From nobody Mon Aug 18 06:17:56 2014 Return-Path: X-Original-To: secauth@ietfa.amsl.com Delivered-To: secauth@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 248661A030A for ; Mon, 18 Aug 2014 06:17:53 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -3.469 X-Spam-Level: X-Spam-Status: No, score=-3.469 tagged_above=-999 required=5 tests=[BAYES_05=-0.5, RCVD_IN_DNSWL_MED=-2.3, RP_MATCHES_RCVD=-0.668, SPF_PASS=-0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id tTOWZB7bFBsd for ; Mon, 18 Aug 2014 06:17:50 -0700 (PDT) Received: from lhrrgout.huawei.com (lhrrgout.huawei.com [194.213.3.17]) (using TLSv1 with cipher RC4-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 48FA01A0313 for ; Mon, 18 Aug 2014 06:17:50 -0700 (PDT) Received: from 172.18.7.190 (EHLO lhreml404-hub.china.huawei.com) ([172.18.7.190]) by lhrrg02-dlp.huawei.com (MOS 4.3.7-GA FastPath queued) with ESMTP id BIJ20979; Mon, 18 Aug 2014 13:17:48 +0000 (GMT) Received: from LHREML513-MBB.china.huawei.com ([fe80::b810:863:a57e:3ff]) by lhreml404-hub.china.huawei.com ([::1]) with mapi id 14.03.0158.001; Mon, 18 Aug 2014 14:17:43 +0100 From: Hosnieh Rafiee To: "secauth@ietf.org" Thread-Topic: Step1: clarification of requirements and usecase draft Thread-Index: Ac+65srUjqQb8TF7TyyCn937+ZTbaQ== Date: Mon, 18 Aug 2014 13:17:43 +0000 Message-ID: <814D0BFB77D95844A01CA29B44CBF8A7A2770D@lhreml513-mbb.china.huawei.com> Accept-Language: zh-CN, en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.221.82.100] Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 X-CFilter-Loop: Reflected Archived-At: http://mailarchive.ietf.org/arch/msg/secauth/ByhZ1fbdUC3e4hgvFmCXw6DJocw Subject: [Secauth] Step1: clarification of requirements and usecase draft X-BeenThere: secauth@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: Omni-purpose Network-layer based Secure Authentication non-working group discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 18 Aug 2014 13:17:53 -0000 Folks, Before I submit any document to IETF, I need your inputs on the following i= nformation. This is the summary of the requirement draft. I thought it would be easier to consider some questions and answer them: 1- What are the existing authentication, authorization and accounting appro= aches (some examples): RADIUS=20 Host Identity Protocol (HIP)=20 Open Standard for Authorization (OAuth)=20 Diameter =20 2- How do they often secure their communications (provide both privacy and = security) - IPsec - TLS=20 - SSL 3- Is there any problem with the above security approaches? IMHO, Yes - IPsec: it might be key management=20 - TLS and SSL: either need a CA or hardcopy of the keys in any node that wa= nts to communicate with the service provider (such as a web site which prov= ide a service). CA might be costly and also might allow a government!? to d= o pervasive monitoring. Self certification would be the problem of key exch= ange since each node needs to have the hardcopy of the keys. Having a CA ma= kes it also one way direction. How to avoid spoofing if it is self certific= ation and how to do key management? If it is hardcopy of key on the device, it never changes and might allow an= attacker to track this node based on its key. Otherwise there is no key ex= change between two nodes. 4- What solution can we work on here? The use of ORCHID algorithm with one of network layer approaches; the one t= hat prevents IP spoofing. Use of RSA is not our choice instead the use of E= CC, the latest algorithm (Curve) is our choice for having higher performanc= e. Why? This eliminates the needs of CA and also prevents IP spoofing. 5- Requirements Functionality - Operates in both IPv4 and IPv6 networks (however the focus would be IPv6 = since IPv4 is sunsetting...) - Requires minimum human interaction (automates the process as much as poss= ible) - Supports different clients with different resources (Memory, Battery, CPU= , etc.) - Laptops, IPod, Smartphone, sensor nodes, cars, etc.=20 Good performance for constrained devices. - Provides security and a user defined privacy=20 - Be able to authenticate and authorize nodes in case there are proxy serve= rs or other intermediate nodes in the middle of the communications - Enable the use of this approach in visualization environment and for the = authentication of different virtual nodes in clouds where Software Defined = Network (SDN) or Network Function Virtualization (NFV) techniques are in us= e. Implementation and Operational View - Platform independent. In other words, supports multiple platforms (Window= s, Linux, UNIX, etc.) - Easily integrate with any other application layer authentication mechanis= ms - Provide supports for Software Defined Networks (SDN) 6- Some Use cases 6.1. Virtualization - authentication and authorization of data plane to control plane in SDN -=20 6.2. Authentication of a node via different protocols SSH? SIP? SMTP? etc. I also want to arrange an online meeting and will prepare some slides to di= scuss the requirement draft further and other use cases that needs to take = into consideration. There are some possibilities: I chose the time slot that is possible for both who are in Europe and other= part of the world. http://doodle.com/se3gyys9dnre4nyr=20 Please choose your desire time. I hope that we can have this online meeting= for clarifications. I will setup a remote meeting after I know the people who will attend. Thanks, Best, Hosnieh From nobody Mon Aug 18 08:18:57 2014 Return-Path: X-Original-To: secauth@ietfa.amsl.com Delivered-To: secauth@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C1C141A0572 for ; Mon, 18 Aug 2014 08:18:54 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.869 X-Spam-Level: X-Spam-Status: No, score=-4.869 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, RP_MATCHES_RCVD=-0.668, SPF_PASS=-0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id bFs5M50aGU1v for ; Mon, 18 Aug 2014 08:18:53 -0700 (PDT) Received: from lhrrgout.huawei.com (lhrrgout.huawei.com [194.213.3.17]) (using TLSv1 with cipher RC4-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 1BA271A0564 for ; Mon, 18 Aug 2014 08:18:51 -0700 (PDT) Received: from 172.18.7.190 (EHLO lhreml406-hub.china.huawei.com) ([172.18.7.190]) by lhrrg02-dlp.huawei.com (MOS 4.3.7-GA FastPath queued) with ESMTP id BIJ31996; Mon, 18 Aug 2014 15:18:50 +0000 (GMT) Received: from LHREML513-MBB.china.huawei.com ([fe80::b810:863:a57e:3ff]) by lhreml406-hub.china.huawei.com ([10.201.5.243]) with mapi id 14.03.0158.001; Mon, 18 Aug 2014 16:18:45 +0100 From: Hosnieh Rafiee To: "secauth@ietf.org" Thread-Topic: The complete version of requirements and use case scenarios Thread-Index: Ac+65srUjqQb8TF7TyyCn937+ZTbaQAECJeg Date: Mon, 18 Aug 2014 15:18:44 +0000 Message-ID: <814D0BFB77D95844A01CA29B44CBF8A7A27BAD@lhreml513-mbb.china.huawei.com> References: <814D0BFB77D95844A01CA29B44CBF8A7A2770D@lhreml513-mbb.china.huawei.com> In-Reply-To: <814D0BFB77D95844A01CA29B44CBF8A7A2770D@lhreml513-mbb.china.huawei.com> Accept-Language: zh-CN, en-US Content-Language: en-US X-MS-Has-Attach: yes X-MS-TNEF-Correlator: x-originating-ip: [10.221.82.100] Content-Type: multipart/mixed; boundary="_002_814D0BFB77D95844A01CA29B44CBF8A7A27BADlhreml513mbbchina_" MIME-Version: 1.0 X-CFilter-Loop: Reflected Archived-At: http://mailarchive.ietf.org/arch/msg/secauth/gclx4mEQybdrxfNSaLg8dFHZNBQ Subject: [Secauth] The complete version of requirements and use case scenarios X-BeenThere: secauth@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: Omni-purpose Network-layer based Secure Authentication non-working group discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 18 Aug 2014 15:18:55 -0000 --_002_814D0BFB77D95844A01CA29B44CBF8A7A27BADlhreml513mbbchina_ Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable Follow up, Here is the link to latest version.=20 < http://editor.rozanak.com/show.aspx?u=3DAZ6AA4BFD809BB71B2544CTAM > I am also enclosing this version in case you have problem access it over th= e above link. I would love to receive your comments either editorial or technical. Please= share all your thoughts. Thanks, Best, Hosnieh --_002_814D0BFB77D95844A01CA29B44CBF8A7A27BADlhreml513mbbchina_ Content-Type: application/msword; name="secauth_requirements.doc" Content-Description: secauth_requirements.doc Content-Disposition: attachment; filename="secauth_requirements.doc"; size=73728; creation-date="Mon, 18 Aug 2014 15:16:41 GMT"; modification-date="Mon, 18 Aug 2014 15:16:45 GMT" Content-Transfer-Encoding: base64 0M8R4KGxGuEAAAAAAAAAAAAAAAAAAAAAPgADAP7/CQAGAAAAAAAAAAAAAAACAAAAhwAAAAAAAAAA EAAAigAAAAEAAAD+////AAAAAIUAAACGAAAA//////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// ///////////////////////////////////////////////////////////////////////////s pcEABoAJBAAA8BK/AAAAAAAAMAAAAAAACAAAs0UAAA4AYmpiarSitKIAAAAAAAAAAAAAAAAAAAAA AAAJBBYAOHgAANbIAADWyAAADz0AAAAAAACjAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD//w8AAAAA AAAAAAD//w8AAAAAAAAAAAD//w8AAAAAAAAAAAAAAAAAAAAAALcAAAAAAFoNAAAAAAAAWg0AAJ0a AAAAAAAAnRoAAAAAAACdGgAAAAAAAJ0aAAAAAAAAnRoAABQAAAAAAAAAAAAAAP////8AAAAAsRoA AAAAAACxGgAAAAAAALEaAAA4AAAA6RoAAAwAAAD1GgAAxAAAALEaAAAAAAAA6lkAAC4CAAC5GwAA AAAAALkbAAA6AAAA8xsAAAAAAADzGwAAAAAAAPMbAAAAAAAAUx0AAAAAAABTHQAAAAAAAFMdAAAA AAAAjVkAAAIAAACPWQAAAAAAAI9ZAAAAAAAAj1kAAAAAAACPWQAAAAAAAI9ZAAAAAAAAj1kAAAAA AAAYXAAAogIAALpeAABOAAAAj1kAABUAAAAAAAAAAAAAAAAAAAAAAAAAnRoAAAAAAABTHQAAAAAA AAAAAAAAAAAAAAAAAAAAAABTHQAAAAAAAFMdAAAAAAAAUx0AAAAAAABTHQAAAAAAAI9ZAAAAAAAA AAAAAAAAAACdGgAAAAAAAJ0aAAAAAAAA8xsAAAAAAAAAAAAAAAAAAPMbAABgAQAApFkAABYAAAA7 LAAAAAAAADssAAAAAAAAOywAAAAAAABTHQAAhgIAAJ0aAAAAAAAA8xsAAAAAAACdGgAAAAAAAPMb AAAAAAAAjVkAAAAAAAAAAAAAAAAAADssAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAUx0AAAAAAACNWQAAAAAAAAAAAAAAAAAAOywAAAAAAAA7LAAA pgEAAEVTAAAQAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA5VYAAAAAAADzGwAAAAAAAP////8AAAAAEIjTave6 zwEAAAAAAAAAALEaAAAAAAAA2R8AAPoGAABVVgAAJAAAAAAAAAAAAAAAeVkAABQAAAC6WQAAMAAA AOpZAAAAAAAAeVYAAGwAAAAIXwAAAAAAANMmAABoBQAACF8AAEgAAADlVgAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADl VgAAFAAAAAhfAAAAAAAAAAAAAAAAAACdGgAAAAAAAPlWAACAAgAAUx0AAAAAAABTHQAAAAAAADss AAAAAAAAUx0AAAAAAABTHQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAUx0A AAAAAABTHQAAAAAAAFMdAAAAAAAAj1kAAAAAAACPWQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAOywAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFMdAAAA AAAAUx0AAAAAAABTHQAAAAAAAOpZAAAAAAAAUx0AAAAAAABTHQAAAAAAAFMdAAAAAAAAUx0AAAAA AAAAAAAAAAAAAP////8AAAAA/////wAAAAD/////AAAAAAAAAAAAAAAA/////wAAAAD/////AAAA AP////8AAAAA/////wAAAAD/////AAAAAP////8AAAAA/////wAAAAD/////AAAAAP////8AAAAA /////wAAAAD/////AAAAAP////8AAAAA/////wAAAAD/////AAAAAAhfAAAAAAAAUx0AAAAAAABT HQAAAAAAAFMdAAAAAAAAUx0AAAAAAABTHQAAAAAAAFMdAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABTHQAAAAAAAFMdAAAAAAAAUx0A AAAAAABaDQAACQwAAGMZAAA6AQAABQASAQAACQQECAEEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0NDVNl Y2F1dGggICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgIEguIFJhZmllZQ1JTlRFUk5FVC1EUkFGVCAgICAgICAgICAgICAgICAgICAgICBIdWF3ZWkg VGVjaG5vbG9naWVzIER1ZXNzZWxkb3JmIEdtYkgNSW50ZW5kZWQgU3RhdHVzOiBJbmZvcm1hdGlv bmFsIFRyYWNrICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgDUV4cGlyZXM6IEZl YnJ1YXJ5IDE4LCAyMDE1ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIEF1Z3VzdCAxOCwg MjAxNA0NDSAgICAgICAgICAgICAgICAgICAgU2VjYXV0aCBVc2VjYXNlcyBhbmQgUmVxdWlyZW1l bnRzDSAgICAgICAgICAgICAgICAgIDxkcmFmdC1yYWZpZWUtc2VjYXV0aC11c2VjYXNlLTAwLnR4 dD4NDUFic3RyYWN0DQ0gICBUaGlzIGRvY3VtZW50IGV4cGxhaW5zIHRoZSB1c2UgY2FzZXMgYW5k IHJlcXVpcmVtZW50cyBmb3Igc2VjdXJlIA0gICBhdXRoZW50aWNhdGlvbiBpbiBvdGhlciBsYXll cnMgYWJvdmUgdGhlIG5ldHdvcmsgbGF5ZXIsIGUuZy4gYW4gDSAgIGFwcGxpY2F0aW9uIGxheWVy IGFuZCB0aGUgdXNlIG9mIG5ldHdvcmsgbGF5ZXIgc2VjdXJpdHkgYXBwcm9hY2hlcyANICAgZm9y IHRoaXMgcHVycG9zZS4gSXQgYWxzbyBpbnRyb2R1Y2VzIHRoZSByZXF1aXJlbWVudCBmb3IgcHJp dmFjeSANICAgY29uc2lkZXJhdGlvbi4gDQ0NDVN0YXR1cyBvZiB0aGlzIE1lbW8NDSAgIFRoaXMg SW50ZXJuZXQtRHJhZnQgaXMgc3VibWl0dGVkIGluIGZ1bGwgY29uZm9ybWFuY2Ugd2l0aCB0aGUg DSAgIHByb3Zpc2lvbnMgb2YgQkNQIDc4IGFuZCBCQ1AgNzkuIA0NICAgSW50ZXJuZXQtRHJhZnRz IGFyZSB3b3JraW5nIGRvY3VtZW50cyBvZiB0aGUgSW50ZXJuZXQgRW5naW5lZXJpbmcgDSAgIFRh c2sgRm9yY2UgKElFVEYpLiBOb3RlIHRoYXQgb3RoZXIgZ3JvdXBzIG1heSBhbHNvIGRpc3RyaWJ1 dGUgd29ya2luZyANICAgZG9jdW1lbnRzIGFzIEludGVybmV0LURyYWZ0cy4gVGhlIGxpc3Qgb2Yg Y3VycmVudCBJbnRlcm5ldC1EcmFmdHMgaXMgDSAgIGF0IGh0dHA6Ly9kYXRhdHJhY2tlci5pZXRm Lm9yZy9kcmFmdHMvY3VycmVudC4gDQ0gICBJbnRlcm5ldC1EcmFmdHMgYXJlIGRyYWZ0IGRvY3Vt ZW50cyB2YWxpZCBmb3IgYSBtYXhpbXVtIG9mIHNpeCBtb250aHMgDSAgIGFuZCBtYXkgYmUgdXBk YXRlZCwgcmVwbGFjZWQsIG9yIG9ic29sZXRlZCBieSBvdGhlciBkb2N1bWVudHMgYXQgYW55IA0g ICB0aW1lLiBJdCBpcyBpbmFwcHJvcHJpYXRlIHRvIHVzZSBJbnRlcm5ldC1EcmFmdHMgYXMgcmVm ZXJlbmNlIA0gICBtYXRlcmlhbCBvciB0byBjaXRlIHRoZW0gb3RoZXIgdGhhbiBhcyAid29yayBp biBwcm9ncmVzcy4iIA0NICAgVGhpcyBJbnRlcm5ldC1EcmFmdCB3aWxsIGV4cGlyZSBvbiBGZWJy dWFyeSAxOCwgMjAxNS4gDQ0gICANDQ0NQ29weXJpZ2h0IE5vdGljZQ0NICAgQ29weXJpZ2h0IChj KSAyMDE0IElFVEYgVHJ1c3QgYW5kIHRoZSBwZXJzb25zIGlkZW50aWZpZWQgYXMgdGhlIA0gICBk b2N1bWVudCBhdXRob3JzLiBBbGwgcmlnaHRzIHJlc2VydmVkLiBUaGlzIGRvY3VtZW50IGlzIHN1 YmplY3QgdG8gDSAgIEJDUCA3OCBhbmQgdGhlIElFVEYgVHJ1c3QncyBMZWdhbCBQcm92aXNpb25z IFJlbGF0aW5nIHRvIElFVEYgDSAgIERvY3VtZW50cyAoaHR0cDovL3RydXN0ZWUuaWV0Zi5vcmcv bGljZW5zZS1pbmZvKSBpbiBlZmZlY3Qgb24gdGhlIA0gICBkYXRlIG9mIHB1YmxpY2F0aW9uIG9m IHRoaXMgZG9jdW1lbnQuIFBsZWFzZSByZXZpZXcgdGhlc2UgZG9jdW1lbnRzIA0gICBjYXJlZnVs bHksIGFzIHRoZXkgZGVzY3JpYmUgeW91ciByaWdodHMgYW5kIHJlc3RyaWN0aW9ucyB3aXRoIHJl c3BlY3QgDSAgIHRvIHRoaXMgZG9jdW1lbnQuIENvZGUgQ29tcG9uZW50cyBleHRyYWN0ZWQgZnJv bSB0aGlzIGRvY3VtZW50IG11c3QgDSAgIGluY2x1ZGUgU2ltcGxpZmllZCBCU0QgTGljZW5zZSB0 ZXh0IGFzIGRlc2NyaWJlZCBpbiBTZWN0aW9uIDQuZSBvZiANDQ1SYWZpZWUgICAgICAgIEV4cGly ZXMgRmVicnVhcnkgMTgsIDIwMTUgICAgICAgICAgICAgICAgICAgICAgICAgW1BhZ2UgMV0NDUlO VEVSTkVUIERSQUZUICAgICAgICAgICAgICAgICAgICAgIHNlY2F1dGggdXNlY2FzZXMgICAgIEF1 Z3VzdCAxOCwgMjAxNA0NICAgdGhlIFRydXN0IExlZ2FsIFByb3Zpc2lvbnMgYW5kIGFyZSBwcm92 aWRlZCB3aXRob3V0IHdhcnJhbnR5IGFzIA0gICBkZXNjcmliZWQgaW4gdGhlIFNpbXBsaWZpZWQg QlNEIExpY2Vuc2UuIA0NDQ1UYWJsZSBvZiBDb250ZW50cw0NICAgMS4gIEludHJvZHVjdGlvbiAg IC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuICAzDSAgIDIu ICBUZXJtaW5vbG9neSAgLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4g LiAuIC4gLiAgNA0gICAzLiAgVXNlIGNhc2VzICAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4g LiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gIDQNICAgICAzLjEuICBBdXRoZW50aWNhdGlvbi9BdXRo b3JpemF0aW9uIG9mIGEgVXNlciB0byBhIERldmljZSAgIC4gLiAuICA0DSAgICAgICAzLjEuMS4g IEJpb21ldHJpYyBBdXRoZW50aWNhdGlvbiAgIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAg NA0gICAgICAgICAzLjEuMS4xLiAgQWR2YW50YWdlcyAgIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAu IC4gLiAuIC4gLiAuIC4gIDQNICAgICAgICAgMy4xLjEuMi4gIERpc2FkdmFudGFnZXMgIC4gLiAu IC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuICA0DSAgICAgICAzLjEuMi4gIFBhc3N3b3Jk IEF1dGhlbnRpY2F0aW9uICAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAgNQ0gICAgICAg ICAzLjEuMi4xLiAgQWR2YW50YWdlcyAgIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4g LiAuIC4gIDUNICAgICAgICAgMy4xLjIuMi4gIERpc2FkdmFudGFnZXMgIC4gLiAuIC4gLiAuIC4g LiAuIC4gLiAuIC4gLiAuIC4gLiAuICA1DSAgICAgICAzLjEuMy4gIEV4dGVybmFsIEhhcmR3YXJl IEF1dGhlbnRpY2F0aW9uICAgLiAuIC4gLiAuIC4gLiAuIC4gLiAgNQ0gICAgICAgICAzLjEuMy4x LiAgQWR2YW50YWdlcyAgIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gIDUN ICAgICAgICAgMy4xLjMuMi4gIERpc2FkdmFudGFnZXMgIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAu IC4gLiAuIC4gLiAuICA2DSAgICAgICAzLjEuNC4gIFByb3h5IFNlcnZlciBTY2VuYXJpbyAgLiAu IC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAgNg0gICAgICAgMy4xLjUuICBOQVQgU2NlbmFy aW8gICAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gIDYNICAgICAgIDMu MS42LiAgVmFsaWQgSVAgYWRkcmVzcyAgIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4g LiAuICA2DSAgICAgMy4yLiAgQXV0aGVudGljYXRpb24gYW5kIEF1dGhvcml6YXRpb24gb2YgdHdv IERldmljZXMgIC4gLiAuIC4gLiAgNg0gICAgICAgMy4yLjEuICBBIHByb3h5IHNlcnZlciAgIC4g LiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gIDYNICAgICAgIDMuMi4yLiAgTm8g SW50ZXJtZWRpYXRlIERldmljZSBTY2VuYXJpbyAgLiAuIC4gLiAuIC4gLiAuIC4gLiAuICA2DSAg ICAgMy4zLiAgQXV0aGVudGljYXRpb24gYW5kIEF1dGhvcml6YXRpb24gb2YgVmlydHVhbCBEZXZp Y2VzICAgIC4gLiAgNg0gICAgICAgMy4zLjEuICBPcGVuZmxvdyB0byB2aXJ0dWFsIG5vZGUgYXV0 