From nobody Thu Oct 1 08:21:44 2015 Return-Path: X-Original-To: secdir@ietfa.amsl.com Delivered-To: secdir@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C1BBD1B2A0C for ; Thu, 1 Oct 2015 08:21:31 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.121 X-Spam-Level: X-Spam-Status: No, score=-1.121 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, SPF_NEUTRAL=0.779] autolearn=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 1rOR15butJ2y for ; Thu, 1 Oct 2015 08:21:29 -0700 (PDT) Received: from mail.kivinen.iki.fi (fireball.acr.fi [83.145.195.1]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 3C0381B2A02 for ; Thu, 1 Oct 2015 08:21:29 -0700 (PDT) Received: from fireball.acr.fi (localhost [127.0.0.1]) by mail.kivinen.iki.fi (8.15.1/8.14.8) with ESMTPS id t91FLPaK015293 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=NO) for ; Thu, 1 Oct 2015 18:21:25 +0300 (EEST) Received: (from kivinen@localhost) by fireball.acr.fi (8.15.1/8.14.8/Submit) id t91FLP82027924; Thu, 1 Oct 2015 18:21:25 +0300 (EEST) MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit Message-ID: <22029.20341.428918.809028@fireball.acr.fi> Date: Thu, 1 Oct 2015 18:21:25 +0300 From: Tero Kivinen To: secdir@ietf.org X-Edit-Time: 1 min X-Total-Time: 0 min Archived-At: Subject: [secdir] Assignments X-BeenThere: secdir@ietf.org X-Mailman-Version: 2.1.15 Precedence: list Reply-To: secdir-secretary@mit.edu List-Id: Security Area Directorate List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 01 Oct 2015 15:21:31 -0000 Review instructions and related resources are at: http://tools.ietf.org/area/sec/trac/wiki/SecDirReview Adam Montville is next in the rotation. For telechat 2015-10-01 Reviewer LC end Draft John Bradley T 2015-09-03 draft-ietf-mpls-lsp-ping-reply-mode-simple-04 Daniel Kahn Gillmor T 2015-09-17 draft-ietf-tzdist-caldav-timezone-ref-04 Dan Harkins T 2015-09-24 draft-ietf-bess-spbm-evpn-01 Sean Turner TR2015-09-25 draft-ietf-mpls-lsp-ping-relay-reply-10 Dacheng Zhang T 2015-09-04 draft-ietf-dice-profile-16 For telechat 2015-10-15 Steve Hanna T 2015-10-09 draft-blanchet-ccsds-urn-00 Jeffrey Hutzelman T 2015-09-30 draft-ietf-v6ops-pmtud-ecmp-problem-04 Benjamin Kaduk T 2015-10-08 draft-ietf-ospf-node-admin-tag-06 Charlie Kaufman T 2015-10-05 draft-ietf-trill-cmt-08 Scott Kelly T 2015-10-08 draft-ietf-bess-mvpn-bidir-ingress-replication-03 Stephen Kent T 2015-10-08 draft-ietf-bfd-rfc5884-clarifications-02 Ben Laurie T 2015-10-08 draft-ietf-ospf-rfc4970bis-05 For telechat 2015-10-22 Chris Inacio T 2015-07-29 draft-ietf-homenet-dncp-10 Catherine Meadows T 2015-10-20 draft-ietf-trill-rfc7180bis-05 Last calls and special requests: Donald Eastlake 2015-09-11 draft-ietf-dane-openpgpkey-05 Daniel Kahn Gillmor E None draft-ietf-rtcweb-security-08 Tobias Gondrom E None draft-ietf-rtcweb-security-arch-11 Chris Inacio 2015-10-02 draft-ietf-lwig-ikev2-minimal-04 Leif Johansson 2015-10-02 draft-ietf-mpls-self-ping-04 Simon Josefsson 2015-10-07 draft-ietf-netconf-call-home-11 Tero Kivinen 2015-10-13 draft-ietf-cdni-media-type-03 Warren Kumari 2015-10-26 draft-ietf-ipfix-mib-variable-export-09 Matt Lepinski 2015-10-14 draft-ietf-pcp-port-set-10 Chris Lonvick 2015-10-08 draft-ietf-ppsp-base-tracker-protocol-10 David Mandelberg 2015-10-08 draft-ietf-tcpm-rtorestart-08 Alexey Melnikov 2015-10-27 draft-mglt-ipsecme-clone-ike-sa-05 Matthew Miller 2015-10-27 draft-santesson-auth-context-extension-09 -- kivinen@iki.fi From nobody Thu Oct 1 15:36:40 2015 Return-Path: X-Original-To: secdir@ietfa.amsl.com Delivered-To: secdir@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id EDC091A8AF3; Thu, 1 Oct 2015 15:36:38 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.902 X-Spam-Level: X-Spam-Status: No, score=-1.902 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id QHv30yTXRSpv; Thu, 1 Oct 2015 15:36:36 -0700 (PDT) Received: from web01.jbserver.net (web01.jbserver.net [IPv6:2a00:8240:6:a::1]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 81A261A8AEF; Thu, 1 Oct 2015 15:36:36 -0700 (PDT) Received: from [190.217.51.226] (helo=[172.30.6.28]) by web01.jbserver.net with esmtpsa (TLSv1.2:DHE-RSA-AES128-SHA:128) (Exim 4.85) (envelope-from ) id 1ZhmSk-0005ko-JL; Fri, 02 Oct 2015 00:36:30 +0200 To: "Klaas Wierenga (kwiereng)" References: <4F5FD3E9-B5A3-4AAB-A089-61B674B59ECC@cisco.com> <55F010E9.2060606@si6networks.com> <9566C08E-D9B5-4C34-888D-F8D77335B5E3@cisco.com> From: Fernando Gont X-Enigmail-Draft-Status: N1110 Message-ID: <560DAAF0.9060708@si6networks.com> Date: Thu, 1 Oct 2015 16:51:44 -0500 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:38.0) Gecko/20100101 Thunderbird/38.2.0 MIME-Version: 1.0 In-Reply-To: <9566C08E-D9B5-4C34-888D-F8D77335B5E3@cisco.com> Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 8bit Archived-At: Cc: "iesg@ietf.org" , "draft-ietf-6man-predictable-fragment-id.all@tools.ietf.org" , "secdir@ietf.org" Subject: Re: [secdir] review of draft-ietf-6man-predictable-fragment-id-09 X-BeenThere: secdir@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: Security Area Directorate List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 01 Oct 2015 22:36:39 -0000 Hi, Klaas, On 09/09/2015 07:02 AM, Klaas Wierenga (kwiereng) wrote: >> On 09/09/2015 07:12 AM, Klaas Wierenga (kwiereng) wrote: >>> I believe the document has some issues, see below. >>> >>> The document does an analysis of the security implications of >>> predictable identification fields and I believe (not being an >>> IPv6 expert) that it does a good job at that. The analysis of >>> the potential exploits is convincing. Where I am struggling a bit >>> is the algorithms for selecting fragment identification values >>> (5). >>> >>> The intro text states that there are ‘a number of algorithms', >>> but really there are only 3: 1- per destination counter random >>> initialised 2- random value 3- hash over source, destination, >>> secret with a counter >> >> FWIW, these are three concrete algorithms, but that doesn't mean >> they are the only possible ones… > > Sure, I understand that. It is just when I read it I was preparing > for a long list to come, so I think it would be good to state > something like: > > OLD > > This section specifies a number of algorithms that may be used for > selecting Fragment Identification values. > > NEW > > There are a number of algorithms that may be used for selecting > Fragment Identification values. This section presents three of > those. Will do. (thanks for proposing a way forward, btw). >>> 1 and 3 are essentially the same, the hash function in 3 performs >>> the same function as the pseudo random generated initial value in >>> 1 if I am not mistaken. >> >> Yes and no. 1 requires state, but 3 doesn't. That means that, e.g., >> if you have lot's of flows to many different destinations, you may >> need to remove some entries from the Dest Cache (and then you run >> the risk of Frag ID collisions). However, this is not the case with >> algorithm #3. > > good point, so is there any compelling reason to select 1 over 3? It is generally the other way around: for #1, if you need to remove the state from the Destinations Cache, you run the risk of colliding Frag IDs. So you could say that #1 is more trivial to implement, whereas #3 has better properties (when there are ongoing communications with multiple destinations that make you hit the limit of entries in the Destination Cache). >>> So really the choice is between a random value for every datagram >>> or a random value at initialisation of a connection and >>> increasing by 1 for every subsequent datagram. >>> >>> I’d really like to see some quantitative analysis as to the >>> impact of a random value per packet as well as between 1 and 3. >> >> Impact in terms of what? > > Well, as an implementer I want to choose between one of the > algorithms you propose. But since I have no clue what the penalty is > for doing per packet randomisation as opposed to per flow that is > hard. Wel, the thing is that, to a large extent, it depends on the details of implementation. e.g., what's the algorithm you use for the randon() function, etc. > If the cost of a pseudorandom operation is outweighed by other > factors involved in sending a packet I would probably choose option > 2. My gut feeling says however that it is a pretty expensive > operation to do on a per packet basis, so I would expect the advise > to be “use 1 or 3” unless….. We tried to provide options rather than pushing one specific algorithm. > And similarly, what is the cost of the > hash versus the prg? If they are comparable would option 3 not be > better? It depends on which hash function vs PRG. For instance, you could employ a hash function for the PRG. So any assertion on performace would really be questionable... Thoughts? Thanks! Cheers, -- Fernando Gont SI6 Networks e-mail: fgont@si6networks.com PGP Fingerprint: 6666 31C6 D484 63B2 8FB1 E3C4 AE25 0D55 1D4E 7492 From nobody Fri Oct 2 07:57:53 2015 Return-Path: X-Original-To: secdir@ietfa.amsl.com Delivered-To: secdir@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 709BC1B2BFA; Fri, 2 Oct 2015 07:57:52 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.201 X-Spam-Level: X-Spam-Status: No, score=-4.201 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id GS2nQ3Kn4wZa; Fri, 2 Oct 2015 07:57:50 -0700 (PDT) Received: from usevmg21.ericsson.net (usevmg21.ericsson.net [198.24.6.65]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 8FEB81B2BF5; Fri, 2 Oct 2015 07:57:44 -0700 (PDT) X-AuditID: c6180641-f792c6d00000686a-d4-560e2fa8703f Received: from EUSAAHC002.ericsson.se (Unknown_Domain [147.117.188.78]) by usevmg21.ericsson.net (Symantec Mail Security) with SMTP id 5A.4D.26730.8AF2E065; Fri, 2 Oct 2015 09:18:00 +0200 (CEST) Received: from EUSAAMB107.ericsson.se ([147.117.188.124]) by EUSAAHC002.ericsson.se ([147.117.188.78]) with mapi id 14.03.0248.002; Fri, 2 Oct 2015 10:57:42 -0400 From: Daniel Migault To: Joel Halpern , Russ Housley , "draft-mglt-i2rs-security-requirements.all@ietf.org" , "draft-hares-i2rs-auth-trans.all@ietf.org" Thread-Topic: Early SecDir Reviews Thread-Index: AQHQ3F42YpIdMEmmOU6CVf8kLGx8pJ4XR16A///wvJCAQVOmsA== Date: Fri, 2 Oct 2015 14:57:42 +0000 Message-ID: <2DD56D786E600F45AC6BDE7DA4E8A8C11216B6FE@eusaamb107.ericsson.se> References: <32779ADA-75D3-4754-AFD2-DFFE7237D939@vigilsec.com> <6BCE198E4EAEFC4CAB45D75826EFB07614F4DC75@eusaamb101.ericsson.se> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [147.117.188.9] Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFvrMLMWRmVeSWpSXmKPExsUyuXSPn+4Kfb4wg87FFhYfXx9htVi7qpvV 4tWLm+wWDTvzLT4sfMhiMX3vNXYHNo+13VfZPHbOusvusWTJTyaPVXe+sAawRHHZpKTmZJal FunbJXBlLF2wg6Vgun7F6hOHGRsYD6p1MXJySAiYSDy9fIgVwhaTuHBvPVsXIxeHkMBRRol/ KxcxQTjLGCU2nlvCAlLFJmAk0Xaonx0kISIwm0li1o9uMIdZoI1RounyE3aQKmEBRYn2/7OY QWwRASWJZ4+3AnVzANlOEjNOB4OEWQRUJG5+Ow02lFfAV+LVmZtMILaQQAujxMnbqiA2I9BJ 30+tAYszC4hL3HoynwniVAGJJXvOM0PYohIvH/+DekFRYl//dHaIeh2JBbs/sUHY2hLLFr5m htglKHFy5hOWCYyis5CMnYWkZRaSlllIWhYwsqxi5CgtTi3LTTcy3MQIjKVjEmyOOxgXfLI8 xCjAwajEw7ughDdMiDWxrLgy9xCjNAeLkjjvvBn3Q4UE0hNLUrNTUwtSi+KLSnNSiw8xMnFw SgEjgn3SHV2RR/Mj8kL45JYV20d/mxBwf++Hy4pOHB3fvqoJc7dGGPpHue65k/F51+vSzNbD bqma0po3WJjlPVpaJjzxPz/jutV1jhqdhIlLbdyqXnOVFe7cMifluUOaZXp3jgPbDPMnEhsM tmzQmfAg+dzFZxKK827OuXWSu/2/2mpXyV9eF/qUWIozEg21mIuKEwFcxBdshgIAAA== Archived-At: Cc: Kathleen Moriarty , IETF SecDir Subject: Re: [secdir] Early SecDir Reviews X-BeenThere: secdir@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: Security Area Directorate List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 02 Oct 2015 14:57:52 -0000 Hi Russ,=20 Thank you for your comments. We believe the version 01 of the draft have ap= propriately addressed these comments. Here is a small recap of the comments= as well as how the new version addresses them. Feel free to let us know if= we missed something. BR,=20 The co-authors In Section 1, the first sentence says: "This document addresses security co= nsiderations for the I2RS architecture." This does not seem like the right= way to begin this document. This document seems to contain requirements o= n an implementation or deployment. They are not protocol requirements, whi= ch is what I expected from the draft file name. This context needs to be s= et in the Abstract and the first paragraph of the Introduction. MGLT: Thank you for the feed back. We addressed this comment by starting th= e introduction (Section 1) with the following sentences : This document provides environment security requirements for the I2RS archi= tecture. Environment security requirements are independent of the protocol = used for I2RS. As a result, the requirements provided in this document are = intended to provide good security practise so I2RS can be securely deployed= and operated. Section 4.1 talks about the I2RS AAA architecture, but it does not cover au= thentication, authorization, and accounting. The section seems to be talki= ng about roles, privileges, and role-based access control. Maybe the title= of the section should be changed. MGLT The title has been changed to "I2RS Access Control for routing system= resources" AAA has been replaced by Access Control. We also completely re-write the se= ction.=20 In Section 4.2, REQ 17, I find the use of "origin" unclear. The origin is = the I2RS Client, not the application, right? MGLT: REQ 17 corresponds to REQ 16 of the draft-mglt-security-environment-r= eqs-00. It is unclear. I removed the term origin and distinguish two cases = one when the access control is made for the I2RS Client and one for the app= lication. The text of the whole section has been updated and hopefully clar= ified. The term origin and component have been removed and replaced explici= tly by Application, I2RS Client or I2RS Agent or identity.=20 In Section 4.2, REQ 19, I find the use of "component" unclear. The compone= nt is the I2RS Client, not the application, right? MGLT: component is unclear and has been removed. In section 4.3, 1st paragraph, I think this would be more clear without the= use of "component". That is, the I2RS client is responsible for authentic= ation of the applications, managing the privileges for the applications, an= d enforcing access control to resources by the applications. MGLT: component is unclear and it has been removed. I do not understand Section 4.4. If an I2RS Client authenticates to I2RS A= gent 1 and 2, it is possible that these agents will grant different privile= ges to this client. Is a security domain a set of agents that are expected= grant the same privileges to this client? What does availability have to do with the definition of a security domain?= Maybe these two topics should be in separate sections. DoS is also talke= d about in Section 5.2; I think that it would help the reader if all of the= availability discussions are in one place. MGLT: This section is too redundant with I-D.hares-i2rs-auth-trans.=20 The main message was that local policies enforcement is not sufficient, and= communications between points should be considered secured. This has been = added in the Access Control architecture sub section. In addition, we added= how transport and access control interact in the access control section.=20 =20 In Section 4.2, REQ 20, I think the wording needs to be clarified to indica= te that I2RS Clients cane support multiple applications at the same time, a= nd each of them needs to be authenticated. MGLT: We explicitly specify the case of multiple applications. In Section 5.1, REQ 29, It is unclear to me what part of the system is perf= orming this monitoring. When an error is detected, what part of the system= takes corrective actions? MGLT: The agent and client are expected to monitor, log, and eventually sen= d alerts. The management plane is responsible in collecting and taking the = appropriated decisions like updating Access Control policies, reconfiguring= routing elements...) In Section 4.2: s/On the hand/On the other hand/ -----Original Message----- From: Daniel Migault=20 Sent: Friday, August 21, 2015 9:29 PM To: Joel Halpern; Russ Housley; draft-mglt-i2rs-security-requirements.all@i= etf.org; draft-hares-i2rs-auth-trans.all@ietf.org Cc: Stephen Farrell; Kathleen Moriarty; IETF SecDir Subject: RE: Early SecDir Reviews Hi,=20 Thank you Russ for the review. We can easily adapt inputs from the review f= or draft-mglt-i2rs-security-environment-reqs-00. BR,=20 Daniel -----Original Message----- From: Joel Halpern [mailto:joel.halpern@ericsson.com]=20 Sent: Friday, August 21, 2015 6:13 PM To: Russ Housley; draft-mglt-i2rs-security-requirements.all@ietf.org; draft= -hares-i2rs-auth-trans.all@ietf.org Cc: Stephen Farrell; Kathleen Moriarty; IETF SecDir Subject: RE: Early SecDir Reviews There was confusion about the draft targets. The last call was issued for = the wrong name, but with the right URL for the environment document. =20 The right environment document is draft-mglt-i2rs-security-environment-reqs= -00 I expect that most of your concerns will still apply, but it would be helpf= ul if you could check. Yours, Joel -----Original Message----- From: Russ Housley [mailto:housley@vigilsec.com]=20 Sent: Friday, August 21, 2015 6:10 PM To: draft-mglt-i2rs-security-requirements.all@ietf.org; draft-hares-i2rs-au= th-trans.all@ietf.org Cc: Stephen Farrell; Kathleen Moriarty; IETF SecDir Subject: Early SecDir Reviews Please fine the requested SecDir reviews. Russ From nobody Sat Oct 3 15:29:15 2015 Return-Path: X-Original-To: secdir@ietfa.amsl.com Delivered-To: secdir@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 703541A876F; Sat, 3 Oct 2015 15:29:12 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -96.664 X-Spam-Level: X-Spam-Status: No, score=-96.664 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FH_HELO_EQ_D_D_D_D=1.597, HELO_DYNAMIC_IPADDR=1.951, HELO_EQ_DE=0.35, HELO_MISMATCH_DE=1.448, HTML_MESSAGE=0.001, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01, USER_IN_WHITELIST=-100] autolearn=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id bTLbXfK0WkyY; Sat, 3 Oct 2015 15:29:09 -0700 (PDT) Received: from lvps5-35-241-16.dedicated.hosteurope.de (www.gondrom.org [5.35.241.16]) (using TLSv1.1 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id BC9EC1A872F; Sat, 3 Oct 2015 15:29:08 -0700 (PDT) Received: from [192.168.178.32] (f048029132.adsl.alicedsl.de [78.48.29.132]) by lvps5-35-241-16.dedicated.hosteurope.de (Postfix) with ESMTPSA id 6FB8763CBA; Sun, 4 Oct 2015 00:29:05 +0200 (CEST) DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=default; d=gondrom.org; b=dJ+e5ETfdVbDX2Smioq5a5DwxOjE9IUYMfG5OEj0Yh90eWfdDNBQ6TfV3M+zLfVnj2tAoKzDNuDFWOsHVzJx5R7a2EQoJDcmR1VBGkUuqCLCoyuICyGStbGtuveaJ1EYpw7q1YqoE5QDyH+wnnNKGbje+LXo7BYWq3AlvumM++E=; h=Message-ID:Date:From:User-Agent:MIME-Version:To:CC:Subject:Content-Type; Message-ID: <561056B0.8080700@gondrom.org> Date: Sun, 04 Oct 2015 00:29:04 +0200 From: Tobias Gondrom User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:31.0) Gecko/20100101 Thunderbird/31.5.0 MIME-Version: 1.0 To: secdir@ietf.org, iesg@ietf.org, draft-ietf-rtcweb-security-arch.all@tools.ietf.org Content-Type: multipart/alternative; boundary="------------040801050908060007020809" Archived-At: Subject: [secdir] secdir review of draft-ietf-rtcweb-security-arch-11 X-BeenThere: secdir@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: Security Area Directorate List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 03 Oct 2015 22:29:12 -0000 This is a multi-part message in MIME format. --------------040801050908060007020809 Content-Type: text/plain; charset=utf-8; format=flowed Content-Transfer-Encoding: 7bit I have reviewed this document as part of the security directorate's ongoing effort to review all IETF documents being processed by the IESG. These comments were written primarily for the benefit of the security area directors. Document editors and WG chairs should treat these comments just like any other last call comments. The draft aims for proposed standards and defines the security architecture for WebRTC. The document appears in reasonably good shape. There are still several open issues (TBDs) in the document that need to be completed before publication. Below a series of my own comments, discuss elements and questions for your consideration. Comment: section 3 Trust Model: s/rooted in the browser/rooted in the browser and the underlying operating system (the requirements for the integrity of the system underneath the browser does not go away. Furthermore the browser does rely on some trust and crypto functionality provided by the underlying OS.) Question: what security risks does the connection from Bob to IdP1 (the IdP from Alice) create? DISCUSS: Section 4.1: "This does not require a security check: JS from any origin is allowed to get this far." Comment: Maybe the wording is unprecise, or if it is intended as I read it than I beg to disagree. There are several security concerns if that would be the case. Just a few examples, I am sure there are plenty more: 1. privacy concerns if you can trigger someone initiating a call 2. Denial of service scenarios, creation of PeerConnections or the scenario of "the great cannon of China" comes to mind, in which you can let other people flood a recipient with call requests. COMMENT: Section 4.1. paragraph 6: s/preferably over TLS/it SHOULD use TLS. If possible, I would even go for "MUST", but I am not sure about whether there are legitimate use cases that require non-TLS? (e.g. we want avoid resource consuming, spoofing and replay attacks) COMMENT: Section 4.3. last paragraph: "Even if they do not use an IdP, as long as they have minimal trust in the signaling service not to perform a man-in-the-middle attack, they know that their communications are secure against the signaling service as well (i.e., that the signaling service cannot mount a passive attack on the communications)." => This reads confusing. IMO if they are not using an IdP, they can not assume that their communications are secure against the signalling service MitM attack. Question on Section 5.2 "Requests for one-time camera/microphone access." does the "one-time access" have a time-out after some time, or max duration? How long would that be? At end of Section 5.2: there is still an open issue to be resolved by the WG. Note: It definitely requires a higher / different level of explicit consent, as it allows access to a third resource. Question on Section 5.5.: Do we need to assert that the client provide UI information from which peer the current stream is coming from? Assuming you have 3 or more peers (A, B and C) in a meeting, can you avoid that B replays the voice of A in effect spoofing him to C on the application layer? Question on section 5.6.5.: does this naming scheme also consider subdomains? The example in the last paragraph seems to normalize identity.example.com to https://example.com/.well-known/idp-proxy/example? Question on section 5.7.1.: Do you need to support UNICODE characters for identities? Preferably, I would like to avoid such, as that could cause it's own set of potential problems with similar looking codepoints.... Section 6: Security Considerations refers to draft-ietf-rtcweb-security-08 which is scheduled to be reviewed by another member of Secdir. Please note that I have browsed the referred draft but did not conduct a deep review of the other ID. Some of my questions above might have been addressed there. Comment: Section 6.3. states that "On the other hand, signing the entire message severely restricts the capabilities of the calling application, so there are difficult tradeoffs here." Actually my assumption was that the entire signalling message would be signed. What are the implied restrictions that prevent that from happening? Is there a way we could allow for that? Question on Section 6.4.2. IdP Well-known URI Assuming a server that does not host an IdP nor is aware of the special semantics of this "well-known URI". Would an attacker with access to this initially empty structure be able to create a working IdP and assert identities for the domain of that server that might supersede other 3rd-party IdP servers? COMMENT on section 6.4.5.1 and 6.4.5.2: It seems the text is suggestion that popup blocking and third party cookie blocking are not compatible with using an IdP. I would recommend a statement that sites SHOULD (MUST?) implement in a way that they still function with client side popup blocking and third party cookie blocking. A general question from a risk perspective: I wonder whether an IdP can by providing the identity assertions for the users determine a very detailed record of all call metadata (time, src, dst, ...) of all communications for a user. Are there any abstraction mechanisms we could deploy to limit that exposure to the IdP? On the other hand, is the identity assertion linked to a system time, to avoid later replay attacks? Thank you and best regards. Tobias --------------040801050908060007020809 Content-Type: text/html; charset=utf-8 Content-Transfer-Encoding: 8bit I have reviewed this document as part of the security directorate's ongoing effort to review all IETF documents being processed by the IESG.  These comments were written primarily for the benefit of the security area directors.  Document editors and WG chairs should treat these comments just like any other last call comments.

The draft aims for proposed standards and defines the security architecture for WebRTC.

The document appears in reasonably good shape.
There are still several open issues (TBDs) in the document that need to be completed before publication.

Below a series of my own comments, discuss elements and questions for your consideration.

Comment:
section 3 Trust Model:
s/rooted in the browser/rooted in the browser and the underlying operating system
(the requirements for the integrity of the system underneath the browser does not go away. Furthermore the browser does rely on some trust and crypto functionality provided by the underlying OS.)

Question: what security risks does the connection from Bob to IdP1 (the IdP from Alice) create?

DISCUSS: Section 4.1:
"This does not require a security check: JS from any origin is allowed to get this far."
Comment: Maybe the wording is unprecise, or if it is intended as I read it than I beg to disagree. There are several security concerns if that would be the case. Just a few examples, I am sure there are plenty more:
1. privacy concerns if you can trigger someone initiating a call
2. Denial of service scenarios, creation of PeerConnections or the scenario of "the great cannon of China" comes to mind, in which you can let other people flood a recipient with call requests.

COMMENT: Section 4.1. paragraph 6:
s/preferably over TLS/it SHOULD use TLS.
If possible, I would even go for "MUST", but I am not sure about whether there are legitimate use cases that require non-TLS?
(e.g. we want avoid resource consuming, spoofing and replay attacks)

COMMENT: Section 4.3. last paragraph:
"Even if they do not use an IdP, as long as they have minimal trust in the signaling service not to perform a man-in-the-middle attack, they know that their communications are secure against the signaling service as well (i.e., that the signaling service cannot mount a passive attack on the communications)."
=> This reads confusing. IMO if they are not using an IdP, they can not assume that their communications are secure against the signalling service MitM attack.

Question on Section 5.2
"Requests for one-time camera/microphone access." does the "one-time access" have a time-out after some time, or max duration? How long would that be?

At end of Section 5.2: there is still an open issue to be resolved by the WG. Note: It definitely requires a higher / different level of explicit consent, as it allows access to a third resource.

Question on Section 5.5.:
Do we need to assert that the client provide UI information from which peer the current stream is coming from?
Assuming you have 3 or more peers (A, B and C) in a meeting, can you avoid that B replays the voice of A in effect spoofing him to C on the application layer?

Question on section 5.6.5.:
does this naming scheme also consider subdomains?
The example in the last paragraph seems to normalize identity.example.com to https://example.com/.well-known/idp-proxy/example?

Question on section 5.7.1.:
Do you need to support UNICODE characters for identities?
Preferably, I would like to avoid such, as that could cause it's own set of potential problems with similar looking codepoints....

Section 6: Security Considerations
refers to draft-ietf-rtcweb-security-08 which is scheduled to be reviewed by another member of Secdir.
Please note that I have browsed the referred draft but did not conduct a deep review of the other ID. Some of my questions above might have been addressed there.

Comment:
Section 6.3. states that "On the other hand, signing the entire message severely restricts the capabilities of the calling application, so there are difficult tradeoffs here." Actually my assumption was that the entire signalling message would be signed. What are the implied restrictions that prevent that from happening? Is there a way we could allow for that?

Question on Section 6.4.2. IdP Well-known URI
Assuming a server that does not host an IdP nor is aware of the special semantics of this "well-known URI".
Would an attacker with access to this initially empty structure be able to create a working IdP and assert identities for the domain of that server that might supersede other 3rd-party IdP servers?  

COMMENT on section 6.4.5.1 and 6.4.5.2:
It seems the text is suggestion that popup blocking and third party cookie blocking are not compatible with using an IdP. I would recommend a statement that sites SHOULD (MUST?) implement in a way that they still function with client side popup blocking and third party cookie blocking.

A general question from a risk perspective:
I wonder whether an IdP can by providing the identity assertions for the users determine a very detailed record of all call metadata (time, src, dst, ...) of all communications for a user. Are there any abstraction mechanisms we could deploy to limit that exposure to the IdP? On the other hand, is the identity assertion linked to a system time, to avoid later replay attacks?

Thank you and best regards.

Tobias

 --------------040801050908060007020809-- From nobody Mon Oct 5 18:18:47 2015 Return-Path: X-Original-To: secdir@ietfa.amsl.com Delivered-To: secdir@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 33C9B1B2A68; Mon, 5 Oct 2015 18:18:44 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: 0.1 X-Spam-Level: X-Spam-Status: No, score=0.1 tagged_above=-999 required=5 tests=[BAYES_50=0.8, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id KuoHLGatLhbM; Mon, 5 Oct 2015 18:18:42 -0700 (PDT) Received: from BAY004-OMC2S24.hotmail.com (bay004-omc2s24.hotmail.com [65.54.190.99]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id ACF561B30C3; Mon, 5 Oct 2015 18:18:42 -0700 (PDT) Received: from BAY167-W92 ([65.54.190.123]) by BAY004-OMC2S24.hotmail.com over TLS secured channel with Microsoft SMTPSVC(7.5.7601.23008); Mon, 5 Oct 2015 18:18:42 -0700 X-TMN: [ZRqviWlaj5O8t2vE7sSd0NLVj1pOWiBTwFIrjhNkVPQ=] X-Originating-Email: [charliekaufman@outlook.com] Message-ID: From: Charlie Kaufman To: "secdir@ietf.org" , "iesg@ietf.org" , "draft-ietf-trill-cmt.all@tools.ietf.org" Date: Mon, 5 Oct 2015 18:18:42 -0700 Importance: Normal Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 X-OriginalArrivalTime: 06 Oct 2015 01:18:42.0791 (UTC) FILETIME=[F090B770:01D0FFD4] Archived-At: Subject: [secdir] Secdir review of draft-ietf-trill-cmt-08 X-BeenThere: secdir@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: Security Area Directorate List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 06 Oct 2015 01:18:44 -0000 I have reviewed this document as part of the security directorate's ongoing= effort to review all IETF documents being processed by the IESG. These com= ments were written primarily for the benefit of the security area directors= . Document editors and WG chairs should treat these comments just like any = other last call comments. This document specifies an optional new mechanism for trill that supports m= ore fine-grained control of the load balancing of multi-cast packets. The c= hanges are to the routing protocol and does not make it any more security s= ensitive than it already is and hence introduces no new security issues. Typos: Page 3=2C Section 1=2C para 2=2C line 3: "[RFC6439]=2C provide" -> "[RFC643= 9] provides" Page 5=2C Section 1.2=2C line 1: "of much passionate" -> "of many passionat= e" or "of very passionate" Page 14=2C Section 6=2C Para 2=2C line 1: "involve with" -> "involved with"= = From nobody Mon Oct 5 19:46:26 2015 Return-Path: X-Original-To: secdir@ietfa.amsl.com Delivered-To: secdir@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 8B3CE1B363A; Mon, 5 Oct 2015 19:46:22 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.749 X-Spam-Level: X-Spam-Status: No, score=-1.749 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_ENVFROM_END_DIGIT=0.25, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, SPF_PASS=-0.001] autolearn=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 348-LXoe9odk; Mon, 5 Oct 2015 19:46:21 -0700 (PDT) Received: from mail-ob0-x233.google.com (mail-ob0-x233.google.com [IPv6:2607:f8b0:4003:c01::233]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 3FF381B363B; Mon, 5 Oct 2015 19:46:21 -0700 (PDT) Received: by obcgx8 with SMTP id gx8so143900078obc.3; Mon, 05 Oct 2015 19:46:20 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:in-reply-to:references:from:date:message-id:subject:to :cc:content-type; bh=0SEClJswM4X/Z6WTY9a56wQyrhopE38q6+sycafY9r8=; b=Wae/2qtimmXyztYxHamRxCQk0WWw3j7l3EYa3P4hU6/yD7pvUBoxPsBs8Wb6vZQ+ZM ammuFhpX3TLoxOasfu/T9QYxwO19Q4wLGGlpvuXxWoYxoyWUQdaD57WyDdZVZFA+Owxs D0Imj8IpdVOJSNSfNqR1OxGTs0lbPSk8TayGE6303wRfQzFSkE13HQdCKd8m3H8hfIUQ pw6mVQ/1ImCWRgwVG9ZU68so2Eu3DlH3cmaDelNtg3okBaUQ6R4yk3QuO02jSavFEseO 3Pjg0JGikeoXPuiDn6mSqVgehI/UuSBBTEgmPX9jpDWM0roKoFPfHX2+JvmqALR4rAWW 1j4w== X-Received: by 10.182.96.168 with SMTP id dt8mr18883555obb.36.1444099580693; Mon, 05 Oct 2015 19:46:20 -0700 (PDT) MIME-Version: 1.0 Received: by 10.76.144.65 with HTTP; Mon, 5 Oct 2015 19:46:06 -0700 (PDT) In-Reply-To: References: From: Donald Eastlake Date: Mon, 5 Oct 2015 22:46:06 -0400 Message-ID: To: Charlie Kaufman Content-Type: multipart/alternative; boundary=047d7b2e489a871344052166a236 Archived-At: Cc: "draft-ietf-trill-cmt.all@tools.ietf.org" , "iesg@ietf.org" , "secdir@ietf.org" Subject: Re: [secdir] Secdir review of draft-ietf-trill-cmt-08 X-BeenThere: secdir@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: Security Area Directorate List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 06 Oct 2015 02:46:22 -0000 --047d7b2e489a871344052166a236 Content-Type: text/plain; charset=UTF-8 Hi Charlie, Thanks for the review. You suggested editorials all look reasonable to me. Donald ============================= Donald E. Eastlake 3rd +1-508-333-2270 (cell) 155 Beaver Street, Milford, MA 01757 USA d3e3e3@gmail.com On Mon, Oct 5, 2015 at 9:18 PM, Charlie Kaufman wrote: > I have reviewed this document as part of the security directorate's > ongoing effort to review all IETF documents being processed by the IESG. > These comments were written primarily for the benefit of the security area > directors. Document editors and WG chairs should treat these comments just > like any other last call comments. > > > This document specifies an optional new mechanism for trill that supports > more fine-grained control of the load balancing of multi-cast packets. The > changes are to the routing protocol and does not make it any more security > sensitive than it already is and hence introduces no new security issues. > > > Typos: > > > Page 3, Section 1, para 2, line 3: "[RFC6439], provide" -> "[RFC6439] > provides" > > Page 5, Section 1.2, line 1: "of much passionate" -> "of many passionate" > or "of very passionate" > > Page 14, Section 6, Para 2, line 1: "involve with" -> "involved with" > _______________________________________________ > secdir mailing list > secdir@ietf.org > https://www.ietf.org/mailman/listinfo/secdir > wiki: http://tools.ietf.org/area/sec/trac/wiki/SecDirReview > --047d7b2e489a871344052166a236 Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: quoted-printable
Hi Charlie,

=
Thanks for the review. You suggested editori= als all look reasonable to me.

Dona= ld
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D=3D=3D
=C2=A0Donald E. Eastlake 3rd=C2=A0=C2=A0 +1-508-333-2= 270 (cell)
=C2=A0155 Beaver Street,=C2=A0Milford, MA 01757 USA
=C2=A0= d3e3e3@gmail.com<= /div>

On Mon, Oct 5, 2015 at 9:18 PM, Charlie Kauf= man <charliekaufman@outlook.com> wrote:
I have reviewed this document as part of the securit= y directorate's ongoing effort to review all IETF documents being proce= ssed by the IESG. These comments were written primarily for the benefit of = the security area directors. Document editors and WG chairs should treat th= ese comments just like any other last call comments.


This document specifies an optional new mechanism for trill that supports m= ore fine-grained control of the load balancing of multi-cast packets. The c= hanges are to the routing protocol and does not make it any more security s= ensitive than it already is and hence introduces no new security issues.

Typos:


Page 3, Section 1, para 2, line 3: "[RFC6439], provide" -> &qu= ot;[RFC6439] provides"

Page 5, Section 1.2, line 1: "of much passionate" -> "of = many passionate" or "of very passionate"

Page 14, Section 6, Para 2, line 1: "involve with" -> "in= volved with"
_______________________________________________
secdir mailing list
secdir@ietf.org
https://www.ietf.org/mailman/listinfo/secdir
wiki: http://tools.ietf.org/area/sec/trac/wiki/= SecDirReview

--047d7b2e489a871344052166a236-- From nobody Tue Oct 6 13:03:52 2015 Return-Path: X-Original-To: secdir@ietfa.amsl.com Delivered-To: secdir@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E5B5A1B3277 for ; Tue, 6 Oct 2015 13:03:50 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.21 X-Spam-Level: X-Spam-Status: No, score=-4.21 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id R77GdQEfc4jc for ; Tue, 6 Oct 2015 13:03:49 -0700 (PDT) Received: from smtp.bbn.com (smtp.bbn.com [128.33.1.81]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 313DB1B31FB for ; Tue, 6 Oct 2015 13:03:49 -0700 (PDT) Received: from ssh.bbn.com ([192.1.122.15]:44292 helo=COMSEC.fios-router.home) by smtp.bbn.com with esmtp (Exim 4.77 (FreeBSD)) (envelope-from ) id 1ZjYSe-00084D-Kx; Tue, 06 Oct 2015 16:03:45 -0400 To: secdir , aldrin.ietf@gmail.com, nobo.akiya.dev@gmail.com, kalyanir@cisco.com, venggovi@cisco.com, 'Jeffrey Haas' , "Alvaro Retana (aretana)" , db3546@att.com From: Stephen Kent Message-ID: <56142920.5080402@bbn.com> Date: Tue, 6 Oct 2015 16:03:44 -0400 User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.10; rv:38.0) Gecko/20100101 Thunderbird/38.3.0 MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="------------090608070908070209030002" Archived-At: Subject: [secdir] secdir review of draft-ietf-bfd-rfc5884-clarifications-02 X-BeenThere: secdir@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: Security Area Directorate List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 06 Oct 2015 20:03:51 -0000 This is a multi-part message in MIME format. --------------090608070908070209030002 Content-Type: text/plain; charset=utf-8; format=flowed Content-Transfer-Encoding: 8bit I reviewed this document as part of the security directorate's ongoing effort to review all IETF documents being processed by the IESG.These comments were written with the intent of improving security requirements and considerations in IETF drafts.Comments not addressed in last call may be included in AD reviews during the IESG review.Document editors and WG chairs should treat these comments just like any other last call comments. This document is intended to clarify RFC 5584, which describes BFD for MPLS LSPs (try saying that quickly 5 times!). I didn’t find any security problems with this very brief document. The Security Considerations section refers to the RFC being “clarified” and additionally cites RFC 4379. RFC 4379 contains a reasonable Security Considerations section. RFC 5584 contains a 1-paragraph Security Considerations section that cites 4 RFCs: 5880, 5883, 4379, and 5290. RFC 5880 is the base document for BFD, and it contains a 2-page Security Considerations section, although several portions of the text are out of date. RFC 5883 contains a trivial, 1 paragraph Security Considerations section. RFC 4379 contains a decent 1-page Security Considerations section. RFC 5290 is the MPLS/GMPLS Security Framework, a substantial document discussing security for MPLS. Considering the focus of this document and its 6-page length, its references to the Security Considerations sections of the other RFCs suffice. --------------090608070908070209030002 Content-Type: text/html; charset=utf-8 Content-Transfer-Encoding: 8bit

I reviewed this document as part of the security directorate's ongoing effort to review all IETF documents being processed by the IESG.  These comments were written with the intent of improving security requirements and considerations in IETF drafts.  Comments not addressed in last call may be included in AD reviews during the IESG review.  Document editors and WG chairs should treat these comments just like any other last call comments.

 

This document is intended to clarify RFC 5584, which describes BFD for MPLS LSPs (try saying that quickly 5 times!).

 

I didn’t find any security problems with this very brief document.

The Security Considerations section refers to the RFC being “clarified” and additionally cites RFC 4379. RFC 4379 contains a reasonable Security Considerations section. RFC 5584 contains a 1-paragraph Security Considerations section that cites 4 RFCs: 5880, 5883, 4379, and 5290. RFC 5880 is the base document for BFD, and it contains a 2-page Security Considerations section, although several portions of the text are out of date. RFC 5883 contains a trivial, 1 paragraph Security Considerations section. RFC 4379 contains a decent 1-page Security Considerations section. RFC 5290 is the MPLS/GMPLS Security Framework, a substantial document discussing security for MPLS.

 

Considering the focus of this document and its 6-page length, its references to the Security Considerations sections of the other RFCs suffice.

--------------090608070908070209030002-- From nobody Tue Oct 6 14:22:12 2015 Return-Path: X-Original-To: secdir@ietfa.amsl.com Delivered-To: secdir@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 059141B3372 for ; Tue, 6 Oct 2015 14:22:10 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.6 X-Spam-Level: X-Spam-Status: No, score=-2.6 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_DNSWL_LOW=-0.7] autolearn=unavailable Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id wyZtzK3fgDIv for ; Tue, 6 Oct 2015 14:22:09 -0700 (PDT) Received: from nm2-vm5.access.bullet.mail.gq1.yahoo.com (nm2-vm5.access.bullet.mail.gq1.yahoo.com [216.39.63.120]) (using TLSv1 with cipher ECDHE-RSA-RC4-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id E71201B3370 for ; Tue, 6 Oct 2015 14:22:08 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s2048; t=1444166528; bh=0ev82aOgzJE+NXpfh/vHbKgqkpiGqEpgFN9mteQExKQ=; h=Date:From:To:Subject:From:Subject; b=XImmge88Xoxnk7I0cWyVElCRkwBPCU9cjjyohP79r011MwZqwkEhQf4qRQYDClO34lN7Uo65HDejsQ4KET4DGBbqpRpMqf+In/JO0l1OrSlG0RHMmfY62ga8YK6HUcOAPjmEreb3WKSjFyarQXaaYilzoGwKcVVUQ7DVi7BzfBBK/BmIUZcthFEtxY8R/R16DUrrzK23hgZIHrHgcb0PPldrZtohZh9OACDhzVvRVdCDLpQKXDqOIt/B8vwOywKu/c56yel28sWJeNa53eSLRJpMkEIDwo4xpqNit6EY4MAMiVbCNYQSST2wMjkBbYl2SudcK9lDs3Un3we8ylBTrg== Received: from [216.39.60.170] by nm2.access.bullet.mail.gq1.yahoo.com with NNFMP; 06 Oct 2015 21:22:08 -0000 Received: from [98.138.226.243] by tm6.access.bullet.mail.gq1.yahoo.com with NNFMP; 06 Oct 2015 21:22:08 -0000 Received: from [127.0.0.1] by smtp114.sbc.mail.ne1.yahoo.com with NNFMP; 06 Oct 2015 21:22:08 -0000 X-Yahoo-Newman-Id: 12104.25605.bm@smtp114.sbc.mail.ne1.yahoo.com X-Yahoo-Newman-Property: ymail-3 X-YMail-OSG: OKa5BuEVM1kPoPh3eqBKpv4V626ujGGEV.h7fMr61CUdyt7 Hl6JMbbGrkxtHaC6iyn9V3Hdx1st6Affd1JhzXcq0OJfyjmzl5JgUUZrb1mA BMXW_bQLKYC1zICBFBUaP5tkm136_Ee6W9.ydo4bX.isEJ1WPrlFuri06fji .ARl5ye.AS6g7p9ZeUYs_CLNnr3Q2An_Yj_pfpWCk6HQNN_PsBD9nXop8IHR wg.vlPqZINRa5s3iRvxwUNW_H_EYvrD0NGnK75oYFXjqC_gM0tYT5kl_bA4w 06egIYQS_CSjZYNt4z3U5FJoGpP.rXWkrT3itRuK04lv04xPSXwNGaLCx2PR X9AgS6rBytojrnaE6AjAZdpomiuMghkAexCyPNTqozhH9_q2q5I4AOZrY5DT LjaS5RGfvpFc._fYkl5AtIIkuirQM_XY7kLk699YTd2M4m6tRd0acedO5_4F OFN74x.C8BZy52W1ijJfI4nw1lMuOLTEBL4KMqThDJp13D1HLSRoFtM6cqzX itAmSz3N5XtOo1zLmWGEsiKzSLxr37lxeYn_JFw-- X-Yahoo-SMTP: 4kJJK.qswBDPuwyc5wW.BPAQqNXdy5j09UNyeAS0pyOQ708- Received: from secure.mandelberg.org (c-76-24-31-176.hsd1.ma.comcast.net [76.24.31.176]) by uriel.mandelberg.org (Postfix) with ESMTPSA id 0F6F11C6033; Tue, 6 Oct 2015 17:22:07 -0400 (EDT) MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: 7bit Date: Tue, 06 Oct 2015 17:22:06 -0400 From: David Mandelberg To: , , Message-ID: <08c33803c2e1397c9467ad269bc55edc@mail.mandelberg.org> X-Sender: david@mandelberg.org User-Agent: Roundcube Webmail/0.7.2 Archived-At: Subject: [secdir] secdir review of draft-ietf-tcpm-rtorestart-08 X-BeenThere: secdir@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: Security Area Directorate List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 06 Oct 2015 21:22:10 -0000 I have reviewed this document as part of the security directorate's ongoing effort to review all IETF documents being processed by the IESG. These comments were written primarily for the benefit of the security area directors. Document editors and WG chairs should treat these comments just like any other last call comments. This document describes an experimental change to a TCP and SCTP retransmission timer. I thought about multiple ways to attack the specified algorithm, and was unable to come up with anything noteworthy. However, I should note that I do not feel qualified to comment on the impact this change might have on congestion in the Internet. The security considerations section primarily references RFC 6298, which I believe is sufficient. As such, I think this document is Ready. Venturing outside my area of expertise (so feel free to disregard this), I have a question about section 4, step 3a. Would it make more sense for the "0" to be replaced with a configurable parameter? It seems to me that the number should be close to an inter-packet arrival time to more accurately avoid the issue mentioned below ("this is required to ensure that RTOR does not trigger retransmissions prematurely when previously retransmitted segments are acknowledged"). -- David Eric Mandelberg / dseomn http://david.mandelberg.org/ From nobody Wed Oct 7 00:59:37 2015 Return-Path: X-Original-To: secdir@ietfa.amsl.com Delivered-To: secdir@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 101781A9066; Wed, 7 Oct 2015 00:59:35 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.551 X-Spam-Level: X-Spam-Status: No, score=-1.551 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HELO_EQ_SE=0.35, SPF_PASS=-0.001] autolearn=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id sctESw6TVr0H; Wed, 7 Oct 2015 00:59:32 -0700 (PDT) Received: from duva.sjd.se (duva.sjd.se [IPv6:2001:9b0:1:1702::100]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id CA21D1A9088; Wed, 7 Oct 2015 00:59:30 -0700 (PDT) Received: from latte.josefsson.org ([155.4.17.3]) (authenticated bits=0) by duva.sjd.se (8.14.4/8.14.4/Debian-4) with ESMTP id t977xQ8Y005768 (version=TLSv1/SSLv3 cipher=AES128-GCM-SHA256 bits=128 verify=NOT); Wed, 7 Oct 2015 09:59:27 +0200 X-Hashcash: 1:22:151007:iesg@ietf.org::Ds+EB8PhX+CNE3BZ:ddz X-Hashcash: 1:22:151007:secdir@ietf.org::80TxBABQtz8eqYe2:c+Nu X-Hashcash: 1:22:151007:draft-ietf-netconf-call-home.all@tools.ietf.org::cNNc87ViBNv/gt2S:yCiK From: Simon Josefsson To: iesg@ietf.org, secdir@ietf.org, draft-ietf-netconf-call-home.all@tools.ietf.org OpenPGP: id=54265E8C; url=http://josefsson.org/54265e8c.txt Date: Wed, 07 Oct 2015 09:59:25 +0200 Message-ID: <8737xnp0rm.fsf@latte.josefsson.org> User-Agent: Gnus/5.130014 (Ma Gnus v0.14) Emacs/24.4 (gnu/linux) MIME-Version: 1.0 Content-Type: multipart/signed; boundary="=-=-="; micalg=pgp-sha256; protocol="application/pgp-signature" X-Virus-Scanned: clamav-milter 0.98.7 at duva.sjd.se X-Virus-Status: Clean Archived-At: Subject: [secdir] review of draft-ietf-netconf-call-home-11 X-BeenThere: secdir@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: Security Area Directorate List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 07 Oct 2015 07:59:35 -0000 --=-=-= Content-Type: text/plain Hi. I have reviewed this document as part of the security directorate's ongoing effort to review all IETF documents being processed by the IESG. These comments were written primarily for the benefit of the security area directors. Document editors and WG chairs should treat these comments just like any other last call comments. I believe the document is ready. One main security concern is the reversal of roles that this document introduce, but letting TCP clients act as TLS/SSH servers, and vice versa, is not unheard of. As long as proper peer authentication is performed, and other parts of the security protocols are properly performed, I see no fundamental problem with this. I'm sure some implementations will need to be tweaked to deal with this, and terminology might confusing at times. The 'Security Considerations' section does a good job discussing this, and some other issues too. Two minor questions: 1) Are non-certificate-based TLS out of scope for NETCONF/RESTCONF? I see no discussion of it in this draft, and text in the document implicitly assumes host keys (SSH) or certificates (TLS) are used. Think about TLS-PSK for example, which seems like a relevant idea for embedded devices. This may not be the document to adress this, but if there is work towards that goal already, it might be useful to align this document with that. 2) Section 2 says 'The term "NETCONF/RESTCONF client" can refer to the [RFC6241], Section 1.1 "client".'. Shouldn't this say the term may refer to a RESTCONF client and reference draft-ietf-netconf-restconf? Or is that not intentional? The use of the word 'can' make this text vague to me. The previous section (1.5) says that 'NETCONF/RESTCONF' is an abbrevation for 'the NETCONF or the RESTCONF'. The same comment applies to section 3. Maybe this is a misunderstanding on my side, but the text confused me so it may be useful to resolve. Thanks, /Simon --=-=-= Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iQEcBAEBCAAGBQJWFNDdAAoJEIYLf7sy+BGdEZ4H/RquwTL83Ok1d5Q2ifLvIDcQ ca1Dl39WdTOaNSXdzWPkoOc9IxuwPsJtPkZ6Sz54HqpZ8x10gErOHnVK/yUhOhIf /SbBjoH0kiy8m5qBOFY5n74lzu7Cmc7qMbT8oezj//i/UZMVbh1z57B3Hao/RG+5 Gnzu/oheYwf+TSijLuOMgzEvneoNobKSp5MZOz2TVClJQTxBhyTxNsRKBkaCeAkB hxmMTOwPEJQhxw8+3LMEAun/nU/p5MhZ1RTAYmtlyhVWR5IOLYXOXWU19Z8SH3Gg Xvq6AR2OyU5W0UNBaTMbggG2HCXsdQf3+JRaY/mqi25DKLYtg5++9eYlihzE1lE= =epsD -----END PGP SIGNATURE----- --=-=-=-- From nobody Wed Oct 7 12:00:16 2015 Return-Path: X-Original-To: secdir@ietfa.amsl.com Delivered-To: secdir@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 894E41ACED1; Wed, 7 Oct 2015 12:00:11 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.749 X-Spam-Level: X-Spam-Status: No, score=-1.749 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_ENVFROM_END_DIGIT=0.25, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, SPF_PASS=-0.001] autolearn=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 4drzNpsSY2Ob; Wed, 7 Oct 2015 12:00:10 -0700 (PDT) Received: from mail-oi0-x22b.google.com (mail-oi0-x22b.google.com [IPv6:2607:f8b0:4003:c06::22b]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 5D1761ACE8C; Wed, 7 Oct 2015 12:00:06 -0700 (PDT) Received: by oibi136 with SMTP id i136so14704670oib.3; Wed, 07 Oct 2015 12:00:05 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:in-reply-to:references:from:date:message-id:subject:to :cc:content-type; bh=l1GPrxyT6dDdVMtZiNAsqCW1t2IoErg1cSKF88EyyjY=; b=FBaSHSopGMUXlvMeXzZnWCTadvr+t6fOZKa5hNYS30dnwowLSyw3eOhWQE5q+A88oj L6Os+NxTH0au6t3SIhVR6eR2/7NajTR5Qd8X5UiP1lE+htyMGXaSYrD6nc4iyM7dE1+o jc1Wm20HUF0KA8om5cdMVVDdPdvt2lG6xdRiEBrlMv2F8hMR6kVgMrIH6ouoUnceGXyq 7tbh1LpAZBjgT+B2l6q00NcYSktjew4jYbRmcMXJRtprBfInlkoiJzvgGx0ffZ1RKN5E +1M8o4NNYoXyA03hPXtQvUDX39WGuldzPJuhYmTGs/5bY1GrSue2E+haJ5aKtb7OCZQI 9fUA== X-Received: by 10.202.202.14 with SMTP id a14mr1726079oig.73.1444244405461; Wed, 07 Oct 2015 12:00:05 -0700 (PDT) MIME-Version: 1.0 Received: by 10.76.144.65 with HTTP; Wed, 7 Oct 2015 11:59:50 -0700 (PDT) In-Reply-To: References: From: Donald Eastlake Date: Wed, 7 Oct 2015 14:59:50 -0400 Message-ID: To: Charlie Kaufman Content-Type: multipart/alternative; boundary=001a113523bac1a9620521885a12 Archived-At: Cc: "draft-ietf-trill-cmt.all@tools.ietf.org" , "iesg@ietf.org" , "secdir@ietf.org" Subject: Re: [secdir] Secdir review of draft-ietf-trill-cmt-08 X-BeenThere: secdir@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: Security Area Directorate List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 07 Oct 2015 19:00:11 -0000 --001a113523bac1a9620521885a12 Content-Type: text/plain; charset=UTF-8 Hi Charlie, I believe your comments are resolved in the -10 version uploaded today. Thanks, Donald ============================= Donald E. Eastlake 3rd +1-508-333-2270 (cell) 155 Beaver Street, Milford, MA 01757 USA d3e3e3@gmail.com On Mon, Oct 5, 2015 at 10:46 PM, Donald Eastlake wrote: > Hi Charlie, > > Thanks for the review. You suggested editorials all look reasonable to me. > > Donald > ============================= > Donald E. Eastlake 3rd +1-508-333-2270 (cell) > 155 Beaver Street, Milford, MA 01757 USA > d3e3e3@gmail.com > > On Mon, Oct 5, 2015 at 9:18 PM, Charlie Kaufman < > charliekaufman@outlook.com> wrote: > >> I have reviewed this document as part of the security directorate's >> ongoing effort to review all IETF documents being processed by the IESG. >> These comments were written primarily for the benefit of the security area >> directors. Document editors and WG chairs should treat these comments just >> like any other last call comments. >> >> >> This document specifies an optional new mechanism for trill that supports >> more fine-grained control of the load balancing of multi-cast packets. The >> changes are to the routing protocol and does not make it any more security >> sensitive than it already is and hence introduces no new security issues. >> >> >> Typos: >> >> >> Page 3, Section 1, para 2, line 3: "[RFC6439], provide" -> "[RFC6439] >> provides" >> >> Page 5, Section 1.2, line 1: "of much passionate" -> "of many passionate" >> or "of very passionate" >> >> Page 14, Section 6, Para 2, line 1: "involve with" -> "involved with" >> _______________________________________________ >> secdir mailing list >> secdir@ietf.org >> https://www.ietf.org/mailman/listinfo/secdir >> wiki: http://tools.ietf.org/area/sec/trac/wiki/SecDirReview >> > > --001a113523bac1a9620521885a12 Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: quoted-printable
Hi Charlie,

I believe your comments are= resolved in the -10 version uploaded today.

Thanks,
Donald=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D=3D
=C2=A0Donald E. Eastlake 3rd=C2=A0=C2=A0 +1-508-333-2270= (cell)
=C2=A0155 Beaver Street,=C2=A0Milford, MA 01757 USA
=C2=A0d3e3e3@gmail.com

On Mon, Oct 5, 2015 at 10:46 PM, Donald East= lake <d3e3e3@gmail.com> wrote:
Hi Charlie,

<= div>
Thanks for the review. You suggested editorials all look reasonabl= e to me.

Donald
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D
=C2=A0Donald E. Eastlake 3= rd=C2=A0=C2=A0 +1-508-333-2270 (cell)
=C2=A0155 Beaver Street,=C2=A0= Milford, MA 01757 USA
=C2=A0d3e3e3@gmail.com

On Mon, Oct 5, 2015 at 9:18 PM, Charlie Kauf= man <charliekaufman@outlook.com> wrote:
I have reviewed this document as part of the securit= y directorate's ongoing effort to review all IETF documents being proce= ssed by the IESG. These comments were written primarily for the benefit of = the security area directors. Document editors and WG chairs should treat th= ese comments just like any other last call comments.


This document specifies an optional new mechanism for trill that supports m= ore fine-grained control of the load balancing of multi-cast packets. The c= hanges are to the routing protocol and does not make it any more security s= ensitive than it already is and hence introduces no new security issues.

Typos:


Page 3, Section 1, para 2, line 3: "[RFC6439], provide" -> &qu= ot;[RFC6439] provides"

Page 5, Section 1.2, line 1: "of much passionate" -> "of = many passionate" or "of very passionate"

Page 14, Section 6, Para 2, line 1: "involve with" -> "in= volved with"
_______________________________________________
secdir mailing list
secdir@ietf.org https://www.ietf.org/mailman/listinfo/secdir
wiki: http://tools.ietf.org/area/sec/trac/wiki/= SecDirReview


