and thus get the client to provide a suitable message. The bid-down defense would prevent the authentication transaction from completing, but that's not necessary for this attack because the attacker can just brute-force the password from the message it has. To make this work, you would need something like a PAKE, which this is not. Finally, you might think that the server has two databases, one which uses Argon and one which uses MD5 and it wants to gradually phase out the MD5 one, which it will do when no client authenticates with MD5 for a very long time. An anti-biddown defense would sort of work here, but the fact that the attacker would have to be active essentially indefinitely to keep the server confused about the state of clients -- and that the attacker can likely just get a valid account and then insist on using MD5 -- makes this a not very useful defense. I think this makes a pretty persuasive case that the bid-down defense isn't useful except in the formal "attacker cannot influence negotiation" sense. With that said, in the spirit of getting this done, I guess I'm willing to let this go if the security considerations make clear that it is only a very limited mechanism. -Ekr [0] This is principally about H1. As long as the H2 approximately evenly distributes the password over its range, then cryptographic strength is not important for this question. For instance, you could replace H2 with an identity function and still have a secure protocol. On Wed, Feb 20, 2019 at 4:03 AM Gonzalo Camarillo < gonzalo.camarillo@ericsson.com> wrote: > Thanks, Gonzalo! Please, let us know the agreed way forward once you > have the call. > > Cheers, > > Gonzalo > > On 19-Feb-19 20:05, Gonzalo Salgueiro (gsalguei) wrote: > > Hi Gonzalo - > > > > We have scheduled a conference call with Ekr, Simon, Marc and myself on > March 7th to discuss the last two remaining issues. Will update with > resolutions once this has occurred. > > > > Cheers, > > > > Gonzalo > > > > > > > >> On Feb 18, 2019, at 8:18 AM, Gonzalo Camarillo < > Gonzalo.Camarillo@ericsson.com> wrote: > >> > >> Hi Gonzalo S, > >> > >> what is the status of this one? > >> > >> Thanks, > >> > >> Gonzalo > >> > >> On 18-Jan-19 20:16, Gonzalo Salgueiro (gsalguei) wrote: > >>> Totally agree, Ekr. Marc and I are meeting to come up with a proposa= l > >>> but I do agree we need to have a call to get this put to bed once and > >>> for all. We=E2=80=99ll offer some potential dates in the next 2-3 we= eks. > >>> > >>> Cheers, > >>> > >>> Gonzalo > >>> > >>> > >>>> On Dec 26, 2018, at 8:05 PM, Eric Rescorla >>>> > wrote: > >>>> > >>>> We really need to bring this to a close before both Spencer and I st= ep > >>>> down, I should think. > >>>> > >>>> -Ekr > >>>> > >>>> > >>>> On Thu, Nov 22, 2018 at 4:30 AM Gonzalo Camarillo > >>>> >>>> > wrote: > >>>> > >>>> Eric, Spencer, thanks for the status update! > >>>> > >>>> Authors, could you please let us know when you plan to get to thi= s? > >>>> > >>>> Gonzalo > >>>> > >>>> On 19-Nov-18 23:04, Spencer Dawkins at IETF wrote: > >>>>> Hi, Gonzalo, > >>>>> On Mon, Nov 19, 2018 at 9:06 AM Eric Rescorla >>>> > >>>>> >> wrote: > >>>>> > >>>>> Not really. I have not received any response to my mail of > >>>> Oct 23. > >>>>> As before, I'm happy to have a call, but I believe we're > >>>> reaching > >>>>> the limits of what can be accomplished by email. > >>>>> > >>>>> > >>>>> Eric would know best (it being his Discuss), but this is also my > >>>>> understanding. > >>>>> > >>>>> I can add this to the agenda of the IESG informal telechat on > >>>> November > >>>>> 29, if there hasn't been a call before then, but I don't have a > >>>> reason > >>>>> to wait until then, if it's possible to talk sooner. > >>>>> > >>>>> Thanks, > >>>>> > >>>>> Spencer > >>>>> > >>>>> > >>>>> > >>>>> -Ekr > >>>>> > >>>>> > >>>>> On Mon, Nov 19, 2018 at 6:35 AM Gonzalo Camarillo > >>>>> >>>> > >>>>> >>>> >> wrote: > >>>>> > >>>>> Hi Spencer, > >>>>> > >>>>> what is the status of this? Are the authors and the docume= nt > >>>>> shepherd > >>>>> working with the relevant ADs on the discusses? > >>>>> > >>>>> > >>>> > https://datatracker.ietf.org/doc/draft-ietf-tram-stun-pmtud/ballot/ > >>>>> > >>>>> Cheers, > >>>>> > >>>>> Gonzalo > >>>>> > >>>>> On 24-Oct-18 16:40, Spencer Dawkins at IETF wrote: > >>>>> > Hi, Marc, > >>>>> > > >>>>> > On Wed, Oct 24, 2018 at 3:44 AM Marc Petit-Huguenin > >>>>> > >>>> > > >>>>> > > >>>> >>> wrote: > >>>>> > > >>>>> > Hi Spencer, > >>>>> > > >>>>> > I sent my answers to Eric Rescorla questions on > >>>> 2018-10-07 > >>>>> following > >>>>> > an in-person meeting with my co-author, but never > >>>> got a > >>>>> response > >>>>> > back. Because there was no change proposed by > >>>> Eric I went > >>>>> ahead and > >>>>> > published -19 a couple of weeks after that, with > >>>> the text > >>>>> agreed in > >>>>> > response to Adam's and Benjamin's comments. > >>>>> > > >>>>> > > >>>>> > >>>> https://www.ietf.org/mail-archive/web/tram/current/msg02635.htm= l > >>>>> > > >>>>> > > >>>>> > Ah - I wonder if that was what had happened. > >>>>> > > >>>>> > It sounds like you did the right thing, and that Eric > >>>> has now > >>>>> responded, > >>>>> > which is also the right thing to do. > >>>>> > > >>>>> > Thanks for helping me understand. > >>>>> > > >>>>> > Spencer > >>>>> > > >>>>> > > >>>>> > On 10/23/18 7:28 PM, Spencer Dawkins at IETF wrote: > >>>>> > > Hi, Marc, > >>>>> > > > >>>>> > > I see that a -19 has been submitted, but didn't > >>>> see a > >>>>> reply from > >>>>> > Eric in > >>>>> > > this thread. Do you think that you've converged? > >>>>> > > > >>>>> > > (I saw an offer of a conference call, so thought a= n > >>>>> out-of-band > >>>>> > > conversation might have happened) > >>>>> > > > >>>>> > > Thanks, > >>>>> > > > >>>>> > > Spencer > >>>>> > > > >>>>> > > On Sun, Oct 7, 2018 at 9:35 AM Marc Petit-Huguenin > >>>>> > > >>>> > > >>>>> > >>>> >>> wrote: > >>>>> > > > >>>>> > >> Hi Eric, > >>>>> > >> > >>>>> > >> Please see inline. > >>>>> > >> > >>>>> > >> On 09/10/2018 03:25 AM, Eric Rescorla wrote: > >>>>> > >>> On Sat, Sep 8, 2018 at 2:31 PM, Marc > >>>> Petit-Huguenin > >>>>> > > >>>> > > >>>>> > >>>> >>> > >>>>> > >>> wrote: > >>>>> > >>> > >>>>> > >>>> Hi Eric, > >>>>> > >>>> > >>>>> > >>>> Apologies for the delay in getting back to that= . > >>>>> > >>>> > >>>>> > >>>> I think that there is some misunderstanding > >>>> in what > >>>>> STUNbis is > >>>>> > trying to > >>>>> > >>>> do, so please see my comments inline. > >>>>> > >>>> > >>>>> > >>>> On 06/18/2018 10:43 AM, Eric Rescorla wrote: > >>>>> > >>>>> Hi folks, > >>>>> > >>>>> > >>>>> > >>>>> I've reviewed the new version, but I don't thi= nk > >>>>> that the biddown > >>>>> > >>>>> discussion makes much sense. > >>>>> > >>>>> > >>>>> > >>>>> To recap, there are two hashes here: > >>>>> > >>>>> > >>>>> > >>>>> - The hash which you use to store the > >>>> password with > >>>>> (currently > >>>>> > mostly > >>>>> > >>>> MD5) > >>>>> > >>>>> - The hash you use to compute the MAC > >>>> (currently SHA-1). > >>>>> > >>>>> > >>>>> > >>>>> First, let's stipulate that MD5 isn't a > >>>> great choice > >>>>> here, > >>>>> > though SHA-1 > >>>>> > >>>>> isn't a great choice > >>>>> > >>>>> either for pwd hashing You want Argon or the > >>>> like. > >>>>> With that said, > >>>>> > >>>> there's > >>>>> > >>>>> no sensible > >>>>> > >>>>> biddown attack on that hash because it's a > >>>>> per-server feature, > >>>>> > not a > >>>>> > >>>>> per-transaction > >>>>> > >>>>> feature. So, as long as the server has > >>>> MD5-hashed > >>>>> passwords, the > >>>>> > >>>> situation > >>>>> > >>>>> is bad. > >>>>> > >>>> > >>>>> > >>>> In no place in STUNbis we are proposing to > >>>> use SHA-1 > >>>>> for password > >>>>> > >>>> encryption, so I am not sure where that come > >>>> from. > >>>>> What we > >>>>> > propose is: > >>>>> > >>>> > >>>>> > >>> > >>>>> > >>> You're right, it's SHA-256, but my criticisms > >>>> apply > >>>>> equally there. > >>>>> > >> > >>>>> > >> SHA-256 was what the WG adopted. Our attempts > >>>> to add > >>>>> other passwords > >>>>> > >> encryption mechanisms were denied. It is true th= at > >>>>> Argon2 was > >>>>> > not in that > >>>>> > >> list (in our defense Argon2 was not known > >>>> before July > >>>>> 2015), but > >>>>> > I do not > >>>>> > >> see why the WG would have accepted that one > >>>> over the > >>>>> others. > >>>>> > Anyway it is > >>>>> > >> too late to fix this, as it is my understanding > >>>> that > >>>>> the WG does > >>>>> > not have > >>>>> > >> enough energy to reach consensus on a new passwor= d > >>>>> algorithm. > >>>>> > Someone can > >>>>> > >> just write a draft adding Argon2 as password > >>>>> encryption, as we > >>>>> > will have a > >>>>> > >> IANA registry for that. > >>>>> > >> > >>>>> > >>> > >>>>> > >>> > >>>>> > >>>> - Establish a registry for new password > >>>> algorithms > >>>>> (section > >>>>> > 18.5), so > >>>>> > >>>> algorithms like Argon2 could be added later > >>>> (but note > >>>>> that our own > >>>>> > >>>> proposals to add more password algorithms were > >>>>> rejected by the > >>>>> > working > >>>>> > >>>> group). > >>>>> > >>>> - Add a new password algorithm to that registry= , > >>>>> namely SHA-256. > >>>>> > >>>> - Register MD5 as an initial password > >>>> algorithm for > >>>>> backward > >>>>> > >> compatibility > >>>>> > >>>> purpose. > >>>>> > >>>> > >>>>> > >>>> As for the biddown protection itself, it is my > >>>>> recollection that it > >>>>> > >>>> happened more or less like that: > >>>>> > >>>> > >>>>> > >>>> > >>>>> > >>>> INT. MEETING ROOM - DAY > >>>>> > >>>> > >>>>> > >>>> One of the co-editors of STUNBis stands at the > >>>>> microphone: > >>>>> > >>>> > >>>>> > >>>> CO-EDITOR > >>>>> > >>>> We added SHA-256 protection fo= r > >>>>> passwords > >>>>> > >>>> in STUNBis. > >>>>> > >>>> > >>>>> > >>>> SOMEONE (V.O.) > >>>>> > >>>> As MD5 still need to be > >>>> supported, > >>>>> you need to add > >>>>> > >>>> protection for bid-down attack= s. > >>>>> > >>>> > >>>>> > >>>> CLOSE-UP on CO-EDITOR ROLLING HIS EYES > >>>>> > >>>> > >>>>> > >>>> CO-EDITOR > >>>>> > >>>> OK, I'll work on that. > >>>>> > >>>> > >>>>> > >>>> Four to eight months has passed. > >>>>> > >>>> > >>>>> > >>>> INT. ANOTHER MEETING ROOM - DAY > >>>>> > >>>> > >>>>> > >>>> The same co-editor of STUNBis stands at the > >>>> microphone: > >>>>> > >>>> > >>>>> > >>>> CO-EDITOR > >>>>> > >>>> We added a nice mechanism to > >>>> prevent > >>>>> bid-down > >>>>> > >>>> attacks on passwords. Any > >>>> comments? > >>>>> > >>>> > >>>>> > >>>> THE ROOM > >>>>> > >>>> (silence) > >>>>> > >>>> > >>>>> > >>>> CO-EDITOR > >>>>> > >>>> Moving on... > >>>>> > >>>> > >>>>> > >>> > >>>>> > >>> I don't see how any of this is relevant to my > >>>>> technical points > >>>>> > above. > >>>>> > >> > >>>>> > >> My point was that we, the co-editors, did not > >>>> decide on > >>>>> adding > >>>>> > bid-down > >>>>> > >> protection, someone asked us to do so and > >>>> no-one in the > >>>>> WG saw > >>>>> > any problem > >>>>> > >> with that. The reasons that person wanted that > >>>> are not > >>>>> known to > >>>>> > us but, as > >>>>> > >> you insist, here's one reason I can think of: > >>>>> > >> > >>>>> > >> It is a fact that, for operational reasons, a > >>>> password > >>>>> database > >>>>> > cannot be > >>>>> > >> re-encrypted at once. Also for operational > >>>> reasons, > >>>>> the MD5 password > >>>>> > >> cannot be immediately removed from the database > >>>> as soon > >>>>> the user > >>>>> > submitted > >>>>> > >> a new one. In fact, and for quite some time, bot= h > >>>>> encrypted > >>>>> > variants of > >>>>> > >> the same password may have to be kept in that > >>>> database, > >>>>> because a > >>>>> > single > >>>>> > >> user may use a mix of devices, some of them > >>>> that use an > >>>>> RFC 5389 > >>>>> > client, > >>>>> > >> some that use a STUNbis client. It is up to > >>>> the STUN > >>>>> server owner to > >>>>> > >> decide how long the migration to STUNbis will > >>>> take and > >>>>> when it > >>>>> > will be > >>>>> > >> acceptable to reject all RFC 5389 (i.e. MD5) > >>>> clients (that > >>>>> > migration time > >>>>> > >> can be purposely reduced to 0 seconds but > >>>> that's the > >>>>> choice and > >>>>> > >> responsibility of the owner of the server). > >>>>> > >> > >>>>> > >> Meanwhile we still need to be sure that if the ST= UN > >>>>> client is > >>>>> > implementing > >>>>> > >> STUNbis it unconditionally gets the additional > >>>>> protection of the new > >>>>> > >> password encryption algorithm. That's where > >>>> the biddown > >>>>> > protection kicks > >>>>> > >> in, by preventing an online attacker to have > >>>> the server > >>>>> > misidentifying a > >>>>> > >> STUNbis client as an RFC 5389 client, by > >>>> preventing an > >>>>> online > >>>>> > attacker to > >>>>> > >> have the client misidentifying a STUNbis server > >>>> as a > >>>>> RFC 5389 > >>>>> > server, and > >>>>> > >> having both them use the MD5 encrypted password > >>>> instead > >>>>> of the > >>>>> > SHA-256 > >>>>> > >> encrypted password, all of that easily done by > >>>>> stripping the > >>>>> > unprotected > >>>>> > >> 401 response of the new STUNbis PASSWORD-ALGORITH= MS > >>>>> attribute. > >>>>> > >> > >>>>> > >>> > >>>>> > >>> > >>>>> > >>> > >>>>> > >>>>> The second topic is the hash used to compute t= he > >>>>> MAC. However, > >>>>> > I don't > >>>>> > >>>> see > >>>>> > >>>>> how > >>>>> > >>>>> this gives you sensible biddown protection > >>>> because > >>>>> that hash > >>>>> > is also > >>>>> > >> used > >>>>> > >>>>> to compute > >>>>> > >>>>> MAC over the negotiation: an attacker who has > >>>>> compromised a > >>>>> > MAC which > >>>>> > >> the > >>>>> > >>>>> server > >>>>> > >>>>> supports will quite likely be able to forge > >>>> a MAC > >>>>> over the > >>>>> > transcript > >>>>> > >> as > >>>>> > >>>>> well. This is, > >>>>> > >>>>> I suppose, potentially useful as a defense > >>>> against > >>>>> some other > >>>>> > weakness > >>>>> > >>>>> (e.g., > >>>>> > >>>>> version #), but I don't really see how the > >>>> current > >>>>> design > >>>>> > helps against > >>>>> > >>>>> attacks on the > >>>>> > >>>>> MAC. > >>>>> > >>>> > >>>>> > >>>> There is no biddown attack protection for the > >>>> MAC, as > >>>>> stated in > >>>>> > Section > >>>>> > >>>> 16.3: > >>>>> > >>>> > >>>>> > >>>> "The bid-down protection mechanism described > >>>> in this > >>>>> document > >>>>> > is new, > >>>>> > >>>> and thus cannot currently protect against a > >>>> bid-down > >>>>> attack that > >>>>> > >>>> lowers the strength of the hash algorithm to > >>>> HMAC-SHA1." > >>>>> > >>>> > >>>>> > >>>> What we put in place is a plan for *future* > >>>> versions > >>>>> of STUN to get > >>>>> > >>>> biddown protection for the MAC. That's it, > >>>> no more, > >>>>> no less. > >>>>> > >>>> > >>>>> > >>> > >>>>> > >>> Yes, but I don't believe that this will > >>>> provide bid-down > >>>>> > protection for > >>>>> > >> the > >>>>> > >>> MAC in the future for the reasons I indicate > >>>> above. > >>>>> > >>> > >>>>> > >>> If you think this does something useful, > >>>> please show me an > >>>>> > example attack > >>>>> > >>> and how this fixes it. Note that it's not > >>>> generally > >>>>> useful to > >>>>> > just bid > >>>>> > >> down > >>>>> > >>> the MAC itself unless the MAC you bid down to > >>>> is weak > >>>>> enough to > >>>>> > exploit > >>>>> > >> in > >>>>> > >>> some other way. > >>>>> > >> > >>>>> > >> I do not know what weaknesses will be > >>>> discovered in the > >>>>> future. > >>>>> > I am also > >>>>> > >> pretty sure that the cost of not using that > >>>> mechanism > >>>>> is very > >>>>> > close to 0. > >>>>> > >> What I am sure of is that the cost of > >>>> reengineering a > >>>>> new biddown > >>>>> > >> protection mechanism if we ever need it will be > >>>> high. > >>>>> We already > >>>>> > went > >>>>> > >> through the pains of designing one for the passwo= rd > >>>>> algorithm, so > >>>>> > why not > >>>>> > >> extend it so it can be used in the aftermath of t= he > >>>>> next Snowden > >>>>> > facepalm > >>>>> > >> moment? > >>>>> > >> > >>>>> > >>> Again, happy to have a call to walk though > >>>> this if that > >>>>> > >>> helps. > >>>>> > >>> > >>>>> > >>> -Ekr > >>>>> > >>> > >>>>> > >>> > >>>>> > >>> > >>>>> > >>> > >>>>> > >>>>> > >>>>> > >>>>> You might think that there was a MAC which > >>>> was easier to > >>>>> > reverse to > >>>>> > >> find > >>>>> > >>>>> the original > >>>>> > >>>>> password, but the defense you have here > >>>> doesn't help > >>>>> with that > >>>>> > because > >>>>> > >>>> the > >>>>> > >>>>> on-path attacker can do a bid-down and use the > >>>>> client as a MAC > >>>>> > oracle > >>>>> > >> for > >>>>> > >>>>> any MAC the client supports. > >>>>> > >>>>> > >>>>> > >>>>> So, I still don't understand what this is > >>>> supposed > >>>>> to do. Happy to > >>>>> > >> have a > >>>>> > >>>>> call if you > >>>>> > >>>>> think that helps > >>>>> > >>>>> > >>>>> > >>>>> -Ekr > >>>>> > >>>>> > >>>>> > >>>>> > >>>>> > >>>>> > >>>>> > >>>>> > >>>>> > >>>>> On Mon, Jun 18, 2018 at 3:40 AM, Gonzalo > >>>> Camarillo < > >>>>> > >>>>> Gonzalo.Camarillo@ericsson.com > >>>> > >>>>> >>>> > > >>>>> > >>>> > >>>>> >>>> >>> wrote: > >>>>> > >>>>> > >>>>> > >>>>>> Marc, Eric, > >>>>> > >>>>>> > >>>>> > >>>>>> what is the status of this discussion? > >>>>> > >>>>>> > >>>>> > >>>>>> Thanks, > >>>>> > >>>>>> > >>>>> > >>>>>> Gonzalo > >>>>> > >>>>>> > >>>>> > >>>>>> On 04/05/2018 2:35 AM, Eric Rescorla wrote: > >>>>> > >>>>>>> > >>>>> > >>>>>>> > >>>>> > >>>>>>> On Mon, Apr 23, 2018 at 11:16 AM, Marc > >>>>> Petit-Huguenin < > >>>>> > >>>> petithug@acm.org > >>>> > > >>>>> > >>>> >> > >>>>> > >>>>>>> >>>> >>>> > > >>>>> > >>>> >>>> wrote: > >>>>> > >>>>>>> > >>>>> > >>>>>>> On 04/22/2018 05:22 PM, Eric Rescorla > >>>> wrote: > >>>>> > >>>>>>> > On Sun, Apr 22, 2018 at 2:02 PM, Marc > >>>>> Petit-Huguenin < > >>>>> > >>>>>> petithug@acm.org > >>>> > > >>>>> > >>>> >> > >>>>> > > >>>> > > >>>>> > >>>> >>>> > >>>>> > >>>>>>> > wrote: > >>>>> > >>>>>>> > > >>>>> > >>>>>>> >> > >>>>> > >>>>>>> >>>> For a request or indication > >>>> message, > >>>>> the agent > >>>>> > MUST > >>>>> > >>>>>> include the > >>>>> > >>>>>>> >>>> USERNAME, > >>>> MESSAGE-INTEGRITY-SHA256, and > >>>>> > >> MESSAGE-INTEGRITY > >>>>> > >>>>>>> >> attributes > >>>>> > >>>>>>> >>>> in the message unless the agen= t > >>>>> knows from an > >>>>> > external > >>>>> > >>>>>> indication > >>>>> > >>>>>>> >>>> which message integrity > >>>> algorithm is > >>>>> supported > >>>>> > by both > >>>>> > >>>>>> agents. In > >>>>> > >>>>>>> >>>> this case either > >>>> MESSAGE-INTEGRITY or > >>>>> > >>>>>> MESSAGE-INTEGRITY-SHA256 MUST > >>>>> > >>>>>>> >>>> be included in addition to > >>>>> USERNAME. The HMAC > >>>>> > for the > >>>>> > >>>>>> MESSAGE- > >>>>> > >>>>>>> >>> > >>>>> > >>>>>>> >>> This text appears to conflict with > >>>> S 7.3 of > >>>>> > 5245-bis, which > >>>>> > >>>> says: > >>>>> > >>>>>>> >> > >>>>> > >>>>>>> >> [text missing] > >>>>> > >>>>>>> >> > >>>>> > >>>>>>> >> Hmm, no, RFC245bis is still referenci= ng > >>>>> RFC5389, so the > >>>>> > >>>> procedure > >>>>> > >>>>>> for > >>>>> > >>>>>>> >> stunbis does not apply. > >>>>> > >>>>>>> >> > >>>>> > >>>>>>> > > >>>>> > >>>>>>> > I hear what you're saying, but > >>>> publishing two > >>>>> > documents at the > >>>>> > >>>>>> same time > >>>>> > >>>>>>> > which > >>>>> > >>>>>>> > make contrary recommendations about > >>>> the same > >>>>> basic > >>>>> > protocol is > >>>>> > >>>>>> un-good. > >>>>> > >>>>>>> > >>>>> > >>>>>>> Sure, but wouldn't it be simpler to have > >>>>> rfc5245bis > >>>>> > using stunbis > >>>>> > >>>>>>> and have them updating their text, > >>>> more than > >>>>> adding some > >>>>> > tortuous > >>>>> > >>>>>>> text in stunbis? > >>>>> > >>>>>>> > >>>>> > >>>>>>> > > >>>>> > >>>>>>> > > >>>>> > >>>>>>> >>> The STUN usage must specify whi= ch > >>>>> transport > >>>>> > protocol is > >>>>> > >>>>>> used, and > >>>>> > >>>>>>> >> how > >>>>> > >>>>>>> >>>> the agent determines the IP > >>>> address > >>>>> and port > >>>>> > of the > >>>>> > >>>>>> recipient. > >>>>> > >>>>>>> >>>> Section 8 describes a DNS-base= d > >>>>> method of > >>>>> > determining > >>>>> > >> the > >>>>> > >>>>>> IP > >>>>> > >>>>>>> >> address > >>>>> > >>>>>>> >>>> and port of a server that a > >>>> usage > >>>>> may elect to > >>>>> > use. > >>>>> > >> STUN > >>>>> > >>>>>> may be > >>>>> > >>>>>>> >> used > >>>>> > >>>>>>> >>>> with anycast addresses, but on= ly > >>>>> with UDP and > >>>>> > in usages > >>>>> > >>>>>> where > >>>>> > >>>>>>> >>>> authentication is not used. > >>>>> > >>>>>>> >>> > >>>>> > >>>>>>> >>> Why this restriction? You should > >>>> be able > >>>>> to use > >>>>> > anycast with > >>>>> > >>>>>> long-term > >>>>> > >>>>>>> >>> AUTH for (say) TURN. > >>>>> > >>>>>>> >> > >>>>> > >>>>>>> >> > >>>>> https://www.ietf.org/mail-archive/web/behave/current/ > >>>>> > >>>>>> msg03582.html > >>>>> > >>>>>>> > >>>>> >>>>> > >>>> msg03582.html> > >>>>> > >>>>>>> >> > >>>>> > >>>>>>> >> I think that the decision of > >>>> permitting Anycast > >>>>> > should be left > >>>>> > >>>> to > >>>>> > >>>>>> each > >>>>> > >>>>>>> >> STUN Usage. Basic STUN Usage does > >>>> not use > >>>>> > authentication and > >>>>> > >>>> use > >>>>> > >>>>>> only a > >>>>> > >>>>>>> >> one round trip for the Binding > >>>> transaction, so > >>>>> > Unicast can be > >>>>> > >>>>>> used. > >>>>> > >>>>>>> >> > >>>>> > >>>>>>> > > >>>>> > >>>>>>> >> OTOH, TURN and ICE should probably sa= y > >>>>> something > >>>>> > about that, > >>>>> > >> so > >>>>> > >>>> I > >>>>> > >>>>>> added a > >>>>> > >>>>>>> >> new bullet point in Section 13: > >>>>> > >>>>>>> >> > >>>>> > >>>>>>> >> o If Anycast addresses can be > >>>> used for > >>>>> the server > >>>>> > in case > >>>>> > >>>> TCP > >>>>> > >>>>>> or > >>>>> > >>>>>>> >> TLS-over-TCP, or > >>>> authentication are used. > >>>>> > >>>>>>> >> > >>>>> > >>>>>>> > > >>>>> > >>>>>>> > Are you leaving this text in? That see= ms > >>>>> very confusing. > >>>>> > >>>>>>> > >>>>> > >>>>>>> In isolation yes, but I think it makes > >>>> sense > >>>>> which the text > >>>>> > >> before > >>>>> > >>>>>>> the bullet points: > >>>>> > >>>>>>> > >>>>> > >>>>>>> A STUN usage defines how STUN is > >>>> actually > >>>>> utilized -- > >>>>> > when to > >>>>> > >>>> send > >>>>> > >>>>>>> requests, what to do with the > >>>> responses, > >>>>> and which > >>>>> > optional > >>>>> > >>>>>>> procedures defined here (or in an > >>>> extension > >>>>> to STUN) > >>>>> > are to be > >>>>> > >>>>>> used. > >>>>> > >>>>>>> A usage also defines: > >>>>> > >>>>>>> > >>>>> > >>>>>>> [...] > >>>>> > >>>>>>> > >>>>> > >>>>>>> o If Anycast addresses can be used > >>>> for the > >>>>> server in > >>>>> > case TCP > >>>>> > >>>> or > >>>>> > >>>>>>> TLS-over-TCP, or authentication > >>>> are used. > >>>>> > >>>>>>> > >>>>> > >>>>>>> > >>>>> > >>>>>>> What is the need for the restriction at all. > >>>>> > >>>>>>> > >>>>> > >>>>>>> > >>>>> > >>>>>>> > >>>>> > >>>>>>> >>>> transaction over UDP or > >>>>> DTLS-over-UDP is also > >>>>> > >> considered > >>>>> > >>>>>> failed if > >>>>> > >>>>>>> >>>> there has been a hard ICMP err= or > >>>>> [RFC1122]. For > >>>>> > >> example, > >>>>> > >>>>>> assuming > >>>>> > >>>>>>> >> an > >>>>> > >>>>>>> >>>> RTO of 500ms, requests would > >>>> be sent > >>>>> at times > >>>>> > 0 ms, 500 > >>>>> > >>>>>> ms, 1500 > >>>>> > >>>>>>> >> ms, > >>>>> > >>>>>>> >>>> 3500 ms, 7500 ms, 15500 ms, an= d > >>>>> 31500 ms. If the > >>>>> > >> client > >>>>> > >>>>>> has not > >>>>> > >>>>>>> >>>> received a response after > >>>> 39500 ms, > >>>>> the client > >>>>> > will > >>>>> > >>>>>> consider the > >>>>> > >>>>>>> >>>> transaction to have timed out. > >>>>> > >>>>>>> >>> > >>>>> > >>>>>>> >>> I note that these recommendations > >>>> now seem > >>>>> crazily > >>>>> > long. I > >>>>> > >>>>>> assume the > >>>>> > >>>>>>> >>> WG had consensus on this, but I > >>>> wanted to > >>>>> note it. > >>>>> > >>>>>>> >> > >>>>> > >>>>>>> >> Not just the WG, also the IESG that > >>>>> approved RFC 5389 > >>>>> > too as, > >>>>> > >>>> but > >>>>> > >>>>>> for the > >>>>> > >>>>>>> >> addition of "or DTLS-over-UDP", > >>>> this is the > >>>>> same text > >>>>> > than in > >>>>> > >>>> RFC > >>>>> > >>>>>> 5389. > >>>>> > >>>>>>> >> > >>>>> > >>>>>>> > > >>>>> > >>>>>>> > Yes, I know. My point is that while th= ey > >>>>> might have bee > >>>>> > >> sensible > >>>>> > >>>>>> when > >>>>> > >>>>>>> > 5389 was published they *now* seem > >>>> crazily > >>>>> long. Did > >>>>> > the WG > >>>>> > >>>>>> explicitly > >>>>> > >>>>>>> > decide not to update them? > >>>>> > >>>>>>> > >>>>> > >>>>>>> No, nobody ever suggested that there > >>>> was an > >>>>> issue there. > >>>>> > >>>>>>> > >>>>> > >>>>>>> > >>>>> > >>>>>>> OK, well, this seems like it should be > >>>> considered, > >>>>> then, > >>>>> > because this > >>>>> > >>>>>>> doesn't > >>>>> > >>>>>>> match modern practice. > >>>>> > >>>>>>> > >>>>> > >>>>>>> > >>>>> > >>>>>>> > >>>>> > >>>>>>> > This would be good to explain. > >>>>> > >>>>>>> > >>>>> > >>>>>>> New text: > >>>>> > >>>>>>> > >>>>> > >>>>>>> [...] > >>>>> > >>>>>>> containing the subjectAltName of that > >>>>> certificate. > >>>>> > The test > >>>>> > >> on > >>>>> > >>>>>> the > >>>>> > >>>>>>> MESSAGE-INTEGRITY-SHA256 attribute > >>>>> indicates that the > >>>>> > >>>> transaction > >>>>> > >>>>>> is > >>>>> > >>>>>>> authenticated and that the client > >>>>> implements this > >>>>> > >> specification > >>>>> > >>>>>> and > >>>>> > >>>>>>> so can process the ALTERNATE-DOMAIN > >>>> attribute. > >>>>> > >>>>>>> > >>>>> > >>>>>>> > >>>>> > >>>>>>> All right. > >>>>> > >>>>>>> > >>>>> > >>>>>>> > >>>>> > >>>>>>> > > >>>>> > >>>>>>> > > >>>>> > >>>>>>> >>>> o What authentication and > >>>>> message-integrity > >>>>> > mechanisms > >>>>> > >>>>>> are used. > >>>>> > >>>>>>> >>>> > >>>>> > >>>>>>> >>>> o The considerations around > >>>> manual vs. > >>>>> > automatic key > >>>>> > >>>>>> derivation > >>>>> > >>>>>>> >> for > >>>>> > >>>>>>> >>>> the integrity mechanism, as > >>>>> discussed in > >>>>> > [RFC4107]. > >>>>> > >>>>>>> >>>> > >>>>> > >>>>>>> >>>> o What mechanisms are used to > >>>>> distinguish STUN > >>>>> > >> messages > >>>>> > >>>>>> from other > >>>>> > >>>>>>> >>> > >>>>> > >>>>>>> >>> Why is this required? It seems > >>>> like that's > >>>>> a generic > >>>>> > STUN > >>>>> > >>>>>> feature. > >>>>> > >>>>>>> >> > >>>>> > >>>>>>> >> That text is identical to the text > >>>> in RFC > >>>>> 5389. RFC > >>>>> > 5764/7983 > >>>>> > >>>> is > >>>>> > >>>>>> one such > >>>>> > >>>>>>> >> mechanism, but there is nothing that > >>>>> prevent another > >>>>> > protocol > >>>>> > >>>>>> stack to use > >>>>> > >>>>>>> >> a different mechanism (inference, > >>>> shim, etc...) > >>>>> > >>>>>>> >> > >>>>> > >>>>>>> > > >>>>> > >>>>>>> > But ultimately no matter what the > >>>> other protocol > >>>>> > provides for > >>>>> > >>>>>> demux, STUN > >>>>> > >>>>>>> > has its > >>>>> > >>>>>>> > own demux. > >>>>> > >>>>>>> > >>>>> > >>>>>>> In fact I think that the reason for > >>>> that item > >>>>> was because > >>>>> > >>>>>>> FINGERPRINT can also be used to demux ST= UN > >>>>> traffic, but > >>>>> > it is > >>>>> > >>>>>>> optional. So an STUN Usage needs to > >>>> tell if > >>>>> FINGERPRINT is > >>>>> > >>>>>>> mandatory (like in ICE). > >>>>> > >>>>>>> > >>>>> > >>>>>>> > >>>>> > >>>>>>> This should be explained. > >>>>> > >>>>>>> > >>>>> > >>>>>>> > >>>>> > >>>>>>> >>> > >>>>> > >>>>>>> >>>> that is not readily subject to > >>>>> offline dictionary > >>>>> > >>>> attacks. > >>>>> > >>>>>>> >>>> Protection of the channel > >>>> itself, > >>>>> using TLS or > >>>>> > DTLS, > >>>>> > >>>>>> mitigates > >>>>> > >>>>>>> >> these > >>>>> > >>>>>>> >>>> attacks. > >>>>> > >>>>>>> >>>> > >>>>> > >>>>>>> >>>> STUN supports both > >>>> MESSAGE-INTEGRITY and > >>>>> > >>>>>>> MESSAGE-INTEGRITY-SHA256, > >>>>> > >>>>>>> >>>> which is subject to bid down > >>>> attacks > >>>>> by an on-path > >>>>> > >>>>>> attacker. > >>>>> > >>>>>>> >>> > >>>>> > >>>>>>> >>> By an on-path attacker who can forge > >>>>> HMAC-SHA1 in > >>>>> > real-time? > >>>>> > >>>>>>> That's a > >>>>> > >>>>>>> >>> pretty serious adversary, so you > >>>> should > >>>>> clarify here > >>>>> > >>>>>>> >>> > >>>>> > >>>>>>> >> > >>>>> > >>>>>>> >> New text: > >>>>> > >>>>>>> >> > >>>>> > >>>>>>> >> STUN supports both > >>>> MESSAGE-INTEGRITY and > >>>>> > >>>>>> MESSAGE-INTEGRITY-SHA256, > >>>>> > >>>>>>> >> which is subject to bid down > >>>> attacks by > >>>>> an on-path > >>>>> > attacker > >>>>> > >>>>>> that > >>>>> > >>>>>>> >> would strip the > >>>> MESSAGE-INTEGRITY-SHA256 > >>>>> attribute > >>>>> > leaving > >>>>> > >>>>>>> only the > >>>>> > >>>>>>> >> MESSAGE-INTEGRITY attribute and > >>>>> exploiting a potential > >>>>> > >>>>>>> vulnerability. > >>>>> > >>>>>>> >> Protection of the channel > >>>> itself, using > >>>>> TLS or DTLS, > >>>>> > >>>> mitigates > >>>>> > >>>>>>> these > >>>>> > >>>>>>> >> attacks. Timely removal of the > >>>> support of > >>>>> > >> MESSAGE-INTEGRITY > >>>>> > >>>>>> in a > >>>>> > >>>>>>> >> future version of STUN is necessar= y. > >>>>> > >>>>>>> >> > >>>>> > >>>>>>> > > >>>>> > >>>>>>> > I still don't understand the > >>>> capabilities > >>>>> you seem to > >>>>> > believe > >>>>> > >> the > >>>>> > >>>>>>> attacker > >>>>> > >>>>>>> > has. > >>>>> > >>>>>>> > Can you describe the exact attack. > >>>>> > >>>>>>> > > >>>>> > >>>>>>> > >>>>> > >>>>>>> 1. Vulnerability is found in HMAC-SHA1 > >>>>> > >>>>>>> 2. Client Alice still supports M-I and > >>>>> M-I-256, does not > >>>>> > know > >>>>> > >> what > >>>>> > >>>>>>> version of STUN server Bob supports and = so > >>>>> send both. > >>>>> > >>>>>>> 3. On-path attacker removes M-I-256. > >>>>> > >>>>>>> 5. stunbis server Bob thinks that > >>>> Alice is an > >>>>> RFC 5389 > >>>>> > client and > >>>>> > >>>>>>> continue with that protocol. > >>>>> > >>>>>>> > >>>>> > >>>>>>> > >>>>> > >>>>>>> This seems like an extremely weak attack. In > >>>>> general, any > >>>>> > protocol of > >>>>> > >>>>>>> this type is as strong > >>>>> > >>>>>>> as the weakest integrity algorithm it > >>>> supports, so > >>>>> it's not > >>>>> > that the > >>>>> > >>>>>>> protocol has a downgrade > >>>>> > >>>>>>> attack, but rather that the minimum algorith= m > >>>>> supported is > >>>>> > one you > >>>>> > >>>> don't > >>>>> > >>>>>>> trust as much > >>>>> > >>>>>>> as you might like. > >>>>> > >>>>>>> > >>>>> > >>>>>>> -Ekr > >>>>> > >>>>>>> > >>>>> > >>>>>>> > >>>>> > >>>>>>> -- > >>>>> > >> > >>>>> > > >>>>> > > >>>>> > > >>>>> > -- > >>>>> > Marc Petit-Huguenin > >>>>> > Email: marc@petit-huguenin.org > >>>> > >>>>> >>>> > >>>> > >>>>> >>>> >> > >>>>> > Blog: https://marc.petit-huguenin.org > >>>> > >>>>> > Profile: https://www.linkedin.com/in/petithug > >>>>> > > >>>>> > >>>> > >>> > > > --000000000000df312105839fd8d6 Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable
Thanks for the call yesterday.

Fir= st, here is what I recommend for the question of SHA-256 for password
ha= shing:

=C2=A0 Note: the use of SHA-256 for password hashing does not= meet modern
=C2=A0 standards, which are aimed at slowing down exhaustiv= e password search
=C2=A0 by providing a relatively slow minimum time to = compute the
=C2=A0 hash. Although better algorithms such as Argon2
= =C2=A0 [https://datatracker.ietf.org/doc/draft-irtf-cfrg-argon2/] are
=C2= =A0 available, SHA-256 was chosen for consistency with RFC 7616.

Now, WRT to the anti-downgrade situation. Here's a stylized versionof the protocol:

Client=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0= =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2= =A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0= =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2= =A0=C2=A0=C2=A0=C2=A0=C2=A0 Server

Hello ->
=C2=A0=C2=A0=C2=A0= =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2= =A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0= =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2= =A0 <- Nonce, Algorithms
HMAC-H1(H2(Password), Nonce, Algorithms, Msg= ) ->
=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2= =A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0= =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 <- HMAC-H1(H2(Pas= sword), ...)

Where H1 and H2 are the HMAC hash functions and the pas= sword hashing
function respectively.

Now, if we assume that the a= ttacker does not know Password and that
both H1 and H2 are secure, then = it is not possible for the attacker to
complete the transaction or modif= y any of the messages. Further, if
the weakest joint algorithm that both= sides support is still strong,
then an attacker cannot influence the al= gorithm negotiation [0]. This
property is provided by covering the algor= ithms under the MAC.

However, my point is that this is not a very us= eful property.

First, consider the case in which the implementations= jointly support
one strong algorithm and one weak algorithm. E.g., for = H1 they support
SHA-256 and the function Z(x) which always emits 0s. Thi= s allows
an attacker to force the client and server into using Z, as fol= lows.


Client=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2= =A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0= Attacker=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0= =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 Server

Hello ->
=C2= =A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0= =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2= =A0=C2=A0 Hello ->
=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0= =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2= =A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0= =C2=A0=C2=A0=C2=A0=C2=A0 <- Nonce, Alg=3DSHA256, Z
=C2=A0=C2=A0=C2=A0= =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 &l= t;- Nonce, Alg=3DZ
Z(H2(Password), Nonce, Alg=3DZ)) ->
=C2=A0=C2= =A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0= =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 Z(H2(Password), Nonc= e, Alg=3DSHA256, Z))

The issue here is that the only thing that the = MAC is doing is
authenticating the transaction, and if you can't tru= st it to do that,
you can't trust it to authenticate the bid-down de= fense either.


During our discussion, there was a suggestion that= it was useful to
have biddown defense to defend against weaknesses in H= 2. I don't think
that that's true either. First, remember that t= he purpose of H2 is to
prevent an attacker who recovers the password dat= abase from learning
the user's true password. This is not about defe= nding the server from
attack (because knowing A1 is enough to attack the= server) but about
preventing the attacker from learning a password whic= h might have been
reused on another site.

Now, it's also poss= ible to brute-force the user's password just from
the protocol trans= cript: if you capture the client's first message
with MESSAGE-INTEGR= ITY or MESSAGE-INTEGRITY-SHA256, you can just keep
trying passwords unti= l you get the right MAC. Note that this is a
passive attack. This is com= paratively fast because SHA256 and MD5 are
fast.

A much stronger = H2 (e.g., Argon) would help against this, but the
problem now becomes th= at the client supports H2 =3D=3D MD5 (or SHA-256)
and so even if the ser= ver supports Argon, the attacker can mount a
bid-down defense in which i= t modifies the server's first message to
just advertise MD5 and thus= get the client to provide a suitable
message. The bid-down defense woul= d prevent the authentication
transaction from completing, but that's= not necessary for this
attack because the attacker can just brute-force= the password from
the message it has. To make this work, you would need= something
like a PAKE, which this is not.

Finally, you might thi= nk that the server has two databases, one
which uses Argon and one which= uses MD5 and it wants to gradually
phase out the MD5 one, which it will= do when no client authenticates
with MD5 for a very long time. An anti-= biddown defense would sort
of work here, but the fact that the attacker = would have to be
active essentially indefinitely to keep the server conf= used about
the state of clients -- and that the attacker can likely just=
get a valid account and then insist on using MD5 -- makes this a
not= very useful defense.

I think this makes a pretty persuasive case th= at the bid-down defense
isn't useful except in the formal "atta= cker cannot influence
negotiation" sense. With that said, in the sp= irit of getting this done, I guess
I'm willing to let this go if the= security considerations make clear
that it is only a very limited mecha= nism.

-Ekr


[0] This is principally about H1. As long as t= he H2 approximately
evenly distributes the password over its range, then= cryptographic
strength is not important for this question. For instance= , you
could replace H2 with an identity function and still have a
sec= ure protocol.






On Wed, Feb 20, 2019 at 4:03 AM = Gonzalo Camarillo <gon= zalo.camarillo@ericsson.com> wrote:
Thanks, Gonzalo! Please, let us know the agreed = way forward once you
have the call.

Cheers,

Gonzalo

On 19-Feb-19 20:05, Gonzalo Salgueiro (gsalguei) wrote:
> Hi Gonzalo -
>
> We have scheduled a conference call with Ekr, Simon, Marc and myself o= n March 7th to discuss the last two remaining issues.=C2=A0 Will update wit= h resolutions once this has occurred.
>
> Cheers,
>
> Gonzalo
>
>
>
>> On Feb 18, 2019, at 8:18 AM, Gonzalo Camarillo <Gonzalo.Camarillo@eric= sson.com> wrote:
>>
>> Hi Gonzalo S,
>>
>> what is the status of this one?
>>
>> Thanks,
>>
>> Gonzalo
>>
>> On 18-Jan-19 20:16, Gonzalo Salgueiro (gsalguei) wrote:
>>> Totally agree, Ekr.=C2=A0 Marc and I are meeting to come up wi= th a proposal
>>> but I do agree we need to have a call to get this put to bed o= nce and
>>> for all.=C2=A0 We=E2=80=99ll offer some potential dates in the= next 2-3 weeks.
>>>
>>> Cheers,
>>>
>>> Gonzalo
>>>
>>>
>>>> On Dec 26, 2018, at 8:05 PM, Eric Rescorla <ekr@rtfm.com
>>>> <mailto:ekr@rtfm.com>> wrote:
>>>>
>>>> We really need to bring this to a close before both Spence= r and I step
>>>> down, I should think.
>>>>
>>>> -Ekr
>>>>
>>>>
>>>> On Thu, Nov 22, 2018 at 4:30 AM Gonzalo Camarillo
>>>> <gonzalo.camarillo@ericsson.com
>>>> <mailto:gonzalo.camarillo@ericsson.com>> wrote:
>>>>
>>>>=C2=A0 =C2=A0 Eric, Spencer, thanks for the status update!<= br> >>>>
>>>>=C2=A0 =C2=A0 Authors, could you please let us know when yo= u plan to get to this?
>>>>
>>>>=C2=A0 =C2=A0 Gonzalo
>>>>
>>>>=C2=A0 =C2=A0 On 19-Nov-18 23:04, Spencer Dawkins at IETF w= rote:
>>>>> Hi, Gonzalo,
>>>>> On Mon, Nov 19, 2018 at 9:06 AM Eric Rescorla <ekr@rtfm.com
>>>>=C2=A0 =C2=A0 <mailto:ekr@rtfm.com>
>>>>> <mailto:ekr@rtfm.com <mailto:ekr@rtfm.com>>> wrote:
>>>>>
>>>>>=C2=A0 =C2=A0 =C2=A0 Not really. I have not received an= y response to my mail of
>>>>=C2=A0 =C2=A0 Oct 23.
>>>>>=C2=A0 =C2=A0 =C2=A0 As before, I'm happy to have a= call, but I believe we're
>>>>=C2=A0 =C2=A0 reaching
>>>>>=C2=A0 =C2=A0 =C2=A0 the limits of what can be accompli= shed by email.
>>>>>
>>>>>
>>>>> Eric would know best (it being his Discuss), but this = is also my
>>>>> understanding.
>>>>>
>>>>> I can add this to the agenda of the IESG informal tele= chat on
>>>>=C2=A0 =C2=A0 November
>>>>> 29, if there hasn't been a call before then, but I= don't have a
>>>>=C2=A0 =C2=A0 reason
>>>>> to wait until then, if it's possible to talk soone= r.
>>>>>
>>>>> Thanks,
>>>>>
>>>>> Spencer
>>>>>=C2=A0
>>>>>
>>>>>
>>>>>=C2=A0 =C2=A0 =C2=A0 -Ekr
>>>>>
>>>>>
>>>>>=C2=A0 =C2=A0 =C2=A0 On Mon, Nov 19, 2018 at 6:35 AM Go= nzalo Camarillo
>>>>>=C2=A0 =C2=A0 =C2=A0 <gonzalo.camarillo@ericsson.com >>>>=C2=A0 =C2=A0 <mailto:gonzalo.camarillo@ericsson.com> >>>>>=C2=A0 =C2=A0 =C2=A0 <mailto:gonzalo.camarillo@ericsson.com=
>>>>=C2=A0 =C2=A0 <mailto:gonzalo.camarillo@ericsson.com>>= ;> wrote:
>>>>>
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 Hi Spencer,
>>>>>
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 what is the status o= f this? Are the authors and the document
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 shepherd
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 working with the rel= evant ADs on the discusses?
>>>>>
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0
>>>>=C2=A0 =C2=A0 =C2=A0https://datatracker.ietf.org/doc/draft-ietf-tram-stun-pmtud/ballot/<= br> >>>>>
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 Cheers,
>>>>>
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 Gonzalo
>>>>>
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 On 24-Oct-18 16:40, = Spencer Dawkins at IETF wrote:
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 > Hi, Marc,
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 > On Wed, Oct 24,= 2018 at 3:44 AM Marc Petit-Huguenin
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 <petithug@acm.org <mailto:petithug@acm.org> >>>>=C2=A0 =C2=A0 <mailto:petithug@acm.org <mailto:petithug@acm.org>>
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 > <mailto:petithug@acm.org <= mailto:petithug@acm.o= rg>
>>>>=C2=A0 =C2=A0 <mailto:petithug@acm.org <mailto:petithug@acm.org>>>> wrote:<= br> >>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0Hi Spencer,
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0I sent my answers to Eric Rescorla questions on
>>>>=C2=A0 =C2=A0 2018-10-07
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 following
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0an in-person meeting with my co-author, but never
>>>>=C2=A0 =C2=A0 got a
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 response
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0back.=C2=A0 Because there was no change proposed by
>>>>=C2=A0 =C2=A0 Eric I went
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 ahead and
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0published -19 a couple of weeks after that, with
>>>>=C2=A0 =C2=A0 the text
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 agreed in
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0response to Adam's and Benjamin's comments.
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 >>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0
>>>>=C2=A0 =C2=A0 =C2=A0 https://www.ietf.org/mail-archive/web/tram/current/msg02635.html
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 > Ah - I wonder i= f that was what had happened.
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 > It sounds like = you did the right thing, and that Eric
>>>>=C2=A0 =C2=A0 has now
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 responded,
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 > which is also t= he right thing to do.
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 > Thanks for help= ing me understand.
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 > Spencer
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0On 10/23/18 7:28 PM, Spencer Dawkins at IETF wrote:
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0> Hi, Marc,
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0> I see that a -19 has been submitted, but didn't
>>>>=C2=A0 =C2=A0 see a
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 reply from
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0Eric in
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0> this thread. Do you think that you've converged?
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0> (I saw an offer of a conference call, so thought an
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 out-of-band
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0> conversation might have happened)
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0> Thanks,
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0> Spencer
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0> On Sun, Oct 7, 2018 at 9:35 AM Marc Petit-Huguenin
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0<petithug@ac= m.org <mailto:= petithug@acm.org>
>>>>=C2=A0 =C2=A0 <mailto:petithug@acm.org <mailto:petithug@acm.org>>
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 <mailto:petithug@acm.org <mai= lto:petithug@acm.org<= /a>>
>>>>=C2=A0 =C2=A0 <mailto:petithug@acm.org <mailto:petithug@acm.org>>>> wrote:<= br> >>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>> Hi Eric,
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>> Please see inline.
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>> On 09/10/2018 03:25 AM, Eric Rescorla wrote:
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>> On Sat, Sep 8, 2018 at 2:31 PM, Marc
>>>>=C2=A0 =C2=A0 Petit-Huguenin
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0<petithug@ac= m.org <mailto:= petithug@acm.org>
>>>>=C2=A0 =C2=A0 <mailto:petithug@acm.org <mailto:petithug@acm.org>>
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 <mailto:petithug@acm.org <mai= lto:petithug@acm.org<= /a>>
>>>>=C2=A0 =C2=A0 <mailto:petithug@acm.org <mailto:petithug@acm.org>>>>
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>> wrote:
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>> Hi Eric,
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>> Apologies for the delay in getting back to that.
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>> I think that there is some misunderstanding
>>>>=C2=A0 =C2=A0 in what
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 STUNbis is
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0trying to
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>> do, so please see my comments inline.
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>> On 06/18/2018 10:43 AM, Eric Rescorla wrote:
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>> Hi folks,
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>> I've reviewed the new version, but I don'= ;t think
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 that the biddown
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>> discussion makes much sense.
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>> To recap, there are two hashes here:
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>> - The hash which you use to store the
>>>>=C2=A0 =C2=A0 password with
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 (currently
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0mostly
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>> MD5)
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>> - The hash you use to compute the MAC
>>>>=C2=A0 =C2=A0 (currently SHA-1).
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>> First, let's stipulate that MD5 isn't a<= br> >>>>=C2=A0 =C2=A0 great choice
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 here,
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0though SHA-1
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>> isn't a great choice
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>> either for pwd hashing You want Argon or the
>>>>=C2=A0 =C2=A0 like.
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 With that said,
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>> there's
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>> no sensible
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>> biddown attack on that hash because it's a >>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 per-server feature,<= br> >>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0not a
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>> per-transaction
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>> feature. So, as long as the server has
>>>>=C2=A0 =C2=A0 MD5-hashed
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 passwords, the
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>> situation
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>> is bad.
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>> In no place in STUNbis we are proposing to
>>>>=C2=A0 =C2=A0 use SHA-1
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 for password
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>> encryption, so I am not sure where that come
>>>>=C2=A0 =C2=A0 from.
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 What we
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0propose is:
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>> You're right, it's SHA-256, but my criticisms >>>>=C2=A0 =C2=A0 apply
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 equally there.
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>> SHA-256 was what the WG adopted.=C2=A0 Our attempts
>>>>=C2=A0 =C2=A0 to add
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 other passwords
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>> encryption mechanisms were denied.=C2=A0 It is true that
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 Argon2 was
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0not in that
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>> list (in our defense Argon2 was not known
>>>>=C2=A0 =C2=A0 before July
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 2015), but
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0I do not
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>> see why the WG would have accepted that one
>>>>=C2=A0 =C2=A0 over the
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 others.
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0Anyway it is
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>> too late to fix this, as it is my understanding
>>>>=C2=A0 =C2=A0 that
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 the WG does
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0not have
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>> enough energy to reach consensus on a new password
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 algorithm.
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0Someone can
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>> just write a draft adding Argon2 as password
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 encryption, as we >>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0will have a
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>> IANA registry for that.
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>> - Establish a registry for new password
>>>>=C2=A0 =C2=A0 algorithms
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 (section
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A018.5), so
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>> algorithms like Argon2 could be added later
>>>>=C2=A0 =C2=A0 (but note
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 that our own
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>> proposals to add more password algorithms were
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 rejected by the
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0working
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>> group).
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>> - Add a new password algorithm to that registry,
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 namely SHA-256.
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>> - Register MD5 as an initial password
>>>>=C2=A0 =C2=A0 algorithm for
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 backward
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>> compatibility
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>> purpose.
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>> As for the biddown protection itself, it is my
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 recollection that it=
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>> happened more or less like that:
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>> INT. MEETING ROOM - DAY
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>> One of the co-editors of STUNBis stands at the
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 microphone:
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2= =A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 CO-EDITOR
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2= =A0 =C2=A0 We added SHA-256 protection for
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 passwords
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2= =A0 =C2=A0 in STUNBis.
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2= =A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 SOMEONE (V.O.)
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2= =A0 =C2=A0 As MD5 still need to be
>>>>=C2=A0 =C2=A0 supported,
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 you need to add
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2= =A0 =C2=A0 protection for bid-down attacks.
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>> CLOSE-UP on CO-EDITOR ROLLING HIS EYES
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2= =A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 CO-EDITOR
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2= =A0 =C2=A0 OK, I'll work on that.
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>> Four to eight months has passed.
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>> INT. ANOTHER MEETING ROOM - DAY
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>> The same co-editor of STUNBis stands at the
>>>>=C2=A0 =C2=A0 microphone:
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2= =A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 CO-EDITOR
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2= =A0 =C2=A0 We added a nice mechanism to
>>>>=C2=A0 =C2=A0 prevent
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 bid-down
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2= =A0 =C2=A0 attacks on passwords.=C2=A0 Any
>>>>=C2=A0 =C2=A0 comments?
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2= =A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 THE ROOM
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2= =A0 =C2=A0 (silence)
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2= =A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 CO-EDITOR
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2= =A0 =C2=A0 Moving on...
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>> I don't see how any of this is relevant to my
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 technical points
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0above.
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>> My point was that we, the co-editors, did not
>>>>=C2=A0 =C2=A0 decide on
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 adding
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0bid-down
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>> protection, someone asked us to do so and
>>>>=C2=A0 =C2=A0 no-one in the
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 WG saw
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0any problem
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>> with that.=C2=A0 The reasons that person wanted that
>>>>=C2=A0 =C2=A0 are not
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 known to
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0us but, as
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>> you insist, here's one reason I can think of:
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>> It is a fact that, for operational reasons, a
>>>>=C2=A0 =C2=A0 password
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 database
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0cannot be
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>> re-encrypted at once.=C2=A0 Also for operational
>>>>=C2=A0 =C2=A0 reasons,
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 the MD5 password
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>> cannot be immediately removed from the database
>>>>=C2=A0 =C2=A0 as soon
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 the user
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0submitted
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>> a new one.=C2=A0 In fact, and for quite some time, both
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 encrypted
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0variants of
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>> the same password may have to be kept in that
>>>>=C2=A0 =C2=A0 database,
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 because a
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0single
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>> user may use a mix of devices, some of them
>>>>=C2=A0 =C2=A0 that use an
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 RFC 5389
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0client,
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>> some that use a STUNbis client.=C2=A0 It is up to
>>>>=C2=A0 =C2=A0 the STUN
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 server owner to
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>> decide how long the migration to STUNbis will
>>>>=C2=A0 =C2=A0 take and
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 when it
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0will be
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>> acceptable to reject all RFC 5389 (i.e. MD5)
>>>>=C2=A0 =C2=A0 clients (that
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0migration time
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>> can be purposely reduced to 0 seconds but
>>>>=C2=A0 =C2=A0 that's the
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 choice and
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>> responsibility of the owner of the server).
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>> Meanwhile we still need to be sure that if the STUN
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 client is
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0implementing
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>> STUNbis it unconditionally gets the additional
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 protection of the ne= w
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>> password encryption algorithm.=C2=A0 That's where
>>>>=C2=A0 =C2=A0 the biddown
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0protection kicks
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>> in, by preventing an online attacker to have
>>>>=C2=A0 =C2=A0 the server
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0misidentifying a
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>> STUNbis client as an RFC 5389 client, by
>>>>=C2=A0 =C2=A0 preventing an
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 online
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0attacker to
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>> have the client misidentifying a STUNbis server
>>>>=C2=A0 =C2=A0 as a
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 RFC 5389
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0server, and
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>> having both them use the MD5 encrypted password
>>>>=C2=A0 =C2=A0 instead
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 of the
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0SHA-256
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>> encrypted password, all of that easily done by
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 stripping the
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0unprotected
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>> 401 response of the new STUNbis PASSWORD-ALGORITHMS
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 attribute.
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>> The second topic is the hash used to compute the=
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 MAC. However,
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0I don't
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>> see
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>> how
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>> this gives you sensible biddown protection
>>>>=C2=A0 =C2=A0 because
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 that hash
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0is also
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>> used
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>> to compute
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>> MAC over the negotiation: an attacker who has >>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 compromised a
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0MAC which
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>> the
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>> server
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>> supports will quite likely be able to forge
>>>>=C2=A0 =C2=A0 a MAC
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 over the
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0transcript
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>> as
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>> well. This is,
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>> I suppose, potentially useful as a defense
>>>>=C2=A0 =C2=A0 against
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 some other
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0weakness
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>> (e.g.,
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>> version #), but I don't really see how the >>>>=C2=A0 =C2=A0 current
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 design
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0helps against
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>> attacks on the
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>> MAC.
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>> There is no biddown attack protection for the
>>>>=C2=A0 =C2=A0 MAC, as
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 stated in
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0Section
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>> 16.3:
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>> "The bid-down protection mechanism described >>>>=C2=A0 =C2=A0 in this
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 document
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0is new,
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>=C2=A0 and thus cannot currently protect against a >>>>=C2=A0 =C2=A0 bid-down
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 attack that
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>=C2=A0 lowers the strength of the hash algorithm to >>>>=C2=A0 =C2=A0 HMAC-SHA1."
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>> What we put in place is a plan for *future*
>>>>=C2=A0 =C2=A0 versions
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 of STUN to get
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>> biddown protection for the MAC.=C2=A0 That's it,=
>>>>=C2=A0 =C2=A0 no more,
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 no less.
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>> Yes, but I don't believe that this will
>>>>=C2=A0 =C2=A0 provide bid-down
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0protection for
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>> the
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>> MAC in the future for the reasons I indicate
>>>>=C2=A0 =C2=A0 above.
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>> If you think this does something useful,
>>>>=C2=A0 =C2=A0 please show me an
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0example attack
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>> and how this fixes it. Note that it's not
>>>>=C2=A0 =C2=A0 generally
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 useful to
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0just bid
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>> down
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>> the MAC itself unless the MAC you bid down to
>>>>=C2=A0 =C2=A0 is weak
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 enough to
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0exploit
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>> in
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>> some other way.
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>> I do not know what weaknesses will be
>>>>=C2=A0 =C2=A0 discovered in the
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 future.
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0I am also
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>> pretty sure that the cost of not using that
>>>>=C2=A0 =C2=A0 mechanism
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 is very
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0close to 0.
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>> What I am sure of is that the cost of
>>>>=C2=A0 =C2=A0 reengineering a
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 new biddown
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>> protection mechanism if we ever need it will be
>>>>=C2=A0 =C2=A0 high.
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 We already
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0went
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>> through the pains of designing one for the password
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 algorithm, so
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0why not
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>> extend it so it can be used in the aftermath of the
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 next Snowden
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0facepalm
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>> moment?
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>> Again, happy to have a call to walk though
>>>>=C2=A0 =C2=A0 this if that
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>> helps.
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>> -Ekr
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>> You might think that there was a MAC which
>>>>=C2=A0 =C2=A0 was easier to
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0reverse to
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>> find
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>> the original
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>> password, but the defense you have here
>>>>=C2=A0 =C2=A0 doesn't help
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 with that
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0because
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>> the
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>> on-path attacker can do a bid-down and use the >>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 client as a MAC
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0oracle
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>> for
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>> any MAC the client supports.
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>> So, I still don't understand what this is >>>>=C2=A0 =C2=A0 supposed
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 to do. Happy to
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>> have a
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>> call if you
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>> think that helps
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>> -Ekr
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>> On Mon, Jun 18, 2018 at 3:40 AM, Gonzalo
>>>>=C2=A0 =C2=A0 Camarillo <
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>> Gonzalo.Camarillo@ericsson.com
>>>>=C2=A0 =C2=A0 <mailto:Gonzalo.Camarillo@ericsson.com> >>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 <mailto:Gonzalo.Camari= llo@ericsson.com
>>>>=C2=A0 =C2=A0 <mailto:Gonzalo.Camarillo@ericsson.com>>= ;
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0<mailto:Gonzalo.Camarillo@ericsson.com
>>>>=C2=A0 =C2=A0 <mailto:Gonzalo.Camarillo@ericsson.com> >>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 <mailto:Gonzalo.Camari= llo@ericsson.com
>>>>=C2=A0 =C2=A0 <mailto:Gonzalo.Camarillo@ericsson.com>>= ;>> wrote:
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>> Marc, Eric,
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>> what is the status of this discussion?
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>> Thanks,
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>> Gonzalo
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>> On 04/05/2018 2:35 AM, Eric Rescorla wrote:<= br> >>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>> On Mon, Apr 23, 2018 at 11:16 AM, Marc >>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 Petit-Huguenin <<= br> >>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>> petithug@acm.org <mailto:petithug@acm.org>
>>>>=C2=A0 =C2=A0 <mailto:petithug@acm.org <mailto:petithug@acm.org>>
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 <mailto:petithug@acm.org <mai= lto:petithug@acm.org<= /a>>
>>>>=C2=A0 =C2=A0 <mailto:petithug@acm.org <mailto:petithug@acm.org>>>
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>> <mailto:petithug@acm.org
>>>>=C2=A0 =C2=A0 <mailto:petithug@acm.org> <mailto:petithug@acm.org
>>>>=C2=A0 =C2=A0 <mailto:petithug@acm.org>>
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 <mailto:petithug@acm.org <mai= lto:petithug@acm.org<= /a>>
>>>>=C2=A0 =C2=A0 <mailto:petithug@acm.org <mailto:petithug@acm.org>>>>> wro= te:
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>=C2=A0 =C2=A0 =C2=A0On 04/22/2018 05:22 P= M, Eric Rescorla
>>>>=C2=A0 =C2=A0 wrote:
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>=C2=A0 =C2=A0 =C2=A0> On Sun, Apr 22, = 2018 at 2:02 PM, Marc
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 Petit-Huguenin <<= br> >>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>> petithug@acm.org <mailto:petithug@acm.org>
>>>>=C2=A0 =C2=A0 <mailto:petithug@acm.org <mailto:petithug@acm.org>>
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 <mailto:petithug@acm.org <mai= lto:petithug@acm.org<= /a>>
>>>>=C2=A0 =C2=A0 <mailto:petithug@acm.org <mailto:petithug@acm.org>>>
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0<mailto:peti= thug@acm.org <mailto:petithug@acm.org>
>>>>=C2=A0 =C2=A0 <mailto:petithug@acm.org <mailto:petithug@acm.org>>
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 <mailto:petithug@acm.org <mai= lto:petithug@acm.org<= /a>>
>>>>=C2=A0 =C2=A0 <mailto:petithug@acm.org <mailto:petithug@acm.org>>>>>
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>=C2=A0 =C2=A0 =C2=A0> wrote:
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>=C2=A0 =C2=A0 =C2=A0>
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>=C2=A0 =C2=A0 =C2=A0>>
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>=C2=A0 =C2=A0 =C2=A0>>>>=C2= =A0 =C2=A0 =C2=A0 For a request or indication
>>>>=C2=A0 =C2=A0 message,
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 the agent
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0MUST
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>> include the
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>=C2=A0 =C2=A0 =C2=A0>>>>=C2= =A0 =C2=A0 =C2=A0 USERNAME,
>>>>=C2=A0 =C2=A0 MESSAGE-INTEGRITY-SHA256, and
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>> MESSAGE-INTEGRITY
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>=C2=A0 =C2=A0 =C2=A0>> attributes >>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>=C2=A0 =C2=A0 =C2=A0>>>>=C2= =A0 =C2=A0 =C2=A0 in the message unless the agent
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 knows from an
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0external
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>> indication
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>=C2=A0 =C2=A0 =C2=A0>>>>=C2= =A0 =C2=A0 =C2=A0 which message integrity
>>>>=C2=A0 =C2=A0 algorithm is
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 supported
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0by both
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>> agents.=C2=A0 In
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>=C2=A0 =C2=A0 =C2=A0>>>>=C2= =A0 =C2=A0 =C2=A0 this case either
>>>>=C2=A0 =C2=A0 MESSAGE-INTEGRITY or
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>> MESSAGE-INTEGRITY-SHA256 MUST
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>=C2=A0 =C2=A0 =C2=A0>>>>=C2= =A0 =C2=A0 =C2=A0 be included in addition to
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 USERNAME.=C2=A0 The = HMAC
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0for the
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>> MESSAGE-
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>=C2=A0 =C2=A0 =C2=A0>>>
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>=C2=A0 =C2=A0 =C2=A0>>> This tex= t appears to conflict with
>>>>=C2=A0 =C2=A0 S 7.3 of
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A05245-bis, which
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>> says:
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>=C2=A0 =C2=A0 =C2=A0>>
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>=C2=A0 =C2=A0 =C2=A0>> [text missin= g]
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>=C2=A0 =C2=A0 =C2=A0>>
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>=C2=A0 =C2=A0 =C2=A0>> Hmm, no, RFC= 245bis is still referencing
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 RFC5389, so the
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>> procedure
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>> for
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>=C2=A0 =C2=A0 =C2=A0>> stunbis does= not apply.
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>=C2=A0 =C2=A0 =C2=A0>>
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>=C2=A0 =C2=A0 =C2=A0>
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>=C2=A0 =C2=A0 =C2=A0> I hear what you&= #39;re saying, but
>>>>=C2=A0 =C2=A0 publishing two
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0documents at the
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>> same time
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>=C2=A0 =C2=A0 =C2=A0> which
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>=C2=A0 =C2=A0 =C2=A0> make contrary re= commendations about
>>>>=C2=A0 =C2=A0 the same
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 basic
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0protocol is
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>> un-good.
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>=C2=A0 =C2=A0 =C2=A0Sure, but wouldn'= t it be simpler to have
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 rfc5245bis
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0using stunbis
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>=C2=A0 =C2=A0 =C2=A0and have them updatin= g their text,
>>>>=C2=A0 =C2=A0 more than
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 adding some
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0tortuous
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>=C2=A0 =C2=A0 =C2=A0text in stunbis?
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>=C2=A0 =C2=A0 =C2=A0>
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>=C2=A0 =C2=A0 =C2=A0>
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>=C2=A0 =C2=A0 =C2=A0>>>=C2=A0 = =C2=A0 =C2=A0 The STUN usage must specify which
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 transport
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0protocol is
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>> used, and
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>=C2=A0 =C2=A0 =C2=A0>> how
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>=C2=A0 =C2=A0 =C2=A0>>>>=C2= =A0 =C2=A0 =C2=A0 the agent determines the IP
>>>>=C2=A0 =C2=A0 address
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 and port
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0of the
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>> recipient.
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>=C2=A0 =C2=A0 =C2=A0>>>>=C2= =A0 =C2=A0 =C2=A0 Section 8 describes a DNS-based
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 method of
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0determining
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>> the
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>> IP
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>=C2=A0 =C2=A0 =C2=A0>> address
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>=C2=A0 =C2=A0 =C2=A0>>>>=C2= =A0 =C2=A0 =C2=A0 and port of a server that a
>>>>=C2=A0 =C2=A0 usage
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 may elect to
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0use.
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>> STUN
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>> may be
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>=C2=A0 =C2=A0 =C2=A0>> used
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>=C2=A0 =C2=A0 =C2=A0>>>>=C2= =A0 =C2=A0 =C2=A0 with anycast addresses, but only
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 with UDP and
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0in usages
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>> where
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>=C2=A0 =C2=A0 =C2=A0>>>>=C2= =A0 =C2=A0 =C2=A0 authentication is not used.
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>=C2=A0 =C2=A0 =C2=A0>>>
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>=C2=A0 =C2=A0 =C2=A0>>> Why this= restriction? You should
>>>>=C2=A0 =C2=A0 be able
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 to use
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0anycast with
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>> long-term
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>=C2=A0 =C2=A0 =C2=A0>>> AUTH for= (say) TURN.
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>=C2=A0 =C2=A0 =C2=A0>>
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>=C2=A0 =C2=A0 =C2=A0>>
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 https://www.ietf.org/mail-archive/web/behave/current/
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>> msg03582.html
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>=C2=A0 =C2=A0
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0<https://www.ietf.org/mail-archive/web/behave/current/=
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>> msg03582.html>
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>=C2=A0 =C2=A0 =C2=A0>>
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>=C2=A0 =C2=A0 =C2=A0>> I think that= the decision of
>>>>=C2=A0 =C2=A0 permitting Anycast
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0should be left
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>> to
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>> each
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>=C2=A0 =C2=A0 =C2=A0>> STUN Usage.= =C2=A0 Basic STUN Usage does
>>>>=C2=A0 =C2=A0 not use
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0authentication and
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>> use
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>> only a
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>=C2=A0 =C2=A0 =C2=A0>> one round tr= ip for the Binding
>>>>=C2=A0 =C2=A0 transaction, so
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0Unicast can be
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>> used.
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>=C2=A0 =C2=A0 =C2=A0>>
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>=C2=A0 =C2=A0 =C2=A0>
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>=C2=A0 =C2=A0 =C2=A0>> OTOH, TURN a= nd ICE should probably say
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 something
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0about that,
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>> so
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>> I
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>> added a
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>=C2=A0 =C2=A0 =C2=A0>> new bullet p= oint in Section 13:
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>=C2=A0 =C2=A0 =C2=A0>>
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>=C2=A0 =C2=A0 =C2=A0>>=C2=A0 =C2=A0= o=C2=A0 If Anycast addresses can be
>>>>=C2=A0 =C2=A0 used for
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 the server
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0in case
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>> TCP
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>> or
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>=C2=A0 =C2=A0 =C2=A0>>=C2=A0 =C2=A0= =C2=A0 =C2=A0TLS-over-TCP, or
>>>>=C2=A0 =C2=A0 authentication are used.
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>=C2=A0 =C2=A0 =C2=A0>>
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>=C2=A0 =C2=A0 =C2=A0>
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>=C2=A0 =C2=A0 =C2=A0> Are you leaving = this text in? That seems
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 very confusing.
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>=C2=A0 =C2=A0 =C2=A0In isolation yes, but= I think it makes
>>>>=C2=A0 =C2=A0 sense
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 which the text
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>> before
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>=C2=A0 =C2=A0 =C2=A0the bullet points: >>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 A STUN usage = defines how STUN is
>>>>=C2=A0 =C2=A0 actually
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 utilized --
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0when to
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>> send
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 requests, wha= t to do with the
>>>>=C2=A0 =C2=A0 responses,
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 and which
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0optional
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 procedures de= fined here (or in an
>>>>=C2=A0 =C2=A0 extension
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 to STUN)
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0are to be
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>> used.
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 A usage also = defines:
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>=C2=A0 =C2=A0 =C2=A0[...]
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 o=C2=A0 If An= ycast addresses can be used
>>>>=C2=A0 =C2=A0 for the
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 server in
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0case TCP
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>> or
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0= TLS-over-TCP, or authentication
>>>>=C2=A0 =C2=A0 are used.
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>> What is the need for the restriction at = all.
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>=C2=A0 =C2=A0 =C2=A0>>>>=C2= =A0 =C2=A0 =C2=A0 transaction over UDP or
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 DTLS-over-UDP is als= o
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>> considered
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>> failed if
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>=C2=A0 =C2=A0 =C2=A0>>>>=C2= =A0 =C2=A0 =C2=A0 there has been a hard ICMP error
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 [RFC1122].=C2=A0 For=
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>> example,
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>> assuming
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>=C2=A0 =C2=A0 =C2=A0>> an
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>=C2=A0 =C2=A0 =C2=A0>>>>=C2= =A0 =C2=A0 =C2=A0 RTO of 500ms, requests would
>>>>=C2=A0 =C2=A0 be sent
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 at times
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A00 ms, 500
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>> ms, 1500
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>=C2=A0 =C2=A0 =C2=A0>> ms,
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>=C2=A0 =C2=A0 =C2=A0>>>>=C2= =A0 =C2=A0 =C2=A0 3500 ms, 7500 ms, 15500 ms, and
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 31500 ms.=C2=A0 If t= he
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>> client
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>> has not
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>=C2=A0 =C2=A0 =C2=A0>>>>=C2= =A0 =C2=A0 =C2=A0 received a response after
>>>>=C2=A0 =C2=A0 39500 ms,
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 the client
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0will
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>> consider the
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>=C2=A0 =C2=A0 =C2=A0>>>>=C2= =A0 =C2=A0 =C2=A0 transaction to have timed out.
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>=C2=A0 =C2=A0 =C2=A0>>>
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>=C2=A0 =C2=A0 =C2=A0>>> I note t= hat these recommendations
>>>>=C2=A0 =C2=A0 now seem
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 crazily
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0long. I
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>> assume the
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>=C2=A0 =C2=A0 =C2=A0>>> WG had c= onsensus on this, but I
>>>>=C2=A0 =C2=A0 wanted to
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 note it.
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>=C2=A0 =C2=A0 =C2=A0>>
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>=C2=A0 =C2=A0 =C2=A0>> Not just the= WG, also the IESG that
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 approved RFC 5389 >>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0too as,
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>> but
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>> for the
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>=C2=A0 =C2=A0 =C2=A0>> addition of = "or DTLS-over-UDP",
>>>>=C2=A0 =C2=A0 this is the
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 same text
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0than in
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>> RFC
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>> 5389.
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>=C2=A0 =C2=A0 =C2=A0>>
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>=C2=A0 =C2=A0 =C2=A0>
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>=C2=A0 =C2=A0 =C2=A0> Yes, I know. My = point is that while they
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 might have bee
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>> sensible
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>> when
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>=C2=A0 =C2=A0 =C2=A0> 5389 was publish= ed they *now* seem
>>>>=C2=A0 =C2=A0 crazily
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 long. Did
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0the WG
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>> explicitly
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>=C2=A0 =C2=A0 =C2=A0> decide not to up= date them?
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>=C2=A0 =C2=A0 =C2=A0No, nobody ever sugge= sted that there
>>>>=C2=A0 =C2=A0 was an
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 issue there.
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>> OK, well, this seems like it should be >>>>=C2=A0 =C2=A0 considered,
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 then,
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0because this
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>> doesn't
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>> match modern practice.
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>=C2=A0 =C2=A0 =C2=A0> This would be go= od to explain.
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>=C2=A0 =C2=A0 =C2=A0New text:
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 [...]
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 containing th= e subjectAltName of that
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 certificate.
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0The test
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>> on
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>> the
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 MESSAGE-INTEG= RITY-SHA256 attribute
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 indicates that the >>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>> transaction
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>> is
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 authenticated= and that the client
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 implements this
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>> specification
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>> and
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 so can proces= s the ALTERNATE-DOMAIN
>>>>=C2=A0 =C2=A0 attribute.
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>> All right.
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>=C2=A0 =C2=A0 =C2=A0>
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>=C2=A0 =C2=A0 =C2=A0>
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>=C2=A0 =C2=A0 =C2=A0>>>>=C2= =A0 =C2=A0 =C2=A0 o=C2=A0 What authentication and
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 message-integrity >>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0mechanisms
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>> are used.
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>=C2=A0 =C2=A0 =C2=A0>>>>
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>=C2=A0 =C2=A0 =C2=A0>>>>=C2= =A0 =C2=A0 =C2=A0 o=C2=A0 The considerations around
>>>>=C2=A0 =C2=A0 manual vs.
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0automatic key
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>> derivation
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>=C2=A0 =C2=A0 =C2=A0>> for
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>=C2=A0 =C2=A0 =C2=A0>>>>=C2= =A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0the integrity mechanism, as
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 discussed in
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0[RFC4107].
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>=C2=A0 =C2=A0 =C2=A0>>>>
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>=C2=A0 =C2=A0 =C2=A0>>>>=C2= =A0 =C2=A0 =C2=A0 o=C2=A0 What mechanisms are used to
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 distinguish STUN
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>> messages
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>> from other
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>=C2=A0 =C2=A0 =C2=A0>>>
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>=C2=A0 =C2=A0 =C2=A0>>> Why is t= his required? It seems
>>>>=C2=A0 =C2=A0 like that's
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 a generic
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0STUN
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>> feature.
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>=C2=A0 =C2=A0 =C2=A0>>
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>=C2=A0 =C2=A0 =C2=A0>> That text is= identical to the text
>>>>=C2=A0 =C2=A0 in RFC
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 5389.=C2=A0 RFC
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A05764/7983
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>> is
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>> one such
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>=C2=A0 =C2=A0 =C2=A0>> mechanism, b= ut there is nothing that
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 prevent another
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0protocol
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>> stack to use
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>=C2=A0 =C2=A0 =C2=A0>> a different = mechanism (inference,
>>>>=C2=A0 =C2=A0 shim, etc...)
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>=C2=A0 =C2=A0 =C2=A0>>
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>=C2=A0 =C2=A0 =C2=A0>
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>=C2=A0 =C2=A0 =C2=A0> But ultimately n= o matter what the
>>>>=C2=A0 =C2=A0 other protocol
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0provides for
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>> demux, STUN
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>=C2=A0 =C2=A0 =C2=A0> has its
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>=C2=A0 =C2=A0 =C2=A0> own demux.
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>=C2=A0 =C2=A0 =C2=A0In fact I think that = the reason for
>>>>=C2=A0 =C2=A0 that item
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 was because
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>=C2=A0 =C2=A0 =C2=A0FINGERPRINT can also = be used to demux STUN
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 traffic, but
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0it is
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>=C2=A0 =C2=A0 =C2=A0optional.=C2=A0 So an= STUN Usage needs to
>>>>=C2=A0 =C2=A0 tell if
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 FINGERPRINT is
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>=C2=A0 =C2=A0 =C2=A0mandatory (like in IC= E).
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>> This should be explained.
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>=C2=A0 =C2=A0 =C2=A0>>>
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>=C2=A0 =C2=A0 =C2=A0>>>>=C2= =A0 =C2=A0 =C2=A0 that is not readily subject to
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 offline dictionary >>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>> attacks.
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>=C2=A0 =C2=A0 =C2=A0>>>>=C2= =A0 =C2=A0 =C2=A0 Protection of the channel
>>>>=C2=A0 =C2=A0 itself,
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 using TLS or
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0DTLS,
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>> mitigates
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>=C2=A0 =C2=A0 =C2=A0>> these
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>=C2=A0 =C2=A0 =C2=A0>>>>=C2= =A0 =C2=A0 =C2=A0 attacks.
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>=C2=A0 =C2=A0 =C2=A0>>>>
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>=C2=A0 =C2=A0 =C2=A0>>>>=C2= =A0 =C2=A0 =C2=A0 STUN supports both
>>>>=C2=A0 =C2=A0 MESSAGE-INTEGRITY and
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>=C2=A0 =C2=A0 =C2=A0MESSAGE-INTEGRITY-SHA= 256,
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>=C2=A0 =C2=A0 =C2=A0>>>>=C2= =A0 =C2=A0 =C2=A0 which is subject to bid down
>>>>=C2=A0 =C2=A0 attacks
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 by an on-path
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>> attacker.
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>=C2=A0 =C2=A0 =C2=A0>>>
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>=C2=A0 =C2=A0 =C2=A0>>> By an on= -path attacker who can forge
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 HMAC-SHA1 in
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0real-time?
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>=C2=A0 =C2=A0 =C2=A0That's a
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>=C2=A0 =C2=A0 =C2=A0>>> pretty s= erious adversary, so you
>>>>=C2=A0 =C2=A0 should
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 clarify here
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>=C2=A0 =C2=A0 =C2=A0>>>
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>=C2=A0 =C2=A0 =C2=A0>>
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>=C2=A0 =C2=A0 =C2=A0>> New text: >>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>=C2=A0 =C2=A0 =C2=A0>>
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>=C2=A0 =C2=A0 =C2=A0>>=C2=A0 =C2=A0= STUN supports both
>>>>=C2=A0 =C2=A0 MESSAGE-INTEGRITY and
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>> MESSAGE-INTEGRITY-SHA256,
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>=C2=A0 =C2=A0 =C2=A0>>=C2=A0 =C2=A0= which is subject to bid down
>>>>=C2=A0 =C2=A0 attacks by
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 an on-path
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0attacker
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>> that
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>=C2=A0 =C2=A0 =C2=A0>>=C2=A0 =C2=A0= would strip the
>>>>=C2=A0 =C2=A0 MESSAGE-INTEGRITY-SHA256
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 attribute
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0leaving
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>=C2=A0 =C2=A0 =C2=A0only the
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>=C2=A0 =C2=A0 =C2=A0>>=C2=A0 =C2=A0= MESSAGE-INTEGRITY attribute and
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 exploiting a potenti= al
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>=C2=A0 =C2=A0 =C2=A0vulnerability.
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>=C2=A0 =C2=A0 =C2=A0>>=C2=A0 =C2=A0= Protection of the channel
>>>>=C2=A0 =C2=A0 itself, using
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 TLS or DTLS,
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>> mitigates
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>=C2=A0 =C2=A0 =C2=A0these
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>=C2=A0 =C2=A0 =C2=A0>>=C2=A0 =C2=A0= attacks.=C2=A0 Timely removal of the
>>>>=C2=A0 =C2=A0 support of
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>> MESSAGE-INTEGRITY
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>> in a
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>=C2=A0 =C2=A0 =C2=A0>>=C2=A0 =C2=A0= future version of STUN is necessary.
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>=C2=A0 =C2=A0 =C2=A0>>
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>=C2=A0 =C2=A0 =C2=A0>
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>=C2=A0 =C2=A0 =C2=A0> I still don'= t understand the
>>>>=C2=A0 =C2=A0 capabilities
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 you seem to
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0believe
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>> the
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>=C2=A0 =C2=A0 =C2=A0attacker
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>=C2=A0 =C2=A0 =C2=A0> has.
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>=C2=A0 =C2=A0 =C2=A0> Can you describe= the exact attack.
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>=C2=A0 =C2=A0 =C2=A0>
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>=C2=A0 =C2=A0 =C2=A01. Vulnerability is f= ound in HMAC-SHA1
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>=C2=A0 =C2=A0 =C2=A02. Client Alice still= supports M-I and
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 M-I-256, does not >>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0know
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>> what
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>=C2=A0 =C2=A0 =C2=A0version of STUN serve= r Bob supports and so
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 send both.
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>=C2=A0 =C2=A0 =C2=A03. On-path attacker r= emoves M-I-256.
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>=C2=A0 =C2=A0 =C2=A05. stunbis server Bob= thinks that
>>>>=C2=A0 =C2=A0 Alice is an
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 RFC 5389
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0client and
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>=C2=A0 =C2=A0 =C2=A0continue with that pr= otocol.
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>> This seems like an extremely weak attack= . In
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 general, any
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0protocol of
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>> this type is as strong
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>> as the weakest integrity algorithm it >>>>=C2=A0 =C2=A0 supports, so
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 it's not
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0that the
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>> protocol has a downgrade
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>> attack, but rather that the minimum algo= rithm
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 supported is
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0one you
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>> don't
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>> trust as much
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>> as you might like.
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>> -Ekr
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>=C2=A0 =C2=A0 =C2=A0--
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0--
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0Marc Petit-Huguenin
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0Email: m= arc@petit-huguenin.org
>>>>=C2=A0 =C2=A0 <mailto:marc@petit-huguenin.org>
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 <mailto:marc@petit-huguenin.o= rg
>>>>=C2=A0 =C2=A0 <mailto:marc@petit-huguenin.org>> <mailto:<= a href=3D"mailto:marc@petit-huguenin.org" target=3D"_blank">marc@petit-hugu= enin.org
>>>>=C2=A0 =C2=A0 <mailto:marc@petit-huguenin.org>
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 <mailto:marc@petit-huguenin.o= rg
>>>>=C2=A0 =C2=A0 <mailto:marc@petit-huguenin.org>>>
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0Blog: https://marc.petit-huguenin.org
>>>>=C2=A0 =C2=A0 <https://marc.petit-huguenin.org/>
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0Profile: https://www.linkedin.com/in/petithug
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >
>>>>>
>>>>
>>>
>
--000000000000df312105839fd8d6-- From nobody Mon Mar 11 16:29:54 2019 Return-Path: X-Original-To: tram@ietf.org Delivered-To: tram@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 3F0311311E9; Mon, 11 Mar 2019 16:29:40 -0700 (PDT) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: internet-drafts@ietf.org To: Cc: tram@ietf.org X-Test-IDTracker: no X-IETF-IDTracker: 6.93.0 Auto-Submitted: auto-generated Precedence: bulk Reply-To: tram@ietf.org Message-ID: <155234698019.23082.13747900196685910906@ietfa.amsl.com> Date: Mon, 11 Mar 2019 16:29:40 -0700 Archived-At: Subject: [tram] I-D Action: draft-ietf-tram-stunbis-20.txt X-BeenThere: tram@ietf.org X-Mailman-Version: 2.1.29 List-Id: "Discussing the creation of a Turn Revised And Modernized \(TRAM\) WG, which goal is to consolidate the various initiatives to update TURN and STUN." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 11 Mar 2019 23:29:47 -0000 A New Internet-Draft is available from the on-line Internet-Drafts directories. This draft is a work item of the TURN Revised and Modernized WG of the IETF. Title : Session Traversal Utilities for NAT (STUN) Authors : Marc Petit-Huguenin Gonzalo Salgueiro Jonathan Rosenberg Dan Wing Rohan Mahy Philip Matthews Filename : draft-ietf-tram-stunbis-20.txt Pages : 73 Date : 2019-03-11 Abstract: Session Traversal Utilities for NAT (STUN) is a protocol that serves as a tool for other protocols in dealing with Network Address Translator (NAT) traversal. It can be used by an endpoint to determine the IP address and port allocated to it by a NAT. It can also be used to check connectivity between two endpoints, and as a keep-alive protocol to maintain NAT bindings. STUN works with many existing NATs, and does not require any special behavior from them. STUN is not a NAT traversal solution by itself. Rather, it is a tool to be used in the context of a NAT traversal solution. This document obsoletes RFC 5389. The IETF datatracker status page for this draft is: https://datatracker.ietf.org/doc/draft-ietf-tram-stunbis/ There are also htmlized versions available at: https://tools.ietf.org/html/draft-ietf-tram-stunbis-20 https://datatracker.ietf.org/doc/html/draft-ietf-tram-stunbis-20 A diff from the previous version is available at: https://www.ietf.org/rfcdiff?url2=draft-ietf-tram-stunbis-20 Please note that it may take a couple of minutes from the time of submission until the htmlized version and diff are available at tools.ietf.org. Internet-Drafts are also available by anonymous FTP at: ftp://ftp.ietf.org/internet-drafts/ From nobody Mon Mar 18 18:27:13 2019 Return-Path: X-Original-To: tram@ietfa.amsl.com Delivered-To: tram@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 8B77912785F; Mon, 18 Mar 2019 18:27:05 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.998 X-Spam-Level: X-Spam-Status: No, score=-1.998 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ceTFQgQES9Rx; Mon, 18 Mar 2019 18:26:59 -0700 (PDT) Received: from mail-lj1-x230.google.com (mail-lj1-x230.google.com [IPv6:2a00:1450:4864:20::230]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 6F5571277D8; Mon, 18 Mar 2019 18:26:58 -0700 (PDT) Received: by mail-lj1-x230.google.com with SMTP id q66so2174600ljq.7; Mon, 18 Mar 2019 18:26:58 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=OboqmQxMvAiOjrna5FnaEQoCNU9dSUMR2oCWmQsv8L8=; b=KnBiNfyRzwO8Gcevwk5I/Mk3Ql6YBkmlPlcJ4aHkVDrv0F2WaO5pDnpTamqhSVKqMr nf5J3aZFwGAhqfgYEt65HnSOtwWbYnnpqUIs6Y5PfpnB+dADN5Z1jnO57bI+zMr7NVoD k8tgj20VnXKJKdbyECtLv5Mr0spCxvxuCxRSGSUwULyEaqMlbdwUk97L2nVvw3ikaPJs kQdhGrVHCiL6AVWP3oTV4AfqtBODMEF58JE2o8QGvbnlD9bHQSPorqOtSepuZvSo3Jae dAq2omWqfc3fKHrDhvN20zO9SrBKbdLfGYEbsRpQISAj5PFTZefZBIRU9AoYL2+yeqY9 9m/Q== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=OboqmQxMvAiOjrna5FnaEQoCNU9dSUMR2oCWmQsv8L8=; b=cCVlaffR6UAzipl+cKaQudjBiMt8u5y+bPWoODbhFmzy7BTcRjH6/o6bqfHquNnXJw bss2uIreC/qSQFG2oYEZ24l1P+IU2dsbA8BJi7joRjVO0/DA7j8lxoNZVUA7bIHkmK6y X56nGIgqh8Lo9g7iWZyPob/xUeExToWNtAKtpsp9kZm99+NA+MdKTQvbQbFsIewylI2I RwHVyxBI6LAM0F9CbaC2eQh48IYlS9T6x1VLy/6EdIasMa2JLlBWmlHU/llAqQCJ5JM8 dU++/rZlFDbKgMkCvtJ3HXXwxaSlFZywwBZPMPdeTfhXqxNeo5tndm45YQd4qdjtletC zagQ== X-Gm-Message-State: APjAAAX8tV+tvW2rKqqtfgJpR6ua+3F1slZo5TGk3OE7xG9dBPFhKJ1v FcZdexrMPT95Zy0OvTJYAbagj4zp9jniIMZ2fCc= X-Google-Smtp-Source: APXvYqz11B4SBogKlYu+qzCwuDm4STSyw3yrwJIr4EEUy7YSZvpaUAoZKQkLc9CL7E4gc8m6QeqK+9b7KEj6U5XVQGg= X-Received: by 2002:a2e:88d0:: with SMTP id a16mr11904397ljk.77.1552958816202; Mon, 18 Mar 2019 18:26:56 -0700 (PDT) MIME-Version: 1.0 References: <152390863222.19652.10310304989315386136.idtracker@ietfa.amsl.com> <472563ee-5fc3-655d-8e31-138cc774e608@acm.org> <97c561a7-c33a-6121-00c4-09cd11646b98@ericsson.com> <4b8f10f7-1eee-c8bc-d9ee-e3f18473de32@ericsson.com> In-Reply-To: From: Spencer Dawkins at IETF Date: Mon, 18 Mar 2019 20:26:42 -0500 Message-ID: To: Eric Rescorla Cc: Gonzalo Camarillo , "Gonzalo Salgueiro (gsalguei)" , Marc Petit-Huguenin , "tram-chairs@ietf.org" , "tram@ietf.org" , IESG , "draft-ietf-tram-stunbis@ietf.org" Content-Type: multipart/alternative; boundary="0000000000009733a605846866ec" Archived-At: Subject: Re: [tram] Eric Rescorla's Discuss on draft-ietf-tram-stunbis-16: (with DISCUSS and COMMENT) X-BeenThere: tram@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "Discussing the creation of a Turn Revised And Modernized \(TRAM\) WG, which goal is to consolidate the various initiatives to update TURN and STUN." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 19 Mar 2019 01:27:06 -0000 --0000000000009733a605846866ec Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable Dear All, On Fri, Mar 8, 2019 at 8:10 PM Eric Rescorla wrote: > Thanks for the call yesterday. > Thanks to all for moving this specification forward. If the current conversation turns out to converge on this topic before next Wednesday, I'm happy to approve a revised draft after Eric clears his Discuss. If I can help in any way, please let me know. Spencer > > First, here is what I recommend for the question of SHA-256 for password > hashing: > > Note: the use of SHA-256 for password hashing does not meet modern > standards, which are aimed at slowing down exhaustive password search > by providing a relatively slow minimum time to compute the > hash. Although better algorithms such as Argon2 > [https://datatracker.ietf.org/doc/draft-irtf-cfrg-argon2/] are > available, SHA-256 was chosen for consistency with RFC 7616. > > > Now, WRT to the anti-downgrade situation. Here's a stylized version > of the protocol: > > Client Server > > Hello -> > <- Nonce, Algorithms > HMAC-H1(H2(Password), Nonce, Algorithms, Msg) -> > <- HMAC-H1(H2(Password), ...) > > Where H1 and H2 are the HMAC hash functions and the password hashing > function respectively. > > Now, if we assume that the attacker does not know Password and that > both H1 and H2 are secure, then it is not possible for the attacker to > complete the transaction or modify any of the messages. Further, if > the weakest joint algorithm that both sides support is still strong, > then an attacker cannot influence the algorithm negotiation [0]. This > property is provided by covering the algorithms under the MAC. > > However, my point is that this is not a very useful property. > > First, consider the case in which the implementations jointly support > one strong algorithm and one weak algorithm. E.g., for H1 they support > SHA-256 and the function Z(x) which always emits 0s. This allows > an attacker to force the client and server into using Z, as follows. > > > Client Attacker Server > > Hello -> > Hello -> > <- Nonce, Alg=3DSHA256, Z > <- Nonce, Alg=3DZ > Z(H2(Password), Nonce, Alg=3DZ)) -> > Z(H2(Password), Nonce, Alg=3DSHA256, Z)) > > The issue here is that the only thing that the MAC is doing is > authenticating the transaction, and if you can't trust it to do that, > you can't trust it to authenticate the bid-down defense either. > > > During our discussion, there was a suggestion that it was useful to > have biddown defense to defend against weaknesses in H2. I don't think > that that's true either. First, remember that the purpose of H2 is to > prevent an attacker who recovers the password database from learning > the user's true password. This is not about defending the server from > attack (because knowing A1 is enough to attack the server) but about > preventing the attacker from learning a password which might have been > reused on another site. > > Now, it's also possible to brute-force the user's password just from > the protocol transcript: if you capture the client's first message > with MESSAGE-INTEGRITY or MESSAGE-INTEGRITY-SHA256, you can just keep > trying passwords until you get the right MAC. Note that this is a > passive attack. This is comparatively fast because SHA256 and MD5 are > fast. > > A much stronger H2 (e.g., Argon) would help against this, but the > problem now becomes that the client supports H2 =3D=3D MD5 (or SHA-256) > and so even if the server supports Argon, the attacker can mount a > bid-down defense in which it modifies the server's first message to > just advertise MD5 and thus get the client to provide a suitable > message. The bid-down defense would prevent the authentication > transaction from completing, but that's not necessary for this > attack because the attacker can just brute-force the password from > the message it has. To make this work, you would need something > like a PAKE, which this is not. > > Finally, you might think that the server has two databases, one > which uses Argon and one which uses MD5 and it wants to gradually > phase out the MD5 one, which it will do when no client authenticates > with MD5 for a very long time. An anti-biddown defense would sort > of work here, but the fact that the attacker would have to be > active essentially indefinitely to keep the server confused about > the state of clients -- and that the attacker can likely just > get a valid account and then insist on using MD5 -- makes this a > not very useful defense. > > I think this makes a pretty persuasive case that the bid-down defense > isn't useful except in the formal "attacker cannot influence > negotiation" sense. With that said, in the spirit of getting this done, I > guess > I'm willing to let this go if the security considerations make clear > that it is only a very limited mechanism. > > -Ekr > > > [0] This is principally about H1. As long as the H2 approximately > evenly distributes the password over its range, then cryptographic > strength is not important for this question. For instance, you > could replace H2 with an identity function and still have a > secure protocol. > > > > > > > On Wed, Feb 20, 2019 at 4:03 AM Gonzalo Camarillo < > gonzalo.camarillo@ericsson.com> wrote: > >> Thanks, Gonzalo! Please, let us know the agreed way forward once you >> have the call. >> >> Cheers, >> >> Gonzalo >> >> On 19-Feb-19 20:05, Gonzalo Salgueiro (gsalguei) wrote: >> > Hi Gonzalo - >> > >> > We have scheduled a conference call with Ekr, Simon, Marc and myself o= n >> March 7th to discuss the last two remaining issues. Will update with >> resolutions once this has occurred. >> > >> > Cheers, >> > >> > Gonzalo >> > >> > >> > >> >> On Feb 18, 2019, at 8:18 AM, Gonzalo Camarillo < >> Gonzalo.Camarillo@ericsson.com> wrote: >> >> >> >> Hi Gonzalo S, >> >> >> >> what is the status of this one? >> >> >> >> Thanks, >> >> >> >> Gonzalo >> >> >> >> On 18-Jan-19 20:16, Gonzalo Salgueiro (gsalguei) wrote: >> >>> Totally agree, Ekr. Marc and I are meeting to come up with a propos= al >> >>> but I do agree we need to have a call to get this put to bed once an= d >> >>> for all. We=E2=80=99ll offer some potential dates in the next 2-3 w= eeks. >> >>> >> >>> Cheers, >> >>> >> >>> Gonzalo >> >>> >> >>> >> >>>> On Dec 26, 2018, at 8:05 PM, Eric Rescorla > >>>> > wrote: >> >>>> >> >>>> We really need to bring this to a close before both Spencer and I >> step >> >>>> down, I should think. >> >>>> >> >>>> -Ekr >> >>>> >> >>>> >> >>>> On Thu, Nov 22, 2018 at 4:30 AM Gonzalo Camarillo >> >>>> > >>>> > wrote: >> >>>> >> >>>> Eric, Spencer, thanks for the status update! >> >>>> >> >>>> Authors, could you please let us know when you plan to get to >> this? >> >>>> >> >>>> Gonzalo >> >>>> >> >>>> On 19-Nov-18 23:04, Spencer Dawkins at IETF wrote: >> >>>>> Hi, Gonzalo, >> >>>>> On Mon, Nov 19, 2018 at 9:06 AM Eric Rescorla > >>>> >> >>>>> >> wrote: >> >>>>> >> >>>>> Not really. I have not received any response to my mail of >> >>>> Oct 23. >> >>>>> As before, I'm happy to have a call, but I believe we're >> >>>> reaching >> >>>>> the limits of what can be accomplished by email. >> >>>>> >> >>>>> >> >>>>> Eric would know best (it being his Discuss), but this is also my >> >>>>> understanding. >> >>>>> >> >>>>> I can add this to the agenda of the IESG informal telechat on >> >>>> November >> >>>>> 29, if there hasn't been a call before then, but I don't have a >> >>>> reason >> >>>>> to wait until then, if it's possible to talk sooner. >> >>>>> >> >>>>> Thanks, >> >>>>> >> >>>>> Spencer >> >>>>> >> >>>>> >> >>>>> >> >>>>> -Ekr >> >>>>> >> >>>>> >> >>>>> On Mon, Nov 19, 2018 at 6:35 AM Gonzalo Camarillo >> >>>>> > >>>> >> >>>>> > >>>> >> wrote: >> >>>>> >> >>>>> Hi Spencer, >> >>>>> >> >>>>> what is the status of this? Are the authors and the >> document >> >>>>> shepherd >> >>>>> working with the relevant ADs on the discusses? >> >>>>> >> >>>>> >> >>>> >> https://datatracker.ietf.org/doc/draft-ietf-tram-stun-pmtud/ballot/ >> >>>>> >> >>>>> Cheers, >> >>>>> >> >>>>> Gonzalo >> >>>>> >> >>>>> On 24-Oct-18 16:40, Spencer Dawkins at IETF wrote: >> >>>>> > Hi, Marc, >> >>>>> > >> >>>>> > On Wed, Oct 24, 2018 at 3:44 AM Marc Petit-Huguenin >> >>>>> >> >>>> > >> >>>>> > >> >>>> >>> wrote: >> >>>>> > >> >>>>> > Hi Spencer, >> >>>>> > >> >>>>> > I sent my answers to Eric Rescorla questions on >> >>>> 2018-10-07 >> >>>>> following >> >>>>> > an in-person meeting with my co-author, but never >> >>>> got a >> >>>>> response >> >>>>> > back. Because there was no change proposed by >> >>>> Eric I went >> >>>>> ahead and >> >>>>> > published -19 a couple of weeks after that, with >> >>>> the text >> >>>>> agreed in >> >>>>> > response to Adam's and Benjamin's comments. >> >>>>> > >> >>>>> > >> >>>>> >> >>>> >> https://www.ietf.org/mail-archive/web/tram/current/msg02635.html >> >>>>> > >> >>>>> > >> >>>>> > Ah - I wonder if that was what had happened. >> >>>>> > >> >>>>> > It sounds like you did the right thing, and that Eric >> >>>> has now >> >>>>> responded, >> >>>>> > which is also the right thing to do. >> >>>>> > >> >>>>> > Thanks for helping me understand. >> >>>>> > >> >>>>> > Spencer >> >>>>> > >> >>>>> > >> >>>>> > On 10/23/18 7:28 PM, Spencer Dawkins at IETF wrote: >> >>>>> > > Hi, Marc, >> >>>>> > > >> >>>>> > > I see that a -19 has been submitted, but didn't >> >>>> see a >> >>>>> reply from >> >>>>> > Eric in >> >>>>> > > this thread. Do you think that you've converged? >> >>>>> > > >> >>>>> > > (I saw an offer of a conference call, so thought = an >> >>>>> out-of-band >> >>>>> > > conversation might have happened) >> >>>>> > > >> >>>>> > > Thanks, >> >>>>> > > >> >>>>> > > Spencer >> >>>>> > > >> >>>>> > > On Sun, Oct 7, 2018 at 9:35 AM Marc Petit-Hugueni= n >> >>>>> > >> >>>> > >> >>>>> >> >>>> >>> wrote: >> >>>>> > > >> >>>>> > >> Hi Eric, >> >>>>> > >> >> >>>>> > >> Please see inline. >> >>>>> > >> >> >>>>> > >> On 09/10/2018 03:25 AM, Eric Rescorla wrote: >> >>>>> > >>> On Sat, Sep 8, 2018 at 2:31 PM, Marc >> >>>> Petit-Huguenin >> >>>>> > >> >>>> > >> >>>>> >> >>>> >>> >> >>>>> > >>> wrote: >> >>>>> > >>> >> >>>>> > >>>> Hi Eric, >> >>>>> > >>>> >> >>>>> > >>>> Apologies for the delay in getting back to tha= t. >> >>>>> > >>>> >> >>>>> > >>>> I think that there is some misunderstanding >> >>>> in what >> >>>>> STUNbis is >> >>>>> > trying to >> >>>>> > >>>> do, so please see my comments inline. >> >>>>> > >>>> >> >>>>> > >>>> On 06/18/2018 10:43 AM, Eric Rescorla wrote: >> >>>>> > >>>>> Hi folks, >> >>>>> > >>>>> >> >>>>> > >>>>> I've reviewed the new version, but I don't >> think >> >>>>> that the biddown >> >>>>> > >>>>> discussion makes much sense. >> >>>>> > >>>>> >> >>>>> > >>>>> To recap, there are two hashes here: >> >>>>> > >>>>> >> >>>>> > >>>>> - The hash which you use to store the >> >>>> password with >> >>>>> (currently >> >>>>> > mostly >> >>>>> > >>>> MD5) >> >>>>> > >>>>> - The hash you use to compute the MAC >> >>>> (currently SHA-1). >> >>>>> > >>>>> >> >>>>> > >>>>> First, let's stipulate that MD5 isn't a >> >>>> great choice >> >>>>> here, >> >>>>> > though SHA-1 >> >>>>> > >>>>> isn't a great choice >> >>>>> > >>>>> either for pwd hashing You want Argon or the >> >>>> like. >> >>>>> With that said, >> >>>>> > >>>> there's >> >>>>> > >>>>> no sensible >> >>>>> > >>>>> biddown attack on that hash because it's a >> >>>>> per-server feature, >> >>>>> > not a >> >>>>> > >>>>> per-transaction >> >>>>> > >>>>> feature. So, as long as the server has >> >>>> MD5-hashed >> >>>>> passwords, the >> >>>>> > >>>> situation >> >>>>> > >>>>> is bad. >> >>>>> > >>>> >> >>>>> > >>>> In no place in STUNbis we are proposing to >> >>>> use SHA-1 >> >>>>> for password >> >>>>> > >>>> encryption, so I am not sure where that come >> >>>> from. >> >>>>> What we >> >>>>> > propose is: >> >>>>> > >>>> >> >>>>> > >>> >> >>>>> > >>> You're right, it's SHA-256, but my criticisms >> >>>> apply >> >>>>> equally there. >> >>>>> > >> >> >>>>> > >> SHA-256 was what the WG adopted. Our attempts >> >>>> to add >> >>>>> other passwords >> >>>>> > >> encryption mechanisms were denied. It is true >> that >> >>>>> Argon2 was >> >>>>> > not in that >> >>>>> > >> list (in our defense Argon2 was not known >> >>>> before July >> >>>>> 2015), but >> >>>>> > I do not >> >>>>> > >> see why the WG would have accepted that one >> >>>> over the >> >>>>> others. >> >>>>> > Anyway it is >> >>>>> > >> too late to fix this, as it is my understanding >> >>>> that >> >>>>> the WG does >> >>>>> > not have >> >>>>> > >> enough energy to reach consensus on a new passwo= rd >> >>>>> algorithm. >> >>>>> > Someone can >> >>>>> > >> just write a draft adding Argon2 as password >> >>>>> encryption, as we >> >>>>> > will have a >> >>>>> > >> IANA registry for that. >> >>>>> > >> >> >>>>> > >>> >> >>>>> > >>> >> >>>>> > >>>> - Establish a registry for new password >> >>>> algorithms >> >>>>> (section >> >>>>> > 18.5), so >> >>>>> > >>>> algorithms like Argon2 could be added later >> >>>> (but note >> >>>>> that our own >> >>>>> > >>>> proposals to add more password algorithms were >> >>>>> rejected by the >> >>>>> > working >> >>>>> > >>>> group). >> >>>>> > >>>> - Add a new password algorithm to that registr= y, >> >>>>> namely SHA-256. >> >>>>> > >>>> - Register MD5 as an initial password >> >>>> algorithm for >> >>>>> backward >> >>>>> > >> compatibility >> >>>>> > >>>> purpose. >> >>>>> > >>>> >> >>>>> > >>>> As for the biddown protection itself, it is my >> >>>>> recollection that it >> >>>>> > >>>> happened more or less like that: >> >>>>> > >>>> >> >>>>> > >>>> >> >>>>> > >>>> INT. MEETING ROOM - DAY >> >>>>> > >>>> >> >>>>> > >>>> One of the co-editors of STUNBis stands at the >> >>>>> microphone: >> >>>>> > >>>> >> >>>>> > >>>> CO-EDITOR >> >>>>> > >>>> We added SHA-256 protection f= or >> >>>>> passwords >> >>>>> > >>>> in STUNBis. >> >>>>> > >>>> >> >>>>> > >>>> SOMEONE (V.O.) >> >>>>> > >>>> As MD5 still need to be >> >>>> supported, >> >>>>> you need to add >> >>>>> > >>>> protection for bid-down >> attacks. >> >>>>> > >>>> >> >>>>> > >>>> CLOSE-UP on CO-EDITOR ROLLING HIS EYES >> >>>>> > >>>> >> >>>>> > >>>> CO-EDITOR >> >>>>> > >>>> OK, I'll work on that. >> >>>>> > >>>> >> >>>>> > >>>> Four to eight months has passed. >> >>>>> > >>>> >> >>>>> > >>>> INT. ANOTHER MEETING ROOM - DAY >> >>>>> > >>>> >> >>>>> > >>>> The same co-editor of STUNBis stands at the >> >>>> microphone: >> >>>>> > >>>> >> >>>>> > >>>> CO-EDITOR >> >>>>> > >>>> We added a nice mechanism to >> >>>> prevent >> >>>>> bid-down >> >>>>> > >>>> attacks on passwords. Any >> >>>> comments? >> >>>>> > >>>> >> >>>>> > >>>> THE ROOM >> >>>>> > >>>> (silence) >> >>>>> > >>>> >> >>>>> > >>>> CO-EDITOR >> >>>>> > >>>> Moving on... >> >>>>> > >>>> >> >>>>> > >>> >> >>>>> > >>> I don't see how any of this is relevant to my >> >>>>> technical points >> >>>>> > above. >> >>>>> > >> >> >>>>> > >> My point was that we, the co-editors, did not >> >>>> decide on >> >>>>> adding >> >>>>> > bid-down >> >>>>> > >> protection, someone asked us to do so and >> >>>> no-one in the >> >>>>> WG saw >> >>>>> > any problem >> >>>>> > >> with that. The reasons that person wanted that >> >>>> are not >> >>>>> known to >> >>>>> > us but, as >> >>>>> > >> you insist, here's one reason I can think of: >> >>>>> > >> >> >>>>> > >> It is a fact that, for operational reasons, a >> >>>> password >> >>>>> database >> >>>>> > cannot be >> >>>>> > >> re-encrypted at once. Also for operational >> >>>> reasons, >> >>>>> the MD5 password >> >>>>> > >> cannot be immediately removed from the database >> >>>> as soon >> >>>>> the user >> >>>>> > submitted >> >>>>> > >> a new one. In fact, and for quite some time, bo= th >> >>>>> encrypted >> >>>>> > variants of >> >>>>> > >> the same password may have to be kept in that >> >>>> database, >> >>>>> because a >> >>>>> > single >> >>>>> > >> user may use a mix of devices, some of them >> >>>> that use an >> >>>>> RFC 5389 >> >>>>> > client, >> >>>>> > >> some that use a STUNbis client. It is up to >> >>>> the STUN >> >>>>> server owner to >> >>>>> > >> decide how long the migration to STUNbis will >> >>>> take and >> >>>>> when it >> >>>>> > will be >> >>>>> > >> acceptable to reject all RFC 5389 (i.e. MD5) >> >>>> clients (that >> >>>>> > migration time >> >>>>> > >> can be purposely reduced to 0 seconds but >> >>>> that's the >> >>>>> choice and >> >>>>> > >> responsibility of the owner of the server). >> >>>>> > >> >> >>>>> > >> Meanwhile we still need to be sure that if the >> STUN >> >>>>> client is >> >>>>> > implementing >> >>>>> > >> STUNbis it unconditionally gets the additional >> >>>>> protection of the new >> >>>>> > >> password encryption algorithm. That's where >> >>>> the biddown >> >>>>> > protection kicks >> >>>>> > >> in, by preventing an online attacker to have >> >>>> the server >> >>>>> > misidentifying a >> >>>>> > >> STUNbis client as an RFC 5389 client, by >> >>>> preventing an >> >>>>> online >> >>>>> > attacker to >> >>>>> > >> have the client misidentifying a STUNbis server >> >>>> as a >> >>>>> RFC 5389 >> >>>>> > server, and >> >>>>> > >> having both them use the MD5 encrypted password >> >>>> instead >> >>>>> of the >> >>>>> > SHA-256 >> >>>>> > >> encrypted password, all of that easily done by >> >>>>> stripping the >> >>>>> > unprotected >> >>>>> > >> 401 response of the new STUNbis >> PASSWORD-ALGORITHMS >> >>>>> attribute. >> >>>>> > >> >> >>>>> > >>> >> >>>>> > >>> >> >>>>> > >>> >> >>>>> > >>>>> The second topic is the hash used to compute >> the >> >>>>> MAC. However, >> >>>>> > I don't >> >>>>> > >>>> see >> >>>>> > >>>>> how >> >>>>> > >>>>> this gives you sensible biddown protection >> >>>> because >> >>>>> that hash >> >>>>> > is also >> >>>>> > >> used >> >>>>> > >>>>> to compute >> >>>>> > >>>>> MAC over the negotiation: an attacker who has >> >>>>> compromised a >> >>>>> > MAC which >> >>>>> > >> the >> >>>>> > >>>>> server >> >>>>> > >>>>> supports will quite likely be able to forge >> >>>> a MAC >> >>>>> over the >> >>>>> > transcript >> >>>>> > >> as >> >>>>> > >>>>> well. This is, >> >>>>> > >>>>> I suppose, potentially useful as a defense >> >>>> against >> >>>>> some other >> >>>>> > weakness >> >>>>> > >>>>> (e.g., >> >>>>> > >>>>> version #), but I don't really see how the >> >>>> current >> >>>>> design >> >>>>> > helps against >> >>>>> > >>>>> attacks on the >> >>>>> > >>>>> MAC. >> >>>>> > >>>> >> >>>>> > >>>> There is no biddown attack protection for the >> >>>> MAC, as >> >>>>> stated in >> >>>>> > Section >> >>>>> > >>>> 16.3: >> >>>>> > >>>> >> >>>>> > >>>> "The bid-down protection mechanism described >> >>>> in this >> >>>>> document >> >>>>> > is new, >> >>>>> > >>>> and thus cannot currently protect against a >> >>>> bid-down >> >>>>> attack that >> >>>>> > >>>> lowers the strength of the hash algorithm to >> >>>> HMAC-SHA1." >> >>>>> > >>>> >> >>>>> > >>>> What we put in place is a plan for *future* >> >>>> versions >> >>>>> of STUN to get >> >>>>> > >>>> biddown protection for the MAC. That's it, >> >>>> no more, >> >>>>> no less. >> >>>>> > >>>> >> >>>>> > >>> >> >>>>> > >>> Yes, but I don't believe that this will >> >>>> provide bid-down >> >>>>> > protection for >> >>>>> > >> the >> >>>>> > >>> MAC in the future for the reasons I indicate >> >>>> above. >> >>>>> > >>> >> >>>>> > >>> If you think this does something useful, >> >>>> please show me an >> >>>>> > example attack >> >>>>> > >>> and how this fixes it. Note that it's not >> >>>> generally >> >>>>> useful to >> >>>>> > just bid >> >>>>> > >> down >> >>>>> > >>> the MAC itself unless the MAC you bid down to >> >>>> is weak >> >>>>> enough to >> >>>>> > exploit >> >>>>> > >> in >> >>>>> > >>> some other way. >> >>>>> > >> >> >>>>> > >> I do not know what weaknesses will be >> >>>> discovered in the >> >>>>> future. >> >>>>> > I am also >> >>>>> > >> pretty sure that the cost of not using that >> >>>> mechanism >> >>>>> is very >> >>>>> > close to 0. >> >>>>> > >> What I am sure of is that the cost of >> >>>> reengineering a >> >>>>> new biddown >> >>>>> > >> protection mechanism if we ever need it will be >> >>>> high. >> >>>>> We already >> >>>>> > went >> >>>>> > >> through the pains of designing one for the >> password >> >>>>> algorithm, so >> >>>>> > why not >> >>>>> > >> extend it so it can be used in the aftermath of >> the >> >>>>> next Snowden >> >>>>> > facepalm >> >>>>> > >> moment? >> >>>>> > >> >> >>>>> > >>> Again, happy to have a call to walk though >> >>>> this if that >> >>>>> > >>> helps. >> >>>>> > >>> >> >>>>> > >>> -Ekr >> >>>>> > >>> >> >>>>> > >>> >> >>>>> > >>> >> >>>>> > >>> >> >>>>> > >>>>> >> >>>>> > >>>>> You might think that there was a MAC which >> >>>> was easier to >> >>>>> > reverse to >> >>>>> > >> find >> >>>>> > >>>>> the original >> >>>>> > >>>>> password, but the defense you have here >> >>>> doesn't help >> >>>>> with that >> >>>>> > because >> >>>>> > >>>> the >> >>>>> > >>>>> on-path attacker can do a bid-down and use th= e >> >>>>> client as a MAC >> >>>>> > oracle >> >>>>> > >> for >> >>>>> > >>>>> any MAC the client supports. >> >>>>> > >>>>> >> >>>>> > >>>>> So, I still don't understand what this is >> >>>> supposed >> >>>>> to do. Happy to >> >>>>> > >> have a >> >>>>> > >>>>> call if you >> >>>>> > >>>>> think that helps >> >>>>> > >>>>> >> >>>>> > >>>>> -Ekr >> >>>>> > >>>>> >> >>>>> > >>>>> >> >>>>> > >>>>> >> >>>>> > >>>>> >> >>>>> > >>>>> On Mon, Jun 18, 2018 at 3:40 AM, Gonzalo >> >>>> Camarillo < >> >>>>> > >>>>> Gonzalo.Camarillo@ericsson.com >> >>>> >> >>>>> > >>>> > >> >>>>> > > >>>> >> >>>>> > >>>> >>> wrote: >> >>>>> > >>>>> >> >>>>> > >>>>>> Marc, Eric, >> >>>>> > >>>>>> >> >>>>> > >>>>>> what is the status of this discussion? >> >>>>> > >>>>>> >> >>>>> > >>>>>> Thanks, >> >>>>> > >>>>>> >> >>>>> > >>>>>> Gonzalo >> >>>>> > >>>>>> >> >>>>> > >>>>>> On 04/05/2018 2:35 AM, Eric Rescorla wrote: >> >>>>> > >>>>>>> >> >>>>> > >>>>>>> >> >>>>> > >>>>>>> On Mon, Apr 23, 2018 at 11:16 AM, Marc >> >>>>> Petit-Huguenin < >> >>>>> > >>>> petithug@acm.org >> >>>> > >> >>>>> >> >>>> >> >> >>>>> > >>>>>>> > >>>> > >>>> > >> >>>>> >> >>>> >>>> wrote: >> >>>>> > >>>>>>> >> >>>>> > >>>>>>> On 04/22/2018 05:22 PM, Eric Rescorla >> >>>> wrote: >> >>>>> > >>>>>>> > On Sun, Apr 22, 2018 at 2:02 PM, Marc >> >>>>> Petit-Huguenin < >> >>>>> > >>>>>> petithug@acm.org >> >>>> > >> >>>>> >> >>>> >> >> >>>>> > >> >>>> > >> >>>>> >> >>>> >>>> >> >>>>> > >>>>>>> > wrote: >> >>>>> > >>>>>>> > >> >>>>> > >>>>>>> >> >> >>>>> > >>>>>>> >>>> For a request or indication >> >>>> message, >> >>>>> the agent >> >>>>> > MUST >> >>>>> > >>>>>> include the >> >>>>> > >>>>>>> >>>> USERNAME, >> >>>> MESSAGE-INTEGRITY-SHA256, and >> >>>>> > >> MESSAGE-INTEGRITY >> >>>>> > >>>>>>> >> attributes >> >>>>> > >>>>>>> >>>> in the message unless the age= nt >> >>>>> knows from an >> >>>>> > external >> >>>>> > >>>>>> indication >> >>>>> > >>>>>>> >>>> which message integrity >> >>>> algorithm is >> >>>>> supported >> >>>>> > by both >> >>>>> > >>>>>> agents. In >> >>>>> > >>>>>>> >>>> this case either >> >>>> MESSAGE-INTEGRITY or >> >>>>> > >>>>>> MESSAGE-INTEGRITY-SHA256 MUST >> >>>>> > >>>>>>> >>>> be included in addition to >> >>>>> USERNAME. The HMAC >> >>>>> > for the >> >>>>> > >>>>>> MESSAGE- >> >>>>> > >>>>>>> >>> >> >>>>> > >>>>>>> >>> This text appears to conflict with >> >>>> S 7.3 of >> >>>>> > 5245-bis, which >> >>>>> > >>>> says: >> >>>>> > >>>>>>> >> >> >>>>> > >>>>>>> >> [text missing] >> >>>>> > >>>>>>> >> >> >>>>> > >>>>>>> >> Hmm, no, RFC245bis is still >> referencing >> >>>>> RFC5389, so the >> >>>>> > >>>> procedure >> >>>>> > >>>>>> for >> >>>>> > >>>>>>> >> stunbis does not apply. >> >>>>> > >>>>>>> >> >> >>>>> > >>>>>>> > >> >>>>> > >>>>>>> > I hear what you're saying, but >> >>>> publishing two >> >>>>> > documents at the >> >>>>> > >>>>>> same time >> >>>>> > >>>>>>> > which >> >>>>> > >>>>>>> > make contrary recommendations about >> >>>> the same >> >>>>> basic >> >>>>> > protocol is >> >>>>> > >>>>>> un-good. >> >>>>> > >>>>>>> >> >>>>> > >>>>>>> Sure, but wouldn't it be simpler to hav= e >> >>>>> rfc5245bis >> >>>>> > using stunbis >> >>>>> > >>>>>>> and have them updating their text, >> >>>> more than >> >>>>> adding some >> >>>>> > tortuous >> >>>>> > >>>>>>> text in stunbis? >> >>>>> > >>>>>>> >> >>>>> > >>>>>>> > >> >>>>> > >>>>>>> > >> >>>>> > >>>>>>> >>> The STUN usage must specify >> which >> >>>>> transport >> >>>>> > protocol is >> >>>>> > >>>>>> used, and >> >>>>> > >>>>>>> >> how >> >>>>> > >>>>>>> >>>> the agent determines the IP >> >>>> address >> >>>>> and port >> >>>>> > of the >> >>>>> > >>>>>> recipient. >> >>>>> > >>>>>>> >>>> Section 8 describes a DNS-bas= ed >> >>>>> method of >> >>>>> > determining >> >>>>> > >> the >> >>>>> > >>>>>> IP >> >>>>> > >>>>>>> >> address >> >>>>> > >>>>>>> >>>> and port of a server that a >> >>>> usage >> >>>>> may elect to >> >>>>> > use. >> >>>>> > >> STUN >> >>>>> > >>>>>> may be >> >>>>> > >>>>>>> >> used >> >>>>> > >>>>>>> >>>> with anycast addresses, but >> only >> >>>>> with UDP and >> >>>>> > in usages >> >>>>> > >>>>>> where >> >>>>> > >>>>>>> >>>> authentication is not used. >> >>>>> > >>>>>>> >>> >> >>>>> > >>>>>>> >>> Why this restriction? You should >> >>>> be able >> >>>>> to use >> >>>>> > anycast with >> >>>>> > >>>>>> long-term >> >>>>> > >>>>>>> >>> AUTH for (say) TURN. >> >>>>> > >>>>>>> >> >> >>>>> > >>>>>>> >> >> >>>>> https://www.ietf.org/mail-archive/web/behave/current/ >> >>>>> > >>>>>> msg03582.html >> >>>>> > >>>>>>> >> >>>>> > >>>>> > >>>> msg03582.html> >> >>>>> > >>>>>>> >> >> >>>>> > >>>>>>> >> I think that the decision of >> >>>> permitting Anycast >> >>>>> > should be left >> >>>>> > >>>> to >> >>>>> > >>>>>> each >> >>>>> > >>>>>>> >> STUN Usage. Basic STUN Usage does >> >>>> not use >> >>>>> > authentication and >> >>>>> > >>>> use >> >>>>> > >>>>>> only a >> >>>>> > >>>>>>> >> one round trip for the Binding >> >>>> transaction, so >> >>>>> > Unicast can be >> >>>>> > >>>>>> used. >> >>>>> > >>>>>>> >> >> >>>>> > >>>>>>> > >> >>>>> > >>>>>>> >> OTOH, TURN and ICE should probably s= ay >> >>>>> something >> >>>>> > about that, >> >>>>> > >> so >> >>>>> > >>>> I >> >>>>> > >>>>>> added a >> >>>>> > >>>>>>> >> new bullet point in Section 13: >> >>>>> > >>>>>>> >> >> >>>>> > >>>>>>> >> o If Anycast addresses can be >> >>>> used for >> >>>>> the server >> >>>>> > in case >> >>>>> > >>>> TCP >> >>>>> > >>>>>> or >> >>>>> > >>>>>>> >> TLS-over-TCP, or >> >>>> authentication are used. >> >>>>> > >>>>>>> >> >> >>>>> > >>>>>>> > >> >>>>> > >>>>>>> > Are you leaving this text in? That >> seems >> >>>>> very confusing. >> >>>>> > >>>>>>> >> >>>>> > >>>>>>> In isolation yes, but I think it makes >> >>>> sense >> >>>>> which the text >> >>>>> > >> before >> >>>>> > >>>>>>> the bullet points: >> >>>>> > >>>>>>> >> >>>>> > >>>>>>> A STUN usage defines how STUN is >> >>>> actually >> >>>>> utilized -- >> >>>>> > when to >> >>>>> > >>>> send >> >>>>> > >>>>>>> requests, what to do with the >> >>>> responses, >> >>>>> and which >> >>>>> > optional >> >>>>> > >>>>>>> procedures defined here (or in an >> >>>> extension >> >>>>> to STUN) >> >>>>> > are to be >> >>>>> > >>>>>> used. >> >>>>> > >>>>>>> A usage also defines: >> >>>>> > >>>>>>> >> >>>>> > >>>>>>> [...] >> >>>>> > >>>>>>> >> >>>>> > >>>>>>> o If Anycast addresses can be used >> >>>> for the >> >>>>> server in >> >>>>> > case TCP >> >>>>> > >>>> or >> >>>>> > >>>>>>> TLS-over-TCP, or authentication >> >>>> are used. >> >>>>> > >>>>>>> >> >>>>> > >>>>>>> >> >>>>> > >>>>>>> What is the need for the restriction at all= . >> >>>>> > >>>>>>> >> >>>>> > >>>>>>> >> >>>>> > >>>>>>> >> >>>>> > >>>>>>> >>>> transaction over UDP or >> >>>>> DTLS-over-UDP is also >> >>>>> > >> considered >> >>>>> > >>>>>> failed if >> >>>>> > >>>>>>> >>>> there has been a hard ICMP >> error >> >>>>> [RFC1122]. For >> >>>>> > >> example, >> >>>>> > >>>>>> assuming >> >>>>> > >>>>>>> >> an >> >>>>> > >>>>>>> >>>> RTO of 500ms, requests would >> >>>> be sent >> >>>>> at times >> >>>>> > 0 ms, 500 >> >>>>> > >>>>>> ms, 1500 >> >>>>> > >>>>>>> >> ms, >> >>>>> > >>>>>>> >>>> 3500 ms, 7500 ms, 15500 ms, a= nd >> >>>>> 31500 ms. If the >> >>>>> > >> client >> >>>>> > >>>>>> has not >> >>>>> > >>>>>>> >>>> received a response after >> >>>> 39500 ms, >> >>>>> the client >> >>>>> > will >> >>>>> > >>>>>> consider the >> >>>>> > >>>>>>> >>>> transaction to have timed out= . >> >>>>> > >>>>>>> >>> >> >>>>> > >>>>>>> >>> I note that these recommendations >> >>>> now seem >> >>>>> crazily >> >>>>> > long. I >> >>>>> > >>>>>> assume the >> >>>>> > >>>>>>> >>> WG had consensus on this, but I >> >>>> wanted to >> >>>>> note it. >> >>>>> > >>>>>>> >> >> >>>>> > >>>>>>> >> Not just the WG, also the IESG that >> >>>>> approved RFC 5389 >> >>>>> > too as, >> >>>>> > >>>> but >> >>>>> > >>>>>> for the >> >>>>> > >>>>>>> >> addition of "or DTLS-over-UDP", >> >>>> this is the >> >>>>> same text >> >>>>> > than in >> >>>>> > >>>> RFC >> >>>>> > >>>>>> 5389. >> >>>>> > >>>>>>> >> >> >>>>> > >>>>>>> > >> >>>>> > >>>>>>> > Yes, I know. My point is that while >> they >> >>>>> might have bee >> >>>>> > >> sensible >> >>>>> > >>>>>> when >> >>>>> > >>>>>>> > 5389 was published they *now* seem >> >>>> crazily >> >>>>> long. Did >> >>>>> > the WG >> >>>>> > >>>>>> explicitly >> >>>>> > >>>>>>> > decide not to update them? >> >>>>> > >>>>>>> >> >>>>> > >>>>>>> No, nobody ever suggested that there >> >>>> was an >> >>>>> issue there. >> >>>>> > >>>>>>> >> >>>>> > >>>>>>> >> >>>>> > >>>>>>> OK, well, this seems like it should be >> >>>> considered, >> >>>>> then, >> >>>>> > because this >> >>>>> > >>>>>>> doesn't >> >>>>> > >>>>>>> match modern practice. >> >>>>> > >>>>>>> >> >>>>> > >>>>>>> >> >>>>> > >>>>>>> >> >>>>> > >>>>>>> > This would be good to explain. >> >>>>> > >>>>>>> >> >>>>> > >>>>>>> New text: >> >>>>> > >>>>>>> >> >>>>> > >>>>>>> [...] >> >>>>> > >>>>>>> containing the subjectAltName of tha= t >> >>>>> certificate. >> >>>>> > The test >> >>>>> > >> on >> >>>>> > >>>>>> the >> >>>>> > >>>>>>> MESSAGE-INTEGRITY-SHA256 attribute >> >>>>> indicates that the >> >>>>> > >>>> transaction >> >>>>> > >>>>>> is >> >>>>> > >>>>>>> authenticated and that the client >> >>>>> implements this >> >>>>> > >> specification >> >>>>> > >>>>>> and >> >>>>> > >>>>>>> so can process the ALTERNATE-DOMAIN >> >>>> attribute. >> >>>>> > >>>>>>> >> >>>>> > >>>>>>> >> >>>>> > >>>>>>> All right. >> >>>>> > >>>>>>> >> >>>>> > >>>>>>> >> >>>>> > >>>>>>> > >> >>>>> > >>>>>>> > >> >>>>> > >>>>>>> >>>> o What authentication and >> >>>>> message-integrity >> >>>>> > mechanisms >> >>>>> > >>>>>> are used. >> >>>>> > >>>>>>> >>>> >> >>>>> > >>>>>>> >>>> o The considerations around >> >>>> manual vs. >> >>>>> > automatic key >> >>>>> > >>>>>> derivation >> >>>>> > >>>>>>> >> for >> >>>>> > >>>>>>> >>>> the integrity mechanism, a= s >> >>>>> discussed in >> >>>>> > [RFC4107]. >> >>>>> > >>>>>>> >>>> >> >>>>> > >>>>>>> >>>> o What mechanisms are used t= o >> >>>>> distinguish STUN >> >>>>> > >> messages >> >>>>> > >>>>>> from other >> >>>>> > >>>>>>> >>> >> >>>>> > >>>>>>> >>> Why is this required? It seems >> >>>> like that's >> >>>>> a generic >> >>>>> > STUN >> >>>>> > >>>>>> feature. >> >>>>> > >>>>>>> >> >> >>>>> > >>>>>>> >> That text is identical to the text >> >>>> in RFC >> >>>>> 5389. RFC >> >>>>> > 5764/7983 >> >>>>> > >>>> is >> >>>>> > >>>>>> one such >> >>>>> > >>>>>>> >> mechanism, but there is nothing that >> >>>>> prevent another >> >>>>> > protocol >> >>>>> > >>>>>> stack to use >> >>>>> > >>>>>>> >> a different mechanism (inference, >> >>>> shim, etc...) >> >>>>> > >>>>>>> >> >> >>>>> > >>>>>>> > >> >>>>> > >>>>>>> > But ultimately no matter what the >> >>>> other protocol >> >>>>> > provides for >> >>>>> > >>>>>> demux, STUN >> >>>>> > >>>>>>> > has its >> >>>>> > >>>>>>> > own demux. >> >>>>> > >>>>>>> >> >>>>> > >>>>>>> In fact I think that the reason for >> >>>> that item >> >>>>> was because >> >>>>> > >>>>>>> FINGERPRINT can also be used to demux >> STUN >> >>>>> traffic, but >> >>>>> > it is >> >>>>> > >>>>>>> optional. So an STUN Usage needs to >> >>>> tell if >> >>>>> FINGERPRINT is >> >>>>> > >>>>>>> mandatory (like in ICE). >> >>>>> > >>>>>>> >> >>>>> > >>>>>>> >> >>>>> > >>>>>>> This should be explained. >> >>>>> > >>>>>>> >> >>>>> > >>>>>>> >> >>>>> > >>>>>>> >>> >> >>>>> > >>>>>>> >>>> that is not readily subject t= o >> >>>>> offline dictionary >> >>>>> > >>>> attacks. >> >>>>> > >>>>>>> >>>> Protection of the channel >> >>>> itself, >> >>>>> using TLS or >> >>>>> > DTLS, >> >>>>> > >>>>>> mitigates >> >>>>> > >>>>>>> >> these >> >>>>> > >>>>>>> >>>> attacks. >> >>>>> > >>>>>>> >>>> >> >>>>> > >>>>>>> >>>> STUN supports both >> >>>> MESSAGE-INTEGRITY and >> >>>>> > >>>>>>> MESSAGE-INTEGRITY-SHA256, >> >>>>> > >>>>>>> >>>> which is subject to bid down >> >>>> attacks >> >>>>> by an on-path >> >>>>> > >>>>>> attacker. >> >>>>> > >>>>>>> >>> >> >>>>> > >>>>>>> >>> By an on-path attacker who can forg= e >> >>>>> HMAC-SHA1 in >> >>>>> > real-time? >> >>>>> > >>>>>>> That's a >> >>>>> > >>>>>>> >>> pretty serious adversary, so you >> >>>> should >> >>>>> clarify here >> >>>>> > >>>>>>> >>> >> >>>>> > >>>>>>> >> >> >>>>> > >>>>>>> >> New text: >> >>>>> > >>>>>>> >> >> >>>>> > >>>>>>> >> STUN supports both >> >>>> MESSAGE-INTEGRITY and >> >>>>> > >>>>>> MESSAGE-INTEGRITY-SHA256, >> >>>>> > >>>>>>> >> which is subject to bid down >> >>>> attacks by >> >>>>> an on-path >> >>>>> > attacker >> >>>>> > >>>>>> that >> >>>>> > >>>>>>> >> would strip the >> >>>> MESSAGE-INTEGRITY-SHA256 >> >>>>> attribute >> >>>>> > leaving >> >>>>> > >>>>>>> only the >> >>>>> > >>>>>>> >> MESSAGE-INTEGRITY attribute and >> >>>>> exploiting a potential >> >>>>> > >>>>>>> vulnerability. >> >>>>> > >>>>>>> >> Protection of the channel >> >>>> itself, using >> >>>>> TLS or DTLS, >> >>>>> > >>>> mitigates >> >>>>> > >>>>>>> these >> >>>>> > >>>>>>> >> attacks. Timely removal of the >> >>>> support of >> >>>>> > >> MESSAGE-INTEGRITY >> >>>>> > >>>>>> in a >> >>>>> > >>>>>>> >> future version of STUN is >> necessary. >> >>>>> > >>>>>>> >> >> >>>>> > >>>>>>> > >> >>>>> > >>>>>>> > I still don't understand the >> >>>> capabilities >> >>>>> you seem to >> >>>>> > believe >> >>>>> > >> the >> >>>>> > >>>>>>> attacker >> >>>>> > >>>>>>> > has. >> >>>>> > >>>>>>> > Can you describe the exact attack. >> >>>>> > >>>>>>> > >> >>>>> > >>>>>>> >> >>>>> > >>>>>>> 1. Vulnerability is found in HMAC-SHA1 >> >>>>> > >>>>>>> 2. Client Alice still supports M-I and >> >>>>> M-I-256, does not >> >>>>> > know >> >>>>> > >> what >> >>>>> > >>>>>>> version of STUN server Bob supports and >> so >> >>>>> send both. >> >>>>> > >>>>>>> 3. On-path attacker removes M-I-256. >> >>>>> > >>>>>>> 5. stunbis server Bob thinks that >> >>>> Alice is an >> >>>>> RFC 5389 >> >>>>> > client and >> >>>>> > >>>>>>> continue with that protocol. >> >>>>> > >>>>>>> >> >>>>> > >>>>>>> >> >>>>> > >>>>>>> This seems like an extremely weak attack. I= n >> >>>>> general, any >> >>>>> > protocol of >> >>>>> > >>>>>>> this type is as strong >> >>>>> > >>>>>>> as the weakest integrity algorithm it >> >>>> supports, so >> >>>>> it's not >> >>>>> > that the >> >>>>> > >>>>>>> protocol has a downgrade >> >>>>> > >>>>>>> attack, but rather that the minimum algorit= hm >> >>>>> supported is >> >>>>> > one you >> >>>>> > >>>> don't >> >>>>> > >>>>>>> trust as much >> >>>>> > >>>>>>> as you might like. >> >>>>> > >>>>>>> >> >>>>> > >>>>>>> -Ekr >> >>>>> > >>>>>>> >> >>>>> > >>>>>>> >> >>>>> > >>>>>>> -- >> >>>>> > >> >> >>>>> > >> >>>>> > >> >>>>> > >> >>>>> > -- >> >>>>> > Marc Petit-Huguenin >> >>>>> > Email: marc@petit-huguenin.org >> >>>> >> >>>>> > >>>> > > >>>> >> >>>>> > >>>> >> >> >>>>> > Blog: https://marc.petit-huguenin.org >> >>>> >> >>>>> > Profile: https://www.linkedin.com/in/petithug >> >>>>> > >> >>>>> >> >>>> >> >>> >> > >> > --0000000000009733a605846866ec Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable
Dear All,=C2=A0

On Fri, Mar 8, 2019 at 8:1= 0 PM Eric Rescorla <ekr@rtfm.com>= wrote:
Thanks for the call yesterday.

Thanks to all for moving this specification f= orward.=C2=A0

If the current conversation turns ou= t to converge on this topic before next Wednesday, I'm happy to approve= a revised draft after Eric clears his Discuss.=C2=A0

<= div>If I can help in any way, please let me know.=C2=A0

Spencer
=C2=A0

First, here is what I reco= mmend for the question of SHA-256 for password
hashing:

=C2=A0 No= te: the use of SHA-256 for password hashing does not meet modern
=C2=A0 = standards, which are aimed at slowing down exhaustive password search
= =C2=A0 by providing a relatively slow minimum time to compute the
=C2=A0= hash. Although better algorithms such as Argon2
=C2=A0 [htt= ps://datatracker.ietf.org/doc/draft-irtf-cfrg-argon2/] are
=C2=A0 av= ailable, SHA-256 was chosen for consistency with RFC 7616.


Now, = WRT to the anti-downgrade situation. Here's a stylized version
of th= e protocol:

Client=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0= =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2= =A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0= =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2= =A0=C2=A0=C2=A0=C2=A0 Server

Hello ->
=C2=A0=C2=A0=C2=A0=C2=A0= =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2= =A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0= =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 &l= t;- Nonce, Algorithms
HMAC-H1(H2(Password), Nonce, Algorithms, Msg) ->= ;
=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2= =A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0= =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 <- HMAC-H1(H2(Password)= , ...)

Where H1 and H2 are the HMAC hash functions and the password = hashing
function respectively.

Now, if we assume that the attacke= r does not know Password and that
both H1 and H2 are secure, then it is = not possible for the attacker to
complete the transaction or modify any = of the messages. Further, if
the weakest joint algorithm that both sides= support is still strong,
then an attacker cannot influence the algorith= m negotiation [0]. This
property is provided by covering the algorithms = under the MAC.

However, my point is that this is not a very useful p= roperty.

First, consider the case in which the implementations joint= ly support
one strong algorithm and one weak algorithm. E.g., for H1 the= y support
SHA-256 and the function Z(x) which always emits 0s. This allo= ws
an attacker to force the client and server into using Z, as follows.<= br>

Client=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2= =A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 Attac= ker=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0= =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 Server

Hello ->
=C2=A0=C2= =A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0= =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2= =A0 Hello ->
=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0= =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2= =A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0= =C2=A0=C2=A0=C2=A0 <- Nonce, Alg=3DSHA256, Z
=C2=A0=C2=A0=C2=A0=C2=A0= =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 <- No= nce, Alg=3DZ
Z(H2(Password), Nonce, Alg=3DZ)) ->
=C2=A0=C2=A0=C2= =A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0= =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 Z(H2(Password), Nonce, Alg= =3DSHA256, Z))

The issue here is that the only thing that the MAC is= doing is
authenticating the transaction, and if you can't trust it = to do that,
you can't trust it to authenticate the bid-down defense = either.


During our discussion, there was a suggestion that it wa= s useful to
have biddown defense to defend against weaknesses in H2. I d= on't think
that that's true either. First, remember that the pur= pose of H2 is to
prevent an attacker who recovers the password database = from learning
the user's true password. This is not about defending = the server from
attack (because knowing A1 is enough to attack the serve= r) but about
preventing the attacker from learning a password which migh= t have been
reused on another site.

Now, it's also possible t= o brute-force the user's password just from
the protocol transcript:= if you capture the client's first message
with MESSAGE-INTEGRITY or= MESSAGE-INTEGRITY-SHA256, you can just keep
trying passwords until you = get the right MAC. Note that this is a
passive attack. This is comparati= vely fast because SHA256 and MD5 are
fast.

A much stronger H2 (e.= g., Argon) would help against this, but the
problem now becomes that the= client supports H2 =3D=3D MD5 (or SHA-256)
and so even if the server su= pports Argon, the attacker can mount a
bid-down defense in which it modi= fies the server's first message to
just advertise MD5 and thus get t= he client to provide a suitable
message. The bid-down defense would prev= ent the authentication
transaction from completing, but that's not n= ecessary for this
attack because the attacker can just brute-force the p= assword from
the message it has. To make this work, you would need somet= hing
like a PAKE, which this is not.

Finally, you might think tha= t the server has two databases, one
which uses Argon and one which uses = MD5 and it wants to gradually
phase out the MD5 one, which it will do wh= en no client authenticates
with MD5 for a very long time. An anti-biddow= n defense would sort
of work here, but the fact that the attacker would = have to be
active essentially indefinitely to keep the server confused a= bout
the state of clients -- and that the attacker can likely just
ge= t a valid account and then insist on using MD5 -- makes this a
not very = useful defense.

I think this makes a pretty persuasive case that the= bid-down defense
isn't useful except in the formal "attacker c= annot influence
negotiation" sense. With that said, in the spirit o= f getting this done, I guess
I'm willing to let this go if the secur= ity considerations make clear
that it is only a very limited mechanism.<= br>
-Ekr


[0] This is principally about H1. As long as the H2 = approximately
evenly distributes the password over its range, then crypt= ographic
strength is not important for this question. For instance, you<= br>could replace H2 with an identity function and still have a
secure pr= otocol.






<= div dir=3D"ltr" class=3D"gmail_attr">On Wed, Feb 20, 2019 at 4:03 AM Gonzal= o Camarillo <gonzalo.camarillo@ericsson.com> wrote:
Thanks, Gonzalo! Please, let us know= the agreed way forward once you
have the call.