aGVudGljYXRpb24gICAgLiAuIC4gLiAuIC4gIDYNICAgICAgIDMuMy4yLiAgU0ROIGNvbnRyb2wg cGxhbmUgYXV0aGVudGljYXRpb24gICAuIC4gLiAuIC4gLiAuIC4gLiAuICA3DSAgIDQuICBSZXF1 aXJlbWVudHMgICAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4g LiAgNw0gICAgIDQuMS4gIEZ1bmN0aW9uYWxpdHkgIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4g LiAuIC4gLiAuIC4gLiAuIC4gIDcNICAgICA0LjIuICBJbXBsZW1lbnRhdGlvbiBhbmQgT3BlcmF0 aW9uYWwgVmlldyAgLiAuIC4gLiAuIC4gLiAuIC4gLiAuICA3DSAgIDUuICBTZWN1cml0eSBDb25z aWRlcmF0aW9ucyAgLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAgOA0gICA2 LiAgSUFOQSBDb25zaWRlcmF0aW9ucyAgLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAu IC4gLiAuIC4gIDgNICAgNy4gIFJlZmVyZW5jZXMgLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAu IC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuICA4DSAgICAgNy4xLiAgTm9ybWF0aXZlICAuIC4gLiAu IC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAgOA0gICAgIDcuMi4gIElu Zm9ybWF0aXZlICAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4g IDgNICAgQXV0aG9ycycgQWRkcmVzc2VzIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4g LiAuIC4gLiAuIC4gLiAuICA5DQ0NDQ0NDQ0NDQ0NDQ0NDQ0NUmFmaWVlICAgICAgICBFeHBpcmVz IEZlYnJ1YXJ5IDE4LCAyMDE1ICAgICAgICAgICAgICAgICAgICAgICAgIFtQYWdlIDJdDQ1JTlRF Uk5FVCBEUkFGVCAgICAgICAgICAgICAgICAgICAgICBzZWNhdXRoIHVzZWNhc2VzICAgICBBdWd1 c3QgMTgsIDIwMTQNDQ0xLiAgSW50cm9kdWN0aW9uIA0NICAgVG9kYXksIHZhcmlvdXMgYXV0aGVu dGljYXRpb24sIGF1dGhvcml6YXRpb24gYW5kIGFjY291bnRpbmcgDSAgIGFwcHJvYWNoZXMgYXJl IGF2YWlsYWJsZSB0byBiZSB1c2VkIGZvciBkaWZmZXJlbnQgcHVycG9zZXMuIFNvbWUgDSAgIGV4 YW1wbGVzIG9mIHRoZXNlIGFwcHJvYWNoZXMgYXJlIFJlbW90ZSBBdXRoZW50aWNhdGlvbiBEaWFs LUluIFVzZXIgDSAgIFNlcnZpY2UgKFJBRElVUykgW1JGQzY5MjldLCBIb3N0IElkZW50aXR5IFBy b3RvY29sIChISVApIFtSRkM0NDIzXSwgDSAgIE9wZW4gU3RhbmRhcmQgZm9yIEF1dGhvcml6YXRp b24gKE9BdXRoKSBbUkZDNjc0OV0gYW5kIERpYW1ldGVyIA0gICBbUkZDNjczM10uIA0NICAgVXN1 YWxseSwgSW50ZXJuZXQgUHJvdG9jb2wgc2VjdXJpdHkgKElQc2VjKSBbUkZDIDQzMDFdLCBUcmFu c3BvcnQgDSAgIExheWVyIFNlY3VyaXR5IChUTFMpIFtSRkM1MjQ2XSBvciBTZWN1cmUgU29ja2V0 IExheWVyIChTU0wpIFtSRkM2MTAxXSANICAgaXMgdXNlZCB0byBzZWN1cmUgdGhlc2UgY29tbXVu aWNhdGlvbnMgYW5kIHByb3ZpZGUgZGF0YSANICAgY29uZmlkZW50aWFsaXR5IGZvciB1c2Vycy4g V2hlbiBJUHNlYyBpcyBpbiB1c2UsIHRoZSBrZXkgbWFuYWdlbWVudCANICAgbWlnaHQgYmUgYSBw cm9ibGVtLiBXaGVuIFNTTCBvciBUTFMgaXMgaW4gdXNlIGVpdGhlciB0aGVyZSBzaG91bGQgYmUg DSAgIGEgaGFyZGNvcHkgb2YgY2VydGlmaWNhdGVzIGF2YWlsYWJsZSBvbiBhIG5vZGUgb3IgdGhl cmUgc2hvdWxkIGJlIGEgDSAgIENlcnRpZmljYXRlIEF1dGhvcml0eSAoQ0EpIHRvIHNpZ24gdGhp cyBjZXJ0aWZpY2F0aW9uIHRvIGJlIGVhc2lseSANICAgdmVyaWZpZWQgb24gbm9kZXMgd2hpY2gg c3VwcG9zZSB0byB1c2UgdGhpcyBzZXJ2aWNlLiBUaGUgcHJvYmxlbSB3aXRoIA0gICB0aGUgZm9y bWVyIGFwcHJvYWNoIG1pZ2h0IGJlIHByaXZhY3kgd2hlbiBhIG5vZGUgbmVlZHMgdG8gYWxzbyAN ICAgcHJvY2VzcyBrZXkgZXhjaGFuZ2UuIFdoZW4gdGhpcyBpcyBub3QgcmVxdWlyZWQsIHRoZSBu dW1iZXIgb2Yga2V5cyANICAgdGhhdCBpcyBuZWVkZWQgdG8gYmUgc3RvcmVkIGluIG5vZGU/cyBt ZW1vcnkgKHRoZSBhc3N1bXB0aW9uIGlzIHRoYXQgDSAgIGEgbm9kZSBtaWdodCBuZWVkIHRvIGNv bW11bmljYXRlIHdpdGggZGlmZmVyZW50IHNlcnZpY2UgcHJvdmlkZXIgYW5kIA0gICBiZSBhdXRo ZW50aWNhdGVkIGFnYWluc3QgdGhlbS4pIG1pZ2h0IGJlIGEgcHJvYmxlbSwgZXNwZWNpYWxseSBv biANICAgbm9kZXMgd2l0aCBsaW1pdGVkIHJlc291cmNlcy4gQW5vdGhlciBwcm9ibGVtIHdpdGgg aGFyZGNvcHkgb2YgdGhpcyANICAga2V5IHdvdWxkIGJlIG5vZGUgc3RvbGVuLiBJbiBvdGhlciB3 b3Jkcywgd2hlbiBhbiBhdHRhY2tlciBzdGVhbHMgYSANICAgZGV2aWNlIHdpdGggdGhlIGhhcmRj b3B5IG9mIGEga2V5IGF2YWlsYWJsZSB0aGVyZSwgaGUgbWlnaHQgYmUgYWJsZSANICAgdG8gdXNl IHRoZSBvd25lcj9zIGNyZWRlbnRpYWwgdG8gaGF2ZSB1bmF1dGhvcml6ZWQgYWNjZXNzIHRvIHRo ZSANICAgdXNlcj9zIHJlc291cmNlcyBhbmQgaGFybSBwcml2YWN5IGFuZCBzZWN1cml0eSBvZiB0 aGlzIHVzZXIgb3IgYSANICAgdGFyZ2V0IG5ldHdvcmsuIFRoaXMgaXMgZXNwZWNpYWxseSBhIHJl YWwgcHJvYmxlbSByZWNlbnRseSBiZWNhdXNlIA0gICBtYW55IHZlbmRvcnMgdXNlIHRoaXMgYXBw cm9hY2guIA0NICAgVGhlIHByb2JsZW0gd2l0aCBsYXR0ZXIgYXBwcm9hY2ggbWlnaHQgYmUgY29z dCBvZiBoYXZpbmcgDSAgIGNlcnRpZmljYXRpb24gc2lnbmVkIGJ5IENBcy4gVGhpcyBpcyBlc3Bl Y2lhbGx5IHVucHJhY3RpY2FsIGlmIGV2ZXJ5IA0gICBzaW5nbGUgbm9kZSB3aGljaCBzdXBwb3Nl ZCB0byBiZSBhdXRoZW50aWNhdGVkIGFnYWluc3QgYW5vdGhlciBub2RlIA0gICBuZWVkcyB0byBo YXZlIGEgY2VydGlmaWNhdGlvbi4gVGhlIG90aGVyIHByb2JsZW0gd291bGQgYmUgdGhlIA0gICBs aWtlbGlob29kIG9mIGdvdmVybm1lbnQ/cyBzdXJ2ZWlsbGFuY2UuIA0NICAgVGhpcyBkb2N1bWVu dCBhZGRyZXNzZXMgdGhlIGZvbGxvd2luZyBwcm9ibGVtczogDQ0gICAtIHNlbGYgY2VydGlmaWNh dGlvbiBhbmQgYXZvaWRpbmcgaWRlbnRpdHkgc3Bvb2Zpbmcgb2YgYSBub2RlICggZm9yIA0gICBl eGFtcGxlLCBhIHNlbGYgY2VydGlmaWVkIG1haWwgc2VydmVyKSANDSAgIC0gU2VjdXJlIGF1dGhl bnRpY2F0aW9uIA0NICAgLSBQcml2YWN5IGFuZCBkYXRhIGNvbmZpZGVudGlhbGl0eSANDSAgIC0g YXV0aGVudGljYXRpb24gb2YgZGV2aWNlcyBpbiBjYXNlIG9mIHByb3h5IHNlcnZlcnMgDQ0gICAt IGV0Yy4gDQ0gICBUaGVyZWZvcmUsIHRoZSBwdXJwb3NlIG9mIHRoaXMgZG9jdW1lbnQgaXMgdG8g ZGVmaW5lIHRoZSBwcm9ibGVtIA0gICBzdGF0ZW1lbnQgYW5kIGlkZW50aWZpZXMgdGhlIHJlcXVp cmVtZW50cyBmb3IgYSByb2J1c3QgZWFzeSBzZWN1cmUgDSAgIGF1dGhlbnRpY2F0aW9uIGFuZCBh dXRob3JpemF0aW9uIG9mIG5vZGVzIHVzaW5nIGEgY29tYmluYXRpb24gb2YgDQ0NUmFmaWVlICAg ICAgICBFeHBpcmVzIEZlYnJ1YXJ5IDE4LCAyMDE1ICAgICAgICAgICAgICAgICAgICAgICAgIFtQ YWdlIDNdDQ1JTlRFUk5FVCBEUkFGVCAgICAgICAgICAgICAgICAgICAgICBzZWNhdXRoIHVzZWNh c2VzICAgICBBdWd1c3QgMTgsIDIwMTQNDSAgIG5ldHdvcmsgbGF5ZXIgYW5kIGFwcGxpY2F0aW9u IGxheWVyIHNlY3VyaXR5IGFwcHJvYWNoZXMuIA0NDTIuICBUZXJtaW5vbG9neSANDSAgIERldmlj ZTogYW55IGRpZ2l0YWwgaGFyZHdhcmUgdGhhdCBoYXMgY29tbXVuaWNhdGlvbiBhYmlsaXR5LiBB IGRldmljZSANICAgaXMgbW9yZSBnZW5lcmFsIHRoYW4gYSBub2RlLiANDSAgIE5vZGU6IHJvdXRl cnMgYW5kIGhvc3RzIGluIGEgbmV0d29yayANDSAgIEludGVybWVkaWF0ZSBEZXZpY2U6IGEgcHJv eHkgc2VydmVyIG9yIGEgTkFUIGRldmljZSBvciBhbnkgb3RoZXIgbm9kZSANICAgdGhhdCBpbnRl cmNlcHQgdGhlIGNvbW11bmljYXRpb24gaW4gbm8gbWFsaWNpb3VzIHdheSBhbmQgYnkgcHVycG9z ZSANDSAgIEF1dGhlbnRpY2F0aW9uOiBBbiBhY3Qgb2YgdmVyaWZ5aW5nIGEgdXNlciANDSAgIEF1 dGhvcml6YXRpb246IGFjdCBvZiBkZXRlcm1pbmluZyB3aGV0aGVyIHJlcXVlc3RpbmcgZW50aXR5 IGlzIA0gICBhbGxvd2VkIGFjY2VzcyB0byBhIHJlc291cmNlIA0NICAgQWNjb3VudGluZzogYWN0 IG9mIGNvbGxlY3RpbmcgaW5mbyBvbiByZXNvdXJjZSB1c2FnZSBhbmQgbG9nZ2luZyB1c2VyIA0g ICBhY3Rpdml0aWVzIGFmdGVyIGF1dGhvcml6YXRpb24gc3RlcC4gDQ0gICBUQkQgDQ0NMy4gIFVz ZSBjYXNlcyANDSAgIFRoZSBmb2xsb3dpbmcgc3Vic2VjdGlvbnMgZXhwbGFpbnMgZGlmZmVyZW50 IHVzZSBjYXNlIHNjZW5hcmlvcyANDQ0zLjEuICBBdXRoZW50aWNhdGlvbi9BdXRob3JpemF0aW9u IG9mIGEgVXNlciB0byBhIERldmljZSANDSAgIFVzdWFsbHkgZm9yIGF1dGhlbnRpY2F0aW9uIG9m IGEgdXNlciwgYmlvbWV0cmljIHNhbXBsZXMgb3IgYSB1c2VybmFtZSANICAgaXMgaW4gdXNlLiBV c2luZyBlYWNoIG9mIHRoZXNlIGFwcHJvYWNoZXMgaGFzIHNvbWUgYWR2YW50YWdlcyBhbmQgDSAg IGRpc2FkdmFudGFnZXMuIA0NDTMuMS4xLiAgQmlvbWV0cmljIEF1dGhlbnRpY2F0aW9uIA0NDTMu MS4xLjEuICBBZHZhbnRhZ2VzIA0NICAgLSBpdCBpcyBhbHdheXMgd2l0aCB0aGUgdXNlciwgZGlz c2ltaWxhciB0byBwYXNzd29yZHMgdGhleSBjYW5ub3QgYmUgDSAgIGZvcmdvdHRlbiANDSAgIC0g SXQgbWlnaHQgaWRlbnRpZnkgYSBwZXJzb24gc28gdGhhdCBtYW55IHNlcnZpY2VzIGNhbiBiZSBv ZmZlcmVkIHRvIA0gICB0aGlzIHVzZXIgcmVtb3RlbHkuIA0NDTMuMS4xLjIuICBEaXNhZHZhbnRh Z2VzIA0NICAgLSBUaGV5IGNhbiBiZSBzdG9sZW4gDQ0gICBBbiBhdHRhY2tlciBjYW4gc3RvbGUg dGhlIGZpbmdlciBwcmludCBvZiBhIHVzZXIgd2hlbiBoZSB0b3VjaGVzLCBmb3IgDQ0NUmFmaWVl ICAgICAgICBFeHBpcmVzIEZlYnJ1YXJ5IDE4LCAyMDE1ICAgICAgICAgICAgICAgICAgICAgICAg IFtQYWdlIDRdDQ1JTlRFUk5FVCBEUkFGVCAgICAgICAgICAgICAgICAgICAgICBzZWNhdXRoIHVz ZWNhc2VzICAgICBBdWd1c3QgMTgsIDIwMTQNDSAgIGV4YW1wbGUsIGEgZ2xhc3MuIA0NICAgLSBU aGV5IHdpbGwgbmV2ZXIgY2hhbmdlIA0NICAgV2hlbiB0aGV5IGFyZSBzdG9sZW4sIGRpc3NpbWls YXIgdG8gcGFzc3dvcmRzLCBpdCBpcyBub3QgcG9zc2libGUgdG8gDSAgIGNoYW5nZSB0aGVtIHNp bmNlIHRoZXkgYXJlIGEgc2NhbiBzYW1wbGUgcGFydCBvZiBhIHVzZXIncyBib2R5IA0NICAgLSBU aGV5IG1pZ2h0IGNhdXNlIHRocmVhdCBmb3IgdGhlIHVzZXIgDQ0gICBXaGVuIGEgY3JpbWluYWwg a25vdyB0aGF0IGV2ZXJ5IHBhc3N3b3JkIGlzIHRoZSBiaW9tZXRyaWMgaW5mb3JtYXRpb24gDSAg IG9mIGEgdXNlciwgaGUgY2FuIGtpZG5hcCB0aGlzIHBlcnNvbiBhbmQgYWNjZXNzIHRvIGFsbCBp bmZvcm1hdGlvbiANICAgdGhhdCB1c2VzIHRoaXMga2luZCBvZiBiaW9tZXRyaWMgc2FtcGxlcy4g DQ0gICBJdCBjYW4gYWxzbyBlbmNvdXJhZ2UgY3JpbWluYWxzIHRvIGtpbGwgYSBwZXJzb24gdG8g YWNjZXNzIHRvIA0gICBiaW9tZXRyaWMgc2FtcGxlcyEgDQ0NMy4xLjIuICBQYXNzd29yZCBBdXRo ZW50aWNhdGlvbiANDQ0zLjEuMi4xLiAgQWR2YW50YWdlcyANDSAgIC0gQSB1c2VyIGNhbiBjaGFu Z2UgaXQgd2hlbiBpdCBpcyBzdG9sZW4gDQ0gICAtIEEgdXNlciBjYW4gdXNlIGRpZmZlcmVudCB1 c2VybmFtZSBhbmQgcGFzc3dvcmRzIGluIGRpZmZlcmVudCANICAgc3lzdGVtcyANDSAgIC0gSXQg bWlnaHQgbm90IGlkZW50aWZ5IGEgcGVyc29uIA0NDTMuMS4yLjIuICBEaXNhZHZhbnRhZ2VzIA0N ICAgLSBJdCBpcyBub3QgZWFzeSB0byBtZW1vcml6ZSBvbmUgdG8gbWFueSBwYXNzd29yZHMgZm9y IGRpZmZlcmVudCANICAgc3lzdGVtcyAoZmluZGluZyBhIHN0cm9uZyBwYXNzd29yZCB0aGF0IGNh biBiZSBtZW1vcml6ZWQgZWFzaWx5LikgDQ0gICAtIEl0IGNhbiBiZSBoYWNrZWQgDQ0gICAtIFdo ZW4gYSB1c2VyIHVzZXMgb25lIHBhc3N3b3JkIGZvciBhbGwgc3lzdGVtcywgdGhlbiBoZSBpcyBw cm9uZSB0byANICAgZGF0YSBsb3NzIG9yIHByaXZhY3kgYXR0YWNrLiANDQ0zLjEuMy4gIEV4dGVy bmFsIEhhcmR3YXJlIEF1dGhlbnRpY2F0aW9uIA0NICAgSW4gcmVjZW50IHllYXJzLCBpdCBpcyBj b21tb24gdG8gdXNlIHRoZSBleHRlcm5hbCBkZXZpY2VzIHN1Y2ggYXMgDSAgIGNoaXAgY2FyZHMs IFVTQnMsIGV0Yy4gdGhhdCBzdG9yZXMgc29tZSBzZWNyZXQga2V5cyB0byBhdXRob3JpemUgYSAN ICAgdXNlciB0byBhY2Nlc3Mgc29tZSBzeXN0ZW1zIG9yIGluZm9ybWF0aW9uIG92ZXIgdGhlIGlu dGVybmV0IG9yIG92ZXIgDSAgIHRoZSBuZXR3b3JrLiANDQ0zLjEuMy4xLiAgQWR2YW50YWdlcyAN DSAgIC0gVGhlIHVzZXIgZG9lcyBub3QgbmVlZCB0byBtZW1vcml6ZSBhbnkgcGFzc3dvcmQgDQ0N DVJhZmllZSAgICAgICAgRXhwaXJlcyBGZWJydWFyeSAxOCwgMjAxNSAgICAgICAgICAgICAgICAg ICAgICAgICBbUGFnZSA1XQ0NSU5URVJORVQgRFJBRlQgICAgICAgICAgICAgICAgICAgICAgc2Vj YXV0aCB1c2VjYXNlcyAgICAgQXVndXN0IDE4LCAyMDE0DQ0NMy4xLjMuMi4gIERpc2FkdmFudGFn ZXMgDQ0gICAtIEl0IGNhbiBiZSBzdG9sZW4gDQ0gICAtIEl0IGNhbiBiZSBkYW1hZ2VkIA0NICAg VGhlcmUgYXJlIHR3byBkaWZmZXJlbnQgdXNlIGNhc2VzIHVuZGVyIHRoaXMgY2F0ZWdvcnkgdGhh dCBhcmUgDSAgIGV4cGxhaW5lZCBpbiB0aGUgZm9sbG93aW5nIHNlY3Rpb25zIA0NDTMuMS40LiAg UHJveHkgU2VydmVyIFNjZW5hcmlvIA0NICAgQWxpY2UgaXMgYmVoaW5kIGEgcHJveHkgc2VydmVy IGFuZCBhbnkgcmVxdWVzdCB0byB0aGUgZGV2aWNlIGlzIGZpcnN0IA0gICByZWNlaXZlZCBieSB0 aGUgcHJveHkgDQ0NMy4xLjUuICBOQVQgU2NlbmFyaW8gDQ0gICBBbGljZSBkb2VzIG5vdCBoYXZl IGFueSB2YWxpZCBJUCBhZGRyZXNzIGFuZCBuZWVkcyB0byBiZSANICAgYXV0aGVudGljYXRlZCBv biBhbiBhcHBsaWNhdGlvbiBzZXJ2ZXIgDQ0NMy4xLjYuICBWYWxpZCBJUCBhZGRyZXNzIA0NICAg QWxpY2UgaGFzIGEgdmFsaWQgSVAgYWRkcmVzcyBhbmQgbmVlZHMgdG8gYmUgYXV0aGVudGljYXRl ZCBvbiBhbiANICAgYXBwbGljYXRpb24gc2VydmVyLiANDQ0zLjIuICBBdXRoZW50aWNhdGlvbiBh bmQgQXV0aG9yaXphdGlvbiBvZiB0d28gRGV2aWNlcyANDQ0zLjIuMS4gIEEgcHJveHkgc2VydmVy ICANDSAgIEZvciBleGFtcGxlLCBub2RlIEEgZXN0YWJsaXNoZXMgU2Vzc2lvbiBJbml0aWF0aW9u IFByb3RvY29sIChTSVApIHRvIA0gICBub2RlIEIuIFRoZXJlIGlzIFNJUCBwcm94eSBpbiBiZXR3 ZWVuLiBTSVAgcHJveHkgcmVjZWl2ZXMgbWVzc2FnZXMgDSAgIGZyb20gbm9kZSBBLiBTSVAgcHJv eHkgbmVlZHMgdG8gYXV0aGVudGljYXRlIG5vZGUgQS4gQWZ0ZXIgdGhpcyBzdGVwIA0gICBTSVAg cHJveHkgZm9yd2FyZHMgYWxsIHBhY2tldHMgZnJvbSBub2RlIEIuIE5vZGUgQiBhdXRoZW50aWNh dGVzIFNJUCANICAgcHJveHkgYW5kIGFjY2VwdHMgYWxsIHBhY2tldHMgaW50ZXJjZXB0cyBieSBT SVAgcHJveHkuIA0NDTMuMi4yLiAgTm8gSW50ZXJtZWRpYXRlIERldmljZSBTY2VuYXJpbyANDQ0z LjMuICBBdXRoZW50aWNhdGlvbiBhbmQgQXV0aG9yaXphdGlvbiBvZiBWaXJ0dWFsIERldmljZXMg IA0NICAgVGhpcyBzZWN0aW9uIGRlc2NyaWJlcyB0aGUgYXV0aGVudGljYXRpb24gb2YgZGlmZmVy ZW50IHZpcnR1YWwgDSAgIHByb3RvY29sIGluIFNETiB0ZWNobmlxdWVzIHRvIGNvbnRyb2wgcGxh bmUuIA0NDTMuMy4xLiAgT3BlbmZsb3cgdG8gdmlydHVhbCBub2RlIGF1dGhlbnRpY2F0aW9uICAN DSAgIEEgdW5pcXVlIGlkZW50aWZpZXIgaXMgdXNlZCB0byBhdXRoZW50aWNhdGUgYW4gb3BlbmZs b3cgb24gYSB2aXJ0dWFsIA0NDVJhZmllZSAgICAgICAgRXhwaXJlcyBGZWJydWFyeSAxOCwgMjAx NSAgICAgICAgICAgICAgICAgICAgICAgICBbUGFnZSA2XQ0NSU5URVJORVQgRFJBRlQgICAgICAg ICAgICAgICAgICAgICAgc2VjYXV0aCB1c2VjYXNlcyAgICAgQXVndXN0IDE4LCAyMDE0DQ0gICBu b2RlLiBUaGlzIHZpcnR1YWwgbm9kZSAobGlrZSBhIHN3aXRjaCBvciBhIHJvdXRlcikgYWxsb3dz IHRoaXMgDSAgIG9wZW5mbG93IHRvIGJlIGV4ZWN1dGVkIHdoZW4gaXQgY2FuIGZpbmQgdGhpcyB1 bmlxdWUgaWRlbnRpZmllciBpbiANICAgaXRzIGFjY2VzcyBsaXN0LiANDQ0zLjMuMi4gIFNETiBj b250cm9sIHBsYW5lIGF1dGhlbnRpY2F0aW9uICANDSAgIEJlZm9yZSBhbnkgcnVsZSBjYW4gYmUg cHJvcGFnYXRlZCBvdmVyIGFsbCBkaXN0cmlidXRlZCBjb250cm9sIHBsYW5lIA0gICB2aWEgdGhl IGNlbnRyYWxpemVkIGNvbnRyb2wgcGxhbmUsIHRoZSBzZW5kZXIgb2YgdGhpcyBuZXcgcnVsZSAo b25lIA0gICBvZiB0aGUgU0ROIGNvbnRyb2wgcGxhbmUpIHNob3VsZCBiZSBhdXRoZW50aWNhdGVk IG9uIHRoZSBjZW50cmFsaXplZCANICAgY29udHJvbCBwbGFuZSAoY29udHJvbGxlcikgdG8gYXZv aWQgcHJvcGFnYXRpb24gb2YgYSBtYWxpY2lvdXMgcnVsZSANICAgb24gYWxsIFNETiBkZXZpY2Vz LiANDQ00LiAgUmVxdWlyZW1lbnRzIA0NICAgVGhpcyBzZWN0aW9uIGRlZmluZXMgdGhlIHNjb3Bl IG9mIHRoaXMgZG9jdW1lbnQgYW5kIGludHJvZHVjZXMgdGhlIA0gICByZXF1aXJlbWVudCBvZiBh biBBUEkgZm9yIHRoaXMgcHJvdG9jb2wuIA0NDTQuMS4gIEZ1bmN0aW9uYWxpdHkgDQ0gICAtCU9w ZXJhdGVzIGluIGJvdGggSVB2NCBhbmQgSVB2NiBuZXR3b3JrcyANDSAgIC0JUmVxdWlyZXMgbWlu aW11bSBodW1hbiBpbnRlcmFjdGlvbiAoYXV0b21hdGVzIHRoZSBwcm9jZXNzIGFzIG11Y2ggDSAg IGFzIHBvc3NpYmxlKSANDSAgIC0JU3VwcG9ydHMgZGlmZmVyZW50IGNsaWVudHMgd2l0aCBkaWZm ZXJlbnQgcmVzb3VyY2VzIChNZW1vcnksIA0gICBCYXR0ZXJ5LCBDUFUsIGV0Yy4pID8gTGFwdG9w cywgSVBvZCwgU21hcnRwaG9uZSwgc2Vuc29yIG5vZGVzLCBjYXJzLCANICAgZXRjLiANDSAgIEdv b2QgcGVyZm9ybWFuY2UgZm9yIGNvbnN0cmFpbmVkIGRldmljZXMuIA0NICAgLQlQcm92aWRlcyBz ZWN1cml0eSBhbmQgYSB1c2VyIGRlZmluZWQgcHJpdmFjeSAoZmxleGlibGUgdG8gcG9saWN5KSAN DSAgIC0JQmUgYWJsZSB0byBhdXRoZW50aWNhdGUgYW5kIGF1dGhvcml6ZSBub2RlcyBpbiBjYXNl IHRoZXJlIGFyZSBwcm94eSANICAgc2VydmVycyBvciBvdGhlciBpbnRlcm1lZGlhdGUgbm9kZXMg aW4gdGhlIG1pZGRsZSBvZiB0aGUgDSAgIGNvbW11bmljYXRpb25zIA0NICAgLQlFbmFibGUgdGhl IHVzZSBvZiB0aGlzIGFwcHJvYWNoIGluIHZpc3VhbGl6YXRpb24gZW52aXJvbm1lbnQgYW5kIA0g ICBmb3IgdGhlIGF1dGhlbnRpY2F0aW9uIG9mIGRpZmZlcmVudCB2aXJ0dWFsIG5vZGVzIGluIGNs b3VkcyB3aGVyZSANICAgU29mdHdhcmUgRGVmaW5lZCBOZXR3b3JrIChTRE4pIG9yIE5ldHdvcmsg RnVuY3Rpb24gVmlydHVhbGl6YXRpb24gDSAgIChORlYpIHRlY2huaXF1ZXMgYXJlIGluIHVzZS4g DQ0NNC4yLiAgSW1wbGVtZW50YXRpb24gYW5kIE9wZXJhdGlvbmFsIFZpZXcgDQ0gICAtCVBsYXRm b3JtIGluZGVwZW5kZW50LiBJbiBvdGhlciB3b3Jkcywgc3VwcG9ydHMgbXVsdGlwbGUgcGxhdGZv cm1zIA0gICAoV2luZG93cywgTGludXgsIFVOSVgsIGV0Yy4pIA0NICAgLQlFYXNpbHkgaW50ZWdy YXRlIHdpdGggYW55IG90aGVyIGFwcGxpY2F0aW9uIGxheWVyIGF1dGhlbnRpY2F0aW9uIA0gICBt ZWNoYW5pc21zIA0NDQ1SYWZpZWUgICAgICAgIEV4cGlyZXMgRmVicnVhcnkgMTgsIDIwMTUgICAg ICAgICAgICAgICAgICAgICAgICAgW1BhZ2UgN10NDUlOVEVSTkVUIERSQUZUICAgICAgICAgICAg ICAgICAgICAgIHNlY2F1dGggdXNlY2FzZXMgICAgIEF1Z3VzdCAxOCwgMjAxNA0NICAgLSBQcm92 aWRlIGFuIGVhc3kgZnJhbWV3b3JrIGZvciBkaXN0cmlidXRpbmcgdW5pcXVlIGlkZW50aXR5IGJ1 dCBhdCANICAgdGhlIHNhbWUgdGltZSBhd2FyZSBvZiBwcml2YWN5LiANDSAgIC0JUHJvdmlkZSBz dXBwb3J0cyBmb3IgU29mdHdhcmUgRGVmaW5lZCBOZXR3b3JrcyAoU0ROKSANDTUuICBTZWN1cml0 eSBDb25zaWRlcmF0aW9ucw0NICAgVGhlcmUgaXMgbm8gc2VjdXJpdHkgY29uc2lkZXJhdGlvbiAN DQ0NNi4gIElBTkEgQ29uc2lkZXJhdGlvbnMNDSAgIFRoZXJlIGlzIG5vIElBTkEgY29uc2lkZXJh dGlvbiANDQ0NDQ03LiAgUmVmZXJlbmNlcw0NNy4xLiAgTm9ybWF0aXZlIFJlZmVyZW5jZXMgDQ0g ICBbUkZDNDMwMV0gS2VudCwgUy4sIFNlbywgSy4sICJTZWN1cml0eSBBcmNoaXRlY3R1cmUgZm9y IHRoZSANICAgICAgICAgICAgIEludGVybmV0IFByb3RvY29sIiwgUkZDIDQzMDEsIERlY2VtYmVy IDIwMDUuIA0NICAgW1JGQzQ0MjNdIE1vc2tvd2l0eiwgUi4sIE5pa2FuZGVyLCBQLiwgIkhvc3Qg SWRlbnRpdHkgDSAgICAgICAgICAgICBQcm90b2NvbCAoSElQKSBBcmNoaXRlY3R1cmUiLCBSRkMg NDQyMywgTWF5IDIwMDYuIA0NICAgW1JGQzQ4NDNdIE5pa2FuZGVyLCBQLiwgTGFnYW5pZXIsIEou LCBEdXBvbnQsIEYuICwgIkFuIElQdjYgDSAgICAgICAgICAgICBQcmVmaXggZm9yIE92ZXJsYXkg Um91dGFibGUgQ3J5cHRvZ3JhcGhpYyBIYXNoIElkZW50aWZpZXJzIA0gICAgICAgICAgICAgKE9S Q0hJRCkiLCBSRkMgNDg0MywgQXByaWwgMjAwNy4gDQ0gICBbUkZDNjEwMV0gRnJlaWVyLCBBLiwg S2FybHRvbiwgUC4sIEtvY2hlciwgUC4gLCAiVGhlIFNlY3VyZSANICAgICAgICAgICAgIFNvY2tl dHMgTGF5ZXIgKFNTTCkgUHJvdG9jb2wgVmVyc2lvbiAzLjAiLCBSRkMgNjEwMSwgQXVndXN0IA0g ICAgICAgICAgICAgMjAxMS4gDQ0gICBbUkZDNjczM10gRmFqYXJkbywgVi4sIEFya2tvLCBKLiwg TG91Z2huZXksIEouLCBab3JuLCBHLiwgDSAgICAgICAgICAgICAiRGlhbWV0ZXIgQmFzZSBQcm90 b2NvbCIgUkZDIDY3MzMsIE9jdG9iZXIgMjAxMi4gDQ0gICBbUkZDNjc0OV0gSGFyZHQsIEQuLCAi VGhlIE9BdXRoIDIuMCBBdXRob3JpemF0aW9uIA0gICAgICAgICAgICAgRnJhbWV3b3JrIiwgUkZD IDY3NDksIE9jdG9iZXIgMjAxMi4gDQ0gICBbUkZDNjkyOV0gRGVLb2ssIEEuLCBMaW9yLCBBLiwg IlJlbW90ZSBBdXRoZW50aWNhdGlvbiANICAgICAgICAgICAgIERpYWwtSW4gVXNlciBTZXJ2aWNl IChSQURJVVMpIFByb3RvY29sIEV4dGVuc2lvbnMiLFJGQyANICAgICAgICAgICAgIDY5MjksIEFw cmlsIDIwMTMgDQ03LjIuICBJbmZvcm1hdGl2ZSBSZWZlcmVuY2VzIA0NICAgDQ0NDQ0NUmFmaWVl ICAgICAgICBFeHBpcmVzIEZlYnJ1YXJ5IDE4LCAyMDE1ICAgICAgICAgICAgICAgICAgICAgICAg IFtQYWdlIDhdDQ1JTlRFUk5FVCBEUkFGVCAgICAgICAgICAgICAgICAgICAgICBzZWNhdXRoIHVz ZWNhc2VzICAgICBBdWd1c3QgMTgsIDIwMTQNDUF1dGhvcnMnIEFkZHJlc3Nlcw0NICAgICAgSG9z bmllaCBSYWZpZWUNICAgICAgSFVBV0VJIFRFQ0hOT0xPR0lFUyBEdWVzc2VsZG9yZiBHbWJIDSAg ICAgIFJpZXNzdHJhc3NlIDI1LCA4MDk5Mg0gICAgICBNdW5pY2gsIEdlcm1hbnkNICAgICAgUGhv bmU6ICs0OSAoMCkxNjIgMjA0IDc0IDU4DSAgICAgIEUtbWFpbDogaG9zbmllaC5yYWZpZWVAaHVh d2VpLmNvbQ0DDQ0EDQ0DDQ0EDQ0NDQ0HU2VjYXV0aCBSZXF1aXJlbWVudHMgYW5kIFVzZWNhc2Vz BwcHDQ0NDRMgREFURSBcQCAieXl5eS1NTS1kZCIgFDIwMTQtMDgtMTgVBwdQYWdlE1BBR0UUMRUs IFRvdGFsEyBOVU1QQUdFUyAgXCogQXJhYmljICBcKiBNRVJHRUZPUk1BVCAUMTIVBwcNDQ0NDQ0N DQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgAAAMIAACVCAAAqEAAAPJAAAAPRQAAEEUAABJFAAATRQAA