--001a113523bac1a9620521885a12-- From nobody Wed Oct 7 12:38:03 2015 Return-Path: X-Original-To: secdir@ietfa.amsl.com Delivered-To: secdir@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 7C63B1B2F6A; Wed, 7 Oct 2015 12:38:00 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.167 X-Spam-Level: X-Spam-Status: No, score=-1.167 tagged_above=-999 required=5 tests=[BAYES_50=0.8, IP_NOT_FRIENDLY=0.334, RCVD_IN_DNSWL_MED=-2.3, SPF_HELO_PASS=-0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id aUPztJQAOTnr; Wed, 7 Oct 2015 12:37:59 -0700 (PDT) Received: from colo.trepanning.net (colo.trepanning.net [69.55.226.174]) by ietfa.amsl.com (Postfix) with ESMTP id 4E2C01B2F67; Wed, 7 Oct 2015 12:37:59 -0700 (PDT) Received: from www.trepanning.net (localhost [127.0.0.1]) by colo.trepanning.net (Postfix) with ESMTP id C0A881022404C; Wed, 7 Oct 2015 12:37:58 -0700 (PDT) Received: from 69.12.173.8 (SquirrelMail authenticated user dharkins@lounge.org) by www.trepanning.net with HTTP; Wed, 7 Oct 2015 12:37:58 -0700 (PDT) Message-ID: <28535528a17e73ee9a093c8f86a1de3b.squirrel@www.trepanning.net> Date: Wed, 7 Oct 2015 12:37:58 -0700 (PDT) From: "Dan Harkins" To: iesg@ietf.org, secdir@ietf.org, draft-ietf-bess-spbm-evpn.all@tools.ietf.org User-Agent: SquirrelMail/1.4.14 [SVN] MIME-Version: 1.0 Content-Type: text/plain;charset=iso-8859-1 Content-Transfer-Encoding: 8bit X-Priority: 3 (Normal) Importance: Normal Archived-At: Subject: [secdir] secdir review of draft-ietf-bess-spbm-evpn-02 X-BeenThere: secdir@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: Security Area Directorate List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 07 Oct 2015 19:38:00 -0000 Greetings, I have reviewed this document as part of the security directorate's ongoing effort to review all IETF documents being processed by the IESG. These comments were written primarily for the benefit of the security area directors. Document editors and WG chairs should treat these comments just like any other last call comments. This draft describes how to combine Ethernet Shortest Path Bridging MAC mode "islands" with Ethernet virtual private networks to provide L2 connectivity between different provider edges. It is extremely acronym heavy (e.g. "As with PBB networking the B-VID is local to the SPBM network so in SPBM a B-MAC associated with B-VID is advertised with the supported I-SIDs at the PBB gateway") and I found myself constantly referring to the helpful terminology section. After an overview the body of the draft is basically a single section ("4. Elements of Procedure") that states "A PE MUST implement and perform the following operations" but none of the following subsections contain any normative text. I think some normative text is needed in each of the sub-sections, e.g instead of "The following is configured..." maybe "The following SHALL be configured..."). Also, the Security Considerations deal with misconfiguration. What would happen if there was a bad actor in the mix? A PE appoints itself as a designated forwarder (DF). What is the implication of such a self-selection being done maliciously? Anything else that can happen by intentionally malicious behavior? Is there a potential for exposure of the location of MAC addresses of customer equipment? Is there some way for something to be put into the EVPN that should not be there? If the answer to all this is "nothing" then that's fine but it's not clear that malicious behavior was considered when writing the Security Considerations. I would say the draft is "ready with nits", the nits being my request for some normative language in the subsections of section 4, and possible added verbage in the Security Considerations if the answers above are not "nothing". regards, Dan. From nobody Wed Oct 7 13:02:48 2015 Return-Path: X-Original-To: secdir@ietfa.amsl.com Delivered-To: secdir@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 0F4141B2A69; Wed, 7 Oct 2015 13:02:47 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.278 X-Spam-Level: X-Spam-Status: No, score=-1.278 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, FM_FORGED_GMAIL=0.622, FREEMAIL_FROM=0.001, SPF_PASS=-0.001] autolearn=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id qgRi9u8mlG1P; Wed, 7 Oct 2015 13:02:45 -0700 (PDT) Received: from mail-vk0-x230.google.com (mail-vk0-x230.google.com [IPv6:2607:f8b0:400c:c05::230]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 3D33C1B2FC4; Wed, 7 Oct 2015 13:02:45 -0700 (PDT) Received: by vkat63 with SMTP id t63so18899394vka.1; Wed, 07 Oct 2015 13:02:44 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:sender:in-reply-to:references:date:message-id:subject :from:to:cc:content-type; bh=Y6QebDfk7ZfXrE8d6cONLSUM0MVvcCoLA/ZBew99kBs=; b=zvOztmN/BhBVDCjuOPdUh581Q/fpxS2wZVWspRA0XlF7oCA5AEcaUMmGeujJG+FPLZ SMJqWBUkGSDPM1c9q7t0C7SSzrM/q4iU5QbLMBghkcKiVkp4NaiHFo+0LhrTynXnzG1E Lt6f+iDhk3PJMaLeDIgCY688wxLCI/VRYwPDdRI991VSf+MfWgWdqCy2q28bHUnSBNHQ 7z9IbbHvgcwovDscqD6W4yhvP63zHNYYBEexD7MFlMVLNuzscc7FxunPt78fZ2Uu3S60 Aca6rl4vpOya6Nv79WKs1K/wsov36fz54kQIIMwksRKSSVuj9KP7nRT5P3oiipCk7Y2f ybEg== MIME-Version: 1.0 X-Received: by 10.31.192.9 with SMTP id q9mr2514879vkf.63.1444248164362; Wed, 07 Oct 2015 13:02:44 -0700 (PDT) Sender: barryleiba@gmail.com Received: by 10.31.88.196 with HTTP; Wed, 7 Oct 2015 13:02:44 -0700 (PDT) In-Reply-To: <28535528a17e73ee9a093c8f86a1de3b.squirrel@www.trepanning.net> References: <28535528a17e73ee9a093c8f86a1de3b.squirrel@www.trepanning.net> Date: Wed, 7 Oct 2015 13:02:44 -0700 X-Google-Sender-Auth: R7Xnju2koRXURyHxP8G3R3FYh7I Message-ID: From: Barry Leiba To: Dan Harkins Content-Type: text/plain; charset=UTF-8 Archived-At: Cc: draft-ietf-bess-spbm-evpn.all@tools.ietf.org, IESG , "secdir@ietf.org" Subject: Re: [secdir] secdir review of draft-ietf-bess-spbm-evpn-02 X-BeenThere: secdir@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: Security Area Directorate List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 07 Oct 2015 20:02:47 -0000 Hi, Dan, and thanks for the SecDir review. > After an overview the body of the draft is basically a single > section ("4. Elements of Procedure") that states "A PE MUST implement > and perform the following operations" but none of the following > subsections contain any normative text. I think some normative > text is needed in each of the sub-sections, e.g instead of "The > following is configured..." maybe "The following SHALL be > configured..."). I've seen similar comments about other documents, and I find it troubling that we often consider that the only statements that are normative are ones that include 2119 key words. I think that is not at all so, and that what we say in a standards document *is* normative unless we say otherwise. I have not yet reviewed this document, so I might see it differently when I do, but I've just taken a look at Section 4.1 to see Dan's example. I don't see why anything needs to be changed: the text, as it is, is clear that the specified items have to be configured. What would adding "SHALL" or "MUST" change here? Does the existing text seem to give anyone any options here? As I read the current text, if I fail to include a route target or an SPSourceID in the configuration, I am not complying with this specification. Now, I generally think we overuse 2119 key words, so that's where I'm starting from. But honestly: how does adding 2119 key words to Section 4.1 improve it? Barry From nobody Wed Oct 7 14:58:48 2015 Return-Path: X-Original-To: secdir@ietfa.amsl.com Delivered-To: secdir@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 020401ACEED; Wed, 7 Oct 2015 14:58:44 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -14.511 X-Spam-Level: X-Spam-Status: No, score=-14.511 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_HI=-5, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 7QsDwrNHDWZ7; Wed, 7 Oct 2015 14:58:39 -0700 (PDT) Received: from alln-iport-4.cisco.com (alln-iport-4.cisco.com [173.37.142.91]) (using TLSv1 with cipher RC4-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 6ABC31AD2F2; Wed, 7 Oct 2015 14:58:39 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=2678; q=dns/txt; s=iport; t=1444255119; x=1445464719; h=from:to:subject:date:message-id:references:in-reply-to: content-id:content-transfer-encoding:mime-version; bh=cfyBOB66sLpC9qAxD9r2sJrAHnUzIuQhkbBh1oR8Ssc=; b=iM0whzmtZ5C5kqNEIR3QosW5v5EJAkUjyfzcABvPpRbYwoxB1XbCkWOs jHRSVt2VD7+UWtSs6R1okRuj8lw/Vixr3jdmrrrIXU6IQu/NOKNNK0xdq 1mUJvh4rNGpUmnsknfMKA4P7JrC6L6C5rFkIQ/8O5DDLsr0GyUsPsFg/r g=; X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: A0AkAwB/lBVW/5xdJa1egyeBQga9QAENgVqDE4IKZhkCgUc4FAEBAQEBAQGBCoQnAQEDATpPAgEIDigQMiUCBAESiCYIwkwBAQEBAQEBAwEBAQEBARyGcwGEfYUUhC4BBJJNgzgBjRaBV5Yxg28fAQFCghEdgVRxhmaBBgEBAQ X-IronPort-AV: E=Sophos;i="5.17,651,1437436800"; d="scan'208";a="195002710" Received: from rcdn-core-5.cisco.com ([173.37.93.156]) by alln-iport-4.cisco.com with ESMTP; 07 Oct 2015 21:58:38 +0000 Received: from XCH-ALN-009.cisco.com (xch-aln-009.cisco.com [173.36.7.19]) by rcdn-core-5.cisco.com (8.14.5/8.14.5) with ESMTP id t97LwcSW028294 (version=TLSv1/SSLv3 cipher=AES256-SHA bits=256 verify=FAIL); Wed, 7 Oct 2015 21:58:38 GMT Received: from xch-aln-009.cisco.com (173.36.7.19) by XCH-ALN-009.cisco.com (173.36.7.19) with Microsoft SMTP Server (TLS) id 15.0.1104.5; Wed, 7 Oct 2015 16:58:38 -0500 Received: from xhc-aln-x10.cisco.com (173.36.12.84) by xch-aln-009.cisco.com (173.36.7.19) with Microsoft SMTP Server (TLS) id 15.0.1104.5 via Frontend Transport; Wed, 7 Oct 2015 16:58:38 -0500 Received: from xmb-aln-x15.cisco.com ([169.254.9.102]) by xhc-aln-x10.cisco.com ([173.36.12.84]) with mapi id 14.03.0248.002; Wed, 7 Oct 2015 16:58:37 -0500 From: "Alvaro Retana (aretana)" To: Dan Harkins , "iesg@ietf.org" , "secdir@ietf.org" , "draft-ietf-bess-spbm-evpn.all@tools.ietf.org" Thread-Topic: secdir review of draft-ietf-bess-spbm-evpn-02 Thread-Index: AQHRATev8ke0tsxWhkKa2MLJlJDvYJ5gpPKA Date: Wed, 7 Oct 2015 21:58:37 +0000 Message-ID: References: <28535528a17e73ee9a093c8f86a1de3b.squirrel@www.trepanning.net> In-Reply-To: <28535528a17e73ee9a093c8f86a1de3b.squirrel@www.trepanning.net> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [64.101.220.142] Content-Type: text/plain; charset="us-ascii" Content-ID: Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 Archived-At: Subject: Re: [secdir] secdir review of draft-ietf-bess-spbm-evpn-02 X-BeenThere: secdir@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: Security Area Directorate List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 07 Oct 2015 21:58:44 -0000 On 10/7/15, 3:37 PM, "Dan Harkins" wrote: Dan: Hi! Thanks for your review! This document was in last week's Telechat and it was already approved for publication. We're waiting for the resolution of another point raised during the IESG review, so while we wait I'll ask the authors to see if anything can be clarified in the Security Considerations section. I agree with Barry about the use of rfc2119 language. Thanks! Alvaro. > > Greetings, > > I have reviewed this document as part of the security directorate's >ongoing effort to review all IETF documents being processed by the >IESG. These comments were written primarily for the benefit of the >security area directors. Document editors and WG chairs should treat >these comments just like any other last call comments. > > This draft describes how to combine Ethernet Shortest Path Bridging >MAC mode "islands" with Ethernet virtual private networks to provide >L2 connectivity between different provider edges. It is extremely >acronym heavy (e.g. "As with PBB networking the B-VID is local to the >SPBM network so in SPBM a B-MAC associated with B-VID is advertised >with the supported I-SIDs at the PBB gateway") and I found myself >constantly referring to the helpful terminology section. > > After an overview the body of the draft is basically a single >section ("4. Elements of Procedure") that states "A PE MUST implement >and perform the following operations" but none of the following >subsections contain any normative text. I think some normative >text is needed in each of the sub-sections, e.g instead of "The >following is configured..." maybe "The following SHALL be >configured..."). > > Also, the Security Considerations deal with misconfiguration. What >would happen if there was a bad actor in the mix? A PE appoints >itself as a designated forwarder (DF). What is the implication of >such a self-selection being done maliciously? Anything else that >can happen by intentionally malicious behavior? Is there a potential >for exposure of the location of MAC addresses of customer equipment? >Is there some way for something to be put into the EVPN that should >not be there? If the answer to all this is "nothing" then that's fine >but it's not clear that malicious behavior was considered when >writing the Security Considerations. > > I would say the draft is "ready with nits", the nits being my >request for some normative language in the subsections of section 4, >and possible added verbage in the Security Considerations if the >answers above are not "nothing". > > regards, > > Dan. > > From nobody Thu Oct 8 00:08:46 2015 Return-Path: X-Original-To: secdir@ietfa.amsl.com Delivered-To: secdir@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 67E141B323B; Thu, 8 Oct 2015 00:08:45 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -3.867 X-Spam-Level: X-Spam-Status: No, score=-3.867 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, IP_NOT_FRIENDLY=0.334, RCVD_IN_DNSWL_MED=-2.3, SPF_HELO_PASS=-0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Tsweum35Vj8d; Thu, 8 Oct 2015 00:08:43 -0700 (PDT) Received: from colo.trepanning.net (colo.trepanning.net [69.55.226.174]) by ietfa.amsl.com (Postfix) with ESMTP id D53CC1ACDE5; Thu, 8 Oct 2015 00:08:43 -0700 (PDT) Received: from www.trepanning.net (localhost [127.0.0.1]) by colo.trepanning.net (Postfix) with ESMTP id 719B010224008; Thu, 8 Oct 2015 00:08:43 -0700 (PDT) Received: from 69.12.173.8 (SquirrelMail authenticated user dharkins@lounge.org) by www.trepanning.net with HTTP; Thu, 8 Oct 2015 00:08:43 -0700 (PDT) Message-ID: In-Reply-To: References: <28535528a17e73ee9a093c8f86a1de3b.squirrel@www.trepanning.net> Date: Thu, 8 Oct 2015 00:08:43 -0700 (PDT) From: "Dan Harkins" To: "Barry Leiba" User-Agent: SquirrelMail/1.4.14 [SVN] MIME-Version: 1.0 Content-Type: text/plain;charset=iso-8859-1 Content-Transfer-Encoding: 8bit X-Priority: 3 (Normal) Importance: Normal Archived-At: Cc: draft-ietf-bess-spbm-evpn.all@tools.ietf.org, IESG , "secdir@ietf.org" Subject: Re: [secdir] secdir review of draft-ietf-bess-spbm-evpn-02 X-BeenThere: secdir@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: Security Area Directorate List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 08 Oct 2015 07:08:45 -0000 Hi Barry, On Wed, October 7, 2015 1:02 pm, Barry Leiba wrote: > Hi, Dan, and thanks for the SecDir review. > >> After an overview the body of the draft is basically a single >> section ("4. Elements of Procedure") that states "A PE MUST implement >> and perform the following operations" but none of the following >> subsections contain any normative text. I think some normative >> text is needed in each of the sub-sections, e.g instead of "The >> following is configured..." maybe "The following SHALL be >> configured..."). > > I've seen similar comments about other documents, and I find it > troubling that we often consider that the only statements that are > normative are ones that include 2119 key words. I think that is not > at all so, and that what we say in a standards document *is* normative > unless we say otherwise. The problem is the passive voice does not instruct implementations properly. > I have not yet reviewed this document, so I might see it differently > when I do, but I've just taken a look at Section 4.1 to see Dan's > example. I don't see why anything needs to be changed: the text, as > it is, is clear that the specified items have to be configured. What > would adding "SHALL" or "MUST" change here? Does the existing text > seem to give anyone any options here? As I read the current text, if > I fail to include a route target or an SPSourceID in the > configuration, I am not complying with this specification. The _overview_ (which is arguably informative) has more normative statements than the body of the draft that is supposed to instruct implementations in how to behave! And the body of the draft says that implementations MUST do a collection of passive-voiced and conditional behavior. > Now, I generally think we overuse 2119 key words, so that's where I'm > starting from. But honestly: how does adding 2119 key words to > Section 4.1 improve it? It alerts an implementer to something he or she needs to pay attention to because it has interoperability implications. If nothing in subsections 4.1 to 4.8 need normative text then get rid of the RFC 2119 word in section 4 that compels an implementation to behavior that is passive-voiced and conditional. Overuse of RFC 2119 key words may be attracting your attention but the issue here is not an overuse but a dearth of them. On the other hand, if you're so concerned about overuse of RFC 2119 words then maybe you should make a comment on this draft that putting such normative statements in something like an informative overview is not appropriate. If RFC 2119 words are not necessary when describing the protocol behavior then they are certainly not necessary in an informative overview. And therefore there is no reason to reference RFC 2119 in this Standards Track RFC. Dan. > Barry > From nobody Thu Oct 8 02:06:33 2015 Return-Path: X-Original-To: secdir@ietfa.amsl.com Delivered-To: secdir@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 269D91A8BB6; Thu, 8 Oct 2015 02:06:32 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.121 X-Spam-Level: X-Spam-Status: No, score=-1.121 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, SPF_NEUTRAL=0.779] autolearn=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id AXr5tN1noNKA; Thu, 8 Oct 2015 02:06:30 -0700 (PDT) Received: from mail.kivinen.iki.fi (fireball.acr.fi [83.145.195.1]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id BB7721A8BB3; Thu, 8 Oct 2015 02:06:29 -0700 (PDT) Received: from fireball.acr.fi (localhost [127.0.0.1]) by mail.kivinen.iki.fi (8.15.1/8.14.8) with ESMTPS id t9896OrN009957 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=NO); Thu, 8 Oct 2015 12:06:24 +0300 (EEST) Received: (from kivinen@localhost) by fireball.acr.fi (8.15.1/8.14.8/Submit) id t9896OXx021973; Thu, 8 Oct 2015 12:06:24 +0300 (EEST) MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit Message-ID: <22038.12816.208794.496704@fireball.acr.fi> Date: Thu, 8 Oct 2015 12:06:24 +0300 From: Tero Kivinen To: iesg@ietf.org, secdir@ietf.org, draft-ietf-cdni-media-type.all@tools.ietf.org X-Edit-Time: 8 min X-Total-Time: 7 min Archived-At: Subject: [secdir] Secdir review of draft-ietf-cdni-media-type-04 X-BeenThere: secdir@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: Security Area Directorate List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 08 Oct 2015 09:06:32 -0000 I have reviewed this document as part of the security directorate's ongoing effort to review all IETF documents being processed by the IESG. These comments were written primarily for the benefit of the security area directors. Document editors and WG chairs should treat these comments just like any other last call comments. This document allocates new media type for genera purpose content delivery network interconnection protocol. It is general media type which can be used to transmit whatever between CDNs. The actual format of the content depends on the mandatory ptype parameter. This document does not include separate Security considerations section, but there is security considerations part of the section 2.1 which describes the media type itself. As this is general purpose media type which can be used to transfer anything, the security considerations section is quite vague, just pointing out that the individual CDNI interface specifications need to specify the security considerations for the ptypes used. Perhaps the security considerations section could mention that as this is generic media type, it can easily used to transfer data out from the CDN network without anybody noticing as firewalls will most likely just see application/cdni, and do not look at the ptype itself. Nits: The ptype parameter defines ptype-char as follows: ptype-char = %x21 / %23-3A / %x3C / %x3E-7E I think there is 'x' missing from the "%23-3A", i.e. it should be "%x23-3A". I think this document is ready with nits. -- kivinen@iki.fi From nobody Thu Oct 8 03:32:40 2015 Return-Path: X-Original-To: secdir@ietfa.amsl.com Delivered-To: secdir@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 9FDA91B2A68 for ; Thu, 8 Oct 2015 03:32:38 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.121 X-Spam-Level: X-Spam-Status: No, score=-1.121 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, SPF_NEUTRAL=0.779] autolearn=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id SUrUit7TP1d7 for ; Thu, 8 Oct 2015 03:32:36 -0700 (PDT) Received: from mail.kivinen.iki.fi (fireball.acr.fi [83.145.195.1]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 64DFB1B2A9C for ; Thu, 8 Oct 2015 03:32:36 -0700 (PDT) Received: from fireball.acr.fi (localhost [127.0.0.1]) by mail.kivinen.iki.fi (8.15.1/8.14.8) with ESMTPS id t98AWWOd003046 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=NO) for ; Thu, 8 Oct 2015 13:32:32 +0300 (EEST) Received: (from kivinen@localhost) by fireball.acr.fi (8.15.1/8.14.8/Submit) id t98AWWfh010852; Thu, 8 Oct 2015 13:32:32 +0300 (EEST) MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit Message-ID: <22038.17984.68675.454800@fireball.acr.fi> Date: Thu, 8 Oct 2015 13:32:32 +0300 From: Tero Kivinen To: secdir@ietf.org X-Edit-Time: 1 min X-Total-Time: 0 min Archived-At: Subject: [secdir] Assignments X-BeenThere: secdir@ietf.org X-Mailman-Version: 2.1.15 Precedence: list Reply-To: secdir-secretary@mit.edu List-Id: Security Area Directorate List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 08 Oct 2015 10:32:38 -0000 Review instructions and related resources are at: http://tools.ietf.org/area/sec/trac/wiki/SecDirReview Rich Salz is next in the rotation. For telechat 2015-10-15 Reviewer LC end Draft Steve Hanna T 2015-10-09 draft-blanchet-ccsds-urn-00 Jeffrey Hutzelman T 2015-09-30 draft-ietf-v6ops-pmtud-ecmp-problem-04 Leif Johansson T 2015-10-02 draft-ietf-mpls-self-ping-05 Benjamin Kaduk T 2015-10-08 draft-ietf-ospf-node-admin-tag-06 Scott Kelly T 2015-10-08 draft-ietf-bess-mvpn-bidir-ingress-replication-03 Ben Laurie T 2015-10-08 draft-ietf-ospf-rfc4970bis-05 Chris Lonvick T 2015-10-08 draft-ietf-ppsp-base-tracker-protocol-10 For telechat 2015-10-22 Chris Inacio T 2015-07-29 draft-ietf-homenet-dncp-10 Catherine Meadows T 2015-10-19 draft-ietf-trill-rfc7180bis-06 Adam Montville T 2015-10-21 draft-ietf-ace-usecases-09 Russ Mundy T 2015-10-15 draft-ietf-aqm-ecn-benefits-06 Sandy Murphy T 2015-10-15 draft-ietf-aqm-fq-implementation-02 Yoav Nir T 2015-10-20 draft-ietf-homenet-hncp-09 Magnus Nystrom T 2015-10-21 draft-ietf-ippm-type-p-monitor-02 Last calls and special requests: Donald Eastlake 2015-09-11 draft-ietf-dane-openpgpkey-05 Daniel Kahn Gillmor E None draft-ietf-rtcweb-security-08 Chris Inacio 2015-10-02 draft-ietf-lwig-ikev2-minimal-04 Warren Kumari 2015-10-26 draft-ietf-ipfix-mib-variable-export-09 Matt Lepinski 2015-10-14 draft-ietf-pcp-port-set-10 Alexey Melnikov 2015-10-27 draft-mglt-ipsecme-clone-ike-sa-05 Matthew Miller 2015-10-27 draft-santesson-auth-context-extension-09 Hilarie Orman 2015-10-19 draft-ietf-lisp-impact-04 Eric Osterweil 2015-10-20 draft-ietf-mpls-lsp-ping-mpls-tp-oam-conf-14 Radia Perlman 2015-10-19 draft-ietf-pals-mpls-tp-mac-wd-02 Vincent Roca 2015-10-15 draft-ietf-pals-ms-pw-protection-03 Joe Salowey 2015-10-19 draft-ietf-pals-redundancy-spe-02 -- kivinen@iki.fi From nobody Fri Oct 9 13:52:18 2015 Return-Path: X-Original-To: secdir@ietfa.amsl.com Delivered-To: secdir@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id BE42A1ACCE7; Fri, 9 Oct 2015 13:52:16 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -3.611 X-Spam-Level: X-Spam-Status: No, score=-3.611 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, J_CHICKENPOX_35=0.6, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id BkOSGEHtY83Y; Fri, 9 Oct 2015 13:52:11 -0700 (PDT) Received: from dmz-mailsec-scanner-5.mit.edu (dmz-mailsec-scanner-5.mit.edu [18.7.68.34]) by ietfa.amsl.com (Postfix) with ESMTP id 119901ACCE9; Fri, 9 Oct 2015 13:52:10 -0700 (PDT) X-AuditID: 12074422-f79976d0000078ca-93-561828f92c7f Received: from mailhub-auth-3.mit.edu ( [18.9.21.43]) (using TLS with cipher DHE-RSA-AES256-SHA (256/256 bits)) (Client did not present a certificate) by dmz-mailsec-scanner-5.mit.edu (Symantec Messaging Gateway) with SMTP id 91.97.30922.9F828165; Fri, 9 Oct 2015 16:52:10 -0400 (EDT) Received: from outgoing.mit.edu (outgoing-auth-1.mit.edu [18.9.28.11]) by mailhub-auth-3.mit.edu (8.13.8/8.9.2) with ESMTP id t99Kq9eG008621; Fri, 9 Oct 2015 16:52:09 -0400 Received: from multics.mit.edu (system-low-sipb.mit.edu [18.187.2.37]) (authenticated bits=56) (User authenticated as kaduk@ATHENA.MIT.EDU) by outgoing.mit.edu (8.13.8/8.12.4) with ESMTP id t99Kq6We030323 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NOT); Fri, 9 Oct 2015 16:52:08 -0400 Received: (from kaduk@localhost) by multics.mit.edu (8.12.9.20060308) id t99Kq5mW023676; Fri, 9 Oct 2015 16:52:05 -0400 (EDT) Date: Fri, 9 Oct 2015 16:52:05 -0400 (EDT) From: Benjamin Kaduk To: iesg@ietf.org, secdir@ietf.org, draft-ietf-ospf-node-admin-tag.all@ietf.org Message-ID: User-Agent: Alpine 1.10 (GSO 962 2008-03-14) MIME-Version: 1.0 Content-Type: MULTIPART/MIXED; BOUNDARY="-559023410-449483132-1444423925=:26829" X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFprJKsWRmVeSWpSXmKPExsUixCmqrftLQyLMYOVtVovfr7awW8z4M5HZ 4sPChywOzB5LlvxkCmCM4rJJSc3JLEst0rdL4MrY3/SVueDAZ8aKtrPlDYxv7jN2MXJwSAiY SLS/8+9i5AQyxSQu3FvP1sXIxSEksJhJ4vqS7UwQzgZGiT/tp1khnINMEl+n72cHaRESqJdY ufcwE4jNIqAl0XTrFFicTUBFYuabjWwgtohAhMTCA+vA4sIC1hI/lhwGs3kFHCU6391kBrFF BXQkVu+fwgIRF5Q4OfMJC8h1zAIBEuunqExg5JuFJDMLIQMSZgZavHz6NqhwtMSp8xIQYUWJ zQd2s0LYjhI32juZIGxRiRU35jBClIdI7Dksv4CRYxWjbEpulW5uYmZOcWqybnFyYl5eapGu qV5uZoleakrpJkZQqLO7KO1g/HlQ6RCjAAejEg/vhBjxMCHWxLLiytxDjJIcTEqivLcVJMKE +JLyUyozEosz4otKc1KLDzGqAK16tGH1BUYplrz8vFQlEd6Y50CtvCmJlVWpRfkwZdIcLEri vJt+8IUICaQnlqRmp6YWpBbBZGU4OJQkeI2AsS4kWJSanlqRlplTgpBm4uA8xCjBwQM0nA2k hre4IDG3ODMdIn+KUVFKnPe6OlBCACSRUZoH1wtOUbuZVF8xigO9Jcx7CqSKB5je4LpfAQ1m Ahqcwy8GMrgkESEl1cA4f5Zd6GHhWjP9J0LB7VWt9dwTFI5/MPC54yZpcM9vdsUjrZ17Cq3D K8KYhL7/PHRI98rWPwenvdz6+USzt2AG75tXqmdWy9qLNXKpFS/men72ndfKTkvDcsmWNvEl q4+E1vAUuOhO2NA7e9q7b+6LuRhv/Cv8te7AxXsZSk9OVez/+nANe4yZEktxRqKhFnNRcSIA JtspGiwDAAA= Archived-At: Subject: [secdir] secdir review of draft-ietf-ospf-node-admin-tag-05 X-BeenThere: secdir@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: Security Area Directorate List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 09 Oct 2015 20:52:16 -0000 This message is in MIME format. The first part should be readable text, while the remaining parts are likely unreadable without MIME-aware tools. ---559023410-449483132-1444423925=:26829 Content-Type: TEXT/PLAIN; charset=US-ASCII I have reviewed this document as part of the security directorate's ongoing effort to review all IETF documents being processed by the IESG. These comments were written primarily for the benefit of the security area directors. Document editors and WG chairs should treat these comments just like any other last call comments. I will preface these comments with a note that my routing background is quite weak, and I needed to read RFC 2328 and RFC 4970 to have enough context to be able to say much useful about what's going on here; I may still be suffering from some misconceptions. On the whole, this document leaves me feeling unsatisfied; it spends maybe three pages talking about the actual new protocol extension and then gives four pages of example usage, all the while claiming that the actual tag values are only meaningful within a single administrative domain/network, are for generic use, and do not require an IANA registry. That is, it is trying to walk a middle line between "this document allocates a value in the OSPF TLVs registry for site-local use, use it as you will" and "this document specifies a complete protocol extension for tagging OSPF nodes for traffic engineering, LFA, and other purposes". That is a hard middle line to follow, and I am not sure that this document does so successfully. I will not try to reopen the question of whether it would be better to take one of the non-middle paths, and continue on the assumption that this document will take the middle path. I think there are a few things that are missing before this document should be published, and that it might be worth considering a more drastic restructuring as well. It would probably be good to include some text with the reasoning behind the choice of the "middle line" -- the current text attempting to enforce it, "new OSPF extensions MUST NOT require use of per-node administrative tags or define well-known tag values", seems unenforcable, as a future RFC updating this one could just remove that restriction. It looks like there's now an -06, but the changes from the -05 are not significant. The security considerations in the -05 correctly note what are essentially privacy considerations regarding the contents of the admin tags. However, it seems like there are also potential security considerations on the actual operation of the network that are not discussed here, nor in RFC 2328 (OSPFv2) or RFC 5340 (OSPFv3). RFC 5340's security considerations explicitly disclaims protections against compromised, malfunctioning, or misconfigured routers, deferring to RFC 4593, "Generic Threats to Routing Protocols". I believe that the security considerations of this document should address, either directly or indirectly, protections against compromised, malfunctioning, or misconfigured routers, and additionally protection against malicious actors with access to the layer-3 network (and maybe lower layers as well). That probably means mentioning RFC 4593 directly, or maybe just pointing out that RFC 5340 does so. There are still additional considerations introduced by this document, though; unfortunately, because the bulk of the interpretation of the admin tags is left to the site administrator, it is hard to give a comprehensive security analysis, but the examples and the protocol description itself do give some areas for consideration. The RI LSAs carrying administrative tags can be at link-, area-, or AS-level scope; an administrator assigning tag values and associated policies should consider what would happen if a given tag was advertised at a different scope than intended. Compliant implementations MUST NOT generate the same tag at different scopes, but a receiver would need to take some action if it happened, whether due to network glitch or malicious action -- what should they do? Another potential issue lies in the "stickiness" of the admin tags -- the text "the node administrative tags associated with a node for the purpose of any computation or processing SHOULD be a superset of node administrative tags from all the TLVs in all instances of the RI LSA originated by that node" seems to mean that once a tag is set, it cannot (easily) be unset. Would force-expiring an LSA be enough to reset the tag, or something else? How disruptive would that be? It would be helpful to see some discussion of how a tag would be removed. That is particularly easy for an attacker when the null OSPF authentication mechanism is in use (how common is that? I saw some websites indicating it was the default behavior, at least sometimes). I do not see a need to turn this document into "security considerations for OSPF authentication", but maybe it is worth mentioning some things: the md5 scheme seems pretty week at this point (though probably not trivially broken), the hmac-sha scheme of RFC 5709 is only from 2009, and RFC 7474 (only six months old) points out cases where both are susceptible to replay attacks. Just looking at the security considerations of this document and the core OSPF v2/v3 specs does not convey this to the reader, so I would like to see at least a pointer to such considerations. (The stance of RFC 2328 that "all OSPF protocol exchanges are authenticated" seems particularly disingenous given the presence of the null authentication scheme.) There is also the possibility that an attacker could block delivery of an LSA, causing a tag that should be set to not be seen. This seems unlikely for wired point-to-point links, but is more plausible in other environments, such as radio links. I think I can imagine scenarios where this would cause drastic damage to the routing topology. The parenthetical in section 3.2 wherein routers might advertise a per-node aministrative tag "without knowing (or even explicitly supporting) functionality implied by the tag" seems potentially dangerous, since it sounds like the routers in question are lying about their capabilities. Would the document suffer harm if the parenthetical was removed? One reason I am unsatisfied by making the interpretation of the tag values specific to an administrative domain is that a misconfigured border router might erroneously use tag values from one domain on the other side of the border. Perhaps the other damage from a router misconfigured in such a fashion would dwarf the additional damage from the misinterpreted tags and so my concern is invalid; I really can't say. I also have some editorial comments unrelated to the secdir review: Section 3.2 reads rather like a jumbled list and could benefit from some additional structure. Similarly, I would find it helpful if there was some text motivating the "middle patch" mentioned above, towards the beginning of the technical (non-example) portion of the document. For a construction as weakly structured as these administrative tags, preventing any internal structure or dependencies between tags (as this document attempts to do) seems correct. However, this sentiment seems to be expressed differently in several different places in the document, and it would be good to consolidate and coordinate them. In particular, paragraph 3 of section 3.2 explicitly says that tag order has no meaning, but paragraph 4 has the weaker "SHOULD be considered an unordered list". (The word "set" might be appropriate here.) Paragraph 7 of section 3.2 seems to be trying to say that the administrative tags must indicate inherent or administratively configured properties of a node and must not be used to convey attributes of the routing topology. (The word "tie" seems insufficiently clear.) Many (but not all) of the acronyms/abbreviations should be expanded at first use -- the ones marked with a '*' at https://www.rfc-editor.org/materials/abbrev.expansion.txt are assumed to be common knowledge and do not need expansion. Other things, like traffic engineering, router information, link statement advertisement, autonomous system, etc., should be written out in full at their first use, with the abbreviated version in parentheses afterwards. The first paragraph of section 1 contains a list of potential applications; please use some XML markup to preserve the list structure in the rendered document. Plase give an informative reference for Loop Free Alternate backup selection at its first appearance. The divider between the type and length fields in Figure 1 is placed one bit to the left of the correct division for two 16-bit fields. (In many cases the position indicators above the diagram are offset by one space so they land over the '-'s instead of the '+'s, but there is some argument for putting them in their current location, as well.) In the seventh paragraph of section 3.2, I think it would be fine to just remove the "but not limited to" clause, which is not quite correct grammar and is not really needed. The last paragraph of section 3.2 could probably be written more clearly. In particular, "in any instance of the RI-LSA" is not entirely clear to me (but then again, I don't really understand how LSAs normally work). Is it enough to just say that implementations MUST detect when the administrative tags associated with a given node change, and update their state accordingly? In section 4.5, I do not see that the constraint "Traffic from A nodes to I nodes must not go through R and T nodes" can be satisfied for the leftmost pair of A nodes. I am also attaching a diff to the xml sources with some grammar fixes not worth enumerating explicitly. -Ben Kaduk ---559023410-449483132-1444423925=:26829 Content-Type: TEXT/PLAIN; charset=US-ASCII; name=draft-ietf-ospf-node-admin-tag-06.xml.diff Content-Transfer-Encoding: BASE64 Content-ID: Content-Description: Content-Disposition: attachment; filename=draft-ietf-ospf-node-admin-tag-06.xml.diff LS0tIGRyYWZ0LWlldGYtb3NwZi1ub2RlLWFkbWluLXRhZy0wNi54bWwub3Jp ZwkyMDE1LTEwLTA5IDE1OjE0OjQzLjAwMDAwMDAwMCAtMDUwMA0KKysrIGRy YWZ0LWlldGYtb3NwZi1ub2RlLWFkbWluLXRhZy0wNi54bWwJMjAxNS0xMC0w OSAxNTo0NTowMi4wMDAwMDAwMDAgLTA1MDANCkBAIC05MywxNyArOTMsMTcg QEANCiA8a2V5d29yZD50cmFmZmljIGVuZ2luZWVyaW5nPC9rZXl3b3JkPg0N CiA8YWJzdHJhY3Q+DQ0KIDx0PiANDQotVGhpcyBkb2N1bWVudCBkZXNjcmli ZXMgYW4gZXh0ZW5zaW9uIHRvIE9TUEYgcHJvdG9jb2wgdG8NDQorVGhpcyBk b2N1bWVudCBkZXNjcmliZXMgYW4gZXh0ZW5zaW9uIHRvIHRoZSBPU1BGIHBy b3RvY29sIHRvDQ0KIGFkZCBhbiBvcHRpb25hbCBvcGVyYXRpb25hbCBjYXBh YmlsaXR5LCB0aGF0IGFsbG93cyB0YWdnaW5nIGFuZCBncm91cGluZyBvZg0N Ci10aGUgbm9kZXMgaW4gYW4gT1NQRiBkb21haW4uIFRoaXMgYWxsb3dzIHNp bXBsaWZpY2F0aW9uLCBlYXNlIG9mIG1hbmFnZW1lbnQgYW5kDQ0KK3RoZSBu b2RlcyBpbiBhbiBPU1BGIGRvbWFpbi4gVGhpcyBhbGxvd3Mgc2ltcGxpZmlj YXRpb24sIGVhc2Ugb2YgbWFuYWdlbWVudCwgYW5kDQ0KIGNvbnRyb2wgb3Zl ciByb3V0ZSBhbmQgcGF0aCBzZWxlY3Rpb24gYmFzZWQgb24gY29uZmlndXJl ZCBwb2xpY2llcy4NDQogDQ0KLVRoaXMgZG9jdW1lbnQgZGVzY3JpYmVzIGFu IGV4dGVuc2lvbiB0byBPU1BGIHByb3RvY29sIHRvIGFkdmVydGlzZSBwZXIt bm9kZSANDQorVGhpcyBkb2N1bWVudCBkZXNjcmliZXMgYW4gZXh0ZW5zaW9u IHRvIHRoZSBPU1BGIHByb3RvY29sIHRvIGFkdmVydGlzZSBwZXItbm9kZSAN DQogYWRtaW5pc3RyYXRpdmUgdGFncy4gVGhlIG5vZGUtdGFncyBjYW4gYmUg dXNlZCB0byBleHByZXNzIGFuZCBhcHBseSBsb2NhbGx5LWRlZmluZWQNDQog bmV0d29yayBwb2xpY2llcyB3aGljaCBpcyBhIHZlcnkgdXNlZnVsIG9wZXJh dGlvbmFsIGNhcGFiaWxpdHkuIE5vZGUgdGFncyBtYXkgYmUgdXNlZCBlaXRo ZXIgYnkgT1NQRiANDQogaXRzZWxmIG9yIGJ5IG90aGVyIGFwcGxpY2F0aW9u cyBjb25zdW1pbmcgaW5mb3JtYXRpb24gcHJvcGFnYXRlZCB2aWEgT1NQRi4g PC90Pg0NCiA8dD5UaGlzIGRvY3VtZW50IGRlc2NyaWJlcyB0aGUgcHJvdG9j b2wgZXh0ZW5zaW9ucyB0byBkaXNzZW1pbmF0ZQ0NCi1wZXItbm9kZSBhZG1p bmlzdHJhdGl2ZS10YWdzIHRvIHRoZSBPU1BGdjIgYW5kIE9TUEZ2MyBwcm90 b2NvbC4gSXQgcHJvdmlkZXMgZXhhbXBsZQ0NCitwZXItbm9kZSBhZG1pbmlz dHJhdGl2ZSB0YWdzIHRvIHRoZSBPU1BGdjIgYW5kIE9TUEZ2MyBwcm90b2Nv bHMuIEl0IHByb3ZpZGVzIGV4YW1wbGUNDQogIHVzZSBjYXNlcyBvZiBhZG1p bmlzdHJhdGl2ZSBub2RlIHRhZ3MuPC90Pg0NCiA8L2Fic3RyYWN0Pg0NCiA8 bm90ZSB0aXRsZT0iUmVxdWlyZW1lbnRzIExhbmd1YWdlIj4NDQpAQCAtMTE4 LDcgKzExOCw3IEBADQogPHQ+IA0NCiBJdCBpcyB1c2VmdWwgdG8gYXNzaWdu IGEgcGVyLW5vZGUgYWRtaW5pc3RyYXRpdmUgdGFnIHRvIGEgcm91dGVyIGlu IHRoZSBPU1BGIGRvbWFpbiBhbmQgdXNlDQ0KIGl0IGFzIGFuIGF0dHJpYnV0 ZSBhc3NvY2lhdGVkIHdpdGggdGhlIG5vZGUuIFRoZSBwZXItbm9kZSBhZG1p bmlzdHJhdGl2ZSB0YWcgY2FuIGJlIHVzZWQgaW4NDQotdmFyaWV0eSBvZiBh cHBsaWNhdGlvbnMsIGZvciBleDoNDQordmFyaWV0eSBvZiBhcHBsaWNhdGlv bnMsIGZvciBleGFtcGxlOg0NCiAgIC0gIFRyYWZmaWMtZW5naW5lZXJpbmcg YXBwbGljYXRpb25zIHRvIHByb3ZpZGUgZGlmZmVyZW50IHBhdGgtc2VsZWN0 aW9uIGNyaXRlcmlhLCANDQogICAtICBQcmVmZXIgb3IgcHJ1bmUgY2VydGFp biBwYXRocyBpbiBMb29wIEZyZWUgQWx0ZXJuYXRlIChMRkEpIGJhY2t1cCBz ZWxlY3Rpb24gdmlhIGxvY2FsIHBvbGljaWVzLjwvdD4NDQogDQ0KQEAgLTEz NiwxMiArMTM2LDEyIEBADQogdXNlZCB0byBpZGVudGlmeSBhIGdyb3VwIG9m IG5vZGVzIGluIHRoZSBPU1BGIGRvbWFpbi4NDQogPHZzcGFjZSBibGFua0xp bmVzPSIxIiAvPg0NCiBUaGUgbmV3IFRMViBkZWZpbmVkIHdpbGwgYmUgY2Fy cmllZCB3aXRoaW4gYW4gUkkgTFNBIGZvciBPU1BGVjIgYW5kDQ0KLU9TUEZW My4gUm91dGVyIGluZm9ybWF0aW9uIExTQSA8eHJlZiB0YXJnZXQ9IlJGQzQ5 NzAiLz4gY2FuIGhhdmUgbGluaywgYXJlYSBvciBBUyBsZXZlbA0NCi1mbG9v ZGluZyBzY29wZS4gQ2hvb3NpbmcgdGhlIGZsb29kaW5nIHNjb3BlIHRvIGZs b29kIHRoZSBncm91cA0NCi10YWdzIGFyZSBkZWZpbmVkIGJ5IHRoZSBwb2xp Y2llcyBhbmQgaXMgYSBsb2NhbCBtYXR0ZXIuDQ0KK09TUEZWMy4gUm91dGVy IGluZm9ybWF0aW9uIExTQSA8eHJlZiB0YXJnZXQ9IlJGQzQ5NzAiLz4gY2Fu IGhhdmUgbGluay0sIGFyZWEtIG9yIEFTLWxldmVsDQ0KK2Zsb29kaW5nIHNj b3BlLiBUaGUgY2hvaWNlIG9mIHdoYXQgc2NvcGUgYXQgd2hpY2ggdG8gZmxv b2QgdGhlIGdyb3VwIHRhZ3MgaXMNDQorYSBtYXR0ZXIgb2YgbG9jYWwgcG9s aWN5Lg0NCiA8dnNwYWNlIGJsYW5rTGluZXM9IjEiIC8+DQ0KIFRoZSBUTFYg c3BlY2lmaWVzIG9uZSBvciBtb3JlIGFkbWluaXN0cmF0aXZlIHRhZyB2YWx1 ZXMuIEFuIE9TUEYNDQotbm9kZSBhZHZlcnRpc2VzIHRoZSBzZXQgb2YgZ3Jv dXBzIGl0IGlzIHBhcnQgb2YgaW4gdGhlIE9TUEYgZG9tYWluLg0NCitub2Rl IGFkdmVydGlzZXMgdGhlIHNldCBvZiBncm91cHMgaXQgaXMgcGFydCBvZiBp biB0aGUgT1NQRiBkb21haW4NDQogKGZvciBleGFtcGxlLCBhbGwgUEUtbm9k ZXMgYXJlIGNvbmZpZ3VyZWQgd2l0aCBjZXJ0YWluIHRhZyB2YWx1ZSwNDQog YWxsIFAtbm9kZXMgYXJlIGNvbmZpZ3VyZWQgd2l0aCBhIGRpZmZlcmVudCB0 YWcgdmFsdWUgaW4gdGhlIGRvbWFpbikuDQ0KIE11bHRpcGxlIFRMVnMgTUFZ IGJlIGFkZGVkIGluIHNhbWUgUkktTFNBIG9yDQ0KQEAgLTE1MSwxMiArMTUx LDEyIEBADQogPC9zZWN0aW9uPg0NCiA8c2VjdGlvbiB0aXRsZT0nT1NQRiBw ZXItbm9kZSBhZG1pbmlzdHJhdGl2ZSB0YWcgVExWJz4NDQogPHNlY3Rpb24g dGl0bGU9J1RMViBmb3JtYXQnPg0NCi08dD4gPHhyZWYgdGFyZ2V0PSJSRkM0 OTcwIi8+LCBkZWZpbmVzIFJvdXRlciBJbmZvcm1hdGlvbiAoUkkpIExTQSB3 aGljaCBtYXkgYmUgdXNlZCB0byANDQotYWR2ZXJ0aXNlIHByb3BlcnRpZXMg b2YgdGhlIG9yaWdpbmF0aW5nIHJvdXRlci4gUGF5bG9hZCBvZiB0aGUgUkkg TFNBIGNvbnNpc3RzIG9mIG9uZSBvcg0NCis8dD4gPHhyZWYgdGFyZ2V0PSJS RkM0OTcwIi8+LCBkZWZpbmVzIHRoZSBSb3V0ZXIgSW5mb3JtYXRpb24gKFJJ KSBMU0Egd2hpY2ggbWF5IGJlIHVzZWQgdG8gDQ0KK2FkdmVydGlzZSBwcm9w ZXJ0aWVzIG9mIHRoZSBvcmlnaW5hdGluZyByb3V0ZXIuIFRoZSBwYXlsb2Fk IG9mIHRoZSBSSSBMU0EgY29uc2lzdHMgb2Ygb25lIG9yDQ0KIG1vcmUgbmVz dGVkIFR5cGUvTGVuZ3RoL1ZhbHVlIChUTFYpIHRyaXBsZXRzLg0NCiANDQog Tm9kZSBhZG1pbmlzdHJhdGl2ZSB0YWdzIGFyZSBhZHZlcnRpc2VkIGluIHRo ZSBOb2RlIEFkbWluaXN0cmF0aXZlIFRhZyBUTFYuDQ0KLVRoZSBmb3JtYXQg b2YgTm9kZSBBZG1pbmlzdHJhdGl2ZSBUYWcgVExWIGlzOg0NCitUaGUgZm9y bWF0IG9mIHRoZSBOb2RlIEFkbWluaXN0cmF0aXZlIFRhZyBUTFYgaXM6DQ0K IA0NCiA8dnNwYWNlIGJsYW5rTGluZXM9IjIiIC8+DQ0KIDxmaWd1cmUgYW5j aG9yPSJPU1BGLUFkbWluLXRhZy1UTFYiIHRpdGxlPSJPU1BGIHBlci1ub2Rl IEFkbWluaXN0cmF0aXZlIFRhZyBUTFYiPg0NCkBAIC0xODQsMTcgKzE4NCwx NyBAQA0KIHBvcnRpb24gaW4gb2N0ZXRzIGFuZCB3aWxsIGJlIGEgbXVsdGlw bGUgb2YgNCBvY3RldHMNDQogZGVwZW5kZW50IG9uIHRoZSBudW1iZXIgb2Yg dGFncyBhZHZlcnRpc2VkLg0NCiA8dnNwYWNlIGJsYW5rTGluZXM9IjEiIC8+ DQ0KLVZhbHVlOiBBIHNlcXVlbmNlIG9mIG11bHRpcGxlIDQgb2N0ZXRzIGRl ZmluaW5nIHRoZQ0NCitWYWx1ZTogQSBzZXF1ZW5jZSBvZiBtdWx0aXBsZSBm b3VyLW9jdGV0IHZhbHVlcyBkZWZpbmluZyB0aGUNDQogYWRtaW5pc3RyYXRp dmUgdGFncy4gIEF0IGxlYXN0IG9uZSB0YWcgTVVTVCBiZSBjYXJyaWVkIGlm DQ0KIHRoaXMgVExWIGlzIGluY2x1ZGVkIGluIHRoZSBSSS1MU0EuDQ0KIDwv dD4NDQogPC9zZWN0aW9uPg0NCiA8c2VjdGlvbiB0aXRsZT0nRWxlbWVudHMg b2YgcHJvY2VkdXJlJz4NDQotPHQ+TWVhbmluZyBvZiB0aGUgTm9kZSBhZG1p bmlzdHJhdGl2ZSB0YWdzIGlzIGdlbmVyYWxseQ0NCi1vcGFxdWUgdG8gT1NQ Ri4gUm91dGVyIGFkdmVydGlzaW5nIHRoZSBwZXItbm9kZQ0NCis8dD5UaGUg bWVhbmluZyBvZiB0aGUgTm9kZSBhZG1pbmlzdHJhdGl2ZSB0YWdzIGlzIGdl bmVyYWxseQ0NCitvcGFxdWUgdG8gT1NQRi4gUm91dGVycyBhZHZlcnRpc2lu ZyB0aGUgcGVyLW5vZGUNDQogYWRtaW5pc3RyYXRpdmUgdGFnIChvciB0YWdz KSBtYXkgYmUgY29uZmlndXJlZCB0byBkbyBzbw0NCiB3aXRob3V0IGtub3dp bmcgKG9yIGV2ZW4gZXhwbGljaXRseSBzdXBwb3J0aW5nKQ0NCi1mdW5jdGlv bmFsaXR5IGltcGxpZWQgYnkgdGhlIHRhZy48L3Q+DQ0KK3RoZSBmdW5jdGlv bmFsaXR5IGltcGxpZWQgYnkgdGhlIHRhZy48L3Q+DQ0KIDx0PkludGVycHJl dGF0aW9uIG9mIHRhZyB2YWx1ZXMgaXMgc3BlY2lmaWMgdG8gdGhlIGFkbWlu aXN0cmF0aXZlIGRvbWFpbiBvZiBhIHBhcnRpY3VsYXIgbmV0d29yayBvcGVy YXRvci4NDQogVGhlIG1lYW5pbmcgb2YgYSBwZXItbm9kZSBhZG1pbmlzdHJh dGl2ZSB0YWcgaXMgZGVmaW5lZCBieSB0aGUgbmV0d29yayBsb2NhbCBwb2xp Y3kNDQogYW5kIGlzIGNvbnRyb2xsZWQgdmlhIHRoZSBjb25maWd1cmF0aW9u LiBJZiBhIHJlY2VpdmluZyBub2RlIGRvZXMgbm90DQ0KQEAgLTIyMiwxNyAr MjIyLDE3IEBADQogUm91dGVyIChBQlIpIG1heSBhZHZlcnRpc2UgdGhlIHNh bWUgdGFnIGluIGFyZWEtc2NvcGUgUkkNDQogTFNBcyBpbiBtdWx0aXBsZSBh cmVhcyBjb25uZWN0ZWQgdG8gdGhlIEFCUi48L3Q+DQ0KIDx0PlRoZSBwZXIt bm9kZSBhZG1pbmlzdHJhdGl2ZSB0YWdzIGFyZSBub3QgbWVhbnQgdG8gYmUN DQotZXh0ZW5kZWQgYnkgdGhlIGZ1dHVyZSBPU1BGIHN0YW5kYXJkcy4gVGhl IG5ldyBPU1BGDQ0KK2V4dGVuZGVkIGJ5IGZ1dHVyZSBPU1BGIHN0YW5kYXJk cy4gTmV3IE9TUEYNDQogZXh0ZW5zaW9ucyBNVVNUIE5PVCByZXF1aXJlIHVz ZSBvZiBwZXItbm9kZSBhZG1pbmlzdHJhdGl2ZQ0NCiB0YWdzIG9yIGRlZmlu ZSB3ZWxsLWtub3duIHRhZyB2YWx1ZXMuIE5vZGUgYWRtaW5pc3RyYXRpdmUg dGFncw0NCiBhcmUgZm9yIGdlbmVyaWMgdXNlIGFuZCBkbyBub3QgcmVxdWly ZSBJQU5BIHJlZ2lzdHJ5Lg0NCi1UaGUgZnV0dXJlIE9TUEYgZXh0ZW5zaW9u cyByZXF1aXJpbmcgd2VsbCBrbm93biB2YWx1ZXMgTUFZDQ0KK0Z1dHVyZSBP U1BGIGV4dGVuc2lvbnMgcmVxdWlyaW5nIHdlbGwga25vd24gdmFsdWVzIE1B WQ0NCiBkZWZpbmUgdGhlaXIgb3duIGRhdGEgc2lnbmFsbGluZyB0YWlsb3Jl ZCB0byB0aGUgbmVlZHMgb2YgdGhlDQ0KLWZlYXR1cmUgb3IgTUFZIHVzZSBj YXBhYmlsaXR5IFRMViBhcyBkZWZpbmVkIGluDQ0KK2ZlYXR1cmUgb3IgTUFZ IHVzZSB0aGUgY2FwYWJpbGl0eSBUTFYgYXMgZGVmaW5lZCBpbg0NCiA8eHJl ZiB0YXJnZXQ9IlJGQzQ5NzAiLz4uIDwvdD4NDQogPHQ+QmVpbmcgcGFydCBv ZiB0aGUgUkkgTFNBLCB0aGUgcGVyLW5vZGUgYWRtaW5pc3RyYXRpdmUgdGFn DQ0KIFRMViBtdXN0IGJlIHJlYXNvbmFibHkgc21hbGwgYW5kIHN0YWJsZS4g SW4gcGFydGljdWxhciwNDQotYnV0IG5vdCBsaW1pdGVkIHRvLCBpbXBsZW1l bnRhdGlvbnMgc3VwcG9ydGluZyB0aGUgcGVyLW5vZGUNDQorYnV0IG5vdCBs aW1pdGVkIHRvLCBpbXBsZW1lbnRhdGlvbnMgc3VwcG9ydGluZyBwZXItbm9k ZQ0NCiBhZG1pbmlzdHJhdGl2ZSB0YWdzIE1VU1QgTk9UIHRpZSBhZHZlcnRp c2VkIHRhZ3MgdG8NDQogY2hhbmdlcyBpbiB0aGUgbmV0d29yayB0b3BvbG9n eSAoYm90aCB3aXRoaW4gYW5kIG91dHNpZGUNDQogdGhlIE9TUEYgZG9tYWlu KSBvciByZWFjaGFiaWxpdHkgb2Ygcm91dGVzLjwvdD4NDQpAQCAtMjQwLDIw ICsyNDAsMjAgQEANCiA8dD4gTXVsdGlwbGUgbm9kZSBhZG1pbmlzdHJhdGl2 ZSB0YWcgVExWcyBNQVkgYXBwZWFyIGluIGFuIFJJIExTQSBvcg0NCiBtdWx0 aXBsZSBub2RlIGFkbWluaXN0cmF0aXZlIHRhZyBUTFZzIE1BWSBiZSBjb250 YWluZWQgaW4gZGlmZmVyZW50IGluc3RhbmNlcyBvZiB0aGUgDQ0KIFJJIExT QS4gVGhlIG5vZGUgYWRtaW5pc3RyYXRpdmUgdGFncyBhc3NvY2lhdGVkIHdp dGggYSBub2RlIGZvciB0aGUgcHVycG9zZSBvZiBhbnkgY29tcHV0YXRpb24g b3IgcHJvY2Vzc2luZyBTSE9VTEQgYmUgYSBzdXBlcnNldCBvZiANDQotbm9k ZSBhZG1pbmlzdHJhdGl2ZSB0YWdzIGZyb20gYWxsIHRoZSBUTFZzIGluIGFs bCBpbnN0YW5jZXMgb2YgdGhlIFJJIExTQSBvcmlnaW5hdGVkIGJ5IHRoYXQg bm9kZS48L3Q+DQ0KK25vZGUgYWRtaW5pc3RyYXRpdmUgdGFncyBmcm9tIGFs bCB0aGUgVExWcyBpbiBhbGwgaW5zdGFuY2VzIG9mIFJJIExTQXMgb3JpZ2lu YXRlZCBieSB0aGF0IG5vZGUuPC90Pg0NCiA8dD5XaGVuIHRoZXJlIGlzIGEg Y2hhbmdlIGluIHRoZSBub2RlIGFkbWluaXN0cmF0aXZlIHRhZyBUTFYgb3Ig cmVtb3ZhbC9hZGRpdGlvbiBvZiBhDQ0KLVRMViBpbiBhbnkgaW5zdGFuY2Ug b2YgdGhlIFJJLUxTQSwgaW1wbGVtZW50YXRpb25zIE1VU1QgdGFrZSBhcHBy b3ByaWF0ZSBtZWFzdXJlcyB0byB1cGRhdGUgaXRzIHN0YXRlIGFjY29yZGlu ZyB0byB0aGUNDQotY2hhbmdlZCBzZXQgb2YgdGFncy4gRXhhY3QgYWN0aW9u cyBkZXBlbmQgb24gZmVhdHVyZXMgd29ya2luZyB3aXRoIGFkbWluaXN0cmF0 aXZlIHRhZ3MgYW5kIGlzIG91dHNpZGUgb2Ygc2NvcGUgb2YgdGhpcw0NCitU TFYgaW4gYW55IGluc3RhbmNlIG9mIGFuIFJJLUxTQSwgaW1wbGVtZW50YXRp b25zIE1VU1QgdGFrZSBhcHByb3ByaWF0ZSBtZWFzdXJlcyB0byB1cGRhdGUg dGhlaXIgc3RhdGUgYWNjb3JkaW5nIHRvIHRoZQ0NCitjaGFuZ2VkIHNldCBv ZiB0YWdzLiBUaGUgZXhhY3QgYWN0aW9ucyBuZWVkZWQgZGVwZW5kIG9uIGZl YXR1cmVzIHdvcmtpbmcgd2l0aCBhZG1pbmlzdHJhdGl2ZSB0YWdzIGFuZCBp cyBvdXRzaWRlIG9mIHNjb3BlIG9mIHRoaXMNDQogc3BlY2lmaWNhdGlvbi4N DQogPC90Pg0NCiA8L3NlY3Rpb24+DQ0KIDwvc2VjdGlvbj4NDQogPHNlY3Rp b24gdGl0bGU9J0FwcGxpY2F0aW9ucyc+DQ0KIDx0PlRoaXMgc2VjdGlvbiBs aXN0cyBzZXZlcmFsIGV4YW1wbGVzIG9mIGhvdyBpbXBsZW1lbnRhdGlvbnMN DQotbWlnaHQgdXNlIHRoZSBOb2RlIGFkbWluaXN0cmF0aXZlIHRhZ3MuIFRo ZXNlIGV4YW1wbGVzIGFyZQ0NCi1naXZlbiBvbmx5IHRvIGRlbW9uc3RyYXRl IGdlbmVyaWMgdXNlZnVsbmVzcyBvZiB0aGUgcm91dGVyDQ0KLXRhZ2dpbmcg bWVjaGFuaXNtLiBJbXBsZW1lbnRhdGlvbiBzdXBwb3J0aW5nIHRoaXMNDQot c3BlY2lmaWNhdGlvbiBpcyBub3QgcmVxdWlyZWQgdG8gaW1wbGVtZW50IGFu eSBvZiB0aGUgdXNlDQ0KK21pZ2h0IHVzZSB0aGUgcGVyLW5vZGUgYWRtaW5p c3RyYXRpdmUgdGFncy4gVGhlc2UgZXhhbXBsZXMgYXJlDQ0KK2dpdmVuIG9u bHkgdG8gZGVtb25zdHJhdGUgdGhlIGdlbmVyaWMgdXNlZnVsbmVzcyBvZiB0 aGUgcm91dGVyDQ0KK3RhZ2dpbmcgbWVjaGFuaXNtLiBJbXBsZW1lbnRhdGlv bnMgc3VwcG9ydGluZyB0aGlzDQ0KK3NwZWNpZmljYXRpb24gYXJlIG5vdCBy ZXF1aXJlZCB0byBpbXBsZW1lbnQgYW55IG9mIHRoZXNlIHVzZQ0NCiBjYXNl cy4gSXQgaXMgYWxzbyB3b3J0aCBub3RpbmcgdGhhdCBpbiBzb21lIGRlc2Ny aWJlZCB1c2UNDQogY2FzZXMgcm91dGVycyBjb25maWd1cmVkIHRvIGFkdmVy dGlzZSB0YWdzIGhlbHAgb3RoZXIgcm91dGVycw0NCiBpbiB0aGVpciBjYWxj dWxhdGlvbnMgYnV0IGRvIG5vdCB0aGVtc2VsdmVzIGltcGxlbWVudCB0aGUN DQpAQCAtMjYxLDEyICsyNjEsMTIgQEANCiA8c2VjdGlvbiB0aXRsZT0nU2Vy dmljZSBhdXRvLWRpc2NvdmVyeSc+DQ0KIDx0Pg0NCiA8dnNwYWNlIGJsYW5r TGluZXM9IjEiLz4NDQotUm91dGVyIHRhZ2dpbmcgbWF5IGJlIHVzZWQgdG8g YXV0b21hdGljYWxseSBkaXNjb3Zlcg0NCitSb3V0ZXIgdGFnZ2luZyBtYXkg YmUgdXNlZCB0byBhdXRvbWF0aWNhbGx5IGRpc2NvdmVyIGENDQogZ3JvdXAg b2Ygcm91dGVycyBzaGFyaW5nIGEgcGFydGljdWxhciBzZXJ2aWNlLg0NCiA8 dnNwYWNlIGJsYW5rTGluZXM9IjEiLz4NDQotRm9yIGV4YW1wbGUsIHNlcnZp Y2UgcHJvdmlkZXIgbWlnaHQgZGVzaXJlIHRvIGVzdGFibGlzaA0NCi1mdWxs IG1lc2ggb2YgTVBMUyBURSB0dW5uZWxzIGJldHdlZW4gYWxsIFBFIHJvdXRl cnMgaW4NDQotdGhlIGFyZWEgb2YgTVBMUyBWUE4gbmV0d29yay4gTWFya2lu ZyBhbGwgUEUgcm91dGVycyB3aXRoDQ0KK0ZvciBleGFtcGxlLCBhIHNlcnZp Y2UgcHJvdmlkZXIgbWlnaHQgZGVzaXJlIHRvIGVzdGFibGlzaA0NCithIGZ1 bGwgbWVzaCBvZiBNUExTIFRFIHR1bm5lbHMgYmV0d2VlbiBhbGwgUEUgcm91 dGVycyBpbg0NCit0aGUgYXJlYSBvZiB0aGUgTVBMUyBWUE4gbmV0d29yay4g TWFya2luZyBhbGwgUEUgcm91dGVycyB3aXRoDQ0KIGEgdGFnIGFuZCBjb25m aWd1cmluZyBkZXZpY2VzIHdpdGggYSBwb2xpY3kgdG8gY3JlYXRlDQ0KIE1Q TFMgVEUgdHVubmVscyB0byBhbGwgb3RoZXIgZGV2aWNlcyBhZHZlcnRpc2lu ZyB0aGlzIHRhZw0NCiB3aWxsIGF1dG9tYXRlIG1haW50ZW5hbmNlIG9mIHRo ZSBmdWxsIG1lc2guIFdoZW4gbmV3IFBFDQ0KQEAgLTI4NiwxMyArMjg2LDEz IEBADQogY29uY2VybnMuDQ0KIDx2c3BhY2UgYmxhbmtMaW5lcz0iMSIvPg0N CiBPbmUgb2YgdGhlIHByb3Bvc2VkIHJlZmluZW1lbnRzIGlzIHRvIGJlIGFi bGUgdG8gZ3JvdXANDQotdGhlIG5vZGVzIGluIElHUCBkb21haW4gd2l0aCBh ZG1pbmlzdHJhdGl2ZSB0YWdzIGFuZA0NCit0aGUgbm9kZXMgaW4gYW4gSUdQ IGRvbWFpbiB3aXRoIGFkbWluaXN0cmF0aXZlIHRhZ3MgYW5kDQ0KIGVuZ2lu ZWVyIHRoZSBMRkEgYmFzZWQgb24gY29uZmlndXJlZCBwb2xpY2llcy4NDQog PGxpc3Qgc3R5bGU9ImZvcm1hdCAoJWMpIiBoYW5nSW5kZW50PSI0Ij4NDQog PHQ+QWRtaW5pc3RyYXRpdmUgbGltaXRhdGlvbiBvZiBMRkEgc2NvcGUNDQog PHZzcGFjZSBibGFua0xpbmVzPSIxIi8+DQ0KIFNlcnZpY2UgcHJvdmlkZXIg YWNjZXNzIGluZnJhc3RydWN0dXJlIGlzIGZyZXF1ZW50bHkNDQotZGVzaWdu ZWQgaW4gbGF5ZXJlZCBhcHByb2FjaCB3aXRoIGVhY2ggbGF5ZXIgb2YNDQor ZGVzaWduZWQgaW4gYSBsYXllcmVkIGFwcHJvYWNoIHdpdGggZWFjaCBsYXll ciBvZg0NCiBkZXZpY2VzIHNlcnZpbmcgZGlmZmVyZW50IHB1cnBvc2VzIGFu ZCB0aHVzIGhhdmluZw0NCiBkaWZmZXJlbnQgaGFyZHdhcmUgY2FwYWJpbGl0 aWVzIGFuZCBjb25maWd1cmVkDQ0KIHNvZnR3YXJlIGZlYXR1cmVzLiBXaGVu IExGQSByZXBhaXIgcGF0aHMgYXJlIGJlaW5nDQ0KQEAgLTMwNSw3ICszMDUs NyBAQA0KIGJlIGRlc2lyYWJsZSBmb3IgYSBEaXN0cmlidXRpb24gZGV2aWNl IHRvIGNvbXB1dGUgTEZBDQ0KIG9ubHkgdmlhIERpc3RyaWJ1dGlvbiBvciBD b3JlIGRldmljZXMgYnV0IG5vdCB2aWENDQogQWNjZXNzIGRldmljZXMuIFRo aXMgbWF5IGJlIGR1ZSB0byBmZWF0dXJlcyBlbmFibGVkDQ0KLW9uIEFjY2Vz cyByb3V0ZXJzOyBkdWUgdG8gY2FwYWNpdHkgbGltaXRhdGlvbnMgb3IgZHVl DQ0KK29uIEFjY2VzcyByb3V0ZXJzLCBkdWUgdG8gY2FwYWNpdHkgbGltaXRh dGlvbnMgb3IgZHVlDQ0KIHRvIHRoZSBzZWN1cml0eSByZXF1aXJlbWVudHMu IE1hbmFnaW5nIHN1Y2ggYSBwb2xpY3kNDQogdmlhIGNvbmZpZ3VyYXRpb24g b2YgdGhlIHJvdXRlciBjb21wdXRpbmcgTEZBIGlzDQ0KIGN1bWJlcnNvbWUg YW5kIGVycm9yIHByb25lLg0NCkBAIC0zMTQsMjAgKzMxNCwyMCBAQA0KIGFz c2lnbiBhIHRhZyB0byBlYWNoIGxheWVyIGFuZCBpbXBsZW1lbnQgTEZBIHBv bGljeQ0NCiBvZiBjb21wdXRpbmcgTEZBIHJlcGFpciBwYXRocyBvbmx5IHZp YSBuZWlnaGJvcnMNDQogd2hpY2ggYWR2ZXJ0aXNlIHRoZSBDb3JlIG9yIERp c3RyaWJ1dGlvbiB0YWcuIFRoaXMNDQotcmVxdWlyZXMgbWluaW1hbCBwZXIt bm9kZSBjb25maWd1cmF0aW9uIGFuZCBuZXR3b3JrDQ0KK3JlcXVpcmVzIG1p bmltYWwgcGVyLW5vZGUgY29uZmlndXJhdGlvbiBhbmQgdGhlIG5ldHdvcmsN DQogYXV0b21hdGljYWxseSBhZGFwdHMgd2hlbiBuZXcgbGlua3Mgb3Igcm91 dGVycyBhcmUNDQogYWRkZWQuDQ0KIDwvdD4NDQogPHQ+TEZBIGNhbGN1bGF0 aW9uIG9wdGltaXphdGlvbg0NCiA8dnNwYWNlIGJsYW5rTGluZXM9IjEiLz4N DQogQ2FsY3VsYXRpb24gb2YgTEZBIHBhdGhzIG1heSByZXF1aXJlIHNpZ25p ZmljYW50DQ0KLXJlc291cmNlcyBvZiB0aGUgcm91dGVyLiBPbmUgZXhlY3V0 aW9uIG9mIERpamtzdHJhDQ0KK3Jlc291cmNlcyBvZiB0aGUgcm91dGVyLiBP bmUgZXhlY3V0aW9uIG9mIERpamtzdHJhJ3MNDQogYWxnb3JpdGhtIGlzIHJl cXVpcmVkIGZvciBlYWNoIG5laWdoYm9yIGVsaWdpYmxlIHRvDQ0KLWJlY29t ZSBuZXh0IGhvcCBvZiByZXBhaXIgcGF0aHMuIFRodXMgYSByb3V0ZXIgd2l0 aCBhDQ0KK2JlY29tZSB0aGUgbmV4dCBob3Agb2YgcmVwYWlyIHBhdGhzLiBU aHVzLCBhIHJvdXRlciB3aXRoIGENDQogZmV3IGh1bmRyZWRzIG9mIG5laWdo Ym9ycyBtYXkgbmVlZCB0byBleGVjdXRlIHRoZQ0NCiBhbGdvcml0aG0gaHVu ZHJlZHMgb2YgdGltZXMgYmVmb3JlIHRoZSBiZXN0IChvciBldmVuDQ0KIHZh bGlkKSByZXBhaXIgcGF0aCBpcyBmb3VuZC4gTWFudWFsbHkgZXhjbHVkaW5n IGZyb20NDQotdGhlIGNhbGN1bGF0aW9uIG5laWdoYm9ycyB3aGljaCBhcmUg a25vd24gdG8gcHJvdmlkZQ0NCit0aGUgY2FsY3VsYXRpb24gbmVpZ2hib3Jz IHRoYXQgYXJlIGtub3duIHRvIHByb3ZpZGUNDQogbm8gdmFsaWQgTEZBIChz dWNoIGFzIHNpbmdsZS1jb25uZWN0ZWQgcm91dGVycykgbWF5DQ0KIHNpZ25p ZmljYW50bHkgcmVkdWNlIG51bWJlciBvZiBEaWprc3RyYSBhbGdvcml0aG0N DQogcnVucy4NDQpAQCAtMzQ1LDIyICszNDUsMjIgQEANCiA8dnNwYWNlIGJs YW5rTGluZXM9IjEiLz4NDQogPHhyZWYgdGFyZ2V0PSJSRkM3NDkwIi8+IGRl ZmluZWQgYQ0NCiBtZXRob2Qgb2YgdHVubmVsbGluZyB0cmFmZmljIGFmdGVy IGNvbm5lY3RlZCBsaW5rIGZhaWx1cmUNDQotdG8gZXh0ZW5kIHRoZSBiYXNp YyBMRkEgY292ZXJhZ2UgYW5kIGFsZ29yaXRobSB0byBmaW5kDQ0KK3RvIGV4 dGVuZCB0aGUgYmFzaWMgTEZBIGNvdmVyYWdlIGFuZCBhbiBhbGdvcml0aG0g dG8gZmluZA0NCiB0dW5uZWwgdGFpbC1lbmQgcm91dGVycyBmaXR0aW5nIExG QSByZXF1aXJlbWVudC4gSW4gbW9zdA0NCi1jYXNlcyBwcm9wb3NlZCBhbGdv cml0aG0gZmluZHMgbW9yZSB0aGFuIG9uZSBjYW5kaWRhdGUNDQotdGFpbC1l bmQgcm91dGVyLiBJbiByZWFsIGxpZmUgbmV0d29yayBpdCBtYXkgYmUgZGVz aXJhYmxlDQ0KK2Nhc2VzIHRoZSBwcm9wb3NlZCBhbGdvcml0aG0gZmluZHMg bW9yZSB0aGFuIG9uZSBjYW5kaWRhdGUNDQordGFpbC1lbmQgcm91dGVyLiBJ biByZWFsLWxpZmUgbmV0d29ya3MgaXQgbWF5IGJlIGRlc2lyYWJsZQ0NCiB0 byBleGNsdWRlIHNvbWUgbm9kZXMgZnJvbSB0aGUgbGlzdCBvZiBjYW5kaWRh dGVzIGJhc2VkDQ0KIG9uIHRoZSBsb2NhbCBwb2xpY3kuIFRoaXMgbWF5IGJl IGVpdGhlciBkdWUgdG8ga25vd24NDQotbGltaXRhdGlvbnMgb2YgdGhlIG5v ZGUgKHRoZSByb3V0ZXIgZG9lcyBub3QgYWNjZXB0IHRhcmdldGVkDQ0KK2xp bWl0YXRpb25zIG9mIHRoZSBub2RlICh0aGUgcm91dGVyIGRvZXMgbm90IGFj Y2VwdCB0aGUgdGFyZ2V0ZWQNDQogTERQIHNlc3Npb25zIHJlcXVpcmVkIHRv IGltcGxlbWVudCBSZW1vdGUgTEZBIHR1bm5lbGxpbmcpDQ0KIG9yIGR1ZSB0 byBhZG1pbmlzdHJhdGl2ZSByZXF1aXJlbWVudHMgKGZvciBleGFtcGxlLCBp dA0NCi1tYXkgYmUgZGVzaXJhYmxlIHRvIGNob29zZSB0YWlsLWVuZCByb3V0 ZXIgYW1vbmcNDQorbWF5IGJlIGRlc2lyYWJsZSB0byBjaG9vc2UgdGhlIHRh aWwtZW5kIHJvdXRlciBhbW9uZw0NCiBjby1sb2NhdGVkIGRldmljZXMpLg0N CiA8dnNwYWNlIGJsYW5rTGluZXM9IjEiLz4NDQotVGhlIE5vZGUgYWRtaW5p c3RyYXRpdmUgdGFnIGRlbGl2ZXJzIHNpbXBsZSBhbmQgc2NhbGFibGUNDQor VGhlIE5vZGUgYWRtaW5pc3RyYXRpdmUgdGFnIGRlbGl2ZXJzIGEgc2ltcGxl IGFuZCBzY2FsYWJsZQ0NCiBzb2x1dGlvbi4gUmVtb3RlIExGQSBjYW4gYmUg Y29uZmlndXJlZCB3aXRoIGEgcG9saWN5IHRvDQ0KIGFjY2VwdCBkdXJpbmcg dGhlIHRhaWwtZW5kIHJvdXRlciBjYWxjdWxhdGlvbiBhcw0NCi1jYW5kaWRh dGVzIG9ubHkgcm91dGVycyBhZHZlcnRpc2luZyBjZXJ0YWluIHRhZy4gVGFn Z2luZw0NCitjYW5kaWRhdGVzIG9ubHkgcm91dGVycyBhZHZlcnRpc2luZyBh IGNlcnRhaW4gdGFnLiBUYWdnaW5nDQ0KIHJvdXRlcnMgYWxsb3dzIHRvIGJv dGggZXhjbHVkZSBub2RlcyBub3QgY2FwYWJsZSBvZg0NCiBzZXJ2aW5nIGFz IFJlbW90ZSBMRkEgdHVubmVsIHRhaWwtZW5kcyBhbmQgdG8gZGVmaW5lIGEN DQogcmVnaW9uIGZyb20gd2hpY2ggdGFpbC1lbmQgcm91dGVyIG11c3QgYmUg c2VsZWN0ZWQuDQ0KQEAgLTM2OSw4ICszNjksOCBAQA0KIDxzZWN0aW9uIHRp dGxlPSdNb2JpbGUgYmFjay1oYXVsIG5ldHdvcmsgc2VydmljZSBkZXBsb3lt ZW50Jz4NDQogPHQ+DQ0KIDx2c3BhY2UgYmxhbmtMaW5lcz0iMSIvPg0NCi1U aGUgdG9wb2xvZ3kgb2YgbW9iaWxlIGJhY2staGF1bCBuZXR3b3JrIHVzdWFs bHkgYWRvcHRzIHJpbmcgdG9wb2xvZ3kNDQotdG8gc2F2ZSBmaWJyZSByZXNv dXJjZSBhbmQgaXQgaXMgZGl2aWRlZCBpbnRvIHRoZSBhZ2dyZWdhdGUgbmV0 d29yayBhbmQNDQorTW9iaWxlIGJhY2staGF1bCBuZXR3b3JrcyB1c3VhbGx5 IGFkb3B0IGEgcmluZyB0b3BvbG9neQ0NCit0byBzYXZlIGZpYnJlIHJlc291 cmNlczsgaXQgaXMgdXN1YWxseSBkaXZpZGVkIGludG8gdGhlIGFnZ3JlZ2F0 ZSBuZXR3b3JrIGFuZA0NCiB0aGUgYWNjZXNzIG5ldHdvcmsuIENlbGwgU2l0 ZSBHYXRld2F5cyhDU0dzKSBjb25uZWN0cyB0aGUgZU5vZGVCcyBhbmQNDQog Uk5DKFJhZGlvIE5ldHdvcmsgQ29udHJvbGxlcikgU2l0ZSBHYXRld2F5cyhS U0dzKSBjb25uZWN0cyB0aGUgUk5Dcy4NDQogVGhlIG1vYmlsZSB0cmFmZmlj IGlzIHRyYW5zcG9ydGVkIGZyb20gQ1NHcyB0byBSU0dzLiBUaGUgbmV0d29y ayB0YWtlcw0NCkBAIC00MDgsNyArNDA4LDcgQEANCiA8dnNwYWNlIGJsYW5r TGluZXM9IjEiLz4NDQogQSB0eXBpY2FsIG1vYmlsZSBiYWNrLWhhdWwgbmV0 d29yayB3aXRoIGFjY2VzcyByaW5ncyBhbmQgYWdncmVnYXRlDQ0KIGxpbmtz IGlzIHNob3duIGluIGZpZ3VyZSBhYm92ZS4gVGhlIG1vYmlsZSBiYWNrLWhh dWwgbmV0d29ya3MgZGVwbG95DQ0KLXRyYWZmaWMgZW5naW5lZXJpbmcgZHVl IHRvIHRoZSBzdHJpY3QgU2VydmljZSBMZXZlbCBBZ3JlZW1lbnRzKFNMQSku DQ0KK3RyYWZmaWMgZW5naW5lZXJpbmcgZHVlIHRvIHN0cmljdCBTZXJ2aWNl IExldmVsIEFncmVlbWVudHMoU0xBKS4NDQogVGhlIFRFIHBhdGhzIG1heSBo YXZlIGFkZGl0aW9uYWwgY29uc3RyYWludHMgdG8gYXZvaWQgcGFzc2luZyB2 aWEgZGlmZmVyZW50DQ0KIGFjY2VzcyByaW5ncyBvciB0byBnZXQgY29tcGxl dGVseSBkaXNqb2ludCBiYWNrdXAgVEUgcGF0aHMuIFRoZSBtb2JpbGUgYmFj ay1oYXVsDQ0KIG5ldHdvcmtzIHRvd2FyZHMgdGhlIGFjY2VzcyBzaWRlIGNo YW5nZSBmcmVxdWVudGx5IGR1ZSB0byB0aGUgZ3Jvd2luZyBtb2JpbGUNDQpA QCAtNDIyLDkgKzQyMiw5IEBADQogPHNlY3Rpb24gdGl0bGU9J0V4cGxpY2l0 IHJvdXRpbmcgcG9saWN5Jz4NDQogPHQ+DQ0KIDx2c3BhY2UgYmxhbmtMaW5l cz0iMSIvPg0NCi1QYXJ0aWFsbHkgbWVzaGVkIG5ldHdvcmsgcHJvdmlkZXMg bXVsdGlwbGUgcGF0aHMgYmV0d2VlbiBhbnkgdHdvIG5vZGVzIGluIHRoZSBu ZXR3b3JrLg0NCitBIHBhcnRpYWxseSBtZXNoZWQgbmV0d29yayBwcm92aWRl cyBtdWx0aXBsZSBwYXRocyBiZXR3ZWVuIGFueSB0d28gbm9kZXMgaW4gdGhl IG5ldHdvcmsuDQ0KIEluIGEgZGF0YSBjZW50cmUgZW52aXJvbm1lbnQsIHRo ZSB0b3BvbG9neSBpcyB1c3VhbGx5IGhpZ2hseSBzeW1tZXRyaWMgd2l0aCBt YW55L2FsbA0NCi1wYXRocyBoYXZpbmcgZXF1YWwgY29zdC4gSW4gYSBsb25n IGRpc3RhbmNlIG5ldHdvcmssIHRoaXMgaXMgdXN1YWxseSBsZXNzIHRoZSBj YXNlIGZvcg0NCitwYXRocyBoYXZpbmcgZXF1YWwgY29zdC4gSW4gYSBsb25n IGRpc3RhbmNlIG5ldHdvcmssIHRoaXMgaXMgdXN1YWxseSBsZXNzIHRoZSBj YXNlLCBmb3INDQogYSB2YXJpZXR5IG9mIHJlYXNvbnMgKGUuZy4gaGlzdG9y aWMsIGZpYnJlIGF2YWlsYWJpbGl0eSBjb25zdHJhaW50cywgZGlmZmVyZW50 IGRpc3RhbmNlcw0NCiBiZXR3ZWVuIHRyYW5zaXQgbm9kZXMsIGRpZmZlcmVu dCByb2xlcyAuLi4pLiBIZW5jZSBiZXR3ZWVuIGEgZ2l2ZW4gc291cmNlIGFu ZCBkZXN0aW5hdGlvbiwNDQogYSBwYXRoIGlzIHR5cGljYWxseSBwcmVmZXJy ZWQgb3ZlciB0aGUgb3RoZXJzLCB3aGlsZSBiZXR3ZWVuIHRoZSBzYW1lIHNv dXJjZSBhbmQgYW5vdGhlcg0NCkBAIC01MjAsNCArNTIwLDQgQEANCiA8P3Jm YyBpbmNsdWRlPSJyZWZlcmVuY2UuSS1ELmlldGYtcnRnd2ctbGZhLW1hbmFn ZWFiaWxpdHkiPz4NDQogPC9yZWZlcmVuY2VzPg0NCiA8L2JhY2s+DQ0KLTwv cmZjPg0KXCBObyBuZXdsaW5lIGF0IGVuZCBvZiBmaWxlDQorPC9yZmM+DQ0K ---559023410-449483132-1444423925=:26829-- From nobody Sat Oct 10 12:34:36 2015 Return-Path: X-Original-To: secdir@ietfa.amsl.com Delivered-To: secdir@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 5226E1B452F; Sat, 10 Oct 2015 12:34:35 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -11.811 X-Spam-Level: X-Spam-Status: No, score=-11.811 tagged_above=-999 required=5 tests=[BAYES_50=0.8, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_HI=-5, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id uoK-RvOdCEYx; Sat, 10 Oct 2015 12:34:32 -0700 (PDT) Received: from rcdn-iport-7.cisco.com (rcdn-iport-7.cisco.com [173.37.86.78]) (using TLSv1 with cipher RC4-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 3F9B81B453C; Sat, 10 Oct 2015 12:34:32 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=16976; q=dns/txt; s=iport; t=1444505672; x=1445715272; h=from:to:subject:date:message-id:references:in-reply-to: content-id:content-transfer-encoding:mime-version; bh=k7k1YaMnAOxU/k1QqJGq3Po7qsEK2Nnwx1LUx1C+pls=; b=DaPxk766g5ya2lhHdeqcxlsHwxPE/0TVd0kMrtbMn7wSNN+tVN+imTWD KQfhgBXMhEiJh50lzjM7Yg3yRd/rrnqBmF6DD2Z97ndEf+T0qNQXjlLQ6 s+ZImh4+cTT2uQZOrjC+RKcRWYUxpbVdAb/ksu1Pbs1nCIpfi3DblM8zj Y=; X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: A0COAgAGZxlW/40NJK1eDoMYVG4GvWQBDYFaIYJyggp/AhyBBDgUAQEBAQEBAYEKhCcBAQMBIxFKCwIBCBoCJgICAjAVEAIEARKIJggNr2OTZAEBAQEBAQEBAQEBAQEBAQEBAQEVBIEiik+EIRNggmmBRQWNDIVIgz8BiAiFEYFYhDqDJIoFhFmDbgEfAQFCggwGHIEWPnEBAYYfQ4EGAQEB X-IronPort-AV: E=Sophos;i="5.17,664,1437436800"; d="scan'208";a="34512195" Received: from alln-core-8.cisco.com ([173.36.13.141]) by rcdn-iport-7.cisco.com with ESMTP; 10 Oct 2015 19:34:30 +0000 Received: from XCH-ALN-011.cisco.com (xch-aln-011.cisco.com [173.36.7.21]) by alln-core-8.cisco.com (8.14.5/8.14.5) with ESMTP id t9AJYUap000667 (version=TLSv1/SSLv3 cipher=AES256-SHA bits=256 verify=FAIL); Sat, 10 Oct 2015 19:34:30 GMT Received: from xch-rcd-015.cisco.com (173.37.102.25) by XCH-ALN-011.cisco.com (173.36.7.21) with Microsoft SMTP Server (TLS) id 15.0.1104.5; Sat, 10 Oct 2015 14:34:22 -0500 Received: from xch-rcd-015.cisco.com ([173.37.102.25]) by XCH-RCD-015.cisco.com ([173.37.102.25]) with mapi id 15.00.1104.000; Sat, 10 Oct 2015 14:34:21 -0500 From: "Acee Lindem (acee)" To: Benjamin Kaduk , "iesg@ietf.org" , "secdir@ietf.org" , "draft-ietf-ospf-node-admin-tag.all@ietf.org" Thread-Topic: secdir review of draft-ietf-ospf-node-admin-tag-05 Thread-Index: AQHRAtRkZED+3D3sTk6f1e8MGzkzuJ5lMHaA Date: Sat, 10 Oct 2015 19:34:21 +0000 Message-ID: References: In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-ms-exchange-messagesentrepresentingtype: 1 x-ms-exchange-transport-fromentityheader: Hosted x-originating-ip: [10.116.152.199] Content-Type: text/plain; charset="utf-8" Content-ID: <2CFDDAC3A4D9D04C94481A983862140B@emea.cisco.com> Content-Transfer-Encoding: base64 MIME-Version: 1.0 Archived-At: Subject: Re: [secdir] secdir review of draft-ietf-ospf-node-admin-tag-05 X-BeenThere: secdir@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: Security Area Directorate List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 10 Oct 2015 19:34:35 -0000 SGkgQmVuLCANCg0KQXMgdGhlIGRvY3VtZW50IHNoZXBoZXJkIGFuZCBhIGxvbmctdGltZSBPU1BG IGNvbnRyaWJ1dG9yLCBJ4oCZbSBnb2luZyB0bw0KdHJ5IGFuZCBzb3J0IG91dCBzb21lIG9mIHlv dXIgY29tbWVudHMuIE5vdGUgdGhhdCByb3V0ZSB0YWdnaW5nIGhhcyBiZWVuDQppbiB1c2UgZm9y IGRlY2FkZXMgYW5kIHRoaXMgZG9jdW1lbnQgaXMgbWVyZWx5IGV4dGVuZGluZyB0aGUNCmFkbWlu aXN0cmF0aXZlIHBvbGljaWVzIGFkdmVydGlzZW1lbnQgdG8gdGhlIG5vZGUgbGV2ZWwuDQoNCk9u IDEwLzkvMTUsIDQ6NTIgUE0sICJCZW5qYW1pbiBLYWR1ayIgPGthZHVrQE1JVC5FRFU+IHdyb3Rl Og0KDQo+SSBoYXZlIHJldmlld2VkIHRoaXMgZG9jdW1lbnQgYXMgcGFydCBvZiB0aGUgc2VjdXJp dHkgZGlyZWN0b3JhdGUncw0KPm9uZ29pbmcgZWZmb3J0IHRvIHJldmlldyBhbGwgSUVURiBkb2N1 bWVudHMgYmVpbmcgcHJvY2Vzc2VkIGJ5IHRoZQ0KPklFU0cuICBUaGVzZSBjb21tZW50cyB3ZXJl IHdyaXR0ZW4gcHJpbWFyaWx5IGZvciB0aGUgYmVuZWZpdCBvZiB0aGUNCj5zZWN1cml0eSBhcmVh IGRpcmVjdG9ycy4gIERvY3VtZW50IGVkaXRvcnMgYW5kIFdHIGNoYWlycyBzaG91bGQgdHJlYXQN Cj50aGVzZSBjb21tZW50cyBqdXN0IGxpa2UgYW55IG90aGVyIGxhc3QgY2FsbCBjb21tZW50cy4N Cj4NCj5JIHdpbGwgcHJlZmFjZSB0aGVzZSBjb21tZW50cyB3aXRoIGEgbm90ZSB0aGF0IG15IHJv dXRpbmcgYmFja2dyb3VuZCBpcw0KPnF1aXRlIHdlYWssIGFuZCBJIG5lZWRlZCB0byByZWFkIFJG QyAyMzI4IGFuZCBSRkMgNDk3MCB0byBoYXZlIGVub3VnaA0KPmNvbnRleHQgdG8gYmUgYWJsZSB0 byBzYXkgbXVjaCB1c2VmdWwgYWJvdXQgd2hhdCdzIGdvaW5nIG9uIGhlcmU7IEkgbWF5DQo+c3Rp bGwgYmUgc3VmZmVyaW5nIGZyb20gc29tZSBtaXNjb25jZXB0aW9ucy4NCj4NCj5PbiB0aGUgd2hv bGUsIHRoaXMgZG9jdW1lbnQgbGVhdmVzIG1lIGZlZWxpbmcgdW5zYXRpc2ZpZWQ7IGl0IHNwZW5k cyBtYXliZQ0KPnRocmVlIHBhZ2VzIHRhbGtpbmcgYWJvdXQgdGhlIGFjdHVhbCBuZXcgcHJvdG9j b2wgZXh0ZW5zaW9uIGFuZCB0aGVuIGdpdmVzDQo+Zm91ciBwYWdlcyBvZiBleGFtcGxlIHVzYWdl LCBhbGwgdGhlIHdoaWxlIGNsYWltaW5nIHRoYXQgdGhlIGFjdHVhbCB0YWcNCj52YWx1ZXMgYXJl IG9ubHkgbWVhbmluZ2Z1bCB3aXRoaW4gYSBzaW5nbGUgYWRtaW5pc3RyYXRpdmUgZG9tYWluL25l dHdvcmssDQo+YXJlIGZvciBnZW5lcmljIHVzZSwgYW5kIGRvIG5vdCByZXF1aXJlIGFuIElBTkEg cmVnaXN0cnkuICBUaGF0IGlzLCBpdCBpcw0KPnRyeWluZyB0byB3YWxrIGEgbWlkZGxlIGxpbmUg YmV0d2VlbiAidGhpcyBkb2N1bWVudCBhbGxvY2F0ZXMgYSB2YWx1ZSBpbg0KPnRoZSBPU1BGIFRM VnMgcmVnaXN0cnkgZm9yIHNpdGUtbG9jYWwgdXNlLCB1c2UgaXQgYXMgeW91IHdpbGwiIGFuZCAi dGhpcw0KPmRvY3VtZW50IHNwZWNpZmllcyBhIGNvbXBsZXRlIHByb3RvY29sIGV4dGVuc2lvbiBm b3IgdGFnZ2luZyBPU1BGIG5vZGVzDQo+Zm9yIHRyYWZmaWMgZW5naW5lZXJpbmcsIExGQSwgYW5k IG90aGVyIHB1cnBvc2VzIi4gIFRoYXQgaXMgYSBoYXJkIG1pZGRsZQ0KPmxpbmUgdG8gZm9sbG93 LCBhbmQgSSBhbSBub3Qgc3VyZSB0aGF0IHRoaXMgZG9jdW1lbnQgZG9lcyBzbyBzdWNjZXNzZnVs bHkuDQo+SSB3aWxsIG5vdCB0cnkgdG8gcmVvcGVuIHRoZSBxdWVzdGlvbiBvZiB3aGV0aGVyIGl0 IHdvdWxkIGJlIGJldHRlciB0bw0KPnRha2Ugb25lIG9mIHRoZSBub24tbWlkZGxlIHBhdGhzLCBh bmQgY29udGludWUgb24gdGhlIGFzc3VtcHRpb24gdGhhdCB0aGlzDQo+ZG9jdW1lbnQgd2lsbCB0 YWtlIHRoZSBtaWRkbGUgcGF0aC4gIEkgdGhpbmsgdGhlcmUgYXJlIGEgZmV3IHRoaW5ncyB0aGF0 DQo+YXJlIG1pc3NpbmcgYmVmb3JlIHRoaXMgZG9jdW1lbnQgc2hvdWxkIGJlIHB1Ymxpc2hlZCwg YW5kIHRoYXQgaXQgbWlnaHQgYmUNCj53b3J0aCBjb25zaWRlcmluZyBhIG1vcmUgZHJhc3RpYyBy ZXN0cnVjdHVyaW5nIGFzIHdlbGwuDQo+DQo+SXQgd291bGQgcHJvYmFibHkgYmUgZ29vZCB0byBp bmNsdWRlIHNvbWUgdGV4dCB3aXRoIHRoZSByZWFzb25pbmcgYmVoaW5kDQo+dGhlIGNob2ljZSBv ZiB0aGUgIm1pZGRsZSBsaW5lIiAtLSB0aGUgY3VycmVudCB0ZXh0IGF0dGVtcHRpbmcgdG8gZW5m b3JjZQ0KPml0LCAibmV3IE9TUEYgZXh0ZW5zaW9ucyBNVVNUIE5PVCByZXF1aXJlIHVzZSBvZiBw ZXItbm9kZSBhZG1pbmlzdHJhdGl2ZQ0KPnRhZ3Mgb3IgZGVmaW5lIHdlbGwta25vd24gdGFnIHZh bHVlcyIsIHNlZW1zIHVuZW5mb3JjYWJsZSwgYXMgYSBmdXR1cmUgUkZDDQo+dXBkYXRpbmcgdGhp cyBvbmUgY291bGQganVzdCByZW1vdmUgdGhhdCByZXN0cmljdGlvbi4NCg0KVGhlIGludGVudCBo ZXJlIGlzIHRoYXQgdGhpcyBUTFYgaXMgdG8gYmUgc29sZWx5IGZvciBsb2NhbGx5IGRlZmluZWQN CnBvbGljaWVzLiBJZiB0aGVyZSB3ZXJlIHRvIGJlIGEgVExWIGZvciB3ZWxsLWtub3duIHRhZ3Mg YW5kIHBvbGljaWVzLCB0aGlzDQpjb3VsZCBiZSBhY2NvbXBsaXNoZWQgd2l0aCBhIHNlcGFyYXRl IE9TUEYgUkkgVExWLiBJIGFncmVlIHRoYXQgdGhlDQpub3JtYXRpdmUgdGV4dCBzaG91bGQgYmUg c29mdGVuZWQgZnJvbSDigJxNVVNUIE5PVOKAnSB0byDigJxhcmUgbm90IGV4cGVjdGVkDQp0b+KA nS4gDQoNCj4NCj5JdCBsb29rcyBsaWtlIHRoZXJlJ3Mgbm93IGFuIC0wNiwgYnV0IHRoZSBjaGFu Z2VzIGZyb20gdGhlIC0wNSBhcmUgbm90DQo+c2lnbmlmaWNhbnQuICBUaGUgc2VjdXJpdHkgY29u c2lkZXJhdGlvbnMgaW4gdGhlIC0wNSBjb3JyZWN0bHkgbm90ZSB3aGF0DQo+YXJlIGVzc2VudGlh bGx5IHByaXZhY3kgY29uc2lkZXJhdGlvbnMgcmVnYXJkaW5nIHRoZSBjb250ZW50cyBvZiB0aGUg YWRtaW4NCj50YWdzLiAgSG93ZXZlciwgaXQgc2VlbXMgbGlrZSB0aGVyZSBhcmUgYWxzbyBwb3Rl bnRpYWwgc2VjdXJpdHkNCj5jb25zaWRlcmF0aW9ucyBvbiB0aGUgYWN0dWFsIG9wZXJhdGlvbiBv ZiB0aGUgbmV0d29yayB0aGF0IGFyZSBub3QNCj5kaXNjdXNzZWQgaGVyZSwgbm9yIGluIFJGQyAy MzI4IChPU1BGdjIpIG9yIFJGQyA1MzQwIChPU1BGdjMpLiAgUkZDIDUzNDAncw0KPnNlY3VyaXR5 IGNvbnNpZGVyYXRpb25zIGV4cGxpY2l0bHkgZGlzY2xhaW1zIHByb3RlY3Rpb25zIGFnYWluc3QN Cj5jb21wcm9taXNlZCwgbWFsZnVuY3Rpb25pbmcsIG9yIG1pc2NvbmZpZ3VyZWQgcm91dGVycywg ZGVmZXJyaW5nIHRvIFJGQw0KPjQ1OTMsICJHZW5lcmljIFRocmVhdHMgdG8gUm91dGluZyBQcm90 b2NvbHMiLiAgSSBiZWxpZXZlIHRoYXQgdGhlIHNlY3VyaXR5DQo+Y29uc2lkZXJhdGlvbnMgb2Yg dGhpcyBkb2N1bWVudCBzaG91bGQgYWRkcmVzcywgZWl0aGVyIGRpcmVjdGx5IG9yDQo+aW5kaXJl Y3RseSwgcHJvdGVjdGlvbnMgYWdhaW5zdCBjb21wcm9taXNlZCwgbWFsZnVuY3Rpb25pbmcsIG9y DQo+bWlzY29uZmlndXJlZCByb3V0ZXJzLCBhbmQgYWRkaXRpb25hbGx5IHByb3RlY3Rpb24gYWdh aW5zdCBtYWxpY2lvdXMNCj5hY3RvcnMgd2l0aCBhY2Nlc3MgdG8gdGhlIGxheWVyLTMgbmV0d29y ayAoYW5kIG1heWJlIGxvd2VyIGxheWVycyBhcw0KPndlbGwpLg0KPg0KPlRoYXQgcHJvYmFibHkg bWVhbnMgbWVudGlvbmluZyBSRkMgNDU5MyBkaXJlY3RseSwgb3IgbWF5YmUganVzdCBwb2ludGlu Zw0KPm91dCB0aGF0IFJGQyA1MzQwIGRvZXMgc28uICBUaGVyZSBhcmUgc3RpbGwgYWRkaXRpb25h bCBjb25zaWRlcmF0aW9ucw0KPmludHJvZHVjZWQgYnkgdGhpcyBkb2N1bWVudCwgdGhvdWdoOyB1 bmZvcnR1bmF0ZWx5LCBiZWNhdXNlIHRoZSBidWxrIG9mDQo+dGhlIGludGVycHJldGF0aW9uIG9m IHRoZSBhZG1pbiB0YWdzIGlzIGxlZnQgdG8gdGhlIHNpdGUgYWRtaW5pc3RyYXRvciwgaXQNCj5p cyBoYXJkIHRvIGdpdmUgYSBjb21wcmVoZW5zaXZlIHNlY3VyaXR5IGFuYWx5c2lzLCBidXQgdGhl IGV4YW1wbGVzIGFuZA0KPnRoZSBwcm90b2NvbCBkZXNjcmlwdGlvbiBpdHNlbGYgZG8gZ2l2ZSBz b21lIGFyZWFzIGZvciBjb25zaWRlcmF0aW9uLg0KDQpUaGUgZG9jdW1lbnQgY291bGQgcmVmZXJl bmNlIFJGQyA0NTkzL1JGQyA2ODYzIGFuZCBzdGF0ZSB0aGF0DQphdXRoZW50aWNhdGlvbiBhcyBz cGVjaWZpZWQgaW4gUkZDIDc0NzQgb3IgUkZDIDcxNjYgU0hPVUxEIGJlIHVzZWQgaW4NCmRlcGxv eW1lbnRzIHdoZXJlIGF0dGFja2VycyBoYXZlIGFjY2VzcyB0byB0aGUgcGh5c2ljYWwgbmV0d29y a3MgaW5jbHVkZWQNCmluIHRoZSBPU1BGIGRvbWFpbiBhcmUgdnVsbmVyYWJsZS4NCg0KDQo+DQo+ VGhlIFJJIExTQXMgY2FycnlpbmcgYWRtaW5pc3RyYXRpdmUgdGFncyBjYW4gYmUgYXQgbGluay0s IGFyZWEtLCBvcg0KPkFTLWxldmVsIHNjb3BlOyBhbiBhZG1pbmlzdHJhdG9yIGFzc2lnbmluZyB0 YWcgdmFsdWVzIGFuZCBhc3NvY2lhdGVkDQo+cG9saWNpZXMgc2hvdWxkIGNvbnNpZGVyIHdoYXQg d291bGQgaGFwcGVuIGlmIGEgZ2l2ZW4gdGFnIHdhcyBhZHZlcnRpc2VkDQo+YXQgYSBkaWZmZXJl bnQgc2NvcGUgdGhhbiBpbnRlbmRlZC4gIENvbXBsaWFudCBpbXBsZW1lbnRhdGlvbnMgTVVTVCBO T1QNCj5nZW5lcmF0ZSB0aGUgc2FtZSB0YWcgYXQgZGlmZmVyZW50IHNjb3BlcywgYnV0IGEgcmVj ZWl2ZXIgd291bGQgbmVlZCB0bw0KPnRha2Ugc29tZSBhY3Rpb24gaWYgaXQgaGFwcGVuZWQsIHdo ZXRoZXIgZHVlIHRvIG5ldHdvcmsgZ2xpdGNoIG9yDQo+bWFsaWNpb3VzIGFjdGlvbiAtLSB3aGF0 IHNob3VsZCB0aGV5IGRvPw0KDQpJ4oCZbSBub3QgYW4gYXV0aG9yLCBidXQgdGhpcyBpcyB3aGF0 IEnigJlkIHJlY29tbWVuZDoNCg0KICAgVGhlIGNvbmZsaWN0aW5nIHRhZyBTSE9VTEQgbm90IGJl IHVzZWQgYW5kIHRoaXMgc2l0dWF0aW9uIFNIT1VMRCBiZQ0KbG9nZ2VkIGFzIGFuIGVycm9yIGlu Y2x1ZGluZyB0aGUgdGFnIHdpdGggY29uZmxpY3Rpbmcgc2NvcGVzIGFuZCB0aGUNCm9yaWdpbmF0 b3IocykuIA0KDQpUaGVyZSBpcyBhIGNhc2UgdGhhdCBtdXN0IGJlIGFsbG93ZWQgLSB0aGUgc2Ft ZSB0YWcgY291bGQgYmUgcmVjZWl2ZWQgYnkNCmFuIEFCUiBhdCBib3RoIHRoZSBBUyBzY29wZSBh bmQgdGhlIGFyZWEgc2NvcGUgaW4gYSBzdHViIG9yIE5TU0EgYXJlYS4NCg0KDQo+DQo+QW5vdGhl ciBwb3RlbnRpYWwgaXNzdWUgbGllcyBpbiB0aGUgInN0aWNraW5lc3MiIG9mIHRoZSBhZG1pbiB0 YWdzIC0tIHRoZQ0KPnRleHQgInRoZSBub2RlIGFkbWluaXN0cmF0aXZlIHRhZ3MgYXNzb2NpYXRl ZCB3aXRoIGEgbm9kZSBmb3IgdGhlIHB1cnBvc2UNCj5vZiBhbnkgY29tcHV0YXRpb24gb3IgcHJv Y2Vzc2luZyBTSE9VTEQgYmUgYSBzdXBlcnNldCBvZiBub2RlDQo+YWRtaW5pc3RyYXRpdmUgdGFn cyBmcm9tIGFsbCB0aGUgVExWcyBpbiBhbGwgaW5zdGFuY2VzIG9mIHRoZSBSSSBMU0ENCj5vcmln aW5hdGVkIGJ5IHRoYXQgbm9kZSIgc2VlbXMgdG8gbWVhbiB0aGF0IG9uY2UgYSB0YWcgaXMgc2V0 LCBpdCBjYW5ub3QNCj4oZWFzaWx5KSBiZSB1bnNldC4gIFdvdWxkIGZvcmNlLWV4cGlyaW5nIGFu IExTQSBiZSBlbm91Z2ggdG8gcmVzZXQgdGhlDQo+dGFnLCBvciBzb21ldGhpbmcgZWxzZT8NCg0K WWVzIC0gdGhpcyBpcyBzdGFuZGFyZCBmb3IgYW55IE9TUEYgTFNBLiBIb3dldmVyLCBzaW5jZSB0 aGUgT1NQRiBSSSBMU0ENCm1heSBpbmNsdWRlIG90aGVyIFRMVnMgb3IgZXZlbiBvdGhlciB0YWdz LCBhIHRhZyBjb3VsZCBhbHNvIGJlIHdpdGhkcmF3bg0KYnkgcmVvcmlnaW5hdGluZyB0aGUgUkkg TFNBIHdpdGhvdXQgdGhlIFRMViBvciB3aXRoIGEgVExWIHRoYXQgZG9lc27igJl0DQppbmNsdWRl IHRoZSB3aXRoZHJhd24gdGFnLg0KDQo+IEhvdyBkaXNydXB0aXZlIHdvdWxkIHRoYXQgYmU/ICBJ dCB3b3VsZCBiZQ0KPmhlbHBmdWwgdG8gc2VlIHNvbWUgZGlzY3Vzc2lvbiBvZiBob3cgYSB0YWcg d291bGQgYmUgcmVtb3ZlZC4NCg0KSSBtYXkgb2Ygd29ya2VkIG9uIE9TUEYgZm9yIHRvbyBsb25n IGJ1dCB0aGlzIHNob3VsZCBiZSBvYnZpb3VzIHRvIGFueW9uZQ0KaW1wbGVtZW50aW5nIHRoZSBk cmFmdCBmcm9tIHRoZSBzcGVjaWZpY2F0aW9uLg0KDQoNCj4NCj5UaGF0IGlzIHBhcnRpY3VsYXJs eSBlYXN5IGZvciBhbiBhdHRhY2tlciB3aGVuIHRoZSBudWxsIE9TUEYNCj5hdXRoZW50aWNhdGlv biBtZWNoYW5pc20gaXMgaW4gdXNlIChob3cgY29tbW9uIGlzIHRoYXQ/ICBJIHNhdyBzb21lDQo+ d2Vic2l0ZXMgaW5kaWNhdGluZyBpdCB3YXMgdGhlIGRlZmF1bHQgYmVoYXZpb3IsIGF0IGxlYXN0 IHNvbWV0aW1lcykuICBJDQo+ZG8gbm90IHNlZSBhIG5lZWQgdG8gdHVybiB0aGlzIGRvY3VtZW50 IGludG8gInNlY3VyaXR5IGNvbnNpZGVyYXRpb25zIGZvcg0KPk9TUEYgYXV0aGVudGljYXRpb24i LCBidXQgbWF5YmUgaXQgaXMgd29ydGggbWVudGlvbmluZyBzb21lIHRoaW5nczogdGhlDQo+bWQ1 IHNjaGVtZSBzZWVtcyBwcmV0dHkgd2VlayBhdCB0aGlzIHBvaW50ICh0aG91Z2ggcHJvYmFibHkg bm90IHRyaXZpYWxseQ0KPmJyb2tlbiksIHRoZSBobWFjLXNoYSBzY2hlbWUgb2YgUkZDIDU3MDkg aXMgb25seSBmcm9tIDIwMDksIGFuZCBSRkMgNzQ3NA0KPihvbmx5IHNpeCBtb250aHMgb2xkKSBw b2ludHMgb3V0IGNhc2VzIHdoZXJlIGJvdGggYXJlIHN1c2NlcHRpYmxlIHRvDQo+cmVwbGF5IGF0 dGFja3MuICBKdXN0IGxvb2tpbmcgYXQgdGhlIHNlY3VyaXR5IGNvbnNpZGVyYXRpb25zIG9mIHRo aXMNCj5kb2N1bWVudCBhbmQgdGhlIGNvcmUgT1NQRiB2Mi92MyBzcGVjcyBkb2VzIG5vdCBjb252 ZXkgdGhpcyB0byB0aGUgcmVhZGVyLA0KPnNvIEkgd291bGQgbGlrZSB0byBzZWUgYXQgbGVhc3Qg YSBwb2ludGVyIHRvIHN1Y2ggY29uc2lkZXJhdGlvbnMuICAoVGhlDQo+c3RhbmNlIG9mIFJGQyAy MzI4IHRoYXQgImFsbCBPU1BGIHByb3RvY29sIGV4Y2hhbmdlcyBhcmUgYXV0aGVudGljYXRlZCIN Cj5zZWVtcyBwYXJ0aWN1bGFybHkgZGlzaW5nZW5vdXMgZ2l2ZW4gdGhlIHByZXNlbmNlIG9mIHRo ZSBudWxsDQo+YXV0aGVudGljYXRpb24gc2NoZW1lLikNCg0KSSB0aGluayBib3RoIFJGQyA3NDc0 IGFuZCBSRkMgNzE3NiBzaG91bGQgYmUgcmVmZXJlbmNlZC4gVGhlIE9TUEYNCnZ1bG5lcmFiaWxp dHkgdG8gcmVwbGF5IGF0dGFja3MgdG8gT1NQRnYyL09TUEZ2MyByb3V0ZXJzIGltcGxlbWVudGlu Zw0KdGhlc2Ugc3BlY2lmaWNhdGlvbnMgaXMgZXh0cmVtZWx5IHNtYWxsIGFuZCBoYXMgYmVlbiBy ZWR1Y2VkIGFzIG11Y2ggYXMNCnByYWN0aWNhbC4gSWYgeW91IGFyZSBzdGlsbCBjb25jZXJuZWQs IEkgc3VnZ2VzdCB5b3UgZGlzY3VzcyB3aXRoIFNhbQ0KSGFydG1hbiAoYWxzbyBvbmNlIGFmZmls aWF0ZWQgd2l0aCBNSVQpLg0KDQo+DQo+VGhlcmUgaXMgYWxzbyB0aGUgcG9zc2liaWxpdHkgdGhh dCBhbiBhdHRhY2tlciBjb3VsZCBibG9jayBkZWxpdmVyeSBvZiBhbg0KPkxTQSwgY2F1c2luZyBh IHRhZyB0aGF0IHNob3VsZCBiZSBzZXQgdG8gbm90IGJlIHNlZW4uICBUaGlzIHNlZW1zIHVubGlr ZWx5DQo+Zm9yIHdpcmVkIHBvaW50LXRvLXBvaW50IGxpbmtzLCBidXQgaXMgbW9yZSBwbGF1c2li bGUgaW4gb3RoZXINCj5lbnZpcm9ubWVudHMsIHN1Y2ggYXMgcmFkaW8gbGlua3MuICBJIHRoaW5r IEkgY2FuIGltYWdpbmUgc2NlbmFyaW9zIHdoZXJlDQo+dGhpcyB3b3VsZCBjYXVzZSBkcmFzdGlj IGRhbWFnZSB0byB0aGUgcm91dGluZyB0b3BvbG9neS4NCg0KVGhlIGRlc2NyaXB0aW9uIGFuZCBt aXRpZ2F0aW9uIG9mIHN1Y2ggYSBnZW5lcmljIHRocmVhdCBkb2VzbuKAmXQgYmVsb25nIGluDQph IG1pbm9yICh0aG91Z2ggaW1wb3J0YW50KSBPU1BGIHNwZWNpZmljYXRpb24uIFRoZSBlZmZlY3Qg b2YgYmxvY2tpbmcNCmNvbnRyb2wgdHJhZmZpYyBpcyBuZXZlciBwb3NpdGl2ZSA7XikuIEF0IGxl YXN0IE9TUEYgdXNlcyByZWxpYWJsZQ0KZmxvb2Rpbmcgc28gaXQgd2lsbCBiZSByZXRyYW5zbWl0 dGVkLg0KDQoNCj4NCj5UaGUgcGFyZW50aGV0aWNhbCBpbiBzZWN0aW9uIDMuMiB3aGVyZWluIHJv dXRlcnMgbWlnaHQgYWR2ZXJ0aXNlIGENCj5wZXItbm9kZSBhbWluaXN0cmF0aXZlIHRhZyAid2l0 aG91dCBrbm93aW5nIChvciBldmVuIGV4cGxpY2l0bHkNCj5zdXBwb3J0aW5nKSBmdW5jdGlvbmFs aXR5IGltcGxpZWQgYnkgdGhlIHRhZyIgc2VlbXMgcG90ZW50aWFsbHkgZGFuZ2Vyb3VzLA0KPnNp bmNlIGl0IHNvdW5kcyBsaWtlIHRoZSByb3V0ZXJzIGluIHF1ZXN0aW9uIGFyZSBseWluZyBhYm91 dCB0aGVpcg0KPmNhcGFiaWxpdGllcy4gIFdvdWxkIHRoZSBkb2N1bWVudCBzdWZmZXIgaGFybSBp ZiB0aGUgcGFyZW50aGV0aWNhbCB3YXMNCj5yZW1vdmVkPw0KDQpJbiBteSBvcGluaW9uLCBubyBo YXJtIHRvIHJlbW92ZSAtIG1pc2NvbmZpZ3VyYXRpb24gaXMgYWxtb3N0IGFsd2F5cyBhbg0KaXNz dWUuIA0KDQo+DQo+T25lIHJlYXNvbiBJIGFtIHVuc2F0aXNmaWVkIGJ5IG1ha2luZyB0aGUgaW50 ZXJwcmV0YXRpb24gb2YgdGhlIHRhZyB2YWx1ZXMNCj5zcGVjaWZpYyB0byBhbiBhZG1pbmlzdHJh dGl2ZSBkb21haW4gaXMgdGhhdCBhIG1pc2NvbmZpZ3VyZWQgYm9yZGVyIHJvdXRlcg0KPm1pZ2h0 IGVycm9uZW91c2x5IHVzZSB0YWcgdmFsdWVzIGZyb20gb25lIGRvbWFpbiBvbiB0aGUgb3RoZXIg c2lkZSBvZiB0aGUNCj5ib3JkZXIuIA0KPiBQZXJoYXBzIHRoZSBvdGhlciBkYW1hZ2UgZnJvbSBh IHJvdXRlciBtaXNjb25maWd1cmVkIGluIHN1Y2ggYQ0KPmZhc2hpb24gd291bGQgZHdhcmYgdGhl IGFkZGl0aW9uYWwgZGFtYWdlIGZyb20gdGhlIG1pc2ludGVycHJldGVkIHRhZ3MgYW5kDQo+c28g bXkgY29uY2VybiBpcyBpbnZhbGlkOyBJIHJlYWxseSBjYW4ndCBzYXkuDQoNCkFnYWluLCBJIGRv buKAmXQgdGhpbmsgbWlzY29uZmlndXJhdGlvbiBuZWVkcyB0byBiZSBjb3ZlcmVkIC0gImVtcHRv cg0KY2F2ZXRl4oCdLiANCg0KVGhhbmtzIGZvciB0aGUgZWRpdG9yaWFsIHJldmlldyBhcyB3ZWxs LiBTcGVhayBhcyBXRyBjaGFpciwgSSBhcHByZWNpYXRlDQp0aGlzLiANCg0KVGhhbmtzLA0KQWNl ZSANCg0KDQo+DQo+DQo+DQo+DQo+SSBhbHNvIGhhdmUgc29tZSBlZGl0b3JpYWwgY29tbWVudHMg dW5yZWxhdGVkIHRvIHRoZSBzZWNkaXIgcmV2aWV3Og0KPg0KPlNlY3Rpb24gMy4yIHJlYWRzIHJh dGhlciBsaWtlIGEganVtYmxlZCBsaXN0IGFuZCBjb3VsZCBiZW5lZml0IGZyb20gc29tZQ0KPmFk ZGl0aW9uYWwgc3RydWN0dXJlLg0KPg0KPlNpbWlsYXJseSwgSSB3b3VsZCBmaW5kIGl0IGhlbHBm dWwgaWYgdGhlcmUgd2FzIHNvbWUgdGV4dCBtb3RpdmF0aW5nIHRoZQ0KPiJtaWRkbGUgcGF0Y2gi IG1lbnRpb25lZCBhYm92ZSwgdG93YXJkcyB0aGUgYmVnaW5uaW5nIG9mIHRoZSB0ZWNobmljYWwN Cj4obm9uLWV4YW1wbGUpIHBvcnRpb24gb2YgdGhlIGRvY3VtZW50Lg0KPg0KPkZvciBhIGNvbnN0 cnVjdGlvbiBhcyB3ZWFrbHkgc3RydWN0dXJlZCBhcyB0aGVzZSBhZG1pbmlzdHJhdGl2ZSB0YWdz LA0KPnByZXZlbnRpbmcgYW55IGludGVybmFsIHN0cnVjdHVyZSBvciBkZXBlbmRlbmNpZXMgYmV0 d2VlbiB0YWdzIChhcyB0aGlzDQo+ZG9jdW1lbnQgYXR0ZW1wdHMgdG8gZG8pIHNlZW1zIGNvcnJl Y3QuICBIb3dldmVyLCB0aGlzIHNlbnRpbWVudCBzZWVtcyB0bw0KPmJlIGV4cHJlc3NlZCBkaWZm ZXJlbnRseSBpbiBzZXZlcmFsIGRpZmZlcmVudCBwbGFjZXMgaW4gdGhlIGRvY3VtZW50LCBhbmQN Cj5pdCB3b3VsZCBiZSBnb29kIHRvIGNvbnNvbGlkYXRlIGFuZCBjb29yZGluYXRlIHRoZW0uICBJ biBwYXJ0aWN1bGFyLA0KPnBhcmFncmFwaCAzIG9mIHNlY3Rpb24gMy4yIGV4cGxpY2l0bHkgc2F5 cyB0aGF0IHRhZyBvcmRlciBoYXMgbm8gbWVhbmluZywNCj5idXQgcGFyYWdyYXBoIDQgaGFzIHRo ZSB3ZWFrZXIgIlNIT1VMRCBiZSBjb25zaWRlcmVkIGFuIHVub3JkZXJlZCBsaXN0Ii4NCj4oVGhl IHdvcmQgInNldCIgbWlnaHQgYmUgYXBwcm9wcmlhdGUgaGVyZS4pDQo+DQo+UGFyYWdyYXBoIDcg b2Ygc2VjdGlvbiAzLjIgc2VlbXMgdG8gYmUgdHJ5aW5nIHRvIHNheSB0aGF0IHRoZQ0KPmFkbWlu aXN0cmF0aXZlIHRhZ3MgbXVzdCBpbmRpY2F0ZSBpbmhlcmVudCBvciBhZG1pbmlzdHJhdGl2ZWx5 IGNvbmZpZ3VyZWQNCj5wcm9wZXJ0aWVzIG9mIGEgbm9kZSBhbmQgbXVzdCBub3QgYmUgdXNlZCB0 byBjb252ZXkgYXR0cmlidXRlcyBvZiB0aGUNCj5yb3V0aW5nIHRvcG9sb2d5LiAgKFRoZSB3b3Jk ICJ0aWUiIHNlZW1zIGluc3VmZmljaWVudGx5IGNsZWFyLikNCj4NCj5NYW55IChidXQgbm90IGFs bCkgb2YgdGhlIGFjcm9ueW1zL2FiYnJldmlhdGlvbnMgc2hvdWxkIGJlIGV4cGFuZGVkIGF0DQo+ Zmlyc3QgdXNlIC0tIHRoZSBvbmVzIG1hcmtlZCB3aXRoIGEgJyonIGF0DQo+aHR0cHM6Ly93d3cu cmZjLWVkaXRvci5vcmcvbWF0ZXJpYWxzL2FiYnJldi5leHBhbnNpb24udHh0IGFyZSBhc3N1bWVk IHRvDQo+YmUgY29tbW9uIGtub3dsZWRnZSBhbmQgZG8gbm90IG5lZWQgZXhwYW5zaW9uLiAgT3Ro ZXIgdGhpbmdzLCBsaWtlIHRyYWZmaWMNCj5lbmdpbmVlcmluZywgcm91dGVyIGluZm9ybWF0aW9u LCBsaW5rIHN0YXRlbWVudCBhZHZlcnRpc2VtZW50LCBhdXRvbm9tb3VzDQo+c3lzdGVtLCBldGMu LCBzaG91bGQgYmUgd3JpdHRlbiBvdXQgaW4gZnVsbCBhdCB0aGVpciBmaXJzdCB1c2UsIHdpdGgg dGhlDQo+YWJicmV2aWF0ZWQgdmVyc2lvbiBpbiBwYXJlbnRoZXNlcyBhZnRlcndhcmRzLg0KPg0K PlRoZSBmaXJzdCBwYXJhZ3JhcGggb2Ygc2VjdGlvbiAxIGNvbnRhaW5zIGEgbGlzdCBvZiBwb3Rl bnRpYWwNCj5hcHBsaWNhdGlvbnM7IHBsZWFzZSB1c2Ugc29tZSBYTUwgbWFya3VwIHRvIHByZXNl cnZlIHRoZSBsaXN0IHN0cnVjdHVyZSBpbg0KPnRoZSByZW5kZXJlZCBkb2N1bWVudC4NCj4NCj5Q bGFzZSBnaXZlIGFuIGluZm9ybWF0aXZlIHJlZmVyZW5jZSBmb3IgTG9vcCBGcmVlIEFsdGVybmF0 ZSBiYWNrdXANCj5zZWxlY3Rpb24gYXQgaXRzIGZpcnN0IGFwcGVhcmFuY2UuDQo+DQo+VGhlIGRp dmlkZXIgYmV0d2VlbiB0aGUgdHlwZSBhbmQgbGVuZ3RoIGZpZWxkcyBpbiBGaWd1cmUgMSBpcyBw bGFjZWQgb25lDQo+Yml0IHRvIHRoZSBsZWZ0IG9mIHRoZSBjb3JyZWN0IGRpdmlzaW9uIGZvciB0 d28gMTYtYml0IGZpZWxkcy4gIChJbiBtYW55DQo+Y2FzZXMgdGhlIHBvc2l0aW9uIGluZGljYXRv cnMgYWJvdmUgdGhlIGRpYWdyYW0gYXJlIG9mZnNldCBieSBvbmUgc3BhY2Ugc28NCj50aGV5IGxh bmQgb3ZlciB0aGUgJy0ncyBpbnN0ZWFkIG9mIHRoZSAnKydzLCBidXQgdGhlcmUgaXMgc29tZSBh cmd1bWVudA0KPmZvciBwdXR0aW5nIHRoZW0gaW4gdGhlaXIgY3VycmVudCBsb2NhdGlvbiwgYXMg d2VsbC4pDQo+DQo+SW4gdGhlIHNldmVudGggcGFyYWdyYXBoIG9mIHNlY3Rpb24gMy4yLCBJIHRo aW5rIGl0IHdvdWxkIGJlIGZpbmUgdG8ganVzdA0KPnJlbW92ZSB0aGUgImJ1dCBub3QgbGltaXRl ZCB0byIgY2xhdXNlLCB3aGljaCBpcyBub3QgcXVpdGUgY29ycmVjdCBncmFtbWFyDQo+YW5kIGlz IG5vdCByZWFsbHkgbmVlZGVkLg0KPg0KPlRoZSBsYXN0IHBhcmFncmFwaCBvZiBzZWN0aW9uIDMu MiBjb3VsZCBwcm9iYWJseSBiZSB3cml0dGVuIG1vcmUgY2xlYXJseS4NCj5JbiBwYXJ0aWN1bGFy LCAiaW4gYW55IGluc3RhbmNlIG9mIHRoZSBSSS1MU0EiIGlzIG5vdCBlbnRpcmVseSBjbGVhciB0 byBtZQ0KPihidXQgdGhlbiBhZ2FpbiwgSSBkb24ndCByZWFsbHkgdW5kZXJzdGFuZCBob3cgTFNB cyBub3JtYWxseSB3b3JrKS4gIElzIGl0DQo+ZW5vdWdoIHRvIGp1c3Qgc2F5IHRoYXQgaW1wbGVt ZW50YXRpb25zIE1VU1QgZGV0ZWN0IHdoZW4gdGhlDQo+YWRtaW5pc3RyYXRpdmUgdGFncyBhc3Nv Y2lhdGVkIHdpdGggYSBnaXZlbiBub2RlIGNoYW5nZSwgYW5kIHVwZGF0ZSB0aGVpcg0KPnN0YXRl IGFjY29yZGluZ2x5Pw0KPg0KPkluIHNlY3Rpb24gNC41LCBJIGRvIG5vdCBzZWUgdGhhdCB0aGUg Y29uc3RyYWludCAiVHJhZmZpYyBmcm9tIEEgbm9kZXMgdG8NCj5JIG5vZGVzIG11c3Qgbm90IGdv IHRocm91Z2ggUiBhbmQgVCBub2RlcyIgY2FuIGJlIHNhdGlzZmllZCBmb3IgdGhlDQo+bGVmdG1v c3QgcGFpciBvZiBBIG5vZGVzLg0KPg0KPkkgYW0gYWxzbyBhdHRhY2hpbmcgYSBkaWZmIHRvIHRo ZSB4bWwgc291cmNlcyB3aXRoIHNvbWUgZ3JhbW1hciBmaXhlcyBub3QNCj53b3J0aCBlbnVtZXJh dGluZyBleHBsaWNpdGx5Lg0KPg0KPi1CZW4gS2FkdWsNCg0K From nobody Sat Oct 10 23:05:10 2015 Return-Path: X-Original-To: secdir@ietfa.amsl.com Delivered-To: secdir@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 4657F1A86E3; Sat, 10 Oct 2015 23:05:08 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.999 X-Spam-Level: X-Spam-Status: No, score=-1.999 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, SPF_PASS=-0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 4OVPYG3z40gU; Sat, 10 Oct 2015 23:05:06 -0700 (PDT) Received: from mail-ob0-x22b.google.com (mail-ob0-x22b.google.com [IPv6:2607:f8b0:4003:c01::22b]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 3FC4E1A86E2; Sat, 10 Oct 2015 23:05:06 -0700 (PDT) Received: by obcor6 with SMTP id or6so5252503obc.3; Sat, 10 Oct 2015 23:05:05 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:date:message-id:subject:from:to:content-type; bh=ZMoqaZtxeIIpAtDOJ6KXW9ckHZsUWS/qthVZfqk8kLI=; b=GlftrNwTpgCuM6lZoZb/SMHAnya5OgDliQ+u9ojEGMDf8zD8wMvsmg8efSchXIhipM +UDiG5oscH0V6/8rmFBCVR0LG26wEMGOWPdcGCQLbANtOCu3fGzKZFmxPKbvT5USXG9r qWPP48cwrBQMHp/XmDOIz4SQtBhjezG50B9Idrlz4I2hVfmbSyyvfCObd2pDjRttuKoY apsosvFMs5yWLtwcHLyoRe3K5bpf0HX2SLZSWsrH2nR8doVGoNoDtCSgTNvw1xmUwZU9 bOzX437p/pNP2cexvYj9OPzXOmNqP40gFPTtbSHYgamfSAhGouhOpU5PDLAd7weWh1zw SEvw== MIME-Version: 1.0 X-Received: by 10.182.29.73 with SMTP id i9mr12501089obh.59.1444543505591; Sat, 10 Oct 2015 23:05:05 -0700 (PDT) Received: by 10.182.109.33 with HTTP; Sat, 10 Oct 2015 23:05:05 -0700 (PDT) Date: Sat, 10 Oct 2015 23:05:05 -0700 Message-ID: From: Radia Perlman To: "secdir@ietf.org" , The IESG , draft-ietf-pals-mpls-tp-mac-wd.all@tools.ietf.org Content-Type: multipart/alternative; boundary=001a11c2989e8373f40521cdfe88 Archived-At: Subject: [secdir] Secdir review of draft-ietf-pals-mpls-tp-mac-wd-02 X-BeenThere: secdir@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: Security Area Directorate List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 11 Oct 2015 06:05:08 -0000 --001a11c2989e8373f40521cdfe88 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: quoted-printable I have reviewed this document as part of the security directorate's ongoing effort to review all IETF documents being processed by the IESG. These comments were written primarily for the benefit of the security area directors. Document editors and WG chairs should treat these comments just like any other last call comments. This document proposes a new subtype to a Pseudo-Wire Operations, Administration, and Maintenance (PW OAM) Message for the purpose of withdrawing learned MAC addresses when those addresses cease being accessible. Label Distribution Protocol (LDP) provides this functionality for dynamically created pseudo-wires. This RFC defines a mechanism for doing so in the case of statically provisioned pseudo-wires. The security considerations section of this document says =E2=80=9CThe secu= rity measures described in [RFC4447], [RFC5085], and [RFC6073] are adequate for the proposed mechanism.=E2=80=9D That may well be true, but the mechanisms = in those documents are based on address reachability only (rather than cryptographic mechanisms) and therefore assume a closed network with security enforced by filtering at access points. Forging messages of this protocol could cause significant denial of service opportunities for an attacker. Non-security issues: On page 5, figure 1, TLV length is an 8 bit field defined as =E2=80=9Cthe t= otal length of all TLVs in the message=E2=80=9D. It does not specify the units, = which I assume come from some other spec. If this is a length in bytes, 255 bytes seems like an exceptionally small limit for this length. If I=E2=80=99m reading this correctly, this protocol seems to be a lot less resilient to lost and reordered packets than it might be. In figure 1, the use of an =E2=80=98R=E2=80=99 bit to reset the sequence numbers seems dange= rous if messages can be delivered out of order. Also, if all copies of a message sent with the =E2=80=98R=E2=80=99 bit are lost, all subsequent messages will also be = lost. On page 6, section 4.1, paragraph 3 says that if additional MACs need to be withdrawn before a previous withdraw message has been acknowledged, retransmissions of the old message will cease and the new message will be transmitted. It does not say whether the new message should combine the MACs from the old message or not. If not, the probability of the MACs in the old message being lost is increased. The spec should say one way or the other. Nits: The spec should be reviewed to assure that the words "withdraw" and "withdrawal" are used consistently. I couldn't discern what the pattern was supposed to be. On page 2, "withdrawl" should be replaced with one or the other. P3: "loss of MAC withdraw signal" -> "loss of a MAC withdraw signal" P3: "but do not assure" -> "but does not assure" P4: "plackets" -> "packets" P7: "acknowledgement is received" -> "acknowledgement is received." (need period end of sentence) P7: "described in [RFC4385]" -> "described in [RFC4385]." (add period end of sentence) P7: "Security Consideration" -> "Security Considerations" --001a11c2989e8373f40521cdfe88 Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: quoted-printable
I have reviewed this docu= ment as part of the security directorate's ongoing effort to review all= IETF documents being processed by the IESG. These comments were written pr= imarily for the benefit of the security area directors. Document editors an= d WG chairs should treat these comments just like any other last call comme= nts.

