From jon.kristensen@nejla.com Fri Mar 1 06:29:34 2013 Return-Path: X-Original-To: xmpp@ietfa.amsl.com Delivered-To: xmpp@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 8607B21E809E for ; Fri, 1 Mar 2013 06:29:34 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.093 X-Spam-Level: X-Spam-Status: No, score=-2.093 tagged_above=-999 required=5 tests=[AWL=1.506, BAYES_00=-2.599, RCVD_IN_DNSWL_LOW=-1] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id d76BN-d03f-j for ; Fri, 1 Mar 2013 06:29:33 -0800 (PST) Received: from mail-lb0-f171.google.com (mail-lb0-f171.google.com [209.85.217.171]) by ietfa.amsl.com (Postfix) with ESMTP id 7E74221E80AE for ; Fri, 1 Mar 2013 06:29:33 -0800 (PST) Received: by mail-lb0-f171.google.com with SMTP id gg13so2259200lbb.2 for ; Fri, 01 Mar 2013 06:29:32 -0800 (PST) X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=20120113; h=x-received:message-id:date:from:user-agent:mime-version:to:cc :subject:references:in-reply-to:content-type :content-transfer-encoding:x-gm-message-state; bh=74jcKw8MvJCjdK7cc4B3qXaDuScTGwx8y1knW8IJEv0=; b=AbRgd1GerRtFfDIaPRmNyvJqaptOoxmXIGgpz11ZyLlUcMgLj1ECHskWbE4V/6pSXZ lED6UTqvttcJBQz0AbATJ1qESZTr02susW1BWRZmXe3FMS082pq5oN92kn8zHAxJbwPx t11uOd0ISV/HNVYzspnKsil9qfqngKQ0j8PAeDLHpLr+nABbRwbiQVbo0vWaUss9tFDl UvE9LVkAHFB1NYcdwI5pHDvaJERjpu/kPRVGCZ8IX+FH0IEga0L4+rfOqLjQ5aD+dK5/ evE8uPqq+8y9T9MDEEcMobtpaD1vvrW6NJPsl1OxM1DLWdKLEnwva62AuCbjwv5Vq7Tb MVmg== X-Received: by 10.152.110.116 with SMTP id hz20mr9182348lab.18.1362148172339; Fri, 01 Mar 2013 06:29:32 -0800 (PST) Received: from localhost.localdomain ([94.234.185.66]) by mx.google.com with ESMTPS id v7sm4157730lbg.13.2013.03.01.06.29.30 (version=TLSv1 cipher=RC4-SHA bits=128/128); Fri, 01 Mar 2013 06:29:31 -0800 (PST) Message-ID: <5130BB49.20100@jonkri.com> Date: Fri, 01 Mar 2013 15:29:29 +0100 From: Jon Kristensen User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:17.0) Gecko/20130219 Thunderbird/17.0.3 MIME-Version: 1.0 To: Richard Barnes References: <512CC832.1060702@jonkri.com> <512E94A2.8000900@jonkri.com> <512FD6DB.40304@jonkri.com> In-Reply-To: Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit X-Gm-Message-State: ALoCoQmROUpWu71uRD3IcWbShN1p6SSMSP1jXvbAOZ4o1dlIn4EcpJ67vt/hpdVLKL0vyUVK4fu6 Cc: "" Subject: Re: [xmpp] Self Introduction X-BeenThere: xmpp@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: XMPP Working Group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 01 Mar 2013 14:29:34 -0000 On 02/28/2013 11:30 PM, Richard Barnes wrote: > Could you clarify what you mean by "repudiability"? Do you mean that, > post-hoc, it is impossible to tell which of the parties holding a > symmetric key generated a given stanza? Yes, that is what I mean. :-) > The current system is explicitly *compatible* with this notion of > repudiability. As Matt says, in the current scheme, the sender makes > up a random symmetric key and wraps it in the recipient's public key. > The message is then encrypted under the symmetric key. So the sender > and the receiver share a symmetric key, and either of them can modify > the message to be whatever they want. Good! > No. Compromise of the recipient's private key would expose all of the > session keys. If you want forward secrecy, you need to do DH. I see. At this point, it seems to me that OTR/Yabasta provides two things that Miller's protocol does not: weak anonymity (a passive attacker can't tell what public key is being used) and perfect forward secrecy. I'm also thinking about the possibility of providing strong authentication (an active attacker can't tell what public key is being used) if the public keys are already known. (I'm not yet sure about the deniability feature.) Speaking of an alternative key negotiation method, I'm thinking about the value of standardizing something like "Authenticated Diffie-Hellman Shared Secret Negotiation", which would work something like , except also being flexible (in terms of what prime numbers, signing credentials, and what crypto, signing, and hash functions to use). Also, I think that Diffie-Hellman key exchanges might be difficult to make compatible with requirement of securing multiple end-points, since they include a random and secret number on both sides. Jon From rlb@ipv.sx Fri Mar 1 19:35:59 2013 Return-Path: X-Original-To: xmpp@ietfa.amsl.com Delivered-To: xmpp@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 2581621F8B96 for ; Fri, 1 Mar 2013 19:35:59 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.657 X-Spam-Level: X-Spam-Status: No, score=-2.657 tagged_above=-999 required=5 tests=[AWL=0.319, BAYES_00=-2.599, FM_FORGED_GMAIL=0.622, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-1] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id YTejnehIg0V3 for ; Fri, 1 Mar 2013 19:35:58 -0800 (PST) Received: from mail-oa0-f46.google.com (mail-oa0-f46.google.com [209.85.219.46]) by ietfa.amsl.com (Postfix) with ESMTP id 3D62921F8B8F for ; Fri, 1 Mar 2013 19:35:58 -0800 (PST) Received: by mail-oa0-f46.google.com with SMTP id k1so6775270oag.19 for ; Fri, 01 Mar 2013 19:35:57 -0800 (PST) X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=20120113; h=mime-version:x-received:x-originating-ip:in-reply-to:references :date:message-id:subject:from:to:cc:content-type:x-gm-message-state; bh=2lHrS/T/DzoiPGxHaX8jf2EK9rV0pEF9i7QxLBYlTpU=; b=LAZv4KKJrGI/DjYakldWDN0X1ER1tKdlLzYUgDagvbh8OoBTAev7xnSCTt5TMcQ/LT DNeKb2OQDA9PlqQdaYk1/sbgCGX86spl10HI51QsFHQ+Ekxt11PFxuYkY8NqQHsy3TgK ygpmmZUfb4LVH1JCcQgdhAJvc/3FvOoxhYCyRFIWk7uDG9WoLy19fm0pIxlb2+CrIyrn VylKYdy96B3+XSILGOUx2htjq9oYjaktBXaPxUbqrz43Mz6yVWYX6RJ7Ux59x5GGr+jR zrzxRpER16L3q/KM6RMvNSXjSUegafs3MYO8aGugbzUKNDQeFBCvMC8IOmHMlgdn5LjA yzdg== MIME-Version: 1.0 X-Received: by 10.182.12.6 with SMTP id u6mr10360249obb.3.1362195357721; Fri, 01 Mar 2013 19:35:57 -0800 (PST) Received: by 10.60.10.101 with HTTP; Fri, 1 Mar 2013 19:35:57 -0800 (PST) X-Originating-IP: [108.18.40.68] In-Reply-To: <5130BB49.20100@jonkri.com> References: <512CC832.1060702@jonkri.com> <512E94A2.8000900@jonkri.com> <512FD6DB.40304@jonkri.com> <5130BB49.20100@jonkri.com> Date: Fri, 1 Mar 2013 22:35:57 -0500 Message-ID: From: Richard Barnes To: Jon Kristensen Content-Type: multipart/alternative; boundary=f46d0444edd3697f3e04d6e8d2c9 X-Gm-Message-State: ALoCoQmC2jcH47OJP6+YKgji6JLq6Lr2ADElv1V6U4FWsD+dbRyZq62Ytz72AQsODwO4RL5HGokB Cc: "" Subject: Re: [xmpp] Self Introduction X-BeenThere: xmpp@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: XMPP Working Group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 02 Mar 2013 03:36:00 -0000 --f46d0444edd3697f3e04d6e8d2c9 Content-Type: text/plain; charset=ISO-8859-1 > No. Compromise of the recipient's private key would expose all of the >> session keys. If you want forward secrecy, you need to do DH. >> > > I see. > > At this point, it seems to me that OTR/Yabasta provides two things that > Miller's protocol does not: weak anonymity (a passive attacker can't tell > what public key is being used) and perfect forward secrecy. I'm also > thinking about the possibility of providing strong authentication (an > active attacker can't tell what public key is being used) if the public > keys are already known. (I'm not yet sure about the deniability feature.) > It actually wouldn't be that hard to add PFS to Matt's proposal, just by doing the key exchange inside of an anonymous DH exchange. > Speaking of an alternative key negotiation method, I'm thinking about the > value of standardizing something like "Authenticated Diffie-Hellman Shared > Secret Negotiation", which would work something like < > https://github.com/jonkri/**yabasta-protocol/#** > authenticated-key-exchanges>, > except also being flexible (in terms of what prime numbers, signing > credentials, and what crypto, signing, and hash functions to use). > > Also, I think that Diffie-Hellman key exchanges might be difficult to make > compatible with requirement of securing multiple end-points, since they > include a random and secret number on both sides. It's not that different from using RSA. The sender already does per-recipient public key operations, in order to wrap the symmetric key for each recipient. In the DH case, the sender would just do a DH operation to generate a key encryption key, then encrypt the symmetric key with that key. --Richard --f46d0444edd3697f3e04d6e8d2c9 Content-Type: text/html; charset=ISO-8859-1 Content-Transfer-Encoding: quoted-printable
No. =A0Compromise of the recipient's private key would expose all of th= e session keys. =A0If you want forward secrecy, you need to do DH.

I see.

At this point, it seems to me that OTR/Yabasta provides two things that Mil= ler's protocol does not: weak anonymity (a passive attacker can't t= ell what public key is being used) and perfect forward secrecy. I'm als= o thinking about the possibility of providing strong authentication (an act= ive attacker can't tell what public key is being used) if the public ke= ys are already known. (I'm not yet sure about the deniability feature.)=

It actually wouldn't be that hard to a= dd PFS to Matt's proposal, just by doing the key exchange inside of an = anonymous DH exchange.
=A0
Speaking of an alternative key negotiation method, I'm thinking about t= he value of standardizing something like "Authenticated Diffie-Hellman= Shared Secret Negotiation", which would work something like <https://github.com/jonkri/yabasta-protocol/#authenticated-key-exchanges>, except also being flexible (in te= rms of what prime numbers, signing credentials, and what crypto, signing, a= nd hash functions to use).

Also, I think that Diffie-Hellman key exchanges might be difficult to make = compatible with requirement of securing multiple end-points, since they inc= lude a random and secret number on both sides.
=A0
It's not that different from using RSA. =A0The sender already does= per-recipient public key operations, in order to wrap the symmetric key fo= r each recipient. =A0In the DH case, the sender would just do a DH operatio= n to generate a key encryption key, then encrypt the symmetric key with tha= t key.

--Richard

--f46d0444edd3697f3e04d6e8d2c9-- From jon.kristensen@nejla.com Sun Mar 3 14:02:36 2013 Return-Path: X-Original-To: xmpp@ietfa.amsl.com Delivered-To: xmpp@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 38C4221F88B0 for ; Sun, 3 Mar 2013 14:02:36 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.343 X-Spam-Level: X-Spam-Status: No, score=-2.343 tagged_above=-999 required=5 tests=[AWL=1.255, BAYES_00=-2.599, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-1] Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id MW9NMfO1vvpG for ; Sun, 3 Mar 2013 14:02:35 -0800 (PST) Received: from mail-lb0-f176.google.com (mail-lb0-f176.google.com [209.85.217.176]) by ietfa.amsl.com (Postfix) with ESMTP id 55E2A21F8873 for ; Sun, 3 Mar 2013 14:02:31 -0800 (PST) Received: by mail-lb0-f176.google.com with SMTP id s4so3425745lbc.7 for ; Sun, 03 Mar 2013 14:02:31 -0800 (PST) X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=20120113; h=x-received:message-id:date:from:user-agent:mime-version:to:subject :references:in-reply-to:content-type:x-gm-message-state; bh=FXx/pKCEDi3ks0toDn1AqiTPw8WS1XMFJrrkQ5DK8eo=; b=o4s9KlpMzJbSAiIJzYKqZTXUdVAp3MSqPo4Q068GdZIOYJl28pMnDyzB/UmilMtGZ5 qeqYDUnqdCzQ5moPMbYAmnjj00RBe907D3PPFT+qPmuXsKTwxJ7r9DfIw+shs5dY+3kL pUd5dZRawZk72A2nLD4Sxk3LzRTm59nKOoTmjlI31SvphkMS/psnCIBkQrh8VnaHTTrf dckqrHkdI/O8k2ne5w4UIH1wYjnkhci+ElovBb1AnOzJTDU012/KyiieVHgqWyOO77Ek hK+0IASw6ihDRwk/Vk4Ccioy3Aqtu0zbqtb+si7cPz5WRrrMD7dPLPgmRYuA6ThM+TFt JM1w== X-Received: by 10.112.49.35 with SMTP id r3mr3659712lbn.95.1362348150814; Sun, 03 Mar 2013 14:02:30 -0800 (PST) Received: from localhost.localdomain ([94.234.185.66]) by mx.google.com with ESMTPS id pk1sm10738227lab.0.2013.03.03.14.02.29 (version=TLSv1 cipher=RC4-SHA bits=128/128); Sun, 03 Mar 2013 14:02:30 -0800 (PST) Message-ID: <5133C874.7080801@jonkri.com> Date: Sun, 03 Mar 2013 23:02:28 +0100 From: Jon Kristensen User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:17.0) Gecko/20130219 Thunderbird/17.0.3 MIME-Version: 1.0 To: "" References: <512CC832.1060702@jonkri.com> <512E94A2.8000900@jonkri.com> <512FD6DB.40304@jonkri.com> <5130BB49.20100@jonkri.com> In-Reply-To: <5130BB49.20100@jonkri.com> Content-Type: multipart/alternative; boundary="------------050507020508080700040509" X-Gm-Message-State: ALoCoQnIgTq0m7D3LxzxtIY0Gw6jY9ZgfRawzBSYzhxjQlhsrlR1Qqc8ITGJqD2mK2pFS4MB5dp8 Subject: Re: [xmpp] Self Introduction X-BeenThere: xmpp@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: XMPP Working Group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 03 Mar 2013 22:02:36 -0000 This is a multi-part message in MIME format. --------------050507020508080700040509 Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit On 03/01/2013 03:29 PM, Jon Kristensen wrote: > At this point, it seems to me that OTR/Yabasta provides two things > that Miller's protocol does not: weak anonymity (a passive attacker > can't tell what public key is being used) and perfect forward secrecy. > I'm also thinking about the possibility of providing *strong > anonymity* (an active attacker can't tell what public key is being > used) if the public keys are already known. (I'm not yet sure about > the *forgeability* feature.) I don't know what I was doing when I wrote the above text. I've added two corrections in bold. In addition to the Perfect Forward Secrecy requirement, which as mentioned should be relatively straight-forward to add to Miller's protocol, I would like see support for something like weak anonymity (an active man-in-the-middle attack is necessary in order to reveal the public keys (while they are being exchanged)) and strong anonymity (not even an active man-in-the-middle attack can reveal the public keys used (for example, during the key requests)). The way I imagine strong anonymity to work, is that every key request is performed with a (rotating) public key identifier that cannot be linked with to the public key in question. If these features could be added, I would see no reason to continue developing the Yabasta protocol. Jon --------------050507020508080700040509 Content-Type: text/html; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit
On 03/01/2013 03:29 PM, Jon Kristensen wrote:
At this point, it seems to me that OTR/Yabasta provides two things that Miller's protocol does not: weak anonymity (a passive attacker can't tell what public key is being used) and perfect forward secrecy. I'm also thinking about the possibility of providing strong anonymity (an active attacker can't tell what public key is being used) if the public keys are already known. (I'm not yet sure about the forgeability feature.)

I don't know what I was doing when I wrote the above text. I've added two corrections in bold.

In addition to the Perfect Forward Secrecy requirement, which as mentioned should be relatively straight-forward to add to Miller's protocol, I would like see support for something like weak anonymity (an active man-in-the-middle attack is necessary in order to reveal the public keys (while they are being exchanged)) and strong anonymity (not even an active man-in-the-middle attack can reveal the public keys used (for example, during the key requests)). The way I imagine strong anonymity to work, is that every key request is performed with a (rotating) public key identifier that cannot be linked with to the public key in question.

If these features could be added, I would see no reason to continue developing the Yabasta protocol.

Jon
--------------050507020508080700040509-- From rlb@ipv.sx Sun Mar 3 16:23:52 2013 Return-Path: X-Original-To: xmpp@ietfa.amsl.com Delivered-To: xmpp@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 04E5E21F8871 for ; Sun, 3 Mar 2013 16:23:52 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: 4.298 X-Spam-Level: **** X-Spam-Status: No, score=4.298 tagged_above=-999 required=5 tests=[FH_RELAY_NODNS=1.451, FM_FORGED_GMAIL=0.622, HTML_MESSAGE=0.001, RCVD_IN_PBL=0.509, RCVD_IN_SORBS_DUL=1.615, RDNS_NONE=0.1] Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id SjrVAvQ0Zb2O for ; Sun, 3 Mar 2013 16:23:51 -0800 (PST) Received: from mail-ob0-x233.google.com (mail-ob0-x233.google.com [IPv6:2607:f8b0:4003:c01::233]) by ietfa.amsl.com (Postfix) with ESMTP id 48ECD21F8868 for ; Sun, 3 Mar 2013 16:23:48 -0800 (PST) Received: by mail-ob0-f179.google.com with SMTP id un3so1587992obb.10 for ; Sun, 03 Mar 2013 16:23:47 -0800 (PST) X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=20120113; h=mime-version:x-received:x-originating-ip:in-reply-to:references :date:message-id:subject:from:to:cc:content-type:x-gm-message-state; bh=drOU+niZbDQavs2KWv2TJl48iOLcL4GzEf41zLzZ9ok=; b=CYxXgeeq6kkhq+oXmFBotxeVqjG/nQgqI1wTsl6eNOogenu0dpYcusoCi93aR8gHOQ mf9VeCXMf1dbmvghqfTQhRA+p/qE4GAGkoKJqHfLndv43I7g8f8X1H+iwI0QIAmKPiug bFFEhHnQsGt6SW8iivNQK2oGaa25A3pWJ9D9KYoFkslFDOP8d78bn6oSv8c0mL1/rA2J kGYdVrTGIbCUUDowpmcfATehtkaz6o1vSGqVBzanybVyo33nif7DJDsaeVSkRa9daflG fjtzHEwFoykR9PzxGAUtakofCCw0Dd6hlRMKorL/1C8vcTTK7hUeaKoVPQZcsk6GgKoo CMjQ== MIME-Version: 1.0 X-Received: by 10.60.172.36 with SMTP id az4mr14327414oec.29.1362356627693; Sun, 03 Mar 2013 16:23:47 -0800 (PST) Received: by 10.60.10.101 with HTTP; Sun, 3 Mar 2013 16:23:47 -0800 (PST) X-Originating-IP: [108.18.40.68] In-Reply-To: <5133C874.7080801@jonkri.com> References: <512CC832.1060702@jonkri.com> <512E94A2.8000900@jonkri.com> <512FD6DB.40304@jonkri.com> <5130BB49.20100@jonkri.com> <5133C874.7080801@jonkri.com> Date: Sun, 3 Mar 2013 19:23:47 -0500 Message-ID: From: Richard Barnes To: Jon Kristensen Content-Type: multipart/alternative; boundary=bcaec5524216d9f7fa04d70e5ec1 X-Gm-Message-State: ALoCoQmb6MivkAGNF545UFdDRh6FiyC9Y5RhcbQV7LrXisS5p0JaEqFUpy0xfRIeBSy2bdl7eZ3K Cc: "" Subject: Re: [xmpp] Self Introduction X-BeenThere: xmpp@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: XMPP Working Group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 04 Mar 2013 00:23:52 -0000 --bcaec5524216d9f7fa04d70e5ec1 Content-Type: text/plain; charset=ISO-8859-1 You suggestions for how to add them would be most welcome :) On Sunday, March 3, 2013, Jon Kristensen wrote: > On 03/01/2013 03:29 PM, Jon Kristensen wrote: > > At this point, it seems to me that OTR/Yabasta provides two things that > Miller's protocol does not: weak anonymity (a passive attacker can't tell > what public key is being used) and perfect forward secrecy. I'm also > thinking about the possibility of providing *strong anonymity* (an active > attacker can't tell what public key is being used) if the public keys are > already known. (I'm not yet sure about the *forgeability* feature.) > > > I don't know what I was doing when I wrote the above text. I've added two > corrections in bold. > > In addition to the Perfect Forward Secrecy requirement, which as mentioned > should be relatively straight-forward to add to Miller's protocol, I would > like see support for something like weak anonymity (an active > man-in-the-middle attack is necessary in order to reveal the public keys > (while they are being exchanged)) and strong anonymity (not even an active > man-in-the-middle attack can reveal the public keys used (for example, > during the key requests)). The way I imagine strong anonymity to work, is > that every key request is performed with a (rotating) public key identifier > that cannot be linked with to the public key in question. > > If these features could be added, I would see no reason to continue > developing the Yabasta protocol. > > Jon > --bcaec5524216d9f7fa04d70e5ec1 Content-Type: text/html; charset=ISO-8859-1 You suggestions for how to add them would be most welcome :)

On Sunday, March 3, 2013, Jon Kristensen wrote:
On 03/01/2013 03:29 PM, Jon Kristensen wrote:
At this point, it seems to me that OTR/Yabasta provides two things that Miller's protocol does not: weak anonymity (a passive attacker can't tell what public key is being used) and perfect forward secrecy. I'm also thinking about the possibility of providing strong anonymity (an active attacker can't tell what public key is being used) if the public keys are already known. (I'm not yet sure about the forgeability feature.)

I don't know what I was doing when I wrote the above text. I've added two corrections in bold.

In addition to the Perfect Forward Secrecy requirement, which as mentioned should be relatively straight-forward to add to Miller's protocol, I would like see support for something like weak anonymity (an active man-in-the-middle attack is necessary in order to reveal the public keys (while they are being exchanged)) and strong anonymity (not even an active man-in-the-middle attack can reveal the public keys used (for example, during the key requests)). The way I imagine strong anonymity to work, is that every key request is performed with a (rotating) public key identifier that cannot be linked with to the public key in question.

If these features could be added, I would see no reason to continue developing the Yabasta protocol.

Jon
--bcaec5524216d9f7fa04d70e5ec1-- From jon.kristensen@nejla.com Sun Mar 3 18:24:37 2013 Return-Path: X-Original-To: xmpp@ietfa.amsl.com Delivered-To: xmpp@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id B165C21F8756 for ; Sun, 3 Mar 2013 18:24:37 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: 2.344 X-Spam-Level: ** X-Spam-Status: No, score=2.344 tagged_above=-999 required=5 tests=[FH_RELAY_NODNS=1.451, HELO_LH_LD=0.792, HTML_MESSAGE=0.001, RDNS_NONE=0.1] Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id FlT2uxOdutx9 for ; Sun, 3 Mar 2013 18:24:37 -0800 (PST) Received: from mail-la0-x22a.google.com (mail-la0-x22a.google.com [IPv6:2a00:1450:4010:c03::22a]) by ietfa.amsl.com (Postfix) with ESMTP id 9698C21F8734 for ; Sun, 3 Mar 2013 18:24:36 -0800 (PST) Received: by mail-la0-f42.google.com with SMTP id fe20so4560328lab.15 for ; Sun, 03 Mar 2013 18:24:35 -0800 (PST) X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=20120113; h=x-received:message-id:date:from:user-agent:mime-version:to:cc :subject:references:in-reply-to:content-type:x-gm-message-state; bh=EhTJ+zeYRRjUPCpT5WG5WOyKkAy9RxoWpSiKrkEFjCg=; b=jBgpPD/bjZYk+l0tEDFr36BecVcZMQETRMJduho6ce6oZPaHW0YBVDtNzrHHjCFOkT V6l/6/Fqwsl/9WQSU4iJiCpZK5IqxlTVI9+Rb+k/t4JE1dpCBAoxCnLSsNarP07qvVPs QQJ4aGbAATst3iZIJenTaK7ySJPc3g+CkCBovRmrhlVy1cPTi1gDbdxDTFOkkf3wnHNl BMOXLFlsf+uCe8bFg4gfM1qtSMjR7sYBtn8soqwZhhhKBgrTOCVHrsq0h8Qyt+GKj9fs 6ZFWMxV+xzJdVKbcwXJbe0xUsmoIzorMJC/c6vEWKML//j5Z83/cPcQ1mHEiICNxo/Ly 7M9A== X-Received: by 10.112.43.38 with SMTP id t6mr3847332lbl.69.1362363875301; Sun, 03 Mar 2013 18:24:35 -0800 (PST) Received: from localhost.localdomain ([94.234.185.66]) by mx.google.com with ESMTPS id g6sm6747249lbd.14.2013.03.03.18.24.32 (version=TLSv1 cipher=RC4-SHA bits=128/128); Sun, 03 Mar 2013 18:24:34 -0800 (PST) Message-ID: <513405DF.5020501@jonkri.com> Date: Mon, 04 Mar 2013 03:24:31 +0100 From: Jon Kristensen User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:17.0) Gecko/20130219 Thunderbird/17.0.3 MIME-Version: 1.0 To: Richard Barnes References: <512CC832.1060702@jonkri.com> <512E94A2.8000900@jonkri.com> <512FD6DB.40304@jonkri.com> <5130BB49.20100@jonkri.com> <5133C874.7080801@jonkri.com> In-Reply-To: Content-Type: multipart/alternative; boundary="------------050706040100000100050004" X-Gm-Message-State: ALoCoQkj80+k4Ih4cAS9sB2s8i5GI3EjaxrOqDMq8UC1Atd/iUo4UIWyGHlPy/sD/MnvkGMmOM2u Cc: "" Subject: Re: [xmpp] Self Introduction X-BeenThere: xmpp@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: XMPP Working Group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 04 Mar 2013 02:24:37 -0000 This is a multi-part message in MIME format. --------------050706040100000100050004 Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Sure thing, I will start to look into it as soon as I find the time. :-) Jon On 03/04/2013 01:23 AM, Richard Barnes wrote: > You suggestions for how to add them would be most welcome :) > > On Sunday, March 3, 2013, Jon Kristensen wrote: > > On 03/01/2013 03:29 PM, Jon Kristensen wrote: >> At this point, it seems to me that OTR/Yabasta provides two >> things that Miller's protocol does not: weak anonymity (a passive >> attacker can't tell what public key is being used) and perfect >> forward secrecy. I'm also thinking about the possibility of >> providing *strong anonymity* (an active attacker can't tell what >> public key is being used) if the public keys are already known. >> (I'm not yet sure about the *forgeability* feature.) > > I don't know what I was doing when I wrote the above text. I've > added two corrections in bold. > > In addition to the Perfect Forward Secrecy requirement, which as > mentioned should be relatively straight-forward to add to Miller's > protocol, I would like see support for something like weak > anonymity (an active man-in-the-middle attack is necessary in > order to reveal the public keys (while they are being exchanged)) > and strong anonymity (not even an active man-in-the-middle attack > can reveal the public keys used (for example, during the key > requests)). The way I imagine strong anonymity to work, is that > every key request is performed with a (rotating) public key > identifier that cannot be linked with to the public key in question. > > If these features could be added, I would see no reason to > continue developing the Yabasta protocol. > > Jon > --------------050706040100000100050004 Content-Type: text/html; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit
Sure thing, I will start to look into it as soon as I find the time. :-)

Jon

On 03/04/2013 01:23 AM, Richard Barnes wrote:
You suggestions for how to add them would be most welcome :)

On Sunday, March 3, 2013, Jon Kristensen wrote:
On 03/01/2013 03:29 PM, Jon Kristensen wrote:
At this point, it seems to me that OTR/Yabasta provides two things that Miller's protocol does not: weak anonymity (a passive attacker can't tell what public key is being used) and perfect forward secrecy. I'm also thinking about the possibility of providing strong anonymity (an active attacker can't tell what public key is being used) if the public keys are already known. (I'm not yet sure about the forgeability feature.)

I don't know what I was doing when I wrote the above text. I've added two corrections in bold.

In addition to the Perfect Forward Secrecy requirement, which as mentioned should be relatively straight-forward to add to Miller's protocol, I would like see support for something like weak anonymity (an active man-in-the-middle attack is necessary in order to reveal the public keys (while they are being exchanged)) and strong anonymity (not even an active man-in-the-middle attack can reveal the public keys used (for example, during the key requests)). The way I imagine strong anonymity to work, is that every key request is performed with a (rotating) public key identifier that cannot be linked with to the public key in question.

If these features could be added, I would see no reason to continue developing the Yabasta protocol.

Jon

--------------050706040100000100050004-- From stpeter@stpeter.im Mon Mar 4 10:12:47 2013 Return-Path: X-Original-To: xmpp@ietfa.amsl.com Delivered-To: xmpp@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 993A321F8BF6 for ; Mon, 4 Mar 2013 10:12:47 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -102.599 X-Spam-Level: X-Spam-Status: No, score=-102.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id FWD6+0JO9-Xm for ; Mon, 4 Mar 2013 10:12:46 -0800 (PST) Received: from stpeter.im (mailhost.stpeter.im [207.210.219.225]) by ietfa.amsl.com (Postfix) with ESMTP id F3B2D21F8BB5 for ; Mon, 4 Mar 2013 10:12:45 -0800 (PST) Received: from [10.129.24.65] (unknown [128.107.239.233]) (Authenticated sender: stpeter) by stpeter.im (Postfix) with ESMTPSA id A7FCD4004E; Mon, 4 Mar 2013 11:20:52 -0700 (MST) Message-ID: <5134E41A.7020306@stpeter.im> Date: Mon, 04 Mar 2013 11:12:42 -0700 From: Peter Saint-Andre User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.7; rv:17.0) Gecko/20130216 Thunderbird/17.0.3 MIME-Version: 1.0 To: Ben Campbell References: In-Reply-To: X-Enigmail-Version: 1.5 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 7bit Cc: XMPP Working Group Subject: Re: [xmpp] IETF 86 Draft Agenda X-BeenThere: xmpp@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: XMPP Working Group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 04 Mar 2013 18:12:47 -0000 -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 On 2/27/13 11:30 AM, Ben Campbell wrote: > Hi Everyone, > > We have a 1 hour session for XMPP scheduled at IETF 86 (Orlando). > The draft agenda is available at the following link: > > http://www.ietf.org/proceedings/86/agenda/agenda-86-xmpp > > Please send any agenda concerns or other feedback to the list as > soon as possible. Seems fine! Matt and I have put together some slides for the DNA topic: https://stpeter.im/files/ietf86-xmpp-dna.pdf Peter - -- Peter Saint-Andre https://stpeter.im/ -----BEGIN PGP SIGNATURE----- Version: GnuPG/MacGPG2 v2.0.18 (Darwin) Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/ iQIcBAEBAgAGBQJRNOQZAAoJEOoGpJErxa2pmykP/1oyWA8X9gAzkGDs84Zn148q 0eXU4RwP2pCgU9QG4q+OzNTKVSdPkZdOEJh5z4L/OUqrms25vSQuBLmvuUoeFYEB ySVWjOeTrB5QQ0fWKv2lEDKKyj4wNLuGnALIENrySNrVc39oWEBdTrSVi22sMf2Y P5LgP3+oNghtW91drcoqHWgjIHFd6udSx7G8FZoB0WGZC0v7cWDiZqZcIzDJyzNu M1lV4MtTVjQU/6cdXA4Mhojwo9MZjde1NCn6aqeEJjAIkUeuPWBJNRlMDqM86+0F 7iLDDwu89fTDGSakAzxq3Siv5B7/KV2UqFFZh7W/N9f/e1JQUNudl/WYVTNvt1Yt Wp4GMbaKfp2ClfRlM0viXdtxMSaY9qJFh3dcTdX3mQ6oQ1JEccWg4lhUU3N1gsZs cZKMGS918TAI1pz7njaTez0B/57r9E53Ai/q6SEi+4PNRhm0Jy/gfAommS9RGzps dWcycAW66GZ0sb5/B3QzKGGywx2iBgTMKCM42do7p4UtG21T32UaOAf+Om4/u1Dk QXr4aZ3Mw9XOJTLfjCy/4B6KxW8EIMEai+n1lxFoCXmJKQAhjPf8kVYVUi8/ctpR FAHE/0j453sPEoMyva+RTu7cCFEjtLleH3I22LjbnajF4aff7sH9dZGylRbGG3O9 m8n7KYAW9bXrWRDS/KZy =KhOI -----END PGP SIGNATURE----- From fippo@goodadvice.pages.de Mon Mar 4 13:46:24 2013 Return-Path: X-Original-To: xmpp@ietfa.amsl.com Delivered-To: xmpp@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 16AA811E80A3 for ; Mon, 4 Mar 2013 13:46:24 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.599 X-Spam-Level: X-Spam-Status: No, score=-2.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599] Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id MOOJBOZYJfYY for ; Mon, 4 Mar 2013 13:46:23 -0800 (PST) Received: from lo.psyced.org (lost.IN.psyced.org [188.40.42.221]) by ietfa.amsl.com (Postfix) with ESMTP id BF18521F8C00 for ; Mon, 4 Mar 2013 13:46:21 -0800 (PST) Received: from [192.168.2.100] (p54971297.dip.t-dialin.net [84.151.18.151]) (authenticated bits=0) by lo.psyced.org (8.14.3/8.14.3/Debian-9.4) with ESMTP id r24LkImj015620 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO) for ; Mon, 4 Mar 2013 22:46:20 +0100 Message-ID: <51351626.8070106@goodadvice.pages.de> Date: Mon, 04 Mar 2013 22:46:14 +0100 From: Philipp Hancke User-Agent: Mozilla/5.0 (Windows NT 6.1; rv:17.0) Gecko/20130215 Thunderbird/17.0.3 MIME-Version: 1.0 To: xmpp@ietf.org References: <5134E41A.7020306@stpeter.im> In-Reply-To: <5134E41A.7020306@stpeter.im> Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: 8bit Subject: Re: [xmpp] IETF 86 Draft Agenda X-BeenThere: xmpp@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: XMPP Working Group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 04 Mar 2013 21:46:24 -0000 > Matt and I have put together some slides for the DNA topic: > > https://stpeter.im/files/ietf86-xmpp-dna.pdf Some feedback on those. No changes to the slides required, tuning the audio track should be sufficient ;-) slide 2, bullet 1: > for the first domain pair I don't think the distinction between "first domain pair" and additional domain pairs (as seen in the flow chart, section #3 in dna-01) is necessary. However, that is up to the receiving server. If it offers the EXTERNAL sasl mechanism, it is preferred. If it doesn't, it should smoothly degrade to exchanges (checked using DNA rules). No problem here. slide 3, bullet 2: > (checked using DNA rules) No, the point is that the receiving server can use ANY checks it likes. For the sending server, it does not make any difference. (that assumes the sending server already knows the receiving server is authorized to handle stanzas for that domain. Which is done by DNA) slide 4, bullet 3: > In DNA, not a prooftype Much as I'd like to deprecate the mechanism I think it can (and should be; 99% deployment) described in terms of a DNA proof. But that belongs into xep-0220 and is therefore not an xmppwg concern ;-) slide 4, bullet 4: > As noted, used only to assert / “suppose” subsequent domain pairs I think it is worth pointing out that this only reuses the . Essentially, it removes the not-an-authentication-mechanism dialing-back part from "server dialback" and only leaves the authorization protocol part. LGTM otherwise, thanks! From iesg-secretary@ietf.org Tue Mar 5 10:40:59 2013 Return-Path: X-Original-To: xmpp@ietfa.amsl.com Delivered-To: xmpp@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 5053711E8115; Tue, 5 Mar 2013 10:40:59 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -102.486 X-Spam-Level: X-Spam-Status: No, score=-102.486 tagged_above=-999 required=5 tests=[AWL=0.114, BAYES_00=-2.599, NO_RELAYS=-0.001, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id QdXR-XGuesrX; Tue, 5 Mar 2013 10:40:58 -0800 (PST) Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 990C611E8116; Tue, 5 Mar 2013 10:40:58 -0800 (PST) Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit From: The IESG To: IETF-Announce X-Test-IDTracker: no X-IETF-IDTracker: 4.41 Message-ID: <20130305184058.31690.3418.idtracker@ietfa.amsl.com> Date: Tue, 05 Mar 2013 10:40:58 -0800 Cc: xmpp WG Subject: [xmpp] WG Action: Rechartered Extensible Messaging and Presence Protocol (xmpp) X-BeenThere: xmpp@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: XMPP Working Group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 05 Mar 2013 18:40:59 -0000 The Extensible Messaging and Presence Protocol (xmpp) working group in the Real-time Applications and Infrastructure Area of the IETF has been rechartered. For additional information please contact the Area Directors or the WG Chairs. Extensible Messaging and Presence Protocol (xmpp) ------------------------------------------------ Current Status: Active Working Group Chairs: Joe Hildebrand Ben Campbell Assigned Area Director: Robert Sparks Mailing list Address: xmpp@ietf.org To Subscribe: https://www.ietf.org/mailman/listinfo/xmpp Archive: http://www.ietf.org/mail-archive/web/xmpp/ Charter of Working Group: The Extensible Messaging and Presence Protocol (XMPP) is an technology for the near-real-time exchange of messages and presence notifications, where data is exchanged over Extensible Markup Language (XML) streams. The original XMPP working group published RFCs 3920-3923. Implementation and deployment experience since that time has resulted in errata, clarifications, and suggestions for improvement to the core XMPP specifications (RFCs 3920 and 3921). Some technologies on which XMPP depends (e.g., Transport Layer Security and the Simple Authentication and Security Layer) have undergone modifications of their own, which XMPP needs to track. Finally, the group needs to define a sustainable solution to internationalization of XMPP addresses, since the approach taken in RFC 3920 (based on stringprep profiles) is limited to Unicode 3.2 characters. Both draft-saintandre-rfc3920bis-* and draft-saintandre-rfc3921bis-* reflect community input so far regarding these modifications, but the group needs to complete this work, especially with regard to internationalization. Because of the scope of changes involved, it is envisioned that these specifications will be cycled at Proposed Standard. Although RFC 3923 defines an end-to-end signing and encryption technology for use by XMPP systems, to date it has not been implemented. A goal of the group is to develop an implementable method for end-to-end encryption, preferably based on well known and widely deployed security technologies. XMPP uses TLS for encryption and the Simple Authentication and Security Layer (SASL) for authentication. In the case of a server-to-server stream, XMPP is deployed using TLS and the SASL EXTERNAL mechanism, where each peer presents an X.509 certificate. This model introduces scaling challenges in multi-domain deployments because RFC 3920 requires that a stream cannot be reused for more than one domain, thus necessitating multiple TCP connections. The group will work to overcome these challenges by defining an optional mechanism for using a single connection with multiple identities. It is anticipated that most of the work will consist of defining and providing requirements to the TLS and SASL working groups. In addition to the TCP binding defined in RFC 6120, the XMPP community has long employed an HTTP binding (XEP-0124 and XEP-0206 published by the XMPP Standards Foundation). Given that this binding uses HTTP long polling, which has many known issues (RFC 6202), it is reasonable to transition to use of the WebSocket protocol (RFC 6455) instead. Work has begun on defining a WebSocket subprotocol for XMPP (draft-moffitt-xmpp-over-websocket). The group will complete the definition of such a subprotocol, and coordinate reviews with the HYBI WG where appropriate. In completing its work, the group will strive to retain backwards compatibility with RFCs 3920 and 3921. However, changes that are not backwards compatible might be accepted if the group determines that the changes are required to meet the group's technical objectives and the group clearly documents the reasons for making them. Milestones: Done - Decide upon a direction for server-to-server connection reuse. Done - Deliver rfc3920bis and rfc3921bis to the IESG. Done - Decide upon a direction for end-to-end encryption. Mar 2012 - Define a solution for server-to-server connection reuse. Aug 2012 - Define a solution for end-to-end encryption. Sep 2012 - Define a solution for internationalization of XMPP addresses (Update of RFC 6122) From ben@nostrum.com Tue Mar 5 13:40:37 2013 Return-Path: X-Original-To: xmpp@ietfa.amsl.com Delivered-To: xmpp@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 7D71F21F86F7 for ; Tue, 5 Mar 2013 13:40:37 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -102.6 X-Spam-Level: X-Spam-Status: No, score=-102.6 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, SPF_PASS=-0.001, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 0bKiUPXPrEGl for ; Tue, 5 Mar 2013 13:40:36 -0800 (PST) Received: from shaman.nostrum.com (nostrum-pt.tunnel.tserv2.fmt.ipv6.he.net [IPv6:2001:470:1f03:267::2]) by ietfa.amsl.com (Postfix) with ESMTP id 7A96021F86F4 for ; Tue, 5 Mar 2013 13:40:36 -0800 (PST) Received: from [10.0.1.14] (cpe-76-187-92-156.tx.res.rr.com [76.187.92.156]) (authenticated bits=0) by shaman.nostrum.com (8.14.3/8.14.3) with ESMTP id r25LeXRG055548 (version=TLSv1/SSLv3 cipher=AES128-SHA bits=128 verify=NO); Tue, 5 Mar 2013 15:40:35 -0600 (CST) (envelope-from ben@nostrum.com) Content-Type: text/plain; charset=us-ascii Mime-Version: 1.0 (Mac OS X Mail 6.2 \(1499\)) From: Ben Campbell In-Reply-To: <20130305184058.31690.3418.idtracker@ietfa.amsl.com> Date: Tue, 5 Mar 2013 15:40:33 -0600 Content-Transfer-Encoding: quoted-printable Message-Id: <1487AA34-E0F4-4DD3-867B-CE62615A549F@nostrum.com> References: <20130305184058.31690.3418.idtracker@ietfa.amsl.com> To: xmpp WG X-Mailer: Apple Mail (2.1499) Received-SPF: pass (shaman.nostrum.com: 76.187.92.156 is authenticated by a trusted mechanism) Subject: Re: [xmpp] WG Action: Rechartered Extensible Messaging and Presence Protocol (xmpp) X-BeenThere: xmpp@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: XMPP Working Group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 05 Mar 2013 21:40:37 -0000 Hi Everyone, This is the planned recharter to add work for XMPP/WebSockets. We will = add the milestone(s) for that shortly. In the process of this charter update, the ADs asked us to consider a = further recharter in the near-future to update the parts of the charter = that have been completed or otherwise overtaken by events. We will = discuss that briefly in Orlando, and follow up on it shortly afterwards. Thanks! Ben. On Mar 5, 2013, at 12:40 PM, The IESG wrote: > The Extensible Messaging and Presence Protocol (xmpp) working group in > the Real-time Applications and Infrastructure Area of the IETF has = been > rechartered. For additional information please contact the Area = Directors > or the WG Chairs. >=20 > Extensible Messaging and Presence Protocol (xmpp) > ------------------------------------------------ > Current Status: Active Working Group >=20 > Chairs: > Joe Hildebrand > Ben Campbell >=20 > Assigned Area Director: > Robert Sparks >=20 > Mailing list > Address: xmpp@ietf.org > To Subscribe: https://www.ietf.org/mailman/listinfo/xmpp > Archive: http://www.ietf.org/mail-archive/web/xmpp/ >=20 > Charter of Working Group: >=20 > The Extensible Messaging and Presence Protocol (XMPP) is an > technology for the near-real-time exchange of messages and presence > notifications, where data is exchanged over Extensible Markup Language > (XML) streams. The original XMPP working group published RFCs = 3920-3923. >=20 > Implementation and deployment experience since that time has resulted > in errata, clarifications, and suggestions for improvement to the core > XMPP specifications (RFCs 3920 and 3921). Some technologies on which > XMPP depends (e.g., Transport Layer Security and the Simple > Authentication and Security Layer) have undergone modifications of = their > own, which XMPP needs to track. Finally, the group needs to define a > sustainable solution to internationalization of XMPP addresses, since > the approach taken in RFC 3920 (based on stringprep profiles) is = limited > to Unicode 3.2 characters. Both draft-saintandre-rfc3920bis-* and > draft-saintandre-rfc3921bis-* reflect community input so > far regarding these modifications, but the group needs to complete = this > work, especially with regard to internationalization. Because of the > scope of changes involved, it is envisioned that these specifications > will be cycled at Proposed Standard. >=20 > Although RFC 3923 defines an end-to-end signing and encryption > technology for use by XMPP systems, to date it has not been = implemented. > A goal of the group is to develop an implementable method for = end-to-end > encryption, preferably based on well known and widely deployed = security > technologies. >=20 > XMPP uses TLS for encryption and the Simple Authentication and = Security > Layer (SASL) for authentication. In the case of a server-to-server > stream, XMPP is deployed using TLS and the SASL EXTERNAL mechanism, > where each peer presents an X.509 certificate. This model introduces > scaling challenges in multi-domain deployments because RFC 3920 = requires > that a stream cannot be reused for more than one domain, thus > necessitating multiple TCP connections. The group will work to = overcome > these challenges by defining an optional mechanism for using a single > connection with multiple identities. It is anticipated that most of = the > work will consist of defining and providing requirements to the TLS = and > SASL working groups. >=20 > In addition to the TCP binding defined in RFC 6120, the XMPP community > has long employed an HTTP binding (XEP-0124 and XEP-0206 published by=20= > the XMPP Standards Foundation). Given that this binding uses HTTP = long=20 > polling, which has many known issues (RFC 6202), it is reasonable to=20= > transition to use of the WebSocket protocol (RFC 6455) instead. Work = has > begun on defining a WebSocket subprotocol for XMPP=20 > (draft-moffitt-xmpp-over-websocket). The group will complete the=20 > definition of such a subprotocol, and coordinate reviews with the HYBI = WG >=20 > where appropriate. >=20 > In completing its work, the group will strive to retain backwards > compatibility with RFCs 3920 and 3921. However, changes that are not > backwards compatible might be accepted if the group determines that = the > changes are required to meet the group's technical objectives and the > group clearly documents the reasons for making them. >=20 > Milestones: > Done - Decide upon a direction for server-to-server connection > reuse. > Done - Deliver rfc3920bis and rfc3921bis to the IESG. > Done - Decide upon a direction for end-to-end encryption. > Mar 2012 - Define a solution for server-to-server connection reuse. > Aug 2012 - Define a solution for end-to-end encryption. > Sep 2012 - Define a solution for internationalization of XMPP = addresses > (Update of RFC 6122) >=20 >=20 > _______________________________________________ > xmpp mailing list > xmpp@ietf.org > https://www.ietf.org/mailman/listinfo/xmpp From mamille2@cisco.com Mon Mar 11 11:32:39 2013 Return-Path: X-Original-To: xmpp@ietfa.amsl.com Delivered-To: xmpp@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 1849B21F8DC5 for ; Mon, 11 Mar 2013 11:32:39 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -10.599 X-Spam-Level: X-Spam-Status: No, score=-10.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, RCVD_IN_DNSWL_HI=-8] Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id FWpMHthkstEx for ; Mon, 11 Mar 2013 11:32:37 -0700 (PDT) Received: from rcdn-iport-7.cisco.com (rcdn-iport-7.cisco.com [173.37.86.78]) by ietfa.amsl.com (Postfix) with ESMTP id C36FB21F8D45 for ; Mon, 11 Mar 2013 11:32:35 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=3810; q=dns/txt; s=iport; t=1363026756; x=1364236356; h=from:to:subject:date:message-id:mime-version; bh=d7rp46nmzzF2hx5LKg/0osZezQo9hsBL/J2QyZa6bok=; b=McUPiaZwylKImfDQ6L6mz85UTjG+pQG62HehR48OzDfi90Luuxc3XEGw 5DUI47/xWNLhLAcf6fjxYsCXPixXc4E8M2+HEoqItCxJwo/Oz+GLhtZMM GDC6KJ+YAj9uT3Ml21uyMJ7zGUp4xFNHF2b1qWLvhYzRTVObAIzHzIFrU Y=; X-Files: smime.p7s : 2283 X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: AhoFAIshPlGtJXG//2dsb2JhbABDFodOq3KRDIFfFnSCKwECAoELASomMCcEEwgGiAUMnU6hHo5dgxdhA48zgSiWb4MKgig X-IronPort-AV: E=Sophos;i="4.84,825,1355097600"; d="p7s'?scan'208";a="186206884" Received: from rcdn-core2-4.cisco.com ([173.37.113.191]) by rcdn-iport-7.cisco.com with ESMTP; 11 Mar 2013 18:32:35 +0000 Received: from xhc-aln-x11.cisco.com (xhc-aln-x11.cisco.com [173.36.12.85]) by rcdn-core2-4.cisco.com (8.14.5/8.14.5) with ESMTP id r2BIWZ0M029288 (version=TLSv1/SSLv3 cipher=AES128-SHA bits=128 verify=FAIL) for ; Mon, 11 Mar 2013 18:32:35 GMT Received: from xmb-aln-x11.cisco.com ([169.254.6.203]) by xhc-aln-x11.cisco.com ([173.36.12.85]) with mapi id 14.02.0318.004; Mon, 11 Mar 2013 13:32:35 -0500 From: "Matt Miller (mamille2)" To: " Group" Thread-Topic: Slides in Potentia Thread-Index: AQHOHobMTbw3axQDh0CUZOATIIB/lQ== Date: Mon, 11 Mar 2013 18:32:34 +0000 Message-ID: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: yes X-MS-TNEF-Correlator: x-originating-ip: [10.21.69.54] Content-Type: multipart/signed; boundary="Apple-Mail=_8A295CFD-D32D-49A1-8476-EA477470E513"; protocol="application/pkcs7-signature"; micalg=sha1 MIME-Version: 1.0 Subject: [xmpp] Slides in Potentia X-BeenThere: xmpp@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: XMPP Working Group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 11 Mar 2013 18:32:39 -0000 --Apple-Mail=_8A295CFD-D32D-49A1-8476-EA477470E513 Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=us-ascii After discussion with the chairs, I've put together some slides that = *MIGHT* be talked about, *IF* time permits discussion on E2E. < http://outer-planes.net/~linuxwolf/ietf/ietf86-xmppwg-e2e.pdf > - m&m Matt Miller < mamille2@cisco.com > Cisco Systems, Inc. --Apple-Mail=_8A295CFD-D32D-49A1-8476-EA477470E513 Content-Disposition: attachment; filename="smime.p7s" Content-Type: application/pkcs7-signature; name="smime.p7s" Content-Transfer-Encoding: base64 MIAGCSqGSIb3DQEHAqCAMIACAQExCzAJBgUrDgMCGgUAMIAGCSqGSIb3DQEHAQAAoIIFejCCBXYw ggNeoAMCAQICAwyLmDANBgkqhkiG9w0BAQUFADB5MRAwDgYDVQQKEwdSb290IENBMR4wHAYDVQQL ExVodHRwOi8vd3d3LmNhY2VydC5vcmcxIjAgBgNVBAMTGUNBIENlcnQgU2lnbmluZyBBdXRob3Jp dHkxITAfBgkqhkiG9w0BCQEWEnN1cHBvcnRAY2FjZXJ0Lm9yZzAeFw0xMjExMjgxNzQ5MzFaFw0x NDExMjgxNzQ5MzFaMDwxFzAVBgNVBAMTDk1hdHRoZXcgTWlsbGVyMSEwHwYJKoZIhvcNAQkBFhJt YW1pbGxlMkBjaXNjby5jb20wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7Sh5cQYtd /kfoG3KjXd8i2esxt+BtHCmuiSku2VECC6msLKzA08cGJ31GfyX7+996TV3D5omh51j5fznfFikk cVGsuKe+omo70Aidw48ISGygQk8ZJrU8JVVfTjKVJRX39wgj8w8CI/BCz4kXLirIBWKTv1ARuqsO 7I1aqT7pWHAwlAKIbYYEwfz46OjyzmqknglOecy/1PR09nXwAAIepSo0Jk9edqsU8Pdqsbx8cPUV jlFtVkk+58ORjefl+4BoGrzW24rGG2B04sNPrycNqZEaJLmdk5J9ie/FMV10H8wFW8syomuacPxv NhoUgNnkYsJiO7zJEKUUmbmW1GPFAgMBAAGjggFCMIIBPjAMBgNVHRMBAf8EAjAAMFYGCWCGSAGG +EIBDQRJFkdUbyBnZXQgeW91ciBvd24gY2VydGlmaWNhdGUgZm9yIEZSRUUgaGVhZCBvdmVyIHRv IGh0dHA6Ly93d3cuQ0FjZXJ0Lm9yZzAOBgNVHQ8BAf8EBAMCA6gwQAYDVR0lBDkwNwYIKwYBBQUH AwQGCCsGAQUFBwMCBgorBgEEAYI3CgMEBgorBgEEAYI3CgMDBglghkgBhvhCBAEwMgYIKwYBBQUH AQEEJjAkMCIGCCsGAQUFBzABhhZodHRwOi8vb2NzcC5jYWNlcnQub3JnMDEGA1UdHwQqMCgwJqAk oCKGIGh0dHA6Ly9jcmwuY2FjZXJ0Lm9yZy9yZXZva2UuY3JsMB0GA1UdEQQWMBSBEm1hbWlsbGUy QGNpc2NvLmNvbTANBgkqhkiG9w0BAQUFAAOCAgEAKZeEUJTYYt15cxR3xYospy8OqOLn+03auURM X3eFTrbBy+vJEnEtDS5ffCKbzAho6XqGrgRg/7Frg2wtdfIJvcYnPsWjlF+TIWe69i9r7EfPZI6A DCWHeu5cK3t9h7WsF3iC+lBARWEE49QJcu6ASY4SpVnElADpUZkBLsKnp2vWEVvXdeFg0CCo9UgH gPnE5mUsUaERW0WGIbyR+gkUkfMUsnOj2yvdZzC55UqAfFGqb4ibVlpWMJihaTYaSuN7SOImcJ5V Ya1w4yPRY2GStiHtmwPKtxlMVwMIsj1DQ/knVPpyJ0N67y8TK3R077HMInjk8wF6yCJ7W29mGtsA Y74bHEwn4rMdPDAHK1aHvIhf5KZFBuDYm5Ii6yweR8mpUv66r11h1G9vZKpJyKqR0yikdJfQ+kGN C1mAFN6ZKfQexnzzAPUClzcrJQsLWGl1tss+LHWFEhSq0240bvUqPVNl52WGwMrgzP/W32HZz62W 1CUaWiy3Xr8cHEY3fTSqxPLJiEuRsUmg1+6cjtz9+Ya+IDZwPRtcqzmJFQq+Q1xHLKfS8uf/jxHP xVOzbPpF/O0E0A8Z9ShmfdhgrHNJExXMVerISlzQY6Aq+XzGyOXVwUVyfTnTj7orMacBAVUJNl4s MHEJ02oUeALFMoa2TvwtGEw6Ou7/UlNXt/E1iUkxggMzMIIDLwIBATCBgDB5MRAwDgYDVQQKEwdS b290IENBMR4wHAYDVQQLExVodHRwOi8vd3d3LmNhY2VydC5vcmcxIjAgBgNVBAMTGUNBIENlcnQg U2lnbmluZyBBdXRob3JpdHkxITAfBgkqhkiG9w0BCQEWEnN1cHBvcnRAY2FjZXJ0Lm9yZwIDDIuY MAkGBSsOAwIaBQCgggGHMBgGCSqGSIb3DQEJAzELBgkqhkiG9w0BBwEwHAYJKoZIhvcNAQkFMQ8X DTEzMDMxMTE4MzIzNFowIwYJKoZIhvcNAQkEMRYEFCmaz/qcw3I/uBgT1U4ajRQH8XrtMIGRBgkr BgEEAYI3EAQxgYMwgYAweTEQMA4GA1UEChMHUm9vdCBDQTEeMBwGA1UECxMVaHR0cDovL3d3dy5j YWNlcnQub3JnMSIwIAYDVQQDExlDQSBDZXJ0IFNpZ25pbmcgQXV0aG9yaXR5MSEwHwYJKoZIhvcN AQkBFhJzdXBwb3J0QGNhY2VydC5vcmcCAwyLmDCBkwYLKoZIhvcNAQkQAgsxgYOggYAweTEQMA4G A1UEChMHUm9vdCBDQTEeMBwGA1UECxMVaHR0cDovL3d3dy5jYWNlcnQub3JnMSIwIAYDVQQDExlD QSBDZXJ0IFNpZ25pbmcgQXV0aG9yaXR5MSEwHwYJKoZIhvcNAQkBFhJzdXBwb3J0QGNhY2VydC5v cmcCAwyLmDANBgkqhkiG9w0BAQEFAASCAQBx7kluyRLhxXn+0aM7exBH9c4o4SiwXaeYzvM3mmF1 XiKOQW9dzVPB3G/zZmQ6Tz+FGVXJGciz4Qgwm8xmTbx6LRdOO3vu62MG05ctmHd3gZLoS+BsmpQw JZHnILFIDqNYhBcjBSo+nQuoNrMNiCG6sGUmcoz3Lc/PS3uBDoOIonjwtLicdyx1SeUdtBIrzYYm gxm6CHscqOLWHg3pnobMRPrhKavatwWHQgb1em8jJ9y7U6DLbicE92jJdJgTiVuYIdVgYhT2nNrr uDd56Mt8ZjEsBjigaz0bwP4bAXitvlE8Na7/UPsPTgiGirvX0Hu/len6hZbOIXoEblqbOlWSAAAA AAAA --Apple-Mail=_8A295CFD-D32D-49A1-8476-EA477470E513-- From ben@nostrum.com Wed Mar 13 10:32:39 2013 Return-Path: X-Original-To: xmpp@ietfa.amsl.com Delivered-To: xmpp@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 0732221F85D4 for ; Wed, 13 Mar 2013 10:32:39 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -102.509 X-Spam-Level: X-Spam-Status: No, score=-102.509 tagged_above=-999 required=5 tests=[AWL=0.091, BAYES_00=-2.599, SPF_PASS=-0.001, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id kq7lS-EZ3zxD for ; Wed, 13 Mar 2013 10:32:38 -0700 (PDT) Received: from shaman.nostrum.com (nostrum-pt.tunnel.tserv2.fmt.ipv6.he.net [IPv6:2001:470:1f03:267::2]) by ietfa.amsl.com (Postfix) with ESMTP id 7B84A21F8DF9 for ; Wed, 13 Mar 2013 10:32:38 -0700 (PDT) Received: from [10.0.1.2] (dhcp-431a.meeting.ietf.org [130.129.67.26]) (authenticated bits=0) by shaman.nostrum.com (8.14.3/8.14.3) with ESMTP id r2DHWaXl051019 (version=TLSv1/SSLv3 cipher=AES128-SHA bits=128 verify=NO); Wed, 13 Mar 2013 12:32:37 -0500 (CDT) (envelope-from ben@nostrum.com) From: Ben Campbell Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: quoted-printable Date: Wed, 13 Mar 2013 13:32:36 -0400 Message-Id: <23DD15B1-6C9D-4D98-AB0E-28FABC36620D@nostrum.com> To: xmpp WG Mime-Version: 1.0 (Mac OS X Mail 6.2 \(1499\)) X-Mailer: Apple Mail (2.1499) Received-SPF: pass (shaman.nostrum.com: 130.129.67.26 is authenticated by a trusted mechanism) Cc: Jean Mahoney Subject: [xmpp] Friday Meeting Volunteers X-BeenThere: xmpp@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: XMPP Working Group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 13 Mar 2013 17:32:39 -0000 Hi Everyone, Jean Mahoney has graciously volunteered to take minutes for our Friday = meeting. [applause] We still need a volunteer for XMPP chatroom scribe. We mainly need this = scribe to watch for comments that need to go to the mike. Identifying = speakers and slide numbers can be helpful as well, since we some of the = more active participants may be remote this week. (Including a potential = presenter.) Thanks! Ben.= From ben@nostrum.com Wed Mar 13 11:29:19 2013 Return-Path: X-Original-To: xmpp@ietfa.amsl.com Delivered-To: xmpp@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id EB3DB21F8F01 for ; Wed, 13 Mar 2013 11:29:18 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -102.517 X-Spam-Level: X-Spam-Status: No, score=-102.517 tagged_above=-999 required=5 tests=[AWL=0.083, BAYES_00=-2.599, SPF_PASS=-0.001, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id qUQzxPslRcb7 for ; Wed, 13 Mar 2013 11:29:18 -0700 (PDT) Received: from shaman.nostrum.com (nostrum-pt.tunnel.tserv2.fmt.ipv6.he.net [IPv6:2001:470:1f03:267::2]) by ietfa.amsl.com (Postfix) with ESMTP id 0392621F8EFC for ; Wed, 13 Mar 2013 11:29:16 -0700 (PDT) Received: from [10.0.1.2] (dhcp-431a.meeting.ietf.org [130.129.67.26]) (authenticated bits=0) by shaman.nostrum.com (8.14.3/8.14.3) with ESMTP id r2DITFbW057691 (version=TLSv1/SSLv3 cipher=AES128-SHA bits=128 verify=NO) for ; Wed, 13 Mar 2013 13:29:16 -0500 (CDT) (envelope-from ben@nostrum.com) From: Ben Campbell Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: quoted-printable Message-Id: Date: Wed, 13 Mar 2013 14:29:14 -0400 To: xmpp WG Mime-Version: 1.0 (Mac OS X Mail 6.2 \(1499\)) X-Mailer: Apple Mail (2.1499) Received-SPF: pass (shaman.nostrum.com: 130.129.67.26 is authenticated by a trusted mechanism) Subject: [xmpp] Orlando Agenda Update X-BeenThere: xmpp@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: XMPP Working Group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 13 Mar 2013 18:29:19 -0000 Hi, We have a slight update to the agenda for Friday's meeting. We are = adding a short discussion of the End to End Security work at the end of = the meeting. This is strictly an "if time permits" item, so we may or = may not actually get to it. The updated draft is available at = http://tools.ietf.org/html/draft-miller-xmpp-e2e-05 . Thanks! Ben.= From jon.kristensen@nejla.com Wed Mar 13 19:41:46 2013 Return-Path: X-Original-To: xmpp@ietfa.amsl.com Delivered-To: xmpp@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 2BB1A21F8E6E for ; Wed, 13 Mar 2013 19:41:46 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: 1.256 X-Spam-Level: * X-Spam-Status: No, score=1.256 tagged_above=-999 required=5 tests=[AWL=1.088, BAYES_00=-2.599, FH_RELAY_NODNS=1.451, HELO_LH_LD=1.215, HTML_MESSAGE=0.001, RDNS_NONE=0.1] Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 2MbILr8e5aHv for ; Wed, 13 Mar 2013 19:41:45 -0700 (PDT) Received: from mail-la0-x235.google.com (mail-la0-x235.google.com [IPv6:2a00:1450:4010:c03::235]) by ietfa.amsl.com (Postfix) with ESMTP id C93D321F8E47 for ; Wed, 13 Mar 2013 19:41:44 -0700 (PDT) Received: by mail-la0-f53.google.com with SMTP id fr10so1884196lab.40 for ; Wed, 13 Mar 2013 19:41:43 -0700 (PDT) X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=20120113; h=x-received:message-id:date:from:user-agent:mime-version:to:cc :subject:references:in-reply-to:content-type:x-gm-message-state; bh=htsuo2554SY1pIsF11AWbmMXDlYB/hktRG2FhGbabe8=; b=kMRSkjXFx1nWUGot2wRpQK+mAzyS+naZFUPtlTMoIj98za8Z/AQuYstUQKjsA8f65t Yqx0AcshTdbOOW5CPmM9YLge9lsl6n4MUcU66cjASqfd9al0kNcAbyo6m6T6cvbzzvKv lCvSY54+NleiDYSS+PFUlSvqZyLI7bAN4CCuoTqv/FtOMYpVP5QYB8dqBBdWn+o65dHo ngL68rhykTsVrI1vDkKfFTVFriMYiv/gtJ2zvSFCoNORxcqDxSSaa4/HpvGRbyV2VrzU 9Gcg6GiXCOUBLds6+OTlwaSkuJEyq7i2bdr2jJW1eA7HKFJFRKedJJej3lG5/y9iREMR wuEA== X-Received: by 10.112.69.75 with SMTP id c11mr414421lbu.119.1363228902910; Wed, 13 Mar 2013 19:41:42 -0700 (PDT) Received: from localhost.localdomain ([94.234.185.11]) by mx.google.com with ESMTPS id l1sm293358lbn.8.2013.03.13.19.41.40 (version=TLSv1 cipher=RC4-SHA bits=128/128); Wed, 13 Mar 2013 19:41:41 -0700 (PDT) Message-ID: <514138E3.4090105@jonkri.com> Date: Thu, 14 Mar 2013 03:41:39 +0100 From: Jon Kristensen User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:17.0) Gecko/20130219 Thunderbird/17.0.3 MIME-Version: 1.0 To: Richard Barnes References: <512CC832.1060702@jonkri.com> <512E94A2.8000900@jonkri.com> <512FD6DB.40304@jonkri.com> <5130BB49.20100@jonkri.com> <5133C874.7080801@jonkri.com> In-Reply-To: Content-Type: multipart/alternative; boundary="------------060209080002010709000303" X-Gm-Message-State: ALoCoQk2u384si3+V8YDQBXEkbT7q2M2oRDixUrtuiW5TdnamLDs+BuNjoLk7F2OeJDBt+cjgRKo Cc: "" Subject: Re: [xmpp] Self Introduction X-BeenThere: xmpp@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: XMPP Working Group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 14 Mar 2013 02:41:46 -0000 This is a multi-part message in MIME format. --------------060209080002010709000303 Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Mr. Barnes: Here's an initial idea. :-) What do you think about standardizing a simple, unauthenticated, Diffie-Hellman key exchange, for use with any XMPP protocol? This would be a two-way process (an IQ set/result pair) which could be used to produce a shared secret between two parties. In regards to Miller's proposal, this shared secret could be used to derive encryption keys in order to protect the public keys. The Diffie-Hellman process would look something like this: 1. Alice selects a safe prime (p), a generator (g)*, a minimum bit length value for the random values used (l), and a shared secret identifier (i). 2. Alice generates a random secret (at least l bits long), As, and calculates a Diffie-Hellman public value based on this secret, Ap = g^(As) mod p. 3. Alice sends Ap, p, g, l, and i to Bob. 4. Bob verifies that p is an acceptable safe prime, that g is an acceptable generator, and that l is of an acceptable size. 5. Bob generates a random secret (at least l bits long), Bs, and calculates a Diffie-Hellman public value based on this secret, Bp = g^(Bs) mod p. 6. Bob sends Bp to Alice. 7. Alice and Bob calculates the shared secret s = (Bp)^(As) mod p = (Ap)^(Bs) mod p. The shared secret (s) would be serialized as an unbounded, unsigned, and big-endian integer, with no leading \00 bytes. An encryption key could now be derived from that shared secret by hashing s, taking as many bits as needed. Multiple keys, IV values, and so on, could be derived by hashing \00 + s, \01 + s, \02 + s, etc. However, how these derived values would be produced would be up to the application utilizing the Diffie-Hellman key exchange. In Miller's protocol's key exchange mechanism, the shared secret identifier and (for example) the hash function to be used to produce the encryption keys, could be specified in the element. Thus, by protecting the sensitive key request content, it seems to me that both weak anonymity and (perfect) forward secrecy could be provided. Strong anonymity could be provided by delivering a protected identifier as part of the key request response, that can be used to request the key again in the future. This identifier would then be used by Alice and Bob to look up the appropriate key pair, prohibiting even an active attacker to expose the public keys. I'm not exactly sure how to expire these identifiers, but I'll defer commitment to that for now. Thanks! Jon *) The number 2 can apparantly always be used as a generator, and I don't know of any reason of why we would want the flexibility to choose something else. On 03/04/2013 01:23 AM, Richard Barnes wrote: > You suggestions for how to add them would be most welcome :) > > On Sunday, March 3, 2013, Jon Kristensen wrote: > > On 03/01/2013 03:29 PM, Jon Kristensen wrote: >> At this point, it seems to me that OTR/Yabasta provides two >> things that Miller's protocol does not: weak anonymity (a passive >> attacker can't tell what public key is being used) and perfect >> forward secrecy. I'm also thinking about the possibility of >> providing *strong anonymity* (an active attacker can't tell what >> public key is being used) if the public keys are already known. >> (I'm not yet sure about the *forgeability* feature.) > > I don't know what I was doing when I wrote the above text. I've > added two corrections in bold. > > In addition to the Perfect Forward Secrecy requirement, which as > mentioned should be relatively straight-forward to add to Miller's > protocol, I would like see support for something like weak > anonymity (an active man-in-the-middle attack is necessary in > order to reveal the public keys (while they are being exchanged)) > and strong anonymity (not even an active man-in-the-middle attack > can reveal the public keys used (for example, during the key > requests)). The way I imagine strong anonymity to work, is that > every key request is performed with a (rotating) public key > identifier that cannot be linked with to the public key in question. > > If these features could be added, I would see no reason to > continue developing the Yabasta protocol. > > Jon > --------------060209080002010709000303 Content-Type: text/html; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit
Mr. Barnes:

Here's an initial idea. :-)

What do you think about standardizing a simple, unauthenticated, Diffie-Hellman key exchange, for use with any XMPP protocol? This would be a two-way process (an IQ set/result pair) which could be used to produce a shared secret between two parties. In regards to Miller's proposal, this shared secret could be used to derive encryption keys in order to protect the public keys.

The Diffie-Hellman process would look something like this:

  1. Alice selects a safe prime (p), a generator (g)*, a minimum bit length value for the random values used (l), and a shared secret identifier (i).
  2. Alice generates a random secret (at least l bits long), As, and calculates a Diffie-Hellman public value based on this secret, Ap = g^(As) mod p.
  3. Alice sends Ap, p, g, l, and i to Bob.
  4. Bob verifies that p is an acceptable safe prime, that g is an acceptable generator, and that l is of an acceptable size.
  5. Bob generates a random secret (at least l bits long), Bs, and calculates a Diffie-Hellman public value based on this secret, Bp = g^(Bs) mod p.
  6. Bob sends Bp to Alice.
  7. Alice and Bob calculates the shared secret s = (Bp)^(As) mod p = (Ap)^(Bs) mod p.

The shared secret (s) would be serialized as an unbounded, unsigned, and big-endian integer, with no leading \00 bytes.

An encryption key could now be derived from that shared secret by hashing s, taking as many bits as needed. Multiple keys, IV values, and so on, could be derived by hashing \00 + s, \01 + s, \02 + s, etc. However, how these derived values would be produced would be up to the application utilizing the Diffie-Hellman key exchange.

In Miller's protocol's key exchange mechanism, the shared secret identifier and (for example) the hash function to be used to produce the encryption keys, could be specified in the <keyreq /> element. Thus, by protecting the sensitive key request content, it seems to me that both weak anonymity and (perfect) forward secrecy could be provided.

Strong anonymity could be provided by delivering a protected identifier as part of the key request response, that can be used to request the key again in the future. This identifier would then be used by Alice and Bob to look up the appropriate key pair, prohibiting even an active attacker to expose the public keys. I'm not exactly sure how to expire these identifiers, but I'll defer commitment to that for now.

Thanks!

Jon

*) The number 2 can apparantly always be used as a generator, and I don't know of any reason of why we would want the flexibility to choose something else.

On 03/04/2013 01:23 AM, Richard Barnes wrote:
You suggestions for how to add them would be most welcome :)

On Sunday, March 3, 2013, Jon Kristensen wrote:
On 03/01/2013 03:29 PM, Jon Kristensen wrote:
At this point, it seems to me that OTR/Yabasta provides two things that Miller's protocol does not: weak anonymity (a passive attacker can't tell what public key is being used) and perfect forward secrecy. I'm also thinking about the possibility of providing strong anonymity (an active attacker can't tell what public key is being used) if the public keys are already known. (I'm not yet sure about the forgeability feature.)

I don't know what I was doing when I wrote the above text. I've added two corrections in bold.

In addition to the Perfect Forward Secrecy requirement, which as mentioned should be relatively straight-forward to add to Miller's protocol, I would like see support for something like weak anonymity (an active man-in-the-middle attack is necessary in order to reveal the public keys (while they are being exchanged)) and strong anonymity (not even an active man-in-the-middle attack can reveal the public keys used (for example, during the key requests)). The way I imagine strong anonymity to work, is that every key request is performed with a (rotating) public key identifier that cannot be linked with to the public key in question.

If these features could be added, I would see no reason to continue developing the Yabasta protocol.