FUUAABZFAAAYRQAAGUUAABtFAAAcRQAAHUUAAB5FAAAfRQAAQEUAAEJFAABERQAARUUAAEZFAABH RQAASEUAAF5FAABfRQAAaUUAAGpFAABsRQAAcEUAAHFFAAB1RQAAdkUAAHdFAAB4RQAAf0UAAIBF AAClRQAApkUAAKhFAACpRQAAqkUAAKxFAACtRQAArkUAAK9FAACwRQAAskUAALNFAADv2u/a79LO 0s7SztLOys7DyrzDys7KzrGqsZ6xw5exkLGesZexkLGescPKzsrOys7vAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADBVorzOAABZoZCrSAAAMFWivM4AAFmiAGw4AABcVaK8z gAAWaK8zgABtSAAEbkgABHUIAQwVaK8zgAAWaC8YlQAAFQNqAAAAABVorzOAABZoZCrSAFUIAQwV aK8zgAAWaLRbXAAADBVorzOAABZoTALkAAAGFmhMAuQAAAYWaPAiQAAADwNqAAAAABZo8CJAAFUI ASgVaNtYDgAWaNtYDgBDShQAT0oDAFFKAwBeSgMAYUoUAG1IBwRzSAcEACAVaNtYDgAWaNtYDgBD ShQAT0oDAFFKAwBeSgMAYUoUADEACAAAAQgAAAIIAAADCAAATAgAAJUIAADeCAAAJwkAACgJAAAp CQAAXwkAAJcJAACYCQAAoQkAAKIJAADnCQAAKwoAAHIKAAC3CgAA0QAAAAAAAAAAAAAAAKMAAAAA AAAAAAAAAACjAAAAAAAAAAAAAAAAowAAAAAAAAAAAAAAAKMAAAAAAAAAAAAAAACjAAAAAAAAAAAA AAAAowAAAAAAAAAAAAAAAKMAAAAAAAAAAAAAAACjAAAAAAAAAAAAAAAAowAAAAAAAAAAAAAAAKMA AAAAAAAAAAAAAACjAAAAAAAAAAAAAAAAowAAAAAAAAAAAAAAAKMAAAAAAAAAAAAAAACjAAAAAAAA AAAAAAAAowAAAAAAAAAAAAAAAKMAAAAAAAAAAAAAAACjAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAC4AAA3GMgAQlAMoB7wKUA7kEXgVDBmgHDQgyCNcJ/AqhC4YMqw1QDkAAAAAAAAAAAAAAAAA AAAAD4QAABJk8AABADEkATckATgkAUgkAVZEAABehAAAZ2TbWA4ALgAADcYyABCUAygHvApQDuQR eBUMGaAcNCDII1wn8CqELhgyrDVAOQAAAAAAAAAAAAAAAAAAAAAPhKQBEmTwAAEAMSQBNyQBOCQB SCQBVkQAAF6EpAFnZNtYDgAAErcKAADKCgAAywoAAMwKAADNCgAA4QoAAOIKAAAkCwAASQsAAEoL AACQCwAA2gsAACMMAABWDAAAVwwAAKEMAADqDAAALA0AAGsNAABsDQAApg0AAKcNAACrDQAArA0A AK0NAADRAAAAAAAAAAAAAAAA0QAAAAAAAAAAAAAAANEAAAAAAAAAAAAAAADRAAAAAAAAAAAAAAAA 0QAAAAAAAAAAAAAAANEAAAAAAAAAAAAAAADRAAAAAAAAAAAAAAAA0QAAAAAAAAAAAAAAANEAAAAA AAAAAAAAAADRAAAAAAAAAAAAAAAA0QAAAAAAAAAAAAAAANEAAAAAAAAAAAAAAADRAAAAAAAAAAAA AAAA0QAAAAAAAAAAAAAAANEAAAAAAAAAAAAAAADRAAAAAAAAAAAAAAAA0QAAAAAAAAAAAAAAANEA AAAAAAAAAAAAAADRAAAAAAAAAAAAAAAA0QAAAAAAAAAAAAAAANEAAAAAAAAAAAAAAADRAAAAAAAA AAAAAAAA0QAAAAAAAAAAAAAAANEAAAAAAAAAAAAAAAAAAAAAAAAuAAANxjIAEJQDKAe8ClAO5BF4 FQwZoBw0IMgjXCfwKoQuGDKsNUA5AAAAAAAAAAAAAAAAAAAAAA+EAAASZPAAAQAxJAE3JAE4JAFI JAFWRAAAXoQAAGdk21gOAAAYrQ0AAK4NAAC/DQAAwA0AAAQOAABLDgAAjQ4AANMOAAAbDwAAZQ8A AK0PAAD0DwAA9Q8AAPYPAAA/EAAAQBAAAIkQAACKEAAAzhAAAPsQAAD8EAAA/RAAAP4QAAAQEQAA EREAANEAAAAAAAAAAAAAAADRAAAAAAAAAAAAAAAA0QAAAAAAAAAAAAAAANEAAAAAAAAAAAAAAADR AAAAAAAAAAAAAAAA0QAAAAAAAAAAAAAAANEAAAAAAAAAAAAAAADRAAAAAAAAAAAAAAAA0QAAAAAA AAAAAAAAANEAAAAAAAAAAAAAAADRAAAAAAAAAAAAAAAA0QAAAAAAAAAAAAAAANEAAAAAAAAAAAAA AADRAAAAAAAAAAAAAAAA0QAAAAAAAAAAAAAAANEAAAAAAAAAAAAAAADRAAAAAAAAAAAAAAAA0QAA AAAAAAAAAAAAANEAAAAAAAAAAAAAAADRAAAAAAAAAAAAAAAA0QAAAAAAAAAAAAAAANEAAAAAAAAA AAAAAADRAAAAAAAAAAAAAAAA0QAAAAAAAAAAAAAAAAAAAAAAAC4AAA3GMgAQlAMoB7wKUA7kEXgV DBmgHDQgyCNcJ/AqhC4YMqw1QDkAAAAAAAAAAAAAAAAAAAAAD4QAABJk8AABADEkATckATgkAUgk AVZEAABehAAAZ2TbWA4AABgREQAAWhEAAKMRAADsEQAANRIAAH4SAADHEgAAEBMAAFkTAACiEwAA 6xMAADQUAAB9FAAAxhQAAA8VAABYFQAAoRUAAOoVAAAzFgAAfBYAAMUWAAAOFwAAVxcAAKAXAADp FwAA0QAAAAAAAAAAAAAAANEAAAAAAAAAAAAAAADRAAAAAAAAAAAAAAAA0QAAAAAAAAAAAAAAANEA AAAAAAAAAAAAAADRAAAAAAAAAAAAAAAA0QAAAAAAAAAAAAAAANEAAAAAAAAAAAAAAADRAAAAAAAA AAAAAAAA0QAAAAAAAAAAAAAAANEAAAAAAAAAAAAAAADRAAAAAAAAAAAAAAAA0QAAAAAAAAAAAAAA ANEAAAAAAAAAAAAAAADRAAAAAAAAAAAAAAAA0QAAAAAAAAAAAAAAANEAAAAAAAAAAAAAAADRAAAA AAAAAAAAAAAA0QAAAAAAAAAAAAAAANEAAAAAAAAAAAAAAADRAAAAAAAAAAAAAAAA0QAAAAAAAAAA AAAAANEAAAAAAAAAAAAAAADRAAAAAAAAAAAAAAAAAAAAAAAALgAADcYyABCUAygHvApQDuQReBUM GaAcNCDII1wn8CqELhgyrDVAOQAAAAAAAAAAAAAAAAAAAAAPhAAAEmTwAAEAMSQBNyQBOCQBSCQB VkQAAF6EAABnZNtYDgAAGOkXAAAyGAAAexgAAMQYAAANGQAAVhkAAJ8ZAADoGQAA6RkAAOoZAADr GQAA7BkAAO0ZAADuGQAA7xkAAPAZAADxGQAA8hkAAPMZAAD0GQAA9RkAAPYZAAD3GQAA+BkAAPkZ AADRAAAAAAAAAAAAAAAA0QAAAAAAAAAAAAAAANEAAAAAAAAAAAAAAADRAAAAAAAAAAAAAAAA0QAA AAAAAAAAAAAAANEAAAAAAAAAAAAAAADRAAAAAAAAAAAAAAAA0QAAAAAAAAAAAAAAANEAAAAAAAAA AAAAAADRAAAAAAAAAAAAAAAA0QAAAAAAAAAAAAAAANEAAAAAAAAAAAAAAADRAAAAAAAAAAAAAAAA 0QAAAAAAAAAAAAAAANEAAAAAAAAAAAAAAADRAAAAAAAAAAAAAAAA0QAAAAAAAAAAAAAAANEAAAAA AAAAAAAAAADRAAAAAAAAAAAAAAAA0QAAAAAAAAAAAAAAANEAAAAAAAAAAAAAAADRAAAAAAAAAAAA AAAA0QAAAAAAAAAAAAAAANEAAAAAAAAAAAAAAAAAAAAAAAAuAAANxjIAEJQDKAe8ClAO5BF4FQwZ oBw0IMgjXCfwKoQuGDKsNUA5AAAAAAAAAAAAAAAAAAAAAA+EAAASZPAAAQAxJAE3JAE4JAFIJAFW RAAAXoQAAGdk21gOAAAY+RkAAEIaAABDGgAAjBoAAI0aAACOGgAAoBoAAKEaAADhGgAAJhsAAG4b AAC2GwAA+RsAAAgcAAAJHAAATxwAAJkcAADVHAAAHR0AAGYdAACuHQAA9R0AAD8eAACCHgAAyh4A ANEAAAAAAAAAAAAAAADRAAAAAAAAAAAAAAAA0QAAAAAAAAAAAAAAANEAAAAAAAAAAAAAAADRAAAA AAAAAAAAAAAA0QAAAAAAAAAAAAAAANEAAAAAAAAAAAAAAADRAAAAAAAAAAAAAAAA0QAAAAAAAAAA AAAAANEAAAAAAAAAAAAAAADRAAAAAAAAAAAAAAAA0QAAAAAAAAAAAAAAANEAAAAAAAAAAAAAAADR AAAAAAAAAAAAAAAA0QAAAAAAAAAAAAAAANEAAAAAAAAAAAAAAADRAAAAAAAAAAAAAAAA0QAAAAAA AAAAAAAAANEAAAAAAAAAAAAAAADRAAAAAAAAAAAAAAAA0QAAAAAAAAAAAAAAANEAAAAAAAAAAAAA AADRAAAAAAAAAAAAAAAA0QAAAAAAAAAAAAAAAAAAAAAAAC4AAA3GMgAQlAMoB7wKUA7kEXgVDBmg HDQgyCNcJ/AqhC4YMqw1QDkAAAAAAAAAAAAAAAAAAAAAD4QAABJk8AABADEkATckATgkAUgkAVZE AABehAAAZ2TbWA4AABjKHgAAEx8AAFwfAACiHwAA6h8AADIgAAB6IAAAvyAAAAQhAABLIQAAbyEA AHAhAACtIQAA9iEAAD4iAACAIgAArSIAAK4iAADiIgAA4yIAACsjAABWIwAAVyMAAHMjAAB0IwAA 0QAAAAAAAAAAAAAAANEAAAAAAAAAAAAAAADRAAAAAAAAAAAAAAAA0QAAAAAAAAAAAAAAANEAAAAA AAAAAAAAAADRAAAAAAAAAAAAAAAA0QAAAAAAAAAAAAAAANEAAAAAAAAAAAAAAADRAAAAAAAAAAAA AAAA0QAAAAAAAAAAAAAAANEAAAAAAAAAAAAAAADRAAAAAAAAAAAAAAAA0QAAAAAAAAAAAAAAANEA AAAAAAAAAAAAAADRAAAAAAAAAAAAAAAA0QAAAAAAAAAAAAAAANEAAAAAAAAAAAAAAADRAAAAAAAA AAAAAAAA0QAAAAAAAAAAAAAAANEAAAAAAAAAAAAAAADRAAAAAAAAAAAAAAAA0QAAAAAAAAAAAAAA ANEAAAAAAAAAAAAAAADRAAAAAAAAAAAAAAAAAAAAAAAALgAADcYyABCUAygHvApQDuQReBUMGaAc NCDII1wn8CqELhgyrDVAOQAAAAAAAAAAAAAAAAAAAAAPhAAAEmTwAAEAMSQBNyQBOCQBSCQBVkQA AF6EAABnZNtYDgAAGHQjAACbIwAAnCMAANUjAADWIwAA4SMAAOIjAAAnJAAAbiQAALMkAAC0JAAA tSQAAP4kAAD/JAAASCUAAEklAACGJQAAhyUAAIglAACZJQAAmiUAAOQlAAAFJgAABiYAAC8mAADR AAAAAAAAAAAAAAAA0QAAAAAAAAAAAAAAANEAAAAAAAAAAAAAAADRAAAAAAAAAAAAAAAA0QAAAAAA AAAAAAAAANEAAAAAAAAAAAAAAADRAAAAAAAAAAAAAAAA0QAAAAAAAAAAAAAAANEAAAAAAAAAAAAA AADRAAAAAAAAAAAAAAAA0QAAAAAAAAAAAAAAANEAAAAAAAAAAAAAAADRAAAAAAAAAAAAAAAA0QAA AAAAAAAAAAAAANEAAAAAAAAAAAAAAADRAAAAAAAAAAAAAAAA0QAAAAAAAAAAAAAAANEAAAAAAAAA AAAAAADRAAAAAAAAAAAAAAAA0QAAAAAAAAAAAAAAANEAAAAAAAAAAAAAAADRAAAAAAAAAAAAAAAA 0QAAAAAAAAAAAAAAANEAAAAAAAAAAAAAAAAAAAAAAAAuAAANxjIAEJQDKAe8ClAO5BF4FQwZoBw0 IMgjXCfwKoQuGDKsNUA5AAAAAAAAAAAAAAAAAAAAAA+EAAASZPAAAQAxJAE3JAE4JAFIJAFWRAAA XoQAAGdk21gOAAAYLyYAADAmAAB6JgAAwiYAAMMmAADyJgAA8yYAADYnAABXJwAAWCcAAKInAADL JwAAzCcAANQnAADVJwAA1icAAOUnAADmJwAAKigAACsoAAAsKAAAZigAAGcoAACxKAAA9ygAANEA AAAAAAAAAAAAAADRAAAAAAAAAAAAAAAA0QAAAAAAAAAAAAAAANEAAAAAAAAAAAAAAADRAAAAAAAA AAAAAAAA0QAAAAAAAAAAAAAAANEAAAAAAAAAAAAAAADRAAAAAAAAAAAAAAAA0QAAAAAAAAAAAAAA ANEAAAAAAAAAAAAAAADRAAAAAAAAAAAAAAAA0QAAAAAAAAAAAAAAANEAAAAAAAAAAAAAAADRAAAA AAAAAAAAAAAA0QAAAAAAAAAAAAAAANEAAAAAAAAAAAAAAADRAAAAAAAAAAAAAAAA0QAAAAAAAAAA AAAAANEAAAAAAAAAAAAAAADRAAAAAAAAAAAAAAAA0QAAAAAAAAAAAAAAANEAAAAAAAAAAAAAAADR AAAAAAAAAAAAAAAA0QAAAAAAAAAAAAAAAAAAAAAAAC4AAA3GMgAQlAMoB7wKUA7kEXgVDBmgHDQg yCNcJ/AqhC4YMqw1QDkAAAAAAAAAAAAAAAAAAAAAD4QAABJk8AABADEkATckATgkAUgkAVZEAABe hAAAZ2TbWA4AABj3KAAACikAAAspAAAMKQAALikAAC8pAAAwKQAARikAAEcpAACQKQAAnikAAJ8p AADoKQAAACoAAAEqAAACKgAAGyoAABwqAAA1KgAANioAAIAqAACBKgAAgioAAMsqAADMKgAA0QAA AAAAAAAAAAAAANEAAAAAAAAAAAAAAADRAAAAAAAAAAAAAAAA0QAAAAAAAAAAAAAAANEAAAAAAAAA AAAAAADRAAAAAAAAAAAAAAAA0QAAAAAAAAAAAAAAANEAAAAAAAAAAAAAAADRAAAAAAAAAAAAAAAA 0QAAAAAAAAAAAAAAANEAAAAAAAAAAAAAAADRAAAAAAAAAAAAAAAA0QAAAAAAAAAAAAAAANEAAAAA AAAAAAAAAADRAAAAAAAAAAAAAAAA0QAAAAAAAAAAAAAAANEAAAAAAAAAAAAAAADRAAAAAAAAAAAA AAAA0QAAAAAAAAAAAAAAANEAAAAAAAAAAAAAAADRAAAAAAAAAAAAAAAA0QAAAAAAAAAAAAAAANEA AAAAAAAAAAAAAADRAAAAAAAAAAAAAAAAAAAAAAAALgAADcYyABCUAygHvApQDuQReBUMGaAcNCDI I1wn8CqELhgyrDVAOQAAAAAAAAAAAAAAAAAAAAAPhAAAEmTwAAEAMSQBNyQBOCQBSCQBVkQAAF6E AABnZNtYDgAAGMwqAAAVKwAAFisAACwrAAAtKwAASisAAEsrAACUKwAA1ysAANgrAAADLAAABCwA AE4sAACVLAAAwywAAMQsAAAGLQAAHS0AAB4tAAAfLQAAQC0AAEEtAABCLQAAWC0AAFktAADRAAAA AAAAAAAAAAAA0QAAAAAAAAAAAAAAANEAAAAAAAAAAAAAAADRAAAAAAAAAAAAAAAA0QAAAAAAAAAA AAAAANEAAAAAAAAAAAAAAADRAAAAAAAAAAAAAAAA0QAAAAAAAAAAAAAAANEAAAAAAAAAAAAAAADR AAAAAAAAAAAAAAAA0QAAAAAAAAAAAAAAANEAAAAAAAAAAAAAAADRAAAAAAAAAAAAAAAA0QAAAAAA AAAAAAAAANEAAAAAAAAAAAAAAADRAAAAAAAAAAAAAAAA0QAAAAAAAAAAAAAAANEAAAAAAAAAAAAA AADRAAAAAAAAAAAAAAAA0QAAAAAAAAAAAAAAANEAAAAAAAAAAAAAAADRAAAAAAAAAAAAAAAA0QAA AAAAAAAAAAAAANEAAAAAAAAAAAAAAAAAAAAAAAAuAAANxjIAEJQDKAe8ClAO5BF4FQwZoBw0IMgj XCfwKoQuGDKsNUA5AAAAAAAAAAAAAAAAAAAAAA+EAAASZPAAAQAxJAE3JAE4JAFIJAFWRAAAXoQA AGdk21gOAAAYWS0AAIYtAACHLQAAyi0AANYtAADXLQAA/C0AAP0tAAD+LQAAFy4AABguAABdLgAA oy4AAKQuAAC7LgAAvC4AAAUvAAAmLwAAJy8AACgvAABSLwAAUy8AAJkvAADgLwAAKTAAANEAAAAA AAAAAAAAAADRAAAAAAAAAAAAAAAA0QAAAAAAAAAAAAAAANEAAAAAAAAAAAAAAADRAAAAAAAAAAAA AAAA0QAAAAAAAAAAAAAAANEAAAAAAAAAAAAAAADRAAAAAAAAAAAAAAAA0QAAAAAAAAAAAAAAANEA AAAAAAAAAAAAAADRAAAAAAAAAAAAAAAA0QAAAAAAAAAAAAAAANEAAAAAAAAAAAAAAADRAAAAAAAA AAAAAAAA0QAAAAAAAAAAAAAAANEAAAAAAAAAAAAAAADRAAAAAAAAAAAAAAAA0QAAAAAAAAAAAAAA ANEAAAAAAAAAAAAAAADRAAAAAAAAAAAAAAAA0QAAAAAAAAAAAAAAANEAAAAAAAAAAAAAAADRAAAA AAAAAAAAAAAA0QAAAAAAAAAAAAAAAAAAAAAAAC4AAA3GMgAQlAMoB7wKUA7kEXgVDBmgHDQgyCNc J/AqhC4YMqw1QDkAAAAAAAAAAAAAAAAAAAAAD4QAABJk8AABADEkATckATgkAUgkAVZEAABehAAA Z2TbWA4AABgpMAAAOjAAADswAAA8MAAAUjAAAFMwAACJMAAAijAAAIswAACMMAAA1TAAANYwAAAf MQAAIDEAACExAAA6MQAAOzEAAFIxAABTMQAAazEAAGwxAACvMQAA1zEAANgxAADZMQAA0QAAAAAA AAAAAAAAANEAAAAAAAAAAAAAAADRAAAAAAAAAAAAAAAA0QAAAAAAAAAAAAAAANEAAAAAAAAAAAAA AADRAAAAAAAAAAAAAAAA0QAAAAAAAAAAAAAAANEAAAAAAAAAAAAAAADRAAAAAAAAAAAAAAAA0QAA AAAAAAAAAAAAANEAAAAAAAAAAAAAAADRAAAAAAAAAAAAAAAA0QAAAAAAAAAAAAAAANEAAAAAAAAA AAAAAADRAAAAAAAAAAAAAAAA0QAAAAAAAAAAAAAAANEAAAAAAAAAAAAAAADRAAAAAAAAAAAAAAAA 0QAAAAAAAAAAAAAAANEAAAAAAAAAAAAAAADRAAAAAAAAAAAAAAAA0QAAAAAAAAAAAAAAANEAAAAA AAAAAAAAAADRAAAAAAAAAAAAAAAAAAAAAAAALgAADcYyABCUAygHvApQDuQReBUMGaAcNCDII1wn 8CqELhgyrDVAOQAAAAAAAAAAAAAAAAAAAAAPhAAAEmTwAAEAMSQBNyQBOCQBSCQBVkQAAF6EAABn ZNtYDgAAGNkxAAD4MQAA+TEAAEMyAABdMgAAXjIAAF8yAAB1MgAAdjIAALMyAADeMgAA3zIAAOAy AAD6MgAA+zIAAEAzAABYMwAAWTMAAFozAACRMwAAkjMAAJMzAACsMwAArTMAAPYzAADRAAAAAAAA AAAAAAAA0QAAAAAAAAAAAAAAANEAAAAAAAAAAAAAAADRAAAAAAAAAAAAAAAA0QAAAAAAAAAAAAAA ANEAAAAAAAAAAAAAAADRAAAAAAAAAAAAAAAA0QAAAAAAAAAAAAAAANEAAAAAAAAAAAAAAADRAAAA AAAAAAAAAAAA0QAAAAAAAAAAAAAAANEAAAAAAAAAAAAAAADRAAAAAAAAAAAAAAAA0QAAAAAAAAAA AAAAANEAAAAAAAAAAAAAAADRAAAAAAAAAAAAAAAA0QAAAAAAAAAAAAAAANEAAAAAAAAAAAAAAADR AAAAAAAAAAAAAAAA0QAAAAAAAAAAAAAAANEAAAAAAAAAAAAAAADRAAAAAAAAAAAAAAAA0QAAAAAA AAAAAAAAANEAAAAAAAAAAAAAAAAAAAAAAAAuAAANxjIAEJQDKAe8ClAO5BF4FQwZoBw0IMgjXCfw KoQuGDKsNUA5AAAAAAAAAAAAAAAAAAAAAA+EAAASZPAAAQAxJAE3JAE4JAFIJAFWRAAAXoQAAGdk 21gOAAAY9jMAAD00AACGNAAAzzQAAAo1AAALNQAADDUAADU1AAA2NQAANzUAAHM1AAB0NQAAtzUA AOg1AADpNQAA6jUAABw2AAAdNgAAZjYAAGc2AABoNgAAsTYAALI2AAD7NgAA/DYAANEAAAAAAAAA AAAAAADRAAAAAAAAAAAAAAAA0QAAAAAAAAAAAAAAANEAAAAAAAAAAAAAAADRAAAAAAAAAAAAAAAA 0QAAAAAAAAAAAAAAANEAAAAAAAAAAAAAAADRAAAAAAAAAAAAAAAA0QAAAAAAAAAAAAAAANEAAAAA AAAAAAAAAADRAAAAAAAAAAAAAAAA0QAAAAAAAAAAAAAAANEAAAAAAAAAAAAAAADRAAAAAAAAAAAA AAAA0QAAAAAAAAAAAAAAANEAAAAAAAAAAAAAAADRAAAAAAAAAAAAAAAA0QAAAAAAAAAAAAAAANEA AAAAAAAAAAAAAADRAAAAAAAAAAAAAAAA0QAAAAAAAAAAAAAAANEAAAAAAAAAAAAAAADRAAAAAAAA AAAAAAAA0QAAAAAAAAAAAAAAAAAAAAAAAC4AAA3GMgAQlAMoB7wKUA7kEXgVDBmgHDQgyCNcJ/Aq hC4YMqw1QDkAAAAAAAAAAAAAAAAAAAAAD4QAABJk8AABADEkATckATgkAUgkAVZEAABehAAAZ2Tb WA4AABj8NgAAQDcAAIc3AACcNwAAnTcAAJ43AADJNwAAyjcAABM4AABbOAAApDgAAOw4AAAEOQAA BTkAAAY5AAAYOQAAGTkAAGA5AACNOQAAjjkAAI85AACkOQAApTkAANM5AADUOQAA0QAAAAAAAAAA AAAAANEAAAAAAAAAAAAAAADRAAAAAAAAAAAAAAAA0QAAAAAAAAAAAAAAANEAAAAAAAAAAAAAAADR AAAAAAAAAAAAAAAA0QAAAAAAAAAAAAAAANEAAAAAAAAAAAAAAADRAAAAAAAAAAAAAAAA0QAAAAAA AAAAAAAAANEAAAAAAAAAAAAAAADRAAAAAAAAAAAAAAAA0QAAAAAAAAAAAAAAANEAAAAAAAAAAAAA AADRAAAAAAAAAAAAAAAA0QAAAAAAAAAAAAAAANEAAAAAAAAAAAAAAADRAAAAAAAAAAAAAAAA0QAA AAAAAAAAAAAAANEAAAAAAAAAAAAAAADRAAAAAAAAAAAAAAAA0QAAAAAAAAAAAAAAANEAAAAAAAAA AAAAAADRAAAAAAAAAAAAAAAAAAAAAAAALgAADcYyABCUAygHvApQDuQReBUMGaAcNCDII1wn8CqE LhgyrDVAOQAAAAAAAAAAAAAAAAAAAAAPhAAAEmTwAAEAMSQBNyQBOCQBSCQBVkQAAF6EAABnZNtY DgAAGNQ5AAAcOgAALToAAC46AABxOgAAujoAAMM6AADEOgAA8joAAPM6AAA7OwAAPDsAAIY7AADD OwAA1jsAANc7AAAePAAAZDwAAKo8AADLPAAAzDwAAM08AAD4PAAA+TwAAEE9AADRAAAAAAAAAAAA AAAA0QAAAAAAAAAAAAAAANEAAAAAAAAAAAAAAADRAAAAAAAAAAAAAAAA0QAAAAAAAAAAAAAAANEA AAAAAAAAAAAAAADRAAAAAAAAAAAAAAAA0QAAAAAAAAAAAAAAANEAAAAAAAAAAAAAAADRAAAAAAAA AAAAAAAA0QAAAAAAAAAAAAAAANEAAAAAAAAAAAAAAADRAAAAAAAAAAAAAAAA0QAAAAAAAAAAAAAA ANEAAAAAAAAAAAAAAADRAAAAAAAAAAAAAAAA0QAAAAAAAAAAAAAAANEAAAAAAAAAAAAAAADRAAAA AAAAAAAAAAAA0QAAAAAAAAAAAAAAANEAAAAAAAAAAAAAAADRAAAAAAAAAAAAAAAA0QAAAAAAAAAA AAAAANEAAAAAAAAAAAAAAAAAAAAAAAAuAAANxjIAEJQDKAe8ClAO5BF4FQwZoBw0IMgjXCfwKoQu GDKsNUA5AAAAAAAAAAAAAAAAAAAAAA+EAAASZPAAAQAxJAE3JAE4JAFIJAFWRAAAXoQAAGdk21gO AAAYQT0AAGI9AABjPQAAqj0AALk9AAC6PQAAuz0AALw9AAAFPgAABj4AAE8+AABQPgAAmD4AALw+ AAC9PgAA+D4AAPk+AAAVPwAAFj8AAD0/AAA+PwAAPz8AAEA/AABYPwAAWT8AANEAAAAAAAAAAAAA AADRAAAAAAAAAAAAAAAA0QAAAAAAAAAAAAAAANEAAAAAAAAAAAAAAADRAAAAAAAAAAAAAAAA0QAA AAAAAAAAAAAAANEAAAAAAAAAAAAAAADRAAAAAAAAAAAAAAAA0QAAAAAAAAAAAAAAANEAAAAAAAAA AAAAAADRAAAAAAAAAAAAAAAA0QAAAAAAAAAAAAAAANEAAAAAAAAAAAAAAADRAAAAAAAAAAAAAAAA 0QAAAAAAAAAAAAAAANEAAAAAAAAAAAAAAADRAAAAAAAAAAAAAAAA0QAAAAAAAAAAAAAAANEAAAAA AAAAAAAAAADRAAAAAAAAAAAAAAAA0QAAAAAAAAAAAAAAANEAAAAAAAAAAAAAAADRAAAAAAAAAAAA AAAA0QAAAAAAAAAAAAAAAAAAAAAAAC4AAA3GMgAQlAMoB7wKUA7kEXgVDBmgHDQgyCNcJ/AqhC4Y Mqw1QDkAAAAAAAAAAAAAAAAAAAAAD4QAABJk8AABADEkATckATgkAUgkAVZEAABehAAAZ2TbWA4A ABhZPwAAfD8AAH0/AAB+PwAAfz8AAIA/AACBPwAAkD8AAJE/AACtPwAArj8AAO4/AAApQAAAKkAA AGRAAACkQAAApUAAAOVAAAAuQQAAXUEAAF5BAACeQQAA6EEAAPxBAAD9QQAA0QAAAAAAAAAAAAAA ANEAAAAAAAAAAAAAAADRAAAAAAAAAAAAAAAA0QAAAAAAAAAAAAAAANEAAAAAAAAAAAAAAADRAAAA AAAAAAAAAAAA0QAAAAAAAAAAAAAAANEAAAAAAAAAAAAAAADRAAAAAAAAAAAAAAAA0QAAAAAAAAAA AAAAANEAAAAAAAAAAAAAAADRAAAAAAAAAAAAAAAA0QAAAAAAAAAAAAAAANEAAAAAAAAAAAAAAADR AAAAAAAAAAAAAAAA0QAAAAAAAAAAAAAAANEAAAAAAAAAAAAAAADRAAAAAAAAAAAAAAAA0QAAAAAA AAAAAAAAANEAAAAAAAAAAAAAAADRAAAAAAAAAAAAAAAA0QAAAAAAAAAAAAAAANEAAAAAAAAAAAAA AADRAAAAAAAAAAAAAAAAAAAAAAAALgAADcYyABCUAygHvApQDuQReBUMGaAcNCDII1wn8CqELhgy rDVAOQAAAAAAAAAAAAAAAAAAAAAPhAAAEmTwAAEAMSQBNyQBOCQBSCQBVkQAAF6EAABnZNtYDgAA GP1BAAA7QgAAekIAAHtCAACxQgAA40IAAORCAAAeQwAAY0MAAIJDAACDQwAAoUMAAKJDAACmQwAA p0MAAKhDAACpQwAAqkMAAKtDAAD0QwAA9UMAAD5EAAA/RAAAUkQAAFNEAADRAAAAAAAAAAAAAAAA 0QAAAAAAAAAAAAAAANEAAAAAAAAAAAAAAADRAAAAAAAAAAAAAAAA0QAAAAAAAAAAAAAAANEAAAAA AAAAAAAAAADRAAAAAAAAAAAAAAAA0QAAAAAAAAAAAAAAANEAAAAAAAAAAAAAAADRAAAAAAAAAAAA AAAA0QAAAAAAAAAAAAAAANEAAAAAAAAAAAAAAADRAAAAAAAAAAAAAAAA0QAAAAAAAAAAAAAAANEA AAAAAAAAAAAAAADRAAAAAAAAAAAAAAAA0QAAAAAAAAAAAAAAANEAAAAAAAAAAAAAAADRAAAAAAAA AAAAAAAA0QAAAAAAAAAAAAAAANEAAAAAAAAAAAAAAADRAAAAAAAAAAAAAAAA0QAAAAAAAAAAAAAA ANEAAAAAAAAAAAAAAAAAAAAAAAAuAAANxjIAEJQDKAe8ClAO5BF4FQwZoBw0IMgjXCfwKoQuGDKs NUA5AAAAAAAAAAAAAAAAAAAAAA+EAAASZPAAAQAxJAE3JAE4JAFIJAFWRAAAXoQAAGdk21gOAAAY U0QAAGhEAACTRAAAr0QAAMVEAADnRAAAD0UAABFFAAASRQAAFEUAABVFAAAXRQAAGEUAABpFAAAb RQAAHEUAAB1FAAAeRQAAH0UAANEAAAAAAAAAAAAAAADRAAAAAAAAAAAAAAAA0QAAAAAAAAAAAAAA ANEAAAAAAAAAAAAAAADRAAAAAAAAAAAAAAAA0QAAAAAAAAAAAAAAAMsAAAAAAAAAAAAAAADCAAAA AAAAAAAAAAAAywAAAAAAAAAAAAAAAMIAAAAAAAAAAAAAAADLAAAAAAAAAAAAAAAAwgAAAAAAAAAA AAAAAMsAAAAAAAAAAAAAAADCAAAAAAAAAAAAAAAAvAAAAAAAAAAAAAAAAMsAAAAAAAAAAAAAAAC2 AAAAAAAAAAAAAAAArAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAKAAAPhKQBFiQBSWYBAAAAXoSkAQYXABYkAUlmAQAAAAAFFwARhGgBYIRoAQAIAAAPhKQBXoSk AWdk8CJAAAAFAAAPhKQBXoSkAS4AAA3GMgAQlAMoB7wKUA7kEXgVDBmgHDQgyCNcJ/AqhC4YMqw1 QDkAAAAAAAAAAAAAAAAAAAAAD4QAABJk8AABADEkATckATgkAUgkAVZEAABehAAAZ2TbWA4AABIf RQAAQUUAAEJFAABDRQAAREUAAEVFAABGRQAAR0UAAGtFAABsRQAA7wAAAAAAAAAAAAAAAOUAAAAA AAAAAAAAAAB/AAAAAAAAAAAAAAAAfQAAAAAAAAAAAAAAAHcAAAAAAAAAAAAAAABxAAAAAAAAAAAA AAAAdwAAAAAAAAAAAAAAAGsAAAAAAAAAAAAAAABcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAADxYAEYRaABYkAUlmAQAAAFdEMgBghFoAZ2Q7WC8ABhYAFiQBSWYBAAAAAAUW ABGEaAFghGgBAAUAAA+EpAFehKQBAAEXAGYAAGtkAAAAABYkARckAUlmAQAAAAKWOQADNAEHlPf8 CNZGAAPH/y8CSxssIgAEXgEAAAAAAAAAAAYBAAAAAAAAAAVCDgAAAAAAAAAABgEAAAAAAAAABegD AAAAAAAAAAAGAQAAAAAAABT2AogTFTYBF/YDAAAa1gwAAAD/AAAA/wAAAP8b1gwAAAD/AAAA/wAA AP8c1gwAAAD/AAAA/wAAAP8d1gwAAAD/AAAA/wAAAP801gYAAQUDAAA01gYAAQoDOQBh9gMAAGY0 AQoXABGEIQAWJAFJZgEAAABghCEAEBcAAyQBEYRoARYkAUlmAQAAAGCEaAFhJAFnZLRbXAAACWxF AACqRQAAq0UAAKxFAACtRQAArkUAAK9FAACwRQAAsUUAAPIAAAAAAAAAAAAAAABnAAAAAAAAAAAA AAAAZQAAAAAAAAAAAAAAAF8AAAAAAAAAAAAAAABZAAAAAAAAAAAAAAAAXwAAAAAAAAAAAAAAAFMA AAAAAAAAAAAAAABfAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABRYAEYRo AWCEaAEABRcAEYRoAWCEaAEABQAAD4SkAV6EpAEAARYAiwAAa2SRAAAAFiQBFyQBSWYBAAAAApZs AAXWGAQBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAjWRgADlP//BpcZoiQABOkDAAAAAAAAAAAAAAAA