This document proposes a new subtype to a Ps= eudo-Wire Operations, Administration, and Maintenance (PW OAM) Message for = the purpose of withdrawing learned MAC addresses when those addresses cease= being accessible. Label Distribution Protocol (LDP) provides this function= ality for dynamically created pseudo-wires. This RFC defines a mechanism fo= r doing so in the case of statically provisioned pseudo-wires.

The security considerations section of this document says =E2= =80=9CThe security measures described in [RFC4447], [RFC5085], and [RFC6073= ] are adequate for the proposed mechanism.=E2=80=9D That may well be true, = but the mechanisms in those documents are based on address reachability onl= y (rather than cryptographic mechanisms) and therefore assume a closed netw= ork with security enforced by filtering at access points. Forging messages = of this protocol could cause significant denial of service opportunities fo= r an attacker.

Non-security issues:

On page 5, figure 1, TLV length is an 8 bit field defined as = =E2=80=9Cthe total length of all TLVs in the message=E2=80=9D. It does not = specify the units, which I assume come from some other spec. If this is a l= ength in bytes, 255 bytes seems like an exceptionally small limit for this = length.

If I=E2=80=99m reading this correctly, th= is protocol seems to be a lot less resilient to lost and reordered packets = than it might be. In figure 1, the use of an =E2=80=98R=E2=80=99 bit to res= et the sequence numbers seems dangerous if messages can be delivered out of= order. Also, if all copies of a message sent with the =E2=80=98R=E2=80=99 = bit are lost, all subsequent messages will also be lost.

On page 6, section 4.1, paragraph 3 says that if additional MACs ne= ed to be withdrawn before a previous withdraw message has been acknowledged= , retransmissions of the old message will cease and the new message will be= transmitted. It does not say whether the new message should combine the MA= Cs from the old message or not. If not, the probability of the MACs in the = old message being lost is increased. The spec should say one way or the oth= er.

Nits:
The spec shou= ld be reviewed to assure that the words "withdraw" and "with= drawal" are used consistently. I couldn't discern what the pattern= was supposed to be. On page 2, "withdrawl" should be replaced wi= th one or the other.

P3: "loss of MAC withdr= aw signal" -> "loss of a MAC withdraw signal"
P3: "but do= not assure" -> "but does not assure"
P4: "plackets"= -> "packets"
P7: "acknowledgement is received" -> &qu= ot;acknowledgement is received." =C2=A0(need period end of sentence)
P7: &q= uot;described in [RFC4385]" -> "described in [RFC4385]." = (add period end of sentence)
P7: "Security Consideration" -> "= Security Considerations"
--001a11c2989e8373f40521cdfe88-- From nobody Sun Oct 11 03:13:36 2015 Return-Path: X-Original-To: secdir@ietfa.amsl.com Delivered-To: secdir@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C90831A7008; Sun, 11 Oct 2015 03:13:33 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2 X-Spam-Level: X-Spam-Status: No, score=-2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, SPF_PASS=-0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Http8-JWB8_9; Sun, 11 Oct 2015 03:13:32 -0700 (PDT) Received: from mail-wi0-x22f.google.com (mail-wi0-x22f.google.com [IPv6:2a00:1450:400c:c05::22f]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id F3ADF1A7004; Sun, 11 Oct 2015 03:13:31 -0700 (PDT) Received: by wiclk2 with SMTP id lk2so118964299wic.0; Sun, 11 Oct 2015 03:13:30 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=from:content-type:content-transfer-encoding:subject:message-id:date :to:mime-version; bh=qZ8vzbOoPGod1lGplF3bMElf6nJQuX45qdl5UEXlVI8=; b=qpdcLak6pEVgC7UQP/hebCua4PfeTC3vH9KOUgNEPd7TnrKeS077iaCWcj34AF70uC yA197DUM4LVVYX9kzQ0He8e0gV6JD7OHLphQ9rY/RItPxox5/10NBnIQPfaMuqCi1FTR nFQ83vLotzVclnVZ1cZm3aWpMCenG3YQi5L4JJe+QBoIq/K04DMChzl5AQni0CbLHqwE xh13oro7M5U6zO0rvGpqDjv6ww61qXeVe3sggwp89tZATpVa/Alk43jYDdNLy6EVIzpq 563ipkohR5EIvEWqpUohNLIk2zDi3xQTfKMtmP+EWo0Fl+hzNpBazOzr8Ay0zFToX9Y4 ytlA== X-Received: by 10.194.123.168 with SMTP id mb8mr12235680wjb.108.1444558410596; Sun, 11 Oct 2015 03:13:30 -0700 (PDT) Received: from [192.168.1.12] ([46.120.13.132]) by smtp.gmail.com with ESMTPSA id fv5sm6279473wic.7.2015.10.11.03.13.28 (version=TLSv1 cipher=ECDHE-RSA-RC4-SHA bits=128/128); Sun, 11 Oct 2015 03:13:29 -0700 (PDT) From: Yoav Nir Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable Message-Id: <90E412D8-0B02-4863-8EB9-D7DC2CD62E44@gmail.com> Date: Sun, 11 Oct 2015 13:13:26 +0300 To: draft-ietf-homenet-hncp.all@tools.ietf.org, The IESG , secdir Mime-Version: 1.0 (Mac OS X Mail 8.2 \(2104\)) X-Mailer: Apple Mail (2.2104) Archived-At: Subject: [secdir] SecDir Review of draft-ietf-homenet-hncp X-BeenThere: secdir@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: Security Area Directorate List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 11 Oct 2015 10:13:33 -0000 Hi I have reviewed this document as part of the security directorate's = ongoing effort to review all IETF documents being processed by the IESG. = These comments were written primarily for the benefit of the security = area directors. Document editors and WG chairs should treat these = comments just like any other last call comments. Summary: This document is ready The document is a profile of the DNCP document that is being progressed = at the same time. Together they form an implementable protocol. The = protocol runs among internal routers within a home network. The document = requires such routers not to forward HNCP messages to leaves, guests, or = to external interfaces.=20 The Security Considerations section addresses the major threat of = mis-classification of interfaces. If an external interface is classified = as internal, hosts outside the home (or at least the home network) would = be able to reconfigure the home network by sending HNCP messages. One = way to mitigate this is by static configuration or the external = interface(s) as well as guest and leaf interfaces. Another is to use the = secure mode on DNCP. The section describes those options adequately. For = some reason the wording suggests that both of these options are = exceptions to the rule: we=E2=80=99d like as little configuration = requirements as possible, and on the other hand the secure mode of DNCP = requires X.509 certificates. I guess in the normal case, such as a = special connection for the external interface on the CPE (say, coaxial = cable or fiber vs Ethernet) it=E2=80=99s easy for the CPE to identify = the external interface, and no further configuration *by the user* is = needed. One threat that is not addressed in the draft is the possibility of a = rogue router within the network (maybe it=E2=80=99s compromised by = malware). It=E2=80=99s fine not to have a mitigation for this, but I = think it should be called out. Yoav= From nobody Mon Oct 12 00:50:38 2015 Return-Path: X-Original-To: secdir@ietfa.amsl.com Delivered-To: secdir@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 34B4E1A6F22; Mon, 12 Oct 2015 00:50:37 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -14.51 X-Spam-Level: X-Spam-Status: No, score=-14.51 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_HI=-5, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id mICwDCCr0mvG; Mon, 12 Oct 2015 00:50:35 -0700 (PDT) Received: from aer-iport-2.cisco.com (aer-iport-2.cisco.com [173.38.203.52]) (using TLSv1 with cipher RC4-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 6FD221A6F38; Mon, 12 Oct 2015 00:50:34 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=6769; q=dns/txt; s=iport; t=1444636234; x=1445845834; h=subject:to:references:from:message-id:date:mime-version: in-reply-to; bh=t3SbzoYl07T9GNPEEDwSzlqYViob5A9Zg1xZwm11U/U=; b=XAF0Oe+PZpiz0KKvWpGwsX4MIJ/xMKDj5O9lfzKdrkYLKJVi6MsmZMUz fXycD2Eo3pFGSrmVjKJjoiE5tbJ7JAsvymmus48WKpk268hRtmJtjp6YK HSndsZoOH9rt8I3OqaMY+g93w0ZNc5QweSprwIjINuFonMQr4N7vkrlkU k=; X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: A0CnAwD1ZRtW/xbLJq1dg3puvgMBDYFaI4Jwggo1SgKBZRQBAQEBAQEBgQqEJwEBBHgRCyEWDwkDAgECAUUGAQwIAQEFiCUNvQMBAQEBAQEBAQEBAQEBAQEBAQEBGYZzhH6EOwEBBVKELgWWE4UZiAGBWIc7I45eg28fAQFChAQ8MwEBhiiBQAEBAQ X-IronPort-AV: E=Sophos;i="5.17,671,1437436800"; d="scan'208,217";a="612162071" Received: from aer-iport-nat.cisco.com (HELO aer-core-2.cisco.com) ([173.38.203.22]) by aer-iport-2.cisco.com with ESMTP; 12 Oct 2015 07:50:32 +0000 Received: from [10.60.67.89] (ams-bclaise-8918.cisco.com [10.60.67.89]) by aer-core-2.cisco.com (8.14.5/8.14.5) with ESMTP id t9C7oVer016326; Mon, 12 Oct 2015 07:50:31 GMT To: Simon Josefsson , iesg@ietf.org, secdir@ietf.org, draft-ietf-netconf-call-home.all@tools.ietf.org, NETCONF References: <8737xnp0rm.fsf@latte.josefsson.org> From: Benoit Claise Message-ID: <561B663C.7080408@cisco.com> Date: Mon, 12 Oct 2015 09:50:20 +0200 User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:38.0) Gecko/20100101 Thunderbird/38.3.0 MIME-Version: 1.0 In-Reply-To: <8737xnp0rm.fsf@latte.josefsson.org> Content-Type: multipart/alternative; boundary="------------030800050004050509040603" Archived-At: Subject: Re: [secdir] review of draft-ietf-netconf-call-home-11 X-BeenThere: secdir@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: Security Area Directorate List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 12 Oct 2015 07:50:37 -0000 This is a multi-part message in MIME format. --------------030800050004050509040603 Content-Type: text/plain; charset=windows-1252; format=flowed Content-Transfer-Encoding: 7bit Hi Simon, Thanks for your review. One comment below. > Hi. > > I have reviewed this document as part of the security directorate's > ongoing effort to review all IETF documents being processed by the IESG. > These comments were written primarily for the benefit of the security > area directors. Document editors and WG chairs should treat these > comments just like any other last call comments. > > I believe the document is ready. > > One main security concern is the reversal of roles that this document > introduce, but letting TCP clients act as TLS/SSH servers, and vice > versa, is not unheard of. As long as proper peer authentication is > performed, and other parts of the security protocols are properly > performed, I see no fundamental problem with this. I'm sure some > implementations will need to be tweaked to deal with this, and > terminology might confusing at times. The 'Security Considerations' > section does a good job discussing this, and some other issues too. > > Two minor questions: > > 1) Are non-certificate-based TLS out of scope for NETCONF/RESTCONF? I > see no discussion of it in this draft, and text in the document > implicitly assumes host keys (SSH) or certificates (TLS) are used. > Think about TLS-PSK for example, which seems like a relevant idea for > embedded devices. This may not be the document to adress this, but if > there is work towards that goal already, it might be useful to align > this document with that. > > 2) Section 2 says 'The term "NETCONF/RESTCONF client" can refer to the > [RFC6241], Section 1.1 "client".'. Shouldn't this say the term may > refer to a RESTCONF client and reference draft-ietf-netconf-restconf? > Or is that not intentional? The use of the word 'can' make this text > vague to me. The previous section (1.5) says that 'NETCONF/RESTCONF' is > an abbrevation for 'the NETCONF or the RESTCONF'. The same comment > applies to section 3. Maybe this is a misunderstanding on my side, but > the text confused me so it may be useful to resolve. I mentioned this point in my AD review (http://www.ietf.org/mail-archive/web/netconf/current/msg10535.html). I now realize that I made a typo in my email: NETCONF/RESTCONF client" _can refers_ to the RFC 6241 section 1.1 "client" This should read: "NETCONF/RESTCONF client" refers to the RFC 6241 section 1.1 "client" Ditto for NETCONF/RESTCONF server. This takes care of the confusing "can" word. Thanks for spotting that. Regarding the draft-ietf-netconf-restconf reference now. https://tools.ietf.org/html/draft-ietf-netconf-restconf-07#section-1.4.1 refers to RFC 6241 for the client. So I believe that we're good with a single reference to RFC 6241 in this draft. Regards, Benoit > > Thanks, > /Simon --------------030800050004050509040603 Content-Type: text/html; charset=windows-1252 Content-Transfer-Encoding: 8bit
Hi Simon,

Thanks for your review.
One comment below.
Hi.

I have reviewed this document as part of the security directorate's
ongoing effort to review all IETF documents being processed by the IESG.
These comments were written primarily for the benefit of the security
area directors.  Document editors and WG chairs should treat these
comments just like any other last call comments.

I believe the document is ready.

One main security concern is the reversal of roles that this document
introduce, but letting TCP clients act as TLS/SSH servers, and vice
versa, is not unheard of.  As long as proper peer authentication is
performed, and other parts of the security protocols are properly
performed, I see no fundamental problem with this.  I'm sure some
implementations will need to be tweaked to deal with this, and
terminology might confusing at times.  The 'Security Considerations'
section does a good job discussing this, and some other issues too.

Two minor questions:

1) Are non-certificate-based TLS out of scope for NETCONF/RESTCONF?  I
see no discussion of it in this draft, and text in the document
implicitly assumes host keys (SSH) or certificates (TLS) are used.
Think about TLS-PSK for example, which seems like a relevant idea for
embedded devices.  This may not be the document to adress this, but if
there is work towards that goal already, it might be useful to align
this document with that.

2) Section 2 says 'The term "NETCONF/RESTCONF client" can refer to the
[RFC6241], Section 1.1 "client".'.  Shouldn't this say the term may
refer to a RESTCONF client and reference draft-ietf-netconf-restconf?
Or is that not intentional?  The use of the word 'can' make this text
vague to me.  The previous section (1.5) says that 'NETCONF/RESTCONF' is
an abbrevation for 'the NETCONF or the RESTCONF'.  The same comment
applies to section 3.  Maybe this is a misunderstanding on my side, but
the text confused me so it may be useful to resolve.
I mentioned this point in my AD review (http://www.ietf.org/mail-archive/web/netconf/current/msg10535.html).
I now realize that I made a typo in my email: NETCONF/RESTCONF client" can refers to the RFC 6241 section 1.1 "client"
This should read: "NETCONF/RESTCONF client" refers to the RFC 6241 section 1.1 "client"
Ditto for NETCONF/RESTCONF server.
This takes care of the confusing "can" word. Thanks for spotting that.

Regarding the draft-ietf-netconf-restconf reference now.
https://tools.ietf.org/html/draft-ietf-netconf-restconf-07#section-1.4.1 refers to RFC 6241 for the client.
So I believe that we're good with a single reference to RFC 6241 in this draft.

Regards, Benoit

Thanks,
/Simon

--------------030800050004050509040603-- From nobody Mon Oct 12 05:48:34 2015 Return-Path: X-Original-To: secdir@ietfa.amsl.com Delivered-To: secdir@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E68961B2A45; Mon, 12 Oct 2015 05:48:32 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.999 X-Spam-Level: X-Spam-Status: No, score=-1.999 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, SPF_PASS=-0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id NcBKgEkb1lml; Mon, 12 Oct 2015 05:48:31 -0700 (PDT) Received: from mail-oi0-x232.google.com (mail-oi0-x232.google.com [IPv6:2607:f8b0:4003:c06::232]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 28A8A1B2A44; Mon, 12 Oct 2015 05:48:31 -0700 (PDT) Received: by oiak8 with SMTP id k8so60518659oia.1; Mon, 12 Oct 2015 05:48:30 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=to:from:subject:message-id:date:user-agent:mime-version :content-type; bh=QScWDLkDN7vWwqQ3HkPVj0aoREJvA9HTXCpACcuT3sw=; b=wRCcAfyxGTFUtZ0S1diE1sSyYe7Ur0cxm61iMDAfwzF6M279kNezHE7q2d6QJYSnPx wphjZA/vApgHozRPnc6HJEhY9p8v0a14UP46hs0291KLHwn3J3ejwouocEO/bSG7Ba28 ZqcZVbpPZTkntd5gGytPkFF/Otl5V/1fjHN5eUSiDA8Ab8PnPxuwM5SxTBTKtWA9s7GG 63jOb0opEd8RzBS9P+dNTrUk+q1GxFqzMR7NRAp2uShM9WTNebR+yNocq7PUZ0CIl5Dy 1tWoeNwCoZlWMqS8fPHLlKu8C9s0LKZNkirh2Qo6ubWhmrI1P1z1nUOcp+xtewNT3IDt a47Q== X-Received: by 10.202.88.69 with SMTP id m66mr13581722oib.99.1444654110436; Mon, 12 Oct 2015 05:48:30 -0700 (PDT) Received: from Chriss-MacBook-Air.local ([216.201.230.154]) by smtp.googlemail.com with ESMTPSA id b11sm5593002oih.13.2015.10.12.05.48.29 (version=TLSv1.2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Mon, 12 Oct 2015 05:48:29 -0700 (PDT) To: "iesg@ietf.org" , "secdir@ietf.org" , draft-ietf-ppsp-base-tracker-protocol.all@tools.ietf.org From: Chris Lonvick Message-ID: <561BAC1C.1040107@gmail.com> Date: Mon, 12 Oct 2015 07:48:28 -0500 User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.9; rv:38.0) Gecko/20100101 Thunderbird/38.2.0 MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="------------010608080104020102050101" Archived-At: Subject: [secdir] SecDir review of draft-ietf-ppsp-base-tracker-protocol-10 X-BeenThere: secdir@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: Security Area Directorate List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 12 Oct 2015 12:48:33 -0000 This is a multi-part message in MIME format. --------------010608080104020102050101 Content-Type: text/plain; charset=utf-8; format=flowed Content-Transfer-Encoding: 7bit Hi, I have reviewed this document as part of the security directorate's ongoing effort to review all IETF documents being processed by the IESG. These comments were written primarily for the benefit of the security area directors. Document editors and WG chairs should treat these comments just like any other last call comments. Due to a busy time in my life, I've only been able to skim through this. However, the specification is well laid out and seems to be fairly thorough. The Security Considerations section appears to be appropriate as well. Best regards, Chris --------------010608080104020102050101 Content-Type: text/html; charset=utf-8 Content-Transfer-Encoding: 7bit Hi,

I have reviewed this document as part of the security directorate's ongoing effort to review all IETF documents being processed by the IESG. These comments were written primarily for the benefit of the security area directors. Document editors and WG chairs should treat these comments just like any other last call comments.

Due to a busy time in my life, I've only been able to skim through this. However, the specification is well laid out and seems to be fairly thorough. The Security Considerations section appears to be appropriate as well.