Cheers,

Gonzalo

On 19-Feb-19 20:05, Gonzalo Salgueiro (gsalguei) wrote:
> Hi Gonzalo -
>
> We have scheduled a conference call with Ekr, Simon, Marc and myself o= n March 7th to discuss the last two remaining issues.=C2=A0 Will update wit= h resolutions once this has occurred.
>
> Cheers,
>
> Gonzalo
>
>
>
>> On Feb 18, 2019, at 8:18 AM, Gonzalo Camarillo <Gonzalo.Camarillo@eric= sson.com> wrote:
>>
>> Hi Gonzalo S,
>>
>> what is the status of this one?
>>
>> Thanks,
>>
>> Gonzalo
>>
>> On 18-Jan-19 20:16, Gonzalo Salgueiro (gsalguei) wrote:
>>> Totally agree, Ekr.=C2=A0 Marc and I are meeting to come up wi= th a proposal
>>> but I do agree we need to have a call to get this put to bed o= nce and
>>> for all.=C2=A0 We=E2=80=99ll offer some potential dates in the= next 2-3 weeks.
>>>
>>> Cheers,
>>>
>>> Gonzalo
>>>
>>>
>>>> On Dec 26, 2018, at 8:05 PM, Eric Rescorla <ekr@rtfm.com
>>>> <mailto:ekr@rtfm.com>> wrote:
>>>>
>>>> We really need to bring this to a close before both Spence= r and I step
>>>> down, I should think.
>>>>
>>>> -Ekr
>>>>
>>>>
>>>> On Thu, Nov 22, 2018 at 4:30 AM Gonzalo Camarillo
>>>> <gonzalo.camarillo@ericsson.com
>>>> <mailto:gonzalo.camarillo@ericsson.com>> wrote:
>>>>
>>>>=C2=A0 =C2=A0 Eric, Spencer, thanks for the status update!<= br> >>>>
>>>>=C2=A0 =C2=A0 Authors, could you please let us know when yo= u plan to get to this?
>>>>
>>>>=C2=A0 =C2=A0 Gonzalo
>>>>
>>>>=C2=A0 =C2=A0 On 19-Nov-18 23:04, Spencer Dawkins at IETF w= rote:
>>>>> Hi, Gonzalo,
>>>>> On Mon, Nov 19, 2018 at 9:06 AM Eric Rescorla <ekr@rtfm.com
>>>>=C2=A0 =C2=A0 <mailto:ekr@rtfm.com>
>>>>> <mailto:ekr@rtfm.com <mailto:ekr@rtfm.com>>> wrote:
>>>>>
>>>>>=C2=A0 =C2=A0 =C2=A0 Not really. I have not received an= y response to my mail of
>>>>=C2=A0 =C2=A0 Oct 23.
>>>>>=C2=A0 =C2=A0 =C2=A0 As before, I'm happy to have a= call, but I believe we're
>>>>=C2=A0 =C2=A0 reaching
>>>>>=C2=A0 =C2=A0 =C2=A0 the limits of what can be accompli= shed by email.
>>>>>
>>>>>
>>>>> Eric would know best (it being his Discuss), but this = is also my
>>>>> understanding.
>>>>>
>>>>> I can add this to the agenda of the IESG informal tele= chat on
>>>>=C2=A0 =C2=A0 November
>>>>> 29, if there hasn't been a call before then, but I= don't have a
>>>>=C2=A0 =C2=A0 reason
>>>>> to wait until then, if it's possible to talk soone= r.
>>>>>
>>>>> Thanks,
>>>>>
>>>>> Spencer
>>>>>=C2=A0
>>>>>
>>>>>
>>>>>=C2=A0 =C2=A0 =C2=A0 -Ekr
>>>>>
>>>>>
>>>>>=C2=A0 =C2=A0 =C2=A0 On Mon, Nov 19, 2018 at 6:35 AM Go= nzalo Camarillo
>>>>>=C2=A0 =C2=A0 =C2=A0 <gonzalo.camarillo@ericsson.com >>>>=C2=A0 =C2=A0 <mailto:gonzalo.camarillo@ericsson.com> >>>>>=C2=A0 =C2=A0 =C2=A0 <mailto:gonzalo.camarillo@ericsson.com=
>>>>=C2=A0 =C2=A0 <mailto:gonzalo.camarillo@ericsson.com>>= ;> wrote:
>>>>>
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 Hi Spencer,
>>>>>
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 what is the status o= f this? Are the authors and the document
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 shepherd
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 working with the rel= evant ADs on the discusses?
>>>>>
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0
>>>>=C2=A0 =C2=A0 =C2=A0https://datatracker.ietf.org/doc/draft-ietf-tram-stun-pmtud/ballot/<= br> >>>>>
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 Cheers,
>>>>>
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 Gonzalo
>>>>>
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 On 24-Oct-18 16:40, = Spencer Dawkins at IETF wrote:
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 > Hi, Marc,
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 > On Wed, Oct 24,= 2018 at 3:44 AM Marc Petit-Huguenin
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 <petithug@acm.org <mailto:petithug@acm.org> >>>>=C2=A0 =C2=A0 <mailto:petithug@acm.org <mailto:petithug@acm.org>>
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 > <mailto:petithug@acm.org <= mailto:petithug@acm.o= rg>
>>>>=C2=A0 =C2=A0 <mailto:petithug@acm.org <mailto:petithug@acm.org>>>> wrote:<= br> >>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0Hi Spencer,
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0I sent my answers to Eric Rescorla questions on
>>>>=C2=A0 =C2=A0 2018-10-07
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 following
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0an in-person meeting with my co-author, but never
>>>>=C2=A0 =C2=A0 got a
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 response
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0back.=C2=A0 Because there was no change proposed by
>>>>=C2=A0 =C2=A0 Eric I went
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 ahead and
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0published -19 a couple of weeks after that, with
>>>>=C2=A0 =C2=A0 the text
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 agreed in
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0response to Adam's and Benjamin's comments.
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 >>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0
>>>>=C2=A0 =C2=A0 =C2=A0 https://www.ietf.org/mail-archive/web/tram/current/msg02635.html
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 > Ah - I wonder i= f that was what had happened.
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 > It sounds like = you did the right thing, and that Eric
>>>>=C2=A0 =C2=A0 has now
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 responded,
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 > which is also t= he right thing to do.
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 > Thanks for help= ing me understand.
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 > Spencer
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0On 10/23/18 7:28 PM, Spencer Dawkins at IETF wrote:
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0> Hi, Marc,
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0> I see that a -19 has been submitted, but didn't
>>>>=C2=A0 =C2=A0 see a
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 reply from
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0Eric in
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0> this thread. Do you think that you've converged?
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0> (I saw an offer of a conference call, so thought an
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 out-of-band
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0> conversation might have happened)
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0> Thanks,
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0> Spencer
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0> On Sun, Oct 7, 2018 at 9:35 AM Marc Petit-Huguenin
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0<petithug@ac= m.org <mailto:= petithug@acm.org>
>>>>=C2=A0 =C2=A0 <mailto:petithug@acm.org <mailto:petithug@acm.org>>
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 <mailto:petithug@acm.org <mai= lto:petithug@acm.org<= /a>>
>>>>=C2=A0 =C2=A0 <mailto:petithug@acm.org <mailto:petithug@acm.org>>>> wrote:<= br> >>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>> Hi Eric,
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>> Please see inline.
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>> On 09/10/2018 03:25 AM, Eric Rescorla wrote:
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>> On Sat, Sep 8, 2018 at 2:31 PM, Marc
>>>>=C2=A0 =C2=A0 Petit-Huguenin
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0<petithug@ac= m.org <mailto:= petithug@acm.org>
>>>>=C2=A0 =C2=A0 <mailto:petithug@acm.org <mailto:petithug@acm.org>>
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 <mailto:petithug@acm.org <mai= lto:petithug@acm.org<= /a>>
>>>>=C2=A0 =C2=A0 <mailto:petithug@acm.org <mailto:petithug@acm.org>>>>
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>> wrote:
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>> Hi Eric,
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>> Apologies for the delay in getting back to that.
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>> I think that there is some misunderstanding
>>>>=C2=A0 =C2=A0 in what
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 STUNbis is
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0trying to
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>> do, so please see my comments inline.
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>> On 06/18/2018 10:43 AM, Eric Rescorla wrote:
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>> Hi folks,
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>> I've reviewed the new version, but I don'= ;t think
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 that the biddown
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>> discussion makes much sense.
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>> To recap, there are two hashes here:
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>> - The hash which you use to store the
>>>>=C2=A0 =C2=A0 password with
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 (currently
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0mostly
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>> MD5)
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>> - The hash you use to compute the MAC
>>>>=C2=A0 =C2=A0 (currently SHA-1).
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>> First, let's stipulate that MD5 isn't a<= br> >>>>=C2=A0 =C2=A0 great choice
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 here,
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0though SHA-1
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>> isn't a great choice
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>> either for pwd hashing You want Argon or the
>>>>=C2=A0 =C2=A0 like.
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 With that said,
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>> there's
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>> no sensible
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>> biddown attack on that hash because it's a >>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 per-server feature,<= br> >>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0not a
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>> per-transaction
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>> feature. So, as long as the server has
>>>>=C2=A0 =C2=A0 MD5-hashed
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 passwords, the
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>> situation
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>> is bad.
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>> In no place in STUNbis we are proposing to
>>>>=C2=A0 =C2=A0 use SHA-1
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 for password
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>> encryption, so I am not sure where that come
>>>>=C2=A0 =C2=A0 from.
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 What we
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0propose is:
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>> You're right, it's SHA-256, but my criticisms >>>>=C2=A0 =C2=A0 apply
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 equally there.
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>> SHA-256 was what the WG adopted.=C2=A0 Our attempts
>>>>=C2=A0 =C2=A0 to add
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 other passwords
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>> encryption mechanisms were denied.=C2=A0 It is true that
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 Argon2 was
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0not in that
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>> list (in our defense Argon2 was not known
>>>>=C2=A0 =C2=A0 before July
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 2015), but
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0I do not
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>> see why the WG would have accepted that one
>>>>=C2=A0 =C2=A0 over the
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 others.
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0Anyway it is
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>> too late to fix this, as it is my understanding
>>>>=C2=A0 =C2=A0 that
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 the WG does
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0not have
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>> enough energy to reach consensus on a new password
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 algorithm.
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0Someone can
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>> just write a draft adding Argon2 as password
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 encryption, as we >>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0will have a
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>> IANA registry for that.
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>> - Establish a registry for new password
>>>>=C2=A0 =C2=A0 algorithms
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 (section
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A018.5), so
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>> algorithms like Argon2 could be added later
>>>>=C2=A0 =C2=A0 (but note
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 that our own
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>> proposals to add more password algorithms were
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 rejected by the
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0working
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>> group).
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>> - Add a new password algorithm to that registry,
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 namely SHA-256.
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>> - Register MD5 as an initial password
>>>>=C2=A0 =C2=A0 algorithm for
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 backward
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>> compatibility
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>> purpose.
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>> As for the biddown protection itself, it is my
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 recollection that it=
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>> happened more or less like that:
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>> INT. MEETING ROOM - DAY
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>> One of the co-editors of STUNBis stands at the
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 microphone:
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2= =A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 CO-EDITOR
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2= =A0 =C2=A0 We added SHA-256 protection for
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 passwords
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2= =A0 =C2=A0 in STUNBis.
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2= =A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 SOMEONE (V.O.)
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2= =A0 =C2=A0 As MD5 still need to be
>>>>=C2=A0 =C2=A0 supported,
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 you need to add
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2= =A0 =C2=A0 protection for bid-down attacks.
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>> CLOSE-UP on CO-EDITOR ROLLING HIS EYES
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2= =A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 CO-EDITOR
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2= =A0 =C2=A0 OK, I'll work on that.
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>> Four to eight months has passed.
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>> INT. ANOTHER MEETING ROOM - DAY
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>> The same co-editor of STUNBis stands at the
>>>>=C2=A0 =C2=A0 microphone:
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2= =A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 CO-EDITOR
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2= =A0 =C2=A0 We added a nice mechanism to
>>>>=C2=A0 =C2=A0 prevent
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 bid-down
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2= =A0 =C2=A0 attacks on passwords.=C2=A0 Any
>>>>=C2=A0 =C2=A0 comments?
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2= =A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 THE ROOM
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2= =A0 =C2=A0 (silence)
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2= =A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 CO-EDITOR
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2= =A0 =C2=A0 Moving on...
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>> I don't see how any of this is relevant to my
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 technical points
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0above.
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>> My point was that we, the co-editors, did not
>>>>=C2=A0 =C2=A0 decide on
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 adding
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0bid-down
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>> protection, someone asked us to do so and
>>>>=C2=A0 =C2=A0 no-one in the
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 WG saw
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0any problem
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>> with that.=C2=A0 The reasons that person wanted that
>>>>=C2=A0 =C2=A0 are not
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 known to
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0us but, as
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>> you insist, here's one reason I can think of:
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>> It is a fact that, for operational reasons, a
>>>>=C2=A0 =C2=A0 password
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 database
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0cannot be
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>> re-encrypted at once.=C2=A0 Also for operational
>>>>=C2=A0 =C2=A0 reasons,
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 the MD5 password
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>> cannot be immediately removed from the database
>>>>=C2=A0 =C2=A0 as soon
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 the user
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0submitted
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>> a new one.=C2=A0 In fact, and for quite some time, both
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 encrypted
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0variants of
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>> the same password may have to be kept in that
>>>>=C2=A0 =C2=A0 database,
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 because a
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0single
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>> user may use a mix of devices, some of them
>>>>=C2=A0 =C2=A0 that use an
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 RFC 5389
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0client,
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>> some that use a STUNbis client.=C2=A0 It is up to
>>>>=C2=A0 =C2=A0 the STUN
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 server owner to
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>> decide how long the migration to STUNbis will
>>>>=C2=A0 =C2=A0 take and
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 when it
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0will be
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>> acceptable to reject all RFC 5389 (i.e. MD5)
>>>>=C2=A0 =C2=A0 clients (that
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0migration time
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>> can be purposely reduced to 0 seconds but
>>>>=C2=A0 =C2=A0 that's the
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 choice and
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>> responsibility of the owner of the server).
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>> Meanwhile we still need to be sure that if the STUN
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 client is
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0implementing
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>> STUNbis it unconditionally gets the additional
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 protection of the ne= w
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>> password encryption algorithm.=C2=A0 That's where
>>>>=C2=A0 =C2=A0 the biddown
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0protection kicks
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>> in, by preventing an online attacker to have
>>>>=C2=A0 =C2=A0 the server
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0misidentifying a
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>> STUNbis client as an RFC 5389 client, by
>>>>=C2=A0 =C2=A0 preventing an
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 online
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0attacker to
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>> have the client misidentifying a STUNbis server
>>>>=C2=A0 =C2=A0 as a
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 RFC 5389
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0server, and
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>> having both them use the MD5 encrypted password
>>>>=C2=A0 =C2=A0 instead
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 of the
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0SHA-256
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>> encrypted password, all of that easily done by
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 stripping the
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0unprotected
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>> 401 response of the new STUNbis PASSWORD-ALGORITHMS
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 attribute.
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>> The second topic is the hash used to compute the=
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 MAC. However,
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0I don't
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>> see
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>> how
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>> this gives you sensible biddown protection
>>>>=C2=A0 =C2=A0 because
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 that hash
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0is also
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>> used
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>> to compute
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>> MAC over the negotiation: an attacker who has >>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 compromised a
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0MAC which
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>> the
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>> server
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>> supports will quite likely be able to forge
>>>>=C2=A0 =C2=A0 a MAC
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 over the
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0transcript
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>> as
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>> well. This is,
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>> I suppose, potentially useful as a defense
>>>>=C2=A0 =C2=A0 against
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 some other
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0weakness
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>> (e.g.,
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>> version #), but I don't really see how the >>>>=C2=A0 =C2=A0 current
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 design
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0helps against
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>> attacks on the
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>> MAC.
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>> There is no biddown attack protection for the
>>>>=C2=A0 =C2=A0 MAC, as
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 stated in
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0Section
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>> 16.3:
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>> "The bid-down protection mechanism described >>>>=C2=A0 =C2=A0 in this
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 document
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0is new,
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>=C2=A0 and thus cannot currently protect against a >>>>=C2=A0 =C2=A0 bid-down
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 attack that
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>=C2=A0 lowers the strength of the hash algorithm to >>>>=C2=A0 =C2=A0 HMAC-SHA1."
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>> What we put in place is a plan for *future*
>>>>=C2=A0 =C2=A0 versions
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 of STUN to get
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>> biddown protection for the MAC.=C2=A0 That's it,=
>>>>=C2=A0 =C2=A0 no more,
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 no less.
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>> Yes, but I don't believe that this will
>>>>=C2=A0 =C2=A0 provide bid-down
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0protection for
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>> the
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>> MAC in the future for the reasons I indicate
>>>>=C2=A0 =C2=A0 above.
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>> If you think this does something useful,
>>>>=C2=A0 =C2=A0 please show me an
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0example attack
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>> and how this fixes it. Note that it's not
>>>>=C2=A0 =C2=A0 generally
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 useful to
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0just bid
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>> down
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>> the MAC itself unless the MAC you bid down to
>>>>=C2=A0 =C2=A0 is weak
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 enough to
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0exploit
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>> in
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>> some other way.
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>> I do not know what weaknesses will be
>>>>=C2=A0 =C2=A0 discovered in the
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 future.
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0I am also
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>> pretty sure that the cost of not using that
>>>>=C2=A0 =C2=A0 mechanism
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 is very
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0close to 0.
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>> What I am sure of is that the cost of
>>>>=C2=A0 =C2=A0 reengineering a
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 new biddown
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>> protection mechanism if we ever need it will be
>>>>=C2=A0 =C2=A0 high.
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 We already
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0went
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>> through the pains of designing one for the password
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 algorithm, so
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0why not
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>> extend it so it can be used in the aftermath of the
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 next Snowden
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0facepalm
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>> moment?
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>> Again, happy to have a call to walk though
>>>>=C2=A0 =C2=A0 this if that
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>> helps.
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>> -Ekr
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>> You might think that there was a MAC which
>>>>=C2=A0 =C2=A0 was easier to
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0reverse to
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>> find
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>> the original
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>> password, but the defense you have here
>>>>=C2=A0 =C2=A0 doesn't help
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 with that
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0because
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>> the
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>> on-path attacker can do a bid-down and use the >>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 client as a MAC
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0oracle
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>> for
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>> any MAC the client supports.
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>> So, I still don't understand what this is >>>>=C2=A0 =C2=A0 supposed
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 to do. Happy to
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>> have a
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>> call if you
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>> think that helps
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>> -Ekr
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>> On Mon, Jun 18, 2018 at 3:40 AM, Gonzalo
>>>>=C2=A0 =C2=A0 Camarillo <
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>> Gonzalo.Camarillo@ericsson.com
>>>>=C2=A0 =C2=A0 <mailto:Gonzalo.Camarillo@ericsson.com> >>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 <mailto:Gonzalo.Camari= llo@ericsson.com
>>>>=C2=A0 =C2=A0 <mailto:Gonzalo.Camarillo@ericsson.com>>= ;
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0<mailto:Gonzalo.Camarillo@ericsson.com
>>>>=C2=A0 =C2=A0 <mailto:Gonzalo.Camarillo@ericsson.com> >>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 <mailto:Gonzalo.Camari= llo@ericsson.com
>>>>=C2=A0 =C2=A0 <mailto:Gonzalo.Camarillo@ericsson.com>>= ;>> wrote:
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>> Marc, Eric,
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>> what is the status of this discussion?
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>> Thanks,
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>> Gonzalo
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>> On 04/05/2018 2:35 AM, Eric Rescorla wrote:<= br> >>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>> On Mon, Apr 23, 2018 at 11:16 AM, Marc >>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 Petit-Huguenin <<= br> >>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>> petithug@acm.org <mailto:petithug@acm.org>
>>>>=C2=A0 =C2=A0 <mailto:petithug@acm.org <mailto:petithug@acm.org>>
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 <mailto:petithug@acm.org <mai= lto:petithug@acm.org<= /a>>
>>>>=C2=A0 =C2=A0 <mailto:petithug@acm.org <mailto:petithug@acm.org>>>
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>> <mailto:petithug@acm.org
>>>>=C2=A0 =C2=A0 <mailto:petithug@acm.org> <mailto:petithug@acm.org
>>>>=C2=A0 =C2=A0 <mailto:petithug@acm.org>>
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 <mailto:petithug@acm.org <mai= lto:petithug@acm.org<= /a>>
>>>>=C2=A0 =C2=A0 <mailto:petithug@acm.org <mailto:petithug@acm.org>>>>> wro= te:
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>=C2=A0 =C2=A0 =C2=A0On 04/22/2018 05:22 P= M, Eric Rescorla
>>>>=C2=A0 =C2=A0 wrote:
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>=C2=A0 =C2=A0 =C2=A0> On Sun, Apr 22, = 2018 at 2:02 PM, Marc
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 Petit-Huguenin <<= br> >>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>> petithug@acm.org <mailto:petithug@acm.org>
>>>>=C2=A0 =C2=A0 <mailto:petithug@acm.org <mailto:petithug@acm.org>>
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 <mailto:petithug@acm.org <mai= lto:petithug@acm.org<= /a>>
>>>>=C2=A0 =C2=A0 <mailto:petithug@acm.org <mailto:petithug@acm.org>>>
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0<mailto:peti= thug@acm.org <mailto:petithug@acm.org>
>>>>=C2=A0 =C2=A0 <mailto:petithug@acm.org <mailto:petithug@acm.org>>
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 <mailto:petithug@acm.org <mai= lto:petithug@acm.org<= /a>>
>>>>=C2=A0 =C2=A0 <mailto:petithug@acm.org <mailto:petithug@acm.org>>>>>
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>=C2=A0 =C2=A0 =C2=A0> wrote:
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>=C2=A0 =C2=A0 =C2=A0>
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>=C2=A0 =C2=A0 =C2=A0>>
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>=C2=A0 =C2=A0 =C2=A0>>>>=C2= =A0 =C2=A0 =C2=A0 For a request or indication
>>>>=C2=A0 =C2=A0 message,
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 the agent
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0MUST
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>> include the
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>=C2=A0 =C2=A0 =C2=A0>>>>=C2= =A0 =C2=A0 =C2=A0 USERNAME,
>>>>=C2=A0 =C2=A0 MESSAGE-INTEGRITY-SHA256, and
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>> MESSAGE-INTEGRITY
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>=C2=A0 =C2=A0 =C2=A0>> attributes >>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>=C2=A0 =C2=A0 =C2=A0>>>>=C2= =A0 =C2=A0 =C2=A0 in the message unless the agent
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 knows from an
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0external
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>> indication
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>=C2=A0 =C2=A0 =C2=A0>>>>=C2= =A0 =C2=A0 =C2=A0 which message integrity
>>>>=C2=A0 =C2=A0 algorithm is
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 supported
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0by both
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>> agents.=C2=A0 In
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>=C2=A0 =C2=A0 =C2=A0>>>>=C2= =A0 =C2=A0 =C2=A0 this case either
>>>>=C2=A0 =C2=A0 MESSAGE-INTEGRITY or
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>> MESSAGE-INTEGRITY-SHA256 MUST
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>=C2=A0 =C2=A0 =C2=A0>>>>=C2= =A0 =C2=A0 =C2=A0 be included in addition to
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 USERNAME.=C2=A0 The = HMAC
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0for the
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>> MESSAGE-
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>=C2=A0 =C2=A0 =C2=A0>>>
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>=C2=A0 =C2=A0 =C2=A0>>> This tex= t appears to conflict with
>>>>=C2=A0 =C2=A0 S 7.3 of
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A05245-bis, which
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>> says:
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>=C2=A0 =C2=A0 =C2=A0>>
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>=C2=A0 =C2=A0 =C2=A0>> [text missin= g]
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>=C2=A0 =C2=A0 =C2=A0>>
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>=C2=A0 =C2=A0 =C2=A0>> Hmm, no, RFC= 245bis is still referencing
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 RFC5389, so the
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>> procedure
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>> for
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>=C2=A0 =C2=A0 =C2=A0>> stunbis does= not apply.
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>=C2=A0 =C2=A0 =C2=A0>>
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>=C2=A0 =C2=A0 =C2=A0>
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>=C2=A0 =C2=A0 =C2=A0> I hear what you&= #39;re saying, but
>>>>=C2=A0 =C2=A0 publishing two
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0documents at the
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>> same time
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>=C2=A0 =C2=A0 =C2=A0> which
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>=C2=A0 =C2=A0 =C2=A0> make contrary re= commendations about
>>>>=C2=A0 =C2=A0 the same
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 basic
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0protocol is
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>> un-good.
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>=C2=A0 =C2=A0 =C2=A0Sure, but wouldn'= t it be simpler to have
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 rfc5245bis
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0using stunbis
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>=C2=A0 =C2=A0 =C2=A0and have them updatin= g their text,
>>>>=C2=A0 =C2=A0 more than
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 adding some
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0tortuous
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>=C2=A0 =C2=A0 =C2=A0text in stunbis?
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>=C2=A0 =C2=A0 =C2=A0>
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>=C2=A0 =C2=A0 =C2=A0>
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>=C2=A0 =C2=A0 =C2=A0>>>=C2=A0 = =C2=A0 =C2=A0 The STUN usage must specify which
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 transport
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0protocol is
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>> used, and
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>=C2=A0 =C2=A0 =C2=A0>> how
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>=C2=A0 =C2=A0 =C2=A0>>>>=C2= =A0 =C2=A0 =C2=A0 the agent determines the IP
>>>>=C2=A0 =C2=A0 address
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 and port
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0of the
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>> recipient.
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>=C2=A0 =C2=A0 =C2=A0>>>>=C2= =A0 =C2=A0 =C2=A0 Section 8 describes a DNS-based
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 method of
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0determining
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>> the
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>> IP
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>=C2=A0 =C2=A0 =C2=A0>> address
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>=C2=A0 =C2=A0 =C2=A0>>>>=C2= =A0 =C2=A0 =C2=A0 and port of a server that a
>>>>=C2=A0 =C2=A0 usage
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 may elect to
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0use.
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>> STUN
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>> may be
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>=C2=A0 =C2=A0 =C2=A0>> used
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>=C2=A0 =C2=A0 =C2=A0>>>>=C2= =A0 =C2=A0 =C2=A0 with anycast addresses, but only
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 with UDP and
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0in usages
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>> where
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>=C2=A0 =C2=A0 =C2=A0>>>>=C2= =A0 =C2=A0 =C2=A0 authentication is not used.
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>=C2=A0 =C2=A0 =C2=A0>>>
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>=C2=A0 =C2=A0 =C2=A0>>> Why this= restriction? You should
>>>>=C2=A0 =C2=A0 be able
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 to use
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0anycast with
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>> long-term
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>=C2=A0 =C2=A0 =C2=A0>>> AUTH for= (say) TURN.
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>=C2=A0 =C2=A0 =C2=A0>>
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>=C2=A0 =C2=A0 =C2=A0>>
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 https://www.ietf.org/mail-archive/web/behave/current/
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>> msg03582.html
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>=C2=A0 =C2=A0
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0<https://www.ietf.org/mail-archive/web/behave/current/=
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>> msg03582.html>
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>=C2=A0 =C2=A0 =C2=A0>>
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>=C2=A0 =C2=A0 =C2=A0>> I think that= the decision of
>>>>=C2=A0 =C2=A0 permitting Anycast
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0should be left
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>> to
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>> each
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>=C2=A0 =C2=A0 =C2=A0>> STUN Usage.= =C2=A0 Basic STUN Usage does
>>>>=C2=A0 =C2=A0 not use
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0authentication and
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>> use
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>> only a
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>=C2=A0 =C2=A0 =C2=A0>> one round tr= ip for the Binding
>>>>=C2=A0 =C2=A0 transaction, so
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0Unicast can be
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>> used.
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>=C2=A0 =C2=A0 =C2=A0>>
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>=C2=A0 =C2=A0 =C2=A0>
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>=C2=A0 =C2=A0 =C2=A0>> OTOH, TURN a= nd ICE should probably say
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 something
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0about that,
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>> so
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>> I
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>> added a
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>=C2=A0 =C2=A0 =C2=A0>> new bullet p= oint in Section 13:
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>=C2=A0 =C2=A0 =C2=A0>>
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>=C2=A0 =C2=A0 =C2=A0>>=C2=A0 =C2=A0= o=C2=A0 If Anycast addresses can be
>>>>=C2=A0 =C2=A0 used for
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 the server
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0in case
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>> TCP
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>> or
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>=C2=A0 =C2=A0 =C2=A0>>=C2=A0 =C2=A0= =C2=A0 =C2=A0TLS-over-TCP, or
>>>>=C2=A0 =C2=A0 authentication are used.
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>=C2=A0 =C2=A0 =C2=A0>>
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>=C2=A0 =C2=A0 =C2=A0>
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>=C2=A0 =C2=A0 =C2=A0> Are you leaving = this text in? That seems
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 very confusing.
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>=C2=A0 =C2=A0 =C2=A0In isolation yes, but= I think it makes
>>>>=C2=A0 =C2=A0 sense
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 which the text
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>> before
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>=C2=A0 =C2=A0 =C2=A0the bullet points: >>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 A STUN usage = defines how STUN is
>>>>=C2=A0 =C2=A0 actually
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 utilized --
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0when to
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>> send
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 requests, wha= t to do with the
>>>>=C2=A0 =C2=A0 responses,
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 and which
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0optional
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 procedures de= fined here (or in an
>>>>=C2=A0 =C2=A0 extension
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 to STUN)
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0are to be
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>> used.
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 A usage also = defines:
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>=C2=A0 =C2=A0 =C2=A0[...]
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 o=C2=A0 If An= ycast addresses can be used
>>>>=C2=A0 =C2=A0 for the
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 server in
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0case TCP
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>> or
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0= TLS-over-TCP, or authentication
>>>>=C2=A0 =C2=A0 are used.
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>> What is the need for the restriction at = all.
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>=C2=A0 =C2=A0 =C2=A0>>>>=C2= =A0 =C2=A0 =C2=A0 transaction over UDP or
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 DTLS-over-UDP is als= o
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>> considered
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>> failed if
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>=C2=A0 =C2=A0 =C2=A0>>>>=C2= =A0 =C2=A0 =C2=A0 there has been a hard ICMP error
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 [RFC1122].=C2=A0 For=
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>> example,
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>> assuming
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>=C2=A0 =C2=A0 =C2=A0>> an
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>=C2=A0 =C2=A0 =C2=A0>>>>=C2= =A0 =C2=A0 =C2=A0 RTO of 500ms, requests would
>>>>=C2=A0 =C2=A0 be sent
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 at times
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A00 ms, 500
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>> ms, 1500
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>=C2=A0 =C2=A0 =C2=A0>> ms,
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>=C2=A0 =C2=A0 =C2=A0>>>>=C2= =A0 =C2=A0 =C2=A0 3500 ms, 7500 ms, 15500 ms, and
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 31500 ms.=C2=A0 If t= he
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>> client
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>> has not
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>=C2=A0 =C2=A0 =C2=A0>>>>=C2= =A0 =C2=A0 =C2=A0 received a response after
>>>>=C2=A0 =C2=A0 39500 ms,
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 the client
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0will
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>> consider the
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>=C2=A0 =C2=A0 =C2=A0>>>>=C2= =A0 =C2=A0 =C2=A0 transaction to have timed out.
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>=C2=A0 =C2=A0 =C2=A0>>>
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>=C2=A0 =C2=A0 =C2=A0>>> I note t= hat these recommendations
>>>>=C2=A0 =C2=A0 now seem
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 crazily
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0long. I
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>> assume the
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>=C2=A0 =C2=A0 =C2=A0>>> WG had c= onsensus on this, but I
>>>>=C2=A0 =C2=A0 wanted to
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 note it.
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>=C2=A0 =C2=A0 =C2=A0>>
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>=C2=A0 =C2=A0 =C2=A0>> Not just the= WG, also the IESG that
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 approved RFC 5389 >>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0too as,
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>> but
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>> for the
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>=C2=A0 =C2=A0 =C2=A0>> addition of = "or DTLS-over-UDP",
>>>>=C2=A0 =C2=A0 this is the
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 same text
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0than in
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>> RFC
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>> 5389.
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>=C2=A0 =C2=A0 =C2=A0>>
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>=C2=A0 =C2=A0 =C2=A0>
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>=C2=A0 =C2=A0 =C2=A0> Yes, I know. My = point is that while they
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 might have bee
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>> sensible
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>> when
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>=C2=A0 =C2=A0 =C2=A0> 5389 was publish= ed they *now* seem
>>>>=C2=A0 =C2=A0 crazily
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 long. Did
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0the WG
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>> explicitly
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>=C2=A0 =C2=A0 =C2=A0> decide not to up= date them?
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>=C2=A0 =C2=A0 =C2=A0No, nobody ever sugge= sted that there
>>>>=C2=A0 =C2=A0 was an
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 issue there.
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>> OK, well, this seems like it should be >>>>=C2=A0 =C2=A0 considered,
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 then,
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0because this
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>> doesn't
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>> match modern practice.
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>=C2=A0 =C2=A0 =C2=A0> This would be go= od to explain.
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>=C2=A0 =C2=A0 =C2=A0New text:
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 [...]
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 containing th= e subjectAltName of that
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 certificate.
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0The test
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>> on
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>> the
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 MESSAGE-INTEG= RITY-SHA256 attribute
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 indicates that the >>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>> transaction
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>> is
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 authenticated= and that the client
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 implements this
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>> specification
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>> and
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 so can proces= s the ALTERNATE-DOMAIN
>>>>=C2=A0 =C2=A0 attribute.
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>> All right.
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>=C2=A0 =C2=A0 =C2=A0>
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>=C2=A0 =C2=A0 =C2=A0>
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>=C2=A0 =C2=A0 =C2=A0>>>>=C2= =A0 =C2=A0 =C2=A0 o=C2=A0 What authentication and
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 message-integrity >>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0mechanisms
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>> are used.
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>=C2=A0 =C2=A0 =C2=A0>>>>
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>=C2=A0 =C2=A0 =C2=A0>>>>=C2= =A0 =C2=A0 =C2=A0 o=C2=A0 The considerations around
>>>>=C2=A0 =C2=A0 manual vs.
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0automatic key
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>> derivation
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>=C2=A0 =C2=A0 =C2=A0>> for
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>=C2=A0 =C2=A0 =C2=A0>>>>=C2= =A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0the integrity mechanism, as
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 discussed in
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0[RFC4107].
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>=C2=A0 =C2=A0 =C2=A0>>>>
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>=C2=A0 =C2=A0 =C2=A0>>>>=C2= =A0 =C2=A0 =C2=A0 o=C2=A0 What mechanisms are used to
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 distinguish STUN
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>> messages
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>> from other
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>=C2=A0 =C2=A0 =C2=A0>>>
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>=C2=A0 =C2=A0 =C2=A0>>> Why is t= his required? It seems
>>>>=C2=A0 =C2=A0 like that's
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 a generic
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0STUN
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>> feature.
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>=C2=A0 =C2=A0 =C2=A0>>
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>=C2=A0 =C2=A0 =C2=A0>> That text is= identical to the text
>>>>=C2=A0 =C2=A0 in RFC
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 5389.=C2=A0 RFC
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A05764/7983
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>> is
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>> one such
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>=C2=A0 =C2=A0 =C2=A0>> mechanism, b= ut there is nothing that
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 prevent another
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0protocol
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>> stack to use
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>=C2=A0 =C2=A0 =C2=A0>> a different = mechanism (inference,
>>>>=C2=A0 =C2=A0 shim, etc...)
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>=C2=A0 =C2=A0 =C2=A0>>
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>=C2=A0 =C2=A0 =C2=A0>
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>=C2=A0 =C2=A0 =C2=A0> But ultimately n= o matter what the
>>>>=C2=A0 =C2=A0 other protocol
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0provides for
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>> demux, STUN
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>=C2=A0 =C2=A0 =C2=A0> has its
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>=C2=A0 =C2=A0 =C2=A0> own demux.
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>=C2=A0 =C2=A0 =C2=A0In fact I think that = the reason for
>>>>=C2=A0 =C2=A0 that item
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 was because
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>=C2=A0 =C2=A0 =C2=A0FINGERPRINT can also = be used to demux STUN
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 traffic, but
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0it is
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>=C2=A0 =C2=A0 =C2=A0optional.=C2=A0 So an= STUN Usage needs to
>>>>=C2=A0 =C2=A0 tell if
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 FINGERPRINT is
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>=C2=A0 =C2=A0 =C2=A0mandatory (like in IC= E).
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>> This should be explained.
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>=C2=A0 =C2=A0 =C2=A0>>>
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>=C2=A0 =C2=A0 =C2=A0>>>>=C2= =A0 =C2=A0 =C2=A0 that is not readily subject to
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 offline dictionary >>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>> attacks.
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>=C2=A0 =C2=A0 =C2=A0>>>>=C2= =A0 =C2=A0 =C2=A0 Protection of the channel
>>>>=C2=A0 =C2=A0 itself,
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 using TLS or
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0DTLS,
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>> mitigates
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>=C2=A0 =C2=A0 =C2=A0>> these
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>=C2=A0 =C2=A0 =C2=A0>>>>=C2= =A0 =C2=A0 =C2=A0 attacks.
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>=C2=A0 =C2=A0 =C2=A0>>>>
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>=C2=A0 =C2=A0 =C2=A0>>>>=C2= =A0 =C2=A0 =C2=A0 STUN supports both
>>>>=C2=A0 =C2=A0 MESSAGE-INTEGRITY and
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>=C2=A0 =C2=A0 =C2=A0MESSAGE-INTEGRITY-SHA= 256,
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>=C2=A0 =C2=A0 =C2=A0>>>>=C2= =A0 =C2=A0 =C2=A0 which is subject to bid down
>>>>=C2=A0 =C2=A0 attacks
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 by an on-path
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>> attacker.
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>=C2=A0 =C2=A0 =C2=A0>>>
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>=C2=A0 =C2=A0 =C2=A0>>> By an on= -path attacker who can forge
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 HMAC-SHA1 in
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0real-time?
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>=C2=A0 =C2=A0 =C2=A0That's a
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>=C2=A0 =C2=A0 =C2=A0>>> pretty s= erious adversary, so you
>>>>=C2=A0 =C2=A0 should
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 clarify here
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>=C2=A0 =C2=A0 =C2=A0>>>
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>=C2=A0 =C2=A0 =C2=A0>>
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>=C2=A0 =C2=A0 =C2=A0>> New text: >>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>=C2=A0 =C2=A0 =C2=A0>>
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>=C2=A0 =C2=A0 =C2=A0>>=C2=A0 =C2=A0= STUN supports both
>>>>=C2=A0 =C2=A0 MESSAGE-INTEGRITY and
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>> MESSAGE-INTEGRITY-SHA256,
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>=C2=A0 =C2=A0 =C2=A0>>=C2=A0 =C2=A0= which is subject to bid down
>>>>=C2=A0 =C2=A0 attacks by
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 an on-path
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0attacker
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>> that
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>=C2=A0 =C2=A0 =C2=A0>>=C2=A0 =C2=A0= would strip the
>>>>=C2=A0 =C2=A0 MESSAGE-INTEGRITY-SHA256
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 attribute
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0leaving
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>=C2=A0 =C2=A0 =C2=A0only the
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>=C2=A0 =C2=A0 =C2=A0>>=C2=A0 =C2=A0= MESSAGE-INTEGRITY attribute and
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 exploiting a potenti= al
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>=C2=A0 =C2=A0 =C2=A0vulnerability.
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>=C2=A0 =C2=A0 =C2=A0>>=C2=A0 =C2=A0= Protection of the channel
>>>>=C2=A0 =C2=A0 itself, using
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 TLS or DTLS,
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>> mitigates
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>=C2=A0 =C2=A0 =C2=A0these
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>=C2=A0 =C2=A0 =C2=A0>>=C2=A0 =C2=A0= attacks.=C2=A0 Timely removal of the
>>>>=C2=A0 =C2=A0 support of
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>> MESSAGE-INTEGRITY
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>> in a
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>=C2=A0 =C2=A0 =C2=A0>>=C2=A0 =C2=A0= future version of STUN is necessary.
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>=C2=A0 =C2=A0 =C2=A0>>
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>=C2=A0 =C2=A0 =C2=A0>
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>=C2=A0 =C2=A0 =C2=A0> I still don'= t understand the
>>>>=C2=A0 =C2=A0 capabilities
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 you seem to
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0believe
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>> the
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>=C2=A0 =C2=A0 =C2=A0attacker
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>=C2=A0 =C2=A0 =C2=A0> has.
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>=C2=A0 =C2=A0 =C2=A0> Can you describe= the exact attack.
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>=C2=A0 =C2=A0 =C2=A0>
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>=C2=A0 =C2=A0 =C2=A01. Vulnerability is f= ound in HMAC-SHA1
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>=C2=A0 =C2=A0 =C2=A02. Client Alice still= supports M-I and
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 M-I-256, does not >>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0know
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>> what
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>=C2=A0 =C2=A0 =C2=A0version of STUN serve= r Bob supports and so
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 send both.
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>=C2=A0 =C2=A0 =C2=A03. On-path attacker r= emoves M-I-256.
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>=C2=A0 =C2=A0 =C2=A05. stunbis server Bob= thinks that
>>>>=C2=A0 =C2=A0 Alice is an
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 RFC 5389
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0client and
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>=C2=A0 =C2=A0 =C2=A0continue with that pr= otocol.
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>> This seems like an extremely weak attack= . In
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 general, any
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0protocol of
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>> this type is as strong
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>> as the weakest integrity algorithm it >>>>=C2=A0 =C2=A0 supports, so
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 it's not
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0that the
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>> protocol has a downgrade
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>> attack, but rather that the minimum algo= rithm
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 supported is
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0one you
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>> don't
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>> trust as much
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>> as you might like.
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>> -Ekr
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>>>>>>=C2=A0 =C2=A0 =C2=A0--
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0>>
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0--
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0Marc Petit-Huguenin
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0Email: m= arc@petit-huguenin.org
>>>>=C2=A0 =C2=A0 <mailto:marc@petit-huguenin.org>
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 <mailto:marc@petit-huguenin.o= rg
>>>>=C2=A0 =C2=A0 <mailto:marc@petit-huguenin.org>> <mailto:<= a href=3D"mailto:marc@petit-huguenin.org" target=3D"_blank">marc@petit-hugu= enin.org
>>>>=C2=A0 =C2=A0 <mailto:marc@petit-huguenin.org>
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 <mailto:marc@petit-huguenin.o= rg
>>>>=C2=A0 =C2=A0 <mailto:marc@petit-huguenin.org>>>
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0Blog: https://marc.petit-huguenin.org
>>>>=C2=A0 =C2=A0 <https://marc.petit-huguenin.org/>
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 = =C2=A0Profile: https://www.linkedin.com/in/petithug
>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 >
>>>>>
>>>>
>>>
>
--0000000000009733a605846866ec-- From nobody Mon Mar 18 18:37:38 2019 Return-Path: X-Original-To: tram@ietfa.amsl.com Delivered-To: tram@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id CD74D130ED0; Mon, 18 Mar 2019 18:37:35 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -14.502 X-Spam-Level: X-Spam-Status: No, score=-14.502 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.001, DKIMWL_WL_MED=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_HI=-5, SPF_PASS=-0.001, URIBL_BLOCKED=0.001, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cisco.com header.b=Psaudp7K; dkim=pass (1024-bit key) header.d=cisco.onmicrosoft.com header.b=WobXPju4 Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Lti6CHqrFO08; Mon, 18 Mar 2019 18:37:31 -0700 (PDT) Received: from rcdn-iport-3.cisco.com (rcdn-iport-3.cisco.com [173.37.86.74]) (using TLSv1.2 with cipher DHE-RSA-SEED-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 9EF7D130ECA; Mon, 18 Mar 2019 18:37:30 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=44584; q=dns/txt; s=iport; t=1552959450; x=1554169050; h=from:to:cc:subject:date:message-id:references: in-reply-to:content-transfer-encoding:mime-version; bh=LhzN5nGaSe/G/sNO274/SIsE4qqqxhCLi4GKl735Ocg=; b=Psaudp7KvXwihFTOIejZc5B3OFe57y8XHW3IrSKo0nK27j5V6jHnb6bF 3WSu8erqb8G773aLhi447HoK9SQ/hTlSJVqNzf81tzvopUO24XW0TCbXh R1s9oAONh+YqP3gnttNtvJI9Wj9EGH/TSOdeD4/CJLKyZ6UVeSgiSfOIy U=; IronPort-PHdr: =?us-ascii?q?9a23=3AOht2ohXMF8oMRGph1eMBAiMvU0vV8LGuZFwc94?= =?us-ascii?q?YnhrRSc6+q45XlOgnF6O5wiEPSA9yJ8OpK3uzRta2oGXcN55qMqjgjSNRNTF?= =?us-ascii?q?dE7KdehAk8GIiAAEz/IuTtank1B81GW0Jo/lmwMFNeH4D1YFiB6nA=3D?= X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: =?us-ascii?q?A0AFAACNR5Bc/4ENJK1aCRoBAQEBAQI?= =?us-ascii?q?BAQEBBwIBAQEBgVEFAQEBAQsBgT1QA2hMKAQLJ4QLg0cDhFKKYYIyJYkyjVG?= =?us-ascii?q?BLhSBEANUCwEBIwmEQAIXhEMiNAkNAQEDAQEJAQMCbRwMhUoBAQEDARoJBA0?= =?us-ascii?q?MAQEmBQwBBAsCAQgYAgIRAw8DAgICHxEUARACBA4FgyIBgV0DDQgBDp8GAoo?= =?us-ascii?q?UcXwzgngBAQU6CYECQYMLDQuCDAMFgQskAYRbhAt2gTYdF4FAP4ERJwwTgU5?= =?us-ascii?q?+gldHAgECAYEYDQUBCAMGAgEGAi0oEIIBOjGCJooXO4FhKoYThSGMFDUJAod?= =?us-ascii?q?ZiAyDPxmBfIVwhRiGVIwghGKBNotNAgQCBAUCDgEBBYFHOEIjcXAVOyoBgg0?= =?us-ascii?q?BATKBcxcLAQEWE4M4hRSFP3IBgSeGBCSCKQEB?= X-IronPort-AV: E=Sophos;i="5.58,496,1544486400"; d="scan'208";a="526528780" Received: from alln-core-9.cisco.com ([173.36.13.129]) by rcdn-iport-3.cisco.com with ESMTP/TLS/DHE-RSA-SEED-SHA; 19 Mar 2019 01:37:27 +0000 Received: from XCH-RCD-018.cisco.com (xch-rcd-018.cisco.com [173.37.102.28]) by alln-core-9.cisco.com (8.15.2/8.15.2) with ESMTPS id x2J1bR5B031358 (version=TLSv1.2 cipher=AES256-SHA bits=256 verify=FAIL); Tue, 19 Mar 2019 01:37:27 GMT Received: from xhs-aln-003.cisco.com (173.37.135.120) by XCH-RCD-018.cisco.com (173.37.102.28) with Microsoft SMTP Server (TLS) id 15.0.1473.3; Mon, 18 Mar 2019 20:37:27 -0500 Received: from xhs-aln-002.cisco.com (173.37.135.119) by xhs-aln-003.cisco.com (173.37.135.120) with Microsoft SMTP Server (TLS) id 15.0.1473.3; Mon, 18 Mar 2019 20:37:26 -0500 Received: from NAM02-CY1-obe.outbound.protection.outlook.com (173.37.151.57) by xhs-aln-002.cisco.com (173.37.135.119) with Microsoft SMTP Server (TLS) id 15.0.1473.3 via Frontend Transport; Mon, 18 Mar 2019 20:37:26 -0500 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=cisco.onmicrosoft.com; s=selector1-cisco-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=LhzN5nGaSe/G/sNO274/SIsE4qqqxhCLi4GKl735Ocg=; b=WobXPju4zHQiPGSjMOnE6kEMMp+9NfHea1URR/U+KEGWesPb71y/il+qv9NXP974zerpQhEPbVXpuirirnU0lUAjbCa9g71gtiZ3VwtOoc2T/cOxQ/pP8Oyhb1dvHYtlVQNbGrEArL2Xz7PHF00gX2xkIcWOs3ga+8+Ij4EbMEc= Received: from BY5PR11MB3895.namprd11.prod.outlook.com (10.255.72.92) by BY5PR11MB4055.namprd11.prod.outlook.com (10.255.162.16) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.1709.13; Tue, 19 Mar 2019 01:37:24 +0000 Received: from BY5PR11MB3895.namprd11.prod.outlook.com ([fe80::85d0:5bc1:f305:1423]) by BY5PR11MB3895.namprd11.prod.outlook.com ([fe80::85d0:5bc1:f305:1423%6]) with mapi id 15.20.1709.015; Tue, 19 Mar 2019 01:37:24 +0000 From: "Gonzalo Salgueiro (gsalguei)" To: Spencer Dawkins at IETF CC: Eric Rescorla , Gonzalo Camarillo , Marc Petit-Huguenin , "tram-chairs@ietf.org" , "tram@ietf.org" , IESG , "draft-ietf-tram-stunbis@ietf.org" Thread-Topic: [tram] Eric Rescorla's Discuss on draft-ietf-tram-stunbis-16: (with DISCUSS and COMMENT) Thread-Index: AQHUa0FPQa4RlvmGQ0G0i0rcGeSYLqUuaM8AgABS4ICAKPySAIAACJIAgABkJoCABCeEgIA2QhKAgCOzSICAXM16RYAAAsel Date: Tue, 19 Mar 2019 01:37:24 +0000 Message-ID: References: <152390863222.19652.10310304989315386136.idtracker@ietfa.amsl.com> <472563ee-5fc3-655d-8e31-138cc774e608@acm.org> <97c561a7-c33a-6121-00c4-09cd11646b98@ericsson.com> <4b8f10f7-1eee-c8bc-d9ee-e3f18473de32@ericsson.com> , In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: authentication-results: spf=none (sender IP is ) smtp.mailfrom=gsalguei@cisco.com; x-originating-ip: [2600:387:2:80f::28] x-ms-publictraffictype: Email x-ms-office365-filtering-correlation-id: ddab4611-cf9c-4ce3-49e5-08d6ac0b7019 x-microsoft-antispam: BCL:0; PCL:0; RULEID:(2390118)(7020095)(4652040)(8989299)(4534185)(4627221)(201703031133081)(201702281549075)(8990200)(5600127)(711020)(4605104)(2017052603328)(7153060)(7193020); SRVR:BY5PR11MB4055; x-ms-traffictypediagnostic: BY5PR11MB4055: x-ms-exchange-purlcount: 4 x-microsoft-antispam-prvs: x-forefront-prvs: 0981815F2F x-forefront-antispam-report: SFV:NSPM; SFS:(10009020)(396003)(39860400002)(376002)(346002)(136003)(366004)(51444003)(54164003)(189003)(199004)(51914003)(54094003)(5660300002)(446003)(476003)(2616005)(99286004)(36756003)(486006)(229853002)(14444005)(256004)(97736004)(105586002)(11346002)(82746002)(6116002)(106356001)(71190400001)(8936002)(71200400001)(54906003)(316002)(2906002)(305945005)(83716004)(93886005)(46003)(6246003)(81156014)(14454004)(53946003)(6512007)(81166006)(53546011)(30864003)(6916009)(7736002)(25786009)(86362001)(4326008)(68736007)(478600001)(966005)(6306002)(102836004)(6506007)(33656002)(186003)(561944003)(6436002)(53936002)(76176011)(6486002)(8676002)(569006); DIR:OUT; SFP:1101; SCL:1; SRVR:BY5PR11MB4055; H:BY5PR11MB3895.namprd11.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; MX:1; A:1; received-spf: None (protection.outlook.com: cisco.com does not designate permitted sender hosts) x-ms-exchange-senderadcheck: 1 x-microsoft-antispam-message-info: bSeyj8LZ+WqBkIQTyFXdKXe1yArhWqkitDuwaTKr6ajGLF/23ZnkyoZ4xr2K8E/X/L3DEopdfmZeuX07DwAPldZ3z8rvLbY3cdzP0A1T9Mz0P/qZSVgjn0Zq6y27Dlqdz/SDTTTkRjhYcTViPpDEO7ZhJxc1C4tZBltU34fUdIVwAV1cb4DM7mapamboEnDCyM0YQ1Gos8IZuTAN28fdak5eXN42q2xtm6XWT23gJhAIqdhyobH7QO0Oq0M1laSSj63uzoms9FeonJBIzSnCHlJm5HkR6XrAQjfnaUKzGA/JLmD5TOb6hdaRdspeKCgPd/DzY/Uoh+YyvR/4qrcN2fc4CmkAtudDHxIMGmrbfXMF9tpqE1bFMTPYUK2ibGFSDaEz9cvQ1kBmp2Ucj28KuUYTtUbeeMB7/09qcumgthM= Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-MS-Exchange-CrossTenant-Network-Message-Id: ddab4611-cf9c-4ce3-49e5-08d6ac0b7019 X-MS-Exchange-CrossTenant-originalarrivaltime: 19 Mar 2019 01:37:24.3105 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 5ae1af62-9505-4097-a69a-c1553ef7840e X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-Transport-CrossTenantHeadersStamped: BY5PR11MB4055 X-OriginatorOrg: cisco.com X-Outbound-SMTP-Client: 173.37.102.28, xch-rcd-018.cisco.com X-Outbound-Node: alln-core-9.cisco.com Archived-At: Subject: Re: [tram] Eric Rescorla's Discuss on draft-ietf-tram-stunbis-16: (with DISCUSS and COMMENT) X-BeenThere: tram@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "Discussing the creation of a Turn Revised And Modernized \(TRAM\) WG, which goal is to consolidate the various initiatives to update TURN and STUN." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 19 Mar 2019 01:37:36 -0000 VGhhbmtzLCBTcGVuY2VyLiAgSW4gdGhlIGludGVyZXN0IG9mIGV4cGVkaXRpb3VzbmVzcyBJ4oCZ dmUgZW1haWxlZCBFcmljIHRvIHJldmlldyB0aGUgbmV3bHkgcHVibGlzaGVkIC0yMCB0byBlbnN1 cmUgaXQgYWRkcmVzc2VzIGhpcyBESVNDVVNTIHBvaW50cy4gSG9waW5nIHRvIGdldCB0aGlzIGRv bmUgYmVmb3JlIEVyaWMgc3RlcHMgZG93biBhcyBBRC4NCg0KQ2hlZXJzLA0KDQpHb256YWxvIA0K DQoNCg0KPiBPbiBNYXIgMTgsIDIwMTksIGF0IDk6MjcgUE0sIFNwZW5jZXIgRGF3a2lucyBhdCBJ RVRGIDxzcGVuY2VyZGF3a2lucy5pZXRmQGdtYWlsLmNvbT4gd3JvdGU6DQo+IA0KPiBEZWFyIEFs bCwNCj4gDQo+PiBPbiBGcmksIE1hciA4LCAyMDE5IGF0IDg6MTAgUE0gRXJpYyBSZXNjb3JsYSA8 ZWtyQHJ0Zm0uY29tPiB3cm90ZToNCj4+IA0KPj4gVGhhbmtzIGZvciB0aGUgY2FsbCB5ZXN0ZXJk YXkuDQo+PiANCj4gDQo+IFRoYW5rcyB0byBhbGwgZm9yIG1vdmluZyB0aGlzIHNwZWNpZmljYXRp b24gZm9yd2FyZC4NCj4gDQo+IElmIHRoZSBjdXJyZW50IGNvbnZlcnNhdGlvbiB0dXJucyBvdXQg dG8gY29udmVyZ2Ugb24gdGhpcyB0b3BpYyBiZWZvcmUgbmV4dA0KPiBXZWRuZXNkYXksIEknbSBo YXBweSB0byBhcHByb3ZlIGEgcmV2aXNlZCBkcmFmdCBhZnRlciBFcmljIGNsZWFycyBoaXMNCj4g RGlzY3Vzcy4NCj4gDQo+IElmIEkgY2FuIGhlbHAgaW4gYW55IHdheSwgcGxlYXNlIGxldCBtZSBr bm93Lg0KPiANCj4gU3BlbmNlcg0KPiANCj4gDQo+PiANCj4+IEZpcnN0LCBoZXJlIGlzIHdoYXQg SSByZWNvbW1lbmQgZm9yIHRoZSBxdWVzdGlvbiBvZiBTSEEtMjU2IGZvciBwYXNzd29yZA0KPj4g aGFzaGluZzoNCj4+IA0KPj4gIE5vdGU6IHRoZSB1c2Ugb2YgU0hBLTI1NiBmb3IgcGFzc3dvcmQg aGFzaGluZyBkb2VzIG5vdCBtZWV0IG1vZGVybg0KPj4gIHN0YW5kYXJkcywgd2hpY2ggYXJlIGFp bWVkIGF0IHNsb3dpbmcgZG93biBleGhhdXN0aXZlIHBhc3N3b3JkIHNlYXJjaA0KPj4gIGJ5IHBy b3ZpZGluZyBhIHJlbGF0aXZlbHkgc2xvdyBtaW5pbXVtIHRpbWUgdG8gY29tcHV0ZSB0aGUNCj4+ ICBoYXNoLiBBbHRob3VnaCBiZXR0ZXIgYWxnb3JpdGhtcyBzdWNoIGFzIEFyZ29uMg0KPj4gIFto dHRwczovL2RhdGF0cmFja2VyLmlldGYub3JnL2RvYy9kcmFmdC1pcnRmLWNmcmctYXJnb24yL10g YXJlDQo+PiAgYXZhaWxhYmxlLCBTSEEtMjU2IHdhcyBjaG9zZW4gZm9yIGNvbnNpc3RlbmN5IHdp dGggUkZDIDc2MTYuDQo+PiANCj4+IA0KPj4gTm93LCBXUlQgdG8gdGhlIGFudGktZG93bmdyYWRl IHNpdHVhdGlvbi4gSGVyZSdzIGEgc3R5bGl6ZWQgdmVyc2lvbg0KPj4gb2YgdGhlIHByb3RvY29s Og0KPj4gDQo+PiBDbGllbnQgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgIFNlcnZlcg0KPj4gDQo+PiBIZWxsbyAtPg0KPj4gICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICA8LSBOb25jZSwgQWxnb3JpdGhtcw0KPj4gSE1BQy1IMShI MihQYXNzd29yZCksIE5vbmNlLCBBbGdvcml0aG1zLCBNc2cpIC0+DQo+PiAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgIDwtIEhNQUMtSDEoSDIoUGFzc3dvcmQpLCAuLi4pDQo+PiANCj4+ IFdoZXJlIEgxIGFuZCBIMiBhcmUgdGhlIEhNQUMgaGFzaCBmdW5jdGlvbnMgYW5kIHRoZSBwYXNz d29yZCBoYXNoaW5nDQo+PiBmdW5jdGlvbiByZXNwZWN0aXZlbHkuDQo+PiANCj4+IE5vdywgaWYg d2UgYXNzdW1lIHRoYXQgdGhlIGF0dGFja2VyIGRvZXMgbm90IGtub3cgUGFzc3dvcmQgYW5kIHRo YXQNCj4+IGJvdGggSDEgYW5kIEgyIGFyZSBzZWN1cmUsIHRoZW4gaXQgaXMgbm90IHBvc3NpYmxl IGZvciB0aGUgYXR0YWNrZXIgdG8NCj4+IGNvbXBsZXRlIHRoZSB0cmFuc2FjdGlvbiBvciBtb2Rp ZnkgYW55IG9mIHRoZSBtZXNzYWdlcy4gRnVydGhlciwgaWYNCj4+IHRoZSB3ZWFrZXN0IGpvaW50 IGFsZ29yaXRobSB0aGF0IGJvdGggc2lkZXMgc3VwcG9ydCBpcyBzdGlsbCBzdHJvbmcsDQo+PiB0 aGVuIGFuIGF0dGFja2VyIGNhbm5vdCBpbmZsdWVuY2UgdGhlIGFsZ29yaXRobSBuZWdvdGlhdGlv biBbMF0uIFRoaXMNCj4+IHByb3BlcnR5IGlzIHByb3ZpZGVkIGJ5IGNvdmVyaW5nIHRoZSBhbGdv cml0aG1zIHVuZGVyIHRoZSBNQUMuDQo+PiANCj4+IEhvd2V2ZXIsIG15IHBvaW50IGlzIHRoYXQg dGhpcyBpcyBub3QgYSB2ZXJ5IHVzZWZ1bCBwcm9wZXJ0eS4NCj4+IA0KPj4gRmlyc3QsIGNvbnNp ZGVyIHRoZSBjYXNlIGluIHdoaWNoIHRoZSBpbXBsZW1lbnRhdGlvbnMgam9pbnRseSBzdXBwb3J0 DQo+PiBvbmUgc3Ryb25nIGFsZ29yaXRobSBhbmQgb25lIHdlYWsgYWxnb3JpdGhtLiBFLmcuLCBm b3IgSDEgdGhleSBzdXBwb3J0DQo+PiBTSEEtMjU2IGFuZCB0aGUgZnVuY3Rpb24gWih4KSB3aGlj aCBhbHdheXMgZW1pdHMgMHMuIFRoaXMgYWxsb3dzDQo+PiBhbiBhdHRhY2tlciB0byBmb3JjZSB0 aGUgY2xpZW50IGFuZCBzZXJ2ZXIgaW50byB1c2luZyBaLCBhcyBmb2xsb3dzLg0KPj4gDQo+PiAN Cj4+IENsaWVudCAgICAgICAgICAgICAgICAgICAgICBBdHRhY2tlciAgICAgICAgICAgICAgICAg ICBTZXJ2ZXINCj4+IA0KPj4gSGVsbG8gLT4NCj4+ICAgICAgICAgICAgICAgICAgICAgICAgICAg IEhlbGxvIC0+DQo+PiAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgPC0gTm9u Y2UsIEFsZz1TSEEyNTYsIFoNCj4+ICAgICAgICAgICAgICAgIDwtIE5vbmNlLCBBbGc9Wg0KPj4g WihIMihQYXNzd29yZCksIE5vbmNlLCBBbGc9WikpIC0+DQo+PiAgICAgICAgICAgICAgICAgICAg ICAgIFooSDIoUGFzc3dvcmQpLCBOb25jZSwgQWxnPVNIQTI1NiwgWikpDQo+PiANCj4+IFRoZSBp c3N1ZSBoZXJlIGlzIHRoYXQgdGhlIG9ubHkgdGhpbmcgdGhhdCB0aGUgTUFDIGlzIGRvaW5nIGlz DQo+PiBhdXRoZW50aWNhdGluZyB0aGUgdHJhbnNhY3Rpb24sIGFuZCBpZiB5b3UgY2FuJ3QgdHJ1 c3QgaXQgdG8gZG8gdGhhdCwNCj4+IHlvdSBjYW4ndCB0cnVzdCBpdCB0byBhdXRoZW50aWNhdGUg dGhlIGJpZC1kb3duIGRlZmVuc2UgZWl0aGVyLg0KPj4gDQo+PiANCj4+IER1cmluZyBvdXIgZGlz Y3Vzc2lvbiwgdGhlcmUgd2FzIGEgc3VnZ2VzdGlvbiB0aGF0IGl0IHdhcyB1c2VmdWwgdG8NCj4+ IGhhdmUgYmlkZG93biBkZWZlbnNlIHRvIGRlZmVuZCBhZ2FpbnN0IHdlYWtuZXNzZXMgaW4gSDIu IEkgZG9uJ3QgdGhpbmsNCj4+IHRoYXQgdGhhdCdzIHRydWUgZWl0aGVyLiBGaXJzdCwgcmVtZW1i ZXIgdGhhdCB0aGUgcHVycG9zZSBvZiBIMiBpcyB0bw0KPj4gcHJldmVudCBhbiBhdHRhY2tlciB3 aG8gcmVjb3ZlcnMgdGhlIHBhc3N3b3JkIGRhdGFiYXNlIGZyb20gbGVhcm5pbmcNCj4+IHRoZSB1 c2VyJ3MgdHJ1ZSBwYXNzd29yZC4gVGhpcyBpcyBub3QgYWJvdXQgZGVmZW5kaW5nIHRoZSBzZXJ2 ZXIgZnJvbQ0KPj4gYXR0YWNrIChiZWNhdXNlIGtub3dpbmcgQTEgaXMgZW5vdWdoIHRvIGF0dGFj ayB0aGUgc2VydmVyKSBidXQgYWJvdXQNCj4+IHByZXZlbnRpbmcgdGhlIGF0dGFja2VyIGZyb20g bGVhcm5pbmcgYSBwYXNzd29yZCB3aGljaCBtaWdodCBoYXZlIGJlZW4NCj4+IHJldXNlZCBvbiBh bm90aGVyIHNpdGUuDQo+PiANCj4+IE5vdywgaXQncyBhbHNvIHBvc3NpYmxlIHRvIGJydXRlLWZv cmNlIHRoZSB1c2VyJ3MgcGFzc3dvcmQganVzdCBmcm9tDQo+PiB0aGUgcHJvdG9jb2wgdHJhbnNj cmlwdDogaWYgeW91IGNhcHR1cmUgdGhlIGNsaWVudCdzIGZpcnN0IG1lc3NhZ2UNCj4+IHdpdGgg TUVTU0FHRS1JTlRFR1JJVFkgb3IgTUVTU0FHRS1JTlRFR1JJVFktU0hBMjU2LCB5b3UgY2FuIGp1 c3Qga2VlcA0KPj4gdHJ5aW5nIHBhc3N3b3JkcyB1bnRpbCB5b3UgZ2V0IHRoZSByaWdodCBNQUMu IE5vdGUgdGhhdCB0aGlzIGlzIGENCj4+IHBhc3NpdmUgYXR0YWNrLiBUaGlzIGlzIGNvbXBhcmF0 aXZlbHkgZmFzdCBiZWNhdXNlIFNIQTI1NiBhbmQgTUQ1IGFyZQ0KPj4gZmFzdC4NCj4+IA0KPj4g QSBtdWNoIHN0cm9uZ2VyIEgyIChlLmcuLCBBcmdvbikgd291bGQgaGVscCBhZ2FpbnN0IHRoaXMs IGJ1dCB0aGUNCj4+IHByb2JsZW0gbm93IGJlY29tZXMgdGhhdCB0aGUgY2xpZW50IHN1cHBvcnRz IEgyID09IE1ENSAob3IgU0hBLTI1NikNCj4+IGFuZCBzbyBldmVuIGlmIHRoZSBzZXJ2ZXIgc3Vw cG9ydHMgQXJnb24sIHRoZSBhdHRhY2tlciBjYW4gbW91bnQgYQ0KPj4gYmlkLWRvd24gZGVmZW5z ZSBpbiB3aGljaCBpdCBtb2RpZmllcyB0aGUgc2VydmVyJ3MgZmlyc3QgbWVzc2FnZSB0bw0KPj4g anVzdCBhZHZlcnRpc2UgTUQ1IGFuZCB0aHVzIGdldCB0aGUgY2xpZW50IHRvIHByb3ZpZGUgYSBz dWl0YWJsZQ0KPj4gbWVzc2FnZS4gVGhlIGJpZC1kb3duIGRlZmVuc2Ugd291bGQgcHJldmVudCB0 aGUgYXV0aGVudGljYXRpb24NCj4+IHRyYW5zYWN0aW9uIGZyb20gY29tcGxldGluZywgYnV0IHRo YXQncyBub3QgbmVjZXNzYXJ5IGZvciB0aGlzDQo+PiBhdHRhY2sgYmVjYXVzZSB0aGUgYXR0YWNr ZXIgY2FuIGp1c3QgYnJ1dGUtZm9yY2UgdGhlIHBhc3N3b3JkIGZyb20NCj4+IHRoZSBtZXNzYWdl IGl0IGhhcy4gVG8gbWFrZSB0aGlzIHdvcmssIHlvdSB3b3VsZCBuZWVkIHNvbWV0aGluZw0KPj4g bGlrZSBhIFBBS0UsIHdoaWNoIHRoaXMgaXMgbm90Lg0KPj4gDQo+PiBGaW5hbGx5LCB5b3UgbWln aHQgdGhpbmsgdGhhdCB0aGUgc2VydmVyIGhhcyB0d28gZGF0YWJhc2VzLCBvbmUNCj4+IHdoaWNo IHVzZXMgQXJnb24gYW5kIG9uZSB3aGljaCB1c2VzIE1ENSBhbmQgaXQgd2FudHMgdG8gZ3JhZHVh bGx5DQo+PiBwaGFzZSBvdXQgdGhlIE1ENSBvbmUsIHdoaWNoIGl0IHdpbGwgZG8gd2hlbiBubyBj bGllbnQgYXV0aGVudGljYXRlcw0KPj4gd2l0aCBNRDUgZm9yIGEgdmVyeSBsb25nIHRpbWUuIEFu IGFudGktYmlkZG93biBkZWZlbnNlIHdvdWxkIHNvcnQNCj4+IG9mIHdvcmsgaGVyZSwgYnV0IHRo ZSBmYWN0IHRoYXQgdGhlIGF0dGFja2VyIHdvdWxkIGhhdmUgdG8gYmUNCj4+IGFjdGl2ZSBlc3Nl bnRpYWxseSBpbmRlZmluaXRlbHkgdG8ga2VlcCB0aGUgc2VydmVyIGNvbmZ1c2VkIGFib3V0DQo+ PiB0aGUgc3RhdGUgb2YgY2xpZW50cyAtLSBhbmQgdGhhdCB0aGUgYXR0YWNrZXIgY2FuIGxpa2Vs eSBqdXN0DQo+PiBnZXQgYSB2YWxpZCBhY2NvdW50IGFuZCB0aGVuIGluc2lzdCBvbiB1c2luZyBN RDUgLS0gbWFrZXMgdGhpcyBhDQo+PiBub3QgdmVyeSB1c2VmdWwgZGVmZW5zZS4NCj4+IA0KPj4g SSB0aGluayB0aGlzIG1ha2VzIGEgcHJldHR5IHBlcnN1YXNpdmUgY2FzZSB0aGF0IHRoZSBiaWQt ZG93biBkZWZlbnNlDQo+PiBpc24ndCB1c2VmdWwgZXhjZXB0IGluIHRoZSBmb3JtYWwgImF0dGFj a2VyIGNhbm5vdCBpbmZsdWVuY2UNCj4+IG5lZ290aWF0aW9uIiBzZW5zZS4gV2l0aCB0aGF0IHNh aWQsIGluIHRoZSBzcGlyaXQgb2YgZ2V0dGluZyB0aGlzIGRvbmUsIEkNCj4+IGd1ZXNzDQo+PiBJ J20gd2lsbGluZyB0byBsZXQgdGhpcyBnbyBpZiB0aGUgc2VjdXJpdHkgY29uc2lkZXJhdGlvbnMg bWFrZSBjbGVhcg0KPj4gdGhhdCBpdCBpcyBvbmx5IGEgdmVyeSBsaW1pdGVkIG1lY2hhbmlzbS4N Cj4+IA0KPj4gLUVrcg0KPj4gDQo+PiANCj4+IFswXSBUaGlzIGlzIHByaW5jaXBhbGx5IGFib3V0 IEgxLiBBcyBsb25nIGFzIHRoZSBIMiBhcHByb3hpbWF0ZWx5DQo+PiBldmVubHkgZGlzdHJpYnV0 ZXMgdGhlIHBhc3N3b3JkIG92ZXIgaXRzIHJhbmdlLCB0aGVuIGNyeXB0b2dyYXBoaWMNCj4+IHN0 cmVuZ3RoIGlzIG5vdCBpbXBvcnRhbnQgZm9yIHRoaXMgcXVlc3Rpb24uIEZvciBpbnN0YW5jZSwg eW91DQo+PiBjb3VsZCByZXBsYWNlIEgyIHdpdGggYW4gaWRlbnRpdHkgZnVuY3Rpb24gYW5kIHN0 aWxsIGhhdmUgYQ0KPj4gc2VjdXJlIHByb3RvY29sLg0KPj4gDQo+PiANCj4+IA0KPj4gDQo+PiAN Cj4+IA0KPj4gT24gV2VkLCBGZWIgMjAsIDIwMTkgYXQgNDowMyBBTSBHb256YWxvIENhbWFyaWxs byA8DQo+PiBnb256YWxvLmNhbWFyaWxsb0Blcmljc3Nvbi5jb20+IHdyb3RlOg0KPj4gDQo+Pj4g VGhhbmtzLCBHb256YWxvISBQbGVhc2UsIGxldCB1cyBrbm93IHRoZSBhZ3JlZWQgd2F5IGZvcndh cmQgb25jZSB5b3UNCj4+PiBoYXZlIHRoZSBjYWxsLg0KPj4+IA0KPj4+IENoZWVycywNCj4+PiAN Cj4+PiBHb256YWxvDQo+Pj4gDQo+Pj4+IE9uIDE5LUZlYi0xOSAyMDowNSwgR29uemFsbyBTYWxn dWVpcm8gKGdzYWxndWVpKSB3cm90ZToNCj4+Pj4gSGkgR29uemFsbyAtDQo+Pj4+IA0KPj4+PiBX ZSBoYXZlIHNjaGVkdWxlZCBhIGNvbmZlcmVuY2UgY2FsbCB3aXRoIEVrciwgU2ltb24sIE1hcmMg YW5kIG15c2VsZiBvbg0KPj4+IE1hcmNoIDd0aCB0byBkaXNjdXNzIHRoZSBsYXN0IHR3byByZW1h aW5pbmcgaXNzdWVzLiAgV2lsbCB1cGRhdGUgd2l0aA0KPj4+IHJlc29sdXRpb25zIG9uY2UgdGhp cyBoYXMgb2NjdXJyZWQuDQo+Pj4+IA0KPj4+PiBDaGVlcnMsDQo+Pj4+IA0KPj4+PiBHb256YWxv DQo+Pj4+IA0KPj4+PiANCj4+Pj4gDQo+Pj4+PiBPbiBGZWIgMTgsIDIwMTksIGF0IDg6MTggQU0s IEdvbnphbG8gQ2FtYXJpbGxvIDwNCj4+PiBHb256YWxvLkNhbWFyaWxsb0Blcmljc3Nvbi5jb20+ IHdyb3RlOg0KPj4+Pj4gDQo+Pj4+PiBIaSBHb256YWxvIFMsDQo+Pj4+PiANCj4+Pj4+IHdoYXQg aXMgdGhlIHN0YXR1cyBvZiB0aGlzIG9uZT8NCj4+Pj4+IA0KPj4+Pj4gVGhhbmtzLA0KPj4+Pj4g DQo+Pj4+PiBHb256YWxvDQo+Pj4+PiANCj4+Pj4+PiBPbiAxOC1KYW4tMTkgMjA6MTYsIEdvbnph bG8gU2FsZ3VlaXJvIChnc2FsZ3VlaSkgd3JvdGU6DQo+Pj4+Pj4gVG90YWxseSBhZ3JlZSwgRWty LiAgTWFyYyBhbmQgSSBhcmUgbWVldGluZyB0byBjb21lIHVwIHdpdGggYSBwcm9wb3NhbA0KPj4+ Pj4+IGJ1dCBJIGRvIGFncmVlIHdlIG5lZWQgdG8gaGF2ZSBhIGNhbGwgdG8gZ2V0IHRoaXMgcHV0 IHRvIGJlZCBvbmNlIGFuZA0KPj4+Pj4+IGZvciBhbGwuICBXZeKAmWxsIG9mZmVyIHNvbWUgcG90 ZW50aWFsIGRhdGVzIGluIHRoZSBuZXh0IDItMyB3ZWVrcy4NCj4+Pj4+PiANCj4+Pj4+PiBDaGVl cnMsDQo+Pj4+Pj4gDQo+Pj4+Pj4gR29uemFsbw0KPj4+Pj4+IA0KPj4+Pj4+IA0KPj4+Pj4+PiBP biBEZWMgMjYsIDIwMTgsIGF0IDg6MDUgUE0sIEVyaWMgUmVzY29ybGEgPGVrckBydGZtLmNvbQ0K Pj4+Pj4+PiA8bWFpbHRvOmVrckBydGZtLmNvbT4+IHdyb3RlOg0KPj4+Pj4+PiANCj4+Pj4+Pj4g V2UgcmVhbGx5IG5lZWQgdG8gYnJpbmcgdGhpcyB0byBhIGNsb3NlIGJlZm9yZSBib3RoIFNwZW5j ZXIgYW5kIEkNCj4+PiBzdGVwDQo+Pj4+Pj4+IGRvd24sIEkgc2hvdWxkIHRoaW5rLg0KPj4+Pj4+ PiANCj4+Pj4+Pj4gLUVrcg0KPj4+Pj4+PiANCj4+Pj4+Pj4gDQo+Pj4+Pj4+IE9uIFRodSwgTm92 IDIyLCAyMDE4IGF0IDQ6MzAgQU0gR29uemFsbyBDYW1hcmlsbG8NCj4+Pj4+Pj4gPGdvbnphbG8u Y2FtYXJpbGxvQGVyaWNzc29uLmNvbQ0KPj4+Pj4+PiA8bWFpbHRvOmdvbnphbG8uY2FtYXJpbGxv QGVyaWNzc29uLmNvbT4+IHdyb3RlOg0KPj4+Pj4+PiANCj4+Pj4+Pj4gICBFcmljLCBTcGVuY2Vy LCB0aGFua3MgZm9yIHRoZSBzdGF0dXMgdXBkYXRlIQ0KPj4+Pj4+PiANCj4+Pj4+Pj4gICBBdXRo b3JzLCBjb3VsZCB5b3UgcGxlYXNlIGxldCB1cyBrbm93IHdoZW4geW91IHBsYW4gdG8gZ2V0IHRv DQo+Pj4gdGhpcz8NCj4+Pj4+Pj4gDQo+Pj4+Pj4+ICAgR29uemFsbw0KPj4+Pj4+PiANCj4+Pj4+ Pj4+ICAgT24gMTktTm92LTE4IDIzOjA0LCBTcGVuY2VyIERhd2tpbnMgYXQgSUVURiB3cm90ZToN Cj4+Pj4+Pj4+IEhpLCBHb256YWxvLA0KPj4+Pj4+Pj4gT24gTW9uLCBOb3YgMTksIDIwMTggYXQg OTowNiBBTSBFcmljIFJlc2NvcmxhIDxla3JAcnRmbS5jb20NCj4+Pj4+Pj4gICA8bWFpbHRvOmVr ckBydGZtLmNvbT4NCj4+Pj4+Pj4+IDxtYWlsdG86ZWtyQHJ0Zm0uY29tIDxtYWlsdG86ZWtyQHJ0 Zm0uY29tPj4+IHdyb3RlOg0KPj4+Pj4+Pj4gDQo+Pj4+Pj4+PiAgICAgTm90IHJlYWxseS4gSSBo YXZlIG5vdCByZWNlaXZlZCBhbnkgcmVzcG9uc2UgdG8gbXkgbWFpbCBvZg0KPj4+Pj4+PiAgIE9j dCAyMy4NCj4+Pj4+Pj4+ICAgICBBcyBiZWZvcmUsIEknbSBoYXBweSB0byBoYXZlIGEgY2FsbCwg YnV0IEkgYmVsaWV2ZSB3ZSdyZQ0KPj4+Pj4+PiAgIHJlYWNoaW5nDQo+Pj4+Pj4+PiAgICAgdGhl IGxpbWl0cyBvZiB3aGF0IGNhbiBiZSBhY2NvbXBsaXNoZWQgYnkgZW1haWwuDQo+Pj4+Pj4+PiAN Cj4+Pj4+Pj4+IA0KPj4+Pj4+Pj4gRXJpYyB3b3VsZCBrbm93IGJlc3QgKGl0IGJlaW5nIGhpcyBE aXNjdXNzKSwgYnV0IHRoaXMgaXMgYWxzbyBteQ0KPj4+Pj4+Pj4gdW5kZXJzdGFuZGluZy4NCj4+ Pj4+Pj4+IA0KPj4+Pj4+Pj4gSSBjYW4gYWRkIHRoaXMgdG8gdGhlIGFnZW5kYSBvZiB0aGUgSUVT RyBpbmZvcm1hbCB0ZWxlY2hhdCBvbg0KPj4+Pj4+PiAgIE5vdmVtYmVyDQo+Pj4+Pj4+PiAyOSwg aWYgdGhlcmUgaGFzbid0IGJlZW4gYSBjYWxsIGJlZm9yZSB0aGVuLCBidXQgSSBkb24ndCBoYXZl IGENCj4+Pj4+Pj4gICByZWFzb24NCj4+Pj4+Pj4+IHRvIHdhaXQgdW50aWwgdGhlbiwgaWYgaXQn cyBwb3NzaWJsZSB0byB0YWxrIHNvb25lci4NCj4+Pj4+Pj4+IA0KPj4+Pj4+Pj4gVGhhbmtzLA0K Pj4+Pj4+Pj4gDQo+Pj4+Pj4+PiBTcGVuY2VyDQo+Pj4+Pj4+PiANCj4+Pj4+Pj4+IA0KPj4+Pj4+ Pj4gDQo+Pj4+Pj4+PiAgICAgLUVrcg0KPj4+Pj4+Pj4gDQo+Pj4+Pj4+PiANCj4+Pj4+Pj4+ICAg ICBPbiBNb24sIE5vdiAxOSwgMjAxOCBhdCA2OjM1IEFNIEdvbnphbG8gQ2FtYXJpbGxvDQo+Pj4+ Pj4+PiAgICAgPGdvbnphbG8uY2FtYXJpbGxvQGVyaWNzc29uLmNvbQ0KPj4+Pj4+PiAgIDxtYWls dG86Z29uemFsby5jYW1hcmlsbG9AZXJpY3Nzb24uY29tPg0KPj4+Pj4+Pj4gICAgIDxtYWlsdG86 Z29uemFsby5jYW1hcmlsbG9AZXJpY3Nzb24uY29tDQo+Pj4+Pj4+ICAgPG1haWx0bzpnb256YWxv LmNhbWFyaWxsb0Blcmljc3Nvbi5jb20+Pj4gd3JvdGU6DQo+Pj4+Pj4+PiANCj4+Pj4+Pj4+ICAg ICAgICAgSGkgU3BlbmNlciwNCj4+Pj4+Pj4+IA0KPj4+Pj4+Pj4gICAgICAgICB3aGF0IGlzIHRo ZSBzdGF0dXMgb2YgdGhpcz8gQXJlIHRoZSBhdXRob3JzIGFuZCB0aGUNCj4+PiBkb2N1bWVudA0K Pj4+Pj4+Pj4gICAgICAgICBzaGVwaGVyZA0KPj4+Pj4+Pj4gICAgICAgICB3b3JraW5nIHdpdGgg dGhlIHJlbGV2YW50IEFEcyBvbiB0aGUgZGlzY3Vzc2VzPw0KPj4+Pj4+Pj4gDQo+Pj4+Pj4+PiAN Cj4+Pj4+Pj4gDQo+Pj4gaHR0cHM6Ly9kYXRhdHJhY2tlci5pZXRmLm9yZy9kb2MvZHJhZnQtaWV0 Zi10cmFtLXN0dW4tcG10dWQvYmFsbG90Lw0KPj4+Pj4+Pj4gDQo+Pj4+Pj4+PiAgICAgICAgIENo ZWVycywNCj4+Pj4+Pj4+IA0KPj4+Pj4+Pj4gICAgICAgICBHb256YWxvDQo+Pj4+Pj4+PiANCj4+ Pj4+Pj4+PiAgICAgICAgIE9uIDI0LU9jdC0xOCAxNjo0MCwgU3BlbmNlciBEYXdraW5zIGF0IElF VEYgd3JvdGU6DQo+Pj4+Pj4+Pj4gSGksIE1hcmMsDQo+Pj4+Pj4+Pj4gDQo+Pj4+Pj4+Pj4gT24g V2VkLCBPY3QgMjQsIDIwMTggYXQgMzo0NCBBTSBNYXJjIFBldGl0LUh1Z3VlbmluDQo+Pj4+Pj4+ PiAgICAgICAgIDxwZXRpdGh1Z0BhY20ub3JnIDxtYWlsdG86cGV0aXRodWdAYWNtLm9yZz4NCj4+ Pj4+Pj4gICA8bWFpbHRvOnBldGl0aHVnQGFjbS5vcmcgPG1haWx0bzpwZXRpdGh1Z0BhY20ub3Jn Pj4NCj4+Pj4+Pj4+PiA8bWFpbHRvOnBldGl0aHVnQGFjbS5vcmcgPG1haWx0bzpwZXRpdGh1Z0Bh Y20ub3JnPg0KPj4+Pj4+PiAgIDxtYWlsdG86cGV0aXRodWdAYWNtLm9yZyA8bWFpbHRvOnBldGl0 aHVnQGFjbS5vcmc+Pj4+IHdyb3RlOg0KPj4+Pj4+Pj4+IA0KPj4+Pj4+Pj4+ICAgIEhpIFNwZW5j ZXIsDQo+Pj4+Pj4+Pj4gDQo+Pj4+Pj4+Pj4gICAgSSBzZW50IG15IGFuc3dlcnMgdG8gRXJpYyBS ZXNjb3JsYSBxdWVzdGlvbnMgb24NCj4+Pj4+Pj4gICAyMDE4LTEwLTA3DQo+Pj4+Pj4+PiAgICAg ICAgIGZvbGxvd2luZw0KPj4+Pj4+Pj4+ICAgIGFuIGluLXBlcnNvbiBtZWV0aW5nIHdpdGggbXkg Y28tYXV0aG9yLCBidXQgbmV2ZXINCj4+Pj4+Pj4gICBnb3QgYQ0KPj4+Pj4+Pj4gICAgICAgICBy ZXNwb25zZQ0KPj4+Pj4+Pj4+ICAgIGJhY2suICBCZWNhdXNlIHRoZXJlIHdhcyBubyBjaGFuZ2Ug cHJvcG9zZWQgYnkNCj4+Pj4+Pj4gICBFcmljIEkgd2VudA0KPj4+Pj4+Pj4gICAgICAgICBhaGVh ZCBhbmQNCj4+Pj4+Pj4+PiAgICBwdWJsaXNoZWQgLTE5IGEgY291cGxlIG9mIHdlZWtzIGFmdGVy IHRoYXQsIHdpdGgNCj4+Pj4+Pj4gICB0aGUgdGV4dA0KPj4+Pj4+Pj4gICAgICAgICBhZ3JlZWQg aW4NCj4+Pj4+Pj4+PiAgICByZXNwb25zZSB0byBBZGFtJ3MgYW5kIEJlbmphbWluJ3MgY29tbWVu dHMuDQo+Pj4+Pj4+Pj4gDQo+Pj4+Pj4+Pj4gDQo+Pj4+Pj4+PiANCj4+Pj4+Pj4gDQo+Pj4gaHR0 cHM6Ly93d3cuaWV0Zi5vcmcvbWFpbC1hcmNoaXZlL3dlYi90cmFtL2N1cnJlbnQvbXNnMDI2MzUu aHRtbA0KPj4+Pj4+Pj4+IA0KPj4+Pj4+Pj4+IA0KPj4+Pj4+Pj4+IEFoIC0gSSB3b25kZXIgaWYg dGhhdCB3YXMgd2hhdCBoYWQgaGFwcGVuZWQuDQo+Pj4+Pj4+Pj4gDQo+Pj4+Pj4+Pj4gSXQgc291 bmRzIGxpa2UgeW91IGRpZCB0aGUgcmlnaHQgdGhpbmcsIGFuZCB0aGF0IEVyaWMNCj4+Pj4+Pj4g ICBoYXMgbm93DQo+Pj4+Pj4+PiAgICAgICAgIHJlc3BvbmRlZCwNCj4+Pj4+Pj4+PiB3aGljaCBp cyBhbHNvIHRoZSByaWdodCB0aGluZyB0byBkby4NCj4+Pj4+Pj4+PiANCj4+Pj4+Pj4+PiBUaGFu a3MgZm9yIGhlbHBpbmcgbWUgdW5kZXJzdGFuZC4NCj4+Pj4+Pj4+PiANCj4+Pj4+Pj4+PiBTcGVu Y2VyDQo+Pj4+Pj4+Pj4gDQo+Pj4+Pj4+Pj4gDQo+Pj4+Pj4+Pj4+ICAgIE9uIDEwLzIzLzE4IDc6 MjggUE0sIFNwZW5jZXIgRGF3a2lucyBhdCBJRVRGIHdyb3RlOg0KPj4+Pj4+Pj4+PiBIaSwgTWFy YywNCj4+Pj4+Pj4+Pj4gDQo+Pj4+Pj4+Pj4+IEkgc2VlIHRoYXQgYSAtMTkgaGFzIGJlZW4gc3Vi bWl0dGVkLCBidXQgZGlkbid0DQo+Pj4+Pj4+ICAgc2VlIGENCj4+Pj4+Pj4+ICAgICAgICAgcmVw bHkgZnJvbQ0KPj4+Pj4+Pj4+ICAgIEVyaWMgaW4NCj4+Pj4+Pj4+Pj4gdGhpcyB0aHJlYWQuIERv IHlvdSB0aGluayB0aGF0IHlvdSd2ZSBjb252ZXJnZWQ/DQo+Pj4+Pj4+Pj4+IA0KPj4+Pj4+Pj4+ PiAoSSBzYXcgYW4gb2ZmZXIgb2YgYSBjb25mZXJlbmNlIGNhbGwsIHNvIHRob3VnaHQgYW4NCj4+ Pj4+Pj4+ICAgICAgICAgb3V0LW9mLWJhbmQNCj4+Pj4+Pj4+Pj4gY29udmVyc2F0aW9uIG1pZ2h0 IGhhdmUgaGFwcGVuZWQpDQo+Pj4+Pj4+Pj4+IA0KPj4+Pj4+Pj4+PiBUaGFua3MsDQo+Pj4+Pj4+ Pj4+IA0KPj4+Pj4+Pj4+PiBTcGVuY2VyDQo+Pj4+Pj4+Pj4+IA0KPj4+Pj4+Pj4+PiBPbiBTdW4s IE9jdCA3LCAyMDE4IGF0IDk6MzUgQU0gTWFyYyBQZXRpdC1IdWd1ZW5pbg0KPj4+Pj4+Pj4+ICAg IDxwZXRpdGh1Z0BhY20ub3JnIDxtYWlsdG86cGV0aXRodWdAYWNtLm9yZz4NCj4+Pj4+Pj4gICA8 bWFpbHRvOnBldGl0aHVnQGFjbS5vcmcgPG1haWx0bzpwZXRpdGh1Z0BhY20ub3JnPj4NCj4+Pj4+ Pj4+ICAgICAgICAgPG1haWx0bzpwZXRpdGh1Z0BhY20ub3JnIDxtYWlsdG86cGV0aXRodWdAYWNt Lm9yZz4NCj4+Pj4+Pj4gICA8bWFpbHRvOnBldGl0aHVnQGFjbS5vcmcgPG1haWx0bzpwZXRpdGh1 Z0BhY20ub3JnPj4+PiB3cm90ZToNCj4+Pj4+Pj4+Pj4gDQo+Pj4+Pj4+Pj4+PiBIaSBFcmljLA0K Pj4+Pj4+Pj4+Pj4gDQo+Pj4+Pj4+Pj4+PiBQbGVhc2Ugc2VlIGlubGluZS4NCj4+Pj4+Pj4+Pj4+ IA0KPj4+Pj4+Pj4+Pj4+IE9uIDA5LzEwLzIwMTggMDM6MjUgQU0sIEVyaWMgUmVzY29ybGEgd3Jv dGU6DQo+Pj4+Pj4+Pj4+Pj4gT24gU2F0LCBTZXAgOCwgMjAxOCBhdCAyOjMxIFBNLCBNYXJjDQo+ Pj4+Pj4+ICAgUGV0aXQtSHVndWVuaW4NCj4+Pj4+Pj4+PiAgICA8cGV0aXRodWdAYWNtLm9yZyA8 bWFpbHRvOnBldGl0aHVnQGFjbS5vcmc+DQo+Pj4+Pj4+ICAgPG1haWx0bzpwZXRpdGh1Z0BhY20u b3JnIDxtYWlsdG86cGV0aXRodWdAYWNtLm9yZz4+DQo+Pj4+Pj4+PiAgICAgICAgIDxtYWlsdG86 cGV0aXRodWdAYWNtLm9yZyA8bWFpbHRvOnBldGl0aHVnQGFjbS5vcmc+DQo+Pj4+Pj4+ICAgPG1h aWx0bzpwZXRpdGh1Z0BhY20ub3JnIDxtYWlsdG86cGV0aXRodWdAYWNtLm9yZz4+Pj4NCj4+Pj4+ Pj4+Pj4+PiB3cm90ZToNCj4+Pj4+Pj4+Pj4+PiANCj4+Pj4+Pj4+Pj4+Pj4gSGkgRXJpYywNCj4+ Pj4+Pj4+Pj4+Pj4gDQo+Pj4+Pj4+Pj4+Pj4+IEFwb2xvZ2llcyBmb3IgdGhlIGRlbGF5IGluIGdl dHRpbmcgYmFjayB0byB0aGF0Lg0KPj4+Pj4+Pj4+Pj4+PiANCj4+Pj4+Pj4+Pj4+Pj4gSSB0aGlu ayB0aGF0IHRoZXJlIGlzIHNvbWUgbWlzdW5kZXJzdGFuZGluZw0KPj4+Pj4+PiAgIGluIHdoYXQN Cj4+Pj4+Pj4+ICAgICAgICAgU1RVTmJpcyBpcw0KPj4+Pj4+Pj4+ICAgIHRyeWluZyB0bw0KPj4+ Pj4+Pj4+Pj4+PiBkbywgc28gcGxlYXNlIHNlZSBteSBjb21tZW50cyBpbmxpbmUuDQo+Pj4+Pj4+ Pj4+Pj4+IA0KPj4+Pj4+Pj4+Pj4+Pj4gT24gMDYvMTgvMjAxOCAxMDo0MyBBTSwgRXJpYyBSZXNj b3JsYSB3cm90ZToNCj4+Pj4+Pj4+Pj4+Pj4+IEhpIGZvbGtzLA0KPj4+Pj4+Pj4+Pj4+Pj4gDQo+ Pj4+Pj4+Pj4+Pj4+PiBJJ3ZlIHJldmlld2VkIHRoZSBuZXcgdmVyc2lvbiwgYnV0IEkgZG9uJ3QN Cj4+PiB0aGluaw0KPj4+Pj4+Pj4gICAgICAgICB0aGF0IHRoZSBiaWRkb3duDQo+Pj4+Pj4+Pj4+ Pj4+PiBkaXNjdXNzaW9uIG1ha2VzIG11Y2ggc2Vuc2UuDQo+Pj4+Pj4+Pj4+Pj4+PiANCj4+Pj4+ Pj4+Pj4+Pj4+IFRvIHJlY2FwLCB0aGVyZSBhcmUgdHdvIGhhc2hlcyBoZXJlOg0KPj4+Pj4+Pj4+ Pj4+Pj4gDQo+Pj4+Pj4+Pj4+Pj4+PiAtIFRoZSBoYXNoIHdoaWNoIHlvdSB1c2UgdG8gc3RvcmUg dGhlDQo+Pj4+Pj4+ICAgcGFzc3dvcmQgd2l0aA0KPj4+Pj4+Pj4gICAgICAgICAoY3VycmVudGx5 DQo+Pj4+Pj4+Pj4gICAgbW9zdGx5DQo+Pj4+Pj4+Pj4+Pj4+IE1ENSkNCj4+Pj4+Pj4+Pj4+Pj4+ IC0gVGhlIGhhc2ggeW91IHVzZSB0byBjb21wdXRlIHRoZSBNQUMNCj4+Pj4+Pj4gICAoY3VycmVu dGx5IFNIQS0xKS4NCj4+Pj4+Pj4+Pj4+Pj4+IA0KPj4+Pj4+Pj4+Pj4+Pj4gRmlyc3QsIGxldCdz IHN0aXB1bGF0ZSB0aGF0IE1ENSBpc24ndCBhDQo+Pj4+Pj4+ICAgZ3JlYXQgY2hvaWNlDQo+Pj4+ Pj4+PiAgICAgICAgIGhlcmUsDQo+Pj4+Pj4+Pj4gICAgdGhvdWdoIFNIQS0xDQo+Pj4+Pj4+Pj4+ Pj4+PiBpc24ndCBhIGdyZWF0IGNob2ljZQ0KPj4+Pj4+Pj4+Pj4+Pj4gZWl0aGVyIGZvciBwd2Qg aGFzaGluZyBZb3Ugd2FudCBBcmdvbiBvciB0aGUNCj4+Pj4+Pj4gICBsaWtlLg0KPj4+Pj4+Pj4g ICAgICAgICBXaXRoIHRoYXQgc2FpZCwNCj4+Pj4+Pj4+Pj4+Pj4gdGhlcmUncw0KPj4+Pj4+Pj4+ Pj4+Pj4gbm8gc2Vuc2libGUNCj4+Pj4+Pj4+Pj4+Pj4+IGJpZGRvd24gYXR0YWNrIG9uIHRoYXQg aGFzaCBiZWNhdXNlIGl0J3MgYQ0KPj4+Pj4+Pj4gICAgICAgICBwZXItc2VydmVyIGZlYXR1cmUs DQo+Pj4+Pj4+Pj4gICAgbm90IGENCj4+Pj4+Pj4+Pj4+Pj4+IHBlci10cmFuc2FjdGlvbg0KPj4+ Pj4+Pj4+Pj4+Pj4gZmVhdHVyZS4gU28sIGFzIGxvbmcgYXMgdGhlIHNlcnZlciBoYXMNCj4+Pj4+ Pj4gICBNRDUtaGFzaGVkDQo+Pj4+Pj4+PiAgICAgICAgIHBhc3N3b3JkcywgdGhlDQo+Pj4+Pj4+ Pj4+Pj4+IHNpdHVhdGlvbg0KPj4+Pj4+Pj4+Pj4+Pj4gaXMgYmFkLg0KPj4+Pj4+Pj4+Pj4+PiAN Cj4+Pj4+Pj4+Pj4+Pj4gSW4gbm8gcGxhY2UgaW4gU1RVTmJpcyB3ZSBhcmUgcHJvcG9zaW5nIHRv DQo+Pj4+Pj4+ICAgdXNlIFNIQS0xDQo+Pj4+Pj4+PiAgICAgICAgIGZvciBwYXNzd29yZA0KPj4+ Pj4+Pj4+Pj4+PiBlbmNyeXB0aW9uLCBzbyBJIGFtIG5vdCBzdXJlIHdoZXJlIHRoYXQgY29tZQ0K Pj4+Pj4+PiAgIGZyb20uDQo+Pj4+Pj4+PiAgICAgICAgIFdoYXQgd2UNCj4+Pj4+Pj4+PiAgICBw cm9wb3NlIGlzOg0KPj4+Pj4+Pj4+Pj4+PiANCj4+Pj4+Pj4+Pj4+PiANCj4+Pj4+Pj4+Pj4+PiBZ b3UncmUgcmlnaHQsIGl0J3MgU0hBLTI1NiwgYnV0IG15IGNyaXRpY2lzbXMNCj4+Pj4+Pj4gICBh cHBseQ0KPj4+Pj4+Pj4gICAgICAgICBlcXVhbGx5IHRoZXJlLg0KPj4+Pj4+Pj4+Pj4gDQo+Pj4+ Pj4+Pj4+PiBTSEEtMjU2IHdhcyB3aGF0IHRoZSBXRyBhZG9wdGVkLiAgT3VyIGF0dGVtcHRzDQo+ Pj4+Pj4+ICAgdG8gYWRkDQo+Pj4+Pj4+PiAgICAgICAgIG90aGVyIHBhc3N3b3Jkcw0KPj4+Pj4+ Pj4+Pj4gZW5jcnlwdGlvbiBtZWNoYW5pc21zIHdlcmUgZGVuaWVkLiAgSXQgaXMgdHJ1ZQ0KPj4+ IHRoYXQNCj4+Pj4+Pj4+ICAgICAgICAgQXJnb24yIHdhcw0KPj4+Pj4+Pj4+ICAgIG5vdCBpbiB0 aGF0DQo+Pj4+Pj4+Pj4+PiBsaXN0IChpbiBvdXIgZGVmZW5zZSBBcmdvbjIgd2FzIG5vdCBrbm93 bg0KPj4+Pj4+PiAgIGJlZm9yZSBKdWx5DQo+Pj4+Pj4+PiAgICAgICAgIDIwMTUpLCBidXQNCj4+ Pj4+Pj4+PiAgICBJIGRvIG5vdA0KPj4+Pj4+Pj4+Pj4gc2VlIHdoeSB0aGUgV0cgd291bGQgaGF2 ZSBhY2NlcHRlZCB0aGF0IG9uZQ0KPj4+Pj4+PiAgIG92ZXIgdGhlDQo+Pj4+Pj4+PiAgICAgICAg IG90aGVycy4NCj4+Pj4+Pj4+PiAgICBBbnl3YXkgaXQgaXMNCj4+Pj4+Pj4+Pj4+IHRvbyBsYXRl IHRvIGZpeCB0aGlzLCBhcyBpdCBpcyBteSB1bmRlcnN0YW5kaW5nDQo+Pj4+Pj4+ICAgdGhhdA0K Pj4+Pj4+Pj4gICAgICAgICB0aGUgV0cgZG9lcw0KPj4+Pj4+Pj4+ICAgIG5vdCBoYXZlDQo+Pj4+ Pj4+Pj4+PiBlbm91Z2ggZW5lcmd5IHRvIHJlYWNoIGNvbnNlbnN1cyBvbiBhIG5ldyBwYXNzd29y ZA0KPj4+Pj4+Pj4gICAgICAgICBhbGdvcml0aG0uDQo+Pj4+Pj4+Pj4gICAgU29tZW9uZSBjYW4N Cj4+Pj4+Pj4+Pj4+IGp1c3Qgd3JpdGUgYSBkcmFmdCBhZGRpbmcgQXJnb24yIGFzIHBhc3N3b3Jk DQo+Pj4+Pj4+PiAgICAgICAgIGVuY3J5cHRpb24sIGFzIHdlDQo+Pj4+Pj4+Pj4gICAgd2lsbCBo YXZlIGENCj4+Pj4+Pj4+Pj4+IElBTkEgcmVnaXN0cnkgZm9yIHRoYXQuDQo+Pj4+Pj4+Pj4+PiAN Cj4+Pj4+Pj4+Pj4+PiANCj4+Pj4+Pj4+Pj4+PiANCj4+Pj4+Pj4+Pj4+Pj4gLSBFc3RhYmxpc2gg YSByZWdpc3RyeSBmb3IgbmV3IHBhc3N3b3JkDQo+Pj4+Pj4+ICAgYWxnb3JpdGhtcw0KPj4+Pj4+ Pj4gICAgICAgICAoc2VjdGlvbg0KPj4+Pj4+Pj4+ICAgIDE4LjUpLCBzbw0KPj4+Pj4+Pj4+Pj4+ PiBhbGdvcml0aG1zIGxpa2UgQXJnb24yIGNvdWxkIGJlIGFkZGVkIGxhdGVyDQo+Pj4+Pj4+ICAg KGJ1dCBub3RlDQo+Pj4+Pj4+PiAgICAgICAgIHRoYXQgb3VyIG93bg0KPj4+Pj4+Pj4+Pj4+PiBw cm9wb3NhbHMgdG8gYWRkIG1vcmUgcGFzc3dvcmQgYWxnb3JpdGhtcyB3ZXJlDQo+Pj4+Pj4+PiAg ICAgICAgIHJlamVjdGVkIGJ5IHRoZQ0KPj4+Pj4+Pj4+ICAgIHdvcmtpbmcNCj4+Pj4+Pj4+Pj4+ Pj4gZ3JvdXApLg0KPj4+Pj4+Pj4+Pj4+PiAtIEFkZCBhIG5ldyBwYXNzd29yZCBhbGdvcml0aG0g dG8gdGhhdCByZWdpc3RyeSwNCj4+Pj4+Pj4+ICAgICAgICAgbmFtZWx5IFNIQS0yNTYuDQo+Pj4+ Pj4+Pj4+Pj4+IC0gUmVnaXN0ZXIgTUQ1IGFzIGFuIGluaXRpYWwgcGFzc3dvcmQNCj4+Pj4+Pj4g ICBhbGdvcml0aG0gZm9yDQo+Pj4+Pj4+PiAgICAgICAgIGJhY2t3YXJkDQo+Pj4+Pj4+Pj4+PiBj b21wYXRpYmlsaXR5DQo+Pj4+Pj4+Pj4+Pj4+IHB1cnBvc2UuDQo+Pj4+Pj4+Pj4+Pj4+IA0KPj4+ Pj4+Pj4+Pj4+PiBBcyBmb3IgdGhlIGJpZGRvd24gcHJvdGVjdGlvbiBpdHNlbGYsIGl0IGlzIG15 DQo+Pj4+Pj4+PiAgICAgICAgIHJlY29sbGVjdGlvbiB0aGF0IGl0DQo+Pj4+Pj4+Pj4+Pj4+IGhh cHBlbmVkIG1vcmUgb3IgbGVzcyBsaWtlIHRoYXQ6DQo+Pj4+Pj4+Pj4+Pj4+IA0KPj4+Pj4+Pj4+ Pj4+PiANCj4+Pj4+Pj4+Pj4+Pj4gSU5ULiBNRUVUSU5HIFJPT00gLSBEQVkNCj4+Pj4+Pj4+Pj4+ Pj4gDQo+Pj4+Pj4+Pj4+Pj4+IE9uZSBvZiB0aGUgY28tZWRpdG9ycyBvZiBTVFVOQmlzIHN0YW5k cyBhdCB0aGUNCj4+Pj4+Pj4+ICAgICAgICAgbWljcm9waG9uZToNCj4+Pj4+Pj4+Pj4+Pj4gDQo+ Pj4+Pj4+Pj4+Pj4+ICAgICAgICAgICAgICAgICAgICAgICAgICAgQ08tRURJVE9SDQo+Pj4+Pj4+ Pj4+Pj4+ICAgICAgICAgICAgICAgICBXZSBhZGRlZCBTSEEtMjU2IHByb3RlY3Rpb24gZm9yDQo+ Pj4+Pj4+PiAgICAgICAgIHBhc3N3b3Jkcw0KPj4+Pj4+Pj4+Pj4+PiAgICAgICAgICAgICAgICAg aW4gU1RVTkJpcy4NCj4+Pj4+Pj4+Pj4+Pj4gDQo+Pj4+Pj4+Pj4+Pj4+ICAgICAgICAgICAgICAg ICAgICAgICAgICAgU09NRU9ORSAoVi5PLikNCj4+Pj4+Pj4+Pj4+Pj4gICAgICAgICAgICAgICAg IEFzIE1ENSBzdGlsbCBuZWVkIHRvIGJlDQo+Pj4+Pj4+ICAgc3VwcG9ydGVkLA0KPj4+Pj4+Pj4g ICAgICAgICB5b3UgbmVlZCB0byBhZGQNCj4+Pj4+Pj4+Pj4+Pj4gICAgICAgICAgICAgICAgIHBy b3RlY3Rpb24gZm9yIGJpZC1kb3duDQo+Pj4gYXR0YWNrcy4NCj4+Pj4+Pj4+Pj4+Pj4gDQo+Pj4+ Pj4+Pj4+Pj4+IENMT1NFLVVQIG9uIENPLUVESVRPUiBST0xMSU5HIEhJUyBFWUVTDQo+Pj4+Pj4+ Pj4+Pj4+IA0KPj4+Pj4+Pj4+Pj4+PiAgICAgICAgICAgICAgICAgICAgICAgICAgIENPLUVESVRP Ug0KPj4+Pj4+Pj4+Pj4+PiAgICAgICAgICAgICAgICAgT0ssIEknbGwgd29yayBvbiB0aGF0Lg0K Pj4+Pj4+Pj4+Pj4+PiANCj4+Pj4+Pj4+Pj4+Pj4gRm91ciB0byBlaWdodCBtb250aHMgaGFzIHBh c3NlZC4NCj4+Pj4+Pj4+Pj4+Pj4gDQo+Pj4+Pj4+Pj4+Pj4+IElOVC4gQU5PVEhFUiBNRUVUSU5H IFJPT00gLSBEQVkNCj4+Pj4+Pj4+Pj4+Pj4gDQo+Pj4+Pj4+Pj4+Pj4+IFRoZSBzYW1lIGNvLWVk aXRvciBvZiBTVFVOQmlzIHN0YW5kcyBhdCB0aGUNCj4+Pj4+Pj4gICBtaWNyb3Bob25lOg0KPj4+ Pj4+Pj4+Pj4+PiANCj4+Pj4+Pj4+Pj4+Pj4gICAgICAgICAgICAgICAgICAgICAgICAgICBDTy1F RElUT1INCj4+Pj4+Pj4+Pj4+Pj4gICAgICAgICAgICAgICAgIFdlIGFkZGVkIGEgbmljZSBtZWNo YW5pc20gdG8NCj4+Pj4+Pj4gICBwcmV2ZW50DQo+Pj4+Pj4+PiAgICAgICAgIGJpZC1kb3duDQo+ Pj4+Pj4+Pj4+Pj4+ICAgICAgICAgICAgICAgICBhdHRhY2tzIG9uIHBhc3N3b3Jkcy4gIEFueQ0K Pj4+Pj4+PiAgIGNvbW1lbnRzPw0KPj4+Pj4+Pj4+Pj4+PiANCj4+Pj4+Pj4+Pj4+Pj4gICAgICAg ICAgICAgICAgICAgICAgICAgICBUSEUgUk9PTQ0KPj4+Pj4+Pj4+Pj4+PiAgICAgICAgICAgICAg ICAgKHNpbGVuY2UpDQo+Pj4+Pj4+Pj4+Pj4+IA0KPj4+Pj4+Pj4+Pj4+PiAgICAgICAgICAgICAg ICAgICAgICAgICAgIENPLUVESVRPUg0KPj4+Pj4+Pj4+Pj4+PiAgICAgICAgICAgICAgICAgTW92 aW5nIG9uLi4uDQo+Pj4+Pj4+Pj4+Pj4+IA0KPj4+Pj4+Pj4+Pj4+IA0KPj4+Pj4+Pj4+Pj4+IEkg ZG9uJ3Qgc2VlIGhvdyBhbnkgb2YgdGhpcyBpcyByZWxldmFudCB0byBteQ0KPj4+Pj4+Pj4gICAg ICAgICB0ZWNobmljYWwgcG9pbnRzDQo+Pj4+Pj4+Pj4gICAgYWJvdmUuDQo+Pj4+Pj4+Pj4+PiAN Cj4+Pj4+Pj4+Pj4+IE15IHBvaW50IHdhcyB0aGF0IHdlLCB0aGUgY28tZWRpdG9ycywgZGlkIG5v dA0KPj4+Pj4+PiAgIGRlY2lkZSBvbg0KPj4+Pj4+Pj4gICAgICAgICBhZGRpbmcNCj4+Pj4+Pj4+ PiAgICBiaWQtZG93bg0KPj4+Pj4+Pj4+Pj4gcHJvdGVjdGlvbiwgc29tZW9uZSBhc2tlZCB1cyB0 byBkbyBzbyBhbmQNCj4+Pj4+Pj4gICBuby1vbmUgaW4gdGhlDQo+Pj4+Pj4+PiAgICAgICAgIFdH IHNhdw0KPj4+Pj4+Pj4+ICAgIGFueSBwcm9ibGVtDQo+Pj4+Pj4+Pj4+PiB3aXRoIHRoYXQuICBU aGUgcmVhc29ucyB0aGF0IHBlcnNvbiB3YW50ZWQgdGhhdA0KPj4+Pj4+PiAgIGFyZSBub3QNCj4+ Pj4+Pj4+ICAgICAgICAga25vd24gdG8NCj4+Pj4+Pj4+PiAgICB1cyBidXQsIGFzDQo+Pj4+Pj4+ Pj4+PiB5b3UgaW5zaXN0LCBoZXJlJ3Mgb25lIHJlYXNvbiBJIGNhbiB0aGluayBvZjoNCj4+Pj4+ Pj4+Pj4+IA0KPj4+Pj4+Pj4+Pj4gSXQgaXMgYSBmYWN0IHRoYXQsIGZvciBvcGVyYXRpb25hbCBy ZWFzb25zLCBhDQo+Pj4+Pj4+ICAgcGFzc3dvcmQNCj4+Pj4+Pj4+ICAgICAgICAgZGF0YWJhc2UN Cj4+Pj4+Pj4+PiAgICBjYW5ub3QgYmUNCj4+Pj4+Pj4+Pj4+IHJlLWVuY3J5cHRlZCBhdCBvbmNl LiAgQWxzbyBmb3Igb3BlcmF0aW9uYWwNCj4+Pj4+Pj4gICByZWFzb25zLA0KPj4+Pj4+Pj4gICAg ICAgICB0aGUgTUQ1IHBhc3N3b3JkDQo+Pj4+Pj4+Pj4+PiBjYW5ub3QgYmUgaW1tZWRpYXRlbHkg cmVtb3ZlZCBmcm9tIHRoZSBkYXRhYmFzZQ0KPj4+Pj4+PiAgIGFzIHNvb24NCj4+Pj4+Pj4+ICAg ICAgICAgdGhlIHVzZXINCj4+Pj4+Pj4+PiAgICBzdWJtaXR0ZWQNCj4+Pj4+Pj4+Pj4+IGEgbmV3 IG9uZS4gIEluIGZhY3QsIGFuZCBmb3IgcXVpdGUgc29tZSB0aW1lLCBib3RoDQo+Pj4+Pj4+PiAg ICAgICAgIGVuY3J5cHRlZA0KPj4+Pj4+Pj4+ICAgIHZhcmlhbnRzIG9mDQo+Pj4+Pj4+Pj4+PiB0 aGUgc2FtZSBwYXNzd29yZCBtYXkgaGF2ZSB0byBiZSBrZXB0IGluIHRoYXQNCj4+Pj4+Pj4gICBk YXRhYmFzZSwNCj4+Pj4+Pj4+ICAgICAgICAgYmVjYXVzZSBhDQo+Pj4+Pj4+Pj4gICAgc2luZ2xl DQo+Pj4+Pj4+Pj4+PiB1c2VyIG1heSB1c2UgYSBtaXggb2YgZGV2aWNlcywgc29tZSBvZiB0aGVt DQo+Pj4+Pj4+ICAgdGhhdCB1c2UgYW4NCj4+Pj4+Pj4+ICAgICAgICAgUkZDIDUzODkNCj4+Pj4+ Pj4+PiAgICBjbGllbnQsDQo+Pj4+Pj4+Pj4+PiBzb21lIHRoYXQgdXNlIGEgU1RVTmJpcyBjbGll bnQuICBJdCBpcyB1cCB0bw0KPj4+Pj4+PiAgIHRoZSBTVFVODQo+Pj4+Pj4+PiAgICAgICAgIHNl cnZlciBvd25lciB0bw0KPj4+Pj4+Pj4+Pj4gZGVjaWRlIGhvdyBsb25nIHRoZSBtaWdyYXRpb24g dG8gU1RVTmJpcyB3aWxsDQo+Pj4+Pj4+ICAgdGFrZSBhbmQNCj4+Pj4+Pj4+ICAgICAgICAgd2hl biBpdA0KPj4+Pj4+Pj4+ICAgIHdpbGwgYmUNCj4+Pj4+Pj4+Pj4+IGFjY2VwdGFibGUgdG8gcmVq ZWN0IGFsbCBSRkMgNTM4OSAoaS5lLiBNRDUpDQo+Pj4+Pj4+ICAgY2xpZW50cyAodGhhdA0KPj4+ Pj4+Pj4+ICAgIG1pZ3JhdGlvbiB0aW1lDQo+Pj4+Pj4+Pj4+PiBjYW4gYmUgcHVycG9zZWx5IHJl ZHVjZWQgdG8gMCBzZWNvbmRzIGJ1dA0KPj4+Pj4+PiAgIHRoYXQncyB0aGUNCj4+Pj4+Pj4+ICAg ICAgICAgY2hvaWNlIGFuZA0KPj4+Pj4+Pj4+Pj4gcmVzcG9uc2liaWxpdHkgb2YgdGhlIG93bmVy IG9mIHRoZSBzZXJ2ZXIpLg0KPj4+Pj4+Pj4+Pj4gDQo+Pj4+Pj4+Pj4+PiBNZWFud2hpbGUgd2Ug c3RpbGwgbmVlZCB0byBiZSBzdXJlIHRoYXQgaWYgdGhlDQo+Pj4gU1RVTg0KPj4+Pj4+Pj4gICAg ICAgICBjbGllbnQgaXMNCj4+Pj4+Pj4+PiAgICBpbXBsZW1lbnRpbmcNCj4+Pj4+Pj4+Pj4+IFNU VU5iaXMgaXQgdW5jb25kaXRpb25hbGx5IGdldHMgdGhlIGFkZGl0aW9uYWwNCj4+Pj4+Pj4+ICAg ICAgICAgcHJvdGVjdGlvbiBvZiB0aGUgbmV3DQo+Pj4+Pj4+Pj4+PiBwYXNzd29yZCBlbmNyeXB0 aW9uIGFsZ29yaXRobS4gIFRoYXQncyB3aGVyZQ0KPj4+Pj4+PiAgIHRoZSBiaWRkb3duDQo+Pj4+ Pj4+Pj4gICAgcHJvdGVjdGlvbiBraWNrcw0KPj4+Pj4+Pj4+Pj4gaW4sIGJ5IHByZXZlbnRpbmcg YW4gb25saW5lIGF0dGFja2VyIHRvIGhhdmUNCj4+Pj4+Pj4gICB0aGUgc2VydmVyDQo+Pj4+Pj4+ Pj4gICAgbWlzaWRlbnRpZnlpbmcgYQ0KPj4+Pj4+Pj4+Pj4gU1RVTmJpcyBjbGllbnQgYXMgYW4g UkZDIDUzODkgY2xpZW50LCBieQ0KPj4+Pj4+PiAgIHByZXZlbnRpbmcgYW4NCj4+Pj4+Pj4+ICAg ICAgICAgb25saW5lDQo+Pj4+Pj4+Pj4gICAgYXR0YWNrZXIgdG8NCj4+Pj4+Pj4+Pj4+IGhhdmUg dGhlIGNsaWVudCBtaXNpZGVudGlmeWluZyBhIFNUVU5iaXMgc2VydmVyDQo+Pj4+Pj4+ICAgYXMg YQ0KPj4+Pj4+Pj4gICAgICAgICBSRkMgNTM4OQ0KPj4+Pj4+Pj4+ICAgIHNlcnZlciwgYW5kDQo+ Pj4+Pj4+Pj4+PiBoYXZpbmcgYm90aCB0aGVtIHVzZSB0aGUgTUQ1IGVuY3J5cHRlZCBwYXNzd29y ZA0KPj4+Pj4+PiAgIGluc3RlYWQNCj4+Pj4+Pj4+ICAgICAgICAgb2YgdGhlDQo+Pj4+Pj4+Pj4g ICAgU0hBLTI1Ng0KPj4+Pj4+Pj4+Pj4gZW5jcnlwdGVkIHBhc3N3b3JkLCBhbGwgb2YgdGhhdCBl YXNpbHkgZG9uZSBieQ0KPj4+Pj4+Pj4gICAgICAgICBzdHJpcHBpbmcgdGhlDQo+Pj4+Pj4+Pj4g ICAgdW5wcm90ZWN0ZWQNCj4+Pj4+Pj4+Pj4+IDQwMSByZXNwb25zZSBvZiB0aGUgbmV3IFNUVU5i aXMNCj4+PiBQQVNTV09SRC1BTEdPUklUSE1TDQo+Pj4+Pj4+PiAgICAgICAgIGF0dHJpYnV0ZS4N Cj4+Pj4+Pj4+Pj4+IA0KPj4+Pj4+Pj4+Pj4+IA0KPj4+Pj4+Pj4+Pj4+IA0KPj4+Pj4+Pj4+Pj4+ IA0KPj4+Pj4+Pj4+Pj4+Pj4gVGhlIHNlY29uZCB0b3BpYyBpcyB0aGUgaGFzaCB1c2VkIHRvIGNv bXB1dGUNCj4+PiB0aGUNCj4+Pj4+Pj4+ICAgICAgICAgTUFDLiBIb3dldmVyLA0KPj4+Pj4+Pj4+ ICAgIEkgZG9uJ3QNCj4+Pj4+Pj4+Pj4+Pj4gc2VlDQo+Pj4+Pj4+Pj4+Pj4+PiBob3cNCj4+Pj4+ Pj4+Pj4+Pj4+IHRoaXMgZ2l2ZXMgeW91IHNlbnNpYmxlIGJpZGRvd24gcHJvdGVjdGlvbg0KPj4+ Pj4+PiAgIGJlY2F1c2UNCj4+Pj4+Pj4+ICAgICAgICAgdGhhdCBoYXNoDQo+Pj4+Pj4+Pj4gICAg aXMgYWxzbw0KPj4+Pj4+Pj4+Pj4gdXNlZA0KPj4+Pj4+Pj4+Pj4+Pj4gdG8gY29tcHV0ZQ0KPj4+ Pj4+Pj4+Pj4+Pj4gTUFDIG92ZXIgdGhlIG5lZ290aWF0aW9uOiBhbiBhdHRhY2tlciB3aG8gaGFz DQo+Pj4+Pj4+PiAgICAgICAgIGNvbXByb21pc2VkIGENCj4+Pj4+Pj4+PiAgICBNQUMgd2hpY2gN Cj4+Pj4+Pj4+Pj4+IHRoZQ0KPj4+Pj4+Pj4+Pj4+Pj4gc2VydmVyDQo+Pj4+Pj4+Pj4+Pj4+PiBz dXBwb3J0cyB3aWxsIHF1aXRlIGxpa2VseSBiZSBhYmxlIHRvIGZvcmdlDQo+Pj4+Pj4+ICAgYSBN QUMNCj4+Pj4+Pj4+ICAgICAgICAgb3ZlciB0aGUNCj4+Pj4+Pj4+PiAgICB0cmFuc2NyaXB0DQo+ Pj4+Pj4+Pj4+PiBhcw0KPj4+Pj4+Pj4+Pj4+Pj4gd2VsbC4gVGhpcyBpcywNCj4+Pj4+Pj4+Pj4+ Pj4+IEkgc3VwcG9zZSwgcG90ZW50aWFsbHkgdXNlZnVsIGFzIGEgZGVmZW5zZQ0KPj4+Pj4+PiAg IGFnYWluc3QNCj4+Pj4+Pj4+ICAgICAgICAgc29tZSBvdGhlcg0KPj4+Pj4+Pj4+ICAgIHdlYWtu ZXNzDQo+Pj4+Pj4+Pj4+Pj4+PiAoZS5nLiwNCj4+Pj4+Pj4+Pj4+Pj4+IHZlcnNpb24gIyksIGJ1 dCBJIGRvbid0IHJlYWxseSBzZWUgaG93IHRoZQ0KPj4+Pj4+PiAgIGN1cnJlbnQNCj4+Pj4+Pj4+ ICAgICAgICAgZGVzaWduDQo+Pj4+Pj4+Pj4gICAgaGVscHMgYWdhaW5zdA0KPj4+Pj4+Pj4+Pj4+ Pj4gYXR0YWNrcyBvbiB0aGUNCj4+Pj4+Pj4+Pj4+Pj4+IE1BQy4NCj4+Pj4+Pj4+Pj4+Pj4gDQo+ Pj4+Pj4+Pj4+Pj4+IFRoZXJlIGlzIG5vIGJpZGRvd24gYXR0YWNrIHByb3RlY3Rpb24gZm9yIHRo ZQ0KPj4+Pj4+PiAgIE1BQywgYXMNCj4+Pj4+Pj4+ICAgICAgICAgc3RhdGVkIGluDQo+Pj4+Pj4+ Pj4gICAgU2VjdGlvbg0KPj4+Pj4+Pj4+Pj4+PiAxNi4zOg0KPj4+Pj4+Pj4+Pj4+PiANCj4+Pj4+ Pj4+Pj4+Pj4gIlRoZSBiaWQtZG93biBwcm90ZWN0aW9uIG1lY2hhbmlzbSBkZXNjcmliZWQNCj4+ Pj4+Pj4gICBpbiB0aGlzDQo+Pj4+Pj4+PiAgICAgICAgIGRvY3VtZW50DQo+Pj4+Pj4+Pj4gICAg aXMgbmV3LA0KPj4+Pj4+Pj4+Pj4+PiBhbmQgdGh1cyBjYW5ub3QgY3VycmVudGx5IHByb3RlY3Qg YWdhaW5zdCBhDQo+Pj4+Pj4+ICAgYmlkLWRvd24NCj4+Pj4+Pj4+ICAgICAgICAgYXR0YWNrIHRo YXQNCj4+Pj4+Pj4+Pj4+Pj4gbG93ZXJzIHRoZSBzdHJlbmd0aCBvZiB0aGUgaGFzaCBhbGdvcml0 aG0gdG8NCj4+Pj4+Pj4gICBITUFDLVNIQTEuIg0KPj4+Pj4+Pj4+Pj4+PiANCj4+Pj4+Pj4+Pj4+ Pj4gV2hhdCB3ZSBwdXQgaW4gcGxhY2UgaXMgYSBwbGFuIGZvciAqZnV0dXJlKg0KPj4+Pj4+PiAg IHZlcnNpb25zDQo+Pj4+Pj4+PiAgICAgICAgIG9mIFNUVU4gdG8gZ2V0DQo+Pj4+Pj4+Pj4+Pj4+ IGJpZGRvd24gcHJvdGVjdGlvbiBmb3IgdGhlIE1BQy4gIFRoYXQncyBpdCwNCj4+Pj4+Pj4gICBu byBtb3JlLA0KPj4+Pj4+Pj4gICAgICAgICBubyBsZXNzLg0KPj4+Pj4+Pj4+Pj4+PiANCj4+Pj4+ Pj4+Pj4+PiANCj4+Pj4+Pj4+Pj4+PiBZZXMsIGJ1dCBJIGRvbid0IGJlbGlldmUgdGhhdCB0aGlz IHdpbGwNCj4+Pj4+Pj4gICBwcm92aWRlIGJpZC1kb3duDQo+Pj4+Pj4+Pj4gICAgcHJvdGVjdGlv biBmb3INCj4+Pj4+Pj4+Pj4+IHRoZQ0KPj4+Pj4+Pj4+Pj4+IE1BQyBpbiB0aGUgZnV0dXJlIGZv ciB0aGUgcmVhc29ucyBJIGluZGljYXRlDQo+Pj4+Pj4+ICAgYWJvdmUuDQo+Pj4+Pj4+Pj4+Pj4g DQo+Pj4+Pj4+Pj4+Pj4gSWYgeW91IHRoaW5rIHRoaXMgZG9lcyBzb21ldGhpbmcgdXNlZnVsLA0K Pj4+Pj4+PiAgIHBsZWFzZSBzaG93IG1lIGFuDQo+Pj4+Pj4+Pj4gICAgZXhhbXBsZSBhdHRhY2sN Cj4+Pj4+Pj4+Pj4+PiBhbmQgaG93IHRoaXMgZml4ZXMgaXQuIE5vdGUgdGhhdCBpdCdzIG5vdA0K Pj4+Pj4+PiAgIGdlbmVyYWxseQ0KPj4+Pj4+Pj4gICAgICAgICB1c2VmdWwgdG8NCj4+Pj4+Pj4+ PiAgICBqdXN0IGJpZA0KPj4+Pj4+Pj4+Pj4gZG93bg0KPj4+Pj4+Pj4+Pj4+IHRoZSBNQUMgaXRz ZWxmIHVubGVzcyB0aGUgTUFDIHlvdSBiaWQgZG93biB0bw0KPj4+Pj4+PiAgIGlzIHdlYWsNCj4+ Pj4+Pj4+ICAgICAgICAgZW5vdWdoIHRvDQo+Pj4+Pj4+Pj4gICAgZXhwbG9pdA0KPj4+Pj4+Pj4+ Pj4gaW4NCj4+Pj4+Pj4+Pj4+PiBzb21lIG90aGVyIHdheS4NCj4+Pj4+Pj4+Pj4+IA0KPj4+Pj4+ Pj4+Pj4gSSBkbyBub3Qga25vdyB3aGF0IHdlYWtuZXNzZXMgd2lsbCBiZQ0KPj4+Pj4+PiAgIGRp c2NvdmVyZWQgaW4gdGhlDQo+Pj4+Pj4+PiAgICAgICAgIGZ1dHVyZS4NCj4+Pj4+Pj4+PiAgICBJ IGFtIGFsc28NCj4+Pj4+Pj4+Pj4+IHByZXR0eSBzdXJlIHRoYXQgdGhlIGNvc3Qgb2Ygbm90IHVz aW5nIHRoYXQNCj4+Pj4+Pj4gICBtZWNoYW5pc20NCj4+Pj4+Pj4+ICAgICAgICAgaXMgdmVyeQ0K Pj4+Pj4+Pj4+ICAgIGNsb3NlIHRvIDAuDQo+Pj4+Pj4+Pj4+PiBXaGF0IEkgYW0gc3VyZSBvZiBp cyB0aGF0IHRoZSBjb3N0IG9mDQo+Pj4+Pj4+ICAgcmVlbmdpbmVlcmluZyBhDQo+Pj4+Pj4+PiAg ICAgICAgIG5ldyBiaWRkb3duDQo+Pj4+Pj4+Pj4+PiBwcm90ZWN0aW9uIG1lY2hhbmlzbSBpZiB3 ZSBldmVyIG5lZWQgaXQgd2lsbCBiZQ0KPj4+Pj4+PiAgIGhpZ2guDQo+Pj4+Pj4+PiAgICAgICAg IFdlIGFscmVhZHkNCj4+Pj4+Pj4+PiAgICB3ZW50DQo+Pj4+Pj4+Pj4+PiB0aHJvdWdoIHRoZSBw YWlucyBvZiBkZXNpZ25pbmcgb25lIGZvciB0aGUNCj4+PiBwYXNzd29yZA0KPj4+Pj4+Pj4gICAg ICAgICBhbGdvcml0aG0sIHNvDQo+Pj4+Pj4+Pj4gICAgd2h5IG5vdA0KPj4+Pj4+Pj4+Pj4gZXh0 ZW5kIGl0IHNvIGl0IGNhbiBiZSB1c2VkIGluIHRoZSBhZnRlcm1hdGggb2YNCj4+PiB0aGUNCj4+ Pj4+Pj4+ICAgICAgICAgbmV4dCBTbm93ZGVuDQo+Pj4+Pj4+Pj4gICAgZmFjZXBhbG0NCj4+Pj4+ Pj4+Pj4+IG1vbWVudD8NCj4+Pj4+Pj4+Pj4+IA0KPj4+Pj4+Pj4+Pj4+IEFnYWluLCBoYXBweSB0 byBoYXZlIGEgY2FsbCB0byB3YWxrIHRob3VnaA0KPj4+Pj4+PiAgIHRoaXMgaWYgdGhhdA0KPj4+ Pj4+Pj4+Pj4+IGhlbHBzLg0KPj4+Pj4+Pj4+Pj4+IA0KPj4+Pj4+Pj4+Pj4+IC1Fa3INCj4+Pj4+ Pj4+Pj4+PiANCj4+Pj4+Pj4+Pj4+PiANCj4+Pj4+Pj4+Pj4+PiANCj4+Pj4+Pj4+Pj4+PiANCj4+ Pj4+Pj4+Pj4+Pj4+IA0KPj4+Pj4+Pj4+Pj4+Pj4gWW91IG1pZ2h0IHRoaW5rIHRoYXQgdGhlcmUg d2FzIGEgTUFDIHdoaWNoDQo+Pj4+Pj4+ICAgd2FzIGVhc2llciB0bw0KPj4+Pj4+Pj4+ICAgIHJl dmVyc2UgdG8NCj4+Pj4+Pj4+Pj4+IGZpbmQNCj4+Pj4+Pj4+Pj4+Pj4+IHRoZSBvcmlnaW5hbA0K Pj4+Pj4+Pj4+Pj4+Pj4gcGFzc3dvcmQsIGJ1dCB0aGUgZGVmZW5zZSB5b3UgaGF2ZSBoZXJlDQo+ Pj4+Pj4+ICAgZG9lc24ndCBoZWxwDQo+Pj4+Pj4+PiAgICAgICAgIHdpdGggdGhhdA0KPj4+Pj4+ Pj4+ICAgIGJlY2F1c2UNCj4+Pj4+Pj4+Pj4+Pj4gdGhlDQo+Pj4+Pj4+Pj4+Pj4+PiBvbi1wYXRo IGF0dGFja2VyIGNhbiBkbyBhIGJpZC1kb3duIGFuZCB1c2UgdGhlDQo+Pj4+Pj4+PiAgICAgICAg IGNsaWVudCBhcyBhIE1BQw0KPj4+Pj4+Pj4+ICAgIG9yYWNsZQ0KPj4+Pj4+Pj4+Pj4gZm9yDQo+ Pj4+Pj4+Pj4+Pj4+PiBhbnkgTUFDIHRoZSBjbGllbnQgc3VwcG9ydHMuDQo+Pj4+Pj4+Pj4+Pj4+ PiANCj4+Pj4+Pj4+Pj4+Pj4+IFNvLCBJIHN0aWxsIGRvbid0IHVuZGVyc3RhbmQgd2hhdCB0aGlz IGlzDQo+Pj4+Pj4+ICAgc3VwcG9zZWQNCj4+Pj4+Pj4+ICAgICAgICAgdG8gZG8uIEhhcHB5IHRv DQo+Pj4+Pj4+Pj4+PiBoYXZlIGENCj4+Pj4+Pj4+Pj4+Pj4+IGNhbGwgaWYgeW91DQo+Pj4+Pj4+ Pj4+Pj4+PiB0aGluayB0aGF0IGhlbHBzDQo+Pj4+Pj4+Pj4+Pj4+PiANCj4+Pj4+Pj4+Pj4+Pj4+ IC1Fa3INCj4+Pj4+Pj4+Pj4+Pj4+IA0KPj4+Pj4+Pj4+Pj4+Pj4gDQo+Pj4+Pj4+Pj4+Pj4+PiAN Cj4+Pj4+Pj4+Pj4+Pj4+IA0KPj4+Pj4+Pj4+Pj4+Pj4gT24gTW9uLCBKdW4gMTgsIDIwMTggYXQg Mzo0MCBBTSwgR29uemFsbw0KPj4+Pj4+PiAgIENhbWFyaWxsbyA8DQo+Pj4+Pj4+Pj4+Pj4+PiBH b256YWxvLkNhbWFyaWxsb0Blcmljc3Nvbi5jb20NCj4+Pj4+Pj4gICA8bWFpbHRvOkdvbnphbG8u Q2FtYXJpbGxvQGVyaWNzc29uLmNvbT4NCj4+Pj4+Pj4+ICAgICAgICAgPG1haWx0bzpHb256YWxv LkNhbWFyaWxsb0Blcmljc3Nvbi5jb20NCj4+Pj4+Pj4gICA8bWFpbHRvOkdvbnphbG8uQ2FtYXJp bGxvQGVyaWNzc29uLmNvbT4+DQo+Pj4+Pj4+Pj4gICAgPG1haWx0bzpHb256YWxvLkNhbWFyaWxs b0Blcmljc3Nvbi5jb20NCj4+Pj4+Pj4gICA8bWFpbHRvOkdvbnphbG8uQ2FtYXJpbGxvQGVyaWNz c29uLmNvbT4NCj4+Pj4+Pj4+ICAgICAgICAgPG1haWx0bzpHb256YWxvLkNhbWFyaWxsb0Blcmlj c3Nvbi5jb20NCj4+Pj4+Pj4gICA8bWFpbHRvOkdvbnphbG8uQ2FtYXJpbGxvQGVyaWNzc29uLmNv bT4+Pj4gd3JvdGU6DQo+Pj4+Pj4+Pj4+Pj4+PiANCj4+Pj4+Pj4+Pj4+Pj4+PiBNYXJjLCBFcmlj LA0KPj4+Pj4+Pj4+Pj4+Pj4+IA0KPj4+Pj4+Pj4+Pj4+Pj4+IHdoYXQgaXMgdGhlIHN0YXR1cyBv ZiB0aGlzIGRpc2N1c3Npb24/DQo+Pj4+Pj4+Pj4+Pj4+Pj4gDQo+Pj4+Pj4+Pj4+Pj4+Pj4gVGhh bmtzLA0KPj4+Pj4+Pj4+Pj4+Pj4+IA0KPj4+Pj4+Pj4+Pj4+Pj4+IEdvbnphbG8NCj4+Pj4+Pj4+ Pj4+Pj4+PiANCj4+Pj4+Pj4+Pj4+Pj4+Pj4gT24gMDQvMDUvMjAxOCAyOjM1IEFNLCBFcmljIFJl c2NvcmxhIHdyb3RlOg0KPj4+Pj4+Pj4+Pj4+Pj4+PiANCj4+Pj4+Pj4+Pj4+Pj4+Pj4gDQo+Pj4+ Pj4+Pj4+Pj4+Pj4+IE9uIE1vbiwgQXByIDIzLCAyMDE4IGF0IDExOjE2IEFNLCBNYXJjDQo+Pj4+ Pj4+PiAgICAgICAgIFBldGl0LUh1Z3VlbmluIDwNCj4+Pj4+Pj4+Pj4+Pj4gcGV0aXRodWdAYWNt Lm9yZyA8bWFpbHRvOnBldGl0aHVnQGFjbS5vcmc+DQo+Pj4+Pj4+ICAgPG1haWx0bzpwZXRpdGh1 Z0BhY20ub3JnIDxtYWlsdG86cGV0aXRodWdAYWNtLm9yZz4+DQo+Pj4+Pj4+PiAgICAgICAgIDxt YWlsdG86cGV0aXRodWdAYWNtLm9yZyA8bWFpbHRvOnBldGl0aHVnQGFjbS5vcmc+DQo+Pj4+Pj4+ ICAgPG1haWx0bzpwZXRpdGh1Z0BhY20ub3JnIDxtYWlsdG86cGV0aXRodWdAYWNtLm9yZz4+Pg0K Pj4+Pj4+Pj4+Pj4+Pj4+PiA8bWFpbHRvOnBldGl0aHVnQGFjbS5vcmcNCj4+Pj4+Pj4gICA8bWFp bHRvOnBldGl0aHVnQGFjbS5vcmc+IDxtYWlsdG86cGV0aXRodWdAYWNtLm9yZw0KPj4+Pj4+PiAg IDxtYWlsdG86cGV0aXRodWdAYWNtLm9yZz4+DQo+Pj4+Pj4+PiAgICAgICAgIDxtYWlsdG86cGV0 aXRodWdAYWNtLm9yZyA8bWFpbHRvOnBldGl0aHVnQGFjbS5vcmc+DQo+Pj4+Pj4+ICAgPG1haWx0 bzpwZXRpdGh1Z0BhY20ub3JnIDxtYWlsdG86cGV0aXRodWdAYWNtLm9yZz4+Pj4+IHdyb3RlOg0K Pj4+Pj4+Pj4+Pj4+Pj4+PiANCj4+Pj4+Pj4+Pj4+Pj4+Pj4gICAgT24gMDQvMjIvMjAxOCAwNToy MiBQTSwgRXJpYyBSZXNjb3JsYQ0KPj4+Pj4+PiAgIHdyb3RlOg0KPj4+Pj4+Pj4+Pj4+Pj4+Pj4g T24gU3VuLCBBcHIgMjIsIDIwMTggYXQgMjowMiBQTSwgTWFyYw0KPj4+Pj4+Pj4gICAgICAgICBQ ZXRpdC1IdWd1ZW5pbiA8DQo+Pj4+Pj4+Pj4+Pj4+Pj4gcGV0aXRodWdAYWNtLm9yZyA8bWFpbHRv OnBldGl0aHVnQGFjbS5vcmc+DQo+Pj4+Pj4+ICAgPG1haWx0bzpwZXRpdGh1Z0BhY20ub3JnIDxt YWlsdG86cGV0aXRodWdAYWNtLm9yZz4+DQo+Pj4+Pj4+PiAgICAgICAgIDxtYWlsdG86cGV0aXRo dWdAYWNtLm9yZyA8bWFpbHRvOnBldGl0aHVnQGFjbS5vcmc+DQo+Pj4+Pj4+ICAgPG1haWx0bzpw ZXRpdGh1Z0BhY20ub3JnIDxtYWlsdG86cGV0aXRodWdAYWNtLm9yZz4+Pg0KPj4+Pj4+Pj4+ICAg IDxtYWlsdG86cGV0aXRodWdAYWNtLm9yZyA8bWFpbHRvOnBldGl0aHVnQGFjbS5vcmc+DQo+Pj4+ Pj4+ICAgPG1haWx0bzpwZXRpdGh1Z0BhY20ub3JnIDxtYWlsdG86cGV0aXRodWdAYWNtLm9yZz4+ DQo+Pj4+Pj4+PiAgICAgICAgIDxtYWlsdG86cGV0aXRodWdAYWNtLm9yZyA8bWFpbHRvOnBldGl0 aHVnQGFjbS5vcmc+DQo+Pj4+Pj4+ICAgPG1haWx0bzpwZXRpdGh1Z0BhY20ub3JnIDxtYWlsdG86 cGV0aXRodWdAYWNtLm9yZz4+Pj4+DQo+Pj4+Pj4+Pj4+Pj4+Pj4+PiB3cm90ZToNCj4+Pj4+Pj4+ Pj4+Pj4+Pj4+IA0KPj4+Pj4+Pj4+Pj4+Pj4+Pj4+IA0KPj4+Pj4+Pj4+Pj4+Pj4+Pj4+Pj4gICAg IEZvciBhIHJlcXVlc3Qgb3IgaW5kaWNhdGlvbg0KPj4+Pj4+PiAgIG1lc3NhZ2UsDQo+Pj4+Pj4+ PiAgICAgICAgIHRoZSBhZ2VudA0KPj4+Pj4+Pj4+ICAgIE1VU1QNCj4+Pj4+Pj4+Pj4+Pj4+PiBp bmNsdWRlIHRoZQ0KPj4+Pj4+Pj4+Pj4+Pj4+Pj4+Pj4gICAgIFVTRVJOQU1FLA0KPj4+Pj4+PiAg IE1FU1NBR0UtSU5URUdSSVRZLVNIQTI1NiwgYW5kDQo+Pj4+Pj4+Pj4+PiBNRVNTQUdFLUlOVEVH UklUWQ0KPj4+Pj4+Pj4+Pj4+Pj4+Pj4+IGF0dHJpYnV0ZXMNCj4+Pj4+Pj4+Pj4+Pj4+Pj4+Pj4+ ICAgICBpbiB0aGUgbWVzc2FnZSB1bmxlc3MgdGhlIGFnZW50DQo+Pj4+Pj4+PiAgICAgICAgIGtu b3dzIGZyb20gYW4NCj4+Pj4+Pj4+PiAgICBleHRlcm5hbA0KPj4+Pj4+Pj4+Pj4+Pj4+IGluZGlj YXRpb24NCj4+Pj4+Pj4+Pj4+Pj4+Pj4+Pj4+ICAgICB3aGljaCBtZXNzYWdlIGludGVncml0eQ0K Pj4+Pj4+PiAgIGFsZ29yaXRobSBpcw0KPj4+Pj4+Pj4gICAgICAgICBzdXBwb3J0ZWQNCj4+Pj4+ Pj4+PiAgICBieSBib3RoDQo+Pj4+Pj4+Pj4+Pj4+Pj4gYWdlbnRzLiAgSW4NCj4+Pj4+Pj4+Pj4+ Pj4+Pj4+Pj4+ICAgICB0aGlzIGNhc2UgZWl0aGVyDQo+Pj4+Pj4+ICAgTUVTU0FHRS1JTlRFR1JJ VFkgb3INCj4+Pj4+Pj4+Pj4+Pj4+PiBNRVNTQUdFLUlOVEVHUklUWS1TSEEyNTYgTVVTVA0KPj4+ Pj4+Pj4+Pj4+Pj4+Pj4+Pj4gICAgIGJlIGluY2x1ZGVkIGluIGFkZGl0aW9uIHRvDQo+Pj4+Pj4+ PiAgICAgICAgIFVTRVJOQU1FLiAgVGhlIEhNQUMNCj4+Pj4+Pj4+PiAgICBmb3IgdGhlDQo+Pj4+ Pj4+Pj4+Pj4+Pj4gTUVTU0FHRS0NCj4+Pj4+Pj4+Pj4+Pj4+Pj4+Pj4gDQo+Pj4+Pj4+Pj4+Pj4+ Pj4+Pj4+IFRoaXMgdGV4dCBhcHBlYXJzIHRvIGNvbmZsaWN0IHdpdGgNCj4+Pj4+Pj4gICBTIDcu MyBvZg0KPj4+Pj4+Pj4+ICAgIDUyNDUtYmlzLCB3aGljaA0KPj4+Pj4+Pj4+Pj4+PiBzYXlzOg0K Pj4+Pj4+Pj4+Pj4+Pj4+Pj4+IA0KPj4+Pj4+Pj4+Pj4+Pj4+Pj4+IFt0ZXh0IG1pc3NpbmddDQo+ Pj4+Pj4+Pj4+Pj4+Pj4+Pj4gDQo+Pj4+Pj4+Pj4+Pj4+Pj4+Pj4gSG1tLCBubywgUkZDMjQ1Ymlz IGlzIHN0aWxsDQo+Pj4gcmVmZXJlbmNpbmcNCj4+Pj4+Pj4+ICAgICAgICAgUkZDNTM4OSwgc28g dGhlDQo+Pj4+Pj4+Pj4+Pj4+IHByb2NlZHVyZQ0KPj4+Pj4+Pj4+Pj4+Pj4+IGZvcg0KPj4+Pj4+ Pj4+Pj4+Pj4+Pj4+IHN0dW5iaXMgZG9lcyBub3QgYXBwbHkuDQo+Pj4+Pj4+Pj4+Pj4+Pj4+Pj4g DQo+Pj4+Pj4+Pj4+Pj4+Pj4+PiANCj4+Pj4+Pj4+Pj4+Pj4+Pj4+IEkgaGVhciB3aGF0IHlvdSdy ZSBzYXlpbmcsIGJ1dA0KPj4+Pj4+PiAgIHB1Ymxpc2hpbmcgdHdvDQo+Pj4+Pj4+Pj4gICAgZG9j dW1lbnRzIGF0IHRoZQ0KPj4+Pj4+Pj4+Pj4+Pj4+IHNhbWUgdGltZQ0KPj4+Pj4+Pj4+Pj4+Pj4+ Pj4gd2hpY2gNCj4+Pj4+Pj4+Pj4+Pj4+Pj4+IG1ha2UgY29udHJhcnkgcmVjb21tZW5kYXRpb25z IGFib3V0DQo+Pj4+Pj4+ICAgdGhlIHNhbWUNCj4+Pj4+Pj4+ICAgICAgICAgYmFzaWMNCj4+Pj4+ Pj4+PiAgICBwcm90b2NvbCBpcw0KPj4+Pj4+Pj4+Pj4+Pj4+IHVuLWdvb2QuDQo+Pj4+Pj4+Pj4+ Pj4+Pj4+IA0KPj4+Pj4+Pj4+Pj4+Pj4+PiAgICBTdXJlLCBidXQgd291bGRuJ3QgaXQgYmUgc2lt cGxlciB0byBoYXZlDQo+Pj4+Pj4+PiAgICAgICAgIHJmYzUyNDViaXMNCj4+Pj4+Pj4+PiAgICB1 c2luZyBzdHVuYmlzDQo+Pj4+Pj4+Pj4+Pj4+Pj4+ICAgIGFuZCBoYXZlIHRoZW0gdXBkYXRpbmcg dGhlaXIgdGV4dCwNCj4+Pj4+Pj4gICBtb3JlIHRoYW4NCj4+Pj4+Pj4+ICAgICAgICAgYWRkaW5n IHNvbWUNCj4+Pj4+Pj4+PiAgICB0b3J0dW91cw0KPj4+Pj4+Pj4+Pj4+Pj4+PiAgICB0ZXh0IGlu IHN0dW5iaXM/DQo+Pj4+Pj4+Pj4+Pj4+Pj4+IA0KPj4+Pj4+Pj4+Pj4+Pj4+Pj4gDQo+Pj4+Pj4+ Pj4+Pj4+Pj4+PiANCj4+Pj4+Pj4+Pj4+Pj4+Pj4+Pj4gICAgIFRoZSBTVFVOIHVzYWdlIG11c3Qg c3BlY2lmeQ0KPj4+IHdoaWNoDQo+Pj4+Pj4+PiAgICAgICAgIHRyYW5zcG9ydA0KPj4+Pj4+Pj4+ ICAgIHByb3RvY29sIGlzDQo+Pj4+Pj4+Pj4+Pj4+Pj4gdXNlZCwgYW5kDQo+Pj4+Pj4+Pj4+Pj4+ Pj4+Pj4gaG93DQo+Pj4+Pj4+Pj4+Pj4+Pj4+Pj4+PiAgICAgdGhlIGFnZW50IGRldGVybWluZXMg dGhlIElQDQo+Pj4+Pj4+ICAgYWRkcmVzcw0KPj4+Pj4+Pj4gICAgICAgICBhbmQgcG9ydA0KPj4+ Pj4+Pj4+ICAgIG9mIHRoZQ0KPj4+Pj4+Pj4+Pj4+Pj4+IHJlY2lwaWVudC4NCj4+Pj4+Pj4+Pj4+ Pj4+Pj4+Pj4+ICAgICBTZWN0aW9uIDggZGVzY3JpYmVzIGEgRE5TLWJhc2VkDQo+Pj4+Pj4+PiAg ICAgICAgIG1ldGhvZCBvZg0KPj4+Pj4+Pj4+ICAgIGRldGVybWluaW5nDQo+Pj4+Pj4+Pj4+PiB0 aGUNCj4+Pj4+Pj4+Pj4+Pj4+PiBJUA0KPj4+Pj4+Pj4+Pj4+Pj4+Pj4+IGFkZHJlc3MNCj4+Pj4+ Pj4+Pj4+Pj4+Pj4+Pj4+ICAgICBhbmQgcG9ydCBvZiBhIHNlcnZlciB0aGF0IGENCj4+Pj4+Pj4g ICB1c2FnZQ0KPj4+Pj4+Pj4gICAgICAgICBtYXkgZWxlY3QgdG8NCj4+Pj4+Pj4+PiAgICB1c2Uu DQo+Pj4+Pj4+Pj4+PiBTVFVODQo+Pj4+Pj4+Pj4+Pj4+Pj4gbWF5IGJlDQo+Pj4+Pj4+Pj4+Pj4+ Pj4+Pj4gdXNlZA0KPj4+Pj4+Pj4+Pj4+Pj4+Pj4+Pj4gICAgIHdpdGggYW55Y2FzdCBhZGRyZXNz ZXMsIGJ1dA0KPj4+IG9ubHkNCj4+Pj4+Pj4+ICAgICAgICAgd2l0aCBVRFAgYW5kDQo+Pj4+Pj4+ Pj4gICAgaW4gdXNhZ2VzDQo+Pj4+Pj4+Pj4+Pj4+Pj4gd2hlcmUNCj4+Pj4+Pj4+Pj4+Pj4+Pj4+ Pj4+ICAgICBhdXRoZW50aWNhdGlvbiBpcyBub3QgdXNlZC4NCj4+Pj4+Pj4+Pj4+Pj4+Pj4+Pj4g DQo+Pj4+Pj4+Pj4+Pj4+Pj4+Pj4+IFdoeSB0aGlzIHJlc3RyaWN0aW9uPyBZb3Ugc2hvdWxkDQo+ Pj4+Pj4+ICAgYmUgYWJsZQ0KPj4+Pj4+Pj4gICAgICAgICB0byB1c2UNCj4+Pj4+Pj4+PiAgICBh bnljYXN0IHdpdGgNCj4+Pj4+Pj4+Pj4+Pj4+PiBsb25nLXRlcm0NCj4+Pj4+Pj4+Pj4+Pj4+Pj4+ Pj4gQVVUSCBmb3IgKHNheSkgVFVSTi4NCj4+Pj4+Pj4+Pj4+Pj4+Pj4+PiANCj4+Pj4+Pj4+Pj4+ Pj4+Pj4+PiANCj4+Pj4+Pj4+ICAgICAgICAgaHR0cHM6Ly93d3cuaWV0Zi5vcmcvbWFpbC1hcmNo aXZlL3dlYi9iZWhhdmUvY3VycmVudC8NCj4+Pj4+Pj4+Pj4+Pj4+PiBtc2cwMzU4Mi5odG1sDQo+ Pj4+Pj4+Pj4+Pj4+Pj4+IA0KPj4+Pj4+Pj4gICAgICAgICAgPGh0dHBzOi8vd3d3LmlldGYub3Jn L21haWwtYXJjaGl2ZS93ZWIvYmVoYXZlL2N1cnJlbnQvDQo+Pj4+Pj4+Pj4+Pj4+IG1zZzAzNTgy Lmh0bWw+DQo+Pj4+Pj4+Pj4+Pj4+Pj4+Pj4gDQo+Pj4+Pj4+Pj4+Pj4+Pj4+Pj4gSSB0aGluayB0 aGF0IHRoZSBkZWNpc2lvbiBvZg0KPj4+Pj4+PiAgIHBlcm1pdHRpbmcgQW55Y2FzdA0KPj4+Pj4+ Pj4+ICAgIHNob3VsZCBiZSBsZWZ0DQo+Pj4+Pj4+Pj4+Pj4+IHRvDQo+Pj4+Pj4+Pj4+Pj4+Pj4g ZWFjaA0KPj4+Pj4+Pj4+Pj4+Pj4+Pj4+IFNUVU4gVXNhZ2UuICBCYXNpYyBTVFVOIFVzYWdlIGRv ZXMNCj4+Pj4+Pj4gICBub3QgdXNlDQo+Pj4+Pj4+Pj4gICAgYXV0aGVudGljYXRpb24gYW5kDQo+ Pj4+Pj4+Pj4+Pj4+IHVzZQ0KPj4+Pj4+Pj4+Pj4+Pj4+IG9ubHkgYQ0KPj4+Pj4+Pj4+Pj4+Pj4+ Pj4+IG9uZSByb3VuZCB0cmlwIGZvciB0aGUgQmluZGluZw0KPj4+Pj4+PiAgIHRyYW5zYWN0aW9u LCBzbw0KPj4+Pj4+Pj4+ICAgIFVuaWNhc3QgY2FuIGJlDQo+Pj4+Pj4+Pj4+Pj4+Pj4gdXNlZC4N Cj4+Pj4+Pj4+Pj4+Pj4+Pj4+PiANCj4+Pj4+Pj4+Pj4+Pj4+Pj4+IA0KPj4+Pj4+Pj4+Pj4+Pj4+ Pj4+IE9UT0gsIFRVUk4gYW5kIElDRSBzaG91bGQgcHJvYmFibHkgc2F5DQo+Pj4+Pj4+PiAgICAg ICAgIHNvbWV0aGluZw0KPj4+Pj4+Pj4+ICAgIGFib3V0IHRoYXQsDQo+Pj4+Pj4+Pj4+PiBzbw0K Pj4+Pj4+Pj4+Pj4+PiBJDQo+Pj4+Pj4+Pj4+Pj4+Pj4gYWRkZWQgYQ0KPj4+Pj4+Pj4+Pj4+Pj4+ Pj4+IG5ldyBidWxsZXQgcG9pbnQgaW4gU2VjdGlvbiAxMzoNCj4+Pj4+Pj4+Pj4+Pj4+Pj4+PiAN Cj4+Pj4+Pj4+Pj4+Pj4+Pj4+PiAgIG8gIElmIEFueWNhc3QgYWRkcmVzc2VzIGNhbiBiZQ0KPj4+ Pj4+PiAgIHVzZWQgZm9yDQo+Pj4+Pj4+PiAgICAgICAgIHRoZSBzZXJ2ZXINCj4+Pj4+Pj4+PiAg ICBpbiBjYXNlDQo+Pj4+Pj4+Pj4+Pj4+IFRDUA0KPj4+Pj4+Pj4+Pj4+Pj4+IG9yDQo+Pj4+Pj4+ Pj4+Pj4+Pj4+Pj4gICAgICBUTFMtb3Zlci1UQ1AsIG9yDQo+Pj4+Pj4+ICAgYXV0aGVudGljYXRp b24gYXJlIHVzZWQuDQo+Pj4+Pj4+Pj4+Pj4+Pj4+Pj4gDQo+Pj4+Pj4+Pj4+Pj4+Pj4+PiANCj4+ Pj4+Pj4+Pj4+Pj4+Pj4+IEFyZSB5b3UgbGVhdmluZyB0aGlzIHRleHQgaW4/IFRoYXQNCj4+PiBz ZWVtcw0KPj4+Pj4+Pj4gICAgICAgICB2ZXJ5IGNvbmZ1c2luZy4NCj4+Pj4+Pj4+Pj4+Pj4+Pj4g DQo+Pj4+Pj4+Pj4+Pj4+Pj4+ICAgIEluIGlzb2xhdGlvbiB5ZXMsIGJ1dCBJIHRoaW5rIGl0IG1h a2VzDQo+Pj4+Pj4+ICAgc2Vuc2UNCj4+Pj4+Pj4+ICAgICAgICAgd2hpY2ggdGhlIHRleHQNCj4+ Pj4+Pj4+Pj4+IGJlZm9yZQ0KPj4+Pj4+Pj4+Pj4+Pj4+PiAgICB0aGUgYnVsbGV0IHBvaW50czoN Cj4+Pj4+Pj4+Pj4+Pj4+Pj4gDQo+Pj4+Pj4+Pj4+Pj4+Pj4+ICAgICAgIEEgU1RVTiB1c2FnZSBk ZWZpbmVzIGhvdyBTVFVOIGlzDQo+Pj4+Pj4+ICAgYWN0dWFsbHkNCj4+Pj4+Pj4+ICAgICAgICAg dXRpbGl6ZWQgLS0NCj4+Pj4+Pj4+PiAgICB3aGVuIHRvDQo+Pj4+Pj4+Pj4+Pj4+IHNlbmQNCj4+ Pj4+Pj4+Pj4+Pj4+Pj4gICAgICAgcmVxdWVzdHMsIHdoYXQgdG8gZG8gd2l0aCB0aGUNCj4+Pj4+ Pj4gICByZXNwb25zZXMsDQo+Pj4+Pj4+PiAgICAgICAgIGFuZCB3aGljaA0KPj4+Pj4+Pj4+ICAg IG9wdGlvbmFsDQo+Pj4+Pj4+Pj4+Pj4+Pj4+ICAgICAgIHByb2NlZHVyZXMgZGVmaW5lZCBoZXJl IChvciBpbiBhbg0KPj4+Pj4+PiAgIGV4dGVuc2lvbg0KPj4+Pj4+Pj4gICAgICAgICB0byBTVFVO KQ0KPj4+Pj4+Pj4+ICAgIGFyZSB0byBiZQ0KPj4+Pj4+Pj4+Pj4+Pj4+IHVzZWQuDQo+Pj4+Pj4+ Pj4+Pj4+Pj4+ICAgICAgIEEgdXNhZ2UgYWxzbyBkZWZpbmVzOg0KPj4+Pj4+Pj4+Pj4+Pj4+PiAN Cj4+Pj4+Pj4+Pj4+Pj4+Pj4gICAgWy4uLl0NCj4+Pj4+Pj4+Pj4+Pj4+Pj4gDQo+Pj4+Pj4+Pj4+ Pj4+Pj4+ICAgICAgIG8gIElmIEFueWNhc3QgYWRkcmVzc2VzIGNhbiBiZSB1c2VkDQo+Pj4+Pj4+ ICAgZm9yIHRoZQ0KPj4+Pj4+Pj4gICAgICAgICBzZXJ2ZXIgaW4NCj4+Pj4+Pj4+PiAgICBjYXNl IFRDUA0KPj4+Pj4+Pj4+Pj4+PiBvcg0KPj4+Pj4+Pj4+Pj4+Pj4+PiAgICAgICAgICBUTFMtb3Zl ci1UQ1AsIG9yIGF1dGhlbnRpY2F0aW9uDQo+Pj4+Pj4+ICAgYXJlIHVzZWQuDQo+Pj4+Pj4+Pj4+ Pj4+Pj4+IA0KPj4+Pj4+Pj4+Pj4+Pj4+PiANCj4+Pj4+Pj4+Pj4+Pj4+Pj4gV2hhdCBpcyB0aGUg bmVlZCBmb3IgdGhlIHJlc3RyaWN0aW9uIGF0IGFsbA0K From nobody Wed Mar 20 12:58:54 2019 Return-Path: X-Original-To: tram@ietfa.amsl.com Delivered-To: tram@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 01C0B131229 for ; Wed, 20 Mar 2019 12:58:48 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.9 X-Spam-Level: X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_MED=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=rtfm-com.20150623.gappssmtp.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Gn-DQkKCl0Cj for ; Wed, 20 Mar 2019 12:58:38 -0700 (PDT) Received: from mail-lj1-x22e.google.com (mail-lj1-x22e.google.com [IPv6:2a00:1450:4864:20::22e]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 1EDD11311F6 for ; Wed, 20 Mar 2019 12:58:37 -0700 (PDT) Received: by mail-lj1-x22e.google.com with SMTP id f23so3406943ljc.0 for ; Wed, 20 Mar 2019 12:58:37 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=rtfm-com.20150623.gappssmtp.com; s=20150623; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=QGY1WtrRjXRbEeVp30x0oOpUI0CEhgSxlAQTGdPC9i4=; b=0dUw1foiAC93WCwUZ0qSE7nE23VADjQO1+6tTbpmc0/BW5iviOuSWYbTExPcaOnwpz rkr4ai9n7NTbLKeEJ/IRmirNnLcJ5I+xHcvfnPrk0/Ng7f83k7tn/TC+mWlwenjn9hVD tYH1NOPb5XTGm7fqonVR6qcggsHlNd+SFpGR1IXxVAQqOYg79aAG95i4B9+00gWteMlR cNEUPKysTTCDhRfkc1wA6B72JrJ8EUrdPLKO4yR5YnMO4uMyMlWzGpZZr3NMBg9uf52n vrpE+HqAJ/u/OXRfwnEQ5rzJy7d1QIiOL6+smpu+uVxfOibUt1n6qXdfuGOC/HYEtUUI 4yPA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=QGY1WtrRjXRbEeVp30x0oOpUI0CEhgSxlAQTGdPC9i4=; b=TkTb9OUrATeZhQfC2TaNgJuA1v+AjBJDN+BKMW2myU+hNhldeRP+fOQ1YzAFg+fMxw OXwirOHItul34kBKx8P8uEUg6eCwChZ0RQ5IEIJ4eWalv0mB1U4oRC4V57asyN6UMM8C iRelWEHhVU+ylf2cw9e5KGcSB1E/21s2CVgoik8P2N7b0041ato2m2xZL/XQUWMObeFb dchJ7VJPYAP3vSJcPe8F/K6iQtUhfNwH7kIavmbfEhWRN4/D0fn2ds8WdDJRUzGG8/ya vI2yfiyjMiIVgC9WY/IvQ+o48B1aF8g1e8qsTueee6vyUCnHZXm0qzDra99B+oEwD3gi NZlg== X-Gm-Message-State: APjAAAVeZoAioaVicaPVt0bRE3o5T2njbLaEfz7bDTZusLbjNFnB3LR6 +4IFFtaGdfsZlh2UBdgwPRxTMdxj23VzbQk4m2bnsA== X-Google-Smtp-Source: APXvYqwZ92J7QjXirEaL7gWzzShQd83QnWNrWchCtbYrmRETwje3GaeF4JyDVWe2jXWHnKmO/Bzz/fOBb+Fhu2HqILM= X-Received: by 2002:a2e:3506:: with SMTP id z6mr10244026ljz.72.1553111914951; Wed, 20 Mar 2019 12:58:34 -0700 (PDT) MIME-Version: 1.0 References: <152390863222.19652.10310304989315386136.idtracker@ietfa.amsl.com> <472563ee-5fc3-655d-8e31-138cc774e608@acm.org> <97c561a7-c33a-6121-00c4-09cd11646b98@ericsson.com> <4b8f10f7-1eee-c8bc-d9ee-e3f18473de32@ericsson.com> In-Reply-To: From: Eric Rescorla Date: Wed, 20 Mar 2019 12:57:57 -0700 Message-ID: To: "Gonzalo Salgueiro (gsalguei)" Cc: Spencer Dawkins at IETF , Gonzalo Camarillo , Marc Petit-Huguenin , "tram-chairs@ietf.org" , "tram@ietf.org" , IESG , "draft-ietf-tram-stunbis@ietf.org" Content-Type: multipart/alternative; boundary="000000000000fccbbb05848c0b73" Archived-At: Subject: Re: [tram] Eric Rescorla's Discuss on draft-ietf-tram-stunbis-16: (with DISCUSS and COMMENT) X-BeenThere: tram@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "Discussing the creation of a Turn Revised And Modernized \(TRAM\) WG, which goal is to consolidate the various initiatives to update TURN and STUN." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 20 Mar 2019 19:58:52 -0000 --000000000000fccbbb05848c0b73 Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable Gonzalo, This text still seems to me to need some work. Here is a revised version. SHA-256 was chosen as the new default for password hashing for its compability with RFC 7616 but because SHA-256 (like MD5) is a comparatively fast algorithm, it does little to deter brute force attacks. Specifically, this means that if the user has a weak password: * An attacker who captures the server's password file can often determine the user's password and thus impersonate the user to other servers where they have used that password. Note that such an attacker can impersonate the user to the server itself without any brute force attack. * An attacker who captures a single exchange can brute force the user's password and thus potentially impersonate the user to the server and other servers where they have used the same pasword. A stronger (which is to say slower) algorithm, like Argon2 [I-D.irtf-cfrg-argon2], would help both of these cases, but in the case of the first attack, only after until the database entry for this user is updated to exclusively use that stronger mechanism. The bid-down defenses in this protocol prevent an attacker from forcing the client and server to complete a handshake using weaker algorithms than they jointly support, but only if the weakest joint algorithm is strong enough that it cannot be brute-forced. However, this does not defend against many attacks on those algorithms; specifically, an on-path attacker might perform a bid-down attack on a client which supported both Argon2 and SHA-256 for password hashing and use that to collect a MESSAGE-INTEGRITY-SHA256 value which it uses for an offline brute-force attack. This would be detected when the server receives the second request, but that does not prevent the attacker from obtaining the MESSAGE-INTEGRITY-SHA256 value. Similarly, an attack against the USERHASH mechanism will not succeed in establishing a session as the server will detect that the feature was discarded on-path, but the client would still have been convinced to send its username in clear in the USERNAME attribute, thus disclosing it to the attacker. -Ekr On Mon, Mar 18, 2019 at 6:37 PM Gonzalo Salgueiro (gsalguei) < gsalguei@cisco.com> wrote: > Thanks, Spencer. In the interest of expeditiousness I=E2=80=99ve emailed= Eric to > review the newly published -20 to ensure it addresses his DISCUSS points. > Hoping to get this done before Eric steps down as AD. > > Cheers, > > Gonzalo > > > > > On Mar 18, 2019, at 9:27 PM, Spencer Dawkins at IETF < > spencerdawkins.ietf@gmail.com> wrote: > > > > Dear All, > > > >> On Fri, Mar 8, 2019 at 8:10 PM Eric Rescorla wrote: > >> > >> Thanks for the call yesterday. > >> > > > > Thanks to all for moving this specification forward. > > > > If the current conversation turns out to converge on this topic before > next > > Wednesday, I'm happy to approve a revised draft after Eric clears his > > Discuss. > > > > If I can help in any way, please let me know. > > > > Spencer > > > > > >> > >> First, here is what I recommend for the question of SHA-256 for passwo= rd > >> hashing: > >> > >> Note: the use of SHA-256 for password hashing does not meet modern > >> standards, which are aimed at slowing down exhaustive password search > >> by providing a relatively slow minimum time to compute the > >> hash. Although better algorithms such as Argon2 > >> [https://datatracker.ietf.org/doc/draft-irtf-cfrg-argon2/] are > >> available, SHA-256 was chosen for consistency with RFC 7616. > >> > >> > >> Now, WRT to the anti-downgrade situation. Here's a stylized version > >> of the protocol: > >> > >> Client Server > >> > >> Hello -> > >> <- Nonce, Algorithms > >> HMAC-H1(H2(Password), Nonce, Algorithms, Msg) -> > >> <- HMAC-H1(H2(Password), ...) > >> > >> Where H1 and H2 are the HMAC hash functions and the password hashing > >> function respectively. > >> > >> Now, if we assume that the attacker does not know Password and that > >> both H1 and H2 are secure, then it is not possible for the attacker to > >> complete the transaction or modify any of the messages. Further, if > >> the weakest joint algorithm that both sides support is still strong, > >> then an attacker cannot influence the algorithm negotiation [0]. This > >> property is provided by covering the algorithms under the MAC. > >> > >> However, my point is that this is not a very useful property. > >> > >> First, consider the case in which the implementations jointly support > >> one strong algorithm and one weak algorithm. E.g., for H1 they support > >> SHA-256 and the function Z(x) which always emits 0s. This allows > >> an attacker to force the client and server into using Z, as follows. > >> > >> > >> Client Attacker Server > >> > >> Hello -> > >> Hello -> > >> <- Nonce, Alg=3DSHA256, Z > >> <- Nonce, Alg=3DZ > >> Z(H2(Password), Nonce, Alg=3DZ)) -> > >> Z(H2(Password), Nonce, Alg=3DSHA256, Z)) > >> > >> The issue here is that the only thing that the MAC is doing is > >> authenticating the transaction, and if you can't trust it to do that, > >> you can't trust it to authenticate the bid-down defense either. > >> > >> > >> During our discussion, there was a suggestion that it was useful to > >> have biddown defense to defend against weaknesses in H2. I don't think > >> that that's true either. First, remember that the purpose of H2 is to > >> prevent an attacker who recovers the password database from learning > >> the user's true password. This is not about defending the server from > >> attack (because knowing A1 is enough to attack the server) but about > >> preventing the attacker from learning a password which might have been > >> reused on another site. > >> > >> Now, it's also possible to brute-force the user's password just from > >> the protocol transcript: if you capture the client's first message > >> with MESSAGE-INTEGRITY or MESSAGE-INTEGRITY-SHA256, you can just keep > >> trying passwords until you get the right MAC. Note that this is a > >> passive attack. This is comparatively fast because SHA256 and MD5 are > >> fast. > >> > >> A much stronger H2 (e.g., Argon) would help against this, but the > >> problem now becomes that the client supports H2 =3D=3D MD5 (or SHA-256= ) > >> and so even if the server supports Argon, the attacker can mount a > >> bid-down defense in which it modifies the server's first message to > >> just advertise MD5 and thus get the client to provide a suitable > >> message. The bid-down defense would prevent the authentication > >> transaction from completing, but that's not necessary for this > >> attack because the attacker can just brute-force the password from > >> the message it has. To make this work, you would need something > >> like a PAKE, which this is not. > >> > >> Finally, you might think that the server has two databases, one > >> which uses Argon and one which uses MD5 and it wants to gradually > >> phase out the MD5 one, which it will do when no client authenticates > >> with MD5 for a very long time. An anti-biddown defense would sort > >> of work here, but the fact that the attacker would have to be > >> active essentially indefinitely to keep the server confused about > >> the state of clients -- and that the attacker can likely just > >> get a valid account and then insist on using MD5 -- makes this a > >> not very useful defense. > >> > >> I think this makes a pretty persuasive case that the bid-down defense > >> isn't useful except in the formal "attacker cannot influence > >> negotiation" sense. With that said, in the spirit of getting this done= , > I > >> guess > >> I'm willing to let this go if the security considerations make clear > >> that it is only a very limited mechanism. > >> > >> -Ekr > >> > >> > >> [0] This is principally about H1. As long as the H2 approximately > >> evenly distributes the password over its range, then cryptographic > >> strength is not important for this question. For instance, you > >> could replace H2 with an identity function and still have a > >> secure protocol. > >> > >> > >> > >> > >> > >> > >> On Wed, Feb 20, 2019 at 4:03 AM Gonzalo Camarillo < > >> gonzalo.camarillo@ericsson.com> wrote: > >> > >>> Thanks, Gonzalo! Please, let us know the agreed way forward once you > >>> have the call. > >>> > >>> Cheers, > >>> > >>> Gonzalo > >>> > >>>> On 19-Feb-19 20:05, Gonzalo Salgueiro (gsalguei) wrote: > >>>> Hi Gonzalo - > >>>> > >>>> We have scheduled a conference call with Ekr, Simon, Marc and myself > on > >>> March 7th to discuss the last two remaining issues. Will update with > >>> resolutions once this has occurred. > >>>> > >>>> Cheers, > >>>> > >>>> Gonzalo > >>>> > >>>> > >>>> > >>>>> On Feb 18, 2019, at 8:18 AM, Gonzalo Camarillo < > >>> Gonzalo.Camarillo@ericsson.com> wrote: > >>>>> > >>>>> Hi Gonzalo S, > >>>>> > >>>>> what is the status of this one? > >>>>> > >>>>> Thanks, > >>>>> > >>>>> Gonzalo > >>>>> > >>>>>> On 18-Jan-19 20:16, Gonzalo Salgueiro (gsalguei) wrote: > >>>>>> Totally agree, Ekr. Marc and I are meeting to come up with a > proposal > >>>>>> but I do agree we need to have a call to get this put to bed once > and > >>>>>> for all. We=E2=80=99ll offer some potential dates in the next 2-3= weeks. > >>>>>> > >>>>>> Cheers, > >>>>>> > >>>>>> Gonzalo > >>>>>> > >>>>>> > >>>>>>> On Dec 26, 2018, at 8:05 PM, Eric Rescorla >>>>>>> > wrote: > >>>>>>> > >>>>>>> We really need to bring this to a close before both Spencer and I > >>> step > >>>>>>> down, I should think. > >>>>>>> > >>>>>>> -Ekr > >>>>>>> > >>>>>>> > >>>>>>> On Thu, Nov 22, 2018 at 4:30 AM Gonzalo Camarillo > >>>>>>> >>>>>>> > wrote: > >>>>>>> > >>>>>>> Eric, Spencer, thanks for the status update! > >>>>>>> > >>>>>>> Authors, could you please let us know when you plan to get to > >>> this? > >>>>>>> > >>>>>>> Gonzalo > >>>>>>> > >>>>>>>> On 19-Nov-18 23:04, Spencer Dawkins at IETF wrote: > >>>>>>>> Hi, Gonzalo, > >>>>>>>> On Mon, Nov 19, 2018 at 9:06 AM Eric Rescorla >>>>>>> > >>>>>>>> >> wrote: > >>>>>>>> > >>>>>>>> Not really. I have not received any response to my mail of > >>>>>>> Oct 23. > >>>>>>>> As before, I'm happy to have a call, but I believe we're > >>>>>>> reaching > >>>>>>>> the limits of what can be accomplished by email. > >>>>>>>> > >>>>>>>> > >>>>>>>> Eric would know best (it being his Discuss), but this is also my > >>>>>>>> understanding. > >>>>>>>> > >>>>>>>> I can add this to the agenda of the IESG informal telechat on > >>>>>>> November > >>>>>>>> 29, if there hasn't been a call before then, but I don't have a > >>>>>>> reason > >>>>>>>> to wait until then, if it's possible to talk sooner. > >>>>>>>> > >>>>>>>> Thanks, > >>>>>>>> > >>>>>>>> Spencer > >>>>>>>> > >>>>>>>> > >>>>>>>> > >>>>>>>> -Ekr > >>>>>>>> > >>>>>>>> > >>>>>>>> On Mon, Nov 19, 2018 at 6:35 AM Gonzalo Camarillo > >>>>>>>> >>>>>>> > >>>>>>>> >>>>>>> >> wrote: > >>>>>>>> > >>>>>>>> Hi Spencer, > >>>>>>>> > >>>>>>>> what is the status of this? Are the authors and the > >>> document > >>>>>>>> shepherd > >>>>>>>> working with the relevant ADs on the discusses? > >>>>>>>> > >>>>>>>> > >>>>>>> > >>> https://datatracker.ietf.org/doc/draft-ietf-tram-stun-pmtud/ballot/ > >>>>>>>> > >>>>>>>> Cheers, > >>>>>>>> > >>>>>>>> Gonzalo > >>>>>>>> > >>>>>>>>> On 24-Oct-18 16:40, Spencer Dawkins at IETF wrote: > >>>>>>>>> Hi, Marc, > >>>>>>>>> > >>>>>>>>> On Wed, Oct 24, 2018 at 3:44 AM Marc Petit-Huguenin > >>>>>>>> > >>>>>>> > > >>>>>>>>> > >>>>>>> >>> wrote: > >>>>>>>>> > >>>>>>>>> Hi Spencer, > >>>>>>>>> > >>>>>>>>> I sent my answers to Eric Rescorla questions on > >>>>>>> 2018-10-07 > >>>>>>>> following > >>>>>>>>> an in-person meeting with my co-author, but never > >>>>>>> got a > >>>>>>>> response > >>>>>>>>> back. Because there was no change proposed by > >>>>>>> Eric I went > >>>>>>>> ahead and > >>>>>>>>> published -19 a couple of weeks after that, with > >>>>>>> the text > >>>>>>>> agreed in > >>>>>>>>> response to Adam's and Benjamin's comments. > >>>>>>>>> > >>>>>>>>> > >>>>>>>> > >>>>>>> > >>> https://www.ietf.org/mail-archive/web/tram/current/msg02635.html > >>>>>>>>> > >>>>>>>>> > >>>>>>>>> Ah - I wonder if that was what had happened. > >>>>>>>>> > >>>>>>>>> It sounds like you did the right thing, and that Eric > >>>>>>> has now > >>>>>>>> responded, > >>>>>>>>> which is also the right thing to do. > >>>>>>>>> > >>>>>>>>> Thanks for helping me understand. > >>>>>>>>> > >>>>>>>>> Spencer > >>>>>>>>> > >>>>>>>>> > >>>>>>>>>> On 10/23/18 7:28 PM, Spencer Dawkins at IETF wrote: > >>>>>>>>>> Hi, Marc, > >>>>>>>>>> > >>>>>>>>>> I see that a -19 has been submitted, but didn't > >>>>>>> see a > >>>>>>>> reply from > >>>>>>>>> Eric in > >>>>>>>>>> this thread. Do you think that you've converged? > >>>>>>>>>> > >>>>>>>>>> (I saw an offer of a conference call, so thought an > >>>>>>>> out-of-band > >>>>>>>>>> conversation might have happened) > >>>>>>>>>> > >>>>>>>>>> Thanks, > >>>>>>>>>> > >>>>>>>>>> Spencer > >>>>>>>>>> > >>>>>>>>>> On Sun, Oct 7, 2018 at 9:35 AM Marc Petit-Huguenin > >>>>>>>>> > >>>>>>> > > >>>>>>>> > >>>>>>> >>> wrote: > >>>>>>>>>> > >>>>>>>>>>> Hi Eric, > >>>>>>>>>>> > >>>>>>>>>>> Please see inline. > >>>>>>>>>>> > >>>>>>>>>>>> On 09/10/2018 03:25 AM, Eric Rescorla wrote: > >>>>>>>>>>>> On Sat, Sep 8, 2018 at 2:31 PM, Marc > >>>>>>> Petit-Huguenin > >>>>>>>>> > >>>>>>> > > >>>>>>>> > >>>>>>> >>> > >>>>>>>>>>>> wrote: > >>>>>>>>>>>> > >>>>>>>>>>>>> Hi Eric, > >>>>>>>>>>>>> > >>>>>>>>>>>>> Apologies for the delay in getting back to that. > >>>>>>>>>>>>> > >>>>>>>>>>>>> I think that there is some misunderstanding > >>>>>>> in what > >>>>>>>> STUNbis is > >>>>>>>>> trying to > >>>>>>>>>>>>> do, so please see my comments inline. > >>>>>>>>>>>>> > >>>>>>>>>>>>>> On 06/18/2018 10:43 AM, Eric Rescorla wrote: > >>>>>>>>>>>>>> Hi folks, > >>>>>>>>>>>>>> > >>>>>>>>>>>>>> I've reviewed the new version, but I don't > >>> think > >>>>>>>> that the biddown > >>>>>>>>>>>>>> discussion makes much sense. > >>>>>>>>>>>>>> > >>>>>>>>>>>>>> To recap, there are two hashes here: > >>>>>>>>>>>>>> > >>>>>>>>>>>>>> - The hash which you use to store the > >>>>>>> password with > >>>>>>>> (currently > >>>>>>>>> mostly > >>>>>>>>>>>>> MD5) > >>>>>>>>>>>>>> - The hash you use to compute the MAC > >>>>>>> (currently SHA-1). > >>>>>>>>>>>>>> > >>>>>>>>>>>>>> First, let's stipulate that MD5 isn't a > >>>>>>> great choice > >>>>>>>> here, > >>>>>>>>> though SHA-1 > >>>>>>>>>>>>>> isn't a great choice > >>>>>>>>>>>>>> either for pwd hashing You want Argon or the > >>>>>>> like. > >>>>>>>> With that said, > >>>>>>>>>>>>> there's > >>>>>>>>>>>>>> no sensible > >>>>>>>>>>>>>> biddown attack on that hash because it's a > >>>>>>>> per-server feature, > >>>>>>>>> not a > >>>>>>>>>>>>>> per-transaction > >>>>>>>>>>>>>> feature. So, as long as the server has > >>>>>>> MD5-hashed > >>>>>>>> passwords, the > >>>>>>>>>>>>> situation > >>>>>>>>>>>>>> is bad. > >>>>>>>>>>>>> > >>>>>>>>>>>>> In no place in STUNbis we are proposing to > >>>>>>> use SHA-1 > >>>>>>>> for password > >>>>>>>>>>>>> encryption, so I am not sure where that come > >>>>>>> from. > >>>>>>>> What we > >>>>>>>>> propose is: > >>>>>>>>>>>>> > >>>>>>>>>>>> > >>>>>>>>>>>> You're right, it's SHA-256, but my criticisms > >>>>>>> apply > >>>>>>>> equally there. > >>>>>>>>>>> > >>>>>>>>>>> SHA-256 was what the WG adopted. Our attempts > >>>>>>> to add > >>>>>>>> other passwords > >>>>>>>>>>> encryption mechanisms were denied. It is true > >>> that > >>>>>>>> Argon2 was > >>>>>>>>> not in that > >>>>>>>>>>> list (in our defense Argon2 was not known > >>>>>>> before July > >>>>>>>> 2015), but > >>>>>>>>> I do not > >>>>>>>>>>> see why the WG would have accepted that one > >>>>>>> over the > >>>>>>>> others. > >>>>>>>>> Anyway it is > >>>>>>>>>>> too late to fix this, as it is my understanding > >>>>>>> that > >>>>>>>> the WG does > >>>>>>>>> not have > >>>>>>>>>>> enough energy to reach consensus on a new password > >>>>>>>> algorithm. > >>>>>>>>> Someone can > >>>>>>>>>>> just write a draft adding Argon2 as password > >>>>>>>> encryption, as we > >>>>>>>>> will have a > >>>>>>>>>>> IANA registry for that. > >>>>>>>>>>> > >>>>>>>>>>>> > >>>>>>>>>>>> > >>>>>>>>>>>>> - Establish a registry for new password > >>>>>>> algorithms > >>>>>>>> (section > >>>>>>>>> 18.5), so > >>>>>>>>>>>>> algorithms like Argon2 could be added later > >>>>>>> (but note > >>>>>>>> that our own > >>>>>>>>>>>>> proposals to add more password algorithms were > >>>>>>>> rejected by the > >>>>>>>>> working > >>>>>>>>>>>>> group). > >>>>>>>>>>>>> - Add a new password algorithm to that registry, > >>>>>>>> namely SHA-256. > >>>>>>>>>>>>> - Register MD5 as an initial password > >>>>>>> algorithm for > >>>>>>>> backward > >>>>>>>>>>> compatibility > >>>>>>>>>>>>> purpose. > >>>>>>>>>>>>> > >>>>>>>>>>>>> As for the biddown protection itself, it is my > >>>>>>>> recollection that it > >>>>>>>>>>>>> happened more or less like that: > >>>>>>>>>>>>> > >>>>>>>>>>>>> > >>>>>>>>>>>>> INT. MEETING ROOM - DAY > >>>>>>>>>>>>> > >>>>>>>>>>>>> One of the co-editors of STUNBis stands at the > >>>>>>>> microphone: > >>>>>>>>>>>>> > >>>>>>>>>>>>> CO-EDITOR > >>>>>>>>>>>>> We added SHA-256 protection for > >>>>>>>> passwords > >>>>>>>>>>>>> in STUNBis. > >>>>>>>>>>>>> > >>>>>>>>>>>>> SOMEONE (V.O.) > >>>>>>>>>>>>> As MD5 still need to be > >>>>>>> supported, > >>>>>>>> you need to add > >>>>>>>>>>>>> protection for bid-down > >>> attacks. > >>>>>>>>>>>>> > >>>>>>>>>>>>> CLOSE-UP on CO-EDITOR ROLLING HIS EYES > >>>>>>>>>>>>> > >>>>>>>>>>>>> CO-EDITOR > >>>>>>>>>>>>> OK, I'll work on that. > >>>>>>>>>>>>> > >>>>>>>>>>>>> Four to eight months has passed. > >>>>>>>>>>>>> > >>>>>>>>>>>>> INT. ANOTHER MEETING ROOM - DAY > >>>>>>>>>>>>> > >>>>>>>>>>>>> The same co-editor of STUNBis stands at the > >>>>>>> microphone: > >>>>>>>>>>>>> > >>>>>>>>>>>>> CO-EDITOR > >>>>>>>>>>>>> We added a nice mechanism to > >>>>>>> prevent > >>>>>>>> bid-down > >>>>>>>>>>>>> attacks on passwords. Any > >>>>>>> comments? > >>>>>>>>>>>>> > >>>>>>>>>>>>> THE ROOM > >>>>>>>>>>>>> (silence) > >>>>>>>>>>>>> > >>>>>>>>>>>>> CO-EDITOR > >>>>>>>>>>>>> Moving on... > >>>>>>>>>>>>> > >>>>>>>>>>>> > >>>>>>>>>>>> I don't see how any of this is relevant to my > >>>>>>>> technical points > >>>>>>>>> above. > >>>>>>>>>>> > >>>>>>>>>>> My point was that we, the co-editors, did not > >>>>>>> decide on > >>>>>>>> adding > >>>>>>>>> bid-down > >>>>>>>>>>> protection, someone asked us to do so and > >>>>>>> no-one in the > >>>>>>>> WG saw > >>>>>>>>> any problem > >>>>>>>>>>> with that. The reasons that person wanted that > >>>>>>> are not > >>>>>>>> known to > >>>>>>>>> us but, as > >>>>>>>>>>> you insist, here's one reason I can think of: > >>>>>>>>>>> > >>>>>>>>>>> It is a fact that, for operational reasons, a > >>>>>>> password > >>>>>>>> database > >>>>>>>>> cannot be > >>>>>>>>>>> re-encrypted at once. Also for operational > >>>>>>> reasons, > >>>>>>>> the MD5 password > >>>>>>>>>>> cannot be immediately removed from the database > >>>>>>> as soon > >>>>>>>> the user > >>>>>>>>> submitted > >>>>>>>>>>> a new one. In fact, and for quite some time, both > >>>>>>>> encrypted > >>>>>>>>> variants of > >>>>>>>>>>> the same password may have to be kept in that > >>>>>>> database, > >>>>>>>> because a > >>>>>>>>> single > >>>>>>>>>>> user may use a mix of devices, some of them > >>>>>>> that use an > >>>>>>>> RFC 5389 > >>>>>>>>> client, > >>>>>>>>>>> some that use a STUNbis client. It is up to > >>>>>>> the STUN > >>>>>>>> server owner to > >>>>>>>>>>> decide how long the migration to STUNbis will > >>>>>>> take and > >>>>>>>> when it > >>>>>>>>> will be > >>>>>>>>>>> acceptable to reject all RFC 5389 (i.e. MD5) > >>>>>>> clients (that > >>>>>>>>> migration time > >>>>>>>>>>> can be purposely reduced to 0 seconds but > >>>>>>> that's the > >>>>>>>> choice and > >>>>>>>>>>> responsibility of the owner of the server). > >>>>>>>>>>> > >>>>>>>>>>> Meanwhile we still need to be sure that if the > >>> STUN > >>>>>>>> client is > >>>>>>>>> implementing > >>>>>>>>>>> STUNbis it unconditionally gets the additional > >>>>>>>> protection of the new > >>>>>>>>>>> password encryption algorithm. That's where > >>>>>>> the biddown > >>>>>>>>> protection kicks > >>>>>>>>>>> in, by preventing an online attacker to have > >>>>>>> the server > >>>>>>>>> misidentifying a > >>>>>>>>>>> STUNbis client as an RFC 5389 client, by > >>>>>>> preventing an > >>>>>>>> online > >>>>>>>>> attacker to > >>>>>>>>>>> have the client misidentifying a STUNbis server > >>>>>>> as a > >>>>>>>> RFC 5389 > >>>>>>>>> server, and > >>>>>>>>>>> having both them use the MD5 encrypted password > >>>>>>> instead > >>>>>>>> of the > >>>>>>>>> SHA-256 > >>>>>>>>>>> encrypted password, all of that easily done by > >>>>>>>> stripping the > >>>>>>>>> unprotected > >>>>>>>>>>> 401 response of the new STUNbis > >>> PASSWORD-ALGORITHMS > >>>>>>>> attribute. > >>>>>>>>>>> > >>>>>>>>>>>> > >>>>>>>>>>>> > >>>>>>>>>>>> > >>>>>>>>>>>>>> The second topic is the hash used to compute > >>> the > >>>>>>>> MAC. However, > >>>>>>>>> I don't > >>>>>>>>>>>>> see > >>>>>>>>>>>>>> how > >>>>>>>>>>>>>> this gives you sensible biddown protection > >>>>>>> because > >>>>>>>> that hash > >>>>>>>>> is also > >>>>>>>>>>> used > >>>>>>>>>>>>>> to compute > >>>>>>>>>>>>>> MAC over the negotiation: an attacker who has > >>>>>>>> compromised a > >>>>>>>>> MAC which > >>>>>>>>>>> the > >>>>>>>>>>>>>> server > >>>>>>>>>>>>>> supports will quite likely be able to forge > >>>>>>> a MAC > >>>>>>>> over the > >>>>>>>>> transcript > >>>>>>>>>>> as > >>>>>>>>>>>>>> well. This is, > >>>>>>>>>>>>>> I suppose, potentially useful as a defense > >>>>>>> against > >>>>>>>> some other > >>>>>>>>> weakness > >>>>>>>>>>>>>> (e.g., > >>>>>>>>>>>>>> version #), but I don't really see how the > >>>>>>> current > >>>>>>>> design > >>>>>>>>> helps against > >>>>>>>>>>>>>> attacks on the > >>>>>>>>>>>>>> MAC. > >>>>>>>>>>>>> > >>>>>>>>>>>>> There is no biddown attack protection for the > >>>>>>> MAC, as > >>>>>>>> stated in > >>>>>>>>> Section > >>>>>>>>>>>>> 16.3: > >>>>>>>>>>>>> > >>>>>>>>>>>>> "The bid-down protection mechanism described > >>>>>>> in this > >>>>>>>> document > >>>>>>>>> is new, > >>>>>>>>>>>>> and thus cannot currently protect against a > >>>>>>> bid-down > >>>>>>>> attack that > >>>>>>>>>>>>> lowers the strength of the hash algorithm to > >>>>>>> HMAC-SHA1." > >>>>>>>>>>>>> > >>>>>>>>>>>>> What we put in place is a plan for *future* > >>>>>>> versions > >>>>>>>> of STUN to get > >>>>>>>>>>>>> biddown protection for the MAC. That's it, > >>>>>>> no more, > >>>>>>>> no less. > >>>>>>>>>>>>> > >>>>>>>>>>>> > >>>>>>>>>>>> Yes, but I don't believe that this will > >>>>>>> provide bid-down > >>>>>>>>> protection for > >>>>>>>>>>> the > >>>>>>>>>>>> MAC in the future for the reasons I indicate > >>>>>>> above. > >>>>>>>>>>>> > >>>>>>>>>>>> If you think this does something useful, > >>>>>>> please show me an > >>>>>>>>> example attack > >>>>>>>>>>>> and how this fixes it. Note that it's not > >>>>>>> generally > >>>>>>>> useful to > >>>>>>>>> just bid > >>>>>>>>>>> down > >>>>>>>>>>>> the MAC itself unless the MAC you bid down to > >>>>>>> is weak > >>>>>>>> enough to > >>>>>>>>> exploit > >>>>>>>>>>> in > >>>>>>>>>>>> some other way. > >>>>>>>>>>> > >>>>>>>>>>> I do not know what weaknesses will be > >>>>>>> discovered in the > >>>>>>>> future. > >>>>>>>>> I am also > >>>>>>>>>>> pretty sure that the cost of not using that > >>>>>>> mechanism > >>>>>>>> is very > >>>>>>>>> close to 0. > >>>>>>>>>>> What I am sure of is that the cost of > >>>>>>> reengineering a > >>>>>>>> new biddown > >>>>>>>>>>> protection mechanism if we ever need it will be > >>>>>>> high. > >>>>>>>> We already > >>>>>>>>> went > >>>>>>>>>>> through the pains of designing one for the > >>> password > >>>>>>>> algorithm, so > >>>>>>>>> why not > >>>>>>>>>>> extend it so it can be used in the aftermath of > >>> the > >>>>>>>> next Snowden > >>>>>>>>> facepalm > >>>>>>>>>>> moment? > >>>>>>>>>>> > >>>>>>>>>>>> Again, happy to have a call to walk though > >>>>>>> this if that > >>>>>>>>>>>> helps. > >>>>>>>>>>>> > >>>>>>>>>>>> -Ekr > >>>>>>>>>>>> > >>>>>>>>>>>> > >>>>>>>>>>>> > >>>>>>>>>>>> > >>>>>>>>>>>>>> > >>>>>>>>>>>>>> You might think that there was a MAC which > >>>>>>> was easier to > >>>>>>>>> reverse to > >>>>>>>>>>> find > >>>>>>>>>>>>>> the original > >>>>>>>>>>>>>> password, but the defense you have here > >>>>>>> doesn't help > >>>>>>>> with that > >>>>>>>>> because > >>>>>>>>>>>>> the > >>>>>>>>>>>>>> on-path attacker can do a bid-down and use the > >>>>>>>> client as a MAC > >>>>>>>>> oracle > >>>>>>>>>>> for > >>>>>>>>>>>>>> any MAC the client supports. > >>>>>>>>>>>>>> > >>>>>>>>>>>>>> So, I still don't understand what this is > >>>>>>> supposed > >>>>>>>> to do. Happy to > >>>>>>>>>>> have a > >>>>>>>>>>>>>> call if you > >>>>>>>>>>>>>> think that helps > >>>>>>>>>>>>>> > >>>>>>>>>>>>>> -Ekr > >>>>>>>>>>>>>> > >>>>>>>>>>>>>> > >>>>>>>>>>>>>> > >>>>>>>>>>>>>> > >>>>>>>>>>>>>> On Mon, Jun 18, 2018 at 3:40 AM, Gonzalo > >>>>>>> Camarillo < > >>>>>>>>>>>>>> Gonzalo.Camarillo@ericsson.com > >>>>>>> > >>>>>>>> >>>>>>> > > >>>>>>>>> >>>>>>> > >>>>>>>> >>>>>>> >>> wrote: > >>>>>>>>>>>>>> > >>>>>>>>>>>>>>> Marc, Eric, > >>>>>>>>>>>>>>> > >>>>>>>>>>>>>>> what is the status of this discussion? > >>>>>>>>>>>>>>> > >>>>>>>>>>>>>>> Thanks, > >>>>>>>>>>>>>>> > >>>>>>>>>>>>>>> Gonzalo > >>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>> On 04/05/2018 2:35 AM, Eric Rescorla wrote: > >>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>> On Mon, Apr 23, 2018 at 11:16 AM, Marc > >>>>>>>> Petit-Huguenin < > >>>>>>>>>>>>> petithug@acm.org > >>>>>>> > > >>>>>>>> > >>>>>>> >> > >>>>>>>>>>>>>>>> >>>>>>> >>>>>>> > > >>>>>>>> > >>>>>>> >>>> wrote: > >>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>> On 04/22/2018 05:22 PM, Eric Rescorla > >>>>>>> wrote: > >>>>>>>>>>>>>>>>> On Sun, Apr 22, 2018 at 2:02 PM, Marc > >>>>>>>> Petit-Huguenin < > >>>>>>>>>>>>>>> petithug@acm.org > >>>>>>> > > >>>>>>>> > >>>>>>> >> > >>>>>>>>> > >>>>>>> > > >>>>>>>> > >>>>>>> >>>> > >>>>>>>>>>>>>>>>> wrote: > >>>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>>>>> For a request or indication > >>>>>>> message, > >>>>>>>> the agent > >>>>>>>>> MUST > >>>>>>>>>>>>>>> include the > >>>>>>>>>>>>>>>>>>>> USERNAME, > >>>>>>> MESSAGE-INTEGRITY-SHA256, and > >>>>>>>>>>> MESSAGE-INTEGRITY > >>>>>>>>>>>>>>>>>> attributes > >>>>>>>>>>>>>>>>>>>> in the message unless the agent > >>>>>>>> knows from an > >>>>>>>>> external > >>>>>>>>>>>>>>> indication > >>>>>>>>>>>>>>>>>>>> which message integrity > >>>>>>> algorithm is > >>>>>>>> supported > >>>>>>>>> by both > >>>>>>>>>>>>>>> agents. In > >>>>>>>>>>>>>>>>>>>> this case either > >>>>>>> MESSAGE-INTEGRITY or > >>>>>>>>>>>>>>> MESSAGE-INTEGRITY-SHA256 MUST > >>>>>>>>>>>>>>>>>>>> be included in addition to > >>>>>>>> USERNAME. The HMAC > >>>>>>>>> for the > >>>>>>>>>>>>>>> MESSAGE- > >>>>>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>>>> This text appears to conflict with > >>>>>>> S 7.3 of > >>>>>>>>> 5245-bis, which > >>>>>>>>>>>>> says: > >>>>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>>> [text missing] > >>>>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>>> Hmm, no, RFC245bis is still > >>> referencing > >>>>>>>> RFC5389, so the > >>>>>>>>>>>>> procedure > >>>>>>>>>>>>>>> for > >>>>>>>>>>>>>>>>>> stunbis does not apply. > >>>>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>> I hear what you're saying, but > >>>>>>> publishing two > >>>>>>>>> documents at the > >>>>>>>>>>>>>>> same time > >>>>>>>>>>>>>>>>> which > >>>>>>>>>>>>>>>>> make contrary recommendations about > >>>>>>> the same > >>>>>>>> basic > >>>>>>>>> protocol is > >>>>>>>>>>>>>>> un-good. > >>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>> Sure, but wouldn't it be simpler to have > >>>>>>>> rfc5245bis > >>>>>>>>> using stunbis > >>>>>>>>>>>>>>>> and have them updating their text, > >>>>>>> more than > >>>>>>>> adding some > >>>>>>>>> tortuous > >>>>>>>>>>>>>>>> text in stunbis? > >>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>>>> The STUN usage must specify > >>> which > >>>>>>>> transport > >>>>>>>>> protocol is > >>>>>>>>>>>>>>> used, and > >>>>>>>>>>>>>>>>>> how > >>>>>>>>>>>>>>>>>>>> the agent determines the IP > >>>>>>> address > >>>>>>>> and port > >>>>>>>>> of the > >>>>>>>>>>>>>>> recipient. > >>>>>>>>>>>>>>>>>>>> Section 8 describes a DNS-based > >>>>>>>> method of > >>>>>>>>> determining > >>>>>>>>>>> the > >>>>>>>>>>>>>>> IP > >>>>>>>>>>>>>>>>>> address > >>>>>>>>>>>>>>>>>>>> and port of a server that a > >>>>>>> usage > >>>>>>>> may elect to > >>>>>>>>> use. > >>>>>>>>>>> STUN > >>>>>>>>>>>>>>> may be > >>>>>>>>>>>>>>>>>> used > >>>>>>>>>>>>>>>>>>>> with anycast addresses, but > >>> only > >>>>>>>> with UDP and > >>>>>>>>> in usages > >>>>>>>>>>>>>>> where > >>>>>>>>>>>>>>>>>>>> authentication is not used. > >>>>>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>>>> Why this restriction? You should > >>>>>>> be able > >>>>>>>> to use > >>>>>>>>> anycast with > >>>>>>>>>>>>>>> long-term > >>>>>>>>>>>>>>>>>>> AUTH for (say) TURN. > >>>>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>>> > >>>>>>>> https://www.ietf.org/mail-archive/web/behave/current/ > >>>>>>>>>>>>>>> msg03582.html > >>>>>>>>>>>>>>>> > >>>>>>>> >>>>>>>>>>>>> msg03582.html> > >>>>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>>> I think that the decision of > >>>>>>> permitting Anycast > >>>>>>>>> should be left > >>>>>>>>>>>>> to > >>>>>>>>>>>>>>> each > >>>>>>>>>>>>>>>>>> STUN Usage. Basic STUN Usage does > >>>>>>> not use > >>>>>>>>> authentication and > >>>>>>>>>>>>> use > >>>>>>>>>>>>>>> only a > >>>>>>>>>>>>>>>>>> one round trip for the Binding > >>>>>>> transaction, so > >>>>>>>>> Unicast can be > >>>>>>>>>>>>>>> used. > >>>>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>>> OTOH, TURN and ICE should probably say > >>>>>>>> something > >>>>>>>>> about that, > >>>>>>>>>>> so > >>>>>>>>>>>>> I > >>>>>>>>>>>>>>> added a > >>>>>>>>>>>>>>>>>> new bullet point in Section 13: > >>>>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>>> o If Anycast addresses can be > >>>>>>> used for > >>>>>>>> the server > >>>>>>>>> in case > >>>>>>>>>>>>> TCP > >>>>>>>>>>>>>>> or > >>>>>>>>>>>>>>>>>> TLS-over-TCP, or > >>>>>>> authentication are used. > >>>>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>> Are you leaving this text in? That > >>> seems > >>>>>>>> very confusing. > >>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>> In isolation yes, but I think it makes > >>>>>>> sense > >>>>>>>> which the text > >>>>>>>>>>> before > >>>>>>>>>>>>>>>> the bullet points: > >>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>> A STUN usage defines how STUN is > >>>>>>> actually > >>>>>>>> utilized -- > >>>>>>>>> when to > >>>>>>>>>>>>> send > >>>>>>>>>>>>>>>> requests, what to do with the > >>>>>>> responses, > >>>>>>>> and which > >>>>>>>>> optional > >>>>>>>>>>>>>>>> procedures defined here (or in an > >>>>>>> extension > >>>>>>>> to STUN) > >>>>>>>>> are to be > >>>>>>>>>>>>>>> used. > >>>>>>>>>>>>>>>> A usage also defines: > >>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>> [...] > >>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>> o If Anycast addresses can be used > >>>>>>> for the > >>>>>>>> server in > >>>>>>>>> case TCP > >>>>>>>>>>>>> or > >>>>>>>>>>>>>>>> TLS-over-TCP, or authentication > >>>>>>> are used. > >>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>> What is the need for the restriction at all > --000000000000fccbbb05848c0b73 Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable
Gonzalo,

This text still seems to = me to need some work. Here is a revised version.

SHA-256 was chosen = as the new default for password=C2=A0=C2=A0=C2=A0
hashing for its compa= bility with RFC 7616 but because SHA-256 (like=C2=A0=C2=A0=C2=A0
MD5) i= s a comparatively fast algorithm, it does little to deter
brute force at= tacks. Specifically, this means that if the
user has a weak password:
* An attacker who captures the server's password file can often=C2=A0 determine the user's password and thus impersonate the user
= =C2=A0 to other servers where they have used that password. Note that
= =C2=A0 such an attacker can impersonate the user to the server itself
= =C2=A0 without any brute force attack.

* An attacker who captures a = single exchange can brute force
=C2=A0 the user's password and thus = potentially impersonate the
=C2=A0 user to the server and other servers = where they have used
=C2=A0 the same pasword.
=C2=A0
A stronger (= which is to say slower) algorithm, like Argon2
[I-D.irtf-cfrg-argon2], w= ould help both of these cases, but in the
case of the first attack, only= after until the database entry for this
user is updated to exclusively = use that stronger mechanism.

The bid-down defenses in this protocol = prevent an attacker from
forcing the client and server to complete a han= dshake using weaker
algorithms than they jointly support, but only if th= e weakest joint
algorithm is strong enough that it cannot be brute-force= d. However,
this does not defend against many attacks on those algorithm= s;
specifically, an on-path attacker might perform a bid-down attack on = a
client which supported both Argon2 and SHA-256 for password hashingand use that to collect a MESSAGE-INTEGRITY-SHA256 value which it uses
= for an offline brute-force attack. This would be detected when the
serve= r receives the second request, but that does not prevent the
attacker fr= om obtaining the MESSAGE-INTEGRITY-SHA256 value.

Similarly, an attac= k against the USERHASH mechanism will not succeed
in establishing a sess= ion as the server will detect that the feature
was discarded on-path, bu= t the client would still have been convinced
to send its username in cle= ar in the USERNAME attribute, thus
disclosing it to the attacker.
-Ekr


On Mon, Mar 18, 2019 at 6:37 PM Gonzalo Salgueiro (gsalg= uei) <gsalguei@cisco.com> w= rote:
Thanks, Sp= encer.=C2=A0 In the interest of expeditiousness I=E2=80=99ve emailed Eric t= o review the newly published -20 to ensure it addresses his DISCUSS points.= Hoping to get this done before Eric steps down as AD.