AAAAAAAEzQkAAAAAAAAAAAAAAAAAAAAAAATSBQAAAAAAAAAAAAAAAAAAAAAKdAAA4AET1jAAAAD/ BAEAAAAAAP8AAAAAAAAA/wAAAAAAAAD/AAAAAAAAAP8AAAAAAAAA/wAAAAAU9gLNFBU2ARf2AwAA GtYMAAAA/wAAAP8AAAD/G9YMAAAA/wAAAP8AAAD/HNYMAAAA/wAAAP8AAAD/HdYMAAAA/wAAAP8A AAD/NNYGAAEFAwAANNYGAAEKA2wAYfYDAAANFgADJAIRhGgBFiQBSWYBAAAAYIRoAWEkAgAIsUUA ALJFAACzRQAA9gAAAAAAAAAAAAAAAMgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4A AA3GMgAQlAMoB7wKUA7kEXgVDBmgHDQgyCNcJ/AqhC4YMqw1QDkAAAAAAAAAAAAAAAAAAAAAD4QA ABJk8AABADEkATckATgkAUgkAVZEAABehAAAZ2TbWA4AAAgAAA+EpAFehKQBZ2TwIkAAAAI2ADGQ OAEyUAIAOnDbWA4AH7CCLiCwxkEhsIoFIrAFByOQoAUkkKAFJbAAABewUwMYsOADDJCpAQAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAI8AFiQB FyQBSWYBAAAAAZYAACF2AANoATXWBQABA2gCNdYFAQIDHBk11gUCAwPhBiN2AAFoAiN2AQIcGSN2 AgPhBjpWCwACljkAAzQBB5T3/BT2AogTFTYBLNYDAQMCNdYFAAECXgE11gUBAgJCDjXWBQIDAugD L9YLAAMEAAAA/wYBAAA01gYAAQoDOQBmNAGhABYkARckAUlmAQAAAAGWAAAhdgADaAE11gUAAQNr BzXWBQECA5gSNdYFAgMDCwsjdgABawcjdgECmBIjdgIDCws6VgsAApZsAAp0AADgARPWMAAAAP8E AQAAAAAA/wAAAAAAAAD/AAAAAAAAAP8AAAAAAAAA/wAAAAAAAAD/AAAAABT2As0UFTYBNdYFAAEC 6QM11gUBAgLNCTXWBQIDAtIFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABiBCAAEgABAAsBDwAH AAAABAAAAAAABAAIAAAACAAAAAgAAAAIAAAADgAAAA4AAAAOAAAADgAAAA4AAAAOAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAIAAAACAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAADAGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAyBgAAGAAAAMADAADQAwAA4AMAAPADAAAABAAAEAQAACAEAAAwBAAAQAQAAFAEAABg BAAAcAQAAIAEAACQBAAAwAMAANADAADgAwAA8AMAAAAEAAAQBAAAMgYAACgCAADYAQAA6AEAACAE AAAwBAAAQAQAAFAEAABgBAAAcAQAAIAEAACQBAAAwAMAANADAADgAwAA8AMAAAAEAAAQBAAAIAQA ADAEAABABAAAUAQAAGAEAABwBAAAgAQAAJAEAADAAwAA0AMAAOADAADwAwAAAAQAABAEAAAgBAAA MAQAAEAEAABQBAAAYAQAAHAEAACABAAAkAQAAMADAADQAwAA4AMAAPADAAAABAAAEAQAACAEAAAw BAAAQAQAAFAEAABgBAAAcAQAAIAEAACQBAAAwAMAANADAADgAwAA8AMAAAAEAAAQBAAAIAQAADAE AABABAAAUAQAAGAEAABwBAAAgAQAAJAEAADAAwAA0AMAAOADAADwAwAAAAQAABAEAAAgBAAAMAQA AEAEAABQBAAAYAQAAHAEAACABAAAkAQAADgBAABYAQAA+AEAAAgCAAAYAgAAVgIAAH4CAAAYAAAA UEoEAF9IAQRtSAkEbkgECHNICQR0SAQIAAAAAGYAAGDx/wIAZgAMEAAATALkAAAABgBOAG8AcgBt AGEAbAAAACAAAAAPhMgAEmRoAQEAMSQANyQAOCQASCQAVkTIAF6EyAAgAENKFQBQSgAAX0gBBGFK FQBtSAkEbkgECHNICQR0SAQIhgABIPH/IgCGAAwQAABMAuQAAAAJAEgAZQBhAGQAaQBuAGcAIAAx AAAALQABAAMkAwYkAQomAAtGIwAPhK8BEYRR/hOk8AAUpPAAQCYAXoSvAWCEUf5hJAMAKwA1CIFD SiAAT0oCAFBKBQBRSgIAX0gBBGFKIABtSAkEbkgECHNICQR0SAQIAHIAAiDx/wIAcgAMEAAATALk AAAACQBIAGUAYQBkAGkAbgBnACAAMgAAAB0AAgADJAMGJAEKJgELRiMAE6TwABSk8ABAJgFhJAMA KABDShgAT0oCAFBKBQBRSgIAX0gBBGFKGABtSAkEbkgECHNICQR0SAQIdAADAAEAAgB0AAwQAABM AuQAAAAJAEgAZQBhAGQAaQBuAGcAIAAzAAAALAADAAUkAQYkAQomAgtGIwASZKABAQATpAQBFKQE ATckATgkAUAmAkgkAWEkAxsAQ0oYAEtIAgBPSgIAUEoCAFFKAgBcCAFhShgAAAAAAAAAAAAAAAAA AEQAQSDy/6EARAAMDQAAAAAAABAAFgBEAGUAZgBhAHUAbAB0ACAAUABhAHIAYQBnAHIAYQBwAGgA IABGAG8AbgB0AAAAAABSAGlA8/+zAFIADB0AAAAAAAAwBgwAVABhAGIAbABlACAATgBvAHIAbQBh AGwAAAAcABf2AwAANNYGAAEKA2wANNYGAAEFAwAAYfYDAAACAAsAAAAoAGsg9P/BACgAAA0AAAAA AAAwBgcATgBvACAATABpAHMAdAAAAAIADAAAAAAAZgD+L/H/AgBmAAwAAABMAuQAAAAFAFQAYQBi AGwAZQAAAB4ADwADJAEFJAEKJggLRgUAD4QAAFhEZABehAAAYSQBJABDShIAT0oCAFFKAgBfSAEE YUoSAG1ICQRuSAQIc0gJBHRIBAhgAP4v8f8CAWAABAAAAEwC5AAAAAoAVABhAGIAbABlACAAVABl AHgAdAAAAAoAEAANxgUAAQAAAycAQ0oVAE9KAgBRSgIAX0gBBGFKFQBtSAAEbkgABHNICQR0SAQI dQgBAGIA/i/x/xIBYgAMAAAATALkAAAADABUAGEAYgBsAGUAIABIAGUAYQBkAGUAcgAAAAgAEQAD JAFhJAEnADUIgUNKFQBPSgIAUUoCAF9IAQRhShUAbUgJBG5IBAhzSAkEdEgECACIAP4vswAjAYgA DAAAAEwC5AAAAAsAVABhAGIAbABlACAAUwB0AHkAbABlAAAARwA6VhIAE9YwAAAA/wQBAAAAAAD/ BAEAAAAAAP8EAQAAAAAA/wQBAAAAAAD/BAEAAAAAAP8EAQAAfDQBh9YKAAAA/wAAAP8AAAAFABIA YSQDAAgAQ0oSAGFKEgBCAJkAAQAyAUIADAAYAEwC5AAAAAwAQgBhAGwAbABvAG8AbgAgAFQAZQB4 AHQAAAAIABMAEmTwAAEACABDShIAYUoSAFIA/g8BAEIBUgAMAAAATALkAAAADABGAGkAZwB1AHIA ZQAgAFMAdAB5AGwAZQAAAB8AFAAGJAETpFAAFKRQADEkAVZEAABehAAAXoQAAGEkAQAAAGwA/g8B AFIBbAAMAAAATALkAAAADgBEAG8AYwB1AG0AZQBuAHQAIABUAGkAdABsAGUAAAAhABUAE6QsARSk LAEVxgUAAQAAAFZEAABehAAAXoQAAGEkAQAUAENKJABPSgIAUEoFAFFKAgBhSiQAWAAgYPH/YgFY AAwAAABMAuQAAAAGAEYAbwBvAHQAZQByAAAADQAWAA3GCAACnhE8IwECACQAQ0oSAE9KAgBRSgIA X0gBBGFKEgBtSAkEbkgECHNICQR0SAQIYAAfYPH/cgFgAAwAAABMAuQAAAAGAEgAZQBhAGQAZQBy AAAAFgAXAAMkAw3GCAACORByIAECRyQAYSQDJABDShIAT0oCAFFKAgBfSAEEYUoSAG1ICQRuSAQI c0gJBHRIBAhGAP4PogCBAUYADAATAEwC5AAAABEAQgBhAGwAbABvAG8AbgAgAFQAZQB4AHQAIABD AGgAYQByAAAADABDShIAUEoAAGFKEgBSAP4PAQCSAVIADAAAAEwC5AAAAAwATgBvAHQAZQBzACAA SABlAGEAZABlAHIAAAAQABkATsYIAAAAAAQBAQBhJAMQAENKEgBPSgIAUEoFAFFKAgBWAP4PAQCi AVYADAAAAEwC5AAAAAoATgBvAHQAZQBzACAAVABlAHgAdAAAABQAGgBQxggAAAAABAEBAGCEaAFh JAMUAENKEgBPSgIAUEoGAFFKAgBhShIAVAD+DwEAsgFUAAwAAABMAuQAAAAQAEMAbwBtAHAAaQBs AGkAbgBnACAAQQBkAHYAaQBjAGUAAAACABsAGAA2CAFCKgJPSgIAUUoCAF5KAgBwaAAA/wBCAP4P AQDCAUIADAAAAEwC5AAAAAYARgBpAGcAdQByAGUAAAAYABwACiYHC0YFAFZEAABehAAAXoQAAGEk AQQAUEoEAEAAswABANIBQAAMEAAA8DoLACACDgBMAGkAcwB0ACAAUABhAHIAYQBnAHIAYQBwAGgA AAAJAB0AXoTQAm0kAQAAAKYAZQABAOIBpgAMCB8A21gOADAGEQBIAFQATQBMACAAUAByAGUAZgBv AHIAbQBhAHQAdABlAGQAAABVAB4AEmTwAAEAFcYyABCUAygHvApQDuQReBUMGaAcNCDII1wn8CqE LhgyrDVAOQAAAAAAAAAAAAAAAAAAAAAxJAE3JAE4JAFIJAFWRAAAXoQAAF6EAAAAFABDShQAT0oD AFFKAwBeSgMAYUoUAFQA/g+iAPEBVAAMAB4A21gOADAGFgBIAFQATQBMACAAUAByAGUAZgBvAHIA bQBhAHQAdABlAGQAIABDAGgAYQByAAAAEABPSgMAUEoAAFFKAwBeSgMAUEsDBBQABgAIAAAAIQCC irwT+gAAABwCAAATAAAAW0NvbnRlbnRfVHlwZXNdLnhtbKyRy2rDMBBF94X+g9C22HK6KKXYzqJJ d30s0g8Y5LEtao+ENAnJ33fsuFC6CC10IxBizpl7Va6P46AOGJPzVOlVXmiFZH3jqKv0++4pu9cq MVADgyes9AmTXtfXV+XuFDApmaZU6Z45PBiTbI8jpNwHJHlpfRyB5Ro7E8B+QIfmtijujPXESJzx xNB1+SoLRNegeoPILzCKx7Cg8Pv5DCSAmAtYq8czYVqi0hDC4CywRDAHan7oM9+2zmLj7X4UaT6D F9jNBDO/XGD1P+ov5wZb2A+stkfp4lx/xCH9LdtSay6Tc/7Uu5AuGC6Xt7Rh5r+tPwEAAP//AwBQ SwMEFAAGAAgAAAAhAKXWp+fAAAAANgEAAAsAAABfcmVscy8ucmVsc4SPz2rDMAyH74W9g9F9UdLD GCV2L6WQQy+jfQDhKH9oIhvbG+vbT8cGCrsIhKTv96k9/q6L+eGU5yAWmqoGw+JDP8to4XY9v3+C yYWkpyUIW3hwhqN727VfvFDRozzNMRulSLYwlRIPiNlPvFKuQmTRyRDSSkXbNGIkf6eRcV/XH5ie GeA2TNP1FlLXN2Cuj6jJ/7PDMMyeT8F/ryzlRQRuN5RMaeRioagv41O9kKhlqtQe0LW4+db9AQAA //8DAFBLAwQUAAYACAAAACEAa3mWFoMAAACKAAAAHAAAAHRoZW1lL3RoZW1lL3RoZW1lTWFuYWdl ci54bWwMzE0KwyAQQOF9oXeQ2TdjuyhFYrLLrrv2AEOcGkHHoNKf29fl44M3zt8U1ZtLDVksnAcN imXNLoi38Hwspxuo2kgcxSxs4ccV5ul4GMm0jRPfSchzUX0j1ZCFrbXdINa1K9Uh7yzdXrkkaj2L R1fo0/cp4kXrKyYKAjj9AQAA//8DAFBLAwQUAAYACAAAACEAlrWt4pYGAABQGwAAFgAAAHRoZW1l L3RoZW1lL3RoZW1lMS54bWzsWU9v2zYUvw/YdyB0b2MndhoHdYrYsZstTRvEboceaYmW2FCiQNJJ fRva44ABw7phhxXYbYdhW4EW2KX7NNk6bB3Qr7BHUpLFWF6SNtiKrT4kEvnj+/8eH6mr1+7HDB0S ISlP2l79cs1DJPF5QJOw7d0e9i+teUgqnASY8YS0vSmR3rWN99+7itdVRGKCYH0i13Hbi5RK15eW pA/DWF7mKUlgbsxFjBW8inApEPgI6MZsablWW12KMU08lOAYyN4aj6lP0FCT9DZy4j0Gr4mSesBn YqBJE2eFwQYHdY2QU9llAh1i1vaAT8CPhuS+8hDDUsFE26uZn7e0cXUJr2eLmFqwtrSub37ZumxB cLBseIpwVDCt9xutK1sFfQNgah7X6/W6vXpBzwCw74OmVpYyzUZ/rd7JaZZA9nGedrfWrDVcfIn+ ypzMrU6n02xlsliiBmQfG3P4tdpqY3PZwRuQxTfn8I3OZre76uANyOJX5/D9K63Vhos3oIjR5GAO rR3a72fUC8iYs+1K+BrA12oZfIaCaCiiS7MY80QtirUY3+OiDwANZFjRBKlpSsbYhyju4ngkKNYM 8DrBpRk75Mu5Ic0LSV/QVLW9D1MMGTGj9+r596+eP0XHD54dP/jp+OHD4wc/WkLOqm2chOVVL7/9 7M/HH6M/nn7z8tEX1XhZxv/6wye//Px5NRDSZybOiy+f/PbsyYuvPv39u0cV8E2BR2X4kMZEopvk CO3zGBQzVnElJyNxvhXDCNPyis0klDjBmksF/Z6KHPTNKWaZdxw5OsS14B0B5aMKeH1yzxF4EImJ ohWcd6LYAe5yzjpcVFphR/MqmXk4ScJq5mJSxu1jfFjFu4sTx7+9SQp1Mw9LR/FuRBwx9xhOFA5J QhTSc/yAkArt7lLq2HWX+oJLPlboLkUdTCtNMqQjJ5pmi7ZpDH6ZVukM/nZss3sHdTir0nqLHLpI yArMKoQfEuaY8TqeKBxXkRzimJUNfgOrqErIwVT4ZVxPKvB0SBhHvYBIWbXmlgB9S07fwVCxKt2+ y6axixSKHlTRvIE5LyO3+EE3wnFahR3QJCpjP5AHEKIY7XFVBd/lbobod/ADTha6+w4ljrtPrwa3 aeiINAsQPTMR2pdQqp0KHNPk78oxo1CPbQxcXDmGAvji68cVkfW2FuJN2JOqMmH7RPldhDtZdLtc BPTtr7lbeJLsEQjz+Y3nXcl9V3K9/3zJXZTPZy20s9oKZVf3DbYpNi1yvLBDHlPGBmrKyA1pmmQJ +0TQh0G9zpwOSXFiSiN4zOq6gwsFNmuQ4OojqqJBhFNosOueJhLKjHQoUcolHOzMcCVtjYcmXdlj YVMfGGw9kFjt8sAOr+jh/FxQkDG7TWgOnzmjFU3grMxWrmREQe3XYVbXQp2ZW92IZkqdw61QGXw4 rxoMFtaEBgRB2wJWXoXzuWYNBxPMSKDtbvfe3C3GCxfpIhnhgGQ+0nrP+6hunJTHirkJgNip8JE+ 5J1itRK3lib7BtzO4qQyu8YCdrn33sRLeQTPvKTz9kQ6sqScnCxBR22v1VxuesjHadsbw5kWHuMU vC51z4dZCBdDvhI27E9NZpPlM2+2csXcJKjDNYW1+5zCTh1IhVRbWEY2NMxUFgIs0Zys/MtNMOtF KWAj/TWkWFmDYPjXpAA7uq4l4zHxVdnZpRFtO/ualVI+UUQMouAIjdhE7GNwvw5V0CegEq4mTEXQ L3CPpq1tptzinCVd+fbK4Ow4ZmmEs3KrUzTPZAs3eVzIYN5K4oFulbIb5c6vikn5C1KlHMb/M1X0 fgI3BSuB9oAP17gCI52vbY8LFXGoQmlE/b6AxsHUDogWuIuFaQgquEw2/wU51P9tzlkaJq3hwKf2 aYgEhf1IRYKQPShLJvpOIVbP9i5LkmWETESVxJWpFXtEDgkb6hq4qvd2D0UQ6qaaZGXA4E7Gn/ue ZdAo1E1OOd+cGlLsvTYH/unOxyYzKOXWYdPQ5PYvRKzYVe16szzfe8uK6IlZm9XIswKYlbaCVpb2 rynCObdaW7HmNF5u5sKBF+c1hsGiIUrhvgfpP7D/UeEz+2VCb6hDvg+1FcGHBk0Mwgai+pJtPJAu kHZwBI2THbTBpElZ02atk7ZavllfcKdb8D1hbC3ZWfx9TmMXzZnLzsnFizR2ZmHH1nZsoanBsydT FIbG+UHGOMZ80ip/deKje+DoLbjfnzAlTTDBNyWBofUcmDyA5LcczdKNvwAAAP//AwBQSwMEFAAG AAgAAAAhAA3RkJ+2AAAAGwEAACcAAAB0aGVtZS90aGVtZS9fcmVscy90aGVtZU1hbmFnZXIueG1s LnJlbHOEj00KwjAUhPeCdwhvb9O6EJEm3YjQrdQDhOQ1DTY/JFHs7Q2uLAguh2G+mWm7l53JE2My 3jFoqhoIOumVcZrBbbjsjkBSFk6J2TtksGCCjm837RVnkUsoTSYkUiguMZhyDidKk5zQilT5gK44 o49W5CKjpkHIu9BI93V9oPGbAXzFJL1iEHvVABmWUJr/s/04GolnLx8WXf5RQXPZhQUoosbM4COb qkwEylu6usTfAAAA//8DAFBLAQItABQABgAIAAAAIQCCirwT+gAAABwCAAATAAAAAAAAAAAAAAAA AAAAAABbQ29udGVudF9UeXBlc10ueG1sUEsBAi0AFAAGAAgAAAAhAKXWp+fAAAAANgEAAAsAAAAA AAAAAAAAAAAAKwEAAF9yZWxzLy5yZWxzUEsBAi0AFAAGAAgAAAAhAGt5lhaDAAAAigAAABwAAAAA AAAAAAAAAAAAFAIAAHRoZW1lL3RoZW1lL3RoZW1lTWFuYWdlci54bWxQSwECLQAUAAYACAAAACEA lrWt4pYGAABQGwAAFgAAAAAAAAAAAAAAAADRAgAAdGhlbWUvdGhlbWUvdGhlbWUxLnhtbFBLAQIt ABQABgAIAAAAIQAN0ZCftgAAABsBAAAnAAAAAAAAAAAAAAAAAJsJAAB0aGVtZS90aGVtZS9fcmVs cy90aGVtZU1hbmFnZXIueG1sLnJlbHNQSwUGAAAAAAUABQBdAQAAlgoAAAAAPD94bWwgdmVyc2lv bj0iMS4wIiBlbmNvZGluZz0iVVRGLTgiIHN0YW5kYWxvbmU9InllcyI/Pg0KPGE6Y2xyTWFwIHht bG5zOmE9Imh0dHA6Ly9zY2hlbWFzLm9wZW54bWxmb3JtYXRzLm9yZy9kcmF3aW5nbWwvMjAwNi9t YWluIiBiZzE9Imx0MSIgdHgxPSJkazEiIGJnMj0ibHQyIiB0eDI9ImRrMiIgYWNjZW50MT0iYWNj ZW50MSIgYWNjZW50Mj0iYWNjZW50MiIgYWNjZW50Mz0iYWNjZW50MyIgYWNjZW50ND0iYWNjZW50 NCIgYWNjZW50NT0iYWNjZW50NSIgYWNjZW50Nj0iYWNjZW50NiIgaGxpbms9ImhsaW5rIiBmb2xI bGluaz0iZm9sSGxpbmsiLz4AAAAAsz0AAA0AAHgAAAoA/////wAAAAADAAAABgAAAAYAAAAJAAAA DAAAAAwAAAAOAAAANgAAADgAAACeAAAAoAAAAKIAAAClAAAAAAgAALNFAAAjAAAAAAgAALcKAACt DQAAEREAAOkXAAD5GQAAyh4AAHQjAAAvJgAA9ygAAMwqAABZLQAAKTAAANkxAAD2MwAA/DYAANQ5 AABBPQAAWT8AAP1BAABTRAAAH0UAAGxFAACxRQAAs0UAACQAAAAlAAAAJgAAACcAAAAoAAAAKQAA ACoAAAArAAAALAAAAC0AAAAuAAAALwAAADAAAAAxAAAAMgAAADMAAAA0AAAANQAAADYAAAA3AAAA OAAAADkAAAA6AAAAOwAAADgAAABPAAAAWgAAAGEAAABmAAAAaAAAAHAAAACWAAAAmQAAAKUAAAAT H5T/lYATIRT/lYATGhT/lYAPAADwbAAAAAAABvA4AAAAAhgAAAYAAAACAAAAAgAAAAIAAAABAAAA AQAAAAIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAjAAvwDAAAAIZBAAAAAMVBAAAAAEAAHvEQ AAAA//8AAAAA/wCAgIAA9wAAEAEPAALwSAAAACAACPAIAAAAAQAAAAAEAAAPAAPwMAAAAA8ABPAo AAAAAQAJ8BAAAAAAAAAAAAAAAAAAAAAAAAAAAgAK8AgAAAAABAAABQAAAAAPAALwkgAAABAACPAI AAAAAQAAAAEIAAAPAAPwMAAAAA8ABPAoAAAAAQAJ8BAAAAAAAAAAAAAAAAAAAAAAAAAAAgAK8AgA AAAACAAABQAAAA8ABPBCAAAAEgAK8AgAAAABCAAAAA4AAFMAC/AeAAAAvwEAABAAywEAAAAA/wEA AAgABAMJAAAAPwMBAAEAAAAR8AQAAAABAAAAAAAAAD0BAABEAQAARQEAAE0BAADFBAAAzgQAAGQI AABrCAAAbAgAAHQIAADUDgAA3A4AAGcSAABuEgAAbxIAAHcSAADaEwAA3xMAADEUAAA2FAAA+BQA AP0UAADsFgAA8hYAAIgYAACPGAAAwhgAAMgYAACRGgAAnRoAACMdAAAqHQAAKx0AADMdAADwIgAA 9yIAAPgiAAAAIwAAPCYAAD4mAAD6KAAAASkAAAIpAAAKKQAA8i0AAPotAABPLgAAVy4AANYuAADd LgAA3i4AAOYuAABDLwAASy8AACo2AAAxNgAAMjYAADo2AADFNwAAyDcAADc4AABAOAAARjgAAE44 AABrOQAAcTkAAHc5AAB+OQAACjoAABE6AAAXOgAAHDoAACI6AAAqOgAAiDoAAI06AACYOgAAnToA APE6AAD2OgAA/DoAAAA7AABSOwAAYTsAABk8AAAgPAAAITwAACk8AACCPAAAjTwAAJk8AACkPAAA Dz0AABE9AAASPQAAFD0AABU9AAAXPQAAGD0AABo9AAAbPQAAHz0AACY9AAA4PQAAQD0AALE9AAC0 PQAABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcA HAAHABwABwAcAAcAHAAHABwABwAcAAcAHQAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAc AAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwA BwAcAAcAHAAHABwABwAcAAcABwACAAcAAgAHAAIABwACAAcAHAAHABwABwACAAAAAAByAQAAlQEA AOoBAAD4AQAALgIAADkCAAB1AgAAeAIAALoCAADHAgAAJwMAADEDAADdAwAA5gMAACYEAAAoBAAA pAQAAKcEAADtBAAA8QQAAC8FAAA3BQAABwYAAA8GAADWBgAA2gYAAB4HAAAnBwAAaAcAAGoHAACw BwAAtwcAAI0IAACQCAAA0QgAANoIAAD0CQAABQoAAEEKAABNCgAAjgoAAJsKAADXCgAA5woAABwL AAAnCwAAaQsAAHYLAACyCwAAwgsAAPcLAAACDAAARAwAAFEMAACNDAAAnQwAANIMAADaDAAAGw0A ACENAABkDQAAbA0AAKkNAAC6DQAA9g0AAPoNAAA/DgAARA4AAIQOAACVDgAA0Q4AANwOAAAaDwAA IA8AAKgPAAC4DwAA8Q8AAAIQAAAVEQAAIREAAF4RAABsEQAA5BIAAO4SAAApEwAAMRMAAJwUAACe FAAA2BQAAOcUAAAgFQAAJRUAAGkVAABqFQAA+BUAAAAWAABCFgAARRYAAIUWAACMFgAAzRYAANEW AAAWFwAAFxcAAF8XAABhFwAAfxcAAIQXAAClFwAAqhcAAO0XAADwFwAANRgAADsYAAB9GAAAfxgA AMIYAADHGAAABxkAAA0ZAABOGQAAUhkAALAZAAC9GQAA+RkAAP8ZAABBGgAARhoAAIMaAACNGgAA 6BoAAOwaAAAuGwAANRsAAKEbAACvGwAA2xsAAN4bAAAqHAAAMxwAAHEcAAB/HAAATB0AAFMdAADn HQAA6R0AAH0eAACBHgAAOR8AAEAfAAClHwAArx8AAC8gAABAIAAAtCAAALYgAAD6IAAAByEAABEh AAAdIQAANyEAAEQhAABMIQAATiEAAJMhAACcIQAA6yEAAO8hAAAJIgAAGSIAABkjAAAgIwAAlyMA AJ0jAABRJAAAUyQAAJgkAACcJAAACSUAABIlAAAkJQAALyUAAEklAABWJQAAzSUAANQlAAAFJgAA FSYAAGAmAABnJgAACCcAAAwnAAAtJwAAOCcAAJwnAACgJwAA4ycAAOcnAAAsKAAALygAAEMoAABQ KAAAKCkAADgpAACyKQAAuykAAN4pAADmKQAARioAAE4qAABkKgAAaioAALYqAADDKgAA5SoAAO0q AABDKwAATisAAF0rAABuKwAAmCsAAJwrAAD5KwAA/SsAAEAsAABELAAA0iwAANcsAAARLQAAFi0A ADotAABLLQAAui0AAMItAADvLQAA+i0AAP8uAAADLwAAQy8AAEsvAACKLwAAjS8AAKMvAACpLwAA FjAAABkwAABeMAAAYDAAAKcwAACuMAAA7zAAAPEwAABjMQAAbjEAAJIxAACiMQAAHzIAACEyAAB0 MgAAhzIAAL0yAADAMgAAiTMAAJAzAADGMwAA1DMAACE0AAAkNAAA0DQAAOE0AABENQAAYDUAAK01 AAC3NQAAmzYAAJ42AACUNwAAoDcAAI05AACQOQAACjoAADk6AABdOwAAYTsAAIY7AACUOwAADz0A ABE9AAASPQAAFD0AABU9AAAXPQAAGD0AABo9AAAbPQAAsT0AALQ9AAAHADMABwAzAAcAMwAHADMA BwAzAAcAMwAHADMABwAzAAcAMwAHADMABwAzAAcAMwAHADMABwAzAAcAMwAHADMABwAzAAcAMwAH ADMABwAzAAcAMwAHADMABwAzAAcAMwAHADMABwAzAAcAMwAHADMABwAzAAcAMwAHADMABwAzAAcA MwAHADMABwAzAAcAMwAHADMABwAzAAcAMwAHADMABwAzAAcAMwAHADMABwAzAAcAMwAHADMABwAz AAcAMwAHADMABwAzAAcAMwAHADMABwAzAAcAMwAHADMABwAzAAcAMwAHADMABwAzAAcAMwAHADMA BwAzAAcAMwAHADMABwAzAAcAMwAHADMABwAzAAcAMwAHADMABwAzAAcAMwAHADMABwAzAAcAMwAH ADMABwAzAAcAMwAHADMABwAzAAcAMwAHADMABwAzAAcAMwAHADMABwAzAAcAMwAHADMABwAzAAcA MwAHADMABwAzAAcAMwAHADMABwAzAAcAMwAHADMABwAzAAcAMwAHADMABwAzAAcAMwAHADMABwAz AAcAMwAHADMABwAzAAcAMwAHADMABwAzAAcAMwAHADMABwAzAAcAMwAHADMABwAzAAcAMwAHADMA BwAzAAcAMwAHADMABwAzAAcAMwAHADMABwAzAAcAMwAHADMABwAzAAcAMwAHADMABwAzAAcAMwAH ADMABwAzAAcAMwAHADMABwAzAAcAMwAHADMABwAzAAcAMwAHADMABwAzAAcABwACAAcAAgAHAAIA BwACAAcAAgAAAAAAcQEAAJgBAADqAQAAdQIAAIcCAAC6AgAAzQIAACcDAABNAwAA3QMAAPsDAAAm BAAAWgQAAKQEAADtBAAA8wQAAC8FAABvBQAABwYAABkGAADWBgAA/AYAAB4HAABoBwAAegcAALAH AAD2BwAAjQgAAP4IAADxCQAA9wkAADwKAABECgAAhwoAAJEKAADQCgAA2goAABcLAAAfCwAAYgsA AGwLAACrCwAAtQsAAPILAAD6CwAAPQwAAEcMAACGDAAAkAwAAM0MAADVDAAAFg0AAB4NAABfDQAA Zw0AAKYNAACsDQAA8Q0AAPkNAAA6DgAAQg4AAIEOAACHDgAAzA4AANQOAAAVDwAAHQ8AAKUPAACr DwAA7g8AAPQPAAASEQAAGBEAAFsRAABhEQAA5BIAACATAAApEwAAcRMAAJwUAADYFAAA8xQAACAV AAA0FQAAaRUAALEVAAD4FQAALRYAAEIWAACFFgAAmxYAAM0WAAClFwAAwxcAAO0XAAAHGAAANRgA AAcZAAAXGQAAThkAAHMZAACwGQAAzRkAAPkZAABgGgAAgxoAALEaAADmGgAAWhsAAJ8bAADZGwAA 5RsAACocAAC1HAAATB0AAIgdAADnHQAACR4AAH0eAADGHgAAOR8AAFsfAAClHwAAzx8AACwgAAAy IAAAtCAAAL8gAAD6IAAAFCEAADAhAAA6IQAASiEAAJMhAACiIQAA6yEAAAwiAAAZIwAAMCMAAJcj AADbIwAAUSQAAMckAAAJJQAAJyUAAEIlAABMJQAAzSUAANolAAD+JQAACCYAAGAmAACnJgAACCcA ACgnAAAwJwAAnCcAACwoAABGKAAAISkAACspAACyKQAA4SkAAEYqAABnKgAAtioAAOgqAABDKwAA YCsAAJMrAACbKwAA+SsAACAsAABALAAAiSwAANIsAAAMLQAAFC0AADctAAA9LQAAui0AAOotAADy LQAA/y4AAAUvAABDLwAAii8AAKYvAAAWMAAA7zAAAAYxAABjMQAAjzEAAJUxAAAfMgAAMTIAAHQy AACIMgAAvTIAAMcyAACJMwAAxjMAANozAAAhNAAAZzQAAM00AADTNAAARDUAAGY1AACtNQAAvDUA AJs2AADANgAAkTcAAJc3AABhOQAAqzkAAAA6AABIOgAAKzsAAHA7AACDOwAAiTsAAA49AAAPPQAA cD0AAHg9AAB/PQAAqT0AALQ9AAADAAcAAwAHAAUAAwAFAAMABwADAAUAAwAHAAMABwAFAAMABwAD AAUAAwAHAAMABwAFAAMABwADAAcAAwAFAAMABQADAAUAAwAFAAMABQADAAUAAwAFAAMABQADAAUA AwAFAAMABQADAAUAAwAFAAMABQADAAUAAwAFAAMABQADAAUAAwAFAAMABQADAAUAAwAFAAMABQAD AAcAAwAHAAMABwAFAAMABQADAAcAAwAHAAMABwAFAAMABwAFAAMABwADAAcABQADAAcAAwAFAAMA BwADAAcAAwAHAAMABwAFAAMABwADAAcAAwAHAAMABwADAAUAAwAFAAMABQADAAUAAwAFAAMABQAD AAcABQADAAUAAwAFAAMABwADAAcAAwAFAAMABQADAAUAAwAFAAMABwADAAcABQADAAcABQADAAUA AwAHAAMABQADAAcAAwAFAAMABQADAAcAAwAHAAMABwAFAAMABQADAAcABQADAAUAAwAHAAUAAwAH AAUAAwAHAAUAAwAFAAMABQADAAUAAwAHAAUAAwAHAAMABQADAAUAAwAFAAMABwADAAUAAwAFAAMA BwADAAcAAwAFAAMABwACAAcAAgAHAAIADwAjdz0KdsTQs/8P/w//D/8P/w//D/8P/w//DwAA8FBs C1LamhT/D/8P/w//D/8P/w//D/8P/w8AAPA+RSAsBibx/w//D/8P/w//D/8P/w//D/8PAACIaJ0r HQAJBP8P/w//D/8P/w//D/8P/w//DwAAqiHIMHbXKlD/D/8P/w//D/8P/w//D/8P/w8AAEBlADLC fiDP/w//D/8P/w//D/8P/w//D/8PAAAeeSs4HQAJBP8P/w//D/8P/w//D/8P/w//DwAA5U/kOJrn BP//D/8P/w//D/8P/w//D/8P/w8QAPRbSz/Ag1Rv/w//D/8P/w//D/8P/w//D/8PEAAKV/5CbuGs IP8P/w//D/8P/w//D/8PHAAPAAAA2FVBUuhTaqr/D/8P/w//D/8P/w//D/8P/w8AAHkI/FQdAAkE /w//D/8P/w//D/8P/w//D/8PAAApZFRjolNG/gEAAgADAP8P/w//D/8P/w//DwAAan40cgBHXNn/ D/8P/w//D/8P/w//D/8P/w8AAA47Dn7y+C7m/w//D/8P/w//D/8P/w//D/8PAAABAAAAAAABAAAA AAAAAAAAAAAAAAAAAAADGAAAD4SwARGEUP4VxgUAAbABBl6EsAFghFD+bygBAQAAAAEAAAAAAAED AAAAAAAAAAAAAAAAAAAAAAMYAAAPhEACEYTA/RXGBQABQAIGXoRAAmCEwP1vKAEDAAAALgABAAEA AAAAAAEDBQAAAAAAAAAAAAAAAAAAAAMYAAAPhNACEYQw/RXGBQAB0AIGXoTQAmCEMP1vKAEFAAAA LgABAC4AAgABAAAAAAABAAAAAAAAAAAAAAAAAAAAAAADGAAAD4SoAxGEWP0VxgUAATcCBl6EqANg hFj9bygBAgADAC4AAQAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAxgAAA+EqAMRhFj9FcYFAAE3AgZe hKgDYIRY/W8oAQIABAAJ/wEAAAAEAAEAAAAAAAAAAAAAAAAAAAAAAAMYAAAPhKgDEYRY/RXGBQAB NwIGXoSoA2CEWP1vKAECAAUACf8BAAAAAgABAAAAAAAAAAAAAAAAAAAAAAADGAAAD4SoAxGEWP0V xgUAATcCBl6EqANghFj9bygAAQAGAAEAAAAAAAEDBQcJCw0PAAAAAAAAAAAAAAMYAAAPhKAFEYRg +hXGBQABoAUGXoSgBWCEYPpvKAEPAAAALgABAC4AAgAuAAMALgAEAC4ABQAuAAYALgAHAAEAAAAA AAEDBQcJCw0PEQAAAAAAAAAAAAMYAAAPhDAGEYTQ+RXGBQABMAYGXoQwBmCE0PlvKAERAAAALgAB AC4AAgAuAAMALgAEAC4ABQAuAAYALgAHAC4ACAABAAAAAwADAAAAAAAAAAAAAAAAAAAAAAADGAAA D4QDBRGEUP4VxgUAAQMFBl6EAwVghFD+bygBAwBEllVfAAABAAAAAAABAwAAAAAAAAAAAAAAAAAA AAADGAAAD4STBRGEwP0VxgUAAZMFBl6EkwVghMD9bygBAwAAAC4AAQABAAAAAAABAwUAAAAAAAAA AAAAAAAAAAADGAAAD4QjBhGEMP0VxgUAASMGBl6EIwZghDD9bygBBQAAAC4AAQAuAAIAAQAAAAAA AQAAAAAAAAAAAAAAAAAAAAAAAxgAAA+E+wYRhFj9FcYFAAGKBQZehPsGYIRY/W8oAQIAAwAuAAEA AAAAAAEAAAAAAAAAAAAAAAAAAAAAAAMYAAAPhPsGEYRY/RXGBQABigUGXoT7BmCEWP1vKAECAAQA Cf8BAAAABAABAAAAAAAAAAAAAAAAAAAAAAADGAAAD4T7BhGEWP0VxgUAAYoFBl6E+wZghFj9bygB AgAFAAn/AQAAAAIAAQAAAAAAAAAAAAAAAAAAAAAAAxgAAA+E+wYRhFj9FcYFAAGKBQZehPsGYIRY /W8oAAEABgABAAAAAAABAwUHCQsNDwAAAAAAAAAAAAADGAAAD4TzCBGEYPoVxgUAAfMIBl6E8whg hGD6bygBDwAAAC4AAQAuAAIALgADAC4ABAAuAAUALgAGAC4ABwABAAAAAAABAwUHCQsNDxEAAAAA AAAAAAADGAAAD4SDCRGE0PkVxgUAAYMJBl6EgwlghND5bygBEQAAAC4AAQAuAAIALgADAC4ABAAu AAUALgAGAC4ABwAuAAgAAQAAAAMAAwAAAAAAAAAAAAAAAAAAAAAAAxgAAA+EsAERhFD+FcYFAAGw AQZehLABYIRQ/m8oAQMARJZVXwAAAQAAAAAAAQMAAAAAAAAAAAAAAAAAAAAAAxgAAA+EQAIRhMD9 FcYFAAFAAgZehEACYITA/W8oAQMAAAAuAAEAAQAAAAAAAQMFAAAAAAAAAAAAAAAAAAAAAxgAAA+E 0AIRhDD9FcYFAAHQAgZehNACYIQw/W8oAQUAAAAuAAEALgACAAEAAAAAAAEAAAAAAAAAAAAAAAAA AAAAAAMYAAAPhKgDEYRY/RXGBQABNwIGXoSoA2CEWP1vKAECAAMALgABAAAAAAABAAAAAAAAAAAA AAAAAAAAAAADGAAAD4SoAxGEWP0VxgUAATcCBl6EqANghFj9bygBAgAEAAn/AQAAAAQAAQAAAAAA AAAAAAAAAAAAAAAAAxgAAA+EqAMRhFj9FcYFAAE3AgZehKgDYIRY/W8oAQIABQAJ/wEAAAACAAEA AAAAAAAAAAAAAAAAAAAAAAMYAAAPhKgDEYRY/RXGBQABNwIGXoSoA2CEWP1vKAABAAYAAQAAAAAA AQMFBwkLDQ8AAAAAAAAAAAAAAxgAAA+EoAURhGD6FcYFAAGgBQZehKAFYIRg+m8oAQ8AAAAuAAEA LgACAC4AAwAuAAQALgAFAC4ABgAuAAcAAQAAAAAAAQMFBwkLDQ8RAAAAAAAAAAAAAxgAAA+EMAYR hND5FcYFAAEwBgZehDAGYITQ+W8oAREAAAAuAAEALgACAC4AAwAuAAQALgAFAC4ABgAuAAcALgAI AAEAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAYAAAPhKkBEYRX/hXGBQABqQEGXoSpAWCEV/4BAAAA AQAAAAAAAQMAAAAAAAAAAAAAAAAAAAAAABgAAA+E4AMRhMn9FcYFAAF5BAZehOADYITJ/QMAAAAu AAEAAQAAAAAAAQMFAAAAAAAAAAAAAAAAAAAAABgAAA+EigURhMn9FcYFAAGLBwZehIoFYITJ/QUA AAAuAAEALgACAAEAAAAAAAEDBQcAAAAAAAAAAAAAAAAAAAAYAAAPhMAHEYQ8/RXGBQABBAwGXoTA B2CEPP0HAAAALgABAC4AAgAuAAMAAQAAAAAAAQMFBwkAAAAAAAAAAAAAAAAAABgAAA+E9wkRhK78 FcYFAAEVDwZehPcJYISu/AkAAAAuAAEALgACAC4AAwAuAAQAAQAAAAAAAQMFBwkLAAAAAAAAAAAA AAAAABgAAA+EvAwRhJL7FcYFAAEmEgZehLwMYISS+wsAAAAuAAEALgACAC4AAwAuAAQALgAFAAEA AAAAAAEDBQcJCw0AAAAAAAAAAAAAAAAYAAAPhPMOEYQE+xXGBQABNxUGXoTzDmCEBPsNAAAALgAB AC4AAgAuAAMALgAEAC4ABQAuAAYAAQAAAAAAAQMFBwkLDQ8AAAAAAAAAAAAAABgAAA+EKhERhHb6 FcYFAAFIGAZehCoRYIR2+g8AAAAuAAEALgACAC4AAwAuAAQALgAFAC4ABgAuAAcAAQAAAAAAAQMF BwkLDQ8RAAAAAAAAAAAAABgAAA+E7hMRhFz5FcYFAAFaGwZehO4TYIRc+REAAAAuAAEALgACAC4A AwAuAAQALgAFAC4ABgAuAAcALgAIAAEAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAMYAAAPhLABEYRQ /hXGBQABsAEGXoSwAWCEUP5vKAEBAAAAAQAAAAAAAQMAAAAAAAAAAAAAAAAAAAAAAxgAAA+EQAIR hMD9FcYFAAFAAgZehEACYITA/W8oAQMAAAAuAAEAAQAAAAAAAQMFAAAAAAAAAAAAAAAAAAAAAxgA AA+E0AIRhDD9FcYFAAHQAgZehNACYIQw/W8oAQUAAAAuAAEALgACAAEAAAAAAAEAAAAAAAAAAAAA AAAAAAAAAAMYAAAPhKgDEYRY/RXGBQABNwIGXoSoA2CEWP1vKAECAAMALgABAAAAAAABAAAAAAAA AAAAAAAAAAAAAAADGAAAD4SoAxGEWP0VxgUAATcCBl6EqANghFj9bygBAgAEAAn/AQAAAAQAAQAA AAAAAAAAAAAAAAAAAAAAAxgAAA+EqAMRhFj9FcYFAAE3AgZehKgDYIRY/W8oAQIABQAJ/wEAAAAC AAEAAAAAAAAAAAAAAAAAAAAAAAMYAAAPhKgDEYRY/RXGBQABNwIGXoSoA2CEWP1vKAABAAYAAQAA AAAAAQMFBwkLDQ8AAAAAAAAAAAAAAxgAAA+EoAURhGD6FcYFAAGgBQZehKAFYIRg+m8oAQ8AAAAu AAEALgACAC4AAwAuAAQALgAFAC4ABgAuAAcAAQAAAAAAAQMFBwkLDQ8RAAAAAAAAAAAAAxgAAA+E MAYRhND5FcYFAAEwBgZehDAGYITQ+W8oAREAAAAuAAEALgACAC4AAwAuAAQALgAFAC4ABgAuAAcA LgAIAAEAAAAAAAEAAAAAAAAAAAAAAAAAAAAAABEYAAAPhLABEYRQ/hXGBQABsAEGXoSwAWCEUP41 CAA2CABDSiQAYUokAG8oAQEAAAABAAAAAAABAwAAAAAAAAAAAAAAAAAAAAARGAAAD4RAAhGEwP0V xgUAAUACBl6EQAJghMD9NQgANggAQ0oeAGFKHgBvKAEDAAAALgABAAEAAAAAAAEDBQAAAAAAAAAA AAAAAAAAABEYAAAPhNACEYQw/RXGBQAB0AIGXoTQAmCEMP01CAA2CABDShgAYUoYAG8oAQUAAAAu AAEALgACAAEAAAAAAAEAAAAAAAAAAAAAAAAAAAAAABEYAAAPhKgDEYRY/RXGBQABNwIGXoSoA2CE WP01CAA2CABDShUAYUoVAG8oAQIAAwAuAAEAAAAAAAEAAAAAAAAAAAAAAAAAAAAAABEYAAAPhKgD EYRY/RXGBQABNwIGXoSoA2CEWP01CAA2CABDShUAYUoVAG8oAQIABAAJ/wEAAAAEAAEAAAAAAAAA AAAAAAAAAAAAABEYAAAPhKgDEYRY/RXGBQABNwIGXoSoA2CEWP01CAA2CABDShUAYUoVAG8oAQIA BQAJ/wEAAAACAAEAAAAAAAAAAAAAAAAAAAAAABEYAAAPhKgDEYRY/RXGBQABNwIGXoSoA2CEWP01 CAA2CABDShUAYUoVAG8oAAEABgABAAAAAAABAwUHCQsNDwAAAAAAAAAAAAARGAAAD4SgBRGEYPoV xgUAAaAFBl6EoAVghGD6NQgANggAQ0oSAGFKEgBvKAEPAAAALgABAC4AAgAuAAMALgAEAC4ABQAu AAYALgAHAAEAAAAAAAEDBQcJCw0PEQAAAAAAAAAAABEYAAAPhDAGEYTQ+RXGBQABMAYGXoQwBmCE 0Pk1CAA2CABDShIAYUoSAG8oAREAAAAuAAEALgACAC4AAwAuAAQALgAFAC4ABgAuAAcALgAIAAEA AAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAYAAAPhKkBEYRX/hXGBQABqQEGXoSpAWCEV/4BAAAAAQAA AAAAAQMAAAAAAAAAAAAAAAAAAAAAABgAAA+E4AMRhMn9FcYFAAF5BAZehOADYITJ/QMAAAAuAAEA AQAAAAAAAQMFAAAAAAAAAAAAAAAAAAAAABgAAA+EigURhMn9FcYFAAGLBwZehIoFYITJ/QUAAAAu AAEALgACAAEAAAAAAAEDBQcAAAAAAAAAAAAAAAAAAAAYAAAPhMAHEYQ8/RXGBQABnAoGXoTAB2CE PP0HAAAALgABAC4AAgAuAAMAAQAAAAAAAQMFBwkAAAAAAAAAAAAAAAAAABgAAA+E9wkRhK78FcYF AAGtDQZehPcJYISu/AkAAAAuAAEALgACAC4AAwAuAAQAAQAAAAAAAQMFBwkLAAAAAAAAAAAAAAAA ABgAAA+EvAwRhJL7FcYFAAG+EAZehLwMYISS+wsAAAAuAAEALgACAC4AAwAuAAQALgAFAAEAAAAA AAEDBQcJCw0AAAAAAAAAAAAAAAAYAAAPhPMOEYQE+xXGBQABzxMGXoTzDmCEBPsNAAAALgABAC4A AgAuAAMALgAEAC4ABQAuAAYAAQAAAAAAAQMFBwkLDQ8AAAAAAAAAAAAAABgAAA+EKhERhHb6FcYF AAHgFgZehCoRYIR2+g8AAAAuAAEALgACAC4AAwAuAAQALgAFAC4ABgAuAAcAAQAAAAAAAQMFBwkL DQ8RAAAAAAAAAAAAABgAAA+E7hMRhFz5FcYFAAHyGQZehO4TYIRc+REAAAAuAAEALgACAC4AAwAu AAQALgAFAC4ABgAuAAcALgAIAAAAAAAXAAAAAAAAAAAAAAAAAAAAAAAAABMQAAAPhNACEYSY/l6E 0AJghJj+T0oAAFBKBABRSgAAXkoAAG8oAAEALQABAAAAF4AAAAAAAAAAAAAAAAAAAAAAAAAPEAAA D4SgBRGEmP5ehKAFYISY/k9KAwBRSgMAXkoDAG8oAAEAbwABAAAAF4AAAAAAAAAAAAAAAAAAAAAA AAALEAAAD4RwCBGEmP5ehHAIYISY/k9KBwBRSgcAbygAAQCn8AEAAAAXgAAAAAAAAAAAAAAAAAAA AAAAAAsQAAAPhEALEYSY/l6EQAtghJj+T0oBAFFKAQBvKAABALfwAQAAABeAAAAAAAAAAAAAAAAA AAAAAAAADxAAAA+EEA4RhJj+XoQQDmCEmP5PSgMAUUoDAF5KAwBvKAABAG8AAQAAABeAAAAAAAAA AAAAAAAAAAAAAAAACxAAAA+E4BARhJj+XoTgEGCEmP5PSgcAUUoHAG8oAAEAp/ABAAAAF4AAAAAA AAAAAAAAAAAAAAAAAAALEAAAD4SwExGEmP5ehLATYISY/k9KAQBRSgEAbygAAQC38AEAAAAXgAAA AAAAAAAAAAAAAAAAAAAAAA8QAAAPhIAWEYSY/l6EgBZghJj+T0oDAFFKAwBeSgMAbygAAQBvAAEA AAAXgAAAAAAAAAAAAAAAAAAAAAAAAAsQAAAPhFAZEYSY/l6EUBlghJj+T0oHAFFKBwBvKAABAKfw AAAAABcAAAAAAAAAAAAAAAAAAAAAAAAAExAAAA+E0AIRhJj+XoTQAmCEmP5PSgAAUEoEAFFKAABe SgAAbygAAQAtAAEAAAAXgAAAAAAAAAAAAAAAAAAAAAAAAA8QAAAPhKAFEYSY/l6EoAVghJj+T0oD AFFKAwBeSgMAbygAAQBvAAEAAAAXgAAAAAAAAAAAAAAAAAAAAAAAAAsQAAAPhHAIEYSY/l6EcAhg hJj+T0oHAFFKBwBvKAABAKfwAQAAABeAAAAAAAAAAAAAAAAAAAAAAAAACxAAAA+EQAsRhJj+XoRA C2CEmP5PSgEAUUoBAG8oAAEAt/ABAAAAF4AAAAAAAAAAAAAAAAAAAAAAAAAPEAAAD4QQDhGEmP5e hBAOYISY/k9KAwBRSgMAXkoDAG8oAAEAbwABAAAAF4AAAAAAAAAAAAAAAAAAAAAAAAALEAAAD4Tg EBGEmP5ehOAQYISY/k9KBwBRSgcAbygAAQCn8AEAAAAXgAAAAAAAAAAAAAAAAAAAAAAAAAsQAAAP hLATEYSY/l6EsBNghJj+T0oBAFFKAQBvKAABALfwAQAAABeAAAAAAAAAAAAAAAAAAAAAAAAADxAA AA+EgBYRhJj+XoSAFmCEmP5PSgMAUUoDAF5KAwBvKAABAG8AAQAAABeAAAAAAAAAAAAAAAAAAAAA AAAACxAAAA+EUBkRhJj+XoRQGWCEmP5PSgcAUUoHAG8oAAEAp/ABAAAAAAABAAAAAAAAAAACAAAA AAAAAAAdEAAAD4TQAhGEAABehNACYIQAADUIADYIAENKJABPSgIAUEoFAFFKAgBhSiQAbygAAwAA ACAAIAABAAAAAAABAwAAAAAAAAACAAAAAAAAAAAZEAAAD4TQAhGEAABehNACYIQAADUIADYIAENK HgBPSgIAUUoCAGFKHgBvKAAFAAAALgABACAAIAABAAAAAAABAwUAAAAAAAACAAAAAAAAAAAZEAAA D4TQAhGEAABehNACYIQAADUIADYIAENKGABPSgIAUUoCAGFKGABvKAAHAAAALgABAC4AAgAgACAA AQAAAAAAAQMFBwAAAAAAAgAAAAAAAAAAGRAAAA+E0AIRhAAAXoTQAmCEAAA1CAA2CABDShUAT0oC AFFKAgBhShUAbygACQAAAC4AAQAuAAIALgADACAAIAABAAAAAAABAAAAAAAAAAAAAAAAAAAAAAAZ GAAAD4Q+BxGEyP4VxgUAAT4HBl6EPgdghMj+NQgANggAQ0oVAE9KAgBRSgIAYUoVAG8oAAIABAAu AAEAAAAAAAEAAAAAAAAAAAAAAAAAAAAAABkYAAAPhD4HEYTI/hXGBQABPgcGXoQ+B2CEyP41CAA2 CABDShUAT0oCAFFKAgBhShUAbygAAgAFACkAAQAAAAQAAQAAAAAAAAAAAAAAAAAAAAAAGRgAAA+E PgcRhMj+FcYFAAE+BwZehD4HYITI/jUIADYIAENKFQBPSgIAUUoCAGFKFQBvKAACAAYALgABAAAA AAkHAAAAAAAAAAABAAAAAAAAAAAdEAAAD4TQAhGEAABehNACYIQAADUIADYIAENKEgBPSgIAUEoF AFFKAgBhShIAbygABwBGAGkAZwB1AHIAZQAHAAEAAAAACQYAAAAAAAAAAAEAAAAAAAAAAB0QAAAP hNACEYQAAF6E0AJghAAANQgANggAQ0oSAE9KAgBQSgUAUUoCAGFKEgBvKAAGAFQAYQBiAGwAZQAI AAEAAAD/AAAAAAAAAAAAAAAAAAAAAAAAAAMYAAAPhKkBEYRX/hXGBQABqQEGXoSpAWCEV/5vKAEE AESWVV9BACAAAQAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAxgAAA+E4AMRhMn9FcYFAAHgAwZehOAD YITJ/W8oAQMAQQAuAAEAAQAAAAAAAQMFAAAAAAAAAAAAAAAAAAAAAxgAAA+EigURhMn9FcYFAAGK BQZehIoFYITJ/W8oAQUAAAAuAAEALgACAAEAAAAAAAEDBQcAAAAAAAAAAAAAAAAAAAMYAAAPhMAH EYQ8/RXGBQABwAcGXoTAB2CEPP1vKAEHAAAALgABAC4AAgAuAAMAAQAAAAAAAQMFBwkAAAAAAAAA AAAAAAAAAxgAAA+E9wkRhK78FcYFAAH3CQZehPcJYISu/G8oAQkAAAAuAAEALgACAC4AAwAuAAQA AQAAAAAAAQMFBwkLAAAAAAAAAAAAAAAAAxgAAA+EvAwRhJL7FcYFAAG8DAZehLwMYISS+28oAQsA AAAuAAEALgACAC4AAwAuAAQALgAFAAEAAAAAAAEDBQcJCw0AAAAAAAAAAAAAAAMYAAAPhPMOEYQE +xXGBQAB8w4GXoTzDmCEBPtvKAENAAAALgABAC4AAgAuAAMALgAEAC4ABQAuAAYAAQAAAAAAAQMF BwkLDQ8AAAAAAAAAAAAAAxgAAA+EKhERhHb6FcYFAAEqEQZehCoRYIR2+m8oAQ8AAAAuAAEALgAC AC4AAwAuAAQALgAFAC4ABgAuAAcAAQAAAAAAAQMFBwkLDQ8RAAAAAAAAAAAAAxgAAA+E7hMRhFz5 FcYFAAHuEwZehO4TYIRc+W8oAREAAAAuAAEALgACAC4AAwAuAAQALgAFAC4ABgAuAAcALgAIAAEA AAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAYAAAPhKkBEYRX/hXGBQABqQEGXoSpAWCEV/4BAAAAAQAA AAAAAQMAAAAAAAAAAAAAAAAAAAAAABgAAA+E4AMRhMn9FcYFAAF5BAZehOADYITJ/QMAAAAuAAEA AQAAAAAAAQMFAAAAAAAAAAAAAAAAAAAAABgAAA+EigURhMn9FcYFAAGLBwZehIoFYITJ/QUAAAAu AAEALgACAAEAAAAAAAEDBQcAAAAAAAAAAAAAAAAAAAAYAAAPhMAHEYQ8/RXGBQABBAwGXoTAB2CE PP0HAAAALgABAC4AAgAuAAMAAQAAAAAAAQMFBwkAAAAAAAAAAAAAAAAAABgAAA+E9wkRhK78FcYF AAEVDwZehPcJYISu/AkAAAAuAAEALgACAC4AAwAuAAQAAQAAAAAAAQMFBwkLAAAAAAAAAAAAAAAA ABgAAA+EvAwRhJL7FcYFAAEmEgZehLwMYISS+wsAAAAuAAEALgACAC4AAwAuAAQALgAFAAEAAAAA AAEDBQcJCw0AAAAAAAAAAAAAAAAYAAAPhPMOEYQE+xXGBQABNxUGXoTzDmCEBPsNAAAALgABAC4A AgAuAAMALgAEAC4ABQAuAAYAAQAAAAAAAQMFBwkLDQ8AAAAAAAAAAAAAABgAAA+EKhERhHb6FcYF AAFIGAZehCoRYIR2+g8AAAAuAAEALgACAC4AAwAuAAQALgAFAC4ABgAuAAcAAQAAAAAAAQMFBwkL DQ8RAAAAAAAAAAAAABgAAA+E7hMRhFz5FcYFAAFaGwZehO4TYIRc+REAAAAuAAEALgACAC4AAwAu AAQALgAFAC4ABgAuAAcALgAIAAEAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAMYAAAPhLABEYRQ/hXG BQABsAEGXoSwAWCEUP5vKAEBAAAAAQAAAAAAAQMAAAAAAAAAAAAAAAAAAAAAAxgAAA+EQAIRhMD9 FcYFAAFAAgZehEACYITA/W8oAQMAAAAuAAEAAQAAAAAAAQMFAAAAAAAAAAAAAAAAAAAAAxgAAA+E 0AIRhDD9FcYFAAHQAgZehNACYIQw/W8oAQUAAAAuAAEALgACAAEAAAAAAAEAAAAAAAAAAAAAAAAA AAAAAAMYAAAPhKgDEYRY/RXGBQABNwIGXoSoA2CEWP1vKAECAAMALgABAAAAAAABAAAAAAAAAAAA AAAAAAAAAAADGAAAD4SoAxGEWP0VxgUAATcCBl6EqANghFj9bygBAgAEAAn/AQAAAAQAAQAAAAAA AAAAAAAAAAAAAAAAAxgAAA+EqAMRhFj9FcYFAAE3AgZehKgDYIRY/W8oAQIABQAJ/wEAAAACAAEA AAAAAAAAAAAAAAAAAAAAAAMYAAAPhKgDEYRY/RXGBQABNwIGXoSoA2CEWP1vKAABAAYAAQAAAAAA AQMFBwkLDQ8AAAAAAAAAAAAAAxgAAA+EoAURhGD6FcYFAAGgBQZehKAFYIRg+m8oAQ8AAAAuAAEA LgACAC4AAwAuAAQALgAFAC4ABgAuAAcAAQAAAAAAAQMFBwkLDQ8RAAAAAAAAAAAAAxgAAA+EMAYR hND5FcYFAAEwBgZehDAGYITQ+W8oAREAAAAuAAEALgACAC4AAwAuAAQALgAFAC4ABgAuAAcALgAI AAEAAAADAAMAAAAAAAAAAAAAAAAAAAAAAAMYAAAPhLABEYRQ/hXGBQABsAEGXoSwAWCEUP5vKAED AESWVV8AAAEAAAAAAAEDAAAAAAAAAAAAAAAAAAAAAAMYAAAPhEACEYTA/RXGBQABQAIGXoRAAmCE wP1vKAEDAAAALgABAAEAAAAAAAEDBQAAAAAAAAAAAAAAAAAAAAMYAAAPhNACEYQw/RXGBQAB0AIG XoTQAmCEMP1vKAEFAAAALgABAC4AAgABAAAAAAABAAAAAAAAAAAAAAAAAAAAAAADGAAAD4SoAxGE WP0VxgUAATcCBl6EqANghFj9bygBAgADAC4AAQAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAxgAAA+E qAMRhFj9FcYFAAE3AgZehKgDYIRY/W8oAQIABAAJ/wEAAAAEAAEAAAAAAAAAAAAAAAAAAAAAAAMY AAAPhKgDEYRY/RXGBQABNwIGXoSoA2CEWP1vKAECAAUACf8BAAAAAgABAAAAAAAAAAAAAAAAAAAA AAADGAAAD4SoAxGEWP0VxgUAATcCBl6EqANghFj9bygAAQAGAAEAAAAAAAEDBQcJCw0PAAAAAAAA AAAAAAMYAAAPhKAFEYRg+hXGBQABoAUGXoSgBWCEYPpvKAEPAAAALgABAC4AAgAuAAMALgAEAC4A BQAuAAYALgAHAAEAAAAAAAEDBQcJCw0PEQAAAAAAAAAAAAMYAAAPhDAGEYTQ+RXGBQABMAYGXoQw BmCE0PlvKAERAAAALgABAC4AAgAuAAMALgAEAC4ABQAuAAYALgAHAC4ACAABAAAA/wAAAAAAAAAA AAAAAAAAAAAAAAADGAAAD4SpARGEV/4VxgUAAakBBl6EqQFghFf+bygBBABEllVfQQAgAAEAAAAA AAMAAAAAAAAAAAAAAAAAAAAAAAMYAAAPhOADEYTJ/RXGBQAB4AMGXoTgA2CEyf1vKAEDAEEALgAB AAEAAAAAAAEEBgAAAAAAAAAAAAAAAAAAAAMYAAAPhIoFEYTJ/RXGBQABigUGXoSKBWCEyf1vKAEG AAAAQQAuAAEALgACAAEAAAAAAAEDBQcAAAAAAAAAAAAAAAAAAAMYAAAPhMAHEYQ8/RXGBQABwAcG XoTAB2CEPP1vKAEHAAAALgABAC4AAgAuAAMAAQAAAAAAAQMFBwkAAAAAAAAAAAAAAAAAAxgAAA+E 9wkRhK78FcYFAAH3CQZehPcJYISu/G8oAQkAAAAuAAEALgACAC4AAwAuAAQAAQAAAAAAAQMFBwkL AAAAAAAAAAAAAAAAAxgAAA+EvAwRhJL7FcYFAAG8DAZehLwMYISS+28oAQsAAAAuAAEALgACAC4A AwAuAAQALgAFAAEAAAAAAAEDBQcJCw0AAAAAAAAAAAAAAAMYAAAPhPMOEYQE+xXGBQAB8w4GXoTz DmCEBPtvKAENAAAALgABAC4AAgAuAAMALgAEAC4ABQAuAAYAAQAAAAAAAQMFBwkLDQ8AAAAAAAAA AAAAAxgAAA+EKhERhHb6FcYFAAEqEQZehCoRYIR2+m8oAQ8AAAAuAAEALgACAC4AAwAuAAQALgAF AC4ABgAuAAcAAQAAAAAAAQMFBwkLDQ8RAAAAAAAAAAAAAxgAAA+E7hMRhFz5FcYFAAHuEwZehO4T YIRc+W8oAREAAAAuAAEALgACAC4AAwAuAAQALgAFAC4ABgAuAAcALgAIACcAAABqfjRyAAAAAAAA AAAAAAAAan40cgAAAAAAAAAAAAAAAGp+NHIAAAAAAAAAAAAAAAAKV/5CAAAAAAAAAAAAAAAAClf+ QgAAAAAAAAAAAAAAAGp+NHIAAAAAAAAAAAAAAABqfjRyAAAAAAAAAAAAAAAAan40cgAAAAAAAAAA AAAAAGp+NHIAAAAAAAAAAAAAAADwPkUgAAAAAAAAAAAAAAAA8D5FIAAAAAAAAAAAAAAAAPA+RSAA AAAAAAAAAAAAAABAZQAyAAAAAAAAAAAAAAAAHnkrOAAAAAAAAAAAAAAAACN3PQoAAAAAAAAAAAAA AACqIcgwAAAAAAAAAAAAAAAA2FVBUgAAAAAAAAAAAAAAANhVQVIAAAAAAAAAAAAAAADYVUFSAAAA AAAAAAAAAAAADjsOfgAAAAAAAAAAAAAAAA47Dn4AAAAAAAAAAAAAAAAOOw5+AAAAAAAAAAAAAAAA DjsOfgAAAAAAAAAAAAAAANhVQVIAAAAAAAAAAAAAAADYVUFSAAAAAAAAAAAAAAAADjsOfgAAAAAA AAAAAAAAAA47Dn4AAAAAAAAAAAAAAAAOOw5+AAAAAAAAAAAAAAAA8FBsCwAAAAAAAAAAAAAAANhV QVIAAAAAAAAAAAAAAADYVUFSAAAAAAAAAAAAAAAADjsOfgAAAAAAAAAAAAAAAClkVGMAAAAAAAAA AAAAAAApZFRjAAAAAAAAAAAAAAAAKWRUYwAAAAAAAAAAAAAAAIhonSsAAAAAAAAAAAAAAAB5CPxU AAAAAAAAAAAAAAAA9FtLPwAAAAAAAAAAAAAAAOVP5DgAAAAAAAAAAAAAAAD///////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// /////////////////////////////////////////w8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAD//w8AAAAAAAAAAAAAAAAAAAAAABIAutVmuwMACQQFAAkEAQAJBAMACQQFAAkEAQAJ BAMACQQFAAkEEgDclwABAwAJBAUACQQBAAkEAwAJBAUACQQBAAkEAwAJBAUACQQAAAAAAAAAAAAA AAABABR+63IAAAAAAAAAAAABAgACAJoAAAAEAAAACAAAAOUAAAAAAAAAAgAAAHNOAwBrMwcAFAsI APA6CwASTgsAgBsOAAIvDgDbWA4AnRoPAGV8DwBBbRQAZWUWAM81FwDzbxcAInwXAFIlGQBNJhkA zzwaANNnGgAWDhsAuGUcALcZHQAxCyUAYkYlAJUnJgDacCYAzlUnAIMRKADNCS8AYEwvADtYLwB3 eDQAD3s0AKd8NgBuLTcApBY4AM81OAByRDgAj0U4AB0yOQDwIkAAXCRCAC8/QgBQX0IAeB9DALYB RAD/MUQAfQxGAHpORwDCfEsA4zdMAENMTQC2TFgAvglaAAkAWwDVLVsAt1BcALRbXABSOl4AwXBg AHR0YACneGAA2ABkAJgQZQArFmYAGDBmAN9DZwBJHmgAzD5oAJRsaABVdWoAfxdvAGMXcACJenIA ngZ0ADRLdgBhZXYAWTd5AOxDegAdUHsAqg1/AK8zgADIOIAARAqBAAA6gwDfeIcAyymMAE1okADi FZEAIHmSADl2lAA3EpUALxiVAFwElgCJMpYASAKXAJ0kmwBVPp4ASAqgAFcZowCnQ6MAET+mAGpA pwDMFagAJjOpAKEKrQAyKK8Ak2mvAO4IsgAuN7MAigK5ALYlvwAtdsAA+QLCAK4lwgBKCMMALRjE AJYZxgCKOcoAtB7LANRRzQBPZtEAZCrSAJpm0gDBBNMArwfVALNu1gDSRtsAwFXbAME+3AD8Ft4A NTngAEo84QBZP+EAB03hADhR4wB6UeMATALkACQh5AAHd+UAkhfmAAJa5wAhU+gAYgPpAAIG7gDV HO8A2QfwAGV49QAmBfcAUB33AGA2+ABNffkAFm76ACMO/AAAAAAADz0AABE9AAAAAAAAAQAAAP9A AhAAAAAAAAAAsz0AAGgAABAAQAAA//8BAAAABwBVAG4AawBuAG8AdwBuAP//AQAIAAAAAAAAAAAA AAD//wEAAAAAAP//AAACAP//AAAAAP//AAACAP//AAAAAAkAAABHHpABAAACAgYDBQQFAgME/yoA 4EF4AMAJAAAAAAAAAP8BAAAAAAAAVABpAG0AZQBzACAATgBlAHcAIABSAG8AbQBhAG4AAAA1HpAB AgAFBQECAQcGAgUHAAAAAAAAABAAAAAAAAAAAAAAAIAAAAAAUwB5AG0AYgBvAGwAAAAzLpABAAAC CwYEAgICAgIE/yoA4EN4AMAJAAAAAAAAAP8BAAAAAAAAQQByAGkAYQBsAAAAPz2QAQAAAgcDCQIC BQIEBP8qAOBDeADACQAAAAAAAAD/AQAAAAAAAEMAbwB1AHIAaQBlAHIAIABOAGUAdwAAADsOkAGG BwIBBgADAQEBAQEDAAAAAACPKBYAAAAAAAAAAQAEAAAAAABTAGkAbQBTAHUAbgAAAItbU08AADs9 kAGGBwIBBgkGAQEBAQG/AgCA+nzPOBYAAAAAAAAAAQAEAAAAAABTAGkAbQBIAGUAaQAAANGeU08A AEE9kAGGAAAAAAAAAAAAAAC/AgCA+nzPOBYAAAAAAAAAAQAEAAAAAABLAGEAaQBUAGkAXwBHAEIA MgAzADEAMgAAADsOkAECAAUAAAAAAAAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAgAAAAABXAGkAbgBn AGQAaQBuAGcAcwAAAEEekAEAAAIEBQMFBAYDAgT/AgDg/yQAQgAAAAAAAAAAnwEAAAAAAABDAGEA bQBiAHIAaQBhACAATQBhAHQAaAAAACIABAAxCIgYAACkAQAAaAEAAAAAUJQoJ1CUKCcAAAAAAgAA