Best regards,
Chris
--------------010608080104020102050101-- From nobody Mon Oct 12 07:02:17 2015 Return-Path: X-Original-To: secdir@ietfa.amsl.com Delivered-To: secdir@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 1DD9B1B32A6; Mon, 12 Oct 2015 07:02:16 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2 X-Spam-Level: X-Spam-Status: No, score=-2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, SPF_PASS=-0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 8PRtjlu1SRNF; Mon, 12 Oct 2015 07:02:15 -0700 (PDT) Received: from mail-oi0-x236.google.com (mail-oi0-x236.google.com [IPv6:2607:f8b0:4003:c06::236]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 91FD71B3271; Mon, 12 Oct 2015 07:02:05 -0700 (PDT) Received: by oiar126 with SMTP id r126so36126745oia.0; Mon, 12 Oct 2015 07:02:05 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=from:content-type:content-transfer-encoding:subject:message-id:date :to:mime-version; bh=OvpXsGLQ+RCuOedG/0OweA7gJNlPdmN5av3awz9tTK0=; b=MbnkPuuS1FmSQUaYjihCLVnImJuheixkL9lIzLN8pJIVH/EhUtnpICmvmg+K7vdPRm u7RY8rEmHW9jkEQQlT8P5xU1vjMEXcRBq100gJDui52YLrs8xoOs9Kr9x1mbEgPPUhcG IwQEHyjUkVBQUOdjPf+3rgNfalOEilxef5enpH2aXbMlESO62C7SkOVTp9XYdac9S/qv 0TpTf9JncxWRAcH3TNr8/Nxqq0BR6fn5v2mnEVoXT7vXWtS29KP8dIWqhGb0uFwyNm0R LQAzWhOWxKz29kV8pI2jWNsnWoPsCFSHZBy7Ws0zrIZrdEp6RN31ky99oo1tufCfrBE9 FIzA== X-Received: by 10.202.210.208 with SMTP id j199mr11418308oig.130.1444658524971; Mon, 12 Oct 2015 07:02:04 -0700 (PDT) Received: from macbook-pro.attlocal.net (99-64-100-131.lightspeed.austtx.sbcglobal.net. [99.64.100.131]) by smtp.gmail.com with ESMTPSA id 189sm6479085oid.14.2015.10.12.07.02.03 (version=TLSv1 cipher=ECDHE-RSA-RC4-SHA bits=128/128); Mon, 12 Oct 2015 07:02:03 -0700 (PDT) From: Adam Montville Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable Message-Id: <89DB82B6-28DB-461D-9E19-961BB883F3D5@gmail.com> Date: Mon, 12 Oct 2015 09:02:01 -0500 To: The IESG , secdir@ietf.org, draft-ietf-ace-usecases.all@tools.ietf.org Mime-Version: 1.0 (Mac OS X Mail 8.2 \(2104\)) X-Mailer: Apple Mail (2.2104) Archived-At: Subject: [secdir] SecDir Review of draft-ietf-ace-usecases X-BeenThere: secdir@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: Security Area Directorate List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 12 Oct 2015 14:02:16 -0000 Hi. I have reviewed this document as part of the security directorate's = ongoing effort to review all IETF documents being processed by the IESG. = These comments were written primarily for the benefit of the security = area directors. Document editors and WG chairs should treat these = comments just like any other last call comments. Draft is Ready with nits and one possible issue. This draft seems to provide a good set of use cases collectively = representing the lifecycle of constrained devices up to and including = decommissioning. =20 While the draft does mention =E2=80=9Cconfiguration=E2=80=9D, the = context is more about ensuring flexibility of expressing access = permissions. I=E2=80=99m not sure if this draft requires something like = the following, but it would be beneficial for downstream operational = processes to explicitly support endpoint posture assessment. This could = be done by providing an explicit posture-related interface. Such a = requirement could be alluded to in the Security Considerations section. = On the other hand, this may be something addressed by CoAP and other = drafts. Nits (against -09): Second paragraph of 3.1: You might consider adding a sentence indicating = whether developers are expected to do anything after becoming familiar = with RFC7258. Third paragraph of 3.1: Formatting issue after first sentence - second = sentence is on a new line, or the second sentence was intended to start = a new paragraph. Third paragraph of 3.1: s/attacks/attack/ Fifth paragraph of 3.1: Formatting issue after second sentence - third = sentence is on a new line, or the third sentence was intended to start a = new paragraph. Kind regards, Adam From nobody Mon Oct 12 20:02:18 2015 Return-Path: X-Original-To: secdir@ietfa.amsl.com Delivered-To: secdir@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 2B4401B2F66; Mon, 12 Oct 2015 20:02:16 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: 0.1 X-Spam-Level: X-Spam-Status: No, score=0.1 tagged_above=-999 required=5 tests=[BAYES_50=0.8, RCVD_IN_DNSWL_LOW=-0.7] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 3JYiUhum4X5I; Mon, 12 Oct 2015 20:02:14 -0700 (PDT) Received: from out02.mta.xmission.com (out02.mta.xmission.com [166.70.13.232]) (using TLSv1.2 with cipher DHE-RSA-AES128-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id DF2AD1B2F74; Mon, 12 Oct 2015 20:02:13 -0700 (PDT) Received: from in01.mta.xmission.com ([166.70.13.51]) by out02.mta.xmission.com with esmtps (TLS1.2:DHE_RSA_AES_128_CBC_SHA1:128) (Exim 4.82) (envelope-from ) id 1Zlpqt-0002TA-Cy; Mon, 12 Oct 2015 21:02:11 -0600 Received: from [72.250.219.84] (helo=sylvester.rhmr.com) by in01.mta.xmission.com with esmtpsa (TLS1.0:DHE_RSA_AES_256_CBC_SHA1:256) (Exim 4.82) (envelope-from ) id 1Zlpqm-0006rH-3S; Mon, 12 Oct 2015 21:02:11 -0600 Received: from sylvester.rhmr.com (localhost [127.0.0.1]) by sylvester.rhmr.com (8.14.4/8.14.4/Debian-2ubuntu1) with ESMTP id t9D31X40016244; Mon, 12 Oct 2015 21:01:33 -0600 Received: (from hilarie@localhost) by sylvester.rhmr.com (8.14.4/8.14.4/Submit) id t9D31WfT016243; Mon, 12 Oct 2015 21:01:32 -0600 Date: Mon, 12 Oct 2015 21:01:32 -0600 Message-Id: <201510130301.t9D31WfT016243@sylvester.rhmr.com> From: "Hilarie Orman" To: iesg@ietf.org X-XM-AID: U2FsdGVkX1+tniCCKVqhbkgDbNKHbBtc X-SA-Exim-Connect-IP: 72.250.219.84 X-SA-Exim-Mail-From: hilarie@purplestreak.com X-Spam-DCC: XMission; sa06 1397; Body=1 Fuz1=1 Fuz2=1 X-Spam-Combo: ******;iesg@ietf.org X-Spam-Relay-Country: X-Spam-Timing: total 317 ms - load_scoreonly_sql: 0.04 (0.0%), signal_user_changed: 3.8 (1.2%), b_tie_ro: 2.8 (0.9%), parse: 0.84 (0.3%), extract_message_metadata: 3.7 (1.2%), get_uri_detail_list: 1.20 (0.4%), tests_pri_-1000: 2.4 (0.8%), tests_pri_-950: 1.28 (0.4%), tests_pri_-900: 1.05 (0.3%), tests_pri_-400: 16 (5.2%), check_bayes: 15 (4.8%), b_tokenize: 4.0 (1.2%), b_tok_get_all: 4.5 (1.4%), b_comp_prob: 1.77 (0.6%), b_tok_touch_all: 2.8 (0.9%), b_finish: 0.65 (0.2%), tests_pri_0: 282 (88.9%), tests_pri_500: 3.3 (1.0%), rewrite_mail: 0.00 (0.0%) X-SA-Exim-Version: 4.2.1 (built Wed, 24 Sep 2014 11:00:52 -0600) X-SA-Exim-Scanned: Yes (on in01.mta.xmission.com) Archived-At: Cc: draft-saucez-lisp-impact@tools.ietf.org, secdir@ietf.org Subject: [secdir] review of draft-saucez-lisp-impact-04.txt X-BeenThere: secdir@ietf.org X-Mailman-Version: 2.1.15 Precedence: list Reply-To: Hilarie Orman List-Id: Security Area Directorate List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 13 Oct 2015 03:02:16 -0000 Secdir review of LISP Impact draft-saucez-lisp-impact-04.txt Do not be alarmed. I have reviewed this document as part of the security directorate's ongoing effort to review all IETF documents being processed by the IESG. These comments were written primarily for the benefit of the security area directors. Document editors and WG chairs should treat these comments just like any other last call comments. A new way of handling routing information has been defined in IETF documents about the Locator/Identifier Separation Protocol (LISP). The draft under discussion here elaborates on the possible consequences of widespread use of LISP. The draft punts on security considerations and refers to previous documents describing threats to LISP and how LISP uses cryptography for protecting the integrity of its messages. It seems to me that if the purported impact of LISP is to "scale the Internet", then its impact on security should be a major part of the equation. Will it make routing information more or less vulnerable malicious manipulation? How will it affect the stability of a network that is under constant threat of attack? I don't feel that the draft can achieve its purpose without addressing security. Hilarie PS. I was very disappointed to realize that this was not a draft about my favorite programming language. From nobody Tue Oct 13 10:29:40 2015 Return-Path: X-Original-To: secdir@ietfa.amsl.com Delivered-To: secdir@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 5BD1A1B4BFC; Tue, 13 Oct 2015 10:29:38 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.6 X-Spam-Level: X-Spam-Status: No, score=-2.6 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_LOW=-0.7] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id mOBRGWn9yull; Tue, 13 Oct 2015 10:29:36 -0700 (PDT) Received: from out03.mta.xmission.com (out03.mta.xmission.com [166.70.13.233]) (using TLSv1.2 with cipher DHE-RSA-AES128-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 6B43C1B4BF7; Tue, 13 Oct 2015 10:29:36 -0700 (PDT) Received: from in02.mta.xmission.com ([166.70.13.52]) by out03.mta.xmission.com with esmtps (TLS1.2:DHE_RSA_AES_128_CBC_SHA1:128) (Exim 4.82) (envelope-from ) id 1Zm3OG-0003mT-1s; Tue, 13 Oct 2015 11:29:32 -0600 Received: from [72.250.219.84] (helo=sylvester.rhmr.com) by in02.mta.xmission.com with esmtpsa (TLS1.0:DHE_RSA_AES_256_CBC_SHA1:256) (Exim 4.82) (envelope-from ) id 1Zm3OD-0007X5-SB; Tue, 13 Oct 2015 11:29:31 -0600 Received: from sylvester.rhmr.com (localhost [127.0.0.1]) by sylvester.rhmr.com (8.14.4/8.14.4/Debian-2ubuntu1) with ESMTP id t9DHT04l017054; Tue, 13 Oct 2015 11:29:00 -0600 Received: (from hilarie@localhost) by sylvester.rhmr.com (8.14.4/8.14.4/Submit) id t9DHSxCO017053; Tue, 13 Oct 2015 11:28:59 -0600 Date: Tue, 13 Oct 2015 11:28:59 -0600 Message-Id: <201510131728.t9DHSxCO017053@sylvester.rhmr.com> From: "Hilarie Orman" To: damien.saucez@inria.fr In-reply-to: Yourmessage <5CB43879-FDB2-4C69-9B3C-9830E2E9F8E0@inria.fr> X-XM-AID: U2FsdGVkX18IxeyCUpio8bJ6YeisQP/a X-SA-Exim-Connect-IP: 72.250.219.84 X-SA-Exim-Mail-From: hilarie@purplestreak.com X-Spam-DCC: XMission; sa04 1397; Body=1 Fuz1=1 Fuz2=1 X-Spam-Combo: ***;damien.saucez@inria.fr X-Spam-Relay-Country: X-Spam-Timing: total 1214 ms - load_scoreonly_sql: 0.03 (0.0%), signal_user_changed: 9 (0.7%), b_tie_ro: 6 (0.5%), parse: 0.64 (0.1%), extract_message_metadata: 18 (1.4%), get_uri_detail_list: 2.8 (0.2%), tests_pri_-1000: 3.6 (0.3%), tests_pri_-950: 1.11 (0.1%), tests_pri_-900: 0.91 (0.1%), tests_pri_-400: 19 (1.5%), check_bayes: 18 (1.4%), b_tokenize: 5 (0.4%), b_tok_get_all: 5 (0.5%), b_comp_prob: 2.0 (0.2%), b_tok_touch_all: 2.8 (0.2%), b_finish: 0.63 (0.1%), tests_pri_0: 503 (41.4%), tests_pri_500: 658 (54.2%), poll_dns_idle: 654 (53.9%), rewrite_mail: 0.00 (0.0%) X-SA-Exim-Version: 4.2.1 (built Wed, 24 Sep 2014 11:00:52 -0600) X-SA-Exim-Scanned: Yes (on in02.mta.xmission.com) Archived-At: Cc: draft-saucez-lisp-impact@tools.ietf.org, iesg@ietf.org, secdir@ietf.org Subject: Re: [secdir] review of draft-saucez-lisp-impact-04.txt X-BeenThere: secdir@ietf.org X-Mailman-Version: 2.1.15 Precedence: list Reply-To: Hilarie Orman List-Id: Security Area Directorate List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 13 Oct 2015 17:29:38 -0000 Thanks for pointing out my mistake. I have now reviewed draft-ietf-lisp-impact-04 and the same comments about security apply. Hilarie > From: Damien Saucez > Date: Tue, 13 Oct 2015 08:13:08 +0200 > Thank you for the review. I would have a question regarding the document you reviewed. Did you review th > draft-sauces-lisp-impact-04 > or > draft-ietf-lisp-impact-04 > Thank you, > Damien Saucez > On 13 Oct 2015, at 05:01, Hilarie Orman wrote: > > Secdir review of LISP Impact > > draft-saucez-lisp-impact-04.txt > > > > Do not be alarmed. I have reviewed this document as part of the > > security directorate's ongoing effort to review all IETF documents > > being processed by the IESG. These comments were written primarily > > for the benefit of the security area directors. Document editors and > > WG chairs should treat these comments just like any other last call > > comments. > > > > A new way of handling routing information has been defined in IETF > > documents about the Locator/Identifier Separation Protocol (LISP). > > The draft under discussion here elaborates on the possible > > consequences of widespread use of LISP. > > > > The draft punts on security considerations and refers to previous > > documents describing threats to LISP and how LISP uses cryptography > > for protecting the integrity of its messages. > > > > It seems to me that if the purported impact of LISP is to "scale the > > Internet", then its impact on security should be a major part of the > > equation. Will it make routing information more or less vulnerable > > malicious manipulation? How will it affect the stability of a network > > that is under constant threat of attack? > > > > I don't feel that the draft can achieve its purpose without addressing > > security. > > > > Hilarie > > > > PS. I was very disappointed to realize that this was not a draft > > about my favorite programming language. > > From nobody Tue Oct 13 12:32:35 2015 Return-Path: X-Original-To: secdir@ietfa.amsl.com Delivered-To: secdir@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 510061A8963 for ; Tue, 13 Oct 2015 12:32:34 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.311 X-Spam-Level: X-Spam-Status: No, score=-4.311 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id CIaE02IoeAQZ for ; Tue, 13 Oct 2015 12:32:32 -0700 (PDT) Received: from mercury.scss.tcd.ie (mercury.scss.tcd.ie [134.226.56.6]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 705F61A895E for ; Tue, 13 Oct 2015 12:32:32 -0700 (PDT) Received: from localhost (localhost [127.0.0.1]) by mercury.scss.tcd.ie (Postfix) with ESMTP id DA6C7BE7D for ; Tue, 13 Oct 2015 20:32:30 +0100 (IST) X-Virus-Scanned: Debian amavisd-new at scss.tcd.ie Received: from mercury.scss.tcd.ie ([127.0.0.1]) by localhost (mercury.scss.tcd.ie [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id gtzhSVLWYxyd for ; Tue, 13 Oct 2015 20:32:29 +0100 (IST) Received: from [10.87.48.91] (unknown [86.42.17.32]) by mercury.scss.tcd.ie (Postfix) with ESMTPSA id 4C6B1BE77 for ; Tue, 13 Oct 2015 20:32:29 +0100 (IST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cs.tcd.ie; s=mail; t=1444764749; bh=hGAz30B3+SbhYqCyFLvRjjAubfgZowGEhspBUkimxB8=; h=Subject:References:To:From:Date:In-Reply-To:From; b=1BPJhFCTFUq8lKDalIDTMvvwMTfTgVdSUpEQYfYlYKOEuuHSm6Uh7xqpz7+c+MOha /PrTq99oiLTaL7LHHu6OcHWabpzxoGZ/53cJ9qaccgSvNu0oE7C08I5wLwZpAM2T8g hbyUMX6ChFZa+QAY2d5+p84AflCHYKRQEpIgFi9s= References: <20151013192653.B8E531E5D85@c8a.amsl.com> To: "secdir@ietf.org" From: Stephen Farrell Openpgp: id=D66EA7906F0B897FB2E97D582F3C8736805F8DA2; url= Message-ID: <561D5C4B.9070703@cs.tcd.ie> Date: Tue, 13 Oct 2015 20:32:27 +0100 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:38.0) Gecko/20100101 Thunderbird/38.3.0 MIME-Version: 1.0 In-Reply-To: <20151013192653.B8E531E5D85@c8a.amsl.com> Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 7bit Archived-At: Subject: [secdir] secdir lunch location @ ietf94 X-BeenThere: secdir@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: Security Area Directorate List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 13 Oct 2015 19:32:34 -0000 Hiya, It's a bit early but if I send this now at least I'll know where to find it again:-) S On 13/10/15 20:26, IESG wrote: > Meeting Name: secdir > Assigned Room: Room 419 > Assigned Date: 11/03/2015 From nobody Tue Oct 13 15:27:42 2015 Return-Path: X-Original-To: secdir@ietfa.amsl.com Delivered-To: secdir@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 57DB71A1A8F; Tue, 13 Oct 2015 15:27:39 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.211 X-Spam-Level: X-Spam-Status: No, score=-4.211 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id BPSBeC44uaZw; Tue, 13 Oct 2015 15:27:35 -0700 (PDT) Received: from dmz-mailsec-scanner-7.mit.edu (dmz-mailsec-scanner-7.mit.edu [18.7.68.36]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 7BBE01A0093; Tue, 13 Oct 2015 15:27:32 -0700 (PDT) X-AuditID: 12074424-f79106d000007367-81-561d85522f78 Received: from mailhub-auth-3.mit.edu ( [18.9.21.43]) (using TLS with cipher DHE-RSA-AES256-SHA (256/256 bits)) (Client did not present a certificate) by dmz-mailsec-scanner-7.mit.edu (Symantec Messaging Gateway) with SMTP id 3D.19.29543.3558D165; Tue, 13 Oct 2015 18:27:31 -0400 (EDT) Received: from outgoing.mit.edu (outgoing-auth-1.mit.edu [18.9.28.11]) by mailhub-auth-3.mit.edu (8.13.8/8.9.2) with ESMTP id t9DMRU3t020396; Tue, 13 Oct 2015 18:27:30 -0400 Received: from multics.mit.edu (system-low-sipb.mit.edu [18.187.2.37]) (authenticated bits=56) (User authenticated as kaduk@ATHENA.MIT.EDU) by outgoing.mit.edu (8.13.8/8.12.4) with ESMTP id t9DMRQKo025359 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NOT); Tue, 13 Oct 2015 18:27:29 -0400 Received: (from kaduk@localhost) by multics.mit.edu (8.12.9.20060308) id t9DMRPsR018728; Tue, 13 Oct 2015 18:27:25 -0400 (EDT) Date: Tue, 13 Oct 2015 18:27:25 -0400 (EDT) From: Benjamin Kaduk To: Shraddha Hegde In-Reply-To: Message-ID: References: User-Agent: Alpine 1.10 (GSO 962 2008-03-14) MIME-Version: 1.0 Content-Type: MULTIPART/MIXED; boundary="-559023410-1124849952-1444766453=:26829" Content-ID: X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFtrPKsWRmVeSWpSXmKPExsUixCmqrRvcKhtm8HMSq8Xkt/OYLX6/2sJu MePPRGaLDwsfsljceLSX2YHVY8rvjaweS5b8ZPK43nSVPYA5issmJTUnsyy1SN8ugStj65rN TAUz+xgremeHNDBuLepi5OSQEDCRuHj6DjOELSZx4d56ti5GLg4hgcVMEqdnfWKHcDYyStzc /ZIRwjnEJLF96kIWCKeBUeLZx1UsIP0sAtoSG8/vZQSx2QRUJGa+2cgGYosIaEpcm/iUFaSB WeAeo8T/c91gC4UF7CWOdBwDa+YUSJR4d+EsUJyDg1fAUWLXL3WIBdsYJZZtbGQFqREV0JFY vX8KWD2vgKDEyZlPwGxmgUCJ/682s0HYjhLP9r5gncAoNAtJ2SwkZbOQlEHY6hIHPl1khLC1 Je7fbIOrWb6smXUBI9sqRtmU3Crd3MTMnOLUZN3i5MS8vNQiXXO93MwSvdSU0k2MoHhid1HZ wdh8SOkQowAHoxIPr0OMTJgQa2JZcWXuIUZJDiYlUd7FVbJhQnxJ+SmVGYnFGfFFpTmpxYcY JTiYlUR4jVKBcrwpiZVVqUX5MClpDhYlcd5NP/hChATSE0tSs1NTC1KLYLIyHBxKEryTW4Aa BYtS01Mr0jJzShDSTBycIMN5gIbng9TwFhck5hZnpkPkTzEqSonzLq8FSgiAJDJK8+B6welu N5PqK0ZxoFeEeQ1A2nmAqRKu+xXQYCaQq9mlQAaXJCKkpBoYp/3pLV557IKb/bOb1560xJVP K5phaFZanlmsxbs4I+d+jZVh97NPi7PLGcL3/rj8N7uPd87FxjqOFrO9mmKbOaq4O7UKd5TY 9v08vWX5pLeGUqfEt4j5/dE7MiFmYcnMwvNiikH2temXMxoFIxVer1M58vbNETlnsVi/6iOi W41t+P/P32GnxFKckWioxVxUnAgADxZSClIDAAA= Archived-At: Cc: "draft-ietf-ospf-node-admin-tag.all@ietf.org" , "Acee Lindem \(acee\)" , "iesg@ietf.org" , "secdir@ietf.org" Subject: Re: [secdir] secdir review of draft-ietf-ospf-node-admin-tag-05 X-BeenThere: secdir@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: Security Area Directorate List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 13 Oct 2015 22:27:39 -0000 This message is in MIME format. The first part should be readable text, while the remaining parts are likely unreadable without MIME-aware tools. ---559023410-1124849952-1444766453=:26829 Content-Type: TEXT/PLAIN; charset=UTF-8 Content-Transfer-Encoding: QUOTED-PRINTABLE Content-ID: Thanks, Shraddha and Acee, for helping me find some of the context I was missing. On Sun, 11 Oct 2015, Shraddha Hegde wrote: > > Thanks Ben for detailed review comments.Thanks Acee for chiming-in. > Few more explanations in-line. > > -----Original Message----- > From: Acee Lindem (acee) [mailto:acee@cisco.com] > Sent: Sunday, October 11, 2015 1:04 AM > To: Benjamin Kaduk ; iesg@ietf.org; secdir@ietf.org; draft= -ietf-ospf-node-admin-tag.all@ietf.org > Subject: Re: secdir review of draft-ietf-ospf-node-admin-tag-05 > > Hi Ben, > > As the document shepherd and a long-time OSPF contributor, I=E2=80=99m go= ing to > try and sort out some of your comments. Note that route tagging has been > in use for decades and this document is merely extending the > administrative policies advertisement to the node level. Good to know; I didn't get to look at many updates past the core OSPFv2 spec. > On 10/9/15, 4:52 PM, "Benjamin Kaduk" wrote: > > >I have reviewed this document as part of the security directorate's > >ongoing effort to review all IETF documents being processed by the > >IESG. These comments were written primarily for the benefit of the > >security area directors. Document editors and WG chairs should treat > >these comments just like any other last call comments. > > > >I will preface these comments with a note that my routing background is > >quite weak, and I needed to read RFC 2328 and RFC 4970 to have enough > >context to be able to say much useful about what's going on here; I may > >still be suffering from some misconceptions. > > > >On the whole, this document leaves me feeling unsatisfied; it spends > >maybe three pages talking about the actual new protocol extension and > >then gives four pages of example usage, all the while claiming that the > >actual tag values are only meaningful within a single administrative > >domain/network, are for generic use, and do not require an IANA > >registry. That is, it is trying to walk a middle line between "this > >document allocates a value in the OSPF TLVs registry for site-local > >use, use it as you will" and "this document specifies a complete > >protocol extension for tagging OSPF nodes for traffic engineering, LFA, > >and other purposes". That is a hard middle line to follow, and I am not= sure that this document does so successfully. > >I will not try to reopen the question of whether it would be better to > >take one of the non-middle paths, and continue on the assumption that > >this document will take the middle path. I think there are a few > >things that are missing before this document should be published, and > >that it might be worth considering a more drastic restructuring as well. > > > >It would probably be good to include some text with the reasoning > >behind the choice of the "middle line" -- the current text attempting > >to enforce it, "new OSPF extensions MUST NOT require use of per-node > >administrative tags or define well-known tag values", seems > >unenforcable, as a future RFC updating this one could just remove that r= estriction. > > The intent here is that this TLV is to be solely for locally defined > policies. If there were to be a TLV for well-known tags and policies, > this could be accomplished with a separate OSPF RI TLV. I agree that the > normative text should be softened from =E2=80=9CMUST NOT=E2=80=9D to =E2= =80=9Care not expected > to=E2=80=9D. > > There was a long discussion on the mailing list on whether we > should allow well defined values for the admin tags majority consensus > was that we should not allow any standard values for node admin tags and > in future if such a requirement arises it'll go as new feature in RI TLV > as Acee already mentioned. I am trying to understand why the text need > to be softened when any future standardization would need altogether a > new document and will not require any changes to this document. I suggested that the text be softened because the current statement does not have any practical effect. It's trying to place restrictions on what {the set of future RFCs that update this document} can do, but any document in that set could remove such a restriction and override it at the same time. I think it would be good to have a note in section 2 to the effect that "these administrative tags are solely for use within an administrative domain and are their interpretation is a matter of local policy. It is expected that values will not be portable across administrative domains". I know that this topic is covered later in the document, but having it early would help set the stage for the rest of the document. > >It looks like there's now an -06, but the changes from the -05 are not > >significant. The security considerations in the -05 correctly note > >what are essentially privacy considerations regarding the contents of > >the admin tags. However, it seems like there are also potential > >security considerations on the actual operation of the network that are > >not discussed here, nor in RFC 2328 (OSPFv2) or RFC 5340 (OSPFv3). RFC > >5340's security considerations explicitly disclaims protections against > >compromised, malfunctioning, or misconfigured routers, deferring to RFC > >4593, "Generic Threats to Routing Protocols". I believe that the > >security considerations of this document should address, either > >directly or indirectly, protections against compromised, > >malfunctioning, or misconfigured routers, and additionally protection > >against malicious actors with access to the layer-3 network (and maybe > >lower layers as well). > > > >That probably means mentioning RFC 4593 directly, or maybe just > >pointing out that RFC 5340 does so. There are still additional > >considerations introduced by this document, though; unfortunately, > >because the bulk of the interpretation of the admin tags is left to the > >site administrator, it is hard to give a comprehensive security > >analysis, but the examples and the protocol description itself do give s= ome areas for consideration. > > The document could reference RFC 4593/RFC 6863 and state that > authentication as specified in RFC 7474 or RFC 7166 SHOULD be used in > deployments where attackers have access to the physical networks > included in the OSPF domain are vulnerable. > ok. Updating the Security consideration section Thanks. > > > > >The RI LSAs carrying administrative tags can be at link-, area-, or > >AS-level scope; an administrator assigning tag values and associated > >policies should consider what would happen if a given tag was > >advertised at a different scope than intended. Compliant > >implementations MUST NOT generate the same tag at different scopes, but > >a receiver would need to take some action if it happened, whether due > >to network glitch or malicious action -- what should they do? > > I=E2=80=99m not an author, but this is what I=E2=80=99d recommend: > > The conflicting tag SHOULD not be used and this situation SHOULD be > logged as an error including the tag with conflicting scopes and the > originator(s). > Updated the document with above statement. > > There is a case that must be allowed - the same tag could be received by > an ABR at both the AS scope and the area scope in a stub or NSSA area. > Could you pls elaborate the case. I don't quite understand > why the ABR in a stub/NSSA area would generate or receive RI LSAs with > different scopes.I think it's perfectly valid to flood the AS scoped RI > LSAs into the stub / NSSA area. Acee, I think this is a question for you. > >Another potential issue lies in the "stickiness" of the admin tags -- > >the text "the node administrative tags associated with a node for the > >purpose of any computation or processing SHOULD be a superset of node > >administrative tags from all the TLVs in all instances of the RI LSA > >originated by that node" seems to mean that once a tag is set, it > >cannot > >(easily) be unset. Would force-expiring an LSA be enough to reset the > >tag, or something else? > > Yes - this is standard for any OSPF LSA. However, since the OSPF RI LSA > may include other TLVs or even other tags, a tag could also be withdrawn > by reoriginating the RI LSA without the TLV or with a TLV that doesn=E2= =80=99t > include the withdrawn tag. I may still be confused, but I did not interpret the text in that way. That is, the text about "all instances of the RI LSA originated by that node". (Which I changed to "instances of RI LSAs" in my grammar edits, possibly incorrectly if I'm still confused.) I was interpreting the word "instances" to include historical ones over time, so that even if an RI LSA carrying a particular admin tag was replaced by a different RI LSA for the same advertising router, the old one would still be an instance of that RI LSA. Going back to RFC 2328, I'm not sure what exactly I had in mind in terms of ages and scopes and sequence numbers that would cause this situation, but I somehow had it in my mind that there could be multiple RI LSAs active at the same time that apply to a given node, such as if the admin just added a new RI LSA containing only the admin tag to augment the existing RI LSAs being sent. Is that possible? If there can only be one RI LSA that is "current" for a given node (at a given scope?), then it seems like it would be useful to change the text to explicitly say "all current instances" -- that would have helped me as I read it. > > How disruptive would that be? It would be helpful to see some > >discussion of how a tag would be removed. > > I may of worked on OSPF for too long but this should be obvious to > anyone implementing the draft from the specification. If it's simply a matter of re-issuing the RI LSA (I was not sure when I was writing my review), then I agree it should be obvious. > The below paragraph (from -07 version) is clear on this I hope= =2E > > "When there is a change or removal of an administrative affiliation of a = node, > the node MUST re-originate the RI LSA with the latest set of node admi= nistrative tags. > On the receiver, When there is a change in the node administrative tag= TLV or removal/ > addition of a TLV in any instance of the RI-LSA, implementations MUST > take appropriate measures to update its state according to the > changed set of tags. Exact actions depend on features working with > administrative tags and is outside of scope of this specification." This is definitely improved, but it does not do much to address the issue I had in mind when I was writing my review. However, it seems like that issue is not actually an issue, so no further changes to this text would be needed. > > > >That is particularly easy for an attacker when the null OSPF > >authentication mechanism is in use (how common is that? I saw some > >websites indicating it was the default behavior, at least sometimes). > >I do not see a need to turn this document into "security considerations > >for OSPF authentication", but maybe it is worth mentioning some things: > >the > >md5 scheme seems pretty week at this point (though probably not > >trivially broken), the hmac-sha scheme of RFC 5709 is only from 2009, > >and RFC 7474 (only six months old) points out cases where both are > >susceptible to replay attacks. Just looking at the security > >considerations of this document and the core OSPF v2/v3 specs does not > >convey this to the reader, so I would like to see at least a pointer to > >such considerations. (The stance of RFC 2328 that "all OSPF protocol ex= changes are authenticated" > >seems particularly disingenous given the presence of the null > >authentication scheme.) > > I think both RFC 7474 and RFC 7176 should be referenced. The OSPF > vulnerability to replay attacks to OSPFv2/OSPFv3 routers implementing > these specifications is extremely small and has been reduced as much as > practical. If you are still concerned, I suggest you discuss with Sam > Hartman (also once affiliated with MIT). I am not especially concerned about this attack, I just noticed that there was an RFC about it. Since RFC 7474 was so recent, it made me wonder how widely deployed the security fixes are today. > Security consideration section updated with the reference to > RFC 7474 and 7176. Thanks. > > > >There is also the possibility that an attacker could block delivery of > >an LSA, causing a tag that should be set to not be seen. This seems > >unlikely for wired point-to-point links, but is more plausible in other > >environments, such as radio links. I think I can imagine scenarios > >where this would cause drastic damage to the routing topology. > > The description and mitigation of such a generic threat doesn=E2=80=99t b= elong in a minor (though important) OSPF specification. The effect of block= ing control traffic is never positive ;^). At least OSPF uses reliable floo= ding so it will be retransmitted. > Agree with Acee on this. I had forgotten that OSPF flooding was reliable; I agree this does not need to be explicitly called out in this document, since it's a general routing concern. > >The parenthetical in section 3.2 wherein routers might advertise a > >per-node aministrative tag "without knowing (or even explicitly > >supporting) functionality implied by the tag" seems potentially > >dangerous, since it sounds like the routers in question are lying about > >their capabilities. Would the document suffer harm if the > >parenthetical was removed? > > In my opinion, no harm to remove - misconfiguration is almost always an i= ssue. > It's perfectly valid for a node originate a tag when the node > itself does not Process any tags. I think the sentence needs to be > rephrased. Changing it as below. > > Meaning of the Node administrative tags is generally > opaque to OSPF. Router advertising the per-node > administrative tag (or tags) may be configured to do so > without knowing (or even without supporting processing of) > functionality implied by the tag. I think there is a question about whether this means that the router doesn't need to know what feature the tag number means, or whether it means that the router doesn't need to implement the feature indicated by that tag value. I read this text as being in the second case, but I am interpreting your discussion about this text to mean that you think it is covering the first case. (Yes, there can be tag values that just indicate an administrative grouping and there is no corresponding functionality needed on the router, but there can also be tag values that indicate "the router originating this RI LSA supports accepting targeted LDP sessions" -- a router will cause breakage if it sends such a tag but does not actually support accepting targeted LDP sessions.) Based on this discussion, I think that what the parenthetical is trying to say is that "the router originating the tag may not use that tag in any of its processing decisions" -- is that correct? Changing the word "functionality" to "attributes" would cause me to read the text as being in the first case I described above. (By the way, this paragraph had a lot of changes in my patch for grammar; it might have been easier to apply that patch before making further edits, to reduce the number of merge conflicts. The grammar in the quoted new text has several errors.) > >One reason I am unsatisfied by making the interpretation of the tag > >values specific to an administrative domain is that a misconfigured > >border router might erroneously use tag values from one domain on the > >other side of the border. > > Perhaps the other damage from a router misconfigured in such a fashion > >would dwarf the additional damage from the misinterpreted tags and so > >my concern is invalid; I really can't say. > > Again, I don=E2=80=99t think misconfiguration needs to be covered - "empt= or cavete=E2=80=9D. A misconfigured router is by definition broken. Such misconfiguration can happen either by accident due to operator error, or maliciously, if an attacker has compromised the system. While it may not be necessary to say that a broken router will not pass traffic the way it's supposed to, if a misconfigured router can emit routing protocol messages that affect the state of the network as a whole, not just its local surroundings, that seems like an analysis that is appropriate for the security considerations of a routing protocol document. Now, I don't have a good picture of specific examples of network-wide issues due to the admin tag, but I think there's a large enough probability that it's possible for such a thing to happen that I wanted to mention it in my review comments. Maybe there is not anything worth mentioning about it in the security considerations section, but I don't think that "misconfiguration doesn't need to be covered" addresses the concern I was attempting to raise. > -07 version addresses this issue. > > "Advertisement of tag values for one administrative domain into > another risks misinterpretation of the tag values (if the two domains ha= ve assigned > different meanings to the same values), which may have undesirable and un= anticipated side > effects." Thank you, that helps. > Thanks for the editorial review as well. Speak as WG chair, I appreciate = this. You're welcome! -Ben ---559023410-1124849952-1444766453=:26829-- From nobody Tue Oct 13 15:47:16 2015 Return-Path: X-Original-To: secdir@ietfa.amsl.com Delivered-To: secdir@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 5ECC71A1B89; Tue, 13 Oct 2015 15:47:14 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -14.511 X-Spam-Level: X-Spam-Status: No, score=-14.511 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_HI=-5, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 5UxQ2uHrRFw0; Tue, 13 Oct 2015 15:47:11 -0700 (PDT) Received: from alln-iport-4.cisco.com (alln-iport-4.cisco.com [173.37.142.91]) (using TLSv1 with cipher RC4-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id A40311A1AAD; Tue, 13 Oct 2015 15:47:10 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=25716; q=dns/txt; s=iport; t=1444776430; x=1445986030; h=from:to:cc:subject:date:message-id:references: in-reply-to:content-id:content-transfer-encoding: mime-version; bh=3gw18gSZYkl5FHN+AGyUwMW5gUqQpdtiQJZYWd6KDTE=; b=cKt4K9pY85Z6XnEAct+4hbR9vLvfqokPCm+EnEXi369xBrJJaLHdeQs3 9zBFMmQqRI9UM46BqoB0tmTUrU4tMqVBM+SnTdzfDT/KbC8/1d8nBSYS6 hMybIsvn7YaEh9FyY+uJyLTU1awEqVdNMMLhGvzCRLLpitfitc8VAhEBX 4=; X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: A0DwAQCFiR1W/49dJa1eDoMYgUIGvgwBDYFagxODCQIcgS44FAEBAQEBAQGBCoQmAQEBBCMROgYFDAQCAQgRBAEBAQICIwMCAgIwFAEICAIEAQ0FiC6vHZNHAQEBAQEBAQEBAQEBAQEBAQEBAQEBF4EiilGEYisHBAKCY4FFAQSSLoNoAY0ZgViHXooKhFmDbgEfAQFCggwFARyBFj5xhWuBBgEBAQ X-IronPort-AV: E=Sophos;i="5.17,680,1437436800"; d="scan'208";a="197126880" Received: from rcdn-core-7.cisco.com ([173.37.93.143]) by alln-iport-4.cisco.com with ESMTP; 13 Oct 2015 22:47:09 +0000 Received: from XCH-RCD-011.cisco.com (xch-rcd-011.cisco.com [173.37.102.21]) by rcdn-core-7.cisco.com (8.14.5/8.14.5) with ESMTP id t9DMl933026237 (version=TLSv1/SSLv3 cipher=AES256-SHA bits=256 verify=FAIL); Tue, 13 Oct 2015 22:47:09 GMT Received: from xch-rcd-015.cisco.com (173.37.102.25) by XCH-RCD-011.cisco.com (173.37.102.21) with Microsoft SMTP Server (TLS) id 15.0.1104.5; Tue, 13 Oct 2015 17:46:55 -0500 Received: from xch-rcd-015.cisco.com ([173.37.102.25]) by XCH-RCD-015.cisco.com ([173.37.102.25]) with mapi id 15.00.1104.000; Tue, 13 Oct 2015 17:46:55 -0500 From: "Acee Lindem (acee)" To: Benjamin Kaduk , Shraddha Hegde Thread-Topic: secdir review of draft-ietf-ospf-node-admin-tag-05 Thread-Index: AQHRAtRkZED+3D3sTk6f1e8MGzkzuJ5lMHaAgATWidGAABZXAA== Date: Tue, 13 Oct 2015 22:46:55 +0000 Message-ID: References: In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-ms-exchange-messagesentrepresentingtype: 1 x-ms-exchange-transport-fromentityheader: Hosted x-originating-ip: [10.116.152.199] Content-Type: text/plain; charset="utf-8" Content-ID: <31BEC07D44AB7244B315452AE3C361E2@emea.cisco.com> Content-Transfer-Encoding: base64 MIME-Version: 1.0 Archived-At: Cc: "draft-ietf-ospf-node-admin-tag.all@ietf.org" , "iesg@ietf.org" , "secdir@ietf.org" Subject: Re: [secdir] secdir review of draft-ietf-ospf-node-admin-tag-05 X-BeenThere: secdir@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: Security Area Directorate List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 13 Oct 2015 22:47:14 -0000 U2VlIGlubGluZS4gDQoNCk9uIDEwLzEzLzE1LCA2OjI3IFBNLCAiQmVuamFtaW4gS2FkdWsiIDxr YWR1a0BNSVQuRURVPiB3cm90ZToNCg0KPlRoYW5rcywgU2hyYWRkaGEgYW5kIEFjZWUsIGZvciBo ZWxwaW5nIG1lIGZpbmQgc29tZSBvZiB0aGUgY29udGV4dCBJIHdhcw0KPm1pc3NpbmcuDQo+DQo+ T24gU3VuLCAxMSBPY3QgMjAxNSwgU2hyYWRkaGEgSGVnZGUgd3JvdGU6DQo+DQo+Pg0KPj4gVGhh bmtzIEJlbiBmb3IgZGV0YWlsZWQgcmV2aWV3IGNvbW1lbnRzLlRoYW5rcyBBY2VlIGZvciBjaGlt aW5nLWluLg0KPj4gRmV3IG1vcmUgZXhwbGFuYXRpb25zIGluLWxpbmUuDQo+Pg0KPj4gLS0tLS1P cmlnaW5hbCBNZXNzYWdlLS0tLS0NCj4+IEZyb206IEFjZWUgTGluZGVtIChhY2VlKSBbbWFpbHRv OmFjZWVAY2lzY28uY29tXQ0KPj4gU2VudDogU3VuZGF5LCBPY3RvYmVyIDExLCAyMDE1IDE6MDQg QU0NCj4+IFRvOiBCZW5qYW1pbiBLYWR1ayA8a2FkdWtATUlULkVEVT47IGllc2dAaWV0Zi5vcmc7 IHNlY2RpckBpZXRmLm9yZzsNCj4+ZHJhZnQtaWV0Zi1vc3BmLW5vZGUtYWRtaW4tdGFnLmFsbEBp ZXRmLm9yZw0KPj4gU3ViamVjdDogUmU6IHNlY2RpciByZXZpZXcgb2YgZHJhZnQtaWV0Zi1vc3Bm LW5vZGUtYWRtaW4tdGFnLTA1DQo+Pg0KPj4gSGkgQmVuLA0KPj4NCj4+IEFzIHRoZSBkb2N1bWVu dCBzaGVwaGVyZCBhbmQgYSBsb25nLXRpbWUgT1NQRiBjb250cmlidXRvciwgSeKAmW0gZ29pbmcg dG8NCj4+IHRyeSBhbmQgc29ydCBvdXQgc29tZSBvZiB5b3VyIGNvbW1lbnRzLiBOb3RlIHRoYXQg cm91dGUgdGFnZ2luZyBoYXMgYmVlbg0KPj4gaW4gdXNlIGZvciBkZWNhZGVzIGFuZCB0aGlzIGRv Y3VtZW50IGlzIG1lcmVseSBleHRlbmRpbmcgdGhlDQo+PiBhZG1pbmlzdHJhdGl2ZSBwb2xpY2ll cyBhZHZlcnRpc2VtZW50IHRvIHRoZSBub2RlIGxldmVsLg0KPg0KPkdvb2QgdG8ga25vdzsgSSBk aWRuJ3QgZ2V0IHRvIGxvb2sgYXQgbWFueSB1cGRhdGVzIHBhc3QgdGhlIGNvcmUgT1NQRnYyDQo+ c3BlYy4NCj4NCj4+IE9uIDEwLzkvMTUsIDQ6NTIgUE0sICJCZW5qYW1pbiBLYWR1ayIgPGthZHVr QE1JVC5FRFU+IHdyb3RlOg0KPj4NCj4+ID5JIGhhdmUgcmV2aWV3ZWQgdGhpcyBkb2N1bWVudCBh cyBwYXJ0IG9mIHRoZSBzZWN1cml0eSBkaXJlY3RvcmF0ZSdzDQo+PiA+b25nb2luZyBlZmZvcnQg dG8gcmV2aWV3IGFsbCBJRVRGIGRvY3VtZW50cyBiZWluZyBwcm9jZXNzZWQgYnkgdGhlDQo+PiA+ SUVTRy4gIFRoZXNlIGNvbW1lbnRzIHdlcmUgd3JpdHRlbiBwcmltYXJpbHkgZm9yIHRoZSBiZW5l Zml0IG9mIHRoZQ0KPj4gPnNlY3VyaXR5IGFyZWEgZGlyZWN0b3JzLiAgRG9jdW1lbnQgZWRpdG9y cyBhbmQgV0cgY2hhaXJzIHNob3VsZCB0cmVhdA0KPj4gPnRoZXNlIGNvbW1lbnRzIGp1c3QgbGlr ZSBhbnkgb3RoZXIgbGFzdCBjYWxsIGNvbW1lbnRzLg0KPj4gPg0KPj4gPkkgd2lsbCBwcmVmYWNl IHRoZXNlIGNvbW1lbnRzIHdpdGggYSBub3RlIHRoYXQgbXkgcm91dGluZyBiYWNrZ3JvdW5kIGlz DQo+PiA+cXVpdGUgd2VhaywgYW5kIEkgbmVlZGVkIHRvIHJlYWQgUkZDIDIzMjggYW5kIFJGQyA0 OTcwIHRvIGhhdmUgZW5vdWdoDQo+PiA+Y29udGV4dCB0byBiZSBhYmxlIHRvIHNheSBtdWNoIHVz ZWZ1bCBhYm91dCB3aGF0J3MgZ29pbmcgb24gaGVyZTsgSSBtYXkNCj4+ID5zdGlsbCBiZSBzdWZm ZXJpbmcgZnJvbSBzb21lIG1pc2NvbmNlcHRpb25zLg0KPj4gPg0KPj4gPk9uIHRoZSB3aG9sZSwg dGhpcyBkb2N1bWVudCBsZWF2ZXMgbWUgZmVlbGluZyB1bnNhdGlzZmllZDsgaXQgc3BlbmRzDQo+ PiA+bWF5YmUgdGhyZWUgcGFnZXMgdGFsa2luZyBhYm91dCB0aGUgYWN0dWFsIG5ldyBwcm90b2Nv bCBleHRlbnNpb24gYW5kDQo+PiA+dGhlbiBnaXZlcyBmb3VyIHBhZ2VzIG9mIGV4YW1wbGUgdXNh Z2UsIGFsbCB0aGUgd2hpbGUgY2xhaW1pbmcgdGhhdCB0aGUNCj4+ID5hY3R1YWwgdGFnIHZhbHVl cyBhcmUgb25seSBtZWFuaW5nZnVsIHdpdGhpbiBhIHNpbmdsZSBhZG1pbmlzdHJhdGl2ZQ0KPj4g PmRvbWFpbi9uZXR3b3JrLCBhcmUgZm9yIGdlbmVyaWMgdXNlLCBhbmQgZG8gbm90IHJlcXVpcmUg YW4gSUFOQQ0KPj4gPnJlZ2lzdHJ5LiAgVGhhdCBpcywgaXQgaXMgdHJ5aW5nIHRvIHdhbGsgYSBt aWRkbGUgbGluZSBiZXR3ZWVuICJ0aGlzDQo+PiA+ZG9jdW1lbnQgYWxsb2NhdGVzIGEgdmFsdWUg aW4gdGhlIE9TUEYgVExWcyByZWdpc3RyeSBmb3Igc2l0ZS1sb2NhbA0KPj4gPnVzZSwgdXNlIGl0 IGFzIHlvdSB3aWxsIiBhbmQgInRoaXMgZG9jdW1lbnQgc3BlY2lmaWVzIGEgY29tcGxldGUNCj4+ ID5wcm90b2NvbCBleHRlbnNpb24gZm9yIHRhZ2dpbmcgT1NQRiBub2RlcyBmb3IgdHJhZmZpYyBl bmdpbmVlcmluZywgTEZBLA0KPj4gPmFuZCBvdGhlciBwdXJwb3NlcyIuICBUaGF0IGlzIGEgaGFy ZCBtaWRkbGUgbGluZSB0byBmb2xsb3csIGFuZCBJIGFtDQo+Pm5vdCBzdXJlIHRoYXQgdGhpcyBk b2N1bWVudCBkb2VzIHNvIHN1Y2Nlc3NmdWxseS4NCj4+ID5JIHdpbGwgbm90IHRyeSB0byByZW9w ZW4gdGhlIHF1ZXN0aW9uIG9mIHdoZXRoZXIgaXQgd291bGQgYmUgYmV0dGVyIHRvDQo+PiA+dGFr ZSBvbmUgb2YgdGhlIG5vbi1taWRkbGUgcGF0aHMsIGFuZCBjb250aW51ZSBvbiB0aGUgYXNzdW1w dGlvbiB0aGF0DQo+PiA+dGhpcyBkb2N1bWVudCB3aWxsIHRha2UgdGhlIG1pZGRsZSBwYXRoLiAg SSB0aGluayB0aGVyZSBhcmUgYSBmZXcNCj4+ID50aGluZ3MgdGhhdCBhcmUgbWlzc2luZyBiZWZv cmUgdGhpcyBkb2N1bWVudCBzaG91bGQgYmUgcHVibGlzaGVkLCBhbmQNCj4+ID50aGF0IGl0IG1p Z2h0IGJlIHdvcnRoIGNvbnNpZGVyaW5nIGEgbW9yZSBkcmFzdGljIHJlc3RydWN0dXJpbmcgYXMN Cj4+d2VsbC4NCj4+ID4NCj4+ID5JdCB3b3VsZCBwcm9iYWJseSBiZSBnb29kIHRvIGluY2x1ZGUg c29tZSB0ZXh0IHdpdGggdGhlIHJlYXNvbmluZw0KPj4gPmJlaGluZCB0aGUgY2hvaWNlIG9mIHRo ZSAibWlkZGxlIGxpbmUiIC0tIHRoZSBjdXJyZW50IHRleHQgYXR0ZW1wdGluZw0KPj4gPnRvIGVu Zm9yY2UgaXQsICJuZXcgT1NQRiBleHRlbnNpb25zIE1VU1QgTk9UIHJlcXVpcmUgdXNlIG9mIHBl ci1ub2RlDQo+PiA+YWRtaW5pc3RyYXRpdmUgdGFncyBvciBkZWZpbmUgd2VsbC1rbm93biB0YWcg dmFsdWVzIiwgc2VlbXMNCj4+ID51bmVuZm9yY2FibGUsIGFzIGEgZnV0dXJlIFJGQyB1cGRhdGlu ZyB0aGlzIG9uZSBjb3VsZCBqdXN0IHJlbW92ZSB0aGF0DQo+PnJlc3RyaWN0aW9uLg0KPj4NCj4+ IFRoZSBpbnRlbnQgaGVyZSBpcyB0aGF0IHRoaXMgVExWIGlzIHRvIGJlIHNvbGVseSBmb3IgbG9j YWxseSBkZWZpbmVkDQo+PiBwb2xpY2llcy4gSWYgdGhlcmUgd2VyZSB0byBiZSBhIFRMViBmb3Ig d2VsbC1rbm93biB0YWdzIGFuZCBwb2xpY2llcywNCj4+IHRoaXMgY291bGQgYmUgYWNjb21wbGlz aGVkIHdpdGggYSBzZXBhcmF0ZSBPU1BGIFJJIFRMVi4gSSBhZ3JlZSB0aGF0IHRoZQ0KPj4gbm9y bWF0aXZlIHRleHQgc2hvdWxkIGJlIHNvZnRlbmVkIGZyb20g4oCcTVVTVCBOT1TigJ0gdG8g4oCc YXJlIG5vdCBleHBlY3RlZA0KPj4gdG/igJ0uDQo+Pg0KPj4gPFNocmFkZGhhPiBUaGVyZSB3YXMg YSBsb25nIGRpc2N1c3Npb24gb24gdGhlIG1haWxpbmcgbGlzdCBvbiB3aGV0aGVyIHdlDQo+PiBz aG91bGQgYWxsb3cgd2VsbCBkZWZpbmVkIHZhbHVlcyBmb3IgdGhlIGFkbWluIHRhZ3MgbWFqb3Jp dHkgY29uc2Vuc3VzDQo+PiB3YXMgdGhhdCB3ZSBzaG91bGQgbm90IGFsbG93IGFueSBzdGFuZGFy ZCB2YWx1ZXMgZm9yIG5vZGUgYWRtaW4gdGFncyBhbmQNCj4+IGluIGZ1dHVyZSBpZiBzdWNoIGEg cmVxdWlyZW1lbnQgYXJpc2VzIGl0J2xsIGdvIGFzIG5ldyBmZWF0dXJlIGluIFJJIFRMVg0KPj4g YXMgQWNlZSBhbHJlYWR5IG1lbnRpb25lZC4gSSBhbSB0cnlpbmcgdG8gdW5kZXJzdGFuZCB3aHkg dGhlIHRleHQgbmVlZA0KPj4gdG8gYmUgc29mdGVuZWQgd2hlbiBhbnkgZnV0dXJlIHN0YW5kYXJk aXphdGlvbiB3b3VsZCBuZWVkIGFsdG9nZXRoZXIgYQ0KPj4gbmV3IGRvY3VtZW50IGFuZCB3aWxs IG5vdCByZXF1aXJlIGFueSBjaGFuZ2VzIHRvIHRoaXMgZG9jdW1lbnQuDQo+DQo+SSBzdWdnZXN0 ZWQgdGhhdCB0aGUgdGV4dCBiZSBzb2Z0ZW5lZCBiZWNhdXNlIHRoZSBjdXJyZW50IHN0YXRlbWVu dCBkb2VzDQo+bm90IGhhdmUgYW55IHByYWN0aWNhbCBlZmZlY3QuICBJdCdzIHRyeWluZyB0byBw bGFjZSByZXN0cmljdGlvbnMgb24gd2hhdA0KPnt0aGUgc2V0IG9mIGZ1dHVyZSBSRkNzIHRoYXQg dXBkYXRlIHRoaXMgZG9jdW1lbnR9IGNhbiBkbywgYnV0IGFueQ0KPmRvY3VtZW50IGluIHRoYXQg c2V0IGNvdWxkIHJlbW92ZSBzdWNoIGEgcmVzdHJpY3Rpb24gYW5kIG92ZXJyaWRlIGl0IGF0DQo+ dGhlIHNhbWUgdGltZS4NCj4NCj5JIHRoaW5rIGl0IHdvdWxkIGJlIGdvb2QgdG8gaGF2ZSBhIG5v dGUgaW4gc2VjdGlvbiAyIHRvIHRoZSBlZmZlY3QgdGhhdA0KPiJ0aGVzZSBhZG1pbmlzdHJhdGl2 ZSB0YWdzIGFyZSBzb2xlbHkgZm9yIHVzZSB3aXRoaW4gYW4gYWRtaW5pc3RyYXRpdmUNCj5kb21h aW4gYW5kIGFyZSB0aGVpciBpbnRlcnByZXRhdGlvbiBpcyBhIG1hdHRlciBvZiBsb2NhbCBwb2xp Y3kuICBJdCBpcw0KPmV4cGVjdGVkIHRoYXQgdmFsdWVzIHdpbGwgbm90IGJlIHBvcnRhYmxlIGFj cm9zcyBhZG1pbmlzdHJhdGl2ZSBkb21haW5zIi4NCj5JIGtub3cgdGhhdCB0aGlzIHRvcGljIGlz IGNvdmVyZWQgbGF0ZXIgaW4gdGhlIGRvY3VtZW50LCBidXQgaGF2aW5nIGl0DQo+ZWFybHkgd291 bGQgaGVscCBzZXQgdGhlIHN0YWdlIGZvciB0aGUgcmVzdCBvZiB0aGUgZG9jdW1lbnQuDQo+DQo+ PiA+SXQgbG9va3MgbGlrZSB0aGVyZSdzIG5vdyBhbiAtMDYsIGJ1dCB0aGUgY2hhbmdlcyBmcm9t IHRoZSAtMDUgYXJlIG5vdA0KPj4gPnNpZ25pZmljYW50LiAgVGhlIHNlY3VyaXR5IGNvbnNpZGVy YXRpb25zIGluIHRoZSAtMDUgY29ycmVjdGx5IG5vdGUNCj4+ID53aGF0IGFyZSBlc3NlbnRpYWxs eSBwcml2YWN5IGNvbnNpZGVyYXRpb25zIHJlZ2FyZGluZyB0aGUgY29udGVudHMgb2YNCj4+ID50 aGUgYWRtaW4gdGFncy4gIEhvd2V2ZXIsIGl0IHNlZW1zIGxpa2UgdGhlcmUgYXJlIGFsc28gcG90 ZW50aWFsDQo+PiA+c2VjdXJpdHkgY29uc2lkZXJhdGlvbnMgb24gdGhlIGFjdHVhbCBvcGVyYXRp b24gb2YgdGhlIG5ldHdvcmsgdGhhdCBhcmUNCj4+ID5ub3QgZGlzY3Vzc2VkIGhlcmUsIG5vciBp biBSRkMgMjMyOCAoT1NQRnYyKSBvciBSRkMgNTM0MCAoT1NQRnYzKS4gIFJGQw0KPj4gPjUzNDAn cyBzZWN1cml0eSBjb25zaWRlcmF0aW9ucyBleHBsaWNpdGx5IGRpc2NsYWltcyBwcm90ZWN0aW9u cyBhZ2FpbnN0DQo+PiA+Y29tcHJvbWlzZWQsIG1hbGZ1bmN0aW9uaW5nLCBvciBtaXNjb25maWd1 cmVkIHJvdXRlcnMsIGRlZmVycmluZyB0byBSRkMNCj4+ID40NTkzLCAiR2VuZXJpYyBUaHJlYXRz IHRvIFJvdXRpbmcgUHJvdG9jb2xzIi4gIEkgYmVsaWV2ZSB0aGF0IHRoZQ0KPj4gPnNlY3VyaXR5 IGNvbnNpZGVyYXRpb25zIG9mIHRoaXMgZG9jdW1lbnQgc2hvdWxkIGFkZHJlc3MsIGVpdGhlcg0K Pj4gPmRpcmVjdGx5IG9yIGluZGlyZWN0bHksIHByb3RlY3Rpb25zIGFnYWluc3QgY29tcHJvbWlz ZWQsDQo+PiA+bWFsZnVuY3Rpb25pbmcsIG9yIG1pc2NvbmZpZ3VyZWQgcm91dGVycywgYW5kIGFk ZGl0aW9uYWxseSBwcm90ZWN0aW9uDQo+PiA+YWdhaW5zdCBtYWxpY2lvdXMgYWN0b3JzIHdpdGgg YWNjZXNzIHRvIHRoZSBsYXllci0zIG5ldHdvcmsgKGFuZCBtYXliZQ0KPj4gPmxvd2VyIGxheWVy cyBhcyB3ZWxsKS4NCj4+ID4NCj4+ID5UaGF0IHByb2JhYmx5IG1lYW5zIG1lbnRpb25pbmcgUkZD IDQ1OTMgZGlyZWN0bHksIG9yIG1heWJlIGp1c3QNCj4+ID5wb2ludGluZyBvdXQgdGhhdCBSRkMg NTM0MCBkb2VzIHNvLiAgVGhlcmUgYXJlIHN0aWxsIGFkZGl0aW9uYWwNCj4+ID5jb25zaWRlcmF0 aW9ucyBpbnRyb2R1Y2VkIGJ5IHRoaXMgZG9jdW1lbnQsIHRob3VnaDsgdW5mb3J0dW5hdGVseSwN Cj4+ID5iZWNhdXNlIHRoZSBidWxrIG9mIHRoZSBpbnRlcnByZXRhdGlvbiBvZiB0aGUgYWRtaW4g dGFncyBpcyBsZWZ0IHRvIHRoZQ0KPj4gPnNpdGUgYWRtaW5pc3RyYXRvciwgaXQgaXMgaGFyZCB0 byBnaXZlIGEgY29tcHJlaGVuc2l2ZSBzZWN1cml0eQ0KPj4gPmFuYWx5c2lzLCBidXQgdGhlIGV4 YW1wbGVzIGFuZCB0aGUgcHJvdG9jb2wgZGVzY3JpcHRpb24gaXRzZWxmIGRvIGdpdmUNCj4+c29t ZSBhcmVhcyBmb3IgY29uc2lkZXJhdGlvbi4NCj4+DQo+PiBUaGUgZG9jdW1lbnQgY291bGQgcmVm ZXJlbmNlIFJGQyA0NTkzL1JGQyA2ODYzIGFuZCBzdGF0ZSB0aGF0DQo+PiBhdXRoZW50aWNhdGlv biBhcyBzcGVjaWZpZWQgaW4gUkZDIDc0NzQgb3IgUkZDIDcxNjYgU0hPVUxEIGJlIHVzZWQgaW4N Cj4+IGRlcGxveW1lbnRzIHdoZXJlIGF0dGFja2VycyBoYXZlIGFjY2VzcyB0byB0aGUgcGh5c2lj YWwgbmV0d29ya3MNCj4+IGluY2x1ZGVkIGluIHRoZSBPU1BGIGRvbWFpbiBhcmUgdnVsbmVyYWJs ZS4NCj4+IDxTaHJhZGRoYT4gb2suIFVwZGF0aW5nIHRoZSBTZWN1cml0eSBjb25zaWRlcmF0aW9u IHNlY3Rpb24NCj4NCj5UaGFua3MuDQo+DQo+Pg0KPj4gPg0KPj4gPlRoZSBSSSBMU0FzIGNhcnJ5 aW5nIGFkbWluaXN0cmF0aXZlIHRhZ3MgY2FuIGJlIGF0IGxpbmstLCBhcmVhLSwgb3INCj4+ID5B Uy1sZXZlbCBzY29wZTsgYW4gYWRtaW5pc3RyYXRvciBhc3NpZ25pbmcgdGFnIHZhbHVlcyBhbmQg YXNzb2NpYXRlZA0KPj4gPnBvbGljaWVzIHNob3VsZCBjb25zaWRlciB3aGF0IHdvdWxkIGhhcHBl biBpZiBhIGdpdmVuIHRhZyB3YXMNCj4+ID5hZHZlcnRpc2VkIGF0IGEgZGlmZmVyZW50IHNjb3Bl IHRoYW4gaW50ZW5kZWQuICBDb21wbGlhbnQNCj4+ID5pbXBsZW1lbnRhdGlvbnMgTVVTVCBOT1Qg Z2VuZXJhdGUgdGhlIHNhbWUgdGFnIGF0IGRpZmZlcmVudCBzY29wZXMsIGJ1dA0KPj4gPmEgcmVj ZWl2ZXIgd291bGQgbmVlZCB0byB0YWtlIHNvbWUgYWN0aW9uIGlmIGl0IGhhcHBlbmVkLCB3aGV0 aGVyIGR1ZQ0KPj4gPnRvIG5ldHdvcmsgZ2xpdGNoIG9yIG1hbGljaW91cyBhY3Rpb24gLS0gd2hh dCBzaG91bGQgdGhleSBkbz8NCj4+DQo+PiBJ4oCZbSBub3QgYW4gYXV0aG9yLCBidXQgdGhpcyBp cyB3aGF0IEnigJlkIHJlY29tbWVuZDoNCj4+DQo+PiAgICBUaGUgY29uZmxpY3RpbmcgdGFnIFNI T1VMRCBub3QgYmUgdXNlZCBhbmQgdGhpcyBzaXR1YXRpb24gU0hPVUxEIGJlDQo+PiBsb2dnZWQg YXMgYW4gZXJyb3IgaW5jbHVkaW5nIHRoZSB0YWcgd2l0aCBjb25mbGljdGluZyBzY29wZXMgYW5k IHRoZQ0KPj4gb3JpZ2luYXRvcihzKS4NCj4+IDxTaHJhZGRoYT4gVXBkYXRlZCB0aGUgZG9jdW1l bnQgd2l0aCBhYm92ZSBzdGF0ZW1lbnQuDQo+Pg0KPj4gVGhlcmUgaXMgYSBjYXNlIHRoYXQgbXVz dCBiZSBhbGxvd2VkIC0gdGhlIHNhbWUgdGFnIGNvdWxkIGJlIHJlY2VpdmVkIGJ5DQo+PiBhbiBB QlIgYXQgYm90aCB0aGUgQVMgc2NvcGUgYW5kIHRoZSBhcmVhIHNjb3BlIGluIGEgc3R1YiBvciBO U1NBIGFyZWEuDQo+PiA8U2hyYWRkaGE+IENvdWxkIHlvdSBwbHMgZWxhYm9yYXRlIHRoZSBjYXNl LiBJIGRvbid0IHF1aXRlIHVuZGVyc3RhbmQNCj4+IHdoeSB0aGUgQUJSIGluIGEgc3R1Yi9OU1NB IGFyZWEgd291bGQgZ2VuZXJhdGUgb3IgcmVjZWl2ZSBSSSBMU0FzIHdpdGgNCj4+IGRpZmZlcmVu dCBzY29wZXMuSSB0aGluayBpdCdzIHBlcmZlY3RseSB2YWxpZCB0byBmbG9vZCB0aGUgQVMgc2Nv cGVkIFJJDQo+PiBMU0FzIGludG8gdGhlIHN0dWIgLyBOU1NBIGFyZWEuDQo+DQo+QWNlZSwgSSB0 aGluayB0aGlzIGlzIGEgcXVlc3Rpb24gZm9yIHlvdS4NCg0KWWVhaCAtIEkgbWlzc2VkIHRoaXMg d2l0aG91dCBFLW1haWwgcXVvdGluZ+KApg0KDQpTaHJhZGRoYSwgDQoNCkFTLXNjb3BlZCBMU0Fz IGFyZSBub3QgZmxvb2RlZCBpbnRvIHN0dWIgb3IgTlNTQSBhcmVhcy4gU28sIGlmIGFuIEFCUiBp cw0KZ29pbmcgdG8gYWR2ZXJ0aXNlIHRhZ3MgdG8gaXRzIGF0dGFjaGVkIGFyZWFzIGFuZCB0aGUg cmVzdCBvZiB0aGUgT1NQRg0KUm91dGluZyBkb21haW4sIGl0IHdpbGwgbmVlZCB0byBvcmlnaW5h dGUgdGhlIExTQSBhdCBkaWZmZXJlbnQgc2NvcGVzLg0KDQoNCg0KPg0KPj4gPkFub3RoZXIgcG90 ZW50aWFsIGlzc3VlIGxpZXMgaW4gdGhlICJzdGlja2luZXNzIiBvZiB0aGUgYWRtaW4gdGFncyAt LQ0KPj4gPnRoZSB0ZXh0ICJ0aGUgbm9kZSBhZG1pbmlzdHJhdGl2ZSB0YWdzIGFzc29jaWF0ZWQg d2l0aCBhIG5vZGUgZm9yIHRoZQ0KPj4gPnB1cnBvc2Ugb2YgYW55IGNvbXB1dGF0aW9uIG9yIHBy b2Nlc3NpbmcgU0hPVUxEIGJlIGEgc3VwZXJzZXQgb2Ygbm9kZQ0KPj4gPmFkbWluaXN0cmF0aXZl IHRhZ3MgZnJvbSBhbGwgdGhlIFRMVnMgaW4gYWxsIGluc3RhbmNlcyBvZiB0aGUgUkkgTFNBDQo+ PiA+b3JpZ2luYXRlZCBieSB0aGF0IG5vZGUiIHNlZW1zIHRvIG1lYW4gdGhhdCBvbmNlIGEgdGFn IGlzIHNldCwgaXQNCj4+ID5jYW5ub3QNCj4+ID4oZWFzaWx5KSBiZSB1bnNldC4gIFdvdWxkIGZv cmNlLWV4cGlyaW5nIGFuIExTQSBiZSBlbm91Z2ggdG8gcmVzZXQgdGhlDQo+PiA+dGFnLCBvciBz b21ldGhpbmcgZWxzZT8NCj4+DQo+PiBZZXMgLSB0aGlzIGlzIHN0YW5kYXJkIGZvciBhbnkgT1NQ RiBMU0EuIEhvd2V2ZXIsIHNpbmNlIHRoZSBPU1BGIFJJIExTQQ0KPj4gbWF5IGluY2x1ZGUgb3Ro ZXIgVExWcyBvciBldmVuIG90aGVyIHRhZ3MsIGEgdGFnIGNvdWxkIGFsc28gYmUgd2l0aGRyYXdu DQo+PiBieSByZW9yaWdpbmF0aW5nIHRoZSBSSSBMU0Egd2l0aG91dCB0aGUgVExWIG9yIHdpdGgg YSBUTFYgdGhhdCBkb2VzbuKAmXQNCj4+IGluY2x1ZGUgdGhlIHdpdGhkcmF3biB0YWcuDQo+DQo+ SSBtYXkgc3RpbGwgYmUgY29uZnVzZWQsIGJ1dCBJIGRpZCBub3QgaW50ZXJwcmV0IHRoZSB0ZXh0 IGluIHRoYXQgd2F5Lg0KPlRoYXQgaXMsIHRoZSB0ZXh0IGFib3V0ICJhbGwgaW5zdGFuY2VzIG9m IHRoZSBSSSBMU0Egb3JpZ2luYXRlZCBieSB0aGF0DQo+bm9kZSIuICAoV2hpY2ggSSBjaGFuZ2Vk IHRvICJpbnN0YW5jZXMgb2YgUkkgTFNBcyIgaW4gbXkgZ3JhbW1hciBlZGl0cywNCj5wb3NzaWJs eSBpbmNvcnJlY3RseSBpZiBJJ20gc3RpbGwgY29uZnVzZWQuKSAgSSB3YXMgaW50ZXJwcmV0aW5n IHRoZSB3b3JkDQo+Imluc3RhbmNlcyIgdG8gaW5jbHVkZSBoaXN0b3JpY2FsIG9uZXMgb3ZlciB0 aW1lLCBzbyB0aGF0IGV2ZW4gaWYgYW4gUkkNCj5MU0EgY2FycnlpbmcgYSBwYXJ0aWN1bGFyIGFk bWluIHRhZyB3YXMgcmVwbGFjZWQgYnkgYSBkaWZmZXJlbnQgUkkgTFNBDQo+Zm9yIHRoZSBzYW1l IGFkdmVydGlzaW5nIHJvdXRlciwgdGhlIG9sZCBvbmUgd291bGQgc3RpbGwgYmUgYW4gaW5zdGFu Y2Ugb2YNCj50aGF0IFJJIExTQS4gIEdvaW5nIGJhY2sgdG8gUkZDIDIzMjgsIEknbSBub3Qgc3Vy ZSB3aGF0IGV4YWN0bHkgSSBoYWQgaW4NCj5taW5kIGluIHRlcm1zIG9mIGFnZXMgYW5kIHNjb3Bl cyBhbmQgc2VxdWVuY2UgbnVtYmVycyB0aGF0IHdvdWxkIGNhdXNlDQo+dGhpcw0KPnNpdHVhdGlv biwgYnV0IEkgc29tZWhvdyBoYWQgaXQgaW4gbXkgbWluZCB0aGF0IHRoZXJlIGNvdWxkIGJlIG11 bHRpcGxlIFJJDQo+TFNBcyBhY3RpdmUgYXQgdGhlIHNhbWUgdGltZSB0aGF0IGFwcGx5IHRvIGEg Z2l2ZW4gbm9kZSwgc3VjaCBhcyBpZiB0aGUNCj5hZG1pbiBqdXN0IGFkZGVkIGEgbmV3IFJJIExT QSBjb250YWluaW5nIG9ubHkgdGhlIGFkbWluIHRhZyB0byBhdWdtZW50IHRoZQ0KPmV4aXN0aW5n IFJJIExTQXMgYmVpbmcgc2VudC4gIElzIHRoYXQgcG9zc2libGU/DQoNCkluIE9TUEYsIGEgbW9y ZS1yZWNlbnQgdmVyc2lvbiBvciBpbnN0YW5jZSBvZiBhbiBMU0Egd2lsbCBhbHdheXMgc3VwZXJz ZWRlDQphbGwgcHJldmlvdXMgaW5zdGFuY2VzIG9mIHRoZSBzYW1lIExTQS4NCg0KPg0KPklmIHRo ZXJlIGNhbiBvbmx5IGJlIG9uZSBSSSBMU0EgdGhhdCBpcyAiY3VycmVudCIgZm9yIGEgZ2l2ZW4g bm9kZSAoYXQgYQ0KPmdpdmVuIHNjb3BlPyksIHRoZW4gaXQgc2VlbXMgbGlrZSBpdCB3b3VsZCBi ZSB1c2VmdWwgdG8gY2hhbmdlIHRoZSB0ZXh0IHRvDQo+ZXhwbGljaXRseSBzYXkgImFsbCBjdXJy ZW50IGluc3RhbmNlcyIgLS0gdGhhdCB3b3VsZCBoYXZlIGhlbHBlZCBtZSBhcyBJDQo+cmVhZCBp dC4NCg0KSSBzZWUgdGhlIGNvbmZ1c2lvbiBpcyBiZXR3ZWVuIGluc3RhbmNlcyBvZiB0aGUgc2Ft ZSBMU0EgaW4gdGhlIGdlbmVyYWwNCnNlbnNlIGFuZCBtdWx0aXBsZSBpbnN0YW5jZXMgb2YgdGhl IE9TUEYgUkkgTFNBLiBSZWZlciB0byBSRkMgMjMyOCBzZWN0aW9uDQoxMy4xLiAgDQoNCg0KPg0K Pj4gPiBIb3cgZGlzcnVwdGl2ZSB3b3VsZCB0aGF0IGJlPyAgSXQgd291bGQgYmUgaGVscGZ1bCB0 byBzZWUgc29tZQ0KPj4gPmRpc2N1c3Npb24gb2YgaG93IGEgdGFnIHdvdWxkIGJlIHJlbW92ZWQu DQo+Pg0KPj4gSSBtYXkgb2Ygd29ya2VkIG9uIE9TUEYgZm9yIHRvbyBsb25nIGJ1dCB0aGlzIHNo b3VsZCBiZSBvYnZpb3VzIHRvDQo+PiBhbnlvbmUgaW1wbGVtZW50aW5nIHRoZSBkcmFmdCBmcm9t IHRoZSBzcGVjaWZpY2F0aW9uLg0KPg0KPklmIGl0J3Mgc2ltcGx5IGEgbWF0dGVyIG9mIHJlLWlz c3VpbmcgdGhlIFJJIExTQSAoSSB3YXMgbm90IHN1cmUgd2hlbiBJDQo+d2FzIHdyaXRpbmcgbXkg cmV2aWV3KSwgdGhlbiBJIGFncmVlIGl0IHNob3VsZCBiZSBvYnZpb3VzLg0KPg0KPj4gPFNocmFk ZGhhPiBUaGUgYmVsb3cgcGFyYWdyYXBoIChmcm9tIC0wNyB2ZXJzaW9uKSBpcyBjbGVhciBvbiB0 aGlzIEkNCj4+aG9wZS4NCj4+DQo+PiAiV2hlbiB0aGVyZSBpcyBhIGNoYW5nZSBvciByZW1vdmFs IG9mIGFuIGFkbWluaXN0cmF0aXZlIGFmZmlsaWF0aW9uIG9mDQo+PmEgbm9kZSwNCj4+ICAgIHRo ZSBub2RlIE1VU1QgcmUtb3JpZ2luYXRlIHRoZSBSSSBMU0Egd2l0aCB0aGUgbGF0ZXN0IHNldCBv ZiBub2RlDQo+PmFkbWluaXN0cmF0aXZlIHRhZ3MuDQo+PiAgICBPbiB0aGUgcmVjZWl2ZXIsIFdo ZW4gdGhlcmUgaXMgYSBjaGFuZ2UgaW4gdGhlIG5vZGUgYWRtaW5pc3RyYXRpdmUNCj4+dGFnIFRM ViBvciByZW1vdmFsLw0KPj4gICAgYWRkaXRpb24gb2YgYSBUTFYgaW4gYW55IGluc3RhbmNlIG9m IHRoZSBSSS1MU0EsIGltcGxlbWVudGF0aW9ucyBNVVNUDQo+PiAgICB0YWtlIGFwcHJvcHJpYXRl IG1lYXN1cmVzIHRvIHVwZGF0ZSBpdHMgc3RhdGUgYWNjb3JkaW5nIHRvIHRoZQ0KPj4gICAgY2hh bmdlZCBzZXQgb2YgdGFncy4gIEV4YWN0IGFjdGlvbnMgZGVwZW5kIG9uIGZlYXR1cmVzIHdvcmtp bmcgd2l0aA0KPj4gICAgYWRtaW5pc3RyYXRpdmUgdGFncyBhbmQgaXMgb3V0c2lkZSBvZiBzY29w ZSBvZiB0aGlzIHNwZWNpZmljYXRpb24uIg0KPg0KPlRoaXMgaXMgZGVmaW5pdGVseSBpbXByb3Zl ZCwgYnV0IGl0IGRvZXMgbm90IGRvIG11Y2ggdG8gYWRkcmVzcyB0aGUgaXNzdWUNCj5JIGhhZCBp biBtaW5kIHdoZW4gSSB3YXMgd3JpdGluZyBteSByZXZpZXcuICBIb3dldmVyLCBpdCBzZWVtcyBs aWtlIHRoYXQNCj5pc3N1ZSBpcyBub3QgYWN0dWFsbHkgYW4gaXNzdWUsIHNvIG5vIGZ1cnRoZXIg Y2hhbmdlcyB0byB0aGlzIHRleHQgd291bGQNCj5iZSBuZWVkZWQuDQo+DQo+DQo+PiA+DQo+PiA+ VGhhdCBpcyBwYXJ0aWN1bGFybHkgZWFzeSBmb3IgYW4gYXR0YWNrZXIgd2hlbiB0aGUgbnVsbCBP U1BGDQo+PiA+YXV0aGVudGljYXRpb24gbWVjaGFuaXNtIGlzIGluIHVzZSAoaG93IGNvbW1vbiBp cyB0aGF0PyAgSSBzYXcgc29tZQ0KPj4gPndlYnNpdGVzIGluZGljYXRpbmcgaXQgd2FzIHRoZSBk ZWZhdWx0IGJlaGF2aW9yLCBhdCBsZWFzdCBzb21ldGltZXMpLg0KPj4gPkkgZG8gbm90IHNlZSBh IG5lZWQgdG8gdHVybiB0aGlzIGRvY3VtZW50IGludG8gInNlY3VyaXR5IGNvbnNpZGVyYXRpb25z DQo+PiA+Zm9yIE9TUEYgYXV0aGVudGljYXRpb24iLCBidXQgbWF5YmUgaXQgaXMgd29ydGggbWVu dGlvbmluZyBzb21lIHRoaW5nczoNCj4+ID50aGUNCj4+ID5tZDUgc2NoZW1lIHNlZW1zIHByZXR0 eSB3ZWVrIGF0IHRoaXMgcG9pbnQgKHRob3VnaCBwcm9iYWJseSBub3QNCj4+ID50cml2aWFsbHkg YnJva2VuKSwgdGhlIGhtYWMtc2hhIHNjaGVtZSBvZiBSRkMgNTcwOSBpcyBvbmx5IGZyb20gMjAw OSwNCj4+ID5hbmQgUkZDIDc0NzQgKG9ubHkgc2l4IG1vbnRocyBvbGQpIHBvaW50cyBvdXQgY2Fz ZXMgd2hlcmUgYm90aCBhcmUNCj4+ID5zdXNjZXB0aWJsZSB0byByZXBsYXkgYXR0YWNrcy4gIEp1 c3QgbG9va2luZyBhdCB0aGUgc2VjdXJpdHkNCj4+ID5jb25zaWRlcmF0aW9ucyBvZiB0aGlzIGRv Y3VtZW50IGFuZCB0aGUgY29yZSBPU1BGIHYyL3YzIHNwZWNzIGRvZXMgbm90DQo+PiA+Y29udmV5 IHRoaXMgdG8gdGhlIHJlYWRlciwgc28gSSB3b3VsZCBsaWtlIHRvIHNlZSBhdCBsZWFzdCBhIHBv aW50ZXIgdG8NCj4+ID5zdWNoIGNvbnNpZGVyYXRpb25zLiAgKFRoZSBzdGFuY2Ugb2YgUkZDIDIz MjggdGhhdCAiYWxsIE9TUEYgcHJvdG9jb2wNCj4+ZXhjaGFuZ2VzIGFyZSBhdXRoZW50aWNhdGVk Ig0KPj4gPnNlZW1zIHBhcnRpY3VsYXJseSBkaXNpbmdlbm91cyBnaXZlbiB0aGUgcHJlc2VuY2Ug b2YgdGhlIG51bGwNCj4+ID5hdXRoZW50aWNhdGlvbiBzY2hlbWUuKQ0KPj4NCj4+IEkgdGhpbmsg Ym90aCBSRkMgNzQ3NCBhbmQgUkZDIDcxNzYgc2hvdWxkIGJlIHJlZmVyZW5jZWQuIFRoZSBPU1BG DQo+PiB2dWxuZXJhYmlsaXR5IHRvIHJlcGxheSBhdHRhY2tzIHRvIE9TUEZ2Mi9PU1BGdjMgcm91 dGVycyBpbXBsZW1lbnRpbmcNCj4+IHRoZXNlIHNwZWNpZmljYXRpb25zIGlzIGV4dHJlbWVseSBz bWFsbCBhbmQgaGFzIGJlZW4gcmVkdWNlZCBhcyBtdWNoIGFzDQo+PiBwcmFjdGljYWwuIElmIHlv dSBhcmUgc3RpbGwgY29uY2VybmVkLCBJIHN1Z2dlc3QgeW91IGRpc2N1c3Mgd2l0aCBTYW0NCj4+ IEhhcnRtYW4gKGFsc28gb25jZSBhZmZpbGlhdGVkIHdpdGggTUlUKS4NCj4NCj5JIGFtIG5vdCBl c3BlY2lhbGx5IGNvbmNlcm5lZCBhYm91dCB0aGlzIGF0dGFjaywgSSBqdXN0IG5vdGljZWQgdGhh dCB0aGVyZQ0KPndhcyBhbiBSRkMgYWJvdXQgaXQuICBTaW5jZSBSRkMgNzQ3NCB3YXMgc28gcmVj ZW50LCBpdCBtYWRlIG1lIHdvbmRlciBob3cNCj53aWRlbHkgZGVwbG95ZWQgdGhlIHNlY3VyaXR5 IGZpeGVzIGFyZSB0b2RheS4NCg0KQ29ycmVjdCAtIGl0IGlzIG5vdCB3aWRlbHkgaW1wbGVtZW50 ZWQgb3IgZGVwbG95ZWQuDQoNClRoYW5rcywNCkFjZWUNCg0KPg0KPj4gPFNocmFkZGhhPiBTZWN1 cml0eSBjb25zaWRlcmF0aW9uIHNlY3Rpb24gdXBkYXRlZCB3aXRoIHRoZSByZWZlcmVuY2UgdG8N Cj4+IFJGQyA3NDc0IGFuZCA3MTc2Lg0KPg0KPlRoYW5rcy4NCj4NCj4+ID4NCj4+ID5UaGVyZSBp cyBhbHNvIHRoZSBwb3NzaWJpbGl0eSB0aGF0IGFuIGF0dGFja2VyIGNvdWxkIGJsb2NrIGRlbGl2 ZXJ5IG9mDQo+PiA+YW4gTFNBLCBjYXVzaW5nIGEgdGFnIHRoYXQgc2hvdWxkIGJlIHNldCB0byBu b3QgYmUgc2Vlbi4gIFRoaXMgc2VlbXMNCj4+ID51bmxpa2VseSBmb3Igd2lyZWQgcG9pbnQtdG8t cG9pbnQgbGlua3MsIGJ1dCBpcyBtb3JlIHBsYXVzaWJsZSBpbiBvdGhlcg0KPj4gPmVudmlyb25t ZW50cywgc3VjaCBhcyByYWRpbyBsaW5rcy4gIEkgdGhpbmsgSSBjYW4gaW1hZ2luZSBzY2VuYXJp b3MNCj4+ID53aGVyZSB0aGlzIHdvdWxkIGNhdXNlIGRyYXN0aWMgZGFtYWdlIHRvIHRoZSByb3V0 aW5nIHRvcG9sb2d5Lg0KPj4NCj4+IFRoZSBkZXNjcmlwdGlvbiBhbmQgbWl0aWdhdGlvbiBvZiBz dWNoIGEgZ2VuZXJpYyB0aHJlYXQgZG9lc27igJl0IGJlbG9uZw0KPj5pbiBhIG1pbm9yICh0aG91 Z2ggaW1wb3J0YW50KSBPU1BGIHNwZWNpZmljYXRpb24uIFRoZSBlZmZlY3Qgb2YgYmxvY2tpbmcN Cj4+Y29udHJvbCB0cmFmZmljIGlzIG5ldmVyIHBvc2l0aXZlIDteKS4gQXQgbGVhc3QgT1NQRiB1 c2VzIHJlbGlhYmxlDQo+PmZsb29kaW5nIHNvIGl0IHdpbGwgYmUgcmV0cmFuc21pdHRlZC4NCj4+ IDxTaHJhZGRoYT4gQWdyZWUgd2l0aCBBY2VlIG9uIHRoaXMuDQo+DQo+SSBoYWQgZm9yZ290dGVu IHRoYXQgT1NQRiBmbG9vZGluZyB3YXMgcmVsaWFibGU7IEkgYWdyZWUgdGhpcyBkb2VzIG5vdA0K Pm5lZWQgdG8gYmUgZXhwbGljaXRseSBjYWxsZWQgb3V0IGluIHRoaXMgZG9jdW1lbnQsIHNpbmNl IGl0J3MgYSBnZW5lcmFsDQo+cm91dGluZyBjb25jZXJuLg0KPg0KPj4gPlRoZSBwYXJlbnRoZXRp Y2FsIGluIHNlY3Rpb24gMy4yIHdoZXJlaW4gcm91dGVycyBtaWdodCBhZHZlcnRpc2UgYQ0KPj4g PnBlci1ub2RlIGFtaW5pc3RyYXRpdmUgdGFnICJ3aXRob3V0IGtub3dpbmcgKG9yIGV2ZW4gZXhw bGljaXRseQ0KPj4gPnN1cHBvcnRpbmcpIGZ1bmN0aW9uYWxpdHkgaW1wbGllZCBieSB0aGUgdGFn IiBzZWVtcyBwb3RlbnRpYWxseQ0KPj4gPmRhbmdlcm91cywgc2luY2UgaXQgc291bmRzIGxpa2Ug dGhlIHJvdXRlcnMgaW4gcXVlc3Rpb24gYXJlIGx5aW5nIGFib3V0DQo+PiA+dGhlaXIgY2FwYWJp bGl0aWVzLiAgV291bGQgdGhlIGRvY3VtZW50IHN1ZmZlciBoYXJtIGlmIHRoZQ0KPj4gPnBhcmVu dGhldGljYWwgd2FzIHJlbW92ZWQ/DQo+Pg0KPj4gSW4gbXkgb3Bpbmlvbiwgbm8gaGFybSB0byBy ZW1vdmUgLSBtaXNjb25maWd1cmF0aW9uIGlzIGFsbW9zdCBhbHdheXMgYW4NCj4+aXNzdWUuDQo+ PiA8U2hyYWRkaGE+IEl0J3MgcGVyZmVjdGx5IHZhbGlkIGZvciBhIG5vZGUgb3JpZ2luYXRlIGEg dGFnIHdoZW4gdGhlIG5vZGUNCj4+IGl0c2VsZiBkb2VzIG5vdCBQcm9jZXNzIGFueSB0YWdzLiBJ IHRoaW5rIHRoZSBzZW50ZW5jZSBuZWVkcyB0byBiZQ0KPj4gcmVwaHJhc2VkLiBDaGFuZ2luZyBp dCBhcyBiZWxvdy4NCj4+DQo+PiA8dD5NZWFuaW5nIG9mIHRoZSBOb2RlIGFkbWluaXN0cmF0aXZl IHRhZ3MgaXMgZ2VuZXJhbGx5DQo+PiBvcGFxdWUgdG8gT1NQRi4gUm91dGVyIGFkdmVydGlzaW5n IHRoZSBwZXItbm9kZQ0KPj4gYWRtaW5pc3RyYXRpdmUgdGFnIChvciB0YWdzKSBtYXkgYmUgY29u ZmlndXJlZCB0byBkbyBzbw0KPj4gd2l0aG91dCBrbm93aW5nIChvciBldmVuIHdpdGhvdXQgc3Vw cG9ydGluZyBwcm9jZXNzaW5nIG9mKQ0KPj4gZnVuY3Rpb25hbGl0eSBpbXBsaWVkIGJ5IHRoZSB0 YWcuPC90Pg0KPg0KPkkgdGhpbmsgdGhlcmUgaXMgYSBxdWVzdGlvbiBhYm91dCB3aGV0aGVyIHRo aXMgbWVhbnMgdGhhdCB0aGUgcm91dGVyDQo+ZG9lc24ndCBuZWVkIHRvIGtub3cgd2hhdCBmZWF0 dXJlIHRoZSB0YWcgbnVtYmVyIG1lYW5zLCBvciB3aGV0aGVyIGl0DQo+bWVhbnMgdGhhdCB0aGUg cm91dGVyIGRvZXNuJ3QgbmVlZCB0byBpbXBsZW1lbnQgdGhlIGZlYXR1cmUgaW5kaWNhdGVkIGJ5 DQo+dGhhdCB0YWcgdmFsdWUuICBJIHJlYWQgdGhpcyB0ZXh0IGFzIGJlaW5nIGluIHRoZSBzZWNv bmQgY2FzZSwgYnV0IEkgYW0NCj5pbnRlcnByZXRpbmcgeW91ciBkaXNjdXNzaW9uIGFib3V0IHRo aXMgdGV4dCB0byBtZWFuIHRoYXQgeW91IHRoaW5rIGl0IGlzDQo+Y292ZXJpbmcgdGhlIGZpcnN0 IGNhc2UuICAoWWVzLCB0aGVyZSBjYW4gYmUgdGFnIHZhbHVlcyB0aGF0IGp1c3QgaW5kaWNhdGUN Cj5hbiBhZG1pbmlzdHJhdGl2ZSBncm91cGluZyBhbmQgdGhlcmUgaXMgbm8gY29ycmVzcG9uZGlu ZyBmdW5jdGlvbmFsaXR5DQo+bmVlZGVkIG9uIHRoZSByb3V0ZXIsIGJ1dCB0aGVyZSBjYW4gYWxz byBiZSB0YWcgdmFsdWVzIHRoYXQgaW5kaWNhdGUgInRoZQ0KPnJvdXRlciBvcmlnaW5hdGluZyB0 aGlzIFJJIExTQSBzdXBwb3J0cyBhY2NlcHRpbmcgdGFyZ2V0ZWQgTERQIHNlc3Npb25zIg0KPi0t IGEgcm91dGVyIHdpbGwgY2F1c2UgYnJlYWthZ2UgaWYgaXQgc2VuZHMgc3VjaCBhIHRhZyBidXQg ZG9lcyBub3QNCj5hY3R1YWxseSBzdXBwb3J0IGFjY2VwdGluZyB0YXJnZXRlZCBMRFAgc2Vzc2lv bnMuKQ0KPg0KPkJhc2VkIG9uIHRoaXMgZGlzY3Vzc2lvbiwgSSB0aGluayB0aGF0IHdoYXQgdGhl IHBhcmVudGhldGljYWwgaXMgdHJ5aW5nIHRvDQo+c2F5IGlzIHRoYXQgInRoZSByb3V0ZXIgb3Jp Z2luYXRpbmcgdGhlIHRhZyBtYXkgbm90IHVzZSB0aGF0IHRhZyBpbiBhbnkgb2YNCj5pdHMgcHJv Y2Vzc2luZyBkZWNpc2lvbnMiIC0tIGlzIHRoYXQgY29ycmVjdD8NCj4NCj5DaGFuZ2luZyB0aGUg d29yZCAiZnVuY3Rpb25hbGl0eSIgdG8gImF0dHJpYnV0ZXMiIHdvdWxkIGNhdXNlIG1lIHRvIHJl YWQNCj50aGUgdGV4dCBhcyBiZWluZyBpbiB0aGUgZmlyc3QgY2FzZSBJIGRlc2NyaWJlZCBhYm92 ZS4NCj4NCj4oQnkgdGhlIHdheSwgdGhpcyBwYXJhZ3JhcGggaGFkIGEgbG90IG9mIGNoYW5nZXMg aW4gbXkgcGF0Y2ggZm9yIGdyYW1tYXI7DQo+aXQgbWlnaHQgaGF2ZSBiZWVuIGVhc2llciB0byBh cHBseSB0aGF0IHBhdGNoIGJlZm9yZSBtYWtpbmcgZnVydGhlciBlZGl0cywNCj50byByZWR1Y2Ug dGhlIG51bWJlciBvZiBtZXJnZSBjb25mbGljdHMuICBUaGUgZ3JhbW1hciBpbiB0aGUgcXVvdGVk IG5ldw0KPnRleHQgaGFzIHNldmVyYWwgZXJyb3JzLikNCj4NCj4+ID5PbmUgcmVhc29uIEkgYW0g dW5zYXRpc2ZpZWQgYnkgbWFraW5nIHRoZSBpbnRlcnByZXRhdGlvbiBvZiB0aGUgdGFnDQo+PiA+ dmFsdWVzIHNwZWNpZmljIHRvIGFuIGFkbWluaXN0cmF0aXZlIGRvbWFpbiBpcyB0aGF0IGEgbWlz Y29uZmlndXJlZA0KPj4gPmJvcmRlciByb3V0ZXIgbWlnaHQgZXJyb25lb3VzbHkgdXNlIHRhZyB2 YWx1ZXMgZnJvbSBvbmUgZG9tYWluIG9uIHRoZQ0KPj4gPm90aGVyIHNpZGUgb2YgdGhlIGJvcmRl ci4NCj4+ID4gUGVyaGFwcyB0aGUgb3RoZXIgZGFtYWdlIGZyb20gYSByb3V0ZXIgbWlzY29uZmln dXJlZCBpbiBzdWNoIGEgZmFzaGlvbg0KPj4gPndvdWxkIGR3YXJmIHRoZSBhZGRpdGlvbmFsIGRh bWFnZSBmcm9tIHRoZSBtaXNpbnRlcnByZXRlZCB0YWdzIGFuZCBzbw0KPj4gPm15IGNvbmNlcm4g aXMgaW52YWxpZDsgSSByZWFsbHkgY2FuJ3Qgc2F5Lg0KPj4NCj4+IEFnYWluLCBJIGRvbuKAmXQg dGhpbmsgbWlzY29uZmlndXJhdGlvbiBuZWVkcyB0byBiZSBjb3ZlcmVkIC0gImVtcHRvcg0KPj5j YXZldGXigJ0uDQo+DQo+QSBtaXNjb25maWd1cmVkIHJvdXRlciBpcyBieSBkZWZpbml0aW9uIGJy b2tlbi4gIFN1Y2ggbWlzY29uZmlndXJhdGlvbiBjYW4NCj5oYXBwZW4gZWl0aGVyIGJ5IGFjY2lk ZW50IGR1ZSB0byBvcGVyYXRvciBlcnJvciwgb3IgbWFsaWNpb3VzbHksIGlmIGFuDQo+YXR0YWNr ZXIgaGFzIGNvbXByb21pc2VkIHRoZSBzeXN0ZW0uICBXaGlsZSBpdCBtYXkgbm90IGJlIG5lY2Vz c2FyeSB0byBzYXkNCj50aGF0IGEgYnJva2VuIHJvdXRlciB3aWxsIG5vdCBwYXNzIHRyYWZmaWMg dGhlIHdheSBpdCdzIHN1cHBvc2VkIHRvLCBpZiBhDQo+bWlzY29uZmlndXJlZCByb3V0ZXIgY2Fu IGVtaXQgcm91dGluZyBwcm90b2NvbCBtZXNzYWdlcyB0aGF0IGFmZmVjdCB0aGUNCj5zdGF0ZSBv ZiB0aGUgbmV0d29yayBhcyBhIHdob2xlLCBub3QganVzdCBpdHMgbG9jYWwgc3Vycm91bmRpbmdz LCB0aGF0DQo+c2VlbXMgbGlrZSBhbiBhbmFseXNpcyB0aGF0IGlzIGFwcHJvcHJpYXRlIGZvciB0 aGUgc2VjdXJpdHkgY29uc2lkZXJhdGlvbnMNCj5vZiBhIHJvdXRpbmcgcHJvdG9jb2wgZG9jdW1l bnQuICBOb3csIEkgZG9uJ3QgaGF2ZSBhIGdvb2QgcGljdHVyZSBvZg0KPnNwZWNpZmljIGV4YW1w bGVzIG9mIG5ldHdvcmstd2lkZSBpc3N1ZXMgZHVlIHRvIHRoZSBhZG1pbiB0YWcsIGJ1dCBJIHRo aW5rDQo+dGhlcmUncyBhIGxhcmdlIGVub3VnaCBwcm9iYWJpbGl0eSB0aGF0IGl0J3MgcG9zc2li bGUgZm9yIHN1Y2ggYSB0aGluZyB0bw0KPmhhcHBlbiB0aGF0IEkgd2FudGVkIHRvIG1lbnRpb24g aXQgaW4gbXkgcmV2aWV3IGNvbW1lbnRzLiAgTWF5YmUgdGhlcmUgaXMNCj5ub3QgYW55dGhpbmcg d29ydGggbWVudGlvbmluZyBhYm91dCBpdCBpbiB0aGUgc2VjdXJpdHkgY29uc2lkZXJhdGlvbnMN Cj5zZWN0aW9uLCBidXQgSSBkb24ndCB0aGluayB0aGF0ICJtaXNjb25maWd1cmF0aW9uIGRvZXNu J3QgbmVlZCB0byBiZQ0KPmNvdmVyZWQiIGFkZHJlc3NlcyB0aGUgY29uY2VybiBJIHdhcyBhdHRl bXB0aW5nIHRvIHJhaXNlLg0KPg0KPj4gPFNocmFkZGhhPiAtMDcgdmVyc2lvbiBhZGRyZXNzZXMg dGhpcyBpc3N1ZS4NCj4+DQo+PiAiQWR2ZXJ0aXNlbWVudCBvZiB0YWcgdmFsdWVzIGZvciBvbmUg YWRtaW5pc3RyYXRpdmUgZG9tYWluIGludG8NCj4+IGFub3RoZXIgIHJpc2tzIG1pc2ludGVycHJl dGF0aW9uIG9mIHRoZSB0YWcgdmFsdWVzIChpZiB0aGUgdHdvIGRvbWFpbnMNCj4+aGF2ZSBhc3Np Z25lZA0KPj4gZGlmZmVyZW50IG1lYW5pbmdzIHRvIHRoZSBzYW1lIHZhbHVlcyksIHdoaWNoIG1h eSBoYXZlIHVuZGVzaXJhYmxlIGFuZA0KPj51bmFudGljaXBhdGVkIHNpZGUNCj4+IGVmZmVjdHMu Ig0KPg0KPlRoYW5rIHlvdSwgdGhhdCBoZWxwcy4NCj4NCj4+IFRoYW5rcyBmb3IgdGhlIGVkaXRv cmlhbCByZXZpZXcgYXMgd2VsbC4gU3BlYWsgYXMgV0cgY2hhaXIsIEkNCj4+YXBwcmVjaWF0ZSB0 aGlzLg0KPg0KPllvdSdyZSB3ZWxjb21lIQ0KPg0KPi1CZW4NCg0K From nobody Tue Oct 13 15:58:02 2015 Return-Path: X-Original-To: secdir@ietfa.amsl.com Delivered-To: secdir@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 196001A86F7; Tue, 13 Oct 2015 15:58:01 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.211 X-Spam-Level: X-Spam-Status: No, score=-4.211 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id iavw6ceneaM0; Tue, 13 Oct 2015 15:57:59 -0700 (PDT) Received: from dmz-mailsec-scanner-6.mit.edu (dmz-mailsec-scanner-6.mit.edu [18.7.68.35]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id D30AA1A21C7; Tue, 13 Oct 2015 15:57:57 -0700 (PDT) X-AuditID: 12074423-f793f6d000007fc1-0c-561d8c73488f Received: from mailhub-auth-4.mit.edu ( [18.7.62.39]) (using TLS with cipher DHE-RSA-AES256-SHA (256/256 bits)) (Client did not present a certificate) by dmz-mailsec-scanner-6.mit.edu (Symantec Messaging Gateway) with SMTP id BB.7D.32705.37C8D165; Tue, 13 Oct 2015 18:57:55 -0400 (EDT) Received: from outgoing.mit.edu (outgoing-auth-1.mit.edu [18.9.28.11]) by mailhub-auth-4.mit.edu (8.13.8/8.9.2) with ESMTP id t9DMvsYL010487; Tue, 13 Oct 2015 18:57:54 -0400 Received: from multics.mit.edu (system-low-sipb.mit.edu [18.187.2.37]) (authenticated bits=56) (User authenticated as kaduk@ATHENA.MIT.EDU) by outgoing.mit.edu (8.13.8/8.12.4) with ESMTP id t9DMvoJM002601 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NOT); Tue, 13 Oct 2015 18:57:53 -0400 Received: (from kaduk@localhost) by