Jon

--------------060209080002010709000303-- From rlb@ipv.sx Wed Mar 13 22:39:53 2013 Return-Path: X-Original-To: xmpp@ietfa.amsl.com Delivered-To: xmpp@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 0994421F8E5D for ; Wed, 13 Mar 2013 22:39:53 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -0.182 X-Spam-Level: X-Spam-Status: No, score=-0.182 tagged_above=-999 required=5 tests=[AWL=-0.662, BAYES_00=-2.599, FH_RELAY_NODNS=1.451, FM_FORGED_GMAIL=0.622, HTML_MESSAGE=0.001, RCVD_IN_PBL=0.905, RDNS_NONE=0.1] Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id nWO9Ko4f+v6a for ; Wed, 13 Mar 2013 22:39:50 -0700 (PDT) Received: from mail-ob0-x22d.google.com (mail-ob0-x22d.google.com [IPv6:2607:f8b0:4003:c01::22d]) by ietfa.amsl.com (Postfix) with ESMTP id 1435D21F8E5A for ; Wed, 13 Mar 2013 22:39:50 -0700 (PDT) Received: by mail-ob0-f173.google.com with SMTP id dn14so1835957obc.18 for ; Wed, 13 Mar 2013 22:39:49 -0700 (PDT) X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=20120113; h=mime-version:x-received:x-originating-ip:in-reply-to:references :date:message-id:subject:from:to:cc:content-type:x-gm-message-state; bh=WZ9QIfcMD6EWXET/bHDszeHEmM+8ci052w/1a+naNVQ=; b=JKZbgD3hrlx7dHivBGemgYt8NvRAg/xtVCZ2gnw74a058+wVMoSpSW4MnIHUVVUUos RwefnqqcWSZAW8A8RUJiTvAdd4IM95iy7Pz2303970W2cTK6D5vzfbmX9NDIxLeGwDbX gPiXjxWO6NcVTU7r7w2XL6dyNbYXtW0v9XLhvvemmwGsBKDysGB5YwfQM5ycSxvEnVmD fqpVJzciIVd8Az0LE9aBIryYuh0AC4A/jUUyYeeHEvRJ+0sgw7qXS6w67cTl8tDdArc4 b/n0l8lBZf5w+SVlLbVCzsi+eOMX6Qtpqq5H8U3LBUz8g/rV8AAYL2v3PKkSVCe7/Gcy GzvA== MIME-Version: 1.0 X-Received: by 10.60.9.1 with SMTP id v1mr463207oea.130.1363239589623; Wed, 13 Mar 2013 22:39:49 -0700 (PDT) Received: by 10.60.40.233 with HTTP; Wed, 13 Mar 2013 22:39:49 -0700 (PDT) X-Originating-IP: [207.30.52.254] In-Reply-To: <514138E3.4090105@jonkri.com> References: <512CC832.1060702@jonkri.com> <512E94A2.8000900@jonkri.com> <512FD6DB.40304@jonkri.com> <5130BB49.20100@jonkri.com> <5133C874.7080801@jonkri.com> <514138E3.4090105@jonkri.com> Date: Thu, 14 Mar 2013 01:39:49 -0400 Message-ID: From: Richard Barnes To: Jon Kristensen Content-Type: multipart/alternative; boundary=e89a8fb203187bd8e604d7dbf343 X-Gm-Message-State: ALoCoQk2Nombrl4HIFTfVK9vAXziISkm41MbVSqSG5TNbEM/OpNxfoU0RSerwoOoIteV1UY8TUNj Cc: "" Subject: Re: [xmpp] Self Introduction X-BeenThere: xmpp@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: XMPP Working Group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 14 Mar 2013 05:39:53 -0000 --e89a8fb203187bd8e604d7dbf343 Content-Type: text/plain; charset=ISO-8859-1 It's even simpler than that: Alice and Bob each generate a JWK representing a DH or ECDH key, the exchange them in an IQ. http://tools.ietf.org/html/draft-ietf-jose-json-web-key-08 On Wednesday, March 13, 2013, Jon Kristensen wrote: > Mr. Barnes: > > Here's an initial idea. :-) > > What do you think about standardizing a simple, unauthenticated, > Diffie-Hellman key exchange, for use with any XMPP protocol? This would be > a two-way process (an IQ set/result pair) which could be used to produce a > shared secret between two parties. In regards to Miller's proposal, this > shared secret could be used to derive encryption keys in order to protect > the public keys. > > The Diffie-Hellman process would look something like this: > > 1. Alice selects a safe prime (p), a generator (g)*, a minimum bit > length value for the random values used (l), and a shared secret identifier > (i). > 2. Alice generates a random secret (at least l bits long), As, and > calculates a Diffie-Hellman public value based on this secret, Ap = g^(As) > mod p. > 3. Alice sends Ap, p, g, l, and i to Bob. > 4. Bob verifies that p is an acceptable safe prime, that g is an > acceptable generator, and that l is of an acceptable size. > 5. Bob generates a random secret (at least l bits long), Bs, and > calculates a Diffie-Hellman public value based on this secret, Bp = g^(Bs) > mod p. > 6. Bob sends Bp to Alice. > 7. Alice and Bob calculates the shared secret s = (Bp)^(As) mod p = > (Ap)^(Bs) mod p. > > The shared secret (s) would be serialized as an unbounded, unsigned, and > big-endian integer, with no leading \00 bytes. > > An encryption key could now be derived from that shared secret by hashing > s, taking as many bits as needed. Multiple keys, IV values, and so on, > could be derived by hashing \00 + s, \01 + s, \02 + s, etc. However, how > these derived values would be produced would be up to the application > utilizing the Diffie-Hellman key exchange. > > In Miller's protocol's key exchange mechanism, the shared secret > identifier and (for example) the hash function to be used to produce the > encryption keys, could be specified in the element. Thus, by > protecting the sensitive key request content, it seems to me that both weak > anonymity and (perfect) forward secrecy could be provided. > > Strong anonymity could be provided by delivering a protected identifier as > part of the key request response, that can be used to request the key again > in the future. This identifier would then be used by Alice and Bob to look > up the appropriate key pair, prohibiting even an active attacker to expose > the public keys. I'm not exactly sure how to expire these identifiers, but > I'll defer commitment to that for now. > > Thanks! > > Jon > > *) The number 2 can apparantly always be used as a generator, and I don't > know of any reason of why we would want the flexibility to choose something > else. > > On 03/04/2013 01:23 AM, Richard Barnes wrote: > > You suggestions for how to add them would be most welcome :) > > On Sunday, March 3, 2013, Jon Kristensen wrote: > >> On 03/01/2013 03:29 PM, Jon Kristensen wrote: >> >> At this point, it seems to me that OTR/Yabasta provides two things that >> Miller's protocol does not: weak anonymity (a passive attacker can't tell >> what public key is being used) and perfect forward secrecy. I'm also >> thinking about the possibility of providing *strong anonymity* (an >> active attacker can't tell what public key is being used) if the public >> keys are already known. (I'm not yet sure about the *forgeability*feature.) >> >> >> I don't know what I was doing when I wrote the above text. I've added two >> corrections in bold. >> >> In addition to the Perfect Forward Secrecy requirement, which as >> mentioned should be relatively straight-forward to add to Miller's >> protocol, I would like see support for something like weak anonymity (an >> active man-in-the-middle attack is necessary in order to reveal the public >> keys (while they are being exchanged)) and strong anonymity (not even an >> active man-in-the-middle attack can reveal the public keys used (for >> example, during the key requests)). The way I imagine strong anonymity to >> work, is that every key request is performed with a (rotating) public key >> identifier that cannot be linked with to the public key in question. >> >> If these features could be added, I would see no reason to continue >> developing the Yabasta protocol. >> >> Jon >> > > --e89a8fb203187bd8e604d7dbf343 Content-Type: text/html; charset=ISO-8859-1 Content-Transfer-Encoding: quoted-printable
It's even simpler=A0than that: Alice and Bob each gen= erate a JWK representing a DH or ECDH key, the exchange them in an IQ.=A0

http://tools.ietf.org/html/draft-ietf-jose-json-web-= key-08

On Wednesday, March 13, 2013, Jon Kristensen wrote:
=20 =20 =20
Mr. Barnes:

Here's an initial idea. :-)

What do you think about standardizing a simple, unauthenticated, Diffie-Hellman key exchange, for use with any XMPP protocol? This would be a two-way process (an IQ set/result pair) which could be used to produce a shared secret between two parties. In regards to Miller's proposal, this shared secret could be used to derive encryption keys in order to protect the public keys.

The Diffie-Hellman process would look something like this:

=A0 1. Alice selects a safe prime (p), a generator (g)*, a minimum bit length value for the random values used (l), and a shared secret identifier (i).
=A0 2. Alice generates a random secret (at least l bits long), As, and calculates a Diffie-Hellman public value based on this secret, Ap =3D g^(As) mod p.
=A0 3. Alice sends Ap, p, g, l, and i to Bob.
=A0 4. Bob verifies that p is an acceptable safe prime, that g is an acceptable generator, and that l is of an acceptable size.
=A0 5. Bob generates a random secret (at least l bits long), Bs, and calculates a Diffie-Hellman public value based on this secret, Bp =3D g^(Bs) mod p.
=A0 6. Bob sends Bp to Alice.
=A0 7. Alice and Bob calculates the shared secret s =3D (Bp)^(As) mod p =3D (Ap)^(Bs) mod p.

The shared secret (s) would be serialized as an unbounded, unsigned, and big-endian integer, with no leading \00 bytes.

An encryption key could now be derived from that shared secret by hashing s, taking as many bits as needed. Multiple keys, IV values, and so on, could be derived by hashing \00 + s, \01 + s, \02 + s, etc. However, how these derived values would be produced would be up to the application utilizing the Diffie-Hellman key exchange.

In Miller's protocol's key exchange mechanism, the shared sec= ret identifier and (for example) the hash function to be used to produce the encryption keys, could be specified in the <keyreq /> element. Thus, by protecting the sensitive key request content, it seems to me that both weak anonymity and (perfect) forward secrecy could be provided.

Strong anonymity could be provided by delivering a protected identifier as part of the key request response, that can be used to request the key again in the future. This identifier would then be used by Alice and Bob to look up the appropriate key pair, prohibiting even an active attacker to expose the public keys. I'= m not exactly sure how to expire these identifiers, but I'll defer commitment to that for now.

Thanks!

Jon

*) The number 2 can apparantly always be used as a generator, and I don't know of any reason of why we would want the flexibility t= o choose something else.

On 03/04/2013 01:23 AM, Richard Barnes wrote:
You suggestions for how to add them would be = most welcome :)

On Sunday, March 3, 2013, Jon Kristensen wrote:
On 03/01/2013 03:29 PM, Jon Kristensen wrote:
At this point, it seems to me that OTR/Yabasta provides two things that Miller's protocol does not: weak anonymity (a passive attacker can't tell what public key is being used) and perfect forward secrecy. I'm also thinking about the possibility of providing strong anonymity (an active attacker can't tell what public key is being used) if the public keys are already known. (I'm not yet sure about the forgeability feature.) <= br>

I don't know what I was doing when I wrote the above text. I've added two corrections in bold.

In addition to the Perfect Forward Secrecy requirement, which as mentioned should be relatively straight-forward to add to Miller's protocol, I would like see support for something lik= e weak anonymity (an active man-in-the-middle attack is necessary in order to reveal the public keys (while they are being exchanged)) and strong anonymity (not even an active man-in-the-middle attack can reveal the public keys used (for example, during the key requests)). The way I imagine strong anonymity to work, is that every key request is performed with a (rotating) public key identifier that cannot be linked with to the public key in question.

If these features could be added, I would see no reason to continue developing the Yabasta protocol.