Cheers,

Gonzalo



> On Mar 18, 2019, at 9:27 PM, Spencer Dawkins at IETF <spencerdawkins.ietf@g= mail.com> wrote:
>
> Dear All,
>
>> On Fri, Mar 8, 2019 at 8:10 PM Eric Rescorla <ekr@rtfm.com> wrote:
>>
>> Thanks for the call yesterday.
>>
>
> Thanks to all for moving this specification forward.
>
> If the current conversation turns out to converge on this topic before= next
> Wednesday, I'm happy to approve a revised draft after Eric clears = his
> Discuss.
>
> If I can help in any way, please let me know.
>
> Spencer
>
>
>>
>> First, here is what I recommend for the question of SHA-256 for pa= ssword
>> hashing:
>>
>>=C2=A0 Note: the use of SHA-256 for password hashing does not meet = modern
>>=C2=A0 standards, which are aimed at slowing down exhaustive passwo= rd search
>>=C2=A0 by providing a relatively slow minimum time to compute the >>=C2=A0 hash. Although better algorithms such as Argon2
>>=C2=A0 [https://datatracker.ietf.org= /doc/draft-irtf-cfrg-argon2/] are
>>=C2=A0 available, SHA-256 was chosen for consistency with RFC 7616.=
>>
>>
>> Now, WRT to the anti-downgrade situation. Here's a stylized ve= rsion
>> of the protocol:
>>
>> Client=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2= =A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 = =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 Server
>>
>> Hello ->
>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2= =A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 = =C2=A0 <- Nonce, Algorithms
>> HMAC-H1(H2(Password), Nonce, Algorithms, Msg) ->
>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2= =A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0<- HMAC-H1(H2(Passwo= rd), ...)
>>
>> Where H1 and H2 are the HMAC hash functions and the password hashi= ng
>> function respectively.
>>
>> Now, if we assume that the attacker does not know Password and tha= t
>> both H1 and H2 are secure, then it is not possible for the attacke= r to
>> complete the transaction or modify any of the messages. Further, i= f
>> the weakest joint algorithm that both sides support is still stron= g,
>> then an attacker cannot influence the algorithm negotiation [0]. T= his
>> property is provided by covering the algorithms under the MAC.
>>
>> However, my point is that this is not a very useful property.
>>
>> First, consider the case in which the implementations jointly supp= ort
>> one strong algorithm and one weak algorithm. E.g., for H1 they sup= port
>> SHA-256 and the function Z(x) which always emits 0s. This allows >> an attacker to force the client and server into using Z, as follow= s.
>>
>>
>> Client=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2= =A0 =C2=A0 =C2=A0 Attacker=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 = =C2=A0 =C2=A0 =C2=A0Server
>>
>> Hello ->
>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2= =A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 Hello ->
>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2= =A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 <- No= nce, Alg=3DSHA256, Z
>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 <- Nonce= , Alg=3DZ
>> Z(H2(Password), Nonce, Alg=3DZ)) ->
>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2= =A0 =C2=A0 =C2=A0 Z(H2(Password), Nonce, Alg=3DSHA256, Z))
>>
>> The issue here is that the only thing that the MAC is doing is
>> authenticating the transaction, and if you can't trust it to d= o that,
>> you can't trust it to authenticate the bid-down defense either= .
>>
>>
>> During our discussion, there was a suggestion that it was useful t= o
>> have biddown defense to defend against weaknesses in H2. I don'= ;t think
>> that that's true either. First, remember that the purpose of H= 2 is to
>> prevent an attacker who recovers the password database from learni= ng
>> the user's true password. This is not about defending the serv= er from
>> attack (because knowing A1 is enough to attack the server) but abo= ut
>> preventing the attacker from learning a password which might have = been
>> reused on another site.
>>
>> Now, it's also possible to brute-force the user's password= just from
>> the protocol transcript: if you capture the client's first mes= sage
>> with MESSAGE-INTEGRITY or MESSAGE-INTEGRITY-SHA256, you can just k= eep
>> trying passwords until you get the right MAC. Note that this is a<= br> >> passive attack. This is comparatively fast because SHA256 and MD5 = are
>> fast.
>>
>> A much stronger H2 (e.g., Argon) would help against this, but the<= br> >> problem now becomes that the client supports H2 =3D=3D MD5 (or SHA= -256)
>> and so even if the server supports Argon, the attacker can mount a=
>> bid-down defense in which it modifies the server's first messa= ge to
>> just advertise MD5 and thus get the client to provide a suitable >> message. The bid-down defense would prevent the authentication
>> transaction from completing, but that's not necessary for this=
>> attack because the attacker can just brute-force the password from=
>> the message it has. To make this work, you would need something >> like a PAKE, which this is not.
>>
>> Finally, you might think that the server has two databases, one >> which uses Argon and one which uses MD5 and it wants to gradually<= br> >> phase out the MD5 one, which it will do when no client authenticat= es
>> with MD5 for a very long time. An anti-biddown defense would sort<= br> >> of work here, but the fact that the attacker would have to be
>> active essentially indefinitely to keep the server confused about<= br> >> the state of clients -- and that the attacker can likely just
>> get a valid account and then insist on using MD5 -- makes this a >> not very useful defense.
>>
>> I think this makes a pretty persuasive case that the bid-down defe= nse
>> isn't useful except in the formal "attacker cannot influe= nce
>> negotiation" sense. With that said, in the spirit of getting = this done, I
>> guess
>> I'm willing to let this go if the security considerations make= clear
>> that it is only a very limited mechanism.
>>
>> -Ekr
>>
>>
>> [0] This is principally about H1. As long as the H2 approximately<= br> >> evenly distributes the password over its range, then cryptographic=
>> strength is not important for this question. For instance, you
>> could replace H2 with an identity function and still have a
>> secure protocol.
>>
>>
>>
>>
>>
>>
>> On Wed, Feb 20, 2019 at 4:03 AM Gonzalo Camarillo <
>> gonzalo.camarillo@ericsson.com> wrote:
>>
>>> Thanks, Gonzalo! Please, let us know the agreed way forward on= ce you
>>> have the call.
>>>
>>> Cheers,
>>>
>>> Gonzalo
>>>
>>>> On 19-Feb-19 20:05, Gonzalo Salgueiro (gsalguei) wrote: >>>> Hi Gonzalo -
>>>>
>>>> We have scheduled a conference call with Ekr, Simon, Marc = and myself on
>>> March 7th to discuss the last two remaining issues.=C2=A0 Will= update with
>>> resolutions once this has occurred.
>>>>
>>>> Cheers,
>>>>
>>>> Gonzalo
>>>>
>>>>
>>>>
>>>>> On Feb 18, 2019, at 8:18 AM, Gonzalo Camarillo < >>> Gonzalo.Camarillo@ericsson.com> wrote:
>>>>>
>>>>> Hi Gonzalo S,
>>>>>
>>>>> what is the status of this one?
>>>>>
>>>>> Thanks,
>>>>>
>>>>> Gonzalo
>>>>>
>>>>>> On 18-Jan-19 20:16, Gonzalo Salgueiro (gsalguei) w= rote:
>>>>>> Totally agree, Ekr.=C2=A0 Marc and I are meeting t= o come up with a proposal
>>>>>> but I do agree we need to have a call to get this = put to bed once and
>>>>>> for all.=C2=A0 We=E2=80=99ll offer some potential = dates in the next 2-3 weeks.
>>>>>>
>>>>>> Cheers,
>>>>>>
>>>>>> Gonzalo
>>>>>>
>>>>>>
>>>>>>> On Dec 26, 2018, at 8:05 PM, Eric Rescorla <= ;ekr@rtfm.com
>>>>>>> <mailto:ekr@rtfm.com>> wrote:
>>>>>>>
>>>>>>> We really need to bring this to a close before= both Spencer and I
>>> step
>>>>>>> down, I should think.
>>>>>>>
>>>>>>> -Ekr
>>>>>>>
>>>>>>>
>>>>>>> On Thu, Nov 22, 2018 at 4:30 AM Gonzalo Camari= llo
>>>>>>> <gonzalo.camarillo@ericsson.com
>>>>>>> <mailto:gonzalo.camarillo@ericsson.com>>= wrote:
>>>>>>>
>>>>>>>=C2=A0 =C2=A0Eric, Spencer, thanks for the stat= us update!
>>>>>>>
>>>>>>>=C2=A0 =C2=A0Authors, could you please let us k= now when you plan to get to
>>> this?
>>>>>>>
>>>>>>>=C2=A0 =C2=A0Gonzalo
>>>>>>>
>>>>>>>>=C2=A0 =C2=A0On 19-Nov-18 23:04, Spencer Da= wkins at IETF wrote:
>>>>>>>> Hi, Gonzalo,
>>>>>>>> On Mon, Nov 19, 2018 at 9:06 AM Eric Resco= rla <ekr@rtfm.com<= br> >>>>>>>=C2=A0 =C2=A0<mailto:ekr@rtfm.com>
>>>>>>>> <mailto:ekr@rtfm.com <mailto:ekr@rtfm.com>>> wrote:
>>>>>>>>
>>>>>>>>=C2=A0 =C2=A0 =C2=A0Not really. I have not = received any response to my mail of
>>>>>>>=C2=A0 =C2=A0Oct 23.
>>>>>>>>=C2=A0 =C2=A0 =C2=A0As before, I'm happ= y to have a call, but I believe we're
>>>>>>>=C2=A0 =C2=A0reaching
>>>>>>>>=C2=A0 =C2=A0 =C2=A0the limits of what can = be accomplished by email.
>>>>>>>>
>>>>>>>>
>>>>>>>> Eric would know best (it being his Discuss= ), but this is also my
>>>>>>>> understanding.
>>>>>>>>
>>>>>>>> I can add this to the agenda of the IESG i= nformal telechat on
>>>>>>>=C2=A0 =C2=A0November
>>>>>>>> 29, if there hasn't been a call before= then, but I don't have a
>>>>>>>=C2=A0 =C2=A0reason
>>>>>>>> to wait until then, if it's possible t= o talk sooner.
>>>>>>>>
>>>>>>>> Thanks,
>>>>>>>>
>>>>>>>> Spencer
>>>>>>>>
>>>>>>>>
>>>>>>>>
>>>>>>>>=C2=A0 =C2=A0 =C2=A0-Ekr
>>>>>>>>
>>>>>>>>
>>>>>>>>=C2=A0 =C2=A0 =C2=A0On Mon, Nov 19, 2018 at= 6:35 AM Gonzalo Camarillo
>>>>>>>>=C2=A0 =C2=A0 =C2=A0<gonzalo.camarillo@ericsson= .com
>>>>>>>=C2=A0 =C2=A0<mailto:gonzalo.camarillo@ericsson.com= >
>>>>>>>>=C2=A0 =C2=A0 =C2=A0<mailto:gonzalo.camarillo@e= ricsson.com
>>>>>>>=C2=A0 =C2=A0<mailto:gonzalo.camarillo@ericsson.com= >>> wrote:
>>>>>>>>
>>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0Hi Spence= r,
>>>>>>>>
>>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0what is t= he status of this? Are the authors and the
>>> document
>>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0shepherd<= br> >>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0working w= ith the relevant ADs on the discusses?
>>>>>>>>
>>>>>>>>
>>>>>>>
>>> https://datatracker.= ietf.org/doc/draft-ietf-tram-stun-pmtud/ballot/
>>>>>>>>
>>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0Cheers, >>>>>>>>
>>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0Gonzalo >>>>>>>>
>>>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0On 24= -Oct-18 16:40, Spencer Dawkins at IETF wrote:
>>>>>>>>> Hi, Marc,
>>>>>>>>>
>>>>>>>>> On Wed, Oct 24, 2018 at 3:44 AM Marc P= etit-Huguenin
>>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0<petithug@acm.org <m= ailto:petithug@acm.or= g>
>>>>>>>=C2=A0 =C2=A0<mailto:petithug@acm.org <mailto:petithug@acm.org>>
>>>>>>>>> <mailto:petithug@acm.org <mailto:petithug@acm.org>
>>>>>>>=C2=A0 =C2=A0<mailto:petithug@acm.org <mailto:petithug@acm.org>>>&= gt; wrote:
>>>>>>>>>
>>>>>>>>>=C2=A0 =C2=A0 Hi Spencer,
>>>>>>>>>
>>>>>>>>>=C2=A0 =C2=A0 I sent my answers to Eric= Rescorla questions on
>>>>>>>=C2=A0 =C2=A02018-10-07
>>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0following=
>>>>>>>>>=C2=A0 =C2=A0 an in-person meeting with= my co-author, but never
>>>>>>>=C2=A0 =C2=A0got a
>>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0response<= br> >>>>>>>>>=C2=A0 =C2=A0 back.=C2=A0 Because there= was no change proposed by
>>>>>>>=C2=A0 =C2=A0Eric I went
>>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0ahead and=
>>>>>>>>>=C2=A0 =C2=A0 published -19 a couple of= weeks after that, with
>>>>>>>=C2=A0 =C2=A0the text
>>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0agreed in=
>>>>>>>>>=C2=A0 =C2=A0 response to Adam's an= d Benjamin's comments.
>>>>>>>>>
>>>>>>>>>
>>>>>>>>
>>>>>>>
>>> https://www.ietf.org/ma= il-archive/web/tram/current/msg02635.html
>>>>>>>>>
>>>>>>>>>
>>>>>>>>> Ah - I wonder if that was what had hap= pened.
>>>>>>>>>
>>>>>>>>> It sounds like you did the right thing= , and that Eric
>>>>>>>=C2=A0 =C2=A0has now
>>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0responded= ,
>>>>>>>>> which is also the right thing to do. >>>>>>>>>
>>>>>>>>> Thanks for helping me understand.
>>>>>>>>>
>>>>>>>>> Spencer
>>>>>>>>>
>>>>>>>>>
>>>>>>>>>>=C2=A0 =C2=A0 On 10/23/18 7:28 PM, = Spencer Dawkins at IETF wrote:
>>>>>>>>>> Hi, Marc,
>>>>>>>>>>
>>>>>>>>>> I see that a -19 has been submitte= d, but didn't
>>>>>>>=C2=A0 =C2=A0see a
>>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0reply fro= m
>>>>>>>>>=C2=A0 =C2=A0 Eric in
>>>>>>>>>> this thread. Do you think that you= 've converged?
>>>>>>>>>>
>>>>>>>>>> (I saw an offer of a conference ca= ll, so thought an
>>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0out-of-ba= nd
>>>>>>>>>> conversation might have happened)<= br> >>>>>>>>>>
>>>>>>>>>> Thanks,
>>>>>>>>>>
>>>>>>>>>> Spencer
>>>>>>>>>>
>>>>>>>>>> On Sun, Oct 7, 2018 at 9:35 AM Mar= c Petit-Huguenin
>>>>>>>>>=C2=A0 =C2=A0 <petithug@acm.org <mailto:petithug@acm.org>
>>>>>>>=C2=A0 =C2=A0<mailto:petithug@acm.org <mailto:petithug@acm.org>>
>>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0<mailt= o:petithug@acm.org <mailto:petithug= @acm.org>
>>>>>>>=C2=A0 =C2=A0<mailto:petithug@acm.org <mailto:petithug@acm.org>>>&= gt; wrote:
>>>>>>>>>>
>>>>>>>>>>> Hi Eric,
>>>>>>>>>>>
>>>>>>>>>>> Please see inline.
>>>>>>>>>>>
>>>>>>>>>>>> On 09/10/2018 03:25 AM, Er= ic Rescorla wrote:
>>>>>>>>>>>> On Sat, Sep 8, 2018 at 2:3= 1 PM, Marc
>>>>>>>=C2=A0 =C2=A0Petit-Huguenin
>>>>>>>>>=C2=A0 =C2=A0 <petithug@acm.org <mailto:petithug@acm.org>
>>>>>>>=C2=A0 =C2=A0<mailto:petithug@acm.org <mailto:petithug@acm.org>>
>>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0<mailt= o:petithug@acm.org <mailto:petithug= @acm.org>
>>>>>>>=C2=A0 =C2=A0<mailto:petithug@acm.org <mailto:petithug@acm.org>>>&= gt;
>>>>>>>>>>>> wrote:
>>>>>>>>>>>>
>>>>>>>>>>>>> Hi Eric,
>>>>>>>>>>>>>
>>>>>>>>>>>>> Apologies for the dela= y in getting back to that.
>>>>>>>>>>>>>
>>>>>>>>>>>>> I think that there is = some misunderstanding
>>>>>>>=C2=A0 =C2=A0in what
>>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0STUNbis i= s
>>>>>>>>>=C2=A0 =C2=A0 trying to
>>>>>>>>>>>>> do, so please see my c= omments inline.
>>>>>>>>>>>>>
>>>>>>>>>>>>>> On 06/18/2018 10:4= 3 AM, Eric Rescorla wrote:
>>>>>>>>>>>>>> Hi folks,
>>>>>>>>>>>>>>
>>>>>>>>>>>>>> I've reviewed = the new version, but I don't
>>> think
>>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0that the = biddown
>>>>>>>>>>>>>> discussion makes m= uch sense.
>>>>>>>>>>>>>>
>>>>>>>>>>>>>> To recap, there ar= e two hashes here:
>>>>>>>>>>>>>>
>>>>>>>>>>>>>> - The hash which y= ou use to store the
>>>>>>>=C2=A0 =C2=A0password with
>>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0(currentl= y
>>>>>>>>>=C2=A0 =C2=A0 mostly
>>>>>>>>>>>>> MD5)
>>>>>>>>>>>>>> - The hash you use= to compute the MAC
>>>>>>>=C2=A0 =C2=A0(currently SHA-1).
>>>>>>>>>>>>>>
>>>>>>>>>>>>>> First, let's s= tipulate that MD5 isn't a
>>>>>>>=C2=A0 =C2=A0great choice
>>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0here,
>>>>>>>>>=C2=A0 =C2=A0 though SHA-1
>>>>>>>>>>>>>> isn't a great = choice
>>>>>>>>>>>>>> either for pwd has= hing You want Argon or the
>>>>>>>=C2=A0 =C2=A0like.
>>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0With that= said,
>>>>>>>>>>>>> there's
>>>>>>>>>>>>>> no sensible
>>>>>>>>>>>>>> biddown attack on = that hash because it's a
>>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0per-serve= r feature,
>>>>>>>>>=C2=A0 =C2=A0 not a
>>>>>>>>>>>>>> per-transaction >>>>>>>>>>>>>> feature. So, as lo= ng as the server has
>>>>>>>=C2=A0 =C2=A0MD5-hashed
>>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0passwords= , the
>>>>>>>>>>>>> situation
>>>>>>>>>>>>>> is bad.
>>>>>>>>>>>>>
>>>>>>>>>>>>> In no place in STUNbis= we are proposing to
>>>>>>>=C2=A0 =C2=A0use SHA-1
>>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0for passw= ord
>>>>>>>>>>>>> encryption, so I am no= t sure where that come
>>>>>>>=C2=A0 =C2=A0from.
>>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0What we >>>>>>>>>=C2=A0 =C2=A0 propose is:
>>>>>>>>>>>>>
>>>>>>>>>>>>
>>>>>>>>>>>> You're right, it's= SHA-256, but my criticisms
>>>>>>>=C2=A0 =C2=A0apply
>>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0equally t= here.
>>>>>>>>>>>
>>>>>>>>>>> SHA-256 was what the WG adopte= d.=C2=A0 Our attempts
>>>>>>>=C2=A0 =C2=A0to add
>>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0other pas= swords
>>>>>>>>>>> encryption mechanisms were den= ied.=C2=A0 It is true
>>> that
>>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0Argon2 wa= s
>>>>>>>>>=C2=A0 =C2=A0 not in that
>>>>>>>>>>> list (in our defense Argon2 wa= s not known
>>>>>>>=C2=A0 =C2=A0before July
>>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A02015), bu= t
>>>>>>>>>=C2=A0 =C2=A0 I do not
>>>>>>>>>>> see why the WG would have acce= pted that one
>>>>>>>=C2=A0 =C2=A0over the
>>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0others. >>>>>>>>>=C2=A0 =C2=A0 Anyway it is
>>>>>>>>>>> too late to fix this, as it is= my understanding
>>>>>>>=C2=A0 =C2=A0that
>>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0the WG do= es
>>>>>>>>>=C2=A0 =C2=A0 not have
>>>>>>>>>>> enough energy to reach consens= us on a new password
>>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0algorithm= .
>>>>>>>>>=C2=A0 =C2=A0 Someone can
>>>>>>>>>>> just write a draft adding Argo= n2 as password
>>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0encryptio= n, as we
>>>>>>>>>=C2=A0 =C2=A0 will have a
>>>>>>>>>>> IANA registry for that.
>>>>>>>>>>>
>>>>>>>>>>>>
>>>>>>>>>>>>
>>>>>>>>>>>>> - Establish a registry= for new password
>>>>>>>=C2=A0 =C2=A0algorithms
>>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0(section<= br> >>>>>>>>>=C2=A0 =C2=A0 18.5), so
>>>>>>>>>>>>> algorithms like Argon2= could be added later
>>>>>>>=C2=A0 =C2=A0(but note
>>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0that our = own
>>>>>>>>>>>>> proposals to add more = password algorithms were
>>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0rejected = by the
>>>>>>>>>=C2=A0 =C2=A0 working
>>>>>>>>>>>>> group).
>>>>>>>>>>>>> - Add a new password a= lgorithm to that registry,
>>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0namely SH= A-256.
>>>>>>>>>>>>> - Register MD5 as an i= nitial password
>>>>>>>=C2=A0 =C2=A0algorithm for
>>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0backward<= br> >>>>>>>>>>> compatibility
>>>>>>>>>>>>> purpose.
>>>>>>>>>>>>>
>>>>>>>>>>>>> As for the biddown pro= tection itself, it is my
>>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0recollect= ion that it
>>>>>>>>>>>>> happened more or less = like that:
>>>>>>>>>>>>>
>>>>>>>>>>>>>
>>>>>>>>>>>>> INT. MEETING ROOM - DA= Y
>>>>>>>>>>>>>
>>>>>>>>>>>>> One of the co-editors = of STUNBis stands at the
>>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0microphon= e:
>>>>>>>>>>>>>
>>>>>>>>>>>>>=C2=A0 =C2=A0 =C2=A0 = =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2= =A0CO-EDITOR
>>>>>>>>>>>>>=C2=A0 =C2=A0 =C2=A0 = =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0We added SHA-256 protection for >>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0passwords=
>>>>>>>>>>>>>=C2=A0 =C2=A0 =C2=A0 = =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0in STUNBis.
>>>>>>>>>>>>>
>>>>>>>>>>>>>=C2=A0 =C2=A0 =C2=A0 = =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2= =A0SOMEONE (V.O.)
>>>>>>>>>>>>>=C2=A0 =C2=A0 =C2=A0 = =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0As MD5 still need to be
>>>>>>>=C2=A0 =C2=A0supported,
>>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0you need = to add
>>>>>>>>>>>>>=C2=A0 =C2=A0 =C2=A0 = =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0protection for bid-down
>>> attacks.
>>>>>>>>>>>>>
>>>>>>>>>>>>> CLOSE-UP on CO-EDITOR = ROLLING HIS EYES
>>>>>>>>>>>>>
>>>>>>>>>>>>>=C2=A0 =C2=A0 =C2=A0 = =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2= =A0CO-EDITOR
>>>>>>>>>>>>>=C2=A0 =C2=A0 =C2=A0 = =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0OK, I'll work on that.
>>>>>>>>>>>>>
>>>>>>>>>>>>> Four to eight months h= as passed.
>>>>>>>>>>>>>
>>>>>>>>>>>>> INT. ANOTHER MEETING R= OOM - DAY
>>>>>>>>>>>>>
>>>>>>>>>>>>> The same co-editor of = STUNBis stands at the
>>>>>>>=C2=A0 =C2=A0microphone:
>>>>>>>>>>>>>
>>>>>>>>>>>>>=C2=A0 =C2=A0 =C2=A0 = =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2= =A0CO-EDITOR
>>>>>>>>>>>>>=C2=A0 =C2=A0 =C2=A0 = =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0We added a nice mechanism to
>>>>>>>=C2=A0 =C2=A0prevent
>>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0bid-down<= br> >>>>>>>>>>>>>=C2=A0 =C2=A0 =C2=A0 = =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0attacks on passwords.=C2=A0 Any >>>>>>>=C2=A0 =C2=A0comments?
>>>>>>>>>>>>>
>>>>>>>>>>>>>=C2=A0 =C2=A0 =C2=A0 = =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2= =A0THE ROOM
>>>>>>>>>>>>>=C2=A0 =C2=A0 =C2=A0 = =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0(silence)
>>>>>>>>>>>>>
>>>>>>>>>>>>>=C2=A0 =C2=A0 =C2=A0 = =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2= =A0CO-EDITOR
>>>>>>>>>>>>>=C2=A0 =C2=A0 =C2=A0 = =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0Moving on...
>>>>>>>>>>>>>
>>>>>>>>>>>>
>>>>>>>>>>>> I don't see how any of= this is relevant to my
>>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0technical= points
>>>>>>>>>=C2=A0 =C2=A0 above.
>>>>>>>>>>>
>>>>>>>>>>> My point was that we, the co-e= ditors, did not
>>>>>>>=C2=A0 =C2=A0decide on
>>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0adding >>>>>>>>>=C2=A0 =C2=A0 bid-down
>>>>>>>>>>> protection, someone asked us t= o do so and
>>>>>>>=C2=A0 =C2=A0no-one in the
>>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0WG saw >>>>>>>>>=C2=A0 =C2=A0 any problem
>>>>>>>>>>> with that.=C2=A0 The reasons t= hat person wanted that
>>>>>>>=C2=A0 =C2=A0are not
>>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0known to<= br> >>>>>>>>>=C2=A0 =C2=A0 us but, as
>>>>>>>>>>> you insist, here's one rea= son I can think of:
>>>>>>>>>>>
>>>>>>>>>>> It is a fact that, for operati= onal reasons, a
>>>>>>>=C2=A0 =C2=A0password
>>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0database<= br> >>>>>>>>>=C2=A0 =C2=A0 cannot be
>>>>>>>>>>> re-encrypted at once.=C2=A0 Al= so for operational
>>>>>>>=C2=A0 =C2=A0reasons,
>>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0the MD5 p= assword
>>>>>>>>>>> cannot be immediately removed = from the database
>>>>>>>=C2=A0 =C2=A0as soon
>>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0the user<= br> >>>>>>>>>=C2=A0 =C2=A0 submitted
>>>>>>>>>>> a new one.=C2=A0 In fact, and = for quite some time, both
>>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0encrypted=
>>>>>>>>>=C2=A0 =C2=A0 variants of
>>>>>>>>>>> the same password may have to = be kept in that
>>>>>>>=C2=A0 =C2=A0database,
>>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0because a=
>>>>>>>>>=C2=A0 =C2=A0 single
>>>>>>>>>>> user may use a mix of devices,= some of them
>>>>>>>=C2=A0 =C2=A0that use an
>>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0RFC 5389<= br> >>>>>>>>>=C2=A0 =C2=A0 client,
>>>>>>>>>>> some that use a STUNbis client= .=C2=A0 It is up to
>>>>>>>=C2=A0 =C2=A0the STUN
>>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0server ow= ner to
>>>>>>>>>>> decide how long the migration = to STUNbis will
>>>>>>>=C2=A0 =C2=A0take and
>>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0when it >>>>>>>>>=C2=A0 =C2=A0 will be
>>>>>>>>>>> acceptable to reject all RFC 5= 389 (i.e. MD5)
>>>>>>>=C2=A0 =C2=A0clients (that
>>>>>>>>>=C2=A0 =C2=A0 migration time
>>>>>>>>>>> can be purposely reduced to 0 = seconds but
>>>>>>>=C2=A0 =C2=A0that's the
>>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0choice an= d
>>>>>>>>>>> responsibility of the owner of= the server).
>>>>>>>>>>>
>>>>>>>>>>> Meanwhile we still need to be = sure that if the
>>> STUN
>>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0client is=
>>>>>>>>>=C2=A0 =C2=A0 implementing
>>>>>>>>>>> STUNbis it unconditionally get= s the additional
>>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0protectio= n of the new
>>>>>>>>>>> password encryption algorithm.= =C2=A0 That's where
>>>>>>>=C2=A0 =C2=A0the biddown
>>>>>>>>>=C2=A0 =C2=A0 protection kicks
>>>>>>>>>>> in, by preventing an online at= tacker to have
>>>>>>>=C2=A0 =C2=A0the server
>>>>>>>>>=C2=A0 =C2=A0 misidentifying a
>>>>>>>>>>> STUNbis client as an RFC 5389 = client, by
>>>>>>>=C2=A0 =C2=A0preventing an
>>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0online >>>>>>>>>=C2=A0 =C2=A0 attacker to
>>>>>>>>>>> have the client misidentifying= a STUNbis server
>>>>>>>=C2=A0 =C2=A0as a
>>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0RFC 5389<= br> >>>>>>>>>=C2=A0 =C2=A0 server, and
>>>>>>>>>>> having both them use the MD5 e= ncrypted password
>>>>>>>=C2=A0 =C2=A0instead
>>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0of the >>>>>>>>>=C2=A0 =C2=A0 SHA-256
>>>>>>>>>>> encrypted password, all of tha= t easily done by
>>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0stripping= the
>>>>>>>>>=C2=A0 =C2=A0 unprotected
>>>>>>>>>>> 401 response of the new STUNbi= s
>>> PASSWORD-ALGORITHMS
>>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0attribute= .
>>>>>>>>>>>
>>>>>>>>>>>>
>>>>>>>>>>>>
>>>>>>>>>>>>
>>>>>>>>>>>>>> The second topic i= s the hash used to compute
>>> the
>>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0MAC. Howe= ver,
>>>>>>>>>=C2=A0 =C2=A0 I don't
>>>>>>>>>>>>> see
>>>>>>>>>>>>>> how
>>>>>>>>>>>>>> this gives you sen= sible biddown protection
>>>>>>>=C2=A0 =C2=A0because
>>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0that hash=
>>>>>>>>>=C2=A0 =C2=A0 is also
>>>>>>>>>>> used
>>>>>>>>>>>>>> to compute
>>>>>>>>>>>>>> MAC over the negot= iation: an attacker who has
>>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0compromis= ed a
>>>>>>>>>=C2=A0 =C2=A0 MAC which
>>>>>>>>>>> the
>>>>>>>>>>>>>> server
>>>>>>>>>>>>>> supports will quit= e likely be able to forge
>>>>>>>=C2=A0 =C2=A0a MAC
>>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0over the<= br> >>>>>>>>>=C2=A0 =C2=A0 transcript
>>>>>>>>>>> as
>>>>>>>>>>>>>> well. This is,
>>>>>>>>>>>>>> I suppose, potenti= ally useful as a defense
>>>>>>>=C2=A0 =C2=A0against
>>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0some othe= r
>>>>>>>>>=C2=A0 =C2=A0 weakness
>>>>>>>>>>>>>> (e.g.,
>>>>>>>>>>>>>> version #), but I = don't really see how the
>>>>>>>=C2=A0 =C2=A0current
>>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0design >>>>>>>>>=C2=A0 =C2=A0 helps against
>>>>>>>>>>>>>> attacks on the
>>>>>>>>>>>>>> MAC.
>>>>>>>>>>>>>
>>>>>>>>>>>>> There is no biddown at= tack protection for the
>>>>>>>=C2=A0 =C2=A0MAC, as
>>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0stated in=
>>>>>>>>>=C2=A0 =C2=A0 Section
>>>>>>>>>>>>> 16.3:
>>>>>>>>>>>>>
>>>>>>>>>>>>> "The bid-down pro= tection mechanism described
>>>>>>>=C2=A0 =C2=A0in this
>>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0document<= br> >>>>>>>>>=C2=A0 =C2=A0 is new,
>>>>>>>>>>>>> and thus cannot curren= tly protect against a
>>>>>>>=C2=A0 =C2=A0bid-down
>>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0attack th= at
>>>>>>>>>>>>> lowers the strength of= the hash algorithm to
>>>>>>>=C2=A0 =C2=A0HMAC-SHA1."
>>>>>>>>>>>>>
>>>>>>>>>>>>> What we put in place i= s a plan for *future*
>>>>>>>=C2=A0 =C2=A0versions
>>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0of STUN t= o get
>>>>>>>>>>>>> biddown protection for= the MAC.=C2=A0 That's it,
>>>>>>>=C2=A0 =C2=A0no more,
>>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0no less.<= br> >>>>>>>>>>>>>
>>>>>>>>>>>>
>>>>>>>>>>>> Yes, but I don't belie= ve that this will
>>>>>>>=C2=A0 =C2=A0provide bid-down
>>>>>>>>>=C2=A0 =C2=A0 protection for
>>>>>>>>>>> the
>>>>>>>>>>>> MAC in the future for the = reasons I indicate
>>>>>>>=C2=A0 =C2=A0above.
>>>>>>>>>>>>
>>>>>>>>>>>> If you think this does som= ething useful,
>>>>>>>=C2=A0 =C2=A0please show me an
>>>>>>>>>=C2=A0 =C2=A0 example attack
>>>>>>>>>>>> and how this fixes it. Not= e that it's not
>>>>>>>=C2=A0 =C2=A0generally
>>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0useful to=
>>>>>>>>>=C2=A0 =C2=A0 just bid
>>>>>>>>>>> down
>>>>>>>>>>>> the MAC itself unless the = MAC you bid down to
>>>>>>>=C2=A0 =C2=A0is weak
>>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0enough to=
>>>>>>>>>=C2=A0 =C2=A0 exploit
>>>>>>>>>>> in
>>>>>>>>>>>> some other way.
>>>>>>>>>>>
>>>>>>>>>>> I do not know what weaknesses = will be
>>>>>>>=C2=A0 =C2=A0discovered in the
>>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0future. >>>>>>>>>=C2=A0 =C2=A0 I am also
>>>>>>>>>>> pretty sure that the cost of n= ot using that
>>>>>>>=C2=A0 =C2=A0mechanism
>>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0is very >>>>>>>>>=C2=A0 =C2=A0 close to 0.
>>>>>>>>>>> What I am sure of is that the = cost of
>>>>>>>=C2=A0 =C2=A0reengineering a
>>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0new biddo= wn
>>>>>>>>>>> protection mechanism if we eve= r need it will be
>>>>>>>=C2=A0 =C2=A0high.
>>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0We alread= y
>>>>>>>>>=C2=A0 =C2=A0 went
>>>>>>>>>>> through the pains of designing= one for the
>>> password
>>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0algorithm= , so
>>>>>>>>>=C2=A0 =C2=A0 why not
>>>>>>>>>>> extend it so it can be used in= the aftermath of
>>> the
>>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0next Snow= den
>>>>>>>>>=C2=A0 =C2=A0 facepalm
>>>>>>>>>>> moment?
>>>>>>>>>>>
>>>>>>>>>>>> Again, happy to have a cal= l to walk though
>>>>>>>=C2=A0 =C2=A0this if that
>>>>>>>>>>>> helps.
>>>>>>>>>>>>
>>>>>>>>>>>> -Ekr
>>>>>>>>>>>>
>>>>>>>>>>>>
>>>>>>>>>>>>
>>>>>>>>>>>>
>>>>>>>>>>>>>>
>>>>>>>>>>>>>> You might think th= at there was a MAC which
>>>>>>>=C2=A0 =C2=A0was easier to
>>>>>>>>>=C2=A0 =C2=A0 reverse to
>>>>>>>>>>> find
>>>>>>>>>>>>>> the original
>>>>>>>>>>>>>> password, but the = defense you have here
>>>>>>>=C2=A0 =C2=A0doesn't help
>>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0with that=
>>>>>>>>>=C2=A0 =C2=A0 because
>>>>>>>>>>>>> the
>>>>>>>>>>>>>> on-path attacker c= an do a bid-down and use the
>>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0client as= a MAC
>>>>>>>>>=C2=A0 =C2=A0 oracle
>>>>>>>>>>> for
>>>>>>>>>>>>>> any MAC the client= supports.
>>>>>>>>>>>>>>
>>>>>>>>>>>>>> So, I still don= 9;t understand what this is
>>>>>>>=C2=A0 =C2=A0supposed
>>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0to do. Ha= ppy to
>>>>>>>>>>> have a
>>>>>>>>>>>>>> call if you
>>>>>>>>>>>>>> think that helps >>>>>>>>>>>>>>
>>>>>>>>>>>>>> -Ekr
>>>>>>>>>>>>>>
>>>>>>>>>>>>>>
>>>>>>>>>>>>>>
>>>>>>>>>>>>>>
>>>>>>>>>>>>>> On Mon, Jun 18, 20= 18 at 3:40 AM, Gonzalo
>>>>>>>=C2=A0 =C2=A0Camarillo <
>>>>>>>>>>>>>> Gonzalo.Camarillo@ericsso= n.com
>>>>>>>=C2=A0 =C2=A0<mailto:Gonzalo.Camarillo@ericsson.com= >
>>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0<mailt= o:Gonza= lo.Camarillo@ericsson.com
>>>>>>>=C2=A0 =C2=A0<mailto:Gonzalo.Camarillo@ericsson.com= >>
>>>>>>>>>=C2=A0 =C2=A0 <mailto:Gonzalo.Camarillo@eri= csson.com
>>>>>>>=C2=A0 =C2=A0<mailto:Gonzalo.Camarillo@ericsson.com= >
>>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0<mailt= o:Gonza= lo.Camarillo@ericsson.com
>>>>>>>=C2=A0 =C2=A0<mailto:Gonzalo.Camarillo@ericsson.com= >>>> wrote:
>>>>>>>>>>>>>>
>>>>>>>>>>>>>>> Marc, Eric, >>>>>>>>>>>>>>>
>>>>>>>>>>>>>>> what is the st= atus of this discussion?
>>>>>>>>>>>>>>>
>>>>>>>>>>>>>>> Thanks,
>>>>>>>>>>>>>>>
>>>>>>>>>>>>>>> Gonzalo
>>>>>>>>>>>>>>>
>>>>>>>>>>>>>>>> On 04/05/2= 018 2:35 AM, Eric Rescorla wrote:
>>>>>>>>>>>>>>>>
>>>>>>>>>>>>>>>>
>>>>>>>>>>>>>>>> On Mon, Ap= r 23, 2018 at 11:16 AM, Marc
>>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0Petit-Hug= uenin <
>>>>>>>>>>>>> petithug@acm.org <mailto:petithug@acm.org>
>>>>>>>=C2=A0 =C2=A0<mailto:petithug@acm.org <mailto:petithug@acm.org>>
>>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0<mailt= o:petithug@acm.org <mailto:petithug= @acm.org>
>>>>>>>=C2=A0 =C2=A0<mailto:petithug@acm.org <mailto:petithug@acm.org>>><= br> >>>>>>>>>>>>>>>> <mailto= :petithug@acm.org=
>>>>>>>=C2=A0 =C2=A0<mailto:petithug@acm.org> <mailto:petithug@acm.org
>>>>>>>=C2=A0 =C2=A0<mailto:petithug@acm.org>>
>>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0<mailt= o:petithug@acm.org <mailto:petithug= @acm.org>
>>>>>>>=C2=A0 =C2=A0<mailto:petithug@acm.org <mailto:petithug@acm.org>>>&= gt;> wrote:
>>>>>>>>>>>>>>>>
>>>>>>>>>>>>>>>>=C2=A0 =C2= =A0 On 04/22/2018 05:22 PM, Eric Rescorla
>>>>>>>=C2=A0 =C2=A0wrote:
>>>>>>>>>>>>>>>>> On Sun= , Apr 22, 2018 at 2:02 PM, Marc
>>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0Petit-Hug= uenin <
>>>>>>>>>>>>>>> petithug@acm.org <mailto:petithug@acm.org>=
>>>>>>>=C2=A0 =C2=A0<mailto:petithug@acm.org <mailto:petithug@acm.org>>
>>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0<mailt= o:petithug@acm.org <mailto:petithug= @acm.org>
>>>>>>>=C2=A0 =C2=A0<mailto:petithug@acm.org <mailto:petithug@acm.org>>><= br> >>>>>>>>>=C2=A0 =C2=A0 <mailto:petithug@acm.org <mailto:petithug@acm.org>=
>>>>>>>=C2=A0 =C2=A0<mailto:petithug@acm.org <mailto:petithug@acm.org>>
>>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0<mailt= o:petithug@acm.org <mailto:petithug= @acm.org>
>>>>>>>=C2=A0 =C2=A0<mailto:petithug@acm.org <mailto:petithug@acm.org>>>&= gt;>
>>>>>>>>>>>>>>>>> wrote:=
>>>>>>>>>>>>>>>>>
>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>>= ;>=C2=A0 =C2=A0 =C2=A0For a request or indication
>>>>>>>=C2=A0 =C2=A0message,
>>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0the agent=
>>>>>>>>>=C2=A0 =C2=A0 MUST
>>>>>>>>>>>>>>> include the >>>>>>>>>>>>>>>>>>>= ;>=C2=A0 =C2=A0 =C2=A0USERNAME,
>>>>>>>=C2=A0 =C2=A0MESSAGE-INTEGRITY-SHA256, and
>>>>>>>>>>> MESSAGE-INTEGRITY
>>>>>>>>>>>>>>>>>> at= tributes
>>>>>>>>>>>>>>>>>>>= ;>=C2=A0 =C2=A0 =C2=A0in the message unless the agent
>>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0knows fro= m an
>>>>>>>>>=C2=A0 =C2=A0 external
>>>>>>>>>>>>>>> indication
>>>>>>>>>>>>>>>>>>>= ;>=C2=A0 =C2=A0 =C2=A0which message integrity
>>>>>>>=C2=A0 =C2=A0algorithm is
>>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0supported=
>>>>>>>>>=C2=A0 =C2=A0 by both
>>>>>>>>>>>>>>> agents.=C2=A0 = In
>>>>>>>>>>>>>>>>>>>= ;>=C2=A0 =C2=A0 =C2=A0this case either
>>>>>>>=C2=A0 =C2=A0MESSAGE-INTEGRITY or
>>>>>>>>>>>>>>> MESSAGE-INTEGR= ITY-SHA256 MUST
>>>>>>>>>>>>>>>>>>>= ;>=C2=A0 =C2=A0 =C2=A0be included in addition to
>>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0USERNAME.= =C2=A0 The HMAC
>>>>>>>>>=C2=A0 =C2=A0 for the
>>>>>>>>>>>>>>> MESSAGE-
>>>>>>>>>>>>>>>>>>>= ;
>>>>>>>>>>>>>>>>>>>= ; This text appears to conflict with
>>>>>>>=C2=A0 =C2=A0S 7.3 of
>>>>>>>>>=C2=A0 =C2=A0 5245-bis, which
>>>>>>>>>>>>> says:
>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>> [t= ext missing]
>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>> Hm= m, no, RFC245bis is still
>>> referencing
>>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0RFC5389, = so the
>>>>>>>>>>>>> procedure
>>>>>>>>>>>>>>> for
>>>>>>>>>>>>>>>>>> st= unbis does not apply.
>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>
>>>>>>>>>>>>>>>>> I hear= what you're saying, but
>>>>>>>=C2=A0 =C2=A0publishing two
>>>>>>>>>=C2=A0 =C2=A0 documents at the
>>>>>>>>>>>>>>> same time
>>>>>>>>>>>>>>>>> which<= br> >>>>>>>>>>>>>>>>> make c= ontrary recommendations about
>>>>>>>=C2=A0 =C2=A0the same
>>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0basic
>>>>>>>>>=C2=A0 =C2=A0 protocol is
>>>>>>>>>>>>>>> un-good.
>>>>>>>>>>>>>>>>
>>>>>>>>>>>>>>>>=C2=A0 =C2= =A0 Sure, but wouldn't it be simpler to have
>>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0rfc5245bi= s
>>>>>>>>>=C2=A0 =C2=A0 using stunbis
>>>>>>>>>>>>>>>>=C2=A0 =C2= =A0 and have them updating their text,
>>>>>>>=C2=A0 =C2=A0more than
>>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0adding so= me
>>>>>>>>>=C2=A0 =C2=A0 tortuous
>>>>>>>>>>>>>>>>=C2=A0 =C2= =A0 text in stunbis?
>>>>>>>>>>>>>>>>
>>>>>>>>>>>>>>>>>
>>>>>>>>>>>>>>>>>
>>>>>>>>>>>>>>>>>>>= ;=C2=A0 =C2=A0 =C2=A0The STUN usage must specify
>>> which
>>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0transport=
>>>>>>>>>=C2=A0 =C2=A0 protocol is
>>>>>>>>>>>>>>> used, and
>>>>>>>>>>>>>>>>>> ho= w
>>>>>>>>>>>>>>>>>>>= ;>=C2=A0 =C2=A0 =C2=A0the agent determines the IP
>>>>>>>=C2=A0 =C2=A0address
>>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0and port<= br> >>>>>>>>>=C2=A0 =C2=A0 of the
>>>>>>>>>>>>>>> recipient.
>>>>>>>>>>>>>>>>>>>= ;>=C2=A0 =C2=A0 =C2=A0Section 8 describes a DNS-based
>>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0method of=
>>>>>>>>>=C2=A0 =C2=A0 determining
>>>>>>>>>>> the
>>>>>>>>>>>>>>> IP
>>>>>>>>>>>>>>>>>> ad= dress
>>>>>>>>>>>>>>>>>>>= ;>=C2=A0 =C2=A0 =C2=A0and port of a server that a
>>>>>>>=C2=A0 =C2=A0usage
>>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0may elect= to
>>>>>>>>>=C2=A0 =C2=A0 use.
>>>>>>>>>>> STUN
>>>>>>>>>>>>>>> may be
>>>>>>>>>>>>>>>>>> us= ed
>>>>>>>>>>>>>>>>>>>= ;>=C2=A0 =C2=A0 =C2=A0with anycast addresses, but
>>> only
>>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0with UDP = and
>>>>>>>>>=C2=A0 =C2=A0 in usages
>>>>>>>>>>>>>>> where
>>>>>>>>>>>>>>>>>>>= ;>=C2=A0 =C2=A0 =C2=A0authentication is not used.
>>>>>>>>>>>>>>>>>>>= ;
>>>>>>>>>>>>>>>>>>>= ; Why this restriction? You should
>>>>>>>=C2=A0 =C2=A0be able
>>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0to use >>>>>>>>>=C2=A0 =C2=A0 anycast with
>>>>>>>>>>>>>>> long-term
>>>>>>>>>>>>>>>>>>>= ; AUTH for (say) TURN.
>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>> >>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0https://www.ietf.org/mail-archive/web/behave/current/<= /a>
>>>>>>>>>>>>>>> msg03582.html<= br> >>>>>>>>>>>>>>>>
>>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 <https://www.ietf.org/mail-archive/web/behave/curren= t/
>>>>>>>>>>>>> msg03582.html>
>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>> I = think that the decision of
>>>>>>>=C2=A0 =C2=A0permitting Anycast
>>>>>>>>>=C2=A0 =C2=A0 should be left
>>>>>>>>>>>>> to
>>>>>>>>>>>>>>> each
>>>>>>>>>>>>>>>>>> ST= UN Usage.=C2=A0 Basic STUN Usage does
>>>>>>>=C2=A0 =C2=A0not use
>>>>>>>>>=C2=A0 =C2=A0 authentication and
>>>>>>>>>>>>> use
>>>>>>>>>>>>>>> only a
>>>>>>>>>>>>>>>>>> on= e round trip for the Binding
>>>>>>>=C2=A0 =C2=A0transaction, so
>>>>>>>>>=C2=A0 =C2=A0 Unicast can be
>>>>>>>>>>>>>>> used.
>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>
>>>>>>>>>>>>>>>>>> OT= OH, TURN and ICE should probably say
>>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0something=
>>>>>>>>>=C2=A0 =C2=A0 about that,
>>>>>>>>>>> so
>>>>>>>>>>>>> I
>>>>>>>>>>>>>>> added a
>>>>>>>>>>>>>>>>>> ne= w bullet point in Section 13:
>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>=C2= =A0 =C2=A0o=C2=A0 If Anycast addresses can be
>>>>>>>=C2=A0 =C2=A0used for
>>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0the serve= r
>>>>>>>>>=C2=A0 =C2=A0 in case
>>>>>>>>>>>>> TCP
>>>>>>>>>>>>>>> or
>>>>>>>>>>>>>>>>>>=C2= =A0 =C2=A0 =C2=A0 TLS-over-TCP, or
>>>>>>>=C2=A0 =C2=A0authentication are used.
>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>
>>>>>>>>>>>>>>>>> Are yo= u leaving this text in? That
>>> seems
>>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0very conf= using.
>>>>>>>>>>>>>>>>
>>>>>>>>>>>>>>>>=C2=A0 =C2= =A0 In isolation yes, but I think it makes
>>>>>>>=C2=A0 =C2=A0sense
>>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0which the= text
>>>>>>>>>>> before
>>>>>>>>>>>>>>>>=C2=A0 =C2= =A0 the bullet points:
>>>>>>>>>>>>>>>>
>>>>>>>>>>>>>>>>=C2=A0 =C2= =A0 =C2=A0 =C2=A0A STUN usage defines how STUN is
>>>>>>>=C2=A0 =C2=A0actually
>>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0utilized = --
>>>>>>>>>=C2=A0 =C2=A0 when to
>>>>>>>>>>>>> send
>>>>>>>>>>>>>>>>=C2=A0 =C2= =A0 =C2=A0 =C2=A0requests, what to do with the
>>>>>>>=C2=A0 =C2=A0responses,
>>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0and which=
>>>>>>>>>=C2=A0 =C2=A0 optional
>>>>>>>>>>>>>>>>=C2=A0 =C2= =A0 =C2=A0 =C2=A0procedures defined here (or in an
>>>>>>>=C2=A0 =C2=A0extension
>>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0to STUN)<= br> >>>>>>>>>=C2=A0 =C2=A0 are to be
>>>>>>>>>>>>>>> used.
>>>>>>>>>>>>>>>>=C2=A0 =C2= =A0 =C2=A0 =C2=A0A usage also defines:
>>>>>>>>>>>>>>>>
>>>>>>>>>>>>>>>>=C2=A0 =C2= =A0 [...]
>>>>>>>>>>>>>>>>
>>>>>>>>>>>>>>>>=C2=A0 =C2= =A0 =C2=A0 =C2=A0o=C2=A0 If Anycast addresses can be used
>>>>>>>=C2=A0 =C2=A0for the
>>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0server in=
>>>>>>>>>=C2=A0 =C2=A0 case TCP
>>>>>>>>>>>>> or
>>>>>>>>>>>>>>>>=C2=A0 =C2= =A0 =C2=A0 =C2=A0 =C2=A0 TLS-over-TCP, or authentication
>>>>>>>=C2=A0 =C2=A0are used.
>>>>>>>>>>>>>>>>
>>>>>>>>>>>>>>>>
>>>>>>>>>>>>>>>> What is th= e need for the restriction at all
--000000000000fccbbb05848c0b73-- From nobody Thu Mar 21 11:23:05 2019 Return-Path: X-Original-To: tram@ietfa.amsl.com Delivered-To: tram@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 3432213157D; Thu, 21 Mar 2019 11:22:53 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -14.49 X-Spam-Level: X-Spam-Status: No, score=-14.49 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_MED=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_HI=-5, SPF_PASS=-0.001, T_FILL_THIS_FORM_SHORT=0.01, URIBL_BLOCKED=0.001, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cisco.com header.b=iPIboYQV; dkim=pass (1024-bit key) header.d=cisco.onmicrosoft.com header.b=Vmvj4G31 Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id E1IdRUZGGzW7; Thu, 21 Mar 2019 11:22:40 -0700 (PDT) Received: from rcdn-iport-7.cisco.com (rcdn-iport-7.cisco.com [173.37.86.78]) (using TLSv1.2 with cipher DHE-RSA-SEED-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 618B113157B; Thu, 21 Mar 2019 11:22:39 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=420269; q=dns/txt; s=iport; t=1553192559; x=1554402159; h=from:to:cc:subject:date:message-id:references: in-reply-to:mime-version; bh=ymGrmoW9BZuM0ra0wY266YmOt3qJQIVOiZtU8XmWUdo=; b=iPIboYQVe3Y3YRx3yU0p6pzPjvdt7TTXXR+AJUJhcn36go4itRdv+zhC MyuXa5BWEyuIMgqf+lEuoc80G+8UfVk+E1Osis3Pc/Cr0UE1D3uxfH0UA ri/oTmkaf3s+JrxKcG81zkNLb3e/KG8IdX/80TcbIOgn5/iTjJ9lhBP0a s=; X-Files: draft-ietf-tram-stunbis-21.txt : 180048 IronPort-PHdr: =?us-ascii?q?9a23=3AxK+IexYHixD8shA3UDUn1C//LSx94ef9IxIV55?= =?us-ascii?q?w7irlHbqWk+dH4MVfC4el20gabRp3VvvRDjeee87vtX2AN+96giDgDa9QNMn?= =?us-ascii?q?1NksAKh0olCc+BB1f8KavldCU+E9lPVXdu/mqwNg5eH8OtL1A=3D?= X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: A0ChBAAs1ZNc/4kNJK2FCYFfBL8aEwKBFYYROr1Ijn8 X-IronPort-AV: E=Sophos;i="5.60,253,1549929600"; d="txt'?scan'208,217";a="534815356" Received: from alln-core-4.cisco.com ([173.36.13.137]) by rcdn-iport-7.cisco.com with ESMTP/TLS/DHE-RSA-SEED-SHA; 21 Mar 2019 18:22:35 +0000 Received: from XCH-ALN-018.cisco.com (xch-aln-018.cisco.com [173.36.7.28]) by alln-core-4.cisco.com (8.15.2/8.15.2) with ESMTPS id x2LIMYYh027868 (version=TLSv1.2 cipher=AES256-SHA bits=256 verify=FAIL); Thu, 21 Mar 2019 18:22:34 GMT Received: from xhs-rtp-003.cisco.com (64.101.210.230) by XCH-ALN-018.cisco.com (173.36.7.28) with Microsoft SMTP Server (TLS) id 15.0.1473.3; Thu, 21 Mar 2019 13:22:33 -0500 Received: from xhs-aln-002.cisco.com (173.37.135.119) by xhs-rtp-003.cisco.com (64.101.210.230) with Microsoft SMTP Server (TLS) id 15.0.1473.3; Thu, 21 Mar 2019 14:22:32 -0400 Received: from NAM02-SN1-obe.outbound.protection.outlook.com (173.37.151.57) by xhs-aln-002.cisco.com (173.37.135.119) with Microsoft SMTP Server (TLS) id 15.0.1473.3 via Frontend Transport; Thu, 21 Mar 2019 13:22:32 -0500 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=cisco.onmicrosoft.com; s=selector1-cisco-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=dwmocqz0c52Y1eMcf3hUwdpOkTiizA0DyBQMeqRljBI=; b=Vmvj4G317lSMP9Wupm5OxoTcFc98jGZUJIcnXNEzns1cDTMHY0oZvNYyLFUJd/xtNo+zryJbiWNNugvbUd2Lm9zQKTb2P59f3sG3WLoxYJu1J0vdZKaQdn2m6YCZ21z9lwEjLJiCUxfevUeeOuLNqaZpqnDgRsvoH4inGug+IeY= Received: from BY5PR11MB3895.namprd11.prod.outlook.com (10.255.72.92) by BY5PR11MB4168.namprd11.prod.outlook.com (10.255.163.91) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.1709.14; Thu, 21 Mar 2019 18:22:30 +0000 Received: from BY5PR11MB3895.namprd11.prod.outlook.com ([fe80::85d0:5bc1:f305:1423]) by BY5PR11MB3895.namprd11.prod.outlook.com ([fe80::85d0:5bc1:f305:1423%6]) with mapi id 15.20.1730.013; Thu, 21 Mar 2019 18:22:30 +0000 From: "Gonzalo Salgueiro (gsalguei)" To: Eric Rescorla CC: Spencer Dawkins at IETF , "tram-chairs@ietf.org" , "tram@ietf.org" , IESG , "draft-ietf-tram-stunbis@ietf.org" Thread-Topic: [tram] Eric Rescorla's Discuss on draft-ietf-tram-stunbis-16: (with DISCUSS and COMMENT) Thread-Index: AQHUa0FPQa4RlvmGQ0G0i0rcGeSYLqUuaM8AgABS4ICAKPySAIAACJIAgABkJoCABCeEgIA2QhKAgCOzSICAXM16RYAAAselgALF0oCAAXeogA== Date: Thu, 21 Mar 2019 18:22:30 +0000 Message-ID: <9ED47E64-EC53-43FB-8EAD-128E81205EF4@cisco.com> References: <152390863222.19652.10310304989315386136.idtracker@ietfa.amsl.com> <472563ee-5fc3-655d-8e31-138cc774e608@acm.org> <97c561a7-c33a-6121-00c4-09cd11646b98@ericsson.com> <4b8f10f7-1eee-c8bc-d9ee-e3f18473de32@ericsson.com> In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: yes X-MS-TNEF-Correlator: authentication-results: spf=none (sender IP is ) smtp.mailfrom=gsalguei@cisco.com; x-originating-ip: [2001:420:2280:1330:3deb:6faa:89e5:af5c] x-ms-publictraffictype: Email x-ms-office365-filtering-correlation-id: 03797124-a928-4441-6d62-08d6ae2a2e05 x-microsoft-antispam: BCL:0; PCL:0; RULEID:(2390118)(7020095)(4652040)(8989299)(4534185)(4627221)(201703031133081)(201702281549075)(8990200)(5600127)(711020)(4605104)(2017052603328)(7153060)(49563074)(7193020); SRVR:BY5PR11MB4168; x-ms-traffictypediagnostic: BY5PR11MB4168: x-ms-exchange-purlcount: 4 x-microsoft-antispam-prvs: x-forefront-prvs: 0983EAD6B2 x-forefront-antispam-report: SFV:NSPM; SFS:(10009020)(39860400002)(346002)(366004)(136003)(396003)(376002)(199004)(189003)(51914003)(54164003)(54094003)(51444003)(33656002)(6486002)(6506007)(97736004)(229853002)(6916009)(68736007)(2906002)(105586002)(561944003)(36756003)(106356001)(30864003)(446003)(6246003)(4326008)(82746002)(25786009)(6116002)(11346002)(966005)(14444005)(14454004)(476003)(316002)(606006)(2616005)(46003)(21615005)(8676002)(81166006)(81156014)(478600001)(486006)(93886005)(186003)(5024004)(5660300002)(256004)(71200400001)(71190400001)(99286004)(7736002)(83716004)(54906003)(6436002)(53936002)(8936002)(6512007)(53946003)(53546011)(236005)(6306002)(54896002)(76176011)(86362001)(102836004)(99936001)(569006); DIR:OUT; SFP:1101; SCL:1; SRVR:BY5PR11MB4168; H:BY5PR11MB3895.namprd11.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; A:1; MX:1; received-spf: None (protection.outlook.com: cisco.com does not designate permitted sender hosts) x-ms-exchange-senderadcheck: 1 x-microsoft-antispam-message-info: hDFnxrYBM8EwDCqltOSqPjZYPC614+pDVrpUeTHRiptEeJk5qdPzsEIjnXngqMY+9J8fqOzedECVF18h6maPq8Fjwq8OIrd2gZg8WX4k0RthO/sx1/8CW7YhjWY2sLNSBvUJhq1d0Af50BrxYZbSM77XdSncMZn/6uTbP14BSOhWm7mhqZCIFjKgeYlASRXkWk2loh7AgQ1oh4g1JdKiJWfpu2XFdYi1fhprCgIqNWCt1oH0o4Pn7mlHeVpBaTtwt0KCOtH0iBGVkXGF6wL3FfGlgqRtjzsaAuBvwOelTk4uNDEIO0uPmz+8LKmd7mAI9Vbf8szsTPjWaxL4vco87gJsIIvhYxaShgLTuYFfhUMWYMoTeYQ3AvBX4o9kbsrXVK1HjELtTs79xkYDMxocG0xd2A/glJVssDUTkiJiZXQ= Content-Type: multipart/mixed; boundary="_004_9ED47E64EC5343FB8EAD128E81205EF4ciscocom_" MIME-Version: 1.0 X-MS-Exchange-CrossTenant-Network-Message-Id: 03797124-a928-4441-6d62-08d6ae2a2e05 X-MS-Exchange-CrossTenant-originalarrivaltime: 21 Mar 2019 18:22:30.1039 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 5ae1af62-9505-4097-a69a-c1553ef7840e X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-Transport-CrossTenantHeadersStamped: BY5PR11MB4168 X-OriginatorOrg: cisco.com X-Outbound-SMTP-Client: 173.36.7.28, xch-aln-018.cisco.com X-Outbound-Node: alln-core-4.cisco.com Archived-At: Subject: Re: [tram] Eric Rescorla's Discuss on draft-ietf-tram-stunbis-16: (with DISCUSS and COMMENT) X-BeenThere: tram@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "Discussing the creation of a Turn Revised And Modernized \(TRAM\) WG, which goal is to consolidate the various initiatives to update TURN and STUN." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 21 Mar 2019 18:22:54 -0000 --_004_9ED47E64EC5343FB8EAD128E81205EF4ciscocom_ Content-Type: multipart/alternative; boundary="_000_9ED47E64EC5343FB8EAD128E81205EF4ciscocom_" --_000_9ED47E64EC5343FB8EAD128E81205EF4ciscocom_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 SGkgRXJpYyAtDQoNCknigJltIGF0dGFjaGluZyB0aGUgLTIxIHRoYXQgd2lsbCBiZSBwdWJsaXNo ZWQgb25jZSB0aGUgSS1EIHN1Ym1pc3Npb24gdG9vbCBvcGVucyB1cCAob3IgU3BlbmNlciBjYW4g b3ZlcnJpZGUgYW5kIGl0IHB1Ymxpc2hlZCBiZWZvcmUgdGhlbikuICBJdCB1c2VzIHlvdXIgcHJv cG9zZWQgYmlkIGRvd24gcHJvdGVjdGlvbiBkaXNjbGFpbWVyIHRleHQgKHNhdmUgZm9yIG1pbm9y IG5pdHMgSSBjbGVhbmVkIHVwKS4NCg0KSWYgdGhpcyBsb29rcyBnb29kIHRoZW4gZnJvbSBteSBw ZXJzcGVjdGl2ZSB3ZSBhcmUgZG9uZSBhbmQgeW91ciBESVNDVVNTIGNhbiBiZSBjbGVhcmVkIGFu ZCB3ZSBjYW4gcHJvY2VlZCB3aXRoIHB1YmxpY2F0aW9uLg0KDQpUaGFua3MgZm9yIGFsbCB5b3Vy IGhlbHAuDQoNCkNoZWVycywNCg0KR29uemFsbw0KDQoNCk9uIE1hciAyMCwgMjAxOSwgYXQgMzo1 NyBQTSwgRXJpYyBSZXNjb3JsYSA8ZWtyQHJ0Zm0uY29tPG1haWx0bzpla3JAcnRmbS5jb20+PiB3 cm90ZToNCg0KR29uemFsbywNCg0KVGhpcyB0ZXh0IHN0aWxsIHNlZW1zIHRvIG1lIHRvIG5lZWQg c29tZSB3b3JrLiBIZXJlIGlzIGEgcmV2aXNlZCB2ZXJzaW9uLg0KDQpTSEEtMjU2IHdhcyBjaG9z ZW4gYXMgdGhlIG5ldyBkZWZhdWx0IGZvciBwYXNzd29yZA0KaGFzaGluZyBmb3IgaXRzIGNvbXBh YmlsaXR5IHdpdGggUkZDIDc2MTYgYnV0IGJlY2F1c2UgU0hBLTI1NiAobGlrZQ0KTUQ1KSBpcyBh IGNvbXBhcmF0aXZlbHkgZmFzdCBhbGdvcml0aG0sIGl0IGRvZXMgbGl0dGxlIHRvIGRldGVyDQpi cnV0ZSBmb3JjZSBhdHRhY2tzLiBTcGVjaWZpY2FsbHksIHRoaXMgbWVhbnMgdGhhdCBpZiB0aGUN CnVzZXIgaGFzIGEgd2VhayBwYXNzd29yZDoNCg0KKiBBbiBhdHRhY2tlciB3aG8gY2FwdHVyZXMg dGhlIHNlcnZlcidzIHBhc3N3b3JkIGZpbGUgY2FuIG9mdGVuDQogIGRldGVybWluZSB0aGUgdXNl cidzIHBhc3N3b3JkIGFuZCB0aHVzIGltcGVyc29uYXRlIHRoZSB1c2VyDQogIHRvIG90aGVyIHNl cnZlcnMgd2hlcmUgdGhleSBoYXZlIHVzZWQgdGhhdCBwYXNzd29yZC4gTm90ZSB0aGF0DQogIHN1 Y2ggYW4gYXR0YWNrZXIgY2FuIGltcGVyc29uYXRlIHRoZSB1c2VyIHRvIHRoZSBzZXJ2ZXIgaXRz ZWxmDQogIHdpdGhvdXQgYW55IGJydXRlIGZvcmNlIGF0dGFjay4NCg0KKiBBbiBhdHRhY2tlciB3 aG8gY2FwdHVyZXMgYSBzaW5nbGUgZXhjaGFuZ2UgY2FuIGJydXRlIGZvcmNlDQogIHRoZSB1c2Vy J3MgcGFzc3dvcmQgYW5kIHRodXMgcG90ZW50aWFsbHkgaW1wZXJzb25hdGUgdGhlDQogIHVzZXIg dG8gdGhlIHNlcnZlciBhbmQgb3RoZXIgc2VydmVycyB3aGVyZSB0aGV5IGhhdmUgdXNlZA0KICB0 aGUgc2FtZSBwYXN3b3JkLg0KDQpBIHN0cm9uZ2VyICh3aGljaCBpcyB0byBzYXkgc2xvd2VyKSBh bGdvcml0aG0sIGxpa2UgQXJnb24yDQpbSS1ELmlydGYtY2ZyZy1hcmdvbjJdLCB3b3VsZCBoZWxw IGJvdGggb2YgdGhlc2UgY2FzZXMsIGJ1dCBpbiB0aGUNCmNhc2Ugb2YgdGhlIGZpcnN0IGF0dGFj aywgb25seSBhZnRlciB1bnRpbCB0aGUgZGF0YWJhc2UgZW50cnkgZm9yIHRoaXMNCnVzZXIgaXMg dXBkYXRlZCB0byBleGNsdXNpdmVseSB1c2UgdGhhdCBzdHJvbmdlciBtZWNoYW5pc20uDQoNClRo ZSBiaWQtZG93biBkZWZlbnNlcyBpbiB0aGlzIHByb3RvY29sIHByZXZlbnQgYW4gYXR0YWNrZXIg ZnJvbQ0KZm9yY2luZyB0aGUgY2xpZW50IGFuZCBzZXJ2ZXIgdG8gY29tcGxldGUgYSBoYW5kc2hh a2UgdXNpbmcgd2Vha2VyDQphbGdvcml0aG1zIHRoYW4gdGhleSBqb2ludGx5IHN1cHBvcnQsIGJ1 dCBvbmx5IGlmIHRoZSB3ZWFrZXN0IGpvaW50DQphbGdvcml0aG0gaXMgc3Ryb25nIGVub3VnaCB0 aGF0IGl0IGNhbm5vdCBiZSBicnV0ZS1mb3JjZWQuIEhvd2V2ZXIsDQp0aGlzIGRvZXMgbm90IGRl ZmVuZCBhZ2FpbnN0IG1hbnkgYXR0YWNrcyBvbiB0aG9zZSBhbGdvcml0aG1zOw0Kc3BlY2lmaWNh bGx5LCBhbiBvbi1wYXRoIGF0dGFja2VyIG1pZ2h0IHBlcmZvcm0gYSBiaWQtZG93biBhdHRhY2sg b24gYQ0KY2xpZW50IHdoaWNoIHN1cHBvcnRlZCBib3RoIEFyZ29uMiBhbmQgU0hBLTI1NiBmb3Ig cGFzc3dvcmQgaGFzaGluZw0KYW5kIHVzZSB0aGF0IHRvIGNvbGxlY3QgYSBNRVNTQUdFLUlOVEVH UklUWS1TSEEyNTYgdmFsdWUgd2hpY2ggaXQgdXNlcw0KZm9yIGFuIG9mZmxpbmUgYnJ1dGUtZm9y Y2UgYXR0YWNrLiBUaGlzIHdvdWxkIGJlIGRldGVjdGVkIHdoZW4gdGhlDQpzZXJ2ZXIgcmVjZWl2 ZXMgdGhlIHNlY29uZCByZXF1ZXN0LCBidXQgdGhhdCBkb2VzIG5vdCBwcmV2ZW50IHRoZQ0KYXR0 YWNrZXIgZnJvbSBvYnRhaW5pbmcgdGhlIE1FU1NBR0UtSU5URUdSSVRZLVNIQTI1NiB2YWx1ZS4N Cg0KU2ltaWxhcmx5LCBhbiBhdHRhY2sgYWdhaW5zdCB0aGUgVVNFUkhBU0ggbWVjaGFuaXNtIHdp bGwgbm90IHN1Y2NlZWQNCmluIGVzdGFibGlzaGluZyBhIHNlc3Npb24gYXMgdGhlIHNlcnZlciB3 aWxsIGRldGVjdCB0aGF0IHRoZSBmZWF0dXJlDQp3YXMgZGlzY2FyZGVkIG9uLXBhdGgsIGJ1dCB0 aGUgY2xpZW50IHdvdWxkIHN0aWxsIGhhdmUgYmVlbiBjb252aW5jZWQNCnRvIHNlbmQgaXRzIHVz ZXJuYW1lIGluIGNsZWFyIGluIHRoZSBVU0VSTkFNRSBhdHRyaWJ1dGUsIHRodXMNCmRpc2Nsb3Np bmcgaXQgdG8gdGhlIGF0dGFja2VyLg0KDQotRWtyDQoNCg0KT24gTW9uLCBNYXIgMTgsIDIwMTkg YXQgNjozNyBQTSBHb256YWxvIFNhbGd1ZWlybyAoZ3NhbGd1ZWkpIDxnc2FsZ3VlaUBjaXNjby5j b208bWFpbHRvOmdzYWxndWVpQGNpc2NvLmNvbT4+IHdyb3RlOg0KVGhhbmtzLCBTcGVuY2VyLiAg SW4gdGhlIGludGVyZXN0IG9mIGV4cGVkaXRpb3VzbmVzcyBJ4oCZdmUgZW1haWxlZCBFcmljIHRv IHJldmlldyB0aGUgbmV3bHkgcHVibGlzaGVkIC0yMCB0byBlbnN1cmUgaXQgYWRkcmVzc2VzIGhp cyBESVNDVVNTIHBvaW50cy4gSG9waW5nIHRvIGdldCB0aGlzIGRvbmUgYmVmb3JlIEVyaWMgc3Rl cHMgZG93biBhcyBBRC4NCg0KQ2hlZXJzLA0KDQpHb256YWxvDQoNCg0KDQo+IE9uIE1hciAxOCwg MjAxOSwgYXQgOToyNyBQTSwgU3BlbmNlciBEYXdraW5zIGF0IElFVEYgPHNwZW5jZXJkYXdraW5z LmlldGZAZ21haWwuY29tPG1haWx0bzpzcGVuY2VyZGF3a2lucy5pZXRmQGdtYWlsLmNvbT4+IHdy b3RlOg0KPg0KPiBEZWFyIEFsbCwNCj4NCj4+IE9uIEZyaSwgTWFyIDgsIDIwMTkgYXQgODoxMCBQ TSBFcmljIFJlc2NvcmxhIDxla3JAcnRmbS5jb208bWFpbHRvOmVrckBydGZtLmNvbT4+IHdyb3Rl Og0KPj4NCj4+IFRoYW5rcyBmb3IgdGhlIGNhbGwgeWVzdGVyZGF5Lg0KPj4NCj4NCj4gVGhhbmtz IHRvIGFsbCBmb3IgbW92aW5nIHRoaXMgc3BlY2lmaWNhdGlvbiBmb3J3YXJkLg0KPg0KPiBJZiB0 aGUgY3VycmVudCBjb252ZXJzYXRpb24gdHVybnMgb3V0IHRvIGNvbnZlcmdlIG9uIHRoaXMgdG9w aWMgYmVmb3JlIG5leHQNCj4gV2VkbmVzZGF5LCBJJ20gaGFwcHkgdG8gYXBwcm92ZSBhIHJldmlz ZWQgZHJhZnQgYWZ0ZXIgRXJpYyBjbGVhcnMgaGlzDQo+IERpc2N1c3MuDQo+DQo+IElmIEkgY2Fu IGhlbHAgaW4gYW55IHdheSwgcGxlYXNlIGxldCBtZSBrbm93Lg0KPg0KPiBTcGVuY2VyDQo+DQo+ DQo+Pg0KPj4gRmlyc3QsIGhlcmUgaXMgd2hhdCBJIHJlY29tbWVuZCBmb3IgdGhlIHF1ZXN0aW9u IG9mIFNIQS0yNTYgZm9yIHBhc3N3b3JkDQo+PiBoYXNoaW5nOg0KPj4NCj4+ICBOb3RlOiB0aGUg dXNlIG9mIFNIQS0yNTYgZm9yIHBhc3N3b3JkIGhhc2hpbmcgZG9lcyBub3QgbWVldCBtb2Rlcm4N Cj4+ICBzdGFuZGFyZHMsIHdoaWNoIGFyZSBhaW1lZCBhdCBzbG93aW5nIGRvd24gZXhoYXVzdGl2 ZSBwYXNzd29yZCBzZWFyY2gNCj4+ICBieSBwcm92aWRpbmcgYSByZWxhdGl2ZWx5IHNsb3cgbWlu aW11bSB0aW1lIHRvIGNvbXB1dGUgdGhlDQo+PiAgaGFzaC4gQWx0aG91Z2ggYmV0dGVyIGFsZ29y aXRobXMgc3VjaCBhcyBBcmdvbjINCj4+ICBbaHR0cHM6Ly9kYXRhdHJhY2tlci5pZXRmLm9yZy9k b2MvZHJhZnQtaXJ0Zi1jZnJnLWFyZ29uMi9dIGFyZQ0KPj4gIGF2YWlsYWJsZSwgU0hBLTI1NiB3 YXMgY2hvc2VuIGZvciBjb25zaXN0ZW5jeSB3aXRoIFJGQyA3NjE2Lg0KPj4NCj4+DQo+PiBOb3cs IFdSVCB0byB0aGUgYW50aS1kb3duZ3JhZGUgc2l0dWF0aW9uLiBIZXJlJ3MgYSBzdHlsaXplZCB2 ZXJzaW9uDQo+PiBvZiB0aGUgcHJvdG9jb2w6DQo+Pg0KPj4gQ2xpZW50ICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICBTZXJ2ZXINCj4+DQo+PiBIZWxsbyAt Pg0KPj4gICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICA8LSBOb25jZSwg QWxnb3JpdGhtcw0KPj4gSE1BQy1IMShIMihQYXNzd29yZCksIE5vbmNlLCBBbGdvcml0aG1zLCBN c2cpIC0+DQo+PiAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIDwtIEhNQUMtSDEoSDIo UGFzc3dvcmQpLCAuLi4pDQo+Pg0KPj4gV2hlcmUgSDEgYW5kIEgyIGFyZSB0aGUgSE1BQyBoYXNo IGZ1bmN0aW9ucyBhbmQgdGhlIHBhc3N3b3JkIGhhc2hpbmcNCj4+IGZ1bmN0aW9uIHJlc3BlY3Rp dmVseS4NCj4+DQo+PiBOb3csIGlmIHdlIGFzc3VtZSB0aGF0IHRoZSBhdHRhY2tlciBkb2VzIG5v dCBrbm93IFBhc3N3b3JkIGFuZCB0aGF0DQo+PiBib3RoIEgxIGFuZCBIMiBhcmUgc2VjdXJlLCB0 aGVuIGl0IGlzIG5vdCBwb3NzaWJsZSBmb3IgdGhlIGF0dGFja2VyIHRvDQo+PiBjb21wbGV0ZSB0 aGUgdHJhbnNhY3Rpb24gb3IgbW9kaWZ5IGFueSBvZiB0aGUgbWVzc2FnZXMuIEZ1cnRoZXIsIGlm DQo+PiB0aGUgd2Vha2VzdCBqb2ludCBhbGdvcml0aG0gdGhhdCBib3RoIHNpZGVzIHN1cHBvcnQg aXMgc3RpbGwgc3Ryb25nLA0KPj4gdGhlbiBhbiBhdHRhY2tlciBjYW5ub3QgaW5mbHVlbmNlIHRo ZSBhbGdvcml0aG0gbmVnb3RpYXRpb24gWzBdLiBUaGlzDQo+PiBwcm9wZXJ0eSBpcyBwcm92aWRl ZCBieSBjb3ZlcmluZyB0aGUgYWxnb3JpdGhtcyB1bmRlciB0aGUgTUFDLg0KPj4NCj4+IEhvd2V2 ZXIsIG15IHBvaW50IGlzIHRoYXQgdGhpcyBpcyBub3QgYSB2ZXJ5IHVzZWZ1bCBwcm9wZXJ0eS4N Cj4+DQo+PiBGaXJzdCwgY29uc2lkZXIgdGhlIGNhc2UgaW4gd2hpY2ggdGhlIGltcGxlbWVudGF0 aW9ucyBqb2ludGx5IHN1cHBvcnQNCj4+IG9uZSBzdHJvbmcgYWxnb3JpdGhtIGFuZCBvbmUgd2Vh ayBhbGdvcml0aG0uIEUuZy4sIGZvciBIMSB0aGV5IHN1cHBvcnQNCj4+IFNIQS0yNTYgYW5kIHRo ZSBmdW5jdGlvbiBaKHgpIHdoaWNoIGFsd2F5cyBlbWl0cyAwcy4gVGhpcyBhbGxvd3MNCj4+IGFu IGF0dGFja2VyIHRvIGZvcmNlIHRoZSBjbGllbnQgYW5kIHNlcnZlciBpbnRvIHVzaW5nIFosIGFz IGZvbGxvd3MuDQo+Pg0KPj4NCj4+IENsaWVudCAgICAgICAgICAgICAgICAgICAgICBBdHRhY2tl ciAgICAgICAgICAgICAgICAgICBTZXJ2ZXINCj4+DQo+PiBIZWxsbyAtPg0KPj4gICAgICAgICAg ICAgICAgICAgICAgICAgICAgSGVsbG8gLT4NCj4+ICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICA8LSBOb25jZSwgQWxnPVNIQTI1NiwgWg0KPj4gICAgICAgICAgICAgICAgPC0g Tm9uY2UsIEFsZz1aDQo+PiBaKEgyKFBhc3N3b3JkKSwgTm9uY2UsIEFsZz1aKSkgLT4NCj4+ICAg ICAgICAgICAgICAgICAgICAgICAgWihIMihQYXNzd29yZCksIE5vbmNlLCBBbGc9U0hBMjU2LCBa KSkNCj4+DQo+PiBUaGUgaXNzdWUgaGVyZSBpcyB0aGF0IHRoZSBvbmx5IHRoaW5nIHRoYXQgdGhl IE1BQyBpcyBkb2luZyBpcw0KPj4gYXV0aGVudGljYXRpbmcgdGhlIHRyYW5zYWN0aW9uLCBhbmQg aWYgeW91IGNhbid0IHRydXN0IGl0IHRvIGRvIHRoYXQsDQo+PiB5b3UgY2FuJ3QgdHJ1c3QgaXQg dG8gYXV0aGVudGljYXRlIHRoZSBiaWQtZG93biBkZWZlbnNlIGVpdGhlci4NCj4+DQo+Pg0KPj4g RHVyaW5nIG91ciBkaXNjdXNzaW9uLCB0aGVyZSB3YXMgYSBzdWdnZXN0aW9uIHRoYXQgaXQgd2Fz IHVzZWZ1bCB0bw0KPj4gaGF2ZSBiaWRkb3duIGRlZmVuc2UgdG8gZGVmZW5kIGFnYWluc3Qgd2Vh a25lc3NlcyBpbiBIMi4gSSBkb24ndCB0aGluaw0KPj4gdGhhdCB0aGF0J3MgdHJ1ZSBlaXRoZXIu IEZpcnN0LCByZW1lbWJlciB0aGF0IHRoZSBwdXJwb3NlIG9mIEgyIGlzIHRvDQo+PiBwcmV2ZW50 IGFuIGF0dGFja2VyIHdobyByZWNvdmVycyB0aGUgcGFzc3dvcmQgZGF0YWJhc2UgZnJvbSBsZWFy bmluZw0KPj4gdGhlIHVzZXIncyB0cnVlIHBhc3N3b3JkLiBUaGlzIGlzIG5vdCBhYm91dCBkZWZl bmRpbmcgdGhlIHNlcnZlciBmcm9tDQo+PiBhdHRhY2sgKGJlY2F1c2Uga25vd2luZyBBMSBpcyBl bm91Z2ggdG8gYXR0YWNrIHRoZSBzZXJ2ZXIpIGJ1dCBhYm91dA0KPj4gcHJldmVudGluZyB0aGUg YXR0YWNrZXIgZnJvbSBsZWFybmluZyBhIHBhc3N3b3JkIHdoaWNoIG1pZ2h0IGhhdmUgYmVlbg0K Pj4gcmV1c2VkIG9uIGFub3RoZXIgc2l0ZS4NCj4+DQo+PiBOb3csIGl0J3MgYWxzbyBwb3NzaWJs ZSB0byBicnV0ZS1mb3JjZSB0aGUgdXNlcidzIHBhc3N3b3JkIGp1c3QgZnJvbQ0KPj4gdGhlIHBy b3RvY29sIHRyYW5zY3JpcHQ6IGlmIHlvdSBjYXB0dXJlIHRoZSBjbGllbnQncyBmaXJzdCBtZXNz YWdlDQo+PiB3aXRoIE1FU1NBR0UtSU5URUdSSVRZIG9yIE1FU1NBR0UtSU5URUdSSVRZLVNIQTI1 NiwgeW91IGNhbiBqdXN0IGtlZXANCj4+IHRyeWluZyBwYXNzd29yZHMgdW50aWwgeW91IGdldCB0 aGUgcmlnaHQgTUFDLiBOb3RlIHRoYXQgdGhpcyBpcyBhDQo+PiBwYXNzaXZlIGF0dGFjay4gVGhp cyBpcyBjb21wYXJhdGl2ZWx5IGZhc3QgYmVjYXVzZSBTSEEyNTYgYW5kIE1ENSBhcmUNCj4+IGZh c3QuDQo+Pg0KPj4gQSBtdWNoIHN0cm9uZ2VyIEgyIChlLmcuLCBBcmdvbikgd291bGQgaGVscCBh Z2FpbnN0IHRoaXMsIGJ1dCB0aGUNCj4+IHByb2JsZW0gbm93IGJlY29tZXMgdGhhdCB0aGUgY2xp ZW50IHN1cHBvcnRzIEgyID09IE1ENSAob3IgU0hBLTI1NikNCj4+IGFuZCBzbyBldmVuIGlmIHRo ZSBzZXJ2ZXIgc3VwcG9ydHMgQXJnb24sIHRoZSBhdHRhY2tlciBjYW4gbW91bnQgYQ0KPj4gYmlk LWRvd24gZGVmZW5zZSBpbiB3aGljaCBpdCBtb2RpZmllcyB0aGUgc2VydmVyJ3MgZmlyc3QgbWVz c2FnZSB0bw0KPj4ganVzdCBhZHZlcnRpc2UgTUQ1IGFuZCB0aHVzIGdldCB0aGUgY2xpZW50IHRv IHByb3ZpZGUgYSBzdWl0YWJsZQ0KPj4gbWVzc2FnZS4gVGhlIGJpZC1kb3duIGRlZmVuc2Ugd291 bGQgcHJldmVudCB0aGUgYXV0aGVudGljYXRpb24NCj4+IHRyYW5zYWN0aW9uIGZyb20gY29tcGxl dGluZywgYnV0IHRoYXQncyBub3QgbmVjZXNzYXJ5IGZvciB0aGlzDQo+PiBhdHRhY2sgYmVjYXVz ZSB0aGUgYXR0YWNrZXIgY2FuIGp1c3QgYnJ1dGUtZm9yY2UgdGhlIHBhc3N3b3JkIGZyb20NCj4+ IHRoZSBtZXNzYWdlIGl0IGhhcy4gVG8gbWFrZSB0aGlzIHdvcmssIHlvdSB3b3VsZCBuZWVkIHNv bWV0aGluZw0KPj4gbGlrZSBhIFBBS0UsIHdoaWNoIHRoaXMgaXMgbm90Lg0KPj4NCj4+IEZpbmFs bHksIHlvdSBtaWdodCB0aGluayB0aGF0IHRoZSBzZXJ2ZXIgaGFzIHR3byBkYXRhYmFzZXMsIG9u ZQ0KPj4gd2hpY2ggdXNlcyBBcmdvbiBhbmQgb25lIHdoaWNoIHVzZXMgTUQ1IGFuZCBpdCB3YW50 cyB0byBncmFkdWFsbHkNCj4+IHBoYXNlIG91dCB0aGUgTUQ1IG9uZSwgd2hpY2ggaXQgd2lsbCBk byB3aGVuIG5vIGNsaWVudCBhdXRoZW50aWNhdGVzDQo+PiB3aXRoIE1ENSBmb3IgYSB2ZXJ5IGxv bmcgdGltZS4gQW4gYW50aS1iaWRkb3duIGRlZmVuc2Ugd291bGQgc29ydA0KPj4gb2Ygd29yayBo ZXJlLCBidXQgdGhlIGZhY3QgdGhhdCB0aGUgYXR0YWNrZXIgd291bGQgaGF2ZSB0byBiZQ0KPj4g YWN0aXZlIGVzc2VudGlhbGx5IGluZGVmaW5pdGVseSB0byBrZWVwIHRoZSBzZXJ2ZXIgY29uZnVz ZWQgYWJvdXQNCj4+IHRoZSBzdGF0ZSBvZiBjbGllbnRzIC0tIGFuZCB0aGF0IHRoZSBhdHRhY2tl ciBjYW4gbGlrZWx5IGp1c3QNCj4+IGdldCBhIHZhbGlkIGFjY291bnQgYW5kIHRoZW4gaW5zaXN0 IG9uIHVzaW5nIE1ENSAtLSBtYWtlcyB0aGlzIGENCj4+IG5vdCB2ZXJ5IHVzZWZ1bCBkZWZlbnNl Lg0KPj4NCj4+IEkgdGhpbmsgdGhpcyBtYWtlcyBhIHByZXR0eSBwZXJzdWFzaXZlIGNhc2UgdGhh dCB0aGUgYmlkLWRvd24gZGVmZW5zZQ0KPj4gaXNuJ3QgdXNlZnVsIGV4Y2VwdCBpbiB0aGUgZm9y bWFsICJhdHRhY2tlciBjYW5ub3QgaW5mbHVlbmNlDQo+PiBuZWdvdGlhdGlvbiIgc2Vuc2UuIFdp dGggdGhhdCBzYWlkLCBpbiB0aGUgc3Bpcml0IG9mIGdldHRpbmcgdGhpcyBkb25lLCBJDQo+PiBn dWVzcw0KPj4gSSdtIHdpbGxpbmcgdG8gbGV0IHRoaXMgZ28gaWYgdGhlIHNlY3VyaXR5IGNvbnNp ZGVyYXRpb25zIG1ha2UgY2xlYXINCj4+IHRoYXQgaXQgaXMgb25seSBhIHZlcnkgbGltaXRlZCBt ZWNoYW5pc20uDQo+Pg0KPj4gLUVrcg0KPj4NCj4+DQo+PiBbMF0gVGhpcyBpcyBwcmluY2lwYWxs eSBhYm91dCBIMS4gQXMgbG9uZyBhcyB0aGUgSDIgYXBwcm94aW1hdGVseQ0KPj4gZXZlbmx5IGRp c3RyaWJ1dGVzIHRoZSBwYXNzd29yZCBvdmVyIGl0cyByYW5nZSwgdGhlbiBjcnlwdG9ncmFwaGlj DQo+PiBzdHJlbmd0aCBpcyBub3QgaW1wb3J0YW50IGZvciB0aGlzIHF1ZXN0aW9uLiBGb3IgaW5z dGFuY2UsIHlvdQ0KPj4gY291bGQgcmVwbGFjZSBIMiB3aXRoIGFuIGlkZW50aXR5IGZ1bmN0aW9u IGFuZCBzdGlsbCBoYXZlIGENCj4+IHNlY3VyZSBwcm90b2NvbC4NCj4+DQo+Pg0KPj4NCj4+DQo+ Pg0KPj4NCj4+IE9uIFdlZCwgRmViIDIwLCAyMDE5IGF0IDQ6MDMgQU0gR29uemFsbyBDYW1hcmls bG8gPA0KPj4gZ29uemFsby5jYW1hcmlsbG9AZXJpY3Nzb24uY29tPG1haWx0bzpnb256YWxvLmNh bWFyaWxsb0Blcmljc3Nvbi5jb20+PiB3cm90ZToNCj4+DQo+Pj4gVGhhbmtzLCBHb256YWxvISBQ bGVhc2UsIGxldCB1cyBrbm93IHRoZSBhZ3JlZWQgd2F5IGZvcndhcmQgb25jZSB5b3UNCj4+PiBo YXZlIHRoZSBjYWxsLg0KPj4+DQo+Pj4gQ2hlZXJzLA0KPj4+DQo+Pj4gR29uemFsbw0KPj4+DQo+ Pj4+IE9uIDE5LUZlYi0xOSAyMDowNSwgR29uemFsbyBTYWxndWVpcm8gKGdzYWxndWVpKSB3cm90 ZToNCj4+Pj4gSGkgR29uemFsbyAtDQo+Pj4+DQo+Pj4+IFdlIGhhdmUgc2NoZWR1bGVkIGEgY29u ZmVyZW5jZSBjYWxsIHdpdGggRWtyLCBTaW1vbiwgTWFyYyBhbmQgbXlzZWxmIG9uDQo+Pj4gTWFy Y2ggN3RoIHRvIGRpc2N1c3MgdGhlIGxhc3QgdHdvIHJlbWFpbmluZyBpc3N1ZXMuICBXaWxsIHVw ZGF0ZSB3aXRoDQo+Pj4gcmVzb2x1dGlvbnMgb25jZSB0aGlzIGhhcyBvY2N1cnJlZC4NCj4+Pj4N Cj4+Pj4gQ2hlZXJzLA0KPj4+Pg0KPj4+PiBHb256YWxvDQo+Pj4+DQo+Pj4+DQo+Pj4+DQo+Pj4+ PiBPbiBGZWIgMTgsIDIwMTksIGF0IDg6MTggQU0sIEdvbnphbG8gQ2FtYXJpbGxvIDwNCj4+PiBH b256YWxvLkNhbWFyaWxsb0Blcmljc3Nvbi5jb208bWFpbHRvOkdvbnphbG8uQ2FtYXJpbGxvQGVy aWNzc29uLmNvbT4+IHdyb3RlOg0KPj4+Pj4NCj4+Pj4+IEhpIEdvbnphbG8gUywNCj4+Pj4+DQo+ Pj4+PiB3aGF0IGlzIHRoZSBzdGF0dXMgb2YgdGhpcyBvbmU/DQo+Pj4+Pg0KPj4+Pj4gVGhhbmtz LA0KPj4+Pj4NCj4+Pj4+IEdvbnphbG8NCj4+Pj4+DQo+Pj4+Pj4gT24gMTgtSmFuLTE5IDIwOjE2 LCBHb256YWxvIFNhbGd1ZWlybyAoZ3NhbGd1ZWkpIHdyb3RlOg0KPj4+Pj4+IFRvdGFsbHkgYWdy ZWUsIEVrci4gIE1hcmMgYW5kIEkgYXJlIG1lZXRpbmcgdG8gY29tZSB1cCB3aXRoIGEgcHJvcG9z YWwNCj4+Pj4+PiBidXQgSSBkbyBhZ3JlZSB3ZSBuZWVkIHRvIGhhdmUgYSBjYWxsIHRvIGdldCB0 aGlzIHB1dCB0byBiZWQgb25jZSBhbmQNCj4+Pj4+PiBmb3IgYWxsLiAgV2XigJlsbCBvZmZlciBz b21lIHBvdGVudGlhbCBkYXRlcyBpbiB0aGUgbmV4dCAyLTMgd2Vla3MuDQo+Pj4+Pj4NCj4+Pj4+ PiBDaGVlcnMsDQo+Pj4+Pj4NCj4+Pj4+PiBHb256YWxvDQo+Pj4+Pj4NCj4+Pj4+Pg0KPj4+Pj4+ PiBPbiBEZWMgMjYsIDIwMTgsIGF0IDg6MDUgUE0sIEVyaWMgUmVzY29ybGEgPGVrckBydGZtLmNv bTxtYWlsdG86ZWtyQHJ0Zm0uY29tPg0KPj4+Pj4+PiA8bWFpbHRvOmVrckBydGZtLmNvbTxtYWls dG86ZWtyQHJ0Zm0uY29tPj4+IHdyb3RlOg0KPj4+Pj4+Pg0KPj4+Pj4+PiBXZSByZWFsbHkgbmVl ZCB0byBicmluZyB0aGlzIHRvIGEgY2xvc2UgYmVmb3JlIGJvdGggU3BlbmNlciBhbmQgSQ0KPj4+ IHN0ZXANCj4+Pj4+Pj4gZG93biwgSSBzaG91bGQgdGhpbmsuDQo+Pj4+Pj4+DQo+Pj4+Pj4+IC1F a3INCj4+Pj4+Pj4NCj4+Pj4+Pj4NCj4+Pj4+Pj4gT24gVGh1LCBOb3YgMjIsIDIwMTggYXQgNDoz MCBBTSBHb256YWxvIENhbWFyaWxsbw0KPj4+Pj4+PiA8Z29uemFsby5jYW1hcmlsbG9AZXJpY3Nz b24uY29tPG1haWx0bzpnb256YWxvLmNhbWFyaWxsb0Blcmljc3Nvbi5jb20+DQo+Pj4+Pj4+IDxt YWlsdG86Z29uemFsby5jYW1hcmlsbG9AZXJpY3Nzb24uY29tPG1haWx0bzpnb256YWxvLmNhbWFy aWxsb0Blcmljc3Nvbi5jb20+Pj4gd3JvdGU6DQo+Pj4+Pj4+DQo+Pj4+Pj4+ICAgRXJpYywgU3Bl bmNlciwgdGhhbmtzIGZvciB0aGUgc3RhdHVzIHVwZGF0ZSENCj4+Pj4+Pj4NCj4+Pj4+Pj4gICBB dXRob3JzLCBjb3VsZCB5b3UgcGxlYXNlIGxldCB1cyBrbm93IHdoZW4geW91IHBsYW4gdG8gZ2V0 IHRvDQo+Pj4gdGhpcz8NCj4+Pj4+Pj4NCj4+Pj4+Pj4gICBHb256YWxvDQo+Pj4+Pj4+DQo+Pj4+ Pj4+PiAgIE9uIDE5LU5vdi0xOCAyMzowNCwgU3BlbmNlciBEYXdraW5zIGF0IElFVEYgd3JvdGU6 DQo+Pj4+Pj4+PiBIaSwgR29uemFsbywNCj4+Pj4+Pj4+IE9uIE1vbiwgTm92IDE5LCAyMDE4IGF0 IDk6MDYgQU0gRXJpYyBSZXNjb3JsYSA8ZWtyQHJ0Zm0uY29tPG1haWx0bzpla3JAcnRmbS5jb20+ DQo+Pj4+Pj4+ICAgPG1haWx0bzpla3JAcnRmbS5jb208bWFpbHRvOmVrckBydGZtLmNvbT4+DQo+ Pj4+Pj4+PiA8bWFpbHRvOmVrckBydGZtLmNvbTxtYWlsdG86ZWtyQHJ0Zm0uY29tPiA8bWFpbHRv OmVrckBydGZtLmNvbTxtYWlsdG86ZWtyQHJ0Zm0uY29tPj4+PiB3cm90ZToNCj4+Pj4+Pj4+DQo+ Pj4+Pj4+PiAgICAgTm90IHJlYWxseS4gSSBoYXZlIG5vdCByZWNlaXZlZCBhbnkgcmVzcG9uc2Ug dG8gbXkgbWFpbCBvZg0KPj4+Pj4+PiAgIE9jdCAyMy4NCj4+Pj4+Pj4+ICAgICBBcyBiZWZvcmUs IEknbSBoYXBweSB0byBoYXZlIGEgY2FsbCwgYnV0IEkgYmVsaWV2ZSB3ZSdyZQ0KPj4+Pj4+PiAg IHJlYWNoaW5nDQo+Pj4+Pj4+PiAgICAgdGhlIGxpbWl0cyBvZiB3aGF0IGNhbiBiZSBhY2NvbXBs aXNoZWQgYnkgZW1haWwuDQo+Pj4+Pj4+Pg0KPj4+Pj4+Pj4NCj4+Pj4+Pj4+IEVyaWMgd291bGQg a25vdyBiZXN0IChpdCBiZWluZyBoaXMgRGlzY3VzcyksIGJ1dCB0aGlzIGlzIGFsc28gbXkNCj4+ Pj4+Pj4+IHVuZGVyc3RhbmRpbmcuDQo+Pj4+Pj4+Pg0KPj4+Pj4+Pj4gSSBjYW4gYWRkIHRoaXMg dG8gdGhlIGFnZW5kYSBvZiB0aGUgSUVTRyBpbmZvcm1hbCB0ZWxlY2hhdCBvbg0KPj4+Pj4+PiAg IE5vdmVtYmVyDQo+Pj4+Pj4+PiAyOSwgaWYgdGhlcmUgaGFzbid0IGJlZW4gYSBjYWxsIGJlZm9y ZSB0aGVuLCBidXQgSSBkb24ndCBoYXZlIGENCj4+Pj4+Pj4gICByZWFzb24NCj4+Pj4+Pj4+IHRv IHdhaXQgdW50aWwgdGhlbiwgaWYgaXQncyBwb3NzaWJsZSB0byB0YWxrIHNvb25lci4NCj4+Pj4+ Pj4+DQo+Pj4+Pj4+PiBUaGFua3MsDQo+Pj4+Pj4+Pg0KPj4+Pj4+Pj4gU3BlbmNlcg0KPj4+Pj4+ Pj4NCj4+Pj4+Pj4+DQo+Pj4+Pj4+Pg0KPj4+Pj4+Pj4gICAgIC1Fa3INCj4+Pj4+Pj4+DQo+Pj4+ Pj4+Pg0KPj4+Pj4+Pj4gICAgIE9uIE1vbiwgTm92IDE5LCAyMDE4IGF0IDY6MzUgQU0gR29uemFs byBDYW1hcmlsbG8NCj4+Pj4+Pj4+ICAgICA8Z29uemFsby5jYW1hcmlsbG9AZXJpY3Nzb24uY29t PG1haWx0bzpnb256YWxvLmNhbWFyaWxsb0Blcmljc3Nvbi5jb20+DQo+Pj4+Pj4+ICAgPG1haWx0 bzpnb256YWxvLmNhbWFyaWxsb0Blcmljc3Nvbi5jb208bWFpbHRvOmdvbnphbG8uY2FtYXJpbGxv QGVyaWNzc29uLmNvbT4+DQo+Pj4+Pj4+PiAgICAgPG1haWx0bzpnb256YWxvLmNhbWFyaWxsb0Bl cmljc3Nvbi5jb208bWFpbHRvOmdvbnphbG8uY2FtYXJpbGxvQGVyaWNzc29uLmNvbT4NCj4+Pj4+ Pj4gICA8bWFpbHRvOmdvbnphbG8uY2FtYXJpbGxvQGVyaWNzc29uLmNvbTxtYWlsdG86Z29uemFs by5jYW1hcmlsbG9AZXJpY3Nzb24uY29tPj4+PiB3cm90ZToNCj4+Pj4+Pj4+DQo+Pj4+Pj4+PiAg ICAgICAgIEhpIFNwZW5jZXIsDQo+Pj4+Pj4+Pg0KPj4+Pj4+Pj4gICAgICAgICB3aGF0IGlzIHRo ZSBzdGF0dXMgb2YgdGhpcz8gQXJlIHRoZSBhdXRob3JzIGFuZCB0aGUNCj4+PiBkb2N1bWVudA0K Pj4+Pj4+Pj4gICAgICAgICBzaGVwaGVyZA0KPj4+Pj4+Pj4gICAgICAgICB3b3JraW5nIHdpdGgg dGhlIHJlbGV2YW50IEFEcyBvbiB0aGUgZGlzY3Vzc2VzPw0KPj4+Pj4+Pj4NCj4+Pj4+Pj4+DQo+ Pj4+Pj4+DQo+Pj4gaHR0cHM6Ly9kYXRhdHJhY2tlci5pZXRmLm9yZy9kb2MvZHJhZnQtaWV0Zi10 cmFtLXN0dW4tcG10dWQvYmFsbG90Lw0KPj4+Pj4+Pj4NCj4+Pj4+Pj4+ICAgICAgICAgQ2hlZXJz LA0KPj4+Pj4+Pj4NCj4+Pj4+Pj4+ICAgICAgICAgR29uemFsbw0KPj4+Pj4+Pj4NCj4+Pj4+Pj4+ PiAgICAgICAgIE9uIDI0LU9jdC0xOCAxNjo0MCwgU3BlbmNlciBEYXdraW5zIGF0IElFVEYgd3Jv dGU6DQo+Pj4+Pj4+Pj4gSGksIE1hcmMsDQo+Pj4+Pj4+Pj4NCj4+Pj4+Pj4+PiBPbiBXZWQsIE9j dCAyNCwgMjAxOCBhdCAzOjQ0IEFNIE1hcmMgUGV0aXQtSHVndWVuaW4NCj4+Pj4+Pj4+ICAgICAg ICAgPHBldGl0aHVnQGFjbS5vcmc8bWFpbHRvOnBldGl0aHVnQGFjbS5vcmc+IDxtYWlsdG86cGV0 aXRodWdAYWNtLm9yZzxtYWlsdG86cGV0aXRodWdAYWNtLm9yZz4+DQo+Pj4+Pj4+ICAgPG1haWx0 bzpwZXRpdGh1Z0BhY20ub3JnPG1haWx0bzpwZXRpdGh1Z0BhY20ub3JnPiA8bWFpbHRvOnBldGl0 aHVnQGFjbS5vcmc8bWFpbHRvOnBldGl0aHVnQGFjbS5vcmc+Pj4NCj4+Pj4+Pj4+PiA8bWFpbHRv OnBldGl0aHVnQGFjbS5vcmc8bWFpbHRvOnBldGl0aHVnQGFjbS5vcmc+IDxtYWlsdG86cGV0aXRo dWdAYWNtLm9yZzxtYWlsdG86cGV0aXRodWdAYWNtLm9yZz4+DQo+Pj4+Pj4+ICAgPG1haWx0bzpw ZXRpdGh1Z0BhY20ub3JnPG1haWx0bzpwZXRpdGh1Z0BhY20ub3JnPiA8bWFpbHRvOnBldGl0aHVn QGFjbS5vcmc8bWFpbHRvOnBldGl0aHVnQGFjbS5vcmc+Pj4+PiB3cm90ZToNCj4+Pj4+Pj4+Pg0K Pj4+Pj4+Pj4+ICAgIEhpIFNwZW5jZXIsDQo+Pj4+Pj4+Pj4NCj4+Pj4+Pj4+PiAgICBJIHNlbnQg bXkgYW5zd2VycyB0byBFcmljIFJlc2NvcmxhIHF1ZXN0aW9ucyBvbg0KPj4+Pj4+PiAgIDIwMTgt MTAtMDcNCj4+Pj4+Pj4+ICAgICAgICAgZm9sbG93aW5nDQo+Pj4+Pj4+Pj4gICAgYW4gaW4tcGVy c29uIG1lZXRpbmcgd2l0aCBteSBjby1hdXRob3IsIGJ1dCBuZXZlcg0KPj4+Pj4+PiAgIGdvdCBh DQo+Pj4+Pj4+PiAgICAgICAgIHJlc3BvbnNlDQo+Pj4+Pj4+Pj4gICAgYmFjay4gIEJlY2F1c2Ug dGhlcmUgd2FzIG5vIGNoYW5nZSBwcm9wb3NlZCBieQ0KPj4+Pj4+PiAgIEVyaWMgSSB3ZW50DQo+ Pj4+Pj4+PiAgICAgICAgIGFoZWFkIGFuZA0KPj4+Pj4+Pj4+ICAgIHB1Ymxpc2hlZCAtMTkgYSBj b3VwbGUgb2Ygd2Vla3MgYWZ0ZXIgdGhhdCwgd2l0aA0KPj4+Pj4+PiAgIHRoZSB0ZXh0DQo+Pj4+ Pj4+PiAgICAgICAgIGFncmVlZCBpbg0KPj4+Pj4+Pj4+ICAgIHJlc3BvbnNlIHRvIEFkYW0ncyBh bmQgQmVuamFtaW4ncyBjb21tZW50cy4NCj4+Pj4+Pj4+Pg0KPj4+Pj4+Pj4+DQo+Pj4+Pj4+Pg0K Pj4+Pj4+Pg0KPj4+IGh0dHBzOi8vd3d3LmlldGYub3JnL21haWwtYXJjaGl2ZS93ZWIvdHJhbS9j dXJyZW50L21zZzAyNjM1Lmh0bWwNCj4+Pj4+Pj4+Pg0KPj4+Pj4+Pj4+DQo+Pj4+Pj4+Pj4gQWgg LSBJIHdvbmRlciBpZiB0aGF0IHdhcyB3aGF0IGhhZCBoYXBwZW5lZC4NCj4+Pj4+Pj4+Pg0KPj4+ Pj4+Pj4+IEl0IHNvdW5kcyBsaWtlIHlvdSBkaWQgdGhlIHJpZ2h0IHRoaW5nLCBhbmQgdGhhdCBF cmljDQo+Pj4+Pj4+ICAgaGFzIG5vdw0KPj4+Pj4+Pj4gICAgICAgICByZXNwb25kZWQsDQo+Pj4+ Pj4+Pj4gd2hpY2ggaXMgYWxzbyB0aGUgcmlnaHQgdGhpbmcgdG8gZG8uDQo+Pj4+Pj4+Pj4NCj4+ Pj4+Pj4+PiBUaGFua3MgZm9yIGhlbHBpbmcgbWUgdW5kZXJzdGFuZC4NCj4+Pj4+Pj4+Pg0KPj4+ Pj4+Pj4+IFNwZW5jZXINCj4+Pj4+Pj4+Pg0KPj4+Pj4+Pj4+DQo+Pj4+Pj4+Pj4+ICAgIE9uIDEw LzIzLzE4IDc6MjggUE0sIFNwZW5jZXIgRGF3a2lucyBhdCBJRVRGIHdyb3RlOg0KPj4+Pj4+Pj4+ PiBIaSwgTWFyYywNCj4+Pj4+Pj4+Pj4NCj4+Pj4+Pj4+Pj4gSSBzZWUgdGhhdCBhIC0xOSBoYXMg YmVlbiBzdWJtaXR0ZWQsIGJ1dCBkaWRuJ3QNCj4+Pj4+Pj4gICBzZWUgYQ0KPj4+Pj4+Pj4gICAg ICAgICByZXBseSBmcm9tDQo+Pj4+Pj4+Pj4gICAgRXJpYyBpbg0KPj4+Pj4+Pj4+PiB0aGlzIHRo cmVhZC4gRG8geW91IHRoaW5rIHRoYXQgeW91J3ZlIGNvbnZlcmdlZD8NCj4+Pj4+Pj4+Pj4NCj4+ Pj4+Pj4+Pj4gKEkgc2F3IGFuIG9mZmVyIG9mIGEgY29uZmVyZW5jZSBjYWxsLCBzbyB0aG91Z2h0 IGFuDQo+Pj4+Pj4+PiAgICAgICAgIG91dC1vZi1iYW5kDQo+Pj4+Pj4+Pj4+IGNvbnZlcnNhdGlv biBtaWdodCBoYXZlIGhhcHBlbmVkKQ0KPj4+Pj4+Pj4+Pg0KPj4+Pj4+Pj4+PiBUaGFua3MsDQo+ Pj4+Pj4+Pj4+DQo+Pj4+Pj4+Pj4+IFNwZW5jZXINCj4+Pj4+Pj4+Pj4NCj4+Pj4+Pj4+Pj4gT24g U3VuLCBPY3QgNywgMjAxOCBhdCA5OjM1IEFNIE1hcmMgUGV0aXQtSHVndWVuaW4NCj4+Pj4+Pj4+ PiAgICA8cGV0aXRodWdAYWNtLm9yZzxtYWlsdG86cGV0aXRodWdAYWNtLm9yZz4gPG1haWx0bzpw ZXRpdGh1Z0BhY20ub3JnPG1haWx0bzpwZXRpdGh1Z0BhY20ub3JnPj4NCj4+Pj4+Pj4gICA8bWFp bHRvOnBldGl0aHVnQGFjbS5vcmc8bWFpbHRvOnBldGl0aHVnQGFjbS5vcmc+IDxtYWlsdG86cGV0 aXRodWdAYWNtLm9yZzxtYWlsdG86cGV0aXRodWdAYWNtLm9yZz4+Pg0KPj4+Pj4+Pj4gICAgICAg ICA8bWFpbHRvOnBldGl0aHVnQGFjbS5vcmc8bWFpbHRvOnBldGl0aHVnQGFjbS5vcmc+IDxtYWls dG86cGV0aXRodWdAYWNtLm9yZzxtYWlsdG86cGV0aXRodWdAYWNtLm9yZz4+DQo+Pj4+Pj4+ICAg PG1haWx0bzpwZXRpdGh1Z0BhY20ub3JnPG1haWx0bzpwZXRpdGh1Z0BhY20ub3JnPiA8bWFpbHRv OnBldGl0aHVnQGFjbS5vcmc8bWFpbHRvOnBldGl0aHVnQGFjbS5vcmc+Pj4+PiB3cm90ZToNCj4+ Pj4+Pj4+Pj4NCj4+Pj4+Pj4+Pj4+IEhpIEVyaWMsDQo+Pj4+Pj4+Pj4+Pg0KPj4+Pj4+Pj4+Pj4g UGxlYXNlIHNlZSBpbmxpbmUuDQo+Pj4+Pj4+Pj4+Pg0KPj4+Pj4+Pj4+Pj4+IE9uIDA5LzEwLzIw MTggMDM6MjUgQU0sIEVyaWMgUmVzY29ybGEgd3JvdGU6DQo+Pj4+Pj4+Pj4+Pj4gT24gU2F0LCBT ZXAgOCwgMjAxOCBhdCAyOjMxIFBNLCBNYXJjDQo+Pj4+Pj4+ICAgUGV0aXQtSHVndWVuaW4NCj4+ Pj4+Pj4+PiAgICA8cGV0aXRodWdAYWNtLm9yZzxtYWlsdG86cGV0aXRodWdAYWNtLm9yZz4gPG1h aWx0bzpwZXRpdGh1Z0BhY20ub3JnPG1haWx0bzpwZXRpdGh1Z0BhY20ub3JnPj4NCj4+Pj4+Pj4g ICA8bWFpbHRvOnBldGl0aHVnQGFjbS5vcmc8bWFpbHRvOnBldGl0aHVnQGFjbS5vcmc+IDxtYWls dG86cGV0aXRodWdAYWNtLm9yZzxtYWlsdG86cGV0aXRodWdAYWNtLm9yZz4+Pg0KPj4+Pj4+Pj4g ICAgICAgICA8bWFpbHRvOnBldGl0aHVnQGFjbS5vcmc8bWFpbHRvOnBldGl0aHVnQGFjbS5vcmc+ IDxtYWlsdG86cGV0aXRodWdAYWNtLm9yZzxtYWlsdG86cGV0aXRodWdAYWNtLm9yZz4+DQo+Pj4+ Pj4+ICAgPG1haWx0bzpwZXRpdGh1Z0BhY20ub3JnPG1haWx0bzpwZXRpdGh1Z0BhY20ub3JnPiA8 bWFpbHRvOnBldGl0aHVnQGFjbS5vcmc8bWFpbHRvOnBldGl0aHVnQGFjbS5vcmc+Pj4+Pg0KPj4+ Pj4+Pj4+Pj4+IHdyb3RlOg0KPj4+Pj4+Pj4+Pj4+DQo+Pj4+Pj4+Pj4+Pj4+IEhpIEVyaWMsDQo+ Pj4+Pj4+Pj4+Pj4+DQo+Pj4+Pj4+Pj4+Pj4+IEFwb2xvZ2llcyBmb3IgdGhlIGRlbGF5IGluIGdl dHRpbmcgYmFjayB0byB0aGF0Lg0KPj4+Pj4+Pj4+Pj4+Pg0KPj4+Pj4+Pj4+Pj4+PiBJIHRoaW5r IHRoYXQgdGhlcmUgaXMgc29tZSBtaXN1bmRlcnN0YW5kaW5nDQo+Pj4+Pj4+ICAgaW4gd2hhdA0K Pj4+Pj4+Pj4gICAgICAgICBTVFVOYmlzIGlzDQo+Pj4+Pj4+Pj4gICAgdHJ5aW5nIHRvDQo+Pj4+ Pj4+Pj4+Pj4+IGRvLCBzbyBwbGVhc2Ugc2VlIG15IGNvbW1lbnRzIGlubGluZS4NCj4+Pj4+Pj4+ Pj4+Pj4NCj4+Pj4+Pj4+Pj4+Pj4+IE9uIDA2LzE4LzIwMTggMTA6NDMgQU0sIEVyaWMgUmVzY29y bGEgd3JvdGU6DQo+Pj4+Pj4+Pj4+Pj4+PiBIaSBmb2xrcywNCj4+Pj4+Pj4+Pj4+Pj4+DQo+Pj4+ Pj4+Pj4+Pj4+PiBJJ3ZlIHJldmlld2VkIHRoZSBuZXcgdmVyc2lvbiwgYnV0IEkgZG9uJ3QNCj4+ PiB0aGluaw0KPj4+Pj4+Pj4gICAgICAgICB0aGF0IHRoZSBiaWRkb3duDQo+Pj4+Pj4+Pj4+Pj4+ PiBkaXNjdXNzaW9uIG1ha2VzIG11Y2ggc2Vuc2UuDQo+Pj4+Pj4+Pj4+Pj4+Pg0KPj4+Pj4+Pj4+ Pj4+Pj4gVG8gcmVjYXAsIHRoZXJlIGFyZSB0d28gaGFzaGVzIGhlcmU6DQo+Pj4+Pj4+Pj4+Pj4+ Pg0KPj4+Pj4+Pj4+Pj4+Pj4gLSBUaGUgaGFzaCB3aGljaCB5b3UgdXNlIHRvIHN0b3JlIHRoZQ0K Pj4+Pj4+PiAgIHBhc3N3b3JkIHdpdGgNCj4+Pj4+Pj4+ICAgICAgICAgKGN1cnJlbnRseQ0KPj4+ Pj4+Pj4+ICAgIG1vc3RseQ0KPj4+Pj4+Pj4+Pj4+PiBNRDUpDQo+Pj4+Pj4+Pj4+Pj4+PiAtIFRo ZSBoYXNoIHlvdSB1c2UgdG8gY29tcHV0ZSB0aGUgTUFDDQo+Pj4+Pj4+ICAgKGN1cnJlbnRseSBT SEEtMSkuDQo+Pj4+Pj4+Pj4+Pj4+Pg0KPj4+Pj4+Pj4+Pj4+Pj4gRmlyc3QsIGxldCdzIHN0aXB1 bGF0ZSB0aGF0IE1ENSBpc24ndCBhDQo+Pj4+Pj4+ICAgZ3JlYXQgY2hvaWNlDQo+Pj4+Pj4+PiAg ICAgICAgIGhlcmUsDQo+Pj4+Pj4+Pj4gICAgdGhvdWdoIFNIQS0xDQo+Pj4+Pj4+Pj4+Pj4+PiBp c24ndCBhIGdyZWF0IGNob2ljZQ0KPj4+Pj4+Pj4+Pj4+Pj4gZWl0aGVyIGZvciBwd2QgaGFzaGlu ZyBZb3Ugd2FudCBBcmdvbiBvciB0aGUNCj4+Pj4+Pj4gICBsaWtlLg0KPj4+Pj4+Pj4gICAgICAg ICBXaXRoIHRoYXQgc2FpZCwNCj4+Pj4+Pj4+Pj4+Pj4gdGhlcmUncw0KPj4+Pj4+Pj4+Pj4+Pj4g bm8gc2Vuc2libGUNCj4+Pj4+Pj4+Pj4+Pj4+IGJpZGRvd24gYXR0YWNrIG9uIHRoYXQgaGFzaCBi ZWNhdXNlIGl0J3MgYQ0KPj4+Pj4+Pj4gICAgICAgICBwZXItc2VydmVyIGZlYXR1cmUsDQo+Pj4+ Pj4+Pj4gICAgbm90IGENCj4+Pj4+Pj4+Pj4+Pj4+IHBlci10cmFuc2FjdGlvbg0KPj4+Pj4+Pj4+ Pj4+Pj4gZmVhdHVyZS4gU28sIGFzIGxvbmcgYXMgdGhlIHNlcnZlciBoYXMNCj4+Pj4+Pj4gICBN RDUtaGFzaGVkDQo+Pj4+Pj4+PiAgICAgICAgIHBhc3N3b3JkcywgdGhlDQo+Pj4+Pj4+Pj4+Pj4+ IHNpdHVhdGlvbg0KPj4+Pj4+Pj4+Pj4+Pj4gaXMgYmFkLg0KPj4+Pj4+Pj4+Pj4+Pg0KPj4+Pj4+ Pj4+Pj4+PiBJbiBubyBwbGFjZSBpbiBTVFVOYmlzIHdlIGFyZSBwcm9wb3NpbmcgdG8NCj4+Pj4+ Pj4gICB1c2UgU0hBLTENCj4+Pj4+Pj4+ICAgICAgICAgZm9yIHBhc3N3b3JkDQo+Pj4+Pj4+Pj4+ Pj4+IGVuY3J5cHRpb24sIHNvIEkgYW0gbm90IHN1cmUgd2hlcmUgdGhhdCBjb21lDQo+Pj4+Pj4+ ICAgZnJvbS4NCj4+Pj4+Pj4+ICAgICAgICAgV2hhdCB3ZQ0KPj4+Pj4+Pj4+ICAgIHByb3Bvc2Ug aXM6DQo+Pj4+Pj4+Pj4+Pj4+DQo+Pj4+Pj4+Pj4+Pj4NCj4+Pj4+Pj4+Pj4+PiBZb3UncmUgcmln aHQsIGl0J3MgU0hBLTI1NiwgYnV0IG15IGNyaXRpY2lzbXMNCj4+Pj4+Pj4gICBhcHBseQ0KPj4+ Pj4+Pj4gICAgICAgICBlcXVhbGx5IHRoZXJlLg0KPj4+Pj4+Pj4+Pj4NCj4+Pj4+Pj4+Pj4+IFNI QS0yNTYgd2FzIHdoYXQgdGhlIFdHIGFkb3B0ZWQuICBPdXIgYXR0ZW1wdHMNCj4+Pj4+Pj4gICB0 byBhZGQNCj4+Pj4+Pj4+ICAgICAgICAgb3RoZXIgcGFzc3dvcmRzDQo+Pj4+Pj4+Pj4+PiBlbmNy eXB0aW9uIG1lY2hhbmlzbXMgd2VyZSBkZW5pZWQuICBJdCBpcyB0cnVlDQo+Pj4gdGhhdA0KPj4+ Pj4+Pj4gICAgICAgICBBcmdvbjIgd2FzDQo+Pj4+Pj4+Pj4gICAgbm90IGluIHRoYXQNCj4+Pj4+ Pj4+Pj4+IGxpc3QgKGluIG91ciBkZWZlbnNlIEFyZ29uMiB3YXMgbm90IGtub3duDQo+Pj4+Pj4+ ICAgYmVmb3JlIEp1bHkNCj4+Pj4+Pj4+ICAgICAgICAgMjAxNSksIGJ1dA0KPj4+Pj4+Pj4+ICAg IEkgZG8gbm90DQo+Pj4+Pj4+Pj4+PiBzZWUgd2h5IHRoZSBXRyB3b3VsZCBoYXZlIGFjY2VwdGVk IHRoYXQgb25lDQo+Pj4+Pj4+ICAgb3ZlciB0aGUNCj4+Pj4+Pj4+ICAgICAgICAgb3RoZXJzLg0K Pj4+Pj4+Pj4+ICAgIEFueXdheSBpdCBpcw0KPj4+Pj4+Pj4+Pj4gdG9vIGxhdGUgdG8gZml4IHRo aXMsIGFzIGl0IGlzIG15IHVuZGVyc3RhbmRpbmcNCj4+Pj4+Pj4gICB0aGF0DQo+Pj4+Pj4+PiAg ICAgICAgIHRoZSBXRyBkb2VzDQo+Pj4+Pj4+Pj4gICAgbm90IGhhdmUNCj4+Pj4+Pj4+Pj4+IGVu b3VnaCBlbmVyZ3kgdG8gcmVhY2ggY29uc2Vuc3VzIG9uIGEgbmV3IHBhc3N3b3JkDQo+Pj4+Pj4+ PiAgICAgICAgIGFsZ29yaXRobS4NCj4+Pj4+Pj4+PiAgICBTb21lb25lIGNhbg0KPj4+Pj4+Pj4+ Pj4ganVzdCB3cml0ZSBhIGRyYWZ0IGFkZGluZyBBcmdvbjIgYXMgcGFzc3dvcmQNCj4+Pj4+Pj4+ ICAgICAgICAgZW5jcnlwdGlvbiwgYXMgd2UNCj4+Pj4+Pj4+PiAgICB3aWxsIGhhdmUgYQ0KPj4+ Pj4+Pj4+Pj4gSUFOQSByZWdpc3RyeSBmb3IgdGhhdC4NCj4+Pj4+Pj4+Pj4+DQo+Pj4+Pj4+Pj4+ Pj4NCj4+Pj4+Pj4+Pj4+Pg0KPj4+Pj4+Pj4+Pj4+PiAtIEVzdGFibGlzaCBhIHJlZ2lzdHJ5IGZv ciBuZXcgcGFzc3dvcmQNCj4+Pj4+Pj4gICBhbGdvcml0aG1zDQo+Pj4+Pj4+PiAgICAgICAgIChz ZWN0aW9uDQo+Pj4+Pj4+Pj4gICAgMTguNSksIHNvDQo+Pj4+Pj4+Pj4+Pj4+IGFsZ29yaXRobXMg bGlrZSBBcmdvbjIgY291bGQgYmUgYWRkZWQgbGF0ZXINCj4+Pj4+Pj4gICAoYnV0IG5vdGUNCj4+ Pj4+Pj4+ICAgICAgICAgdGhhdCBvdXIgb3duDQo+Pj4+Pj4+Pj4+Pj4+IHByb3Bvc2FscyB0byBh ZGQgbW9yZSBwYXNzd29yZCBhbGdvcml0aG1zIHdlcmUNCj4+Pj4+Pj4+ICAgICAgICAgcmVqZWN0 ZWQgYnkgdGhlDQo+Pj4+Pj4+Pj4gICAgd29ya2luZw0KPj4+Pj4+Pj4+Pj4+PiBncm91cCkuDQo+ Pj4+Pj4+Pj4+Pj4+IC0gQWRkIGEgbmV3IHBhc3N3b3JkIGFsZ29yaXRobSB0byB0aGF0IHJlZ2lz dHJ5LA0KPj4+Pj4+Pj4gICAgICAgICBuYW1lbHkgU0hBLTI1Ni4NCj4+Pj4+Pj4+Pj4+Pj4gLSBS ZWdpc3RlciBNRDUgYXMgYW4gaW5pdGlhbCBwYXNzd29yZA0KPj4+Pj4+PiAgIGFsZ29yaXRobSBm b3INCj4+Pj4+Pj4+ICAgICAgICAgYmFja3dhcmQNCj4+Pj4+Pj4+Pj4+IGNvbXBhdGliaWxpdHkN Cj4+Pj4+Pj4+Pj4+Pj4gcHVycG9zZS4NCj4+Pj4+Pj4+Pj4+Pj4NCj4+Pj4+Pj4+Pj4+Pj4gQXMg Zm9yIHRoZSBiaWRkb3duIHByb3RlY3Rpb24gaXRzZWxmLCBpdCBpcyBteQ0KPj4+Pj4+Pj4gICAg ICAgICByZWNvbGxlY3Rpb24gdGhhdCBpdA0KPj4+Pj4+Pj4+Pj4+PiBoYXBwZW5lZCBtb3JlIG9y IGxlc3MgbGlrZSB0aGF0Og0KPj4+Pj4+Pj4+Pj4+Pg0KPj4+Pj4+Pj4+Pj4+Pg0KPj4+Pj4+Pj4+ Pj4+PiBJTlQuIE1FRVRJTkcgUk9PTSAtIERBWQ0KPj4+Pj4+Pj4+Pj4+Pg0KPj4+Pj4+Pj4+Pj4+ PiBPbmUgb2YgdGhlIGNvLWVkaXRvcnMgb2YgU1RVTkJpcyBzdGFuZHMgYXQgdGhlDQo+Pj4+Pj4+ PiAgICAgICAgIG1pY3JvcGhvbmU6DQo+Pj4+Pj4+Pj4+Pj4+DQo+Pj4+Pj4+Pj4+Pj4+ICAgICAg ICAgICAgICAgICAgICAgICAgICAgQ08tRURJVE9SDQo+Pj4+Pj4+Pj4+Pj4+ICAgICAgICAgICAg ICAgICBXZSBhZGRlZCBTSEEtMjU2IHByb3RlY3Rpb24gZm9yDQo+Pj4+Pj4+PiAgICAgICAgIHBh c3N3b3Jkcw0KPj4+Pj4+Pj4+Pj4+PiAgICAgICAgICAgICAgICAgaW4gU1RVTkJpcy4NCj4+Pj4+ Pj4+Pj4+Pj4NCj4+Pj4+Pj4+Pj4+Pj4gICAgICAgICAgICAgICAgICAgICAgICAgICBTT01FT05F IChWLk8uKQ0KPj4+Pj4+Pj4+Pj4+PiAgICAgICAgICAgICAgICAgQXMgTUQ1IHN0aWxsIG5lZWQg dG8gYmUNCj4+Pj4+Pj4gICBzdXBwb3J0ZWQsDQo+Pj4+Pj4+PiAgICAgICAgIHlvdSBuZWVkIHRv IGFkZA0KPj4+Pj4+Pj4+Pj4+PiAgICAgICAgICAgICAgICAgcHJvdGVjdGlvbiBmb3IgYmlkLWRv d24NCj4+PiBhdHRhY2tzLg0KPj4+Pj4+Pj4+Pj4+Pg0KPj4+Pj4+Pj4+Pj4+PiBDTE9TRS1VUCBv biBDTy1FRElUT1IgUk9MTElORyBISVMgRVlFUw0KPj4+Pj4+Pj4+Pj4+Pg0KPj4+Pj4+Pj4+Pj4+ PiAgICAgICAgICAgICAgICAgICAgICAgICAgIENPLUVESVRPUg0KPj4+Pj4+Pj4+Pj4+PiAgICAg ICAgICAgICAgICAgT0ssIEknbGwgd29yayBvbiB0aGF0Lg0KPj4+Pj4+Pj4+Pj4+Pg0KPj4+Pj4+ Pj4+Pj4+PiBGb3VyIHRvIGVpZ2h0IG1vbnRocyBoYXMgcGFzc2VkLg0KPj4+Pj4+Pj4+Pj4+Pg0K Pj4+Pj4+Pj4+Pj4+PiBJTlQuIEFOT1RIRVIgTUVFVElORyBST09NIC0gREFZDQo+Pj4+Pj4+Pj4+ Pj4+DQo+Pj4+Pj4+Pj4+Pj4+IFRoZSBzYW1lIGNvLWVkaXRvciBvZiBTVFVOQmlzIHN0YW5kcyBh dCB0aGUNCj4+Pj4+Pj4gICBtaWNyb3Bob25lOg0KPj4+Pj4+Pj4+Pj4+Pg0KPj4+Pj4+Pj4+Pj4+ PiAgICAgICAgICAgICAgICAgICAgICAgICAgIENPLUVESVRPUg0KPj4+Pj4+Pj4+Pj4+PiAgICAg ICAgICAgICAgICAgV2UgYWRkZWQgYSBuaWNlIG1lY2hhbmlzbSB0bw0KPj4+Pj4+PiAgIHByZXZl bnQNCj4+Pj4+Pj4+ICAgICAgICAgYmlkLWRvd24NCj4+Pj4+Pj4+Pj4+Pj4gICAgICAgICAgICAg ICAgIGF0dGFja3Mgb24gcGFzc3dvcmRzLiAgQW55DQo+Pj4+Pj4+ICAgY29tbWVudHM/DQo+Pj4+ Pj4+Pj4+Pj4+DQo+Pj4+Pj4+Pj4+Pj4+ICAgICAgICAgICAgICAgICAgICAgICAgICAgVEhFIFJP T00NCj4+Pj4+Pj4+Pj4+Pj4gICAgICAgICAgICAgICAgIChzaWxlbmNlKQ0KPj4+Pj4+Pj4+Pj4+ Pg0KPj4+Pj4+Pj4+Pj4+PiAgICAgICAgICAgICAgICAgICAgICAgICAgIENPLUVESVRPUg0KPj4+ Pj4+Pj4+Pj4+PiAgICAgICAgICAgICAgICAgTW92aW5nIG9uLi4uDQo+Pj4+Pj4+Pj4+Pj4+DQo+ Pj4+Pj4+Pj4+Pj4NCj4+Pj4+Pj4+Pj4+PiBJIGRvbid0IHNlZSBob3cgYW55IG9mIHRoaXMgaXMg cmVsZXZhbnQgdG8gbXkNCj4+Pj4+Pj4+ICAgICAgICAgdGVjaG5pY2FsIHBvaW50cw0KPj4+Pj4+ Pj4+ICAgIGFib3ZlLg0KPj4+Pj4+Pj4+Pj4NCj4+Pj4+Pj4+Pj4+IE15IHBvaW50IHdhcyB0aGF0 IHdlLCB0aGUgY28tZWRpdG9ycywgZGlkIG5vdA0KPj4+Pj4+PiAgIGRlY2lkZSBvbg0KPj4+Pj4+ Pj4gICAgICAgICBhZGRpbmcNCj4+Pj4+Pj4+PiAgICBiaWQtZG93bg0KPj4+Pj4+Pj4+Pj4gcHJv dGVjdGlvbiwgc29tZW9uZSBhc2tlZCB1cyB0byBkbyBzbyBhbmQNCj4+Pj4+Pj4gICBuby1vbmUg aW4gdGhlDQo+Pj4+Pj4+PiAgICAgICAgIFdHIHNhdw0KPj4+Pj4+Pj4+ICAgIGFueSBwcm9ibGVt DQo+Pj4+Pj4+Pj4+PiB3aXRoIHRoYXQuICBUaGUgcmVhc29ucyB0aGF0IHBlcnNvbiB3YW50ZWQg dGhhdA0KPj4+Pj4+PiAgIGFyZSBub3QNCj4+Pj4+Pj4+ICAgICAgICAga25vd24gdG8NCj4+Pj4+ Pj4+PiAgICB1cyBidXQsIGFzDQo+Pj4+Pj4+Pj4+PiB5b3UgaW5zaXN0LCBoZXJlJ3Mgb25lIHJl YXNvbiBJIGNhbiB0aGluayBvZjoNCj4+Pj4+Pj4+Pj4+DQo+Pj4+Pj4+Pj4+PiBJdCBpcyBhIGZh Y3QgdGhhdCwgZm9yIG9wZXJhdGlvbmFsIHJlYXNvbnMsIGENCj4+Pj4+Pj4gICBwYXNzd29yZA0K Pj4+Pj4+Pj4gICAgICAgICBkYXRhYmFzZQ0KPj4+Pj4+Pj4+ICAgIGNhbm5vdCBiZQ0KPj4+Pj4+ Pj4+Pj4gcmUtZW5jcnlwdGVkIGF0IG9uY2UuICBBbHNvIGZvciBvcGVyYXRpb25hbA0KPj4+Pj4+ PiAgIHJlYXNvbnMsDQo+Pj4+Pj4+PiAgICAgICAgIHRoZSBNRDUgcGFzc3dvcmQNCj4+Pj4+Pj4+ Pj4+IGNhbm5vdCBiZSBpbW1lZGlhdGVseSByZW1vdmVkIGZyb20gdGhlIGRhdGFiYXNlDQo+Pj4+ Pj4+ICAgYXMgc29vbg0KPj4+Pj4+Pj4gICAgICAgICB0aGUgdXNlcg0KPj4+Pj4+Pj4+ICAgIHN1 Ym1pdHRlZA0KPj4+Pj4+Pj4+Pj4gYSBuZXcgb25lLiAgSW4gZmFjdCwgYW5kIGZvciBxdWl0ZSBz b21lIHRpbWUsIGJvdGgNCj4+Pj4+Pj4+ICAgICAgICAgZW5jcnlwdGVkDQo+Pj4+Pj4+Pj4gICAg dmFyaWFudHMgb2YNCj4+Pj4+Pj4+Pj4+IHRoZSBzYW1lIHBhc3N3b3JkIG1heSBoYXZlIHRvIGJl IGtlcHQgaW4gdGhhdA0KPj4+Pj4+PiAgIGRhdGFiYXNlLA0KPj4+Pj4+Pj4gICAgICAgICBiZWNh dXNlIGENCj4+Pj4+Pj4+PiAgICBzaW5nbGUNCj4+Pj4+Pj4+Pj4+IHVzZXIgbWF5IHVzZSBhIG1p eCBvZiBkZXZpY2VzLCBzb21lIG9mIHRoZW0NCj4+Pj4+Pj4gICB0aGF0IHVzZSBhbg0KPj4+Pj4+ Pj4gICAgICAgICBSRkMgNTM4OQ0KPj4+Pj4+Pj4+ICAgIGNsaWVudCwNCj4+Pj4+Pj4+Pj4+IHNv bWUgdGhhdCB1c2UgYSBTVFVOYmlzIGNsaWVudC4gIEl0IGlzIHVwIHRvDQo+Pj4+Pj4+ICAgdGhl IFNUVU4NCj4+Pj4+Pj4+ICAgICAgICAgc2VydmVyIG93bmVyIHRvDQo+Pj4+Pj4+Pj4+PiBkZWNp ZGUgaG93IGxvbmcgdGhlIG1pZ3JhdGlvbiB0byBTVFVOYmlzIHdpbGwNCj4+Pj4+Pj4gICB0YWtl IGFuZA0KPj4+Pj4+Pj4gICAgICAgICB3aGVuIGl0DQo+Pj4+Pj4+Pj4gICAgd2lsbCBiZQ0KPj4+ Pj4+Pj4+Pj4gYWNjZXB0YWJsZSB0byByZWplY3QgYWxsIFJGQyA1Mzg5IChpLmUuIE1ENSkNCj4+ Pj4+Pj4gICBjbGllbnRzICh0aGF0DQo+Pj4+Pj4+Pj4gICAgbWlncmF0aW9uIHRpbWUNCj4+Pj4+ Pj4+Pj4+IGNhbiBiZSBwdXJwb3NlbHkgcmVkdWNlZCB0byAwIHNlY29uZHMgYnV0DQo+Pj4+Pj4+ ICAgdGhhdCdzIHRoZQ0KPj4+Pj4+Pj4gICAgICAgICBjaG9pY2UgYW5kDQo+Pj4+Pj4+Pj4+PiBy ZXNwb25zaWJpbGl0eSBvZiB0aGUgb3duZXIgb2YgdGhlIHNlcnZlcikuDQo+Pj4+Pj4+Pj4+Pg0K Pj4+Pj4+Pj4+Pj4gTWVhbndoaWxlIHdlIHN0aWxsIG5lZWQgdG8gYmUgc3VyZSB0aGF0IGlmIHRo ZQ0KPj4+IFNUVU4NCj4+Pj4+Pj4+ICAgICAgICAgY2xpZW50IGlzDQo+Pj4+Pj4+Pj4gICAgaW1w bGVtZW50aW5nDQo+Pj4+Pj4+Pj4+PiBTVFVOYmlzIGl0IHVuY29uZGl0aW9uYWxseSBnZXRzIHRo ZSBhZGRpdGlvbmFsDQo+Pj4+Pj4+PiAgICAgICAgIHByb3RlY3Rpb24gb2YgdGhlIG5ldw0KPj4+ Pj4+Pj4+Pj4gcGFzc3dvcmQgZW5jcnlwdGlvbiBhbGdvcml0aG0uICBUaGF0J3Mgd2hlcmUNCj4+ Pj4+Pj4gICB0aGUgYmlkZG93bg0KPj4+Pj4+Pj4+ICAgIHByb3RlY3Rpb24ga2lja3MNCj4+Pj4+ Pj4+Pj4+IGluLCBieSBwcmV2ZW50aW5nIGFuIG9ubGluZSBhdHRhY2tlciB0byBoYXZlDQo+Pj4+ Pj4+ICAgdGhlIHNlcnZlcg0KPj4+Pj4+Pj4+ICAgIG1pc2lkZW50aWZ5aW5nIGENCj4+Pj4+Pj4+ Pj4+IFNUVU5iaXMgY2xpZW50IGFzIGFuIFJGQyA1Mzg5IGNsaWVudCwgYnkNCj4+Pj4+Pj4gICBw cmV2ZW50aW5nIGFuDQo+Pj4+Pj4+PiAgICAgICAgIG9ubGluZQ0KPj4+Pj4+Pj4+ICAgIGF0dGFj a2VyIHRvDQo+Pj4+Pj4+Pj4+PiBoYXZlIHRoZSBjbGllbnQgbWlzaWRlbnRpZnlpbmcgYSBTVFVO YmlzIHNlcnZlcg0KPj4+Pj4+PiAgIGFzIGENCj4+Pj4+Pj4+ICAgICAgICAgUkZDIDUzODkNCj4+ Pj4+Pj4+PiAgICBzZXJ2ZXIsIGFuZA0KPj4+Pj4+Pj4+Pj4gaGF2aW5nIGJvdGggdGhlbSB1c2Ug dGhlIE1ENSBlbmNyeXB0ZWQgcGFzc3dvcmQNCj4+Pj4+Pj4gICBpbnN0ZWFkDQo+Pj4+Pj4+PiAg ICAgICAgIG9mIHRoZQ0KPj4+Pj4+Pj4+ICAgIFNIQS0yNTYNCj4+Pj4+Pj4+Pj4+IGVuY3J5cHRl ZCBwYXNzd29yZCwgYWxsIG9mIHRoYXQgZWFzaWx5IGRvbmUgYnkNCj4+Pj4+Pj4+ICAgICAgICAg c3RyaXBwaW5nIHRoZQ0KPj4+Pj4+Pj4+ICAgIHVucHJvdGVjdGVkDQo+Pj4+Pj4+Pj4+PiA0MDEg cmVzcG9uc2Ugb2YgdGhlIG5ldyBTVFVOYmlzDQo+Pj4gUEFTU1dPUkQtQUxHT1JJVEhNUw0KPj4+ Pj4+Pj4gICAgICAgICBhdHRyaWJ1dGUuDQo+Pj4+Pj4+Pj4+Pg0KPj4+Pj4+Pj4+Pj4+DQo+Pj4+ Pj4+Pj4+Pj4NCj4+Pj4+Pj4+Pj4+Pg0KPj4+Pj4+Pj4+Pj4+Pj4gVGhlIHNlY29uZCB0b3BpYyBp cyB0aGUgaGFzaCB1c2VkIHRvIGNvbXB1dGUNCj4+PiB0aGUNCj4+Pj4+Pj4+ICAgICAgICAgTUFD LiBIb3dldmVyLA0KPj4+Pj4+Pj4+ICAgIEkgZG9uJ3QNCj4+Pj4+Pj4+Pj4+Pj4gc2VlDQo+Pj4+ Pj4+Pj4+Pj4+PiBob3cNCj4+Pj4+Pj4+Pj4+Pj4+IHRoaXMgZ2l2ZXMgeW91IHNlbnNpYmxlIGJp ZGRvd24gcHJvdGVjdGlvbg0KPj4+Pj4+PiAgIGJlY2F1c2UNCj4+Pj4+Pj4+ICAgICAgICAgdGhh dCBoYXNoDQo+Pj4+Pj4+Pj4gICAgaXMgYWxzbw0KPj4+Pj4+Pj4+Pj4gdXNlZA0KPj4+Pj4+Pj4+ Pj4+Pj4gdG8gY29tcHV0ZQ0KPj4+Pj4+Pj4+Pj4+Pj4gTUFDIG92ZXIgdGhlIG5lZ290aWF0aW9u OiBhbiBhdHRhY2tlciB3aG8gaGFzDQo+Pj4+Pj4+PiAgICAgICAgIGNvbXByb21pc2VkIGENCj4+ Pj4+Pj4+PiAgICBNQUMgd2hpY2gNCj4+Pj4+Pj4+Pj4+IHRoZQ0KPj4+Pj4+Pj4+Pj4+Pj4gc2Vy dmVyDQo+Pj4+Pj4+Pj4+Pj4+PiBzdXBwb3J0cyB3aWxsIHF1aXRlIGxpa2VseSBiZSBhYmxlIHRv IGZvcmdlDQo+Pj4+Pj4+ICAgYSBNQUMNCj4+Pj4+Pj4+ICAgICAgICAgb3ZlciB0aGUNCj4+Pj4+ Pj4+PiAgICB0cmFuc2NyaXB0DQo+Pj4+Pj4+Pj4+PiBhcw0KPj4+Pj4+Pj4+Pj4+Pj4gd2VsbC4g VGhpcyBpcywNCj4+Pj4+Pj4+Pj4+Pj4+IEkgc3VwcG9zZSwgcG90ZW50aWFsbHkgdXNlZnVsIGFz IGEgZGVmZW5zZQ0KPj4+Pj4+PiAgIGFnYWluc3QNCj4+Pj4+Pj4+ICAgICAgICAgc29tZSBvdGhl cg0KPj4+Pj4+Pj4+ICAgIHdlYWtuZXNzDQo+Pj4+Pj4+Pj4+Pj4+PiAoZS5nLiwNCj4+Pj4+Pj4+ Pj4+Pj4+IHZlcnNpb24gIyksIGJ1dCBJIGRvbid0IHJlYWxseSBzZWUgaG93IHRoZQ0KPj4+Pj4+ PiAgIGN1cnJlbnQNCj4+Pj4+Pj4+ICAgICAgICAgZGVzaWduDQo+Pj4+Pj4+Pj4gICAgaGVscHMg YWdhaW5zdA0KPj4+Pj4+Pj4+Pj4+Pj4gYXR0YWNrcyBvbiB0aGUNCj4+Pj4+Pj4+Pj4+Pj4+IE1B Qy4NCj4+Pj4+Pj4+Pj4+Pj4NCj4+Pj4+Pj4+Pj4+Pj4gVGhlcmUgaXMgbm8gYmlkZG93biBhdHRh Y2sgcHJvdGVjdGlvbiBmb3IgdGhlDQo+Pj4+Pj4+ICAgTUFDLCBhcw0KPj4+Pj4+Pj4gICAgICAg ICBzdGF0ZWQgaW4NCj4+Pj4+Pj4+PiAgICBTZWN0aW9uDQo+Pj4+Pj4+Pj4+Pj4+IDE2LjM6DQo+ Pj4+Pj4+Pj4+Pj4+DQo+Pj4+Pj4+Pj4+Pj4+ICJUaGUgYmlkLWRvd24gcHJvdGVjdGlvbiBtZWNo YW5pc20gZGVzY3JpYmVkDQo+Pj4+Pj4+ICAgaW4gdGhpcw0KPj4+Pj4+Pj4gICAgICAgICBkb2N1 bWVudA0KPj4+Pj4+Pj4+ICAgIGlzIG5ldywNCj4+Pj4+Pj4+Pj4+Pj4gYW5kIHRodXMgY2Fubm90 IGN1cnJlbnRseSBwcm90ZWN0IGFnYWluc3QgYQ0KPj4+Pj4+PiAgIGJpZC1kb3duDQo+Pj4+Pj4+ PiAgICAgICAgIGF0dGFjayB0aGF0DQo+Pj4+Pj4+Pj4+Pj4+IGxvd2VycyB0aGUgc3RyZW5ndGgg b2YgdGhlIGhhc2ggYWxnb3JpdGhtIHRvDQo+Pj4+Pj4+ICAgSE1BQy1TSEExLiINCj4+Pj4+Pj4+ Pj4+Pj4NCj4+Pj4+Pj4+Pj4+Pj4gV2hhdCB3ZSBwdXQgaW4gcGxhY2UgaXMgYSBwbGFuIGZvciAq ZnV0dXJlKg0KPj4+Pj4+PiAgIHZlcnNpb25zDQo+Pj4+Pj4+PiAgICAgICAgIG9mIFNUVU4gdG8g Z2V0DQo+Pj4+Pj4+Pj4+Pj4+IGJpZGRvd24gcHJvdGVjdGlvbiBmb3IgdGhlIE1BQy4gIFRoYXQn cyBpdCwNCj4+Pj4+Pj4gICBubyBtb3JlLA0KPj4+Pj4+Pj4gICAgICAgICBubyBsZXNzLg0KPj4+ Pj4+Pj4+Pj4+Pg0KPj4+Pj4+Pj4+Pj4+DQo+Pj4+Pj4+Pj4+Pj4gWWVzLCBidXQgSSBkb24ndCBi ZWxpZXZlIHRoYXQgdGhpcyB3aWxsDQo+Pj4+Pj4+ICAgcHJvdmlkZSBiaWQtZG93bg0KPj4+Pj4+ Pj4+ICAgIHByb3RlY3Rpb24gZm9yDQo+Pj4+Pj4+Pj4+PiB0aGUNCj4+Pj4+Pj4+Pj4+PiBNQUMg aW4gdGhlIGZ1dHVyZSBmb3IgdGhlIHJlYXNvbnMgSSBpbmRpY2F0ZQ0KPj4+Pj4+PiAgIGFib3Zl Lg0KPj4+Pj4+Pj4+Pj4+DQo+Pj4+Pj4+Pj4+Pj4gSWYgeW91IHRoaW5rIHRoaXMgZG9lcyBzb21l dGhpbmcgdXNlZnVsLA0KPj4+Pj4+PiAgIHBsZWFzZSBzaG93IG1lIGFuDQo+Pj4+Pj4+Pj4gICAg ZXhhbXBsZSBhdHRhY2sNCj4+Pj4+Pj4+Pj4+PiBhbmQgaG93IHRoaXMgZml4ZXMgaXQuIE5vdGUg dGhhdCBpdCdzIG5vdA0KPj4+Pj4+PiAgIGdlbmVyYWxseQ0KPj4+Pj4+Pj4gICAgICAgICB1c2Vm dWwgdG8NCj4+Pj4+Pj4+PiAgICBqdXN0IGJpZA0KPj4+Pj4+Pj4+Pj4gZG93bg0KPj4+Pj4+Pj4+ Pj4+IHRoZSBNQUMgaXRzZWxmIHVubGVzcyB0aGUgTUFDIHlvdSBiaWQgZG93biB0bw0KPj4+Pj4+ PiAgIGlzIHdlYWsNCj4+Pj4+Pj4+ICAgICAgICAgZW5vdWdoIHRvDQo+Pj4+Pj4+Pj4gICAgZXhw bG9pdA0KPj4+Pj4+Pj4+Pj4gaW4NCj4+Pj4+Pj4+Pj4+PiBzb21lIG90aGVyIHdheS4NCj4+Pj4+ Pj4+Pj4+DQo+Pj4+Pj4+Pj4+PiBJIGRvIG5vdCBrbm93IHdoYXQgd2Vha25lc3NlcyB3aWxsIGJl DQo+Pj4+Pj4+ICAgZGlzY292ZXJlZCBpbiB0aGUNCj4+Pj4+Pj4+ICAgICAgICAgZnV0dXJlLg0K Pj4+Pj4+Pj4+ICAgIEkgYW0gYWxzbw0KPj4+Pj4+Pj4+Pj4gcHJldHR5IHN1cmUgdGhhdCB0aGUg Y29zdCBvZiBub3QgdXNpbmcgdGhhdA0KPj4+Pj4+PiAgIG1lY2hhbmlzbQ0KPj4+Pj4+Pj4gICAg ICAgICBpcyB2ZXJ5DQo+Pj4+Pj4+Pj4gICAgY2xvc2UgdG8gMC4NCj4+Pj4+Pj4+Pj4+IFdoYXQg SSBhbSBzdXJlIG9mIGlzIHRoYXQgdGhlIGNvc3Qgb2YNCj4+Pj4+Pj4gICByZWVuZ2luZWVyaW5n IGENCj4+Pj4+Pj4+ICAgICAgICAgbmV3IGJpZGRvd24NCj4+Pj4+Pj4+Pj4+IHByb3RlY3Rpb24g bWVjaGFuaXNtIGlmIHdlIGV2ZXIgbmVlZCBpdCB3aWxsIGJlDQo+Pj4+Pj4+ICAgaGlnaC4NCj4+ Pj4+Pj4+ICAgICAgICAgV2UgYWxyZWFkeQ0KPj4+Pj4+Pj4+ICAgIHdlbnQNCj4+Pj4+Pj4+Pj4+ IHRocm91Z2ggdGhlIHBhaW5zIG9mIGRlc2lnbmluZyBvbmUgZm9yIHRoZQ0KPj4+IHBhc3N3b3Jk DQo+Pj4+Pj4+PiAgICAgICAgIGFsZ29yaXRobSwgc28NCj4+Pj4+Pj4+PiAgICB3aHkgbm90DQo+ Pj4+Pj4+Pj4+PiBleHRlbmQgaXQgc28gaXQgY2FuIGJlIHVzZWQgaW4gdGhlIGFmdGVybWF0aCBv Zg0KPj4+IHRoZQ0KPj4+Pj4+Pj4gICAgICAgICBuZXh0IFNub3dkZW4NCj4+Pj4+Pj4+PiAgICBm YWNlcGFsbQ0KPj4+Pj4+Pj4+Pj4gbW9tZW50Pw0KPj4+Pj4+Pj4+Pj4NCj4+Pj4+Pj4+Pj4+PiBB Z2FpbiwgaGFwcHkgdG8gaGF2ZSBhIGNhbGwgdG8gd2FsayB0aG91Z2gNCj4+Pj4+Pj4gICB0aGlz IGlmIHRoYXQNCj4+Pj4+Pj4+Pj4+PiBoZWxwcy4NCj4+Pj4+Pj4+Pj4+Pg0KPj4+Pj4+Pj4+Pj4+ IC1Fa3INCj4+Pj4+Pj4+Pj4+Pg0KPj4+Pj4+Pj4+Pj4+DQo+Pj4+Pj4+Pj4+Pj4NCj4+Pj4+Pj4+ Pj4+Pg0KPj4+Pj4+Pj4+Pj4+Pj4NCj4+Pj4+Pj4+Pj4+Pj4+IFlvdSBtaWdodCB0aGluayB0aGF0 IHRoZXJlIHdhcyBhIE1BQyB3aGljaA0KPj4+Pj4+PiAgIHdhcyBlYXNpZXIgdG8NCj4+Pj4+Pj4+ PiAgICByZXZlcnNlIHRvDQo+Pj4+Pj4+Pj4+PiBmaW5kDQo+Pj4+Pj4+Pj4+Pj4+PiB0aGUgb3Jp Z2luYWwNCj4+Pj4+Pj4+Pj4+Pj4+IHBhc3N3b3JkLCBidXQgdGhlIGRlZmVuc2UgeW91IGhhdmUg aGVyZQ0KPj4+Pj4+PiAgIGRvZXNuJ3QgaGVscA0KPj4+Pj4+Pj4gICAgICAgICB3aXRoIHRoYXQN Cj4+Pj4+Pj4+PiAgICBiZWNhdXNlDQo+Pj4+Pj4+Pj4+Pj4+IHRoZQ0KPj4+Pj4+Pj4+Pj4+Pj4g b24tcGF0aCBhdHRhY2tlciBjYW4gZG8gYSBiaWQtZG93biBhbmQgdXNlIHRoZQ0KPj4+Pj4+Pj4g ICAgICAgICBjbGllbnQgYXMgYSBNQUMNCj4+Pj4+Pj4+PiAgICBvcmFjbGUNCj4+Pj4+Pj4+Pj4+ IGZvcg0KPj4+Pj4+Pj4+Pj4+Pj4gYW55IE1BQyB0aGUgY2xpZW50IHN1cHBvcnRzLg0KPj4+Pj4+ Pj4+Pj4+Pj4NCj4+Pj4+Pj4+Pj4+Pj4+IFNvLCBJIHN0aWxsIGRvbid0IHVuZGVyc3RhbmQgd2hh dCB0aGlzIGlzDQo+Pj4+Pj4+ICAgc3VwcG9zZWQNCj4+Pj4+Pj4+ICAgICAgICAgdG8gZG8uIEhh cHB5IHRvDQo+Pj4+Pj4+Pj4+PiBoYXZlIGENCj4+Pj4+Pj4+Pj4+Pj4+IGNhbGwgaWYgeW91DQo+ Pj4+Pj4+Pj4+Pj4+PiB0aGluayB0aGF0IGhlbHBzDQo+Pj4+Pj4+Pj4+Pj4+Pg0KPj4+Pj4+Pj4+ Pj4+Pj4gLUVrcg0KPj4+Pj4+Pj4+Pj4+Pj4NCj4+Pj4+Pj4+Pj4+Pj4+DQo+Pj4+Pj4+Pj4+Pj4+ Pg0KPj4+Pj4+Pj4+Pj4+Pj4NCj4+Pj4+Pj4+Pj4+Pj4+IE9uIE1vbiwgSnVuIDE4LCAyMDE4IGF0 IDM6NDAgQU0sIEdvbnphbG8NCj4+Pj4+Pj4gICBDYW1hcmlsbG8gPA0KPj4+Pj4+Pj4+Pj4+Pj4g R29uemFsby5DYW1hcmlsbG9AZXJpY3Nzb24uY29tPG1haWx0bzpHb256YWxvLkNhbWFyaWxsb0Bl cmljc3Nvbi5jb20+DQo+Pj4+Pj4+ICAgPG1haWx0bzpHb256YWxvLkNhbWFyaWxsb0Blcmljc3Nv bi5jb208bWFpbHRvOkdvbnphbG8uQ2FtYXJpbGxvQGVyaWNzc29uLmNvbT4+DQo+Pj4+Pj4+PiAg ICAgICAgIDxtYWlsdG86R29uemFsby5DYW1hcmlsbG9AZXJpY3Nzb24uY29tPG1haWx0bzpHb256 YWxvLkNhbWFyaWxsb0Blcmljc3Nvbi5jb20+DQo+Pj4+Pj4+ICAgPG1haWx0bzpHb256YWxvLkNh bWFyaWxsb0Blcmljc3Nvbi5jb208bWFpbHRvOkdvbnphbG8uQ2FtYXJpbGxvQGVyaWNzc29uLmNv bT4+Pg0KPj4+Pj4+Pj4+ICAgIDxtYWlsdG86R29uemFsby5DYW1hcmlsbG9AZXJpY3Nzb24uY29t PG1haWx0bzpHb256YWxvLkNhbWFyaWxsb0Blcmljc3Nvbi5jb20+DQo+Pj4+Pj4+ICAgPG1haWx0 bzpHb256YWxvLkNhbWFyaWxsb0Blcmljc3Nvbi5jb208bWFpbHRvOkdvbnphbG8uQ2FtYXJpbGxv QGVyaWNzc29uLmNvbT4+DQo+Pj4+Pj4+PiAgICAgICAgIDxtYWlsdG86R29uemFsby5DYW1hcmls bG9AZXJpY3Nzb24uY29tPG1haWx0bzpHb256YWxvLkNhbWFyaWxsb0Blcmljc3Nvbi5jb20+DQo+ Pj4+Pj4+ICAgPG1haWx0bzpHb256YWxvLkNhbWFyaWxsb0Blcmljc3Nvbi5jb208bWFpbHRvOkdv bnphbG8uQ2FtYXJpbGxvQGVyaWNzc29uLmNvbT4+Pj4+IHdyb3RlOg0KPj4+Pj4+Pj4+Pj4+Pj4N Cj4+Pj4+Pj4+Pj4+Pj4+PiBNYXJjLCBFcmljLA0KPj4+Pj4+Pj4+Pj4+Pj4+DQo+Pj4+Pj4+Pj4+ Pj4+Pj4gd2hhdCBpcyB0aGUgc3RhdHVzIG9mIHRoaXMgZGlzY3Vzc2lvbj8NCj4+Pj4+Pj4+Pj4+ Pj4+Pg0KPj4+Pj4+Pj4+Pj4+Pj4+IFRoYW5rcywNCj4+Pj4+Pj4+Pj4+Pj4+Pg0KPj4+Pj4+Pj4+ Pj4+Pj4+IEdvbnphbG8NCj4+Pj4+Pj4+Pj4+Pj4+Pg0KPj4+Pj4+Pj4+Pj4+Pj4+PiBPbiAwNC8w NS8yMDE4IDI6MzUgQU0sIEVyaWMgUmVzY29ybGEgd3JvdGU6DQo+Pj4+Pj4+Pj4+Pj4+Pj4+DQo+ Pj4+Pj4+Pj4+Pj4+Pj4+DQo+Pj4+Pj4+Pj4+Pj4+Pj4+IE9uIE1vbiwgQXByIDIzLCAyMDE4IGF0 IDExOjE2IEFNLCBNYXJjDQo+Pj4+Pj4+PiAgICAgICAgIFBldGl0LUh1Z3VlbmluIDwNCj4+Pj4+ Pj4+Pj4+Pj4gcGV0aXRodWdAYWNtLm9yZzxtYWlsdG86cGV0aXRodWdAYWNtLm9yZz4gPG1haWx0 bzpwZXRpdGh1Z0BhY20ub3JnPG1haWx0bzpwZXRpdGh1Z0BhY20ub3JnPj4NCj4+Pj4+Pj4gICA8 bWFpbHRvOnBldGl0aHVnQGFjbS5vcmc8bWFpbHRvOnBldGl0aHVnQGFjbS5vcmc+IDxtYWlsdG86 cGV0aXRodWdAYWNtLm9yZzxtYWlsdG86cGV0aXRodWdAYWNtLm9yZz4+Pg0KPj4+Pj4+Pj4gICAg ICAgICA8bWFpbHRvOnBldGl0aHVnQGFjbS5vcmc8bWFpbHRvOnBldGl0aHVnQGFjbS5vcmc+IDxt YWlsdG86cGV0aXRodWdAYWNtLm9yZzxtYWlsdG86cGV0aXRodWdAYWNtLm9yZz4+DQo+Pj4+Pj4+ ICAgPG1haWx0bzpwZXRpdGh1Z0BhY20ub3JnPG1haWx0bzpwZXRpdGh1Z0BhY20ub3JnPiA8bWFp bHRvOnBldGl0aHVnQGFjbS5vcmc8bWFpbHRvOnBldGl0aHVnQGFjbS5vcmc+Pj4+DQo+Pj4+Pj4+ Pj4+Pj4+Pj4+IDxtYWlsdG86cGV0aXRodWdAYWNtLm9yZzxtYWlsdG86cGV0aXRodWdAYWNtLm9y Zz4NCj4+Pj4+Pj4gICA8bWFpbHRvOnBldGl0aHVnQGFjbS5vcmc8bWFpbHRvOnBldGl0aHVnQGFj bS5vcmc+PiA8bWFpbHRvOnBldGl0aHVnQGFjbS5vcmc8bWFpbHRvOnBldGl0aHVnQGFjbS5vcmc+ DQo+Pj4+Pj4+ICAgPG1haWx0bzpwZXRpdGh1Z0BhY20ub3JnPG1haWx0bzpwZXRpdGh1Z0BhY20u b3JnPj4+DQo+Pj4+Pj4+PiAgICAgICAgIDxtYWlsdG86cGV0aXRodWdAYWNtLm9yZzxtYWlsdG86 cGV0aXRodWdAYWNtLm9yZz4gPG1haWx0bzpwZXRpdGh1Z0BhY20ub3JnPG1haWx0bzpwZXRpdGh1 Z0BhY20ub3JnPj4NCj4+Pj4+Pj4gICA8bWFpbHRvOnBldGl0aHVnQGFjbS5vcmc8bWFpbHRvOnBl dGl0aHVnQGFjbS5vcmc+IDxtYWlsdG86cGV0aXRodWdAYWNtLm9yZzxtYWlsdG86cGV0aXRodWdA YWNtLm9yZz4+Pj4+PiB3cm90ZToNCj4+Pj4+Pj4+Pj4+Pj4+Pj4NCj4+Pj4+Pj4+Pj4+Pj4+Pj4g ICAgT24gMDQvMjIvMjAxOCAwNToyMiBQTSwgRXJpYyBSZXNjb3JsYQ0KPj4+Pj4+PiAgIHdyb3Rl Og0KPj4+Pj4+Pj4+Pj4+Pj4+Pj4gT24gU3VuLCBBcHIgMjIsIDIwMTggYXQgMjowMiBQTSwgTWFy Yw0KPj4+Pj4+Pj4gICAgICAgICBQZXRpdC1IdWd1ZW5pbiA8DQo+Pj4+Pj4+Pj4+Pj4+Pj4gcGV0 aXRodWdAYWNtLm9yZzxtYWlsdG86cGV0aXRodWdAYWNtLm9yZz4gPG1haWx0bzpwZXRpdGh1Z0Bh Y20ub3JnPG1haWx0bzpwZXRpdGh1Z0BhY20ub3JnPj4NCj4+Pj4+Pj4gICA8bWFpbHRvOnBldGl0 aHVnQGFjbS5vcmc8bWFpbHRvOnBldGl0aHVnQGFjbS5vcmc+IDxtYWlsdG86cGV0aXRodWdAYWNt Lm9yZzxtYWlsdG86cGV0aXRodWdAYWNtLm9yZz4+Pg0KPj4+Pj4+Pj4gICAgICAgICA8bWFpbHRv OnBldGl0aHVnQGFjbS5vcmc8bWFpbHRvOnBldGl0aHVnQGFjbS5vcmc+IDxtYWlsdG86cGV0aXRo dWdAYWNtLm9yZzxtYWlsdG86cGV0aXRodWdAYWNtLm9yZz4+DQo+Pj4+Pj4+ICAgPG1haWx0bzpw ZXRpdGh1Z0BhY20ub3JnPG1haWx0bzpwZXRpdGh1Z0BhY20ub3JnPiA8bWFpbHRvOnBldGl0aHVn QGFjbS5vcmc8bWFpbHRvOnBldGl0aHVnQGFjbS5vcmc+Pj4+DQo+Pj4+Pj4+Pj4gICAgPG1haWx0 bzpwZXRpdGh1Z0BhY20ub3JnPG1haWx0bzpwZXRpdGh1Z0BhY20ub3JnPiA8bWFpbHRvOnBldGl0 aHVnQGFjbS5vcmc8bWFpbHRvOnBldGl0aHVnQGFjbS5vcmc+Pg0KPj4+Pj4+PiAgIDxtYWlsdG86 cGV0aXRodWdAYWNtLm9yZzxtYWlsdG86cGV0aXRodWdAYWNtLm9yZz4gPG1haWx0bzpwZXRpdGh1 Z0BhY20ub3JnPG1haWx0bzpwZXRpdGh1Z0BhY20ub3JnPj4+DQo+Pj4+Pj4+PiAgICAgICAgIDxt YWlsdG86cGV0aXRodWdAYWNtLm9yZzxtYWlsdG86cGV0aXRodWdAYWNtLm9yZz4gPG1haWx0bzpw ZXRpdGh1Z0BhY20ub3JnPG1haWx0bzpwZXRpdGh1Z0BhY20ub3JnPj4NCj4+Pj4+Pj4gICA8bWFp bHRvOnBldGl0aHVnQGFjbS5vcmc8bWFpbHRvOnBldGl0aHVnQGFjbS5vcmc+IDxtYWlsdG86cGV0 aXRodWdAYWNtLm9yZzxtYWlsdG86cGV0aXRodWdAYWNtLm9yZz4+Pj4+Pg0KPj4+Pj4+Pj4+Pj4+ Pj4+Pj4gd3JvdGU6DQo+Pj4+Pj4+Pj4+Pj4+Pj4+Pg0KPj4+Pj4+Pj4+Pj4+Pj4+Pj4+DQo+Pj4+ Pj4+Pj4+Pj4+Pj4+Pj4+PiAgICAgRm9yIGEgcmVxdWVzdCBvciBpbmRpY2F0aW9uDQo+Pj4+Pj4+ ICAgbWVzc2FnZSwNCj4+Pj4+Pj4+ICAgICAgICAgdGhlIGFnZW50DQo+Pj4+Pj4+Pj4gICAgTVVT VA0KPj4+Pj4+Pj4+Pj4+Pj4+IGluY2x1ZGUgdGhlDQo+Pj4+Pj4+Pj4+Pj4+Pj4+Pj4+PiAgICAg VVNFUk5BTUUsDQo+Pj4+Pj4+ICAgTUVTU0FHRS1JTlRFR1JJVFktU0hBMjU2LCBhbmQNCj4+Pj4+ Pj4+Pj4+IE1FU1NBR0UtSU5URUdSSVRZDQo+Pj4+Pj4+Pj4+Pj4+Pj4+Pj4gYXR0cmlidXRlcw0K Pj4+Pj4+Pj4+Pj4+Pj4+Pj4+Pj4gICAgIGluIHRoZSBtZXNzYWdlIHVubGVzcyB0aGUgYWdlbnQN Cj4+Pj4+Pj4+ICAgICAgICAga25vd3MgZnJvbSBhbg0KPj4+Pj4+Pj4+ICAgIGV4dGVybmFsDQo+ Pj4+Pj4+Pj4+Pj4+Pj4gaW5kaWNhdGlvbg0KPj4+Pj4+Pj4+Pj4+Pj4+Pj4+Pj4gICAgIHdoaWNo IG1lc3NhZ2UgaW50ZWdyaXR5DQo+Pj4+Pj4+ICAgYWxnb3JpdGhtIGlzDQo+Pj4+Pj4+PiAgICAg ICAgIHN1cHBvcnRlZA0KPj4+Pj4+Pj4+ICAgIGJ5IGJvdGgNCj4+Pj4+Pj4+Pj4+Pj4+PiBhZ2Vu dHMuICBJbg0KPj4+Pj4+Pj4+Pj4+Pj4+Pj4+Pj4gICAgIHRoaXMgY2FzZSBlaXRoZXINCj4+Pj4+ Pj4gICBNRVNTQUdFLUlOVEVHUklUWSBvcg0KPj4+Pj4+Pj4+Pj4+Pj4+IE1FU1NBR0UtSU5URUdS SVRZLVNIQTI1NiBNVVNUDQo+Pj4+Pj4+Pj4+Pj4+Pj4+Pj4+PiAgICAgYmUgaW5jbHVkZWQgaW4g YWRkaXRpb24gdG8NCj4+Pj4+Pj4+ICAgICAgICAgVVNFUk5BTUUuICBUaGUgSE1BQw0KPj4+Pj4+ Pj4+ICAgIGZvciB0aGUNCj4+Pj4+Pj4+Pj4+Pj4+PiBNRVNTQUdFLQ0KPj4+Pj4+Pj4+Pj4+Pj4+ Pj4+Pg0KPj4+Pj4+Pj4+Pj4+Pj4+Pj4+PiBUaGlzIHRleHQgYXBwZWFycyB0byBjb25mbGljdCB3 aXRoDQo+Pj4+Pj4+ICAgUyA3LjMgb2YNCj4+Pj4+Pj4+PiAgICA1MjQ1LWJpcywgd2hpY2gNCj4+ Pj4+Pj4+Pj4+Pj4gc2F5czoNCj4+Pj4+Pj4+Pj4+Pj4+Pj4+Pg0KPj4+Pj4+Pj4+Pj4+Pj4+Pj4+ IFt0ZXh0IG1pc3NpbmddDQo+Pj4+Pj4+Pj4+Pj4+Pj4+Pj4NCj4+Pj4+Pj4+Pj4+Pj4+Pj4+PiBI bW0sIG5vLCBSRkMyNDViaXMgaXMgc3RpbGwNCj4+PiByZWZlcmVuY2luZw0KPj4+Pj4+Pj4gICAg ICAgICBSRkM1Mzg5LCBzbyB0aGUNCj4+Pj4+Pj4+Pj4+Pj4gcHJvY2VkdXJlDQo+Pj4+Pj4+Pj4+ Pj4+Pj4gZm9yDQo+Pj4+Pj4+Pj4+Pj4+Pj4+Pj4gc3R1bmJpcyBkb2VzIG5vdCBhcHBseS4NCj4+ Pj4+Pj4+Pj4+Pj4+Pj4+Pg0KPj4+Pj4+Pj4+Pj4+Pj4+Pj4NCj4+Pj4+Pj4+Pj4+Pj4+Pj4+IEkg aGVhciB3aGF0IHlvdSdyZSBzYXlpbmcsIGJ1dA0KPj4+Pj4+PiAgIHB1Ymxpc2hpbmcgdHdvDQo+ Pj4+Pj4+Pj4gICAgZG9jdW1lbnRzIGF0IHRoZQ0KPj4+Pj4+Pj4+Pj4+Pj4+IHNhbWUgdGltZQ0K Pj4+Pj4+Pj4+Pj4+Pj4+Pj4gd2hpY2gNCj4+Pj4+Pj4+Pj4+Pj4+Pj4+IG1ha2UgY29udHJhcnkg cmVjb21tZW5kYXRpb25zIGFib3V0DQo+Pj4+Pj4+ICAgdGhlIHNhbWUNCj4+Pj4+Pj4+ICAgICAg ICAgYmFzaWMNCj4+Pj4+Pj4+PiAgICBwcm90b2NvbCBpcw0KPj4+Pj4+Pj4+Pj4+Pj4+IHVuLWdv b2QuDQo+Pj4+Pj4+Pj4+Pj4+Pj4+DQo+Pj4+Pj4+Pj4+Pj4+Pj4+ICAgIFN1cmUsIGJ1dCB3b3Vs ZG4ndCBpdCBiZSBzaW1wbGVyIHRvIGhhdmUNCj4+Pj4+Pj4+ICAgICAgICAgcmZjNTI0NWJpcw0K Pj4+Pj4+Pj4+ICAgIHVzaW5nIHN0dW5iaXMNCj4+Pj4+Pj4+Pj4+Pj4+Pj4gICAgYW5kIGhhdmUg dGhlbSB1cGRhdGluZyB0aGVpciB0ZXh0LA0KPj4+Pj4+PiAgIG1vcmUgdGhhbg0KPj4+Pj4+Pj4g ICAgICAgICBhZGRpbmcgc29tZQ0KPj4+Pj4+Pj4+ICAgIHRvcnR1b3VzDQo+Pj4+Pj4+Pj4+Pj4+ Pj4+ICAgIHRleHQgaW4gc3R1bmJpcz8NCj4+Pj4+Pj4+Pj4+Pj4+Pj4NCj4+Pj4+Pj4+Pj4+Pj4+ Pj4+DQo+Pj4+Pj4+Pj4+Pj4+Pj4+Pg0KPj4+Pj4+Pj4+Pj4+Pj4+Pj4+PiAgICAgVGhlIFNUVU4g dXNhZ2UgbXVzdCBzcGVjaWZ5DQo+Pj4gd2hpY2gNCj4+Pj4+Pj4+ICAgICAgICAgdHJhbnNwb3J0 DQo+Pj4+Pj4+Pj4gICAgcHJvdG9jb2wgaXMNCj4+Pj4+Pj4+Pj4+Pj4+PiB1c2VkLCBhbmQNCj4+ Pj4+Pj4+Pj4+Pj4+Pj4+PiBob3cNCj4+Pj4+Pj4+Pj4+Pj4+Pj4+Pj4+ICAgICB0aGUgYWdlbnQg ZGV0ZXJtaW5lcyB0aGUgSVANCj4+Pj4+Pj4gICBhZGRyZXNzDQo+Pj4+Pj4+PiAgICAgICAgIGFu ZCBwb3J0DQo+Pj4+Pj4+Pj4gICAgb2YgdGhlDQo+Pj4+Pj4+Pj4+Pj4+Pj4gcmVjaXBpZW50Lg0K Pj4+Pj4+Pj4+Pj4+Pj4+Pj4+Pj4gICAgIFNlY3Rpb24gOCBkZXNjcmliZXMgYSBETlMtYmFzZWQN Cj4+Pj4+Pj4+ICAgICAgICAgbWV0aG9kIG9mDQo+Pj4+Pj4+Pj4gICAgZGV0ZXJtaW5pbmcNCj4+ Pj4+Pj4+Pj4+IHRoZQ0KPj4+Pj4+Pj4+Pj4+Pj4+IElQDQo+Pj4+Pj4+Pj4+Pj4+Pj4+Pj4gYWRk cmVzcw0KPj4+Pj4+Pj4+Pj4+Pj4+Pj4+Pj4gICAgIGFuZCBwb3J0IG9mIGEgc2VydmVyIHRoYXQg YQ0KPj4+Pj4+PiAgIHVzYWdlDQo+Pj4+Pj4+PiAgICAgICAgIG1heSBlbGVjdCB0bw0KPj4+Pj4+ Pj4+ICAgIHVzZS4NCj4+Pj4+Pj4+Pj4+IFNUVU4NCj4+Pj4+Pj4+Pj4+Pj4+PiBtYXkgYmUNCj4+ Pj4+Pj4+Pj4+Pj4+Pj4+PiB1c2VkDQo+Pj4+Pj4+Pj4+Pj4+Pj4+Pj4+PiAgICAgd2l0aCBhbnlj YXN0IGFkZHJlc3NlcywgYnV0DQo+Pj4gb25seQ0KPj4+Pj4+Pj4gICAgICAgICB3aXRoIFVEUCBh bmQNCj4+Pj4+Pj4+PiAgICBpbiB1c2FnZXMNCj4+Pj4+Pj4+Pj4+Pj4+PiB3aGVyZQ0KPj4+Pj4+ Pj4+Pj4+Pj4+Pj4+Pj4gICAgIGF1dGhlbnRpY2F0aW9uIGlzIG5vdCB1c2VkLg0KPj4+Pj4+Pj4+ Pj4+Pj4+Pj4+Pg0KPj4+Pj4+Pj4+Pj4+Pj4+Pj4+PiBXaHkgdGhpcyByZXN0cmljdGlvbj8gWW91 IHNob3VsZA0KPj4+Pj4+PiAgIGJlIGFibGUNCj4+Pj4+Pj4+ICAgICAgICAgdG8gdXNlDQo+Pj4+ Pj4+Pj4gICAgYW55Y2FzdCB3aXRoDQo+Pj4+Pj4+Pj4+Pj4+Pj4gbG9uZy10ZXJtDQo+Pj4+Pj4+ Pj4+Pj4+Pj4+Pj4+IEFVVEggZm9yIChzYXkpIFRVUk4uDQo+Pj4+Pj4+Pj4+Pj4+Pj4+Pj4NCj4+ Pj4+Pj4+Pj4+Pj4+Pj4+Pg0KPj4+Pj4+Pj4gICAgICAgICBodHRwczovL3d3dy5pZXRmLm9yZy9t YWlsLWFyY2hpdmUvd2ViL2JlaGF2ZS9jdXJyZW50Lw0KPj4+Pj4+Pj4+Pj4+Pj4+IG1zZzAzNTgy Lmh0bWwNCj4+Pj4+Pj4+Pj4+Pj4+Pj4NCj4+Pj4+Pj4+ICAgICAgICAgIDxodHRwczovL3d3dy5p ZXRmLm9yZy9tYWlsLWFyY2hpdmUvd2ViL2JlaGF2ZS9jdXJyZW50Lw0KPj4+Pj4+Pj4+Pj4+PiBt c2cwMzU4Mi5odG1sPg0KPj4+Pj4+Pj4+Pj4+Pj4+Pj4+DQo+Pj4+Pj4+Pj4+Pj4+Pj4+Pj4gSSB0 aGluayB0aGF0IHRoZSBkZWNpc2lvbiBvZg0KPj4+Pj4+PiAgIHBlcm1pdHRpbmcgQW55Y2FzdA0K Pj4+Pj4+Pj4+ICAgIHNob3VsZCBiZSBsZWZ0DQo+Pj4+Pj4+Pj4+Pj4+IHRvDQo+Pj4+Pj4+Pj4+ Pj4+Pj4gZWFjaA0KPj4+Pj4+Pj4+Pj4+Pj4+Pj4+IFNUVU4gVXNhZ2UuICBCYXNpYyBTVFVOIFVz YWdlIGRvZXMNCj4+Pj4+Pj4gICBub3QgdXNlDQo+Pj4+Pj4+Pj4gICAgYXV0aGVudGljYXRpb24g YW5kDQo+Pj4+Pj4+Pj4+Pj4+IHVzZQ0KPj4+Pj4+Pj4+Pj4+Pj4+IG9ubHkgYQ0KPj4+Pj4+Pj4+ Pj4+Pj4+Pj4+IG9uZSByb3VuZCB0cmlwIGZvciB0aGUgQmluZGluZw0KPj4+Pj4+PiAgIHRyYW5z YWN0aW9uLCBzbw0KPj4+Pj4+Pj4+ICAgIFVuaWNhc3QgY2FuIGJlDQo+Pj4+Pj4+Pj4+Pj4+Pj4g dXNlZC4NCj4+Pj4+Pj4+Pj4+Pj4+Pj4+Pg0KPj4+Pj4+Pj4+Pj4+Pj4+Pj4NCj4+Pj4+Pj4+Pj4+ Pj4+Pj4+PiBPVE9ILCBUVVJOIGFuZCBJQ0Ugc2hvdWxkIHByb2JhYmx5IHNheQ0KPj4+Pj4+Pj4g ICAgICAgICBzb21ldGhpbmcNCj4+Pj4+Pj4+PiAgICBhYm91dCB0aGF0LA0KPj4+Pj4+Pj4+Pj4g c28NCj4+Pj4+Pj4+Pj4+Pj4gSQ0KPj4+Pj4+Pj4+Pj4+Pj4+IGFkZGVkIGENCj4+Pj4+Pj4+Pj4+ Pj4+Pj4+PiBuZXcgYnVsbGV0IHBvaW50IGluIFNlY3Rpb24gMTM6DQo+Pj4+Pj4+Pj4+Pj4+Pj4+ Pj4NCj4+Pj4+Pj4+Pj4+Pj4+Pj4+PiAgIG8gIElmIEFueWNhc3QgYWRkcmVzc2VzIGNhbiBiZQ0K Pj4+Pj4+PiAgIHVzZWQgZm9yDQo+Pj4+Pj4+PiAgICAgICAgIHRoZSBzZXJ2ZXINCj4+Pj4+Pj4+ PiAgICBpbiBjYXNlDQo+Pj4+Pj4+Pj4+Pj4+IFRDUA0KPj4+Pj4+Pj4+Pj4+Pj4+IG9yDQo+Pj4+ Pj4+Pj4+Pj4+Pj4+Pj4gICAgICBUTFMtb3Zlci1UQ1AsIG9yDQo+Pj4+Pj4+ICAgYXV0aGVudGlj YXRpb24gYXJlIHVzZWQuDQo+Pj4+Pj4+Pj4+Pj4+Pj4+Pj4NCj4+Pj4+Pj4+Pj4+Pj4+Pj4+DQo+ Pj4+Pj4+Pj4+Pj4+Pj4+PiBBcmUgeW91IGxlYXZpbmcgdGhpcyB0ZXh0IGluPyBUaGF0DQo+Pj4g c2VlbXMNCj4+Pj4+Pj4+ICAgICAgICAgdmVyeSBjb25mdXNpbmcuDQo+Pj4+Pj4+Pj4+Pj4+Pj4+ DQo+Pj4+Pj4+Pj4+Pj4+Pj4+ICAgIEluIGlzb2xhdGlvbiB5ZXMsIGJ1dCBJIHRoaW5rIGl0IG1h a2VzDQo+Pj4+Pj4+ICAgc2Vuc2UNCj4+Pj4+Pj4+ICAgICAgICAgd2hpY2ggdGhlIHRleHQNCj4+ Pj4+Pj4+Pj4+IGJlZm9yZQ0KPj4+Pj4+Pj4+Pj4+Pj4+PiAgICB0aGUgYnVsbGV0IHBvaW50czoN Cj4+Pj4+Pj4+Pj4+Pj4+Pj4NCj4+Pj4+Pj4+Pj4+Pj4+Pj4gICAgICAgQSBTVFVOIHVzYWdlIGRl ZmluZXMgaG93IFNUVU4gaXMNCj4+Pj4+Pj4gICBhY3R1YWxseQ0KPj4+Pj4+Pj4gICAgICAgICB1 dGlsaXplZCAtLQ0KPj4+Pj4+Pj4+ICAgIHdoZW4gdG8NCj4+Pj4+Pj4+Pj4+Pj4gc2VuZA0KPj4+ Pj4+Pj4+Pj4+Pj4+PiAgICAgICByZXF1ZXN0cywgd2hhdCB0byBkbyB3aXRoIHRoZQ0KPj4+Pj4+ PiAgIHJlc3BvbnNlcywNCj4+Pj4+Pj4+ICAgICAgICAgYW5kIHdoaWNoDQo+Pj4+Pj4+Pj4gICAg b3B0aW9uYWwNCj4+Pj4+Pj4+Pj4+Pj4+Pj4gICAgICAgcHJvY2VkdXJlcyBkZWZpbmVkIGhlcmUg KG9yIGluIGFuDQo+Pj4+Pj4+ICAgZXh0ZW5zaW9uDQo+Pj4+Pj4+PiAgICAgICAgIHRvIFNUVU4p DQo+Pj4+Pj4+Pj4gICAgYXJlIHRvIGJlDQo+Pj4+Pj4+Pj4+Pj4+Pj4gdXNlZC4NCj4+Pj4+Pj4+ Pj4+Pj4+Pj4gICAgICAgQSB1c2FnZSBhbHNvIGRlZmluZXM6DQo+Pj4+Pj4+Pj4+Pj4+Pj4+DQo+ Pj4+Pj4+Pj4+Pj4+Pj4+ICAgIFsuLi5dDQo+Pj4+Pj4+Pj4+Pj4+Pj4+DQo+Pj4+Pj4+Pj4+Pj4+ Pj4+ICAgICAgIG8gIElmIEFueWNhc3QgYWRkcmVzc2VzIGNhbiBiZSB1c2VkDQo+Pj4+Pj4+ICAg Zm9yIHRoZQ0KPj4+Pj4+Pj4gICAgICAgICBzZXJ2ZXIgaW4NCj4+Pj4+Pj4+PiAgICBjYXNlIFRD UA0KPj4+Pj4+Pj4+Pj4+PiBvcg0KPj4+Pj4+Pj4+Pj4+Pj4+PiAgICAgICAgICBUTFMtb3Zlci1U Q1AsIG9yIGF1dGhlbnRpY2F0aW9uDQo+Pj4+Pj4+ICAgYXJlIHVzZWQuDQo+Pj4+Pj4+Pj4+Pj4+ Pj4+DQo+Pj4+Pj4+Pj4+Pj4+Pj4+DQo+Pj4+Pj4+Pj4+Pj4+Pj4+IFdoYXQgaXMgdGhlIG5lZWQg Zm9yIHRoZSByZXN0cmljdGlvbiBhdCBhbGwNCg0K --_000_9ED47E64EC5343FB8EAD128E81205EF4ciscocom_ Content-Type: text/html; charset="utf-8" Content-ID: <68CD21F8D7EBFA47B48B2BFB20DD75FC@namprd11.prod.outlook.com> Content-Transfer-Encoding: base64 PGh0bWw+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIgY29udGVudD0i dGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjwvaGVhZD4NCjxib2R5Pg0KPGRpdiBjbGFzcz0i IiBzdHlsZT0id29yZC13cmFwOmJyZWFrLXdvcmQ7IGxpbmUtYnJlYWs6YWZ0ZXItd2hpdGUtc3Bh Y2UiPkhpIEVyaWMgLSZuYnNwOw0KPGRpdiBjbGFzcz0iIj48YnIgY2xhc3M9IiI+DQo8L2Rpdj4N CjxkaXYgY2xhc3M9IiI+SeKAmW0gYXR0YWNoaW5nIHRoZSAtMjEgdGhhdCB3aWxsIGJlIHB1Ymxp c2hlZCBvbmNlIHRoZSBJLUQgc3VibWlzc2lvbiB0b29sIG9wZW5zIHVwIChvciBTcGVuY2VyIGNh biBvdmVycmlkZSBhbmQgaXQgcHVibGlzaGVkIGJlZm9yZSB0aGVuKS4gJm5ic3A7SXQgdXNlcyB5 b3VyIHByb3Bvc2VkIGJpZCBkb3duIHByb3RlY3Rpb24gZGlzY2xhaW1lciB0ZXh0IChzYXZlIGZv ciBtaW5vciBuaXRzIEkgY2xlYW5lZCB1cCkuICZuYnNwOzwvZGl2Pg0KPGRpdiBjbGFzcz0iIj48 YnIgY2xhc3M9IiI+DQo8L2Rpdj4NCjxkaXYgY2xhc3M9IiI+SWYgdGhpcyBsb29rcyBnb29kIHRo ZW4gZnJvbSBteSBwZXJzcGVjdGl2ZSB3ZSBhcmUgZG9uZSBhbmQgeW91ciBESVNDVVNTIGNhbiBi ZSBjbGVhcmVkIGFuZCB3ZSBjYW4gcHJvY2VlZCB3aXRoIHB1YmxpY2F0aW9uLjxiciBjbGFzcz0i Ij4NCjxkaXY+PGJyIGNsYXNzPSIiPg0KPC9kaXY+DQo8ZGl2PlRoYW5rcyBmb3IgYWxsIHlvdXIg aGVscC48L2Rpdj4NCjxkaXY+PGJyIGNsYXNzPSIiPg0KPC9kaXY+DQo8ZGl2PkNoZWVycyw8L2Rp dj4NCjxkaXY+PGJyIGNsYXNzPSIiPg0KPC9kaXY+DQo8ZGl2PkdvbnphbG88L2Rpdj4NCjxkaXY+ PGJyIGNsYXNzPSIiPg0KPC9kaXY+DQo8ZGl2PjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjxkaXYg Y2xhc3M9IiIgc3R5bGU9IndvcmQtd3JhcDpicmVhay13b3JkOyBsaW5lLWJyZWFrOmFmdGVyLXdo aXRlLXNwYWNlIj4NCjxkaXYgY2xhc3M9IiI+DQo8ZGl2PjwvZGl2Pg0KPGRpdj48YnIgY2xhc3M9 IiI+DQo8YmxvY2txdW90ZSB0eXBlPSJjaXRlIiBjbGFzcz0iIj4NCjxkaXYgY2xhc3M9IiI+T24g TWFyIDIwLCAyMDE5LCBhdCAzOjU3IFBNLCBFcmljIFJlc2NvcmxhICZsdDs8YSBocmVmPSJtYWls dG86ZWtyQHJ0Zm0uY29tIiBjbGFzcz0iIj5la3JAcnRmbS5jb208L2E+Jmd0OyB3cm90ZTo8L2Rp dj4NCjxiciBjbGFzcz0ieF9BcHBsZS1pbnRlcmNoYW5nZS1uZXdsaW5lIj4NCjxkaXYgY2xhc3M9 IiI+DQo8bWV0YSBjb250ZW50PSJ0ZXh0L2h0bWw7IGNoYXJzZXQ9dXRmLTgiIGNsYXNzPSIiPg0K PGRpdiBkaXI9Imx0ciIgY2xhc3M9IiI+DQo8ZGl2IGRpcj0ibHRyIiBjbGFzcz0iIj5Hb256YWxv LDxiciBjbGFzcz0iIj4NCjxiciBjbGFzcz0iIj4NClRoaXMgdGV4dCBzdGlsbCBzZWVtcyB0byBt ZSB0byBuZWVkIHNvbWUgd29yay4gSGVyZSBpcyBhIHJldmlzZWQgdmVyc2lvbi48YnIgY2xhc3M9 IiI+DQo8YnIgY2xhc3M9IiI+DQpTSEEtMjU2IHdhcyBjaG9zZW4gYXMgdGhlIG5ldyBkZWZhdWx0 IGZvciBwYXNzd29yZCZuYnNwOyZuYnNwOyZuYnNwOyA8YnIgY2xhc3M9IiI+DQpoYXNoaW5nIGZv ciBpdHMgY29tcGFiaWxpdHkgd2l0aCBSRkMgNzYxNiBidXQgYmVjYXVzZSBTSEEtMjU2IChsaWtl Jm5ic3A7Jm5ic3A7Jm5ic3A7IDxiciBjbGFzcz0iIj4NCk1ENSkgaXMgYSBjb21wYXJhdGl2ZWx5 IGZhc3QgYWxnb3JpdGhtLCBpdCBkb2VzIGxpdHRsZSB0byBkZXRlcjxiciBjbGFzcz0iIj4NCmJy dXRlIGZvcmNlIGF0dGFja3MuIFNwZWNpZmljYWxseSwgdGhpcyBtZWFucyB0aGF0IGlmIHRoZTxi ciBjbGFzcz0iIj4NCnVzZXIgaGFzIGEgd2VhayBwYXNzd29yZDo8YnIgY2xhc3M9IiI+DQo8YnIg Y2xhc3M9IiI+DQoqIEFuIGF0dGFja2VyIHdobyBjYXB0dXJlcyB0aGUgc2VydmVyJ3MgcGFzc3dv cmQgZmlsZSBjYW4gb2Z0ZW48YnIgY2xhc3M9IiI+DQombmJzcDsgZGV0ZXJtaW5lIHRoZSB1c2Vy J3MgcGFzc3dvcmQgYW5kIHRodXMgaW1wZXJzb25hdGUgdGhlIHVzZXI8YnIgY2xhc3M9IiI+DQom bmJzcDsgdG8gb3RoZXIgc2VydmVycyB3aGVyZSB0aGV5IGhhdmUgdXNlZCB0aGF0IHBhc3N3b3Jk LiBOb3RlIHRoYXQ8YnIgY2xhc3M9IiI+DQombmJzcDsgc3VjaCBhbiBhdHRhY2tlciBjYW4gaW1w ZXJzb25hdGUgdGhlIHVzZXIgdG8gdGhlIHNlcnZlciBpdHNlbGY8YnIgY2xhc3M9IiI+DQombmJz cDsgd2l0aG91dCBhbnkgYnJ1dGUgZm9yY2UgYXR0YWNrLjxiciBjbGFzcz0iIj4NCjxiciBjbGFz cz0iIj4NCiogQW4gYXR0YWNrZXIgd2hvIGNhcHR1cmVzIGEgc2luZ2xlIGV4Y2hhbmdlIGNhbiBi cnV0ZSBmb3JjZTxiciBjbGFzcz0iIj4NCiZuYnNwOyB0aGUgdXNlcidzIHBhc3N3b3JkIGFuZCB0 aHVzIHBvdGVudGlhbGx5IGltcGVyc29uYXRlIHRoZTxiciBjbGFzcz0iIj4NCiZuYnNwOyB1c2Vy IHRvIHRoZSBzZXJ2ZXIgYW5kIG90aGVyIHNlcnZlcnMgd2hlcmUgdGhleSBoYXZlIHVzZWQ8YnIg Y2xhc3M9IiI+DQombmJzcDsgdGhlIHNhbWUgcGFzd29yZC48YnIgY2xhc3M9IiI+DQombmJzcDsg PGJyIGNsYXNzPSIiPg0KQSBzdHJvbmdlciAod2hpY2ggaXMgdG8gc2F5IHNsb3dlcikgYWxnb3Jp dGhtLCBsaWtlIEFyZ29uMjxiciBjbGFzcz0iIj4NCltJLUQuaXJ0Zi1jZnJnLWFyZ29uMl0sIHdv dWxkIGhlbHAgYm90aCBvZiB0aGVzZSBjYXNlcywgYnV0IGluIHRoZTxiciBjbGFzcz0iIj4NCmNh c2Ugb2YgdGhlIGZpcnN0IGF0dGFjaywgb25seSBhZnRlciB1bnRpbCB0aGUgZGF0YWJhc2UgZW50 cnkgZm9yIHRoaXM8YnIgY2xhc3M9IiI+DQp1c2VyIGlzIHVwZGF0ZWQgdG8gZXhjbHVzaXZlbHkg dXNlIHRoYXQgc3Ryb25nZXIgbWVjaGFuaXNtLjxiciBjbGFzcz0iIj4NCjxiciBjbGFzcz0iIj4N ClRoZSBiaWQtZG93biBkZWZlbnNlcyBpbiB0aGlzIHByb3RvY29sIHByZXZlbnQgYW4gYXR0YWNr ZXIgZnJvbTxiciBjbGFzcz0iIj4NCmZvcmNpbmcgdGhlIGNsaWVudCBhbmQgc2VydmVyIHRvIGNv bXBsZXRlIGEgaGFuZHNoYWtlIHVzaW5nIHdlYWtlcjxiciBjbGFzcz0iIj4NCmFsZ29yaXRobXMg dGhhbiB0aGV5IGpvaW50bHkgc3VwcG9ydCwgYnV0IG9ubHkgaWYgdGhlIHdlYWtlc3Qgam9pbnQ8 YnIgY2xhc3M9IiI+DQphbGdvcml0aG0gaXMgc3Ryb25nIGVub3VnaCB0aGF0IGl0IGNhbm5vdCBi ZSBicnV0ZS1mb3JjZWQuIEhvd2V2ZXIsPGJyIGNsYXNzPSIiPg0KdGhpcyBkb2VzIG5vdCBkZWZl bmQgYWdhaW5zdCBtYW55IGF0dGFja3Mgb24gdGhvc2UgYWxnb3JpdGhtczs8YnIgY2xhc3M9IiI+ DQpzcGVjaWZpY2FsbHksIGFuIG9uLXBhdGggYXR0YWNrZXIgbWlnaHQgcGVyZm9ybSBhIGJpZC1k b3duIGF0dGFjayBvbiBhPGJyIGNsYXNzPSIiPg0KY2xpZW50IHdoaWNoIHN1cHBvcnRlZCBib3Ro IEFyZ29uMiBhbmQgU0hBLTI1NiBmb3IgcGFzc3dvcmQgaGFzaGluZzxiciBjbGFzcz0iIj4NCmFu ZCB1c2UgdGhhdCB0byBjb2xsZWN0IGEgTUVTU0FHRS1JTlRFR1JJVFktU0hBMjU2IHZhbHVlIHdo aWNoIGl0IHVzZXM8YnIgY2xhc3M9IiI+DQpmb3IgYW4gb2ZmbGluZSBicnV0ZS1mb3JjZSBhdHRh Y2suIFRoaXMgd291bGQgYmUgZGV0ZWN0ZWQgd2hlbiB0aGU8YnIgY2xhc3M9IiI+DQpzZXJ2ZXIg cmVjZWl2ZXMgdGhlIHNlY29uZCByZXF1ZXN0LCBidXQgdGhhdCBkb2VzIG5vdCBwcmV2ZW50IHRo ZTxiciBjbGFzcz0iIj4NCmF0dGFja2VyIGZyb20gb2J0YWluaW5nIHRoZSBNRVNTQUdFLUlOVEVH UklUWS1TSEEyNTYgdmFsdWUuPGJyIGNsYXNzPSIiPg0KPGJyIGNsYXNzPSIiPg0KU2ltaWxhcmx5 LCBhbiBhdHRhY2sgYWdhaW5zdCB0aGUgVVNFUkhBU0ggbWVjaGFuaXNtIHdpbGwgbm90IHN1Y2Nl ZWQ8YnIgY2xhc3M9IiI+DQppbiBlc3RhYmxpc2hpbmcgYSBzZXNzaW9uIGFzIHRoZSBzZXJ2ZXIg d2lsbCBkZXRlY3QgdGhhdCB0aGUgZmVhdHVyZTxiciBjbGFzcz0iIj4NCndhcyBkaXNjYXJkZWQg b24tcGF0aCwgYnV0IHRoZSBjbGllbnQgd291bGQgc3RpbGwgaGF2ZSBiZWVuIGNvbnZpbmNlZDxi ciBjbGFzcz0iIj4NCnRvIHNlbmQgaXRzIHVzZXJuYW1lIGluIGNsZWFyIGluIHRoZSBVU0VSTkFN RSBhdHRyaWJ1dGUsIHRodXM8YnIgY2xhc3M9IiI+DQpkaXNjbG9zaW5nIGl0IHRvIHRoZSBhdHRh Y2tlci48YnIgY2xhc3M9IiI+DQo8YnIgY2xhc3M9IiI+DQotRWtyPGJyIGNsYXNzPSIiPg0KPGJy IGNsYXNzPSIiPg0KPC9kaXY+DQo8L2Rpdj4NCjxiciBjbGFzcz0iIj4NCjxkaXYgY2xhc3M9Inhf Z21haWxfcXVvdGUiPg0KPGRpdiBkaXI9Imx0ciIgY2xhc3M9InhfZ21haWxfYXR0ciI+T24gTW9u LCBNYXIgMTgsIDIwMTkgYXQgNjozNyBQTSBHb256YWxvIFNhbGd1ZWlybyAoZ3NhbGd1ZWkpICZs dDs8YSBocmVmPSJtYWlsdG86Z3NhbGd1ZWlAY2lzY28uY29tIiBjbGFzcz0iIj5nc2FsZ3VlaUBj aXNjby5jb208L2E+Jmd0OyB3cm90ZTo8YnIgY2xhc3M9IiI+DQo8L2Rpdj4NCjxibG9ja3F1b3Rl IGNsYXNzPSJ4X2dtYWlsX3F1b3RlIiBzdHlsZT0ibWFyZ2luOjBweCAwcHggMHB4IDAuOGV4OyBi b3JkZXItbGVmdDoxcHggc29saWQgcmdiKDIwNCwyMDQsMjA0KTsgcGFkZGluZy1sZWZ0OjFleCI+ DQpUaGFua3MsIFNwZW5jZXIuJm5ic3A7IEluIHRoZSBpbnRlcmVzdCBvZiBleHBlZGl0aW91c25l c3MgSeKAmXZlIGVtYWlsZWQgRXJpYyB0byByZXZpZXcgdGhlIG5ld2x5IHB1Ymxpc2hlZCAtMjAg dG8gZW5zdXJlIGl0IGFkZHJlc3NlcyBoaXMgRElTQ1VTUyBwb2ludHMuIEhvcGluZyB0byBnZXQg dGhpcyBkb25lIGJlZm9yZSBFcmljIHN0ZXBzIGRvd24gYXMgQUQuPGJyIGNsYXNzPSIiPg0KPGJy IGNsYXNzPSIiPg0KQ2hlZXJzLDxiciBjbGFzcz0iIj4NCjxiciBjbGFzcz0iIj4NCkdvbnphbG8g PGJyIGNsYXNzPSIiPg0KPGJyIGNsYXNzPSIiPg0KPGJyIGNsYXNzPSIiPg0KPGJyIGNsYXNzPSIi Pg0KJmd0OyBPbiBNYXIgMTgsIDIwMTksIGF0IDk6MjcgUE0sIFNwZW5jZXIgRGF3a2lucyBhdCBJ RVRGICZsdDs8YSBocmVmPSJtYWlsdG86c3BlbmNlcmRhd2tpbnMuaWV0ZkBnbWFpbC5jb20iIHRh cmdldD0iX2JsYW5rIiBjbGFzcz0iIj5zcGVuY2VyZGF3a2lucy5pZXRmQGdtYWlsLmNvbTwvYT4m Z3Q7IHdyb3RlOjxiciBjbGFzcz0iIj4NCiZndDsgPGJyIGNsYXNzPSIiPg0KJmd0OyBEZWFyIEFs bCw8YnIgY2xhc3M9IiI+DQomZ3Q7IDxiciBjbGFzcz0iIj4NCiZndDsmZ3Q7IE9uIEZyaSwgTWFy IDgsIDIwMTkgYXQgODoxMCBQTSBFcmljIFJlc2NvcmxhICZsdDs8YSBocmVmPSJtYWlsdG86ZWty QHJ0Zm0uY29tIiB0YXJnZXQ9Il9ibGFuayIgY2xhc3M9IiI+ZWtyQHJ0Zm0uY29tPC9hPiZndDsg d3JvdGU6PGJyIGNsYXNzPSIiPg0KJmd0OyZndDsgPGJyIGNsYXNzPSIiPg0KJmd0OyZndDsgVGhh bmtzIGZvciB0aGUgY2FsbCB5ZXN0ZXJkYXkuPGJyIGNsYXNzPSIiPg0KJmd0OyZndDsgPGJyIGNs YXNzPSIiPg0KJmd0OyA8YnIgY2xhc3M9IiI+DQomZ3Q7IFRoYW5rcyB0byBhbGwgZm9yIG1vdmlu ZyB0aGlzIHNwZWNpZmljYXRpb24gZm9yd2FyZC48YnIgY2xhc3M9IiI+DQomZ3Q7IDxiciBjbGFz cz0iIj4NCiZndDsgSWYgdGhlIGN1cnJlbnQgY29udmVyc2F0aW9uIHR1cm5zIG91dCB0byBjb252 ZXJnZSBvbiB0aGlzIHRvcGljIGJlZm9yZSBuZXh0PGJyIGNsYXNzPSIiPg0KJmd0OyBXZWRuZXNk YXksIEknbSBoYXBweSB0byBhcHByb3ZlIGEgcmV2aXNlZCBkcmFmdCBhZnRlciBFcmljIGNsZWFy cyBoaXM8YnIgY2xhc3M9IiI+DQomZ3Q7IERpc2N1c3MuPGJyIGNsYXNzPSIiPg0KJmd0OyA8YnIg Y2xhc3M9IiI+DQomZ3Q7IElmIEkgY2FuIGhlbHAgaW4gYW55IHdheSwgcGxlYXNlIGxldCBtZSBr bm93LjxiciBjbGFzcz0iIj4NCiZndDsgPGJyIGNsYXNzPSIiPg0KJmd0OyBTcGVuY2VyPGJyIGNs YXNzPSIiPg0KJmd0OyA8YnIgY2xhc3M9IiI+DQomZ3Q7IDxiciBjbGFzcz0iIj4NCiZndDsmZ3Q7 IDxiciBjbGFzcz0iIj4NCiZndDsmZ3Q7IEZpcnN0LCBoZXJlIGlzIHdoYXQgSSByZWNvbW1lbmQg Zm9yIHRoZSBxdWVzdGlvbiBvZiBTSEEtMjU2IGZvciBwYXNzd29yZDxiciBjbGFzcz0iIj4NCiZn dDsmZ3Q7IGhhc2hpbmc6PGJyIGNsYXNzPSIiPg0KJmd0OyZndDsgPGJyIGNsYXNzPSIiPg0KJmd0 OyZndDsmbmJzcDsgTm90ZTogdGhlIHVzZSBvZiBTSEEtMjU2IGZvciBwYXNzd29yZCBoYXNoaW5n IGRvZXMgbm90IG1lZXQgbW9kZXJuPGJyIGNsYXNzPSIiPg0KJmd0OyZndDsmbmJzcDsgc3RhbmRh cmRzLCB3aGljaCBhcmUgYWltZWQgYXQgc2xvd2luZyBkb3duIGV4aGF1c3RpdmUgcGFzc3dvcmQg c2VhcmNoPGJyIGNsYXNzPSIiPg0KJmd0OyZndDsmbmJzcDsgYnkgcHJvdmlkaW5nIGEgcmVsYXRp dmVseSBzbG93IG1pbmltdW0gdGltZSB0byBjb21wdXRlIHRoZTxiciBjbGFzcz0iIj4NCiZndDsm Z3Q7Jm5ic3A7IGhhc2guIEFsdGhvdWdoIGJldHRlciBhbGdvcml0aG1zIHN1Y2ggYXMgQXJnb24y PGJyIGNsYXNzPSIiPg0KJmd0OyZndDsmbmJzcDsgWzxhIGhyZWY9Imh0dHBzOi8vZGF0YXRyYWNr ZXIuaWV0Zi5vcmcvZG9jL2RyYWZ0LWlydGYtY2ZyZy1hcmdvbjIvIiByZWw9Im5vcmVmZXJyZXIi IHRhcmdldD0iX2JsYW5rIiBjbGFzcz0iIj5odHRwczovL2RhdGF0cmFja2VyLmlldGYub3JnL2Rv Yy9kcmFmdC1pcnRmLWNmcmctYXJnb24yLzwvYT5dIGFyZTxiciBjbGFzcz0iIj4NCiZndDsmZ3Q7 Jm5ic3A7IGF2YWlsYWJsZSwgU0hBLTI1NiB3YXMgY2hvc2VuIGZvciBjb25zaXN0ZW5jeSB3aXRo IFJGQyA3NjE2LjxiciBjbGFzcz0iIj4NCiZndDsmZ3Q7IDxiciBjbGFzcz0iIj4NCiZndDsmZ3Q7 IDxiciBjbGFzcz0iIj4NCiZndDsmZ3Q7IE5vdywgV1JUIHRvIHRoZSBhbnRpLWRvd25ncmFkZSBz aXR1YXRpb24uIEhlcmUncyBhIHN0eWxpemVkIHZlcnNpb248YnIgY2xhc3M9IiI+DQomZ3Q7Jmd0 OyBvZiB0aGUgcHJvdG9jb2w6PGJyIGNsYXNzPSIiPg0KJmd0OyZndDsgPGJyIGNsYXNzPSIiPg0K Jmd0OyZndDsgQ2xpZW50Jm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsg Jm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAm bmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZu YnNwOyAmbmJzcDsgJm5ic3A7IFNlcnZlcjxiciBjbGFzcz0iIj4NCiZndDsmZ3Q7IDxiciBjbGFz cz0iIj4NCiZndDsmZ3Q7IEhlbGxvIC0mZ3Q7PGJyIGNsYXNzPSIiPg0KJmd0OyZndDsmbmJzcDsg Jm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAm bmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZu YnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbHQ7LSBOb25jZSwgQWxnb3JpdGhtczxiciBjbGFz cz0iIj4NCiZndDsmZ3Q7IEhNQUMtSDEoSDIoUGFzc3dvcmQpLCBOb25jZSwgQWxnb3JpdGhtcywg TXNnKSAtJmd0OzxiciBjbGFzcz0iIj4NCiZndDsmZ3Q7Jm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5i c3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJz cDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyZsdDstIEhNQUMtSDEoSDIoUGFz c3dvcmQpLCAuLi4pPGJyIGNsYXNzPSIiPg0KJmd0OyZndDsgPGJyIGNsYXNzPSIiPg0KJmd0OyZn dDsgV2hlcmUgSDEgYW5kIEgyIGFyZSB0aGUgSE1BQyBoYXNoIGZ1bmN0aW9ucyBhbmQgdGhlIHBh c3N3b3JkIGhhc2hpbmc8YnIgY2xhc3M9IiI+DQomZ3Q7Jmd0OyBmdW5jdGlvbiByZXNwZWN0aXZl bHkuPGJyIGNsYXNzPSIiPg0KJmd0OyZndDsgPGJyIGNsYXNzPSIiPg0KJmd0OyZndDsgTm93LCBp ZiB3ZSBhc3N1bWUgdGhhdCB0aGUgYXR0YWNrZXIgZG9lcyBub3Qga25vdyBQYXNzd29yZCBhbmQg dGhhdDxiciBjbGFzcz0iIj4NCiZndDsmZ3Q7IGJvdGggSDEgYW5kIEgyIGFyZSBzZWN1cmUsIHRo ZW4gaXQgaXMgbm90IHBvc3NpYmxlIGZvciB0aGUgYXR0YWNrZXIgdG88YnIgY2xhc3M9IiI+DQom Z3Q7Jmd0OyBjb21wbGV0ZSB0aGUgdHJhbnNhY3Rpb24gb3IgbW9kaWZ5IGFueSBvZiB0aGUgbWVz c2FnZXMuIEZ1cnRoZXIsIGlmPGJyIGNsYXNzPSIiPg0KJmd0OyZndDsgdGhlIHdlYWtlc3Qgam9p bnQgYWxnb3JpdGhtIHRoYXQgYm90aCBzaWRlcyBzdXBwb3J0IGlzIHN0aWxsIHN0cm9uZyw8YnIg Y2xhc3M9IiI+DQomZ3Q7Jmd0OyB0aGVuIGFuIGF0dGFja2VyIGNhbm5vdCBpbmZsdWVuY2UgdGhl IGFsZ29yaXRobSBuZWdvdGlhdGlvbiBbMF0uIFRoaXM8YnIgY2xhc3M9IiI+DQomZ3Q7Jmd0OyBw cm9wZXJ0eSBpcyBwcm92aWRlZCBieSBjb3ZlcmluZyB0aGUgYWxnb3JpdGhtcyB1bmRlciB0aGUg TUFDLjxiciBjbGFzcz0iIj4NCiZndDsmZ3Q7IDxiciBjbGFzcz0iIj4NCiZndDsmZ3Q7IEhvd2V2 ZXIsIG15IHBvaW50IGlzIHRoYXQgdGhpcyBpcyBub3QgYSB2ZXJ5IHVzZWZ1bCBwcm9wZXJ0eS48 YnIgY2xhc3M9IiI+DQomZ3Q7Jmd0OyA8YnIgY2xhc3M9IiI+DQomZ3Q7Jmd0OyBGaXJzdCwgY29u c2lkZXIgdGhlIGNhc2UgaW4gd2hpY2ggdGhlIGltcGxlbWVudGF0aW9ucyBqb2ludGx5IHN1cHBv cnQ8YnIgY2xhc3M9IiI+DQomZ3Q7Jmd0OyBvbmUgc3Ryb25nIGFsZ29yaXRobSBhbmQgb25lIHdl YWsgYWxnb3JpdGhtLiBFLmcuLCBmb3IgSDEgdGhleSBzdXBwb3J0PGJyIGNsYXNzPSIiPg0KJmd0 OyZndDsgU0hBLTI1NiBhbmQgdGhlIGZ1bmN0aW9uIFooeCkgd2hpY2ggYWx3YXlzIGVtaXRzIDBz LiBUaGlzIGFsbG93czxiciBjbGFzcz0iIj4NCiZndDsmZ3Q7IGFuIGF0dGFja2VyIHRvIGZvcmNl IHRoZSBjbGllbnQgYW5kIHNlcnZlciBpbnRvIHVzaW5nIFosIGFzIGZvbGxvd3MuPGJyIGNsYXNz PSIiPg0KJmd0OyZndDsgPGJyIGNsYXNzPSIiPg0KJmd0OyZndDsgPGJyIGNsYXNzPSIiPg0KJmd0 OyZndDsgQ2xpZW50Jm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5i c3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyBBdHRhY2tlciZuYnNwOyAmbmJzcDsgJm5i c3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwO1NlcnZl cjxiciBjbGFzcz0iIj4NCiZndDsmZ3Q7IDxiciBjbGFzcz0iIj4NCiZndDsmZ3Q7IEhlbGxvIC0m Z3Q7PGJyIGNsYXNzPSIiPg0KJmd0OyZndDsmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5i c3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJz cDsgJm5ic3A7IEhlbGxvIC0mZ3Q7PGJyIGNsYXNzPSIiPg0KJmd0OyZndDsmbmJzcDsgJm5ic3A7 ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsg Jm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAm bmJzcDsgJmx0Oy0gTm9uY2UsIEFsZz1TSEEyNTYsIFo8YnIgY2xhc3M9IiI+DQomZ3Q7Jmd0OyZu YnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJmx0 Oy0gTm9uY2UsIEFsZz1aPGJyIGNsYXNzPSIiPg0KJmd0OyZndDsgWihIMihQYXNzd29yZCksIE5v bmNlLCBBbGc9WikpIC0mZ3Q7PGJyIGNsYXNzPSIiPg0KJmd0OyZndDsmbmJzcDsgJm5ic3A7ICZu YnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5i c3A7ICZuYnNwOyBaKEgyKFBhc3N3b3JkKSwgTm9uY2UsIEFsZz1TSEEyNTYsIFopKTxiciBjbGFz cz0iIj4NCiZndDsmZ3Q7IDxiciBjbGFzcz0iIj4NCiZndDsmZ3Q7IFRoZSBpc3N1ZSBoZXJlIGlz IHRoYXQgdGhlIG9ubHkgdGhpbmcgdGhhdCB0aGUgTUFDIGlzIGRvaW5nIGlzPGJyIGNsYXNzPSIi Pg0KJmd0OyZndDsgYXV0aGVudGljYXRpbmcgdGhlIHRyYW5zYWN0aW9uLCBhbmQgaWYgeW91IGNh bid0IHRydXN0IGl0IHRvIGRvIHRoYXQsPGJyIGNsYXNzPSIiPg0KJmd0OyZndDsgeW91IGNhbid0 IHRydXN0IGl0IHRvIGF1dGhlbnRpY2F0ZSB0aGUgYmlkLWRvd24gZGVmZW5zZSBlaXRoZXIuPGJy IGNsYXNzPSIiPg0KJmd0OyZndDsgPGJyIGNsYXNzPSIiPg0KJmd0OyZndDsgPGJyIGNsYXNzPSIi Pg0KJmd0OyZndDsgRHVyaW5nIG91ciBkaXNjdXNzaW9uLCB0aGVyZSB3YXMgYSBzdWdnZXN0aW9u IHRoYXQgaXQgd2FzIHVzZWZ1bCB0bzxiciBjbGFzcz0iIj4NCiZndDsmZ3Q7IGhhdmUgYmlkZG93 biBkZWZlbnNlIHRvIGRlZmVuZCBhZ2FpbnN0IHdlYWtuZXNzZXMgaW4gSDIuIEkgZG9uJ3QgdGhp bms8YnIgY2xhc3M9IiI+DQomZ3Q7Jmd0OyB0aGF0IHRoYXQncyB0cnVlIGVpdGhlci4gRmlyc3Qs IHJlbWVtYmVyIHRoYXQgdGhlIHB1cnBvc2Ugb2YgSDIgaXMgdG88YnIgY2xhc3M9IiI+DQomZ3Q7 Jmd0OyBwcmV2ZW50IGFuIGF0dGFja2VyIHdobyByZWNvdmVycyB0aGUgcGFzc3dvcmQgZGF0YWJh c2UgZnJvbSBsZWFybmluZzxiciBjbGFzcz0iIj4NCiZndDsmZ3Q7IHRoZSB1c2VyJ3MgdHJ1ZSBw YXNzd29yZC4gVGhpcyBpcyBub3QgYWJvdXQgZGVmZW5kaW5nIHRoZSBzZXJ2ZXIgZnJvbTxiciBj bGFzcz0iIj4NCiZndDsmZ3Q7IGF0dGFjayAoYmVjYXVzZSBrbm93aW5nIEExIGlzIGVub3VnaCB0 byBhdHRhY2sgdGhlIHNlcnZlcikgYnV0IGFib3V0PGJyIGNsYXNzPSIiPg0KJmd0OyZndDsgcHJl dmVudGluZyB0aGUgYXR0YWNrZXIgZnJvbSBsZWFybmluZyBhIHBhc3N3b3JkIHdoaWNoIG1pZ2h0 IGhhdmUgYmVlbjxiciBjbGFzcz0iIj4NCiZndDsmZ3Q7IHJldXNlZCBvbiBhbm90aGVyIHNpdGUu PGJyIGNsYXNzPSIiPg0KJmd0OyZndDsgPGJyIGNsYXNzPSIiPg0KJmd0OyZndDsgTm93LCBpdCdz IGFsc28gcG9zc2libGUgdG8gYnJ1dGUtZm9yY2UgdGhlIHVzZXIncyBwYXNzd29yZCBqdXN0IGZy b208YnIgY2xhc3M9IiI+DQomZ3Q7Jmd0OyB0aGUgcHJvdG9jb2wgdHJhbnNjcmlwdDogaWYgeW91 IGNhcHR1cmUgdGhlIGNsaWVudCdzIGZpcnN0IG1lc3NhZ2U8YnIgY2xhc3M9IiI+DQomZ3Q7Jmd0 OyB3aXRoIE1FU1NBR0UtSU5URUdSSVRZIG9yIE1FU1NBR0UtSU5URUdSSVRZLVNIQTI1NiwgeW91 IGNhbiBqdXN0IGtlZXA8YnIgY2xhc3M9IiI+DQomZ3Q7Jmd0OyB0cnlpbmcgcGFzc3dvcmRzIHVu dGlsIHlvdSBnZXQgdGhlIHJpZ2h0IE1BQy4gTm90ZSB0aGF0IHRoaXMgaXMgYTxiciBjbGFzcz0i Ij4NCiZndDsmZ3Q7IHBhc3NpdmUgYXR0YWNrLiBUaGlzIGlzIGNvbXBhcmF0aXZlbHkgZmFzdCBi ZWNhdXNlIFNIQTI1NiBhbmQgTUQ1IGFyZTxiciBjbGFzcz0iIj4NCiZndDsmZ3Q7IGZhc3QuPGJy IGNsYXNzPSIiPg0KJmd0OyZndDsgPGJyIGNsYXNzPSIiPg0KJmd0OyZndDsgQSBtdWNoIHN0cm9u Z2VyIEgyIChlLmcuLCBBcmdvbikgd291bGQgaGVscCBhZ2FpbnN0IHRoaXMsIGJ1dCB0aGU8YnIg Y2xhc3M9IiI+DQomZ3Q7Jmd0OyBwcm9ibGVtIG5vdyBiZWNvbWVzIHRoYXQgdGhlIGNsaWVudCBz dXBwb3J0cyBIMiA9PSBNRDUgKG9yIFNIQS0yNTYpPGJyIGNsYXNzPSIiPg0KJmd0OyZndDsgYW5k IHNvIGV2ZW4gaWYgdGhlIHNlcnZlciBzdXBwb3J0cyBBcmdvbiwgdGhlIGF0dGFja2VyIGNhbiBt b3VudCBhPGJyIGNsYXNzPSIiPg0KJmd0OyZndDsgYmlkLWRvd24gZGVmZW5zZSBpbiB3aGljaCBp dCBtb2RpZmllcyB0aGUgc2VydmVyJ3MgZmlyc3QgbWVzc2FnZSB0bzxiciBjbGFzcz0iIj4NCiZn dDsmZ3Q7IGp1c3QgYWR2ZXJ0aXNlIE1ENSBhbmQgdGh1cyBnZXQgdGhlIGNsaWVudCB0byBwcm92 aWRlIGEgc3VpdGFibGU8YnIgY2xhc3M9IiI+DQomZ3Q7Jmd0OyBtZXNzYWdlLiBUaGUgYmlkLWRv d24gZGVmZW5zZSB3b3VsZCBwcmV2ZW50IHRoZSBhdXRoZW50aWNhdGlvbjxiciBjbGFzcz0iIj4N CiZndDsmZ3Q7IHRyYW5zYWN0aW9uIGZyb20gY29tcGxldGluZywgYnV0IHRoYXQncyBub3QgbmVj ZXNzYXJ5IGZvciB0aGlzPGJyIGNsYXNzPSIiPg0KJmd0OyZndDsgYXR0YWNrIGJlY2F1c2UgdGhl IGF0dGFja2VyIGNhbiBqdXN0IGJydXRlLWZvcmNlIHRoZSBwYXNzd29yZCBmcm9tPGJyIGNsYXNz PSIiPg0KJmd0OyZndDsgdGhlIG1lc3NhZ2UgaXQgaGFzLiBUbyBtYWtlIHRoaXMgd29yaywgeW91 IHdvdWxkIG5lZWQgc29tZXRoaW5nPGJyIGNsYXNzPSIiPg0KJmd0OyZndDsgbGlrZSBhIFBBS0Us IHdoaWNoIHRoaXMgaXMgbm90LjxiciBjbGFzcz0iIj4NCiZndDsmZ3Q7IDxiciBjbGFzcz0iIj4N CiZndDsmZ3Q7IEZpbmFsbHksIHlvdSBtaWdodCB0aGluayB0aGF0IHRoZSBzZXJ2ZXIgaGFzIHR3 byBkYXRhYmFzZXMsIG9uZTxiciBjbGFzcz0iIj4NCiZndDsmZ3Q7IHdoaWNoIHVzZXMgQXJnb24g YW5kIG9uZSB3aGljaCB1c2VzIE1ENSBhbmQgaXQgd2FudHMgdG8gZ3JhZHVhbGx5PGJyIGNsYXNz PSIiPg0KJmd0OyZndDsgcGhhc2Ugb3V0IHRoZSBNRDUgb25lLCB3aGljaCBpdCB3aWxsIGRvIHdo ZW4gbm8gY2xpZW50IGF1dGhlbnRpY2F0ZXM8YnIgY2xhc3M9IiI+DQomZ3Q7Jmd0OyB3aXRoIE1E NSBmb3IgYSB2ZXJ5IGxvbmcgdGltZS4gQW4gYW50aS1iaWRkb3duIGRlZmVuc2Ugd291bGQgc29y dDxiciBjbGFzcz0iIj4NCiZndDsmZ3Q7IG9mIHdvcmsgaGVyZSwgYnV0IHRoZSBmYWN0IHRoYXQg dGhlIGF0dGFja2VyIHdvdWxkIGhhdmUgdG8gYmU8YnIgY2xhc3M9IiI+DQomZ3Q7Jmd0OyBhY3Rp dmUgZXNzZW50aWFsbHkgaW5kZWZpbml0ZWx5IHRvIGtlZXAgdGhlIHNlcnZlciBjb25mdXNlZCBh Ym91dDxiciBjbGFzcz0iIj4NCiZndDsmZ3Q7IHRoZSBzdGF0ZSBvZiBjbGllbnRzIC0tIGFuZCB0 aGF0IHRoZSBhdHRhY2tlciBjYW4gbGlrZWx5IGp1c3Q8YnIgY2xhc3M9IiI+DQomZ3Q7Jmd0OyBn ZXQgYSB2YWxpZCBhY2NvdW50IGFuZCB0aGVuIGluc2lzdCBvbiB1c2luZyBNRDUgLS0gbWFrZXMg dGhpcyBhPGJyIGNsYXNzPSIiPg0KJmd0OyZndDsgbm90IHZlcnkgdXNlZnVsIGRlZmVuc2UuPGJy IGNsYXNzPSIiPg0KJmd0OyZndDsgPGJyIGNsYXNzPSIiPg0KJmd0OyZndDsgSSB0aGluayB0aGlz IG1ha2VzIGEgcHJldHR5IHBlcnN1YXNpdmUgY2FzZSB0aGF0IHRoZSBiaWQtZG93biBkZWZlbnNl PGJyIGNsYXNzPSIiPg0KJmd0OyZndDsgaXNuJ3QgdXNlZnVsIGV4Y2VwdCBpbiB0aGUgZm9ybWFs ICZxdW90O2F0dGFja2VyIGNhbm5vdCBpbmZsdWVuY2U8YnIgY2xhc3M9IiI+DQomZ3Q7Jmd0OyBu ZWdvdGlhdGlvbiZxdW90OyBzZW5zZS4gV2l0aCB0aGF0IHNhaWQsIGluIHRoZSBzcGlyaXQgb2Yg Z2V0dGluZyB0aGlzIGRvbmUsIEk8YnIgY2xhc3M9IiI+DQomZ3Q7Jmd0OyBndWVzczxiciBjbGFz cz0iIj4NCiZndDsmZ3Q7IEknbSB3aWxsaW5nIHRvIGxldCB0aGlzIGdvIGlmIHRoZSBzZWN1cml0 eSBjb25zaWRlcmF0aW9ucyBtYWtlIGNsZWFyPGJyIGNsYXNzPSIiPg0KJmd0OyZndDsgdGhhdCBp dCBpcyBvbmx5IGEgdmVyeSBsaW1pdGVkIG1lY2hhbmlzbS48YnIgY2xhc3M9IiI+DQomZ3Q7Jmd0 OyA8YnIgY2xhc3M9IiI+DQomZ3Q7Jmd0OyAtRWtyPGJyIGNsYXNzPSIiPg0KJmd0OyZndDsgPGJy IGNsYXNzPSIiPg0KJmd0OyZndDsgPGJyIGNsYXNzPSIiPg0KJmd0OyZndDsgWzBdIFRoaXMgaXMg cHJpbmNpcGFsbHkgYWJvdXQgSDEuIEFzIGxvbmcgYXMgdGhlIEgyIGFwcHJveGltYXRlbHk8YnIg Y2xhc3M9IiI+DQomZ3Q7Jmd0OyBldmVubHkgZGlzdHJpYnV0ZXMgdGhlIHBhc3N3b3JkIG92ZXIg aXRzIHJhbmdlLCB0aGVuIGNyeXB0b2dyYXBoaWM8YnIgY2xhc3M9IiI+DQomZ3Q7Jmd0OyBzdHJl bmd0aCBpcyBub3QgaW1wb3J0YW50IGZvciB0aGlzIHF1ZXN0aW9uLiBGb3IgaW5zdGFuY2UsIHlv dTxiciBjbGFzcz0iIj4NCiZndDsmZ3Q7IGNvdWxkIHJlcGxhY2UgSDIgd2l0aCBhbiBpZGVudGl0 eSBmdW5jdGlvbiBhbmQgc3RpbGwgaGF2ZSBhPGJyIGNsYXNzPSIiPg0KJmd0OyZndDsgc2VjdXJl IHByb3RvY29sLjxiciBjbGFzcz0iIj4NCiZndDsmZ3Q7IDxiciBjbGFzcz0iIj4NCiZndDsmZ3Q7 IDxiciBjbGFzcz0iIj4NCiZndDsmZ3Q7IDxiciBjbGFzcz0iIj4NCiZndDsmZ3Q7IDxiciBjbGFz cz0iIj4NCiZndDsmZ3Q7IDxiciBjbGFzcz0iIj4NCiZndDsmZ3Q7IDxiciBjbGFzcz0iIj4NCiZn dDsmZ3Q7IE9uIFdlZCwgRmViIDIwLCAyMDE5IGF0IDQ6MDMgQU0gR29uemFsbyBDYW1hcmlsbG8g Jmx0OzxiciBjbGFzcz0iIj4NCiZndDsmZ3Q7IDxhIGhyZWY9Im1haWx0bzpnb256YWxvLmNhbWFy aWxsb0Blcmljc3Nvbi5jb20iIHRhcmdldD0iX2JsYW5rIiBjbGFzcz0iIj5nb256YWxvLmNhbWFy aWxsb0Blcmljc3Nvbi5jb208L2E+Jmd0OyB3cm90ZTo8YnIgY2xhc3M9IiI+DQomZ3Q7Jmd0OyA8 YnIgY2xhc3M9IiI+DQomZ3Q7Jmd0OyZndDsgVGhhbmtzLCBHb256YWxvISBQbGVhc2UsIGxldCB1 cyBrbm93IHRoZSBhZ3JlZWQgd2F5IGZvcndhcmQgb25jZSB5b3U8YnIgY2xhc3M9IiI+DQomZ3Q7 Jmd0OyZndDsgaGF2ZSB0aGUgY2FsbC48YnIgY2xhc3M9IiI+DQomZ3Q7Jmd0OyZndDsgPGJyIGNs YXNzPSIiPg0KJmd0OyZndDsmZ3Q7IENoZWVycyw8YnIgY2xhc3M9IiI+DQomZ3Q7Jmd0OyZndDsg PGJyIGNsYXNzPSIiPg0KJmd0OyZndDsmZ3Q7IEdvbnphbG88YnIgY2xhc3M9IiI+DQomZ3Q7Jmd0 OyZndDsgPGJyIGNsYXNzPSIiPg0KJmd0OyZndDsmZ3Q7Jmd0OyBPbiAxOS1GZWItMTkgMjA6MDUs IEdvbnphbG8gU2FsZ3VlaXJvIChnc2FsZ3VlaSkgd3JvdGU6PGJyIGNsYXNzPSIiPg0KJmd0OyZn dDsmZ3Q7Jmd0OyBIaSBHb256YWxvIC08YnIgY2xhc3M9IiI+DQomZ3Q7Jmd0OyZndDsmZ3Q7IDxi ciBjbGFzcz0iIj4NCiZndDsmZ3Q7Jmd0OyZndDsgV2UgaGF2ZSBzY2hlZHVsZWQgYSBjb25mZXJl bmNlIGNhbGwgd2l0aCBFa3IsIFNpbW9uLCBNYXJjIGFuZCBteXNlbGYgb248YnIgY2xhc3M9IiI+ DQomZ3Q7Jmd0OyZndDsgTWFyY2ggN3RoIHRvIGRpc2N1c3MgdGhlIGxhc3QgdHdvIHJlbWFpbmlu ZyBpc3N1ZXMuJm5ic3A7IFdpbGwgdXBkYXRlIHdpdGg8YnIgY2xhc3M9IiI+DQomZ3Q7Jmd0OyZn dDsgcmVzb2x1dGlvbnMgb25jZSB0aGlzIGhhcyBvY2N1cnJlZC48YnIgY2xhc3M9IiI+DQomZ3Q7 Jmd0OyZndDsmZ3Q7IDxiciBjbGFzcz0iIj4NCiZndDsmZ3Q7Jmd0OyZndDsgQ2hlZXJzLDxiciBj bGFzcz0iIj4NCiZndDsmZ3Q7Jmd0OyZndDsgPGJyIGNsYXNzPSIiPg0KJmd0OyZndDsmZ3Q7Jmd0 OyBHb256YWxvPGJyIGNsYXNzPSIiPg0KJmd0OyZndDsmZ3Q7Jmd0OyA8YnIgY2xhc3M9IiI+DQom Z3Q7Jmd0OyZndDsmZ3Q7IDxiciBjbGFzcz0iIj4NCiZndDsmZ3Q7Jmd0OyZndDsgPGJyIGNsYXNz PSIiPg0KJmd0OyZndDsmZ3Q7Jmd0OyZndDsgT24gRmViIDE4LCAyMDE5LCBhdCA4OjE4IEFNLCBH b256YWxvIENhbWFyaWxsbyAmbHQ7PGJyIGNsYXNzPSIiPg0KJmd0OyZndDsmZ3Q7IDxhIGhyZWY9 Im1haWx0bzpHb256YWxvLkNhbWFyaWxsb0Blcmljc3Nvbi5jb20iIHRhcmdldD0iX2JsYW5rIiBj bGFzcz0iIj5Hb256YWxvLkNhbWFyaWxsb0Blcmljc3Nvbi5jb208L2E+Jmd0OyB3cm90ZTo8YnIg Y2xhc3M9IiI+DQomZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyA8YnIgY2xhc3M9IiI+DQomZ3Q7Jmd0OyZn dDsmZ3Q7Jmd0OyBIaSBHb256YWxvIFMsPGJyIGNsYXNzPSIiPg0KJmd0OyZndDsmZ3Q7Jmd0OyZn dDsgPGJyIGNsYXNzPSIiPg0KJmd0OyZndDsmZ3Q7Jmd0OyZndDsgd2hhdCBpcyB0aGUgc3RhdHVz IG9mIHRoaXMgb25lPzxiciBjbGFzcz0iIj4NCiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7IDxiciBjbGFz cz0iIj4NCiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7IFRoYW5rcyw8YnIgY2xhc3M9IiI+DQomZ3Q7Jmd0 OyZndDsmZ3Q7Jmd0OyA8YnIgY2xhc3M9IiI+DQomZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyBHb256YWxv PGJyIGNsYXNzPSIiPg0KJmd0OyZndDsmZ3Q7Jmd0OyZndDsgPGJyIGNsYXNzPSIiPg0KJmd0OyZn dDsmZ3Q7Jmd0OyZndDsmZ3Q7IE9uIDE4LUphbi0xOSAyMDoxNiwgR29uemFsbyBTYWxndWVpcm8g KGdzYWxndWVpKSB3cm90ZTo8YnIgY2xhc3M9IiI+DQomZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsg VG90YWxseSBhZ3JlZSwgRWtyLiZuYnNwOyBNYXJjIGFuZCBJIGFyZSBtZWV0aW5nIHRvIGNvbWUg dXAgd2l0aCBhIHByb3Bvc2FsPGJyIGNsYXNzPSIiPg0KJmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7 IGJ1dCBJIGRvIGFncmVlIHdlIG5lZWQgdG8gaGF2ZSBhIGNhbGwgdG8gZ2V0IHRoaXMgcHV0IHRv IGJlZCBvbmNlIGFuZDxiciBjbGFzcz0iIj4NCiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyBmb3Ig YWxsLiZuYnNwOyBXZeKAmWxsIG9mZmVyIHNvbWUgcG90ZW50aWFsIGRhdGVzIGluIHRoZSBuZXh0 IDItMyB3ZWVrcy48YnIgY2xhc3M9IiI+DQomZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsgPGJyIGNs YXNzPSIiPg0KJmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7IENoZWVycyw8YnIgY2xhc3M9IiI+DQom Z3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsgPGJyIGNsYXNzPSIiPg0KJmd0OyZndDsmZ3Q7Jmd0OyZn dDsmZ3Q7IEdvbnphbG88YnIgY2xhc3M9IiI+DQomZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsgPGJy IGNsYXNzPSIiPg0KJmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7IDxiciBjbGFzcz0iIj4NCiZndDsm Z3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsgT24gRGVjIDI2LCAyMDE4LCBhdCA4OjA1IFBNLCBFcmlj IFJlc2NvcmxhICZsdDs8YSBocmVmPSJtYWlsdG86ZWtyQHJ0Zm0uY29tIiB0YXJnZXQ9Il9ibGFu ayIgY2xhc3M9IiI+ZWtyQHJ0Zm0uY29tPC9hPjxiciBjbGFzcz0iIj4NCiZndDsmZ3Q7Jmd0OyZn dDsmZ3Q7Jmd0OyZndDsgJmx0O21haWx0bzo8YSBocmVmPSJtYWlsdG86ZWtyQHJ0Zm0uY29tIiB0 YXJnZXQ9Il9ibGFuayIgY2xhc3M9IiI+ZWtyQHJ0Zm0uY29tPC9hPiZndDsmZ3Q7IHdyb3RlOjxi ciBjbGFzcz0iIj4NCiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsgPGJyIGNsYXNzPSIiPg0K Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyBXZSByZWFsbHkgbmVlZCB0byBicmluZyB0aGlz IHRvIGEgY2xvc2UgYmVmb3JlIGJvdGggU3BlbmNlciBhbmQgSTxiciBjbGFzcz0iIj4NCiZndDsm Z3Q7Jmd0OyBzdGVwPGJyIGNsYXNzPSIiPg0KJmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyBk b3duLCBJIHNob3VsZCB0aGluay48YnIgY2xhc3M9IiI+DQomZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZn dDsmZ3Q7IDxiciBjbGFzcz0iIj4NCiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsgLUVrcjxi ciBjbGFzcz0iIj4NCiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsgPGJyIGNsYXNzPSIiPg0K Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyA8YnIgY2xhc3M9IiI+DQomZ3Q7Jmd0OyZndDsm Z3Q7Jmd0OyZndDsmZ3Q7IE9uIFRodSwgTm92IDIyLCAyMDE4IGF0IDQ6MzAgQU0gR29uemFsbyBD YW1hcmlsbG88YnIgY2xhc3M9IiI+DQomZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7ICZsdDs8 YSBocmVmPSJtYWlsdG86Z29uemFsby5jYW1hcmlsbG9AZXJpY3Nzb24uY29tIiB0YXJnZXQ9Il9i bGFuayIgY2xhc3M9IiI+Z29uemFsby5jYW1hcmlsbG9AZXJpY3Nzb24uY29tPC9hPjxiciBjbGFz cz0iIj4NCiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsgJmx0O21haWx0bzo8YSBocmVmPSJt YWlsdG86Z29uemFsby5jYW1hcmlsbG9AZXJpY3Nzb24uY29tIiB0YXJnZXQ9Il9ibGFuayIgY2xh c3M9IiI+Z29uemFsby5jYW1hcmlsbG9AZXJpY3Nzb24uY29tPC9hPiZndDsmZ3Q7IHdyb3RlOjxi ciBjbGFzcz0iIj4NCiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsgPGJyIGNsYXNzPSIiPg0K Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZuYnNwOyAmbmJzcDtFcmljLCBTcGVuY2VyLCB0 aGFua3MgZm9yIHRoZSBzdGF0dXMgdXBkYXRlITxiciBjbGFzcz0iIj4NCiZndDsmZ3Q7Jmd0OyZn dDsmZ3Q7Jmd0OyZndDsgPGJyIGNsYXNzPSIiPg0KJmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0 OyZuYnNwOyAmbmJzcDtBdXRob3JzLCBjb3VsZCB5b3UgcGxlYXNlIGxldCB1cyBrbm93IHdoZW4g eW91IHBsYW4gdG8gZ2V0IHRvPGJyIGNsYXNzPSIiPg0KJmd0OyZndDsmZ3Q7IHRoaXM/PGJyIGNs YXNzPSIiPg0KJmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyA8YnIgY2xhc3M9IiI+DQomZ3Q7 Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jm5ic3A7ICZuYnNwO0dvbnphbG88YnIgY2xhc3M9IiI+ DQomZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7IDxiciBjbGFzcz0iIj4NCiZndDsmZ3Q7Jmd0 OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jm5ic3A7ICZuYnNwO09uIDE5LU5vdi0xOCAyMzowNCwgU3Bl bmNlciBEYXdraW5zIGF0IElFVEYgd3JvdGU6PGJyIGNsYXNzPSIiPg0KJmd0OyZndDsmZ3Q7Jmd0 OyZndDsmZ3Q7Jmd0OyZndDsgSGksIEdvbnphbG8sPGJyIGNsYXNzPSIiPg0KJmd0OyZndDsmZ3Q7 Jmd0OyZndDsmZ3Q7Jmd0OyZndDsgT24gTW9uLCBOb3YgMTksIDIwMTggYXQgOTowNiBBTSBFcmlj IFJlc2NvcmxhICZsdDs8YSBocmVmPSJtYWlsdG86ZWtyQHJ0Zm0uY29tIiB0YXJnZXQ9Il9ibGFu ayIgY2xhc3M9IiI+ZWtyQHJ0Zm0uY29tPC9hPjxiciBjbGFzcz0iIj4NCiZndDsmZ3Q7Jmd0OyZn dDsmZ3Q7Jmd0OyZndDsmbmJzcDsgJm5ic3A7Jmx0O21haWx0bzo8YSBocmVmPSJtYWlsdG86ZWty QHJ0Zm0uY29tIiB0YXJnZXQ9Il9ibGFuayIgY2xhc3M9IiI+ZWtyQHJ0Zm0uY29tPC9hPiZndDs8 YnIgY2xhc3M9IiI+DQomZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyAmbHQ7bWFpbHRv OjxhIGhyZWY9Im1haWx0bzpla3JAcnRmbS5jb20iIHRhcmdldD0iX2JsYW5rIiBjbGFzcz0iIj5l a3JAcnRmbS5jb208L2E+ICZsdDttYWlsdG86PGEgaHJlZj0ibWFpbHRvOmVrckBydGZtLmNvbSIg dGFyZ2V0PSJfYmxhbmsiIGNsYXNzPSIiPmVrckBydGZtLmNvbTwvYT4mZ3Q7Jmd0OyZndDsgd3Jv dGU6PGJyIGNsYXNzPSIiPg0KJmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsgPGJyIGNs YXNzPSIiPg0KJmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmbmJzcDsgJm5ic3A7ICZu YnNwO05vdCByZWFsbHkuIEkgaGF2ZSBub3QgcmVjZWl2ZWQgYW55IHJlc3BvbnNlIHRvIG15IG1h aWwgb2Y8YnIgY2xhc3M9IiI+DQomZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jm5ic3A7ICZu YnNwO09jdCAyMy48YnIgY2xhc3M9IiI+DQomZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0 OyZuYnNwOyAmbmJzcDsgJm5ic3A7QXMgYmVmb3JlLCBJJ20gaGFwcHkgdG8gaGF2ZSBhIGNhbGws IGJ1dCBJIGJlbGlldmUgd2UncmU8YnIgY2xhc3M9IiI+DQomZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZn dDsmZ3Q7Jm5ic3A7ICZuYnNwO3JlYWNoaW5nPGJyIGNsYXNzPSIiPg0KJmd0OyZndDsmZ3Q7Jmd0 OyZndDsmZ3Q7Jmd0OyZndDsmbmJzcDsgJm5ic3A7ICZuYnNwO3RoZSBsaW1pdHMgb2Ygd2hhdCBj YW4gYmUgYWNjb21wbGlzaGVkIGJ5IGVtYWlsLjxiciBjbGFzcz0iIj4NCiZndDsmZ3Q7Jmd0OyZn dDsmZ3Q7Jmd0OyZndDsmZ3Q7IDxiciBjbGFzcz0iIj4NCiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0 OyZndDsmZ3Q7IDxiciBjbGFzcz0iIj4NCiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7 IEVyaWMgd291bGQga25vdyBiZXN0IChpdCBiZWluZyBoaXMgRGlzY3VzcyksIGJ1dCB0aGlzIGlz IGFsc28gbXk8YnIgY2xhc3M9IiI+DQomZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyB1 bmRlcnN0YW5kaW5nLjxiciBjbGFzcz0iIj4NCiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsm Z3Q7IDxiciBjbGFzcz0iIj4NCiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7IEkgY2Fu IGFkZCB0aGlzIHRvIHRoZSBhZ2VuZGEgb2YgdGhlIElFU0cgaW5mb3JtYWwgdGVsZWNoYXQgb248 YnIgY2xhc3M9IiI+DQomZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jm5ic3A7ICZuYnNwO05v dmVtYmVyPGJyIGNsYXNzPSIiPg0KJmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsgMjks IGlmIHRoZXJlIGhhc24ndCBiZWVuIGEgY2FsbCBiZWZvcmUgdGhlbiwgYnV0IEkgZG9uJ3QgaGF2 ZSBhPGJyIGNsYXNzPSIiPg0KJmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZuYnNwOyAmbmJz cDtyZWFzb248YnIgY2xhc3M9IiI+DQomZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyB0 byB3YWl0IHVudGlsIHRoZW4sIGlmIGl0J3MgcG9zc2libGUgdG8gdGFsayBzb29uZXIuPGJyIGNs YXNzPSIiPg0KJmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsgPGJyIGNsYXNzPSIiPg0K Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsgVGhhbmtzLDxiciBjbGFzcz0iIj4NCiZn dDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7IDxiciBjbGFzcz0iIj4NCiZndDsmZ3Q7Jmd0 OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7IFNwZW5jZXI8YnIgY2xhc3M9IiI+DQomZ3Q7Jmd0OyZndDsm Z3Q7Jmd0OyZndDsmZ3Q7Jmd0OyA8YnIgY2xhc3M9IiI+DQomZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZn dDsmZ3Q7Jmd0OyA8YnIgY2xhc3M9IiI+DQomZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0 OyA8YnIgY2xhc3M9IiI+DQomZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZuYnNwOyAm bmJzcDsgJm5ic3A7LUVrcjxiciBjbGFzcz0iIj4NCiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZn dDsmZ3Q7IDxiciBjbGFzcz0iIj4NCiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7IDxi ciBjbGFzcz0iIj4NCiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jm5ic3A7ICZuYnNw OyAmbmJzcDtPbiBNb24sIE5vdiAxOSwgMjAxOCBhdCA2OjM1IEFNIEdvbnphbG8gQ2FtYXJpbGxv PGJyIGNsYXNzPSIiPg0KJmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmbmJzcDsgJm5i c3A7ICZuYnNwOyZsdDs8YSBocmVmPSJtYWlsdG86Z29uemFsby5jYW1hcmlsbG9AZXJpY3Nzb24u Y29tIiB0YXJnZXQ9Il9ibGFuayIgY2xhc3M9IiI+Z29uemFsby5jYW1hcmlsbG9AZXJpY3Nzb24u Y29tPC9hPjxiciBjbGFzcz0iIj4NCiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmbmJzcDsg Jm5ic3A7Jmx0O21haWx0bzo8YSBocmVmPSJtYWlsdG86Z29uemFsby5jYW1hcmlsbG9AZXJpY3Nz b24uY29tIiB0YXJnZXQ9Il9ibGFuayIgY2xhc3M9IiI+Z29uemFsby5jYW1hcmlsbG9AZXJpY3Nz b24uY29tPC9hPiZndDs8YnIgY2xhc3M9IiI+DQomZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7 Jmd0OyZuYnNwOyAmbmJzcDsgJm5ic3A7Jmx0O21haWx0bzo8YSBocmVmPSJtYWlsdG86Z29uemFs by5jYW1hcmlsbG9AZXJpY3Nzb24uY29tIiB0YXJnZXQ9Il9ibGFuayIgY2xhc3M9IiI+Z29uemFs by5jYW1hcmlsbG9AZXJpY3Nzb24uY29tPC9hPjxiciBjbGFzcz0iIj4NCiZndDsmZ3Q7Jmd0OyZn dDsmZ3Q7Jmd0OyZndDsmbmJzcDsgJm5ic3A7Jmx0O21haWx0bzo8YSBocmVmPSJtYWlsdG86Z29u emFsby5jYW1hcmlsbG9AZXJpY3Nzb24uY29tIiB0YXJnZXQ9Il9ibGFuayIgY2xhc3M9IiI+Z29u emFsby5jYW1hcmlsbG9AZXJpY3Nzb24uY29tPC9hPiZndDsmZ3Q7Jmd0OyB3cm90ZTo8YnIgY2xh c3M9IiI+DQomZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyA8YnIgY2xhc3M9IiI+DQom Z3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNw OyAmbmJzcDtIaSBTcGVuY2VyLDxiciBjbGFzcz0iIj4NCiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0 OyZndDsmZ3Q7IDxiciBjbGFzcz0iIj4NCiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7 Jm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwO3doYXQgaXMgdGhlIHN0YXR1cyBvZiB0 aGlzPyBBcmUgdGhlIGF1dGhvcnMgYW5kIHRoZTxiciBjbGFzcz0iIj4NCiZndDsmZ3Q7Jmd0OyBk b2N1bWVudDxiciBjbGFzcz0iIj4NCiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jm5i c3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwO3NoZXBoZXJkPGJyIGNsYXNzPSIiPg0KJmd0 OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsg Jm5ic3A7d29ya2luZyB3aXRoIHRoZSByZWxldmFudCBBRHMgb24gdGhlIGRpc2N1c3Nlcz88YnIg Y2xhc3M9IiI+DQomZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyA8YnIgY2xhc3M9IiI+ DQomZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyA8YnIgY2xhc3M9IiI+DQomZ3Q7Jmd0 OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7IDxiciBjbGFzcz0iIj4NCiZndDsmZ3Q7Jmd0OyA8YSBocmVm PSJodHRwczovL2RhdGF0cmFja2VyLmlldGYub3JnL2RvYy9kcmFmdC1pZXRmLXRyYW0tc3R1bi1w bXR1ZC9iYWxsb3QvIiByZWw9Im5vcmVmZXJyZXIiIHRhcmdldD0iX2JsYW5rIiBjbGFzcz0iIj4N Cmh0dHBzOi8vZGF0YXRyYWNrZXIuaWV0Zi5vcmcvZG9jL2RyYWZ0LWlldGYtdHJhbS1zdHVuLXBt dHVkL2JhbGxvdC88L2E+PGJyIGNsYXNzPSIiPg0KJmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0 OyZndDsgPGJyIGNsYXNzPSIiPg0KJmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmbmJz cDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7Q2hlZXJzLDxiciBjbGFzcz0iIj4NCiZndDsm Z3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7IDxiciBjbGFzcz0iIj4NCiZndDsmZ3Q7Jmd0OyZn dDsmZ3Q7Jmd0OyZndDsmZ3Q7Jm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwO0dvbnph bG88YnIgY2xhc3M9IiI+DQomZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyA8YnIgY2xh c3M9IiI+DQomZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmbmJzcDsgJm5ic3A7 ICZuYnNwOyAmbmJzcDsgJm5ic3A7T24gMjQtT2N0LTE4IDE2OjQwLCBTcGVuY2VyIERhd2tpbnMg YXQgSUVURiB3cm90ZTo8YnIgY2xhc3M9IiI+DQomZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7 Jmd0OyZndDsgSGksIE1hcmMsPGJyIGNsYXNzPSIiPg0KJmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7 Jmd0OyZndDsmZ3Q7IDxiciBjbGFzcz0iIj4NCiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsm Z3Q7Jmd0OyBPbiBXZWQsIE9jdCAyNCwgMjAxOCBhdCAzOjQ0IEFNIE1hcmMgUGV0aXQtSHVndWVu aW48YnIgY2xhc3M9IiI+DQomZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZuYnNwOyAm bmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsmbHQ7PGEgaHJlZj0ibWFpbHRvOnBldGl0aHVnQGFj bS5vcmciIHRhcmdldD0iX2JsYW5rIiBjbGFzcz0iIj5wZXRpdGh1Z0BhY20ub3JnPC9hPiAmbHQ7 bWFpbHRvOjxhIGhyZWY9Im1haWx0bzpwZXRpdGh1Z0BhY20ub3JnIiB0YXJnZXQ9Il9ibGFuayIg Y2xhc3M9IiI+cGV0aXRodWdAYWNtLm9yZzwvYT4mZ3Q7PGJyIGNsYXNzPSIiPg0KJmd0OyZndDsm Z3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZuYnNwOyAmbmJzcDsmbHQ7bWFpbHRvOjxhIGhyZWY9Im1haWx0 bzpwZXRpdGh1Z0BhY20ub3JnIiB0YXJnZXQ9Il9ibGFuayIgY2xhc3M9IiI+cGV0aXRodWdAYWNt Lm9yZzwvYT4gJmx0O21haWx0bzo8YSBocmVmPSJtYWlsdG86cGV0aXRodWdAYWNtLm9yZyIgdGFy Z2V0PSJfYmxhbmsiIGNsYXNzPSIiPnBldGl0aHVnQGFjbS5vcmc8L2E+Jmd0OyZndDs8YnIgY2xh c3M9IiI+DQomZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsgJmx0O21haWx0bzo8 YSBocmVmPSJtYWlsdG86cGV0aXRodWdAYWNtLm9yZyIgdGFyZ2V0PSJfYmxhbmsiIGNsYXNzPSIi PnBldGl0aHVnQGFjbS5vcmc8L2E+ICZsdDttYWlsdG86PGEgaHJlZj0ibWFpbHRvOnBldGl0aHVn QGFjbS5vcmciIHRhcmdldD0iX2JsYW5rIiBjbGFzcz0iIj5wZXRpdGh1Z0BhY20ub3JnPC9hPiZn dDs8YnIgY2xhc3M9IiI+DQomZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jm5ic3A7ICZuYnNw OyZsdDttYWlsdG86PGEgaHJlZj0ibWFpbHRvOnBldGl0aHVnQGFjbS5vcmciIHRhcmdldD0iX2Js YW5rIiBjbGFzcz0iIj5wZXRpdGh1Z0BhY20ub3JnPC9hPiAmbHQ7bWFpbHRvOjxhIGhyZWY9Im1h aWx0bzpwZXRpdGh1Z0BhY20ub3JnIiB0YXJnZXQ9Il9ibGFuayIgY2xhc3M9IiI+cGV0aXRodWdA YWNtLm9yZzwvYT4mZ3Q7Jmd0OyZndDsmZ3Q7IHdyb3RlOjxiciBjbGFzcz0iIj4NCiZndDsmZ3Q7 Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyA8YnIgY2xhc3M9IiI+DQomZ3Q7Jmd0OyZndDsm Z3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmbmJzcDsgJm5ic3A7IEhpIFNwZW5jZXIsPGJyIGNsYXNz PSIiPg0KJmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7IDxiciBjbGFzcz0iIj4N CiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZuYnNwOyAmbmJzcDsgSSBzZW50 IG15IGFuc3dlcnMgdG8gRXJpYyBSZXNjb3JsYSBxdWVzdGlvbnMgb248YnIgY2xhc3M9IiI+DQom Z3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jm5ic3A7ICZuYnNwOzIwMTgtMTAtMDc8YnIgY2xh c3M9IiI+DQomZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZuYnNwOyAmbmJzcDsgJm5i c3A7ICZuYnNwOyAmbmJzcDtmb2xsb3dpbmc8YnIgY2xhc3M9IiI+DQomZ3Q7Jmd0OyZndDsmZ3Q7 Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmbmJzcDsgJm5ic3A7IGFuIGluLXBlcnNvbiBtZWV0aW5nIHdp dGggbXkgY28tYXV0aG9yLCBidXQgbmV2ZXI8YnIgY2xhc3M9IiI+DQomZ3Q7Jmd0OyZndDsmZ3Q7 Jmd0OyZndDsmZ3Q7Jm5ic3A7ICZuYnNwO2dvdCBhPGJyIGNsYXNzPSIiPg0KJmd0OyZndDsmZ3Q7 Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7cmVz cG9uc2U8YnIgY2xhc3M9IiI+DQomZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsm bmJzcDsgJm5ic3A7IGJhY2suJm5ic3A7IEJlY2F1c2UgdGhlcmUgd2FzIG5vIGNoYW5nZSBwcm9w b3NlZCBieTxiciBjbGFzcz0iIj4NCiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmbmJzcDsg Jm5ic3A7RXJpYyBJIHdlbnQ8YnIgY2xhc3M9IiI+DQomZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsm Z3Q7Jmd0OyZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDthaGVhZCBhbmQ8YnIgY2xh c3M9IiI+DQomZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmbmJzcDsgJm5ic3A7 IHB1Ymxpc2hlZCAtMTkgYSBjb3VwbGUgb2Ygd2Vla3MgYWZ0ZXIgdGhhdCwgd2l0aDxiciBjbGFz cz0iIj4NCiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmbmJzcDsgJm5ic3A7dGhlIHRleHQ8 YnIgY2xhc3M9IiI+DQomZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZuYnNwOyAmbmJz cDsgJm5ic3A7ICZuYnNwOyAmbmJzcDthZ3JlZWQgaW48YnIgY2xhc3M9IiI+DQomZ3Q7Jmd0OyZn dDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmbmJzcDsgJm5ic3A7IHJlc3BvbnNlIHRvIEFkYW0n cyBhbmQgQmVuamFtaW4ncyBjb21tZW50cy48YnIgY2xhc3M9IiI+DQomZ3Q7Jmd0OyZndDsmZ3Q7 Jmd0OyZndDsmZ3Q7Jmd0OyZndDsgPGJyIGNsYXNzPSIiPg0KJmd0OyZndDsmZ3Q7Jmd0OyZndDsm Z3Q7Jmd0OyZndDsmZ3Q7IDxiciBjbGFzcz0iIj4NCiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZn dDsmZ3Q7IDxiciBjbGFzcz0iIj4NCiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsgPGJyIGNs YXNzPSIiPg0KJmd0OyZndDsmZ3Q7IDxhIGhyZWY9Imh0dHBzOi8vd3d3LmlldGYub3JnL21haWwt YXJjaGl2ZS93ZWIvdHJhbS9jdXJyZW50L21zZzAyNjM1Lmh0bWwiIHJlbD0ibm9yZWZlcnJlciIg dGFyZ2V0PSJfYmxhbmsiIGNsYXNzPSIiPg0KaHR0cHM6Ly93d3cuaWV0Zi5vcmcvbWFpbC1hcmNo aXZlL3dlYi90cmFtL2N1cnJlbnQvbXNnMDI2MzUuaHRtbDwvYT48YnIgY2xhc3M9IiI+DQomZ3Q7 Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsgPGJyIGNsYXNzPSIiPg0KJmd0OyZndDsm Z3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7IDxiciBjbGFzcz0iIj4NCiZndDsmZ3Q7Jmd0OyZn dDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyBBaCAtIEkgd29uZGVyIGlmIHRoYXQgd2FzIHdoYXQgaGFk IGhhcHBlbmVkLjxiciBjbGFzcz0iIj4NCiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7 Jmd0OyA8YnIgY2xhc3M9IiI+DQomZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsg SXQgc291bmRzIGxpa2UgeW91IGRpZCB0aGUgcmlnaHQgdGhpbmcsIGFuZCB0aGF0IEVyaWM8YnIg Y2xhc3M9IiI+DQomZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jm5ic3A7ICZuYnNwO2hhcyBu b3c8YnIgY2xhc3M9IiI+DQomZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZuYnNwOyAm bmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDtyZXNwb25kZWQsPGJyIGNsYXNzPSIiPg0KJmd0OyZn dDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7IHdoaWNoIGlzIGFsc28gdGhlIHJpZ2h0IHRo aW5nIHRvIGRvLjxiciBjbGFzcz0iIj4NCiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7 Jmd0OyA8YnIgY2xhc3M9IiI+DQomZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsg VGhhbmtzIGZvciBoZWxwaW5nIG1lIHVuZGVyc3RhbmQuPGJyIGNsYXNzPSIiPg0KJmd0OyZndDsm Z3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7IDxiciBjbGFzcz0iIj4NCiZndDsmZ3Q7Jmd0OyZn dDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyBTcGVuY2VyPGJyIGNsYXNzPSIiPg0KJmd0OyZndDsmZ3Q7 Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7IDxiciBjbGFzcz0iIj4NCiZndDsmZ3Q7Jmd0OyZndDsm Z3Q7Jmd0OyZndDsmZ3Q7Jmd0OyA8YnIgY2xhc3M9IiI+DQomZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZn dDsmZ3Q7Jmd0OyZndDsmZ3Q7Jm5ic3A7ICZuYnNwOyBPbiAxMC8yMy8xOCA3OjI4IFBNLCBTcGVu Y2VyIERhd2tpbnMgYXQgSUVURiB3cm90ZTo8YnIgY2xhc3M9IiI+DQomZ3Q7Jmd0OyZndDsmZ3Q7 Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7IEhpLCBNYXJjLDxiciBjbGFzcz0iIj4NCiZndDsmZ3Q7 Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsgPGJyIGNsYXNzPSIiPg0KJmd0OyZndDsm Z3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyBJIHNlZSB0aGF0IGEgLTE5IGhhcyBiZWVu IHN1Ym1pdHRlZCwgYnV0IGRpZG4ndDxiciBjbGFzcz0iIj4NCiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7 Jmd0OyZndDsmbmJzcDsgJm5ic3A7c2VlIGE8YnIgY2xhc3M9IiI+DQomZ3Q7Jmd0OyZndDsmZ3Q7 Jmd0OyZndDsmZ3Q7Jmd0OyZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDtyZXBseSBm cm9tPGJyIGNsYXNzPSIiPg0KJmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jm5i c3A7ICZuYnNwOyBFcmljIGluPGJyIGNsYXNzPSIiPg0KJmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7 Jmd0OyZndDsmZ3Q7Jmd0OyB0aGlzIHRocmVhZC4gRG8geW91IHRoaW5rIHRoYXQgeW91J3ZlIGNv bnZlcmdlZD88YnIgY2xhc3M9IiI+DQomZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZn dDsmZ3Q7IDxiciBjbGFzcz0iIj4NCiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0 OyZndDsgKEkgc2F3IGFuIG9mZmVyIG9mIGEgY29uZmVyZW5jZSBjYWxsLCBzbyB0aG91Z2h0IGFu PGJyIGNsYXNzPSIiPg0KJmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmbmJzcDsgJm5i c3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7b3V0LW9mLWJhbmQ8YnIgY2xhc3M9IiI+DQomZ3Q7Jmd0 OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7IGNvbnZlcnNhdGlvbiBtaWdodCBoYXZl IGhhcHBlbmVkKTxiciBjbGFzcz0iIj4NCiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7 Jmd0OyZndDsgPGJyIGNsYXNzPSIiPg0KJmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsm Z3Q7Jmd0OyBUaGFua3MsPGJyIGNsYXNzPSIiPg0KJmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0 OyZndDsmZ3Q7Jmd0OyA8YnIgY2xhc3M9IiI+DQomZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7 Jmd0OyZndDsmZ3Q7IFNwZW5jZXI8YnIgY2xhc3M9IiI+DQomZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZn dDsmZ3Q7Jmd0OyZndDsmZ3Q7IDxiciBjbGFzcz0iIj4NCiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0 OyZndDsmZ3Q7Jmd0OyZndDsgT24gU3VuLCBPY3QgNywgMjAxOCBhdCA5OjM1IEFNIE1hcmMgUGV0 aXQtSHVndWVuaW48YnIgY2xhc3M9IiI+DQomZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0 OyZndDsmbmJzcDsgJm5ic3A7ICZsdDs8YSBocmVmPSJtYWlsdG86cGV0aXRodWdAYWNtLm9yZyIg dGFyZ2V0PSJfYmxhbmsiIGNsYXNzPSIiPnBldGl0aHVnQGFjbS5vcmc8L2E+ICZsdDttYWlsdG86 PGEgaHJlZj0ibWFpbHRvOnBldGl0aHVnQGFjbS5vcmciIHRhcmdldD0iX2JsYW5rIiBjbGFzcz0i Ij5wZXRpdGh1Z0BhY20ub3JnPC9hPiZndDs8YnIgY2xhc3M9IiI+DQomZ3Q7Jmd0OyZndDsmZ3Q7 Jmd0OyZndDsmZ3Q7Jm5ic3A7ICZuYnNwOyZsdDttYWlsdG86PGEgaHJlZj0ibWFpbHRvOnBldGl0 aHVnQGFjbS5vcmciIHRhcmdldD0iX2JsYW5rIiBjbGFzcz0iIj5wZXRpdGh1Z0BhY20ub3JnPC9h PiAmbHQ7bWFpbHRvOjxhIGhyZWY9Im1haWx0bzpwZXRpdGh1Z0BhY20ub3JnIiB0YXJnZXQ9Il9i bGFuayIgY2xhc3M9IiI+cGV0aXRodWdAYWNtLm9yZzwvYT4mZ3Q7Jmd0OzxiciBjbGFzcz0iIj4N CiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5i c3A7ICZuYnNwOyZsdDttYWlsdG86PGEgaHJlZj0ibWFpbHRvOnBldGl0aHVnQGFjbS5vcmciIHRh cmdldD0iX2JsYW5rIiBjbGFzcz0iIj5wZXRpdGh1Z0BhY20ub3JnPC9hPiAmbHQ7bWFpbHRvOjxh IGhyZWY9Im1haWx0bzpwZXRpdGh1Z0BhY20ub3JnIiB0YXJnZXQ9Il9ibGFuayIgY2xhc3M9IiI+ cGV0aXRodWdAYWNtLm9yZzwvYT4mZ3Q7PGJyIGNsYXNzPSIiPg0KJmd0OyZndDsmZ3Q7Jmd0OyZn dDsmZ3Q7Jmd0OyZuYnNwOyAmbmJzcDsmbHQ7bWFpbHRvOjxhIGhyZWY9Im1haWx0bzpwZXRpdGh1 Z0BhY20ub3JnIiB0YXJnZXQ9Il9ibGFuayIgY2xhc3M9IiI+cGV0aXRodWdAYWNtLm9yZzwvYT4g Jmx0O21haWx0bzo8YSBocmVmPSJtYWlsdG86cGV0aXRodWdAYWNtLm9yZyIgdGFyZ2V0PSJfYmxh bmsiIGNsYXNzPSIiPnBldGl0aHVnQGFjbS5vcmc8L2E+Jmd0OyZndDsmZ3Q7Jmd0OyB3cm90ZTo8 YnIgY2xhc3M9IiI+DQomZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7IDxi ciBjbGFzcz0iIj4NCiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7 IEhpIEVyaWMsPGJyIGNsYXNzPSIiPg0KJmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsm Z3Q7Jmd0OyZndDsgPGJyIGNsYXNzPSIiPg0KJmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZn dDsmZ3Q7Jmd0OyZndDsgUGxlYXNlIHNlZSBpbmxpbmUuPGJyIGNsYXNzPSIiPg0KJmd0OyZndDsm Z3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsgPGJyIGNsYXNzPSIiPg0KJmd0OyZn dDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7IE9uIDA5LzEwLzIwMTgg MDM6MjUgQU0sIEVyaWMgUmVzY29ybGEgd3JvdGU6PGJyIGNsYXNzPSIiPg0KJmd0OyZndDsmZ3Q7 Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7IE9uIFNhdCwgU2VwIDgsIDIwMTgg YXQgMjozMSBQTSwgTWFyYzxiciBjbGFzcz0iIj4NCiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZn dDsmbmJzcDsgJm5ic3A7UGV0aXQtSHVndWVuaW48YnIgY2xhc3M9IiI+DQomZ3Q7Jmd0OyZndDsm Z3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmbmJzcDsgJm5ic3A7ICZsdDs8YSBocmVmPSJtYWlsdG86 cGV0aXRodWdAYWNtLm9yZyIgdGFyZ2V0PSJfYmxhbmsiIGNsYXNzPSIiPnBldGl0aHVnQGFjbS5v cmc8L2E+ICZsdDttYWlsdG86PGEgaHJlZj0ibWFpbHRvOnBldGl0aHVnQGFjbS5vcmciIHRhcmdl dD0iX2JsYW5rIiBjbGFzcz0iIj5wZXRpdGh1Z0BhY20ub3JnPC9hPiZndDs8YnIgY2xhc3M9IiI+ DQomZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jm5ic3A7ICZuYnNwOyZsdDttYWlsdG86PGEg aHJlZj0ibWFpbHRvOnBldGl0aHVnQGFjbS5vcmciIHRhcmdldD0iX2JsYW5rIiBjbGFzcz0iIj5w ZXRpdGh1Z0BhY20ub3JnPC9hPiAmbHQ7bWFpbHRvOjxhIGhyZWY9Im1haWx0bzpwZXRpdGh1Z0Bh Y20ub3JnIiB0YXJnZXQ9Il9ibGFuayIgY2xhc3M9IiI+cGV0aXRodWdAYWNtLm9yZzwvYT4mZ3Q7 Jmd0OzxiciBjbGFzcz0iIj4NCiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jm5ic3A7 ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyZsdDttYWlsdG86PGEgaHJlZj0ibWFpbHRvOnBl dGl0aHVnQGFjbS5vcmciIHRhcmdldD0iX2JsYW5rIiBjbGFzcz0iIj5wZXRpdGh1Z0BhY20ub3Jn PC9hPiAmbHQ7bWFpbHRvOjxhIGhyZWY9Im1haWx0bzpwZXRpdGh1Z0BhY20ub3JnIiB0YXJnZXQ9 Il9ibGFuayIgY2xhc3M9IiI+cGV0aXRodWdAYWNtLm9yZzwvYT4mZ3Q7PGJyIGNsYXNzPSIiPg0K Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZuYnNwOyAmbmJzcDsmbHQ7bWFpbHRvOjxhIGhy ZWY9Im1haWx0bzpwZXRpdGh1Z0BhY20ub3JnIiB0YXJnZXQ9Il9ibGFuayIgY2xhc3M9IiI+cGV0 aXRodWdAYWNtLm9yZzwvYT4gJmx0O21haWx0bzo8YSBocmVmPSJtYWlsdG86cGV0aXRodWdAYWNt Lm9yZyIgdGFyZ2V0PSJfYmxhbmsiIGNsYXNzPSIiPnBldGl0aHVnQGFjbS5vcmc8L2E+Jmd0OyZn dDsmZ3Q7Jmd0OzxiciBjbGFzcz0iIj4NCiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7 Jmd0OyZndDsmZ3Q7Jmd0OyB3cm90ZTo8YnIgY2xhc3M9IiI+DQomZ3Q7Jmd0OyZndDsmZ3Q7Jmd0 OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsgPGJyIGNsYXNzPSIiPg0KJmd0OyZndDsmZ3Q7 Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyBIaSBFcmljLDxiciBjbGFz cz0iIj4NCiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZn dDsgPGJyIGNsYXNzPSIiPg0KJmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0 OyZndDsmZ3Q7Jmd0OyBBcG9sb2dpZXMgZm9yIHRoZSBkZWxheSBpbiBnZXR0aW5nIGJhY2sgdG8g dGhhdC48YnIgY2xhc3M9IiI+DQomZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsm Z3Q7Jmd0OyZndDsmZ3Q7IDxiciBjbGFzcz0iIj4NCiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZn dDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsgSSB0aGluayB0aGF0IHRoZXJlIGlzIHNvbWUgbWlz dW5kZXJzdGFuZGluZzxiciBjbGFzcz0iIj4NCiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsm bmJzcDsgJm5ic3A7aW4gd2hhdDxiciBjbGFzcz0iIj4NCiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0 OyZndDsmZ3Q7Jm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwO1NUVU5iaXMgaXM8YnIg Y2xhc3M9IiI+DQomZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmbmJzcDsgJm5i c3A7IHRyeWluZyB0bzxiciBjbGFzcz0iIj4NCiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsm Z3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsgZG8sIHNvIHBsZWFzZSBzZWUgbXkgY29tbWVudHMgaW5s aW5lLjxiciBjbGFzcz0iIj4NCiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZn dDsmZ3Q7Jmd0OyZndDsgPGJyIGNsYXNzPSIiPg0KJmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0 OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsgT24gMDYvMTgvMjAxOCAxMDo0MyBBTSwgRXJp YyBSZXNjb3JsYSB3cm90ZTo8YnIgY2xhc3M9IiI+DQomZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsm Z3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyBIaSBmb2xrcyw8YnIgY2xhc3M9IiI+DQom Z3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyA8 YnIgY2xhc3M9IiI+DQomZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0 OyZndDsmZ3Q7Jmd0OyBJJ3ZlIHJldmlld2VkIHRoZSBuZXcgdmVyc2lvbiwgYnV0IEkgZG9uJ3Q8 YnIgY2xhc3M9IiI+DQomZ3Q7Jmd0OyZndDsgdGhpbms8YnIgY2xhc3M9IiI+DQomZ3Q7Jmd0OyZn dDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDt0 aGF0IHRoZSBiaWRkb3duPGJyIGNsYXNzPSIiPg0KJmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0 OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsgZGlzY3Vzc2lvbiBtYWtlcyBtdWNoIHNlbnNl LjxiciBjbGFzcz0iIj4NCiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsm Z3Q7Jmd0OyZndDsmZ3Q7IDxiciBjbGFzcz0iIj4NCiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZn dDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7IFRvIHJlY2FwLCB0aGVyZSBhcmUgdHdvIGhh c2hlcyBoZXJlOjxiciBjbGFzcz0iIj4NCiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7 Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7IDxiciBjbGFzcz0iIj4NCiZndDsmZ3Q7Jmd0OyZndDsm Z3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7IC0gVGhlIGhhc2ggd2hpY2gg eW91IHVzZSB0byBzdG9yZSB0aGU8YnIgY2xhc3M9IiI+DQomZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZn dDsmZ3Q7Jm5ic3A7ICZuYnNwO3Bhc3N3b3JkIHdpdGg8YnIgY2xhc3M9IiI+DQomZ3Q7Jmd0OyZn dDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDso Y3VycmVudGx5PGJyIGNsYXNzPSIiPg0KJmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsm Z3Q7Jm5ic3A7ICZuYnNwOyBtb3N0bHk8YnIgY2xhc3M9IiI+DQomZ3Q7Jmd0OyZndDsmZ3Q7Jmd0 OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7IE1ENSk8YnIgY2xhc3M9IiI+DQomZ3Q7 Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyAtIFRo ZSBoYXNoIHlvdSB1c2UgdG8gY29tcHV0ZSB0aGUgTUFDPGJyIGNsYXNzPSIiPg0KJmd0OyZndDsm Z3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZuYnNwOyAmbmJzcDsoY3VycmVudGx5IFNIQS0xKS48YnIgY2xh c3M9IiI+DQomZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsm Z3Q7Jmd0OyA8YnIgY2xhc3M9IiI+DQomZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZn dDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyBGaXJzdCwgbGV0J3Mgc3RpcHVsYXRlIHRoYXQgTUQ1IGlz bid0IGE8YnIgY2xhc3M9IiI+DQomZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jm5ic3A7ICZu YnNwO2dyZWF0IGNob2ljZTxiciBjbGFzcz0iIj4NCiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZn dDsmZ3Q7Jm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwO2hlcmUsPGJyIGNsYXNzPSIi Pg0KJmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jm5ic3A7ICZuYnNwOyB0aG91 Z2ggU0hBLTE8YnIgY2xhc3M9IiI+DQomZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZn dDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyBpc24ndCBhIGdyZWF0IGNob2ljZTxiciBjbGFzcz0iIj4N CiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7 IGVpdGhlciBmb3IgcHdkIGhhc2hpbmcgWW91IHdhbnQgQXJnb24gb3IgdGhlPGJyIGNsYXNzPSIi Pg0KJmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZuYnNwOyAmbmJzcDtsaWtlLjxiciBjbGFz cz0iIj4NCiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jm5ic3A7ICZuYnNwOyAmbmJz cDsgJm5ic3A7ICZuYnNwO1dpdGggdGhhdCBzYWlkLDxiciBjbGFzcz0iIj4NCiZndDsmZ3Q7Jmd0 OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsgdGhlcmUnczxiciBjbGFz cz0iIj4NCiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZn dDsmZ3Q7IG5vIHNlbnNpYmxlPGJyIGNsYXNzPSIiPg0KJmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7 Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsgYmlkZG93biBhdHRhY2sgb24gdGhhdCBo YXNoIGJlY2F1c2UgaXQncyBhPGJyIGNsYXNzPSIiPg0KJmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7 Jmd0OyZndDsmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7cGVyLXNlcnZlciBmZWF0 dXJlLDxiciBjbGFzcz0iIj4NCiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZu YnNwOyAmbmJzcDsgbm90IGE8YnIgY2xhc3M9IiI+DQomZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsm Z3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyBwZXItdHJhbnNhY3Rpb248YnIgY2xhc3M9 IiI+DQomZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7 Jmd0OyBmZWF0dXJlLiBTbywgYXMgbG9uZyBhcyB0aGUgc2VydmVyIGhhczxiciBjbGFzcz0iIj4N CiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmbmJzcDsgJm5ic3A7TUQ1LWhhc2hlZDxiciBj bGFzcz0iIj4NCiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jm5ic3A7ICZuYnNwOyAm bmJzcDsgJm5ic3A7ICZuYnNwO3Bhc3N3b3JkcywgdGhlPGJyIGNsYXNzPSIiPg0KJmd0OyZndDsm Z3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyBzaXR1YXRpb248YnIg Y2xhc3M9IiI+DQomZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZn dDsmZ3Q7Jmd0OyBpcyBiYWQuPGJyIGNsYXNzPSIiPg0KJmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7 Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyA8YnIgY2xhc3M9IiI+DQomZ3Q7Jmd0OyZndDsm Z3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7IEluIG5vIHBsYWNlIGluIFNU VU5iaXMgd2UgYXJlIHByb3Bvc2luZyB0bzxiciBjbGFzcz0iIj4NCiZndDsmZ3Q7Jmd0OyZndDsm Z3Q7Jmd0OyZndDsmbmJzcDsgJm5ic3A7dXNlIFNIQS0xPGJyIGNsYXNzPSIiPg0KJmd0OyZndDsm Z3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7 Zm9yIHBhc3N3b3JkPGJyIGNsYXNzPSIiPg0KJmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZn dDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyBlbmNyeXB0aW9uLCBzbyBJIGFtIG5vdCBzdXJlIHdoZXJl IHRoYXQgY29tZTxiciBjbGFzcz0iIj4NCiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmbmJz cDsgJm5ic3A7ZnJvbS48YnIgY2xhc3M9IiI+DQomZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7 Jmd0OyZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDtXaGF0IHdlPGJyIGNsYXNzPSIi Pg0KJmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jm5ic3A7ICZuYnNwOyBwcm9w b3NlIGlzOjxiciBjbGFzcz0iIj4NCiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0 OyZndDsmZ3Q7Jmd0OyZndDsgPGJyIGNsYXNzPSIiPg0KJmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7 Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7IDxiciBjbGFzcz0iIj4NCiZndDsmZ3Q7Jmd0OyZndDsm Z3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyBZb3UncmUgcmlnaHQsIGl0J3MgU0hBLTI1 NiwgYnV0IG15IGNyaXRpY2lzbXM8YnIgY2xhc3M9IiI+DQomZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZn dDsmZ3Q7Jm5ic3A7ICZuYnNwO2FwcGx5PGJyIGNsYXNzPSIiPg0KJmd0OyZndDsmZ3Q7Jmd0OyZn dDsmZ3Q7Jmd0OyZndDsmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ZXF1YWxseSB0 aGVyZS48YnIgY2xhc3M9IiI+DQomZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsm Z3Q7Jmd0OyA8YnIgY2xhc3M9IiI+DQomZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZn dDsmZ3Q7Jmd0OyBTSEEtMjU2IHdhcyB3aGF0IHRoZSBXRyBhZG9wdGVkLiZuYnNwOyBPdXIgYXR0 ZW1wdHM8YnIgY2xhc3M9IiI+DQomZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jm5ic3A7ICZu YnNwO3RvIGFkZDxiciBjbGFzcz0iIj4NCiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7 Jm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwO290aGVyIHBhc3N3b3JkczxiciBjbGFz cz0iIj4NCiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7IGVuY3J5 cHRpb24gbWVjaGFuaXNtcyB3ZXJlIGRlbmllZC4mbmJzcDsgSXQgaXMgdHJ1ZTxiciBjbGFzcz0i Ij4NCiZndDsmZ3Q7Jmd0OyB0aGF0PGJyIGNsYXNzPSIiPg0KJmd0OyZndDsmZ3Q7Jmd0OyZndDsm Z3Q7Jmd0OyZndDsmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7QXJnb24yIHdhczxi ciBjbGFzcz0iIj4NCiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZuYnNwOyAm bmJzcDsgbm90IGluIHRoYXQ8YnIgY2xhc3M9IiI+DQomZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsm Z3Q7Jmd0OyZndDsmZ3Q7Jmd0OyBsaXN0IChpbiBvdXIgZGVmZW5zZSBBcmdvbjIgd2FzIG5vdCBr bm93bjxiciBjbGFzcz0iIj4NCiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmbmJzcDsgJm5i c3A7YmVmb3JlIEp1bHk8YnIgY2xhc3M9IiI+DQomZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7 Jmd0OyZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsyMDE1KSwgYnV0PGJyIGNsYXNz PSIiPg0KJmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jm5ic3A7ICZuYnNwOyBJ IGRvIG5vdDxiciBjbGFzcz0iIj4NCiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0 OyZndDsmZ3Q7IHNlZSB3aHkgdGhlIFdHIHdvdWxkIGhhdmUgYWNjZXB0ZWQgdGhhdCBvbmU8YnIg Y2xhc3M9IiI+DQomZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jm5ic3A7ICZuYnNwO292ZXIg dGhlPGJyIGNsYXNzPSIiPg0KJmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmbmJzcDsg Jm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7b3RoZXJzLjxiciBjbGFzcz0iIj4NCiZndDsmZ3Q7 Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZuYnNwOyAmbmJzcDsgQW55d2F5IGl0IGlzPGJy IGNsYXNzPSIiPg0KJmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsg dG9vIGxhdGUgdG8gZml4IHRoaXMsIGFzIGl0IGlzIG15IHVuZGVyc3RhbmRpbmc8YnIgY2xhc3M9 IiI+DQomZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jm5ic3A7ICZuYnNwO3RoYXQ8YnIgY2xh c3M9IiI+DQomZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZuYnNwOyAmbmJzcDsgJm5i c3A7ICZuYnNwOyAmbmJzcDt0aGUgV0cgZG9lczxiciBjbGFzcz0iIj4NCiZndDsmZ3Q7Jmd0OyZn dDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZuYnNwOyAmbmJzcDsgbm90IGhhdmU8YnIgY2xhc3M9IiI+ DQomZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyBlbm91Z2ggZW5l cmd5IHRvIHJlYWNoIGNvbnNlbnN1cyBvbiBhIG5ldyBwYXNzd29yZDxiciBjbGFzcz0iIj4NCiZn dDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7 ICZuYnNwO2FsZ29yaXRobS48YnIgY2xhc3M9IiI+DQomZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsm Z3Q7Jmd0OyZndDsmbmJzcDsgJm5ic3A7IFNvbWVvbmUgY2FuPGJyIGNsYXNzPSIiPg0KJmd0OyZn dDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsganVzdCB3cml0ZSBhIGRyYWZ0 IGFkZGluZyBBcmdvbjIgYXMgcGFzc3dvcmQ8YnIgY2xhc3M9IiI+DQomZ3Q7Jmd0OyZndDsmZ3Q7 Jmd0OyZndDsmZ3Q7Jmd0OyZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDtlbmNyeXB0 aW9uLCBhcyB3ZTxiciBjbGFzcz0iIj4NCiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7 Jmd0OyZuYnNwOyAmbmJzcDsgd2lsbCBoYXZlIGE8YnIgY2xhc3M9IiI+DQomZ3Q7Jmd0OyZndDsm Z3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyBJQU5BIHJlZ2lzdHJ5IGZvciB0aGF0Ljxi ciBjbGFzcz0iIj4NCiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7 IDxiciBjbGFzcz0iIj4NCiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsm Z3Q7Jmd0OyA8YnIgY2xhc3M9IiI+DQomZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZn dDsmZ3Q7Jmd0OyZndDsgPGJyIGNsYXNzPSIiPg0KJmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0 OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyAtIEVzdGFibGlzaCBhIHJlZ2lzdHJ5IGZvciBuZXcg cGFzc3dvcmQ8YnIgY2xhc3M9IiI+DQomZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jm5ic3A7 ICZuYnNwO2FsZ29yaXRobXM8YnIgY2xhc3M9IiI+DQomZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsm Z3Q7Jmd0OyZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsoc2VjdGlvbjxiciBjbGFz cz0iIj4NCiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZuYnNwOyAmbmJzcDsg MTguNSksIHNvPGJyIGNsYXNzPSIiPg0KJmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsm Z3Q7Jmd0OyZndDsmZ3Q7Jmd0OyBhbGdvcml0aG1zIGxpa2UgQXJnb24yIGNvdWxkIGJlIGFkZGVk IGxhdGVyPGJyIGNsYXNzPSIiPg0KJmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZuYnNwOyAm bmJzcDsoYnV0IG5vdGU8YnIgY2xhc3M9IiI+DQomZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7 Jmd0OyZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDt0aGF0IG91ciBvd248YnIgY2xh c3M9IiI+DQomZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsm Z3Q7IHByb3Bvc2FscyB0byBhZGQgbW9yZSBwYXNzd29yZCBhbGdvcml0aG1zIHdlcmU8YnIgY2xh c3M9IiI+DQomZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZuYnNwOyAmbmJzcDsgJm5i c3A7ICZuYnNwOyAmbmJzcDtyZWplY3RlZCBieSB0aGU8YnIgY2xhc3M9IiI+DQomZ3Q7Jmd0OyZn dDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmbmJzcDsgJm5ic3A7IHdvcmtpbmc8YnIgY2xhc3M9 IiI+DQomZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7 IGdyb3VwKS48YnIgY2xhc3M9IiI+DQomZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZn dDsmZ3Q7Jmd0OyZndDsmZ3Q7IC0gQWRkIGEgbmV3IHBhc3N3b3JkIGFsZ29yaXRobSB0byB0aGF0 IHJlZ2lzdHJ5LDxiciBjbGFzcz0iIj4NCiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7 Jm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwO25hbWVseSBTSEEtMjU2LjxiciBjbGFz cz0iIj4NCiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZn dDsgLSBSZWdpc3RlciBNRDUgYXMgYW4gaW5pdGlhbCBwYXNzd29yZDxiciBjbGFzcz0iIj4NCiZn dDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmbmJzcDsgJm5ic3A7YWxnb3JpdGhtIGZvcjxiciBj bGFzcz0iIj4NCiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jm5ic3A7ICZuYnNwOyAm bmJzcDsgJm5ic3A7ICZuYnNwO2JhY2t3YXJkPGJyIGNsYXNzPSIiPg0KJmd0OyZndDsmZ3Q7Jmd0 OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsgY29tcGF0aWJpbGl0eTxiciBjbGFzcz0iIj4N CiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsgcHVy cG9zZS48YnIgY2xhc3M9IiI+DQomZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsm Z3Q7Jmd0OyZndDsmZ3Q7IDxiciBjbGFzcz0iIj4NCiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZn dDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsgQXMgZm9yIHRoZSBiaWRkb3duIHByb3RlY3Rpb24g aXRzZWxmLCBpdCBpcyBteTxiciBjbGFzcz0iIj4NCiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZn dDsmZ3Q7Jm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwO3JlY29sbGVjdGlvbiB0aGF0 IGl0PGJyIGNsYXNzPSIiPg0KJmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0 OyZndDsmZ3Q7Jmd0OyBoYXBwZW5lZCBtb3JlIG9yIGxlc3MgbGlrZSB0aGF0OjxiciBjbGFzcz0i Ij4NCiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsg PGJyIGNsYXNzPSIiPg0KJmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZn dDsmZ3Q7Jmd0OyA8YnIgY2xhc3M9IiI+DQomZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0 OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7IElOVC4gTUVFVElORyBST09NIC0gREFZPGJyIGNsYXNzPSIi Pg0KJmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyA8 YnIgY2xhc3M9IiI+DQomZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0 OyZndDsmZ3Q7IE9uZSBvZiB0aGUgY28tZWRpdG9ycyBvZiBTVFVOQmlzIHN0YW5kcyBhdCB0aGU8 YnIgY2xhc3M9IiI+DQomZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZuYnNwOyAmbmJz cDsgJm5ic3A7ICZuYnNwOyAmbmJzcDttaWNyb3Bob25lOjxiciBjbGFzcz0iIj4NCiZndDsmZ3Q7 Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsgPGJyIGNsYXNzPSIi Pg0KJmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZu YnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5i c3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDtDTy1FRElUT1I8YnIgY2xhc3M9 IiI+DQomZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7 Jm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAm bmJzcDtXZSBhZGRlZCBTSEEtMjU2IHByb3RlY3Rpb24gZm9yPGJyIGNsYXNzPSIiPg0KJmd0OyZn dDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5i c3A7cGFzc3dvcmRzPGJyIGNsYXNzPSIiPg0KJmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZn dDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsg Jm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7aW4gU1RVTkJpcy48YnIgY2xhc3M9IiI+DQomZ3Q7 Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7IDxiciBjbGFz cz0iIj4NCiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZn dDsmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7 ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7U09NRU9ORSAoVi5PLik8 YnIgY2xhc3M9IiI+DQomZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0 OyZndDsmZ3Q7Jm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7 ICZuYnNwOyAmbmJzcDtBcyBNRDUgc3RpbGwgbmVlZCB0byBiZTxiciBjbGFzcz0iIj4NCiZndDsm Z3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmbmJzcDsgJm5ic3A7c3VwcG9ydGVkLDxiciBjbGFzcz0i Ij4NCiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jm5ic3A7ICZuYnNwOyAmbmJzcDsg Jm5ic3A7ICZuYnNwO3lvdSBuZWVkIHRvIGFkZDxiciBjbGFzcz0iIj4NCiZndDsmZ3Q7Jmd0OyZn dDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmbmJzcDsgJm5ic3A7ICZuYnNw OyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwO3Byb3RlY3Rpb24gZm9y IGJpZC1kb3duPGJyIGNsYXNzPSIiPg0KJmd0OyZndDsmZ3Q7IGF0dGFja3MuPGJyIGNsYXNzPSIi Pg0KJmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyA8 YnIgY2xhc3M9IiI+DQomZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0 OyZndDsmZ3Q7IENMT1NFLVVQIG9uIENPLUVESVRPUiBST0xMSU5HIEhJUyBFWUVTPGJyIGNsYXNz PSIiPg0KJmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0 OyA8YnIgY2xhc3M9IiI+DQomZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7 Jmd0OyZndDsmZ3Q7Jm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5i c3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwO0NPLUVE SVRPUjxiciBjbGFzcz0iIj4NCiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZn dDsmZ3Q7Jmd0OyZndDsmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAm bmJzcDsgJm5ic3A7ICZuYnNwO09LLCBJJ2xsIHdvcmsgb24gdGhhdC48YnIgY2xhc3M9IiI+DQom Z3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7IDxiciBj bGFzcz0iIj4NCiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0 OyZndDsgRm91ciB0byBlaWdodCBtb250aHMgaGFzIHBhc3NlZC48YnIgY2xhc3M9IiI+DQomZ3Q7 Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7IDxiciBjbGFz cz0iIj4NCiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZn dDsgSU5ULiBBTk9USEVSIE1FRVRJTkcgUk9PTSAtIERBWTxiciBjbGFzcz0iIj4NCiZndDsmZ3Q7 Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsgPGJyIGNsYXNzPSIi Pg0KJmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyBU aGUgc2FtZSBjby1lZGl0b3Igb2YgU1RVTkJpcyBzdGFuZHMgYXQgdGhlPGJyIGNsYXNzPSIiPg0K Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZuYnNwOyAmbmJzcDttaWNyb3Bob25lOjxiciBj bGFzcz0iIj4NCiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0 OyZndDsgPGJyIGNsYXNzPSIiPg0KJmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7 Jmd0OyZndDsmZ3Q7Jmd0OyZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7 ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDtD Ty1FRElUT1I8YnIgY2xhc3M9IiI+DQomZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZn dDsmZ3Q7Jmd0OyZndDsmZ3Q7Jm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJz cDsgJm5ic3A7ICZuYnNwOyAmbmJzcDtXZSBhZGRlZCBhIG5pY2UgbWVjaGFuaXNtIHRvPGJyIGNs YXNzPSIiPg0KJmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZuYnNwOyAmbmJzcDtwcmV2ZW50 PGJyIGNsYXNzPSIiPg0KJmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmbmJzcDsgJm5i c3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7YmlkLWRvd248YnIgY2xhc3M9IiI+DQomZ3Q7Jmd0OyZn dDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jm5ic3A7ICZuYnNwOyAm bmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDthdHRhY2tzIG9u IHBhc3N3b3Jkcy4mbmJzcDsgQW55PGJyIGNsYXNzPSIiPg0KJmd0OyZndDsmZ3Q7Jmd0OyZndDsm Z3Q7Jmd0OyZuYnNwOyAmbmJzcDtjb21tZW50cz88YnIgY2xhc3M9IiI+DQomZ3Q7Jmd0OyZndDsm Z3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7IDxiciBjbGFzcz0iIj4NCiZn dDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmbmJzcDsg Jm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAm bmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7VEhFIFJPT008YnIgY2xhc3M9IiI+DQom Z3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jm5ic3A7 ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDso c2lsZW5jZSk8YnIgY2xhc3M9IiI+DQomZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZn dDsmZ3Q7Jmd0OyZndDsmZ3Q7IDxiciBjbGFzcz0iIj4NCiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0 OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsg Jm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAm bmJzcDsgJm5ic3A7Q08tRURJVE9SPGJyIGNsYXNzPSIiPg0KJmd0OyZndDsmZ3Q7Jmd0OyZndDsm Z3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNw OyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7TW92aW5nIG9uLi4uPGJyIGNsYXNz PSIiPg0KJmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0 OyA8YnIgY2xhc3M9IiI+DQomZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7 Jmd0OyZndDsgPGJyIGNsYXNzPSIiPg0KJmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsm Z3Q7Jmd0OyZndDsmZ3Q7IEkgZG9uJ3Qgc2VlIGhvdyBhbnkgb2YgdGhpcyBpcyByZWxldmFudCB0 byBteTxiciBjbGFzcz0iIj4NCiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jm5ic3A7 ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwO3RlY2huaWNhbCBwb2ludHM8YnIgY2xhc3M9IiI+ DQomZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmbmJzcDsgJm5ic3A7IGFib3Zl LjxiciBjbGFzcz0iIj4NCiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsm Z3Q7IDxiciBjbGFzcz0iIj4NCiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZn dDsmZ3Q7IE15IHBvaW50IHdhcyB0aGF0IHdlLCB0aGUgY28tZWRpdG9ycywgZGlkIG5vdDxiciBj bGFzcz0iIj4NCiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmbmJzcDsgJm5ic3A7ZGVjaWRl IG9uPGJyIGNsYXNzPSIiPg0KJmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmbmJzcDsg Jm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7YWRkaW5nPGJyIGNsYXNzPSIiPg0KJmd0OyZndDsm Z3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jm5ic3A7ICZuYnNwOyBiaWQtZG93bjxiciBjbGFz cz0iIj4NCiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7IHByb3Rl Y3Rpb24sIHNvbWVvbmUgYXNrZWQgdXMgdG8gZG8gc28gYW5kPGJyIGNsYXNzPSIiPg0KJmd0OyZn dDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZuYnNwOyAmbmJzcDtuby1vbmUgaW4gdGhlPGJyIGNsYXNz PSIiPg0KJmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmbmJzcDsgJm5ic3A7ICZuYnNw OyAmbmJzcDsgJm5ic3A7V0cgc2F3PGJyIGNsYXNzPSIiPg0KJmd0OyZndDsmZ3Q7Jmd0OyZndDsm Z3Q7Jmd0OyZndDsmZ3Q7Jm5ic3A7ICZuYnNwOyBhbnkgcHJvYmxlbTxiciBjbGFzcz0iIj4NCiZn dDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7IHdpdGggdGhhdC4mbmJz cDsgVGhlIHJlYXNvbnMgdGhhdCBwZXJzb24gd2FudGVkIHRoYXQ8YnIgY2xhc3M9IiI+DQomZ3Q7 Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jm5ic3A7ICZuYnNwO2FyZSBub3Q8YnIgY2xhc3M9IiI+ DQomZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZuYnNwOyAmbmJzcDsgJm5ic3A7ICZu YnNwOyAmbmJzcDtrbm93biB0bzxiciBjbGFzcz0iIj4NCiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0 OyZndDsmZ3Q7Jmd0OyZuYnNwOyAmbmJzcDsgdXMgYnV0LCBhczxiciBjbGFzcz0iIj4NCiZndDsm Z3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7IHlvdSBpbnNpc3QsIGhlcmUn cyBvbmUgcmVhc29uIEkgY2FuIHRoaW5rIG9mOjxiciBjbGFzcz0iIj4NCiZndDsmZ3Q7Jmd0OyZn dDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7IDxiciBjbGFzcz0iIj4NCiZndDsmZ3Q7Jmd0 OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7IEl0IGlzIGEgZmFjdCB0aGF0LCBmb3Ig b3BlcmF0aW9uYWwgcmVhc29ucywgYTxiciBjbGFzcz0iIj4NCiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7 Jmd0OyZndDsmbmJzcDsgJm5ic3A7cGFzc3dvcmQ8YnIgY2xhc3M9IiI+DQomZ3Q7Jmd0OyZndDsm Z3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDtkYXRh YmFzZTxiciBjbGFzcz0iIj4NCiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZu YnNwOyAmbmJzcDsgY2Fubm90IGJlPGJyIGNsYXNzPSIiPg0KJmd0OyZndDsmZ3Q7Jmd0OyZndDsm Z3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsgcmUtZW5jcnlwdGVkIGF0IG9uY2UuJm5ic3A7IEFsc28g Zm9yIG9wZXJhdGlvbmFsPGJyIGNsYXNzPSIiPg0KJmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0 OyZuYnNwOyAmbmJzcDtyZWFzb25zLDxiciBjbGFzcz0iIj4NCiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7 Jmd0OyZndDsmZ3Q7Jm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwO3RoZSBNRDUgcGFz c3dvcmQ8YnIgY2xhc3M9IiI+DQomZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsm Z3Q7Jmd0OyBjYW5ub3QgYmUgaW1tZWRpYXRlbHkgcmVtb3ZlZCBmcm9tIHRoZSBkYXRhYmFzZTxi ciBjbGFzcz0iIj4NCiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmbmJzcDsgJm5ic3A7YXMg c29vbjxiciBjbGFzcz0iIj4NCiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jm5ic3A7 ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwO3RoZSB1c2VyPGJyIGNsYXNzPSIiPg0KJmd0OyZn dDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jm5ic3A7ICZuYnNwOyBzdWJtaXR0ZWQ8YnIg Y2xhc3M9IiI+DQomZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyBh IG5ldyBvbmUuJm5ic3A7IEluIGZhY3QsIGFuZCBmb3IgcXVpdGUgc29tZSB0aW1lLCBib3RoPGJy IGNsYXNzPSIiPg0KJmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmbmJzcDsgJm5ic3A7 ICZuYnNwOyAmbmJzcDsgJm5ic3A7ZW5jcnlwdGVkPGJyIGNsYXNzPSIiPg0KJmd0OyZndDsmZ3Q7 Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jm5ic3A7ICZuYnNwOyB2YXJpYW50cyBvZjxiciBjbGFz cz0iIj4NCiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7IHRoZSBz YW1lIHBhc3N3b3JkIG1heSBoYXZlIHRvIGJlIGtlcHQgaW4gdGhhdDxiciBjbGFzcz0iIj4NCiZn dDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmbmJzcDsgJm5ic3A7ZGF0YWJhc2UsPGJyIGNsYXNz PSIiPg0KJmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmbmJzcDsgJm5ic3A7ICZuYnNw OyAmbmJzcDsgJm5ic3A7YmVjYXVzZSBhPGJyIGNsYXNzPSIiPg0KJmd0OyZndDsmZ3Q7Jmd0OyZn dDsmZ3Q7Jmd0OyZndDsmZ3Q7Jm5ic3A7ICZuYnNwOyBzaW5nbGU8YnIgY2xhc3M9IiI+DQomZ3Q7 Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyB1c2VyIG1heSB1c2UgYSBt aXggb2YgZGV2aWNlcywgc29tZSBvZiB0aGVtPGJyIGNsYXNzPSIiPg0KJmd0OyZndDsmZ3Q7Jmd0 OyZndDsmZ3Q7Jmd0OyZuYnNwOyAmbmJzcDt0aGF0IHVzZSBhbjxiciBjbGFzcz0iIj4NCiZndDsm Z3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZu YnNwO1JGQyA1Mzg5PGJyIGNsYXNzPSIiPg0KJmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZn dDsmZ3Q7Jm5ic3A7ICZuYnNwOyBjbGllbnQsPGJyIGNsYXNzPSIiPg0KJmd0OyZndDsmZ3Q7Jmd0 OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsgc29tZSB0aGF0IHVzZSBhIFNUVU5iaXMgY2xp ZW50LiZuYnNwOyBJdCBpcyB1cCB0bzxiciBjbGFzcz0iIj4NCiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7 Jmd0OyZndDsmbmJzcDsgJm5ic3A7dGhlIFNUVU48YnIgY2xhc3M9IiI+DQomZ3Q7Jmd0OyZndDsm Z3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDtzZXJ2 ZXIgb3duZXIgdG88YnIgY2xhc3M9IiI+DQomZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0 OyZndDsmZ3Q7Jmd0OyBkZWNpZGUgaG93IGxvbmcgdGhlIG1pZ3JhdGlvbiB0byBTVFVOYmlzIHdp bGw8YnIgY2xhc3M9IiI+DQomZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jm5ic3A7ICZuYnNw O3Rha2UgYW5kPGJyIGNsYXNzPSIiPg0KJmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsm bmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7d2hlbiBpdDxiciBjbGFzcz0iIj4NCiZn dDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZuYnNwOyAmbmJzcDsgd2lsbCBiZTxi ciBjbGFzcz0iIj4NCiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7 IGFjY2VwdGFibGUgdG8gcmVqZWN0IGFsbCBSRkMgNTM4OSAoaS5lLiBNRDUpPGJyIGNsYXNzPSIi Pg0KJmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZuYnNwOyAmbmJzcDtjbGllbnRzICh0aGF0 PGJyIGNsYXNzPSIiPg0KJmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jm5ic3A7 ICZuYnNwOyBtaWdyYXRpb24gdGltZTxiciBjbGFzcz0iIj4NCiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7 Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7IGNhbiBiZSBwdXJwb3NlbHkgcmVkdWNlZCB0byAwIHNl Y29uZHMgYnV0PGJyIGNsYXNzPSIiPg0KJmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZuYnNw OyAmbmJzcDt0aGF0J3MgdGhlPGJyIGNsYXNzPSIiPg0KJmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7 Jmd0OyZndDsmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7Y2hvaWNlIGFuZDxiciBj bGFzcz0iIj4NCiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7IHJl c3BvbnNpYmlsaXR5IG9mIHRoZSBvd25lciBvZiB0aGUgc2VydmVyKS48YnIgY2xhc3M9IiI+DQom Z3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyA8YnIgY2xhc3M9IiI+ DQomZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyBNZWFud2hpbGUg d2Ugc3RpbGwgbmVlZCB0byBiZSBzdXJlIHRoYXQgaWYgdGhlPGJyIGNsYXNzPSIiPg0KJmd0OyZn dDsmZ3Q7IFNUVU48YnIgY2xhc3M9IiI+DQomZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0 OyZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDtjbGllbnQgaXM8YnIgY2xhc3M9IiI+ DQomZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmbmJzcDsgJm5ic3A7IGltcGxl bWVudGluZzxiciBjbGFzcz0iIj4NCiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0 OyZndDsmZ3Q7IFNUVU5iaXMgaXQgdW5jb25kaXRpb25hbGx5IGdldHMgdGhlIGFkZGl0aW9uYWw8 YnIgY2xhc3M9IiI+DQomZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZuYnNwOyAmbmJz cDsgJm5ic3A7ICZuYnNwOyAmbmJzcDtwcm90ZWN0aW9uIG9mIHRoZSBuZXc8YnIgY2xhc3M9IiI+ DQomZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyBwYXNzd29yZCBl bmNyeXB0aW9uIGFsZ29yaXRobS4mbmJzcDsgVGhhdCdzIHdoZXJlPGJyIGNsYXNzPSIiPg0KJmd0 OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZuYnNwOyAmbmJzcDt0aGUgYmlkZG93bjxiciBjbGFz cz0iIj4NCiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZuYnNwOyAmbmJzcDsg cHJvdGVjdGlvbiBraWNrczxiciBjbGFzcz0iIj4NCiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZn dDsmZ3Q7Jmd0OyZndDsmZ3Q7IGluLCBieSBwcmV2ZW50aW5nIGFuIG9ubGluZSBhdHRhY2tlciB0 byBoYXZlPGJyIGNsYXNzPSIiPg0KJmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZuYnNwOyAm bmJzcDt0aGUgc2VydmVyPGJyIGNsYXNzPSIiPg0KJmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0 OyZndDsmZ3Q7Jm5ic3A7ICZuYnNwOyBtaXNpZGVudGlmeWluZyBhPGJyIGNsYXNzPSIiPg0KJmd0 OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsgU1RVTmJpcyBjbGllbnQg YXMgYW4gUkZDIDUzODkgY2xpZW50LCBieTxiciBjbGFzcz0iIj4NCiZndDsmZ3Q7Jmd0OyZndDsm Z3Q7Jmd0OyZndDsmbmJzcDsgJm5ic3A7cHJldmVudGluZyBhbjxiciBjbGFzcz0iIj4NCiZndDsm Z3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZu YnNwO29ubGluZTxiciBjbGFzcz0iIj4NCiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7 Jmd0OyZuYnNwOyAmbmJzcDsgYXR0YWNrZXIgdG88YnIgY2xhc3M9IiI+DQomZ3Q7Jmd0OyZndDsm Z3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyBoYXZlIHRoZSBjbGllbnQgbWlzaWRlbnRp ZnlpbmcgYSBTVFVOYmlzIHNlcnZlcjxiciBjbGFzcz0iIj4NCiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7 Jmd0OyZndDsmbmJzcDsgJm5ic3A7YXMgYTxiciBjbGFzcz0iIj4NCiZndDsmZ3Q7Jmd0OyZndDsm Z3Q7Jmd0OyZndDsmZ3Q7Jm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwO1JGQyA1Mzg5 PGJyIGNsYXNzPSIiPg0KJmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jm5ic3A7 ICZuYnNwOyBzZXJ2ZXIsIGFuZDxiciBjbGFzcz0iIj4NCiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0 OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7IGhhdmluZyBib3RoIHRoZW0gdXNlIHRoZSBNRDUgZW5jcnlw dGVkIHBhc3N3b3JkPGJyIGNsYXNzPSIiPg0KJmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZu YnNwOyAmbmJzcDtpbnN0ZWFkPGJyIGNsYXNzPSIiPg0KJmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7 Jmd0OyZndDsmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7b2YgdGhlPGJyIGNsYXNz PSIiPg0KJmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jm5ic3A7ICZuYnNwOyBT SEEtMjU2PGJyIGNsYXNzPSIiPg0KJmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7 Jmd0OyZndDsgZW5jcnlwdGVkIHBhc3N3b3JkLCBhbGwgb2YgdGhhdCBlYXNpbHkgZG9uZSBieTxi ciBjbGFzcz0iIj4NCiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jm5ic3A7ICZuYnNw OyAmbmJzcDsgJm5ic3A7ICZuYnNwO3N0cmlwcGluZyB0aGU8YnIgY2xhc3M9IiI+DQomZ3Q7Jmd0 OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmbmJzcDsgJm5ic3A7IHVucHJvdGVjdGVkPGJy IGNsYXNzPSIiPg0KJmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsg NDAxIHJlc3BvbnNlIG9mIHRoZSBuZXcgU1RVTmJpczxiciBjbGFzcz0iIj4NCiZndDsmZ3Q7Jmd0 OyBQQVNTV09SRC1BTEdPUklUSE1TPGJyIGNsYXNzPSIiPg0KJmd0OyZndDsmZ3Q7Jmd0OyZndDsm Z3Q7Jmd0OyZndDsmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7YXR0cmlidXRlLjxi ciBjbGFzcz0iIj4NCiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7 IDxiciBjbGFzcz0iIj4NCiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsm Z3Q7Jmd0OyA8YnIgY2xhc3M9IiI+DQomZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZn dDsmZ3Q7Jmd0OyZndDsgPGJyIGNsYXNzPSIiPg0KJmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0 OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7IDxiciBjbGFzcz0iIj4NCiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7 Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7IFRoZSBzZWNvbmQgdG9waWMgaXMg dGhlIGhhc2ggdXNlZCB0byBjb21wdXRlPGJyIGNsYXNzPSIiPg0KJmd0OyZndDsmZ3Q7IHRoZTxi ciBjbGFzcz0iIj4NCiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jm5ic3A7ICZuYnNw OyAmbmJzcDsgJm5ic3A7ICZuYnNwO01BQy4gSG93ZXZlciw8YnIgY2xhc3M9IiI+DQomZ3Q7Jmd0 OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmbmJzcDsgJm5ic3A7IEkgZG9uJ3Q8YnIgY2xh c3M9IiI+DQomZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsm Z3Q7IHNlZTxiciBjbGFzcz0iIj4NCiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0 OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7IGhvdzxiciBjbGFzcz0iIj4NCiZndDsmZ3Q7Jmd0OyZndDsm Z3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7IHRoaXMgZ2l2ZXMgeW91IHNl bnNpYmxlIGJpZGRvd24gcHJvdGVjdGlvbjxiciBjbGFzcz0iIj4NCiZndDsmZ3Q7Jmd0OyZndDsm Z3Q7Jmd0OyZndDsmbmJzcDsgJm5ic3A7YmVjYXVzZTxiciBjbGFzcz0iIj4NCiZndDsmZ3Q7Jmd0 OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwO3Ro YXQgaGFzaDxiciBjbGFzcz0iIj4NCiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0 OyZuYnNwOyAmbmJzcDsgaXMgYWxzbzxiciBjbGFzcz0iIj4NCiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7 Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7IHVzZWQ8YnIgY2xhc3M9IiI+DQomZ3Q7Jmd0OyZndDsm Z3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyB0byBjb21wdXRlPGJy IGNsYXNzPSIiPg0KJmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsm Z3Q7Jmd0OyZndDsgTUFDIG92ZXIgdGhlIG5lZ290aWF0aW9uOiBhbiBhdHRhY2tlciB3aG8gaGFz PGJyIGNsYXNzPSIiPg0KJmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmbmJzcDsgJm5i c3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7Y29tcHJvbWlzZWQgYTxiciBjbGFzcz0iIj4NCiZndDsm Z3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZuYnNwOyAmbmJzcDsgTUFDIHdoaWNoPGJy IGNsYXNzPSIiPg0KJmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsg dGhlPGJyIGNsYXNzPSIiPg0KJmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0 OyZndDsmZ3Q7Jmd0OyZndDsgc2VydmVyPGJyIGNsYXNzPSIiPg0KJmd0OyZndDsmZ3Q7Jmd0OyZn dDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsgc3VwcG9ydHMgd2lsbCBxdWl0 ZSBsaWtlbHkgYmUgYWJsZSB0byBmb3JnZTxiciBjbGFzcz0iIj4NCiZndDsmZ3Q7Jmd0OyZndDsm Z3Q7Jmd0OyZndDsmbmJzcDsgJm5ic3A7YSBNQUM8YnIgY2xhc3M9IiI+DQomZ3Q7Jmd0OyZndDsm Z3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDtvdmVy IHRoZTxiciBjbGFzcz0iIj4NCiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZu YnNwOyAmbmJzcDsgdHJhbnNjcmlwdDxiciBjbGFzcz0iIj4NCiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7 Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7IGFzPGJyIGNsYXNzPSIiPg0KJmd0OyZndDsmZ3Q7Jmd0 OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsgd2VsbC4gVGhpcyBpcyw8 YnIgY2xhc3M9IiI+DQomZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0 OyZndDsmZ3Q7Jmd0OyBJIHN1cHBvc2UsIHBvdGVudGlhbGx5IHVzZWZ1bCBhcyBhIGRlZmVuc2U8 YnIgY2xhc3M9IiI+DQomZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jm5ic3A7ICZuYnNwO2Fn YWluc3Q8YnIgY2xhc3M9IiI+DQomZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZuYnNw OyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDtzb21lIG90aGVyPGJyIGNsYXNzPSIiPg0KJmd0 OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jm5ic3A7ICZuYnNwOyB3ZWFrbmVzczxi ciBjbGFzcz0iIj4NCiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7 Jmd0OyZndDsmZ3Q7IChlLmcuLDxiciBjbGFzcz0iIj4NCiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0 OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7IHZlcnNpb24gIyksIGJ1dCBJIGRvbid0 IHJlYWxseSBzZWUgaG93IHRoZTxiciBjbGFzcz0iIj4NCiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0 OyZndDsmbmJzcDsgJm5ic3A7Y3VycmVudDxiciBjbGFzcz0iIj4NCiZndDsmZ3Q7Jmd0OyZndDsm Z3Q7Jmd0OyZndDsmZ3Q7Jm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwO2Rlc2lnbjxi ciBjbGFzcz0iIj4NCiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZuYnNwOyAm bmJzcDsgaGVscHMgYWdhaW5zdDxiciBjbGFzcz0iIj4NCiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0 OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7IGF0dGFja3Mgb24gdGhlPGJyIGNsYXNz PSIiPg0KJmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0 OyZndDsgTUFDLjxiciBjbGFzcz0iIj4NCiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7 Jmd0OyZndDsmZ3Q7Jmd0OyZndDsgPGJyIGNsYXNzPSIiPg0KJmd0OyZndDsmZ3Q7Jmd0OyZndDsm Z3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyBUaGVyZSBpcyBubyBiaWRkb3duIGF0dGFj ayBwcm90ZWN0aW9uIGZvciB0aGU8YnIgY2xhc3M9IiI+DQomZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZn dDsmZ3Q7Jm5ic3A7ICZuYnNwO01BQywgYXM8YnIgY2xhc3M9IiI+DQomZ3Q7Jmd0OyZndDsmZ3Q7 Jmd0OyZndDsmZ3Q7Jmd0OyZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDtzdGF0ZWQg aW48YnIgY2xhc3M9IiI+DQomZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmbmJz cDsgJm5ic3A7IFNlY3Rpb248YnIgY2xhc3M9IiI+DQomZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsm Z3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7IDE2LjM6PGJyIGNsYXNzPSIiPg0KJmd0OyZndDsm Z3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyA8YnIgY2xhc3M9IiI+ DQomZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7ICZx dW90O1RoZSBiaWQtZG93biBwcm90ZWN0aW9uIG1lY2hhbmlzbSBkZXNjcmliZWQ8YnIgY2xhc3M9 IiI+DQomZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jm5ic3A7ICZuYnNwO2luIHRoaXM8YnIg Y2xhc3M9IiI+DQomZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZuYnNwOyAmbmJzcDsg Jm5ic3A7ICZuYnNwOyAmbmJzcDtkb2N1bWVudDxiciBjbGFzcz0iIj4NCiZndDsmZ3Q7Jmd0OyZn dDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZuYnNwOyAmbmJzcDsgaXMgbmV3LDxiciBjbGFzcz0iIj4N CiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsgYW5k IHRodXMgY2Fubm90IGN1cnJlbnRseSBwcm90ZWN0IGFnYWluc3QgYTxiciBjbGFzcz0iIj4NCiZn dDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmbmJzcDsgJm5ic3A7YmlkLWRvd248YnIgY2xhc3M9 IiI+DQomZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZuYnNwOyAmbmJzcDsgJm5ic3A7 ICZuYnNwOyAmbmJzcDthdHRhY2sgdGhhdDxiciBjbGFzcz0iIj4NCiZndDsmZ3Q7Jmd0OyZndDsm Z3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsgbG93ZXJzIHRoZSBzdHJlbmd0aCBv ZiB0aGUgaGFzaCBhbGdvcml0aG0gdG88YnIgY2xhc3M9IiI+DQomZ3Q7Jmd0OyZndDsmZ3Q7Jmd0 OyZndDsmZ3Q7Jm5ic3A7ICZuYnNwO0hNQUMtU0hBMS4mcXVvdDs8YnIgY2xhc3M9IiI+DQomZ3Q7 Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7IDxiciBjbGFz cz0iIj4NCiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZn dDsgV2hhdCB3ZSBwdXQgaW4gcGxhY2UgaXMgYSBwbGFuIGZvciAqZnV0dXJlKjxiciBjbGFzcz0i Ij4NCiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmbmJzcDsgJm5ic3A7dmVyc2lvbnM8YnIg Y2xhc3M9IiI+DQomZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZuYnNwOyAmbmJzcDsg Jm5ic3A7ICZuYnNwOyAmbmJzcDtvZiBTVFVOIHRvIGdldDxiciBjbGFzcz0iIj4NCiZndDsmZ3Q7 Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsgYmlkZG93biBwcm90 ZWN0aW9uIGZvciB0aGUgTUFDLiZuYnNwOyBUaGF0J3MgaXQsPGJyIGNsYXNzPSIiPg0KJmd0OyZn dDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZuYnNwOyAmbmJzcDtubyBtb3JlLDxiciBjbGFzcz0iIj4N CiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5i c3A7ICZuYnNwO25vIGxlc3MuPGJyIGNsYXNzPSIiPg0KJmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7 Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyA8YnIgY2xhc3M9IiI+DQomZ3Q7Jmd0OyZndDsm Z3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsgPGJyIGNsYXNzPSIiPg0KJmd0OyZn dDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7IFllcywgYnV0IEkgZG9u J3QgYmVsaWV2ZSB0aGF0IHRoaXMgd2lsbDxiciBjbGFzcz0iIj4NCiZndDsmZ3Q7Jmd0OyZndDsm Z3Q7Jmd0OyZndDsmbmJzcDsgJm5ic3A7cHJvdmlkZSBiaWQtZG93bjxiciBjbGFzcz0iIj4NCiZn dDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZuYnNwOyAmbmJzcDsgcHJvdGVjdGlv biBmb3I8YnIgY2xhc3M9IiI+DQomZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsm Z3Q7Jmd0OyB0aGU8YnIgY2xhc3M9IiI+DQomZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0 OyZndDsmZ3Q7Jmd0OyZndDsgTUFDIGluIHRoZSBmdXR1cmUgZm9yIHRoZSByZWFzb25zIEkgaW5k aWNhdGU8YnIgY2xhc3M9IiI+DQomZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jm5ic3A7ICZu YnNwO2Fib3ZlLjxiciBjbGFzcz0iIj4NCiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7 Jmd0OyZndDsmZ3Q7Jmd0OyA8YnIgY2xhc3M9IiI+DQomZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsm Z3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsgSWYgeW91IHRoaW5rIHRoaXMgZG9lcyBzb21ldGhpbmcg dXNlZnVsLDxiciBjbGFzcz0iIj4NCiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmbmJzcDsg Jm5ic3A7cGxlYXNlIHNob3cgbWUgYW48YnIgY2xhc3M9IiI+DQomZ3Q7Jmd0OyZndDsmZ3Q7Jmd0 OyZndDsmZ3Q7Jmd0OyZndDsmbmJzcDsgJm5ic3A7IGV4YW1wbGUgYXR0YWNrPGJyIGNsYXNzPSIi Pg0KJmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7IGFuZCBo b3cgdGhpcyBmaXhlcyBpdC4gTm90ZSB0aGF0IGl0J3Mgbm90PGJyIGNsYXNzPSIiPg0KJmd0OyZn dDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZuYnNwOyAmbmJzcDtnZW5lcmFsbHk8YnIgY2xhc3M9IiI+ DQomZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZuYnNwOyAmbmJzcDsgJm5ic3A7ICZu YnNwOyAmbmJzcDt1c2VmdWwgdG88YnIgY2xhc3M9IiI+DQomZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZn dDsmZ3Q7Jmd0OyZndDsmbmJzcDsgJm5ic3A7IGp1c3QgYmlkPGJyIGNsYXNzPSIiPg0KJmd0OyZn dDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsgZG93bjxiciBjbGFzcz0iIj4N CiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyB0aGUgTUFD IGl0c2VsZiB1bmxlc3MgdGhlIE1BQyB5b3UgYmlkIGRvd24gdG88YnIgY2xhc3M9IiI+DQomZ3Q7 Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jm5ic3A7ICZuYnNwO2lzIHdlYWs8YnIgY2xhc3M9IiI+ DQomZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZuYnNwOyAmbmJzcDsgJm5ic3A7ICZu YnNwOyAmbmJzcDtlbm91Z2ggdG88YnIgY2xhc3M9IiI+DQomZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZn dDsmZ3Q7Jmd0OyZndDsmbmJzcDsgJm5ic3A7IGV4cGxvaXQ8YnIgY2xhc3M9IiI+DQomZ3Q7Jmd0 OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyBpbjxiciBjbGFzcz0iIj4NCiZn dDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyBzb21lIG90aGVy IHdheS48YnIgY2xhc3M9IiI+DQomZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsm Z3Q7Jmd0OyA8YnIgY2xhc3M9IiI+DQomZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZn dDsmZ3Q7Jmd0OyBJIGRvIG5vdCBrbm93IHdoYXQgd2Vha25lc3NlcyB3aWxsIGJlPGJyIGNsYXNz PSIiPg0KJmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZuYnNwOyAmbmJzcDtkaXNjb3ZlcmVk IGluIHRoZTxiciBjbGFzcz0iIj4NCiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jm5i c3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwO2Z1dHVyZS48YnIgY2xhc3M9IiI+DQomZ3Q7 Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmbmJzcDsgJm5ic3A7IEkgYW0gYWxzbzxi ciBjbGFzcz0iIj4NCiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7 IHByZXR0eSBzdXJlIHRoYXQgdGhlIGNvc3Qgb2Ygbm90IHVzaW5nIHRoYXQ8YnIgY2xhc3M9IiI+ DQomZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jm5ic3A7ICZuYnNwO21lY2hhbmlzbTxiciBj bGFzcz0iIj4NCiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jm5ic3A7ICZuYnNwOyAm bmJzcDsgJm5ic3A7ICZuYnNwO2lzIHZlcnk8YnIgY2xhc3M9IiI+DQomZ3Q7Jmd0OyZndDsmZ3Q7 Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmbmJzcDsgJm5ic3A7IGNsb3NlIHRvIDAuPGJyIGNsYXNzPSIi Pg0KJmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsgV2hhdCBJIGFt IHN1cmUgb2YgaXMgdGhhdCB0aGUgY29zdCBvZjxiciBjbGFzcz0iIj4NCiZndDsmZ3Q7Jmd0OyZn dDsmZ3Q7Jmd0OyZndDsmbmJzcDsgJm5ic3A7cmVlbmdpbmVlcmluZyBhPGJyIGNsYXNzPSIiPg0K Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJz cDsgJm5ic3A7bmV3IGJpZGRvd248YnIgY2xhc3M9IiI+DQomZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZn dDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyBwcm90ZWN0aW9uIG1lY2hhbmlzbSBpZiB3ZSBldmVyIG5l ZWQgaXQgd2lsbCBiZTxiciBjbGFzcz0iIj4NCiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsm bmJzcDsgJm5ic3A7aGlnaC48YnIgY2xhc3M9IiI+DQomZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsm Z3Q7Jmd0OyZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDtXZSBhbHJlYWR5PGJyIGNs YXNzPSIiPg0KJmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jm5ic3A7ICZuYnNw OyB3ZW50PGJyIGNsYXNzPSIiPg0KJmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7 Jmd0OyZndDsgdGhyb3VnaCB0aGUgcGFpbnMgb2YgZGVzaWduaW5nIG9uZSBmb3IgdGhlPGJyIGNs YXNzPSIiPg0KJmd0OyZndDsmZ3Q7IHBhc3N3b3JkPGJyIGNsYXNzPSIiPg0KJmd0OyZndDsmZ3Q7 Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7YWxn b3JpdGhtLCBzbzxiciBjbGFzcz0iIj4NCiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7 Jmd0OyZuYnNwOyAmbmJzcDsgd2h5IG5vdDxiciBjbGFzcz0iIj4NCiZndDsmZ3Q7Jmd0OyZndDsm Z3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7IGV4dGVuZCBpdCBzbyBpdCBjYW4gYmUgdXNlZCBp biB0aGUgYWZ0ZXJtYXRoIG9mPGJyIGNsYXNzPSIiPg0KJmd0OyZndDsmZ3Q7IHRoZTxiciBjbGFz cz0iIj4NCiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jm5ic3A7ICZuYnNwOyAmbmJz cDsgJm5ic3A7ICZuYnNwO25leHQgU25vd2RlbjxiciBjbGFzcz0iIj4NCiZndDsmZ3Q7Jmd0OyZn dDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZuYnNwOyAmbmJzcDsgZmFjZXBhbG08YnIgY2xhc3M9IiI+ DQomZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyBtb21lbnQ/PGJy IGNsYXNzPSIiPg0KJmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsg PGJyIGNsYXNzPSIiPg0KJmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZn dDsmZ3Q7IEFnYWluLCBoYXBweSB0byBoYXZlIGEgY2FsbCB0byB3YWxrIHRob3VnaDxiciBjbGFz cz0iIj4NCiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmbmJzcDsgJm5ic3A7dGhpcyBpZiB0 aGF0PGJyIGNsYXNzPSIiPg0KJmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0 OyZndDsmZ3Q7IGhlbHBzLjxiciBjbGFzcz0iIj4NCiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZn dDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyA8YnIgY2xhc3M9IiI+DQomZ3Q7Jmd0OyZndDsmZ3Q7Jmd0 OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsgLUVrcjxiciBjbGFzcz0iIj4NCiZndDsmZ3Q7 Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyA8YnIgY2xhc3M9IiI+DQom Z3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsgPGJyIGNsYXNz PSIiPg0KJmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7IDxi ciBjbGFzcz0iIj4NCiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7 Jmd0OyA8YnIgY2xhc3M9IiI+DQomZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsm Z3Q7Jmd0OyZndDsmZ3Q7Jmd0OyA8YnIgY2xhc3M9IiI+DQomZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZn dDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyBZb3UgbWlnaHQgdGhpbmsgdGhhdCB0 aGVyZSB3YXMgYSBNQUMgd2hpY2g8YnIgY2xhc3M9IiI+DQomZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZn dDsmZ3Q7Jm5ic3A7ICZuYnNwO3dhcyBlYXNpZXIgdG88YnIgY2xhc3M9IiI+DQomZ3Q7Jmd0OyZn dDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmbmJzcDsgJm5ic3A7IHJldmVyc2UgdG88YnIgY2xh c3M9IiI+DQomZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyBmaW5k PGJyIGNsYXNzPSIiPg0KJmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZn dDsmZ3Q7Jmd0OyZndDsgdGhlIG9yaWdpbmFsPGJyIGNsYXNzPSIiPg0KJmd0OyZndDsmZ3Q7Jmd0 OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsgcGFzc3dvcmQsIGJ1dCB0 aGUgZGVmZW5zZSB5b3UgaGF2ZSBoZXJlPGJyIGNsYXNzPSIiPg0KJmd0OyZndDsmZ3Q7Jmd0OyZn dDsmZ3Q7Jmd0OyZuYnNwOyAmbmJzcDtkb2Vzbid0IGhlbHA8YnIgY2xhc3M9IiI+DQomZ3Q7Jmd0 OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJz cDt3aXRoIHRoYXQ8YnIgY2xhc3M9IiI+DQomZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0 OyZndDsmbmJzcDsgJm5ic3A7IGJlY2F1c2U8YnIgY2xhc3M9IiI+DQomZ3Q7Jmd0OyZndDsmZ3Q7 Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7IHRoZTxiciBjbGFzcz0iIj4NCiZn dDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7IG9u LXBhdGggYXR0YWNrZXIgY2FuIGRvIGEgYmlkLWRvd24gYW5kIHVzZSB0aGU8YnIgY2xhc3M9IiI+ DQomZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZuYnNwOyAmbmJzcDsgJm5ic3A7ICZu YnNwOyAmbmJzcDtjbGllbnQgYXMgYSBNQUM8YnIgY2xhc3M9IiI+DQomZ3Q7Jmd0OyZndDsmZ3Q7 Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmbmJzcDsgJm5ic3A7IG9yYWNsZTxiciBjbGFzcz0iIj4NCiZn dDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7IGZvcjxiciBjbGFzcz0i Ij4NCiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsm Z3Q7IGFueSBNQUMgdGhlIGNsaWVudCBzdXBwb3J0cy48YnIgY2xhc3M9IiI+DQomZ3Q7Jmd0OyZn dDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyA8YnIgY2xhc3M9 IiI+DQomZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7 Jmd0OyBTbywgSSBzdGlsbCBkb24ndCB1bmRlcnN0YW5kIHdoYXQgdGhpcyBpczxiciBjbGFzcz0i Ij4NCiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmbmJzcDsgJm5ic3A7c3VwcG9zZWQ8YnIg Y2xhc3M9IiI+DQomZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZuYnNwOyAmbmJzcDsg Jm5ic3A7ICZuYnNwOyAmbmJzcDt0byBkby4gSGFwcHkgdG88YnIgY2xhc3M9IiI+DQomZ3Q7Jmd0 OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyBoYXZlIGE8YnIgY2xhc3M9IiI+ DQomZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0 OyBjYWxsIGlmIHlvdTxiciBjbGFzcz0iIj4NCiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsm Z3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7IHRoaW5rIHRoYXQgaGVscHM8YnIgY2xhc3M9IiI+ DQomZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0 OyA8YnIgY2xhc3M9IiI+DQomZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7 Jmd0OyZndDsmZ3Q7Jmd0OyAtRWtyPGJyIGNsYXNzPSIiPg0KJmd0OyZndDsmZ3Q7Jmd0OyZndDsm Z3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsgPGJyIGNsYXNzPSIiPg0KJmd0OyZn dDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsgPGJyIGNs YXNzPSIiPg0KJmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7 Jmd0OyZndDsgPGJyIGNsYXNzPSIiPg0KJmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsm Z3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsgPGJyIGNsYXNzPSIiPg0KJmd0OyZndDsmZ3Q7Jmd0OyZn dDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsgT24gTW9uLCBKdW4gMTgsIDIw MTggYXQgMzo0MCBBTSwgR29uemFsbzxiciBjbGFzcz0iIj4NCiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7 Jmd0OyZndDsmbmJzcDsgJm5ic3A7Q2FtYXJpbGxvICZsdDs8YnIgY2xhc3M9IiI+DQomZ3Q7Jmd0 OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyA8YSBocmVm PSJtYWlsdG86R29uemFsby5DYW1hcmlsbG9AZXJpY3Nzb24uY29tIiB0YXJnZXQ9Il9ibGFuayIg Y2xhc3M9IiI+DQpHb256YWxvLkNhbWFyaWxsb0Blcmljc3Nvbi5jb208L2E+PGJyIGNsYXNzPSIi Pg0KJmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZuYnNwOyAmbmJzcDsmbHQ7bWFpbHRvOjxh IGhyZWY9Im1haWx0bzpHb256YWxvLkNhbWFyaWxsb0Blcmljc3Nvbi5jb20iIHRhcmdldD0iX2Js YW5rIiBjbGFzcz0iIj5Hb256YWxvLkNhbWFyaWxsb0Blcmljc3Nvbi5jb208L2E+Jmd0OzxiciBj bGFzcz0iIj4NCiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jm5ic3A7ICZuYnNwOyAm bmJzcDsgJm5ic3A7ICZuYnNwOyZsdDttYWlsdG86PGEgaHJlZj0ibWFpbHRvOkdvbnphbG8uQ2Ft YXJpbGxvQGVyaWNzc29uLmNvbSIgdGFyZ2V0PSJfYmxhbmsiIGNsYXNzPSIiPkdvbnphbG8uQ2Ft YXJpbGxvQGVyaWNzc29uLmNvbTwvYT48YnIgY2xhc3M9IiI+DQomZ3Q7Jmd0OyZndDsmZ3Q7Jmd0 OyZndDsmZ3Q7Jm5ic3A7ICZuYnNwOyZsdDttYWlsdG86PGEgaHJlZj0ibWFpbHRvOkdvbnphbG8u Q2FtYXJpbGxvQGVyaWNzc29uLmNvbSIgdGFyZ2V0PSJfYmxhbmsiIGNsYXNzPSIiPkdvbnphbG8u Q2FtYXJpbGxvQGVyaWNzc29uLmNvbTwvYT4mZ3Q7Jmd0OzxiciBjbGFzcz0iIj4NCiZndDsmZ3Q7 Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZuYnNwOyAmbmJzcDsgJmx0O21haWx0bzo8YSBo cmVmPSJtYWlsdG86R29uemFsby5DYW1hcmlsbG9AZXJpY3Nzb24uY29tIiB0YXJnZXQ9Il9ibGFu ayIgY2xhc3M9IiI+R29uemFsby5DYW1hcmlsbG9AZXJpY3Nzb24uY29tPC9hPjxiciBjbGFzcz0i Ij4NCiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmbmJzcDsgJm5ic3A7Jmx0O21haWx0bzo8 YSBocmVmPSJtYWlsdG86R29uemFsby5DYW1hcmlsbG9AZXJpY3Nzb24uY29tIiB0YXJnZXQ9Il9i bGFuayIgY2xhc3M9IiI+R29uemFsby5DYW1hcmlsbG9AZXJpY3Nzb24uY29tPC9hPiZndDs8YnIg Y2xhc3M9IiI+DQomZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZuYnNwOyAmbmJzcDsg Jm5ic3A7ICZuYnNwOyAmbmJzcDsmbHQ7bWFpbHRvOjxhIGhyZWY9Im1haWx0bzpHb256YWxvLkNh bWFyaWxsb0Blcmljc3Nvbi5jb20iIHRhcmdldD0iX2JsYW5rIiBjbGFzcz0iIj5Hb256YWxvLkNh bWFyaWxsb0Blcmljc3Nvbi5jb208L2E+PGJyIGNsYXNzPSIiPg0KJmd0OyZndDsmZ3Q7Jmd0OyZn dDsmZ3Q7Jmd0OyZuYnNwOyAmbmJzcDsmbHQ7bWFpbHRvOjxhIGhyZWY9Im1haWx0bzpHb256YWxv LkNhbWFyaWxsb0Blcmljc3Nvbi5jb20iIHRhcmdldD0iX2JsYW5rIiBjbGFzcz0iIj5Hb256YWxv LkNhbWFyaWxsb0Blcmljc3Nvbi5jb208L2E+Jmd0OyZndDsmZ3Q7Jmd0OyB3cm90ZTo8YnIgY2xh c3M9IiI+DQomZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsm Z3Q7Jmd0OyA8YnIgY2xhc3M9IiI+DQomZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZn dDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsgTWFyYywgRXJpYyw8YnIgY2xhc3M9IiI+DQomZ3Q7 Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsg PGJyIGNsYXNzPSIiPg0KJmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZn dDsmZ3Q7Jmd0OyZndDsmZ3Q7IHdoYXQgaXMgdGhlIHN0YXR1cyBvZiB0aGlzIGRpc2N1c3Npb24/ PGJyIGNsYXNzPSIiPg0KJmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZn dDsmZ3Q7Jmd0OyZndDsmZ3Q7IDxiciBjbGFzcz0iIj4NCiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0 OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyBUaGFua3MsPGJyIGNsYXNzPSIi Pg0KJmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZn dDsmZ3Q7IDxiciBjbGFzcz0iIj4NCiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0 OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyBHb256YWxvPGJyIGNsYXNzPSIiPg0KJmd0OyZndDsm Z3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7IDxiciBj bGFzcz0iIj4NCiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0 OyZndDsmZ3Q7Jmd0OyZndDsgT24gMDQvMDUvMjAxOCAyOjM1IEFNLCBFcmljIFJlc2NvcmxhIHdy b3RlOjxiciBjbGFzcz0iIj4NCiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZn dDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsgPGJyIGNsYXNzPSIiPg0KJmd0OyZndDsmZ3Q7Jmd0 OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyA8YnIgY2xh c3M9IiI+DQomZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsm Z3Q7Jmd0OyZndDsmZ3Q7IE9uIE1vbiwgQXByIDIzLCAyMDE4IGF0IDExOjE2IEFNLCBNYXJjPGJy IGNsYXNzPSIiPg0KJmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmbmJzcDsgJm5ic3A7 ICZuYnNwOyAmbmJzcDsgJm5ic3A7UGV0aXQtSHVndWVuaW4gJmx0OzxiciBjbGFzcz0iIj4NCiZn dDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsgPGEgaHJl Zj0ibWFpbHRvOnBldGl0aHVnQGFjbS5vcmciIHRhcmdldD0iX2JsYW5rIiBjbGFzcz0iIj5wZXRp dGh1Z0BhY20ub3JnPC9hPiAmbHQ7bWFpbHRvOjxhIGhyZWY9Im1haWx0bzpwZXRpdGh1Z0BhY20u b3JnIiB0YXJnZXQ9Il9ibGFuayIgY2xhc3M9IiI+cGV0aXRodWdAYWNtLm9yZzwvYT4mZ3Q7PGJy IGNsYXNzPSIiPg0KJmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZuYnNwOyAmbmJzcDsmbHQ7 bWFpbHRvOjxhIGhyZWY9Im1haWx0bzpwZXRpdGh1Z0BhY20ub3JnIiB0YXJnZXQ9Il9ibGFuayIg Y2xhc3M9IiI+cGV0aXRodWdAYWNtLm9yZzwvYT4gJmx0O21haWx0bzo8YSBocmVmPSJtYWlsdG86 cGV0aXRodWdAYWNtLm9yZyIgdGFyZ2V0PSJfYmxhbmsiIGNsYXNzPSIiPnBldGl0aHVnQGFjbS5v cmc8L2E+Jmd0OyZndDs8YnIgY2xhc3M9IiI+DQomZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7 Jmd0OyZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsmbHQ7bWFpbHRvOjxhIGhyZWY9 Im1haWx0bzpwZXRpdGh1Z0BhY20ub3JnIiB0YXJnZXQ9Il9ibGFuayIgY2xhc3M9IiI+cGV0aXRo dWdAYWNtLm9yZzwvYT4gJmx0O21haWx0bzo8YSBocmVmPSJtYWlsdG86cGV0aXRodWdAYWNtLm9y ZyIgdGFyZ2V0PSJfYmxhbmsiIGNsYXNzPSIiPnBldGl0aHVnQGFjbS5vcmc8L2E+Jmd0OzxiciBj bGFzcz0iIj4NCiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmbmJzcDsgJm5ic3A7Jmx0O21h aWx0bzo8YSBocmVmPSJtYWlsdG86cGV0aXRodWdAYWNtLm9yZyIgdGFyZ2V0PSJfYmxhbmsiIGNs YXNzPSIiPnBldGl0aHVnQGFjbS5vcmc8L2E+ICZsdDttYWlsdG86PGEgaHJlZj0ibWFpbHRvOnBl dGl0aHVnQGFjbS5vcmciIHRhcmdldD0iX2JsYW5rIiBjbGFzcz0iIj5wZXRpdGh1Z0BhY20ub3Jn PC9hPiZndDsmZ3Q7Jmd0OzxiciBjbGFzcz0iIj4NCiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZn dDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsgJmx0O21haWx0bzo8YSBocmVm PSJtYWlsdG86cGV0aXRodWdAYWNtLm9yZyIgdGFyZ2V0PSJfYmxhbmsiIGNsYXNzPSIiPnBldGl0 aHVnQGFjbS5vcmc8L2E+PGJyIGNsYXNzPSIiPg0KJmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0 OyZuYnNwOyAmbmJzcDsmbHQ7bWFpbHRvOjxhIGhyZWY9Im1haWx0bzpwZXRpdGh1Z0BhY20ub3Jn IiB0YXJnZXQ9Il9ibGFuayIgY2xhc3M9IiI+cGV0aXRodWdAYWNtLm9yZzwvYT4mZ3Q7ICZsdDtt YWlsdG86PGEgaHJlZj0ibWFpbHRvOnBldGl0aHVnQGFjbS5vcmciIHRhcmdldD0iX2JsYW5rIiBj bGFzcz0iIj5wZXRpdGh1Z0BhY20ub3JnPC9hPjxiciBjbGFzcz0iIj4NCiZndDsmZ3Q7Jmd0OyZn dDsmZ3Q7Jmd0OyZndDsmbmJzcDsgJm5ic3A7Jmx0O21haWx0bzo8YSBocmVmPSJtYWlsdG86cGV0 aXRodWdAYWNtLm9yZyIgdGFyZ2V0PSJfYmxhbmsiIGNsYXNzPSIiPnBldGl0aHVnQGFjbS5vcmc8 L2E+Jmd0OyZndDs8YnIgY2xhc3M9IiI+DQomZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0 OyZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsmbHQ7bWFpbHRvOjxhIGhyZWY9Im1h aWx0bzpwZXRpdGh1Z0BhY20ub3JnIiB0YXJnZXQ9Il9ibGFuayIgY2xhc3M9IiI+cGV0aXRodWdA YWNtLm9yZzwvYT4gJmx0O21haWx0bzo8YSBocmVmPSJtYWlsdG86cGV0aXRodWdAYWNtLm9yZyIg dGFyZ2V0PSJfYmxhbmsiIGNsYXNzPSIiPnBldGl0aHVnQGFjbS5vcmc8L2E+Jmd0OzxiciBjbGFz cz0iIj4NCiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmbmJzcDsgJm5ic3A7Jmx0O21haWx0 bzo8YSBocmVmPSJtYWlsdG86cGV0aXRodWdAYWNtLm9yZyIgdGFyZ2V0PSJfYmxhbmsiIGNsYXNz PSIiPnBldGl0aHVnQGFjbS5vcmc8L2E+ICZsdDttYWlsdG86PGEgaHJlZj0ibWFpbHRvOnBldGl0 aHVnQGFjbS5vcmciIHRhcmdldD0iX2JsYW5rIiBjbGFzcz0iIj5wZXRpdGh1Z0BhY20ub3JnPC9h PiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7IHdyb3RlOjxiciBjbGFzcz0iIj4NCiZndDsmZ3Q7Jmd0OyZn dDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsgPGJyIGNs YXNzPSIiPg0KJmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7 Jmd0OyZndDsmZ3Q7Jmd0OyZuYnNwOyAmbmJzcDsgT24gMDQvMjIvMjAxOCAwNToyMiBQTSwgRXJp YyBSZXNjb3JsYTxiciBjbGFzcz0iIj4NCiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmbmJz cDsgJm5ic3A7d3JvdGU6PGJyIGNsYXNzPSIiPg0KJmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0 OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsgT24gU3VuLCBBcHIgMjIs IDIwMTggYXQgMjowMiBQTSwgTWFyYzxiciBjbGFzcz0iIj4NCiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7 Jmd0OyZndDsmZ3Q7Jm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwO1BldGl0LUh1Z3Vl bmluICZsdDs8YnIgY2xhc3M9IiI+DQomZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZn dDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsgPGEgaHJlZj0ibWFpbHRvOnBldGl0aHVnQGFjbS5v cmciIHRhcmdldD0iX2JsYW5rIiBjbGFzcz0iIj5wZXRpdGh1Z0BhY20ub3JnPC9hPiAmbHQ7bWFp bHRvOjxhIGhyZWY9Im1haWx0bzpwZXRpdGh1Z0BhY20ub3JnIiB0YXJnZXQ9Il9ibGFuayIgY2xh c3M9IiI+cGV0aXRodWdAYWNtLm9yZzwvYT4mZ3Q7PGJyIGNsYXNzPSIiPg0KJmd0OyZndDsmZ3Q7 Jmd0OyZndDsmZ3Q7Jmd0OyZuYnNwOyAmbmJzcDsmbHQ7bWFpbHRvOjxhIGhyZWY9Im1haWx0bzpw ZXRpdGh1Z0BhY20ub3JnIiB0YXJnZXQ9Il9ibGFuayIgY2xhc3M9IiI+cGV0aXRodWdAYWNtLm9y ZzwvYT4gJmx0O21haWx0bzo8YSBocmVmPSJtYWlsdG86cGV0aXRodWdAYWNtLm9yZyIgdGFyZ2V0 PSJfYmxhbmsiIGNsYXNzPSIiPnBldGl0aHVnQGFjbS5vcmc8L2E+Jmd0OyZndDs8YnIgY2xhc3M9 IiI+DQomZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZuYnNwOyAmbmJzcDsgJm5ic3A7 ICZuYnNwOyAmbmJzcDsmbHQ7bWFpbHRvOjxhIGhyZWY9Im1haWx0bzpwZXRpdGh1Z0BhY20ub3Jn IiB0YXJnZXQ9Il9ibGFuayIgY2xhc3M9IiI+cGV0aXRodWdAYWNtLm9yZzwvYT4gJmx0O21haWx0 bzo8YSBocmVmPSJtYWlsdG86cGV0aXRodWdAYWNtLm9yZyIgdGFyZ2V0PSJfYmxhbmsiIGNsYXNz PSIiPnBldGl0aHVnQGFjbS5vcmc8L2E+Jmd0OzxiciBjbGFzcz0iIj4NCiZndDsmZ3Q7Jmd0OyZn dDsmZ3Q7Jmd0OyZndDsmbmJzcDsgJm5ic3A7Jmx0O21haWx0bzo8YSBocmVmPSJtYWlsdG86cGV0 aXRodWdAYWNtLm9yZyIgdGFyZ2V0PSJfYmxhbmsiIGNsYXNzPSIiPnBldGl0aHVnQGFjbS5vcmc8 L2E+ICZsdDttYWlsdG86PGEgaHJlZj0ibWFpbHRvOnBldGl0aHVnQGFjbS5vcmciIHRhcmdldD0i X2JsYW5rIiBjbGFzcz0iIj5wZXRpdGh1Z0BhY20ub3JnPC9hPiZndDsmZ3Q7Jmd0OzxiciBjbGFz cz0iIj4NCiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZuYnNwOyAmbmJzcDsg Jmx0O21haWx0bzo8YSBocmVmPSJtYWlsdG86cGV0aXRodWdAYWNtLm9yZyIgdGFyZ2V0PSJfYmxh bmsiIGNsYXNzPSIiPnBldGl0aHVnQGFjbS5vcmc8L2E+ICZsdDttYWlsdG86PGEgaHJlZj0ibWFp bHRvOnBldGl0aHVnQGFjbS5vcmciIHRhcmdldD0iX2JsYW5rIiBjbGFzcz0iIj5wZXRpdGh1Z0Bh Y20ub3JnPC9hPiZndDs8YnIgY2xhc3M9IiI+DQomZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7 Jm5ic3A7ICZuYnNwOyZsdDttYWlsdG86PGEgaHJlZj0ibWFpbHRvOnBldGl0aHVnQGFjbS5vcmci IHRhcmdldD0iX2JsYW5rIiBjbGFzcz0iIj5wZXRpdGh1Z0BhY20ub3JnPC9hPiAmbHQ7bWFpbHRv OjxhIGhyZWY9Im1haWx0bzpwZXRpdGh1Z0BhY20ub3JnIiB0YXJnZXQ9Il9ibGFuayIgY2xhc3M9 IiI+cGV0aXRodWdAYWNtLm9yZzwvYT4mZ3Q7Jmd0OzxiciBjbGFzcz0iIj4NCiZndDsmZ3Q7Jmd0 OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyZs dDttYWlsdG86PGEgaHJlZj0ibWFpbHRvOnBldGl0aHVnQGFjbS5vcmciIHRhcmdldD0iX2JsYW5r IiBjbGFzcz0iIj5wZXRpdGh1Z0BhY20ub3JnPC9hPiAmbHQ7bWFpbHRvOjxhIGhyZWY9Im1haWx0 bzpwZXRpdGh1Z0BhY20ub3JnIiB0YXJnZXQ9Il9ibGFuayIgY2xhc3M9IiI+cGV0aXRodWdAYWNt Lm9yZzwvYT4mZ3Q7PGJyIGNsYXNzPSIiPg0KJmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZu YnNwOyAmbmJzcDsmbHQ7bWFpbHRvOjxhIGhyZWY9Im1haWx0bzpwZXRpdGh1Z0BhY20ub3JnIiB0 YXJnZXQ9Il9ibGFuayIgY2xhc3M9IiI+cGV0aXRodWdAYWNtLm9yZzwvYT4gJmx0O21haWx0bzo8 YSBocmVmPSJtYWlsdG86cGV0aXRodWdAYWNtLm9yZyIgdGFyZ2V0PSJfYmxhbmsiIGNsYXNzPSIi PnBldGl0aHVnQGFjbS5vcmc8L2E+Jmd0OyZndDsmZ3Q7Jmd0OyZndDs8YnIgY2xhc3M9IiI+DQom Z3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZn dDsmZ3Q7Jmd0OyB3cm90ZTo8YnIgY2xhc3M9IiI+DQomZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsm Z3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyA8YnIgY2xhc3M9IiI+ DQomZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0 OyZndDsmZ3Q7Jmd0OyZndDsgPGJyIGNsYXNzPSIiPg0KJmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7 Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsm bmJzcDsgJm5ic3A7ICZuYnNwO0ZvciBhIHJlcXVlc3Qgb3IgaW5kaWNhdGlvbjxiciBjbGFzcz0i Ij4NCiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmbmJzcDsgJm5ic3A7bWVzc2FnZSw8YnIg Y2xhc3M9IiI+DQomZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZuYnNwOyAmbmJzcDsg Jm5ic3A7ICZuYnNwOyAmbmJzcDt0aGUgYWdlbnQ8YnIgY2xhc3M9IiI+DQomZ3Q7Jmd0OyZndDsm Z3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmbmJzcDsgJm5ic3A7IE1VU1Q8YnIgY2xhc3M9IiI+DQom Z3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZn dDsgaW5jbHVkZSB0aGU8YnIgY2xhc3M9IiI+DQomZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7 Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZuYnNw OyAmbmJzcDsgJm5ic3A7VVNFUk5BTUUsPGJyIGNsYXNzPSIiPg0KJmd0OyZndDsmZ3Q7Jmd0OyZn dDsmZ3Q7Jmd0OyZuYnNwOyAmbmJzcDtNRVNTQUdFLUlOVEVHUklUWS1TSEEyNTYsIGFuZDxiciBj bGFzcz0iIj4NCiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7IE1F U1NBR0UtSU5URUdSSVRZPGJyIGNsYXNzPSIiPg0KJmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0 OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7IGF0dHJpYnV0ZXM8 YnIgY2xhc3M9IiI+DQomZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0 OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZuYnNwOyAmbmJzcDsgJm5ic3A7 aW4gdGhlIG1lc3NhZ2UgdW5sZXNzIHRoZSBhZ2VudDxiciBjbGFzcz0iIj4NCiZndDsmZ3Q7Jmd0 OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwO2tu b3dzIGZyb20gYW48YnIgY2xhc3M9IiI+DQomZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0 OyZndDsmbmJzcDsgJm5ic3A7IGV4dGVybmFsPGJyIGNsYXNzPSIiPg0KJmd0OyZndDsmZ3Q7Jmd0 OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7IGluZGljYXRpb248 YnIgY2xhc3M9IiI+DQomZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0 OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZuYnNwOyAmbmJzcDsgJm5ic3A7 d2hpY2ggbWVzc2FnZSBpbnRlZ3JpdHk8YnIgY2xhc3M9IiI+DQomZ3Q7Jmd0OyZndDsmZ3Q7Jmd0 OyZndDsmZ3Q7Jm5ic3A7ICZuYnNwO2FsZ29yaXRobSBpczxiciBjbGFzcz0iIj4NCiZndDsmZ3Q7 Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNw O3N1cHBvcnRlZDxiciBjbGFzcz0iIj4NCiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7 Jmd0OyZuYnNwOyAmbmJzcDsgYnkgYm90aDxiciBjbGFzcz0iIj4NCiZndDsmZ3Q7Jmd0OyZndDsm Z3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyBhZ2VudHMuJm5ic3A7 IEluPGJyIGNsYXNzPSIiPg0KJmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0 OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmbmJzcDsgJm5ic3A7ICZu YnNwO3RoaXMgY2FzZSBlaXRoZXI8YnIgY2xhc3M9IiI+DQomZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZn dDsmZ3Q7Jm5ic3A7ICZuYnNwO01FU1NBR0UtSU5URUdSSVRZIG9yPGJyIGNsYXNzPSIiPg0KJmd0 OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7 IE1FU1NBR0UtSU5URUdSSVRZLVNIQTI1NiBNVVNUPGJyIGNsYXNzPSIiPg0KJmd0OyZndDsmZ3Q7 Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsm Z3Q7Jmd0OyZndDsmbmJzcDsgJm5ic3A7ICZuYnNwO2JlIGluY2x1ZGVkIGluIGFkZGl0aW9uIHRv PGJyIGNsYXNzPSIiPg0KJmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmbmJzcDsgJm5i c3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7VVNFUk5BTUUuJm5ic3A7IFRoZSBITUFDPGJyIGNsYXNz PSIiPg0KJmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jm5ic3A7ICZuYnNwOyBm b3IgdGhlPGJyIGNsYXNzPSIiPg0KJmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7 Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7IE1FU1NBR0UtPGJyIGNsYXNzPSIiPg0KJmd0OyZndDsm Z3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZn dDsmZ3Q7Jmd0OyA8YnIgY2xhc3M9IiI+DQomZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0 OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7IFRoaXMgdGV4dCBh cHBlYXJzIHRvIGNvbmZsaWN0IHdpdGg8YnIgY2xhc3M9IiI+DQomZ3Q7Jmd0OyZndDsmZ3Q7Jmd0 OyZndDsmZ3Q7Jm5ic3A7ICZuYnNwO1MgNy4zIG9mPGJyIGNsYXNzPSIiPg0KJmd0OyZndDsmZ3Q7 Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jm5ic3A7ICZuYnNwOyA1MjQ1LWJpcywgd2hpY2g8YnIg Y2xhc3M9IiI+DQomZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZn dDsmZ3Q7IHNheXM6PGJyIGNsYXNzPSIiPg0KJmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZn dDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7IDxiciBjbGFzcz0iIj4N CiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7 Jmd0OyZndDsmZ3Q7Jmd0OyBbdGV4dCBtaXNzaW5nXTxiciBjbGFzcz0iIj4NCiZndDsmZ3Q7Jmd0 OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7 Jmd0OyA8YnIgY2xhc3M9IiI+DQomZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsm Z3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsgSG1tLCBubywgUkZDMjQ1YmlzIGlz IHN0aWxsPGJyIGNsYXNzPSIiPg0KJmd0OyZndDsmZ3Q7IHJlZmVyZW5jaW5nPGJyIGNsYXNzPSIi Pg0KJmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmbmJzcDsgJm5ic3A7ICZuYnNwOyAm bmJzcDsgJm5ic3A7UkZDNTM4OSwgc28gdGhlPGJyIGNsYXNzPSIiPg0KJmd0OyZndDsmZ3Q7Jmd0 OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyBwcm9jZWR1cmU8YnIgY2xhc3M9 IiI+DQomZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7 Jmd0OyZndDsgZm9yPGJyIGNsYXNzPSIiPg0KJmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZn dDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7IHN0dW5iaXMgZG9lcyBu b3QgYXBwbHkuPGJyIGNsYXNzPSIiPg0KJmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsm Z3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7IDxiciBjbGFzcz0iIj4NCiZn dDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0 OyZndDsmZ3Q7IDxiciBjbGFzcz0iIj4NCiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7 Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7IEkgaGVhciB3aGF0IHlvdSdyZSBz YXlpbmcsIGJ1dDxiciBjbGFzcz0iIj4NCiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmbmJz cDsgJm5ic3A7cHVibGlzaGluZyB0d288YnIgY2xhc3M9IiI+DQomZ3Q7Jmd0OyZndDsmZ3Q7Jmd0 OyZndDsmZ3Q7Jmd0OyZndDsmbmJzcDsgJm5ic3A7IGRvY3VtZW50cyBhdCB0aGU8YnIgY2xhc3M9 IiI+DQomZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7 Jmd0OyZndDsgc2FtZSB0aW1lPGJyIGNsYXNzPSIiPg0KJmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7 Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsgd2hpY2g8YnIgY2xh c3M9IiI+DQomZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsm Z3Q7Jmd0OyZndDsmZ3Q7Jmd0OyBtYWtlIGNvbnRyYXJ5IHJlY29tbWVuZGF0aW9ucyBhYm91dDxi ciBjbGFzcz0iIj4NCiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmbmJzcDsgJm5ic3A7dGhl IHNhbWU8YnIgY2xhc3M9IiI+DQomZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZuYnNw OyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDtiYXNpYzxiciBjbGFzcz0iIj4NCiZndDsmZ3Q7 Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZuYnNwOyAmbmJzcDsgcHJvdG9jb2wgaXM8YnIg Y2xhc3M9IiI+DQomZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZn dDsmZ3Q7Jmd0OyZndDsgdW4tZ29vZC48YnIgY2xhc3M9IiI+DQomZ3Q7Jmd0OyZndDsmZ3Q7Jmd0 OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7IDxiciBjbGFzcz0i Ij4NCiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsm Z3Q7Jmd0OyZndDsmbmJzcDsgJm5ic3A7IFN1cmUsIGJ1dCB3b3VsZG4ndCBpdCBiZSBzaW1wbGVy IHRvIGhhdmU8YnIgY2xhc3M9IiI+DQomZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZu YnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDtyZmM1MjQ1YmlzPGJyIGNsYXNzPSIiPg0K Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jm5ic3A7ICZuYnNwOyB1c2luZyBz dHVuYmlzPGJyIGNsYXNzPSIiPg0KJmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7 Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZuYnNwOyAmbmJzcDsgYW5kIGhhdmUgdGhlbSB1 cGRhdGluZyB0aGVpciB0ZXh0LDxiciBjbGFzcz0iIj4NCiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0 OyZndDsmbmJzcDsgJm5ic3A7bW9yZSB0aGFuPGJyIGNsYXNzPSIiPg0KJmd0OyZndDsmZ3Q7Jmd0 OyZndDsmZ3Q7Jmd0OyZndDsmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7YWRkaW5n IHNvbWU8YnIgY2xhc3M9IiI+DQomZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsm bmJzcDsgJm5ic3A7IHRvcnR1b3VzPGJyIGNsYXNzPSIiPg0KJmd0OyZndDsmZ3Q7Jmd0OyZndDsm Z3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZuYnNwOyAmbmJzcDsg dGV4dCBpbiBzdHVuYmlzPzxiciBjbGFzcz0iIj4NCiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZn dDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsgPGJyIGNsYXNzPSIiPg0KJmd0 OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7 Jmd0OyZndDsgPGJyIGNsYXNzPSIiPg0KJmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsm Z3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsgPGJyIGNsYXNzPSIiPg0KJmd0OyZn dDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0 OyZndDsmZ3Q7Jmd0OyZuYnNwOyAmbmJzcDsgJm5ic3A7VGhlIFNUVU4gdXNhZ2UgbXVzdCBzcGVj aWZ5PGJyIGNsYXNzPSIiPg0KJmd0OyZndDsmZ3Q7IHdoaWNoPGJyIGNsYXNzPSIiPg0KJmd0OyZn dDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5i c3A7dHJhbnNwb3J0PGJyIGNsYXNzPSIiPg0KJmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZn dDsmZ3Q7Jm5ic3A7ICZuYnNwOyBwcm90b2NvbCBpczxiciBjbGFzcz0iIj4NCiZndDsmZ3Q7Jmd0 OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyB1c2VkLCBh bmQ8YnIgY2xhc3M9IiI+DQomZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7 Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsgaG93PGJyIGNsYXNzPSIiPg0KJmd0OyZn dDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0 OyZndDsmZ3Q7Jmd0OyZndDsmbmJzcDsgJm5ic3A7ICZuYnNwO3RoZSBhZ2VudCBkZXRlcm1pbmVz IHRoZSBJUDxiciBjbGFzcz0iIj4NCiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmbmJzcDsg Jm5ic3A7YWRkcmVzczxiciBjbGFzcz0iIj4NCiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsm Z3Q7Jm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwO2FuZCBwb3J0PGJyIGNsYXNzPSIi Pg0KJmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jm5ic3A7ICZuYnNwOyBvZiB0 aGU8YnIgY2xhc3M9IiI+DQomZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7 Jmd0OyZndDsmZ3Q7Jmd0OyZndDsgcmVjaXBpZW50LjxiciBjbGFzcz0iIj4NCiZndDsmZ3Q7Jmd0 OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7 Jmd0OyZndDsmZ3Q7Jm5ic3A7ICZuYnNwOyAmbmJzcDtTZWN0aW9uIDggZGVzY3JpYmVzIGEgRE5T LWJhc2VkPGJyIGNsYXNzPSIiPg0KJmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmbmJz cDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7bWV0aG9kIG9mPGJyIGNsYXNzPSIiPg0KJmd0 OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jm5ic3A7ICZuYnNwOyBkZXRlcm1pbmlu ZzxiciBjbGFzcz0iIj4NCiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsm Z3Q7IHRoZTxiciBjbGFzcz0iIj4NCiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0 OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyBJUDxiciBjbGFzcz0iIj4NCiZndDsmZ3Q7Jmd0OyZn dDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0 OyBhZGRyZXNzPGJyIGNsYXNzPSIiPg0KJmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsm Z3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmbmJzcDsgJm5i c3A7ICZuYnNwO2FuZCBwb3J0IG9mIGEgc2VydmVyIHRoYXQgYTxiciBjbGFzcz0iIj4NCiZndDsm Z3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmbmJzcDsgJm5ic3A7dXNhZ2U8YnIgY2xhc3M9IiI+DQom Z3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNw OyAmbmJzcDttYXkgZWxlY3QgdG88YnIgY2xhc3M9IiI+DQomZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZn dDsmZ3Q7Jmd0OyZndDsmbmJzcDsgJm5ic3A7IHVzZS48YnIgY2xhc3M9IiI+DQomZ3Q7Jmd0OyZn dDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyBTVFVOPGJyIGNsYXNzPSIiPg0KJmd0 OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7 IG1heSBiZTxiciBjbGFzcz0iIj4NCiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0 OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyB1c2VkPGJyIGNsYXNzPSIiPg0K Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsm Z3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmbmJzcDsgJm5ic3A7ICZuYnNwO3dpdGggYW55Y2FzdCBh ZGRyZXNzZXMsIGJ1dDxiciBjbGFzcz0iIj4NCiZndDsmZ3Q7Jmd0OyBvbmx5PGJyIGNsYXNzPSIi Pg0KJmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmbmJzcDsgJm5ic3A7ICZuYnNwOyAm bmJzcDsgJm5ic3A7d2l0aCBVRFAgYW5kPGJyIGNsYXNzPSIiPg0KJmd0OyZndDsmZ3Q7Jmd0OyZn dDsmZ3Q7Jmd0OyZndDsmZ3Q7Jm5ic3A7ICZuYnNwOyBpbiB1c2FnZXM8YnIgY2xhc3M9IiI+DQom Z3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZn dDsgd2hlcmU8YnIgY2xhc3M9IiI+DQomZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZn dDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZuYnNwOyAmbmJz cDsgJm5ic3A7YXV0aGVudGljYXRpb24gaXMgbm90IHVzZWQuPGJyIGNsYXNzPSIiPg0KJmd0OyZn dDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0 OyZndDsmZ3Q7Jmd0OyA8YnIgY2xhc3M9IiI+DQomZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7 Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7IFdoeSB0aGlz IHJlc3RyaWN0aW9uPyBZb3Ugc2hvdWxkPGJyIGNsYXNzPSIiPg0KJmd0OyZndDsmZ3Q7Jmd0OyZn dDsmZ3Q7Jmd0OyZuYnNwOyAmbmJzcDtiZSBhYmxlPGJyIGNsYXNzPSIiPg0KJmd0OyZndDsmZ3Q7 Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7dG8g dXNlPGJyIGNsYXNzPSIiPg0KJmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jm5i c3A7ICZuYnNwOyBhbnljYXN0IHdpdGg8YnIgY2xhc3M9IiI+DQomZ3Q7Jmd0OyZndDsmZ3Q7Jmd0 OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsgbG9uZy10ZXJtPGJyIGNs YXNzPSIiPg0KJmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7 Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyBBVVRIIGZvciAoc2F5KSBUVVJOLjxiciBjbGFz cz0iIj4NCiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZn dDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyA8YnIgY2xhc3M9IiI+DQomZ3Q7Jmd0OyZndDsmZ3Q7Jmd0 OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsgPGJy IGNsYXNzPSIiPg0KJmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmbmJzcDsgJm5ic3A7 ICZuYnNwOyAmbmJzcDsgJm5ic3A7PGEgaHJlZj0iaHR0cHM6Ly93d3cuaWV0Zi5vcmcvbWFpbC1h cmNoaXZlL3dlYi9iZWhhdmUvY3VycmVudC8iIHJlbD0ibm9yZWZlcnJlciIgdGFyZ2V0PSJfYmxh bmsiIGNsYXNzPSIiPmh0dHBzOi8vd3d3LmlldGYub3JnL21haWwtYXJjaGl2ZS93ZWIvYmVoYXZl L2N1cnJlbnQvPC9hPjxiciBjbGFzcz0iIj4NCiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsm Z3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyBtc2cwMzU4Mi5odG1sPGJyIGNsYXNzPSIi Pg0KJmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZn dDsmZ3Q7Jmd0OyA8YnIgY2xhc3M9IiI+DQomZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0 OyZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJmx0OzxhIGhyZWY9Imh0dHBzOi8v d3d3LmlldGYub3JnL21haWwtYXJjaGl2ZS93ZWIvYmVoYXZlL2N1cnJlbnQvIiByZWw9Im5vcmVm ZXJyZXIiIHRhcmdldD0iX2JsYW5rIiBjbGFzcz0iIj5odHRwczovL3d3dy5pZXRmLm9yZy9tYWls LWFyY2hpdmUvd2ViL2JlaGF2ZS9jdXJyZW50LzwvYT48YnIgY2xhc3M9IiI+DQomZ3Q7Jmd0OyZn dDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7IG1zZzAzNTgyLmh0bWwm Z3Q7PGJyIGNsYXNzPSIiPg0KJmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0 OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7IDxiciBjbGFzcz0iIj4NCiZndDsmZ3Q7 Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsm Z3Q7Jmd0OyBJIHRoaW5rIHRoYXQgdGhlIGRlY2lzaW9uIG9mPGJyIGNsYXNzPSIiPg0KJmd0OyZn dDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZuYnNwOyAmbmJzcDtwZXJtaXR0aW5nIEFueWNhc3Q8YnIg Y2xhc3M9IiI+DQomZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmbmJzcDsgJm5i c3A7IHNob3VsZCBiZSBsZWZ0PGJyIGNsYXNzPSIiPg0KJmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7 Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyB0bzxiciBjbGFzcz0iIj4NCiZndDsmZ3Q7Jmd0 OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyBlYWNoPGJy IGNsYXNzPSIiPg0KJmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsm Z3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7IFNUVU4gVXNhZ2UuJm5ic3A7IEJhc2ljIFNUVU4g VXNhZ2UgZG9lczxiciBjbGFzcz0iIj4NCiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmbmJz cDsgJm5ic3A7bm90IHVzZTxiciBjbGFzcz0iIj4NCiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZn dDsmZ3Q7Jmd0OyZuYnNwOyAmbmJzcDsgYXV0aGVudGljYXRpb24gYW5kPGJyIGNsYXNzPSIiPg0K Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyB1c2U8 YnIgY2xhc3M9IiI+DQomZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0 OyZndDsmZ3Q7Jmd0OyZndDsgb25seSBhPGJyIGNsYXNzPSIiPg0KJmd0OyZndDsmZ3Q7Jmd0OyZn dDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7IG9u ZSByb3VuZCB0cmlwIGZvciB0aGUgQmluZGluZzxiciBjbGFzcz0iIj4NCiZndDsmZ3Q7Jmd0OyZn dDsmZ3Q7Jmd0OyZndDsmbmJzcDsgJm5ic3A7dHJhbnNhY3Rpb24sIHNvPGJyIGNsYXNzPSIiPg0K Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jm5ic3A7ICZuYnNwOyBVbmljYXN0 IGNhbiBiZTxiciBjbGFzcz0iIj4NCiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0 OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyB1c2VkLjxiciBjbGFzcz0iIj4NCiZndDsmZ3Q7Jmd0 OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7 Jmd0OyA8YnIgY2xhc3M9IiI+DQomZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsm Z3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyA8YnIgY2xhc3M9IiI+DQomZ3Q7Jmd0OyZn dDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0 OyZndDsgT1RPSCwgVFVSTiBhbmQgSUNFIHNob3VsZCBwcm9iYWJseSBzYXk8YnIgY2xhc3M9IiI+ DQomZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZuYnNwOyAmbmJzcDsgJm5ic3A7ICZu YnNwOyAmbmJzcDtzb21ldGhpbmc8YnIgY2xhc3M9IiI+DQomZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZn dDsmZ3Q7Jmd0OyZndDsmbmJzcDsgJm5ic3A7IGFib3V0IHRoYXQsPGJyIGNsYXNzPSIiPg0KJmd0 OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsgc288YnIgY2xhc3M9IiI+ DQomZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7IEk8 YnIgY2xhc3M9IiI+DQomZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0 OyZndDsmZ3Q7Jmd0OyZndDsgYWRkZWQgYTxiciBjbGFzcz0iIj4NCiZndDsmZ3Q7Jmd0OyZndDsm Z3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyBu ZXcgYnVsbGV0IHBvaW50IGluIFNlY3Rpb24gMTM6PGJyIGNsYXNzPSIiPg0KJmd0OyZndDsmZ3Q7 Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsm Z3Q7IDxiciBjbGFzcz0iIj4NCiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZn dDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZuYnNwOyAmbmJzcDtvJm5ic3A7IElm IEFueWNhc3QgYWRkcmVzc2VzIGNhbiBiZTxiciBjbGFzcz0iIj4NCiZndDsmZ3Q7Jmd0OyZndDsm Z3Q7Jmd0OyZndDsmbmJzcDsgJm5ic3A7dXNlZCBmb3I8YnIgY2xhc3M9IiI+DQomZ3Q7Jmd0OyZn dDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDt0 aGUgc2VydmVyPGJyIGNsYXNzPSIiPg0KJmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsm Z3Q7Jm5ic3A7ICZuYnNwOyBpbiBjYXNlPGJyIGNsYXNzPSIiPg0KJmd0OyZndDsmZ3Q7Jmd0OyZn dDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyBUQ1A8YnIgY2xhc3M9IiI+DQomZ3Q7 Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsg b3I8YnIgY2xhc3M9IiI+DQomZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7 Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmbmJzcDsgJm5ic3A7ICZuYnNwOyBUTFMt b3Zlci1UQ1AsIG9yPGJyIGNsYXNzPSIiPg0KJmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZu YnNwOyAmbmJzcDthdXRoZW50aWNhdGlvbiBhcmUgdXNlZC48YnIgY2xhc3M9IiI+DQomZ3Q7Jmd0 OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7 Jmd0OyZndDsgPGJyIGNsYXNzPSIiPg0KJmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsm Z3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsgPGJyIGNsYXNzPSIiPg0KJmd0OyZn dDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0 OyZndDsgQXJlIHlvdSBsZWF2aW5nIHRoaXMgdGV4dCBpbj8gVGhhdDxiciBjbGFzcz0iIj4NCiZn dDsmZ3Q7Jmd0OyBzZWVtczxiciBjbGFzcz0iIj4NCiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZn dDsmZ3Q7Jm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwO3ZlcnkgY29uZnVzaW5nLjxi ciBjbGFzcz0iIj4NCiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7 Jmd0OyZndDsmZ3Q7Jmd0OyZndDsgPGJyIGNsYXNzPSIiPg0KJmd0OyZndDsmZ3Q7Jmd0OyZndDsm Z3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZuYnNwOyAmbmJzcDsg SW4gaXNvbGF0aW9uIHllcywgYnV0IEkgdGhpbmsgaXQgbWFrZXM8YnIgY2xhc3M9IiI+DQomZ3Q7 Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jm5ic3A7ICZuYnNwO3NlbnNlPGJyIGNsYXNzPSIiPg0K Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJz cDsgJm5ic3A7d2hpY2ggdGhlIHRleHQ8YnIgY2xhc3M9IiI+DQomZ3Q7Jmd0OyZndDsmZ3Q7Jmd0 OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyBiZWZvcmU8YnIgY2xhc3M9IiI+DQomZ3Q7Jmd0OyZn dDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jm5i c3A7ICZuYnNwOyB0aGUgYnVsbGV0IHBvaW50czo8YnIgY2xhc3M9IiI+DQomZ3Q7Jmd0OyZndDsm Z3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7IDxiciBj bGFzcz0iIj4NCiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0 OyZndDsmZ3Q7Jmd0OyZndDsmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDtBIFNUVU4gdXNhZ2Ug ZGVmaW5lcyBob3cgU1RVTiBpczxiciBjbGFzcz0iIj4NCiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0 OyZndDsmbmJzcDsgJm5ic3A7YWN0dWFsbHk8YnIgY2xhc3M9IiI+DQomZ3Q7Jmd0OyZndDsmZ3Q7 Jmd0OyZndDsmZ3Q7Jmd0OyZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDt1dGlsaXpl ZCAtLTxiciBjbGFzcz0iIj4NCiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZu YnNwOyAmbmJzcDsgd2hlbiB0bzxiciBjbGFzcz0iIj4NCiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0 OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsgc2VuZDxiciBjbGFzcz0iIj4NCiZndDsmZ3Q7 Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsm bmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDtyZXF1ZXN0cywgd2hhdCB0byBkbyB3aXRoIHRoZTxi ciBjbGFzcz0iIj4NCiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmbmJzcDsgJm5ic3A7cmVz cG9uc2VzLDxiciBjbGFzcz0iIj4NCiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jm5i c3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwO2FuZCB3aGljaDxiciBjbGFzcz0iIj4NCiZn dDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZuYnNwOyAmbmJzcDsgb3B0aW9uYWw8 YnIgY2xhc3M9IiI+DQomZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0 OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7cHJvY2VkdXJl cyBkZWZpbmVkIGhlcmUgKG9yIGluIGFuPGJyIGNsYXNzPSIiPg0KJmd0OyZndDsmZ3Q7Jmd0OyZn dDsmZ3Q7Jmd0OyZuYnNwOyAmbmJzcDtleHRlbnNpb248YnIgY2xhc3M9IiI+DQomZ3Q7Jmd0OyZn dDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDt0 byBTVFVOKTxiciBjbGFzcz0iIj4NCiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0 OyZuYnNwOyAmbmJzcDsgYXJlIHRvIGJlPGJyIGNsYXNzPSIiPg0KJmd0OyZndDsmZ3Q7Jmd0OyZn dDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7IHVzZWQuPGJyIGNsYXNz PSIiPg0KJmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0 OyZndDsmZ3Q7Jmd0OyZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwO0EgdXNhZ2UgYWxzbyBkZWZp bmVzOjxiciBjbGFzcz0iIj4NCiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZn dDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsgPGJyIGNsYXNzPSIiPg0KJmd0OyZndDsmZ3Q7Jmd0 OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZuYnNwOyAm bmJzcDsgWy4uLl08YnIgY2xhc3M9IiI+DQomZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0 OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7IDxiciBjbGFzcz0iIj4NCiZndDsmZ3Q7 Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsm bmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDtvJm5ic3A7IElmIEFueWNhc3QgYWRkcmVzc2VzIGNh biBiZSB1c2VkPGJyIGNsYXNzPSIiPg0KJmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZuYnNw OyAmbmJzcDtmb3IgdGhlPGJyIGNsYXNzPSIiPg0KJmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0 OyZndDsmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7c2VydmVyIGluPGJyIGNsYXNz PSIiPg0KJmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jm5ic3A7ICZuYnNwOyBj YXNlIFRDUDxiciBjbGFzcz0iIj4NCiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0 OyZndDsmZ3Q7Jmd0OyZndDsgb3I8YnIgY2xhc3M9IiI+DQomZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZn dDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jm5ic3A7ICZuYnNwOyAm bmJzcDsgJm5ic3A7ICZuYnNwOyBUTFMtb3Zlci1UQ1AsIG9yIGF1dGhlbnRpY2F0aW9uPGJyIGNs YXNzPSIiPg0KJmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZuYnNwOyAmbmJzcDthcmUgdXNl ZC48YnIgY2xhc3M9IiI+DQomZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7 Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7IDxiciBjbGFzcz0iIj4NCiZndDsmZ3Q7Jmd0OyZndDsm Z3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsgPGJyIGNsYXNz PSIiPg0KJmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0 OyZndDsmZ3Q7Jmd0OyBXaGF0IGlzIHRoZSBuZWVkIGZvciB0aGUgcmVzdHJpY3Rpb24gYXQgYWxs PGJyIGNsYXNzPSIiPg0KPC9ibG9ja3F1b3RlPg0KPC9kaXY+DQo8L2Rpdj4NCjwvYmxvY2txdW90 ZT4NCjwvZGl2Pg0KPGJyIGNsYXNzPSIiPg0KPC9kaXY+DQo8L2Rpdj4NCjwvYm9keT4NCjwvaHRt bD4NCg== --_000_9ED47E64EC5343FB8EAD128E81205EF4ciscocom_-- --_004_9ED47E64EC5343FB8EAD128E81205EF4ciscocom_ Content-Type: text/plain; name="draft-ietf-tram-stunbis-21.txt" Content-Description: draft-ietf-tram-stunbis-21.txt Content-Disposition: attachment; filename="draft-ietf-tram-stunbis-21.txt"; size=180048; creation-date="Thu, 21 Mar 2019 18:22:29 GMT"; modification-date="Thu, 21 Mar 2019 18:22:29 GMT" Content-ID: Content-Transfer-Encoding: base64 DQoNCg0KDQpUUkFNICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgTS4gUGV0aXQtSHVndWVuaW4NCkludGVybmV0LURyYWZ0ICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgIEltcGVkYW5jZSBNaXNtYXRjaA0KT2Jzb2xldGVzOiA1Mzg5 IChpZiBhcHByb3ZlZCkgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgRy4gU2FsZ3VlaXJv DQpJbnRlbmRlZCBzdGF0dXM6IFN0YW5kYXJkcyBUcmFjayAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgQ2lzY28NCkV4cGlyZXM6IFNlcHRlbWJlciAyMiwgMjAxOSAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgIEouIFJvc2VuYmVyZw0KICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIEZpdmU5DQogICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgIEQuIFdpbmcNCg0KICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICBSLiBNYWh5DQogICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICBVbmFmZmlsaWF0ZWQNCiAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICBQLiBN YXR0aGV3cw0KICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgIE5va2lhDQogICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgTWFyY2ggMjEsIDIwMTkNCg0KDQogICAgICAgICAg ICAgICBTZXNzaW9uIFRyYXZlcnNhbCBVdGlsaXRpZXMgZm9yIE5BVCAoU1RVTikNCiAgICAgICAg ICAgICAgICAgICAgICAgZHJhZnQtaWV0Zi10cmFtLXN0dW5iaXMtMjENCg0KQWJzdHJhY3QNCg0K ICAgU2Vzc2lvbiBUcmF2ZXJzYWwgVXRpbGl0aWVzIGZvciBOQVQgKFNUVU4pIGlzIGEgcHJvdG9j b2wgdGhhdCBzZXJ2ZXMNCiAgIGFzIGEgdG9vbCBmb3Igb3RoZXIgcHJvdG9jb2xzIGluIGRlYWxp bmcgd2l0aCBOZXR3b3JrIEFkZHJlc3MNCiAgIFRyYW5zbGF0b3IgKE5BVCkgdHJhdmVyc2FsLiAg SXQgY2FuIGJlIHVzZWQgYnkgYW4gZW5kcG9pbnQgdG8NCiAgIGRldGVybWluZSB0aGUgSVAgYWRk cmVzcyBhbmQgcG9ydCBhbGxvY2F0ZWQgdG8gaXQgYnkgYSBOQVQuICBJdCBjYW4NCiAgIGFsc28g YmUgdXNlZCB0byBjaGVjayBjb25uZWN0aXZpdHkgYmV0d2VlbiB0d28gZW5kcG9pbnRzLCBhbmQg YXMgYQ0KICAga2VlcC1hbGl2ZSBwcm90b2NvbCB0byBtYWludGFpbiBOQVQgYmluZGluZ3MuICBT VFVOIHdvcmtzIHdpdGggbWFueQ0KICAgZXhpc3RpbmcgTkFUcywgYW5kIGRvZXMgbm90IHJlcXVp cmUgYW55IHNwZWNpYWwgYmVoYXZpb3IgZnJvbSB0aGVtLg0KDQogICBTVFVOIGlzIG5vdCBhIE5B VCB0cmF2ZXJzYWwgc29sdXRpb24gYnkgaXRzZWxmLiAgUmF0aGVyLCBpdCBpcyBhIHRvb2wNCiAg IHRvIGJlIHVzZWQgaW4gdGhlIGNvbnRleHQgb2YgYSBOQVQgdHJhdmVyc2FsIHNvbHV0aW9uLg0K DQogICBUaGlzIGRvY3VtZW50IG9ic29sZXRlcyBSRkMgNTM4OS4NCg0KU3RhdHVzIG9mIFRoaXMg TWVtbw0KDQogICBUaGlzIEludGVybmV0LURyYWZ0IGlzIHN1Ym1pdHRlZCBpbiBmdWxsIGNvbmZv cm1hbmNlIHdpdGggdGhlDQogICBwcm92aXNpb25zIG9mIEJDUCA3OCBhbmQgQkNQIDc5Lg0KDQog ICBJbnRlcm5ldC1EcmFmdHMgYXJlIHdvcmtpbmcgZG9jdW1lbnRzIG9mIHRoZSBJbnRlcm5ldCBF bmdpbmVlcmluZw0KICAgVGFzayBGb3JjZSAoSUVURikuICBOb3RlIHRoYXQgb3RoZXIgZ3JvdXBz IG1heSBhbHNvIGRpc3RyaWJ1dGUNCiAgIHdvcmtpbmcgZG9jdW1lbnRzIGFzIEludGVybmV0LURy YWZ0cy4gIFRoZSBsaXN0IG9mIGN1cnJlbnQgSW50ZXJuZXQtDQogICBEcmFmdHMgaXMgYXQgaHR0 cHM6Ly9kYXRhdHJhY2tlci5pZXRmLm9yZy9kcmFmdHMvY3VycmVudC8uDQoNCiAgIEludGVybmV0 LURyYWZ0cyBhcmUgZHJhZnQgZG9jdW1lbnRzIHZhbGlkIGZvciBhIG1heGltdW0gb2Ygc2l4IG1v bnRocw0KICAgYW5kIG1heSBiZSB1cGRhdGVkLCByZXBsYWNlZCwgb3Igb2Jzb2xldGVkIGJ5IG90 aGVyIGRvY3VtZW50cyBhdCBhbnkNCiAgIHRpbWUuICBJdCBpcyBpbmFwcHJvcHJpYXRlIHRvIHVz ZSBJbnRlcm5ldC1EcmFmdHMgYXMgcmVmZXJlbmNlDQogICBtYXRlcmlhbCBvciB0byBjaXRlIHRo ZW0gb3RoZXIgdGhhbiBhcyAid29yayBpbiBwcm9ncmVzcy4iDQoNCg0KDQoNClBldGl0LUh1Z3Vl bmluLCBldCBhbC4gRXhwaXJlcyBTZXB0ZW1iZXIgMjIsIDIwMTkgICAgICAgICAgICAgICBbUGFn ZSAxXQ0KDA0KSW50ZXJuZXQtRHJhZnQgU2Vzc2lvbiBUcmF2ZXJzYWwgVXRpbGl0aWVzIGZvciBO QVQgKFNUVU4pICAgICBNYXJjaCAyMDE5DQoNCg0KICAgVGhpcyBJbnRlcm5ldC1EcmFmdCB3aWxs IGV4cGlyZSBvbiBTZXB0ZW1iZXIgMjIsIDIwMTkuDQoNCkNvcHlyaWdodCBOb3RpY2UNCg0KICAg Q29weXJpZ2h0IChjKSAyMDE5IElFVEYgVHJ1c3QgYW5kIHRoZSBwZXJzb25zIGlkZW50aWZpZWQg YXMgdGhlDQogICBkb2N1bWVudCBhdXRob3JzLiAgQWxsIHJpZ2h0cyByZXNlcnZlZC4NCg0KICAg VGhpcyBkb2N1bWVudCBpcyBzdWJqZWN0IHRvIEJDUCA3OCBhbmQgdGhlIElFVEYgVHJ1c3QncyBM ZWdhbA0KICAgUHJvdmlzaW9ucyBSZWxhdGluZyB0byBJRVRGIERvY3VtZW50cw0KICAgKGh0dHBz Oi8vdHJ1c3RlZS5pZXRmLm9yZy9saWNlbnNlLWluZm8pIGluIGVmZmVjdCBvbiB0aGUgZGF0ZSBv Zg0KICAgcHVibGljYXRpb24gb2YgdGhpcyBkb2N1bWVudC4gIFBsZWFzZSByZXZpZXcgdGhlc2Ug ZG9jdW1lbnRzDQogICBjYXJlZnVsbHksIGFzIHRoZXkgZGVzY3JpYmUgeW91ciByaWdodHMgYW5k IHJlc3RyaWN0aW9ucyB3aXRoIHJlc3BlY3QNCiAgIHRvIHRoaXMgZG9jdW1lbnQuICBDb2RlIENv bXBvbmVudHMgZXh0cmFjdGVkIGZyb20gdGhpcyBkb2N1bWVudCBtdXN0DQogICBpbmNsdWRlIFNp bXBsaWZpZWQgQlNEIExpY2Vuc2UgdGV4dCBhcyBkZXNjcmliZWQgaW4gU2VjdGlvbiA0LmUgb2YN CiAgIHRoZSBUcnVzdCBMZWdhbCBQcm92aXNpb25zIGFuZCBhcmUgcHJvdmlkZWQgd2l0aG91dCB3 YXJyYW50eSBhcw0KICAgZGVzY3JpYmVkIGluIHRoZSBTaW1wbGlmaWVkIEJTRCBMaWNlbnNlLg0K DQpUYWJsZSBvZiBDb250ZW50cw0KDQogICAxLiAgSW50cm9kdWN0aW9uICAuIC4gLiAuIC4gLiAu IC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAgIDUNCiAgIDIuICBPdmVydmlldyBv ZiBPcGVyYXRpb24gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuICAgNg0K ICAgMy4gIFRlcm1pbm9sb2d5IC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4g LiAuIC4gLiAuIC4gICA4DQogICA0LiAgRGVmaW5pdGlvbnMgLiAuIC4gLiAuIC4gLiAuIC4gLiAu IC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAgIDgNCiAgIDUuICBTVFVOIE1lc3NhZ2UgU3Ry dWN0dXJlICAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuICAxMA0KICAgNi4g IEJhc2UgUHJvdG9jb2wgUHJvY2VkdXJlcyAgLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4g LiAuIC4gIDEyDQogICAgIDYuMS4gIEZvcm1pbmcgYSBSZXF1ZXN0IG9yIGFuIEluZGljYXRpb24g IC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAgMTINCiAgICAgNi4yLiAgU2VuZGluZyB0aGUgUmVxdWVz dCBvciBJbmRpY2F0aW9uIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuICAxMw0KICAgICAgIDYuMi4x LiAgU2VuZGluZyBvdmVyIFVEUCBvciBEVExTLW92ZXItVURQIC4gLiAuIC4gLiAuIC4gLiAuIC4g IDE0DQogICAgICAgNi4yLjIuICBTZW5kaW5nIG92ZXIgVENQIG9yIFRMUy1vdmVyLVRDUCAgLiAu IC4gLiAuIC4gLiAuIC4gLiAgMTUNCiAgICAgICA2LjIuMy4gIFNlbmRpbmcgb3ZlciBUTFMtb3Zl ci1UQ1Agb3IgRFRMUy1vdmVyLVVEUCAgLiAuIC4gLiAuICAxNg0KICAgICA2LjMuICBSZWNlaXZp bmcgYSBTVFVOIE1lc3NhZ2UgIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gIDE3DQog ICAgICAgNi4zLjEuICBQcm9jZXNzaW5nIGEgUmVxdWVzdCAgLiAuIC4gLiAuIC4gLiAuIC4gLiAu IC4gLiAuIC4gLiAgMTgNCiAgICAgICAgIDYuMy4xLjEuICBGb3JtaW5nIGEgU3VjY2VzcyBvciBF cnJvciBSZXNwb25zZSAuIC4gLiAuIC4gLiAuICAxOA0KICAgICAgICAgNi4zLjEuMi4gIFNlbmRp bmcgdGhlIFN1Y2Nlc3Mgb3IgRXJyb3IgUmVzcG9uc2UgLiAuIC4gLiAuIC4gIDE5DQogICAgICAg Ni4zLjIuICBQcm9jZXNzaW5nIGFuIEluZGljYXRpb24gIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAu IC4gLiAgMTkNCiAgICAgICA2LjMuMy4gIFByb2Nlc3NpbmcgYSBTdWNjZXNzIFJlc3BvbnNlIC4g LiAuIC4gLiAuIC4gLiAuIC4gLiAuICAyMA0KICAgICAgIDYuMy40LiAgUHJvY2Vzc2luZyBhbiBF cnJvciBSZXNwb25zZSAgLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gIDIwDQogICA3LiAgRklOR0VS UFJJTlQgTWVjaGFuaXNtIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAg MjENCiAgIDguICBETlMgRGlzY292ZXJ5IG9mIGEgU2VydmVyIC4gLiAuIC4gLiAuIC4gLiAuIC4g LiAuIC4gLiAuIC4gLiAuICAyMQ0KICAgICA4LjEuICBTVFVOIFVSSSBTY2hlbWUgU2VtYW50aWNz IC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gIDIyDQogICA5LiAgQXV0aGVudGljYXRp b24gYW5kIE1lc3NhZ2UtSW50ZWdyaXR5IE1lY2hhbmlzbXMgLiAuIC4gLiAuIC4gLiAgMjMNCiAg ICAgOS4xLiAgU2hvcnQtVGVybSBDcmVkZW50aWFsIE1lY2hhbmlzbSAuIC4gLiAuIC4gLiAuIC4g LiAuIC4gLiAuICAyMw0KICAgICAgIDkuMS4xLiAgSE1BQyBLZXkgIC4gLiAuIC4gLiAuIC4gLiAu IC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gIDI0DQogICAgICAgOS4xLjIuICBGb3JtaW5nIGEg UmVxdWVzdCBvciBJbmRpY2F0aW9uIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAgMjQNCiAgICAgICA5 LjEuMy4gIFJlY2VpdmluZyBhIFJlcXVlc3Qgb3IgSW5kaWNhdGlvbiAuIC4gLiAuIC4gLiAuIC4g LiAuICAyNA0KICAgICAgIDkuMS40LiAgUmVjZWl2aW5nIGEgUmVzcG9uc2UgIC4gLiAuIC4gLiAu IC4gLiAuIC4gLiAuIC4gLiAuIC4gIDI1DQogICAgICAgOS4xLjUuICBTZW5kaW5nIFN1YnNlcXVl bnQgUmVxdWVzdHMgLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAgMjYNCiAgICAgOS4yLiAgTG9u Zy1UZXJtIENyZWRlbnRpYWwgTWVjaGFuaXNtICAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuICAy Ng0KDQoNCg0KUGV0aXQtSHVndWVuaW4sIGV0IGFsLiBFeHBpcmVzIFNlcHRlbWJlciAyMiwgMjAx OSAgICAgICAgICAgICAgIFtQYWdlIDJdDQoMDQpJbnRlcm5ldC1EcmFmdCBTZXNzaW9uIFRyYXZl cnNhbCBVdGlsaXRpZXMgZm9yIE5BVCAoU1RVTikgICAgIE1hcmNoIDIwMTkNCg0KDQogICAgICAg OS4yLjEuICBCaWQgRG93biBBdHRhY2sgUHJldmVudGlvbiAgLiAuIC4gLiAuIC4gLiAuIC4gLiAu IC4gLiAgMjgNCiAgICAgICA5LjIuMi4gIEhNQUMgS2V5ICAuIC4gLiAuIC4gLiAuIC4gLiAuIC4g LiAuIC4gLiAuIC4gLiAuIC4gLiAuICAyOA0KICAgICAgIDkuMi4zLiAgRm9ybWluZyBhIFJlcXVl c3QgLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gIDI5DQogICAgICAgICA5LjIu My4xLiAgRmlyc3QgUmVxdWVzdCAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAg MjkNCiAgICAgICAgIDkuMi4zLjIuICBTdWJzZXF1ZW50IFJlcXVlc3RzIC4gLiAuIC4gLiAuIC4g LiAuIC4gLiAuIC4gLiAuICAyOQ0KICAgICAgIDkuMi40LiAgUmVjZWl2aW5nIGEgUmVxdWVzdCAu IC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gIDMwDQogICAgICAgOS4yLjUuICBSZWNl aXZpbmcgYSBSZXNwb25zZSAgLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAgMzINCiAg IDEwLiBBTFRFUk5BVEUtU0VSVkVSIE1lY2hhbmlzbSAgLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4g LiAuIC4gLiAuICAzMw0KICAgMTEuIEJhY2t3YXJkcyBDb21wYXRpYmlsaXR5IHdpdGggUkZDIDM0 ODkgLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gIDM0DQogICAxMi4gQmFzaWMgU2VydmVyIEJlaGF2 aW9yIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAgMzUNCiAgIDEzLiBT VFVOIFVzYWdlcyAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4g LiAuICAzNg0KICAgMTQuIFNUVU4gQXR0cmlidXRlcyAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAu IC4gLiAuIC4gLiAuIC4gLiAuIC4gIDM3DQogICAgIDE0LjEuICBNQVBQRUQtQUREUkVTUyAuIC4g LiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAgMzgNCiAgICAgMTQuMi4gIFhP Ui1NQVBQRUQtQUREUkVTUyAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuICAz OQ0KICAgICAxNC4zLiAgVVNFUk5BTUUgLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAu IC4gLiAuIC4gLiAuIC4gIDQwDQogICAgIDE0LjQuICBVU0VSSEFTSCAuIC4gLiAuIC4gLiAuIC4g LiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAgNDANCiAgICAgMTQuNS4gIE1FU1NBR0Ut SU5URUdSSVRZICAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuICA0MA0KICAg ICAxNC42LiAgTUVTU0FHRS1JTlRFR1JJVFktU0hBMjU2IC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAu IC4gLiAuIC4gIDQxDQogICAgIDE0LjcuICBGSU5HRVJQUklOVCAgLiAuIC4gLiAuIC4gLiAuIC4g LiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAgNDINCiAgICAgMTQuOC4gIEVSUk9SLUNPREUgLiAu IC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuICA0Mg0KICAgICAxNC45 LiAgUkVBTE0gIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAu IC4gIDQ0DQogICAgIDE0LjEwLiBOT05DRSAgLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4g LiAuIC4gLiAuIC4gLiAuIC4gLiAgNDQNCiAgICAgMTQuMTEuIFBBU1NXT1JELUFMR09SSVRITVMg IC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuICA0NA0KICAgICAxNC4xMi4gUEFT U1dPUkQtQUxHT1JJVEhNIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gIDQ1 DQogICAgIDE0LjEzLiBVTktOT1dOLUFUVFJJQlVURVMgLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4g LiAuIC4gLiAuIC4gLiAgNDYNCiAgICAgMTQuMTQuIFNPRlRXQVJFIC4gLiAuIC4gLiAuIC4gLiAu IC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuICA0Ng0KICAgICAxNC4xNS4gQUxURVJOQVRF LVNFUlZFUiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gIDQ2DQogICAg IDE0LjE2LiBBTFRFUk5BVEUtRE9NQUlOIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4g LiAuIC4gLiAgNDcNCiAgIDE1LiBPcGVyYXRpb25hbCBDb25zaWRlcmF0aW9ucyAgLiAuIC4gLiAu IC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuICA0Nw0KICAgMTYuIFNlY3VyaXR5IENvbnNpZGVyYXRp b25zIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gIDQ3DQogICAgIDE2LjEu ICBBdHRhY2tzIGFnYWluc3QgdGhlIFByb3RvY29sIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4g LiAgNDcNCiAgICAgICAxNi4xLjEuICBPdXRzaWRlIEF0dGFja3MgIC4gLiAuIC4gLiAuIC4gLiAu IC4gLiAuIC4gLiAuIC4gLiAuICA0Nw0KICAgICAgIDE2LjEuMi4gIEluc2lkZSBBdHRhY2tzIC4g LiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gIDQ4DQogICAgICAgMTYuMS4zLiAg QmlkLURvd24gQXR0YWNrcyAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAgNDkN CiAgICAgMTYuMi4gIEF0dGFja3MgQWZmZWN0aW5nIHRoZSBVc2FnZSAgLiAuIC4gLiAuIC4gLiAu IC4gLiAuIC4gLiAuICA1MQ0KICAgICAgIDE2LjIuMS4gIEF0dGFjayBJOiBEaXN0cmlidXRlZCBE b1MgKEREb1MpIGFnYWluc3QgYSBUYXJnZXQgIC4gIDUxDQogICAgICAgMTYuMi4yLiAgQXR0YWNr IElJOiBTaWxlbmNpbmcgYSBDbGllbnQgIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAgNTINCiAgICAg ICAxNi4yLjMuICBBdHRhY2sgSUlJOiBBc3N1bWluZyB0aGUgSWRlbnRpdHkgb2YgYSBDbGllbnQg IC4gLiAuICA1Mg0KICAgICAgIDE2LjIuNC4gIEF0dGFjayBJVjogRWF2ZXNkcm9wcGluZyAuIC4g LiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gIDUyDQogICAgIDE2LjMuICBIYXNoIEFnaWxpdHkgUGxh biAgLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAgNTINCiAgIDE3LiBJQUIg Q29uc2lkZXJhdGlvbnMgIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAu ICA1Mw0KICAgMTguIElBTkEgQ29uc2lkZXJhdGlvbnMgLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4g LiAuIC4gLiAuIC4gLiAuIC4gIDU0DQogICAgIDE4LjEuICBTVFVOIFNlY3VyaXR5IEZlYXR1cmVz IFJlZ2lzdHJ5ICAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAgNTQNCiAgICAgMTguMi4gIFNUVU4g TWV0aG9kcyBSZWdpc3RyeSAgLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuICA1NA0K ICAgICAxOC4zLiAgU1RVTiBBdHRyaWJ1dGUgUmVnaXN0cnkgIC4gLiAuIC4gLiAuIC4gLiAuIC4g LiAuIC4gLiAuIC4gIDU0DQogICAgICAgMTguMy4xLiAgVXBkYXRlZCBBdHRyaWJ1dGVzIC4gLiAu IC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAgNTQNCiAgICAgICAxOC4zLjIuICBOZXcgQXR0 cmlidXRlcyAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuICA1NQ0KICAgICAx OC40LiAgU1RVTiBFcnJvciBDb2RlIFJlZ2lzdHJ5IC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4g LiAuIC4gIDU1DQoNCg0KDQpQZXRpdC1IdWd1ZW5pbiwgZXQgYWwuIEV4cGlyZXMgU2VwdGVtYmVy IDIyLCAyMDE5ICAgICAgICAgICAgICAgW1BhZ2UgM10NCgwNCkludGVybmV0LURyYWZ0IFNlc3Np b24gVHJhdmVyc2FsIFV0aWxpdGllcyBmb3IgTkFUIChTVFVOKSAgICAgTWFyY2ggMjAxOQ0KDQoN CiAgICAgMTguNS4gIFNUVU4gUGFzc3dvcmQgQWxnb3JpdGhtIFJlZ2lzdHJ5IC4gLiAuIC4gLiAu IC4gLiAuIC4gLiAuICA1NQ0KICAgICAgIDE4LjUuMS4gIFBhc3N3b3JkIEFsZ29yaXRobXMgIC4g LiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gIDU2DQogICAgICAgICAxOC41LjEuMS4gIE1E NSAgLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAgNTYNCiAgICAg ICAgIDE4LjUuMS4yLiAgU0hBLTI1NiAgLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAu IC4gLiAuICA1Ng0KICAgICAxOC42LiAgU1RVTiBVRFAgYW5kIFRDUCBQb3J0IE51bWJlcnMgIC4g LiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gIDU2DQogICAxOS4gQ2hhbmdlcyBTaW5jZSBSRkMgNTM4 OSAgLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAgNTcNCiAgIDIwLiBSZWZl cmVuY2VzICAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAu ICA1Nw0KICAgICAyMC4xLiAgTm9ybWF0aXZlIFJlZmVyZW5jZXMgLiAuIC4gLiAuIC4gLiAuIC4g LiAuIC4gLiAuIC4gLiAuIC4gIDU3DQogICAgIDIwLjIuICBJbmZvcm1hdGl2ZSBSZWZlcmVuY2Vz IC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAgNjANCiAgIEFwcGVuZGl4IEEuICBD IFNuaXBwZXQgdG8gRGV0ZXJtaW5lIFNUVU4gTWVzc2FnZSBUeXBlcyAgLiAuIC4gLiAuICA2Mg0K ICAgQXBwZW5kaXggQi4gIFRlc3QgVmVjdG9ycyAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4g LiAuIC4gLiAuIC4gIDYzDQogICAgIEIuMS4gIFNhbXBsZSBSZXF1ZXN0IHdpdGggTG9uZy1UZXJt IEF1dGhlbnRpY2F0aW9uIHdpdGgNCiAgICAgICAgICAgTUVTU0FHRS1JTlRFR1JJVFktU0hBMjU2 IGFuZCBVU0VSSEFTSCAuIC4gLiAuIC4gLiAuIC4gLiAuICA2Mw0KICAgQXBwZW5kaXggQy4gIFJl bGVhc2Ugbm90ZXMgIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gIDY1DQog ICAgIEMuMS4gIE1vZGlmaWNhdGlvbnMgYmV0d2VlbiBkcmFmdC1pZXRmLXRyYW0tc3R1bmJpcy0y MSBhbmQNCiAgICAgICAgICAgZHJhZnQtaWV0Zi10cmFtLXN0dW5iaXMtMjAgIC4gLiAuIC4gLiAu IC4gLiAuIC4gLiAuIC4gLiAuICA2NQ0KICAgICBDLjIuICBNb2RpZmljYXRpb25zIGJldHdlZW4g ZHJhZnQtaWV0Zi10cmFtLXN0dW5iaXMtMjAgYW5kDQogICAgICAgICAgIGRyYWZ0LWlldGYtdHJh bS1zdHVuYmlzLTE5ICAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAgNjUNCiAgICAgQy4z LiAgTW9kaWZpY2F0aW9ucyBiZXR3ZWVuIGRyYWZ0LWlldGYtdHJhbS1zdHVuYmlzLTE5IGFuZA0K ICAgICAgICAgICBkcmFmdC1pZXRmLXRyYW0tc3R1bmJpcy0xOCAgLiAuIC4gLiAuIC4gLiAuIC4g LiAuIC4gLiAuIC4gIDY1DQogICAgIEMuNC4gIE1vZGlmaWNhdGlvbnMgYmV0d2VlbiBkcmFmdC1p ZXRmLXRyYW0tc3R1bmJpcy0xOCBhbmQNCiAgICAgICAgICAgZHJhZnQtaWV0Zi10cmFtLXN0dW5i aXMtMTcgIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuICA2NQ0KICAgICBDLjUuICBNb2Rp ZmljYXRpb25zIGJldHdlZW4gZHJhZnQtaWV0Zi10cmFtLXN0dW5iaXMtMTcgYW5kDQogICAgICAg ICAgIGRyYWZ0LWlldGYtdHJhbS1zdHVuYmlzLTE2ICAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAu IC4gLiAgNjUNCiAgICAgQy42LiAgTW9kaWZpY2F0aW9ucyBiZXR3ZWVuIGRyYWZ0LWlldGYtdHJh bS1zdHVuYmlzLTE2IGFuZA0KICAgICAgICAgICBkcmFmdC1pZXRmLXRyYW0tc3R1bmJpcy0xNSAg LiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gIDY1DQogICAgIEMuNy4gIE1vZGlmaWNhdGlv bnMgYmV0d2VlbiBkcmFmdC1pZXRmLXRyYW0tc3R1bmJpcy0xNSBhbmQNCiAgICAgICAgICAgZHJh ZnQtaWV0Zi10cmFtLXN0dW5iaXMtMTQgIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuICA2 Ng0KICAgICBDLjguICBNb2RpZmljYXRpb25zIGJldHdlZW4gZHJhZnQtaWV0Zi10cmFtLXN0dW5i aXMtMTQgYW5kDQogICAgICAgICAgIGRyYWZ0LWlldGYtdHJhbS1zdHVuYmlzLTEzICAuIC4gLiAu IC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAgNjYNCiAgICAgQy45LiAgTW9kaWZpY2F0aW9ucyBiZXR3 ZWVuIGRyYWZ0LWlldGYtdHJhbS1zdHVuYmlzLTEzIGFuZA0KICAgICAgICAgICBkcmFmdC1pZXRm LXRyYW0tc3R1bmJpcy0xMiAgLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gIDY3DQogICAg IEMuMTAuIE1vZGlmaWNhdGlvbnMgYmV0d2VlbiBkcmFmdC1pZXRmLXRyYW0tc3R1bmJpcy0xMiBh bmQNCiAgICAgICAgICAgZHJhZnQtaWV0Zi10cmFtLXN0dW5iaXMtMTEgIC4gLiAuIC4gLiAuIC4g LiAuIC4gLiAuIC4gLiAuICA2Nw0KICAgICBDLjExLiBNb2RpZmljYXRpb25zIGJldHdlZW4gZHJh ZnQtaWV0Zi10cmFtLXN0dW5iaXMtMTEgYW5kDQogICAgICAgICAgIGRyYWZ0LWlldGYtdHJhbS1z dHVuYmlzLTEwICAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAgNjcNCiAgICAgQy4xMi4g TW9kaWZpY2F0aW9ucyBiZXR3ZWVuIGRyYWZ0LWlldGYtdHJhbS1zdHVuYmlzLTEwIGFuZA0KICAg ICAgICAgICBkcmFmdC1pZXRmLXRyYW0tc3R1bmJpcy0wOSAgLiAuIC4gLiAuIC4gLiAuIC4gLiAu IC4gLiAuIC4gIDY4DQogICAgIEMuMTMuIE1vZGlmaWNhdGlvbnMgYmV0d2VlbiBkcmFmdC1pZXRm LXRyYW0tc3R1bmJpcy0wOSBhbmQNCiAgICAgICAgICAgZHJhZnQtaWV0Zi10cmFtLXN0dW5iaXMt MDggIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuICA2OA0KICAgICBDLjE0LiBNb2RpZmlj YXRpb25zIGJldHdlZW4gZHJhZnQtaWV0Zi10cmFtLXN0dW5iaXMtMDggYW5kDQogICAgICAgICAg IGRyYWZ0LWlldGYtdHJhbS1zdHVuYmlzLTA3ICAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4g LiAgNjkNCiAgICAgQy4xNS4gTW9kaWZpY2F0aW9ucyBiZXR3ZWVuIGRyYWZ0LWlldGYtdHJhbS1z dHVuYmlzLTA3IGFuZA0KICAgICAgICAgICBkcmFmdC1pZXRmLXRyYW0tc3R1bmJpcy0wNiAgLiAu IC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gIDY5DQogICAgIEMuMTYuIE1vZGlmaWNhdGlvbnMg YmV0d2VlbiBkcmFmdC1pZXRmLXRyYW0tc3R1bmJpcy0wNiBhbmQNCiAgICAgICAgICAgZHJhZnQt aWV0Zi10cmFtLXN0dW5iaXMtMDUgIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuICA2OQ0K ICAgICBDLjE3LiBNb2RpZmljYXRpb25zIGJldHdlZW4gZHJhZnQtaWV0Zi10cmFtLXN0dW5iaXMt MDUgYW5kDQogICAgICAgICAgIGRyYWZ0LWlldGYtdHJhbS1zdHVuYmlzLTA0ICAuIC4gLiAuIC4g LiAuIC4gLiAuIC4gLiAuIC4gLiAgNjkNCg0KDQoNClBldGl0LUh1Z3VlbmluLCBldCBhbC4gRXhw aXJlcyBTZXB0ZW1iZXIgMjIsIDIwMTkgICAgICAgICAgICAgICBbUGFnZSA0XQ0KDA0KSW50ZXJu ZXQtRHJhZnQgU2Vzc2lvbiBUcmF2ZXJzYWwgVXRpbGl0aWVzIGZvciBOQVQgKFNUVU4pICAgICBN YXJjaCAyMDE5DQoNCg0KICAgICBDLjE4LiBNb2RpZmljYXRpb25zIGJldHdlZW4gZHJhZnQtaWV0 Zi10cmFtLXN0dW5iaXMtMDQgYW5kDQogICAgICAgICAgIGRyYWZ0LWlldGYtdHJhbS1zdHVuYmlz LTAzICAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAgNzANCiAgICAgQy4xOS4gTW9kaWZp Y2F0aW9ucyBiZXR3ZWVuIGRyYWZ0LWlldGYtdHJhbS1zdHVuYmlzLTAzIGFuZA0KICAgICAgICAg ICBkcmFmdC1pZXRmLXRyYW0tc3R1bmJpcy0wMiAgLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAu IC4gIDcwDQogICAgIEMuMjAuIE1vZGlmaWNhdGlvbnMgYmV0d2VlbiBkcmFmdC1pZXRmLXRyYW0t c3R1bmJpcy0wMiBhbmQNCiAgICAgICAgICAgZHJhZnQtaWV0Zi10cmFtLXN0dW5iaXMtMDEgIC4g LiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuICA3MA0KICAgICBDLjIxLiBNb2RpZmljYXRpb25z IGJldHdlZW4gZHJhZnQtaWV0Zi10cmFtLXN0dW5iaXMtMDEgYW5kDQogICAgICAgICAgIGRyYWZ0 LWlldGYtdHJhbS1zdHVuYmlzLTAwICAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAgNzEN CiAgICAgQy4yMi4gTW9kaWZpY2F0aW9ucyBiZXR3ZWVuIGRyYWZ0LXNhbGd1ZWlyby10cmFtLXN0 dW5iaXMtMDIgYW5kDQogICAgICAgICAgIGRyYWZ0LWlldGYtdHJhbS1zdHVuYmlzLTAwICAuIC4g LiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAgNzINCiAgICAgQy4yMy4gTW9kaWZpY2F0aW9ucyBi ZXR3ZWVuIGRyYWZ0LXNhbGd1ZWlyby10cmFtLXN0dW5iaXMtMDIgYW5kDQogICAgICAgICAgIGRy YWZ0LXNhbGd1ZWlyby10cmFtLXN0dW5iaXMtMDEgLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAg NzINCiAgICAgQy4yNC4gTW9kaWZpY2F0aW9ucyBiZXR3ZWVuIGRyYWZ0LXNhbGd1ZWlyby10cmFt LXN0dW5iaXMtMDEgYW5kDQogICAgICAgICAgIGRyYWZ0LXNhbGd1ZWlyby10cmFtLXN0dW5iaXMt MDAgLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAgNzINCiAgIEFja25vd2xlZGdlbWVudHMgIC4g LiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuICA3Mg0KICAgQ29u dHJpYnV0b3JzICAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4g LiAuIC4gIDczDQogICBBdXRob3JzJyBBZGRyZXNzZXMgIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAu IC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAgNzMNCg0KMS4gIEludHJvZHVjdGlvbg0KDQogICBUaGUg cHJvdG9jb2wgZGVmaW5lZCBpbiB0aGlzIHNwZWNpZmljYXRpb24sIFNlc3Npb24gVHJhdmVyc2Fs DQogICBVdGlsaXRpZXMgZm9yIE5BVCwgcHJvdmlkZXMgYSB0b29sIGZvciBkZWFsaW5nIHdpdGgg TkFUcy4gIEl0DQogICBwcm92aWRlcyBhIG1lYW5zIGZvciBhbiBlbmRwb2ludCB0byBkZXRlcm1p bmUgdGhlIElQIGFkZHJlc3MgYW5kIHBvcnQNCiAgIGFsbG9jYXRlZCBieSBhIE5BVCB0aGF0IGNv cnJlc3BvbmRzIHRvIGl0cyBwcml2YXRlIElQIGFkZHJlc3MgYW5kDQogICBwb3J0LiAgSXQgYWxz byBwcm92aWRlcyBhIHdheSBmb3IgYW4gZW5kcG9pbnQgdG8ga2VlcCBhIE5BVCBiaW5kaW5nDQog ICBhbGl2ZS4gIFdpdGggc29tZSBleHRlbnNpb25zLCB0aGUgcHJvdG9jb2wgY2FuIGJlIHVzZWQg dG8gZG8NCiAgIGNvbm5lY3Rpdml0eSBjaGVja3MgYmV0d2VlbiB0d28gZW5kcG9pbnRzIFtSRkM4 NDQ1XSwgb3IgdG8gcmVsYXkNCiAgIHBhY2tldHMgYmV0d2VlbiB0d28gZW5kcG9pbnRzIFtSRkM1 NzY2XS4NCg0KICAgSW4ga2VlcGluZyB3aXRoIGl0cyB0b29sIG5hdHVyZSwgdGhpcyBzcGVjaWZp Y2F0aW9uIGRlZmluZXMgYW4NCiAgIGV4dGVuc2libGUgcGFja2V0IGZvcm1hdCwgZGVmaW5lcyBv cGVyYXRpb24gb3ZlciBzZXZlcmFsIHRyYW5zcG9ydA0KICAgcHJvdG9jb2xzLCBhbmQgcHJvdmlk ZXMgZm9yIHR3byBmb3JtcyBvZiBhdXRoZW50aWNhdGlvbi4NCg0KICAgU1RVTiBpcyBpbnRlbmRl ZCB0byBiZSB1c2VkIGluIHRoZSBjb250ZXh0IG9mIG9uZSBvciBtb3JlIE5BVA0KICAgdHJhdmVy c2FsIHNvbHV0aW9ucy4gIFRoZXNlIHNvbHV0aW9ucyBhcmUga25vd24gYXMgU1RVTiB1c2FnZXMu ICBFYWNoDQogICB1c2FnZSBkZXNjcmliZXMgaG93IFNUVU4gaXMgdXRpbGl6ZWQgdG8gYWNoaWV2 ZSB0aGUgTkFUIHRyYXZlcnNhbA0KICAgc29sdXRpb24uICBUeXBpY2FsbHksIGEgdXNhZ2UgaW5k aWNhdGVzIHdoZW4gU1RVTiBtZXNzYWdlcyBnZXQgc2VudCwNCiAgIHdoaWNoIG9wdGlvbmFsIGF0 dHJpYnV0ZXMgdG8gaW5jbHVkZSwgd2hhdCBzZXJ2ZXIgaXMgdXNlZCwgYW5kIHdoYXQNCiAgIGF1 dGhlbnRpY2F0aW9uIG1lY2hhbmlzbSBpcyB0byBiZSB1c2VkLiAgSW50ZXJhY3RpdmUgQ29ubmVj dGl2aXR5DQogICBFc3RhYmxpc2htZW50IChJQ0UpIFtSRkM4NDQ1XSBpcyBvbmUgdXNhZ2Ugb2Yg U1RVTi4gIFNJUCBPdXRib3VuZA0KICAgW1JGQzU2MjZdIGlzIGFub3RoZXIgdXNhZ2Ugb2YgU1RV Ti4gIEluIHNvbWUgY2FzZXMsIGEgdXNhZ2Ugd2lsbA0KICAgcmVxdWlyZSBleHRlbnNpb25zIHRv IFNUVU4uICBBIFNUVU4gZXh0ZW5zaW9uIGNhbiBiZSBpbiB0aGUgZm9ybSBvZg0KICAgbmV3IG1l dGhvZHMsIGF0dHJpYnV0ZXMsIG9yIGVycm9yIHJlc3BvbnNlIGNvZGVzLiAgTW9yZSBpbmZvcm1h dGlvbg0KICAgb24gU1RVTiB1c2FnZXMgY2FuIGJlIGZvdW5kIGluIFNlY3Rpb24gMTMuDQoNCg0K DQoNCg0KDQoNClBldGl0LUh1Z3VlbmluLCBldCBhbC4gRXhwaXJlcyBTZXB0ZW1iZXIgMjIsIDIw MTkgICAgICAgICAgICAgICBbUGFnZSA1XQ0KDA0KSW50ZXJuZXQtRHJhZnQgU2Vzc2lvbiBUcmF2 ZXJzYWwgVXRpbGl0aWVzIGZvciBOQVQgKFNUVU4pICAgICBNYXJjaCAyMDE5DQoNCg0KMi4gIE92 ZXJ2aWV3IG9mIE9wZXJhdGlvbg0KDQogICBUaGlzIHNlY3Rpb24gaXMgZGVzY3JpcHRpdmUgb25s eS4NCg0KICAgICAgICAgICAgICAgICAgICAgICAgICAgIC8tLS0tLVwNCiAgICAgICAgICAgICAg ICAgICAgICAgICAgLy8gU1RVTiAgXFwNCiAgICAgICAgICAgICAgICAgICAgICAgICB8ICAgU2Vy dmVyICB8DQogICAgICAgICAgICAgICAgICAgICAgICAgIFxcICAgICAgIC8vDQogICAgICAgICAg ICAgICAgICAgICAgICAgICAgXC0tLS0tLw0KDQoNCg0KDQogICAgICAgICAgICAgICAgICAgICAg ICstLS0tLS0tLS0tLS0tLSsgICAgICAgICAgICAgUHVibGljIEludGVybmV0DQogICAgICAgLi4u Li4uLi4uLi4uLi4uLnwgICAgIE5BVCAyICAgIHwuLi4uLi4uLi4uLi4uLi4uLi4uLi4uLg0KICAg ICAgICAgICAgICAgICAgICAgICArLS0tLS0tLS0tLS0tLS0rDQoNCg0KDQogICAgICAgICAgICAg ICAgICAgICAgICstLS0tLS0tLS0tLS0tLSsgICAgICAgICAgICAgUHJpdmF0ZSBORVQgMg0KICAg ICAgIC4uLi4uLi4uLi4uLi4uLi58ICAgICBOQVQgMSAgICB8Li4uLi4uLi4uLi4uLi4uLi4uLi4u Li4NCiAgICAgICAgICAgICAgICAgICAgICAgKy0tLS0tLS0tLS0tLS0tKw0KDQoNCg0KDQogICAg ICAgICAgICAgICAgICAgICAgICAgICAgLy0tLS0tXA0KICAgICAgICAgICAgICAgICAgICAgICAg ICAvLyBTVFVOICBcXA0KICAgICAgICAgICAgICAgICAgICAgICAgIHwgICBDbGllbnQgIHwNCiAg ICAgICAgICAgICAgICAgICAgICAgICAgXFwgICAgICAgLy8gICAgICAgICAgICAgICBQcml2YXRl IE5FVCAxDQogICAgICAgICAgICAgICAgICAgICAgICAgICAgXC0tLS0tLw0KDQogICAgICAgICAg ICAgICAgIEZpZ3VyZSAxOiBPbmUgUG9zc2libGUgU1RVTiBDb25maWd1cmF0aW9uDQoNCiAgIE9u ZSBwb3NzaWJsZSBTVFVOIGNvbmZpZ3VyYXRpb24gaXMgc2hvd24gaW4gRmlndXJlIDEuICBJbiB0 aGlzDQogICBjb25maWd1cmF0aW9uLCB0aGVyZSBhcmUgdHdvIGVudGl0aWVzIChjYWxsZWQgU1RV TiBhZ2VudHMpIHRoYXQNCiAgIGltcGxlbWVudCB0aGUgU1RVTiBwcm90b2NvbC4gIFRoZSBsb3dl ciBhZ2VudCBpbiB0aGUgZmlndXJlIGlzIHRoZQ0KICAgY2xpZW50LCBhbmQgaXMgY29ubmVjdGVk IHRvIHByaXZhdGUgbmV0d29yayAxLiAgVGhpcyBuZXR3b3JrIGNvbm5lY3RzDQogICB0byBwcml2 YXRlIG5ldHdvcmsgMiB0aHJvdWdoIE5BVCAxLiAgUHJpdmF0ZSBuZXR3b3JrIDIgY29ubmVjdHMg dG8NCiAgIHRoZSBwdWJsaWMgSW50ZXJuZXQgdGhyb3VnaCBOQVQgMi4gIFRoZSB1cHBlciBhZ2Vu dCBpbiB0aGUgZmlndXJlIGlzDQogICB0aGUgc2VydmVyLCBhbmQgcmVzaWRlcyBvbiB0aGUgcHVi bGljIEludGVybmV0Lg0KDQogICBTVFVOIGlzIGEgY2xpZW50LXNlcnZlciBwcm90b2NvbC4gIEl0 IHN1cHBvcnRzIHR3byB0eXBlcyBvZg0KICAgdHJhbnNhY3Rpb25zLiAgT25lIGlzIGEgcmVxdWVz dC9yZXNwb25zZSB0cmFuc2FjdGlvbiBpbiB3aGljaCBhDQogICBjbGllbnQgc2VuZHMgYSByZXF1 ZXN0IHRvIGEgc2VydmVyLCBhbmQgdGhlIHNlcnZlciByZXR1cm5zIGENCiAgIHJlc3BvbnNlLiAg VGhlIHNlY29uZCBpcyBhbiBpbmRpY2F0aW9uIHRyYW5zYWN0aW9uIGluIHdoaWNoIGVpdGhlcg0K ICAgYWdlbnQgLS0gY2xpZW50IG9yIHNlcnZlciAtLSBzZW5kcyBhbiBpbmRpY2F0aW9uIHRoYXQg Z2VuZXJhdGVzIG5vDQogICByZXNwb25zZS4gIEJvdGggdHlwZXMgb2YgdHJhbnNhY3Rpb25zIGlu Y2x1ZGUgYSB0cmFuc2FjdGlvbiBJRCwgd2hpY2gNCg0KDQoNClBldGl0LUh1Z3VlbmluLCBldCBh bC4gRXhwaXJlcyBTZXB0ZW1iZXIgMjIsIDIwMTkgICAgICAgICAgICAgICBbUGFnZSA2XQ0KDA0K SW50ZXJuZXQtRHJhZnQgU2Vzc2lvbiBUcmF2ZXJzYWwgVXRpbGl0aWVzIGZvciBOQVQgKFNUVU4p ICAgICBNYXJjaCAyMDE5DQoNCg0KICAgaXMgYSByYW5kb21seSBzZWxlY3RlZCA5Ni1iaXQgbnVt YmVyLiAgRm9yIHJlcXVlc3QvcmVzcG9uc2UNCiAgIHRyYW5zYWN0aW9ucywgdGhpcyB0cmFuc2Fj dGlvbiBJRCBhbGxvd3MgdGhlIGNsaWVudCB0byBhc3NvY2lhdGUgdGhlDQogICByZXNwb25zZSB3 aXRoIHRoZSByZXF1ZXN0IHRoYXQgZ2VuZXJhdGVkIGl0OyBmb3IgaW5kaWNhdGlvbnMsIHRoZQ0K ICAgdHJhbnNhY3Rpb24gSUQgc2VydmVzIGFzIGEgZGVidWdnaW5nIGFpZC4NCg0KICAgQWxsIFNU VU4gbWVzc2FnZXMgc3RhcnQgd2l0aCBhIGZpeGVkIGhlYWRlciB0aGF0IGluY2x1ZGVzIGEgbWV0 aG9kLCBhDQogICBjbGFzcywgYW5kIHRoZSB0cmFuc2FjdGlvbiBJRC4gIFRoZSBtZXRob2QgaW5k aWNhdGVzIHdoaWNoIG9mIHRoZQ0KICAgdmFyaW91cyByZXF1ZXN0cyBvciBpbmRpY2F0aW9ucyB0 aGlzIGlzOyB0aGlzIHNwZWNpZmljYXRpb24gZGVmaW5lcw0KICAganVzdCBvbmUgbWV0aG9kLCBC aW5kaW5nLCBidXQgb3RoZXIgbWV0aG9kcyBhcmUgZXhwZWN0ZWQgdG8gYmUNCiAgIGRlZmluZWQg aW4gb3RoZXIgZG9jdW1lbnRzLiAgVGhlIGNsYXNzIGluZGljYXRlcyB3aGV0aGVyIHRoaXMgaXMg YQ0KICAgcmVxdWVzdCwgYSBzdWNjZXNzIHJlc3BvbnNlLCBhbiBlcnJvciByZXNwb25zZSwgb3Ig YW4gaW5kaWNhdGlvbi4NCiAgIEZvbGxvd2luZyB0aGUgZml4ZWQgaGVhZGVyIGNvbWVzIHplcm8g b3IgbW9yZSBhdHRyaWJ1dGVzLCB3aGljaCBhcmUNCiAgIFR5cGUtTGVuZ3RoLVZhbHVlIGV4dGVu c2lvbnMgdGhhdCBjb252ZXkgYWRkaXRpb25hbCBpbmZvcm1hdGlvbiBmb3INCiAgIHRoZSBzcGVj aWZpYyBtZXNzYWdlLg0KDQogICBUaGlzIGRvY3VtZW50IGRlZmluZXMgYSBzaW5nbGUgbWV0aG9k IGNhbGxlZCBCaW5kaW5nLiAgVGhlIEJpbmRpbmcNCiAgIG1ldGhvZCBjYW4gYmUgdXNlZCBlaXRo ZXIgaW4gcmVxdWVzdC9yZXNwb25zZSB0cmFuc2FjdGlvbnMgb3IgaW4NCiAgIGluZGljYXRpb24g dHJhbnNhY3Rpb25zLiAgV2hlbiB1c2VkIGluIHJlcXVlc3QvcmVzcG9uc2UgdHJhbnNhY3Rpb25z LA0KICAgdGhlIEJpbmRpbmcgbWV0aG9kIGNhbiBiZSB1c2VkIHRvIGRldGVybWluZSB0aGUgcGFy dGljdWxhciAiYmluZGluZyINCiAgIGEgTkFUIGhhcyBhbGxvY2F0ZWQgdG8gYSBTVFVOIGNsaWVu dC4gIFdoZW4gdXNlZCBpbiBlaXRoZXIgcmVxdWVzdC8NCiAgIHJlc3BvbnNlIG9yIGluIGluZGlj YXRpb24gdHJhbnNhY3Rpb25zLCB0aGUgQmluZGluZyBtZXRob2QgY2FuIGFsc28NCiAgIGJlIHVz ZWQgdG8ga2VlcCB0aGVzZSAiYmluZGluZ3MiIGFsaXZlLg0KDQogICBJbiB0aGUgQmluZGluZyBy ZXF1ZXN0L3Jlc3BvbnNlIHRyYW5zYWN0aW9uLCBhIEJpbmRpbmcgcmVxdWVzdCBpcw0KICAgc2Vu dCBmcm9tIGEgU1RVTiBjbGllbnQgdG8gYSBTVFVOIHNlcnZlci4gIFdoZW4gdGhlIEJpbmRpbmcg cmVxdWVzdA0KICAgYXJyaXZlcyBhdCB0aGUgU1RVTiBzZXJ2ZXIsIGl0IG1heSBoYXZlIHBhc3Nl ZCB0aHJvdWdoIG9uZSBvciBtb3JlDQogICBOQVRzIGJldHdlZW4gdGhlIFNUVU4gY2xpZW50IGFu ZCB0aGUgU1RVTiBzZXJ2ZXIgKGluIEZpZ3VyZSAxLCB0aGVyZQ0KICAgd2VyZSB0d28gc3VjaCBO QVRzKS4gIEFzIHRoZSBCaW5kaW5nIHJlcXVlc3QgbWVzc2FnZSBwYXNzZXMgdGhyb3VnaCBhDQog ICBOQVQsIHRoZSBOQVQgd2lsbCBtb2RpZnkgdGhlIHNvdXJjZSB0cmFuc3BvcnQgYWRkcmVzcyAo dGhhdCBpcywgdGhlDQogICBzb3VyY2UgSVAgYWRkcmVzcyBhbmQgdGhlIHNvdXJjZSBwb3J0KSBv ZiB0aGUgcGFja2V0LiAgQXMgYSByZXN1bHQsDQogICB0aGUgc291cmNlIHRyYW5zcG9ydCBhZGRy ZXNzIG9mIHRoZSByZXF1ZXN0IHJlY2VpdmVkIGJ5IHRoZSBzZXJ2ZXINCiAgIHdpbGwgYmUgdGhl IHB1YmxpYyBJUCBhZGRyZXNzIGFuZCBwb3J0IGNyZWF0ZWQgYnkgdGhlIE5BVCBjbG9zZXN0IHRv DQogICB0aGUgc2VydmVyLiAgVGhpcyBpcyBjYWxsZWQgYSByZWZsZXhpdmUgdHJhbnNwb3J0IGFk ZHJlc3MuICBUaGUgU1RVTg0KICAgc2VydmVyIGNvcGllcyB0aGF0IHNvdXJjZSB0cmFuc3BvcnQg YWRkcmVzcyBpbnRvIGFuIFhPUi1NQVBQRUQtDQogICBBRERSRVNTIGF0dHJpYnV0ZSBpbiB0aGUg U1RVTiBCaW5kaW5nIHJlc3BvbnNlIGFuZCBzZW5kcyB0aGUgQmluZGluZw0KICAgcmVzcG9uc2Ug YmFjayB0byB0aGUgU1RVTiBjbGllbnQuICBBcyB0aGlzIHBhY2tldCBwYXNzZXMgYmFjayB0aHJv dWdoDQogICBhIE5BVCwgdGhlIE5BVCB3aWxsIG1vZGlmeSB0aGUgZGVzdGluYXRpb24gdHJhbnNw b3J0IGFkZHJlc3MgaW4gdGhlDQogICBJUCBoZWFkZXIsIGJ1dCB0aGUgdHJhbnNwb3J0IGFkZHJl c3MgaW4gdGhlIFhPUi1NQVBQRUQtQUREUkVTUw0KICAgYXR0cmlidXRlIHdpdGhpbiB0aGUgYm9k eSBvZiB0aGUgU1RVTiByZXNwb25zZSB3aWxsIHJlbWFpbiB1bnRvdWNoZWQuDQogICBJbiB0aGlz IHdheSwgdGhlIGNsaWVudCBjYW4gbGVhcm4gaXRzIHJlZmxleGl2ZSB0cmFuc3BvcnQgYWRkcmVz cw0KICAgYWxsb2NhdGVkIGJ5IHRoZSBvdXRlcm1vc3QgTkFUIHdpdGggcmVzcGVjdCB0byB0aGUg U1RVTiBzZXJ2ZXIuDQoNCiAgIEluIHNvbWUgdXNhZ2VzLCBTVFVOIG11c3QgYmUgbXVsdGlwbGV4 ZWQgd2l0aCBvdGhlciBwcm90b2NvbHMgKGUuZy4sDQogICBbUkZDODQ0NV0sIFtSRkM1NjI2XSku ICBJbiB0aGVzZSB1c2FnZXMsIHRoZXJlIG11c3QgYmUgYSB3YXkgdG8NCiAgIGluc3BlY3QgYSBw YWNrZXQgYW5kIGRldGVybWluZSBpZiBpdCBpcyBhIFNUVU4gcGFja2V0IG9yIG5vdC4gIFNUVU4N CiAgIHByb3ZpZGVzIHRocmVlIGZpZWxkcyBpbiB0aGUgU1RVTiBoZWFkZXIgd2l0aCBmaXhlZCB2 YWx1ZXMgdGhhdCBjYW4NCiAgIGJlIHVzZWQgZm9yIHRoaXMgcHVycG9zZS4gIElmIHRoaXMgaXMg bm90IHN1ZmZpY2llbnQsIHRoZW4gU1RVTg0KDQoNCg0KDQpQZXRpdC1IdWd1ZW5pbiwgZXQgYWwu IEV4cGlyZXMgU2VwdGVtYmVyIDIyLCAyMDE5ICAgICAgICAgICAgICAgW1BhZ2UgN10NCgwNCklu dGVybmV0LURyYWZ0IFNlc3Npb24gVHJhdmVyc2FsIFV0aWxpdGllcyBmb3IgTkFUIChTVFVOKSAg ICAgTWFyY2ggMjAxOQ0KDQoNCiAgIHBhY2tldHMgY2FuIGFsc28gY29udGFpbiBhIEZJTkdFUlBS SU5UIHZhbHVlLCB3aGljaCBjYW4gZnVydGhlciBiZQ0KICAgdXNlZCB0byBkaXN0aW5ndWlzaCB0 aGUgcGFja2V0cy4NCg0KICAgU1RVTiBkZWZpbmVzIGEgc2V0IG9mIG9wdGlvbmFsIHByb2NlZHVy ZXMgdGhhdCBhIHVzYWdlIGNhbiBkZWNpZGUgdG8NCiAgIHVzZSwgY2FsbGVkIG1lY2hhbmlzbXMu ICBUaGVzZSBtZWNoYW5pc21zIGluY2x1ZGUgRE5TIGRpc2NvdmVyeSwgYQ0KICAgcmVkaXJlY3Rp b24gdGVjaG5pcXVlIHRvIGFuIGFsdGVybmF0ZSBzZXJ2ZXIsIGEgZmluZ2VycHJpbnQgYXR0cmli dXRlDQogICBmb3IgZGVtdWx0aXBsZXhpbmcsIGFuZCB0d28gYXV0aGVudGljYXRpb24gYW5kIG1l c3NhZ2UtaW50ZWdyaXR5DQogICBleGNoYW5nZXMuICBUaGUgYXV0aGVudGljYXRpb24gbWVjaGFu aXNtcyByZXZvbHZlIGFyb3VuZCB0aGUgdXNlIG9mIGENCiAgIHVzZXJuYW1lLCBwYXNzd29yZCwg YW5kIG1lc3NhZ2UtaW50ZWdyaXR5IHZhbHVlLiAgVHdvIGF1dGhlbnRpY2F0aW9uDQogICBtZWNo YW5pc21zLCB0aGUgbG9uZy10ZXJtIGNyZWRlbnRpYWwgbWVjaGFuaXNtIGFuZCB0aGUgc2hvcnQt dGVybQ0KICAgY3JlZGVudGlhbCBtZWNoYW5pc20sIGFyZSBkZWZpbmVkIGluIHRoaXMgc3BlY2lm aWNhdGlvbi4gIEVhY2ggdXNhZ2UNCiAgIHNwZWNpZmllcyB0aGUgbWVjaGFuaXNtcyBhbGxvd2Vk IHdpdGggdGhhdCB1c2FnZS4NCg0KICAgSW4gdGhlIGxvbmctdGVybSBjcmVkZW50aWFsIG1lY2hh bmlzbSwgdGhlIGNsaWVudCBhbmQgc2VydmVyIHNoYXJlIGENCiAgIHByZS1wcm92aXNpb25lZCB1 c2VybmFtZSBhbmQgcGFzc3dvcmQgYW5kIHBlcmZvcm0gYSBkaWdlc3QgY2hhbGxlbmdlLw0KICAg cmVzcG9uc2UgZXhjaGFuZ2UgaW5zcGlyZWQgYnkgKGJ1dCBkaWZmZXJpbmcgaW4gZGV0YWlscykg dG8gdGhlIG9uZQ0KICAgZGVmaW5lZCBmb3IgSFRUUCBbUkZDNzYxNl0uICBJbiB0aGUgc2hvcnQt dGVybSBjcmVkZW50aWFsIG1lY2hhbmlzbSwNCiAgIHRoZSBjbGllbnQgYW5kIHRoZSBzZXJ2ZXIg ZXhjaGFuZ2UgYSB1c2VybmFtZSBhbmQgcGFzc3dvcmQgdGhyb3VnaA0KICAgc29tZSBvdXQtb2Yt YmFuZCBtZXRob2QgcHJpb3IgdG8gdGhlIFNUVU4gZXhjaGFuZ2UuICBGb3IgZXhhbXBsZSwgaW4N CiAgIHRoZSBJQ0UgdXNhZ2UgW1JGQzg0NDVdIHRoZSB0d28gZW5kcG9pbnRzIHVzZSBvdXQtb2Yt YmFuZCBzaWduYWxpbmcNCiAgIHRvIGV4Y2hhbmdlIGEgdXNlcm5hbWUgYW5kIHBhc3N3b3JkLiAg VGhlc2UgYXJlIHVzZWQgdG8gaW50ZWdyaXR5DQogICBwcm90ZWN0IGFuZCBhdXRoZW50aWNhdGUg dGhlIHJlcXVlc3QgYW5kIHJlc3BvbnNlLiAgVGhlcmUgaXMgbm8NCiAgIGNoYWxsZW5nZSBvciBu b25jZSB1c2VkLg0KDQozLiAgVGVybWlub2xvZ3kNCg0KICAgVGhlIGtleSB3b3JkcyAiTVVTVCIs ICJNVVNUIE5PVCIsICJSRVFVSVJFRCIsICJTSEFMTCIsICJTSEFMTCBOT1QiLA0KICAgIlNIT1VM RCIsICJTSE9VTEQgTk9UIiwgIlJFQ09NTUVOREVEIiwgIk5PVCBSRUNPTU1FTkRFRCIsICJNQVki LCBhbmQNCiAgICJPUFRJT05BTCIgaW4gdGhpcyBkb2N1bWVudCBhcmUgdG8gYmUgaW50ZXJwcmV0 ZWQgYXMgZGVzY3JpYmVkIGluIEJDUA0KICAgMTQgW1JGQzIxMTldW1JGQzgxNzRdIHdoZW4sIGFu ZCBvbmx5IHdoZW4sIHRoZXkgYXBwZWFyIGluIGFsbA0KICAgY2FwaXRhbHMsIGFzIHNob3duIGhl cmUuDQoNCjQuICBEZWZpbml0aW9ucw0KDQogICBTVFVOIEFnZW50OiAgQSBTVFVOIGFnZW50IGlz IGFuIGVudGl0eSB0aGF0IGltcGxlbWVudHMgdGhlIFNUVU4NCiAgICAgIHByb3RvY29sLiAgVGhl IGVudGl0eSBjYW4gYmUgZWl0aGVyIGEgU1RVTiBjbGllbnQgb3IgYSBTVFVODQogICAgICBzZXJ2 ZXIuDQoNCiAgIFNUVU4gQ2xpZW50OiAgQSBTVFVOIGNsaWVudCBpcyBhbiBlbnRpdHkgdGhhdCBz ZW5kcyBTVFVOIHJlcXVlc3RzIGFuZA0KICAgICAgcmVjZWl2ZXMgU1RVTiByZXNwb25zZXMgYW5k IFNUVU4gaW5kaWNhdGlvbnMuICBBIFNUVU4gY2xpZW50IGNhbg0KICAgICAgYWxzbyBzZW5kIGlu ZGljYXRpb25zLiAgSW4gdGhpcyBzcGVjaWZpY2F0aW9uLCB0aGUgdGVybXMgU1RVTg0KICAgICAg Y2xpZW50IGFuZCBjbGllbnQgYXJlIHN5bm9ueW1vdXMuDQoNCiAgIFNUVU4gU2VydmVyOiAgQSBT VFVOIHNlcnZlciBpcyBhbiBlbnRpdHkgdGhhdCByZWNlaXZlcyBTVFVOIHJlcXVlc3RzDQogICAg ICBhbmQgU1RVTiBpbmRpY2F0aW9ucywgYW5kIHNlbmRzIFNUVU4gcmVzcG9uc2VzLiAgQSBTVFVO IHNlcnZlciBjYW4NCiAgICAgIGFsc28gc2VuZCBpbmRpY2F0aW9ucy4gIEluIHRoaXMgc3BlY2lm aWNhdGlvbiwgdGhlIHRlcm1zIFNUVU4NCiAgICAgIHNlcnZlciBhbmQgc2VydmVyIGFyZSBzeW5v bnltb3VzLg0KDQoNCg0KDQpQZXRpdC1IdWd1ZW5pbiwgZXQgYWwuIEV4cGlyZXMgU2VwdGVtYmVy IDIyLCAyMDE5ICAgICAgICAgICAgICAgW1BhZ2UgOF0NCgwNCkludGVybmV0LURyYWZ0IFNlc3Np b24gVHJhdmVyc2FsIFV0aWxpdGllcyBmb3IgTkFUIChTVFVOKSAgICAgTWFyY2ggMjAxOQ0KDQoN CiAgIFRyYW5zcG9ydCBBZGRyZXNzOiAgVGhlIGNvbWJpbmF0aW9uIG9mIGFuIElQIGFkZHJlc3Mg YW5kIHBvcnQgbnVtYmVyDQogICAgICAoc3VjaCBhcyBhIFVEUCBvciBUQ1AgcG9ydCBudW1iZXIp Lg0KDQogICBSZWZsZXhpdmUgVHJhbnNwb3J0IEFkZHJlc3M6ICBBIHRyYW5zcG9ydCBhZGRyZXNz IGxlYXJuZWQgYnkgYSBjbGllbnQNCiAgICAgIHRoYXQgaWRlbnRpZmllcyB0aGF0IGNsaWVudCBh cyBzZWVuIGJ5IGFub3RoZXIgaG9zdCBvbiBhbiBJUA0KICAgICAgbmV0d29yaywgdHlwaWNhbGx5 IGEgU1RVTiBzZXJ2ZXIuICBXaGVuIHRoZXJlIGlzIGFuIGludGVydmVuaW5nDQogICAgICBOQVQg YmV0d2VlbiB0aGUgY2xpZW50IGFuZCB0aGUgb3RoZXIgaG9zdCwgdGhlIHJlZmxleGl2ZSB0cmFu c3BvcnQNCiAgICAgIGFkZHJlc3MgcmVwcmVzZW50cyB0aGUgbWFwcGVkIGFkZHJlc3MgYWxsb2Nh dGVkIHRvIHRoZSBjbGllbnQgb24NCiAgICAgIHRoZSBwdWJsaWMgc2lkZSBvZiB0aGUgTkFULiAg UmVmbGV4aXZlIHRyYW5zcG9ydCBhZGRyZXNzZXMgYXJlDQogICAgICBsZWFybmVkIGZyb20gdGhl IG1hcHBlZCBhZGRyZXNzIGF0dHJpYnV0ZSAoTUFQUEVELUFERFJFU1Mgb3IgWE9SLQ0KICAgICAg TUFQUEVELUFERFJFU1MpIGluIFNUVU4gcmVzcG9uc2VzLg0KDQogICBNYXBwZWQgQWRkcmVzczog IFNhbWUgbWVhbmluZyBhcyByZWZsZXhpdmUgYWRkcmVzcy4gIFRoaXMgdGVybSBpcw0KICAgICAg cmV0YWluZWQgb25seSBmb3IgaGlzdG9yaWMgcmVhc29ucyBhbmQgZHVlIHRvIHRoZSBuYW1pbmcg b2YgdGhlDQogICAgICBNQVBQRUQtQUREUkVTUyBhbmQgWE9SLU1BUFBFRC1BRERSRVNTIGF0dHJp YnV0ZXMuDQoNCiAgIExvbmctVGVybSBDcmVkZW50aWFsOiAgQSB1c2VybmFtZSBhbmQgYXNzb2Np YXRlZCBwYXNzd29yZCB0aGF0DQogICAgICByZXByZXNlbnQgYSBzaGFyZWQgc2VjcmV0IGJldHdl ZW4gY2xpZW50IGFuZCBzZXJ2ZXIuICBMb25nLXRlcm0NCiAgICAgIGNyZWRlbnRpYWxzIGFyZSBn ZW5lcmFsbHkgZ3JhbnRlZCB0byB0aGUgY2xpZW50IHdoZW4gYSBzdWJzY3JpYmVyDQogICAgICBl bnJvbGxzIGluIGEgc2VydmljZSBhbmQgcGVyc2lzdCB1bnRpbCB0aGUgc3Vic2NyaWJlciBsZWF2 ZXMgdGhlDQogICAgICBzZXJ2aWNlIG9yIGV4cGxpY2l0bHkgY2hhbmdlcyB0aGUgY3JlZGVudGlh bC4NCg0KICAgTG9uZy1UZXJtIFBhc3N3b3JkOiAgVGhlIHBhc3N3b3JkIGZyb20gYSBsb25nLXRl cm0gY3JlZGVudGlhbC4NCg0KICAgU2hvcnQtVGVybSBDcmVkZW50aWFsOiAgQSB0ZW1wb3Jhcnkg dXNlcm5hbWUgYW5kIGFzc29jaWF0ZWQgcGFzc3dvcmQNCiAgICAgIHRoYXQgcmVwcmVzZW50IGEg c2hhcmVkIHNlY3JldCBiZXR3ZWVuIGNsaWVudCBhbmQgc2VydmVyLiAgU2hvcnQtDQogICAgICB0 ZXJtIGNyZWRlbnRpYWxzIGFyZSBvYnRhaW5lZCB0aHJvdWdoIHNvbWUga2luZCBvZiBwcm90b2Nv bA0KICAgICAgbWVjaGFuaXNtIGJldHdlZW4gdGhlIGNsaWVudCBhbmQgc2VydmVyLCBwcmVjZWRp bmcgdGhlIFNUVU4NCiAgICAgIGV4Y2hhbmdlLiAgQSBzaG9ydC10ZXJtIGNyZWRlbnRpYWwgaGFz IGFuIGV4cGxpY2l0IHRlbXBvcmFsIHNjb3BlLA0KICAgICAgd2hpY2ggbWF5IGJlIGJhc2VkIG9u IGEgc3BlY2lmaWMgYW1vdW50IG9mIHRpbWUgKHN1Y2ggYXMgNQ0KICAgICAgbWludXRlcykgb3Ig b24gYW4gZXZlbnQgKHN1Y2ggYXMgdGVybWluYXRpb24gb2YgYSBTZXNzaW9uDQogICAgICBJbml0 aWF0aW9uIFByb3RvY29sIChTSVAgW1JGQzMyNjFdKSBkaWFsb2cpLiAgVGhlIHNwZWNpZmljIHNj b3BlDQogICAgICBvZiBhIHNob3J0LXRlcm0gY3JlZGVudGlhbCBpcyBkZWZpbmVkIGJ5IHRoZSBh cHBsaWNhdGlvbiB1c2FnZS4NCg0KICAgU2hvcnQtVGVybSBQYXNzd29yZDogIFRoZSBwYXNzd29y ZCBjb21wb25lbnQgb2YgYSBzaG9ydC10ZXJtDQogICAgICBjcmVkZW50aWFsLg0KDQogICBTVFVO IEluZGljYXRpb246ICBBIFNUVU4gbWVzc2FnZSB0aGF0IGRvZXMgbm90IHJlY2VpdmUgYSByZXNw b25zZS4NCg0KICAgQXR0cmlidXRlOiAgVGhlIFNUVU4gdGVybSBmb3IgYSBUeXBlLUxlbmd0aC1W YWx1ZSAoVExWKSBvYmplY3QgdGhhdA0KICAgICAgY2FuIGJlIGFkZGVkIHRvIGEgU1RVTiBtZXNz YWdlLiAgQXR0cmlidXRlcyBhcmUgZGl2aWRlZCBpbnRvIHR3bw0KICAgICAgdHlwZXM6IGNvbXBy ZWhlbnNpb24tcmVxdWlyZWQgYW5kIGNvbXByZWhlbnNpb24tb3B0aW9uYWwuICBTVFVODQogICAg ICBhZ2VudHMgY2FuIHNhZmVseSBpZ25vcmUgY29tcHJlaGVuc2lvbi1vcHRpb25hbCBhdHRyaWJ1 dGVzIHRoZXkNCiAgICAgIGRvbid0IHVuZGVyc3RhbmQsIGJ1dCBjYW5ub3Qgc3VjY2Vzc2Z1bGx5 IHByb2Nlc3MgYSBtZXNzYWdlIGlmIGl0DQogICAgICBjb250YWlucyBjb21wcmVoZW5zaW9uLXJl cXVpcmVkIGF0dHJpYnV0ZXMgdGhhdCBhcmUgbm90DQogICAgICB1bmRlcnN0b29kLg0KDQoNCg0K DQoNClBldGl0LUh1Z3VlbmluLCBldCBhbC4gRXhwaXJlcyBTZXB0ZW1iZXIgMjIsIDIwMTkgICAg ICAgICAgICAgICBbUGFnZSA5XQ0KDA0KSW50ZXJuZXQtRHJhZnQgU2Vzc2lvbiBUcmF2ZXJzYWwg VXRpbGl0aWVzIGZvciBOQVQgKFNUVU4pICAgICBNYXJjaCAyMDE5DQoNCg0KICAgUlRPOiAgUmV0 cmFuc21pc3Npb24gVGltZU91dCwgd2hpY2ggZGVmaW5lcyB0aGUgaW5pdGlhbCBwZXJpb2Qgb2YN CiAgICAgIHRpbWUgYmV0d2VlbiB0cmFuc21pc3Npb24gb2YgYSByZXF1ZXN0IGFuZCB0aGUgZmly c3QgcmV0cmFuc21pdCBvZg0KICAgICAgdGhhdCByZXF1ZXN0Lg0KDQo1LiAgU1RVTiBNZXNzYWdl IFN0cnVjdHVyZQ0KDQogICBTVFVOIG1lc3NhZ2VzIGFyZSBlbmNvZGVkIGluIGJpbmFyeSB1c2lu ZyBuZXR3b3JrLW9yaWVudGVkIGZvcm1hdA0KICAgKG1vc3Qgc2lnbmlmaWNhbnQgYnl0ZSBvciBv Y3RldCBmaXJzdCwgYWxzbyBjb21tb25seSBrbm93biBhcyBiaWctDQogICBlbmRpYW4pLiAgVGhl IHRyYW5zbWlzc2lvbiBvcmRlciBpcyBkZXNjcmliZWQgaW4gZGV0YWlsIGluIEFwcGVuZGl4IEIN CiAgIG9mIFtSRkMwNzkxXS4gIFVubGVzcyBvdGhlcndpc2Ugbm90ZWQsIG51bWVyaWMgY29uc3Rh bnRzIGFyZSBpbg0KICAgZGVjaW1hbCAoYmFzZSAxMCkuDQoNCiAgIEFsbCBTVFVOIG1lc3NhZ2Vz IGNvbXByaXNlIGEgMjAtYnl0ZSBoZWFkZXIgZm9sbG93ZWQgYnkgemVybyBvciBtb3JlDQogICBB dHRyaWJ1dGVzLiAgVGhlIFNUVU4gaGVhZGVyIGNvbnRhaW5zIGEgU1RVTiBtZXNzYWdlIHR5cGUs IG1lc3NhZ2UNCiAgIGxlbmd0aCwgbWFnaWMgY29va2llLCBhbmQgdHJhbnNhY3Rpb24gSUQuDQoN CiAgICAgIDAgICAgICAgICAgICAgICAgICAgMSAgICAgICAgICAgICAgICAgICAyICAgICAgICAg ICAgICAgICAgIDMNCiAgICAgIDAgMSAyIDMgNCA1IDYgNyA4IDkgMCAxIDIgMyA0IDUgNiA3IDgg OSAwIDEgMiAzIDQgNSA2IDcgOCA5IDAgMQ0KICAgICArLSstKy0rLSstKy0rLSstKy0rLSstKy0r LSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKw0KICAgICB8MCAwfCAgICAg U1RVTiBNZXNzYWdlIFR5cGUgICAgIHwgICAgICAgICBNZXNzYWdlIExlbmd0aCAgICAgICAgfA0K ICAgICArLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSst Ky0rLSstKy0rLSstKw0KICAgICB8ICAgICAgICAgICAgICAgICAgICAgICAgIE1hZ2ljIENvb2tp ZSAgICAgICAgICAgICAgICAgICAgICAgICAgfA0KICAgICArLSstKy0rLSstKy0rLSstKy0rLSst Ky0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKw0KICAgICB8ICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg fA0KICAgICB8ICAgICAgICAgICAgICAgICAgICAgVHJhbnNhY3Rpb24gSUQgKDk2IGJpdHMpICAg ICAgICAgICAgICAgICAgfA0KICAgICB8ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgfA0KICAgICArLSstKy0rLSstKy0rLSstKy0r LSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKw0KDQogICAgICAg ICAgICAgICAgICBGaWd1cmUgMjogRm9ybWF0IG9mIFNUVU4gTWVzc2FnZSBIZWFkZXINCg0KICAg VGhlIG1vc3Qgc2lnbmlmaWNhbnQgMiBiaXRzIG9mIGV2ZXJ5IFNUVU4gbWVzc2FnZSBNVVNUIGJl IHplcm9lcy4NCiAgIFRoaXMgY2FuIGJlIHVzZWQgdG8gZGlmZmVyZW50aWF0ZSBTVFVOIHBhY2tl dHMgZnJvbSBvdGhlciBwcm90b2NvbHMNCiAgIHdoZW4gU1RVTiBpcyBtdWx0aXBsZXhlZCB3aXRo IG90aGVyIHByb3RvY29scyBvbiB0aGUgc2FtZSBwb3J0Lg0KDQogICBUaGUgbWVzc2FnZSB0eXBl IGRlZmluZXMgdGhlIG1lc3NhZ2UgY2xhc3MgKHJlcXVlc3QsIHN1Y2Nlc3MNCiAgIHJlc3BvbnNl LCBlcnJvciByZXNwb25zZSwgb3IgaW5kaWNhdGlvbikgYW5kIHRoZSBtZXNzYWdlIG1ldGhvZCAo dGhlDQogICBwcmltYXJ5IGZ1bmN0aW9uKSBvZiB0aGUgU1RVTiBtZXNzYWdlLiAgQWx0aG91Z2gg dGhlcmUgYXJlIGZvdXINCiAgIG1lc3NhZ2UgY2xhc3NlcywgdGhlcmUgYXJlIG9ubHkgdHdvIHR5 cGVzIG9mIHRyYW5zYWN0aW9ucyBpbiBTVFVOOg0KICAgcmVxdWVzdC9yZXNwb25zZSB0cmFuc2Fj dGlvbnMgKHdoaWNoIGNvbnNpc3Qgb2YgYSByZXF1ZXN0IG1lc3NhZ2UgYW5kDQogICBhIHJlc3Bv bnNlIG1lc3NhZ2UpIGFuZCBpbmRpY2F0aW9uIHRyYW5zYWN0aW9ucyAod2hpY2ggY29uc2lzdCBv ZiBhDQogICBzaW5nbGUgaW5kaWNhdGlvbiBtZXNzYWdlKS4gIFJlc3BvbnNlIGNsYXNzZXMgYXJl IHNwbGl0IGludG8gZXJyb3INCiAgIGFuZCBzdWNjZXNzIHJlc3BvbnNlcyB0byBhaWQgaW4gcXVp Y2tseSBwcm9jZXNzaW5nIHRoZSBTVFVOIG1lc3NhZ2UuDQoNCiAgIFRoZSBtZXNzYWdlIHR5cGUg ZmllbGQgaXMgZGVjb21wb3NlZCBmdXJ0aGVyIGludG8gdGhlIGZvbGxvd2luZw0KICAgc3RydWN0 dXJlOg0KDQoNCg0KDQoNCg0KUGV0aXQtSHVndWVuaW4sIGV0IGFsLiBFeHBpcmVzIFNlcHRlbWJl ciAyMiwgMjAxOSAgICAgICAgICAgICAgW1BhZ2UgMTBdDQoMDQpJbnRlcm5ldC1EcmFmdCBTZXNz aW9uIFRyYXZlcnNhbCBVdGlsaXRpZXMgZm9yIE5BVCAoU1RVTikgICAgIE1hcmNoIDIwMTkNCg0K DQogICAgICAgICAgICAgICAgICAgICAgIDAgICAgICAgICAgICAgICAgIDENCiAgICAgICAgICAg ICAgICAgICAgICAgMiAgMyAgNCA1IDYgNyA4IDkgMCAxIDIgMyA0IDUNCiAgICAgICAgICAgICAg ICAgICAgICArLS0rLS0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rDQogICAgICAgICAgICAgICAg ICAgICAgfE0gfE0gfE18TXxNfEN8TXxNfE18Q3xNfE18TXxNfA0KICAgICAgICAgICAgICAgICAg ICAgIHwxMXwxMHw5fDh8N3wxfDZ8NXw0fDB8M3wyfDF8MHwNCiAgICAgICAgICAgICAgICAgICAg ICArLS0rLS0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rDQoNCiAgICAgICAgICAgICAgICBGaWd1 cmUgMzogRm9ybWF0IG9mIFNUVU4gTWVzc2FnZSBUeXBlIEZpZWxkDQoNCiAgIEhlcmUgdGhlIGJp dHMgaW4gdGhlIG1lc3NhZ2UgdHlwZSBmaWVsZCBhcmUgc2hvd24gYXMgbW9zdCBzaWduaWZpY2Fu dA0KICAgKE0xMSkgdGhyb3VnaCBsZWFzdCBzaWduaWZpY2FudCAoTTApLiAgTTExIHRocm91Z2gg TTAgcmVwcmVzZW50IGENCiAgIDEyLWJpdCBlbmNvZGluZyBvZiB0aGUgbWV0aG9kLiAgQzEgYW5k IEMwIHJlcHJlc2VudCBhIDItYml0IGVuY29kaW5nDQogICBvZiB0aGUgY2xhc3MuICBBIGNsYXNz IG9mIDBiMDAgaXMgYSByZXF1ZXN0LCBhIGNsYXNzIG9mIDBiMDEgaXMgYW4NCiAgIGluZGljYXRp b24sIGEgY2xhc3Mgb2YgMGIxMCBpcyBhIHN1Y2Nlc3MgcmVzcG9uc2UsIGFuZCBhIGNsYXNzIG9m DQogICAwYjExIGlzIGFuIGVycm9yIHJlc3BvbnNlLiAgVGhpcyBzcGVjaWZpY2F0aW9uIGRlZmlu ZXMgYSBzaW5nbGUNCiAgIG1ldGhvZCwgQmluZGluZy4gIFRoZSBtZXRob2QgYW5kIGNsYXNzIGFy ZSBvcnRob2dvbmFsLCBzbyB0aGF0IGZvcg0KICAgZWFjaCBtZXRob2QsIGEgcmVxdWVzdCwgc3Vj Y2VzcyByZXNwb25zZSwgZXJyb3IgcmVzcG9uc2UsIGFuZA0KICAgaW5kaWNhdGlvbiBhcmUgcG9z c2libGUgZm9yIHRoYXQgbWV0aG9kLiAgRXh0ZW5zaW9ucyBkZWZpbmluZyBuZXcNCiAgIG1ldGhv ZHMgTVVTVCBpbmRpY2F0ZSB3aGljaCBjbGFzc2VzIGFyZSBwZXJtaXR0ZWQgZm9yIHRoYXQgbWV0 aG9kLg0KDQogICBGb3IgZXhhbXBsZSwgYSBCaW5kaW5nIHJlcXVlc3QgaGFzIGNsYXNzPTBiMDAg KHJlcXVlc3QpIGFuZA0KICAgbWV0aG9kPTBiMDAwMDAwMDAwMDAxIChCaW5kaW5nKSBhbmQgaXMg ZW5jb2RlZCBpbnRvIHRoZSBmaXJzdCAxNiBiaXRzDQogICBhcyAweDAwMDEuICBBIEJpbmRpbmcg cmVzcG9uc2UgaGFzIGNsYXNzPTBiMTAgKHN1Y2Nlc3MgcmVzcG9uc2UpIGFuZA0KICAgbWV0aG9k PTBiMDAwMDAwMDAwMDAxLCBhbmQgaXMgZW5jb2RlZCBpbnRvIHRoZSBmaXJzdCAxNiBiaXRzIGFz DQogICAweDAxMDEuDQoNCiAgIE5vdGU6ICBUaGlzIHVuZm9ydHVuYXRlIGVuY29kaW5nIGlzIGR1 ZSB0byBhc3NpZ25tZW50IG9mIHZhbHVlcyBpbg0KICAgICAgW1JGQzM0ODldIHRoYXQgZGlkIG5v dCBjb25zaWRlciBlbmNvZGluZyBJbmRpY2F0aW9ucywgU3VjY2VzcywgYW5kDQogICAgICBFcnJv cnMgdXNpbmcgYml0IGZpZWxkcy4NCg0KICAgVGhlIG1hZ2ljIGNvb2tpZSBmaWVsZCBNVVNUIGNv bnRhaW4gdGhlIGZpeGVkIHZhbHVlIDB4MjExMkE0NDIgaW4NCiAgIG5ldHdvcmsgYnl0ZSBvcmRl ci4gIEluIFtSRkMzNDg5XSwgdGhpcyBmaWVsZCB3YXMgcGFydCBvZiB0aGUNCiAgIHRyYW5zYWN0 aW9uIElEOyBwbGFjaW5nIHRoZSBtYWdpYyBjb29raWUgaW4gdGhpcyBsb2NhdGlvbiBhbGxvd3Mg YQ0KICAgc2VydmVyIHRvIGRldGVjdCBpZiB0aGUgY2xpZW50IHdpbGwgdW5kZXJzdGFuZCBjZXJ0 YWluIGF0dHJpYnV0ZXMNCiAgIHRoYXQgd2VyZSBhZGRlZCB0byBTVFVOIGJ5IFtSRkM1Mzg5XS4g IEluIGFkZGl0aW9uLCBpdCBhaWRzIGluDQogICBkaXN0aW5ndWlzaGluZyBTVFVOIHBhY2tldHMg ZnJvbSBwYWNrZXRzIG9mIG90aGVyIHByb3RvY29scyB3aGVuIFNUVU4NCiAgIGlzIG11bHRpcGxl eGVkIHdpdGggdGhvc2Ugb3RoZXIgcHJvdG9jb2xzIG9uIHRoZSBzYW1lIHBvcnQuDQoNCiAgIFRo ZSB0cmFuc2FjdGlvbiBJRCBpcyBhIDk2LWJpdCBpZGVudGlmaWVyLCB1c2VkIHRvIHVuaXF1ZWx5 IGlkZW50aWZ5DQogICBTVFVOIHRyYW5zYWN0aW9ucy4gIEZvciByZXF1ZXN0L3Jlc3BvbnNlIHRy YW5zYWN0aW9ucywgdGhlDQogICB0cmFuc2FjdGlvbiBJRCBpcyBjaG9zZW4gYnkgdGhlIFNUVU4g Y2xpZW50IGZvciB0aGUgcmVxdWVzdCBhbmQNCiAgIGVjaG9lZCBieSB0aGUgc2VydmVyIGluIHRo ZSByZXNwb25zZS4gIEZvciBpbmRpY2F0aW9ucywgaXQgaXMgY2hvc2VuDQogICBieSB0aGUgYWdl bnQgc2VuZGluZyB0aGUgaW5kaWNhdGlvbi4gIEl0IHByaW1hcmlseSBzZXJ2ZXMgdG8NCiAgIGNv cnJlbGF0ZSByZXF1ZXN0cyB3aXRoIHJlc3BvbnNlcywgdGhvdWdoIGl0IGFsc28gcGxheXMgYSBz bWFsbCByb2xlDQogICBpbiBoZWxwaW5nIHRvIHByZXZlbnQgY2VydGFpbiB0eXBlcyBvZiBhdHRh Y2tzLiAgVGhlIHNlcnZlciBhbHNvIHVzZXMNCiAgIHRoZSB0cmFuc2FjdGlvbiBJRCBhcyBhIGtl eSB0byBpZGVudGlmeSBlYWNoIHRyYW5zYWN0aW9uIHVuaXF1ZWx5DQogICBhY3Jvc3MgYWxsIGNs aWVudHMuICBBcyBzdWNoLCB0aGUgdHJhbnNhY3Rpb24gSUQgTVVTVCBiZSB1bmlmb3JtbHkNCiAg IGFuZCByYW5kb21seSBjaG9zZW4gZnJvbSB0aGUgaW50ZXJ2YWwgMCAuLiAyKio5Ni0xLCBhbmQg TVVTVCBiZQ0KDQoNCg0KUGV0aXQtSHVndWVuaW4sIGV0IGFsLiBFeHBpcmVzIFNlcHRlbWJlciAy MiwgMjAxOSAgICAgICAgICAgICAgW1BhZ2UgMTFdDQoMDQpJbnRlcm5ldC1EcmFmdCBTZXNzaW9u IFRyYXZlcnNhbCBVdGlsaXRpZXMgZm9yIE5BVCAoU1RVTikgICAgIE1hcmNoIDIwMTkNCg0KDQog ICBjcnlwdG9ncmFwaGljYWxseSByYW5kb20uICBSZXNlbmRzIG9mIHRoZSBzYW1lIHJlcXVlc3Qg cmV1c2UgdGhlIHNhbWUNCiAgIHRyYW5zYWN0aW9uIElELCBidXQgdGhlIGNsaWVudCBNVVNUIGNo b29zZSBhIG5ldyB0cmFuc2FjdGlvbiBJRCBmb3INCiAgIG5ldyB0cmFuc2FjdGlvbnMgdW5sZXNz IHRoZSBuZXcgcmVxdWVzdCBpcyBiaXQtd2lzZSBpZGVudGljYWwgdG8gdGhlDQogICBwcmV2aW91 cyByZXF1ZXN0IGFuZCBzZW50IGZyb20gdGhlIHNhbWUgdHJhbnNwb3J0IGFkZHJlc3MgdG8gdGhl IHNhbWUNCiAgIElQIGFkZHJlc3MuICBTdWNjZXNzIGFuZCBlcnJvciByZXNwb25zZXMgTVVTVCBj YXJyeSB0aGUgc2FtZQ0KICAgdHJhbnNhY3Rpb24gSUQgYXMgdGhlaXIgY29ycmVzcG9uZGluZyBy ZXF1ZXN0LiAgV2hlbiBhbiBhZ2VudCBpcw0KICAgYWN0aW5nIGFzIGEgU1RVTiBzZXJ2ZXIgYW5k IFNUVU4gY2xpZW50IG9uIHRoZSBzYW1lIHBvcnQsIHRoZQ0KICAgdHJhbnNhY3Rpb24gSURzIGlu IHJlcXVlc3RzIHNlbnQgYnkgdGhlIGFnZW50IGhhdmUgbm8gcmVsYXRpb25zaGlwIHRvDQogICB0 aGUgdHJhbnNhY3Rpb24gSURzIGluIHJlcXVlc3RzIHJlY2VpdmVkIGJ5IHRoZSBhZ2VudC4NCg0K ICAgVGhlIG1lc3NhZ2UgbGVuZ3RoIE1VU1QgY29udGFpbiB0aGUgc2l6ZSwgaW4gYnl0ZXMsIG9m IHRoZSBtZXNzYWdlDQogICBub3QgaW5jbHVkaW5nIHRoZSAyMC1ieXRlIFNUVU4gaGVhZGVyLiAg U2luY2UgYWxsIFNUVU4gYXR0cmlidXRlcyBhcmUNCiAgIHBhZGRlZCB0byBhIG11bHRpcGxlIG9m IDQgYnl0ZXMsIHRoZSBsYXN0IDIgYml0cyBvZiB0aGlzIGZpZWxkIGFyZQ0KICAgYWx3YXlzIHpl cm8uICBUaGlzIHByb3ZpZGVzIGFub3RoZXIgd2F5IHRvIGRpc3Rpbmd1aXNoIFNUVU4gcGFja2V0 cw0KICAgZnJvbSBwYWNrZXRzIG9mIG90aGVyIHByb3RvY29scy4NCg0KICAgRm9sbG93aW5nIHRo ZSBTVFVOIGZpeGVkIHBvcnRpb24gb2YgdGhlIGhlYWRlciBhcmUgemVybyBvciBtb3JlDQogICBh dHRyaWJ1dGVzLiAgRWFjaCBhdHRyaWJ1dGUgaXMgVExWIChUeXBlLUxlbmd0aC1WYWx1ZSkgZW5j b2RlZC4gIFRoZQ0KICAgZGV0YWlscyBvZiB0aGUgZW5jb2RpbmcsIGFuZCBvZiB0aGUgYXR0cmli dXRlcyB0aGVtc2VsdmVzIGFyZSBnaXZlbg0KICAgaW4gU2VjdGlvbiAxNC4NCg0KNi4gIEJhc2Ug UHJvdG9jb2wgUHJvY2VkdXJlcw0KDQogICBUaGlzIHNlY3Rpb24gZGVmaW5lcyB0aGUgYmFzZSBw cm9jZWR1cmVzIG9mIHRoZSBTVFVOIHByb3RvY29sLiAgSXQNCiAgIGRlc2NyaWJlcyBob3cgbWVz c2FnZXMgYXJlIGZvcm1lZCwgaG93IHRoZXkgYXJlIHNlbnQsIGFuZCBob3cgdGhleQ0KICAgYXJl IHByb2Nlc3NlZCB3aGVuIHRoZXkgYXJlIHJlY2VpdmVkLiAgSXQgYWxzbyBkZWZpbmVzIHRoZSBk ZXRhaWxlZA0KICAgcHJvY2Vzc2luZyBvZiB0aGUgQmluZGluZyBtZXRob2QuICBPdGhlciBzZWN0 aW9ucyBpbiB0aGlzIGRvY3VtZW50DQogICBkZXNjcmliZSBvcHRpb25hbCBwcm9jZWR1cmVzIHRo YXQgYSB1c2FnZSBtYXkgZWxlY3QgdG8gdXNlIGluIGNlcnRhaW4NCiAgIHNpdHVhdGlvbnMuICBP dGhlciBkb2N1bWVudHMgbWF5IGRlZmluZSBvdGhlciBleHRlbnNpb25zIHRvIFNUVU4sIGJ5DQog ICBhZGRpbmcgbmV3IG1ldGhvZHMsIG5ldyBhdHRyaWJ1dGVzLCBvciBuZXcgZXJyb3IgcmVzcG9u c2UgY29kZXMuDQoNCjYuMS4gIEZvcm1pbmcgYSBSZXF1ZXN0IG9yIGFuIEluZGljYXRpb24NCg0K ICAgV2hlbiBmb3JtdWxhdGluZyBhIHJlcXVlc3Qgb3IgaW5kaWNhdGlvbiBtZXNzYWdlLCB0aGUg YWdlbnQgTVVTVA0KICAgZm9sbG93IHRoZSBydWxlcyBpbiBTZWN0aW9uIDUgd2hlbiBjcmVhdGlu ZyB0aGUgaGVhZGVyLiAgSW4gYWRkaXRpb24sDQogICB0aGUgbWVzc2FnZSBjbGFzcyBNVVNUIGJl IGVpdGhlciAiUmVxdWVzdCIgb3IgIkluZGljYXRpb24iIChhcw0KICAgYXBwcm9wcmlhdGUpLCBh bmQgdGhlIG1ldGhvZCBtdXN0IGJlIGVpdGhlciBCaW5kaW5nIG9yIHNvbWUgbWV0aG9kDQogICBk ZWZpbmVkIGluIGFub3RoZXIgZG9jdW1lbnQuDQoNCiAgIFRoZSBhZ2VudCB0aGVuIGFkZHMgYW55 IGF0dHJpYnV0ZXMgc3BlY2lmaWVkIGJ5IHRoZSBtZXRob2Qgb3IgdGhlDQogICB1c2FnZS4gIEZv ciBleGFtcGxlLCBzb21lIHVzYWdlcyBtYXkgc3BlY2lmeSB0aGF0IHRoZSBhZ2VudCB1c2UgYW4N CiAgIGF1dGhlbnRpY2F0aW9uIG1ldGhvZCAoU2VjdGlvbiA5KSBvciB0aGUgRklOR0VSUFJJTlQg YXR0cmlidXRlDQogICAoU2VjdGlvbiA3KS4NCg0KICAgSWYgdGhlIGFnZW50IGlzIHNlbmRpbmcg YSByZXF1ZXN0LCBpdCBTSE9VTEQgYWRkIGEgU09GVFdBUkUgYXR0cmlidXRlDQogICB0byB0aGUg cmVxdWVzdC4gIEFnZW50cyBNQVkgaW5jbHVkZSBhIFNPRlRXQVJFIGF0dHJpYnV0ZSBpbg0KICAg aW5kaWNhdGlvbnMsIGRlcGVuZGluZyBvbiB0aGUgbWV0aG9kLiAgRXh0ZW5zaW9ucyB0byBTVFVO IHNob3VsZA0KICAgZGlzY3VzcyB3aGV0aGVyIFNPRlRXQVJFIGlzIHVzZWZ1bCBpbiBuZXcgaW5k aWNhdGlvbnMuICBOb3RlIHRoYXQgdGhlDQoNCg0KDQpQZXRpdC1IdWd1ZW5pbiwgZXQgYWwuIEV4 cGlyZXMgU2VwdGVtYmVyIDIyLCAyMDE5ICAgICAgICAgICAgICBbUGFnZSAxMl0NCgwNCkludGVy bmV0LURyYWZ0IFNlc3Npb24gVHJhdmVyc2FsIFV0aWxpdGllcyBmb3IgTkFUIChTVFVOKSAgICAg TWFyY2ggMjAxOQ0KDQoNCiAgIGluY2x1c2lvbiBvZiBhIFNPRlRXQVJFIGF0dHJpYnV0ZSBtYXkg aGF2ZSBzZWN1cml0eSBpbXBsaWNhdGlvbnM7IHNlZQ0KICAgU2VjdGlvbiAxNi4xLjIgZm9yIGRl dGFpbHMuDQoNCiAgIEZvciB0aGUgQmluZGluZyBtZXRob2Qgd2l0aCBubyBhdXRoZW50aWNhdGlv biwgbm8gYXR0cmlidXRlcyBhcmUNCiAgIHJlcXVpcmVkIHVubGVzcyB0aGUgdXNhZ2Ugc3BlY2lm aWVzIG90aGVyd2lzZS4NCg0KICAgQWxsIFNUVU4gbWVzc2FnZXMgc2VudCBvdmVyIFVEUCBvciBE VExTLW92ZXItVURQIFtSRkM2MzQ3XSBTSE9VTEQgYmUNCiAgIGxlc3MgdGhhbiB0aGUgcGF0aCBN VFUsIGlmIGtub3duLg0KDQogICBJZiB0aGUgcGF0aCBNVFUgaXMgdW5rbm93biBmb3IgVURQLCBt ZXNzYWdlcyBTSE9VTEQgYmUgdGhlIHNtYWxsZXIgb2YNCiAgIDU3NiBieXRlcyBhbmQgdGhlIGZp cnN0LWhvcCBNVFUgZm9yIElQdjQgW1JGQzExMjJdIGFuZCAxMjgwIGJ5dGVzIGZvcg0KICAgSVB2 NiBbUkZDODIwMF0uICBUaGlzIHZhbHVlIGNvcnJlc3BvbmRzIHRvIHRoZSBvdmVyYWxsIHNpemUg b2YgdGhlIElQDQogICBwYWNrZXQuICBDb25zZXF1ZW50bHksIGZvciBJUHY0LCB0aGUgYWN0dWFs IFNUVU4gbWVzc2FnZSB3b3VsZCBuZWVkDQogICB0byBiZSBsZXNzIHRoYW4gNTQ4IGJ5dGVzICg1 NzYgbWludXMgMjAtYnl0ZSBJUCBoZWFkZXIsIG1pbnVzIDgtYnl0ZQ0KICAgVURQIGhlYWRlciwg YXNzdW1pbmcgbm8gSVAgb3B0aW9ucyBhcmUgdXNlZCkuDQoNCiAgIElmIHRoZSBwYXRoIE1UVSBp cyB1bmtub3duIGZvciBEVExTLW92ZXItVURQLCB0aGUgcnVsZXMgZGVzY3JpYmVkIGluDQogICB0 aGUgcHJldmlvdXMgcGFyYWdyYXBoIG5lZWQgdG8gYmUgYWRqdXN0ZWQgdG8gdGFrZSBpbnRvIGFj Y291bnQgdGhlDQogICBzaXplIG9mIHRoZSAoMTMtYnl0ZSkgRFRMUyBSZWNvcmQgaGVhZGVyLCB0 aGUgTUFDIHNpemUsIGFuZCB0aGUNCiAgIHBhZGRpbmcgc2l6ZS4NCg0KICAgU1RVTiBwcm92aWRl cyBubyBhYmlsaXR5IHRvIGhhbmRsZSB0aGUgY2FzZSB3aGVyZSB0aGUgcmVxdWVzdCBpcw0KICAg dW5kZXIgdGhlIE1UVSBidXQgdGhlIHJlc3BvbnNlIHdvdWxkIGJlIGxhcmdlciB0aGFuIHRoZSBN VFUuICBJdCBpcw0KICAgbm90IGVudmlzaW9uZWQgdGhhdCB0aGlzIGxpbWl0YXRpb24gd2lsbCBi ZSBhbiBpc3N1ZSBmb3IgU1RVTi4gIFRoZQ0KICAgTVRVIGxpbWl0YXRpb24gaXMgYSBTSE9VTEQs IGFuZCBub3QgYSBNVVNULCB0byBhY2NvdW50IGZvciBjYXNlcw0KICAgd2hlcmUgU1RVTiBpdHNl bGYgaXMgYmVpbmcgdXNlZCB0byBwcm9iZSBmb3IgTVRVIGNoYXJhY3RlcmlzdGljcw0KICAgW1JG QzU3ODBdLiAgU2VlIGFsc28gW0ktRC5pZXRmLXRyYW0tc3R1bi1wbXR1ZF0gZm9yIGEgZnJhbWV3 b3JrIHRoYXQNCiAgIHVzZXMgU1RVTiB0byBhZGQgUGF0aCBNVFUgRGlzY292ZXJ5IHRvIHByb3Rv Y29scyB0aGF0IGxhY2sgb25lLg0KICAgT3V0c2lkZSBvZiB0aGlzIG9yIHNpbWlsYXIgYXBwbGlj YXRpb25zLCB0aGUgTVRVIGNvbnN0cmFpbnQgTVVTVCBiZQ0KICAgZm9sbG93ZWQuDQoNCjYuMi4g IFNlbmRpbmcgdGhlIFJlcXVlc3Qgb3IgSW5kaWNhdGlvbg0KDQogICBUaGUgYWdlbnQgdGhlbiBz ZW5kcyB0aGUgcmVxdWVzdCBvciBpbmRpY2F0aW9uLiAgVGhpcyBkb2N1bWVudA0KICAgc3BlY2lm aWVzIGhvdyB0byBzZW5kIFNUVU4gbWVzc2FnZXMgb3ZlciBVRFAsIFRDUCwgVExTLW92ZXItVENQ LCBvcg0KICAgRFRMUy1vdmVyLVVEUDsgb3RoZXIgdHJhbnNwb3J0IHByb3RvY29scyBtYXkgYmUg YWRkZWQgaW4gdGhlIGZ1dHVyZS4NCiAgIFRoZSBTVFVOIHVzYWdlIG11c3Qgc3BlY2lmeSB3aGlj aCB0cmFuc3BvcnQgcHJvdG9jb2wgaXMgdXNlZCwgYW5kIGhvdw0KICAgdGhlIGFnZW50IGRldGVy bWluZXMgdGhlIElQIGFkZHJlc3MgYW5kIHBvcnQgb2YgdGhlIHJlY2lwaWVudC4NCiAgIFNlY3Rp b24gOCBkZXNjcmliZXMgYSBETlMtYmFzZWQgbWV0aG9kIG9mIGRldGVybWluaW5nIHRoZSBJUCBh ZGRyZXNzDQogICBhbmQgcG9ydCBvZiBhIHNlcnZlciB0aGF0IGEgdXNhZ2UgbWF5IGVsZWN0IHRv IHVzZS4NCg0KICAgQXQgYW55IHRpbWUsIGEgY2xpZW50IE1BWSBoYXZlIG11bHRpcGxlIG91dHN0 YW5kaW5nIFNUVU4gcmVxdWVzdHMNCiAgIHdpdGggdGhlIHNhbWUgU1RVTiBzZXJ2ZXIgKHRoYXQg aXMsIG11bHRpcGxlIHRyYW5zYWN0aW9ucyBpbg0KICAgcHJvZ3Jlc3MsIHdpdGggZGlmZmVyZW50 IHRyYW5zYWN0aW9uIElEcykuICBBYnNlbnQgb3RoZXIgbGltaXRzIHRvDQogICB0aGUgcmF0ZSBv ZiBuZXcgdHJhbnNhY3Rpb25zIChzdWNoIGFzIHRob3NlIHNwZWNpZmllZCBieSBJQ0UgZm9yDQog ICBjb25uZWN0aXZpdHkgY2hlY2tzIG9yIHdoZW4gU1RVTiBpcyBydW4gb3ZlciBUQ1ApLCBhIGNs aWVudCBTSE9VTEQNCiAgIGxpbWl0IGl0c2VsZiB0byB0ZW4gb3V0c3RhbmRpbmcgdHJhbnNhY3Rp b25zIHRvIHRoZSBzYW1lIHNlcnZlci4NCg0KDQoNCg0KUGV0aXQtSHVndWVuaW4sIGV0IGFsLiBF eHBpcmVzIFNlcHRlbWJlciAyMiwgMjAxOSAgICAgICAgICAgICAgW1BhZ2UgMTNdDQoMDQpJbnRl cm5ldC1EcmFmdCBTZXNzaW9uIFRyYXZlcnNhbCBVdGlsaXRpZXMgZm9yIE5BVCAoU1RVTikgICAg IE1hcmNoIDIwMTkNCg0KDQo2LjIuMS4gIFNlbmRpbmcgb3ZlciBVRFAgb3IgRFRMUy1vdmVyLVVE UA0KDQogICBXaGVuIHJ1bm5pbmcgU1RVTiBvdmVyIFVEUCBvciBTVFVOIG92ZXIgRFRMUy1vdmVy LVVEUCBbUkZDNzM1MF0sIGl0DQogICBpcyBwb3NzaWJsZSB0aGF0IHRoZSBTVFVOIG1lc3NhZ2Ug bWlnaHQgYmUgZHJvcHBlZCBieSB0aGUgbmV0d29yay4NCiAgIFJlbGlhYmlsaXR5IG9mIFNUVU4g cmVxdWVzdC9yZXNwb25zZSB0cmFuc2FjdGlvbnMgaXMgYWNjb21wbGlzaGVkDQogICB0aHJvdWdo IHJldHJhbnNtaXNzaW9ucyBvZiB0aGUgcmVxdWVzdCBtZXNzYWdlIGJ5IHRoZSBjbGllbnQNCiAg IGFwcGxpY2F0aW9uIGl0c2VsZi4gIFNUVU4gaW5kaWNhdGlvbnMgYXJlIG5vdCByZXRyYW5zbWl0 dGVkOyB0aHVzLA0KICAgaW5kaWNhdGlvbiB0cmFuc2FjdGlvbnMgb3ZlciBVRFAgb3IgRFRMUy1v dmVyLVVEUCBhcmUgbm90IHJlbGlhYmxlLg0KDQogICBBIGNsaWVudCBTSE9VTEQgcmV0cmFuc21p dCBhIFNUVU4gcmVxdWVzdCBtZXNzYWdlIHN0YXJ0aW5nIHdpdGggYW4NCiAgIGludGVydmFsIG9m IFJUTyAoIlJldHJhbnNtaXNzaW9uIFRpbWVPdXQiKSwgZG91YmxpbmcgYWZ0ZXIgZWFjaA0KICAg cmV0cmFuc21pc3Npb24uICBUaGUgUlRPIGlzIGFuIGVzdGltYXRlIG9mIHRoZSByb3VuZC10cmlw IHRpbWUgKFJUVCksDQogICBhbmQgaXMgY29tcHV0ZWQgYXMgZGVzY3JpYmVkIGluIFtSRkM2Mjk4 XSwgd2l0aCB0d28gZXhjZXB0aW9ucy4NCiAgIEZpcnN0LCB0aGUgaW5pdGlhbCB2YWx1ZSBmb3Ig UlRPIFNIT1VMRCBiZSBncmVhdGVyIG9yIGVxdWFsIHRvIDUwMA0KICAgbXMuICBUaGUgZXhjZXB0 aW9uIGNhc2VzIGZvciB0aGlzICJTSE9VTEQiIGFyZSB3aGVuIG90aGVyIG1lY2hhbmlzbXMNCiAg IGFyZSB1c2VkIHRvIGRlcml2ZSBjb25nZXN0aW9uIHRocmVzaG9sZHMgKHN1Y2ggYXMgdGhlIG9u ZXMgZGVmaW5lZCBpbg0KICAgSUNFIGZvciBmaXhlZCByYXRlIHN0cmVhbXMpLCBvciB3aGVuIFNU VU4gaXMgdXNlZCBpbiBub24tSW50ZXJuZXQNCiAgIGVudmlyb25tZW50cyB3aXRoIGtub3duIG5l dHdvcmsgY2FwYWNpdGllcy4gIEluIGZpeGVkLWxpbmUgYWNjZXNzDQogICBsaW5rcywgYSB2YWx1 ZSBvZiA1MDAgbXMgaXMgUkVDT01NRU5ERUQuICBTZWNvbmQsIHRoZSB2YWx1ZSBvZiBSVE8NCiAg IFNIT1VMRCBOT1QgYmUgcm91bmRlZCB1cCB0byB0aGUgbmVhcmVzdCBzZWNvbmQuICBSYXRoZXIs IGEgMSBtcw0KICAgYWNjdXJhY3kgU0hPVUxEIGJlIG1haW50YWluZWQuICBBcyB3aXRoIFRDUCwg dGhlIHVzYWdlIG9mIEthcm4ncw0KICAgYWxnb3JpdGhtIGlzIFJFQ09NTUVOREVEIFtLQVJOODdd LiAgV2hlbiBhcHBsaWVkIHRvIFNUVU4sIGl0IG1lYW5zDQogICB0aGF0IFJUVCBlc3RpbWF0ZXMg U0hPVUxEIE5PVCBiZSBjb21wdXRlZCBmcm9tIFNUVU4gdHJhbnNhY3Rpb25zIHRoYXQNCiAgIHJl c3VsdCBpbiB0aGUgcmV0cmFuc21pc3Npb24gb2YgYSByZXF1ZXN0Lg0KDQogICBUaGUgdmFsdWUg Zm9yIFJUTyBTSE9VTEQgYmUgY2FjaGVkIGJ5IGEgY2xpZW50IGFmdGVyIHRoZSBjb21wbGV0aW9u DQogICBvZiB0aGUgdHJhbnNhY3Rpb24sIGFuZCB1c2VkIGFzIHRoZSBzdGFydGluZyB2YWx1ZSBm b3IgUlRPIGZvciB0aGUNCiAgIG5leHQgdHJhbnNhY3Rpb24gdG8gdGhlIHNhbWUgc2VydmVyIChi YXNlZCBvbiBlcXVhbGl0eSBvZiBJUA0KICAgYWRkcmVzcykuICBUaGUgdmFsdWUgU0hPVUxEIGJl IGNvbnNpZGVyZWQgc3RhbGUgYW5kIGRpc2NhcmRlZCBpZiBubw0KICAgdHJhbnNhY3Rpb25zIGhh dmUgb2NjdXJyZWQgdG8gdGhlIHNhbWUgc2VydmVyIGluIHRoZSBsYXN0IDEwIG1pbnV0ZXMuDQoN CiAgIFJldHJhbnNtaXNzaW9ucyBjb250aW51ZSB1bnRpbCBhIHJlc3BvbnNlIGlzIHJlY2VpdmVk LCBvciB1bnRpbCBhDQogICB0b3RhbCBvZiBSYyByZXF1ZXN0cyBoYXZlIGJlZW4gc2VudC4gIFJj IFNIT1VMRCBiZSBjb25maWd1cmFibGUgYW5kDQogICBTSE9VTEQgaGF2ZSBhIGRlZmF1bHQgb2Yg Ny4gIElmLCBhZnRlciB0aGUgbGFzdCByZXF1ZXN0LCBhIGR1cmF0aW9uDQogICBlcXVhbCB0byBS bSB0aW1lcyB0aGUgUlRPIGhhcyBwYXNzZWQgd2l0aG91dCBhIHJlc3BvbnNlIChwcm92aWRpbmcN CiAgIGFtcGxlIHRpbWUgdG8gZ2V0IGEgcmVzcG9uc2UgaWYgb25seSB0aGlzIGZpbmFsIHJlcXVl c3QgYWN0dWFsbHkNCiAgIHN1Y2NlZWRzKSwgdGhlIGNsaWVudCBTSE9VTEQgY29uc2lkZXIgdGhl IHRyYW5zYWN0aW9uIHRvIGhhdmUgZmFpbGVkLg0KICAgUm0gU0hPVUxEIGJlIGNvbmZpZ3VyYWJs ZSBhbmQgU0hPVUxEIGhhdmUgYSBkZWZhdWx0IG9mIDE2LiAgQSBTVFVODQogICB0cmFuc2FjdGlv biBvdmVyIFVEUCBvciBEVExTLW92ZXItVURQIGlzIGFsc28gY29uc2lkZXJlZCBmYWlsZWQgaWYN CiAgIHRoZXJlIGhhcyBiZWVuIGEgaGFyZCBJQ01QIGVycm9yIFtSRkMxMTIyXS4gIEZvciBleGFt cGxlLCBhc3N1bWluZyBhbg0KICAgUlRPIG9mIDUwMG1zLCByZXF1ZXN0cyB3b3VsZCBiZSBzZW50 IGF0IHRpbWVzIDAgbXMsIDUwMCBtcywgMTUwMCBtcywNCiAgIDM1MDAgbXMsIDc1MDAgbXMsIDE1 NTAwIG1zLCBhbmQgMzE1MDAgbXMuICBJZiB0aGUgY2xpZW50IGhhcyBub3QNCiAgIHJlY2VpdmVk IGEgcmVzcG9uc2UgYWZ0ZXIgMzk1MDAgbXMsIHRoZSBjbGllbnQgd2lsbCBjb25zaWRlciB0aGUN CiAgIHRyYW5zYWN0aW9uIHRvIGhhdmUgdGltZWQgb3V0Lg0KDQoNCg0KDQoNCg0KDQpQZXRpdC1I dWd1ZW5pbiwgZXQgYWwuIEV4cGlyZXMgU2VwdGVtYmVyIDIyLCAyMDE5ICAgICAgICAgICAgICBb UGFnZSAxNF0NCgwNCkludGVybmV0LURyYWZ0IFNlc3Npb24gVHJhdmVyc2FsIFV0aWxpdGllcyBm b3IgTkFUIChTVFVOKSAgICAgTWFyY2ggMjAxOQ0KDQoNCjYuMi4yLiAgU2VuZGluZyBvdmVyIFRD UCBvciBUTFMtb3Zlci1UQ1ANCg0KICAgRm9yIFRDUCBhbmQgVExTLW92ZXItVENQIFtSRkM1MjQ2 XSwgdGhlIGNsaWVudCBvcGVucyBhIFRDUCBjb25uZWN0aW9uDQogICB0byB0aGUgc2VydmVyLg0K DQogICBJbiBzb21lIHVzYWdlcyBvZiBTVFVOLCBTVFVOIGlzIHNlbnQgYXMgdGhlIG9ubHkgcHJv dG9jb2wgb3ZlciB0aGUNCiAgIFRDUCBjb25uZWN0aW9uLiAgSW4gdGhpcyBjYXNlLCBpdCBjYW4g YmUgc2VudCB3aXRob3V0IHRoZSBhaWQgb2YgYW55DQogICBhZGRpdGlvbmFsIGZyYW1pbmcgb3Ig ZGVtdWx0aXBsZXhpbmcuICBJbiBvdGhlciB1c2FnZXMsIG9yIHdpdGggb3RoZXINCiAgIGV4dGVu c2lvbnMsIGl0IG1heSBiZSBtdWx0aXBsZXhlZCB3aXRoIG90aGVyIGRhdGEgb3ZlciBhIFRDUA0K ICAgY29ubmVjdGlvbi4gIEluIHRoYXQgY2FzZSwgU1RVTiBNVVNUIGJlIHJ1biBvbiB0b3Agb2Yg c29tZSBraW5kIG9mDQogICBmcmFtaW5nIHByb3RvY29sLCBzcGVjaWZpZWQgYnkgdGhlIHVzYWdl IG9yIGV4dGVuc2lvbiwgd2hpY2ggYWxsb3dzDQogICBmb3IgdGhlIGFnZW50IHRvIGV4dHJhY3Qg Y29tcGxldGUgU1RVTiBtZXNzYWdlcyBhbmQgY29tcGxldGUNCiAgIGFwcGxpY2F0aW9uIGxheWVy IG1lc3NhZ2VzLiAgVGhlIFNUVU4gc2VydmljZSBydW5uaW5nIG9uIHRoZSB3ZWxsLQ0KICAga25v d24gcG9ydCBvciBwb3J0cyBkaXNjb3ZlcmVkIHRocm91Z2ggdGhlIEROUyBwcm9jZWR1cmVzIGlu DQogICBTZWN0aW9uIDggaXMgZm9yIFNUVU4gYWxvbmUsIGFuZCBub3QgZm9yIFNUVU4gbXVsdGlw bGV4ZWQgd2l0aCBvdGhlcg0KICAgZGF0YS4gIENvbnNlcXVlbnRseSwgbm8gZnJhbWluZyBwcm90 b2NvbHMgYXJlIHVzZWQgaW4gY29ubmVjdGlvbnMgdG8NCiAgIHRob3NlIHNlcnZlcnMuICBXaGVu IGFkZGl0aW9uYWwgZnJhbWluZyBpcyB1dGlsaXplZCwgdGhlIHVzYWdlIHdpbGwNCiAgIHNwZWNp ZnkgaG93IHRoZSBjbGllbnQga25vd3MgdG8gYXBwbHkgaXQgYW5kIHdoYXQgcG9ydCB0byBjb25u ZWN0IHRvLg0KICAgRm9yIGV4YW1wbGUsIGluIHRoZSBjYXNlIG9mIElDRSBjb25uZWN0aXZpdHkg Y2hlY2tzLCB0aGlzIGluZm9ybWF0aW9uDQogICBpcyBsZWFybmVkIHRocm91Z2ggb3V0LW9mLWJh bmQgbmVnb3RpYXRpb24gYmV0d2VlbiBjbGllbnQgYW5kIHNlcnZlci4NCg0KICAgUmVsaWFiaWxp dHkgb2YgU1RVTiBvdmVyIFRDUCBhbmQgVExTLW92ZXItVENQIGlzIGhhbmRsZWQgYnkgVENQDQog ICBpdHNlbGYsIGFuZCB0aGVyZSBhcmUgbm8gcmV0cmFuc21pc3Npb25zIGF0IHRoZSBTVFVOIHBy b3RvY29sIGxldmVsLg0KICAgSG93ZXZlciwgZm9yIGEgcmVxdWVzdC9yZXNwb25zZSB0cmFuc2Fj dGlvbiwgaWYgdGhlIGNsaWVudCBoYXMgbm90DQogICByZWNlaXZlZCBhIHJlc3BvbnNlIGJ5IFRp IHNlY29uZHMgYWZ0ZXIgaXQgc2VudCB0aGUgcmVxdWVzdCBtZXNzYWdlLA0KICAgaXQgY29uc2lk ZXJzIHRoZSB0cmFuc2FjdGlvbiB0byBoYXZlIHRpbWVkIG91dC4gIFRpIFNIT1VMRCBiZQ0KICAg Y29uZmlndXJhYmxlIGFuZCBTSE9VTEQgaGF2ZSBhIGRlZmF1bHQgb2YgMzkuNXMuICBUaGlzIHZh bHVlIGhhcyBiZWVuDQogICBjaG9zZW4gdG8gZXF1YWxpemUgdGhlIFRDUCBhbmQgVURQIHRpbWVv dXRzIGZvciB0aGUgZGVmYXVsdCBpbml0aWFsDQogICBSVE8uDQoNCiAgIEluIGFkZGl0aW9uLCBp ZiB0aGUgY2xpZW50IGlzIHVuYWJsZSB0byBlc3RhYmxpc2ggdGhlIFRDUCBjb25uZWN0aW9uLA0K ICAgb3IgdGhlIFRDUCBjb25uZWN0aW9uIGlzIHJlc2V0IG9yIGZhaWxzIGJlZm9yZSBhIHJlc3Bv bnNlIGlzDQogICByZWNlaXZlZCwgYW55IHJlcXVlc3QvcmVzcG9uc2UgdHJhbnNhY3Rpb24gaW4g cHJvZ3Jlc3MgaXMgY29uc2lkZXJlZA0KICAgdG8gaGF2ZSBmYWlsZWQuDQoNCiAgIFRoZSBjbGll bnQgTUFZIHNlbmQgbXVsdGlwbGUgdHJhbnNhY3Rpb25zIG92ZXIgYSBzaW5nbGUgVENQIChvciBU TFMtDQogICBvdmVyLVRDUCkgY29ubmVjdGlvbiwgYW5kIGl0IE1BWSBzZW5kIGFub3RoZXIgcmVx dWVzdCBiZWZvcmUNCiAgIHJlY2VpdmluZyBhIHJlc3BvbnNlIHRvIHRoZSBwcmV2aW91cyByZXF1 ZXN0LiAgVGhlIGNsaWVudCBTSE9VTEQga2VlcA0KICAgdGhlIGNvbm5lY3Rpb24gb3BlbiB1bnRp bCBpdDoNCg0KICAgbyAgaGFzIG5vIGZ1cnRoZXIgU1RVTiByZXF1ZXN0cyBvciBpbmRpY2F0aW9u cyB0byBzZW5kIG92ZXIgdGhhdA0KICAgICAgY29ubmVjdGlvbiwgYW5kDQoNCiAgIG8gIGhhcyBu byBwbGFucyB0byB1c2UgYW55IHJlc291cmNlcyAoc3VjaCBhcyBhIG1hcHBlZCBhZGRyZXNzDQog ICAgICAoTUFQUEVELUFERFJFU1Mgb3IgWE9SLU1BUFBFRC1BRERSRVNTKSBvciByZWxheWVkIGFk ZHJlc3MNCiAgICAgIFtSRkM1NzY2XSkgdGhhdCB3ZXJlIGxlYXJuZWQgdGhvdWdoIFNUVU4gcmVx dWVzdHMgc2VudCBvdmVyIHRoYXQNCiAgICAgIGNvbm5lY3Rpb24sIGFuZA0KDQoNCg0KDQpQZXRp dC1IdWd1ZW5pbiwgZXQgYWwuIEV4cGlyZXMgU2VwdGVtYmVyIDIyLCAyMDE5ICAgICAgICAgICAg ICBbUGFnZSAxNV0NCgwNCkludGVybmV0LURyYWZ0IFNlc3Npb24gVHJhdmVyc2FsIFV0aWxpdGll cyBmb3IgTkFUIChTVFVOKSAgICAgTWFyY2ggMjAxOQ0KDQoNCiAgIG8gIGlmIG11bHRpcGxleGlu ZyBvdGhlciBhcHBsaWNhdGlvbiBwcm90b2NvbHMgb3ZlciB0aGF0IHBvcnQsIGhhcw0KICAgICAg ZmluaXNoZWQgdXNpbmcgdGhvc2Ugb3RoZXIgcHJvdG9jb2xzLCBhbmQNCg0KICAgbyAgaWYgdXNp bmcgdGhhdCBsZWFybmVkIHBvcnQgd2l0aCBhIHJlbW90ZSBwZWVyLCBoYXMgZXN0YWJsaXNoZWQN CiAgICAgIGNvbW11bmljYXRpb25zIHdpdGggdGhhdCByZW1vdGUgcGVlciwgYXMgaXMgcmVxdWly ZWQgYnkgc29tZSBUQ1ANCiAgICAgIE5BVCB0cmF2ZXJzYWwgdGVjaG5pcXVlcyAoZS5nLiwgW1JG QzY1NDRdKS4NCg0KICAgVGhlIGRldGFpbHMgb2YgYW4gZXZlbnR1YWwga2VlcC1hbGl2ZSBtZWNo YW5pc20gYXJlIGxlZnQgdG8gZWFjaCBTVFVODQogICBVc2FnZS4gIEluIGFueSBjYXNlIGlmIGEg dHJhbnNhY3Rpb24gZmFpbHMgYmVjYXVzZSBhbiBpZGxlIFRDUA0KICAgY29ubmVjdGlvbiBkb2Vz bid0IHdvcmsgYW55bW9yZSB0aGUgY2xpZW50IFNIT1VMRCBzZW5kIGFuIFJTVCBhbmQgdHJ5DQog ICB0byBvcGVuIGEgbmV3IFRDUCBjb25uZWN0aW9uLg0KDQogICBBdCB0aGUgc2VydmVyIGVuZCwg dGhlIHNlcnZlciBTSE9VTEQga2VlcCB0aGUgY29ubmVjdGlvbiBvcGVuLCBhbmQNCiAgIGxldCB0 aGUgY2xpZW50IGNsb3NlIGl0LCB1bmxlc3MgdGhlIHNlcnZlciBoYXMgZGV0ZXJtaW5lZCB0aGF0 IHRoZQ0KICAgY29ubmVjdGlvbiBoYXMgdGltZWQgb3V0IChmb3IgZXhhbXBsZSwgZHVlIHRvIHRo ZSBjbGllbnQNCiAgIGRpc2Nvbm5lY3RpbmcgZnJvbSB0aGUgbmV0d29yaykuICBCaW5kaW5ncyBs ZWFybmVkIGJ5IHRoZSBjbGllbnQgd2lsbA0KICAgcmVtYWluIHZhbGlkIGluIGludGVydmVuaW5n IE5BVHMgb25seSB3aGlsZSB0aGUgY29ubmVjdGlvbiByZW1haW5zDQogICBvcGVuLiAgT25seSB0 aGUgY2xpZW50IGtub3dzIGhvdyBsb25nIGl0IG5lZWRzIHRoZSBiaW5kaW5nLiAgVGhlDQogICBz ZXJ2ZXIgU0hPVUxEIE5PVCBjbG9zZSBhIGNvbm5lY3Rpb24gaWYgYSByZXF1ZXN0IHdhcyByZWNl aXZlZCBvdmVyDQogICB0aGF0IGNvbm5lY3Rpb24gZm9yIHdoaWNoIGEgcmVzcG9uc2Ugd2FzIG5v dCBzZW50LiAgQSBzZXJ2ZXIgTVVTVCBOT1QNCiAgIGV2ZXIgb3BlbiBhIGNvbm5lY3Rpb24gYmFj ayB0b3dhcmRzIHRoZSBjbGllbnQgaW4gb3JkZXIgdG8gc2VuZCBhDQogICByZXNwb25zZS4gIFNl cnZlcnMgU0hPVUxEIGZvbGxvdyBiZXN0IHByYWN0aWNlcyByZWdhcmRpbmcgY29ubmVjdGlvbg0K ICAgbWFuYWdlbWVudCBpbiBjYXNlcyBvZiBvdmVybG9hZC4NCg0KNi4yLjMuICBTZW5kaW5nIG92 ZXIgVExTLW92ZXItVENQIG9yIERUTFMtb3Zlci1VRFANCg0KICAgV2hlbiBTVFVOIGlzIHJ1biBi eSBpdHNlbGYgb3ZlciBUTFMtb3Zlci1UQ1Agb3IgRFRMUy1vdmVyLVVEUCwgdGhlDQogICBUTFNf REhFX1JTQV9XSVRIX0FFU18xMjhfR0NNX1NIQTI1NiBhbmQNCiAgIFRMU19FQ0RIRV9SU0FfV0lU SF9BRVNfMTI4X0dDTV9TSEEyNTYgY2lwaGVyIHN1aXRlcyBNVVNUIGJlDQogICBpbXBsZW1lbnRl ZCBhbmQgb3RoZXIgY2lwaGVyIHN1aXRlcyBNQVkgYmUgaW1wbGVtZW50ZWQuICBQZXJmZWN0DQog ICBGb3J3YXJkIFNlY3JlY3kgKFBGUykgY2lwaGVyIHN1aXRlcyBNVVNUIGJlIHByZWZlcnJlZCBv dmVyIG5vbi1QRlMNCiAgIGNpcGhlciBzdWl0ZXMuICBDaXBoZXIgc3VpdGVzIHdpdGgga25vd24g d2Vha25lc3Nlcywgc3VjaCBhcyB0aG9zZQ0KICAgYmFzZWQgb24gKHNpbmdsZSkgREVTIGFuZCBS QzQsIE1VU1QgTk9UIGJlIHVzZWQuICBJbXBsZW1lbnRhdGlvbnMNCiAgIE1VU1QgZGlzYWJsZSBU TFMtbGV2ZWwgY29tcHJlc3Npb24uDQoNCiAgIFRoZXNlIHJlY29tbWVuZGF0aW9ucyBhcmUganVz dCBhIHBhcnQgb2YgdGhlIHJlY29tbWVuZGF0aW9ucyBpbg0KICAgW0JDUDE5NV0gdGhhdCBpbXBs ZW1lbnRhdGlvbnMgYW5kIGRlcGxveW1lbnRzIG9mIGEgU1RVTiBVc2FnZSB1c2luZw0KICAgVExT IG9yIERUTFMgTVVTVCBmb2xsb3cuDQoNCiAgIFdoZW4gaXQgcmVjZWl2ZXMgdGhlIFRMUyBDZXJ0 aWZpY2F0ZSBtZXNzYWdlLCB0aGUgY2xpZW50IE1VU1QgdmVyaWZ5DQogICB0aGUgY2VydGlmaWNh dGUgYW5kIGluc3BlY3QgdGhlIHNpdGUgaWRlbnRpZmllZCBieSB0aGUgY2VydGlmaWNhdGUuDQog ICBJZiB0aGUgY2VydGlmaWNhdGUgaXMgaW52YWxpZCBvciByZXZva2VkLCBvciBpZiBpdCBkb2Vz IG5vdCBpZGVudGlmeQ0KICAgdGhlIGFwcHJvcHJpYXRlIHBhcnR5LCB0aGUgY2xpZW50IE1VU1Qg Tk9UIHNlbmQgdGhlIFNUVU4gbWVzc2FnZSBvcg0KICAgb3RoZXJ3aXNlIHByb2NlZWQgd2l0aCB0 aGUgU1RVTiB0cmFuc2FjdGlvbi4gIFRoZSBjbGllbnQgTVVTVCB2ZXJpZnkNCiAgIHRoZSBpZGVu dGl0eSBvZiB0aGUgc2VydmVyLiAgVG8gZG8gdGhhdCwgaXQgZm9sbG93cyB0aGUNCiAgIGlkZW50 aWZpY2F0aW9uIHByb2NlZHVyZXMgZGVmaW5lZCBpbiBbUkZDNjEyNV0sIHdpdGggYSBjZXJ0aWZp Y2F0ZQ0KICAgY29udGFpbmluZyBhbiBpZGVudGlmaWVyIG9mIHR5cGUgRE5TLUlEIG9yIENOLUlE LCBvcHRpb25hbGx5IHdpdGggYQ0KDQoNCg0KDQpQZXRpdC1IdWd1ZW5pbiwgZXQgYWwuIEV4cGly ZXMgU2VwdGVtYmVyIDIyLCAyMDE5ICAgICAgICAgICAgICBbUGFnZSAxNl0NCgwNCkludGVybmV0 LURyYWZ0IFNlc3Npb24gVHJhdmVyc2FsIFV0aWxpdGllcyBmb3IgTkFUIChTVFVOKSAgICAgTWFy Y2ggMjAxOQ0KDQoNCiAgIHdpbGRjYXJkIGNoYXJhY3RlciBhcyBsZWZ0bW9zdCBsYWJlbCwgYnV0 IG5vdCBvZiB0eXBlIFNSVi1JRCBvciBVUkktDQogICBJRC4NCg0KICAgV2hlbiBTVFVOIGlzIHJ1 biBtdWx0aXBsZXhlZCB3aXRoIG90aGVyIHByb3RvY29scyBvdmVyIGEgVExTLW92ZXItVENQDQog ICBjb25uZWN0aW9uIG9yIGEgRFRMUy1vdmVyLVVEUCBhc3NvY2lhdGlvbiwgdGhlIG1hbmRhdG9y eSBjaXBoZXJzdWl0ZXMNCiAgIGFuZCBUTFMgaGFuZGxpbmcgcHJvY2VkdXJlcyBvcGVyYXRlIGFz IGRlZmluZWQgYnkgdGhvc2UgcHJvdG9jb2xzLg0KDQo2LjMuICBSZWNlaXZpbmcgYSBTVFVOIE1l c3NhZ2UNCg0KICAgVGhpcyBzZWN0aW9uIHNwZWNpZmllcyB0aGUgcHJvY2Vzc2luZyBvZiBhIFNU VU4gbWVzc2FnZS4gIFRoZQ0KICAgcHJvY2Vzc2luZyBzcGVjaWZpZWQgaGVyZSBpcyBmb3IgU1RV TiBtZXNzYWdlcyBhcyBkZWZpbmVkIGluIHRoaXMNCiAgIHNwZWNpZmljYXRpb247IGFkZGl0aW9u YWwgcnVsZXMgZm9yIGJhY2t3YXJkcyBjb21wYXRpYmlsaXR5IGFyZQ0KICAgZGVmaW5lZCBpbiBT ZWN0aW9uIDExLiAgVGhvc2UgYWRkaXRpb25hbCBwcm9jZWR1cmVzIGFyZSBvcHRpb25hbCwgYW5k DQogICB1c2FnZXMgY2FuIGVsZWN0IHRvIHV0aWxpemUgdGhlbS4gIEZpcnN0LCBhIHNldCBvZiBw cm9jZXNzaW5nDQogICBvcGVyYXRpb25zIGlzIGFwcGxpZWQgdGhhdCBpcyBpbmRlcGVuZGVudCBv ZiB0aGUgY2xhc3MuICBUaGlzIGlzDQogICBmb2xsb3dlZCBieSBjbGFzcy1zcGVjaWZpYyBwcm9j ZXNzaW5nLCBkZXNjcmliZWQgaW4gdGhlIHN1YnNlY3Rpb25zDQogICB0aGF0IGZvbGxvdy4NCg0K ICAgV2hlbiBhIFNUVU4gYWdlbnQgcmVjZWl2ZXMgYSBTVFVOIG1lc3NhZ2UsIGl0IGZpcnN0IGNo ZWNrcyB0aGF0IHRoZQ0KICAgbWVzc2FnZSBvYmV5cyB0aGUgcnVsZXMgb2YgU2VjdGlvbiA1LiAg SXQgY2hlY2tzIHRoYXQgdGhlIGZpcnN0IHR3bw0KICAgYml0cyBhcmUgMCwgdGhhdCB0aGUgbWFn aWMgY29va2llIGZpZWxkIGhhcyB0aGUgY29ycmVjdCB2YWx1ZSwgdGhhdA0KICAgdGhlIG1lc3Nh Z2UgbGVuZ3RoIGlzIHNlbnNpYmxlLCBhbmQgdGhhdCB0aGUgbWV0aG9kIHZhbHVlIGlzIGENCiAg IHN1cHBvcnRlZCBtZXRob2QuICBJdCBjaGVja3MgdGhhdCB0aGUgbWVzc2FnZSBjbGFzcyBpcyBh bGxvd2VkIGZvcg0KICAgdGhlIHBhcnRpY3VsYXIgbWV0aG9kLiAgSWYgdGhlIG1lc3NhZ2UgY2xh c3MgaXMgIlN1Y2Nlc3MgUmVzcG9uc2UiIG9yDQogICAiRXJyb3IgUmVzcG9uc2UiLCB0aGUgYWdl bnQgY2hlY2tzIHRoYXQgdGhlIHRyYW5zYWN0aW9uIElEIG1hdGNoZXMgYQ0KICAgdHJhbnNhY3Rp b24gdGhhdCBpcyBzdGlsbCBpbiBwcm9ncmVzcy4gIElmIHRoZSBGSU5HRVJQUklOVCBleHRlbnNp b24NCiAgIGlzIGJlaW5nIHVzZWQsIHRoZSBhZ2VudCBjaGVja3MgdGhhdCB0aGUgRklOR0VSUFJJ TlQgYXR0cmlidXRlIGlzDQogICBwcmVzZW50IGFuZCBjb250YWlucyB0aGUgY29ycmVjdCB2YWx1 ZS4gIElmIGFueSBlcnJvcnMgYXJlIGRldGVjdGVkLA0KICAgdGhlIG1lc3NhZ2UgaXMgc2lsZW50 bHkgZGlzY2FyZGVkLiAgSW4gdGhlIGNhc2Ugd2hlbiBTVFVOIGlzIGJlaW5nDQogICBtdWx0aXBs ZXhlZCB3aXRoIGFub3RoZXIgcHJvdG9jb2wsIGFuIGVycm9yIG1heSBpbmRpY2F0ZSB0aGF0IHRo aXMgaXMNCiAgIG5vdCByZWFsbHkgYSBTVFVOIG1lc3NhZ2U7IGluIHRoaXMgY2FzZSwgdGhlIGFn ZW50IHNob3VsZCB0cnkgdG8NCiAgIHBhcnNlIHRoZSBtZXNzYWdlIGFzIGEgZGlmZmVyZW50IHBy b3RvY29sLg0KDQogICBUaGUgU1RVTiBhZ2VudCB0aGVuIGRvZXMgYW55IGNoZWNrcyB0aGF0IGFy ZSByZXF1aXJlZCBieSBhDQogICBhdXRoZW50aWNhdGlvbiBtZWNoYW5pc20gdGhhdCB0aGUgdXNh Z2UgaGFzIHNwZWNpZmllZCAoc2VlDQogICBTZWN0aW9uIDkpLg0KDQogICBPbmNlIHRoZSBhdXRo ZW50aWNhdGlvbiBjaGVja3MgYXJlIGRvbmUsIHRoZSBTVFVOIGFnZW50IGNoZWNrcyBmb3INCiAg IHVua25vd24gYXR0cmlidXRlcyBhbmQga25vd24tYnV0LXVuZXhwZWN0ZWQgYXR0cmlidXRlcyBp biB0aGUNCiAgIG1lc3NhZ2UuICBVbmtub3duIGNvbXByZWhlbnNpb24tb3B0aW9uYWwgYXR0cmli dXRlcyBNVVNUIGJlIGlnbm9yZWQNCiAgIGJ5IHRoZSBhZ2VudC4gIEtub3duLWJ1dC11bmV4cGVj dGVkIGF0dHJpYnV0ZXMgU0hPVUxEIGJlIGlnbm9yZWQgYnkNCiAgIHRoZSBhZ2VudC4gIFVua25v d24gY29tcHJlaGVuc2lvbi1yZXF1aXJlZCBhdHRyaWJ1dGVzIGNhdXNlDQogICBwcm9jZXNzaW5n IHRoYXQgZGVwZW5kcyBvbiB0aGUgbWVzc2FnZSBjbGFzcyBhbmQgaXMgZGVzY3JpYmVkIGJlbG93 Lg0KDQogICBBdCB0aGlzIHBvaW50LCBmdXJ0aGVyIHByb2Nlc3NpbmcgZGVwZW5kcyBvbiB0aGUg bWVzc2FnZSBjbGFzcyBvZiB0aGUNCiAgIHJlcXVlc3QuDQoNCg0KDQoNCg0KUGV0aXQtSHVndWVu aW4sIGV0IGFsLiBFeHBpcmVzIFNlcHRlbWJlciAyMiwgMjAxOSAgICAgICAgICAgICAgW1BhZ2Ug MTddDQoMDQpJbnRlcm5ldC1EcmFmdCBTZXNzaW9uIFRyYXZlcnNhbCBVdGlsaXRpZXMgZm9yIE5B VCAoU1RVTikgICAgIE1hcmNoIDIwMTkNCg0KDQo2LjMuMS4gIFByb2Nlc3NpbmcgYSBSZXF1ZXN0 DQoNCiAgIElmIHRoZSByZXF1ZXN0IGNvbnRhaW5zIG9uZSBvciBtb3JlIHVua25vd24gY29tcHJl aGVuc2lvbi1yZXF1aXJlZA0KICAgYXR0cmlidXRlcywgdGhlIHNlcnZlciByZXBsaWVzIHdpdGgg YW4gZXJyb3IgcmVzcG9uc2Ugd2l0aCBhbiBlcnJvcg0KICAgY29kZSBvZiA0MjAgKFVua25vd24g QXR0cmlidXRlKSwgYW5kIGluY2x1ZGVzIGFuIFVOS05PV04tQVRUUklCVVRFUw0KICAgYXR0cmli dXRlIGluIHRoZSByZXNwb25zZSB0aGF0IGxpc3RzIHRoZSB1bmtub3duIGNvbXByZWhlbnNpb24t DQogICByZXF1aXJlZCBhdHRyaWJ1dGVzLg0KDQogICBPdGhlcndpc2UgdGhlIHNlcnZlciB0aGVu IGRvZXMgYW55IGFkZGl0aW9uYWwgY2hlY2tpbmcgdGhhdCB0aGUNCiAgIG1ldGhvZCBvciB0aGUg c3BlY2lmaWMgdXNhZ2UgcmVxdWlyZXMuICBJZiBhbGwgdGhlIGNoZWNrcyBzdWNjZWVkLA0KICAg dGhlIHNlcnZlciBmb3JtdWxhdGVzIGEgc3VjY2VzcyByZXNwb25zZSBhcyBkZXNjcmliZWQgYmVs b3cuDQoNCiAgIFdoZW4gcnVuIG92ZXIgVURQIG9yIERUTFMtb3Zlci1VRFAsIGEgcmVxdWVzdCBy ZWNlaXZlZCBieSB0aGUgc2VydmVyDQogICBjb3VsZCBiZSB0aGUgZmlyc3QgcmVxdWVzdCBvZiBh IHRyYW5zYWN0aW9uLCBvciBhIHJldHJhbnNtaXNzaW9uLg0KICAgVGhlIHNlcnZlciBNVVNUIHJl c3BvbmQgdG8gcmV0cmFuc21pc3Npb25zIHN1Y2ggdGhhdCB0aGUgZm9sbG93aW5nDQogICBwcm9w ZXJ0eSBpcyBwcmVzZXJ2ZWQ6IGlmIHRoZSBjbGllbnQgcmVjZWl2ZXMgdGhlIHJlc3BvbnNlIHRv IHRoZQ0KICAgcmV0cmFuc21pc3Npb24gYW5kIG5vdCB0aGUgcmVzcG9uc2UgdGhhdCB3YXMgc2Vu dCB0byB0aGUgb3JpZ2luYWwNCiAgIHJlcXVlc3QsIHRoZSBvdmVyYWxsIHN0YXRlIG9uIHRoZSBj bGllbnQgYW5kIHNlcnZlciBpcyBpZGVudGljYWwgdG8NCiAgIHRoZSBjYXNlIHdoZXJlIG9ubHkg dGhlIHJlc3BvbnNlIHRvIHRoZSBvcmlnaW5hbCByZXRyYW5zbWlzc2lvbiBpcw0KICAgcmVjZWl2 ZWQsIG9yIHdoZXJlIGJvdGggcmVzcG9uc2VzIGFyZSByZWNlaXZlZCAoaW4gd2hpY2ggY2FzZSB0 aGUNCiAgIGNsaWVudCB3aWxsIHVzZSB0aGUgZmlyc3QpLiAgVGhlIGVhc2llc3Qgd2F5IHRvIG1l ZXQgdGhpcyByZXF1aXJlbWVudA0KICAgaXMgZm9yIHRoZSBzZXJ2ZXIgdG8gcmVtZW1iZXIgYWxs IHRyYW5zYWN0aW9uIElEcyByZWNlaXZlZCBvdmVyIFVEUA0KICAgb3IgRFRMUy1vdmVyLVVEUCBh bmQgdGhlaXIgY29ycmVzcG9uZGluZyByZXNwb25zZXMgaW4gdGhlIGxhc3QgNDANCiAgIHNlY29u ZHMuICBIb3dldmVyLCB0aGlzIHJlcXVpcmVzIHRoZSBzZXJ2ZXIgdG8gaG9sZCBzdGF0ZSwgYW5k IHdpbGwNCiAgIGJlIGluYXBwcm9wcmlhdGUgZm9yIGFueSByZXF1ZXN0cyB3aGljaCBhcmUgbm90 IGF1dGhlbnRpY2F0ZWQuDQogICBBbm90aGVyIHdheSBpcyB0byByZXByb2Nlc3MgdGhlIHJlcXVl c3QgYW5kIHJlY29tcHV0ZSB0aGUgcmVzcG9uc2UuDQogICBUaGUgbGF0dGVyIHRlY2huaXF1ZSBN VVNUIG9ubHkgYmUgYXBwbGllZCB0byByZXF1ZXN0cyB0aGF0IGFyZQ0KICAgaWRlbXBvdGVudCAo YSByZXF1ZXN0IGlzIGNvbnNpZGVyZWQgaWRlbXBvdGVudCB3aGVuIHRoZSBzYW1lIHJlcXVlc3QN CiAgIGNhbiBiZSBzYWZlbHkgcmVwZWF0ZWQgd2l0aG91dCBpbXBhY3RpbmcgdGhlIG92ZXJhbGwg c3RhdGUgb2YgdGhlDQogICBzeXN0ZW0pIGFuZCByZXN1bHQgaW4gdGhlIHNhbWUgc3VjY2VzcyBy ZXNwb25zZSBmb3IgdGhlIHNhbWUgcmVxdWVzdC4NCiAgIFRoZSBCaW5kaW5nIG1ldGhvZCBpcyBj b25zaWRlcmVkIHRvIGJlIGlkZW1wb3RlbnQuICBOb3RlIHRoYXQgdGhlcmUNCiAgIGFyZSBjZXJ0 YWluIHJhcmUgbmV0d29yayBldmVudHMgdGhhdCBjb3VsZCBjYXVzZSB0aGUgcmVmbGV4aXZlDQog ICB0cmFuc3BvcnQgYWRkcmVzcyB2YWx1ZSB0byBjaGFuZ2UsIHJlc3VsdGluZyBpbiBhIGRpZmZl cmVudCBtYXBwZWQNCiAgIGFkZHJlc3MgaW4gZGlmZmVyZW50IHN1Y2Nlc3MgcmVzcG9uc2VzLiAg RXh0ZW5zaW9ucyB0byBTVFVOIE1VU1QNCiAgIGRpc2N1c3MgdGhlIGltcGxpY2F0aW9ucyBvZiBy ZXF1ZXN0IHJldHJhbnNtaXNzaW9ucyBvbiBzZXJ2ZXJzIHRoYXQNCiAgIGRvIG5vdCBzdG9yZSB0 cmFuc2FjdGlvbiBzdGF0ZS4NCg0KNi4zLjEuMS4gIEZvcm1pbmcgYSBTdWNjZXNzIG9yIEVycm9y IFJlc3BvbnNlDQoNCiAgIFdoZW4gZm9ybWluZyB0aGUgcmVzcG9uc2UgKHN1Y2Nlc3Mgb3IgZXJy b3IpLCB0aGUgc2VydmVyIGZvbGxvd3MgdGhlDQogICBydWxlcyBvZiBTZWN0aW9uIDYuICBUaGUg bWV0aG9kIG9mIHRoZSByZXNwb25zZSBpcyB0aGUgc2FtZSBhcyB0aGF0DQogICBvZiB0aGUgcmVx dWVzdCwgYW5kIHRoZSBtZXNzYWdlIGNsYXNzIGlzIGVpdGhlciAiU3VjY2VzcyBSZXNwb25zZSIg b3INCiAgICJFcnJvciBSZXNwb25zZSIuDQoNCiAgIEZvciBhbiBlcnJvciByZXNwb25zZSwgdGhl IHNlcnZlciBNVVNUIGFkZCBhbiBFUlJPUi1DT0RFIGF0dHJpYnV0ZQ0KICAgY29udGFpbmluZyB0 aGUgZXJyb3IgY29kZSBzcGVjaWZpZWQgaW4gdGhlIHByb2Nlc3NpbmcgYWJvdmUuICBUaGUNCiAg IHJlYXNvbiBwaHJhc2UgaXMgbm90IGZpeGVkLCBidXQgU0hPVUxEIGJlIHNvbWV0aGluZyBzdWl0 YWJsZSBmb3IgdGhlDQogICBlcnJvciBjb2RlLiAgRm9yIGNlcnRhaW4gZXJyb3JzLCBhZGRpdGlv bmFsIGF0dHJpYnV0ZXMgYXJlIGFkZGVkIHRvDQoNCg0KDQpQZXRpdC1IdWd1ZW5pbiwgZXQgYWwu IEV4cGlyZXMgU2VwdGVtYmVyIDIyLCAyMDE5ICAgICAgICAgICAgICBbUGFnZSAxOF0NCgwNCklu dGVybmV0LURyYWZ0IFNlc3Npb24gVHJhdmVyc2FsIFV0aWxpdGllcyBmb3IgTkFUIChTVFVOKSAg ICAgTWFyY2ggMjAxOQ0KDQoNCiAgIHRoZSBtZXNzYWdlLiAgVGhlc2UgYXR0cmlidXRlcyBhcmUg c3BlbGxlZCBvdXQgaW4gdGhlIGRlc2NyaXB0aW9uDQogICB3aGVyZSB0aGUgZXJyb3IgY29kZSBp cyBzcGVjaWZpZWQuICBGb3IgZXhhbXBsZSwgZm9yIGFuIGVycm9yIGNvZGUgb2YNCiAgIDQyMCAo VW5rbm93biBBdHRyaWJ1dGUpLCB0aGUgc2VydmVyIE1VU1QgaW5jbHVkZSBhbiBVTktOT1dOLQ0K ICAgQVRUUklCVVRFUyBhdHRyaWJ1dGUuICBDZXJ0YWluIGF1dGhlbnRpY2F0aW9uIGVycm9ycyBh bHNvIGNhdXNlDQogICBhdHRyaWJ1dGVzIHRvIGJlIGFkZGVkIChzZWUgU2VjdGlvbiA5KS4gIEV4 dGVuc2lvbnMgbWF5IGRlZmluZSBvdGhlcg0KICAgZXJyb3JzIGFuZC9vciBhZGRpdGlvbmFsIGF0 dHJpYnV0ZXMgdG8gYWRkIGluIGVycm9yIGNhc2VzLg0KDQogICBJZiB0aGUgc2VydmVyIGF1dGhl bnRpY2F0ZWQgdGhlIHJlcXVlc3QgdXNpbmcgYW4gYXV0aGVudGljYXRpb24NCiAgIG1lY2hhbmlz bSwgdGhlbiB0aGUgc2VydmVyIFNIT1VMRCBhZGQgdGhlIGFwcHJvcHJpYXRlIGF1dGhlbnRpY2F0 aW9uDQogICBhdHRyaWJ1dGVzIHRvIHRoZSByZXNwb25zZSAoc2VlIFNlY3Rpb24gOSkuDQoNCiAg IFRoZSBzZXJ2ZXIgYWxzbyBhZGRzIGFueSBhdHRyaWJ1dGVzIHJlcXVpcmVkIGJ5IHRoZSBzcGVj aWZpYyBtZXRob2QNCiAgIG9yIHVzYWdlLiAgSW4gYWRkaXRpb24sIHRoZSBzZXJ2ZXIgU0hPVUxE IGFkZCBhIFNPRlRXQVJFIGF0dHJpYnV0ZSB0bw0KICAgdGhlIG1lc3NhZ2UuDQoNCiAgIEZvciB0 aGUgQmluZGluZyBtZXRob2QsIG5vIGFkZGl0aW9uYWwgY2hlY2tpbmcgaXMgcmVxdWlyZWQgdW5s ZXNzIHRoZQ0KICAgdXNhZ2Ugc3BlY2lmaWVzIG90aGVyd2lzZS4gIFdoZW4gZm9ybWluZyB0aGUg c3VjY2VzcyByZXNwb25zZSwgdGhlDQogICBzZXJ2ZXIgYWRkcyBhIFhPUi1NQVBQRUQtQUREUkVT UyBhdHRyaWJ1dGUgdG8gdGhlIHJlc3BvbnNlLCB3aGVyZSB0aGUNCiAgIGNvbnRlbnRzIG9mIHRo ZSBhdHRyaWJ1dGUgYXJlIHRoZSBzb3VyY2UgdHJhbnNwb3J0IGFkZHJlc3Mgb2YgdGhlDQogICBy ZXF1ZXN0IG1lc3NhZ2UuICBGb3IgVURQIG9yIERUTFMtb3Zlci1VRFAgdGhpcyBpcyB0aGUgc291 cmNlIElQDQogICBhZGRyZXNzIGFuZCBzb3VyY2UgVURQIHBvcnQgb2YgdGhlIHJlcXVlc3QgbWVz c2FnZS4gIEZvciBUQ1AgYW5kIFRMUy0NCiAgIG92ZXItVENQLCB0aGlzIGlzIHRoZSBzb3VyY2Ug SVAgYWRkcmVzcyBhbmQgc291cmNlIFRDUCBwb3J0IG9mIHRoZQ0KICAgVENQIGNvbm5lY3Rpb24g YXMgc2VlbiBieSB0aGUgc2VydmVyLg0KDQo2LjMuMS4yLiAgU2VuZGluZyB0aGUgU3VjY2VzcyBv ciBFcnJvciBSZXNwb25zZQ0KDQogICBUaGUgcmVzcG9uc2UgKHN1Y2Nlc3Mgb3IgZXJyb3IpIGlz IHNlbnQgb3ZlciB0aGUgc2FtZSB0cmFuc3BvcnQgYXMNCiAgIHRoZSByZXF1ZXN0IHdhcyByZWNl aXZlZCBvbi4gIElmIHRoZSByZXF1ZXN0IHdhcyByZWNlaXZlZCBvdmVyIFVEUCBvcg0KICAgRFRM Uy1vdmVyLVVEUCB0aGUgZGVzdGluYXRpb24gSVAgYWRkcmVzcyBhbmQgcG9ydCBvZiB0aGUgcmVz cG9uc2UgYXJlDQogICB0aGUgc291cmNlIElQIGFkZHJlc3MgYW5kIHBvcnQgb2YgdGhlIHJlY2Vp dmVkIHJlcXVlc3QgbWVzc2FnZSwgYW5kDQogICB0aGUgc291cmNlIElQIGFkZHJlc3MgYW5kIHBv cnQgb2YgdGhlIHJlc3BvbnNlIGFyZSBlcXVhbCB0byB0aGUNCiAgIGRlc3RpbmF0aW9uIElQIGFk ZHJlc3MgYW5kIHBvcnQgb2YgdGhlIHJlY2VpdmVkIHJlcXVlc3QgbWVzc2FnZS4gIElmDQogICB0 aGUgcmVxdWVzdCB3YXMgcmVjZWl2ZWQgb3ZlciBUQ1Agb3IgVExTLW92ZXItVENQLCB0aGUgcmVz cG9uc2UgaXMNCiAgIHNlbnQgYmFjayBvbiB0aGUgc2FtZSBUQ1AgY29ubmVjdGlvbiBhcyB0aGUg cmVxdWVzdCB3YXMgcmVjZWl2ZWQgb24uDQoNCiAgIFRoZSBzZXJ2ZXIgaXMgYWxsb3dlZCB0byBz ZW5kIHJlc3BvbnNlcyBpbiBhIGRpZmZlcmVudCBvcmRlciB0aGFuIGl0DQogICByZWNlaXZlZCB0 aGUgcmVxdWVzdHMuDQoNCjYuMy4yLiAgUHJvY2Vzc2luZyBhbiBJbmRpY2F0aW9uDQoNCiAgIElm IHRoZSBpbmRpY2F0aW9uIGNvbnRhaW5zIHVua25vd24gY29tcHJlaGVuc2lvbi1yZXF1aXJlZCBh dHRyaWJ1dGVzLA0KICAgdGhlIGluZGljYXRpb24gaXMgZGlzY2FyZGVkIGFuZCBwcm9jZXNzaW5n IGNlYXNlcy4NCg0KICAgT3RoZXJ3aXNlIHRoZSBhZ2VudCB0aGVuIGRvZXMgYW55IGFkZGl0aW9u YWwgY2hlY2tpbmcgdGhhdCB0aGUgbWV0aG9kDQogICBvciB0aGUgc3BlY2lmaWMgdXNhZ2UgcmVx dWlyZXMuICBJZiBhbGwgdGhlIGNoZWNrcyBzdWNjZWVkLCB0aGUgYWdlbnQNCiAgIHRoZW4gcHJv Y2Vzc2VzIHRoZSBpbmRpY2F0aW9uLiAgTm8gcmVzcG9uc2UgaXMgZ2VuZXJhdGVkIGZvciBhbg0K ICAgaW5kaWNhdGlvbi4NCg0KDQoNCg0KUGV0aXQtSHVndWVuaW4sIGV0IGFsLiBFeHBpcmVzIFNl cHRlbWJlciAyMiwgMjAxOSAgICAgICAgICAgICAgW1BhZ2UgMTldDQoMDQpJbnRlcm5ldC1EcmFm dCBTZXNzaW9uIFRyYXZlcnNhbCBVdGlsaXRpZXMgZm9yIE5BVCAoU1RVTikgICAgIE1hcmNoIDIw MTkNCg0KDQogICBGb3IgdGhlIEJpbmRpbmcgbWV0aG9kLCBubyBhZGRpdGlvbmFsIGNoZWNraW5n IG9yIHByb2Nlc3NpbmcgaXMNCiAgIHJlcXVpcmVkLCB1bmxlc3MgdGhlIHVzYWdlIHNwZWNpZmll cyBvdGhlcndpc2UuICBUaGUgbWVyZSByZWNlaXB0IG9mDQogICB0aGUgbWVzc2FnZSBieSB0aGUg YWdlbnQgaGFzIHJlZnJlc2hlZCB0aGUgImJpbmRpbmdzIiBpbiB0aGUNCiAgIGludGVydmVuaW5n IE5BVHMuDQoNCiAgIFNpbmNlIGluZGljYXRpb25zIGFyZSBub3QgcmUtdHJhbnNtaXR0ZWQgb3Zl ciBVRFAgb3IgRFRMUy1vdmVyLVVEUA0KICAgKHVubGlrZSByZXF1ZXN0cyksIHRoZXJlIGlzIG5v IG5lZWQgdG8gaGFuZGxlIHJlLXRyYW5zbWlzc2lvbnMgb2YNCiAgIGluZGljYXRpb25zIGF0IHRo ZSBzZW5kaW5nIGFnZW50Lg0KDQo2LjMuMy4gIFByb2Nlc3NpbmcgYSBTdWNjZXNzIFJlc3BvbnNl DQoNCiAgIElmIHRoZSBzdWNjZXNzIHJlc3BvbnNlIGNvbnRhaW5zIHVua25vd24gY29tcHJlaGVu c2lvbi1yZXF1aXJlZA0KICAgYXR0cmlidXRlcywgdGhlIHJlc3BvbnNlIGlzIGRpc2NhcmRlZCBh bmQgdGhlIHRyYW5zYWN0aW9uIGlzDQogICBjb25zaWRlcmVkIHRvIGhhdmUgZmFpbGVkLg0KDQog ICBPdGhlcndpc2UgdGhlIGNsaWVudCB0aGVuIGRvZXMgYW55IGFkZGl0aW9uYWwgY2hlY2tpbmcg dGhhdCB0aGUNCiAgIG1ldGhvZCBvciB0aGUgc3BlY2lmaWMgdXNhZ2UgcmVxdWlyZXMuICBJZiBh bGwgdGhlIGNoZWNrcyBzdWNjZWVkLA0KICAgdGhlIGNsaWVudCB0aGVuIHByb2Nlc3NlcyB0aGUg c3VjY2VzcyByZXNwb25zZS4NCg0KICAgRm9yIHRoZSBCaW5kaW5nIG1ldGhvZCwgdGhlIGNsaWVu dCBjaGVja3MgdGhhdCB0aGUgWE9SLU1BUFBFRC1BRERSRVNTDQogICBhdHRyaWJ1dGUgaXMgcHJl c2VudCBpbiB0aGUgcmVzcG9uc2UuICBUaGUgY2xpZW50IGNoZWNrcyB0aGUgYWRkcmVzcw0KICAg ZmFtaWx5IHNwZWNpZmllZC4gIElmIGl0IGlzIGFuIHVuc3VwcG9ydGVkIGFkZHJlc3MgZmFtaWx5 LCB0aGUNCiAgIGF0dHJpYnV0ZSBTSE9VTEQgYmUgaWdub3JlZC4gIElmIGl0IGlzIGFuIHVuZXhw ZWN0ZWQgYnV0IHN1cHBvcnRlZA0KICAgYWRkcmVzcyBmYW1pbHkgKGZvciBleGFtcGxlLCB0aGUg QmluZGluZyB0cmFuc2FjdGlvbiB3YXMgc2VudCBvdmVyDQogICBJUHY0LCBidXQgdGhlIGFkZHJl c3MgZmFtaWx5IHNwZWNpZmllZCBpcyBJUHY2KSwgdGhlbiB0aGUgY2xpZW50IE1BWQ0KICAgYWNj ZXB0IGFuZCB1c2UgdGhlIHZhbHVlLg0KDQo2LjMuNC4gIFByb2Nlc3NpbmcgYW4gRXJyb3IgUmVz cG9uc2UNCg0KICAgSWYgdGhlIGVycm9yIHJlc3BvbnNlIGNvbnRhaW5zIHVua25vd24gY29tcHJl aGVuc2lvbi1yZXF1aXJlZA0KICAgYXR0cmlidXRlcywgb3IgaWYgdGhlIGVycm9yIHJlc3BvbnNl IGRvZXMgbm90IGNvbnRhaW4gYW4gRVJST1ItQ09ERQ0KICAgYXR0cmlidXRlLCB0aGVuIHRoZSB0 cmFuc2FjdGlvbiBpcyBzaW1wbHkgY29uc2lkZXJlZCB0byBoYXZlIGZhaWxlZC4NCg0KICAgT3Ro ZXJ3aXNlIHRoZSBjbGllbnQgdGhlbiBkb2VzIGFueSBwcm9jZXNzaW5nIHNwZWNpZmllZCBieSB0 aGUNCiAgIGF1dGhlbnRpY2F0aW9uIG1lY2hhbmlzbSAoc2VlIFNlY3Rpb24gOSkuICBUaGlzIG1h eSByZXN1bHQgaW4gYSBuZXcNCiAgIHRyYW5zYWN0aW9uIGF0dGVtcHQuDQoNCiAgIFRoZSBwcm9j ZXNzaW5nIGF0IHRoaXMgcG9pbnQgZGVwZW5kcyBvbiB0aGUgZXJyb3IgY29kZSwgdGhlIG1ldGhv ZCwNCiAgIGFuZCB0aGUgdXNhZ2U7IHRoZSBmb2xsb3dpbmcgYXJlIHRoZSBkZWZhdWx0IHJ1bGVz Og0KDQogICBvICBJZiB0aGUgZXJyb3IgY29kZSBpcyAzMDAgdGhyb3VnaCAzOTksIHRoZSBjbGll bnQgU0hPVUxEIGNvbnNpZGVyDQogICAgICB0aGUgdHJhbnNhY3Rpb24gYXMgZmFpbGVkIHVubGVz cyB0aGUgQUxURVJOQVRFLVNFUlZFUiBleHRlbnNpb24NCiAgICAgIChTZWN0aW9uIDEwKSBpcyBi ZWluZyB1c2VkLg0KDQogICBvICBJZiB0aGUgZXJyb3IgY29kZSBpcyA0MDAgdGhyb3VnaCA0OTks IHRoZSBjbGllbnQgZGVjbGFyZXMgdGhlDQogICAgICB0cmFuc2FjdGlvbiBmYWlsZWQ7IGluIHRo ZSBjYXNlIG9mIDQyMCAoVW5rbm93biBBdHRyaWJ1dGUpLCB0aGUNCiAgICAgIHJlc3BvbnNlIHNo b3VsZCBjb250YWluIGEgVU5LTk9XTi1BVFRSSUJVVEVTIGF0dHJpYnV0ZSB0aGF0IGdpdmVzDQog ICAgICBhZGRpdGlvbmFsIGluZm9ybWF0aW9uLg0KDQoNCg0KUGV0aXQtSHVndWVuaW4sIGV0IGFs LiBFeHBpcmVzIFNlcHRlbWJlciAyMiwgMjAxOSAgICAgICAgICAgICAgW1BhZ2UgMjBdDQoMDQpJ bnRlcm5ldC1EcmFmdCBTZXNzaW9uIFRyYXZlcnNhbCBVdGlsaXRpZXMgZm9yIE5BVCAoU1RVTikg ICAgIE1hcmNoIDIwMTkNCg0KDQogICBvICBJZiB0aGUgZXJyb3IgY29kZSBpcyA1MDAgdGhyb3Vn aCA1OTksIHRoZSBjbGllbnQgTUFZIHJlc2VuZCB0aGUNCiAgICAgIHJlcXVlc3Q7IGNsaWVudHMg dGhhdCBkbyBzbyBNVVNUIGxpbWl0IHRoZSBudW1iZXIgb2YgdGltZXMgdGhleSBkbw0KICAgICAg dGhpcy4gIFVubGVzcyBhIHNwZWNpZmljIGVycm9yIGNvZGUgc3BlY2lmaWVzIGEgZGlmZmVyZW50 IHZhbHVlLA0KICAgICAgdGhlIG51bWJlciBvZiByZXRyYW5zbWlzc2lvbnMgU0hPVUxEIGJlIGxp bWl0ZWQgdG8gNC4NCg0KICAgQW55IG90aGVyIGVycm9yIGNvZGUgY2F1c2VzIHRoZSBjbGllbnQg dG8gY29uc2lkZXIgdGhlIHRyYW5zYWN0aW9uDQogICBmYWlsZWQuDQoNCjcuICBGSU5HRVJQUklO VCBNZWNoYW5pc20NCg0KICAgVGhpcyBzZWN0aW9uIGRlc2NyaWJlcyBhbiBvcHRpb25hbCBtZWNo YW5pc20gZm9yIFNUVU4gdGhhdCBhaWRzIGluDQogICBkaXN0aW5ndWlzaGluZyBTVFVOIG1lc3Nh Z2VzIGZyb20gcGFja2V0cyBvZiBvdGhlciBwcm90b2NvbHMgd2hlbiB0aGUNCiAgIHR3byBhcmUg bXVsdGlwbGV4ZWQgb24gdGhlIHNhbWUgdHJhbnNwb3J0IGFkZHJlc3MuICBUaGlzIG1lY2hhbmlz bSBpcw0KICAgb3B0aW9uYWwsIGFuZCBhIFNUVU4gdXNhZ2UgbXVzdCBkZXNjcmliZSBpZiBhbmQg d2hlbiBpdCBpcyB1c2VkLiAgVGhlDQogICBGSU5HRVJQUklOVCBtZWNoYW5pc20gaXMgbm90IGJh Y2t3YXJkcyBjb21wYXRpYmxlIHdpdGggUkZDMzQ4OSwgYW5kDQogICBjYW5ub3QgYmUgdXNlZCBp biBlbnZpcm9ubWVudHMgd2hlcmUgc3VjaCBjb21wYXRpYmlsaXR5IGlzIHJlcXVpcmVkLg0KDQog ICBJbiBzb21lIHVzYWdlcywgU1RVTiBtZXNzYWdlcyBhcmUgbXVsdGlwbGV4ZWQgb24gdGhlIHNh bWUgdHJhbnNwb3J0DQogICBhZGRyZXNzIGFzIG90aGVyIHByb3RvY29scywgc3VjaCBhcyB0aGUg UmVhbCBUaW1lIFRyYW5zcG9ydCBQcm90b2NvbA0KICAgKFJUUCkuICBJbiBvcmRlciB0byBhcHBs eSB0aGUgcHJvY2Vzc2luZyBkZXNjcmliZWQgaW4gU2VjdGlvbiA2LCBTVFVODQogICBtZXNzYWdl cyBtdXN0IGZpcnN0IGJlIHNlcGFyYXRlZCBmcm9tIHRoZSBhcHBsaWNhdGlvbiBwYWNrZXRzLg0K DQogICBTZWN0aW9uIDUgZGVzY3JpYmVzIHRocmVlIGZpeGVkIGZpZWxkcyBpbiB0aGUgU1RVTiBo ZWFkZXIgdGhhdCBjYW4gYmUNCiAgIHVzZWQgZm9yIHRoaXMgcHVycG9zZS4gIEhvd2V2ZXIsIGlu IHNvbWUgY2FzZXMsIHRoZXNlIHRocmVlIGZpeGVkDQogICBmaWVsZHMgbWF5IG5vdCBiZSBzdWZm aWNpZW50Lg0KDQogICBXaGVuIHRoZSBGSU5HRVJQUklOVCBleHRlbnNpb24gaXMgdXNlZCwgYW4g YWdlbnQgaW5jbHVkZXMgdGhlDQogICBGSU5HRVJQUklOVCBhdHRyaWJ1dGUgaW4gbWVzc2FnZXMg aXQgc2VuZHMgdG8gYW5vdGhlciBhZ2VudC4NCiAgIFNlY3Rpb24gMTQuNyBkZXNjcmliZXMgdGhl IHBsYWNlbWVudCBhbmQgdmFsdWUgb2YgdGhpcyBhdHRyaWJ1dGUuDQoNCiAgIFdoZW4gdGhlIGFn ZW50IHJlY2VpdmVzIHdoYXQgaXQgYmVsaWV2ZXMgaXMgYSBTVFVOIG1lc3NhZ2UsIHRoZW4sIGlu DQogICBhZGRpdGlvbiB0byBvdGhlciBiYXNpYyBjaGVja3MsIHRoZSBhZ2VudCBhbHNvIGNoZWNr cyB0aGF0IHRoZQ0KICAgbWVzc2FnZSBjb250YWlucyBhIEZJTkdFUlBSSU5UIGF0dHJpYnV0ZSBh bmQgdGhhdCB0aGUgYXR0cmlidXRlDQogICBjb250YWlucyB0aGUgY29ycmVjdCB2YWx1ZS4gIFNl Y3Rpb24gNi4zIGRlc2NyaWJlcyB3aGVuIGluIHRoZQ0KICAgb3ZlcmFsbCBwcm9jZXNzaW5nIG9m IGEgU1RVTiBtZXNzYWdlIHRoZSBGSU5HRVJQUklOVCBjaGVjayBpcw0KICAgcGVyZm9ybWVkLiAg VGhpcyBhZGRpdGlvbmFsIGNoZWNrIGhlbHBzIHRoZSBhZ2VudCBkZXRlY3QgbWVzc2FnZXMgb2YN CiAgIG90aGVyIHByb3RvY29scyB0aGF0IG1pZ2h0IG90aGVyd2lzZSBzZWVtIHRvIGJlIFNUVU4g bWVzc2FnZXMuDQoNCjguICBETlMgRGlzY292ZXJ5IG9mIGEgU2VydmVyDQoNCiAgIFRoaXMgc2Vj dGlvbiBkZXNjcmliZXMgYW4gb3B0aW9uYWwgcHJvY2VkdXJlIGZvciBTVFVOIHRoYXQgYWxsb3dz IGENCiAgIGNsaWVudCB0byB1c2UgRE5TIHRvIGRldGVybWluZSB0aGUgSVAgYWRkcmVzcyBhbmQg cG9ydCBvZiBhIHNlcnZlci4NCiAgIEEgU1RVTiB1c2FnZSBtdXN0IGRlc2NyaWJlIGlmIGFuZCB3 aGVuIHRoaXMgZXh0ZW5zaW9uIGlzIHVzZWQuICBUbw0KICAgdXNlIHRoaXMgcHJvY2VkdXJlLCB0 aGUgY2xpZW50IG11c3Qga25vdyBhIFNUVU4gVVJJIFtSRkM3MDY0XTsgdGhlDQogICB1c2FnZSBt dXN0IGFsc28gZGVzY3JpYmUgaG93IHRoZSBjbGllbnQgb2J0YWlucyB0aGlzIFVSSS4gIEhhcmQt DQogICBjb2RpbmcgYSBTVFVOIFVSSSBpbnRvIHNvZnR3YXJlIGlzIE5PVCBSRUNPTU1FTkRFRCBp biBjYXNlIHRoZSBkb21haW4NCiAgIG5hbWUgaXMgbG9zdCBvciBuZWVkcyB0byBjaGFuZ2UgZm9y IGxlZ2FsIG9yIG90aGVyIHJlYXNvbnMuDQoNCg0KDQoNClBldGl0LUh1Z3VlbmluLCBldCBhbC4g RXhwaXJlcyBTZXB0ZW1iZXIgMjIsIDIwMTkgICAgICAgICAgICAgIFtQYWdlIDIxXQ0KDA0KSW50 ZXJuZXQtRHJhZnQgU2Vzc2lvbiBUcmF2ZXJzYWwgVXRpbGl0aWVzIGZvciBOQVQgKFNUVU4pICAg ICBNYXJjaCAyMDE5DQoNCg0KICAgV2hlbiBhIGNsaWVudCB3aXNoZXMgdG8gbG9jYXRlIGEgU1RV TiBzZXJ2ZXIgb24gdGhlIHB1YmxpYyBJbnRlcm5ldA0KICAgdGhhdCBhY2NlcHRzIEJpbmRpbmcg cmVxdWVzdC9yZXNwb25zZSB0cmFuc2FjdGlvbnMsIHRoZSBTVFVOIFVSSQ0KICAgc2NoZW1lIGlz ICJzdHVuIi4gIFdoZW4gaXQgd2lzaGVzIHRvIGxvY2F0ZSBhIFNUVU4gc2VydmVyIHRoYXQNCiAg IGFjY2VwdHMgQmluZGluZyByZXF1ZXN0L3Jlc3BvbnNlIHRyYW5zYWN0aW9ucyBvdmVyIGEgVExT LCBvciBEVExTDQogICBzZXNzaW9uLCB0aGUgVVJJIHNjaGVtZSBpcyAic3R1bnMiLg0KDQogICBU aGUgc3ludGF4IG9mIHRoZSAic3R1biIgYW5kICJzdHVucyIgVVJJcyBhcmUgZGVmaW5lZCBpbiBT ZWN0aW9uIDMuMQ0KICAgb2YgW1JGQzcwNjRdLiAgU1RVTiB1c2FnZXMgTUFZIGRlZmluZSBhZGRp dGlvbmFsIFVSSSBzY2hlbWVzLg0KDQo4LjEuICBTVFVOIFVSSSBTY2hlbWUgU2VtYW50aWNzDQoN CiAgIElmIHRoZSA8aG9zdD4gcGFydCBvZiBhICJzdHVuIiBVUkkgY29udGFpbnMgYW4gSVAgYWRk cmVzcywgdGhlbiB0aGlzDQogICBJUCBhZGRyZXNzIGlzIHVzZWQgZGlyZWN0bHkgdG8gY29udGFj dCB0aGUgc2VydmVyLiAgQSAic3R1bnMiIFVSSQ0KICAgY29udGFpbmluZyBhbiBJUCBhZGRyZXNz IE1VU1QgYmUgcmVqZWN0ZWQuICBBIGZ1dHVyZSBTVFVOIGV4dGVuc2lvbg0KICAgb3IgdXNhZ2Ug bWF5IHJlbGF4IHRoaXMgcmVxdWlyZW1lbnQgcHJvdmlkZWQgaXQgZGVtb25zdHJhdGVzIGhvdyB0 bw0KICAgYXV0aGVudGljYXRlIHRoZSBTVFVOIHNlcnZlciBhbmQgcHJldmVudCBtYW4gaW4gdGhl IG1pZGRsZSBhdHRhY2tzLg0KDQogICBJZiB0aGUgVVJJIGRvZXMgbm90IGNvbnRhaW4gYW4gSVAg YWRkcmVzcywgdGhlIGRvbWFpbiBuYW1lIGNvbnRhaW5lZA0KICAgaW4gdGhlIDxob3N0PiBwYXJ0 IGlzIHJlc29sdmVkIHRvIGEgdHJhbnNwb3J0IGFkZHJlc3MgdXNpbmcgdGhlIFNSVg0KICAgcHJv Y2VkdXJlcyBzcGVjaWZpZWQgaW4gW1JGQzI3ODJdLiAgVGhlIEROUyBTUlYgc2VydmljZSBuYW1l IGlzIHRoZQ0KICAgY29udGVudCBvZiB0aGUgPHNjaGVtZT4gcGFydC4gIFRoZSBwcm90b2NvbCBp biB0aGUgU1JWIGxvb2t1cCBpcyB0aGUNCiAgIHRyYW5zcG9ydCBwcm90b2NvbCB0aGUgY2xpZW50 IHdpbGwgcnVuIFNUVU4gb3ZlcjogInVkcCIgZm9yIFVEUCBhbmQNCiAgICJ0Y3AiIGZvciBUQ1Au DQoNCiAgIFRoZSBwcm9jZWR1cmVzIG9mIFJGQyAyNzgyIGFyZSBmb2xsb3dlZCB0byBkZXRlcm1p bmUgdGhlIHNlcnZlciB0bw0KICAgY29udGFjdC4gIFJGQyAyNzgyIHNwZWxscyBvdXQgdGhlIGRl dGFpbHMgb2YgaG93IGEgc2V0IG9mIFNSViByZWNvcmRzDQogICBpcyBzb3J0ZWQgYW5kIHRoZW4g dHJpZWQuICBIb3dldmVyLCBSRkMgMjc4MiBvbmx5IHN0YXRlcyB0aGF0IHRoZQ0KICAgY2xpZW50 IHNob3VsZCAidHJ5IHRvIGNvbm5lY3QgdG8gdGhlIChwcm90b2NvbCwgYWRkcmVzcywgc2Vydmlj ZSkiDQogICB3aXRob3V0IGdpdmluZyBhbnkgZGV0YWlscyBvbiB3aGF0IGhhcHBlbnMgaW4gdGhl IGV2ZW50IG9mIGZhaWx1cmUuDQogICBXaGVuIGZvbGxvd2luZyB0aGVzZSBwcm9jZWR1cmVzLCBp ZiB0aGUgU1RVTiB0cmFuc2FjdGlvbiB0aW1lcyBvdXQNCiAgIHdpdGhvdXQgcmVjZWlwdCBvZiBh IHJlc3BvbnNlLCB0aGUgY2xpZW50IFNIT1VMRCByZXRyeSB0aGUgcmVxdWVzdCB0bw0KICAgdGhl IG5leHQgc2VydmVyIGluIHRoZSBvcmRlcmVkIGRlZmluZWQgYnkgUkZDIDI3ODIuICBTdWNoIGEg cmV0cnkgaXMNCiAgIG9ubHkgcG9zc2libGUgZm9yIHJlcXVlc3QvcmVzcG9uc2UgdHJhbnNtaXNz aW9ucywgc2luY2UgaW5kaWNhdGlvbg0KICAgdHJhbnNhY3Rpb25zIGdlbmVyYXRlIG5vIHJlc3Bv bnNlIG9yIHRpbWVvdXQuDQoNCiAgIEluIGFkZGl0aW9uLCBpbnN0ZWFkIG9mIHF1ZXJ5aW5nIGVp dGhlciB0aGUgQSBvciB0aGUgQUFBQSByZXNvdXJjZQ0KICAgcmVjb3JkcyBmb3IgYSBkb21haW4g bmFtZSwgYSBkdWFsLXN0YWNrIElQdjQvSVB2NiBjbGllbnQgTVVTVCBxdWVyeQ0KICAgYm90aCBh bmQgdHJ5IHRoZSByZXF1ZXN0cyB3aXRoIGFsbCB0aGUgSVAgYWRkcmVzc2VzIHJlY2VpdmVkLCBh cw0KICAgc3BlY2lmaWVkIGluIFtSRkM4MzA1XS4NCg0KICAgVGhlIGRlZmF1bHQgcG9ydCBmb3Ig U1RVTiByZXF1ZXN0cyBpcyAzNDc4LCBmb3IgYm90aCBUQ1AgYW5kIFVEUC4NCiAgIFRoZSBkZWZh dWx0IHBvcnQgZm9yIFNUVU4gb3ZlciBUTFMgYW5kIFNUVU4gb3ZlciBEVExTIHJlcXVlc3RzIGlz DQogICA1MzQ5LiAgU2VydmVycyBjYW4gcnVuIFNUVU4gb3ZlciBEVExTIG9uIHRoZSBzYW1lIHBv cnQgYXMgU1RVTiBvdmVyDQogICBVRFAgaWYgdGhlIHNlcnZlciBzb2Z0d2FyZSBzdXBwb3J0cyBk ZXRlcm1pbmluZyB3aGV0aGVyIHRoZSBpbml0aWFsDQogICBtZXNzYWdlIGlzIGEgRFRMUyBvciBT VFVOIG1lc3NhZ2UuICBTZXJ2ZXJzIGNhbiBydW4gU1RVTiBvdmVyIFRMUyBvbg0KICAgdGhlIHNh bWUgcG9ydCBhcyBTVFVOIG92ZXIgVENQIGlmIHRoZSBzZXJ2ZXIgc29mdHdhcmUgc3VwcG9ydHMN CiAgIGRldGVybWluaW5nIHdoZXRoZXIgdGhlIGluaXRpYWwgbWVzc2FnZSBpcyBhIFRMUyBvciBT VFVOIG1lc3NhZ2UuDQoNCg0KDQoNClBldGl0LUh1Z3VlbmluLCBldCBhbC4gRXhwaXJlcyBTZXB0 ZW1iZXIgMjIsIDIwMTkgICAgICAgICAgICAgIFtQYWdlIDIyXQ0KDA0KSW50ZXJuZXQtRHJhZnQg U2Vzc2lvbiBUcmF2ZXJzYWwgVXRpbGl0aWVzIGZvciBOQVQgKFNUVU4pICAgICBNYXJjaCAyMDE5 DQoNCg0KICAgQWRtaW5pc3RyYXRvcnMgb2YgU1RVTiBzZXJ2ZXJzIFNIT1VMRCB1c2UgdGhlc2Ug cG9ydHMgaW4gdGhlaXIgU1JWDQogICByZWNvcmRzIGZvciBVRFAgYW5kIFRDUC4gIEluIGFsbCBj YXNlcywgdGhlIHBvcnQgaW4gRE5TIE1VU1QgcmVmbGVjdA0KICAgdGhlIG9uZSBvbiB3aGljaCB0 aGUgc2VydmVyIGlzIGxpc3RlbmluZy4NCg0KICAgSWYgbm8gU1JWIHJlY29yZHMgd2VyZSBmb3Vu ZCwgdGhlIGNsaWVudCBwZXJmb3JtcyBib3RoIGFuIEEgYW5kIEFBQUENCiAgIHJlY29yZCBsb29r dXAgb2YgdGhlIGRvbWFpbiBuYW1lLCBhcyBkZXNjcmliZWQgaW4gW1JGQzgzMDVdLiAgVGhlDQog ICByZXN1bHQgd2lsbCBiZSBhIGxpc3Qgb2YgSVAgYWRkcmVzc2VzLCBlYWNoIG9mIHdoaWNoIGNh biBiZQ0KICAgc2ltdWx0YW5lb3VzbHkgY29udGFjdGVkIGF0IHRoZSBkZWZhdWx0IHBvcnQgdXNp bmcgVURQIG9yIFRDUCwNCiAgIGluZGVwZW5kZW50IG9mIHRoZSBTVFVOIHVzYWdlLiAgRm9yIHVz YWdlcyB0aGF0IHJlcXVpcmUgVExTLCB0aGUNCiAgIGNsaWVudCBjb25uZWN0cyB0byB0aGUgSVAg YWRkcmVzc2VzIHVzaW5nIHRoZSBkZWZhdWx0IFNUVU4gb3ZlciBUTFMNCiAgIHBvcnQuICBGb3Ig dXNhZ2VzIHRoYXQgcmVxdWlyZSBEVExTLCB0aGUgY2xpZW50IGNvbm5lY3RzIHRvIHRoZSBJUA0K ICAgYWRkcmVzc2VzIHVzaW5nIHRoZSBkZWZhdWx0IFNUVU4gb3ZlciBEVExTIHBvcnQuDQoNCjku ICBBdXRoZW50aWNhdGlvbiBhbmQgTWVzc2FnZS1JbnRlZ3JpdHkgTWVjaGFuaXNtcw0KDQogICBU aGlzIHNlY3Rpb24gZGVmaW5lcyB0d28gbWVjaGFuaXNtcyBmb3IgU1RVTiB0aGF0IGEgY2xpZW50 IGFuZCBzZXJ2ZXINCiAgIGNhbiB1c2UgdG8gcHJvdmlkZSBhdXRoZW50aWNhdGlvbiBhbmQgbWVz c2FnZSBpbnRlZ3JpdHk7IHRoZXNlIHR3bw0KICAgbWVjaGFuaXNtcyBhcmUga25vd24gYXMgdGhl IHNob3J0LXRlcm0gY3JlZGVudGlhbCBtZWNoYW5pc20gYW5kIHRoZQ0KICAgbG9uZy10ZXJtIGNy ZWRlbnRpYWwgbWVjaGFuaXNtLiAgVGhlc2UgdHdvIG1lY2hhbmlzbXMgYXJlIG9wdGlvbmFsLA0K ICAgYW5kIGVhY2ggdXNhZ2UgbXVzdCBzcGVjaWZ5IGlmIGFuZCB3aGVuIHRoZXNlIG1lY2hhbmlz bXMgYXJlIHVzZWQuDQogICBDb25zZXF1ZW50bHksIGJvdGggY2xpZW50cyBhbmQgc2VydmVycyB3 aWxsIGtub3cgd2hpY2ggbWVjaGFuaXNtIChpZg0KICAgYW55KSB0byBmb2xsb3cgYmFzZWQgb24g a25vd2xlZGdlIG9mIHdoaWNoIHVzYWdlIGFwcGxpZXMuICBGb3INCiAgIGV4YW1wbGUsIGEgU1RV TiBzZXJ2ZXIgb24gdGhlIHB1YmxpYyBJbnRlcm5ldCBzdXBwb3J0aW5nIElDRSB3b3VsZA0KICAg aGF2ZSBubyBhdXRoZW50aWNhdGlvbiwgd2hlcmVhcyB0aGUgU1RVTiBzZXJ2ZXIgZnVuY3Rpb25h bGl0eSBpbiBhbg0KICAgYWdlbnQgc3VwcG9ydGluZyBjb25uZWN0aXZpdHkgY2hlY2tzIHdvdWxk IHV0aWxpemUgc2hvcnQtdGVybQ0KICAgY3JlZGVudGlhbHMuICBBbiBvdmVydmlldyBvZiB0aGVz ZSB0d28gbWVjaGFuaXNtcyBpcyBnaXZlbiBpbg0KICAgU2VjdGlvbiAyLg0KDQogICBFYWNoIG1l Y2hhbmlzbSBzcGVjaWZpZXMgdGhlIGFkZGl0aW9uYWwgcHJvY2Vzc2luZyByZXF1aXJlZCB0byB1 c2UNCiAgIHRoYXQgbWVjaGFuaXNtLCBleHRlbmRpbmcgdGhlIHByb2Nlc3Npbmcgc3BlY2lmaWVk IGluIFNlY3Rpb24gNi4gIFRoZQ0KICAgYWRkaXRpb25hbCBwcm9jZXNzaW5nIG9jY3VycyBpbiB0 aHJlZSBkaWZmZXJlbnQgcGxhY2VzOiB3aGVuIGZvcm1pbmcNCiAgIGEgbWVzc2FnZSwgd2hlbiBy ZWNlaXZpbmcgYSBtZXNzYWdlIGltbWVkaWF0ZWx5IGFmdGVyIHRoZSBiYXNpYw0KICAgY2hlY2tz IGhhdmUgYmVlbiBwZXJmb3JtZWQsIGFuZCB3aGVuIGRvaW5nIHRoZSBkZXRhaWxlZCBwcm9jZXNz aW5nIG9mDQogICBlcnJvciByZXNwb25zZXMuDQoNCiAgIE5vdGUgdGhhdCBhZ2VudHMgTVVTVCBp Z25vcmUgYWxsIGF0dHJpYnV0ZXMgdGhhdCBmb2xsb3cgTUVTU0FHRS0NCiAgIElOVEVHUklUWSwg d2l0aCB0aGUgZXhjZXB0aW9uIG9mIHRoZSBNRVNTQUdFLUlOVEVHUklUWS1TSEEyNTYgYW5kDQog ICBGSU5HRVJQUklOVCBhdHRyaWJ1dGVzLiAgU2ltaWxhcmx5IGFnZW50cyBNVVNUIGlnbm9yZSBh bGwgYXR0cmlidXRlcw0KICAgdGhhdCBmb2xsb3cgdGhlIE1FU1NBR0UtSU5URUdSSVRZLVNIQTI1 NiBhdHRyaWJ1dGUgaWYgdGhlIE1FU1NBR0UtDQogICBJTlRFR1JJVFkgYXR0cmlidXRlIGlzIG5v dCBwcmVzZW50LCB3aXRoIHRoZSBleGNlcHRpb24gb2YgdGhlDQogICBGSU5HRVJQUklOVCBhdHRy aWJ1dGUuDQoNCjkuMS4gIFNob3J0LVRlcm0gQ3JlZGVudGlhbCBNZWNoYW5pc20NCg0KICAgVGhl IHNob3J0LXRlcm0gY3JlZGVudGlhbCBtZWNoYW5pc20gYXNzdW1lcyB0aGF0LCBwcmlvciB0byB0 aGUgU1RVTg0KICAgdHJhbnNhY3Rpb24sIHRoZSBjbGllbnQgYW5kIHNlcnZlciBoYXZlIHVzZWQg c29tZSBvdGhlciBwcm90b2NvbCB0bw0KICAgZXhjaGFuZ2UgYSBjcmVkZW50aWFsIGluIHRoZSBm b3JtIG9mIGEgdXNlcm5hbWUgYW5kIHBhc3N3b3JkLiAgVGhpcw0KICAgY3JlZGVudGlhbCBpcyB0 aW1lLWxpbWl0ZWQuICBUaGUgdGltZSBsaW1pdCBpcyBkZWZpbmVkIGJ5IHRoZSB1c2FnZS4NCg0K DQoNClBldGl0LUh1Z3VlbmluLCBldCBhbC4gRXhwaXJlcyBTZXB0ZW1iZXIgMjIsIDIwMTkgICAg ICAgICAgICAgIFtQYWdlIDIzXQ0KDA0KSW50ZXJuZXQtRHJhZnQgU2Vzc2lvbiBUcmF2ZXJzYWwg VXRpbGl0aWVzIGZvciBOQVQgKFNUVU4pICAgICBNYXJjaCAyMDE5DQoNCg0KICAgQXMgYW4gZXhh bXBsZSwgaW4gdGhlIElDRSB1c2FnZSBbUkZDODQ0NV0sIHRoZSB0d28gZW5kcG9pbnRzIHVzZSBv dXQtDQogICBvZi1iYW5kIHNpZ25hbGluZyB0byBhZ3JlZSBvbiBhIHVzZXJuYW1lIGFuZCBwYXNz d29yZCwgYW5kIHRoaXMNCiAgIHVzZXJuYW1lIGFuZCBwYXNzd29yZCBhcmUgYXBwbGljYWJsZSBm b3IgdGhlIGR1cmF0aW9uIG9mIHRoZSBtZWRpYQ0KICAgc2Vzc2lvbi4NCg0KICAgVGhpcyBjcmVk ZW50aWFsIGlzIHVzZWQgdG8gZm9ybSBhIG1lc3NhZ2UtaW50ZWdyaXR5IGNoZWNrIGluIGVhY2gN CiAgIHJlcXVlc3QgYW5kIGluIG1hbnkgcmVzcG9uc2VzLiAgVGhlcmUgaXMgbm8gY2hhbGxlbmdl IGFuZCByZXNwb25zZSBhcw0KICAgaW4gdGhlIGxvbmctdGVybSBtZWNoYW5pc207IGNvbnNlcXVl bnRseSwgcmVwbGF5IGlzIGxpbWl0ZWQgYnkgdmlydHVlDQogICBvZiB0aGUgdGltZS1saW1pdGVk IG5hdHVyZSBvZiB0aGUgY3JlZGVudGlhbC4NCg0KOS4xLjEuICBITUFDIEtleQ0KDQogICBGb3Ig c2hvcnQtdGVybSBjcmVkZW50aWFscyB0aGUgSE1BQyBrZXkgaXMgZGVmaW5lZCBhcyBmb2xsb3c6 DQoNCiAgICAgICAgICAgICAgICAgICAgICAga2V5ID0gT3BhcXVlU3RyaW5nKHBhc3N3b3JkKQ0K DQogICB3aGVyZSB0aGUgT3BhcXVlU3RyaW5nIHByb2ZpbGUgaXMgZGVmaW5lZCBpbiBbUkZDODI2 NV0uICBUaGUgZW5jb2RpbmcNCiAgIHVzZWQgaXMgVVRGLTggW1JGQzM2MjldLg0KDQo5LjEuMi4g IEZvcm1pbmcgYSBSZXF1ZXN0IG9yIEluZGljYXRpb24NCg0KICAgRm9yIGEgcmVxdWVzdCBvciBp bmRpY2F0aW9uIG1lc3NhZ2UsIHRoZSBhZ2VudCBNVVNUIGluY2x1ZGUgdGhlDQogICBVU0VSTkFN RSwgTUVTU0FHRS1JTlRFR1JJVFktU0hBMjU2LCBhbmQgTUVTU0FHRS1JTlRFR1JJVFkgYXR0cmli dXRlcw0KICAgaW4gdGhlIG1lc3NhZ2UgdW5sZXNzIHRoZSBhZ2VudCBrbm93cyBmcm9tIGFuIGV4 dGVybmFsIGluZGljYXRpb24NCiAgIHdoaWNoIG1lc3NhZ2UgaW50ZWdyaXR5IGFsZ29yaXRobSBp cyBzdXBwb3J0ZWQgYnkgYm90aCBhZ2VudHMuICBJbg0KICAgdGhpcyBjYXNlIGVpdGhlciBNRVNT QUdFLUlOVEVHUklUWSBvciBNRVNTQUdFLUlOVEVHUklUWS1TSEEyNTYgTVVTVA0KICAgYmUgaW5j bHVkZWQgaW4gYWRkaXRpb24gdG8gVVNFUk5BTUUuICBUaGUgSE1BQyBmb3IgdGhlIE1FU1NBR0Ut DQogICBJTlRFR1JJVFkgYXR0cmlidXRlIGlzIGNvbXB1dGVkIGFzIGRlc2NyaWJlZCBpbiBTZWN0 aW9uIDE0LjUgYW5kIHRoZQ0KICAgSE1BQyBmb3IgdGhlIE1FU1NBR0UtSU5URUdSSVRZLVNIQTI1 NiBhdHRyaWJ1dGVzIGlzIGNvbXB1dGVkIGFzDQogICBkZXNjcmliZWQgaW4gU2VjdGlvbiAxNC42 LiAgTm90ZSB0aGF0IHRoZSBwYXNzd29yZCBpcyBuZXZlciBpbmNsdWRlZA0KICAgaW4gdGhlIHJl cXVlc3Qgb3IgaW5kaWNhdGlvbi4NCg0KOS4xLjMuICBSZWNlaXZpbmcgYSBSZXF1ZXN0IG9yIElu ZGljYXRpb24NCg0KICAgQWZ0ZXIgdGhlIGFnZW50IGhhcyBkb25lIHRoZSBiYXNpYyBwcm9jZXNz aW5nIG9mIGEgbWVzc2FnZSwgdGhlIGFnZW50DQogICBwZXJmb3JtcyB0aGUgY2hlY2tzIGxpc3Rl ZCBiZWxvdyBpbiBvcmRlciBzcGVjaWZpZWQ6DQoNCiAgIG8gIElmIHRoZSBtZXNzYWdlIGRvZXMg bm90IGNvbnRhaW4gMSkgYSBNRVNTQUdFLUlOVEVHUklUWSBvciBhDQogICAgICBNRVNTQUdFLUlO VEVHUklUWS1TSEEyNTYgYXR0cmlidXRlIGFuZCAyKSBhIFVTRVJOQU1FIGF0dHJpYnV0ZToNCg0K ICAgICAgKiAgSWYgdGhlIG1lc3NhZ2UgaXMgYSByZXF1ZXN0LCB0aGUgc2VydmVyIE1VU1QgcmVq ZWN0IHRoZSByZXF1ZXN0DQogICAgICAgICB3aXRoIGFuIGVycm9yIHJlc3BvbnNlLiAgVGhpcyBy ZXNwb25zZSBNVVNUIHVzZSBhbiBlcnJvciBjb2RlDQogICAgICAgICBvZiA0MDAgKEJhZCBSZXF1 ZXN0KS4NCg0KICAgICAgKiAgSWYgdGhlIG1lc3NhZ2UgaXMgYW4gaW5kaWNhdGlvbiwgdGhlIGFn ZW50IE1VU1Qgc2lsZW50bHkNCiAgICAgICAgIGRpc2NhcmQgdGhlIGluZGljYXRpb24uDQoNCg0K DQoNCg0KUGV0aXQtSHVndWVuaW4sIGV0IGFsLiBFeHBpcmVzIFNlcHRlbWJlciAyMiwgMjAxOSAg ICAgICAgICAgICAgW1BhZ2UgMjRdDQoMDQpJbnRlcm5ldC1EcmFmdCBTZXNzaW9uIFRyYXZlcnNh bCBVdGlsaXRpZXMgZm9yIE5BVCAoU1RVTikgICAgIE1hcmNoIDIwMTkNCg0KDQogICBvICBJZiB0 aGUgVVNFUk5BTUUgZG9lcyBub3QgY29udGFpbiBhIHVzZXJuYW1lIHZhbHVlIGN1cnJlbnRseSB2 YWxpZA0KICAgICAgd2l0aGluIHRoZSBzZXJ2ZXI6DQoNCiAgICAgICogIElmIHRoZSBtZXNzYWdl IGlzIGEgcmVxdWVzdCwgdGhlIHNlcnZlciBNVVNUIHJlamVjdCB0aGUgcmVxdWVzdA0KICAgICAg ICAgd2l0aCBhbiBlcnJvciByZXNwb25zZS4gIFRoaXMgcmVzcG9uc2UgTVVTVCB1c2UgYW4gZXJy b3IgY29kZQ0KICAgICAgICAgb2YgNDAxIChVbmF1dGhlbnRpY2F0ZWQpLg0KDQogICAgICAqICBJ ZiB0aGUgbWVzc2FnZSBpcyBhbiBpbmRpY2F0aW9uLCB0aGUgYWdlbnQgTVVTVCBzaWxlbnRseQ0K ICAgICAgICAgZGlzY2FyZCB0aGUgaW5kaWNhdGlvbi4NCg0KICAgbyAgSWYgdGhlIE1FU1NBR0Ut SU5URUdSSVRZLVNIQTI1NiBhdHRyaWJ1dGUgaXMgcHJlc2VudCBjb21wdXRlIHRoZQ0KICAgICAg dmFsdWUgZm9yIHRoZSBtZXNzYWdlIGludGVncml0eSBhcyBkZXNjcmliZWQgaW4gU2VjdGlvbiAx NC42LA0KICAgICAgdXNpbmcgdGhlIHBhc3N3b3JkIGFzc29jaWF0ZWQgd2l0aCB0aGUgdXNlcm5h bWUuICBJZiB0aGUgTUVTU0FHRS0NCiAgICAgIElOVEVHUklUWS1TSEEyNTYgYXR0cmlidXRlIGlz IG5vdCBwcmVzZW50LCB0aGVuIHVzZSB0aGUgc2FtZQ0KICAgICAgcGFzc3dvcmQgdG8gY29tcHV0 ZSB0aGUgdmFsdWUgZm9yIHRoZSBtZXNzYWdlIGludGVncml0eSBhcw0KICAgICAgZGVzY3JpYmVk IGluIFNlY3Rpb24gMTQuNS4gIElmIHRoZSByZXN1bHRpbmcgdmFsdWUgZG9lcyBub3QgbWF0Y2gN CiAgICAgIHRoZSBjb250ZW50cyBvZiB0aGUgY29ycmVzcG9uZGluZyBhdHRyaWJ1dGUgKE1FU1NB R0UtSU5URUdSSVRZLQ0KICAgICAgU0hBMjU2IG9yIE1FU1NBR0UtSU5URUdSSVRZKToNCg0KICAg ICAgKiAgSWYgdGhlIG1lc3NhZ2UgaXMgYSByZXF1ZXN0LCB0aGUgc2VydmVyIE1VU1QgcmVqZWN0 IHRoZSByZXF1ZXN0DQogICAgICAgICB3aXRoIGFuIGVycm9yIHJlc3BvbnNlLiAgVGhpcyByZXNw b25zZSBNVVNUIHVzZSBhbiBlcnJvciBjb2RlDQogICAgICAgICBvZiA0MDEgKFVuYXV0aGVudGlj YXRlZCkuDQoNCiAgICAgICogIElmIHRoZSBtZXNzYWdlIGlzIGFuIGluZGljYXRpb24sIHRoZSBh Z2VudCBNVVNUIHNpbGVudGx5DQogICAgICAgICBkaXNjYXJkIHRoZSBpbmRpY2F0aW9uLg0KDQog ICBJZiB0aGVzZSBjaGVja3MgcGFzcywgdGhlIGFnZW50IGNvbnRpbnVlcyB0byBwcm9jZXNzIHRo ZSByZXF1ZXN0IG9yDQogICBpbmRpY2F0aW9uLiAgQW55IHJlc3BvbnNlIGdlbmVyYXRlZCBieSBh IHNlcnZlciB0byBhIHJlcXVlc3QgdGhhdA0KICAgY29udGFpbnMgYSBNRVNTQUdFLUlOVEVHUklU WS1TSEEyNTYgYXR0cmlidXRlIE1VU1QgaW5jbHVkZSB0aGUNCiAgIE1FU1NBR0UtSU5URUdSSVRZ LVNIQTI1NiBhdHRyaWJ1dGUsIGNvbXB1dGVkIHVzaW5nIHRoZSBwYXNzd29yZA0KICAgdXRpbGl6 ZWQgdG8gYXV0aGVudGljYXRlIHRoZSByZXF1ZXN0LiAgQW55IHJlc3BvbnNlIGdlbmVyYXRlZCBi eSBhDQogICBzZXJ2ZXIgdG8gYSByZXF1ZXN0IHRoYXQgY29udGFpbnMgb25seSBhIE1FU1NBR0Ut SU5URUdSSVRZIGF0dHJpYnV0ZQ0KICAgTVVTVCBpbmNsdWRlIHRoZSBNRVNTQUdFLUlOVEVHUklU WSBhdHRyaWJ1dGUsIGNvbXB1dGVkIHVzaW5nIHRoZQ0KICAgcGFzc3dvcmQgdXRpbGl6ZWQgdG8g YXV0aGVudGljYXRlIHRoZSByZXF1ZXN0LiAgVGhpcyBtZWFucyB0aGF0IG9ubHkNCiAgIG9uZSBv ZiB0aGVzZSBhdHRyaWJ1dGVzIGNhbiBhcHBlYXIgaW4gYSByZXNwb25zZS4gIFRoZSByZXNwb25z ZSBNVVNUDQogICBOT1QgY29udGFpbiB0aGUgVVNFUk5BTUUgYXR0cmlidXRlLg0KDQogICBJZiBh bnkgb2YgdGhlIGNoZWNrcyBmYWlsLCBhIHNlcnZlciBNVVNUIE5PVCBpbmNsdWRlIGEgTUVTU0FH RS0NCiAgIElOVEVHUklUWS1TSEEyNTYsIE1FU1NBR0UtSU5URUdSSVRZLCBvciBVU0VSTkFNRSBh dHRyaWJ1dGUgaW4gdGhlDQogICBlcnJvciByZXNwb25zZS4gIFRoaXMgaXMgYmVjYXVzZSwgaW4g dGhlc2UgZmFpbHVyZSBjYXNlcywgdGhlIHNlcnZlcg0KICAgY2Fubm90IGRldGVybWluZSB0aGUg c2hhcmVkIHNlY3JldCBuZWNlc3NhcnkgdG8gY29tcHV0ZSB0aGUgTUVTU0FHRS0NCiAgIElOVEVH UklUWS1TSEEyNTYgb3IgTUVTU0FHRS1JTlRFR1JJVFkgYXR0cmlidXRlcy4NCg0KOS4xLjQuICBS ZWNlaXZpbmcgYSBSZXNwb25zZQ0KDQogICBUaGUgY2xpZW50IGxvb2tzIGZvciB0aGUgTUVTU0FH RS1JTlRFR1JJVFkgb3IgdGhlIE1FU1NBR0UtSU5URUdSSVRZLQ0KICAgU0hBMjU2IGF0dHJpYnV0 ZSBpbiB0aGUgcmVzcG9uc2UuICBJZiBwcmVzZW50IGFuZCBpZiB0aGUgY2xpZW50IG9ubHkNCiAg IHNlbnQgb25seSBvbmUgb2YgTUVTU0FHRS1JTlRFR1JJVFkgb3IgTUVTU0FHRS1JTlRFR1JJVFkt U0hBMjU2DQoNCg0KDQpQZXRpdC1IdWd1ZW5pbiwgZXQgYWwuIEV4cGlyZXMgU2VwdGVtYmVyIDIy LCAyMDE5ICAgICAgICAgICAgICBbUGFnZSAyNV0NCgwNCkludGVybmV0LURyYWZ0IFNlc3Npb24g VHJhdmVyc2FsIFV0aWxpdGllcyBmb3IgTkFUIChTVFVOKSAgICAgTWFyY2ggMjAxOQ0KDQoNCiAg IGF0dHJpYnV0ZXMgaW4gdGhlIHJlcXVlc3QgKGJlY2F1c2Ugb2YgdGhlIGV4dGVybmFsIGluZGlj YXRpb24gaW4NCiAgIFNlY3Rpb24gOS4xLjIsIG9yIHRoaXMgYmVpbmcgYSBzdWJzZXF1ZW50IHJl cXVlc3QgYXMgZGVmaW5lZCBpbg0KICAgU2VjdGlvbiA5LjEuNSkgdGhlIGFsZ29yaXRobSBpbiB0 aGUgcmVzcG9uc2UgaGFzIHRvIG1hdGNoIG90aGVyd2lzZQ0KICAgdGhlIHJlc3BvbnNlIE1VU1Qg YmUgZGlzY2FyZGVkLg0KDQogICBUaGUgY2xpZW50IHRoZW4gY29tcHV0ZXMgdGhlIG1lc3NhZ2Ug aW50ZWdyaXR5IG92ZXIgdGhlIHJlc3BvbnNlIGFzDQogICBkZWZpbmVkIGluIFNlY3Rpb24gMTQu NSBvciBTZWN0aW9uIDE0LjYsIHJlc3BlY3RpdmVseSwgdXNpbmcgdGhlIHNhbWUNCiAgIHBhc3N3 b3JkIGl0IHV0aWxpemVkIGZvciB0aGUgcmVxdWVzdC4gIElmIHRoZSByZXN1bHRpbmcgdmFsdWUg bWF0Y2hlcw0KICAgdGhlIGNvbnRlbnRzIG9mIHRoZSBNRVNTQUdFLUlOVEVHUklUWSBvciBNRVNT QUdFLUlOVEVHUklUWS1TSEEyNTYNCiAgIGF0dHJpYnV0ZSwgcmVzcGVjdGl2ZWx5LCB0aGUgcmVz cG9uc2UgaXMgY29uc2lkZXJlZCBhdXRoZW50aWNhdGVkLg0KICAgSWYgdGhlIHZhbHVlIGRvZXMg bm90IG1hdGNoLCBvciBpZiBib3RoIE1FU1NBR0UtSU5URUdSSVRZIGFuZA0KICAgTUVTU0FHRS1J TlRFR1JJVFktU0hBMjU2IHdlcmUgYWJzZW50LCB0aGUgcHJvY2Vzc2luZyBkZXBlbmRzIG9uIHRo ZQ0KICAgcmVxdWVzdCBiZWVuIHNlbnQgb3ZlciBhIHJlbGlhYmxlIG9yIGFuIHVucmVsaWFibGUg dHJhbnNwb3J0Lg0KDQogICBJZiB0aGUgcmVxdWVzdCB3YXMgc2VudCBvdmVyIGFuIHVucmVsaWFi bGUgdHJhbnNwb3J0LCB0aGUgcmVzcG9uc2UNCiAgIE1VU1QgYmUgZGlzY2FyZGVkLCBhcyBpZiBp dCB3YXMgbmV2ZXIgcmVjZWl2ZWQuICBUaGlzIG1lYW5zIHRoYXQNCiAgIHJldHJhbnNtaXRzLCBp ZiBhcHBsaWNhYmxlLCB3aWxsIGNvbnRpbnVlLiAgSWYgYWxsIHRoZSByZXNwb25zZXMNCiAgIHJl Y2VpdmVkIGFyZSBkaXNjYXJkZWQgdGhlbiBpbnN0ZWFkIG9mIHNpZ25hbGluZyBhIHRpbWVvdXQg YWZ0ZXINCiAgIGVuZGluZyB0aGUgdHJhbnNhY3Rpb24gdGhlIGxheWVyIE1VU1Qgc2lnbmFsIHRo YXQgdGhlIGludGVncml0eQ0KICAgcHJvdGVjdGlvbiB3YXMgdmlvbGF0ZWQuDQoNCiAgIElmIHRo ZSByZXF1ZXN0IHdhcyBzZW50IG92ZXIgYSByZWxpYWJsZSB0cmFuc3BvcnQsIHRoZSByZXNwb25z ZSBNVVNUDQogICBiZSBkaXNjYXJkZWQgYW5kIHRoZSBsYXllciBNVVNUIGltbWVkaWF0ZWx5IGVu ZCB0aGUgdHJhbnNhY3Rpb24gYW5kDQogICBzaWduYWwgdGhhdCB0aGUgaW50ZWdyaXR5IHByb3Rl Y3Rpb24gd2FzIHZpb2xhdGVkLg0KDQo5LjEuNS4gIFNlbmRpbmcgU3Vic2VxdWVudCBSZXF1ZXN0 cw0KDQogICBBIGNsaWVudCBzZW5kaW5nIHN1YnNlcXVlbnQgcmVxdWVzdHMgdG8gdGhlIHNhbWUg c2VydmVyIE1VU1Qgc2VuZA0KICAgb25seSB0aGUgTUVTU0FHRS1JTlRFR1JJVFktU0hBMjU2IG9y IHRoZSBNRVNTQUdFLUlOVEVHUklUWSBhdHRyaWJ1dGUNCiAgIHRoYXQgbWF0Y2hlcyB0aGUgYXR0 cmlidXRlIHRoYXQgd2FzIHJlY2VpdmVkIGluIHRoZSByZXNwb25zZSB0byB0aGUNCiAgIGluaXRp YWwgcmVxdWVzdC4gIEhlcmUgc2FtZSBzZXJ2ZXIgbWVhbnMgc2FtZSBJUCBhZGRyZXNzIGFuZCBw b3J0DQogICBudW1iZXIsIG5vdCBqdXN0IHRoZSBzYW1lIFVSSSBvciBTUlYgbG9va3VwIHJlc3Vs dC4NCg0KOS4yLiAgTG9uZy1UZXJtIENyZWRlbnRpYWwgTWVjaGFuaXNtDQoNCiAgIFRoZSBsb25n LXRlcm0gY3JlZGVudGlhbCBtZWNoYW5pc20gcmVsaWVzIG9uIGEgbG9uZy10ZXJtIGNyZWRlbnRp YWwsDQogICBpbiB0aGUgZm9ybSBvZiBhIHVzZXJuYW1lIGFuZCBwYXNzd29yZCB0aGF0IGFyZSBz aGFyZWQgYmV0d2VlbiBjbGllbnQNCiAgIGFuZCBzZXJ2ZXIuICBUaGUgY3JlZGVudGlhbCBpcyBj b25zaWRlcmVkIGxvbmctdGVybSBzaW5jZSBpdCBpcw0KICAgYXNzdW1lZCB0aGF0IGl0IGlzIHBy b3Zpc2lvbmVkIGZvciBhIHVzZXIsIGFuZCByZW1haW5zIGluIGVmZmVjdA0KICAgdW50aWwgdGhl IHVzZXIgaXMgbm8gbG9uZ2VyIGEgc3Vic2NyaWJlciBvZiB0aGUgc3lzdGVtLCBvciBpcw0KICAg Y2hhbmdlZC4gIFRoaXMgaXMgYmFzaWNhbGx5IGEgdHJhZGl0aW9uYWwgImxvZy1pbiIgdXNlcm5h bWUgYW5kDQogICBwYXNzd29yZCBnaXZlbiB0byB1c2Vycy4NCg0KICAgQmVjYXVzZSB0aGVzZSB1 c2VybmFtZXMgYW5kIHBhc3N3b3JkcyBhcmUgZXhwZWN0ZWQgdG8gYmUgdmFsaWQgZm9yDQogICBl eHRlbmRlZCBwZXJpb2RzIG9mIHRpbWUsIHJlcGxheSBwcmV2ZW50aW9uIGlzIHByb3ZpZGVkIGlu IHRoZSBmb3JtDQogICBvZiBhIGRpZ2VzdCBjaGFsbGVuZ2UuICBJbiB0aGlzIG1lY2hhbmlzbSwg dGhlIGNsaWVudCBpbml0aWFsbHkgc2VuZHMNCiAgIGEgcmVxdWVzdCwgd2l0aG91dCBvZmZlcmlu ZyBhbnkgY3JlZGVudGlhbHMgb3IgYW55IGludGVncml0eSBjaGVja3MuDQogICBUaGUgc2VydmVy IHJlamVjdHMgdGhpcyByZXF1ZXN0LCBwcm92aWRpbmcgdGhlIHVzZXIgYSByZWFsbSAodXNlZCB0 bw0KDQoNCg0KUGV0aXQtSHVndWVuaW4sIGV0IGFsLiBFeHBpcmVzIFNlcHRlbWJlciAyMiwgMjAx OSAgICAgICAgICAgICAgW1BhZ2UgMjZdDQoMDQpJbnRlcm5ldC1EcmFmdCBTZXNzaW9uIFRyYXZl cnNhbCBVdGlsaXRpZXMgZm9yIE5BVCAoU1RVTikgICAgIE1hcmNoIDIwMTkNCg0KDQogICBndWlk ZSB0aGUgdXNlciBvciBhZ2VudCBpbiBzZWxlY3Rpb24gb2YgYSB1c2VybmFtZSBhbmQgcGFzc3dv cmQpIGFuZA0KICAgYSBub25jZS4gIFRoZSBub25jZSBwcm92aWRlcyBhIGxpbWl0ZWQgcmVwbGF5 IHByb3RlY3Rpb24uICBJdCBpcyBhDQogICBjb29raWUsIHNlbGVjdGVkIGJ5IHRoZSBzZXJ2ZXIs IGFuZCBlbmNvZGVkIGluIHN1Y2ggYSB3YXkgYXMgdG8NCiAgIGluZGljYXRlIGEgZHVyYXRpb24g b2YgdmFsaWRpdHkgb3IgY2xpZW50IGlkZW50aXR5IGZyb20gd2hpY2ggaXQgaXMNCiAgIHZhbGlk LiAgT25seSB0aGUgc2VydmVyIG5lZWRzIHRvIGtub3cgYWJvdXQgdGhlIGludGVybmFsIHN0cnVj dHVyZSBvZg0KICAgdGhlIGNvb2tpZS4gIFRoZSBjbGllbnQgcmV0cmllcyB0aGUgcmVxdWVzdCwg dGhpcyB0aW1lIGluY2x1ZGluZyBpdHMNCiAgIHVzZXJuYW1lIGFuZCB0aGUgcmVhbG0sIGFuZCBl Y2hvaW5nIHRoZSBub25jZSBwcm92aWRlZCBieSB0aGUgc2VydmVyLg0KICAgVGhlIGNsaWVudCBh bHNvIGluY2x1ZGVzIG9uZSBvZiB0aGUgbWVzc2FnZS1pbnRlZ3JpdHkgYXR0cmlidXRlcw0KICAg ZGVmaW5lZCBpbiB0aGlzIGRvY3VtZW50LCB3aGljaCBwcm92aWRlcyBhbiBITUFDIG92ZXIgdGhl IGVudGlyZQ0KICAgcmVxdWVzdCwgaW5jbHVkaW5nIHRoZSBub25jZS4gIFRoZSBzZXJ2ZXIgdmFs aWRhdGVzIHRoZSBub25jZSBhbmQNCiAgIGNoZWNrcyB0aGUgbWVzc2FnZSBpbnRlZ3JpdHkuICBJ ZiB0aGV5IG1hdGNoLCB0aGUgcmVxdWVzdCBpcw0KICAgYXV0aGVudGljYXRlZC4gIElmIHRoZSBu b25jZSBpcyBubyBsb25nZXIgdmFsaWQsIGl0IGlzIGNvbnNpZGVyZWQNCiAgICJzdGFsZSIsIGFu ZCB0aGUgc2VydmVyIHJlamVjdHMgdGhlIHJlcXVlc3QsIHByb3ZpZGluZyBhIG5ldyBub25jZS4N Cg0KICAgSW4gc3Vic2VxdWVudCByZXF1ZXN0cyB0byB0aGUgc2FtZSBzZXJ2ZXIsIHRoZSBjbGll bnQgcmV1c2VzIHRoZQ0KICAgbm9uY2UsIHVzZXJuYW1lLCByZWFsbSwgYW5kIHBhc3N3b3JkIGl0 IHVzZWQgcHJldmlvdXNseS4gIEluIHRoaXMNCiAgIHdheSwgc3Vic2VxdWVudCByZXF1ZXN0cyBh cmUgbm90IHJlamVjdGVkIHVudGlsIHRoZSBub25jZSBiZWNvbWVzDQogICBpbnZhbGlkIGJ5IHRo ZSBzZXJ2ZXIsIGluIHdoaWNoIGNhc2UgdGhlIHJlamVjdGlvbiBwcm92aWRlcyBhIG5ldw0KICAg bm9uY2UgdG8gdGhlIGNsaWVudC4NCg0KICAgTm90ZSB0aGF0IHRoZSBsb25nLXRlcm0gY3JlZGVu dGlhbCBtZWNoYW5pc20gY2Fubm90IGJlIHVzZWQgdG8NCiAgIHByb3RlY3QgaW5kaWNhdGlvbnMs IHNpbmNlIGluZGljYXRpb25zIGNhbm5vdCBiZSBjaGFsbGVuZ2VkLiAgVXNhZ2VzDQogICB1dGls aXppbmcgaW5kaWNhdGlvbnMgbXVzdCBlaXRoZXIgdXNlIGEgc2hvcnQtdGVybSBjcmVkZW50aWFs IG9yIG9taXQNCiAgIGF1dGhlbnRpY2F0aW9uIGFuZCBtZXNzYWdlIGludGVncml0eSBmb3IgdGhl bS4NCg0KICAgVG8gaW5kaWNhdGUgdGhhdCBpdCBzdXBwb3J0cyB0aGlzIHNwZWNpZmljYXRpb24s IGEgc2VydmVyIE1VU1QNCiAgIHByZXBlbmQgdGhlIE5PTkNFIGF0dHJpYnV0ZSB2YWx1ZSB3aXRo IHRoZSBjaGFyYWN0ZXIgc3RyaW5nIGNvbXBvc2VkDQogICBvZiAib2JNYXRKb3MyIiBjb25jYXRl bmF0ZWQgd2l0aCB0aGUgKDQgY2hhcmFjdGVyKSBCYXNlNjQgW1JGQzQ2NDhdDQogICBlbmNvZGlu ZyBvZiB0aGUgMjQgYml0IFNUVU4gU2VjdXJpdHkgRmVhdHVyZXMgYXMgZGVmaW5lZCBpbg0KICAg U2VjdGlvbiAxOC4xLiAgVGhlIDI0IGJpdCBTZWN1cml0eSBGZWF0dXJlIHNldCBpcyBlbmNvZGVk IGFzIDMgYnl0ZXMsDQogICB3aXRoIGJpdCAwIGFzIHRoZSBtb3N0IHNpZ25pZmljYW50IGJpdCBv ZiB0aGUgZmlyc3QgYnl0ZSBhbmQgYml0IDIzDQogICBhcyB0aGUgbGVhc3Qgc2lnbmlmaWNhbnQg Yml0IG9mIHRoZSB0aGlyZCBieXRlLiAgSWYgbm8gc2VjdXJpdHkNCiAgIGZlYXR1cmVzIGFyZSB1 c2VkLCB0aGVuIGEgYnl0ZSBhcnJheSB3aXRoIGFsbCAyNCBiaXRzIHNldCB0byB6ZXJvDQogICBN VVNUIGJlIGVuY29kZWQgaW5zdGVhZC4gIEZvciB0aGUgcmVtYWluZGVyIG9mIHRoaXMgZG9jdW1l bnQgdGhlIHRlcm0NCiAgICJub25jZSBjb29raWUiIHdpbGwgcmVmZXIgdG8gdGhlIGNvbXBsZXRl IDEzIGNoYXJhY3RlciBzdHJpbmcNCiAgIHByZXBlbmRlZCB0byB0aGUgTk9OQ0UgYXR0cmlidXRl IHZhbHVlLg0KDQogICBTaW5jZSB0aGUgbG9uZy10ZXJtIGNyZWRlbnRpYWwgbWVjaGFuaXNtIGlz IHN1c2NlcHRpYmxlIHRvIG9mZmxpbmUNCiAgIGRpY3Rpb25hcnkgYXR0YWNrcywgZGVwbG95bWVu dHMgU0hPVUxEIHV0aWxpemUgcGFzc3dvcmRzIHRoYXQgYXJlDQogICBkaWZmaWN1bHQgdG8gZ3Vl c3MuICBJbiBjYXNlcyB3aGVyZSB0aGUgY3JlZGVudGlhbHMgYXJlIG5vdCBlbnRlcmVkDQogICBi eSB0aGUgdXNlciwgYnV0IGFyZSByYXRoZXIgcGxhY2VkIG9uIGEgY2xpZW50IGRldmljZSBkdXJp bmcgZGV2aWNlDQogICBwcm92aXNpb25pbmcsIHRoZSBwYXNzd29yZCBTSE9VTEQgaGF2ZSBhdCBs ZWFzdCAxMjggYml0cyBvZg0KICAgcmFuZG9tbmVzcy4gIEluIGNhc2VzIHdoZXJlIHRoZSBjcmVk ZW50aWFscyBhcmUgZW50ZXJlZCBieSB0aGUgdXNlciwNCiAgIHRoZXkgc2hvdWxkIGZvbGxvdyBi ZXN0IGN1cnJlbnQgcHJhY3RpY2VzIGFyb3VuZCBwYXNzd29yZCBzdHJ1Y3R1cmUuDQoNCg0KDQoN Cg0KDQoNClBldGl0LUh1Z3VlbmluLCBldCBhbC4gRXhwaXJlcyBTZXB0ZW1iZXIgMjIsIDIwMTkg ICAgICAgICAgICAgIFtQYWdlIDI3XQ0KDA0KSW50ZXJuZXQtRHJhZnQgU2Vzc2lvbiBUcmF2ZXJz YWwgVXRpbGl0aWVzIGZvciBOQVQgKFNUVU4pICAgICBNYXJjaCAyMDE5DQoNCg0KOS4yLjEuICBC aWQgRG93biBBdHRhY2sgUHJldmVudGlvbg0KDQogICBUaGlzIGRvY3VtZW50IGludHJvZHVjZXMg dHdvIG5ldyBzZWN1cml0eSBmZWF0dXJlcyB0aGF0IHByb3ZpZGUgdGhlDQogICBhYmlsaXR5IHRv IGNob29zZSB0aGUgYWxnb3JpdGhtIHVzZWQgZm9yIHBhc3N3b3JkIHByb3RlY3Rpb24gYXMgd2Vs bA0KICAgYXMgdGhlIGFiaWxpdHkgdG8gdXNlIGFuIGFub255bW91cyB1c2VybmFtZS4gIEJvdGgg b2YgdGhlc2UNCiAgIGNhcGFiaWxpdGllcyBhcmUgb3B0aW9uYWwgaW4gb3JkZXIgdG8gcmVtYWlu IGJhY2t3YXJkcyBjb21wYXRpYmxlDQogICB3aXRoIHByZXZpb3VzIHZlcnNpb25zIG9mIHRoZSBT VFVOIHByb3RvY29sLg0KDQogICBUaGVzZSBuZXcgY2FwYWJpbGl0aWVzIGFyZSBzdWJqZWN0IHRv IGJpZC1kb3duIGF0dGFja3Mgd2hlcmVieSBhbg0KICAgYXR0YWNrZXIgaW4gdGhlIG1lc3NhZ2Ug cGF0aCBjYW4gcmVtb3ZlIHRoZXNlIGNhcGFiaWxpdGllcyBhbmQgZm9yY2UNCiAgIHdlYWtlciBz ZWN1cml0eSBwcm9wZXJ0aWVzLiAgVG8gcHJldmVudCB0aGVzZSBraW5kcyBvZiBhdHRhY2tzIGZy b20NCiAgIGdvaW5nIHVuZGV0ZWN0ZWQsIHRoZSBub25jZSBpcyBlbmhhbmNlZCB3aXRoIGFkZGl0 aW9uYWwgaW5mb3JtYXRpb24uDQoNCiAgIFRoZSB2YWx1ZSBvZiB0aGUgIm5vbmNlIGNvb2tpZSIg d2lsbCB2YXJ5IGJhc2VkIG9uIHRoZSBzcGVjaWZpYyBTVFVODQogICBTZWN1cml0eSBGZWF0dXJl cyBiaXQgdmFsdWVzIHNlbGVjdGVkLiAgV2hlbiB0aGlzIGRvY3VtZW50IG1ha2VzDQogICByZWZl cmVuY2UgdG8gdGhlICJub25jZSBjb29raWUiIGluIGEgc2VjdGlvbiBkaXNjdXNzaW5nIGEgc3Bl Y2lmaWMNCiAgIFNUVU4gU2VjdXJpdHkgRmVhdHVyZSBpdCBpcyB1bmRlcnN0b29kIHRoYXQgdGhl IGNvcnJlc3BvbmRpbmcgU1RVTg0KICAgU2VjdXJpdHkgRmVhdHVyZSBiaXQgaW4gdGhlICJub25j ZSBjb29raWUiIGlzIHNldCB0byAxLg0KDQogICBGb3IgZXhhbXBsZSwgaW4gU2VjdGlvbiA5LjIu NCBkaXNjdXNzaW5nIHRoZSBQQVNTV09SRC1BTEdPUklUSE1TDQogICBzZWN1cml0eSBmZWF0dXJl LCBpdCBpcyBpbXBsaWVkIHRoYXQgdGhlICJQYXNzd29yZCBhbGdvcml0aG1zIiBiaXQsDQogICBh cyBkZWZpbmVkIGluIFNlY3Rpb24gMTguMSwgaXMgc2V0IHRvIDEgaW4gdGhlICJub25jZSBjb29r aWUiLg0KDQo5LjIuMi4gIEhNQUMgS2V5DQoNCiAgIEZvciBsb25nLXRlcm0gY3JlZGVudGlhbHMg dGhhdCBkbyBub3QgdXNlIGEgZGlmZmVyZW50IGFsZ29yaXRobSwgYXMNCiAgIHNwZWNpZmllZCBi eSB0aGUgUEFTU1dPUkQtQUxHT1JJVEhNIGF0dHJpYnV0ZSwgdGhlIGtleSBpcyAxNiBieXRlczoN Cg0KICAgICAgICAgICAgICAgIGtleSA9IE1ENSh1c2VybmFtZSAiOiIgT3BhcXVlU3RyaW5nKHJl YWxtKQ0KICAgICAgICAgICAgICAgICAgIjoiIE9wYXF1ZVN0cmluZyhwYXNzd29yZCkpDQoNCiAg IFdoZXJlIE1ENSBpcyBkZWZpbmVkIGluIFtSRkMxMzIxXSBhbmQgW1JGQzYxNTFdLCBhbmQgdGhl IE9wYXF1ZVN0cmluZw0KICAgcHJvZmlsZSBpcyBkZWZpbmVkIGluIFtSRkM4MjY1XS4gIFRoZSBl bmNvZGluZyB1c2VkIGlzIFVURi04DQogICBbUkZDMzYyOV0uDQoNCiAgIFRoZSAxNi1ieXRlIGtl eSBpcyBmb3JtZWQgYnkgdGFraW5nIHRoZSBNRDUgaGFzaCBvZiB0aGUgcmVzdWx0IG9mDQogICBj b25jYXRlbmF0aW5nIHRoZSBmb2xsb3dpbmcgZml2ZSBmaWVsZHM6ICgxKSB0aGUgdXNlcm5hbWUs IHdpdGggYW55DQogICBxdW90ZXMgYW5kIHRyYWlsaW5nIG51bGxzIHJlbW92ZWQsIGFzIHRha2Vu IGZyb20gdGhlIFVTRVJOQU1FDQogICBhdHRyaWJ1dGUgKGluIHdoaWNoIGNhc2UgT3BhcXVlU3Ry aW5nIGhhcyBhbHJlYWR5IGJlZW4gYXBwbGllZCk7ICgyKQ0KICAgYSBzaW5nbGUgY29sb247ICgz KSB0aGUgcmVhbG0sIHdpdGggYW55IHF1b3RlcyBhbmQgdHJhaWxpbmcgbnVsbHMNCiAgIHJlbW92 ZWQgYW5kIGFmdGVyIHByb2Nlc3NpbmcgdXNpbmcgT3BhcXVlU3RyaW5nOyAoNCkgYSBzaW5nbGUg Y29sb247DQogICBhbmQgKDUpIHRoZSBwYXNzd29yZCwgd2l0aCBhbnkgdHJhaWxpbmcgbnVsbHMg cmVtb3ZlZCBhbmQgYWZ0ZXINCiAgIHByb2Nlc3NpbmcgdXNpbmcgT3BhcXVlU3RyaW5nLiAgRm9y IGV4YW1wbGUsIGlmIHRoZSB1c2VybmFtZSB3YXMNCiAgICd1c2VyJywgdGhlIHJlYWxtIHdhcyAn cmVhbG0nLCBhbmQgdGhlIHBhc3N3b3JkIHdhcyAncGFzcycsIHRoZW4gdGhlDQogICAxNi1ieXRl IEhNQUMga2V5IHdvdWxkIGJlIHRoZSByZXN1bHQgb2YgcGVyZm9ybWluZyBhbiBNRDUgaGFzaCBv biB0aGUNCiAgIHN0cmluZyAndXNlcjpyZWFsbTpwYXNzJywgdGhlIHJlc3VsdGluZyBoYXNoIGJl aW5nDQogICAweDg0OTNmYmM1M2JhNTgyZmI0YzA0NGM0NTZiZGM0MGViLg0KDQoNCg0KDQpQZXRp dC1IdWd1ZW5pbiwgZXQgYWwuIEV4cGlyZXMgU2VwdGVtYmVyIDIyLCAyMDE5ICAgICAgICAgICAg ICBbUGFnZSAyOF0NCgwNCkludGVybmV0LURyYWZ0IFNlc3Npb24gVHJhdmVyc2FsIFV0aWxpdGll cyBmb3IgTkFUIChTVFVOKSAgICAgTWFyY2ggMjAxOQ0KDQoNCiAgIFRoZSBzdHJ1Y3R1cmUgb2Yg dGhlIGtleSB3aGVuIHVzZWQgd2l0aCBsb25nLXRlcm0gY3JlZGVudGlhbHMNCiAgIGZhY2lsaXRh dGVzIGRlcGxveW1lbnQgaW4gc3lzdGVtcyB0aGF0IGFsc28gdXRpbGl6ZSBTSVAgW1JGQzMyNjFd Lg0KICAgVHlwaWNhbGx5LCBTSVAgc3lzdGVtcyB1dGlsaXppbmcgU0lQJ3MgZGlnZXN0IGF1dGhl bnRpY2F0aW9uDQogICBtZWNoYW5pc20gZG8gbm90IGFjdHVhbGx5IHN0b3JlIHRoZSBwYXNzd29y ZCBpbiB0aGUgZGF0YWJhc2UuDQogICBSYXRoZXIsIHRoZXkgc3RvcmUgYSB2YWx1ZSBjYWxsZWQg SChBMSksIHdoaWNoIGlzIGVxdWFsIHRvIHRoZSBrZXkNCiAgIGRlZmluZWQgYWJvdmUuICBGb3Ig ZXhhbXBsZSwgdGhpcyBtZWNoYW5pc20gY2FuIGJlIHVzZWQgd2l0aCB0aGUNCiAgIGF1dGhlbnRp Y2F0aW9uIGV4dGVuc2lvbnMgZGVmaW5lZCBpbiBbUkZDNTA5MF0uDQoNCiAgIFdoZW4gYSBQQVNT V09SRC1BTEdPUklUSE0gaXMgdXNlZCwgdGhlIGtleSBsZW5ndGggYW5kIGFsZ29yaXRobSB0bw0K ICAgdXNlIGFyZSBkZXNjcmliZWQgaW4gU2VjdGlvbiAxOC41LjEuDQoNCjkuMi4zLiAgRm9ybWlu ZyBhIFJlcXVlc3QNCg0KICAgVGhlcmUgYXJlIHR3byBjYXNlcyB3aGVuIGZvcm1pbmcgYSByZXF1 ZXN0LiAgSW4gdGhlIGZpcnN0IGNhc2UsIHRoaXMNCiAgIGlzIHRoZSBmaXJzdCByZXF1ZXN0IGZy b20gdGhlIGNsaWVudCB0byB0aGUgc2VydmVyIChhcyBpZGVudGlmaWVkIGJ5DQogICBob3N0bmFt ZSwgaWYgdGhlIEROUyBwcm9jZWR1cmVzIG9mIFNlY3Rpb24gOCBhcmUgdXNlZCwgZWxzZSBJUA0K ICAgYWRkcmVzcyBpZiBub3QpLiAgSW4gdGhlIHNlY29uZCBjYXNlLCB0aGUgY2xpZW50IGlzIHN1 Ym1pdHRpbmcgYQ0KICAgc3Vic2VxdWVudCByZXF1ZXN0IG9uY2UgYSBwcmV2aW91cyByZXF1ZXN0 L3Jlc3BvbnNlIHRyYW5zYWN0aW9uIGhhcw0KICAgY29tcGxldGVkIHN1Y2Nlc3NmdWxseS4gIEZv cm1pbmcgYSByZXF1ZXN0IGFzIGEgY29uc2VxdWVuY2Ugb2YgYSA0MDENCiAgIG9yIDQzOCBlcnJv ciByZXNwb25zZSBpcyBjb3ZlcmVkIGluIFNlY3Rpb24gOS4yLjUgYW5kIGlzIG5vdA0KICAgY29u c2lkZXJlZCBhICJzdWJzZXF1ZW50IHJlcXVlc3QiIGFuZCB0aHVzIGRvZXMgbm90IHV0aWxpemUg dGhlIHJ1bGVzDQogICBkZXNjcmliZWQgaW4gU2VjdGlvbiA5LjIuMy4yLg0KDQogICBUaGUgZGlm ZmVyZW5jZSBiZXR3ZWVuIGEgZmlyc3QgcmVxdWVzdCBhbmQgYSBzdWJzZXF1ZW50IHJlcXVlc3Qg aXMNCiAgIHRoZSBwcmVzZW5jZSBvciBhYnNlbmNlIG9mIHNvbWUgYXR0cmlidXRlcywgc28gb21p dHRpbmcgb3IgaW5jbHVkaW5nDQogICB0aGVtIGlzIGEgTVVTVC4NCg0KOS4yLjMuMS4gIEZpcnN0 IFJlcXVlc3QNCg0KICAgSWYgdGhlIGNsaWVudCBoYXMgbm90IGNvbXBsZXRlZCBhIHN1Y2Nlc3Nm dWwgcmVxdWVzdC9yZXNwb25zZQ0KICAgdHJhbnNhY3Rpb24gd2l0aCB0aGUgc2VydmVyLCBpdCBN VVNUIG9taXQgdGhlIFVTRVJOQU1FLCBVU0VSSEFTSCwNCiAgIE1FU1NBR0UtSU5URUdSSVRZLCBN RVNTQUdFLUlOVEVHUklUWS1TSEEyNTYsIFJFQUxNLCBOT05DRSwgUEFTU1dPUkQtDQogICBBTEdP UklUSE1TLCBhbmQgUEFTU1dPUkQtQUxHT1JJVEhNIGF0dHJpYnV0ZXMuICBJbiBvdGhlciB3b3Jk cywgdGhlDQogICBmaXJzdCByZXF1ZXN0IGlzIHNlbnQgYXMgaWYgdGhlcmUgd2VyZSBubyBhdXRo ZW50aWNhdGlvbiBvciBtZXNzYWdlDQogICBpbnRlZ3JpdHkgYXBwbGllZC4NCg0KOS4yLjMuMi4g IFN1YnNlcXVlbnQgUmVxdWVzdHMNCg0KICAgT25jZSBhIHJlcXVlc3QvcmVzcG9uc2UgdHJhbnNh Y3Rpb24gaGFzIGNvbXBsZXRlZCwgdGhlIGNsaWVudCB3aWxsDQogICBoYXZlIGJlZW4gcHJlc2Vu dGVkIGEgcmVhbG0gYW5kIG5vbmNlIGJ5IHRoZSBzZXJ2ZXIsIGFuZCBzZWxlY3RlZCBhDQogICB1 c2VybmFtZSBhbmQgcGFzc3dvcmQgd2l0aCB3aGljaCBpdCBhdXRoZW50aWNhdGVkLiAgVGhlIGNs aWVudCBTSE9VTEQNCiAgIGNhY2hlIHRoZSB1c2VybmFtZSwgcGFzc3dvcmQsIHJlYWxtLCBhbmQg bm9uY2UgZm9yIHN1YnNlcXVlbnQNCiAgIGNvbW11bmljYXRpb25zIHdpdGggdGhlIHNlcnZlci4g IFdoZW4gdGhlIGNsaWVudCBzZW5kcyBhIHN1YnNlcXVlbnQNCiAgIHJlcXVlc3QsIGl0IE1VU1Qg aW5jbHVkZSBlaXRoZXIgdGhlIFVTRVJOQU1FIG9yIFVTRVJIQVNILCBSRUFMTSwNCiAgIE5PTkNF LCBhbmQgUEFTU1dPUkQtQUxHT1JJVEhNIGF0dHJpYnV0ZXMgd2l0aCB0aGVzZSBjYWNoZWQgdmFs dWVzLg0KICAgSXQgTVVTVCBpbmNsdWRlIGEgTUVTU0FHRS1JTlRFR1JJVFkgYXR0cmlidXRlIG9y IGEgTUVTU0FHRS1JTlRFR1JJVFktDQogICBTSEEyNTYgYXR0cmlidXRlLCBjb21wdXRlZCBhcyBk ZXNjcmliZWQgaW4gU2VjdGlvbiAxNC41IGFuZA0KICAgU2VjdGlvbiAxNC42IHVzaW5nIHRoZSBj YWNoZWQgcGFzc3dvcmQuICBUaGUgY2hvaWNlIGJldHdlZW4gdGhlIHR3bw0KDQoNCg0KUGV0aXQt SHVndWVuaW4sIGV0IGFsLiBFeHBpcmVzIFNlcHRlbWJlciAyMiwgMjAxOSAgICAgICAgICAgICAg W1BhZ2UgMjldDQoMDQpJbnRlcm5ldC1EcmFmdCBTZXNzaW9uIFRyYXZlcnNhbCBVdGlsaXRpZXMg Zm9yIE5BVCAoU1RVTikgICAgIE1hcmNoIDIwMTkNCg0KDQogICBhdHRyaWJ1dGVzIGRlcGVuZHMg b24gdGhlIGF0dHJpYnV0ZSByZWNlaXZlZCBpbiB0aGUgcmVzcG9uc2UgdG8gdGhlDQogICBmaXJz dCByZXF1ZXN0Lg0KDQo5LjIuNC4gIFJlY2VpdmluZyBhIFJlcXVlc3QNCg0KICAgQWZ0ZXIgdGhl IHNlcnZlciBoYXMgZG9uZSB0aGUgYmFzaWMgcHJvY2Vzc2luZyBvZiBhIHJlcXVlc3QsIGl0DQog ICBwZXJmb3JtcyB0aGUgY2hlY2tzIGxpc3RlZCBiZWxvdyBpbiB0aGUgb3JkZXIgc3BlY2lmaWVk LiAgTm90ZSB0aGF0DQogICBpdCBpcyBSRUNPTU1FTkRFRCB0aGF0IHRoZSBSRUFMTSB2YWx1ZSBi ZSB0aGUgZG9tYWluIG5hbWUgb2YgdGhlDQogICBwcm92aWRlciBvZiB0aGUgU1RVTiBzZXJ2ZXI6 DQoNCiAgIG8gIElmIHRoZSBtZXNzYWdlIGRvZXMgbm90IGNvbnRhaW4gYSBNRVNTQUdFLUlOVEVH UklUWSBvciBNRVNTQUdFLQ0KICAgICAgSU5URUdSSVRZLVNIQTI1NiBhdHRyaWJ1dGUsIHRoZSBz ZXJ2ZXIgTVVTVCBnZW5lcmF0ZSBhbiBlcnJvcg0KICAgICAgcmVzcG9uc2Ugd2l0aCBhbiBlcnJv ciBjb2RlIG9mIDQwMSAoVW5hdXRoZW50aWNhdGVkKS4gIFRoaXMNCiAgICAgIHJlc3BvbnNlIE1V U1QgaW5jbHVkZSBhIFJFQUxNIHZhbHVlLiAgVGhlIHJlc3BvbnNlIE1VU1QgaW5jbHVkZSBhDQog ICAgICBOT05DRSwgc2VsZWN0ZWQgYnkgdGhlIHNlcnZlci4gIFRoZSBzZXJ2ZXIgTVVTVCBOT1Qg Y2hvb3NlIHRoZQ0KICAgICAgc2FtZSBOT05DRSBmb3IgdHdvIHJlcXVlc3RzIHVubGVzcyB0aGV5 IGhhdmUgdGhlIHNhbWUgc291cmNlIElQDQogICAgICBhZGRyZXNzIGFuZCBwb3J0LiAgVGhlIHNl cnZlciBNQVkgc3VwcG9ydCBhbHRlcm5hdGUgcGFzc3dvcmQNCiAgICAgIGFsZ29yaXRobXMsIGlu IHdoaWNoIGNhc2UgaXQgY2FuIGxpc3QgdGhlbSBpbiBwcmVmZXJlbnRpYWwgb3JkZXINCiAgICAg IGluIGEgUEFTU1dPUkQtQUxHT1JJVEhNUyBhdHRyaWJ1dGUuICBJZiB0aGUgc2VydmVyIGFkZHMg YQ0KICAgICAgUEFTU1dPUkQtQUxHT1JJVEhNUyBhdHRyaWJ1dGUgaXQgTVVTVCBzZXQgdGhlIFNU VU4gU2VjdXJpdHkNCiAgICAgIEZlYXR1cmUgIlBhc3N3b3JkIGFsZ29yaXRobXMiIGJpdCBzZXQg dG8gMS4gIFRoZSBzZXJ2ZXIgTUFZDQogICAgICBzdXBwb3J0IGFub255bW91cyB1c2VybmFtZSwg aW4gd2hpY2ggY2FzZSBpdCBNVVNUIHNldCB0aGUgU1RVTg0KICAgICAgU2VjdXJpdHkgRmVhdHVy ZSAiVXNlcm5hbWUgYW5vbnltaXR5IiBiaXQgc2V0IHRvIDEuICBUaGUgcmVzcG9uc2UNCiAgICAg