multics.mit.edu (8.12.9.20060308) id t9DMvo4G022669; Tue, 13 Oct 2015 18:57:50 -0400 (EDT) Date: Tue, 13 Oct 2015 18:57:50 -0400 (EDT) From: Benjamin Kaduk To: "Acee Lindem (acee)" In-Reply-To: Message-ID: References: User-Agent: Alpine 1.10 (GSO 962 2008-03-14) MIME-Version: 1.0 Content-Type: MULTIPART/MIXED; BOUNDARY="-559023410-909332701-1444777070=:26829" X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFprNKsWRmVeSWpSXmKPExsUixG6nrlvcIxtmMPGogMXkt/OYLX6/2sJu MePPRGaLDwsfsljceLSX2YHVY8rvjaweS5b8ZPK43nSVPYA5issmJTUnsyy1SN8ugSvj5tcH 7AX/BSoOd/5nb2DcydvFyMkhIWAiMe/8fkYIW0ziwr31bF2MXBxCAouZJFb+3MEE4WxklDh/ 9x2Uc4hJYu6vZSwQTgOjxI2Zv5hB+lkEtCWWz7rPBmKzCahIzHyzEcjm4BAR0JTY8h6snlng HqPEvvurWUFqhAXsJY68uMcCYnMK6Ei833uBHcTmFXCU2H1rKzvEgj4miZ/fl4ENFQUqWr1/ CgtEkaDEyZlPwGxmgQCJiTdesk1gFJyFJDULSQrCVpdofHAWytaWuH+zjW0BI8sqRtmU3Crd 3MTMnOLUZN3i5MS8vNQiXTO93MwSvdSU0k2M4DhwUd7B+Oeg0iFGAQ5GJR7eF5EyYUKsiWXF lbmHGCU5mJREeRdXyYYJ8SXlp1RmJBZnxBeV5qQWH2KU4GBWEuE1SgXK8aYkVlalFuXDpKQ5 WJTEeTf94AsREkhPLEnNTk0tSC2CycpwcChJ8D7oAmoULEpNT61Iy8wpQUgzcXCCDOcBGu4P UsNbXJCYW5yZDpE/xagoJc57FiQhAJLIKM2D6wWnqd1Mqq8YxYFeEeZ16Qaq4gGmOLjuV0CD mUCuZpcCGVySiJCSamC82X9bvUdg3a8Zd65flbn/6bAvG0/HkyhPdrHTz245NjqXTP77vjJr xe/bYT+OWelbsQu9nKV2OfjfIe8k74IC/yAZJ9aUyIony7YcPzwv+FD/q2/9LM990y7G2anL +OvbMyyrmHe/590syTL5rllNW7ZUTRWReSj35eenuyuq3biVjCIurglWYinOSDTUYi4qTgQA 6x9a1i4DAAA= Archived-At: Cc: "draft-ietf-ospf-node-admin-tag.all@ietf.org" , "secdir@ietf.org" , Shraddha Hegde , "iesg@ietf.org" Subject: Re: [secdir] secdir review of draft-ietf-ospf-node-admin-tag-05 X-BeenThere: secdir@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: Security Area Directorate List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 13 Oct 2015 22:58:01 -0000 This message is in MIME format. The first part should be readable text, while the remaining parts are likely unreadable without MIME-aware tools. ---559023410-909332701-1444777070=:26829 Content-Type: TEXT/PLAIN; charset=utf-8 Content-Transfer-Encoding: QUOTED-PRINTABLE On Tue, 13 Oct 2015, Acee Lindem (acee) wrote: > > On 10/13/15, 6:27 PM, "Benjamin Kaduk" wrote: > > >On Sun, 11 Oct 2015, Shraddha Hegde wrote: > > > >> >(easily) be unset. Would force-expiring an LSA be enough to reset th= e > >> >tag, or something else? > >> > >> Yes - this is standard for any OSPF LSA. However, since the OSPF RI LS= A > >> may include other TLVs or even other tags, a tag could also be withdra= wn > >> by reoriginating the RI LSA without the TLV or with a TLV that doesn= =E2=80=99t > >> include the withdrawn tag. > > > >I may still be confused, but I did not interpret the text in that way. > >That is, the text about "all instances of the RI LSA originated by that > >node". (Which I changed to "instances of RI LSAs" in my grammar edits, > >possibly incorrectly if I'm still confused.) I was interpreting the wor= d > >"instances" to include historical ones over time, so that even if an RI > >LSA carrying a particular admin tag was replaced by a different RI LSA > >for the same advertising router, the old one would still be an instance = of > >that RI LSA. Going back to RFC 2328, I'm not sure what exactly I had in > >mind in terms of ages and scopes and sequence numbers that would cause > >this > >situation, but I somehow had it in my mind that there could be multiple = RI > >LSAs active at the same time that apply to a given node, such as if the > >admin just added a new RI LSA containing only the admin tag to augment t= he > >existing RI LSAs being sent. Is that possible? > > In OSPF, a more-recent version or instance of an LSA will always supersed= e > all previous instances of the same LSA. Thanks for clarifying. So, this is a non-issue, and the only question is whether the text could/should be changed to improve clarity. -Ben ---559023410-909332701-1444777070=:26829-- From nobody Tue Oct 13 16:02:48 2015 Return-Path: X-Original-To: secdir@ietfa.amsl.com Delivered-To: secdir@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 7BDB31A87BD; Tue, 13 Oct 2015 16:02:45 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -14.511 X-Spam-Level: X-Spam-Status: No, score=-14.511 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_HI=-5, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id lx79zS8liYhr; Tue, 13 Oct 2015 16:02:44 -0700 (PDT) Received: from alln-iport-6.cisco.com (alln-iport-6.cisco.com [173.37.142.93]) (using TLSv1 with cipher RC4-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 28B3C1A87BB; Tue, 13 Oct 2015 16:02:44 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=2896; q=dns/txt; s=iport; t=1444777364; x=1445986964; h=from:to:cc:subject:date:message-id:references: in-reply-to:content-id:content-transfer-encoding: mime-version; bh=mTWDODJICUJykDVxKpiu6knqgUvtTdYSeiIdZ5jq5+M=; b=FApUm+jjofRCFaulC66s85v8NGRuuwNKNhGlEKsvM3Cxmx1Ezvc1aCR5 SdDMmCvLmsItH3xgyraHJwco8tzwqarrQiPM2TxouYo1HGNe44c54Lync KvRgkbmVodyxUr7LMCLjiSV0oe+lmh2RDpt+S7EFwpJGFOSp6mjWT4nZn w=; X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: A0DwAQBLjR1W/4YNJK1eDoMYgUIGvgwBDYFagxODCQIcgSs4FAEBAQEBAQGBCoQnAQEEIxFFEAIBCBgCAiYCAgIwFRACBA4FiC6vIpNVAQEBAQEBAQEBAQEBAQEBAQEBAQEBF4EiilGEWjMHgmmBRQWWFgGNGZwHAR8BAUKCER2BFj5xhWuBBgEBAQ X-IronPort-AV: E=Sophos;i="5.17,680,1437436800"; d="scan'208";a="197553529" Received: from alln-core-12.cisco.com ([173.36.13.134]) by alln-iport-6.cisco.com with ESMTP; 13 Oct 2015 23:02:30 +0000 Received: from XCH-ALN-015.cisco.com (xch-aln-015.cisco.com [173.36.7.25]) by alln-core-12.cisco.com (8.14.5/8.14.5) with ESMTP id t9DN2Ua9010771 (version=TLSv1/SSLv3 cipher=AES256-SHA bits=256 verify=FAIL); Tue, 13 Oct 2015 23:02:30 GMT Received: from xch-rcd-015.cisco.com (173.37.102.25) by XCH-ALN-015.cisco.com (173.36.7.25) with Microsoft SMTP Server (TLS) id 15.0.1104.5; Tue, 13 Oct 2015 18:02:17 -0500 Received: from xch-rcd-015.cisco.com ([173.37.102.25]) by XCH-RCD-015.cisco.com ([173.37.102.25]) with mapi id 15.00.1104.000; Tue, 13 Oct 2015 18:02:16 -0500 From: "Acee Lindem (acee)" To: Benjamin Kaduk Thread-Topic: secdir review of draft-ietf-ospf-node-admin-tag-05 Thread-Index: AQHRAtRkZED+3D3sTk6f1e8MGzkzuJ5lMHaAgATWidGAABZXAIAARf4A//++TIA= Date: Tue, 13 Oct 2015 23:02:16 +0000 Message-ID: References: In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-ms-exchange-messagesentrepresentingtype: 1 x-ms-exchange-transport-fromentityheader: Hosted x-originating-ip: [10.116.152.199] Content-Type: text/plain; charset="utf-8" Content-ID: Content-Transfer-Encoding: base64 MIME-Version: 1.0 Archived-At: Cc: "draft-ietf-ospf-node-admin-tag.all@ietf.org" , "secdir@ietf.org" , Shraddha Hegde , "iesg@ietf.org" Subject: Re: [secdir] secdir review of draft-ietf-ospf-node-admin-tag-05 X-BeenThere: secdir@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: Security Area Directorate List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 13 Oct 2015 23:02:45 -0000 DQoNCk9uIDEwLzEzLzE1LCA2OjU3IFBNLCAiQmVuamFtaW4gS2FkdWsiIDxrYWR1a0BNSVQuRURV PiB3cm90ZToNCg0KPk9uIFR1ZSwgMTMgT2N0IDIwMTUsIEFjZWUgTGluZGVtIChhY2VlKSB3cm90 ZToNCj4NCj4+DQo+PiBPbiAxMC8xMy8xNSwgNjoyNyBQTSwgIkJlbmphbWluIEthZHVrIiA8a2Fk dWtATUlULkVEVT4gd3JvdGU6DQo+Pg0KPj4gPk9uIFN1biwgMTEgT2N0IDIwMTUsIFNocmFkZGhh IEhlZ2RlIHdyb3RlOg0KPj4gPg0KPj4gPj4gPihlYXNpbHkpIGJlIHVuc2V0LiAgV291bGQgZm9y Y2UtZXhwaXJpbmcgYW4gTFNBIGJlIGVub3VnaCB0byByZXNldA0KPj50aGUNCj4+ID4+ID50YWcs IG9yIHNvbWV0aGluZyBlbHNlPw0KPj4gPj4NCj4+ID4+IFllcyAtIHRoaXMgaXMgc3RhbmRhcmQg Zm9yIGFueSBPU1BGIExTQS4gSG93ZXZlciwgc2luY2UgdGhlIE9TUEYgUkkNCj4+TFNBDQo+PiA+ PiBtYXkgaW5jbHVkZSBvdGhlciBUTFZzIG9yIGV2ZW4gb3RoZXIgdGFncywgYSB0YWcgY291bGQg YWxzbyBiZQ0KPj53aXRoZHJhd24NCj4+ID4+IGJ5IHJlb3JpZ2luYXRpbmcgdGhlIFJJIExTQSB3 aXRob3V0IHRoZSBUTFYgb3Igd2l0aCBhIFRMViB0aGF0DQo+PmRvZXNu4oCZdA0KPj4gPj4gaW5j bHVkZSB0aGUgd2l0aGRyYXduIHRhZy4NCj4+ID4NCj4+ID5JIG1heSBzdGlsbCBiZSBjb25mdXNl ZCwgYnV0IEkgZGlkIG5vdCBpbnRlcnByZXQgdGhlIHRleHQgaW4gdGhhdCB3YXkuDQo+PiA+VGhh dCBpcywgdGhlIHRleHQgYWJvdXQgImFsbCBpbnN0YW5jZXMgb2YgdGhlIFJJIExTQSBvcmlnaW5h dGVkIGJ5IHRoYXQNCj4+ID5ub2RlIi4gIChXaGljaCBJIGNoYW5nZWQgdG8gImluc3RhbmNlcyBv ZiBSSSBMU0FzIiBpbiBteSBncmFtbWFyIGVkaXRzLA0KPj4gPnBvc3NpYmx5IGluY29ycmVjdGx5 IGlmIEknbSBzdGlsbCBjb25mdXNlZC4pICBJIHdhcyBpbnRlcnByZXRpbmcgdGhlDQo+PndvcmQN Cj4+ID4iaW5zdGFuY2VzIiB0byBpbmNsdWRlIGhpc3RvcmljYWwgb25lcyBvdmVyIHRpbWUsIHNv IHRoYXQgZXZlbiBpZiBhbiBSSQ0KPj4gPkxTQSBjYXJyeWluZyBhIHBhcnRpY3VsYXIgYWRtaW4g dGFnIHdhcyByZXBsYWNlZCBieSBhIGRpZmZlcmVudCBSSSBMU0ENCj4+ID5mb3IgdGhlIHNhbWUg YWR2ZXJ0aXNpbmcgcm91dGVyLCB0aGUgb2xkIG9uZSB3b3VsZCBzdGlsbCBiZSBhbg0KPj5pbnN0 YW5jZSBvZg0KPj4gPnRoYXQgUkkgTFNBLiAgR29pbmcgYmFjayB0byBSRkMgMjMyOCwgSSdtIG5v dCBzdXJlIHdoYXQgZXhhY3RseSBJIGhhZA0KPj5pbg0KPj4gPm1pbmQgaW4gdGVybXMgb2YgYWdl cyBhbmQgc2NvcGVzIGFuZCBzZXF1ZW5jZSBudW1iZXJzIHRoYXQgd291bGQgY2F1c2UNCj4+ID50 aGlzDQo+PiA+c2l0dWF0aW9uLCBidXQgSSBzb21laG93IGhhZCBpdCBpbiBteSBtaW5kIHRoYXQg dGhlcmUgY291bGQgYmUNCj4+bXVsdGlwbGUgUkkNCj4+ID5MU0FzIGFjdGl2ZSBhdCB0aGUgc2Ft ZSB0aW1lIHRoYXQgYXBwbHkgdG8gYSBnaXZlbiBub2RlLCBzdWNoIGFzIGlmIHRoZQ0KPj4gPmFk bWluIGp1c3QgYWRkZWQgYSBuZXcgUkkgTFNBIGNvbnRhaW5pbmcgb25seSB0aGUgYWRtaW4gdGFn IHRvIGF1Z21lbnQNCj4+dGhlDQo+PiA+ZXhpc3RpbmcgUkkgTFNBcyBiZWluZyBzZW50LiAgSXMg dGhhdCBwb3NzaWJsZT8NCj4+DQo+PiBJbiBPU1BGLCBhIG1vcmUtcmVjZW50IHZlcnNpb24gb3Ig aW5zdGFuY2Ugb2YgYW4gTFNBIHdpbGwgYWx3YXlzDQo+PnN1cGVyc2VkZQ0KPj4gYWxsIHByZXZp b3VzIGluc3RhbmNlcyBvZiB0aGUgc2FtZSBMU0EuDQo+DQo+VGhhbmtzIGZvciBjbGFyaWZ5aW5n LiAgU28sIHRoaXMgaXMgYSBub24taXNzdWUsIGFuZCB0aGUgb25seSBxdWVzdGlvbiBpcw0KPndo ZXRoZXIgdGhlIHRleHQgY291bGQvc2hvdWxkIGJlIGNoYW5nZWQgdG8gaW1wcm92ZSBjbGFyaXR5 Lg0KDQpMZXQgbWUgdGhpbmsgYWJvdXQgdGhpcyBzaW5jZSBpdCBpcyBhIGdlbmVyaWMgT1NQRiBS SSBhbWJpZ3VpdHkgYW5kIGl0DQp3aWxsIGFmZmVjdCBtdWx0aXBsZSBkb2N1bWVudHMuIEluIGEg V2ViRXggcmlnaHQgbm93IHRob3VnaOKApg0KDQpUaGFua3MsDQpBY2VlDQoNCg0KDQo+DQo+LUJl bg0KDQo= From nobody Tue Oct 13 19:30:56 2015 Return-Path: X-Original-To: secdir@ietfa.amsl.com Delivered-To: secdir@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id D13A01AD10A; Tue, 13 Oct 2015 19:30:54 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.211 X-Spam-Level: X-Spam-Status: No, score=-4.211 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 92g_XvKXLOAL; Tue, 13 Oct 2015 19:30:52 -0700 (PDT) Received: from dmz-mailsec-scanner-4.mit.edu (dmz-mailsec-scanner-4.mit.edu [18.9.25.15]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 718801AD0CB; Tue, 13 Oct 2015 19:30:51 -0700 (PDT) X-AuditID: 1209190f-f799c6d000001933-45-561dbe59578b Received: from mailhub-auth-4.mit.edu ( [18.7.62.39]) (using TLS with cipher DHE-RSA-AES256-SHA (256/256 bits)) (Client did not present a certificate) by dmz-mailsec-scanner-4.mit.edu (Symantec Messaging Gateway) with SMTP id 7D.B8.06451.95EBD165; Tue, 13 Oct 2015 22:30:49 -0400 (EDT) Received: from outgoing.mit.edu (outgoing-auth-1.mit.edu [18.9.28.11]) by mailhub-auth-4.mit.edu (8.13.8/8.9.2) with ESMTP id t9E2UfVR002223; Tue, 13 Oct 2015 22:30:41 -0400 Received: from multics.mit.edu (system-low-sipb.mit.edu [18.187.2.37]) (authenticated bits=56) (User authenticated as kaduk@ATHENA.MIT.EDU) by outgoing.mit.edu (8.13.8/8.12.4) with ESMTP id t9E2Ubr0002790 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NOT); Tue, 13 Oct 2015 22:30:39 -0400 Received: (from kaduk@localhost) by multics.mit.edu (8.12.9.20060308) id t9E2UaQ3020069; Tue, 13 Oct 2015 22:30:36 -0400 (EDT) Date: Tue, 13 Oct 2015 22:30:36 -0400 (EDT) From: Benjamin Kaduk To: bruno.decraene@orange.com In-Reply-To: <27748_1444745556_561D1154_27748_5857_1_53C29892C857584299CBF5D05346208A0F677EDF@OPEXCLILM21.corporate.adroot.infra.ftgroup> Message-ID: References: <27748_1444745556_561D1154_27748_5857_1_53C29892C857584299CBF5D05346208A0F677EDF@OPEXCLILM21.corporate.adroot.infra.ftgroup> User-Agent: Alpine 1.10 (GSO 962 2008-03-14) MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFupjleLIzCtJLcpLzFFi42IRYrdT143cJxtmcOSkjsWPHXOYLX6/2sJu MePPRGaLDwsfsljceLSX2YHVY8mSn0we15uusnu0PDvJFsAcxWWTkpqTWZZapG+XwJXxbPEF loJpLBXPvuc3MLYydzFycEgImEhMXyHTxcgJZIpJXLi3nq2LkYtDSGAxk8T9hnNMEM5GRokd 76awQDiHmCQOfJkPlWlglDizo5cVpJ9FQFvi8Zw/7CA2m4CKxMw3G9lAbBEBWYk/RxsZQRqY Be4xSuy7vxqsQVjAXuJIxzEWEJtToJNRYn1HLIjNK+AocaBlEzvEhn2MEt+mLWIGSYgK6Eis 3j+FBaJIUOLkzCdgNrOAlsTy6dtYJjAKzkKSmoUktYCRaRWjbEpulW5uYmZOcWqybnFyYl5e apGuiV5uZoleakrpJkZQUHNK8u9g/HZQ6RCjAAejEg9vxmrZMCHWxLLiytxDjJIcTEqivHl7 gEJ8SfkplRmJxRnxRaU5qcWHGCU4mJVEeFOXAOV4UxIrq1KL8mFS0hwsSuK8m37whQgJpCeW pGanphakFsFkZTg4lCR4c/YCNQoWpaanVqRl5pQgpJk4OEGG8wANbwWp4S0uSMwtzkyHyJ9i 1OVY8OP2WiYhlrz8vFQpcV4lkCIBkKKM0jy4OeBktJtJ9RWjONBbwryOIFU8wEQGN+kV0BIm oCVG7FIgS0oSEVJSDYxh66N+XFsUFPIscJ6t5Ky7bSukmPRU80/fLNnHfNLLLza/w1I4QrT2 qaWI4gHPBafj0hySJ52IvbdIv6lqxf1Xk3pZD/QvL21pqSx69JXtZ9M1E5G1r89wm1S/dQ45 dIvjoLnbBRVFp2fL7v5xOBMylbFCO+7LQd6ucwvNgm/EZIR+NxA+na7EUpyRaKjFXFScCAA6 pbFSIQMAAA== Archived-At: Cc: "draft-ietf-ospf-node-admin-tag.all@ietf.org" , "secdir@ietf.org" , Shraddha Hegde , "iesg@ietf.org" Subject: Re: [secdir] secdir review of draft-ietf-ospf-node-admin-tag-05 X-BeenThere: secdir@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: Security Area Directorate List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 14 Oct 2015 02:30:55 -0000 On Tue, 13 Oct 2015, bruno.decraene@orange.com wrote: > Hi Ben, > > > > > In section 4.5, I do not see that the constraint "Traffic from A nodes to > > > I nodes must not go through R and T nodes" can be satisfied for the > > > leftmost pair of A nodes. > > > > > > Thanks for the careful review. > > My mistake. I missed the left part of the network. > > I see 2 options: > > a) add some network topology on the left part > > b) remove the leftmost pair of A nodes. Option 'a' sounds good to me. -Ben From nobody Wed Oct 14 05:03:41 2015 Return-Path: X-Original-To: secdir@ietfa.amsl.com Delivered-To: secdir@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 896671A1B2A; Wed, 14 Oct 2015 05:03:40 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -14.511 X-Spam-Level: X-Spam-Status: No, score=-14.511 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_HI=-5, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id xAitF-i12OJU; Wed, 14 Oct 2015 05:03:35 -0700 (PDT) Received: from alln-iport-1.cisco.com (alln-iport-1.cisco.com [173.37.142.88]) (using TLSv1 with cipher RC4-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 68D761A1B1E; Wed, 14 Oct 2015 05:03:35 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=29542; q=dns/txt; s=iport; t=1444824217; x=1446033817; h=from:to:cc:subject:date:message-id:references: in-reply-to:content-id:content-transfer-encoding: mime-version; bh=PqY+t2GLgOfeIuT5OQzEnnDo1G5EL0b0YRQJNyOS3XM=; b=YpXrxXoXrVSv9nUmAZ96fFkR36NTnQLM38Z8OAQbto/2JTMsH6g66uh5 nPdTrHCrZxgnzpOnh2Bpbvk+fcFFmDY1oYtvtQ2TyKrrSPNziJ0SC3cCO P0PPbwsxjMS4VUMq+hkcSs9Z4N8m8l+WIU09hPH6vnDVKhkjxnLpkrE5k s=; X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: A0BhAgAURB5W/4cNJK1eDoMYgUIGvX0BDYFagxOCCn8CHIEgOBQBAQEBAQEBgQqEJgEBAQQaCQQNOgYFDAQCAQgRBAEBAQICIwMCAgIwFAEICAIEAQ0FiC6vIJNTAQEBAQEBAQEBAQEBAQEBAQEBAQEBF4EiilKEYhAbBwICAoJjgUUBBIc9inCDaAGNGoFYhDqDJIoMhFmDbgEfAQFCggwFARyBFj5xhWmBBgEBAQ X-IronPort-AV: E=Sophos;i="5.17,681,1437436800"; d="scan'208";a="198001395" Received: from alln-core-2.cisco.com ([173.36.13.135]) by alln-iport-1.cisco.com with ESMTP/TLS/DHE-RSA-AES256-SHA; 14 Oct 2015 12:03:35 +0000 Received: from XCH-RCD-011.cisco.com (xch-rcd-011.cisco.com [173.37.102.21]) by alln-core-2.cisco.com (8.14.5/8.14.5) with ESMTP id t9EC3XJE008132 (version=TLSv1/SSLv3 cipher=AES256-SHA bits=256 verify=FAIL); Wed, 14 Oct 2015 12:03:33 GMT Received: from xch-rcd-015.cisco.com (173.37.102.25) by XCH-RCD-011.cisco.com (173.37.102.21) with Microsoft SMTP Server (TLS) id 15.0.1104.5; Wed, 14 Oct 2015 07:03:19 -0500 Received: from xch-rcd-015.cisco.com ([173.37.102.25]) by XCH-RCD-015.cisco.com ([173.37.102.25]) with mapi id 15.00.1104.000; Wed, 14 Oct 2015 07:03:19 -0500 From: "Acee Lindem (acee)" To: Shraddha Hegde , Benjamin Kaduk Thread-Topic: secdir review of draft-ietf-ospf-node-admin-tag-05 Thread-Index: AQHRAtRkZED+3D3sTk6f1e8MGzkzuJ5lMHaAgATWidGAABZXAIAApESAgAA6PoA= Date: Wed, 14 Oct 2015 12:03:19 +0000 Message-ID: References: In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-ms-exchange-messagesentrepresentingtype: 1 x-ms-exchange-transport-fromentityheader: Hosted x-originating-ip: [10.116.152.199] Content-Type: text/plain; charset="utf-8" Content-ID: Content-Transfer-Encoding: base64 MIME-Version: 1.0 Archived-At: Cc: "draft-ietf-ospf-node-admin-tag.all@ietf.org" , "iesg@ietf.org" , "secdir@ietf.org" Subject: Re: [secdir] secdir review of draft-ietf-ospf-node-admin-tag-05 X-BeenThere: secdir@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: Security Area Directorate List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 14 Oct 2015 12:03:40 -0000 SGkgU2hyYWRkaGEsIA0KDQpPbiAxMC8xNC8xNSwgMTI6MzUgQU0sICJTaHJhZGRoYSBIZWdkZSIg PHNocmFkZGhhQGp1bmlwZXIubmV0PiB3cm90ZToNCg0KPkFjZWUsDQo+DQo+PC0tLXNuaXBwZWQg dG8gb3BlbiBwb2ludHMtLS0+DQo+DQo+DQo+LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0NCj4tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0NCj4NCj4+PiA8U2hyYWRkaGE+IENvdWxkIHlvdSBwbHMgZWxhYm9yYXRlIHRoZSBjYXNl LiBJIGRvbid0IHF1aXRlIHVuZGVyc3RhbmQNCj4+PiB3aHkgdGhlIEFCUiBpbiBhIHN0dWIvTlNT QSBhcmVhIHdvdWxkIGdlbmVyYXRlIG9yIHJlY2VpdmUgUkkgTFNBcw0KPj4+IHdpdGggZGlmZmVy ZW50IHNjb3Blcy5JIHRoaW5rIGl0J3MgcGVyZmVjdGx5IHZhbGlkIHRvIGZsb29kIHRoZSBBUw0K Pj4+IHNjb3BlZCBSSSBMU0FzIGludG8gdGhlIHN0dWIgLyBOU1NBIGFyZWEuDQo+Pg0KPj5BY2Vl LCBJIHRoaW5rIHRoaXMgaXMgYSBxdWVzdGlvbiBmb3IgeW91Lg0KPg0KPlllYWggLSBJIG1pc3Nl ZCB0aGlzIHdpdGhvdXQgRS1tYWlsIHF1b3RpbmfigKYNCj4NCj5TaHJhZGRoYSwgDQo+DQo+QVMt c2NvcGVkIExTQXMgYXJlIG5vdCBmbG9vZGVkIGludG8gc3R1YiBvciBOU1NBIGFyZWFzLiBTbywg aWYgYW4gQUJSIGlzDQo+Z29pbmcgdG8gYWR2ZXJ0aXNlIHRhZ3MgdG8gaXRzIGF0dGFjaGVkIGFy ZWFzIGFuZCB0aGUgcmVzdCBvZiB0aGUgT1NQRg0KPlJvdXRpbmcgZG9tYWluLCBpdCB3aWxsIG5l ZWQgdG8gb3JpZ2luYXRlIHRoZSBMU0EgYXQgZGlmZmVyZW50IHNjb3Blcy4NCj4NCj48U2hyYWRk aGE+IEFjZWUsICBJIHRoaW5rIHJlc3RyaWN0aW5nICBBUyBzY29wZWQgUkkgTFNBIGludG8gTlNT QSAvc3R1Yg0KPmFyZWFzIHdpbGwgaGF2ZSBtYW55IGlzc3Vlcy4NCj4gICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgIElmIGEgbm9uLUFCUiByb3V0ZXIgZnJvbSBvdGhlciBhcmVh DQo+b3JpZ2luYXRlcyBSSSBMU0Egd2l0aCBub2RlIHRhZyBhbmQgdGhlIHNwZWNpZmljIGFwcGxp Y2F0aW9uIG5lZWRzIHRoZQ0KPiAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg VGFnIHRvIGJlIGF2YWlsYWJsZSBpbiB0aGUgZW50aXJlDQo+T1BGIGRvbWFpbiwgaG93IHdpbGwg dGhlIHN0dWIvTlNTQSBhcmVhIHJvdXRlcnMgcmVjZWl2ZSBpdD8NCj4gICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgIEkgdGhpbmsgdGhpcyBkaXNjdXNzaW9uIGlzIGVxdWFsbHkN Cj5yZWxldmFudCB0byA0OTcwYmlzLg0KPiAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgIEkgZG9uJ3Qgc2VlIGEgcmVhc29uIHdoeSBBUyBzY29wZWQNCj5SSSBMU0Egc2hvdWxk IGJlIHJlc3RyaWN0ZWQgaW4gc3R1Yi9OU1NBLg0KPiAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICBSSSBMU0FzIGRvIG5vdCBjb250YWluIGFueSByb3V0ZQ0KPmluZm9ybWF0 aW9uIHNvIGl0J3Mgbm90IGdvaW5nIHRvIGJlIGh1Z2UgaW4gbnVtYmVyLg0KDQpCeSBkZWZpbml0 aW9uLCBBUy1zY29wZWQgTFNBcyBhcmUgTk9UIGZsb29kZWQgaW50byBhIHN0dWIgb3IgTlNTQSBh cmVhLg0KUGxlYXNlIHJlYWQgc3R1YiBhbmQgTlNTQSBhcmVhIHJlZmVyZW5jZXMgaW4gUkZDIDIz MjgsIFJGQyA1MzQwLCBSRkMgNTI1MCwNCmFuZCBSRkMgMzEwMS4gWW914oCZbGwgbm90ZSB0aGF0 IHN0dWIgYW5kIE5TU0EgYXJlYSBoYXZlIG5vIHZpc2liaWxpdHkgdG8NCnRvcG9sb2d5IG9yIFJv dXRlciBJRHMgb2YgT1NQRiByb3V0ZXJzIGluIG90aGVyIGFyZWFzLg0KDQpIb3BlIHRoaXMgaGVs cHMsIA0KQWNlZSANCg0KDQoNCg0KPiAgICAgICAgICAgICAgICAgIA0KPiAgICAgICAgICAgICAg ICAgIA0KPg0KPg0KPg0KPg0KPg0KPi0tLS0tT3JpZ2luYWwgTWVzc2FnZS0tLS0tDQo+RnJvbTog QWNlZSBMaW5kZW0gKGFjZWUpIFttYWlsdG86YWNlZUBjaXNjby5jb21dDQo+U2VudDogV2VkbmVz ZGF5LCBPY3RvYmVyIDE0LCAyMDE1IDQ6MTcgQU0NCj5UbzogQmVuamFtaW4gS2FkdWsgPGthZHVr QE1JVC5FRFU+OyBTaHJhZGRoYSBIZWdkZSA8c2hyYWRkaGFAanVuaXBlci5uZXQ+DQo+Q2M6IGll c2dAaWV0Zi5vcmc7IHNlY2RpckBpZXRmLm9yZzsNCj5kcmFmdC1pZXRmLW9zcGYtbm9kZS1hZG1p bi10YWcuYWxsQGlldGYub3JnDQo+U3ViamVjdDogUmU6IHNlY2RpciByZXZpZXcgb2YgZHJhZnQt aWV0Zi1vc3BmLW5vZGUtYWRtaW4tdGFnLTA1DQo+DQo+U2VlIGlubGluZS4gDQo+DQo+T24gMTAv MTMvMTUsIDY6MjcgUE0sICJCZW5qYW1pbiBLYWR1ayIgPGthZHVrQE1JVC5FRFU+IHdyb3RlOg0K Pg0KPj5UaGFua3MsIFNocmFkZGhhIGFuZCBBY2VlLCBmb3IgaGVscGluZyBtZSBmaW5kIHNvbWUg b2YgdGhlIGNvbnRleHQgSQ0KPj53YXMgbWlzc2luZy4NCj4+DQo+Pk9uIFN1biwgMTEgT2N0IDIw MTUsIFNocmFkZGhhIEhlZ2RlIHdyb3RlOg0KPj4NCj4+Pg0KPj4+IFRoYW5rcyBCZW4gZm9yIGRl dGFpbGVkIHJldmlldyBjb21tZW50cy5UaGFua3MgQWNlZSBmb3IgY2hpbWluZy1pbi4NCj4+PiBG ZXcgbW9yZSBleHBsYW5hdGlvbnMgaW4tbGluZS4NCj4+Pg0KPj4+IC0tLS0tT3JpZ2luYWwgTWVz c2FnZS0tLS0tDQo+Pj4gRnJvbTogQWNlZSBMaW5kZW0gKGFjZWUpIFttYWlsdG86YWNlZUBjaXNj by5jb21dDQo+Pj4gU2VudDogU3VuZGF5LCBPY3RvYmVyIDExLCAyMDE1IDE6MDQgQU0NCj4+PiBU bzogQmVuamFtaW4gS2FkdWsgPGthZHVrQE1JVC5FRFU+OyBpZXNnQGlldGYub3JnOyBzZWNkaXJA aWV0Zi5vcmc7DQo+Pj5kcmFmdC1pZXRmLW9zcGYtbm9kZS1hZG1pbi10YWcuYWxsQGlldGYub3Jn DQo+Pj4gU3ViamVjdDogUmU6IHNlY2RpciByZXZpZXcgb2YgZHJhZnQtaWV0Zi1vc3BmLW5vZGUt YWRtaW4tdGFnLTA1DQo+Pj4NCj4+PiBIaSBCZW4sDQo+Pj4NCj4+PiBBcyB0aGUgZG9jdW1lbnQg c2hlcGhlcmQgYW5kIGEgbG9uZy10aW1lIE9TUEYgY29udHJpYnV0b3IsIEnigJltIGdvaW5nDQo+ Pj4gdG8gdHJ5IGFuZCBzb3J0IG91dCBzb21lIG9mIHlvdXIgY29tbWVudHMuIE5vdGUgdGhhdCBy b3V0ZSB0YWdnaW5nDQo+Pj4gaGFzIGJlZW4gaW4gdXNlIGZvciBkZWNhZGVzIGFuZCB0aGlzIGRv Y3VtZW50IGlzIG1lcmVseSBleHRlbmRpbmcgdGhlDQo+Pj4gYWRtaW5pc3RyYXRpdmUgcG9saWNp ZXMgYWR2ZXJ0aXNlbWVudCB0byB0aGUgbm9kZSBsZXZlbC4NCj4+DQo+Pkdvb2QgdG8ga25vdzsg SSBkaWRuJ3QgZ2V0IHRvIGxvb2sgYXQgbWFueSB1cGRhdGVzIHBhc3QgdGhlIGNvcmUgT1NQRnYy DQo+PnNwZWMuDQo+Pg0KPj4+IE9uIDEwLzkvMTUsIDQ6NTIgUE0sICJCZW5qYW1pbiBLYWR1ayIg PGthZHVrQE1JVC5FRFU+IHdyb3RlOg0KPj4+DQo+Pj4gPkkgaGF2ZSByZXZpZXdlZCB0aGlzIGRv Y3VtZW50IGFzIHBhcnQgb2YgdGhlIHNlY3VyaXR5IGRpcmVjdG9yYXRlJ3MNCj4+PiA+b25nb2lu ZyBlZmZvcnQgdG8gcmV2aWV3IGFsbCBJRVRGIGRvY3VtZW50cyBiZWluZyBwcm9jZXNzZWQgYnkg dGhlDQo+Pj4gPklFU0cuICBUaGVzZSBjb21tZW50cyB3ZXJlIHdyaXR0ZW4gcHJpbWFyaWx5IGZv ciB0aGUgYmVuZWZpdCBvZiB0aGUNCj4+PiA+c2VjdXJpdHkgYXJlYSBkaXJlY3RvcnMuICBEb2N1 bWVudCBlZGl0b3JzIGFuZCBXRyBjaGFpcnMgc2hvdWxkDQo+Pj4gPnRyZWF0IHRoZXNlIGNvbW1l bnRzIGp1c3QgbGlrZSBhbnkgb3RoZXIgbGFzdCBjYWxsIGNvbW1lbnRzLg0KPj4+ID4NCj4+PiA+ SSB3aWxsIHByZWZhY2UgdGhlc2UgY29tbWVudHMgd2l0aCBhIG5vdGUgdGhhdCBteSByb3V0aW5n IGJhY2tncm91bmQNCj4+PiA+aXMgcXVpdGUgd2VhaywgYW5kIEkgbmVlZGVkIHRvIHJlYWQgUkZD IDIzMjggYW5kIFJGQyA0OTcwIHRvIGhhdmUNCj4+PiA+ZW5vdWdoIGNvbnRleHQgdG8gYmUgYWJs ZSB0byBzYXkgbXVjaCB1c2VmdWwgYWJvdXQgd2hhdCdzIGdvaW5nIG9uDQo+Pj4gPmhlcmU7IEkg bWF5IHN0aWxsIGJlIHN1ZmZlcmluZyBmcm9tIHNvbWUgbWlzY29uY2VwdGlvbnMuDQo+Pj4gPg0K Pj4+ID5PbiB0aGUgd2hvbGUsIHRoaXMgZG9jdW1lbnQgbGVhdmVzIG1lIGZlZWxpbmcgdW5zYXRp c2ZpZWQ7IGl0IHNwZW5kcw0KPj4+ID5tYXliZSB0aHJlZSBwYWdlcyB0YWxraW5nIGFib3V0IHRo ZSBhY3R1YWwgbmV3IHByb3RvY29sIGV4dGVuc2lvbg0KPj4+ID5hbmQgdGhlbiBnaXZlcyBmb3Vy IHBhZ2VzIG9mIGV4YW1wbGUgdXNhZ2UsIGFsbCB0aGUgd2hpbGUgY2xhaW1pbmcNCj4+PiA+dGhh dCB0aGUgYWN0dWFsIHRhZyB2YWx1ZXMgYXJlIG9ubHkgbWVhbmluZ2Z1bCB3aXRoaW4gYSBzaW5n bGUNCj4+PiA+YWRtaW5pc3RyYXRpdmUgZG9tYWluL25ldHdvcmssIGFyZSBmb3IgZ2VuZXJpYyB1 c2UsIGFuZCBkbyBub3QNCj4+PiA+cmVxdWlyZSBhbiBJQU5BIHJlZ2lzdHJ5LiAgVGhhdCBpcywg aXQgaXMgdHJ5aW5nIHRvIHdhbGsgYSBtaWRkbGUNCj4+PiA+bGluZSBiZXR3ZWVuICJ0aGlzIGRv Y3VtZW50IGFsbG9jYXRlcyBhIHZhbHVlIGluIHRoZSBPU1BGIFRMVnMNCj4+PiA+cmVnaXN0cnkg Zm9yIHNpdGUtbG9jYWwgdXNlLCB1c2UgaXQgYXMgeW91IHdpbGwiIGFuZCAidGhpcyBkb2N1bWVu dA0KPj4+ID5zcGVjaWZpZXMgYSBjb21wbGV0ZSBwcm90b2NvbCBleHRlbnNpb24gZm9yIHRhZ2dp bmcgT1NQRiBub2RlcyBmb3INCj4+PiA+dHJhZmZpYyBlbmdpbmVlcmluZywgTEZBLCBhbmQgb3Ro ZXIgcHVycG9zZXMiLiAgVGhhdCBpcyBhIGhhcmQNCj4+PiA+bWlkZGxlIGxpbmUgdG8gZm9sbG93 LCBhbmQgSSBhbQ0KPj4+bm90IHN1cmUgdGhhdCB0aGlzIGRvY3VtZW50IGRvZXMgc28gc3VjY2Vz c2Z1bGx5Lg0KPj4+ID5JIHdpbGwgbm90IHRyeSB0byByZW9wZW4gdGhlIHF1ZXN0aW9uIG9mIHdo ZXRoZXIgaXQgd291bGQgYmUgYmV0dGVyDQo+Pj4gPnRvIHRha2Ugb25lIG9mIHRoZSBub24tbWlk ZGxlIHBhdGhzLCBhbmQgY29udGludWUgb24gdGhlIGFzc3VtcHRpb24NCj4+PiA+dGhhdCB0aGlz IGRvY3VtZW50IHdpbGwgdGFrZSB0aGUgbWlkZGxlIHBhdGguICBJIHRoaW5rIHRoZXJlIGFyZSBh DQo+Pj4gPmZldyB0aGluZ3MgdGhhdCBhcmUgbWlzc2luZyBiZWZvcmUgdGhpcyBkb2N1bWVudCBz aG91bGQgYmUNCj4+PiA+cHVibGlzaGVkLCBhbmQgdGhhdCBpdCBtaWdodCBiZSB3b3J0aCBjb25z aWRlcmluZyBhIG1vcmUgZHJhc3RpYw0KPj4+ID5yZXN0cnVjdHVyaW5nIGFzDQo+Pj53ZWxsLg0K Pj4+ID4NCj4+PiA+SXQgd291bGQgcHJvYmFibHkgYmUgZ29vZCB0byBpbmNsdWRlIHNvbWUgdGV4 dCB3aXRoIHRoZSByZWFzb25pbmcNCj4+PiA+YmVoaW5kIHRoZSBjaG9pY2Ugb2YgdGhlICJtaWRk bGUgbGluZSIgLS0gdGhlIGN1cnJlbnQgdGV4dA0KPj4+ID5hdHRlbXB0aW5nIHRvIGVuZm9yY2Ug aXQsICJuZXcgT1NQRiBleHRlbnNpb25zIE1VU1QgTk9UIHJlcXVpcmUgdXNlDQo+Pj4gPm9mIHBl ci1ub2RlIGFkbWluaXN0cmF0aXZlIHRhZ3Mgb3IgZGVmaW5lIHdlbGwta25vd24gdGFnIHZhbHVl cyIsDQo+Pj4gPnNlZW1zIHVuZW5mb3JjYWJsZSwgYXMgYSBmdXR1cmUgUkZDIHVwZGF0aW5nIHRo aXMgb25lIGNvdWxkIGp1c3QNCj4+PiA+cmVtb3ZlIHRoYXQNCj4+PnJlc3RyaWN0aW9uLg0KPj4+ DQo+Pj4gVGhlIGludGVudCBoZXJlIGlzIHRoYXQgdGhpcyBUTFYgaXMgdG8gYmUgc29sZWx5IGZv ciBsb2NhbGx5IGRlZmluZWQNCj4+PiBwb2xpY2llcy4gSWYgdGhlcmUgd2VyZSB0byBiZSBhIFRM ViBmb3Igd2VsbC1rbm93biB0YWdzIGFuZCBwb2xpY2llcywNCj4+PiB0aGlzIGNvdWxkIGJlIGFj Y29tcGxpc2hlZCB3aXRoIGEgc2VwYXJhdGUgT1NQRiBSSSBUTFYuIEkgYWdyZWUgdGhhdA0KPj4+ IHRoZSBub3JtYXRpdmUgdGV4dCBzaG91bGQgYmUgc29mdGVuZWQgZnJvbSDigJxNVVNUIE5PVOKA nSB0byDigJxhcmUgbm90DQo+Pj4gZXhwZWN0ZWQgdG/igJ0uDQo+Pj4NCj4+PiA8U2hyYWRkaGE+ IFRoZXJlIHdhcyBhIGxvbmcgZGlzY3Vzc2lvbiBvbiB0aGUgbWFpbGluZyBsaXN0IG9uIHdoZXRo ZXINCj4+PiB3ZSBzaG91bGQgYWxsb3cgd2VsbCBkZWZpbmVkIHZhbHVlcyBmb3IgdGhlIGFkbWlu IHRhZ3MgbWFqb3JpdHkNCj4+PiBjb25zZW5zdXMgd2FzIHRoYXQgd2Ugc2hvdWxkIG5vdCBhbGxv dyBhbnkgc3RhbmRhcmQgdmFsdWVzIGZvciBub2RlDQo+Pj4gYWRtaW4gdGFncyBhbmQgaW4gZnV0 dXJlIGlmIHN1Y2ggYSByZXF1aXJlbWVudCBhcmlzZXMgaXQnbGwgZ28gYXMgbmV3DQo+Pj4gZmVh dHVyZSBpbiBSSSBUTFYgYXMgQWNlZSBhbHJlYWR5IG1lbnRpb25lZC4gSSBhbSB0cnlpbmcgdG8N Cj4+PiB1bmRlcnN0YW5kIHdoeSB0aGUgdGV4dCBuZWVkIHRvIGJlIHNvZnRlbmVkIHdoZW4gYW55 IGZ1dHVyZQ0KPj4+IHN0YW5kYXJkaXphdGlvbiB3b3VsZCBuZWVkIGFsdG9nZXRoZXIgYSBuZXcg ZG9jdW1lbnQgYW5kIHdpbGwgbm90DQo+Pj5yZXF1aXJlIGFueSBjaGFuZ2VzIHRvIHRoaXMgZG9j dW1lbnQuDQo+Pg0KPj5JIHN1Z2dlc3RlZCB0aGF0IHRoZSB0ZXh0IGJlIHNvZnRlbmVkIGJlY2F1 c2UgdGhlIGN1cnJlbnQgc3RhdGVtZW50DQo+PmRvZXMgbm90IGhhdmUgYW55IHByYWN0aWNhbCBl ZmZlY3QuICBJdCdzIHRyeWluZyB0byBwbGFjZSByZXN0cmljdGlvbnMNCj4+b24gd2hhdCB7dGhl IHNldCBvZiBmdXR1cmUgUkZDcyB0aGF0IHVwZGF0ZSB0aGlzIGRvY3VtZW50fSBjYW4gZG8sIGJ1 dA0KPj5hbnkgZG9jdW1lbnQgaW4gdGhhdCBzZXQgY291bGQgcmVtb3ZlIHN1Y2ggYSByZXN0cmlj dGlvbiBhbmQgb3ZlcnJpZGUNCj4+aXQgYXQgdGhlIHNhbWUgdGltZS4NCj4+DQo+PkkgdGhpbmsg aXQgd291bGQgYmUgZ29vZCB0byBoYXZlIGEgbm90ZSBpbiBzZWN0aW9uIDIgdG8gdGhlIGVmZmVj dCB0aGF0DQo+PiJ0aGVzZSBhZG1pbmlzdHJhdGl2ZSB0YWdzIGFyZSBzb2xlbHkgZm9yIHVzZSB3 aXRoaW4gYW4gYWRtaW5pc3RyYXRpdmUNCj4+ZG9tYWluIGFuZCBhcmUgdGhlaXIgaW50ZXJwcmV0 YXRpb24gaXMgYSBtYXR0ZXIgb2YgbG9jYWwgcG9saWN5LiAgSXQgaXMNCj4+ZXhwZWN0ZWQgdGhh dCB2YWx1ZXMgd2lsbCBub3QgYmUgcG9ydGFibGUgYWNyb3NzIGFkbWluaXN0cmF0aXZlIGRvbWFp bnMiLg0KPj5JIGtub3cgdGhhdCB0aGlzIHRvcGljIGlzIGNvdmVyZWQgbGF0ZXIgaW4gdGhlIGRv Y3VtZW50LCBidXQgaGF2aW5nIGl0DQo+PmVhcmx5IHdvdWxkIGhlbHAgc2V0IHRoZSBzdGFnZSBm b3IgdGhlIHJlc3Qgb2YgdGhlIGRvY3VtZW50Lg0KPj4NCj4+PiA+SXQgbG9va3MgbGlrZSB0aGVy ZSdzIG5vdyBhbiAtMDYsIGJ1dCB0aGUgY2hhbmdlcyBmcm9tIHRoZSAtMDUgYXJlDQo+Pj4gPm5v dCBzaWduaWZpY2FudC4gIFRoZSBzZWN1cml0eSBjb25zaWRlcmF0aW9ucyBpbiB0aGUgLTA1IGNv cnJlY3RseQ0KPj4+ID5ub3RlIHdoYXQgYXJlIGVzc2VudGlhbGx5IHByaXZhY3kgY29uc2lkZXJh dGlvbnMgcmVnYXJkaW5nIHRoZQ0KPj4+ID5jb250ZW50cyBvZiB0aGUgYWRtaW4gdGFncy4gIEhv d2V2ZXIsIGl0IHNlZW1zIGxpa2UgdGhlcmUgYXJlIGFsc28NCj4+PiA+cG90ZW50aWFsIHNlY3Vy aXR5IGNvbnNpZGVyYXRpb25zIG9uIHRoZSBhY3R1YWwgb3BlcmF0aW9uIG9mIHRoZQ0KPj4+ID5u ZXR3b3JrIHRoYXQgYXJlIG5vdCBkaXNjdXNzZWQgaGVyZSwgbm9yIGluIFJGQyAyMzI4IChPU1BG djIpIG9yIFJGQw0KPj4+ID41MzQwIChPU1BGdjMpLiAgUkZDIDUzNDAncyBzZWN1cml0eSBjb25z aWRlcmF0aW9ucyBleHBsaWNpdGx5DQo+Pj4gPmRpc2NsYWltcyBwcm90ZWN0aW9ucyBhZ2FpbnN0 IGNvbXByb21pc2VkLCBtYWxmdW5jdGlvbmluZywgb3INCj4+PiA+bWlzY29uZmlndXJlZCByb3V0 ZXJzLCBkZWZlcnJpbmcgdG8gUkZDIDQ1OTMsICJHZW5lcmljIFRocmVhdHMgdG8NCj4+PiA+Um91 dGluZyBQcm90b2NvbHMiLiAgSSBiZWxpZXZlIHRoYXQgdGhlIHNlY3VyaXR5IGNvbnNpZGVyYXRp b25zIG9mDQo+Pj4gPnRoaXMgZG9jdW1lbnQgc2hvdWxkIGFkZHJlc3MsIGVpdGhlciBkaXJlY3Rs eSBvciBpbmRpcmVjdGx5LA0KPj4+ID5wcm90ZWN0aW9ucyBhZ2FpbnN0IGNvbXByb21pc2VkLCBt YWxmdW5jdGlvbmluZywgb3IgbWlzY29uZmlndXJlZA0KPj4+ID5yb3V0ZXJzLCBhbmQgYWRkaXRp b25hbGx5IHByb3RlY3Rpb24gYWdhaW5zdCBtYWxpY2lvdXMgYWN0b3JzIHdpdGgNCj4+PiA+YWNj ZXNzIHRvIHRoZSBsYXllci0zIG5ldHdvcmsgKGFuZCBtYXliZSBsb3dlciBsYXllcnMgYXMgd2Vs bCkuDQo+Pj4gPg0KPj4+ID5UaGF0IHByb2JhYmx5IG1lYW5zIG1lbnRpb25pbmcgUkZDIDQ1OTMg ZGlyZWN0bHksIG9yIG1heWJlIGp1c3QNCj4+PiA+cG9pbnRpbmcgb3V0IHRoYXQgUkZDIDUzNDAg ZG9lcyBzby4gIFRoZXJlIGFyZSBzdGlsbCBhZGRpdGlvbmFsDQo+Pj4gPmNvbnNpZGVyYXRpb25z IGludHJvZHVjZWQgYnkgdGhpcyBkb2N1bWVudCwgdGhvdWdoOyB1bmZvcnR1bmF0ZWx5LA0KPj4+ ID5iZWNhdXNlIHRoZSBidWxrIG9mIHRoZSBpbnRlcnByZXRhdGlvbiBvZiB0aGUgYWRtaW4gdGFn cyBpcyBsZWZ0IHRvDQo+Pj4gPnRoZSBzaXRlIGFkbWluaXN0cmF0b3IsIGl0IGlzIGhhcmQgdG8g Z2l2ZSBhIGNvbXByZWhlbnNpdmUgc2VjdXJpdHkNCj4+PiA+YW5hbHlzaXMsIGJ1dCB0aGUgZXhh bXBsZXMgYW5kIHRoZSBwcm90b2NvbCBkZXNjcmlwdGlvbiBpdHNlbGYgZG8NCj4+PiA+Z2l2ZQ0K Pj4+c29tZSBhcmVhcyBmb3IgY29uc2lkZXJhdGlvbi4NCj4+Pg0KPj4+IFRoZSBkb2N1bWVudCBj b3VsZCByZWZlcmVuY2UgUkZDIDQ1OTMvUkZDIDY4NjMgYW5kIHN0YXRlIHRoYXQNCj4+PiBhdXRo ZW50aWNhdGlvbiBhcyBzcGVjaWZpZWQgaW4gUkZDIDc0NzQgb3IgUkZDIDcxNjYgU0hPVUxEIGJl IHVzZWQgaW4NCj4+PiBkZXBsb3ltZW50cyB3aGVyZSBhdHRhY2tlcnMgaGF2ZSBhY2Nlc3MgdG8g dGhlIHBoeXNpY2FsIG5ldHdvcmtzDQo+Pj4gaW5jbHVkZWQgaW4gdGhlIE9TUEYgZG9tYWluIGFy ZSB2dWxuZXJhYmxlLg0KPj4+IDxTaHJhZGRoYT4gb2suIFVwZGF0aW5nIHRoZSBTZWN1cml0eSBj b25zaWRlcmF0aW9uIHNlY3Rpb24NCj4+DQo+PlRoYW5rcy4NCj4+DQo+Pj4NCj4+PiA+DQo+Pj4g PlRoZSBSSSBMU0FzIGNhcnJ5aW5nIGFkbWluaXN0cmF0aXZlIHRhZ3MgY2FuIGJlIGF0IGxpbmst LCBhcmVhLSwgb3INCj4+PiA+QVMtbGV2ZWwgc2NvcGU7IGFuIGFkbWluaXN0cmF0b3IgYXNzaWdu aW5nIHRhZyB2YWx1ZXMgYW5kIGFzc29jaWF0ZWQNCj4+PiA+cG9saWNpZXMgc2hvdWxkIGNvbnNp ZGVyIHdoYXQgd291bGQgaGFwcGVuIGlmIGEgZ2l2ZW4gdGFnIHdhcw0KPj4+ID5hZHZlcnRpc2Vk IGF0IGEgZGlmZmVyZW50IHNjb3BlIHRoYW4gaW50ZW5kZWQuICBDb21wbGlhbnQNCj4+PiA+aW1w bGVtZW50YXRpb25zIE1VU1QgTk9UIGdlbmVyYXRlIHRoZSBzYW1lIHRhZyBhdCBkaWZmZXJlbnQg c2NvcGVzLA0KPj4+ID5idXQgYSByZWNlaXZlciB3b3VsZCBuZWVkIHRvIHRha2Ugc29tZSBhY3Rp b24gaWYgaXQgaGFwcGVuZWQsDQo+Pj4gPndoZXRoZXIgZHVlIHRvIG5ldHdvcmsgZ2xpdGNoIG9y IG1hbGljaW91cyBhY3Rpb24gLS0gd2hhdCBzaG91bGQgdGhleQ0KPj4+ZG8/DQo+Pj4NCj4+PiBJ 4oCZbSBub3QgYW4gYXV0aG9yLCBidXQgdGhpcyBpcyB3aGF0IEnigJlkIHJlY29tbWVuZDoNCj4+ Pg0KPj4+ICAgIFRoZSBjb25mbGljdGluZyB0YWcgU0hPVUxEIG5vdCBiZSB1c2VkIGFuZCB0aGlz IHNpdHVhdGlvbiBTSE9VTEQNCj4+PiBiZSBsb2dnZWQgYXMgYW4gZXJyb3IgaW5jbHVkaW5nIHRo ZSB0YWcgd2l0aCBjb25mbGljdGluZyBzY29wZXMgYW5kDQo+Pj4gdGhlIG9yaWdpbmF0b3Iocyku DQo+Pj4gPFNocmFkZGhhPiBVcGRhdGVkIHRoZSBkb2N1bWVudCB3aXRoIGFib3ZlIHN0YXRlbWVu dC4NCj4+Pg0KPj4+IFRoZXJlIGlzIGEgY2FzZSB0aGF0IG11c3QgYmUgYWxsb3dlZCAtIHRoZSBz YW1lIHRhZyBjb3VsZCBiZSByZWNlaXZlZA0KPj4+IGJ5IGFuIEFCUiBhdCBib3RoIHRoZSBBUyBz Y29wZSBhbmQgdGhlIGFyZWEgc2NvcGUgaW4gYSBzdHViIG9yIE5TU0ENCj4+PmFyZWEuDQo+Pj4g PFNocmFkZGhhPiBDb3VsZCB5b3UgcGxzIGVsYWJvcmF0ZSB0aGUgY2FzZS4gSSBkb24ndCBxdWl0 ZSB1bmRlcnN0YW5kDQo+Pj4gd2h5IHRoZSBBQlIgaW4gYSBzdHViL05TU0EgYXJlYSB3b3VsZCBn ZW5lcmF0ZSBvciByZWNlaXZlIFJJIExTQXMNCj4+PiB3aXRoIGRpZmZlcmVudCBzY29wZXMuSSB0 aGluayBpdCdzIHBlcmZlY3RseSB2YWxpZCB0byBmbG9vZCB0aGUgQVMNCj4+PiBzY29wZWQgUkkg TFNBcyBpbnRvIHRoZSBzdHViIC8gTlNTQSBhcmVhLg0KPj4NCj4+QWNlZSwgSSB0aGluayB0aGlz IGlzIGEgcXVlc3Rpb24gZm9yIHlvdS4NCj4NCj5ZZWFoIC0gSSBtaXNzZWQgdGhpcyB3aXRob3V0 IEUtbWFpbCBxdW90aW5n4oCmDQo+DQo+U2hyYWRkaGEsIA0KPg0KPkFTLXNjb3BlZCBMU0FzIGFy ZSBub3QgZmxvb2RlZCBpbnRvIHN0dWIgb3IgTlNTQSBhcmVhcy4gU28sIGlmIGFuIEFCUiBpcw0K PmdvaW5nIHRvIGFkdmVydGlzZSB0YWdzIHRvIGl0cyBhdHRhY2hlZCBhcmVhcyBhbmQgdGhlIHJl c3Qgb2YgdGhlIE9TUEYNCj5Sb3V0aW5nIGRvbWFpbiwgaXQgd2lsbCBuZWVkIHRvIG9yaWdpbmF0 ZSB0aGUgTFNBIGF0IGRpZmZlcmVudCBzY29wZXMuDQo+DQo+DQo+DQo+Pg0KPj4+ID5Bbm90aGVy IHBvdGVudGlhbCBpc3N1ZSBsaWVzIGluIHRoZSAic3RpY2tpbmVzcyIgb2YgdGhlIGFkbWluIHRh Z3MNCj4+PiA+LS0gdGhlIHRleHQgInRoZSBub2RlIGFkbWluaXN0cmF0aXZlIHRhZ3MgYXNzb2Np YXRlZCB3aXRoIGEgbm9kZSBmb3INCj4+PiA+dGhlIHB1cnBvc2Ugb2YgYW55IGNvbXB1dGF0aW9u IG9yIHByb2Nlc3NpbmcgU0hPVUxEIGJlIGEgc3VwZXJzZXQgb2YNCj4+PiA+bm9kZSBhZG1pbmlz dHJhdGl2ZSB0YWdzIGZyb20gYWxsIHRoZSBUTFZzIGluIGFsbCBpbnN0YW5jZXMgb2YgdGhlDQo+ Pj4gPlJJIExTQSBvcmlnaW5hdGVkIGJ5IHRoYXQgbm9kZSIgc2VlbXMgdG8gbWVhbiB0aGF0IG9u Y2UgYSB0YWcgaXMNCj4+PiA+c2V0LCBpdCBjYW5ub3QNCj4+PiA+KGVhc2lseSkgYmUgdW5zZXQu ICBXb3VsZCBmb3JjZS1leHBpcmluZyBhbiBMU0EgYmUgZW5vdWdoIHRvIHJlc2V0DQo+Pj4gPnRo ZSB0YWcsIG9yIHNvbWV0aGluZyBlbHNlPw0KPj4+DQo+Pj4gWWVzIC0gdGhpcyBpcyBzdGFuZGFy ZCBmb3IgYW55IE9TUEYgTFNBLiBIb3dldmVyLCBzaW5jZSB0aGUgT1NQRiBSSQ0KPj4+IExTQSBt YXkgaW5jbHVkZSBvdGhlciBUTFZzIG9yIGV2ZW4gb3RoZXIgdGFncywgYSB0YWcgY291bGQgYWxz byBiZQ0KPj4+IHdpdGhkcmF3biBieSByZW9yaWdpbmF0aW5nIHRoZSBSSSBMU0Egd2l0aG91dCB0 aGUgVExWIG9yIHdpdGggYSBUTFYNCj4+PiB0aGF0IGRvZXNu4oCZdCBpbmNsdWRlIHRoZSB3aXRo ZHJhd24gdGFnLg0KPj4NCj4+SSBtYXkgc3RpbGwgYmUgY29uZnVzZWQsIGJ1dCBJIGRpZCBub3Qg aW50ZXJwcmV0IHRoZSB0ZXh0IGluIHRoYXQgd2F5Lg0KPj5UaGF0IGlzLCB0aGUgdGV4dCBhYm91 dCAiYWxsIGluc3RhbmNlcyBvZiB0aGUgUkkgTFNBIG9yaWdpbmF0ZWQgYnkgdGhhdA0KPj5ub2Rl Ii4gIChXaGljaCBJIGNoYW5nZWQgdG8gImluc3RhbmNlcyBvZiBSSSBMU0FzIiBpbiBteSBncmFt bWFyIGVkaXRzLA0KPj5wb3NzaWJseSBpbmNvcnJlY3RseSBpZiBJJ20gc3RpbGwgY29uZnVzZWQu KSAgSSB3YXMgaW50ZXJwcmV0aW5nIHRoZQ0KPj53b3JkICJpbnN0YW5jZXMiIHRvIGluY2x1ZGUg aGlzdG9yaWNhbCBvbmVzIG92ZXIgdGltZSwgc28gdGhhdCBldmVuIGlmDQo+PmFuIFJJIExTQSBj YXJyeWluZyBhIHBhcnRpY3VsYXIgYWRtaW4gdGFnIHdhcyByZXBsYWNlZCBieSBhIGRpZmZlcmVu dA0KPj5SSSBMU0EgZm9yIHRoZSBzYW1lIGFkdmVydGlzaW5nIHJvdXRlciwgdGhlIG9sZCBvbmUg d291bGQgc3RpbGwgYmUgYW4NCj4+aW5zdGFuY2Ugb2YgdGhhdCBSSSBMU0EuICBHb2luZyBiYWNr IHRvIFJGQyAyMzI4LCBJJ20gbm90IHN1cmUgd2hhdA0KPj5leGFjdGx5IEkgaGFkIGluIG1pbmQg aW4gdGVybXMgb2YgYWdlcyBhbmQgc2NvcGVzIGFuZCBzZXF1ZW5jZSBudW1iZXJzDQo+PnRoYXQg d291bGQgY2F1c2UgdGhpcyBzaXR1YXRpb24sIGJ1dCBJIHNvbWVob3cgaGFkIGl0IGluIG15IG1p bmQgdGhhdA0KPj50aGVyZSBjb3VsZCBiZSBtdWx0aXBsZSBSSSBMU0FzIGFjdGl2ZSBhdCB0aGUg c2FtZSB0aW1lIHRoYXQgYXBwbHkgdG8gYQ0KPj5naXZlbiBub2RlLCBzdWNoIGFzIGlmIHRoZSBh ZG1pbiBqdXN0IGFkZGVkIGEgbmV3IFJJIExTQSBjb250YWluaW5nDQo+Pm9ubHkgdGhlIGFkbWlu IHRhZyB0byBhdWdtZW50IHRoZSBleGlzdGluZyBSSSBMU0FzIGJlaW5nIHNlbnQuICBJcyB0aGF0 DQo+PnBvc3NpYmxlPw0KPg0KPkluIE9TUEYsIGEgbW9yZS1yZWNlbnQgdmVyc2lvbiBvciBpbnN0 YW5jZSBvZiBhbiBMU0Egd2lsbCBhbHdheXMNCj5zdXBlcnNlZGUgYWxsIHByZXZpb3VzIGluc3Rh bmNlcyBvZiB0aGUgc2FtZSBMU0EuDQo+DQo+Pg0KPj5JZiB0aGVyZSBjYW4gb25seSBiZSBvbmUg UkkgTFNBIHRoYXQgaXMgImN1cnJlbnQiIGZvciBhIGdpdmVuIG5vZGUgKGF0DQo+PmEgZ2l2ZW4g c2NvcGU/KSwgdGhlbiBpdCBzZWVtcyBsaWtlIGl0IHdvdWxkIGJlIHVzZWZ1bCB0byBjaGFuZ2Ug dGhlDQo+PnRleHQgdG8gZXhwbGljaXRseSBzYXkgImFsbCBjdXJyZW50IGluc3RhbmNlcyIgLS0g dGhhdCB3b3VsZCBoYXZlDQo+PmhlbHBlZCBtZSBhcyBJIHJlYWQgaXQuDQo+DQo+SSBzZWUgdGhl IGNvbmZ1c2lvbiBpcyBiZXR3ZWVuIGluc3RhbmNlcyBvZiB0aGUgc2FtZSBMU0EgaW4gdGhlIGdl bmVyYWwNCj5zZW5zZSBhbmQgbXVsdGlwbGUgaW5zdGFuY2VzIG9mIHRoZSBPU1BGIFJJIExTQS4g UmVmZXIgdG8gUkZDIDIzMjgNCj5zZWN0aW9uIDEzLjEuICANCj4NCj4NCj4+DQo+Pj4gPiBIb3cg ZGlzcnVwdGl2ZSB3b3VsZCB0aGF0IGJlPyAgSXQgd291bGQgYmUgaGVscGZ1bCB0byBzZWUgc29t ZQ0KPj4+ID5kaXNjdXNzaW9uIG9mIGhvdyBhIHRhZyB3b3VsZCBiZSByZW1vdmVkLg0KPj4+DQo+ Pj4gSSBtYXkgb2Ygd29ya2VkIG9uIE9TUEYgZm9yIHRvbyBsb25nIGJ1dCB0aGlzIHNob3VsZCBi ZSBvYnZpb3VzIHRvDQo+Pj4gYW55b25lIGltcGxlbWVudGluZyB0aGUgZHJhZnQgZnJvbSB0aGUg c3BlY2lmaWNhdGlvbi4NCj4+DQo+PklmIGl0J3Mgc2ltcGx5IGEgbWF0dGVyIG9mIHJlLWlzc3Vp bmcgdGhlIFJJIExTQSAoSSB3YXMgbm90IHN1cmUgd2hlbiBJDQo+PndhcyB3cml0aW5nIG15IHJl dmlldyksIHRoZW4gSSBhZ3JlZSBpdCBzaG91bGQgYmUgb2J2aW91cy4NCj4+DQo+Pj4gPFNocmFk ZGhhPiBUaGUgYmVsb3cgcGFyYWdyYXBoIChmcm9tIC0wNyB2ZXJzaW9uKSBpcyBjbGVhciBvbiB0 aGlzIEkNCj4+PmhvcGUuDQo+Pj4NCj4+PiAiV2hlbiB0aGVyZSBpcyBhIGNoYW5nZSBvciByZW1v dmFsIG9mIGFuIGFkbWluaXN0cmF0aXZlIGFmZmlsaWF0aW9uDQo+Pj5vZiBhIG5vZGUsDQo+Pj4g ICAgdGhlIG5vZGUgTVVTVCByZS1vcmlnaW5hdGUgdGhlIFJJIExTQSB3aXRoIHRoZSBsYXRlc3Qg c2V0IG9mIG5vZGUNCj4+PmFkbWluaXN0cmF0aXZlIHRhZ3MuDQo+Pj4gICAgT24gdGhlIHJlY2Vp dmVyLCBXaGVuIHRoZXJlIGlzIGEgY2hhbmdlIGluIHRoZSBub2RlIGFkbWluaXN0cmF0aXZlDQo+ Pj50YWcgVExWIG9yIHJlbW92YWwvDQo+Pj4gICAgYWRkaXRpb24gb2YgYSBUTFYgaW4gYW55IGlu c3RhbmNlIG9mIHRoZSBSSS1MU0EsIGltcGxlbWVudGF0aW9ucw0KPj4+TVVTVA0KPj4+ICAgIHRh a2UgYXBwcm9wcmlhdGUgbWVhc3VyZXMgdG8gdXBkYXRlIGl0cyBzdGF0ZSBhY2NvcmRpbmcgdG8g dGhlDQo+Pj4gICAgY2hhbmdlZCBzZXQgb2YgdGFncy4gIEV4YWN0IGFjdGlvbnMgZGVwZW5kIG9u IGZlYXR1cmVzIHdvcmtpbmcgd2l0aA0KPj4+ICAgIGFkbWluaXN0cmF0aXZlIHRhZ3MgYW5kIGlz IG91dHNpZGUgb2Ygc2NvcGUgb2YgdGhpcyBzcGVjaWZpY2F0aW9uLiINCj4+DQo+PlRoaXMgaXMg ZGVmaW5pdGVseSBpbXByb3ZlZCwgYnV0IGl0IGRvZXMgbm90IGRvIG11Y2ggdG8gYWRkcmVzcyB0 aGUNCj4+aXNzdWUgSSBoYWQgaW4gbWluZCB3aGVuIEkgd2FzIHdyaXRpbmcgbXkgcmV2aWV3LiAg SG93ZXZlciwgaXQgc2VlbXMNCj4+bGlrZSB0aGF0IGlzc3VlIGlzIG5vdCBhY3R1YWxseSBhbiBp c3N1ZSwgc28gbm8gZnVydGhlciBjaGFuZ2VzIHRvIHRoaXMNCj4+dGV4dCB3b3VsZCBiZSBuZWVk ZWQuDQo+Pg0KPj4NCj4+PiA+DQo+Pj4gPlRoYXQgaXMgcGFydGljdWxhcmx5IGVhc3kgZm9yIGFu IGF0dGFja2VyIHdoZW4gdGhlIG51bGwgT1NQRg0KPj4+ID5hdXRoZW50aWNhdGlvbiBtZWNoYW5p c20gaXMgaW4gdXNlIChob3cgY29tbW9uIGlzIHRoYXQ/ICBJIHNhdyBzb21lDQo+Pj4gPndlYnNp dGVzIGluZGljYXRpbmcgaXQgd2FzIHRoZSBkZWZhdWx0IGJlaGF2aW9yLCBhdCBsZWFzdCBzb21l dGltZXMpLg0KPj4+ID5JIGRvIG5vdCBzZWUgYSBuZWVkIHRvIHR1cm4gdGhpcyBkb2N1bWVudCBp bnRvICJzZWN1cml0eQ0KPj4+ID5jb25zaWRlcmF0aW9ucyBmb3IgT1NQRiBhdXRoZW50aWNhdGlv biIsIGJ1dCBtYXliZSBpdCBpcyB3b3J0aA0KPj4+bWVudGlvbmluZyBzb21lIHRoaW5nczoNCj4+ PiA+dGhlDQo+Pj4gPm1kNSBzY2hlbWUgc2VlbXMgcHJldHR5IHdlZWsgYXQgdGhpcyBwb2ludCAo dGhvdWdoIHByb2JhYmx5IG5vdA0KPj4+ID50cml2aWFsbHkgYnJva2VuKSwgdGhlIGhtYWMtc2hh IHNjaGVtZSBvZiBSRkMgNTcwOSBpcyBvbmx5IGZyb20NCj4+PiA+MjAwOSwgYW5kIFJGQyA3NDc0 IChvbmx5IHNpeCBtb250aHMgb2xkKSBwb2ludHMgb3V0IGNhc2VzIHdoZXJlIGJvdGgNCj4+PiA+ YXJlIHN1c2NlcHRpYmxlIHRvIHJlcGxheSBhdHRhY2tzLiAgSnVzdCBsb29raW5nIGF0IHRoZSBz ZWN1cml0eQ0KPj4+ID5jb25zaWRlcmF0aW9ucyBvZiB0aGlzIGRvY3VtZW50IGFuZCB0aGUgY29y ZSBPU1BGIHYyL3YzIHNwZWNzIGRvZXMNCj4+PiA+bm90IGNvbnZleSB0aGlzIHRvIHRoZSByZWFk ZXIsIHNvIEkgd291bGQgbGlrZSB0byBzZWUgYXQgbGVhc3QgYQ0KPj4+ID5wb2ludGVyIHRvIHN1 Y2ggY29uc2lkZXJhdGlvbnMuICAoVGhlIHN0YW5jZSBvZiBSRkMgMjMyOCB0aGF0ICJhbGwNCj4+ PiA+T1NQRiBwcm90b2NvbA0KPj4+ZXhjaGFuZ2VzIGFyZSBhdXRoZW50aWNhdGVkIg0KPj4+ID5z ZWVtcyBwYXJ0aWN1bGFybHkgZGlzaW5nZW5vdXMgZ2l2ZW4gdGhlIHByZXNlbmNlIG9mIHRoZSBu dWxsDQo+Pj4gPmF1dGhlbnRpY2F0aW9uIHNjaGVtZS4pDQo+Pj4NCj4+PiBJIHRoaW5rIGJvdGgg UkZDIDc0NzQgYW5kIFJGQyA3MTc2IHNob3VsZCBiZSByZWZlcmVuY2VkLiBUaGUgT1NQRg0KPj4+ IHZ1bG5lcmFiaWxpdHkgdG8gcmVwbGF5IGF0dGFja3MgdG8gT1NQRnYyL09TUEZ2MyByb3V0ZXJz IGltcGxlbWVudGluZw0KPj4+IHRoZXNlIHNwZWNpZmljYXRpb25zIGlzIGV4dHJlbWVseSBzbWFs bCBhbmQgaGFzIGJlZW4gcmVkdWNlZCBhcyBtdWNoDQo+Pj4gYXMgcHJhY3RpY2FsLiBJZiB5b3Ug YXJlIHN0aWxsIGNvbmNlcm5lZCwgSSBzdWdnZXN0IHlvdSBkaXNjdXNzIHdpdGgNCj4+PiBTYW0g SGFydG1hbiAoYWxzbyBvbmNlIGFmZmlsaWF0ZWQgd2l0aCBNSVQpLg0KPj4NCj4+SSBhbSBub3Qg ZXNwZWNpYWxseSBjb25jZXJuZWQgYWJvdXQgdGhpcyBhdHRhY2ssIEkganVzdCBub3RpY2VkIHRo YXQNCj4+dGhlcmUgd2FzIGFuIFJGQyBhYm91dCBpdC4gIFNpbmNlIFJGQyA3NDc0IHdhcyBzbyBy ZWNlbnQsIGl0IG1hZGUgbWUNCj4+d29uZGVyIGhvdyB3aWRlbHkgZGVwbG95ZWQgdGhlIHNlY3Vy aXR5IGZpeGVzIGFyZSB0b2RheS4NCj4NCj5Db3JyZWN0IC0gaXQgaXMgbm90IHdpZGVseSBpbXBs ZW1lbnRlZCBvciBkZXBsb3llZC4NCj4NCj5UaGFua3MsDQo+QWNlZQ0KPg0KPj4NCj4+PiA8U2hy YWRkaGE+IFNlY3VyaXR5IGNvbnNpZGVyYXRpb24gc2VjdGlvbiB1cGRhdGVkIHdpdGggdGhlIHJl ZmVyZW5jZQ0KPj4+IHRvIFJGQyA3NDc0IGFuZCA3MTc2Lg0KPj4NCj4+VGhhbmtzLg0KPj4NCj4+ PiA+DQo+Pj4gPlRoZXJlIGlzIGFsc28gdGhlIHBvc3NpYmlsaXR5IHRoYXQgYW4gYXR0YWNrZXIg Y291bGQgYmxvY2sgZGVsaXZlcnkNCj4+PiA+b2YgYW4gTFNBLCBjYXVzaW5nIGEgdGFnIHRoYXQg c2hvdWxkIGJlIHNldCB0byBub3QgYmUgc2Vlbi4gIFRoaXMNCj4+PiA+c2VlbXMgdW5saWtlbHkg Zm9yIHdpcmVkIHBvaW50LXRvLXBvaW50IGxpbmtzLCBidXQgaXMgbW9yZSBwbGF1c2libGUNCj4+ PiA+aW4gb3RoZXIgZW52aXJvbm1lbnRzLCBzdWNoIGFzIHJhZGlvIGxpbmtzLiAgSSB0aGluayBJ IGNhbiBpbWFnaW5lDQo+Pj4gPnNjZW5hcmlvcyB3aGVyZSB0aGlzIHdvdWxkIGNhdXNlIGRyYXN0 aWMgZGFtYWdlIHRvIHRoZSByb3V0aW5nDQo+Pj50b3BvbG9neS4NCj4+Pg0KPj4+IFRoZSBkZXNj cmlwdGlvbiBhbmQgbWl0aWdhdGlvbiBvZiBzdWNoIGEgZ2VuZXJpYyB0aHJlYXQgZG9lc27igJl0 DQo+Pj5iZWxvbmcgaW4gYSBtaW5vciAodGhvdWdoIGltcG9ydGFudCkgT1NQRiBzcGVjaWZpY2F0 aW9uLiBUaGUgZWZmZWN0IG9mDQo+Pj5ibG9ja2luZyBjb250cm9sIHRyYWZmaWMgaXMgbmV2ZXIg cG9zaXRpdmUgO14pLiBBdCBsZWFzdCBPU1BGIHVzZXMNCj4+PnJlbGlhYmxlIGZsb29kaW5nIHNv IGl0IHdpbGwgYmUgcmV0cmFuc21pdHRlZC4NCj4+PiA8U2hyYWRkaGE+IEFncmVlIHdpdGggQWNl ZSBvbiB0aGlzLg0KPj4NCj4+SSBoYWQgZm9yZ290dGVuIHRoYXQgT1NQRiBmbG9vZGluZyB3YXMg cmVsaWFibGU7IEkgYWdyZWUgdGhpcyBkb2VzIG5vdA0KPj5uZWVkIHRvIGJlIGV4cGxpY2l0bHkg Y2FsbGVkIG91dCBpbiB0aGlzIGRvY3VtZW50LCBzaW5jZSBpdCdzIGEgZ2VuZXJhbA0KPj5yb3V0 aW5nIGNvbmNlcm4uDQo+Pg0KPj4+ID5UaGUgcGFyZW50aGV0aWNhbCBpbiBzZWN0aW9uIDMuMiB3 aGVyZWluIHJvdXRlcnMgbWlnaHQgYWR2ZXJ0aXNlIGENCj4+PiA+cGVyLW5vZGUgYW1pbmlzdHJh dGl2ZSB0YWcgIndpdGhvdXQga25vd2luZyAob3IgZXZlbiBleHBsaWNpdGx5DQo+Pj4gPnN1cHBv cnRpbmcpIGZ1bmN0aW9uYWxpdHkgaW1wbGllZCBieSB0aGUgdGFnIiBzZWVtcyBwb3RlbnRpYWxs eQ0KPj4+ID5kYW5nZXJvdXMsIHNpbmNlIGl0IHNvdW5kcyBsaWtlIHRoZSByb3V0ZXJzIGluIHF1 ZXN0aW9uIGFyZSBseWluZw0KPj4+ID5hYm91dCB0aGVpciBjYXBhYmlsaXRpZXMuICBXb3VsZCB0 aGUgZG9jdW1lbnQgc3VmZmVyIGhhcm0gaWYgdGhlDQo+Pj4gPnBhcmVudGhldGljYWwgd2FzIHJl bW92ZWQ/DQo+Pj4NCj4+PiBJbiBteSBvcGluaW9uLCBubyBoYXJtIHRvIHJlbW92ZSAtIG1pc2Nv bmZpZ3VyYXRpb24gaXMgYWxtb3N0IGFsd2F5cw0KPj4+YW4gaXNzdWUuDQo+Pj4gPFNocmFkZGhh PiBJdCdzIHBlcmZlY3RseSB2YWxpZCBmb3IgYSBub2RlIG9yaWdpbmF0ZSBhIHRhZyB3aGVuIHRo ZQ0KPj4+bm9kZSAgaXRzZWxmIGRvZXMgbm90IFByb2Nlc3MgYW55IHRhZ3MuIEkgdGhpbmsgdGhl IHNlbnRlbmNlIG5lZWRzIHRvDQo+Pj5iZSAgcmVwaHJhc2VkLiBDaGFuZ2luZyBpdCBhcyBiZWxv dy4NCj4+Pg0KPj4+IDx0Pk1lYW5pbmcgb2YgdGhlIE5vZGUgYWRtaW5pc3RyYXRpdmUgdGFncyBp cyBnZW5lcmFsbHkgb3BhcXVlIHRvDQo+Pj4gT1NQRi4gUm91dGVyIGFkdmVydGlzaW5nIHRoZSBw ZXItbm9kZSBhZG1pbmlzdHJhdGl2ZSB0YWcgKG9yIHRhZ3MpDQo+Pj4gbWF5IGJlIGNvbmZpZ3Vy ZWQgdG8gZG8gc28gd2l0aG91dCBrbm93aW5nIChvciBldmVuIHdpdGhvdXQNCj4+PiBzdXBwb3J0 aW5nIHByb2Nlc3Npbmcgb2YpIGZ1bmN0aW9uYWxpdHkgaW1wbGllZCBieSB0aGUgdGFnLjwvdD4N Cj4+DQo+PkkgdGhpbmsgdGhlcmUgaXMgYSBxdWVzdGlvbiBhYm91dCB3aGV0aGVyIHRoaXMgbWVh bnMgdGhhdCB0aGUgcm91dGVyDQo+PmRvZXNuJ3QgbmVlZCB0byBrbm93IHdoYXQgZmVhdHVyZSB0 aGUgdGFnIG51bWJlciBtZWFucywgb3Igd2hldGhlciBpdA0KPj5tZWFucyB0aGF0IHRoZSByb3V0 ZXIgZG9lc24ndCBuZWVkIHRvIGltcGxlbWVudCB0aGUgZmVhdHVyZSBpbmRpY2F0ZWQNCj4+Ynkg dGhhdCB0YWcgdmFsdWUuICBJIHJlYWQgdGhpcyB0ZXh0IGFzIGJlaW5nIGluIHRoZSBzZWNvbmQg Y2FzZSwgYnV0IEkNCj4+YW0gaW50ZXJwcmV0aW5nIHlvdXIgZGlzY3Vzc2lvbiBhYm91dCB0aGlz IHRleHQgdG8gbWVhbiB0aGF0IHlvdSB0aGluaw0KPj5pdCBpcyBjb3ZlcmluZyB0aGUgZmlyc3Qg Y2FzZS4gIChZZXMsIHRoZXJlIGNhbiBiZSB0YWcgdmFsdWVzIHRoYXQganVzdA0KPj5pbmRpY2F0 ZSBhbiBhZG1pbmlzdHJhdGl2ZSBncm91cGluZyBhbmQgdGhlcmUgaXMgbm8gY29ycmVzcG9uZGlu Zw0KPj5mdW5jdGlvbmFsaXR5IG5lZWRlZCBvbiB0aGUgcm91dGVyLCBidXQgdGhlcmUgY2FuIGFs c28gYmUgdGFnIHZhbHVlcw0KPj50aGF0IGluZGljYXRlICJ0aGUgcm91dGVyIG9yaWdpbmF0aW5n IHRoaXMgUkkgTFNBIHN1cHBvcnRzIGFjY2VwdGluZw0KPj50YXJnZXRlZCBMRFAgc2Vzc2lvbnMi DQo+Pi0tIGEgcm91dGVyIHdpbGwgY2F1c2UgYnJlYWthZ2UgaWYgaXQgc2VuZHMgc3VjaCBhIHRh ZyBidXQgZG9lcyBub3QNCj4+YWN0dWFsbHkgc3VwcG9ydCBhY2NlcHRpbmcgdGFyZ2V0ZWQgTERQ IHNlc3Npb25zLikNCj4+DQo+PkJhc2VkIG9uIHRoaXMgZGlzY3Vzc2lvbiwgSSB0aGluayB0aGF0 IHdoYXQgdGhlIHBhcmVudGhldGljYWwgaXMgdHJ5aW5nDQo+PnRvIHNheSBpcyB0aGF0ICJ0aGUg cm91dGVyIG9yaWdpbmF0aW5nIHRoZSB0YWcgbWF5IG5vdCB1c2UgdGhhdCB0YWcgaW4NCj4+YW55 IG9mIGl0cyBwcm9jZXNzaW5nIGRlY2lzaW9ucyIgLS0gaXMgdGhhdCBjb3JyZWN0Pw0KPj4NCj4+ Q2hhbmdpbmcgdGhlIHdvcmQgImZ1bmN0aW9uYWxpdHkiIHRvICJhdHRyaWJ1dGVzIiB3b3VsZCBj YXVzZSBtZSB0bw0KPj5yZWFkIHRoZSB0ZXh0IGFzIGJlaW5nIGluIHRoZSBmaXJzdCBjYXNlIEkg ZGVzY3JpYmVkIGFib3ZlLg0KPj4NCj4+KEJ5IHRoZSB3YXksIHRoaXMgcGFyYWdyYXBoIGhhZCBh IGxvdCBvZiBjaGFuZ2VzIGluIG15IHBhdGNoIGZvcg0KPj5ncmFtbWFyOyBpdCBtaWdodCBoYXZl IGJlZW4gZWFzaWVyIHRvIGFwcGx5IHRoYXQgcGF0Y2ggYmVmb3JlIG1ha2luZw0KPj5mdXJ0aGVy IGVkaXRzLCB0byByZWR1Y2UgdGhlIG51bWJlciBvZiBtZXJnZSBjb25mbGljdHMuICBUaGUgZ3Jh bW1hciBpbg0KPj50aGUgcXVvdGVkIG5ldyB0ZXh0IGhhcyBzZXZlcmFsIGVycm9ycy4pDQo+Pg0K Pj4+ID5PbmUgcmVhc29uIEkgYW0gdW5zYXRpc2ZpZWQgYnkgbWFraW5nIHRoZSBpbnRlcnByZXRh dGlvbiBvZiB0aGUgdGFnDQo+Pj4gPnZhbHVlcyBzcGVjaWZpYyB0byBhbiBhZG1pbmlzdHJhdGl2 ZSBkb21haW4gaXMgdGhhdCBhIG1pc2NvbmZpZ3VyZWQNCj4+PiA+Ym9yZGVyIHJvdXRlciBtaWdo dCBlcnJvbmVvdXNseSB1c2UgdGFnIHZhbHVlcyBmcm9tIG9uZSBkb21haW4gb24NCj4+PiA+dGhl IG90aGVyIHNpZGUgb2YgdGhlIGJvcmRlci4NCj4+PiA+IFBlcmhhcHMgdGhlIG90aGVyIGRhbWFn ZSBmcm9tIGEgcm91dGVyIG1pc2NvbmZpZ3VyZWQgaW4gc3VjaCBhDQo+Pj4gPmZhc2hpb24gd291 bGQgZHdhcmYgdGhlIGFkZGl0aW9uYWwgZGFtYWdlIGZyb20gdGhlIG1pc2ludGVycHJldGVkDQo+ Pj4gPnRhZ3MgYW5kIHNvIG15IGNvbmNlcm4gaXMgaW52YWxpZDsgSSByZWFsbHkgY2FuJ3Qgc2F5 Lg0KPj4+DQo+Pj4gQWdhaW4sIEkgZG9u4oCZdCB0aGluayBtaXNjb25maWd1cmF0aW9uIG5lZWRz IHRvIGJlIGNvdmVyZWQgLSAiZW1wdG9yDQo+Pj5jYXZldGXigJ0uDQo+Pg0KPj5BIG1pc2NvbmZp Z3VyZWQgcm91dGVyIGlzIGJ5IGRlZmluaXRpb24gYnJva2VuLiAgU3VjaCBtaXNjb25maWd1cmF0 aW9uDQo+PmNhbiBoYXBwZW4gZWl0aGVyIGJ5IGFjY2lkZW50IGR1ZSB0byBvcGVyYXRvciBlcnJv ciwgb3IgbWFsaWNpb3VzbHksIGlmDQo+PmFuIGF0dGFja2VyIGhhcyBjb21wcm9taXNlZCB0aGUg c3lzdGVtLiAgV2hpbGUgaXQgbWF5IG5vdCBiZSBuZWNlc3NhcnkNCj4+dG8gc2F5IHRoYXQgYSBi cm9rZW4gcm91dGVyIHdpbGwgbm90IHBhc3MgdHJhZmZpYyB0aGUgd2F5IGl0J3Mgc3VwcG9zZWQN Cj4+dG8sIGlmIGEgbWlzY29uZmlndXJlZCByb3V0ZXIgY2FuIGVtaXQgcm91dGluZyBwcm90b2Nv bCBtZXNzYWdlcyB0aGF0DQo+PmFmZmVjdCB0aGUgc3RhdGUgb2YgdGhlIG5ldHdvcmsgYXMgYSB3 aG9sZSwgbm90IGp1c3QgaXRzIGxvY2FsDQo+PnN1cnJvdW5kaW5ncywgdGhhdCBzZWVtcyBsaWtl IGFuIGFuYWx5c2lzIHRoYXQgaXMgYXBwcm9wcmlhdGUgZm9yIHRoZQ0KPj5zZWN1cml0eSBjb25z aWRlcmF0aW9ucyBvZiBhIHJvdXRpbmcgcHJvdG9jb2wgZG9jdW1lbnQuICBOb3csIEkgZG9uJ3QN Cj4+aGF2ZSBhIGdvb2QgcGljdHVyZSBvZiBzcGVjaWZpYyBleGFtcGxlcyBvZiBuZXR3b3JrLXdp ZGUgaXNzdWVzIGR1ZSB0bw0KPj50aGUgYWRtaW4gdGFnLCBidXQgSSB0aGluayB0aGVyZSdzIGEg bGFyZ2UgZW5vdWdoIHByb2JhYmlsaXR5IHRoYXQgaXQncw0KPj5wb3NzaWJsZSBmb3Igc3VjaCBh IHRoaW5nIHRvIGhhcHBlbiB0aGF0IEkgd2FudGVkIHRvIG1lbnRpb24gaXQgaW4gbXkNCj4+cmV2 aWV3IGNvbW1lbnRzLiAgTWF5YmUgdGhlcmUgaXMgbm90IGFueXRoaW5nIHdvcnRoIG1lbnRpb25p bmcgYWJvdXQgaXQNCj4+aW4gdGhlIHNlY3VyaXR5IGNvbnNpZGVyYXRpb25zIHNlY3Rpb24sIGJ1 dCBJIGRvbid0IHRoaW5rIHRoYXQNCj4+Im1pc2NvbmZpZ3VyYXRpb24gZG9lc24ndCBuZWVkIHRv IGJlIGNvdmVyZWQiIGFkZHJlc3NlcyB0aGUgY29uY2VybiBJDQo+PndhcyBhdHRlbXB0aW5nIHRv IHJhaXNlLg0KPj4NCj4+PiA8U2hyYWRkaGE+IC0wNyB2ZXJzaW9uIGFkZHJlc3NlcyB0aGlzIGlz c3VlLg0KPj4+DQo+Pj4gIkFkdmVydGlzZW1lbnQgb2YgdGFnIHZhbHVlcyBmb3Igb25lIGFkbWlu aXN0cmF0aXZlIGRvbWFpbiBpbnRvDQo+Pj5hbm90aGVyICByaXNrcyBtaXNpbnRlcnByZXRhdGlv biBvZiB0aGUgdGFnIHZhbHVlcyAoaWYgdGhlIHR3byBkb21haW5zDQo+Pj5oYXZlIGFzc2lnbmVk ICBkaWZmZXJlbnQgbWVhbmluZ3MgdG8gdGhlIHNhbWUgdmFsdWVzKSwgd2hpY2ggbWF5IGhhdmUN Cj4+PnVuZGVzaXJhYmxlIGFuZCB1bmFudGljaXBhdGVkIHNpZGUgIGVmZmVjdHMuIg0KPj4NCj4+ VGhhbmsgeW91LCB0aGF0IGhlbHBzLg0KPj4NCj4+PiBUaGFua3MgZm9yIHRoZSBlZGl0b3JpYWwg cmV2aWV3IGFzIHdlbGwuIFNwZWFrIGFzIFdHIGNoYWlyLCBJDQo+Pj5hcHByZWNpYXRlIHRoaXMu DQo+Pg0KPj5Zb3UncmUgd2VsY29tZSENCj4+DQo+Pi1CZW4NCj4NCg0K From nobody Wed Oct 14 05:11:20 2015 Return-Path: X-Original-To: secdir@ietfa.amsl.com Delivered-To: secdir@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 305561A1B4B; Wed, 14 Oct 2015 05:11:17 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -14.511 X-Spam-Level: X-Spam-Status: No, score=-14.511 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_HI=-5, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id IdZd2Pjm1ruT; Wed, 14 Oct 2015 05:11:15 -0700 (PDT) Received: from rcdn-iport-1.cisco.com (rcdn-iport-1.cisco.com [173.37.86.72]) (using TLSv1 with cipher RC4-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 3609B1A1B19; Wed, 14 Oct 2015 05:11:15 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=3606; q=dns/txt; s=iport; t=1444824676; x=1446034276; h=from:to:cc:subject:date:message-id:references: in-reply-to:content-id:content-transfer-encoding: mime-version; bh=Mc+xs0s1EPu82D3jIffADOxfaUMqTBAt2I3czgMiUVE=; b=AL75tOOcUVqzeE+uzX/9u9Wxx5i2QliOKpHbyIrfcG8CWNoDaNL4t/dY tSZwzuruzBzsX585ViXUhPrqnz9g8XWrxp5zG25D6v0o3GhF106MX1C0c vH6h7HYTkDw0F0yRMgLzLvWoLPurDYxhCcxRhrj3b7TU8c1zJ6JI9ihxU U=; X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: A0BgAgAURh5W/5pdJa1eDoMYgUIGvX0BDYFagxOCCn8CHIEgOBQBAQEBAQEBgQqEJwEBBCMRRRACAQgYAgImAgICMBUQAgQOBYguryOTPwEBAQEBAQEBAQEBAQEBAQEBAQEBAReBIopShFozB4JpgUUBBJYVAY0anAkBHwEBQoIRHYEWPnGFaYEGAQEB X-IronPort-AV: E=Sophos;i="5.17,681,1437436800"; d="scan'208";a="41317759" Received: from rcdn-core-3.cisco.com ([173.37.93.154]) by rcdn-iport-1.cisco.com with ESMTP/TLS/DHE-RSA-AES256-SHA; 14 Oct 2015 12:11:15 +0000 Received: from XCH-ALN-013.cisco.com (xch-aln-013.cisco.com [173.36.7.23]) by rcdn-core-3.cisco.com (8.14.5/8.14.5) with ESMTP id t9ECBESS005626 (version=TLSv1/SSLv3 cipher=AES256-SHA bits=256 verify=FAIL); Wed, 14 Oct 2015 12:11:14 GMT Received: from xch-rcd-015.cisco.com (173.37.102.25) by XCH-ALN-013.cisco.com (173.36.7.23) with Microsoft SMTP Server (TLS) id 15.0.1104.5; Wed, 14 Oct 2015 07:11:00 -0500 Received: from xch-rcd-015.cisco.com ([173.37.102.25]) by XCH-RCD-015.cisco.com ([173.37.102.25]) with mapi id 15.00.1104.000; Wed, 14 Oct 2015 07:11:00 -0500 From: "Acee Lindem (acee)" To: Benjamin Kaduk Thread-Topic: secdir review of draft-ietf-ospf-node-admin-tag-05 Thread-Index: AQHRAtRkZED+3D3sTk6f1e8MGzkzuJ5lMHaAgATWidGAABZXAIAARf4A//++TICAANxhgA== Date: Wed, 14 Oct 2015 12:11:00 +0000 Message-ID: References: In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-ms-exchange-messagesentrepresentingtype: 1 x-ms-exchange-transport-fromentityheader: Hosted x-originating-ip: [10.116.152.199] Content-Type: text/plain; charset="utf-8" Content-ID: Content-Transfer-Encoding: base64 MIME-Version: 1.0 Archived-At: Cc: "draft-ietf-ospf-node-admin-tag.all@ietf.org" , "secdir@ietf.org" , Shraddha Hegde , "iesg@ietf.org" Subject: Re: [secdir] secdir review of draft-ietf-ospf-node-admin-tag-05 X-BeenThere: secdir@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: Security Area Directorate List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 14 Oct 2015 12:11:17 -0000 SGkgQmVuLCANCg0KT24gMTAvMTMvMTUsIDc6MDIgUE0sICJBY2VlIExpbmRlbSAoYWNlZSkiIDxh Y2VlQGNpc2NvLmNvbT4gd3JvdGU6DQoNCj4NCj4NCj5PbiAxMC8xMy8xNSwgNjo1NyBQTSwgIkJl bmphbWluIEthZHVrIiA8a2FkdWtATUlULkVEVT4gd3JvdGU6DQo+DQo+Pk9uIFR1ZSwgMTMgT2N0 IDIwMTUsIEFjZWUgTGluZGVtIChhY2VlKSB3cm90ZToNCj4+DQo+Pj4NCj4+PiBPbiAxMC8xMy8x NSwgNjoyNyBQTSwgIkJlbmphbWluIEthZHVrIiA8a2FkdWtATUlULkVEVT4gd3JvdGU6DQo+Pj4N Cj4+PiA+T24gU3VuLCAxMSBPY3QgMjAxNSwgU2hyYWRkaGEgSGVnZGUgd3JvdGU6DQo+Pj4gPg0K Pj4+ID4+ID4oZWFzaWx5KSBiZSB1bnNldC4gIFdvdWxkIGZvcmNlLWV4cGlyaW5nIGFuIExTQSBi ZSBlbm91Z2ggdG8gcmVzZXQNCj4+PnRoZQ0KPj4+ID4+ID50YWcsIG9yIHNvbWV0aGluZyBlbHNl Pw0KPj4+ID4+DQo+Pj4gPj4gWWVzIC0gdGhpcyBpcyBzdGFuZGFyZCBmb3IgYW55IE9TUEYgTFNB LiBIb3dldmVyLCBzaW5jZSB0aGUgT1NQRiBSSQ0KPj4+TFNBDQo+Pj4gPj4gbWF5IGluY2x1ZGUg b3RoZXIgVExWcyBvciBldmVuIG90aGVyIHRhZ3MsIGEgdGFnIGNvdWxkIGFsc28gYmUNCj4+Pndp dGhkcmF3bg0KPj4+ID4+IGJ5IHJlb3JpZ2luYXRpbmcgdGhlIFJJIExTQSB3aXRob3V0IHRoZSBU TFYgb3Igd2l0aCBhIFRMViB0aGF0DQo+Pj5kb2VzbuKAmXQNCj4+PiA+PiBpbmNsdWRlIHRoZSB3 aXRoZHJhd24gdGFnLg0KPj4+ID4NCj4+PiA+SSBtYXkgc3RpbGwgYmUgY29uZnVzZWQsIGJ1dCBJ IGRpZCBub3QgaW50ZXJwcmV0IHRoZSB0ZXh0IGluIHRoYXQgd2F5Lg0KPj4+ID5UaGF0IGlzLCB0 aGUgdGV4dCBhYm91dCAiYWxsIGluc3RhbmNlcyBvZiB0aGUgUkkgTFNBIG9yaWdpbmF0ZWQgYnkN Cj4+PnRoYXQNCj4+PiA+bm9kZSIuICAoV2hpY2ggSSBjaGFuZ2VkIHRvICJpbnN0YW5jZXMgb2Yg UkkgTFNBcyIgaW4gbXkgZ3JhbW1hcg0KPj4+ZWRpdHMsDQo+Pj4gPnBvc3NpYmx5IGluY29ycmVj dGx5IGlmIEknbSBzdGlsbCBjb25mdXNlZC4pICBJIHdhcyBpbnRlcnByZXRpbmcgdGhlDQo+Pj53 b3JkDQo+Pj4gPiJpbnN0YW5jZXMiIHRvIGluY2x1ZGUgaGlzdG9yaWNhbCBvbmVzIG92ZXIgdGlt ZSwgc28gdGhhdCBldmVuIGlmIGFuDQo+Pj5SSQ0KPj4+ID5MU0EgY2FycnlpbmcgYSBwYXJ0aWN1 bGFyIGFkbWluIHRhZyB3YXMgcmVwbGFjZWQgYnkgYSBkaWZmZXJlbnQgUkkgTFNBDQo+Pj4gPmZv ciB0aGUgc2FtZSBhZHZlcnRpc2luZyByb3V0ZXIsIHRoZSBvbGQgb25lIHdvdWxkIHN0aWxsIGJl IGFuDQo+Pj5pbnN0YW5jZSBvZg0KPj4+ID50aGF0IFJJIExTQS4gIEdvaW5nIGJhY2sgdG8gUkZD IDIzMjgsIEknbSBub3Qgc3VyZSB3aGF0IGV4YWN0bHkgSSBoYWQNCj4+PmluDQo+Pj4gPm1pbmQg aW4gdGVybXMgb2YgYWdlcyBhbmQgc2NvcGVzIGFuZCBzZXF1ZW5jZSBudW1iZXJzIHRoYXQgd291 bGQgY2F1c2UNCj4+PiA+dGhpcw0KPj4+ID5zaXR1YXRpb24sIGJ1dCBJIHNvbWVob3cgaGFkIGl0 IGluIG15IG1pbmQgdGhhdCB0aGVyZSBjb3VsZCBiZQ0KPj4+bXVsdGlwbGUgUkkNCj4+PiA+TFNB cyBhY3RpdmUgYXQgdGhlIHNhbWUgdGltZSB0aGF0IGFwcGx5IHRvIGEgZ2l2ZW4gbm9kZSwgc3Vj aCBhcyBpZg0KPj4+dGhlDQo+Pj4gPmFkbWluIGp1c3QgYWRkZWQgYSBuZXcgUkkgTFNBIGNvbnRh aW5pbmcgb25seSB0aGUgYWRtaW4gdGFnIHRvIGF1Z21lbnQNCj4+PnRoZQ0KPj4+ID5leGlzdGlu ZyBSSSBMU0FzIGJlaW5nIHNlbnQuICBJcyB0aGF0IHBvc3NpYmxlPw0KPj4+DQo+Pj4gSW4gT1NQ RiwgYSBtb3JlLXJlY2VudCB2ZXJzaW9uIG9yIGluc3RhbmNlIG9mIGFuIExTQSB3aWxsIGFsd2F5 cw0KPj4+c3VwZXJzZWRlDQo+Pj4gYWxsIHByZXZpb3VzIGluc3RhbmNlcyBvZiB0aGUgc2FtZSBM U0EuDQo+Pg0KPj5UaGFua3MgZm9yIGNsYXJpZnlpbmcuICBTbywgdGhpcyBpcyBhIG5vbi1pc3N1 ZSwgYW5kIHRoZSBvbmx5IHF1ZXN0aW9uIGlzDQo+PndoZXRoZXIgdGhlIHRleHQgY291bGQvc2hv dWxkIGJlIGNoYW5nZWQgdG8gaW1wcm92ZSBjbGFyaXR5Lg0KPg0KPkxldCBtZSB0aGluayBhYm91 dCB0aGlzIHNpbmNlIGl0IGlzIGEgZ2VuZXJpYyBPU1BGIFJJIGFtYmlndWl0eSBhbmQgaXQNCj53 aWxsIGFmZmVjdCBtdWx0aXBsZSBkb2N1bWVudHMuIEluIGEgV2ViRXggcmlnaHQgbm93IHRob3Vn aOKApg0KDQpUaGUga2V5IHBvaW50IGhlcmUgaXMgdGhhdCBhbiBPU1BGIHJvdXRlciBvbmx5IG1h aW50YWlucyB0aGUgbW9zdC1yZWNlbnQNCmluc3RhbmNlIG9mIGFuIExTQSBpbiBpdHMgTGluay1T dGF0ZSBEYXRhYmFzZS4gU28sIHRoZXJlIHNob3VsZG7igJl0IGJlIGFueQ0KYW1iaWd1aXR5LiBQ ZXJoYXBzLCB0aGUgdGV4dCBjb3VsZCBiZSBjaGFuZ2VkIHRvIOKAnGFsbCBSSSBMU0EgaW5zdGFu Y2VzIGluDQp0aGUgTGluay1TdGF0ZSBEYXRhYmFzZSAoTFNEQikgYWR2ZXJ0aXNlZCBieSB0aGUg Y29ycmVzcG9uZGluZyBPU1BGDQpyb3V0ZXIu4oCdIA0KDQpUaGFua3MsDQpBY2VlIA0KDQogICAg IA0KDQogICAgICAgICAgDQoNCg0KPg0KPlRoYW5rcywNCj5BY2VlDQo+DQo+DQo+DQo+Pg0KPj4t QmVuDQo+DQoNCg== From nobody Wed Oct 14 05:34:08 2015 Return-Path: X-Original-To: secdir@ietfa.amsl.com Delivered-To: secdir@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 1816F1A1BD7; Wed, 14 Oct 2015 05:34:07 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.661 X-Spam-Level: X-Spam-Status: No, score=-1.661 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HELO_EQ_SE=0.35, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01] autolearn=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id GQmeFin5bKeq; Wed, 14 Oct 2015 05:34:04 -0700 (PDT) Received: from e-mailfilter01.sunet.se (e-mailfilter01.sunet.se [IPv6:2001:6b0:8:2::201]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 3503B1A1BCB; Wed, 14 Oct 2015 05:34:04 -0700 (PDT) Received: from smtp1.sunet.se (smtp1.sunet.se [192.36.171.214]) by e-mailfilter01.sunet.se (8.14.4/8.14.4/Debian-4) with ESMTP id t9ECY0ue011133 (version=TLSv1/SSLv3 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=OK); Wed, 14 Oct 2015 14:34:00 +0200 Received: from kerio.sunet.se (kerio.sunet.se [192.36.171.210]) by smtp1.sunet.se (8.14.9/8.14.7) with ESMTP id t9ECXutC020005 (version=TLSv1/SSLv3 cipher=ECDHE-RSA-AES256-SHA bits=256 verify=NO); Wed, 14 Oct 2015 14:33:59 +0200 (CEST) VBR-Info: md=sunet.se; mc=all; mv=swamid.se DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=sunet.se; s=default; t=1444826040; bh=9y8u5/tecGeYRKtuVjjPTWhkFca/I7Y1bFS8IjS9DZQ=; h=To:From:Subject:Date; b=ipx27RR+bPeKxXxdnfr3eiCOyTVFKg1kqITVp5oFsxlQ41E5Qacbnt8cOnfBRfv7q vwQ+yAmNaGcpxZfXmY4E2NfcIcJSDh3MkrB0AWRVAhgXCSeqqMEYo/Bk1bDiGOiT4y QTel6bzwfszGInWvNZQf91lgmE1WY88SrbX0KztE= X-Footer: c3VuZXQuc2U= Received: from [130.239.225.3] ([130.239.225.3]) (authenticated user leifj@sunet.se) by kerio.sunet.se (Kerio Connect 8.5.2) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128 bits)); Wed, 14 Oct 2015 14:33:54 +0200 To: "secdir@ietf.org" , draft-ietf-mpls-self-ping.all@tools.ietf.org, IESG From: Leif Johansson X-Enigmail-Draft-Status: N1110 Message-ID: <561E4BB2.2000506@sunet.se> Date: Wed, 14 Oct 2015 14:33:54 +0200 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:38.0) Gecko/20100101 Thunderbird/38.3.0 MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 8bit X-Bayes-Prob: 0.0001 (Score 0, tokens from: outbound, outbound-sunet-se:default, sunet-se:default, base:default, @@RPTN) X-CanIt-Geo: ip=192.36.171.210; country=SE; latitude=59.3294; longitude=18.0686; http://maps.google.com/maps?q=59.3294,18.0686&z=6 X-CanItPRO-Stream: outbound-sunet-se:outbound (inherits from outbound-sunet-se:default, sunet-se:default, base:default) X-Canit-Stats-ID: 09Pt0y0qc - 16ddc351f7f6 - 20151014 X-CanIt-Archive-Cluster: PfMRe/vJWMiXwM2YIH5BVExnUnw Received-SPF: neutral (e-mailfilter01.sunet.se: 192.36.171.210 is neither permitted nor denied by domain leifj@sunet.se) receiver=e-mailfilter01.sunet.se; client-ip=192.36.171.210; envelope-from=; helo=smtp1.sunet.se; identity=mailfrom X-Scanned-By: CanIt (www . roaringpenguin . com) on 192.36.171.201 Archived-At: Subject: [secdir] (late) review of draft-ietf-mpls-self-ping-05 X-BeenThere: secdir@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: Security Area Directorate List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 14 Oct 2015 12:34:07 -0000 I have reviewed this document as part of the security directorate's ongoing effort to review all IETF documents being processed by the IESG. These comments were written primarily for the benefit of the security area directors. Document editors and WG chairs should treat these comments just like any other last call comments that arrive in timely manner, and not significantly belated. First of all - pls apologize for being very late with this review! The field is also well outside my area of expertise which may make my review moot. My one comment is that the Security Considerations section identifies the Session-ID as sensitive and sais that implementations SHOULD NOT be assigned in a predictable manner. Given the security implications of Session-ID forgery (also clearly stated in the SC section) it might be worth recommending the use of a CSPRNG to generate the Session-IDs I'm curious about how this is done in implementations today though... Cheers Leif From nobody Wed Oct 14 06:34:09 2015 Return-Path: X-Original-To: secdir@ietfa.amsl.com Delivered-To: secdir@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 8D3F51A702A for ; Wed, 14 Oct 2015 06:34:08 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.001 X-Spam-Level: X-Spam-Status: No, score=-2.001 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, SPF_PASS=-0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Jtq2sT93A9d5 for ; Wed, 14 Oct 2015 06:34:06 -0700 (PDT) Received: from mail-yk0-x22c.google.com (mail-yk0-x22c.google.com [IPv6:2607:f8b0:4002:c07::22c]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id E6B581A7007 for ; Wed, 14 Oct 2015 06:34:03 -0700 (PDT) Received: by ykey125 with SMTP id y125so47064558yke.3 for ; Wed, 14 Oct 2015 06:34:03 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=sn3rd.com; s=google; h=content-type:mime-version:subject:from:in-reply-to:date:cc :content-transfer-encoding:message-id:references:to; bh=c8xWxu68Hp0MXPkfp0pceyxbeDtDKJv2AvPmeuRix+U=; b=hrLhryZEBOBGLrYK8qJCKpyMxPgf3eDYCm9m3q2+/3BAIZqHxpkZZhPNh6eAJDHYc0 1x+0aZs/nwSX3SaPUnpl161JuZT29x7hOxxtnB8WkakdrtbG6+BVLF6aN7+jlRPlPOza OnLUoqyFyzDLB+vKASsUfh3d0oEx/KlYTArLc= X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:content-type:mime-version:subject:from :in-reply-to:date:cc:content-transfer-encoding:message-id:references :to; bh=c8xWxu68Hp0MXPkfp0pceyxbeDtDKJv2AvPmeuRix+U=; b=QEhMEpoW3Y3We9IpArcmi3pyrVKLKNMnXDMYoVOlVDJhHPRQn67TSirujVyASnXKCh ohi21mXCam0xvODq8jsXsRwAcNL2DR0uj/LQ+zbbDCMij6wbmdIpZCPHAJAFDlk/8O0X Ka1u2xyefN8ZXFBNluG2y2T/Y2ysGAGuzi8AmdK7D6H29FniuQf10dvZL6FYsNB3Zbl3 PHg8Ov1rWu+cO7iR3m9V/bq9rmEFgL0/z9xRGmPMXzmrp+7WSR/4C/lS1ab33/Lxl13h IpcdFJzbbdFY76vNgTZSsbyYEyLxrtY2LiUucxZnPp5guFfizNh1nDCv9J+sbJf/aC5K FWkQ== X-Gm-Message-State: ALoCoQmdmw53wEOXsRXIjZSooTroLKPS6PpvzUID4v0aSzFjncYO/0rMLCxHjQo/CgNldUjOLuE5 X-Received: by 10.129.98.86 with SMTP id w83mr2495309ywb.285.1444829643228; Wed, 14 Oct 2015 06:34:03 -0700 (PDT) Received: from [172.16.0.112] (pool-173-73-126-234.washdc.east.verizon.net. [173.73.126.234]) by smtp.gmail.com with ESMTPSA id s62sm5762889ywg.35.2015.10.14.06.34.01 (version=TLSv1 cipher=ECDHE-RSA-RC4-SHA bits=128/128); Wed, 14 Oct 2015 06:34:02 -0700 (PDT) Content-Type: text/plain; charset=windows-1252 Mime-Version: 1.0 (Mac OS X Mail 7.3 \(1878.6\)) From: Sean Turner In-Reply-To: <55F9A0AA.90300@pdmconsulting.net> Date: Wed, 14 Oct 2015 09:34:00 -0400 Content-Transfer-Encoding: quoted-printable Message-Id: <1F89C814-111B-49D6-9502-EC562C060BCC@sn3rd.com> References: <55F9A0AA.90300@pdmconsulting.net> To: mayer@pdmconsulting.net X-Mailer: Apple Mail (2.1878.6) Archived-At: Cc: secdir@ietf.org, draft-ietf-ntp-extension-field.all@tools.ietf.org, The IESG Subject: Re: [secdir] secdir review of draft-ietf-ntp-extension-field X-BeenThere: secdir@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: Security Area Directorate List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 14 Oct 2015 13:34:08 -0000 Danny, Sorry it=92s been so long to get back to you on this. Responses inline = (I snipped out he nits and the ones that look like we agreed on). spt On Sep 16, 2015, at 13:02, Danny Mayer wrote: > Sorry for the delay in responding. I've been up to my ears in = problems. > See my feedback below. >=20 > Danny >=20 > On 8/27/2015 9:08 AM, Sean Turner wrote: >> Fear not as this is just the secdir review! >>=20 >> I have reviewed this document as part of the security directorate=92s >> ongoing effort to review all IETF documents being processed by the >> IESG. These comments were written with the intent of improving >> security requirements and considerations in IETF drafts. Comments not >> addressed in last call may be included in AD reviews during the IESG >> review. Document editors and WG chairs should treat these comments >> just like any other last call comments. >>=20 >> draft summary: This draft updates NTPv4 Protocol and Algorithm >> Specification (aka RFC 5905) s7.5, which is the section that >> describes extension fields, and to paraphrase the: clarify the >> relationship between extension fields and MACs and define the >> behavior of a host that receives an unknown extension field. Note >> that when comparing the =93OLD=94 section to RFC 5905, you=92ll = should note >> that the =93OLD=94 text incorporates a verified errata >> (http://www.rfc-editor.org/errata_search.php?eid=3D3627). The =93NEW" >> text requires things like when defining an extension the definition >> must specify whether it must be MACed or not, the MTI MAC, the length >> of the MAC, etc. >>=20 >> secdir status summary: I need to clarify something in my mind, which >> I hope fall into the =93you missed that in this spec over here=94 or = the >> =93these are *NOT* the droids you=92re looking for=94 bucket, before = I can >> say "ready with nits": >>=20 >> 0) 7.5.1.1 says an extension can support multiple MACs, that the >> extension=92s document defines the MTI algorithm & MAC length, and = that >> if more than one algorithm is allowed the extension includes an >> indication of which one was actually used; all great. But, I=92m >> trying to figure out how that fits with RFC 5905: >>=20 >> - In s7.3, I see "dgst (128)=94 in f8 >>=20 >> - In s9.2, I see "There is no specific requirement for >> authentication; however, if authentication is implemented, then the >> MD5-keyed hash algorithm described in [RFC1321] must be supported=94 >>=20 >> Doesn=92t s7.3 limit the MAC to HMAC-MD5 and the length to 128? I = mean >> if you=92re going to allow an extension to override s9.2 that seems >> like something worth noting in say the abstract/intro. >=20 > Now that you bring this up, I should tell you that the reference > implementation implements MD5 and NOT HMAC_MD5 but it also implements > DES (not 3DES) and SHA-1! None of this is documented of course and the > packets are inspected for which algorithm to use based on the size of > the MAC field! Since there is no way to know from the packet whether > there is one or more extension fields or if there is a MAC present the > code ends up guessing which in turn limits the size that you can give = an > extension field. This all leads to the strange wording in section > 7.5.1.3 and 7.5.1.4 in the draft and is necessary to detect the = presence > of a MAC. >=20 > We probably need to update the dgest field in RFC5905 to make it clear > that it can have multiple lengths depending on the algorithm used. On > the other hand I would prefer to get rid of the MAC and turn it into = an > extension field, assuming that the NTS/CMS scheme is not used. The > advantages of that is obvious especially as no guessing would be > required and we could specify the algorithm to use and you could have > multiple MAC extension fields that would cover different parts of the > packet. >=20 >>=20 >> Thinking there=92s got to be a reason for this I went off and looked = at >> the other NTP WG drafts =85 after finding the NTS & CMS-based specs, >> are the changes proposed in this draft to to allow an NTP packet blob >> that doesn=92t use the MAC mechanism described in RFC 5905 but = instead >> use the NTS/CMS =93scheme=94, i.e., an NTP extension that is a CMS >> object, with no MAC in the 5905 sense - the CMS object instead of the >> NTP MAC field gives you the authentication? >>=20 >> 1) s7.5.1.2 seems to be saying if extension A specifies alg X, and >> extension B specifies alg X and Y, and extension C specifies alg Y >> then extension A and B can appear together as can extension B and C, >> but A and C can=92t appear together? Sounds great, but what if A = and >> C do appear together what happens? >=20 > I think that the draft makes it clear that you cannot have that case > since it requires that the MAC use one algorithm. "multiple extension > fields that require a MAC they MUST all require use of the same > algorithm and MAC length=94 Ah that might be it MTI vs MTU. I was reading this as extension A = specifies the MTI (Mandatory to Implement) algorithms X, Y. What you=92re= saying is that the definition says extension A MUST use algorithm X. >> 2) Still on 7.5.12: "If there are multiple extension fields that >> require a MAC they MUST all require use of the same algorithm and MAC >> length.=94 >>=20 >> So if I specify extension A with X as the MUST, and extension B with >> X as the SHOULD and Y as the MUST, then I can=92t include both >> extension A and B? Extension A requires X, but extension B requires >> Y. >=20 > That's right. I guess the IETF review process for extension types should provide some = sanity here, but couldn=92t this result in multiple versions of the same = attribute one for each algorithm? Extension A requires the use of alg = X, Extension A=92 requires the use of alg Y, etc? (then again maybe I=92m= being dense this morning) >> 3) s7.5.1.3: What=92s the 24-octet limitation based on? >>=20 >=20 > The MAC guessing game. See the insanity above. Okay so it=92s not just me ;) >> Minor: >>=20 >> 0) The new s7.5 says: >>=20 >> The Field Type field is specific to the defined function and is not >> elaborated here. If a =85. >>=20 >> 0.a) I think what you=92re trying to say is that the Field Type field >> is defined in an IANA registry and it=92s length and value are = defined >> by the document referred to by the registry? >>=20 >=20 > Yes. Might be worth unpacking that in the draft, but I=92m certainly not hard = over on this ;) The Field Type field is specific to the defined function and is not elaborated here; the Field Type field is defined in an IANA registry and its length and value are defined by the document referred to by the registry. >> 0.b) Neither RFC5905 nor this document specify how the padding is >> done. Is padding determined by the document referred to by the field >> type? I.e., can I do padding with all 1s and somebody else do it >> with all zeros? >>=20 >=20 > It shouldn't matter. If the extension field specification needs it to = be > specific it should state that in the specification. ack - you define the extension and the padding just falls out.