Jon

--e89a8fb203187bd8e604d7dbf343-- From ben@nostrum.com Thu Mar 14 07:20:45 2013 Return-Path: X-Original-To: xmpp@ietfa.amsl.com Delivered-To: xmpp@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id A910411E811E for ; Thu, 14 Mar 2013 07:20:45 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -101.789 X-Spam-Level: X-Spam-Status: No, score=-101.789 tagged_above=-999 required=5 tests=[AWL=0.812, BAYES_00=-2.599, SPF_PASS=-0.001, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id vJR64EnG88mH for ; Thu, 14 Mar 2013 07:20:39 -0700 (PDT) Received: from shaman.nostrum.com (nostrum-pt.tunnel.tserv2.fmt.ipv6.he.net [IPv6:2001:470:1f03:267::2]) by ietfa.amsl.com (Postfix) with ESMTP id 2253521F8EB0 for ; Thu, 14 Mar 2013 07:20:39 -0700 (PDT) Received: from dhcp-643f.meeting.ietf.org (dhcp-643f.meeting.ietf.org [130.129.100.63]) (authenticated bits=0) by shaman.nostrum.com (8.14.3/8.14.3) with ESMTP id r2EEKZns097360 (version=TLSv1/SSLv3 cipher=AES128-SHA bits=128 verify=NO) for ; Thu, 14 Mar 2013 09:20:38 -0500 (CDT) (envelope-from ben@nostrum.com) Content-Type: text/plain; charset=iso-8859-1 Mime-Version: 1.0 (Mac OS X Mail 6.2 \(1499\)) From: Ben Campbell In-Reply-To: Date: Thu, 14 Mar 2013 10:20:36 -0400 Content-Transfer-Encoding: quoted-printable Message-Id: References: <512CC832.1060702@jonkri.com> <512E94A2.8000900@jonkri.com> <512FD6DB.40304@jonkri.com> <5130BB49.20100@jonkri.com> <5133C874.7080801@jonkri.com> <514138E3.4090105@jonkri.com> To: xmpp@ietf.org X-Mailer: Apple Mail (2.1499) Received-SPF: pass (shaman.nostrum.com: 130.129.100.63 is authenticated by a trusted mechanism) Subject: Re: [xmpp] Self Introduction X-BeenThere: xmpp@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: XMPP Working Group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 14 Mar 2013 14:20:46 -0000 Perhaps the participants in this thread would consider changing the = subject field to something more descriptive of the thread? (And before anyone says it, yes, I realize DH, etc, does something that = one might characterize as introductions ... :-) ) Thanks! Ben. On Mar 14, 2013, at 1:39 AM, Richard Barnes wrote: > It's even simpler than that: Alice and Bob each generate a JWK = representing a DH or ECDH key, the exchange them in an IQ.=20 >=20 > http://tools.ietf.org/html/draft-ietf-jose-json-web-key-08 >=20 > On Wednesday, March 13, 2013, Jon Kristensen wrote: > Mr. Barnes: >=20 > Here's an initial idea. :-) >=20 > What do you think about standardizing a simple, unauthenticated, = Diffie-Hellman key exchange, for use with any XMPP protocol? This would = be a two-way process (an IQ set/result pair) which could be used to = produce a shared secret between two parties. In regards to Miller's = proposal, this shared secret could be used to derive encryption keys in = order to protect the public keys. >=20 > The Diffie-Hellman process would look something like this: >=20 > 1. Alice selects a safe prime (p), a generator (g)*, a minimum bit = length value for the random values used (l), and a shared secret = identifier (i). > 2. Alice generates a random secret (at least l bits long), As, and = calculates a Diffie-Hellman public value based on this secret, Ap =3D = g^(As) mod p. > 3. Alice sends Ap, p, g, l, and i to Bob. > 4. Bob verifies that p is an acceptable safe prime, that g is an = acceptable generator, and that l is of an acceptable size. > 5. Bob generates a random secret (at least l bits long), Bs, and = calculates a Diffie-Hellman public value based on this secret, Bp =3D = g^(Bs) mod p. > 6. Bob sends Bp to Alice. > 7. Alice and Bob calculates the shared secret s =3D (Bp)^(As) mod p = =3D (Ap)^(Bs) mod p. >=20 > The shared secret (s) would be serialized as an unbounded, unsigned, = and big-endian integer, with no leading \00 bytes. >=20 > An encryption key could now be derived from that shared secret by = hashing s, taking as many bits as needed. Multiple keys, IV values, and = so on, could be derived by hashing \00 + s, \01 + s, \02 + s, etc. = However, how these derived values would be produced would be up to the = application utilizing the Diffie-Hellman key exchange. >=20 > In Miller's protocol's key exchange mechanism, the shared secret = identifier and (for example) the hash function to be used to produce the = encryption keys, could be specified in the element. Thus, by = protecting the sensitive key request content, it seems to me that both = weak anonymity and (perfect) forward secrecy could be provided. >=20 > Strong anonymity could be provided by delivering a protected = identifier as part of the key request response, that can be used to = request the key again in the future. This identifier would then be used = by Alice and Bob to look up the appropriate key pair, prohibiting even = an active attacker to expose the public keys. I'm not exactly sure how = to expire these identifiers, but I'll defer commitment to that for now. >=20 > Thanks! >=20 > Jon >=20 > *) The number 2 can apparantly always be used as a generator, and I = don't know of any reason of why we would want the flexibility to choose = something else. >=20 > On 03/04/2013 01:23 AM, Richard Barnes wrote: >> You suggestions for how to add them would be most welcome :) >>=20 >> On Sunday, March 3, 2013, Jon Kristensen wrote: >> On 03/01/2013 03:29 PM, Jon Kristensen wrote: >>> At this point, it seems to me that OTR/Yabasta provides two things = that Miller's protocol does not: weak anonymity (a passive attacker = can't tell what public key is being used) and perfect forward secrecy. = I'm also thinking about the possibility of providing strong anonymity = (an active attacker can't tell what public key is being used) if the = public keys are already known. (I'm not yet sure about the forgeability = feature.)=20 >>=20 >> I don't know what I was doing when I wrote the above text. I've added = two corrections in bold. >>=20 >> In addition to the Perfect Forward Secrecy requirement, which as = mentioned should be relatively straight-forward to add to Miller's = protocol, I would like see support for something like weak anonymity (an = active man-in-the-middle attack is necessary in order to reveal the = public keys (while they are being exchanged)) and strong anonymity (not = even an active man-in-the-middle attack can reveal the public keys used = (for example, during the key requests)). The way I imagine strong = anonymity to work, is that every key request is performed with a = (rotating) public key identifier that cannot be linked with to the = public key in question. >>=20 >> If these features could be added, I would see no reason to continue = developing the Yabasta protocol. >>=20 >> Jon >=20 > _______________________________________________ > xmpp mailing list > xmpp@ietf.org > https://www.ietf.org/mailman/listinfo/xmpp From Peter.Waher@clayster.com Thu Mar 14 08:26:01 2013 Return-Path: X-Original-To: xmpp@ietfa.amsl.com Delivered-To: xmpp@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 4331B11E82A9 for ; Thu, 14 Mar 2013 08:26:01 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -0.448 X-Spam-Level: X-Spam-Status: No, score=-0.448 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, HELO_EQ_SE=0.35, HTML_MESSAGE=0.001, J_CHICKENPOX_31=0.6, J_CHICKENPOX_73=0.6, J_CHICKENPOX_83=0.6] Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id QQsTG4zjqs-K for ; Thu, 14 Mar 2013 08:25:56 -0700 (PDT) Received: from mail1.ktc.se (mail1.ktc.se [83.241.183.120]) by ietfa.amsl.com (Postfix) with ESMTP id 0908911E8290 for ; Thu, 14 Mar 2013 08:25:48 -0700 (PDT) Received: from EX3.YODA.UTOPIA.LOCAL ([::1]) by EX3.YODA.UTOPIA.LOCAL ([fe80::134:ce58:2ec3:b37c%10]) with mapi id 14.02.0247.003; Thu, 14 Mar 2013 16:25:46 +0100 From: Peter Waher To: Matt Miller Thread-Topic: XMPP stanza encryption + EXI compression Thread-Index: Ac4gyBcvMCCuPnNJTUmrNa7AuYQtYA== Date: Thu, 14 Mar 2013 15:25:45 +0000 Message-ID: <1693EFE1FD641C42A0D542FCBC732DE698E53473@EX3.YODA.UTOPIA.LOCAL> Accept-Language: sv-SE, en-US Content-Language: en-US X-MS-Has-Attach: yes X-MS-TNEF-Correlator: x-originating-ip: [192.168.222.16] Content-Type: multipart/mixed; boundary="_004_1693EFE1FD641C42A0D542FCBC732DE698E53473EX3YODAUTOPIALO_" MIME-Version: 1.0 X-Mailman-Approved-At: Thu, 14 Mar 2013 09:07:56 -0700 Cc: Stephen Williams , XMPP Standards , "public-exi@w3.org" , "Joachim Lindborg \(joachim.lindborg@sust.se\)" , "xmpp@ietf.org" , "mact-usa@att.net" , FABLET Youenn Subject: [xmpp] XMPP stanza encryption + EXI compression X-BeenThere: xmpp@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: XMPP Working Group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 14 Mar 2013 15:27:10 -0000 --_004_1693EFE1FD641C42A0D542FCBC732DE698E53473EX3YODAUTOPIALO_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 RGVhciBNYXR0DQoNCkkganVzdCBiZWNhbWUgYXdhcmUgb2YgeW91ciAgSUVURiBkcmFmdCBmb3Ig WE1QUCBlbmQtdG8tZW5kIGVuY3J5cHRpb24uIEl0IGxvb2tzIHZlcnkgcHJvbWlzaW5nLg0KaHR0 cDovL3Rvb2xzLmlldGYub3JnL2h0bWwvZHJhZnQtbWlsbGVyLXhtcHAtZTJlLTA1DQoNCldlIHdv cmsgd2l0aCBzZW5zb3IgbmV0d29yayBhcmNoaXRlY3R1cmUgb3ZlciBYTVBQLCBhbmQgc29tZSAo YnV0IG5vdCBhbGwpIGFwcGxpY2F0aW9ucyByZXF1aXJlIGVuZC10by1lbmQgZW5jcnlwdGlvbiwg c28gd2Ugd2FudCB0byBsb29rIGF0IHRoaXMgZXh0ZW5zaW9uLg0KDQpBdCB0aGUgc2FtZSB0aW1l LCBjb21wcmVzc2lvbiBpcyBhIHZpdGFsIGlzc3VlLCBzaW5jZSBtYW55IHNlbnNvcnMgaGF2ZSBs aW1pdGVkIG1lbW9yeS4gVGhlcmVmb3JlLCB3ZSBhcmUgd29ya2luZyB3aXRoIGFuIGVmZm9ydCB0 byBpbmNsdWRlIHRoZSB1c2Ugb2YgRVhJIGluIFhNUFAuIChTZWUgYXR0YWNoZWQgZG9jdW1lbnRz LikgT25lIGltcG9ydGFudCBhc3BlY3QgdG8ga25vdywgd2hlbiBpbmNsdWRpbmcgRVhJIGludG8g WE1QUCwgaXMgdGhhdCBwYWNrZXRzIGNhbm5vdCBiZSBiaW5hcnkgY29waWVkIHdoZW4gdGhlIHNl cnZlciByZWxheXMgdGhlIGluZm9ybWF0aW9uLiBUaGUgcGFja2V0cyBoYXZlIHRvIGJlIGRlY29t cHJlc3NlZCwgYW5kIHJlLWNvbXByZXNzZWQgaWYgYm90aCBwZWVycyBoYXZlIEVYSS1jb21wcmVz c2VkIGNoYW5uZWxzLiBUaGlzIHJlcXVpcmVzIEVYSSB0byBiZSBhcHBsaWVkIGFmdGVyIGFueSBt ZXNzYWdlIGVuY3J5cHRpb24gdHJhbnNmb3JtYXRpb246IEV4aTEoRW5jcnlwdChYbWwpKS4gU2Vy dmVyIHRoZW4gcmVsYXlzIEV4aTIoRGVFeGkxKEV4aTEoRW5jcnlwdChYbWwpKSkpID0gRXhpMihF bmNyeXB0KFhtbCkpIHRvIHRoZSBzZWNvbmQgcGVlci4NCg0KVGhlIHByb2JsZW0gd2l0aCB0aGlz IGlzIHRoYXQgRVhJIGRvZXMgbm90IGRvIHZlcnkgd2VsbCB3aXRoIGJhc2U2NC1lbmNvZGVkIGJp bmFyeSBkYXRhLiBTaXplKEV4aShCYXNlNjQoQmluKSkpIHdvdWxkIGFwcHJveGltYXRlbHkgYmUg ZXF1YWwgdG8gU2l6ZShCaW4pLiBFWEkgd291bGQgYmUgYWJsZSB0byBjdXQgdGhlIGFkZGVkIGxl bmd0aCBpbXBvc2VkIGJ5IHRoZSBiYXNlNjQgZW5jb2RpbmcsIGR1ZSB0byBpdHMgbGltaXRlZCBj aGFyYWN0ZXIgc2V0Lg0KDQpJdCB3b3VsZCBiZSBuaWNlIHdpdGggYW4gZW5kLXRvLWVuZCBlbmNy eXB0aW9uIG1ldGhvZCBvdmVyIFhNUFAgdGhhdCB3b3VsZCBhbHNvIGJlIGFibGUgdG8gdGFrZSBp bnRvIGFjY291bnQgRVhJIGNvbXByZXNzaW9uIG9mIFhNTCBzdGFuemFzLg0KDQpJZiB5b3UgaGF2 ZSB0aW1lLCBhbnkgY29tbWVudHMgd291bGQgYmUgYXBwcmVjaWF0ZWQsDQoNClNpbmNlcmVseSwN ClBldGVyIFdhaGVyDQoNCg0KLS0tLS1PcmlnaW5hbCBNZXNzYWdlLS0tLS0NCkZyb206IFBldGVy IFNhaW50LUFuZHJlIFttYWlsdG86c3RwZXRlckBzdHBldGVyLmltXSANClNlbnQ6IGRlbiAxNCBt YXJzIDIwMTMgMTE6NTcNClRvOiBQZXRlciBXYWhlcg0KQ2M6IEpvYWNoaW0gTGluZGJvcmcgKGpv YWNoaW0ubGluZGJvcmdAc3VzdC5zZSk7IE1hdHQgTWlsbGVyDQpTdWJqZWN0OiBSZTogWE1QUCBz dGFuemEgZW5jcnlwdGlvbg0KDQotLS0tLUJFR0lOIFBHUCBTSUdORUQgTUVTU0FHRS0tLS0tDQpI YXNoOiBTSEExDQoNCk9uIDMvMTQvMTMgMTA6NTMgQU0sIFBldGVyIFdhaGVyIHdyb3RlOg0KPiBI ZWxsbyBQZXRlcg0KPiANCj4gRG8geW91IHBhcnRpY2lwYXRlIGluIHRoaXMgd29yaz8gDQo+IGh0 dHA6Ly90b29scy5pZXRmLm9yZy9odG1sL2RyYWZ0LW1pbGxlci14bXBwLWUyZS0wNQ0KDQpPbmx5 IGluZGlyZWN0bHksIGJ5IGNoYXR0aW5nIG9uY2UgaW4gYSB3aGlsZSB3aXRoIE1hdHQgTWlsbGVy IChjYydkKS4NCg0KUGV0ZXINCg0KLSAtLSANClBldGVyIFNhaW50LUFuZHJlDQpodHRwczovL3N0 cGV0ZXIuaW0vDQoNCg0KLS0tLS1CRUdJTiBQR1AgU0lHTkFUVVJFLS0tLS0NClZlcnNpb246IEdu dVBHL01hY0dQRzIgdjIuMC4xOCAoRGFyd2luKQ0KQ29tbWVudDogVXNpbmcgR251UEcgd2l0aCBU aHVuZGVyYmlyZCAtIGh0dHA6Ly93d3cuZW5pZ21haWwubmV0Lw0KDQppUUljQkFFQkFnQUdCUUpS UWVVN0FBb0pFT29HcEpFcnhhMnA2eThQL2pIR1l5dTREeGtwZ2pJbHhJeVAvUk9GDQpLZkhrYU9R OWt6VnFFUCtmV3phallLOU1XOE56YUdrRjh3OEw0M282c1hiYkZ4dG1JSVpnaVVwRzJHOXVNZzh3 DQo2eUJyUitKYkRIVFNwcTliRWpyQTU1aktqVkhBUWpYVXBFdlQ3MXp2cHFwTWE4R1U0bU04b0xh ZC9FVGtnMFFJDQpZSnNmR2FsNjZyU0E5Wlhkcjc4VThDN3BPSUZOaGdWNlNkTEhVcTFURjlqcFhn aFhBTjdidlJ0R2dQSmsxamVhDQpRTjQ1WVcvL1pxOU5NSzBLSytNbWdtSytKUHNiMy9NTTd1RlNw OTBGVFVRWTcvaUYxbmdqb0EvM3RxT2lhUU1XDQpFOFE0MERJUlhqelhIaWlLTVR3bGU3UTF6TFAx Sm04NmFKcDhpU2NzUnkwT3hOU0g5czVOUTdBYUQ1WlRsL0JMDQo2NG9pQTlkTHBjYy9SWmYvN2tX RHA3RDd6RUhsaTJ5SkcrdE8wZ2FnSkhxZk90OFIvV0NlSlIxMGhyQlE3NnJqDQpKYndCcVd3SlJN clkxU25xbG50QmZoTWtsQzdaemt1WE1uNzVRdHFrUWxmbEovLzZ2NTNBY0NnbFpCTHBJdXJUDQp4 YUhITzZJVXZzak92b1JvdjFtNjVIVHRPYjlxd2VwUE9KNG1vNzhiUnVyZTJIZ0JLQkNOWlJ5UlpQ eTZzOGxVDQpPdVhxY2laakRtS3hNbE8vQTRuR011Mk9QN1pjcldvNTh0MXA3c2NrYkM0cTRZRG9W QlRQdkEzS2xjUUIxa1BtDQpZbElHdG1lK01FVkhWbTZMdkpxK0dtNUM4Y3ZYTTFuQjJsbUh2Y0VX SmZjU1ZrVDAzRUdSS0xOWm00YVdjaE1ODQo0czMwRnd2VzF0OUV1a00rUkd5Ng0KPUVOOXUNCi0t LS0tRU5EIFBHUCBTSUdOQVRVUkUtLS0tLQ0K --_004_1693EFE1FD641C42A0D542FCBC732DE698E53473EX3YODAUTOPIALO_ Content-Type: text/html; name="xep-0000-Exi.html" Content-Description: xep-0000-Exi.html Content-Disposition: attachment; filename="xep-0000-Exi.html"; size=63905; creation-date="Thu, 07 Mar 2013 12:16:26 GMT"; modification-date="Wed, 13 Mar 2013 21:50:51 GMT" Content-Transfer-Encoding: base64 77u/PCFET0NUWVBFIGh0bWwgUFVCTElDICItLy9XM0MvL0RURCBYSFRNTCAxLjAgVHJhbnNpdGlv bmFsLy9FTiIgImh0dHA6Ly93d3cudzMub3JnL1RSL3hodG1sMS9EVEQveGh0bWwxLXRyYW5zaXRp b25hbC5kdGQiPg0KPGh0bWw+DQogIDxoZWFkPg0KICAgIDxNRVRBIGh0dHAtZXF1aXY9IkNvbnRl bnQtVHlwZSIgY29udGVudD0idGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCiAgICA8dGl0bGU+ WEVQLXh4eHg6IFhFUCAtIEVmZmljaWVudCBYTUwgSW50ZXJjaGFuZ2UgKEVYSSkgRm9ybWF0PC90 aXRsZT4NCiAgICA8bGluayByZWw9InN0eWxlc2hlZXQiIHR5cGU9InRleHQvY3NzIiBocmVmPSJ4 bXBwLmNzcyI+DQogICAgPGxpbmsgaHJlZj0icHJldHRpZnkuY3NzIiB0eXBlPSJ0ZXh0L2NzcyIg cmVsPSJzdHlsZXNoZWV0Ij4NCiAgICA8bGluayByZWw9InNob3J0Y3V0IGljb24iIHR5cGU9Imlt YWdlL3gtaWNvbiIgaHJlZj0iZmF2aWNvbi5pY28iPjxzY3JpcHQgdHlwZT0idGV4dC9qYXZhc2Ny aXB0IiBzcmM9InByZXR0aWZ5LmpzIj48L3NjcmlwdD48bWV0YSBuYW1lPSJEQy5UaXRsZSIgY29u dGVudD0iWEVQIC0gRWZmaWNpZW50IFhNTCBJbnRlcmNoYW5nZSAoRVhJKSBGb3JtYXQiPg0KICAg IDxtZXRhIG5hbWU9IkRDLkNyZWF0b3IiIGNvbnRlbnQ9IlBldGVyIFdhaGVyIj4NCiAgICA8bWV0 YSBuYW1lPSJEQy5EZXNjcmlwdGlvbiIgY29udGVudD0iVGhpcyBzcGVjaWZpY2F0aW9uIGRlc2Ny aWJlcyBob3cgRVhJIGNvbXByZXNzaW9uIGNhbiBiZSB1c2VkIGluIFhNUFAgbmV0d29ya3MuIj4N CiAgICA8bWV0YSBuYW1lPSJEQy5QdWJsaXNoZXIiIGNvbnRlbnQ9IlhNUFAgU3RhbmRhcmRzIEZv dW5kYXRpb24iPg0KICAgIDxtZXRhIG5hbWU9IkRDLkNvbnRyaWJ1dG9yIiBjb250ZW50PSJYTVBQ IEV4dGVuc2lvbnMgRWRpdG9yIj4NCiAgICA8bWV0YSBuYW1lPSJEQy5EYXRlIiBjb250ZW50PSIy MDEzLTAzLTEzIj4NCiAgICA8bWV0YSBuYW1lPSJEQy5UeXBlIiBjb250ZW50PSJYTVBQIEV4dGVu c2lvbiBQcm90b2NvbCI+DQogICAgPG1ldGEgbmFtZT0iREMuRm9ybWF0IiBjb250ZW50PSJYSFRN TCI+DQogICAgPG1ldGEgbmFtZT0iREMuSWRlbnRpZmllciIgY29udGVudD0iWEVQLXh4eHgiPg0K ICAgIDxtZXRhIG5hbWU9IkRDLkxhbmd1YWdlIiBjb250ZW50PSJlbiI+DQogICAgPG1ldGEgbmFt ZT0iREMuUmlnaHRzIiBjb250ZW50PSJUaGlzIFhNUFAgRXh0ZW5zaW9uIFByb3RvY29sIGlzIGNv cHlyaWdodCAoYykgMTk5OSAtIDIwMTMgYnkgdGhlIFhNUFAgU3RhbmRhcmRzIEZvdW5kYXRpb24g KFhTRikuIj4NCiAgPC9oZWFkPg0KICA8Ym9keSBvbmxvYWQ9InByZXR0eVByaW50KCkiPg0KICAg IDxoMT5YRVAteHh4eDogWEVQIC0gRWZmaWNpZW50IFhNTCBJbnRlcmNoYW5nZSAoRVhJKSBGb3Jt YXQ8L2gxPg0KICAgIDx0YWJsZT4NCiAgICAgIDx0ciB2YWxpZ249InRvcCI+DQogICAgICAgIDx0 ZD48c3Ryb25nPkFic3RyYWN0Ojwvc3Ryb25nPjwvdGQ+DQogICAgICAgIDx0ZD5UaGlzIHNwZWNp ZmljYXRpb24gZGVzY3JpYmVzIGhvdyBFWEkgY29tcHJlc3Npb24gY2FuIGJlIHVzZWQgaW4gWE1Q UCBuZXR3b3Jrcy48L3RkPg0KICAgICAgPC90cj4NCiAgICAgIDx0ciB2YWxpZ249InRvcCI+DQog ICAgICAgIDx0ZD48c3Ryb25nPkF1dGhvcjo8L3N0cm9uZz48L3RkPg0KICAgICAgICA8dGQ+UGV0 ZXIgV2FoZXI8L3RkPg0KICAgICAgPC90cj4NCiAgICAgIDx0ciB2YWxpZ249InRvcCI+DQogICAg ICAgIDx0ZD48c3Ryb25nPkNvcHlyaWdodDo8L3N0cm9uZz48L3RkPg0KICAgICAgICA8dGQ+wqkg MTk5OSAtIDIwMTMgWE1QUCBTdGFuZGFyZHMgRm91bmRhdGlvbi4gPGEgaHJlZj0iI2FwcGVuZGl4 LWxlZ2FsIj5TRUUgTEVHQUwgTk9USUNFUzwvYT4uPC90ZD4NCiAgICAgIDwvdHI+DQogICAgICA8 dHIgdmFsaWduPSJ0b3AiPg0KICAgICAgICA8dGQ+PHN0cm9uZz5TdGF0dXM6PC9zdHJvbmc+PC90 ZD4NCiAgICAgICAgPHRkPlByb3RvWEVQPC90ZD4NCiAgICAgIDwvdHI+DQogICAgICA8dHIgdmFs aWduPSJ0b3AiPg0KICAgICAgICA8dGQ+PHN0cm9uZz5UeXBlOjwvc3Ryb25nPjwvdGQ+DQogICAg ICAgIDx0ZD5TdGFuZGFyZHMgVHJhY2s8L3RkPg0KICAgICAgPC90cj4NCiAgICAgIDx0ciB2YWxp Z249InRvcCI+DQogICAgICAgIDx0ZD48c3Ryb25nPlZlcnNpb246PC9zdHJvbmc+PC90ZD4NCiAg ICAgICAgPHRkPjAuMC4yPC90ZD4NCiAgICAgIDwvdHI+DQogICAgICA8dHIgdmFsaWduPSJ0b3Ai Pg0KICAgICAgICA8dGQ+PHN0cm9uZz5MYXN0wqBVcGRhdGVkOjwvc3Ryb25nPjwvdGQ+DQogICAg ICAgIDx0ZD4yMDEzLTAzLTEzPC90ZD4NCiAgICAgIDwvdHI+DQogICAgPC90YWJsZT4NCiAgICA8 aHI+DQogICAgPHAgc3R5bGU9ImNvbG9yOnJlZCI+V0FSTklORzogVGhpcyBkb2N1bWVudCBoYXMg bm90IHlldCBiZWVuIGFjY2VwdGVkIGZvciBjb25zaWRlcmF0aW9uIG9yIGFwcHJvdmVkIGluIGFu eSBvZmZpY2lhbCBtYW5uZXIgYnkgdGhlIFhNUFAgU3RhbmRhcmRzIEZvdW5kYXRpb24sIGFuZCB0 aGlzIGRvY3VtZW50IGlzIG5vdCB5ZXQgYW4gWE1QUCBFeHRlbnNpb24gUHJvdG9jb2wgKFhFUCku IElmIHRoaXMgZG9jdW1lbnQgaXMgYWNjZXB0ZWQgYXMgYSBYRVAgYnkgdGhlIFhNUFAgQ291bmNp bCwgaXQgd2lsbCBiZSBwdWJsaXNoZWQgYXQgJmx0OzxhIGhyZWY9Imh0dHA6Ly94bXBwLm9yZy9l eHRlbnNpb25zLyI+aHR0cDovL3htcHAub3JnL2V4dGVuc2lvbnMvPC9hPiZndDsgYW5kIGFubm91 bmNlZCBvbiB0aGUgJmx0O3N0YW5kYXJkc0B4bXBwLm9yZyZndDsgbWFpbGluZyBsaXN0LjwvcD4N CiAgICA8aHI+DQogICAgPGgyPlRhYmxlIG9mIENvbnRlbnRzPC9oMj4NCiAgICA8ZGl2IGNsYXNz PSJpbmRlbnQiPg0KICAgICAgPHA+PGJyPjEuICA8YSBocmVmPSIjaW50cm8iPkludHJvZHVjdGlv bjwvYT48YnI+Mi4gIDxhIGhyZWY9IiN1c2VjYXNlcyI+VXNlIENhc2VzPC9hPjxicj7CoMKgwqAN CiAgICAgIDIuMS4gIDxhIGhyZWY9IiNzZWN0LUlEMEVVRiI+RGV0ZWN0aW5nIHN1cHBvcnQ8L2E+ PGJyPsKgwqDCoA0KICAgICAgMi4yLiAgPGEgaHJlZj0iI3NlY3QtSUQwRVdHIj5JbnZhbGlkIHNl dHVwPC9hPjxicj7CoMKgwqANCiAgICAgIDIuMy4gIDxhIGhyZWY9IiNzZWN0LUlEMEVGSCI+UHJv cG9zaW5nIGNvbXByZXNzaW9uIHBhcmFtZXRlcnM8L2E+PGJyPsKgwqDCoA0KICAgICAgMi40LiAg PGEgaHJlZj0iI3NlY3QtSUQwRTJBQUMiPlVwbG9hZGluZyBuZXcgc2NoZW1hIGZpbGVzPC9hPjxi cj7CoMKgwqANCiAgICAgIDIuNS4gIDxhIGhyZWY9IiNzZWN0LUlEMEVSQ0FDIj5Eb3dubG9hZGlu ZyBuZXcgc2NoZW1hIGZpbGVzIG9uIHNlcnZlcjwvYT48YnI+wqDCoMKgDQogICAgICAyLjYuICA8 YSBocmVmPSIjc2VjdC1JRDBFM0VBQyI+U3RhcnRpbmcgY29tcHJlc3Npb248L2E+PGJyPjMuICA8 YSBocmVmPSIjaW1wbCI+SW1wbGVtZW50YXRpb24gTm90ZXM8L2E+PGJyPsKgwqDCoA0KICAgICAg My4xLiAgPGEgaHJlZj0iI3NlY3QtSUQwRTZGQUMiPkVYSSBvcHRpb25zPC9hPjxicj7CoMKgwqAN CiAgICAgIDMuMi4gIDxhIGhyZWY9IiNzZWN0LUlEMEU2SkFDIj5GcmFnbWVudCBNb2RlIGFuZCBj b21wcmVzc2lvbiBvZiBzdGFuemFzPC9hPjxicj7CoMKgwqANCiAgICAgIDMuMy4gIDxhIGhyZWY9 IiNzZWN0LUlEMEVYS0FDIj5OZXR3b3JrcyBjb250YWluaW5nIGNsaWVudHMgaGF2aW5nIGxpbWl0 ZWQgbWVtb3J5PC9hPjxicj7CoMKgwqANCiAgICAgIDMuNC4gIDxhIGhyZWY9IiNzZWN0LUlEMEVF TEFDIj5DYWNoaW5nIHNjaGVtYSBmaWxlczwvYT48YnI+wqDCoMKgDQogICAgICAzLjUuICA8YSBo cmVmPSIjc2VjdC1JRDBFMUxBQyI+VXBsb2FkaW5nIHZzLiBEb3dubG9hZGluZyBzY2hlbWFzPC9h Pjxicj7CoMKgwqANCiAgICAgIDMuNi4gIDxhIGhyZWY9IiNzZWN0LUlEMEVMTUFDIj5TZXJ2ZXIg ZGVjb21wcmVzc2lvbiBhbmQgcmVjb21wcmVzc2lvbiB2cy4gYmluYXJ5IGZvcndhcmRpbmc8L2E+ PGJyPjQuICA8YSBocmVmPSIjc2VjdXJpdHkiPlNlY3VyaXR5IENvbnNpZGVyYXRpb25zPC9hPjxi cj41LiAgPGEgaHJlZj0iI2lhbmEiPklBTkEgQ29uc2lkZXJhdGlvbnM8L2E+PGJyPjYuICA8YSBo cmVmPSIjcmVnaXN0cmFyIj5YTVBQIFJlZ2lzdHJhciBDb25zaWRlcmF0aW9uczwvYT48YnI+Ny4g IDxhIGhyZWY9IiNzY2hlbWEiPlhNTCBTY2hlbWE8L2E+PGJyPjguICA8YSBocmVmPSIjYWNrIj5B Y2tub3dsZWRnZW1lbnRzPC9hPjwvcD4NCiAgICAgIDxwPjxhIGhyZWY9IiNhcHBlbmRpY2VzIj5B cHBlbmRpY2VzPC9hPjxicj7CoMKgwqDCoDxhIGhyZWY9IiNhcHBlbmRpeC1kb2NpbmZvIj5BOiBE b2N1bWVudCBJbmZvcm1hdGlvbjwvYT48YnI+wqDCoMKgwqA8YSBocmVmPSIjYXBwZW5kaXgtYXV0 aG9yaW5mbyI+QjogQXV0aG9yIEluZm9ybWF0aW9uPC9hPjxicj7CoMKgwqDCoDxhIGhyZWY9IiNh cHBlbmRpeC1sZWdhbCI+QzogTGVnYWwgTm90aWNlczwvYT48YnI+wqDCoMKgwqA8YSBocmVmPSIj YXBwZW5kaXgteG1wcCI+RDogUmVsYXRpb24gdG8gWE1QUDwvYT48YnI+wqDCoMKgwqA8YSBocmVm PSIjYXBwZW5kaXgtZGlzY3VzcyI+RTogRGlzY3Vzc2lvbiBWZW51ZTwvYT48YnI+wqDCoMKgwqA8 YSBocmVmPSIjYXBwZW5kaXgtY29uZm9ybWFuY2UiPkY6IFJlcXVpcmVtZW50cyBDb25mb3JtYW5j ZTwvYT48YnI+wqDCoMKgwqA8YSBocmVmPSIjYXBwZW5kaXgtbm90ZXMiPkc6IE5vdGVzPC9hPjxi cj7CoMKgwqDCoDxhIGhyZWY9IiNhcHBlbmRpeC1yZXZzIj5IOiBSZXZpc2lvbiBIaXN0b3J5PC9h PjwvcD4NCiAgICA8L2Rpdj4NCiAgICA8aHI+DQogICAgPGgyPjEuDQogICAgICAgPGEgbmFtZT0i aW50cm8iPkludHJvZHVjdGlvbjwvYT48L2gyPg0KICAgICAgICA8cCBjbGFzcz0iIiBzdHlsZT0i Ij4NCiAgICAgICAgICAgIFRoZSBFZmZpY2llbnQgWE1MIEludGVyY2hhbmdlIChFWEkpIEZvcm1h dCAgWzxhIGhyZWY9IiNudC1JRDBFTEQiPjE8L2E+XSBpcyBhbg0KICAgICAgICAgICAgZWZmaWNp ZW50IHdheSB0byBjb21wcmVzcyBYTUwgZG9jdW1lbnRzIGFuZCBYTUwgZnJhZ21lbnRzLiBUaGlz IGRvY3VtZW50IHByb3ZpZGVzIGluZm9ybWF0aW9uIG9uIGhvdyBFWEkgY2FuIGJlIHVzZWQgaW4g WE1QUCBzdHJlYW1zIHRvIGVmZmljaWVudGx5IGNvbXByZXNzIGRhdGEgdHJhbnNtaXR0ZWQgYmV0 d2Vlbg0KICAgICAgICAgICAgdGhlIHNlcnZlciBhbmQgdGhlIGNsaWVudC4gRm9yIGNlcnRhaW4g YXBwbGljYXRpb25zIChsaWtlIGFwcGxpY2F0aW9ucyBpbiBzZW5zb3IgbmV0d29ya3MpIEVYSSBp cyBhIHZpdGFsIGNvbXBvbmVudCwgZGVjcmVhc2luZyBwYWNrZXQgc2l6ZSBlbmFibGluZyBzZW5z b3JzIHdpdGggbGltaXRlZCBtZW1vcnkgdG8NCiAgICAgICAgICAgIGNvbW11bmljYXRlIGVmZmlj aWVudGx5LiBUaGUgc3Ryb25nIHN1cHBvcnQgaW4gRVhJIGZvciBnZW5lcmF0aW5nIGVmZmljaWVu dCBzdHViY29kZXMgaXMgYWxzbyB2aXRhbCB0byBidWlsZCBlZmZpY2llbnQgY29kZSBpbiBjb25z dHJhaW5lZCBkZXZpY2VzLg0KICAgICAgICA8L3A+DQogICAgICAgIDxwIGNsYXNzPSIiIHN0eWxl PSIiPg0KICAgICAgICAgICAgQWN0aXZhdGluZyBFWEkgY29tcHJlc3Npb24gcmVxdWlyZXMgYSBo YW5kc2hha2UgdG8gdGFrZSBwbGFjZSBwcmlvciwgd2hlcmUgdGhlIHNlcnZlciBhbmQgY2xpZW50 IGFncmVlcyBvbiBhIHNldCBvZiBwYXJhbWV0ZXJzLiBTb21lIG9mIHRoZXNlIHBhcmFtZXRlcnMg bWF5IGluY3JlYXNlIGNvbXByZXNzaW9uIHJhdGlvLA0KICAgICAgICAgICAgYXQgdGhlIGNvc3Qg b2YgcHJvY2Vzc2luZyBwb3dlciBhbmQgcmVhZGFiaWxpdHkuIFRoZXNlIHBhcmFtZXRlcnMgaW5j bHVkZToNCiAgICAgICAgPC9wPg0KICAgICAgICA8dWwgY2xhc3M9IiIgc3R5bGU9IiI+DQogICAg ICAgICAgICA8bGkgY2xhc3M9IiIgc3R5bGU9IiI+U2NoZW1hcyB0byB1c2UuPC9saT4NCiAgICAg ICAgICAgIDxsaSBjbGFzcz0iIiBzdHlsZT0iIj5FWEkgdmVyc2lvbiBudW1iZXIuPC9saT4NCiAg ICAgICAgICAgIDxsaSBjbGFzcz0iIiBzdHlsZT0iIj5EYXRhIGFsaWdubWVudCAoYml0LXBhY2tl ZCwgYnl0ZS1hbGlnbm1lbnQsIHByZS1jb21wcmVzc2lvbikuPC9saT4NCiAgICAgICAgICAgIDxs aSBjbGFzcz0iIiBzdHlsZT0iIj5JZiBFWEktY29tcHJlc3NlZCBkYXRhIHNob3VsZCBiZSBmdXJ0 aGVyIGNvbXByZXNzZWQgdXNpbmcgYWRkaXRpb25hbCBjb21wcmVzc2lvbi48L2xpPg0KICAgICAg ICAgICAgPGxpIGNsYXNzPSIiIHN0eWxlPSIiPlN0cmljdCBvciBsb29zZSBhZGhlcmVuY2UgdG8g c2NoZW1hcy48L2xpPg0KICAgICAgICAgICAgPGxpIGNsYXNzPSIiIHN0eWxlPSIiPklmIGNvbW1l bnRzLCBwcm9jZXNzaW5nIGluc3RydWN0aW9ucywgZHRkOnMsIHByZWZpeGVzLCBsZXhpY2FsIHZh bHVlcywgZXRjLiBzaG91bGQgYmUgcHJlc2VydmVkLjwvbGk+DQogICAgICAgICAgICA8bGkgY2xh c3M9IiIgc3R5bGU9IiI+SWYgc2VsZi1jb250YWluZWQgZWxlbWVudHMgc2hvdWxkIGJlIGFsbG93 ZWQuPC9saT4NCiAgICAgICAgICAgIDxsaSBjbGFzcz0iIiBzdHlsZT0iIj5BbHRlcm5hdGUgZGF0 YSB0eXBlIHJlcHJlc2VudGF0aW9ucyBmb3IgdHlwZXMgdmFsdWVzLjwvbGk+DQogICAgICAgICAg ICA8bGkgY2xhc3M9IiIgc3R5bGU9IiI+QmxvY2sgc2l6ZSBmb3IgRVhJIGNvbXByZXNzaW9uLjwv bGk+DQogICAgICAgICAgICA8bGkgY2xhc3M9IiIgc3R5bGU9IiI+TWF4aW11bSBzdHJpbmcgbGVu Z3RoIG9mIHZhbHVlIGNvbnRlbnQgaXRlbXMgaW4gc3RyaW5nIHRhYmxlcy48L2xpPg0KICAgICAg ICAgICAgPGxpIGNsYXNzPSIiIHN0eWxlPSIiPlZhbHVlIHBhcnRpdGlvbiBjYXBhY2l0eS48L2xp Pg0KICAgICAgICA8L3VsPg0KICAgICAgICA8cCBjbGFzcz0iIiBzdHlsZT0iIj4NCiAgICAgICAg ICAgIFRoZXNlIHBhcmFtZXRlcnMgd2lsbCBiZSBkaXNjdXNzZWQgZGVlcGVyIGluIHRoZSBmb2xs b3dpbmcgc2VjdGlvbnMuIFRoZXJlIGFyZSBhbHNvIGRlZmF1bHQgdmFsdWVzIHVzZXJzIGNhbiB1 c2UgdG8gY29tbWVuY2UgZXZhbHVhdGluZyBFWEkgY29tcHJlc3Npb24uDQogICAgICAgIDwvcD4N CiAgICAgICAgPHAgY2xhc3M9IiIgc3R5bGU9IiI+DQogICAgICAgICAgICBUaGUgc2luZ2xlIG1v c3QgaW1wb3J0YW50IHByb3BlcnR5IHRvIGFncmVlIG9uIGhvd2V2ZXIsIGlzIHRoZSBzZXQgb2Yg c2NoZW1hcyB0byB1c2UgZHVyaW5nIEVYSSBjb21wcmVzc2lvbi4gRVhJIGNvbXByZXNzZXMgWE1M IG11Y2ggbW9yZSBlZmZpY2llbnRseSBpZiB0aGVyZSBleGlzdCBzY2hlbWFzIA0KICAgICAgICAg ICAgZGVzY3JpYmluZyB0aGUgZm9ybWF0IG9mIHRoZSBleHBlY3RlZCBYTUwuIFNpbmNlIHRoZSBz ZXJ2ZXIgaXMgbm90IHN1cHBvc2VkIHRvIGtub3cgYWxsIHBvc3NpYmxlIFhNTCBzY2hlbWFzLCBh IG1lY2hhbmlzbSBpcyBwcm92aWRlZCBpbiB0aGlzIGRvY3VtZW50IHdoZXJlYnkgc2NoZW1hcyBj YW4gYmUNCiAgICAgICAgICAgIGludGVyY2hhbmdlZCwgc28gdGhhdCB0aGUgc2VydmVyIGNhbiBh ZGFwdCBpdHMgY29tcHJlc3Npb24gdG8gdGhlIG5lZWRzIG9mIHRoZSBjbGllbnQuDQogICAgICAg IDwvcD4NCiAgICA8aDI+Mi4NCiAgICAgICA8YSBuYW1lPSJ1c2VjYXNlcyI+VXNlIENhc2VzPC9h PjwvaDI+DQogICAgICAgIDxkaXYgY2xhc3M9ImluZGVudCI+DQogICAgICA8aDM+Mi4xIDxhIG5h bWU9InNlY3QtSUQwRVVGIj5EZXRlY3Rpbmcgc3VwcG9ydDwvYT48L2gzPg0KICAgICAgICAgICAg PHAgY2xhc3M9IiIgc3R5bGU9IiI+DQogICAgICAgICAgICAgICAgVGhpcyBYRVAgaXMgYmFzZWQg b24gPHNwYW4gY2xhc3M9InJlZiIgc3R5bGU9IiI+PGEgaHJlZj0iaHR0cDovL3htcHAub3JnL2V4 dGVuc2lvbnMveGVwLTAxMzguaHRtbCI+U3RyZWFtIENvbXByZXNzaW9uPC9hPjwvc3Bhbj4gIFs8 YSBocmVmPSIjbnQtSUQwRUNHIj4yPC9hPl0uIFdoZW4gdGhlIGNsaWVudCBjb25uZWN0cyB0byB0 aGUgWE1QUCBTZXJ2ZXIsIGl0IHdpbGwgcmVjZWl2ZSBhIGxpc3Qgb2YgZmVhdHVyZXMgc3VwcG9y dGVkIGJ5IHRoZSBzZXJ2ZXI6DQogICAgICAgICAgICA8L3A+DQogICAgICAgICAgICA8cCBjbGFz cz0iY2FwdGlvbiI+PGEgbmFtZT0iZXhhbXBsZS0xIj48L2E+RXhhbXBsZSAxLiBTZWFyY2ggRmVh dHVyZXM8L3A+DQogICAgICA8ZGl2IGNsYXNzPSJpbmRlbnQiPg0KICAgICAgICA8cHJlIGNsYXNz PSJwcmV0dHlwcmludCI+DQogICAgICAgICAgICAgICAgDQogICAgJmx0O3N0cmVhbTpmZWF0dXJl cyZndDsNCiAgICAgICAgJmx0O3N0YXJ0dGxzIHhtbG5zPSd1cm46aWV0ZjpwYXJhbXM6eG1sOm5z OnhtcHAtdGxzJy8mZ3Q7DQogICAgICAgICZsdDtjb21wcmVzc2lvbiB4bWxucz0naHR0cDovL2ph YmJlci5vcmcvZmVhdHVyZXMvY29tcHJlc3MnJmd0Ow0KICAgICAgICAgICAgJmx0O21ldGhvZCZn dDt6bGliJmx0Oy9tZXRob2QmZ3Q7DQogICAgICAgICAgICAmbHQ7bWV0aG9kJmd0O2x6dyZsdDsv bWV0aG9kJmd0Ow0KICAgICAgICAgICAgJmx0O21ldGhvZCZndDtleGkmbHQ7L21ldGhvZCZndDsN CiAgICAgICAgJmx0Oy9jb21wcmVzc2lvbiZndDsNCiAgICAmbHQ7L3N0cmVhbTpmZWF0dXJlcyZn dDsNCiAgICAgICAgICAgIDwvcHJlPg0KICAgICAgPC9kaXY+DQogICAgICAgICAgICA8cCBjbGFz cz0iIiBzdHlsZT0iIj4NCiAgICAgICAgICAgICAgICBTdXBwb3J0IGZvciBFWEkgY29tcHJlc3Np b24gaXMgZGV0ZWN0ZWQgYnkgdGhlIGV4aXN0YW5jZSBvZiB0aGUgPHNwYW4gY2xhc3M9InN0cm9u ZyI+ZXhpPC9zcGFuPiBjb21wcmVzc2lvbiBtZXRob2QgaW4gdGhlIDxzcGFuIGNsYXNzPSJzdHJv bmciPmZlYXR1cmVzPC9zcGFuPiBzdGFuemEuDQogICAgICAgICAgICA8L3A+DQogICAgICAgIDwv ZGl2Pg0KICAgICAgICA8ZGl2IGNsYXNzPSJpbmRlbnQiPg0KICAgICAgPGgzPjIuMiA8YSBuYW1l PSJzZWN0LUlEMEVXRyI+SW52YWxpZCBzZXR1cDwvYT48L2gzPg0KICAgICAgICAgICAgPHAgY2xh c3M9IiIgc3R5bGU9IiI+DQogICAgICAgICAgICAgICAgSWYgdGhlIGNsaWVudCBhdHRlbXB0cyB0 byBhY3RpdmF0ZSBFWEkgc3RyZWFtIGF0IHRoaXMgcG9pbnQsIGJlZm9yZSBuZWdvdGlhdGlvbiBv ZiBFWEkgcHJvcGVydGllcyBoYXZlIGJlZW4gcGVyZm9ybWVkLCB0aGUgc2VydmVyIG11c3QgcmVz cG9uZCB3aXRoIGENCiAgICAgICAgICAgICAgICA8c3BhbiBjbGFzcz0ic3Ryb25nIj5zZXR1cC1m YWlsZWQ8L3NwYW4+IHJlc3BvbnNlLg0KICAgICAgICAgICAgPC9wPg0KICAgICAgICAgICAgPHAg Y2xhc3M9ImNhcHRpb24iPjxhIG5hbWU9ImV4YW1wbGUtMiI+PC9hPkV4YW1wbGUgMi4gSW52YWxp ZCBzZXR1cDwvcD4NCiAgICAgIDxkaXYgY2xhc3M9ImluZGVudCI+DQogICAgICAgIDxwcmUgY2xh c3M9InByZXR0eXByaW50Ij4NCiAgICAgICAgICAgICAgICANCiAgICAmbHQ7Y29tcHJlc3MgeG1s bnM9J2h0dHA6Ly9qYWJiZXIub3JnL3Byb3RvY29sL2NvbXByZXNzJyZndDsNCiAgICAgICAgJmx0 O21ldGhvZCZndDtleGkmbHQ7L21ldGhvZCZndDsNCiAgICAmbHQ7L2NvbXByZXNzJmd0Ow0KIA0K ICAgICZsdDtmYWlsdXJlIHhtbG5zPSdodHRwOi8vamFiYmVyLm9yZy9wcm90b2NvbC9jb21wcmVz cycmZ3Q7DQogICAgICAgICZsdDtzZXR1cC1mYWlsZWQvJmd0Ow0KICAgICZsdDsvZmFpbHVyZSZn dDsNCiAgICAgICAgICAgIDwvcHJlPg0KICAgICAgPC9kaXY+DQogICAgICAgIDwvZGl2Pg0KICAg ICAgICA8ZGl2IGNsYXNzPSJpbmRlbnQiPg0KICAgICAgPGgzPjIuMyA8YSBuYW1lPSJzZWN0LUlE MEVGSCI+UHJvcG9zaW5nIGNvbXByZXNzaW9uIHBhcmFtZXRlcnM8L2E+PC9oMz4NCiAgICAgICAg ICAgIDxwIGNsYXNzPSIiIHN0eWxlPSIiPg0KICAgICAgICAgICAgICAgIFdoZW4gdGhlIGNsaWVu dCBkZWNpZGVzIHRvIGFjdGl2YXRlIEVYSSBjb21wcmVzc2lvbiwgaXQgc2VuZHMgYSA8c3BhbiBj bGFzcz0ic3Ryb25nIj5zZXR1cDwvc3Bhbj4gc3RhbnphIGNvbnRhaW5pbmcgcGFyYW1ldGVyIHBy b3Bvc2FscyB0byB0aGUgc2VydmVyIGFzIGZvbGxvd3M6DQogICAgICAgICAgICA8L3A+DQogICAg ICAgICAgICA8cCBjbGFzcz0iY2FwdGlvbiI+PGEgbmFtZT0iZXhhbXBsZS0zIj48L2E+RXhhbXBs ZSAzLiBQcm9wb3NpbmcgY29tcHJlc3Npb24gcGFyYW1ldGVyczwvcD4NCiAgICAgIDxkaXYgY2xh c3M9ImluZGVudCI+DQogICAgICAgIDxwcmUgY2xhc3M9InByZXR0eXByaW50Ij4NCiAgICAgICAg ICAgICAgICANCiAgICAmbHQ7c2V0dXAgeG1sbnM9J2h0dHA6Ly9qYWJiZXIub3JnL3Byb3RvY29s L2NvbXByZXNzL2V4aScgdmVyc2lvbj0nMScgc3RyaWN0PSd0cnVlJyBibG9ja1NpemU9JzEwMjQn IHZhbHVlTWF4TGVuZ3RoPSczMicgdmFsdWVQYXJ0aXRpb25DYXBhY2l0eT0nMTAwJyZndDsNCiAg ICAgICAgJmx0O3NjaGVtYSBucz0ndXJuOnhtcHA6c24nIGJ5dGVzPSc4MDkyJyBtZDVIYXNoPScx ODgyOTI0MmNhN2E3MmE1NTJhN2UxNWFmNWI5ZTQ0ZCcvJmd0Ow0KICAgICAgICAmbHQ7c2NoZW1h IG5zPSd1cm46eG1wcDpzbjpwcm92aXNpb25pbmcnIGJ5dGVzPSc2MzAzJyBtZDVIYXNoPSdlNTMw MWFkZDUxZjNiMjRjMTVhNzEyNTZiNTNkYWE0NycvJmd0Ow0KICAgICZsdDsvc2V0dXAmZ3Q7DQog ICAgICAgICAgICA8L3ByZT4NCiAgICAgIDwvZGl2Pg0KICAgICAgICAgICAgPHAgY2xhc3M9IiIg c3R5bGU9IiI+DQogICAgICAgICAgICAgICAgVGhlIHNlcnZlciBpbiB0dXJuIHJlc3BvbmRzIHdp dGggYSA8c3BhbiBjbGFzcz0ic3Ryb25nIj5zZXR1cFJlc3BvbnNlPC9zcGFuPiBzdGFuemEgY29u dGFpbmluZyB0aGUgcGFyYW1ldGVycyBpdCBjYW4gYWNjZXB0LCBiYXNlZCBvbiB0aGUgaW5pdGlh bCB2YWx1ZXMgcHJvdmlkZWQgYnkgdGhlIGNsaWVudC4NCiAgICAgICAgICAgICAgICBBbnkgYnVm ZmVyIHNpemVzLCBldGMuLCBtYXkgaGF2ZSBiZWVuIGNoYW5nZWQsIGJ1dCBvbmx5IGxvd2VyZWQs IG5ldmVyIHJhaXNlZC4NCiAgICAgICAgICAgIDwvcD4NCiAgICAgICAgICAgIDxwIGNsYXNzPSJj YXB0aW9uIj48YSBuYW1lPSJleGFtcGxlLTQiPjwvYT5FeGFtcGxlIDQuIFVuYWJsZSB0byBhY2Nv bW1vZGF0ZSBwYXJhbWV0ZXJzPC9wPg0KICAgICAgPGRpdiBjbGFzcz0iaW5kZW50Ij4NCiAgICAg ICAgPHByZSBjbGFzcz0icHJldHR5cHJpbnQiPg0KICAgICAgICAgICAgICAgIA0KICAgICZsdDtz ZXR1cFJlc3BvbnNlIHhtbG5zPSdodHRwOi8vamFiYmVyLm9yZy9wcm90b2NvbC9jb21wcmVzcy9l eGknIHZlcnNpb249JzEnIHN0cmljdD0ndHJ1ZScNCiAgICAgICAgICAgICAgICAgICBibG9ja1Np emU9JzEwMjQnIHZhbHVlTWF4TGVuZ3RoPSczMicgdmFsdWVQYXJ0aXRpb25DYXBhY2l0eT0nMTAw JyZndDsNCiAgICAgICAgJmx0O3NjaGVtYSBucz0ndXJuOnhtcHA6c24nIGJ5dGVzPSc4MDkyJyBt ZDVIYXNoPScxODgyOTI0MmNhN2E3MmE1NTJhN2UxNWFmNWI5ZTQ0ZCcvJmd0Ow0KICAgICAgICAm bHQ7bWlzc2luZ1NjaGVtYSBucz0ndXJuOnhtcHA6c246cHJvdmlzaW9uaW5nJyBieXRlcz0nNjMw MycgbWQ1SGFzaD0nZTUzMDFhZGQ1MWYzYjI0YzE1YTcxMjU2YjUzZGFhNDcnLyZndDsNCiAgICAm bHQ7L3NldHVwUmVzcG9uc2UmZ3Q7DQogICAgICAgICAgICA8L3ByZT4NCiAgICAgIDwvZGl2Pg0K ICAgICAgICAgICAgPHAgY2xhc3M9IiIgc3R5bGU9IiI+DQogICAgICAgICAgICAgICAgPHNwYW4g Y2xhc3M9InN0cm9uZyI+Tm90ZTo8L3NwYW4+IFNjaGVtYSBmaWxlcyBhcmUgaWRlbnRpZmllZCB1 c2luZyB0aHJlZSBwcm9wZXJ0aWVzOiBJdHMgPHNwYW4gY2xhc3M9InN0cm9uZyI+dGFyZ2V0IG5h bWVzcGFjZTwvc3Bhbj4sIGl0cyA8c3BhbiBjbGFzcz0ic3Ryb25nIj5ieXRlIHNpemU8L3NwYW4+ IGFuZCBpdHMNCiAgICAgICAgICAgICAgICA8c3BhbiBjbGFzcz0ic3Ryb25nIj5NRDUgaGFzaDwv c3Bhbj4uIFRoZSA8c3BhbiBjbGFzcz0ic3Ryb25nIj5NRDUgaGFzaDwvc3Bhbj4gcHJvdmlkZXMg YSB3YXkgdG8gZGV0ZWN0IHNtYWxsIGNoYW5nZXMgaW4gdGhlIGZpbGUsIGV2ZW4gaWYgdGhlIGJ5 dGUgc2l6ZSBhbmQgbmFtZXNwYWNlIGFyZSB0aGUgc2FtZS4NCiAgICAgICAgICAgIDwvcD4NCiAg ICAgICAgICAgIDxwIGNsYXNzPSIiIHN0eWxlPSIiPg0KICAgICAgICAgICAgICAgIFNjaGVtYSBm aWxlcyB0aGF0IHRoZSBzZXJ2ZXIgZG9lcyBub3QgaGF2ZSwgYmFzZWQgb24gbmFtZXNwYWNlLCBi eXRlIHNpemUgYW5kIE1ENSBoYXNoLCBhcmUgbWFya2VkIHdpdGggdGhlIDxzcGFuIGNsYXNzPSJz dHJvbmciPm1pc3NpbmdTY2hlbWE8L3NwYW4+IGVsZW1lbnQgaW5zdGVhZCBvZiB0aGUgDQogICAg ICAgICAgICAgICAgbm9ybWFsIDxzcGFuIGNsYXNzPSJzdHJvbmciPnNjaGVtYTwvc3Bhbj4gZWxl bWVudC4NCiAgICAgICAgICAgIDwvcD4NCiAgICAgICAgICAgIDxwIGNsYXNzPSIiIHN0eWxlPSIi Pg0KICAgICAgICAgICAgICAgIFRoZSBjbGllbnQgY2FuLCBhdCB0aGlzIHBvaW50LCBjaG9vc2Ug dG8gYWJvcnQgdGhlIEVYSSBlbmFibGVtZW50IHNlcXVlbmNlLCBpZiBpdCBjYW5ub3QgYWNjb21t b2RhdGUgaXRzZWxmIHdpdGggdGhlIHByb3Bvc2VkIHBhcmFtZXRlciBzZXR0aW5ncyBwcm92aWRl ZCBieSB0aGUgc2VydmVyLg0KICAgICAgICAgICAgICAgIFRoZSBYTVBQIHNlc3Npb24gd2lsbCBj b250aW51ZSB0byB3b3JrIGluIGl0cyBjdXJyZW50IHN0YXRlLg0KICAgICAgICAgICAgPC9wPg0K ICAgICAgICA8L2Rpdj4NCiAgICAgICAgPGRpdiBjbGFzcz0iaW5kZW50Ij4NCiAgICAgIDxoMz4y LjQgPGEgbmFtZT0ic2VjdC1JRDBFMkFBQyI+VXBsb2FkaW5nIG5ldyBzY2hlbWEgZmlsZXM8L2E+ PC9oMz4NCiAgICAgICAgICAgIDxwIGNsYXNzPSIiIHN0eWxlPSIiPg0KICAgICAgICAgICAgICAg IElmIHRoZSBzZXJ2ZXIgbGFja3MgaW5mb3JtYXRpb24gYWJvdXQgYSBzY2hlbWEgZmlsZSwgdGhp cyBpcyBzcGVjaWZpZWQgaW4gdGhlIHJlc3BvbnNlIHRocm91Z2ggdGhlIDxzcGFuIGNsYXNzPSJz dHJvbmciPm1pc3NpbmdTY2hlbWE8L3NwYW4+IGVsZW1lbnRzLiBUaGUgY2xpZW50IGNhbiBhdCB0 aGlzIHBvaW50DQogICAgICAgICAgICAgICAgZWl0aGVyIGNob29zZSB0byBhY2NlcHQgdGhhdCB0 aGVzZSBzY2hlbWEgZmlsZXMgYXJlIG5vdCBhdmFpbGFibGUsIG1ha2luZyBjb21wcmVzc2lvbiBs ZXNzIGVmZmljaWVudCwgb3IgY2hvb3NlIHRvIHVwbG9hZCB0aGUgbWlzc2luZyBzY2hlbWEgZmls ZXMgdG8gdGhlIHNlcnZlci4gT2YgY291cnNlLA0KICAgICAgICAgICAgICAgIHVwbG9hZGluZyBz Y2hlbWEgZmlsZXMgd291bGQgcmVxdWlyZSB0aGUgZGV2aWNlIHRvIGhhdmUgc3VmZmljaWVudCBi dWZmZXJzIGFuZCBtZW1vcnkgdG8gc3RvcmUgYW5kIHVwbG9hZCB0aGUgc2NoZW1hIGZpbGVzIGlu IHRoZSBmaXJzdCBwbGFjZS4gKElmIG5vdCBwb3NzaWJsZSB0byB1cGxvYWQgdGhlDQogICAgICAg ICAgICAgICAgc2NoZW1hIGZpbGVzLCBjb25zaWRlcmF0aW9uIHNob3VsZCBiZSB0YWtlbiB0byBp bnN0YWxsIHRoZSBzY2hlbWEgZmlsZXMgbWFudWFsbHkgYXQgdGhlIHNlcnZlci4pDQogICAgICAg ICAgICA8L3A+DQogICAgICAgICAgICA8cCBjbGFzcz0iIiBzdHlsZT0iIj4NCiAgICAgICAgICAg ICAgICBUbyB1cGxvYWQgYSBzY2hlbWEgZmlsZSwgdGhlIGNsaWVudCBzaW1wbHkgc2VuZHMgdGhl IHNjaGVtYSBmaWxlIHVzaW5nIGFuIDxzcGFuIGNsYXNzPSJzdHJvbmciPnVwbG9hZFNjaGVtYTwv c3Bhbj4gZWxlbWVudCwgYXMgZm9sbG93czoNCiAgICAgICAgICAgIDwvcD4NCiAgICAgICAgICAg IDxwIGNsYXNzPSJjYXB0aW9uIj48YSBuYW1lPSJleGFtcGxlLTUiPjwvYT5FeGFtcGxlIDUuIFVw bG9hZGluZyBzY2hlbWEgZmlsZTwvcD4NCiAgICAgIDxkaXYgY2xhc3M9ImluZGVudCI+DQogICAg ICAgIDxwcmUgY2xhc3M9InByZXR0eXByaW50Ij4NCiAgICAgICAgICAgICAgICANCiAgICAmbHQ7 dXBsb2FkU2NoZW1hIHhtbG5zPSdodHRwOi8vamFiYmVyLm9yZy9wcm90b2NvbC9jb21wcmVzcy9l eGknJmd0Ow0KICAgICAgICBQRDk0Yld3Z2RtVnljMmx2Ymowbk1TNHdKeUJsYm1OdlpHbHVaejBu VlZSR0xUZ25QejROQ2p4NGN6cHpZMmhsYldFTkNpQWdJQ0I0DQogICAgICAgIGJXeHVjenA0Y3ow bmFIUjBjRG92TDNkM2R5NTNNeTV2Y21jdk1qQXdNUzlZVFV4VFkyaGxiV0VuRFFvZ0lDQWdkR0Z5 WjJWMFRtRnQNCiAgICAgICAgWlhOd1lXTmxQU2QxY200NmVHMXdjRHB6Ympwd2NtOTJhWE5wYjI1 cGJtY25EUW9nSUNBZ2VHMXNibk05SjNWeWJqcDRiWEJ3T25OdQ0KICAgICAgICANCiAgICAgICAg Li4uDQogICAgICAgIA0KICAgICAgICBkbWxzWldkbEp6NE5DZ2tKUEhoek9tRjBkSEpwWW5WMFpT QnVZVzFsUFNkcFpDY2dkSGx3WlQwblVISnBkbWxzWldkbFNXUW5JSFZ6DQogICAgICAgIFpUMG5j bVZ4ZFdseVpXUW5MejROQ2drOEwzaHpPbU52YlhCc1pYaFVlWEJsUGcwS0lBMEtQQzk0Y3pwelky aGxiV0UrRFFvPQ0KICAgICZsdDsvdXBsb2FkU2NoZW1hJmd0Ow0KICAgICAgICAgICAgPC9wcmU+ DQogICAgICA8L2Rpdj4NCiAgICAgICAgICAgIDxwIGNsYXNzPSIiIHN0eWxlPSIiPg0KICAgICAg ICAgICAgICAgIFRoZSBzY2hlbWEgaXRzZWxmIGlzIHNlbnQgdXNpbmcgYmFzZTY0IGVuY29kaW5n IHRvIHRoZSBzZXJ2ZXIuIFRoaXMsIHRvIG1ha2Ugc3VyZSBhIGJpbmFyeSBleGFjdCBjb3B5IGlz IHRyYW5zZmVycmVkLCBtYWludGFpbmluZyBlbmNvZGluZywgcHJvY2Vzc2luZyBpbnN0cnVjdGlv bnMsIGV0Yy4gVGhlDQogICAgICAgICAgICAgICAgc2VydmVyIHRoZW4gY29tcHV0ZXMgdGhlIDxz cGFuIGNsYXNzPSJzdHJvbmciPnRhcmdldCBuYW1lc3BhY2U8L3NwYW4+LCA8c3BhbiBjbGFzcz0i c3Ryb25nIj5ieXRlIHNpemU8L3NwYW4+IGFuZCA8c3BhbiBjbGFzcz0ic3Ryb25nIj5NRDUgSGFz aDwvc3Bhbj4gZnJvbSB0aGlzIHNjaGVtYSBmaWxlIHNlbnQuDQogICAgICAgICAgICA8L3A+DQog ICAgICAgICAgICA8cCBjbGFzcz0iIiBzdHlsZT0iIj4NCiAgICAgICAgICAgICAgICBJZiB0aGUg Y2xpZW50IGRlc2lyZXMsIGl0IGNhbiB0ZXN0IHRoZSBFWEkgc2V0dXAgYWdhaW4uIFRoaXMgaXMg aG93ZXZlciBvcHRpb25hbCwgYnV0IGNhbiBiZSB1c2VkIHRvIHRlc3QgdGhhdCB1cGxvYWRpbmcg dGhlIHNjaGVtYSBmaWxlcywgYW5kIGFueSBuZXcgcHJvcGVydHkgdmFsdWVzDQogICAgICAgICAg ICAgICAgYXJlIGFjY2VwdGVkIGJ5IHRoZSBzZXJ2ZXIuDQogICAgICAgICAgICA8L3A+DQogICAg ICAgICAgICA8cCBjbGFzcz0iY2FwdGlvbiI+PGEgbmFtZT0iZXhhbXBsZS02Ij48L2E+RXhhbXBs ZSA2LiBUZXN0aW5nIG5ld2x5IHVwbG9hZGVkIHNjaGVtYSBmaWxlczwvcD4NCiAgICAgIDxkaXYg Y2xhc3M9ImluZGVudCI+DQogICAgICAgIDxwcmUgY2xhc3M9InByZXR0eXByaW50Ij4NCiAgICAg ICAgICAgICAgICANCiAgICAmbHQ7c2V0dXAgeG1sbnM9J2h0dHA6Ly9qYWJiZXIub3JnL3Byb3Rv Y29sL2NvbXByZXNzL2V4aScgdmVyc2lvbj0nMScgc3RyaWN0PSd0cnVlJyBibG9ja1NpemU9JzEw MjQnIHZhbHVlTWF4TGVuZ3RoPSczMicgdmFsdWVQYXJ0aXRpb25DYXBhY2l0eT0nMTAwJyZndDsN CiAgICAgICAgJmx0O3NjaGVtYSBucz0ndXJuOnhtcHA6c24nIGJ5dGVzPSc4MDkyJyBtZDVIYXNo PScxODgyOTI0MmNhN2E3MmE1NTJhN2UxNWFmNWI5ZTQ0ZCcvJmd0Ow0KICAgICAgICAmbHQ7c2No ZW1hIG5zPSd1cm46eG1wcDpzbjpwcm92aXNpb25pbmcnIGJ5dGVzPSc2MzAzJyBtZDVIYXNoPSdl NTMwMWFkZDUxZjNiMjRjMTVhNzEyNTZiNTNkYWE0NycvJmd0Ow0KICAgICZsdDsvc2V0dXAmZ3Q7 DQogICAgICAgICAgICA8L3ByZT4NCiAgICAgIDwvZGl2Pg0KICAgICAgICAgICAgPHAgY2xhc3M9 IiIgc3R5bGU9IiI+DQogICAgICAgICAgICAgICAgQW5kIHRoZSBzZXJ2ZXIgc2hvdWxkIG5vdyBy ZXNwb25kOg0KICAgICAgICAgICAgPC9wPg0KICAgICAgICAgICAgPHAgY2xhc3M9ImNhcHRpb24i PjxhIG5hbWU9ImV4YW1wbGUtNyI+PC9hPkV4YW1wbGUgNy4gQWdyZWVtZW50IGJldHdlZW4gY2xp ZW50IGFuZCBzZXJ2ZXI8L3A+DQogICAgICA8ZGl2IGNsYXNzPSJpbmRlbnQiPg0KICAgICAgICA8 cHJlIGNsYXNzPSJwcmV0dHlwcmludCI+DQogICAgICAgICAgICAgICAgDQogICAgJmx0O3NldHVw UmVzcG9uc2UgeG1sbnM9J2h0dHA6Ly9qYWJiZXIub3JnL3Byb3RvY29sL2NvbXByZXNzL2V4aScg dmVyc2lvbj0nMScgc3RyaWN0PSd0cnVlJyANCiAgICAgICAgICAgICAgICAgICBibG9ja1NpemU9 JzEwMjQnIHZhbHVlTWF4TGVuZ3RoPSczMicgdmFsdWVQYXJ0aXRpb25DYXBhY2l0eT0nMTAwJyBh Z3JlZW1lbnQ9J3RydWUnJmd0Ow0KICAgICAgICAmbHQ7c2NoZW1hIG5zPSd1cm46eG1wcDpzbicg Ynl0ZXM9JzgwOTInIG1kNUhhc2g9JzE4ODI5MjQyY2E3YTcyYTU1MmE3ZTE1YWY1YjllNDRkJy8m Z3Q7DQogICAgICAgICZsdDtzY2hlbWEgbnM9J3Vybjp4bXBwOnNuOnByb3Zpc2lvbmluZycgYnl0 ZXM9JzYzMDMnIG1kNUhhc2g9J2U1MzAxYWRkNTFmM2IyNGMxNWE3MTI1NmI1M2RhYTQ3Jy8mZ3Q7 DQogICAgJmx0Oy9zZXR1cFJlc3BvbnNlJmd0Ow0KICAgICAgICAgICAgPC9wcmU+DQogICAgICA8 L2Rpdj4NCiAgICAgICAgICAgIDxwIGNsYXNzPSIiIHN0eWxlPSIiPg0KICAgICAgICAgICAgICAg IE5vdGUgdGhlIDxzcGFuIGNsYXNzPSJzdHJvbmciPmFncmVlbWVudDwvc3Bhbj4gYXR0cmlidXRl IGluIHRoZSByZXNwb25zZSB0aGlzIHRpbWUuIFRoZSBzZXJ2ZXIgbXVzdCBzZXQgdGhpcyBhdHRy aWJ1dGUgdG8gdHJ1ZSBpZiBpdCBhZ3JlZXMgd2l0aCB0aGUgcHJvcG9zYWwgZnJvbSB0aGUgY2xp ZW50Lg0KICAgICAgICAgICAgICAgIFRoZSBjbGllbnQgaW4gdHVybiBjYW4gY2hlY2sgdGhpcyBh dHRyaWJ1dGUgYXMgYSBxdWljayB3YXkgdG8gY2hlY2sgaWYgYWdyZWVtZW50IGV4aXN0cy4NCiAg ICAgICAgICAgIDwvcD4NCiAgICAgICAgPC9kaXY+DQogICAgICAgIDxkaXYgY2xhc3M9ImluZGVu dCI+DQogICAgICA8aDM+Mi41IDxhIG5hbWU9InNlY3QtSUQwRVJDQUMiPkRvd25sb2FkaW5nIG5l dyBzY2hlbWEgZmlsZXMgb24gc2VydmVyPC9hPjwvaDM+DQogICAgICAgICAgICA8cCBjbGFzcz0i IiBzdHlsZT0iIj4NCiAgICAgICAgICAgICAgICBBcyBhbiBhbHRlcm5hdGl2ZSB0byB1cGxvYWRp bmcgYSBzY2hlbWEgZmlsZSB0byB0aGUgc2VydmVyLCB0aGUgY2xpZW50IGNhbiBhc2sgdGhlIHNl cnZlciB0byBkb3dubG9hZCBhIHNjaGVtYSBmaWxlIGJ5IGl0c2VsZi4gVGhpcyBpcyBkb25lIHVz aW5nIHRoZSA8c3BhbiBjbGFzcz0ic3Ryb25nIj5kb3dubG9hZFNjaGVtYTwvc3Bhbj4NCiAgICAg ICAgICAgICAgICBjb21tYW5kLCBhcyBmb2xsb3dzOg0KICAgICAgICAgICAgPC9wPg0KICAgICAg ICAgICAgPHAgY2xhc3M9ImNhcHRpb24iPjxhIG5hbWU9ImV4YW1wbGUtOCI+PC9hPkV4YW1wbGUg OC4gRG93bmxvYWRpbmcgbmV3IHNjaGVtYSBmaWxlcyBvbiBzZXJ2ZXI8L3A+DQogICAgICA8ZGl2 IGNsYXNzPSJpbmRlbnQiPg0KICAgICAgICA8cHJlIGNsYXNzPSJwcmV0dHlwcmludCI+DQogICAg ICAgICAgICAgICAgDQogICAgJmx0O2Rvd25sb2FkU2NoZW1hIHhtbG5zPSdodHRwOi8vamFiYmVy Lm9yZy9wcm90b2NvbC9jb21wcmVzcy9leGknIHVybD0naHR0cDovL3NjaGVtYXZhdWx0LnNlL2Nv bXByZXNzL3NuL3Byb3Zpc2lvbmluZy54c2QnLyZndDsNCiAgICAgICAgICAgIDwvcHJlPg0KICAg ICAgPC9kaXY+DQogICAgICAgICAgICA8cCBjbGFzcz0iIiBzdHlsZT0iIj4NCiAgICAgICAgICAg ICAgICBUaGUgc2VydmVyIHRyaWVzIHRvIGRvd25sb2FkIHRoZSBzY2hlbWEgYnkgaXRzZWxmLCBh bmQgdGhlbiBjb21wdXRlcyB0aGUgPHNwYW4gY2xhc3M9InN0cm9uZyI+dGFyZ2V0IG5hbWVzcGFj ZTwvc3Bhbj4sIDxzcGFuIGNsYXNzPSJzdHJvbmciPmJ5dGUgc2l6ZTwvc3Bhbj4gYW5kIDxzcGFu IGNsYXNzPSJzdHJvbmciPk1ENSBIYXNoPC9zcGFuPiANCiAgICAgICAgICAgICAgICBmcm9tIHRo ZSBkb3dubG9hZGVkIHNjaGVtYS4NCiAgICAgICAgICAgIDwvcD4NCiAgICAgICAgICAgIDxwIGNs YXNzPSIiIHN0eWxlPSIiPg0KICAgICAgICAgICAgICAgIFdoZW4gdGhlIHNjaGVtYSBoYXMgYmVl biBkb3dubG9hZGVkLCBhIHN1Y2Nlc3NmdWwgZG93bmxvYWQgcmVzcG9uc2UgaXMgcmV0dXJuZWQs IGFzIGZvbGxvd3M6DQogICAgICAgICAgICA8L3A+DQogICAgICAgICAgICA8cCBjbGFzcz0iY2Fw dGlvbiI+PGEgbmFtZT0iZXhhbXBsZS05Ij48L2E+RXhhbXBsZSA5LiBTY2hlbWEgc3VjY2Vzc2Z1 bGx5IGRvd25sb2FkZWQ8L3A+DQogICAgICA8ZGl2IGNsYXNzPSJpbmRlbnQiPg0KICAgICAgICA8 cHJlIGNsYXNzPSJwcmV0dHlwcmludCI+DQogICAgICAgICAgICAgICAgDQogICAgJmx0O2Rvd25s b2FkU2NoZW1hUmVzcG9uc2UgeG1sbnM9J2h0dHA6Ly9qYWJiZXIub3JnL3Byb3RvY29sL2NvbXBy ZXNzL2V4aScgdXJsPSdodHRwOi8vc2NoZW1hdmF1bHQuc2UvY29tcHJlc3Mvc24vcHJvdmlzaW9u aW5nLnhzZCcgcmVzdWx0PSd0cnVlJy8mZ3Q7DQogICAgICAgICAgICA8L3ByZT4NCiAgICAgIDwv ZGl2Pg0KICAgICAgICAgICAgPHAgY2xhc3M9IiIgc3R5bGU9IiI+DQogICAgICAgICAgICAgICAg SWYgYW4gSFRUUCBlcnJvciBvY2N1cnJlZCB3aGlsZSB0cnlpbmcgdG8gZG93bmxvYWQgdGhlIHNj aGVtYSwgYSByZXNwb25zZSBhcyBmb2xsb3dzIGlzIHJldHVybmVkOg0KICAgICAgICAgICAgPC9w Pg0KICAgICAgICAgICAgPHAgY2xhc3M9ImNhcHRpb24iPjxhIG5hbWU9ImV4YW1wbGUtMTAiPjwv YT5FeGFtcGxlIDEwLiBIVFRQIEVycm9yPC9wPg0KICAgICAgPGRpdiBjbGFzcz0iaW5kZW50Ij4N CiAgICAgICAgPHByZSBjbGFzcz0icHJldHR5cHJpbnQiPg0KICAgICAgICAgICAgICAgIA0KICAg ICZsdDtkb3dubG9hZFNjaGVtYVJlc3BvbnNlIHhtbG5zPSdodHRwOi8vamFiYmVyLm9yZy9wcm90 b2NvbC9jb21wcmVzcy9leGknIHVybD0naHR0cDovL3NjaGVtYXZhdWx0LnNlL2NvbXByZXNzL3Nu L3Byb3Zpc2lvbmluZy54c2QnIHJlc3VsdD0nZmFsc2UnJmd0Ow0KICAgICAgICAmbHQ7aHR0cEVy cm9yIGNvZGU9JzQwNCcgbWVzc2FnZT0nTm90Rm91bmQnLyZndDsNCiAgICAmbHQ7L2Rvd25sb2Fk U2NoZW1hUmVzcG9uc2UmZ3Q7DQogICAgICAgICAgICA8L3ByZT4NCiAgICAgIDwvZGl2Pg0KICAg ICAgICAgICAgPHAgY2xhc3M9IiIgc3R5bGU9IiI+DQogICAgICAgICAgICAgICAgSWYgdGhlIFVS TCBjb3VsZCBub3QgYmUgcmVzb2x2ZWQsIGEgcmVzcG9uc2UgYXMgZm9sbG93cyBpcyByZXR1cm5l ZDoNCiAgICAgICAgICAgIDwvcD4NCiAgICAgICAgICAgIDxwIGNsYXNzPSJjYXB0aW9uIj48YSBu YW1lPSJleGFtcGxlLTExIj48L2E+RXhhbXBsZSAxMS4gSW52YWxpZCBVUkw8L3A+DQogICAgICA8 ZGl2IGNsYXNzPSJpbmRlbnQiPg0KICAgICAgICA8cHJlIGNsYXNzPSJwcmV0dHlwcmludCI+DQog ICAgICAgICAgICAgICAgDQogICAgJmx0O2Rvd25sb2FkU2NoZW1hUmVzcG9uc2UgeG1sbnM9J2h0 dHA6Ly9qYWJiZXIub3JnL3Byb3RvY29sL2NvbXByZXNzL2V4aScgdXJsPSd1cms6Ly9leGFtcGxl LmNvbS9zY2hlbWEueHNkJyByZXN1bHQ9J2ZhbHNlJyZndDsNCiAgICAgICAgJmx0O2ludmFsaWRV cmwgbWVzc2FnZT0nVW5yZWNvZ25pemVkIHNjaGVtYS4nLyZndDsNCiAgICAmbHQ7L2Rvd25sb2Fk U2NoZW1hUmVzcG9uc2UmZ3Q7DQogICAgICAgICAgICA8L3ByZT4NCiAgICAgIDwvZGl2Pg0KICAg ICAgICAgICAgPHAgY2xhc3M9IiIgc3R5bGU9IiI+DQogICAgICAgICAgICAgICAgSWYgYSB0aW1l b3V0IG9jY3VycmVkIGR1cmluZyB0aGUgZG93bmxvYWQgYXR0ZW1wdCwgYSByZXNwb25zZSBhcyBm b2xsb3dzIGlzIHJldHVybmVkOg0KICAgICAgICAgICAgPC9wPg0KICAgICAgICAgICAgPHAgY2xh c3M9ImNhcHRpb24iPjxhIG5hbWU9ImV4YW1wbGUtMTIiPjwvYT5FeGFtcGxlIDEyLiBUaW1lb3V0 PC9wPg0KICAgICAgPGRpdiBjbGFzcz0iaW5kZW50Ij4NCiAgICAgICAgPHByZSBjbGFzcz0icHJl dHR5cHJpbnQiPg0KICAgICAgICAgICAgICAgIA0KICAgICZsdDtkb3dubG9hZFNjaGVtYVJlc3Bv bnNlIHhtbG5zPSdodHRwOi8vamFiYmVyLm9yZy9wcm90b2NvbC9jb21wcmVzcy9leGknIHVybD0n aHR0cDovL3NjaGVtYXZhdWx0LnNlL2NvbXByZXNzL3NuL3Byb3Zpc2lvbmluZy54c2QnIHJlc3Vs dD0nZmFsc2UnJmd0Ow0KICAgICAgICAmbHQ7dGltZW91dCBtZXNzYWdlPSdObyByZXNwb25zZSBy ZXR1cm5lZC4nLyZndDsNCiAgICAmbHQ7L2Rvd25sb2FkU2NoZW1hUmVzcG9uc2UmZ3Q7DQogICAg ICAgICAgICA8L3ByZT4NCiAgICAgIDwvZGl2Pg0KICAgICAgICAgICAgPHAgY2xhc3M9IiIgc3R5 bGU9IiI+DQogICAgICAgICAgICAgICAgSWYgdGhlIHVybCBwb2ludHMgdG8gc29tZXRoaW5nIHRo YXQgaXMgbm90IGEgc2NoZW1hLCBhIHJlc3BvbnNlIGFzIGZvbGxvd3MgaXMgcmV0dXJuZWQ6DQog ICAgICAgICAgICA8L3A+DQogICAgICAgICAgICA8cCBjbGFzcz0iY2FwdGlvbiI+PGEgbmFtZT0i ZXhhbXBsZS0xMyI+PC9hPkV4YW1wbGUgMTMuIEludmFsaWQgQ29udGVudCBUeXBlPC9wPg0KICAg ICAgPGRpdiBjbGFzcz0iaW5kZW50Ij4NCiAgICAgICAgPHByZSBjbGFzcz0icHJldHR5cHJpbnQi Pg0KICAgICAgICAgICAgICAgIA0KICAgICZsdDtkb3dubG9hZFNjaGVtYVJlc3BvbnNlIHhtbG5z PSdodHRwOi8vamFiYmVyLm9yZy9wcm90b2NvbC9jb21wcmVzcy9leGknIHVybD0naHR0cDovL3Nj aGVtYXZhdWx0LnNlL2NvbXByZXNzL3NuL3Byb3Zpc2lvbmluZy54c2QnIHJlc3VsdD0nZmFsc2Un Jmd0Ow0KICAgICAgICAmbHQ7aW52YWxpZENvbnRlbnRUeXBlIGNvbnRlbnRUeXBlUmV0dXJuZWQ9 J3RleHQvaHRtbCcvJmd0Ow0KICAgICZsdDsvZG93bmxvYWRTY2hlbWFSZXNwb25zZSZndDsNCiAg ICAgICAgICAgIDwvcHJlPg0KICAgICAgPC9kaXY+DQogICAgICAgICAgICA8cCBjbGFzcz0iIiBz dHlsZT0iIj4NCiAgICAgICAgICAgICAgICBJZiBzb21lIG90aGVyIGVycm9yIG9jY3VycywgdW5m b3JzZWVuIGJ5IHRoaXMgc3BlY2lmaWNhdGlvbiwgdGhlIHNlcnZlciBjYW4gc2ltcGx5IHJlc3Bv bmQgd2l0aCBhIGdlbmVyaWMgZXJyb3IgbWVzc2FnZSwgYXMgZm9sbG93czoNCiAgICAgICAgICAg IDwvcD4NCiAgICAgICAgICAgIDxwIGNsYXNzPSJjYXB0aW9uIj48YSBuYW1lPSJleGFtcGxlLTE0 Ij48L2E+RXhhbXBsZSAxNC4gT3RoZXIgdHlwZXMgb2YgZXJyb3JzPC9wPg0KICAgICAgPGRpdiBj bGFzcz0iaW5kZW50Ij4NCiAgICAgICAgPHByZSBjbGFzcz0icHJldHR5cHJpbnQiPg0KICAgICAg ICAgICAgICAgIA0KICAgICZsdDtkb3dubG9hZFNjaGVtYVJlc3BvbnNlIHhtbG5zPSdodHRwOi8v amFiYmVyLm9yZy9wcm90b2NvbC9jb21wcmVzcy9leGknIHVybD0naHR0cDovL3NjaGVtYXZhdWx0 LnNlL2NvbXByZXNzL3NuL3Byb3Zpc2lvbmluZy54c2QnIHJlc3VsdD0nZmFsc2UnJmd0Ow0KICAg ICAgICAmbHQ7ZXJyb3IgbWVzc2FnZT0nTm8gZnJlZSBzcGFjZSBsZWZ0LicvJmd0Ow0KICAgICZs dDsvZG93bmxvYWRTY2hlbWFSZXNwb25zZSZndDsNCiAgICAgICAgICAgIDwvcHJlPg0KICAgICAg PC9kaXY+DQogICAgICAgICAgICA8cCBjbGFzcz0iIiBzdHlsZT0iIj4NCiAgICAgICAgICAgICAg ICA8c3BhbiBjbGFzcz0ic3Ryb25nIj5Ob3RlOjwvc3Bhbj4gRG93bmxvYWRpbmcgYSBzY2hlbWEs IG1pZ2h0IGRvd25sb2FkIGEgdmVyc2lvbiB3aGljaCBkb2VzIG5vdCBjb3JyZXNwb25kIHRvIHRo ZSBkZXNpcmVkIHZlcnNpb24NCiAgICAgICAgICAgICAgICBvZiB0aGUgc2NoZW1hLiBTbywgaXQn cyBtb3JlIGltcG9ydGFudCBpbiB0aGlzIGNhc2UsIHRoZSBjbGllbnQgY2hlY2tzIHRoYXQgdGhl IHNlcnZlciBhY3R1YWxseSBoYXMgdGhlIHZlcnNpb24gb2YgdGhlIHNjaGVtYSByZXF1aXJlZCBi eSB0aGUgY2xpZW50Lg0KICAgICAgICAgICAgPC9wPg0KICAgICAgICA8L2Rpdj4NCiAgICAgICAg PGRpdiBjbGFzcz0iaW5kZW50Ij4NCiAgICAgIDxoMz4yLjYgPGEgbmFtZT0ic2VjdC1JRDBFM0VB QyI+U3RhcnRpbmcgY29tcHJlc3Npb248L2E+PC9oMz4NCiAgICAgICAgICAgIDxwIGNsYXNzPSIi IHN0eWxlPSIiPg0KICAgICAgICAgICAgICAgIFdoZW4gRVhJIG9wdGlvbiBuZWdvdGlhdGlvbiBo YXMgYmVlbiBjb21wbGV0ZWQsIHRoZSBjbGllbnQgY2FuIHRlbGwgdGhlIHNlcnZlciB0aGF0IGl0 IGlzIHJlYWR5IHRvIHN0YXJ0IGNvbXByZXNzaW9uLiBJdCBkb2VzIHRoaXMgdXNpbmcgdGhlIG5v cm1hbCA8c3BhbiBjbGFzcz0ic3Ryb25nIj5jb21wcmVzczwvc3Bhbj4NCiAgICAgICAgICAgICAg ICBzdGFuemEsIGFzIGZvbGxvd3M6DQogICAgICAgICAgICA8L3A+DQogICAgICAgICAgICA8cCBj bGFzcz0iY2FwdGlvbiI+PGEgbmFtZT0iZXhhbXBsZS0xNSI+PC9hPkV4YW1wbGUgMTUuIDwvcD4N CiAgICAgIDxkaXYgY2xhc3M9ImluZGVudCI+DQogICAgICAgIDxwcmUgY2xhc3M9InByZXR0eXBy aW50Ij4NCiAgICAgICAgICAgICAgICANCiAgICAmbHQ7Y29tcHJlc3MgeG1sbnM9J2h0dHA6Ly9q YWJiZXIub3JnL3Byb3RvY29sL2NvbXByZXNzJyZndDsNCiAgICAgICAgJmx0O21ldGhvZCZndDtl eGkmbHQ7L21ldGhvZCZndDsNCiAgICAmbHQ7L2NvbXByZXNzJmd0Ow0KICAgICAgICAgICAgPC9w cmU+DQogICAgICA8L2Rpdj4NCiAgICAgICAgICAgIDxwIGNsYXNzPSIiIHN0eWxlPSIiPg0KICAg ICAgICAgICAgICAgIFRoZSBzZXJ2ZXIgbm93IGhhdmluZyBuZWNlc3Nhcnkga25vd2xlZGdlIG9u IGhvdyB0aGUgRVhJIGVuZ2luZSBzaG91bGQgYmUgY29uZmlndXJlZCBmb3IgdGhlIGN1cnJlbnQg c2Vzc2lvbiwgcmVzcG9uZHM6DQogICAgICAgICAgICA8L3A+DQogICAgICAgICAgICA8cCBjbGFz cz0iY2FwdGlvbiI+PGEgbmFtZT0iZXhhbXBsZS0xNiI+PC9hPkV4YW1wbGUgMTYuIDwvcD4NCiAg ICAgIDxkaXYgY2xhc3M9ImluZGVudCI+DQogICAgICAgIDxwcmUgY2xhc3M9InByZXR0eXByaW50 Ij4NCiAgICAgICAgICAgICAgICANCiAgICAmbHQ7Y29tcHJlc3NlZCB4bWxucz0naHR0cDovL2ph YmJlci5vcmcvcHJvdG9jb2wvY29tcHJlc3MnLyZndDsNCiAgICAgICAgICAgIDwvcHJlPg0KICAg ICAgPC9kaXY+DQogICAgICAgICAgICA8cCBjbGFzcz0iIiBzdHlsZT0iIj4NCiAgICAgICAgICAg ICAgICBXaGVuIHRoZSBjbGllbnQgcmVjZWl2ZXMgYWNrbm93bGVkZ2VtZW50IHRoYXQgdGhlIGNv bXByZXNzaW9uIG1ldGhvZCBoYXMgYmVlbiBhY2NlcHRlZCwgaXQgcmVzdGFydHMgdGhlIHN0cmVh bSwgYXMgZXhwbGFpbmVkIGluIA0KICAgICAgICAgICAgICAgIDxhIGhyZWY9Imh0dHA6Ly94bXBw Lm9yZy9leHRlbnNpb25zL3hlcC0wMTM4Lmh0bWwjdXNlY2FzZSI+WEVQIDAxMzg8L2E+Lg0KICAg ICAgICAgICAgPC9wPg0KICAgICAgICA8L2Rpdj4NCiAgICA8aDI+My4NCiAgICAgICA8YSBuYW1l PSJpbXBsIj5JbXBsZW1lbnRhdGlvbiBOb3RlczwvYT48L2gyPg0KICAgICAgICA8ZGl2IGNsYXNz PSJpbmRlbnQiPg0KICAgICAgPGgzPjMuMSA8YSBuYW1lPSJzZWN0LUlEMEU2RkFDIj5FWEkgb3B0 aW9uczwvYT48L2gzPg0KICAgICAgICAgICAgPHAgY2xhc3M9IiIgc3R5bGU9IiI+DQogICAgICAg ICAgICAgICAgVGhlIGZvbGxvd2luZyBzZWdtZW50IGlzIHRha2VuIGZyb20gdGhlIDxhIGhyZWY9 Imh0dHA6Ly93d3cudzMub3JnL1RSL2V4aS8jb3B0aW9ucyI+RVhJIHNwZWNpZmljYXRpb248L2E+ LiBJdCBkZXNjcmliZXMgdGhlIGRpZmZlcmVudCBFWEkgb3B0aW9ucyB0aGF0IG5lZWQgdG8gYmUg bmVnb3RpYXRlZCBiZWZvcmUgZW5hYmxpbmcgRVhJLg0KICAgICAgICAgICAgPC9wPg0KICAgICAg ICAgICAgPHAgY2xhc3M9IiIgc3R5bGU9IiI+DQogICAgICAgICAgICAgICAgVGhlIDxzcGFuIGNs YXNzPSJzdHJvbmciPmFsaWdubWVudCBvcHRpb248L3NwYW4+IGlzIHVzZWQgdG8gY29udHJvbCB0 aGUgYWxpZ25tZW50IG9mIGV2ZW50IGNvZGVzIGFuZCBjb250ZW50IGl0ZW1zLiBUaGUgdmFsdWUg aXMgb25lIG9mIGJpdC1wYWNrZWQsIGJ5dGUtYWxpZ25tZW50IG9yIHByZS1jb21wcmVzc2lvbiwg b2Ygd2hpY2ggYml0LXBhY2tlZCBpcyB0aGUgZGVmYXVsdCB2YWx1ZSBhc3N1bWVkIHdoZW4gdGhl ICJhbGlnbm1lbnQiIGVsZW1lbnQgaXMgYWJzZW50IGluIHRoZSBFWEkgT3B0aW9ucyBkb2N1bWVu dC4gVGhlIG9wdGlvbiB2YWx1ZXMgYnl0ZS1hbGlnbm1lbnQgYW5kIHByZS1jb21wcmVzc2lvbiBh cmUgZWZmZWN0ZWQgd2hlbiAiYnl0ZSIgYW5kICJwcmUtY29tcHJlc3MiIGVsZW1lbnRzIGFyZSBw cmVzZW50IGluIHRoZSBFWEkgT3B0aW9ucyBkb2N1bWVudCwgcmVzcGVjdGl2ZWx5LiBXaGVuIHRo ZSB2YWx1ZSBvZiBjb21wcmVzc2lvbiBvcHRpb24gaXMgc2V0IHRvIHRydWUsIGFsaWdubWVudCBv ZiB0aGUgRVhJIEJvZHkgaXMgZ292ZXJuZWQgYnkgdGhlIHJ1bGVzIHNwZWNpZmllZCBpbiA8YSBo cmVmPSJodHRwOi8vd3d3LnczLm9yZy9UUi9leGkvI2NvbXByZXNzaW9uIj45LiBFWEkgQ29tcHJl c3Npb248L2E+IGluc3RlYWQgb2YgdGhlIGFsaWdubWVudCBvcHRpb24gdmFsdWUuIFRoZSAiYWxp Z25tZW50IiBlbGVtZW50IE1VU1QgTk9UIGFwcGVhciBpbiBhbiBFWEkgb3B0aW9ucyBkb2N1bWVu dCB3aGVuIHRoZSAiY29tcHJlc3Npb24iIGVsZW1lbnQgaXMgcHJlc2VudC4NCiAgICAgICAgICAg IDwvcD4NCiAgICAgICAgICAgIDxwIGNsYXNzPSIiIHN0eWxlPSIiPg0KICAgICAgICAgICAgICAg IFRoZSBhbGlnbm1lbnQgb3B0aW9uIHZhbHVlIDxzcGFuIGNsYXNzPSJzdHJvbmciPmJpdC1wYWNr ZWQ8L3NwYW4+IGluZGljYXRlcyB0aGF0IHRoZSBldmVudCBjb2RlcyBhbmQgYXNzb2NpYXRlZCBj b250ZW50IGFyZSBwYWNrZWQgaW4gYml0cyB3aXRob3V0IGFueSBwYWRkaW5nIGluLWJldHdlZW4u DQogICAgICAgICAgICA8L3A+DQogICAgICAgICAgICA8cCBjbGFzcz0iIiBzdHlsZT0iIj4NCiAg ICAgICAgICAgICAgICBUaGUgYWxpZ25tZW50IG9wdGlvbiB2YWx1ZSA8c3BhbiBjbGFzcz0ic3Ry b25nIj5ieXRlLWFsaWdubWVudDwvc3Bhbj4gaW5kaWNhdGVzIHRoYXQgdGhlIGV2ZW50IGNvZGVz IGFuZCBhc3NvY2lhdGVkIGNvbnRlbnQgYXJlIGFsaWduZWQgb24gYnl0ZSBib3VuZGFyaWVzLiBX aGlsZSBieXRlLWFsaWdubWVudCBnZW5lcmFsbHkgcmVzdWx0cyBpbiBFWEkgc3RyZWFtcyBvZiBs YXJnZXIgc2l6ZXMgY29tcGFyZWQgd2l0aCB0aGVpciBiaXQtcGFja2VkIGVxdWl2YWxlbnRzLCBi eXRlLWFsaWdubWVudCBtYXkgcHJvdmlkZSBhIGhlbHAgaW4gc29tZSB1c2UgY2FzZXMgdGhhdCBp