IFNIT1VMRCBOT1QgY29udGFpbiBhIFVTRVJOQU1FLCBVU0VSSEFTSCwgTUVTU0FHRS1JTlRFR1JJ VFkgb3INCiAgICAgIE1FU1NBR0UtSU5URUdSSVRZLVNIQTI1NiBhdHRyaWJ1dGUuDQoNCiAgIE5v dGU6ICBSZXVzaW5nIGEgTk9OQ0UgZm9yIGRpZmZlcmVudCBzb3VyY2UgSVAgYWRkcmVzc2VzIG9y IHBvcnRzIHdhcw0KICAgICAgbm90IGV4cGxpY2l0bHkgZm9yYmlkZGVuIGluIFtSRkM1Mzg5XS4N Cg0KICAgbyAgSWYgdGhlIG1lc3NhZ2UgY29udGFpbnMgYSBNRVNTQUdFLUlOVEVHUklUWSBvciBh IE1FU1NBR0UtDQogICAgICBJTlRFR1JJVFktU0hBMjU2IGF0dHJpYnV0ZSwgYnV0IGlzIG1pc3Np bmcgZWl0aGVyIHRoZSBVU0VSTkFNRSBvcg0KICAgICAgVVNFUkhBU0gsIFJFQUxNLCBvciBOT05D RSBhdHRyaWJ1dGUsIHRoZSBzZXJ2ZXIgTVVTVCBnZW5lcmF0ZSBhbg0KICAgICAgZXJyb3IgcmVz cG9uc2Ugd2l0aCBhbiBlcnJvciBjb2RlIG9mIDQwMCAoQmFkIFJlcXVlc3QpLiAgVGhpcw0KICAg ICAgcmVzcG9uc2UgU0hPVUxEIE5PVCBpbmNsdWRlIGEgVVNFUk5BTUUsIFVTRVJIQVNILCBOT05D RSwgb3IgUkVBTE0uDQogICAgICBUaGUgcmVzcG9uc2UgY2Fubm90IGNvbnRhaW4gYSBNRVNTQUdF LUlOVEVHUklUWSBvciBNRVNTQUdFLQ0KICAgICAgSU5URUdSSVRZLVNIQTI1NiBhdHRyaWJ1dGUs IGFzIHRoZSBhdHRyaWJ1dGVzIHJlcXVpcmVkIHRvIGdlbmVyYXRlDQogICAgICB0aGVtIGFyZSBt aXNzaW5nLg0KDQogICBvICBJZiB0aGUgTk9OQ0UgYXR0cmlidXRlIHN0YXJ0cyB3aXRoIHRoZSAi bm9uY2UgY29va2llIiB3aXRoIHRoZQ0KICAgICAgU1RVTiBTZWN1cml0eSBGZWF0dXJlICJQYXNz d29yZCBhbGdvcml0aG1zIiBiaXQgc2V0IHRvIDEsIHRoZQ0KICAgICAgc2VydmVyIHBlcmZvcm1z IHRoZXNlIGNoZWNrcyBpbiB0aGUgb3JkZXIgc3BlY2lmaWVkOg0KDQogICAgICAqICBJZiB0aGUg cmVxdWVzdCBjb250YWlucyBuZWl0aGVyIFBBU1NXT1JELUFMR09SSVRITVMgbm9yDQogICAgICAg ICBQQVNTV09SRC1BTEdPUklUSE0sIHRoZW4gdGhlIHJlcXVlc3QgaXMgcHJvY2Vzc2VkIGFzIHRo b3VnaA0KICAgICAgICAgUEFTU1dPUkQtQUxHT1JJVEhNIHdlcmUgTUQ1IChOb3RlIHRoYXQgaWYg dGhlIFBBU1NXT1JELQ0KICAgICAgICAgQUxHT1JJVEhNUyBhdHRyaWJ1dGUgaXMgcHJlc2VudCBi dXQgZG9lcyBub3QgY29udGFpbiBNRDUsIHRoaXMNCiAgICAgICAgIHdpbGwgcmVzdWx0IGluIGEg NDAwIEJhZCBSZXF1ZXN0IGluIGEgbGF0ZXIgc3RlcCBiZWxvdykuDQoNCg0KDQoNClBldGl0LUh1 Z3VlbmluLCBldCBhbC4gRXhwaXJlcyBTZXB0ZW1iZXIgMjIsIDIwMTkgICAgICAgICAgICAgIFtQ YWdlIDMwXQ0KDA0KSW50ZXJuZXQtRHJhZnQgU2Vzc2lvbiBUcmF2ZXJzYWwgVXRpbGl0aWVzIGZv ciBOQVQgKFNUVU4pICAgICBNYXJjaCAyMDE5DQoNCg0KICAgICAgKiAgT3RoZXJ3aXNlLCB1bmxl c3MgKDEpIFBBU1NXT1JELUFMR09SSVRITSBhbmQgUEFTU1dPUkQtDQogICAgICAgICBBTEdPUklU SE1TIGFyZSBib3RoIHByZXNlbnQsICgyKSBQQVNTV09SRC1BTEdPUklUSE1TIG1hdGNoZXMNCiAg ICAgICAgIHRoZSB2YWx1ZSBzZW50IGluIHRoZSByZXNwb25zZSB0aGF0IHNlbnQgdGhpcyBOT05D RSwgYW5kICgzKQ0KICAgICAgICAgUEFTU1dPUkQtQUxHT1JJVEhNIG1hdGNoZXMgb25lIG9mIHRo ZSBlbnRyaWVzIGluIFBBU1NXT1JELQ0KICAgICAgICAgQUxHT1JJVEhNUywgdGhlIHNlcnZlciBN VVNUIGdlbmVyYXRlIGFuIGVycm9yIHJlc3BvbnNlIHdpdGggYW4NCiAgICAgICAgIGVycm9yIGNv ZGUgb2YgNDAwIChCYWQgUmVxdWVzdCkuDQoNCiAgIG8gIElmIHRoZSBOT05DRSBpcyBubyBsb25n ZXIgdmFsaWQgYW5kIGF0IHRoZSBzYW1lIHRpbWUgdGhlIE1FU1NBR0UtDQogICAgICBJTlRFR1JJ VFkgb3IgYSBNRVNTQUdFLUlOVEVHUklUWS1TSEEyNTYgYXR0cmlidXRlIGlzIGludmFsaWQsIHRo ZQ0KICAgICAgc2VydmVyIE1VU1QgZ2VuZXJhdGUgYW4gZXJyb3IgcmVzcG9uc2Ugd2l0aCBhbiBl cnJvciBjb2RlIG9mIDQwMS4NCiAgICAgIFRoaXMgcmVzcG9uc2UgTVVTVCBpbmNsdWRlIE5PTkNF LCBSRUFMTSwgYW5kIFBBU1NXT1JELUFMR09SSVRITVMNCiAgICAgIGF0dHJpYnV0ZXMgYW5kIFNI T1VMRCBOT1QgaW5jbHVkZSB0aGUgVVNFUk5BTUUgb3IgVVNFUkhBU0gNCiAgICAgIGF0dHJpYnV0 ZS4gIFRoZSBOT05DRSBhdHRyaWJ1dGUgdmFsdWUgTVVTVCBiZSB2YWxpZC4gIFRoZSByZXNwb25z ZQ0KICAgICAgTUFZIGluY2x1ZGUgYSBNRVNTQUdFLUlOVEVHUklUWSBvciBNRVNTQUdFLUlOVEVH UklUWS1TSEEyNTYNCiAgICAgIGF0dHJpYnV0ZSwgdXNpbmcgdGhlIHByZXZpb3VzIE5PTkNFIHRv IGNhbGN1bGF0ZSBpdC4NCg0KICAgbyAgSWYgdGhlIE5PTkNFIGlzIG5vIGxvbmdlciB2YWxpZCwg dGhlIHNlcnZlciBNVVNUIGdlbmVyYXRlIGFuIGVycm9yDQogICAgICByZXNwb25zZSB3aXRoIGFu IGVycm9yIGNvZGUgb2YgNDM4IChTdGFsZSBOb25jZSkuICBUaGlzIHJlc3BvbnNlDQogICAgICBN VVNUIGluY2x1ZGUgTk9OQ0UsIFJFQUxNLCBhbmQgUEFTU1dPUkQtQUxHT1JJVEhNUyBhdHRyaWJ1 dGVzIGFuZA0KICAgICAgU0hPVUxEIE5PVCBpbmNsdWRlIHRoZSBVU0VSTkFNRSwgVVNFUkhBU0gg YXR0cmlidXRlLiAgVGhlIE5PTkNFDQogICAgICBhdHRyaWJ1dGUgdmFsdWUgTVVTVCBiZSB2YWxp ZC4gIFRoZSByZXNwb25zZSBNQVkgaW5jbHVkZSBhDQogICAgICBNRVNTQUdFLUlOVEVHUklUWSBv ciBNRVNTQUdFLUlOVEVHUklUWS1TSEEyNTYgYXR0cmlidXRlLCB1c2luZyB0aGUNCiAgICAgIHBy ZXZpb3VzIE5PTkNFIHRvIGNhbGN1bGF0ZSBpdC4gIFNlcnZlcnMgY2FuIHJldm9rZSBub25jZXMg aW4NCiAgICAgIG9yZGVyIHRvIHByb3ZpZGUgYWRkaXRpb25hbCBzZWN1cml0eS4gIFNlZSBTZWN0 aW9uIDUuNCBvZg0KICAgICAgW1JGQzc2MTZdIGZvciBndWlkZWxpbmVzLg0KDQogICBvICBJZiB0 aGUgdmFsdWUgb2YgdGhlIFVTRVJOQU1FIG9yIFVTRVJIQVNIIGF0dHJpYnV0ZSBpcyBub3QgdmFs aWQsDQogICAgICB0aGUgc2VydmVyIE1VU1QgZ2VuZXJhdGUgYW4gZXJyb3IgcmVzcG9uc2Ugd2l0 aCBhbiBlcnJvciBjb2RlIG9mDQogICAgICA0MDEgKFVuYXV0aGVudGljYXRlZCkuICBUaGlzIHJl c3BvbnNlIE1VU1QgaW5jbHVkZSBhIFJFQUxNIHZhbHVlLg0KICAgICAgVGhlIHJlc3BvbnNlIE1V U1QgaW5jbHVkZSBhIE5PTkNFLCBzZWxlY3RlZCBieSB0aGUgc2VydmVyLiAgVGhlDQogICAgICBy ZXNwb25zZSBNVVNUIGluY2x1ZGUgYSBQQVNTV09SRC1BTEdPUklUSE1TIGF0dHJpYnV0ZS4gIFRo ZQ0KICAgICAgcmVzcG9uc2UgU0hPVUxEIE5PVCBjb250YWluIGEgVVNFUk5BTUUsIFVTRVJIQVNI IGF0dHJpYnV0ZS4gIFRoZQ0KICAgICAgcmVzcG9uc2UgTUFZIGluY2x1ZGUgYSBNRVNTQUdFLUlO VEVHUklUWSBvciBNRVNTQUdFLUlOVEVHUklUWS0NCiAgICAgIFNIQTI1NiBhdHRyaWJ1dGUsIHVz aW5nIHRoZSBwcmV2aW91cyBrZXkgdG8gY2FsY3VsYXRlIGl0Lg0KDQogICBvICBJZiB0aGUgTUVT U0FHRS1JTlRFR1JJVFktU0hBMjU2IGF0dHJpYnV0ZSBpcyBwcmVzZW50IGNvbXB1dGUgdGhlDQog ICAgICB2YWx1ZSBmb3IgdGhlIG1lc3NhZ2UgaW50ZWdyaXR5IGFzIGRlc2NyaWJlZCBpbiBTZWN0 aW9uIDE0LjYsDQogICAgICB1c2luZyB0aGUgcGFzc3dvcmQgYXNzb2NpYXRlZCB3aXRoIHRoZSB1 c2VybmFtZS4gIEVsc2UsIHVzaW5nIHRoZQ0KICAgICAgc2FtZSBwYXNzd29yZCwgY29tcHV0ZSB0 aGUgdmFsdWUgZm9yIHRoZSBtZXNzYWdlIGludGVncml0eSBhcw0KICAgICAgZGVzY3JpYmVkIGlu IFNlY3Rpb24gMTQuNS4gIElmIHRoZSByZXN1bHRpbmcgdmFsdWUgZG9lcyBub3QgbWF0Y2gNCiAg ICAgIHRoZSBjb250ZW50cyBvZiB0aGUgTUVTU0FHRS1JTlRFR1JJVFkgYXR0cmlidXRlIG9yIHRo ZSBNRVNTQUdFLQ0KICAgICAgSU5URUdSSVRZLVNIQTI1NiBhdHRyaWJ1dGUsIHRoZSBzZXJ2ZXIg TVVTVCByZWplY3QgdGhlIHJlcXVlc3QNCiAgICAgIHdpdGggYW4gZXJyb3IgcmVzcG9uc2UuICBU aGlzIHJlc3BvbnNlIE1VU1QgdXNlIGFuIGVycm9yIGNvZGUgb2YNCiAgICAgIDQwMSAoVW5hdXRo ZW50aWNhdGVkKS4gIEl0IE1VU1QgaW5jbHVkZSBSRUFMTSBhbmQgTk9OQ0UgYXR0cmlidXRlcw0K ICAgICAgYW5kIFNIT1VMRCBOT1QgaW5jbHVkZSB0aGUgVVNFUk5BTUUsIFVTRVJIQVNILCBNRVNT QUdFLUlOVEVHUklUWSwNCiAgICAgIG9yIE1FU1NBR0UtSU5URUdSSVRZLVNIQTI1NiBhdHRyaWJ1 dGUuDQoNCg0KDQoNCg0KUGV0aXQtSHVndWVuaW4sIGV0IGFsLiBFeHBpcmVzIFNlcHRlbWJlciAy MiwgMjAxOSAgICAgICAgICAgICAgW1BhZ2UgMzFdDQoMDQpJbnRlcm5ldC1EcmFmdCBTZXNzaW9u IFRyYXZlcnNhbCBVdGlsaXRpZXMgZm9yIE5BVCAoU1RVTikgICAgIE1hcmNoIDIwMTkNCg0KDQog ICBJZiB0aGVzZSBjaGVja3MgcGFzcywgdGhlIHNlcnZlciBjb250aW51ZXMgdG8gcHJvY2VzcyB0 aGUgcmVxdWVzdC4NCiAgIEFueSByZXNwb25zZSBnZW5lcmF0ZWQgYnkgdGhlIHNlcnZlciBNVVNU IGluY2x1ZGUgTUVTU0FHRS1JTlRFR1JJVFktDQogICBTSEEyNTYgYXR0cmlidXRlLCBjb21wdXRl ZCB1c2luZyB0aGUgdXNlcm5hbWUgYW5kIHBhc3N3b3JkIHV0aWxpemVkDQogICB0byBhdXRoZW50 aWNhdGUgdGhlIHJlcXVlc3QsIHVubGVzcyB0aGUgcmVxdWVzdCB3YXMgcHJvY2Vzc2VkIGFzDQog ICB0aG91Z2ggUEFTU1dPUkQtQUxHT1JJVEhNIHdhcyBNRDUgKGJlY2F1c2UgdGhlIHJlcXVlc3Qg Y29udGFpbmVkDQogICBuZWl0aGVyIFBBU1NXT1JELUFMR09SSVRITVMgbm9yIFBBU1NXT1JELUFM R09SSVRITSkuICBJbiB0aGF0IGNhc2UNCiAgIHRoZSBNRVNTQUdFLUlOVEVHUklUWSBhdHRyaWJ1 dGUgTVVTVCBiZSB1c2VkIGluc3RlYWQgb2YgdGhlIE1FU1NBR0UtDQogICBJTlRFR1JJVFktU0hB MjU2IGF0dHJpYnV0ZS4gIFRoZSBSRUFMTSwgTk9OQ0UsIFVTRVJOQU1FIGFuZCBVU0VSSEFTSA0K ICAgYXR0cmlidXRlcyBTSE9VTEQgTk9UIGJlIGluY2x1ZGVkLg0KDQo5LjIuNS4gIFJlY2Vpdmlu ZyBhIFJlc3BvbnNlDQoNCiAgIElmIHRoZSByZXNwb25zZSBpcyBhbiBlcnJvciByZXNwb25zZSB3 aXRoIGFuIGVycm9yIGNvZGUgb2YgNDAxDQogICAoVW5hdXRoZW50aWNhdGVkKSBvciA0MzggKFN0 YWxlIE5vbmNlKSwgdGhlIGNsaWVudCBNVVNUIHRlc3QgaWYgdGhlDQogICBOT05DRSBhdHRyaWJ1 dGUgdmFsdWUgc3RhcnRzIHdpdGggdGhlICJub25jZSBjb29raWUiLiAgSWYgdGhlIHRlc3QNCiAg IHN1Y2NlZWRzIGFuZCB0aGUgIm5vbmNlIGNvb2tpZSIgaGFzIHRoZSBTVFVOIFNlY3VyaXR5IEZl YXR1cmUNCiAgICJQYXNzd29yZCBhbGdvcml0aG1zIiBiaXQgc2V0IHRvIDEgYnV0IG5vIFBBU1NX T1JELUFMR09SSVRITVMNCiAgIGF0dHJpYnV0ZSBpcyBwcmVzZW50LCB0aGVuIHRoZSBjbGllbnQg TVVTVCBOT1QgcmV0cnkgdGhlIHJlcXVlc3Qgd2l0aA0KICAgYSBuZXcgdHJhbnNhY3Rpb24uDQoN CiAgIElmIHRoZSByZXNwb25zZSBpcyBhbiBlcnJvciByZXNwb25zZSB3aXRoIGFuIGVycm9yIGNv ZGUgb2YgNDAxDQogICAoVW5hdXRoZW50aWNhdGVkKSwgdGhlIGNsaWVudCBTSE9VTEQgcmV0cnkg dGhlIHJlcXVlc3Qgd2l0aCBhIG5ldw0KICAgdHJhbnNhY3Rpb24uICBUaGlzIHJlcXVlc3QgTVVT VCBjb250YWluIGEgVVNFUk5BTUUgb3IgYSBVU0VSSEFTSCwNCiAgIGRldGVybWluZWQgYnkgdGhl IGNsaWVudCBhcyB0aGUgYXBwcm9wcmlhdGUgdXNlcm5hbWUgZm9yIHRoZSBSRUFMTQ0KICAgZnJv bSB0aGUgZXJyb3IgcmVzcG9uc2UuICBJZiB0aGUgIm5vbmNlIGNvb2tpZSIgd2FzIHByZXNlbnQg YW5kIGhhZA0KICAgdGhlIFNUVU4gU2VjdXJpdHkgRmVhdHVyZSAiVXNlcm5hbWUgYW5vbnltaXR5 IiBiaXQgc2V0IHRvIDEgdGhlbiB0aGUNCiAgIFVTRVJIQVNIIGF0dHJpYnV0ZSBNVVNUIGJlIHVz ZWQsIGVsc2UgdGhlIFVTRVJOQU1FIGF0dHJpYnV0ZSBNVVNUIGJlDQogICB1c2VkLiAgVGhlIHJl cXVlc3QgTVVTVCBjb250YWluIHRoZSBSRUFMTSwgY29waWVkIGZyb20gdGhlIGVycm9yDQogICBy ZXNwb25zZS4gIFRoZSByZXF1ZXN0IE1VU1QgY29udGFpbiB0aGUgTk9OQ0UsIGNvcGllZCBmcm9t IHRoZSBlcnJvcg0KICAgcmVzcG9uc2UuICBJZiB0aGUgcmVzcG9uc2UgY29udGFpbnMgYSBQQVNT V09SRC1BTEdPUklUSE1TIGF0dHJpYnV0ZSwNCiAgIHRoZSByZXF1ZXN0IE1VU1QgY29udGFpbiB0 aGUgUEFTU1dPUkQtQUxHT1JJVEhNUyBhdHRyaWJ1dGUgd2l0aCB0aGUNCiAgIHNhbWUgY29udGVu dC4gIElmIHRoZSByZXNwb25zZSBjb250YWlucyBhIFBBU1NXT1JELUFMR09SSVRITVMNCiAgIGF0 dHJpYnV0ZSwgYW5kIHRoaXMgYXR0cmlidXRlIGNvbnRhaW5zIGF0IGxlYXN0IG9uZSBhbGdvcml0 aG0gdGhhdCBpcw0KICAgc3VwcG9ydGVkIGJ5IHRoZSBjbGllbnQgdGhlbiB0aGUgcmVxdWVzdCBN VVNUIGNvbnRhaW4gYSBQQVNTV09SRC0NCiAgIEFMR09SSVRITSBhdHRyaWJ1dGUgd2l0aCB0aGUg Zmlyc3QgYWxnb3JpdGhtIHN1cHBvcnRlZCBvbiB0aGUgbGlzdC4NCiAgIElmIHRoZSByZXNwb25z ZSBjb250YWlucyBhIFBBU1NXT1JELUFMR09SSVRITVMgYXR0cmlidXRlLCBhbmQgdGhpcw0KICAg YXR0cmlidXRlIGRvZXMgbm90IGNvbnRhaW4gYW55IGFsZ29yaXRobSB0aGF0IGlzIHN1cHBvcnRl ZCBieSB0aGUNCiAgIGNsaWVudCwgdGhlbiB0aGUgY2xpZW50IE1VU1QgTk9UIHJldHJ5IHRoZSBy ZXF1ZXN0IHdpdGggYSBuZXcNCiAgIHRyYW5zYWN0aW9uLiAgVGhlIGNsaWVudCBNVVNUIE5PVCBw ZXJmb3JtIHRoaXMgcmV0cnkgaWYgaXQgaXMgbm90DQogICBjaGFuZ2luZyB0aGUgVVNFUk5BTUUg b3IgVVNFUkhBU0ggb3IgUkVBTE0gb3IgaXRzIGFzc29jaWF0ZWQNCiAgIHBhc3N3b3JkLCBmcm9t IHRoZSBwcmV2aW91cyBhdHRlbXB0Lg0KDQogICBJZiB0aGUgcmVzcG9uc2UgaXMgYW4gZXJyb3Ig cmVzcG9uc2Ugd2l0aCBhbiBlcnJvciBjb2RlIG9mIDQzOCAoU3RhbGUNCiAgIE5vbmNlKSwgdGhl IGNsaWVudCBNVVNUIHJldHJ5IHRoZSByZXF1ZXN0LCB1c2luZyB0aGUgbmV3IE5PTkNFDQogICBh dHRyaWJ1dGUgc3VwcGxpZWQgaW4gdGhlIDQzOCAoU3RhbGUgTm9uY2UpIHJlc3BvbnNlLiAgVGhp cyByZXRyeQ0KICAgTVVTVCBhbHNvIGluY2x1ZGUgZWl0aGVyIHRoZSBVU0VSTkFNRSBvciBVU0VS SEFTSCwgUkVBTE0gYW5kIGVpdGhlcg0KICAgdGhlIE1FU1NBR0UtSU5URUdSSVRZIG9yIE1FU1NB R0UtSU5URUdSSVRZLVNIQTI1NiBhdHRyaWJ1dGVzLg0KDQoNCg0KDQpQZXRpdC1IdWd1ZW5pbiwg ZXQgYWwuIEV4cGlyZXMgU2VwdGVtYmVyIDIyLCAyMDE5ICAgICAgICAgICAgICBbUGFnZSAzMl0N CgwNCkludGVybmV0LURyYWZ0IFNlc3Npb24gVHJhdmVyc2FsIFV0aWxpdGllcyBmb3IgTkFUIChT VFVOKSAgICAgTWFyY2ggMjAxOQ0KDQoNCiAgIEZvciBhbGwgb3RoZXIgcmVzcG9uc2VzLCBpZiB0 aGUgTk9OQ0UgYXR0cmlidXRlIHN0YXJ0cyB3aXRoIHRoZQ0KICAgIm5vbmNlIGNvb2tpZSIgd2l0 aCB0aGUgU1RVTiBTZWN1cml0eSBGZWF0dXJlICJQYXNzd29yZCBhbGdvcml0aG1zIg0KICAgYml0 IHNldCB0byAxIGJ1dCBQQVNTV09SRC1BTEdPUklUSE1TIGlzIG5vdCBwcmVzZW50LCB0aGUgcmVz cG9uc2UNCiAgIE1VU1QgYmUgaWdub3JlZC4NCg0KICAgSWYgdGhlIHJlc3BvbnNlIGlzIGFuIGVy cm9yIHJlc3BvbnNlIHdpdGggYW4gZXJyb3IgY29kZSBvZiA0MDAsIGFuZA0KICAgZG9lcyBub3Qg Y29udGFpbnMgZWl0aGVyIE1FU1NBR0UtSU5URUdSSVRZIG9yIE1FU1NBR0UtSU5URUdSSVRZLQ0K ICAgU0hBMjU2IGF0dHJpYnV0ZSB0aGVuIHRoZSByZXNwb25zZSBNVVNUIGJlIGRpc2NhcmRlZCwg YXMgaWYgaXQgd2FzDQogICBuZXZlciByZWNlaXZlZC4gIFRoaXMgbWVhbnMgdGhhdCByZXRyYW5z bWl0cywgaWYgYXBwbGljYWJsZSwgd2lsbA0KICAgY29udGludWUuDQoNCiAgIE5vdGU6ICBJbiB0 aGF0IGNhc2UgdGhlIDQwMCB3aWxsIG5ldmVyIHJlYWNoIHRoZSBhcHBsaWNhdGlvbiwNCiAgICAg IHJlc3VsdGluZyBpbiBhIHRpbWVvdXQuDQoNCiAgIFRoZSBjbGllbnQgbG9va3MgZm9yIHRoZSBN RVNTQUdFLUlOVEVHUklUWSBvciBNRVNTQUdFLUlOVEVHUklUWS0NCiAgIFNIQTI1NiBhdHRyaWJ1 dGUgaW4gdGhlIHJlc3BvbnNlIChlaXRoZXIgc3VjY2VzcyBvciBmYWlsdXJlKS4gIElmDQogICBw cmVzZW50LCB0aGUgY2xpZW50IGNvbXB1dGVzIHRoZSBtZXNzYWdlIGludGVncml0eSBvdmVyIHRo ZSByZXNwb25zZQ0KICAgYXMgZGVmaW5lZCBpbiBTZWN0aW9uIDE0LjUgb3IgU2VjdGlvbiAxNC42 LCB1c2luZyB0aGUgc2FtZSBwYXNzd29yZA0KICAgaXQgdXRpbGl6ZWQgZm9yIHRoZSByZXF1ZXN0 LiAgSWYgdGhlIHJlc3VsdGluZyB2YWx1ZSBtYXRjaGVzIHRoZQ0KICAgY29udGVudHMgb2YgdGhl IE1FU1NBR0UtSU5URUdSSVRZIG9yIE1FU1NBR0UtSU5URUdSSVRZLVNIQTI1Ng0KICAgYXR0cmli dXRlLCB0aGUgcmVzcG9uc2UgaXMgY29uc2lkZXJlZCBhdXRoZW50aWNhdGVkLiAgSWYgdGhlIHZh bHVlDQogICBkb2VzIG5vdCBtYXRjaCwgb3IgaWYgYm90aCBNRVNTQUdFLUlOVEVHUklUWSBhbmQg TUVTU0FHRS1JTlRFR1JJVFktDQogICBTSEEyNTYgd2VyZSBhYnNlbnQsIHRoZSBwcm9jZXNzaW5n IGRlcGVuZHMgb24gdGhlIHJlcXVlc3QgYmVlbiBzZW50DQogICBvdmVyIGEgcmVsaWFibGUgb3Ig YW4gdW5yZWxpYWJsZSB0cmFuc3BvcnQuDQoNCiAgIElmIHRoZSByZXF1ZXN0IHdhcyBzZW50IG92 ZXIgYW4gdW5yZWxpYWJsZSB0cmFuc3BvcnQsIHRoZSByZXNwb25zZQ0KICAgTVVTVCBiZSBkaXNj YXJkZWQsIGFzIGlmIGl0IHdhcyBuZXZlciByZWNlaXZlZC4gIFRoaXMgbWVhbnMgdGhhdA0KICAg cmV0cmFuc21pdHMsIGlmIGFwcGxpY2FibGUsIHdpbGwgY29udGludWUuICBJZiBhbGwgdGhlIHJl c3BvbnNlcw0KICAgcmVjZWl2ZWQgYXJlIGRpc2NhcmRlZCB0aGVuIGluc3RlYWQgb2Ygc2lnbmFs aW5nIGEgdGltZW91dCBhZnRlcg0KICAgZW5kaW5nIHRoZSB0cmFuc2FjdGlvbiB0aGUgbGF5ZXIg TVVTVCBzaWduYWwgdGhhdCB0aGUgaW50ZWdyaXR5DQogICBwcm90ZWN0aW9uIHdhcyB2aW9sYXRl ZC4NCg0KICAgSWYgdGhlIHJlcXVlc3Qgd2FzIHNlbnQgb3ZlciBhIHJlbGlhYmxlIHRyYW5zcG9y dCwgdGhlIHJlc3BvbnNlIE1VU1QNCiAgIGJlIGRpc2NhcmRlZCBhbmQgdGhlIGxheWVyIE1VU1Qg aW1tZWRpYXRlbHkgZW5kIHRoZSB0cmFuc2FjdGlvbiBhbmQNCiAgIHNpZ25hbCB0aGF0IHRoZSBp bnRlZ3JpdHkgcHJvdGVjdGlvbiB3YXMgdmlvbGF0ZWQuDQoNCiAgIElmIHRoZSByZXNwb25zZSBj b250YWlucyBhIFBBU1NXT1JELUFMR09SSVRITVMgYXR0cmlidXRlLCBhbGwgdGhlDQogICBzdWJz ZXF1ZW50IHJlcXVlc3RzIE1VU1QgYmUgYXV0aGVudGljYXRlZCB1c2luZyBNRVNTQUdFLUlOVEVH UklUWS0NCiAgIFNIQTI1NiBvbmx5Lg0KDQoxMC4gIEFMVEVSTkFURS1TRVJWRVIgTWVjaGFuaXNt DQoNCiAgIFRoaXMgc2VjdGlvbiBkZXNjcmliZXMgYSBtZWNoYW5pc20gaW4gU1RVTiB0aGF0IGFs bG93cyBhIHNlcnZlciB0bw0KICAgcmVkaXJlY3QgYSBjbGllbnQgdG8gYW5vdGhlciBzZXJ2ZXIu ICBUaGlzIGV4dGVuc2lvbiBpcyBvcHRpb25hbCwgYW5kDQogICBhIHVzYWdlIG11c3QgZGVmaW5l IGlmIGFuZCB3aGVuIHRoaXMgZXh0ZW5zaW9uIGlzIHVzZWQuICBUaGUNCiAgIEFMVEVSTkFURS1T RVJWRVIgYXR0cmlidXRlIGNhcnJpZXMgYW4gSVAgYWRkcmVzcy4NCg0KDQoNCg0KDQpQZXRpdC1I dWd1ZW5pbiwgZXQgYWwuIEV4cGlyZXMgU2VwdGVtYmVyIDIyLCAyMDE5ICAgICAgICAgICAgICBb UGFnZSAzM10NCgwNCkludGVybmV0LURyYWZ0IFNlc3Npb24gVHJhdmVyc2FsIFV0aWxpdGllcyBm b3IgTkFUIChTVFVOKSAgICAgTWFyY2ggMjAxOQ0KDQoNCiAgIEEgc2VydmVyIHVzaW5nIHRoaXMg ZXh0ZW5zaW9uIHJlZGlyZWN0cyBhIGNsaWVudCB0byBhbm90aGVyIHNlcnZlciBieQ0KICAgcmVw bHlpbmcgdG8gYSByZXF1ZXN0IG1lc3NhZ2Ugd2l0aCBhbiBlcnJvciByZXNwb25zZSBtZXNzYWdl IHdpdGggYW4NCiAgIGVycm9yIGNvZGUgb2YgMzAwIChUcnkgQWx0ZXJuYXRlKS4gIFRoZSBzZXJ2 ZXIgTVVTVCBpbmNsdWRlIGF0IGxlYXN0DQogICBvbmUgQUxURVJOQVRFLVNFUlZFUiBhdHRyaWJ1 dGUgaW4gdGhlIGVycm9yIHJlc3BvbnNlLCB3aGljaCBNVVNUDQogICBjb250YWluIGFuIElQIGFk ZHJlc3Mgb2YgdGhlIHNhbWUgZmFtaWx5IGFzIHRoZSBzb3VyY2UgSVAgYWRkcmVzcyBvZg0KICAg dGhlIHJlcXVlc3QgbWVzc2FnZS4gIFRoZSBzZXJ2ZXIgU0hPVUxEIGluY2x1ZGUgYW4gYWRkaXRp b25hbA0KICAgQUxURVJOQVRFLVNFUlZFUiBhdHRyaWJ1dGUsIGFmdGVyIHRoZSBtYW5kYXRvcnkg b25lLCB0aGF0IGNvbnRhaW5zIGFuDQogICBJUCBhZGRyZXNzIG9mIHRoZSBvdGhlciBmYW1pbHkg dGhhbiB0aGUgc291cmNlIElQIGFkZHJlc3Mgb2YgdGhlDQogICByZXF1ZXN0IG1lc3NhZ2UuICBU aGUgZXJyb3IgcmVzcG9uc2UgbWVzc2FnZSBNQVkgYmUgYXV0aGVudGljYXRlZDsNCiAgIGhvd2V2 ZXIsIHRoZXJlIGFyZSB1c2UgY2FzZXMgZm9yIEFMVEVSTkFURS1TRVJWRVIgd2hlcmUNCiAgIGF1 dGhlbnRpY2F0aW9uIG9mIHRoZSByZXNwb25zZSBpcyBub3QgcG9zc2libGUgb3IgcHJhY3RpY2Fs LiAgSWYgdGhlDQogICB0cmFuc2FjdGlvbiB1c2VzIFRMUyBvciBEVExTIGFuZCBpZiB0aGUgdHJh bnNhY3Rpb24gaXMgYXV0aGVudGljYXRlZA0KICAgYnkgYSBNRVNTQUdFLUlOVEVHUklUWS1TSEEy NTYgYXR0cmlidXRlIGFuZCBpZiB0aGUgc2VydmVyIHdhbnRzIHRvDQogICByZWRpcmVjdCB0byBh IHNlcnZlciB0aGF0IHVzZXMgYSBkaWZmZXJlbnQgY2VydGlmaWNhdGUsIHRoZW4gaXQgTVVTVA0K ICAgaW5jbHVkZSBhbiBBTFRFUk5BVEUtRE9NQUlOIGF0dHJpYnV0ZSBjb250YWluaW5nIHRoZSBu YW1lIGluc2lkZSB0aGUNCiAgIHN1YmplY3RBbHROYW1lIG9mIHRoYXQgY2VydGlmaWNhdGUuICBU aGlzIHNlcmllcyBvZiBjb25kaXRpb25zIG9uIHRoZQ0KICAgTUVTU0FHRS1JTlRFR1JJVFktU0hB MjU2IGF0dHJpYnV0ZSBpbmRpY2F0ZXMgdGhhdCB0aGUgdHJhbnNhY3Rpb24gaXMNCiAgIGF1dGhl bnRpY2F0ZWQgYW5kIHRoYXQgdGhlIGNsaWVudCBpbXBsZW1lbnRzIHRoaXMgc3BlY2lmaWNhdGlv biBhbmQNCiAgIHRoZXJlZm9yZSBjYW4gcHJvY2VzcyB0aGUgQUxURVJOQVRFLURPTUFJTiBhdHRy aWJ1dGUuDQoNCiAgIEEgY2xpZW50IHVzaW5nIHRoaXMgZXh0ZW5zaW9uIGhhbmRsZXMgYSAzMDAg KFRyeSBBbHRlcm5hdGUpIGVycm9yDQogICBjb2RlIGFzIGZvbGxvd3MuICBUaGUgY2xpZW50IGxv b2tzIGZvciBhbiBBTFRFUk5BVEUtU0VSVkVSIGF0dHJpYnV0ZQ0KICAgaW4gdGhlIGVycm9yIHJl c3BvbnNlLiAgSWYgb25lIGlzIGZvdW5kLCB0aGVuIHRoZSBjbGllbnQgY29uc2lkZXJzDQogICB0 aGUgY3VycmVudCB0cmFuc2FjdGlvbiBhcyBmYWlsZWQsIGFuZCByZWF0dGVtcHRzIHRoZSByZXF1 ZXN0IHdpdGgNCiAgIHRoZSBzZXJ2ZXIgc3BlY2lmaWVkIGluIHRoZSBhdHRyaWJ1dGUsIHVzaW5n IHRoZSBzYW1lIHRyYW5zcG9ydA0KICAgcHJvdG9jb2wgdXNlZCBmb3IgdGhlIHByZXZpb3VzIHJl cXVlc3QuICBUaGF0IHJlcXVlc3QsIGlmDQogICBhdXRoZW50aWNhdGVkLCBNVVNUIHV0aWxpemUg dGhlIHNhbWUgY3JlZGVudGlhbHMgdGhhdCB0aGUgY2xpZW50DQogICB3b3VsZCBoYXZlIHVzZWQg aW4gdGhlIHJlcXVlc3QgdG8gdGhlIHNlcnZlciB0aGF0IHBlcmZvcm1lZCB0aGUNCiAgIHJlZGly ZWN0aW9uLiAgSWYgdGhlIHRyYW5zcG9ydCBwcm90b2NvbCB1c2VzIFRMUyBvciBEVExTLCB0aGVu IHRoZQ0KICAgY2xpZW50IGxvb2tzIGZvciBhbiBBTFRFUk5BVEUtRE9NQUlOIGF0dHJpYnV0ZS4g IElmIHRoZSBhdHRyaWJ1dGUgaXMNCiAgIGZvdW5kLCB0aGUgZG9tYWluIE1VU1QgYmUgdXNlZCB0 byB2YWxpZGF0ZSB0aGUgY2VydGlmaWNhdGUgdXNpbmcgdGhlDQogICByZWNvbW1lbmRhdGlvbnMg aW4gW1JGQzYxMjVdLiAgVGhlIGNlcnRpZmljYXRlIE1VU1QgY29udGFpbiBhbg0KICAgaWRlbnRp ZmllciBvZiB0eXBlIEROUy1JRCBvciBDTi1JRCwgZXZlbnR1YWxseSB3aXRoIHdpbGRjYXJkcywg YnV0DQogICBub3Qgb2YgdHlwZSBTUlYtSUQgb3IgVVJJLUlELiAgSWYgdGhlIGF0dHJpYnV0ZSBp cyBub3QgZm91bmQsIHRoZQ0KICAgc2FtZSBkb21haW4gdGhhdCB3YXMgdXNlZCBmb3IgdGhlIG9y aWdpbmFsIHJlcXVlc3QgTVVTVCBiZSB1c2VkIHRvDQogICB2YWxpZGF0ZSB0aGUgY2VydGlmaWNh dGUuICBJZiB0aGUgY2xpZW50IGhhcyBiZWVuIHJlZGlyZWN0ZWQgdG8gYQ0KICAgc2VydmVyIHRv IHdoaWNoIGl0IGhhcyBhbHJlYWR5IHNlbnQgdGhpcyByZXF1ZXN0IHdpdGhpbiB0aGUgbGFzdCBm aXZlDQogICBtaW51dGVzLCBpdCBNVVNUIGlnbm9yZSB0aGUgcmVkaXJlY3Rpb24gYW5kIGNvbnNp ZGVyIHRoZSB0cmFuc2FjdGlvbg0KICAgdG8gaGF2ZSBmYWlsZWQuICBUaGlzIHByZXZlbnRzIGlu ZmluaXRlIHBpbmctcG9uZ2luZyBiZXR3ZWVuIHNlcnZlcnMNCiAgIGluIGNhc2Ugb2YgcmVkaXJl Y3Rpb24gbG9vcHMuDQoNCjExLiAgQmFja3dhcmRzIENvbXBhdGliaWxpdHkgd2l0aCBSRkMgMzQ4 OQ0KDQogICBJbiBhZGRpdGlvbiB0byB0aGUgYmFja3dhcmQgY29tcGF0aWJpbGl0eSBhbHJlYWR5 IGRlc2NyaWJlZCBpbg0KICAgU2VjdGlvbiAxMiBvZiBbUkZDNTM4OV0sIERUTFMgTVVTVCBOT1Qg YmUgdXNlZCB3aXRoIFtSRkMzNDg5XSAoYWxzbw0KICAgcmVmZXJyZWQgdG8gYXMgImNsYXNzaWMg U1RVTiIpLiAgQW55IFNUVU4gcmVxdWVzdCBvciBpbmRpY2F0aW9uDQogICB3aXRob3V0IHRoZSBt YWdpYyBjb29raWUgKHNlZSBTZWN0aW9uIDYgb2YgW1JGQzUzODldKSBvdmVyIERUTFMgTVVTVA0K DQoNCg0KDQpQZXRpdC1IdWd1ZW5pbiwgZXQgYWwuIEV4cGlyZXMgU2VwdGVtYmVyIDIyLCAyMDE5 ICAgICAgICAgICAgICBbUGFnZSAzNF0NCgwNCkludGVybmV0LURyYWZ0IFNlc3Npb24gVHJhdmVy c2FsIFV0aWxpdGllcyBmb3IgTkFUIChTVFVOKSAgICAgTWFyY2ggMjAxOQ0KDQoNCiAgIGJlIGNv bnNpZGVyZWQgaW52YWxpZDogYWxsIHJlcXVlc3RzIE1VU1QgZ2VuZXJhdGUgYSAiNTAwIFNlcnZl cg0KICAgRXJyb3IiIGVycm9yIHJlc3BvbnNlIGFuZCBpbmRpY2F0aW9ucyBNVVNUIGJlIGlnbm9y ZWQuDQoNCjEyLiAgQmFzaWMgU2VydmVyIEJlaGF2aW9yDQoNCiAgIFRoaXMgc2VjdGlvbiBkZWZp bmVzIHRoZSBiZWhhdmlvciBvZiBhIGJhc2ljLCBzdGFuZC1hbG9uZSBTVFVODQogICBzZXJ2ZXIu DQoNCiAgIEhpc3RvcmljYWxseSwgImNsYXNzaWMgU1RVTiBbUkZDMzQ4OV0iIG9ubHkgZGVmaW5l ZCB0aGUgYmVoYXZpb3Igb2YgYQ0KICAgc2VydmVyIHRoYXQgd2FzIHByb3ZpZGluZyBjbGllbnRz IHdpdGggc2VydmVyIHJlZmxleGl2ZSB0cmFuc3BvcnQNCiAgIGFkZHJlc3NlcyBieSByZWNlaXZp bmcgYW5kIHJlcGx5aW5nIHRvIFNUVU4gQmluZGluZyByZXF1ZXN0cy4NCiAgIFtSRkM1Mzg5XSBy ZWRlZmluZWQgdGhlIHByb3RvY29sIGFzIGFuIGV4dGVuc2libGUgZnJhbWV3b3JrIGFuZCB0aGUN CiAgIHNlcnZlciBmdW5jdGlvbmFsaXR5IGJlY2FtZSB0aGUgc29sZSBTVFVOIFVzYWdlIGRlZmlu ZWQgaW4gdGhhdA0KICAgZG9jdW1lbnQuICBUaGlzIFNUVU4gVXNhZ2UgaXMgYWxzbyBrbm93biBh cyBCYXNpYyBTVFVOIFNlcnZlci4NCg0KICAgVGhlIFNUVU4gc2VydmVyIE1VU1Qgc3VwcG9ydCB0 aGUgQmluZGluZyBtZXRob2QuICBJdCBTSE9VTEQgTk9UDQogICB1dGlsaXplIHRoZSBzaG9ydC10 ZXJtIG9yIGxvbmctdGVybSBjcmVkZW50aWFsIG1lY2hhbmlzbS4gIFRoaXMgaXMNCiAgIGJlY2F1 c2UgdGhlIHdvcmsgaW52b2x2ZWQgaW4gYXV0aGVudGljYXRpbmcgdGhlIHJlcXVlc3QgaXMgbW9y ZSB0aGFuDQogICB0aGUgd29yayBpbiBzaW1wbHkgcHJvY2Vzc2luZyBpdC4gIEl0IFNIT1VMRCBO T1QgdXRpbGl6ZSB0aGUNCiAgIEFMVEVSTkFURS1TRVJWRVIgbWVjaGFuaXNtIGZvciB0aGUgc2Ft ZSByZWFzb24uICBJdCBNVVNUIHN1cHBvcnQgVURQDQogICBhbmQgVENQLiAgSXQgTUFZIHN1cHBv cnQgU1RVTiBvdmVyIFRDUC9UTFMgb3IgU1RVTiBvdmVyIFVEUC9EVExTOw0KICAgaG93ZXZlciwg RFRMUyBhbmQgVExTIHByb3ZpZGUgbWluaW1hbCBzZWN1cml0eSBiZW5lZml0cyBpbiB0aGlzIGJh c2ljDQogICBtb2RlIG9mIG9wZXJhdGlvbi4gIEl0IGRvZXMgbm90IHJlcXVpcmUgYSBrZWVwLWFs aXZlIG1lY2hhbmlzbQ0KICAgYmVjYXVzZSBhIFRDUCBvciBUTFMtb3Zlci1UQ1AgY29ubmVjdGlv biBpcyBjbG9zZWQgYWZ0ZXIgdGhlIGVuZCBvZg0KICAgdGhlIEJpbmRpbmcgdHJhbnNhY3Rpb24u ICBJdCBNQVkgdXRpbGl6ZSB0aGUgRklOR0VSUFJJTlQgbWVjaGFuaXNtDQogICBidXQgTVVTVCBO T1QgcmVxdWlyZSBpdC4gIFNpbmNlIHRoZSBzdGFuZC1hbG9uZSBzZXJ2ZXIgb25seSBydW5zDQog ICBTVFVOLCBGSU5HRVJQUklOVCBwcm92aWRlcyBubyBiZW5lZml0LiAgUmVxdWlyaW5nIGl0IHdv dWxkIGJyZWFrDQogICBjb21wYXRpYmlsaXR5IHdpdGggUkZDIDM0ODksIGFuZCBzdWNoIGNvbXBh dGliaWxpdHkgaXMgZGVzaXJhYmxlIGluIGENCiAgIHN0YW5kLWFsb25lIHNlcnZlci4gIFN0YW5k LWFsb25lIFNUVU4gc2VydmVycyBTSE9VTEQgc3VwcG9ydA0KICAgYmFja3dhcmRzIGNvbXBhdGli aWxpdHkgd2l0aCBbUkZDMzQ4OV0gY2xpZW50cywgYXMgZGVzY3JpYmVkIGluDQogICBTZWN0aW9u IDExLg0KDQogICBJdCBpcyBSRUNPTU1FTkRFRCB0aGF0IGFkbWluaXN0cmF0b3JzIG9mIFNUVU4g c2VydmVycyBwcm92aWRlIEROUw0KICAgZW50cmllcyBmb3IgdGhvc2Ugc2VydmVycyBhcyBkZXNj cmliZWQgaW4gU2VjdGlvbiA4LiAgSWYgYm90aCBBIGFuZA0KICAgQUFBQSBSZXNvdXJjZSBSZWNv cmRzIGFyZSByZXR1cm5lZCB0aGVuIHRoZSBjbGllbnQgY2FuIHNpbXVsdGFuZW91c2x5DQogICBz ZW5kIFNUVU4gQmluZGluZyByZXF1ZXN0cyB0byB0aGUgSVB2NCBhbmQgSVB2NiBhZGRyZXNzZXMg KGFzDQogICBzcGVjaWZpZWQgaW4gW1JGQzgzMDVdKSwgYXMgdGhlIEJpbmRpbmcgcmVxdWVzdCBp cyBpZGVtcG90ZW50LiAgTm90ZQ0KICAgdGhhdCB0aGUgTUFQUEVELUFERFJFU1Mgb3IgWE9SLU1B UFBFRC1BRERSRVNTIGF0dHJpYnV0ZXMgdGhhdCBhcmUNCiAgIHJldHVybmVkIHdpbGwgbm90IG5l Y2Vzc2FyaWx5IG1hdGNoIHRoZSBhZGRyZXNzIGZhbWlseSBvZiB0aGUgc2VydmVyDQogICBhZGRy ZXNzIHVzZWQuDQoNCiAgIEEgYmFzaWMgU1RVTiBzZXJ2ZXIgaXMgbm90IGEgc29sdXRpb24gZm9y IE5BVCB0cmF2ZXJzYWwgYnkgaXRzZWxmLg0KICAgSG93ZXZlciwgaXQgY2FuIGJlIHV0aWxpemVk IGFzIHBhcnQgb2YgYSBzb2x1dGlvbiB0aHJvdWdoIFNUVU4NCiAgIHVzYWdlcy4gIFRoaXMgaXMg ZGlzY3Vzc2VkIGZ1cnRoZXIgaW4gU2VjdGlvbiAxMy4NCg0KDQoNCg0KDQoNCg0KUGV0aXQtSHVn dWVuaW4sIGV0IGFsLiBFeHBpcmVzIFNlcHRlbWJlciAyMiwgMjAxOSAgICAgICAgICAgICAgW1Bh Z2UgMzVdDQoMDQpJbnRlcm5ldC1EcmFmdCBTZXNzaW9uIFRyYXZlcnNhbCBVdGlsaXRpZXMgZm9y IE5BVCAoU1RVTikgICAgIE1hcmNoIDIwMTkNCg0KDQoxMy4gIFNUVU4gVXNhZ2VzDQoNCiAgIFNU VU4gYnkgaXRzZWxmIGlzIG5vdCBhIHNvbHV0aW9uIHRvIHRoZSBOQVQgdHJhdmVyc2FsIHByb2Js ZW0uDQogICBSYXRoZXIsIFNUVU4gZGVmaW5lcyBhIHRvb2wgdGhhdCBjYW4gYmUgdXNlZCBpbnNp ZGUgYSBsYXJnZXINCiAgIHNvbHV0aW9uLiAgVGhlIHRlcm0gIlNUVU4gdXNhZ2UiIGlzIHVzZWQg Zm9yIGFueSBzb2x1dGlvbiB0aGF0IHVzZXMNCiAgIFNUVU4gYXMgYSBjb21wb25lbnQuDQoNCiAg IEEgU1RVTiB1c2FnZSBkZWZpbmVzIGhvdyBTVFVOIGlzIGFjdHVhbGx5IHV0aWxpemVkIC0tIHdo ZW4gdG8gc2VuZA0KICAgcmVxdWVzdHMsIHdoYXQgdG8gZG8gd2l0aCB0aGUgcmVzcG9uc2VzLCBh bmQgd2hpY2ggb3B0aW9uYWwNCiAgIHByb2NlZHVyZXMgZGVmaW5lZCBoZXJlIChvciBpbiBhbiBl eHRlbnNpb24gdG8gU1RVTikgYXJlIHRvIGJlIHVzZWQuDQogICBBIHVzYWdlIGFsc28gZGVmaW5l czoNCg0KICAgbyAgV2hpY2ggU1RVTiBtZXRob2RzIGFyZSB1c2VkLg0KDQogICBvICBXaGF0IHRy YW5zcG9ydHMgYXJlIHVzZWQuICBJZiBEVExTLW92ZXItVURQIGlzIHVzZWQgdGhlbg0KICAgICAg aW1wbGVtZW50aW5nIHRoZSBkZW5pYWwtb2Ytc2VydmljZSBjb3VudGVybWVhc3VyZSBkZXNjcmli ZWQgaW4NCiAgICAgIFNlY3Rpb24gNC4yLjEgb2YgW1JGQzYzNDddIGlzIG1hbmRhdG9yeS4NCg0K ICAgbyAgV2hhdCBhdXRoZW50aWNhdGlvbiBhbmQgbWVzc2FnZS1pbnRlZ3JpdHkgbWVjaGFuaXNt cyBhcmUgdXNlZC4NCg0KICAgbyAgVGhlIGNvbnNpZGVyYXRpb25zIGFyb3VuZCBtYW51YWwgdnMu IGF1dG9tYXRpYyBrZXkgZGVyaXZhdGlvbiBmb3INCiAgICAgIHRoZSBpbnRlZ3JpdHkgbWVjaGFu aXNtLCBhcyBkaXNjdXNzZWQgaW4gW1JGQzQxMDddLg0KDQogICBvICBXaGF0IG1lY2hhbmlzbXMg YXJlIHVzZWQgdG8gZGlzdGluZ3Vpc2ggU1RVTiBtZXNzYWdlcyBmcm9tIG90aGVyDQogICAgICBt ZXNzYWdlcy4gIFdoZW4gU1RVTiBpcyBydW4gb3ZlciBUQ1Agb3IgVExTLW92ZXItVENQLCBhIGZy YW1pbmcNCiAgICAgIG1lY2hhbmlzbSBtYXkgYmUgcmVxdWlyZWQuDQoNCiAgIG8gIEhvdyBhIFNU VU4gY2xpZW50IGRldGVybWluZXMgdGhlIElQIGFkZHJlc3MgYW5kIHBvcnQgb2YgdGhlIFNUVU4N CiAgICAgIHNlcnZlci4NCg0KICAgbyAgSG93IHNpbXVsdGFuZW91cyB1c2Ugb2YgSVB2NCBhbmQg SVB2NiBhZGRyZXNzZXMgKEhhcHB5IEV5ZWJhbGxzDQogICAgICBbUkZDODMwNV0pIHdvcmtzIHdp dGggbm9uLWlkZW1wb3RlbnQgdHJhbnNhY3Rpb25zIHdoZW4gYm90aA0KICAgICAgYWRkcmVzcyBm YW1pbGllcyBhcmUgZm91bmQgZm9yIHRoZSBTVFVOIHNlcnZlci4NCg0KICAgbyAgV2hldGhlciBi YWNrd2FyZHMgY29tcGF0aWJpbGl0eSB0byBSRkMgMzQ4OSBpcyByZXF1aXJlZC4NCg0KICAgbyAg V2hhdCBvcHRpb25hbCBhdHRyaWJ1dGVzIGRlZmluZWQgaGVyZSAoc3VjaCBhcyBGSU5HRVJQUklO VCBhbmQNCiAgICAgIEFMVEVSTkFURS1TRVJWRVIpIG9yIGluIG90aGVyIGV4dGVuc2lvbnMgYXJl IHJlcXVpcmVkLg0KDQogICBvICBJZiBNRVNTQUdFLUlOVEVHUklUWS1TSEEyNTYgdHJ1bmNhdGlv biBpcyBwZXJtaXR0ZWQsIGFuZCB0aGUNCiAgICAgIGxpbWl0cyBwZXJtaXR0ZWQgZm9yIHRydW5j YXRpb24uDQoNCiAgIG8gIFRoZSBrZWVwLWFsaXZlIG1lY2hhbmlzbSBpZiBTVFVOIGlzIHJ1biBv dmVyIFRDUCBvciBUTFMtb3Zlci1UQ1AuDQoNCiAgIG8gIElmIEFueWNhc3QgYWRkcmVzc2VzIGNh biBiZSB1c2VkIGZvciB0aGUgc2VydmVyIGluIGNhc2UgVENQIG9yDQogICAgICBUTFMtb3Zlci1U Q1AsIG9yIGF1dGhlbnRpY2F0aW9uIGFyZSB1c2VkLg0KDQoNCg0KDQoNClBldGl0LUh1Z3Vlbmlu LCBldCBhbC4gRXhwaXJlcyBTZXB0ZW1iZXIgMjIsIDIwMTkgICAgICAgICAgICAgIFtQYWdlIDM2 XQ0KDA0KSW50ZXJuZXQtRHJhZnQgU2Vzc2lvbiBUcmF2ZXJzYWwgVXRpbGl0aWVzIGZvciBOQVQg KFNUVU4pICAgICBNYXJjaCAyMDE5DQoNCg0KICAgSW4gYWRkaXRpb24sIGFueSBTVFVOIHVzYWdl IG11c3QgY29uc2lkZXIgdGhlIHNlY3VyaXR5IGltcGxpY2F0aW9ucw0KICAgb2YgdXNpbmcgU1RV TiBpbiB0aGF0IHVzYWdlLiAgQSBudW1iZXIgb2YgYXR0YWNrcyBhZ2FpbnN0IFNUVU4gYXJlDQog ICBrbm93biAoc2VlIHRoZSBTZWN1cml0eSBDb25zaWRlcmF0aW9ucyBzZWN0aW9uIGluIHRoaXMg ZG9jdW1lbnQpLCBhbmQNCiAgIGFueSB1c2FnZSBtdXN0IGNvbnNpZGVyIGhvdyB0aGVzZSBhdHRh Y2tzIGNhbiBiZSB0aHdhcnRlZCBvcg0KICAgbWl0aWdhdGVkLg0KDQogICBGaW5hbGx5LCBhIHVz YWdlIG11c3QgY29uc2lkZXIgd2hldGhlciBpdHMgdXNhZ2Ugb2YgU1RVTiBpcyBhbg0KICAgZXhh bXBsZSBvZiB0aGUgVW5pbGF0ZXJhbCBTZWxmLUFkZHJlc3MgRml4aW5nIGFwcHJvYWNoIHRvIE5B VA0KICAgdHJhdmVyc2FsLCBhbmQgaWYgc28sIGFkZHJlc3MgdGhlIHF1ZXN0aW9ucyByYWlzZWQg aW4gUkZDIDM0MjQNCiAgIFtSRkMzNDI0XS4NCg0KMTQuICBTVFVOIEF0dHJpYnV0ZXMNCg0KICAg QWZ0ZXIgdGhlIFNUVU4gaGVhZGVyIGFyZSB6ZXJvIG9yIG1vcmUgYXR0cmlidXRlcy4gIEVhY2gg YXR0cmlidXRlDQogICBNVVNUIGJlIFRMViBlbmNvZGVkLCB3aXRoIGEgMTYtYml0IHR5cGUsIDE2 LWJpdCBsZW5ndGgsIGFuZCB2YWx1ZS4NCiAgIEVhY2ggU1RVTiBhdHRyaWJ1dGUgTVVTVCBlbmQg b24gYSAzMi1iaXQgYm91bmRhcnkuICBBcyBtZW50aW9uZWQNCiAgIGFib3ZlLCBhbGwgZmllbGRz IGluIGFuIGF0dHJpYnV0ZSBhcmUgdHJhbnNtaXR0ZWQgbW9zdCBzaWduaWZpY2FudA0KICAgYml0 IGZpcnN0Lg0KDQogICAgICAwICAgICAgICAgICAgICAgICAgIDEgICAgICAgICAgICAgICAgICAg MiAgICAgICAgICAgICAgICAgICAzDQogICAgICAwIDEgMiAzIDQgNSA2IDcgOCA5IDAgMSAyIDMg NCA1IDYgNyA4IDkgMCAxIDIgMyA0IDUgNiA3IDggOSAwIDENCiAgICAgKy0rLSstKy0rLSstKy0r LSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSsNCiAgICAg fCAgICAgICAgIFR5cGUgICAgICAgICAgICAgICAgICB8ICAgICAgICAgICAgTGVuZ3RoICAgICAg ICAgICAgIHwNCiAgICAgKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSst Ky0rLSstKy0rLSstKy0rLSstKy0rLSsNCiAgICAgfCAgICAgICAgICAgICAgICAgICAgICAgICBW YWx1ZSAodmFyaWFibGUpICAgICAgICAgICAgICAgIC4uLi4NCiAgICAgKy0rLSstKy0rLSstKy0r LSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSsNCg0KICAg ICAgICAgICAgICAgICAgICBGaWd1cmUgNDogRm9ybWF0IG9mIFNUVU4gQXR0cmlidXRlcw0KDQog ICBUaGUgdmFsdWUgaW4gdGhlIGxlbmd0aCBmaWVsZCBNVVNUIGNvbnRhaW4gdGhlIGxlbmd0aCBv ZiB0aGUgVmFsdWUNCiAgIHBhcnQgb2YgdGhlIGF0dHJpYnV0ZSwgcHJpb3IgdG8gcGFkZGluZywg bWVhc3VyZWQgaW4gYnl0ZXMuICBTaW5jZQ0KICAgU1RVTiBhbGlnbnMgYXR0cmlidXRlcyBvbiAz Mi1iaXQgYm91bmRhcmllcywgYXR0cmlidXRlcyB3aG9zZSBjb250ZW50DQogICBpcyBub3QgYSBt dWx0aXBsZSBvZiA0IGJ5dGVzIGFyZSBwYWRkZWQgd2l0aCAxLCAyLCBvciAzIGJ5dGVzIG9mDQog ICBwYWRkaW5nIHNvIHRoYXQgaXRzIHZhbHVlIGNvbnRhaW5zIGEgbXVsdGlwbGUgb2YgNCBieXRl cy4gIFRoZQ0KICAgcGFkZGluZyBiaXRzIE1VU1QgYmUgc2V0IHRvIHplcm8gb24gc2VuZGluZyBh bmQgTVVTVCBiZSBpZ25vcmVkIGJ5DQogICB0aGUgcmVjZWl2ZXIuDQoNCiAgIEFueSBhdHRyaWJ1 dGUgdHlwZSBNQVkgYXBwZWFyIG1vcmUgdGhhbiBvbmNlIGluIGEgU1RVTiBtZXNzYWdlLg0KICAg VW5sZXNzIHNwZWNpZmllZCBvdGhlcndpc2UsIHRoZSBvcmRlciBvZiBhcHBlYXJhbmNlIGlzIHNp Z25pZmljYW50Og0KICAgb25seSB0aGUgZmlyc3Qgb2NjdXJyZW5jZSBuZWVkcyB0byBiZSBwcm9j ZXNzZWQgYnkgYSByZWNlaXZlciwgYW5kDQogICBhbnkgZHVwbGljYXRlcyBNQVkgYmUgaWdub3Jl ZCBieSBhIHJlY2VpdmVyLg0KDQogICBUbyBhbGxvdyBmdXR1cmUgcmV2aXNpb25zIG9mIHRoaXMg c3BlY2lmaWNhdGlvbiB0byBhZGQgbmV3IGF0dHJpYnV0ZXMNCiAgIGlmIG5lZWRlZCwgdGhlIGF0 dHJpYnV0ZSBzcGFjZSBpcyBkaXZpZGVkIGludG8gdHdvIHJhbmdlcy4NCiAgIEF0dHJpYnV0ZXMg d2l0aCB0eXBlIHZhbHVlcyBiZXR3ZWVuIDB4MDAwMCBhbmQgMHg3RkZGIGFyZQ0KICAgY29tcHJl aGVuc2lvbi1yZXF1aXJlZCBhdHRyaWJ1dGVzLCB3aGljaCBtZWFucyB0aGF0IHRoZSBTVFVOIGFn ZW50DQogICBjYW5ub3Qgc3VjY2Vzc2Z1bGx5IHByb2Nlc3MgdGhlIG1lc3NhZ2UgdW5sZXNzIGl0 IHVuZGVyc3RhbmRzIHRoZQ0KICAgYXR0cmlidXRlLiAgQXR0cmlidXRlcyB3aXRoIHR5cGUgdmFs dWVzIGJldHdlZW4gMHg4MDAwIGFuZCAweEZGRkYgYXJlDQoNCg0KDQpQZXRpdC1IdWd1ZW5pbiwg ZXQgYWwuIEV4cGlyZXMgU2VwdGVtYmVyIDIyLCAyMDE5ICAgICAgICAgICAgICBbUGFnZSAzN10N CgwNCkludGVybmV0LURyYWZ0IFNlc3Npb24gVHJhdmVyc2FsIFV0aWxpdGllcyBmb3IgTkFUIChT VFVOKSAgICAgTWFyY2ggMjAxOQ0KDQoNCiAgIGNvbXByZWhlbnNpb24tb3B0aW9uYWwgYXR0cmli dXRlcywgd2hpY2ggbWVhbnMgdGhhdCB0aG9zZSBhdHRyaWJ1dGVzDQogICBjYW4gYmUgaWdub3Jl ZCBieSB0aGUgU1RVTiBhZ2VudCBpZiBpdCBkb2VzIG5vdCB1bmRlcnN0YW5kIHRoZW0uDQoNCiAg IFRoZSBzZXQgb2YgU1RVTiBhdHRyaWJ1dGUgdHlwZXMgaXMgbWFpbnRhaW5lZCBieSBJQU5BLiAg VGhlIGluaXRpYWwNCiAgIHNldCBkZWZpbmVkIGJ5IHRoaXMgc3BlY2lmaWNhdGlvbiBpcyBmb3Vu ZCBpbiBTZWN0aW9uIDE4LjMuDQoNCiAgIFRoZSByZXN0IG9mIHRoaXMgc2VjdGlvbiBkZXNjcmli ZXMgdGhlIGZvcm1hdCBvZiB0aGUgdmFyaW91cw0KICAgYXR0cmlidXRlcyBkZWZpbmVkIGluIHRo aXMgc3BlY2lmaWNhdGlvbi4NCg0KMTQuMS4gIE1BUFBFRC1BRERSRVNTDQoNCiAgIFRoZSBNQVBQ RUQtQUREUkVTUyBhdHRyaWJ1dGUgaW5kaWNhdGVzIGEgcmVmbGV4aXZlIHRyYW5zcG9ydCBhZGRy ZXNzDQogICBvZiB0aGUgY2xpZW50LiAgSXQgY29uc2lzdHMgb2YgYW4gOC1iaXQgYWRkcmVzcyBm YW1pbHkgYW5kIGEgMTYtYml0DQogICBwb3J0LCBmb2xsb3dlZCBieSBhIGZpeGVkLWxlbmd0aCB2 YWx1ZSByZXByZXNlbnRpbmcgdGhlIElQIGFkZHJlc3MuDQogICBJZiB0aGUgYWRkcmVzcyBmYW1p bHkgaXMgSVB2NCwgdGhlIGFkZHJlc3MgTVVTVCBiZSAzMiBiaXRzLiAgSWYgdGhlDQogICBhZGRy ZXNzIGZhbWlseSBpcyBJUHY2LCB0aGUgYWRkcmVzcyBNVVNUIGJlIDEyOCBiaXRzLiAgQWxsIGZp ZWxkcw0KICAgbXVzdCBiZSBpbiBuZXR3b3JrIGJ5dGUgb3JkZXIuDQoNCiAgIFRoZSBmb3JtYXQg b2YgdGhlIE1BUFBFRC1BRERSRVNTIGF0dHJpYnV0ZSBpczoNCg0KICAgICAgMCAgICAgICAgICAg ICAgICAgICAxICAgICAgICAgICAgICAgICAgIDIgICAgICAgICAgICAgICAgICAgMw0KICAgICAg MCAxIDIgMyA0IDUgNiA3IDggOSAwIDEgMiAzIDQgNSA2IDcgOCA5IDAgMSAyIDMgNCA1IDYgNyA4 IDkgMCAxDQogICAgICstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSst Ky0rLSstKy0rLSstKy0rLSstKy0rDQogICAgIHwwIDAgMCAwIDAgMCAwIDB8ICAgIEZhbWlseSAg ICAgfCAgICAgICAgICAgUG9ydCAgICAgICAgICAgICAgICB8DQogICAgICstKy0rLSstKy0rLSst Ky0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rDQogICAg IHwgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICB8DQogICAgIHwgICAgICAgICAgICAgICAgIEFkZHJlc3MgKDMyIGJpdHMgb3IgMTI4 IGJpdHMpICAgICAgICAgICAgICAgICB8DQogICAgIHwgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICB8DQogICAgICstKy0rLSstKy0r LSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rDQoN CiAgICAgICAgICAgICAgIEZpZ3VyZSA1OiBGb3JtYXQgb2YgTUFQUEVELUFERFJFU1MgQXR0cmli dXRlDQoNCiAgIFRoZSBhZGRyZXNzIGZhbWlseSBjYW4gdGFrZSBvbiB0aGUgZm9sbG93aW5nIHZh bHVlczoNCg0KICAgMHgwMTpJUHY0DQogICAweDAyOklQdjYNCg0KICAgVGhlIGZpcnN0IDggYml0 cyBvZiB0aGUgTUFQUEVELUFERFJFU1MgTVVTVCBiZSBzZXQgdG8gMCBhbmQgTVVTVCBiZQ0KICAg aWdub3JlZCBieSByZWNlaXZlcnMuICBUaGVzZSBiaXRzIGFyZSBwcmVzZW50IGZvciBhbGlnbmlu ZyBwYXJhbWV0ZXJzDQogICBvbiBuYXR1cmFsIDMyLWJpdCBib3VuZGFyaWVzLg0KDQogICBUaGlz IGF0dHJpYnV0ZSBpcyB1c2VkIG9ubHkgYnkgc2VydmVycyBmb3IgYWNoaWV2aW5nIGJhY2t3YXJk cw0KICAgY29tcGF0aWJpbGl0eSB3aXRoIFtSRkMzNDg5XSBjbGllbnRzLg0KDQoNCg0KDQoNCg0K DQoNClBldGl0LUh1Z3VlbmluLCBldCBhbC4gRXhwaXJlcyBTZXB0ZW1iZXIgMjIsIDIwMTkgICAg ICAgICAgICAgIFtQYWdlIDM4XQ0KDA0KSW50ZXJuZXQtRHJhZnQgU2Vzc2lvbiBUcmF2ZXJzYWwg VXRpbGl0aWVzIGZvciBOQVQgKFNUVU4pICAgICBNYXJjaCAyMDE5DQoNCg0KMTQuMi4gIFhPUi1N QVBQRUQtQUREUkVTUw0KDQogICBUaGUgWE9SLU1BUFBFRC1BRERSRVNTIGF0dHJpYnV0ZSBpcyBp ZGVudGljYWwgdG8gdGhlIE1BUFBFRC1BRERSRVNTDQogICBhdHRyaWJ1dGUsIGV4Y2VwdCB0aGF0 IHRoZSByZWZsZXhpdmUgdHJhbnNwb3J0IGFkZHJlc3MgaXMgb2JmdXNjYXRlZA0KICAgdGhyb3Vn aCB0aGUgWE9SIGZ1bmN0aW9uLg0KDQogICBUaGUgZm9ybWF0IG9mIHRoZSBYT1ItTUFQUEVELUFE RFJFU1MgaXM6DQoNCiAgICAgIDAgICAgICAgICAgICAgICAgICAgMSAgICAgICAgICAgICAgICAg ICAyICAgICAgICAgICAgICAgICAgIDMNCiAgICAgIDAgMSAyIDMgNCA1IDYgNyA4IDkgMCAxIDIg MyA0IDUgNiA3IDggOSAwIDEgMiAzIDQgNSA2IDcgOCA5IDAgMQ0KICAgICArLSstKy0rLSstKy0r LSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKw0KICAg ICB8MCAwIDAgMCAwIDAgMCAwfCAgICBGYW1pbHkgICAgIHwgICAgICAgICBYLVBvcnQgICAgICAg ICAgICAgICAgfA0KICAgICArLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSst Ky0rLSstKy0rLSstKy0rLSstKy0rLSstKw0KICAgICB8ICAgICAgICAgICAgICAgIFgtQWRkcmVz cyAoVmFyaWFibGUpDQogICAgICstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSst Ky0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rDQoNCiAgICAgICAgICAgICBGaWd1cmUgNjogRm9y bWF0IG9mIFhPUi1NQVBQRUQtQUREUkVTUyBBdHRyaWJ1dGUNCg0KICAgVGhlIEZhbWlseSByZXBy ZXNlbnRzIHRoZSBJUCBhZGRyZXNzIGZhbWlseSwgYW5kIGlzIGVuY29kZWQNCiAgIGlkZW50aWNh bGx5IHRvIHRoZSBGYW1pbHkgaW4gTUFQUEVELUFERFJFU1MuDQoNCiAgIFgtUG9ydCBpcyBjb21w dXRlZCBieSBYT1InaW5nIHRoZSBtYXBwZWQgcG9ydCB3aXRoIHRoZSBtb3N0DQogICBzaWduaWZp Y2FudCAxNiBiaXRzIG9mIHRoZSBtYWdpYyBjb29raWUuICBJZiB0aGUgSVAgYWRkcmVzcyBmYW1p bHkgaXMNCiAgIElQdjQsIFgtQWRkcmVzcyBpcyBjb21wdXRlZCBieSBYT1InaW5nIHRoZSBtYXBw ZWQgSVAgYWRkcmVzcyB3aXRoIHRoZQ0KICAgbWFnaWMgY29va2llLiAgSWYgdGhlIElQIGFkZHJl c3MgZmFtaWx5IGlzIElQdjYsIFgtQWRkcmVzcyBpcw0KICAgY29tcHV0ZWQgYnkgWE9SJ2luZyB0 aGUgbWFwcGVkIElQIGFkZHJlc3Mgd2l0aCB0aGUgY29uY2F0ZW5hdGlvbiBvZg0KICAgdGhlIG1h Z2ljIGNvb2tpZSBhbmQgdGhlIDk2LWJpdCB0cmFuc2FjdGlvbiBJRC4gIEluIGFsbCBjYXNlcywg dGhlDQogICBYT1Igb3BlcmF0aW9uIHdvcmtzIG9uIGl0cyBpbnB1dHMgaW4gbmV0d29yayBieXRl IG9yZGVyICh0aGF0IGlzLCB0aGUNCiAgIG9yZGVyIHRoZXkgd2lsbCBiZSBlbmNvZGVkIGluIHRo ZSBtZXNzYWdlKS4NCg0KICAgVGhlIHJ1bGVzIGZvciBlbmNvZGluZyBhbmQgcHJvY2Vzc2luZyB0 aGUgZmlyc3QgOCBiaXRzIG9mIHRoZQ0KICAgYXR0cmlidXRlJ3MgdmFsdWUsIHRoZSBydWxlcyBm b3IgaGFuZGxpbmcgbXVsdGlwbGUgb2NjdXJyZW5jZXMgb2YgdGhlDQogICBhdHRyaWJ1dGUsIGFu ZCB0aGUgcnVsZXMgZm9yIHByb2Nlc3NpbmcgYWRkcmVzcyBmYW1pbGllcyBhcmUgdGhlIHNhbWUN CiAgIGFzIGZvciBNQVBQRUQtQUREUkVTUy4NCg0KICAgTm90ZTogWE9SLU1BUFBFRC1BRERSRVNT IGFuZCBNQVBQRUQtQUREUkVTUyBkaWZmZXIgb25seSBpbiB0aGVpcg0KICAgZW5jb2Rpbmcgb2Yg dGhlIHRyYW5zcG9ydCBhZGRyZXNzLiAgVGhlIGZvcm1lciBlbmNvZGVzIHRoZSB0cmFuc3BvcnQN CiAgIGFkZHJlc3MgYnkgZXhjbHVzaXZlLW9yJ2luZyBpdCB3aXRoIHRoZSBtYWdpYyBjb29raWUu ICBUaGUgbGF0dGVyDQogICBlbmNvZGVzIGl0IGRpcmVjdGx5IGluIGJpbmFyeS4gIFJGQyAzNDg5 IG9yaWdpbmFsbHkgc3BlY2lmaWVkIG9ubHkNCiAgIE1BUFBFRC1BRERSRVNTLiAgSG93ZXZlciwg ZGVwbG95bWVudCBleHBlcmllbmNlIGZvdW5kIHRoYXQgc29tZSBOQVRzDQogICByZXdyaXRlIHRo ZSAzMi1iaXQgYmluYXJ5IHBheWxvYWRzIGNvbnRhaW5pbmcgdGhlIE5BVCdzIHB1YmxpYyBJUA0K ICAgYWRkcmVzcywgc3VjaCBhcyBTVFVOJ3MgTUFQUEVELUFERFJFU1MgYXR0cmlidXRlLCBpbiB0 aGUgd2VsbC1tZWFuaW5nDQogICBidXQgbWlzZ3VpZGVkIGF0dGVtcHQgYXQgcHJvdmlkaW5nIGEg Z2VuZXJpYyBBcHBsaWNhdGlvbiBMYXllcg0KICAgR2F0ZXdheSAoQUxHKSBmdW5jdGlvbi4gIFN1 Y2ggYmVoYXZpb3IgaW50ZXJmZXJlcyB3aXRoIHRoZSBvcGVyYXRpb24NCiAgIG9mIFNUVU4gYW5k IGFsc28gY2F1c2VzIGZhaWx1cmUgb2YgU1RVTidzIG1lc3NhZ2UtaW50ZWdyaXR5IGNoZWNraW5n Lg0KDQoNCg0KDQoNCg0KUGV0aXQtSHVndWVuaW4sIGV0IGFsLiBFeHBpcmVzIFNlcHRlbWJlciAy MiwgMjAxOSAgICAgICAgICAgICAgW1BhZ2UgMzldDQoMDQpJbnRlcm5ldC1EcmFmdCBTZXNzaW9u IFRyYXZlcnNhbCBVdGlsaXRpZXMgZm9yIE5BVCAoU1RVTikgICAgIE1hcmNoIDIwMTkNCg0KDQox NC4zLiAgVVNFUk5BTUUNCg0KICAgVGhlIFVTRVJOQU1FIGF0dHJpYnV0ZSBpcyB1c2VkIGZvciBt ZXNzYWdlIGludGVncml0eS4gIEl0IGlkZW50aWZpZXMNCiAgIHRoZSB1c2VybmFtZSBhbmQgcGFz c3dvcmQgY29tYmluYXRpb24gdXNlZCBpbiB0aGUgbWVzc2FnZS1pbnRlZ3JpdHkNCiAgIGNoZWNr Lg0KDQogICBUaGUgdmFsdWUgb2YgVVNFUk5BTUUgaXMgYSB2YXJpYWJsZS1sZW5ndGggdmFsdWUg Y29udGFpbmluZyB0aGUNCiAgIGF1dGhlbnRpY2F0aW9uIHVzZXJuYW1lLiAgSXQgTVVTVCBjb250 YWluIGEgVVRGLTggW1JGQzM2MjldIGVuY29kZWQNCiAgIHNlcXVlbmNlIG9mIGxlc3MgdGhhbiA1 MDkgYnl0ZXMsIGFuZCBNVVNUIGhhdmUgYmVlbiBwcm9jZXNzZWQgdXNpbmcNCiAgIHRoZSBVc2Vy bmFtZUNhc2VQcmVzZXJ2ZWQgcHJvZmlsZSBbUkZDODI2NV0uICBBIGNvbXBsaWFudA0KICAgaW1w bGVtZW50YXRpb24gTVVTVCBiZSBhYmxlIHRvIHBhcnNlIFVURi04IGVuY29kZWQgc2VxdWVuY2Ug b2YgNzYzIG9yDQogICBsZXNzIGJ5dGVzLCB0byBiZSBjb21wYXRpYmxlIHdpdGggW1JGQzUzODld IHRoYXQgbWlzdGFrZW5seSBhc3N1bWVkDQogICB1cCB0byA2IGJ5dGVzIHBlciBjaGFyYWN0ZXJz IGVuY29kZWQuDQoNCjE0LjQuICBVU0VSSEFTSA0KDQogICBUaGUgVVNFUkhBU0ggYXR0cmlidXRl IGlzIHVzZWQgYXMgYSByZXBsYWNlbWVudCBmb3IgdGhlIFVTRVJOQU1FDQogICBhdHRyaWJ1dGUg d2hlbiB1c2VybmFtZSBhbm9ueW1pdHkgaXMgc3VwcG9ydGVkLg0KDQogICBUaGUgdmFsdWUgb2Yg VVNFUkhBU0ggaGFzIGEgZml4ZWQgbGVuZ3RoIG9mIDMyIGJ5dGVzLiAgVGhlIHVzZXJuYW1lDQog ICBNVVNUIGhhdmUgYmVlbiBwcm9jZXNzZWQgdXNpbmcgdGhlIFVzZXJuYW1lQ2FzZVByZXNlcnZl ZCBwcm9maWxlDQogICBbUkZDODI2NV0gYW5kIHRoZSByZWFsbSBNVVNUIGhhdmUgYmVlbiBwcm9j ZXNzZWQgdXNpbmcgdGhlDQogICBPcGFxdWVTdHJpbmcgcHJvZmlsZSBbUkZDODI2NV0gYmVmb3Jl IGhhc2hpbmcuDQoNCiAgIFRoZSBmb2xsb3dpbmcgaXMgdGhlIG9wZXJhdGlvbiB0aGF0IHRoZSBj bGllbnQgd2lsbCBwZXJmb3JtIHRvIGhhc2gNCiAgIHRoZSB1c2VybmFtZToNCg0KICAgdXNlcmhh c2ggPSBTSEEtMjU2KFVzZXJuYW1lQ2FzZVByZXNlcnZlZCh1c2VybmFtZSkNCiAgICAgIjoiIE9w YXF1ZVN0cmluZyhyZWFsbSkpDQoNCjE0LjUuICBNRVNTQUdFLUlOVEVHUklUWQ0KDQogICBUaGUg TUVTU0FHRS1JTlRFR1JJVFkgYXR0cmlidXRlIGNvbnRhaW5zIGFuIEhNQUMtU0hBMSBbUkZDMjEw NF0gb2YNCiAgIHRoZSBTVFVOIG1lc3NhZ2UuICBUaGUgTUVTU0FHRS1JTlRFR1JJVFkgYXR0cmli dXRlIGNhbiBiZSBwcmVzZW50IGluDQogICBhbnkgU1RVTiBtZXNzYWdlIHR5cGUuICBTaW5jZSBp dCB1c2VzIHRoZSBTSEEtMSBoYXNoLCB0aGUgSE1BQyB3aWxsDQogICBiZSAyMCBieXRlcy4NCg0K ICAgVGhlIGtleSBmb3IgdGhlIEhNQUMgZGVwZW5kcyBvbiB3aGljaCBjcmVkZW50aWFsIG1lY2hh bmlzbSBpcyBpbiB1c2UuDQogICBTZWN0aW9uIDkuMS4xIGRlZmluZXMgdGhlIGtleSBmb3IgdGhl IHNob3J0LXRlcm0gY3JlZGVudGlhbCBtZWNoYW5pc20NCiAgIGFuZCBTZWN0aW9uIDkuMi4yIGRl ZmluZXMgdGhlIGtleSBmb3IgdGhlIGxvbmctdGVybSBjcmVkZW50aWFsDQogICBtZWNoYW5pc20u ICBPdGhlciBjcmVkZW50aWFsIG1lY2hhbmlzbXMgTVVTVCBkZWZpbmUgdGhlIGtleSB0aGF0IGlz DQogICB1c2VkIGZvciB0aGUgSE1BQy4NCg0KICAgVGhlIHRleHQgdXNlZCBhcyBpbnB1dCB0byBI TUFDIGlzIHRoZSBTVFVOIG1lc3NhZ2UsIHVwIHRvIGFuZA0KICAgaW5jbHVkaW5nIHRoZSBhdHRy aWJ1dGUgcHJlY2VkaW5nIHRoZSBNRVNTQUdFLUlOVEVHUklUWSBhdHRyaWJ1dGUuDQogICBUaGUg bGVuZ3RoIGZpZWxkIG9mIHRoZSBTVFVOIG1lc3NhZ2UgaGVhZGVyIGlzIGFkanVzdGVkIHRvIHBv aW50IHRvDQogICB0aGUgZW5kIG9mIHRoZSBNRVNTQUdFLUlOVEVHUklUWSBhdHRyaWJ1dGUuICBU aGUgdmFsdWUgb2YgdGhlDQogICBNRVNTQUdFLUlOVEVHUklUWSBhdHRyaWJ1dGUgaXMgc2V0IHRv IGEgZHVtbXkgdmFsdWUuDQoNCg0KDQpQZXRpdC1IdWd1ZW5pbiwgZXQgYWwuIEV4cGlyZXMgU2Vw dGVtYmVyIDIyLCAyMDE5ICAgICAgICAgICAgICBbUGFnZSA0MF0NCgwNCkludGVybmV0LURyYWZ0 IFNlc3Npb24gVHJhdmVyc2FsIFV0aWxpdGllcyBmb3IgTkFUIChTVFVOKSAgICAgTWFyY2ggMjAx OQ0KDQoNCiAgIE9uY2UgdGhlIGNvbXB1dGF0aW9uIGlzIHBlcmZvcm1lZCwgdGhlIHZhbHVlIG9m IHRoZSBNRVNTQUdFLUlOVEVHUklUWQ0KICAgYXR0cmlidXRlIGlzIGZpbGxlZCBpbiwgYW5kIHRo ZSB2YWx1ZSBvZiB0aGUgbGVuZ3RoIGluIHRoZSBTVFVODQogICBoZWFkZXIgaXMgc2V0IHRvIGl0 cyBjb3JyZWN0IHZhbHVlIC0tIHRoZSBsZW5ndGggb2YgdGhlIGVudGlyZQ0KICAgbWVzc2FnZS4g IFNpbWlsYXJseSwgd2hlbiB2YWxpZGF0aW5nIHRoZSBNRVNTQUdFLUlOVEVHUklUWSwgdGhlDQog ICBsZW5ndGggZmllbGQgaW4gdGhlIFNUVU4gaGVhZGVyIG11c3QgYmUgYWRqdXN0ZWQgdG8gcG9p bnQgdG8gdGhlIGVuZA0KICAgb2YgdGhlIE1FU1NBR0UtSU5URUdSSVRZIGF0dHJpYnV0ZSBwcmlv ciB0byBjYWxjdWxhdGluZyB0aGUgSE1BQyBvdmVyDQogICB0aGUgU1RVTiBtZXNzYWdlLCB1cCB0 byBhbmQgaW5jbHVkaW5nIHRoZSBhdHRyaWJ1dGUgcHJlY2VkaW5nIHRoZQ0KICAgTUVTU0FHRS1J TlRFR1JJVFkgYXR0cmlidXRlLiAgU3VjaCBhZGp1c3RtZW50IGlzIG5lY2Vzc2FyeSB3aGVuDQog ICBhdHRyaWJ1dGVzLCBzdWNoIGFzIEZJTkdFUlBSSU5UIGFuZCBNRVNTQUdFLUlOVEVHUklUWS1T SEEyNTYsIGFwcGVhcg0KICAgYWZ0ZXIgTUVTU0FHRS1JTlRFR1JJVFkuICBTZWUgYWxzbyBbUkZD NTc2OV0gZm9yIGV4YW1wbGVzIG9mIHN1Y2gNCiAgIGNhbGN1bGF0aW9ucy4NCg0KMTQuNi4gIE1F U1NBR0UtSU5URUdSSVRZLVNIQTI1Ng0KDQogICBUaGUgTUVTU0FHRS1JTlRFR1JJVFktU0hBMjU2 IGF0dHJpYnV0ZSBjb250YWlucyBhbiBITUFDLVNIQTI1Ng0KICAgW1JGQzIxMDRdIG9mIHRoZSBT VFVOIG1lc3NhZ2UuICBUaGUgTUVTU0FHRS1JTlRFR1JJVFktU0hBMjU2DQogICBhdHRyaWJ1dGUg Y2FuIGJlIHByZXNlbnQgaW4gYW55IFNUVU4gbWVzc2FnZSB0eXBlLiAgVGhlIE1FU1NBR0UtDQog ICBJTlRFR1JJVFktU0hBMjU2IGF0dHJpYnV0ZSBjb250YWlucyBhbiBpbml0aWFsIHBvcnRpb24g b2YgdGhlIEhNQUMtDQogICBTSEEtMjU2IFtSRkMyMTA0XSBvZiB0aGUgU1RVTiBtZXNzYWdlLiAg VGhlIHZhbHVlIHdpbGwgYmUgYXQgbW9zdCAzMg0KICAgYnl0ZXMsIGJ1dCBNVVNUIGJlIGF0IGxl YXN0IDE2IGJ5dGVzLCBhbmQgTVVTVCBiZSBhIG11bHRpcGxlIG9mIDQNCiAgIGJ5dGVzLiAgVGhl IHZhbHVlIG11c3QgYmUgdGhlIGZ1bGwgMzIgYnl0ZXMgdW5sZXNzIHRoZSBTVFVOIFVzYWdlDQog ICBleHBsaWNpdGx5IHNwZWNpZmllcyB0aGF0IHRydW5jYXRpb24gaXMgYWxsb3dlZC4gIFNUVU4g VXNhZ2VzIG1heQ0KICAgc3BlY2lmeSBhIG1pbmltdW0gbGVuZ3RoIGxvbmdlciB0aGFuIDE2IGJ5 dGVzLg0KDQogICBUaGUga2V5IGZvciB0aGUgSE1BQyBkZXBlbmRzIG9uIHdoaWNoIGNyZWRlbnRp YWwgbWVjaGFuaXNtIGlzIGluIHVzZS4NCiAgIFNlY3Rpb24gOS4xLjEgZGVmaW5lcyB0aGUga2V5 IGZvciB0aGUgc2hvcnQtdGVybSBjcmVkZW50aWFsIG1lY2hhbmlzbQ0KICAgYW5kIFNlY3Rpb24g OS4yLjIgZGVmaW5lcyB0aGUga2V5IGZvciB0aGUgbG9uZy10ZXJtIGNyZWRlbnRpYWwNCiAgIG1l Y2hhbmlzbS4gIE90aGVyIGNyZWRlbnRpYWwgbWVjaGFuaXNtIE1VU1QgZGVmaW5lIHRoZSBrZXkg dGhhdCBpcw0KICAgdXNlZCBmb3IgdGhlIEhNQUMuDQoNCiAgIFRoZSB0ZXh0IHVzZWQgYXMgaW5w dXQgdG8gSE1BQyBpcyB0aGUgU1RVTiBtZXNzYWdlLCB1cCB0byBhbmQNCiAgIGluY2x1ZGluZyB0 aGUgYXR0cmlidXRlIHByZWNlZGluZyB0aGUgTUVTU0FHRS1JTlRFR1JJVFktU0hBMjU2DQogICBh dHRyaWJ1dGUuICBUaGUgbGVuZ3RoIGZpZWxkIG9mIHRoZSBTVFVOIG1lc3NhZ2UgaGVhZGVyIGlz IGFkanVzdGVkDQogICB0byBwb2ludCB0byB0aGUgZW5kIG9mIHRoZSBNRVNTQUdFLUlOVEVHUklU WS1TSEEyNTYgYXR0cmlidXRlLiAgVGhlDQogICB2YWx1ZSBvZiB0aGUgTUVTU0FHRS1JTlRFR1JJ VFktU0hBMjU2IGF0dHJpYnV0ZSBpcyBzZXQgdG8gYSBkdW1teQ0KICAgdmFsdWUuDQoNCiAgIE9u Y2UgdGhlIGNvbXB1dGF0aW9uIGlzIHBlcmZvcm1lZCwgdGhlIHZhbHVlIG9mIHRoZSBNRVNTQUdF LQ0KICAgSU5URUdSSVRZLVNIQTI1NiBhdHRyaWJ1dGUgaXMgZmlsbGVkIGluLCBhbmQgdGhlIHZh bHVlIG9mIHRoZSBsZW5ndGgNCiAgIGluIHRoZSBTVFVOIGhlYWRlciBpcyBzZXQgdG8gaXRzIGNv cnJlY3QgdmFsdWUgLS0gdGhlIGxlbmd0aCBvZiB0aGUNCiAgIGVudGlyZSBtZXNzYWdlLiAgU2lt aWxhcmx5LCB3aGVuIHZhbGlkYXRpbmcgdGhlIE1FU1NBR0UtSU5URUdSSVRZLQ0KICAgU0hBMjU2 LCB0aGUgbGVuZ3RoIGZpZWxkIGluIHRoZSBTVFVOIGhlYWRlciBtdXN0IGJlIGFkanVzdGVkIHRv IHBvaW50DQogICB0byB0aGUgZW5kIG9mIHRoZSBNRVNTQUdFLUlOVEVHUklUWS1TSEEyNTYgYXR0 cmlidXRlIHByaW9yIHRvDQogICBjYWxjdWxhdGluZyB0aGUgSE1BQyBvdmVyIHRoZSBTVFVOIG1l c3NhZ2UsIHVwIHRvIGFuZCBpbmNsdWRpbmcgdGhlDQogICBhdHRyaWJ1dGUgcHJlY2VkaW5nIHRo ZSBNRVNTQUdFLUlOVEVHUklUWS1TSEEyNTYgYXR0cmlidXRlLiAgU3VjaA0KICAgYWRqdXN0bWVu dCBpcyBuZWNlc3Nhcnkgd2hlbiBhdHRyaWJ1dGVzLCBzdWNoIGFzIEZJTkdFUlBSSU5ULCBhcHBl YXINCiAgIGFmdGVyIE1FU1NBR0UtSU5URUdSSVRZLVNIQTI1Ni4gIFNlZSBhbHNvIEFwcGVuZGl4 IEIuMSBmb3IgZXhhbXBsZXMNCiAgIG9mIHN1Y2ggY2FsY3VsYXRpb25zLg0KDQoNCg0KUGV0aXQt SHVndWVuaW4sIGV0IGFsLiBFeHBpcmVzIFNlcHRlbWJlciAyMiwgMjAxOSAgICAgICAgICAgICAg W1BhZ2UgNDFdDQoMDQpJbnRlcm5ldC1EcmFmdCBTZXNzaW9uIFRyYXZlcnNhbCBVdGlsaXRpZXMg Zm9yIE5BVCAoU1RVTikgICAgIE1hcmNoIDIwMTkNCg0KDQoxNC43LiAgRklOR0VSUFJJTlQNCg0K ICAgVGhlIEZJTkdFUlBSSU5UIGF0dHJpYnV0ZSBNQVkgYmUgcHJlc2VudCBpbiBhbGwgU1RVTiBt ZXNzYWdlcy4NCg0KICAgVGhlIHZhbHVlIG9mIHRoZSBhdHRyaWJ1dGUgaXMgY29tcHV0ZWQgYXMg dGhlIENSQy0zMiBvZiB0aGUgU1RVTg0KICAgbWVzc2FnZSB1cCB0byAoYnV0IGV4Y2x1ZGluZykg dGhlIEZJTkdFUlBSSU5UIGF0dHJpYnV0ZSBpdHNlbGYsDQogICBYT1InZWQgd2l0aCB0aGUgMzIt Yml0IHZhbHVlIDB4NTM1NDU1NGUuICAoVGhlIFhPUiBvcGVyYXRpb24gZW5zdXJlcw0KICAgdGhh dCB0aGUgRklOR0VSUFJJTlQgdGVzdCB3aWxsIG5vdCByZXBvcnQgYSBmYWxzZSBwb3NpdGl2ZSBv biBhDQogICBwYWNrZXQgY29udGFpbmluZyBhIENSQy0zMiBnZW5lcmF0ZWQgYnkgYW4gYXBwbGlj YXRpb24gcHJvdG9jb2wuKQ0KICAgVGhlIDMyLWJpdCBDUkMgaXMgdGhlIG9uZSBkZWZpbmVkIGlu IElUVSBWLjQyIFtJVFUuVjQyLjIwMDJdLCB3aGljaA0KICAgaGFzIGEgZ2VuZXJhdG9yIHBvbHlu b21pYWwgb2YgeF4zMiArIHheMjYgKyB4XjIzICsgeF4yMiArIHheMTYgKyB4XjEyDQogICArIHhe MTEgKyB4XjEwICsgeF44ICsgeF43ICsgeF41ICsgeF40ICsgeF4yICsgeCArIDEuICBTZWUgdGhl IHNhbXBsZQ0KICAgY29kZSBmb3IgdGhlIENSQy0zMiBpbiBTZWN0aW9uIDggb2YgW1JGQzE5NTJd Lg0KDQogICBXaGVuIHByZXNlbnQsIHRoZSBGSU5HRVJQUklOVCBhdHRyaWJ1dGUgTVVTVCBiZSB0 aGUgbGFzdCBhdHRyaWJ1dGUgaW4NCiAgIHRoZSBtZXNzYWdlLCBhbmQgdGh1cyB3aWxsIGFwcGVh ciBhZnRlciBNRVNTQUdFLUlOVEVHUklUWSBhbmQNCiAgIE1FU1NBR0UtSU5URUdSSVRZLVNIQTI1 Ni4NCg0KICAgVGhlIEZJTkdFUlBSSU5UIGF0dHJpYnV0ZSBjYW4gYWlkIGluIGRpc3Rpbmd1aXNo aW5nIFNUVU4gcGFja2V0cyBmcm9tDQogICBwYWNrZXRzIG9mIG90aGVyIHByb3RvY29scy4gIFNl ZSBTZWN0aW9uIDcuDQoNCiAgIEFzIHdpdGggTUVTU0FHRS1JTlRFR1JJVFkgYW5kIE1FU1NBR0Ut SU5URUdSSVRZLVNIQTI1NiwgdGhlIENSQyB1c2VkDQogICBpbiB0aGUgRklOR0VSUFJJTlQgYXR0 cmlidXRlIGNvdmVycyB0aGUgbGVuZ3RoIGZpZWxkIGZyb20gdGhlIFNUVU4NCiAgIG1lc3NhZ2Ug aGVhZGVyLiAgVGhlcmVmb3JlLCB0aGlzIHZhbHVlIG11c3QgYmUgY29ycmVjdCBhbmQgaW5jbHVk ZQ0KICAgdGhlIENSQyBhdHRyaWJ1dGUgYXMgcGFydCBvZiB0aGUgbWVzc2FnZSBsZW5ndGgsIHBy aW9yIHRvIGNvbXB1dGF0aW9uDQogICBvZiB0aGUgQ1JDLiAgV2hlbiB1c2luZyB0aGUgRklOR0VS UFJJTlQgYXR0cmlidXRlIGluIGEgbWVzc2FnZSwgdGhlDQogICBhdHRyaWJ1dGUgaXMgZmlyc3Qg cGxhY2VkIGludG8gdGhlIG1lc3NhZ2Ugd2l0aCBhIGR1bW15IHZhbHVlLCB0aGVuDQogICB0aGUg Q1JDIGlzIGNvbXB1dGVkLCBhbmQgdGhlbiB0aGUgdmFsdWUgb2YgdGhlIGF0dHJpYnV0ZSBpcyB1 cGRhdGVkLg0KICAgSWYgdGhlIE1FU1NBR0UtSU5URUdSSVRZIG9yIE1FU1NBR0UtSU5URUdSSVRZ LVNIQTI1NiBhdHRyaWJ1dGUgYXJlDQogICBhbHNvIHByZXNlbnQsIHRoZW4gdGhleSBtdXN0IGJl IHByZXNlbnQgd2l0aCB0aGUgY29ycmVjdCBtZXNzYWdlLQ0KICAgaW50ZWdyaXR5IHZhbHVlIGJl Zm9yZSB0aGUgQ1JDIGlzIGNvbXB1dGVkLCBzaW5jZSB0aGUgQ1JDIGlzIGRvbmUNCiAgIG92ZXIg dGhlIHZhbHVlIG9mIHRoZSBNRVNTQUdFLUlOVEVHUklUWSBhbmQgTUVTU0FHRS1JTlRFR1JJVFkt U0hBMjU2DQogICBhdHRyaWJ1dGVzIGFzIHdlbGwuDQoNCjE0LjguICBFUlJPUi1DT0RFDQoNCiAg IFRoZSBFUlJPUi1DT0RFIGF0dHJpYnV0ZSBpcyB1c2VkIGluIGVycm9yIHJlc3BvbnNlIG1lc3Nh Z2VzLiAgSXQNCiAgIGNvbnRhaW5zIGEgbnVtZXJpYyBlcnJvciBjb2RlIHZhbHVlIGluIHRoZSBy YW5nZSBvZiAzMDAgdG8gNjk5IHBsdXMgYQ0KICAgdGV4dHVhbCByZWFzb24gcGhyYXNlIGVuY29k ZWQgaW4gVVRGLTggW1JGQzM2MjldLCBhbmQgaXMgY29uc2lzdGVudA0KICAgaW4gaXRzIGNvZGUg YXNzaWdubWVudHMgYW5kIHNlbWFudGljcyB3aXRoIFNJUCBbUkZDMzI2MV0gYW5kIEhUVFANCiAg IFtSRkM3MjMxXS4gIFRoZSByZWFzb24gcGhyYXNlIGlzIG1lYW50IGZvciBkaWFnbm9zdGljIHB1 cnBvc2VzLCBhbmQNCiAgIGNhbiBiZSBhbnl0aGluZyBhcHByb3ByaWF0ZSBmb3IgdGhlIGVycm9y IGNvZGUuICBSZWNvbW1lbmRlZCByZWFzb24NCiAgIHBocmFzZXMgZm9yIHRoZSBkZWZpbmVkIGVy cm9yIGNvZGVzIGFyZSBpbmNsdWRlZCBpbiB0aGUgSUFOQSByZWdpc3RyeQ0KICAgZm9yIGVycm9y IGNvZGVzLiAgVGhlIHJlYXNvbiBwaHJhc2UgTVVTVCBiZSBhIFVURi04IFtSRkMzNjI5XSBlbmNv ZGVkDQogICBzZXF1ZW5jZSBvZiBsZXNzIHRoYW4gMTI4IGNoYXJhY3RlcnMgKHdoaWNoIGNhbiBi ZSBhcyBsb25nIGFzIDUwOQ0KICAgYnl0ZXMgd2hlbiBlbmNvZGluZyB0aGVtIG9yIDc2MyBieXRl cyB3aGVuIGRlY29kaW5nIHRoZW0pLg0KDQoNCg0KDQoNClBldGl0LUh1Z3VlbmluLCBldCBhbC4g RXhwaXJlcyBTZXB0ZW1iZXIgMjIsIDIwMTkgICAgICAgICAgICAgIFtQYWdlIDQyXQ0KDA0KSW50 ZXJuZXQtRHJhZnQgU2Vzc2lvbiBUcmF2ZXJzYWwgVXRpbGl0aWVzIGZvciBOQVQgKFNUVU4pICAg ICBNYXJjaCAyMDE5DQoNCg0KICAgICAgMCAgICAgICAgICAgICAgICAgICAxICAgICAgICAgICAg ICAgICAgIDIgICAgICAgICAgICAgICAgICAgMw0KICAgICAgMCAxIDIgMyA0IDUgNiA3IDggOSAw IDEgMiAzIDQgNSA2IDcgOCA5IDAgMSAyIDMgNCA1IDYgNyA4IDkgMCAxDQogICAgICstKy0rLSst Ky0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0r DQogICAgIHwgICAgICAgICAgIFJlc2VydmVkLCBzaG91bGQgYmUgMCAgICAgICAgIHxDbGFzc3wg ICAgIE51bWJlciAgICB8DQogICAgICstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0r LSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rDQogICAgIHwgICAgICBSZWFzb24gUGhyYXNl ICh2YXJpYWJsZSkgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIC4uDQogICAgICstKy0r LSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSst Ky0rDQoNCiAgICAgICAgICAgICAgICAgICAgICBGaWd1cmUgNzogRVJST1ItQ09ERSBBdHRyaWJ1 dGUNCg0KICAgVG8gZmFjaWxpdGF0ZSBwcm9jZXNzaW5nLCB0aGUgY2xhc3Mgb2YgdGhlIGVycm9y IGNvZGUgKHRoZSBodW5kcmVkcw0KICAgZGlnaXQpIGlzIGVuY29kZWQgc2VwYXJhdGVseSBmcm9t IHRoZSByZXN0IG9mIHRoZSBjb2RlLCBhcyBzaG93biBpbg0KICAgRmlndXJlIDcuDQoNCiAgIFRo ZSBSZXNlcnZlZCBiaXRzIFNIT1VMRCBiZSAwLCBhbmQgYXJlIGZvciBhbGlnbm1lbnQgb24gMzIt Yml0DQogICBib3VuZGFyaWVzLiAgUmVjZWl2ZXJzIE1VU1QgaWdub3JlIHRoZXNlIGJpdHMuICBU aGUgQ2xhc3MgcmVwcmVzZW50cw0KICAgdGhlIGh1bmRyZWRzIGRpZ2l0IG9mIHRoZSBlcnJvciBj b2RlLiAgVGhlIHZhbHVlIE1VU1QgYmUgYmV0d2VlbiAzDQogICBhbmQgNi4gIFRoZSBOdW1iZXIg cmVwcmVzZW50cyB0aGUgYmluYXJ5IGVuY29kaW5nIG9mIHRoZSBlcnJvciBjb2RlDQogICBtb2R1 bG8gMTAwLCBhbmQgaXRzIHZhbHVlIE1VU1QgYmUgYmV0d2VlbiAwIGFuZCA5OS4NCg0KICAgVGhl IGZvbGxvd2luZyBlcnJvciBjb2RlcywgYWxvbmcgd2l0aCB0aGVpciByZWNvbW1lbmRlZCByZWFz b24NCiAgIHBocmFzZXMsIGFyZSBkZWZpbmVkOg0KDQogICAzMDAgVHJ5IEFsdGVybmF0ZTogIFRo ZSBjbGllbnQgc2hvdWxkIGNvbnRhY3QgYW4gYWx0ZXJuYXRlIHNlcnZlciBmb3INCiAgICAgIHRo aXMgcmVxdWVzdC4gIFRoaXMgZXJyb3IgcmVzcG9uc2UgTVVTVCBvbmx5IGJlIHNlbnQgaWYgdGhl DQogICAgICByZXF1ZXN0IGluY2x1ZGVkIGVpdGhlciBhIFVTRVJOQU1FIG9yIFVTRVJIQVNIIGF0 dHJpYnV0ZSBhbmQgYQ0KICAgICAgdmFsaWQgTUVTU0FHRS1JTlRFR1JJVFkgb3IgTUVTU0FHRS1J TlRFR1JJVFktU0hBMjU2IGF0dHJpYnV0ZTsNCiAgICAgIG90aGVyd2lzZSwgaXQgTVVTVCBOT1Qg YmUgc2VudCBhbmQgZXJyb3IgY29kZSA0MDAgKEJhZCBSZXF1ZXN0KSBpcw0KICAgICAgc3VnZ2Vz dGVkLiAgVGhpcyBlcnJvciByZXNwb25zZSBNVVNUIGJlIHByb3RlY3RlZCB3aXRoIHRoZQ0KICAg ICAgTUVTU0FHRS1JTlRFR1JJVFkgb3IgTUVTU0FHRS1JTlRFR1JJVFktU0hBMjU2IGF0dHJpYnV0 ZSwgYW5kDQogICAgICByZWNlaXZlcnMgTVVTVCB2YWxpZGF0ZSB0aGUgTUVTU0FHRS1JTlRFR1JJ VFkgb3IgTUVTU0FHRS0NCiAgICAgIElOVEVHUklUWS1TSEEyNTYgb2YgdGhpcyByZXNwb25zZSBi ZWZvcmUgcmVkaXJlY3RpbmcgdGhlbXNlbHZlcyB0bw0KICAgICAgYW4gYWx0ZXJuYXRlIHNlcnZl ci4NCg0KICAgTm90ZTogIEZhaWx1cmUgdG8gZ2VuZXJhdGUgYW5kIHZhbGlkYXRlIG1lc3NhZ2Ug aW50ZWdyaXR5IGZvciBhIDMwMA0KICAgICAgcmVzcG9uc2UgYWxsb3dzIGFuIG9uLXBhdGggYXR0 YWNrZXIgdG8gZmFsc2lmeSBhIDMwMCByZXNwb25zZSB0aHVzDQogICAgICBjYXVzaW5nIHN1YnNl cXVlbnQgU1RVTiBtZXNzYWdlcyB0byBiZSBzZW50IHRvIGEgdmljdGltLg0KDQogICA0MDAgQmFk IFJlcXVlc3Q6ICBUaGUgcmVxdWVzdCB3YXMgbWFsZm9ybWVkLiAgVGhlIGNsaWVudCBTSE9VTEQg Tk9UDQogICAgICByZXRyeSB0aGUgcmVxdWVzdCB3aXRob3V0IG1vZGlmaWNhdGlvbiBmcm9tIHRo ZSBwcmV2aW91cyBhdHRlbXB0Lg0KICAgICAgVGhlIHNlcnZlciBtYXkgbm90IGJlIGFibGUgdG8g Z2VuZXJhdGUgYSB2YWxpZCBNRVNTQUdFLUlOVEVHUklUWQ0KICAgICAgb3IgTUVTU0FHRS1JTlRF R1JJVFktU0hBMjU2IGZvciB0aGlzIGVycm9yLCBzbyB0aGUgY2xpZW50IE1VU1QgTk9UDQogICAg ICBleHBlY3QgYSB2YWxpZCBNRVNTQUdFLUlOVEVHUklUWSBvciBNRVNTQUdFLUlOVEVHUklUWS1T SEEyNTYNCiAgICAgIGF0dHJpYnV0ZSBvbiB0aGlzIHJlc3BvbnNlLg0KDQogICA0MDEgVW5hdXRo ZW50aWNhdGVkOiAgVGhlIHJlcXVlc3QgZGlkIG5vdCBjb250YWluIHRoZSBjb3JyZWN0DQogICAg ICBjcmVkZW50aWFscyB0byBwcm9jZWVkLiAgVGhlIGNsaWVudCBzaG91bGQgcmV0cnkgdGhlIHJl cXVlc3Qgd2l0aA0KICAgICAgcHJvcGVyIGNyZWRlbnRpYWxzLg0KDQoNCg0KUGV0aXQtSHVndWVu aW4sIGV0IGFsLiBFeHBpcmVzIFNlcHRlbWJlciAyMiwgMjAxOSAgICAgICAgICAgICAgW1BhZ2Ug NDNdDQoMDQpJbnRlcm5ldC1EcmFmdCBTZXNzaW9uIFRyYXZlcnNhbCBVdGlsaXRpZXMgZm9yIE5B VCAoU1RVTikgICAgIE1hcmNoIDIwMTkNCg0KDQogICA0MjAgVW5rbm93biBBdHRyaWJ1dGU6ICBU aGUgc2VydmVyIHJlY2VpdmVkIGEgU1RVTiBwYWNrZXQgY29udGFpbmluZw0KICAgICAgYSBjb21w cmVoZW5zaW9uLXJlcXVpcmVkIGF0dHJpYnV0ZSB0aGF0IGl0IGRpZCBub3QgdW5kZXJzdGFuZC4N CiAgICAgIFRoZSBzZXJ2ZXIgTVVTVCBwdXQgdGhpcyB1bmtub3duIGF0dHJpYnV0ZSBpbiB0aGUg VU5LTk9XTi0NCiAgICAgIEFUVFJJQlVURSBhdHRyaWJ1dGUgb2YgaXRzIGVycm9yIHJlc3BvbnNl Lg0KDQogICA0MzggU3RhbGUgTm9uY2U6ICBUaGUgTk9OQ0UgdXNlZCBieSB0aGUgY2xpZW50IHdh cyBubyBsb25nZXIgdmFsaWQuDQogICAgICBUaGUgY2xpZW50IHNob3VsZCByZXRyeSwgdXNpbmcg dGhlIE5PTkNFIHByb3ZpZGVkIGluIHRoZSByZXNwb25zZS4NCg0KICAgNTAwIFNlcnZlciBFcnJv cjogIFRoZSBzZXJ2ZXIgaGFzIHN1ZmZlcmVkIGEgdGVtcG9yYXJ5IGVycm9yLiAgVGhlDQogICAg ICBjbGllbnQgc2hvdWxkIHRyeSBhZ2Fpbi4NCg0KMTQuOS4gIFJFQUxNDQoNCiAgIFRoZSBSRUFM TSBhdHRyaWJ1dGUgbWF5IGJlIHByZXNlbnQgaW4gcmVxdWVzdHMgYW5kIHJlc3BvbnNlcy4gIEl0 DQogICBjb250YWlucyB0ZXh0IHRoYXQgbWVldHMgdGhlIGdyYW1tYXIgZm9yICJyZWFsbS12YWx1 ZSIgYXMgZGVzY3JpYmVkDQogICBpbiBbUkZDMzI2MV0gYnV0IHdpdGhvdXQgdGhlIGRvdWJsZSBx dW90ZXMgYW5kIHRoZWlyIHN1cnJvdW5kaW5nDQogICB3aGl0ZXNwYWNlLiAgVGhhdCBpcywgaXQg aXMgYW4gdW5xdW90ZWQgcmVhbG0tdmFsdWUgKGFuZCBpcyB0aGVyZWZvcmUNCiAgIGEgc2VxdWVu Y2Ugb2YgcWR0ZXh0IG9yIHF1b3RlZC1wYWlyKS4gIEl0IE1VU1QgYmUgYSBVVEYtOCBbUkZDMzYy OV0NCiAgIGVuY29kZWQgc2VxdWVuY2Ugb2YgbGVzcyB0aGFuIDEyOCBjaGFyYWN0ZXJzICh3aGlj aCBjYW4gYmUgYXMgbG9uZyBhcw0KICAgNTA5IGJ5dGVzIHdoZW4gZW5jb2RpbmcgdGhlbSBhbmQg YXMgbG9uZyBhcyA3NjMgYnl0ZXMgd2hlbiBkZWNvZGluZw0KICAgdGhlbSksIGFuZCBNVVNUIGhh dmUgYmVlbiBwcm9jZXNzZWQgdXNpbmcgdGhlIE9wYXF1ZVN0cmluZyBwcm9maWxlDQogICBbUkZD ODI2NV0uDQoNCiAgIFByZXNlbmNlIG9mIHRoZSBSRUFMTSBhdHRyaWJ1dGUgaW4gYSByZXF1ZXN0 IGluZGljYXRlcyB0aGF0IGxvbmctdGVybQ0KICAgY3JlZGVudGlhbHMgYXJlIGJlaW5nIHVzZWQg Zm9yIGF1dGhlbnRpY2F0aW9uLiAgUHJlc2VuY2UgaW4gY2VydGFpbg0KICAgZXJyb3IgcmVzcG9u c2VzIGluZGljYXRlcyB0aGF0IHRoZSBzZXJ2ZXIgd2lzaGVzIHRoZSBjbGllbnQgdG8gdXNlIGEN CiAgIGxvbmctdGVybSBjcmVkZW50aWFsIGluIHRoYXQgcmVhbG0gZm9yIGF1dGhlbnRpY2F0aW9u Lg0KDQoxNC4xMC4gIE5PTkNFDQoNCiAgIFRoZSBOT05DRSBhdHRyaWJ1dGUgbWF5IGJlIHByZXNl bnQgaW4gcmVxdWVzdHMgYW5kIHJlc3BvbnNlcy4gIEl0DQogICBjb250YWlucyBhIHNlcXVlbmNl IG9mIHFkdGV4dCBvciBxdW90ZWQtcGFpciwgd2hpY2ggYXJlIGRlZmluZWQgaW4NCiAgIFtSRkMz MjYxXS4gIE5vdGUgdGhhdCB0aGlzIG1lYW5zIHRoYXQgdGhlIE5PTkNFIGF0dHJpYnV0ZSB3aWxs IG5vdA0KICAgY29udGFpbiB0aGUgYWN0dWFsIHN1cnJvdW5kaW5nIHF1b3RlIGNoYXJhY3RlcnMu ICBTZWUgW1JGQzc2MTZdLA0KICAgU2VjdGlvbiA1LjQsIGZvciBndWlkYW5jZSBvbiBzZWxlY3Rp b24gb2Ygbm9uY2UgdmFsdWVzIGluIGEgc2VydmVyLg0KICAgSXQgTVVTVCBiZSBsZXNzIHRoYW4g MTI4IGNoYXJhY3RlcnMgKHdoaWNoIGNhbiBiZSBhcyBsb25nIGFzIDUwOQ0KICAgYnl0ZXMgd2hl biBlbmNvZGluZyB0aGVtIGFuZCBhIGxvbmcgYXMgNzYzIGJ5dGVzIHdoZW4gZGVjb2RpbmcgdGhl bSkuDQoNCjE0LjExLiAgUEFTU1dPUkQtQUxHT1JJVEhNUw0KDQogICBUaGUgUEFTU1dPUkQtQUxH T1JJVEhNUyBhdHRyaWJ1dGUgbWF5IGJlIHByZXNlbnQgaW4gcmVxdWVzdHMgYW5kDQogICByZXNw b25zZXMuICBJdCBjb250YWlucyB0aGUgbGlzdCBvZiBhbGdvcml0aG1zIHRoYXQgdGhlIHNlcnZl ciBjYW4NCiAgIHVzZSB0byBkZXJpdmUgdGhlIGxvbmctdGVybSBwYXNzd29yZC4NCg0KICAgVGhl IHNldCBvZiBrbm93biBhbGdvcml0aG1zIGlzIG1haW50YWluZWQgYnkgSUFOQS4gIFRoZSBpbml0 aWFsIHNldA0KICAgZGVmaW5lZCBieSB0aGlzIHNwZWNpZmljYXRpb24gaXMgZm91bmQgaW4gU2Vj dGlvbiAxOC41Lg0KDQoNCg0KDQoNClBldGl0LUh1Z3VlbmluLCBldCBhbC4gRXhwaXJlcyBTZXB0 ZW1iZXIgMjIsIDIwMTkgICAgICAgICAgICAgIFtQYWdlIDQ0XQ0KDA0KSW50ZXJuZXQtRHJhZnQg U2Vzc2lvbiBUcmF2ZXJzYWwgVXRpbGl0aWVzIGZvciBOQVQgKFNUVU4pICAgICBNYXJjaCAyMDE5 DQoNCg0KICAgVGhlIGF0dHJpYnV0ZSBjb250YWlucyBhIGxpc3Qgb2YgYWxnb3JpdGhtIG51bWJl cnMgYW5kIHZhcmlhYmxlDQogICBsZW5ndGggcGFyYW1ldGVycy4gIFRoZSBhbGdvcml0aG0gbnVt YmVyIGlzIGEgMTYtYml0IHZhbHVlIGFzIGRlZmluZWQNCiAgIGluIFNlY3Rpb24gMTguNS4gIFRo ZSBwYXJhbWV0ZXJzIHN0YXJ0IHdpdGggdGhlIGxlbmd0aCAocHJpb3IgdG8NCiAgIHBhZGRpbmcp IG9mIHRoZSBwYXJhbWV0ZXJzIGFzIGEgMTYtYml0IHZhbHVlLCBmb2xsb3dlZCBieSB0aGUNCiAg IHBhcmFtZXRlcnMgdGhhdCBhcmUgc3BlY2lmaWMgdG8gZWFjaCBhbGdvcml0aG0uICBUaGUgcGFy YW1ldGVycyBhcmUNCiAgIHBhZGRlZCB0byBhIDMyLWJpdCBib3VuZGFyeSwgaW4gdGhlIHNhbWUg bWFubmVyIGFzIGFuIGF0dHJpYnV0ZS4NCg0KICAgICAgMCAgICAgICAgICAgICAgICAgICAxICAg ICAgICAgICAgICAgICAgIDIgICAgICAgICAgICAgICAgICAgMw0KICAgICAgMCAxIDIgMyA0IDUg NiA3IDggOSAwIDEgMiAzIDQgNSA2IDcgOCA5IDAgMSAyIDMgNCA1IDYgNyA4IDkgMCAxDQogICAg ICstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSst Ky0rLSstKy0rDQogICAgIHwgICAgICAgICBBbGdvcml0aG0gMSAgICAgICAgICAgfCBBbGdvcml0 aG0gMSBQYXJhbWV0ZXJzIExlbmd0aCB8DQogICAgICstKy0rLSstKy0rLSstKy0rLSstKy0rLSst Ky0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rDQogICAgIHwgICAgICAgICAg ICAgICAgICAgIEFsZ29yaXRobSAxIFBhcmFtZXRlcnMgKHZhcmlhYmxlKQ0KICAgICArLSstKy0r LSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSst Kw0KICAgICB8ICAgICAgICAgQWxnb3JpdGhtIDIgICAgICAgICAgIHwgQWxnb3JpdGhtIDIgUGFy YW1ldGVycyBMZW5ndGggfA0KICAgICArLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSst Ky0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKw0KICAgICB8ICAgICAgICAgICAgICAgICAg ICBBbGdvcml0aG0gMiBQYXJhbWV0ZXIgKHZhcmlhYmxlKQ0KICAgICArLSstKy0rLSstKy0rLSst Ky0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKw0KICAgICB8 ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgIC4uLg0KDQogICAgICAgICAgICAgRmlndXJlIDg6IEZvcm1hdCBvZiBQQVNTV09SRC1BTEdP UklUSE1TIEF0dHJpYnV0ZQ0KDQoxNC4xMi4gIFBBU1NXT1JELUFMR09SSVRITQ0KDQogICBUaGUg UEFTU1dPUkQtQUxHT1JJVEhNIGF0dHJpYnV0ZSBpcyBwcmVzZW50IG9ubHkgaW4gcmVxdWVzdHMu ICBJdA0KICAgY29udGFpbnMgdGhlIGFsZ29yaXRobXMgdGhhdCB0aGUgc2VydmVyIG11c3QgdXNl IHRvIGRlcml2ZSBhIGtleSBmcm9tDQogICB0aGUgbG9uZy10ZXJtIHBhc3N3b3JkLg0KDQogICBU aGUgc2V0IG9mIGtub3duIGFsZ29yaXRobXMgaXMgbWFpbnRhaW5lZCBieSBJQU5BLiAgVGhlIGlu aXRpYWwgc2V0DQogICBkZWZpbmVkIGJ5IHRoaXMgc3BlY2lmaWNhdGlvbiBpcyBmb3VuZCBpbiBT ZWN0aW9uIDE4LjUuDQoNCiAgIFRoZSBhdHRyaWJ1dGUgY29udGFpbnMgYW4gYWxnb3JpdGhtIG51 bWJlciBhbmQgdmFyaWFibGUgbGVuZ3RoDQogICBwYXJhbWV0ZXJzLiAgVGhlIGFsZ29yaXRobSBu dW1iZXIgaXMgYSAxNi1iaXQgdmFsdWUgYXMgZGVmaW5lZCBpbg0KICAgU2VjdGlvbiAxOC41LiAg VGhlIHBhcmFtZXRlcnMgc3RhcnRzIHdpdGggdGhlIGxlbmd0aCAocHJpb3IgdG8NCiAgIHBhZGRp bmcpIG9mIHRoZSBwYXJhbWV0ZXJzIGFzIGEgMTYtYml0IHZhbHVlLCBmb2xsb3dlZCBieSB0aGUN CiAgIHBhcmFtZXRlcnMgdGhhdCBhcmUgc3BlY2lmaWMgdG8gdGhlIGFsZ29yaXRobS4gIFRoZSBw YXJhbWV0ZXJzIGFyZQ0KICAgcGFkZGVkIHRvIGEgMzItYml0IGJvdW5kYXJ5LCBpbiB0aGUgc2Ft ZSBtYW5uZXIgYXMgYW4gYXR0cmlidXRlLg0KICAgU2ltaWxhcmx5LCB0aGUgcGFkZGluZyBiaXRz IE1VU1QgYmUgc2V0IHRvIHplcm8gb24gc2VuZGluZyBhbmQgTVVTVA0KICAgYmUgaWdub3JlZCBi eSB0aGUgcmVjZWl2ZXIuDQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0KDQpQZXRpdC1IdWd1ZW5pbiwg ZXQgYWwuIEV4cGlyZXMgU2VwdGVtYmVyIDIyLCAyMDE5ICAgICAgICAgICAgICBbUGFnZSA0NV0N CgwNCkludGVybmV0LURyYWZ0IFNlc3Npb24gVHJhdmVyc2FsIFV0aWxpdGllcyBmb3IgTkFUIChT VFVOKSAgICAgTWFyY2ggMjAxOQ0KDQoNCiAgICAgIDAgICAgICAgICAgICAgICAgICAgMSAgICAg ICAgICAgICAgICAgICAyICAgICAgICAgICAgICAgICAgIDMNCiAgICAgIDAgMSAyIDMgNCA1IDYg NyA4IDkgMCAxIDIgMyA0IDUgNiA3IDggOSAwIDEgMiAzIDQgNSA2IDcgOCA5IDAgMQ0KICAgICAr LSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSst Ky0rLSstKw0KICAgICB8ICAgICAgICAgIEFsZ29yaXRobSAgICAgICAgICAgfCAgQWxnb3JpdGht IFBhcmFtZXRlcnMgTGVuZ3RoICAgfA0KICAgICArLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSst Ky0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKw0KICAgICB8ICAgICAgICAgICAg ICAgICAgICBBbGdvcml0aG0gUGFyYW1ldGVycyAodmFyaWFibGUpDQogICAgICstKy0rLSstKy0r LSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rDQoN CiAgICAgICAgICAgICBGaWd1cmUgOTogRm9ybWF0IG9mIFBBU1NXT1JELUFMR09SSVRITSBBdHRy aWJ1dGUNCg0KMTQuMTMuICBVTktOT1dOLUFUVFJJQlVURVMNCg0KICAgVGhlIFVOS05PV04tQVRU UklCVVRFUyBhdHRyaWJ1dGUgaXMgcHJlc2VudCBvbmx5IGluIGFuIGVycm9yIHJlc3BvbnNlDQog ICB3aGVuIHRoZSByZXNwb25zZSBjb2RlIGluIHRoZSBFUlJPUi1DT0RFIGF0dHJpYnV0ZSBpcyA0 MjAuDQoNCiAgIFRoZSBhdHRyaWJ1dGUgY29udGFpbnMgYSBsaXN0IG9mIDE2LWJpdCB2YWx1ZXMs IGVhY2ggb2Ygd2hpY2gNCiAgIHJlcHJlc2VudHMgYW4gYXR0cmlidXRlIHR5cGUgdGhhdCB3YXMg bm90IHVuZGVyc3Rvb2QgYnkgdGhlIHNlcnZlci4NCg0KICAgICAgMCAgICAgICAgICAgICAgICAg ICAxICAgICAgICAgICAgICAgICAgIDIgICAgICAgICAgICAgICAgICAgMw0KICAgICAgMCAxIDIg MyA0IDUgNiA3IDggOSAwIDEgMiAzIDQgNSA2IDcgOCA5IDAgMSAyIDMgNCA1IDYgNyA4IDkgMCAx DQogICAgICstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSst Ky0rLSstKy0rLSstKy0rDQogICAgIHwgICAgICBBdHRyaWJ1dGUgMSBUeXBlICAgICAgICAgfCAg ICAgICBBdHRyaWJ1dGUgMiBUeXBlICAgICAgICB8DQogICAgICstKy0rLSstKy0rLSstKy0rLSst Ky0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rDQogICAgIHwgICAg ICBBdHRyaWJ1dGUgMyBUeXBlICAgICAgICAgfCAgICAgICBBdHRyaWJ1dGUgNCBUeXBlICAgIC4u Lg0KICAgICArLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0r LSstKy0rLSstKy0rLSstKw0KDQogICAgICAgICAgICAgRmlndXJlIDEwOiBGb3JtYXQgb2YgVU5L Tk9XTi1BVFRSSUJVVEVTIEF0dHJpYnV0ZQ0KDQogICBOb3RlOiAgSW4gW1JGQzM0ODldLCB0aGlz IGZpZWxkIHdhcyBwYWRkZWQgdG8gMzIgYnkgZHVwbGljYXRpbmcgdGhlDQogICAgICBsYXN0IGF0 dHJpYnV0ZS4gIEluIHRoaXMgdmVyc2lvbiBvZiB0aGUgc3BlY2lmaWNhdGlvbiwgdGhlIG5vcm1h bA0KICAgICAgcGFkZGluZyBydWxlcyBmb3IgYXR0cmlidXRlcyBhcmUgdXNlZCBpbnN0ZWFkLg0K DQoxNC4xNC4gIFNPRlRXQVJFDQoNCiAgIFRoZSBTT0ZUV0FSRSBhdHRyaWJ1dGUgY29udGFpbnMg YSB0ZXh0dWFsIGRlc2NyaXB0aW9uIG9mIHRoZSBzb2Z0d2FyZQ0KICAgYmVpbmcgdXNlZCBieSB0 aGUgYWdlbnQgc2VuZGluZyB0aGUgbWVzc2FnZS4gIEl0IGlzIHVzZWQgYnkgY2xpZW50cw0KICAg YW5kIHNlcnZlcnMuICBJdHMgdmFsdWUgU0hPVUxEIGluY2x1ZGUgbWFudWZhY3R1cmVyIGFuZCB2 ZXJzaW9uDQogICBudW1iZXIuICBUaGUgYXR0cmlidXRlIGhhcyBubyBpbXBhY3Qgb24gb3BlcmF0 aW9uIG9mIHRoZSBwcm90b2NvbCwNCiAgIGFuZCBzZXJ2ZXMgb25seSBhcyBhIHRvb2wgZm9yIGRp YWdub3N0aWMgYW5kIGRlYnVnZ2luZyBwdXJwb3Nlcy4gIFRoZQ0KICAgdmFsdWUgb2YgU09GVFdB UkUgaXMgdmFyaWFibGUgbGVuZ3RoLiAgSXQgTVVTVCBiZSBhIFVURi04IFtSRkMzNjI5XQ0KICAg ZW5jb2RlZCBzZXF1ZW5jZSBvZiBsZXNzIHRoYW4gMTI4IGNoYXJhY3RlcnMgKHdoaWNoIGNhbiBi ZSBhcyBsb25nIGFzDQogICA1MDkgd2hlbiBlbmNvZGluZyB0aGVtIGFuZCBhcyBsb25nIGFzIDc2 MyBieXRlcyB3aGVuIGRlY29kaW5nIHRoZW0pLg0KDQoxNC4xNS4gIEFMVEVSTkFURS1TRVJWRVIN Cg0KICAgVGhlIGFsdGVybmF0ZSBzZXJ2ZXIgcmVwcmVzZW50cyBhbiBhbHRlcm5hdGUgdHJhbnNw b3J0IGFkZHJlc3MNCiAgIGlkZW50aWZ5aW5nIGEgZGlmZmVyZW50IFNUVU4gc2VydmVyIHRoYXQg dGhlIFNUVU4gY2xpZW50IHNob3VsZCB0cnkuDQoNCg0KDQoNClBldGl0LUh1Z3VlbmluLCBldCBh bC4gRXhwaXJlcyBTZXB0ZW1iZXIgMjIsIDIwMTkgICAgICAgICAgICAgIFtQYWdlIDQ2XQ0KDA0K SW50ZXJuZXQtRHJhZnQgU2Vzc2lvbiBUcmF2ZXJzYWwgVXRpbGl0aWVzIGZvciBOQVQgKFNUVU4p ICAgICBNYXJjaCAyMDE5DQoNCg0KICAgSXQgaXMgZW5jb2RlZCBpbiB0aGUgc2FtZSB3YXkgYXMg TUFQUEVELUFERFJFU1MsIGFuZCB0aHVzIHJlZmVycyB0byBhDQogICBzaW5nbGUgc2VydmVyIGJ5 IElQIGFkZHJlc3MuDQoNCjE0LjE2LiAgQUxURVJOQVRFLURPTUFJTg0KDQogICBUaGUgYWx0ZXJu YXRlIGRvbWFpbiByZXByZXNlbnRzIHRoZSBkb21haW4gbmFtZSB0aGF0IGlzIHVzZWQgdG8NCiAg IHZlcmlmeSB0aGUgSVAgYWRkcmVzcyBpbiB0aGUgQUxURVJOQVRFLVNFUlZFUiBhdHRyaWJ1dGUg d2hlbiB0aGUNCiAgIHRyYW5zcG9ydCBwcm90b2NvbCB1c2VzIFRMUyBvciBEVExTLg0KDQogICBU aGUgdmFsdWUgb2YgQUxURVJOQVRFLURPTUFJTiBpcyB2YXJpYWJsZSBsZW5ndGguICBJdCBNVVNU IGJlIGEgdmFsaWQNCiAgIEROUyBuYW1lIFtSRkMxMTIzXSAoaW5jbHVkaW5nIEEtbGFiZWxzIFtS RkM1ODkwXSkgb2YgMjU1IG9yIGxlc3MNCiAgIEFTQ0lJIGNoYXJhY3RlcnMuDQoNCjE1LiAgT3Bl cmF0aW9uYWwgQ29uc2lkZXJhdGlvbnMNCg0KICAgU1RVTiBNQVkgYmUgdXNlZCB3aXRoIGFueWNh c3QgYWRkcmVzc2VzLCBidXQgb25seSB3aXRoIFVEUCBhbmQgaW4NCiAgIFNUVU4gVXNhZ2VzIHdo ZXJlIGF1dGhlbnRpY2F0aW9uIGlzIG5vdCB1c2VkLg0KDQoxNi4gIFNlY3VyaXR5IENvbnNpZGVy YXRpb25zDQoNCiAgIEltcGxlbWVudGF0aW9ucyBhbmQgZGVwbG95bWVudHMgb2YgYSBTVFVOIFVz YWdlIHVzaW5nIFRMUyBvciBEVExTDQogICBNVVNUIGZvbGxvdyB0aGUgcmVjb21tZW5kYXRpb25z IGluIFtCQ1AxOTVdLg0KDQogICBJbXBsZW1lbnRhdGlvbnMgYW5kIGRlcGxveW1lbnRzIG9mIGEg U1RVTiBVc2FnZSB1c2luZyB0aGUgTG9uZy1UZXJtDQogICBDcmVkZW50aWFsIE1lY2hhbmlzbSAo U2VjdGlvbiA5LjIpIE1VU1QgZm9sbG93IHRoZSByZWNvbW1lbmRhdGlvbnMgaW4NCiAgIFNlY3Rp b24gNSBvZiBbUkZDNzYxNl0uDQoNCjE2LjEuICBBdHRhY2tzIGFnYWluc3QgdGhlIFByb3RvY29s DQoNCjE2LjEuMS4gIE91dHNpZGUgQXR0YWNrcw0KDQogICBBbiBhdHRhY2tlciBjYW4gdHJ5IHRv IG1vZGlmeSBTVFVOIG1lc3NhZ2VzIGluIHRyYW5zaXQsIGluIG9yZGVyIHRvDQogICBjYXVzZSBh IGZhaWx1cmUgaW4gU1RVTiBvcGVyYXRpb24uICBUaGVzZSBhdHRhY2tzIGFyZSBkZXRlY3RlZCBm b3INCiAgIGJvdGggcmVxdWVzdHMgYW5kIHJlc3BvbnNlcyB0aHJvdWdoIHRoZSBtZXNzYWdlLWlu dGVncml0eSBtZWNoYW5pc20sDQogICB1c2luZyBlaXRoZXIgYSBzaG9ydC10ZXJtIG9yIGxvbmct dGVybSBjcmVkZW50aWFsLiAgT2YgY291cnNlLCBvbmNlDQogICBkZXRlY3RlZCwgdGhlIG1hbmlw dWxhdGVkIHBhY2tldHMgd2lsbCBiZSBkcm9wcGVkLCBjYXVzaW5nIHRoZSBTVFVODQogICB0cmFu c2FjdGlvbiB0byBlZmZlY3RpdmVseSBmYWlsLiAgVGhpcyBhdHRhY2sgaXMgcG9zc2libGUgb25s eSBieSBhbg0KICAgb24tcGF0aCBhdHRhY2tlci4NCg0KICAgQW4gYXR0YWNrZXIgdGhhdCBjYW4g b2JzZXJ2ZSwgYnV0IG5vdCBtb2RpZnksIFNUVU4gbWVzc2FnZXMgaW4tDQogICB0cmFuc2l0IChm b3IgZXhhbXBsZSwgYW4gYXR0YWNrZXIgcHJlc2VudCBvbiBhIHNoYXJlZCBhY2Nlc3MgbWVkaXVt LA0KICAgc3VjaCBhcyBXaS1GaSksIGNhbiBzZWUgYSBTVFVOIHJlcXVlc3QsIGFuZCB0aGVuIGlt bWVkaWF0ZWx5IHNlbmQgYQ0KICAgU1RVTiByZXNwb25zZSwgdHlwaWNhbGx5IGFuIGVycm9yIHJl c3BvbnNlLCBpbiBvcmRlciB0byBkaXNydXB0IFNUVU4NCiAgIHByb2Nlc3NpbmcuICBUaGlzIGF0 dGFjayBpcyBhbHNvIHByZXZlbnRlZCBmb3IgbWVzc2FnZXMgdGhhdCB1dGlsaXplDQogICBNRVNT QUdFLUlOVEVHUklUWS4gIEhvd2V2ZXIsIHNvbWUgZXJyb3IgcmVzcG9uc2VzLCB0aG9zZSByZWxh dGVkIHRvDQogICBhdXRoZW50aWNhdGlvbiBpbiBwYXJ0aWN1bGFyLCBjYW5ub3QgYmUgcHJvdGVj dGVkIGJ5IE1FU1NBR0UtDQogICBJTlRFR1JJVFkuICBXaGVuIFNUVU4gaXRzZWxmIGlzIHJ1biBv dmVyIGEgc2VjdXJlIHRyYW5zcG9ydCBwcm90b2NvbA0KICAgKGUuZy4sIFRMUyksIHRoZXNlIGF0 dGFja3MgYXJlIGNvbXBsZXRlbHkgbWl0aWdhdGVkLg0KDQoNCg0KUGV0aXQtSHVndWVuaW4sIGV0 IGFsLiBFeHBpcmVzIFNlcHRlbWJlciAyMiwgMjAxOSAgICAgICAgICAgICAgW1BhZ2UgNDddDQoM DQpJbnRlcm5ldC1EcmFmdCBTZXNzaW9uIFRyYXZlcnNhbCBVdGlsaXRpZXMgZm9yIE5BVCAoU1RV TikgICAgIE1hcmNoIDIwMTkNCg0KDQogICBEZXBlbmRpbmcgb24gdGhlIFNUVU4gdXNhZ2UsIHRo ZXNlIGF0dGFja3MgbWF5IGJlIG9mIG1pbmltYWwNCiAgIGNvbnNlcXVlbmNlIGFuZCB0aHVzIGRv IG5vdCByZXF1aXJlIG1lc3NhZ2UgaW50ZWdyaXR5IHRvIG1pdGlnYXRlLg0KICAgRm9yIGV4YW1w bGUsIHdoZW4gU1RVTiBpcyB1c2VkIHRvIGEgYmFzaWMgU1RVTiBzZXJ2ZXIgdG8gZGlzY292ZXIg YQ0KICAgc2VydmVyIHJlZmxleGl2ZSBjYW5kaWRhdGUgZm9yIHVzYWdlIHdpdGggSUNFLCBhdXRo ZW50aWNhdGlvbiBhbmQNCiAgIG1lc3NhZ2UgaW50ZWdyaXR5IGFyZSBub3QgcmVxdWlyZWQgc2lu Y2UgdGhlc2UgYXR0YWNrcyBhcmUgZGV0ZWN0ZWQNCiAgIGR1cmluZyB0aGUgY29ubmVjdGl2aXR5 IGNoZWNrIHBoYXNlLiAgVGhlIGNvbm5lY3Rpdml0eSBjaGVja3MNCiAgIHRoZW1zZWx2ZXMsIGhv d2V2ZXIsIHJlcXVpcmUgcHJvdGVjdGlvbiBmb3IgcHJvcGVyIG9wZXJhdGlvbiBvZiBJQ0UNCiAg IG92ZXJhbGwuICBBcyBkZXNjcmliZWQgaW4gU2VjdGlvbiAxMywgU1RVTiB1c2FnZXMgZGVzY3Jp YmUgd2hlbg0KICAgYXV0aGVudGljYXRpb24gYW5kIG1lc3NhZ2UgaW50ZWdyaXR5IGFyZSBuZWVk ZWQuDQoNCiAgIFNpbmNlIFNUVU4gdXNlcyB0aGUgSE1BQyBvZiBhIHNoYXJlZCBzZWNyZXQgZm9y IGF1dGhlbnRpY2F0aW9uIGFuZA0KICAgaW50ZWdyaXR5IHByb3RlY3Rpb24sIGl0IGlzIHN1Ympl Y3QgdG8gb2ZmbGluZSBkaWN0aW9uYXJ5IGF0dGFja3MuDQogICBXaGVuIGF1dGhlbnRpY2F0aW9u IGlzIHV0aWxpemVkLCBpdCBTSE9VTEQgYmUgd2l0aCBhIHN0cm9uZyBwYXNzd29yZA0KICAgdGhh dCBpcyBub3QgcmVhZGlseSBzdWJqZWN0IHRvIG9mZmxpbmUgZGljdGlvbmFyeSBhdHRhY2tzLg0K ICAgUHJvdGVjdGlvbiBvZiB0aGUgY2hhbm5lbCBpdHNlbGYsIHVzaW5nIFRMUyBvciBEVExTLCBt aXRpZ2F0ZXMgdGhlc2UNCiAgIGF0dGFja3MuDQoNCiAgIFNUVU4gc3VwcG9ydHMgYm90aCBNRVNT QUdFLUlOVEVHUklUWSBhbmQgTUVTU0FHRS1JTlRFR1JJVFktU0hBMjU2LA0KICAgd2hpY2ggaXMg c3ViamVjdCB0byBiaWQtZG93biBhdHRhY2tzIGJ5IGFuIG9uLXBhdGggYXR0YWNrZXIgdGhhdA0K ICAgd291bGQgc3RyaXAgdGhlIE1FU1NBR0UtSU5URUdSSVRZLVNIQTI1NiBhdHRyaWJ1dGUgbGVh dmluZyBvbmx5IHRoZQ0KICAgTUVTU0FHRS1JTlRFR1JJVFkgYXR0cmlidXRlIGFuZCBleHBsb2l0 aW5nIGEgcG90ZW50aWFsIHZ1bG5lcmFiaWxpdHkuDQogICBQcm90ZWN0aW9uIG9mIHRoZSBjaGFu bmVsIGl0c2VsZiwgdXNpbmcgVExTIG9yIERUTFMsIG1pdGlnYXRlcyB0aGVzZQ0KICAgYXR0YWNr cy4gIFRpbWVseSByZW1vdmFsIG9mIHRoZSBzdXBwb3J0IG9mIE1FU1NBR0UtSU5URUdSSVRZIGlu IGENCiAgIGZ1dHVyZSB2ZXJzaW9uIG9mIFNUVU4gaXMgbmVjZXNzYXJ5Lg0KDQogICBOb3RlOiBU aGUgdXNlIG9mIFNIQS0yNTYgZm9yIHBhc3N3b3JkIGhhc2hpbmcgZG9lcyBub3QgbWVldCBtb2Rl cm4NCiAgIHN0YW5kYXJkcywgd2hpY2ggYXJlIGFpbWVkIGF0IHNsb3dpbmcgZG93biBleGhhdXN0 aXZlIHBhc3N3b3JkIHNlYXJjaA0KICAgYnkgcHJvdmlkaW5nIGEgcmVsYXRpdmVseSBzbG93IG1p bmltdW0gdGltZSB0byBjb21wdXRlIHRoZSBoYXNoLg0KICAgQWx0aG91Z2ggYmV0dGVyIGFsZ29y aXRobXMgc3VjaCBhcyBBcmdvbjIgW0ktRC5pcnRmLWNmcmctYXJnb24yXSBhcmUNCiAgIGF2YWls YWJsZSwgU0hBLTI1NiB3YXMgY2hvc2VuIGZvciBjb25zaXN0ZW5jeSB3aXRoIFtSRkM3NjE2XS4N Cg0KMTYuMS4yLiAgSW5zaWRlIEF0dGFja3MNCg0KICAgQSByb2d1ZSBjbGllbnQgbWF5IHRyeSB0 byBsYXVuY2ggYSBEb1MgYXR0YWNrIGFnYWluc3QgYSBzZXJ2ZXIgYnkNCiAgIHNlbmRpbmcgaXQg YSBsYXJnZSBudW1iZXIgb2YgU1RVTiByZXF1ZXN0cy4gIEZvcnR1bmF0ZWx5LCBTVFVODQogICBy ZXF1ZXN0cyBjYW4gYmUgcHJvY2Vzc2VkIHN0YXRlbGVzc2x5IGJ5IGEgc2VydmVyLCBtYWtpbmcg c3VjaA0KICAgYXR0YWNrcyBoYXJkIHRvIGxhdW5jaCBlZmZlY3RpdmVseS4NCg0KICAgQSByb2d1 ZSBjbGllbnQgbWF5IHVzZSBhIFNUVU4gc2VydmVyIGFzIGEgcmVmbGVjdG9yLCBzZW5kaW5nIGl0 DQogICByZXF1ZXN0cyB3aXRoIGEgZmFsc2lmaWVkIHNvdXJjZSBJUCBhZGRyZXNzIGFuZCBwb3J0 LiAgSW4gc3VjaCBhDQogICBjYXNlLCB0aGUgcmVzcG9uc2Ugd291bGQgYmUgZGVsaXZlcmVkIHRv IHRoYXQgc291cmNlIElQIGFuZCBwb3J0Lg0KICAgVGhlcmUgaXMgbm8gYW1wbGlmaWNhdGlvbiBv ZiB0aGUgbnVtYmVyIG9mIHBhY2tldHMgd2l0aCB0aGlzIGF0dGFjaw0KICAgKHRoZSBTVFVOIHNl cnZlciBzZW5kcyBvbmUgcGFja2V0IGZvciBlYWNoIHBhY2tldCBzZW50IGJ5IHRoZQ0KICAgY2xp ZW50KSwgdGhvdWdoIHRoZXJlIGlzIGEgc21hbGwgaW5jcmVhc2UgaW4gdGhlIGFtb3VudCBvZiBk YXRhLA0KICAgc2luY2UgU1RVTiByZXNwb25zZXMgYXJlIHR5cGljYWxseSBsYXJnZXIgdGhhbiBy ZXF1ZXN0cy4gIFRoaXMgYXR0YWNrDQogICBpcyBtaXRpZ2F0ZWQgYnkgaW5ncmVzcyBzb3VyY2Ug YWRkcmVzcyBmaWx0ZXJpbmcuDQoNCg0KDQoNCg0KUGV0aXQtSHVndWVuaW4sIGV0IGFsLiBFeHBp cmVzIFNlcHRlbWJlciAyMiwgMjAxOSAgICAgICAgICAgICAgW1BhZ2UgNDhdDQoMDQpJbnRlcm5l dC1EcmFmdCBTZXNzaW9uIFRyYXZlcnNhbCBVdGlsaXRpZXMgZm9yIE5BVCAoU1RVTikgICAgIE1h cmNoIDIwMTkNCg0KDQogICBSZXZlYWxpbmcgdGhlIHNwZWNpZmljIHNvZnR3YXJlIHZlcnNpb24g b2YgdGhlIGFnZW50IHRocm91Z2ggdGhlDQogICBTT0ZUV0FSRSBhdHRyaWJ1dGUgbWlnaHQgYWxs b3cgdGhlbSB0byBiZWNvbWUgbW9yZSB2dWxuZXJhYmxlIHRvDQogICBhdHRhY2tzIGFnYWluc3Qg c29mdHdhcmUgdGhhdCBpcyBrbm93biB0byBjb250YWluIHNlY3VyaXR5IGhvbGVzLg0KICAgSW1w bGVtZW50ZXJzIFNIT1VMRCBtYWtlIHVzYWdlIG9mIHRoZSBTT0ZUV0FSRSBhdHRyaWJ1dGUgYQ0K ICAgY29uZmlndXJhYmxlIG9wdGlvbi4NCg0KMTYuMS4zLiAgQmlkLURvd24gQXR0YWNrcw0KDQog ICBUaGlzIGRvY3VtZW50IGFkZHMgdGhlIHBvc3NpYmlsaXR5IG9mIHNlbGVjdGluZyBkaWZmZXJl bnQgYWxnb3JpdGhtcw0KICAgZm9yIHByb3RlY3RpbmcgdGhlIGNvbmZpZGVudGlhbGl0eSBvZiB0 aGUgcGFzc3dvcmRzIHN0b3JlZCBvbiB0aGUNCiAgIHNlcnZlciBzaWRlIHdoZW4gdXNpbmcgdGhl IExvbmctVGVybSBDcmVkZW50aWFsIE1lY2hhbmlzbSwgd2hpbGUNCiAgIHN0aWxsIGVuc3VyaW5n IGNvbXBhdGliaWxpdHkgd2l0aCBNRDUsIHdoaWNoIHdhcyB0aGUgYWxnb3JpdGhtIHVzZWQNCiAg IGluIGEgcHJldmlvdXMgdmVyc2lvbiBvZiB0aGlzIHByb3RvY29sLiAgSXQgd29ya3MgYnkgaGF2 aW5nIHRoZQ0KICAgc2VydmVyIHNlbmQgYmFjayB0byB0aGUgY2xpZW50IHRoZSBsaXN0IG9mIGFs Z29yaXRobXMgc3VwcG9ydGVkIGluIGENCiAgIFBBU1NXT1JELUFMR09SSVRITVMgYXR0cmlidXRl LCBhbmQgaGF2aW5nIHRoZSBjbGllbnQgc2VuZCBiYWNrIGENCiAgIFBBU1NXT1JELUFMR09SSVRI TSBhdHRyaWJ1dGUgY29udGFpbmluZyB0aGUgYWxnb3JpdGhtIHNlbGVjdGVkLg0KDQogICBCZWNh dXNlIHRoZSBQQVNTV09SRC1BTEdPUklUSE1TIGF0dHJpYnV0ZSBoYXMgdG8gYmUgc2VudCBpbiBh bg0KICAgdW5hdXRoZW50aWNhdGVkIHJlc3BvbnNlLCBhbiBvbi1wYXRoIGF0dGFja2VyIHdhbnRp bmcgdG8gZXhwbG9pdCBhbg0KICAgZXZlbnR1YWwgdnVsbmVyYWJpbGl0eSBpbiBNRDUgY2FuIGp1 c3Qgc3RyaXAgdGhlIFBBU1NXT1JELUFMR09SSVRITVMNCiAgIGF0dHJpYnV0ZSBmcm9tIHRoZSB1 bnByb3RlY3RlZCByZXNwb25zZSwgdGh1cyBtYWtpbmcgdGhlIHNlcnZlcg0KICAgc3Vic2VxdWVu dGx5IGFjdCBhcyBpZiB0aGUgY2xpZW50IHdhcyBpbXBsZW1lbnRpbmcgYSBwcmV2aW91cyB2ZXJz aW9uDQogICBvZiB0aGlzIHByb3RvY29sLg0KDQogICBUbyBwcm90ZWN0IGFnYWluc3QgdGhpcyBh dHRhY2sgYW5kIG90aGVyIHNpbWlsYXIgYmlkLWRvd24gYXR0YWNrcywNCiAgIHRoZSBub25jZSBp cyBlbnJpY2hlZCB3aXRoIGEgc2V0IG9mIHNlY3VyaXR5IGJpdHMgd2hpY2ggaW5kaWNhdGVzDQog ICB3aGljaCBzZWN1cml0eSBmZWF0dXJlcyBhcmUgaW4gdXNlLiAgSW4gdGhlIGNhc2Ugb2YgdGhl IHNlbGVjdGlvbiBvZg0KICAgdGhlIHBhc3N3b3JkIGFsZ29yaXRobSB0aGUgbWF0Y2hpbmcgYml0 IGlzIHNldCBpbiB0aGUgbm9uY2UgcmV0dXJuZWQNCiAgIGJ5IHRoZSBzZXJ2ZXIgaW4gdGhlIHNh bWUgcmVzcG9uc2UgdGhhdCBjb250YWlucyB0aGUgUEFTU1dPUkQtDQogICBBTEdPUklUSE1TIGF0 dHJpYnV0ZS4gIEJlY2F1c2UgdGhlIG5vbmNlIHVzZWQgaW4gc3Vic2VxdWVudA0KICAgYXV0aGVu dGljYXRlZCB0cmFuc2FjdGlvbnMgaXMgdmVyaWZpZWQgYnkgdGhlIHNlcnZlciB0byBiZSBpZGVu dGljYWwNCiAgIHRvIHdoYXQgd2FzIG9yaWdpbmFsbHkgc2VudCwgaXQgY2Fubm90IGJlIG1vZGlm aWVkIGJ5IGFuIG9uLXBhdGgNCiAgIGF0dGFja2VyLiAgQWRkaXRpb25hbGx5LCB0aGUgY2xpZW50 IGlzIG1hbmRhdGVkIHRvIGNvcHkgdGhlIHJlY2VpdmVkDQogICBQQVNTV09SRC1BTEdPUklUSE1T IGF0dHJpYnV0ZSBpbiB0aGUgbmV4dCBhdXRoZW50aWNhdGVkIHRyYW5zYWN0aW9uDQogICB0byB0 aGF0IHNlcnZlci4NCg0KICAgQW4gb24tcGF0aCBhdHRhY2sgdGhhdCByZW1vdmVzIHRoZSBQQVNT V09SRC1BTEdPUklUSE1TIHdpbGwgYmUNCiAgIGRldGVjdGVkIGJlY2F1c2UgdGhlIGNsaWVudCB3 aWxsIG5vdCBiZSBhYmxlIHRvIHNlbmQgaXQgYmFjayB0byB0aGUNCiAgIHNlcnZlciBpbiB0aGUg bmV4dCBhdXRoZW50aWNhdGVkIHRyYW5zYWN0aW9uLiAgVGhlIGNsaWVudCB3aWxsIGRldGVjdA0K ICAgdGhhdCBhdHRhY2sgYmVjYXVzZSB0aGUgc2VjdXJpdHkgYml0IGlzIHNldCwgYnV0IHRoZSBt YXRjaGluZw0KICAgYXR0cmlidXRlIGlzIG1pc3NpbmcsIGVuZGluZyB0aGUgc2Vzc2lvbi4gIEEg Y2xpZW50IHVzaW5nIGFuIG9sZGVyDQogICB2ZXJzaW9uIG9mIHRoaXMgcHJvdG9jb2wgd2lsbCBu b3Qgc2VuZCB0aGUgUEFTU1dPUkQtQUxHT1JJVEhNUyBiYWNrDQogICBidXQgY2FuIG9ubHkgdXNl IE1ENSBhbnl3YXksIHNvIHRoZSBhdHRhY2sgaXMgaW5jb25zZXF1ZW50aWFsLg0KDQogICBUaGUg b24tcGF0aCBhdHRhY2sgbWF5IGFsc28gdHJ5IHRvIHJlbW92ZSB0aGUgc2VjdXJpdHkgYml0IHRv Z2V0aGVyDQogICB3aXRoIHRoZSBQQVNTV09SRC1BTEdPUklUSE1TIGF0dHJpYnV0ZSwgYnV0IHRo ZSBzZXJ2ZXIgd2lsbCBkaXNjb3Zlcg0KICAgdGhhdCB3aGVuIHRoZSBuZXh0IGF1dGhlbnRpY2F0 ZWQgdHJhbnNhY3Rpb24gY29udGFpbnMgYW4gaW52YWxpZA0KICAgbm9uY2UuDQoNCg0KDQpQZXRp dC1IdWd1ZW5pbiwgZXQgYWwuIEV4cGlyZXMgU2VwdGVtYmVyIDIyLCAyMDE5ICAgICAgICAgICAg ICBbUGFnZSA0OV0NCgwNCkludGVybmV0LURyYWZ0IFNlc3Npb24gVHJhdmVyc2FsIFV0aWxpdGll cyBmb3IgTkFUIChTVFVOKSAgICAgTWFyY2ggMjAxOQ0KDQoNCiAgIEFuIG9uLXBhdGggYXR0YWNr IHRoYXQgcmVtb3ZlcyBzb21lIGFsZ29yaXRobXMgZnJvbSB0aGUgUEFTU1dPUkQtDQogICBBTEdP UklUSE1TIGF0dHJpYnV0ZSB3aWxsIGJlIGVxdWFsbHkgZGVmZWF0ZWQgYmVjYXVzZSB0aGF0IGF0 dHJpYnV0ZQ0KICAgd2lsbCBiZSBkaWZmZXJlbnQgZnJvbSB0aGUgb3JpZ2luYWwgb25lIHdoZW4g dGhlIHNlcnZlciB2ZXJpZmllcyBpdA0KICAgaW4gdGhlIHN1YnNlcXVlbnQgYXV0aGVudGljYXRl ZCB0cmFuc2FjdGlvbi4NCg0KICAgTm90ZSB0aGF0IHRoZSBiaWQtZG93biBwcm90ZWN0aW9uIG1l Y2hhbmlzbSBpbnRyb2R1Y2VkIGluIHRoaXMNCiAgIGRvY3VtZW50IGlzIGluaGVyZW50bHkgbGlt aXRlZCBieSB0aGUgZmFjdCB0aGF0IGl0IGlzIG5vdCBwb3NzaWJsZSB0bw0KICAgZGV0ZWN0IGFu IGF0dGFjayB1bnRpbCB0aGUgc2VydmVyIHJlY2VpdmVzIHRoZSBzZWNvbmQgcmVxdWVzdCBhZnRl cg0KICAgdGhlIDQwMSByZXNwb25zZS4NCg0KICAgU0hBLTI1NiB3YXMgY2hvc2VuIGFzIHRoZSBu ZXcgZGVmYXVsdCBmb3IgcGFzc3dvcmQgaGFzaGluZyBmb3IgaXRzDQogICBjb21wYXRpYmlsaXR5 IHdpdGggW1JGQzc2MTZdIGJ1dCBiZWNhdXNlIFNIQS0yNTYgKGxpa2UgTUQ1KSBpcyBhDQogICBj b21wYXJhdGl2ZWx5IGZhc3QgYWxnb3JpdGhtLCBpdCBkb2VzIGxpdHRsZSB0byBkZXRlciBicnV0 ZSBmb3JjZQ0KICAgYXR0YWNrcy4gIFNwZWNpZmljYWxseSwgdGhpcyBtZWFucyB0aGF0IGlmIHRo ZSB1c2VyIGhhcyBhIHdlYWsNCiAgIHBhc3N3b3JkOg0KDQogICBvICBBbiBhdHRhY2tlciB3aG8g Y2FwdHVyZXMgdGhlIHNlcnZlcidzIHBhc3N3b3JkIGZpbGUgY2FuIG9mdGVuDQogICAgICBkZXRl cm1pbmUgdGhlIHVzZXIncyBwYXNzd29yZCBhbmQgdGh1cyBpbXBlcnNvbmF0ZSB0aGUgdXNlciB0 bw0KICAgICAgb3RoZXIgc2VydmVycyB3aGVyZSB0aGV5IGhhdmUgdXNlZCB0aGF0IHBhc3N3b3Jk LiAgTm90ZSB0aGF0IHN1Y2gNCiAgICAgIGFuIGF0dGFja2VyIGNhbiBpbXBlcnNvbmF0ZSB0aGUg dXNlciB0byB0aGUgc2VydmVyIGl0c2VsZiB3aXRob3V0DQogICAgICBhbnkgYnJ1dGUgZm9yY2Ug YXR0YWNrLg0KDQogICBvICBBbiBhdHRhY2tlciB3aG8gY2FwdHVyZXMgYSBzaW5nbGUgZXhjaGFu Z2UgY2FuIGJydXRlIGZvcmNlIHRoZQ0KICAgICAgdXNlcidzIHBhc3N3b3JkIGFuZCB0aHVzIHBv dGVudGlhbGx5IGltcGVyc29uYXRlIHRoZSB1c2VyIHRvIHRoZQ0KICAgICAgc2VydmVyIGFuZCBv dGhlciBzZXJ2ZXJzIHdoZXJlIHRoZXkgaGF2ZSB1c2VkIHRoZSBzYW1lIHBhc3N3b3JkLg0KDQog ICBBIHN0cm9uZ2VyICh3aGljaCBpcyB0byBzYXkgc2xvd2VyKSBhbGdvcml0aG0sIGxpa2UgQXJn b24yDQogICBbSS1ELmlydGYtY2ZyZy1hcmdvbjJdLCB3b3VsZCBoZWxwIGJvdGggb2YgdGhlc2Ug Y2FzZXMsIGJ1dCBpbiB0aGUNCiAgIGNhc2Ugb2YgdGhlIGZpcnN0IGF0dGFjaywgb25seSBhZnRl ciB1bnRpbCB0aGUgZGF0YWJhc2UgZW50cnkgZm9yDQogICB0aGlzIHVzZXIgaXMgdXBkYXRlZCB0 byBleGNsdXNpdmVseSB1c2UgdGhhdCBzdHJvbmdlciBtZWNoYW5pc20uDQoNCiAgIFRoZSBiaWQt ZG93biBkZWZlbnNlcyBpbiB0aGlzIHByb3RvY29sIHByZXZlbnQgYW4gYXR0YWNrZXIgZnJvbQ0K ICAgZm9yY2luZyB0aGUgY2xpZW50IGFuZCBzZXJ2ZXIgdG8gY29tcGxldGUgYSBoYW5kc2hha2Ug dXNpbmcgd2Vha2VyDQogICBhbGdvcml0aG1zIHRoYW4gdGhleSBqb2ludGx5IHN1cHBvcnQsIGJ1 dCBvbmx5IGlmIHRoZSB3ZWFrZXN0IGpvaW50DQogICBhbGdvcml0aG0gaXMgc3Ryb25nIGVub3Vn aCB0aGF0IGl0IGNhbm5vdCBiZSBicnV0ZS1mb3JjZWQuICBIb3dldmVyLA0KICAgdGhpcyBkb2Vz IG5vdCBkZWZlbmQgYWdhaW5zdCBtYW55IGF0dGFja3Mgb24gdGhvc2UgYWxnb3JpdGhtczsNCiAg IHNwZWNpZmljYWxseSwgYW4gb24tcGF0aCBhdHRhY2tlciBtaWdodCBwZXJmb3JtIGEgYmlkLWRv d24gYXR0YWNrIG9uDQogICBhIGNsaWVudCB3aGljaCBzdXBwb3J0ZWQgYm90aCBBcmdvbjIgW0kt RC5pcnRmLWNmcmctYXJnb24yXSBhbmQNCiAgIFNIQS0yNTYgZm9yIHBhc3N3b3JkIGhhc2hpbmcg YW5kIHVzZSB0aGF0IHRvIGNvbGxlY3QgYSBNRVNTQUdFLQ0KICAgSU5URUdSSVRZLVNIQTI1NiB2 YWx1ZSB3aGljaCBpdCB1c2VzIGZvciBhbiBvZmZsaW5lIGJydXRlLWZvcmNlDQogICBhdHRhY2su ICBUaGlzIHdvdWxkIGJlIGRldGVjdGVkIHdoZW4gdGhlIHNlcnZlciByZWNlaXZlcyB0aGUgc2Vj b25kDQogICByZXF1ZXN0LCBidXQgdGhhdCBkb2VzIG5vdCBwcmV2ZW50IHRoZSBhdHRhY2tlciBm cm9tIG9idGFpbmluZyB0aGUNCiAgIE1FU1NBR0UtSU5URUdSSVRZLVNIQTI1NiB2YWx1ZS4NCg0K ICAgU2ltaWxhcmx5LCBhbiBhdHRhY2sgYWdhaW5zdCB0aGUgVVNFUkhBU0ggbWVjaGFuaXNtIHdp bGwgbm90IHN1Y2NlZWQNCiAgIGluIGVzdGFibGlzaGluZyBhIHNlc3Npb24gYXMgdGhlIHNlcnZl ciB3aWxsIGRldGVjdCB0aGF0IHRoZSBmZWF0dXJlDQogICB3YXMgZGlzY2FyZGVkIG9uLXBhdGgs IGJ1dCB0aGUgY2xpZW50IHdvdWxkIHN0aWxsIGhhdmUgYmVlbiBjb252aW5jZWQNCg0KDQoNCg0K UGV0aXQtSHVndWVuaW4sIGV0IGFsLiBFeHBpcmVzIFNlcHRlbWJlciAyMiwgMjAxOSAgICAgICAg ICAgICAgW1BhZ2UgNTBdDQoMDQpJbnRlcm5ldC1EcmFmdCBTZXNzaW9uIFRyYXZlcnNhbCBVdGls aXRpZXMgZm9yIE5BVCAoU1RVTikgICAgIE1hcmNoIDIwMTkNCg0KDQogICB0byBzZW5kIGl0cyB1 c2VybmFtZSBpbiBjbGVhciBpbiB0aGUgVVNFUk5BTUUgYXR0cmlidXRlLCB0aHVzDQogICBkaXNj bG9zaW5nIGl0IHRvIHRoZSBhdHRhY2tlci4NCg0KICAgRmluYWxseSwgd2hlbiB0aGUgYmlkLWRv d24gcHJvdGVjdGlvbiBtZWNoYW5pc20gaXMgZW1wbG95ZWQgZm9yIGENCiAgIGZ1dHVyZSB1cGdy YWRlIG9mIHRoZSBITUFDIGFsZ29yaXRobSB1c2VkIHRvIHByb3RlY3QgbWVzc2FnZSwgaXQgd2ls bA0KICAgb2ZmZXIgb25seSBhIGxpbWl0ZWQgcHJvdGVjdGlvbiBpZiB0aGUgY3VycmVudCBITUFD IGFsZ29yaXRobSBpcw0KICAgYWxyZWFkeSBjb21wcm9taXNlZC4NCg0KMTYuMi4gIEF0dGFja3Mg QWZmZWN0aW5nIHRoZSBVc2FnZQ0KDQogICBUaGlzIHNlY3Rpb24gbGlzdHMgYXR0YWNrcyB0aGF0 IG1pZ2h0IGJlIGxhdW5jaGVkIGFnYWluc3QgYSB1c2FnZSBvZg0KICAgU1RVTi4gIEVhY2ggU1RV TiB1c2FnZSBtdXN0IGNvbnNpZGVyIHdoZXRoZXIgdGhlc2UgYXR0YWNrcyBhcmUNCiAgIGFwcGxp Y2FibGUgdG8gaXQsIGFuZCBpZiBzbywgZGlzY3VzcyBjb3VudGVyLW1lYXN1cmVzLg0KDQogICBN b3N0IG9mIHRoZSBhdHRhY2tzIGluIHRoaXMgc2VjdGlvbiByZXZvbHZlIGFyb3VuZCBhbiBhdHRh Y2tlcg0KICAgbW9kaWZ5aW5nIHRoZSByZWZsZXhpdmUgYWRkcmVzcyBsZWFybmVkIGJ5IGEgU1RV TiBjbGllbnQgdGhyb3VnaCBhDQogICBCaW5kaW5nIHJlcXVlc3QvcmVzcG9uc2UgdHJhbnNhY3Rp b24uICBTaW5jZSB0aGUgdXNhZ2Ugb2YgdGhlDQogICByZWZsZXhpdmUgYWRkcmVzcyBpcyBhIGZ1 bmN0aW9uIG9mIHRoZSB1c2FnZSwgdGhlIGFwcGxpY2FiaWxpdHkgYW5kDQogICByZW1lZGlhdGlv biBvZiB0aGVzZSBhdHRhY2tzIGFyZSB1c2FnZS1zcGVjaWZpYy4gIEluIGNvbW1vbg0KICAgc2l0 dWF0aW9ucywgbW9kaWZpY2F0aW9uIG9mIHRoZSByZWZsZXhpdmUgYWRkcmVzcyBieSBhbiBvbi1w YXRoDQogICBhdHRhY2tlciBpcyBlYXN5IHRvIGRvLiAgQ29uc2lkZXIsIGZvciBleGFtcGxlLCB0 aGUgY29tbW9uIHNpdHVhdGlvbg0KICAgd2hlcmUgU1RVTiBpcyBydW4gZGlyZWN0bHkgb3ZlciBV RFAuICBJbiB0aGlzIGNhc2UsIGFuIG9uLXBhdGgNCiAgIGF0dGFja2VyIGNhbiBtb2RpZnkgdGhl IHNvdXJjZSBJUCBhZGRyZXNzIG9mIHRoZSBCaW5kaW5nIHJlcXVlc3QNCiAgIGJlZm9yZSBpdCBh cnJpdmVzIGF0IHRoZSBTVFVOIHNlcnZlci4gIFRoZSBTVFVOIHNlcnZlciB3aWxsIHRoZW4NCiAg IHJldHVybiB0aGlzIElQIGFkZHJlc3MgaW4gdGhlIFhPUi1NQVBQRUQtQUREUkVTUyBhdHRyaWJ1 dGUgdG8gdGhlDQogICBjbGllbnQsIGFuZCBzZW5kIHRoZSByZXNwb25zZSBiYWNrIHRvIHRoYXQg KGZhbHNpZmllZCkgSVAgYWRkcmVzcyBhbmQNCiAgIHBvcnQuICBJZiB0aGUgYXR0YWNrZXIgY2Fu IGFsc28gaW50ZXJjZXB0IHRoaXMgcmVzcG9uc2UsIGl0IGNhbg0KICAgZGlyZWN0IGl0IGJhY2sg dG93YXJkcyB0aGUgY2xpZW50LiAgUHJvdGVjdGluZyBhZ2FpbnN0IHRoaXMgYXR0YWNrIGJ5DQog ICB1c2luZyBhIG1lc3NhZ2UtaW50ZWdyaXR5IGNoZWNrIGlzIGltcG9zc2libGUsIHNpbmNlIGEg bWVzc2FnZS0NCiAgIGludGVncml0eSB2YWx1ZSBjYW5ub3QgY292ZXIgdGhlIHNvdXJjZSBJUCBh ZGRyZXNzLCBzaW5jZSB0aGUNCiAgIGludGVydmVuaW5nIE5BVCBtdXN0IGJlIGFibGUgdG8gbW9k aWZ5IHRoaXMgdmFsdWUuICBJbnN0ZWFkLCBvbmUNCiAgIHNvbHV0aW9uIHRvIHByZXZlbnRpbmcg dGhlIGF0dGFja3MgbGlzdGVkIGJlbG93IGlzIGZvciB0aGUgY2xpZW50IHRvDQogICB2ZXJpZnkg dGhlIHJlZmxleGl2ZSBhZGRyZXNzIGxlYXJuZWQsIGFzIGlzIGRvbmUgaW4gSUNFIFtSRkM4NDQ1 XS4NCg0KICAgT3RoZXIgdXNhZ2VzIG1heSB1c2Ugb3RoZXIgbWVhbnMgdG8gcHJldmVudCB0aGVz ZSBhdHRhY2tzLg0KDQoxNi4yLjEuICBBdHRhY2sgSTogRGlzdHJpYnV0ZWQgRG9TIChERG9TKSBh Z2FpbnN0IGEgVGFyZ2V0DQoNCiAgIEluIHRoaXMgYXR0YWNrLCB0aGUgYXR0YWNrZXIgcHJvdmlk ZXMgb25lIG9yIG1vcmUgY2xpZW50cyB3aXRoIHRoZQ0KICAgc2FtZSBmYWtlZCByZWZsZXhpdmUg YWRkcmVzcyB0aGF0IHBvaW50cyB0byB0aGUgaW50ZW5kZWQgdGFyZ2V0Lg0KICAgVGhpcyB3aWxs IHRyaWNrIHRoZSBTVFVOIGNsaWVudHMgaW50byB0aGlua2luZyB0aGF0IHRoZWlyIHJlZmxleGl2 ZQ0KICAgYWRkcmVzc2VzIGFyZSBlcXVhbCB0byB0aGF0IG9mIHRoZSB0YXJnZXQuICBJZiB0aGUg Y2xpZW50cyBoYW5kIG91dA0KICAgdGhhdCByZWZsZXhpdmUgYWRkcmVzcyBpbiBvcmRlciB0byBy ZWNlaXZlIHRyYWZmaWMgb24gaXQgKGZvcg0KICAgZXhhbXBsZSwgaW4gU0lQIG1lc3NhZ2VzKSwg dGhlIHRyYWZmaWMgd2lsbCBpbnN0ZWFkIGJlIHNlbnQgdG8gdGhlDQogICB0YXJnZXQuICBUaGlz IGF0dGFjayBjYW4gcHJvdmlkZSBzdWJzdGFudGlhbCBhbXBsaWZpY2F0aW9uLA0KICAgZXNwZWNp YWxseSB3aGVuIHVzZWQgd2l0aCBjbGllbnRzIHRoYXQgYXJlIHVzaW5nIFNUVU4gdG8gZW5hYmxl DQogICBtdWx0aW1lZGlhIGFwcGxpY2F0aW9ucy4gIEhvd2V2ZXIsIGl0IGNhbiBvbmx5IGJlIGxh dW5jaGVkIGFnYWluc3QNCg0KDQoNCg0KUGV0aXQtSHVndWVuaW4sIGV0IGFsLiBFeHBpcmVzIFNl cHRlbWJlciAyMiwgMjAxOSAgICAgICAgICAgICAgW1BhZ2UgNTFdDQoMDQpJbnRlcm5ldC1EcmFm dCBTZXNzaW9uIFRyYXZlcnNhbCBVdGlsaXRpZXMgZm9yIE5BVCAoU1RVTikgICAgIE1hcmNoIDIw MTkNCg0KDQogICB0YXJnZXRzIGZvciB3aGljaCBwYWNrZXRzIGZyb20gdGhlIFNUVU4gc2VydmVy IHRvIHRoZSB0YXJnZXQgcGFzcw0KICAgdGhyb3VnaCB0aGUgYXR0YWNrZXIsIGxpbWl0aW5nIHRo ZSBjYXNlcyBpbiB3aGljaCBpdCBpcyBwb3NzaWJsZS4NCg0KMTYuMi4yLiAgQXR0YWNrIElJOiBT aWxlbmNpbmcgYSBDbGllbnQNCg0KICAgSW4gdGhpcyBhdHRhY2ssIHRoZSBhdHRhY2tlciBwcm92 aWRlcyBhIFNUVU4gY2xpZW50IHdpdGggYSBmYWtlZA0KICAgcmVmbGV4aXZlIGFkZHJlc3MuICBU aGUgcmVmbGV4aXZlIGFkZHJlc3MgaXQgcHJvdmlkZXMgaXMgYSB0cmFuc3BvcnQNCiAgIGFkZHJl c3MgdGhhdCByb3V0ZXMgdG8gbm93aGVyZS4gIEFzIGEgcmVzdWx0LCB0aGUgY2xpZW50IHdvbid0 DQogICByZWNlaXZlIGFueSBvZiB0aGUgcGFja2V0cyBpdCBleHBlY3RzIHRvIHJlY2VpdmUgd2hl biBpdCBoYW5kcyBvdXQNCiAgIHRoZSByZWZsZXhpdmUgYWRkcmVzcy4gIFRoaXMgZXhwbG9pdGF0 aW9uIGlzIG5vdCB2ZXJ5IGludGVyZXN0aW5nIGZvcg0KICAgdGhlIGF0dGFja2VyLiAgSXQgaW1w YWN0cyBhIHNpbmdsZSBjbGllbnQsIHdoaWNoIGlzIGZyZXF1ZW50bHkgbm90DQogICB0aGUgZGVz aXJlZCB0YXJnZXQuICBNb3Jlb3ZlciwgYW55IGF0dGFja2VyIHRoYXQgY2FuIG1vdW50IHRoZSBh dHRhY2sNCiAgIGNvdWxkIGFsc28gZGVueSBzZXJ2aWNlIHRvIHRoZSBjbGllbnQgYnkgb3RoZXIg bWVhbnMsIHN1Y2ggYXMNCiAgIHByZXZlbnRpbmcgdGhlIGNsaWVudCBmcm9tIHJlY2VpdmluZyBh bnkgcmVzcG9uc2UgZnJvbSB0aGUgU1RVTg0KICAgc2VydmVyLCBvciBldmVuIGEgREhDUCBzZXJ2 ZXIuICBBcyB3aXRoIHRoZSBhdHRhY2sgaW4gU2VjdGlvbiAxNi4yLjEsDQogICB0aGlzIGF0dGFj ayBpcyBvbmx5IHBvc3NpYmxlIHdoZW4gdGhlIGF0dGFja2VyIGlzIG9uIHBhdGggZm9yIHBhY2tl dHMNCiAgIHNlbnQgZnJvbSB0aGUgU1RVTiBzZXJ2ZXIgdG93YXJkcyB0aGlzIHVudXNlZCBJUCBh ZGRyZXNzLg0KDQoxNi4yLjMuICBBdHRhY2sgSUlJOiBBc3N1bWluZyB0aGUgSWRlbnRpdHkgb2Yg YSBDbGllbnQNCg0KICAgVGhpcyBhdHRhY2sgaXMgc2ltaWxhciB0byBhdHRhY2sgSUkuICBIb3dl dmVyLCB0aGUgZmFrZWQgcmVmbGV4aXZlDQogICBhZGRyZXNzIHBvaW50cyB0byB0aGUgYXR0YWNr ZXIgaXRzZWxmLiAgVGhpcyBhbGxvd3MgdGhlIGF0dGFja2VyIHRvDQogICByZWNlaXZlIHRyYWZm aWMgdGhhdCB3YXMgZGVzdGluZWQgZm9yIHRoZSBjbGllbnQuDQoNCjE2LjIuNC4gIEF0dGFjayBJ VjogRWF2ZXNkcm9wcGluZw0KDQogICBJbiB0aGlzIGF0dGFjaywgdGhlIGF0dGFja2VyIGZvcmNl cyB0aGUgY2xpZW50IHRvIHVzZSBhIHJlZmxleGl2ZQ0KICAgYWRkcmVzcyB0aGF0IHJvdXRlcyB0 byBpdHNlbGYuICBJdCB0aGVuIGZvcndhcmRzIGFueSBwYWNrZXRzIGl0DQogICByZWNlaXZlcyB0 byB0aGUgY2xpZW50LiAgVGhpcyBhdHRhY2sgd291bGQgYWxsb3cgdGhlIGF0dGFja2VyIHRvDQog ICBvYnNlcnZlIGFsbCBwYWNrZXRzIHNlbnQgdG8gdGhlIGNsaWVudC4gIEhvd2V2ZXIsIGluIG9y ZGVyIHRvIGxhdW5jaA0KICAgdGhlIGF0dGFjaywgdGhlIGF0dGFja2VyIG11c3QgaGF2ZSBhbHJl YWR5IGJlZW4gYWJsZSB0byBvYnNlcnZlDQogICBwYWNrZXRzIGZyb20gdGhlIGNsaWVudCB0byB0 aGUgU1RVTiBzZXJ2ZXIuICBJbiBtb3N0IGNhc2VzIChzdWNoIGFzDQogICB3aGVuIHRoZSBhdHRh Y2sgaXMgbGF1bmNoZWQgZnJvbSBhbiBhY2Nlc3MgbmV0d29yayksIHRoaXMgbWVhbnMgdGhhdA0K ICAgdGhlIGF0dGFja2VyIGNvdWxkIGFscmVhZHkgb2JzZXJ2ZSBwYWNrZXRzIHNlbnQgdG8gdGhl IGNsaWVudC4gIFRoaXMNCiAgIGF0dGFjayBpcywgYXMgYSByZXN1bHQsIG9ubHkgdXNlZnVsIGZv ciBvYnNlcnZpbmcgdHJhZmZpYyBieQ0KICAgYXR0YWNrZXJzIG9uIHRoZSBwYXRoIGZyb20gdGhl IGNsaWVudCB0byB0aGUgU1RVTiBzZXJ2ZXIsIGJ1dCBub3QNCiAgIGdlbmVyYWxseSBvbiB0aGUg cGF0aCBvZiBwYWNrZXRzIGJlaW5nIHJvdXRlZCB0b3dhcmRzIHRoZSBjbGllbnQuDQoNCiAgIE5v dGUgdGhhdCB0aGlzIGF0dGFjayBjYW4gYmUgdHJpdmlhbGx5IGxhdW5jaGVkIGJ5IHRoZSBTVFVO IHNlcnZlcg0KICAgaXRzZWxmLCBzbyB1c2VycyBvZiBTVFVOIHNlcnZlcnMgc2hvdWxkIGhhdmUg dGhlIHNhbWUgbGV2ZWwgb2YgdHJ1c3QNCiAgIGluIHRoZW0gYXMgYW55IG90aGVyIG5vZGUgdGhh dCBjYW4gaW5zZXJ0IHRoZW1zZWx2ZXMgaW50byB0aGUNCiAgIGNvbW11bmljYXRpb24gZmxvdy4N Cg0KMTYuMy4gIEhhc2ggQWdpbGl0eSBQbGFuDQoNCiAgIFRoaXMgc3BlY2lmaWNhdGlvbiB1c2Vz IGJvdGggSE1BQy1TSEEyNTYgZm9yIGNvbXB1dGF0aW9uIG9mIHRoZQ0KICAgbWVzc2FnZSBpbnRl Z3JpdHksIHNvbWV0aW1lcyBpbiBjb21iaW5hdGlvbiB3aXRoIEhNQUMtU0hBMS4gIElmLCBhdCBh DQoNCg0KDQoNClBldGl0LUh1Z3VlbmluLCBldCBhbC4gRXhwaXJlcyBTZXB0ZW1iZXIgMjIsIDIw MTkgICAgICAgICAgICAgIFtQYWdlIDUyXQ0KDA0KSW50ZXJuZXQtRHJhZnQgU2Vzc2lvbiBUcmF2 ZXJzYWwgVXRpbGl0aWVzIGZvciBOQVQgKFNUVU4pICAgICBNYXJjaCAyMDE5DQoNCg0KICAgbGF0 ZXIgdGltZSwgSE1BQy1TSEEyNTYgaXMgZm91bmQgdG8gYmUgY29tcHJvbWlzZWQsIHRoZSBmb2xs b3dpbmcgaXMNCiAgIHRoZSByZW1lZHkgdGhhdCB3aWxsIGJlIGFwcGxpZWQ6DQoNCiAgIG8gIEJv dGggYSBuZXcgbWVzc2FnZS1pbnRlZ3JpdHkgYXR0cmlidXRlIGFuZCBhIG5ldyBTVFVOIFNlY3Vy aXR5DQogICAgICBGZWF0dXJlIGJpdCB3aWxsIGJlIGFsbG9jYXRlZCBpbiBhIFN0YW5kYXJkIFRy YWNrIGRvY3VtZW50LiAgVGhlDQogICAgICBuZXcgbWVzc2FnZS1pbnRlZ3JpdHkgYXR0cmlidXRl IHdpbGwgaGF2ZSBpdHMgdmFsdWUgY29tcHV0ZWQgdXNpbmcNCiAgICAgIGEgbmV3IGhhc2guICBU aGUgU1RVTiBTZWN1cml0eSBGZWF0dXJlIGJpdCB3aWxsIGJlIHVzZWQgdG8NCiAgICAgIHNpbXVs dGFuZW91c2x5IHNpZ25hbCB0byBhIFNUVU4gY2xpZW50IHVzaW5nIHRoZSBMb25nIFRlcm0NCiAg ICAgIENyZWRlbnRpYWwgTWVjaGFuaXNtIHRoYXQgdGhpcyBzZXJ2ZXIgc3VwcG9ydHMgdGhpcyBu ZXcgaGFzaA0KICAgICAgYWxnb3JpdGhtLCBhbmQgd2lsbCBwcmV2ZW50IGJpZC1kb3duIGF0dGFj a3Mgb24gdGhlIG5ldyBtZXNzYWdlLQ0KICAgICAgaW50ZWdyaXR5IGF0dHJpYnV0ZS4NCg0KICAg byAgU1RVTiBDbGllbnRzIGFuZCBTZXJ2ZXJzIHVzaW5nIHRoZSBTaG9ydCBUZXJtIENyZWRlbnRp YWwgTWVjaGFuaXNtDQogICAgICB3aWxsIG5lZWQgdG8gdXBkYXRlIHRoZSBleHRlcm5hbCBtZWNo YW5pc20gdGhhdCB0aGV5IHVzZSB0byBzaWduYWwNCiAgICAgIHdoYXQgbWVzc2FnZS1pbnRlZ3Jp dHkgYXR0cmlidXRlcyBhcmUgaW4gdXNlLg0KDQogICBUaGUgYmlkLWRvd24gcHJvdGVjdGlvbiBt ZWNoYW5pc20gZGVzY3JpYmVkIGluIHRoaXMgZG9jdW1lbnQgaXMgbmV3LA0KICAgYW5kIHRodXMg Y2Fubm90IGN1cnJlbnRseSBwcm90ZWN0IGFnYWluc3QgYSBiaWQtZG93biBhdHRhY2sgdGhhdA0K ICAgbG93ZXJzIHRoZSBzdHJlbmd0aCBvZiB0aGUgaGFzaCBhbGdvcml0aG0gdG8gSE1BQy1TSEEx LiAgVGhpcyBpcyB3aHksDQogICBhZnRlciBhIHRyYW5zaXRpb24gcGVyaW9kLCBhIG5ldyBkb2N1 bWVudCB1cGRhdGluZyB0aGlzIGRvY3VtZW50IHdpbGwNCiAgIGFzc2lnbiBhIG5ldyBTVFVOIFNl Y3VyaXR5IEZlYXR1cmUgYml0IGZvciBkZXByZWNhdGluZyBITUFDLVNIQTEuDQogICBXaGVuIHVz ZWQsIHRoaXMgYml0IHdpbGwgc2lnbmFsIHRoYXQgSE1BQy1TSEExIGlzIGRlcHJlY2F0ZWQgYW5k DQogICBzaG91bGQgbm8gbG9uZ2VyIGJlIHVzZWQuDQoNCiAgIFNpbWlsYXJseSwgaWYgU0hBMjU2 IGlzIGZvdW5kIHRvIGJlIGNvbXByb21pc2VkLCBhIG5ldyB1c2VyLWhhc2gNCiAgIGF0dHJpYnV0 ZSBhbmQgYSBuZXcgU1RVTiBTZWN1cml0eSBGZWF0dXJlIGJpdCB3aWxsIGJlIGFsbG9jYXRlZCBp biBhDQogICBTdGFuZGFyZHMgVHJhY2sgZG9jdW1lbnQuICBUaGUgbmV3IHVzZXItaGFzaCBhdHRy aWJ1dGUgd2lsbCBoYXZlIGl0cw0KICAgdmFsdWUgY29tcHV0ZWQgdXNpbmcgYSBuZXcgaGFzaC4g IFRoZSBTVFVOIFNlY3VyaXR5IEZlYXR1cmUgYml0IHdpbGwNCiAgIGJlIHVzZWQgdG8gc2ltdWx0 YW5lb3VzbHkgc2lnbmFsIHRvIGEgU1RVTiBjbGllbnQgdXNpbmcgdGhlIExvbmcgVGVybQ0KICAg Q3JlZGVudGlhbCBNZWNoYW5pc20gdGhhdCB0aGlzIHNlcnZlciBzdXBwb3J0cyB0aGlzIG5ldyBo YXNoDQogICBhbGdvcml0aG0gZm9yIHRoZSB1c2VyLWhhc2ggYXR0cmlidXRlLCBhbmQgd2lsbCBw cmV2ZW50IGJpZC1kb3duDQogICBhdHRhY2tzIG9uIHRoZSBuZXcgdXNlci1oYXNoIGF0dHJpYnV0 ZS4NCg0KMTcuICBJQUIgQ29uc2lkZXJhdGlvbnMNCg0KICAgVGhlIElBQiBoYXMgc3R1ZGllZCB0 aGUgcHJvYmxlbSBvZiBVbmlsYXRlcmFsIFNlbGYtQWRkcmVzcyBGaXhpbmcNCiAgIChVTlNBRiks IHdoaWNoIGlzIHRoZSBnZW5lcmFsIHByb2Nlc3MgYnkgd2hpY2ggYSBjbGllbnQgYXR0ZW1wdHMg dG8NCiAgIGRldGVybWluZSBpdHMgYWRkcmVzcyBpbiBhbm90aGVyIHJlYWxtIG9uIHRoZSBvdGhl ciBzaWRlIG9mIGEgTkFUDQogICB0aHJvdWdoIGEgY29sbGFib3JhdGl2ZSBwcm90b2NvbCByZWZs ZWN0aW9uIG1lY2hhbmlzbSAoW1JGQzM0MjRdKS4NCiAgIFNUVU4gY2FuIGJlIHVzZWQgdG8gcGVy Zm9ybSB0aGlzIGZ1bmN0aW9uIHVzaW5nIGEgQmluZGluZyByZXF1ZXN0Lw0KICAgcmVzcG9uc2Ug dHJhbnNhY3Rpb24gaWYgb25lIGFnZW50IGlzIGJlaGluZCBhIE5BVCBhbmQgdGhlIG90aGVyIGlz IG9uDQogICB0aGUgcHVibGljIHNpZGUgb2YgdGhlIE5BVC4NCg0KICAgVGhlIElBQiBoYXMgc3Vn Z2VzdGVkIHRoYXQgcHJvdG9jb2xzIGRldmVsb3BlZCBmb3IgdGhpcyBwdXJwb3NlDQogICBkb2N1 bWVudCBhIHNwZWNpZmljIHNldCBvZiBjb25zaWRlcmF0aW9ucy4gIEJlY2F1c2Ugc29tZSBTVFVO IHVzYWdlcw0KICAgcHJvdmlkZSBVTlNBRiBmdW5jdGlvbnMgKHN1Y2ggYXMgSUNFIFtSRkM4NDQ1 XSApLCBhbmQgb3RoZXJzIGRvIG5vdA0KICAgKHN1Y2ggYXMgU0lQIE91dGJvdW5kIFtSRkM1NjI2 XSksIGFuc3dlcnMgdG8gdGhlc2UgY29uc2lkZXJhdGlvbnMNCiAgIG5lZWQgdG8gYmUgYWRkcmVz c2VkIGJ5IHRoZSB1c2FnZXMgdGhlbXNlbHZlcy4NCg0KDQoNClBldGl0LUh1Z3VlbmluLCBldCBh bC4gRXhwaXJlcyBTZXB0ZW1iZXIgMjIsIDIwMTkgICAgICAgICAgICAgIFtQYWdlIDUzXQ0KDA0K SW50ZXJuZXQtRHJhZnQgU2Vzc2lvbiBUcmF2ZXJzYWwgVXRpbGl0aWVzIGZvciBOQVQgKFNUVU4p ICAgICBNYXJjaCAyMDE5DQoNCg0KMTguICBJQU5BIENvbnNpZGVyYXRpb25zDQoNCjE4LjEuICBT VFVOIFNlY3VyaXR5IEZlYXR1cmVzIFJlZ2lzdHJ5DQoNCiAgIEEgU1RVTiBTZWN1cml0eSBGZWF0 dXJlIHNldCBkZWZpbmVzIDI0IGJpdCBhcyBmbGFncy4NCg0KICAgSUFOQSBpcyByZXF1ZXN0ZWQg dG8gY3JlYXRlIGEgbmV3IHJlZ2lzdHJ5IGNvbnRhaW5pbmcgdGhlIFNUVU4NCiAgIFNlY3VyaXR5 IEZlYXR1cmVzIHRoYXQgYXJlIHByb3RlY3RlZCBieSB0aGUgYmlkLWRvd24gYXR0YWNrDQogICBw cmV2ZW50aW9uIG1lY2hhbmlzbSBkZXNjcmliZWQgaW4gc2VjdGlvbiBTZWN0aW9uIDkuMi4xLg0K DQogICBUaGUgaW5pdGlhbCBTVFVOIFNlY3VyaXR5IEZlYXR1cmVzIGFyZToNCg0KICAgQml0IDA6 IFBhc3N3b3JkIGFsZ29yaXRobXMNCiAgIEJpdCAxOiBVc2VybmFtZSBhbm9ueW1pdHkNCiAgIEJp dCAyLTIzOiBVbmFzc2lnbmVkDQoNCiAgIEJpdHMgYXJlIGFzc2lnbmVkIHN0YXJ0aW5nIGZyb20g dGhlIG1vc3Qgc2lnbmlmaWNhbnQgc2lkZSBvZiB0aGUgYml0DQogICBzZXQsIHNvIEJpdCAwIGlz IHRoZSBsZWZ0bW9zdCBiaXQgYW5kIEJpdCAyMyB0aGUgcmlnaHRtb3N0IGJpdC4NCg0KICAgTmV3 IFNlY3VyaXR5IEZlYXR1cmVzIGFyZSBhc3NpZ25lZCBieSBhIFN0YW5kYXJkcyBBY3Rpb24gW1JG QzgxMjZdLg0KDQoxOC4yLiAgU1RVTiBNZXRob2RzIFJlZ2lzdHJ5DQoNCiAgIElBTkEgaXMgcmVx dWVzdGVkIHRvIHVwZGF0ZSB0aGUgbmFtZSBmb3IgbWV0aG9kIDB4MDAyIGFuZCB0aGUNCiAgIHJl ZmVyZW5jZSBmcm9tIFJGQyA1Mzg5IHRvIFJGQy10by1iZSBmb3IgdGhlIGZvbGxvd2luZyBTVFVO IG1ldGhvZHM6DQoNCiAgIDB4MDAwOiAoUmVzZXJ2ZWQpDQogICAweDAwMTogQmluZGluZw0KICAg MHgwMDI6IChSZXNlcnZlZDsgcHJpb3IgdG8gW1JGQzUzODldIHRoaXMgd2FzIFNoYXJlZFNlY3Jl dCkNCg0KMTguMy4gIFNUVU4gQXR0cmlidXRlIFJlZ2lzdHJ5DQoNCjE4LjMuMS4gIFVwZGF0ZWQg QXR0cmlidXRlcw0KDQogICBJQU5BIGlzIHJlcXVlc3RlZCB0byB1cGRhdGUgdGhlIG5hbWVzIGZv ciBhdHRyaWJ1dGVzIDB4MDAwMiwgMHgwMDA0LA0KICAgMHgwMDA1LCAweDAwMDcsIGFuZCAweDAw MEIsIGFuZCB0aGUgcmVmZXJlbmNlIGZyb20gUkZDIDUzODkgdG8gUkZDLQ0KICAgdG8tYmUgZm9y IHRoZSBmb2xsb3dpbmcgU1RVTiBtZXRob2RzOg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoN ClBldGl0LUh1Z3VlbmluLCBldCBhbC4gRXhwaXJlcyBTZXB0ZW1iZXIgMjIsIDIwMTkgICAgICAg ICAgICAgIFtQYWdlIDU0XQ0KDA0KSW50ZXJuZXQtRHJhZnQgU2Vzc2lvbiBUcmF2ZXJzYWwgVXRp bGl0aWVzIGZvciBOQVQgKFNUVU4pICAgICBNYXJjaCAyMDE5DQoNCg0KICAgQ29tcHJlaGVuc2lv bi1yZXF1aXJlZCByYW5nZSAoMHgwMDAwLTB4N0ZGRik6DQogICAweDAwMDA6IChSZXNlcnZlZCkN CiAgIDB4MDAwMTogTUFQUEVELUFERFJFU1MNCiAgIDB4MDAwMjogKFJlc2VydmVkOyBwcmlvciB0 byBbUkZDNTM4OV0gdGhpcyB3YXMgUkVTUE9OU0UtQUREUkVTUykNCiAgIDB4MDAwNDogKFJlc2Vy dmVkOyBwcmlvciB0byBbUkZDNTM4OV0gdGhpcyB3YXMgU09VUkNFLUFERFJFU1MpDQogICAweDAw MDU6IChSZXNlcnZlZDsgcHJpb3IgdG8gW1JGQzUzODldIHRoaXMgd2FzIENIQU5HRUQtQUREUkVT UykNCiAgIDB4MDAwNjogVVNFUk5BTUUNCiAgIDB4MDAwNzogKFJlc2VydmVkOyBwcmlvciB0byBb UkZDNTM4OV0gdGhpcyB3YXMgUEFTU1dPUkQpDQogICAweDAwMDg6IE1FU1NBR0UtSU5URUdSSVRZ DQogICAweDAwMDk6IEVSUk9SLUNPREUNCiAgIDB4MDAwQTogVU5LTk9XTi1BVFRSSUJVVEVTDQog ICAweDAwMEI6IChSZXNlcnZlZDsgcHJpb3IgdG8gW1JGQzUzODldIHRoaXMgd2FzIFJFRkxFQ1RF RC1GUk9NKQ0KICAgMHgwMDE0OiBSRUFMTQ0KICAgMHgwMDE1OiBOT05DRQ0KICAgMHgwMDIwOiBY T1ItTUFQUEVELUFERFJFU1MNCg0KICAgQ29tcHJlaGVuc2lvbi1vcHRpb25hbCByYW5nZSAoMHg4 MDAwLTB4RkZGRikNCiAgIDB4ODAyMjogU09GVFdBUkUNCiAgIDB4ODAyMzogQUxURVJOQVRFLVNF UlZFUg0KICAgMHg4MDI4OiBGSU5HRVJQUklOVA0KDQoxOC4zLjIuICBOZXcgQXR0cmlidXRlcw0K DQogICBJQU5BIGlzIHJlcXVlc3RlZCB0byBhZGQgdGhlIGZvbGxvd2luZyBhdHRyaWJ1dGUgdG8g dGhlIFNUVU4NCiAgIEF0dHJpYnV0ZSBSZWdpc3RyeToNCg0KICAgQ29tcHJlaGVuc2lvbi1yZXF1 aXJlZCByYW5nZSAoMHgwMDAwLTB4N0ZGRik6DQogICAweFhYWFg6IE1FU1NBR0UtSU5URUdSSVRZ LVNIQTI1Ng0KICAgMHhYWFhYOiBQQVNTV09SRC1BTEdPUklUSE0NCiAgIDB4WFhYWDogVVNFUkhB U0gNCg0KICAgQ29tcHJlaGVuc2lvbi1vcHRpb25hbCByYW5nZSAoMHg4MDAwLTB4RkZGRikNCiAg IDB4WFhYWDogUEFTU1dPUkQtQUxHT1JJVEhNUw0KICAgMHhYWFhYOiBBTFRFUk5BVEUtRE9NQUlO DQoNCjE4LjQuICBTVFVOIEVycm9yIENvZGUgUmVnaXN0cnkNCg0KICAgSUFOQSBpcyByZXF1ZXN0 ZWQgdG8gdXBkYXRlIHRoZSByZWZlcmVuY2UgZnJvbSBSRkMgNTM4OSB0byBSRkMtdG8tYmUNCiAg IGZvciB0aGUgRXJyb3IgQ29kZXMgZ2l2ZW4gaW4gU2VjdGlvbiAxNC44Lg0KDQogICBJQU5BIGlz IHJlcXVlc3RlZCB0byBjaGFuZ2UgdGhlIG5hbWUgb2YgdGhlIDQwMSBFcnJvciBDb2RlIGZyb20N CiAgICJVbmF1dGhvcml6ZWQiIHRvICJVbmF1dGhlbnRpY2F0ZWQiLg0KDQoxOC41LiAgU1RVTiBQ YXNzd29yZCBBbGdvcml0aG0gUmVnaXN0cnkNCg0KICAgSUFOQSBpcyByZXF1ZXN0ZWQgdG8gY3Jl YXRlIGEgbmV3IHJlZ2lzdHJ5IGZvciBQYXNzd29yZCBBbGdvcml0aG0uDQoNCiAgIEEgUGFzc3dv cmQgQWxnb3JpdGhtIGlzIGEgaGV4IG51bWJlciBpbiB0aGUgcmFuZ2UgMHgwMDAwIC0gMHhGRkZG Lg0KDQoNCg0KUGV0aXQtSHVndWVuaW4sIGV0IGFsLiBFeHBpcmVzIFNlcHRlbWJlciAyMiwgMjAx OSAgICAgICAgICAgICAgW1BhZ2UgNTVdDQoMDQpJbnRlcm5ldC1EcmFmdCBTZXNzaW9uIFRyYXZl cnNhbCBVdGlsaXRpZXMgZm9yIE5BVCAoU1RVTikgICAgIE1hcmNoIDIwMTkNCg0KDQogICBUaGUg aW5pdGlhbCBQYXNzd29yZCBBbGdvcml0aG1zIGFyZToNCg0KICAgMHgwMDAwOiBSZXNlcnZlZA0K ICAgMHgwMDAxOiBNRDUNCiAgIDB4MDAwMjogU0hBLTI1Ng0KICAgMHgwMDAzLTB4RkZGRjogVW5h c3NpZ25lZA0KDQogICBQYXNzd29yZCBBbGdvcml0aG1zIGluIHRoZSBmaXJzdCBoYWxmIG9mIHRo ZSByYW5nZSAoMHgwMDAwIC0gMHg3RkZGKQ0KICAgYXJlIGFzc2lnbmVkIGJ5IElFVEYgUmV2aWV3 IFtSRkM4MTI2XS4gIFBhc3N3b3JkIEFsZ29yaXRobXMgaW4gdGhlDQogICBzZWNvbmQgaGFsZiBv ZiB0aGUgcmFuZ2UgKDB4ODAwMCAtIDB4RkZGRikgYXJlIGFzc2lnbmVkIGJ5IERlc2lnbmF0ZWQN CiAgIEV4cGVydCBbUkZDODEyNl0uDQoNCjE4LjUuMS4gIFBhc3N3b3JkIEFsZ29yaXRobXMNCg0K MTguNS4xLjEuICBNRDUNCg0KICAgVGhpcyBwYXNzd29yZCBhbGdvcml0aG0gaXMgdGFrZW4gZnJv bSBbUkZDMTMyMV0uDQoNCiAgIFRoZSBrZXkgbGVuZ3RoIGlzIDE2IGJ5dGVzIGFuZCB0aGUgcGFy YW1ldGVycyB2YWx1ZSBpcyBlbXB0eS4NCg0KICAgTm90ZTogIFRoaXMgYWxnb3JpdGhtIE1VU1Qg b25seSBiZSB1c2VkIGZvciBjb21wYXRpYmlsaXR5IHdpdGggbGVnYWN5DQogICAgICBzeXN0ZW1z Lg0KDQogICAgICAgICAgICAgICAga2V5ID0gTUQ1KHVzZXJuYW1lICI6IiBPcGFxdWVTdHJpbmco cmVhbG0pDQogICAgICAgICAgICAgICAgICAiOiIgT3BhcXVlU3RyaW5nKHBhc3N3b3JkKSkNCg0K MTguNS4xLjIuICBTSEEtMjU2DQoNCiAgIFRoaXMgcGFzc3dvcmQgYWxnb3JpdGhtIGlzIHRha2Vu IGZyb20gW1JGQzc2MTZdLg0KDQogICBUaGUga2V5IGxlbmd0aCBpcyAzMiBieXRlcyBhbmQgdGhl IHBhcmFtZXRlcnMgdmFsdWUgaXMgZW1wdHkuDQoNCiAgICAgICAgICAgICAga2V5ID0gU0hBLTI1 Nih1c2VybmFtZSAiOiIgT3BhcXVlU3RyaW5nKHJlYWxtKQ0KICAgICAgICAgICAgICAgICI6IiBP cGFxdWVTdHJpbmcocGFzc3dvcmQpKQ0KDQoxOC42LiAgU1RVTiBVRFAgYW5kIFRDUCBQb3J0IE51 bWJlcnMNCg0KICAgSUFOQSBpcyByZXF1ZXN0ZWQgdG8gdXBkYXRlIHRoZSByZWZlcmVuY2UgZnJv bSBSRkMgNTM4OSB0byBSRkMtdG8tYmUNCiAgIGZvciB0aGUgZm9sbG93aW5nIHBvcnRzIGluIHRo ZSBTZXJ2aWNlIE5hbWUgYW5kIFRyYW5zcG9ydCBQcm90b2NvbA0KICAgUG9ydCBOdW1iZXIgUmVn aXN0cnkuDQoNCiAgIHN0dW4gICAzNDc4L3RjcCAgIFNlc3Npb24gVHJhdmVyc2FsIFV0aWxpdGll cyBmb3IgTkFUIChTVFVOKSBwb3J0DQogICBzdHVuICAgMzQ3OC91ZHAgICBTZXNzaW9uIFRyYXZl cnNhbCBVdGlsaXRpZXMgZm9yIE5BVCAoU1RVTikgcG9ydA0KICAgc3R1bnMgIDUzNDkvdGNwICAg U2Vzc2lvbiBUcmF2ZXJzYWwgVXRpbGl0aWVzIGZvciBOQVQgKFNUVU4pIHBvcnQNCg0KDQoNCg0K DQoNCg0KUGV0aXQtSHVndWVuaW4sIGV0IGFsLiBFeHBpcmVzIFNlcHRlbWJlciAyMiwgMjAxOSAg ICAgICAgICAgICAgW1BhZ2UgNTZdDQoMDQpJbnRlcm5ldC1EcmFmdCBTZXNzaW9uIFRyYXZlcnNh bCBVdGlsaXRpZXMgZm9yIE5BVCAoU1RVTikgICAgIE1hcmNoIDIwMTkNCg0KDQoxOS4gIENoYW5n ZXMgU2luY2UgUkZDIDUzODkNCg0KICAgVGhpcyBzcGVjaWZpY2F0aW9uIG9ic29sZXRlcyBbUkZD NTM4OV0uICBUaGlzIHNwZWNpZmljYXRpb24gZGlmZmVycw0KICAgZnJvbSBSRkMgNTM4OSBpbiB0 aGUgZm9sbG93aW5nIHdheXM6DQoNCiAgIG8gIEFkZGVkIHN1cHBvcnQgZm9yIERUTFMtb3Zlci1V RFAgW1JGQzYzNDddLg0KDQogICBvICBNYWRlIGNsZWFyIHRoYXQgdGhlIFJUTyBpcyBjb25zaWRl cmVkIHN0YWxlIGlmIHRoZXJlIGlzIG5vDQogICAgICB0cmFuc2FjdGlvbnMgd2l0aCB0aGUgc2Vy dmVyLg0KDQogICBvICBBbGlnbmVkIHRoZSBSVE8gY2FsY3VsYXRpb24gd2l0aCBbUkZDNjI5OF0u DQoNCiAgIG8gIFVwZGF0ZWQgdGhlIGNpcGhlciBzdWl0ZXMgZm9yIFRMUy4NCg0KICAgbyAgQWRk ZWQgc3VwcG9ydCBmb3IgU1RVTiBVUkkgW1JGQzcwNjRdLg0KDQogICBvICBBZGRlZCBzdXBwb3J0 IGZvciBTSEEyNTYgbWVzc2FnZSBpbnRlZ3JpdHkuDQoNCiAgIG8gIFVwZGF0ZWQgdGhlIFBSRUNJ UyBzdXBwb3J0IHRvIFtSRkM4MjY1XS4NCg0KICAgbyAgQWRkZWQgcHJvdG9jb2wgYW5kIHJlZ2lz dHJ5IHRvIGNob29zZSB0aGUgcGFzc3dvcmQgZW5jcnlwdGlvbg0KICAgICAgYWxnb3JpdGhtLg0K DQogICBvICBBZGRlZCBzdXBwb3J0IGZvciBhbm9ueW1vdXMgdXNlcm5hbWUuDQoNCiAgIG8gIEFk ZGVkIHByb3RvY29sIGFuZCByZWdpc3RyeSBmb3IgcHJldmVudGluZyBiaWRkb3duIGF0dGFja3Mu DQoNCiAgIG8gIFNoYXJpbmcgYSBOT05DRSBpcyBubyBsb25nZXIgcGVybWl0dGVkLg0KDQogICBv ICBBZGRlZCB0aGUgcG9zc2liaWxpdHkgb2YgdXNpbmcgYSBkb21haW4gbmFtZSBpbiB0aGUgYWx0 ZXJuYXRlDQogICAgICBzZXJ2ZXIgbWVjaGFuaXNtLg0KDQogICBvICBBZGRlZCBtb3JlIEMgc25p cHBldHMuDQoNCiAgIG8gIEFkZGVkIHRlc3QgdmVjdG9yLg0KDQoyMC4gIFJlZmVyZW5jZXMNCg0K MjAuMS4gIE5vcm1hdGl2ZSBSZWZlcmVuY2VzDQoNCiAgIFtJVFUuVjQyLjIwMDJdDQogICAgICAg ICAgICAgIEludGVybmF0aW9uYWwgVGVsZWNvbW11bmljYXRpb25zIFVuaW9uLCAiRXJyb3ItY29y cmVjdGluZw0KICAgICAgICAgICAgICBQcm9jZWR1cmVzIGZvciBEQ0VzIFVzaW5nIEFzeW5jaHJv bm91cy10by1TeW5jaHJvbm91cw0KICAgICAgICAgICAgICBDb252ZXJzaW9uIiwgSVRVLVQgUmVj b21tZW5kYXRpb24gVi40MiwgMjAwMi4NCg0KICAgW0tBUk44N10gICBLYXJuLCBQLiBhbmQgQy4g UGFydHJpZGdlLCAiSW1wcm92aW5nIFJvdW5kLVRyaXAgVGltZQ0KICAgICAgICAgICAgICBFc3Rp bWF0ZXMgaW4gUmVsaWFibGUgVHJhbnNwb3J0IFByb3RvY29scyIsIEF1Z3VzdCAxOTg3Lg0KDQoN Cg0KDQpQZXRpdC1IdWd1ZW5pbiwgZXQgYWwuIEV4cGlyZXMgU2VwdGVtYmVyIDIyLCAyMDE5ICAg ICAgICAgICAgICBbUGFnZSA1N10NCgwNCkludGVybmV0LURyYWZ0IFNlc3Npb24gVHJhdmVyc2Fs IFV0aWxpdGllcyBmb3IgTkFUIChTVFVOKSAgICAgTWFyY2ggMjAxOQ0KDQoNCiAgIFtSRkMwNzkx XSAgUG9zdGVsLCBKLiwgIkludGVybmV0IFByb3RvY29sIiwgU1REIDUsIFJGQyA3OTEsDQogICAg ICAgICAgICAgIERPSSAxMC4xNzQ4Ny9SRkMwNzkxLCBTZXB0ZW1iZXIgMTk4MSwNCiAgICAgICAg ICAgICAgPGh0dHBzOi8vd3d3LnJmYy1lZGl0b3Iub3JnL2luZm8vcmZjNzkxPi4NCg0KICAgW1JG QzExMjJdICBCcmFkZW4sIFIuLCBFZC4sICJSZXF1aXJlbWVudHMgZm9yIEludGVybmV0IEhvc3Rz IC0NCiAgICAgICAgICAgICAgQ29tbXVuaWNhdGlvbiBMYXllcnMiLCBTVEQgMywgUkZDIDExMjIs DQogICAgICAgICAgICAgIERPSSAxMC4xNzQ4Ny9SRkMxMTIyLCBPY3RvYmVyIDE5ODksDQogICAg ICAgICAgICAgIDxodHRwczovL3d3dy5yZmMtZWRpdG9yLm9yZy9pbmZvL3JmYzExMjI+Lg0KDQog ICBbUkZDMTEyM10gIEJyYWRlbiwgUi4sIEVkLiwgIlJlcXVpcmVtZW50cyBmb3IgSW50ZXJuZXQg SG9zdHMgLQ0KICAgICAgICAgICAgICBBcHBsaWNhdGlvbiBhbmQgU3VwcG9ydCIsIFNURCAzLCBS RkMgMTEyMywNCiAgICAgICAgICAgICAgRE9JIDEwLjE3NDg3L1JGQzExMjMsIE9jdG9iZXIgMTk4 OSwNCiAgICAgICAgICAgICAgPGh0dHA6Ly93d3cucmZjLWVkaXRvci5vcmcvaW5mby9yZmMxMTIz Pi4NCg0KICAgW1JGQzEzMjFdICBSaXZlc3QsIFIuLCAiVGhlIE1ENSBNZXNzYWdlLURpZ2VzdCBB bGdvcml0aG0iLCBSRkMgMTMyMSwNCiAgICAgICAgICAgICAgRE9JIDEwLjE3NDg3L1JGQzEzMjEs IEFwcmlsIDE5OTIsDQogICAgICAgICAgICAgIDxodHRwczovL3d3dy5yZmMtZWRpdG9yLm9yZy9p bmZvL3JmYzEzMjE+Lg0KDQogICBbUkZDMjEwNF0gIEtyYXdjenlrLCBILiwgQmVsbGFyZSwgTS4s IGFuZCBSLiBDYW5ldHRpLCAiSE1BQzogS2V5ZWQtDQogICAgICAgICAgICAgIEhhc2hpbmcgZm9y IE1lc3NhZ2UgQXV0aGVudGljYXRpb24iLCBSRkMgMjEwNCwNCiAgICAgICAgICAgICAgRE9JIDEw LjE3NDg3L1JGQzIxMDQsIEZlYnJ1YXJ5IDE5OTcsDQogICAgICAgICAgICAgIDxodHRwczovL3d3 dy5yZmMtZWRpdG9yLm9yZy9pbmZvL3JmYzIxMDQ+Lg0KDQogICBbUkZDMjExOV0gIEJyYWRuZXIs IFMuLCAiS2V5IHdvcmRzIGZvciB1c2UgaW4gUkZDcyB0byBJbmRpY2F0ZQ0KICAgICAgICAgICAg ICBSZXF1aXJlbWVudCBMZXZlbHMiLCBCQ1AgMTQsIFJGQyAyMTE5LA0KICAgICAgICAgICAgICBE T0kgMTAuMTc0ODcvUkZDMjExOSwgTWFyY2ggMTk5NywNCiAgICAgICAgICAgICAgPGh0dHA6Ly93 d3cucmZjLWVkaXRvci5vcmcvaW5mby9yZmMyMTE5Pi4NCg0KICAgW1JGQzI3ODJdICBHdWxicmFu ZHNlbiwgQS4sIFZpeGllLCBQLiwgYW5kIEwuIEVzaWJvdiwgIkEgRE5TIFJSIGZvcg0KICAgICAg ICAgICAgICBzcGVjaWZ5aW5nIHRoZSBsb2NhdGlvbiBvZiBzZXJ2aWNlcyAoRE5TIFNSVikiLCBS RkMgMjc4MiwNCiAgICAgICAgICAgICAgRE9JIDEwLjE3NDg3L1JGQzI3ODIsIEZlYnJ1YXJ5IDIw MDAsDQogICAgICAgICAgICAgIDxodHRwczovL3d3dy5yZmMtZWRpdG9yLm9yZy9pbmZvL3JmYzI3 ODI+Lg0KDQogICBbUkZDMzYyOV0gIFllcmdlYXUsIEYuLCAiVVRGLTgsIGEgdHJhbnNmb3JtYXRp b24gZm9ybWF0IG9mIElTTw0KICAgICAgICAgICAgICAxMDY0NiIsIFNURCA2MywgUkZDIDM2Mjks IERPSSAxMC4xNzQ4Ny9SRkMzNjI5LCBOb3ZlbWJlcg0KICAgICAgICAgICAgICAyMDAzLCA8aHR0 cHM6Ly93d3cucmZjLWVkaXRvci5vcmcvaW5mby9yZmMzNjI5Pi4NCg0KICAgW1JGQzQ2NDhdICBK b3NlZnNzb24sIFMuLCAiVGhlIEJhc2UxNiwgQmFzZTMyLCBhbmQgQmFzZTY0IERhdGENCiAgICAg ICAgICAgICAgRW5jb2RpbmdzIiwgUkZDIDQ2NDgsIERPSSAxMC4xNzQ4Ny9SRkM0NjQ4LCBPY3Rv YmVyIDIwMDYsDQogICAgICAgICAgICAgIDxodHRwczovL3d3dy5yZmMtZWRpdG9yLm9yZy9pbmZv L3JmYzQ2NDg+Lg0KDQogICBbUkZDNTI0Nl0gIERpZXJrcywgVC4gYW5kIEUuIFJlc2NvcmxhLCAi VGhlIFRyYW5zcG9ydCBMYXllciBTZWN1cml0eQ0KICAgICAgICAgICAgICAoVExTKSBQcm90b2Nv bCBWZXJzaW9uIDEuMiIsIFJGQyA1MjQ2LA0KICAgICAgICAgICAgICBET0kgMTAuMTc0ODcvUkZD NTI0NiwgQXVndXN0IDIwMDgsDQogICAgICAgICAgICAgIDxodHRwczovL3d3dy5yZmMtZWRpdG9y Lm9yZy9pbmZvL3JmYzUyNDY+Lg0KDQoNCg0KDQoNCg0KUGV0aXQtSHVndWVuaW4sIGV0IGFsLiBF eHBpcmVzIFNlcHRlbWJlciAyMiwgMjAxOSAgICAgICAgICAgICAgW1BhZ2UgNThdDQoMDQpJbnRl cm5ldC1EcmFmdCBTZXNzaW9uIFRyYXZlcnNhbCBVdGlsaXRpZXMgZm9yIE5BVCAoU1RVTikgICAg IE1hcmNoIDIwMTkNCg0KDQogICBbUkZDNTg5MF0gIEtsZW5zaW4sIEouLCAiSW50ZXJuYXRpb25h bGl6ZWQgRG9tYWluIE5hbWVzIGZvcg0KICAgICAgICAgICAgICBBcHBsaWNhdGlvbnMgKElETkEp OiBEZWZpbml0aW9ucyBhbmQgRG9jdW1lbnQgRnJhbWV3b3JrIiwNCiAgICAgICAgICAgICAgUkZD IDU4OTAsIERPSSAxMC4xNzQ4Ny9SRkM1ODkwLCBBdWd1c3QgMjAxMCwNCiAgICAgICAgICAgICAg PGh0dHA6Ly93d3cucmZjLWVkaXRvci5vcmcvaW5mby9yZmM1ODkwPi4NCg0KICAgW1JGQzYxMjVd ICBTYWludC1BbmRyZSwgUC4gYW5kIEouIEhvZGdlcywgIlJlcHJlc2VudGF0aW9uIGFuZA0KICAg ICAgICAgICAgICBWZXJpZmljYXRpb24gb2YgRG9tYWluLUJhc2VkIEFwcGxpY2F0aW9uIFNlcnZp Y2UgSWRlbnRpdHkNCiAgICAgICAgICAgICAgd2l0aGluIEludGVybmV0IFB1YmxpYyBLZXkgSW5m cmFzdHJ1Y3R1cmUgVXNpbmcgWC41MDkNCiAgICAgICAgICAgICAgKFBLSVgpIENlcnRpZmljYXRl cyBpbiB0aGUgQ29udGV4dCBvZiBUcmFuc3BvcnQgTGF5ZXINCiAgICAgICAgICAgICAgU2VjdXJp dHkgKFRMUykiLCBSRkMgNjEyNSwgRE9JIDEwLjE3NDg3L1JGQzYxMjUsIE1hcmNoDQogICAgICAg ICAgICAgIDIwMTEsIDxodHRwczovL3d3dy5yZmMtZWRpdG9yLm9yZy9pbmZvL3JmYzYxMjU+Lg0K DQogICBbUkZDNjE1MV0gIFR1cm5lciwgUy4gYW5kIEwuIENoZW4sICJVcGRhdGVkIFNlY3VyaXR5 IENvbnNpZGVyYXRpb25zDQogICAgICAgICAgICAgIGZvciB0aGUgTUQ1IE1lc3NhZ2UtRGlnZXN0 IGFuZCB0aGUgSE1BQy1NRDUgQWxnb3JpdGhtcyIsDQogICAgICAgICAgICAgIFJGQyA2MTUxLCBE T0kgMTAuMTc0ODcvUkZDNjE1MSwgTWFyY2ggMjAxMSwNCiAgICAgICAgICAgICAgPGh0dHA6Ly93 d3cucmZjLWVkaXRvci5vcmcvaW5mby9yZmM2MTUxPi4NCg0KICAgW1JGQzYyOThdICBQYXhzb24s IFYuLCBBbGxtYW4sIE0uLCBDaHUsIEouLCBhbmQgTS4gU2FyZ2VudCwNCiAgICAgICAgICAgICAg IkNvbXB1dGluZyBUQ1AncyBSZXRyYW5zbWlzc2lvbiBUaW1lciIsIFJGQyA2Mjk4LA0KICAgICAg ICAgICAgICBET0kgMTAuMTc0ODcvUkZDNjI5OCwgSnVuZSAyMDExLA0KICAgICAgICAgICAgICA8 aHR0cHM6Ly93d3cucmZjLWVkaXRvci5vcmcvaW5mby9yZmM2Mjk4Pi4NCg0KICAgW1JGQzYzNDdd ICBSZXNjb3JsYSwgRS4gYW5kIE4uIE1vZGFkdWd1LCAiRGF0YWdyYW0gVHJhbnNwb3J0IExheWVy DQogICAgICAgICAgICAgIFNlY3VyaXR5IFZlcnNpb24gMS4yIiwgUkZDIDYzNDcsIERPSSAxMC4x NzQ4Ny9SRkM2MzQ3LA0KICAgICAgICAgICAgICBKYW51YXJ5IDIwMTIsIDxodHRwczovL3d3dy5y ZmMtZWRpdG9yLm9yZy9pbmZvL3JmYzYzNDc+Lg0KDQogICBbUkZDNzA2NF0gIE5hbmRha3VtYXIs IFMuLCBTYWxndWVpcm8sIEcuLCBKb25lcywgUC4sIGFuZCBNLiBQZXRpdC0NCiAgICAgICAgICAg ICAgSHVndWVuaW4sICJVUkkgU2NoZW1lIGZvciB0aGUgU2Vzc2lvbiBUcmF2ZXJzYWwgVXRpbGl0 aWVzDQogICAgICAgICAgICAgIGZvciBOQVQgKFNUVU4pIFByb3RvY29sIiwgUkZDIDcwNjQsIERP SSAxMC4xNzQ4Ny9SRkM3MDY0LA0KICAgICAgICAgICAgICBOb3ZlbWJlciAyMDEzLCA8aHR0cHM6 Ly93d3cucmZjLWVkaXRvci5vcmcvaW5mby9yZmM3MDY0Pi4NCg0KICAgW1JGQzczNTBdICBQZXRp dC1IdWd1ZW5pbiwgTS4gYW5kIEcuIFNhbGd1ZWlybywgIkRhdGFncmFtIFRyYW5zcG9ydA0KICAg ICAgICAgICAgICBMYXllciBTZWN1cml0eSAoRFRMUykgYXMgVHJhbnNwb3J0IGZvciBTZXNzaW9u IFRyYXZlcnNhbA0KICAgICAgICAgICAgICBVdGlsaXRpZXMgZm9yIE5BVCAoU1RVTikiLCBSRkMg NzM1MCwgRE9JIDEwLjE3NDg3L1JGQzczNTAsDQogICAgICAgICAgICAgIEF1Z3VzdCAyMDE0LCA8 aHR0cHM6Ly93d3cucmZjLWVkaXRvci5vcmcvaW5mby9yZmM3MzUwPi4NCg0KICAgW1JGQzc2MTZd ICBTaGVraC1ZdXNlZiwgUi4sIEFocmVucywgRC4sIGFuZCBTLiBCcmVtZXIsICJIVFRQIERpZ2Vz dA0KICAgICAgICAgICAgICBBY2Nlc3MgQXV0aGVudGljYXRpb24iLCBSRkMgNzYxNiwgRE9JIDEw LjE3NDg3L1JGQzc2MTYsDQogICAgICAgICAgICAgIFNlcHRlbWJlciAyMDE1LCA8aHR0cHM6Ly93 d3cucmZjLWVkaXRvci5vcmcvaW5mby9yZmM3NjE2Pi4NCg0KICAgW1JGQzgxNzRdICBMZWliYSwg Qi4sICJBbWJpZ3VpdHkgb2YgVXBwZXJjYXNlIHZzIExvd2VyY2FzZSBpbiBSRkMNCiAgICAgICAg ICAgICAgMjExOSBLZXkgV29yZHMiLCBCQ1AgMTQsIFJGQyA4MTc0LCBET0kgMTAuMTc0ODcvUkZD ODE3NCwNCiAgICAgICAgICAgICAgTWF5IDIwMTcsIDxodHRwOi8vd3d3LnJmYy1lZGl0b3Iub3Jn L2luZm8vcmZjODE3ND4uDQoNCiAgIFtSRkM4MjAwXSAgRGVlcmluZywgUy4gYW5kIFIuIEhpbmRl biwgIkludGVybmV0IFByb3RvY29sLCBWZXJzaW9uIDYNCiAgICAgICAgICAgICAgKElQdjYpIFNw ZWNpZmljYXRpb24iLCBSRkMgODIwMCwgU1REIDg2LA0KICAgICAgICAgICAgICBET0kgMTAuMTc0 ODcvUkZDODIwMCwgSnVseSAyMDE3LA0KICAgICAgICAgICAgICA8aHR0cHM6Ly93d3cucmZjLWVk aXRvci5vcmcvaW5mby9yZjgyMDA+Lg0KDQoNCg0KUGV0aXQtSHVndWVuaW4sIGV0IGFsLiBFeHBp cmVzIFNlcHRlbWJlciAyMiwgMjAxOSAgICAgICAgICAgICAgW1BhZ2UgNTldDQoMDQpJbnRlcm5l dC1EcmFmdCBTZXNzaW9uIFRyYXZlcnNhbCBVdGlsaXRpZXMgZm9yIE5BVCAoU1RVTikgICAgIE1h cmNoIDIwMTkNCg0KDQogICBbUkZDODI2NV0gIFNhaW50LUFuZHJlLCBQLiBhbmQgQS4gTWVsbmlr b3YsICJQcmVwYXJhdGlvbiwNCiAgICAgICAgICAgICAgRW5mb3JjZW1lbnQsIGFuZCBDb21wYXJp c29uIG9mIEludGVybmF0aW9uYWxpemVkIFN0cmluZ3MNCiAgICAgICAgICAgICAgUmVwcmVzZW50 aW5nIFVzZXJuYW1lcyBhbmQgUGFzc3dvcmRzIiwgUkZDIDgyNjUsDQogICAgICAgICAgICAgIERP SSAxMC4xNzQ4Ny9SRkM4MjY1LCBPY3RvYmVyIDIwMTcsDQogICAgICAgICAgICAgIDxodHRwczov L3d3dy5yZmMtZWRpdG9yLm9yZy9pbmZvL3JmYzgyNjU+Lg0KDQogICBbUkZDODMwNV0gIFNjaGlu YXppLCBELiBhbmQgVC4gUGF1bHksICJIYXBweSBFeWViYWxscyBWZXJzaW9uIDI6DQogICAgICAg ICAgICAgIEJldHRlciBDb25uZWN0aXZpdHkgVXNpbmcgQ29uY3VycmVuY3kiLCBSRkMgODMwNSwN CiAgICAgICAgICAgICAgRE9JIDEwLjE3NDg3L1JGQzgzMDUsIERlY2VtYmVyIDIwMTcsDQogICAg ICAgICAgICAgIDxodHRwczovL3d3dy5yZmMtZWRpdG9yLm9yZy9pbmZvL3JmYzgzMDU+Lg0KDQoy MC4yLiAgSW5mb3JtYXRpdmUgUmVmZXJlbmNlcw0KDQogICBbQkNQMTk1XSAgIFNoZWZmZXIsIFku LCBIb2x6LCBSLiwgYW5kIFAuIFNhaW50LUFuZHJlLA0KICAgICAgICAgICAgICAiUmVjb21tZW5k YXRpb25zIGZvciBTZWN1cmUgVXNlIG9mIFRyYW5zcG9ydCBMYXllcg0KICAgICAgICAgICAgICBT ZWN1cml0eSAoVExTKSBhbmQgRGF0YWdyYW0gVHJhbnNwb3J0IExheWVyIFNlY3VyaXR5DQogICAg ICAgICAgICAgIChEVExTKSIsIEJDUCAxOTUsIFJGQyA3NTI1LCBET0kgMTAuMTc0ODcvUkZDNzUy NSwgTWF5DQogICAgICAgICAgICAgIDIwMTUsIDxodHRwczovL3d3dy5yZmMtZWRpdG9yLm9yZy9p bmZvL3JmYzc1MjU+Lg0KDQogICBbSS1ELmlldGYtdHJhbS1zdHVuLXBtdHVkXQ0KICAgICAgICAg ICAgICBQZXRpdC1IdWd1ZW5pbiwgTS4gYW5kIEcuIFNhbGd1ZWlybywgIlBhdGggTVRVIERpc2Nv dmVyeQ0KICAgICAgICAgICAgICBVc2luZyBTZXNzaW9uIFRyYXZlcnNhbCBVdGlsaXRpZXMgZm9y IE5BVCAoU1RVTikiLCBkcmFmdC0NCiAgICAgICAgICAgICAgaWV0Zi10cmFtLXN0dW4tcG10dWQt MTAgKHdvcmsgaW4gcHJvZ3Jlc3MpLCBTZXB0ZW1iZXINCiAgICAgICAgICAgICAgMjAxOC4NCg0K ICAgW0ktRC5pcnRmLWNmcmctYXJnb24yXQ0KICAgICAgICAgICAgICBCaXJ5dWtvdiwgQS4sIERp bnUsIEQuLCBLaG92cmF0b3ZpY2gsIEQuLCBhbmQgUy4NCiAgICAgICAgICAgICAgSm9zZWZzc29u LCAiVGhlIG1lbW9yeS1oYXJkIEFyZ29uMiBwYXNzd29yZCBoYXNoIGFuZA0KICAgICAgICAgICAg ICBwcm9vZi1vZi13b3JrIGZ1bmN0aW9uIiwgZHJhZnQtaXJ0Zi1jZnJnLWFyZ29uMi0wNCAod29y aw0KICAgICAgICAgICAgICBpbiBwcm9ncmVzcyksIE5vdmVtYmVyIDIwMTguDQoNCiAgIFtSRkMx OTUyXSAgRGV1dHNjaCwgUC4sICJHWklQIGZpbGUgZm9ybWF0IHNwZWNpZmljYXRpb24gdmVyc2lv biA0LjMiLA0KICAgICAgICAgICAgICBSRkMgMTk1MiwgRE9JIDEwLjE3NDg3L1JGQzE5NTIsIE1h eSAxOTk2LA0KICAgICAgICAgICAgICA8aHR0cHM6Ly93d3cucmZjLWVkaXRvci5vcmcvaW5mby9y ZmMxOTUyPi4NCg0KICAgW1JGQzMyNjFdICBSb3NlbmJlcmcsIEouLCBTY2h1bHpyaW5uZSwgSC4s IENhbWFyaWxsbywgRy4sIEpvaG5zdG9uLA0KICAgICAgICAgICAgICBBLiwgUGV0ZXJzb24sIEou LCBTcGFya3MsIFIuLCBIYW5kbGV5LCBNLiwgYW5kIEUuDQogICAgICAgICAgICAgIFNjaG9vbGVy LCAiU0lQOiBTZXNzaW9uIEluaXRpYXRpb24gUHJvdG9jb2wiLCBSRkMgMzI2MSwNCiAgICAgICAg ICAgICAgRE9JIDEwLjE3NDg3L1JGQzMyNjEsIEp1bmUgMjAwMiwNCiAgICAgICAgICAgICAgPGh0 dHBzOi8vd3d3LnJmYy1lZGl0b3Iub3JnL2luZm8vcmZjMzI2MT4uDQoNCiAgIFtSRkMzNDI0XSAg RGFpZ2xlLCBMLiwgRWQuIGFuZCBJQUIsICJJQUIgQ29uc2lkZXJhdGlvbnMgZm9yDQogICAgICAg ICAgICAgIFVOaWxhdGVyYWwgU2VsZi1BZGRyZXNzIEZpeGluZyAoVU5TQUYpIEFjcm9zcyBOZXR3 b3JrDQogICAgICAgICAgICAgIEFkZHJlc3MgVHJhbnNsYXRpb24iLCBSRkMgMzQyNCwgRE9JIDEw LjE3NDg3L1JGQzM0MjQsDQogICAgICAgICAgICAgIE5vdmVtYmVyIDIwMDIsIDxodHRwczovL3d3 dy5yZmMtZWRpdG9yLm9yZy9pbmZvL3JmYzM0MjQ+Lg0KDQoNCg0KDQoNCg0KUGV0aXQtSHVndWVu aW4sIGV0IGFsLiBFeHBpcmVzIFNlcHRlbWJlciAyMiwgMjAxOSAgICAgICAgICAgICAgW1BhZ2Ug NjBdDQoMDQpJbnRlcm5ldC1EcmFmdCBTZXNzaW9uIFRyYXZlcnNhbCBVdGlsaXRpZXMgZm9yIE5B VCAoU1RVTikgICAgIE1hcmNoIDIwMTkNCg0KDQogICBbUkZDMzQ4OV0gIFJvc2VuYmVyZywgSi4s IFdlaW5iZXJnZXIsIEouLCBIdWl0ZW1hLCBDLiwgYW5kIFIuIE1haHksDQogICAgICAgICAgICAg ICJTVFVOIC0gU2ltcGxlIFRyYXZlcnNhbCBvZiBVc2VyIERhdGFncmFtIFByb3RvY29sIChVRFAp DQogICAgICAgICAgICAgIFRocm91Z2ggTmV0d29yayBBZGRyZXNzIFRyYW5zbGF0b3JzIChOQVRz KSIsIFJGQyAzNDg5LA0KICAgICAgICAgICAgICBET0kgMTAuMTc0ODcvUkZDMzQ4OSwgTWFyY2gg MjAwMywNCiAgICAgICAgICAgICAgPGh0dHBzOi8vd3d3LnJmYy1lZGl0b3Iub3JnL2luZm8vcmZj MzQ4OT4uDQoNCiAgIFtSRkM0MTA3XSAgQmVsbG92aW4sIFMuIGFuZCBSLiBIb3VzbGV5LCAiR3Vp ZGVsaW5lcyBmb3IgQ3J5cHRvZ3JhcGhpYw0KICAgICAgICAgICAgICBLZXkgTWFuYWdlbWVudCIs IEJDUCAxMDcsIFJGQyA0MTA3LCBET0kgMTAuMTc0ODcvUkZDNDEwNywNCiAgICAgICAgICAgICAg SnVuZSAyMDA1LCA8aHR0cHM6Ly93d3cucmZjLWVkaXRvci5vcmcvaW5mby9yZmM0MTA3Pi4NCg0K ICAgW1JGQzUwOTBdICBTdGVybWFuLCBCLiwgU2Fkb2xldnNreSwgRC4sIFNjaHdhcnR6LCBELiwg V2lsbGlhbXMsIEQuLA0KICAgICAgICAgICAgICBhbmQgVy4gQmVjaywgIlJBRElVUyBFeHRlbnNp b24gZm9yIERpZ2VzdCBBdXRoZW50aWNhdGlvbiIsDQogICAgICAgICAgICAgIFJGQyA1MDkwLCBE T0kgMTAuMTc0ODcvUkZDNTA5MCwgRmVicnVhcnkgMjAwOCwNCiAgICAgICAgICAgICAgPGh0dHA6 Ly93d3cucmZjLWVkaXRvci5vcmcvaW5mby9yZmM1MDkwPi4NCg0KICAgW1JGQzUzODldICBSb3Nl bmJlcmcsIEouLCBNYWh5LCBSLiwgTWF0dGhld3MsIFAuLCBhbmQgRC4gV2luZywNCiAgICAgICAg ICAgICAgIlNlc3Npb24gVHJhdmVyc2FsIFV0aWxpdGllcyBmb3IgTkFUIChTVFVOKSIsIFJGQyA1 Mzg5LA0KICAgICAgICAgICAgICBET0kgMTAuMTc0ODcvUkZDNTM4OSwgT2N0b2JlciAyMDA4LA0K ICAgICAgICAgICAgICA8aHR0cHM6Ly93d3cucmZjLWVkaXRvci5vcmcvaW5mby9yZmM1Mzg5Pi4N Cg0KICAgW1JGQzU2MjZdICBKZW5uaW5ncywgQy4sIEVkLiwgTWFoeSwgUi4sIEVkLiwgYW5kIEYu IEF1ZGV0LCBFZC4sDQogICAgICAgICAgICAgICJNYW5hZ2luZyBDbGllbnQtSW5pdGlhdGVkIENv bm5lY3Rpb25zIGluIHRoZSBTZXNzaW9uDQogICAgICAgICAgICAgIEluaXRpYXRpb24gUHJvdG9j b2wgKFNJUCkiLCBSRkMgNTYyNiwNCiAgICAgICAgICAgICAgRE9JIDEwLjE3NDg3L1JGQzU2MjYs IE9jdG9iZXIgMjAwOSwNCiAgICAgICAgICAgICAgPGh0dHBzOi8vd3d3LnJmYy1lZGl0b3Iub3Jn L2luZm8vcmZjNTYyNj4uDQoNCiAgIFtSRkM1NzY2XSAgTWFoeSwgUi4sIE1hdHRoZXdzLCBQLiwg YW5kIEouIFJvc2VuYmVyZywgIlRyYXZlcnNhbCBVc2luZw0KICAgICAgICAgICAgICBSZWxheXMg YXJvdW5kIE5BVCAoVFVSTik6IFJlbGF5IEV4dGVuc2lvbnMgdG8gU2Vzc2lvbg0KICAgICAgICAg ICAgICBUcmF2ZXJzYWwgVXRpbGl0aWVzIGZvciBOQVQgKFNUVU4pIiwgUkZDIDU3NjYsDQogICAg ICAgICAgICAgIERPSSAxMC4xNzQ4Ny9SRkM1NzY2LCBBcHJpbCAyMDEwLA0KICAgICAgICAgICAg ICA8aHR0cHM6Ly93d3cucmZjLWVkaXRvci5vcmcvaW5mby9yZmM1NzY2Pi4NCg0KICAgW1JGQzU3 NjldICBEZW5pcy1Db3VybW9udCwgUi4sICJUZXN0IFZlY3RvcnMgZm9yIFNlc3Npb24gVHJhdmVy c2FsDQogICAgICAgICAgICAgIFV0aWxpdGllcyBmb3IgTkFUIChTVFVOKSIsIFJGQyA1NzY5LCBE T0kgMTAuMTc0ODcvUkZDNTc2OSwNCiAgICAgICAgICAgICAgQXByaWwgMjAxMCwgPGh0dHBzOi8v d3d3LnJmYy1lZGl0b3Iub3JnL2luZm8vcmZjNTc2OT4uDQoNCiAgIFtSRkM1NzgwXSAgTWFjRG9u YWxkLCBELiBhbmQgQi4gTG93ZWthbXAsICJOQVQgQmVoYXZpb3IgRGlzY292ZXJ5DQogICAgICAg ICAgICAgIFVzaW5nIFNlc3Npb24gVHJhdmVyc2FsIFV0aWxpdGllcyBmb3IgTkFUIChTVFVOKSIs DQogICAgICAgICAgICAgIFJGQyA1NzgwLCBET0kgMTAuMTc0ODcvUkZDNTc4MCwgTWF5IDIwMTAs DQogICAgICAgICAgICAgIDxodHRwczovL3d3dy5yZmMtZWRpdG9yLm9yZy9pbmZvL3JmYzU3ODA+ Lg0KDQogICBbUkZDNjU0NF0gIFJvc2VuYmVyZywgSi4sIEtlcmFuZW4sIEEuLCBMb3dla2FtcCwg Qi4sIGFuZCBBLiBSb2FjaCwNCiAgICAgICAgICAgICAgIlRDUCBDYW5kaWRhdGVzIHdpdGggSW50 ZXJhY3RpdmUgQ29ubmVjdGl2aXR5DQogICAgICAgICAgICAgIEVzdGFibGlzaG1lbnQgKElDRSki LCBSRkMgNjU0NCwgRE9JIDEwLjE3NDg3L1JGQzY1NDQsDQogICAgICAgICAgICAgIE1hcmNoIDIw MTIsIDxodHRwczovL3d3dy5yZmMtZWRpdG9yLm9yZy9pbmZvL3JmYzY1NDQ+Lg0KDQoNCg0KDQoN Cg0KUGV0aXQtSHVndWVuaW4sIGV0IGFsLiBFeHBpcmVzIFNlcHRlbWJlciAyMiwgMjAxOSAgICAg ICAgICAgICAgW1BhZ2UgNjFdDQoMDQpJbnRlcm5ldC1EcmFmdCBTZXNzaW9uIFRyYXZlcnNhbCBV dGlsaXRpZXMgZm9yIE5BVCAoU1RVTikgICAgIE1hcmNoIDIwMTkNCg0KDQogICBbUkZDNzIzMV0g IEZpZWxkaW5nLCBSLiBhbmQgUi4gUmVzY2hrZSwgIkh5cGVydGV4dCBUcmFuc2ZlciBQcm90b2Nv bA0KICAgICAgICAgICAgICAoSFRUUC8xLjEpOiBTZW1hbnRpY3MgYW5kIENvbnRlbnQiLCBSRkMg NzIzMSwNCiAgICAgICAgICAgICAgRE9JIDEwLjE3NDg3L1JGQzcyMzEsIEp1bmUgMjAxNCwNCiAg ICAgICAgICAgICAgPGh0dHBzOi8vd3d3LnJmYy1lZGl0b3Iub3JnL2luZm8vcmZjNzIzMT4uDQoN CiAgIFtSRkM4MTI2XSAgQ290dG9uLCBNLiwgTGVpYmEsIEIuLCBhbmQgVC4gTmFydGVuLCAiR3Vp ZGVsaW5lcyBmb3INCiAgICAgICAgICAgICAgV3JpdGluZyBhbiBJQU5BIENvbnNpZGVyYXRpb25z IFNlY3Rpb24gaW4gUkZDcyIsIEJDUCAyNiwNCiAgICAgICAgICAgICAgUkZDIDgxMjYsIERPSSAx MC4xNzQ4Ny9SRkM4MTI2LCBNYXkgMjAwOCwNCiAgICAgICAgICAgICAgPGh0dHBzOi8vd3d3LnJm Yy1lZGl0b3Iub3JnL2luZm8vcmZjODEyNj4uDQoNCiAgIFtSRkM4NDQ1XSAgS2VyYW5lbiwgQS4s IEhvbG1iZXJnLCBDLiwgYW5kIEouIFJvc2VuYmVyZywgIkludGVyYWN0aXZlDQogICAgICAgICAg ICAgIENvbm5lY3Rpdml0eSBFc3RhYmxpc2htZW50IChJQ0UpOiBBIFByb3RvY29sIGZvciBOZXR3 b3JrDQogICAgICAgICAgICAgIEFkZHJlc3MgVHJhbnNsYXRvciAoTkFUKSBUcmF2ZXJzYWwiLCBS RkMgODQ0NSwNCiAgICAgICAgICAgICAgRE9JIDEwLjE3NDg3L1JGQzg0NDUsIEp1bHkgMjAxOCwN CiAgICAgICAgICAgICAgPGh0dHBzOi8vd3d3LnJmYy1lZGl0b3Iub3JnL2luZm8vcmZjODQ0NT4u DQoNCkFwcGVuZGl4IEEuICBDIFNuaXBwZXQgdG8gRGV0ZXJtaW5lIFNUVU4gTWVzc2FnZSBUeXBl cw0KDQogICBHaXZlbiBhIDE2LWJpdCBTVFVOIG1lc3NhZ2UgdHlwZSB2YWx1ZSBpbiBob3N0IGJ5 dGUgb3JkZXIgaW4gbXNnX3R5cGUNCiAgIHBhcmFtZXRlciwgYmVsb3cgYXJlIEMgbWFjcm9zIHRv IGRldGVybWluZSB0aGUgU1RVTiBtZXNzYWdlIHR5cGVzOg0KDQogICA8Q09ERSBCRUdJTlM+DQog ICAjZGVmaW5lIElTX1JFUVVFU1QobXNnX3R5cGUpICAgICAgICgoKG1zZ190eXBlKSAmIDB4MDEx MCkgPT0gMHgwMDAwKQ0KICAgI2RlZmluZSBJU19JTkRJQ0FUSU9OKG1zZ190eXBlKSAgICAoKCht c2dfdHlwZSkgJiAweDAxMTApID09IDB4MDAxMCkNCiAgICNkZWZpbmUgSVNfU1VDQ0VTU19SRVNQ KG1zZ190eXBlKSAgKCgobXNnX3R5cGUpICYgMHgwMTEwKSA9PSAweDAxMDApDQogICAjZGVmaW5l IElTX0VSUl9SRVNQKG1zZ190eXBlKSAgICAgICgoKG1zZ190eXBlKSAmIDB4MDExMCkgPT0gMHgw MTEwKQ0KICAgPENPREUgRU5EUz4NCg0KICAgQSBmdW5jdGlvbiB0byBjb252ZXJ0IG1ldGhvZCBh bmQgY2xhc3MgaW50byBhIG1lc3NhZ2UgdHlwZToNCg0KICAgPENPREUgQkVHSU5TPg0KICAgaW50 IHR5cGUoaW50IG1ldGhvZCwgaW50IGNscykgew0KICAgICByZXR1cm4gKG1ldGhvZCAmIDB4MUY4 MCkgPDwgMiB8IChtZXRob2QgJiAweDAwNzApIDw8IDENCiAgICAgICB8IChtZXRob2QgJiAweDAw MEYpIHwgKGNscyAmIDB4MDAwMikgPDwgNw0KICAgICAgIHwgKGNscyAmIDB4MDAwMSkgPDwgNDsN CiAgICAgfQ0KICAgPENPREUgRU5EUz4NCg0KICAgQSBmdW5jdGlvbiB0byBleHRyYWN0IHRoZSBt ZXRob2QgZnJvbSB0aGUgbWVzc2FnZSB0eXBlOg0KDQogICA8Q09ERSBCRUdJTlM+DQogICBpbnQg bWV0aG9kKGludCB0eXBlKSB7DQogICAgIHJldHVybiAodHlwZSAmIDB4M0UwMCkgPj4gMiB8ICh0 eXBlICYgMHgwMEUwKSA+PiAxDQogICAgICAgfCAodHlwZSAmIDB4MDAwRik7DQogICAgIH0NCiAg IDxDT0RFIEVORFM+DQoNCiAgIEEgZnVuY3Rpb24gdG8gZXh0cmFjdCB0aGUgY2xhc3MgZnJvbSB0 aGUgbWVzc2FnZSB0eXBlOg0KDQoNCg0KUGV0aXQtSHVndWVuaW4sIGV0IGFsLiBFeHBpcmVzIFNl cHRlbWJlciAyMiwgMjAxOSAgICAgICAgICAgICAgW1BhZ2UgNjJdDQoMDQpJbnRlcm5ldC1EcmFm dCBTZXNzaW9uIFRyYXZlcnNhbCBVdGlsaXRpZXMgZm9yIE5BVCAoU1RVTikgICAgIE1hcmNoIDIw MTkNCg0KDQogICA8Q09ERSBCRUdJTlM+DQogICBpbnQgY2xzKGludCB0eXBlKSB7DQogICAgIHJl dHVybiAodHlwZSAmIDB4MDEwMCkgPj4gNyB8ICh0eXBlICYgMHgwMDEwKSA+PiA0Ow0KICAgICB9 DQogICA8Q09ERSBFTkRTPg0KDQpBcHBlbmRpeCBCLiAgVGVzdCBWZWN0b3JzDQoNCiAgIFRoaXMg c2VjdGlvbiBhdWdtZW50cyB0aGUgbGlzdCBvZiB0ZXN0IHZlY3RvcnMgZGVmaW5lZCBpbiBbUkZD NTc2OV0NCiAgIHdpdGggTUVTU0FHRS1JTlRFR1JJVFktU0hBMjU2LiAgQWxsIHRoZSBmb3JtYXRz IGFuZCBkZWZpbml0aW9ucw0KICAgbGlzdGVkIGluIFNlY3Rpb24gMiBvZiBbUkZDNTc2OV0gYXBw bHkgaGVyZS4NCg0KQi4xLiAgU2FtcGxlIFJlcXVlc3Qgd2l0aCBMb25nLVRlcm0gQXV0aGVudGlj YXRpb24gd2l0aCBNRVNTQUdFLQ0KICAgICAgSU5URUdSSVRZLVNIQTI1NiBhbmQgVVNFUkhBU0gN Cg0KICAgVGhpcyByZXF1ZXN0IHVzZXMgdGhlIGZvbGxvd2luZyBwYXJhbWV0ZXJzOg0KDQogICBV c2VybmFtZTogIjxVKzMwREU+PFUrMzBDOD48VSszMEVBPjxVKzMwQzM+PFUrMzBBRj48VSszMEI5 PiIgKHdpdGhvdXQNCiAgIHF1b3RlcykgdW5hZmZlY3RlZCBieSBPcGFxdWVTdHJpbmcgW1JGQzgy NjVdIHByb2Nlc3NpbmcNCg0KICAgUGFzc3dvcmQ6ICJUaGU8VSswMEFEPk08VSswMEFBPnRyPFUr MjE2OD4iIGFuZCAiVGhlTWF0cklYIiAod2l0aG91dA0KICAgcXVvdGVzKSByZXNwZWN0aXZlbHkg YmVmb3JlIGFuZCBhZnRlciBPcGFxdWVTdHJpbmcgcHJvY2Vzc2luZw0KDQogICBOb25jZTogIm9i TWF0Sm9zMlFBQUFmLy80OTlrOTU0ZDZPTDM0b0w5RlNUdnk2NHNBIiAod2l0aG91dCBxdW90ZXMp DQoNCiAgIFJlYWxtOiAiZXhhbXBsZS5vcmciICh3aXRob3V0IHF1b3RlcykNCg0KDQoNCg0KDQoN Cg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0KUGV0aXQtSHVndWVuaW4sIGV0 IGFsLiBFeHBpcmVzIFNlcHRlbWJlciAyMiwgMjAxOSAgICAgICAgICAgICAgW1BhZ2UgNjNdDQoM DQpJbnRlcm5ldC1EcmFmdCBTZXNzaW9uIFRyYXZlcnNhbCBVdGlsaXRpZXMgZm9yIE5BVCAoU1RV TikgICAgIE1hcmNoIDIwMTkNCg0KDQogICAgICAgICAwMCAwMSAwMCA5YyAgICAgIFJlcXVlc3Qg dHlwZSBhbmQgbWVzc2FnZSBsZW5ndGgNCiAgICAgICAgIDIxIDEyIGE0IDQyICAgICAgTWFnaWMg Y29va2llDQogICAgICAgICA3OCBhZCAzNCAzMyAgIH0NCiAgICAgICAgIGM2IGFkIDcyIGMwICAg fSAgVHJhbnNhY3Rpb24gSUQNCiAgICAgICAgIDI5IGRhIDQxIDJlICAgfQ0KICAgICAgICAgWFgg WFggMDAgMjAgICAgICBVU0VSSEFTSCBhdHRyaWJ1dGUgaGVhZGVyDQogICAgICAgICA0YSAzYyBm MyA4ZiAgIH0NCiAgICAgICAgIGVmIDY5IDkyIGJkICAgfQ0KICAgICAgICAgYTkgNTIgYzYgNzgg ICB9DQogICAgICAgICAwNCAxNyBkYSAwZiAgIH0gIFVzZXJoYXNoIHZhbHVlICgzMiBieXRlcykN CiAgICAgICAgIDI0IDgxIDk0IDE1ICAgfQ0KICAgICAgICAgNTYgOWUgNjAgYjIgICB9DQogICAg ICAgICAwNSBjNCA2ZSA0MSAgIH0NCiAgICAgICAgIDQwIDdmIDE3IDA0ICAgfQ0KICAgICAgICAg MDAgMTUgMDAgMjkgICAgICBOT05DRSBhdHRyaWJ1dGUgaGVhZGVyDQogICAgICAgICA2ZiA2MiA0 ZCA2MSAgIH0NCiAgICAgICAgIDc0IDRhIDZmIDczICAgfQ0KICAgICAgICAgMzIgNDEgNDEgNDEg ICB9DQogICAgICAgICA0MyA2NiAyZiAyZiAgIH0NCiAgICAgICAgIDM0IDM5IDM5IDZiICAgfSAg Tm9uY2UgdmFsdWUgYW5kIHBhZGRpbmcgKDMgYnl0ZXMpDQogICAgICAgICAzOSAzNSAzNCA2NCAg IH0NCiAgICAgICAgIDM2IDRmIDRjIDMzICAgfQ0KICAgICAgICAgMzQgNmYgNGMgMzkgICB9DQog ICAgICAgICA0NiA1MyA1NCA3NiAgIH0NCiAgICAgICAgIDc5IDM2IDM0IDczICAgfQ0KICAgICAg ICAgNDEgMDAgMDAgMDAgICB9DQogICAgICAgICAwMCAxNCAwMCAwYiAgICAgIFJFQUxNIGF0dHJp YnV0ZSBoZWFkZXINCiAgICAgICAgIDY1IDc4IDYxIDZkICAgfQ0KICAgICAgICAgNzAgNmMgNjUg MmUgICB9ICBSZWFsbSB2YWx1ZSAoMTEgYnl0ZXMpIGFuZCBwYWRkaW5nICgxIGJ5dGUpDQogICAg ICAgICA2ZiA3MiA2NyAwMCAgIH0NCiAgICAgICAgIFhYIFhYIDAwIDIwICAgICAgTUVTU0FHRS1J TlRFR1JJVFktU0hBMjU2IGF0dHJpYnV0ZSBoZWFkZXINCiAgICAgICAgIGM0IGVjIGEyIGI2ICAg fQ0KICAgICAgICAgMjQgNmYgMjYgYmUgICB9DQogICAgICAgICBiYyAyZiA3NyA0OSAgIH0NCiAg ICAgICAgIDA3IGMyIDAwIGEzICAgfSAgSE1BQy1TSEEyNTYgdmFsdWUNCiAgICAgICAgIDc2IGM3 IGMyIDhlICAgfQ0KICAgICAgICAgYjQgZDEgMjYgNjAgICB9DQogICAgICAgICBiYiBmZSA5ZiAy OCAgIH0NCiAgICAgICAgIDBlIDg1IDcxIGYyICAgfQ0KDQogICBOb3RlOiAgQmVmb3JlIHB1Ymxp Y2F0aW9uLCB0aGUgWFggWFggcGxhY2Vob2xkZXIgbXVzdCBiZSByZXBsYWNlZCBieQ0KICAgICAg dGhlIHZhbHVlIGFzc2lnbmVkIHRvIE1FU1NBR0UtSU5URUdSSVRZLVNIQTI1NiBhbmQgVVNFUkhB U0ggYnkNCiAgICAgIElBTkEuICBUaGUgTUVTU0FHRS1JTlRFR1JJVFktU0hBMjU2IGF0dHJpYnV0 ZSB2YWx1ZSB3aWxsIG5lZWQgdG8NCiAgICAgIGJlIHVwZGF0ZWQgYWZ0ZXIgdGhpcy4NCg0KDQoN Cg0KDQoNCg0KUGV0aXQtSHVndWVuaW4sIGV0IGFsLiBFeHBpcmVzIFNlcHRlbWJlciAyMiwgMjAx OSAgICAgICAgICAgICAgW1BhZ2UgNjRdDQoMDQpJbnRlcm5ldC1EcmFmdCBTZXNzaW9uIFRyYXZl cnNhbCBVdGlsaXRpZXMgZm9yIE5BVCAoU1RVTikgICAgIE1hcmNoIDIwMTkNCg0KDQpBcHBlbmRp eCBDLiAgUmVsZWFzZSBub3Rlcw0KDQogICBUaGlzIHNlY3Rpb24gbXVzdCBiZSByZW1vdmVkIGJl Zm9yZSBwdWJsaWNhdGlvbiBhcyBhbiBSRkMuDQoNCkMuMS4gIE1vZGlmaWNhdGlvbnMgYmV0d2Vl biBkcmFmdC1pZXRmLXRyYW0tc3R1bmJpcy0yMSBhbmQgZHJhZnQtaWV0Zi0NCiAgICAgIHRyYW0t c3R1bmJpcy0yMA0KDQogICBvICBGaW5hbCBlZGl0cyB0byBjbGVhbiB1cCBiaWQgZG93biBwcm90 ZWN0aW9uIHRleHQgdG8gYWRkcmVzcyBFcmljDQogICAgICBSZXNjb3JsYSdzIERJU0NVU1MgYW5k IGNvbW1lbnRzLg0KDQpDLjIuICBNb2RpZmljYXRpb25zIGJldHdlZW4gZHJhZnQtaWV0Zi10cmFt LXN0dW5iaXMtMjAgYW5kIGRyYWZ0LWlldGYtDQogICAgICB0cmFtLXN0dW5iaXMtMTkNCg0KICAg byAgVXBkYXRlcyB0byBhZGRyZXNzIEVyaWMgUmVzY29ybGEncyBESVNDVVNTIGFuZCBjb21tZW50 cy4NCg0KICAgbyAgQWRkcmVzc2VkIG5pdHMgcmFpc2VkIGJ5IE5vcml5dWtpIFRvcmlpDQoNCkMu My4gIE1vZGlmaWNhdGlvbnMgYmV0d2VlbiBkcmFmdC1pZXRmLXRyYW0tc3R1bmJpcy0xOSBhbmQg ZHJhZnQtaWV0Zi0NCiAgICAgIHRyYW0tc3R1bmJpcy0xOA0KDQogICBvICBVcGRhdGVzIGZvbGxv d2luZyBBZGFtIFJvYWNoIERJU0NVU1MgYW5kIGNvbW1lbnRzLg0KDQpDLjQuICBNb2RpZmljYXRp b25zIGJldHdlZW4gZHJhZnQtaWV0Zi10cmFtLXN0dW5iaXMtMTggYW5kIGRyYWZ0LWlldGYtDQog ICAgICB0cmFtLXN0dW5iaXMtMTcNCg0KICAgbyAgTml0cy4NCg0KQy41LiAgTW9kaWZpY2F0aW9u cyBiZXR3ZWVuIGRyYWZ0LWlldGYtdHJhbS1zdHVuYmlzLTE3IGFuZCBkcmFmdC1pZXRmLQ0KICAg ICAgdHJhbS1zdHVuYmlzLTE2DQoNCiAgIG8gIE1vZGlmaWNhdGlvbnMgZm9sbG93aW5nIElFU0cs IEdFTkFSVCBhbmQgU0VDRElSIHJldmlld3MuDQoNCkMuNi4gIE1vZGlmaWNhdGlvbnMgYmV0d2Vl biBkcmFmdC1pZXRmLXRyYW0tc3R1bmJpcy0xNiBhbmQgZHJhZnQtaWV0Zi0NCiAgICAgIHRyYW0t c3R1bmJpcy0xNQ0KDQogICBvICBSZXBsYWNlICJmYWlsdXJlIHJlc3BvbnNlIiB3aXRoICJlcnJv ciByZXNwb25zZSIuDQoNCiAgIG8gIEZpeCB3cm9uZyBzZWN0aW9uIG51bWJlci4NCg0KICAgbyAg VXNlICJVc2VybmFtZSBhbm9ueW1pdHkiIGV2ZXJ5d2hlcmUuDQoNCiAgIG8gIEFsaWduIHdpdGgg VVRGLTggZGVwcmVjYXRpb24uDQoNCiAgIG8gIEZpeCBNRVNTQUdFLUlOVEVHUklUWS0yNTYuDQoN CiAgIG8gIFVwZGF0ZSByZWZlcmVuY2VzLg0KDQogICBvICBVcGRhdGVzIGluIHRoZSBJQU5BIHNl Y3Rpb25zLg0KDQoNCg0KUGV0aXQtSHVndWVuaW4sIGV0IGFsLiBFeHBpcmVzIFNlcHRlbWJlciAy MiwgMjAxOSAgICAgICAgICAgICAgW1BhZ2UgNjVdDQoMDQpJbnRlcm5ldC1EcmFmdCBTZXNzaW9u IFRyYXZlcnNhbCBVdGlsaXRpZXMgZm9yIE5BVCAoU1RVTikgICAgIE1hcmNoIDIwMTkNCg0KDQog ICBvICBzL0hNQUMtU0hBLTEvSE1BQy1TSEExLywgcy9ITUFDLVNIQS0yNTYvSE1BQy1TSEEyNTYv LCBzL1NIQTEvU0hBLQ0KICAgICAgMS8sIGFuZCBzL1NIQTI1Ni9TSEEtMjU2Ly4NCg0KICAgbyAg Rml4ZWQgZGVmaW5pdGlvbnMgb2YgU1RVTiBjbGllbnRzL3NlcnZlcnMuDQoNCiAgIG8gIEZpeGVk IFNUVU4gbWVzc2FnZSBzdHJ1Y3R1cmUgZGVmaW5pdGlvbi4NCg0KICAgbyAgTWlzc2luZyB0ZXh0 Lg0KDQogICBvICBBZGQgdGV4dCBleHBsaWNpdGx5IHNheWluZyB0aGF0IHJlc3BvbnNlcyBkbyBu b3QgaGF2ZSB0byBiZSBpbiB0aGUNCiAgICAgIHNhbWUgb3JkZXJzIHRoYW4gcmVxdWVzdHMuDQoN CiAgIG8gIC9vdGhlciBhcHBsaWNhdGlvbi9vdGhlciBwcm90b2NvbC8NCg0KICAgbyAgQWRkIHRl eHQgZXhwbGljaXRseSBzYXlpbmcgdGhhdCB0aGUgc2VjdXJpdHkgZmVhdHVyZSBlbmNvZGluZyBp cyA0DQogICAgICBjaGFyYWN0ZXIuDQoNCiAgIG8gIEZpeGVkIGRpc2NyZXBhbmN5IGluIHNlY3Rp b24gOS4yLjMvOS4yLjMuMS4NCg0KICAgbyAgcy9pbnZhbGlkYXRlL3Jldm9rZS8uDQoNCiAgIG8g IFJlbW92ZWQgc2VudGVuY2VzIGFib3V0IGNoZWNraW5nIFVTRVJIQVNIIGluIHJlc3BvbnNlcywg YXMgdGhpcw0KICAgICAgc2hvdWxkIG5vdCBoYXBwZW4uDQoNCiAgIG8gIFNwZWNpZnkgdGhhdCBB TFRFUk5BVEUtU0VSVkVSIGNhcnJpZXMgYW4gSVAgYWRkcmVzcy4NCg0KICAgbyAgTW9yZSBtb2Rp ZmljYXRpb25zIGZvbGxvd2luZyByZXZpZXcuLi4NCg0KQy43LiAgTW9kaWZpY2F0aW9ucyBiZXR3 ZWVuIGRyYWZ0LWlldGYtdHJhbS1zdHVuYmlzLTE1IGFuZCBkcmFmdC1pZXRmLQ0KICAgICAgdHJh bS1zdHVuYmlzLTE0DQoNCiAgIG8gIFJldmVydGVkIHRoZSBSRkMgMjExOSBib2lsZXJwbGF0ZSB0 byB3aGF0IHdhcyBpbiBSRkMgNTM4OS4NCg0KICAgbyAgUmV2ZXJ0ZWQgdGhlIFYuNDIgcmVmZXJl bmNlIHRvIHRoZSAyMDAyIHZlcnNpb24uDQoNCiAgIG8gIFVwZGF0ZWQgc29tZSByZWZlcmVuY2Vz Lg0KDQpDLjguICBNb2RpZmljYXRpb25zIGJldHdlZW4gZHJhZnQtaWV0Zi10cmFtLXN0dW5iaXMt MTQgYW5kIGRyYWZ0LWlldGYtDQogICAgICB0cmFtLXN0dW5iaXMtMTMNCg0KICAgbyAgUmVvcmRl ciB0aGUgcGFyYWdyYXBocyBpbiBzZWN0aW9uIDkuMS40Lg0KDQogICBvICBUaGUgcmVhbG0gaXMg bm93IHByb2Nlc3NlZCB0aHJvdWdoIE9wYXF1ZSBpbiBzZWN0aW9uIDkuMi4yLg0KDQogICBvICBN YWtlIGNsZWFyIGluIHNlY3Rpb24gOS4yLjQgdGhhdCBpdCBpcyBhbiBleGNsdXNpdmUteG9yLg0K DQogICBvICBSZW1vdmVkIHRleHQgdGhhdCBpbXBsaWVkIHRoYXQgbm9uY2Ugc2hhcmluZyB3YXMg ZXhwbGljaXRseQ0KICAgICAgcGVybWl0dGVkIGluIFJGQyA1Mzg5Lg0KDQoNCg0KUGV0aXQtSHVn dWVuaW4sIGV0IGFsLiBFeHBpcmVzIFNlcHRlbWJlciAyMiwgMjAxOSAgICAgICAgICAgICAgW1Bh Z2UgNjZdDQoMDQpJbnRlcm5ldC1EcmFmdCBTZXNzaW9uIFRyYXZlcnNhbCBVdGlsaXRpZXMgZm9y IE5BVCAoU1RVTikgICAgIE1hcmNoIDIwMTkNCg0KDQogICBvICBJbiBzYW1lIHNlY3Rpb24sIHMv dXNlcm5hbWUvdmFsdWUvIGZvciBVU0VSQ0FTSC4NCg0KICAgbyAgTW9kaWZ5IHRoZSBJQU5BIHJl cXVlc3RzIHRvIGV4cGxpY2l0bHkgc2F5IHRoYXQgdGhlIHJlc2VydmVkDQogICAgICBjb2RlcG9p bnRzIHdlcmUgcHJpb3IgdG8gUkZDIDUzODkuDQoNCkMuOS4gIE1vZGlmaWNhdGlvbnMgYmV0d2Vl biBkcmFmdC1pZXRmLXRyYW0tc3R1bmJpcy0xMyBhbmQgZHJhZnQtaWV0Zi0NCiAgICAgIHRyYW0t c3R1bmJpcy0xMg0KDQogICBvICBVcGRhdGUgcmVmZXJlbmNlcy4NCg0KICAgbyAgRml4ZXMgc29t ZSB0ZXh0IGZvbGxvd2luZyBTaGVwaGVyZCByZXZpZXcuDQoNCiAgIG8gIFVwZGF0ZSBjby1hdXRo b3IgaW5mby4NCg0KQy4xMC4gIE1vZGlmaWNhdGlvbnMgYmV0d2VlbiBkcmFmdC1pZXRmLXRyYW0t c3R1bmJpcy0xMiBhbmQgZHJhZnQtaWV0Zi0NCiAgICAgICB0cmFtLXN0dW5iaXMtMTENCg0KICAg byAgQ2xhcmlmaWVzIHRoZSBwcm9jZWR1cmUgdG8gZGVmaW5lIGEgbmV3IGhhc2ggYWxnb3JpdGht IGZvcg0KICAgICAgbWVzc2FnZS1pbnRlZ3JpdHkuDQoNCiAgIG8gIEV4cGxhaW4gdGhlIHByb2Nl ZHVyZSB0byBkZXByZWNhdGUgU0hBMSBhcyBtZXNzYWdlLWludGVncml0eS4NCg0KICAgbyAgQWRk ZWQgcHJvY2VkdXJlIGZvciBIYXBweSBFeWViYWxscyAoUkZDIDY1NTUpLg0KDQogICBvICBBZGRl ZCB2ZXJpZmljYXRpb24gdGhhdCBIYXBweSBFeWViYWxscyB3b3JrcyBpbiB0aGUgU1RVTiBVc2Fn ZQ0KICAgICAgY2hlY2tsaXN0Lg0KDQogICBvICBBZGQgcmVmZXJlbmNlIHRvIEJhc2U2NCBSRkMu DQoNCiAgIG8gIENoYW5nZWQgY28tYXV0aG9yIGFmZmlsaWF0aW9uLg0KDQpDLjExLiAgTW9kaWZp Y2F0aW9ucyBiZXR3ZWVuIGRyYWZ0LWlldGYtdHJhbS1zdHVuYmlzLTExIGFuZCBkcmFmdC1pZXRm LQ0KICAgICAgIHRyYW0tc3R1bmJpcy0xMA0KDQogICBvICBNYWRlIGNsZWFyIHRoYXQgdGhlIHNh bWUgSE1BQyB0aGFuIHJlY2VpdmVkIGluIHJlc3BvbnNlIG9mIHNob3J0DQogICAgICB0ZXJtIGNy ZWRlbnRpYWwgbXVzdCBiZSB1c2VkIGZvciBzdWJzZXF1ZW50IHRyYW5zYWN0aW9ucy4NCg0KICAg byAgcy9VUkwvVVJJLw0KDQogICBvICBUaGUgIm5vbmNlIGNvb2tpZSIgaXMgbm93IG1hbmRhdG9y eSB0byBzaWduYWwgdGhhdCBTSEEyNTYgbXVzdCBiZQ0KICAgICAgdXNlZCBpbiB0aGUgbmV4dCB0 cmFuc2FjdGlvbi4NCg0KICAgbyAgcy9TSEExL1NIQTI1Ni8NCg0KICAgbyAgQ2hhbmdlZCBjby1h dXRob3IgYWZmaWxpYXRpb24uDQoNCg0KDQoNCg0KDQpQZXRpdC1IdWd1ZW5pbiwgZXQgYWwuIEV4 cGlyZXMgU2VwdGVtYmVyIDIyLCAyMDE5ICAgICAgICAgICAgICBbUGFnZSA2N10NCgwNCkludGVy bmV0LURyYWZ0IFNlc3Npb24gVHJhdmVyc2FsIFV0aWxpdGllcyBmb3IgTkFUIChTVFVOKSAgICAg TWFyY2ggMjAxOQ0KDQoNCkMuMTIuICBNb2RpZmljYXRpb25zIGJldHdlZW4gZHJhZnQtaWV0Zi10 cmFtLXN0dW5iaXMtMTAgYW5kIGRyYWZ0LWlldGYtDQogICAgICAgdHJhbS1zdHVuYmlzLTA5DQoN CiAgIG8gIFJlbW92ZWQgdGhlIHJlc2VydmVkIHZhbHVlIGluIHRoZSBzZWN1cml0eSByZWdpc3Ry eSwgYXMgaXQgZG9lcw0KICAgICAgbm90IG1ha2Ugc2Vuc2UgaW4gYSBiaXRzZXQuDQoNCiAgIG8g IFVwZGF0ZWQgY2hhbmdlIGxpc3QuDQoNCiAgIG8gIFVwZGF0ZWQgdGhlIG1pbmltdW0gdHJ1bmNh dGlvbiBzaXplIGZvciBNLUktMjU2IHRvIDE2IGJ5dGVzLg0KDQogICBvICBDaGFuZ2VkIHRoZSB0 cnVuY2F0aW9uIG9yZGVyIHRvIG1hdGNoIFJGQyA3NTE4Lg0KDQogICBvICBGaXhlZCBidWdzIGlu IHRydW5jYXRpb24gYm91bmRhcnkgdGV4dC4NCg0KICAgbyAgU3RhdGVkIHRoYXQgU1RVTiBVc2Fn ZXMgaGF2ZSB0byBleHBsaWNpdGx5IHN0YXRlIHRoYXQgdGhleSBjYW4gdXNlDQogICAgICB0cnVu Y2F0aW9uLg0KDQogICBvICBSZW1vdmVkIHRydW5jYXRpb24gZnJvbSB0aGUgTUVTU0FHRS1JTlRF R1JJVFkgYXR0cmlidXRlLg0KDQogICBvICBBZGQgcmVmZXJlbmNlIHRvIEMgY29kZSBpbiBSRkMg MTk1Mi4NCg0KICAgbyAgUmVwbGFjZWQgUkZDIDI4MTggcmVmZXJlbmNlIHRvIFJGQyA2MTI1Lg0K DQpDLjEzLiAgTW9kaWZpY2F0aW9ucyBiZXR3ZWVuIGRyYWZ0LWlldGYtdHJhbS1zdHVuYmlzLTA5 IGFuZCBkcmFmdC1pZXRmLQ0KICAgICAgIHRyYW0tc3R1bmJpcy0wOA0KDQogICBvICBQYWNrZXRz IGRpc2NhcmRlZCBpbiBhIHJlbGlhYmxlIG9yIHVucmVsaWFibGUgdHJhbnNhY3Rpb24gdHJpZ2dl cnMNCiAgICAgIGFuIGF0dGFjayBlcnJvciBpbnN0ZWFkIG9mIGEgdGltZW91dCBlcnJvci4gIEFu IGF0dGFjayBlcnJvciBvbiBhDQogICAgICByZWxpYWJsZSB0cmFuc3BvcnQgaXMgc2lnbmFsZWQg aW1tZWRpYXRlbHkgaW5zdGVhZCBvZiB3YWl0aW5nIGZvcg0KICAgICAgdGhlIHRpbWVvdXQuDQoN CiAgIG8gIEV4cGxpY2l0bHkgc3RhdGUgdGhhdCBhIHJlY2VpdmVkIDQwMCByZXNwb25zZSB3aXRo b3V0DQogICAgICBhdXRoZW50aWNhdGlvbiB3aWxsIGJlIGRyb3BwZWQgdW50aWwgdGltZW91dC4N Cg0KICAgbyAgQ2xhcmlmeSB0aGUgU0hPVUxEIG9taXQvaW5jbHVkZSBydWxlcyBpbiBMVENNLg0K DQogICBvICBJZiB0aGUgbm9uY2UgYW5kIHRoZSBobWFjIGFyZSBib3RoIGludmFsaWQsIHRoZW4g YSA0MDEgaXMgc2VudA0KICAgICAgaW5zdGVhZCBvZiBhIDQzOC4NCg0KICAgbyAgVGhlIDQwMSBh bmQgNDM4IGVycm9yIHJlc3BvbnNlIHRvIHN1YnNlcXVlbnQgcmVxdWVzdHMgbWF5IHVzZSB0aGUN CiAgICAgIHByZXZpb3VzIE5PTkNFL3Bhc3N3b3JkIHRvIGF1dGhlbnRpY2F0ZSwgaWYgdGhleSBh cmUgc3RpbGwNCiAgICAgIGF2YWlsYWJsZS4NCg0KICAgbyAgQ2hhbmdlICI0MDEgVW5hdXRob3Jp emVkIiB0byAiNDAxIFVuYXV0aGVudGljYXRlZCINCg0KICAgbyAgTWFrZSBjbGVhciB0aGF0IGlu IHNvbWUgY2FzZXMgaXQgaXMgaW1wb3NzaWJsZSB0byBhZGQgYSBNSSBvciBNSTINCiAgICAgIGV2 ZW4gaWYgdGhlIHRleHQgc2F5cyBTSE9VTEQgTk9ULg0KDQoNCg0KDQpQZXRpdC1IdWd1ZW5pbiwg ZXQgYWwuIEV4cGlyZXMgU2VwdGVtYmVyIDIyLCAyMDE5ICAgICAgICAgICAgICBbUGFnZSA2OF0N CgwNCkludGVybmV0LURyYWZ0IFNlc3Npb24gVHJhdmVyc2FsIFV0aWxpdGllcyBmb3IgTkFUIChT VFVOKSAgICAgTWFyY2ggMjAxOQ0KDQoNCkMuMTQuICBNb2RpZmljYXRpb25zIGJldHdlZW4gZHJh ZnQtaWV0Zi10cmFtLXN0dW5iaXMtMDggYW5kIGRyYWZ0LWlldGYtDQogICAgICAgdHJhbS1zdHVu YmlzLTA3DQoNCiAgIG8gIFVwZGF0ZWQgbGlzdCBvZiBjaGFuZ2VzIHNpbmNlIFJGQyA1Mzg5Lg0K DQogICBvICBNb3JlIGV4YW1wbGVzIGFyZSBhdXRvbWF0aWNhbGx5IGdlbmVyYXRlZC4NCg0KICAg byAgTWVzc2FnZSBpbnRlZ3JpdHkgdHJ1bmNhdGlvbiBpcyBmaXhlZCBhdCBhIG11bHRpcGxlIG9m IDQgYnl0ZXMsDQogICAgICBiZWNhdXNlIHRoZSBwYWRkaW5nIHdpbGwgbm90IGRlY3JlYXNlIGJ5 IG1vcmUgdGhhbiB0aGlzLg0KDQogICBvICBVU0VSSEFTSCBjb250YWlucyB0aGUgMzIgYnl0ZXMg b2YgdGhlIGhhc2gsIG5vdCBhIGNoYXJhY3Rlcg0KICAgICAgc3RyaW5nLg0KDQogICBvICBVcGRh dGVkIHRoZSBleGFtcGxlIHRvIHVzZSB0aGUgVVNFUkhBU0ggYXR0cmlidXRlIGFuZCB0aGUgbW9k aWZpZWQNCiAgICAgIE5PTkNFIGF0dHJpYnV0ZS4NCg0KICAgbyAgVXBkYXRlZCBJQ0ViaXMgcmVm ZXJlbmNlLg0KDQpDLjE1LiAgTW9kaWZpY2F0aW9ucyBiZXR3ZWVuIGRyYWZ0LWlldGYtdHJhbS1z dHVuYmlzLTA3IGFuZCBkcmFmdC1pZXRmLQ0KICAgICAgIHRyYW0tc3R1bmJpcy0wNg0KDQogICBv ICBBZGQgVVNFUkhBU0ggYXR0cmlidXRlIHRvIGNhcnJ5IHRoZSBoYXNoZWQgdmVyc2lvbiBvZiB0 aGUNCiAgICAgIHVzZXJuYW1lLg0KDQogICBvICBBZGQgSUFOQSByZWdpc3RyeSBhbmQgbm9uY2Ug ZW5jb2RpbmcgZm9yIFNlY3VyaXR5IEZlYXR1cmVzIHRoYXQNCiAgICAgIG5lZWQgdG8gYmUgcHJv dGVjdGVkIGZyb20gYmlkLWRvd24gYXR0YWNrcy4NCg0KICAgbyAgTW9kaWZpZWQgTUVTU0FHRS1J TlRFR1JJVFkgYW5kIE1FU1NBR0UtSU5URUdSSVRZLVNIQTI1NiB0byBzdXBwb3J0DQogICAgICB0 cnVuY2F0aW9uIGxpbWl0cyAocGVuZGluZyBjcnlwdG9ncmFwaGljIHJldmlldyksDQoNCkMuMTYu ICBNb2RpZmljYXRpb25zIGJldHdlZW4gZHJhZnQtaWV0Zi10cmFtLXN0dW5iaXMtMDYgYW5kIGRy YWZ0LWlldGYtDQogICAgICAgdHJhbS1zdHVuYmlzLTA1DQoNCiAgIG8gIENoYW5nZWQgSS1EIHJl ZmVyZW5jZXMgdG8gUkZDIHJlZmVyZW5jZXMuDQoNCiAgIG8gIENoYW5nZWQgQ0hBTkdFLUFERFJF U1MgdG8gQ0hBTkdFLVJFUVVFU1QgKEVycmF0YSAjNDIzMykuDQoNCiAgIG8gIEFkZGVkIHRlc3Qg dmVjdG9yIGZvciBNRVNTQUdFLUlOVEVHUklUWS1TSEEyNTYuDQoNCiAgIG8gIEFkZHJlc3MgYWRk aXRpb25hbCByZXZpZXcgY29tbWVudHMgZnJvbSBKb25hdGhhbiBMZW5ub3ggYW5kDQogICAgICBC cmFuZG9uIFdpbGxpYW1zLg0KDQpDLjE3LiAgTW9kaWZpY2F0aW9ucyBiZXR3ZWVuIGRyYWZ0LWll dGYtdHJhbS1zdHVuYmlzLTA1IGFuZCBkcmFmdC1pZXRmLQ0KICAgICAgIHRyYW0tc3R1bmJpcy0w NA0KDQogICBvICBBZGRyZXNzIHJldmlldyBjb21tZW50cyBmcm9tIEpvbmF0aGFuIExlbm5veCBh bmQgQnJhbmRvbiBXaWxsaWFtcy4NCg0KDQoNCg0KDQpQZXRpdC1IdWd1ZW5pbiwgZXQgYWwuIEV4 cGlyZXMgU2VwdGVtYmVyIDIyLCAyMDE5ICAgICAgICAgICAgICBbUGFnZSA2OV0NCgwNCkludGVy bmV0LURyYWZ0IFNlc3Npb24gVHJhdmVyc2FsIFV0aWxpdGllcyBmb3IgTkFUIChTVFVOKSAgICAg TWFyY2ggMjAxOQ0KDQoNCkMuMTguICBNb2RpZmljYXRpb25zIGJldHdlZW4gZHJhZnQtaWV0Zi10 cmFtLXN0dW5iaXMtMDQgYW5kIGRyYWZ0LWlldGYtDQogICAgICAgdHJhbS1zdHVuYmlzLTAzDQoN CiAgIG8gIFJlbW92ZSBTQ1RQLg0KDQogICBvICBSZW1vdmUgREFORS4NCg0KICAgbyAgcy9NRVNT QUdFLUlOVEVHUklUWTIvTUVTU0FHRS1JTlRFR1JJVFktU0hBMjU2Lw0KDQogICBvICBSZW1vdmUg U2FsdGVkIFNIQTI1NiBwYXNzd29yZCBoYXNoLg0KDQogICBvICBUaGUgUlRPIGRlbGF5IGJldHdl ZW4gdHJhbnNhY3Rpb25zIGlzIHJlbW92ZWQuDQoNCiAgIG8gIE1ha2UgY2xlYXIgdGhhdCByZXVz aW5nIE5PTkNFIHdpbGwgdHJpZ2dlciBhIHdhc3RlZCByb3VuZCB0cmlwLg0KDQpDLjE5LiAgTW9k aWZpY2F0aW9ucyBiZXR3ZWVuIGRyYWZ0LWlldGYtdHJhbS1zdHVuYmlzLTAzIGFuZCBkcmFmdC1p ZXRmLQ0KICAgICAgIHRyYW0tc3R1bmJpcy0wMg0KDQogICBvICBTQ1RQIHByZWZpeCBpcyBub3cg MGIwMDAwMDEwMSBpbnN0ZWFkIG9mIDB4MTEuDQoNCiAgIG8gIEFkZCBTQ1RQIGF0IHZhcmlvdXMg cGxhY2VzIGl0IHdhcyBuZWVkZWQuDQoNCiAgIG8gIFVwZGF0ZSB0aGUgaGFzaCBhZ2lsaXR5IHBs YW4gdG8gdGFrZSBpbiBhY2NvdW50IEhNQUMtU0hBLTI1Ni4NCg0KICAgbyAgQWRkcyB0aGUgYmlk LWRvd24gYXR0YWNrIG9uIG1lc3NhZ2UtaW50ZWdyaXR5IGluIHRoZSBzZWN1cml0eQ0KICAgICAg c2VjdGlvbi4NCg0KQy4yMC4gIE1vZGlmaWNhdGlvbnMgYmV0d2VlbiBkcmFmdC1pZXRmLXRyYW0t c3R1bmJpcy0wMiBhbmQgZHJhZnQtaWV0Zi0NCiAgICAgICB0cmFtLXN0dW5iaXMtMDENCg0KICAg byAgU1RVTiBoYXNoIGFsZ29yaXRobSBhZ2lsaXR5IChjdXJyZW50bHkgb25seSBTSEEtMSBpcyBh bGxvd2VkKS4NCg0KICAgbyAgQ2xhcmlmeSB0ZXJtaW5vbG9neSwgdGV4dCBhbmQgZ3VpZGFuY2Ug Zm9yIFNUVU4gZnJhZ21lbnRhdGlvbi4NCg0KICAgbyAgQ2xhcmlmeSB3aGV0aGVyIGl0J3MgdmFs aWQgdG8gc2hhcmUgbm9uY2VzIGFjcm9zcyBUVVJODQogICAgICBhbGxvY2F0aW9ucy4NCg0KICAg byAgUHJldmVudCB0aGUgc2VydmVyIHRvIGFsbG9jYXRlIHRoZSBzYW1lIE5PTkNFIHRvIGNsaWVu dHMgd2l0aA0KICAgICAgZGlmZmVyZW50IElQIGFkZHJlc3MgYW5kL29yIGRpZmZlcmVudCBwb3J0 LiAgVGhpcyBwcmV2ZW50IHNoYXJpbmcNCiAgICAgIHRoZSBub25jZSBiZXR3ZWVuIFRVUk4gYWxs b2NhdGlvbnMgaW4gVFVSTi4NCg0KICAgbyAgQWRkIHJlZmVyZW5jZSB0byBkcmFmdC1pZXRmLXV0 YS10bHMtYmNwDQoNCiAgIG8gIEFkZCBhIG5ldyBhdHRyaWJ1dGUgQUxURVJOQVRFLURPTUFJTiB0 byB2ZXJpZnkgdGhlIGNlcnRpZmljYXRlIG9mDQogICAgICB0aGUgQUxURVJOQVRFLVNFUlZFUiBh ZnRlciBhIDMwMCBvdmVyIChEKVRMUy4NCg0KICAgbyAgVGhlIFJUUCBkZWxheSBiZXR3ZWVuIHRy YW5zYWN0aW9ucyBhcHBsaWVzIG9ubHkgdG8gcGFyYWxsZWwNCiAgICAgIHRyYW5zYWN0aW9ucywg bm90IHRvIHNlcmlhbCB0cmFuc2FjdGlvbnMuICBUaGF0IHByZXZlbnRzIGEgM1JUVA0KDQoNCg0K UGV0aXQtSHVndWVuaW4sIGV0IGFsLiBFeHBpcmVzIFNlcHRlbWJlciAyMiwgMjAxOSAgICAgICAg ICAgICAgW1BhZ2UgNzBdDQoMDQpJbnRlcm5ldC1EcmFmdCBTZXNzaW9uIFRyYXZlcnNhbCBVdGls aXRpZXMgZm9yIE5BVCAoU1RVTikgICAgIE1hcmNoIDIwMTkNCg0KDQogICAgICBkZWxheSBiZXR3 ZWVuIHRoZSBmaXJzdCB0cmFuc2FjdGlvbiBhbmQgdGhlIHNlY29uZCB0cmFuc2FjdGlvbg0KICAg ICAgd2l0aCBsb25nIHRlcm0gYXV0aGVudGljYXRpb24uDQoNCiAgIG8gIEFkZCB0ZXh0IHNheWlu ZyBPUklHSU4gY2FuIGluY3JlYXNlIGEgcmVxdWVzdCBzaXplIGJleW9uZCB0aGUgTVRVDQogICAg ICBhbmQgc28gcmVxdWlyZSBhbiBTQ1RQb1VEUCB0cmFuc3BvcnQuDQoNCiAgIG8gIE1vdmUgdGhl IEFja25vd2xlZGdtZW50cyBhbmQgQ29udHJpYnV0b3Igc2VjdGlvbnMgdG8gdGhlIGVuZCBvZg0K ICAgICAgdGhlIGRvY3VtZW50LCBpbiBhY2NvcmRhbmNlIHdpdGggUkZDIDczMjIgc2VjdGlvbiA0 Lg0KDQpDLjIxLiAgTW9kaWZpY2F0aW9ucyBiZXR3ZWVuIGRyYWZ0LWlldGYtdHJhbS1zdHVuYmlz LTAxIGFuZCBkcmFmdC1pZXRmLQ0KICAgICAgIHRyYW0tc3R1bmJpcy0wMA0KDQogICBvICBBZGQg bmVnb3RpYXRpb24gbWVjaGFuaXNtIGZvciBuZXcgcGFzc3dvcmQgYWxnb3JpdGhtcy4NCg0KICAg byAgRGVzY3JpYmUgdGhlIE1FU1NBR0UtSU5URUdSSVRZL01FU1NBR0UtSU5URUdSSVRZMiBwcm90 b2NvbC4NCg0KICAgbyAgQWRkIHN1cHBvcnQgZm9yIFNDVFAgdG8gc29sdmUgdGhlIGZyYWdtZW50 YXRpb24gcHJvYmxlbS4NCg0KICAgbyAgTWVyZ2UgUkZDIDczNTA6DQoNCiAgICAgICogIFNwbGl0 IHRoZSAiU2VuZGluZyBvdmVyLi4uIiBzZWN0aW9ucyBpbiAzLg0KDQogICAgICAqICBBZGQgRFRM Uy1vdmVyLVVEUCBhcyB0cmFuc3BvcnQuDQoNCiAgICAgICogIFVwZGF0ZSB0aGUgY2lwaGVyIHN1 aXRlcyBhbmQgY2lwaGVyL2NvbXByZXNzaW9uIHJlc3RyaWN0aW9ucy4NCg0KICAgICAgKiAgQSBz dHVucyB1cmkgd2l0aCBhbiBJUCBhZGRyZXNzIGlzIHJlamVjdGVkLg0KDQogICAgICAqICBSZXBs YWNlIG1vc3Qgb2YgdGhlIFJGQyAzNDg5IGNvbXBhdGliaWxpdHkgYnkgYSByZWZlcmVuY2UgdG8N CiAgICAgICAgIHRoZSBzZWN0aW9uIGluIFJGQyA1Mzg5Lg0KDQogICAgICAqICBVcGRhdGUgdGhl IFNUVU4gVXNhZ2VzIGxpc3Qgd2l0aCB0cmFuc3BvcnQgYXBwbGljYWJpbGl0eS4NCg0KICAgbyAg TWVyZ2UgUkZDIDcwNjQ6DQoNCiAgICAgICogIEROUyBkaXNjb3ZlcnkgaXMgZG9uZSBmcm9tIHRo ZSBVUkkuDQoNCiAgICAgICogIFJlb3JnYW5pemVkIHRoZSB0ZXh0IGFib3V0IGRlZmF1bHQgcG9y dHMuDQoNCiAgIG8gIEFkZCBtb3JlIEMgc25pcHBldHMuDQoNCiAgIG8gIE1ha2UgY2xlYXIgdGhh dCB0aGUgY2FjaGVkIFJUTyBpcyBkaXNjYXJkZWQgb25seSBpZiB0aGVyZSBpcyBubw0KICAgICAg bmV3IHRyYW5zbGF0aW9ucyBmb3IgMTAgbWludXRlcy4NCg0KDQoNCg0KDQoNCg0KDQpQZXRpdC1I dWd1ZW5pbiwgZXQgYWwuIEV4cGlyZXMgU2VwdGVtYmVyIDIyLCAyMDE5ICAgICAgICAgICAgICBb UGFnZSA3MV0NCgwNCkludGVybmV0LURyYWZ0IFNlc3Npb24gVHJhdmVyc2FsIFV0aWxpdGllcyBm b3IgTkFUIChTVFVOKSAgICAgTWFyY2ggMjAxOQ0KDQoNCkMuMjIuICBNb2RpZmljYXRpb25zIGJl dHdlZW4gZHJhZnQtc2FsZ3VlaXJvLXRyYW0tc3R1bmJpcy0wMiBhbmQgZHJhZnQtDQogICAgICAg aWV0Zi10cmFtLXN0dW5iaXMtMDANCg0KICAgbyAgRHJhZnQgYWRvcHRlZCBhcyBXRyBpdGVtLg0K DQpDLjIzLiAgTW9kaWZpY2F0aW9ucyBiZXR3ZWVuIGRyYWZ0LXNhbGd1ZWlyby10cmFtLXN0dW5i aXMtMDIgYW5kIGRyYWZ0LQ0KICAgICAgIHNhbGd1ZWlyby10cmFtLXN0dW5iaXMtMDENCg0KICAg byAgQWRkIGRlZmluaXRpb24gb2YgTUVTU0FHRS1JTlRFR1JJVFkyLg0KDQogICBvICBVcGRhdGUg dGV4dCBhbmQgcmVmZXJlbmNlIGZyb20gUkZDIDI5ODggdG8gUkZDIDYyOTguDQoNCiAgIG8gIHMv VGhlIElBQiBoYXMgbWFuZGF0ZWQvVGhlIElBQiBoYXMgc3VnZ2VzdGVkLyAoRXJyYXRhICMzNzM3 KS4NCg0KICAgbyAgRml4IHRoZSBmaWd1cmUgZm9yIHRoZSBVTktOT1dOLUFUVFJJQlVURVMgKEVy cmF0YSAjMjk3MikuDQoNCiAgIG8gIEZpeCBzZWN0aW9uIG51bWJlciBhbmQgbWFrZSBjbGVhciB0 aGF0IHRoZSBvcmlnaW5hbCBkb21haW4gbmFtZSBpcw0KICAgICAgdXNlZCBmb3IgdGhlIHNlcnZl ciBjZXJ0aWZpY2F0ZSB2ZXJpZmljYXRpb24uICBUaGlzIGlzIGNvbnNpc3RlbnQNCiAgICAgIHdp dGggd2hhdCBSRkMgNTkyMiAoc2VjdGlvbiA0KSBpcyBkb2luZy4gIChFcnJhdGEgIzIwMTApDQoN CiAgIG8gIFJlbW92ZSB0ZXh0IHRyYW5zaXRpb25pbmcgZnJvbSBSRkMgMzQ4OS4NCg0KICAgbyAg QWRkIGRlZmluaXRpb24gb2YgTUVTU0FHRS1JTlRFR1JJVFkyLg0KDQogICBvICBVcGRhdGUgdGV4 dCBhbmQgcmVmZXJlbmNlIGZyb20gUkZDIDI5ODggdG8gUkZDIDYyOTguDQoNCiAgIG8gIHMvVGhl IElBQiBoYXMgbWFuZGF0ZWQvVGhlIElBQiBoYXMgc3VnZ2VzdGVkLyAoRXJyYXRhICMzNzM3KS4N Cg0KICAgbyAgRml4IHRoZSBmaWd1cmUgZm9yIHRoZSBVTktOT1dOLUFUVFJJQlVURVMgKEVycmF0 YSAjMjk3MikuDQoNCiAgIG8gIEZpeCBzZWN0aW9uIG51bWJlciBhbmQgbWFrZSBjbGVhciB0aGF0 IHRoZSBvcmlnaW5hbCBkb21haW4gbmFtZSBpcw0KICAgICAgdXNlZCBmb3IgdGhlIHNlcnZlciBj ZXJ0aWZpY2F0ZSB2ZXJpZmljYXRpb24uICBUaGlzIGlzIGNvbnNpc3RlbnQNCiAgICAgIHdpdGgg d2hhdCBSRkMgNTkyMiAoc2VjdGlvbiA0KSBpcyBkb2luZy4gIChFcnJhdGEgIzIwMTApDQoNCkMu MjQuICBNb2RpZmljYXRpb25zIGJldHdlZW4gZHJhZnQtc2FsZ3VlaXJvLXRyYW0tc3R1bmJpcy0w MSBhbmQgZHJhZnQtDQogICAgICAgc2FsZ3VlaXJvLXRyYW0tc3R1bmJpcy0wMA0KDQogICBvICBS ZXN0b3JlIHRoZSBSRkMgNTM4OSB0ZXh0Lg0KDQogICBvICBBZGQgbGlzdCBvZiBvcGVuIGlzc3Vl cy4NCg0KQWNrbm93bGVkZ2VtZW50cw0KDQogICBUaGFua3MgdG8gTWljaGFlbCBUdWV4ZW4sIFRp cnVtYWxlc3dhciBSZWRkeSwgT2xlZyBNb3NrYWxlbmtvLCBTaW1vbg0KICAgUGVycmVhdWx0LCBC ZW5qYW1pbiBTY2h3YXJ0eiwgUmlmYWF0IFNoZWtoLVl1c2VmLCBBbGFuIEpvaG5zdG9uLA0KICAg Sm9uYXRoYW4gTGVubm94LCBCcmFuZG9uIFdpbGxpYW1zLCBPbGxlIEpvaGFuc3NvbiwgTWFydGlu IFRob21zb24sDQogICBNaWhhbHkgTWVzemFyb3MsIFRvbGdhIEFzdmVyZW4sIE5vcml5dWtpIFRv cmlpLCBTcGVuY2VyIERhd2tpbnMsIERhbGUNCiAgIFdvcmxleSwgTWF0dGhldyBNaWxsZXIsIFBl dGVyIFNhaW50LUFuZHJlLCBKdWxpZW4gRWxpZSwgTWlyamENCg0KDQoNClBldGl0LUh1Z3Vlbmlu LCBldCBhbC4gRXhwaXJlcyBTZXB0ZW1iZXIgMjIsIDIwMTkgICAgICAgICAgICAgIFtQYWdlIDcy XQ0KDA0KSW50ZXJuZXQtRHJhZnQgU2Vzc2lvbiBUcmF2ZXJzYWwgVXRpbGl0aWVzIGZvciBOQVQg KFNUVU4pICAgICBNYXJjaCAyMDE5DQoNCg0KICAgS3VlaGxld2luZCwgRXJpYyBSZXNjb3JsYSwg QmVuIENhbXBiZWxsLCBBZGFtIFJvYWNoLCBBbGV4ZXkgTWVsbmlrb3YsDQogICBhbmQgQmVuamFt aW4gS2FkdWsgZm9yIHRoZSBjb21tZW50cywgc3VnZ2VzdGlvbnMsIGFuZCBxdWVzdGlvbnMgdGhh dA0KICAgaGVscGVkIGltcHJvdmUgdGhpcyBkb2N1bWVudC4NCg0KICAgVGhlIGF1dGhvcnMgb2Yg UkZDIDUzODkgd291bGQgbGlrZSB0byB0aGFuayBDZWRyaWMgQW91biwgUGV0ZQ0KICAgQ29yZGVs bCwgQ3VsbGVuIEplbm5pbmdzLCBCb2IgUGVuZmllbGQsIFhhdmllciBNYXJqb3UsIE1hZ251cw0K ICAgV2VzdGVybHVuZCwgTWlndWVsIEdhcmNpYSwgQnJ1Y2UgTG93ZWthbXAsIGFuZCBDaHJpcyBT dWxsaXZhbiBmb3INCiAgIHRoZWlyIGNvbW1lbnRzLCBhbmQgQmFydWNoIFN0ZXJtYW4gYW5kIEFs YW4gSGF3cnlseXNoZW4gZm9yIGluaXRpYWwNCiAgIGltcGxlbWVudGF0aW9ucy4gIFRoYW5rcyBm b3IgTGVzbGllIERhaWdsZSwgQWxsaXNvbiBNYW5raW4sIEVyaWMNCiAgIFJlc2NvcmxhLCBhbmQg SGVubmluZyBTY2h1bHpyaW5uZSBmb3IgSUVTRyBhbmQgSUFCIGlucHV0IG9uIHRoaXMNCiAgIHdv cmsuDQoNCkNvbnRyaWJ1dG9ycw0KDQogICBDaHJpc3RpYW4gSHVpdGVtYSBhbmQgSm9lbCBXZWlu YmVyZ2VyIHdlcmUgb3JpZ2luYWwgY28tYXV0aG9ycyBvZiBSRkMNCiAgIDM0ODkuDQoNCkF1dGhv cnMnIEFkZHJlc3Nlcw0KDQogICBNYXJjIFBldGl0LUh1Z3VlbmluDQogICBJbXBlZGFuY2UgTWlz bWF0Y2gNCg0KICAgRW1haWw6IG1hcmNAcGV0aXQtaHVndWVuaW4ub3JnDQoNCg0KICAgR29uemFs byBTYWxndWVpcm8NCiAgIENpc2NvDQogICA3MjAwLTEyIEtpdCBDcmVlayBSb2FkDQogICBSZXNl YXJjaCBUcmlhbmdsZSBQYXJrLCBOQyAgMjc3MDkNCiAgIFVTDQoNCiAgIEVtYWlsOiBnc2FsZ3Vl aUBjaXNjby5jb20NCg0KDQogICBKb25hdGhhbiBSb3NlbmJlcmcNCiAgIEZpdmU5DQogICBFZGlz b24sIE5KDQogICBVUw0KDQogICBFbWFpbDogamRyb3NlbkBqZHJvc2VuLm5ldA0KICAgVVJJOiAg IGh0dHA6Ly93d3cuamRyb3Nlbi5uZXQNCg0KDQogICBEYW4gV2luZw0KDQogICBFbWFpbDogZHdp bmctaWV0ZkBmdWdnbGVzLmNvbQ0KDQoNCg0KDQoNClBldGl0LUh1Z3VlbmluLCBldCBhbC4gRXhw aXJlcyBTZXB0ZW1iZXIgMjIsIDIwMTkgICAgICAgICAgICAgIFtQYWdlIDczXQ0KDA0KSW50ZXJu ZXQtRHJhZnQgU2Vzc2lvbiBUcmF2ZXJzYWwgVXRpbGl0aWVzIGZvciBOQVQgKFNUVU4pICAgICBN YXJjaCAyMDE5DQoNCg0KICAgUm9oYW4gTWFoeQ0KICAgVW5hZmZpbGlhdGVkDQoNCiAgIEVtYWls OiByb2hhbi5pZXRmQGdtYWlsLmNvbQ0KDQoNCiAgIFBoaWxpcCBNYXR0aGV3cw0KICAgTm9raWEN CiAgIDYwMCBNYXJjaCBSb2FkDQogICBPdHRhd2EsIE9udGFyaW8gIEsySyAyVDYNCiAgIENhbmFk YQ0KDQogICBQaG9uZTogNjEzLTc4NC0zMTM5DQogICBFbWFpbDogcGhpbGlwX21hdHRoZXdzQG1h Z21hLmNhDQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoN Cg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoNClBldGl0LUh1Z3VlbmluLCBldCBhbC4gRXhwaXJlcyBT ZXB0ZW1iZXIgMjIsIDIwMTkgICAgICAgICAgICAgIFtQYWdlIDc0XQ0K --_004_9ED47E64EC5343FB8EAD128E81205EF4ciscocom_-- From nobody Thu Mar 21 11:58:18 2019 Return-Path: X-Original-To: tram@ietfa.amsl.com Delivered-To: tram@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 38DC5131239 for ; Thu, 21 Mar 2019 11:58:16 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.899 X-Spam-Level: X-Spam-Status: No, score=-1.899 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_MED=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, URIBL_BLOCKED=0.001] autolearn=unavailable autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=rtfm-com.20150623.gappssmtp.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id yM3UPBt5KwPJ for ; Thu, 21 Mar 2019 11:58:09 -0700 (PDT) Received: from mail-lj1-x22a.google.com (mail-lj1-x22a.google.com [IPv6:2a00:1450:4864:20::22a]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id B934C131204 for ; Thu, 21 Mar 2019 11:58:08 -0700 (PDT) Received: by mail-lj1-x22a.google.com with SMTP id f23so6266132ljc.0 for ; Thu, 21 Mar 2019 11:58:08 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=rtfm-com.20150623.gappssmtp.com; s=20150623; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=c7uJQhhE+Zm2t2Drxm3ck3WB4AxNgstA36+i7TMY8nM=; b=FvT0x4yUS4V8CZDXTRUd0r/Lj8NGUKqXs4q4bDQgwtGnnSVEFqrObUIdF4JsAwOrWg 4hFebc7XdKxxRJrbQLOOWcv9RRCFeic/GMxXx//Y5DFaC5hU4/T0s1kCN/8Yxwf82TP8 IpM+efeViZBl83V/GK1DZ7nEkp+5vDe0z60VjdqrI9GkAd3AJ2fJ2IXNC5GCZXWP/M0O LLn+6tC7Bry+4OmENM/u+OmeTwWy+4Wgf3c8885JjX6sDzZ6kCuY/0HoDmV19Xxh1iOS fMFHIZapr3oogj5VXt1xRCZBgWbDrg3B0wrTPw8Is2j+uPpskqGfnnJzAXoUN/FO6ElR pQ0Q== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=c7uJQhhE+Zm2t2Drxm3ck3WB4AxNgstA36+i7TMY8nM=; b=m+9IXWre+kfiBkcSTODlIIedN9kgqLA1QBWA29ZDINA96zGkR2yQJ6hnoMvWvr2/4z FO9uBU64Yp6kdsKi/rena9qJ4qLL6Mpq/BNBd+O0z96LRzFdnhyYgGgvDfZk2g7zGVed NhhaBS4zpL8ybAc0W8aJzxoq6bwV5WKMkOzKh3yIGBkJICbzEAtj6D30k9BZ/qaeHIjO fkP145ctR2dhU8/bjcATPW9s+x/oijz9MlGUSbwxjQUA2JLxnxXvGJ1H9DoaeGAdR6M2 0H4xhvbX8r6n+QbRe79pSevU8Pqova6VTMC7OsHLwl8STnhsT1/HuMkjF89YFLZ0vxHu 2dYQ== X-Gm-Message-State: APjAAAU7zLeGupJJwAEdDlBkfFWWkGsko0+GpUQg4yK3Bnnsu1erGYSm lpqBl5n66e+/wzTQZi+72lclyC0hXcNByKPcE0FQzw== X-Google-Smtp-Source: APXvYqwqK9gdU1JpcCfgy2p9ibnm9rTUSKUAjK8Enfa2qD1kpOAz6q1zEFc2MWbN6XGk8tQu7YMe293u1vrnqYOhVlY= X-Received: by 2002:a2e:8905:: with SMTP id d5mr2615930lji.59.1553194686511; Thu, 21 Mar 2019 11:58:06 -0700 (PDT) MIME-Version: 1.0 References: <152390863222.19652.10310304989315386136.idtracker@ietfa.amsl.com> <472563ee-5fc3-655d-8e31-138cc774e608@acm.org> <97c561a7-c33a-6121-00c4-09cd11646b98@ericsson.com> <4b8f10f7-1eee-c8bc-d9ee-e3f18473de32@ericsson.com> <9ED47E64-EC53-43FB-8EAD-128E81205EF4@cisco.com> In-Reply-To: <9ED47E64-EC53-43FB-8EAD-128E81205EF4@cisco.com> From: Eric Rescorla Date: Thu, 21 Mar 2019 11:57:28 -0700 Message-ID: To: "Gonzalo Salgueiro (gsalguei)" Cc: Spencer Dawkins at IETF , "tram-chairs@ietf.org" , "tram@ietf.org" , IESG , "draft-ietf-tram-stunbis@ietf.org" Content-Type: multipart/alternative; boundary="0000000000008e8fc905849f5140" Archived-At: Subject: Re: [tram] Eric Rescorla's Discuss on draft-ietf-tram-stunbis-16: (with DISCUSS and COMMENT) X-BeenThere: tram@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "Discussing the creation of a Turn Revised And Modernized \(TRAM\) WG, which goal is to consolidate the various initiatives to update TURN and STUN." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 21 Mar 2019 18:58:16 -0000 --0000000000008e8fc905849f5140 Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable Spencer, why don't; you override it and then I can take a final look On Thu, Mar 21, 2019 at 11:22 AM Gonzalo Salgueiro (gsalguei) < gsalguei@cisco.com> wrote: > Hi Eric - > > I=E2=80=99m attaching the -21 that will be published once the I-D submiss= ion tool > opens up (or Spencer can override and it published before then). It uses > your proposed bid down protection disclaimer text (save for minor nits I > cleaned up). > > If this looks good then from my perspective we are done and your DISCUSS > can be cleared and we can proceed with publication. > > Thanks for all your help. > > Cheers, > > Gonzalo > > > On Mar 20, 2019, at 3:57 PM, Eric Rescorla wrote: > > Gonzalo, > > This text still seems to me to need some work. Here is a revised version. > > SHA-256 was chosen as the new default for password > hashing for its compability with RFC 7616 but because SHA-256 (like > MD5) is a comparatively fast algorithm, it does little to deter > brute force attacks. Specifically, this means that if the > user has a weak password: > > * An attacker who captures the server's password file can often > determine the user's password and thus impersonate the user > to other servers where they have used that password. Note that > such an attacker can impersonate the user to the server itself > without any brute force attack. > > * An attacker who captures a single exchange can brute force > the user's password and thus potentially impersonate the > user to the server and other servers where they have used > the same pasword. > > A stronger (which is to say slower) algorithm, like Argon2 > [I-D.irtf-cfrg-argon2], would help both of these cases, but in the > case of the first attack, only after until the database entry for this > user is updated to exclusively use that stronger mechanism. > > The bid-down defenses in this protocol prevent an attacker from > forcing the client and server to complete a handshake using weaker > algorithms than they jointly support, but only if the weakest joint > algorithm is strong enough that it cannot be brute-forced. However, > this does not defend against many attacks on those algorithms; > specifically, an on-path attacker might perform a bid-down attack on a > client which supported both Argon2 and SHA-256 for password hashing > and use that to collect a MESSAGE-INTEGRITY-SHA256 value which it uses > for an offline brute-force attack. This would be detected when the > server receives the second request, but that does not prevent the > attacker from obtaining the MESSAGE-INTEGRITY-SHA256 value. > > Similarly, an attack against the USERHASH mechanism will not succeed > in establishing a session as the server will detect that the feature > was discarded on-path, but the client would still have been convinced > to send its username in clear in the USERNAME attribute, thus > disclosing it to the attacker. > > -Ekr > > > On Mon, Mar 18, 2019 at 6:37 PM Gonzalo Salgueiro (gsalguei) < > gsalguei@cisco.com> wrote: > > Thanks, Spencer. In the interest of expeditiousness I=E2=80=99ve emailed= Eric to > review the newly published -20 to ensure it addresses his DISCUSS points. > Hoping to get this done before Eric steps down as AD. > > Cheers, > > Gonzalo > > > > > On Mar 18, 2019, at 9:27 PM, Spencer Dawkins at IETF < > spencerdawkins.ietf@gmail.com> wrote: > > > > Dear All, > > > >> On Fri, Mar 8, 2019 at 8:10 PM Eric Rescorla wrote: > >> > >> Thanks for the call yesterday. > >> > > > > Thanks to all for moving this specification forward. > > > > If the current conversation turns out to converge on this topic before > next > > Wednesday, I'm happy to approve a revised draft after Eric clears his > > Discuss. > > > > If I can help in any way, please let me know. > > > > Spencer > > > > > >> > >> First, here is what I recommend for the question of SHA-256 for passwo= rd > >> hashing: > >> > >> Note: the use of SHA-256 for password hashing does not meet modern > >> standards, which are aimed at slowing down exhaustive password search > >> by providing a relatively slow minimum time to compute the > >> hash. Although better algorithms such as Argon2 > >> [https://datatracker.ietf.org/doc/draft-irtf-cfrg-argon2/] are > >> available, SHA-256 was chosen for consistency with RFC 7616. > >> > >> > >> Now, WRT to the anti-downgrade situation. Here's a stylized version > >> of the protocol: > >> > >> Client Server > >> > >> Hello -> > >> <- Nonce, Algorithms > >> HMAC-H1(H2(Password), Nonce, Algorithms, Msg) -> > >> <- HMAC-H1(H2(Password), ...) > >> > >> Where H1 and H2 are the HMAC hash functions and the password hashing > >> function respectively. > >> > >> Now, if we assume that the attacker does not know Password and that > >> both H1 and H2 are secure, then it is not possible for the attacker to > >> complete the transaction or modify any of the messages. Further, if > >> the weakest joint algorithm that both sides support is still strong, > >> then an attacker cannot influence the algorithm negotiation [0]. This > >> property is provided by covering the algorithms under the MAC. > >> > >> However, my point is that this is not a very useful property. > >> > >> First, consider the case in which the implementations jointly support > >> one strong algorithm and one weak algorithm. E.g., for H1 they support > >> SHA-256 and the function Z(x) which always emits 0s. This allows > >> an attacker to force the client and server into using Z, as follows. > >> > >> > >> Client Attacker Server > >> > >> Hello -> > >> Hello -> > >> <- Nonce, Alg=3DSHA256, Z > >> <- Nonce, Alg=3DZ > >> Z(H2(Password), Nonce, Alg=3DZ)) -> > >> Z(H2(Password), Nonce, Alg=3DSHA256, Z)) > >> > >> The issue here is that the only thing that the MAC is doing is > >> authenticating the transaction, and if you can't trust it to do that, > >> you can't trust it to authenticate the bid-down defense either. > >> > >> > >> During our discussion, there was a suggestion that it was useful to > >> have biddown defense to defend against weaknesses in H2. I don't think > >> that that's true either. First, remember that the purpose of H2 is to > >> prevent an attacker who recovers the password database from learning > >> the user's true password. This is not about defending the server from > >> attack (because knowing A1 is enough to attack the server) but about > >> preventing the attacker from learning a password which might have been > >> reused on another site. > >> > >> Now, it's also possible to brute-force the user's password just from > >> the protocol transcript: if you capture the client's first message > >> with MESSAGE-INTEGRITY or MESSAGE-INTEGRITY-SHA256, you can just keep > >> trying passwords until you get the right MAC. Note that this is a > >> passive attack. This is comparatively fast because SHA256 and MD5 are > >> fast. > >> > >> A much stronger H2 (e.g., Argon) would help against this, but the > >> problem now becomes that the client supports H2 =3D=3D MD5 (or SHA-256= ) > >> and so even if the server supports Argon, the attacker can mount a > >> bid-down defense in which it modifies the server's first message to > >> just advertise MD5 and thus get the client to provide a suitable > >> message. The bid-down defense would prevent the authentication > >> transaction from completing, but that's not necessary for this > >> attack because the attacker can just brute-force the password from > >> the message it has. To make this work, you would need something > >> like a PAKE, which this is not. > >> > >> Finally, you might think that the server has two databases, one > >> which uses Argon and one which uses MD5 and it wants to gradually > >> phase out the MD5 one, which it will do when no client authenticates > >> with MD5 for a very long time. An anti-biddown defense would sort > >> of work here, but the fact that the attacker would have to be > >> active essentially indefinitely to keep the server confused about > >> the state of clients -- and that the attacker can likely just > >> get a valid account and then insist on using MD5 -- makes this a > >> not very useful defense. > >> > >> I think this makes a pretty persuasive case that the bid-down defense > >> isn't useful except in the formal "attacker cannot influence > >> negotiation" sense. With that said, in the spirit of getting this done= , > I > >> guess > >> I'm willing to let this go if the security considerations make clear > >> that it is only a very limited mechanism. > >> > >> -Ekr > >> > >> > >> [0] This is principally about H1. As long as the H2 approximately > >> evenly distributes the password over its range, then cryptographic > >> strength is not important for this question. For instance, you > >> could replace H2 with an identity function and still have a > >> secure protocol. > >> > >> > >> > >> > >> > >> > >> On Wed, Feb 20, 2019 at 4:03 AM Gonzalo Camarillo < > >> gonzalo.camarillo@ericsson.com> wrote: > >> > >>> Thanks, Gonzalo! Please, let us know the agreed way forward once you > >>> have the call. > >>> > >>> Cheers, > >>> > >>> Gonzalo > >>> > >>>> On 19-Feb-19 20:05, Gonzalo Salgueiro (gsalguei) wrote: > >>>> Hi Gonzalo - > >>>> > >>>> We have scheduled a conference call with Ekr, Simon, Marc and myself > on > >>> March 7th to discuss the last two remaining issues. Will update with > >>> resolutions once this has occurred. > >>>> > >>>> Cheers, > >>>> > >>>> Gonzalo > >>>> > >>>> > >>>> > >>>>> On Feb 18, 2019, at 8:18 AM, Gonzalo Camarillo < > >>> Gonzalo.Camarillo@ericsson.com> wrote: > >>>>> > >>>>> Hi Gonzalo S, > >>>>> > >>>>> what is the status of this one? > >>>>> > >>>>> Thanks, > >>>>> > >>>>> Gonzalo > >>>>> > >>>>>> On 18-Jan-19 20:16, Gonzalo Salgueiro (gsalguei) wrote: > >>>>>> Totally agree, Ekr. Marc and I are meeting to come up with a > proposal > >>>>>> but I do agree we need to have a call to get this put to bed once > and > >>>>>> for all. We=E2=80=99ll offer some potential dates in the next 2-3= weeks. > >>>>>> > >>>>>> Cheers, > >>>>>> > >>>>>> Gonzalo > >>>>>> > >>>>>> > >>>>>>> On Dec 26, 2018, at 8:05 PM, Eric Rescorla >>>>>>> > wrote: > >>>>>>> > >>>>>>> We really need to bring this to a close before both Spencer and I > >>> step > >>>>>>> down, I should think. > >>>>>>> > >>>>>>> -Ekr > >>>>>>> > >>>>>>> > >>>>>>> On Thu, Nov 22, 2018 at 4:30 AM Gonzalo Camarillo > >>>>>>> >>>>>>> > wrote: > >>>>>>> > >>>>>>> Eric, Spencer, thanks for the status update! > >>>>>>> > >>>>>>> Authors, could you please let us know when you plan to get to > >>> this? > >>>>>>> > >>>>>>> Gonzalo > >>>>>>> > >>>>>>>> On 19-Nov-18 23:04, Spencer Dawkins at IETF wrote: > >>>>>>>> Hi, Gonzalo, > >>>>>>>> On Mon, Nov 19, 2018 at 9:06 AM Eric Rescorla >>>>>>> > >>>>>>>> >> wrote: > >>>>>>>> > >>>>>>>> Not really. I have not received any response to my mail of > >>>>>>> Oct 23. > >>>>>>>> As before, I'm happy to have a call, but I believe we're > >>>>>>> reaching > >>>>>>>> the limits of what can be accomplished by email. > >>>>>>>> > >>>>>>>> > >>>>>>>> Eric would know best (it being his Discuss), but this is also my > >>>>>>>> understanding. > >>>>>>>> > >>>>>>>> I can add this to the agenda of the IESG informal telechat on > >>>>>>> November > >>>>>>>> 29, if there hasn't been a call before then, but I don't have a > >>>>>>> reason > >>>>>>>> to wait until then, if it's possible to talk sooner. > >>>>>>>> > >>>>>>>> Thanks, > >>>>>>>> > >>>>>>>> Spencer > >>>>>>>> > >>>>>>>> > >>>>>>>> > >>>>>>>> -Ekr > >>>>>>>> > >>>>>>>> > >>>>>>>> On Mon, Nov 19, 2018 at 6:35 AM Gonzalo Camarillo > >>>>>>>> >>>>>>> > >>>>>>>> >>>>>>> >> wrote: > >>>>>>>> > >>>>>>>> Hi Spencer, > >>>>>>>> > >>>>>>>> what is the status of this? Are the authors and the > >>> document > >>>>>>>> shepherd > >>>>>>>> working with the relevant ADs on the discusses? > >>>>>>>> > >>>>>>>> > >>>>>>> > >>> https://datatracker.ietf.org/doc/draft-ietf-tram-stun-pmtud/ballot/ > >>>>>>>> > >>>>>>>> Cheers, > >>>>>>>> > >>>>>>>> Gonzalo > >>>>>>>> > >>>>>>>>> On 24-Oct-18 16:40, Spencer Dawkins at IETF wrote: > >>>>>>>>> Hi, Marc, > >>>>>>>>> > >>>>>>>>> On Wed, Oct 24, 2018 at 3:44 AM Marc Petit-Huguenin > >>>>>>>> > >>>>>>> > > >>>>>>>>> > >>>>>>> >>> wrote: > >>>>>>>>> > >>>>>>>>> Hi Spencer, > >>>>>>>>> > >>>>>>>>> I sent my answers to Eric Rescorla questions on > >>>>>>> 2018-10-07 > >>>>>>>> following > >>>>>>>>> an in-person meeting with my co-author, but never > >>>>>>> got a > >>>>>>>> response > >>>>>>>>> back. Because there was no change proposed by > >>>>>>> Eric I went > >>>>>>>> ahead and > >>>>>>>>> published -19 a couple of weeks after that, with > >>>>>>> the text > >>>>>>>> agreed in > >>>>>>>>> response to Adam's and Benjamin's comments. > >>>>>>>>> > >>>>>>>>> > >>>>>>>> > >>>>>>> > >>> https://www.ietf.org/mail-archive/web/tram/current/msg02635.html > >>>>>>>>> > >>>>>>>>> > >>>>>>>>> Ah - I wonder if that was what had happened. > >>>>>>>>> > >>>>>>>>> It sounds like you did the right thing, and that Eric > >>>>>>> has now > >>>>>>>> responded, > >>>>>>>>> which is also the right thing to do. > >>>>>>>>> > >>>>>>>>> Thanks for helping me understand. > >>>>>>>>> > >>>>>>>>> Spencer > >>>>>>>>> > >>>>>>>>> > >>>>>>>>>> On 10/23/18 7:28 PM, Spencer Dawkins at IETF wrote: > >>>>>>>>>> Hi, Marc, > >>>>>>>>>> > >>>>>>>>>> I see that a -19 has been submitted, but didn't > >>>>>>> see a > >>>>>>>> reply from > >>>>>>>>> Eric in > >>>>>>>>>> this thread. Do you think that you've converged? > >>>>>>>>>> > >>>>>>>>>> (I saw an offer of a conference call, so thought an > >>>>>>>> out-of-band > >>>>>>>>>> conversation might have happened) > >>>>>>>>>> > >>>>>>>>>> Thanks, > >>>>>>>>>> > >>>>>>>>>> Spencer > >>>>>>>>>> > >>>>>>>>>> On Sun, Oct 7, 2018 at 9:35 AM Marc Petit-Huguenin > >>>>>>>>> > >>>>>>> > > >>>>>>>> > >>>>>>> >>> wrote: > >>>>>>>>>> > >>>>>>>>>>> Hi Eric, > >>>>>>>>>>> > >>>>>>>>>>> Please see inline. > >>>>>>>>>>> > >>>>>>>>>>>> On 09/10/2018 03:25 AM, Eric Rescorla wrote: > >>>>>>>>>>>> On Sat, Sep 8, 2018 at 2:31 PM, Marc > >>>>>>> Petit-Huguenin > >>>>>>>>> > >>>>>>> > > >>>>>>>> > >>>>>>> >>> > >>>>>>>>>>>> wrote: > >>>>>>>>>>>> > >>>>>>>>>>>>> Hi Eric, > >>>>>>>>>>>>> > >>>>>>>>>>>>> Apologies for the delay in getting back to that. > >>>>>>>>>>>>> > >>>>>>>>>>>>> I think that there is some misunderstanding > >>>>>>> in what > >>>>>>>> STUNbis is > >>>>>>>>> trying to > >>>>>>>>>>>>> do, so please see my comments inline. > >>>>>>>>>>>>> > >>>>>>>>>>>>>> On 06/18/2018 10:43 AM, Eric Rescorla wrote: > >>>>>>>>>>>>>> Hi folks, > >>>>>>>>>>>>>> > >>>>>>>>>>>>>> I've reviewed the new version, but I don't > >>> think > >>>>>>>> that the biddown > >>>>>>>>>>>>>> discussion makes much sense. > >>>>>>>>>>>>>> > >>>>>>>>>>>>>> To recap, there are two hashes here: > >>>>>>>>>>>>>> > >>>>>>>>>>>>>> - The hash which you use to store the > >>>>>>> password with > >>>>>>>> (currently > >>>>>>>>> mostly > >>>>>>>>>>>>> MD5) > >>>>>>>>>>>>>> - The hash you use to compute the MAC > >>>>>>> (currently SHA-1). > >>>>>>>>>>>>>> > >>>>>>>>>>>>>> First, let's stipulate that MD5 isn't a > >>>>>>> great choice > >>>>>>>> here, > >>>>>>>>> though SHA-1 > >>>>>>>>>>>>>> isn't a great choice > >>>>>>>>>>>>>> either for pwd hashing You want Argon or the > >>>>>>> like. > >>>>>>>> With that said, > >>>>>>>>>>>>> there's > >>>>>>>>>>>>>> no sensible > >>>>>>>>>>>>>> biddown attack on that hash because it's a > >>>>>>>> per-server feature, > >>>>>>>>> not a > >>>>>>>>>>>>>> per-transaction > >>>>>>>>>>>>>> feature. So, as long as the server has > >>>>>>> MD5-hashed > >>>>>>>> passwords, the > >>>>>>>>>>>>> situation > >>>>>>>>>>>>>> is bad. > >>>>>>>>>>>>> > >>>>>>>>>>>>> In no place in STUNbis we are proposing to > >>>>>>> use SHA-1 > >>>>>>>> for password > >>>>>>>>>>>>> encryption, so I am not sure where that come > >>>>>>> from. > >>>>>>>> What we > >>>>>>>>> propose is: > >>>>>>>>>>>>> > >>>>>>>>>>>> > >>>>>>>>>>>> You're right, it's SHA-256, but my criticisms > >>>>>>> apply > >>>>>>>> equally there. > >>>>>>>>>>> > >>>>>>>>>>> SHA-256 was what the WG adopted. Our attempts > >>>>>>> to add > >>>>>>>> other passwords > >>>>>>>>>>> encryption mechanisms were denied. It is true > >>> that > >>>>>>>> Argon2 was > >>>>>>>>> not in that > >>>>>>>>>>> list (in our defense Argon2 was not known > >>>>>>> before July > >>>>>>>> 2015), but > >>>>>>>>> I do not > >>>>>>>>>>> see why the WG would have accepted that one > >>>>>>> over the > >>>>>>>> others. > >>>>>>>>> Anyway it is > >>>>>>>>>>> too late to fix this, as it is my understanding > >>>>>>> that > >>>>>>>> the WG does > >>>>>>>>> not have > >>>>>>>>>>> enough energy to reach consensus on a new password > >>>>>>>> algorithm. > >>>>>>>>> Someone can > >>>>>>>>>>> just write a draft adding Argon2 as password > >>>>>>>> encryption, as we > >>>>>>>>> will have a > >>>>>>>>>>> IANA registry for that. > >>>>>>>>>>> > >>>>>>>>>>>> > >>>>>>>>>>>> > >>>>>>>>>>>>> - Establish a registry for new password > >>>>>>> algorithms > >>>>>>>> (section > >>>>>>>>> 18.5), so > >>>>>>>>>>>>> algorithms like Argon2 could be added later > >>>>>>> (but note > >>>>>>>> that our own > >>>>>>>>>>>>> proposals to add more password algorithms were > >>>>>>>> rejected by the > >>>>>>>>> working > >>>>>>>>>>>>> group). > >>>>>>>>>>>>> - Add a new password algorithm to that registry, > >>>>>>>> namely SHA-256. > >>>>>>>>>>>>> - Register MD5 as an initial password > >>>>>>> algorithm for > >>>>>>>> backward > >>>>>>>>>>> compatibility > >>>>>>>>>>>>> purpose. > >>>>>>>>>>>>> > >>>>>>>>>>>>> As for the biddown protection itself, it is my > >>>>>>>> recollection that it > >>>>>>>>>>>>> happened more or less like that: > >>>>>>>>>>>>> > >>>>>>>>>>>>> > >>>>>>>>>>>>> INT. MEETING ROOM - DAY > >>>>>>>>>>>>> > >>>>>>>>>>>>> One of the co-editors of STUNBis stands at the > >>>>>>>> microphone: > >>>>>>>>>>>>> > >>>>>>>>>>>>> CO-EDITOR > >>>>>>>>>>>>> We added SHA-256 protection for > >>>>>>>> passwords > >>>>>>>>>>>>> in STUNBis. > >>>>>>>>>>>>> > >>>>>>>>>>>>> SOMEONE (V.O.) > >>>>>>>>>>>>> As MD5 still need to be > >>>>>>> supported, > >>>>>>>> you need to add > >>>>>>>>>>>>> protection for bid-down > >>> attacks. > >>>>>>>>>>>>> > >>>>>>>>>>>>> CLOSE-UP on CO-EDITOR ROLLING HIS EYES > >>>>>>>>>>>>> > >>>>>>>>>>>>> CO-EDITOR > >>>>>>>>>>>>> OK, I'll work on that. > >>>>>>>>>>>>> > >>>>>>>>>>>>> Four to eight months has passed. > >>>>>>>>>>>>> > >>>>>>>>>>>>> INT. ANOTHER MEETING ROOM - DAY > >>>>>>>>>>>>> > >>>>>>>>>>>>> The same co-editor of STUNBis stands at the > >>>>>>> microphone: > >>>>>>>>>>>>> > >>>>>>>>>>>>> CO-EDITOR > >>>>>>>>>>>>> We added a nice mechanism to > >>>>>>> prevent > >>>>>>>> bid-down > >>>>>>>>>>>>> attacks on passwords. Any > >>>>>>> comments? > >>>>>>>>>>>>> > >>>>>>>>>>>>> THE ROOM > >>>>>>>>>>>>> (silence) > >>>>>>>>>>>>> > >>>>>>>>>>>>> CO-EDITOR > >>>>>>>>>>>>> Moving on... > >>>>>>>>>>>>> > >>>>>>>>>>>> > >>>>>>>>>>>> I don't see how any of this is relevant to my > >>>>>>>> technical points > >>>>>>>>> above. > >>>>>>>>>>> > >>>>>>>>>>> My point was that we, the co-editors, did not > >>>>>>> decide on > >>>>>>>> adding > >>>>>>>>> bid-down > >>>>>>>>>>> protection, someone asked us to do so and > >>>>>>> no-one in the > >>>>>>>> WG saw > >>>>>>>>> any problem > >>>>>>>>>>> with that. The reasons that person wanted that > >>>>>>> are not > >>>>>>>> known to > >>>>>>>>> us but, as > >>>>>>>>>>> you insist, here's one reason I can think of: > >>>>>>>>>>> > >>>>>>>>>>> It is a fact that, for operational reasons, a > >>>>>>> password > >>>>>>>> database > >>>>>>>>> cannot be > >>>>>>>>>>> re-encrypted at once. Also for operational > >>>>>>> reasons, > >>>>>>>> the MD5 password > >>>>>>>>>>> cannot be immediately removed from the database > >>>>>>> as soon > >>>>>>>> the user > >>>>>>>>> submitted > >>>>>>>>>>> a new one. In fact, and for quite some time, both > >>>>>>>> encrypted > >>>>>>>>> variants of > >>>>>>>>>>> the same password may have to be kept in that > >>>>>>> database, > >>>>>>>> because a > >>>>>>>>> single > >>>>>>>>>>> user may use a mix of devices, some of them > >>>>>>> that use an > >>>>>>>> RFC 5389 > >>>>>>>>> client, > >>>>>>>>>>> some that use a STUNbis client. It is up to > >>>>>>> the STUN > >>>>>>>> server owner to > >>>>>>>>>>> decide how long the migration to STUNbis will > >>>>>>> take and > >>>>>>>> when it > >>>>>>>>> will be > >>>>>>>>>>> acceptable to reject all RFC 5389 (i.e. MD5) > >>>>>>> clients (that > >>>>>>>>> migration time > >>>>>>>>>>> can be purposely reduced to 0 seconds but > >>>>>>> that's the > >>>>>>>> choice and > >>>>>>>>>>> responsibility of the owner of the server). > >>>>>>>>>>> > >>>>>>>>>>> Meanwhile we still need to be sure that if the > >>> STUN > >>>>>>>> client is > >>>>>>>>> implementing > >>>>>>>>>>> STUNbis it unconditionally gets the additional > >>>>>>>> protection of the new > >>>>>>>>>>> password encryption algorithm. That's where > >>>>>>> the biddown > >>>>>>>>> protection kicks > >>>>>>>>>>> in, by preventing an online attacker to have > >>>>>>> the server > >>>>>>>>> misidentifying a > >>>>>>>>>>> STUNbis client as an RFC 5389 client, by > >>>>>>> preventing an > >>>>>>>> online > >>>>>>>>> attacker to > >>>>>>>>>>> have the client misidentifying a STUNbis server > >>>>>>> as a > >>>>>>>> RFC 5389 > >>>>>>>>> server, and > >>>>>>>>>>> having both them use the MD5 encrypted password > >>>>>>> instead > >>>>>>>> of the > >>>>>>>>> SHA-256 > >>>>>>>>>>> encrypted password, all of that easily done by > >>>>>>>> stripping the > >>>>>>>>> unprotected > >>>>>>>>>>> 401 response of the new STUNbis > >>> PASSWORD-ALGORITHMS > >>>>>>>> attribute. > >>>>>>>>>>> > >>>>>>>>>>>> > >>>>>>>>>>>> > >>>>>>>>>>>> > >>>>>>>>>>>>>> The second topic is the hash used to compute > >>> the > >>>>>>>> MAC. However, > >>>>>>>>> I don't > >>>>>>>>>>>>> see > >>>>>>>>>>>>>> how > >>>>>>>>>>>>>> this gives you sensible biddown protection > >>>>>>> because > >>>>>>>> that hash > >>>>>>>>> is also > >>>>>>>>>>> used > >>>>>>>>>>>>>> to compute > >>>>>>>>>>>>>> MAC over the negotiation: an attacker who has > >>>>>>>> compromised a > >>>>>>>>> MAC which > >>>>>>>>>>> the > >>>>>>>>>>>>>> server > >>>>>>>>>>>>>> supports will quite likely be able to forge > >>>>>>> a MAC > >>>>>>>> over the > >>>>>>>>> transcript > >>>>>>>>>>> as > >>>>>>>>>>>>>> well. This is, > >>>>>>>>>>>>>> I suppose, potentially useful as a defense > >>>>>>> against > >>>>>>>> some other > >>>>>>>>> weakness > >>>>>>>>>>>>>> (e.g., > >>>>>>>>>>>>>> version #), but I don't really see how the > >>>>>>> current > >>>>>>>> design > >>>>>>>>> helps against > >>>>>>>>>>>>>> attacks on the > >>>>>>>>>>>>>> MAC. > >>>>>>>>>>>>> > >>>>>>>>>>>>> There is no biddown attack protection for the > >>>>>>> MAC, as > >>>>>>>> stated in > >>>>>>>>> Section > >>>>>>>>>>>>> 16.3: > >>>>>>>>>>>>> > >>>>>>>>>>>>> "The bid-down protection mechanism described > >>>>>>> in this > >>>>>>>> document > >>>>>>>>> is new, > >>>>>>>>>>>>> and thus cannot currently protect against a > >>>>>>> bid-down > >>>>>>>> attack that > >>>>>>>>>>>>> lowers the strength of the hash algorithm to > >>>>>>> HMAC-SHA1." > >>>>>>>>>>>>> > >>>>>>>>>>>>> What we put in place is a plan for *future* > >>>>>>> versions > >>>>>>>> of STUN to get > >>>>>>>>>>>>> biddown protection for the MAC. That's it, > >>>>>>> no more, > >>>>>>>> no less. > >>>>>>>>>>>>> > >>>>>>>>>>>> > >>>>>>>>>>>> Yes, but I don't believe that this will > >>>>>>> provide bid-down > >>>>>>>>> protection for > >>>>>>>>>>> the > >>>>>>>>>>>> MAC in the future for the reasons I indicate > >>>>>>> above. > >>>>>>>>>>>> > >>>>>>>>>>>> If you think this does something useful, > >>>>>>> please show me an > >>>>>>>>> example attack > >>>>>>>>>>>> and how this fixes it. Note that it's not > >>>>>>> generally > >>>>>>>> useful to > >>>>>>>>> just bid > >>>>>>>>>>> down > >>>>>>>>>>>> the MAC itself unless the MAC you bid down to > >>>>>>> is weak > >>>>>>>> enough to > >>>>>>>>> exploit > >>>>>>>>>>> in > >>>>>>>>>>>> some other way. > >>>>>>>>>>> > >>>>>>>>>>> I do not know what weaknesses will be > >>>>>>> discovered in the > >>>>>>>> future. > >>>>>>>>> I am also > >>>>>>>>>>> pretty sure that the cost of not using that > >>>>>>> mechanism > >>>>>>>> is very > >>>>>>>>> close to 0. > >>>>>>>>>>> What I am sure of is that the cost of > >>>>>>> reengineering a > >>>>>>>> new biddown > >>>>>>>>>>> protection mechanism if we ever need it will be > >>>>>>> high. > >>>>>>>> We already > >>>>>>>>> went > >>>>>>>>>>> through the pains of designing one for the > >>> password > >>>>>>>> algorithm, so > >>>>>>>>> why not > >>>>>>>>>>> extend it so it can be used in the aftermath of > >>> the > >>>>>>>> next Snowden > >>>>>>>>> facepalm > >>>>>>>>>>> moment? > >>>>>>>>>>> > >>>>>>>>>>>> Again, happy to have a call to walk though > >>>>>>> this if that > >>>>>>>>>>>> helps. > >>>>>>>>>>>> > >>>>>>>>>>>> -Ekr > >>>>>>>>>>>> > >>>>>>>>>>>> > >>>>>>>>>>>> > >>>>>>>>>>>> > >>>>>>>>>>>>>> > >>>>>>>>>>>>>> You might think that there was a MAC which > >>>>>>> was easier to > >>>>>>>>> reverse to > >>>>>>>>>>> find > >>>>>>>>>>>>>> the original > >>>>>>>>>>>>>> password, but the defense you have here > >>>>>>> doesn't help > >>>>>>>> with that > >>>>>>>>> because > >>>>>>>>>>>>> the > >>>>>>>>>>>>>> on-path attacker can do a bid-down and use the > >>>>>>>> client as a MAC > >>>>>>>>> oracle > >>>>>>>>>>> for > >>>>>>>>>>>>>> any MAC the client supports. > >>>>>>>>>>>>>> > >>>>>>>>>>>>>> So, I still don't understand what this is > >>>>>>> supposed > >>>>>>>> to do. Happy to > >>>>>>>>>>> have a > >>>>>>>>>>>>>> call if you > >>>>>>>>>>>>>> think that helps > >>>>>>>>>>>>>> > >>>>>>>>>>>>>> -Ekr > >>>>>>>>>>>>>> > >>>>>>>>>>>>>> > >>>>>>>>>>>>>> > >>>>>>>>>>>>>> > >>>>>>>>>>>>>> On Mon, Jun 18, 2018 at 3:40 AM, Gonzalo > >>>>>>> Camarillo < > >>>>>>>>>>>>>> Gonzalo.Camarillo@ericsson.com > >>>>>>> > >>>>>>>> >>>>>>> > > >>>>>>>>> >>>>>>> > >>>>>>>> >>>>>>> >>> wrote: > >>>>>>>>>>>>>> > >>>>>>>>>>>>>>> Marc, Eric, > >>>>>>>>>>>>>>> > >>>>>>>>>>>>>>> what is the status of this discussion? > >>>>>>>>>>>>>>> > >>>>>>>>>>>>>>> Thanks, > >>>>>>>>>>>>>>> > >>>>>>>>>>>>>>> Gonzalo > >>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>> On 04/05/2018 2:35 AM, Eric Rescorla wrote: > >>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>> On Mon, Apr 23, 2018 at 11:16 AM, Marc > >>>>>>>> Petit-Huguenin < > >>>>>>>>>>>>> petithug@acm.org > >>>>>>> > > >>>>>>>> > >>>>>>> >> > >>>>>>>>>>>>>>>> >>>>>>> >>>>>>> > > >>>>>>>> > >>>>>>> >>>> wrote: > >>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>> On 04/22/2018 05:22 PM, Eric Rescorla > >>>>>>> wrote: > >>>>>>>>>>>>>>>>> On Sun, Apr 22, 2018 at 2:02 PM, Marc > >>>>>>>> Petit-Huguenin < > >>>>>>>>>>>>>>> petithug@acm.org > >>>>>>> > > >>>>>>>> > >>>>>>> >> > >>>>>>>>> > >>>>>>> > > >>>>>>>> > >>>>>>> >>>> > >>>>>>>>>>>>>>>>> wrote: > >>>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>>>>> For a request or indication > >>>>>>> message, > >>>>>>>> the agent > >>>>>>>>> MUST > >>>>>>>>>>>>>>> include the > >>>>>>>>>>>>>>>>>>>> USERNAME, > >>>>>>> MESSAGE-INTEGRITY-SHA256, and > >>>>>>>>>>> MESSAGE-INTEGRITY > >>>>>>>>>>>>>>>>>> attributes > >>>>>>>>>>>>>>>>>>>> in the message unless the agent > >>>>>>>> knows from an > >>>>>>>>> external > >>>>>>>>>>>>>>> indication > >>>>>>>>>>>>>>>>>>>> which message integrity > >>>>>>> algorithm is > >>>>>>>> supported > >>>>>>>>> by both > >>>>>>>>>>>>>>> agents. In > >>>>>>>>>>>>>>>>>>>> this case either > >>>>>>> MESSAGE-INTEGRITY or > >>>>>>>>>>>>>>> MESSAGE-INTEGRITY-SHA256 MUST > >>>>>>>>>>>>>>>>>>>> be included in addition to > >>>>>>>> USERNAME. The HMAC > >>>>>>>>> for the > >>>>>>>>>>>>>>> MESSAGE- > >>>>>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>>>> This text appears to conflict with > >>>>>>> S 7.3 of > >>>>>>>>> 5245-bis, which > >>>>>>>>>>>>> says: > >>>>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>>> [text missing] > >>>>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>>> Hmm, no, RFC245bis is still > >>> referencing > >>>>>>>> RFC5389, so the > >>>>>>>>>>>>> procedure > >>>>>>>>>>>>>>> for > >>>>>>>>>>>>>>>>>> stunbis does not apply. > >>>>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>> I hear what you're saying, but > >>>>>>> publishing two > >>>>>>>>> documents at the > >>>>>>>>>>>>>>> same time > >>>>>>>>>>>>>>>>> which > >>>>>>>>>>>>>>>>> make contrary recommendations about > >>>>>>> the same > >>>>>>>> basic > >>>>>>>>> protocol is > >>>>>>>>>>>>>>> un-good. > >>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>> Sure, but wouldn't it be simpler to have > >>>>>>>> rfc5245bis > >>>>>>>>> using stunbis > >>>>>>>>>>>>>>>> and have them updating their text, > >>>>>>> more than > >>>>>>>> adding some > >>>>>>>>> tortuous > >>>>>>>>>>>>>>>> text in stunbis? > >>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>>>> The STUN usage must specify > >>> which > >>>>>>>> transport > >>>>>>>>> protocol is > >>>>>>>>>>>>>>> used, and > >>>>>>>>>>>>>>>>>> how > >>>>>>>>>>>>>>>>>>>> the agent determines the IP > >>>>>>> address > >>>>>>>> and port > >>>>>>>>> of the > >>>>>>>>>>>>>>> recipient. > >>>>>>>>>>>>>>>>>>>> Section 8 describes a DNS-based > >>>>>>>> method of > >>>>>>>>> determining > >>>>>>>>>>> the > >>>>>>>>>>>>>>> IP > >>>>>>>>>>>>>>>>>> address > >>>>>>>>>>>>>>>>>>>> and port of a server that a > >>>>>>> usage > >>>>>>>> may elect to > >>>>>>>>> use. > >>>>>>>>>>> STUN > >>>>>>>>>>>>>>> may be > >>>>>>>>>>>>>>>>>> used > >>>>>>>>>>>>>>>>>>>> with anycast addresses, but > >>> only > >>>>>>>> with UDP and > >>>>>>>>> in usages > >>>>>>>>>>>>>>> where > >>>>>>>>>>>>>>>>>>>> authentication is not used. > >>>>>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>>>> Why this restriction? You should > >>>>>>> be able > >>>>>>>> to use > >>>>>>>>> anycast with > >>>>>>>>>>>>>>> long-term > >>>>>>>>>>>>>>>>>>> AUTH for (say) TURN. > >>>>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>>> > >>>>>>>> https://www.ietf.org/mail-archive/web/behave/current/ > >>>>>>>>>>>>>>> msg03582.html > >>>>>>>>>>>>>>>> > >>>>>>>> >>>>>>>>>>>>> msg03582.html> > >>>>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>>> I think that the decision of > >>>>>>> permitting Anycast > >>>>>>>>> should be left > >>>>>>>>>>>>> to > >>>>>>>>>>>>>>> each > >>>>>>>>>>>>>>>>>> STUN Usage. Basic STUN Usage does > >>>>>>> not use > >>>>>>>>> authentication and > >>>>>>>>>>>>> use > >>>>>>>>>>>>>>> only a > >>>>>>>>>>>>>>>>>> one round trip for the Binding > >>>>>>> transaction, so > >>>>>>>>> Unicast can be > >>>>>>>>>>>>>>> used. > >>>>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>>> OTOH, TURN and ICE should probably say > >>>>>>>> something > >>>>>>>>> about that, > >>>>>>>>>>> so > >>>>>>>>>>>>> I > >>>>>>>>>>>>>>> added a > >>>>>>>>>>>>>>>>>> new bullet point in Section 13: > >>>>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>>> o If Anycast addresses can be > >>>>>>> used for > >>>>>>>> the server > >>>>>>>>> in case > >>>>>>>>>>>>> TCP > >>>>>>>>>>>>>>> or > >>>>>>>>>>>>>>>>>> TLS-over-TCP, or > >>>>>>> authentication are used. > >>>>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>> Are you leaving this text in? That > >>> seems > >>>>>>>> very confusing. > >>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>> In isolation yes, but I think it makes > >>>>>>> sense > >>>>>>>> which the text > >>>>>>>>>>> before > >>>>>>>>>>>>>>>> the bullet points: > >>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>> A STUN usage defines how STUN is > >>>>>>> actually > >>>>>>>> utilized -- > >>>>>>>>> when to > >>>>>>>>>>>>> send > >>>>>>>>>>>>>>>> requests, what to do with the > >>>>>>> responses, > >>>>>>>> and which > >>>>>>>>> optional > >>>>>>>>>>>>>>>> procedures defined here (or in an > >>>>>>> extension > >>>>>>>> to STUN) > >>>>>>>>> are to be > >>>>>>>>>>>>>>> used. > >>>>>>>>>>>>>>>> A usage also defines: > >>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>> [...] > >>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>> o If Anycast addresses can be used > >>>>>>> for the > >>>>>>>> server in > >>>>>>>>> case TCP > >>>>>>>>>>>>> or > >>>>>>>>>>>>>>>> TLS-over-TCP, or authentication > >>>>>>> are used. > >>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>> What is the need for the restriction at all > > > --0000000000008e8fc905849f5140 Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable
Spencer, why don't; you override it and then I can tak= e a final look