= From nobody Wed Oct 14 17:56:06 2015 Return-Path: X-Original-To: secdir@ietfa.amsl.com Delivered-To: secdir@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id BCDBA1A90F3; Wed, 14 Oct 2015 17:56:03 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.211 X-Spam-Level: X-Spam-Status: No, score=-4.211 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id nFvDV7eoRguo; Wed, 14 Oct 2015 17:56:01 -0700 (PDT) Received: from dmz-mailsec-scanner-1.mit.edu (dmz-mailsec-scanner-1.mit.edu [18.9.25.12]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 556BB1A8A6A; Wed, 14 Oct 2015 17:56:01 -0700 (PDT) X-AuditID: 1209190c-f79b76d000007c4e-97-561ef99fd31c Received: from mailhub-auth-4.mit.edu ( [18.7.62.39]) (using TLS with cipher DHE-RSA-AES256-SHA (256/256 bits)) (Client did not present a certificate) by dmz-mailsec-scanner-1.mit.edu (Symantec Messaging Gateway) with SMTP id 9C.FF.31822.F99FE165; Wed, 14 Oct 2015 20:55:59 -0400 (EDT) Received: from outgoing.mit.edu (outgoing-auth-1.mit.edu [18.9.28.11]) by mailhub-auth-4.mit.edu (8.13.8/8.9.2) with ESMTP id t9F0twIe013294; Wed, 14 Oct 2015 20:55:59 -0400 Received: from multics.mit.edu (system-low-sipb.mit.edu [18.187.2.37]) (authenticated bits=56) (User authenticated as kaduk@ATHENA.MIT.EDU) by outgoing.mit.edu (8.13.8/8.12.4) with ESMTP id t9F0ttoE026254 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NOT); Wed, 14 Oct 2015 20:55:57 -0400 Received: (from kaduk@localhost) by multics.mit.edu (8.12.9.20060308) id t9F0ts4Q009019; Wed, 14 Oct 2015 20:55:54 -0400 (EDT) Date: Wed, 14 Oct 2015 20:55:54 -0400 (EDT) From: Benjamin Kaduk To: Shraddha Hegde In-Reply-To: Message-ID: References: User-Agent: Alpine 1.10 (GSO 962 2008-03-14) MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFmphleLIzCtJLcpLzFFi42IRYrdT153/Uy7M4NZkc4vJb+cxW/x+tYXd YsaficwWHxY+ZLG48WgvswOrx5TfG1k9liz5yeRxvekqewBzFJdNSmpOZllqkb5dAlfGgx+L mAuWqVT8nrqMpYFxgmwXIyeHhICJxJRlZ1ghbDGJC/fWs3UxcnEICSxmkmh59osVwtnIKPHx 1UEmCOcQk8TaY23MEE4Do8SH+b/YQPpZBLQlzn5qZQKx2QRUJGa+2QgWFxHQlLg28SnYKGaB e4wS/891M4MkhAXsJY50HGMBsTkFEiXWTvzKCGLzCjhKXFi0gx1iw2Emia9bv4IViQroSKze P4UFokhQ4uTMJ2A2s4CWxPLp21gmMArOQpKahSS1gJFpFaNsSm6Vbm5iZk5xarJucXJiXl5q ka6hXm5miV5qSukmRlBgc0ry7GB8c1DpEKMAB6MSD2/BPbkwIdbEsuLK3EOMkhxMSqK8F74D hfiS8lMqMxKLM+KLSnNSiw8xSnAwK4nwam8AyvGmJFZWpRblw6SkOViUxHk3/eALERJITyxJ zU5NLUgtgsnKcHAoSfAu+wHUKFiUmp5akZaZU4KQZuLgBBnOAzT8LEgNb3FBYm5xZjpE/hSj opQ47z2QhABIIqM0D64XnHh2M6m+YhQHekWY9xxIFQ8wacF1vwIazAQ0eM9/WZDBJYkIKakG xu1ea5edcE5/eqqkeXVezo1/z1+tZX/4z9xD5sKZi0o/Ty8LWrL9ToPsXbmdVkG3OmZfS/gT uv/03HuFC+P+cl12OxZvyf/a7rg9U3hhhZnF4pdLMr5MzOKq9p7L9SyRJbXe0PZCkp9tx2zD Hea9N+Ol11k8SBGUm2PWI3Dmk5bK9XjpgElLbiixFGckGmoxFxUnAgCfZxAsFwMAAA== Archived-At: Cc: "draft-ietf-ospf-node-admin-tag.all@ietf.org" , "Acee Lindem \(acee\)" , "iesg@ietf.org" , "secdir@ietf.org" Subject: Re: [secdir] secdir review of draft-ietf-ospf-node-admin-tag-05 X-BeenThere: secdir@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: Security Area Directorate List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 15 Oct 2015 00:56:03 -0000 On Wed, 14 Oct 2015, Shraddha Hegde wrote: > > I completely missed looking at editorial comments and the diff in > previous mail. Sorry about that. > > Have taken your changes in the latest version and diff (-06 to -08) > attached. Pls take a look. The new version seems improved; I'll skip line-by-line discussion of the grammar changes since the IESG teleconference call is fast approaching. The diagram for the TLV format in Figure 1 still has a 15-bit type and 17-bit length; both should be 16 bits. > Editorial comments: > > > > > I also have some editorial comments unrelated to the secdir review: > > > > Section 3.2 reads rather like a jumbled list and could benefit from some > > additional structure. > Updated. Pls refer diff. > > > > Similarly, I would find it helpful if there was some text motivating the > > "middle patch" mentioned above, towards the beginning of the technical > > (non-example) portion of the document. > > I could not get this comment. Could you pls elaborate? This is related to Alvaro's DISCUSS. Basically, there is conflict between saying that the interpretation of tag values is entirely local, and imposing restirctions on how the tags should be interpreted. It is helpful to the reader to discuss why the document does not pick one extreme of completely-local interpretation and a fully specified protocol that dictates the meaning of all tags. Instead, the document picks something in-between, with tag interpretation mostly a matter of local policy, but some restrictions on their use. Describing why this choice was made early in the text gives the reader a better picture of what the goals of the protocol are, to better understand the details of the protocol itself. > > For a construction as weakly structured as these administrative tags, > > preventing any internal structure or dependencies between tags (as this > > document attempts to do) seems correct. However, this sentiment seems to > > be expressed differently in several different places in the document, and > > it would be good to consolidate and coordinate them. In particular, > > paragraph 3 of section 3.2 explicitly says that tag order has no meaning, > > but paragraph 4 has the weaker "SHOULD be considered an unordered list". > > (The word "set" might be appropriate here.) > > Below is the latest text. SHOULD is changed to MUST > > " Each tag MUST be treated as an independent > identifier that MAY be used in policy to perform a policy > action. Each tag carried by the administrative tag TLV SHOULD be used to > indicate a characteristic of a node that is independent of the > characteristics indicated by other administrative tags. > The administrative tag list within the TLV MUST be considered > an unordered list. Whilst policies may be implemented based on the > presence of multiple tags (e.g., if tag A AND tag B are present), > they MUST NOT be reliant upon the order of the tags (i.e., > all policies should be considered commutative operations, such that > tag A preceding or following tag B does not change their outcome)." This seems okay in a quick read, but again, the resolution of Alvaro's DISCUSS will be relevant to this text. > > Paragraph 7 of section 3.2 seems to be trying to say that the > > administrative tags must indicate inherent or administratively configured > > properties of a node and must not be used to convey attributes of the > > routing topology. (The word "tie" seems insufficiently clear.) > > Changed to text below. > > "Being part of the RI LSA, the per-node administrative tag > TLV must be reasonably small and stable. In particular, > but not limited to, implementations supporting per-node > administrative tags MUST NOT be used to convey attributes of the > routing topology or associate tags with > changes in the network topology (both within and outside > the OSPF domain) or reachability of routes." That's an improvement, thanks. ("but not limited to" is still bad grammar, but the best fix is not immediately obvious.) > > The last paragraph of section 3.2 could probably be written more clearly. > > In particular, "in any instance of the RI-LSA" is not entirely clear to me > > (but then again, I don't really understand how LSAs normally work). Is it > > enough to just say that implementations MUST detect when the > > administrative tags associated with a given node change, and update their > > state accordingly? > > > hope this issue is resolved in other mail thread. I think so, yes. -Ben From nobody Wed Oct 14 17:58:21 2015 Return-Path: X-Original-To: secdir@ietfa.amsl.com Delivered-To: secdir@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 4C4E91B2E47; Wed, 14 Oct 2015 17:58:19 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.211 X-Spam-Level: X-Spam-Status: No, score=-4.211 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id sirCXvhV1LXh; Wed, 14 Oct 2015 17:58:17 -0700 (PDT) Received: from dmz-mailsec-scanner-6.mit.edu (dmz-mailsec-scanner-6.mit.edu [18.7.68.35]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 699371A9143; Wed, 14 Oct 2015 17:58:17 -0700 (PDT) X-AuditID: 12074423-f793f6d000007fc1-6f-561efa27566c Received: from mailhub-auth-4.mit.edu ( [18.7.62.39]) (using TLS with cipher DHE-RSA-AES256-SHA (256/256 bits)) (Client did not present a certificate) by dmz-mailsec-scanner-6.mit.edu (Symantec Messaging Gateway) with SMTP id 15.E7.32705.82AFE165; Wed, 14 Oct 2015 20:58:16 -0400 (EDT) Received: from outgoing.mit.edu (outgoing-auth-1.mit.edu [18.9.28.11]) by mailhub-auth-4.mit.edu (8.13.8/8.9.2) with ESMTP id t9F0wFNq013505; Wed, 14 Oct 2015 20:58:15 -0400 Received: from multics.mit.edu (system-low-sipb.mit.edu [18.187.2.37]) (authenticated bits=56) (User authenticated as kaduk@ATHENA.MIT.EDU) by outgoing.mit.edu (8.13.8/8.12.4) with ESMTP id t9F0wBt6026873 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NOT); Wed, 14 Oct 2015 20:58:14 -0400 Received: (from kaduk@localhost) by multics.mit.edu (8.12.9.20060308) id t9F0wBkP009334; Wed, 14 Oct 2015 20:58:11 -0400 (EDT) Date: Wed, 14 Oct 2015 20:58:11 -0400 (EDT) From: Benjamin Kaduk To: "Acee Lindem (acee)" In-Reply-To: Message-ID: References: User-Agent: Alpine 1.10 (GSO 962 2008-03-14) MIME-Version: 1.0 Content-Type: MULTIPART/MIXED; BOUNDARY="-559023410-313353755-1444870691=:26829" X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFprNKsWRmVeSWpSXmKPExsUixG6nrqvxSy7MYM0eNovJb+cxW/x+tYXd YsaficwWHxY+ZLG48WgvswOrx5TfG1k9liz5yeRxvekqewBzFJdNSmpOZllqkb5dAldG05dd rAUPOSt27r7K3sD4g72LkZNDQsBE4sjby6wQtpjEhXvr2boYuTiEBBYzSZyY9Z4JwtnIKPGz cw1U5hCTxIXpv6CcBkaJVcffgvWzCGhLnG+/ywZiswmoSMx8sxHI5uAQEdCU2PKeBaSeWeAe o8S++6vB6oUF7CWOvLjHAmJzCuhIrF2/iBnE5hVwlJh/5CELxIIWZon9vyaBFYkCFa3eP4UF okhQ4uTMJ2A2s0CAROeCl6wTGAVnIUnNQpKCsNUlGh+cZYOwtSXu32xjW8DIsopRNiW3Sjc3 MTOnODVZtzg5MS8vtUjXTC83s0QvNaV0EyM4DlyUdzD+Oah0iFGAg1GJh7fgnlyYEGtiWXFl 7iFGSQ4mJVHeC9+BQnxJ+SmVGYnFGfFFpTmpxYcYJTiYlUR4tTcA5XhTEiurUovyYVLSHCxK 4rybfvCFCAmkJ5akZqemFqQWwWRlODiUJHgf/QBqFCxKTU+tSMvMKUFIM3FwggznARp+FqSG t7ggMbc4Mx0if4pRUUqcNw0kIQCSyCjNg+sFp6ndTKqvGMWBXhHm5f0JVMUDTHFw3a+ABjMB Dd7zXxZkcEkiQkqqgbHBnmFx1UUZvS1Ofx9ePjKPTbpY9su7kAbBJh21vhib0Bvywru/Ltas 0vf6kxp2Tnn2meW69fInLmyz4zst2N+nHy5SxPNXcXphUXrxmszgR7PrJH7OE3ot0GdSdG3l VzcWvxZO/voj4g2vorsbduiJq14T2sahsb/w+9vjSf3zFkzeePhxhhJLcUaioRZzUXEiABDA 5gwuAwAA Archived-At: Cc: "draft-ietf-ospf-node-admin-tag.all@ietf.org" , "secdir@ietf.org" , Shraddha Hegde , "iesg@ietf.org" Subject: Re: [secdir] secdir review of draft-ietf-ospf-node-admin-tag-05 X-BeenThere: secdir@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: Security Area Directorate List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 15 Oct 2015 00:58:19 -0000 This message is in MIME format. The first part should be readable text, while the remaining parts are likely unreadable without MIME-aware tools. ---559023410-313353755-1444870691=:26829 Content-Type: TEXT/PLAIN; charset=utf-8 Content-Transfer-Encoding: QUOTED-PRINTABLE On Wed, 14 Oct 2015, Acee Lindem (acee) wrote: > Hi Ben, > > On 10/13/15, 7:02 PM, "Acee Lindem (acee)" wrote: > > > > > > >On 10/13/15, 6:57 PM, "Benjamin Kaduk" wrote: > > > >>Thanks for clarifying. So, this is a non-issue, and the only question = is > >>whether the text could/should be changed to improve clarity. > > > >Let me think about this since it is a generic OSPF RI ambiguity and it > >will affect multiple documents. In a WebEx right now though=E2=80=A6 > > The key point here is that an OSPF router only maintains the most-recent > instance of an LSA in its Link-State Database. So, there shouldn=E2=80=99= t be any > ambiguity. Perhaps, the text could be changed to =E2=80=9Call RI LSA inst= ances in > the Link-State Database (LSDB) advertised by the corresponding OSPF > router.=E2=80=9D That seems like a useful improvement; thanks. -Ben ---559023410-313353755-1444870691=:26829-- From nobody Thu Oct 15 02:15:06 2015 Return-Path: X-Original-To: secdir@ietfa.amsl.com Delivered-To: secdir@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 5612A1A8920; Thu, 15 Oct 2015 02:15:03 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -14.511 X-Spam-Level: X-Spam-Status: No, score=-14.511 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_HI=-5, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id h-_ltc8i-6cu; Thu, 15 Oct 2015 02:15:01 -0700 (PDT) Received: from rcdn-iport-5.cisco.com (rcdn-iport-5.cisco.com [173.37.86.76]) (using TLSv1 with cipher RC4-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id B513C1A8901; Thu, 15 Oct 2015 02:15:01 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=3104; q=dns/txt; s=iport; t=1444900502; x=1446110102; h=from:to:cc:subject:date:message-id:references: in-reply-to:content-id:content-transfer-encoding: mime-version; bh=8nS9NrzBOR3czVxE9aqazI3S5DPhnyyG9A3wroS3Y2I=; b=SkhteWkIe7rKrz2SV7l+cVgsdNq1W3c/RRlGQ5HoS769HibtssqgWJ8W VYlj7PFjOXXc3o9u2rNM8ndNpe3XLWRpXU81078TyNteyYLcvY0/jF+Dz p44V62Ubq2cYFIUW7MOGWgyXrFSaKu0JTfu2Z/zzjVAywM+avZu9R1k2X A=; X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: A0AcAgCFbR9W/4kNJK1eDoMYgUIGvTEBDYFZhhwCHIEkOBQBAQEBAQEBgQqEJgEBAQQjEUUMBAIBCBEEAQEBAgIjAwICAjAUAQgIAgQBDQWILq9ekzIBAQEBAQEBAQEBAQEBAQEBAQEBAQEXgSKKUoRaGBsHBoJjgUUBBJYXAY0anAoBHwEBQoNFPnGEYYEGAQEB X-IronPort-AV: E=Sophos;i="5.17,684,1437436800"; d="scan'208";a="37805587" Received: from alln-core-4.cisco.com ([173.36.13.137]) by rcdn-iport-5.cisco.com with ESMTP; 15 Oct 2015 09:15:01 +0000 Received: from XCH-ALN-012.cisco.com (xch-aln-012.cisco.com [173.36.7.22]) by alln-core-4.cisco.com (8.14.5/8.14.5) with ESMTP id t9F9F0Ej023574 (version=TLSv1/SSLv3 cipher=AES256-SHA bits=256 verify=FAIL); Thu, 15 Oct 2015 09:15:00 GMT Received: from xch-rcd-015.cisco.com (173.37.102.25) by XCH-ALN-012.cisco.com (173.36.7.22) with Microsoft SMTP Server (TLS) id 15.0.1104.5; Thu, 15 Oct 2015 04:14:46 -0500 Received: from xch-rcd-015.cisco.com ([173.37.102.25]) by XCH-RCD-015.cisco.com ([173.37.102.25]) with mapi id 15.00.1104.000; Thu, 15 Oct 2015 04:14:45 -0500 From: "Acee Lindem (acee)" To: Shraddha Hegde , Benjamin Kaduk Thread-Topic: secdir review of draft-ietf-ospf-node-admin-tag-05 Thread-Index: AQHRAtRkZED+3D3sTk6f1e8MGzkzuJ5lH6mAgABoLJCABH8tgIAABXOAgAADDQCAAAE9AIAA3F8AgADWWYCAADQwMIAAZ24A Date: Thu, 15 Oct 2015 09:14:45 +0000 Message-ID: References: In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-ms-exchange-messagesentrepresentingtype: 1 x-ms-exchange-transport-fromentityheader: Hosted x-originating-ip: [10.116.152.199] Content-Type: text/plain; charset="utf-8" Content-ID: <4C6AF14D8E87CD4397642315EF0E02E4@emea.cisco.com> Content-Transfer-Encoding: base64 MIME-Version: 1.0 Archived-At: Cc: "draft-ietf-ospf-node-admin-tag.all@ietf.org" , "iesg@ietf.org" , "secdir@ietf.org" Subject: Re: [secdir] secdir review of draft-ietf-ospf-node-admin-tag-05 X-BeenThere: secdir@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: Security Area Directorate List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 15 Oct 2015 09:15:03 -0000 SXQgbG9va3MgZ29vZCB0b28gbWUgb3RoZXIgdGhhbiB0aGVyZSBpcyBzcGFjZSBtaXNzaW5nLg0K DQpzL3JvdXRlci5XaGVuL3JvdXRlci4gV2hlbi8NCg0KVGhhbmtzLA0KQWNlZQ0KDQpPbiAxMC8x NS8xNSwgMTI6MDUgQU0sICJTaHJhZGRoYSBIZWdkZSIgPHNocmFkZGhhQGp1bmlwZXIubmV0PiB3 cm90ZToNCg0KPkFjZWUvQmVuLA0KPg0KPlVwZGF0ZWQgdGhlIHRleHQgYXMgYmVsb3cuDQo+DQo+ PHQ+IE11bHRpcGxlIG5vZGUgYWRtaW5pc3RyYXRpdmUgdGFnIFRMVnMgTUFZIGFwcGVhciBpbiBh biBSSSBMU0Egb3INCj4gICBtdWx0aXBsZSBub2RlIGFkbWluaXN0cmF0aXZlIHRhZyBUTFZzIE1B WSBiZSBjb250YWluZWQgaW4gZGlmZmVyZW50DQo+ICAgaW5zdGFuY2VzIG9mIHRoZSBSSSBMU0Eu ICBUaGUgbm9kZSBhZG1pbmlzdHJhdGl2ZSB0YWdzIGFzc29jaWF0ZWQNCj4gICB3aXRoIGEgbm9k ZSB0aGF0IG9yaWdpbmF0ZXMgdGFncyBmb3IgdGhlIHB1cnBvc2Ugb2YgYW55IGNvbXB1dGF0aW9u IG9yDQo+cHJvY2Vzc2luZyBhdCBhIHJlY2VpdmluZyBub2RlDQo+ICAgU0hPVUxEIGJlIGEgc3Vw ZXJzZXQgb2Ygbm9kZSBhZG1pbmlzdHJhdGl2ZSB0YWdzIGZyb20gYWxsIHRoZSBUTFZzIGluDQo+ YWxsIHRoZQ0KPiAgIHJlY2VpdmVkIFJJIExTQSBpbnN0YW5jZXMgaW4gdGhlIExpbmstU3RhdGUg RGF0YWJhc2UgKExTREIpIGFkdmVydGlzZWQNCj5ieSB0aGUgDQo+ICAgY29ycmVzcG9uZGluZyBP U1BGIHJvdXRlci5XaGVuIGFuIFJJIExTQSBpcyByZWNlaXZlZCB0aGF0IGNoYW5nZXMgdGhlDQo+ c2V0IG9mIA0KPiAgIHRhZ3MgYXBwbGljYWJsZSB0byBhbnkgb3JpZ2luYXRpbmcgbm9kZSwgYSBy ZWNlaXZpbmcgbm9kZSBNVVNUIHJlcGVhdA0KPmFueSBjb21wdXRhdGlvbiBvcg0KPglwcm9jZXNz aW5nIHRoYXQgaXMgYmFzZWQgb24gdGhvc2UgYWRtaW5pc3RyYXRpdmUgdGFncy4NCj48L3Q+DQo+ DQo+DQo+Umdkcw0KPlNocmFkZGhhDQo+DQo+LS0tLS1PcmlnaW5hbCBNZXNzYWdlLS0tLS0NCj5G cm9tOiBCZW5qYW1pbiBLYWR1ayBbbWFpbHRvOmthZHVrQE1JVC5FRFVdDQo+U2VudDogVGh1cnNk YXksIE9jdG9iZXIgMTUsIDIwMTUgNjoyOCBBTQ0KPlRvOiBBY2VlIExpbmRlbSAoYWNlZSkgPGFj ZWVAY2lzY28uY29tPg0KPkNjOiBTaHJhZGRoYSBIZWdkZSA8c2hyYWRkaGFAanVuaXBlci5uZXQ+ OyBpZXNnQGlldGYub3JnOw0KPnNlY2RpckBpZXRmLm9yZzsgZHJhZnQtaWV0Zi1vc3BmLW5vZGUt YWRtaW4tdGFnLmFsbEBpZXRmLm9yZw0KPlN1YmplY3Q6IFJlOiBzZWNkaXIgcmV2aWV3IG9mIGRy YWZ0LWlldGYtb3NwZi1ub2RlLWFkbWluLXRhZy0wNQ0KPg0KPk9uIFdlZCwgMTQgT2N0IDIwMTUs IEFjZWUgTGluZGVtIChhY2VlKSB3cm90ZToNCj4NCj4+IEhpIEJlbiwNCj4+DQo+PiBPbiAxMC8x My8xNSwgNzowMiBQTSwgIkFjZWUgTGluZGVtIChhY2VlKSIgPGFjZWVAY2lzY28uY29tPiB3cm90 ZToNCj4+DQo+PiA+DQo+PiA+DQo+PiA+T24gMTAvMTMvMTUsIDY6NTcgUE0sICJCZW5qYW1pbiBL YWR1ayIgPGthZHVrQE1JVC5FRFU+IHdyb3RlOg0KPj4gPg0KPj4gPj5UaGFua3MgZm9yIGNsYXJp ZnlpbmcuICBTbywgdGhpcyBpcyBhIG5vbi1pc3N1ZSwgYW5kIHRoZSBvbmx5DQo+PiA+PnF1ZXN0 aW9uIGlzIHdoZXRoZXIgdGhlIHRleHQgY291bGQvc2hvdWxkIGJlIGNoYW5nZWQgdG8gaW1wcm92 ZQ0KPj5jbGFyaXR5Lg0KPj4gPg0KPj4gPkxldCBtZSB0aGluayBhYm91dCB0aGlzIHNpbmNlIGl0 IGlzIGEgZ2VuZXJpYyBPU1BGIFJJIGFtYmlndWl0eSBhbmQNCj4+ID5pdCB3aWxsIGFmZmVjdCBt dWx0aXBsZSBkb2N1bWVudHMuIEluIGEgV2ViRXggcmlnaHQgbm93IHRob3VnaOKApg0KPj4NCj4+ IFRoZSBrZXkgcG9pbnQgaGVyZSBpcyB0aGF0IGFuIE9TUEYgcm91dGVyIG9ubHkgbWFpbnRhaW5z IHRoZQ0KPj4gbW9zdC1yZWNlbnQgaW5zdGFuY2Ugb2YgYW4gTFNBIGluIGl0cyBMaW5rLVN0YXRl IERhdGFiYXNlLiBTbywgdGhlcmUNCj4+IHNob3VsZG7igJl0IGJlIGFueSBhbWJpZ3VpdHkuIFBl cmhhcHMsIHRoZSB0ZXh0IGNvdWxkIGJlIGNoYW5nZWQgdG8g4oCcYWxsDQo+PiBSSSBMU0EgaW5z dGFuY2VzIGluIHRoZSBMaW5rLVN0YXRlIERhdGFiYXNlIChMU0RCKSBhZHZlcnRpc2VkIGJ5IHRo ZQ0KPj4gY29ycmVzcG9uZGluZyBPU1BGIHJvdXRlci7igJ0NCj4NCj5UaGF0IHNlZW1zIGxpa2Ug YSB1c2VmdWwgaW1wcm92ZW1lbnQ7IHRoYW5rcy4NCj4NCj4tQmVuDQoNCg== From nobody Thu Oct 15 02:17:30 2015 Return-Path: X-Original-To: secdir@ietfa.amsl.com Delivered-To: secdir@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 162691A8920; Thu, 15 Oct 2015 02:17:25 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -14.511 X-Spam-Level: X-Spam-Status: No, score=-14.511 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_HI=-5, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id RLeu3A1Bu9j7; Thu, 15 Oct 2015 02:17:21 -0700 (PDT) Received: from alln-iport-7.cisco.com (alln-iport-7.cisco.com [173.37.142.94]) (using TLSv1 with cipher RC4-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id B2E571A8901; Thu, 15 Oct 2015 02:17:20 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=31402; q=dns/txt; s=iport; t=1444900640; x=1446110240; h=from:to:cc:subject:date:message-id:references: in-reply-to:content-id:content-transfer-encoding: mime-version; bh=SPiXpR/D0mMfEdb4iZHwRAxWPvDy7h/cN4uKxZe3zZE=; b=h0uC+5rL42ib2UYFWeJMyz0lfjc5tac1B3Pk/FO+I7zRMm0V82FyuPmb DPCMPKUHk8k6XvqXesACs4jZtuwrmHJIdfDzmCp9YAwj2Y8aWj8hZ4gJ0 2OR784csJfsloqaKrbBHjeDj33DmXK37V9iZNdaV7Jx/nAn6NAwHUBH6C 0=; X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: A0D3AQALbh9W/4UNJK1eDoMYgUIGvTIBDYFZhhwCHIEkOBQBAQEBAQEBgQqEJgEBAQQaCQQNOgYFDAQCAQgRBAEBAQICIwMCAgIwFAEICAIEAQ0FiC6vXpMyAQEBAQEBAQEBAQEBAQEBAQEBAQEBF4EiilKEWggQGwcCAgKCY4FFAQSHPYpxg20BjRqBWIQ6gySKEYRZg24BHwEBQoIMBQEcgRc+cYRhgQYBAQE X-IronPort-AV: E=Sophos;i="5.17,684,1437436800"; d="scan'208";a="198181823" Received: from alln-core-11.cisco.com ([173.36.13.133]) by alln-iport-7.cisco.com with ESMTP; 15 Oct 2015 09:17:19 +0000 Received: from XCH-ALN-012.cisco.com (xch-aln-012.cisco.com [173.36.7.22]) by alln-core-11.cisco.com (8.14.5/8.14.5) with ESMTP id t9F9HJZs009233 (version=TLSv1/SSLv3 cipher=AES256-SHA bits=256 verify=FAIL); Thu, 15 Oct 2015 09:17:19 GMT Received: from xch-rcd-015.cisco.com (173.37.102.25) by XCH-ALN-012.cisco.com (173.36.7.22) with Microsoft SMTP Server (TLS) id 15.0.1104.5; Thu, 15 Oct 2015 04:17:04 -0500 Received: from xch-rcd-015.cisco.com ([173.37.102.25]) by XCH-RCD-015.cisco.com ([173.37.102.25]) with mapi id 15.00.1104.000; Thu, 15 Oct 2015 04:17:04 -0500 From: "Acee Lindem (acee)" To: Shraddha Hegde , Benjamin Kaduk Thread-Topic: secdir review of draft-ietf-ospf-node-admin-tag-05 Thread-Index: AQHRAtRkZED+3D3sTk6f1e8MGzkzuA== Date: Thu, 15 Oct 2015 09:17:04 +0000 Message-ID: References: In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-ms-exchange-messagesentrepresentingtype: 1 x-ms-exchange-transport-fromentityheader: Hosted x-originating-ip: [10.116.152.199] Content-Type: text/plain; charset="utf-8" Content-ID: Content-Transfer-Encoding: base64 MIME-Version: 1.0 Archived-At: Cc: "draft-ietf-ospf-node-admin-tag.all@ietf.org" , "iesg@ietf.org" , "secdir@ietf.org" Subject: Re: [secdir] secdir review of draft-ietf-ospf-node-admin-tag-05 X-BeenThere: secdir@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: Security Area Directorate List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 15 Oct 2015 09:17:25 -0000 U291bmRzIGdvb2QuIA0KVGhhbmtzLCANCkFjZWUgDQoNCk9uIDEwLzE1LzE1LCAxOjAwIEFNLCAi U2hyYWRkaGEgSGVnZGUiIDxzaHJhZGRoYUBqdW5pcGVyLm5ldD4gd3JvdGU6DQoNCj5BY2VlLA0K Pg0KPkFsdGhvdWdoIFJGQyAyMzI4LzUzNDAgZG8gbm90IGV4cGxpY2l0bHkgdGFsayBhYm91dCB0 eXBlIDExICBMU0FzLCBSRkMNCj41MjUwIA0KPlJlc3RyaWN0cyB0eXBlIDExIGludG8gc3R1Yi9O U1NBcy4gQWRkaW5nIHRoZSBibG93IHRleHQgdG8gdGhlIGRyYWZ0Lg0KPg0KPiJBbiBBQlIgaW4g YSBzdHViIG9yIE5TU0EgYXJlYSBNQVkgb3JpZ2luYXRlIEFTIHNjb3BlZCBSSSBMU0FzIGFuZCBm bG9vZA0KPnRoZW0gaW50byBub24tc3R1Yi9OU1NBIGFyZWFzIGFuZCBNQVkgb3JpZ2luYXRlIGFy ZWEgc2NvcGVkIFJJIExTQXMgaW50bw0KPnRoZSBzdHViL05TU0EgYXJlYXMgYXMgdGhlIEFTIHNj b3BlZCBMU0FzDQo+YXJlIG5vdCBmbG9vZGVkIGludG8gc3R1Yi9OU1NBIGFyZWFzLiINCj4NCj5S Z2RzDQo+U2hyYWRkaGENCj4NCj4tLS0tLU9yaWdpbmFsIE1lc3NhZ2UtLS0tLQ0KPkZyb206IEFj ZWUgTGluZGVtIChhY2VlKSBbbWFpbHRvOmFjZWVAY2lzY28uY29tXQ0KPlNlbnQ6IFdlZG5lc2Rh eSwgT2N0b2JlciAxNCwgMjAxNSA1OjMzIFBNDQo+VG86IFNocmFkZGhhIEhlZ2RlIDxzaHJhZGRo YUBqdW5pcGVyLm5ldD47IEJlbmphbWluIEthZHVrIDxrYWR1a0BNSVQuRURVPg0KPkNjOiBpZXNn QGlldGYub3JnOyBzZWNkaXJAaWV0Zi5vcmc7DQo+ZHJhZnQtaWV0Zi1vc3BmLW5vZGUtYWRtaW4t dGFnLmFsbEBpZXRmLm9yZw0KPlN1YmplY3Q6IFJlOiBzZWNkaXIgcmV2aWV3IG9mIGRyYWZ0LWll dGYtb3NwZi1ub2RlLWFkbWluLXRhZy0wNQ0KPg0KPkhpIFNocmFkZGhhLCANCj4NCj5PbiAxMC8x NC8xNSwgMTI6MzUgQU0sICJTaHJhZGRoYSBIZWdkZSIgPHNocmFkZGhhQGp1bmlwZXIubmV0PiB3 cm90ZToNCj4NCj4+QWNlZSwNCj4+DQo+PjwtLS1zbmlwcGVkIHRvIG9wZW4gcG9pbnRzLS0tPg0K Pj4NCj4+DQo+Pi0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tDQo+Pi0tLQ0KPj4tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLQ0KPj4tDQo+ Pg0KPj4+PiA8U2hyYWRkaGE+IENvdWxkIHlvdSBwbHMgZWxhYm9yYXRlIHRoZSBjYXNlLiBJIGRv bid0IHF1aXRlDQo+Pj4+IHVuZGVyc3RhbmQgd2h5IHRoZSBBQlIgaW4gYSBzdHViL05TU0EgYXJl YSB3b3VsZCBnZW5lcmF0ZSBvciByZWNlaXZlDQo+Pj4+IFJJIExTQXMgd2l0aCBkaWZmZXJlbnQg c2NvcGVzLkkgdGhpbmsgaXQncyBwZXJmZWN0bHkgdmFsaWQgdG8gZmxvb2QNCj4+Pj4gdGhlIEFT IHNjb3BlZCBSSSBMU0FzIGludG8gdGhlIHN0dWIgLyBOU1NBIGFyZWEuDQo+Pj4NCj4+PkFjZWUs IEkgdGhpbmsgdGhpcyBpcyBhIHF1ZXN0aW9uIGZvciB5b3UuDQo+Pg0KPj5ZZWFoIC0gSSBtaXNz ZWQgdGhpcyB3aXRob3V0IEUtbWFpbCBxdW90aW5n4oCmDQo+Pg0KPj5TaHJhZGRoYSwNCj4+DQo+ PkFTLXNjb3BlZCBMU0FzIGFyZSBub3QgZmxvb2RlZCBpbnRvIHN0dWIgb3IgTlNTQSBhcmVhcy4g U28sIGlmIGFuIEFCUg0KPj5pcyBnb2luZyB0byBhZHZlcnRpc2UgdGFncyB0byBpdHMgYXR0YWNo ZWQgYXJlYXMgYW5kIHRoZSByZXN0IG9mIHRoZQ0KPj5PU1BGIFJvdXRpbmcgZG9tYWluLCBpdCB3 aWxsIG5lZWQgdG8gb3JpZ2luYXRlIHRoZSBMU0EgYXQgZGlmZmVyZW50DQo+PnNjb3Blcy4NCj4+ DQo+PjxTaHJhZGRoYT4gQWNlZSwgIEkgdGhpbmsgcmVzdHJpY3RpbmcgIEFTIHNjb3BlZCBSSSBM U0EgaW50byBOU1NBIC9zdHViDQo+PmFyZWFzIHdpbGwgaGF2ZSBtYW55IGlzc3Vlcy4NCj4+ICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICBJZiBhIG5vbi1BQlIgcm91dGVyIGZy b20gb3RoZXINCj4+YXJlYSBvcmlnaW5hdGVzIFJJIExTQSB3aXRoIG5vZGUgdGFnIGFuZCB0aGUg c3BlY2lmaWMgYXBwbGljYXRpb24gbmVlZHMNCj4+dGhlDQo+PiAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgVGFnIHRvIGJlIGF2YWlsYWJsZSBpbiB0aGUgZW50aXJlDQo+Pk9Q RiBkb21haW4sIGhvdyB3aWxsIHRoZSBzdHViL05TU0EgYXJlYSByb3V0ZXJzIHJlY2VpdmUgaXQ/ DQo+PiAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgSSB0aGluayB0aGlzIGRp c2N1c3Npb24gaXMNCj4+ZXF1YWxseSByZWxldmFudCB0byA0OTcwYmlzLg0KPj4gICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICBJIGRvbid0IHNlZSBhIHJlYXNvbiB3aHkgQVMN Cj4+c2NvcGVkIFJJIExTQSBzaG91bGQgYmUgcmVzdHJpY3RlZCBpbiBzdHViL05TU0EuDQo+PiAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICBSSSBMU0FzIGRvIG5vdCBjb250 YWluIGFueQ0KPj5yb3V0ZSBpbmZvcm1hdGlvbiBzbyBpdCdzIG5vdCBnb2luZyB0byBiZSBodWdl IGluIG51bWJlci4NCj4NCj5CeSBkZWZpbml0aW9uLCBBUy1zY29wZWQgTFNBcyBhcmUgTk9UIGZs b29kZWQgaW50byBhIHN0dWIgb3IgTlNTQSBhcmVhLg0KPlBsZWFzZSByZWFkIHN0dWIgYW5kIE5T U0EgYXJlYSByZWZlcmVuY2VzIGluIFJGQyAyMzI4LCBSRkMgNTM0MCwgUkZDDQo+NTI1MCwgYW5k IFJGQyAzMTAxLiBZb3XigJlsbCBub3RlIHRoYXQgc3R1YiBhbmQgTlNTQSBhcmVhIGhhdmUgbm8N Cj52aXNpYmlsaXR5IHRvIHRvcG9sb2d5IG9yIFJvdXRlciBJRHMgb2YgT1NQRiByb3V0ZXJzIGlu IG90aGVyIGFyZWFzLg0KPg0KPkhvcGUgdGhpcyBoZWxwcywNCj5BY2VlIA0KPg0KPg0KPg0KPg0K Pj4gICAgICAgICAgICAgICAgIA0KPj4gICAgICAgICAgICAgICAgIA0KPj4NCj4+DQo+Pg0KPj4N Cj4+DQo+Pi0tLS0tT3JpZ2luYWwgTWVzc2FnZS0tLS0tDQo+PkZyb206IEFjZWUgTGluZGVtIChh Y2VlKSBbbWFpbHRvOmFjZWVAY2lzY28uY29tXQ0KPj5TZW50OiBXZWRuZXNkYXksIE9jdG9iZXIg MTQsIDIwMTUgNDoxNyBBTQ0KPj5UbzogQmVuamFtaW4gS2FkdWsgPGthZHVrQE1JVC5FRFU+OyBT aHJhZGRoYSBIZWdkZSA8c2hyYWRkaGFAanVuaXBlci5uZXQ+DQo+PkNjOiBpZXNnQGlldGYub3Jn OyBzZWNkaXJAaWV0Zi5vcmc7DQo+PmRyYWZ0LWlldGYtb3NwZi1ub2RlLWFkbWluLXRhZy5hbGxA aWV0Zi5vcmcNCj4+U3ViamVjdDogUmU6IHNlY2RpciByZXZpZXcgb2YgZHJhZnQtaWV0Zi1vc3Bm LW5vZGUtYWRtaW4tdGFnLTA1DQo+Pg0KPj5TZWUgaW5saW5lLiANCj4+DQo+Pk9uIDEwLzEzLzE1 LCA2OjI3IFBNLCAiQmVuamFtaW4gS2FkdWsiIDxrYWR1a0BNSVQuRURVPiB3cm90ZToNCj4+DQo+ Pj5UaGFua3MsIFNocmFkZGhhIGFuZCBBY2VlLCBmb3IgaGVscGluZyBtZSBmaW5kIHNvbWUgb2Yg dGhlIGNvbnRleHQgSQ0KPj4+d2FzIG1pc3NpbmcuDQo+Pj4NCj4+Pk9uIFN1biwgMTEgT2N0IDIw MTUsIFNocmFkZGhhIEhlZ2RlIHdyb3RlOg0KPj4+DQo+Pj4+DQo+Pj4+IFRoYW5rcyBCZW4gZm9y IGRldGFpbGVkIHJldmlldyBjb21tZW50cy5UaGFua3MgQWNlZSBmb3IgY2hpbWluZy1pbi4NCj4+ Pj4gRmV3IG1vcmUgZXhwbGFuYXRpb25zIGluLWxpbmUuDQo+Pj4+DQo+Pj4+IC0tLS0tT3JpZ2lu YWwgTWVzc2FnZS0tLS0tDQo+Pj4+IEZyb206IEFjZWUgTGluZGVtIChhY2VlKSBbbWFpbHRvOmFj ZWVAY2lzY28uY29tXQ0KPj4+PiBTZW50OiBTdW5kYXksIE9jdG9iZXIgMTEsIDIwMTUgMTowNCBB TQ0KPj4+PiBUbzogQmVuamFtaW4gS2FkdWsgPGthZHVrQE1JVC5FRFU+OyBpZXNnQGlldGYub3Jn OyBzZWNkaXJAaWV0Zi5vcmc7DQo+Pj4+ZHJhZnQtaWV0Zi1vc3BmLW5vZGUtYWRtaW4tdGFnLmFs bEBpZXRmLm9yZw0KPj4+PiBTdWJqZWN0OiBSZTogc2VjZGlyIHJldmlldyBvZiBkcmFmdC1pZXRm LW9zcGYtbm9kZS1hZG1pbi10YWctMDUNCj4+Pj4NCj4+Pj4gSGkgQmVuLA0KPj4+Pg0KPj4+PiBB cyB0aGUgZG9jdW1lbnQgc2hlcGhlcmQgYW5kIGEgbG9uZy10aW1lIE9TUEYgY29udHJpYnV0b3Is IEnigJltIGdvaW5nDQo+Pj4+IHRvIHRyeSBhbmQgc29ydCBvdXQgc29tZSBvZiB5b3VyIGNvbW1l bnRzLiBOb3RlIHRoYXQgcm91dGUgdGFnZ2luZw0KPj4+PiBoYXMgYmVlbiBpbiB1c2UgZm9yIGRl Y2FkZXMgYW5kIHRoaXMgZG9jdW1lbnQgaXMgbWVyZWx5IGV4dGVuZGluZyB0aGUNCj4+Pj4gYWRt aW5pc3RyYXRpdmUgcG9saWNpZXMgYWR2ZXJ0aXNlbWVudCB0byB0aGUgbm9kZSBsZXZlbC4NCj4+ Pg0KPj4+R29vZCB0byBrbm93OyBJIGRpZG4ndCBnZXQgdG8gbG9vayBhdCBtYW55IHVwZGF0ZXMg cGFzdCB0aGUgY29yZSBPU1BGdjINCj4+PnNwZWMuDQo+Pj4NCj4+Pj4gT24gMTAvOS8xNSwgNDo1 MiBQTSwgIkJlbmphbWluIEthZHVrIiA8a2FkdWtATUlULkVEVT4gd3JvdGU6DQo+Pj4+DQo+Pj4+ ID5JIGhhdmUgcmV2aWV3ZWQgdGhpcyBkb2N1bWVudCBhcyBwYXJ0IG9mIHRoZSBzZWN1cml0eSBk aXJlY3RvcmF0ZSdzDQo+Pj4+ID5vbmdvaW5nIGVmZm9ydCB0byByZXZpZXcgYWxsIElFVEYgZG9j dW1lbnRzIGJlaW5nIHByb2Nlc3NlZCBieSB0aGUNCj4+Pj4gPklFU0cuICBUaGVzZSBjb21tZW50 cyB3ZXJlIHdyaXR0ZW4gcHJpbWFyaWx5IGZvciB0aGUgYmVuZWZpdCBvZiB0aGUNCj4+Pj4gPnNl Y3VyaXR5IGFyZWEgZGlyZWN0b3JzLiAgRG9jdW1lbnQgZWRpdG9ycyBhbmQgV0cgY2hhaXJzIHNo b3VsZA0KPj4+PiA+dHJlYXQgdGhlc2UgY29tbWVudHMganVzdCBsaWtlIGFueSBvdGhlciBsYXN0 IGNhbGwgY29tbWVudHMuDQo+Pj4+ID4NCj4+Pj4gPkkgd2lsbCBwcmVmYWNlIHRoZXNlIGNvbW1l bnRzIHdpdGggYSBub3RlIHRoYXQgbXkgcm91dGluZyBiYWNrZ3JvdW5kDQo+Pj4+ID5pcyBxdWl0 ZSB3ZWFrLCBhbmQgSSBuZWVkZWQgdG8gcmVhZCBSRkMgMjMyOCBhbmQgUkZDIDQ5NzAgdG8gaGF2 ZQ0KPj4+PiA+ZW5vdWdoIGNvbnRleHQgdG8gYmUgYWJsZSB0byBzYXkgbXVjaCB1c2VmdWwgYWJv dXQgd2hhdCdzIGdvaW5nIG9uDQo+Pj4+ID5oZXJlOyBJIG1heSBzdGlsbCBiZSBzdWZmZXJpbmcg ZnJvbSBzb21lIG1pc2NvbmNlcHRpb25zLg0KPj4+PiA+DQo+Pj4+ID5PbiB0aGUgd2hvbGUsIHRo aXMgZG9jdW1lbnQgbGVhdmVzIG1lIGZlZWxpbmcgdW5zYXRpc2ZpZWQ7IGl0IHNwZW5kcw0KPj4+ PiA+bWF5YmUgdGhyZWUgcGFnZXMgdGFsa2luZyBhYm91dCB0aGUgYWN0dWFsIG5ldyBwcm90b2Nv bCBleHRlbnNpb24NCj4+Pj4gPmFuZCB0aGVuIGdpdmVzIGZvdXIgcGFnZXMgb2YgZXhhbXBsZSB1 c2FnZSwgYWxsIHRoZSB3aGlsZSBjbGFpbWluZw0KPj4+PiA+dGhhdCB0aGUgYWN0dWFsIHRhZyB2 YWx1ZXMgYXJlIG9ubHkgbWVhbmluZ2Z1bCB3aXRoaW4gYSBzaW5nbGUNCj4+Pj4gPmFkbWluaXN0 cmF0aXZlIGRvbWFpbi9uZXR3b3JrLCBhcmUgZm9yIGdlbmVyaWMgdXNlLCBhbmQgZG8gbm90DQo+ Pj4+ID5yZXF1aXJlIGFuIElBTkEgcmVnaXN0cnkuICBUaGF0IGlzLCBpdCBpcyB0cnlpbmcgdG8g d2FsayBhIG1pZGRsZQ0KPj4+PiA+bGluZSBiZXR3ZWVuICJ0aGlzIGRvY3VtZW50IGFsbG9jYXRl cyBhIHZhbHVlIGluIHRoZSBPU1BGIFRMVnMNCj4+Pj4gPnJlZ2lzdHJ5IGZvciBzaXRlLWxvY2Fs IHVzZSwgdXNlIGl0IGFzIHlvdSB3aWxsIiBhbmQgInRoaXMgZG9jdW1lbnQNCj4+Pj4gPnNwZWNp ZmllcyBhIGNvbXBsZXRlIHByb3RvY29sIGV4dGVuc2lvbiBmb3IgdGFnZ2luZyBPU1BGIG5vZGVz IGZvcg0KPj4+PiA+dHJhZmZpYyBlbmdpbmVlcmluZywgTEZBLCBhbmQgb3RoZXIgcHVycG9zZXMi LiAgVGhhdCBpcyBhIGhhcmQNCj4+Pj4gPm1pZGRsZSBsaW5lIHRvIGZvbGxvdywgYW5kIEkgYW0N Cj4+Pj5ub3Qgc3VyZSB0aGF0IHRoaXMgZG9jdW1lbnQgZG9lcyBzbyBzdWNjZXNzZnVsbHkuDQo+ Pj4+ID5JIHdpbGwgbm90IHRyeSB0byByZW9wZW4gdGhlIHF1ZXN0aW9uIG9mIHdoZXRoZXIgaXQg d291bGQgYmUgYmV0dGVyDQo+Pj4+ID50byB0YWtlIG9uZSBvZiB0aGUgbm9uLW1pZGRsZSBwYXRo cywgYW5kIGNvbnRpbnVlIG9uIHRoZSBhc3N1bXB0aW9uDQo+Pj4+ID50aGF0IHRoaXMgZG9jdW1l bnQgd2lsbCB0YWtlIHRoZSBtaWRkbGUgcGF0aC4gIEkgdGhpbmsgdGhlcmUgYXJlIGENCj4+Pj4g PmZldyB0aGluZ3MgdGhhdCBhcmUgbWlzc2luZyBiZWZvcmUgdGhpcyBkb2N1bWVudCBzaG91bGQg YmUNCj4+Pj4gPnB1Ymxpc2hlZCwgYW5kIHRoYXQgaXQgbWlnaHQgYmUgd29ydGggY29uc2lkZXJp bmcgYSBtb3JlIGRyYXN0aWMNCj4+Pj4gPnJlc3RydWN0dXJpbmcgYXMNCj4+Pj53ZWxsLg0KPj4+ PiA+DQo+Pj4+ID5JdCB3b3VsZCBwcm9iYWJseSBiZSBnb29kIHRvIGluY2x1ZGUgc29tZSB0ZXh0 IHdpdGggdGhlIHJlYXNvbmluZw0KPj4+PiA+YmVoaW5kIHRoZSBjaG9pY2Ugb2YgdGhlICJtaWRk bGUgbGluZSIgLS0gdGhlIGN1cnJlbnQgdGV4dA0KPj4+PiA+YXR0ZW1wdGluZyB0byBlbmZvcmNl IGl0LCAibmV3IE9TUEYgZXh0ZW5zaW9ucyBNVVNUIE5PVCByZXF1aXJlIHVzZQ0KPj4+PiA+b2Yg cGVyLW5vZGUgYWRtaW5pc3RyYXRpdmUgdGFncyBvciBkZWZpbmUgd2VsbC1rbm93biB0YWcgdmFs dWVzIiwNCj4+Pj4gPnNlZW1zIHVuZW5mb3JjYWJsZSwgYXMgYSBmdXR1cmUgUkZDIHVwZGF0aW5n IHRoaXMgb25lIGNvdWxkIGp1c3QNCj4+Pj4gPnJlbW92ZSB0aGF0DQo+Pj4+cmVzdHJpY3Rpb24u DQo+Pj4+DQo+Pj4+IFRoZSBpbnRlbnQgaGVyZSBpcyB0aGF0IHRoaXMgVExWIGlzIHRvIGJlIHNv bGVseSBmb3IgbG9jYWxseSBkZWZpbmVkDQo+Pj4+IHBvbGljaWVzLiBJZiB0aGVyZSB3ZXJlIHRv IGJlIGEgVExWIGZvciB3ZWxsLWtub3duIHRhZ3MgYW5kIHBvbGljaWVzLA0KPj4+PiB0aGlzIGNv dWxkIGJlIGFjY29tcGxpc2hlZCB3aXRoIGEgc2VwYXJhdGUgT1NQRiBSSSBUTFYuIEkgYWdyZWUg dGhhdA0KPj4+PiB0aGUgbm9ybWF0aXZlIHRleHQgc2hvdWxkIGJlIHNvZnRlbmVkIGZyb20g4oCc TVVTVCBOT1TigJ0gdG8g4oCcYXJlIG5vdA0KPj4+PiBleHBlY3RlZCB0b+KAnS4NCj4+Pj4NCj4+ Pj4gPFNocmFkZGhhPiBUaGVyZSB3YXMgYSBsb25nIGRpc2N1c3Npb24gb24gdGhlIG1haWxpbmcg bGlzdCBvbiB3aGV0aGVyDQo+Pj4+IHdlIHNob3VsZCBhbGxvdyB3ZWxsIGRlZmluZWQgdmFsdWVz IGZvciB0aGUgYWRtaW4gdGFncyBtYWpvcml0eQ0KPj4+PiBjb25zZW5zdXMgd2FzIHRoYXQgd2Ug c2hvdWxkIG5vdCBhbGxvdyBhbnkgc3RhbmRhcmQgdmFsdWVzIGZvciBub2RlDQo+Pj4+IGFkbWlu IHRhZ3MgYW5kIGluIGZ1dHVyZSBpZiBzdWNoIGEgcmVxdWlyZW1lbnQgYXJpc2VzIGl0J2xsIGdv IGFzIG5ldw0KPj4+PiBmZWF0dXJlIGluIFJJIFRMViBhcyBBY2VlIGFscmVhZHkgbWVudGlvbmVk LiBJIGFtIHRyeWluZyB0bw0KPj4+PiB1bmRlcnN0YW5kIHdoeSB0aGUgdGV4dCBuZWVkIHRvIGJl IHNvZnRlbmVkIHdoZW4gYW55IGZ1dHVyZQ0KPj4+PiBzdGFuZGFyZGl6YXRpb24gd291bGQgbmVl ZCBhbHRvZ2V0aGVyIGEgbmV3IGRvY3VtZW50IGFuZCB3aWxsIG5vdA0KPj4+PnJlcXVpcmUgYW55 IGNoYW5nZXMgdG8gdGhpcyBkb2N1bWVudC4NCj4+Pg0KPj4+SSBzdWdnZXN0ZWQgdGhhdCB0aGUg dGV4dCBiZSBzb2Z0ZW5lZCBiZWNhdXNlIHRoZSBjdXJyZW50IHN0YXRlbWVudA0KPj4+ZG9lcyBu b3QgaGF2ZSBhbnkgcHJhY3RpY2FsIGVmZmVjdC4gIEl0J3MgdHJ5aW5nIHRvIHBsYWNlIHJlc3Ry aWN0aW9ucw0KPj4+b24gd2hhdCB7dGhlIHNldCBvZiBmdXR1cmUgUkZDcyB0aGF0IHVwZGF0ZSB0 aGlzIGRvY3VtZW50fSBjYW4gZG8sIGJ1dA0KPj4+YW55IGRvY3VtZW50IGluIHRoYXQgc2V0IGNv dWxkIHJlbW92ZSBzdWNoIGEgcmVzdHJpY3Rpb24gYW5kIG92ZXJyaWRlDQo+Pj5pdCBhdCB0aGUg c2FtZSB0aW1lLg0KPj4+DQo+Pj5JIHRoaW5rIGl0IHdvdWxkIGJlIGdvb2QgdG8gaGF2ZSBhIG5v dGUgaW4gc2VjdGlvbiAyIHRvIHRoZSBlZmZlY3QgdGhhdA0KPj4+InRoZXNlIGFkbWluaXN0cmF0 aXZlIHRhZ3MgYXJlIHNvbGVseSBmb3IgdXNlIHdpdGhpbiBhbiBhZG1pbmlzdHJhdGl2ZQ0KPj4+ ZG9tYWluIGFuZCBhcmUgdGhlaXIgaW50ZXJwcmV0YXRpb24gaXMgYSBtYXR0ZXIgb2YgbG9jYWwg cG9saWN5LiAgSXQgaXMNCj4+PmV4cGVjdGVkIHRoYXQgdmFsdWVzIHdpbGwgbm90IGJlIHBvcnRh YmxlIGFjcm9zcyBhZG1pbmlzdHJhdGl2ZQ0KPj4+ZG9tYWlucyIuDQo+Pj5JIGtub3cgdGhhdCB0 aGlzIHRvcGljIGlzIGNvdmVyZWQgbGF0ZXIgaW4gdGhlIGRvY3VtZW50LCBidXQgaGF2aW5nIGl0 DQo+Pj5lYXJseSB3b3VsZCBoZWxwIHNldCB0aGUgc3RhZ2UgZm9yIHRoZSByZXN0IG9mIHRoZSBk b2N1bWVudC4NCj4+Pg0KPj4+PiA+SXQgbG9va3MgbGlrZSB0aGVyZSdzIG5vdyBhbiAtMDYsIGJ1 dCB0aGUgY2hhbmdlcyBmcm9tIHRoZSAtMDUgYXJlDQo+Pj4+ID5ub3Qgc2lnbmlmaWNhbnQuICBU aGUgc2VjdXJpdHkgY29uc2lkZXJhdGlvbnMgaW4gdGhlIC0wNSBjb3JyZWN0bHkNCj4+Pj4gPm5v dGUgd2hhdCBhcmUgZXNzZW50aWFsbHkgcHJpdmFjeSBjb25zaWRlcmF0aW9ucyByZWdhcmRpbmcg dGhlDQo+Pj4+ID5jb250ZW50cyBvZiB0aGUgYWRtaW4gdGFncy4gIEhvd2V2ZXIsIGl0IHNlZW1z IGxpa2UgdGhlcmUgYXJlIGFsc28NCj4+Pj4gPnBvdGVudGlhbCBzZWN1cml0eSBjb25zaWRlcmF0 aW9ucyBvbiB0aGUgYWN0dWFsIG9wZXJhdGlvbiBvZiB0aGUNCj4+Pj4gPm5ldHdvcmsgdGhhdCBh cmUgbm90IGRpc2N1c3NlZCBoZXJlLCBub3IgaW4gUkZDIDIzMjggKE9TUEZ2Mikgb3IgUkZDDQo+ Pj4+ID41MzQwIChPU1BGdjMpLiAgUkZDIDUzNDAncyBzZWN1cml0eSBjb25zaWRlcmF0aW9ucyBl eHBsaWNpdGx5DQo+Pj4+ID5kaXNjbGFpbXMgcHJvdGVjdGlvbnMgYWdhaW5zdCBjb21wcm9taXNl ZCwgbWFsZnVuY3Rpb25pbmcsIG9yDQo+Pj4+ID5taXNjb25maWd1cmVkIHJvdXRlcnMsIGRlZmVy cmluZyB0byBSRkMgNDU5MywgIkdlbmVyaWMgVGhyZWF0cyB0bw0KPj4+PiA+Um91dGluZyBQcm90 b2NvbHMiLiAgSSBiZWxpZXZlIHRoYXQgdGhlIHNlY3VyaXR5IGNvbnNpZGVyYXRpb25zIG9mDQo+ Pj4+ID50aGlzIGRvY3VtZW50IHNob3VsZCBhZGRyZXNzLCBlaXRoZXIgZGlyZWN0bHkgb3IgaW5k aXJlY3RseSwNCj4+Pj4gPnByb3RlY3Rpb25zIGFnYWluc3QgY29tcHJvbWlzZWQsIG1hbGZ1bmN0 aW9uaW5nLCBvciBtaXNjb25maWd1cmVkDQo+Pj4+ID5yb3V0ZXJzLCBhbmQgYWRkaXRpb25hbGx5 IHByb3RlY3Rpb24gYWdhaW5zdCBtYWxpY2lvdXMgYWN0b3JzIHdpdGgNCj4+Pj4gPmFjY2VzcyB0 byB0aGUgbGF5ZXItMyBuZXR3b3JrIChhbmQgbWF5YmUgbG93ZXIgbGF5ZXJzIGFzIHdlbGwpLg0K Pj4+PiA+DQo+Pj4+ID5UaGF0IHByb2JhYmx5IG1lYW5zIG1lbnRpb25pbmcgUkZDIDQ1OTMgZGly ZWN0bHksIG9yIG1heWJlIGp1c3QNCj4+Pj4gPnBvaW50aW5nIG91dCB0aGF0IFJGQyA1MzQwIGRv ZXMgc28uICBUaGVyZSBhcmUgc3RpbGwgYWRkaXRpb25hbA0KPj4+PiA+Y29uc2lkZXJhdGlvbnMg aW50cm9kdWNlZCBieSB0aGlzIGRvY3VtZW50LCB0aG91Z2g7IHVuZm9ydHVuYXRlbHksDQo+Pj4+ ID5iZWNhdXNlIHRoZSBidWxrIG9mIHRoZSBpbnRlcnByZXRhdGlvbiBvZiB0aGUgYWRtaW4gdGFn cyBpcyBsZWZ0IHRvDQo+Pj4+ID50aGUgc2l0ZSBhZG1pbmlzdHJhdG9yLCBpdCBpcyBoYXJkIHRv IGdpdmUgYSBjb21wcmVoZW5zaXZlIHNlY3VyaXR5DQo+Pj4+ID5hbmFseXNpcywgYnV0IHRoZSBl eGFtcGxlcyBhbmQgdGhlIHByb3RvY29sIGRlc2NyaXB0aW9uIGl0c2VsZiBkbw0KPj4+PiA+Z2l2 ZQ0KPj4+PnNvbWUgYXJlYXMgZm9yIGNvbnNpZGVyYXRpb24uDQo+Pj4+DQo+Pj4+IFRoZSBkb2N1 bWVudCBjb3VsZCByZWZlcmVuY2UgUkZDIDQ1OTMvUkZDIDY4NjMgYW5kIHN0YXRlIHRoYXQNCj4+ Pj4gYXV0aGVudGljYXRpb24gYXMgc3BlY2lmaWVkIGluIFJGQyA3NDc0IG9yIFJGQyA3MTY2IFNI T1VMRCBiZSB1c2VkIGluDQo+Pj4+IGRlcGxveW1lbnRzIHdoZXJlIGF0dGFja2VycyBoYXZlIGFj Y2VzcyB0byB0aGUgcGh5c2ljYWwgbmV0d29ya3MNCj4+Pj4gaW5jbHVkZWQgaW4gdGhlIE9TUEYg ZG9tYWluIGFyZSB2dWxuZXJhYmxlLg0KPj4+PiA8U2hyYWRkaGE+IG9rLiBVcGRhdGluZyB0aGUg U2VjdXJpdHkgY29uc2lkZXJhdGlvbiBzZWN0aW9uDQo+Pj4NCj4+PlRoYW5rcy4NCj4+Pg0KPj4+ Pg0KPj4+PiA+DQo+Pj4+ID5UaGUgUkkgTFNBcyBjYXJyeWluZyBhZG1pbmlzdHJhdGl2ZSB0YWdz IGNhbiBiZSBhdCBsaW5rLSwgYXJlYS0sIG9yDQo+Pj4+ID5BUy1sZXZlbCBzY29wZTsgYW4gYWRt aW5pc3RyYXRvciBhc3NpZ25pbmcgdGFnIHZhbHVlcyBhbmQgYXNzb2NpYXRlZA0KPj4+PiA+cG9s aWNpZXMgc2hvdWxkIGNvbnNpZGVyIHdoYXQgd291bGQgaGFwcGVuIGlmIGEgZ2l2ZW4gdGFnIHdh cw0KPj4+PiA+YWR2ZXJ0aXNlZCBhdCBhIGRpZmZlcmVudCBzY29wZSB0aGFuIGludGVuZGVkLiAg Q29tcGxpYW50DQo+Pj4+ID5pbXBsZW1lbnRhdGlvbnMgTVVTVCBOT1QgZ2VuZXJhdGUgdGhlIHNh bWUgdGFnIGF0IGRpZmZlcmVudCBzY29wZXMsDQo+Pj4+ID5idXQgYSByZWNlaXZlciB3b3VsZCBu ZWVkIHRvIHRha2Ugc29tZSBhY3Rpb24gaWYgaXQgaGFwcGVuZWQsDQo+Pj4+ID53aGV0aGVyIGR1 ZSB0byBuZXR3b3JrIGdsaXRjaCBvciBtYWxpY2lvdXMgYWN0aW9uIC0tIHdoYXQgc2hvdWxkIHRo ZXkNCj4+Pj5kbz8NCj4+Pj4NCj4+Pj4gSeKAmW0gbm90IGFuIGF1dGhvciwgYnV0IHRoaXMgaXMg d2hhdCBJ4oCZZCByZWNvbW1lbmQ6DQo+Pj4+DQo+Pj4+ICAgIFRoZSBjb25mbGljdGluZyB0YWcg U0hPVUxEIG5vdCBiZSB1c2VkIGFuZCB0aGlzIHNpdHVhdGlvbiBTSE9VTEQNCj4+Pj4gYmUgbG9n Z2VkIGFzIGFuIGVycm9yIGluY2x1ZGluZyB0aGUgdGFnIHdpdGggY29uZmxpY3Rpbmcgc2NvcGVz IGFuZA0KPj4+PiB0aGUgb3JpZ2luYXRvcihzKS4NCj4+Pj4gPFNocmFkZGhhPiBVcGRhdGVkIHRo ZSBkb2N1bWVudCB3aXRoIGFib3ZlIHN0YXRlbWVudC4NCj4+Pj4NCj4+Pj4gVGhlcmUgaXMgYSBj YXNlIHRoYXQgbXVzdCBiZSBhbGxvd2VkIC0gdGhlIHNhbWUgdGFnIGNvdWxkIGJlIHJlY2VpdmVk DQo+Pj4+IGJ5IGFuIEFCUiBhdCBib3RoIHRoZSBBUyBzY29wZSBhbmQgdGhlIGFyZWEgc2NvcGUg aW4gYSBzdHViIG9yIE5TU0ENCj4+Pj5hcmVhLg0KPj4+PiA8U2hyYWRkaGE+IENvdWxkIHlvdSBw bHMgZWxhYm9yYXRlIHRoZSBjYXNlLiBJIGRvbid0IHF1aXRlIHVuZGVyc3RhbmQNCj4+Pj4gd2h5 IHRoZSBBQlIgaW4gYSBzdHViL05TU0EgYXJlYSB3b3VsZCBnZW5lcmF0ZSBvciByZWNlaXZlIFJJ IExTQXMNCj4+Pj4gd2l0aCBkaWZmZXJlbnQgc2NvcGVzLkkgdGhpbmsgaXQncyBwZXJmZWN0bHkg dmFsaWQgdG8gZmxvb2QgdGhlIEFTDQo+Pj4+IHNjb3BlZCBSSSBMU0FzIGludG8gdGhlIHN0dWIg LyBOU1NBIGFyZWEuDQo+Pj4NCj4+PkFjZWUsIEkgdGhpbmsgdGhpcyBpcyBhIHF1ZXN0aW9uIGZv ciB5b3UuDQo+Pg0KPj5ZZWFoIC0gSSBtaXNzZWQgdGhpcyB3aXRob3V0IEUtbWFpbCBxdW90aW5n 4oCmDQo+Pg0KPj5TaHJhZGRoYSwgDQo+Pg0KPj5BUy1zY29wZWQgTFNBcyBhcmUgbm90IGZsb29k ZWQgaW50byBzdHViIG9yIE5TU0EgYXJlYXMuIFNvLCBpZiBhbiBBQlIgaXMNCj4+Z29pbmcgdG8g YWR2ZXJ0aXNlIHRhZ3MgdG8gaXRzIGF0dGFjaGVkIGFyZWFzIGFuZCB0aGUgcmVzdCBvZiB0aGUg T1NQRg0KPj5Sb3V0aW5nIGRvbWFpbiwgaXQgd2lsbCBuZWVkIHRvIG9yaWdpbmF0ZSB0aGUgTFNB IGF0IGRpZmZlcmVudCBzY29wZXMuDQo+Pg0KPj4NCj4+DQo+Pj4NCj4+Pj4gPkFub3RoZXIgcG90 ZW50aWFsIGlzc3VlIGxpZXMgaW4gdGhlICJzdGlja2luZXNzIiBvZiB0aGUgYWRtaW4gdGFncw0K Pj4+PiA+LS0gdGhlIHRleHQgInRoZSBub2RlIGFkbWluaXN0cmF0aXZlIHRhZ3MgYXNzb2NpYXRl ZCB3aXRoIGEgbm9kZSBmb3INCj4+Pj4gPnRoZSBwdXJwb3NlIG9mIGFueSBjb21wdXRhdGlvbiBv ciBwcm9jZXNzaW5nIFNIT1VMRCBiZSBhIHN1cGVyc2V0IG9mDQo+Pj4+ID5ub2RlIGFkbWluaXN0 cmF0aXZlIHRhZ3MgZnJvbSBhbGwgdGhlIFRMVnMgaW4gYWxsIGluc3RhbmNlcyBvZiB0aGUNCj4+ Pj4gPlJJIExTQSBvcmlnaW5hdGVkIGJ5IHRoYXQgbm9kZSIgc2VlbXMgdG8gbWVhbiB0aGF0IG9u Y2UgYSB0YWcgaXMNCj4+Pj4gPnNldCwgaXQgY2Fubm90DQo+Pj4+ID4oZWFzaWx5KSBiZSB1bnNl dC4gIFdvdWxkIGZvcmNlLWV4cGlyaW5nIGFuIExTQSBiZSBlbm91Z2ggdG8gcmVzZXQNCj4+Pj4g PnRoZSB0YWcsIG9yIHNvbWV0aGluZyBlbHNlPw0KPj4+Pg0KPj4+PiBZZXMgLSB0aGlzIGlzIHN0 YW5kYXJkIGZvciBhbnkgT1NQRiBMU0EuIEhvd2V2ZXIsIHNpbmNlIHRoZSBPU1BGIFJJDQo+Pj4+ IExTQSBtYXkgaW5jbHVkZSBvdGhlciBUTFZzIG9yIGV2ZW4gb3RoZXIgdGFncywgYSB0YWcgY291 bGQgYWxzbyBiZQ0KPj4+PiB3aXRoZHJhd24gYnkgcmVvcmlnaW5hdGluZyB0aGUgUkkgTFNBIHdp dGhvdXQgdGhlIFRMViBvciB3aXRoIGEgVExWDQo+Pj4+IHRoYXQgZG9lc27igJl0IGluY2x1ZGUg dGhlIHdpdGhkcmF3biB0YWcuDQo+Pj4NCj4+PkkgbWF5IHN0aWxsIGJlIGNvbmZ1c2VkLCBidXQg SSBkaWQgbm90IGludGVycHJldCB0aGUgdGV4dCBpbiB0aGF0IHdheS4NCj4+PlRoYXQgaXMsIHRo ZSB0ZXh0IGFib3V0ICJhbGwgaW5zdGFuY2VzIG9mIHRoZSBSSSBMU0Egb3JpZ2luYXRlZCBieSB0 aGF0DQo+Pj5ub2RlIi4gIChXaGljaCBJIGNoYW5nZWQgdG8gImluc3RhbmNlcyBvZiBSSSBMU0Fz IiBpbiBteSBncmFtbWFyIGVkaXRzLA0KPj4+cG9zc2libHkgaW5jb3JyZWN0bHkgaWYgSSdtIHN0 aWxsIGNvbmZ1c2VkLikgIEkgd2FzIGludGVycHJldGluZyB0aGUNCj4+PndvcmQgImluc3RhbmNl cyIgdG8gaW5jbHVkZSBoaXN0b3JpY2FsIG9uZXMgb3ZlciB0aW1lLCBzbyB0aGF0IGV2ZW4gaWYN Cj4+PmFuIFJJIExTQSBjYXJyeWluZyBhIHBhcnRpY3VsYXIgYWRtaW4gdGFnIHdhcyByZXBsYWNl ZCBieSBhIGRpZmZlcmVudA0KPj4+UkkgTFNBIGZvciB0aGUgc2FtZSBhZHZlcnRpc2luZyByb3V0 ZXIsIHRoZSBvbGQgb25lIHdvdWxkIHN0aWxsIGJlIGFuDQo+Pj5pbnN0YW5jZSBvZiB0aGF0IFJJ IExTQS4gIEdvaW5nIGJhY2sgdG8gUkZDIDIzMjgsIEknbSBub3Qgc3VyZSB3aGF0DQo+Pj5leGFj dGx5IEkgaGFkIGluIG1pbmQgaW4gdGVybXMgb2YgYWdlcyBhbmQgc2NvcGVzIGFuZCBzZXF1ZW5j ZSBudW1iZXJzDQo+Pj50aGF0IHdvdWxkIGNhdXNlIHRoaXMgc2l0dWF0aW9uLCBidXQgSSBzb21l aG93IGhhZCBpdCBpbiBteSBtaW5kIHRoYXQNCj4+PnRoZXJlIGNvdWxkIGJlIG11bHRpcGxlIFJJ IExTQXMgYWN0aXZlIGF0IHRoZSBzYW1lIHRpbWUgdGhhdCBhcHBseSB0byBhDQo+Pj5naXZlbiBu b2RlLCBzdWNoIGFzIGlmIHRoZSBhZG1pbiBqdXN0IGFkZGVkIGEgbmV3IFJJIExTQSBjb250YWlu aW5nDQo+Pj5vbmx5IHRoZSBhZG1pbiB0YWcgdG8gYXVnbWVudCB0aGUgZXhpc3RpbmcgUkkgTFNB cyBiZWluZyBzZW50LiAgSXMgdGhhdA0KPj4+cG9zc2libGU/DQo+Pg0KPj5JbiBPU1BGLCBhIG1v cmUtcmVjZW50IHZlcnNpb24gb3IgaW5zdGFuY2Ugb2YgYW4gTFNBIHdpbGwgYWx3YXlzDQo+PnN1 cGVyc2VkZSBhbGwgcHJldmlvdXMgaW5zdGFuY2VzIG9mIHRoZSBzYW1lIExTQS4NCj4+DQo+Pj4N Cj4+PklmIHRoZXJlIGNhbiBvbmx5IGJlIG9uZSBSSSBMU0EgdGhhdCBpcyAiY3VycmVudCIgZm9y IGEgZ2l2ZW4gbm9kZSAoYXQNCj4+PmEgZ2l2ZW4gc2NvcGU/KSwgdGhlbiBpdCBzZWVtcyBsaWtl IGl0IHdvdWxkIGJlIHVzZWZ1bCB0byBjaGFuZ2UgdGhlDQo+Pj50ZXh0IHRvIGV4cGxpY2l0bHkg c2F5ICJhbGwgY3VycmVudCBpbnN0YW5jZXMiIC0tIHRoYXQgd291bGQgaGF2ZQ0KPj4+aGVscGVk IG1lIGFzIEkgcmVhZCBpdC4NCj4+DQo+Pkkgc2VlIHRoZSBjb25mdXNpb24gaXMgYmV0d2VlbiBp bnN0YW5jZXMgb2YgdGhlIHNhbWUgTFNBIGluIHRoZSBnZW5lcmFsDQo+PnNlbnNlIGFuZCBtdWx0 aXBsZSBpbnN0YW5jZXMgb2YgdGhlIE9TUEYgUkkgTFNBLiBSZWZlciB0byBSRkMgMjMyOA0KPj5z ZWN0aW9uIDEzLjEuICANCj4+DQo+Pg0KPj4+DQo+Pj4+ID4gSG93IGRpc3J1cHRpdmUgd291bGQg dGhhdCBiZT8gIEl0IHdvdWxkIGJlIGhlbHBmdWwgdG8gc2VlIHNvbWUNCj4+Pj4gPmRpc2N1c3Np b24gb2YgaG93IGEgdGFnIHdvdWxkIGJlIHJlbW92ZWQuDQo+Pj4+DQo+Pj4+IEkgbWF5IG9mIHdv cmtlZCBvbiBPU1BGIGZvciB0b28gbG9uZyBidXQgdGhpcyBzaG91bGQgYmUgb2J2aW91cyB0bw0K Pj4+PiBhbnlvbmUgaW1wbGVtZW50aW5nIHRoZSBkcmFmdCBmcm9tIHRoZSBzcGVjaWZpY2F0aW9u Lg0KPj4+DQo+Pj5JZiBpdCdzIHNpbXBseSBhIG1hdHRlciBvZiByZS1pc3N1aW5nIHRoZSBSSSBM U0EgKEkgd2FzIG5vdCBzdXJlIHdoZW4gSQ0KPj4+d2FzIHdyaXRpbmcgbXkgcmV2aWV3KSwgdGhl biBJIGFncmVlIGl0IHNob3VsZCBiZSBvYnZpb3VzLg0KPj4+DQo+Pj4+IDxTaHJhZGRoYT4gVGhl IGJlbG93IHBhcmFncmFwaCAoZnJvbSAtMDcgdmVyc2lvbikgaXMgY2xlYXIgb24gdGhpcyBJDQo+ Pj4+aG9wZS4NCj4+Pj4NCj4+Pj4gIldoZW4gdGhlcmUgaXMgYSBjaGFuZ2Ugb3IgcmVtb3ZhbCBv ZiBhbiBhZG1pbmlzdHJhdGl2ZSBhZmZpbGlhdGlvbg0KPj4+Pm9mIGEgbm9kZSwNCj4+Pj4gICAg dGhlIG5vZGUgTVVTVCByZS1vcmlnaW5hdGUgdGhlIFJJIExTQSB3aXRoIHRoZSBsYXRlc3Qgc2V0 IG9mIG5vZGUNCj4+Pj5hZG1pbmlzdHJhdGl2ZSB0YWdzLg0KPj4+PiAgICBPbiB0aGUgcmVjZWl2 ZXIsIFdoZW4gdGhlcmUgaXMgYSBjaGFuZ2UgaW4gdGhlIG5vZGUgYWRtaW5pc3RyYXRpdmUNCj4+ Pj50YWcgVExWIG9yIHJlbW92YWwvDQo+Pj4+ICAgIGFkZGl0aW9uIG9mIGEgVExWIGluIGFueSBp bnN0YW5jZSBvZiB0aGUgUkktTFNBLCBpbXBsZW1lbnRhdGlvbnMNCj4+Pj5NVVNUDQo+Pj4+ICAg IHRha2UgYXBwcm9wcmlhdGUgbWVhc3VyZXMgdG8gdXBkYXRlIGl0cyBzdGF0ZSBhY2NvcmRpbmcg dG8gdGhlDQo+Pj4+ICAgIGNoYW5nZWQgc2V0IG9mIHRhZ3MuICBFeGFjdCBhY3Rpb25zIGRlcGVu ZCBvbiBmZWF0dXJlcyB3b3JraW5nIHdpdGgNCj4+Pj4gICAgYWRtaW5pc3RyYXRpdmUgdGFncyBh bmQgaXMgb3V0c2lkZSBvZiBzY29wZSBvZiB0aGlzIHNwZWNpZmljYXRpb24uIg0KPj4+DQo+Pj5U aGlzIGlzIGRlZmluaXRlbHkgaW1wcm92ZWQsIGJ1dCBpdCBkb2VzIG5vdCBkbyBtdWNoIHRvIGFk ZHJlc3MgdGhlDQo+Pj5pc3N1ZSBJIGhhZCBpbiBtaW5kIHdoZW4gSSB3YXMgd3JpdGluZyBteSBy ZXZpZXcuICBIb3dldmVyLCBpdCBzZWVtcw0KPj4+bGlrZSB0aGF0IGlzc3VlIGlzIG5vdCBhY3R1 YWxseSBhbiBpc3N1ZSwgc28gbm8gZnVydGhlciBjaGFuZ2VzIHRvIHRoaXMNCj4+PnRleHQgd291 bGQgYmUgbmVlZGVkLg0KPj4+DQo+Pj4NCj4+Pj4gPg0KPj4+PiA+VGhhdCBpcyBwYXJ0aWN1bGFy bHkgZWFzeSBmb3IgYW4gYXR0YWNrZXIgd2hlbiB0aGUgbnVsbCBPU1BGDQo+Pj4+ID5hdXRoZW50 aWNhdGlvbiBtZWNoYW5pc20gaXMgaW4gdXNlIChob3cgY29tbW9uIGlzIHRoYXQ/ICBJIHNhdyBz b21lDQo+Pj4+ID53ZWJzaXRlcyBpbmRpY2F0aW5nIGl0IHdhcyB0aGUgZGVmYXVsdCBiZWhhdmlv ciwgYXQgbGVhc3Qgc29tZXRpbWVzKS4NCj4+Pj4gPkkgZG8gbm90IHNlZSBhIG5lZWQgdG8gdHVy biB0aGlzIGRvY3VtZW50IGludG8gInNlY3VyaXR5DQo+Pj4+ID5jb25zaWRlcmF0aW9ucyBmb3Ig T1NQRiBhdXRoZW50aWNhdGlvbiIsIGJ1dCBtYXliZSBpdCBpcyB3b3J0aA0KPj4+Pm1lbnRpb25p bmcgc29tZSB0aGluZ3M6DQo+Pj4+ID50aGUNCj4+Pj4gPm1kNSBzY2hlbWUgc2VlbXMgcHJldHR5 IHdlZWsgYXQgdGhpcyBwb2ludCAodGhvdWdoIHByb2JhYmx5IG5vdA0KPj4+PiA+dHJpdmlhbGx5 IGJyb2tlbiksIHRoZSBobWFjLXNoYSBzY2hlbWUgb2YgUkZDIDU3MDkgaXMgb25seSBmcm9tDQo+ Pj4+ID4yMDA5LCBhbmQgUkZDIDc0NzQgKG9ubHkgc2l4IG1vbnRocyBvbGQpIHBvaW50cyBvdXQg Y2FzZXMgd2hlcmUgYm90aA0KPj4+PiA+YXJlIHN1c2NlcHRpYmxlIHRvIHJlcGxheSBhdHRhY2tz LiAgSnVzdCBsb29raW5nIGF0IHRoZSBzZWN1cml0eQ0KPj4+PiA+Y29uc2lkZXJhdGlvbnMgb2Yg dGhpcyBkb2N1bWVudCBhbmQgdGhlIGNvcmUgT1NQRiB2Mi92MyBzcGVjcyBkb2VzDQo+Pj4+ID5u b3QgY29udmV5IHRoaXMgdG8gdGhlIHJlYWRlciwgc28gSSB3b3VsZCBsaWtlIHRvIHNlZSBhdCBs ZWFzdCBhDQo+Pj4+ID5wb2ludGVyIHRvIHN1Y2ggY29uc2lkZXJhdGlvbnMuICAoVGhlIHN0YW5j ZSBvZiBSRkMgMjMyOCB0aGF0ICJhbGwNCj4+Pj4gPk9TUEYgcHJvdG9jb2wNCj4+Pj5leGNoYW5n ZXMgYXJlIGF1dGhlbnRpY2F0ZWQiDQo+Pj4+ID5zZWVtcyBwYXJ0aWN1bGFybHkgZGlzaW5nZW5v dXMgZ2l2ZW4gdGhlIHByZXNlbmNlIG9mIHRoZSBudWxsDQo+Pj4+ID5hdXRoZW50aWNhdGlvbiBz Y2hlbWUuKQ0KPj4+Pg0KPj4+PiBJIHRoaW5rIGJvdGggUkZDIDc0NzQgYW5kIFJGQyA3MTc2IHNo b3VsZCBiZSByZWZlcmVuY2VkLiBUaGUgT1NQRg0KPj4+PiB2dWxuZXJhYmlsaXR5IHRvIHJlcGxh eSBhdHRhY2tzIHRvIE9TUEZ2Mi9PU1BGdjMgcm91dGVycyBpbXBsZW1lbnRpbmcNCj4+Pj4gdGhl c2Ugc3BlY2lmaWNhdGlvbnMgaXMgZXh0cmVtZWx5IHNtYWxsIGFuZCBoYXMgYmVlbiByZWR1Y2Vk IGFzIG11Y2gNCj4+Pj4gYXMgcHJhY3RpY2FsLiBJZiB5b3UgYXJlIHN0aWxsIGNvbmNlcm5lZCwg SSBzdWdnZXN0IHlvdSBkaXNjdXNzIHdpdGgNCj4+Pj4gU2FtIEhhcnRtYW4gKGFsc28gb25jZSBh ZmZpbGlhdGVkIHdpdGggTUlUKS4NCj4+Pg0KPj4+SSBhbSBub3QgZXNwZWNpYWxseSBjb25jZXJu ZWQgYWJvdXQgdGhpcyBhdHRhY2ssIEkganVzdCBub3RpY2VkIHRoYXQNCj4+PnRoZXJlIHdhcyBh biBSRkMgYWJvdXQgaXQuICBTaW5jZSBSRkMgNzQ3NCB3YXMgc28gcmVjZW50LCBpdCBtYWRlIG1l DQo+Pj53b25kZXIgaG93IHdpZGVseSBkZXBsb3llZCB0aGUgc2VjdXJpdHkgZml4ZXMgYXJlIHRv ZGF5Lg0KPj4NCj4+Q29ycmVjdCAtIGl0IGlzIG5vdCB3aWRlbHkgaW1wbGVtZW50ZWQgb3IgZGVw bG95ZWQuDQo+Pg0KPj5UaGFua3MsDQo+PkFjZWUNCj4+DQo+Pj4NCj4+Pj4gPFNocmFkZGhhPiBT ZWN1cml0eSBjb25zaWRlcmF0aW9uIHNlY3Rpb24gdXBkYXRlZCB3aXRoIHRoZSByZWZlcmVuY2UN Cj4+Pj4gdG8gUkZDIDc0NzQgYW5kIDcxNzYuDQo+Pj4NCj4+PlRoYW5rcy4NCj4+Pg0KPj4+PiA+ DQo+Pj4+ID5UaGVyZSBpcyBhbHNvIHRoZSBwb3NzaWJpbGl0eSB0aGF0IGFuIGF0dGFja2VyIGNv dWxkIGJsb2NrIGRlbGl2ZXJ5DQo+Pj4+ID5vZiBhbiBMU0EsIGNhdXNpbmcgYSB0YWcgdGhhdCBz aG91bGQgYmUgc2V0IHRvIG5vdCBiZSBzZWVuLiAgVGhpcw0KPj4+PiA+c2VlbXMgdW5saWtlbHkg Zm9yIHdpcmVkIHBvaW50LXRvLXBvaW50IGxpbmtzLCBidXQgaXMgbW9yZSBwbGF1c2libGUNCj4+ Pj4gPmluIG90aGVyIGVudmlyb25tZW50cywgc3VjaCBhcyByYWRpbyBsaW5rcy4gIEkgdGhpbmsg SSBjYW4gaW1hZ2luZQ0KPj4+PiA+c2NlbmFyaW9zIHdoZXJlIHRoaXMgd291bGQgY2F1c2UgZHJh c3RpYyBkYW1hZ2UgdG8gdGhlIHJvdXRpbmcNCj4+Pj50b3BvbG9neS4NCj4+Pj4NCj4+Pj4gVGhl IGRlc2NyaXB0aW9uIGFuZCBtaXRpZ2F0aW9uIG9mIHN1Y2ggYSBnZW5lcmljIHRocmVhdCBkb2Vz buKAmXQNCj4+Pj5iZWxvbmcgaW4gYSBtaW5vciAodGhvdWdoIGltcG9ydGFudCkgT1NQRiBzcGVj aWZpY2F0aW9uLiBUaGUgZWZmZWN0IG9mDQo+Pj4+YmxvY2tpbmcgY29udHJvbCB0cmFmZmljIGlz IG5ldmVyIHBvc2l0aXZlIDteKS4gQXQgbGVhc3QgT1NQRiB1c2VzDQo+Pj4+cmVsaWFibGUgZmxv b2Rpbmcgc28gaXQgd2lsbCBiZSByZXRyYW5zbWl0dGVkLg0KPj4+PiA8U2hyYWRkaGE+IEFncmVl IHdpdGggQWNlZSBvbiB0aGlzLg0KPj4+DQo+Pj5JIGhhZCBmb3Jnb3R0ZW4gdGhhdCBPU1BGIGZs b29kaW5nIHdhcyByZWxpYWJsZTsgSSBhZ3JlZSB0aGlzIGRvZXMgbm90DQo+Pj5uZWVkIHRvIGJl IGV4cGxpY2l0bHkgY2FsbGVkIG91dCBpbiB0aGlzIGRvY3VtZW50LCBzaW5jZSBpdCdzIGEgZ2Vu ZXJhbA0KPj4+cm91dGluZyBjb25jZXJuLg0KPj4+DQo+Pj4+ID5UaGUgcGFyZW50aGV0aWNhbCBp biBzZWN0aW9uIDMuMiB3aGVyZWluIHJvdXRlcnMgbWlnaHQgYWR2ZXJ0aXNlIGENCj4+Pj4gPnBl ci1ub2RlIGFtaW5pc3RyYXRpdmUgdGFnICJ3aXRob3V0IGtub3dpbmcgKG9yIGV2ZW4gZXhwbGlj aXRseQ0KPj4+PiA+c3VwcG9ydGluZykgZnVuY3Rpb25hbGl0eSBpbXBsaWVkIGJ5IHRoZSB0YWci IHNlZW1zIHBvdGVudGlhbGx5DQo+Pj4+ID5kYW5nZXJvdXMsIHNpbmNlIGl0IHNvdW5kcyBsaWtl IHRoZSByb3V0ZXJzIGluIHF1ZXN0aW9uIGFyZSBseWluZw0KPj4+PiA+YWJvdXQgdGhlaXIgY2Fw YWJpbGl0aWVzLiAgV291bGQgdGhlIGRvY3VtZW50IHN1ZmZlciBoYXJtIGlmIHRoZQ0KPj4+PiA+ cGFyZW50aGV0aWNhbCB3YXMgcmVtb3ZlZD8NCj4+Pj4NCj4+Pj4gSW4gbXkgb3Bpbmlvbiwgbm8g aGFybSB0byByZW1vdmUgLSBtaXNjb25maWd1cmF0aW9uIGlzIGFsbW9zdCBhbHdheXMNCj4+Pj5h biBpc3N1ZS4NCj4+Pj4gPFNocmFkZGhhPiBJdCdzIHBlcmZlY3RseSB2YWxpZCBmb3IgYSBub2Rl IG9yaWdpbmF0ZSBhIHRhZyB3aGVuIHRoZQ0KPj4+Pm5vZGUgIGl0c2VsZiBkb2VzIG5vdCBQcm9j ZXNzIGFueSB0YWdzLiBJIHRoaW5rIHRoZSBzZW50ZW5jZSBuZWVkcyB0bw0KPj4+PmJlICByZXBo cmFzZWQuIENoYW5naW5nIGl0IGFzIGJlbG93Lg0KPj4+Pg0KPj4+PiA8dD5NZWFuaW5nIG9mIHRo ZSBOb2RlIGFkbWluaXN0cmF0aXZlIHRhZ3MgaXMgZ2VuZXJhbGx5IG9wYXF1ZSB0bw0KPj4+PiBP U1BGLiBSb3V0ZXIgYWR2ZXJ0aXNpbmcgdGhlIHBlci1ub2RlIGFkbWluaXN0cmF0aXZlIHRhZyAo b3IgdGFncykNCj4+Pj4gbWF5IGJlIGNvbmZpZ3VyZWQgdG8gZG8gc28gd2l0aG91dCBrbm93aW5n IChvciBldmVuIHdpdGhvdXQNCj4+Pj4gc3VwcG9ydGluZyBwcm9jZXNzaW5nIG9mKSBmdW5jdGlv bmFsaXR5IGltcGxpZWQgYnkgdGhlIHRhZy48L3Q+DQo+Pj4NCj4+PkkgdGhpbmsgdGhlcmUgaXMg YSBxdWVzdGlvbiBhYm91dCB3aGV0aGVyIHRoaXMgbWVhbnMgdGhhdCB0aGUgcm91dGVyDQo+Pj5k b2Vzbid0IG5lZWQgdG8ga25vdyB3aGF0IGZlYXR1cmUgdGhlIHRhZyBudW1iZXIgbWVhbnMsIG9y IHdoZXRoZXIgaXQNCj4+Pm1lYW5zIHRoYXQgdGhlIHJvdXRlciBkb2Vzbid0IG5lZWQgdG8gaW1w bGVtZW50IHRoZSBmZWF0dXJlIGluZGljYXRlZA0KPj4+YnkgdGhhdCB0YWcgdmFsdWUuICBJIHJl YWQgdGhpcyB0ZXh0IGFzIGJlaW5nIGluIHRoZSBzZWNvbmQgY2FzZSwgYnV0IEkNCj4+PmFtIGlu dGVycHJldGluZyB5b3VyIGRpc2N1c3Npb24gYWJvdXQgdGhpcyB0ZXh0IHRvIG1lYW4gdGhhdCB5 b3UgdGhpbmsNCj4+Pml0IGlzIGNvdmVyaW5nIHRoZSBmaXJzdCBjYXNlLiAgKFllcywgdGhlcmUg Y2FuIGJlIHRhZyB2YWx1ZXMgdGhhdCBqdXN0DQo+Pj5pbmRpY2F0ZSBhbiBhZG1pbmlzdHJhdGl2 ZSBncm91cGluZyBhbmQgdGhlcmUgaXMgbm8gY29ycmVzcG9uZGluZw0KPj4+ZnVuY3Rpb25hbGl0 eSBuZWVkZWQgb24gdGhlIHJvdXRlciwgYnV0IHRoZXJlIGNhbiBhbHNvIGJlIHRhZyB2YWx1ZXMN Cj4+PnRoYXQgaW5kaWNhdGUgInRoZSByb3V0ZXIgb3JpZ2luYXRpbmcgdGhpcyBSSSBMU0Egc3Vw cG9ydHMgYWNjZXB0aW5nDQo+Pj50YXJnZXRlZCBMRFAgc2Vzc2lvbnMiDQo+Pj4tLSBhIHJvdXRl ciB3aWxsIGNhdXNlIGJyZWFrYWdlIGlmIGl0IHNlbmRzIHN1Y2ggYSB0YWcgYnV0IGRvZXMgbm90 DQo+Pj5hY3R1YWxseSBzdXBwb3J0IGFjY2VwdGluZyB0YXJnZXRlZCBMRFAgc2Vzc2lvbnMuKQ0K Pj4+DQo+Pj5CYXNlZCBvbiB0aGlzIGRpc2N1c3Npb24sIEkgdGhpbmsgdGhhdCB3aGF0IHRoZSBw YXJlbnRoZXRpY2FsIGlzIHRyeWluZw0KPj4+dG8gc2F5IGlzIHRoYXQgInRoZSByb3V0ZXIgb3Jp Z2luYXRpbmcgdGhlIHRhZyBtYXkgbm90IHVzZSB0aGF0IHRhZyBpbg0KPj4+YW55IG9mIGl0cyBw cm9jZXNzaW5nIGRlY2lzaW9ucyIgLS0gaXMgdGhhdCBjb3JyZWN0Pw0KPj4+DQo+Pj5DaGFuZ2lu ZyB0aGUgd29yZCAiZnVuY3Rpb25hbGl0eSIgdG8gImF0dHJpYnV0ZXMiIHdvdWxkIGNhdXNlIG1l IHRvDQo+Pj5yZWFkIHRoZSB0ZXh0IGFzIGJlaW5nIGluIHRoZSBmaXJzdCBjYXNlIEkgZGVzY3Jp YmVkIGFib3ZlLg0KPj4+DQo+Pj4oQnkgdGhlIHdheSwgdGhpcyBwYXJhZ3JhcGggaGFkIGEgbG90 IG9mIGNoYW5nZXMgaW4gbXkgcGF0Y2ggZm9yDQo+Pj5ncmFtbWFyOyBpdCBtaWdodCBoYXZlIGJl ZW4gZWFzaWVyIHRvIGFwcGx5IHRoYXQgcGF0Y2ggYmVmb3JlIG1ha2luZw0KPj4+ZnVydGhlciBl ZGl0cywgdG8gcmVkdWNlIHRoZSBudW1iZXIgb2YgbWVyZ2UgY29uZmxpY3RzLiAgVGhlIGdyYW1t YXIgaW4NCj4+PnRoZSBxdW90ZWQgbmV3IHRleHQgaGFzIHNldmVyYWwgZXJyb3JzLikNCj4+Pg0K Pj4+PiA+T25lIHJlYXNvbiBJIGFtIHVuc2F0aXNmaWVkIGJ5IG1ha2luZyB0aGUgaW50ZXJwcmV0 YXRpb24gb2YgdGhlIHRhZw0KPj4+PiA+dmFsdWVzIHNwZWNpZmljIHRvIGFuIGFkbWluaXN0cmF0 aXZlIGRvbWFpbiBpcyB0aGF0IGEgbWlzY29uZmlndXJlZA0KPj4+PiA+Ym9yZGVyIHJvdXRlciBt aWdodCBlcnJvbmVvdXNseSB1c2UgdGFnIHZhbHVlcyBmcm9tIG9uZSBkb21haW4gb24NCj4+Pj4g PnRoZSBvdGhlciBzaWRlIG9mIHRoZSBib3JkZXIuDQo+Pj4+ID4gUGVyaGFwcyB0aGUgb3RoZXIg ZGFtYWdlIGZyb20gYSByb3V0ZXIgbWlzY29uZmlndXJlZCBpbiBzdWNoIGENCj4+Pj4gPmZhc2hp b24gd291bGQgZHdhcmYgdGhlIGFkZGl0aW9uYWwgZGFtYWdlIGZyb20gdGhlIG1pc2ludGVycHJl dGVkDQo+Pj4+ID50YWdzIGFuZCBzbyBteSBjb25jZXJuIGlzIGludmFsaWQ7IEkgcmVhbGx5IGNh bid0IHNheS4NCj4+Pj4NCj4+Pj4gQWdhaW4sIEkgZG9u4oCZdCB0aGluayBtaXNjb25maWd1cmF0 aW9uIG5lZWRzIHRvIGJlIGNvdmVyZWQgLSAiZW1wdG9yDQo+Pj4+Y2F2ZXRl4oCdLg0KPj4+DQo+ Pj5BIG1pc2NvbmZpZ3VyZWQgcm91dGVyIGlzIGJ5IGRlZmluaXRpb24gYnJva2VuLiAgU3VjaCBt aXNjb25maWd1cmF0aW9uDQo+Pj5jYW4gaGFwcGVuIGVpdGhlciBieSBhY2NpZGVudCBkdWUgdG8g b3BlcmF0b3IgZXJyb3IsIG9yIG1hbGljaW91c2x5LCBpZg0KPj4+YW4gYXR0YWNrZXIgaGFzIGNv bXByb21pc2VkIHRoZSBzeXN0ZW0uICBXaGlsZSBpdCBtYXkgbm90IGJlIG5lY2Vzc2FyeQ0KPj4+ dG8gc2F5IHRoYXQgYSBicm9rZW4gcm91dGVyIHdpbGwgbm90IHBhc3MgdHJhZmZpYyB0aGUgd2F5 IGl0J3Mgc3VwcG9zZWQNCj4+PnRvLCBpZiBhIG1pc2NvbmZpZ3VyZWQgcm91dGVyIGNhbiBlbWl0 IHJvdXRpbmcgcHJvdG9jb2wgbWVzc2FnZXMgdGhhdA0KPj4+YWZmZWN0IHRoZSBzdGF0ZSBvZiB0 aGUgbmV0d29yayBhcyBhIHdob2xlLCBub3QganVzdCBpdHMgbG9jYWwNCj4+PnN1cnJvdW5kaW5n cywgdGhhdCBzZWVtcyBsaWtlIGFuIGFuYWx5c2lzIHRoYXQgaXMgYXBwcm9wcmlhdGUgZm9yIHRo ZQ0KPj4+c2VjdXJpdHkgY29uc2lkZXJhdGlvbnMgb2YgYSByb3V0aW5nIHByb3RvY29sIGRvY3Vt ZW50LiAgTm93LCBJIGRvbid0DQo+Pj5oYXZlIGEgZ29vZCBwaWN0dXJlIG9mIHNwZWNpZmljIGV4 YW1wbGVzIG9mIG5ldHdvcmstd2lkZSBpc3N1ZXMgZHVlIHRvDQo+Pj50aGUgYWRtaW4gdGFnLCBi dXQgSSB0aGluayB0aGVyZSdzIGEgbGFyZ2UgZW5vdWdoIHByb2JhYmlsaXR5IHRoYXQgaXQncw0K Pj4+cG9zc2libGUgZm9yIHN1Y2ggYSB0aGluZyB0byBoYXBwZW4gdGhhdCBJIHdhbnRlZCB0byBt ZW50aW9uIGl0IGluIG15DQo+Pj5yZXZpZXcgY29tbWVudHMuICBNYXliZSB0aGVyZSBpcyBub3Qg YW55dGhpbmcgd29ydGggbWVudGlvbmluZyBhYm91dCBpdA0KPj4+aW4gdGhlIHNlY3VyaXR5IGNv bnNpZGVyYXRpb25zIHNlY3Rpb24sIGJ1dCBJIGRvbid0IHRoaW5rIHRoYXQNCj4+PiJtaXNjb25m aWd1cmF0aW9uIGRvZXNuJ3QgbmVlZCB0byBiZSBjb3ZlcmVkIiBhZGRyZXNzZXMgdGhlIGNvbmNl cm4gSQ0KPj4+d2FzIGF0dGVtcHRpbmcgdG8gcmFpc2UuDQo+Pj4NCj4+Pj4gPFNocmFkZGhhPiAt MDcgdmVyc2lvbiBhZGRyZXNzZXMgdGhpcyBpc3N1ZS4NCj4+Pj4NCj4+Pj4gIkFkdmVydGlzZW1l bnQgb2YgdGFnIHZhbHVlcyBmb3Igb25lIGFkbWluaXN0cmF0aXZlIGRvbWFpbiBpbnRvDQo+Pj4+ YW5vdGhlciAgcmlza3MgbWlzaW50ZXJwcmV0YXRpb24gb2YgdGhlIHRhZyB2YWx1ZXMgKGlmIHRo ZSB0d28gZG9tYWlucw0KPj4+PmhhdmUgYXNzaWduZWQgIGRpZmZlcmVudCBtZWFuaW5ncyB0byB0 aGUgc2FtZSB2YWx1ZXMpLCB3aGljaCBtYXkgaGF2ZQ0KPj4+PnVuZGVzaXJhYmxlIGFuZCB1bmFu dGljaXBhdGVkIHNpZGUgIGVmZmVjdHMuIg0KPj4+DQo+Pj5UaGFuayB5b3UsIHRoYXQgaGVscHMu DQo+Pj4NCj4+Pj4gVGhhbmtzIGZvciB0aGUgZWRpdG9yaWFsIHJldmlldyBhcyB3ZWxsLiBTcGVh ayBhcyBXRyBjaGFpciwgSQ0KPj4+PmFwcHJlY2lhdGUgdGhpcy4NCj4+Pg0KPj4+WW91J3JlIHdl bGNvbWUhDQo+Pj4NCj4+Pi1CZW4NCj4+DQo+DQoNCg== From nobody Thu Oct 15 03:48:47 2015 Return-Path: X-Original-To: secdir@ietfa.amsl.com Delivered-To: secdir@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 6A9441AD0AC for ; Thu, 15 Oct 2015 03:48:46 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.121 X-Spam-Level: X-Spam-Status: No, score=-1.121 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, SPF_NEUTRAL=0.779] autolearn=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id iKSLprSgxezX for ; Thu, 15 Oct 2015 03:48:45 -0700 (PDT) Received: from mail.kivinen.iki.fi (fireball.acr.fi [83.145.195.1]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 8977C1AD0CB for ; Thu, 15 Oct 2015 03:48:44 -0700 (PDT) Received: from fireball.acr.fi (localhost [127.0.0.1]) by mail.kivinen.iki.fi (8.15.1/8.14.8) with ESMTPS id t9FAmdP6027444 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=NO) for ; Thu, 15 Oct 2015 13:48:39 +0300 (EEST) Received: (from kivinen@localhost) by fireball.acr.fi (8.15.1/8.14.8/Submit) id t9FAmdq3005965; Thu, 15 Oct 2015 13:48:39 +0300 (EEST) MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit Message-ID: <22047.33927.538587.215007@fireball.acr.fi> Date: Thu, 15 Oct 2015 13:48:39 +0300 From: Tero Kivinen To: secdir@ietf.org X-Edit-Time: 2 min X-Total-Time: 0 min Archived-At: Subject: [secdir] Assignments X-BeenThere: secdir@ietf.org X-Mailman-Version: 2.1.15 Precedence: list Reply-To: secdir-secretary@mit.edu List-Id: Security Area Directorate List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 15 Oct 2015 10:48:46 -0000 Review instructions and related resources are at: http://tools.ietf.org/area/sec/trac/wiki/SecDirReview Takeshi Takahashi is next in the rotation. For telechat 2015-10-15 Reviewer LC end Draft Steve Hanna T 2015-10-09 draft-blanchet-ccsds-urn-00 Jeffrey Hutzelman T 2015-09-30 draft-ietf-v6ops-pmtud-ecmp-problem-04 Scott Kelly T 2015-10-08 draft-ietf-bess-mvpn-bidir-ingress-replication-03 Ben Laurie T 2015-10-08 draft-ietf-ospf-rfc4970bis-06 For telechat 2015-10-22 Chris Inacio T 2015-07-29 draft-ietf-homenet-dncp-11 Matt Lepinski T 2015-10-14 draft-ietf-pcp-port-set-10 Catherine Meadows T 2015-10-19 draft-ietf-trill-rfc7180bis-06 Russ Mundy T 2015-10-15 draft-ietf-aqm-ecn-benefits-06 Sandy Murphy T 2015-10-15 draft-ietf-aqm-fq-implementation-03 Magnus Nystrom T 2015-10-21 draft-ietf-ippm-type-p-monitor-02 Klaas Wierenga TR2015-09-09 draft-ietf-6man-predictable-fragment-id-10 Last calls and special requests: Donald Eastlake 2015-09-11 draft-ietf-dane-openpgpkey-05 Daniel Kahn Gillmor E None draft-ietf-rtcweb-security-08 Chris Inacio 2015-10-02 draft-ietf-lwig-ikev2-minimal-04 Warren Kumari 2015-10-26 draft-ietf-ipfix-mib-variable-export-09 Alexey Melnikov 2015-10-27 draft-mglt-ipsecme-clone-ike-sa-05 Matthew Miller 2015-10-27 draft-santesson-auth-context-extension-10 Eric Osterweil 2015-10-20 draft-ietf-mpls-lsp-ping-mpls-tp-oam-conf-14 Vincent Roca 2015-10-15 draft-ietf-pals-ms-pw-protection-03 Joe Salowey 2015-10-19 draft-ietf-pals-redundancy-spe-02 Rich Salz 2015-10-28 draft-ietf-ippm-checksum-trailer-03 Yaron Sheffer 2015-10-27 draft-ietf-v6ops-reducing-ra-energy-consumption-02 Robert Sparks 2015-11-09 draft-west-webappsec-csp-reg-03 -- kivinen@iki.fi From nobody Thu Oct 15 05:27:35 2015 Return-Path: X-Original-To: secdir@ietfa.amsl.com Delivered-To: secdir@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 733FC1A038F; Thu, 15 Oct 2015 05:27:33 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.911 X-Spam-Level: X-Spam-Status: No, score=-1.911 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id dtrr-vNUYiI6; Thu, 15 Oct 2015 05:27:32 -0700 (PDT) Received: from walnut.tislabs.com (walnut.tislabs.com [192.94.214.200]) (using TLSv1 with cipher ADH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id A30B31B2F35; Thu, 15 Oct 2015 05:27:30 -0700 (PDT) Received: from nova.tislabs.com (unknown [10.66.1.77]) by walnut.tislabs.com (Postfix) with ESMTP id 067B128B0043; Thu, 15 Oct 2015 08:27:30 -0400 (EDT) Received: from [IPv6:::1] (localhost.localdomain [127.0.0.1]) by nova.tislabs.com (Postfix) with ESMTP id 6C3DF1F8035; Thu, 15 Oct 2015 08:27:29 -0400 (EDT) From: Sandra Murphy X-Pgp-Agent: GPGMail 2.5.1 Content-Type: multipart/signed; boundary="Apple-Mail=_5BD19792-E3B0-40C9-A249-DBEB4ADD3F39"; protocol="application/pgp-signature"; micalg=pgp-sha512 Date: Thu, 15 Oct 2015 08:25:53 -0400 Message-Id: <3E34182B-F05B-46CC-AA8F-75F50C4B0D94@tislabs.com> To: draft-ietf-aqm-fq-implementation.all@tools.ietf.org Mime-Version: 1.0 (Mac OS X Mail 7.3 \(1878.6\)) X-Mailer: Apple Mail (2.1878.6) Archived-At: Cc: secdir@ietf.org, IETF Subject: [secdir] secdir review of draft-ietf-aqm-fq-implementation-03 X-BeenThere: secdir@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: Security Area Directorate List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 15 Oct 2015 12:27:33 -0000 --Apple-Mail=_5BD19792-E3B0-40C9-A249-DBEB4ADD3F39 Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=windows-1252 I have reviewed this document as part of the security directorate's = ongoing effort to review all IETF documents being processed by the IESG. = These comments were written primarily for the benefit of the security = area directors. Document editors and WG chairs should treat these = comments just like any other last call comments. The Last Call notes that comments should be sent by today. I do note = that a new -03 version was posted 10-12. That version seems to have = updated only the references and abstract. I reviewed the -03 version. This draft draft-ietf-aqm-fq-implementation-03 is a discussion of types = of queuing algorithms and queue management algorithms and implementation = possibilities. Besides the categorization and discussion, I think a = major contribution is the statement in the conclusion: There is value in implementing and coupling the operation of both queuing algorithms and queue management algorithms, and there is definitely interesting research in this area, but specifications, measurements, and comparisons should decouple the different algorithms and their contributions to system behavior. Looking at the draft history, it has seen little change since the -00 = version. The wg seems to have been blessed with consensus early. I see no security concerns from such a discussion and categorization. The security considerations section says: This memo adds no new security issues; it observes on implementation strategies for Diffserv implementation. I believe that. I had wondered if the discussion of algorithm types would consider if = there were any denial of service opportunities with the algorithm types = or implementation strategies. I can=92t say that I see any myself - any = deliberate attempt to exploit a queuing algorithm or queue management = algorithm would require complete knowledge of the implementation and = competing flow characteristics, so I=92m not concerned or surprised to = see no discussion here. I did not consult the other AQM wg drafts or RFCs referenced, but I do = not believe that affects my review. Nits: section 2.2.2 page 6: If the system is intended to maintain a byte rate, there will be memory between searches of the excess previously dequeued. I am not sure what this means -- =93there will be memory=94?? =93excess = previously dequeued=94?? section 2.2.4 page 9 per-round quantum and incremental quantum - these are the same, right? = if so, could that be made clear? The weakness of a WRR approach - WWR is not defined anywhere. Maybe a = typo for DRR? section 3 page 10: host transports interpret drops as signals - I presume you mean host = transport protocols [or protocol implementations]. Do transport = protocols other than TCP use drops as signals? If not, why not just say = TCP. I don=92t think that a drop of a UDP packet sends a signal, for = example. But I expect there could be other such transport protocols, as = my knowledge of anything but TCP/UDP and some SCTP is scant. It is useful to think of the effects of queuing as a signal as well. The receiver sends acknowledgements as data is received, so the arrival of acknowledgements at the sender paces the sender at approximately the average rate it is able to achieve through the network. speaking of UDP - I don=92t think you can make this statement about UDP. = Can you? section 3.1 page 11 (and 3.2 page 11 and 3.3 page 12) o Ack Clocking, pacing the sender to send at approximately the rate it can deliver data to the receiver, and =93it=94 here is the queue, or maybe the network path, not the sender. = right? because the sender does not deliver data, it transmits data. by = usual grammar rules =93it=94 would be the sender. =97Sandy --Apple-Mail=_5BD19792-E3B0-40C9-A249-DBEB4ADD3F39 Content-Transfer-Encoding: 7bit Content-Disposition: attachment; filename=signature.asc Content-Type: application/pgp-signature; name=signature.asc Content-Description: Message signed with OpenPGP using GPGMail -----BEGIN PGP SIGNATURE----- Comment: GPGTools - https://gpgtools.org iQIcBAEBCgAGBQJWH5tfAAoJEHplpQeet0IZmCoP/jSKhIsjN5hV7HF80jjL8vqL AGfkXbfpyPm0Qxh3q3BT9IIfwm36xMf8h1V9FoPzCX82VgK3u2qUzmNHkOd9Sao8 TpK1scVV0r/MlZnEA/Zmkoafw1/K77W3SXW96cVcRKuqEupgsk9BaEWBI/uUygQE 9nIcv9xEMKjs/QLzLMKZtdOfNAJ0lOJyIq3voYHlhvBcCCDm+xXRUJnOBg0Jjzlz BGV/mV85nAsZ6YVx9AH3b6izajB8eyq2R9MEFQEFv685RFMGiUicFL7xQ5kIbhmK t+4HbuMkCXwj3Z7j6YNldiX+H+GsDFEp7Kp043vd4ESvE1QKv5obdxWvrChoWk/b K7vSTpO3VFqBzqPvsdH7HZ2ZH6LZBI2oqzHr7v1DHeqC0N9EpvdwhnIJyjWLcr0+ GwJsr48H1f3gXJ3y98731NWXGco/HYpmE4/fg1zhDVBtbnmBgbaupgdFXc8cXXd5 raGaNzQXYch4Vqrh9YMjYfHMShVw8NOmTQL82esC468hcKMO/89fMV9lnX/Ah/MF xv6TXOhsoH/W6JvvBKB/z4L0T+MEY1hmv0p9UXSzWVGI6uabcHlT5axrpZUDJtYa /EnUOAi6b+6eSjocnih9h1CT90e+cmtaATMe7f6eCFVhfjZowQrUiCOiZYmzSw70 Kxg/cofJhV9+B0OqUQBp =uC3N -----END PGP SIGNATURE----- --Apple-Mail=_5BD19792-E3B0-40C9-A249-DBEB4ADD3F39-- From nobody Thu Oct 15 20:57:00 2015 Return-Path: X-Original-To: secdir@ietfa.amsl.com Delivered-To: secdir@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 476991B2E53 for ; Thu, 15 Oct 2015 20:56:58 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.978 X-Spam-Level: X-Spam-Status: No, score=-1.978 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, FM_FORGED_GMAIL=0.622, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001] autolearn=unavailable Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 8hiRNtL8NjiM for ; Thu, 15 Oct 2015 20:56:57 -0700 (PDT) Received: from mail-lb0-f174.google.com (mail-lb0-f174.google.com [209.85.217.174]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id DA8191B2E51 for ; Thu, 15 Oct 2015 20:56:56 -0700 (PDT) Received: by lbbwb3 with SMTP id wb3so28075325lbb.1 for ; Thu, 15 Oct 2015 20:56:55 -0700 (PDT) X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:mime-version:date:message-id:subject:from:to :content-type; bh=1BUDLkY1Gb+tKaL3n4uAtm/7GiZ7H6Nvg2vXJw9QLmc=; b=gmlz6Q4yY7cm0UpJj36YKdTL1XiCjZ9/nxTkr/cHkdZ8ZxiF2XO9NAJ1qzlHDthGYJ BZvQznqoZeqHP3632hmrTy4FmxkHqjJjXj8NGSjNOh4x8WgJz8fd9H/OvTaOPji9dx1f VkHohO0zu9ARC/2MAyJnSe2xj8J+TNcZoFq3tuEM4NvsdZnjxOZCwybUDs4r5PXCM/hW J2c7/jUr5bP3XA2tnZOZRtf1MYEnG3bfulG60MarobIdHHgBw/dStLlDncoxKezkj/4+ /KlC+faH7Bqc3YOGgGbSY0efeu3U9VKm6JnoszXxgrjFkZxUEEY9UfGmDWdmpg0hAfCX 6aCA== X-Gm-Message-State: ALoCoQlLAe0SclGVsolcGpMM5pYsZY18+nkuXWZWNIbAFQbQKuvnH3c235zwumfWqtER8ME5EU45 MIME-Version: 1.0 X-Received: by 10.112.134.102 with SMTP id pj6mr6969625lbb.14.1444967814854; Thu, 15 Oct 2015 20:56:54 -0700 (PDT) Received: by 10.112.2.231 with HTTP; Thu, 15 Oct 2015 20:56:54 -0700 (PDT) Date: Thu, 15 Oct 2015 20:56:54 -0700 Message-ID: From: Joseph Salowey To: secdir , The IESG , draft-ietf-pals-redundancy-spe.all@tools.ietf.org Content-Type: multipart/alternative; boundary=e89a8f502c02511045052230c96f Archived-At: Subject: [secdir] review of draft-ietf-pals-redundancy-spe-02 X-BeenThere: secdir@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: Security Area Directorate List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 16 Oct 2015 03:56:58 -0000 --e89a8f502c02511045052230c96f Content-Type: text/plain; charset=UTF-8 I have reviewed this document as part of the security directorate's ongoing effort to review all IETF documents being processed by the IESG. These comments were written primarily for the benefit of the security area directors. Document editors and WG chairs should treat these comments just like any other last call comments. >From a security perspective I think the document is ready. I think the document could be cleaned up a little to make reading a little bit easier. The document discusses a new pseudo wire redundancy mode. I did not find the document particularly clear, it would probably help to expand all the acronyms on first use. The document only refers to several other documents for its security considerations. While this is often not the favored approach in this case it seems to be OK as best as I can tell. The document doesn't appear to be defining anything fundamentally new that would change the considerations in the referenced documents or require special attention. Cheers, Joe --e89a8f502c02511045052230c96f Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: quoted-printable
I have reviewed this document as part of the security= directorate's ongoing effort to review all IETF documents being proces= sed by the IESG. These comments were written primarily for the benefit of t= he security area directors. Document editors and WG chairs should treat the= se comments just like any other last call comments.