bnZvbHZlIGZyZXF1ZW50IGNvcHlpbmcgb2YgbGFyZ2UgYXJyYXlzIG9mIHNjYWxhciBkYXRhIGRp cmVjdGx5IG91dCBvZiB0aGUgc3RyZWFtLiBJdCBjYW4gYWxzbyBtYWtlIGl0IHBvc3NpYmxlIHRv IHdvcmsgd2l0aCBkYXRhIGluLXBsYWNlIGFuZCBjYW4gbWFrZSBpdCBlYXNpZXIgdG8gZGVidWcg ZW5jb2RlZCBkYXRhIGJ5IGFsbG93aW5nIGl0ZW1zIG9uIGFsaWduZWQgYm91bmRhcmllcyB0byBi ZSBlYXNpbHkgbG9jYXRlZCBpbiB0aGUgc3RyZWFtLg0KICAgICAgICAgICAgPC9wPg0KICAgICAg ICAgICAgPHAgY2xhc3M9IiIgc3R5bGU9IiI+DQogICAgICAgICAgICAgICAgVGhlIGFsaWdubWVu dCBvcHRpb24gdmFsdWUgPHNwYW4gY2xhc3M9InN0cm9uZyI+cHJlLWNvbXByZXNzaW9uPC9zcGFu PiBpbmRpY2F0ZXMgdGhhdCBhbGwgc3RlcHMgaW52b2x2ZWQgaW4gY29tcHJlc3Npb24gKHNlZSBz ZWN0aW9uIDxhIGhyZWY9Imh0dHA6Ly93d3cudzMub3JnL1RSL2V4aS8jY29tcHJlc3Npb24iPjku IEVYSSBDb21wcmVzc2lvbjwvYT4pIGFyZSB0byBiZSBkb25lIHdpdGggdGhlIGV4Y2VwdGlvbiBv ZiB0aGUgZmluYWwgc3RlcCBvZiBhcHBseWluZyB0aGUgREVGTEFURSBhbGdvcml0aG0uIFRoZSBw cmltYXJ5IHVzZSBjYXNlIG9mIHByZS1jb21wcmVzc2lvbiBpcyB0byBhdm9pZCBhIGR1cGxpY2F0 ZSBjb21wcmVzc2lvbiBzdGVwIHdoZW4gY29tcHJlc3Npb24gY2FwYWJpbGl0eSBpcyBidWlsdCBp bnRvIHRoZSB0cmFuc3BvcnQgcHJvdG9jb2wuIEluIHRoaXMgY2FzZSwgcHJlLWNvbXByZXNzaW9u IGp1c3QgcHJlcGFyZXMgdGhlIHN0cmVhbSBmb3IgbGF0ZXIgY29tcHJlc3Npb24uDQogICAgICAg ICAgICA8L3A+DQogICAgICAgICAgICA8cCBjbGFzcz0iIiBzdHlsZT0iIj4NCiAgICAgICAgICAg ICAgICBUaGUgPHNwYW4gY2xhc3M9InN0cm9uZyI+Y29tcHJlc3Npb24gb3B0aW9uPC9zcGFuPiBp cyBhIEJvb2xlYW4gdXNlZCB0byBpbmNyZWFzZSBjb21wYWN0bmVzcyB1c2luZyBhZGRpdGlvbmFs IGNvbXB1dGF0aW9uYWwgcmVzb3VyY2VzLiBUaGUgZGVmYXVsdCB2YWx1ZSAiZmFsc2UiIGlzIGFz c3VtZWQgd2hlbiB0aGUgImNvbXByZXNzaW9uIiBlbGVtZW50IGlzIGFic2VudCBpbiB0aGUgRVhJ IE9wdGlvbnMgZG9jdW1lbnQgd2hlcmVhcyBpdHMgcHJlc2VuY2UgZGVub3RlcyB0aGUgdmFsdWUg InRydWUiLiBXaGVuIHNldCB0byB0cnVlLCB0aGUgZXZlbnQgY29kZXMgYW5kIGFzc29jaWF0ZWQg Y29udGVudCBhcmUgY29tcHJlc3NlZCBhY2NvcmRpbmcgdG8gPGEgaHJlZj0iaHR0cDovL3d3dy53 My5vcmcvVFIvZXhpLyNjb21wcmVzc2lvbiI+OS4gRVhJIENvbXByZXNzaW9uPC9hPiByZWdhcmRs ZXNzIG9mIHRoZSBhbGlnbm1lbnQgb3B0aW9uIHZhbHVlLiBBcyBtZW50aW9uZWQgYWJvdmUsIHRo ZSAiY29tcHJlc3Npb24iIGVsZW1lbnQgTVVTVCBOT1QgYXBwZWFyIGluIGFuIEVYSSBvcHRpb25z IGRvY3VtZW50IHdoZW4gdGhlICJhbGlnbm1lbnQiIGVsZW1lbnQgaXMgcHJlc2VudC4NCiAgICAg ICAgICAgIDwvcD4NCiAgICAgICAgICAgIDxwIGNsYXNzPSIiIHN0eWxlPSIiPg0KICAgICAgICAg ICAgICAgIFRoZSA8c3BhbiBjbGFzcz0ic3Ryb25nIj5zdHJpY3Qgb3B0aW9uPC9zcGFuPiBpcyBh IEJvb2xlYW4gdXNlZCB0byBpbmNyZWFzZSBjb21wYWN0bmVzcyBieSB1c2luZyBhIHN0cmljdCBp bnRlcnByZXRhdGlvbiBvZiB0aGUgc2NoZW1hcyBhbmQgb21pdHRpbmcgcHJlc2VydmF0aW9uIG9m IGNlcnRhaW4gaXRlbXMsIHN1Y2ggYXMgY29tbWVudHMsIHByb2Nlc3NpbmcgaW5zdHJ1Y3Rpb25z IGFuZCBuYW1lc3BhY2UgcHJlZml4ZXMuIFRoZSBkZWZhdWx0IHZhbHVlICJmYWxzZSIgaXMgYXNz dW1lZCB3aGVuIHRoZSAic3RyaWN0IiBlbGVtZW50IGlzIGFic2VudCBpbiB0aGUgRVhJIE9wdGlv bnMgZG9jdW1lbnQgd2hlcmVhcyBpdHMgcHJlc2VuY2UgZGVub3RlcyB0aGUgdmFsdWUgInRydWUi LiBXaGVuIHNldCB0byB0cnVlLCB0aG9zZSBwcm9kdWN0aW9ucyB0aGF0IGhhdmUgTlMsIENNLCBQ SSwgRVIsIGFuZCBTQyB0ZXJtaW5hbCBzeW1ib2xzIGFyZSBvbWl0dGVkIGZyb20gdGhlIEVYSSBn cmFtbWFycywgYW5kIHNjaGVtYS1pbmZvcm1lZCBlbGVtZW50IGFuZCB0eXBlIGdyYW1tYXJzIGFy ZSByZXN0cmljdGVkIHRvIG9ubHkgcGVybWl0IGl0ZW1zIGRlY2xhcmVkIGluIHRoZSBzY2hlbWFz LiBBIG5vdGUgaW4gc2VjdGlvbiA8YSBocmVmPSJodHRwOi8vd3d3LnczLm9yZy9UUi9leGkvI2Fk ZGluZ1Byb2R1Y3Rpb25zU3RyaWN0Ij44LjUuNC40LjIgQWRkaW5nIFByb2R1Y3Rpb25zIHdoZW4g U3RyaWN0IGlzIFRydWU8L2E+IGRlc2NyaWJlcyBzb21lIGFkZGl0aW9uYWwgcmVzdHJpY3Rpb25z IGNvbnNlcXVlbnRpYWwgb2YgdGhlIHVzZSBvZiB0aGlzIG9wdGlvbi4gVGhlICJzdHJpY3QiIGVs ZW1lbnQgTVVTVCBOT1QgYXBwZWFyIGluIGFuIEVYSSBvcHRpb25zIGRvY3VtZW50IHdoZW4gb25l IG9mICJkdGQiLCAicHJlZml4ZXMiLCAiY29tbWVudHMiLCAicGlzIiBvciAic2VsZkNvbnRhaW5l ZCIgZWxlbWVudCBpcyBwcmVzZW50IGluIHRoZSBzYW1lIG9wdGlvbnMgZG9jdW1lbnQuDQogICAg ICAgICAgICA8L3A+DQogICAgICAgICAgICA8cCBjbGFzcz0iIiBzdHlsZT0iIj4NCiAgICAgICAg ICAgICAgICBUaGUgPHNwYW4gY2xhc3M9InN0cm9uZyI+cHJlc2VydmUgb3B0aW9uPC9zcGFuPiBp cyBhIHNldCBvZiBCb29sZWFucyB0aGF0IGNhbiBiZSBzZXQgaW5kZXBlbmRlbnRseSB0byBlYWNo IGVuYWJsZSBvciBkaXNhYmxlIGEgc2hhcmUgb2YgdGhlIGZvcm1hdCdzIGNhcGFjaXR5IGRldGVy bWluaW5nIHdoZXRoZXIgb3IgaG93IGNlcnRhaW4gaW5mb3JtYXRpb24gaXRlbXMgY2FuIGJlIHBy ZXNlcnZlZCBpbiB0aGUgRVhJIHN0cmVhbS4gU2VjdGlvbiA8YSBocmVmPSJodHRwOi8vd3d3Lncz Lm9yZy9UUi9leGkvI2ZpZGVsaXR5T3B0aW9ucyI+Ni4zIEZpZGVsaXR5IE9wdGlvbnM8L2E+IGRl c2NyaWJlcyB0aGUgc2V0IG9mIGluZm9ybWF0aW9uIGl0ZW1zIGFmZmVjdGVkIGJ5IHRoZSBwcmVz ZXJ2ZSBvcHRpb24uIFRoZSBwcmVzZW5jZSBvZiAiZHRkIiwgInByZWZpeGVzIiwgImxleGljYWxW YWx1ZXMiLCAiY29tbWVudHMiIGFuZCAicGlzIiBpbiB0aGUgRVhJIE9wdGlvbnMgZG9jdW1lbnQg ZWFjaCB0dXJucyBvbiBmaWRlbGl0eSBvcHRpb25zIFByZXNlcnZlLmNvbW1lbnRzLCBQcmVzZXJ2 ZS5waXMsIFByZXNlcnZlLmR0ZCwgUHJlc2VydmUucHJlZml4ZXMgYW5kIFByZXNlcnZlLmxleGlj YWxWYWx1ZXMgd2hlcmVhcyB0aGUgYWJzZW5jZSBkZW5vdGVzIHR1cm5pbmcgZWFjaCBvZmYuIFRo ZSBlbGVtZW50cyAiZHRkIiwgInByZWZpeGVzIiwgImNvbW1lbnRzIiBhbmQgInBpcyIgTVVTVCBO T1QgYXBwZWFyIGluIGFuIEVYSSBvcHRpb25zIGRvY3VtZW50IHdoZW4gdGhlICJzdHJpY3QiIGVs ZW1lbnQgaXMgcHJlc2VudCBpbiB0aGUgc2FtZSBvcHRpb25zIGRvY3VtZW50LiBUaGUgZWxlbWVu dCAibGV4aWNhbFZhbHVlcyIsIG9uIHRoZSBvdGhlciBoYW5kLCBpcyBwZXJtaXR0ZWQgdG8gb2Nj dXIgaW4gdGhlIHByZXNlbmNlIG9mICJzdHJpY3QiIGVsZW1lbnQuDQogICAgICAgICAgICA8L3A+ DQogICAgICAgICAgICA8cCBjbGFzcz0iIiBzdHlsZT0iIj4NCiAgICAgICAgICAgICAgICBUaGUg PHNwYW4gY2xhc3M9InN0cm9uZyI+c2VsZkNvbnRhaW5lZCBvcHRpb248L3NwYW4+IGlzIGEgQm9v bGVhbiB1c2VkIHRvIGVuYWJsZSB0aGUgdXNlIG9mIHNlbGYtY29udGFpbmVkIGVsZW1lbnRzIGlu IHRoZSBFWEkgc3RyZWFtLiBTZWxmLWNvbnRhaW5lZCBlbGVtZW50cyBtYXkgYmUgcmVhZCBpbmRl cGVuZGVudGx5IGZyb20gdGhlIHJlc3Qgb2YgdGhlIEVYSSBib2R5LCBhbGxvd2luZyB0aGVtIHRv IGJlIGluZGV4ZWQgZm9yIHJhbmRvbSBhY2Nlc3MuIFRoZSAic2VsZkNvbnRhaW5lZCIgZWxlbWVu dCBNVVNUIE5PVCBhcHBlYXIgaW4gYW4gRVhJIG9wdGlvbnMgZG9jdW1lbnQgd2hlbiBvbmUgb2Yg ImNvbXByZXNzaW9uIiwgInByZS1jb21wcmVzc2lvbiIgb3IgInN0cmljdCIgZWxlbWVudHMgYXJl IHByZXNlbnQgaW4gdGhlIHNhbWUgb3B0aW9ucyBkb2N1bWVudC4gVGhlIGRlZmF1bHQgdmFsdWUg ImZhbHNlIiBpcyBhc3N1bWVkIHdoZW4gdGhlICJzZWxmQ29udGFpbmVkIiBlbGVtZW50IGlzIGFi c2VudCBmcm9tIHRoZSBFWEkgT3B0aW9ucyBkb2N1bWVudCB3aGVyZWFzIGl0cyBwcmVzZW5jZSBk ZW5vdGVzIHRoZSB2YWx1ZSAidHJ1ZSIuDQogICAgICAgICAgICA8L3A+DQogICAgICAgICAgICA8 cCBjbGFzcz0iIiBzdHlsZT0iIj4NCiAgICAgICAgICAgICAgICBUaGUgPHNwYW4gY2xhc3M9InN0 cm9uZyI+ZGF0YXR5cGVSZXByZXNlbnRhdGlvbk1hcCBvcHRpb248L3NwYW4+IHNwZWNpZmllcyBh biBhbHRlcm5hdGUgc2V0IG9mIGRhdGF0eXBlIHJlcHJlc2VudGF0aW9ucyBmb3IgdHlwZWQgdmFs dWVzIGluIHRoZSBFWEkgYm9keSBhcyBkZXNjcmliZWQgaW4gPGEgaHJlZj0iaHR0cDovL3d3dy53 My5vcmcvVFIvZXhpLyNkYXRhdHlwZVJlcHJlc2VudGF0aW9uTWFwIj43LjQgRGF0YXR5cGUgUmVw cmVzZW50YXRpb24gTWFwPC9hPi4gV2hlbiB0aGVyZSBhcmUgbm8gImRhdGF0eXBlUmVwcmVzZW50 YXRpb25NYXAiIGVsZW1lbnRzIGluIHRoZSBFWEkgT3B0aW9ucyBkb2N1bWVudCwgbm8gRGF0YXR5 cGUgUmVwcmVzZW50YXRpb24gTWFwIGlzIHVzZWQgZm9yIHByb2Nlc3NpbmcgdGhlIEVYSSBib2R5 LiBUaGlzIG9wdGlvbiBkb2VzIG5vdCB0YWtlIGVmZmVjdCB3aGVuIHRoZSB2YWx1ZSBvZiB0aGUg UHJlc2VydmUubGV4aWNhbFZhbHVlcyBmaWRlbGl0eSBvcHRpb24gaXMgdHJ1ZSAoc2VlIDxhIGhy ZWY9Imh0dHA6Ly93d3cudzMub3JnL1RSL2V4aS8jZmlkZWxpdHlPcHRpb25zIj42LjMgRmlkZWxp dHkgT3B0aW9uczwvYT4pLCBvciB3aGVuIHRoZSBFWEkgc3RyZWFtIGlzIGEgc2NoZW1hLWxlc3Mg RVhJIHN0cmVhbS4NCiAgICAgICAgICAgIDwvcD4NCiAgICAgICAgICAgIDxwIGNsYXNzPSIiIHN0 eWxlPSIiPg0KICAgICAgICAgICAgICAgIFRoZSA8c3BhbiBjbGFzcz0ic3Ryb25nIj5ibG9ja1Np emUgb3B0aW9uPC9zcGFuPiBzcGVjaWZpZXMgdGhlIGJsb2NrIHNpemUgdXNlZCBmb3IgRVhJIGNv bXByZXNzaW9uLiBXaGVuIHRoZSAiYmxvY2tTaXplIiBlbGVtZW50IGlzIGFic2VudCBpbiB0aGUg RVhJIE9wdGlvbnMgZG9jdW1lbnQsIHRoZSBkZWZhdWx0IGJsb2Nrc2l6ZSBvZiAxLDAwMCwwMDAg aXMgdXNlZC4gVGhlIGRlZmF1bHQgYmxvY2tTaXplIGlzIGludGVudGlvbmFsbHkgbGFyZ2UgYnV0 IGNhbiBiZSByZWR1Y2VkIGZvciBwcm9jZXNzaW5nIGxhcmdlIGRvY3VtZW50cyBvbiBkZXZpY2Vz IHdpdGggbGltaXRlZCBtZW1vcnkuDQogICAgICAgICAgICA8L3A+DQogICAgICAgICAgICA8cCBj bGFzcz0iIiBzdHlsZT0iIj4NCiAgICAgICAgICAgICAgICAgVGhlIDxzcGFuIGNsYXNzPSJzdHJv bmciPnZhbHVlTWF4TGVuZ3RoIG9wdGlvbjwvc3Bhbj4gc3BlY2lmaWVzIHRoZSBtYXhpbXVtIGxl bmd0aCBvZiB2YWx1ZSBjb250ZW50IGl0ZW1zIHRvIGJlIGNvbnNpZGVyZWQgZm9yIGFkZGl0aW9u IHRvIHRoZSBzdHJpbmcgdGFibGUuIFRoZSBkZWZhdWx0IHZhbHVlICJ1bmJvdW5kZWQiIGlzIGFz c3VtZWQgd2hlbiB0aGUgInZhbHVlTWF4TGVuZ3RoIiBlbGVtZW50IGlzIGFic2VudCBpbiB0aGUg RVhJIE9wdGlvbnMgZG9jdW1lbnQuDQogICAgICAgICAgICA8L3A+DQogICAgICAgICAgICA8cCBj bGFzcz0iIiBzdHlsZT0iIj4NCiAgICAgICAgICAgICAgICAgVGhlIDxzcGFuIGNsYXNzPSJzdHJv bmciPnZhbHVlUGFydGl0aW9uQ2FwYWNpdHkgb3B0aW9uPC9zcGFuPiBzcGVjaWZpZXMgdGhlIG1h eGltdW0gbnVtYmVyIG9mIHZhbHVlIGNvbnRlbnQgaXRlbXMgaW4gdGhlIHN0cmluZyB0YWJsZSBh dCBhbnkgZ2l2ZW4gdGltZS4gVGhlIGRlZmF1bHQgdmFsdWUgInVuYm91bmRlZCIgaXMgYXNzdW1l ZCB3aGVuIHRoZSAidmFsdWVQYXJ0aXRpb25DYXBhY2l0eSIgZWxlbWVudCBpcyBhYnNlbnQgaW4g dGhlIEVYSSBPcHRpb25zIGRvY3VtZW50LiBTZWN0aW9uIDxhIGhyZWY9Imh0dHA6Ly93d3cudzMu b3JnL1RSL2V4aS8jZW5jb2RpbmdPcHRpbWl6ZWRGb3JNaXNzZXMiPjcuMy4zIFBhcnRpdGlvbnMg T3B0aW1pemVkIGZvciBGcmVxdWVudCB1c2Ugb2YgU3RyaW5nIExpdGVyYWxzPC9hPiBzcGVjaWZp ZXMgdGhlIGJlaGF2aW9yIG9mIHRoZSBzdHJpbmcgdGFibGUgd2hlbiB0aGlzIGNhcGFjaXR5IGlz IHJlYWNoZWQuDQogICAgICAgICAgICA8L3A+DQogICAgICAgICAgICA8cCBjbGFzcz0iIiBzdHls ZT0iIj4NCiAgICAgICAgICAgICAgICBUaGUgPHNwYW4gY2xhc3M9InN0cm9uZyI+c2Vzc2lvbldp ZGVCdWZmZXJzPC9zcGFuPiBjb250cm9scyBidWZmZXIgYW5kIHN0cmluZyB0YWJsZSBsaWZlIHRp bWUuIElmIHNldCB0byB0cnVlLCBhbGwgYnVmZmVycywgc3RyaW5nIHRhYmxlcywgZXRjLiB3aWxs IGJlIG1haW50YWluZWQgZHVyaW5nIHRoZSBlbnRpcmUgc2Vzc2lvbi4gDQogICAgICAgICAgICAg ICAgVGhpcyBtYXkgaW1wcm92ZSBwZXJmb3JtYW5jZSBkdXJpbmcgdGltZSBzaW5jZSBzdHJpbmdz IGNhbiBiZSBvbWl0dGVkIGluIHRoZSBjb21wcmVzc2VkIGJpbmFyeSBzdHJlYW0sIGJ1dCBpdCBt aWdodCBhbHNvIGluIHNvbWUgY2FzZXMgZGVncmFkZSBwZXJmb3JtYW5jZSBzaW5jZSBtb3JlIG9w dGlvbnMgYXJlIA0KICAgICAgICAgICAgICAgIGF2YWlsYWJsZSBpbiB0aGUgdGFibGVzLCByZXF1 aXJpbmcgbW9yZSBiaXRzIHRvIGVuY29kZSBzdHJpbmdzLiBUaGUgZGVmYXVsdCB2YWx1ZSBpcyBm YWxzZSwgbWVhbmluZyB0aGF0IGJ1ZmZlcnMsIHN0cmluZyB0YWJsZXMsIGV0Yy4sIGFyZSBjbGVh cmVkIGJldHdlZW4gZWFjaCBzdGFuemEuIChUaGlzIG9wdGlvbg0KICAgICAgICAgICAgICAgIGlz IEVYSS9YTVBQIHNwZWNpZmljLikNCiAgICAgICAgICAgIDwvcD4NCiAgICAgICAgPC9kaXY+DQog ICAgICAgIDxkaXYgY2xhc3M9ImluZGVudCI+DQogICAgICA8aDM+My4yIDxhIG5hbWU9InNlY3Qt SUQwRTZKQUMiPkZyYWdtZW50IE1vZGUgYW5kIGNvbXByZXNzaW9uIG9mIHN0YW56YXM8L2E+PC9o Mz4NCiAgICAgICAgICAgIDxwIGNsYXNzPSIiIHN0eWxlPSIiPg0KICAgICAgICAgICAgICAgIE5v dGUgdGhhdCBldmVuIGlmIHRoZSBYTUwgc3RyZWFtIHVzZXMgWE1MIGZyYWdtZW50IG1vZGUsIGku ZS4gdGhlcmUncyBubyByb290IG5vZGUgaW4gdGhlIGZsb3csIEVYSSByZXF1aXJlcyB0aGUgZmxv dyBvZiBldmVudHMgdG8gYmUgY29ycmVjdGx5IGRlbGltaXRlZC4NCiAgICAgICAgICAgICAgICBU aGVyZWZvcmUsIGVhY2ggc3RhbnphIHNlbnQgb24gdGhlIHN0cmVhbSwgc2hvdWxkIGJlIGNvbXBy ZXNzZWQvZGVjb21wcmVzc2VkIHVzaW5nIGRvY3VtZW50IG1vZGUsIG5vdCBmcmFnbWVudCBtb2Rl LCB3aXRoIGFwcHJvcHJpYXRlIEJlZ2luIERvY3VtZW50IChCRCkgYW5kDQogICAgICAgICAgICAg ICAgRW5kIERvY3VtZW50IChFRCkgZXZlbnRzLiBUaGlzIG1ha2VzIGl0IHBvc3NpYmxlIHRvIGZs dXNoIGFueSByZW1haW5pbmcgYml0cyB0byB0aGUgc3RyZWFtLCBhbmQgdGhlIHJlY2VwdG9yIGNh biBjbGVhcmx5IGRpc3Rpbmd1aXNoIHN0YW56YXMgZnJvbSBlYWNoIG90aGVyLg0KICAgICAgICAg ICAgPC9wPg0KICAgICAgICAgICAgPHAgY2xhc3M9IiIgc3R5bGU9IiI+DQogICAgICAgICAgICAg ICAgRHVyaW5nIHNldHVwIG9mIHRoZSBFWEkgY29tcHJlc3Npb24gZW5naW5lLCB0aGUgY2xpZW50 IGNhbiBjaG9vc2UgaWYgYnVmZmVycyBhcmUgdG8gYmUgcmV1c2VkIGJldHdlZW4gc3Rhbnphcywg b3IgY2xlYXJlZCBiZXR3ZWVuIGVhY2ggc3RhbnphLiBUaGlzIGlzIGRvbmUNCiAgICAgICAgICAg ICAgICB1c2luZyB0aGUgRVhJIG92ZXIgWE1QUCBzcGVjaWZpYyBvcHRpb24gPHNwYW4gY2xhc3M9 InN0cm9uZyI+c2Vzc2lvbldpZGVCdWZmZXJzPC9zcGFuPiwgd2hpY2ggaXMgZmFsc2UgYnkgZGVm YXVsdCwgbWVhbmluZyBidWZmZXJzIGFuZCBzdHJpbmcgdGFibGVzIGFyZSBjbGVhcmVkIGJldHdl ZW4NCiAgICAgICAgICAgICAgICBlYWNoIHN0YW56YS4NCiAgICAgICAgICAgIDwvcD4NCiAgICAg ICAgICAgIDxwIGNsYXNzPSIiIHN0eWxlPSIiPg0KICAgICAgICAgICAgICAgIFRoZXJlIG1heSBi ZSBjYXNlcyB3aGVyZSBtYWludGFpbmluZyBidWZmZXJzIGFuZCBzdHJpbmcgdGFibGVzIHRocm91 Z2hvdXQgdGhlIHNlc3Npb24gaXMgcHJlZmVycmFibGUuIFNpbmNlIHN0cmluZ3MgYXJlIGFscmVh ZHkgaW4gdGhlIGJ1ZmZlcnMsIHRoZXkgbmVlZCBub3QNCiAgICAgICAgICAgICAgICBiZSBvdXRw dXQgaW4gdGhlIHN0cmVhbSB0aGUgZmlyc3QgdGltZSB0aGV5IGFwcGVhciBpbiBhIHN0YW56YS4g SG93ZXZlciwgdGhlIG51bWJlciBvZiBzdHJpbmdzIGluIHRhYmxlcyBpbmNyZWFzZSwgYW5kIHNv IGRvZXMgdGhlIG51bWJlciBvZiBiaXRzIHJlcXVpcmVkIHRvDQogICAgICAgICAgICAgICAgZW5j b2RlIHRoZW0uIERlcGVuZGluZyBvbiB3aGF0IHR5cGUgb2YgY29tbXVuaWNhdGlvbiBpcyBwZXJm b3JtZWQsIHRoaXMgb3B0aW9uIG1pZ2h0IGdpdmUgYmV0dGVyIHJlc3VsdHMgb25lIHdheSBvciBh bm90aGVyLg0KICAgICAgICAgICAgPC9wPg0KICAgICAgICAgICAgPHAgY2xhc3M9IiIgc3R5bGU9 IiI+DQogICAgICAgICAgICAgICAgTm90ZSBob3dldmVyLCB0aGF0IGlmIHlvdSB3YW50IHRoZSBv cHRpb24gdG8gZW50ZXIgYSBzZXNzaW9uIGluIHRoZSBtaWRkbGUgb2YgdGhlIGZsb3cgdG8gbGlz dGVuIHRvIHRoZSBjb21tdW5pY2F0aW9uLCB5b3UgbmVlZCB0byBjbGVhciB0YWJsZXMgYW5kIGJ1 ZmZlcnMgYmV0d2VlbiBlYWNoDQogICAgICAgICAgICAgICAgc3RhbnphLCBvciB5b3Ugd2lsbCBu b3QgYmUgYWJsZSB0byBkZWNvZGUgdGhlIGJpbmFyeSBzdHJlYW0gYXBwcm9wcmlhdGVseS4NCiAg ICAgICAgICAgIDwvcD4NCiAgICAgICAgPC9kaXY+DQogICAgICAgIDxkaXYgY2xhc3M9ImluZGVu dCI+DQogICAgICA8aDM+My4zIDxhIG5hbWU9InNlY3QtSUQwRVhLQUMiPk5ldHdvcmtzIGNvbnRh aW5pbmcgY2xpZW50cyBoYXZpbmcgbGltaXRlZCBtZW1vcnk8L2E+PC9oMz4NCiAgICAgICAgICAg IDxwIGNsYXNzPSIiIHN0eWxlPSIiPg0KICAgICAgICAgICAgICAgIFRvIHN1Y2Nlc3NmdWxseSBp bXBsZW1lbnQgYSBuZXR3b3JrIHdpdGggY2xpZW50cyBoYXZpbmcgbGltaXRlZCBtZW1vcnksIHN1 Y2ggYXMgc2Vuc29yIG5ldHdvcmtzLCBjYXJlIHNob3VsZCBiZSB0YWtlbiB0byBtYWtlIHN1cmUg bmVjZXNzYXJ5IHNjaGVtYSBmaWxlcyBhcmUNCiAgICAgICAgICAgICAgICBwcmVpbnN0YWxsZWQg b24gdGhlIHNlcnZlciwgdG8gYXZvaWQgdGhlIG5lY2Vzc2l0eSB0byB1cGxvYWQgc2NoZW1hIGZp bGVzIGZyb20gdGhlIGNsaWVudHMuIENsaWVudHMgd2l0aCBsaW1pdGVkIG1lbW9yeSBtaWdodCBi ZSB1bmFibGUgdG8gcGVyZm9ybSB0aGlzIHRhc2suDQogICAgICAgICAgICA8L3A+DQogICAgICAg ICAgICA8cCBjbGFzcz0iIiBzdHlsZT0iIj4NCiAgICAgICAgICAgICAgICBBbiBhbHRlcm5hdGl2 ZSBtYXkgYmUgdG8gaW5zdGFsbCBhIHJpY2hlciBjbGllbnQsIHRoYXQgY2FuIHVwbG9hZCB0aGUg c2NoZW1hIGZpbGVzIHRvIHRoZSBzZXJ2ZXIgZHluYW1pY2FsbHksIGFuZCBpbnN0YWxsaW5nIGl0 IGludG8gdGhlIG5ldHdvcmsuIEFueSBjbGllbnQgdXBsb2FkaW5nDQogICAgICAgICAgICAgICAg YSBzY2hlbWEgZmlsZSwgd2lsbCBtYWtlIHRoYXQgc2NoZW1hIGZpbGUgYXZhaWxhYmxlIGZvciBF WEkgY29tcHJlc3Npb24gdG8gYW55IG90aGVyIGNsaWVudCBpbiB0aGUgbmV0d29yay4NCiAgICAg ICAgICAgIDwvcD4NCiAgICAgICAgPC9kaXY+DQogICAgICAgIDxkaXYgY2xhc3M9ImluZGVudCI+ DQogICAgICA8aDM+My40IDxhIG5hbWU9InNlY3QtSUQwRUVMQUMiPkNhY2hpbmcgc2NoZW1hIGZp bGVzPC9hPjwvaDM+DQogICAgICAgICAgICA8cCBjbGFzcz0iIiBzdHlsZT0iIj4NCiAgICAgICAg ICAgICAgICBTY2hlbWEgZmlsZXMgdXBsb2FkZWQgdG8gdGhlIHNlcnZlciBzaG91bGQgYmUgY2Fj aGVkIG9uIHRoZSBzZXJ2ZXIgaW4gc29tZSBraW5kIG9mIHNjaGVtYSByZXBvc2l0b3J5LiBJZiBt ZW1vcnkgaXMgbGltaXRlZCBvbiB0aGUgc2VydmVyLCBzY2hlbWEgZmlsZXMgc2hvdWxkIGJlDQog ICAgICAgICAgICAgICAgc29ydGVkIGJ5IGxhc3QgYWNjZXNzLiBTY2hlbWEgZmlsZXMgd2l0aCB0 aGUgb2xkZXN0IGxhc3QgYWNjZXNzIHRpbWVzdGFtcCBjb3VsZCBiZSByZW1vdmVkIHRvIG1haW50 YWluIHRoZSBjYWNoZSB3aXRoaW4gYW4gYXBwcm92ZWQgY2FjaGUgc2l6ZS4NCiAgICAgICAgICAg IDwvcD4NCiAgICAgICAgICAgIDxwIGNsYXNzPSIiIHN0eWxlPSIiPg0KICAgICAgICAgICAgICAg IE5vdGUgdGhhdCBzY2hlbWEgZmlsZXMgaGF2ZSB0aHJlZSBrZXlzOiA8c3BhbiBjbGFzcz0ic3Ry b25nIj5UYXJnZXQgbmFtZXNwYWNlPC9zcGFuPiwgPHNwYW4gY2xhc3M9InN0cm9uZyI+Ynl0ZSBz aXplPC9zcGFuPiBhbmQgPHNwYW4gY2xhc3M9InN0cm9uZyI+TUQ1IEhhc2g8L3NwYW4+LiBNdWx0 aXBsZSB2ZXJzaW9ucyBvZiBhIHNjaGVtYSBmaWxlDQogICAgICAgICAgICAgICAgbWF5IGV4aXN0 ICh0aGF0IGlzLCB3aXRoIHRoZSBzYW1lIHRhcmdldCBuYW1lc3BhY2UgYnV0IGRpZmZlcmVudCBi eXRlIHNpemVzIG9yIE1ENSBoYXNoIGNvZGVzKS4gTm90ZSBhbHNvLCB0aGF0IGZvciBhbnkgcHJh Y3RpY2FsIHB1cnBvc2UsIHNjaGVtYSBmaWxlcyBjYW4gYmUgc3RvcmVkDQogICAgICAgICAgICAg ICAgdXNpbmcgb25seSB0aGUgTUQ1IGhhc2ggYXMgYSBrZXksIHNpbmNlIGl0IGlzIGhpZ2hseSBp bXByb2JhYmxlIHRoYXQgdHdvIGRpZmZlcmVudCBzY2hlbWEgZmlsZXMgd2lsbCBoYXZlIHRoZSBz YW1lIE1ENSBoYXNoICh1bmxlc3MgY29uc2Npb3VzbHkgY3JlYXRlZCB0aGF0IHdheSkuIE1ENSBo YXNoDQogICAgICAgICAgICAgICAgdmFsdWVzIGFyZSBhbHdheXMgaW4gPHNwYW4gY2xhc3M9InN0 cm9uZyI+bG93ZXIgY2FzZTwvc3Bhbj4uDQogICAgICAgICAgICA8L3A+DQogICAgICAgIDwvZGl2 Pg0KICAgICAgICA8ZGl2IGNsYXNzPSJpbmRlbnQiPg0KICAgICAgPGgzPjMuNSA8YSBuYW1lPSJz ZWN0LUlEMEUxTEFDIj5VcGxvYWRpbmcgdnMuIERvd25sb2FkaW5nIHNjaGVtYXM8L2E+PC9oMz4N CiAgICAgICAgICAgIDxwIGNsYXNzPSIiIHN0eWxlPSIiPg0KICAgICAgICAgICAgICAgIFdoZW4g dGhlIHNlcnZlciBsYWNrcyBpbmZvcm1hdGlvbiBhYm91dCBhIGdpdmVuIFhNTCBzY2hlbWEsIHRo ZSBjbGllbnQgaGFzIHR3byBvcHRpb25zIGZvciB1cGRhdGluZyB0aGUgc2VydmVyLiBFaXRoZXIg aXQgdXBsb2FkcyB0aGUgc2NoZW1hLCBvciBpdCBhc2tzIHRoZSBzZXJ2ZXIgdG8NCiAgICAgICAg ICAgICAgICBkb3dubG9hZCBvbmUuDQogICAgICAgICAgICA8L3A+DQogICAgICAgICAgICA8cCBj bGFzcz0iIiBzdHlsZT0iIj4NCiAgICAgICAgICAgICAgICBVbG9hZGluZyBhIHNjaGVtYSBoYXMg dGhlIGFkdmFudGFnZSwgdGhhdCB0aGUgY2xpZW50IGtub3dzIGV4YWN0bHkgdGhlIHZlcnNpb24g dGhhdCB0aGUgc2VydmVyIHJlcXVpcmVzLiBJdCBoYXMgdGhlIGRpc2FkdmFudGFnZSwgdGhhdCB0 aGUgY2xpZW50IG5lZWRzIHRvIHN0b3JlIHRoZSBzY2hlbWENCiAgICAgICAgICAgICAgICBhbmQg c2VuZCBhIHBvc3NpYmxlIGxhcmdlIHNjaGVtYSB0byB0aGUgc2VydmVyLiBJZiBFWEkgaXMgdXNl ZCBiZWNhdXNlIHRoZSBkZXZpY2UgaGFzIGxpbWl0ZWQgbWVtb3J5LCB1cGxvYWRpbmcgYSBzY2hl bWEgbWlnaHQgbm90IGJlIGFuIG9wdGlvbi4NCiAgICAgICAgICAgIDwvcD4NCiAgICAgICAgICAg IDxwIGNsYXNzPSIiIHN0eWxlPSIiPg0KICAgICAgICAgICAgICAgIERvd25sb2FkaW5nIGEgc2No ZW1hIGhhcyB0aGUgYWR2YW50YWdlLCB0aGF0IHNpemUgb2Ygc2NoZW1hIGRvZXMgbm90IG1hdHRl ci4gVGhlIGRpc2FkdmFudGFnZSBpcyB0aGF0IGFzeW5jaHJvbm91cyBlcnJvcnMgbWlnaHQgb2Nj dXIsIHNvIHRoZSBjbGllbnQgbmVlZHMgdG8gcGF5IHJlc3BlY3QNCiAgICAgICAgICAgICAgICB0 byB0aGUgcmVzcG9uc2VzIHJldHVybmVkIGJ5IHRoZSBzZXJ2ZXIgd2hlbiBkb3dubG9hZGluZyBz Y2hlbWFzLiBBbHNvLCBkb3dubG9hZGluZyBhIHNjaGVtYSwgbWlnaHQgZG93bmxvYWQgYSB2ZXJz aW9uIHdoaWNoIGRvZXMgbm90IGNvcnJlc3BvbmQgdG8gdGhlIGRlc2lyZWQgdmVyc2lvbg0KICAg ICAgICAgICAgICAgIG9mIHRoZSBzY2hlbWEuIFNvLCBpdCdzIG1vcmUgaW1wb3J0YW50IGluIHRo aXMgY2FzZSwgdGhlIGNsaWVudCBjaGVja3MgdGhhdCB0aGUgc2VydmVyIGFjdHVhbGx5IGhhcyB0 aGUgdmVyc2lvbiBvZiB0aGUgc2NoZW1hIHJlcXVpcmVkIGJ5IHRoZSBjbGllbnQuDQogICAgICAg ICAgICA8L3A+DQogICAgICAgIDwvZGl2Pg0KICAgICAgICA8ZGl2IGNsYXNzPSJpbmRlbnQiPg0K ICAgICAgPGgzPjMuNiA8YSBuYW1lPSJzZWN0LUlEMEVMTUFDIj5TZXJ2ZXIgZGVjb21wcmVzc2lv biBhbmQgcmVjb21wcmVzc2lvbiB2cy4gYmluYXJ5IGZvcndhcmRpbmc8L2E+PC9oMz4NCiAgICAg ICAgICAgIDxwIGNsYXNzPSIiIHN0eWxlPSIiPg0KICAgICAgICAgICAgICAgIElmIHR3byBYTVBQ IGNsaWVudHMgY29tbXVuaWNhdGUgd2l0aCBlYWNoIG90aGVyIHRocm91Z2ggYW4gWE1QUCBzZXJ2 ZXIsIGFuZCBib3RoIGNsaWVudHMgdXNlIEVYSSBjb21wcmVzc2lvbiwgdGhlIHNlcnZlciBtdXN0 IG9ubHkgZm9yd2FyZA0KICAgICAgICAgICAgICAgIGJpbmFyeSBwYWNrZXRzIGlmIGJvdGggRVhJ IGNvbXByZXNzZWQgY2hhbm5lbHMgaGF2ZSBleGFjdGx5IHRoZSBzYW1lIHNldHVwLiBJZiBhbnkg cGFyYW1ldGVyIGlzIGRpZmZlcmVudCwgdGhlIHNlcnZlciBNVVNUIGFsd2F5cyByZWNvbXByZXNz DQogICAgICAgICAgICAgICAgcGFja2V0cyBzZW50IHRocm91Z2ggaXQuDQogICAgICAgICAgICA8 L3A+DQogICAgICAgICAgICA8cCBjbGFzcz0iIiBzdHlsZT0iIj4NCiAgICAgICAgICAgICAgICBT aW5jZSB0aGUgc2VydmVyIGFsd2F5cyBuZWVkcyB0byBkZWNvbXByZXNzIGluY29taW5nIEVYSSBj b21wcmVzc2VkIHBhY2tldHMgdG8gZGVjb2RlIGhlYWRlcnMsIG9taXR0aW5nIHRoZSBjb21wcmVz c2lvbiBwYXJ0IG1pZ2h0IHNhdmUgdGhlIHNlcnZlcg0KICAgICAgICAgICAgICAgIHNvbWUgcHJv Y2Vzc2luZyBwb3dlciwgYnV0IG5vdCBhbGwuIE5vdGUgdGhhdCwgaW4gc29tZSBuZXR3b3JrcyBp dCBtaWdodCBiZSBjb21tb24gdXNpbmcgc2ltaWxhciBjb21wcmVzc2lvbiBzZXR0aW5ncywgd2hp bGUgaW4gb3RoZXJzIGRpZmZlcmVudCBjb21wcmVzc2lvbiANCiAgICAgICAgICAgICAgICBzZXR0 aW5ncyBhcmUgbW9zdCBjb21tb24uDQogICAgICAgICAgICA8L3A+DQogICAgICAgIDwvZGl2Pg0K ICAgIDxoMj40Lg0KICAgICAgIDxhIG5hbWU9InNlY3VyaXR5Ij5TZWN1cml0eSBDb25zaWRlcmF0 aW9uczwvYT48L2gyPg0KICAgICAgICA8cCBjbGFzcz0iIiBzdHlsZT0iIj4NCiAgICAgICAgICAg IE5vdGUgdGhhdCBFWEkgY29tcHJlc3NlZCBpbmZvcm1hdGlvbiwgZXZlbiB0aG91Z2ggaXQgaXMg aGFyZCB0byBkZWNvZGUgYnkgaHVtYW5zLCBpcyBieSBubyBtZWFucyBlbmNyeXB0ZWQuIElmIHNl bnNpdGl2ZSBkYXRhIGlzIHRvIGJlIHNlbnQgb3ZlciBhbiBFWEkgY29tcHJlc3NlZA0KICAgICAg ICAgICAgY2hhbm5lbCwgZW5jcnlwdGlvbiBzaG91bGQgYmUgY29uc2lkZXJlZCBhcyB3ZWxsLg0K ICAgICAgICA8L3A+DQogICAgPGgyPjUuDQogICAgICAgPGEgbmFtZT0iaWFuYSI+SUFOQSBDb25z aWRlcmF0aW9uczwvYT48L2gyPg0KICAgICAgICA8cCBjbGFzcz0iIiBzdHlsZT0iIj5UaGlzIGRv Y3VtZW50IHJlcXVpcmVzIG5vIGludGVyYWN0aW9uIHdpdGggdGhlIDxzcGFuIGNsYXNzPSJyZWYi IHN0eWxlPSIiPjxhIGhyZWY9Imh0dHA6Ly93d3cuaWFuYS5vcmcvIj5JbnRlcm5ldCBBc3NpZ25l ZCBOdW1iZXJzIEF1dGhvcml0eSAoSUFOQSk8L2E+PC9zcGFuPiAgWzxhIGhyZWY9IiNudC1JRDBF UU5BQyI+MzwvYT5dLjwvcD4NCiAgICA8aDI+Ni4NCiAgICAgICA8YSBuYW1lPSJyZWdpc3RyYXIi PlhNUFAgUmVnaXN0cmFyIENvbnNpZGVyYXRpb25zPC9hPjwvaDI+DQogICAgICAgIDxwIGNsYXNz PSIiIHN0eWxlPSIiPlJFUVVJUkVELjwvcD4NCiAgICAgICAgDQogICAgPGgyPjcuDQogICAgICAg PGEgbmFtZT0ic2NoZW1hIj5YTUwgU2NoZW1hPC9hPjwvaDI+DQogICAgICAgIDxwIGNsYXNzPSJj YXB0aW9uIj4NCiAgICA8L3A+DQogICAgPGRpdiBjbGFzcz0iaW5kZW50Ij4NCiAgICAgIDxwcmUg Y2xhc3M9InByZXR0eXByaW50Ij4NCiAgICAgICAgICAgIA0KJmx0Oz94bWwgdmVyc2lvbj0nMS4w JyBlbmNvZGluZz0nVVRGLTgnPyZndDsNCiZsdDt4czpzY2hlbWENCiAgICB4bWxuczp4cz0naHR0 cDovL3d3dy53My5vcmcvMjAwMS9YTUxTY2hlbWEnDQogICAgdGFyZ2V0TmFtZXNwYWNlPSdodHRw Oi8vamFiYmVyLm9yZy9wcm90b2NvbC9jb21wcmVzcy9leGknDQogICAgeG1sbnM9J2h0dHA6Ly9q YWJiZXIub3JnL3Byb3RvY29sL2NvbXByZXNzL2V4aScNCiAgICBlbGVtZW50Rm9ybURlZmF1bHQ9 J3F1YWxpZmllZCcmZ3Q7DQogICAgDQogICAgJmx0O3hzOmVsZW1lbnQgbmFtZT0nc2V0dXAnIHR5 cGU9J1NldHVwJy8mZ3Q7DQogICAgJmx0O3hzOmVsZW1lbnQgbmFtZT0nc2V0dXBSZXNwb25zZScg dHlwZT0nU2V0dXBSZXNwb25zZScvJmd0Ow0KIA0KICAgICAgICAmbHQ7eHM6Y29tcGxleFR5cGUg bmFtZT0nU2V0dXAnJmd0Ow0KICAgICAgICAmbHQ7eHM6Y2hvaWNlIG1pbk9jY3Vycz0nMCcgbWF4 T2NjdXJzPSd1bmJvdW5kZWQnJmd0Ow0KICAgICAgICAgICAgJmx0O3hzOmVsZW1lbnQgbmFtZT0n c2NoZW1hJyB0eXBlPSdTY2hlbWEnLyZndDsNCiAgICAgICAgICAgICZsdDt4czplbGVtZW50IG5h bWU9J2RhdGF0eXBlUmVwcmVzZW50YXRpb25NYXAnIHR5cGU9J0RhdGF0eXBlUmVwcmVzZW50YXRp b25NYXAnLyZndDsNCiAgICAgICAgJmx0Oy94czpjaG9pY2UmZ3Q7DQogICAgICAgICZsdDt4czph dHRyaWJ1dGVHcm91cCByZWY9J09wdGlvbnMnLyZndDsNCiAgICAmbHQ7L3hzOmNvbXBsZXhUeXBl Jmd0Ow0KIA0KICAgICZsdDt4czpjb21wbGV4VHlwZSBuYW1lPSdTZXR1cFJlc3BvbnNlJyZndDsN CiAgICAgICAgJmx0O3hzOmNvbXBsZXhDb250ZW50Jmd0Ow0KICAgICAgICAgICAgJmx0O3hzOmV4 dGVuc2lvbiBiYXNlPSdTZXR1cCcmZ3Q7DQogICAgICAgICAgICAgICAgJmx0O3hzOmNob2ljZSBt aW5PY2N1cnM9JzAnIG1heE9jY3Vycz0ndW5ib3VuZGVkJyZndDsNCiAgICAgICAgICAgICAgICAg ICAgJmx0O3hzOmVsZW1lbnQgbmFtZT0nbWlzc2luZ1NjaGVtYScgdHlwZT0nU2NoZW1hJy8mZ3Q7 DQogICAgICAgICAgICAgICAgJmx0Oy94czpjaG9pY2UmZ3Q7DQogICAgICAgICAgICAgICAgJmx0 O3hzOmF0dHJpYnV0ZSBuYW1lPSdhZ3JlZW1lbnQnIHR5cGU9J3hzOmJvb2xlYW4nIHVzZT0nb3B0 aW9uYWwnIGRlZmF1bHQ9J2ZhbHNlJy8mZ3Q7DQogICAgICAgICAgICAmbHQ7L3hzOmV4dGVuc2lv biZndDsNCiAgICAgICAgJmx0Oy94czpjb21wbGV4Q29udGVudCZndDsNCiAgICAmbHQ7L3hzOmNv bXBsZXhUeXBlJmd0Ow0KIA0KICAgICZsdDt4czpjb21wbGV4VHlwZSBuYW1lPSdTY2hlbWEnJmd0 Ow0KICAgICAgICAmbHQ7eHM6YXR0cmlidXRlIG5hbWU9J25zJyB0eXBlPSd4czpzdHJpbmcnIHVz ZT0ncmVxdWlyZWQnLyZndDsNCiAgICAgICAgJmx0O3hzOmF0dHJpYnV0ZSBuYW1lPSdieXRlcycg dHlwZT0neHM6cG9zaXRpdmVJbnRlZ2VyJyB1c2U9J3JlcXVpcmVkJy8mZ3Q7DQogICAgICAgICZs dDt4czphdHRyaWJ1dGUgbmFtZT0nbWQ1SGFzaCcgdHlwZT0nTUQ1SGFzaCcgdXNlPSdyZXF1aXJl ZCcvJmd0Ow0KICAgICZsdDsveHM6Y29tcGxleFR5cGUmZ3Q7DQogDQogICAgJmx0O3hzOmNvbXBs ZXhUeXBlIG5hbWU9J0RhdGF0eXBlUmVwcmVzZW50YXRpb25NYXAnJmd0Ow0KICAgICAgICAmbHQ7 eHM6YXR0cmlidXRlIG5hbWU9J3R5cGUnIHR5cGU9J3hzOnN0cmluZycgdXNlPSdyZXF1aXJlZCcv Jmd0Ow0KICAgICAgICAmbHQ7eHM6YXR0cmlidXRlIG5hbWU9J3JlcHJlc2VudEFzJyB0eXBlPSd4 czpzdHJpbmcnIHVzZT0ncmVxdWlyZWQnLyZndDsNCiAgICAmbHQ7L3hzOmNvbXBsZXhUeXBlJmd0 Ow0KIA0KICAgICZsdDt4czphdHRyaWJ1dGVHcm91cCBuYW1lPSdPcHRpb25zJyZndDsNCiAgICAg ICAgJmx0O3hzOmF0dHJpYnV0ZSBuYW1lPSd2ZXJzaW9uJyB0eXBlPSd4czpwb3NpdGl2ZUludGVn ZXInIHVzZT0nb3B0aW9uYWwnIGRlZmF1bHQ9JzEnLyZndDsNCiAgICAgICAgJmx0O3hzOmF0dHJp YnV0ZSBuYW1lPSdhbGlnbm1lbnQnIHR5cGU9J0FsaWdubWVudCcgdXNlPSdvcHRpb25hbCcgZGVm YXVsdD0nYml0LXBhY2tlZCcmZ3Q7DQogICAgICAgICAgICAmbHQ7eHM6YW5ub3RhdGlvbiZndDsN CiAgICAgICAgICAgICAgICAmbHQ7eHM6ZG9jdW1lbnRhdGlvbiZndDtUaGUgYWxpZ25tZW50IG9w dGlvbiBpcyB1c2VkIHRvIGNvbnRyb2wgdGhlIGFsaWdubWVudCBvZiBldmVudCBjb2RlcyBhbmQg Y29udGVudCBpdGVtcy4gDQogICAgICAgICAgICAgICAgVGhlIHZhbHVlIGlzIG9uZSBvZiBiaXQt cGFja2VkLCBieXRlLWFsaWdubWVudCBvciBwcmUtY29tcHJlc3Npb24sIG9mIHdoaWNoIGJpdC1w YWNrZWQgaXMgdGhlIGRlZmF1bHQgdmFsdWUgDQogICAgICAgICAgICAgICAgYXNzdW1lZCB3aGVu IHRoZSAiYWxpZ25tZW50IiBlbGVtZW50IGlzIGFic2VudCBpbiB0aGUgRVhJIE9wdGlvbnMgZG9j dW1lbnQuIFRoZSBvcHRpb24gdmFsdWVzIGJ5dGUtYWxpZ25tZW50IA0KICAgICAgICAgICAgICAg IGFuZCBwcmUtY29tcHJlc3Npb24gYXJlIGVmZmVjdGVkIHdoZW4gImJ5dGUiIGFuZCAicHJlLWNv bXByZXNzIiBlbGVtZW50cyBhcmUgcHJlc2VudCBpbiB0aGUgRVhJIE9wdGlvbnMgDQogICAgICAg ICAgICAgICAgZG9jdW1lbnQsIHJlc3BlY3RpdmVseS4gV2hlbiB0aGUgdmFsdWUgb2YgY29tcHJl c3Npb24gb3B0aW9uIGlzIHNldCB0byB0cnVlLCBhbGlnbm1lbnQgb2YgdGhlIEVYSSBCb2R5IGlz IA0KICAgICAgICAgICAgICAgIGdvdmVybmVkIGJ5IHRoZSBydWxlcyBzcGVjaWZpZWQgaW4gOS4g RVhJIENvbXByZXNzaW9uIGluc3RlYWQgb2YgdGhlIGFsaWdubWVudCBvcHRpb24gdmFsdWUuIFRo ZSAiYWxpZ25tZW50IiANCiAgICAgICAgICAgICAgICBlbGVtZW50IE1VU1QgTk9UIGFwcGVhciBp biBhbiBFWEkgb3B0aW9ucyBkb2N1bWVudCB3aGVuIHRoZSAiY29tcHJlc3Npb24iIGVsZW1lbnQg aXMgcHJlc2VudC4mbHQ7L3hzOmRvY3VtZW50YXRpb24mZ3Q7DQogICAgICAgICAgICAmbHQ7L3hz OmFubm90YXRpb24mZ3Q7DQogICAgICAgICZsdDsveHM6YXR0cmlidXRlJmd0Ow0KICAgICAgICAm bHQ7eHM6YXR0cmlidXRlIG5hbWU9J2NvbXByZXNzaW9uJyB0eXBlPSd4czpib29sZWFuJyB1c2U9 J29wdGlvbmFsJyBkZWZhdWx0PSdmYWxzZScmZ3Q7DQogICAgICAgICAgICAmbHQ7eHM6YW5ub3Rh dGlvbiZndDsNCiAgICAgICAgICAgICAgICAmbHQ7eHM6ZG9jdW1lbnRhdGlvbiZndDtUaGUgY29t cHJlc3Npb24gb3B0aW9uIGlzIGEgQm9vbGVhbiB1c2VkIHRvIGluY3JlYXNlIGNvbXBhY3RuZXNz IHVzaW5nIGFkZGl0aW9uYWwgDQogICAgICAgICAgICAgICAgY29tcHV0YXRpb25hbCByZXNvdXJj ZXMuIFRoZSBkZWZhdWx0IHZhbHVlICJmYWxzZSIgaXMgYXNzdW1lZCB3aGVuIHRoZSAiY29tcHJl c3Npb24iIGVsZW1lbnQgaXMgYWJzZW50IGluIA0KICAgICAgICAgICAgICAgIHRoZSBFWEkgT3B0 aW9ucyBkb2N1bWVudCB3aGVyZWFzIGl0cyBwcmVzZW5jZSBkZW5vdGVzIHRoZSB2YWx1ZSAidHJ1 ZSIuIFdoZW4gc2V0IHRvIHRydWUsIHRoZSBldmVudCBjb2RlcyANCiAgICAgICAgICAgICAgICBh bmQgYXNzb2NpYXRlZCBjb250ZW50IGFyZSBjb21wcmVzc2VkIGFjY29yZGluZyB0byA5LiBFWEkg Q29tcHJlc3Npb24gcmVnYXJkbGVzcyBvZiB0aGUgYWxpZ25tZW50IG9wdGlvbiANCiAgICAgICAg ICAgICAgICB2YWx1ZS4gQXMgbWVudGlvbmVkIGFib3ZlLCB0aGUgImNvbXByZXNzaW9uIiBlbGVt ZW50IE1VU1QgTk9UIGFwcGVhciBpbiBhbiBFWEkgb3B0aW9ucyBkb2N1bWVudCB3aGVuIHRoZSAN CiAgICAgICAgICAgICAgICAiYWxpZ25tZW50IiBlbGVtZW50IGlzIHByZXNlbnQuJmx0Oy94czpk b2N1bWVudGF0aW9uJmd0Ow0KICAgICAgICAgICAgJmx0Oy94czphbm5vdGF0aW9uJmd0Ow0KICAg ICAgICAmbHQ7L3hzOmF0dHJpYnV0ZSZndDsNCiAgICAgICAgJmx0O3hzOmF0dHJpYnV0ZSBuYW1l PSdzdHJpY3QnIHR5cGU9J3hzOmJvb2xlYW4nIHVzZT0nb3B0aW9uYWwnIGRlZmF1bHQ9J2ZhbHNl JyZndDsNCiAgICAgICAgICAgICZsdDt4czphbm5vdGF0aW9uJmd0Ow0KICAgICAgICAgICAgICAg ICZsdDt4czpkb2N1bWVudGF0aW9uJmd0O1RoZSBzdHJpY3Qgb3B0aW9uIGlzIGEgQm9vbGVhbiB1 c2VkIHRvIGluY3JlYXNlIGNvbXBhY3RuZXNzIGJ5IHVzaW5nIGEgc3RyaWN0IA0KICAgICAgICAg ICAgICAgIGludGVycHJldGF0aW9uIG9mIHRoZSBzY2hlbWFzIGFuZCBvbWl0dGluZyBwcmVzZXJ2 YXRpb24gb2YgY2VydGFpbiBpdGVtcywgc3VjaCBhcyBjb21tZW50cywgcHJvY2Vzc2luZyANCiAg ICAgICAgICAgICAgICBpbnN0cnVjdGlvbnMgYW5kIG5hbWVzcGFjZSBwcmVmaXhlcy4gVGhlIGRl ZmF1bHQgdmFsdWUgImZhbHNlIiBpcyBhc3N1bWVkIHdoZW4gdGhlICJzdHJpY3QiIGVsZW1lbnQg aXMgDQogICAgICAgICAgICAgICAgYWJzZW50IGluIHRoZSBFWEkgT3B0aW9ucyBkb2N1bWVudCB3 aGVyZWFzIGl0cyBwcmVzZW5jZSBkZW5vdGVzIHRoZSB2YWx1ZSAidHJ1ZSIuIFdoZW4gc2V0IHRv IHRydWUsIHRob3NlIA0KICAgICAgICAgICAgICAgIHByb2R1Y3Rpb25zIHRoYXQgaGF2ZSBOUywg Q00sIFBJLCBFUiwgYW5kIFNDIHRlcm1pbmFsIHN5bWJvbHMgYXJlIG9taXR0ZWQgZnJvbSB0aGUg RVhJIGdyYW1tYXJzLCBhbmQgDQogICAgICAgICAgICAgICAgc2NoZW1hLWluZm9ybWVkIGVsZW1l bnQgYW5kIHR5cGUgZ3JhbW1hcnMgYXJlIHJlc3RyaWN0ZWQgdG8gb25seSBwZXJtaXQgaXRlbXMg ZGVjbGFyZWQgaW4gdGhlIHNjaGVtYXMuIA0KICAgICAgICAgICAgICAgIEEgbm90ZSBpbiBzZWN0 aW9uIDguNS40LjQuMiBBZGRpbmcgUHJvZHVjdGlvbnMgd2hlbiBTdHJpY3QgaXMgVHJ1ZSBkZXNj cmliZXMgc29tZSBhZGRpdGlvbmFsIHJlc3RyaWN0aW9ucyANCiAgICAgICAgICAgICAgICBjb25z ZXF1ZW50aWFsIG9mIHRoZSB1c2Ugb2YgdGhpcyBvcHRpb24uIFRoZSAic3RyaWN0IiBlbGVtZW50 IE1VU1QgTk9UIGFwcGVhciBpbiBhbiBFWEkgb3B0aW9ucyBkb2N1bWVudCANCiAgICAgICAgICAg ICAgICB3aGVuIG9uZSBvZiAiZHRkIiwgInByZWZpeGVzIiwgImNvbW1lbnRzIiwgInBpcyIgb3Ig InNlbGZDb250YWluZWQiIGVsZW1lbnQgaXMgcHJlc2VudCBpbiB0aGUgc2FtZSANCiAgICAgICAg ICAgICAgICBvcHRpb25zIGRvY3VtZW50LiZsdDsveHM6ZG9jdW1lbnRhdGlvbiZndDsNCiAgICAg ICAgICAgICZsdDsveHM6YW5ub3RhdGlvbiZndDsNCiAgICAgICAgJmx0Oy94czphdHRyaWJ1dGUm Z3Q7DQogICAgICAgICZsdDt4czphdHRyaWJ1dGUgbmFtZT0ncHJlc2VydmVDb21tZW50cycgdHlw ZT0neHM6Ym9vbGVhbicgdXNlPSdvcHRpb25hbCcgZGVmYXVsdD0nZmFsc2UnJmd0Ow0KICAgICAg ICAgICAgJmx0O3hzOmFubm90YXRpb24mZ3Q7DQogICAgICAgICAgICAgICAgJmx0O3hzOmRvY3Vt ZW50YXRpb24mZ3Q7Q29tbWVudHMgYXJlIHByZXNlcnZlZC4gTXVzdCBub3QgYmUgdXNlZCB0b2dl dGhlciB3aXRoIHRoZSBzdHJpY3Qgb3B0aW9uLiZsdDsveHM6ZG9jdW1lbnRhdGlvbiZndDsNCiAg ICAgICAgICAgICZsdDsveHM6YW5ub3RhdGlvbiZndDsNCiAgICAgICAgJmx0Oy94czphdHRyaWJ1 dGUmZ3Q7DQogICAgICAgICZsdDt4czphdHRyaWJ1dGUgbmFtZT0ncHJlc2VydmVQSXMnIHR5cGU9 J3hzOmJvb2xlYW4nIHVzZT0nb3B0aW9uYWwnIGRlZmF1bHQ9J2ZhbHNlJyZndDsNCiAgICAgICAg ICAgICZsdDt4czphbm5vdGF0aW9uJmd0Ow0KICAgICAgICAgICAgICAgICZsdDt4czpkb2N1bWVu dGF0aW9uJmd0O1Byb2Nlc3NpbmcgaW5zdHJ1Y3Rpb25zIGFyZSBwcmVzZXJ2ZWQuIE11c3Qgbm90 IGJlIHVzZWQgdG9nZXRoZXIgd2l0aCB0aGUgc3RyaWN0IA0KICAgICAgICAgICAgICAgIG9wdGlv bi4mbHQ7L3hzOmRvY3VtZW50YXRpb24mZ3Q7DQogICAgICAgICAgICAmbHQ7L3hzOmFubm90YXRp b24mZ3Q7DQogICAgICAgICZsdDsveHM6YXR0cmlidXRlJmd0Ow0KICAgICAgICAmbHQ7eHM6YXR0 cmlidXRlIG5hbWU9J3ByZXNlcnZlRFREJyB0eXBlPSd4czpib29sZWFuJyB1c2U9J29wdGlvbmFs JyBkZWZhdWx0PSdmYWxzZScmZ3Q7DQogICAgICAgICAgICAmbHQ7eHM6YW5ub3RhdGlvbiZndDsN CiAgICAgICAgICAgICAgICAmbHQ7eHM6ZG9jdW1lbnRhdGlvbiZndDtEVEQgaXMgcHJlc2VydmVk LiBNdXN0IG5vdCBiZSB1c2VkIHRvZ2V0aGVyIHdpdGggdGhlIHN0cmljdCBvcHRpb24uJmx0Oy94 czpkb2N1bWVudGF0aW9uJmd0Ow0KICAgICAgICAgICAgJmx0Oy94czphbm5vdGF0aW9uJmd0Ow0K ICAgICAgICAmbHQ7L3hzOmF0dHJpYnV0ZSZndDsNCiAgICAgICAgJmx0O3hzOmF0dHJpYnV0ZSBu YW1lPSdwcmVzZXJ2ZVByZWZpeGVzJyB0eXBlPSd4czpib29sZWFuJyB1c2U9J29wdGlvbmFsJyBk ZWZhdWx0PSdmYWxzZScmZ3Q7DQogICAgICAgICAgICAmbHQ7eHM6YW5ub3RhdGlvbiZndDsNCiAg ICAgICAgICAgICAgICAmbHQ7eHM6ZG9jdW1lbnRhdGlvbiZndDtQcmVmaXhlcyBhcmUgcHJlc2Vy dmVkLiBNdXN0IG5vdCBiZSB1c2VkIHRvZ2V0aGVyIHdpdGggdGhlIHN0cmljdCBvcHRpb24uJmx0 Oy94czpkb2N1bWVudGF0aW9uJmd0Ow0KICAgICAgICAgICAgJmx0Oy94czphbm5vdGF0aW9uJmd0 Ow0KICAgICAgICAmbHQ7L3hzOmF0dHJpYnV0ZSZndDsNCiAgICAgICAgJmx0O3hzOmF0dHJpYnV0 ZSBuYW1lPSdwcmVzZXJ2ZUxleGljYWwnIHR5cGU9J3hzOmJvb2xlYW4nIHVzZT0nb3B0aW9uYWwn IGRlZmF1bHQ9J2ZhbHNlJyZndDsNCiAgICAgICAgICAgICZsdDt4czphbm5vdGF0aW9uJmd0Ow0K ICAgICAgICAgICAgICAgICZsdDt4czpkb2N1bWVudGF0aW9uJmd0O0xleGljYWwgZm9ybSBvZiBl bGVtZW50IGFuZCBhdHRyaWJ1dGUgdmFsdWVzIGNhbiBiZSBwcmVzZXJ2ZWQgaW4gdmFsdWUgY29u dGVudCBpdGVtcy4gDQogICAgICAgICAgICAgICAgQ2FuIGJlIHVzZWQgdG9nZXRoZXIgd2l0aCB0 aGUgc3RyaWN0IG9wdGlvbi4mbHQ7L3hzOmRvY3VtZW50YXRpb24mZ3Q7DQogICAgICAgICAgICAm bHQ7L3hzOmFubm90YXRpb24mZ3Q7DQogICAgICAgICZsdDsveHM6YXR0cmlidXRlJmd0Ow0KICAg ICAgICAmbHQ7eHM6YXR0cmlidXRlIG5hbWU9J3NlbGZDb250YWluZWQnIHR5cGU9J3hzOmJvb2xl YW4nIHVzZT0nb3B0aW9uYWwnIGRlZmF1bHQ9J2ZhbHNlJyZndDsNCiAgICAgICAgICAgICZsdDt4 czphbm5vdGF0aW9uJmd0Ow0KICAgICAgICAgICAgICAgICZsdDt4czpkb2N1bWVudGF0aW9uJmd0 O1RoZSBzZWxmQ29udGFpbmVkIG9wdGlvbiBpcyBhIEJvb2xlYW4gdXNlZCB0byBlbmFibGUgdGhl IHVzZSBvZiBzZWxmLWNvbnRhaW5lZCBlbGVtZW50cyANCiAgICAgICAgICAgICAgICBpbiB0aGUg RVhJIHN0cmVhbS4gU2VsZi1jb250YWluZWQgZWxlbWVudHMgbWF5IGJlIHJlYWQgaW5kZXBlbmRl bnRseSBmcm9tIHRoZSByZXN0IG9mIHRoZSBFWEkgYm9keSwgDQogICAgICAgICAgICAgICAgYWxs b3dpbmcgdGhlbSB0byBiZSBpbmRleGVkIGZvciByYW5kb20gYWNjZXNzLiBUaGUgInNlbGZDb250 YWluZWQiIGVsZW1lbnQgTVVTVCBOT1QgYXBwZWFyIGluIGFuIEVYSSANCiAgICAgICAgICAgICAg ICBvcHRpb25zIGRvY3VtZW50IHdoZW4gb25lIG9mICJjb21wcmVzc2lvbiIsICJwcmUtY29tcHJl c3Npb24iIG9yICJzdHJpY3QiIGVsZW1lbnRzIGFyZSBwcmVzZW50IGluIHRoZSANCiAgICAgICAg ICAgICAgICBzYW1lIG9wdGlvbnMgZG9jdW1lbnQuIFRoZSBkZWZhdWx0IHZhbHVlICJmYWxzZSIg aXMgYXNzdW1lZCB3aGVuIHRoZSAic2VsZkNvbnRhaW5lZCIgZWxlbWVudCBpcyBhYnNlbnQgDQog ICAgICAgICAgICAgICAgZnJvbSB0aGUgRVhJIE9wdGlvbnMgZG9jdW1lbnQgd2hlcmVhcyBpdHMg cHJlc2VuY2UgZGVub3RlcyB0aGUgdmFsdWUgInRydWUiLiZsdDsveHM6ZG9jdW1lbnRhdGlvbiZn dDsNCiAgICAgICAgICAgICZsdDsveHM6YW5ub3RhdGlvbiZndDsNCiAgICAgICAgJmx0Oy94czph dHRyaWJ1dGUmZ3Q7DQogICAgICAgICZsdDt4czphdHRyaWJ1dGUgbmFtZT0nYmxvY2tTaXplJyB0 eXBlPSd4czpwb3NpdGl2ZUludGVnZXInIHVzZT0nb3B0aW9uYWwnIGRlZmF1bHQ9JzEwMDAwMDAn Jmd0Ow0KICAgICAgICAgICAgJmx0O3hzOmFubm90YXRpb24mZ3Q7DQogICAgICAgICAgICAgICAg Jmx0O3hzOmRvY3VtZW50YXRpb24mZ3Q7VGhlIGJsb2NrU2l6ZSBvcHRpb24gc3BlY2lmaWVzIHRo ZSBibG9jayBzaXplIHVzZWQgZm9yIEVYSSBjb21wcmVzc2lvbi4gV2hlbiB0aGUgDQogICAgICAg ICAgICAgICAgImJsb2NrU2l6ZSIgZWxlbWVudCBpcyBhYnNlbnQgaW4gdGhlIEVYSSBPcHRpb25z IGRvY3VtZW50LCB0aGUgZGVmYXVsdCBibG9ja3NpemUgb2YgMSwwMDAsMDAwIGlzIHVzZWQuIA0K ICAgICAgICAgICAgICAgIFRoZSBkZWZhdWx0IGJsb2NrU2l6ZSBpcyBpbnRlbnRpb25hbGx5IGxh cmdlIGJ1dCBjYW4gYmUgcmVkdWNlZCBmb3IgcHJvY2Vzc2luZyBsYXJnZSBkb2N1bWVudHMgb24g DQogICAgICAgICAgICAgICAgZGV2aWNlcyB3aXRoIGxpbWl0ZWQgbWVtb3J5LiZsdDsveHM6ZG9j dW1lbnRhdGlvbiZndDsNCiAgICAgICAgICAgICZsdDsveHM6YW5ub3RhdGlvbiZndDsNCiAgICAg ICAgJmx0Oy94czphdHRyaWJ1dGUmZ3Q7DQogICAgICAgICZsdDt4czphdHRyaWJ1dGUgbmFtZT0n dmFsdWVNYXhMZW5ndGgnIHR5cGU9J3hzOnBvc2l0aXZlSW50ZWdlcicgdXNlPSdvcHRpb25hbCcm Z3Q7DQogICAgICAgICAgICAmbHQ7eHM6YW5ub3RhdGlvbiZndDsNCiAgICAgICAgICAgICAgICAm bHQ7eHM6ZG9jdW1lbnRhdGlvbiZndDtUaGUgdmFsdWVNYXhMZW5ndGggb3B0aW9uIHNwZWNpZmll cyB0aGUgbWF4aW11bSBsZW5ndGggb2YgdmFsdWUgY29udGVudCBpdGVtcyB0byBiZSANCiAgICAg ICAgICAgICAgICBjb25zaWRlcmVkIGZvciBhZGRpdGlvbiB0byB0aGUgc3RyaW5nIHRhYmxlLiBU aGUgZGVmYXVsdCB2YWx1ZSAidW5ib3VuZGVkIiBpcyBhc3N1bWVkIHdoZW4gdGhlIA0KICAgICAg ICAgICAgICAgICJ2YWx1ZU1heExlbmd0aCIgZWxlbWVudCBpcyBhYnNlbnQgaW4gdGhlIEVYSSBP cHRpb25zIGRvY3VtZW50LiZsdDsveHM6ZG9jdW1lbnRhdGlvbiZndDsNCiAgICAgICAgICAgICZs dDsveHM6YW5ub3RhdGlvbiZndDsNCiAgICAgICAgJmx0Oy94czphdHRyaWJ1dGUmZ3Q7DQogICAg ICAgICZsdDt4czphdHRyaWJ1dGUgbmFtZT0ndmFsdWVQYXJ0aXRpb25DYXBhY2l0eScgdHlwZT0n eHM6cG9zaXRpdmVJbnRlZ2VyJyB1c2U9J29wdGlvbmFsJyZndDsNCiAgICAgICAgICAgICZsdDt4 czphbm5vdGF0aW9uJmd0Ow0KICAgICAgICAgICAgICAgICZsdDt4czpkb2N1bWVudGF0aW9uJmd0 O1RoZSB2YWx1ZVBhcnRpdGlvbkNhcGFjaXR5IG9wdGlvbiBzcGVjaWZpZXMgdGhlIG1heGltdW0g bnVtYmVyIG9mIHZhbHVlIGNvbnRlbnQgDQogICAgICAgICAgICAgICAgaXRlbXMgaW4gdGhlIHN0 cmluZyB0YWJsZSBhdCBhbnkgZ2l2ZW4gdGltZS4gVGhlIGRlZmF1bHQgdmFsdWUgInVuYm91bmRl ZCIgaXMgYXNzdW1lZCB3aGVuIHRoZSANCiAgICAgICAgICAgICAgICAidmFsdWVQYXJ0aXRpb25D YXBhY2l0eSIgZWxlbWVudCBpcyBhYnNlbnQgaW4gdGhlIEVYSSBPcHRpb25zIGRvY3VtZW50LiBT ZWN0aW9uIDcuMy4zIFBhcnRpdGlvbnMgDQogICAgICAgICAgICAgICAgT3B0aW1pemVkIGZvciBG cmVxdWVudCB1c2Ugb2YgU3RyaW5nIExpdGVyYWxzIHNwZWNpZmllcyB0aGUgYmVoYXZpb3Igb2Yg dGhlIHN0cmluZyB0YWJsZSB3aGVuIHRoaXMgDQogICAgICAgICAgICAgICAgY2FwYWNpdHkgaXMg cmVhY2hlZC4mbHQ7L3hzOmRvY3VtZW50YXRpb24mZ3Q7DQogICAgICAgICAgICAmbHQ7L3hzOmFu bm90YXRpb24mZ3Q7DQogICAgICAgICZsdDsveHM6YXR0cmlidXRlJmd0Ow0KICAgICAgICAmbHQ7 eHM6YXR0cmlidXRlIG5hbWU9J3Nlc3Npb25XaWRlQnVmZmVycycgdHlwZT0neHM6Ym9vbGVhbicg dXNlPSdvcHRpb25hbCcgZGVmYXVsdD0nZmFsc2UnJmd0Ow0KICAgICAgICAgICAgJmx0O3hzOmFu bm90YXRpb24mZ3Q7DQogICAgICAgICAgICAgICAgJmx0O3hzOmRvY3VtZW50YXRpb24mZ3Q7SWYg c2V0IHRvIHRydWUsIGFsbCBidWZmZXJzLCBzdHJpbmcgdGFibGVzLCBldGMuIHdpbGwgYmUgbWFp bnRhaW5lZCBkdXJpbmcgdGhlIA0KICAgICAgICAgICAgICAgIGVudGlyZSBzZXNzaW9uLiBUaGlz IG1heSBpbXByb3ZlIHBlcmZvcm1hbmNlIGR1cmluZyB0aW1lIHNpbmNlIHN0cmluZ3MgY2FuIGJl IG9taXR0ZWQgaW4gdGhlIA0KICAgICAgICAgICAgICAgIGNvbXByZXNzZWQgYmluYXJ5IHN0cmVh bSwgYnV0IGl0IG1pZ2h0IGFsc28gaW4gc29tZSBjYXNlcyBkZWdyYWRlIHBlcmZvcm1hbmNlIHNp bmNlIG1vcmUgb3B0aW9ucyANCiAgICAgICAgICAgICAgICBhcmUgYXZhaWxhYmxlIGluIHRoZSB0 YWJsZXMsIHJlcXVpcmluZyBtb3JlIGJpdHMgdG8gZW5jb2RlIHN0cmluZ3MuIFRoZSBkZWZhdWx0 IHZhbHVlIGlzIGZhbHNlLCANCiAgICAgICAgICAgICAgICBtZWFuaW5nIHRoYXQgYnVmZmVycywg c3RyaW5nIHRhYmxlcywgZXRjLiwgYXJlIGNsZWFyZWQgYmV0d2VlbiBlYWNoIHN0YW56YS4mbHQ7 L3hzOmRvY3VtZW50YXRpb24mZ3Q7DQogICAgICAgICAgICAmbHQ7L3hzOmFubm90YXRpb24mZ3Q7 DQogICAgICAgICZsdDsveHM6YXR0cmlidXRlJmd0Ow0KICAgICZsdDsveHM6YXR0cmlidXRlR3Jv dXAmZ3Q7DQogDQogICAgJmx0O3hzOnNpbXBsZVR5cGUgbmFtZT0nTUQ1SGFzaCcmZ3Q7DQogICAg ICAgICZsdDt4czpyZXN0cmljdGlvbiBiYXNlPSd4czpzdHJpbmcnJmd0Ow0KICAgICAgICAgICAg Jmx0O3hzOnBhdHRlcm4gdmFsdWU9J15bMC05YS1mXXszMn0kJy8mZ3Q7DQogICAgICAgICZsdDsv eHM6cmVzdHJpY3Rpb24mZ3Q7DQogICAgJmx0Oy94czpzaW1wbGVUeXBlJmd0Ow0KIA0KICAgICZs dDt4czpzaW1wbGVUeXBlIG5hbWU9J0FsaWdubWVudCcmZ3Q7DQogICAgICAgICZsdDt4czpyZXN0 cmljdGlvbiBiYXNlPSd4czpzdHJpbmcnJmd0Ow0KICAgICAgICAgICAgJmx0O3hzOmVudW1lcmF0 aW9uIHZhbHVlPSdiaXQtcGFja2VkJyZndDsNCiAgICAgICAgICAgICAgICAmbHQ7eHM6YW5ub3Rh dGlvbiZndDsNCiAgICAgICAgICAgICAgICAgICAgJmx0O3hzOmRvY3VtZW50YXRpb24mZ3Q7VGhl IGFsaWdubWVudCBvcHRpb24gdmFsdWUgYml0LXBhY2tlZCBpbmRpY2F0ZXMgdGhhdCB0aGUgZXZl bnQgY29kZXMgYW5kIGFzc29jaWF0ZWQgDQogICAgICAgICAgICAgICAgICAgIGNvbnRlbnQgYXJl IHBhY2tlZCBpbiBiaXRzIHdpdGhvdXQgYW55IHBhZGRpbmcgaW4tYmV0d2Vlbi4mbHQ7L3hzOmRv Y3VtZW50YXRpb24mZ3Q7DQogICAgICAgICAgICAgICAgJmx0Oy94czphbm5vdGF0aW9uJmd0Ow0K ICAgICAgICAgICAgJmx0Oy94czplbnVtZXJhdGlvbiZndDsNCiAgICAgICAgICAgICZsdDt4czpl bnVtZXJhdGlvbiB2YWx1ZT0nYnl0ZS1hbGlnbm1lbnQnJmd0Ow0KICAgICAgICAgICAgICAgICZs dDt4czphbm5vdGF0aW9uJmd0Ow0KICAgICAgICAgICAgICAgICAgICAmbHQ7eHM6ZG9jdW1lbnRh dGlvbiZndDtUaGUgYWxpZ25tZW50IG9wdGlvbiB2YWx1ZSBieXRlLWFsaWdubWVudCBpbmRpY2F0 ZXMgdGhhdCB0aGUgZXZlbnQgY29kZXMgYW5kIA0KICAgICAgICAgICAgICAgICAgICBhc3NvY2lh dGVkIGNvbnRlbnQgYXJlIGFsaWduZWQgb24gYnl0ZSBib3VuZGFyaWVzLiBXaGlsZSBieXRlLWFs aWdubWVudCBnZW5lcmFsbHkgcmVzdWx0cyBpbiBFWEkgDQogICAgICAgICAgICAgICAgICAgIHN0 cmVhbXMgb2YgbGFyZ2VyIHNpemVzIGNvbXBhcmVkIHdpdGggdGhlaXIgYml0LXBhY2tlZCBlcXVp dmFsZW50cywgYnl0ZS1hbGlnbm1lbnQgbWF5IHByb3ZpZGUgYSANCiAgICAgICAgICAgICAgICAg ICAgaGVscCBpbiBzb21lIHVzZSBjYXNlcyB0aGF0IGludm9sdmUgZnJlcXVlbnQgY29weWluZyBv ZiBsYXJnZSBhcnJheXMgb2Ygc2NhbGFyIGRhdGEgZGlyZWN0bHkgb3V0IA0KICAgICAgICAgICAg ICAgICAgICBvZiB0aGUgc3RyZWFtLiBJdCBjYW4gYWxzbyBtYWtlIGl0IHBvc3NpYmxlIHRvIHdv cmsgd2l0aCBkYXRhIGluLXBsYWNlIGFuZCBjYW4gbWFrZSBpdCBlYXNpZXIgdG8gDQogICAgICAg ICAgICAgICAgICAgIGRlYnVnIGVuY29kZWQgZGF0YSBieSBhbGxvd2luZyBpdGVtcyBvbiBhbGln bmVkIGJvdW5kYXJpZXMgdG8gYmUgZWFzaWx5IGxvY2F0ZWQgaW4gdGhlIHN0cmVhbS4mbHQ7L3hz OmRvY3VtZW50YXRpb24mZ3Q7DQogICAgICAgICAgICAgICAgJmx0Oy94czphbm5vdGF0aW9uJmd0 Ow0KICAgICAgICAgICAgJmx0Oy94czplbnVtZXJhdGlvbiZndDsNCiAgICAgICAgICAgICZsdDt4 czplbnVtZXJhdGlvbiB2YWx1ZT0ncHJlLWNvbXByZXNzaW9uJyZndDsNCiAgICAgICAgICAgICAg ICAmbHQ7eHM6YW5ub3RhdGlvbiZndDsNCiAgICAgICAgICAgICAgICAgICAgJmx0O3hzOmRvY3Vt ZW50YXRpb24mZ3Q7VGhlIGFsaWdubWVudCBvcHRpb24gdmFsdWUgcHJlLWNvbXByZXNzaW9uIGlu ZGljYXRlcyB0aGF0IGFsbCBzdGVwcyBpbnZvbHZlZCANCiAgICAgICAgICAgICAgICAgICAgaW4g Y29tcHJlc3Npb24gKHNlZSBzZWN0aW9uIDkuIEVYSSBDb21wcmVzc2lvbikgYXJlIHRvIGJlIGRv bmUgd2l0aCB0aGUgZXhjZXB0aW9uIG9mIHRoZSBmaW5hbCANCiAgICAgICAgICAgICAgICAgICAg c3RlcCBvZiBhcHBseWluZyB0aGUgREVGTEFURSBhbGdvcml0aG0uIFRoZSBwcmltYXJ5IHVzZSBj YXNlIG9mIHByZS1jb21wcmVzc2lvbiBpcyB0byBhdm9pZCBhIA0KICAgICAgICAgICAgICAgICAg ICBkdXBsaWNhdGUgY29tcHJlc3Npb24gc3RlcCB3aGVuIGNvbXByZXNzaW9uIGNhcGFiaWxpdHkg aXMgYnVpbHQgaW50byB0aGUgdHJhbnNwb3J0IHByb3RvY29sLiBJbiANCiAgICAgICAgICAgICAg ICAgICAgdGhpcyBjYXNlLCBwcmUtY29tcHJlc3Npb24ganVzdCBwcmVwYXJlcyB0aGUgc3RyZWFt IGZvciBsYXRlciBjb21wcmVzc2lvbi4mbHQ7L3hzOmRvY3VtZW50YXRpb24mZ3Q7DQogICAgICAg ICAgICAgICAgJmx0Oy94czphbm5vdGF0aW9uJmd0Ow0KICAgICAgICAgICAgJmx0Oy94czplbnVt ZXJhdGlvbiZndDsNCiAgICAgICAgJmx0Oy94czpyZXN0cmljdGlvbiZndDsNCiAgICAmbHQ7L3hz OnNpbXBsZVR5cGUmZ3Q7DQogDQogICAgJmx0O3hzOmVsZW1lbnQgbmFtZT0ndXBsb2FkU2NoZW1h JyB0eXBlPSd4czpiYXNlNjRCaW5hcnknLyZndDsNCiANCiAgICAmbHQ7eHM6ZWxlbWVudCBuYW1l PSdkb3dubG9hZFNjaGVtYScgdHlwZT0nRG93bmxvYWRTY2hlbWEnLyZndDsNCiAgICAmbHQ7eHM6 ZWxlbWVudCBuYW1lPSdkb3dubG9hZFNjaGVtYVJlc3BvbnNlJyB0eXBlPSdEb3dubG9hZFNjaGVt YVJlc3BvbnNlJy8mZ3Q7DQoNCiAgICAmbHQ7eHM6Y29tcGxleFR5cGUgbmFtZT0nRG93bmxvYWRT Y2hlbWEnJmd0Ow0KICAgICAgICAmbHQ7eHM6YXR0cmlidXRlIG5hbWU9J3VybCcgdHlwZT0neHM6 c3RyaW5nJyB1c2U9J3JlcXVpcmVkJy8mZ3Q7DQogICAgJmx0Oy94czpjb21wbGV4VHlwZSZndDsN CiAgDQogICAgJmx0O3hzOmNvbXBsZXhUeXBlIG5hbWU9J0Rvd25sb2FkU2NoZW1hUmVzcG9uc2Un Jmd0Ow0KICAgICAgICAmbHQ7eHM6Y29tcGxleENvbnRlbnQmZ3Q7DQogICAgICAgICAgICAmbHQ7 eHM6ZXh0ZW5zaW9uIGJhc2U9J0Rvd25sb2FkU2NoZW1hJyZndDsNCiAgICAgICAgICAgICAgICAm bHQ7eHM6Y2hvaWNlIG1pbk9jY3Vycz0nMCcgbWF4T2NjdXJzPScxJyZndDsNCiAgICAgICAgICAg ICAgICAgICAgJmx0O3hzOmVsZW1lbnQgbmFtZT0naHR0cEVycm9yJyZndDsNCiAgICAgICAgICAg ICAgICAgICAgICAgICZsdDt4czpjb21wbGV4VHlwZSZndDsNCiAgICAgICAgICAgICAgICAgICAg ICAgICAgICAmbHQ7eHM6YXR0cmlidXRlIG5hbWU9J2NvZGUnIHR5cGU9J3hzOnBvc2l0aXZlSW50 ZWdlcicgdXNlPSdyZXF1aXJlZCcvJmd0Ow0KICAgICAgICAgICAgICAgICAgICAgICAgICAgICZs dDt4czphdHRyaWJ1dGUgbmFtZT0nbWVzc2FnZScgdHlwZT0neHM6c3RyaW5nJyB1c2U9J3JlcXVp cmVkJy8mZ3Q7DQogICAgICAgICAgICAgICAgICAgICAgICAmbHQ7L3hzOmNvbXBsZXhUeXBlJmd0 Ow0KICAgICAgICAgICAgICAgICAgICAmbHQ7L3hzOmVsZW1lbnQmZ3Q7DQogICAgICAgICAgICAg ICAgICAgICZsdDt4czplbGVtZW50IG5hbWU9J2ludmFsaWRVcmwnJmd0Ow0KICAgICAgICAgICAg ICAgICAgICAgICAgJmx0O3hzOmNvbXBsZXhUeXBlJmd0Ow0KICAgICAgICAgICAgICAgICAgICAg ICAgICAgICZsdDt4czphdHRyaWJ1dGUgbmFtZT0nbWVzc2FnZScgdHlwZT0neHM6c3RyaW5nJyB1 c2U9J3JlcXVpcmVkJy8mZ3Q7DQogICAgICAgICAgICAgICAgICAgICAgICAmbHQ7L3hzOmNvbXBs ZXhUeXBlJmd0Ow0KICAgICAgICAgICAgICAgICAgICAmbHQ7L3hzOmVsZW1lbnQmZ3Q7DQogICAg ICAgICAgICAgICAgICAgICZsdDt4czplbGVtZW50IG5hbWU9J3RpbWVvdXQnJmd0Ow0KICAgICAg ICAgICAgICAgICAgICAgICAgJmx0O3hzOmNvbXBsZXhUeXBlJmd0Ow0KICAgICAgICAgICAgICAg ICAgICAgICAgICAgICZsdDt4czphdHRyaWJ1dGUgbmFtZT0nbWVzc2FnZScgdHlwZT0neHM6c3Ry aW5nJyB1c2U9J3JlcXVpcmVkJy8mZ3Q7DQogICAgICAgICAgICAgICAgICAgICAgICAmbHQ7L3hz OmNvbXBsZXhUeXBlJmd0Ow0KICAgICAgICAgICAgICAgICAgICAmbHQ7L3hzOmVsZW1lbnQmZ3Q7 DQogICAgICAgICAgICAgICAgICAgICZsdDt4czplbGVtZW50IG5hbWU9J2ludmFsaWRDb250ZW50 VHlwZScmZ3Q7DQogICAgICAgICAgICAgICAgICAgICAgICAmbHQ7eHM6Y29tcGxleFR5cGUmZ3Q7 DQogICAgICAgICAgICAgICAgICAgICAgICAgICAgJmx0O3hzOmF0dHJpYnV0ZSBuYW1lPSdjb250 ZW50VHlwZVJldHVybmVkJyB0eXBlPSd4czpzdHJpbmcnIHVzZT0ncmVxdWlyZWQnLyZndDsNCiAg ICAgICAgICAgICAgICAgICAgICAgICZsdDsveHM6Y29tcGxleFR5cGUmZ3Q7DQogICAgICAgICAg ICAgICAgICAgICZsdDsveHM6ZWxlbWVudCZndDsNCiAgICAgICAgICAgICAgICAgICAgJmx0O3hz OmVsZW1lbnQgbmFtZT0nZXJyb3InJmd0Ow0KICAgICAgICAgICAgICAgICAgICAgICAgJmx0O3hz OmNvbXBsZXhUeXBlJmd0Ow0KICAgICAgICAgICAgICAgICAgICAgICAgICAgICZsdDt4czphdHRy aWJ1dGUgbmFtZT0nbWVzc2FnZScgdHlwZT0neHM6c3RyaW5nJyB1c2U9J3JlcXVpcmVkJy8mZ3Q7 DQogICAgICAgICAgICAgICAgICAgICAgICAmbHQ7L3hzOmNvbXBsZXhUeXBlJmd0Ow0KICAgICAg ICAgICAgICAgICAgICAmbHQ7L3hzOmVsZW1lbnQmZ3Q7DQogICAgICAgICAgICAgICAgJmx0Oy94 czpjaG9pY2UmZ3Q7DQogICAgICAgICAgICAgICAgJmx0O3hzOmF0dHJpYnV0ZSBuYW1lPSdyZXN1 bHQnIHR5cGU9J3hzOmJvb2xlYW4nIHVzZT0ncmVxdWlyZWQnLyZndDsNCiAgICAgICAgICAgICZs dDsveHM6ZXh0ZW5zaW9uJmd0Ow0KICAgICAgICAmbHQ7L3hzOmNvbXBsZXhDb250ZW50Jmd0Ow0K ICAgICZsdDsveHM6Y29tcGxleFR5cGUmZ3Q7DQogDQombHQ7L3hzOnNjaGVtYSZndDsNCg0KICAg ICAgICA8L3ByZT4NCiAgICA8L2Rpdj4NCiAgICA8aDI+OC4NCiAgICAgICA8YSBuYW1lPSJhY2si PkFja25vd2xlZGdlbWVudHM8L2E+PC9oMj4NCiAgICAgICAgPHAgY2xhc3M9IiIgc3R5bGU9IiI+ VGhhbmtzIHRvIEpvYWNoaW0gTGluZGJvcmcgZm9yIGFsbCB2YWx1YWJsZSBmZWVkYmFjay48L3A+ DQogICAgPGhyPjxhIG5hbWU9ImFwcGVuZGljZXMiPjwvYT48aDI+QXBwZW5kaWNlczwvaDI+DQog ICAgPGhyPjxhIG5hbWU9ImFwcGVuZGl4LWRvY2luZm8iPjwvYT48aDM+QXBwZW5kaXggQTogRG9j dW1lbnQgSW5mb3JtYXRpb248L2gzPg0KICAgIDxwIGNsYXNzPSJpbmRlbnQiPg0KICAgICAgICAg ICAgU2VyaWVzOiA8YSBocmVmPSJodHRwOi8veG1wcC5vcmcvZXh0ZW5zaW9ucy8iPlhFUDwvYT48 YnI+DQogICAgICAgICAgICBOdW1iZXI6IHh4eHg8YnI+DQogICAgICAgICAgICBQdWJsaXNoZXI6 IDxhIGhyZWY9Ii94c2YvIj5YTVBQIFN0YW5kYXJkcyBGb3VuZGF0aW9uPC9hPjxicj4NCiAgICAg ICAgICAgIFN0YXR1czogDQogICAgICAgICAgICA8YSBocmVmPSJodHRwOi8veG1wcC5vcmcvZXh0 ZW5zaW9ucy94ZXAtMDAwMS5odG1sI3N0YXRlcy1Qcm90b1hFUCI+UHJvdG9YRVA8L2E+PGJyPg0K ICAgICAgICAgICAgVHlwZToNCiAgICAgICAgICAgIDxhIGhyZWY9Imh0dHA6Ly94bXBwLm9yZy9l eHRlbnNpb25zL3hlcC0wMDAxLmh0bWwjdHlwZXMtU3RhbmRhcmRzIFRyYWNrIj5TdGFuZGFyZHMg VHJhY2s8L2E+PGJyPg0KICAgICAgICAgICAgVmVyc2lvbjogMC4wLjI8YnI+DQogICAgICAgICAg ICBMYXN0IFVwZGF0ZWQ6IDIwMTMtMDMtMTM8YnI+DQogICAgICAgICAgICAgICAgQXBwcm92aW5n IEJvZHk6IDxhIGhyZWY9Imh0dHA6Ly94bXBwLm9yZy9jb3VuY2lsLyI+WE1QUCBDb3VuY2lsPC9h Pjxicj5EZXBlbmRlbmNpZXM6IFhNUFAgQ29yZSwgWEVQLTAwMDEsIFhFUC0wMTM4PGJyPg0KICAg ICAgICAgICAgICAgIFN1cGVyc2VkZXM6IE5vbmU8YnI+DQogICAgICAgICAgICAgICAgU3VwZXJz ZWRlZCBCeTogTm9uZTxicj4NCiAgICAgICAgICAgIFNob3J0IE5hbWU6IE5PVF9ZRVRfQVNTSUdO RUQ8YnI+DQogICAgICAgICAgICBUaGlzIGRvY3VtZW50IGluIG90aGVyIGZvcm1hdHM6IA0KICAg ICAgICAgICAgICAgIDxhIGNsYXNzPSJzdGFuZGFyZHNCdXR0b24iIGhyZWY9Imh0dHA6Ly94bXBw Lm9yZy9leHRlbnNpb25zL3hlcC14eHh4LnhtbCI+WE1MPC9hPsKgDQogICAgICAgICAgICAgICAg PGEgY2xhc3M9InN0YW5kYXJkc0J1dHRvbiIgaHJlZj0iaHR0cDovL3htcHAub3JnL2V4dGVuc2lv bnMveGVwLXh4eHgucGRmIj5QREY8L2E+PC9wPg0KICAgIDxocj48YSBuYW1lPSJhcHBlbmRpeC1h dXRob3JpbmZvIj48L2E+PGgzPkFwcGVuZGl4IEI6IEF1dGhvciBJbmZvcm1hdGlvbjwvaDM+DQog ICAgPGRpdiBjbGFzcz0iaW5kZW50Ij4NCiAgICAgIDxoMz5QZXRlciBXYWhlcjwvaDM+DQogICAg ICA8cCBjbGFzcz0iaW5kZW50Ij4NCiAgICAgICAgRW1haWw6DQogICAgICAgIDxhIGhyZWY9Im1h aWx0bzpwZXRlci53YWhlckBjbGF5c3Rlci5jb20iPnBldGVyLndhaGVyQGNsYXlzdGVyLmNvbTwv YT48YnI+DQogICAgICAgIEphYmJlcklEOiANCiAgICAgICAgPGEgaHJlZj0ieG1wcDpwZXRlci53 YWhlckBqYWJiZXIub3JnIj5wZXRlci53YWhlckBqYWJiZXIub3JnPC9hPjxicj4NCiAgICAgICAg VVJJOiANCiAgICAgICAgPGEgaHJlZj0iaHR0cDovL3NlLmxpbmtlZGluLmNvbS9wdWIvcGV0ZXIt d2FoZXIvMWEvNzFiL2EyOS8iPmh0dHA6Ly9zZS5saW5rZWRpbi5jb20vcHViL3BldGVyLXdhaGVy LzFhLzcxYi9hMjkvPC9hPjxicj48L3A+DQogICAgPC9kaXY+DQogICAgPGhyPjxhIG5hbWU9ImFw cGVuZGl4LWxlZ2FsIj48L2E+PGgzPkFwcGVuZGl4IEM6IExlZ2FsIE5vdGljZXM8L2gzPg0KICAg IDxkaXYgY2xhc3M9ImluZGVudCI+DQogICAgICA8aDQ+Q29weXJpZ2h0PC9oND5UaGlzIFhNUFAg RXh0ZW5zaW9uIFByb3RvY29sIGlzIGNvcHlyaWdodCAoYykgMTk5OSAtIDIwMTMgYnkgdGhlIFhN UFAgU3RhbmRhcmRzIEZvdW5kYXRpb24gKFhTRikuPGg0PlBlcm1pc3Npb25zPC9oND5QZXJtaXNz aW9uIGlzIGhlcmVieSBncmFudGVkLCBmcmVlIG9mIGNoYXJnZSwgdG8gYW55IHBlcnNvbiBvYnRh aW5pbmcgYSBjb3B5IG9mIHRoaXMgc3BlY2lmaWNhdGlvbiAodGhlICJTcGVjaWZpY2F0aW9uIiks IHRvIG1ha2UgdXNlIG9mIHRoZSBTcGVjaWZpY2F0aW9uIHdpdGhvdXQgcmVzdHJpY3Rpb24sIGlu Y2x1ZGluZyB3aXRob3V0IGxpbWl0YXRpb24gdGhlIHJpZ2h0cyB0byBpbXBsZW1lbnQgdGhlIFNw ZWNpZmljYXRpb24gaW4gYSBzb2Z0d2FyZSBwcm9ncmFtLCBkZXBsb3kgdGhlIFNwZWNpZmljYXRp b24gaW4gYSBuZXR3b3JrIHNlcnZpY2UsIGFuZCBjb3B5LCBtb2RpZnksIG1lcmdlLCBwdWJsaXNo LCB0cmFuc2xhdGUsIGRpc3RyaWJ1dGUsIHN1YmxpY2Vuc2UsIG9yIHNlbGwgY29waWVzIG9mIHRo ZSBTcGVjaWZpY2F0aW9uLCBhbmQgdG8gcGVybWl0IHBlcnNvbnMgdG8gd2hvbSB0aGUgU3BlY2lm aWNhdGlvbiBpcyBmdXJuaXNoZWQgdG8gZG8gc28sIHN1YmplY3QgdG8gdGhlIGNvbmRpdGlvbiB0 aGF0IHRoZSBmb3JlZ29pbmcgY29weXJpZ2h0IG5vdGljZSBhbmQgdGhpcyBwZXJtaXNzaW9uIG5v dGljZSBzaGFsbCBiZSBpbmNsdWRlZCBpbiBhbGwgY29waWVzIG9yIHN1YnN0YW50aWFsIHBvcnRp b25zIG9mIHRoZSBTcGVjaWZpY2F0aW9uLiBVbmxlc3Mgc2VwYXJhdGUgcGVybWlzc2lvbiBpcyBn cmFudGVkLCBtb2RpZmllZCB3b3JrcyB0aGF0IGFyZSByZWRpc3RyaWJ1dGVkIHNoYWxsIG5vdCBj b250YWluIG1pc2xlYWRpbmcgaW5mb3JtYXRpb24gcmVnYXJkaW5nIHRoZSBhdXRob3JzLCB0aXRs ZSwgbnVtYmVyLCBvciBwdWJsaXNoZXIgb2YgdGhlIFNwZWNpZmljYXRpb24sIGFuZCBzaGFsbCBu b3QgY2xhaW0gZW5kb3JzZW1lbnQgb2YgdGhlIG1vZGlmaWVkIHdvcmtzIGJ5IHRoZSBhdXRob3Jz LCBhbnkgb3JnYW5pemF0aW9uIG9yIHByb2plY3QgdG8gd2hpY2ggdGhlIGF1dGhvcnMgYmVsb25n LCBvciB0aGUgWE1QUCBTdGFuZGFyZHMgRm91bmRhdGlvbi48aDQ+RGlzY2xhaW1lciBvZiBXYXJy YW50eTwvaDQ+PHNwYW4gc3R5bGU9ImZvbnQtd2VpZ2h0OiBib2xkIj4jIyBOT1RFIFdFTEw6IFRo aXMgU3BlY2lmaWNhdGlvbiBpcyBwcm92aWRlZCBvbiBhbiAiQVMgSVMiIEJBU0lTLCBXSVRIT1VU IFdBUlJBTlRJRVMgT1IgQ09ORElUSU9OUyBPRiBBTlkgS0lORCwgZXhwcmVzcyBvciBpbXBsaWVk LCBpbmNsdWRpbmcsIHdpdGhvdXQgbGltaXRhdGlvbiwgYW55IHdhcnJhbnRpZXMgb3IgY29uZGl0 aW9ucyBvZiBUSVRMRSwgTk9OLUlORlJJTkdFTUVOVCwgTUVSQ0hBTlRBQklMSVRZLCBvciBGSVRO RVNTIEZPUiBBIFBBUlRJQ1VMQVIgUFVSUE9TRS4gSW4gbm8gZXZlbnQgc2hhbGwgdGhlIFhNUFAg U3RhbmRhcmRzIEZvdW5kYXRpb24gb3IgdGhlIGF1dGhvcnMgb2YgdGhpcyBTcGVjaWZpY2F0aW9u IGJlIGxpYWJsZSBmb3IgYW55IGNsYWltLCBkYW1hZ2VzLCBvciBvdGhlciBsaWFiaWxpdHksIHdo ZXRoZXIgaW4gYW4gYWN0aW9uIG9mIGNvbnRyYWN0LCB0b3J0LCBvciBvdGhlcndpc2UsIGFyaXNp bmcgZnJvbSwgb3V0IG9mLCBvciBpbiBjb25uZWN0aW9uIHdpdGggdGhlIFNwZWNpZmljYXRpb24g b3IgdGhlIGltcGxlbWVudGF0aW9uLCBkZXBsb3ltZW50LCBvciBvdGhlciB1c2Ugb2YgdGhlIFNw ZWNpZmljYXRpb24uICMjPC9zcGFuPjxoND5MaW1pdGF0aW9uIG9mIExpYWJpbGl0eTwvaDQ+SW4g bm8gZXZlbnQgYW5kIHVuZGVyIG5vIGxlZ2FsIHRoZW9yeSwgd2hldGhlciBpbiB0b3J0IChpbmNs dWRpbmcgbmVnbGlnZW5jZSksIGNvbnRyYWN0LCBvciBvdGhlcndpc2UsIHVubGVzcyByZXF1aXJl ZCBieSBhcHBsaWNhYmxlIGxhdyAoc3VjaCBhcyBkZWxpYmVyYXRlIGFuZCBncm9zc2x5IG5lZ2xp Z2VudCBhY3RzKSBvciBhZ3JlZWQgdG8gaW4gd3JpdGluZywgc2hhbGwgdGhlIFhNUFAgU3RhbmRh cmRzIEZvdW5kYXRpb24gb3IgYW55IGF1dGhvciBvZiB0aGlzIFNwZWNpZmljYXRpb24gYmUgbGlh YmxlIGZvciBkYW1hZ2VzLCBpbmNsdWRpbmcgYW55IGRpcmVjdCwgaW5kaXJlY3QsIHNwZWNpYWws IGluY2lkZW50YWwsIG9yIGNvbnNlcXVlbnRpYWwgZGFtYWdlcyBvZiBhbnkgY2hhcmFjdGVyIGFy aXNpbmcgb3V0IG9mIHRoZSB1c2Ugb3IgaW5hYmlsaXR5IHRvIHVzZSB0aGUgU3BlY2lmaWNhdGlv biAoaW5jbHVkaW5nIGJ1dCBub3QgbGltaXRlZCB0byBkYW1hZ2VzIGZvciBsb3NzIG9mIGdvb2R3 aWxsLCB3b3JrIHN0b3BwYWdlLCBjb21wdXRlciBmYWlsdXJlIG9yIG1hbGZ1bmN0aW9uLCBvciBh bnkgYW5kIGFsbCBvdGhlciBjb21tZXJjaWFsIGRhbWFnZXMgb3IgbG9zc2VzKSwgZXZlbiBpZiB0 aGUgWE1QUCBTdGFuZGFyZHMgRm91bmRhdGlvbiBvciBzdWNoIGF1dGhvciBoYXMgYmVlbiBhZHZp c2VkIG9mIHRoZSBwb3NzaWJpbGl0eSBvZiBzdWNoIGRhbWFnZXMuPGg0PklQUiBDb25mb3JtYW5j ZTwvaDQ+DQogICAgICAgICAgICAgICAgVGhpcyBYTVBQIEV4dGVuc2lvbiBQcm90b2NvbCBoYXMg YmVlbiBjb250cmlidXRlZCBpbiBmdWxsIGNvbmZvcm1hbmNlIHdpdGggdGhlIFhTRidzIEludGVs bGVjdHVhbCBQcm9wZXJ0eSBSaWdodHMgUG9saWN5IChhIGNvcHkgb2Ygd2hpY2ggbWF5IGJlIGZv dW5kIGF0ICZsdDs8YSBocmVmPSJodHRwOi8vd3d3LnhtcHAub3JnL2V4dGVuc2lvbnMvaXByLXBv bGljeS5zaHRtbCI+aHR0cDovL3d3dy54bXBwLm9yZy9leHRlbnNpb25zL2lwci1wb2xpY3kuc2h0 bWw8L2E+Jmd0OyBvciBvYnRhaW5lZCBieSB3cml0aW5nIHRvIFhTRiwgUC5PLiBCb3ggMTY0MSwg RGVudmVyLCBDTyA4MDIwMSBVU0EpLg0KICAgICAgICAgICAgPC9kaXY+DQogICAgPGhyPjxhIG5h bWU9ImFwcGVuZGl4LXhtcHAiPjwvYT48aDM+QXBwZW5kaXggRDogUmVsYXRpb24gdG8gWE1QUDwv aDM+DQogICAgPHAgY2xhc3M9ImluZGVudCI+VGhlIEV4dGVuc2libGUgTWVzc2FnaW5nIGFuZCBQ cmVzZW5jZSBQcm90b2NvbCAoWE1QUCkgaXMgZGVmaW5lZCBpbiB0aGUgWE1QUCBDb3JlIChSRkMg