On Thu, Mar 21, 2019 at 11:22 AM Gonzalo Salgueiro (gsalg= uei) <gsalguei@cisco.com> w= rote:
Hi Eric -=C2=A0

I=E2=80=99m attaching the -21 that will be published once the I-D subm= ission tool opens up (or Spencer can override and it published before then)= .=C2=A0 It uses your proposed bid down protection disclaimer text (save for= minor nits I cleaned up). =C2=A0

If this looks good then from my perspective we are done and your DISCU= SS can be cleared and we can proceed with publication.

Thanks for all your help.

Cheers,

Gonzalo


On Mar 20, 2019, at 3:57 PM, Eric Rescorla <ekr@rtfm.com> wrote:

Gonzalo,

This text still seems to me to need some work. Here is a revised version.
SHA-256 was chosen as the new default for password=C2=A0=C2=A0=C2=A0
hashing for its compability with RFC 7616 but because SHA-256 (like=C2=A0= =C2=A0=C2=A0
MD5) is a comparatively fast algorithm, it does little to deter
brute force attacks. Specifically, this means that if the
user has a weak password:

* An attacker who captures the server's password file can often
=C2=A0 determine the user's password and thus impersonate the user
=C2=A0 to other servers where they have used that password. Note that
=C2=A0 such an attacker can impersonate the user to the server itself
=C2=A0 without any brute force attack.

* An attacker who captures a single exchange can brute force
=C2=A0 the user's password and thus potentially impersonate the
=C2=A0 user to the server and other servers where they have used
=C2=A0 the same pasword.
=C2=A0
A stronger (which is to say slower) algorithm, like Argon2
[I-D.irtf-cfrg-argon2], would help both of these cases, but in the
case of the first attack, only after until the database entry for this
user is updated to exclusively use that stronger mechanism.

The bid-down defenses in this protocol prevent an attacker from
forcing the client and server to complete a handshake using weaker
algorithms than they jointly support, but only if the weakest joint
algorithm is strong enough that it cannot be brute-forced. However,
this does not defend against many attacks on those algorithms;
specifically, an on-path attacker might perform a bid-down attack on a
client which supported both Argon2 and SHA-256 for password hashing
and use that to collect a MESSAGE-INTEGRITY-SHA256 value which it uses
for an offline brute-force attack. This would be detected when the
server receives the second request, but that does not prevent the
attacker from obtaining the MESSAGE-INTEGRITY-SHA256 value.

Similarly, an attack against the USERHASH mechanism will not succeed
in establishing a session as the server will detect that the feature
was discarded on-path, but the client would still have been convinced
to send its username in clear in the USERNAME attribute, thus
disclosing it to the attacker.

-Ekr


On Mon, = Mar 18, 2019 at 6:37 PM Gonzalo Salgueiro (gsalguei) <gsalguei@cisco.com> wrote:
Thanks, Spencer.=C2=A0 In the interest of expeditiousness I=E2=80=99ve emai= led Eric to review the newly published -20 to ensure it addresses his DISCU= SS points. Hoping to get this done before Eric steps down as AD.

Cheers,

Gonzalo



> On Mar 18, 2019, at 9:27 PM, Spencer Dawkins at IETF <spencerdawkins.ietf@g= mail.com> wrote:
>
> Dear All,
>
>> On Fri, Mar 8, 2019 at 8:10 PM Eric Rescorla <ekr@rtfm.com> wrote:
>>
>> Thanks for the call yesterday.
>>
>
> Thanks to all for moving this specification forward.
>
> If the current conversation turns out to converge on this topic before= next
> Wednesday, I'm happy to approve a revised draft after Eric clears = his
> Discuss.
>
> If I can help in any way, please let me know.
>
> Spencer
>
>
>>
>> First, here is what I recommend for the question of SHA-256 for pa= ssword
>> hashing:
>>
>>=C2=A0 Note: the use of SHA-256 for password hashing does not meet = modern
>>=C2=A0 standards, which are aimed at slowing down exhaustive passwo= rd search
>>=C2=A0 by providing a relatively slow minimum time to compute the >>=C2=A0 hash. Although better algorithms such as Argon2
>>=C2=A0 [https://datatracker.ietf.org= /doc/draft-irtf-cfrg-argon2/] are
>>=C2=A0 available, SHA-256 was chosen for consistency with RFC 7616.=
>>
>>
>> Now, WRT to the anti-downgrade situation. Here's a stylized ve= rsion
>> of the protocol:
>>
>> Client=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2= =A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 = =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 Server
>>
>> Hello ->
>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2= =A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 = =C2=A0 <- Nonce, Algorithms
>> HMAC-H1(H2(Password), Nonce, Algorithms, Msg) ->
>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2= =A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0<- HMAC-H1(H2(Passwo= rd), ...)
>>
>> Where H1 and H2 are the HMAC hash functions and the password hashi= ng
>> function respectively.
>>
>> Now, if we assume that the attacker does not know Password and tha= t
>> both H1 and H2 are secure, then it is not possible for the attacke= r to
>> complete the transaction or modify any of the messages. Further, i= f
>> the weakest joint algorithm that both sides support is still stron= g,
>> then an attacker cannot influence the algorithm negotiation [0]. T= his
>> property is provided by covering the algorithms under the MAC.
>>
>> However, my point is that this is not a very useful property.
>>
>> First, consider the case in which the implementations jointly supp= ort
>> one strong algorithm and one weak algorithm. E.g., for H1 they sup= port
>> SHA-256 and the function Z(x) which always emits 0s. This allows >> an attacker to force the client and server into using Z, as follow= s.
>>
>>
>> Client=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2= =A0 =C2=A0 =C2=A0 Attacker=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 = =C2=A0 =C2=A0 =C2=A0Server
>>
>> Hello ->
>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2= =A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 Hello ->
>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2= =A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 <- No= nce, Alg=3DSHA256, Z
>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 <- Nonce= , Alg=3DZ
>> Z(H2(Password), Nonce, Alg=3DZ)) ->
>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2= =A0 =C2=A0 =C2=A0 Z(H2(Password), Nonce, Alg=3DSHA256, Z))
>>
>> The issue here is that the only thing that the MAC is doing is
>> authenticating the transaction, and if you can't trust it to d= o that,
>> you can't trust it to authenticate the bid-down defense either= .
>>
>>
>> During our discussion, there was a suggestion that it was useful t= o
>> have biddown defense to defend against weaknesses in H2. I don'= ;t think
>> that that's true either. First, remember that the purpose of H= 2 is to
>> prevent an attacker who recovers the password database from learni= ng
>> the user's true password. This is not about defending the serv= er from
>> attack (because knowing A1 is enough to attack the server) but abo= ut
>> preventing the attacker from learning a password which might have = been
>> reused on another site.
>>
>> Now, it's also possible to brute-force the user's password= just from
>> the protocol transcript: if you capture the client's first mes= sage
>> with MESSAGE-INTEGRITY or MESSAGE-INTEGRITY-SHA256, you can just k= eep
>> trying passwords until you get the right MAC. Note that this is a<= br> >> passive attack. This is comparatively fast because SHA256 and MD5 = are
>> fast.
>>
>> A much stronger H2 (e.g., Argon) would help against this, but the<= br> >> problem now becomes that the client supports H2 =3D=3D MD5 (or SHA= -256)
>> and so even if the server supports Argon, the attacker can mount a=
>> bid-down defense in which it modifies the server's first messa= ge to
>> just advertise MD5 and thus get the client to provide a suitable >> message. The bid-down defense would prevent the authentication
>> transaction from completing, but that's not necessary for this=
>> attack because the attacker can just brute-force the password from=
>> the message it has. To make this work, you would need something >> like a PAKE, which this is not.
>>
>> Finally, you might think that the server has two databases, one >> which uses Argon and one which uses MD5 and it wants to gradually<= br> >> phase out the MD5 one, which it will do when no client authenticat= es
>> with MD5 for a very long time. An anti-biddown defense would sort<= br> >> of work here, but the fact that the attacker would have to be
>> active essentially indefinitely to keep the server confused about<= br> >> the state of clients -- and that the attacker can likely just
>> get a valid account and then insist on using MD5 -- makes this a >> not very useful defense.
>>
>> I think this makes a pretty persuasive case that the bid-down defe= nse
>> isn't useful except in the formal "attacker cannot influe= nce
>> negotiation" sense. With that said, in the spirit of getting = this done, I
>> guess
>> I'm willing to let this go if the security considerations make= clear
>> that it is only a very limited mechanism.
>>
>> -Ekr
>>
>>
>> [0] This is principally about H1. As long as the H2 approximately<= br> >> evenly distributes the password over its range, then cryptographic=
>> strength is not important for this question. For instance, you
>> could replace H2 with an identity function and still have a
>> secure protocol.
>>
>>
>>
>>
>>
>>
>> On Wed, Feb 20, 2019 at 4:03 AM Gonzalo Camarillo <
>> gonzalo.camarillo@ericsson.com> wrote:
>>
>>> Thanks, Gonzalo! Please, let us know the agreed way forward on= ce you
>>> have the call.
>>>
>>> Cheers,
>>>
>>> Gonzalo
>>>
>>>> On 19-Feb-19 20:05, Gonzalo Salgueiro (gsalguei) wrote: >>>> Hi Gonzalo -
>>>>
>>>> We have scheduled a conference call with Ekr, Simon, Marc = and myself on
>>> March 7th to discuss the last two remaining issues.=C2=A0 Will= update with
>>> resolutions once this has occurred.
>>>>
>>>> Cheers,
>>>>
>>>> Gonzalo
>>>>
>>>>
>>>>
>>>>> On Feb 18, 2019, at 8:18 AM, Gonzalo Camarillo < >>> Gonzalo.Camarillo@ericsson.com> wrote:
>>>>>
>>>>> Hi Gonzalo S,
>>>>>
>>>>> what is the status of this one?
>>>>>
>>>>> Thanks,
>>>>>
>>>>> Gonzalo
>>>>>
>>>>>> On 18-Jan-19 20:16, Gonzalo Salgueiro (gsalguei) w= rote:
>>>>>> Totally agree, Ekr.=C2=A0 Marc and I are meeting t= o come up with a proposal
>>>>>> but I do agree we need to have a call to get this = put to bed once and
>>>>>> for all.=C2=A0 We=E2=80=99ll offer some potential = dates in the next 2-3 weeks.
>>>>>>
>>>>>> Cheers,
>>>>>>
>>>>>> Gonzalo
>>>>>>
>>>>>>
>>>>>>> On Dec 26, 2018, at 8:05 PM, Eric Rescorla <= ;ekr@rtfm.com
>>>>>>> <mailto:ekr@rtfm.com>> wrote:
>>>>>>>
>>>>>>> We really need to bring this to a close before= both Spencer and I
>>> step
>>>>>>> down, I should think.
>>>>>>>
>>>>>>> -Ekr
>>>>>>>
>>>>>>>
>>>>>>> On Thu, Nov 22, 2018 at 4:30 AM Gonzalo Camari= llo
>>>>>>> <gonzalo.camarillo@ericsson.com
>>>>>>> <mailto:gonzalo.camarillo@ericsson.com>>= wrote:
>>>>>>>
>>>>>>>=C2=A0 =C2=A0Eric, Spencer, thanks for the stat= us update!
>>>>>>>
>>>>>>>=C2=A0 =C2=A0Authors, could you please let us k= now when you plan to get to
>>> this?
>>>>>>>
>>>>>>>=C2=A0 =C2=A0Gonzalo
>>>>>>>
>>>>>>>>=C2=A0 =C2=A0On 19-Nov-18 23:04, Spencer Da= wkins at IETF wrote:
>>>>>>>> Hi, Gonzalo,
>>>>>>>> On Mon, Nov 19, 2018 at 9:06 AM Eric Resco= rla <ekr@rtfm.com<= br> >>>>>>>=C2=A0 =C2=A0<mailto:ekr@rtfm.com>
>>>>>>>> <mailto:ekr@rtfm.com <mailto:ekr@rtfm.com>>> wrote:
>>>>>>>>
>>>>>>>>=C2=A0 =C2=A0 =C2=A0Not really. I have not = received any response to my mail of
>>>>>>>=C2=A0 =C2=A0Oct 23.
>>>>>>>>=C2=A0 =C2=A0 =C2=A0As before, I'm happ= y to have a call, but I believe we're
>>>>>>>=C2=A0 =C2=A0reaching
>>>>>>>>=C2=A0 =C2=A0 =C2=A0the limits of what can = be accomplished by email.
>>>>>>>>
>>>>>>>>
>>>>>>>> Eric would know best (it being his Discuss= ), but this is also my
>>>>>>>> understanding.
>>>>>>>>
>>>>>>>> I can add this to the agenda of the IESG i= nformal telechat on
>>>>>>>=C2=A0 =C2=A0November
>>>>>>>> 29, if there hasn't been a call before= then, but I don't have a
>>>>>>>=C2=A0 =C2=A0reason
>>>>>>>> to wait until then, if it's possible t= o talk sooner.
>>>>>>>>
>>>>>>>> Thanks,
>>>>>>>>
>>>>>>>> Spencer
>>>>>>>>
>>>>>>>>
>>>>>>>>
>>>>>>>>=C2=A0 =C2=A0 =C2=A0-Ekr
>>>>>>>>
>>>>>>>>
>>>>>>>>=C2=A0 =C2=A0 =C2=A0On Mon, Nov 19, 2018 at= 6:35 AM Gonzalo Camarillo
>>>>>>>>=C2=A0 =C2=A0 =C2=A0<gonzalo.camarillo@ericsson= .com
>>>>>>>=C2=A0 =C2=A0<mailto:gonzalo.camarillo@ericsson.com= >
>>>>>>>>=C2=A0 =C2=A0 =C2=A0<mailto:gonzalo.camarillo@e= ricsson.com
>>>>>>>=C2=A0 =C2=A0<mailto:gonzalo.camarillo@ericsson.com= >>> wrote:
>>>>>>>>
>>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0Hi Spence= r,
>>>>>>>>
>>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0what is t= he status of this? Are the authors and the
>>> document
>>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0shepherd<= br> >>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0working w= ith the relevant ADs on the discusses?
>>>>>>>>
>>>>>>>>
>>>>>>>
>>> https://datatracker.ietf.org/doc/draft-ietf-tram-stun-pmtud/ballot/
>>>>>>>>
>>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0Cheers, >>>>>>>>
>>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0Gonzalo >>>>>>>>
>>>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0On 24= -Oct-18 16:40, Spencer Dawkins at IETF wrote:
>>>>>>>>> Hi, Marc,
>>>>>>>>>
>>>>>>>>> On Wed, Oct 24, 2018 at 3:44 AM Marc P= etit-Huguenin
>>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0<petithug@acm.org <m= ailto:petithug@acm.or= g>
>>>>>>>=C2=A0 =C2=A0<mailto:petithug@acm.org <mailto:petithug@acm.org>>
>>>>>>>>> <mailto:petithug@acm.org <mailto:petithug@acm.org>
>>>>>>>=C2=A0 =C2=A0<mailto:petithug@acm.org <mailto:petithug@acm.org>>>&= gt; wrote:
>>>>>>>>>
>>>>>>>>>=C2=A0 =C2=A0 Hi Spencer,
>>>>>>>>>
>>>>>>>>>=C2=A0 =C2=A0 I sent my answers to Eric= Rescorla questions on
>>>>>>>=C2=A0 =C2=A02018-10-07
>>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0following=
>>>>>>>>>=C2=A0 =C2=A0 an in-person meeting with= my co-author, but never
>>>>>>>=C2=A0 =C2=A0got a
>>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0response<= br> >>>>>>>>>=C2=A0 =C2=A0 back.=C2=A0 Because there= was no change proposed by
>>>>>>>=C2=A0 =C2=A0Eric I went
>>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0ahead and=
>>>>>>>>>=C2=A0 =C2=A0 published -19 a couple of= weeks after that, with
>>>>>>>=C2=A0 =C2=A0the text
>>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0agreed in=
>>>>>>>>>=C2=A0 =C2=A0 response to Adam's an= d Benjamin's comments.
>>>>>>>>>
>>>>>>>>>
>>>>>>>>
>>>>>>>
>>> https://www.ietf.org/mail-archive/web/tram/current/msg02635.html
>>>>>>>>>
>>>>>>>>>
>>>>>>>>> Ah - I wonder if that was what had hap= pened.
>>>>>>>>>
>>>>>>>>> It sounds like you did the right thing= , and that Eric
>>>>>>>=C2=A0 =C2=A0has now
>>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0responded= ,
>>>>>>>>> which is also the right thing to do. >>>>>>>>>
>>>>>>>>> Thanks for helping me understand.
>>>>>>>>>
>>>>>>>>> Spencer
>>>>>>>>>
>>>>>>>>>
>>>>>>>>>>=C2=A0 =C2=A0 On 10/23/18 7:28 PM, = Spencer Dawkins at IETF wrote:
>>>>>>>>>> Hi, Marc,
>>>>>>>>>>
>>>>>>>>>> I see that a -19 has been submitte= d, but didn't
>>>>>>>=C2=A0 =C2=A0see a
>>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0reply fro= m
>>>>>>>>>=C2=A0 =C2=A0 Eric in
>>>>>>>>>> this thread. Do you think that you= 've converged?
>>>>>>>>>>
>>>>>>>>>> (I saw an offer of a conference ca= ll, so thought an
>>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0out-of-ba= nd
>>>>>>>>>> conversation might have happened)<= br> >>>>>>>>>>
>>>>>>>>>> Thanks,
>>>>>>>>>>
>>>>>>>>>> Spencer
>>>>>>>>>>
>>>>>>>>>> On Sun, Oct 7, 2018 at 9:35 AM Mar= c Petit-Huguenin
>>>>>>>>>=C2=A0 =C2=A0 <petithug@acm.org <mailto:petithug@acm.org>
>>>>>>>=C2=A0 =C2=A0<mailto:petithug@acm.org <mailto:petithug@acm.org>>
>>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0<mailt= o:petithug@acm.org <mailto:petithug= @acm.org>
>>>>>>>=C2=A0 =C2=A0<mailto:petithug@acm.org <mailto:petithug@acm.org>>>&= gt; wrote:
>>>>>>>>>>
>>>>>>>>>>> Hi Eric,
>>>>>>>>>>>
>>>>>>>>>>> Please see inline.
>>>>>>>>>>>
>>>>>>>>>>>> On 09/10/2018 03:25 AM, Er= ic Rescorla wrote:
>>>>>>>>>>>> On Sat, Sep 8, 2018 at 2:3= 1 PM, Marc
>>>>>>>=C2=A0 =C2=A0Petit-Huguenin
>>>>>>>>>=C2=A0 =C2=A0 <petithug@acm.org <mailto:petithug@acm.org>
>>>>>>>=C2=A0 =C2=A0<mailto:petithug@acm.org <mailto:petithug@acm.org>>
>>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0<mailt= o:petithug@acm.org <mailto:petithug= @acm.org>
>>>>>>>=C2=A0 =C2=A0<mailto:petithug@acm.org <mailto:petithug@acm.org>>>&= gt;
>>>>>>>>>>>> wrote:
>>>>>>>>>>>>
>>>>>>>>>>>>> Hi Eric,
>>>>>>>>>>>>>
>>>>>>>>>>>>> Apologies for the dela= y in getting back to that.
>>>>>>>>>>>>>
>>>>>>>>>>>>> I think that there is = some misunderstanding
>>>>>>>=C2=A0 =C2=A0in what
>>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0STUNbis i= s
>>>>>>>>>=C2=A0 =C2=A0 trying to
>>>>>>>>>>>>> do, so please see my c= omments inline.
>>>>>>>>>>>>>
>>>>>>>>>>>>>> On 06/18/2018 10:4= 3 AM, Eric Rescorla wrote:
>>>>>>>>>>>>>> Hi folks,
>>>>>>>>>>>>>>
>>>>>>>>>>>>>> I've reviewed = the new version, but I don't
>>> think
>>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0that the = biddown
>>>>>>>>>>>>>> discussion makes m= uch sense.
>>>>>>>>>>>>>>
>>>>>>>>>>>>>> To recap, there ar= e two hashes here:
>>>>>>>>>>>>>>
>>>>>>>>>>>>>> - The hash which y= ou use to store the
>>>>>>>=C2=A0 =C2=A0password with
>>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0(currentl= y
>>>>>>>>>=C2=A0 =C2=A0 mostly
>>>>>>>>>>>>> MD5)
>>>>>>>>>>>>>> - The hash you use= to compute the MAC
>>>>>>>=C2=A0 =C2=A0(currently SHA-1).
>>>>>>>>>>>>>>
>>>>>>>>>>>>>> First, let's s= tipulate that MD5 isn't a
>>>>>>>=C2=A0 =C2=A0great choice
>>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0here,
>>>>>>>>>=C2=A0 =C2=A0 though SHA-1
>>>>>>>>>>>>>> isn't a great = choice
>>>>>>>>>>>>>> either for pwd has= hing You want Argon or the
>>>>>>>=C2=A0 =C2=A0like.
>>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0With that= said,
>>>>>>>>>>>>> there's
>>>>>>>>>>>>>> no sensible
>>>>>>>>>>>>>> biddown attack on = that hash because it's a
>>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0per-serve= r feature,
>>>>>>>>>=C2=A0 =C2=A0 not a
>>>>>>>>>>>>>> per-transaction >>>>>>>>>>>>>> feature. So, as lo= ng as the server has
>>>>>>>=C2=A0 =C2=A0MD5-hashed
>>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0passwords= , the
>>>>>>>>>>>>> situation
>>>>>>>>>>>>>> is bad.
>>>>>>>>>>>>>
>>>>>>>>>>>>> In no place in STUNbis= we are proposing to
>>>>>>>=C2=A0 =C2=A0use SHA-1
>>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0for passw= ord
>>>>>>>>>>>>> encryption, so I am no= t sure where that come
>>>>>>>=C2=A0 =C2=A0from.
>>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0What we >>>>>>>>>=C2=A0 =C2=A0 propose is:
>>>>>>>>>>>>>
>>>>>>>>>>>>
>>>>>>>>>>>> You're right, it's= SHA-256, but my criticisms
>>>>>>>=C2=A0 =C2=A0apply
>>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0equally t= here.
>>>>>>>>>>>
>>>>>>>>>>> SHA-256 was what the WG adopte= d.=C2=A0 Our attempts
>>>>>>>=C2=A0 =C2=A0to add
>>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0other pas= swords
>>>>>>>>>>> encryption mechanisms were den= ied.=C2=A0 It is true
>>> that
>>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0Argon2 wa= s
>>>>>>>>>=C2=A0 =C2=A0 not in that
>>>>>>>>>>> list (in our defense Argon2 wa= s not known
>>>>>>>=C2=A0 =C2=A0before July
>>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A02015), bu= t
>>>>>>>>>=C2=A0 =C2=A0 I do not
>>>>>>>>>>> see why the WG would have acce= pted that one
>>>>>>>=C2=A0 =C2=A0over the
>>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0others. >>>>>>>>>=C2=A0 =C2=A0 Anyway it is
>>>>>>>>>>> too late to fix this, as it is= my understanding
>>>>>>>=C2=A0 =C2=A0that
>>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0the WG do= es
>>>>>>>>>=C2=A0 =C2=A0 not have
>>>>>>>>>>> enough energy to reach consens= us on a new password
>>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0algorithm= .
>>>>>>>>>=C2=A0 =C2=A0 Someone can
>>>>>>>>>>> just write a draft adding Argo= n2 as password
>>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0encryptio= n, as we
>>>>>>>>>=C2=A0 =C2=A0 will have a
>>>>>>>>>>> IANA registry for that.
>>>>>>>>>>>
>>>>>>>>>>>>
>>>>>>>>>>>>
>>>>>>>>>>>>> - Establish a registry= for new password
>>>>>>>=C2=A0 =C2=A0algorithms
>>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0(section<= br> >>>>>>>>>=C2=A0 =C2=A0 18.5), so
>>>>>>>>>>>>> algorithms like Argon2= could be added later
>>>>>>>=C2=A0 =C2=A0(but note
>>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0that our = own
>>>>>>>>>>>>> proposals to add more = password algorithms were
>>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0rejected = by the
>>>>>>>>>=C2=A0 =C2=A0 working
>>>>>>>>>>>>> group).
>>>>>>>>>>>>> - Add a new password a= lgorithm to that registry,
>>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0namely SH= A-256.
>>>>>>>>>>>>> - Register MD5 as an i= nitial password
>>>>>>>=C2=A0 =C2=A0algorithm for
>>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0backward<= br> >>>>>>>>>>> compatibility
>>>>>>>>>>>>> purpose.
>>>>>>>>>>>>>
>>>>>>>>>>>>> As for the biddown pro= tection itself, it is my
>>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0recollect= ion that it
>>>>>>>>>>>>> happened more or less = like that:
>>>>>>>>>>>>>
>>>>>>>>>>>>>
>>>>>>>>>>>>> INT. MEETING ROOM - DA= Y
>>>>>>>>>>>>>
>>>>>>>>>>>>> One of the co-editors = of STUNBis stands at the
>>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0microphon= e:
>>>>>>>>>>>>>
>>>>>>>>>>>>>=C2=A0 =C2=A0 =C2=A0 = =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2= =A0CO-EDITOR
>>>>>>>>>>>>>=C2=A0 =C2=A0 =C2=A0 = =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0We added SHA-256 protection for >>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0passwords=
>>>>>>>>>>>>>=C2=A0 =C2=A0 =C2=A0 = =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0in STUNBis.
>>>>>>>>>>>>>
>>>>>>>>>>>>>=C2=A0 =C2=A0 =C2=A0 = =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2= =A0SOMEONE (V.O.)
>>>>>>>>>>>>>=C2=A0 =C2=A0 =C2=A0 = =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0As MD5 still need to be
>>>>>>>=C2=A0 =C2=A0supported,
>>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0you need = to add
>>>>>>>>>>>>>=C2=A0 =C2=A0 =C2=A0 = =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0protection for bid-down
>>> attacks.
>>>>>>>>>>>>>
>>>>>>>>>>>>> CLOSE-UP on CO-EDITOR = ROLLING HIS EYES
>>>>>>>>>>>>>
>>>>>>>>>>>>>=C2=A0 =C2=A0 =C2=A0 = =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2= =A0CO-EDITOR
>>>>>>>>>>>>>=C2=A0 =C2=A0 =C2=A0 = =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0OK, I'll work on that.
>>>>>>>>>>>>>
>>>>>>>>>>>>> Four to eight months h= as passed.
>>>>>>>>>>>>>
>>>>>>>>>>>>> INT. ANOTHER MEETING R= OOM - DAY
>>>>>>>>>>>>>
>>>>>>>>>>>>> The same co-editor of = STUNBis stands at the
>>>>>>>=C2=A0 =C2=A0microphone:
>>>>>>>>>>>>>
>>>>>>>>>>>>>=C2=A0 =C2=A0 =C2=A0 = =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2= =A0CO-EDITOR
>>>>>>>>>>>>>=C2=A0 =C2=A0 =C2=A0 = =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0We added a nice mechanism to
>>>>>>>=C2=A0 =C2=A0prevent
>>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0bid-down<= br> >>>>>>>>>>>>>=C2=A0 =C2=A0 =C2=A0 = =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0attacks on passwords.=C2=A0 Any >>>>>>>=C2=A0 =C2=A0comments?
>>>>>>>>>>>>>
>>>>>>>>>>>>>=C2=A0 =C2=A0 =C2=A0 = =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2= =A0THE ROOM
>>>>>>>>>>>>>=C2=A0 =C2=A0 =C2=A0 = =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0(silence)
>>>>>>>>>>>>>
>>>>>>>>>>>>>=C2=A0 =C2=A0 =C2=A0 = =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2= =A0CO-EDITOR
>>>>>>>>>>>>>=C2=A0 =C2=A0 =C2=A0 = =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0Moving on...
>>>>>>>>>>>>>
>>>>>>>>>>>>
>>>>>>>>>>>> I don't see how any of= this is relevant to my
>>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0technical= points
>>>>>>>>>=C2=A0 =C2=A0 above.
>>>>>>>>>>>
>>>>>>>>>>> My point was that we, the co-e= ditors, did not
>>>>>>>=C2=A0 =C2=A0decide on
>>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0adding >>>>>>>>>=C2=A0 =C2=A0 bid-down
>>>>>>>>>>> protection, someone asked us t= o do so and
>>>>>>>=C2=A0 =C2=A0no-one in the
>>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0WG saw >>>>>>>>>=C2=A0 =C2=A0 any problem
>>>>>>>>>>> with that.=C2=A0 The reasons t= hat person wanted that
>>>>>>>=C2=A0 =C2=A0are not
>>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0known to<= br> >>>>>>>>>=C2=A0 =C2=A0 us but, as
>>>>>>>>>>> you insist, here's one rea= son I can think of:
>>>>>>>>>>>
>>>>>>>>>>> It is a fact that, for operati= onal reasons, a
>>>>>>>=C2=A0 =C2=A0password
>>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0database<= br> >>>>>>>>>=C2=A0 =C2=A0 cannot be
>>>>>>>>>>> re-encrypted at once.=C2=A0 Al= so for operational
>>>>>>>=C2=A0 =C2=A0reasons,
>>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0the MD5 p= assword
>>>>>>>>>>> cannot be immediately removed = from the database
>>>>>>>=C2=A0 =C2=A0as soon
>>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0the user<= br> >>>>>>>>>=C2=A0 =C2=A0 submitted
>>>>>>>>>>> a new one.=C2=A0 In fact, and = for quite some time, both
>>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0encrypted=
>>>>>>>>>=C2=A0 =C2=A0 variants of
>>>>>>>>>>> the same password may have to = be kept in that
>>>>>>>=C2=A0 =C2=A0database,
>>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0because a=
>>>>>>>>>=C2=A0 =C2=A0 single
>>>>>>>>>>> user may use a mix of devices,= some of them
>>>>>>>=C2=A0 =C2=A0that use an
>>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0RFC 5389<= br> >>>>>>>>>=C2=A0 =C2=A0 client,
>>>>>>>>>>> some that use a STUNbis client= .=C2=A0 It is up to
>>>>>>>=C2=A0 =C2=A0the STUN
>>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0server ow= ner to
>>>>>>>>>>> decide how long the migration = to STUNbis will
>>>>>>>=C2=A0 =C2=A0take and
>>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0when it >>>>>>>>>=C2=A0 =C2=A0 will be
>>>>>>>>>>> acceptable to reject all RFC 5= 389 (i.e. MD5)
>>>>>>>=C2=A0 =C2=A0clients (that
>>>>>>>>>=C2=A0 =C2=A0 migration time
>>>>>>>>>>> can be purposely reduced to 0 = seconds but
>>>>>>>=C2=A0 =C2=A0that's the
>>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0choice an= d
>>>>>>>>>>> responsibility of the owner of= the server).
>>>>>>>>>>>
>>>>>>>>>>> Meanwhile we still need to be = sure that if the
>>> STUN
>>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0client is=
>>>>>>>>>=C2=A0 =C2=A0 implementing
>>>>>>>>>>> STUNbis it unconditionally get= s the additional
>>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0protectio= n of the new
>>>>>>>>>>> password encryption algorithm.= =C2=A0 That's where
>>>>>>>=C2=A0 =C2=A0the biddown
>>>>>>>>>=C2=A0 =C2=A0 protection kicks
>>>>>>>>>>> in, by preventing an online at= tacker to have
>>>>>>>=C2=A0 =C2=A0the server
>>>>>>>>>=C2=A0 =C2=A0 misidentifying a
>>>>>>>>>>> STUNbis client as an RFC 5389 = client, by
>>>>>>>=C2=A0 =C2=A0preventing an
>>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0online >>>>>>>>>=C2=A0 =C2=A0 attacker to
>>>>>>>>>>> have the client misidentifying= a STUNbis server
>>>>>>>=C2=A0 =C2=A0as a
>>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0RFC 5389<= br> >>>>>>>>>=C2=A0 =C2=A0 server, and
>>>>>>>>>>> having both them use the MD5 e= ncrypted password
>>>>>>>=C2=A0 =C2=A0instead
>>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0of the >>>>>>>>>=C2=A0 =C2=A0 SHA-256
>>>>>>>>>>> encrypted password, all of tha= t easily done by
>>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0stripping= the
>>>>>>>>>=C2=A0 =C2=A0 unprotected
>>>>>>>>>>> 401 response of the new STUNbi= s
>>> PASSWORD-ALGORITHMS
>>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0attribute= .
>>>>>>>>>>>
>>>>>>>>>>>>
>>>>>>>>>>>>
>>>>>>>>>>>>
>>>>>>>>>>>>>> The second topic i= s the hash used to compute
>>> the
>>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0MAC. Howe= ver,
>>>>>>>>>=C2=A0 =C2=A0 I don't
>>>>>>>>>>>>> see
>>>>>>>>>>>>>> how
>>>>>>>>>>>>>> this gives you sen= sible biddown protection
>>>>>>>=C2=A0 =C2=A0because
>>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0that hash=
>>>>>>>>>=C2=A0 =C2=A0 is also
>>>>>>>>>>> used
>>>>>>>>>>>>>> to compute
>>>>>>>>>>>>>> MAC over the negot= iation: an attacker who has
>>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0compromis= ed a
>>>>>>>>>=C2=A0 =C2=A0 MAC which
>>>>>>>>>>> the
>>>>>>>>>>>>>> server
>>>>>>>>>>>>>> supports will quit= e likely be able to forge
>>>>>>>=C2=A0 =C2=A0a MAC
>>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0over the<= br> >>>>>>>>>=C2=A0 =C2=A0 transcript
>>>>>>>>>>> as
>>>>>>>>>>>>>> well. This is,
>>>>>>>>>>>>>> I suppose, potenti= ally useful as a defense
>>>>>>>=C2=A0 =C2=A0against
>>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0some othe= r
>>>>>>>>>=C2=A0 =C2=A0 weakness
>>>>>>>>>>>>>> (e.g.,
>>>>>>>>>>>>>> version #), but I = don't really see how the
>>>>>>>=C2=A0 =C2=A0current
>>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0design >>>>>>>>>=C2=A0 =C2=A0 helps against
>>>>>>>>>>>>>> attacks on the
>>>>>>>>>>>>>> MAC.
>>>>>>>>>>>>>
>>>>>>>>>>>>> There is no biddown at= tack protection for the
>>>>>>>=C2=A0 =C2=A0MAC, as
>>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0stated in=
>>>>>>>>>=C2=A0 =C2=A0 Section
>>>>>>>>>>>>> 16.3:
>>>>>>>>>>>>>
>>>>>>>>>>>>> "The bid-down pro= tection mechanism described
>>>>>>>=C2=A0 =C2=A0in this
>>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0document<= br> >>>>>>>>>=C2=A0 =C2=A0 is new,
>>>>>>>>>>>>> and thus cannot curren= tly protect against a
>>>>>>>=C2=A0 =C2=A0bid-down
>>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0attack th= at
>>>>>>>>>>>>> lowers the strength of= the hash algorithm to
>>>>>>>=C2=A0 =C2=A0HMAC-SHA1."
>>>>>>>>>>>>>
>>>>>>>>>>>>> What we put in place i= s a plan for *future*
>>>>>>>=C2=A0 =C2=A0versions
>>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0of STUN t= o get
>>>>>>>>>>>>> biddown protection for= the MAC.=C2=A0 That's it,
>>>>>>>=C2=A0 =C2=A0no more,
>>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0no less.<= br> >>>>>>>>>>>>>
>>>>>>>>>>>>
>>>>>>>>>>>> Yes, but I don't belie= ve that this will
>>>>>>>=C2=A0 =C2=A0provide bid-down
>>>>>>>>>=C2=A0 =C2=A0 protection for
>>>>>>>>>>> the
>>>>>>>>>>>> MAC in the future for the = reasons I indicate
>>>>>>>=C2=A0 =C2=A0above.
>>>>>>>>>>>>
>>>>>>>>>>>> If you think this does som= ething useful,
>>>>>>>=C2=A0 =C2=A0please show me an
>>>>>>>>>=C2=A0 =C2=A0 example attack
>>>>>>>>>>>> and how this fixes it. Not= e that it's not
>>>>>>>=C2=A0 =C2=A0generally
>>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0useful to=
>>>>>>>>>=C2=A0 =C2=A0 just bid
>>>>>>>>>>> down
>>>>>>>>>>>> the MAC itself unless the = MAC you bid down to
>>>>>>>=C2=A0 =C2=A0is weak
>>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0enough to=
>>>>>>>>>=C2=A0 =C2=A0 exploit
>>>>>>>>>>> in
>>>>>>>>>>>> some other way.
>>>>>>>>>>>
>>>>>>>>>>> I do not know what weaknesses = will be
>>>>>>>=C2=A0 =C2=A0discovered in the
>>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0future. >>>>>>>>>=C2=A0 =C2=A0 I am also
>>>>>>>>>>> pretty sure that the cost of n= ot using that
>>>>>>>=C2=A0 =C2=A0mechanism
>>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0is very >>>>>>>>>=C2=A0 =C2=A0 close to 0.
>>>>>>>>>>> What I am sure of is that the = cost of
>>>>>>>=C2=A0 =C2=A0reengineering a
>>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0new biddo= wn
>>>>>>>>>>> protection mechanism if we eve= r need it will be
>>>>>>>=C2=A0 =C2=A0high.
>>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0We alread= y
>>>>>>>>>=C2=A0 =C2=A0 went
>>>>>>>>>>> through the pains of designing= one for the
>>> password
>>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0algorithm= , so
>>>>>>>>>=C2=A0 =C2=A0 why not
>>>>>>>>>>> extend it so it can be used in= the aftermath of
>>> the
>>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0next Snow= den
>>>>>>>>>=C2=A0 =C2=A0 facepalm
>>>>>>>>>>> moment?
>>>>>>>>>>>
>>>>>>>>>>>> Again, happy to have a cal= l to walk though
>>>>>>>=C2=A0 =C2=A0this if that
>>>>>>>>>>>> helps.
>>>>>>>>>>>>
>>>>>>>>>>>> -Ekr
>>>>>>>>>>>>
>>>>>>>>>>>>
>>>>>>>>>>>>
>>>>>>>>>>>>
>>>>>>>>>>>>>>
>>>>>>>>>>>>>> You might think th= at there was a MAC which
>>>>>>>=C2=A0 =C2=A0was easier to
>>>>>>>>>=C2=A0 =C2=A0 reverse to
>>>>>>>>>>> find
>>>>>>>>>>>>>> the original
>>>>>>>>>>>>>> password, but the = defense you have here
>>>>>>>=C2=A0 =C2=A0doesn't help
>>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0with that=
>>>>>>>>>=C2=A0 =C2=A0 because
>>>>>>>>>>>>> the
>>>>>>>>>>>>>> on-path attacker c= an do a bid-down and use the
>>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0client as= a MAC
>>>>>>>>>=C2=A0 =C2=A0 oracle
>>>>>>>>>>> for
>>>>>>>>>>>>>> any MAC the client= supports.
>>>>>>>>>>>>>>
>>>>>>>>>>>>>> So, I still don= 9;t understand what this is
>>>>>>>=C2=A0 =C2=A0supposed
>>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0to do. Ha= ppy to
>>>>>>>>>>> have a
>>>>>>>>>>>>>> call if you
>>>>>>>>>>>>>> think that helps >>>>>>>>>>>>>>
>>>>>>>>>>>>>> -Ekr
>>>>>>>>>>>>>>
>>>>>>>>>>>>>>
>>>>>>>>>>>>>>
>>>>>>>>>>>>>>
>>>>>>>>>>>>>> On Mon, Jun 18, 20= 18 at 3:40 AM, Gonzalo
>>>>>>>=C2=A0 =C2=A0Camarillo <
>>>>>>>>>>>>>> Gonzalo.Camarillo@ericsson.com
>>>>>>>=C2=A0 =C2=A0<mailto:Gonzalo.Camarillo@ericsson.com= >
>>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0<mailt= o:Gonza= lo.Camarillo@ericsson.com
>>>>>>>=C2=A0 =C2=A0<mailto:Gonzalo.Camarillo@ericsson.com= >>
>>>>>>>>>=C2=A0 =C2=A0 <mailto:Gonzalo.Camarillo@eri= csson.com
>>>>>>>=C2=A0 =C2=A0<mailto:Gonzalo.Camarillo@ericsson.com= >
>>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0<mailt= o:Gonza= lo.Camarillo@ericsson.com
>>>>>>>=C2=A0 =C2=A0<mailto:Gonzalo.Camarillo@ericsson.com= >>>> wrote:
>>>>>>>>>>>>>>
>>>>>>>>>>>>>>> Marc, Eric, >>>>>>>>>>>>>>>
>>>>>>>>>>>>>>> what is the st= atus of this discussion?
>>>>>>>>>>>>>>>
>>>>>>>>>>>>>>> Thanks,
>>>>>>>>>>>>>>>
>>>>>>>>>>>>>>> Gonzalo
>>>>>>>>>>>>>>>
>>>>>>>>>>>>>>>> On 04/05/2= 018 2:35 AM, Eric Rescorla wrote:
>>>>>>>>>>>>>>>>
>>>>>>>>>>>>>>>>
>>>>>>>>>>>>>>>> On Mon, Ap= r 23, 2018 at 11:16 AM, Marc
>>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0Petit-Hug= uenin <
>>>>>>>>>>>>> petithug@acm.org <mailto:petithug@acm.org>
>>>>>>>=C2=A0 =C2=A0<mailto:petithug@acm.org <mailto:petithug@acm.org>>
>>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0<mailt= o:petithug@acm.org <mailto:petithug= @acm.org>
>>>>>>>=C2=A0 =C2=A0<mailto:petithug@acm.org <mailto:petithug@acm.org>>><= br> >>>>>>>>>>>>>>>> <mailto= :petithug@acm.org=
>>>>>>>=C2=A0 =C2=A0<mailto:petithug@acm.org> <mailto:petithug@acm.org
>>>>>>>=C2=A0 =C2=A0<mailto:petithug@acm.org>>
>>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0<mailt= o:petithug@acm.org <mailto:petithug= @acm.org>
>>>>>>>=C2=A0 =C2=A0<mailto:petithug@acm.org <mailto:petithug@acm.org>>>&= gt;> wrote:
>>>>>>>>>>>>>>>>
>>>>>>>>>>>>>>>>=C2=A0 =C2= =A0 On 04/22/2018 05:22 PM, Eric Rescorla
>>>>>>>=C2=A0 =C2=A0wrote:
>>>>>>>>>>>>>>>>> On Sun= , Apr 22, 2018 at 2:02 PM, Marc
>>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0Petit-Hug= uenin <
>>>>>>>>>>>>>>> petithug@acm.org <mailto:petithug@acm.org>=
>>>>>>>=C2=A0 =C2=A0<mailto:petithug@acm.org <mailto:petithug@acm.org>>
>>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0<mailt= o:petithug@acm.org <mailto:petithug= @acm.org>
>>>>>>>=C2=A0 =C2=A0<mailto:petithug@acm.org <mailto:petithug@acm.org>>><= br> >>>>>>>>>=C2=A0 =C2=A0 <mailto:petithug@acm.org <mailto:petithug@acm.org>=
>>>>>>>=C2=A0 =C2=A0<mailto:petithug@acm.org <mailto:petithug@acm.org>>
>>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0<mailt= o:petithug@acm.org <mailto:petithug= @acm.org>
>>>>>>>=C2=A0 =C2=A0<mailto:petithug@acm.org <mailto:petithug@acm.org>>>&= gt;>
>>>>>>>>>>>>>>>>> wrote:=
>>>>>>>>>>>>>>>>>
>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>>= ;>=C2=A0 =C2=A0 =C2=A0For a request or indication
>>>>>>>=C2=A0 =C2=A0message,
>>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0the agent=
>>>>>>>>>=C2=A0 =C2=A0 MUST
>>>>>>>>>>>>>>> include the >>>>>>>>>>>>>>>>>>>= ;>=C2=A0 =C2=A0 =C2=A0USERNAME,
>>>>>>>=C2=A0 =C2=A0MESSAGE-INTEGRITY-SHA256, and
>>>>>>>>>>> MESSAGE-INTEGRITY
>>>>>>>>>>>>>>>>>> at= tributes
>>>>>>>>>>>>>>>>>>>= ;>=C2=A0 =C2=A0 =C2=A0in the message unless the agent
>>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0knows fro= m an
>>>>>>>>>=C2=A0 =C2=A0 external
>>>>>>>>>>>>>>> indication
>>>>>>>>>>>>>>>>>>>= ;>=C2=A0 =C2=A0 =C2=A0which message integrity
>>>>>>>=C2=A0 =C2=A0algorithm is
>>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0supported=
>>>>>>>>>=C2=A0 =C2=A0 by both
>>>>>>>>>>>>>>> agents.=C2=A0 = In
>>>>>>>>>>>>>>>>>>>= ;>=C2=A0 =C2=A0 =C2=A0this case either
>>>>>>>=C2=A0 =C2=A0MESSAGE-INTEGRITY or
>>>>>>>>>>>>>>> MESSAGE-INTEGR= ITY-SHA256 MUST
>>>>>>>>>>>>>>>>>>>= ;>=C2=A0 =C2=A0 =C2=A0be included in addition to
>>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0USERNAME.= =C2=A0 The HMAC
>>>>>>>>>=C2=A0 =C2=A0 for the
>>>>>>>>>>>>>>> MESSAGE-
>>>>>>>>>>>>>>>>>>>= ;
>>>>>>>>>>>>>>>>>>>= ; This text appears to conflict with
>>>>>>>=C2=A0 =C2=A0S 7.3 of
>>>>>>>>>=C2=A0 =C2=A0 5245-bis, which
>>>>>>>>>>>>> says:
>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>> [t= ext missing]
>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>> Hm= m, no, RFC245bis is still
>>> referencing
>>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0RFC5389, = so the
>>>>>>>>>>>>> procedure
>>>>>>>>>>>>>>> for
>>>>>>>>>>>>>>>>>> st= unbis does not apply.
>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>
>>>>>>>>>>>>>>>>> I hear= what you're saying, but
>>>>>>>=C2=A0 =C2=A0publishing two
>>>>>>>>>=C2=A0 =C2=A0 documents at the
>>>>>>>>>>>>>>> same time
>>>>>>>>>>>>>>>>> which<= br> >>>>>>>>>>>>>>>>> make c= ontrary recommendations about
>>>>>>>=C2=A0 =C2=A0the same
>>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0basic
>>>>>>>>>=C2=A0 =C2=A0 protocol is
>>>>>>>>>>>>>>> un-good.
>>>>>>>>>>>>>>>>
>>>>>>>>>>>>>>>>=C2=A0 =C2= =A0 Sure, but wouldn't it be simpler to have
>>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0rfc5245bi= s
>>>>>>>>>=C2=A0 =C2=A0 using stunbis
>>>>>>>>>>>>>>>>=C2=A0 =C2= =A0 and have them updating their text,
>>>>>>>=C2=A0 =C2=A0more than
>>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0adding so= me
>>>>>>>>>=C2=A0 =C2=A0 tortuous
>>>>>>>>>>>>>>>>=C2=A0 =C2= =A0 text in stunbis?
>>>>>>>>>>>>>>>>
>>>>>>>>>>>>>>>>>
>>>>>>>>>>>>>>>>>
>>>>>>>>>>>>>>>>>>>= ;=C2=A0 =C2=A0 =C2=A0The STUN usage must specify
>>> which
>>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0transport=
>>>>>>>>>=C2=A0 =C2=A0 protocol is
>>>>>>>>>>>>>>> used, and
>>>>>>>>>>>>>>>>>> ho= w
>>>>>>>>>>>>>>>>>>>= ;>=C2=A0 =C2=A0 =C2=A0the agent determines the IP
>>>>>>>=C2=A0 =C2=A0address
>>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0and port<= br> >>>>>>>>>=C2=A0 =C2=A0 of the
>>>>>>>>>>>>>>> recipient.
>>>>>>>>>>>>>>>>>>>= ;>=C2=A0 =C2=A0 =C2=A0Section 8 describes a DNS-based
>>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0method of=
>>>>>>>>>=C2=A0 =C2=A0 determining
>>>>>>>>>>> the
>>>>>>>>>>>>>>> IP
>>>>>>>>>>>>>>>>>> ad= dress
>>>>>>>>>>>>>>>>>>>= ;>=C2=A0 =C2=A0 =C2=A0and port of a server that a
>>>>>>>=C2=A0 =C2=A0usage
>>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0may elect= to
>>>>>>>>>=C2=A0 =C2=A0 use.
>>>>>>>>>>> STUN
>>>>>>>>>>>>>>> may be
>>>>>>>>>>>>>>>>>> us= ed
>>>>>>>>>>>>>>>>>>>= ;>=C2=A0 =C2=A0 =C2=A0with anycast addresses, but
>>> only
>>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0with UDP = and
>>>>>>>>>=C2=A0 =C2=A0 in usages
>>>>>>>>>>>>>>> where
>>>>>>>>>>>>>>>>>>>= ;>=C2=A0 =C2=A0 =C2=A0authentication is not used.
>>>>>>>>>>>>>>>>>>>= ;
>>>>>>>>>>>>>>>>>>>= ; Why this restriction? You should
>>>>>>>=C2=A0 =C2=A0be able
>>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0to use >>>>>>>>>=C2=A0 =C2=A0 anycast with
>>>>>>>>>>>>>>> long-term
>>>>>>>>>>>>>>>>>>>= ; AUTH for (say) TURN.
>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>> >>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0https://www.ietf.org/mail-archive/web/behave/current/<= /a>
>>>>>>>>>>>>>>> msg03582.html<= br> >>>>>>>>>>>>>>>>
>>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 <https://www.ietf.org/mail-archive/web/behave/curren= t/
>>>>>>>>>>>>> msg03582.html>
>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>> I = think that the decision of
>>>>>>>=C2=A0 =C2=A0permitting Anycast
>>>>>>>>>=C2=A0 =C2=A0 should be left
>>>>>>>>>>>>> to
>>>>>>>>>>>>>>> each
>>>>>>>>>>>>>>>>>> ST= UN Usage.=C2=A0 Basic STUN Usage does
>>>>>>>=C2=A0 =C2=A0not use
>>>>>>>>>=C2=A0 =C2=A0 authentication and
>>>>>>>>>>>>> use
>>>>>>>>>>>>>>> only a
>>>>>>>>>>>>>>>>>> on= e round trip for the Binding
>>>>>>>=C2=A0 =C2=A0transaction, so
>>>>>>>>>=C2=A0 =C2=A0 Unicast can be
>>>>>>>>>>>>>>> used.
>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>
>>>>>>>>>>>>>>>>>> OT= OH, TURN and ICE should probably say
>>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0something=
>>>>>>>>>=C2=A0 =C2=A0 about that,
>>>>>>>>>>> so
>>>>>>>>>>>>> I
>>>>>>>>>>>>>>> added a
>>>>>>>>>>>>>>>>>> ne= w bullet point in Section 13:
>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>=C2= =A0 =C2=A0o=C2=A0 If Anycast addresses can be
>>>>>>>=C2=A0 =C2=A0used for
>>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0the serve= r
>>>>>>>>>=C2=A0 =C2=A0 in case
>>>>>>>>>>>>> TCP
>>>>>>>>>>>>>>> or
>>>>>>>>>>>>>>>>>>=C2= =A0 =C2=A0 =C2=A0 TLS-over-TCP, or
>>>>>>>=C2=A0 =C2=A0authentication are used.
>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>
>>>>>>>>>>>>>>>>> Are yo= u leaving this text in? That
>>> seems
>>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0very conf= using.
>>>>>>>>>>>>>>>>
>>>>>>>>>>>>>>>>=C2=A0 =C2= =A0 In isolation yes, but I think it makes
>>>>>>>=C2=A0 =C2=A0sense
>>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0which the= text
>>>>>>>>>>> before
>>>>>>>>>>>>>>>>=C2=A0 =C2= =A0 the bullet points:
>>>>>>>>>>>>>>>>
>>>>>>>>>>>>>>>>=C2=A0 =C2= =A0 =C2=A0 =C2=A0A STUN usage defines how STUN is
>>>>>>>=C2=A0 =C2=A0actually
>>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0utilized = --
>>>>>>>>>=C2=A0 =C2=A0 when to
>>>>>>>>>>>>> send
>>>>>>>>>>>>>>>>=C2=A0 =C2= =A0 =C2=A0 =C2=A0requests, what to do with the
>>>>>>>=C2=A0 =C2=A0responses,
>>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0and which=
>>>>>>>>>=C2=A0 =C2=A0 optional
>>>>>>>>>>>>>>>>=C2=A0 =C2= =A0 =C2=A0 =C2=A0procedures defined here (or in an
>>>>>>>=C2=A0 =C2=A0extension
>>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0to STUN)<= br> >>>>>>>>>=C2=A0 =C2=A0 are to be
>>>>>>>>>>>>>>> used.
>>>>>>>>>>>>>>>>=C2=A0 =C2= =A0 =C2=A0 =C2=A0A usage also defines:
>>>>>>>>>>>>>>>>
>>>>>>>>>>>>>>>>=C2=A0 =C2= =A0 [...]
>>>>>>>>>>>>>>>>
>>>>>>>>>>>>>>>>=C2=A0 =C2= =A0 =C2=A0 =C2=A0o=C2=A0 If Anycast addresses can be used
>>>>>>>=C2=A0 =C2=A0for the
>>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0server in=
>>>>>>>>>=C2=A0 =C2=A0 case TCP
>>>>>>>>>>>>> or
>>>>>>>>>>>>>>>>=C2=A0 =C2= =A0 =C2=A0 =C2=A0 =C2=A0 TLS-over-TCP, or authentication
>>>>>>>=C2=A0 =C2=A0are used.
>>>>>>>>>>>>>>>>
>>>>>>>>>>>>>>>>
>>>>>>>>>>>>>>>> What is th= e need for the restriction at all