From a security perspective I think the document is ready.=C2=A0 I th= ink the document could be cleaned up a little to make reading a little bit = easier. =C2=A0

The document discusses a new pseudo= wire redundancy mode.=C2=A0 I did not find the document particularly clear= , it would probably help to expand all the acronyms on first use. =C2=A0 Th= e document only refers to several other documents for its security consider= ations.=C2=A0 While this is often not the favored approach in this case it = seems to be OK as best as I can tell.=C2=A0 The document doesn't appear= to be defining anything fundamentally new that would change the considerat= ions in the referenced documents or require special attention.=C2=A0
<= div>
Cheers,

Joe
--e89a8f502c02511045052230c96f-- From nobody Fri Oct 16 04:28:58 2015 Return-Path: X-Original-To: secdir@ietfa.amsl.com Delivered-To: secdir@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 790B21A9091; Fri, 16 Oct 2015 04:28:53 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.551 X-Spam-Level: X-Spam-Status: No, score=-1.551 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HELO_EQ_SE=0.35, SPF_PASS=-0.001] autolearn=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id YMAIkb2sdt_C; Fri, 16 Oct 2015 04:28:52 -0700 (PDT) Received: from duva.sjd.se (duva.sjd.se [IPv6:2001:9b0:1:1702::100]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id AE8881A9081; Fri, 16 Oct 2015 04:28:51 -0700 (PDT) Received: from latte.josefsson.org ([155.4.17.2]) (authenticated bits=0) by duva.sjd.se (8.14.4/8.14.4/Debian-4) with ESMTP id t9GBSWp1016921 (version=TLSv1/SSLv3 cipher=AES128-GCM-SHA256 bits=128 verify=NOT); Fri, 16 Oct 2015 13:28:33 +0200 Date: Fri, 16 Oct 2015 13:28:31 +0200 From: Simon Josefsson To: Kent Watsen Message-ID: <20151016132831.64b45561@latte.josefsson.org> In-Reply-To: References: <8737xnp0rm.fsf@latte.josefsson.org> <561B663C.7080408@cisco.com> X-Mailer: Claws Mail 3.11.1 (GTK+ 2.24.25; x86_64-pc-linux-gnu) MIME-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha256; boundary="Sig_/XZb1.S/1zz0iQDF6+s8p5dP"; protocol="application/pgp-signature" X-Virus-Scanned: clamav-milter 0.98.7 at duva.sjd.se X-Virus-Status: Clean Archived-At: Cc: Benoit Claise , NETCONF , "draft-ietf-netconf-call-home.all@ietf.org" , "iesg@ietf.org" , "secdir@ietf.org" Subject: Re: [secdir] [Netconf] review of draft-ietf-netconf-call-home-11 X-BeenThere: secdir@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: Security Area Directorate List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 16 Oct 2015 11:28:53 -0000 --Sig_/XZb1.S/1zz0iQDF6+s8p5dP Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: quoted-printable Hello. Re 1: Thank you for clarification. I don't believe there is any need to repeat text from a normative reference. Re 2: Benoit's suggestion would resolv the concern for me. Thanks, /Simon > Hi Simon, >=20 >=20 > Regarding your two comments: >=20 > 1. Are non-certificate-based TLS out of scope for NETCONF/RESTCONF? >=20 > Yes or, more specifically, both NETCONF over TLS and and RESTCONF > restrict TLS to certificates. The relevant text is in RFC 7589, > Section 1 and draft-ietf-netconf-restconf-07, Section 2.2. Do you > think there should be a note in this draft stating this as well? >=20 > 2. Section 2 says 'The term "NETCONF/RESTCONF client" can refer to > the [RFC6241], Section 1.1 "client".' >=20 > Does Benoit's suggestion to replace "can refer" with "refers" satisfy > the language vagueness issue? - And also, are you satisfied with > having the single reference to RFC6241, since RESTCONF pulls the term > from RFC6241 as well? >=20 >=20 > Thanks > Kent >=20 >=20 > From: Benoit Claise > > Date: Monday, October 12, 2015 at 3:50 AM > To: Simon Josefsson > >, > "iesg@ietf.org" > >, > "secdir@ietf.org" > >, > "draft-ietf-netconf-call-home.all@tools.ietf.org" > >, > "netconf@ietf.org" > > Subject: Re: [Netconf] > review of draft-ietf-netconf-call-home-11 >=20 > Hi Simon, >=20 > Thanks for your review. > One comment below. >=20 > Hi. >=20 > I have reviewed this document as part of the security directorate's > ongoing effort to review all IETF documents being processed by the > IESG. These comments were written primarily for the benefit of the > security area directors. Document editors and WG chairs should treat > these comments just like any other last call comments. >=20 > I believe the document is ready. >=20 > One main security concern is the reversal of roles that this document > introduce, but letting TCP clients act as TLS/SSH servers, and vice > versa, is not unheard of. As long as proper peer authentication is > performed, and other parts of the security protocols are properly > performed, I see no fundamental problem with this. I'm sure some > implementations will need to be tweaked to deal with this, and > terminology might confusing at times. The 'Security Considerations' > section does a good job discussing this, and some other issues too. >=20 > Two minor questions: >=20 > 1) Are non-certificate-based TLS out of scope for NETCONF/RESTCONF? I > see no discussion of it in this draft, and text in the document > implicitly assumes host keys (SSH) or certificates (TLS) are used. > Think about TLS-PSK for example, which seems like a relevant idea for > embedded devices. This may not be the document to adress this, but if > there is work towards that goal already, it might be useful to align > this document with that. >=20 > 2) Section 2 says 'The term "NETCONF/RESTCONF client" can refer to the > [RFC6241], Section 1.1 "client".'. Shouldn't this say the term may > refer to a RESTCONF client and reference draft-ietf-netconf-restconf? > Or is that not intentional? The use of the word 'can' make this text > vague to me. The previous section (1.5) says that 'NETCONF/RESTCONF' > is an abbrevation for 'the NETCONF or the RESTCONF'. The same comment > applies to section 3. Maybe this is a misunderstanding on my side, > but the text confused me so it may be useful to resolve. >=20 > I mentioned this point in my AD review > (http://www.ietf.org/mail-archive/web/netconf/current/msg10535.html). > I now realize that I made a typo in my email: NETCONF/RESTCONF > client" can refers to the RFC 6241 section 1.1 "client" This should > read: "NETCONF/RESTCONF client" refers to the RFC 6241 section 1.1 > "client" Ditto for NETCONF/RESTCONF server. This takes care of the > confusing "can" word. Thanks for spotting that. >=20 > Regarding the draft-ietf-netconf-restconf reference now. > https://tools.ietf.org/html/draft-ietf-netconf-restconf-07#section-1.4.1 > refers to RFC 6241 for the client. So I believe that we're good with > a single reference to RFC 6241 in this draft. >=20 > Regards, Benoit >=20 > Thanks, > /Simon >=20 >=20 --Sig_/XZb1.S/1zz0iQDF6+s8p5dP Content-Type: application/pgp-signature Content-Description: OpenPGP digital signatur -----BEGIN PGP SIGNATURE----- Version: GnuPG v2 iQEcBAEBCAAGBQJWIN9fAAoJEIYLf7sy+BGd5tEH/0kFzvGBuc72odkQ3Spn0XZP n8SZRkKWJoGy23OiMccZNdj/DeDjSdujvkvpQCOx4S2ONPY9wTWDw7GKYnq/9va+ GLCICkQhhabds9Rqjp4yp/D30C1CRaQuEFdeC5ng4qVQr/CCicZMaGqvxbae4oZG JfvmLRTx4iCIaQZPFx5ap8gLCoUJEMGzZt1+GDIL1eHeTH195q6oxbeHy65ckE6h +1HYBPuD0eNacfBSMh5CAyS/0xrdLWCFJ/n/jQoM7YQGDpc685hW/7FNlNSATis9 xJyLsAxPiXhnKgcnVc8vmcUXSMCyWET+ymJRqTyC2/P1MUkhlMenl6tyDxvpzgQ= =acQw -----END PGP SIGNATURE----- --Sig_/XZb1.S/1zz0iQDF6+s8p5dP-- From nobody Fri Oct 16 09:20:00 2015 Return-Path: X-Original-To: secdir@ietfa.amsl.com Delivered-To: secdir@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 784381A6F39; Fri, 16 Oct 2015 09:19:52 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.276 X-Spam-Level: X-Spam-Status: No, score=-1.276 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, MIME_HTML_ONLY=0.723, SPF_PASS=-0.001] autolearn=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id t1sBxQfaxGpR; Fri, 16 Oct 2015 09:19:48 -0700 (PDT) Received: from mail-wi0-x22a.google.com (mail-wi0-x22a.google.com [IPv6:2a00:1450:400c:c05::22a]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 99F2B1A6F1E; Fri, 16 Oct 2015 09:19:47 -0700 (PDT) Received: by wicgb1 with SMTP id gb1so15915799wic.1; Fri, 16 Oct 2015 09:19:46 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=from:subject:to:message-id:date:user-agent:mime-version :content-type:content-transfer-encoding; bh=KPAXd4uBRUyXwf0SPF0q9GHExZtjunN5zv94QdYH3Vk=; b=x/zudId9dDx/YanHhJa93vwRtgNN5awF+Mlc8ZVj06XFxyfOMkQpa14hjeIgaN9xv/ s2vWT8UI+5z+5e63/Th6Ost1IJKLcXV9x9A/KOdNYl7gB7QId1xn/JVUu2eB7LORYcEy PDEV57+TpiLv3ZmfOdMwyJ0tPoQ3BNyX+/tc9Poa8Zhe3A3/SCE1Cmwt6QxRqbNncqTg 3OEnsVfacF0fAYTzRYu566MTMadARP1FYCAipld/+9VuWPrz1KulNe9xfQ5JnMSluBPL 9CU3IzlQHNBn5XlrxTdS3ISAr7XsXwYoALs27gLnP/OW/V2IIipz/nngVJSSnvkPeioA A83A== X-Received: by 10.194.9.97 with SMTP id y1mr20358287wja.84.1445012386225; Fri, 16 Oct 2015 09:19:46 -0700 (PDT) Received: from [10.0.0.9] (bzq-109-66-107-104.red.bezeqint.net. [109.66.107.104]) by smtp.googlemail.com with ESMTPSA id ew2sm3776320wic.20.2015.10.16.09.19.44 (version=TLSv1.2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Fri, 16 Oct 2015 09:19:45 -0700 (PDT) From: Yaron Sheffer To: IETF Security Directorate , iesg@ietf.org, draft-ietf-v6ops-reducing-ra-energy-consumption.all@tools.ietf.org Message-ID: <5621239F.60006@gmail.com> Date: Fri, 16 Oct 2015 19:19:43 +0300 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:38.0) Gecko/20100101 Thunderbird/38.3.0 MIME-Version: 1.0 Content-Type: text/html; charset=utf-8 Content-Transfer-Encoding: 8bit Archived-At: Subject: [secdir] Secdir review of draft-ietf-v6ops-reducing-ra-energy-consumption-02 X-BeenThere: secdir@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: Security Area Directorate List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 16 Oct 2015 16:19:52 -0000 I have reviewed this document as part of the security directorate's ongoing effort to review all IETF documents being processed by the IESG. These comments were written primarily for the benefit of the security area directors.  Document editors and WG chairs should treat these comments just like any other last call comments.