NjEyMCkgYW5kIFhNUFAgSU0gKFJGQyA2MTIxKSBzcGVjaWZpY2F0aW9ucyBjb250cmlidXRlZCBi eSB0aGUgWE1QUCBTdGFuZGFyZHMgRm91bmRhdGlvbiB0byB0aGUgSW50ZXJuZXQgU3RhbmRhcmRz IFByb2Nlc3MsIHdoaWNoIGlzIG1hbmFnZWQgYnkgdGhlIEludGVybmV0IEVuZ2luZWVyaW5nIFRh c2sgRm9yY2UgaW4gYWNjb3JkYW5jZSB3aXRoIFJGQyAyMDI2LiBBbnkgcHJvdG9jb2wgZGVmaW5l ZCBpbiB0aGlzIGRvY3VtZW50IGhhcyBiZWVuIGRldmVsb3BlZCBvdXRzaWRlIHRoZSBJbnRlcm5l dCBTdGFuZGFyZHMgUHJvY2VzcyBhbmQgaXMgdG8gYmUgdW5kZXJzdG9vZCBhcyBhbiBleHRlbnNp b24gdG8gWE1QUCByYXRoZXIgdGhhbiBhcyBhbiBldm9sdXRpb24sIGRldmVsb3BtZW50LCBvciBt b2RpZmljYXRpb24gb2YgWE1QUCBpdHNlbGYuPC9wPg0KICAgIDxocj48YSBuYW1lPSJhcHBlbmRp eC1kaXNjdXNzIj48L2E+PGgzPkFwcGVuZGl4IEU6IERpc2N1c3Npb24gVmVudWU8L2gzPg0KICAg IDxwIGNsYXNzPSJpbmRlbnQiPlRoZSBwcmltYXJ5IHZlbnVlIGZvciBkaXNjdXNzaW9uIG9mIFhN UFAgRXh0ZW5zaW9uIFByb3RvY29scyBpcyB0aGUgJmx0OzxhIGhyZWY9Imh0dHA6Ly9tYWlsLmph YmJlci5vcmcvbWFpbG1hbi9saXN0aW5mby9zdGFuZGFyZHMiPnN0YW5kYXJkc0B4bXBwLm9yZzwv YT4mZ3Q7IGRpc2N1c3Npb24gbGlzdC48L3A+DQogICAgPHAgY2xhc3M9ImluZGVudCI+RGlzY3Vz c2lvbiBvbiBvdGhlciB4bXBwLm9yZyBkaXNjdXNzaW9uIGxpc3RzIG1pZ2h0IGFsc28gYmUgYXBw cm9wcmlhdGU7IHNlZSAmbHQ7PGEgaHJlZj0iaHR0cDovL3htcHAub3JnL2Fib3V0L2Rpc2N1c3Mu c2h0bWwiPmh0dHA6Ly94bXBwLm9yZy9hYm91dC9kaXNjdXNzLnNodG1sPC9hPiZndDsgZm9yIGEg Y29tcGxldGUgbGlzdC48L3A+DQogICAgPHAgY2xhc3M9ImluZGVudCI+RXJyYXRhIGNhbiBiZSBz ZW50IHRvICZsdDs8YSBocmVmPSJtYWlsdG86ZWRpdG9yQHhtcHAub3JnIj5lZGl0b3JAeG1wcC5v cmc8L2E+Jmd0Oy48L3A+DQogICAgPGhyPjxhIG5hbWU9ImFwcGVuZGl4LWNvbmZvcm1hbmNlIj48 L2E+PGgzPkFwcGVuZGl4IEY6IFJlcXVpcmVtZW50cyBDb25mb3JtYW5jZTwvaDM+DQogICAgPHAg Y2xhc3M9ImluZGVudCI+VGhlIGZvbGxvd2luZyByZXF1aXJlbWVudHMga2V5d29yZHMgYXMgdXNl ZCBpbiB0aGlzIGRvY3VtZW50IGFyZSB0byBiZSBpbnRlcnByZXRlZCBhcyBkZXNjcmliZWQgaW4g PGEgaHJlZj0iaHR0cDovL3d3dy5pZXRmLm9yZy9yZmMvcmZjMjExOS50eHQiPlJGQyAyMTE5PC9h PjogIk1VU1QiLCAiU0hBTEwiLCAiUkVRVUlSRUQiOyAiTVVTVCBOT1QiLCAiU0hBTEwgTk9UIjsg IlNIT1VMRCIsICJSRUNPTU1FTkRFRCI7ICJTSE9VTEQgTk9UIiwgIk5PVCBSRUNPTU1FTkRFRCI7 ICJNQVkiLCAiT1BUSU9OQUwiLjwvcD4NCiAgICA8aHI+PGEgbmFtZT0iYXBwZW5kaXgtbm90ZXMi PjwvYT48aDM+QXBwZW5kaXggRzogTm90ZXM8L2gzPg0KICAgIDxkaXYgY2xhc3M9ImluZGVudCI+ DQogICAgICA8cD48YSBuYW1lPSJudC1JRDBFTEQiPjE8L2E+LiBFZmZpY2llbnQgWE1MIEludGVy Y2hhbmdlIChFWEkpIEZvcm1hdCAmbHQ7PGEgaHJlZj0iaHR0cDovL3d3dy53My5vcmcvVFIvZXhp LyI+aHR0cDovL3d3dy53My5vcmcvVFIvZXhpLzwvYT4mZ3Q7LjwvcD4NCiAgICAgIDxwPjxhIG5h bWU9Im50LUlEMEVDRyI+MjwvYT4uIFhFUC0wMTM4OiBTdHJlYW0gQ29tcHJlc3Npb24gJmx0Ozxh IGhyZWY9Imh0dHA6Ly94bXBwLm9yZy9leHRlbnNpb25zL3hlcC0wMTM4Lmh0bWwiPmh0dHA6Ly94 bXBwLm9yZy9leHRlbnNpb25zL3hlcC0wMTM4Lmh0bWw8L2E+Jmd0Oy48L3A+DQogICAgICA8cD48 YSBuYW1lPSJudC1JRDBFUU5BQyI+MzwvYT4uIFRoZSBJbnRlcm5ldCBBc3NpZ25lZCBOdW1iZXJz IEF1dGhvcml0eSAoSUFOQSkgaXMgdGhlIGNlbnRyYWwgY29vcmRpbmF0b3IgZm9yIHRoZSBhc3Np Z25tZW50IG9mIHVuaXF1ZSBwYXJhbWV0ZXIgdmFsdWVzIGZvciBJbnRlcm5ldCBwcm90b2NvbHMs IHN1Y2ggYXMgcG9ydCBudW1iZXJzIGFuZCBVUkkgc2NoZW1lcy4gRm9yIGZ1cnRoZXIgaW5mb3Jt YXRpb24sIHNlZSAmbHQ7PGEgaHJlZj0iaHR0cDovL3d3dy5pYW5hLm9yZy8iPmh0dHA6Ly93d3cu aWFuYS5vcmcvPC9hPiZndDsuPC9wPg0KICAgIDwvZGl2Pg0KICAgIDxocj48YSBuYW1lPSJhcHBl bmRpeC1yZXZzIj48L2E+PGgzPkFwcGVuZGl4IEg6IFJldmlzaW9uIEhpc3Rvcnk8L2gzPg0KICAg IDxwPk5vdGU6IE9sZGVyIHZlcnNpb25zIG9mIHRoaXMgc3BlY2lmaWNhdGlvbiBtaWdodCBiZSBh dmFpbGFibGUgYXQgPGEgaHJlZj0iaHR0cDovL3htcHAub3JnL2V4dGVuc2lvbnMvYXR0aWMvIj5o dHRwOi8veG1wcC5vcmcvZXh0ZW5zaW9ucy9hdHRpYy88L2E+PC9wPg0KICAgIDxkaXYgY2xhc3M9 ImluZGVudCI+DQogICAgICA8aDQ+VmVyc2lvbiAwLjAuMiAoMjAxMy0wMy0xMyk8L2g0Pg0KICAg ICAgPGRpdiBjbGFzcz0iaW5kZW50Ij4NCgkJCQk8cCBjbGFzcz0iIiBzdHlsZT0iIj5BZGRlZCBz dXBwb3J0IGZvciBzZXNzaW9uLXdpZGUgYnVmZmVycyBhbmQgc3RyaW5nIHRhYmxlcy48L3A+DQoJ CQkgKHB3YSkNCiAgICA8L2Rpdj4NCiAgICAgIDxoND5WZXJzaW9uIDAuMC4xICgyMDEzLTAzLTEy KTwvaDQ+DQogICAgICA8ZGl2IGNsYXNzPSJpbmRlbnQiPg0KICAgICAgICAgICAgICAgIDxwIGNs YXNzPSIiIHN0eWxlPSIiPkZpcnN0IGRyYWZ0LjwvcD4NCiAgICAgICAgICAgICAocHdhKQ0KICAg IDwvZGl2Pg0KICAgIDwvZGl2Pg0KICAgIDxocj4NCiAgICA8cD5FTkQ8L3A+DQogIDwvYm9keT4N CjwvaHRtbD4= --_004_1693EFE1FD641C42A0D542FCBC732DE698E53473EX3YODAUTOPIALO_ Content-Type: application/xml; name="xep-0000-Exi.xml" Content-Description: xep-0000-Exi.xml Content-Disposition: attachment; filename="xep-0000-Exi.xml"; size=49696; creation-date="Thu, 07 Mar 2013 12:13:15 GMT"; modification-date="Wed, 13 Mar 2013 21:50:46 GMT" Content-Transfer-Encoding: base64 PD94bWwgdmVyc2lvbj0nMS4wJyBlbmNvZGluZz0nVVRGLTgnPz4KPCFET0NUWVBFIHhlcCBTWVNU RU0gJ3hlcC5kdGQnIFsKICA8IUVOVElUWSAlIGVudHMgU1lTVEVNICd4ZXAuZW50Jz4KJWVudHM7 Cl0+Cjw/eG1sLXN0eWxlc2hlZXQgdHlwZT0ndGV4dC94c2wnIGhyZWY9J3hlcC54c2wnPz4KPHhl cD4KICAgIDxoZWFkZXI+CiAgICAgICAgPHRpdGxlPlhFUCAtIEVmZmljaWVudCBYTUwgSW50ZXJj aGFuZ2UgKEVYSSkgRm9ybWF0PC90aXRsZT4KICAgICAgICA8YWJzdHJhY3Q+VGhpcyBzcGVjaWZp Y2F0aW9uIGRlc2NyaWJlcyBob3cgRVhJIGNvbXByZXNzaW9uIGNhbiBiZSB1c2VkIGluIFhNUFAg bmV0d29ya3MuPC9hYnN0cmFjdD4KICAgICAgICA8bGVnYWw+CiAgICAgICAgICAgIDxjb3B5cmln aHQ+VGhpcyBYTVBQIEV4dGVuc2lvbiBQcm90b2NvbCBpcyBjb3B5cmlnaHQgKGMpIDE5OTkgLSAy MDEzIGJ5IHRoZSBYTVBQIFN0YW5kYXJkcyBGb3VuZGF0aW9uIChYU0YpLjwvY29weXJpZ2h0Pgog ICAgICAgICAgICA8cGVybWlzc2lvbnM+UGVybWlzc2lvbiBpcyBoZXJlYnkgZ3JhbnRlZCwgZnJl ZSBvZiBjaGFyZ2UsIHRvIGFueSBwZXJzb24gb2J0YWluaW5nIGEgY29weSBvZiB0aGlzIHNwZWNp ZmljYXRpb24gKHRoZSAmcXVvdDtTcGVjaWZpY2F0aW9uJnF1b3Q7KSwgdG8gbWFrZSB1c2Ugb2Yg dGhlIFNwZWNpZmljYXRpb24gd2l0aG91dCByZXN0cmljdGlvbiwgaW5jbHVkaW5nIHdpdGhvdXQg bGltaXRhdGlvbiB0aGUgcmlnaHRzIHRvIGltcGxlbWVudCB0aGUgU3BlY2lmaWNhdGlvbiBpbiBh IHNvZnR3YXJlIHByb2dyYW0sIGRlcGxveSB0aGUgU3BlY2lmaWNhdGlvbiBpbiBhIG5ldHdvcmsg c2VydmljZSwgYW5kIGNvcHksIG1vZGlmeSwgbWVyZ2UsIHB1Ymxpc2gsIHRyYW5zbGF0ZSwgZGlz dHJpYnV0ZSwgc3VibGljZW5zZSwgb3Igc2VsbCBjb3BpZXMgb2YgdGhlIFNwZWNpZmljYXRpb24s IGFuZCB0byBwZXJtaXQgcGVyc29ucyB0byB3aG9tIHRoZSBTcGVjaWZpY2F0aW9uIGlzIGZ1cm5p c2hlZCB0byBkbyBzbywgc3ViamVjdCB0byB0aGUgY29uZGl0aW9uIHRoYXQgdGhlIGZvcmVnb2lu ZyBjb3B5cmlnaHQgbm90aWNlIGFuZCB0aGlzIHBlcm1pc3Npb24gbm90aWNlIHNoYWxsIGJlIGlu Y2x1ZGVkIGluIGFsbCBjb3BpZXMgb3Igc3Vic3RhbnRpYWwgcG9ydGlvbnMgb2YgdGhlIFNwZWNp ZmljYXRpb24uIFVubGVzcyBzZXBhcmF0ZSBwZXJtaXNzaW9uIGlzIGdyYW50ZWQsIG1vZGlmaWVk IHdvcmtzIHRoYXQgYXJlIHJlZGlzdHJpYnV0ZWQgc2hhbGwgbm90IGNvbnRhaW4gbWlzbGVhZGlu ZyBpbmZvcm1hdGlvbiByZWdhcmRpbmcgdGhlIGF1dGhvcnMsIHRpdGxlLCBudW1iZXIsIG9yIHB1 Ymxpc2hlciBvZiB0aGUgU3BlY2lmaWNhdGlvbiwgYW5kIHNoYWxsIG5vdCBjbGFpbSBlbmRvcnNl bWVudCBvZiB0aGUgbW9kaWZpZWQgd29ya3MgYnkgdGhlIGF1dGhvcnMsIGFueSBvcmdhbml6YXRp b24gb3IgcHJvamVjdCB0byB3aGljaCB0aGUgYXV0aG9ycyBiZWxvbmcsIG9yIHRoZSBYTVBQIFN0 YW5kYXJkcyBGb3VuZGF0aW9uLjwvcGVybWlzc2lvbnM+CiAgICAgICAgICAgIDx3YXJyYW50eT4j IyBOT1RFIFdFTEw6IFRoaXMgU3BlY2lmaWNhdGlvbiBpcyBwcm92aWRlZCBvbiBhbiAmcXVvdDtB UyBJUyZxdW90OyBCQVNJUywgV0lUSE9VVCBXQVJSQU5USUVTIE9SIENPTkRJVElPTlMgT0YgQU5Z IEtJTkQsIGV4cHJlc3Mgb3IgaW1wbGllZCwgaW5jbHVkaW5nLCB3aXRob3V0IGxpbWl0YXRpb24s IGFueSB3YXJyYW50aWVzIG9yIGNvbmRpdGlvbnMgb2YgVElUTEUsIE5PTi1JTkZSSU5HRU1FTlQs IE1FUkNIQU5UQUJJTElUWSwgb3IgRklUTkVTUyBGT1IgQSBQQVJUSUNVTEFSIFBVUlBPU0UuIElu IG5vIGV2ZW50IHNoYWxsIHRoZSBYTVBQIFN0YW5kYXJkcyBGb3VuZGF0aW9uIG9yIHRoZSBhdXRo b3JzIG9mIHRoaXMgU3BlY2lmaWNhdGlvbiBiZSBsaWFibGUgZm9yIGFueSBjbGFpbSwgZGFtYWdl cywgb3Igb3RoZXIgbGlhYmlsaXR5LCB3aGV0aGVyIGluIGFuIGFjdGlvbiBvZiBjb250cmFjdCwg dG9ydCwgb3Igb3RoZXJ3aXNlLCBhcmlzaW5nIGZyb20sIG91dCBvZiwgb3IgaW4gY29ubmVjdGlv biB3aXRoIHRoZSBTcGVjaWZpY2F0aW9uIG9yIHRoZSBpbXBsZW1lbnRhdGlvbiwgZGVwbG95bWVu dCwgb3Igb3RoZXIgdXNlIG9mIHRoZSBTcGVjaWZpY2F0aW9uLiAjIzwvd2FycmFudHk+CiAgICAg ICAgICAgIDxsaWFiaWxpdHk+SW4gbm8gZXZlbnQgYW5kIHVuZGVyIG5vIGxlZ2FsIHRoZW9yeSwg d2hldGhlciBpbiB0b3J0IChpbmNsdWRpbmcgbmVnbGlnZW5jZSksIGNvbnRyYWN0LCBvciBvdGhl cndpc2UsIHVubGVzcyByZXF1aXJlZCBieSBhcHBsaWNhYmxlIGxhdyAoc3VjaCBhcyBkZWxpYmVy YXRlIGFuZCBncm9zc2x5IG5lZ2xpZ2VudCBhY3RzKSBvciBhZ3JlZWQgdG8gaW4gd3JpdGluZywg c2hhbGwgdGhlIFhNUFAgU3RhbmRhcmRzIEZvdW5kYXRpb24gb3IgYW55IGF1dGhvciBvZiB0aGlz IFNwZWNpZmljYXRpb24gYmUgbGlhYmxlIGZvciBkYW1hZ2VzLCBpbmNsdWRpbmcgYW55IGRpcmVj dCwgaW5kaXJlY3QsIHNwZWNpYWwsIGluY2lkZW50YWwsIG9yIGNvbnNlcXVlbnRpYWwgZGFtYWdl cyBvZiBhbnkgY2hhcmFjdGVyIGFyaXNpbmcgb3V0IG9mIHRoZSB1c2Ugb3IgaW5hYmlsaXR5IHRv IHVzZSB0aGUgU3BlY2lmaWNhdGlvbiAoaW5jbHVkaW5nIGJ1dCBub3QgbGltaXRlZCB0byBkYW1h Z2VzIGZvciBsb3NzIG9mIGdvb2R3aWxsLCB3b3JrIHN0b3BwYWdlLCBjb21wdXRlciBmYWlsdXJl IG9yIG1hbGZ1bmN0aW9uLCBvciBhbnkgYW5kIGFsbCBvdGhlciBjb21tZXJjaWFsIGRhbWFnZXMg b3IgbG9zc2VzKSwgZXZlbiBpZiB0aGUgWE1QUCBTdGFuZGFyZHMgRm91bmRhdGlvbiBvciBzdWNo IGF1dGhvciBoYXMgYmVlbiBhZHZpc2VkIG9mIHRoZSBwb3NzaWJpbGl0eSBvZiBzdWNoIGRhbWFn ZXMuPC9saWFiaWxpdHk+CiAgICAgICAgICAgIDxjb25mb3JtYW5jZT4KICAgICAgICAgICAgICAg IFRoaXMgWE1QUCBFeHRlbnNpb24gUHJvdG9jb2wgaGFzIGJlZW4gY29udHJpYnV0ZWQgaW4gZnVs bCBjb25mb3JtYW5jZSB3aXRoIHRoZSBYU0YncyBJbnRlbGxlY3R1YWwgUHJvcGVydHkgUmlnaHRz IFBvbGljeSAoYSBjb3B5IG9mIHdoaWNoIG1heSBiZSBmb3VuZCBhdCAmbHQ7PGxpbmsgdXJsPSdo dHRwOi8vd3d3LnhtcHAub3JnL2V4dGVuc2lvbnMvaXByLXBvbGljeS5zaHRtbCc+aHR0cDovL3d3 dy54bXBwLm9yZy9leHRlbnNpb25zL2lwci1wb2xpY3kuc2h0bWw8L2xpbms+Jmd0OyBvciBvYnRh aW5lZCBieSB3cml0aW5nIHRvIFhTRiwgUC5PLiBCb3ggMTY0MSwgRGVudmVyLCBDTyA4MDIwMSBV U0EpLgogICAgICAgICAgICA8L2NvbmZvcm1hbmNlPgogICAgICAgIDwvbGVnYWw+CiAgICAgICAg PG51bWJlcj54eHh4PC9udW1iZXI+CiAgICAgICAgPHN0YXR1cz5Qcm90b1hFUDwvc3RhdHVzPgog ICAgICAgIDx0eXBlPlN0YW5kYXJkcyBUcmFjazwvdHlwZT4KICAgICAgICA8c2lnPlN0YW5kYXJk czwvc2lnPgogICAgICAgIDxhcHByb3Zlcj5Db3VuY2lsPC9hcHByb3Zlcj4KICAgICAgICA8ZGVw ZW5kZW5jaWVzPgogICAgICAgICAgICA8c3BlYz5YTVBQIENvcmU8L3NwZWM+CiAgICAgICAgICAg IDxzcGVjPlhFUC0wMDAxPC9zcGVjPgogICAgICAgICAgICA8c3BlYz5YRVAtMDEzODwvc3BlYz4K ICAgICAgICA8L2RlcGVuZGVuY2llcz4KICAgICAgICA8c3VwZXJzZWRlcy8+CiAgICAgICAgPHN1 cGVyc2VkZWRieS8+CiAgICAgICAgPHNob3J0bmFtZT5OT1RfWUVUX0FTU0lHTkVEPC9zaG9ydG5h bWU+CiAgICAgICAgPGF1dGhvcj4KICAgICAgICAgICAgPGZpcnN0bmFtZT5QZXRlcjwvZmlyc3Ru YW1lPgogICAgICAgICAgICA8c3VybmFtZT5XYWhlcjwvc3VybmFtZT4KICAgICAgICAgICAgPGVt YWlsPnBldGVyLndhaGVyQGNsYXlzdGVyLmNvbTwvZW1haWw+CiAgICAgICAgICAgIDxqaWQ+cGV0 ZXIud2FoZXJAamFiYmVyLm9yZzwvamlkPgogICAgICAgICAgICA8dXJpPmh0dHA6Ly9zZS5saW5r ZWRpbi5jb20vcHViL3BldGVyLXdhaGVyLzFhLzcxYi9hMjkvPC91cmk+CiAgICAgICAgPC9hdXRo b3I+CgkJPHJldmlzaW9uPgoJCQk8dmVyc2lvbj4wLjAuMjwvdmVyc2lvbj4KCQkJPGRhdGU+MjAx My0wMy0xMzwvZGF0ZT4KCQkJPGluaXRpYWxzPnB3YTwvaW5pdGlhbHM+CgkJCTxyZW1hcms+CgkJ CQk8cD5BZGRlZCBzdXBwb3J0IGZvciBzZXNzaW9uLXdpZGUgYnVmZmVycyBhbmQgc3RyaW5nIHRh Ymxlcy48L3A+CgkJCTwvcmVtYXJrPgoJCTwvcmV2aXNpb24+CiAgICAgICAgPHJldmlzaW9uPgog ICAgICAgICAgICA8dmVyc2lvbj4wLjAuMTwvdmVyc2lvbj4KICAgICAgICAgICAgPGRhdGU+MjAx My0wMy0xMjwvZGF0ZT4KICAgICAgICAgICAgPGluaXRpYWxzPnB3YTwvaW5pdGlhbHM+CiAgICAg ICAgICAgIDxyZW1hcms+CiAgICAgICAgICAgICAgICA8cD5GaXJzdCBkcmFmdC48L3A+CiAgICAg ICAgICAgIDwvcmVtYXJrPgogICAgICAgIDwvcmV2aXNpb24+CiAgICA8L2hlYWRlcj4KICAgIDxz ZWN0aW9uMSB0b3BpYz0nSW50cm9kdWN0aW9uJyBhbmNob3I9J2ludHJvJz4KICAgICAgICA8cD4K ICAgICAgICAgICAgVGhlIEVmZmljaWVudCBYTUwgSW50ZXJjaGFuZ2UgKEVYSSkgRm9ybWF0IDxu b3RlPkVmZmljaWVudCBYTUwgSW50ZXJjaGFuZ2UgKEVYSSkgRm9ybWF0ICZsdDs8bGluayB1cmw9 J2h0dHA6Ly93d3cudzMub3JnL1RSL2V4aS8nPmh0dHA6Ly93d3cudzMub3JnL1RSL2V4aS88L2xp bms+Jmd0Oy48L25vdGU+IGlzIGFuCiAgICAgICAgICAgIGVmZmljaWVudCB3YXkgdG8gY29tcHJl c3MgWE1MIGRvY3VtZW50cyBhbmQgWE1MIGZyYWdtZW50cy4gVGhpcyBkb2N1bWVudCBwcm92aWRl cyBpbmZvcm1hdGlvbiBvbiBob3cgRVhJIGNhbiBiZSB1c2VkIGluIFhNUFAgc3RyZWFtcyB0byBl ZmZpY2llbnRseSBjb21wcmVzcyBkYXRhIHRyYW5zbWl0dGVkIGJldHdlZW4KICAgICAgICAgICAg dGhlIHNlcnZlciBhbmQgdGhlIGNsaWVudC4gRm9yIGNlcnRhaW4gYXBwbGljYXRpb25zIChsaWtl IGFwcGxpY2F0aW9ucyBpbiBzZW5zb3IgbmV0d29ya3MpIEVYSSBpcyBhIHZpdGFsIGNvbXBvbmVu dCwgZGVjcmVhc2luZyBwYWNrZXQgc2l6ZSBlbmFibGluZyBzZW5zb3JzIHdpdGggbGltaXRlZCBt ZW1vcnkgdG8KICAgICAgICAgICAgY29tbXVuaWNhdGUgZWZmaWNpZW50bHkuIFRoZSBzdHJvbmcg c3VwcG9ydCBpbiBFWEkgZm9yIGdlbmVyYXRpbmcgZWZmaWNpZW50IHN0dWJjb2RlcyBpcyBhbHNv IHZpdGFsIHRvIGJ1aWxkIGVmZmljaWVudCBjb2RlIGluIGNvbnN0cmFpbmVkIGRldmljZXMuCiAg ICAgICAgPC9wPgogICAgICAgIDxwPgogICAgICAgICAgICBBY3RpdmF0aW5nIEVYSSBjb21wcmVz c2lvbiByZXF1aXJlcyBhIGhhbmRzaGFrZSB0byB0YWtlIHBsYWNlIHByaW9yLCB3aGVyZSB0aGUg c2VydmVyIGFuZCBjbGllbnQgYWdyZWVzIG9uIGEgc2V0IG9mIHBhcmFtZXRlcnMuIFNvbWUgb2Yg dGhlc2UgcGFyYW1ldGVycyBtYXkgaW5jcmVhc2UgY29tcHJlc3Npb24gcmF0aW8sCiAgICAgICAg ICAgIGF0IHRoZSBjb3N0IG9mIHByb2Nlc3NpbmcgcG93ZXIgYW5kIHJlYWRhYmlsaXR5LiBUaGVz ZSBwYXJhbWV0ZXJzIGluY2x1ZGU6CiAgICAgICAgPC9wPgogICAgICAgIDx1bD4KICAgICAgICAg ICAgPGxpPlNjaGVtYXMgdG8gdXNlLjwvbGk+CiAgICAgICAgICAgIDxsaT5FWEkgdmVyc2lvbiBu dW1iZXIuPC9saT4KICAgICAgICAgICAgPGxpPkRhdGEgYWxpZ25tZW50IChiaXQtcGFja2VkLCBi eXRlLWFsaWdubWVudCwgcHJlLWNvbXByZXNzaW9uKS48L2xpPgogICAgICAgICAgICA8bGk+SWYg RVhJLWNvbXByZXNzZWQgZGF0YSBzaG91bGQgYmUgZnVydGhlciBjb21wcmVzc2VkIHVzaW5nIGFk ZGl0aW9uYWwgY29tcHJlc3Npb24uPC9saT4KICAgICAgICAgICAgPGxpPlN0cmljdCBvciBsb29z ZSBhZGhlcmVuY2UgdG8gc2NoZW1hcy48L2xpPgogICAgICAgICAgICA8bGk+SWYgY29tbWVudHMs IHByb2Nlc3NpbmcgaW5zdHJ1Y3Rpb25zLCBkdGQ6cywgcHJlZml4ZXMsIGxleGljYWwgdmFsdWVz LCBldGMuIHNob3VsZCBiZSBwcmVzZXJ2ZWQuPC9saT4KICAgICAgICAgICAgPGxpPklmIHNlbGYt Y29udGFpbmVkIGVsZW1lbnRzIHNob3VsZCBiZSBhbGxvd2VkLjwvbGk+CiAgICAgICAgICAgIDxs aT5BbHRlcm5hdGUgZGF0YSB0eXBlIHJlcHJlc2VudGF0aW9ucyBmb3IgdHlwZXMgdmFsdWVzLjwv bGk+CiAgICAgICAgICAgIDxsaT5CbG9jayBzaXplIGZvciBFWEkgY29tcHJlc3Npb24uPC9saT4K ICAgICAgICAgICAgPGxpPk1heGltdW0gc3RyaW5nIGxlbmd0aCBvZiB2YWx1ZSBjb250ZW50IGl0 ZW1zIGluIHN0cmluZyB0YWJsZXMuPC9saT4KICAgICAgICAgICAgPGxpPlZhbHVlIHBhcnRpdGlv biBjYXBhY2l0eS48L2xpPgogICAgICAgIDwvdWw+CiAgICAgICAgPHA+CiAgICAgICAgICAgIFRo ZXNlIHBhcmFtZXRlcnMgd2lsbCBiZSBkaXNjdXNzZWQgZGVlcGVyIGluIHRoZSBmb2xsb3dpbmcg c2VjdGlvbnMuIFRoZXJlIGFyZSBhbHNvIGRlZmF1bHQgdmFsdWVzIHVzZXJzIGNhbiB1c2UgdG8g Y29tbWVuY2UgZXZhbHVhdGluZyBFWEkgY29tcHJlc3Npb24uCiAgICAgICAgPC9wPgogICAgICAg IDxwPgogICAgICAgICAgICBUaGUgc2luZ2xlIG1vc3QgaW1wb3J0YW50IHByb3BlcnR5IHRvIGFn cmVlIG9uIGhvd2V2ZXIsIGlzIHRoZSBzZXQgb2Ygc2NoZW1hcyB0byB1c2UgZHVyaW5nIEVYSSBj b21wcmVzc2lvbi4gRVhJIGNvbXByZXNzZXMgWE1MIG11Y2ggbW9yZSBlZmZpY2llbnRseSBpZiB0 aGVyZSBleGlzdCBzY2hlbWFzIAogICAgICAgICAgICBkZXNjcmliaW5nIHRoZSBmb3JtYXQgb2Yg dGhlIGV4cGVjdGVkIFhNTC4gU2luY2UgdGhlIHNlcnZlciBpcyBub3Qgc3VwcG9zZWQgdG8ga25v dyBhbGwgcG9zc2libGUgWE1MIHNjaGVtYXMsIGEgbWVjaGFuaXNtIGlzIHByb3ZpZGVkIGluIHRo aXMgZG9jdW1lbnQgd2hlcmVieSBzY2hlbWFzIGNhbiBiZQogICAgICAgICAgICBpbnRlcmNoYW5n ZWQsIHNvIHRoYXQgdGhlIHNlcnZlciBjYW4gYWRhcHQgaXRzIGNvbXByZXNzaW9uIHRvIHRoZSBu ZWVkcyBvZiB0aGUgY2xpZW50LgogICAgICAgIDwvcD4KICAgIDwvc2VjdGlvbjE+CiAgICA8c2Vj dGlvbjEgdG9waWM9J1VzZSBDYXNlcycgYW5jaG9yPSd1c2VjYXNlcyc+CiAgICAgICAgPHNlY3Rp b24yIHRvcGljPSdEZXRlY3Rpbmcgc3VwcG9ydCc+CiAgICAgICAgICAgIDxwPgogICAgICAgICAg ICAgICAgVGhpcyBYRVAgaXMgYmFzZWQgb24gJnhlcDAxMzg7LiBXaGVuIHRoZSBjbGllbnQgY29u bmVjdHMgdG8gdGhlIFhNUFAgU2VydmVyLCBpdCB3aWxsIHJlY2VpdmUgYSBsaXN0IG9mIGZlYXR1 cmVzIHN1cHBvcnRlZCBieSB0aGUgc2VydmVyOgogICAgICAgICAgICA8L3A+CiAgICAgICAgICAg IDxleGFtcGxlIGNhcHRpb249J1NlYXJjaCBGZWF0dXJlcyc+CiAgICAgICAgICAgICAgICA8IVtD REFUQVsKICAgIDxzdHJlYW06ZmVhdHVyZXM+CiAgICAgICAgPHN0YXJ0dGxzIHhtbG5zPSd1cm46 aWV0ZjpwYXJhbXM6eG1sOm5zOnhtcHAtdGxzJy8+CiAgICAgICAgPGNvbXByZXNzaW9uIHhtbG5z PSdodHRwOi8vamFiYmVyLm9yZy9mZWF0dXJlcy9jb21wcmVzcyc+CiAgICAgICAgICAgIDxtZXRo b2Q+emxpYjwvbWV0aG9kPgogICAgICAgICAgICA8bWV0aG9kPmx6dzwvbWV0aG9kPgogICAgICAg ICAgICA8bWV0aG9kPmV4aTwvbWV0aG9kPgogICAgICAgIDwvY29tcHJlc3Npb24+CiAgICA8L3N0 cmVhbTpmZWF0dXJlcz5dXT4KICAgICAgICAgICAgPC9leGFtcGxlPgogICAgICAgICAgICA8cD4K ICAgICAgICAgICAgICAgIFN1cHBvcnQgZm9yIEVYSSBjb21wcmVzc2lvbiBpcyBkZXRlY3RlZCBi eSB0aGUgZXhpc3RhbmNlIG9mIHRoZSA8c3Ryb25nPmV4aTwvc3Ryb25nPiBjb21wcmVzc2lvbiBt ZXRob2QgaW4gdGhlIDxzdHJvbmc+ZmVhdHVyZXM8L3N0cm9uZz4gc3RhbnphLgogICAgICAgICAg ICA8L3A+CiAgICAgICAgPC9zZWN0aW9uMj4KICAgICAgICA8c2VjdGlvbjIgdG9waWM9J0ludmFs aWQgc2V0dXAnPgogICAgICAgICAgICA8cD4KICAgICAgICAgICAgICAgIElmIHRoZSBjbGllbnQg YXR0ZW1wdHMgdG8gYWN0aXZhdGUgRVhJIHN0cmVhbSBhdCB0aGlzIHBvaW50LCBiZWZvcmUgbmVn b3RpYXRpb24gb2YgRVhJIHByb3BlcnRpZXMgaGF2ZSBiZWVuIHBlcmZvcm1lZCwgdGhlIHNlcnZl ciBtdXN0IHJlc3BvbmQgd2l0aCBhCiAgICAgICAgICAgICAgICA8c3Ryb25nPnNldHVwLWZhaWxl ZDwvc3Ryb25nPiByZXNwb25zZS4KICAgICAgICAgICAgPC9wPgogICAgICAgICAgICA8ZXhhbXBs ZSBjYXB0aW9uPSdJbnZhbGlkIHNldHVwJz4KICAgICAgICAgICAgICAgIDwhW0NEQVRBWwogICAg PGNvbXByZXNzIHhtbG5zPSdodHRwOi8vamFiYmVyLm9yZy9wcm90b2NvbC9jb21wcmVzcyc+CiAg ICAgICAgPG1ldGhvZD5leGk8L21ldGhvZD4KICAgIDwvY29tcHJlc3M+CiAKICAgIDxmYWlsdXJl IHhtbG5zPSdodHRwOi8vamFiYmVyLm9yZy9wcm90b2NvbC9jb21wcmVzcyc+CiAgICAgICAgPHNl dHVwLWZhaWxlZC8+CiAgICA8L2ZhaWx1cmU+XV0+CiAgICAgICAgICAgIDwvZXhhbXBsZT4KICAg ICAgICA8L3NlY3Rpb24yPgogICAgICAgIDxzZWN0aW9uMiB0b3BpYz0nUHJvcG9zaW5nIGNvbXBy ZXNzaW9uIHBhcmFtZXRlcnMnPgogICAgICAgICAgICA8cD4KICAgICAgICAgICAgICAgIFdoZW4g dGhlIGNsaWVudCBkZWNpZGVzIHRvIGFjdGl2YXRlIEVYSSBjb21wcmVzc2lvbiwgaXQgc2VuZHMg YSA8c3Ryb25nPnNldHVwPC9zdHJvbmc+IHN0YW56YSBjb250YWluaW5nIHBhcmFtZXRlciBwcm9w b3NhbHMgdG8gdGhlIHNlcnZlciBhcyBmb2xsb3dzOgogICAgICAgICAgICA8L3A+CiAgICAgICAg ICAgIDxleGFtcGxlIGNhcHRpb249J1Byb3Bvc2luZyBjb21wcmVzc2lvbiBwYXJhbWV0ZXJzJz4K ICAgICAgICAgICAgICAgIDwhW0NEQVRBWwogICAgPHNldHVwIHhtbG5zPSdodHRwOi8vamFiYmVy Lm9yZy9wcm90b2NvbC9jb21wcmVzcy9leGknIHZlcnNpb249JzEnIHN0cmljdD0ndHJ1ZScgYmxv Y2tTaXplPScxMDI0JyB2YWx1ZU1heExlbmd0aD0nMzInIHZhbHVlUGFydGl0aW9uQ2FwYWNpdHk9 JzEwMCc+CiAgICAgICAgPHNjaGVtYSBucz0ndXJuOnhtcHA6c24nIGJ5dGVzPSc4MDkyJyBtZDVI YXNoPScxODgyOTI0MmNhN2E3MmE1NTJhN2UxNWFmNWI5ZTQ0ZCcvPgogICAgICAgIDxzY2hlbWEg bnM9J3Vybjp4bXBwOnNuOnByb3Zpc2lvbmluZycgYnl0ZXM9JzYzMDMnIG1kNUhhc2g9J2U1MzAx YWRkNTFmM2IyNGMxNWE3MTI1NmI1M2RhYTQ3Jy8+CiAgICA8L3NldHVwPl1dPgogICAgICAgICAg ICA8L2V4YW1wbGU+CiAgICAgICAgICAgIDxwPgogICAgICAgICAgICAgICAgVGhlIHNlcnZlciBp biB0dXJuIHJlc3BvbmRzIHdpdGggYSA8c3Ryb25nPnNldHVwUmVzcG9uc2U8L3N0cm9uZz4gc3Rh bnphIGNvbnRhaW5pbmcgdGhlIHBhcmFtZXRlcnMgaXQgY2FuIGFjY2VwdCwgYmFzZWQgb24gdGhl IGluaXRpYWwgdmFsdWVzIHByb3ZpZGVkIGJ5IHRoZSBjbGllbnQuCiAgICAgICAgICAgICAgICBB bnkgYnVmZmVyIHNpemVzLCBldGMuLCBtYXkgaGF2ZSBiZWVuIGNoYW5nZWQsIGJ1dCBvbmx5IGxv d2VyZWQsIG5ldmVyIHJhaXNlZC4KICAgICAgICAgICAgPC9wPgogICAgICAgICAgICA8ZXhhbXBs ZSBjYXB0aW9uPSdVbmFibGUgdG8gYWNjb21tb2RhdGUgcGFyYW1ldGVycyc+CiAgICAgICAgICAg ICAgICA8IVtDREFUQVsKICAgIDxzZXR1cFJlc3BvbnNlIHhtbG5zPSdodHRwOi8vamFiYmVyLm9y Zy9wcm90b2NvbC9jb21wcmVzcy9leGknIHZlcnNpb249JzEnIHN0cmljdD0ndHJ1ZScKICAgICAg ICAgICAgICAgICAgIGJsb2NrU2l6ZT0nMTAyNCcgdmFsdWVNYXhMZW5ndGg9JzMyJyB2YWx1ZVBh cnRpdGlvbkNhcGFjaXR5PScxMDAnPgogICAgICAgIDxzY2hlbWEgbnM9J3Vybjp4bXBwOnNuJyBi eXRlcz0nODA5MicgbWQ1SGFzaD0nMTg4MjkyNDJjYTdhNzJhNTUyYTdlMTVhZjViOWU0NGQnLz4K ICAgICAgICA8bWlzc2luZ1NjaGVtYSBucz0ndXJuOnhtcHA6c246cHJvdmlzaW9uaW5nJyBieXRl cz0nNjMwMycgbWQ1SGFzaD0nZTUzMDFhZGQ1MWYzYjI0YzE1YTcxMjU2YjUzZGFhNDcnLz4KICAg IDwvc2V0dXBSZXNwb25zZT5dXT4KICAgICAgICAgICAgPC9leGFtcGxlPgogICAgICAgICAgICA8 cD4KICAgICAgICAgICAgICAgIDxzdHJvbmc+Tm90ZTo8L3N0cm9uZz4gU2NoZW1hIGZpbGVzIGFy ZSBpZGVudGlmaWVkIHVzaW5nIHRocmVlIHByb3BlcnRpZXM6IEl0cyA8c3Ryb25nPnRhcmdldCBu YW1lc3BhY2U8L3N0cm9uZz4sIGl0cyA8c3Ryb25nPmJ5dGUgc2l6ZTwvc3Ryb25nPiBhbmQgaXRz CiAgICAgICAgICAgICAgICA8c3Ryb25nPk1ENSBoYXNoPC9zdHJvbmc+LiBUaGUgPHN0cm9uZz5N RDUgaGFzaDwvc3Ryb25nPiBwcm92aWRlcyBhIHdheSB0byBkZXRlY3Qgc21hbGwgY2hhbmdlcyBp biB0aGUgZmlsZSwgZXZlbiBpZiB0aGUgYnl0ZSBzaXplIGFuZCBuYW1lc3BhY2UgYXJlIHRoZSBz YW1lLgogICAgICAgICAgICA8L3A+CiAgICAgICAgICAgIDxwPgogICAgICAgICAgICAgICAgU2No ZW1hIGZpbGVzIHRoYXQgdGhlIHNlcnZlciBkb2VzIG5vdCBoYXZlLCBiYXNlZCBvbiBuYW1lc3Bh Y2UsIGJ5dGUgc2l6ZSBhbmQgTUQ1IGhhc2gsIGFyZSBtYXJrZWQgd2l0aCB0aGUgPHN0cm9uZz5t aXNzaW5nU2NoZW1hPC9zdHJvbmc+IGVsZW1lbnQgaW5zdGVhZCBvZiB0aGUgCiAgICAgICAgICAg ICAgICBub3JtYWwgPHN0cm9uZz5zY2hlbWE8L3N0cm9uZz4gZWxlbWVudC4KICAgICAgICAgICAg PC9wPgogICAgICAgICAgICA8cD4KICAgICAgICAgICAgICAgIFRoZSBjbGllbnQgY2FuLCBhdCB0 aGlzIHBvaW50LCBjaG9vc2UgdG8gYWJvcnQgdGhlIEVYSSBlbmFibGVtZW50IHNlcXVlbmNlLCBp ZiBpdCBjYW5ub3QgYWNjb21tb2RhdGUgaXRzZWxmIHdpdGggdGhlIHByb3Bvc2VkIHBhcmFtZXRl ciBzZXR0aW5ncyBwcm92aWRlZCBieSB0aGUgc2VydmVyLgogICAgICAgICAgICAgICAgVGhlIFhN UFAgc2Vzc2lvbiB3aWxsIGNvbnRpbnVlIHRvIHdvcmsgaW4gaXRzIGN1cnJlbnQgc3RhdGUuCiAg ICAgICAgICAgIDwvcD4KICAgICAgICA8L3NlY3Rpb24yPgogICAgICAgIDxzZWN0aW9uMiB0b3Bp Yz0nVXBsb2FkaW5nIG5ldyBzY2hlbWEgZmlsZXMnPgogICAgICAgICAgICA8cD4KICAgICAgICAg ICAgICAgIElmIHRoZSBzZXJ2ZXIgbGFja3MgaW5mb3JtYXRpb24gYWJvdXQgYSBzY2hlbWEgZmls ZSwgdGhpcyBpcyBzcGVjaWZpZWQgaW4gdGhlIHJlc3BvbnNlIHRocm91Z2ggdGhlIDxzdHJvbmc+ bWlzc2luZ1NjaGVtYTwvc3Ryb25nPiBlbGVtZW50cy4gVGhlIGNsaWVudCBjYW4gYXQgdGhpcyBw b2ludAogICAgICAgICAgICAgICAgZWl0aGVyIGNob29zZSB0byBhY2NlcHQgdGhhdCB0aGVzZSBz Y2hlbWEgZmlsZXMgYXJlIG5vdCBhdmFpbGFibGUsIG1ha2luZyBjb21wcmVzc2lvbiBsZXNzIGVm ZmljaWVudCwgb3IgY2hvb3NlIHRvIHVwbG9hZCB0aGUgbWlzc2luZyBzY2hlbWEgZmlsZXMgdG8g dGhlIHNlcnZlci4gT2YgY291cnNlLAogICAgICAgICAgICAgICAgdXBsb2FkaW5nIHNjaGVtYSBm aWxlcyB3b3VsZCByZXF1aXJlIHRoZSBkZXZpY2UgdG8gaGF2ZSBzdWZmaWNpZW50IGJ1ZmZlcnMg YW5kIG1lbW9yeSB0byBzdG9yZSBhbmQgdXBsb2FkIHRoZSBzY2hlbWEgZmlsZXMgaW4gdGhlIGZp cnN0IHBsYWNlLiAoSWYgbm90IHBvc3NpYmxlIHRvIHVwbG9hZCB0aGUKICAgICAgICAgICAgICAg IHNjaGVtYSBmaWxlcywgY29uc2lkZXJhdGlvbiBzaG91bGQgYmUgdGFrZW4gdG8gaW5zdGFsbCB0 aGUgc2NoZW1hIGZpbGVzIG1hbnVhbGx5IGF0IHRoZSBzZXJ2ZXIuKQogICAgICAgICAgICA8L3A+ CiAgICAgICAgICAgIDxwPgogICAgICAgICAgICAgICAgVG8gdXBsb2FkIGEgc2NoZW1hIGZpbGUs IHRoZSBjbGllbnQgc2ltcGx5IHNlbmRzIHRoZSBzY2hlbWEgZmlsZSB1c2luZyBhbiA8c3Ryb25n PnVwbG9hZFNjaGVtYTwvc3Ryb25nPiBlbGVtZW50LCBhcyBmb2xsb3dzOgogICAgICAgICAgICA8 L3A+CiAgICAgICAgICAgIDxleGFtcGxlIGNhcHRpb249J1VwbG9hZGluZyBzY2hlbWEgZmlsZSc+ CiAgICAgICAgICAgICAgICA8IVtDREFUQVsKICAgIDx1cGxvYWRTY2hlbWEgeG1sbnM9J2h0dHA6 Ly9qYWJiZXIub3JnL3Byb3RvY29sL2NvbXByZXNzL2V4aSc+CiAgICAgICAgUEQ5NGJXd2dkbVZ5 YzJsdmJqMG5NUzR3SnlCbGJtTnZaR2x1WnowblZWUkdMVGduUHo0TkNqeDRjenB6WTJobGJXRU5D aUFnSUNCNAogICAgICAgIGJXeHVjenA0Y3owbmFIUjBjRG92TDNkM2R5NTNNeTV2Y21jdk1qQXdN UzlZVFV4VFkyaGxiV0VuRFFvZ0lDQWdkR0Z5WjJWMFRtRnQKICAgICAgICBaWE53WVdObFBTZDFj bTQ2ZUcxd2NEcHpianB3Y205MmFYTnBiMjVwYm1jbkRRb2dJQ0FnZUcxc2JuTTlKM1Z5YmpwNGJY QndPbk51CiAgICAgICAgCiAgICAgICAgLi4uCiAgICAgICAgCiAgICAgICAgZG1sc1pXZGxKejRO Q2drSlBIaHpPbUYwZEhKcFluVjBaU0J1WVcxbFBTZHBaQ2NnZEhsd1pUMG5VSEpwZG1sc1pXZGxT V1FuSUhWegogICAgICAgIFpUMG5jbVZ4ZFdseVpXUW5MejROQ2drOEwzaHpPbU52YlhCc1pYaFVl WEJsUGcwS0lBMEtQQzk0Y3pwelkyaGxiV0UrRFFvPQogICAgPC91cGxvYWRTY2hlbWE+XV0+CiAg ICAgICAgICAgIDwvZXhhbXBsZT4KICAgICAgICAgICAgPHA+CiAgICAgICAgICAgICAgICBUaGUg c2NoZW1hIGl0c2VsZiBpcyBzZW50IHVzaW5nIGJhc2U2NCBlbmNvZGluZyB0byB0aGUgc2VydmVy LiBUaGlzLCB0byBtYWtlIHN1cmUgYSBiaW5hcnkgZXhhY3QgY29weSBpcyB0cmFuc2ZlcnJlZCwg bWFpbnRhaW5pbmcgZW5jb2RpbmcsIHByb2Nlc3NpbmcgaW5zdHJ1Y3Rpb25zLCBldGMuIFRoZQog ICAgICAgICAgICAgICAgc2VydmVyIHRoZW4gY29tcHV0ZXMgdGhlIDxzdHJvbmc+dGFyZ2V0IG5h bWVzcGFjZTwvc3Ryb25nPiwgPHN0cm9uZz5ieXRlIHNpemU8L3N0cm9uZz4gYW5kIDxzdHJvbmc+ TUQ1IEhhc2g8L3N0cm9uZz4gZnJvbSB0aGlzIHNjaGVtYSBmaWxlIHNlbnQuCiAgICAgICAgICAg IDwvcD4KICAgICAgICAgICAgPHA+CiAgICAgICAgICAgICAgICBJZiB0aGUgY2xpZW50IGRlc2ly ZXMsIGl0IGNhbiB0ZXN0IHRoZSBFWEkgc2V0dXAgYWdhaW4uIFRoaXMgaXMgaG93ZXZlciBvcHRp b25hbCwgYnV0IGNhbiBiZSB1c2VkIHRvIHRlc3QgdGhhdCB1cGxvYWRpbmcgdGhlIHNjaGVtYSBm aWxlcywgYW5kIGFueSBuZXcgcHJvcGVydHkgdmFsdWVzCiAgICAgICAgICAgICAgICBhcmUgYWNj ZXB0ZWQgYnkgdGhlIHNlcnZlci4KICAgICAgICAgICAgPC9wPgogICAgICAgICAgICA8ZXhhbXBs ZSBjYXB0aW9uPSdUZXN0aW5nIG5ld2x5IHVwbG9hZGVkIHNjaGVtYSBmaWxlcyc+CiAgICAgICAg ICAgICAgICA8IVtDREFUQVsKICAgIDxzZXR1cCB4bWxucz0naHR0cDovL2phYmJlci5vcmcvcHJv dG9jb2wvY29tcHJlc3MvZXhpJyB2ZXJzaW9uPScxJyBzdHJpY3Q9J3RydWUnIGJsb2NrU2l6ZT0n MTAyNCcgdmFsdWVNYXhMZW5ndGg9JzMyJyB2YWx1ZVBhcnRpdGlvbkNhcGFjaXR5PScxMDAnPgog ICAgICAgIDxzY2hlbWEgbnM9J3Vybjp4bXBwOnNuJyBieXRlcz0nODA5MicgbWQ1SGFzaD0nMTg4 MjkyNDJjYTdhNzJhNTUyYTdlMTVhZjViOWU0NGQnLz4KICAgICAgICA8c2NoZW1hIG5zPSd1cm46 eG1wcDpzbjpwcm92aXNpb25pbmcnIGJ5dGVzPSc2MzAzJyBtZDVIYXNoPSdlNTMwMWFkZDUxZjNi MjRjMTVhNzEyNTZiNTNkYWE0NycvPgogICAgPC9zZXR1cD5dXT4KICAgICAgICAgICAgPC9leGFt cGxlPgogICAgICAgICAgICA8cD4KICAgICAgICAgICAgICAgIEFuZCB0aGUgc2VydmVyIHNob3Vs ZCBub3cgcmVzcG9uZDoKICAgICAgICAgICAgPC9wPgogICAgICAgICAgICA8ZXhhbXBsZSBjYXB0 aW9uPSdBZ3JlZW1lbnQgYmV0d2VlbiBjbGllbnQgYW5kIHNlcnZlcic+CiAgICAgICAgICAgICAg ICA8IVtDREFUQVsKICAgIDxzZXR1cFJlc3BvbnNlIHhtbG5zPSdodHRwOi8vamFiYmVyLm9yZy9w cm90b2NvbC9jb21wcmVzcy9leGknIHZlcnNpb249JzEnIHN0cmljdD0ndHJ1ZScgCiAgICAgICAg ICAgICAgICAgICBibG9ja1NpemU9JzEwMjQnIHZhbHVlTWF4TGVuZ3RoPSczMicgdmFsdWVQYXJ0 aXRpb25DYXBhY2l0eT0nMTAwJyBhZ3JlZW1lbnQ9J3RydWUnPgogICAgICAgIDxzY2hlbWEgbnM9 J3Vybjp4bXBwOnNuJyBieXRlcz0nODA5MicgbWQ1SGFzaD0nMTg4MjkyNDJjYTdhNzJhNTUyYTdl MTVhZjViOWU0NGQnLz4KICAgICAgICA8c2NoZW1hIG5zPSd1cm46eG1wcDpzbjpwcm92aXNpb25p bmcnIGJ5dGVzPSc2MzAzJyBtZDVIYXNoPSdlNTMwMWFkZDUxZjNiMjRjMTVhNzEyNTZiNTNkYWE0 NycvPgogICAgPC9zZXR1cFJlc3BvbnNlPl1dPgogICAgICAgICAgICA8L2V4YW1wbGU+CiAgICAg ICAgICAgIDxwPgogICAgICAgICAgICAgICAgTm90ZSB0aGUgPHN0cm9uZz5hZ3JlZW1lbnQ8L3N0 cm9uZz4gYXR0cmlidXRlIGluIHRoZSByZXNwb25zZSB0aGlzIHRpbWUuIFRoZSBzZXJ2ZXIgbXVz dCBzZXQgdGhpcyBhdHRyaWJ1dGUgdG8gdHJ1ZSBpZiBpdCBhZ3JlZXMgd2l0aCB0aGUgcHJvcG9z YWwgZnJvbSB0aGUgY2xpZW50LgogICAgICAgICAgICAgICAgVGhlIGNsaWVudCBpbiB0dXJuIGNh biBjaGVjayB0aGlzIGF0dHJpYnV0ZSBhcyBhIHF1aWNrIHdheSB0byBjaGVjayBpZiBhZ3JlZW1l bnQgZXhpc3RzLgogICAgICAgICAgICA8L3A+CiAgICAgICAgPC9zZWN0aW9uMj4KICAgICAgICA8 c2VjdGlvbjIgdG9waWM9J0Rvd25sb2FkaW5nIG5ldyBzY2hlbWEgZmlsZXMgb24gc2VydmVyJz4K ICAgICAgICAgICAgPHA+CiAgICAgICAgICAgICAgICBBcyBhbiBhbHRlcm5hdGl2ZSB0byB1cGxv YWRpbmcgYSBzY2hlbWEgZmlsZSB0byB0aGUgc2VydmVyLCB0aGUgY2xpZW50IGNhbiBhc2sgdGhl IHNlcnZlciB0byBkb3dubG9hZCBhIHNjaGVtYSBmaWxlIGJ5IGl0c2VsZi4gVGhpcyBpcyBkb25l IHVzaW5nIHRoZSA8c3Ryb25nPmRvd25sb2FkU2NoZW1hPC9zdHJvbmc+CiAgICAgICAgICAgICAg ICBjb21tYW5kLCBhcyBmb2xsb3dzOgogICAgICAgICAgICA8L3A+CiAgICAgICAgICAgIDxleGFt cGxlIGNhcHRpb249J0Rvd25sb2FkaW5nIG5ldyBzY2hlbWEgZmlsZXMgb24gc2VydmVyJz4KICAg ICAgICAgICAgICAgIDwhW0NEQVRBWwogICAgPGRvd25sb2FkU2NoZW1hIHhtbG5zPSdodHRwOi8v amFiYmVyLm9yZy9wcm90b2NvbC9jb21wcmVzcy9leGknIHVybD0naHR0cDovL3NjaGVtYXZhdWx0 LnNlL2NvbXByZXNzL3NuL3Byb3Zpc2lvbmluZy54c2QnLz5dXT4KICAgICAgICAgICAgPC9leGFt cGxlPgogICAgICAgICAgICA8cD4KICAgICAgICAgICAgICAgIFRoZSBzZXJ2ZXIgdHJpZXMgdG8g ZG93bmxvYWQgdGhlIHNjaGVtYSBieSBpdHNlbGYsIGFuZCB0aGVuIGNvbXB1dGVzIHRoZSA8c3Ry b25nPnRhcmdldCBuYW1lc3BhY2U8L3N0cm9uZz4sIDxzdHJvbmc+Ynl0ZSBzaXplPC9zdHJvbmc+ IGFuZCA8c3Ryb25nPk1ENSBIYXNoPC9zdHJvbmc+IAogICAgICAgICAgICAgICAgZnJvbSB0aGUg ZG93bmxvYWRlZCBzY2hlbWEuCiAgICAgICAgICAgIDwvcD4KICAgICAgICAgICAgPHA+CiAgICAg ICAgICAgICAgICBXaGVuIHRoZSBzY2hlbWEgaGFzIGJlZW4gZG93bmxvYWRlZCwgYSBzdWNjZXNz ZnVsIGRvd25sb2FkIHJlc3BvbnNlIGlzIHJldHVybmVkLCBhcyBmb2xsb3dzOgogICAgICAgICAg ICA8L3A+CiAgICAgICAgICAgIDxleGFtcGxlIGNhcHRpb249J1NjaGVtYSBzdWNjZXNzZnVsbHkg ZG93bmxvYWRlZCc+CiAgICAgICAgICAgICAgICA8IVtDREFUQVsKICAgIDxkb3dubG9hZFNjaGVt YVJlc3BvbnNlIHhtbG5zPSdodHRwOi8vamFiYmVyLm9yZy9wcm90b2NvbC9jb21wcmVzcy9leGkn IHVybD0naHR0cDovL3NjaGVtYXZhdWx0LnNlL2NvbXByZXNzL3NuL3Byb3Zpc2lvbmluZy54c2Qn IHJlc3VsdD0ndHJ1ZScvPl1dPgogICAgICAgICAgICA8L2V4YW1wbGU+CiAgICAgICAgICAgIDxw PgogICAgICAgICAgICAgICAgSWYgYW4gSFRUUCBlcnJvciBvY2N1cnJlZCB3aGlsZSB0cnlpbmcg dG8gZG93bmxvYWQgdGhlIHNjaGVtYSwgYSByZXNwb25zZSBhcyBmb2xsb3dzIGlzIHJldHVybmVk OgogICAgICAgICAgICA8L3A+CiAgICAgICAgICAgIDxleGFtcGxlIGNhcHRpb249J0hUVFAgRXJy b3InPgogICAgICAgICAgICAgICAgPCFbQ0RBVEFbCiAgICA8ZG93bmxvYWRTY2hlbWFSZXNwb25z ZSB4bWxucz0naHR0cDovL2phYmJlci5vcmcvcHJvdG9jb2wvY29tcHJlc3MvZXhpJyB1cmw9J2h0 dHA6Ly9zY2hlbWF2YXVsdC5zZS9jb21wcmVzcy9zbi9wcm92aXNpb25pbmcueHNkJyByZXN1bHQ9 J2ZhbHNlJz4KICAgICAgICA8aHR0cEVycm9yIGNvZGU9JzQwNCcgbWVzc2FnZT0nTm90Rm91bmQn Lz4KICAgIDwvZG93bmxvYWRTY2hlbWFSZXNwb25zZT5dXT4KICAgICAgICAgICAgPC9leGFtcGxl PgogICAgICAgICAgICA8cD4KICAgICAgICAgICAgICAgIElmIHRoZSBVUkwgY291bGQgbm90IGJl IHJlc29sdmVkLCBhIHJlc3BvbnNlIGFzIGZvbGxvd3MgaXMgcmV0dXJuZWQ6CiAgICAgICAgICAg IDwvcD4KICAgICAgICAgICAgPGV4YW1wbGUgY2FwdGlvbj0nSW52YWxpZCBVUkwnPgogICAgICAg ICAgICAgICAgPCFbQ0RBVEFbCiAgICA8ZG93bmxvYWRTY2hlbWFSZXNwb25zZSB4bWxucz0naHR0 cDovL2phYmJlci5vcmcvcHJvdG9jb2wvY29tcHJlc3MvZXhpJyB1cmw9J3VyazovL2V4YW1wbGUu Y29tL3NjaGVtYS54c2QnIHJlc3VsdD0nZmFsc2UnPgogICAgICAgIDxpbnZhbGlkVXJsIG1lc3Nh Z2U9J1VucmVjb2duaXplZCBzY2hlbWEuJy8+CiAgICA8L2Rvd25sb2FkU2NoZW1hUmVzcG9uc2U+ XV0+CiAgICAgICAgICAgIDwvZXhhbXBsZT4KICAgICAgICAgICAgPHA+CiAgICAgICAgICAgICAg ICBJZiBhIHRpbWVvdXQgb2NjdXJyZWQgZHVyaW5nIHRoZSBkb3dubG9hZCBhdHRlbXB0LCBhIHJl c3BvbnNlIGFzIGZvbGxvd3MgaXMgcmV0dXJuZWQ6CiAgICAgICAgICAgIDwvcD4KICAgICAgICAg ICAgPGV4YW1wbGUgY2FwdGlvbj0nVGltZW91dCc+CiAgICAgICAgICAgICAgICA8IVtDREFUQVsK ICAgIDxkb3dubG9hZFNjaGVtYVJlc3BvbnNlIHhtbG5zPSdodHRwOi8vamFiYmVyLm9yZy9wcm90 b2NvbC9jb21wcmVzcy9leGknIHVybD0naHR0cDovL3NjaGVtYXZhdWx0LnNlL2NvbXByZXNzL3Nu L3Byb3Zpc2lvbmluZy54c2QnIHJlc3VsdD0nZmFsc2UnPgogICAgICAgIDx0aW1lb3V0IG1lc3Nh Z2U9J05vIHJlc3BvbnNlIHJldHVybmVkLicvPgogICAgPC9kb3dubG9hZFNjaGVtYVJlc3BvbnNl Pl1dPgogICAgICAgICAgICA8L2V4YW1wbGU+CiAgICAgICAgICAgIDxwPgogICAgICAgICAgICAg ICAgSWYgdGhlIHVybCBwb2ludHMgdG8gc29tZXRoaW5nIHRoYXQgaXMgbm90IGEgc2NoZW1hLCBh IHJlc3BvbnNlIGFzIGZvbGxvd3MgaXMgcmV0dXJuZWQ6CiAgICAgICAgICAgIDwvcD4KICAgICAg ICAgICAgPGV4YW1wbGUgY2FwdGlvbj0nSW52YWxpZCBDb250ZW50IFR5cGUnPgogICAgICAgICAg ICAgICAgPCFbQ0RBVEFbCiAgICA8ZG93bmxvYWRTY2hlbWFSZXNwb25zZSB4bWxucz0naHR0cDov L2phYmJlci5vcmcvcHJvdG9jb2wvY29tcHJlc3MvZXhpJyB1cmw9J2h0dHA6Ly9zY2hlbWF2YXVs dC5zZS9jb21wcmVzcy9zbi9wcm92aXNpb25pbmcueHNkJyByZXN1bHQ9J2ZhbHNlJz4KICAgICAg ICA8aW52YWxpZENvbnRlbnRUeXBlIGNvbnRlbnRUeXBlUmV0dXJuZWQ9J3RleHQvaHRtbCcvPgog ICAgPC9kb3dubG9hZFNjaGVtYVJlc3BvbnNlPl1dPgogICAgICAgICAgICA8L2V4YW1wbGU+CiAg ICAgICAgICAgIDxwPgogICAgICAgICAgICAgICAgSWYgc29tZSBvdGhlciBlcnJvciBvY2N1cnMs IHVuZm9yc2VlbiBieSB0aGlzIHNwZWNpZmljYXRpb24sIHRoZSBzZXJ2ZXIgY2FuIHNpbXBseSBy ZXNwb25kIHdpdGggYSBnZW5lcmljIGVycm9yIG1lc3NhZ2UsIGFzIGZvbGxvd3M6CiAgICAgICAg ICAgIDwvcD4KICAgICAgICAgICAgPGV4YW1wbGUgY2FwdGlvbj0nT3RoZXIgdHlwZXMgb2YgZXJy b3JzJz4KICAgICAgICAgICAgICAgIDwhW0NEQVRBWwogICAgPGRvd25sb2FkU2NoZW1hUmVzcG9u c2UgeG1sbnM9J2h0dHA6Ly9qYWJiZXIub3JnL3Byb3RvY29sL2NvbXByZXNzL2V4aScgdXJsPSdo dHRwOi8vc2NoZW1hdmF1bHQuc2UvY29tcHJlc3Mvc24vcHJvdmlzaW9uaW5nLnhzZCcgcmVzdWx0 PSdmYWxzZSc+CiAgICAgICAgPGVycm9yIG1lc3NhZ2U9J05vIGZyZWUgc3BhY2UgbGVmdC4nLz4K ICAgIDwvZG93bmxvYWRTY2hlbWFSZXNwb25zZT5dXT4KICAgICAgICAgICAgPC9leGFtcGxlPgog ICAgICAgICAgICA8cD4KICAgICAgICAgICAgICAgIDxzdHJvbmc+Tm90ZTo8L3N0cm9uZz4gRG93 bmxvYWRpbmcgYSBzY2hlbWEsIG1pZ2h0IGRvd25sb2FkIGEgdmVyc2lvbiB3aGljaCBkb2VzIG5v dCBjb3JyZXNwb25kIHRvIHRoZSBkZXNpcmVkIHZlcnNpb24KICAgICAgICAgICAgICAgIG9mIHRo ZSBzY2hlbWEuIFNvLCBpdCdzIG1vcmUgaW1wb3J0YW50IGluIHRoaXMgY2FzZSwgdGhlIGNsaWVu dCBjaGVja3MgdGhhdCB0aGUgc2VydmVyIGFjdHVhbGx5IGhhcyB0aGUgdmVyc2lvbiBvZiB0aGUg c2NoZW1hIHJlcXVpcmVkIGJ5IHRoZSBjbGllbnQuCiAgICAgICAgICAgIDwvcD4KICAgICAgICA8 L3NlY3Rpb24yPgogICAgICAgIDxzZWN0aW9uMiB0b3BpYz0nU3RhcnRpbmcgY29tcHJlc3Npb24n PgogICAgICAgICAgICA8cD4KICAgICAgICAgICAgICAgIFdoZW4gRVhJIG9wdGlvbiBuZWdvdGlh dGlvbiBoYXMgYmVlbiBjb21wbGV0ZWQsIHRoZSBjbGllbnQgY2FuIHRlbGwgdGhlIHNlcnZlciB0 aGF0IGl0IGlzIHJlYWR5IHRvIHN0YXJ0IGNvbXByZXNzaW9uLiBJdCBkb2VzIHRoaXMgdXNpbmcg dGhlIG5vcm1hbCA8c3Ryb25nPmNvbXByZXNzPC9zdHJvbmc+CiAgICAgICAgICAgICAgICBzdGFu emEsIGFzIGZvbGxvd3M6CiAgICAgICAgICAgIDwvcD4KICAgICAgICAgICAgPGV4YW1wbGU+CiAg ICAgICAgICAgICAgICA8IVtDREFUQVsKICAgIDxjb21wcmVzcyB4bWxucz0naHR0cDovL2phYmJl ci5vcmcvcHJvdG9jb2wvY29tcHJlc3MnPgogICAgICAgIDxtZXRob2Q+ZXhpPC9tZXRob2Q+CiAg ICA8L2NvbXByZXNzPl1dPgogICAgICAgICAgICA8L2V4YW1wbGU+CiAgICAgICAgICAgIDxwPgog ICAgICAgICAgICAgICAgVGhlIHNlcnZlciBub3cgaGF2aW5nIG5lY2Vzc2FyeSBrbm93bGVkZ2Ug b24gaG93IHRoZSBFWEkgZW5naW5lIHNob3VsZCBiZSBjb25maWd1cmVkIGZvciB0aGUgY3VycmVu dCBzZXNzaW9uLCByZXNwb25kczoKICAgICAgICAgICAgPC9wPgogICAgICAgICAgICA8ZXhhbXBs ZT4KICAgICAgICAgICAgICAgIDwhW0NEQVRBWwogICAgPGNvbXByZXNzZWQgeG1sbnM9J2h0dHA6 Ly9qYWJiZXIub3JnL3Byb3RvY29sL2NvbXByZXNzJy8+XV0+CiAgICAgICAgICAgIDwvZXhhbXBs ZT4KICAgICAgICAgICAgPHA+CiAgICAgICAgICAgICAgICBXaGVuIHRoZSBjbGllbnQgcmVjZWl2 ZXMgYWNrbm93bGVkZ2VtZW50IHRoYXQgdGhlIGNvbXByZXNzaW9uIG1ldGhvZCBoYXMgYmVlbiBh Y2NlcHRlZCwgaXQgcmVzdGFydHMgdGhlIHN0cmVhbSwgYXMgZXhwbGFpbmVkIGluIAogICAgICAg ICAgICAgICAgPGxpbmsgdXJsPSdodHRwOi8veG1wcC5vcmcvZXh0ZW5zaW9ucy94ZXAtMDEzOC5o dG1sI3VzZWNhc2UnPlhFUCAwMTM4PC9saW5rPi4KICAgICAgICAgICAgPC9wPgogICAgICAgIDwv c2VjdGlvbjI+CiAgICA8L3NlY3Rpb24xPgogICAgPHNlY3Rpb24xIHRvcGljPSdJbXBsZW1lbnRh dGlvbiBOb3RlcycgYW5jaG9yPSdpbXBsJz4KICAgICAgICA8c2VjdGlvbjIgdG9waWM9J0VYSSBv cHRpb25zJz4KICAgICAgICAgICAgPHA+CiAgICAgICAgICAgICAgICBUaGUgZm9sbG93aW5nIHNl Z21lbnQgaXMgdGFrZW4gZnJvbSB0aGUgPGxpbmsgdXJsPSdodHRwOi8vd3d3LnczLm9yZy9UUi9l eGkvI29wdGlvbnMnPkVYSSBzcGVjaWZpY2F0aW9uPC9saW5rPi4gSXQgZGVzY3JpYmVzIHRoZSBk aWZmZXJlbnQgRVhJIG9wdGlvbnMgdGhhdCBuZWVkIHRvIGJlIG5lZ290aWF0ZWQgYmVmb3JlIGVu YWJsaW5nIEVYSS4KICAgICAgICAgICAgPC9wPgogICAgICAgICAgICA8cD4KICAgICAgICAgICAg ICAgIFRoZSA8c3Ryb25nPmFsaWdubWVudCBvcHRpb248L3N0cm9uZz4gaXMgdXNlZCB0byBjb250 cm9sIHRoZSBhbGlnbm1lbnQgb2YgZXZlbnQgY29kZXMgYW5kIGNvbnRlbnQgaXRlbXMuIFRoZSB2 YWx1ZSBpcyBvbmUgb2YgYml0LXBhY2tlZCwgYnl0ZS1hbGlnbm1lbnQgb3IgcHJlLWNvbXByZXNz aW9uLCBvZiB3aGljaCBiaXQtcGFja2VkIGlzIHRoZSBkZWZhdWx0IHZhbHVlIGFzc3VtZWQgd2hl biB0aGUgImFsaWdubWVudCIgZWxlbWVudCBpcyBhYnNlbnQgaW4gdGhlIEVYSSBPcHRpb25zIGRv Y3VtZW50LiBUaGUgb3B0aW9uIHZhbHVlcyBieXRlLWFsaWdubWVudCBhbmQgcHJlLWNvbXByZXNz aW9uIGFyZSBlZmZlY3RlZCB3aGVuICJieXRlIiBhbmQgInByZS1jb21wcmVzcyIgZWxlbWVudHMg YXJlIHByZXNlbnQgaW4gdGhlIEVYSSBPcHRpb25zIGRvY3VtZW50LCByZXNwZWN0aXZlbHkuIFdo ZW4gdGhlIHZhbHVlIG9mIGNvbXByZXNzaW9uIG9wdGlvbiBpcyBzZXQgdG8gdHJ1ZSwgYWxpZ25t ZW50IG9mIHRoZSBFWEkgQm9keSBpcyBnb3Zlcm5lZCBieSB0aGUgcnVsZXMgc3BlY2lmaWVkIGlu IDxsaW5rIHVybD0naHR0cDovL3d3dy53My5vcmcvVFIvZXhpLyNjb21wcmVzc2lvbic+OS4gRVhJ IENvbXByZXNzaW9uPC9saW5rPiBpbnN0ZWFkIG9mIHRoZSBhbGlnbm1lbnQgb3B0aW9uIHZhbHVl LiBUaGUgImFsaWdubWVudCIgZWxlbWVudCBNVVNUIE5PVCBhcHBlYXIgaW4gYW4gRVhJIG9wdGlv bnMgZG9jdW1lbnQgd2hlbiB0aGUgImNvbXByZXNzaW9uIiBlbGVtZW50IGlzIHByZXNlbnQuCiAg ICAgICAgICAgIDwvcD4KICAgICAgICAgICAgPHA+CiAgICAgICAgICAgICAgICBUaGUgYWxpZ25t ZW50IG9wdGlvbiB2YWx1ZSA8c3Ryb25nPmJpdC1wYWNrZWQ8L3N0cm9uZz4gaW5kaWNhdGVzIHRo YXQgdGhlIGV2ZW50IGNvZGVzIGFuZCBhc3NvY2lhdGVkIGNvbnRlbnQgYXJlIHBhY2tlZCBpbiBi aXRzIHdpdGhvdXQgYW55IHBhZGRpbmcgaW4tYmV0d2Vlbi4KICAgICAgICAgICAgPC9wPgogICAg ICAgICAgICA8cD4KICAgICAgICAgICAgICAgIFRoZSBhbGlnbm1lbnQgb3B0aW9uIHZhbHVlIDxz dHJvbmc+Ynl0ZS1hbGlnbm1lbnQ8L3N0cm9uZz4gaW5kaWNhdGVzIHRoYXQgdGhlIGV2ZW50IGNv ZGVzIGFuZCBhc3NvY2lhdGVkIGNvbnRlbnQgYXJlIGFsaWduZWQgb24gYnl0ZSBib3VuZGFyaWVz LiBXaGlsZSBieXRlLWFsaWdubWVudCBnZW5lcmFsbHkgcmVzdWx0cyBpbiBFWEkgc3RyZWFtcyBv ZiBsYXJnZXIgc2l6ZXMgY29tcGFyZWQgd2l0aCB0aGVpciBiaXQtcGFja2VkIGVxdWl2YWxlbnRz LCBieXRlLWFsaWdubWVudCBtYXkgcHJvdmlkZSBhIGhlbHAgaW4gc29tZSB1c2UgY2FzZXMgdGhh dCBpbnZvbHZlIGZyZXF1ZW50IGNvcHlpbmcgb2YgbGFyZ2UgYXJyYXlzIG9mIHNjYWxhciBkYXRh IGRpcmVjdGx5IG91dCBvZiB0aGUgc3RyZWFtLiBJdCBjYW4gYWxzbyBtYWtlIGl0IHBvc3NpYmxl IHRvIHdvcmsgd2l0aCBkYXRhIGluLXBsYWNlIGFuZCBjYW4gbWFrZSBpdCBlYXNpZXIgdG8gZGVi dWcgZW5jb2RlZCBkYXRhIGJ5IGFsbG93aW5nIGl0ZW1zIG9uIGFsaWduZWQgYm91bmRhcmllcyB0 byBiZSBlYXNpbHkgbG9jYXRlZCBpbiB0aGUgc3RyZWFtLgogICAgICAgICAgICA8L3A+CiAgICAg ICAgICAgIDxwPgogICAgICAgICAgICAgICAgVGhlIGFsaWdubWVudCBvcHRpb24gdmFsdWUgPHN0 cm9uZz5wcmUtY29tcHJlc3Npb248L3N0cm9uZz4gaW5kaWNhdGVzIHRoYXQgYWxsIHN0ZXBzIGlu dm9sdmVkIGluIGNvbXByZXNzaW9uIChzZWUgc2VjdGlvbiA8bGluayB1cmw9J2h0dHA6Ly93d3cu dzMub3JnL1RSL2V4aS8jY29tcHJlc3Npb24nPjkuIEVYSSBDb21wcmVzc2lvbjwvbGluaz4pIGFy ZSB0byBiZSBkb25lIHdpdGggdGhlIGV4Y2VwdGlvbiBvZiB0aGUgZmluYWwgc3RlcCBvZiBhcHBs eWluZyB0aGUgREVGTEFURSBhbGdvcml0aG0uIFRoZSBwcmltYXJ5IHVzZSBjYXNlIG9mIHByZS1j b21wcmVzc2lvbiBpcyB0byBhdm9pZCBhIGR1cGxpY2F0ZSBjb21wcmVzc2lvbiBzdGVwIHdoZW4g Y29tcHJlc3Npb24gY2FwYWJpbGl0eSBpcyBidWlsdCBpbnRvIHRoZSB0cmFuc3BvcnQgcHJvdG9j b2wuIEluIHRoaXMgY2FzZSwgcHJlLWNvbXByZXNzaW9uIGp1c3QgcHJlcGFyZXMgdGhlIHN0cmVh bSBmb3IgbGF0ZXIgY29tcHJlc3Npb24uCiAgICAgICAgICAgIDwvcD4KICAgICAgICAgICAgPHA+ CiAgICAgICAgICAgICAgICBUaGUgPHN0cm9uZz5jb21wcmVzc2lvbiBvcHRpb248L3N0cm9uZz4g aXMgYSBCb29sZWFuIHVzZWQgdG8gaW5jcmVhc2UgY29tcGFjdG5lc3MgdXNpbmcgYWRkaXRpb25h bCBjb21wdXRhdGlvbmFsIHJlc291cmNlcy4gVGhlIGRlZmF1bHQgdmFsdWUgImZhbHNlIiBpcyBh c3N1bWVkIHdoZW4gdGhlICJjb21wcmVzc2lvbiIgZWxlbWVudCBpcyBhYnNlbnQgaW4gdGhlIEVY SSBPcHRpb25zIGRvY3VtZW50IHdoZXJlYXMgaXRzIHByZXNlbmNlIGRlbm90ZXMgdGhlIHZhbHVl ICJ0cnVlIi4gV2hlbiBzZXQgdG8gdHJ1ZSwgdGhlIGV2ZW50IGNvZGVzIGFuZCBhc3NvY2lhdGVk IGNvbnRlbnQgYXJlIGNvbXByZXNzZWQgYWNjb3JkaW5nIHRvIDxsaW5rIHVybD0naHR0cDovL3d3 dy53My5vcmcvVFIvZXhpLyNjb21wcmVzc2lvbic+OS4gRVhJIENvbXByZXNzaW9uPC9saW5rPiBy ZWdhcmRsZXNzIG9mIHRoZSBhbGlnbm1lbnQgb3B0aW9uIHZhbHVlLiBBcyBtZW50aW9uZWQgYWJv dmUsIHRoZSAiY29tcHJlc3Npb24iIGVsZW1lbnQgTVVTVCBOT1QgYXBwZWFyIGluIGFuIEVYSSBv cHRpb25zIGRvY3VtZW50IHdoZW4gdGhlICJhbGlnbm1lbnQiIGVsZW1lbnQgaXMgcHJlc2VudC4K ICAgICAgICAgICAgPC9wPgogICAgICAgICAgICA8cD4KICAgICAgICAgICAgICAgIFRoZSA8c3Ry b25nPnN0cmljdCBvcHRpb248L3N0cm9uZz4gaXMgYSBCb29sZWFuIHVzZWQgdG8gaW5jcmVhc2Ug Y29tcGFjdG5lc3MgYnkgdXNpbmcgYSBzdHJpY3QgaW50ZXJwcmV0YXRpb24gb2YgdGhlIHNjaGVt YXMgYW5kIG9taXR0aW5nIHByZXNlcnZhdGlvbiBvZiBjZXJ0YWluIGl0ZW1zLCBzdWNoIGFzIGNv bW1lbnRzLCBwcm9jZXNzaW5nIGluc3RydWN0aW9ucyBhbmQgbmFtZXNwYWNlIHByZWZpeGVzLiBU aGUgZGVmYXVsdCB2YWx1ZSAiZmFsc2UiIGlzIGFzc3VtZWQgd2hlbiB0aGUgInN0cmljdCIgZWxl bWVudCBpcyBhYnNlbnQgaW4gdGhlIEVYSSBPcHRpb25zIGRvY3VtZW50IHdoZXJlYXMgaXRzIHBy ZXNlbmNlIGRlbm90ZXMgdGhlIHZhbHVlICJ0cnVlIi4gV2hlbiBzZXQgdG8gdHJ1ZSwgdGhvc2Ug cHJvZHVjdGlvbnMgdGhhdCBoYXZlIE5TLCBDTSwgUEksIEVSLCBhbmQgU0MgdGVybWluYWwgc3lt Ym9scyBhcmUgb21pdHRlZCBmcm9tIHRoZSBFWEkgZ3JhbW1hcnMsIGFuZCBzY2hlbWEtaW5mb3Jt ZWQgZWxlbWVudCBhbmQgdHlwZSBncmFtbWFycyBhcmUgcmVzdHJpY3RlZCB0byBvbmx5IHBlcm1p dCBpdGVtcyBkZWNsYXJlZCBpbiB0aGUgc2NoZW1hcy4gQSBub3RlIGluIHNlY3Rpb24gPGxpbmsg dXJsPSdodHRwOi8vd3d3LnczLm9yZy9UUi9leGkvI2FkZGluZ1Byb2R1Y3Rpb25zU3RyaWN0Jz44 LjUuNC40LjIgQWRkaW5nIFByb2R1Y3Rpb25zIHdoZW4gU3RyaWN0IGlzIFRydWU8L2xpbms+IGRl c2NyaWJlcyBzb21lIGFkZGl0aW9uYWwgcmVzdHJpY3Rpb25zIGNvbnNlcXVlbnRpYWwgb2YgdGhl IHVzZSBvZiB0aGlzIG9wdGlvbi4gVGhlICJzdHJpY3QiIGVsZW1lbnQgTVVTVCBOT1QgYXBwZWFy IGluIGFuIEVYSSBvcHRpb25zIGRvY3VtZW50IHdoZW4gb25lIG9mICJkdGQiLCAicHJlZml4ZXMi LCAiY29tbWVudHMiLCAicGlzIiBvciAic2VsZkNvbnRhaW5lZCIgZWxlbWVudCBpcyBwcmVzZW50 IGluIHRoZSBzYW1lIG9wdGlvbnMgZG9jdW1lbnQuCiAgICAgICAgICAgIDwvcD4KICAgICAgICAg ICAgPHA+CiAgICAgICAgICAgICAgICBUaGUgPHN0cm9uZz5wcmVzZXJ2ZSBvcHRpb248L3N0cm9u Zz4gaXMgYSBzZXQgb2YgQm9vbGVhbnMgdGhhdCBjYW4gYmUgc2V0IGluZGVwZW5kZW50bHkgdG8g ZWFjaCBlbmFibGUgb3IgZGlzYWJsZSBhIHNoYXJlIG9mIHRoZSBmb3JtYXQncyBjYXBhY2l0eSBk ZXRlcm1pbmluZyB3aGV0aGVyIG9yIGhvdyBjZXJ0YWluIGluZm9ybWF0aW9uIGl0ZW1zIGNhbiBi ZSBwcmVzZXJ2ZWQgaW4gdGhlIEVYSSBzdHJlYW0uIFNlY3Rpb24gPGxpbmsgdXJsPSdodHRwOi8v d3d3LnczLm9yZy9UUi9leGkvI2ZpZGVsaXR5T3B0aW9ucyc+Ni4zIEZpZGVsaXR5IE9wdGlvbnM8 L2xpbms+IGRlc2NyaWJlcyB0aGUgc2V0IG9mIGluZm9ybWF0aW9uIGl0ZW1zIGFmZmVjdGVkIGJ5 IHRoZSBwcmVzZXJ2ZSBvcHRpb24uIFRoZSBwcmVzZW5jZSBvZiAiZHRkIiwgInByZWZpeGVzIiwg ImxleGljYWxWYWx1ZXMiLCAiY29tbWVudHMiIGFuZCAicGlzIiBpbiB0aGUgRVhJIE9wdGlvbnMg ZG9jdW1lbnQgZWFjaCB0dXJucyBvbiBmaWRlbGl0eSBvcHRpb25zIFByZXNlcnZlLmNvbW1lbnRz LCBQcmVzZXJ2ZS5waXMsIFByZXNlcnZlLmR0ZCwgUHJlc2VydmUucHJlZml4ZXMgYW5kIFByZXNl cnZlLmxleGljYWxWYWx1ZXMgd2hlcmVhcyB0aGUgYWJzZW5jZSBkZW5vdGVzIHR1cm5pbmcgZWFj aCBvZmYuIFRoZSBlbGVtZW50cyAiZHRkIiwgInByZWZpeGVzIiwgImNvbW1lbnRzIiBhbmQgInBp cyIgTVVTVCBOT1QgYXBwZWFyIGluIGFuIEVYSSBvcHRpb25zIGRvY3VtZW50IHdoZW4gdGhlICJz dHJpY3QiIGVsZW1lbnQgaXMgcHJlc2VudCBpbiB0aGUgc2FtZSBvcHRpb25zIGRvY3VtZW50LiBU aGUgZWxlbWVudCAibGV4aWNhbFZhbHVlcyIsIG9uIHRoZSBvdGhlciBoYW5kLCBpcyBwZXJtaXR0 ZWQgdG8gb2NjdXIgaW4gdGhlIHByZXNlbmNlIG9mICJzdHJpY3QiIGVsZW1lbnQuCiAgICAgICAg ICAgIDwvcD4KICAgICAgICAgICAgPHA+CiAgICAgICAgICAgICAgICBUaGUgPHN0cm9uZz5zZWxm Q29udGFpbmVkIG9wdGlvbjwvc3Ryb25nPiBpcyBhIEJvb2xlYW4gdXNlZCB0byBlbmFibGUgdGhl IHVzZSBvZiBzZWxmLWNvbnRhaW5lZCBlbGVtZW50cyBpbiB0aGUgRVhJIHN0cmVhbS4gU2VsZi1j b250YWluZWQgZWxlbWVudHMgbWF5IGJlIHJlYWQgaW5kZXBlbmRlbnRseSBmcm9tIHRoZSByZXN0 IG9mIHRoZSBFWEkgYm9keSwgYWxsb3dpbmcgdGhlbSB0byBiZSBpbmRleGVkIGZvciByYW5kb20g YWNjZXNzLiBUaGUgInNlbGZDb250YWluZWQiIGVsZW1lbnQgTVVTVCBOT1QgYXBwZWFyIGluIGFu IEVYSSBvcHRpb25zIGRvY3VtZW50IHdoZW4gb25lIG9mICJjb21wcmVzc2lvbiIsICJwcmUtY29t cHJlc3Npb24iIG9yICJzdHJpY3QiIGVsZW1lbnRzIGFyZSBwcmVzZW50IGluIHRoZSBzYW1lIG9w dGlvbnMgZG9jdW1lbnQuIFRoZSBkZWZhdWx0IHZhbHVlICJmYWxzZSIgaXMgYXNzdW1lZCB3aGVu IHRoZSAic2VsZkNvbnRhaW5lZCIgZWxlbWVudCBpcyBhYnNlbnQgZnJvbSB0aGUgRVhJIE9wdGlv bnMgZG9jdW1lbnQgd2hlcmVhcyBpdHMgcHJlc2VuY2UgZGVub3RlcyB0aGUgdmFsdWUgInRydWUi LgogICAgICAgICAgICA8L3A+CiAgICAgICAgICAgIDxwPgogICAgICAgICAgICAgICAgVGhlIDxz dHJvbmc+ZGF0YXR5cGVSZXByZXNlbnRhdGlvbk1hcCBvcHRpb248L3N0cm9uZz4gc3BlY2lmaWVz IGFuIGFsdGVybmF0ZSBzZXQgb2YgZGF0YXR5cGUgcmVwcmVzZW50YXRpb25zIGZvciB0eXBlZCB2 YWx1ZXMgaW4gdGhlIEVYSSBib2R5IGFzIGRlc2NyaWJlZCBpbiA8bGluayB1cmw9J2h0dHA6Ly93 d3cudzMub3JnL1RSL2V4aS8jZGF0YXR5cGVSZXByZXNlbnRhdGlvbk1hcCc+Ny40IERhdGF0eXBl IFJlcHJlc2VudGF0aW9uIE1hcDwvbGluaz4uIFdoZW4gdGhlcmUgYXJlIG5vICJkYXRhdHlwZVJl cHJlc2VudGF0aW9uTWFwIiBlbGVtZW50cyBpbiB0aGUgRVhJIE9wdGlvbnMgZG9jdW1lbnQsIG5v IERhdGF0eXBlIFJlcHJlc2VudGF0aW9uIE1hcCBpcyB1c2VkIGZvciBwcm9jZXNzaW5nIHRoZSBF WEkgYm9keS4gVGhpcyBvcHRpb24gZG9lcyBub3QgdGFrZSBlZmZlY3Qgd2hlbiB0aGUgdmFsdWUg b2YgdGhlIFByZXNlcnZlLmxleGljYWxWYWx1ZXMgZmlkZWxpdHkgb3B0aW9uIGlzIHRydWUgKHNl ZSA8bGluayB1cmw9J2h0dHA6Ly93d3cudzMub3JnL1RSL2V4aS8jZmlkZWxpdHlPcHRpb25zJz42 LjMgRmlkZWxpdHkgT3B0aW9uczwvbGluaz4pLCBvciB3aGVuIHRoZSBFWEkgc3RyZWFtIGlzIGEg c2NoZW1hLWxlc3MgRVhJIHN0cmVhbS4KICAgICAgICAgICAgPC9wPgogICAgICAgICAgICA8cD4K ICAgICAgICAgICAgICAgIFRoZSA8c3Ryb25nPmJsb2NrU2l6ZSBvcHRpb248L3N0cm9uZz4gc3Bl Y2lmaWVzIHRoZSBibG9jayBzaXplIHVzZWQgZm9yIEVYSSBjb21wcmVzc2lvbi4gV2hlbiB0aGUg ImJsb2NrU2l6ZSIgZWxlbWVudCBpcyBhYnNlbnQgaW4gdGhlIEVYSSBPcHRpb25zIGRvY3VtZW50 LCB0aGUgZGVmYXVsdCBibG9ja3NpemUgb2YgMSwwMDAsMDAwIGlzIHVzZWQuIFRoZSBkZWZhdWx0 IGJsb2NrU2l6ZSBpcyBpbnRlbnRpb25hbGx5IGxhcmdlIGJ1dCBjYW4gYmUgcmVkdWNlZCBmb3Ig cHJvY2Vzc2luZyBsYXJnZSBkb2N1bWVudHMgb24gZGV2aWNlcyB3aXRoIGxpbWl0ZWQgbWVtb3J5 LgogICAgICAgICAgICA8L3A+CiAgICAgICAgICAgIDxwPgogICAgICAgICAgICAgICAgIFRoZSA8 c3Ryb25nPnZhbHVlTWF4TGVuZ3RoIG9wdGlvbjwvc3Ryb25nPiBzcGVjaWZpZXMgdGhlIG1heGlt dW0gbGVuZ3RoIG9mIHZhbHVlIGNvbnRlbnQgaXRlbXMgdG8gYmUgY29uc2lkZXJlZCBmb3IgYWRk aXRpb24gdG8gdGhlIHN0cmluZyB0YWJsZS4gVGhlIGRlZmF1bHQgdmFsdWUgInVuYm91bmRlZCIg aXMgYXNzdW1lZCB3aGVuIHRoZSAidmFsdWVNYXhMZW5ndGgiIGVsZW1lbnQgaXMgYWJzZW50IGlu IHRoZSBFWEkgT3B0aW9ucyBkb2N1bWVudC4KICAgICAgICAgICAgPC9wPgogICAgICAgICAgICA8 cD4KICAgICAgICAgICAgICAgICBUaGUgPHN0cm9uZz52YWx1ZVBhcnRpdGlvbkNhcGFjaXR5IG9w dGlvbjwvc3Ryb25nPiBzcGVjaWZpZXMgdGhlIG1heGltdW0gbnVtYmVyIG9mIHZhbHVlIGNvbnRl bnQgaXRlbXMgaW4gdGhlIHN0cmluZyB0YWJsZSBhdCBhbnkgZ2l2ZW4gdGltZS4gVGhlIGRlZmF1 bHQgdmFsdWUgInVuYm91bmRlZCIgaXMgYXNzdW1lZCB3aGVuIHRoZSAidmFsdWVQYXJ0aXRpb25D YXBhY2l0eSIgZWxlbWVudCBpcyBhYnNlbnQgaW4gdGhlIEVYSSBPcHRpb25zIGRvY3VtZW50LiBT ZWN0aW9uIDxsaW5rIHVybD0naHR0cDovL3d3dy53My5vcmcvVFIvZXhpLyNlbmNvZGluZ09wdGlt aXplZEZvck1pc3Nlcyc+Ny4zLjMgUGFydGl0aW9ucyBPcHRpbWl6ZWQgZm9yIEZyZXF1ZW50IHVz ZSBvZiBTdHJpbmcgTGl0ZXJhbHM8L2xpbms+IHNwZWNpZmllcyB0aGUgYmVoYXZpb3Igb2YgdGhl IHN0cmluZyB0YWJsZSB3aGVuIHRoaXMgY2FwYWNpdHkgaXMgcmVhY2hlZC4KICAgICAgICAgICAg PC9wPgogICAgICAgICAgICA8cD4KICAgICAgICAgICAgICAgIFRoZSA8c3Ryb25nPnNlc3Npb25X aWRlQnVmZmVyczwvc3Ryb25nPiBjb250cm9scyBidWZmZXIgYW5kIHN0cmluZyB0YWJsZSBsaWZl IHRpbWUuIElmIHNldCB0byB0cnVlLCBhbGwgYnVmZmVycywgc3RyaW5nIHRhYmxlcywgZXRjLiB3 aWxsIGJlIG1haW50YWluZWQgZHVyaW5nIHRoZSBlbnRpcmUgc2Vzc2lvbi4gCiAgICAgICAgICAg ICAgICBUaGlzIG1heSBpbXByb3ZlIHBlcmZvcm1hbmNlIGR1cmluZyB0aW1lIHNpbmNlIHN0cmlu Z3MgY2FuIGJlIG9taXR0ZWQgaW4gdGhlIGNvbXByZXNzZWQgYmluYXJ5IHN0cmVhbSwgYnV0IGl0 IG1pZ2h0IGFsc28gaW4gc29tZSBjYXNlcyBkZWdyYWRlIHBlcmZvcm1hbmNlIHNpbmNlIG1vcmUg b3B0aW9ucyBhcmUgCiAgICAgICAgICAgICAgICBhdmFpbGFibGUgaW4gdGhlIHRhYmxlcywgcmVx dWlyaW5nIG1vcmUgYml0cyB0byBlbmNvZGUgc3RyaW5ncy4gVGhlIGRlZmF1bHQgdmFsdWUgaXMg ZmFsc2UsIG1lYW5pbmcgdGhhdCBidWZmZXJzLCBzdHJpbmcgdGFibGVzLCBldGMuLCBhcmUgY2xl YXJlZCBiZXR3ZWVuIGVhY2ggc3RhbnphLiAoVGhpcyBvcHRpb24KICAgICAgICAgICAgICAgIGlz IEVYSS9YTVBQIHNwZWNpZmljLikKICAgICAgICAgICAgPC9wPgogICAgICAgIDwvc2VjdGlvbjI+ CiAgICAgICAgPHNlY3Rpb24yIHRvcGljPSdGcmFnbWVudCBNb2RlIGFuZCBjb21wcmVzc2lvbiBv ZiBzdGFuemFzJz4KICAgICAgICAgICAgPHA+CiAgICAgICAgICAgICAgICBOb3RlIHRoYXQgZXZl biBpZiB0aGUgWE1MIHN0cmVhbSB1c2VzIFhNTCBmcmFnbWVudCBtb2RlLCBpLmUuIHRoZXJlJ3Mg bm8gcm9vdCBub2RlIGluIHRoZSBmbG93LCBFWEkgcmVxdWlyZXMgdGhlIGZsb3cgb2YgZXZlbnRz IHRvIGJlIGNvcnJlY3RseSBkZWxpbWl0ZWQuCiAgICAgICAgICAgICAgICBUaGVyZWZvcmUsIGVh Y2ggc3RhbnphIHNlbnQgb24gdGhlIHN0cmVhbSwgc2hvdWxkIGJlIGNvbXByZXNzZWQvZGVjb21w cmVzc2VkIHVzaW5nIGRvY3VtZW50IG1vZGUsIG5vdCBmcmFnbWVudCBtb2RlLCB3aXRoIGFwcHJv cHJpYXRlIEJlZ2luIERvY3VtZW50IChCRCkgYW5kCiAgICAgICAgICAgICAgICBFbmQgRG9jdW1l bnQgKEVEKSBldmVudHMuIFRoaXMgbWFrZXMgaXQgcG9zc2libGUgdG8gZmx1c2ggYW55IHJlbWFp bmluZyBiaXRzIHRvIHRoZSBzdHJlYW0sIGFuZCB0aGUgcmVjZXB0b3IgY2FuIGNsZWFybHkgZGlz dGluZ3Vpc2ggc3RhbnphcyBmcm9tIGVhY2ggb3RoZXIuCiAgICAgICAgICAgIDwvcD4KICAgICAg ICAgICAgPHA+CiAgICAgICAgICAgICAgICBEdXJpbmcgc2V0dXAgb2YgdGhlIEVYSSBjb21wcmVz c2lvbiBlbmdpbmUsIHRoZSBjbGllbnQgY2FuIGNob29zZSBpZiBidWZmZXJzIGFyZSB0byBiZSBy ZXVzZWQgYmV0d2VlbiBzdGFuemFzLCBvciBjbGVhcmVkIGJldHdlZW4gZWFjaCBzdGFuemEuIFRo aXMgaXMgZG9uZQogICAgICAgICAgICAgICAgdXNpbmcgdGhlIEVYSSBvdmVyIFhNUFAgc3BlY2lm aWMgb3B0aW9uIDxzdHJvbmc+c2Vzc2lvbldpZGVCdWZmZXJzPC9zdHJvbmc+LCB3aGljaCBpcyBm YWxzZSBieSBkZWZhdWx0LCBtZWFuaW5nIGJ1ZmZlcnMgYW5kIHN0cmluZyB0YWJsZXMgYXJlIGNs ZWFyZWQgYmV0d2VlbgogICAgICAgICAgICAgICAgZWFjaCBzdGFuemEuCiAgICAgICAgICAgIDwv cD4KICAgICAgICAgICAgPHA+CiAgICAgICAgICAgICAgICBUaGVyZSBtYXkgYmUgY2FzZXMgd2hl cmUgbWFpbnRhaW5pbmcgYnVmZmVycyBhbmQgc3RyaW5nIHRhYmxlcyB0aHJvdWdob3V0IHRoZSBz ZXNzaW9uIGlzIHByZWZlcnJhYmxlLiBTaW5jZSBzdHJpbmdzIGFyZSBhbHJlYWR5IGluIHRoZSBi dWZmZXJzLCB0aGV5IG5lZWQgbm90CiAgICAgICAgICAgICAgICBiZSBvdXRwdXQgaW4gdGhlIHN0 cmVhbSB0aGUgZmlyc3QgdGltZSB0aGV5IGFwcGVhciBpbiBhIHN0YW56YS4gSG93ZXZlciwgdGhl IG51bWJlciBvZiBzdHJpbmdzIGluIHRhYmxlcyBpbmNyZWFzZSwgYW5kIHNvIGRvZXMgdGhlIG51 bWJlciBvZiBiaXRzIHJlcXVpcmVkIHRvCiAgICAgICAgICAgICAgICBlbmNvZGUgdGhlbS4gRGVw ZW5kaW5nIG9uIHdoYXQgdHlwZSBvZiBjb21tdW5pY2F0aW9uIGlzIHBlcmZvcm1lZCwgdGhpcyBv cHRpb24gbWlnaHQgZ2l2ZSBiZXR0ZXIgcmVzdWx0cyBvbmUgd2F5IG9yIGFub3RoZXIuCiAgICAg ICAgICAgIDwvcD4KICAgICAgICAgICAgPHA+CiAgICAgICAgICAgICAgICBOb3RlIGhvd2V2ZXIs IHRoYXQgaWYgeW91IHdhbnQgdGhlIG9wdGlvbiB0byBlbnRlciBhIHNlc3Npb24gaW4gdGhlIG1p ZGRsZSBvZiB0aGUgZmxvdyB0byBsaXN0ZW4gdG8gdGhlIGNvbW11bmljYXRpb24sIHlvdSBuZWVk IHRvIGNsZWFyIHRhYmxlcyBhbmQgYnVmZmVycyBiZXR3ZWVuIGVhY2gKICAgICAgICAgICAgICAg IHN0YW56YSwgb3IgeW91IHdpbGwgbm90IGJlIGFibGUgdG8gZGVjb2RlIHRoZSBiaW5hcnkgc3Ry ZWFtIGFwcHJvcHJpYXRlbHkuCiAgICAgICAgICAgIDwvcD4KICAgICAgICA8L3NlY3Rpb24yPgog ICAgICAgIDxzZWN0aW9uMiB0b3BpYz0nTmV0d29ya3MgY29udGFpbmluZyBjbGllbnRzIGhhdmlu ZyBsaW1pdGVkIG1lbW9yeSc+CiAgICAgICAgICAgIDxwPgogICAgICAgICAgICAgICAgVG8gc3Vj Y2Vzc2Z1bGx5IGltcGxlbWVudCBhIG5ldHdvcmsgd2l0aCBjbGllbnRzIGhhdmluZyBsaW1pdGVk IG1lbW9yeSwgc3VjaCBhcyBzZW5zb3IgbmV0d29ya3MsIGNhcmUgc2hvdWxkIGJlIHRha2VuIHRv IG1ha2Ugc3VyZSBuZWNlc3Nhcnkgc2NoZW1hIGZpbGVzIGFyZQogICAgICAgICAgICAgICAgcHJl aW5zdGFsbGVkIG9uIHRoZSBzZXJ2ZXIsIHRvIGF2b2lkIHRoZSBuZWNlc3NpdHkgdG8gdXBsb2Fk IHNjaGVtYSBmaWxlcyBmcm9tIHRoZSBjbGllbnRzLiBDbGllbnRzIHdpdGggbGltaXRlZCBtZW1v cnkgbWlnaHQgYmUgdW5hYmxlIHRvIHBlcmZvcm0gdGhpcyB0YXNrLgogICAgICAgICAgICA8L3A+ CiAgICAgICAgICAgIDxwPgogICAgICAgICAgICAgICAgQW4gYWx0ZXJuYXRpdmUgbWF5IGJlIHRv IGluc3RhbGwgYSByaWNoZXIgY2xpZW50LCB0aGF0IGNhbiB1cGxvYWQgdGhlIHNjaGVtYSBmaWxl cyB0byB0aGUgc2VydmVyIGR5bmFtaWNhbGx5LCBhbmQgaW5zdGFsbGluZyBpdCBpbnRvIHRoZSBu ZXR3b3JrLiBBbnkgY2xpZW50IHVwbG9hZGluZwogICAgICAgICAgICAgICAgYSBzY2hlbWEgZmls ZSwgd2lsbCBtYWtlIHRoYXQgc2NoZW1hIGZpbGUgYXZhaWxhYmxlIGZvciBFWEkgY29tcHJlc3Np b24gdG8gYW55IG90aGVyIGNsaWVudCBpbiB0aGUgbmV0d29yay4KICAgICAgICAgICAgPC9wPgog ICAgICAgIDwvc2VjdGlvbjI+CiAgICAgICAgPHNlY3Rpb24yIHRvcGljPSdDYWNoaW5nIHNjaGVt YSBmaWxlcyc+CiAgICAgICAgICAgIDxwPgogICAgICAgICAgICAgICAgU2NoZW1hIGZpbGVzIHVw bG9hZGVkIHRvIHRoZSBzZXJ2ZXIgc2hvdWxkIGJlIGNhY2hlZCBvbiB0aGUgc2VydmVyIGluIHNv bWUga2luZCBvZiBzY2hlbWEgcmVwb3NpdG9yeS4gSWYgbWVtb3J5IGlzIGxpbWl0ZWQgb24gdGhl IHNlcnZlciwgc2NoZW1hIGZpbGVzIHNob3VsZCBiZQogICAgICAgICAgICAgICAgc29ydGVkIGJ5 IGxhc3QgYWNjZXNzLiBTY2hlbWEgZmlsZXMgd2l0aCB0aGUgb2xkZXN0IGxhc3QgYWNjZXNzIHRp bWVzdGFtcCBjb3VsZCBiZSByZW1vdmVkIHRvIG1haW50YWluIHRoZSBjYWNoZSB3aXRoaW4gYW4g YXBwcm92ZWQgY2FjaGUgc2l6ZS4KICAgICAgICAgICAgPC9wPgogICAgICAgICAgICA8cD4KICAg ICAgICAgICAgICAgIE5vdGUgdGhhdCBzY2hlbWEgZmlsZXMgaGF2ZSB0aHJlZSBrZXlzOiA8c3Ry b25nPlRhcmdldCBuYW1lc3BhY2U8L3N0cm9uZz4sIDxzdHJvbmc+Ynl0ZSBzaXplPC9zdHJvbmc+ IGFuZCA8c3Ryb25nPk1ENSBIYXNoPC9zdHJvbmc+LiBNdWx0aXBsZSB2ZXJzaW9ucyBvZiBhIHNj aGVtYSBmaWxlCiAgICAgICAgICAgICAgICBtYXkgZXhpc3QgKHRoYXQgaXMsIHdpdGggdGhlIHNh bWUgdGFyZ2V0IG5hbWVzcGFjZSBidXQgZGlmZmVyZW50IGJ5dGUgc2l6ZXMgb3IgTUQ1IGhhc2gg Y29kZXMpLiBOb3RlIGFsc28sIHRoYXQgZm9yIGFueSBwcmFjdGljYWwgcHVycG9zZSwgc2NoZW1h IGZpbGVzIGNhbiBiZSBzdG9yZWQKICAgICAgICAgICAgICAgIHVzaW5nIG9ubHkgdGhlIE1ENSBo YXNoIGFzIGEga2V5LCBzaW5jZSBpdCBpcyBoaWdobHkgaW1wcm9iYWJsZSB0aGF0IHR3byBkaWZm ZXJlbnQgc2NoZW1hIGZpbGVzIHdpbGwgaGF2ZSB0aGUgc2FtZSBNRDUgaGFzaCAodW5sZXNzIGNv bnNjaW91c2x5IGNyZWF0ZWQgdGhhdCB3YXkpLiBNRDUgaGFzaAogICAgICAgICAgICAgICAgdmFs dWVzIGFyZSBhbHdheXMgaW4gPHN0cm9uZz5sb3dlciBjYXNlPC9zdHJvbmc+LgogICAgICAgICAg ICA8L3A+CiAgICAgICAgPC9zZWN0aW9uMj4KICAgICAgICA8c2VjdGlvbjIgdG9waWM9J1VwbG9h