--0000000000008e8fc905849f5140-- From nobody Fri Mar 22 00:53:02 2019 Return-Path: X-Original-To: tram@ietfa.amsl.com Delivered-To: tram@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E0DC0130EC1 for ; Fri, 22 Mar 2019 00:52:51 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.301 X-Spam-Level: X-Spam-Status: No, score=-4.301 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=unavailable autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=ericsson.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id E6YiNm8ednNG for ; Fri, 22 Mar 2019 00:52:50 -0700 (PDT) Received: from sessmg23.ericsson.net (sessmg23.ericsson.net [193.180.251.45]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 87B8D130EC2 for ; Fri, 22 Mar 2019 00:52:48 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; d=ericsson.com; s=mailgw201801; c=relaxed/relaxed; q=dns/txt; i=@ericsson.com; t=1553241165; x=1555833165; h=From:Sender:Reply-To:Subject:Date:Message-ID:To:CC:MIME-Version:Content-Type: Content-Transfer-Encoding:Content-ID:Content-Description:Resent-Date:Resent-From: Resent-Sender:Resent-To:Resent-Cc:Resent-Message-ID:In-Reply-To:References:List-Id: List-Help:List-Unsubscribe:List-Subscribe:List-Post:List-Owner:List-Archive; bh=4g6fs3o5Sa19oH+SC3Djpi0BIg1XA2L1ah99813pud4=; b=K2LMZsclPrfjQVKl/xXNkMimHJpe7/zYRDtL/psMJwB7ZgqoKPyuRCsPlfrdKS7+ wChaEL0GSL2i6fRGJc3tqA2mW1TsyaPeMaxUvwejgrxuT+iu/Skj5bYCdlhBf9cg by0cCxjJXCZbTEvdol9Pi+Kc7kIWf/XKy0zs6wi+Ao0=; X-AuditID: c1b4fb2d-42aae9e000002218-dc-5c94944d865c Received: from ESESBMB503.ericsson.se (Unknown_Domain [153.88.183.116]) by sessmg23.ericsson.net (Symantec Mail Security) with SMTP id 5A.57.08728.D44949C5; Fri, 22 Mar 2019 08:52:45 +0100 (CET) Received: from ESESBMR506.ericsson.se (153.88.183.202) by ESESBMB503.ericsson.se (153.88.183.186) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256_P256) id 15.1.1713.5; Fri, 22 Mar 2019 08:52:34 +0100 Received: from ESESBMB505.ericsson.se (153.88.183.172) by ESESBMR506.ericsson.se (153.88.183.202) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256_P256) id 15.1.1713.5; Fri, 22 Mar 2019 08:52:34 +0100 Received: from [100.94.49.56] (153.88.183.153) by smtp.internal.ericsson.com (153.88.183.188) with Microsoft SMTP Server id 15.1.1713.5 via Frontend Transport; Fri, 22 Mar 2019 08:52:33 +0100 To: "Gonzalo Salgueiro (gsalguei)" CC: Spencer Dawkins at IETF , Simon Perreault , Adam Roach , IESG , "tram-chairs@ietf.org" , "draft-ietf-tram-stun-pmtud@ietf.org" , "Asveren, Tolga" , "tram@ietf.org" References: <153834237082.13405.1228259718885034461.idtracker@ietfa.amsl.com> <2EE82D0D-5024-4C71-8F25-0506D5530814@cisco.com> From: Gonzalo Camarillo Openpgp: preference=signencrypt Autocrypt: addr=Gonzalo.Camarillo@ericsson.com; prefer-encrypt=mutual; keydata= xsBNBEtSyYUBCADL7itybUN0VVtGQuO81AdviJNSo/BIc6xuVUofHlr/U9CbQcSrRSggvTfa 6n5o9t9zAuwp9pp+hQfSzn4/LrEaV2BmEfAFclSl57IhsXDJecw58JqGZrjahIjgU+rmZKPE RqLzubmI3ltEolLb4kkB9Y8FIQBnE1N3O0wHp7BE8VI5pQX24UkRkEtUptmhwnaehURg9atb 1myxbt1nUDEA5PLJNbPeXxPRJ058OEnPtToRinSCJ7BFtD6PoeUWgOL4kKdRbMyswDikiXnN Ntj1VkDQ6yi7pOb2qkviOzKOf/smqm4ovMxUrET7SzKw4icArL+xQUW3ayJyfSju1o5rABEB AAHNJkdvbnphbG8gQ2FtYXJpbGxvIDxnY2FtYXJpbEBnbWFpbC5jb20+wsCBBBMBAgArAhsj BgsJCAcDAgYVCAIJCgsEFgIDAQIeAQIXgAIZAQUCWhwGngUJFGzXmQAKCRDRM1CYcD+HNkjG CACG39D/tNsA5xxSqRtN3JJCTfpj+BWqRckMEpBjBWlOOtb94QY8r9NHRIDwvA5qCVYRqQTI qVyReNw/CkOuaah2rbCdhsng6ZAMzFovXSEnbz+wse4QiKybHvjlJJA9qQiNlne57NVlNvLN LrpZJGmSJlJBBEQRq3Z9Crl2tWFkB6mmoXNnoRej6eVmhFoAo3td5loHo55nqYVZYtAHbXan ggmPI12gUigKf4PuvIISpdokSlkpam02Y61ygtqrlYvNnM+GpbayW2X3ZY5x6bwUwfkRSUCj +xslGaRfJUwr8kUxhVlcLR6qVcjNxWeZf9XKVH86OxEJVUVFsChlDAvHzsBNBEtSyYUBCADB qzP0B7lWge5Hn1648WPWrmUg8r3723XL/zUZe1zyEVsY9VyWhrBmuEy7Xm7wdLt0+BBXWJez 7/wWR9w/63qT+3+W0fe6SDXeZqF+HtYO5QPuu/VYtex0e3TI2w4s53ZM5KQCQF60kTDoK43e 5a6/G2GCKMPpkVKxpIeOiDITiRXq9GV7KHkQpPczqj9ImWp2M9sEIngZRaKILU//TaiWnRGR i6vN/sAvfEuu1fXTwpR6bBdD9wIZgyeSqEgxnioDdyFZYkTFl9G8TuLxNIdpVPzW2M9PKRQs i/kl/Kadsgnd8RtlP7cPoIqLMjmOfGwR8EVbKpmkM1+iKJ+g9F/bABEBAAHCwGUEGAECAA8C GwwFAlocBq4FCRRs16kACgkQ0TNQmHA/hzamwgf/Tnr7/WYnKNmEYvwr/GxhSelVYsBwejkz tCXa4gmVkErgPBEYsUtWAP+jVoYndG74v/3zBPHl4CehE9RnAJ+lpsWjwsn0qPI7sCik3Xqv c44g/RQF9RSI8DckQM0MqLJNazzq4tBi/ZbILWNx2N4LrEzhwoePug3MDn3rCv1Xpr/B60or p1zixtSRKyZo+L7UjttUdJkqxUbC35pBlZlDAL2Dop9He7XwUFofyW1Xvn9xxx0NasnlJX9G 288peTb41bQrs9SqaH1aVLXBTo7S9o+8oB9DLTIIwDQqfxqTWpGIfBhiTm9d7ai9WcFC8jSW zJtc/6luXoGjvUlBzQx0jQ== Message-ID: <487146f2-f343-3c56-aeca-2e3fcfe54675@ericsson.com> Date: Fri, 22 Mar 2019 09:52:33 +0200 User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; rv:60.0) Gecko/20100101 Thunderbird/60.5.3 MIME-Version: 1.0 In-Reply-To: Content-Type: text/plain; charset="utf-8" Content-Language: en-US Content-Transfer-Encoding: 8bit X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFtrEIsWRmVeSWpSXmKPExsUyM2J7ia7vlCkxBr8uSFvs+buI3eLwPAWL uVP8LGb8mchssfTBIWaLZVP2MFusX/6N3WL5z5VsFh/WXmBz4PSY8nsjq8fOWXfZPZYs+cnk cezqNmaPWTufsHjsmTOJMYAtissmJTUnsyy1SN8ugStj5vtZLAW7FCo6Pu5hbGD8INHFyMkh IWAicavjOHMXIxeHkMARRon1s6YwgSSEBL4xSuw74w+RALJ/P25hhXAOM0r0HNvMDFIlLJAu ce3lFDBbRMBcYs/vFjaQImaBV0wSOx6vZ4Ho+Msq8eHOcrC5bAIWEltu3WcBsfkF5CW6FlwF 62YUuMcrMeFpfhcjBwevgL3E3VvZIGEWAVWJrr1/2EBsUYFYiXV3V4CV8woISpyc+QRsDKeA rURP3yQmkFZmAU2J9bv0QcLMAuISt57MZ4Kw5SWat85mhvhMW2LzmlOMExhFZyGZNAuhexaS 7llIuhcwsqxiFC1OLS7OTTcy1kstykwuLs7P08tLLdnECIzJg1t+6+5gXP3a8RCjAAejEg9v UM2UGCHWxLLiytxDjBIczEoivLuiJ8cI8aYkVlalFuXHF5XmpBYfYpTmYFES5/0jJBgjJJCe WJKanZpakFoEk2Xi4JRqYKyquvZpV/C721uuNjDfj8gsOrQmZFGAXdyr33XTr536a6RbVW/y VjVHxGTlcQWNNG2lqSffnmH65DBhSfa9VdzRpXMcfS5sqwxl7349Yf4VXxaxjISoopPSFR2P xQWe2jrM8f2x+f8Tdu3js9brtctoenw2zzK/oiDVdU6rdNk0rtgNqrtXyCixFGckGmoxFxUn AgAnL4O3xQIAAA== Archived-At: Subject: Re: [tram] Adam Roach's Discuss on draft-ietf-tram-stun-pmtud-10: (with DISCUSS and COMMENT) X-BeenThere: tram@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "Discussing the creation of a Turn Revised And Modernized \(TRAM\) WG, which goal is to consolidate the various initiatives to update TURN and STUN." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 22 Mar 2019 07:52:52 -0000 Hi Gonzalo S, could you please give me a status update on this? Thanks, Gonzalo On 19-Feb-19 20:13, Gonzalo Salgueiro (gsalguei) wrote: > Hi Gonzalo - > > We have made a decision on the PADDING but are still working through some of the comments raised in DISCUSS. We hope to have this finished after finalizing STUN, which should be very close. > > Cheers, > > Gonzalo > >> On Feb 18, 2019, at 8:17 AM, Gonzalo Camarillo wrote: >> >> Hi Gonzalo S, >> >> what is the current status of this? >> >> Cheers, >> >> Gonzalo >> >> On 18-Jan-19 20:12, Gonzalo Salgueiro (gsalguei) wrote: >>> Thanks, Spencer. We will proceed with bringing the definition of >>> PADDING into the current draft. >>> >>> Cheers, >>> >>> Gonzalo >>> >>>> On Jan 14, 2019, at 9:25 AM, Spencer Dawkins at IETF >>>> > >>>> wrote: >>>> >>>> Hi, Gonzalo, >>>> >>>> On Mon, Jan 14, 2019 at 8:05 AM Gonzalo Camarillo >>>> >>> > wrote: >>>> >>>> What is the next step here? >>>> >>>> Gonzalo >>>> >>>> On 13-Dec-18 16:27, Spencer Dawkins at IETF wrote: >>>>> Hi, Simon, >>>>> >>>>> On Thu, Dec 13, 2018 at 7:12 AM Simon Perreault >>>>> >>> >>> >> wrote: >>>>> >>>>> - Pull the definition of PADDING into this document. Declare >>>> that >>>>> we've gathered sufficient experience with PADDING that it now >>>>> warrants being elevated to Standards Track. That is, it's been >>>>> proven to work.____ >>>>> >>>>> __ __ >>>>> >>>>> This is plausible. It solves the first-order problem. ____ >>>>> >>>>> __ __ >>>>> >>>>> I note that RFC 5780 defined a number of new attributes. Is >>>> pulling >>>>> PADDING forward the right thing to do, or are there others that >>>>> would also qualify (so, perhaps a status change for RFC >>>> 5780)? ____ >>>>> >>>>> __ __ >>>>> >>>>> I don’t think the others have been implemented much, so >>>> that’s why I >>>>> think only pulling PADDING makes sense. If I remember >>>> correctly, I >>>>> only implemented PADDING in Numb (I don’t have access to the >>>> source >>>>> code anymore so can’t be sure).____ >>>>> >>>>> __ __ >>>>> >>>>> Anyone else with an opinion? >>>>> >>>>> >>>>> That's helpful information. >>>>> >>>>> We should wait for anyone else with information to weigh in, but >>>> if it's >>>>> correct that the other experimental attributes haven't been >>>> implemented >>>>> and deployed in a way that would provide guidance for >>>> standards-track >>>>> use, I think defining PADDING in this document makes more sense >>>> to me >>>>> than adding a downref to an experimental RFC that we wouldn't >>>> consider >>>>> if the reference was using anything except PADDING. >>>> >>>> >>>> No one has objected in the past month (which included holidays, but I >>>> would have asked this question with a week or two timeout, if the >>>> holidays had not been coming up). >>>> >>>> I think bringing the definition of PADDING into the current draft is >>>> the right thing to do. >>>> >>>> If TRAM people thought that the other experimental attributes in RFC >>>> 5780 don't have enough implementation experience to justify moving >>>> them past Experimental status, changing the status of RFC 5780 to >>>> Historic might be appropriate at some point, but that's not related to >>>> the conversation we're having now, and I haven't asked a question >>>> about that, so I'll ignore that for now. >>>> >>>> Thanks for your help with this. >>>> >>>> Spencer >>>> >>>> >>>>> >>>>> Thanks, >>>>> >>>>> Spencer >>>>> >>>>> ____ >>>>> >>>>> __ __ >>>>> >>>>> Simon____ >>>>> >>>> >>> > From nobody Fri Mar 22 08:10:52 2019 Return-Path: X-Original-To: tram@ietfa.amsl.com Delivered-To: tram@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C895B131023; Fri, 22 Mar 2019 08:10:49 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.998 X-Spam-Level: X-Spam-Status: No, score=-1.998 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=unavailable autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id VEGeHAxVkL4u; Fri, 22 Mar 2019 08:10:43 -0700 (PDT) Received: from mail-lj1-x231.google.com (mail-lj1-x231.google.com [IPv6:2a00:1450:4864:20::231]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id ECAD5130F97; Fri, 22 Mar 2019 08:10:42 -0700 (PDT) Received: by mail-lj1-x231.google.com with SMTP id f23so2375436ljc.0; Fri, 22 Mar 2019 08:10:42 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=CmSPghMcJxO+xmgALaAw32pDoPj6MafH7TrtvG/4KBU=; b=HNkhDf66p+2TBboQ0rD1o+tzZZn/Zqh5CYsu+Vq/5lr3pCJ8WhxJqwTBsLXweKOA7M WbWObN1NW1dul30N9moZLtcZbJJu+BqjgeL4Pwu2k2fbl2N72bBRg98kq97TPDHFKH55 Lu7w9Vt5UkwBJ6RRmbWXO1yhnmy73B3MxchQ41aeYNWppXoUlZz7rk0MDjd/VBu3S7fj hUa6V0oinBpqKkVJ2V3O7VFbggp5AbzNP2UFMMwrhVSZuSh7oFVgbNEZ7oFVMNGeB0jD dzSXse9ekong2iH9kPXh/9WXCc3NEuKME1gpejuyB4xLbDYNRcjrcdsYbsIw9c/n8HRU rKOQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=CmSPghMcJxO+xmgALaAw32pDoPj6MafH7TrtvG/4KBU=; b=SO/rGat4Dbu3kolfaOjBw896+lvOVzo9qJIFK8gLnqQw1V4k2q0OdAddrQB3z0tnZF a3XlIBE2QG0f7OirMHeAp/nxtVUW3c5slIPiBkzPFvAxIaWszRaWWt6TWcJGcuJLK7O/ AEQ/VSsumHXs44pNa02LIIqrE5fSn6rtu+YJlKg70NI3xIlOV8BeX1AfUxjoysATbAQx LWMHERphDrpiQcCbtqNLMwjQA4GB52nBmVvMiVoaywdY8cMiiD9b/sh2vax45XAL0RqP yUPaFp6dV3er7vrfXvu9FNp4c6BfrOZQCWwowzheZDvuhIn/rj2r5bvUL98Wza97kz+u 3A/Q== X-Gm-Message-State: APjAAAVmqnJYez6ArYQrS1e3f3mjK0BmzEL92GYJljY4HtT5bMwFuA/C HWsvF/QdoV6JoeqcekgoeW6QLwnMBC5TaUSZ9uU= X-Google-Smtp-Source: APXvYqw9a22S6N4K3b0F/McArCFz7PT8HinZP1GlA8C1DJ4qWXwg1CIpGT5J8x1qksL7IM1hvVc37OOLPOGFRXgmeJY= X-Received: by 2002:a2e:1257:: with SMTP id t84mr6013832lje.115.1553267440618; Fri, 22 Mar 2019 08:10:40 -0700 (PDT) MIME-Version: 1.0 References: <152390863222.19652.10310304989315386136.idtracker@ietfa.amsl.com> <472563ee-5fc3-655d-8e31-138cc774e608@acm.org> <97c561a7-c33a-6121-00c4-09cd11646b98@ericsson.com> <4b8f10f7-1eee-c8bc-d9ee-e3f18473de32@ericsson.com> <9ED47E64-EC53-43FB-8EAD-128E81205EF4@cisco.com> In-Reply-To: <9ED47E64-EC53-43FB-8EAD-128E81205EF4@cisco.com> From: Spencer Dawkins at IETF Date: Fri, 22 Mar 2019 16:10:28 +0100 Message-ID: To: "Gonzalo Salgueiro (gsalguei)" Cc: Eric Rescorla , "tram-chairs@ietf.org" , "tram@ietf.org" , IESG , "draft-ietf-tram-stunbis@ietf.org" Content-Type: multipart/alternative; boundary="0000000000000a2e0f0584b04252" Archived-At: Subject: [tram] Blackout posting of draft-ietf-tram-stunbis-21 X-BeenThere: tram@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "Discussing the creation of a Turn Revised And Modernized \(TRAM\) WG, which goal is to consolidate the various initiatives to update TURN and STUN." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 22 Mar 2019 15:10:50 -0000 --0000000000000a2e0f0584b04252 Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable Dear IESG Secretary (bcc), Please post this draft during the blackout period - we're trying to clear The Last Discuss on a document in IESG Evaluation before I step down, so want to give people time to look at the official -21 version rather than clear based on e-mail. Thanks! Spencer, who is kind of hoping that someone on the next IESG asks why we have a blackout posting period for drafts in IESG Evaluation - but I'm sure you'll all do the right thing. On Thu, Mar 21, 2019 at 7:22 PM Gonzalo Salgueiro (gsalguei) < gsalguei@cisco.com> wrote: > Hi Eric - > > I=E2=80=99m attaching the -21 that will be published once the I-D submiss= ion tool > opens up (or Spencer can override and it published before then). It uses > your proposed bid down protection disclaimer text (save for minor nits I > cleaned up). > > If this looks good then from my perspective we are done and your DISCUSS > can be cleared and we can proceed with publication. > > Thanks for all your help. > > Cheers, > > Gonzalo > > > On Mar 20, 2019, at 3:57 PM, Eric Rescorla wrote: > > Gonzalo, > > This text still seems to me to need some work. Here is a revised version. > > SHA-256 was chosen as the new default for password > hashing for its compability with RFC 7616 but because SHA-256 (like > MD5) is a comparatively fast algorithm, it does little to deter > brute force attacks. Specifically, this means that if the > user has a weak password: > > * An attacker who captures the server's password file can often > determine the user's password and thus impersonate the user > to other servers where they have used that password. Note that > such an attacker can impersonate the user to the server itself > without any brute force attack. > > * An attacker who captures a single exchange can brute force > the user's password and thus potentially impersonate the > user to the server and other servers where they have used > the same pasword. > > A stronger (which is to say slower) algorithm, like Argon2 > [I-D.irtf-cfrg-argon2], would help both of these cases, but in the > case of the first attack, only after until the database entry for this > user is updated to exclusively use that stronger mechanism. > > The bid-down defenses in this protocol prevent an attacker from > forcing the client and server to complete a handshake using weaker > algorithms than they jointly support, but only if the weakest joint > algorithm is strong enough that it cannot be brute-forced. However, > this does not defend against many attacks on those algorithms; > specifically, an on-path attacker might perform a bid-down attack on a > client which supported both Argon2 and SHA-256 for password hashing > and use that to collect a MESSAGE-INTEGRITY-SHA256 value which it uses > for an offline brute-force attack. This would be detected when the > server receives the second request, but that does not prevent the > attacker from obtaining the MESSAGE-INTEGRITY-SHA256 value. > > Similarly, an attack against the USERHASH mechanism will not succeed > in establishing a session as the server will detect that the feature > was discarded on-path, but the client would still have been convinced > to send its username in clear in the USERNAME attribute, thus > disclosing it to the attacker. > > -Ekr > > > On Mon, Mar 18, 2019 at 6:37 PM Gonzalo Salgueiro (gsalguei) < > gsalguei@cisco.com> wrote: > > Thanks, Spencer. In the interest of expeditiousness I=E2=80=99ve emailed= Eric to > review the newly published -20 to ensure it addresses his DISCUSS points. > Hoping to get this done before Eric steps down as AD. > > Cheers, > > Gonzalo > > > > > On Mar 18, 2019, at 9:27 PM, Spencer Dawkins at IETF < > spencerdawkins.ietf@gmail.com> wrote: > > > > Dear All, > > > >> On Fri, Mar 8, 2019 at 8:10 PM Eric Rescorla wrote: > >> > >> Thanks for the call yesterday. > >> > > > > Thanks to all for moving this specification forward. > > > > If the current conversation turns out to converge on this topic before > next > > Wednesday, I'm happy to approve a revised draft after Eric clears his > > Discuss. > > > > If I can help in any way, please let me know. > > > > Spencer > > > > > >> > >> First, here is what I recommend for the question of SHA-256 for passwo= rd > >> hashing: > >> > >> Note: the use of SHA-256 for password hashing does not meet modern > >> standards, which are aimed at slowing down exhaustive password search > >> by providing a relatively slow minimum time to compute the > >> hash. Although better algorithms such as Argon2 > >> [https://datatracker.ietf.org/doc/draft-irtf-cfrg-argon2/] are > >> available, SHA-256 was chosen for consistency with RFC 7616. > >> > >> > >> Now, WRT to the anti-downgrade situation. Here's a stylized version > >> of the protocol: > >> > >> Client Server > >> > >> Hello -> > >> <- Nonce, Algorithms > >> HMAC-H1(H2(Password), Nonce, Algorithms, Msg) -> > >> <- HMAC-H1(H2(Password), ...) > >> > >> Where H1 and H2 are the HMAC hash functions and the password hashing > >> function respectively. > >> > >> Now, if we assume that the attacker does not know Password and that > >> both H1 and H2 are secure, then it is not possible for the attacker to > >> complete the transaction or modify any of the messages. Further, if > >> the weakest joint algorithm that both sides support is still strong, > >> then an attacker cannot influence the algorithm negotiation [0]. This > >> property is provided by covering the algorithms under the MAC. > >> > >> However, my point is that this is not a very useful property. > >> > >> First, consider the case in which the implementations jointly support > >> one strong algorithm and one weak algorithm. E.g., for H1 they support > >> SHA-256 and the function Z(x) which always emits 0s. This allows > >> an attacker to force the client and server into using Z, as follows. > >> > >> > >> Client Attacker Server > >> > >> Hello -> > >> Hello -> > >> <- Nonce, Alg=3DSHA256, Z > >> <- Nonce, Alg=3DZ > >> Z(H2(Password), Nonce, Alg=3DZ)) -> > >> Z(H2(Password), Nonce, Alg=3DSHA256, Z)) > >> > >> The issue here is that the only thing that the MAC is doing is > >> authenticating the transaction, and if you can't trust it to do that, > >> you can't trust it to authenticate the bid-down defense either. > >> > >> > >> During our discussion, there was a suggestion that it was useful to > >> have biddown defense to defend against weaknesses in H2. I don't think > >> that that's true either. First, remember that the purpose of H2 is to > >> prevent an attacker who recovers the password database from learning > >> the user's true password. This is not about defending the server from > >> attack (because knowing A1 is enough to attack the server) but about > >> preventing the attacker from learning a password which might have been > >> reused on another site. > >> > >> Now, it's also possible to brute-force the user's password just from > >> the protocol transcript: if you capture the client's first message > >> with MESSAGE-INTEGRITY or MESSAGE-INTEGRITY-SHA256, you can just keep > >> trying passwords until you get the right MAC. Note that this is a > >> passive attack. This is comparatively fast because SHA256 and MD5 are > >> fast. > >> > >> A much stronger H2 (e.g., Argon) would help against this, but the > >> problem now becomes that the client supports H2 =3D=3D MD5 (or SHA-256= ) > >> and so even if the server supports Argon, the attacker can mount a > >> bid-down defense in which it modifies the server's first message to > >> just advertise MD5 and thus get the client to provide a suitable > >> message. The bid-down defense would prevent the authentication > >> transaction from completing, but that's not necessary for this > >> attack because the attacker can just brute-force the password from > >> the message it has. To make this work, you would need something > >> like a PAKE, which this is not. > >> > >> Finally, you might think that the server has two databases, one > >> which uses Argon and one which uses MD5 and it wants to gradually > >> phase out the MD5 one, which it will do when no client authenticates > >> with MD5 for a very long time. An anti-biddown defense would sort > >> of work here, but the fact that the attacker would have to be > >> active essentially indefinitely to keep the server confused about > >> the state of clients -- and that the attacker can likely just > >> get a valid account and then insist on using MD5 -- makes this a > >> not very useful defense. > >> > >> I think this makes a pretty persuasive case that the bid-down defense > >> isn't useful except in the formal "attacker cannot influence > >> negotiation" sense. With that said, in the spirit of getting this done= , > I > >> guess > >> I'm willing to let this go if the security considerations make clear > >> that it is only a very limited mechanism. > >> > >> -Ekr > >> > >> > >> [0] This is principally about H1. As long as the H2 approximately > >> evenly distributes the password over its range, then cryptographic > >> strength is not important for this question. For instance, you > >> could replace H2 with an identity function and still have a > >> secure protocol. > >> > >> > >> > >> > >> > >> > >> On Wed, Feb 20, 2019 at 4:03 AM Gonzalo Camarillo < > >> gonzalo.camarillo@ericsson.com> wrote: > >> > >>> Thanks, Gonzalo! Please, let us know the agreed way forward once you > >>> have the call. > >>> > >>> Cheers, > >>> > >>> Gonzalo > >>> > >>>> On 19-Feb-19 20:05, Gonzalo Salgueiro (gsalguei) wrote: > >>>> Hi Gonzalo - > >>>> > >>>> We have scheduled a conference call with Ekr, Simon, Marc and myself > on > >>> March 7th to discuss the last two remaining issues. Will update with > >>> resolutions once this has occurred. > >>>> > >>>> Cheers, > >>>> > >>>> Gonzalo > >>>> > >>>> > >>>> > >>>>> On Feb 18, 2019, at 8:18 AM, Gonzalo Camarillo < > >>> Gonzalo.Camarillo@ericsson.com> wrote: > >>>>> > >>>>> Hi Gonzalo S, > >>>>> > >>>>> what is the status of this one? > >>>>> > >>>>> Thanks, > >>>>> > >>>>> Gonzalo > >>>>> > >>>>>> On 18-Jan-19 20:16, Gonzalo Salgueiro (gsalguei) wrote: > >>>>>> Totally agree, Ekr. Marc and I are meeting to come up with a > proposal > >>>>>> but I do agree we need to have a call to get this put to bed once > and > >>>>>> for all. We=E2=80=99ll offer some potential dates in the next 2-3= weeks. > >>>>>> > >>>>>> Cheers, > >>>>>> > >>>>>> Gonzalo > >>>>>> > >>>>>> > >>>>>>> On Dec 26, 2018, at 8:05 PM, Eric Rescorla >>>>>>> > wrote: > >>>>>>> > >>>>>>> We really need to bring this to a close before both Spencer and I > >>> step > >>>>>>> down, I should think. > >>>>>>> > >>>>>>> -Ekr > >>>>>>> > >>>>>>> > >>>>>>> On Thu, Nov 22, 2018 at 4:30 AM Gonzalo Camarillo > >>>>>>> >>>>>>> > wrote: > >>>>>>> > >>>>>>> Eric, Spencer, thanks for the status update! > >>>>>>> > >>>>>>> Authors, could you please let us know when you plan to get to > >>> this? > >>>>>>> > >>>>>>> Gonzalo > >>>>>>> > >>>>>>>> On 19-Nov-18 23:04, Spencer Dawkins at IETF wrote: > >>>>>>>> Hi, Gonzalo, > >>>>>>>> On Mon, Nov 19, 2018 at 9:06 AM Eric Rescorla >>>>>>> > >>>>>>>> >> wrote: > >>>>>>>> > >>>>>>>> Not really. I have not received any response to my mail of > >>>>>>> Oct 23. > >>>>>>>> As before, I'm happy to have a call, but I believe we're > >>>>>>> reaching > >>>>>>>> the limits of what can be accomplished by email. > >>>>>>>> > >>>>>>>> > >>>>>>>> Eric would know best (it being his Discuss), but this is also my > >>>>>>>> understanding. > >>>>>>>> > >>>>>>>> I can add this to the agenda of the IESG informal telechat on > >>>>>>> November > >>>>>>>> 29, if there hasn't been a call before then, but I don't have a > >>>>>>> reason > >>>>>>>> to wait until then, if it's possible to talk sooner. > >>>>>>>> > >>>>>>>> Thanks, > >>>>>>>> > >>>>>>>> Spencer > >>>>>>>> > >>>>>>>> > >>>>>>>> > >>>>>>>> -Ekr > >>>>>>>> > >>>>>>>> > >>>>>>>> On Mon, Nov 19, 2018 at 6:35 AM Gonzalo Camarillo > >>>>>>>> >>>>>>> > >>>>>>>> >>>>>>> >> wrote: > >>>>>>>> > >>>>>>>> Hi Spencer, > >>>>>>>> > >>>>>>>> what is the status of this? Are the authors and the > >>> document > >>>>>>>> shepherd > >>>>>>>> working with the relevant ADs on the discusses? > >>>>>>>> > >>>>>>>> > >>>>>>> > >>> https://datatracker.ietf.org/doc/draft-ietf-tram-stun-pmtud/ballot/ > >>>>>>>> > >>>>>>>> Cheers, > >>>>>>>> > >>>>>>>> Gonzalo > >>>>>>>> > >>>>>>>>> On 24-Oct-18 16:40, Spencer Dawkins at IETF wrote: > >>>>>>>>> Hi, Marc, > >>>>>>>>> > >>>>>>>>> On Wed, Oct 24, 2018 at 3:44 AM Marc Petit-Huguenin > >>>>>>>> > >>>>>>> > > >>>>>>>>> > >>>>>>> >>> wrote: > >>>>>>>>> > >>>>>>>>> Hi Spencer, > >>>>>>>>> > >>>>>>>>> I sent my answers to Eric Rescorla questions on > >>>>>>> 2018-10-07 > >>>>>>>> following > >>>>>>>>> an in-person meeting with my co-author, but never > >>>>>>> got a > >>>>>>>> response > >>>>>>>>> back. Because there was no change proposed by > >>>>>>> Eric I went > >>>>>>>> ahead and > >>>>>>>>> published -19 a couple of weeks after that, with > >>>>>>> the text > >>>>>>>> agreed in > >>>>>>>>> response to Adam's and Benjamin's comments. > >>>>>>>>> > >>>>>>>>> > >>>>>>>> > >>>>>>> > >>> https://www.ietf.org/mail-archive/web/tram/current/msg02635.html > >>>>>>>>> > >>>>>>>>> > >>>>>>>>> Ah - I wonder if that was what had happened. > >>>>>>>>> > >>>>>>>>> It sounds like you did the right thing, and that Eric > >>>>>>> has now > >>>>>>>> responded, > >>>>>>>>> which is also the right thing to do. > >>>>>>>>> > >>>>>>>>> Thanks for helping me understand. > >>>>>>>>> > >>>>>>>>> Spencer > >>>>>>>>> > >>>>>>>>> > >>>>>>>>>> On 10/23/18 7:28 PM, Spencer Dawkins at IETF wrote: > >>>>>>>>>> Hi, Marc, > >>>>>>>>>> > >>>>>>>>>> I see that a -19 has been submitted, but didn't > >>>>>>> see a > >>>>>>>> reply from > >>>>>>>>> Eric in > >>>>>>>>>> this thread. Do you think that you've converged? > >>>>>>>>>> > >>>>>>>>>> (I saw an offer of a conference call, so thought an > >>>>>>>> out-of-band > >>>>>>>>>> conversation might have happened) > >>>>>>>>>> > >>>>>>>>>> Thanks, > >>>>>>>>>> > >>>>>>>>>> Spencer > >>>>>>>>>> > >>>>>>>>>> On Sun, Oct 7, 2018 at 9:35 AM Marc Petit-Huguenin > >>>>>>>>> > >>>>>>> > > >>>>>>>> > >>>>>>> >>> wrote: > >>>>>>>>>> > >>>>>>>>>>> Hi Eric, > >>>>>>>>>>> > >>>>>>>>>>> Please see inline. > >>>>>>>>>>> > >>>>>>>>>>>> On 09/10/2018 03:25 AM, Eric Rescorla wrote: > >>>>>>>>>>>> On Sat, Sep 8, 2018 at 2:31 PM, Marc > >>>>>>> Petit-Huguenin > >>>>>>>>> > >>>>>>> > > >>>>>>>> > >>>>>>> >>> > >>>>>>>>>>>> wrote: > >>>>>>>>>>>> > >>>>>>>>>>>>> Hi Eric, > >>>>>>>>>>>>> > >>>>>>>>>>>>> Apologies for the delay in getting back to that. > >>>>>>>>>>>>> > >>>>>>>>>>>>> I think that there is some misunderstanding > >>>>>>> in what > >>>>>>>> STUNbis is > >>>>>>>>> trying to > >>>>>>>>>>>>> do, so please see my comments inline. > >>>>>>>>>>>>> > >>>>>>>>>>>>>> On 06/18/2018 10:43 AM, Eric Rescorla wrote: > >>>>>>>>>>>>>> Hi folks, > >>>>>>>>>>>>>> > >>>>>>>>>>>>>> I've reviewed the new version, but I don't > >>> think > >>>>>>>> that the biddown > >>>>>>>>>>>>>> discussion makes much sense. > >>>>>>>>>>>>>> > >>>>>>>>>>>>>> To recap, there are two hashes here: > >>>>>>>>>>>>>> > >>>>>>>>>>>>>> - The hash which you use to store the > >>>>>>> password with > >>>>>>>> (currently > >>>>>>>>> mostly > >>>>>>>>>>>>> MD5) > >>>>>>>>>>>>>> - The hash you use to compute the MAC > >>>>>>> (currently SHA-1). > >>>>>>>>>>>>>> > >>>>>>>>>>>>>> First, let's stipulate that MD5 isn't a > >>>>>>> great choice > >>>>>>>> here, > >>>>>>>>> though SHA-1 > >>>>>>>>>>>>>> isn't a great choice > >>>>>>>>>>>>>> either for pwd hashing You want Argon or the > >>>>>>> like. > >>>>>>>> With that said, > >>>>>>>>>>>>> there's > >>>>>>>>>>>>>> no sensible > >>>>>>>>>>>>>> biddown attack on that hash because it's a > >>>>>>>> per-server feature, > >>>>>>>>> not a > >>>>>>>>>>>>>> per-transaction > >>>>>>>>>>>>>> feature. So, as long as the server has > >>>>>>> MD5-hashed > >>>>>>>> passwords, the > >>>>>>>>>>>>> situation > >>>>>>>>>>>>>> is bad. > >>>>>>>>>>>>> > >>>>>>>>>>>>> In no place in STUNbis we are proposing to > >>>>>>> use SHA-1 > >>>>>>>> for password > >>>>>>>>>>>>> encryption, so I am not sure where that come > >>>>>>> from. > >>>>>>>> What we > >>>>>>>>> propose is: > >>>>>>>>>>>>> > >>>>>>>>>>>> > >>>>>>>>>>>> You're right, it's SHA-256, but my criticisms > >>>>>>> apply > >>>>>>>> equally there. > >>>>>>>>>>> > >>>>>>>>>>> SHA-256 was what the WG adopted. Our attempts > >>>>>>> to add > >>>>>>>> other passwords > >>>>>>>>>>> encryption mechanisms were denied. It is true > >>> that > >>>>>>>> Argon2 was > >>>>>>>>> not in that > >>>>>>>>>>> list (in our defense Argon2 was not known > >>>>>>> before July > >>>>>>>> 2015), but > >>>>>>>>> I do not > >>>>>>>>>>> see why the WG would have accepted that one > >>>>>>> over the > >>>>>>>> others. > >>>>>>>>> Anyway it is > >>>>>>>>>>> too late to fix this, as it is my understanding > >>>>>>> that > >>>>>>>> the WG does > >>>>>>>>> not have > >>>>>>>>>>> enough energy to reach consensus on a new password > >>>>>>>> algorithm. > >>>>>>>>> Someone can > >>>>>>>>>>> just write a draft adding Argon2 as password > >>>>>>>> encryption, as we > >>>>>>>>> will have a > >>>>>>>>>>> IANA registry for that. > >>>>>>>>>>> > >>>>>>>>>>>> > >>>>>>>>>>>> > >>>>>>>>>>>>> - Establish a registry for new password > >>>>>>> algorithms > >>>>>>>> (section > >>>>>>>>> 18.5), so > >>>>>>>>>>>>> algorithms like Argon2 could be added later > >>>>>>> (but note > >>>>>>>> that our own > >>>>>>>>>>>>> proposals to add more password algorithms were > >>>>>>>> rejected by the > >>>>>>>>> working > >>>>>>>>>>>>> group). > >>>>>>>>>>>>> - Add a new password algorithm to that registry, > >>>>>>>> namely SHA-256. > >>>>>>>>>>>>> - Register MD5 as an initial password > >>>>>>> algorithm for > >>>>>>>> backward > >>>>>>>>>>> compatibility > >>>>>>>>>>>>> purpose. > >>>>>>>>>>>>> > >>>>>>>>>>>>> As for the biddown protection itself, it is my > >>>>>>>> recollection that it > >>>>>>>>>>>>> happened more or less like that: > >>>>>>>>>>>>> > >>>>>>>>>>>>> > >>>>>>>>>>>>> INT. MEETING ROOM - DAY > >>>>>>>>>>>>> > >>>>>>>>>>>>> One of the co-editors of STUNBis stands at the > >>>>>>>> microphone: > >>>>>>>>>>>>> > >>>>>>>>>>>>> CO-EDITOR > >>>>>>>>>>>>> We added SHA-256 protection for > >>>>>>>> passwords > >>>>>>>>>>>>> in STUNBis. > >>>>>>>>>>>>> > >>>>>>>>>>>>> SOMEONE (V.O.) > >>>>>>>>>>>>> As MD5 still need to be > >>>>>>> supported, > >>>>>>>> you need to add > >>>>>>>>>>>>> protection for bid-down > >>> attacks. > >>>>>>>>>>>>> > >>>>>>>>>>>>> CLOSE-UP on CO-EDITOR ROLLING HIS EYES > >>>>>>>>>>>>> > >>>>>>>>>>>>> CO-EDITOR > >>>>>>>>>>>>> OK, I'll work on that. > >>>>>>>>>>>>> > >>>>>>>>>>>>> Four to eight months has passed. > >>>>>>>>>>>>> > >>>>>>>>>>>>> INT. ANOTHER MEETING ROOM - DAY > >>>>>>>>>>>>> > >>>>>>>>>>>>> The same co-editor of STUNBis stands at the > >>>>>>> microphone: > >>>>>>>>>>>>> > >>>>>>>>>>>>> CO-EDITOR > >>>>>>>>>>>>> We added a nice mechanism to > >>>>>>> prevent > >>>>>>>> bid-down > >>>>>>>>>>>>> attacks on passwords. Any > >>>>>>> comments? > >>>>>>>>>>>>> > >>>>>>>>>>>>> THE ROOM > >>>>>>>>>>>>> (silence) > >>>>>>>>>>>>> > >>>>>>>>>>>>> CO-EDITOR > >>>>>>>>>>>>> Moving on... > >>>>>>>>>>>>> > >>>>>>>>>>>> > >>>>>>>>>>>> I don't see how any of this is relevant to my > >>>>>>>> technical points > >>>>>>>>> above. > >>>>>>>>>>> > >>>>>>>>>>> My point was that we, the co-editors, did not > >>>>>>> decide on > >>>>>>>> adding > >>>>>>>>> bid-down > >>>>>>>>>>> protection, someone asked us to do so and > >>>>>>> no-one in the > >>>>>>>> WG saw > >>>>>>>>> any problem > >>>>>>>>>>> with that. The reasons that person wanted that > >>>>>>> are not > >>>>>>>> known to > >>>>>>>>> us but, as > >>>>>>>>>>> you insist, here's one reason I can think of: > >>>>>>>>>>> > >>>>>>>>>>> It is a fact that, for operational reasons, a > >>>>>>> password > >>>>>>>> database > >>>>>>>>> cannot be > >>>>>>>>>>> re-encrypted at once. Also for operational > >>>>>>> reasons, > >>>>>>>> the MD5 password > >>>>>>>>>>> cannot be immediately removed from the database > >>>>>>> as soon > >>>>>>>> the user > >>>>>>>>> submitted > >>>>>>>>>>> a new one. In fact, and for quite some time, both > >>>>>>>> encrypted > >>>>>>>>> variants of > >>>>>>>>>>> the same password may have to be kept in that > >>>>>>> database, > >>>>>>>> because a > >>>>>>>>> single > >>>>>>>>>>> user may use a mix of devices, some of them > >>>>>>> that use an > >>>>>>>> RFC 5389 > >>>>>>>>> client, > >>>>>>>>>>> some that use a STUNbis client. It is up to > >>>>>>> the STUN > >>>>>>>> server owner to > >>>>>>>>>>> decide how long the migration to STUNbis will > >>>>>>> take and > >>>>>>>> when it > >>>>>>>>> will be > >>>>>>>>>>> acceptable to reject all RFC 5389 (i.e. MD5) > >>>>>>> clients (that > >>>>>>>>> migration time > >>>>>>>>>>> can be purposely reduced to 0 seconds but > >>>>>>> that's the > >>>>>>>> choice and > >>>>>>>>>>> responsibility of the owner of the server). > >>>>>>>>>>> > >>>>>>>>>>> Meanwhile we still need to be sure that if the > >>> STUN > >>>>>>>> client is > >>>>>>>>> implementing > >>>>>>>>>>> STUNbis it unconditionally gets the additional > >>>>>>>> protection of the new > >>>>>>>>>>> password encryption algorithm. That's where > >>>>>>> the biddown > >>>>>>>>> protection kicks > >>>>>>>>>>> in, by preventing an online attacker to have > >>>>>>> the server > >>>>>>>>> misidentifying a > >>>>>>>>>>> STUNbis client as an RFC 5389 client, by > >>>>>>> preventing an > >>>>>>>> online > >>>>>>>>> attacker to > >>>>>>>>>>> have the client misidentifying a STUNbis server > >>>>>>> as a > >>>>>>>> RFC 5389 > >>>>>>>>> server, and > >>>>>>>>>>> having both them use the MD5 encrypted password > >>>>>>> instead > >>>>>>>> of the > >>>>>>>>> SHA-256 > >>>>>>>>>>> encrypted password, all of that easily done by > >>>>>>>> stripping the > >>>>>>>>> unprotected > >>>>>>>>>>> 401 response of the new STUNbis > >>> PASSWORD-ALGORITHMS > >>>>>>>> attribute. > >>>>>>>>>>> > >>>>>>>>>>>> > >>>>>>>>>>>> > >>>>>>>>>>>> > >>>>>>>>>>>>>> The second topic is the hash used to compute > >>> the > >>>>>>>> MAC. However, > >>>>>>>>> I don't > >>>>>>>>>>>>> see > >>>>>>>>>>>>>> how > >>>>>>>>>>>>>> this gives you sensible biddown protection > >>>>>>> because > >>>>>>>> that hash > >>>>>>>>> is also > >>>>>>>>>>> used > >>>>>>>>>>>>>> to compute > >>>>>>>>>>>>>> MAC over the negotiation: an attacker who has > >>>>>>>> compromised a > >>>>>>>>> MAC which > >>>>>>>>>>> the > >>>>>>>>>>>>>> server > >>>>>>>>>>>>>> supports will quite likely be able to forge > >>>>>>> a MAC > >>>>>>>> over the > >>>>>>>>> transcript > >>>>>>>>>>> as > >>>>>>>>>>>>>> well. This is, > >>>>>>>>>>>>>> I suppose, potentially useful as a defense > >>>>>>> against > >>>>>>>> some other > >>>>>>>>> weakness > >>>>>>>>>>>>>> (e.g., > >>>>>>>>>>>>>> version #), but I don't really see how the > >>>>>>> current > >>>>>>>> design > >>>>>>>>> helps against > >>>>>>>>>>>>>> attacks on the > >>>>>>>>>>>>>> MAC. > >>>>>>>>>>>>> > >>>>>>>>>>>>> There is no biddown attack protection for the > >>>>>>> MAC, as > >>>>>>>> stated in > >>>>>>>>> Section > >>>>>>>>>>>>> 16.3: > >>>>>>>>>>>>> > >>>>>>>>>>>>> "The bid-down protection mechanism described > >>>>>>> in this > >>>>>>>> document > >>>>>>>>> is new, > >>>>>>>>>>>>> and thus cannot currently protect against a > >>>>>>> bid-down > >>>>>>>> attack that > >>>>>>>>>>>>> lowers the strength of the hash algorithm to > >>>>>>> HMAC-SHA1." > >>>>>>>>>>>>> > >>>>>>>>>>>>> What we put in place is a plan for *future* > >>>>>>> versions > >>>>>>>> of STUN to get > >>>>>>>>>>>>> biddown protection for the MAC. That's it, > >>>>>>> no more, > >>>>>>>> no less. > >>>>>>>>>>>>> > >>>>>>>>>>>> > >>>>>>>>>>>> Yes, but I don't believe that this will > >>>>>>> provide bid-down > >>>>>>>>> protection for > >>>>>>>>>>> the > >>>>>>>>>>>> MAC in the future for the reasons I indicate > >>>>>>> above. > >>>>>>>>>>>> > >>>>>>>>>>>> If you think this does something useful, > >>>>>>> please show me an > >>>>>>>>> example attack > >>>>>>>>>>>> and how this fixes it. Note that it's not > >>>>>>> generally > >>>>>>>> useful to > >>>>>>>>> just bid > >>>>>>>>>>> down > >>>>>>>>>>>> the MAC itself unless the MAC you bid down to > >>>>>>> is weak > >>>>>>>> enough to > >>>>>>>>> exploit > >>>>>>>>>>> in > >>>>>>>>>>>> some other way. > >>>>>>>>>>> > >>>>>>>>>>> I do not know what weaknesses will be > >>>>>>> discovered in the > >>>>>>>> future. > >>>>>>>>> I am also > >>>>>>>>>>> pretty sure that the cost of not using that > >>>>>>> mechanism > >>>>>>>> is very > >>>>>>>>> close to 0. > >>>>>>>>>>> What I am sure of is that the cost of > >>>>>>> reengineering a > >>>>>>>> new biddown > >>>>>>>>>>> protection mechanism if we ever need it will be > >>>>>>> high. > >>>>>>>> We already > >>>>>>>>> went > >>>>>>>>>>> through the pains of designing one for the > >>> password > >>>>>>>> algorithm, so > >>>>>>>>> why not > >>>>>>>>>>> extend it so it can be used in the aftermath of > >>> the > >>>>>>>> next Snowden > >>>>>>>>> facepalm > >>>>>>>>>>> moment? > >>>>>>>>>>> > >>>>>>>>>>>> Again, happy to have a call to walk though > >>>>>>> this if that > >>>>>>>>>>>> helps. > >>>>>>>>>>>> > >>>>>>>>>>>> -Ekr > >>>>>>>>>>>> > >>>>>>>>>>>> > >>>>>>>>>>>> > >>>>>>>>>>>> > >>>>>>>>>>>>>> > >>>>>>>>>>>>>> You might think that there was a MAC which > >>>>>>> was easier to > >>>>>>>>> reverse to > >>>>>>>>>>> find > >>>>>>>>>>>>>> the original > >>>>>>>>>>>>>> password, but the defense you have here > >>>>>>> doesn't help > >>>>>>>> with that > >>>>>>>>> because > >>>>>>>>>>>>> the > >>>>>>>>>>>>>> on-path attacker can do a bid-down and use the > >>>>>>>> client as a MAC > >>>>>>>>> oracle > >>>>>>>>>>> for > >>>>>>>>>>>>>> any MAC the client supports. > >>>>>>>>>>>>>> > >>>>>>>>>>>>>> So, I still don't understand what this is > >>>>>>> supposed > >>>>>>>> to do. Happy to > >>>>>>>>>>> have a > >>>>>>>>>>>>>> call if you > >>>>>>>>>>>>>> think that helps > >>>>>>>>>>>>>> > >>>>>>>>>>>>>> -Ekr > >>>>>>>>>>>>>> > >>>>>>>>>>>>>> > >>>>>>>>>>>>>> > >>>>>>>>>>>>>> > >>>>>>>>>>>>>> On Mon, Jun 18, 2018 at 3:40 AM, Gonzalo > >>>>>>> Camarillo < > >>>>>>>>>>>>>> Gonzalo.Camarillo@ericsson.com > >>>>>>> > >>>>>>>> >>>>>>> > > >>>>>>>>> >>>>>>> > >>>>>>>> >>>>>>> >>> wrote: > >>>>>>>>>>>>>> > >>>>>>>>>>>>>>> Marc, Eric, > >>>>>>>>>>>>>>> > >>>>>>>>>>>>>>> what is the status of this discussion? > >>>>>>>>>>>>>>> > >>>>>>>>>>>>>>> Thanks, > >>>>>>>>>>>>>>> > >>>>>>>>>>>>>>> Gonzalo > >>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>> On 04/05/2018 2:35 AM, Eric Rescorla wrote: > >>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>> On Mon, Apr 23, 2018 at 11:16 AM, Marc > >>>>>>>> Petit-Huguenin < > >>>>>>>>>>>>> petithug@acm.org > >>>>>>> > > >>>>>>>> > >>>>>>> >> > >>>>>>>>>>>>>>>> >>>>>>> >>>>>>> > > >>>>>>>> > >>>>>>> >>>> wrote: > >>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>> On 04/22/2018 05:22 PM, Eric Rescorla > >>>>>>> wrote: > >>>>>>>>>>>>>>>>> On Sun, Apr 22, 2018 at 2:02 PM, Marc > >>>>>>>> Petit-Huguenin < > >>>>>>>>>>>>>>> petithug@acm.org > >>>>>>> > > >>>>>>>> > >>>>>>> >> > >>>>>>>>> > >>>>>>> > > >>>>>>>> > >>>>>>> >>>> > >>>>>>>>>>>>>>>>> wrote: > >>>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>>>>> For a request or indication > >>>>>>> message, > >>>>>>>> the agent > >>>>>>>>> MUST > >>>>>>>>>>>>>>> include the > >>>>>>>>>>>>>>>>>>>> USERNAME, > >>>>>>> MESSAGE-INTEGRITY-SHA256, and > >>>>>>>>>>> MESSAGE-INTEGRITY > >>>>>>>>>>>>>>>>>> attributes > >>>>>>>>>>>>>>>>>>>> in the message unless the agent > >>>>>>>> knows from an > >>>>>>>>> external > >>>>>>>>>>>>>>> indication > >>>>>>>>>>>>>>>>>>>> which message integrity > >>>>>>> algorithm is > >>>>>>>> supported > >>>>>>>>> by both > >>>>>>>>>>>>>>> agents. In > >>>>>>>>>>>>>>>>>>>> this case either > >>>>>>> MESSAGE-INTEGRITY or > >>>>>>>>>>>>>>> MESSAGE-INTEGRITY-SHA256 MUST > >>>>>>>>>>>>>>>>>>>> be included in addition to > >>>>>>>> USERNAME. The HMAC > >>>>>>>>> for the > >>>>>>>>>>>>>>> MESSAGE- > >>>>>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>>>> This text appears to conflict with > >>>>>>> S 7.3 of > >>>>>>>>> 5245-bis, which > >>>>>>>>>>>>> says: > >>>>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>>> [text missing] > >>>>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>>> Hmm, no, RFC245bis is still > >>> referencing > >>>>>>>> RFC5389, so the > >>>>>>>>>>>>> procedure > >>>>>>>>>>>>>>> for > >>>>>>>>>>>>>>>>>> stunbis does not apply. > >>>>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>> I hear what you're saying, but > >>>>>>> publishing two > >>>>>>>>> documents at the > >>>>>>>>>>>>>>> same time > >>>>>>>>>>>>>>>>> which > >>>>>>>>>>>>>>>>> make contrary recommendations about > >>>>>>> the same > >>>>>>>> basic > >>>>>>>>> protocol is > >>>>>>>>>>>>>>> un-good. > >>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>> Sure, but wouldn't it be simpler to have > >>>>>>>> rfc5245bis > >>>>>>>>> using stunbis > >>>>>>>>>>>>>>>> and have them updating their text, > >>>>>>> more than > >>>>>>>> adding some > >>>>>>>>> tortuous > >>>>>>>>>>>>>>>> text in stunbis? > >>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>>>> The STUN usage must specify > >>> which > >>>>>>>> transport > >>>>>>>>> protocol is > >>>>>>>>>>>>>>> used, and > >>>>>>>>>>>>>>>>>> how > >>>>>>>>>>>>>>>>>>>> the agent determines the IP > >>>>>>> address > >>>>>>>> and port > >>>>>>>>> of the > >>>>>>>>>>>>>>> recipient. > >>>>>>>>>>>>>>>>>>>> Section 8 describes a DNS-based > >>>>>>>> method of > >>>>>>>>> determining > >>>>>>>>>>> the > >>>>>>>>>>>>>>> IP > >>>>>>>>>>>>>>>>>> address > >>>>>>>>>>>>>>>>>>>> and port of a server that a > >>>>>>> usage > >>>>>>>> may elect to > >>>>>>>>> use. > >>>>>>>>>>> STUN > >>>>>>>>>>>>>>> may be > >>>>>>>>>>>>>>>>>> used > >>>>>>>>>>>>>>>>>>>> with anycast addresses, but > >>> only > >>>>>>>> with UDP and > >>>>>>>>> in usages > >>>>>>>>>>>>>>> where > >>>>>>>>>>>>>>>>>>>> authentication is not used. > >>>>>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>>>> Why this restriction? You should > >>>>>>> be able > >>>>>>>> to use > >>>>>>>>> anycast with > >>>>>>>>>>>>>>> long-term > >>>>>>>>>>>>>>>>>>> AUTH for (say) TURN. > >>>>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>>> > >>>>>>>> https://www.ietf.org/mail-archive/web/behave/current/ > >>>>>>>>>>>>>>> msg03582.html > >>>>>>>>>>>>>>>> > >>>>>>>> >>>>>>>>>>>>> msg03582.html> > >>>>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>>> I think that the decision of > >>>>>>> permitting Anycast > >>>>>>>>> should be left > >>>>>>>>>>>>> to > >>>>>>>>>>>>>>> each > >>>>>>>>>>>>>>>>>> STUN Usage. Basic STUN Usage does > >>>>>>> not use > >>>>>>>>> authentication and > >>>>>>>>>>>>> use > >>>>>>>>>>>>>>> only a > >>>>>>>>>>>>>>>>>> one round trip for the Binding > >>>>>>> transaction, so > >>>>>>>>> Unicast can be > >>>>>>>>>>>>>>> used. > >>>>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>>> OTOH, TURN and ICE should probably say > >>>>>>>> something > >>>>>>>>> about that, > >>>>>>>>>>> so > >>>>>>>>>>>>> I > >>>>>>>>>>>>>>> added a > >>>>>>>>>>>>>>>>>> new bullet point in Section 13: > >>>>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>>> o If Anycast addresses can be > >>>>>>> used for > >>>>>>>> the server > >>>>>>>>> in case > >>>>>>>>>>>>> TCP > >>>>>>>>>>>>>>> or > >>>>>>>>>>>>>>>>>> TLS-over-TCP, or > >>>>>>> authentication are used. > >>>>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>> Are you leaving this text in? That > >>> seems > >>>>>>>> very confusing. > >>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>> In isolation yes, but I think it makes > >>>>>>> sense > >>>>>>>> which the text > >>>>>>>>>>> before > >>>>>>>>>>>>>>>> the bullet points: > >>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>> A STUN usage defines how STUN is > >>>>>>> actually > >>>>>>>> utilized -- > >>>>>>>>> when to > >>>>>>>>>>>>> send > >>>>>>>>>>>>>>>> requests, what to do with the > >>>>>>> responses, > >>>>>>>> and which > >>>>>>>>> optional > >>>>>>>>>>>>>>>> procedures defined here (or in an > >>>>>>> extension > >>>>>>>> to STUN) > >>>>>>>>> are to be > >>>>>>>>>>>>>>> used. > >>>>>>>>>>>>>>>> A usage also defines: > >>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>> [...] > >>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>> o If Anycast addresses can be used > >>>>>>> for the > >>>>>>>> server in > >>>>>>>>> case TCP > >>>>>>>>>>>>> or > >>>>>>>>>>>>>>>> TLS-over-TCP, or authentication > >>>>>>> are used. > >>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>> What is the need for the restriction at all > > > --0000000000000a2e0f0584b04252 Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable
Dear IESG Secretary (bcc),=C2=A0

=
Please post this draft during the blackout period - we're tr= ying to clear The Last Discuss on a document in IESG Evaluation before I st= ep down, so want to give people time to look at the official -21 version ra= ther than clear based on e-mail.=C2=A0

Thanks!

Spencer, who is kind of hoping that someone on the ne= xt IESG asks why we have a blackout posting period for drafts in IESG Evalu= ation - but I'm sure you'll all do the right thing.

=
On Thu, Ma= r 21, 2019 at 7:22 PM Gonzalo Salgueiro (gsalguei) <gsalguei@cisco.com> wrote:
Hi Eric -=C2=A0

I=E2=80=99m attaching the -21 that will be published once the I-D subm= ission tool opens up (or Spencer can override and it published before then)= .=C2=A0 It uses your proposed bid down protection disclaimer text (save for= minor nits I cleaned up). =C2=A0

If this looks good then from my perspective we are done and your DISCU= SS can be cleared and we can proceed with publication.

Thanks for all your help.

Cheers,

Gonzalo


On Mar 20, 2019, at 3:57 PM, Eric Rescorla <ekr@rtfm.com> wrote:

Gonzalo,

This text still seems to me to need some work. Here is a revised version.
SHA-256 was chosen as the new default for password=C2=A0=C2=A0=C2=A0
hashing for its compability with RFC 7616 but because SHA-256 (like=C2=A0= =C2=A0=C2=A0
MD5) is a comparatively fast algorithm, it does little to deter
brute force attacks. Specifically, this means that if the
user has a weak password:

* An attacker who captures the server's password file can often
=C2=A0 determine the user's password and thus impersonate the user
=C2=A0 to other servers where they have used that password. Note that
=C2=A0 such an attacker can impersonate the user to the server itself
=C2=A0 without any brute force attack.

* An attacker who captures a single exchange can brute force
=C2=A0 the user's password and thus potentially impersonate the
=C2=A0 user to the server and other servers where they have used
=C2=A0 the same pasword.
=C2=A0
A stronger (which is to say slower) algorithm, like Argon2
[I-D.irtf-cfrg-argon2], would help both of these cases, but in the
case of the first attack, only after until the database entry for this
user is updated to exclusively use that stronger mechanism.

The bid-down defenses in this protocol prevent an attacker from
forcing the client and server to complete a handshake using weaker
algorithms than they jointly support, but only if the weakest joint
algorithm is strong enough that it cannot be brute-forced. However,
this does not defend against many attacks on those algorithms;
specifically, an on-path attacker might perform a bid-down attack on a
client which supported both Argon2 and SHA-256 for password hashing
and use that to collect a MESSAGE-INTEGRITY-SHA256 value which it uses
for an offline brute-force attack. This would be detected when the
server receives the second request, but that does not prevent the
attacker from obtaining the MESSAGE-INTEGRITY-SHA256 value.

Similarly, an attack against the USERHASH mechanism will not succeed
in establishing a session as the server will detect that the feature
was discarded on-path, but the client would still have been convinced
to send its username in clear in the USERNAME attribute, thus
disclosing it to the attacker.

-Ekr


On Mon, = Mar 18, 2019 at 6:37 PM Gonzalo Salgueiro (gsalguei) <gsalguei@cisco.com> wrote:
Thanks, Spencer.=C2=A0 In the interest of expeditiousness I=E2=80=99ve emai= led Eric to review the newly published -20 to ensure it addresses his DISCU= SS points. Hoping to get this done before Eric steps down as AD.

Cheers,

Gonzalo



> On Mar 18, 2019, at 9:27 PM, Spencer Dawkins at IETF <spencerdawkins.ietf@g= mail.com> wrote:
>
> Dear All,
>
>> On Fri, Mar 8, 2019 at 8:10 PM Eric Rescorla <ekr@rtfm.com> wrote:
>>
>> Thanks for the call yesterday.
>>
>
> Thanks to all for moving this specification forward.
>
> If the current conversation turns out to converge on this topic before= next
> Wednesday, I'm happy to approve a revised draft after Eric clears = his
> Discuss.
>
> If I can help in any way, please let me know.
>
> Spencer
>
>
>>
>> First, here is what I recommend for the question of SHA-256 for pa= ssword
>> hashing:
>>
>>=C2=A0 Note: the use of SHA-256 for password hashing does not meet = modern
>>=C2=A0 standards, which are aimed at slowing down exhaustive passwo= rd search
>>=C2=A0 by providing a relatively slow minimum time to compute the >>=C2=A0 hash. Although better algorithms such as Argon2
>>=C2=A0 [https://datatracker.ietf.org= /doc/draft-irtf-cfrg-argon2/] are
>>=C2=A0 available, SHA-256 was chosen for consistency with RFC 7616.=
>>
>>
>> Now, WRT to the anti-downgrade situation. Here's a stylized ve= rsion
>> of the protocol:
>>
>> Client=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2= =A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 = =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 Server
>>
>> Hello ->
>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2= =A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 = =C2=A0 <- Nonce, Algorithms
>> HMAC-H1(H2(Password), Nonce, Algorithms, Msg) ->
>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2= =A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0<- HMAC-H1(H2(Passwo= rd), ...)
>>
>> Where H1 and H2 are the HMAC hash functions and the password hashi= ng
>> function respectively.
>>
>> Now, if we assume that the attacker does not know Password and tha= t
>> both H1 and H2 are secure, then it is not possible for the attacke= r to
>> complete the transaction or modify any of the messages. Further, i= f
>> the weakest joint algorithm that both sides support is still stron= g,
>> then an attacker cannot influence the algorithm negotiation [0]. T= his
>> property is provided by covering the algorithms under the MAC.
>>
>> However, my point is that this is not a very useful property.
>>
>> First, consider the case in which the implementations jointly supp= ort
>> one strong algorithm and one weak algorithm. E.g., for H1 they sup= port
>> SHA-256 and the function Z(x) which always emits 0s. This allows >> an attacker to force the client and server into using Z, as follow= s.
>>
>>
>> Client=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2= =A0 =C2=A0 =C2=A0 Attacker=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 = =C2=A0 =C2=A0 =C2=A0Server
>>
>> Hello ->
>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2= =A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 Hello ->
>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2= =A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 <- No= nce, Alg=3DSHA256, Z
>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 <- Nonce= , Alg=3DZ
>> Z(H2(Password), Nonce, Alg=3DZ)) ->
>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2= =A0 =C2=A0 =C2=A0 Z(H2(Password), Nonce, Alg=3DSHA256, Z))
>>
>> The issue here is that the only thing that the MAC is doing is
>> authenticating the transaction, and if you can't trust it to d= o that,
>> you can't trust it to authenticate the bid-down defense either= .
>>
>>
>> During our discussion, there was a suggestion that it was useful t= o
>> have biddown defense to defend against weaknesses in H2. I don'= ;t think
>> that that's true either. First, remember that the purpose of H= 2 is to
>> prevent an attacker who recovers the password database from learni= ng
>> the user's true password. This is not about defending the serv= er from
>> attack (because knowing A1 is enough to attack the server) but abo= ut
>> preventing the attacker from learning a password which might have = been
>> reused on another site.
>>
>> Now, it's also possible to brute-force the user's password= just from
>> the protocol transcript: if you capture the client's first mes= sage
>> with MESSAGE-INTEGRITY or MESSAGE-INTEGRITY-SHA256, you can just k= eep
>> trying passwords until you get the right MAC. Note that this is a<= br> >> passive attack. This is comparatively fast because SHA256 and MD5 = are
>> fast.
>>
>> A much stronger H2 (e.g., Argon) would help against this, but the<= br> >> problem now becomes that the client supports H2 =3D=3D MD5 (or SHA= -256)
>> and so even if the server supports Argon, the attacker can mount a=
>> bid-down defense in which it modifies the server's first messa= ge to
>> just advertise MD5 and thus get the client to provide a suitable >> message. The bid-down defense would prevent the authentication
>> transaction from completing, but that's not necessary for this=
>> attack because the attacker can just brute-force the password from=
>> the message it has. To make this work, you would need something >> like a PAKE, which this is not.
>>
>> Finally, you might think that the server has two databases, one >> which uses Argon and one which uses MD5 and it wants to gradually<= br> >> phase out the MD5 one, which it will do when no client authenticat= es
>> with MD5 for a very long time. An anti-biddown defense would sort<= br> >> of work here, but the fact that the attacker would have to be
>> active essentially indefinitely to keep the server confused about<= br> >> the state of clients -- and that the attacker can likely just
>> get a valid account and then insist on using MD5 -- makes this a >> not very useful defense.
>>
>> I think this makes a pretty persuasive case that the bid-down defe= nse
>> isn't useful except in the formal "attacker cannot influe= nce
>> negotiation" sense. With that said, in the spirit of getting = this done, I
>> guess
>> I'm willing to let this go if the security considerations make= clear
>> that it is only a very limited mechanism.
>>
>> -Ekr
>>
>>
>> [0] This is principally about H1. As long as the H2 approximately<= br> >> evenly distributes the password over its range, then cryptographic=
>> strength is not important for this question. For instance, you
>> could replace H2 with an identity function and still have a
>> secure protocol.
>>
>>
>>
>>
>>
>>
>> On Wed, Feb 20, 2019 at 4:03 AM Gonzalo Camarillo <
>> gonzalo.camarillo@ericsson.com> wrote:
>>
>>> Thanks, Gonzalo! Please, let us know the agreed way forward on= ce you
>>> have the call.
>>>
>>> Cheers,
>>>
>>> Gonzalo
>>>
>>>> On 19-Feb-19 20:05, Gonzalo Salgueiro (gsalguei) wrote: >>>> Hi Gonzalo -
>>>>
>>>> We have scheduled a conference call with Ekr, Simon, Marc = and myself on
>>> March 7th to discuss the last two remaining issues.=C2=A0 Will= update with
>>> resolutions once this has occurred.
>>>>
>>>> Cheers,
>>>>
>>>> Gonzalo
>>>>
>>>>
>>>>
>>>>> On Feb 18, 2019, at 8:18 AM, Gonzalo Camarillo < >>> Gonzalo.Camarillo@ericsson.com> wrote:
>>>>>
>>>>> Hi Gonzalo S,
>>>>>
>>>>> what is the status of this one?
>>>>>
>>>>> Thanks,
>>>>>
>>>>> Gonzalo
>>>>>
>>>>>> On 18-Jan-19 20:16, Gonzalo Salgueiro (gsalguei) w= rote:
>>>>>> Totally agree, Ekr.=C2=A0 Marc and I are meeting t= o come up with a proposal
>>>>>> but I do agree we need to have a call to get this = put to bed once and
>>>>>> for all.=C2=A0 We=E2=80=99ll offer some potential = dates in the next 2-3 weeks.
>>>>>>
>>>>>> Cheers,
>>>>>>
>>>>>> Gonzalo
>>>>>>
>>>>>>
>>>>>>> On Dec 26, 2018, at 8:05 PM, Eric Rescorla <= ;ekr@rtfm.com
>>>>>>> <mailto:ekr@rtfm.com>> wrote:
>>>>>>>
>>>>>>> We really need to bring this to a close before= both Spencer and I
>>> step
>>>>>>> down, I should think.
>>>>>>>
>>>>>>> -Ekr
>>>>>>>
>>>>>>>
>>>>>>> On Thu, Nov 22, 2018 at 4:30 AM Gonzalo Camari= llo
>>>>>>> <gonzalo.camarillo@ericsson.com
>>>>>>> <mailto:gonzalo.camarillo@ericsson.com>>= wrote:
>>>>>>>
>>>>>>>=C2=A0 =C2=A0Eric, Spencer, thanks for the stat= us update!
>>>>>>>
>>>>>>>=C2=A0 =C2=A0Authors, could you please let us k= now when you plan to get to
>>> this?
>>>>>>>
>>>>>>>=C2=A0 =C2=A0Gonzalo
>>>>>>>
>>>>>>>>=C2=A0 =C2=A0On 19-Nov-18 23:04, Spencer Da= wkins at IETF wrote:
>>>>>>>> Hi, Gonzalo,
>>>>>>>> On Mon, Nov 19, 2018 at 9:06 AM Eric Resco= rla <ekr@rtfm.com<= br> >>>>>>>=C2=A0 =C2=A0<mailto:ekr@rtfm.com>
>>>>>>>> <mailto:ekr@rtfm.com <mailto:ekr@rtfm.com>>> wrote:
>>>>>>>>
>>>>>>>>=C2=A0 =C2=A0 =C2=A0Not really. I have not = received any response to my mail of
>>>>>>>=C2=A0 =C2=A0Oct 23.
>>>>>>>>=C2=A0 =C2=A0 =C2=A0As before, I'm happ= y to have a call, but I believe we're
>>>>>>>=C2=A0 =C2=A0reaching
>>>>>>>>=C2=A0 =C2=A0 =C2=A0the limits of what can = be accomplished by email.
>>>>>>>>
>>>>>>>>
>>>>>>>> Eric would know best (it being his Discuss= ), but this is also my
>>>>>>>> understanding.
>>>>>>>>
>>>>>>>> I can add this to the agenda of the IESG i= nformal telechat on
>>>>>>>=C2=A0 =C2=A0November
>>>>>>>> 29, if there hasn't been a call before= then, but I don't have a
>>>>>>>=C2=A0 =C2=A0reason
>>>>>>>> to wait until then, if it's possible t= o talk sooner.
>>>>>>>>
>>>>>>>> Thanks,
>>>>>>>>
>>>>>>>> Spencer
>>>>>>>>
>>>>>>>>
>>>>>>>>
>>>>>>>>=C2=A0 =C2=A0 =C2=A0-Ekr
>>>>>>>>
>>>>>>>>
>>>>>>>>=C2=A0 =C2=A0 =C2=A0On Mon, Nov 19, 2018 at= 6:35 AM Gonzalo Camarillo
>>>>>>>>=C2=A0 =C2=A0 =C2=A0<gonzalo.camarillo@ericsson= .com
>>>>>>>=C2=A0 =C2=A0<mailto:gonzalo.camarillo@ericsson.com= >
>>>>>>>>=C2=A0 =C2=A0 =C2=A0<mailto:gonzalo.camarillo@e= ricsson.com
>>>>>>>=C2=A0 =C2=A0<mailto:gonzalo.camarillo@ericsson.com= >>> wrote:
>>>>>>>>
>>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0Hi Spence= r,
>>>>>>>>
>>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0what is t= he status of this? Are the authors and the
>>> document
>>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0shepherd<= br> >>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0working w= ith the relevant ADs on the discusses?
>>>>>>>>
>>>>>>>>
>>>>>>>
>>> https://datatracker.ietf.org/doc/draft-ietf-tram-stun-pmtud/ballot/
>>>>>>>>
>>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0Cheers, >>>>>>>>
>>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0Gonzalo >>>>>>>>
>>>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0On 24= -Oct-18 16:40, Spencer Dawkins at IETF wrote:
>>>>>>>>> Hi, Marc,
>>>>>>>>>
>>>>>>>>> On Wed, Oct 24, 2018 at 3:44 AM Marc P= etit-Huguenin
>>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0<petithug@acm.org <m= ailto:petithug@acm.or= g>
>>>>>>>=C2=A0 =C2=A0<mailto:petithug@acm.org <mailto:petithug@acm.org>>
>>>>>>>>> <mailto:petithug@acm.org <mailto:petithug@acm.org>
>>>>>>>=C2=A0 =C2=A0<mailto:petithug@acm.org <mailto:petithug@acm.org>>>&= gt; wrote:
>>>>>>>>>
>>>>>>>>>=C2=A0 =C2=A0 Hi Spencer,
>>>>>>>>>
>>>>>>>>>=C2=A0 =C2=A0 I sent my answers to Eric= Rescorla questions on
>>>>>>>=C2=A0 =C2=A02018-10-07
>>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0following=
>>>>>>>>>=C2=A0 =C2=A0 an in-person meeting with= my co-author, but never
>>>>>>>=C2=A0 =C2=A0got a
>>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0response<= br> >>>>>>>>>=C2=A0 =C2=A0 back.=C2=A0 Because there= was no change proposed by
>>>>>>>=C2=A0 =C2=A0Eric I went
>>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0ahead and=
>>>>>>>>>=C2=A0 =C2=A0 published -19 a couple of= weeks after that, with
>>>>>>>=C2=A0 =C2=A0the text
>>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0agreed in=
>>>>>>>>>=C2=A0 =C2=A0 response to Adam's an= d Benjamin's comments.
>>>>>>>>>
>>>>>>>>>
>>>>>>>>
>>>>>>>
>>> https://www.ietf.org/mail-archive/web/tram/current/msg02635.html
>>>>>>>>>
>>>>>>>>>
>>>>>>>>> Ah - I wonder if that was what had hap= pened.
>>>>>>>>>
>>>>>>>>> It sounds like you did the right thing= , and that Eric
>>>>>>>=C2=A0 =C2=A0has now
>>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0responded= ,
>>>>>>>>> which is also the right thing to do. >>>>>>>>>
>>>>>>>>> Thanks for helping me understand.
>>>>>>>>>
>>>>>>>>> Spencer
>>>>>>>>>
>>>>>>>>>
>>>>>>>>>>=C2=A0 =C2=A0 On 10/23/18 7:28 PM, = Spencer Dawkins at IETF wrote:
>>>>>>>>>> Hi, Marc,
>>>>>>>>>>
>>>>>>>>>> I see that a -19 has been submitte= d, but didn't
>>>>>>>=C2=A0 =C2=A0see a
>>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0reply fro= m
>>>>>>>>>=C2=A0 =C2=A0 Eric in
>>>>>>>>>> this thread. Do you think that you= 've converged?
>>>>>>>>>>
>>>>>>>>>> (I saw an offer of a conference ca= ll, so thought an
>>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0out-of-ba= nd
>>>>>>>>>> conversation might have happened)<= br> >>>>>>>>>>
>>>>>>>>>> Thanks,
>>>>>>>>>>
>>>>>>>>>> Spencer
>>>>>>>>>>
>>>>>>>>>> On Sun, Oct 7, 2018 at 9:35 AM Mar= c Petit-Huguenin
>>>>>>>>>=C2=A0 =C2=A0 <petithug@acm.org <mailto:petithug@acm.org>
>>>>>>>=C2=A0 =C2=A0<mailto:petithug@acm.org <mailto:petithug@acm.org>>
>>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0<mailt= o:petithug@acm.org <mailto:petithug= @acm.org>
>>>>>>>=C2=A0 =C2=A0<mailto:petithug@acm.org <mailto:petithug@acm.org>>>&= gt; wrote:
>>>>>>>>>>
>>>>>>>>>>> Hi Eric,
>>>>>>>>>>>
>>>>>>>>>>> Please see inline.
>>>>>>>>>>>
>>>>>>>>>>>> On 09/10/2018 03:25 AM, Er= ic Rescorla wrote:
>>>>>>>>>>>> On Sat, Sep 8, 2018 at 2:3= 1 PM, Marc
>>>>>>>=C2=A0 =C2=A0Petit-Huguenin
>>>>>>>>>=C2=A0 =C2=A0 <petithug@acm.org <mailto:petithug@acm.org>
>>>>>>>=C2=A0 =C2=A0<mailto:petithug@acm.org <mailto:petithug@acm.org>>
>>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0<mailt= o:petithug@acm.org <mailto:petithug= @acm.org>
>>>>>>>=C2=A0 =C2=A0<mailto:petithug@acm.org <mailto:petithug@acm.org>>>&= gt;
>>>>>>>>>>>> wrote:
>>>>>>>>>>>>
>>>>>>>>>>>>> Hi Eric,
>>>>>>>>>>>>>
>>>>>>>>>>>>> Apologies for the dela= y in getting back to that.
>>>>>>>>>>>>>
>>>>>>>>>>>>> I think that there is = some misunderstanding
>>>>>>>=C2=A0 =C2=A0in what
>>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0STUNbis i= s
>>>>>>>>>=C2=A0 =C2=A0 trying to
>>>>>>>>>>>>> do, so please see my c= omments inline.
>>>>>>>>>>>>>
>>>>>>>>>>>>>> On 06/18/2018 10:4= 3 AM, Eric Rescorla wrote:
>>>>>>>>>>>>>> Hi folks,
>>>>>>>>>>>>>>
>>>>>>>>>>>>>> I've reviewed = the new version, but I don't
>>> think
>>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0that the = biddown
>>>>>>>>>>>>>> discussion makes m= uch sense.
>>>>>>>>>>>>>>
>>>>>>>>>>>>>> To recap, there ar= e two hashes here:
>>>>>>>>>>>>>>
>>>>>>>>>>>>>> - The hash which y= ou use to store the
>>>>>>>=C2=A0 =C2=A0password with
>>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0(currentl= y
>>>>>>>>>=C2=A0 =C2=A0 mostly
>>>>>>>>>>>>> MD5)
>>>>>>>>>>>>>> - The hash you use= to compute the MAC
>>>>>>>=C2=A0 =C2=A0(currently SHA-1).
>>>>>>>>>>>>>>
>>>>>>>>>>>>>> First, let's s= tipulate that MD5 isn't a
>>>>>>>=C2=A0 =C2=A0great choice
>>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0here,
>>>>>>>>>=C2=A0 =C2=A0 though SHA-1
>>>>>>>>>>>>>> isn't a great = choice
>>>>>>>>>>>>>> either for pwd has= hing You want Argon or the
>>>>>>>=C2=A0 =C2=A0like.
>>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0With that= said,
>>>>>>>>>>>>> there's
>>>>>>>>>>>>>> no sensible
>>>>>>>>>>>>>> biddown attack on = that hash because it's a
>>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0per-serve= r feature,
>>>>>>>>>=C2=A0 =C2=A0 not a
>>>>>>>>>>>>>> per-transaction >>>>>>>>>>>>>> feature. So, as lo= ng as the server has
>>>>>>>=C2=A0 =C2=A0MD5-hashed
>>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0passwords= , the
>>>>>>>>>>>>> situation
>>>>>>>>>>>>>> is bad.
>>>>>>>>>>>>>
>>>>>>>>>>>>> In no place in STUNbis= we are proposing to
>>>>>>>=C2=A0 =C2=A0use SHA-1
>>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0for passw= ord
>>>>>>>>>>>>> encryption, so I am no= t sure where that come
>>>>>>>=C2=A0 =C2=A0from.
>>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0What we >>>>>>>>>=C2=A0 =C2=A0 propose is:
>>>>>>>>>>>>>
>>>>>>>>>>>>
>>>>>>>>>>>> You're right, it's= SHA-256, but my criticisms
>>>>>>>=C2=A0 =C2=A0apply
>>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0equally t= here.
>>>>>>>>>>>
>>>>>>>>>>> SHA-256 was what the WG adopte= d.=C2=A0 Our attempts
>>>>>>>=C2=A0 =C2=A0to add
>>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0other pas= swords
>>>>>>>>>>> encryption mechanisms were den= ied.=C2=A0 It is true
>>> that
>>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0Argon2 wa= s
>>>>>>>>>=C2=A0 =C2=A0 not in that
>>>>>>>>>>> list (in our defense Argon2 wa= s not known
>>>>>>>=C2=A0 =C2=A0before July
>>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A02015), bu= t
>>>>>>>>>=C2=A0 =C2=A0 I do not
>>>>>>>>>>> see why the WG would have acce= pted that one
>>>>>>>=C2=A0 =C2=A0over the
>>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0others. >>>>>>>>>=C2=A0 =C2=A0 Anyway it is
>>>>>>>>>>> too late to fix this, as it is= my understanding
>>>>>>>=C2=A0 =C2=A0that
>>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0the WG do= es
>>>>>>>>>=C2=A0 =C2=A0 not have
>>>>>>>>>>> enough energy to reach consens= us on a new password
>>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0algorithm= .
>>>>>>>>>=C2=A0 =C2=A0 Someone can
>>>>>>>>>>> just write a draft adding Argo= n2 as password
>>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0encryptio= n, as we
>>>>>>>>>=C2=A0 =C2=A0 will have a
>>>>>>>>>>> IANA registry for that.
>>>>>>>>>>>
>>>>>>>>>>>>
>>>>>>>>>>>>
>>>>>>>>>>>>> - Establish a registry= for new password
>>>>>>>=C2=A0 =C2=A0algorithms
>>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0(section<= br> >>>>>>>>>=C2=A0 =C2=A0 18.5), so
>>>>>>>>>>>>> algorithms like Argon2= could be added later
>>>>>>>=C2=A0 =C2=A0(but note
>>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0that our = own
>>>>>>>>>>>>> proposals to add more = password algorithms were
>>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0rejected = by the
>>>>>>>>>=C2=A0 =C2=A0 working
>>>>>>>>>>>>> group).
>>>>>>>>>>>>> - Add a new password a= lgorithm to that registry,
>>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0namely SH= A-256.
>>>>>>>>>>>>> - Register MD5 as an i= nitial password
>>>>>>>=C2=A0 =C2=A0algorithm for
>>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0backward<= br> >>>>>>>>>>> compatibility
>>>>>>>>>>>>> purpose.
>>>>>>>>>>>>>
>>>>>>>>>>>>> As for the biddown pro= tection itself, it is my
>>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0recollect= ion that it
>>>>>>>>>>>>> happened more or less = like that:
>>>>>>>>>>>>>
>>>>>>>>>>>>>
>>>>>>>>>>>>> INT. MEETING ROOM - DA= Y
>>>>>>>>>>>>>
>>>>>>>>>>>>> One of the co-editors = of STUNBis stands at the
>>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0microphon= e:
>>>>>>>>>>>>>
>>>>>>>>>>>>>=C2=A0 =C2=A0 =C2=A0 = =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2= =A0CO-EDITOR
>>>>>>>>>>>>>=C2=A0 =C2=A0 =C2=A0 = =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0We added SHA-256 protection for >>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0passwords=
>>>>>>>>>>>>>=C2=A0 =C2=A0 =C2=A0 = =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0in STUNBis.
>>>>>>>>>>>>>
>>>>>>>>>>>>>=C2=A0 =C2=A0 =C2=A0 = =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2= =A0SOMEONE (V.O.)
>>>>>>>>>>>>>=C2=A0 =C2=A0 =C2=A0 = =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0As MD5 still need to be
>>>>>>>=C2=A0 =C2=A0supported,
>>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0you need = to add
>>>>>>>>>>>>>=C2=A0 =C2=A0 =C2=A0 = =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0protection for bid-down
>>> attacks.
>>>>>>>>>>>>>
>>>>>>>>>>>>> CLOSE-UP on CO-EDITOR = ROLLING HIS EYES
>>>>>>>>>>>>>
>>>>>>>>>>>>>=C2=A0 =C2=A0 =C2=A0 = =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2= =A0CO-EDITOR
>>>>>>>>>>>>>=C2=A0 =C2=A0 =C2=A0 = =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0OK, I'll work on that.
>>>>>>>>>>>>>
>>>>>>>>>>>>> Four to eight months h= as passed.
>>>>>>>>>>>>>
>>>>>>>>>>>>> INT. ANOTHER MEETING R= OOM - DAY
>>>>>>>>>>>>>
>>>>>>>>>>>>> The same co-editor of = STUNBis stands at the
>>>>>>>=C2=A0 =C2=A0microphone:
>>>>>>>>>>>>>
>>>>>>>>>>>>>=C2=A0 =C2=A0 =C2=A0 = =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2= =A0CO-EDITOR
>>>>>>>>>>>>>=C2=A0 =C2=A0 =C2=A0 = =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0We added a nice mechanism to
>>>>>>>=C2=A0 =C2=A0prevent
>>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0bid-down<= br> >>>>>>>>>>>>>=C2=A0 =C2=A0 =C2=A0 = =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0attacks on passwords.=C2=A0 Any >>>>>>>=C2=A0 =C2=A0comments?
>>>>>>>>>>>>>
>>>>>>>>>>>>>=C2=A0 =C2=A0 =C2=A0 = =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2= =A0THE ROOM
>>>>>>>>>>>>>=C2=A0 =C2=A0 =C2=A0 = =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0(silence)
>>>>>>>>>>>>>
>>>>>>>>>>>>>=C2=A0 =C2=A0 =C2=A0 = =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2= =A0CO-EDITOR
>>>>>>>>>>>>>=C2=A0 =C2=A0 =C2=A0 = =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0Moving on...
>>>>>>>>>>>>>
>>>>>>>>>>>>
>>>>>>>>>>>> I don't see how any of= this is relevant to my
>>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0technical= points
>>>>>>>>>=C2=A0 =C2=A0 above.
>>>>>>>>>>>
>>>>>>>>>>> My point was that we, the co-e= ditors, did not
>>>>>>>=C2=A0 =C2=A0decide on
>>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0adding >>>>>>>>>=C2=A0 =C2=A0 bid-down
>>>>>>>>>>> protection, someone asked us t= o do so and
>>>>>>>=C2=A0 =C2=A0no-one in the
>>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0WG saw >>>>>>>>>=C2=A0 =C2=A0 any problem
>>>>>>>>>>> with that.=C2=A0 The reasons t= hat person wanted that
>>>>>>>=C2=A0 =C2=A0are not
>>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0known to<= br> >>>>>>>>>=C2=A0 =C2=A0 us but, as
>>>>>>>>>>> you insist, here's one rea= son I can think of:
>>>>>>>>>>>
>>>>>>>>>>> It is a fact that, for operati= onal reasons, a
>>>>>>>=C2=A0 =C2=A0password
>>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0database<= br> >>>>>>>>>=C2=A0 =C2=A0 cannot be
>>>>>>>>>>> re-encrypted at once.=C2=A0 Al= so for operational
>>>>>>>=C2=A0 =C2=A0reasons,
>>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0the MD5 p= assword
>>>>>>>>>>> cannot be immediately removed = from the database
>>>>>>>=C2=A0 =C2=A0as soon
>>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0the user<= br> >>>>>>>>>=C2=A0 =C2=A0 submitted
>>>>>>>>>>> a new one.=C2=A0 In fact, and = for quite some time, both
>>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0encrypted=
>>>>>>>>>=C2=A0 =C2=A0 variants of
>>>>>>>>>>> the same password may have to = be kept in that
>>>>>>>=C2=A0 =C2=A0database,
>>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0because a=
>>>>>>>>>=C2=A0 =C2=A0 single
>>>>>>>>>>> user may use a mix of devices,= some of them
>>>>>>>=C2=A0 =C2=A0that use an
>>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0RFC 5389<= br> >>>>>>>>>=C2=A0 =C2=A0 client,
>>>>>>>>>>> some that use a STUNbis client= .=C2=A0 It is up to
>>>>>>>=C2=A0 =C2=A0the STUN
>>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0server ow= ner to
>>>>>>>>>>> decide how long the migration = to STUNbis will
>>>>>>>=C2=A0 =C2=A0take and
>>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0when it >>>>>>>>>=C2=A0 =C2=A0 will be
>>>>>>>>>>> acceptable to reject all RFC 5= 389 (i.e. MD5)
>>>>>>>=C2=A0 =C2=A0clients (that
>>>>>>>>>=C2=A0 =C2=A0 migration time
>>>>>>>>>>> can be purposely reduced to 0 = seconds but
>>>>>>>=C2=A0 =C2=A0that's the
>>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0choice an= d
>>>>>>>>>>> responsibility of the owner of= the server).
>>>>>>>>>>>
>>>>>>>>>>> Meanwhile we still need to be = sure that if the
>>> STUN
>>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0client is=
>>>>>>>>>=C2=A0 =C2=A0 implementing
>>>>>>>>>>> STUNbis it unconditionally get= s the additional
>>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0protectio= n of the new
>>>>>>>>>>> password encryption algorithm.= =C2=A0 That's where
>>>>>>>=C2=A0 =C2=A0the biddown
>>>>>>>>>=C2=A0 =C2=A0 protection kicks
>>>>>>>>>>> in, by preventing an online at= tacker to have
>>>>>>>=C2=A0 =C2=A0the server
>>>>>>>>>=C2=A0 =C2=A0 misidentifying a
>>>>>>>>>>> STUNbis client as an RFC 5389 = client, by
>>>>>>>=C2=A0 =C2=A0preventing an
>>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0online >>>>>>>>>=C2=A0 =C2=A0 attacker to
>>>>>>>>>>> have the client misidentifying= a STUNbis server
>>>>>>>=C2=A0 =C2=A0as a
>>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0RFC 5389<= br> >>>>>>>>>=C2=A0 =C2=A0 server, and
>>>>>>>>>>> having both them use the MD5 e= ncrypted password
>>>>>>>=C2=A0 =C2=A0instead
>>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0of the >>>>>>>>>=C2=A0 =C2=A0 SHA-256
>>>>>>>>>>> encrypted password, all of tha= t easily done by
>>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0stripping= the
>>>>>>>>>=C2=A0 =C2=A0 unprotected
>>>>>>>>>>> 401 response of the new STUNbi= s
>>> PASSWORD-ALGORITHMS
>>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0attribute= .
>>>>>>>>>>>
>>>>>>>>>>>>
>>>>>>>>>>>>
>>>>>>>>>>>>
>>>>>>>>>>>>>> The second topic i= s the hash used to compute
>>> the
>>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0MAC. Howe= ver,
>>>>>>>>>=C2=A0 =C2=A0 I don't
>>>>>>>>>>>>> see
>>>>>>>>>>>>>> how
>>>>>>>>>>>>>> this gives you sen= sible biddown protection
>>>>>>>=C2=A0 =C2=A0because
>>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0that hash=
>>>>>>>>>=C2=A0 =C2=A0 is also
>>>>>>>>>>> used
>>>>>>>>>>>>>> to compute
>>>>>>>>>>>>>> MAC over the negot= iation: an attacker who has
>>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0compromis= ed a
>>>>>>>>>=C2=A0 =C2=A0 MAC which
>>>>>>>>>>> the
>>>>>>>>>>>>>> server
>>>>>>>>>>>>>> supports will quit= e likely be able to forge
>>>>>>>=C2=A0 =C2=A0a MAC
>>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0over the<= br> >>>>>>>>>=C2=A0 =C2=A0 transcript
>>>>>>>>>>> as
>>>>>>>>>>>>>> well. This is,
>>>>>>>>>>>>>> I suppose, potenti= ally useful as a defense
>>>>>>>=C2=A0 =C2=A0against
>>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0some othe= r
>>>>>>>>>=C2=A0 =C2=A0 weakness
>>>>>>>>>>>>>> (e.g.,
>>>>>>>>>>>>>> version #), but I = don't really see how the
>>>>>>>=C2=A0 =C2=A0current
>>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0design >>>>>>>>>=C2=A0 =C2=A0 helps against
>>>>>>>>>>>>>> attacks on the
>>>>>>>>>>>>>> MAC.
>>>>>>>>>>>>>
>>>>>>>>>>>>> There is no biddown at= tack protection for the
>>>>>>>=C2=A0 =C2=A0MAC, as
>>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0stated in=
>>>>>>>>>=C2=A0 =C2=A0 Section
>>>>>>>>>>>>> 16.3:
>>>>>>>>>>>>>
>>>>>>>>>>>>> "The bid-down pro= tection mechanism described
>>>>>>>=C2=A0 =C2=A0in this
>>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0document<= br> >>>>>>>>>=C2=A0 =C2=A0 is new,
>>>>>>>>>>>>> and thus cannot curren= tly protect against a
>>>>>>>=C2=A0 =C2=A0bid-down
>>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0attack th= at
>>>>>>>>>>>>> lowers the strength of= the hash algorithm to
>>>>>>>=C2=A0 =C2=A0HMAC-SHA1."
>>>>>>>>>>>>>
>>>>>>>>>>>>> What we put in place i= s a plan for *future*
>>>>>>>=C2=A0 =C2=A0versions
>>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0of STUN t= o get
>>>>>>>>>>>>> biddown protection for= the MAC.=C2=A0 That's it,
>>>>>>>=C2=A0 =C2=A0no more,
>>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0no less.<= br> >>>>>>>>>>>>>
>>>>>>>>>>>>
>>>>>>>>>>>> Yes, but I don't belie= ve that this will
>>>>>>>=C2=A0 =C2=A0provide bid-down
>>>>>>>>>=C2=A0 =C2=A0 protection for
>>>>>>>>>>> the
>>>>>>>>>>>> MAC in the future for the = reasons I indicate
>>>>>>>=C2=A0 =C2=A0above.
>>>>>>>>>>>>
>>>>>>>>>>>> If you think this does som= ething useful,
>>>>>>>=C2=A0 =C2=A0please show me an
>>>>>>>>>=C2=A0 =C2=A0 example attack
>>>>>>>>>>>> and how this fixes it. Not= e that it's not
>>>>>>>=C2=A0 =C2=A0generally
>>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0useful to=
>>>>>>>>>=C2=A0 =C2=A0 just bid
>>>>>>>>>>> down
>>>>>>>>>>>> the MAC itself unless the = MAC you bid down to
>>>>>>>=C2=A0 =C2=A0is weak
>>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0enough to=
>>>>>>>>>=C2=A0 =C2=A0 exploit
>>>>>>>>>>> in
>>>>>>>>>>>> some other way.
>>>>>>>>>>>
>>>>>>>>>>> I do not know what weaknesses = will be
>>>>>>>=C2=A0 =C2=A0discovered in the
>>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0future. >>>>>>>>>=C2=A0 =C2=A0 I am also
>>>>>>>>>>> pretty sure that the cost of n= ot using that
>>>>>>>=C2=A0 =C2=A0mechanism
>>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0is very >>>>>>>>>=C2=A0 =C2=A0 close to 0.
>>>>>>>>>>> What I am sure of is that the = cost of
>>>>>>>=C2=A0 =C2=A0reengineering a
>>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0new biddo= wn
>>>>>>>>>>> protection mechanism if we eve= r need it will be
>>>>>>>=C2=A0 =C2=A0high.
>>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0We alread= y
>>>>>>>>>=C2=A0 =C2=A0 went
>>>>>>>>>>> through the pains of designing= one for the
>>> password
>>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0algorithm= , so
>>>>>>>>>=C2=A0 =C2=A0 why not
>>>>>>>>>>> extend it so it can be used in= the aftermath of
>>> the
>>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0next Snow= den
>>>>>>>>>=C2=A0 =C2=A0 facepalm
>>>>>>>>>>> moment?
>>>>>>>>>>>
>>>>>>>>>>>> Again, happy to have a cal= l to walk though
>>>>>>>=C2=A0 =C2=A0this if that
>>>>>>>>>>>> helps.
>>>>>>>>>>>>
>>>>>>>>>>>> -Ekr
>>>>>>>>>>>>
>>>>>>>>>>>>
>>>>>>>>>>>>
>>>>>>>>>>>>
>>>>>>>>>>>>>>
>>>>>>>>>>>>>> You might think th= at there was a MAC which
>>>>>>>=C2=A0 =C2=A0was easier to
>>>>>>>>>=C2=A0 =C2=A0 reverse to
>>>>>>>>>>> find
>>>>>>>>>>>>>> the original
>>>>>>>>>>>>>> password, but the = defense you have here
>>>>>>>=C2=A0 =C2=A0doesn't help
>>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0with that=
>>>>>>>>>=C2=A0 =C2=A0 because
>>>>>>>>>>>>> the
>>>>>>>>>>>>>> on-path attacker c= an do a bid-down and use the
>>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0client as= a MAC
>>>>>>>>>=C2=A0 =C2=A0 oracle
>>>>>>>>>>> for
>>>>>>>>>>>>>> any MAC the client= supports.
>>>>>>>>>>>>>>
>>>>>>>>>>>>>> So, I still don= 9;t understand what this is
>>>>>>>=C2=A0 =C2=A0supposed
>>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0to do. Ha= ppy to
>>>>>>>>>>> have a
>>>>>>>>>>>>>> call if you
>>>>>>>>>>>>>> think that helps >>>>>>>>>>>>>>
>>>>>>>>>>>>>> -Ekr
>>>>>>>>>>>>>>
>>>>>>>>>>>>>>
>>>>>>>>>>>>>>
>>>>>>>>>>>>>>
>>>>>>>>>>>>>> On Mon, Jun 18, 20= 18 at 3:40 AM, Gonzalo
>>>>>>>=C2=A0 =C2=A0Camarillo <
>>>>>>>>>>>>>> Gonzalo.Camarillo@ericsson.com
>>>>>>>=C2=A0 =C2=A0<mailto:Gonzalo.Camarillo@ericsson.com= >
>>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0<mailt= o:Gonza= lo.Camarillo@ericsson.com
>>>>>>>=C2=A0 =C2=A0<mailto:Gonzalo.Camarillo@ericsson.com= >>
>>>>>>>>>=C2=A0 =C2=A0 <mailto:Gonzalo.Camarillo@eri= csson.com
>>>>>>>=C2=A0 =C2=A0<mailto:Gonzalo.Camarillo@ericsson.com= >
>>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0<mailt= o:Gonza= lo.Camarillo@ericsson.com
>>>>>>>=C2=A0 =C2=A0<mailto:Gonzalo.Camarillo@ericsson.com= >>>> wrote:
>>>>>>>>>>>>>>
>>>>>>>>>>>>>>> Marc, Eric, >>>>>>>>>>>>>>>
>>>>>>>>>>>>>>> what is the st= atus of this discussion?
>>>>>>>>>>>>>>>
>>>>>>>>>>>>>>> Thanks,
>>>>>>>>>>>>>>>
>>>>>>>>>>>>>>> Gonzalo
>>>>>>>>>>>>>>>
>>>>>>>>>>>>>>>> On 04/05/2= 018 2:35 AM, Eric Rescorla wrote:
>>>>>>>>>>>>>>>>
>>>>>>>>>>>>>>>>
>>>>>>>>>>>>>>>> On Mon, Ap= r 23, 2018 at 11:16 AM, Marc
>>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0Petit-Hug= uenin <
>>>>>>>>>>>>> petithug@acm.org <mailto:petithug@acm.org>
>>>>>>>=C2=A0 =C2=A0<mailto:petithug@acm.org <mailto:petithug@acm.org>>
>>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0<mailt= o:petithug@acm.org <mailto:petithug= @acm.org>
>>>>>>>=C2=A0 =C2=A0<mailto:petithug@acm.org <mailto:petithug@acm.org>>><= br> >>>>>>>>>>>>>>>> <mailto= :petithug@acm.org=
>>>>>>>=C2=A0 =C2=A0<mailto:petithug@acm.org> <mailto:petithug@acm.org
>>>>>>>=C2=A0 =C2=A0<mailto:petithug@acm.org>>
>>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0<mailt= o:petithug@acm.org <mailto:petithug= @acm.org>
>>>>>>>=C2=A0 =C2=A0<mailto:petithug@acm.org <mailto:petithug@acm.org>>>&= gt;> wrote:
>>>>>>>>>>>>>>>>
>>>>>>>>>>>>>>>>=C2=A0 =C2= =A0 On 04/22/2018 05:22 PM, Eric Rescorla
>>>>>>>=C2=A0 =C2=A0wrote:
>>>>>>>>>>>>>>>>> On Sun= , Apr 22, 2018 at 2:02 PM, Marc
>>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0Petit-Hug= uenin <
>>>>>>>>>>>>>>> petithug@acm.org <mailto:petithug@acm.org>=
>>>>>>>=C2=A0 =C2=A0<mailto:petithug@acm.org <mailto:petithug@acm.org>>
>>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0<mailt= o:petithug@acm.org <mailto:petithug= @acm.org>
>>>>>>>=C2=A0 =C2=A0<mailto:petithug@acm.org <mailto:petithug@acm.org>>><= br> >>>>>>>>>=C2=A0 =C2=A0 <mailto:petithug@acm.org <mailto:petithug@acm.org>=
>>>>>>>=C2=A0 =C2=A0<mailto:petithug@acm.org <mailto:petithug@acm.org>>
>>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0<mailt= o:petithug@acm.org <mailto:petithug= @acm.org>
>>>>>>>=C2=A0 =C2=A0<mailto:petithug@acm.org <mailto:petithug@acm.org>>>&= gt;>
>>>>>>>>>>>>>>>>> wrote:=
>>>>>>>>>>>>>>>>>
>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>>= ;>=C2=A0 =C2=A0 =C2=A0For a request or indication
>>>>>>>=C2=A0 =C2=A0message,
>>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0the agent=
>>>>>>>>>=C2=A0 =C2=A0 MUST
>>>>>>>>>>>>>>> include the >>>>>>>>>>>>>>>>>>>= ;>=C2=A0 =C2=A0 =C2=A0USERNAME,
>>>>>>>=C2=A0 =C2=A0MESSAGE-INTEGRITY-SHA256, and
>>>>>>>>>>> MESSAGE-INTEGRITY
>>>>>>>>>>>>>>>>>> at= tributes
>>>>>>>>>>>>>>>>>>>= ;>=C2=A0 =C2=A0 =C2=A0in the message unless the agent
>>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0knows fro= m an
>>>>>>>>>=C2=A0 =C2=A0 external
>>>>>>>>>>>>>>> indication
>>>>>>>>>>>>>>>>>>>= ;>=C2=A0 =C2=A0 =C2=A0which message integrity
>>>>>>>=C2=A0 =C2=A0algorithm is
>>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0supported=
>>>>>>>>>=C2=A0 =C2=A0 by both
>>>>>>>>>>>>>>> agents.=C2=A0 = In
>>>>>>>>>>>>>>>>>>>= ;>=C2=A0 =C2=A0 =C2=A0this case either
>>>>>>>=C2=A0 =C2=A0MESSAGE-INTEGRITY or
>>>>>>>>>>>>>>> MESSAGE-INTEGR= ITY-SHA256 MUST
>>>>>>>>>>>>>>>>>>>= ;>=C2=A0 =C2=A0 =C2=A0be included in addition to
>>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0USERNAME.= =C2=A0 The HMAC
>>>>>>>>>=C2=A0 =C2=A0 for the
>>>>>>>>>>>>>>> MESSAGE-
>>>>>>>>>>>>>>>>>>>= ;
>>>>>>>>>>>>>>>>>>>= ; This text appears to conflict with
>>>>>>>=C2=A0 =C2=A0S 7.3 of
>>>>>>>>>=C2=A0 =C2=A0 5245-bis, which
>>>>>>>>>>>>> says:
>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>> [t= ext missing]
>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>> Hm= m, no, RFC245bis is still
>>> referencing
>>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0RFC5389, = so the
>>>>>>>>>>>>> procedure
>>>>>>>>>>>>>>> for
>>>>>>>>>>>>>>>>>> st= unbis does not apply.
>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>
>>>>>>>>>>>>>>>>> I hear= what you're saying, but
>>>>>>>=C2=A0 =C2=A0publishing two
>>>>>>>>>=C2=A0 =C2=A0 documents at the
>>>>>>>>>>>>>>> same time
>>>>>>>>>>>>>>>>> which<= br> >>>>>>>>>>>>>>>>> make c= ontrary recommendations about
>>>>>>>=C2=A0 =C2=A0the same
>>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0basic
>>>>>>>>>=C2=A0 =C2=A0 protocol is
>>>>>>>>>>>>>>> un-good.
>>>>>>>>>>>>>>>>
>>>>>>>>>>>>>>>>=C2=A0 =C2= =A0 Sure, but wouldn't it be simpler to have
>>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0rfc5245bi= s
>>>>>>>>>=C2=A0 =C2=A0 using stunbis
>>>>>>>>>>>>>>>>=C2=A0 =C2= =A0 and have them updating their text,
>>>>>>>=C2=A0 =C2=A0more than
>>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0adding so= me
>>>>>>>>>=C2=A0 =C2=A0 tortuous
>>>>>>>>>>>>>>>>=C2=A0 =C2= =A0 text in stunbis?
>>>>>>>>>>>>>>>>
>>>>>>>>>>>>>>>>>
>>>>>>>>>>>>>>>>>
>>>>>>>>>>>>>>>>>>>= ;=C2=A0 =C2=A0 =C2=A0The STUN usage must specify
>>> which
>>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0transport=
>>>>>>>>>=C2=A0 =C2=A0 protocol is
>>>>>>>>>>>>>>> used, and
>>>>>>>>>>>>>>>>>> ho= w
>>>>>>>>>>>>>>>>>>>= ;>=C2=A0 =C2=A0 =C2=A0the agent determines the IP
>>>>>>>=C2=A0 =C2=A0address
>>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0and port<= br> >>>>>>>>>=C2=A0 =C2=A0 of the
>>>>>>>>>>>>>>> recipient.
>>>>>>>>>>>>>>>>>>>= ;>=C2=A0 =C2=A0 =C2=A0Section 8 describes a DNS-based
>>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0method of=
>>>>>>>>>=C2=A0 =C2=A0 determining
>>>>>>>>>>> the
>>>>>>>>>>>>>>> IP
>>>>>>>>>>>>>>>>>> ad= dress
>>>>>>>>>>>>>>>>>>>= ;>=C2=A0 =C2=A0 =C2=A0and port of a server that a
>>>>>>>=C2=A0 =C2=A0usage
>>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0may elect= to
>>>>>>>>>=C2=A0 =C2=A0 use.
>>>>>>>>>>> STUN
>>>>>>>>>>>>>>> may be
>>>>>>>>>>>>>>>>>> us= ed
>>>>>>>>>>>>>>>>>>>= ;>=C2=A0 =C2=A0 =C2=A0with anycast addresses, but
>>> only
>>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0with UDP = and
>>>>>>>>>=C2=A0 =C2=A0 in usages
>>>>>>>>>>>>>>> where
>>>>>>>>>>>>>>>>>>>= ;>=C2=A0 =C2=A0 =C2=A0authentication is not used.
>>>>>>>>>>>>>>>>>>>= ;
>>>>>>>>>>>>>>>>>>>= ; Why this restriction? You should
>>>>>>>=C2=A0 =C2=A0be able
>>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0to use >>>>>>>>>=C2=A0 =C2=A0 anycast with
>>>>>>>>>>>>>>> long-term
>>>>>>>>>>>>>>>>>>>= ; AUTH for (say) TURN.
>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>> >>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0https://www.ietf.org/mail-archive/web/behave/current/<= /a>
>>>>>>>>>>>>>>> msg03582.html<= br> >>>>>>>>>>>>>>>>
>>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 <https://www.ietf.org/mail-archive/web/behave/curren= t/
>>>>>>>>>>>>> msg03582.html>
>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>> I = think that the decision of
>>>>>>>=C2=A0 =C2=A0permitting Anycast
>>>>>>>>>=C2=A0 =C2=A0 should be left
>>>>>>>>>>>>> to
>>>>>>>>>>>>>>> each
>>>>>>>>>>>>>>>>>> ST= UN Usage.=C2=A0 Basic STUN Usage does
>>>>>>>=C2=A0 =C2=A0not use
>>>>>>>>>=C2=A0 =C2=A0 authentication and
>>>>>>>>>>>>> use
>>>>>>>>>>>>>>> only a
>>>>>>>>>>>>>>>>>> on= e round trip for the Binding
>>>>>>>=C2=A0 =C2=A0transaction, so
>>>>>>>>>=C2=A0 =C2=A0 Unicast can be
>>>>>>>>>>>>>>> used.
>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>
>>>>>>>>>>>>>>>>>> OT= OH, TURN and ICE should probably say
>>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0something=
>>>>>>>>>=C2=A0 =C2=A0 about that,
>>>>>>>>>>> so
>>>>>>>>>>>>> I
>>>>>>>>>>>>>>> added a
>>>>>>>>>>>>>>>>>> ne= w bullet point in Section 13:
>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>=C2= =A0 =C2=A0o=C2=A0 If Anycast addresses can be
>>>>>>>=C2=A0 =C2=A0used for
>>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0the serve= r
>>>>>>>>>=C2=A0 =C2=A0 in case
>>>>>>>>>>>>> TCP
>>>>>>>>>>>>>>> or
>>>>>>>>>>>>>>>>>>=C2= =A0 =C2=A0 =C2=A0 TLS-over-TCP, or
>>>>>>>=C2=A0 =C2=A0authentication are used.
>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>
>>>>>>>>>>>>>>>>> Are yo= u leaving this text in? That
>>> seems
>>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0very conf= using.
>>>>>>>>>>>>>>>>
>>>>>>>>>>>>>>>>=C2=A0 =C2= =A0 In isolation yes, but I think it makes
>>>>>>>=C2=A0 =C2=A0sense
>>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0which the= text
>>>>>>>>>>> before
>>>>>>>>>>>>>>>>=C2=A0 =C2= =A0 the bullet points:
>>>>>>>>>>>>>>>>
>>>>>>>>>>>>>>>>=C2=A0 =C2= =A0 =C2=A0 =C2=A0A STUN usage defines how STUN is
>>>>>>>=C2=A0 =C2=A0actually
>>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0utilized = --
>>>>>>>>>=C2=A0 =C2=A0 when to
>>>>>>>>>>>>> send
>>>>>>>>>>>>>>>>=C2=A0 =C2= =A0 =C2=A0 =C2=A0requests, what to do with the
>>>>>>>=C2=A0 =C2=A0responses,
>>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0and which=
>>>>>>>>>=C2=A0 =C2=A0 optional
>>>>>>>>>>>>>>>>=C2=A0 =C2= =A0 =C2=A0 =C2=A0procedures defined here (or in an
>>>>>>>=C2=A0 =C2=A0extension
>>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0to STUN)<= br> >>>>>>>>>=C2=A0 =C2=A0 are to be
>>>>>>>>>>>>>>> used.
>>>>>>>>>>>>>>>>=C2=A0 =C2= =A0 =C2=A0 =C2=A0A usage also defines:
>>>>>>>>>>>>>>>>
>>>>>>>>>>>>>>>>=C2=A0 =C2= =A0 [...]
>>>>>>>>>>>>>>>>
>>>>>>>>>>>>>>>>=C2=A0 =C2= =A0 =C2=A0 =C2=A0o=C2=A0 If Anycast addresses can be used
>>>>>>>=C2=A0 =C2=A0for the
>>>>>>>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0server in=
>>>>>>>>>=C2=A0 =C2=A0 case TCP
>>>>>>>>>>>>> or
>>>>>>>>>>>>>>>>=C2=A0 =C2= =A0 =C2=A0 =C2=A0 =C2=A0 TLS-over-TCP, or authentication
>>>>>>>=C2=A0 =C2=A0are used.
>>>>>>>>>>>>>>>>
>>>>>>>>>>>>>>>>
>>>>>>>>>>>>>>>> What is th= e need for the restriction at all