AAAAHAkAAPMzAAAMAB8AAAAEAAMQbgAAABwJAADzMwAADAAfAAAAbgAAAAAAAAAhAwAAAAAAAAMA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAACKBaAFtACcAIKAEgAAAAAAAAAAAAAAAAAAAPA8AADwPAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAgAAAAAAAAAAAAQygxEAAAAAAAD8/QEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAISFgAAAAA CfD/DwAJAT8AAOQEAAD///9/////fwwAAAD///9/////f////3////9/t1BcAAAEAAAyAAAAAAAA AAAAAAAAAAAAAAAAAAAAIQQAAAAAAAAAAAAAAAAAAAAAAAAQHAAACAAAAAAAAAAAAHgAAAB4AAAA AAAAAAAAAACgBQAA//8SAAAAAAAAAAAAAAAAAAAACQBoADAAMAAyADgAMwA2ADcAOQAJAGgAMAAw ADIAOAAzADYANwA5AAAAAAAAAAAAAAAAAAAAAAAAAAAASAAAAAYAAAAPAAAAAAAMAAEADAACAAwA AwAMAAQADAAFAAwABgAMAAcADAAIAAwACQAMAAoADAALAAwADAAMAA0ADAAOAAwAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD+/wAA BgECAAAAAAAAAAAAAAAAAAAAAAABAAAA4IWf8vlPaBCrkQgAKyez2TAAAAAkAQAADQAAAAEAAABw AAAABAAAAHgAAAAHAAAAjAAAAAgAAACgAAAACQAAALQAAAASAAAAwAAAAAoAAADgAAAADAAAAOwA AAANAAAA+AAAAA4AAAAEAQAADwAAAAwBAAAQAAAAFAEAABMAAAAcAQAAAgAAAOQEAAAeAAAADAAA AGgwMDI4MzY3OQAAAB4AAAAMAAAATm9ybWFsLmRvdG0AHgAAAAwAAABoMDAyODM2NzkAAAAeAAAA BAAAADIAAAAeAAAAGAAAAE1pY3Jvc29mdCBPZmZpY2UgV29yZAAAAEAAAAAAAAAAAAAAAEAAAAAA +EFR97rPAUAAAAAA+EFR97rPAQMAAAAMAAAAAwAAABwJAAADAAAA8zMAAAMAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAASAB0AFkAQwA0AHcA KwBzAFMAMgA4AE4AYwBLAEoAaABLADQALwBzAHUAeABDAHIANgBRAFoAWgBuAGEAMgBBADYASwBC AE0AdAA1AFcAdQBKAFUATABsAFkAegBtAFUAZQBaAEgAQgA0ADEATgB0ADYAcQBRAHIANwBxAHoA MwArAHcAQwBhADQAUAB2AA0ACgBFADMANgBHAHgARQBSAGoAUgBKAFcAOABRAEgAYQByAFUAMgBa AEMAMQA0AE0AMQBZAHQAbABuAHoAMQBJAHIASwA1ADYAKwBWAFMAYwB2ACsAdgA2AGQARgB2AHUA LwB0AHoAeQAwAGwAWAA5ADQASQB6AHcAaQBTADgAegBDAHgAUwBPAEsAUwBlAE8AMwANAAoAdQBj AFgAaABrADAAWgA4AFUAbABPADQAUQAzAGYAYwBiAEwAUQBGAGkARgBvAFUAawBhAGcAVABxAGQA bAArAHkAZABLAEoAbQBuAEoAUQBpAGIAagBKAFQAMgBvAEwASwB6AGEAdgBEAFIAUgAzAGUAVABy AHkATQB2ACsANQBRAEwATQA5ADMAcgBsAHcADQAKAC8AWgB3AG8AagBXAEMAOABvADQAQgBjAFYA VABOAFoARgBwAAAAHgAAABIAAABfbmV3X21zX3BJRF83MjU0MwAAAB8AAADxAAAAVABTADAAVQAz AFcAZgBqAHkANAA5AFkAZwBjAEMANwA5AHkANABPAHgAQgBiAHoALwBLADkAdQBtAEEAQgBTAGUA WQAyAG0AcQBRAFcAUgA0AE4AbwBQAGsAVwBKADYARAB2AEcAOABpAE8ADQAKADQASQB6AGgAOAAr AEIAWQB2AGIARgBnAE0AQgBxAFYAVAA4AFcAYgBrAHkAcABmAEQASQBOAEYAdgA5ADEAcgBFAEIA cwBFAHAAdQA1AEUAUwBCAE4AYQBDAGIATAB1AFAARwBVAGkAbgA2ACsANwAxAEwANgBjAGYAMAB3 AEQATgBKAGUAVQBjAGQAYQBrAA0ACgBNAEQAVAByAHAAUABFADcAUABCAG0AaAArAEsANABnAFAA MgA1AHUAcgBpAGkARwBFAEcAUgAyAG4AQQA2AG0AMABjAFkAOABNADkAeABMAE0AcABaAEsAVAA0 AHEANAA2AFcAZgBMADEASABoAEwARgAxAEsASwAzAFUATgBHAGwANwBPAGkANgA3AHUARgANAAoA cAArADEANQBqAGgAbAAyAHgAMgBWAFMAeABVAEwAdwBQAEoALwBuAEcAYQBBAHkAMAAxAHEAZQAw ADAAZQBOAC8AcQBEAGQAAAAAAB4AAAATAAAAX25ld19tc19wSURfNzI1NDMxAAAfAAAARwAAAG4A QwBEAEIARQBhAE0AbgBWAFEARAA3AGUAcgBMAHAAVwAyAFoAeABmAHEARwBQAGMANQA1AFYAYgBE AHcAagByAHkAYQBwAA0ACgBwAFcATgB4ADcAOABoAGMANQBZADcAeQBLAHIAQwAvAGMATgBKAGQA dgBBAGwAVwAvAGsAegBmAHgAUQA9AD0AAAAAAB4AAAATAAAAX25ld19tc19wSURfNzI1NDMyAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEAAAACAAAAAwAAAAQAAAAFAAAA BgAAAAcAAAAIAAAACQAAAAoAAAALAAAADAAAAA0AAAAOAAAADwAAABAAAAARAAAAEgAAABMAAAAU AAAAFQAAABYAAAAXAAAAGAAAABkAAAAaAAAAGwAAABwAAAAdAAAAHgAAAB8AAAAgAAAAIQAAACIA AAAjAAAAJAAAACUAAAAmAAAAJwAAACgAAAApAAAAKgAAACsAAAAsAAAALQAAAC4AAAAvAAAAMAAA ADEAAAAyAAAAMwAAADQAAAA1AAAANgAAADcAAAA4AAAAOQAAADoAAAA7AAAAPAAAAP7///8+AAAA PwAAAEAAAABBAAAAQgAAAEMAAABEAAAA/v///0YAAABHAAAASAAAAEkAAABKAAAASwAAAEwAAABN AAAATgAAAE8AAABQAAAAUQAAAFIAAABTAAAAVAAAAFUAAABWAAAAVwAAAFgAAABZAAAAWgAAAFsA AABcAAAAXQAAAF4AAABfAAAAYAAAAGEAAABiAAAAYwAAAGQAAABlAAAAZgAAAGcAAABoAAAAaQAA AGoAAABrAAAAbAAAAG0AAABuAAAAbwAAAHAAAABxAAAAcgAAAHMAAAB0AAAA/v///3YAAAB3AAAA eAAAAHkAAAB6AAAAewAAAHwAAAD+////fgAAAH8AAAD+///////////////////////////////9 /////f///4gAAACJAAAAjQAAAP7///+MAAAAjgAAAP7///99AAAA//////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////9SAG8AbwB0ACAARQBuAHQAcgB5AAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFgAFAf//////////AwAA AAYJAgAAAAAAwAAAAAAAAEYAAAAAAAAAAAAAAADQ98Rs97rPAYsAAADACgAAAAAAAEQAYQB0AGEA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAK AAIB////////////////AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPQAAAAAQ AAAAAAAAMQBUAGEAYgBsAGUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAA4AAgABAAAA//////////8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAABFAAAAUF8AAAAAAABXAG8AcgBkAEQAbwBjAHUAbQBlAG4AdAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGgACAQoAAAAFAAAA/////wAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4eAAAAAAAAAUAUwB1AG0AbQBhAHIAeQBJAG4AZgBv AHIAbQBhAHQAaQBvAG4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoAAIA//////////////// AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdQAAAAAQAAAAAAAABQBEAG8AYwB1 AG0AZQBuAHQAUwB1AG0AbQBhAHIAeQBJAG4AZgBvAHIAbQBhAHQAaQBvAG4AAAAAAAAAAAAAADgA AgEMAAAA//////////8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOAAAAOAcA AAAAAABNAHMAbwBEAGEAdABhAFMAdABvAHIAZQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAGgABAP//////////BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsErLave6zwEA YdNq97rPAQAAAAAAAAAAAAAAAMYA2QBRAMAAMwDDAFgAxgBaAFUA1gDAAEsA2gBSAMMA3wBTAN8A WgDNANAAPQA9AAAAAAAAAAAAAAAAAAAAAAAyAAEB//////////8IAAAAAAAAAAAAAAAAAAAAAAAA AAAAAACwSstq97rPAQBh02r3us8BAAAAAAAAAAAAAAAASQB0AGUAbQAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoAAgH/////CQAAAP////8A AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA5gAAAAAAAABQAHIAbwBwAGUA cgB0AGkAZQBzAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFgAC AP///////////////wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAABVAQAA AAAAAAEAQwBvAG0AcABPAGIAagAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAASAAIBAgAAAAYAAAD/////AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAACgAAAHkAAAAAAAAASQByAG0AVABvAG8AbABJAG4AZgBvAFMAdAByAGUAYQBtAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACQAAgD///////////////8AAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAMAAAADAAAAAAAAAABAAAAAgAAAAMAAAD+////BQAAAAYAAAAH AAAACAAAAAkAAAD+////CwAAAP7////+/////v///w8AAAAQAAAAEQAAABIAAAATAAAAFAAAABUA AAAWAAAAFwAAABgAAAAZAAAAGgAAABsAAAAcAAAAHQAAAB4AAAAfAAAAIAAAACEAAAAiAAAAIwAA ACQAAAAlAAAAJgAAACcAAAAoAAAAKQAAACoAAAD+//////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// /////////////////////////////////////////zxiOlNvdXJjZXMgU2VsZWN0ZWRTdHlsZT0i XEFQQS5YU0wiIFN0eWxlTmFtZT0iQVBBIEZpZnRoIEVkaXRpb24iIHhtbG5zOmI9Imh0dHA6Ly9z Y2hlbWFzLm9wZW54bWxmb3JtYXRzLm9yZy9vZmZpY2VEb2N1bWVudC8yMDA2L2JpYmxpb2dyYXBo eSIgeG1sbnM9Imh0dHA6Ly9zY2hlbWFzLm9wZW54bWxmb3JtYXRzLm9yZy9vZmZpY2VEb2N1bWVu dC8yMDA2L2JpYmxpb2dyYXBoeSI+PC9iOlNvdXJjZXM+AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAA8P3htbCB2ZXJzaW9uPSIxLjAiIGVuY29kaW5nPSJVVEYtOCIgc3RhbmRhbG9uZT0ibm8iPz4N CjxkczpkYXRhc3RvcmVJdGVtIGRzOml0ZW1JRD0iezc2MjA5NDlCLUU2MzUtNEQ2NS1BMDJCLUE0 NjNGRDJGRDlCN30iIHhtbG5zOmRzPSJodHRwOi8vc2NoZW1hcy5vcGVueG1sZm9ybWF0cy5vcmcv b2ZmaWNlRG9jdW1lbnQvMjAwNi9jdXN0b21YbWwiPjxkczpzY2hlbWFSZWZzPjxkczpzY2hlbWFS ZWYgZHM6dXJpPSJodHRwOi8vc2NoZW1hcy5vcGVueG1sZm9ybWF0cy5vcmcvb2ZmaWNlRG9jdW1l bnQvMjAwNi9iaWJsaW9ncmFwaHkiLz48L2RzOnNjaGVtYVJlZnM+PC9kczpkYXRhc3RvcmVJdGVt PgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAP7/AwoAAP////8G CQIAAAAAAMAAAAAAAABGJwAAAE1pY3Jvc29mdCBPZmZpY2UgV29yZCA5Ny0yMDAzIERvY3VtZW50 AAoAAABNU1dvcmREb2MAEAAAAFdvcmQuRG9jdW1lbnQuOAD0ObJxAAAAAAAAAAAAAAAAAAAAAAAA AMgbMgEMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAADIGzIBEAAAAAAAAAAGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAA/v8AAAYBAgAAAAAAAAAAAAAAAAAAAAAAAgAAAALVzdWcLhsQk5cIACss +a5EAAAABdXN1ZwuGxCTlwgAKyz5rkgBAAAEAQAADAAAAAEAAABoAAAADwAAAHAAAAAFAAAAmAAA AAYAAACgAAAAEQAAAKgAAAAXAAAAsAAAAAsAAABJAHIAbQBUAG8AbwBsAFMATABlAHYAZQBsAEkA bgBmAG8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJAACAQsAAAAEAAAA/////wAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0AAAAQAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA//// ////////////AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAD///////////////8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP///////////////wAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALgAAAAQAAAAwAAAABMAAADIAAAAFgAAANAAAAAN AAAA2AAAAAwAAADlAAAAAgAAAOQEAAAeAAAAIAAAAEh1YXdlaSBUZWNobm9sb2dpZXMgQ28uLEx0 ZC4AAAAAAwAAAG4AAAADAAAAHwAAAAMAAADwPAAAAwAAAAAADAALAAAAAAAAAAsAAAAAAAAACwAA AAAAAAALAAAAAAAAAB4QAAABAAAAAQAAAAAMEAAAAgAAAB4AAAAGAAAAVGl0bGUAAwAAAAEAAAAA 8AUAAAkAAAAAAAAAUAAAAAEAAAAMAQAAAgAAABQBAAADAAAAKAEAAAQAAAAYAwAABQAAADQDAAAG AAAAIAUAAAcAAAA8BQAACAAAANQFAAAHAAAAAgAAAAYAAABzZmxhZwADAAAAEgAAAF9uZXdfbXNf cElEXzcyNTQzAAQAAAAVAAAAX25ld19tc19wSURfNzI1NDNfMDAABQAAABMAAABfbmV3X21zX3BJ RF83MjU0MzEABgAAABYAAABfbmV3X21zX3BJRF83MjU0MzFfMDAABwAAABMAAABfbmV3X21zX3BJ RF83MjU0MzIACAAAABYAAABfbmV3X21zX3BJRF83MjU0MzJfMDAAAAIAAADkBAAAHgAAAAwAAAAx NDA4MzUxMzE5AAAfAAAA9AAAACgAMwApAG4A --_002_814D0BFB77D95844A01CA29B44CBF8A7A27BADlhreml513mbbchina_-- From nobody Mon Aug 18 15:11:32 2014 Return-Path: X-Original-To: secauth@ietfa.amsl.com Delivered-To: secauth@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id CD4E21A86E6; Mon, 18 Aug 2014 15:11:28 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.168 X-Spam-Level: X-Spam-Status: No, score=-1.168 tagged_above=-999 required=5 tests=[BAYES_05=-0.5, RP_MATCHES_RCVD=-0.668] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id kFUBTy7PwxkM; Mon, 18 Aug 2014 15:11:24 -0700 (PDT) Received: from mail.rozanak.com (mail.rozanak.com [IPv6:2a01:238:42ad:1500:aa19:4238:e48f:61cf]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id AAA521A86E4; Mon, 18 Aug 2014 15:11:24 -0700 (PDT) Received: from localhost (unknown [127.0.0.1]) by mail.rozanak.com (Postfix) with ESMTP id 15E9B5660137; Mon, 18 Aug 2014 22:11:23 +0000 (UTC) X-Virus-Scanned: amavisd-new at rozanak.com Received: from mail.rozanak.com ([127.0.0.1]) by localhost (mail.iknowlaws.de [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id oUXbb2j0A8W1; Tue, 19 Aug 2014 00:10:52 +0200 (CEST) Received: from kopoli (p5DCC776E.dip0.t-ipconnect.de [93.204.119.110]) (using TLSv1 with cipher AES128-SHA (128/128 bits)) (No client certificate requested) by mail.rozanak.com (Postfix) with ESMTPSA id 6DDB65660136; Tue, 19 Aug 2014 00:10:52 +0200 (CEST) From: "Hosnieh Rafiee" To: References: <814D0BFB77D95844A01CA29B44CBF8A7A27C16@lhreml513-mbb.china.huawei.com> <814D0BFB77D95844A01CA29B44CBF8A7A27C5E@lhreml513-mbb.china.huawei.com> <20140818163957.GP14392@mournblade.imrryr.org> <006101cfbb2a$e7a6c2c0$b6f44840$@rozanak.com> In-Reply-To: <006101cfbb2a$e7a6c2c0$b6f44840$@rozanak.com> Date: Tue, 19 Aug 2014 00:10:49 +0200 Message-ID: <006b01cfbb31$45f54fd0$d1dfef70$@rozanak.com> MIME-Version: 1.0 Content-Type: text/plain; charset="US-ASCII" Content-Transfer-Encoding: 7bit X-Mailer: Microsoft Outlook 14.0 Thread-Index: AQIt1pOjsPyzV77MbbdbaklNJbfYwQD2UX1aAgv1nhUBhCJUCZr2gVsg Content-Language: en-us Archived-At: http://mailarchive.ietf.org/arch/msg/secauth/pSych2myG0TjJBcdTq2d9dz6BSo Cc: secauth@ietf.org Subject: Re: [Secauth] [saag] secauth requirements and usecase scenarios - link X-BeenThere: secauth@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: Omni-purpose Network-layer based Secure Authentication non-working group discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 18 Aug 2014 22:11:29 -0000 Follow up, Let me give you an example: Consider a scenario where Client A wants to connect to mail server B. Mail server B needs to authenticate client A and then let it to mail server B to submits its email. both nodes uses TLS to secure this process. If B supports a CA, then A can easily trust it. If not, A has 3 options, 1- stop using B,2- change to plain text or 3-accepts B's certificate as it is. Both 2 and 3 are not quite secure but the latter approach is better than the former one since the attacker only at the beginning of this communication might spoof the identity of B and steal User A's credential. If the hardcopy certification of B is available in node A then, the likelihood of this attacks is almost zero. However in this case A should keep the mapping of IP and keys otherwise other approaches are in use. This API is supposed to help in similar scenarios without having complexity or dependency to any infrastructure. Combination of network layer approaches with other layer above network layer are better handle this secure authentication since it already has an opportunity to authenticate node B in network layer and in case its identity is ok, let the application to process any other authentication such as password based, token based, etc. Please note that this is only an example scenario. The main focus is also on virtualization and authentication in dynamic environment. Best, Hosnieh P.S. we also welcome any contributors :-) From nobody Mon Aug 18 22:37:57 2014 Return-Path: X-Original-To: secauth@ietfa.amsl.com Delivered-To: secauth@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 4B1881A87CE; Mon, 18 Aug 2014 22:37:54 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.568 X-Spam-Level: X-Spam-Status: No, score=-2.568 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RP_MATCHES_RCVD=-0.668] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id uvDBw_U1g8px; Mon, 18 Aug 2014 22:37:52 -0700 (PDT) Received: from mail.rozanak.com (mail.rozanak.com [IPv6:2a01:238:42ad:1500:aa19:4238:e48f:61cf]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 391301A02D7; Mon, 18 Aug 2014 22:37:52 -0700 (PDT) Received: from localhost (unknown [127.0.0.1]) by mail.rozanak.com (Postfix) with ESMTP id 7A23E566013B; Tue, 19 Aug 2014 05:37:50 +0000 (UTC) X-Virus-Scanned: amavisd-new at rozanak.com Received: from mail.rozanak.com ([127.0.0.1]) by localhost (mail.iknowlaws.de [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id MLA-5HxxPQah; Tue, 19 Aug 2014 07:37:21 +0200 (CEST) Received: from kopoli (p5DCC776E.dip0.t-ipconnect.de [93.204.119.110]) (using TLSv1 with cipher AES128-SHA (128/128 bits)) (No client certificate requested) by mail.rozanak.com (Postfix) with ESMTPSA id AA0305660137; Tue, 19 Aug 2014 07:37:20 +0200 (CEST) From: "Hosnieh Rafiee" To: References: <814D0BFB77D95844A01CA29B44CBF8A7A27C16@lhreml513-mbb.china.huawei.com> <814D0BFB77D95844A01CA29B44CBF8A7A27C5E@lhreml513-mbb.china.huawei.com> <20140818163957.GP14392@mournblade.imrryr.org> <006101cfbb2a$e7a6c2c0$b6f44840$@rozanak.com> <006b01cfbb31$45f54fd0$d1dfef70$@rozanak.com> <20140819003927.GR14392@mournblade.imrryr.org> In-Reply-To: <20140819003927.GR14392@mournblade.imrryr.org> Date: Tue, 19 Aug 2014 07:37:18 +0200 Message-ID: <002301cfbb6f$a51c8f30$ef55ad90$@rozanak.com> MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit X-Mailer: Microsoft Outlook 14.0 Thread-Index: AQIt1pOjsPyzV77MbbdbaklNJbfYwQD2UX1aAgv1nhUBhCJUCQHO7VDIAR4E9++a34/wcA== Content-Language: en-us Archived-At: http://mailarchive.ietf.org/arch/msg/secauth/xz_yhGmFBnPaEqfJTy_tWBR3fO8 Cc: secauth@ietf.org Subject: Re: [Secauth] [saag] secauth requirements and usecase scenarios - link X-BeenThere: secauth@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: Omni-purpose Network-layer based Secure Authentication non-working group discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 19 Aug 2014 05:37:54 -0000 Thanks again Viktor, please see my responses inline... > > > Consider a scenario where Client A wants to connect to mail server B. > > Mail server B needs to authenticate client A and then let it to mail > > server B to submits its email. Both nodes uses TLS to secure this > > process. If B supports a CA, > > [ That is, B's certificate is signed by a CA trusted by A. ] True > > then A can easily trust it. > > [ Then A can authenticate the security of its TLS-encrypted channel to B. ] True > > If not, A has 3 options, > > > > 1-stop using B, > > 2- change to plain text or > > 3-accepts B's certificate as it is. > > [ There is also a possibility of B using DANE, and A's MUA (some day) > supporting DANE, in which case the need for a mutually trusted CA > goes away. ] Have you ever had a chance to read CGA-TSIG draft (In new version I will remove many unrelated sections)? This is supposed to help for the last miles of Internet or supposed to help DNSSEC in last miles where it is not easy to handle data confidentiality and secure authentication. It supposed to automate this process. (it is of course not about only CGA but other network layer approaches to support both IPv4 and iPv6 enabled network) That draft is an example of what