ZGluZyB2cy4gRG93bmxvYWRpbmcgc2NoZW1hcyc+CiAgICAgICAgICAgIDxwPgogICAgICAgICAg ICAgICAgV2hlbiB0aGUgc2VydmVyIGxhY2tzIGluZm9ybWF0aW9uIGFib3V0IGEgZ2l2ZW4gWE1M IHNjaGVtYSwgdGhlIGNsaWVudCBoYXMgdHdvIG9wdGlvbnMgZm9yIHVwZGF0aW5nIHRoZSBzZXJ2 ZXIuIEVpdGhlciBpdCB1cGxvYWRzIHRoZSBzY2hlbWEsIG9yIGl0IGFza3MgdGhlIHNlcnZlciB0 bwogICAgICAgICAgICAgICAgZG93bmxvYWQgb25lLgogICAgICAgICAgICA8L3A+CiAgICAgICAg ICAgIDxwPgogICAgICAgICAgICAgICAgVWxvYWRpbmcgYSBzY2hlbWEgaGFzIHRoZSBhZHZhbnRh Z2UsIHRoYXQgdGhlIGNsaWVudCBrbm93cyBleGFjdGx5IHRoZSB2ZXJzaW9uIHRoYXQgdGhlIHNl cnZlciByZXF1aXJlcy4gSXQgaGFzIHRoZSBkaXNhZHZhbnRhZ2UsIHRoYXQgdGhlIGNsaWVudCBu ZWVkcyB0byBzdG9yZSB0aGUgc2NoZW1hCiAgICAgICAgICAgICAgICBhbmQgc2VuZCBhIHBvc3Np YmxlIGxhcmdlIHNjaGVtYSB0byB0aGUgc2VydmVyLiBJZiBFWEkgaXMgdXNlZCBiZWNhdXNlIHRo ZSBkZXZpY2UgaGFzIGxpbWl0ZWQgbWVtb3J5LCB1cGxvYWRpbmcgYSBzY2hlbWEgbWlnaHQgbm90 IGJlIGFuIG9wdGlvbi4KICAgICAgICAgICAgPC9wPgogICAgICAgICAgICA8cD4KICAgICAgICAg ICAgICAgIERvd25sb2FkaW5nIGEgc2NoZW1hIGhhcyB0aGUgYWR2YW50YWdlLCB0aGF0IHNpemUg b2Ygc2NoZW1hIGRvZXMgbm90IG1hdHRlci4gVGhlIGRpc2FkdmFudGFnZSBpcyB0aGF0IGFzeW5j aHJvbm91cyBlcnJvcnMgbWlnaHQgb2NjdXIsIHNvIHRoZSBjbGllbnQgbmVlZHMgdG8gcGF5IHJl c3BlY3QKICAgICAgICAgICAgICAgIHRvIHRoZSByZXNwb25zZXMgcmV0dXJuZWQgYnkgdGhlIHNl cnZlciB3aGVuIGRvd25sb2FkaW5nIHNjaGVtYXMuIEFsc28sIGRvd25sb2FkaW5nIGEgc2NoZW1h LCBtaWdodCBkb3dubG9hZCBhIHZlcnNpb24gd2hpY2ggZG9lcyBub3QgY29ycmVzcG9uZCB0byB0 aGUgZGVzaXJlZCB2ZXJzaW9uCiAgICAgICAgICAgICAgICBvZiB0aGUgc2NoZW1hLiBTbywgaXQn cyBtb3JlIGltcG9ydGFudCBpbiB0aGlzIGNhc2UsIHRoZSBjbGllbnQgY2hlY2tzIHRoYXQgdGhl IHNlcnZlciBhY3R1YWxseSBoYXMgdGhlIHZlcnNpb24gb2YgdGhlIHNjaGVtYSByZXF1aXJlZCBi eSB0aGUgY2xpZW50LgogICAgICAgICAgICA8L3A+CiAgICAgICAgPC9zZWN0aW9uMj4KICAgICAg ICA8c2VjdGlvbjIgdG9waWM9J1NlcnZlciBkZWNvbXByZXNzaW9uIGFuZCByZWNvbXByZXNzaW9u IHZzLiBiaW5hcnkgZm9yd2FyZGluZyc+CiAgICAgICAgICAgIDxwPgogICAgICAgICAgICAgICAg SWYgdHdvIFhNUFAgY2xpZW50cyBjb21tdW5pY2F0ZSB3aXRoIGVhY2ggb3RoZXIgdGhyb3VnaCBh biBYTVBQIHNlcnZlciwgYW5kIGJvdGggY2xpZW50cyB1c2UgRVhJIGNvbXByZXNzaW9uLCB0aGUg c2VydmVyIG11c3Qgb25seSBmb3J3YXJkCiAgICAgICAgICAgICAgICBiaW5hcnkgcGFja2V0cyBp ZiBib3RoIEVYSSBjb21wcmVzc2VkIGNoYW5uZWxzIGhhdmUgZXhhY3RseSB0aGUgc2FtZSBzZXR1 cC4gSWYgYW55IHBhcmFtZXRlciBpcyBkaWZmZXJlbnQsIHRoZSBzZXJ2ZXIgTVVTVCBhbHdheXMg cmVjb21wcmVzcwogICAgICAgICAgICAgICAgcGFja2V0cyBzZW50IHRocm91Z2ggaXQuCiAgICAg ICAgICAgIDwvcD4KICAgICAgICAgICAgPHA+CiAgICAgICAgICAgICAgICBTaW5jZSB0aGUgc2Vy dmVyIGFsd2F5cyBuZWVkcyB0byBkZWNvbXByZXNzIGluY29taW5nIEVYSSBjb21wcmVzc2VkIHBh Y2tldHMgdG8gZGVjb2RlIGhlYWRlcnMsIG9taXR0aW5nIHRoZSBjb21wcmVzc2lvbiBwYXJ0IG1p Z2h0IHNhdmUgdGhlIHNlcnZlcgogICAgICAgICAgICAgICAgc29tZSBwcm9jZXNzaW5nIHBvd2Vy LCBidXQgbm90IGFsbC4gTm90ZSB0aGF0LCBpbiBzb21lIG5ldHdvcmtzIGl0IG1pZ2h0IGJlIGNv bW1vbiB1c2luZyBzaW1pbGFyIGNvbXByZXNzaW9uIHNldHRpbmdzLCB3aGlsZSBpbiBvdGhlcnMg ZGlmZmVyZW50IGNvbXByZXNzaW9uIAogICAgICAgICAgICAgICAgc2V0dGluZ3MgYXJlIG1vc3Qg Y29tbW9uLgogICAgICAgICAgICA8L3A+CiAgICAgICAgPC9zZWN0aW9uMj4KICAgIDwvc2VjdGlv bjE+CiAgICA8c2VjdGlvbjEgdG9waWM9J1NlY3VyaXR5IENvbnNpZGVyYXRpb25zJyBhbmNob3I9 J3NlY3VyaXR5Jz4KICAgICAgICA8cD4KICAgICAgICAgICAgTm90ZSB0aGF0IEVYSSBjb21wcmVz c2VkIGluZm9ybWF0aW9uLCBldmVuIHRob3VnaCBpdCBpcyBoYXJkIHRvIGRlY29kZSBieSBodW1h bnMsIGlzIGJ5IG5vIG1lYW5zIGVuY3J5cHRlZC4gSWYgc2Vuc2l0aXZlIGRhdGEgaXMgdG8gYmUg c2VudCBvdmVyIGFuIEVYSSBjb21wcmVzc2VkCiAgICAgICAgICAgIGNoYW5uZWwsIGVuY3J5cHRp b24gc2hvdWxkIGJlIGNvbnNpZGVyZWQgYXMgd2VsbC4KICAgICAgICA8L3A+CiAgICA8L3NlY3Rp b24xPgogICAgPHNlY3Rpb24xIHRvcGljPSdJQU5BIENvbnNpZGVyYXRpb25zJyBhbmNob3I9J2lh bmEnPgogICAgICAgIDxwPlRoaXMgZG9jdW1lbnQgcmVxdWlyZXMgbm8gaW50ZXJhY3Rpb24gd2l0 aCAmSUFOQTsuPC9wPgogICAgPC9zZWN0aW9uMT4KICAgIDxzZWN0aW9uMSB0b3BpYz0nWE1QUCBS ZWdpc3RyYXIgQ29uc2lkZXJhdGlvbnMnIGFuY2hvcj0ncmVnaXN0cmFyJz4KICAgICAgICA8cD5S RVFVSVJFRC48L3A+CiAgICAgICAgPCEtLSBUT0RPIC0tPgogICAgPC9zZWN0aW9uMT4KICAgIDxz ZWN0aW9uMSB0b3BpYz0nWE1MIFNjaGVtYScgYW5jaG9yPSdzY2hlbWEnPgogICAgICAgIDxjb2Rl PgogICAgICAgICAgICA8IVtDREFUQVsKPD94bWwgdmVyc2lvbj0nMS4wJyBlbmNvZGluZz0nVVRG LTgnPz4KPHhzOnNjaGVtYQogICAgeG1sbnM6eHM9J2h0dHA6Ly93d3cudzMub3JnLzIwMDEvWE1M U2NoZW1hJwogICAgdGFyZ2V0TmFtZXNwYWNlPSdodHRwOi8vamFiYmVyLm9yZy9wcm90b2NvbC9j b21wcmVzcy9leGknCiAgICB4bWxucz0naHR0cDovL2phYmJlci5vcmcvcHJvdG9jb2wvY29tcHJl c3MvZXhpJwogICAgZWxlbWVudEZvcm1EZWZhdWx0PSdxdWFsaWZpZWQnPgogICAgCiAgICA8eHM6 ZWxlbWVudCBuYW1lPSdzZXR1cCcgdHlwZT0nU2V0dXAnLz4KICAgIDx4czplbGVtZW50IG5hbWU9 J3NldHVwUmVzcG9uc2UnIHR5cGU9J1NldHVwUmVzcG9uc2UnLz4KIAogICAgICAgIDx4czpjb21w bGV4VHlwZSBuYW1lPSdTZXR1cCc+CiAgICAgICAgPHhzOmNob2ljZSBtaW5PY2N1cnM9JzAnIG1h eE9jY3Vycz0ndW5ib3VuZGVkJz4KICAgICAgICAgICAgPHhzOmVsZW1lbnQgbmFtZT0nc2NoZW1h JyB0eXBlPSdTY2hlbWEnLz4KICAgICAgICAgICAgPHhzOmVsZW1lbnQgbmFtZT0nZGF0YXR5cGVS ZXByZXNlbnRhdGlvbk1hcCcgdHlwZT0nRGF0YXR5cGVSZXByZXNlbnRhdGlvbk1hcCcvPgogICAg ICAgIDwveHM6Y2hvaWNlPgogICAgICAgIDx4czphdHRyaWJ1dGVHcm91cCByZWY9J09wdGlvbnMn Lz4KICAgIDwveHM6Y29tcGxleFR5cGU+CiAKICAgIDx4czpjb21wbGV4VHlwZSBuYW1lPSdTZXR1 cFJlc3BvbnNlJz4KICAgICAgICA8eHM6Y29tcGxleENvbnRlbnQ+CiAgICAgICAgICAgIDx4czpl eHRlbnNpb24gYmFzZT0nU2V0dXAnPgogICAgICAgICAgICAgICAgPHhzOmNob2ljZSBtaW5PY2N1 cnM9JzAnIG1heE9jY3Vycz0ndW5ib3VuZGVkJz4KICAgICAgICAgICAgICAgICAgICA8eHM6ZWxl bWVudCBuYW1lPSdtaXNzaW5nU2NoZW1hJyB0eXBlPSdTY2hlbWEnLz4KICAgICAgICAgICAgICAg IDwveHM6Y2hvaWNlPgogICAgICAgICAgICAgICAgPHhzOmF0dHJpYnV0ZSBuYW1lPSdhZ3JlZW1l bnQnIHR5cGU9J3hzOmJvb2xlYW4nIHVzZT0nb3B0aW9uYWwnIGRlZmF1bHQ9J2ZhbHNlJy8+CiAg ICAgICAgICAgIDwveHM6ZXh0ZW5zaW9uPgogICAgICAgIDwveHM6Y29tcGxleENvbnRlbnQ+CiAg ICA8L3hzOmNvbXBsZXhUeXBlPgogCiAgICA8eHM6Y29tcGxleFR5cGUgbmFtZT0nU2NoZW1hJz4K ICAgICAgICA8eHM6YXR0cmlidXRlIG5hbWU9J25zJyB0eXBlPSd4czpzdHJpbmcnIHVzZT0ncmVx dWlyZWQnLz4KICAgICAgICA8eHM6YXR0cmlidXRlIG5hbWU9J2J5dGVzJyB0eXBlPSd4czpwb3Np dGl2ZUludGVnZXInIHVzZT0ncmVxdWlyZWQnLz4KICAgICAgICA8eHM6YXR0cmlidXRlIG5hbWU9 J21kNUhhc2gnIHR5cGU9J01ENUhhc2gnIHVzZT0ncmVxdWlyZWQnLz4KICAgIDwveHM6Y29tcGxl eFR5cGU+CiAKICAgIDx4czpjb21wbGV4VHlwZSBuYW1lPSdEYXRhdHlwZVJlcHJlc2VudGF0aW9u TWFwJz4KICAgICAgICA8eHM6YXR0cmlidXRlIG5hbWU9J3R5cGUnIHR5cGU9J3hzOnN0cmluZycg dXNlPSdyZXF1aXJlZCcvPgogICAgICAgIDx4czphdHRyaWJ1dGUgbmFtZT0ncmVwcmVzZW50QXMn IHR5cGU9J3hzOnN0cmluZycgdXNlPSdyZXF1aXJlZCcvPgogICAgPC94czpjb21wbGV4VHlwZT4K IAogICAgPHhzOmF0dHJpYnV0ZUdyb3VwIG5hbWU9J09wdGlvbnMnPgogICAgICAgIDx4czphdHRy aWJ1dGUgbmFtZT0ndmVyc2lvbicgdHlwZT0neHM6cG9zaXRpdmVJbnRlZ2VyJyB1c2U9J29wdGlv bmFsJyBkZWZhdWx0PScxJy8+CiAgICAgICAgPHhzOmF0dHJpYnV0ZSBuYW1lPSdhbGlnbm1lbnQn IHR5cGU9J0FsaWdubWVudCcgdXNlPSdvcHRpb25hbCcgZGVmYXVsdD0nYml0LXBhY2tlZCc+CiAg ICAgICAgICAgIDx4czphbm5vdGF0aW9uPgogICAgICAgICAgICAgICAgPHhzOmRvY3VtZW50YXRp b24+VGhlIGFsaWdubWVudCBvcHRpb24gaXMgdXNlZCB0byBjb250cm9sIHRoZSBhbGlnbm1lbnQg b2YgZXZlbnQgY29kZXMgYW5kIGNvbnRlbnQgaXRlbXMuIAogICAgICAgICAgICAgICAgVGhlIHZh bHVlIGlzIG9uZSBvZiBiaXQtcGFja2VkLCBieXRlLWFsaWdubWVudCBvciBwcmUtY29tcHJlc3Np b24sIG9mIHdoaWNoIGJpdC1wYWNrZWQgaXMgdGhlIGRlZmF1bHQgdmFsdWUgCiAgICAgICAgICAg ICAgICBhc3N1bWVkIHdoZW4gdGhlICJhbGlnbm1lbnQiIGVsZW1lbnQgaXMgYWJzZW50IGluIHRo ZSBFWEkgT3B0aW9ucyBkb2N1bWVudC4gVGhlIG9wdGlvbiB2YWx1ZXMgYnl0ZS1hbGlnbm1lbnQg CiAgICAgICAgICAgICAgICBhbmQgcHJlLWNvbXByZXNzaW9uIGFyZSBlZmZlY3RlZCB3aGVuICJi eXRlIiBhbmQgInByZS1jb21wcmVzcyIgZWxlbWVudHMgYXJlIHByZXNlbnQgaW4gdGhlIEVYSSBP cHRpb25zIAogICAgICAgICAgICAgICAgZG9jdW1lbnQsIHJlc3BlY3RpdmVseS4gV2hlbiB0aGUg dmFsdWUgb2YgY29tcHJlc3Npb24gb3B0aW9uIGlzIHNldCB0byB0cnVlLCBhbGlnbm1lbnQgb2Yg dGhlIEVYSSBCb2R5IGlzIAogICAgICAgICAgICAgICAgZ292ZXJuZWQgYnkgdGhlIHJ1bGVzIHNw ZWNpZmllZCBpbiA5LiBFWEkgQ29tcHJlc3Npb24gaW5zdGVhZCBvZiB0aGUgYWxpZ25tZW50IG9w dGlvbiB2YWx1ZS4gVGhlICJhbGlnbm1lbnQiIAogICAgICAgICAgICAgICAgZWxlbWVudCBNVVNU IE5PVCBhcHBlYXIgaW4gYW4gRVhJIG9wdGlvbnMgZG9jdW1lbnQgd2hlbiB0aGUgImNvbXByZXNz aW9uIiBlbGVtZW50IGlzIHByZXNlbnQuPC94czpkb2N1bWVudGF0aW9uPgogICAgICAgICAgICA8 L3hzOmFubm90YXRpb24+CiAgICAgICAgPC94czphdHRyaWJ1dGU+CiAgICAgICAgPHhzOmF0dHJp YnV0ZSBuYW1lPSdjb21wcmVzc2lvbicgdHlwZT0neHM6Ym9vbGVhbicgdXNlPSdvcHRpb25hbCcg ZGVmYXVsdD0nZmFsc2UnPgogICAgICAgICAgICA8eHM6YW5ub3RhdGlvbj4KICAgICAgICAgICAg ICAgIDx4czpkb2N1bWVudGF0aW9uPlRoZSBjb21wcmVzc2lvbiBvcHRpb24gaXMgYSBCb29sZWFu IHVzZWQgdG8gaW5jcmVhc2UgY29tcGFjdG5lc3MgdXNpbmcgYWRkaXRpb25hbCAKICAgICAgICAg ICAgICAgIGNvbXB1dGF0aW9uYWwgcmVzb3VyY2VzLiBUaGUgZGVmYXVsdCB2YWx1ZSAiZmFsc2Ui IGlzIGFzc3VtZWQgd2hlbiB0aGUgImNvbXByZXNzaW9uIiBlbGVtZW50IGlzIGFic2VudCBpbiAK ICAgICAgICAgICAgICAgIHRoZSBFWEkgT3B0aW9ucyBkb2N1bWVudCB3aGVyZWFzIGl0cyBwcmVz ZW5jZSBkZW5vdGVzIHRoZSB2YWx1ZSAidHJ1ZSIuIFdoZW4gc2V0IHRvIHRydWUsIHRoZSBldmVu dCBjb2RlcyAKICAgICAgICAgICAgICAgIGFuZCBhc3NvY2lhdGVkIGNvbnRlbnQgYXJlIGNvbXBy ZXNzZWQgYWNjb3JkaW5nIHRvIDkuIEVYSSBDb21wcmVzc2lvbiByZWdhcmRsZXNzIG9mIHRoZSBh bGlnbm1lbnQgb3B0aW9uIAogICAgICAgICAgICAgICAgdmFsdWUuIEFzIG1lbnRpb25lZCBhYm92 ZSwgdGhlICJjb21wcmVzc2lvbiIgZWxlbWVudCBNVVNUIE5PVCBhcHBlYXIgaW4gYW4gRVhJIG9w dGlvbnMgZG9jdW1lbnQgd2hlbiB0aGUgCiAgICAgICAgICAgICAgICAiYWxpZ25tZW50IiBlbGVt ZW50IGlzIHByZXNlbnQuPC94czpkb2N1bWVudGF0aW9uPgogICAgICAgICAgICA8L3hzOmFubm90 YXRpb24+CiAgICAgICAgPC94czphdHRyaWJ1dGU+CiAgICAgICAgPHhzOmF0dHJpYnV0ZSBuYW1l PSdzdHJpY3QnIHR5cGU9J3hzOmJvb2xlYW4nIHVzZT0nb3B0aW9uYWwnIGRlZmF1bHQ9J2ZhbHNl Jz4KICAgICAgICAgICAgPHhzOmFubm90YXRpb24+CiAgICAgICAgICAgICAgICA8eHM6ZG9jdW1l bnRhdGlvbj5UaGUgc3RyaWN0IG9wdGlvbiBpcyBhIEJvb2xlYW4gdXNlZCB0byBpbmNyZWFzZSBj b21wYWN0bmVzcyBieSB1c2luZyBhIHN0cmljdCAKICAgICAgICAgICAgICAgIGludGVycHJldGF0 aW9uIG9mIHRoZSBzY2hlbWFzIGFuZCBvbWl0dGluZyBwcmVzZXJ2YXRpb24gb2YgY2VydGFpbiBp dGVtcywgc3VjaCBhcyBjb21tZW50cywgcHJvY2Vzc2luZyAKICAgICAgICAgICAgICAgIGluc3Ry dWN0aW9ucyBhbmQgbmFtZXNwYWNlIHByZWZpeGVzLiBUaGUgZGVmYXVsdCB2YWx1ZSAiZmFsc2Ui IGlzIGFzc3VtZWQgd2hlbiB0aGUgInN0cmljdCIgZWxlbWVudCBpcyAKICAgICAgICAgICAgICAg IGFic2VudCBpbiB0aGUgRVhJIE9wdGlvbnMgZG9jdW1lbnQgd2hlcmVhcyBpdHMgcHJlc2VuY2Ug ZGVub3RlcyB0aGUgdmFsdWUgInRydWUiLiBXaGVuIHNldCB0byB0cnVlLCB0aG9zZSAKICAgICAg ICAgICAgICAgIHByb2R1Y3Rpb25zIHRoYXQgaGF2ZSBOUywgQ00sIFBJLCBFUiwgYW5kIFNDIHRl cm1pbmFsIHN5bWJvbHMgYXJlIG9taXR0ZWQgZnJvbSB0aGUgRVhJIGdyYW1tYXJzLCBhbmQgCiAg ICAgICAgICAgICAgICBzY2hlbWEtaW5mb3JtZWQgZWxlbWVudCBhbmQgdHlwZSBncmFtbWFycyBh cmUgcmVzdHJpY3RlZCB0byBvbmx5IHBlcm1pdCBpdGVtcyBkZWNsYXJlZCBpbiB0aGUgc2NoZW1h cy4gCiAgICAgICAgICAgICAgICBBIG5vdGUgaW4gc2VjdGlvbiA4LjUuNC40LjIgQWRkaW5nIFBy b2R1Y3Rpb25zIHdoZW4gU3RyaWN0IGlzIFRydWUgZGVzY3JpYmVzIHNvbWUgYWRkaXRpb25hbCBy ZXN0cmljdGlvbnMgCiAgICAgICAgICAgICAgICBjb25zZXF1ZW50aWFsIG9mIHRoZSB1c2Ugb2Yg dGhpcyBvcHRpb24uIFRoZSAic3RyaWN0IiBlbGVtZW50IE1VU1QgTk9UIGFwcGVhciBpbiBhbiBF WEkgb3B0aW9ucyBkb2N1bWVudCAKICAgICAgICAgICAgICAgIHdoZW4gb25lIG9mICJkdGQiLCAi cHJlZml4ZXMiLCAiY29tbWVudHMiLCAicGlzIiBvciAic2VsZkNvbnRhaW5lZCIgZWxlbWVudCBp cyBwcmVzZW50IGluIHRoZSBzYW1lIAogICAgICAgICAgICAgICAgb3B0aW9ucyBkb2N1bWVudC48 L3hzOmRvY3VtZW50YXRpb24+CiAgICAgICAgICAgIDwveHM6YW5ub3RhdGlvbj4KICAgICAgICA8 L3hzOmF0dHJpYnV0ZT4KICAgICAgICA8eHM6YXR0cmlidXRlIG5hbWU9J3ByZXNlcnZlQ29tbWVu dHMnIHR5cGU9J3hzOmJvb2xlYW4nIHVzZT0nb3B0aW9uYWwnIGRlZmF1bHQ9J2ZhbHNlJz4KICAg ICAgICAgICAgPHhzOmFubm90YXRpb24+CiAgICAgICAgICAgICAgICA8eHM6ZG9jdW1lbnRhdGlv bj5Db21tZW50cyBhcmUgcHJlc2VydmVkLiBNdXN0IG5vdCBiZSB1c2VkIHRvZ2V0aGVyIHdpdGgg dGhlIHN0cmljdCBvcHRpb24uPC94czpkb2N1bWVudGF0aW9uPgogICAgICAgICAgICA8L3hzOmFu bm90YXRpb24+CiAgICAgICAgPC94czphdHRyaWJ1dGU+CiAgICAgICAgPHhzOmF0dHJpYnV0ZSBu YW1lPSdwcmVzZXJ2ZVBJcycgdHlwZT0neHM6Ym9vbGVhbicgdXNlPSdvcHRpb25hbCcgZGVmYXVs dD0nZmFsc2UnPgogICAgICAgICAgICA8eHM6YW5ub3RhdGlvbj4KICAgICAgICAgICAgICAgIDx4 czpkb2N1bWVudGF0aW9uPlByb2Nlc3NpbmcgaW5zdHJ1Y3Rpb25zIGFyZSBwcmVzZXJ2ZWQuIE11 c3Qgbm90IGJlIHVzZWQgdG9nZXRoZXIgd2l0aCB0aGUgc3RyaWN0IAogICAgICAgICAgICAgICAg b3B0aW9uLjwveHM6ZG9jdW1lbnRhdGlvbj4KICAgICAgICAgICAgPC94czphbm5vdGF0aW9uPgog ICAgICAgIDwveHM6YXR0cmlidXRlPgogICAgICAgIDx4czphdHRyaWJ1dGUgbmFtZT0ncHJlc2Vy dmVEVEQnIHR5cGU9J3hzOmJvb2xlYW4nIHVzZT0nb3B0aW9uYWwnIGRlZmF1bHQ9J2ZhbHNlJz4K ICAgICAgICAgICAgPHhzOmFubm90YXRpb24+CiAgICAgICAgICAgICAgICA8eHM6ZG9jdW1lbnRh dGlvbj5EVEQgaXMgcHJlc2VydmVkLiBNdXN0IG5vdCBiZSB1c2VkIHRvZ2V0aGVyIHdpdGggdGhl IHN0cmljdCBvcHRpb24uPC94czpkb2N1bWVudGF0aW9uPgogICAgICAgICAgICA8L3hzOmFubm90 YXRpb24+CiAgICAgICAgPC94czphdHRyaWJ1dGU+CiAgICAgICAgPHhzOmF0dHJpYnV0ZSBuYW1l PSdwcmVzZXJ2ZVByZWZpeGVzJyB0eXBlPSd4czpib29sZWFuJyB1c2U9J29wdGlvbmFsJyBkZWZh dWx0PSdmYWxzZSc+CiAgICAgICAgICAgIDx4czphbm5vdGF0aW9uPgogICAgICAgICAgICAgICAg PHhzOmRvY3VtZW50YXRpb24+UHJlZml4ZXMgYXJlIHByZXNlcnZlZC4gTXVzdCBub3QgYmUgdXNl ZCB0b2dldGhlciB3aXRoIHRoZSBzdHJpY3Qgb3B0aW9uLjwveHM6ZG9jdW1lbnRhdGlvbj4KICAg ICAgICAgICAgPC94czphbm5vdGF0aW9uPgogICAgICAgIDwveHM6YXR0cmlidXRlPgogICAgICAg IDx4czphdHRyaWJ1dGUgbmFtZT0ncHJlc2VydmVMZXhpY2FsJyB0eXBlPSd4czpib29sZWFuJyB1 c2U9J29wdGlvbmFsJyBkZWZhdWx0PSdmYWxzZSc+CiAgICAgICAgICAgIDx4czphbm5vdGF0aW9u PgogICAgICAgICAgICAgICAgPHhzOmRvY3VtZW50YXRpb24+TGV4aWNhbCBmb3JtIG9mIGVsZW1l bnQgYW5kIGF0dHJpYnV0ZSB2YWx1ZXMgY2FuIGJlIHByZXNlcnZlZCBpbiB2YWx1ZSBjb250ZW50 IGl0ZW1zLiAKICAgICAgICAgICAgICAgIENhbiBiZSB1c2VkIHRvZ2V0aGVyIHdpdGggdGhlIHN0 cmljdCBvcHRpb24uPC94czpkb2N1bWVudGF0aW9uPgogICAgICAgICAgICA8L3hzOmFubm90YXRp b24+CiAgICAgICAgPC94czphdHRyaWJ1dGU+CiAgICAgICAgPHhzOmF0dHJpYnV0ZSBuYW1lPSdz ZWxmQ29udGFpbmVkJyB0eXBlPSd4czpib29sZWFuJyB1c2U9J29wdGlvbmFsJyBkZWZhdWx0PSdm YWxzZSc+CiAgICAgICAgICAgIDx4czphbm5vdGF0aW9uPgogICAgICAgICAgICAgICAgPHhzOmRv Y3VtZW50YXRpb24+VGhlIHNlbGZDb250YWluZWQgb3B0aW9uIGlzIGEgQm9vbGVhbiB1c2VkIHRv IGVuYWJsZSB0aGUgdXNlIG9mIHNlbGYtY29udGFpbmVkIGVsZW1lbnRzIAogICAgICAgICAgICAg ICAgaW4gdGhlIEVYSSBzdHJlYW0uIFNlbGYtY29udGFpbmVkIGVsZW1lbnRzIG1heSBiZSByZWFk IGluZGVwZW5kZW50bHkgZnJvbSB0aGUgcmVzdCBvZiB0aGUgRVhJIGJvZHksIAogICAgICAgICAg ICAgICAgYWxsb3dpbmcgdGhlbSB0byBiZSBpbmRleGVkIGZvciByYW5kb20gYWNjZXNzLiBUaGUg InNlbGZDb250YWluZWQiIGVsZW1lbnQgTVVTVCBOT1QgYXBwZWFyIGluIGFuIEVYSSAKICAgICAg ICAgICAgICAgIG9wdGlvbnMgZG9jdW1lbnQgd2hlbiBvbmUgb2YgImNvbXByZXNzaW9uIiwgInBy ZS1jb21wcmVzc2lvbiIgb3IgInN0cmljdCIgZWxlbWVudHMgYXJlIHByZXNlbnQgaW4gdGhlIAog ICAgICAgICAgICAgICAgc2FtZSBvcHRpb25zIGRvY3VtZW50LiBUaGUgZGVmYXVsdCB2YWx1ZSAi ZmFsc2UiIGlzIGFzc3VtZWQgd2hlbiB0aGUgInNlbGZDb250YWluZWQiIGVsZW1lbnQgaXMgYWJz ZW50IAogICAgICAgICAgICAgICAgZnJvbSB0aGUgRVhJIE9wdGlvbnMgZG9jdW1lbnQgd2hlcmVh cyBpdHMgcHJlc2VuY2UgZGVub3RlcyB0aGUgdmFsdWUgInRydWUiLjwveHM6ZG9jdW1lbnRhdGlv bj4KICAgICAgICAgICAgPC94czphbm5vdGF0aW9uPgogICAgICAgIDwveHM6YXR0cmlidXRlPgog ICAgICAgIDx4czphdHRyaWJ1dGUgbmFtZT0nYmxvY2tTaXplJyB0eXBlPSd4czpwb3NpdGl2ZUlu dGVnZXInIHVzZT0nb3B0aW9uYWwnIGRlZmF1bHQ9JzEwMDAwMDAnPgogICAgICAgICAgICA8eHM6 YW5ub3RhdGlvbj4KICAgICAgICAgICAgICAgIDx4czpkb2N1bWVudGF0aW9uPlRoZSBibG9ja1Np emUgb3B0aW9uIHNwZWNpZmllcyB0aGUgYmxvY2sgc2l6ZSB1c2VkIGZvciBFWEkgY29tcHJlc3Np b24uIFdoZW4gdGhlIAogICAgICAgICAgICAgICAgImJsb2NrU2l6ZSIgZWxlbWVudCBpcyBhYnNl bnQgaW4gdGhlIEVYSSBPcHRpb25zIGRvY3VtZW50LCB0aGUgZGVmYXVsdCBibG9ja3NpemUgb2Yg MSwwMDAsMDAwIGlzIHVzZWQuIAogICAgICAgICAgICAgICAgVGhlIGRlZmF1bHQgYmxvY2tTaXpl IGlzIGludGVudGlvbmFsbHkgbGFyZ2UgYnV0IGNhbiBiZSByZWR1Y2VkIGZvciBwcm9jZXNzaW5n IGxhcmdlIGRvY3VtZW50cyBvbiAKICAgICAgICAgICAgICAgIGRldmljZXMgd2l0aCBsaW1pdGVk IG1lbW9yeS48L3hzOmRvY3VtZW50YXRpb24+CiAgICAgICAgICAgIDwveHM6YW5ub3RhdGlvbj4K ICAgICAgICA8L3hzOmF0dHJpYnV0ZT4KICAgICAgICA8eHM6YXR0cmlidXRlIG5hbWU9J3ZhbHVl TWF4TGVuZ3RoJyB0eXBlPSd4czpwb3NpdGl2ZUludGVnZXInIHVzZT0nb3B0aW9uYWwnPgogICAg ICAgICAgICA8eHM6YW5ub3RhdGlvbj4KICAgICAgICAgICAgICAgIDx4czpkb2N1bWVudGF0aW9u PlRoZSB2YWx1ZU1heExlbmd0aCBvcHRpb24gc3BlY2lmaWVzIHRoZSBtYXhpbXVtIGxlbmd0aCBv ZiB2YWx1ZSBjb250ZW50IGl0ZW1zIHRvIGJlIAogICAgICAgICAgICAgICAgY29uc2lkZXJlZCBm b3IgYWRkaXRpb24gdG8gdGhlIHN0cmluZyB0YWJsZS4gVGhlIGRlZmF1bHQgdmFsdWUgInVuYm91 bmRlZCIgaXMgYXNzdW1lZCB3aGVuIHRoZSAKICAgICAgICAgICAgICAgICJ2YWx1ZU1heExlbmd0 aCIgZWxlbWVudCBpcyBhYnNlbnQgaW4gdGhlIEVYSSBPcHRpb25zIGRvY3VtZW50LjwveHM6ZG9j dW1lbnRhdGlvbj4KICAgICAgICAgICAgPC94czphbm5vdGF0aW9uPgogICAgICAgIDwveHM6YXR0 cmlidXRlPgogICAgICAgIDx4czphdHRyaWJ1dGUgbmFtZT0ndmFsdWVQYXJ0aXRpb25DYXBhY2l0 eScgdHlwZT0neHM6cG9zaXRpdmVJbnRlZ2VyJyB1c2U9J29wdGlvbmFsJz4KICAgICAgICAgICAg PHhzOmFubm90YXRpb24+CiAgICAgICAgICAgICAgICA8eHM6ZG9jdW1lbnRhdGlvbj5UaGUgdmFs dWVQYXJ0aXRpb25DYXBhY2l0eSBvcHRpb24gc3BlY2lmaWVzIHRoZSBtYXhpbXVtIG51bWJlciBv ZiB2YWx1ZSBjb250ZW50IAogICAgICAgICAgICAgICAgaXRlbXMgaW4gdGhlIHN0cmluZyB0YWJs ZSBhdCBhbnkgZ2l2ZW4gdGltZS4gVGhlIGRlZmF1bHQgdmFsdWUgInVuYm91bmRlZCIgaXMgYXNz dW1lZCB3aGVuIHRoZSAKICAgICAgICAgICAgICAgICJ2YWx1ZVBhcnRpdGlvbkNhcGFjaXR5IiBl bGVtZW50IGlzIGFic2VudCBpbiB0aGUgRVhJIE9wdGlvbnMgZG9jdW1lbnQuIFNlY3Rpb24gNy4z LjMgUGFydGl0aW9ucyAKICAgICAgICAgICAgICAgIE9wdGltaXplZCBmb3IgRnJlcXVlbnQgdXNl IG9mIFN0cmluZyBMaXRlcmFscyBzcGVjaWZpZXMgdGhlIGJlaGF2aW9yIG9mIHRoZSBzdHJpbmcg dGFibGUgd2hlbiB0aGlzIAogICAgICAgICAgICAgICAgY2FwYWNpdHkgaXMgcmVhY2hlZC48L3hz OmRvY3VtZW50YXRpb24+CiAgICAgICAgICAgIDwveHM6YW5ub3RhdGlvbj4KICAgICAgICA8L3hz OmF0dHJpYnV0ZT4KICAgICAgICA8eHM6YXR0cmlidXRlIG5hbWU9J3Nlc3Npb25XaWRlQnVmZmVy cycgdHlwZT0neHM6Ym9vbGVhbicgdXNlPSdvcHRpb25hbCcgZGVmYXVsdD0nZmFsc2UnPgogICAg ICAgICAgICA8eHM6YW5ub3RhdGlvbj4KICAgICAgICAgICAgICAgIDx4czpkb2N1bWVudGF0aW9u PklmIHNldCB0byB0cnVlLCBhbGwgYnVmZmVycywgc3RyaW5nIHRhYmxlcywgZXRjLiB3aWxsIGJl IG1haW50YWluZWQgZHVyaW5nIHRoZSAKICAgICAgICAgICAgICAgIGVudGlyZSBzZXNzaW9uLiBU aGlzIG1heSBpbXByb3ZlIHBlcmZvcm1hbmNlIGR1cmluZyB0aW1lIHNpbmNlIHN0cmluZ3MgY2Fu IGJlIG9taXR0ZWQgaW4gdGhlIAogICAgICAgICAgICAgICAgY29tcHJlc3NlZCBiaW5hcnkgc3Ry ZWFtLCBidXQgaXQgbWlnaHQgYWxzbyBpbiBzb21lIGNhc2VzIGRlZ3JhZGUgcGVyZm9ybWFuY2Ug c2luY2UgbW9yZSBvcHRpb25zIAogICAgICAgICAgICAgICAgYXJlIGF2YWlsYWJsZSBpbiB0aGUg dGFibGVzLCByZXF1aXJpbmcgbW9yZSBiaXRzIHRvIGVuY29kZSBzdHJpbmdzLiBUaGUgZGVmYXVs dCB2YWx1ZSBpcyBmYWxzZSwgCiAgICAgICAgICAgICAgICBtZWFuaW5nIHRoYXQgYnVmZmVycywg c3RyaW5nIHRhYmxlcywgZXRjLiwgYXJlIGNsZWFyZWQgYmV0d2VlbiBlYWNoIHN0YW56YS48L3hz OmRvY3VtZW50YXRpb24+CiAgICAgICAgICAgIDwveHM6YW5ub3RhdGlvbj4KICAgICAgICA8L3hz OmF0dHJpYnV0ZT4KICAgIDwveHM6YXR0cmlidXRlR3JvdXA+CiAKICAgIDx4czpzaW1wbGVUeXBl IG5hbWU9J01ENUhhc2gnPgogICAgICAgIDx4czpyZXN0cmljdGlvbiBiYXNlPSd4czpzdHJpbmcn PgogICAgICAgICAgICA8eHM6cGF0dGVybiB2YWx1ZT0nXlswLTlhLWZdezMyfSQnLz4KICAgICAg ICA8L3hzOnJlc3RyaWN0aW9uPgogICAgPC94czpzaW1wbGVUeXBlPgogCiAgICA8eHM6c2ltcGxl VHlwZSBuYW1lPSdBbGlnbm1lbnQnPgogICAgICAgIDx4czpyZXN0cmljdGlvbiBiYXNlPSd4czpz dHJpbmcnPgogICAgICAgICAgICA8eHM6ZW51bWVyYXRpb24gdmFsdWU9J2JpdC1wYWNrZWQnPgog ICAgICAgICAgICAgICAgPHhzOmFubm90YXRpb24+CiAgICAgICAgICAgICAgICAgICAgPHhzOmRv Y3VtZW50YXRpb24+VGhlIGFsaWdubWVudCBvcHRpb24gdmFsdWUgYml0LXBhY2tlZCBpbmRpY2F0 ZXMgdGhhdCB0aGUgZXZlbnQgY29kZXMgYW5kIGFzc29jaWF0ZWQgCiAgICAgICAgICAgICAgICAg ICAgY29udGVudCBhcmUgcGFja2VkIGluIGJpdHMgd2l0aG91dCBhbnkgcGFkZGluZyBpbi1iZXR3 ZWVuLjwveHM6ZG9jdW1lbnRhdGlvbj4KICAgICAgICAgICAgICAgIDwveHM6YW5ub3RhdGlvbj4K ICAgICAgICAgICAgPC94czplbnVtZXJhdGlvbj4KICAgICAgICAgICAgPHhzOmVudW1lcmF0aW9u IHZhbHVlPSdieXRlLWFsaWdubWVudCc+CiAgICAgICAgICAgICAgICA8eHM6YW5ub3RhdGlvbj4K ICAgICAgICAgICAgICAgICAgICA8eHM6ZG9jdW1lbnRhdGlvbj5UaGUgYWxpZ25tZW50IG9wdGlv biB2YWx1ZSBieXRlLWFsaWdubWVudCBpbmRpY2F0ZXMgdGhhdCB0aGUgZXZlbnQgY29kZXMgYW5k IAogICAgICAgICAgICAgICAgICAgIGFzc29jaWF0ZWQgY29udGVudCBhcmUgYWxpZ25lZCBvbiBi eXRlIGJvdW5kYXJpZXMuIFdoaWxlIGJ5dGUtYWxpZ25tZW50IGdlbmVyYWxseSByZXN1bHRzIGlu IEVYSSAKICAgICAgICAgICAgICAgICAgICBzdHJlYW1zIG9mIGxhcmdlciBzaXplcyBjb21wYXJl ZCB3aXRoIHRoZWlyIGJpdC1wYWNrZWQgZXF1aXZhbGVudHMsIGJ5dGUtYWxpZ25tZW50IG1heSBw cm92aWRlIGEgCiAgICAgICAgICAgICAgICAgICAgaGVscCBpbiBzb21lIHVzZSBjYXNlcyB0aGF0 IGludm9sdmUgZnJlcXVlbnQgY29weWluZyBvZiBsYXJnZSBhcnJheXMgb2Ygc2NhbGFyIGRhdGEg ZGlyZWN0bHkgb3V0IAogICAgICAgICAgICAgICAgICAgIG9mIHRoZSBzdHJlYW0uIEl0IGNhbiBh bHNvIG1ha2UgaXQgcG9zc2libGUgdG8gd29yayB3aXRoIGRhdGEgaW4tcGxhY2UgYW5kIGNhbiBt YWtlIGl0IGVhc2llciB0byAKICAgICAgICAgICAgICAgICAgICBkZWJ1ZyBlbmNvZGVkIGRhdGEg YnkgYWxsb3dpbmcgaXRlbXMgb24gYWxpZ25lZCBib3VuZGFyaWVzIHRvIGJlIGVhc2lseSBsb2Nh dGVkIGluIHRoZSBzdHJlYW0uPC94czpkb2N1bWVudGF0aW9uPgogICAgICAgICAgICAgICAgPC94 czphbm5vdGF0aW9uPgogICAgICAgICAgICA8L3hzOmVudW1lcmF0aW9uPgogICAgICAgICAgICA8 eHM6ZW51bWVyYXRpb24gdmFsdWU9J3ByZS1jb21wcmVzc2lvbic+CiAgICAgICAgICAgICAgICA8 eHM6YW5ub3RhdGlvbj4KICAgICAgICAgICAgICAgICAgICA8eHM6ZG9jdW1lbnRhdGlvbj5UaGUg YWxpZ25tZW50IG9wdGlvbiB2YWx1ZSBwcmUtY29tcHJlc3Npb24gaW5kaWNhdGVzIHRoYXQgYWxs IHN0ZXBzIGludm9sdmVkIAogICAgICAgICAgICAgICAgICAgIGluIGNvbXByZXNzaW9uIChzZWUg c2VjdGlvbiA5LiBFWEkgQ29tcHJlc3Npb24pIGFyZSB0byBiZSBkb25lIHdpdGggdGhlIGV4Y2Vw dGlvbiBvZiB0aGUgZmluYWwgCiAgICAgICAgICAgICAgICAgICAgc3RlcCBvZiBhcHBseWluZyB0 aGUgREVGTEFURSBhbGdvcml0aG0uIFRoZSBwcmltYXJ5IHVzZSBjYXNlIG9mIHByZS1jb21wcmVz c2lvbiBpcyB0byBhdm9pZCBhIAogICAgICAgICAgICAgICAgICAgIGR1cGxpY2F0ZSBjb21wcmVz c2lvbiBzdGVwIHdoZW4gY29tcHJlc3Npb24gY2FwYWJpbGl0eSBpcyBidWlsdCBpbnRvIHRoZSB0 cmFuc3BvcnQgcHJvdG9jb2wuIEluIAogICAgICAgICAgICAgICAgICAgIHRoaXMgY2FzZSwgcHJl LWNvbXByZXNzaW9uIGp1c3QgcHJlcGFyZXMgdGhlIHN0cmVhbSBmb3IgbGF0ZXIgY29tcHJlc3Np b24uPC94czpkb2N1bWVudGF0aW9uPgogICAgICAgICAgICAgICAgPC94czphbm5vdGF0aW9uPgog ICAgICAgICAgICA8L3hzOmVudW1lcmF0aW9uPgogICAgICAgIDwveHM6cmVzdHJpY3Rpb24+CiAg ICA8L3hzOnNpbXBsZVR5cGU+CiAKICAgIDx4czplbGVtZW50IG5hbWU9J3VwbG9hZFNjaGVtYScg dHlwZT0neHM6YmFzZTY0QmluYXJ5Jy8+CiAKICAgIDx4czplbGVtZW50IG5hbWU9J2Rvd25sb2Fk U2NoZW1hJyB0eXBlPSdEb3dubG9hZFNjaGVtYScvPgogICAgPHhzOmVsZW1lbnQgbmFtZT0nZG93 bmxvYWRTY2hlbWFSZXNwb25zZScgdHlwZT0nRG93bmxvYWRTY2hlbWFSZXNwb25zZScvPgoKICAg IDx4czpjb21wbGV4VHlwZSBuYW1lPSdEb3dubG9hZFNjaGVtYSc+CiAgICAgICAgPHhzOmF0dHJp YnV0ZSBuYW1lPSd1cmwnIHR5cGU9J3hzOnN0cmluZycgdXNlPSdyZXF1aXJlZCcvPgogICAgPC94 czpjb21wbGV4VHlwZT4KICAKICAgIDx4czpjb21wbGV4VHlwZSBuYW1lPSdEb3dubG9hZFNjaGVt YVJlc3BvbnNlJz4KICAgICAgICA8eHM6Y29tcGxleENvbnRlbnQ+CiAgICAgICAgICAgIDx4czpl eHRlbnNpb24gYmFzZT0nRG93bmxvYWRTY2hlbWEnPgogICAgICAgICAgICAgICAgPHhzOmNob2lj ZSBtaW5PY2N1cnM9JzAnIG1heE9jY3Vycz0nMSc+CiAgICAgICAgICAgICAgICAgICAgPHhzOmVs ZW1lbnQgbmFtZT0naHR0cEVycm9yJz4KICAgICAgICAgICAgICAgICAgICAgICAgPHhzOmNvbXBs ZXhUeXBlPgogICAgICAgICAgICAgICAgICAgICAgICAgICAgPHhzOmF0dHJpYnV0ZSBuYW1lPSdj b2RlJyB0eXBlPSd4czpwb3NpdGl2ZUludGVnZXInIHVzZT0ncmVxdWlyZWQnLz4KICAgICAgICAg ICAgICAgICAgICAgICAgICAgIDx4czphdHRyaWJ1dGUgbmFtZT0nbWVzc2FnZScgdHlwZT0neHM6 c3RyaW5nJyB1c2U9J3JlcXVpcmVkJy8+CiAgICAgICAgICAgICAgICAgICAgICAgIDwveHM6Y29t cGxleFR5cGU+CiAgICAgICAgICAgICAgICAgICAgPC94czplbGVtZW50PgogICAgICAgICAgICAg ICAgICAgIDx4czplbGVtZW50IG5hbWU9J2ludmFsaWRVcmwnPgogICAgICAgICAgICAgICAgICAg ICAgICA8eHM6Y29tcGxleFR5cGU+CiAgICAgICAgICAgICAgICAgICAgICAgICAgICA8eHM6YXR0 cmlidXRlIG5hbWU9J21lc3NhZ2UnIHR5cGU9J3hzOnN0cmluZycgdXNlPSdyZXF1aXJlZCcvPgog ICAgICAgICAgICAgICAgICAgICAgICA8L3hzOmNvbXBsZXhUeXBlPgogICAgICAgICAgICAgICAg ICAgIDwveHM6ZWxlbWVudD4KICAgICAgICAgICAgICAgICAgICA8eHM6ZWxlbWVudCBuYW1lPSd0 aW1lb3V0Jz4KICAgICAgICAgICAgICAgICAgICAgICAgPHhzOmNvbXBsZXhUeXBlPgogICAgICAg ICAgICAgICAgICAgICAgICAgICAgPHhzOmF0dHJpYnV0ZSBuYW1lPSdtZXNzYWdlJyB0eXBlPSd4 czpzdHJpbmcnIHVzZT0ncmVxdWlyZWQnLz4KICAgICAgICAgICAgICAgICAgICAgICAgPC94czpj b21wbGV4VHlwZT4KICAgICAgICAgICAgICAgICAgICA8L3hzOmVsZW1lbnQ+CiAgICAgICAgICAg ICAgICAgICAgPHhzOmVsZW1lbnQgbmFtZT0naW52YWxpZENvbnRlbnRUeXBlJz4KICAgICAgICAg ICAgICAgICAgICAgICAgPHhzOmNvbXBsZXhUeXBlPgogICAgICAgICAgICAgICAgICAgICAgICAg ICAgPHhzOmF0dHJpYnV0ZSBuYW1lPSdjb250ZW50VHlwZVJldHVybmVkJyB0eXBlPSd4czpzdHJp bmcnIHVzZT0ncmVxdWlyZWQnLz4KICAgICAgICAgICAgICAgICAgICAgICAgPC94czpjb21wbGV4 VHlwZT4KICAgICAgICAgICAgICAgICAgICA8L3hzOmVsZW1lbnQ+CiAgICAgICAgICAgICAgICAg ICAgPHhzOmVsZW1lbnQgbmFtZT0nZXJyb3InPgogICAgICAgICAgICAgICAgICAgICAgICA8eHM6 Y29tcGxleFR5cGU+CiAgICAgICAgICAgICAgICAgICAgICAgICAgICA8eHM6YXR0cmlidXRlIG5h bWU9J21lc3NhZ2UnIHR5cGU9J3hzOnN0cmluZycgdXNlPSdyZXF1aXJlZCcvPgogICAgICAgICAg ICAgICAgICAgICAgICA8L3hzOmNvbXBsZXhUeXBlPgogICAgICAgICAgICAgICAgICAgIDwveHM6 ZWxlbWVudD4KICAgICAgICAgICAgICAgIDwveHM6Y2hvaWNlPgogICAgICAgICAgICAgICAgPHhz OmF0dHJpYnV0ZSBuYW1lPSdyZXN1bHQnIHR5cGU9J3hzOmJvb2xlYW4nIHVzZT0ncmVxdWlyZWQn Lz4KICAgICAgICAgICAgPC94czpleHRlbnNpb24+CiAgICAgICAgPC94czpjb21wbGV4Q29udGVu dD4KICAgIDwveHM6Y29tcGxleFR5cGU+CiAKPC94czpzY2hlbWE+Cl1dPgogICAgICAgIDwvY29k ZT4KICAgIDwvc2VjdGlvbjE+CiAgICA8c2VjdGlvbjEgdG9waWM9J0Fja25vd2xlZGdlbWVudHMn IGFuY2hvcj0nYWNrJz4KICAgICAgICA8cD5UaGFua3MgdG8gSm9hY2hpbSBMaW5kYm9yZyBmb3Ig YWxsIHZhbHVhYmxlIGZlZWRiYWNrLjwvcD4KICAgIDwvc2VjdGlvbjE+CjwveGVwPg== --_004_1693EFE1FD641C42A0D542FCBC732DE698E53473EX3YODAUTOPIALO_ Content-Type: text/xml; name="xep-0000-Exi.xsd" Content-Description: xep-0000-Exi.xsd Content-Disposition: attachment; filename="xep-0000-Exi.xsd"; size=12967; creation-date="Tue, 12 Mar 2013 19:18:41 GMT"; modification-date="Wed, 13 Mar 2013 21:44:22 GMT" Content-Transfer-Encoding: base64 PD94bWwgdmVyc2lvbj0nMS4wJyBlbmNvZGluZz0nVVRGLTgnPz4KPHhzOnNjaGVtYQogICAgeG1s bnM6eHM9J2h0dHA6Ly93d3cudzMub3JnLzIwMDEvWE1MU2NoZW1hJwogICAgdGFyZ2V0TmFtZXNw YWNlPSdodHRwOi8vamFiYmVyLm9yZy9wcm90b2NvbC9jb21wcmVzcy9leGknCiAgICB4bWxucz0n aHR0cDovL2phYmJlci5vcmcvcHJvdG9jb2wvY29tcHJlc3MvZXhpJwogICAgZWxlbWVudEZvcm1E ZWZhdWx0PSdxdWFsaWZpZWQnPgogICAgCiAgICA8eHM6ZWxlbWVudCBuYW1lPSdzZXR1cCcgdHlw ZT0nU2V0dXAnLz4KICAgIDx4czplbGVtZW50IG5hbWU9J3NldHVwUmVzcG9uc2UnIHR5cGU9J1Nl dHVwUmVzcG9uc2UnLz4KIAogICAgPHhzOmNvbXBsZXhUeXBlIG5hbWU9J1NldHVwJz4KICAgICAg ICA8eHM6Y2hvaWNlIG1pbk9jY3Vycz0nMCcgbWF4T2NjdXJzPSd1bmJvdW5kZWQnPgogICAgICAg ICAgICA8eHM6ZWxlbWVudCBuYW1lPSdzY2hlbWEnIHR5cGU9J1NjaGVtYScvPgogICAgICAgICAg ICA8eHM6ZWxlbWVudCBuYW1lPSdkYXRhdHlwZVJlcHJlc2VudGF0aW9uTWFwJyB0eXBlPSdEYXRh dHlwZVJlcHJlc2VudGF0aW9uTWFwJy8+CiAgICAgICAgPC94czpjaG9pY2U+CiAgICAgICAgPHhz OmF0dHJpYnV0ZUdyb3VwIHJlZj0nT3B0aW9ucycvPgogICAgPC94czpjb21wbGV4VHlwZT4KIAog ICAgPHhzOmNvbXBsZXhUeXBlIG5hbWU9J1NldHVwUmVzcG9uc2UnPgogICAgICAgIDx4czpjb21w bGV4Q29udGVudD4KICAgICAgICAgICAgPHhzOmV4dGVuc2lvbiBiYXNlPSdTZXR1cCc+CiAgICAg ICAgICAgICAgICA8eHM6Y2hvaWNlIG1pbk9jY3Vycz0nMCcgbWF4T2NjdXJzPSd1bmJvdW5kZWQn PgogICAgICAgICAgICAgICAgICAgIDx4czplbGVtZW50IG5hbWU9J21pc3NpbmdTY2hlbWEnIHR5 cGU9J1NjaGVtYScvPgogICAgICAgICAgICAgICAgPC94czpjaG9pY2U+CiAgICAgICAgICAgICAg ICA8eHM6YXR0cmlidXRlIG5hbWU9J2FncmVlbWVudCcgdHlwZT0neHM6Ym9vbGVhbicgdXNlPSdv cHRpb25hbCcgZGVmYXVsdD0nZmFsc2UnLz4KICAgICAgICAgICAgPC94czpleHRlbnNpb24+CiAg ICAgICAgPC94czpjb21wbGV4Q29udGVudD4KICAgIDwveHM6Y29tcGxleFR5cGU+CiAKICAgIDx4 czpjb21wbGV4VHlwZSBuYW1lPSdTY2hlbWEnPgogICAgICAgIDx4czphdHRyaWJ1dGUgbmFtZT0n bnMnIHR5cGU9J3hzOnN0cmluZycgdXNlPSdyZXF1aXJlZCcvPgogICAgICAgIDx4czphdHRyaWJ1 dGUgbmFtZT0nYnl0ZXMnIHR5cGU9J3hzOnBvc2l0aXZlSW50ZWdlcicgdXNlPSdyZXF1aXJlZCcv PgogICAgICAgIDx4czphdHRyaWJ1dGUgbmFtZT0nbWQ1SGFzaCcgdHlwZT0nTUQ1SGFzaCcgdXNl PSdyZXF1aXJlZCcvPgogICAgPC94czpjb21wbGV4VHlwZT4KIAogICAgPHhzOmNvbXBsZXhUeXBl IG5hbWU9J0RhdGF0eXBlUmVwcmVzZW50YXRpb25NYXAnPgogICAgICAgIDx4czphdHRyaWJ1dGUg bmFtZT0ndHlwZScgdHlwZT0neHM6c3RyaW5nJyB1c2U9J3JlcXVpcmVkJy8+CiAgICAgICAgPHhz OmF0dHJpYnV0ZSBuYW1lPSdyZXByZXNlbnRBcycgdHlwZT0neHM6c3RyaW5nJyB1c2U9J3JlcXVp cmVkJy8+CiAgICA8L3hzOmNvbXBsZXhUeXBlPgogCiAgICA8eHM6YXR0cmlidXRlR3JvdXAgbmFt ZT0nT3B0aW9ucyc+CiAgICAgICAgPHhzOmF0dHJpYnV0ZSBuYW1lPSd2ZXJzaW9uJyB0eXBlPSd4 czpwb3NpdGl2ZUludGVnZXInIHVzZT0nb3B0aW9uYWwnIGRlZmF1bHQ9JzEnLz4KICAgICAgICA8 eHM6YXR0cmlidXRlIG5hbWU9J2FsaWdubWVudCcgdHlwZT0nQWxpZ25tZW50JyB1c2U9J29wdGlv bmFsJyBkZWZhdWx0PSdiaXQtcGFja2VkJz4KICAgICAgICAgICAgPHhzOmFubm90YXRpb24+CiAg ICAgICAgICAgICAgICA8eHM6ZG9jdW1lbnRhdGlvbj5UaGUgYWxpZ25tZW50IG9wdGlvbiBpcyB1 c2VkIHRvIGNvbnRyb2wgdGhlIGFsaWdubWVudCBvZiBldmVudCBjb2RlcyBhbmQgY29udGVudCBp dGVtcy4gVGhlIHZhbHVlIGlzIG9uZSBvZiBiaXQtcGFja2VkLCBieXRlLWFsaWdubWVudCBvciBw cmUtY29tcHJlc3Npb24sIG9mIHdoaWNoIGJpdC1wYWNrZWQgaXMgdGhlIGRlZmF1bHQgdmFsdWUg YXNzdW1lZCB3aGVuIHRoZSAiYWxpZ25tZW50IiBlbGVtZW50IGlzIGFic2VudCBpbiB0aGUgRVhJ IE9wdGlvbnMgZG9jdW1lbnQuIFRoZSBvcHRpb24gdmFsdWVzIGJ5dGUtYWxpZ25tZW50IGFuZCBw cmUtY29tcHJlc3Npb24gYXJlIGVmZmVjdGVkIHdoZW4gImJ5dGUiIGFuZCAicHJlLWNvbXByZXNz IiBlbGVtZW50cyBhcmUgcHJlc2VudCBpbiB0aGUgRVhJIE9wdGlvbnMgZG9jdW1lbnQsIHJlc3Bl Y3RpdmVseS4gV2hlbiB0aGUgdmFsdWUgb2YgY29tcHJlc3Npb24gb3B0aW9uIGlzIHNldCB0byB0 cnVlLCBhbGlnbm1lbnQgb2YgdGhlIEVYSSBCb2R5IGlzIGdvdmVybmVkIGJ5IHRoZSBydWxlcyBz cGVjaWZpZWQgaW4gOS4gRVhJIENvbXByZXNzaW9uIGluc3RlYWQgb2YgdGhlIGFsaWdubWVudCBv cHRpb24gdmFsdWUuIFRoZSAiYWxpZ25tZW50IiBlbGVtZW50IE1VU1QgTk9UIGFwcGVhciBpbiBh biBFWEkgb3B0aW9ucyBkb2N1bWVudCB3aGVuIHRoZSAiY29tcHJlc3Npb24iIGVsZW1lbnQgaXMg cHJlc2VudC48L3hzOmRvY3VtZW50YXRpb24+CiAgICAgICAgICAgIDwveHM6YW5ub3RhdGlvbj4K ICAgICAgICA8L3hzOmF0dHJpYnV0ZT4KICAgICAgICA8eHM6YXR0cmlidXRlIG5hbWU9J2NvbXBy ZXNzaW9uJyB0eXBlPSd4czpib29sZWFuJyB1c2U9J29wdGlvbmFsJyBkZWZhdWx0PSdmYWxzZSc+ CiAgICAgICAgICAgIDx4czphbm5vdGF0aW9uPgogICAgICAgICAgICAgICAgPHhzOmRvY3VtZW50 YXRpb24+VGhlIGNvbXByZXNzaW9uIG9wdGlvbiBpcyBhIEJvb2xlYW4gdXNlZCB0byBpbmNyZWFz ZSBjb21wYWN0bmVzcyB1c2luZyBhZGRpdGlvbmFsIGNvbXB1dGF0aW9uYWwgcmVzb3VyY2VzLiBU aGUgZGVmYXVsdCB2YWx1ZSAiZmFsc2UiIGlzIGFzc3VtZWQgd2hlbiB0aGUgImNvbXByZXNzaW9u IiBlbGVtZW50IGlzIGFic2VudCBpbiB0aGUgRVhJIE9wdGlvbnMgZG9jdW1lbnQgd2hlcmVhcyBp dHMgcHJlc2VuY2UgZGVub3RlcyB0aGUgdmFsdWUgInRydWUiLiBXaGVuIHNldCB0byB0cnVlLCB0 aGUgZXZlbnQgY29kZXMgYW5kIGFzc29jaWF0ZWQgY29udGVudCBhcmUgY29tcHJlc3NlZCBhY2Nv cmRpbmcgdG8gOS4gRVhJIENvbXByZXNzaW9uIHJlZ2FyZGxlc3Mgb2YgdGhlIGFsaWdubWVudCBv cHRpb24gdmFsdWUuIEFzIG1lbnRpb25lZCBhYm92ZSwgdGhlICJjb21wcmVzc2lvbiIgZWxlbWVu dCBNVVNUIE5PVCBhcHBlYXIgaW4gYW4gRVhJIG9wdGlvbnMgZG9jdW1lbnQgd2hlbiB0aGUgImFs aWdubWVudCIgZWxlbWVudCBpcyBwcmVzZW50LjwveHM6ZG9jdW1lbnRhdGlvbj4KICAgICAgICAg ICAgPC94czphbm5vdGF0aW9uPgogICAgICAgIDwveHM6YXR0cmlidXRlPgogICAgICAgIDx4czph dHRyaWJ1dGUgbmFtZT0nc3RyaWN0JyB0eXBlPSd4czpib29sZWFuJyB1c2U9J29wdGlvbmFsJyBk ZWZhdWx0PSdmYWxzZSc+CiAgICAgICAgICAgIDx4czphbm5vdGF0aW9uPgogICAgICAgICAgICAg ICAgPHhzOmRvY3VtZW50YXRpb24+VGhlIHN0cmljdCBvcHRpb24gaXMgYSBCb29sZWFuIHVzZWQg dG8gaW5jcmVhc2UgY29tcGFjdG5lc3MgYnkgdXNpbmcgYSBzdHJpY3QgaW50ZXJwcmV0YXRpb24g b2YgdGhlIHNjaGVtYXMgYW5kIG9taXR0aW5nIHByZXNlcnZhdGlvbiBvZiBjZXJ0YWluIGl0ZW1z LCBzdWNoIGFzIGNvbW1lbnRzLCBwcm9jZXNzaW5nIGluc3RydWN0aW9ucyBhbmQgbmFtZXNwYWNl IHByZWZpeGVzLiBUaGUgZGVmYXVsdCB2YWx1ZSAiZmFsc2UiIGlzIGFzc3VtZWQgd2hlbiB0aGUg InN0cmljdCIgZWxlbWVudCBpcyBhYnNlbnQgaW4gdGhlIEVYSSBPcHRpb25zIGRvY3VtZW50IHdo ZXJlYXMgaXRzIHByZXNlbmNlIGRlbm90ZXMgdGhlIHZhbHVlICJ0cnVlIi4gV2hlbiBzZXQgdG8g dHJ1ZSwgdGhvc2UgcHJvZHVjdGlvbnMgdGhhdCBoYXZlIE5TLCBDTSwgUEksIEVSLCBhbmQgU0Mg dGVybWluYWwgc3ltYm9scyBhcmUgb21pdHRlZCBmcm9tIHRoZSBFWEkgZ3JhbW1hcnMsIGFuZCBz Y2hlbWEtaW5mb3JtZWQgZWxlbWVudCBhbmQgdHlwZSBncmFtbWFycyBhcmUgcmVzdHJpY3RlZCB0 byBvbmx5IHBlcm1pdCBpdGVtcyBkZWNsYXJlZCBpbiB0aGUgc2NoZW1hcy4gQSBub3RlIGluIHNl Y3Rpb24gOC41LjQuNC4yIEFkZGluZyBQcm9kdWN0aW9ucyB3aGVuIFN0cmljdCBpcyBUcnVlIGRl c2NyaWJlcyBzb21lIGFkZGl0aW9uYWwgcmVzdHJpY3Rpb25zIGNvbnNlcXVlbnRpYWwgb2YgdGhl IHVzZSBvZiB0aGlzIG9wdGlvbi4gVGhlICJzdHJpY3QiIGVsZW1lbnQgTVVTVCBOT1QgYXBwZWFy IGluIGFuIEVYSSBvcHRpb25zIGRvY3VtZW50IHdoZW4gb25lIG9mICJkdGQiLCAicHJlZml4ZXMi LCAiY29tbWVudHMiLCAicGlzIiBvciAic2VsZkNvbnRhaW5lZCIgZWxlbWVudCBpcyBwcmVzZW50 IGluIHRoZSBzYW1lIG9wdGlvbnMgZG9jdW1lbnQuPC94czpkb2N1bWVudGF0aW9uPgogICAgICAg ICAgICA8L3hzOmFubm90YXRpb24+CiAgICAgICAgPC94czphdHRyaWJ1dGU+CiAgICAgICAgPHhz OmF0dHJpYnV0ZSBuYW1lPSdwcmVzZXJ2ZUNvbW1lbnRzJyB0eXBlPSd4czpib29sZWFuJyB1c2U9 J29wdGlvbmFsJyBkZWZhdWx0PSdmYWxzZSc+CiAgICAgICAgICAgIDx4czphbm5vdGF0aW9uPgog ICAgICAgICAgICAgICAgPHhzOmRvY3VtZW50YXRpb24+Q29tbWVudHMgYXJlIHByZXNlcnZlZC4g TXVzdCBub3QgYmUgdXNlZCB0b2dldGhlciB3aXRoIHRoZSBzdHJpY3Qgb3B0aW9uLjwveHM6ZG9j dW1lbnRhdGlvbj4KICAgICAgICAgICAgPC94czphbm5vdGF0aW9uPgogICAgICAgIDwveHM6YXR0 cmlidXRlPgogICAgICAgIDx4czphdHRyaWJ1dGUgbmFtZT0ncHJlc2VydmVQSXMnIHR5cGU9J3hz OmJvb2xlYW4nIHVzZT0nb3B0aW9uYWwnIGRlZmF1bHQ9J2ZhbHNlJz4KICAgICAgICAgICAgPHhz OmFubm90YXRpb24+CiAgICAgICAgICAgICAgICA8eHM6ZG9jdW1lbnRhdGlvbj5Qcm9jZXNzaW5n IGluc3RydWN0aW9ucyBhcmUgcHJlc2VydmVkLiBNdXN0IG5vdCBiZSB1c2VkIHRvZ2V0aGVyIHdp dGggdGhlIHN0cmljdCBvcHRpb24uPC94czpkb2N1bWVudGF0aW9uPgogICAgICAgICAgICA8L3hz OmFubm90YXRpb24+CiAgICAgICAgPC94czphdHRyaWJ1dGU+CiAgICAgICAgPHhzOmF0dHJpYnV0 ZSBuYW1lPSdwcmVzZXJ2ZURURCcgdHlwZT0neHM6Ym9vbGVhbicgdXNlPSdvcHRpb25hbCcgZGVm YXVsdD0nZmFsc2UnPgogICAgICAgICAgICA8eHM6YW5ub3RhdGlvbj4KICAgICAgICAgICAgICAg IDx4czpkb2N1bWVudGF0aW9uPkRURCBpcyBwcmVzZXJ2ZWQuIE11c3Qgbm90IGJlIHVzZWQgdG9n ZXRoZXIgd2l0aCB0aGUgc3RyaWN0IG9wdGlvbi48L3hzOmRvY3VtZW50YXRpb24+CiAgICAgICAg ICAgIDwveHM6YW5ub3RhdGlvbj4KICAgICAgICA8L3hzOmF0dHJpYnV0ZT4KICAgICAgICA8eHM6 YXR0cmlidXRlIG5hbWU9J3ByZXNlcnZlUHJlZml4ZXMnIHR5cGU9J3hzOmJvb2xlYW4nIHVzZT0n b3B0aW9uYWwnIGRlZmF1bHQ9J2ZhbHNlJz4KICAgICAgICAgICAgPHhzOmFubm90YXRpb24+CiAg ICAgICAgICAgICAgICA8eHM6ZG9jdW1lbnRhdGlvbj5QcmVmaXhlcyBhcmUgcHJlc2VydmVkLiBN dXN0IG5vdCBiZSB1c2VkIHRvZ2V0aGVyIHdpdGggdGhlIHN0cmljdCBvcHRpb24uPC94czpkb2N1 bWVudGF0aW9uPgogICAgICAgICAgICA8L3hzOmFubm90YXRpb24+CiAgICAgICAgPC94czphdHRy aWJ1dGU+CiAgICAgICAgPHhzOmF0dHJpYnV0ZSBuYW1lPSdwcmVzZXJ2ZUxleGljYWwnIHR5cGU9 J3hzOmJvb2xlYW4nIHVzZT0nb3B0aW9uYWwnIGRlZmF1bHQ9J2ZhbHNlJz4KICAgICAgICAgICAg PHhzOmFubm90YXRpb24+CiAgICAgICAgICAgICAgICA8eHM6ZG9jdW1lbnRhdGlvbj5MZXhpY2Fs IGZvcm0gb2YgZWxlbWVudCBhbmQgYXR0cmlidXRlIHZhbHVlcyBjYW4gYmUgcHJlc2VydmVkIGlu IHZhbHVlIGNvbnRlbnQgaXRlbXMuIENhbiBiZSB1c2VkIHRvZ2V0aGVyIHdpdGggdGhlIHN0cmlj dCBvcHRpb24uPC94czpkb2N1bWVudGF0aW9uPgogICAgICAgICAgICA8L3hzOmFubm90YXRpb24+ CiAgICAgICAgPC94czphdHRyaWJ1dGU+CiAgICAgICAgPHhzOmF0dHJpYnV0ZSBuYW1lPSdzZWxm Q29udGFpbmVkJyB0eXBlPSd4czpib29sZWFuJyB1c2U9J29wdGlvbmFsJyBkZWZhdWx0PSdmYWxz ZSc+CiAgICAgICAgICAgIDx4czphbm5vdGF0aW9uPgogICAgICAgICAgICAgICAgPHhzOmRvY3Vt ZW50YXRpb24+VGhlIHNlbGZDb250YWluZWQgb3B0aW9uIGlzIGEgQm9vbGVhbiB1c2VkIHRvIGVu YWJsZSB0aGUgdXNlIG9mIHNlbGYtY29udGFpbmVkIGVsZW1lbnRzIGluIHRoZSBFWEkgc3RyZWFt LiBTZWxmLWNvbnRhaW5lZCBlbGVtZW50cyBtYXkgYmUgcmVhZCBpbmRlcGVuZGVudGx5IGZyb20g dGhlIHJlc3Qgb2YgdGhlIEVYSSBib2R5LCBhbGxvd2luZyB0aGVtIHRvIGJlIGluZGV4ZWQgZm9y IHJhbmRvbSBhY2Nlc3MuIFRoZSAic2VsZkNvbnRhaW5lZCIgZWxlbWVudCBNVVNUIE5PVCBhcHBl YXIgaW4gYW4gRVhJIG9wdGlvbnMgZG9jdW1lbnQgd2hlbiBvbmUgb2YgImNvbXByZXNzaW9uIiwg InByZS1jb21wcmVzc2lvbiIgb3IgInN0cmljdCIgZWxlbWVudHMgYXJlIHByZXNlbnQgaW4gdGhl IHNhbWUgb3B0aW9ucyBkb2N1bWVudC4gVGhlIGRlZmF1bHQgdmFsdWUgImZhbHNlIiBpcyBhc3N1 bWVkIHdoZW4gdGhlICJzZWxmQ29udGFpbmVkIiBlbGVtZW50IGlzIGFic2VudCBmcm9tIHRoZSBF WEkgT3B0aW9ucyBkb2N1bWVudCB3aGVyZWFzIGl0cyBwcmVzZW5jZSBkZW5vdGVzIHRoZSB2YWx1 ZSAidHJ1ZSIuPC94czpkb2N1bWVudGF0aW9uPgogICAgICAgICAgICA8L3hzOmFubm90YXRpb24+ CiAgICAgICAgPC94czphdHRyaWJ1dGU+CiAgICAgICAgPHhzOmF0dHJpYnV0ZSBuYW1lPSdibG9j a1NpemUnIHR5cGU9J3hzOnBvc2l0aXZlSW50ZWdlcicgdXNlPSdvcHRpb25hbCcgZGVmYXVsdD0n MTAwMDAwMCc+CiAgICAgICAgICAgIDx4czphbm5vdGF0aW9uPgogICAgICAgICAgICAgICAgPHhz OmRvY3VtZW50YXRpb24+VGhlIGJsb2NrU2l6ZSBvcHRpb24gc3BlY2lmaWVzIHRoZSBibG9jayBz aXplIHVzZWQgZm9yIEVYSSBjb21wcmVzc2lvbi4gV2hlbiB0aGUgImJsb2NrU2l6ZSIgZWxlbWVu dCBpcyBhYnNlbnQgaW4gdGhlIEVYSSBPcHRpb25zIGRvY3VtZW50LCB0aGUgZGVmYXVsdCBibG9j a3NpemUgb2YgMSwwMDAsMDAwIGlzIHVzZWQuIFRoZSBkZWZhdWx0IGJsb2NrU2l6ZSBpcyBpbnRl bnRpb25hbGx5IGxhcmdlIGJ1dCBjYW4gYmUgcmVkdWNlZCBmb3IgcHJvY2Vzc2luZyBsYXJnZSBk b2N1bWVudHMgb24gZGV2aWNlcyB3aXRoIGxpbWl0ZWQgbWVtb3J5LjwveHM6ZG9jdW1lbnRhdGlv bj4KICAgICAgICAgICAgPC94czphbm5vdGF0aW9uPgogICAgICAgIDwveHM6YXR0cmlidXRlPgog ICAgICAgIDx4czphdHRyaWJ1dGUgbmFtZT0ndmFsdWVNYXhMZW5ndGgnIHR5cGU9J3hzOnBvc2l0 aXZlSW50ZWdlcicgdXNlPSdvcHRpb25hbCc+CiAgICAgICAgICAgIDx4czphbm5vdGF0aW9uPgog ICAgICAgICAgICAgICAgPHhzOmRvY3VtZW50YXRpb24+VGhlIHZhbHVlTWF4TGVuZ3RoIG9wdGlv biBzcGVjaWZpZXMgdGhlIG1heGltdW0gbGVuZ3RoIG9mIHZhbHVlIGNvbnRlbnQgaXRlbXMgdG8g YmUgY29uc2lkZXJlZCBmb3IgYWRkaXRpb24gdG8gdGhlIHN0cmluZyB0YWJsZS4gVGhlIGRlZmF1 bHQgdmFsdWUgInVuYm91bmRlZCIgaXMgYXNzdW1lZCB3aGVuIHRoZSAidmFsdWVNYXhMZW5ndGgi IGVsZW1lbnQgaXMgYWJzZW50IGluIHRoZSBFWEkgT3B0aW9ucyBkb2N1bWVudC48L3hzOmRvY3Vt ZW50YXRpb24+CiAgICAgICAgICAgIDwveHM6YW5ub3RhdGlvbj4KICAgICAgICA8L3hzOmF0dHJp YnV0ZT4KICAgICAgICA8eHM6YXR0cmlidXRlIG5hbWU9J3ZhbHVlUGFydGl0aW9uQ2FwYWNpdHkn IHR5cGU9J3hzOnBvc2l0aXZlSW50ZWdlcicgdXNlPSdvcHRpb25hbCc+CiAgICAgICAgICAgIDx4 czphbm5vdGF0aW9uPgogICAgICAgICAgICAgICAgPHhzOmRvY3VtZW50YXRpb24+VGhlIHZhbHVl UGFydGl0aW9uQ2FwYWNpdHkgb3B0aW9uIHNwZWNpZmllcyB0aGUgbWF4aW11bSBudW1iZXIgb2Yg dmFsdWUgY29udGVudCBpdGVtcyBpbiB0aGUgc3RyaW5nIHRhYmxlIGF0IGFueSBnaXZlbiB0aW1l LiBUaGUgZGVmYXVsdCB2YWx1ZSAidW5ib3VuZGVkIiBpcyBhc3N1bWVkIHdoZW4gdGhlICJ2YWx1 ZVBhcnRpdGlvbkNhcGFjaXR5IiBlbGVtZW50IGlzIGFic2VudCBpbiB0aGUgRVhJIE9wdGlvbnMg ZG9jdW1lbnQuIFNlY3Rpb24gNy4zLjMgUGFydGl0aW9ucyBPcHRpbWl6ZWQgZm9yIEZyZXF1ZW50 IHVzZSBvZiBTdHJpbmcgTGl0ZXJhbHMgc3BlY2lmaWVzIHRoZSBiZWhhdmlvciBvZiB0aGUgc3Ry aW5nIHRhYmxlIHdoZW4gdGhpcyBjYXBhY2l0eSBpcyByZWFjaGVkLjwveHM6ZG9jdW1lbnRhdGlv bj4KICAgICAgICAgICAgPC94czphbm5vdGF0aW9uPgogICAgICAgIDwveHM6YXR0cmlidXRlPgoJ CTx4czphdHRyaWJ1dGUgbmFtZT0nc2Vzc2lvbldpZGVCdWZmZXJzJyB0eXBlPSd4czpib29sZWFu JyB1c2U9J29wdGlvbmFsJyBkZWZhdWx0PSdmYWxzZSc+CgkJCTx4czphbm5vdGF0aW9uPgoJCQkJ PHhzOmRvY3VtZW50YXRpb24+SWYgc2V0IHRvIHRydWUsIGFsbCBidWZmZXJzLCBzdHJpbmcgdGFi bGVzLCBldGMuIHdpbGwgYmUgbWFpbnRhaW5lZCBkdXJpbmcgdGhlIGVudGlyZSBzZXNzaW9uLiBU aGlzIG1heSBpbXByb3ZlIHBlcmZvcm1hbmNlIGR1cmluZyB0aW1lIHNpbmNlIHN0cmluZ3MKCQkJ CWNhbiBiZSBvbWl0dGVkIGluIHRoZSBjb21wcmVzc2VkIGJpbmFyeSBzdHJlYW0sIGJ1dCBpdCBt aWdodCBhbHNvIGluIHNvbWUgY2FzZXMgZGVncmFkZSBwZXJmb3JtYW5jZSBzaW5jZSBtb3JlIG9w dGlvbnMgYXJlIGF2YWlsYWJsZSBpbiB0aGUgdGFibGVzLCByZXF1aXJpbmcgbW9yZSBiaXRzIAoJ CQkJdG8gZW5jb2RlIHN0cmluZ3MuIFRoZSBkZWZhdWx0IHZhbHVlIGlzIGZhbHNlLCBtZWFuaW5n IHRoYXQgYnVmZmVycywgc3RyaW5nIHRhYmxlcywgZXRjLiwgYXJlIGNsZWFyZWQgYmV0d2VlbiBl YWNoIHN0YW56YS48L3hzOmRvY3VtZW50YXRpb24+CgkJCTwveHM6YW5ub3RhdGlvbj4KCQk8L3hz OmF0dHJpYnV0ZT4KICAgIDwveHM6YXR0cmlidXRlR3JvdXA+CiAKICAgIDx4czpzaW1wbGVUeXBl IG5hbWU9J01ENUhhc2gnPgogICAgICAgIDx4czpyZXN0cmljdGlvbiBiYXNlPSd4czpzdHJpbmcn PgogICAgICAgICAgICA8eHM6cGF0dGVybiB2YWx1ZT0nXlswLTlhLWZdezMyfSQnLz4KICAgICAg ICA8L3hzOnJlc3RyaWN0aW9uPgogICAgPC94czpzaW1wbGVUeXBlPgogCiAgICA8eHM6c2ltcGxl VHlwZSBuYW1lPSdBbGlnbm1lbnQnPgogICAgICAgIDx4czpyZXN0cmljdGlvbiBiYXNlPSd4czpz dHJpbmcnPgogICAgICAgICAgICA8eHM6ZW51bWVyYXRpb24gdmFsdWU9J2JpdC1wYWNrZWQnPgog ICAgICAgICAgICAgICAgPHhzOmFubm90YXRpb24+CiAgICAgICAgICAgICAgICAgICAgPHhzOmRv Y3VtZW50YXRpb24+VGhlIGFsaWdubWVudCBvcHRpb24gdmFsdWUgYml0LXBhY2tlZCBpbmRpY2F0 ZXMgdGhhdCB0aGUgZXZlbnQgY29kZXMgYW5kIGFzc29jaWF0ZWQgY29udGVudCBhcmUgcGFja2Vk IGluIGJpdHMgd2l0aG91dCBhbnkgcGFkZGluZyBpbi1iZXR3ZWVuLjwveHM6ZG9jdW1lbnRhdGlv bj4KICAgICAgICAgICAgICAgIDwveHM6YW5ub3RhdGlvbj4KICAgICAgICAgICAgPC94czplbnVt ZXJhdGlvbj4KICAgICAgICAgICAgPHhzOmVudW1lcmF0aW9uIHZhbHVlPSdieXRlLWFsaWdubWVu dCc+CiAgICAgICAgICAgICAgICA8eHM6YW5ub3RhdGlvbj4KICAgICAgICAgICAgICAgICAgICA8 eHM6ZG9jdW1lbnRhdGlvbj5UaGUgYWxpZ25tZW50IG9wdGlvbiB2YWx1ZSBieXRlLWFsaWdubWVu dCBpbmRpY2F0ZXMgdGhhdCB0aGUgZXZlbnQgY29kZXMgYW5kIGFzc29jaWF0ZWQgY29udGVudCBh cmUgYWxpZ25lZCBvbiBieXRlIGJvdW5kYXJpZXMuIFdoaWxlIGJ5dGUtYWxpZ25tZW50IGdlbmVy YWxseSByZXN1bHRzIGluIEVYSSBzdHJlYW1zIG9mIGxhcmdlciBzaXplcyBjb21wYXJlZCB3aXRo IHRoZWlyIGJpdC1wYWNrZWQgZXF1aXZhbGVudHMsIGJ5dGUtYWxpZ25tZW50IG1heSBwcm92aWRl IGEgaGVscCBpbiBzb21lIHVzZSBjYXNlcyB0aGF0IGludm9sdmUgZnJlcXVlbnQgY29weWluZyBv ZiBsYXJnZSBhcnJheXMgb2Ygc2NhbGFyIGRhdGEgZGlyZWN0bHkgb3V0IG9mIHRoZSBzdHJlYW0u IEl0IGNhbiBhbHNvIG1ha2UgaXQgcG9zc2libGUgdG8gd29yayB3aXRoIGRhdGEgaW4tcGxhY2Ug YW5kIGNhbiBtYWtlIGl0IGVhc2llciB0byBkZWJ1ZyBlbmNvZGVkIGRhdGEgYnkgYWxsb3dpbmcg aXRlbXMgb24gYWxpZ25lZCBib3VuZGFyaWVzIHRvIGJlIGVhc2lseSBsb2NhdGVkIGluIHRoZSBz dHJlYW0uPC94czpkb2N1bWVudGF0aW9uPgogICAgICAgICAgICAgICAgPC94czphbm5vdGF0aW9u PgogICAgICAgICAgICA8L3hzOmVudW1lcmF0aW9uPgogICAgICAgICAgICA8eHM6ZW51bWVyYXRp b24gdmFsdWU9J3ByZS1jb21wcmVzc2lvbic+CiAgICAgICAgICAgICAgICA8eHM6YW5ub3RhdGlv bj4KICAgICAgICAgICAgICAgICAgICA8eHM6ZG9jdW1lbnRhdGlvbj5UaGUgYWxpZ25tZW50IG9w dGlvbiB2YWx1ZSBwcmUtY29tcHJlc3Npb24gaW5kaWNhdGVzIHRoYXQgYWxsIHN0ZXBzIGludm9s dmVkIGluIGNvbXByZXNzaW9uIChzZWUgc2VjdGlvbiA5LiBFWEkgQ29tcHJlc3Npb24pIGFyZSB0 byBiZSBkb25lIHdpdGggdGhlIGV4Y2VwdGlvbiBvZiB0aGUgZmluYWwgc3RlcCBvZiBhcHBseWlu ZyB0aGUgREVGTEFURSBhbGdvcml0aG0uIFRoZSBwcmltYXJ5IHVzZSBjYXNlIG9mIHByZS1jb21w cmVzc2lvbiBpcyB0byBhdm9pZCBhIGR1cGxpY2F0ZSBjb21wcmVzc2lvbiBzdGVwIHdoZW4gY29t cHJlc3Npb24gY2FwYWJpbGl0eSBpcyBidWlsdCBpbnRvIHRoZSB0cmFuc3BvcnQgcHJvdG9jb2wu IEluIHRoaXMgY2FzZSwgcHJlLWNvbXByZXNzaW9uIGp1c3QgcHJlcGFyZXMgdGhlIHN0cmVhbSBm b3IgbGF0ZXIgY29tcHJlc3Npb24uPC94czpkb2N1bWVudGF0aW9uPgogICAgICAgICAgICAgICAg PC94czphbm5vdGF0aW9uPgogICAgICAgICAgICA8L3hzOmVudW1lcmF0aW9uPgogICAgICAgIDwv eHM6cmVzdHJpY3Rpb24+CiAgICA8L3hzOnNpbXBsZVR5cGU+CiAKICAgIDx4czplbGVtZW50IG5h bWU9J3VwbG9hZFNjaGVtYScgdHlwZT0neHM6YmFzZTY0QmluYXJ5Jy8+CiAKICAgIDx4czplbGVt ZW50IG5hbWU9J2Rvd25sb2FkU2NoZW1hJyB0eXBlPSdEb3dubG9hZFNjaGVtYScvPgoJPHhzOmVs ZW1lbnQgbmFtZT0nZG93bmxvYWRTY2hlbWFSZXNwb25zZScgdHlwZT0nRG93bmxvYWRTY2hlbWFS ZXNwb25zZScvPgoKCTx4czpjb21wbGV4VHlwZSBuYW1lPSdEb3dubG9hZFNjaGVtYSc+CiAgICAg ICAgPHhzOmF0dHJpYnV0ZSBuYW1lPSd1cmwnIHR5cGU9J3hzOnN0cmluZycgdXNlPSdyZXF1aXJl ZCcvPgogICAgPC94czpjb21wbGV4VHlwZT4KICAKICAgIDx4czpjb21wbGV4VHlwZSBuYW1lPSdE b3dubG9hZFNjaGVtYVJlc3BvbnNlJz4KICAgICAgICA8eHM6Y29tcGxleENvbnRlbnQ+CiAgICAg ICAgICAgIDx4czpleHRlbnNpb24gYmFzZT0nRG93bmxvYWRTY2hlbWEnPgoJCQkJPHhzOmNob2lj ZSBtaW5PY2N1cnM9JzAnIG1heE9jY3Vycz0nMSc+CgkJCQkJPHhzOmVsZW1lbnQgbmFtZT0naHR0 cEVycm9yJz4KCQkJCQkJPHhzOmNvbXBsZXhUeXBlPgoJCQkJCQkJPHhzOmF0dHJpYnV0ZSBuYW1l PSdjb2RlJyB0eXBlPSd4czpwb3NpdGl2ZUludGVnZXInIHVzZT0ncmVxdWlyZWQnLz4KCQkJCQkJ CTx4czphdHRyaWJ1dGUgbmFtZT0nbWVzc2FnZScgdHlwZT0neHM6c3RyaW5nJyB1c2U9J3JlcXVp cmVkJy8+CgkJCQkJCTwveHM6Y29tcGxleFR5cGU+CgkJCQkJPC94czplbGVtZW50PgoJCQkJCTx4 czplbGVtZW50IG5hbWU9J2ludmFsaWRVcmwnPgoJCQkJCQk8eHM6Y29tcGxleFR5cGU+CgkJCQkJ CQk8eHM6YXR0cmlidXRlIG5hbWU9J21lc3NhZ2UnIHR5cGU9J3hzOnN0cmluZycgdXNlPSdyZXF1 aXJlZCcvPgoJCQkJCQk8L3hzOmNvbXBsZXhUeXBlPgoJCQkJCTwveHM6ZWxlbWVudD4KCQkJCQk8 eHM6ZWxlbWVudCBuYW1lPSd0aW1lb3V0Jz4KCQkJCQkJPHhzOmNvbXBsZXhUeXBlPgoJCQkJCQkJ PHhzOmF0dHJpYnV0ZSBuYW1lPSdtZXNzYWdlJyB0eXBlPSd4czpzdHJpbmcnIHVzZT0ncmVxdWly ZWQnLz4KCQkJCQkJPC94czpjb21wbGV4VHlwZT4KCQkJCQk8L3hzOmVsZW1lbnQ+CgkJCQkJPHhz OmVsZW1lbnQgbmFtZT0naW52YWxpZENvbnRlbnRUeXBlJz4KCQkJCQkJPHhzOmNvbXBsZXhUeXBl PgoJCQkJCQkJPHhzOmF0dHJpYnV0ZSBuYW1lPSdjb250ZW50VHlwZVJldHVybmVkJyB0eXBlPSd4 czpzdHJpbmcnIHVzZT0ncmVxdWlyZWQnLz4KCQkJCQkJPC94czpjb21wbGV4VHlwZT4KCQkJCQk8 L3hzOmVsZW1lbnQ+CgkJCQkJPHhzOmVsZW1lbnQgbmFtZT0nZXJyb3InPgoJCQkJCQk8eHM6Y29t cGxleFR5cGU+CgkJCQkJCQk8eHM6YXR0cmlidXRlIG5hbWU9J21lc3NhZ2UnIHR5cGU9J3hzOnN0 cmluZycgdXNlPSdyZXF1aXJlZCcvPgoJCQkJCQk8L3hzOmNvbXBsZXhUeXBlPgoJCQkJCTwveHM6 ZWxlbWVudD4KCQkJCTwveHM6Y2hvaWNlPgogICAgICAgICAgICAgICAgPHhzOmF0dHJpYnV0ZSBu YW1lPSdyZXN1bHQnIHR5cGU9J3hzOmJvb2xlYW4nIHVzZT0ncmVxdWlyZWQnLz4KICAgICAgICAg ICAgPC94czpleHRlbnNpb24+CiAgICAgICAgPC94czpjb21wbGV4Q29udGVudD4KICAgIDwveHM6 Y29tcGxleFR5cGU+CiAKPC94czpzY2hlbWE+Cg== --_004_1693EFE1FD641C42A0D542FCBC732DE698E53473EX3YODAUTOPIALO_-- From rlb@ipv.sx Thu Mar 14 10:19:27 2013 Return-Path: X-Original-To: xmpp@ietfa.amsl.com Delivered-To: xmpp@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 8810911E81BA for ; Thu, 14 Mar 2013 10:19:27 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.976 X-Spam-Level: X-Spam-Status: No, score=-2.976 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, FM_FORGED_GMAIL=0.622, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-1] Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 1ItVsN8p7J8t for ; Thu, 14 Mar 2013 10:19:21 -0700 (PDT) Received: from mail-oa0-f53.google.com (mail-oa0-f53.google.com [209.85.219.53]) by ietfa.amsl.com (Postfix) with ESMTP id A5ABB11E819D for ; Thu, 14 Mar 2013 10:19:21 -0700 (PDT) Received: by mail-oa0-f53.google.com with SMTP id m1so2521702oag.26 for ; Thu, 14 Mar 2013 10:19:19 -0700 (PDT) X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=20120113; h=mime-version:x-received:x-originating-ip:in-reply-to:references :date:message-id:subject:from:to:cc:content-type:x-gm-message-state; bh=PqthEniPHlqadnJbK47tBSI7NWL4XY8H38SwLnBx5Jg=; b=Y1trA2XIvBJnhSM2UTn0R4IOvOilbxxgw7WfAo7dxys5n0YJTiN3wNmAbt4phdfsNY AShS5K4D6LY/N3l82qlJga9RQGHTw5QP7E6zxuQ1rVGa1u+sJ2jz+tPWJQaMZ9B0uLiK FOVGTCr264YJUQgRzLjILXMn3JPf7SIV8QXMYfb0po03QOgSG+9/aPrZiFUeRXAwETje 0tQwKFVDx7yUmXZPQWrQOZ8+UDCenRcYxmsSoDFpG6+h0ObonLXbMDXNGokfkW/EaT0p l1cImAdlYdP9EqrdEwokV3Bkvu2G7pqnobzBkuFFKSqsCwU2bWDkkZ4BzWIhMr6NZ5ya bsZA== MIME-Version: 1.0 X-Received: by 10.60.170.140 with SMTP id am12mr1490861oec.125.1363281559678; Thu, 14 Mar 2013 10:19:19 -0700 (PDT) Received: by 10.60.40.233 with HTTP; Thu, 14 Mar 2013 10:19:19 -0700 (PDT) X-Originating-IP: [130.129.20.81] In-Reply-To: <1693EFE1FD641C42A0D542FCBC732DE698E53473@EX3.YODA.UTOPIA.LOCAL> References: <1693EFE1FD641C42A0D542FCBC732DE698E53473@EX3.YODA.UTOPIA.LOCAL> Date: Thu, 14 Mar 2013 13:19:19 -0400 Message-ID: From: Richard Barnes To: Peter Waher Content-Type: multipart/alternative; boundary=bcaec54b48121803e204d7e5b90b X-Gm-Message-State: ALoCoQlyHLShm5mA67lKQBMQcNCiSYxLKqrPHRkZrIdK/d1aQPbs/MSxZY7VHSv1GWjQNM/0kCvM Cc: Stephen Williams , XMPP Standards , "public-exi@w3.org" , "Joachim Lindborg \(joachim.lindborg@sust.se\)" , "xmpp@ietf.org" , FABLET Youenn , "mact-usa@att.net" Subject: Re: [xmpp] XMPP stanza encryption + EXI compression X-BeenThere: xmpp@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: XMPP Working Group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 14 Mar 2013 17:19:27 -0000 --bcaec54b48121803e204d7e5b90b Content-Type: text/plain; charset=ISO-8859-1 I think you'll find that if you try to compress after encrypting, you're going to have a bad time. Exi1(Encrypt(Xml)) is not going to buy you anything besides some wasted cycles. --Richard On Thu, Mar 14, 2013 at 11:25 AM, Peter Waher wrote: > Dear Matt > > I just became aware of your IETF draft for XMPP end-to-end encryption. It > looks very promising. > http://tools.ietf.org/html/draft-miller-xmpp-e2e-05 > > We work with sensor network architecture over XMPP, and some (but not all) > applications require end-to-end encryption, so we want to look at this > extension. > > At the same time, compression is a vital issue, since many sensors have > limited memory. Therefore, we are working with an effort to include the use > of EXI in XMPP. (See attached documents.) One important aspect to know, > when including EXI into XMPP, is that packets cannot be binary copied when > the server relays the information. The packets have to be decompressed, and > re-compressed if both peers have EXI-compressed channels. This requires EXI > to be applied after any message encryption transformation: > Exi1(Encrypt(Xml)). Server then relays Exi2(DeExi1(Exi1(Encrypt(Xml)))) = > Exi2(Encrypt(Xml)) to the second peer. > > The problem with this is that EXI does not do very well with > base64-encoded binary data. Size(Exi(Base64(Bin))) would approximately be > equal to Size(Bin). EXI would be able to cut the added length imposed by > the base64 encoding, due to its limited character set. > > It would be nice with an end-to-end encryption method over XMPP that would > also be able to take into account EXI compression of XML stanzas. > > If you have time, any comments would be appreciated, > > Sincerely, > Peter Waher > > > -----Original Message----- > From: Peter Saint-Andre [mailto:stpeter@stpeter.im] > Sent: den 14 mars 2013 11:57 > To: Peter Waher > Cc: Joachim Lindborg (joachim.lindborg@sust.se); Matt Miller > Subject: Re: XMPP stanza encryption > > -----BEGIN PGP SIGNED MESSAGE----- > Hash: SHA1 > > On 3/14/13 10:53 AM, Peter Waher wrote: > > Hello Peter > > > > Do you participate in this work? > > http://tools.ietf.org/html/draft-miller-xmpp-e2e-05 > > Only indirectly, by chatting once in a while with Matt Miller (cc'd). > > Peter > > - -- > Peter Saint-Andre > https://stpeter.im/ > > > -----BEGIN PGP SIGNATURE----- > Version: GnuPG/MacGPG2 v2.0.18 (Darwin) > Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/ > > iQIcBAEBAgAGBQJRQeU7AAoJEOoGpJErxa2p6y8P/jHGYyu4DxkpgjIlxIyP/ROF > KfHkaOQ9kzVqEP+fWzajYK9MW8NzaGkF8w8L43o6sXbbFxtmIIZgiUpG2G9uMg8w > 6yBrR+JbDHTSpq9bEjrA55jKjVHAQjXUpEvT71zvpqpMa8GU4mM8oLad/ETkg0QI > YJsfGal66rSA9ZXdr78U8C7pOIFNhgV6SdLHUq1TF9jpXghXAN7bvRtGgPJk1jea > QN45YW//Zq9NMK0KK+MmgmK+JPsb3/MM7uFSp90FTUQY7/iF1ngjoA/3tqOiaQMW > E8Q40DIRXjzXHiiKMTwle7Q1zLP1Jm86aJp8iScsRy0OxNSH9s5NQ7AaD5ZTl/BL > 64oiA9dLpcc/RZf/7kWDp7D7zEHli2yJG+tO0gagJHqfOt8R/WCeJR10hrBQ76rj > JbwBqWwJRMrY1SnqlntBfhMklC7ZzkuXMn75QtqkQlflJ//6v53AcCglZBLpIurT > xaHHO6IUvsjOvoRov1m65HTtOb9qwepPOJ4mo78bRure2HgBKBCNZRyRZPy6s8lU > OuXqciZjDmKxMlO/A4nGMu2OP7ZcrWo58t1p7sckbC4q4YDoVBTPvA3KlcQB1kPm > YlIGtme+MEVHVm6LvJq+Gm5C8cvXM1nB2lmHvcEWJfcSVkT03EGRKLNZm4aWchMN > 4s30FwvW1t9EukM+RGy6 > =EN9u > -----END PGP SIGNATURE----- > > _______________________________________________ > xmpp mailing list > xmpp@ietf.org > https://www.ietf.org/mailman/listinfo/xmpp > > --bcaec54b48121803e204d7e5b90b Content-Type: text/html; charset=ISO-8859-1 Content-Transfer-Encoding: quoted-printable I think you'll find that if you try to compress after encrypting, you&#= 39;re going to have a bad time. =A0Exi1(Encrypt(Xml)) is not going to buy y= ou anything besides some wasted cycles. =A0
--Richard