--0000000000000a2e0f0584b04252-- From nobody Fri Mar 22 09:33:41 2019 Return-Path: X-Original-To: tram@ietf.org Delivered-To: tram@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id B7DEF1200B3; Fri, 22 Mar 2019 09:33:39 -0700 (PDT) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: internet-drafts@ietf.org To: Cc: tram@ietf.org X-Test-IDTracker: no X-IETF-IDTracker: 6.94.1 Auto-Submitted: auto-generated Precedence: bulk Reply-To: tram@ietf.org Message-ID: <155327241963.23058.7883278451430106364@ietfa.amsl.com> Date: Fri, 22 Mar 2019 09:33:39 -0700 Archived-At: Subject: [tram] I-D Action: draft-ietf-tram-stunbis-21.txt X-BeenThere: tram@ietf.org X-Mailman-Version: 2.1.29 List-Id: "Discussing the creation of a Turn Revised And Modernized \(TRAM\) WG, which goal is to consolidate the various initiatives to update TURN and STUN." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 22 Mar 2019 16:33:40 -0000 A New Internet-Draft is available from the on-line Internet-Drafts directories. This draft is a work item of the TURN Revised and Modernized WG of the IETF. Title : Session Traversal Utilities for NAT (STUN) Authors : Marc Petit-Huguenin Gonzalo Salgueiro Jonathan Rosenberg Dan Wing Rohan Mahy Philip Matthews Filename : draft-ietf-tram-stunbis-21.txt Pages : 74 Date : 2019-03-22 Abstract: Session Traversal Utilities for NAT (STUN) is a protocol that serves as a tool for other protocols in dealing with Network Address Translator (NAT) traversal. It can be used by an endpoint to determine the IP address and port allocated to it by a NAT. It can also be used to check connectivity between two endpoints, and as a keep-alive protocol to maintain NAT bindings. STUN works with many existing NATs, and does not require any special behavior from them. STUN is not a NAT traversal solution by itself. Rather, it is a tool to be used in the context of a NAT traversal solution. This document obsoletes RFC 5389. The IETF datatracker status page for this draft is: https://datatracker.ietf.org/doc/draft-ietf-tram-stunbis/ There are also htmlized versions available at: https://tools.ietf.org/html/draft-ietf-tram-stunbis-21 https://datatracker.ietf.org/doc/html/draft-ietf-tram-stunbis-21 A diff from the previous version is available at: https://www.ietf.org/rfcdiff?url2=draft-ietf-tram-stunbis-21 Please note that it may take a couple of minutes from the time of submission until the htmlized version and diff are available at tools.ietf.org. Internet-Drafts are also available by anonymous FTP at: ftp://ftp.ietf.org/internet-drafts/ From nobody Fri Mar 22 09:52:34 2019 Return-Path: X-Original-To: tram@ietfa.amsl.com Delivered-To: tram@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 4C78A1312BB; Fri, 22 Mar 2019 09:52:31 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -14.5 X-Spam-Level: X-Spam-Status: No, score=-14.5 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_MED=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_HI=-5, SPF_PASS=-0.001, URIBL_BLOCKED=0.001, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cisco.com header.b=T5BojQxU; dkim=pass (1024-bit key) header.d=cisco.onmicrosoft.com header.b=RZOeDySn Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id TzzCCFNkxBd6; Fri, 22 Mar 2019 09:52:26 -0700 (PDT) Received: from rcdn-iport-4.cisco.com (rcdn-iport-4.cisco.com [173.37.86.75]) (using TLSv1.2 with cipher DHE-RSA-SEED-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id E6F88130F62; Fri, 22 Mar 2019 09:52:25 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=163299; q=dns/txt; s=iport; t=1553273546; x=1554483146; h=from:to:cc:subject:date:message-id:references: in-reply-to:mime-version; bh=wiU+BFD+L7+4sgeQA3ZUSLDoBHZsXbrvB7RtAZ0eeM4=; b=T5BojQxUqJO3JRcGbt7uNCMve3wBjkSQwK2/WoxkoGLIy1psQgdEkd8Y 6P/bNA7VdXYBlsKyCSEej0uE2XcM4amZnJaA7pAU7yQ/qxQO/zVrdbMTb coc2LxIi/zxahkIxt/sIa9Tl4oNTkD+q5CPM2E2QW8IdM9S39A8lxgjTu o=; IronPort-PHdr: =?us-ascii?q?9a23=3AT4r4/hZW6Y06D6U95KfvHAH/LSx94ef9IxIV55?= =?us-ascii?q?w7irlHbqWk+dH4MVfC4el20gabRp3VvvRDjeee87vtX2AN+96giDgDa9QNMn?= =?us-ascii?q?1NksAKh0olCc+BB1f8KavldCU+E9lPVXdu/mqwNg5eH8OtL1A=3D?= X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: =?us-ascii?q?A0AFAAA+EpVc/4ENJK1SCAkZAQEBAQE?= =?us-ascii?q?BAQEBAQEBBwEBAQEBAYFSAwEBAQEBCwGBPSQsA2hMKAQLJ4QOg0cDjyeCV4k?= =?us-ascii?q?2jVSBLhSBEANQBA0BARgBCgmEQAIXhGUiNQgNAQEDAQEJAQMCbRwMhUoBAQE?= =?us-ascii?q?DAQEBGAEIBBkBASYFAQsBBAsCAQgYFQMIAQMDAwICAh8GCxQRAgQOBYMiAYE?= =?us-ascii?q?RTAMNCAEOnjcCihRxfDOCeAEBBToIAYECQYJ+DQuCDAMFgS8BhFyEC3Y1gQI?= =?us-ascii?q?dF4FAP4ERJx+BTn4+ghpHAQEBAgGBGA0FAQgDBgIBBgItFhIQggE6MYImiic?= =?us-ascii?q?7gWIshBuCBoUpFotlJTYJAodhiBaDPxmCAoV8hRuGY4wvhGuBOYktgjwCBAI?= =?us-ascii?q?EBQIOAQEFgU4BNkIjcXAVOyoBgg0BATKBcxcLAQEWg0uFFIU/cgGBJ4sLJII?= =?us-ascii?q?pAQE?= X-IronPort-AV: E=Sophos;i="5.60,256,1549929600"; d="scan'208,217";a="538431292" Received: from alln-core-9.cisco.com ([173.36.13.129]) by rcdn-iport-4.cisco.com with ESMTP/TLS/DHE-RSA-SEED-SHA; 22 Mar 2019 16:52:22 +0000 Received: from XCH-ALN-003.cisco.com (xch-aln-003.cisco.com [173.36.7.13]) by alln-core-9.cisco.com (8.15.2/8.15.2) with ESMTPS id x2MGqMC4011169 (version=TLSv1.2 cipher=AES256-SHA bits=256 verify=FAIL); Fri, 22 Mar 2019 16:52:22 GMT Received: from xhs-rcd-003.cisco.com (173.37.227.248) by XCH-ALN-003.cisco.com (173.36.7.13) with Microsoft SMTP Server (TLS) id 15.0.1473.3; Fri, 22 Mar 2019 11:52:21 -0500 Received: from xhs-aln-003.cisco.com (173.37.135.120) by xhs-rcd-003.cisco.com (173.37.227.248) with Microsoft SMTP Server (TLS) id 15.0.1473.3; Fri, 22 Mar 2019 11:52:20 -0500 Received: from NAM04-SN1-obe.outbound.protection.outlook.com (173.37.151.57) by xhs-aln-003.cisco.com (173.37.135.120) with Microsoft SMTP Server (TLS) id 15.0.1473.3 via Frontend Transport; Fri, 22 Mar 2019 11:52:20 -0500 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=cisco.onmicrosoft.com; s=selector1-cisco-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=wiU+BFD+L7+4sgeQA3ZUSLDoBHZsXbrvB7RtAZ0eeM4=; b=RZOeDySnAZdniiqXhW41W2zjyMCrqbIY2c0e7eNvXpBC2+98SRn+wJLnXB9uTC+FdwCTwNWAU/T2QqKN7a/PN6AN60290DCeNMKNeSVdJ31P6dIK7eOCAt6TQ00HUIT/z9/QqQI2c3Nr5+bIpicIcwy7Bld+ahTzVQIvD0E2e4g= Received: from BY5PR11MB3895.namprd11.prod.outlook.com (10.255.72.92) by BY5PR11MB4006.namprd11.prod.outlook.com (10.255.161.91) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.1730.15; Fri, 22 Mar 2019 16:52:18 +0000 Received: from BY5PR11MB3895.namprd11.prod.outlook.com ([fe80::85d0:5bc1:f305:1423]) by BY5PR11MB3895.namprd11.prod.outlook.com ([fe80::85d0:5bc1:f305:1423%6]) with mapi id 15.20.1730.013; Fri, 22 Mar 2019 16:52:17 +0000 From: "Gonzalo Salgueiro (gsalguei)" To: Spencer Dawkins at IETF CC: "tram-chairs@ietf.org" , Eric Rescorla , "tram@ietf.org" , "draft-ietf-tram-stunbis@ietf.org" , IESG Thread-Topic: [tram] Blackout posting of draft-ietf-tram-stunbis-21 Thread-Index: AQHU4MGAs4BHk3fOxEmXoZbtNf2dbKYX3bM2 Date: Fri, 22 Mar 2019 16:52:17 +0000 Message-ID: <1493CD0D-B9A6-4B22-968D-6B88CE5AABD8@cisco.com> References: <152390863222.19652.10310304989315386136.idtracker@ietfa.amsl.com> <472563ee-5fc3-655d-8e31-138cc774e608@acm.org> <97c561a7-c33a-6121-00c4-09cd11646b98@ericsson.com> <4b8f10f7-1eee-c8bc-d9ee-e3f18473de32@ericsson.com> <9ED47E64-EC53-43FB-8EAD-128E81205EF4@cisco.com>, In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: authentication-results: spf=none (sender IP is ) smtp.mailfrom=gsalguei@cisco.com; x-originating-ip: [2600:387:2:811::19] x-ms-publictraffictype: Email x-ms-office365-filtering-correlation-id: 86d7d2db-d24b-402e-e09d-08d6aee6be57 x-microsoft-antispam: BCL:0; PCL:0; RULEID:(2390118)(7020095)(4652040)(8989299)(4534185)(4627221)(201703031133081)(201702281549075)(8990200)(5600127)(711020)(4605104)(2017052603328)(7153060)(7193020); SRVR:BY5PR11MB4006; x-ms-traffictypediagnostic: BY5PR11MB4006: x-ms-exchange-purlcount: 5 x-microsoft-antispam-prvs: x-forefront-prvs: 09840A4839 x-forefront-antispam-report: SFV:NSPM; SFS:(10009020)(396003)(366004)(376002)(39860400002)(346002)(136003)(51914003)(189003)(199004)(54164003)(51444003)(54094003)(14454004)(446003)(11346002)(8676002)(76176011)(316002)(476003)(478600001)(606006)(102836004)(53546011)(99286004)(2616005)(54906003)(25786009)(46003)(93886005)(186003)(36756003)(82746002)(106356001)(6506007)(86362001)(486006)(561944003)(105586002)(7736002)(6436002)(33656002)(6916009)(53936002)(68736007)(30864003)(4326008)(6246003)(81166006)(81156014)(229853002)(6486002)(256004)(21615005)(5070765005)(83716004)(71200400001)(236005)(6306002)(6512007)(5024004)(8936002)(71190400001)(53946003)(2906002)(14444005)(54896002)(6116002)(5660300002)(97736004)(966005)(569006); DIR:OUT; SFP:1101; SCL:1; SRVR:BY5PR11MB4006; H:BY5PR11MB3895.namprd11.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; MX:1; A:1; received-spf: None (protection.outlook.com: cisco.com does not designate permitted sender hosts) x-ms-exchange-senderadcheck: 1 x-microsoft-antispam-message-info: 2quiys5YuZUgaD32QcmQ4i/UuwEBLK6rzA/123AohnEAGYCSD/vp5yR71lcHpuEzVzHBLGsAySP1iKnRGe3nuyDk/gASAkVrTz3Yg0JLOrCsaYy+uo/hsA8Z9XFvoxwkCC78bCVGbdkIFte6qDpC36+rKai2Z5ze9vVQaK/kw9VtSyH+RMzz19PK8WpZMjL1VUDNdw1GUDNQ3Da95mv+pT6WxYAo0qcxguz55KY4tXyk7mt7sJLcaDxyjbz5pT1Wt1Dv2a84vSh0+tWgHs6Bi69323A3C8YUclisSpqoQjQTAnqQFsKfsY6f56Jq4h+IbvCDMxPywA4/ck8VdwGMoFtqt+2coLS1OXzR57dZnqDXIweUpAJVPampOqqGz+zlbCwLaz6oZ0qwaOEmaMzIhUh0eOL2mljE6ZMNnkdkvBc= Content-Type: multipart/alternative; boundary="_000_1493CD0DB9A64B22968D6B88CE5AABD8ciscocom_" MIME-Version: 1.0 X-MS-Exchange-CrossTenant-Network-Message-Id: 86d7d2db-d24b-402e-e09d-08d6aee6be57 X-MS-Exchange-CrossTenant-originalarrivaltime: 22 Mar 2019 16:52:17.5412 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 5ae1af62-9505-4097-a69a-c1553ef7840e X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-Transport-CrossTenantHeadersStamped: BY5PR11MB4006 X-OriginatorOrg: cisco.com X-Outbound-SMTP-Client: 173.36.7.13, xch-aln-003.cisco.com X-Outbound-Node: alln-core-9.cisco.com Archived-At: Subject: Re: [tram] Blackout posting of draft-ietf-tram-stunbis-21 X-BeenThere: tram@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "Discussing the creation of a Turn Revised And Modernized \(TRAM\) WG, which goal is to consolidate the various initiatives to update TURN and STUN." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 22 Mar 2019 16:52:32 -0000 --_000_1493CD0DB9A64B22968D6B88CE5AABD8ciscocom_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 RXJpYyAtDQoNCkZZSSAtIFRoZSBuZXcgLTIxIHZlcnNpb24gaGFzIGJlZW4gcG9zdGVkLiBJdCBp cyByZWFkeSBmb3IgeW91ciByZXZpZXcuDQoNCi1HDQoNCg0KDQpPbiBNYXIgMjIsIDIwMTksIGF0 IDExOjExIEFNLCBTcGVuY2VyIERhd2tpbnMgYXQgSUVURiA8c3BlbmNlcmRhd2tpbnMuaWV0ZkBn bWFpbC5jb208bWFpbHRvOnNwZW5jZXJkYXdraW5zLmlldGZAZ21haWwuY29tPj4gd3JvdGU6DQoN CkRlYXIgSUVTRyBTZWNyZXRhcnkgKGJjYyksDQoNClBsZWFzZSBwb3N0IHRoaXMgZHJhZnQgZHVy aW5nIHRoZSBibGFja291dCBwZXJpb2QgLSB3ZSdyZSB0cnlpbmcgdG8gY2xlYXIgVGhlIExhc3Qg RGlzY3VzcyBvbiBhIGRvY3VtZW50IGluIElFU0cgRXZhbHVhdGlvbiBiZWZvcmUgSSBzdGVwIGRv d24sIHNvIHdhbnQgdG8gZ2l2ZSBwZW9wbGUgdGltZSB0byBsb29rIGF0IHRoZSBvZmZpY2lhbCAt MjEgdmVyc2lvbiByYXRoZXIgdGhhbiBjbGVhciBiYXNlZCBvbiBlLW1haWwuDQoNClRoYW5rcyEN Cg0KU3BlbmNlciwgd2hvIGlzIGtpbmQgb2YgaG9waW5nIHRoYXQgc29tZW9uZSBvbiB0aGUgbmV4 dCBJRVNHIGFza3Mgd2h5IHdlIGhhdmUgYSBibGFja291dCBwb3N0aW5nIHBlcmlvZCBmb3IgZHJh ZnRzIGluIElFU0cgRXZhbHVhdGlvbiAtIGJ1dCBJJ20gc3VyZSB5b3UnbGwgYWxsIGRvIHRoZSBy aWdodCB0aGluZy4NCg0KT24gVGh1LCBNYXIgMjEsIDIwMTkgYXQgNzoyMiBQTSBHb256YWxvIFNh bGd1ZWlybyAoZ3NhbGd1ZWkpIDxnc2FsZ3VlaUBjaXNjby5jb208bWFpbHRvOmdzYWxndWVpQGNp c2NvLmNvbT4+IHdyb3RlOg0KSGkgRXJpYyAtDQoNCknigJltIGF0dGFjaGluZyB0aGUgLTIxIHRo YXQgd2lsbCBiZSBwdWJsaXNoZWQgb25jZSB0aGUgSS1EIHN1Ym1pc3Npb24gdG9vbCBvcGVucyB1 cCAob3IgU3BlbmNlciBjYW4gb3ZlcnJpZGUgYW5kIGl0IHB1Ymxpc2hlZCBiZWZvcmUgdGhlbiku LiAgSXQgdXNlcyB5b3VyIHByb3Bvc2VkIGJpZCBkb3duIHByb3RlY3Rpb24gZGlzY2xhaW1lciB0 ZXh0IChzYXZlIGZvciBtaW5vciBuaXRzIEkgY2xlYW5lZCB1cCkuDQoNCklmIHRoaXMgbG9va3Mg Z29vZCB0aGVuIGZyb20gbXkgcGVyc3BlY3RpdmUgd2UgYXJlIGRvbmUgYW5kIHlvdXIgRElTQ1VT UyBjYW4gYmUgY2xlYXJlZCBhbmQgd2UgY2FuIHByb2NlZWQgd2l0aCBwdWJsaWNhdGlvbi4NCg0K VGhhbmtzIGZvciBhbGwgeW91ciBoZWxwLg0KDQpDaGVlcnMsDQoNCkdvbnphbG8NCg0KDQpPbiBN YXIgMjAsIDIwMTksIGF0IDM6NTcgUE0sIEVyaWMgUmVzY29ybGEgPGVrckBydGZtLmNvbTxtYWls dG86ZWtyQHJ0Zm0uY29tPj4gd3JvdGU6DQoNCkdvbnphbG8sDQoNClRoaXMgdGV4dCBzdGlsbCBz ZWVtcyB0byBtZSB0byBuZWVkIHNvbWUgd29yay4gSGVyZSBpcyBhIHJldmlzZWQgdmVyc2lvbi4N Cg0KU0hBLTI1NiB3YXMgY2hvc2VuIGFzIHRoZSBuZXcgZGVmYXVsdCBmb3IgcGFzc3dvcmQNCmhh c2hpbmcgZm9yIGl0cyBjb21wYWJpbGl0eSB3aXRoIFJGQyA3NjE2IGJ1dCBiZWNhdXNlIFNIQS0y NTYgKGxpa2UNCk1ENSkgaXMgYSBjb21wYXJhdGl2ZWx5IGZhc3QgYWxnb3JpdGhtLCBpdCBkb2Vz IGxpdHRsZSB0byBkZXRlcg0KYnJ1dGUgZm9yY2UgYXR0YWNrcy4gU3BlY2lmaWNhbGx5LCB0aGlz IG1lYW5zIHRoYXQgaWYgdGhlDQp1c2VyIGhhcyBhIHdlYWsgcGFzc3dvcmQ6DQoNCiogQW4gYXR0 YWNrZXIgd2hvIGNhcHR1cmVzIHRoZSBzZXJ2ZXIncyBwYXNzd29yZCBmaWxlIGNhbiBvZnRlbg0K ICBkZXRlcm1pbmUgdGhlIHVzZXIncyBwYXNzd29yZCBhbmQgdGh1cyBpbXBlcnNvbmF0ZSB0aGUg dXNlcg0KICB0byBvdGhlciBzZXJ2ZXJzIHdoZXJlIHRoZXkgaGF2ZSB1c2VkIHRoYXQgcGFzc3dv cmQuIE5vdGUgdGhhdA0KICBzdWNoIGFuIGF0dGFja2VyIGNhbiBpbXBlcnNvbmF0ZSB0aGUgdXNl ciB0byB0aGUgc2VydmVyIGl0c2VsZg0KICB3aXRob3V0IGFueSBicnV0ZSBmb3JjZSBhdHRhY2su DQoNCiogQW4gYXR0YWNrZXIgd2hvIGNhcHR1cmVzIGEgc2luZ2xlIGV4Y2hhbmdlIGNhbiBicnV0 ZSBmb3JjZQ0KICB0aGUgdXNlcidzIHBhc3N3b3JkIGFuZCB0aHVzIHBvdGVudGlhbGx5IGltcGVy c29uYXRlIHRoZQ0KICB1c2VyIHRvIHRoZSBzZXJ2ZXIgYW5kIG90aGVyIHNlcnZlcnMgd2hlcmUg dGhleSBoYXZlIHVzZWQNCiAgdGhlIHNhbWUgcGFzd29yZC4NCg0KQSBzdHJvbmdlciAod2hpY2gg aXMgdG8gc2F5IHNsb3dlcikgYWxnb3JpdGhtLCBsaWtlIEFyZ29uMg0KW0ktRC5pcnRmLWNmcmct YXJnb24yXSwgd291bGQgaGVscCBib3RoIG9mIHRoZXNlIGNhc2VzLCBidXQgaW4gdGhlDQpjYXNl IG9mIHRoZSBmaXJzdCBhdHRhY2ssIG9ubHkgYWZ0ZXIgdW50aWwgdGhlIGRhdGFiYXNlIGVudHJ5 IGZvciB0aGlzDQp1c2VyIGlzIHVwZGF0ZWQgdG8gZXhjbHVzaXZlbHkgdXNlIHRoYXQgc3Ryb25n ZXIgbWVjaGFuaXNtLg0KDQpUaGUgYmlkLWRvd24gZGVmZW5zZXMgaW4gdGhpcyBwcm90b2NvbCBw cmV2ZW50IGFuIGF0dGFja2VyIGZyb20NCmZvcmNpbmcgdGhlIGNsaWVudCBhbmQgc2VydmVyIHRv IGNvbXBsZXRlIGEgaGFuZHNoYWtlIHVzaW5nIHdlYWtlcg0KYWxnb3JpdGhtcyB0aGFuIHRoZXkg am9pbnRseSBzdXBwb3J0LCBidXQgb25seSBpZiB0aGUgd2Vha2VzdCBqb2ludA0KYWxnb3JpdGht IGlzIHN0cm9uZyBlbm91Z2ggdGhhdCBpdCBjYW5ub3QgYmUgYnJ1dGUtZm9yY2VkLiBIb3dldmVy LA0KdGhpcyBkb2VzIG5vdCBkZWZlbmQgYWdhaW5zdCBtYW55IGF0dGFja3Mgb24gdGhvc2UgYWxn b3JpdGhtczsNCnNwZWNpZmljYWxseSwgYW4gb24tcGF0aCBhdHRhY2tlciBtaWdodCBwZXJmb3Jt IGEgYmlkLWRvd24gYXR0YWNrIG9uIGENCmNsaWVudCB3aGljaCBzdXBwb3J0ZWQgYm90aCBBcmdv bjIgYW5kIFNIQS0yNTYgZm9yIHBhc3N3b3JkIGhhc2hpbmcNCmFuZCB1c2UgdGhhdCB0byBjb2xs ZWN0IGEgTUVTU0FHRS1JTlRFR1JJVFktU0hBMjU2IHZhbHVlIHdoaWNoIGl0IHVzZXMNCmZvciBh biBvZmZsaW5lIGJydXRlLWZvcmNlIGF0dGFjay4gVGhpcyB3b3VsZCBiZSBkZXRlY3RlZCB3aGVu IHRoZQ0Kc2VydmVyIHJlY2VpdmVzIHRoZSBzZWNvbmQgcmVxdWVzdCwgYnV0IHRoYXQgZG9lcyBu b3QgcHJldmVudCB0aGUNCmF0dGFja2VyIGZyb20gb2J0YWluaW5nIHRoZSBNRVNTQUdFLUlOVEVH UklUWS1TSEEyNTYgdmFsdWUuDQoNClNpbWlsYXJseSwgYW4gYXR0YWNrIGFnYWluc3QgdGhlIFVT RVJIQVNIIG1lY2hhbmlzbSB3aWxsIG5vdCBzdWNjZWVkDQppbiBlc3RhYmxpc2hpbmcgYSBzZXNz aW9uIGFzIHRoZSBzZXJ2ZXIgd2lsbCBkZXRlY3QgdGhhdCB0aGUgZmVhdHVyZQ0Kd2FzIGRpc2Nh cmRlZCBvbi1wYXRoLCBidXQgdGhlIGNsaWVudCB3b3VsZCBzdGlsbCBoYXZlIGJlZW4gY29udmlu Y2VkDQp0byBzZW5kIGl0cyB1c2VybmFtZSBpbiBjbGVhciBpbiB0aGUgVVNFUk5BTUUgYXR0cmli dXRlLCB0aHVzDQpkaXNjbG9zaW5nIGl0IHRvIHRoZSBhdHRhY2tlci4NCg0KLUVrcg0KDQoNCk9u IE1vbiwgTWFyIDE4LCAyMDE5IGF0IDY6MzcgUE0gR29uemFsbyBTYWxndWVpcm8gKGdzYWxndWVp KSA8Z3NhbGd1ZWlAY2lzY28uY29tPG1haWx0bzpnc2FsZ3VlaUBjaXNjby5jb20+PiB3cm90ZToN ClRoYW5rcywgU3BlbmNlci4gIEluIHRoZSBpbnRlcmVzdCBvZiBleHBlZGl0aW91c25lc3MgSeKA mXZlIGVtYWlsZWQgRXJpYyB0byByZXZpZXcgdGhlIG5ld2x5IHB1Ymxpc2hlZCAtMjAgdG8gZW5z dXJlIGl0IGFkZHJlc3NlcyBoaXMgRElTQ1VTUyBwb2ludHMuIEhvcGluZyB0byBnZXQgdGhpcyBk b25lIGJlZm9yZSBFcmljIHN0ZXBzIGRvd24gYXMgQUQuDQoNCkNoZWVycywNCg0KR29uemFsbw0K DQoNCg0KPiBPbiBNYXIgMTgsIDIwMTksIGF0IDk6MjcgUE0sIFNwZW5jZXIgRGF3a2lucyBhdCBJ RVRGIDxzcGVuY2VyZGF3a2lucy5pZXRmQGdtYWlsLmNvbTxtYWlsdG86c3BlbmNlcmRhd2tpbnMu aWV0ZkBnbWFpbC5jb20+PiB3cm90ZToNCj4NCj4gRGVhciBBbGwsDQo+DQo+PiBPbiBGcmksIE1h ciA4LCAyMDE5IGF0IDg6MTAgUE0gRXJpYyBSZXNjb3JsYSA8ZWtyQHJ0Zm0uY29tPG1haWx0bzpl a3JAcnRmbS5jb20+PiB3cm90ZToNCj4+DQo+PiBUaGFua3MgZm9yIHRoZSBjYWxsIHllc3RlcmRh eS4NCj4+DQo+DQo+IFRoYW5rcyB0byBhbGwgZm9yIG1vdmluZyB0aGlzIHNwZWNpZmljYXRpb24g Zm9yd2FyZC4NCj4NCj4gSWYgdGhlIGN1cnJlbnQgY29udmVyc2F0aW9uIHR1cm5zIG91dCB0byBj b252ZXJnZSBvbiB0aGlzIHRvcGljIGJlZm9yZSBuZXh0DQo+IFdlZG5lc2RheSwgSSdtIGhhcHB5 IHRvIGFwcHJvdmUgYSByZXZpc2VkIGRyYWZ0IGFmdGVyIEVyaWMgY2xlYXJzIGhpcw0KPiBEaXNj dXNzLg0KPg0KPiBJZiBJIGNhbiBoZWxwIGluIGFueSB3YXksIHBsZWFzZSBsZXQgbWUga25vdy4N Cj4NCj4gU3BlbmNlcg0KPg0KPg0KPj4NCj4+IEZpcnN0LCBoZXJlIGlzIHdoYXQgSSByZWNvbW1l bmQgZm9yIHRoZSBxdWVzdGlvbiBvZiBTSEEtMjU2IGZvciBwYXNzd29yZA0KPj4gaGFzaGluZzoN Cj4+DQo+PiAgTm90ZTogdGhlIHVzZSBvZiBTSEEtMjU2IGZvciBwYXNzd29yZCBoYXNoaW5nIGRv ZXMgbm90IG1lZXQgbW9kZXJuDQo+PiAgc3RhbmRhcmRzLCB3aGljaCBhcmUgYWltZWQgYXQgc2xv d2luZyBkb3duIGV4aGF1c3RpdmUgcGFzc3dvcmQgc2VhcmNoDQo+PiAgYnkgcHJvdmlkaW5nIGEg cmVsYXRpdmVseSBzbG93IG1pbmltdW0gdGltZSB0byBjb21wdXRlIHRoZQ0KPj4gIGhhc2guIEFs dGhvdWdoIGJldHRlciBhbGdvcml0aG1zIHN1Y2ggYXMgQXJnb24yDQo+PiAgW2h0dHBzOi8vZGF0 YXRyYWNrZXIuaWV0Zi5vcmcvZG9jL2RyYWZ0LWlydGYtY2ZyZy1hcmdvbjIvXSBhcmUNCj4+ICBh dmFpbGFibGUsIFNIQS0yNTYgd2FzIGNob3NlbiBmb3IgY29uc2lzdGVuY3kgd2l0aCBSRkMgNzYx Ni4NCj4+DQo+Pg0KPj4gTm93LCBXUlQgdG8gdGhlIGFudGktZG93bmdyYWRlIHNpdHVhdGlvbi4g SGVyZSdzIGEgc3R5bGl6ZWQgdmVyc2lvbg0KPj4gb2YgdGhlIHByb3RvY29sOg0KPj4NCj4+IENs aWVudCAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgU2Vy dmVyDQo+Pg0KPj4gSGVsbG8gLT4NCj4+ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgPC0gTm9uY2UsIEFsZ29yaXRobXMNCj4+IEhNQUMtSDEoSDIoUGFzc3dvcmQpLCBO b25jZSwgQWxnb3JpdGhtcywgTXNnKSAtPg0KPj4gICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICA8LSBITUFDLUgxKEgyKFBhc3N3b3JkKSwgLi4uKQ0KPj4NCj4+IFdoZXJlIEgxIGFuZCBI MiBhcmUgdGhlIEhNQUMgaGFzaCBmdW5jdGlvbnMgYW5kIHRoZSBwYXNzd29yZCBoYXNoaW5nDQo+ PiBmdW5jdGlvbiByZXNwZWN0aXZlbHkuDQo+Pg0KPj4gTm93LCBpZiB3ZSBhc3N1bWUgdGhhdCB0 aGUgYXR0YWNrZXIgZG9lcyBub3Qga25vdyBQYXNzd29yZCBhbmQgdGhhdA0KPj4gYm90aCBIMSBh bmQgSDIgYXJlIHNlY3VyZSwgdGhlbiBpdCBpcyBub3QgcG9zc2libGUgZm9yIHRoZSBhdHRhY2tl ciB0bw0KPj4gY29tcGxldGUgdGhlIHRyYW5zYWN0aW9uIG9yIG1vZGlmeSBhbnkgb2YgdGhlIG1l c3NhZ2VzLiBGdXJ0aGVyLCBpZg0KPj4gdGhlIHdlYWtlc3Qgam9pbnQgYWxnb3JpdGhtIHRoYXQg Ym90aCBzaWRlcyBzdXBwb3J0IGlzIHN0aWxsIHN0cm9uZywNCj4+IHRoZW4gYW4gYXR0YWNrZXIg Y2Fubm90IGluZmx1ZW5jZSB0aGUgYWxnb3JpdGhtIG5lZ290aWF0aW9uIFswXS4gVGhpcw0KPj4g cHJvcGVydHkgaXMgcHJvdmlkZWQgYnkgY292ZXJpbmcgdGhlIGFsZ29yaXRobXMgdW5kZXIgdGhl IE1BQy4NCj4+DQo+PiBIb3dldmVyLCBteSBwb2ludCBpcyB0aGF0IHRoaXMgaXMgbm90IGEgdmVy eSB1c2VmdWwgcHJvcGVydHkuDQo+Pg0KPj4gRmlyc3QsIGNvbnNpZGVyIHRoZSBjYXNlIGluIHdo aWNoIHRoZSBpbXBsZW1lbnRhdGlvbnMgam9pbnRseSBzdXBwb3J0DQo+PiBvbmUgc3Ryb25nIGFs Z29yaXRobSBhbmQgb25lIHdlYWsgYWxnb3JpdGhtLiBFLmcuLCBmb3IgSDEgdGhleSBzdXBwb3J0 DQo+PiBTSEEtMjU2IGFuZCB0aGUgZnVuY3Rpb24gWih4KSB3aGljaCBhbHdheXMgZW1pdHMgMHMu IFRoaXMgYWxsb3dzDQo+PiBhbiBhdHRhY2tlciB0byBmb3JjZSB0aGUgY2xpZW50IGFuZCBzZXJ2 ZXIgaW50byB1c2luZyBaLCBhcyBmb2xsb3dzLg0KPj4NCj4+DQo+PiBDbGllbnQgICAgICAgICAg ICAgICAgICAgICAgQXR0YWNrZXIgICAgICAgICAgICAgICAgICAgU2VydmVyDQo+Pg0KPj4gSGVs bG8gLT4NCj4+ICAgICAgICAgICAgICAgICAgICAgICAgICAgIEhlbGxvIC0+DQo+PiAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgPC0gTm9uY2UsIEFsZz1TSEEyNTYsIFoNCj4+ ICAgICAgICAgICAgICAgIDwtIE5vbmNlLCBBbGc9Wg0KPj4gWihIMihQYXNzd29yZCksIE5vbmNl LCBBbGc9WikpIC0+DQo+PiAgICAgICAgICAgICAgICAgICAgICAgIFooSDIoUGFzc3dvcmQpLCBO b25jZSwgQWxnPVNIQTI1NiwgWikpDQo+Pg0KPj4gVGhlIGlzc3VlIGhlcmUgaXMgdGhhdCB0aGUg b25seSB0aGluZyB0aGF0IHRoZSBNQUMgaXMgZG9pbmcgaXMNCj4+IGF1dGhlbnRpY2F0aW5nIHRo ZSB0cmFuc2FjdGlvbiwgYW5kIGlmIHlvdSBjYW4ndCB0cnVzdCBpdCB0byBkbyB0aGF0LA0KPj4g eW91IGNhbid0IHRydXN0IGl0IHRvIGF1dGhlbnRpY2F0ZSB0aGUgYmlkLWRvd24gZGVmZW5zZSBl aXRoZXIuLg0KPj4NCj4+DQo+PiBEdXJpbmcgb3VyIGRpc2N1c3Npb24sIHRoZXJlIHdhcyBhIHN1 Z2dlc3Rpb24gdGhhdCBpdCB3YXMgdXNlZnVsIHRvDQo+PiBoYXZlIGJpZGRvd24gZGVmZW5zZSB0 byBkZWZlbmQgYWdhaW5zdCB3ZWFrbmVzc2VzIGluIEgyLiBJIGRvbid0IHRoaW5rDQo+PiB0aGF0 IHRoYXQncyB0cnVlIGVpdGhlci4gRmlyc3QsIHJlbWVtYmVyIHRoYXQgdGhlIHB1cnBvc2Ugb2Yg SDIgaXMgdG8NCj4+IHByZXZlbnQgYW4gYXR0YWNrZXIgd2hvIHJlY292ZXJzIHRoZSBwYXNzd29y ZCBkYXRhYmFzZSBmcm9tIGxlYXJuaW5nDQo+PiB0aGUgdXNlcidzIHRydWUgcGFzc3dvcmQuIFRo aXMgaXMgbm90IGFib3V0IGRlZmVuZGluZyB0aGUgc2VydmVyIGZyb20NCj4+IGF0dGFjayAoYmVj YXVzZSBrbm93aW5nIEExIGlzIGVub3VnaCB0byBhdHRhY2sgdGhlIHNlcnZlcikgYnV0IGFib3V0 DQo+PiBwcmV2ZW50aW5nIHRoZSBhdHRhY2tlciBmcm9tIGxlYXJuaW5nIGEgcGFzc3dvcmQgd2hp Y2ggbWlnaHQgaGF2ZSBiZWVuDQo+PiByZXVzZWQgb24gYW5vdGhlciBzaXRlLg0KPj4NCj4+IE5v dywgaXQncyBhbHNvIHBvc3NpYmxlIHRvIGJydXRlLWZvcmNlIHRoZSB1c2VyJ3MgcGFzc3dvcmQg anVzdCBmcm9tDQo+PiB0aGUgcHJvdG9jb2wgdHJhbnNjcmlwdDogaWYgeW91IGNhcHR1cmUgdGhl IGNsaWVudCdzIGZpcnN0IG1lc3NhZ2UNCj4+IHdpdGggTUVTU0FHRS1JTlRFR1JJVFkgb3IgTUVT U0FHRS1JTlRFR1JJVFktU0hBMjU2LCB5b3UgY2FuIGp1c3Qga2VlcA0KPj4gdHJ5aW5nIHBhc3N3 b3JkcyB1bnRpbCB5b3UgZ2V0IHRoZSByaWdodCBNQUMuIE5vdGUgdGhhdCB0aGlzIGlzIGENCj4+ IHBhc3NpdmUgYXR0YWNrLiBUaGlzIGlzIGNvbXBhcmF0aXZlbHkgZmFzdCBiZWNhdXNlIFNIQTI1 NiBhbmQgTUQ1IGFyZQ0KPj4gZmFzdC4NCj4+DQo+PiBBIG11Y2ggc3Ryb25nZXIgSDIgKGUuZy4s IEFyZ29uKSB3b3VsZCBoZWxwIGFnYWluc3QgdGhpcywgYnV0IHRoZQ0KPj4gcHJvYmxlbSBub3cg YmVjb21lcyB0aGF0IHRoZSBjbGllbnQgc3VwcG9ydHMgSDIgPT0gTUQ1IChvciBTSEEtMjU2KQ0K Pj4gYW5kIHNvIGV2ZW4gaWYgdGhlIHNlcnZlciBzdXBwb3J0cyBBcmdvbiwgdGhlIGF0dGFja2Vy IGNhbiBtb3VudCBhDQo+PiBiaWQtZG93biBkZWZlbnNlIGluIHdoaWNoIGl0IG1vZGlmaWVzIHRo ZSBzZXJ2ZXIncyBmaXJzdCBtZXNzYWdlIHRvDQo+PiBqdXN0IGFkdmVydGlzZSBNRDUgYW5kIHRo dXMgZ2V0IHRoZSBjbGllbnQgdG8gcHJvdmlkZSBhIHN1aXRhYmxlDQo+PiBtZXNzYWdlLiBUaGUg YmlkLWRvd24gZGVmZW5zZSB3b3VsZCBwcmV2ZW50IHRoZSBhdXRoZW50aWNhdGlvbg0KPj4gdHJh bnNhY3Rpb24gZnJvbSBjb21wbGV0aW5nLCBidXQgdGhhdCdzIG5vdCBuZWNlc3NhcnkgZm9yIHRo aXMNCj4+IGF0dGFjayBiZWNhdXNlIHRoZSBhdHRhY2tlciBjYW4ganVzdCBicnV0ZS1mb3JjZSB0 aGUgcGFzc3dvcmQgZnJvbQ0KPj4gdGhlIG1lc3NhZ2UgaXQgaGFzLiBUbyBtYWtlIHRoaXMgd29y aywgeW91IHdvdWxkIG5lZWQgc29tZXRoaW5nDQo+PiBsaWtlIGEgUEFLRSwgd2hpY2ggdGhpcyBp cyBub3QuDQo+Pg0KPj4gRmluYWxseSwgeW91IG1pZ2h0IHRoaW5rIHRoYXQgdGhlIHNlcnZlciBo YXMgdHdvIGRhdGFiYXNlcywgb25lDQo+PiB3aGljaCB1c2VzIEFyZ29uIGFuZCBvbmUgd2hpY2gg dXNlcyBNRDUgYW5kIGl0IHdhbnRzIHRvIGdyYWR1YWxseQ0KPj4gcGhhc2Ugb3V0IHRoZSBNRDUg b25lLCB3aGljaCBpdCB3aWxsIGRvIHdoZW4gbm8gY2xpZW50IGF1dGhlbnRpY2F0ZXMNCj4+IHdp dGggTUQ1IGZvciBhIHZlcnkgbG9uZyB0aW1lLiBBbiBhbnRpLWJpZGRvd24gZGVmZW5zZSB3b3Vs ZCBzb3J0DQo+PiBvZiB3b3JrIGhlcmUsIGJ1dCB0aGUgZmFjdCB0aGF0IHRoZSBhdHRhY2tlciB3 b3VsZCBoYXZlIHRvIGJlDQo+PiBhY3RpdmUgZXNzZW50aWFsbHkgaW5kZWZpbml0ZWx5IHRvIGtl ZXAgdGhlIHNlcnZlciBjb25mdXNlZCBhYm91dA0KPj4gdGhlIHN0YXRlIG9mIGNsaWVudHMgLS0g YW5kIHRoYXQgdGhlIGF0dGFja2VyIGNhbiBsaWtlbHkganVzdA0KPj4gZ2V0IGEgdmFsaWQgYWNj b3VudCBhbmQgdGhlbiBpbnNpc3Qgb24gdXNpbmcgTUQ1IC0tIG1ha2VzIHRoaXMgYQ0KPj4gbm90 IHZlcnkgdXNlZnVsIGRlZmVuc2UuDQo+Pg0KPj4gSSB0aGluayB0aGlzIG1ha2VzIGEgcHJldHR5 IHBlcnN1YXNpdmUgY2FzZSB0aGF0IHRoZSBiaWQtZG93biBkZWZlbnNlDQo+PiBpc24ndCB1c2Vm dWwgZXhjZXB0IGluIHRoZSBmb3JtYWwgImF0dGFja2VyIGNhbm5vdCBpbmZsdWVuY2UNCj4+IG5l Z290aWF0aW9uIiBzZW5zZS4gV2l0aCB0aGF0IHNhaWQsIGluIHRoZSBzcGlyaXQgb2YgZ2V0dGlu ZyB0aGlzIGRvbmUsIEkNCj4+IGd1ZXNzDQo+PiBJJ20gd2lsbGluZyB0byBsZXQgdGhpcyBnbyBp ZiB0aGUgc2VjdXJpdHkgY29uc2lkZXJhdGlvbnMgbWFrZSBjbGVhcg0KPj4gdGhhdCBpdCBpcyBv bmx5IGEgdmVyeSBsaW1pdGVkIG1lY2hhbmlzbS4NCj4+DQo+PiAtRWtyDQo+Pg0KPj4NCj4+IFsw XSBUaGlzIGlzIHByaW5jaXBhbGx5IGFib3V0IEgxLiBBcyBsb25nIGFzIHRoZSBIMiBhcHByb3hp bWF0ZWx5DQo+PiBldmVubHkgZGlzdHJpYnV0ZXMgdGhlIHBhc3N3b3JkIG92ZXIgaXRzIHJhbmdl LCB0aGVuIGNyeXB0b2dyYXBoaWMNCj4+IHN0cmVuZ3RoIGlzIG5vdCBpbXBvcnRhbnQgZm9yIHRo aXMgcXVlc3Rpb24uIEZvciBpbnN0YW5jZSwgeW91DQo+PiBjb3VsZCByZXBsYWNlIEgyIHdpdGgg YW4gaWRlbnRpdHkgZnVuY3Rpb24gYW5kIHN0aWxsIGhhdmUgYQ0KPj4gc2VjdXJlIHByb3RvY29s Lg0KPj4NCj4+DQo+Pg0KPj4NCj4+DQo+Pg0KPj4gT24gV2VkLCBGZWIgMjAsIDIwMTkgYXQgNDow MyBBTSBHb256YWxvIENhbWFyaWxsbyA8DQo+PiBnb256YWxvLmNhbWFyaWxsb0Blcmljc3Nvbi5j b208bWFpbHRvOmdvbnphbG8uY2FtYXJpbGxvQGVyaWNzc29uLmNvbT4+IHdyb3RlOg0KPj4NCj4+ PiBUaGFua3MsIEdvbnphbG8hIFBsZWFzZSwgbGV0IHVzIGtub3cgdGhlIGFncmVlZCB3YXkgZm9y d2FyZCBvbmNlIHlvdQ0KPj4+IGhhdmUgdGhlIGNhbGwuDQo+Pj4NCj4+PiBDaGVlcnMsDQo+Pj4N Cj4+PiBHb256YWxvDQo+Pj4NCj4+Pj4gT24gMTktRmViLTE5IDIwOjA1LCBHb256YWxvIFNhbGd1 ZWlybyAoZ3NhbGd1ZWkpIHdyb3RlOg0KPj4+PiBIaSBHb256YWxvIC0NCj4+Pj4NCj4+Pj4gV2Ug aGF2ZSBzY2hlZHVsZWQgYSBjb25mZXJlbmNlIGNhbGwgd2l0aCBFa3IsIFNpbW9uLCBNYXJjIGFu ZCBteXNlbGYgb24NCj4+PiBNYXJjaCA3dGggdG8gZGlzY3VzcyB0aGUgbGFzdCB0d28gcmVtYWlu aW5nIGlzc3Vlcy4gIFdpbGwgdXBkYXRlIHdpdGgNCj4+PiByZXNvbHV0aW9ucyBvbmNlIHRoaXMg aGFzIG9jY3VycmVkLg0KPj4+Pg0KPj4+PiBDaGVlcnMsDQo+Pj4+DQo+Pj4+IEdvbnphbG8NCj4+ Pj4NCj4+Pj4NCj4+Pj4NCj4+Pj4+IE9uIEZlYiAxOCwgMjAxOSwgYXQgODoxOCBBTSwgR29uemFs byBDYW1hcmlsbG8gPA0KPj4+IEdvbnphbG8uQ2FtYXJpbGxvQGVyaWNzc29uLmNvbTxtYWlsdG86 R29uemFsby5DYW1hcmlsbG9AZXJpY3Nzb24uY29tPj4gd3JvdGU6DQo+Pj4+Pg0KPj4+Pj4gSGkg R29uemFsbyBTLA0KPj4+Pj4NCj4+Pj4+IHdoYXQgaXMgdGhlIHN0YXR1cyBvZiB0aGlzIG9uZT8N Cj4+Pj4+DQo+Pj4+PiBUaGFua3MsDQo+Pj4+Pg0KPj4+Pj4gR29uemFsbw0KPj4+Pj4NCj4+Pj4+ PiBPbiAxOC1KYW4tMTkgMjA6MTYsIEdvbnphbG8gU2FsZ3VlaXJvIChnc2FsZ3VlaSkgd3JvdGU6 DQo+Pj4+Pj4gVG90YWxseSBhZ3JlZSwgRWtyLiAgTWFyYyBhbmQgSSBhcmUgbWVldGluZyB0byBj b21lIHVwIHdpdGggYSBwcm9wb3NhbA0KPj4+Pj4+IGJ1dCBJIGRvIGFncmVlIHdlIG5lZWQgdG8g aGF2ZSBhIGNhbGwgdG8gZ2V0IHRoaXMgcHV0IHRvIGJlZCBvbmNlIGFuZA0KPj4+Pj4+IGZvciBh bGwuICBXZeKAmWxsIG9mZmVyIHNvbWUgcG90ZW50aWFsIGRhdGVzIGluIHRoZSBuZXh0IDItMyB3 ZWVrcy4NCj4+Pj4+Pg0KPj4+Pj4+IENoZWVycywNCj4+Pj4+Pg0KPj4+Pj4+IEdvbnphbG8NCj4+ Pj4+Pg0KPj4+Pj4+DQo+Pj4+Pj4+IE9uIERlYyAyNiwgMjAxOCwgYXQgODowNSBQTSwgRXJpYyBS ZXNjb3JsYSA8ZWtyQHJ0Zm0uY29tPG1haWx0bzpla3JAcnRmbS5jb20+DQo+Pj4+Pj4+IDxtYWls dG86ZWtyQHJ0Zm0uY29tPG1haWx0bzpla3JAcnRmbS5jb20+Pj4gd3JvdGU6DQo+Pj4+Pj4+DQo+ Pj4+Pj4+IFdlIHJlYWxseSBuZWVkIHRvIGJyaW5nIHRoaXMgdG8gYSBjbG9zZSBiZWZvcmUgYm90 aCBTcGVuY2VyIGFuZCBJDQo+Pj4gc3RlcA0KPj4+Pj4+PiBkb3duLCBJIHNob3VsZCB0aGluay4N Cj4+Pj4+Pj4NCj4+Pj4+Pj4gLUVrcg0KPj4+Pj4+Pg0KPj4+Pj4+Pg0KPj4+Pj4+PiBPbiBUaHUs IE5vdiAyMiwgMjAxOCBhdCA0OjMwIEFNIEdvbnphbG8gQ2FtYXJpbGxvDQo+Pj4+Pj4+IDxnb256 YWxvLmNhbWFyaWxsb0Blcmljc3Nvbi5jb208bWFpbHRvOmdvbnphbG8uY2FtYXJpbGxvQGVyaWNz c29uLmNvbT4NCj4+Pj4+Pj4gPG1haWx0bzpnb256YWxvLmNhbWFyaWxsb0Blcmljc3Nvbi5jb208 bWFpbHRvOmdvbnphbG8uY2FtYXJpbGxvQGVyaWNzc29uLmNvbT4+PiB3cm90ZToNCj4+Pj4+Pj4N Cj4+Pj4+Pj4gICBFcmljLCBTcGVuY2VyLCB0aGFua3MgZm9yIHRoZSBzdGF0dXMgdXBkYXRlIQ0K Pj4+Pj4+Pg0KPj4+Pj4+PiAgIEF1dGhvcnMsIGNvdWxkIHlvdSBwbGVhc2UgbGV0IHVzIGtub3cg d2hlbiB5b3UgcGxhbiB0byBnZXQgdG8NCj4+PiB0aGlzPw0KPj4+Pj4+Pg0KPj4+Pj4+PiAgIEdv bnphbG8NCj4+Pj4+Pj4NCj4+Pj4+Pj4+ICAgT24gMTktTm92LTE4IDIzOjA0LCBTcGVuY2VyIERh d2tpbnMgYXQgSUVURiB3cm90ZToNCj4+Pj4+Pj4+IEhpLCBHb256YWxvLA0KPj4+Pj4+Pj4gT24g TW9uLCBOb3YgMTksIDIwMTggYXQgOTowNiBBTSBFcmljIFJlc2NvcmxhIDxla3JAcnRmbS5jb208 bWFpbHRvOmVrckBydGZtLmNvbT4NCj4+Pj4+Pj4gICA8bWFpbHRvOmVrckBydGZtLmNvbTxtYWls dG86ZWtyQHJ0Zm0uY29tPj4NCj4+Pj4+Pj4+IDxtYWlsdG86ZWtyQHJ0Zm0uY29tPG1haWx0bzpl a3JAcnRmbS5jb20+IDxtYWlsdG86ZWtyQHJ0Zm0uY29tPG1haWx0bzpla3JAcnRmbS5jb20+Pj4+ IHdyb3RlOg0KPj4+Pj4+Pj4NCj4+Pj4+Pj4+ICAgICBOb3QgcmVhbGx5LiBJIGhhdmUgbm90IHJl Y2VpdmVkIGFueSByZXNwb25zZSB0byBteSBtYWlsIG9mDQo+Pj4+Pj4+ICAgT2N0IDIzLg0KPj4+ Pj4+Pj4gICAgIEFzIGJlZm9yZSwgSSdtIGhhcHB5IHRvIGhhdmUgYSBjYWxsLCBidXQgSSBiZWxp ZXZlIHdlJ3JlDQo+Pj4+Pj4+ICAgcmVhY2hpbmcNCj4+Pj4+Pj4+ICAgICB0aGUgbGltaXRzIG9m IHdoYXQgY2FuIGJlIGFjY29tcGxpc2hlZCBieSBlbWFpbC4NCj4+Pj4+Pj4+DQo+Pj4+Pj4+Pg0K Pj4+Pj4+Pj4gRXJpYyB3b3VsZCBrbm93IGJlc3QgKGl0IGJlaW5nIGhpcyBEaXNjdXNzKSwgYnV0 IHRoaXMgaXMgYWxzbyBteQ0KPj4+Pj4+Pj4gdW5kZXJzdGFuZGluZy4NCj4+Pj4+Pj4+DQo+Pj4+ Pj4+PiBJIGNhbiBhZGQgdGhpcyB0byB0aGUgYWdlbmRhIG9mIHRoZSBJRVNHIGluZm9ybWFsIHRl bGVjaGF0IG9uDQo+Pj4+Pj4+ICAgTm92ZW1iZXINCj4+Pj4+Pj4+IDI5LCBpZiB0aGVyZSBoYXNu J3QgYmVlbiBhIGNhbGwgYmVmb3JlIHRoZW4sIGJ1dCBJIGRvbid0IGhhdmUgYQ0KPj4+Pj4+PiAg IHJlYXNvbg0KPj4+Pj4+Pj4gdG8gd2FpdCB1bnRpbCB0aGVuLCBpZiBpdCdzIHBvc3NpYmxlIHRv IHRhbGsgc29vbmVyLg0KPj4+Pj4+Pj4NCj4+Pj4+Pj4+IFRoYW5rcywNCj4+Pj4+Pj4+DQo+Pj4+ Pj4+PiBTcGVuY2VyDQo+Pj4+Pj4+Pg0KPj4+Pj4+Pj4NCj4+Pj4+Pj4+DQo+Pj4+Pj4+PiAgICAg LUVrcg0KPj4+Pj4+Pj4NCj4+Pj4+Pj4+DQo+Pj4+Pj4+PiAgICAgT24gTW9uLCBOb3YgMTksIDIw MTggYXQgNjozNSBBTSBHb256YWxvIENhbWFyaWxsbw0KPj4+Pj4+Pj4gICAgIDxnb256YWxvLmNh bWFyaWxsb0Blcmljc3Nvbi4uY29tPG1haWx0bzpnb256YWxvLmNhbWFyaWxsb0Blcmljc3Nvbi5j b20+DQo+Pj4+Pj4+ICAgPG1haWx0bzpnb256YWxvLmNhbWFyaWxsb0Blcmljc3Nvbi5jb208bWFp bHRvOmdvbnphbG8uY2FtYXJpbGxvQGVyaWNzc29uLmNvbT4+DQo+Pj4+Pj4+PiAgICAgPG1haWx0 bzpnb256YWxvLmNhbWFyaWxsb0Blcmljc3Nvbi5jb208bWFpbHRvOmdvbnphbG8uY2FtYXJpbGxv QGVyaWNzc29uLmNvbT4NCj4+Pj4+Pj4gICA8bWFpbHRvOmdvbnphbG8uY2FtYXJpbGxvQGVyaWNz c29uLmNvbTxtYWlsdG86Z29uemFsby5jYW1hcmlsbG9AZXJpY3Nzb24uY29tPj4+PiB3cm90ZToN Cj4+Pj4+Pj4+DQo+Pj4+Pj4+PiAgICAgICAgIEhpIFNwZW5jZXIsDQo+Pj4+Pj4+Pg0KPj4+Pj4+ Pj4gICAgICAgICB3aGF0IGlzIHRoZSBzdGF0dXMgb2YgdGhpcz8gQXJlIHRoZSBhdXRob3JzIGFu ZCB0aGUNCj4+PiBkb2N1bWVudA0KPj4+Pj4+Pj4gICAgICAgICBzaGVwaGVyZA0KPj4+Pj4+Pj4g ICAgICAgICB3b3JraW5nIHdpdGggdGhlIHJlbGV2YW50IEFEcyBvbiB0aGUgZGlzY3Vzc2VzPw0K Pj4+Pj4+Pj4NCj4+Pj4+Pj4+DQo+Pj4+Pj4+DQo+Pj4gaHR0cHM6Ly9kYXRhdHJhY2tlci5pZXRm Lm9yZy9kb2MvZHJhZnQtaWV0Zi10cmFtLXN0dW4tcG10dWQvYmFsbG90Lw0KPj4+Pj4+Pj4NCj4+ Pj4+Pj4+ICAgICAgICAgQ2hlZXJzLA0KPj4+Pj4+Pj4NCj4+Pj4+Pj4+ICAgICAgICAgR29uemFs bw0KPj4+Pj4+Pj4NCj4+Pj4+Pj4+PiAgICAgICAgIE9uIDI0LU9jdC0xOCAxNjo0MCwgU3BlbmNl ciBEYXdraW5zIGF0IElFVEYgd3JvdGU6DQo+Pj4+Pj4+Pj4gSGksIE1hcmMsDQo+Pj4+Pj4+Pj4N Cj4+Pj4+Pj4+PiBPbiBXZWQsIE9jdCAyNCwgMjAxOCBhdCAzOjQ0IEFNIE1hcmMgUGV0aXQtSHVn dWVuaW4NCj4+Pj4+Pj4+ICAgICAgICAgPHBldGl0aHVnQGFjbS5vcmc8bWFpbHRvOnBldGl0aHVn QGFjbS5vcmc+IDxtYWlsdG86cGV0aXRodWdAYWNtLm9yZzxtYWlsdG86cGV0aXRodWdAYWNtLm9y Zz4+DQo+Pj4+Pj4+ICAgPG1haWx0bzpwZXRpdGh1Z0BhY20ub3JnPG1haWx0bzpwZXRpdGh1Z0Bh Y20ub3JnPiA8bWFpbHRvOnBldGl0aHVnQGFjbS5vcmc8bWFpbHRvOnBldGl0aHVnQGFjbS5vcmc+ Pj4NCj4+Pj4+Pj4+PiA8bWFpbHRvOnBldGl0aHVnQGFjbS5vcmc8bWFpbHRvOnBldGl0aHVnQGFj bS5vcmc+IDxtYWlsdG86cGV0aXRodWdAYWNtLm9yZzxtYWlsdG86cGV0aXRodWdAYWNtLm9yZz4+ DQo+Pj4+Pj4+ICAgPG1haWx0bzpwZXRpdGh1Z0BhY20ub3JnPG1haWx0bzpwZXRpdGh1Z0BhY20u b3JnPiA8bWFpbHRvOnBldGl0aHVnQGFjbS5vcmc8bWFpbHRvOnBldGl0aHVnQGFjbS5vcmc+Pj4+ PiB3cm90ZToNCj4+Pj4+Pj4+Pg0KPj4+Pj4+Pj4+ICAgIEhpIFNwZW5jZXIsDQo+Pj4+Pj4+Pj4N Cj4+Pj4+Pj4+PiAgICBJIHNlbnQgbXkgYW5zd2VycyB0byBFcmljIFJlc2NvcmxhIHF1ZXN0aW9u cyBvbg0KPj4+Pj4+PiAgIDIwMTgtMTAtMDcNCj4+Pj4+Pj4+ICAgICAgICAgZm9sbG93aW5nDQo+ Pj4+Pj4+Pj4gICAgYW4gaW4tcGVyc29uIG1lZXRpbmcgd2l0aCBteSBjby1hdXRob3IsIGJ1dCBu ZXZlcg0KPj4+Pj4+PiAgIGdvdCBhDQo+Pj4+Pj4+PiAgICAgICAgIHJlc3BvbnNlDQo+Pj4+Pj4+ Pj4gICAgYmFjay4gIEJlY2F1c2UgdGhlcmUgd2FzIG5vIGNoYW5nZSBwcm9wb3NlZCBieQ0KPj4+ Pj4+PiAgIEVyaWMgSSB3ZW50DQo+Pj4+Pj4+PiAgICAgICAgIGFoZWFkIGFuZA0KPj4+Pj4+Pj4+ ICAgIHB1Ymxpc2hlZCAtMTkgYSBjb3VwbGUgb2Ygd2Vla3MgYWZ0ZXIgdGhhdCwgd2l0aA0KPj4+ Pj4+PiAgIHRoZSB0ZXh0DQo+Pj4+Pj4+PiAgICAgICAgIGFncmVlZCBpbg0KPj4+Pj4+Pj4+ICAg IHJlc3BvbnNlIHRvIEFkYW0ncyBhbmQgQmVuamFtaW4ncyBjb21tZW50cy4NCj4+Pj4+Pj4+Pg0K Pj4+Pj4+Pj4+DQo+Pj4+Pj4+Pg0KPj4+Pj4+Pg0KPj4+IGh0dHBzOi8vd3d3LmlldGYub3JnL21h aWwtYXJjaGl2ZS93ZWIvdHJhbS9jdXJyZW50L21zZzAyNjM1Lmh0bWwNCj4+Pj4+Pj4+Pg0KPj4+ Pj4+Pj4+DQo+Pj4+Pj4+Pj4gQWggLSBJIHdvbmRlciBpZiB0aGF0IHdhcyB3aGF0IGhhZCBoYXBw ZW5lZC4NCj4+Pj4+Pj4+Pg0KPj4+Pj4+Pj4+IEl0IHNvdW5kcyBsaWtlIHlvdSBkaWQgdGhlIHJp Z2h0IHRoaW5nLCBhbmQgdGhhdCBFcmljDQo+Pj4+Pj4+ICAgaGFzIG5vdw0KPj4+Pj4+Pj4gICAg ICAgICByZXNwb25kZWQsDQo+Pj4+Pj4+Pj4gd2hpY2ggaXMgYWxzbyB0aGUgcmlnaHQgdGhpbmcg dG8gZG8uDQo+Pj4+Pj4+Pj4NCj4+Pj4+Pj4+PiBUaGFua3MgZm9yIGhlbHBpbmcgbWUgdW5kZXJz dGFuZC4NCj4+Pj4+Pj4+Pg0KPj4+Pj4+Pj4+IFNwZW5jZXINCj4+Pj4+Pj4+Pg0KPj4+Pj4+Pj4+ DQo+Pj4+Pj4+Pj4+ICAgIE9uIDEwLzIzLzE4IDc6MjggUE0sIFNwZW5jZXIgRGF3a2lucyBhdCBJ RVRGIHdyb3RlOg0KPj4+Pj4+Pj4+PiBIaSwgTWFyYywNCj4+Pj4+Pj4+Pj4NCj4+Pj4+Pj4+Pj4g SSBzZWUgdGhhdCBhIC0xOSBoYXMgYmVlbiBzdWJtaXR0ZWQsIGJ1dCBkaWRuJ3QNCj4+Pj4+Pj4g ICBzZWUgYQ0KPj4+Pj4+Pj4gICAgICAgICByZXBseSBmcm9tDQo+Pj4+Pj4+Pj4gICAgRXJpYyBp bg0KPj4+Pj4+Pj4+PiB0aGlzIHRocmVhZC4gRG8geW91IHRoaW5rIHRoYXQgeW91J3ZlIGNvbnZl cmdlZD8NCj4+Pj4+Pj4+Pj4NCj4+Pj4+Pj4+Pj4gKEkgc2F3IGFuIG9mZmVyIG9mIGEgY29uZmVy ZW5jZSBjYWxsLCBzbyB0aG91Z2h0IGFuDQo+Pj4+Pj4+PiAgICAgICAgIG91dC1vZi1iYW5kDQo+ Pj4+Pj4+Pj4+IGNvbnZlcnNhdGlvbiBtaWdodCBoYXZlIGhhcHBlbmVkKQ0KPj4+Pj4+Pj4+Pg0K Pj4+Pj4+Pj4+PiBUaGFua3MsDQo+Pj4+Pj4+Pj4+DQo+Pj4+Pj4+Pj4+IFNwZW5jZXINCj4+Pj4+ Pj4+Pj4NCj4+Pj4+Pj4+Pj4gT24gU3VuLCBPY3QgNywgMjAxOCBhdCA5OjM1IEFNIE1hcmMgUGV0 aXQtSHVndWVuaW4NCj4+Pj4+Pj4+PiAgICA8cGV0aXRodWdAYWNtLm9yZzxtYWlsdG86cGV0aXRo dWdAYWNtLm9yZz4gPG1haWx0bzpwZXRpdGh1Z0BhY20ub3JnPG1haWx0bzpwZXRpdGh1Z0BhY20u b3JnPj4NCj4+Pj4+Pj4gICA8bWFpbHRvOnBldGl0aHVnQGFjbS5vcmc8bWFpbHRvOnBldGl0aHVn QGFjbS5vcmc+IDxtYWlsdG86cGV0aXRodWdAYWNtLm9yZzxtYWlsdG86cGV0aXRodWdAYWNtLm9y Zz4+Pg0KPj4+Pj4+Pj4gICAgICAgICA8bWFpbHRvOnBldGl0aHVnQGFjbS5vcmc8bWFpbHRvOnBl dGl0aHVnQGFjbS5vcmc+IDxtYWlsdG86cGV0aXRodWdAYWNtLm9yZzxtYWlsdG86cGV0aXRodWdA YWNtLm9yZz4+DQo+Pj4+Pj4+ICAgPG1haWx0bzpwZXRpdGh1Z0BhY20ub3JnPG1haWx0bzpwZXRp dGh1Z0BhY20ub3JnPiA8bWFpbHRvOnBldGl0aHVnQGFjbS5vcmc8bWFpbHRvOnBldGl0aHVnQGFj bS5vcmc+Pj4+PiB3cm90ZToNCj4+Pj4+Pj4+Pj4NCj4+Pj4+Pj4+Pj4+IEhpIEVyaWMsDQo+Pj4+ Pj4+Pj4+Pg0KPj4+Pj4+Pj4+Pj4gUGxlYXNlIHNlZSBpbmxpbmUuDQo+Pj4+Pj4+Pj4+Pg0KPj4+ Pj4+Pj4+Pj4+IE9uIDA5LzEwLzIwMTggMDM6MjUgQU0sIEVyaWMgUmVzY29ybGEgd3JvdGU6DQo+ Pj4+Pj4+Pj4+Pj4gT24gU2F0LCBTZXAgOCwgMjAxOCBhdCAyOjMxIFBNLCBNYXJjDQo+Pj4+Pj4+ ICAgUGV0aXQtSHVndWVuaW4NCj4+Pj4+Pj4+PiAgICA8cGV0aXRodWdAYWNtLm9yZzxtYWlsdG86 cGV0aXRodWdAYWNtLm9yZz4gPG1haWx0bzpwZXRpdGh1Z0BhY20ub3JnPG1haWx0bzpwZXRpdGh1 Z0BhY20ub3JnPj4NCj4+Pj4+Pj4gICA8bWFpbHRvOnBldGl0aHVnQGFjbS5vcmc8bWFpbHRvOnBl dGl0aHVnQGFjbS5vcmc+IDxtYWlsdG86cGV0aXRodWdAYWNtLm9yZzxtYWlsdG86cGV0aXRodWdA YWNtLm9yZz4+Pg0KPj4+Pj4+Pj4gICAgICAgICA8bWFpbHRvOnBldGl0aHVnQGFjbS5vcmc8bWFp bHRvOnBldGl0aHVnQGFjbS5vcmc+IDxtYWlsdG86cGV0aXRodWdAYWNtLm9yZzxtYWlsdG86cGV0 aXRodWdAYWNtLm9yZz4+DQo+Pj4+Pj4+ICAgPG1haWx0bzpwZXRpdGh1Z0BhY20ub3JnPG1haWx0 bzpwZXRpdGh1Z0BhY20ub3JnPiA8bWFpbHRvOnBldGl0aHVnQGFjbS5vcmc8bWFpbHRvOnBldGl0 aHVnQGFjbS5vcmc+Pj4+Pg0KPj4+Pj4+Pj4+Pj4+IHdyb3RlOg0KPj4+Pj4+Pj4+Pj4+DQo+Pj4+ Pj4+Pj4+Pj4+IEhpIEVyaWMsDQo+Pj4+Pj4+Pj4+Pj4+DQo+Pj4+Pj4+Pj4+Pj4+IEFwb2xvZ2ll cyBmb3IgdGhlIGRlbGF5IGluIGdldHRpbmcgYmFjayB0byB0aGF0Lg0KPj4+Pj4+Pj4+Pj4+Pg0K Pj4+Pj4+Pj4+Pj4+PiBJIHRoaW5rIHRoYXQgdGhlcmUgaXMgc29tZSBtaXN1bmRlcnN0YW5kaW5n DQo+Pj4+Pj4+ICAgaW4gd2hhdA0KPj4+Pj4+Pj4gICAgICAgICBTVFVOYmlzIGlzDQo+Pj4+Pj4+ Pj4gICAgdHJ5aW5nIHRvDQo+Pj4+Pj4+Pj4+Pj4+IGRvLCBzbyBwbGVhc2Ugc2VlIG15IGNvbW1l bnRzIGlubGluZS4NCj4+Pj4+Pj4+Pj4+Pj4NCj4+Pj4+Pj4+Pj4+Pj4+IE9uIDA2LzE4LzIwMTgg MTA6NDMgQU0sIEVyaWMgUmVzY29ybGEgd3JvdGU6DQo+Pj4+Pj4+Pj4+Pj4+PiBIaSBmb2xrcywN Cj4+Pj4+Pj4+Pj4+Pj4+DQo+Pj4+Pj4+Pj4+Pj4+PiBJJ3ZlIHJldmlld2VkIHRoZSBuZXcgdmVy c2lvbiwgYnV0IEkgZG9uJ3QNCj4+PiB0aGluaw0KPj4+Pj4+Pj4gICAgICAgICB0aGF0IHRoZSBi aWRkb3duDQo+Pj4+Pj4+Pj4+Pj4+PiBkaXNjdXNzaW9uIG1ha2VzIG11Y2ggc2Vuc2UuDQo+Pj4+ Pj4+Pj4+Pj4+Pg0KPj4+Pj4+Pj4+Pj4+Pj4gVG8gcmVjYXAsIHRoZXJlIGFyZSB0d28gaGFzaGVz IGhlcmU6DQo+Pj4+Pj4+Pj4+Pj4+Pg0KPj4+Pj4+Pj4+Pj4+Pj4gLSBUaGUgaGFzaCB3aGljaCB5 b3UgdXNlIHRvIHN0b3JlIHRoZQ0KPj4+Pj4+PiAgIHBhc3N3b3JkIHdpdGgNCj4+Pj4+Pj4+ICAg ICAgICAgKGN1cnJlbnRseQ0KPj4+Pj4+Pj4+ICAgIG1vc3RseQ0KPj4+Pj4+Pj4+Pj4+PiBNRDUp DQo+Pj4+Pj4+Pj4+Pj4+PiAtIFRoZSBoYXNoIHlvdSB1c2UgdG8gY29tcHV0ZSB0aGUgTUFDDQo+ Pj4+Pj4+ICAgKGN1cnJlbnRseSBTSEEtMSkuDQo+Pj4+Pj4+Pj4+Pj4+Pg0KPj4+Pj4+Pj4+Pj4+ Pj4gRmlyc3QsIGxldCdzIHN0aXB1bGF0ZSB0aGF0IE1ENSBpc24ndCBhDQo+Pj4+Pj4+ICAgZ3Jl YXQgY2hvaWNlDQo+Pj4+Pj4+PiAgICAgICAgIGhlcmUsDQo+Pj4+Pj4+Pj4gICAgdGhvdWdoIFNI QS0xDQo+Pj4+Pj4+Pj4+Pj4+PiBpc24ndCBhIGdyZWF0IGNob2ljZQ0KPj4+Pj4+Pj4+Pj4+Pj4g ZWl0aGVyIGZvciBwd2QgaGFzaGluZyBZb3Ugd2FudCBBcmdvbiBvciB0aGUNCj4+Pj4+Pj4gICBs aWtlLg0KPj4+Pj4+Pj4gICAgICAgICBXaXRoIHRoYXQgc2FpZCwNCj4+Pj4+Pj4+Pj4+Pj4gdGhl cmUncw0KPj4+Pj4+Pj4+Pj4+Pj4gbm8gc2Vuc2libGUNCj4+Pj4+Pj4+Pj4+Pj4+IGJpZGRvd24g YXR0YWNrIG9uIHRoYXQgaGFzaCBiZWNhdXNlIGl0J3MgYQ0KPj4+Pj4+Pj4gICAgICAgICBwZXIt c2VydmVyIGZlYXR1cmUsDQo+Pj4+Pj4+Pj4gICAgbm90IGENCj4+Pj4+Pj4+Pj4+Pj4+IHBlci10 cmFuc2FjdGlvbg0KPj4+Pj4+Pj4+Pj4+Pj4gZmVhdHVyZS4gU28sIGFzIGxvbmcgYXMgdGhlIHNl cnZlciBoYXMNCj4+Pj4+Pj4gICBNRDUtaGFzaGVkDQo+Pj4+Pj4+PiAgICAgICAgIHBhc3N3b3Jk cywgdGhlDQo+Pj4+Pj4+Pj4+Pj4+IHNpdHVhdGlvbg0KPj4+Pj4+Pj4+Pj4+Pj4gaXMgYmFkLg0K Pj4+Pj4+Pj4+Pj4+Pg0KPj4+Pj4+Pj4+Pj4+PiBJbiBubyBwbGFjZSBpbiBTVFVOYmlzIHdlIGFy ZSBwcm9wb3NpbmcgdG8NCj4+Pj4+Pj4gICB1c2UgU0hBLTENCj4+Pj4+Pj4+ICAgICAgICAgZm9y IHBhc3N3b3JkDQo+Pj4+Pj4+Pj4+Pj4+IGVuY3J5cHRpb24sIHNvIEkgYW0gbm90IHN1cmUgd2hl cmUgdGhhdCBjb21lDQo+Pj4+Pj4+ICAgZnJvbS4NCj4+Pj4+Pj4+ICAgICAgICAgV2hhdCB3ZQ0K Pj4+Pj4+Pj4+ICAgIHByb3Bvc2UgaXM6DQo+Pj4+Pj4+Pj4+Pj4+DQo+Pj4+Pj4+Pj4+Pj4NCj4+ Pj4+Pj4+Pj4+PiBZb3UncmUgcmlnaHQsIGl0J3MgU0hBLTI1NiwgYnV0IG15IGNyaXRpY2lzbXMN Cj4+Pj4+Pj4gICBhcHBseQ0KPj4+Pj4+Pj4gICAgICAgICBlcXVhbGx5IHRoZXJlLg0KPj4+Pj4+ Pj4+Pj4NCj4+Pj4+Pj4+Pj4+IFNIQS0yNTYgd2FzIHdoYXQgdGhlIFdHIGFkb3B0ZWQuICBPdXIg YXR0ZW1wdHMNCj4+Pj4+Pj4gICB0byBhZGQNCj4+Pj4+Pj4+ICAgICAgICAgb3RoZXIgcGFzc3dv cmRzDQo+Pj4+Pj4+Pj4+PiBlbmNyeXB0aW9uIG1lY2hhbmlzbXMgd2VyZSBkZW5pZWQuICBJdCBp cyB0cnVlDQo+Pj4gdGhhdA0KPj4+Pj4+Pj4gICAgICAgICBBcmdvbjIgd2FzDQo+Pj4+Pj4+Pj4g ICAgbm90IGluIHRoYXQNCj4+Pj4+Pj4+Pj4+IGxpc3QgKGluIG91ciBkZWZlbnNlIEFyZ29uMiB3 YXMgbm90IGtub3duDQo+Pj4+Pj4+ICAgYmVmb3JlIEp1bHkNCj4+Pj4+Pj4+ICAgICAgICAgMjAx NSksIGJ1dA0KPj4+Pj4+Pj4+ICAgIEkgZG8gbm90DQo+Pj4+Pj4+Pj4+PiBzZWUgd2h5IHRoZSBX RyB3b3VsZCBoYXZlIGFjY2VwdGVkIHRoYXQgb25lDQo+Pj4+Pj4+ICAgb3ZlciB0aGUNCj4+Pj4+ Pj4+ICAgICAgICAgb3RoZXJzLg0KPj4+Pj4+Pj4+ICAgIEFueXdheSBpdCBpcw0KPj4+Pj4+Pj4+ Pj4gdG9vIGxhdGUgdG8gZml4IHRoaXMsIGFzIGl0IGlzIG15IHVuZGVyc3RhbmRpbmcNCj4+Pj4+ Pj4gICB0aGF0DQo+Pj4+Pj4+PiAgICAgICAgIHRoZSBXRyBkb2VzDQo+Pj4+Pj4+Pj4gICAgbm90 IGhhdmUNCj4+Pj4+Pj4+Pj4+IGVub3VnaCBlbmVyZ3kgdG8gcmVhY2ggY29uc2Vuc3VzIG9uIGEg bmV3IHBhc3N3b3JkDQo+Pj4+Pj4+PiAgICAgICAgIGFsZ29yaXRobS4uDQo+Pj4+Pj4+Pj4gICAg U29tZW9uZSBjYW4NCj4+Pj4+Pj4+Pj4+IGp1c3Qgd3JpdGUgYSBkcmFmdCBhZGRpbmcgQXJnb24y IGFzIHBhc3N3b3JkDQo+Pj4+Pj4+PiAgICAgICAgIGVuY3J5cHRpb24sIGFzIHdlDQo+Pj4+Pj4+ Pj4gICAgd2lsbCBoYXZlIGENCj4+Pj4+Pj4+Pj4+IElBTkEgcmVnaXN0cnkgZm9yIHRoYXQuDQo+ Pj4+Pj4+Pj4+Pg0KPj4+Pj4+Pj4+Pj4+DQo+Pj4+Pj4+Pj4+Pj4NCj4+Pj4+Pj4+Pj4+Pj4gLSBF c3RhYmxpc2ggYSByZWdpc3RyeSBmb3IgbmV3IHBhc3N3b3JkDQo+Pj4+Pj4+ICAgYWxnb3JpdGht cw0KPj4+Pj4+Pj4gICAgICAgICAoc2VjdGlvbg0KPj4+Pj4+Pj4+ICAgIDE4LjUpLCBzbw0KPj4+ Pj4+Pj4+Pj4+PiBhbGdvcml0aG1zIGxpa2UgQXJnb24yIGNvdWxkIGJlIGFkZGVkIGxhdGVyDQo+ Pj4+Pj4+ICAgKGJ1dCBub3RlDQo+Pj4+Pj4+PiAgICAgICAgIHRoYXQgb3VyIG93bg0KPj4+Pj4+ Pj4+Pj4+PiBwcm9wb3NhbHMgdG8gYWRkIG1vcmUgcGFzc3dvcmQgYWxnb3JpdGhtcyB3ZXJlDQo+ Pj4+Pj4+PiAgICAgICAgIHJlamVjdGVkIGJ5IHRoZQ0KPj4+Pj4+Pj4+ICAgIHdvcmtpbmcNCj4+ Pj4+Pj4+Pj4+Pj4gZ3JvdXApLg0KPj4+Pj4+Pj4+Pj4+PiAtIEFkZCBhIG5ldyBwYXNzd29yZCBh bGdvcml0aG0gdG8gdGhhdCByZWdpc3RyeSwNCj4+Pj4+Pj4+ICAgICAgICAgbmFtZWx5IFNIQS0y NTYuDQo+Pj4+Pj4+Pj4+Pj4+IC0gUmVnaXN0ZXIgTUQ1IGFzIGFuIGluaXRpYWwgcGFzc3dvcmQN Cj4+Pj4+Pj4gICBhbGdvcml0aG0gZm9yDQo+Pj4+Pj4+PiAgICAgICAgIGJhY2t3YXJkDQo+Pj4+ Pj4+Pj4+PiBjb21wYXRpYmlsaXR5DQo+Pj4+Pj4+Pj4+Pj4+IHB1cnBvc2UuDQo+Pj4+Pj4+Pj4+ Pj4+DQo+Pj4+Pj4+Pj4+Pj4+IEFzIGZvciB0aGUgYmlkZG93biBwcm90ZWN0aW9uIGl0c2VsZiwg aXQgaXMgbXkNCj4+Pj4+Pj4+ICAgICAgICAgcmVjb2xsZWN0aW9uIHRoYXQgaXQNCj4+Pj4+Pj4+ Pj4+Pj4gaGFwcGVuZWQgbW9yZSBvciBsZXNzIGxpa2UgdGhhdDoNCj4+Pj4+Pj4+Pj4+Pj4NCj4+ Pj4+Pj4+Pj4+Pj4NCj4+Pj4+Pj4+Pj4+Pj4gSU5ULiBNRUVUSU5HIFJPT00gLSBEQVkNCj4+Pj4+ Pj4+Pj4+Pj4NCj4+Pj4+Pj4+Pj4+Pj4gT25lIG9mIHRoZSBjby1lZGl0b3JzIG9mIFNUVU5CaXMg c3RhbmRzIGF0IHRoZQ0KPj4+Pj4+Pj4gICAgICAgICBtaWNyb3Bob25lOg0KPj4+Pj4+Pj4+Pj4+ Pg0KPj4+Pj4+Pj4+Pj4+PiAgICAgICAgICAgICAgICAgICAgICAgICAgIENPLUVESVRPUg0KPj4+ Pj4+Pj4+Pj4+PiAgICAgICAgICAgICAgICAgV2UgYWRkZWQgU0hBLTI1NiBwcm90ZWN0aW9uIGZv cg0KPj4+Pj4+Pj4gICAgICAgICBwYXNzd29yZHMNCj4+Pj4+Pj4+Pj4+Pj4gICAgICAgICAgICAg ICAgIGluIFNUVU5CaXMuDQo+Pj4+Pj4+Pj4+Pj4+DQo+Pj4+Pj4+Pj4+Pj4+ICAgICAgICAgICAg ICAgICAgICAgICAgICAgU09NRU9ORSAoVi5PLikNCj4+Pj4+Pj4+Pj4+Pj4gICAgICAgICAgICAg ICAgIEFzIE1ENSBzdGlsbCBuZWVkIHRvIGJlDQo+Pj4+Pj4+ICAgc3VwcG9ydGVkLA0KPj4+Pj4+ Pj4gICAgICAgICB5b3UgbmVlZCB0byBhZGQNCj4+Pj4+Pj4+Pj4+Pj4gICAgICAgICAgICAgICAg IHByb3RlY3Rpb24gZm9yIGJpZC1kb3duDQo+Pj4gYXR0YWNrcy4NCj4+Pj4+Pj4+Pj4+Pj4NCj4+ Pj4+Pj4+Pj4+Pj4gQ0xPU0UtVVAgb24gQ08tRURJVE9SIFJPTExJTkcgSElTIEVZRVMNCj4+Pj4+ Pj4+Pj4+Pj4NCj4+Pj4+Pj4+Pj4+Pj4gICAgICAgICAgICAgICAgICAgICAgICAgICBDTy1FRElU T1INCj4+Pj4+Pj4+Pj4+Pj4gICAgICAgICAgICAgICAgIE9LLCBJJ2xsIHdvcmsgb24gdGhhdC4N Cj4+Pj4+Pj4+Pj4+Pj4NCj4+Pj4+Pj4+Pj4+Pj4gRm91ciB0byBlaWdodCBtb250aHMgaGFzIHBh c3NlZC4NCj4+Pj4+Pj4+Pj4+Pj4NCj4+Pj4+Pj4+Pj4+Pj4gSU5ULiBBTk9USEVSIE1FRVRJTkcg Uk9PTSAtIERBWQ0KPj4+Pj4+Pj4+Pj4+Pg0KPj4+Pj4+Pj4+Pj4+PiBUaGUgc2FtZSBjby1lZGl0 b3Igb2YgU1RVTkJpcyBzdGFuZHMgYXQgdGhlDQo+Pj4+Pj4+ICAgbWljcm9waG9uZToNCj4+Pj4+ Pj4+Pj4+Pj4NCj4+Pj4+Pj4+Pj4+Pj4gICAgICAgICAgICAgICAgICAgICAgICAgICBDTy1FRElU T1INCj4+Pj4+Pj4+Pj4+Pj4gICAgICAgICAgICAgICAgIFdlIGFkZGVkIGEgbmljZSBtZWNoYW5p c20gdG8NCj4+Pj4+Pj4gICBwcmV2ZW50DQo+Pj4+Pj4+PiAgICAgICAgIGJpZC1kb3duDQo+Pj4+ Pj4+Pj4+Pj4+ICAgICAgICAgICAgICAgICBhdHRhY2tzIG9uIHBhc3N3b3Jkcy4gIEFueQ0KPj4+ Pj4+PiAgIGNvbW1lbnRzPw0KPj4+Pj4+Pj4+Pj4+Pg0KPj4+Pj4+Pj4+Pj4+PiAgICAgICAgICAg ICAgICAgICAgICAgICAgIFRIRSBST09NDQo+Pj4+Pj4+Pj4+Pj4+ICAgICAgICAgICAgICAgICAo c2lsZW5jZSkNCj4+Pj4+Pj4+Pj4+Pj4NCj4+Pj4+Pj4+Pj4+Pj4gICAgICAgICAgICAgICAgICAg ICAgICAgICBDTy1FRElUT1INCj4+Pj4+Pj4+Pj4+Pj4gICAgICAgICAgICAgICAgIE1vdmluZyBv bi4uLg0KPj4+Pj4+Pj4+Pj4+Pg0KPj4+Pj4+Pj4+Pj4+DQo+Pj4+Pj4+Pj4+Pj4gSSBkb24ndCBz ZWUgaG93IGFueSBvZiB0aGlzIGlzIHJlbGV2YW50IHRvIG15DQo+Pj4+Pj4+PiAgICAgICAgIHRl Y2huaWNhbCBwb2ludHMNCj4+Pj4+Pj4+PiAgICBhYm92ZS4NCj4+Pj4+Pj4+Pj4+DQo+Pj4+Pj4+ Pj4+PiBNeSBwb2ludCB3YXMgdGhhdCB3ZSwgdGhlIGNvLWVkaXRvcnMsIGRpZCBub3QNCj4+Pj4+ Pj4gICBkZWNpZGUgb24NCj4+Pj4+Pj4+ICAgICAgICAgYWRkaW5nDQo+Pj4+Pj4+Pj4gICAgYmlk LWRvd24NCj4+Pj4+Pj4+Pj4+IHByb3RlY3Rpb24sIHNvbWVvbmUgYXNrZWQgdXMgdG8gZG8gc28g YW5kDQo+Pj4+Pj4+ICAgbm8tb25lIGluIHRoZQ0KPj4+Pj4+Pj4gICAgICAgICBXRyBzYXcNCj4+ Pj4+Pj4+PiAgICBhbnkgcHJvYmxlbQ0KPj4+Pj4+Pj4+Pj4gd2l0aCB0aGF0LiAgVGhlIHJlYXNv bnMgdGhhdCBwZXJzb24gd2FudGVkIHRoYXQNCj4+Pj4+Pj4gICBhcmUgbm90DQo+Pj4+Pj4+PiAg ICAgICAgIGtub3duIHRvDQo+Pj4+Pj4+Pj4gICAgdXMgYnV0LCBhcw0KPj4+Pj4+Pj4+Pj4geW91 IGluc2lzdCwgaGVyZSdzIG9uZSByZWFzb24gSSBjYW4gdGhpbmsgb2Y6DQo+Pj4+Pj4+Pj4+Pg0K Pj4+Pj4+Pj4+Pj4gSXQgaXMgYSBmYWN0IHRoYXQsIGZvciBvcGVyYXRpb25hbCByZWFzb25zLCBh DQo+Pj4+Pj4+ICAgcGFzc3dvcmQNCj4+Pj4+Pj4+ICAgICAgICAgZGF0YWJhc2UNCj4+Pj4+Pj4+ PiAgICBjYW5ub3QgYmUNCj4+Pj4+Pj4+Pj4+IHJlLWVuY3J5cHRlZCBhdCBvbmNlLiAgQWxzbyBm b3Igb3BlcmF0aW9uYWwNCj4+Pj4+Pj4gICByZWFzb25zLA0KPj4+Pj4+Pj4gICAgICAgICB0aGUg TUQ1IHBhc3N3b3JkDQo+Pj4+Pj4+Pj4+PiBjYW5ub3QgYmUgaW1tZWRpYXRlbHkgcmVtb3ZlZCBm cm9tIHRoZSBkYXRhYmFzZQ0KPj4+Pj4+PiAgIGFzIHNvb24NCj4+Pj4+Pj4+ICAgICAgICAgdGhl IHVzZXINCj4+Pj4+Pj4+PiAgICBzdWJtaXR0ZWQNCj4+Pj4+Pj4+Pj4+IGEgbmV3IG9uZS4gIElu IGZhY3QsIGFuZCBmb3IgcXVpdGUgc29tZSB0aW1lLCBib3RoDQo+Pj4+Pj4+PiAgICAgICAgIGVu Y3J5cHRlZA0KPj4+Pj4+Pj4+ICAgIHZhcmlhbnRzIG9mDQo+Pj4+Pj4+Pj4+PiB0aGUgc2FtZSBw YXNzd29yZCBtYXkgaGF2ZSB0byBiZSBrZXB0IGluIHRoYXQNCj4+Pj4+Pj4gICBkYXRhYmFzZSwN Cj4+Pj4+Pj4+ICAgICAgICAgYmVjYXVzZSBhDQo+Pj4+Pj4+Pj4gICAgc2luZ2xlDQo+Pj4+Pj4+ Pj4+PiB1c2VyIG1heSB1c2UgYSBtaXggb2YgZGV2aWNlcywgc29tZSBvZiB0aGVtDQo+Pj4+Pj4+ ICAgdGhhdCB1c2UgYW4NCj4+Pj4+Pj4+ICAgICAgICAgUkZDIDUzODkNCj4+Pj4+Pj4+PiAgICBj bGllbnQsDQo+Pj4+Pj4+Pj4+PiBzb21lIHRoYXQgdXNlIGEgU1RVTmJpcyBjbGllbnQuLiAgSXQg aXMgdXAgdG8NCj4+Pj4+Pj4gICB0aGUgU1RVTg0KPj4+Pj4+Pj4gICAgICAgICBzZXJ2ZXIgb3du ZXIgdG8NCj4+Pj4+Pj4+Pj4+IGRlY2lkZSBob3cgbG9uZyB0aGUgbWlncmF0aW9uIHRvIFNUVU5i aXMgd2lsbA0KPj4+Pj4+PiAgIHRha2UgYW5kDQo+Pj4+Pj4+PiAgICAgICAgIHdoZW4gaXQNCj4+ Pj4+Pj4+PiAgICB3aWxsIGJlDQo+Pj4+Pj4+Pj4+PiBhY2NlcHRhYmxlIHRvIHJlamVjdCBhbGwg UkZDIDUzODkgKGkuZS4gTUQ1KQ0KPj4+Pj4+PiAgIGNsaWVudHMgKHRoYXQNCj4+Pj4+Pj4+PiAg ICBtaWdyYXRpb24gdGltZQ0KPj4+Pj4+Pj4+Pj4gY2FuIGJlIHB1cnBvc2VseSByZWR1Y2VkIHRv IDAgc2Vjb25kcyBidXQNCj4+Pj4+Pj4gICB0aGF0J3MgdGhlDQo+Pj4+Pj4+PiAgICAgICAgIGNo b2ljZSBhbmQNCj4+Pj4+Pj4+Pj4+IHJlc3BvbnNpYmlsaXR5IG9mIHRoZSBvd25lciBvZiB0aGUg c2VydmVyKS4NCj4+Pj4+Pj4+Pj4+DQo+Pj4+Pj4+Pj4+PiBNZWFud2hpbGUgd2Ugc3RpbGwgbmVl ZCB0byBiZSBzdXJlIHRoYXQgaWYgdGhlDQo+Pj4gU1RVTg0KPj4+Pj4+Pj4gICAgICAgICBjbGll bnQgaXMNCj4+Pj4+Pj4+PiAgICBpbXBsZW1lbnRpbmcNCj4+Pj4+Pj4+Pj4+IFNUVU5iaXMgaXQg dW5jb25kaXRpb25hbGx5IGdldHMgdGhlIGFkZGl0aW9uYWwNCj4+Pj4+Pj4+ICAgICAgICAgcHJv dGVjdGlvbiBvZiB0aGUgbmV3DQo+Pj4+Pj4+Pj4+PiBwYXNzd29yZCBlbmNyeXB0aW9uIGFsZ29y aXRobS4gIFRoYXQncyB3aGVyZQ0KPj4+Pj4+PiAgIHRoZSBiaWRkb3duDQo+Pj4+Pj4+Pj4gICAg cHJvdGVjdGlvbiBraWNrcw0KPj4+Pj4+Pj4+Pj4gaW4sIGJ5IHByZXZlbnRpbmcgYW4gb25saW5l IGF0dGFja2VyIHRvIGhhdmUNCj4+Pj4+Pj4gICB0aGUgc2VydmVyDQo+Pj4+Pj4+Pj4gICAgbWlz aWRlbnRpZnlpbmcgYQ0KPj4+Pj4+Pj4+Pj4gU1RVTmJpcyBjbGllbnQgYXMgYW4gUkZDIDUzODkg Y2xpZW50LCBieQ0KPj4+Pj4+PiAgIHByZXZlbnRpbmcgYW4NCj4+Pj4+Pj4+ICAgICAgICAgb25s aW5lDQo+Pj4+Pj4+Pj4gICAgYXR0YWNrZXIgdG8NCj4+Pj4+Pj4+Pj4+IGhhdmUgdGhlIGNsaWVu dCBtaXNpZGVudGlmeWluZyBhIFNUVU5iaXMgc2VydmVyDQo+Pj4+Pj4+ICAgYXMgYQ0KPj4+Pj4+ Pj4gICAgICAgICBSRkMgNTM4OQ0KPj4+Pj4+Pj4+ICAgIHNlcnZlciwgYW5kDQo+Pj4+Pj4+Pj4+ PiBoYXZpbmcgYm90aCB0aGVtIHVzZSB0aGUgTUQ1IGVuY3J5cHRlZCBwYXNzd29yZA0KPj4+Pj4+ PiAgIGluc3RlYWQNCj4+Pj4+Pj4+ICAgICAgICAgb2YgdGhlDQo+Pj4+Pj4+Pj4gICAgU0hBLTI1 Ng0KPj4+Pj4+Pj4+Pj4gZW5jcnlwdGVkIHBhc3N3b3JkLCBhbGwgb2YgdGhhdCBlYXNpbHkgZG9u ZSBieQ0KPj4+Pj4+Pj4gICAgICAgICBzdHJpcHBpbmcgdGhlDQo+Pj4+Pj4+Pj4gICAgdW5wcm90 ZWN0ZWQNCj4+Pj4+Pj4+Pj4+IDQwMSByZXNwb25zZSBvZiB0aGUgbmV3IFNUVU5iaXMNCj4+PiBQ QVNTV09SRC1BTEdPUklUSE1TDQo+Pj4+Pj4+PiAgICAgICAgIGF0dHJpYnV0ZS4uDQo+Pj4+Pj4+ Pj4+Pg0KPj4+Pj4+Pj4+Pj4+DQo+Pj4+Pj4+Pj4+Pj4NCj4+Pj4+Pj4+Pj4+Pg0KPj4+Pj4+Pj4+ Pj4+Pj4gVGhlIHNlY29uZCB0b3BpYyBpcyB0aGUgaGFzaCB1c2VkIHRvIGNvbXB1dGUNCj4+PiB0 aGUNCj4+Pj4+Pj4+ICAgICAgICAgTUFDLiBIb3dldmVyLA0KPj4+Pj4+Pj4+ICAgIEkgZG9uJ3QN Cj4+Pj4+Pj4+Pj4+Pj4gc2VlDQo+Pj4+Pj4+Pj4+Pj4+PiBob3cNCj4+Pj4+Pj4+Pj4+Pj4+IHRo aXMgZ2l2ZXMgeW91IHNlbnNpYmxlIGJpZGRvd24gcHJvdGVjdGlvbg0KPj4+Pj4+PiAgIGJlY2F1 c2UNCj4+Pj4+Pj4+ICAgICAgICAgdGhhdCBoYXNoDQo+Pj4+Pj4+Pj4gICAgaXMgYWxzbw0KPj4+ Pj4+Pj4+Pj4gdXNlZA0KPj4+Pj4+Pj4+Pj4+Pj4gdG8gY29tcHV0ZQ0KPj4+Pj4+Pj4+Pj4+Pj4g TUFDIG92ZXIgdGhlIG5lZ290aWF0aW9uOiBhbiBhdHRhY2tlciB3aG8gaGFzDQo+Pj4+Pj4+PiAg ICAgICAgIGNvbXByb21pc2VkIGENCj4+Pj4+Pj4+PiAgICBNQUMgd2hpY2gNCj4+Pj4+Pj4+Pj4+ IHRoZQ0KPj4+Pj4+Pj4+Pj4+Pj4gc2VydmVyDQo+Pj4+Pj4+Pj4+Pj4+PiBzdXBwb3J0cyB3aWxs IHF1aXRlIGxpa2VseSBiZSBhYmxlIHRvIGZvcmdlDQo+Pj4+Pj4+ICAgYSBNQUMNCj4+Pj4+Pj4+ ICAgICAgICAgb3ZlciB0aGUNCj4+Pj4+Pj4+PiAgICB0cmFuc2NyaXB0DQo+Pj4+Pj4+Pj4+PiBh cw0KPj4+Pj4+Pj4+Pj4+Pj4gd2VsbC4gVGhpcyBpcywNCj4+Pj4+Pj4+Pj4+Pj4+IEkgc3VwcG9z ZSwgcG90ZW50aWFsbHkgdXNlZnVsIGFzIGEgZGVmZW5zZQ0KPj4+Pj4+PiAgIGFnYWluc3QNCj4+ Pj4+Pj4+ICAgICAgICAgc29tZSBvdGhlcg0KPj4+Pj4+Pj4+ICAgIHdlYWtuZXNzDQo+Pj4+Pj4+ Pj4+Pj4+PiAoZS5nLiwNCj4+Pj4+Pj4+Pj4+Pj4+IHZlcnNpb24gIyksIGJ1dCBJIGRvbid0IHJl YWxseSBzZWUgaG93IHRoZQ0KPj4+Pj4+PiAgIGN1cnJlbnQNCj4+Pj4+Pj4+ICAgICAgICAgZGVz aWduDQo+Pj4+Pj4+Pj4gICAgaGVscHMgYWdhaW5zdA0KPj4+Pj4+Pj4+Pj4+Pj4gYXR0YWNrcyBv biB0aGUNCj4+Pj4+Pj4+Pj4+Pj4+IE1BQy4NCj4+Pj4+Pj4+Pj4+Pj4NCj4+Pj4+Pj4+Pj4+Pj4g VGhlcmUgaXMgbm8gYmlkZG93biBhdHRhY2sgcHJvdGVjdGlvbiBmb3IgdGhlDQo+Pj4+Pj4+ICAg TUFDLCBhcw0KPj4+Pj4+Pj4gICAgICAgICBzdGF0ZWQgaW4NCj4+Pj4+Pj4+PiAgICBTZWN0aW9u DQo+Pj4+Pj4+Pj4+Pj4+IDE2LjM6DQo+Pj4+Pj4+Pj4+Pj4+DQo+Pj4+Pj4+Pj4+Pj4+ICJUaGUg YmlkLWRvd24gcHJvdGVjdGlvbiBtZWNoYW5pc20gZGVzY3JpYmVkDQo+Pj4+Pj4+ICAgaW4gdGhp cw0KPj4+Pj4+Pj4gICAgICAgICBkb2N1bWVudA0KPj4+Pj4+Pj4+ICAgIGlzIG5ldywNCj4+Pj4+ Pj4+Pj4+Pj4gYW5kIHRodXMgY2Fubm90IGN1cnJlbnRseSBwcm90ZWN0IGFnYWluc3QgYQ0KPj4+ Pj4+PiAgIGJpZC1kb3duDQo+Pj4+Pj4+PiAgICAgICAgIGF0dGFjayB0aGF0DQo+Pj4+Pj4+Pj4+ Pj4+IGxvd2VycyB0aGUgc3RyZW5ndGggb2YgdGhlIGhhc2ggYWxnb3JpdGhtIHRvDQo+Pj4+Pj4+ ICAgSE1BQy1TSEExLiINCj4+Pj4+Pj4+Pj4+Pj4NCj4+Pj4+Pj4+Pj4+Pj4gV2hhdCB3ZSBwdXQg aW4gcGxhY2UgaXMgYSBwbGFuIGZvciAqZnV0dXJlKg0KPj4+Pj4+PiAgIHZlcnNpb25zDQo+Pj4+ Pj4+PiAgICAgICAgIG9mIFNUVU4gdG8gZ2V0DQo+Pj4+Pj4+Pj4+Pj4+IGJpZGRvd24gcHJvdGVj dGlvbiBmb3IgdGhlIE1BQy4gIFRoYXQncyBpdCwNCj4+Pj4+Pj4gICBubyBtb3JlLA0KPj4+Pj4+ Pj4gICAgICAgICBubyBsZXNzLg0KPj4+Pj4+Pj4+Pj4+Pg0KPj4+Pj4+Pj4+Pj4+DQo+Pj4+Pj4+ Pj4+Pj4gWWVzLCBidXQgSSBkb24ndCBiZWxpZXZlIHRoYXQgdGhpcyB3aWxsDQo+Pj4+Pj4+ICAg cHJvdmlkZSBiaWQtZG93bg0KPj4+Pj4+Pj4+ICAgIHByb3RlY3Rpb24gZm9yDQo+Pj4+Pj4+Pj4+ PiB0aGUNCj4+Pj4+Pj4+Pj4+PiBNQUMgaW4gdGhlIGZ1dHVyZSBmb3IgdGhlIHJlYXNvbnMgSSBp bmRpY2F0ZQ0KPj4+Pj4+PiAgIGFib3ZlLg0KPj4+Pj4+Pj4+Pj4+DQo+Pj4+Pj4+Pj4+Pj4gSWYg eW91IHRoaW5rIHRoaXMgZG9lcyBzb21ldGhpbmcgdXNlZnVsLA0KPj4+Pj4+PiAgIHBsZWFzZSBz aG93IG1lIGFuDQo+Pj4+Pj4+Pj4gICAgZXhhbXBsZSBhdHRhY2sNCj4+Pj4+Pj4+Pj4+PiBhbmQg aG93IHRoaXMgZml4ZXMgaXQuIE5vdGUgdGhhdCBpdCdzIG5vdA0KPj4+Pj4+PiAgIGdlbmVyYWxs eQ0KPj4+Pj4+Pj4gICAgICAgICB1c2VmdWwgdG8NCj4+Pj4+Pj4+PiAgICBqdXN0IGJpZA0KPj4+ Pj4+Pj4+Pj4gZG93bg0KPj4+Pj4+Pj4+Pj4+IHRoZSBNQUMgaXRzZWxmIHVubGVzcyB0aGUgTUFD IHlvdSBiaWQgZG93biB0bw0KPj4+Pj4+PiAgIGlzIHdlYWsNCj4+Pj4+Pj4+ICAgICAgICAgZW5v dWdoIHRvDQo+Pj4+Pj4+Pj4gICAgZXhwbG9pdA0KPj4+Pj4+Pj4+Pj4gaW4NCj4+Pj4+Pj4+Pj4+ PiBzb21lIG90aGVyIHdheS4NCj4+Pj4+Pj4+Pj4+DQo+Pj4+Pj4+Pj4+PiBJIGRvIG5vdCBrbm93 IHdoYXQgd2Vha25lc3NlcyB3aWxsIGJlDQo+Pj4+Pj4+ICAgZGlzY292ZXJlZCBpbiB0aGUNCj4+ Pj4+Pj4+ICAgICAgICAgZnV0dXJlLg0KPj4+Pj4+Pj4+ICAgIEkgYW0gYWxzbw0KPj4+Pj4+Pj4+ Pj4gcHJldHR5IHN1cmUgdGhhdCB0aGUgY29zdCBvZiBub3QgdXNpbmcgdGhhdA0KPj4+Pj4+PiAg IG1lY2hhbmlzbQ0KPj4+Pj4+Pj4gICAgICAgICBpcyB2ZXJ5DQo+Pj4+Pj4+Pj4gICAgY2xvc2Ug dG8gMC4NCj4+Pj4+Pj4+Pj4+IFdoYXQgSSBhbSBzdXJlIG9mIGlzIHRoYXQgdGhlIGNvc3Qgb2YN Cj4+Pj4+Pj4gICByZWVuZ2luZWVyaW5nIGENCj4+Pj4+Pj4+ICAgICAgICAgbmV3IGJpZGRvd24N Cj4+Pj4+Pj4+Pj4+IHByb3RlY3Rpb24gbWVjaGFuaXNtIGlmIHdlIGV2ZXIgbmVlZCBpdCB3aWxs IGJlDQo+Pj4+Pj4+ICAgaGlnaC4NCj4+Pj4+Pj4+ICAgICAgICAgV2UgYWxyZWFkeQ0KPj4+Pj4+ Pj4+ICAgIHdlbnQNCj4+Pj4+Pj4+Pj4+IHRocm91Z2ggdGhlIHBhaW5zIG9mIGRlc2lnbmluZyBv bmUgZm9yIHRoZQ0KPj4+IHBhc3N3b3JkDQo+Pj4+Pj4+PiAgICAgICAgIGFsZ29yaXRobSwgc28N Cj4+Pj4+Pj4+PiAgICB3aHkgbm90DQo+Pj4+Pj4+Pj4+PiBleHRlbmQgaXQgc28gaXQgY2FuIGJl IHVzZWQgaW4gdGhlIGFmdGVybWF0aCBvZg0KPj4+IHRoZQ0KPj4+Pj4+Pj4gICAgICAgICBuZXh0 IFNub3dkZW4NCj4+Pj4+Pj4+PiAgICBmYWNlcGFsbQ0KPj4+Pj4+Pj4+Pj4gbW9tZW50Pw0KPj4+ Pj4+Pj4+Pj4NCj4+Pj4+Pj4+Pj4+PiBBZ2FpbiwgaGFwcHkgdG8gaGF2ZSBhIGNhbGwgdG8gd2Fs ayB0aG91Z2gNCj4+Pj4+Pj4gICB0aGlzIGlmIHRoYXQNCj4+Pj4+Pj4+Pj4+PiBoZWxwcy4NCj4+ Pj4+Pj4+Pj4+Pg0KPj4+Pj4+Pj4+Pj4+IC1Fa3INCj4+Pj4+Pj4+Pj4+Pg0KPj4+Pj4+Pj4+Pj4+ DQo+Pj4+Pj4+Pj4+Pj4NCj4+Pj4+Pj4+Pj4+Pg0KPj4+Pj4+Pj4+Pj4+Pj4NCj4+Pj4+Pj4+Pj4+ Pj4+IFlvdSBtaWdodCB0aGluayB0aGF0IHRoZXJlIHdhcyBhIE1BQyB3aGljaA0KPj4+Pj4+PiAg IHdhcyBlYXNpZXIgdG8NCj4+Pj4+Pj4+PiAgICByZXZlcnNlIHRvDQo+Pj4+Pj4+Pj4+PiBmaW5k DQo+Pj4+Pj4+Pj4+Pj4+PiB0aGUgb3JpZ2luYWwNCj4+Pj4+Pj4+Pj4+Pj4+IHBhc3N3b3JkLCBi dXQgdGhlIGRlZmVuc2UgeW91IGhhdmUgaGVyZQ0KPj4+Pj4+PiAgIGRvZXNuJ3QgaGVscA0KPj4+ Pj4+Pj4gICAgICAgICB3aXRoIHRoYXQNCj4+Pj4+Pj4+PiAgICBiZWNhdXNlDQo+Pj4+Pj4+Pj4+ Pj4+IHRoZQ0KPj4+Pj4+Pj4+Pj4+Pj4gb24tcGF0aCBhdHRhY2tlciBjYW4gZG8gYSBiaWQtZG93 biBhbmQgdXNlIHRoZQ0KPj4+Pj4+Pj4gICAgICAgICBjbGllbnQgYXMgYSBNQUMNCj4+Pj4+Pj4+ PiAgICBvcmFjbGUNCj4+Pj4+Pj4+Pj4+IGZvcg0KPj4+Pj4+Pj4+Pj4+Pj4gYW55IE1BQyB0aGUg Y2xpZW50IHN1cHBvcnRzLg0KPj4+Pj4+Pj4+Pj4+Pj4NCj4+Pj4+Pj4+Pj4+Pj4+IFNvLCBJIHN0 aWxsIGRvbid0IHVuZGVyc3RhbmQgd2hhdCB0aGlzIGlzDQo+Pj4+Pj4+ICAgc3VwcG9zZWQNCj4+ Pj4+Pj4+ICAgICAgICAgdG8gZG8uIEhhcHB5IHRvDQo+Pj4+Pj4+Pj4+PiBoYXZlIGENCj4+Pj4+ Pj4+Pj4+Pj4+IGNhbGwgaWYgeW91DQo+Pj4+Pj4+Pj4+Pj4+PiB0aGluayB0aGF0IGhlbHBzDQo+ Pj4+Pj4+Pj4+Pj4+Pg0KPj4+Pj4+Pj4+Pj4+Pj4gLUVrcg0KPj4+Pj4+Pj4+Pj4+Pj4NCj4+Pj4+ Pj4+Pj4+Pj4+DQo+Pj4+Pj4+Pj4+Pj4+Pg0KPj4+Pj4+Pj4+Pj4+Pj4NCj4+Pj4+Pj4+Pj4+Pj4+ IE9uIE1vbiwgSnVuIDE4LCAyMDE4IGF0IDM6NDAgQU0sIEdvbnphbG8NCj4+Pj4+Pj4gICBDYW1h cmlsbG8gPA0KPj4+Pj4+Pj4+Pj4+Pj4gR29uemFsby5DYW1hcmlsbG9AZXJpY3Nzb24uY29tPG1h aWx0bzpHb256YWxvLkNhbWFyaWxsb0Blcmljc3Nvbi5jb20+DQo+Pj4+Pj4+ICAgPG1haWx0bzpH b256YWxvLkNhbWFyaWxsb0Blcmljc3Nvbi5jb208bWFpbHRvOkdvbnphbG8uQ2FtYXJpbGxvQGVy aWNzc29uLmNvbT4+DQo+Pj4+Pj4+PiAgICAgICAgIDxtYWlsdG86R29uemFsby5DYW1hcmlsbG9A ZXJpY3Nzb24uY29tPG1haWx0bzpHb256YWxvLkNhbWFyaWxsb0Blcmljc3Nvbi5jb20+DQo+Pj4+ Pj4+ICAgPG1haWx0bzpHb256YWxvLkNhbWFyaWxsb0Blcmljc3Nvbi5jb208bWFpbHRvOkdvbnph bG8uQ2FtYXJpbGxvQGVyaWNzc29uLmNvbT4+Pg0KPj4+Pj4+Pj4+ICAgIDxtYWlsdG86R29uemFs by5DYW1hcmlsbG9AZXJpY3Nzb24uY29tPG1haWx0bzpHb256YWxvLkNhbWFyaWxsb0Blcmljc3Nv bi5jb20+DQo+Pj4+Pj4+ICAgPG1haWx0bzpHb256YWxvLkNhbWFyaWxsb0Blcmljc3Nvbi5jb208 bWFpbHRvOkdvbnphbG8uQ2FtYXJpbGxvQGVyaWNzc29uLmNvbT4+DQo+Pj4+Pj4+PiAgICAgICAg IDxtYWlsdG86R29uemFsby5DYW1hcmlsbG9AZXJpY3Nzb24uY29tPG1haWx0bzpHb256YWxvLkNh bWFyaWxsb0Blcmljc3Nvbi5jb20+DQo+Pj4+Pj4+ICAgPG1haWx0bzpHb256YWxvLkNhbWFyaWxs b0Blcmljc3Nvbi5jb208bWFpbHRvOkdvbnphbG8uQ2FtYXJpbGxvQGVyaWNzc29uLmNvbT4+Pj4+ IHdyb3RlOg0KPj4+Pj4+Pj4+Pj4+Pj4NCj4+Pj4+Pj4+Pj4+Pj4+PiBNYXJjLCBFcmljLA0KPj4+ Pj4+Pj4+Pj4+Pj4+DQo+Pj4+Pj4+Pj4+Pj4+Pj4gd2hhdCBpcyB0aGUgc3RhdHVzIG9mIHRoaXMg ZGlzY3Vzc2lvbj8NCj4+Pj4+Pj4+Pj4+Pj4+Pg0KPj4+Pj4+Pj4+Pj4+Pj4+IFRoYW5rcywNCj4+ Pj4+Pj4+Pj4+Pj4+Pg0KPj4+Pj4+Pj4+Pj4+Pj4+IEdvbnphbG8NCj4+Pj4+Pj4+Pj4+Pj4+Pg0K Pj4+Pj4+Pj4+Pj4+Pj4+PiBPbiAwNC8wNS8yMDE4IDI6MzUgQU0sIEVyaWMgUmVzY29ybGEgd3Jv dGU6DQo+Pj4+Pj4+Pj4+Pj4+Pj4+DQo+Pj4+Pj4+Pj4+Pj4+Pj4+DQo+Pj4+Pj4+Pj4+Pj4+Pj4+ IE9uIE1vbiwgQXByIDIzLCAyMDE4IGF0IDExOjE2IEFNLCBNYXJjDQo+Pj4+Pj4+PiAgICAgICAg IFBldGl0LUh1Z3VlbmluIDwNCj4+Pj4+Pj4+Pj4+Pj4gcGV0aXRodWdAYWNtLm9yZzxtYWlsdG86 cGV0aXRodWdAYWNtLm9yZz4gPG1haWx0bzpwZXRpdGh1Z0BhY20ub3JnPG1haWx0bzpwZXRpdGh1 Z0BhY20ub3JnPj4NCj4+Pj4+Pj4gICA8bWFpbHRvOnBldGl0aHVnQGFjbS5vcmc8bWFpbHRvOnBl dGl0aHVnQGFjbS5vcmc+IDxtYWlsdG86cGV0aXRodWdAYWNtLm9yZzxtYWlsdG86cGV0aXRodWdA YWNtLm9yZz4+Pg0KPj4+Pj4+Pj4gICAgICAgICA8bWFpbHRvOnBldGl0aHVnQGFjbS5vcmc8bWFp bHRvOnBldGl0aHVnQGFjbS5vcmc+IDxtYWlsdG86cGV0aXRodWdAYWNtLm9yZzxtYWlsdG86cGV0 aXRodWdAYWNtLm9yZz4+DQo+Pj4+Pj4+ICAgPG1haWx0bzpwZXRpdGh1Z0BhY20ub3JnPG1haWx0 bzpwZXRpdGh1Z0BhY20ub3JnPiA8bWFpbHRvOnBldGl0aHVnQGFjbS5vcmc8bWFpbHRvOnBldGl0 aHVnQGFjbS5vcmc+Pj4+DQo+Pj4+Pj4+Pj4+Pj4+Pj4+IDxtYWlsdG86cGV0aXRodWdAYWNtLm9y ZzxtYWlsdG86cGV0aXRodWdAYWNtLm9yZz4NCj4+Pj4+Pj4gICA8bWFpbHRvOnBldGl0aHVnQGFj bS5vcmc8bWFpbHRvOnBldGl0aHVnQGFjbS5vcmc+PiA8bWFpbHRvOnBldGl0aHVnQGFjbS5vcmc8 bWFpbHRvOnBldGl0aHVnQGFjbS5vcmc+DQo+Pj4+Pj4+ICAgPG1haWx0bzpwZXRpdGh1Z0BhY20u b3JnPG1haWx0bzpwZXRpdGh1Z0BhY20ub3JnPj4+DQo+Pj4+Pj4+PiAgICAgICAgIDxtYWlsdG86 cGV0aXRodWdAYWNtLm9yZzxtYWlsdG86cGV0aXRodWdAYWNtLm9yZz4gPG1haWx0bzpwZXRpdGh1 Z0BhY20ub3JnPG1haWx0bzpwZXRpdGh1Z0BhY20ub3JnPj4NCj4+Pj4+Pj4gICA8bWFpbHRvOnBl dGl0aHVnQGFjbS5vcmc8bWFpbHRvOnBldGl0aHVnQGFjbS5vcmc+IDxtYWlsdG86cGV0aXRodWdA YWNtLm9yZzxtYWlsdG86cGV0aXRodWdAYWNtLm9yZz4+Pj4+PiB3cm90ZToNCj4+Pj4+Pj4+Pj4+ Pj4+Pj4NCj4+Pj4+Pj4+Pj4+Pj4+Pj4gICAgT24gMDQvMjIvMjAxOCAwNToyMiBQTSwgRXJpYyBS ZXNjb3JsYQ0KPj4+Pj4+PiAgIHdyb3RlOg0KPj4+Pj4+Pj4+Pj4+Pj4+Pj4gT24gU3VuLCBBcHIg MjIsIDIwMTggYXQgMjowMiBQTSwgTWFyYw0KPj4+Pj4+Pj4gICAgICAgICBQZXRpdC1IdWd1ZW5p biA8DQo+Pj4+Pj4+Pj4+Pj4+Pj4gcGV0aXRodWdAYWNtLm9yZzxtYWlsdG86cGV0aXRodWdAYWNt Lm9yZz4gPG1haWx0bzpwZXRpdGh1Z0BhY20ub3JnPG1haWx0bzpwZXRpdGh1Z0BhY20ub3JnPj4N Cj4+Pj4+Pj4gICA8bWFpbHRvOnBldGl0aHVnQGFjbS5vcmc8bWFpbHRvOnBldGl0aHVnQGFjbS5v cmc+IDxtYWlsdG86cGV0aXRodWdAYWNtLm9yZzxtYWlsdG86cGV0aXRodWdAYWNtLm9yZz4+Pg0K Pj4+Pj4+Pj4gICAgICAgICA8bWFpbHRvOnBldGl0aHVnQGFjbS5vcmc8bWFpbHRvOnBldGl0aHVn QGFjbS5vcmc+IDxtYWlsdG86cGV0aXRodWdAYWNtLm9yZzxtYWlsdG86cGV0aXRodWdAYWNtLm9y Zz4+DQo+Pj4+Pj4+ICAgPG1haWx0bzpwZXRpdGh1Z0BhY20ub3JnPG1haWx0bzpwZXRpdGh1Z0Bh Y20ub3JnPiA8bWFpbHRvOnBldGl0aHVnQGFjbS5vcmc8bWFpbHRvOnBldGl0aHVnQGFjbS5vcmc+ Pj4+DQo+Pj4+Pj4+Pj4gICAgPG1haWx0bzpwZXRpdGh1Z0BhY20ub3JnPG1haWx0bzpwZXRpdGh1 Z0BhY20ub3JnPiA8bWFpbHRvOnBldGl0aHVnQGFjbS5vcmc8bWFpbHRvOnBldGl0aHVnQGFjbS5v cmc+Pg0KPj4+Pj4+PiAgIDxtYWlsdG86cGV0aXRodWdAYWNtLm9yZzxtYWlsdG86cGV0aXRodWdA YWNtLm9yZz4gPG1haWx0bzpwZXRpdGh1Z0BhY20ub3JnPG1haWx0bzpwZXRpdGh1Z0BhY20ub3Jn Pj4+DQo+Pj4+Pj4+PiAgICAgICAgIDxtYWlsdG86cGV0aXRodWdAYWNtLm9yZzxtYWlsdG86cGV0 aXRodWdAYWNtLm9yZz4gPG1haWx0bzpwZXRpdGh1Z0BhY20ub3JnPG1haWx0bzpwZXRpdGh1Z0Bh Y20ub3JnPj4NCj4+Pj4+Pj4gICA8bWFpbHRvOnBldGl0aHVnQGFjbS5vcmc8bWFpbHRvOnBldGl0 aHVnQGFjbS5vcmc+IDxtYWlsdG86cGV0aXRodWdAYWNtLm9yZzxtYWlsdG86cGV0aXRodWdAYWNt Lm9yZz4+Pj4+Pg0KPj4+Pj4+Pj4+Pj4+Pj4+Pj4gd3JvdGU6DQo+Pj4+Pj4+Pj4+Pj4+Pj4+Pg0K Pj4+Pj4+Pj4+Pj4+Pj4+Pj4+DQo+Pj4+Pj4+Pj4+Pj4+Pj4+Pj4+PiAgICAgRm9yIGEgcmVxdWVz dCBvciBpbmRpY2F0aW9uDQo+Pj4+Pj4+ICAgbWVzc2FnZSwNCj4+Pj4+Pj4+ICAgICAgICAgdGhl IGFnZW50DQo+Pj4+Pj4+Pj4gICAgTVVTVA0KPj4+Pj4+Pj4+Pj4+Pj4+IGluY2x1ZGUgdGhlDQo+ Pj4+Pj4+Pj4+Pj4+Pj4+Pj4+PiAgICAgVVNFUk5BTUUsDQo+Pj4+Pj4+ICAgTUVTU0FHRS1JTlRF R1JJVFktU0hBMjU2LCBhbmQNCj4+Pj4+Pj4+Pj4+IE1FU1NBR0UtSU5URUdSSVRZDQo+Pj4+Pj4+ Pj4+Pj4+Pj4+Pj4gYXR0cmlidXRlcw0KPj4+Pj4+Pj4+Pj4+Pj4+Pj4+Pj4gICAgIGluIHRoZSBt ZXNzYWdlIHVubGVzcyB0aGUgYWdlbnQNCj4+Pj4+Pj4+ICAgICAgICAga25vd3MgZnJvbSBhbg0K Pj4+Pj4+Pj4+ICAgIGV4dGVybmFsDQo+Pj4+Pj4+Pj4+Pj4+Pj4gaW5kaWNhdGlvbg0KPj4+Pj4+ Pj4+Pj4+Pj4+Pj4+Pj4gICAgIHdoaWNoIG1lc3NhZ2UgaW50ZWdyaXR5DQo+Pj4+Pj4+ICAgYWxn b3JpdGhtIGlzDQo+Pj4+Pj4+PiAgICAgICAgIHN1cHBvcnRlZA0KPj4+Pj4+Pj4+ICAgIGJ5IGJv dGgNCj4+Pj4+Pj4+Pj4+Pj4+PiBhZ2VudHMuICBJbg0KPj4+Pj4+Pj4+Pj4+Pj4+Pj4+Pj4gICAg IHRoaXMgY2FzZSBlaXRoZXINCj4+Pj4+Pj4gICBNRVNTQUdFLUlOVEVHUklUWSBvcg0KPj4+Pj4+ Pj4+Pj4+Pj4+IE1FU1NBR0UtSU5URUdSSVRZLVNIQTI1NiBNVVNUDQo+Pj4+Pj4+Pj4+Pj4+Pj4+ Pj4+PiAgICAgYmUgaW5jbHVkZWQgaW4gYWRkaXRpb24gdG8NCj4+Pj4+Pj4+ICAgICAgICAgVVNF Uk5BTUUuICBUaGUgSE1BQw0KPj4+Pj4+Pj4+ICAgIGZvciB0aGUNCj4+Pj4+Pj4+Pj4+Pj4+PiBN RVNTQUdFLQ0KPj4+Pj4+Pj4+Pj4+Pj4+Pj4+Pg0KPj4+Pj4+Pj4+Pj4+Pj4+Pj4+PiBUaGlzIHRl eHQgYXBwZWFycyB0byBjb25mbGljdCB3aXRoDQo+Pj4+Pj4+ICAgUyA3LjMgb2YNCj4+Pj4+Pj4+ PiAgICA1MjQ1LWJpcywgd2hpY2gNCj4+Pj4+Pj4+Pj4+Pj4gc2F5czoNCj4+Pj4+Pj4+Pj4+Pj4+ Pj4+Pg0KPj4+Pj4+Pj4+Pj4+Pj4+Pj4+IFt0ZXh0IG1pc3NpbmddDQo+Pj4+Pj4+Pj4+Pj4+Pj4+ Pj4NCj4+Pj4+Pj4+Pj4+Pj4+Pj4+PiBIbW0sIG5vLCBSRkMyNDViaXMgaXMgc3RpbGwNCj4+PiBy ZWZlcmVuY2luZw0KPj4+Pj4+Pj4gICAgICAgICBSRkM1Mzg5LCBzbyB0aGUNCj4+Pj4+Pj4+Pj4+ Pj4gcHJvY2VkdXJlDQo+Pj4+Pj4+Pj4+Pj4+Pj4gZm9yDQo+Pj4+Pj4+Pj4+Pj4+Pj4+Pj4gc3R1 bmJpcyBkb2VzIG5vdCBhcHBseS4NCj4+Pj4+Pj4+Pj4+Pj4+Pj4+Pg0KPj4+Pj4+Pj4+Pj4+Pj4+ Pj4NCj4+Pj4+Pj4+Pj4+Pj4+Pj4+IEkgaGVhciB3aGF0IHlvdSdyZSBzYXlpbmcsIGJ1dA0KPj4+ Pj4+PiAgIHB1Ymxpc2hpbmcgdHdvDQo+Pj4+Pj4+Pj4gICAgZG9jdW1lbnRzIGF0IHRoZQ0KPj4+ Pj4+Pj4+Pj4+Pj4+IHNhbWUgdGltZQ0KPj4+Pj4+Pj4+Pj4+Pj4+Pj4gd2hpY2gNCj4+Pj4+Pj4+ Pj4+Pj4+Pj4+IG1ha2UgY29udHJhcnkgcmVjb21tZW5kYXRpb25zIGFib3V0DQo+Pj4+Pj4+ICAg dGhlIHNhbWUNCj4+Pj4+Pj4+ICAgICAgICAgYmFzaWMNCj4+Pj4+Pj4+PiAgICBwcm90b2NvbCBp cw0KPj4+Pj4+Pj4+Pj4+Pj4+IHVuLWdvb2QuDQo+Pj4+Pj4+Pj4+Pj4+Pj4+DQo+Pj4+Pj4+Pj4+ Pj4+Pj4+ICAgIFN1cmUsIGJ1dCB3b3VsZG4ndCBpdCBiZSBzaW1wbGVyIHRvIGhhdmUNCj4+Pj4+ Pj4+ICAgICAgICAgcmZjNTI0NWJpcw0KPj4+Pj4+Pj4+ICAgIHVzaW5nIHN0dW5iaXMNCj4+Pj4+ Pj4+Pj4+Pj4+Pj4gICAgYW5kIGhhdmUgdGhlbSB1cGRhdGluZyB0aGVpciB0ZXh0LA0KPj4+Pj4+ PiAgIG1vcmUgdGhhbg0KPj4+Pj4+Pj4gICAgICAgICBhZGRpbmcgc29tZQ0KPj4+Pj4+Pj4+ICAg IHRvcnR1b3VzDQo+Pj4+Pj4+Pj4+Pj4+Pj4+ICAgIHRleHQgaW4gc3R1bmJpcz8NCj4+Pj4+Pj4+ Pj4+Pj4+Pj4NCj4+Pj4+Pj4+Pj4+Pj4+Pj4+DQo+Pj4+Pj4+Pj4+Pj4+Pj4+Pg0KPj4+Pj4+Pj4+ Pj4+Pj4+Pj4+PiAgICAgVGhlIFNUVU4gdXNhZ2UgbXVzdCBzcGVjaWZ5DQo+Pj4gd2hpY2gNCj4+ Pj4+Pj4+ICAgICAgICAgdHJhbnNwb3J0DQo+Pj4+Pj4+Pj4gICAgcHJvdG9jb2wgaXMNCj4+Pj4+ Pj4+Pj4+Pj4+PiB1c2VkLCBhbmQNCj4+Pj4+Pj4+Pj4+Pj4+Pj4+PiBob3cNCj4+Pj4+Pj4+Pj4+ Pj4+Pj4+Pj4+ICAgICB0aGUgYWdlbnQgZGV0ZXJtaW5lcyB0aGUgSVANCj4+Pj4+Pj4gICBhZGRy ZXNzDQo+Pj4+Pj4+PiAgICAgICAgIGFuZCBwb3J0DQo+Pj4+Pj4+Pj4gICAgb2YgdGhlDQo+Pj4+ Pj4+Pj4+Pj4+Pj4gcmVjaXBpZW50Lg0KPj4+Pj4+Pj4+Pj4+Pj4+Pj4+Pj4gICAgIFNlY3Rpb24g OCBkZXNjcmliZXMgYSBETlMtYmFzZWQNCj4+Pj4+Pj4+ICAgICAgICAgbWV0aG9kIG9mDQo+Pj4+ Pj4+Pj4gICAgZGV0ZXJtaW5pbmcNCj4+Pj4+Pj4+Pj4+IHRoZQ0KPj4+Pj4+Pj4+Pj4+Pj4+IElQ DQo+Pj4+Pj4+Pj4+Pj4+Pj4+Pj4gYWRkcmVzcw0KPj4+Pj4+Pj4+Pj4+Pj4+Pj4+Pj4gICAgIGFu ZCBwb3J0IG9mIGEgc2VydmVyIHRoYXQgYQ0KPj4+Pj4+PiAgIHVzYWdlDQo+Pj4+Pj4+PiAgICAg ICAgIG1heSBlbGVjdCB0bw0KPj4+Pj4+Pj4+ICAgIHVzZS4NCj4+Pj4+Pj4+Pj4+IFNUVU4NCj4+ Pj4+Pj4+Pj4+Pj4+PiBtYXkgYmUNCj4+Pj4+Pj4+Pj4+Pj4+Pj4+PiB1c2VkDQo+Pj4+Pj4+Pj4+ Pj4+Pj4+Pj4+PiAgICAgd2l0aCBhbnljYXN0IGFkZHJlc3NlcywgYnV0DQo+Pj4gb25seQ0KPj4+ Pj4+Pj4gICAgICAgICB3aXRoIFVEUCBhbmQNCj4+Pj4+Pj4+PiAgICBpbiB1c2FnZXMNCj4+Pj4+ Pj4+Pj4+Pj4+PiB3aGVyZQ0KPj4+Pj4+Pj4+Pj4+Pj4+Pj4+Pj4gICAgIGF1dGhlbnRpY2F0aW9u IGlzIG5vdCB1c2VkLg0KPj4+Pj4+Pj4+Pj4+Pj4+Pj4+Pg0KPj4+Pj4+Pj4+Pj4+Pj4+Pj4+PiBX aHkgdGhpcyByZXN0cmljdGlvbj8gWW91IHNob3VsZA0KPj4+Pj4+PiAgIGJlIGFibGUNCj4+Pj4+ Pj4+ICAgICAgICAgdG8gdXNlDQo+Pj4+Pj4+Pj4gICAgYW55Y2FzdCB3aXRoDQo+Pj4+Pj4+Pj4+ Pj4+Pj4gbG9uZy10ZXJtDQo+Pj4+Pj4+Pj4+Pj4+Pj4+Pj4+IEFVVEggZm9yIChzYXkpIFRVUk4u DQo+Pj4+Pj4+Pj4+Pj4+Pj4+Pj4NCj4+Pj4+Pj4+Pj4+Pj4+Pj4+Pg0KPj4+Pj4+Pj4gICAgICAg ICBodHRwczovL3d3dy5pZXRmLm9yZy9tYWlsLWFyY2hpdmUvd2ViL2JlaGF2ZS9jdXJyZW50Lw0K Pj4+Pj4+Pj4+Pj4+Pj4+IG1zZzAzNTgyLmh0bWwNCj4+Pj4+Pj4+Pj4+Pj4+Pj4NCj4+Pj4+Pj4+ ICAgICAgICAgIDxodHRwczovL3d3dy5pZXRmLm9yZy9tYWlsLWFyY2hpdmUvd2ViL2JlaGF2ZS9j dXJyZW50Lw0KPj4+Pj4+Pj4+Pj4+PiBtc2cwMzU4Mi5odG1sPg0KPj4+Pj4+Pj4+Pj4+Pj4+Pj4+ DQo+Pj4+Pj4+Pj4+Pj4+Pj4+Pj4gSSB0aGluayB0aGF0IHRoZSBkZWNpc2lvbiBvZg0KPj4+Pj4+ PiAgIHBlcm1pdHRpbmcgQW55Y2FzdA0KPj4+Pj4+Pj4+ICAgIHNob3VsZCBiZSBsZWZ0DQo+Pj4+ Pj4+Pj4+Pj4+IHRvDQo+Pj4+Pj4+Pj4+Pj4+Pj4gZWFjaA0KPj4+Pj4+Pj4+Pj4+Pj4+Pj4+IFNU VU4gVXNhZ2UuICBCYXNpYyBTVFVOIFVzYWdlIGRvZXMNCj4+Pj4+Pj4gICBub3QgdXNlDQo+Pj4+ Pj4+Pj4gICAgYXV0aGVudGljYXRpb24gYW5kDQo+Pj4+Pj4+Pj4+Pj4+IHVzZQ0KPj4+Pj4+Pj4+ Pj4+Pj4+IG9ubHkgYQ0KPj4+Pj4+Pj4+Pj4+Pj4+Pj4+IG9uZSByb3VuZCB0cmlwIGZvciB0aGUg QmluZGluZw0KPj4+Pj4+PiAgIHRyYW5zYWN0aW9uLCBzbw0KPj4+Pj4+Pj4+ICAgIFVuaWNhc3Qg Y2FuIGJlDQo+Pj4+Pj4+Pj4+Pj4+Pj4gdXNlZC4NCj4+Pj4+Pj4+Pj4+Pj4+Pj4+Pg0KPj4+Pj4+ Pj4+Pj4+Pj4+Pj4NCj4+Pj4+Pj4+Pj4+Pj4+Pj4+PiBPVE9ILCBUVVJOIGFuZCBJQ0Ugc2hvdWxk IHByb2JhYmx5IHNheQ0KPj4+Pj4+Pj4gICAgICAgICBzb21ldGhpbmcNCj4+Pj4+Pj4+PiAgICBh Ym91dCB0aGF0LA0KPj4+Pj4+Pj4+Pj4gc28NCj4+Pj4+Pj4+Pj4+Pj4gSQ0KPj4+Pj4+Pj4+Pj4+ Pj4+IGFkZGVkIGENCj4+Pj4+Pj4+Pj4+Pj4+Pj4+PiBuZXcgYnVsbGV0IHBvaW50IGluIFNlY3Rp b24gMTM6DQo+Pj4+Pj4+Pj4+Pj4+Pj4+Pj4NCj4+Pj4+Pj4+Pj4+Pj4+Pj4+PiAgIG8gIElmIEFu eWNhc3QgYWRkcmVzc2VzIGNhbiBiZQ0KPj4+Pj4+PiAgIHVzZWQgZm9yDQo+Pj4+Pj4+PiAgICAg ICAgIHRoZSBzZXJ2ZXINCj4+Pj4+Pj4+PiAgICBpbiBjYXNlDQo+Pj4+Pj4+Pj4+Pj4+IFRDUA0K Pj4+Pj4+Pj4+Pj4+Pj4+IG9yDQo+Pj4+Pj4+Pj4+Pj4+Pj4+Pj4gICAgICBUTFMtb3Zlci1UQ1As IG9yDQo+Pj4+Pj4+ICAgYXV0aGVudGljYXRpb24gYXJlIHVzZWQuDQo+Pj4+Pj4+Pj4+Pj4+Pj4+ Pj4NCj4+Pj4+Pj4+Pj4+Pj4+Pj4+DQo+Pj4+Pj4+Pj4+Pj4+Pj4+PiBBcmUgeW91IGxlYXZpbmcg dGhpcyB0ZXh0IGluPyBUaGF0DQo+Pj4gc2VlbXMNCj4+Pj4+Pj4+ICAgICAgICAgdmVyeSBjb25m dXNpbmcuDQo+Pj4+Pj4+Pj4+Pj4+Pj4+DQo+Pj4+Pj4+Pj4+Pj4+Pj4+ICAgIEluIGlzb2xhdGlv biB5ZXMsIGJ1dCBJIHRoaW5rIGl0IG1ha2VzDQo+Pj4+Pj4+ICAgc2Vuc2UNCj4+Pj4+Pj4+ICAg ICAgICAgd2hpY2ggdGhlIHRleHQNCj4+Pj4+Pj4+Pj4+IGJlZm9yZQ0KPj4+Pj4+Pj4+Pj4+Pj4+ PiAgICB0aGUgYnVsbGV0IHBvaW50czoNCj4+Pj4+Pj4+Pj4+Pj4+Pj4NCj4+Pj4+Pj4+Pj4+Pj4+ Pj4gICAgICAgQSBTVFVOIHVzYWdlIGRlZmluZXMgaG93IFNUVU4gaXMNCj4+Pj4+Pj4gICBhY3R1 YWxseQ0KPj4+Pj4+Pj4gICAgICAgICB1dGlsaXplZCAtLQ0KPj4+Pj4+Pj4+ICAgIHdoZW4gdG8N Cj4+Pj4+Pj4+Pj4+Pj4gc2VuZA0KPj4+Pj4+Pj4+Pj4+Pj4+PiAgICAgICByZXF1ZXN0cywgd2hh dCB0byBkbyB3aXRoIHRoZQ0KPj4+Pj4+PiAgIHJlc3BvbnNlcywNCj4+Pj4+Pj4+ICAgICAgICAg YW5kIHdoaWNoDQo+Pj4+Pj4+Pj4gICAgb3B0aW9uYWwNCj4+Pj4+Pj4+Pj4+Pj4+Pj4gICAgICAg cHJvY2VkdXJlcyBkZWZpbmVkIGhlcmUgKG9yIGluIGFuDQo+Pj4+Pj4+ICAgZXh0ZW5zaW9uDQo+ Pj4+Pj4+PiAgICAgICAgIHRvIFNUVU4pDQo+Pj4+Pj4+Pj4gICAgYXJlIHRvIGJlDQo+Pj4+Pj4+ Pj4+Pj4+Pj4gdXNlZC4NCj4+Pj4+Pj4+Pj4+Pj4+Pj4gICAgICAgQSB1c2FnZSBhbHNvIGRlZmlu ZXM6DQo+Pj4+Pj4+Pj4+Pj4+Pj4+DQo+Pj4+Pj4+Pj4+Pj4+Pj4+ICAgIFsuLi5dDQo+Pj4+Pj4+ Pj4+Pj4+Pj4+DQo+Pj4+Pj4+Pj4+Pj4+Pj4+ICAgICAgIG8gIElmIEFueWNhc3QgYWRkcmVzc2Vz IGNhbiBiZSB1c2VkDQo+Pj4+Pj4+ICAgZm9yIHRoZQ0KPj4+Pj4+Pj4gICAgICAgICBzZXJ2ZXIg aW4NCj4+Pj4+Pj4+PiAgICBjYXNlIFRDUA0KPj4+Pj4+Pj4+Pj4+PiBvcg0KPj4+Pj4+Pj4+Pj4+ Pj4+PiAgICAgICAgICBUTFMtb3Zlci1UQ1AsIG9yIGF1dGhlbnRpY2F0aW9uDQo+Pj4+Pj4+ICAg YXJlIHVzZWQuDQo+Pj4+Pj4+Pj4+Pj4+Pj4+DQo+Pj4+Pj4+Pj4+Pj4+Pj4+DQo+Pj4+Pj4+Pj4+ Pj4+Pj4+IFdoYXQgaXMgdGhlIG5lZWQgZm9yIHRoZSByZXN0cmljdGlvbiBhdCBhbGwNCg0KX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX18NCnRyYW0gbWFpbGlu ZyBsaXN0DQp0cmFtQGlldGYub3JnPG1haWx0bzp0cmFtQGlldGYub3JnPg0KaHR0cHM6Ly93d3cu aWV0Zi5vcmcvbWFpbG1hbi9saXN0aW5mby90cmFtDQo= --_000_1493CD0DB9A64B22968D6B88CE5AABD8ciscocom_ Content-Type: text/html; charset="utf-8" Content-Transfer-Encoding: base64 PGh0bWw+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIgY29udGVudD0i dGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjwvaGVhZD4NCjxib2R5IGRpcj0iYXV0byI+DQpF cmljIC0mbmJzcDsNCjxkaXY+PGJyPg0KPC9kaXY+DQo8ZGl2PkZZSSAtIFRoZSBuZXcgLTIxIHZl cnNpb24gaGFzIGJlZW4gcG9zdGVkLiBJdCBpcyByZWFkeSBmb3IgeW91ciByZXZpZXcuPC9kaXY+ DQo8ZGl2Pjxicj4NCjwvZGl2Pg0KPGRpdj4tRzxicj4NCjxicj4NCjxkaXYgZGlyPSJsdHIiPjxi cj4NCjwvZGl2Pg0KPGRpdiBkaXI9Imx0ciI+PGJyPg0KT24gTWFyIDIyLCAyMDE5LCBhdCAxMTox MSBBTSwgU3BlbmNlciBEYXdraW5zIGF0IElFVEYgJmx0OzxhIGhyZWY9Im1haWx0bzpzcGVuY2Vy ZGF3a2lucy5pZXRmQGdtYWlsLmNvbSI+c3BlbmNlcmRhd2tpbnMuaWV0ZkBnbWFpbC5jb208L2E+ Jmd0OyB3cm90ZTo8YnI+DQo8YnI+DQo8L2Rpdj4NCjxibG9ja3F1b3RlIHR5cGU9ImNpdGUiPg0K PGRpdiBkaXI9Imx0ciI+DQo8ZGl2IGRpcj0ibHRyIj4NCjxkaXYgZGlyPSJsdHIiPkRlYXIgSUVT RyBTZWNyZXRhcnkgKGJjYyksJm5ic3A7DQo8ZGl2Pjxicj4NCjwvZGl2Pg0KPGRpdj5QbGVhc2Ug cG9zdCB0aGlzIGRyYWZ0IGR1cmluZyB0aGUgYmxhY2tvdXQgcGVyaW9kIC0gd2UncmUgdHJ5aW5n IHRvIGNsZWFyIFRoZSBMYXN0IERpc2N1c3Mgb24gYSBkb2N1bWVudCBpbiBJRVNHIEV2YWx1YXRp b24gYmVmb3JlIEkgc3RlcCBkb3duLCBzbyB3YW50IHRvIGdpdmUgcGVvcGxlIHRpbWUgdG8gbG9v ayBhdCB0aGUgb2ZmaWNpYWwgLTIxIHZlcnNpb24gcmF0aGVyIHRoYW4gY2xlYXIgYmFzZWQgb24g ZS1tYWlsLiZuYnNwOzwvZGl2Pg0KPGRpdj48YnI+DQo8L2Rpdj4NCjxkaXY+VGhhbmtzITwvZGl2 Pg0KPGRpdj48YnI+DQo8L2Rpdj4NCjxkaXY+U3BlbmNlciwgd2hvIGlzIGtpbmQgb2YgaG9waW5n IHRoYXQgc29tZW9uZSBvbiB0aGUgbmV4dCBJRVNHIGFza3Mgd2h5IHdlIGhhdmUgYSBibGFja291 dCBwb3N0aW5nIHBlcmlvZCBmb3IgZHJhZnRzIGluIElFU0cgRXZhbHVhdGlvbiAtIGJ1dCBJJ20g c3VyZSB5b3UnbGwgYWxsIGRvIHRoZSByaWdodCB0aGluZy48L2Rpdj4NCjwvZGl2Pg0KPGJyPg0K PGRpdiBjbGFzcz0iZ21haWxfcXVvdGUiPg0KPGRpdiBkaXI9Imx0ciIgY2xhc3M9ImdtYWlsX2F0 dHIiPk9uIFRodSwgTWFyIDIxLCAyMDE5IGF0IDc6MjIgUE0gR29uemFsbyBTYWxndWVpcm8gKGdz YWxndWVpKSAmbHQ7PGEgaHJlZj0ibWFpbHRvOmdzYWxndWVpQGNpc2NvLmNvbSI+Z3NhbGd1ZWlA Y2lzY28uY29tPC9hPiZndDsgd3JvdGU6PGJyPg0KPC9kaXY+DQo8YmxvY2txdW90ZSBjbGFzcz0i Z21haWxfcXVvdGUiIHN0eWxlPSJtYXJnaW46MHB4IDBweCAwcHggMC44ZXg7Ym9yZGVyLWxlZnQ6 MXB4IHNvbGlkIHJnYigyMDQsMjA0LDIwNCk7cGFkZGluZy1sZWZ0OjFleCI+DQo8ZGl2Pg0KPGRp diBzdHlsZT0ib3ZlcmZsb3ctd3JhcDogYnJlYWstd29yZDsiPkhpIEVyaWMgLSZuYnNwOw0KPGRp dj48YnI+DQo8L2Rpdj4NCjxkaXY+SeKAmW0gYXR0YWNoaW5nIHRoZSAtMjEgdGhhdCB3aWxsIGJl IHB1Ymxpc2hlZCBvbmNlIHRoZSBJLUQgc3VibWlzc2lvbiB0b29sIG9wZW5zIHVwIChvciBTcGVu Y2VyIGNhbiBvdmVycmlkZSBhbmQgaXQgcHVibGlzaGVkIGJlZm9yZSB0aGVuKS4uJm5ic3A7IEl0 IHVzZXMgeW91ciBwcm9wb3NlZCBiaWQgZG93biBwcm90ZWN0aW9uIGRpc2NsYWltZXIgdGV4dCAo c2F2ZSBmb3IgbWlub3Igbml0cyBJIGNsZWFuZWQgdXApLiAmbmJzcDs8L2Rpdj4NCjxkaXY+PGJy Pg0KPC9kaXY+DQo8ZGl2PklmIHRoaXMgbG9va3MgZ29vZCB0aGVuIGZyb20gbXkgcGVyc3BlY3Rp dmUgd2UgYXJlIGRvbmUgYW5kIHlvdXIgRElTQ1VTUyBjYW4gYmUgY2xlYXJlZCBhbmQgd2UgY2Fu IHByb2NlZWQgd2l0aCBwdWJsaWNhdGlvbi48YnI+DQo8ZGl2Pjxicj4NCjwvZGl2Pg0KPGRpdj5U aGFua3MgZm9yIGFsbCB5b3VyIGhlbHAuPC9kaXY+DQo8ZGl2Pjxicj4NCjwvZGl2Pg0KPGRpdj5D aGVlcnMsPC9kaXY+DQo8ZGl2Pjxicj4NCjwvZGl2Pg0KPGRpdj5Hb256YWxvPC9kaXY+DQo8ZGl2 Pjxicj4NCjwvZGl2Pg0KPGRpdj48L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8ZGl2IHN0eWxlPSJv dmVyZmxvdy13cmFwOiBicmVhay13b3JkOyI+DQo8ZGl2Pg0KPGRpdj48L2Rpdj4NCjxkaXY+PGJy Pg0KPGJsb2NrcXVvdGUgdHlwZT0iY2l0ZSI+DQo8ZGl2Pk9uIE1hciAyMCwgMjAxOSwgYXQgMzo1 NyBQTSwgRXJpYyBSZXNjb3JsYSAmbHQ7PGEgaHJlZj0ibWFpbHRvOmVrckBydGZtLmNvbSIgdGFy Z2V0PSJfYmxhbmsiPmVrckBydGZtLmNvbTwvYT4mZ3Q7IHdyb3RlOjwvZGl2Pg0KPGJyIGNsYXNz PSJnbWFpbC1tXzEyOTUzOTM3MzM2NjkwNjM0NjB4X0FwcGxlLWludGVyY2hhbmdlLW5ld2xpbmUi Pg0KPGRpdj4NCjxkaXYgZGlyPSJsdHIiPg0KPGRpdiBkaXI9Imx0ciI+R29uemFsbyw8YnI+DQo8 YnI+DQpUaGlzIHRleHQgc3RpbGwgc2VlbXMgdG8gbWUgdG8gbmVlZCBzb21lIHdvcmsuIEhlcmUg aXMgYSByZXZpc2VkIHZlcnNpb24uPGJyPg0KPGJyPg0KU0hBLTI1NiB3YXMgY2hvc2VuIGFzIHRo ZSBuZXcgZGVmYXVsdCBmb3IgcGFzc3dvcmQmbmJzcDsmbmJzcDsmbmJzcDsgPGJyPg0KaGFzaGlu ZyBmb3IgaXRzIGNvbXBhYmlsaXR5IHdpdGggUkZDIDc2MTYgYnV0IGJlY2F1c2UgU0hBLTI1NiAo bGlrZSZuYnNwOyZuYnNwOyZuYnNwOyA8YnI+DQpNRDUpIGlzIGEgY29tcGFyYXRpdmVseSBmYXN0 IGFsZ29yaXRobSwgaXQgZG9lcyBsaXR0bGUgdG8gZGV0ZXI8YnI+DQpicnV0ZSBmb3JjZSBhdHRh Y2tzLiBTcGVjaWZpY2FsbHksIHRoaXMgbWVhbnMgdGhhdCBpZiB0aGU8YnI+DQp1c2VyIGhhcyBh IHdlYWsgcGFzc3dvcmQ6PGJyPg0KPGJyPg0KKiBBbiBhdHRhY2tlciB3aG8gY2FwdHVyZXMgdGhl IHNlcnZlcidzIHBhc3N3b3JkIGZpbGUgY2FuIG9mdGVuPGJyPg0KJm5ic3A7IGRldGVybWluZSB0 aGUgdXNlcidzIHBhc3N3b3JkIGFuZCB0aHVzIGltcGVyc29uYXRlIHRoZSB1c2VyPGJyPg0KJm5i c3A7IHRvIG90aGVyIHNlcnZlcnMgd2hlcmUgdGhleSBoYXZlIHVzZWQgdGhhdCBwYXNzd29yZC4g Tm90ZSB0aGF0PGJyPg0KJm5ic3A7IHN1Y2ggYW4gYXR0YWNrZXIgY2FuIGltcGVyc29uYXRlIHRo ZSB1c2VyIHRvIHRoZSBzZXJ2ZXIgaXRzZWxmPGJyPg0KJm5ic3A7IHdpdGhvdXQgYW55IGJydXRl IGZvcmNlIGF0dGFjay48YnI+DQo8YnI+DQoqIEFuIGF0dGFja2VyIHdobyBjYXB0dXJlcyBhIHNp bmdsZSBleGNoYW5nZSBjYW4gYnJ1dGUgZm9yY2U8YnI+DQombmJzcDsgdGhlIHVzZXIncyBwYXNz d29yZCBhbmQgdGh1cyBwb3RlbnRpYWxseSBpbXBlcnNvbmF0ZSB0aGU8YnI+DQombmJzcDsgdXNl ciB0byB0aGUgc2VydmVyIGFuZCBvdGhlciBzZXJ2ZXJzIHdoZXJlIHRoZXkgaGF2ZSB1c2VkPGJy Pg0KJm5ic3A7IHRoZSBzYW1lIHBhc3dvcmQuPGJyPg0KJm5ic3A7IDxicj4NCkEgc3Ryb25nZXIg KHdoaWNoIGlzIHRvIHNheSBzbG93ZXIpIGFsZ29yaXRobSwgbGlrZSBBcmdvbjI8YnI+DQpbSS1E LmlydGYtY2ZyZy1hcmdvbjJdLCB3b3VsZCBoZWxwIGJvdGggb2YgdGhlc2UgY2FzZXMsIGJ1dCBp biB0aGU8YnI+DQpjYXNlIG9mIHRoZSBmaXJzdCBhdHRhY2ssIG9ubHkgYWZ0ZXIgdW50aWwgdGhl IGRhdGFiYXNlIGVudHJ5IGZvciB0aGlzPGJyPg0KdXNlciBpcyB1cGRhdGVkIHRvIGV4Y2x1c2l2 ZWx5IHVzZSB0aGF0IHN0cm9uZ2VyIG1lY2hhbmlzbS48YnI+DQo8YnI+DQpUaGUgYmlkLWRvd24g ZGVmZW5zZXMgaW4gdGhpcyBwcm90b2NvbCBwcmV2ZW50IGFuIGF0dGFja2VyIGZyb208YnI+DQpm b3JjaW5nIHRoZSBjbGllbnQgYW5kIHNlcnZlciB0byBjb21wbGV0ZSBhIGhhbmRzaGFrZSB1c2lu ZyB3ZWFrZXI8YnI+DQphbGdvcml0aG1zIHRoYW4gdGhleSBqb2ludGx5IHN1cHBvcnQsIGJ1dCBv bmx5IGlmIHRoZSB3ZWFrZXN0IGpvaW50PGJyPg0KYWxnb3JpdGhtIGlzIHN0cm9uZyBlbm91Z2gg dGhhdCBpdCBjYW5ub3QgYmUgYnJ1dGUtZm9yY2VkLiBIb3dldmVyLDxicj4NCnRoaXMgZG9lcyBu b3QgZGVmZW5kIGFnYWluc3QgbWFueSBhdHRhY2tzIG9uIHRob3NlIGFsZ29yaXRobXM7PGJyPg0K c3BlY2lmaWNhbGx5LCBhbiBvbi1wYXRoIGF0dGFja2VyIG1pZ2h0IHBlcmZvcm0gYSBiaWQtZG93 biBhdHRhY2sgb24gYTxicj4NCmNsaWVudCB3aGljaCBzdXBwb3J0ZWQgYm90aCBBcmdvbjIgYW5k IFNIQS0yNTYgZm9yIHBhc3N3b3JkIGhhc2hpbmc8YnI+DQphbmQgdXNlIHRoYXQgdG8gY29sbGVj dCBhIE1FU1NBR0UtSU5URUdSSVRZLVNIQTI1NiB2YWx1ZSB3aGljaCBpdCB1c2VzPGJyPg0KZm9y IGFuIG9mZmxpbmUgYnJ1dGUtZm9yY2UgYXR0YWNrLiBUaGlzIHdvdWxkIGJlIGRldGVjdGVkIHdo ZW4gdGhlPGJyPg0Kc2VydmVyIHJlY2VpdmVzIHRoZSBzZWNvbmQgcmVxdWVzdCwgYnV0IHRoYXQg ZG9lcyBub3QgcHJldmVudCB0aGU8YnI+DQphdHRhY2tlciBmcm9tIG9idGFpbmluZyB0aGUgTUVT U0FHRS1JTlRFR1JJVFktU0hBMjU2IHZhbHVlLjxicj4NCjxicj4NClNpbWlsYXJseSwgYW4gYXR0 YWNrIGFnYWluc3QgdGhlIFVTRVJIQVNIIG1lY2hhbmlzbSB3aWxsIG5vdCBzdWNjZWVkPGJyPg0K aW4gZXN0YWJsaXNoaW5nIGEgc2Vzc2lvbiBhcyB0aGUgc2VydmVyIHdpbGwgZGV0ZWN0IHRoYXQg dGhlIGZlYXR1cmU8YnI+DQp3YXMgZGlzY2FyZGVkIG9uLXBhdGgsIGJ1dCB0aGUgY2xpZW50IHdv dWxkIHN0aWxsIGhhdmUgYmVlbiBjb252aW5jZWQ8YnI+DQp0byBzZW5kIGl0cyB1c2VybmFtZSBp biBjbGVhciBpbiB0aGUgVVNFUk5BTUUgYXR0cmlidXRlLCB0aHVzPGJyPg0KZGlzY2xvc2luZyBp dCB0byB0aGUgYXR0YWNrZXIuPGJyPg0KPGJyPg0KLUVrcjxicj4NCjxicj4NCjwvZGl2Pg0KPC9k aXY+DQo8YnI+DQo8ZGl2IGNsYXNzPSJnbWFpbC1tXzEyOTUzOTM3MzM2NjkwNjM0NjB4X2dtYWls X3F1b3RlIj4NCjxkaXYgZGlyPSJsdHIiIGNsYXNzPSJnbWFpbC1tXzEyOTUzOTM3MzM2NjkwNjM0 NjB4X2dtYWlsX2F0dHIiPk9uIE1vbiwgTWFyIDE4LCAyMDE5IGF0IDY6MzcgUE0gR29uemFsbyBT YWxndWVpcm8gKGdzYWxndWVpKSAmbHQ7PGEgaHJlZj0ibWFpbHRvOmdzYWxndWVpQGNpc2NvLmNv bSIgdGFyZ2V0PSJfYmxhbmsiPmdzYWxndWVpQGNpc2NvLmNvbTwvYT4mZ3Q7IHdyb3RlOjxicj4N CjwvZGl2Pg0KPGJsb2NrcXVvdGUgY2xhc3M9ImdtYWlsLW1fMTI5NTM5MzczMzY2OTA2MzQ2MHhf Z21haWxfcXVvdGUiIHN0eWxlPSJtYXJnaW46MHB4IDBweCAwcHggMC44ZXg7Ym9yZGVyLWxlZnQ6 MXB4IHNvbGlkIHJnYigyMDQsMjA0LDIwNCk7cGFkZGluZy1sZWZ0OjFleCI+DQpUaGFua3MsIFNw ZW5jZXIuJm5ic3A7IEluIHRoZSBpbnRlcmVzdCBvZiBleHBlZGl0aW91c25lc3MgSeKAmXZlIGVt YWlsZWQgRXJpYyB0byByZXZpZXcgdGhlIG5ld2x5IHB1Ymxpc2hlZCAtMjAgdG8gZW5zdXJlIGl0 IGFkZHJlc3NlcyBoaXMgRElTQ1VTUyBwb2ludHMuIEhvcGluZyB0byBnZXQgdGhpcyBkb25lIGJl Zm9yZSBFcmljIHN0ZXBzIGRvd24gYXMgQUQuPGJyPg0KPGJyPg0KQ2hlZXJzLDxicj4NCjxicj4N CkdvbnphbG8gPGJyPg0KPGJyPg0KPGJyPg0KPGJyPg0KJmd0OyBPbiBNYXIgMTgsIDIwMTksIGF0 IDk6MjcgUE0sIFNwZW5jZXIgRGF3a2lucyBhdCBJRVRGICZsdDs8YSBocmVmPSJtYWlsdG86c3Bl bmNlcmRhd2tpbnMuaWV0ZkBnbWFpbC5jb20iIHRhcmdldD0iX2JsYW5rIj5zcGVuY2VyZGF3a2lu cy5pZXRmQGdtYWlsLmNvbTwvYT4mZ3Q7IHdyb3RlOjxicj4NCiZndDsgPGJyPg0KJmd0OyBEZWFy IEFsbCw8YnI+DQomZ3Q7IDxicj4NCiZndDsmZ3Q7IE9uIEZyaSwgTWFyIDgsIDIwMTkgYXQgODox MCBQTSBFcmljIFJlc2NvcmxhICZsdDs8YSBocmVmPSJtYWlsdG86ZWtyQHJ0Zm0uY29tIiB0YXJn ZXQ9Il9ibGFuayI+ZWtyQHJ0Zm0uY29tPC9hPiZndDsgd3JvdGU6PGJyPg0KJmd0OyZndDsgPGJy Pg0KJmd0OyZndDsgVGhhbmtzIGZvciB0aGUgY2FsbCB5ZXN0ZXJkYXkuPGJyPg0KJmd0OyZndDsg PGJyPg0KJmd0OyA8YnI+DQomZ3Q7IFRoYW5rcyB0byBhbGwgZm9yIG1vdmluZyB0aGlzIHNwZWNp ZmljYXRpb24gZm9yd2FyZC48YnI+DQomZ3Q7IDxicj4NCiZndDsgSWYgdGhlIGN1cnJlbnQgY29u dmVyc2F0aW9uIHR1cm5zIG91dCB0byBjb252ZXJnZSBvbiB0aGlzIHRvcGljIGJlZm9yZSBuZXh0 PGJyPg0KJmd0OyBXZWRuZXNkYXksIEknbSBoYXBweSB0byBhcHByb3ZlIGEgcmV2aXNlZCBkcmFm dCBhZnRlciBFcmljIGNsZWFycyBoaXM8YnI+DQomZ3Q7IERpc2N1c3MuPGJyPg0KJmd0OyA8YnI+ DQomZ3Q7IElmIEkgY2FuIGhlbHAgaW4gYW55IHdheSwgcGxlYXNlIGxldCBtZSBrbm93Ljxicj4N CiZndDsgPGJyPg0KJmd0OyBTcGVuY2VyPGJyPg0KJmd0OyA8YnI+DQomZ3Q7IDxicj4NCiZndDsm Z3Q7IDxicj4NCiZndDsmZ3Q7IEZpcnN0LCBoZXJlIGlzIHdoYXQgSSByZWNvbW1lbmQgZm9yIHRo ZSBxdWVzdGlvbiBvZiBTSEEtMjU2IGZvciBwYXNzd29yZDxicj4NCiZndDsmZ3Q7IGhhc2hpbmc6 PGJyPg0KJmd0OyZndDsgPGJyPg0KJmd0OyZndDsmbmJzcDsgTm90ZTogdGhlIHVzZSBvZiBTSEEt MjU2IGZvciBwYXNzd29yZCBoYXNoaW5nIGRvZXMgbm90IG1lZXQgbW9kZXJuPGJyPg0KJmd0OyZn dDsmbmJzcDsgc3RhbmRhcmRzLCB3aGljaCBhcmUgYWltZWQgYXQgc2xvd2luZyBkb3duIGV4aGF1 c3RpdmUgcGFzc3dvcmQgc2VhcmNoPGJyPg0KJmd0OyZndDsmbmJzcDsgYnkgcHJvdmlkaW5nIGEg cmVsYXRpdmVseSBzbG93IG1pbmltdW0gdGltZSB0byBjb21wdXRlIHRoZTxicj4NCiZndDsmZ3Q7 Jm5ic3A7IGhhc2guIEFsdGhvdWdoIGJldHRlciBhbGdvcml0aG1zIHN1Y2ggYXMgQXJnb24yPGJy Pg0KJmd0OyZndDsmbmJzcDsgWzxhIGhyZWY9Imh0dHBzOi8vZGF0YXRyYWNrZXIuaWV0Zi5vcmcv ZG9jL2RyYWZ0LWlydGYtY2ZyZy1hcmdvbjIvIiByZWw9Im5vcmVmZXJyZXIiIHRhcmdldD0iX2Js YW5rIj5odHRwczovL2RhdGF0cmFja2VyLmlldGYub3JnL2RvYy9kcmFmdC1pcnRmLWNmcmctYXJn b24yLzwvYT5dIGFyZTxicj4NCiZndDsmZ3Q7Jm5ic3A7IGF2YWlsYWJsZSwgU0hBLTI1NiB3YXMg Y2hvc2VuIGZvciBjb25zaXN0ZW5jeSB3aXRoIFJGQyA3NjE2Ljxicj4NCiZndDsmZ3Q7IDxicj4N CiZndDsmZ3Q7IDxicj4NCiZndDsmZ3Q7IE5vdywgV1JUIHRvIHRoZSBhbnRpLWRvd25ncmFkZSBz aXR1YXRpb24uIEhlcmUncyBhIHN0eWxpemVkIHZlcnNpb248YnI+DQomZ3Q7Jmd0OyBvZiB0aGUg cHJvdG9jb2w6PGJyPg0KJmd0OyZndDsgPGJyPg0KJmd0OyZndDsgQ2xpZW50Jm5ic3A7ICZuYnNw OyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7 ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsg Jm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7IFNlcnZlcjxi cj4NCiZndDsmZ3Q7IDxicj4NCiZndDsmZ3Q7IEhlbGxvIC0mZ3Q7PGJyPg0KJmd0OyZndDsmbmJz cDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNw OyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7 ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbHQ7LSBOb25jZSwgQWxnb3JpdGhtczxicj4N CiZndDsmZ3Q7IEhNQUMtSDEoSDIoUGFzc3dvcmQpLCBOb25jZSwgQWxnb3JpdGhtcywgTXNnKSAt Jmd0Ozxicj4NCiZndDsmZ3Q7Jm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJz cDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNw OyAmbmJzcDsgJm5ic3A7ICZuYnNwOyZsdDstIEhNQUMtSDEoSDIoUGFzc3dvcmQpLCAuLi4pPGJy Pg0KJmd0OyZndDsgPGJyPg0KJmd0OyZndDsgV2hlcmUgSDEgYW5kIEgyIGFyZSB0aGUgSE1BQyBo YXNoIGZ1bmN0aW9ucyBhbmQgdGhlIHBhc3N3b3JkIGhhc2hpbmc8YnI+DQomZ3Q7Jmd0OyBmdW5j dGlvbiByZXNwZWN0aXZlbHkuPGJyPg0KJmd0OyZndDsgPGJyPg0KJmd0OyZndDsgTm93LCBpZiB3 ZSBhc3N1bWUgdGhhdCB0aGUgYXR0YWNrZXIgZG9lcyBub3Qga25vdyBQYXNzd29yZCBhbmQgdGhh dDxicj4NCiZndDsmZ3Q7IGJvdGggSDEgYW5kIEgyIGFyZSBzZWN1cmUsIHRoZW4gaXQgaXMgbm90 IHBvc3NpYmxlIGZvciB0aGUgYXR0YWNrZXIgdG88YnI+DQomZ3Q7Jmd0OyBjb21wbGV0ZSB0aGUg dHJhbnNhY3Rpb24gb3IgbW9kaWZ5IGFueSBvZiB0aGUgbWVzc2FnZXMuIEZ1cnRoZXIsIGlmPGJy Pg0KJmd0OyZndDsgdGhlIHdlYWtlc3Qgam9pbnQgYWxnb3JpdGhtIHRoYXQgYm90aCBzaWRlcyBz dXBwb3J0IGlzIHN0aWxsIHN0cm9uZyw8YnI+DQomZ3Q7Jmd0OyB0aGVuIGFuIGF0dGFja2VyIGNh bm5vdCBpbmZsdWVuY2UgdGhlIGFsZ29yaXRobSBuZWdvdGlhdGlvbiBbMF0uIFRoaXM8YnI+DQom Z3Q7Jmd0OyBwcm9wZXJ0eSBpcyBwcm92aWRlZCBieSBjb3ZlcmluZyB0aGUgYWxnb3JpdGhtcyB1 bmRlciB0aGUgTUFDLjxicj4NCiZndDsmZ3Q7IDxicj4NCiZndDsmZ3Q7IEhvd2V2ZXIsIG15IHBv aW50IGlzIHRoYXQgdGhpcyBpcyBub3QgYSB2ZXJ5IHVzZWZ1bCBwcm9wZXJ0eS48YnI+DQomZ3Q7 Jmd0OyA8YnI+DQomZ3Q7Jmd0OyBGaXJzdCwgY29uc2lkZXIgdGhlIGNhc2UgaW4gd2hpY2ggdGhl IGltcGxlbWVudGF0aW9ucyBqb2ludGx5IHN1cHBvcnQ8YnI+DQomZ3Q7Jmd0OyBvbmUgc3Ryb25n IGFsZ29yaXRobSBhbmQgb25lIHdlYWsgYWxnb3JpdGhtLiBFLmcuLCBmb3IgSDEgdGhleSBzdXBw b3J0PGJyPg0KJmd0OyZndDsgU0hBLTI1NiBhbmQgdGhlIGZ1bmN0aW9uIFooeCkgd2hpY2ggYWx3 YXlzIGVtaXRzIDBzLiBUaGlzIGFsbG93czxicj4NCiZndDsmZ3Q7IGFuIGF0dGFja2VyIHRvIGZv cmNlIHRoZSBjbGllbnQgYW5kIHNlcnZlciBpbnRvIHVzaW5nIFosIGFzIGZvbGxvd3MuPGJyPg0K Jmd0OyZndDsgPGJyPg0KJmd0OyZndDsgPGJyPg0KJmd0OyZndDsgQ2xpZW50Jm5ic3A7ICZuYnNw OyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7 ICZuYnNwOyBBdHRhY2tlciZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7 ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwO1NlcnZlcjxicj4NCiZndDsmZ3Q7IDxicj4NCiZn dDsmZ3Q7IEhlbGxvIC0mZ3Q7PGJyPg0KJmd0OyZndDsmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJz cDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNw OyAmbmJzcDsgJm5ic3A7IEhlbGxvIC0mZ3Q7PGJyPg0KJmd0OyZndDsmbmJzcDsgJm5ic3A7ICZu YnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5i c3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJz cDsgJmx0Oy0gTm9uY2UsIEFsZz1TSEEyNTYsIFo8YnI+DQomZ3Q7Jmd0OyZuYnNwOyAmbmJzcDsg Jm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJmx0Oy0gTm9uY2UsIEFs Zz1aPGJyPg0KJmd0OyZndDsgWihIMihQYXNzd29yZCksIE5vbmNlLCBBbGc9WikpIC0mZ3Q7PGJy Pg0KJmd0OyZndDsmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJz cDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyBaKEgyKFBhc3N3b3JkKSwgTm9u Y2UsIEFsZz1TSEEyNTYsIFopKTxicj4NCiZndDsmZ3Q7IDxicj4NCiZndDsmZ3Q7IFRoZSBpc3N1 ZSBoZXJlIGlzIHRoYXQgdGhlIG9ubHkgdGhpbmcgdGhhdCB0aGUgTUFDIGlzIGRvaW5nIGlzPGJy Pg0KJmd0OyZndDsgYXV0aGVudGljYXRpbmcgdGhlIHRyYW5zYWN0aW9uLCBhbmQgaWYgeW91IGNh bid0IHRydXN0IGl0IHRvIGRvIHRoYXQsPGJyPg0KJmd0OyZndDsgeW91IGNhbid0IHRydXN0IGl0 IHRvIGF1dGhlbnRpY2F0ZSB0aGUgYmlkLWRvd24gZGVmZW5zZSBlaXRoZXIuLjxicj4NCiZndDsm Z3Q7IDxicj4NCiZndDsmZ3Q7IDxicj4NCiZndDsmZ3Q7IER1cmluZyBvdXIgZGlzY3Vzc2lvbiwg dGhlcmUgd2FzIGEgc3VnZ2VzdGlvbiB0aGF0IGl0IHdhcyB1c2VmdWwgdG88YnI+DQomZ3Q7Jmd0 OyBoYXZlIGJpZGRvd24gZGVmZW5zZSB0byBkZWZlbmQgYWdhaW5zdCB3ZWFrbmVzc2VzIGluIEgy LiBJIGRvbid0IHRoaW5rPGJyPg0KJmd0OyZndDsgdGhhdCB0aGF0J3MgdHJ1ZSBlaXRoZXIuIEZp cnN0LCByZW1lbWJlciB0aGF0IHRoZSBwdXJwb3NlIG9mIEgyIGlzIHRvPGJyPg0KJmd0OyZndDsg cHJldmVudCBhbiBhdHRhY2tlciB3aG8gcmVjb3ZlcnMgdGhlIHBhc3N3b3JkIGRhdGFiYXNlIGZy b20gbGVhcm5pbmc8YnI+DQomZ3Q7Jmd0OyB0aGUgdXNlcidzIHRydWUgcGFzc3dvcmQuIFRoaXMg aXMgbm90IGFib3V0IGRlZmVuZGluZyB0aGUgc2VydmVyIGZyb208YnI+DQomZ3Q7Jmd0OyBhdHRh Y2sgKGJlY2F1c2Uga25vd2luZyBBMSBpcyBlbm91Z2ggdG8gYXR0YWNrIHRoZSBzZXJ2ZXIpIGJ1 dCBhYm91dDxicj4NCiZndDsmZ3Q7IHByZXZlbnRpbmcgdGhlIGF0dGFja2VyIGZyb20gbGVhcm5p bmcgYSBwYXNzd29yZCB3aGljaCBtaWdodCBoYXZlIGJlZW48YnI+DQomZ3Q7Jmd0OyByZXVzZWQg b24gYW5vdGhlciBzaXRlLjxicj4NCiZndDsmZ3Q7IDxicj4NCiZndDsmZ3Q7IE5vdywgaXQncyBh bHNvIHBvc3NpYmxlIHRvIGJydXRlLWZvcmNlIHRoZSB1c2VyJ3MgcGFzc3dvcmQganVzdCBmcm9t PGJyPg0KJmd0OyZndDsgdGhlIHByb3RvY29sIHRyYW5zY3JpcHQ6IGlmIHlvdSBjYXB0dXJlIHRo ZSBjbGllbnQncyBmaXJzdCBtZXNzYWdlPGJyPg0KJmd0OyZndDsgd2l0aCBNRVNTQUdFLUlOVEVH UklUWSBvciBNRVNTQUdFLUlOVEVHUklUWS1TSEEyNTYsIHlvdSBjYW4ganVzdCBrZWVwPGJyPg0K Jmd0OyZndDsgdHJ5aW5nIHBhc3N3b3JkcyB1bnRpbCB5b3UgZ2V0IHRoZSByaWdodCBNQUMuIE5v dGUgdGhhdCB0aGlzIGlzIGE8YnI+DQomZ3Q7Jmd0OyBwYXNzaXZlIGF0dGFjay4gVGhpcyBpcyBj b21wYXJhdGl2ZWx5IGZhc3QgYmVjYXVzZSBTSEEyNTYgYW5kIE1ENSBhcmU8YnI+DQomZ3Q7Jmd0 OyBmYXN0Ljxicj4NCiZndDsmZ3Q7IDxicj4NCiZndDsmZ3Q7IEEgbXVjaCBzdHJvbmdlciBIMiAo ZS5nLiwgQXJnb24pIHdvdWxkIGhlbHAgYWdhaW5zdCB0aGlzLCBidXQgdGhlPGJyPg0KJmd0OyZn dDsgcHJvYmxlbSBub3cgYmVjb21lcyB0aGF0IHRoZSBjbGllbnQgc3VwcG9ydHMgSDIgPT0gTUQ1 IChvciBTSEEtMjU2KTxicj4NCiZndDsmZ3Q7IGFuZCBzbyBldmVuIGlmIHRoZSBzZXJ2ZXIgc3Vw cG9ydHMgQXJnb24sIHRoZSBhdHRhY2tlciBjYW4gbW91bnQgYTxicj4NCiZndDsmZ3Q7IGJpZC1k b3duIGRlZmVuc2UgaW4gd2hpY2ggaXQgbW9kaWZpZXMgdGhlIHNlcnZlcidzIGZpcnN0IG1lc3Nh Z2UgdG88YnI+DQomZ3Q7Jmd0OyBqdXN0IGFkdmVydGlzZSBNRDUgYW5kIHRodXMgZ2V0IHRoZSBj bGllbnQgdG8gcHJvdmlkZSBhIHN1aXRhYmxlPGJyPg0KJmd0OyZndDsgbWVzc2FnZS4gVGhlIGJp ZC1kb3duIGRlZmVuc2Ugd291bGQgcHJldmVudCB0aGUgYXV0aGVudGljYXRpb248YnI+DQomZ3Q7 Jmd0OyB0cmFuc2FjdGlvbiBmcm9tIGNvbXBsZXRpbmcsIGJ1dCB0aGF0J3Mgbm90IG5lY2Vzc2Fy eSBmb3IgdGhpczxicj4NCiZndDsmZ3Q7IGF0dGFjayBiZWNhdXNlIHRoZSBhdHRhY2tlciBjYW4g anVzdCBicnV0ZS1mb3JjZSB0aGUgcGFzc3dvcmQgZnJvbTxicj4NCiZndDsmZ3Q7IHRoZSBtZXNz YWdlIGl0IGhhcy4gVG8gbWFrZSB0aGlzIHdvcmssIHlvdSB3b3VsZCBuZWVkIHNvbWV0aGluZzxi cj4NCiZndDsmZ3Q7IGxpa2UgYSBQQUtFLCB3aGljaCB0aGlzIGlzIG5vdC48YnI+DQomZ3Q7Jmd0 OyA8YnI+DQomZ3Q7Jmd0OyBGaW5hbGx5LCB5b3UgbWlnaHQgdGhpbmsgdGhhdCB0aGUgc2VydmVy IGhhcyB0d28gZGF0YWJhc2VzLCBvbmU8YnI+DQomZ3Q7Jmd0OyB3aGljaCB1c2VzIEFyZ29uIGFu ZCBvbmUgd2hpY2ggdXNlcyBNRDUgYW5kIGl0IHdhbnRzIHRvIGdyYWR1YWxseTxicj4NCiZndDsm Z3Q7IHBoYXNlIG91dCB0aGUgTUQ1IG9uZSwgd2hpY2ggaXQgd2lsbCBkbyB3aGVuIG5vIGNsaWVu dCBhdXRoZW50aWNhdGVzPGJyPg0KJmd0OyZndDsgd2l0aCBNRDUgZm9yIGEgdmVyeSBsb25nIHRp bWUuIEFuIGFudGktYmlkZG93biBkZWZlbnNlIHdvdWxkIHNvcnQ8YnI+DQomZ3Q7Jmd0OyBvZiB3 b3JrIGhlcmUsIGJ1dCB0aGUgZmFjdCB0aGF0IHRoZSBhdHRhY2tlciB3b3VsZCBoYXZlIHRvIGJl PGJyPg0KJmd0OyZndDsgYWN0aXZlIGVzc2VudGlhbGx5IGluZGVmaW5pdGVseSB0byBrZWVwIHRo ZSBzZXJ2ZXIgY29uZnVzZWQgYWJvdXQ8YnI+DQomZ3Q7Jmd0OyB0aGUgc3RhdGUgb2YgY2xpZW50 cyAtLSBhbmQgdGhhdCB0aGUgYXR0YWNrZXIgY2FuIGxpa2VseSBqdXN0PGJyPg0KJmd0OyZndDsg Z2V0IGEgdmFsaWQgYWNjb3VudCBhbmQgdGhlbiBpbnNpc3Qgb24gdXNpbmcgTUQ1IC0tIG1ha2Vz IHRoaXMgYTxicj4NCiZndDsmZ3Q7IG5vdCB2ZXJ5IHVzZWZ1bCBkZWZlbnNlLjxicj4NCiZndDsm Z3Q7IDxicj4NCiZndDsmZ3Q7IEkgdGhpbmsgdGhpcyBtYWtlcyBhIHByZXR0eSBwZXJzdWFzaXZl IGNhc2UgdGhhdCB0aGUgYmlkLWRvd24gZGVmZW5zZTxicj4NCiZndDsmZ3Q7IGlzbid0IHVzZWZ1 bCBleGNlcHQgaW4gdGhlIGZvcm1hbCAmcXVvdDthdHRhY2tlciBjYW5ub3QgaW5mbHVlbmNlPGJy Pg0KJmd0OyZndDsgbmVnb3RpYXRpb24mcXVvdDsgc2Vuc2UuIFdpdGggdGhhdCBzYWlkLCBpbiB0 aGUgc3Bpcml0IG9mIGdldHRpbmcgdGhpcyBkb25lLCBJPGJyPg0KJmd0OyZndDsgZ3Vlc3M8YnI+ DQomZ3Q7Jmd0OyBJJ20gd2lsbGluZyB0byBsZXQgdGhpcyBnbyBpZiB0aGUgc2VjdXJpdHkgY29u c2lkZXJhdGlvbnMgbWFrZSBjbGVhcjxicj4NCiZndDsmZ3Q7IHRoYXQgaXQgaXMgb25seSBhIHZl cnkgbGltaXRlZCBtZWNoYW5pc20uPGJyPg0KJmd0OyZndDsgPGJyPg0KJmd0OyZndDsgLUVrcjxi cj4NCiZndDsmZ3Q7IDxicj4NCiZndDsmZ3Q7IDxicj4NCiZndDsmZ3Q7IFswXSBUaGlzIGlzIHBy aW5jaXBhbGx5IGFib3V0IEgxLiBBcyBsb25nIGFzIHRoZSBIMiBhcHByb3hpbWF0ZWx5PGJyPg0K Jmd0OyZndDsgZXZlbmx5IGRpc3RyaWJ1dGVzIHRoZSBwYXNzd29yZCBvdmVyIGl0cyByYW5nZSwg dGhlbiBjcnlwdG9ncmFwaGljPGJyPg0KJmd0OyZndDsgc3RyZW5ndGggaXMgbm90IGltcG9ydGFu dCBmb3IgdGhpcyBxdWVzdGlvbi4gRm9yIGluc3RhbmNlLCB5b3U8YnI+DQomZ3Q7Jmd0OyBjb3Vs ZCByZXBsYWNlIEgyIHdpdGggYW4gaWRlbnRpdHkgZnVuY3Rpb24gYW5kIHN0aWxsIGhhdmUgYTxi cj4NCiZndDsmZ3Q7IHNlY3VyZSBwcm90b2NvbC48YnI+DQomZ3Q7Jmd0OyA8YnI+DQomZ3Q7Jmd0 OyA8YnI+DQomZ3Q7Jmd0OyA8YnI+DQomZ3Q7Jmd0OyA8YnI+DQomZ3Q7Jmd0OyA8YnI+DQomZ3Q7 Jmd0OyA8YnI+DQomZ3Q7Jmd0OyBPbiBXZWQsIEZlYiAyMCwgMjAxOSBhdCA0OjAzIEFNIEdvbnph bG8gQ2FtYXJpbGxvICZsdDs8YnI+DQomZ3Q7Jmd0OyA8YSBocmVmPSJtYWlsdG86Z29uemFsby5j YW1hcmlsbG9AZXJpY3Nzb24uY29tIiB0YXJnZXQ9Il9ibGFuayI+Z29uemFsby5jYW1hcmlsbG9A ZXJpY3Nzb24uY29tPC9hPiZndDsgd3JvdGU6PGJyPg0KJmd0OyZndDsgPGJyPg0KJmd0OyZndDsm Z3Q7IFRoYW5rcywgR29uemFsbyEgUGxlYXNlLCBsZXQgdXMga25vdyB0aGUgYWdyZWVkIHdheSBm b3J3YXJkIG9uY2UgeW91PGJyPg0KJmd0OyZndDsmZ3Q7IGhhdmUgdGhlIGNhbGwuPGJyPg0KJmd0 OyZndDsmZ3Q7IDxicj4NCiZndDsmZ3Q7Jmd0OyBDaGVlcnMsPGJyPg0KJmd0OyZndDsmZ3Q7IDxi cj4NCiZndDsmZ3Q7Jmd0OyBHb256YWxvPGJyPg0KJmd0OyZndDsmZ3Q7IDxicj4NCiZndDsmZ3Q7 Jmd0OyZndDsgT24gMTktRmViLTE5IDIwOjA1LCBHb256YWxvIFNhbGd1ZWlybyAoZ3NhbGd1ZWkp IHdyb3RlOjxicj4NCiZndDsmZ3Q7Jmd0OyZndDsgSGkgR29uemFsbyAtPGJyPg0KJmd0OyZndDsm Z3Q7Jmd0OyA8YnI+DQomZ3Q7Jmd0OyZndDsmZ3Q7IFdlIGhhdmUgc2NoZWR1bGVkIGEgY29uZmVy ZW5jZSBjYWxsIHdpdGggRWtyLCBTaW1vbiwgTWFyYyBhbmQgbXlzZWxmIG9uPGJyPg0KJmd0OyZn dDsmZ3Q7IE1hcmNoIDd0aCB0byBkaXNjdXNzIHRoZSBsYXN0IHR3byByZW1haW5pbmcgaXNzdWVz LiZuYnNwOyBXaWxsIHVwZGF0ZSB3aXRoPGJyPg0KJmd0OyZndDsmZ3Q7IHJlc29sdXRpb25zIG9u Y2UgdGhpcyBoYXMgb2NjdXJyZWQuPGJyPg0KJmd0OyZndDsmZ3Q7Jmd0OyA8YnI+DQomZ3Q7Jmd0 OyZndDsmZ3Q7IENoZWVycyw8YnI+DQomZ3Q7Jmd0OyZndDsmZ3Q7IDxicj4NCiZndDsmZ3Q7Jmd0 OyZndDsgR29uemFsbzxicj4NCiZndDsmZ3Q7Jmd0OyZndDsgPGJyPg0KJmd0OyZndDsmZ3Q7Jmd0 OyA8YnI+DQomZ3Q7Jmd0OyZndDsmZ3Q7IDxicj4NCiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7IE9uIEZl YiAxOCwgMjAxOSwgYXQgODoxOCBBTSwgR29uemFsbyBDYW1hcmlsbG8gJmx0Ozxicj4NCiZndDsm Z3Q7Jmd0OyA8YSBocmVmPSJtYWlsdG86R29uemFsby5DYW1hcmlsbG9AZXJpY3Nzb24uY29tIiB0 YXJnZXQ9Il9ibGFuayI+R29uemFsby5DYW1hcmlsbG9AZXJpY3Nzb24uY29tPC9hPiZndDsgd3Jv dGU6PGJyPg0KJmd0OyZndDsmZ3Q7Jmd0OyZndDsgPGJyPg0KJmd0OyZndDsmZ3Q7Jmd0OyZndDsg SGkgR29uemFsbyBTLDxicj4NCiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7IDxicj4NCiZndDsmZ3Q7Jmd0 OyZndDsmZ3Q7IHdoYXQgaXMgdGhlIHN0YXR1cyBvZiB0aGlzIG9uZT88YnI+DQomZ3Q7Jmd0OyZn dDsmZ3Q7Jmd0OyA8YnI+DQomZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyBUaGFua3MsPGJyPg0KJmd0OyZn dDsmZ3Q7Jmd0OyZndDsgPGJyPg0KJmd0OyZndDsmZ3Q7Jmd0OyZndDsgR29uemFsbzxicj4NCiZn dDsmZ3Q7Jmd0OyZndDsmZ3Q7IDxicj4NCiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyBPbiAxOC1K YW4tMTkgMjA6MTYsIEdvbnphbG8gU2FsZ3VlaXJvIChnc2FsZ3VlaSkgd3JvdGU6PGJyPg0KJmd0 OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7IFRvdGFsbHkgYWdyZWUsIEVrci4mbmJzcDsgTWFyYyBhbmQg SSBhcmUgbWVldGluZyB0byBjb21lIHVwIHdpdGggYSBwcm9wb3NhbDxicj4NCiZndDsmZ3Q7Jmd0 OyZndDsmZ3Q7Jmd0OyBidXQgSSBkbyBhZ3JlZSB3ZSBuZWVkIHRvIGhhdmUgYSBjYWxsIHRvIGdl dCB0aGlzIHB1dCB0byBiZWQgb25jZSBhbmQ8YnI+DQomZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsg Zm9yIGFsbC4mbmJzcDsgV2XigJlsbCBvZmZlciBzb21lIHBvdGVudGlhbCBkYXRlcyBpbiB0aGUg bmV4dCAyLTMgd2Vla3MuPGJyPg0KJmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7IDxicj4NCiZndDsm Z3Q7Jmd0OyZndDsmZ3Q7Jmd0OyBDaGVlcnMsPGJyPg0KJmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7 IDxicj4NCiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyBHb256YWxvPGJyPg0KJmd0OyZndDsmZ3Q7 Jmd0OyZndDsmZ3Q7IDxicj4NCiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyA8YnI+DQomZ3Q7Jmd0 OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7IE9uIERlYyAyNiwgMjAxOCwgYXQgODowNSBQTSwgRXJpYyBS ZXNjb3JsYSAmbHQ7PGEgaHJlZj0ibWFpbHRvOmVrckBydGZtLmNvbSIgdGFyZ2V0PSJfYmxhbmsi PmVrckBydGZtLmNvbTwvYT48YnI+DQomZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7ICZsdDtt YWlsdG86PGEgaHJlZj0ibWFpbHRvOmVrckBydGZtLmNvbSIgdGFyZ2V0PSJfYmxhbmsiPmVrckBy dGZtLmNvbTwvYT4mZ3Q7Jmd0OyB3cm90ZTo8YnI+DQomZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsm Z3Q7IDxicj4NCiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsgV2UgcmVhbGx5IG5lZWQgdG8g YnJpbmcgdGhpcyB0byBhIGNsb3NlIGJlZm9yZSBib3RoIFNwZW5jZXIgYW5kIEk8YnI+DQomZ3Q7 Jmd0OyZndDsgc3RlcDxicj4NCiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsgZG93biwgSSBz aG91bGQgdGhpbmsuPGJyPg0KJmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyA8YnI+DQomZ3Q7 Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7IC1Fa3I8YnI+DQomZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZn dDsmZ3Q7IDxicj4NCiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsgPGJyPg0KJmd0OyZndDsm Z3Q7Jmd0OyZndDsmZ3Q7Jmd0OyBPbiBUaHUsIE5vdiAyMiwgMjAxOCBhdCA0OjMwIEFNIEdvbnph bG8gQ2FtYXJpbGxvPGJyPg0KJmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyAmbHQ7PGEgaHJl Zj0ibWFpbHRvOmdvbnphbG8uY2FtYXJpbGxvQGVyaWNzc29uLmNvbSIgdGFyZ2V0PSJfYmxhbmsi PmdvbnphbG8uY2FtYXJpbGxvQGVyaWNzc29uLmNvbTwvYT48YnI+DQomZ3Q7Jmd0OyZndDsmZ3Q7 Jmd0OyZndDsmZ3Q7ICZsdDttYWlsdG86PGEgaHJlZj0ibWFpbHRvOmdvbnphbG8uY2FtYXJpbGxv QGVyaWNzc29uLmNvbSIgdGFyZ2V0PSJfYmxhbmsiPmdvbnphbG8uY2FtYXJpbGxvQGVyaWNzc29u LmNvbTwvYT4mZ3Q7Jmd0OyB3cm90ZTo8YnI+DQomZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7 IDxicj4NCiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmbmJzcDsgJm5ic3A7RXJpYywgU3Bl bmNlciwgdGhhbmtzIGZvciB0aGUgc3RhdHVzIHVwZGF0ZSE8YnI+DQomZ3Q7Jmd0OyZndDsmZ3Q7 Jmd0OyZndDsmZ3Q7IDxicj4NCiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmbmJzcDsgJm5i c3A7QXV0aG9ycywgY291bGQgeW91IHBsZWFzZSBsZXQgdXMga25vdyB3aGVuIHlvdSBwbGFuIHRv IGdldCB0bzxicj4NCiZndDsmZ3Q7Jmd0OyB0aGlzPzxicj4NCiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7 Jmd0OyZndDsgPGJyPg0KJmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZuYnNwOyAmbmJzcDtH b256YWxvPGJyPg0KJmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyA8YnI+DQomZ3Q7Jmd0OyZn dDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZuYnNwOyAmbmJzcDtPbiAxOS1Ob3YtMTggMjM6MDQsIFNw ZW5jZXIgRGF3a2lucyBhdCBJRVRGIHdyb3RlOjxicj4NCiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0 OyZndDsmZ3Q7IEhpLCBHb256YWxvLDxicj4NCiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsm Z3Q7IE9uIE1vbiwgTm92IDE5LCAyMDE4IGF0IDk6MDYgQU0gRXJpYyBSZXNjb3JsYSAmbHQ7PGEg aHJlZj0ibWFpbHRvOmVrckBydGZtLmNvbSIgdGFyZ2V0PSJfYmxhbmsiPmVrckBydGZtLmNvbTwv YT48YnI+DQomZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jm5ic3A7ICZuYnNwOyZsdDttYWls dG86PGEgaHJlZj0ibWFpbHRvOmVrckBydGZtLmNvbSIgdGFyZ2V0PSJfYmxhbmsiPmVrckBydGZt LmNvbTwvYT4mZ3Q7PGJyPg0KJmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsgJmx0O21h aWx0bzo8YSBocmVmPSJtYWlsdG86ZWtyQHJ0Zm0uY29tIiB0YXJnZXQ9Il9ibGFuayI+ZWtyQHJ0 Zm0uY29tPC9hPiAmbHQ7bWFpbHRvOjxhIGhyZWY9Im1haWx0bzpla3JAcnRmbS5jb20iIHRhcmdl dD0iX2JsYW5rIj5la3JAcnRmbS5jb208L2E+Jmd0OyZndDsmZ3Q7IHdyb3RlOjxicj4NCiZndDsm Z3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7IDxicj4NCiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0 OyZndDsmZ3Q7Jm5ic3A7ICZuYnNwOyAmbmJzcDtOb3QgcmVhbGx5LiBJIGhhdmUgbm90IHJlY2Vp dmVkIGFueSByZXNwb25zZSB0byBteSBtYWlsIG9mPGJyPg0KJmd0OyZndDsmZ3Q7Jmd0OyZndDsm Z3Q7Jmd0OyZuYnNwOyAmbmJzcDtPY3QgMjMuPGJyPg0KJmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7 Jmd0OyZndDsmbmJzcDsgJm5ic3A7ICZuYnNwO0FzIGJlZm9yZSwgSSdtIGhhcHB5IHRvIGhhdmUg YSBjYWxsLCBidXQgSSBiZWxpZXZlIHdlJ3JlPGJyPg0KJmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7 Jmd0OyZuYnNwOyAmbmJzcDtyZWFjaGluZzxicj4NCiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZn dDsmZ3Q7Jm5ic3A7ICZuYnNwOyAmbmJzcDt0aGUgbGltaXRzIG9mIHdoYXQgY2FuIGJlIGFjY29t cGxpc2hlZCBieSBlbWFpbC48YnI+DQomZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyA8 YnI+DQomZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyA8YnI+DQomZ3Q7Jmd0OyZndDsm Z3Q7Jmd0OyZndDsmZ3Q7Jmd0OyBFcmljIHdvdWxkIGtub3cgYmVzdCAoaXQgYmVpbmcgaGlzIERp c2N1c3MpLCBidXQgdGhpcyBpcyBhbHNvIG15PGJyPg0KJmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7 Jmd0OyZndDsgdW5kZXJzdGFuZGluZy48YnI+DQomZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7 Jmd0OyA8YnI+DQomZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyBJIGNhbiBhZGQgdGhp cyB0byB0aGUgYWdlbmRhIG9mIHRoZSBJRVNHIGluZm9ybWFsIHRlbGVjaGF0IG9uPGJyPg0KJmd0 OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZuYnNwOyAmbmJzcDtOb3ZlbWJlcjxicj4NCiZndDsm Z3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7IDI5LCBpZiB0aGVyZSBoYXNuJ3QgYmVlbiBhIGNh bGwgYmVmb3JlIHRoZW4sIGJ1dCBJIGRvbid0IGhhdmUgYTxicj4NCiZndDsmZ3Q7Jmd0OyZndDsm Z3Q7Jmd0OyZndDsmbmJzcDsgJm5ic3A7cmVhc29uPGJyPg0KJmd0OyZndDsmZ3Q7Jmd0OyZndDsm Z3Q7Jmd0OyZndDsgdG8gd2FpdCB1bnRpbCB0aGVuLCBpZiBpdCdzIHBvc3NpYmxlIHRvIHRhbGsg c29vbmVyLjxicj4NCiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7IDxicj4NCiZndDsm Z3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7IFRoYW5rcyw8YnI+DQomZ3Q7Jmd0OyZndDsmZ3Q7 Jmd0OyZndDsmZ3Q7Jmd0OyA8YnI+DQomZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyBT cGVuY2VyPGJyPg0KJmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsgPGJyPg0KJmd0OyZn dDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsgPGJyPg0KJmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7 Jmd0OyZndDsgPGJyPg0KJmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmbmJzcDsgJm5i c3A7ICZuYnNwOy1Fa3I8YnI+DQomZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyA8YnI+ DQomZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyA8YnI+DQomZ3Q7Jmd0OyZndDsmZ3Q7 Jmd0OyZndDsmZ3Q7Jmd0OyZuYnNwOyAmbmJzcDsgJm5ic3A7T24gTW9uLCBOb3YgMTksIDIwMTgg YXQgNjozNSBBTSBHb256YWxvIENhbWFyaWxsbzxicj4NCiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0 OyZndDsmZ3Q7Jm5ic3A7ICZuYnNwOyAmbmJzcDsmbHQ7PGEgaHJlZj0ibWFpbHRvOmdvbnphbG8u Y2FtYXJpbGxvQGVyaWNzc29uLmNvbSIgdGFyZ2V0PSJfYmxhbmsiPmdvbnphbG8uY2FtYXJpbGxv QGVyaWNzc29uLi5jb208L2E+PGJyPg0KJmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZuYnNw OyAmbmJzcDsmbHQ7bWFpbHRvOjxhIGhyZWY9Im1haWx0bzpnb256YWxvLmNhbWFyaWxsb0Blcmlj c3Nvbi5jb20iIHRhcmdldD0iX2JsYW5rIj5nb256YWxvLmNhbWFyaWxsb0Blcmljc3Nvbi5jb208 L2E+Jmd0Ozxicj4NCiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jm5ic3A7ICZuYnNw OyAmbmJzcDsmbHQ7bWFpbHRvOjxhIGhyZWY9Im1haWx0bzpnb256YWxvLmNhbWFyaWxsb0Blcmlj c3Nvbi5jb20iIHRhcmdldD0iX2JsYW5rIj5nb256YWxvLmNhbWFyaWxsb0Blcmljc3Nvbi5jb208 L2E+PGJyPg0KJmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZuYnNwOyAmbmJzcDsmbHQ7bWFp bHRvOjxhIGhyZWY9Im1haWx0bzpnb256YWxvLmNhbWFyaWxsb0Blcmljc3Nvbi5jb20iIHRhcmdl dD0iX2JsYW5rIj5nb256YWxvLmNhbWFyaWxsb0Blcmljc3Nvbi5jb208L2E+Jmd0OyZndDsmZ3Q7 IHdyb3RlOjxicj4NCiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7IDxicj4NCiZndDsm Z3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZu YnNwO0hpIFNwZW5jZXIsPGJyPg0KJmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsgPGJy Pg0KJmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmbmJzcDsgJm5ic3A7ICZuYnNwOyAm bmJzcDsgJm5ic3A7d2hhdCBpcyB0aGUgc3RhdHVzIG9mIHRoaXM/IEFyZSB0aGUgYXV0aG9ycyBh bmQgdGhlPGJyPg0KJmd0OyZndDsmZ3Q7IGRvY3VtZW50PGJyPg0KJmd0OyZndDsmZ3Q7Jmd0OyZn dDsmZ3Q7Jmd0OyZndDsmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7c2hlcGhlcmQ8 YnI+DQomZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZuYnNwOyAmbmJzcDsgJm5ic3A7 ICZuYnNwOyAmbmJzcDt3b3JraW5nIHdpdGggdGhlIHJlbGV2YW50IEFEcyBvbiB0aGUgZGlzY3Vz c2VzPzxicj4NCiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7IDxicj4NCiZndDsmZ3Q7 Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7IDxicj4NCiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZn dDsgPGJyPg0KJmd0OyZndDsmZ3Q7IDxhIGhyZWY9Imh0dHBzOi8vZGF0YXRyYWNrZXIuaWV0Zi5v cmcvZG9jL2RyYWZ0LWlldGYtdHJhbS1zdHVuLXBtdHVkL2JhbGxvdC8iIHJlbD0ibm9yZWZlcnJl ciIgdGFyZ2V0PSJfYmxhbmsiPg0KaHR0cHM6Ly9kYXRhdHJhY2tlci5pZXRmLm9yZy9kb2MvZHJh ZnQtaWV0Zi10cmFtLXN0dW4tcG10dWQvYmFsbG90LzwvYT48YnI+DQomZ3Q7Jmd0OyZndDsmZ3Q7 Jmd0OyZndDsmZ3Q7Jmd0OyA8YnI+DQomZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZu YnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDtDaGVlcnMsPGJyPg0KJmd0OyZndDsmZ3Q7 Jmd0OyZndDsmZ3Q7Jmd0OyZndDsgPGJyPg0KJmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZn dDsmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7R29uemFsbzxicj4NCiZndDsmZ3Q7 Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7IDxicj4NCiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZn dDsmZ3Q7Jmd0OyZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDtPbiAyNC1PY3QtMTgg MTY6NDAsIFNwZW5jZXIgRGF3a2lucyBhdCBJRVRGIHdyb3RlOjxicj4NCiZndDsmZ3Q7Jmd0OyZn dDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyBIaSwgTWFyYyw8YnI+DQomZ3Q7Jmd0OyZndDsmZ3Q7Jmd0 OyZndDsmZ3Q7Jmd0OyZndDsgPGJyPg0KJmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsm Z3Q7IE9uIFdlZCwgT2N0IDI0LCAyMDE4IGF0IDM6NDQgQU0gTWFyYyBQZXRpdC1IdWd1ZW5pbjxi cj4NCiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jm5ic3A7ICZuYnNwOyAmbmJzcDsg Jm5ic3A7ICZuYnNwOyZsdDs8YSBocmVmPSJtYWlsdG86cGV0aXRodWdAYWNtLm9yZyIgdGFyZ2V0 PSJfYmxhbmsiPnBldGl0aHVnQGFjbS5vcmc8L2E+ICZsdDttYWlsdG86PGEgaHJlZj0ibWFpbHRv OnBldGl0aHVnQGFjbS5vcmciIHRhcmdldD0iX2JsYW5rIj5wZXRpdGh1Z0BhY20ub3JnPC9hPiZn dDs8YnI+DQomZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jm5ic3A7ICZuYnNwOyZsdDttYWls dG86PGEgaHJlZj0ibWFpbHRvOnBldGl0aHVnQGFjbS5vcmciIHRhcmdldD0iX2JsYW5rIj5wZXRp dGh1Z0BhY20ub3JnPC9hPiAmbHQ7bWFpbHRvOjxhIGhyZWY9Im1haWx0bzpwZXRpdGh1Z0BhY20u b3JnIiB0YXJnZXQ9Il9ibGFuayI+cGV0aXRodWdAYWNtLm9yZzwvYT4mZ3Q7Jmd0Ozxicj4NCiZn dDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyAmbHQ7bWFpbHRvOjxhIGhyZWY9Im1h aWx0bzpwZXRpdGh1Z0BhY20ub3JnIiB0YXJnZXQ9Il9ibGFuayI+cGV0aXRodWdAYWNtLm9yZzwv YT4gJmx0O21haWx0bzo8YSBocmVmPSJtYWlsdG86cGV0aXRodWdAYWNtLm9yZyIgdGFyZ2V0PSJf YmxhbmsiPnBldGl0aHVnQGFjbS5vcmc8L2E+Jmd0Ozxicj4NCiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7 Jmd0OyZndDsmbmJzcDsgJm5ic3A7Jmx0O21haWx0bzo8YSBocmVmPSJtYWlsdG86cGV0aXRodWdA YWNtLm9yZyIgdGFyZ2V0PSJfYmxhbmsiPnBldGl0aHVnQGFjbS5vcmc8L2E+ICZsdDttYWlsdG86 PGEgaHJlZj0ibWFpbHRvOnBldGl0aHVnQGFjbS5vcmciIHRhcmdldD0iX2JsYW5rIj5wZXRpdGh1 Z0BhY20ub3JnPC9hPiZndDsmZ3Q7Jmd0OyZndDsgd3JvdGU6PGJyPg0KJmd0OyZndDsmZ3Q7Jmd0 OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7IDxicj4NCiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsm Z3Q7Jmd0OyZuYnNwOyAmbmJzcDsgSGkgU3BlbmNlciw8YnI+DQomZ3Q7Jmd0OyZndDsmZ3Q7Jmd0 OyZndDsmZ3Q7Jmd0OyZndDsgPGJyPg0KJmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsm Z3Q7Jm5ic3A7ICZuYnNwOyBJIHNlbnQgbXkgYW5zd2VycyB0byBFcmljIFJlc2NvcmxhIHF1ZXN0 aW9ucyBvbjxicj4NCiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmbmJzcDsgJm5ic3A7MjAx OC0xMC0wNzxicj4NCiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jm5ic3A7ICZuYnNw OyAmbmJzcDsgJm5ic3A7ICZuYnNwO2ZvbGxvd2luZzxicj4NCiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7 Jmd0OyZndDsmZ3Q7Jmd0OyZuYnNwOyAmbmJzcDsgYW4gaW4tcGVyc29uIG1lZXRpbmcgd2l0aCBt eSBjby1hdXRob3IsIGJ1dCBuZXZlcjxicj4NCiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsm bmJzcDsgJm5ic3A7Z290IGE8YnI+DQomZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZu YnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDtyZXNwb25zZTxicj4NCiZndDsmZ3Q7Jmd0 OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZuYnNwOyAmbmJzcDsgYmFjay4mbmJzcDsgQmVjYXVz ZSB0aGVyZSB3YXMgbm8gY2hhbmdlIHByb3Bvc2VkIGJ5PGJyPg0KJmd0OyZndDsmZ3Q7Jmd0OyZn dDsmZ3Q7Jmd0OyZuYnNwOyAmbmJzcDtFcmljIEkgd2VudDxicj4NCiZndDsmZ3Q7Jmd0OyZndDsm Z3Q7Jmd0OyZndDsmZ3Q7Jm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwO2FoZWFkIGFu ZDxicj4NCiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZuYnNwOyAmbmJzcDsg cHVibGlzaGVkIC0xOSBhIGNvdXBsZSBvZiB3ZWVrcyBhZnRlciB0aGF0LCB3aXRoPGJyPg0KJmd0 OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZuYnNwOyAmbmJzcDt0aGUgdGV4dDxicj4NCiZndDsm Z3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZu YnNwO2FncmVlZCBpbjxicj4NCiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZu YnNwOyAmbmJzcDsgcmVzcG9uc2UgdG8gQWRhbSdzIGFuZCBCZW5qYW1pbidzIGNvbW1lbnRzLjxi cj4NCiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyA8YnI+DQomZ3Q7Jmd0OyZn dDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsgPGJyPg0KJmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7 Jmd0OyZndDsgPGJyPg0KJmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyA8YnI+DQomZ3Q7Jmd0 OyZndDsgPGEgaHJlZj0iaHR0cHM6Ly93d3cuaWV0Zi5vcmcvbWFpbC1hcmNoaXZlL3dlYi90cmFt L2N1cnJlbnQvbXNnMDI2MzUuaHRtbCIgcmVsPSJub3JlZmVycmVyIiB0YXJnZXQ9Il9ibGFuayI+ DQpodHRwczovL3d3dy5pZXRmLm9yZy9tYWlsLWFyY2hpdmUvd2ViL3RyYW0vY3VycmVudC9tc2cw MjYzNS5odG1sPC9hPjxicj4NCiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyA8 YnI+DQomZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsgPGJyPg0KJmd0OyZndDsm Z3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7IEFoIC0gSSB3b25kZXIgaWYgdGhhdCB3YXMgd2hh dCBoYWQgaGFwcGVuZWQuPGJyPg0KJmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7 IDxicj4NCiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyBJdCBzb3VuZHMgbGlr ZSB5b3UgZGlkIHRoZSByaWdodCB0aGluZywgYW5kIHRoYXQgRXJpYzxicj4NCiZndDsmZ3Q7Jmd0 OyZndDsmZ3Q7Jmd0OyZndDsmbmJzcDsgJm5ic3A7aGFzIG5vdzxicj4NCiZndDsmZ3Q7Jmd0OyZn dDsmZ3Q7Jmd0OyZndDsmZ3Q7Jm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwO3Jlc3Bv bmRlZCw8YnI+DQomZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsgd2hpY2ggaXMg YWxzbyB0aGUgcmlnaHQgdGhpbmcgdG8gZG8uPGJyPg0KJmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7 Jmd0OyZndDsmZ3Q7IDxicj4NCiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyBU aGFua3MgZm9yIGhlbHBpbmcgbWUgdW5kZXJzdGFuZC48YnI+DQomZ3Q7Jmd0OyZndDsmZ3Q7Jmd0 OyZndDsmZ3Q7Jmd0OyZndDsgPGJyPg0KJmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsm Z3Q7IFNwZW5jZXI8YnI+DQomZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsgPGJy Pg0KJmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7IDxicj4NCiZndDsmZ3Q7Jmd0 OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmbmJzcDsgJm5ic3A7IE9uIDEwLzIzLzE4IDc6 MjggUE0sIFNwZW5jZXIgRGF3a2lucyBhdCBJRVRGIHdyb3RlOjxicj4NCiZndDsmZ3Q7Jmd0OyZn dDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsgSGksIE1hcmMsPGJyPg0KJmd0OyZndDsmZ3Q7Jmd0 OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyA8YnI+DQomZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsm Z3Q7Jmd0OyZndDsmZ3Q7IEkgc2VlIHRoYXQgYSAtMTkgaGFzIGJlZW4gc3VibWl0dGVkLCBidXQg ZGlkbid0PGJyPg0KJmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZuYnNwOyAmbmJzcDtzZWUg YTxicj4NCiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jm5ic3A7ICZuYnNwOyAmbmJz cDsgJm5ic3A7ICZuYnNwO3JlcGx5IGZyb208YnI+DQomZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsm Z3Q7Jmd0OyZndDsmbmJzcDsgJm5ic3A7IEVyaWMgaW48YnI+DQomZ3Q7Jmd0OyZndDsmZ3Q7Jmd0 OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7IHRoaXMgdGhyZWFkLiBEbyB5b3UgdGhpbmsgdGhhdCB5b3Un dmUgY29udmVyZ2VkPzxicj4NCiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZn dDsgPGJyPg0KJmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyAoSSBzYXcg YW4gb2ZmZXIgb2YgYSBjb25mZXJlbmNlIGNhbGwsIHNvIHRob3VnaHQgYW48YnI+DQomZ3Q7Jmd0 OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJz cDtvdXQtb2YtYmFuZDxicj4NCiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZn dDsgY29udmVyc2F0aW9uIG1pZ2h0IGhhdmUgaGFwcGVuZWQpPGJyPg0KJmd0OyZndDsmZ3Q7Jmd0 OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyA8YnI+DQomZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsm Z3Q7Jmd0OyZndDsmZ3Q7IFRoYW5rcyw8YnI+DQomZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7 Jmd0OyZndDsmZ3Q7IDxicj4NCiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZn dDsgU3BlbmNlcjxicj4NCiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsg PGJyPg0KJmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyBPbiBTdW4sIE9j dCA3LCAyMDE4IGF0IDk6MzUgQU0gTWFyYyBQZXRpdC1IdWd1ZW5pbjxicj4NCiZndDsmZ3Q7Jmd0 OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZuYnNwOyAmbmJzcDsgJmx0OzxhIGhyZWY9Im1haWx0 bzpwZXRpdGh1Z0BhY20ub3JnIiB0YXJnZXQ9Il9ibGFuayI+cGV0aXRodWdAYWNtLm9yZzwvYT4g Jmx0O21haWx0bzo8YSBocmVmPSJtYWlsdG86cGV0aXRodWdAYWNtLm9yZyIgdGFyZ2V0PSJfYmxh bmsiPnBldGl0aHVnQGFjbS5vcmc8L2E+Jmd0Ozxicj4NCiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0 OyZndDsmbmJzcDsgJm5ic3A7Jmx0O21haWx0bzo8YSBocmVmPSJtYWlsdG86cGV0aXRodWdAYWNt Lm9yZyIgdGFyZ2V0PSJfYmxhbmsiPnBldGl0aHVnQGFjbS5vcmc8L2E+ICZsdDttYWlsdG86PGEg aHJlZj0ibWFpbHRvOnBldGl0aHVnQGFjbS5vcmciIHRhcmdldD0iX2JsYW5rIj5wZXRpdGh1Z0Bh Y20ub3JnPC9hPiZndDsmZ3Q7PGJyPg0KJmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsm bmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7Jmx0O21haWx0bzo8YSBocmVmPSJtYWls dG86cGV0aXRodWdAYWNtLm9yZyIgdGFyZ2V0PSJfYmxhbmsiPnBldGl0aHVnQGFjbS5vcmc8L2E+ ICZsdDttYWlsdG86PGEgaHJlZj0ibWFpbHRvOnBldGl0aHVnQGFjbS5vcmciIHRhcmdldD0iX2Js YW5rIj5wZXRpdGh1Z0BhY20ub3JnPC9hPiZndDs8YnI+DQomZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZn dDsmZ3Q7Jm5ic3A7ICZuYnNwOyZsdDttYWlsdG86PGEgaHJlZj0ibWFpbHRvOnBldGl0aHVnQGFj bS5vcmciIHRhcmdldD0iX2JsYW5rIj5wZXRpdGh1Z0BhY20ub3JnPC9hPiAmbHQ7bWFpbHRvOjxh IGhyZWY9Im1haWx0bzpwZXRpdGh1Z0BhY20ub3JnIiB0YXJnZXQ9Il9ibGFuayI+cGV0aXRodWdA YWNtLm9yZzwvYT4mZ3Q7Jmd0OyZndDsmZ3Q7IHdyb3RlOjxicj4NCiZndDsmZ3Q7Jmd0OyZndDsm Z3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsgPGJyPg0KJmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0 OyZndDsmZ3Q7Jmd0OyZndDsgSGkgRXJpYyw8YnI+DQomZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsm Z3Q7Jmd0OyZndDsmZ3Q7Jmd0OyA8YnI+DQomZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0 OyZndDsmZ3Q7Jmd0OyBQbGVhc2Ugc2VlIGlubGluZS48YnI+DQomZ3Q7Jmd0OyZndDsmZ3Q7Jmd0 OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyA8YnI+DQomZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsm Z3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsgT24gMDkvMTAvMjAxOCAwMzoyNSBBTSwgRXJpYyBSZXNj b3JsYSB3cm90ZTo8YnI+DQomZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7 Jmd0OyZndDsgT24gU2F0LCBTZXAgOCwgMjAxOCBhdCAyOjMxIFBNLCBNYXJjPGJyPg0KJmd0OyZn dDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZuYnNwOyAmbmJzcDtQZXRpdC1IdWd1ZW5pbjxicj4NCiZn dDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZuYnNwOyAmbmJzcDsgJmx0OzxhIGhy ZWY9Im1haWx0bzpwZXRpdGh1Z0BhY20ub3JnIiB0YXJnZXQ9Il9ibGFuayI+cGV0aXRodWdAYWNt Lm9yZzwvYT4gJmx0O21haWx0bzo8YSBocmVmPSJtYWlsdG86cGV0aXRodWdAYWNtLm9yZyIgdGFy Z2V0PSJfYmxhbmsiPnBldGl0aHVnQGFjbS5vcmc8L2E+Jmd0Ozxicj4NCiZndDsmZ3Q7Jmd0OyZn dDsmZ3Q7Jmd0OyZndDsmbmJzcDsgJm5ic3A7Jmx0O21haWx0bzo8YSBocmVmPSJtYWlsdG86cGV0 aXRodWdAYWNtLm9yZyIgdGFyZ2V0PSJfYmxhbmsiPnBldGl0aHVnQGFjbS5vcmc8L2E+ICZsdDtt YWlsdG86PGEgaHJlZj0ibWFpbHRvOnBldGl0aHVnQGFjbS5vcmciIHRhcmdldD0iX2JsYW5rIj5w ZXRpdGh1Z0BhY20ub3JnPC9hPiZndDsmZ3Q7PGJyPg0KJmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7 Jmd0OyZndDsmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7Jmx0O21haWx0bzo8YSBo cmVmPSJtYWlsdG86cGV0aXRodWdAYWNtLm9yZyIgdGFyZ2V0PSJfYmxhbmsiPnBldGl0aHVnQGFj bS5vcmc8L2E+ICZsdDttYWlsdG86PGEgaHJlZj0ibWFpbHRvOnBldGl0aHVnQGFjbS5vcmciIHRh cmdldD0iX2JsYW5rIj5wZXRpdGh1Z0BhY20ub3JnPC9hPiZndDs8YnI+DQomZ3Q7Jmd0OyZndDsm Z3Q7Jmd0OyZndDsmZ3Q7Jm5ic3A7ICZuYnNwOyZsdDttYWlsdG86PGEgaHJlZj0ibWFpbHRvOnBl dGl0aHVnQGFjbS5vcmciIHRhcmdldD0iX2JsYW5rIj5wZXRpdGh1Z0BhY20ub3JnPC9hPiAmbHQ7 bWFpbHRvOjxhIGhyZWY9Im1haWx0bzpwZXRpdGh1Z0BhY20ub3JnIiB0YXJnZXQ9Il9ibGFuayI+ cGV0aXRodWdAYWNtLm9yZzwvYT4mZ3Q7Jmd0OyZndDsmZ3Q7PGJyPg0KJmd0OyZndDsmZ3Q7Jmd0 OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7IHdyb3RlOjxicj4NCiZndDsmZ3Q7Jmd0 OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyA8YnI+DQomZ3Q7Jmd0OyZndDsm Z3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7IEhpIEVyaWMsPGJyPg0KJmd0 OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyA8YnI+DQom Z3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7IEFwb2xv Z2llcyBmb3IgdGhlIGRlbGF5IGluIGdldHRpbmcgYmFjayB0byB0aGF0Ljxicj4NCiZndDsmZ3Q7 Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsgPGJyPg0KJmd0OyZn dDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyBJIHRoaW5rIHRo YXQgdGhlcmUgaXMgc29tZSBtaXN1bmRlcnN0YW5kaW5nPGJyPg0KJmd0OyZndDsmZ3Q7Jmd0OyZn dDsmZ3Q7Jmd0OyZuYnNwOyAmbmJzcDtpbiB3aGF0PGJyPg0KJmd0OyZndDsmZ3Q7Jmd0OyZndDsm Z3Q7Jmd0OyZndDsmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7U1RVTmJpcyBpczxi cj4NCiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZuYnNwOyAmbmJzcDsgdHJ5 aW5nIHRvPGJyPg0KJmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsm Z3Q7Jmd0OyBkbywgc28gcGxlYXNlIHNlZSBteSBjb21tZW50cyBpbmxpbmUuPGJyPg0KJmd0OyZn dDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyA8YnI+DQomZ3Q7 Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyBPbiAw Ni8xOC8yMDE4IDEwOjQzIEFNLCBFcmljIFJlc2NvcmxhIHdyb3RlOjxicj4NCiZndDsmZ3Q7Jmd0 OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7IEhpIGZvbGtzLDxi cj4NCiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsm Z3Q7IDxicj4NCiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0 OyZndDsmZ3Q7IEkndmUgcmV2aWV3ZWQgdGhlIG5ldyB2ZXJzaW9uLCBidXQgSSBkb24ndDxicj4N CiZndDsmZ3Q7Jmd0OyB0aGluazxicj4NCiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7 Jm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwO3RoYXQgdGhlIGJpZGRvd248YnI+DQom Z3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyBk aXNjdXNzaW9uIG1ha2VzIG11Y2ggc2Vuc2UuPGJyPg0KJmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7 Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsgPGJyPg0KJmd0OyZndDsmZ3Q7Jmd0OyZn dDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsgVG8gcmVjYXAsIHRoZXJlIGFy ZSB0d28gaGFzaGVzIGhlcmU6PGJyPg0KJmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsm Z3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsgPGJyPg0KJmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0 OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsgLSBUaGUgaGFzaCB3aGljaCB5b3UgdXNlIHRv IHN0b3JlIHRoZTxicj4NCiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmbmJzcDsgJm5ic3A7 cGFzc3dvcmQgd2l0aDxicj4NCiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jm5ic3A7 ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyhjdXJyZW50bHk8YnI+DQomZ3Q7Jmd0OyZndDsm Z3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmbmJzcDsgJm5ic3A7IG1vc3RseTxicj4NCiZndDsmZ3Q7 Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsgTUQ1KTxicj4NCiZn dDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7IC0g VGhlIGhhc2ggeW91IHVzZSB0byBjb21wdXRlIHRoZSBNQUM8YnI+DQomZ3Q7Jmd0OyZndDsmZ3Q7 Jmd0OyZndDsmZ3Q7Jm5ic3A7ICZuYnNwOyhjdXJyZW50bHkgU0hBLTEpLjxicj4NCiZndDsmZ3Q7 Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7IDxicj4NCiZn dDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7IEZp cnN0LCBsZXQncyBzdGlwdWxhdGUgdGhhdCBNRDUgaXNuJ3QgYTxicj4NCiZndDsmZ3Q7Jmd0OyZn dDsmZ3Q7Jmd0OyZndDsmbmJzcDsgJm5ic3A7Z3JlYXQgY2hvaWNlPGJyPg0KJmd0OyZndDsmZ3Q7 Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7aGVy ZSw8YnI+DQomZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmbmJzcDsgJm5ic3A7 IHRob3VnaCBTSEEtMTxicj4NCiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZn dDsmZ3Q7Jmd0OyZndDsmZ3Q7IGlzbid0IGEgZ3JlYXQgY2hvaWNlPGJyPg0KJmd0OyZndDsmZ3Q7 Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsgZWl0aGVyIGZvciBw d2QgaGFzaGluZyBZb3Ugd2FudCBBcmdvbiBvciB0aGU8YnI+DQomZ3Q7Jmd0OyZndDsmZ3Q7Jmd0 OyZndDsmZ3Q7Jm5ic3A7ICZuYnNwO2xpa2UuPGJyPg0KJmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7 Jmd0OyZndDsmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7V2l0aCB0aGF0IHNhaWQs PGJyPg0KJmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0 OyB0aGVyZSdzPGJyPg0KJmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZn dDsmZ3Q7Jmd0OyZndDsgbm8gc2Vuc2libGU8YnI+DQomZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsm Z3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyBiaWRkb3duIGF0dGFjayBvbiB0aGF0IGhh c2ggYmVjYXVzZSBpdCdzIGE8YnI+DQomZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZu YnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDtwZXItc2VydmVyIGZlYXR1cmUsPGJyPg0K Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jm5ic3A7ICZuYnNwOyBub3QgYTxi cj4NCiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsm Z3Q7IHBlci10cmFuc2FjdGlvbjxicj4NCiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7 Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7IGZlYXR1cmUuIFNvLCBhcyBsb25nIGFzIHRoZSBzZXJ2 ZXIgaGFzPGJyPg0KJmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZuYnNwOyAmbmJzcDtNRDUt aGFzaGVkPGJyPg0KJmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmbmJzcDsgJm5ic3A7 ICZuYnNwOyAmbmJzcDsgJm5ic3A7cGFzc3dvcmRzLCB0aGU8YnI+DQomZ3Q7Jmd0OyZndDsmZ3Q7 Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7IHNpdHVhdGlvbjxicj4NCiZndDsm Z3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7IGlzIGJh ZC48YnI+DQomZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsm Z3Q7IDxicj4NCiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0 OyZndDsgSW4gbm8gcGxhY2UgaW4gU1RVTmJpcyB3ZSBhcmUgcHJvcG9zaW5nIHRvPGJyPg0KJmd0 OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZuYnNwOyAmbmJzcDt1c2UgU0hBLTE8YnI+DQomZ3Q7 Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAm bmJzcDtmb3IgcGFzc3dvcmQ8YnI+DQomZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZn dDsmZ3Q7Jmd0OyZndDsmZ3Q7IGVuY3J5cHRpb24sIHNvIEkgYW0gbm90IHN1cmUgd2hlcmUgdGhh dCBjb21lPGJyPg0KJmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZuYnNwOyAmbmJzcDtmcm9t Ljxicj4NCiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jm5ic3A7ICZuYnNwOyAmbmJz cDsgJm5ic3A7ICZuYnNwO1doYXQgd2U8YnI+DQomZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7 Jmd0OyZndDsmbmJzcDsgJm5ic3A7IHByb3Bvc2UgaXM6PGJyPg0KJmd0OyZndDsmZ3Q7Jmd0OyZn dDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyA8YnI+DQomZ3Q7Jmd0OyZndDsmZ3Q7 Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsgPGJyPg0KJmd0OyZndDsmZ3Q7Jmd0OyZn dDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7IFlvdSdyZSByaWdodCwgaXQncyBTSEEtMjU2 LCBidXQgbXkgY3JpdGljaXNtczxicj4NCiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmbmJz cDsgJm5ic3A7YXBwbHk8YnI+DQomZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZuYnNw OyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDtlcXVhbGx5IHRoZXJlLjxicj4NCiZndDsmZ3Q7 Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7IDxicj4NCiZndDsmZ3Q7Jmd0OyZn dDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7IFNIQS0yNTYgd2FzIHdoYXQgdGhlIFdHIGFk b3B0ZWQuJm5ic3A7IE91ciBhdHRlbXB0czxicj4NCiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZn dDsmbmJzcDsgJm5ic3A7dG8gYWRkPGJyPg0KJmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZn dDsmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7b3RoZXIgcGFzc3dvcmRzPGJyPg0K Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsgZW5jcnlwdGlvbiBt ZWNoYW5pc21zIHdlcmUgZGVuaWVkLiZuYnNwOyBJdCBpcyB0cnVlPGJyPg0KJmd0OyZndDsmZ3Q7 IHRoYXQ8YnI+DQomZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZuYnNwOyAmbmJzcDsg Jm5ic3A7ICZuYnNwOyAmbmJzcDtBcmdvbjIgd2FzPGJyPg0KJmd0OyZndDsmZ3Q7Jmd0OyZndDsm Z3Q7Jmd0OyZndDsmZ3Q7Jm5ic3A7ICZuYnNwOyBub3QgaW4gdGhhdDxicj4NCiZndDsmZ3Q7Jmd0 OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7IGxpc3QgKGluIG91ciBkZWZlbnNlIEFy Z29uMiB3YXMgbm90IGtub3duPGJyPg0KJmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZuYnNw OyAmbmJzcDtiZWZvcmUgSnVseTxicj4NCiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7 Jm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOzIwMTUpLCBidXQ8YnI+DQomZ3Q7Jmd0 OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmbmJzcDsgJm5ic3A7IEkgZG8gbm90PGJyPg0K Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsgc2VlIHdoeSB0aGUg V0cgd291bGQgaGF2ZSBhY2NlcHRlZCB0aGF0IG9uZTxicj4NCiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7 Jmd0OyZndDsmbmJzcDsgJm5ic3A7b3ZlciB0aGU8YnI+DQomZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZn dDsmZ3Q7Jmd0OyZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDtvdGhlcnMuPGJyPg0K Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jm5ic3A7ICZuYnNwOyBBbnl3YXkg aXQgaXM8YnI+DQomZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyB0 b28gbGF0ZSB0byBmaXggdGhpcywgYXMgaXQgaXMgbXkgdW5kZXJzdGFuZGluZzxicj4NCiZndDsm Z3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmbmJzcDsgJm5ic3A7dGhhdDxicj4NCiZndDsmZ3Q7Jmd0 OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwO3Ro ZSBXRyBkb2VzPGJyPg0KJmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jm5ic3A7 ICZuYnNwOyBub3QgaGF2ZTxicj4NCiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0 OyZndDsmZ3Q7IGVub3VnaCBlbmVyZ3kgdG8gcmVhY2ggY29uc2Vuc3VzIG9uIGEgbmV3IHBhc3N3 b3JkPGJyPg0KJmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmbmJzcDsgJm5ic3A7ICZu YnNwOyAmbmJzcDsgJm5ic3A7YWxnb3JpdGhtLi48YnI+DQomZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZn dDsmZ3Q7Jmd0OyZndDsmbmJzcDsgJm5ic3A7IFNvbWVvbmUgY2FuPGJyPg0KJmd0OyZndDsmZ3Q7 Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsganVzdCB3cml0ZSBhIGRyYWZ0IGFkZGlu ZyBBcmdvbjIgYXMgcGFzc3dvcmQ8YnI+DQomZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0 OyZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDtlbmNyeXB0aW9uLCBhcyB3ZTxicj4N CiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZuYnNwOyAmbmJzcDsgd2lsbCBo YXZlIGE8YnI+DQomZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyBJ QU5BIHJlZ2lzdHJ5IGZvciB0aGF0Ljxicj4NCiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsm Z3Q7Jmd0OyZndDsmZ3Q7IDxicj4NCiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0 OyZndDsmZ3Q7Jmd0OyA8YnI+DQomZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsm Z3Q7Jmd0OyZndDsgPGJyPg0KJmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0 OyZndDsmZ3Q7Jmd0OyAtIEVzdGFibGlzaCBhIHJlZ2lzdHJ5IGZvciBuZXcgcGFzc3dvcmQ8YnI+ DQomZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jm5ic3A7ICZuYnNwO2FsZ29yaXRobXM8YnI+ DQomZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZuYnNwOyAmbmJzcDsgJm5ic3A7ICZu YnNwOyAmbmJzcDsoc2VjdGlvbjxicj4NCiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7 Jmd0OyZuYnNwOyAmbmJzcDsgMTguNSksIHNvPGJyPg0KJmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7 Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyBhbGdvcml0aG1zIGxpa2UgQXJnb24yIGNvdWxk IGJlIGFkZGVkIGxhdGVyPGJyPg0KJmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZuYnNwOyAm bmJzcDsoYnV0IG5vdGU8YnI+DQomZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZuYnNw OyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDt0aGF0IG91ciBvd248YnI+DQomZ3Q7Jmd0OyZn dDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7IHByb3Bvc2FscyB0byBh ZGQgbW9yZSBwYXNzd29yZCBhbGdvcml0aG1zIHdlcmU8YnI+DQomZ3Q7Jmd0OyZndDsmZ3Q7Jmd0 OyZndDsmZ3Q7Jmd0OyZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDtyZWplY3RlZCBi eSB0aGU8YnI+DQomZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmbmJzcDsgJm5i c3A7IHdvcmtpbmc8YnI+DQomZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7 Jmd0OyZndDsmZ3Q7IGdyb3VwKS48YnI+DQomZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0 OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7IC0gQWRkIGEgbmV3IHBhc3N3b3JkIGFsZ29yaXRobSB0byB0 aGF0IHJlZ2lzdHJ5LDxicj4NCiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jm5ic3A7 ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwO25hbWVseSBTSEEtMjU2Ljxicj4NCiZndDsmZ3Q7 Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsgLSBSZWdpc3RlciBN RDUgYXMgYW4gaW5pdGlhbCBwYXNzd29yZDxicj4NCiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZn dDsmbmJzcDsgJm5ic3A7YWxnb3JpdGhtIGZvcjxicj4NCiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0 OyZndDsmZ3Q7Jm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwO2JhY2t3YXJkPGJyPg0K Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsgY29tcGF0aWJpbGl0 eTxicj4NCiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZn dDsgcHVycG9zZS48YnI+DQomZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7 Jmd0OyZndDsmZ3Q7IDxicj4NCiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZn dDsmZ3Q7Jmd0OyZndDsgQXMgZm9yIHRoZSBiaWRkb3duIHByb3RlY3Rpb24gaXRzZWxmLCBpdCBp cyBteTxicj4NCiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jm5ic3A7ICZuYnNwOyAm bmJzcDsgJm5ic3A7ICZuYnNwO3JlY29sbGVjdGlvbiB0aGF0IGl0PGJyPg0KJmd0OyZndDsmZ3Q7 Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyBoYXBwZW5lZCBtb3JlIG9y IGxlc3MgbGlrZSB0aGF0Ojxicj4NCiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0 OyZndDsmZ3Q7Jmd0OyZndDsgPGJyPg0KJmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsm Z3Q7Jmd0OyZndDsmZ3Q7Jmd0OyA8YnI+DQomZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0 OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7IElOVC4gTUVFVElORyBST09NIC0gREFZPGJyPg0KJmd0OyZn dDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyA8YnI+DQomZ3Q7 Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7IE9uZSBvZiB0 aGUgY28tZWRpdG9ycyBvZiBTVFVOQmlzIHN0YW5kcyBhdCB0aGU8YnI+DQomZ3Q7Jmd0OyZndDsm Z3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDttaWNy b3Bob25lOjxicj4NCiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7 Jmd0OyZndDsgPGJyPg0KJmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZn dDsmZ3Q7Jmd0OyZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNw OyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDtDTy1FRElU T1I8YnI+DQomZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsm Z3Q7Jm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNw OyAmbmJzcDtXZSBhZGRlZCBTSEEtMjU2IHByb3RlY3Rpb24gZm9yPGJyPg0KJmd0OyZndDsmZ3Q7 Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7cGFz c3dvcmRzPGJyPg0KJmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsm Z3Q7Jmd0OyZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAm bmJzcDsgJm5ic3A7aW4gU1RVTkJpcy48YnI+DQomZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7 Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7IDxicj4NCiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZn dDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5i c3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJz cDsgJm5ic3A7U09NRU9ORSAoVi5PLik8YnI+DQomZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7 Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNw OyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDtBcyBNRDUgc3RpbGwgbmVlZCB0byBiZTxicj4N CiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmbmJzcDsgJm5ic3A7c3VwcG9ydGVkLDxicj4N CiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5i c3A7ICZuYnNwO3lvdSBuZWVkIHRvIGFkZDxicj4NCiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZn dDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5i c3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwO3Byb3RlY3Rpb24gZm9yIGJpZC1kb3duPGJy Pg0KJmd0OyZndDsmZ3Q7IGF0dGFja3MuPGJyPg0KJmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0 OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyA8YnI+DQomZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsm Z3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7IENMT1NFLVVQIG9uIENPLUVESVRPUiBST0xMSU5H IEhJUyBFWUVTPGJyPg0KJmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZn dDsmZ3Q7Jmd0OyA8YnI+DQomZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7 Jmd0OyZndDsmZ3Q7Jm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5i c3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwO0NPLUVE SVRPUjxicj4NCiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0 OyZndDsmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5i c3A7ICZuYnNwO09LLCBJJ2xsIHdvcmsgb24gdGhhdC48YnI+DQomZ3Q7Jmd0OyZndDsmZ3Q7Jmd0 OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7IDxicj4NCiZndDsmZ3Q7Jmd0OyZndDsm Z3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsgRm91ciB0byBlaWdodCBtb250aHMg aGFzIHBhc3NlZC48YnI+DQomZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7 Jmd0OyZndDsmZ3Q7IDxicj4NCiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZn dDsmZ3Q7Jmd0OyZndDsgSU5ULiBBTk9USEVSIE1FRVRJTkcgUk9PTSAtIERBWTxicj4NCiZndDsm Z3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsgPGJyPg0KJmd0 OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyBUaGUgc2Ft ZSBjby1lZGl0b3Igb2YgU1RVTkJpcyBzdGFuZHMgYXQgdGhlPGJyPg0KJmd0OyZndDsmZ3Q7Jmd0 OyZndDsmZ3Q7Jmd0OyZuYnNwOyAmbmJzcDttaWNyb3Bob25lOjxicj4NCiZndDsmZ3Q7Jmd0OyZn dDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsgPGJyPg0KJmd0OyZndDsmZ3Q7 Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZuYnNwOyAmbmJzcDsgJm5i c3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJz cDsgJm5ic3A7ICZuYnNwOyAmbmJzcDtDTy1FRElUT1I8YnI+DQomZ3Q7Jmd0OyZndDsmZ3Q7Jmd0 OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5i c3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDtXZSBhZGRlZCBhIG5pY2UgbWVj aGFuaXNtIHRvPGJyPg0KJmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZuYnNwOyAmbmJzcDtw cmV2ZW50PGJyPg0KJmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmbmJzcDsgJm5ic3A7 ICZuYnNwOyAmbmJzcDsgJm5ic3A7YmlkLWRvd248YnI+DQomZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZn dDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7 ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDthdHRhY2tzIG9uIHBhc3N3b3Jkcy4m bmJzcDsgQW55PGJyPg0KJmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZuYnNwOyAmbmJzcDtj b21tZW50cz88YnI+DQomZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0 OyZndDsmZ3Q7IDxicj4NCiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsm Z3Q7Jmd0OyZndDsmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJz cDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7VEhFIFJP T008YnI+DQomZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsm Z3Q7Jm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNw OyAmbmJzcDsoc2lsZW5jZSk8YnI+DQomZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZn dDsmZ3Q7Jmd0OyZndDsmZ3Q7IDxicj4NCiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7 Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZu YnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5i c3A7Q08tRURJVE9SPGJyPg0KJmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0 OyZndDsmZ3Q7Jmd0OyZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZu YnNwOyAmbmJzcDsgJm5ic3A7TW92aW5nIG9uLi4uPGJyPg0KJmd0OyZndDsmZ3Q7Jmd0OyZndDsm Z3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyA8YnI+DQomZ3Q7Jmd0OyZndDsmZ3Q7Jmd0 OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsgPGJyPg0KJmd0OyZndDsmZ3Q7Jmd0OyZndDsm Z3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7IEkgZG9uJ3Qgc2VlIGhvdyBhbnkgb2YgdGhpcyBp cyByZWxldmFudCB0byBteTxicj4NCiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jm5i c3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwO3RlY2huaWNhbCBwb2ludHM8YnI+DQomZ3Q7 Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmbmJzcDsgJm5ic3A7IGFib3ZlLjxicj4N CiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7IDxicj4NCiZndDsm Z3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7IE15IHBvaW50IHdhcyB0aGF0 IHdlLCB0aGUgY28tZWRpdG9ycywgZGlkIG5vdDxicj4NCiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0 OyZndDsmbmJzcDsgJm5ic3A7ZGVjaWRlIG9uPGJyPg0KJmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7 Jmd0OyZndDsmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7YWRkaW5nPGJyPg0KJmd0 OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jm5ic3A7ICZuYnNwOyBiaWQtZG93bjxi cj4NCiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7IHByb3RlY3Rp b24sIHNvbWVvbmUgYXNrZWQgdXMgdG8gZG8gc28gYW5kPGJyPg0KJmd0OyZndDsmZ3Q7Jmd0OyZn dDsmZ3Q7Jmd0OyZuYnNwOyAmbmJzcDtuby1vbmUgaW4gdGhlPGJyPg0KJmd0OyZndDsmZ3Q7Jmd0 OyZndDsmZ3Q7Jmd0OyZndDsmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7V0cgc2F3 PGJyPg0KJmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jm5ic3A7ICZuYnNwOyBh bnkgcHJvYmxlbTxicj4NCiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsm Z3Q7IHdpdGggdGhhdC4mbmJzcDsgVGhlIHJlYXNvbnMgdGhhdCBwZXJzb24gd2FudGVkIHRoYXQ8 YnI+DQomZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jm5ic3A7ICZuYnNwO2FyZSBub3Q8YnI+ DQomZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZuYnNwOyAmbmJzcDsgJm5ic3A7ICZu YnNwOyAmbmJzcDtrbm93biB0bzxicj4NCiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7 Jmd0OyZuYnNwOyAmbmJzcDsgdXMgYnV0LCBhczxicj4NCiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0 OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7IHlvdSBpbnNpc3QsIGhlcmUncyBvbmUgcmVhc29uIEkgY2Fu IHRoaW5rIG9mOjxicj4NCiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsm Z3Q7IDxicj4NCiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7IEl0 IGlzIGEgZmFjdCB0aGF0LCBmb3Igb3BlcmF0aW9uYWwgcmVhc29ucywgYTxicj4NCiZndDsmZ3Q7 Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmbmJzcDsgJm5ic3A7cGFzc3dvcmQ8YnI+DQomZ3Q7Jmd0OyZn dDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDtk YXRhYmFzZTxicj4NCiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZuYnNwOyAm bmJzcDsgY2Fubm90IGJlPGJyPg0KJmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7 Jmd0OyZndDsgcmUtZW5jcnlwdGVkIGF0IG9uY2UuJm5ic3A7IEFsc28gZm9yIG9wZXJhdGlvbmFs PGJyPg0KJmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZuYnNwOyAmbmJzcDtyZWFzb25zLDxi cj4NCiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jm5ic3A7ICZuYnNwOyAmbmJzcDsg Jm5ic3A7ICZuYnNwO3RoZSBNRDUgcGFzc3dvcmQ8YnI+DQomZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZn dDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyBjYW5ub3QgYmUgaW1tZWRpYXRlbHkgcmVtb3ZlZCBmcm9t IHRoZSBkYXRhYmFzZTxicj4NCiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmbmJzcDsgJm5i c3A7YXMgc29vbjxicj4NCiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jm5ic3A7ICZu YnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwO3RoZSB1c2VyPGJyPg0KJmd0OyZndDsmZ3Q7Jmd0OyZn dDsmZ3Q7Jmd0OyZndDsmZ3Q7Jm5ic3A7ICZuYnNwOyBzdWJtaXR0ZWQ8YnI+DQomZ3Q7Jmd0OyZn dDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyBhIG5ldyBvbmUuJm5ic3A7IEluIGZh Y3QsIGFuZCBmb3IgcXVpdGUgc29tZSB0aW1lLCBib3RoPGJyPg0KJmd0OyZndDsmZ3Q7Jmd0OyZn dDsmZ3Q7Jmd0OyZndDsmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ZW5jcnlwdGVk PGJyPg0KJmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jm5ic3A7ICZuYnNwOyB2 YXJpYW50cyBvZjxicj4NCiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsm Z3Q7IHRoZSBzYW1lIHBhc3N3b3JkIG1heSBoYXZlIHRvIGJlIGtlcHQgaW4gdGhhdDxicj4NCiZn dDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmbmJzcDsgJm5ic3A7ZGF0YWJhc2UsPGJyPg0KJmd0 OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsg Jm5ic3A7YmVjYXVzZSBhPGJyPg0KJmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7 Jm5ic3A7ICZuYnNwOyBzaW5nbGU8YnI+DQomZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0 OyZndDsmZ3Q7Jmd0OyB1c2VyIG1heSB1c2UgYSBtaXggb2YgZGV2aWNlcywgc29tZSBvZiB0aGVt PGJyPg0KJmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZuYnNwOyAmbmJzcDt0aGF0IHVzZSBh bjxicj4NCiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jm5ic3A7ICZuYnNwOyAmbmJz cDsgJm5ic3A7ICZuYnNwO1JGQyA1Mzg5PGJyPg0KJmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0 OyZndDsmZ3Q7Jm5ic3A7ICZuYnNwOyBjbGllbnQsPGJyPg0KJmd0OyZndDsmZ3Q7Jmd0OyZndDsm Z3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsgc29tZSB0aGF0IHVzZSBhIFNUVU5iaXMgY2xpZW50Li4m bmJzcDsgSXQgaXMgdXAgdG88YnI+DQomZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jm5ic3A7 ICZuYnNwO3RoZSBTVFVOPGJyPg0KJmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmbmJz cDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7c2VydmVyIG93bmVyIHRvPGJyPg0KJmd0OyZn dDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsgZGVjaWRlIGhvdyBsb25nIHRo ZSBtaWdyYXRpb24gdG8gU1RVTmJpcyB3aWxsPGJyPg0KJmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7 Jmd0OyZuYnNwOyAmbmJzcDt0YWtlIGFuZDxicj4NCiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZn dDsmZ3Q7Jm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwO3doZW4gaXQ8YnI+DQomZ3Q7 Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmbmJzcDsgJm5ic3A7IHdpbGwgYmU8YnI+ DQomZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyBhY2NlcHRhYmxl IHRvIHJlamVjdCBhbGwgUkZDIDUzODkgKGkuZS4gTUQ1KTxicj4NCiZndDsmZ3Q7Jmd0OyZndDsm Z3Q7Jmd0OyZndDsmbmJzcDsgJm5ic3A7Y2xpZW50cyAodGhhdDxicj4NCiZndDsmZ3Q7Jmd0OyZn dDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZuYnNwOyAmbmJzcDsgbWlncmF0aW9uIHRpbWU8YnI+DQom Z3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyBjYW4gYmUgcHVycG9z ZWx5IHJlZHVjZWQgdG8gMCBzZWNvbmRzIGJ1dDxicj4NCiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0 OyZndDsmbmJzcDsgJm5ic3A7dGhhdCdzIHRoZTxicj4NCiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0 OyZndDsmZ3Q7Jm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwO2Nob2ljZSBhbmQ8YnI+ DQomZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyByZXNwb25zaWJp bGl0eSBvZiB0aGUgb3duZXIgb2YgdGhlIHNlcnZlcikuPGJyPg0KJmd0OyZndDsmZ3Q7Jmd0OyZn dDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsgPGJyPg0KJmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7 Jmd0OyZndDsmZ3Q7Jmd0OyZndDsgTWVhbndoaWxlIHdlIHN0aWxsIG5lZWQgdG8gYmUgc3VyZSB0 aGF0IGlmIHRoZTxicj4NCiZndDsmZ3Q7Jmd0OyBTVFVOPGJyPg0KJmd0OyZndDsmZ3Q7Jmd0OyZn dDsmZ3Q7Jmd0OyZndDsmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7Y2xpZW50IGlz PGJyPg0KJmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jm5ic3A7ICZuYnNwOyBp bXBsZW1lbnRpbmc8YnI+DQomZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7 Jmd0OyBTVFVOYmlzIGl0IHVuY29uZGl0aW9uYWxseSBnZXRzIHRoZSBhZGRpdGlvbmFsPGJyPg0K Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJz cDsgJm5ic3A7cHJvdGVjdGlvbiBvZiB0aGUgbmV3PGJyPg0KJmd0OyZndDsmZ3Q7Jmd0OyZndDsm Z3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsgcGFzc3dvcmQgZW5jcnlwdGlvbiBhbGdvcml0aG0uJm5i c3A7IFRoYXQncyB3aGVyZTxicj4NCiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmbmJzcDsg Jm5ic3A7dGhlIGJpZGRvd248YnI+DQomZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZn dDsmbmJzcDsgJm5ic3A7IHByb3RlY3Rpb24ga2lja3M8YnI+DQomZ3Q7Jmd0OyZndDsmZ3Q7Jmd0 OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyBpbiwgYnkgcHJldmVudGluZyBhbiBvbmxpbmUgYXR0 YWNrZXIgdG8gaGF2ZTxicj4NCiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmbmJzcDsgJm5i c3A7dGhlIHNlcnZlcjxicj4NCiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZu YnNwOyAmbmJzcDsgbWlzaWRlbnRpZnlpbmcgYTxicj4NCiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0 OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7IFNUVU5iaXMgY2xpZW50IGFzIGFuIFJGQyA1Mzg5IGNsaWVu dCwgYnk8YnI+DQomZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jm5ic3A7ICZuYnNwO3ByZXZl bnRpbmcgYW48YnI+DQomZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZuYnNwOyAmbmJz cDsgJm5ic3A7ICZuYnNwOyAmbmJzcDtvbmxpbmU8YnI+DQomZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZn dDsmZ3Q7Jmd0OyZndDsmbmJzcDsgJm5ic3A7IGF0dGFja2VyIHRvPGJyPg0KJmd0OyZndDsmZ3Q7 Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsgaGF2ZSB0aGUgY2xpZW50IG1pc2lkZW50 aWZ5aW5nIGEgU1RVTmJpcyBzZXJ2ZXI8YnI+DQomZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7 Jm5ic3A7ICZuYnNwO2FzIGE8YnI+DQomZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZu YnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDtSRkMgNTM4OTxicj4NCiZndDsmZ3Q7Jmd0 OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZuYnNwOyAmbmJzcDsgc2VydmVyLCBhbmQ8YnI+DQom Z3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyBoYXZpbmcgYm90aCB0 aGVtIHVzZSB0aGUgTUQ1IGVuY3J5cHRlZCBwYXNzd29yZDxicj4NCiZndDsmZ3Q7Jmd0OyZndDsm Z3Q7Jmd0OyZndDsmbmJzcDsgJm5ic3A7aW5zdGVhZDxicj4NCiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7 Jmd0OyZndDsmZ3Q7Jm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwO29mIHRoZTxicj4N CiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZuYnNwOyAmbmJzcDsgU0hBLTI1 Njxicj4NCiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7IGVuY3J5 cHRlZCBwYXNzd29yZCwgYWxsIG9mIHRoYXQgZWFzaWx5IGRvbmUgYnk8YnI+DQomZ3Q7Jmd0OyZn dDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDtz dHJpcHBpbmcgdGhlPGJyPg0KJmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jm5i c3A7ICZuYnNwOyB1bnByb3RlY3RlZDxicj4NCiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsm Z3Q7Jmd0OyZndDsmZ3Q7IDQwMSByZXNwb25zZSBvZiB0aGUgbmV3IFNUVU5iaXM8YnI+DQomZ3Q7 Jmd0OyZndDsgUEFTU1dPUkQtQUxHT1JJVEhNUzxicj4NCiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0 OyZndDsmZ3Q7Jm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwO2F0dHJpYnV0ZS4uPGJy Pg0KJmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsgPGJyPg0KJmd0 OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7IDxicj4NCiZndDsm Z3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyA8YnI+DQomZ3Q7Jmd0 OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsgPGJyPg0KJmd0OyZndDsm Z3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsgVGhlIHNlY29u ZCB0b3BpYyBpcyB0aGUgaGFzaCB1c2VkIHRvIGNvbXB1dGU8YnI+DQomZ3Q7Jmd0OyZndDsgdGhl PGJyPg0KJmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmbmJzcDsgJm5ic3A7ICZuYnNw OyAmbmJzcDsgJm5ic3A7TUFDLiBIb3dldmVyLDxicj4NCiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0 OyZndDsmZ3Q7Jmd0OyZuYnNwOyAmbmJzcDsgSSBkb24ndDxicj4NCiZndDsmZ3Q7Jmd0OyZndDsm Z3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsgc2VlPGJyPg0KJmd0OyZndDsmZ3Q7 Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsgaG93PGJyPg0KJmd0 OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsgdGhp cyBnaXZlcyB5b3Ugc2Vuc2libGUgYmlkZG93biBwcm90ZWN0aW9uPGJyPg0KJmd0OyZndDsmZ3Q7 Jmd0OyZndDsmZ3Q7Jmd0OyZuYnNwOyAmbmJzcDtiZWNhdXNlPGJyPg0KJmd0OyZndDsmZ3Q7Jmd0 OyZndDsmZ3Q7Jmd0OyZndDsmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7dGhhdCBo YXNoPGJyPg0KJmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jm5ic3A7ICZuYnNw OyBpcyBhbHNvPGJyPg0KJmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZn dDsgdXNlZDxicj4NCiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7 Jmd0OyZndDsmZ3Q7IHRvIGNvbXB1dGU8YnI+DQomZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7 Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyBNQUMgb3ZlciB0aGUgbmVnb3RpYXRpb246IGFu IGF0dGFja2VyIHdobyBoYXM8YnI+DQomZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZu YnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDtjb21wcm9taXNlZCBhPGJyPg0KJmd0OyZn dDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jm5ic3A7ICZuYnNwOyBNQUMgd2hpY2g8YnI+ DQomZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyB0aGU8YnI+DQom Z3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyBz ZXJ2ZXI8YnI+DQomZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZn dDsmZ3Q7Jmd0OyBzdXBwb3J0cyB3aWxsIHF1aXRlIGxpa2VseSBiZSBhYmxlIHRvIGZvcmdlPGJy Pg0KJmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZuYnNwOyAmbmJzcDthIE1BQzxicj4NCiZn dDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7 ICZuYnNwO292ZXIgdGhlPGJyPg0KJmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7 Jm5ic3A7ICZuYnNwOyB0cmFuc2NyaXB0PGJyPg0KJmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0 OyZndDsmZ3Q7Jmd0OyZndDsgYXM8YnI+DQomZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0 OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyB3ZWxsLiBUaGlzIGlzLDxicj4NCiZndDsmZ3Q7Jmd0 OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7IEkgc3VwcG9zZSwg cG90ZW50aWFsbHkgdXNlZnVsIGFzIGEgZGVmZW5zZTxicj4NCiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7 Jmd0OyZndDsmbmJzcDsgJm5ic3A7YWdhaW5zdDxicj4NCiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0 OyZndDsmZ3Q7Jm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwO3NvbWUgb3RoZXI8YnI+ DQomZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmbmJzcDsgJm5ic3A7IHdlYWtu ZXNzPGJyPg0KJmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7 Jmd0OyZndDsgKGUuZy4sPGJyPg0KJmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7 Jmd0OyZndDsmZ3Q7Jmd0OyZndDsgdmVyc2lvbiAjKSwgYnV0IEkgZG9uJ3QgcmVhbGx5IHNlZSBo b3cgdGhlPGJyPg0KJmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZuYnNwOyAmbmJzcDtjdXJy ZW50PGJyPg0KJmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmbmJzcDsgJm5ic3A7ICZu YnNwOyAmbmJzcDsgJm5ic3A7ZGVzaWduPGJyPg0KJmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0 OyZndDsmZ3Q7Jm5ic3A7ICZuYnNwOyBoZWxwcyBhZ2FpbnN0PGJyPg0KJmd0OyZndDsmZ3Q7Jmd0 OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsgYXR0YWNrcyBvbiB0aGU8 YnI+DQomZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7 Jmd0OyBNQUMuPGJyPg0KJmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZn dDsmZ3Q7Jmd0OyA8YnI+DQomZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7 Jmd0OyZndDsmZ3Q7IFRoZXJlIGlzIG5vIGJpZGRvd24gYXR0YWNrIHByb3RlY3Rpb24gZm9yIHRo ZTxicj4NCiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmbmJzcDsgJm5ic3A7TUFDLCBhczxi cj4NCiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jm5ic3A7ICZuYnNwOyAmbmJzcDsg Jm5ic3A7ICZuYnNwO3N0YXRlZCBpbjxicj4NCiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsm Z3Q7Jmd0OyZuYnNwOyAmbmJzcDsgU2VjdGlvbjxicj4NCiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0 OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsgMTYuMzo8YnI+DQomZ3Q7Jmd0OyZndDsmZ3Q7 Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7IDxicj4NCiZndDsmZ3Q7Jmd0OyZn dDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsgJnF1b3Q7VGhlIGJpZC1kb3du IHByb3RlY3Rpb24gbWVjaGFuaXNtIGRlc2NyaWJlZDxicj4NCiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7 Jmd0OyZndDsmbmJzcDsgJm5ic3A7aW4gdGhpczxicj4NCiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0 OyZndDsmZ3Q7Jm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwO2RvY3VtZW50PGJyPg0K Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jm5ic3A7ICZuYnNwOyBpcyBuZXcs PGJyPg0KJmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0 OyBhbmQgdGh1cyBjYW5ub3QgY3VycmVudGx5IHByb3RlY3QgYWdhaW5zdCBhPGJyPg0KJmd0OyZn dDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZuYnNwOyAmbmJzcDtiaWQtZG93bjxicj4NCiZndDsmZ3Q7 Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNw O2F0dGFjayB0aGF0PGJyPg0KJmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0 OyZndDsmZ3Q7Jmd0OyBsb3dlcnMgdGhlIHN0cmVuZ3RoIG9mIHRoZSBoYXNoIGFsZ29yaXRobSB0 bzxicj4NCiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmbmJzcDsgJm5ic3A7SE1BQy1TSEEx LiZxdW90Ozxicj4NCiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7 Jmd0OyZndDsgPGJyPg0KJmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZn dDsmZ3Q7Jmd0OyBXaGF0IHdlIHB1dCBpbiBwbGFjZSBpcyBhIHBsYW4gZm9yICpmdXR1cmUqPGJy Pg0KJmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZuYnNwOyAmbmJzcDt2ZXJzaW9uczxicj4N CiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5i c3A7ICZuYnNwO29mIFNUVU4gdG8gZ2V0PGJyPg0KJmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0 OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyBiaWRkb3duIHByb3RlY3Rpb24gZm9yIHRoZSBNQUMu Jm5ic3A7IFRoYXQncyBpdCw8YnI+DQomZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jm5ic3A7 ICZuYnNwO25vIG1vcmUsPGJyPg0KJmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmbmJz cDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7bm8gbGVzcy48YnI+DQomZ3Q7Jmd0OyZndDsm Z3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7IDxicj4NCiZndDsmZ3Q7Jmd0 OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyA8YnI+DQomZ3Q7Jmd0OyZndDsm Z3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsgWWVzLCBidXQgSSBkb24ndCBiZWxp ZXZlIHRoYXQgdGhpcyB3aWxsPGJyPg0KJmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZuYnNw OyAmbmJzcDtwcm92aWRlIGJpZC1kb3duPGJyPg0KJmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0 OyZndDsmZ3Q7Jm5ic3A7ICZuYnNwOyBwcm90ZWN0aW9uIGZvcjxicj4NCiZndDsmZ3Q7Jmd0OyZn dDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7IHRoZTxicj4NCiZndDsmZ3Q7Jmd0OyZndDsm Z3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyBNQUMgaW4gdGhlIGZ1dHVyZSBmb3IgdGhl IHJlYXNvbnMgSSBpbmRpY2F0ZTxicj4NCiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmbmJz cDsgJm5ic3A7YWJvdmUuPGJyPg0KJmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7 Jmd0OyZndDsmZ3Q7IDxicj4NCiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZn dDsmZ3Q7Jmd0OyBJZiB5b3UgdGhpbmsgdGhpcyBkb2VzIHNvbWV0aGluZyB1c2VmdWwsPGJyPg0K Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZuYnNwOyAmbmJzcDtwbGVhc2Ugc2hvdyBtZSBh bjxicj4NCiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZuYnNwOyAmbmJzcDsg ZXhhbXBsZSBhdHRhY2s8YnI+DQomZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsm Z3Q7Jmd0OyZndDsgYW5kIGhvdyB0aGlzIGZpeGVzIGl0LiBOb3RlIHRoYXQgaXQncyBub3Q8YnI+ DQomZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jm5ic3A7ICZuYnNwO2dlbmVyYWxseTxicj4N CiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5i c3A7ICZuYnNwO3VzZWZ1bCB0bzxicj4NCiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7 Jmd0OyZuYnNwOyAmbmJzcDsganVzdCBiaWQ8YnI+DQomZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsm Z3Q7Jmd0OyZndDsmZ3Q7Jmd0OyBkb3duPGJyPg0KJmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0 OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7IHRoZSBNQUMgaXRzZWxmIHVubGVzcyB0aGUgTUFDIHlvdSBi aWQgZG93biB0bzxicj4NCiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmbmJzcDsgJm5ic3A7 aXMgd2Vhazxicj4NCiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jm5ic3A7ICZuYnNw OyAmbmJzcDsgJm5ic3A7ICZuYnNwO2Vub3VnaCB0bzxicj4NCiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7 Jmd0OyZndDsmZ3Q7Jmd0OyZuYnNwOyAmbmJzcDsgZXhwbG9pdDxicj4NCiZndDsmZ3Q7Jmd0OyZn dDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7IGluPGJyPg0KJmd0OyZndDsmZ3Q7Jmd0OyZn dDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7IHNvbWUgb3RoZXIgd2F5Ljxicj4NCiZndDsm Z3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7IDxicj4NCiZndDsmZ3Q7Jmd0 OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7IEkgZG8gbm90IGtub3cgd2hhdCB3ZWFr bmVzc2VzIHdpbGwgYmU8YnI+DQomZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jm5ic3A7ICZu YnNwO2Rpc2NvdmVyZWQgaW4gdGhlPGJyPg0KJmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZn dDsmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ZnV0dXJlLjxicj4NCiZndDsmZ3Q7 Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZuYnNwOyAmbmJzcDsgSSBhbSBhbHNvPGJyPg0K Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsgcHJldHR5IHN1cmUg dGhhdCB0aGUgY29zdCBvZiBub3QgdXNpbmcgdGhhdDxicj4NCiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7 Jmd0OyZndDsmbmJzcDsgJm5ic3A7bWVjaGFuaXNtPGJyPg0KJmd0OyZndDsmZ3Q7Jmd0OyZndDsm Z3Q7Jmd0OyZndDsmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7aXMgdmVyeTxicj4N CiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZuYnNwOyAmbmJzcDsgY2xvc2Ug dG8gMC48YnI+DQomZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyBX aGF0IEkgYW0gc3VyZSBvZiBpcyB0aGF0IHRoZSBjb3N0IG9mPGJyPg0KJmd0OyZndDsmZ3Q7Jmd0 OyZndDsmZ3Q7Jmd0OyZuYnNwOyAmbmJzcDtyZWVuZ2luZWVyaW5nIGE8YnI+DQomZ3Q7Jmd0OyZn dDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDtu ZXcgYmlkZG93bjxicj4NCiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsm Z3Q7IHByb3RlY3Rpb24gbWVjaGFuaXNtIGlmIHdlIGV2ZXIgbmVlZCBpdCB3aWxsIGJlPGJyPg0K Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZuYnNwOyAmbmJzcDtoaWdoLjxicj4NCiZndDsm Z3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZu YnNwO1dlIGFscmVhZHk8YnI+DQomZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsm bmJzcDsgJm5ic3A7IHdlbnQ8YnI+DQomZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZn dDsmZ3Q7Jmd0OyB0aHJvdWdoIHRoZSBwYWlucyBvZiBkZXNpZ25pbmcgb25lIGZvciB0aGU8YnI+ DQomZ3Q7Jmd0OyZndDsgcGFzc3dvcmQ8YnI+DQomZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7 Jmd0OyZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDthbGdvcml0aG0sIHNvPGJyPg0K Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jm5ic3A7ICZuYnNwOyB3aHkgbm90 PGJyPg0KJmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsgZXh0ZW5k IGl0IHNvIGl0IGNhbiBiZSB1c2VkIGluIHRoZSBhZnRlcm1hdGggb2Y8YnI+DQomZ3Q7Jmd0OyZn dDsgdGhlPGJyPg0KJmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmbmJzcDsgJm5ic3A7 ICZuYnNwOyAmbmJzcDsgJm5ic3A7bmV4dCBTbm93ZGVuPGJyPg0KJmd0OyZndDsmZ3Q7Jmd0OyZn dDsmZ3Q7Jmd0OyZndDsmZ3Q7Jm5ic3A7ICZuYnNwOyBmYWNlcGFsbTxicj4NCiZndDsmZ3Q7Jmd0 OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7IG1vbWVudD88YnI+DQomZ3Q7Jmd0OyZn dDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyA8YnI+DQomZ3Q7Jmd0OyZndDsmZ3Q7 Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsgQWdhaW4sIGhhcHB5IHRvIGhhdmUgYSBj YWxsIHRvIHdhbGsgdGhvdWdoPGJyPg0KJmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZuYnNw OyAmbmJzcDt0aGlzIGlmIHRoYXQ8YnI+DQomZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0 OyZndDsmZ3Q7Jmd0OyZndDsgaGVscHMuPGJyPg0KJmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0 OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7IDxicj4NCiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsm Z3Q7Jmd0OyZndDsmZ3Q7Jmd0OyAtRWtyPGJyPg0KJmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0 OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7IDxicj4NCiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsm Z3Q7Jmd0OyZndDsmZ3Q7Jmd0OyA8YnI+DQomZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0 OyZndDsmZ3Q7Jmd0OyZndDsgPGJyPg0KJmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsm Z3Q7Jmd0OyZndDsmZ3Q7IDxicj4NCiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0 OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7IDxicj4NCiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsm Z3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7IFlvdSBtaWdodCB0aGluayB0aGF0IHRoZXJlIHdh cyBhIE1BQyB3aGljaDxicj4NCiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmbmJzcDsgJm5i c3A7d2FzIGVhc2llciB0bzxicj4NCiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0 OyZuYnNwOyAmbmJzcDsgcmV2ZXJzZSB0bzxicj4NCiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZn dDsmZ3Q7Jmd0OyZndDsmZ3Q7IGZpbmQ8YnI+DQomZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7 Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyB0aGUgb3JpZ2luYWw8YnI+DQomZ3Q7Jmd0OyZn dDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyBwYXNzd29yZCwg YnV0IHRoZSBkZWZlbnNlIHlvdSBoYXZlIGhlcmU8YnI+DQomZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZn dDsmZ3Q7Jm5ic3A7ICZuYnNwO2RvZXNuJ3QgaGVscDxicj4NCiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7 Jmd0OyZndDsmZ3Q7Jm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwO3dpdGggdGhhdDxi cj4NCiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZuYnNwOyAmbmJzcDsgYmVj YXVzZTxicj4NCiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0 OyZndDsgdGhlPGJyPg0KJmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZn dDsmZ3Q7Jmd0OyZndDsgb24tcGF0aCBhdHRhY2tlciBjYW4gZG8gYSBiaWQtZG93biBhbmQgdXNl IHRoZTxicj4NCiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jm5ic3A7ICZuYnNwOyAm bmJzcDsgJm5ic3A7ICZuYnNwO2NsaWVudCBhcyBhIE1BQzxicj4NCiZndDsmZ3Q7Jmd0OyZndDsm Z3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZuYnNwOyAmbmJzcDsgb3JhY2xlPGJyPg0KJmd0OyZndDsmZ3Q7 Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsgZm9yPGJyPg0KJmd0OyZndDsmZ3Q7Jmd0 OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsgYW55IE1BQyB0aGUgY2xp ZW50IHN1cHBvcnRzLjxicj4NCiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZn dDsmZ3Q7Jmd0OyZndDsmZ3Q7IDxicj4NCiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7 Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7IFNvLCBJIHN0aWxsIGRvbid0IHVuZGVyc3RhbmQgd2hh dCB0aGlzIGlzPGJyPg0KJmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZuYnNwOyAmbmJzcDtz dXBwb3NlZDxicj4NCiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jm5ic3A7ICZuYnNw OyAmbmJzcDsgJm5ic3A7ICZuYnNwO3RvIGRvLiBIYXBweSB0bzxicj4NCiZndDsmZ3Q7Jmd0OyZn dDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7IGhhdmUgYTxicj4NCiZndDsmZ3Q7Jmd0OyZn dDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7IGNhbGwgaWYgeW91PGJy Pg0KJmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZn dDsgdGhpbmsgdGhhdCBoZWxwczxicj4NCiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7 Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7IDxicj4NCiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZn dDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7IC1Fa3I8YnI+DQomZ3Q7Jmd0OyZndDsmZ3Q7 Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyA8YnI+DQomZ3Q7Jmd0OyZn dDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyA8YnI+DQomZ3Q7 Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyA8YnI+ DQomZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0 OyA8YnI+DQomZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsm Z3Q7Jmd0OyBPbiBNb24sIEp1biAxOCwgMjAxOCBhdCAzOjQwIEFNLCBHb256YWxvPGJyPg0KJmd0 OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZuYnNwOyAmbmJzcDtDYW1hcmlsbG8gJmx0Ozxicj4N CiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7 IDxhIGhyZWY9Im1haWx0bzpHb256YWxvLkNhbWFyaWxsb0Blcmljc3Nvbi5jb20iIHRhcmdldD0i X2JsYW5rIj5Hb256YWxvLkNhbWFyaWxsb0Blcmljc3Nvbi5jb208L2E+PGJyPg0KJmd0OyZndDsm Z3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZuYnNwOyAmbmJzcDsmbHQ7bWFpbHRvOjxhIGhyZWY9Im1haWx0 bzpHb256YWxvLkNhbWFyaWxsb0Blcmljc3Nvbi5jb20iIHRhcmdldD0iX2JsYW5rIj5Hb256YWxv LkNhbWFyaWxsb0Blcmljc3Nvbi5jb208L2E+Jmd0Ozxicj4NCiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7 Jmd0OyZndDsmZ3Q7Jm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyZsdDttYWlsdG86 PGEgaHJlZj0ibWFpbHRvOkdvbnphbG8uQ2FtYXJpbGxvQGVyaWNzc29uLmNvbSIgdGFyZ2V0PSJf YmxhbmsiPkdvbnphbG8uQ2FtYXJpbGxvQGVyaWNzc29uLmNvbTwvYT48YnI+DQomZ3Q7Jmd0OyZn dDsmZ3Q7Jmd0OyZndDsmZ3Q7Jm5ic3A7ICZuYnNwOyZsdDttYWlsdG86PGEgaHJlZj0ibWFpbHRv OkdvbnphbG8uQ2FtYXJpbGxvQGVyaWNzc29uLmNvbSIgdGFyZ2V0PSJfYmxhbmsiPkdvbnphbG8u Q2FtYXJpbGxvQGVyaWNzc29uLmNvbTwvYT4mZ3Q7Jmd0Ozxicj4NCiZndDsmZ3Q7Jmd0OyZndDsm Z3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZuYnNwOyAmbmJzcDsgJmx0O21haWx0bzo8YSBocmVmPSJtYWls dG86R29uemFsby5DYW1hcmlsbG9AZXJpY3Nzb24uY29tIiB0YXJnZXQ9Il9ibGFuayI+R29uemFs by5DYW1hcmlsbG9AZXJpY3Nzb24uY29tPC9hPjxicj4NCiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0 OyZndDsmbmJzcDsgJm5ic3A7Jmx0O21haWx0bzo8YSBocmVmPSJtYWlsdG86R29uemFsby5DYW1h cmlsbG9AZXJpY3Nzb24uY29tIiB0YXJnZXQ9Il9ibGFuayI+R29uemFsby5DYW1hcmlsbG9AZXJp Y3Nzb24uY29tPC9hPiZndDs8YnI+DQomZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZu YnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsmbHQ7bWFpbHRvOjxhIGhyZWY9Im1haWx0 bzpHb256YWxvLkNhbWFyaWxsb0Blcmljc3Nvbi5jb20iIHRhcmdldD0iX2JsYW5rIj5Hb256YWxv LkNhbWFyaWxsb0Blcmljc3Nvbi5jb208L2E+PGJyPg0KJmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7 Jmd0OyZuYnNwOyAmbmJzcDsmbHQ7bWFpbHRvOjxhIGhyZWY9Im1haWx0bzpHb256YWxvLkNhbWFy aWxsb0Blcmljc3Nvbi5jb20iIHRhcmdldD0iX2JsYW5rIj5Hb256YWxvLkNhbWFyaWxsb0Blcmlj c3Nvbi5jb208L2E+Jmd0OyZndDsmZ3Q7Jmd0OyB3cm90ZTo8YnI+DQomZ3Q7Jmd0OyZndDsmZ3Q7 Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyA8YnI+DQomZ3Q7Jmd0OyZn dDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsgTWFyYywg RXJpYyw8YnI+DQomZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZn dDsmZ3Q7Jmd0OyZndDsgPGJyPg0KJmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7 Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7IHdoYXQgaXMgdGhlIHN0YXR1cyBvZiB0aGlzIGRpc2N1 c3Npb24/PGJyPg0KJmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsm Z3Q7Jmd0OyZndDsmZ3Q7IDxicj4NCiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0 OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyBUaGFua3MsPGJyPg0KJmd0OyZndDsmZ3Q7Jmd0OyZn dDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7IDxicj4NCiZndDsmZ3Q7 Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyBHb256 YWxvPGJyPg0KJmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7 Jmd0OyZndDsmZ3Q7IDxicj4NCiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZn dDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsgT24gMDQvMDUvMjAxOCAyOjM1IEFNLCBFcmljIFJl c2NvcmxhIHdyb3RlOjxicj4NCiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZn dDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsgPGJyPg0KJmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7 Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyA8YnI+DQomZ3Q7Jmd0OyZn dDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7IE9u IE1vbiwgQXByIDIzLCAyMDE4IGF0IDExOjE2IEFNLCBNYXJjPGJyPg0KJmd0OyZndDsmZ3Q7Jmd0 OyZndDsmZ3Q7Jmd0OyZndDsmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7UGV0aXQt SHVndWVuaW4gJmx0Ozxicj4NCiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZn dDsmZ3Q7Jmd0OyZndDsgPGEgaHJlZj0ibWFpbHRvOnBldGl0aHVnQGFjbS5vcmciIHRhcmdldD0i X2JsYW5rIj5wZXRpdGh1Z0BhY20ub3JnPC9hPiAmbHQ7bWFpbHRvOjxhIGhyZWY9Im1haWx0bzpw ZXRpdGh1Z0BhY20ub3JnIiB0YXJnZXQ9Il9ibGFuayI+cGV0aXRodWdAYWNtLm9yZzwvYT4mZ3Q7 PGJyPg0KJmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZuYnNwOyAmbmJzcDsmbHQ7bWFpbHRv OjxhIGhyZWY9Im1haWx0bzpwZXRpdGh1Z0BhY20ub3JnIiB0YXJnZXQ9Il9ibGFuayI+cGV0aXRo dWdAYWNtLm9yZzwvYT4gJmx0O21haWx0bzo8YSBocmVmPSJtYWlsdG86cGV0aXRodWdAYWNtLm9y ZyIgdGFyZ2V0PSJfYmxhbmsiPnBldGl0aHVnQGFjbS5vcmc8L2E+Jmd0OyZndDs8YnI+DQomZ3Q7 Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAm bmJzcDsmbHQ7bWFpbHRvOjxhIGhyZWY9Im1haWx0bzpwZXRpdGh1Z0BhY20ub3JnIiB0YXJnZXQ9 Il9ibGFuayI+cGV0aXRodWdAYWNtLm9yZzwvYT4gJmx0O21haWx0bzo8YSBocmVmPSJtYWlsdG86 cGV0aXRodWdAYWNtLm9yZyIgdGFyZ2V0PSJfYmxhbmsiPnBldGl0aHVnQGFjbS5vcmc8L2E+Jmd0 Ozxicj4NCiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmbmJzcDsgJm5ic3A7Jmx0O21haWx0 bzo8YSBocmVmPSJtYWlsdG86cGV0aXRodWdAYWNtLm9yZyIgdGFyZ2V0PSJfYmxhbmsiPnBldGl0 aHVnQGFjbS5vcmc8L2E+ICZsdDttYWlsdG86PGEgaHJlZj0ibWFpbHRvOnBldGl0aHVnQGFjbS5v cmciIHRhcmdldD0iX2JsYW5rIj5wZXRpdGh1Z0BhY20ub3JnPC9hPiZndDsmZ3Q7Jmd0Ozxicj4N CiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7 Jmd0OyZndDsgJmx0O21haWx0bzo8YSBocmVmPSJtYWlsdG86cGV0aXRodWdAYWNtLm9yZyIgdGFy Z2V0PSJfYmxhbmsiPnBldGl0aHVnQGFjbS5vcmc8L2E+PGJyPg0KJmd0OyZndDsmZ3Q7Jmd0OyZn dDsmZ3Q7Jmd0OyZuYnNwOyAmbmJzcDsmbHQ7bWFpbHRvOjxhIGhyZWY9Im1haWx0bzpwZXRpdGh1 Z0BhY20ub3JnIiB0YXJnZXQ9Il9ibGFuayI+cGV0aXRodWdAYWNtLm9yZzwvYT4mZ3Q7ICZsdDtt YWlsdG86PGEgaHJlZj0ibWFpbHRvOnBldGl0aHVnQGFjbS5vcmciIHRhcmdldD0iX2JsYW5rIj5w ZXRpdGh1Z0BhY20ub3JnPC9hPjxicj4NCiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmbmJz cDsgJm5ic3A7Jmx0O21haWx0bzo8YSBocmVmPSJtYWlsdG86cGV0aXRodWdAYWNtLm9yZyIgdGFy Z2V0PSJfYmxhbmsiPnBldGl0aHVnQGFjbS5vcmc8L2E+Jmd0OyZndDs8YnI+DQomZ3Q7Jmd0OyZn dDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsm bHQ7bWFpbHRvOjxhIGhyZWY9Im1haWx0bzpwZXRpdGh1Z0BhY20ub3JnIiB0YXJnZXQ9Il9ibGFu ayI+cGV0aXRodWdAYWNtLm9yZzwvYT4gJmx0O21haWx0bzo8YSBocmVmPSJtYWlsdG86cGV0aXRo dWdAYWNtLm9yZyIgdGFyZ2V0PSJfYmxhbmsiPnBldGl0aHVnQGFjbS5vcmc8L2E+Jmd0Ozxicj4N CiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmbmJzcDsgJm5ic3A7Jmx0O21haWx0bzo8YSBo cmVmPSJtYWlsdG86cGV0aXRodWdAYWNtLm9yZyIgdGFyZ2V0PSJfYmxhbmsiPnBldGl0aHVnQGFj bS5vcmc8L2E+ICZsdDttYWlsdG86PGEgaHJlZj0ibWFpbHRvOnBldGl0aHVnQGFjbS5vcmciIHRh cmdldD0iX2JsYW5rIj5wZXRpdGh1Z0BhY20ub3JnPC9hPiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7IHdy b3RlOjxicj4NCiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0 OyZndDsmZ3Q7Jmd0OyZndDsgPGJyPg0KJmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsm Z3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZuYnNwOyAmbmJzcDsgT24gMDQvMjIvMjAx OCAwNToyMiBQTSwgRXJpYyBSZXNjb3JsYTxicj4NCiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZn dDsmbmJzcDsgJm5ic3A7d3JvdGU6PGJyPg0KJmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZn dDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsgT24gU3VuLCBBcHIgMjIsIDIw MTggYXQgMjowMiBQTSwgTWFyYzxicj4NCiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7 Jm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwO1BldGl0LUh1Z3VlbmluICZsdDs8YnI+ DQomZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0 OyZndDsgPGEgaHJlZj0ibWFpbHRvOnBldGl0aHVnQGFjbS5vcmciIHRhcmdldD0iX2JsYW5rIj5w ZXRpdGh1Z0BhY20ub3JnPC9hPiAmbHQ7bWFpbHRvOjxhIGhyZWY9Im1haWx0bzpwZXRpdGh1Z0Bh Y20ub3JnIiB0YXJnZXQ9Il9ibGFuayI+cGV0aXRodWdAYWNtLm9yZzwvYT4mZ3Q7PGJyPg0KJmd0 OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZuYnNwOyAmbmJzcDsmbHQ7bWFpbHRvOjxhIGhyZWY9 Im1haWx0bzpwZXRpdGh1Z0BhY20ub3JnIiB0YXJnZXQ9Il9ibGFuayI+cGV0aXRodWdAYWNtLm9y ZzwvYT4gJmx0O21haWx0bzo8YSBocmVmPSJtYWlsdG86cGV0aXRodWdAYWNtLm9yZyIgdGFyZ2V0 PSJfYmxhbmsiPnBldGl0aHVnQGFjbS5vcmc8L2E+Jmd0OyZndDs8YnI+DQomZ3Q7Jmd0OyZndDsm Z3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsmbHQ7 bWFpbHRvOjxhIGhyZWY9Im1haWx0bzpwZXRpdGh1Z0BhY20ub3JnIiB0YXJnZXQ9Il9ibGFuayI+ cGV0aXRodWdAYWNtLm9yZzwvYT4gJmx0O21haWx0bzo8YSBocmVmPSJtYWlsdG86cGV0aXRodWdA YWNtLm9yZyIgdGFyZ2V0PSJfYmxhbmsiPnBldGl0aHVnQGFjbS5vcmc8L2E+Jmd0Ozxicj4NCiZn dDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmbmJzcDsgJm5ic3A7Jmx0O21haWx0bzo8YSBocmVm PSJtYWlsdG86cGV0aXRodWdAYWNtLm9yZyIgdGFyZ2V0PSJfYmxhbmsiPnBldGl0aHVnQGFjbS5v cmc8L2E+ICZsdDttYWlsdG86PGEgaHJlZj0ibWFpbHRvOnBldGl0aHVnQGFjbS5vcmciIHRhcmdl dD0iX2JsYW5rIj5wZXRpdGh1Z0BhY20ub3JnPC9hPiZndDsmZ3Q7Jmd0Ozxicj4NCiZndDsmZ3Q7 Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZuYnNwOyAmbmJzcDsgJmx0O21haWx0bzo8YSBo cmVmPSJtYWlsdG86cGV0aXRodWdAYWNtLm9yZyIgdGFyZ2V0PSJfYmxhbmsiPnBldGl0aHVnQGFj bS5vcmc8L2E+ICZsdDttYWlsdG86PGEgaHJlZj0ibWFpbHRvOnBldGl0aHVnQGFjbS5vcmciIHRh cmdldD0iX2JsYW5rIj5wZXRpdGh1Z0BhY20ub3JnPC9hPiZndDs8YnI+DQomZ3Q7Jmd0OyZndDsm Z3Q7Jmd0OyZndDsmZ3Q7Jm5ic3A7ICZuYnNwOyZsdDttYWlsdG86PGEgaHJlZj0ibWFpbHRvOnBl dGl0aHVnQGFjbS5vcmciIHRhcmdldD0iX2JsYW5rIj5wZXRpdGh1Z0BhY20ub3JnPC9hPiAmbHQ7 bWFpbHRvOjxhIGhyZWY9Im1haWx0bzpwZXRpdGh1Z0BhY20ub3JnIiB0YXJnZXQ9Il9ibGFuayI+ cGV0aXRodWdAYWNtLm9yZzwvYT4mZ3Q7Jmd0Ozxicj4NCiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0 OyZndDsmZ3Q7Jm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyZsdDttYWlsdG86PGEg aHJlZj0ibWFpbHRvOnBldGl0aHVnQGFjbS5vcmciIHRhcmdldD0iX2JsYW5rIj5wZXRpdGh1Z0Bh Y20ub3JnPC9hPiAmbHQ7bWFpbHRvOjxhIGhyZWY9Im1haWx0bzpwZXRpdGh1Z0BhY20ub3JnIiB0 YXJnZXQ9Il9ibGFuayI+cGV0aXRodWdAYWNtLm9yZzwvYT4mZ3Q7PGJyPg0KJmd0OyZndDsmZ3Q7 Jmd0OyZndDsmZ3Q7Jmd0OyZuYnNwOyAmbmJzcDsmbHQ7bWFpbHRvOjxhIGhyZWY9Im1haWx0bzpw ZXRpdGh1Z0BhY20ub3JnIiB0YXJnZXQ9Il9ibGFuayI+cGV0aXRodWdAYWNtLm9yZzwvYT4gJmx0 O21haWx0bzo8YSBocmVmPSJtYWlsdG86cGV0aXRodWdAYWNtLm9yZyIgdGFyZ2V0PSJfYmxhbmsi PnBldGl0aHVnQGFjbS5vcmc8L2E+Jmd0OyZndDsmZ3Q7Jmd0OyZndDs8YnI+DQomZ3Q7Jmd0OyZn dDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0 OyB3cm90ZTo8YnI+DQomZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0 OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyA8YnI+DQomZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsm Z3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsgPGJyPg0KJmd0 OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7 Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmbmJzcDsgJm5ic3A7ICZuYnNwO0ZvciBhIHJlcXVlc3Qgb3Ig aW5kaWNhdGlvbjxicj4NCiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmbmJzcDsgJm5ic3A7 bWVzc2FnZSw8YnI+DQomZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZuYnNwOyAmbmJz cDsgJm5ic3A7ICZuYnNwOyAmbmJzcDt0aGUgYWdlbnQ8YnI+DQomZ3Q7Jmd0OyZndDsmZ3Q7Jmd0 OyZndDsmZ3Q7Jmd0OyZndDsmbmJzcDsgJm5ic3A7IE1VU1Q8YnI+DQomZ3Q7Jmd0OyZndDsmZ3Q7 Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsgaW5jbHVkZSB0aGU8 YnI+DQomZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7 Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZuYnNwOyAmbmJzcDsgJm5ic3A7VVNFUk5BTUUs PGJyPg0KJmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZuYnNwOyAmbmJzcDtNRVNTQUdFLUlO VEVHUklUWS1TSEEyNTYsIGFuZDxicj4NCiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7 Jmd0OyZndDsmZ3Q7IE1FU1NBR0UtSU5URUdSSVRZPGJyPg0KJmd0OyZndDsmZ3Q7Jmd0OyZndDsm Z3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7IGF0dHJp YnV0ZXM8YnI+DQomZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZn dDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZuYnNwOyAmbmJzcDsgJm5ic3A7aW4g dGhlIG1lc3NhZ2UgdW5sZXNzIHRoZSBhZ2VudDxicj4NCiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0 OyZndDsmZ3Q7Jm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwO2tub3dzIGZyb20gYW48 YnI+DQomZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmbmJzcDsgJm5ic3A7IGV4 dGVybmFsPGJyPg0KJmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsm Z3Q7Jmd0OyZndDsmZ3Q7IGluZGljYXRpb248YnI+DQomZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsm Z3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZu YnNwOyAmbmJzcDsgJm5ic3A7d2hpY2ggbWVzc2FnZSBpbnRlZ3JpdHk8YnI+DQomZ3Q7Jmd0OyZn dDsmZ3Q7Jmd0OyZndDsmZ3Q7Jm5ic3A7ICZuYnNwO2FsZ29yaXRobSBpczxicj4NCiZndDsmZ3Q7 Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNw O3N1cHBvcnRlZDxicj4NCiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZuYnNw OyAmbmJzcDsgYnkgYm90aDxicj4NCiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0 OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyBhZ2VudHMuJm5ic3A7IEluPGJyPg0KJmd0OyZndDsm Z3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZn dDsmZ3Q7Jmd0OyZndDsmbmJzcDsgJm5ic3A7ICZuYnNwO3RoaXMgY2FzZSBlaXRoZXI8YnI+DQom Z3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jm5ic3A7ICZuYnNwO01FU1NBR0UtSU5URUdSSVRZ IG9yPGJyPg0KJmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7 Jmd0OyZndDsmZ3Q7IE1FU1NBR0UtSU5URUdSSVRZLVNIQTI1NiBNVVNUPGJyPg0KJmd0OyZndDsm Z3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZn dDsmZ3Q7Jmd0OyZndDsmbmJzcDsgJm5ic3A7ICZuYnNwO2JlIGluY2x1ZGVkIGluIGFkZGl0aW9u IHRvPGJyPg0KJmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmbmJzcDsgJm5ic3A7ICZu YnNwOyAmbmJzcDsgJm5ic3A7VVNFUk5BTUUuJm5ic3A7IFRoZSBITUFDPGJyPg0KJmd0OyZndDsm Z3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jm5ic3A7ICZuYnNwOyBmb3IgdGhlPGJyPg0KJmd0 OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7 IE1FU1NBR0UtPGJyPg0KJmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZn dDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyA8YnI+DQomZ3Q7Jmd0OyZndDsmZ3Q7 Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsm Z3Q7IFRoaXMgdGV4dCBhcHBlYXJzIHRvIGNvbmZsaWN0IHdpdGg8YnI+DQomZ3Q7Jmd0OyZndDsm Z3Q7Jmd0OyZndDsmZ3Q7Jm5ic3A7ICZuYnNwO1MgNy4zIG9mPGJyPg0KJmd0OyZndDsmZ3Q7Jmd0 OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jm5ic3A7ICZuYnNwOyA1MjQ1LWJpcywgd2hpY2g8YnI+DQom Z3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7IHNheXM6 PGJyPg0KJmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0 OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7IDxicj4NCiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsm Z3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyBbdGV4dCBtaXNzaW5n XTxicj4NCiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZn dDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyA8YnI+DQomZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7 Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsgSG1tLCBubywgUkZD MjQ1YmlzIGlzIHN0aWxsPGJyPg0KJmd0OyZndDsmZ3Q7IHJlZmVyZW5jaW5nPGJyPg0KJmd0OyZn dDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5i c3A7UkZDNTM4OSwgc28gdGhlPGJyPg0KJmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsm Z3Q7Jmd0OyZndDsmZ3Q7Jmd0OyBwcm9jZWR1cmU8YnI+DQomZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZn dDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsgZm9yPGJyPg0KJmd0OyZndDsm Z3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZn dDsmZ3Q7IHN0dW5iaXMgZG9lcyBub3QgYXBwbHkuPGJyPg0KJmd0OyZndDsmZ3Q7Jmd0OyZndDsm Z3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7IDxicj4N CiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7 Jmd0OyZndDsmZ3Q7IDxicj4NCiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZn dDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7IEkgaGVhciB3aGF0IHlvdSdyZSBzYXlpbmcs IGJ1dDxicj4NCiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmbmJzcDsgJm5ic3A7cHVibGlz aGluZyB0d288YnI+DQomZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmbmJzcDsg Jm5ic3A7IGRvY3VtZW50cyBhdCB0aGU8YnI+DQomZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7 Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsgc2FtZSB0aW1lPGJyPg0KJmd0OyZndDsm Z3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZn dDsgd2hpY2g8YnI+DQomZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0 OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyBtYWtlIGNvbnRyYXJ5IHJlY29tbWVuZGF0aW9ucyBh Ym91dDxicj4NCiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmbmJzcDsgJm5ic3A7dGhlIHNh bWU8YnI+DQomZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZuYnNwOyAmbmJzcDsgJm5i c3A7ICZuYnNwOyAmbmJzcDtiYXNpYzxicj4NCiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsm Z3Q7Jmd0OyZuYnNwOyAmbmJzcDsgcHJvdG9jb2wgaXM8YnI+DQomZ3Q7Jmd0OyZndDsmZ3Q7Jmd0 OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsgdW4tZ29vZC48YnI+DQom Z3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZn dDsmZ3Q7IDxicj4NCiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7 Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmbmJzcDsgJm5ic3A7IFN1cmUsIGJ1dCB3b3VsZG4ndCBpdCBi ZSBzaW1wbGVyIHRvIGhhdmU8YnI+DQomZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZu YnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDtyZmM1MjQ1YmlzPGJyPg0KJmd0OyZndDsm Z3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jm5ic3A7ICZuYnNwOyB1c2luZyBzdHVuYmlzPGJy Pg0KJmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZn dDsmZ3Q7Jmd0OyZuYnNwOyAmbmJzcDsgYW5kIGhhdmUgdGhlbSB1cGRhdGluZyB0aGVpciB0ZXh0 LDxicj4NCiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmbmJzcDsgJm5ic3A7bW9yZSB0aGFu PGJyPg0KJmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmbmJzcDsgJm5ic3A7ICZuYnNw OyAmbmJzcDsgJm5ic3A7YWRkaW5nIHNvbWU8YnI+DQomZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsm Z3Q7Jmd0OyZndDsmbmJzcDsgJm5ic3A7IHRvcnR1b3VzPGJyPg0KJmd0OyZndDsmZ3Q7Jmd0OyZn dDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZuYnNwOyAmbmJz cDsgdGV4dCBpbiBzdHVuYmlzPzxicj4NCiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7 Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsgPGJyPg0KJmd0OyZndDsmZ3Q7Jmd0OyZn dDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsgPGJyPg0K Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsm Z3Q7Jmd0OyZndDsgPGJyPg0KJmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0 OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZuYnNwOyAmbmJzcDsgJm5ic3A7 VGhlIFNUVU4gdXNhZ2UgbXVzdCBzcGVjaWZ5PGJyPg0KJmd0OyZndDsmZ3Q7IHdoaWNoPGJyPg0K Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJz cDsgJm5ic3A7dHJhbnNwb3J0PGJyPg0KJmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsm Z3Q7Jm5ic3A7ICZuYnNwOyBwcm90b2NvbCBpczxicj4NCiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0 OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyB1c2VkLCBhbmQ8YnI+DQomZ3Q7 Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsm Z3Q7Jmd0OyZndDsgaG93PGJyPg0KJmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7 Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmbmJzcDsgJm5ic3A7 ICZuYnNwO3RoZSBhZ2VudCBkZXRlcm1pbmVzIHRoZSBJUDxicj4NCiZndDsmZ3Q7Jmd0OyZndDsm Z3Q7Jmd0OyZndDsmbmJzcDsgJm5ic3A7YWRkcmVzczxicj4NCiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7 Jmd0OyZndDsmZ3Q7Jm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwO2FuZCBwb3J0PGJy Pg0KJmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jm5ic3A7ICZuYnNwOyBvZiB0 aGU8YnI+DQomZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsm Z3Q7Jmd0OyZndDsgcmVjaXBpZW50Ljxicj4NCiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsm Z3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jm5ic3A7 ICZuYnNwOyAmbmJzcDtTZWN0aW9uIDggZGVzY3JpYmVzIGEgRE5TLWJhc2VkPGJyPg0KJmd0OyZn dDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5i c3A7bWV0aG9kIG9mPGJyPg0KJmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jm5i c3A7ICZuYnNwOyBkZXRlcm1pbmluZzxicj4NCiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsm Z3Q7Jmd0OyZndDsmZ3Q7IHRoZTxicj4NCiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7 Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyBJUDxicj4NCiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7 Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyBhZGRy ZXNzPGJyPg0KJmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7 Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmbmJzcDsgJm5ic3A7ICZuYnNwO2FuZCBw b3J0IG9mIGEgc2VydmVyIHRoYXQgYTxicj4NCiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsm bmJzcDsgJm5ic3A7dXNhZ2U8YnI+DQomZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZu YnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDttYXkgZWxlY3QgdG88YnI+DQomZ3Q7Jmd0 OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmbmJzcDsgJm5ic3A7IHVzZS48YnI+DQomZ3Q7 Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyBTVFVOPGJyPg0KJmd0OyZn dDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7IG1h eSBiZTxicj4NCiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0 OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyB1c2VkPGJyPg0KJmd0OyZndDsmZ3Q7Jmd0OyZndDsm Z3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZn dDsmbmJzcDsgJm5ic3A7ICZuYnNwO3dpdGggYW55Y2FzdCBhZGRyZXNzZXMsIGJ1dDxicj4NCiZn dDsmZ3Q7Jmd0OyBvbmx5PGJyPg0KJmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmbmJz cDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7d2l0aCBVRFAgYW5kPGJyPg0KJmd0OyZndDsm Z3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jm5ic3A7ICZuYnNwOyBpbiB1c2FnZXM8YnI+DQom Z3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZn dDsgd2hlcmU8YnI+DQomZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0 OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZuYnNwOyAmbmJzcDsgJm5ic3A7 YXV0aGVudGljYXRpb24gaXMgbm90IHVzZWQuPGJyPg0KJmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7 Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyA8YnI+ DQomZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0 OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7IFdoeSB0aGlzIHJlc3RyaWN0aW9uPyBZb3Ugc2hvdWxkPGJy Pg0KJmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZuYnNwOyAmbmJzcDtiZSBhYmxlPGJyPg0K Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJz cDsgJm5ic3A7dG8gdXNlPGJyPg0KJmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7 Jm5ic3A7ICZuYnNwOyBhbnljYXN0IHdpdGg8YnI+DQomZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsm Z3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsgbG9uZy10ZXJtPGJyPg0KJmd0OyZn dDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0 OyZndDsmZ3Q7Jmd0OyBBVVRIIGZvciAoc2F5KSBUVVJOLjxicj4NCiZndDsmZ3Q7Jmd0OyZndDsm Z3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyA8 YnI+DQomZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7 Jmd0OyZndDsmZ3Q7Jmd0OyZndDsgPGJyPg0KJmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZn dDsmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7PGEgaHJlZj0iaHR0cHM6Ly93d3cu aWV0Zi5vcmcvbWFpbC1hcmNoaXZlL3dlYi9iZWhhdmUvY3VycmVudC8iIHJlbD0ibm9yZWZlcnJl ciIgdGFyZ2V0PSJfYmxhbmsiPmh0dHBzOi8vd3d3LmlldGYub3JnL21haWwtYXJjaGl2ZS93ZWIv YmVoYXZlL2N1cnJlbnQvPC9hPjxicj4NCiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7 Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyBtc2cwMzU4Mi5odG1sPGJyPg0KJmd0OyZndDsm Z3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyA8 YnI+DQomZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZuYnNwOyAmbmJzcDsgJm5ic3A7 ICZuYnNwOyAmbmJzcDsgJmx0OzxhIGhyZWY9Imh0dHBzOi8vd3d3LmlldGYub3JnL21haWwtYXJj aGl2ZS93ZWIvYmVoYXZlL2N1cnJlbnQvIiByZWw9Im5vcmVmZXJyZXIiIHRhcmdldD0iX2JsYW5r Ij5odHRwczovL3d3dy5pZXRmLm9yZy9tYWlsLWFyY2hpdmUvd2ViL2JlaGF2ZS9jdXJyZW50Lzwv YT48YnI+DQomZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsm Z3Q7IG1zZzAzNTgyLmh0bWwmZ3Q7PGJyPg0KJmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZn dDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7IDxicj4NCiZndDsmZ3Q7 Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsm Z3Q7Jmd0OyBJIHRoaW5rIHRoYXQgdGhlIGRlY2lzaW9uIG9mPGJyPg0KJmd0OyZndDsmZ3Q7Jmd0 OyZndDsmZ3Q7Jmd0OyZuYnNwOyAmbmJzcDtwZXJtaXR0aW5nIEFueWNhc3Q8YnI+DQomZ3Q7Jmd0 OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmbmJzcDsgJm5ic3A7IHNob3VsZCBiZSBsZWZ0 PGJyPg0KJmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0 OyB0bzxicj4NCiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0 OyZndDsmZ3Q7Jmd0OyBlYWNoPGJyPg0KJmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsm Z3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7IFNUVU4gVXNhZ2UuJm5ic3A7 IEJhc2ljIFNUVU4gVXNhZ2UgZG9lczxicj4NCiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsm bmJzcDsgJm5ic3A7bm90IHVzZTxicj4NCiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7 Jmd0OyZuYnNwOyAmbmJzcDsgYXV0aGVudGljYXRpb24gYW5kPGJyPg0KJmd0OyZndDsmZ3Q7Jmd0 OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyB1c2U8YnI+DQomZ3Q7Jmd0OyZn dDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsgb25seSBh PGJyPg0KJmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0 OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7IG9uZSByb3VuZCB0cmlwIGZvciB0aGUgQmluZGluZzxicj4N CiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmbmJzcDsgJm5ic3A7dHJhbnNhY3Rpb24sIHNv PGJyPg0KJmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jm5ic3A7ICZuYnNwOyBV bmljYXN0IGNhbiBiZTxicj4NCiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZn dDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyB1c2VkLjxicj4NCiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0 OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyA8YnI+DQom Z3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZn dDsmZ3Q7Jmd0OyA8YnI+DQomZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7 Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsgT1RPSCwgVFVSTiBhbmQgSUNFIHNob3Vs ZCBwcm9iYWJseSBzYXk8YnI+DQomZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZuYnNw OyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDtzb21ldGhpbmc8YnI+DQomZ3Q7Jmd0OyZndDsm Z3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmbmJzcDsgJm5ic3A7IGFib3V0IHRoYXQsPGJyPg0KJmd0 OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsgc288YnI+DQomZ3Q7Jmd0 OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7IEk8YnI+DQomZ3Q7 Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsg YWRkZWQgYTxicj4NCiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7 Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyBuZXcgYnVsbGV0IHBvaW50IGluIFNlY3Rpb24g MTM6PGJyPg0KJmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7 Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7IDxicj4NCiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZn dDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZuYnNwOyAmbmJz cDtvJm5ic3A7IElmIEFueWNhc3QgYWRkcmVzc2VzIGNhbiBiZTxicj4NCiZndDsmZ3Q7Jmd0OyZn dDsmZ3Q7Jmd0OyZndDsmbmJzcDsgJm5ic3A7dXNlZCBmb3I8YnI+DQomZ3Q7Jmd0OyZndDsmZ3Q7 Jmd0OyZndDsmZ3Q7Jmd0OyZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDt0aGUgc2Vy dmVyPGJyPg0KJmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jm5ic3A7ICZuYnNw OyBpbiBjYXNlPGJyPg0KJmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZn dDsmZ3Q7Jmd0OyBUQ1A8YnI+DQomZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsm Z3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsgb3I8YnI+DQomZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsm Z3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmbmJzcDsgJm5i c3A7ICZuYnNwOyBUTFMtb3Zlci1UQ1AsIG9yPGJyPg0KJmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7 Jmd0OyZuYnNwOyAmbmJzcDthdXRoZW50aWNhdGlvbiBhcmUgdXNlZC48YnI+DQomZ3Q7Jmd0OyZn dDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0 OyZndDsgPGJyPg0KJmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsm Z3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsgPGJyPg0KJmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0 OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsgQXJlIHlvdSBsZWF2aW5n IHRoaXMgdGV4dCBpbj8gVGhhdDxicj4NCiZndDsmZ3Q7Jmd0OyBzZWVtczxicj4NCiZndDsmZ3Q7 Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNw O3ZlcnkgY29uZnVzaW5nLjxicj4NCiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0 OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsgPGJyPg0KJmd0OyZndDsmZ3Q7Jmd0OyZndDsm Z3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZuYnNwOyAmbmJzcDsg SW4gaXNvbGF0aW9uIHllcywgYnV0IEkgdGhpbmsgaXQgbWFrZXM8YnI+DQomZ3Q7Jmd0OyZndDsm Z3Q7Jmd0OyZndDsmZ3Q7Jm5ic3A7ICZuYnNwO3NlbnNlPGJyPg0KJmd0OyZndDsmZ3Q7Jmd0OyZn dDsmZ3Q7Jmd0OyZndDsmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7d2hpY2ggdGhl IHRleHQ8YnI+DQomZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyBi ZWZvcmU8YnI+DQomZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZn dDsmZ3Q7Jmd0OyZndDsmZ3Q7Jm5ic3A7ICZuYnNwOyB0aGUgYnVsbGV0IHBvaW50czo8YnI+DQom Z3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZn dDsmZ3Q7IDxicj4NCiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7 Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDtBIFNUVU4gdXNh Z2UgZGVmaW5lcyBob3cgU1RVTiBpczxicj4NCiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsm bmJzcDsgJm5ic3A7YWN0dWFsbHk8YnI+DQomZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0 OyZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDt1dGlsaXplZCAtLTxicj4NCiZndDsm Z3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZuYnNwOyAmbmJzcDsgd2hlbiB0bzxicj4N CiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsgc2Vu ZDxicj4NCiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZn dDsmZ3Q7Jmd0OyZndDsmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDtyZXF1ZXN0cywgd2hhdCB0 byBkbyB3aXRoIHRoZTxicj4NCiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmbmJzcDsgJm5i c3A7cmVzcG9uc2VzLDxicj4NCiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jm5ic3A7 ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwO2FuZCB3aGljaDxicj4NCiZndDsmZ3Q7Jmd0OyZn dDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZuYnNwOyAmbmJzcDsgb3B0aW9uYWw8YnI+DQomZ3Q7Jmd0 OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7 Jm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7cHJvY2VkdXJlcyBkZWZpbmVkIGhlcmUgKG9yIGlu IGFuPGJyPg0KJmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZuYnNwOyAmbmJzcDtleHRlbnNp b248YnI+DQomZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZuYnNwOyAmbmJzcDsgJm5i c3A7ICZuYnNwOyAmbmJzcDt0byBTVFVOKTxicj4NCiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZn dDsmZ3Q7Jmd0OyZuYnNwOyAmbmJzcDsgYXJlIHRvIGJlPGJyPg0KJmd0OyZndDsmZ3Q7Jmd0OyZn dDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7IHVzZWQuPGJyPg0KJmd0 OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7 Jmd0OyZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwO0EgdXNhZ2UgYWxzbyBkZWZpbmVzOjxicj4N CiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7 Jmd0OyZndDsgPGJyPg0KJmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZn dDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZuYnNwOyAmbmJzcDsgWy4uLl08YnI+DQomZ3Q7Jmd0OyZn dDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7IDxi cj4NCiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsm Z3Q7Jmd0OyZndDsmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDtvJm5ic3A7IElmIEFueWNhc3Qg YWRkcmVzc2VzIGNhbiBiZSB1c2VkPGJyPg0KJmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZu YnNwOyAmbmJzcDtmb3IgdGhlPGJyPg0KJmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsm bmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7c2VydmVyIGluPGJyPg0KJmd0OyZndDsm Z3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jm5ic3A7ICZuYnNwOyBjYXNlIFRDUDxicj4NCiZn dDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsgb3I8YnI+ DQomZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0 OyZndDsmZ3Q7Jm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyBUTFMtb3Zlci1UQ1As IG9yIGF1dGhlbnRpY2F0aW9uPGJyPg0KJmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZuYnNw OyAmbmJzcDthcmUgdXNlZC48YnI+DQomZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZn dDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7IDxicj4NCiZndDsmZ3Q7Jmd0OyZndDsmZ3Q7 Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsgPGJyPg0KJmd0OyZn dDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0OyZndDsmZ3Q7Jmd0 OyBXaGF0IGlzIHRoZSBuZWVkIGZvciB0aGUgcmVzdHJpY3Rpb24gYXQgYWxsPGJyPg0KPC9ibG9j a3F1b3RlPg0KPC9kaXY+DQo8L2Rpdj4NCjwvYmxvY2txdW90ZT4NCjwvZGl2Pg0KPGJyPg0KPC9k aXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9ibG9ja3F1b3RlPg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2 Pg0KPC9ibG9ja3F1b3RlPg0KPGJsb2NrcXVvdGUgdHlwZT0iY2l0ZSI+DQo8ZGl2IGRpcj0ibHRy Ij48c3Bhbj5fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fXzwv c3Bhbj48YnI+DQo8c3Bhbj50cmFtIG1haWxpbmcgbGlzdDwvc3Bhbj48YnI+DQo8c3Bhbj48YSBo cmVmPSJtYWlsdG86dHJhbUBpZXRmLm9yZyI+dHJhbUBpZXRmLm9yZzwvYT48L3NwYW4+PGJyPg0K PHNwYW4+PGEgaHJlZj0iaHR0cHM6Ly93d3cuaWV0Zi5vcmcvbWFpbG1hbi9saXN0aW5mby90cmFt Ij5odHRwczovL3d3dy5pZXRmLm9yZy9tYWlsbWFuL2xpc3RpbmZvL3RyYW08L2E+PC9zcGFuPjxi cj4NCjwvZGl2Pg0KPC9ibG9ja3F1b3RlPg0KPC9kaXY+DQo8L2JvZHk+DQo8L2h0bWw+DQo= --_000_1493CD0DB9A64B22968D6B88CE5AABD8ciscocom_-- From nobody Fri Mar 22 10:04:00 2019 Return-Path: X-Original-To: tram@ietf.org Delivered-To: tram@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 79BD21312F7; Fri, 22 Mar 2019 10:03:58 -0700 (PDT) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: Eric Rescorla via Datatracker To: "The IESG" Cc: draft-ietf-tram-stunbis@ietf.org, Gonzalo.Camarillo@ericsson.com, Tolga Asveren , tram-chairs@ietf.org, tasveren@rbbn.com, tram@ietf.org X-Test-IDTracker: no X-IETF-IDTracker: 6.94.1 Auto-Submitted: auto-generated Precedence: bulk Reply-To: Eric Rescorla Message-ID: <155327423842.23134.6234505713299183512.idtracker@ietfa.amsl.com> Date: Fri, 22 Mar 2019 10:03:58 -0700 Archived-At: Subject: [tram] Eric Rescorla's No Objection on draft-ietf-tram-stunbis-21: (with COMMENT) X-BeenThere: tram@ietf.org X-Mailman-Version: 2.1.29 List-Id: "Discussing the creation of a Turn Revised And Modernized \(TRAM\) WG, which goal is to consolidate the various initiatives to update TURN and STUN." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 22 Mar 2019 17:03:59 -0000 Eric Rescorla has entered the following ballot position for draft-ietf-tram-stunbis-21: No Objection When responding, please keep the subject line intact and reply to all email addresses included in the To and CC lines. (Feel free to cut this introductory paragraph, however.) Please refer to https://www.ietf.org/iesg/statement/discuss-criteria.html for more information about IESG DISCUSS and COMMENT positions. The document, along with other ballot positions, can be found here: https://datatracker.ietf.org/doc/draft-ietf-tram-stunbis/ ---------------------------------------------------------------------- COMMENT: ---------------------------------------------------------------------- Thank you for addressing my DISCUSS From nobody Fri Mar 22 11:43:26 2019 Return-Path: X-Original-To: tram@ietfa.amsl.com Delivered-To: tram@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 6189F13146D; Fri, 22 Mar 2019 11:43:25 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -14.502 X-Spam-Level: X-Spam-Status: No, score=-14.502 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.001, DKIMWL_WL_MED=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_HI=-5, SPF_PASS=-0.001, URIBL_BLOCKED=0.001, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cisco.com header.b=C+pRPNoQ; dkim=pass (1024-bit key) header.d=cisco.onmicrosoft.com header.b=FRcKeYBX Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id vmWaplqzFRzR; Fri, 22 Mar 2019 11:43:23 -0700 (PDT) Received: from rcdn-iport-9.cisco.com (rcdn-iport-9.cisco.com [173.37.86.80]) (using TLSv1.2 with cipher DHE-RSA-SEED-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id C5DA5131454; Fri, 22 Mar 2019 11:43:22 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=6536; q=dns/txt; s=iport; t=1553280202; x=1554489802; h=from:to:cc:subject:date:message-id:references: in-reply-to:content-id:content-transfer-encoding: mime-version; bh=tr67W6BLujkyTVy3fyN0rixz1Jf7e/iUkz50QhqIqZQ=; b=C+pRPNoQRPmfcC9/C7U3f1ebW9fGVLFwTsIJ2RtoJxspSGRCEk/u+Q+K 3AxEwhpW//OK8+YdqBWZbsDKxDGcvGpcAXxaBC7Q37PQcBji11LElsOlm MCVulS9TG/qe7BECYKD5QGQwfmbe55NK44UtEmK+RlQWlaJaXy596XnKG 0=; IronPort-PHdr: =?us-ascii?q?9a23=3AoPrQgRIFU0X33fT1P9mcpTVXNCE6p7X5OBIU4Z?= =?us-ascii?q?M7irVIN76u5InmIFeBvKd2lFGcW4Ld5roEkOfQv636EU04qZea+DFnEtRXUg?= =?us-ascii?q?Mdz8AfngguGsmAXELgJfrlciE7NM9DT1RiuXq8NBsdFQ=3D=3D?= X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: =?us-ascii?q?A0AWAADqK5Vc/4gNJK1jGgEBAQEBAgE?= =?us-ascii?q?BAQEHAgEBAQGBVAIBAQEBCwGBPSknA4FcBAsnhA6DRwOPKIIyJYk2jVSCUgN?= =?us-ascii?q?UDQEBLIRAAheEZSI3Bg0BAQMBAQkBAwJtHAyFSgEBAQMBIxEMAQE3AQQLAgE?= =?us-ascii?q?IGAICIwMCAgIfERQBEAIEDgWDIoFeAw0IAZ4vAooUcYEvgngBAQWFBA0Lggw?= =?us-ascii?q?IgQskAYsxF4FAP4ERJwwTgkw+ghqCYgKCUDGCJodThHEsl2o2CQKLaoNLQoM?= =?us-ascii?q?/GYIChXyLfowvhiSJLYI8AgQCBAUCDgEBBYFjIoFWcBVlAYJBggo2bQEGgkS?= =?us-ascii?q?KU3KBKI1aAQE?= X-IronPort-AV: E=Sophos;i="5.60,256,1549929600"; d="scan'208";a="453599554" Received: from alln-core-3.cisco.com ([173.36.13.136]) by rcdn-iport-9.cisco.com with ESMTP/TLS/DHE-RSA-SEED-SHA; 22 Mar 2019 18:43:21 +0000 Received: from XCH-RCD-020.cisco.com (xch-rcd-020.cisco.com [173.37.102.30]) by alln-core-3.cisco.com (8.15.2/8.15.2) with ESMTPS id x2MIhLBG010817 (version=TLSv1.2 cipher=AES256-SHA bits=256 verify=FAIL); Fri, 22 Mar 2019 18:43:21 GMT Received: from xhs-rcd-002.cisco.com (173.37.227.247) by XCH-RCD-020.cisco.com (173.37.102.30) with Microsoft SMTP Server (TLS) id 15.0.1473.3; Fri, 22 Mar 2019 13:43:20 -0500 Received: from xhs-rcd-003.cisco.com (173.37.227.248) by xhs-rcd-002.cisco.com (173.37.227.247) with Microsoft SMTP Server (TLS) id 15.0.1473.3; Fri, 22 Mar 2019 13:43:20 -0500 Received: from NAM03-DM3-obe.outbound.protection.outlook.com (72.163.14.9) by xhs-rcd-003.cisco.com (173.37.227.248) with Microsoft SMTP Server (TLS) id 15.0.1473.3 via Frontend Transport; Fri, 22 Mar 2019 13:43:20 -0500 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=cisco.onmicrosoft.com; s=selector1-cisco-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=tr67W6BLujkyTVy3fyN0rixz1Jf7e/iUkz50QhqIqZQ=; b=FRcKeYBXo7ul2mJvaZYTpR2bElD9OqO50enWEmJcctaLx8Ccq8WxHLigcb/ExOBJkWs0osepJwz8LUiUtM7wZf4WIgJ8ta1K78lqW7nDwBZK76UGgdbaUiXKK+RoNSJARNE9q9QrlzMDiq+SQ5q/GqW1H9VQxbWdTT21/Dp8Cs8= Received: from BY5PR11MB3895.namprd11.prod.outlook.com (10.255.72.92) by BY5PR11MB4134.namprd11.prod.outlook.com (10.255.163.18) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.1709.15; Fri, 22 Mar 2019 18:43:18 +0000 Received: from BY5PR11MB3895.namprd11.prod.outlook.com ([fe80::85d0:5bc1:f305:1423]) by BY5PR11MB3895.namprd11.prod.outlook.com ([fe80::85d0:5bc1:f305:1423%6]) with mapi id 15.20.1730.013; Fri, 22 Mar 2019 18:43:18 +0000 From: "Gonzalo Salgueiro (gsalguei)" To: Gonzalo Camarillo CC: Spencer Dawkins at IETF , IESG , "tram-chairs@ietf.org" , "draft-ietf-tram-stun-pmtud@ietf.org" , "Asveren, Tolga" , "tram@ietf.org" Thread-Topic: [tram] Adam Roach's Discuss on draft-ietf-tram-stun-pmtud-10: (with DISCUSS and COMMENT) Thread-Index: AQHUkuV9WRgg08P2B0upj6+dKkdDsqWvaMSAgAaI0YCAYfEow4AAtbKA Date: Fri, 22 Mar 2019 18:43:18 +0000 Message-ID: <5A81A440-4ABF-4818-A1AE-83F5EF78D0EF@cisco.com> References: <153834237082.13405.1228259718885034461.idtracker@ietfa.amsl.com> <2EE82D0D-5024-4C71-8F25-0506D5530814@cisco.com> <487146f2-f343-3c56-aeca-2e3fcfe54675@ericsson.com> In-Reply-To: <487146f2-f343-3c56-aeca-2e3fcfe54675@ericsson.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: authentication-results: spf=none (sender IP is ) smtp.mailfrom=gsalguei@cisco.com; x-originating-ip: [2001:420:2280:1330:3deb:6faa:89e5:af5c] x-ms-publictraffictype: Email x-ms-office365-filtering-correlation-id: e84b604c-fae7-4b58-d183-08d6aef64086 x-microsoft-antispam: BCL:0; PCL:0; RULEID:(2390118)(7020095)(4652040)(8989299)(4534185)(4627221)(201703031133081)(201702281549075)(8990200)(5600127)(711020)(4605104)(2017052603328)(7153060)(7193020); SRVR:BY5PR11MB4134; x-ms-traffictypediagnostic: BY5PR11MB4134: x-microsoft-antispam-prvs: x-forefront-prvs: 09840A4839 x-forefront-antispam-report: SFV:NSPM; SFS:(10009020)(376002)(366004)(39860400002)(396003)(346002)(136003)(199004)(189003)(40764003)(45074003)(71200400001)(71190400001)(86362001)(2906002)(6486002)(83716004)(25786009)(7736002)(36756003)(5660300002)(6512007)(6916009)(478600001)(6436002)(6246003)(33656002)(76176011)(54906003)(6506007)(305945005)(229853002)(97736004)(53546011)(4326008)(14454004)(99286004)(53936002)(82746002)(93886005)(486006)(446003)(316002)(2616005)(81156014)(68736007)(476003)(6116002)(186003)(8936002)(14444005)(11346002)(256004)(106356001)(81166006)(105586002)(46003)(8676002)(102836004)(69594002); DIR:OUT; SFP:1101; SCL:1; SRVR:BY5PR11MB4134; H:BY5PR11MB3895.namprd11.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; A:1; MX:1; received-spf: None (protection.outlook.com: cisco.com does not designate permitted sender hosts) x-ms-exchange-senderadcheck: 1 x-microsoft-antispam-message-info: eRnyeJuXGRdomL9+v56dMhpQytq8iA0SsUh8EvVsxUeRp9IzL4gHNtRKisO7fwdW/5gEHzglMWbyJbpHsEx00jIPsZ6JO8lr+TlthXDLRlnOIqsS73YFSx+sL3mrNxmcSFXscdAstm3v4If+X0+NtrYTC5JqihVVIhM0CztQCBb0riJZdPRvwY5isxn5Ao2V5RGcBViDzbrQVKJFRlaCbubmO7L8AY50N+rfr9AvDh3dngAc/QE2w+7Z9gZ5z4HjFYNZ0ggDghwQvcp3abFFlpJmrFqosWm0HJFI2j0/qxGFS7l5y/6koATAHteK9LWoFnOm5ZjQV0c+NwqIuTu5OEY7bdYCsaYO/bIJmlJzsTYvw4PI6qc1T5CHJ0szXrjzr2WS/MTP9+QX8R5/SZlQH+p+RkaQOSSj8qhRdgtHOK4= Content-Type: text/plain; charset="utf-8" Content-ID: <6C4DADC5A5CE17438095F6A8D697AD0C@namprd11.prod.outlook.com> Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-MS-Exchange-CrossTenant-Network-Message-Id: e84b604c-fae7-4b58-d183-08d6aef64086 X-MS-Exchange-CrossTenant-originalarrivaltime: 22 Mar 2019 18:43:18.5507 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 5ae1af62-9505-4097-a69a-c1553ef7840e X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-Transport-CrossTenantHeadersStamped: BY5PR11MB4134 X-OriginatorOrg: cisco.com X-Outbound-SMTP-Client: 173.37.102.30, xch-rcd-020.cisco.com X-Outbound-Node: alln-core-3.cisco.com Archived-At: Subject: Re: [tram] Adam Roach's Discuss on draft-ietf-tram-stun-pmtud-10: (with DISCUSS and COMMENT) X-BeenThere: tram@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "Discussing the creation of a Turn Revised And Modernized \(TRAM\) WG, which goal is to consolidate the various initiatives to update TURN and STUN." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 22 Mar 2019 18:43:26 -0000 SGkgR29uemFsbyAtIA0KDQpJIGFwb2xvZ2l6ZSBidXQgdGhpcyBQTVRVRCBkcmFmdCBoYXMgZ290 dGVuIGxpdHRsZSBhdHRlbnRpb24gYmV5b25kIG91dGxpbmluZyBwcm9wb3NhbHMgZm9yIGNsZWFy aW5nIHNvbWUgb2YgdGhlIHJhaXNlZCBESVNDVVNTZXMuICBUaGlzIG9uZSBoYXMgdGFrZW4gYSBi YWNrIHNlYXQgYXMgd2UgYXJlIGFjdGl2ZWx5IHByaW9yaXRpemluZyBjb21wbGV0aW9uIG9mIHRo ZSBTVFVOIGRyYWZ0IGJlZm9yZSBzb21lIEFE4oCZcyBzdGVwIGRvd24uICBJIHRoaW5rIHdlIHNo b3VsZCBoYXZlIHRoYXQgb25lIGNvbXBsZXRlZCBieSBQcmFndWUgb3IgdmVyeSBzb29uIGFmdGVy IGFuZCB0aGVuIHdlIHdpbGwgd29yayBvbiB0aGlzIFBNVFVEIGRyYWZ0Lg0KDQpDaGVlcnMsDQoN CkdvbnphbG8NCg0KDQo+IE9uIE1hciAyMiwgMjAxOSwgYXQgMzo1MiBBTSwgR29uemFsbyBDYW1h cmlsbG8gPEdvbnphbG8uQ2FtYXJpbGxvQGVyaWNzc29uLmNvbT4gd3JvdGU6DQo+IA0KPiBIaSBH b256YWxvIFMsDQo+IA0KPiBjb3VsZCB5b3UgcGxlYXNlIGdpdmUgbWUgYSBzdGF0dXMgdXBkYXRl IG9uIHRoaXM/DQo+IA0KPiBUaGFua3MsDQo+IA0KPiBHb256YWxvDQo+IA0KPiBPbiAxOS1GZWIt MTkgMjA6MTMsIEdvbnphbG8gU2FsZ3VlaXJvIChnc2FsZ3VlaSkgd3JvdGU6DQo+PiBIaSBHb256 YWxvIC0gDQo+PiANCj4+IFdlIGhhdmUgbWFkZSBhIGRlY2lzaW9uIG9uIHRoZSBQQURESU5HIGJ1 dCBhcmUgc3RpbGwgd29ya2luZyB0aHJvdWdoIHNvbWUgb2YgdGhlIGNvbW1lbnRzIHJhaXNlZCBp biBESVNDVVNTLiAgV2UgaG9wZSB0byBoYXZlIHRoaXMgZmluaXNoZWQgYWZ0ZXIgZmluYWxpemlu ZyBTVFVOLCB3aGljaCBzaG91bGQgYmUgdmVyeSBjbG9zZS4NCj4+IA0KPj4gQ2hlZXJzLA0KPj4g DQo+PiBHb256YWxvDQo+PiANCj4+PiBPbiBGZWIgMTgsIDIwMTksIGF0IDg6MTcgQU0sIEdvbnph bG8gQ2FtYXJpbGxvIDxHb256YWxvLkNhbWFyaWxsb0Blcmljc3Nvbi5jb20+IHdyb3RlOg0KPj4+ IA0KPj4+IEhpIEdvbnphbG8gUywNCj4+PiANCj4+PiB3aGF0IGlzIHRoZSBjdXJyZW50IHN0YXR1 cyBvZiB0aGlzPw0KPj4+IA0KPj4+IENoZWVycywNCj4+PiANCj4+PiBHb256YWxvDQo+Pj4gDQo+ Pj4gT24gMTgtSmFuLTE5IDIwOjEyLCBHb256YWxvIFNhbGd1ZWlybyAoZ3NhbGd1ZWkpIHdyb3Rl Og0KPj4+PiBUaGFua3MsIFNwZW5jZXIuICBXZSB3aWxsIHByb2NlZWQgd2l0aCBicmluZ2luZyB0 aGUgZGVmaW5pdGlvbiBvZg0KPj4+PiBQQURESU5HIGludG8gdGhlIGN1cnJlbnQgZHJhZnQuDQo+ Pj4+IA0KPj4+PiBDaGVlcnMsDQo+Pj4+IA0KPj4+PiBHb256YWxvDQo+Pj4+IA0KPj4+Pj4gT24g SmFuIDE0LCAyMDE5LCBhdCA5OjI1IEFNLCBTcGVuY2VyIERhd2tpbnMgYXQgSUVURg0KPj4+Pj4g PHNwZW5jZXJkYXdraW5zLmlldGZAZ21haWwuY29tIDxtYWlsdG86c3BlbmNlcmRhd2tpbnMuaWV0 ZkBnbWFpbC5jb20+Pg0KPj4+Pj4gd3JvdGU6DQo+Pj4+PiANCj4+Pj4+IEhpLCBHb256YWxvLA0K Pj4+Pj4gDQo+Pj4+PiBPbiBNb24sIEphbiAxNCwgMjAxOSBhdCA4OjA1IEFNIEdvbnphbG8gQ2Ft YXJpbGxvDQo+Pj4+PiA8Z29uemFsby5jYW1hcmlsbG9AZXJpY3Nzb24uY29tDQo+Pj4+PiA8bWFp bHRvOmdvbnphbG8uY2FtYXJpbGxvQGVyaWNzc29uLmNvbT4+IHdyb3RlOg0KPj4+Pj4gDQo+Pj4+ PiAgIFdoYXQgaXMgdGhlIG5leHQgc3RlcCBoZXJlPw0KPj4+Pj4gDQo+Pj4+PiAgIEdvbnphbG8N Cj4+Pj4+IA0KPj4+Pj4gICBPbiAxMy1EZWMtMTggMTY6MjcsIFNwZW5jZXIgRGF3a2lucyBhdCBJ RVRGIHdyb3RlOg0KPj4+Pj4+IEhpLCBTaW1vbiwgDQo+Pj4+Pj4gDQo+Pj4+Pj4gT24gVGh1LCBE ZWMgMTMsIDIwMTggYXQgNzoxMiBBTSBTaW1vbiBQZXJyZWF1bHQNCj4+Pj4+PiA8U2ltb24uUGVy cmVhdWx0QGxvZ21laW4uY29tDQo+Pj4+PiAgIDxtYWlsdG86U2ltb24uUGVycmVhdWx0QGxvZ21l aW4uY29tPiA8bWFpbHRvOlNpbW9uLlBlcnJlYXVsdEBsb2dtZWluLmNvbQ0KPj4+Pj4gICA8bWFp bHRvOlNpbW9uLlBlcnJlYXVsdEBsb2dtZWluLmNvbT4+PiB3cm90ZToNCj4+Pj4+PiANCj4+Pj4+ PiAgICAgLSBQdWxsIHRoZSBkZWZpbml0aW9uIG9mIFBBRERJTkcgaW50byB0aGlzIGRvY3VtZW50 LiBEZWNsYXJlDQo+Pj4+PiAgIHRoYXQNCj4+Pj4+PiAgICAgd2UndmUgZ2F0aGVyZWQgc3VmZmlj aWVudCBleHBlcmllbmNlIHdpdGggUEFERElORyB0aGF0IGl0IG5vdw0KPj4+Pj4+ICAgICB3YXJy YW50cyBiZWluZyBlbGV2YXRlZCB0byBTdGFuZGFyZHMgVHJhY2suIFRoYXQgaXMsIGl0J3MgYmVl bg0KPj4+Pj4+ICAgICBwcm92ZW4gdG8gd29yay5fX19fDQo+Pj4+Pj4gDQo+Pj4+Pj4gICAgIF9f IF9fDQo+Pj4+Pj4gDQo+Pj4+Pj4gICAgIFRoaXMgaXMgcGxhdXNpYmxlLiBJdCBzb2x2ZXMgdGhl IGZpcnN0LW9yZGVyIHByb2JsZW0uIF9fX18NCj4+Pj4+PiANCj4+Pj4+PiAgICAgX18gX18NCj4+ Pj4+PiANCj4+Pj4+PiAgICAgSSBub3RlIHRoYXQgUkZDIDU3ODAgZGVmaW5lZCBhIG51bWJlciBv ZiBuZXcgYXR0cmlidXRlcy4gSXMNCj4+Pj4+ICAgcHVsbGluZw0KPj4+Pj4+ICAgICBQQURESU5H IGZvcndhcmQgdGhlIHJpZ2h0IHRoaW5nIHRvIGRvLCBvciBhcmUgdGhlcmUgb3RoZXJzIHRoYXQN Cj4+Pj4+PiAgICAgd291bGQgYWxzbyBxdWFsaWZ5IChzbywgcGVyaGFwcyBhIHN0YXR1cyBjaGFu Z2UgZm9yIFJGQw0KPj4+Pj4gICA1NzgwKT8gX19fXw0KPj4+Pj4+IA0KPj4+Pj4+ICAgICBfXyBf Xw0KPj4+Pj4+IA0KPj4+Pj4+ICAgICBJIGRvbuKAmXQgdGhpbmsgdGhlIG90aGVycyBoYXZlIGJl ZW4gaW1wbGVtZW50ZWQgbXVjaCwgc28NCj4+Pj4+ICAgdGhhdOKAmXMgd2h5IEkNCj4+Pj4+PiAg ICAgdGhpbmsgb25seSBwdWxsaW5nIFBBRERJTkcgbWFrZXMgc2Vuc2UuIElmIEkgcmVtZW1iZXIN Cj4+Pj4+ICAgY29ycmVjdGx5LCBJDQo+Pj4+Pj4gICAgIG9ubHkgaW1wbGVtZW50ZWQgUEFERElO RyBpbiBOdW1iIChJIGRvbuKAmXQgaGF2ZSBhY2Nlc3MgdG8gdGhlDQo+Pj4+PiAgIHNvdXJjZQ0K Pj4+Pj4+ICAgICBjb2RlIGFueW1vcmUgc28gY2Fu4oCZdCBiZSBzdXJlKS5fX19fDQo+Pj4+Pj4g DQo+Pj4+Pj4gICAgIF9fIF9fDQo+Pj4+Pj4gDQo+Pj4+Pj4gICAgIEFueW9uZSBlbHNlIHdpdGgg YW4gb3Bpbmlvbj8NCj4+Pj4+PiANCj4+Pj4+PiANCj4+Pj4+PiBUaGF0J3MgaGVscGZ1bCBpbmZv cm1hdGlvbi4gDQo+Pj4+Pj4gDQo+Pj4+Pj4gV2Ugc2hvdWxkIHdhaXQgZm9yIGFueW9uZSBlbHNl IHdpdGggaW5mb3JtYXRpb24gdG8gd2VpZ2ggaW4sIGJ1dA0KPj4+Pj4gICBpZiBpdCdzDQo+Pj4+ Pj4gY29ycmVjdCB0aGF0IHRoZSBvdGhlciBleHBlcmltZW50YWwgYXR0cmlidXRlcyBoYXZlbid0 IGJlZW4NCj4+Pj4+ICAgaW1wbGVtZW50ZWQNCj4+Pj4+PiBhbmQgZGVwbG95ZWQgaW4gYSB3YXkg dGhhdCB3b3VsZCBwcm92aWRlIGd1aWRhbmNlIGZvcg0KPj4+Pj4gICBzdGFuZGFyZHMtdHJhY2sN Cj4+Pj4+PiB1c2UsIEkgdGhpbmsgZGVmaW5pbmcgUEFERElORyBpbiB0aGlzIGRvY3VtZW50IG1h a2VzIG1vcmUgc2Vuc2UNCj4+Pj4+ICAgdG8gbWUNCj4+Pj4+PiB0aGFuIGFkZGluZyBhIGRvd25y ZWYgdG8gYW4gZXhwZXJpbWVudGFsIFJGQyB0aGF0IHdlIHdvdWxkbid0DQo+Pj4+PiAgIGNvbnNp ZGVyDQo+Pj4+Pj4gaWYgdGhlIHJlZmVyZW5jZSB3YXMgdXNpbmcgYW55dGhpbmcgZXhjZXB0IFBB RERJTkcuICANCj4+Pj4+IA0KPj4+Pj4gDQo+Pj4+PiBObyBvbmUgaGFzIG9iamVjdGVkIGluIHRo ZSBwYXN0IG1vbnRoICh3aGljaCBpbmNsdWRlZCBob2xpZGF5cywgYnV0IEkNCj4+Pj4+IHdvdWxk IGhhdmUgYXNrZWQgdGhpcyBxdWVzdGlvbiB3aXRoIGEgd2VlayBvciB0d28gdGltZW91dCwgaWYg dGhlDQo+Pj4+PiBob2xpZGF5cyBoYWQgbm90IGJlZW4gY29taW5nIHVwKS4gDQo+Pj4+PiANCj4+ Pj4+IEkgdGhpbmsgYnJpbmdpbmcgdGhlIGRlZmluaXRpb24gb2YgUEFERElORyBpbnRvIHRoZSBj dXJyZW50IGRyYWZ0IGlzDQo+Pj4+PiB0aGUgcmlnaHQgdGhpbmcgdG8gZG8uIA0KPj4+Pj4gDQo+ Pj4+PiBJZiBUUkFNIHBlb3BsZSB0aG91Z2h0IHRoYXQgdGhlIG90aGVyIGV4cGVyaW1lbnRhbCBh dHRyaWJ1dGVzIGluIFJGQw0KPj4+Pj4gNTc4MCBkb24ndCBoYXZlIGVub3VnaCBpbXBsZW1lbnRh dGlvbiBleHBlcmllbmNlIHRvIGp1c3RpZnkgbW92aW5nDQo+Pj4+PiB0aGVtIHBhc3QgRXhwZXJp bWVudGFsIHN0YXR1cywgY2hhbmdpbmcgdGhlIHN0YXR1cyBvZiBSRkMgNTc4MCB0bw0KPj4+Pj4g SGlzdG9yaWMgbWlnaHQgYmUgYXBwcm9wcmlhdGUgYXQgc29tZSBwb2ludCwgYnV0IHRoYXQncyBu b3QgcmVsYXRlZCB0bw0KPj4+Pj4gdGhlIGNvbnZlcnNhdGlvbiB3ZSdyZSBoYXZpbmcgbm93LCBh bmQgSSBoYXZlbid0IGFza2VkIGEgcXVlc3Rpb24NCj4+Pj4+IGFib3V0IHRoYXQsIHNvIEknbGwg aWdub3JlIHRoYXQgZm9yIG5vdy4NCj4+Pj4+IA0KPj4+Pj4gVGhhbmtzIGZvciB5b3VyIGhlbHAg d2l0aCB0aGlzLg0KPj4+Pj4gDQo+Pj4+PiBTcGVuY2VyDQo+Pj4+PiANCj4+Pj4+IA0KPj4+Pj4+ IA0KPj4+Pj4+IFRoYW5rcywNCj4+Pj4+PiANCj4+Pj4+PiBTcGVuY2VyDQo+Pj4+Pj4gDQo+Pj4+ Pj4gICAgIF9fX18NCj4+Pj4+PiANCj4+Pj4+PiAgICAgX18gX18NCj4+Pj4+PiANCj4+Pj4+PiAg ICAgU2ltb25fX19fDQo+Pj4+Pj4gDQo+Pj4+PiANCj4+Pj4gDQo+PiANCg0K From nobody Fri Mar 22 11:46:35 2019 Return-Path: X-Original-To: tram@ietfa.amsl.com Delivered-To: tram@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 6B50513148D; Fri, 22 Mar 2019 11:46:23 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -14.502 X-Spam-Level: X-Spam-Status: No, score=-14.502 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.001, DKIMWL_WL_MED=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_HI=-5, SPF_PASS=-0.001, URIBL_BLOCKED=0.001, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cisco.com header.b=gxdFONaq; dkim=pass (1024-bit key) header.d=cisco.onmicrosoft.com header.b=MvRUb8wu Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 18S8wCwTFYgk; Fri, 22 Mar 2019 11:46:21 -0700 (PDT) Received: from rcdn-iport-7.cisco.com (rcdn-iport-7.cisco.com [173.37.86.78]) (using TLSv1.2 with cipher DHE-RSA-SEED-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 19DE7131483; Fri, 22 Mar 2019 11:46:21 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=1111; q=dns/txt; s=iport; t=1553280381; x=1554489981; h=from:to:cc:subject:date:message-id:references: in-reply-to:content-id:content-transfer-encoding: mime-version; bh=jRSHgiISngZtz4XbUeO6tApM//llNoopCYCbvPINRuM=; b=gxdFONaqhtb+J3ICRHAcvxWU9HATQIf0yRmc4cyucAkJHagVG6IfRbHJ y5ShXFs8c+crQhSvJXqtMf2JDwSpNZpzZvKNe4FiIl7qbKroSyCeB1cTm r9fOYk9DIRpFpgX9htZWE8m0eHiGedwi502xQwW4P+jD6xo12FR5yte0I I=; IronPort-PHdr: =?us-ascii?q?9a23=3AVfCO+RzvLQ8sFwXXCy+N+z0EezQntrPoPwUc9p?= =?us-ascii?q?sgjfdUf7+++4j5YhWN/u1j2VnOW4iTq+lJjebbqejBYSQB+t7A1RJKa5lQT1?= =?us-ascii?q?kAgMQSkRYnBZuKEkT/I+PnbgQxHd9JUxlu+HToeUU=3D?= X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: =?us-ascii?q?A0ADAAAXLZVc/4UNJK1jGQEBAQEBAQE?= =?us-ascii?q?BAQEBAQcBAQEBAQGBUQQBAQEBAQsBgT1QA2h0BAsnh1UDhFKKVoJXlwqBLhS?= =?us-ascii?q?BEANUDQEBIwmEQAKEfCI0CQ0BAQMBAQkBAwJtHAyFSgEBAQMBOgYBATcBBAs?= =?us-ascii?q?CAQgOCh4QMiUCBAENBYMiAYFdAw0IAQ6eIwKKFIIggngBAQWBRUGCfxiCDAM?= =?us-ascii?q?FgS8Bh0KDbxeBQD+BOB+CTD6CYQIBAgGBKgESAR8ygwmCJoo8ggiYTAkCh2G?= =?us-ascii?q?IGoM7GYIChXyLfosYhgKNIgIEAgQFAg4BAQWBTThlWBEIcBVlAYJBggqDboU?= =?us-ascii?q?UhT9yAYEnixyCPgEB?= X-IronPort-AV: E=Sophos;i="5.60,256,1549929600"; d="scan'208";a="535235054" Received: from alln-core-11.cisco.com ([173.36.13.133]) by rcdn-iport-7.cisco.com with ESMTP/TLS/DHE-RSA-SEED-SHA; 22 Mar 2019 18:45:52 +0000 Received: from XCH-RCD-005.cisco.com (xch-rcd-005.cisco.com [173.37.102.15]) by alln-core-11.cisco.com (8.15.2/8.15.2) with ESMTPS id x2MIjrxa007185 (version=TLSv1.2 cipher=AES256-SHA bits=256 verify=FAIL); Fri, 22 Mar 2019 18:45:53 GMT Received: from xhs-aln-002.cisco.com (173.37.135.119) by XCH-RCD-005.cisco.com (173.37.102.15) with Microsoft SMTP Server (TLS) id 15.0.1473.3; Fri, 22 Mar 2019 13:45:52 -0500 Received: from xhs-rtp-001.cisco.com (64.101.210.228) by xhs-aln-002.cisco.com (173.37.135.119) with Microsoft SMTP Server (TLS) id 15.0.1473.3; Fri, 22 Mar 2019 13:45:51 -0500 Received: from NAM05-CO1-obe.outbound.protection.outlook.com (64.101.32.56) by xhs-rtp-001.cisco.com (64.101.210.228) with Microsoft SMTP Server (TLS) id 15.0.1473.3 via Frontend Transport; Fri, 22 Mar 2019 14:45:51 -0400 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=cisco.onmicrosoft.com; s=selector1-cisco-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=jRSHgiISngZtz4XbUeO6tApM//llNoopCYCbvPINRuM=; b=MvRUb8wujsmGwDSd7plKGMPSxMaLr2SWjz5bCSpF8Z/UuWNbgfaFIysS7kQ2aCOjS5F2sPxfXwTUgd5glg4szoxNzy3w69rqjZe6iXmUAhuAaMyqyZb8cShkwjsNJ0fcR9xzYLOefZm1T8K61py4wfL9S/ipnUBL+KMF2QwrFj8= Received: from BY5PR11MB3895.namprd11.prod.outlook.com (10.255.72.92) by BY5PR11MB4007.namprd11.prod.outlook.com (10.255.161.92) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.1730.16; Fri, 22 Mar 2019 18:45:50 +0000 Received: from BY5PR11MB3895.namprd11.prod.outlook.com ([fe80::85d0:5bc1:f305:1423]) by BY5PR11MB3895.namprd11.prod.outlook.com ([fe80::85d0:5bc1:f305:1423%6]) with mapi id 15.20.1730.013; Fri, 22 Mar 2019 18:45:50 +0000 From: "Gonzalo Salgueiro (gsalguei)" To: Eric Rescorla , Spencer Dawkins at IETF CC: The IESG , "draft-ietf-tram-stunbis@ietf.org" , Tolga Asveren , "tram-chairs@ietf.org" , tram mailing list Thread-Topic: Eric Rescorla's No Objection on draft-ietf-tram-stunbis-21: (with COMMENT) Thread-Index: AQHU4NFBaN43ZUmDBESp2IZC3aHP8KYX/UyA Date: Fri, 22 Mar 2019 18:45:50 +0000 Message-ID: References: <155327423842.23134.6234505713299183512.idtracker@ietfa.amsl.com> In-Reply-To: <155327423842.23134.6234505713299183512.idtracker@ietfa.amsl.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: authentication-results: spf=none (sender IP is ) smtp.mailfrom=gsalguei@cisco.com; x-originating-ip: [2001:420:2280:1330:3deb:6faa:89e5:af5c] x-ms-publictraffictype: Email x-ms-office365-filtering-correlation-id: fe363feb-47c3-48eb-77db-08d6aef69af2 x-microsoft-antispam: BCL:0; PCL:0; RULEID:(2390118)(7020095)(4652040)(8989299)(4534185)(4627221)(201703031133081)(201702281549075)(8990200)(5600127)(711020)(4605104)(2017052603328)(7153060)(7193020); SRVR:BY5PR11MB4007; x-ms-traffictypediagnostic: BY5PR11MB4007: x-ms-exchange-purlcount: 2 x-microsoft-antispam-prvs: x-forefront-prvs: 09840A4839 x-forefront-antispam-report: SFV:NSPM; SFS:(10009020)(396003)(376002)(346002)(136003)(39860400002)(366004)(189003)(199004)(46003)(2616005)(86362001)(446003)(11346002)(76176011)(6436002)(6506007)(186003)(5660300002)(8936002)(486006)(33656002)(102836004)(97736004)(305945005)(7736002)(229853002)(99286004)(53546011)(6486002)(82746002)(81156014)(81166006)(8676002)(476003)(105586002)(106356001)(68736007)(2906002)(4326008)(110136005)(478600001)(6306002)(6512007)(53936002)(966005)(6246003)(71190400001)(54906003)(14454004)(83716004)(71200400001)(25786009)(36756003)(316002)(256004)(6116002); DIR:OUT; SFP:1101; SCL:1; SRVR:BY5PR11MB4007; H:BY5PR11MB3895.namprd11.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; MX:1; A:1; received-spf: None (protection.outlook.com: cisco.com does not designate permitted sender hosts) x-ms-exchange-senderadcheck: 1 x-microsoft-antispam-message-info: 3DkRej941VRBI6pdYFoAu09VbQ6R7SWBblqkHO9exUlqkFZ4dk5gA4xwqCJxRuaXbsEbqmwYDOrWNstDg0RKUAXmova+PIE+ZR0UzeKYaTvDW+L0x8RSsORieRXfcxPsHaWP+kgiIPGODRO6eSIUCqMHSCQj953TL74tvexe64NlEr7eSLup5LDP/qG2TFWNW8XApocbMTXN2y4VaQe05wZS3/o4ZDyXR3qKKhJwjHSrHR5DVVLj3+B+wmbvmGC/hbbSh7fH4ArtC766hFrFCZTfRjB0EmVnrObhgDOs+7XOcCNNWgvbZ3+YL9BVUFXK9dp6fBQiGGAWAjQos5jiEbdk7QnhiV4VAACvHe+/dJXcBVNWi0Sxf9BLiAENpbQ7qldMHjgtnufAKNWDAklZWx2tstK8txdUE5zYHR+dPXU= Content-Type: text/plain; charset="us-ascii" Content-ID: <6FBA3FBE14819049963782708E0CC7BE@namprd11.prod.outlook.com> Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 X-MS-Exchange-CrossTenant-Network-Message-Id: fe363feb-47c3-48eb-77db-08d6aef69af2 X-MS-Exchange-CrossTenant-originalarrivaltime: 22 Mar 2019 18:45:50.2642 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 5ae1af62-9505-4097-a69a-c1553ef7840e X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-Transport-CrossTenantHeadersStamped: BY5PR11MB4007 X-OriginatorOrg: cisco.com X-Outbound-SMTP-Client: 173.37.102.15, xch-rcd-005.cisco.com X-Outbound-Node: alln-core-11.cisco.com Archived-At: Subject: Re: [tram] Eric Rescorla's No Objection on draft-ietf-tram-stunbis-21: (with COMMENT) X-BeenThere: tram@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "Discussing the creation of a Turn Revised And Modernized \(TRAM\) WG, which goal is to consolidate the various initiatives to update TURN and STUN." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 22 Mar 2019 18:46:24 -0000 Thanks for clearing, Eric. @Spencer - I think we can proceed with publication on this draft now that a= ll DISCUSS and COMMENTs have been addressed. Thanks, Gonzalo > On Mar 22, 2019, at 1:03 PM, Eric Rescorla via Datatracker wrote: >=20 > Eric Rescorla has entered the following ballot position for > draft-ietf-tram-stunbis-21: No Objection >=20 > When responding, please keep the subject line intact and reply to all > email addresses included in the To and CC lines. (Feel free to cut this > introductory paragraph, however.) >=20 >=20 > Please refer to https://www.ietf.org/iesg/statement/discuss-criteria.html > for more information about IESG DISCUSS and COMMENT positions. >=20 >=20 > The document, along with other ballot positions, can be found here: > https://datatracker.ietf.org/doc/draft-ietf-tram-stunbis/ >=20 >=20 >=20 > ---------------------------------------------------------------------- > COMMENT: > ---------------------------------------------------------------------- >=20 > Thank you for addressing my DISCUSS >=20 >=20