secauth plan to do but, of course, we are not planning to use CGA but some other approaches. DANE uses DNSSEC that is not easy to handle the last miles again and such approaches like secauth can help in this regard where not easily can authenticate a node. In other words, secauth plans to use easier approach or only IP based and then you can combine this approach with TLS or any other approaches above network layer. This is what I meant in the draft. Let me give you another example about SSH. (it is also mentioned in opportunistic TLS) Client A wants to connect to server B via SSH. Server B does not support certificate signed by a CA. So it is vulnerable in first point. Now, supposed a scenario where secauth is in use. A knows the IP address or domain name of B. A and B supports secauth and implemented it. A request for connecting to B. B sends its certificate that is bound to B's IP address. Since A knows the IP address of B, A ensures that this certificate is from B. So an attacker cannot spoof this connection even in first place. Is it clear? > Option 2 is wrong, and specifically highlighted as such in the opportunistic TLS > draft. True Opportunistic TLS highlighted the problem. But secauth is a possible solution to a problem > > Both 2 and 3 are not quite secure but the latter approach is better > > than the former one since the attacker only at the beginning of this > > communication might spoof the identity of B and steal User A's credential. > > Indeed, 3 is better than 2. > > > If the hardcopy certification of B is available in node A then, the > > likelihood of this attacks is almost zero. However in this case A > > should keep the mapping of IP and keys otherwise other approaches are in > use. > > s/certification/certificate/ > > Don't see where you're going with the second sentence. Please see above. > > This API is supposed to help in similar scenarios without having > > complexity or dependency to any infrastructure. > > What API? What problem is the new API intended to address? On what > foundation is the API supposed to be implemented? The authentication and authorization without the need of infrastructure and help other services where not easy to handle the last miles. It can be DANE, DNSSEC, etc. > > Combination of network layer approaches with other layer above network > > layer are better handle this secure authentication since it already > > has an opportunity to authenticate node B in network layer and in case > > its identity is ok, let the application to process any other > > authentication such as password based, token based, etc. > > Well, in many cases the mapping from B's DNS name in A's configuration to B's > IP address is over insecure DNS. Then it does not matter if A can get a secure > connection to B's IP address. The MiTM wins by spoofing the DNS replies. > You'd need a network-layer security association that is tied to DNS names, and > indeed APIs to establish network connections that communicate these name > to the network layer. This is a difficult problem. No, please check CGA-TSIG draft. That is supposed to answer that question. > It is unclear what your intentions are in this space. > > > Please note that this is only an example scenario. The main focus is > > also on virtualization and authentication in dynamic environment. > > You probably need to be a bit more specific than that. I hope that is clear. I am planning to have an online discussion next week. I will be glad to explain to anyone who is interested. http://doodle.com/se3gyys9dnre4nyr If these time doesn't work for anyone, feel free to suggest other times. Best, Hosnieh From nobody Mon Aug 18 22:45:32 2014 Return-Path: X-Original-To: secauth@ietfa.amsl.com Delivered-To: secauth@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 3A9D41A880E; Mon, 18 Aug 2014 22:45:30 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.568 X-Spam-Level: X-Spam-Status: No, score=-2.568 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RP_MATCHES_RCVD=-0.668] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id FClkewfvG-cW; Mon, 18 Aug 2014 22:45:28 -0700 (PDT) Received: from mail.rozanak.com (mail.rozanak.com [IPv6:2a01:238:42ad:1500:aa19:4238:e48f:61cf]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 92B891A87F2; Mon, 18 Aug 2014 22:45:28 -0700 (PDT) Received: from localhost (unknown [127.0.0.1]) by mail.rozanak.com (Postfix) with ESMTP id 74D62566013B; Tue, 19 Aug 2014 05:45:26 +0000 (UTC) X-Virus-Scanned: amavisd-new at rozanak.com Received: from mail.rozanak.com ([127.0.0.1]) by localhost (mail.iknowlaws.de [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id T5WWFuYOTTlG; Tue, 19 Aug 2014 07:44:56 +0200 (CEST) Received: from kopoli (p5DCC776E.dip0.t-ipconnect.de [93.204.119.110]) (using TLSv1 with cipher AES128-SHA (128/128 bits)) (No client certificate requested) by mail.rozanak.com (Postfix) with ESMTPSA id 19E4F5660137; Tue, 19 Aug 2014 07:44:56 +0200 (CEST) From: "Hosnieh Rafiee" To: "'Nico Williams'" References: <814D0BFB77D95844A01CA29B44CBF8A7A27C16@lhreml513-mbb.china.huawei.com> <814D0BFB77D95844A01CA29B44CBF8A7A27C5E@lhreml513-mbb.china.huawei.com> <002201cfbb6b$ef7fab10$ce7f0130$@rozanak.com> In-Reply-To: Date: Tue, 19 Aug 2014 07:44:55 +0200 Message-ID: <002401cfbb70$b49ad150$1dd073f0$@rozanak.com> MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable X-Mailer: Microsoft Outlook 14.0 Thread-Index: AQIt1pOjsPyzV77MbbdbaklNJbfYwQD2UX1aARBc550BhUY//QEdb1DGmvXnhDA= Content-Language: en-us Archived-At: http://mailarchive.ietf.org/arch/msg/secauth/VL6HnLf39pHQYA2xbz7go0_MfQs Cc: hosnieh.rafiee@huawei.com, secauth@ietf.org, saag@ietf.org Subject: Re: [Secauth] [saag] secauth requirements and usecase scenarios - link X-BeenThere: secauth@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: Omni-purpose Network-layer based Secure Authentication non-working group discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 19 Aug 2014 05:45:30 -0000 >=20 > On Tue, Aug 19, 2014 at 12:10 AM, Hosnieh Rafiee > wrote: > > Hi Nikco, > >> These are requirements and use cases for what protocol work? what = WG? > >> > > > > Secauth . it is not yet WG. >=20 > Are there any BoF materials? Proceedings? There are discussions of mailinglist http://www.ietf.org/mail-archive/web/secauth/current/maillist.html I also summarized last messages discussed on mailinglist. It was not so = active recently because I needed to complete first version of the = requirement draft before I can start any discussion but now I am = following it and will actively answer questions, concerns, plans, etc. You can find the link in " [Secauth] All messages, Hosnieh Rafiee" I plan to have a BoF for the upcoming IETF in Hawaii. Next week also I prepared some slides to explain this approach and = welcome online participation.=20 There is a doodle poll for the times and dates (as I already explained = in my last message to Viktor) http://doodle.com/se3gyys9dnre4nyr=20 Thanks for asking, Best, Hosnieh From nobody Tue Aug 19 05:23:50 2014 Return-Path: X-Original-To: secauth@ietfa.amsl.com Delivered-To: secauth@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 873661A03F6; Tue, 19 Aug 2014 05:23:47 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2 X-Spam-Level: X-Spam-Status: No, score=-2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, SPF_PASS=-0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id yoc6EwHHR0E4; Tue, 19 Aug 2014 05:23:46 -0700 (PDT) Received: from mail-qa0-x234.google.com (mail-qa0-x234.google.com [IPv6:2607:f8b0:400d:c00::234]) (using TLSv1 with cipher ECDHE-RSA-RC4-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id C5CD01A0411; Tue, 19 Aug 2014 05:23:45 -0700 (PDT) Received: by mail-qa0-f52.google.com with SMTP id j15so5471998qaq.25 for ; Tue, 19 Aug 2014 05:23:45 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=from:content-type:mime-version:subject:in-reply-to:date:cc :content-transfer-encoding:message-id:references:to; bh=Z1HXbKzZJhmKsOIruqSriJnVFxXUwfyr7krb/2MvhMg=; b=iu1zpo/NNNTrf1oH6MP+LjnmfmYniT+rZ0jB9RGQn8rNKEwAhKQhhhDQTLdzelgxmB OupQtYE1+Gk6IZ3W4KnB1GdcnDfOwNynWcqr0jwPFvNZASTJhbTIf+N8MTzmJ/sPh3We VUhvuHI9/UFTNwW8ub2E31yGxq9lelfg/OcNI/vOCRbPXZVYKRq/mkjMR9rJKB0jMH+B MOGipYUYvBn6UK1bMirLpwGGa+022cQXNpSy5NgmjnEbBI8mZxFOwR9+hao18IvToDZH fq0dr0M2HXgcRSNclDLXcFSpikhKfoDe4LtD8njP31k5PgS5lFjxmq0r5gGcrxwZP1XE kxdg== X-Received: by 10.229.26.10 with SMTP id b10mr66070135qcc.29.1408451024936; Tue, 19 Aug 2014 05:23:44 -0700 (PDT) Received: from [192.168.1.4] (209-6-114-252.c3-0.arl-ubr1.sbo-arl.ma.cable.rcn.com. [209.6.114.252]) by mx.google.com with ESMTPSA id t3sm34918517qaj.0.2014.08.19.05.23.43 for (version=TLSv1 cipher=ECDHE-RSA-RC4-SHA bits=128/128); Tue, 19 Aug 2014 05:23:43 -0700 (PDT) From: Kathleen Moriarty X-Google-Original-From: Kathleen Moriarty Content-Type: text/plain; charset=us-ascii Mime-Version: 1.0 (1.0) X-Mailer: iPhone Mail (11D257) In-Reply-To: <002401cfbb70$b49ad150$1dd073f0$@rozanak.com> Date: Tue, 19 Aug 2014 08:23:42 -0400 Content-Transfer-Encoding: quoted-printable Message-Id: References: <814D0BFB77D95844A01CA29B44CBF8A7A27C16@lhreml513-mbb.china.huawei.com> <814D0BFB77D95844A01CA29B44CBF8A7A27C5E@lhreml513-mbb.china.huawei.com> <002201cfbb6b$ef7fab10$ce7f0130$@rozanak.com> <002401cfbb70$b49ad150$1dd073f0$@rozanak.com> To: Hosnieh Rafiee Archived-At: http://mailarchive.ietf.org/arch/msg/secauth/V_c5ipS-PWfeg8p6xb5ked8DW7g Cc: Nico Williams , "secauth@ietf.org" , "saag@ietf.org" Subject: Re: [Secauth] [saag] secauth requirements and usecase scenarios - link X-BeenThere: secauth@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: Omni-purpose Network-layer based Secure Authentication non-working group discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 19 Aug 2014 12:23:47 -0000 Hosnieh, I think it would help a lot if you could add more background and context to t= he introduction so folks know if it's relevant to their areas of work. The d= raft jumps right in without that. Viktor's message was helpful if that's what you had intended to cover (last m= ile description he provided). Thanks, Kathleen Sent from my iPhone On Aug 19, 2014, at 1:44 AM, "Hosnieh Rafiee" wrote: >>=20 >> On Tue, Aug 19, 2014 at 12:10 AM, Hosnieh Rafiee >> wrote: >>> Hi Nikco, >>>> These are requirements and use cases for what protocol work? what WG? >>>=20 >>> Secauth . it is not yet WG. >>=20 >> Are there any BoF materials? Proceedings? >=20 > There are discussions of mailinglist > http://www.ietf.org/mail-archive/web/secauth/current/maillist.html >=20 >=20 > I also summarized last messages discussed on mailinglist. It was not so ac= tive recently because I needed to complete first version of the requirement d= raft before I can start any discussion but now I am following it and will ac= tively answer questions, concerns, plans, etc. > You can find the link in " [Secauth] All messages, Hosnieh Rafiee" > I plan to have a BoF for the upcoming IETF in Hawaii. >=20 > Next week also I prepared some slides to explain this approach and welcome= online participation.=20 > There is a doodle poll for the times and dates (as I already explained in m= y last message to Viktor) > http://doodle.com/se3gyys9dnre4nyr=20 >=20 > Thanks for asking, > Best, > Hosnieh >=20 >=20 > _______________________________________________ > saag mailing list > saag@ietf.org > https://www.ietf.org/mailman/listinfo/saag From nobody Tue Aug 19 06:01:52 2014 Return-Path: X-Original-To: secauth@ietfa.amsl.com Delivered-To: secauth@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id B5D541A88E9; Tue, 19 Aug 2014 06:01:41 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.869 X-Spam-Level: X-Spam-Status: No, score=-4.869 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, RP_MATCHES_RCVD=-0.668, SPF_PASS=-0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id KND0Mp86REHj; Tue, 19 Aug 2014 06:01:39 -0700 (PDT) Received: from lhrrgout.huawei.com (lhrrgout.huawei.com [194.213.3.17]) (using TLSv1 with cipher RC4-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 18F8F1A88E7; Tue, 19 Aug 2014 06:01:38 -0700 (PDT) Received: from 172.18.7.190 (EHLO lhreml402-hub.china.huawei.com) ([172.18.7.190]) by lhrrg01-dlp.huawei.com (MOS 4.3.7-GA FastPath queued) with ESMTP id BLK92453; Tue, 19 Aug 2014 13:01:37 +0000 (GMT) Received: from LHREML513-MBB.china.huawei.com ([fe80::b810:863:a57e:3ff]) by lhreml402-hub.china.huawei.com ([10.201.5.241]) with mapi id 14.03.0158.001; Tue, 19 Aug 2014 14:01:34 +0100 From: Hosnieh Rafiee To: Kathleen Moriarty Thread-Topic: [saag] secauth requirements and usecase scenarios - link Thread-Index: AQHPuzZGdaJ65bndHEiF+QGYm74zNJvXUKyAgAADpQCAAAXngIAAb2sAgAAYzEA= Date: Tue, 19 Aug 2014 13:01:33 +0000 Message-ID: <814D0BFB77D95844A01CA29B44CBF8A7A27EEA@lhreml513-mbb.china.huawei.com> References: <814D0BFB77D95844A01CA29B44CBF8A7A27C16@lhreml513-mbb.china.huawei.com> <814D0BFB77D95844A01CA29B44CBF8A7A27C5E@lhreml513-mbb.china.huawei.com> <002201cfbb6b$ef7fab10$ce7f0130$@rozanak.com> <002401cfbb70$b49ad150$1dd073f0$@rozanak.com> In-Reply-To: Accept-Language: zh-CN, en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.221.82.100] Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 X-CFilter-Loop: Reflected Archived-At: http://mailarchive.ietf.org/arch/msg/secauth/1S-lvItGqSc4BCN7KfrEXO3c92E Cc: "secauth@ietf.org" , "saag@ietf.org" , Hosnieh Rafiee Subject: Re: [Secauth] [saag] secauth requirements and usecase scenarios - link X-BeenThere: secauth@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: Omni-purpose Network-layer based Secure Authentication non-working group discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 19 Aug 2014 13:01:41 -0000 Hi Kathleen, Thanks for your suggestion. >=20 > I think it would help a lot if you could add more background and > context to the introduction so folks know if it's relevant to their > areas of work. The draft jumps right in without that. >=20 > Viktor's message was helpful if that's what you had intended to cover > (last mile description he provided). Ok, I will add more background text and will also cover the discussion that= I had with Viktor. By his comments, I also noticed that there is missing s= ection in the draft while I thought everything is clear :-|=20 Thanks, Best, Hosnieh From nobody Tue Aug 19 07:53:58 2014 Return-Path: X-Original-To: secauth@ietfa.amsl.com Delivered-To: secauth@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id AF6B71A892C; Tue, 19 Aug 2014 07:53:56 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.902 X-Spam-Level: X-Spam-Status: No, score=-1.902 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id idLpCLgHY_Rg; Tue, 19 Aug 2014 07:53:54 -0700 (PDT) Received: from mailc2.tigertech.net (mailc2.tigertech.net [208.80.4.156]) (using TLSv1 with cipher ADH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id D9D821A891A; Tue, 19 Aug 2014 07:53:54 -0700 (PDT) Received: from localhost (localhost [127.0.0.1]) by mailc2.tigertech.net (Postfix) with ESMTP id 989551A14AC; Tue, 19 Aug 2014 07:53:54 -0700 (PDT) X-Virus-Scanned: Debian amavisd-new at c2.tigertech.net Received: from Joels-MacBook-Pro.local (pool-70-106-135-198.clppva.east.verizon.net [70.106.135.198]) (using TLSv1 with cipher DHE-RSA-AES128-SHA (128/128 bits)) (No client certificate requested) by mailc2.tigertech.net (Postfix) with ESMTPSA id D96421A14AA; Tue, 19 Aug 2014 07:53:53 -0700 (PDT) Message-ID: <53F36502.4070002@joelhalpern.com> Date: Tue, 19 Aug 2014 10:53:54 -0400 From: "Joel M. Halpern" User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.9; rv:24.0) Gecko/20100101 Thunderbird/24.6.0 MIME-Version: 1.0 To: Hosnieh Rafiee , saag@ietf.org References: <814D0BFB77D95844A01CA29B44CBF8A7A27C16@lhreml513-mbb.china.huawei.com> <814D0BFB77D95844A01CA29B44CBF8A7A27C5E@lhreml513-mbb.china.huawei.com> <20140818163957.GP14392@mournblade.imrryr.org> <006101cfbb2a$e7a6c2c0$b6f44840$@rozanak.com> <006b01cfbb31$45f54fd0$d1dfef70$@rozanak.com> <20140819003927.GR14392@mournblade.imrryr.org> <002301cfbb6f$a51c8f30$ef55ad90$@rozanak.com> In-Reply-To: <002301cfbb6f$a51c8f30$ef55ad90$@rozanak.com> Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Archived-At: http://mailarchive.ietf.org/arch/msg/secauth/IVSiD5L81tkRk2Isu8VY3mVqZK8 Cc: secauth@ietf.org Subject: Re: [Secauth] [saag] secauth requirements and usecase scenarios - link X-BeenThere: secauth@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: Omni-purpose Network-layer based Secure Authentication non-working group discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 19 Aug 2014 14:53:56 -0000 Trimming... On 8/19/14, 1:37 AM, Hosnieh Rafiee wrote: ... > Let me give you another example about SSH. > > (it is also mentioned in opportunistic TLS) > Client A wants to connect to server B via SSH. Server B does not support > certificate signed by a CA. So it is vulnerable in first point. Now, > supposed a scenario where secauth is in use. A knows the IP address or > domain name of B. A and B supports secauth and implemented it. A request for > connecting to B. B sends its certificate that is bound to B's IP address. > Since A knows the IP address of B, A ensures that this certificate is from > B. > So an attacker cannot spoof this connection even in first place. > > Is it clear? ... As far as I can tell, any solution which assumes A knows the current IP address of B without DNS or any other rendezvous protocol is a non-starter. If it is using DNS, then the DNS needs to be protected, or the structure fails. If DNS is protected, then DANE could be used. With greater flexibility and less modification of existing tools. Yours, Joel From nobody Tue Aug 19 08:20:21 2014 Return-Path: X-Original-To: secauth@ietfa.amsl.com Delivered-To: secauth@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 3901E1A8900; Tue, 19 Aug 2014 08:20:19 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.869 X-Spam-Level: X-Spam-Status: No, score=-4.869 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, RP_MATCHES_RCVD=-0.668, SPF_PASS=-0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id UqZ6imhXppus; Tue, 19 Aug 2014 08:20:17 -0700 (PDT) Received: from lhrrgout.huawei.com (lhrrgout.huawei.com [194.213.3.17]) (using TLSv1 with cipher RC4-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 05C561A03E3; Tue, 19 Aug 2014 08:20:16 -0700 (PDT) Received: from 172.18.7.190 (EHLO lhreml401-hub.china.huawei.com) ([172.18.7.190]) by lhrrg02-dlp.huawei.com (MOS 4.3.7-GA FastPath queued) with ESMTP id BIK34953; Tue, 19 Aug 2014 15:20:05 +0000 (GMT) Received: from LHREML513-MBB.china.huawei.com ([fe80::b810:863:a57e:3ff]) by lhreml401-hub.china.huawei.com ([10.201.5.240]) with mapi id 14.03.0158.001; Tue, 19 Aug 2014 16:20:01 +0100 From: Hosnieh Rafiee To: "Joel M. Halpern" , Hosnieh Rafiee , "saag@ietf.org" Thread-Topic: [Secauth] [saag] secauth requirements and usecase scenarios - link Thread-Index: AQHPu716I2JoxqEXl0yY74cckUnKaJvYCNtg Date: Tue, 19 Aug 2014 15:20:00 +0000 Message-ID: <814D0BFB77D95844A01CA29B44CBF8A7A27FD5@lhreml513-mbb.china.huawei.com> References: <814D0BFB77D95844A01CA29B44CBF8A7A27C16@lhreml513-mbb.china.huawei.com> <814D0BFB77D95844A01CA29B44CBF8A7A27C5E@lhreml513-mbb.china.huawei.com> <20140818163957.GP14392@mournblade.imrryr.org> <006101cfbb2a$e7a6c2c0$b6f44840$@rozanak.com> <006b01cfbb31$45f54fd0$d1dfef70$@rozanak.com> <20140819003927.GR14392@mournblade.imrryr.org> <002301cfbb6f$a51c8f30$ef55ad90$@rozanak.com> <53F36502.4070002@joelhalpern.com> In-Reply-To: <53F36502.4070002@joelhalpern.com> Accept-Language: zh-CN, en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.221.82.100] Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 X-CFilter-Loop: Reflected Archived-At: http://mailarchive.ietf.org/arch/msg/secauth/J_uKqfJqrA0tlC08v-Loocc8QXc Cc: "secauth@ietf.org" Subject: Re: [Secauth] [saag] secauth requirements and usecase scenarios - link X-BeenThere: secauth@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: Omni-purpose Network-layer based Secure Authentication non-working group discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 19 Aug 2014 15:20:19 -0000 Hi Joel, Thanks for your comment. See my response inline.. >=20 > As far as I can tell, any solution which assumes A knows the current IP > address of B without DNS or any other rendezvous protocol is a non- > starter. >=20 > If it is using DNS, then the DNS needs to be protected, or the > structure fails. >=20 > If DNS is protected, then DANE could be used. With greater flexibility > and less modification of existing tools. As far as I understood from DANE document, by knowing only the IP address o= f a node, DANE cannot work because IP spoofing is still possible and there = is no CA to protect this. No bindings of IP address is available. The purpose of secauth is to provide this binding for other mechanisms. For instance, it is possible to use secauth for a part of this authenticati= on and combine it with DANE or any other approaches. Secauth only provides = a transparent API for you to use it in other layers. I am adding some background information but in the meanwhile you can also c= heck CGA-TSIG draft to see how a solution like secauth suppose to work. Best, Hosnieh From nobody Wed Aug 20 01:25:52 2014 Return-Path: X-Original-To: secauth@ietfa.amsl.com Delivered-To: secauth@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id ACF551A0085; Wed, 20 Aug 2014 01:25:50 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.97 X-Spam-Level: X-Spam-Status: No, score=-2.97 tagged_above=-999 required=5 tests=[BAYES_40=-0.001, RCVD_IN_DNSWL_MED=-2.3, RP_MATCHES_RCVD=-0.668, SPF_PASS=-0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id tmtxoV3zD92F; Wed, 20 Aug 2014 01:25:48 -0700 (PDT) Received: from lhrrgout.huawei.com (lhrrgout.huawei.com [194.213.3.17]) (using TLSv1 with cipher RC4-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 856951A005C; Wed, 20 Aug 2014 01:25:47 -0700 (PDT) Received: from 172.18.7.190 (EHLO lhreml404-hub.china.huawei.com) ([172.18.7.190]) by lhrrg02-dlp.huawei.com (MOS 4.3.7-GA FastPath queued) with ESMTP id BIK96381; Wed, 20 Aug 2014 08:25:45 +0000 (GMT) Received: from LHREML513-MBB.china.huawei.com ([fe80::b810:863:a57e:3ff]) by lhreml404-hub.china.huawei.com ([::1]) with mapi id 14.03.0158.001; Wed, 20 Aug 2014 09:25:41 +0100 From: Hosnieh Rafiee To: "saag@ietf.org" Thread-Topic: [saag] [Secauth] secauth requirements and usecase scenarios - link Thread-Index: AQHPu8LDhZ897soOiEqt1l7j1u4jrZvZH7KA Date: Wed, 20 Aug 2014 08:25:41 +0000 Message-ID: <814D0BFB77D95844A01CA29B44CBF8A7A2838A@lhreml513-mbb.china.huawei.com> References: <814D0BFB77D95844A01CA29B44CBF8A7A27C16@lhreml513-mbb.china.huawei.com> <814D0BFB77D95844A01CA29B44CBF8A7A27C5E@lhreml513-mbb.china.huawei.com> <20140818163957.GP14392@mournblade.imrryr.org> <006101cfbb2a$e7a6c2c0$b6f44840$@rozanak.com> <006b01cfbb31$45f54fd0$d1dfef70$@rozanak.com> <20140819003927.GR14392@mournblade.imrryr.org> <002301cfbb6f$a51c8f30$ef55ad90$@rozanak.com> <53F36502.4070002@joelhalpern.com> <814D0BFB77D95844A01CA29B44CBF8A7A27FD5@lhreml513-mbb.china.huawei.com> <20140819153137.GA14392@mournblade.imrryr.org> In-Reply-To: <20140819153137.GA14392@mournblade.imrryr.org> Accept-Language: zh-CN, en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.221.82.100] Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 X-CFilter-Loop: Reflected Archived-At: http://mailarchive.ietf.org/arch/msg/secauth/s3ECrlqLakBY9fHu74F9ngLYmFk Cc: "secauth@ietf.org" Subject: Re: [Secauth] [saag] secauth requirements and usecase scenarios - link X-BeenThere: secauth@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: Omni-purpose Network-layer based Secure Authentication non-working group discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 20 Aug 2014 08:25:51 -0000 Thanks again Viktor for your continuous suggestions and comments. >=20 > On Tue, Aug 19, 2014 at 03:20:00PM +0000, Hosnieh Rafiee wrote: >=20 > > > If DNS is protected, then DANE could be used. With greater > > > flexibility and less modification of existing tools. > > > > As far as I understood from DANE document, by knowing only the IP > > address of a node, DANE cannot work because IP spoofing is still > > possible and there is no CA to protect this. No bindings of IP > address > > is available. >=20 > This is not a DANE-specific issue. Typically, applications want > channel security to a destination that is a domain name, not a network > address. Absent a secure mapping from one to the other, there is > little that network-layer security, that authenticates only the network > endpoint, can do to close the gap. I agree that there is a gap in security especially in the end points. But I= guess it is also important to try to remove this gap. Maybe it is not poss= ible to completely remove it but do as much efforts as possible.=20 I still think that secauth can work on making this gap smaller by network s= ecurity. I agree that most applications are working with domain names and n= ot the IP address. But where they bring this domain name? So, the initial c= onnection is with an IP address. As I also mentioned the cga-tsig draft as = an example case, it can secure the communication in end point with DNS serv= er where DNSSEC or other approaches are unable to do this or they cannot ea= sily do this. And of course secauth also wants to consider privacy, this is= why encryption is a part of that. But it can be handle by other protocols.= like my example about SSH.=20 To be clear, the plan of this API is to offer solutions in first point of c= onnection or automate this step as much as possible. When first point can b= e secure then you can combine this approach with TLS to also encrypt all th= e data or use the offered solution by secauth to encrypt the data. This is = then your choice. =20 > This problem applies equally to DANE, Web PKI, ... So it appears that we agree on the problem and we are talking about the sa= me problem. I think the solution I plan will work...=20 I am not quite sure but I think for requirement draft, it is important to i= dentify the problem(s) and explain the requirements to solve this problem. = And of course there can be some usecase scenario that where we want to go a= nd how we can use this approach. If there is other things need to be added to the requirement document, I we= lcome any suggestions.=20 Today I am working on the requirement draft to cover what we discussed here= .=20 > > Secauth only provides a transparent API for you to use it in other > > layers. >=20 > The requirements draft is very unclear on this. Is this an attempt to > expose the security state of the network layer to applications? Yes > Possibly also allow the application layer to in part control the > network-layer security association for a particular flow? About this, I am not sure.. depends on other's opinions.. and decisions. > If so, the draft should probably talk more about what state it intends > to expose and what control mechanisms it intends to provide. Or at > least what the requirements are for exposing state and controls. Agreed. Thanks, Best, Hosnieh From nobody Tue Aug 26 09:07:58 2014 Return-Path: X-Original-To: secauth@ietfa.amsl.com Delivered-To: secauth@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id B2F941A0002; Tue, 26 Aug 2014 09:07:57 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -3.762 X-Spam-Level: X-Spam-Status: No, score=-3.762 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, LOCALPART_IN_SUBJECT=1.107, RCVD_IN_DNSWL_MED=-2.3, RP_MATCHES_RCVD=-0.668, SPF_PASS=-0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id WO8ZGyPENa-r; Tue, 26 Aug 2014 09:07:55 -0700 (PDT) Received: from lhrrgout.huawei.com (lhrrgout.huawei.com [194.213.3.17]) (using TLSv1 with cipher RC4-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id DCA8A1A8771; Tue, 26 Aug 2014 09:07:52 -0700 (PDT) Received: from 172.18.7.190 (EHLO lhreml401-hub.china.huawei.com) ([172.18.7.190]) by lhrrg01-dlp.huawei.com (MOS 4.3.7-GA FastPath queued) with ESMTP id BLU45697; Tue, 26 Aug 2014 16:07:51 +0000 (GMT) Received: from LHREML513-MBB.china.huawei.com ([fe80::b810:863:a57e:3ff]) by lhreml401-hub.china.huawei.com ([10.201.5.240]) with mapi id 14.03.0158.001; Tue, 26 Aug 2014 17:07:45 +0100 From: Hosnieh Rafiee To: "secauth@ietf.org" , "saag@ietf.org" Thread-Topic: secauth - authentication and authorization - first draft Thread-Index: AQHPwUffjsVWgIryVk+i2nhztqdmkg== Date: Tue, 26 Aug 2014 16:07:44 +0000 Message-ID: <814D0BFB77D95844A01CA29B44CBF8A7A29685@lhreml513-mbb.china.huawei.com> Accept-Language: zh-CN, en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.221.82.100] Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 X-CFilter-Loop: Reflected Archived-At: http://mailarchive.ietf.org/arch/msg/secauth/lUxpaoCCBCVQ4VrkxRkVEazxb2g Subject: [Secauth] secauth - authentication and authorization - first draft X-BeenThere: secauth@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: Omni-purpose Network-layer based Secure Authentication non-working group discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 26 Aug 2014 16:07:57 -0000 Hi all, I have uploaded the first draft version of secauth requirements and use cas= es. I tried to apply comments I received by Viktor, Kathleen and Joel about cla= rification of the purpose of secauth. Any comments are highly appreciated. Thank you, Best, Hosnieh A New Internet-Draft is available from the on-line Internet-Drafts director= ies. Title : Secauth Usecases and Requirements Author : Hosnieh Rafiee Filename : draft-rafiee-secauth-usecase-00.txt Pages : 11 Date : 2014-08-26 Abstract: This document explains the use cases and requirements for secure authentication in other layers above the network layer, e.g. an application layer and the use of network layer security approaches for this purpose. It also introduces the requirement for privacy consideration. There's also a htmlized version available at: http://tools.ietf.org/html/draft-rafiee-secauth-usecase-00 From nobody Wed Aug 27 05:55:33 2014 Return-Path: X-Original-To: secauth@ietfa.amsl.com Delivered-To: secauth@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 96F411A069E; Wed, 27 Aug 2014 05:55:32 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.869 X-Spam-Level: X-Spam-Status: No, score=-4.869 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, RP_MATCHES_RCVD=-0.668, SPF_PASS=-0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id aU1KbCOhyBEA; Wed, 27 Aug 2014 05:55:27 -0700 (PDT) Received: from lhrrgout.huawei.com (lhrrgout.huawei.com [194.213.3.17]) (using TLSv1 with cipher RC4-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id BD7971A0197; Wed, 27 Aug 2014 05:55:26 -0700 (PDT) Received: from 172.18.7.190 (EHLO lhreml401-hub.china.huawei.com) ([172.18.7.190]) by lhrrg01-dlp.huawei.com (MOS 4.3.7-GA FastPath queued) with ESMTP id BLV38710; Wed, 27 Aug 2014 12:55:25 +0000 (GMT) Received: from LHREML513-MBB.china.huawei.com ([fe80::b810:863:a57e:3ff]) by lhreml401-hub.china.huawei.com ([10.201.5.240]) with mapi id 14.03.0158.001; Wed, 27 Aug 2014 13:55:23 +0100 From: Hosnieh Rafiee To: "secauth@ietf.org" , "saag@ietf.org" Thread-Topic: requirement and use cases of secauth Thread-Index: Ac/B9ik6t/V5Q4VWSuCeRDx85YxBNQ== Date: Wed, 27 Aug 2014 12:55:22 +0000 Message-ID: <814D0BFB77D95844A01CA29B44CBF8A7A29969@lhreml513-mbb.china.huawei.com> Accept-Language: zh-CN, en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.221.82.100] Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 X-CFilter-Loop: Reflected Archived-At: http://mailarchive.ietf.org/arch/msg/secauth/Le7qJplZ3FkAqXFIMe8DoyUFF00 Subject: [Secauth] requirement and use cases of secauth X-BeenThere: secauth@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: Omni-purpose Network-layer based Secure Authentication non-working group discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 27 Aug 2014 12:55:32 -0000 Folks, Did you have a chance to read the requirement and use case draft? Any comments either editorial or technical? Is everything clear or I need t= o work more on it?=20 I appreciate your active involvement in this topic as I'm looking forward t= o preparing something good for the upcoming IETF. So please if you haven't yet take a look on the draft, look it and send me = your comments.=20 Thanks! Hosnieh P.S. I found myself a few editorial problems such as missing words in 2 par= ts of the document. If there are anything more, I would welcome if you shar= e it.=20