On Thu, Mar 14, 2013 at 11:25 AM, Peter Waher <Peter.Waher@clayster.com> wrote:
Dear Matt

I just became aware of your =A0IETF draft for XMPP end-to-end encryption. I= t looks very promising.
http://tools.ietf.org/html/draft-miller-xmpp-e2e-05

We work with sensor network architecture over XMPP, and some (but not all) = applications require end-to-end encryption, so we want to look at this exte= nsion.

At the same time, compression is a vital issue, since many sensors have lim= ited memory. Therefore, we are working with an effort to include the use of= EXI in XMPP. (See attached documents.) One important aspect to know, when = including EXI into XMPP, is that packets cannot be binary copied when the s= erver relays the information. The packets have to be decompressed, and re-c= ompressed if both peers have EXI-compressed channels. This requires EXI to = be applied after any message encryption transformation: Exi1(Encrypt(Xml)).= Server then relays Exi2(DeExi1(Exi1(Encrypt(Xml)))) =3D Exi2(Encrypt(Xml))= to the second peer.

The problem with this is that EXI does not do very well with base64-encoded= binary data. Size(Exi(Base64(Bin))) would approximately be equal to Size(B= in). EXI would be able to cut the added length imposed by the base64 encodi= ng, due to its limited character set.

It would be nice with an end-to-end encryption method over XMPP that would = also be able to take into account EXI compression of XML stanzas.

If you have time, any comments would be appreciated,

Sincerely,
Peter Waher


-----Original Message-----
From: Peter Saint-Andre [mailto:stpet= er@stpeter.im]
Sent: den 14 mars 2013 11:57
To: Peter Waher
Cc: Joachim Lindborg (joachim.l= indborg@sust.se); Matt Miller
Subject: Re: XMPP stanza encryption

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 3/14/13 10:53 AM, Peter Waher wrote:
> Hello Peter
>
> Do you participate in this work?
> http://tools.ietf.org/html/draft-miller-xmpp-e2e-05

Only indirectly, by chatting once in a while with Matt Miller (cc'd).
Peter

- --
Peter Saint-Andre
https://stpeter.im/

-----BEGIN PGP SIGNATURE-----
Version: GnuPG/MacGPG2 v2.0.18 (Darwin)
Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/
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=3DEN9u
-----END PGP SIGNATURE-----

_______________________________________________
xmpp mailing list
xmpp@ietf.org
ht= tps://www.ietf.org/mailman/listinfo/xmpp


--bcaec54b48121803e204d7e5b90b-- From ben@nostrum.com Thu Mar 14 10:25:25 2013 Return-Path: X-Original-To: xmpp@ietfa.amsl.com Delivered-To: xmpp@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 9681821F90FB for ; Thu, 14 Mar 2013 10:25:24 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -102.194 X-Spam-Level: X-Spam-Status: No, score=-102.194 tagged_above=-999 required=5 tests=[AWL=0.406, BAYES_00=-2.599, SPF_PASS=-0.001, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id GsfKWyMZuzPS for ; Thu, 14 Mar 2013 10:25:24 -0700 (PDT) Received: from shaman.nostrum.com (nostrum-pt.tunnel.tserv2.fmt.ipv6.he.net [IPv6:2001:470:1f03:267::2]) by ietfa.amsl.com (Postfix) with ESMTP id F14F121F8FEC for ; Thu, 14 Mar 2013 10:25:23 -0700 (PDT) Received: from dhcp-643f.meeting.ietf.org (dhcp-643f.meeting.ietf.org [130.129.100.63]) (authenticated bits=0) by shaman.nostrum.com (8.14.3/8.14.3) with ESMTP id r2EHPME0019011 (version=TLSv1/SSLv3 cipher=AES128-SHA bits=128 verify=NO) for ; Thu, 14 Mar 2013 12:25:23 -0500 (CDT) (envelope-from ben@nostrum.com) Content-Type: text/plain; charset=us-ascii Mime-Version: 1.0 (Mac OS X Mail 6.2 \(1499\)) From: Ben Campbell In-Reply-To: <23DD15B1-6C9D-4D98-AB0E-28FABC36620D@nostrum.com> Date: Thu, 14 Mar 2013 13:25:25 -0400 Content-Transfer-Encoding: quoted-printable Message-Id: <25D5C6EC-5C59-4EFF-9508-BA67DF2946C9@nostrum.com> References: <23DD15B1-6C9D-4D98-AB0E-28FABC36620D@nostrum.com> To: xmpp WG X-Mailer: Apple Mail (2.1499) Received-SPF: pass (shaman.nostrum.com: 130.129.100.63 is authenticated by a trusted mechanism) Subject: Re: [xmpp] Friday Meeting Volunteers X-BeenThere: xmpp@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: XMPP Working Group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 14 Mar 2013 17:25:25 -0000 Still need a jabber scribe.=20 Please? On Mar 13, 2013, at 1:32 PM, Ben Campbell wrote: > Hi Everyone, >=20 > Jean Mahoney has graciously volunteered to take minutes for our Friday = meeting. [applause] >=20 > We still need a volunteer for XMPP chatroom scribe. We mainly need = this scribe to watch for comments that need to go to the mike. = Identifying speakers and slide numbers can be helpful as well, since we = some of the more active participants may be remote this week. (Including = a potential presenter.) >=20 > Thanks! >=20 > Ben. > _______________________________________________ > xmpp mailing list > xmpp@ietf.org > https://www.ietf.org/mailman/listinfo/xmpp From jon.kristensen@nejla.com Thu Mar 14 13:53:05 2013 Return-Path: X-Original-To: xmpp@ietfa.amsl.com Delivered-To: xmpp@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 5CB5711E81F4 for ; Thu, 14 Mar 2013 13:53:04 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -3.598 X-Spam-Level: X-Spam-Status: No, score=-3.598 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-1] Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id rMB9MchxkzQt for ; Thu, 14 Mar 2013 13:52:56 -0700 (PDT) Received: from mail-lb0-f169.google.com (mail-lb0-f169.google.com [209.85.217.169]) by ietfa.amsl.com (Postfix) with ESMTP id B255611E81F0 for ; Thu, 14 Mar 2013 13:52:55 -0700 (PDT) Received: by mail-lb0-f169.google.com with SMTP id m4so2259217lbo.0 for ; Thu, 14 Mar 2013 13:52:54 -0700 (PDT) X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=20120113; h=x-received:message-id:date:from:user-agent:mime-version:to:cc :subject:references:in-reply-to:content-type:x-gm-message-state; bh=FPtM/INvH+gw+HunwrN+yAaI4qmvFzDe1PDL8+0YsRo=; b=S89QgpYxar7Z3NadFU57cmCa5uqTLatCQf+nx+ZD4qmzMBRSJEF6NRG2h19aJQl5X8 htaB05JTc8rtJibX/YgezY6IH3Hw9jQ4fKXSlkcmcO46iqFiyO39ophYep0VOjGWCQho WqRQhOKzXpWR4W+qFRv2YV+S3Bf4LJCJrFtUhRsqOpS3TSPxh+DKEyaaExpiWbl7OTnp 2CEOrSFe3NHbdTZdaTBen+t8fQsj2FMnGDQOabc8sUcMnnhEZaoJxYdnH2MYeRzGCjVn So3y64TBJuI8X93BvGddOPtWG5yLsGCvhiE6MJ98xO9bTX7aX1EYZ4KGh49KNRhm04ux XvtQ== X-Received: by 10.152.46.12 with SMTP id r12mr3540983lam.15.1363294374575; Thu, 14 Mar 2013 13:52:54 -0700 (PDT) Received: from localhost.localdomain ([94.234.185.11]) by mx.google.com with ESMTPS id fq10sm1252563lbb.14.2013.03.14.13.52.52 (version=TLSv1 cipher=RC4-SHA bits=128/128); Thu, 14 Mar 2013 13:52:53 -0700 (PDT) Message-ID: <514238A2.2030905@jonkri.com> Date: Thu, 14 Mar 2013 21:52:50 +0100 From: Jon Kristensen User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:17.0) Gecko/20130219 Thunderbird/17.0.3 MIME-Version: 1.0 To: Richard Barnes References: <512CC832.1060702@jonkri.com> <512E94A2.8000900@jonkri.com> <512FD6DB.40304@jonkri.com> <5130BB49.20100@jonkri.com> <5133C874.7080801@jonkri.com> <514138E3.4090105@jonkri.com> In-Reply-To: Content-Type: multipart/alternative; boundary="------------010702050005080103000901" X-Gm-Message-State: ALoCoQm4Vw7HPAXW0tBa79s5JUo6NU1E7RdliZcjgJ0ISzvweejitVNHx1SRy2IisHUIg5KFKbPI Cc: "" Subject: [xmpp] Anonymity and PFR with Miller's E2E proposal (Was: Self Introduction) X-BeenThere: xmpp@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: XMPP Working Group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 14 Mar 2013 20:53:05 -0000 This is a multi-part message in MIME format. --------------010702050005080103000901 Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit On 03/14/2013 06:39 AM, Richard Barnes wrote: > It's even simpler than that: Alice and Bob each generate a JWK > representing a DH or ECDH key, the exchange them in an IQ. > > http://tools.ietf.org/html/draft-ietf-jose-json-web-key-08 > Thank you for pointing me in the right direction! Please correct me if I'm wrong, but the way I see it is this: In order to provide authentication and (weak) anonymity, we would have to exchange 1. unauthenticated Diffie-Hellman key exchange stanzas, used to negotiate a first shared secret, and 2. encrypted (with the first shared secret) stanzas (which wraps the long-lived public keys) to negotiate a second shared secret. The second shared secret would be the symmetric key used for encrypting the following stanzas. This would protect the long-lived public key from a passive attacker, and provide perfect forward secrecy. Also, any entity could perform additional unauthenticated Diffie-Hellman key exchanges (this time, however, encrypted) to redo the procedure, and add yet another "PFS layer". As there seems to be some patent-related uncertainty surrounding elliptic curve cryptography[1], I would like to see support for regular Diffie-Hellman keys. Looking at the IANA JSON Web Key Types registry key types[2], there appear to only be two key types defined: `EC' (Elliptic Curve [DSS] key type) and `RSA' (RFC3447 key type). Could perhaps `DH' be added to this table? Would `alg' (refer to the the JSON Web Encryption algorithm section[3]) be something like `DH+A128KW'? All-in-all, would something like the following JWK representation be suitable for the Diffie-Hellman public key exchanges? { "kty": "DH", "public-key": "...", "prime": "...", "generator": "...", "use": "enc", "alg": "DH+A128KW" } [1]: http://en.wikipedia.org/wiki/ECC_patents [2]: http://tools.ietf.org/html/draft-ietf-jose-json-web-algorithms-08#section-5.1 [3]: http://tools.ietf.org/html/draft-ietf-jose-json-web-algorithms-08#section-4.1 Jon --------------010702050005080103000901 Content-Type: text/html; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit
On 03/14/2013 06:39 AM, Richard Barnes wrote:
It's even simpler than that: Alice and Bob each generate a JWK representing a DH or ECDH key, the exchange them in an IQ. 


Thank you for pointing me in the right direction!

Please correct me if I'm wrong, but the way I see it is this:

In order to provide authentication and (weak) anonymity, we would have to exchange
  1. unauthenticated Diffie-Hellman key exchange <keyreq /> stanzas, used to negotiate a first shared secret, and
  2. encrypted (with the first shared secret) <keyreq /> stanzas (which wraps the long-lived public keys) to negotiate a second shared secret.
The second shared secret would be the symmetric key used for encrypting the following stanzas. This would protect the long-lived public key from a passive attacker, and provide perfect forward secrecy. Also, any entity could perform additional unauthenticated Diffie-Hellman key exchanges (this time, however, encrypted) to redo the procedure, and add yet another "PFS layer".

As there seems to be some patent-related uncertainty surrounding elliptic curve cryptography[1], I would like to see support for regular Diffie-Hellman keys.

Looking at the IANA JSON Web Key Types registry key types[2], there appear to only be two key types defined: `EC' (Elliptic Curve [DSS] key type) and `RSA' (RFC3447 key type). Could perhaps `DH' be added to this table?

Would `alg' (refer to the the JSON Web Encryption algorithm section[3]) be something like `DH+A128KW'?

All-in-all, would something like the following JWK representation be suitable for the Diffie-Hellman public key exchanges?

{
  "kty": "DH",
  "public-key": "...",
  "prime": "...",
  "generator": "...",
  "use": "enc",
  "alg": "DH+A128KW"
}

[1]: http://en.wikipedia.org/wiki/ECC_patents
[2]: http://tools.ietf.org/html/draft-ietf-jose-json-web-algorithms-08#section-5.1
[3]: http://tools.ietf.org/html/draft-ietf-jose-json-web-algorithms-08#section-4.1

Jon
--------------010702050005080103000901-- From stpeter@stpeter.im Fri Mar 15 07:58:16 2013 Return-Path: X-Original-To: xmpp@ietfa.amsl.com Delivered-To: xmpp@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 7C02621F8873 for ; Fri, 15 Mar 2013 07:58:15 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -102.349 X-Spam-Level: X-Spam-Status: No, score=-102.349 tagged_above=-999 required=5 tests=[AWL=2.250, BAYES_00=-2.599, GB_I_INVITATION=-2, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id TNvtXsSVgBgO for ; Fri, 15 Mar 2013 07:58:14 -0700 (PDT) Received: from stpeter.im (mailhost.stpeter.im [207.210.219.225]) by ietfa.amsl.com (Postfix) with ESMTP id AFE6221F8833 for ; Fri, 15 Mar 2013 07:58:13 -0700 (PDT) Received: from [130.129.84.195] (unknown [130.129.84.195]) (Authenticated sender: stpeter) by stpeter.im (Postfix) with ESMTPSA id E8BEA4004E for ; Fri, 15 Mar 2013 09:06:53 -0600 (MDT) Message-ID: <5143370B.6070504@stpeter.im> Date: Fri, 15 Mar 2013 10:58:19 -0400 From: Peter Saint-Andre User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.7; rv:17.0) Gecko/20130307 Thunderbird/17.0.4 MIME-Version: 1.0 To: XMPP Working Group References: <931231352.1773.1363355205251.JavaMail.nobody@jbts1tc103.webex.com> In-Reply-To: <931231352.1773.1363355205251.JavaMail.nobody@jbts1tc103.webex.com> X-Enigmail-Version: 1.5.1 X-Forwarded-Message-Id: <931231352.1773.1363355205251.JavaMail.nobody@jbts1tc103.webex.com> Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 7bit Subject: [xmpp] Fwd: Meeting invitation: XMPP WG X-BeenThere: xmpp@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: XMPP Working Group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 15 Mar 2013 14:58:16 -0000 -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 I created a WebEx meeting for use during the XMPP WG session this afternoon. This will enable Lance Stout to talk about XMPP over WebSocket even though he's not in Orlando. Peter - -------- Original Message -------- Subject: Meeting invitation: XMPP WG Date: Fri, 15 Mar 2013 13:46:45 +0000 (GMT+00:00) From: Peter Saint Andre Reply-To: psaintan@cisco.com To: stpeter@stpeter.im Hello , Peter Saint Andre invites you to attend this online meeting. Topic: XMPP WG Date: Friday, March 15, 2013 Time: 12:30 pm, Eastern Daylight Time (New York, GMT-04:00) Meeting Number: 342 031 357 Meeting Password: (This meeting does not require a password.) - ------------------------------------------------------- To join the online meeting (Now from mobile devices!) - ------------------------------------------------------- 1. Go to https://go.webex.com/go/j.php?ED=150161637&UID=1050297277&RT=MiMxMQ%3D%3D 2. If requested, enter your name and email address. 3. If a password is required, enter the meeting password: (This meeting does not require a password.) 4. Click "Join". To view in other time zones or languages, please click the link: https://go.webex.com/go/j.php?ED=150161637&UID=1050297277&ORT=MiMxMQ%3D%3D - ------------------------------------------------------- To join the audio conference only - ------------------------------------------------------- To receive a call back, provide your phone number when you join the meeting, or call the number below and enter the access code. US TOLL FREE: +1-855-282-6330 US TOLL: +1-415-655-0003 Global call-in numbers: https://go.webex.com/go/globalcallin.php?serviceType=MC&ED=150161637&tollFree=1 Toll-free dialing restrictions: http://www.webex.com/pdf/tollfree_restrictions.pdf Access code:342 031 357 - ------------------------------------------------------- For assistance - ------------------------------------------------------- 1. Go to https://go.webex.com/go/mc 2. On the left navigation bar, click "Support". You can contact me at: psaintan@cisco.com 1-3033083282 To add this meeting to your calendar program (for example Microsoft Outlook), click this link: https://go.webex.com/go/j.php?ED=150161637&UID=1050297277&ICS=MI&LD=1&RD=2&ST=1&SHA2=AAAAATq7HGt3pLzTM5cv9o/L4sMijEkLOSpPlJ2ZyROKK1tf&RT=MiMxMQ%3D%3D The playback of UCF (Universal Communications Format) rich media files requires appropriate players. To view this type of rich media files in the meeting, please check whether you have the players installed on your computer by going to https://go.webex.com/go/systemdiagnosis.php. Sign up for a free trial of WebEx http://www.webex.com/go/mcemfreetrial http://www.webex.com CCP:+14156550003x342031357# IMPORTANT NOTICE: This WebEx service includes a feature that allows audio and any documents and other materials exchanged or viewed during the session to be recorded. By joining this session, you automatically consent to such recordings. If you do not consent to the recording, discuss your concerns with the meeting host prior to the start of the recording or do not join the session. Please note that any such recordings may be subject to discovery in the event of litigation. -----BEGIN PGP SIGNATURE----- Version: GnuPG/MacGPG2 v2.0.18 (Darwin) Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/ iQIcBAEBAgAGBQJRQzcKAAoJEOoGpJErxa2pHdcQALBcx2sTVmY3YdOQ0bB6M5TS Zr7/U3CNaEarm2qcllgGjEEbKiznrZHkdV2XCbqtYr9ZF5HFLIEVjqi0zHngBUUz bPw3Ofbxl64qBR+YfnR7BYilLwGI2/zArms9Qqo5xPD7xxPD93qtw5b+vJJsYeXH uESg31Z00o1FeKmiO0s8mDw4RUBvCUgp2VoOZwWX2gwiwtrdwjhXKUwC8Lm3Ecsu gt7QTLCo5jgDSU7pgWmsuZTslrmt0jjlNPw+bgkfXFzrPPhgP/B4ndJHM/BJphd5 85o/26aBLZeD7ZKzRLEtdDH/C8Q2yXvFgGDvDSvn4rTHM7gvwjISIuG/Qb/yXbX8 LcpYaAlJ4ihlkD1wtAizIyWQ+iD2apTnx0ZfJ2lvQF2yyvQySRjb3hUfpHeZd1bh K2TYrtpt3ZkJcB/FDHB0Gslgf9CIwhTaB2rzz/t8R6QAz6ABfS12YaIApk6J9Pu6 NydfmMVPjsUT5rXeeVohGKE80uFMeQ19fQuJ1NZJmlU0qK5LU+JK5kYXYsBUSkvh PNSqsHmVykM1Rxt/UVsm8MqmF++dmAPHqoy7AiB3N4+Wxs1ycMUnjzUuHMElklYp +EZANlBtSwxp3s6LrnIEtZk4etqEHnok2g88NVz1G/zCPg9tJGzmznGJhr391y6/ xcYwrVVgB2IZzmQjgHPR =AGm6 -----END PGP SIGNATURE----- From ben@nostrum.com Fri Mar 15 08:30:47 2013 Return-Path: X-Original-To: xmpp@ietfa.amsl.com Delivered-To: xmpp@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id A4B4121F85F5 for ; Fri, 15 Mar 2013 08:30:47 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -102.699 X-Spam-Level: X-Spam-Status: No, score=-102.699 tagged_above=-999 required=5 tests=[AWL=0.505, BAYES_00=-2.599, GB_I_INVITATION=-2, MIME_QP_LONG_LINE=1.396, SPF_PASS=-0.001, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ZnKxVH1mtpnJ for ; Fri, 15 Mar 2013 08:30:46 -0700 (PDT) Received: from shaman.nostrum.com (nostrum-pt.tunnel.tserv2.fmt.ipv6.he.net [IPv6:2001:470:1f03:267::2]) by ietfa.amsl.com (Postfix) with ESMTP id 4D5C821F843F for ; Fri, 15 Mar 2013 08:30:46 -0700 (PDT) Received: from dhcp-643f.meeting.ietf.org (dhcp-643f.meeting.ietf.org [130.129.100.63]) (authenticated bits=0) by shaman.nostrum.com (8.14.3/8.14.3) with ESMTP id r2FFUjI7071061 (version=TLSv1/SSLv3 cipher=AES128-SHA bits=128 verify=NO) for ; Fri, 15 Mar 2013 10:30:45 -0500 (CDT) (envelope-from ben@nostrum.com) Content-Type: text/plain; charset=us-ascii Mime-Version: 1.0 (Mac OS X Mail 6.2 \(1499\)) From: Ben Campbell In-Reply-To: <5143370B.6070504@stpeter.im> Date: Fri, 15 Mar 2013 11:30:48 -0400 Content-Transfer-Encoding: quoted-printable Message-Id: <20540B48-0CDB-404F-8102-DDA066794107@nostrum.com> References: <931231352.1773.1363355205251.JavaMail.nobody@jbts1tc103.webex.com> <5143370B.6070504@stpeter.im> To: XMPP Working Group X-Mailer: Apple Mail (2.1499) Received-SPF: pass (shaman.nostrum.com: 130.129.100.63 is authenticated by a trusted mechanism) Subject: Re: [xmpp] Fwd: Meeting invitation: XMPP WG X-BeenThere: xmpp@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: XMPP Working Group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 15 Mar 2013 15:30:47 -0000 Thanks Peter! If anyone else plans to join the WebEx session, please be advised that = this is different than the one you may find posted on the tools-style = agenda (or elsewhere). Ben. On Mar 15, 2013, at 10:58 AM, Peter Saint-Andre = wrote: > -----BEGIN PGP SIGNED MESSAGE----- > Hash: SHA1 >=20 > I created a WebEx meeting for use during the XMPP WG session this > afternoon. This will enable Lance Stout to talk about XMPP over > WebSocket even though he's not in Orlando. >=20 > Peter >=20 > - -------- Original Message -------- > Subject: Meeting invitation: XMPP WG > Date: Fri, 15 Mar 2013 13:46:45 +0000 (GMT+00:00) > From: Peter Saint Andre > Reply-To: psaintan@cisco.com > To: stpeter@stpeter.im >=20 >=20 > Hello , >=20 > Peter Saint Andre invites you to attend this online meeting. >=20 > Topic: XMPP WG > Date: Friday, March 15, 2013 > Time: 12:30 pm, Eastern Daylight Time (New York, GMT-04:00) > Meeting Number: 342 031 357 > Meeting Password: (This meeting does not require a password.) >=20 >=20 > - ------------------------------------------------------- > To join the online meeting (Now from mobile devices!) > - ------------------------------------------------------- > 1. Go to > = https://go.webex.com/go/j.php?ED=3D150161637&UID=3D1050297277&RT=3DMiMxMQ%= 3D%3D > 2. If requested, enter your name and email address. > 3. If a password is required, enter the meeting password: (This > meeting does not require a password.) > 4. Click "Join". >=20 > To view in other time zones or languages, please click the link: > = https://go.webex.com/go/j.php?ED=3D150161637&UID=3D1050297277&ORT=3DMiMxMQ= %3D%3D >=20 > - ------------------------------------------------------- > To join the audio conference only > - ------------------------------------------------------- > To receive a call back, provide your phone number when you join the > meeting, or call the number below and enter the access code. > US TOLL FREE: +1-855-282-6330 > US TOLL: +1-415-655-0003 > Global call-in numbers: > = https://go.webex.com/go/globalcallin.php?serviceType=3DMC&ED=3D150161637&t= ollFree=3D1 > Toll-free dialing restrictions: > http://www.webex.com/pdf/tollfree_restrictions.pdf >=20 > Access code:342 031 357 >=20 > - ------------------------------------------------------- > For assistance > - ------------------------------------------------------- > 1. Go to https://go.webex.com/go/mc > 2. On the left navigation bar, click "Support". >=20 > You can contact me at: > psaintan@cisco.com > 1-3033083282 >=20 > To add this meeting to your calendar program (for example Microsoft > Outlook), click this link: > = https://go.webex.com/go/j.php?ED=3D150161637&UID=3D1050297277&ICS=3DMI&LD=3D= 1&RD=3D2&ST=3D1&SHA2=3DAAAAATq7HGt3pLzTM5cv9o/L4sMijEkLOSpPlJ2ZyROKK1tf&RT= =3DMiMxMQ%3D%3D >=20 > The playback of UCF (Universal Communications Format) rich media files > requires appropriate players. To view this type of rich media files in > the meeting, please check whether you have the players installed on > your computer by going to https://go.webex.com/go/systemdiagnosis.php. >=20 > Sign up for a free trial of WebEx > http://www.webex.com/go/mcemfreetrial >=20 > http://www.webex.com >=20 > CCP:+14156550003x342031357# >=20 > IMPORTANT NOTICE: This WebEx service includes a feature that allows > audio and any documents and other materials exchanged or viewed during > the session to be recorded. By joining this session, you automatically > consent to such recordings. If you do not consent to the recording, > discuss your concerns with the meeting host prior to the start of the > recording or do not join the session. Please note that any such > recordings may be subject to discovery in the event of litigation. >=20 >=20 > -----BEGIN PGP SIGNATURE----- > Version: GnuPG/MacGPG2 v2.0.18 (Darwin) > Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/ >=20 > iQIcBAEBAgAGBQJRQzcKAAoJEOoGpJErxa2pHdcQALBcx2sTVmY3YdOQ0bB6M5TS > Zr7/U3CNaEarm2qcllgGjEEbKiznrZHkdV2XCbqtYr9ZF5HFLIEVjqi0zHngBUUz > bPw3Ofbxl64qBR+YfnR7BYilLwGI2/zArms9Qqo5xPD7xxPD93qtw5b+vJJsYeXH > uESg31Z00o1FeKmiO0s8mDw4RUBvCUgp2VoOZwWX2gwiwtrdwjhXKUwC8Lm3Ecsu > gt7QTLCo5jgDSU7pgWmsuZTslrmt0jjlNPw+bgkfXFzrPPhgP/B4ndJHM/BJphd5 > 85o/26aBLZeD7ZKzRLEtdDH/C8Q2yXvFgGDvDSvn4rTHM7gvwjISIuG/Qb/yXbX8 > LcpYaAlJ4ihlkD1wtAizIyWQ+iD2apTnx0ZfJ2lvQF2yyvQySRjb3hUfpHeZd1bh > K2TYrtpt3ZkJcB/FDHB0Gslgf9CIwhTaB2rzz/t8R6QAz6ABfS12YaIApk6J9Pu6 > NydfmMVPjsUT5rXeeVohGKE80uFMeQ19fQuJ1NZJmlU0qK5LU+JK5kYXYsBUSkvh > PNSqsHmVykM1Rxt/UVsm8MqmF++dmAPHqoy7AiB3N4+Wxs1ycMUnjzUuHMElklYp > +EZANlBtSwxp3s6LrnIEtZk4etqEHnok2g88NVz1G/zCPg9tJGzmznGJhr391y6/ > xcYwrVVgB2IZzmQjgHPR > =3DAGm6 > -----END PGP SIGNATURE----- > _______________________________________________ > xmpp mailing list > xmpp@ietf.org > https://www.ietf.org/mailman/listinfo/xmpp From stpeter@stpeter.im Fri Mar 15 08:33:13 2013 Return-Path: X-Original-To: xmpp@ietfa.amsl.com Delivered-To: xmpp@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 2346B21F8618 for ; Fri, 15 Mar 2013 08:33:13 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -102.799 X-Spam-Level: X-Spam-Status: No, score=-102.799 tagged_above=-999 required=5 tests=[AWL=1.800, BAYES_00=-2.599, GB_I_INVITATION=-2, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id z7UAN7F-jIIw for ; Fri, 15 Mar 2013 08:33:12 -0700 (PDT) Received: from stpeter.im (mailhost.stpeter.im [207.210.219.225]) by ietfa.amsl.com (Postfix) with ESMTP id 4543C21F85AD for ; Fri, 15 Mar 2013 08:33:12 -0700 (PDT) Received: from [130.129.84.195] (unknown [130.129.84.195]) (Authenticated sender: stpeter) by stpeter.im (Postfix) with ESMTPSA id B4A0A4004E; Fri, 15 Mar 2013 09:41:54 -0600 (MDT) Message-ID: <51433F3F.6040903@stpeter.im> Date: Fri, 15 Mar 2013 11:33:19 -0400 From: Peter Saint-Andre User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.7; rv:17.0) Gecko/20130307 Thunderbird/17.0.4 MIME-Version: 1.0 To: Ben Campbell References: <931231352.1773.1363355205251.JavaMail.nobody@jbts1tc103.webex.com> <5143370B.6070504@stpeter.im> <20540B48-0CDB-404F-8102-DDA066794107@nostrum.com> In-Reply-To: <20540B48-0CDB-404F-8102-DDA066794107@nostrum.com> X-Enigmail-Version: 1.5.1 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 7bit Cc: XMPP Working Group Subject: Re: [xmpp] Fwd: Meeting invitation: XMPP WG X-BeenThere: xmpp@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: XMPP Working Group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 15 Mar 2013 15:33:13 -0000 -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 On 3/15/13 11:30 AM, Ben Campbell wrote: > Thanks Peter! > > If anyone else plans to join the WebEx session, please be advised > that this is different than the one you may find posted on the > tools-style agenda (or elsewhere). I didn't see one at https://tools.ietf.org/agenda/86/ Peter - -- Peter Saint-Andre https://stpeter.im/ -----BEGIN PGP SIGNATURE----- Version: GnuPG/MacGPG2 v2.0.18 (Darwin) Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/ iQIcBAEBAgAGBQJRQz8+AAoJEOoGpJErxa2pYWgP/1Md5MG7dYI/BhGTOk1DTS4l g4S6ID0Jrlnz+LDg0xqkYImKR8H1TEdZE2QMaM4OYGB7RMaAqFzyTyElJRxhNBrY 54n/2g5a/Frzig47nFPTod5tSnRWXxvJbpilljz+jkPKR1L19zCw6CKCU0nVL6ra R2JV5/xq35Zk8RBYEEAz5/kVIpDzsMEANaPHNHdF+pYNZMSgWC3Hb9+peN87v7tN FY4kn+4CGKBIjENmvR02JnLMCImVsDmK97lRbs0vsQ3nX+Iv5JNqFIWGea5jPIWB z4HpTED+Z2yqUBTcz1rC0WlFuoF7jmG/LmFzgG0SGp3TDkSSsMQoRvufjgnVM6pM o3LHGNcaLuhB/rDs7glWvzShZdug1+u8jQQVuwPP25omK9eU2qno3Q69OMnvF72Z 1BnlWbEEylh3Sdi8qgW/h4s4vAQpU804Yviqfyv5Z3IJy6HgA0Q0Gj62D15YkKaW 2IgXssgivRQXlxqTX4h5yYGE0k+QQvN2kf7cy6oKkcwWL1Y43+jFksCoMtWNKyXC SiBVErXM6pWydoa2d20uDhf0QXmz0mUlblyBasSefgT/MBZ/ANS36tcvtaWlG87D H2NGpvJSR4opG0dg2Rt2+XpGoN7RWAfqJcVAy1cECgZUilnQlplIOo+VUgxuSTKC 7dWgr11VmWmhkXv781CN =CyHs -----END PGP SIGNATURE----- From ben@nostrum.com Fri Mar 15 08:37:17 2013 Return-Path: X-Original-To: xmpp@ietfa.amsl.com Delivered-To: xmpp@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 6DBE821F84D9 for ; Fri, 15 Mar 2013 08:37:17 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -102.498 X-Spam-Level: X-Spam-Status: No, score=-102.498 tagged_above=-999 required=5 tests=[AWL=0.102, BAYES_00=-2.599, SPF_PASS=-0.001, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 1i4EyFlLNAYd for ; Fri, 15 Mar 2013 08:37:17 -0700 (PDT) Received: from shaman.nostrum.com (nostrum-pt.tunnel.tserv2.fmt.ipv6.he.net [IPv6:2001:470:1f03:267::2]) by ietfa.amsl.com (Postfix) with ESMTP id CF2FD21F841D for ; Fri, 15 Mar 2013 08:37:16 -0700 (PDT) Received: from dhcp-643f.meeting.ietf.org (dhcp-643f.meeting.ietf.org [130.129.100.63]) (authenticated bits=0) by shaman.nostrum.com (8.14.3/8.14.3) with ESMTP id r2FFbFKx071713 (version=TLSv1/SSLv3 cipher=AES128-SHA bits=128 verify=NO) for ; Fri, 15 Mar 2013 10:37:16 -0500 (CDT) (envelope-from ben@nostrum.com) From: Ben Campbell Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit Message-Id: <2019EFBF-ED64-4267-92EF-1E83D8341473@nostrum.com> Date: Fri, 15 Mar 2013 11:37:19 -0400 To: XMPP Working Group Mime-Version: 1.0 (Mac OS X Mail 6.2 \(1499\)) X-Mailer: Apple Mail (2.1499) Received-SPF: pass (shaman.nostrum.com: 130.129.100.63 is authenticated by a trusted mechanism) Subject: [xmpp] Meeting Materials X-BeenThere: xmpp@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: XMPP Working Group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 15 Mar 2013 15:37:17 -0000 Hi, Slide decks for today's XMPP meeting are available at the following: https://datatracker.ietf.org/meeting/86/materials.html#wg-xmpp Thanks! Ben. From mamille2@cisco.com Tue Mar 19 08:34:04 2013 Return-Path: X-Original-To: xmpp@ietfa.amsl.com Delivered-To: xmpp@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 5083921F84AD for ; Tue, 19 Mar 2013 08:34:04 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -10.599 X-Spam-Level: X-Spam-Status: No, score=-10.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, RCVD_IN_DNSWL_HI=-8] Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id esJKGjLs1nsU for ; Tue, 19 Mar 2013 08:34:03 -0700 (PDT) Received: from rcdn-iport-1.cisco.com (rcdn-iport-1.cisco.com [173.37.86.72]) by ietfa.amsl.com (Postfix) with ESMTP id 35A5821F84A9 for ; Tue, 19 Mar 2013 08:34:03 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=7339; q=dns/txt; s=iport; t=1363707243; x=1364916843; h=from:to:subject:date:message-id:references:in-reply-to: mime-version; bh=hRkux0Ahh+11IdCcxCsMqRwaR+W1wcQ+LiZjj+XbwIQ=; b=TiiCm6eZgr521tpueGuXcB9edJ3A6mTrmiMZLxFJjAE0hMW/KhQaZFjp 3k5V/hWPu5U4piHqRC1zziYR969eHC8gf7VEa8C4NzM1GdODSV5fTKsmP V47aK/RHbgoQr0A5afkaNRXYMkNH0Gq2DsSPBw3+siDWAk9Cow2cXPVQD c=; X-Files: smime.p7s : 2283 X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: AgEFANKDSFGtJV2Y/2dsb2JhbABDxRCBVxZ0giQBAQEDAWwHAwgHBAIBCBEBAwEBAQoLEgcCMBQDBggBAQQBEggGiAAGDLIikB2NWIEFBiASAgICBIJVYQOPPIEohxqPY4MKgWo+ X-IronPort-AV: E=Sophos;i="4.84,872,1355097600"; d="p7s'?scan'208";a="188898637" Received: from rcdn-core-1.cisco.com ([173.37.93.152]) by rcdn-iport-1.cisco.com with ESMTP; 19 Mar 2013 15:34:01 +0000 Received: from xhc-rcd-x07.cisco.com (xhc-rcd-x07.cisco.com [173.37.183.81]) by rcdn-core-1.cisco.com (8.14.5/8.14.5) with ESMTP id r2JFY1fb010366 (version=TLSv1/SSLv3 cipher=AES128-SHA bits=128 verify=FAIL); Tue, 19 Mar 2013 15:34:01 GMT Received: from xmb-aln-x11.cisco.com ([169.254.6.203]) by xhc-rcd-x07.cisco.com ([173.37.183.81]) with mapi id 14.02.0318.004; Tue, 19 Mar 2013 10:34:01 -0500 From: "Matt Miller (mamille2)" To: XMPP Standards , Stephen Williams , "public-exi@w3.org" , "mact-usa@att.net" , FABLET Youenn , " Group" Thread-Topic: [Standards] XMPP stanza encryption + EXI compression Thread-Index: Ac4gyBcvMCCuPnNJTUmrNa7AuYQtYAEGP56A Date: Tue, 19 Mar 2013 15:34:00 +0000 Message-ID: References: <1693EFE1FD641C42A0D542FCBC732DE698E53473@EX3.YODA.UTOPIA.LOCAL> In-Reply-To: <1693EFE1FD641C42A0D542FCBC732DE698E53473@EX3.YODA.UTOPIA.LOCAL> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: yes X-MS-TNEF-Correlator: x-originating-ip: [10.129.24.61] Content-Type: multipart/signed; boundary="Apple-Mail=_3A270713-E142-4B2C-8384-550CCB459D78"; protocol="application/pkcs7-signature"; micalg=sha1 MIME-Version: 1.0 Subject: Re: [xmpp] [Standards] XMPP stanza encryption + EXI compression X-BeenThere: xmpp@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: XMPP Working Group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 19 Mar 2013 15:34:04 -0000 --Apple-Mail=_3A270713-E142-4B2C-8384-550CCB459D78 Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=us-ascii I'm not well versed enough in EXI to know if there are special = considerations for purely binary data, and I'm not sure what changes I = can make to a specification that is focused on what RFCs 6120 and 6121 = define. However, encrypted data is a very big blob of binary that, by its very = nature of appearing to be random, is extremely unlike to compress at = all. To gain any benefit, you'd want to compress *before* encrypting. - m&m Matt Miller < mamille2@cisco.com > Cisco Systems, Inc. On Mar 14, 2013, at 9:25 AM, Peter Waher = wrote: > Dear Matt >=20 > I just became aware of your IETF draft for XMPP end-to-end = encryption. It looks very promising. > http://tools.ietf.org/html/draft-miller-xmpp-e2e-05 >=20 > We work with sensor network architecture over XMPP, and some (but not = all) applications require end-to-end encryption, so we want to look at = this extension. >=20 > At the same time, compression is a vital issue, since many sensors = have limited memory. Therefore, we are working with an effort to include = the use of EXI in XMPP. (See attached documents.) One important aspect = to know, when including EXI into XMPP, is that packets cannot be binary = copied when the server relays the information. The packets have to be = decompressed, and re-compressed if both peers have EXI-compressed = channels. This requires EXI to be applied after any message encryption = transformation: Exi1(Encrypt(Xml)). Server then relays = Exi2(DeExi1(Exi1(Encrypt(Xml)))) =3D Exi2(Encrypt(Xml)) to the second = peer. >=20 > The problem with this is that EXI does not do very well with = base64-encoded binary data. Size(Exi(Base64(Bin))) would approximately = be equal to Size(Bin). EXI would be able to cut the added length imposed = by the base64 encoding, due to its limited character set. >=20 > It would be nice with an end-to-end encryption method over XMPP that = would also be able to take into account EXI compression of XML stanzas. >=20 > If you have time, any comments would be appreciated, >=20 > Sincerely, > Peter Waher >=20 >=20 > -----Original Message----- > From: Peter Saint-Andre [mailto:stpeter@stpeter.im]=20 > Sent: den 14 mars 2013 11:57 > To: Peter Waher > Cc: Joachim Lindborg (joachim.lindborg@sust.se); Matt Miller > Subject: Re: XMPP stanza encryption >=20 > -----BEGIN PGP SIGNED MESSAGE----- > Hash: SHA1 >=20 > On 3/14/13 10:53 AM, Peter Waher wrote: >> Hello Peter >>=20 >> Do you participate in this work?=20 >> http://tools.ietf.org/html/draft-miller-xmpp-e2e-05 >=20 > Only indirectly, by chatting once in a while with Matt Miller (cc'd). >=20 > Peter >=20 > - --=20 > Peter Saint-Andre > https://stpeter.im/ >=20 >=20 > -----BEGIN PGP SIGNATURE----- > Version: GnuPG/MacGPG2 v2.0.18 (Darwin) > Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/ >=20 > iQIcBAEBAgAGBQJRQeU7AAoJEOoGpJErxa2p6y8P/jHGYyu4DxkpgjIlxIyP/ROF > KfHkaOQ9kzVqEP+fWzajYK9MW8NzaGkF8w8L43o6sXbbFxtmIIZgiUpG2G9uMg8w > 6yBrR+JbDHTSpq9bEjrA55jKjVHAQjXUpEvT71zvpqpMa8GU4mM8oLad/ETkg0QI > YJsfGal66rSA9ZXdr78U8C7pOIFNhgV6SdLHUq1TF9jpXghXAN7bvRtGgPJk1jea > QN45YW//Zq9NMK0KK+MmgmK+JPsb3/MM7uFSp90FTUQY7/iF1ngjoA/3tqOiaQMW > E8Q40DIRXjzXHiiKMTwle7Q1zLP1Jm86aJp8iScsRy0OxNSH9s5NQ7AaD5ZTl/BL > 64oiA9dLpcc/RZf/7kWDp7D7zEHli2yJG+tO0gagJHqfOt8R/WCeJR10hrBQ76rj > JbwBqWwJRMrY1SnqlntBfhMklC7ZzkuXMn75QtqkQlflJ//6v53AcCglZBLpIurT > xaHHO6IUvsjOvoRov1m65HTtOb9qwepPOJ4mo78bRure2HgBKBCNZRyRZPy6s8lU > OuXqciZjDmKxMlO/A4nGMu2OP7ZcrWo58t1p7sckbC4q4YDoVBTPvA3KlcQB1kPm > YlIGtme+MEVHVm6LvJq+Gm5C8cvXM1nB2lmHvcEWJfcSVkT03EGRKLNZm4aWchMN > 4s30FwvW1t9EukM+RGy6 > =3DEN9u > -----END PGP SIGNATURE----- > --Apple-Mail=_3A270713-E142-4B2C-8384-550CCB459D78 Content-Disposition: attachment; filename="smime.p7s" Content-Type: application/pkcs7-signature; name="smime.p7s" Content-Transfer-Encoding: base64 MIAGCSqGSIb3DQEHAqCAMIACAQExCzAJBgUrDgMCGgUAMIAGCSqGSIb3DQEHAQAAoIIFejCCBXYw ggNeoAMCAQICAwyLmDANBgkqhkiG9w0BAQUFADB5MRAwDgYDVQQKEwdSb290IENBMR4wHAYDVQQL ExVodHRwOi8vd3d3LmNhY2VydC5vcmcxIjAgBgNVBAMTGUNBIENlcnQgU2lnbmluZyBBdXRob3Jp dHkxITAfBgkqhkiG9w0BCQEWEnN1cHBvcnRAY2FjZXJ0Lm9yZzAeFw0xMjExMjgxNzQ5MzFaFw0x NDExMjgxNzQ5MzFaMDwxFzAVBgNVBAMTDk1hdHRoZXcgTWlsbGVyMSEwHwYJKoZIhvcNAQkBFhJt YW1pbGxlMkBjaXNjby5jb20wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7Sh5cQYtd /kfoG3KjXd8i2esxt+BtHCmuiSku2VECC6msLKzA08cGJ31GfyX7+996TV3D5omh51j5fznfFikk cVGsuKe+omo70Aidw48ISGygQk8ZJrU8JVVfTjKVJRX39wgj8w8CI/BCz4kXLirIBWKTv1ARuqsO 7I1aqT7pWHAwlAKIbYYEwfz46OjyzmqknglOecy/1PR09nXwAAIepSo0Jk9edqsU8Pdqsbx8cPUV jlFtVkk+58ORjefl+4BoGrzW24rGG2B04sNPrycNqZEaJLmdk5J9ie/FMV10H8wFW8syomuacPxv NhoUgNnkYsJiO7zJEKUUmbmW1GPFAgMBAAGjggFCMIIBPjAMBgNVHRMBAf8EAjAAMFYGCWCGSAGG +EIBDQRJFkdUbyBnZXQgeW91ciBvd24gY2VydGlmaWNhdGUgZm9yIEZSRUUgaGVhZCBvdmVyIHRv IGh0dHA6Ly93d3cuQ0FjZXJ0Lm9yZzAOBgNVHQ8BAf8EBAMCA6gwQAYDVR0lBDkwNwYIKwYBBQUH AwQGCCsGAQUFBwMCBgorBgEEAYI3CgMEBgorBgEEAYI3CgMDBglghkgBhvhCBAEwMgYIKwYBBQUH AQEEJjAkMCIGCCsGAQUFBzABhhZodHRwOi8vb2NzcC5jYWNlcnQub3JnMDEGA1UdHwQqMCgwJqAk oCKGIGh0dHA6Ly9jcmwuY2FjZXJ0Lm9yZy9yZXZva2UuY3JsMB0GA1UdEQQWMBSBEm1hbWlsbGUy QGNpc2NvLmNvbTANBgkqhkiG9w0BAQUFAAOCAgEAKZeEUJTYYt15cxR3xYospy8OqOLn+03auURM X3eFTrbBy+vJEnEtDS5ffCKbzAho6XqGrgRg/7Frg2wtdfIJvcYnPsWjlF+TIWe69i9r7EfPZI6A DCWHeu5cK3t9h7WsF3iC+lBARWEE49QJcu6ASY4SpVnElADpUZkBLsKnp2vWEVvXdeFg0CCo9UgH gPnE5mUsUaERW0WGIbyR+gkUkfMUsnOj2yvdZzC55UqAfFGqb4ibVlpWMJihaTYaSuN7SOImcJ5V Ya1w4yPRY2GStiHtmwPKtxlMVwMIsj1DQ/knVPpyJ0N67y8TK3R077HMInjk8wF6yCJ7W29mGtsA Y74bHEwn4rMdPDAHK1aHvIhf5KZFBuDYm5Ii6yweR8mpUv66r11h1G9vZKpJyKqR0yikdJfQ+kGN C1mAFN6ZKfQexnzzAPUClzcrJQsLWGl1tss+LHWFEhSq0240bvUqPVNl52WGwMrgzP/W32HZz62W 1CUaWiy3Xr8cHEY3fTSqxPLJiEuRsUmg1+6cjtz9+Ya+IDZwPRtcqzmJFQq+Q1xHLKfS8uf/jxHP xVOzbPpF/O0E0A8Z9ShmfdhgrHNJExXMVerISlzQY6Aq+XzGyOXVwUVyfTnTj7orMacBAVUJNl4s MHEJ02oUeALFMoa2TvwtGEw6Ou7/UlNXt/E1iUkxggMzMIIDLwIBATCBgDB5MRAwDgYDVQQKEwdS b290IENBMR4wHAYDVQQLExVodHRwOi8vd3d3LmNhY2VydC5vcmcxIjAgBgNVBAMTGUNBIENlcnQg U2lnbmluZyBBdXRob3JpdHkxITAfBgkqhkiG9w0BCQEWEnN1cHBvcnRAY2FjZXJ0Lm9yZwIDDIuY MAkGBSsOAwIaBQCgggGHMBgGCSqGSIb3DQEJAzELBgkqhkiG9w0BBwEwHAYJKoZIhvcNAQkFMQ8X DTEzMDMxOTE1MzM2MFowIwYJKoZIhvcNAQkEMRYEFOQPP7nM6SyUGNMHPqWWI2wyzWDaMIGRBgkr BgEEAYI3EAQxgYMwgYAweTEQMA4GA1UEChMHUm9vdCBDQTEeMBwGA1UECxMVaHR0cDovL3d3dy5j YWNlcnQub3JnMSIwIAYDVQQDExlDQSBDZXJ0IFNpZ25pbmcgQXV0aG9yaXR5MSEwHwYJKoZIhvcN AQkBFhJzdXBwb3J0QGNhY2VydC5vcmcCAwyLmDCBkwYLKoZIhvcNAQkQAgsxgYOggYAweTEQMA4G A1UEChMHUm9vdCBDQTEeMBwGA1UECxMVaHR0cDovL3d3dy5jYWNlcnQub3JnMSIwIAYDVQQDExlD QSBDZXJ0IFNpZ25pbmcgQXV0aG9yaXR5MSEwHwYJKoZIhvcNAQkBFhJzdXBwb3J0QGNhY2VydC5v cmcCAwyLmDANBgkqhkiG9w0BAQEFAASCAQCWAAxBu1znsz7piqDjysaoe6AuTmz5DFmmUZSKsOsz AkW43WPI2gMPycKSyS1r5glu5aVcdrwQteRUIuQ0HoUINu80EuTxtRr2IXr6cQGsHpWv2cBZm6ti hPbMkNZNmrH4oKcRq2jJRjCeam0enr8PHDRiXWmBbiXBbnpRhDt64dLPnBDWCyiCrVPrhsHlVpuS c1WGxtE/16xi0Kz6p7zDajjOeWCUZ3KyYQyi3EWusS/CimR4lHgFhYEN0q104UXnixbK447AQXhl ceJosxzvbas0srD4bqHjcBfFOE7cqOceplfLBYdLozldUjnURnCgFqeaX+NWHea1zD4SoPxHAAAA AAAA --Apple-Mail=_3A270713-E142-4B2C-8384-550CCB459D78-- From ben@nostrum.com Fri Mar 22 13:10:21 2013 Return-Path: X-Original-To: xmpp@ietfa.amsl.com Delivered-To: xmpp@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 8FBC621F8FE8 for ; Fri, 22 Mar 2013 13:10:21 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -102.6 X-Spam-Level: X-Spam-Status: No, score=-102.6 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, SPF_PASS=-0.001, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 4vfLuPvm7v8S for ; Fri, 22 Mar 2013 13:10:21 -0700 (PDT) Received: from shaman.nostrum.com (nostrum-pt.tunnel.tserv2.fmt.ipv6.he.net [IPv6:2001:470:1f03:267::2]) by ietfa.amsl.com (Postfix) with ESMTP id 9959921F8E87 for ; Fri, 22 Mar 2013 13:10:20 -0700 (PDT) Received: from [10.119.79.98] (v398.dal.ubiquity.io [174.34.133.219] (may be forged)) (authenticated bits=0) by shaman.nostrum.com (8.14.3/8.14.3) with ESMTP id r2MKAHO6056171 (version=TLSv1/SSLv3 cipher=AES128-SHA bits=128 verify=NO); Fri, 22 Mar 2013 15:10:17 -0500 (CDT) (envelope-from ben@nostrum.com) From: Ben Campbell Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: quoted-printable Date: Fri, 22 Mar 2013 15:10:12 -0500 Message-Id: To: XMPP Working Group Mime-Version: 1.0 (Mac OS X Mail 6.3 \(1503\)) X-Mailer: Apple Mail (2.1503) Received-SPF: pass (shaman.nostrum.com: 174.34.133.219 is authenticated by a trusted mechanism) Cc: "jean@nostrum.com" Subject: [xmpp] Draft Minutes X-BeenThere: xmpp@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: XMPP Working Group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 22 Mar 2013 20:10:21 -0000 Hi, Draft minutes from the XMPP meeting in Orlando are available at = http://www.ietf.org/proceedings/86/minutes/minutes-86-xmpp . Please send any corrections to the chairs as soon as possible. Thanks! Ben.= From mamille2@cisco.com Fri Mar 22 13:25:02 2013 Return-Path: X-Original-To: xmpp@ietfa.amsl.com Delivered-To: xmpp@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 68C3721F8FE8 for ; Fri, 22 Mar 2013 13:25:02 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -10.539 X-Spam-Level: X-Spam-Status: No, score=-10.539 tagged_above=-999 required=5 tests=[AWL=0.060, BAYES_00=-2.599, RCVD_IN_DNSWL_HI=-8] Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id zUma-rmEO-xU for ; Fri, 22 Mar 2013 13:25:00 -0700 (PDT) Received: from rcdn-iport-7.cisco.com (rcdn-iport-7.cisco.com [173.37.86.78]) by ietfa.amsl.com (Postfix) with ESMTP id A658721F8E7C for ; Fri, 22 Mar 2013 13:25:00 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=4298; q=dns/txt; s=iport; t=1363983900; x=1365193500; h=from:to:subject:date:message-id:references:in-reply-to: mime-version; bh=/tFmt9LMkXpxZsU1fKAaV3d7YTg31bFp4rhPF7sBc2c=; b=Wfh5ApxUDSYRoW/O0YsveMbflGqY0rY3M5sM3U1YLfmlyyjqM7PHfgVV 79OqV2M6YmsPaZoPrDgCKUq74pMeZRT/5ue2Q/mlg3VxIQuT9UUJ2p5bB yD9DaHbejhxuSngO8E9J/s5/cPCp81ZQvuhcg7ykjZ9m16S/JMAEX4+lp g=; X-Files: smime.p7s : 2283 X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: AoUFAAm9TFGtJV2Y/2dsb2JhbABDh2a9coFlFnSCJAEBAQMBfgsCAQgiJAIwJQIEARIIAQWIAAYMwhWOYTiCX2EDj0GBKJZ/gwqCKA X-IronPort-AV: E=Sophos;i="4.84,893,1355097600"; d="p7s'?scan'208";a="190544421" Received: from rcdn-core-1.cisco.com ([173.37.93.152]) by rcdn-iport-7.cisco.com with ESMTP; 22 Mar 2013 20:25:00 +0000 Received: from xhc-rcd-x04.cisco.com (xhc-rcd-x04.cisco.com [173.37.183.78]) by rcdn-core-1.cisco.com (8.14.5/8.14.5) with ESMTP id r2MKP0FQ015861 (version=TLSv1/SSLv3 cipher=AES128-SHA bits=128 verify=FAIL); Fri, 22 Mar 2013 20:25:00 GMT Received: from xmb-aln-x11.cisco.com ([169.254.6.203]) by xhc-rcd-x04.cisco.com ([173.37.183.78]) with mapi id 14.02.0318.004; Fri, 22 Mar 2013 15:25:00 -0500 From: "Matt Miller (mamille2)" To: Ben Campbell , " Group" Thread-Topic: [xmpp] Draft Minutes Thread-Index: AQHOJzlKbZdvey0AmUybCAFqhThc6JiyfAWA Date: Fri, 22 Mar 2013 20:24:59 +0000 Message-ID: References: In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: yes X-MS-TNEF-Correlator: x-originating-ip: [10.129.24.68] Content-Type: multipart/signed; boundary="Apple-Mail=_EB490A9C-8C58-488B-B57D-333E5A5B0660"; protocol="application/pkcs7-signature"; micalg=sha1 MIME-Version: 1.0 Subject: Re: [xmpp] Draft Minutes X-BeenThere: xmpp@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: XMPP Working Group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 22 Mar 2013 20:25:02 -0000 --Apple-Mail=_EB490A9C-8C58-488B-B57D-333E5A5B0660 Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=us-ascii On Mar 22, 2013, at 2:10 PM, Ben Campbell wrote: > Hi, >=20 > Draft minutes from the XMPP meeting in Orlando are available at = http://www.ietf.org/proceedings/86/minutes/minutes-86-xmpp . >=20 > Please send any corrections to the chairs as soon as possible. >=20 > Thanks! >=20 A correction: -- Domain Name Associations * There is an existing WG document (draft-ietf-xmpp-dna) edited by = Richard Barnes and Jonas Linberg. Richard suggested moving the = draft-saintandre-xmpp-dna content into draft-ietf-xmpp-dna. A post-meeting check: There is no outstanding WG document for E2E. The one document = (draft-ietf-xmpp-e2e) became RFC 3923. - m&m Matt Miller < mamille2@cisco.com > Cisco Systems, Inc. --Apple-Mail=_EB490A9C-8C58-488B-B57D-333E5A5B0660 Content-Disposition: attachment; filename="smime.p7s" Content-Type: application/pkcs7-signature; name="smime.p7s" Content-Transfer-Encoding: base64 MIAGCSqGSIb3DQEHAqCAMIACAQExCzAJBgUrDgMCGgUAMIAGCSqGSIb3DQEHAQAAoIIFejCCBXYw ggNeoAMCAQICAwyLmDANBgkqhkiG9w0BAQUFADB5MRAwDgYDVQQKEwdSb290IENBMR4wHAYDVQQL ExVodHRwOi8vd3d3LmNhY2VydC5vcmcxIjAgBgNVBAMTGUNBIENlcnQgU2lnbmluZyBBdXRob3Jp dHkxITAfBgkqhkiG9w0BCQEWEnN1cHBvcnRAY2FjZXJ0Lm9yZzAeFw0xMjExMjgxNzQ5MzFaFw0x NDExMjgxNzQ5MzFaMDwxFzAVBgNVBAMTDk1hdHRoZXcgTWlsbGVyMSEwHwYJKoZIhvcNAQkBFhJt YW1pbGxlMkBjaXNjby5jb20wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7Sh5cQYtd /kfoG3KjXd8i2esxt+BtHCmuiSku2VECC6msLKzA08cGJ31GfyX7+996TV3D5omh51j5fznfFikk cVGsuKe+omo70Aidw48ISGygQk8ZJrU8JVVfTjKVJRX39wgj8w8CI/BCz4kXLirIBWKTv1ARuqsO 7I1aqT7pWHAwlAKIbYYEwfz46OjyzmqknglOecy/1PR09nXwAAIepSo0Jk9edqsU8Pdqsbx8cPUV jlFtVkk+58ORjefl+4BoGrzW24rGG2B04sNPrycNqZEaJLmdk5J9ie/FMV10H8wFW8syomuacPxv NhoUgNnkYsJiO7zJEKUUmbmW1GPFAgMBAAGjggFCMIIBPjAMBgNVHRMBAf8EAjAAMFYGCWCGSAGG +EIBDQRJFkdUbyBnZXQgeW91ciBvd24gY2VydGlmaWNhdGUgZm9yIEZSRUUgaGVhZCBvdmVyIHRv IGh0dHA6Ly93d3cuQ0FjZXJ0Lm9yZzAOBgNVHQ8BAf8EBAMCA6gwQAYDVR0lBDkwNwYIKwYBBQUH AwQGCCsGAQUFBwMCBgorBgEEAYI3CgMEBgorBgEEAYI3CgMDBglghkgBhvhCBAEwMgYIKwYBBQUH AQEEJjAkMCIGCCsGAQUFBzABhhZodHRwOi8vb2NzcC5jYWNlcnQub3JnMDEGA1UdHwQqMCgwJqAk oCKGIGh0dHA6Ly9jcmwuY2FjZXJ0Lm9yZy9yZXZva2UuY3JsMB0GA1UdEQQWMBSBEm1hbWlsbGUy QGNpc2NvLmNvbTANBgkqhkiG9w0BAQUFAAOCAgEAKZeEUJTYYt15cxR3xYospy8OqOLn+03auURM X3eFTrbBy+vJEnEtDS5ffCKbzAho6XqGrgRg/7Frg2wtdfIJvcYnPsWjlF+TIWe69i9r7EfPZI6A DCWHeu5cK3t9h7WsF3iC+lBARWEE49QJcu6ASY4SpVnElADpUZkBLsKnp2vWEVvXdeFg0CCo9UgH gPnE5mUsUaERW0WGIbyR+gkUkfMUsnOj2yvdZzC55UqAfFGqb4ibVlpWMJihaTYaSuN7SOImcJ5V Ya1w4yPRY2GStiHtmwPKtxlMVwMIsj1DQ/knVPpyJ0N67y8TK3R077HMInjk8wF6yCJ7W29mGtsA Y74bHEwn4rMdPDAHK1aHvIhf5KZFBuDYm5Ii6yweR8mpUv66r11h1G9vZKpJyKqR0yikdJfQ+kGN C1mAFN6ZKfQexnzzAPUClzcrJQsLWGl1tss+LHWFEhSq0240bvUqPVNl52WGwMrgzP/W32HZz62W 1CUaWiy3Xr8cHEY3fTSqxPLJiEuRsUmg1+6cjtz9+Ya+IDZwPRtcqzmJFQq+Q1xHLKfS8uf/jxHP xVOzbPpF/O0E0A8Z9ShmfdhgrHNJExXMVerISlzQY6Aq+XzGyOXVwUVyfTnTj7orMacBAVUJNl4s MHEJ02oUeALFMoa2TvwtGEw6Ou7/UlNXt/E1iUkxggMzMIIDLwIBATCBgDB5MRAwDgYDVQQKEwdS b290IENBMR4wHAYDVQQLExVodHRwOi8vd3d3LmNhY2VydC5vcmcxIjAgBgNVBAMTGUNBIENlcnQg U2lnbmluZyBBdXRob3JpdHkxITAfBgkqhkiG9w0BCQEWEnN1cHBvcnRAY2FjZXJ0Lm9yZwIDDIuY MAkGBSsOAwIaBQCgggGHMBgGCSqGSIb3DQEJAzELBgkqhkiG9w0BBwEwHAYJKoZIhvcNAQkFMQ8X DTEzMDMyMjIwMjQ2MFowIwYJKoZIhvcNAQkEMRYEFJLG001y1zamMjvnbo6SGtaR1FAjMIGRBgkr BgEEAYI3EAQxgYMwgYAweTEQMA4GA1UEChMHUm9vdCBDQTEeMBwGA1UECxMVaHR0cDovL3d3dy5j YWNlcnQub3JnMSIwIAYDVQQDExlDQSBDZXJ0IFNpZ25pbmcgQXV0aG9yaXR5MSEwHwYJKoZIhvcN AQkBFhJzdXBwb3J0QGNhY2VydC5vcmcCAwyLmDCBkwYLKoZIhvcNAQkQAgsxgYOggYAweTEQMA4G A1UEChMHUm9vdCBDQTEeMBwGA1UECxMVaHR0cDovL3d3dy5jYWNlcnQub3JnMSIwIAYDVQQDExlD QSBDZXJ0IFNpZ25pbmcgQXV0aG9yaXR5MSEwHwYJKoZIhvcNAQkBFhJzdXBwb3J0QGNhY2VydC5v cmcCAwyLmDANBgkqhkiG9w0BAQEFAASCAQAPa36CzOp3wfpGcnHh1KCeGe/iNpmvRATb68glDXmd w532dLuFzUJbBO6Q3jiabc9NtcLfxaid6QpUXkk5irOA++v8ws8MB6uWWfM2nHOYNUnyac6DCbz0 5wb0bnKKy1pN/3DwK8Kri05ocJia7H8h/I8NBH7tWydCGRULFCusSBLvAyNbV0QwplvhrRmr21IG 9dWM5gMl5wVqlMYdfRxNDt+LaE0sbCqhifMLaX5cy8agOAyTCzJBSSpcbFF7t2d10qLmIJtOOVJp mYke8aqNkyxIDBdGkpsU8nUCZEGou+W4tDdHfc48KzQai062sZgOhch6qiVWmGkwEWLNhpFmAAAA AAAA --Apple-Mail=_EB490A9C-8C58-488B-B57D-333E5A5B0660-- From ben@nostrum.com Fri Mar 22 13:47:44 2013 Return-Path: X-Original-To: xmpp@ietfa.amsl.com Delivered-To: xmpp@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 6BA4221F88B0 for ; Fri, 22 Mar 2013 13:47:44 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -102.6 X-Spam-Level: X-Spam-Status: No, score=-102.6 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, SPF_PASS=-0.001, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id dcyS6ZtlhLW4 for ; Fri, 22 Mar 2013 13:47:44 -0700 (PDT) Received: from shaman.nostrum.com (nostrum-pt.tunnel.tserv2.fmt.ipv6.he.net [IPv6:2001:470:1f03:267::2]) by ietfa.amsl.com (Postfix) with ESMTP id CDB9521F88A2 for ; Fri, 22 Mar 2013 13:47:43 -0700 (PDT) Received: from [10.119.79.98] (v398.dal.ubiquity.io [174.34.133.219] (may be forged)) (authenticated bits=0) by shaman.nostrum.com (8.14.3/8.14.3) with ESMTP id r2MKlhBX060351 (version=TLSv1/SSLv3 cipher=AES128-SHA bits=128 verify=NO); Fri, 22 Mar 2013 15:47:43 -0500 (CDT) (envelope-from ben@nostrum.com) Content-Type: text/plain; charset=us-ascii Mime-Version: 1.0 (Mac OS X Mail 6.3 \(1503\)) From: Ben Campbell In-Reply-To: Date: Fri, 22 Mar 2013 15:47:38 -0500 Content-Transfer-Encoding: quoted-printable Message-Id: References: To: Matt Miller (mamille2) X-Mailer: Apple Mail (2.1503) Received-SPF: pass (shaman.nostrum.com: 174.34.133.219 is authenticated by a trusted mechanism) Cc: " Group" Subject: Re: [xmpp] Draft Minutes X-BeenThere: xmpp@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: XMPP Working Group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 22 Mar 2013 20:47:44 -0000 Thanks, will fix! On Mar 22, 2013, at 3:24 PM, Matt Miller (mamille2) = wrote: >=20 > On Mar 22, 2013, at 2:10 PM, Ben Campbell > wrote: >=20 >> Hi, >>=20 >> Draft minutes from the XMPP meeting in Orlando are available at = http://www.ietf.org/proceedings/86/minutes/minutes-86-xmpp . >>=20 >> Please send any corrections to the chairs as soon as possible. >>=20 >> Thanks! >>=20 >=20 > A correction: >=20 > -- Domain Name Associations > * There is an existing WG document (draft-ietf-xmpp-dna) edited by = Richard Barnes and Jonas Linberg. Richard suggested moving the = draft-saintandre-xmpp-dna content into draft-ietf-xmpp-dna. >=20 > A post-meeting check: >=20 > There is no outstanding WG document for E2E. The one document = (draft-ietf-xmpp-e2e) became RFC 3923. >=20 >=20 > - m&m >=20 > Matt Miller < mamille2@cisco.com > > Cisco Systems, Inc. >=20 From stpeter@stpeter.im Tue Mar 26 13:36:52 2013 Return-Path: X-Original-To: xmpp@ietfa.amsl.com Delivered-To: xmpp@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 33B6321F8D7F for ; Tue, 26 Mar 2013 13:36:52 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -102.599 X-Spam-Level: X-Spam-Status: No, score=-102.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Xoons037P+WF for ; Tue, 26 Mar 2013 13:36:50 -0700 (PDT) Received: from stpeter.im (mailhost.stpeter.im [207.210.219.225]) by ietfa.amsl.com (Postfix) with ESMTP id E305021F8D32 for ; Tue, 26 Mar 2013 13:36:50 -0700 (PDT) Received: from [10.129.24.115] (unknown [128.107.239.233]) (Authenticated sender: stpeter) by stpeter.im (Postfix) with ESMTPSA id BA11340C76 for ; Tue, 26 Mar 2013 14:46:09 -0600 (MDT) Message-ID: <515206E1.9060203@stpeter.im> Date: Tue, 26 Mar 2013 14:36:49 -0600 From: Peter Saint-Andre User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.7; rv:17.0) Gecko/20130307 Thunderbird/17.0.4 MIME-Version: 1.0 To: XMPP Working Group X-Enigmail-Version: 1.5.1 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 7bit Subject: [xmpp] another e2e approach X-BeenThere: xmpp@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: XMPP Working Group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 26 Mar 2013 20:36:52 -0000 -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Of interest regarding end-to-end encryption.... https://silentcircle.com/web/scimp-protocol/ Peter - -- Peter Saint-Andre https://stpeter.im/ -----BEGIN PGP SIGNATURE----- Version: GnuPG/MacGPG2 v2.0.18 (Darwin) Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/ iQIcBAEBAgAGBQJRUgbhAAoJEOoGpJErxa2pfhUP/1icijJiR2dmuOxLsMNqFzPA cb14VwTYKNr2vhxe0KixqRHuhDwh2paoL3MTJsUImANvvvQ9FUoNwLE6T9Gk/G/p aCMbN/oIkuZj3YKMiSeQUqvKjkVfHBFDG//fvxaSaQBWroZbGRp6DhK4/4Aocfpv 77hLB+cWFpar3Y0DsAwU3QtjZNt9x0NWYvYUkdUpQYvLI61z4sOPUlDXNnxQY5CR YHlHAtkfpr4ehGRwqcYJYKrz4iQDW26/pEdV7OY/RtVQdULbZwKzegkqfJ7Q+rSc DpbT962KVTtKnLH43OsrpZM39+f03N+KfbK31UpOo+VMcrgRlauTaelJHH34Ybbn G/5jCgaH/nd3Iqaad8S8siW0o+8HwYxXPR9fZwQNVya67DEsMb5tf25p2SScRF+C Hrn1wAlfBPSIa3zzdH8KlTp9/5o0fdn1ngw7GKy5L9f8cDGqJFCC+ra9YQQ9A2pe Bb3J8jJxI1tfirrC+Ej8lzJi7pYvDcxfR3R0SL94kpj9TSYJPHkZ/TuA6VIA/z9G 2AGYd/9W7+AIMLF8Hvwap/DtENdyifW7elyObkcoXZ/PDJ6kFwZMvC+zoEvDPT+P 4mFuyQGyr4oeGOiFcDdDjx0Q17p2bhBj9aHzsn6dHDkIuPjpH1qufZIEkK6s9Kt/ TOV3hiBIcZ9EX4X7m4uU =6Fzt -----END PGP SIGNATURE----- From internet-drafts@ietf.org Wed Mar 27 19:36:04 2013 Return-Path: X-Original-To: xmpp@ietfa.amsl.com Delivered-To: xmpp@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C8DA821F93B6; Wed, 27 Mar 2013 19:36:04 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -102.487 X-Spam-Level: X-Spam-Status: No, score=-102.487 tagged_above=-999 required=5 tests=[AWL=0.113, BAYES_00=-2.599, NO_RELAYS=-0.001, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id yD77C5fl5hf3; Wed, 27 Mar 2013 19:36:04 -0700 (PDT) Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 3649921F93AF; Wed, 27 Mar 2013 19:36:04 -0700 (PDT) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable From: internet-drafts@ietf.org To: i-d-announce@ietf.org X-Test-IDTracker: no X-IETF-IDTracker: 4.43 Message-ID: <20130328023604.32490.44586.idtracker@ietfa.amsl.com> Date: Wed, 27 Mar 2013 19:36:04 -0700 Cc: xmpp@ietf.org Subject: [xmpp] I-D Action: draft-ietf-xmpp-6122bis-06.txt X-BeenThere: xmpp@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: XMPP Working Group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 28 Mar 2013 02:36:05 -0000 A New Internet-Draft is available from the on-line Internet-Drafts director= ies. This draft is a work item of the Extensible Messaging and Presence Protoco= l Working Group of the IETF. Title : Extensible Messaging and Presence Protocol (XMPP): Addre= ss Format Author(s) : Peter Saint-Andre Filename : draft-ietf-xmpp-6122bis-06.txt Pages : 23 Date : 2013-03-27 Abstract: This document defines the address format for the Extensible Messaging and Presence Protocol (XMPP), including support for code points outside the ASCII range. This document obsoletes RFC 6122. The IETF datatracker status page for this draft is: https://datatracker.ietf.org/doc/draft-ietf-xmpp-6122bis There's also a htmlized version available at: http://tools.ietf.org/html/draft-ietf-xmpp-6122bis-06 A diff from the previous version is available at: http://www.ietf.org/rfcdiff?url2=3Ddraft-ietf-xmpp-6122bis-06 Internet-Drafts are also available by anonymous FTP at: ftp://ftp.ietf.org/internet-drafts/ From stpeter@stpeter.im Wed Mar 27 20:03:11 2013 Return-Path: X-Original-To: xmpp@ietfa.amsl.com Delivered-To: xmpp@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 873C821F85BF for ; Wed, 27 Mar 2013 20:03:11 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -102.599 X-Spam-Level: X-Spam-Status: No, score=-102.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id tfwOukSXflJN for ; Wed, 27 Mar 2013 20:03:10 -0700 (PDT) Received: from stpeter.im (mailhost.stpeter.im [207.210.219.225]) by ietfa.amsl.com (Postfix) with ESMTP id 0017221F941F for ; Wed, 27 Mar 2013 20:03:09 -0700 (PDT) Received: from [192.168.1.7] (unknown [71.237.13.154]) (Authenticated sender: stpeter) by stpeter.im (Postfix) with ESMTPSA id 2E9C940D1E for ; Wed, 27 Mar 2013 21:12:33 -0600 (MDT) Message-ID: <5153B2E1.4010207@stpeter.im> Date: Wed, 27 Mar 2013 21:02:57 -0600 From: Peter Saint-Andre User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.7; rv:17.0) Gecko/20130307 Thunderbird/17.0.4 MIME-Version: 1.0 To: xmpp@ietf.org References: <20130328023604.32490.44586.idtracker@ietfa.amsl.com> In-Reply-To: <20130328023604.32490.44586.idtracker@ietfa.amsl.com> X-Enigmail-Version: 1.5.1 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 7bit Subject: Re: [xmpp] I-D Action: draft-ietf-xmpp-6122bis-06.txt X-BeenThere: xmpp@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: XMPP Working Group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 28 Mar 2013 03:03:11 -0000 -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 On 3/27/13 8:36 PM, internet-drafts@ietf.org wrote: > > A New Internet-Draft is available from the on-line Internet-Drafts > directories. This draft is a work item of the Extensible Messaging > and Presence Protocol Working Group of the IETF. > > Title : Extensible Messaging and Presence Protocol > (XMPP): Address Format Author(s) : Peter Saint-Andre Filename > : draft-ietf-xmpp-6122bis-06.txt Pages : 23 Date > : 2013-03-27 Just a small update to track changes to the PRECIS framework. Peter - -- Peter Saint-Andre https://stpeter.im/ -----BEGIN PGP SIGNATURE----- Version: GnuPG/MacGPG2 v2.0.18 (Darwin) Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/ iQIcBAEBAgAGBQJRU7LgAAoJEOoGpJErxa2pTn8P/i//DyDV0SYRBxQzXOTQqrpX YzepR5t3yi1ZEYM4fmZZ2AH6wxK5CiatML8LwJcGsYifDu9M71wyO3BvvhUdcAQf ++wjI7twK0IxBXN5zzfGVm6I/19NQQRdq3dffsPsoWirAlDMnq4YP0BAmcgf4lnE d0lpsM3TYJNnKlumW8cXAa512UTV571dsDgs7MEwMXNcejkPlP+W4VMIHOGJEmLr 7uGhGEJYdCuSbIGWZ2jbNTse8dVDVbLisMcoA5+ANxDZmk0DxWSvK3udBxANp4Z9 kyeFTlg12IjCkhW784jruK7z8U4Eb34Hrf3ZDnqZUxhIHAI9kJIL20U/QQCyGJmW W9Rr4I9JXTaGBMnHxCQlWktm8bTPV/AWJp5dZDnFu0nHxDikx1sQBMVd4QMg4hnH BoZkelLboNgxeaWFOxtK8c4yT8gGt+Rd8LfvubPz+ALpaO2yIAWK0dUlRjzLB7qe uzkB69oR5S9HbxONx71ozWkkqQbh1MvRn0z544wz5v6ZT3LQUcV2LYxCxUoaSVDz ImvJ72VBGlTrN/dSEHwyPX5r08sd3ypN3l3ckvC7A6Odi7X3i+43ke059It16u8p Rb02UWRXVVkjmRx0OCAQIWToyF+FrCg86agjRzeYfpz3haCe3I8i8/jImuVIuN/M K+xcDMFycFvz7p+1Kd/2 =ACPO -----END PGP SIGNATURE----- From k.i.smith@gmail.com Fri Mar 29 10:06:36 2013 Return-Path: X-Original-To: xmpp@ietfa.amsl.com Delivered-To: xmpp@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 36F4421F941C for ; Fri, 29 Mar 2013 10:06:36 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.978 X-Spam-Level: X-Spam-Status: No, score=-1.978 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, FM_FORGED_GMAIL=0.622, NO_RELAYS=-0.001] Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id EdTnje6KYK3y for ; Fri, 29 Mar 2013 10:06:35 -0700 (PDT) Received: from mail-wi0-x236.google.com (mail-wi0-x236.google.com [IPv6:2a00:1450:400c:c05::236]) by ietfa.amsl.com (Postfix) with ESMTP id 4683221F940B for ; Fri, 29 Mar 2013 10:06:35 -0700 (PDT) Received: by mail-wi0-f182.google.com with SMTP id hi18so59072wib.3 for ; Fri, 29 Mar 2013 10:06:34 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:x-received:reply-to:sender:in-reply-to:references:date :x-google-sender-auth:message-id:subject:from:to:cc:content-type; bh=AUfjE3s6uRuQVyALhq6t6lBugnJUPDIsA1ZS6ESBhIs=; b=t3DR+i0VGqz/QVfvF/2YQcP3QtbWrp43RWIeoAmFCitCutnxsrEGSXQwosgJ+Vgbm6 17QJz4cvgUqJF0LFeNUSu2sQ2euUyxtOWJ+vP/k9WyQtzYNC6hqEYhwPus3fSnbqfVbT QoIHLzzlCLGPcclUXxPjWjBuEQKGLGsQv8bpBE6wU4Vt5LjPipBN3zPSRZz8wqL15ime moNhe7r1tS0JdR5exM50d41pTo5wXECvkBWpPjdv8/RgC/bg37TbTu/5caGXHTzJGN07 tyTg0hbUqgrUMw0FL3Fn/nnSyDP/Ld0LNpIAOHFwZ3VpB3BimOTlAMO/lBn6ZZxMmcjB dFgg== MIME-Version: 1.0 X-Received: by 10.180.73.212 with SMTP id n20mr399027wiv.11.1364576794495; Fri, 29 Mar 2013 10:06:34 -0700 (PDT) Sender: k.i.smith@gmail.com Received: by 10.216.106.197 with HTTP; Fri, 29 Mar 2013 10:06:34 -0700 (PDT) In-Reply-To: <515206E1.9060203@stpeter.im> References: <515206E1.9060203@stpeter.im> Date: Fri, 29 Mar 2013 17:06:34 +0000 X-Google-Sender-Auth: UarxLr3ht-UNr-b_50CZHkQvyfk Message-ID: From: Kevin Smith To: Peter Saint-Andre Content-Type: text/plain; charset=ISO-8859-1 Cc: XMPP Working Group Subject: Re: [xmpp] another e2e approach X-BeenThere: xmpp@ietf.org X-Mailman-Version: 2.1.12 Precedence: list Reply-To: kevin@kismith.co.uk List-Id: XMPP Working Group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 29 Mar 2013 17:06:36 -0000 On Tue, Mar 26, 2013 at 8:36 PM, Peter Saint-Andre wrote: > -----BEGIN PGP SIGNED MESSAGE----- > Hash: SHA1 > > Of interest regarding end-to-end encryption.... > > https://silentcircle.com/web/scimp-protocol/ As a non-crypto expert, there's chunks of this I don't understand. It repeatedly says it's not vulnerable to MITMs, but I don't see where the initial leap of faith is protected. Have I missed the critical step in this (I admit I only scanned the paper, so could very easily have missed the crucial bits)? /K From mwild1@gmail.com Fri Mar 29 11:15:53 2013 Return-Path: X-Original-To: xmpp@ietfa.amsl.com Delivered-To: xmpp@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 8B55021F9392 for ; Fri, 29 Mar 2013 11:15:52 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -3.599 X-Spam-Level: X-Spam-Status: No, score=-3.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, RCVD_IN_DNSWL_LOW=-1] Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id nRxtMqUghTCo for ; Fri, 29 Mar 2013 11:15:52 -0700 (PDT) Received: from mail-vc0-f182.google.com (mail-vc0-f182.google.com [209.85.220.182]) by ietfa.amsl.com (Postfix) with ESMTP id CC8A121F9317 for ; Fri, 29 Mar 2013 11:15:51 -0700 (PDT) Received: by mail-vc0-f182.google.com with SMTP id ht11so729855vcb.27 for ; Fri, 29 Mar 2013 11:15:51 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=x-received:mime-version:in-reply-to:references:from:date:message-id :subject:to:cc:content-type; bh=kZqOWFZ39vyFptqCgnGwrhdFJFaofdEqXwZsD005pAk=; b=Pr5Trrr5MiJLfoqdJbl925W1vDAtp6neAFQvbtye+WKjbGnlFtZxyYVuLeKJKRsvrw aQHXqtCGAv7p+Y1vknCYsmib844zx9bsQzgx9wU3i4ocIpMIEt9UPG/w/fP+IUNPOFWZ hHFLbYLcG/YCVOGY64x9M5TcqbQPe+vHFxxWq8YdIP8L2ytp0uX2IOsW42WZM+1uswVy MTDXRa/1crfwZmd6f7b1Q2Y0rf+RVmHkErYq6Nd2UnvM+I8mYNByBSW9zdxlH6sB40ab eDJOuxPeYZKeEaaTnixJcK8XgmCPzTHlanPNa7E86sK7eVv+SIHh87ibOfS1RkKKoAa6 8Qqg== X-Received: by 10.220.153.2 with SMTP id i2mr2484959vcw.53.1364580951239; Fri, 29 Mar 2013 11:15:51 -0700 (PDT) MIME-Version: 1.0 Received: by 10.220.107.19 with HTTP; Fri, 29 Mar 2013 11:15:31 -0700 (PDT) In-Reply-To: References: <515206E1.9060203@stpeter.im> From: Matthew Wild Date: Fri, 29 Mar 2013 18:15:31 +0000 Message-ID: To: kevin@kismith.co.uk Content-Type: text/plain; charset=UTF-8 Cc: XMPP Working Group Subject: Re: [xmpp] another e2e approach X-BeenThere: xmpp@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: XMPP Working Group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 29 Mar 2013 18:15:53 -0000 On 29 March 2013 17:06, Kevin Smith wrote: > On Tue, Mar 26, 2013 at 8:36 PM, Peter Saint-Andre wrote: >> -----BEGIN PGP SIGNED MESSAGE----- >> Hash: SHA1 >> >> Of interest regarding end-to-end encryption.... >> >> https://silentcircle.com/web/scimp-protocol/ > > As a non-crypto expert, there's chunks of this I don't understand. It > repeatedly says it's not vulnerable to MITMs, but I don't see where > the initial leap of faith is protected. Have I missed the critical > step in this (I admit I only scanned the paper, so could very easily > have missed the crucial bits)? It uses Short Authentication Strings, page 11 of the paper. Regards, Matthew From k.i.smith@gmail.com Fri Mar 29 11:19:05 2013 Return-Path: X-Original-To: xmpp@ietfa.amsl.com Delivered-To: xmpp@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 0305E21F872E for ; Fri, 29 Mar 2013 11:19:05 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.478 X-Spam-Level: X-Spam-Status: No, score=-2.478 tagged_above=-999 required=5 tests=[AWL=0.499, BAYES_00=-2.599, FM_FORGED_GMAIL=0.622, RCVD_IN_DNSWL_LOW=-1] Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id p9SqMBYsUmwt for ; Fri, 29 Mar 2013 11:19:03 -0700 (PDT) Received: from mail-wg0-f47.google.com (mail-wg0-f47.google.com [74.125.82.47]) by ietfa.amsl.com (Postfix) with ESMTP id 6789B21F867A for ; Fri, 29 Mar 2013 11:19:02 -0700 (PDT) Received: by mail-wg0-f47.google.com with SMTP id y10so610739wgg.26 for ; Fri, 29 Mar 2013 11:19:01 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:x-received:reply-to:sender:in-reply-to:references:date :x-google-sender-auth:message-id:subject:from:to:cc:content-type; bh=P9HTsr3FYTE8+owtrYP6wMEh4ZpOz6jpuOkT0VoyqCM=; b=rozTVzN1CFJzlQcio23M5fJ6gaVTaFnvKb6eB7S1c9OMPge5YVs1/XSJcGoAB1PGQb DQzTtENSX3Q4dqrdzL8AzKVWPB21CvJu/FgHKtnCmkWYMzl6ungNRIoMbclNyVzONjgL dhpnS1Ra+cSIcPNOO4mR7R0RJ3h4E3aNgVuilGmMxDfNH7YnoO+7ethDRoiqDRBDr+Bk dzoViMKl9AMtg3YCVeQjTvdFjkVBcFqU53qpzAqWebd4Ofu/zZF5VKkrXe3+ZOEANP4r 50jseY7+Pc3JiJoXBFEeqb8LkWJ2mTXXw4t4PZSujWR+g7Irc1H7e5+Z9dTs9k2V9Ssw YMHA== MIME-Version: 1.0 X-Received: by 10.194.82.104 with SMTP id h8mr5093098wjy.3.1364581141446; Fri, 29 Mar 2013 11:19:01 -0700 (PDT) Sender: k.i.smith@gmail.com Received: by 10.216.106.197 with HTTP; Fri, 29 Mar 2013 11:19:01 -0700 (PDT) In-Reply-To: References: <515206E1.9060203@stpeter.im> Date: Fri, 29 Mar 2013 18:19:01 +0000 X-Google-Sender-Auth: -_wFMi3zCC_oglgzYqJvfPTdte8 Message-ID: From: Kevin Smith To: Matthew Wild Content-Type: text/plain; charset=ISO-8859-1 Cc: XMPP Working Group Subject: Re: [xmpp] another e2e approach X-BeenThere: xmpp@ietf.org X-Mailman-Version: 2.1.12 Precedence: list Reply-To: kevin@kismith.co.uk List-Id: XMPP Working Group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 29 Mar 2013 18:19:05 -0000 On Fri, Mar 29, 2013 at 6:15 PM, Matthew Wild wrote: > On 29 March 2013 17:06, Kevin Smith wrote: >> On Tue, Mar 26, 2013 at 8:36 PM, Peter Saint-Andre wrote: >>> -----BEGIN PGP SIGNED MESSAGE----- >>> Hash: SHA1 >>> >>> Of interest regarding end-to-end encryption.... >>> >>> https://silentcircle.com/web/scimp-protocol/ >> >> As a non-crypto expert, there's chunks of this I don't understand. It >> repeatedly says it's not vulnerable to MITMs, but I don't see where >> the initial leap of faith is protected. Have I missed the critical >> step in this (I admit I only scanned the paper, so could very easily >> have missed the crucial bits)? > > It uses Short Authentication Strings, page 11 of the paper. Gah, how did I miss that? Thanks. /K