This document contains device-side and network-side recommendations aimed at reducing the number of IPv6 Router Advertisements, so that battery-powered devices are not badly affected by them. The document is short and well-written.

Summary

The document is ready to be published, with a few minor issues.

Details

- My main issue with the document is that it describes a situation that's broken on both the network and the device side. It then proposes to change both sides, but it seems to me that we are now at a "local minimum". Given the existing network, there is no motivation for devices to change. And given the existing devices, there is no motivation for networks to change. I would suggest to propose a transition strategy that will get us there without assuming that all networks and all devices will magically start doing "the right thing" all at the same time. For example, during the transition period devices SHOULD allow to configure certain networks for the old behavior, and other networks for the new one. Or maybe devices can detect the network's behavior automatically.

- Sec. 5.1 suggests to prefer certain Router Solicitations on the network side, so I would expect Sec. 5.2. to recommend that devices should use exactly those Solicitations.

- The term "appropriate countermeasures" is not very useful when recommending security solutions. Do you have any examples? Router configurations? IPS devices? Legal actions? :-)

- Can you add something about whether your proposal increases or decreases the risk of malicious hosts bricking a device (or a router?) by sending a RA with incorrect information?

Thanks,
    Yaron

From nobody Fri Oct 16 12:04:36 2015 Return-Path: X-Original-To: secdir@ietfa.amsl.com Delivered-To: secdir@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 1789D1ACE66; Fri, 16 Oct 2015 12:04:33 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.91 X-Spam-Level: X-Spam-Status: No, score=-1.91 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, T_RP_MATCHES_RCVD=-0.01] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id czMHFJvbs7Xx; Fri, 16 Oct 2015 12:04:32 -0700 (PDT) Received: from nostrum.com (raven-v6.nostrum.com [IPv6:2001:470:d:1130::1]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 021991ACE64; Fri, 16 Oct 2015 12:04:28 -0700 (PDT) Received: from unnumerable.local (pool-71-170-237-80.dllstx.fios.verizon.net [71.170.237.80]) (authenticated bits=0) by nostrum.com (8.15.2/8.14.9) with ESMTPSA id t9GJ4Rd9032936 (version=TLSv1.2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128 verify=OK); Fri, 16 Oct 2015 14:04:28 -0500 (CDT) (envelope-from rjsparks@nostrum.com) X-Authentication-Warning: raven.nostrum.com: Host pool-71-170-237-80.dllstx.fios.verizon.net [71.170.237.80] claimed to be unnumerable.local To: "secdir@ietf.org" , "iesg@ietf.org" , draft-west-webappsec-csp-reg.all@ietf.org From: Robert Sparks Message-ID: <56214A36.5050805@nostrum.com> Date: Fri, 16 Oct 2015 14:04:22 -0500 User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.10; rv:38.0) Gecko/20100101 Thunderbird/38.3.0 MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8; format=flowed Content-Transfer-Encoding: 7bit Archived-At: Subject: [secdir] Secdir review: draft-west-webappsec-csp-reg-03.txt X-BeenThere: secdir@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: Security Area Directorate List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 16 Oct 2015 19:04:33 -0000 I have reviewed this document as part of the security directorate's ongoing effort to review all IETF documents being processed by the IESG. These comments were written primarily for the benefit of the security area directors. Document editors and WG chairs should treat these comments just like any other last call comments. Summary: Ready for publication as Informational This draft establishes a registry (specification required/expert review), and populates it with an initial set of values defined in and used by a w3c specification that is security-centric. Creating the registry introduces no new security concerns itself. One thing (not particularly security related) to consider: The BNF for directive-name, as copied into this draft, allows a directive name of -, or --, ---, etc. Are you expecting an expert to disallow these, or are they ok? Is the answer the same for the name 42? From nobody Mon Oct 19 10:44:13 2015 Return-Path: X-Original-To: secdir@ietfa.amsl.com Delivered-To: secdir@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 8F4A31AD369; Mon, 19 Oct 2015 10:44:12 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -14.511 X-Spam-Level: X-Spam-Status: No, score=-14.511 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_HI=-5, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 1H70VtSC46lG; Mon, 19 Oct 2015 10:44:10 -0700 (PDT) Received: from alln-iport-4.cisco.com (alln-iport-4.cisco.com [173.37.142.91]) (using TLSv1 with cipher RC4-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 662BC1AD368; Mon, 19 Oct 2015 10:44:10 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=5825; q=dns/txt; s=iport; t=1445276651; x=1446486251; h=from:to:subject:date:message-id:mime-version; bh=CnseqRTGIJ+z1urxsJ0Kf9Wwed6+KZ62RnoMf/eCx+k=; b=DMeTvv3muH75NivRRSvjI8r/xOxsyG6JFxhI1IRWGupni5JhPwStSO/q 4I5OPnFdw+NzGSb/8RjAbyyLw/4xu9LxTcUvHnuWgjiziQ0bsQ11kvEge czR9AdlJfp4vTRJiRuHtPYqIL+axdSMT1L81gedbDHNSyj7SwTPNeOmt+ I=; X-Files: signature.asc : 496 X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: A0C6AgA1KyVW/4sNJK1egzZUbwa+CQ6BWiGCQ4M6gT44FAEBAQEBAQGBCoQ0I2gBSgI0JwQBEg6IIg2xPJJlAQEBAQEBAQMBAQEBAQEUCYkHiASCZzGBFAWWIwGCTYFhaoVMgjiBWBWWPINuAR8BQ4QDcgGEYIEGAQEB X-IronPort-AV: E=Sophos;i="5.17,703,1437436800"; d="asc'?scan'208";a="198952339" Received: from alln-core-6.cisco.com ([173.36.13.139]) by alln-iport-4.cisco.com with ESMTP; 19 Oct 2015 17:44:10 +0000 Received: from XCH-RCD-001.cisco.com (xch-rcd-001.cisco.com [173.37.102.11]) by alln-core-6.cisco.com (8.14.5/8.14.5) with ESMTP id t9JHi9gj015912 (version=TLSv1/SSLv3 cipher=AES256-SHA bits=256 verify=FAIL); Mon, 19 Oct 2015 17:44:09 GMT Received: from xch-aln-002.cisco.com (173.36.7.12) by XCH-RCD-001.cisco.com (173.37.102.11) with Microsoft SMTP Server (TLS) id 15.0.1104.5; Mon, 19 Oct 2015 12:43:51 -0500 Received: from xch-aln-002.cisco.com ([173.36.7.12]) by XCH-ALN-002.cisco.com ([173.36.7.12]) with mapi id 15.00.1104.000; Mon, 19 Oct 2015 12:43:51 -0500 From: "Matt Miller (mamille2)" To: "draft-santesson-auth-context-extension.all@ietf.org" , "iesg@ietf.org" , "secdir@ietf.org" Thread-Topic: secdir review of draft-santesson-auth-context-extension-09 Thread-Index: AQHRCpW3AW+Vkot/x0KVGTHsSjvgZw== Date: Mon, 19 Oct 2015 17:43:51 +0000 Message-ID: <69233D17-A670-4A59-833E-F314661C71DA@cisco.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: yes X-MS-TNEF-Correlator: x-pgp-agent: GPGMail 2.5.2 x-ms-exchange-messagesentrepresentingtype: 1 x-ms-exchange-transport-fromentityheader: Hosted x-originating-ip: [64.101.72.32] Content-Type: multipart/signed; boundary="Apple-Mail=_D6E76A2E-224A-4785-8FBF-CFF39AAC3B47"; protocol="application/pgp-signature"; micalg=pgp-sha512 MIME-Version: 1.0 Archived-At: Subject: [secdir] secdir review of draft-santesson-auth-context-extension-09 X-BeenThere: secdir@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: Security Area Directorate List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 19 Oct 2015 17:44:12 -0000 --Apple-Mail=_D6E76A2E-224A-4785-8FBF-CFF39AAC3B47 Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=utf-8 I have reviewed draft-santesson-auth-context-extension-09 as part of the security directorate's ongoing effort to review all IETF documents being processed by the IESG. These comments were written primarily for the benefit of the security area directors. Document editors and WG chairs should treat these comments just like any other last call comments. SUMMARY: This document defines two things: 1) a PKIX extension for specifying a number of authentication contexts a CA used in issuing the certificate, and 2) a SAML-based authentication context. The authentication context(s) are intended to provide additional information to the software verifying the certificate on how the subject -- and possibly various identifying attributes -- was assured. I believe this document is almost ready. I would like to see discussion around my major issue. MAJOR ISSUE: To me, allowing for multiple authentication contexts so generically seems ripe for confusion. Do you have particular scenarios in mind for when multiple contexts ought to be present? I speculate one intent behind multiple authentication contexts is to represent individual SAML AuthnContextClassRef's (e.g., for two-factor authentication). This model of expression seems potentially confusing unless there are further restrictions on the sequence of AuthenticationContext instances (e.g., all instances SHOULD/MUST be for the same contextType?). Alternatively, a more radical approach could be to change the structure to group all information for a particular contextType into the same AuthenticationContext (e.g., sequence of UTF8Strings). MINOR ISSUES: 1) I don't see any specific discussion about security considerations oriented at issuers of such certificates. One consideration I can imagine is around mixing such outsourced assurance with more traditional methods. I do realize this might look too much like dictating CA policy, it seems to me there would be some concerns about such mixing, and therefore might be worth at least noting. 2) I notice that contextInfo is optional. I assume it is envisioned that some contextTypes would not have any contextInfo. I think it would be worthwhile to include some guidance for those that define future contextTypes as to when contextInfo is not necessary, or consider requiring contextInfo always be present (even if it is UTF8String("")) if a missing contextInfo is likely to be rare. I am personally struggling to envision a context type that wouldn't need additional information, but I've admittedly not been thinking about it much. 3) The enforcement of XML (and XML Schema) in Section 2 seems a bit odd to me. It is certainly required for the contextType defined in Section 3, but it seems overly restrictive to me for all possible contextTypes to be XML. For instance, I can see a contextType defined based on an OpenID-Connect claims token, which is JSON. Instead of mandating XML in section 2, I suggest the mandate for XML be moved to Section 3. The definition of contextType then simply be a URI that describes the type, and that contextInfo (if present) be of an appropriate format for (and defined by) the contextType. 4) =46rom my reading, it appears the following is a valid SAML contextInfo: Is this intended? If so, can you explain what benefit there is to such a SAML contextInfo; if not, consider mandating at least one of and/or MUST be present. I understand expressing this is difficult in XML Schema, but it seems reasonable to me to add text to that effect in Section 3.1. 5) In "3.1.1. AuthContextInfo Element", the definition for AuthenticationInstant points to a non-existent section 3.3. Some of the examples in Appendix C illustrate XML Schema's dateTime data type (XMLSchema-2 =C2=A7 3.2.7), but I wonder if that is enough and the = missing section intended to clarify or augment the basics of dateTime. At the least the reference to Section 3.3 needs to be removed. NITS: * In "4. Security Considerations", the phrase "may differ form certificate to certificate" should be "may differ from certificate to certificate". * In "B.1 XML Schema", ref=3D"saci:AuthContextInfo" and ref=3D"saci:IdAttribues" does not specify maxOccurs. I realize that by default maxOccurs=3D1, but I always find myself looking it up every time I deal with XSD. I find being explicit helps with humans understanding. Thank you for your consideration, -- - m&m Matt Miller Cisco Systems, Inc. --Apple-Mail=_D6E76A2E-224A-4785-8FBF-CFF39AAC3B47 Content-Transfer-Encoding: 7bit Content-Disposition: attachment; filename="signature.asc" Content-Type: application/pgp-signature; name="signature.asc" Content-Description: Message signed with OpenPGP using GPGMail -----BEGIN PGP SIGNATURE----- Comment: GPGTools - https://gpgtools.org iQEcBAEBCgAGBQJWJSvvAAoJEDWi+S0W7cO19BYIALeB767o24Jz+kEo3vtg8cT+ IPu1sYhnQ/Dz33rZaQBYxQHQqKpdxC71s3ODxLCedpIT72n40/tTFlzM71D1klms 9rcMLxZzYc8FKK1GNV2SGc75bex+QNxS8pVtQqHlGCCMLGRmZrSScByLC9VPxTlq 94osfd8/zEi2RZETVefrIZVj7Oe0bzWaZvZoDZ+JWlrpKs8HLaKT6DsYzPDseMOR Cndqli/ZYLZC0h0ARBhW4tty3a3NkWCaPrWJZtnD8JDnaPJ3zR9RcuPosmZvqJtQ RlKAnbG9O8agq0n27ux/MW8GrwKxrCxMghc1U4tBCD/McnCnE7jmuL4UCK4idVo= =Y5+7 -----END PGP SIGNATURE----- --Apple-Mail=_D6E76A2E-224A-4785-8FBF-CFF39AAC3B47-- From nobody Mon Oct 19 12:04:50 2015 Return-Path: X-Original-To: secdir@ietfa.amsl.com Delivered-To: secdir@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 552711B2BE9; Mon, 19 Oct 2015 12:04:49 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.6 X-Spam-Level: X-Spam-Status: No, score=-2.6 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_LOW=-0.7] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id YXnx_jZdjk46; Mon, 19 Oct 2015 12:04:47 -0700 (PDT) Received: from out01.mta.xmission.com (out01.mta.xmission.com [166.70.13.231]) (using TLSv1.2 with cipher DHE-RSA-AES128-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 00CBA1B2BE8; Mon, 19 Oct 2015 12:04:28 -0700 (PDT) Received: from in02.mta.xmission.com ([166.70.13.52]) by out01.mta.xmission.com with esmtps (TLS1.2:DHE_RSA_AES_128_CBC_SHA1:128) (Exim 4.82) (envelope-from ) id 1ZoFix-0007t4-07; Mon, 19 Oct 2015 13:04:05 -0600 Received: from [72.250.219.84] (helo=sylvester.rhmr.com) by in02.mta.xmission.com with esmtpsa (TLS1.0:DHE_RSA_AES_256_CBC_SHA1:256) (Exim 4.82) (envelope-from ) id 1ZoFih-0000Zw-8a; Mon, 19 Oct 2015 13:03:53 -0600 Received: from sylvester.rhmr.com (localhost [127.0.0.1]) by sylvester.rhmr.com (8.14.4/8.14.4/Debian-2ubuntu1) with ESMTP id t9JJ2xEH019910; Mon, 19 Oct 2015 13:02:59 -0600 Received: (from hilarie@localhost) by sylvester.rhmr.com (8.14.4/8.14.4/Submit) id t9JJ2vGf019909; Mon, 19 Oct 2015 13:02:57 -0600 Date: Mon, 19 Oct 2015 13:02:57 -0600 Message-Id: <201510191902.t9JJ2vGf019909@sylvester.rhmr.com> From: "Hilarie Orman" To: luigi.iannone@telecom-paristech.fr In-reply-to: Yourmessage X-XM-AID: U2FsdGVkX19GH6XoeAD4U2yRlFDAyTDc X-SA-Exim-Connect-IP: 72.250.219.84 X-SA-Exim-Mail-From: hilarie@purplestreak.com X-Spam-DCC: XMission; sa05 1397; Body=1 Fuz1=1 Fuz2=1 X-Spam-Combo: ******;luigi.iannone@telecom-paristech.fr X-Spam-Relay-Country: X-Spam-Timing: total 5025 ms - load_scoreonly_sql: 0.03 (0.0%), signal_user_changed: 4.9 (0.1%), b_tie_ro: 4.1 (0.1%), parse: 0.71 (0.0%), extract_message_metadata: 21 (0.4%), get_uri_detail_list: 3.4 (0.1%), tests_pri_-1000: 5 (0.1%), tests_pri_-950: 1.06 (0.0%), tests_pri_-900: 0.83 (0.0%), tests_pri_-400: 31 (0.6%), check_bayes: 30 (0.6%), b_tokenize: 9 (0.2%), b_tok_get_all: 12 (0.2%), b_comp_prob: 2.5 (0.1%), b_tok_touch_all: 3.2 (0.1%), b_finish: 0.66 (0.0%), tests_pri_0: 608 (12.1%), tests_pri_500: 4349 (86.6%), poll_dns_idle: 4339 (86.3%), rewrite_mail: 0.00 (0.0%) X-SA-Exim-Version: 4.2.1 (built Wed, 24 Sep 2014 11:00:52 -0600) X-SA-Exim-Scanned: Yes (on in02.mta.xmission.com) Archived-At: Cc: damien.saucez@inria.fr, draft-saucez-lisp-impact@tools.ietf.org, iesg@ietf.org, draft-ietf-lisp-impact@tools.ietf.org, secdir@ietf.org Subject: Re: [secdir] review of draft-saucez-lisp-impact-04.txt X-BeenThere: secdir@ietf.org X-Mailman-Version: 2.1.15 Precedence: list Reply-To: Hilarie Orman List-Id: Security Area Directorate List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 19 Oct 2015 19:04:49 -0000 [NB: this is in re draft-ietf-lisp-impact-04] A few comments and suggestions: Unless gleaning features (actually deprecated in RFC 6830 [RFC6830]) are used, I don't see that gleaning is deprecated. In any event, how does gleaning undermine security? the LISP data-plane shows the same level of security as other IP-over-IP technologies. From a security perspective, the control-plane remains the critical part of the LISP architecture. To maximally mitigate the threats on the mapping I doubt authentication is "maximal" mitigation. It just mitigates. system, authentication must be used, whenever possible, for all When would it be impossible to use authentication? control plane messages. Current specification already offer security mechanisms ([RFC6833], [I-D.ietf-lisp-sec]) able to strongly reduce threats in non-trustable environments such as the Internet. "The currenet specification defines security mechanisms which can reduce threats in open network environments" ? Actually, LISP specifications define a generic authentication data field control plane messages [RFC6830] allowing to propose a general authentication mechanisms for the LISP control-plane while staying backward compatible. "The LISP specification defines a generic authentication data field for control plane messages [RFC6830] which could be used for a general authentication mechanisms for the LISP control-plane while staying backward compatible. " ?? Hilarie > Subject: Re: review of draft-saucez-lisp-impact-04.txt > From: Luigi Iannone > Date: Sat, 17 Oct 2015 21:49:24 +0200 > Cc: Damien Saucez , > draft-saucez-lisp-impact@tools.ietf.org, secdir@ietf.org, > The IESG > Hi Hilarie, > In the current format the security section just states that actually > security is out of the scope of the document. > This was actually an outcome of the WG discussion, were it was > decided to clearly separate security and impact. > Yet, it is true that the security section is poor, while > security analysis is out of the scope of the document, it does not > mean that we cannot mention the major security points > thoroughly analysed in the threats document. > Hence we propose to modify the security section as follows: > Old Version: > Security and threats analysis of the LISP protocol is out of the > scope of the present document. A thorough analysis of LISP security > threats is detailed in [I-D.ietf-lisp-threats]. > NEW Version: > A thorough security and threats analysis of the LISP protocol > is carried out in details in [I-D.ietf-lisp-threats]. > Like for other Internet technologies, also for LISP most of > threats can be mitigated using Best Current Practice, meaning > with careful deployment an configuration (e.g., filter) and also > by activating only features that are really necessary in the > deployment and verifying all the information obtained from third > parties. Unless gleaning features (actually deprecated in > RFC 6830 [RFC6830]) are used, the LISP data-plane shows the > same level of security as other IP-over-IP technologies. > From a security perspective, the control-plane remains the > critical part of the LISP architecture. > To maximally mitigate the threats on the mapping > system, authentication must be used, whenever possible, for all > control plane messages. > Current specification already offer security mechanisms > ([RFC6833], [I-D.ietf-lisp-sec]) able to strongly reduce threats > in non-trustable environments such as the Internet. > Actually, LISP specifications define a generic authentication data field > control plane messages [RFC6830] allowing to propose a general > authentication mechanisms for the LISP control-plane while staying > backward compatible. > We hope this delivers the information you were looking for. > ciao > Luigi > > On 13 Oct 2015, at 19:28, Hilarie Orman wrote: > > > > Thanks for pointing out my mistake. I have now reviewed > > draft-ietf-lisp-impact-04 and the same comments about security apply. > > > > Hilarie > > > >> From: Damien Saucez > >> Date: Tue, 13 Oct 2015 08:13:08 +0200 > > > > > >> Thank you for the review. I would have a question regarding the document you reviewed. Did you review th > > > >> draft-sauces-lisp-impact-04 > > > >> or > > > >> draft-ietf-lisp-impact-04 > > > >> Thank you, > > > >> Damien Saucez > > > >> On 13 Oct 2015, at 05:01, Hilarie Orman wrote: > > > >>> Secdir review of LISP Impact > >>> draft-saucez-lisp-impact-04.txt > >>> > >>> Do not be alarmed. I have reviewed this document as part of the > >>> security directorate's ongoing effort to review all IETF documents > >>> being processed by the IESG. These comments were written primarily > >>> for the benefit of the security area directors. Document editors and > >>> WG chairs should treat these comments just like any other last call > >>> comments. > >>> > >>> A new way of handling routing information has been defined in IETF > >>> documents about the Locator/Identifier Separation Protocol (LISP). > >>> The draft under discussion here elaborates on the possible > >>> consequences of widespread use of LISP. > >>> > >>> The draft punts on security considerations and refers to previous > >>> documents describing threats to LISP and how LISP uses cryptography > >>> for protecting the integrity of its messages. > >>> > >>> It seems to me that if the purported impact of LISP is to "scale the > >>> Internet", then its impact on security should be a major part of the > >>> equation. Will it make routing information more or less vulnerable > >>> malicious manipulation? How will it affect the stability of a network > >>> that is under constant threat of attack? > >>> > >>> I don't feel that the draft can achieve its purpose without addressing > >>> security. > >>> > >>> Hilarie > >>> > >>> PS. I was very disappointed to realize that this was not a draft > >>> about my favorite programming language. From nobody Tue Oct 20 06:55:40 2015 Return-Path: X-Original-To: secdir@ietfa.amsl.com Delivered-To: secdir@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id D00F81A8FD6; Tue, 20 Oct 2015 06:55:38 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -14.511 X-Spam-Level: X-Spam-Status: No, score=-14.511 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_HI=-5, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id hoDb8ah-DZzy; Tue, 20 Oct 2015 06:55:34 -0700 (PDT) Received: from rcdn-iport-9.cisco.com (rcdn-iport-9.cisco.com [173.37.86.80]) (using TLSv1 with cipher RC4-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 2253B1A8AC0; Tue, 20 Oct 2015 06:55:34 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=5900; q=dns/txt; s=iport; t=1445349333; x=1446558933; h=from:to:subject:date:message-id:references:in-reply-to: content-id:content-transfer-encoding:mime-version; bh=5WsKLg+GjFqhichrVvSnPy6q14S09WIf9gx8Lp5lN3c=; b=ISybtWl6dmY5BvmRPUt/t2UoJrJ9wL0Lzbb/KH6rj30w4XwAg9r6TDoS UtL7txpqU5GzHc+k6c3zA8fCk1YL42yqnicz1N217lBmow2tbmuMx1/FM iTK/8hCTtPh0YvqGpm5FGaF4SBGR8X9dMfSX6ecWlmNNllbtrK+r7uHX6 Y=; X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: A0D4AQCBRyZW/4kNJK1VCYM2gUMGvhkBDYFahh4CHIEYOBQBAQEBAQEBgQqELQEBAQMBIxE3EwsCASACAh8HAgICMBUQAgQBEogoCLBbkxsBAQEBAQEBAQEBAQEBAQEBAQEBGoEihVWCEIJuhDEEPSKCaTGBFAWWJAGNHoFYh2OSZQEfAQFCghAeFoE/coQfQoEGAQEB X-IronPort-AV: E=Sophos;i="5.17,707,1437436800"; d="scan'208";a="37358415" Received: from alln-core-4.cisco.com ([173.36.13.137]) by rcdn-iport-9.cisco.com with ESMTP; 20 Oct 2015 13:55:32 +0000 Received: from XCH-RCD-004.cisco.com (xch-rcd-004.cisco.com [173.37.102.14]) by alln-core-4.cisco.com (8.14.5/8.14.5) with ESMTP id t9KDtW3I006426 (version=TLSv1/SSLv3 cipher=AES256-SHA bits=256 verify=FAIL); Tue, 20 Oct 2015 13:55:33 GMT Received: from xch-aln-004.cisco.com (173.36.7.14) by XCH-RCD-004.cisco.com (173.37.102.14) with Microsoft SMTP Server (TLS) id 15.0.1104.5; Tue, 20 Oct 2015 08:55:14 -0500 Received: from xch-aln-004.cisco.com ([173.36.7.14]) by XCH-ALN-004.cisco.com ([173.36.7.14]) with mapi id 15.00.1104.000; Tue, 20 Oct 2015 08:55:14 -0500 From: "Klaas Wierenga (kwiereng)" To: "draft-ietf-6man-predictable-fragment-id.all@tools.ietf.org" , "iesg@ietf.org" , "secdir@ietf.org" Thread-Topic: review of draft-ietf-6man-predictable-fragment-id-09 (was: Re: review of draft-ietf-6man-predictable-fragment-id-09) Thread-Index: AQHRCz7xTi0UWyR9Q0uLtfztLaAFVQ== Date: Tue, 20 Oct 2015 13:55:14 +0000 Message-ID: <09C2947A-6387-44C4-91A3-B52610E5CC50@cisco.com> References: <4F5FD3E9-B5A3-4AAB-A089-61B674B59ECC@cisco.com> <55F010E9.2060606@si6networks.com> <9566C08E-D9B5-4C34-888D-F8D77335B5E3@cisco.com> <560DAAF0.9060708@si6networks.com> In-Reply-To: <560DAAF0.9060708@si6networks.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-ms-exchange-messagesentrepresentingtype: 1 x-ms-exchange-transport-fromentityheader: Hosted x-originating-ip: [10.61.89.246] Content-Type: text/plain; charset="utf-8" Content-ID: <0F785423AF197149BCC0CF29224E39E4@emea.cisco.com> Content-Transfer-Encoding: base64 MIME-Version: 1.0 Archived-At: Subject: [secdir] review of draft-ietf-6man-predictable-fragment-id-09 (was: Re: review of draft-ietf-6man-predictable-fragment-id-09) X-BeenThere: secdir@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: Security Area Directorate List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 20 Oct 2015 13:55:39 -0000 SGksDQoNCkkgYW0gaGFwcHkgd2l0aCB0aGUgdXBkYXRlZCBkcmFmdC4NCg0KS2xhYXMNCg0KLS0N CktsYWFzIFdpZXJlbmdhDQpJZGVudGl0eSBBcmNoaXRlY3QNCkNpc2NvIENsb3VkIFNlcnZpY2Vz DQoNCg0KDQoNCg0KDQo+IE9uIDAxIE9jdCAyMDE1LCBhdCAyMzo1MSwgRmVybmFuZG8gR29udCA8 ZmdvbnRAc2k2bmV0d29ya3MuY29tPiB3cm90ZToNCj4gDQo+IEhpLCBLbGFhcywNCj4gDQo+IE9u IDA5LzA5LzIwMTUgMDc6MDIgQU0sIEtsYWFzIFdpZXJlbmdhIChrd2llcmVuZykgd3JvdGU6DQo+ Pj4gT24gMDkvMDkvMjAxNSAwNzoxMiBBTSwgS2xhYXMgV2llcmVuZ2EgKGt3aWVyZW5nKSB3cm90 ZToNCj4+Pj4gSSBiZWxpZXZlIHRoZSBkb2N1bWVudCBoYXMgc29tZSBpc3N1ZXMsIHNlZSBiZWxv dy4NCj4+Pj4gDQo+Pj4+IFRoZSBkb2N1bWVudCBkb2VzIGFuIGFuYWx5c2lzIG9mIHRoZSBzZWN1 cml0eSBpbXBsaWNhdGlvbnMgb2YgDQo+Pj4+IHByZWRpY3RhYmxlIGlkZW50aWZpY2F0aW9uIGZp ZWxkcyBhbmQgSSBiZWxpZXZlIChub3QgYmVpbmcgYW4NCj4+Pj4gSVB2NiBleHBlcnQpIHRoYXQg aXQgZG9lcyBhIGdvb2Qgam9iIGF0IHRoYXQuIFRoZSBhbmFseXNpcyBvZg0KPj4+PiB0aGUgcG90 ZW50aWFsIGV4cGxvaXRzIGlzIGNvbnZpbmNpbmcuIFdoZXJlIEkgYW0gc3RydWdnbGluZyBhIGJp dA0KPj4+PiBpcyB0aGUgYWxnb3JpdGhtcyBmb3Igc2VsZWN0aW5nIGZyYWdtZW50IGlkZW50aWZp Y2F0aW9uIHZhbHVlcw0KPj4+PiAoNSkuDQo+Pj4+IA0KPj4+PiBUaGUgaW50cm8gdGV4dCBzdGF0 ZXMgdGhhdCB0aGVyZSBhcmUg4oCYYSBudW1iZXIgb2YgYWxnb3JpdGhtcycsDQo+Pj4+IGJ1dCBy ZWFsbHkgdGhlcmUgYXJlIG9ubHkgMzogMS0gcGVyIGRlc3RpbmF0aW9uIGNvdW50ZXIgcmFuZG9t IA0KPj4+PiBpbml0aWFsaXNlZCAyLSByYW5kb20gdmFsdWUgMy0gaGFzaCBvdmVyIHNvdXJjZSwg ZGVzdGluYXRpb24sDQo+Pj4+IHNlY3JldCB3aXRoIGEgY291bnRlcg0KPj4+IA0KPj4+IEZXSVcs IHRoZXNlIGFyZSB0aHJlZSBjb25jcmV0ZSBhbGdvcml0aG1zLCBidXQgdGhhdCBkb2Vzbid0IG1l YW4NCj4+PiB0aGV5IGFyZSB0aGUgb25seSBwb3NzaWJsZSBvbmVz4oCmDQo+PiANCj4+IFN1cmUs IEkgdW5kZXJzdGFuZCB0aGF0LiBJdCBpcyBqdXN0IHdoZW4gSSByZWFkIGl0IEkgd2FzIHByZXBh cmluZw0KPj4gZm9yIGEgbG9uZyBsaXN0IHRvIGNvbWUsIHNvIEkgdGhpbmsgaXQgd291bGQgYmUg Z29vZCB0byBzdGF0ZQ0KPj4gc29tZXRoaW5nIGxpa2U6DQo+PiANCj4+IE9MRA0KPj4gDQo+PiBU aGlzIHNlY3Rpb24gc3BlY2lmaWVzIGEgbnVtYmVyIG9mIGFsZ29yaXRobXMgdGhhdCBtYXkgYmUg dXNlZCBmb3IgDQo+PiBzZWxlY3RpbmcgRnJhZ21lbnQgSWRlbnRpZmljYXRpb24gdmFsdWVzLg0K Pj4gDQo+PiBORVcNCj4+IA0KPj4gVGhlcmUgYXJlIGEgbnVtYmVyIG9mIGFsZ29yaXRobXMgdGhh dCBtYXkgYmUgdXNlZCBmb3Igc2VsZWN0aW5nDQo+PiBGcmFnbWVudCBJZGVudGlmaWNhdGlvbiB2 YWx1ZXMuIFRoaXMgc2VjdGlvbiBwcmVzZW50cyB0aHJlZSBvZg0KPj4gdGhvc2UuDQo+IA0KPiBX aWxsIGRvLiAodGhhbmtzIGZvciBwcm9wb3NpbmcgYSB3YXkgZm9yd2FyZCwgYnR3KS4NCj4gDQo+ IA0KPiANCj4+Pj4gMSBhbmQgMyBhcmUgZXNzZW50aWFsbHkgdGhlIHNhbWUsIHRoZSBoYXNoIGZ1 bmN0aW9uIGluIDMgcGVyZm9ybXMNCj4+Pj4gdGhlIHNhbWUgZnVuY3Rpb24gYXMgdGhlIHBzZXVk byByYW5kb20gZ2VuZXJhdGVkIGluaXRpYWwgdmFsdWUgaW4NCj4+Pj4gMSBpZiBJIGFtIG5vdCBt aXN0YWtlbi4NCj4+PiANCj4+PiBZZXMgYW5kIG5vLiAxIHJlcXVpcmVzIHN0YXRlLCBidXQgMyBk b2Vzbid0LiBUaGF0IG1lYW5zIHRoYXQsIGUuZy4sDQo+Pj4gaWYgeW91IGhhdmUgbG90J3Mgb2Yg Zmxvd3MgdG8gbWFueSBkaWZmZXJlbnQgZGVzdGluYXRpb25zLCB5b3UgbWF5DQo+Pj4gbmVlZCB0 byByZW1vdmUgc29tZSBlbnRyaWVzIGZyb20gdGhlIERlc3QgQ2FjaGUgKGFuZCB0aGVuIHlvdSBy dW4NCj4+PiB0aGUgcmlzayBvZiBGcmFnIElEIGNvbGxpc2lvbnMpLiBIb3dldmVyLCB0aGlzIGlz IG5vdCB0aGUgY2FzZSB3aXRoDQo+Pj4gYWxnb3JpdGhtICMzLg0KPj4gDQo+PiBnb29kIHBvaW50 LCBzbyBpcyB0aGVyZSBhbnkgY29tcGVsbGluZyByZWFzb24gdG8gc2VsZWN0IDEgb3ZlciAzPw0K PiANCj4gSXQgaXMgZ2VuZXJhbGx5IHRoZSBvdGhlciB3YXkgYXJvdW5kOiBmb3IgIzEsIGlmIHlv dSBuZWVkIHRvIHJlbW92ZSB0aGUNCj4gc3RhdGUgZnJvbSB0aGUgRGVzdGluYXRpb25zIENhY2hl LCB5b3UgcnVuIHRoZSByaXNrIG9mIGNvbGxpZGluZyBGcmFnDQo+IElEcy4gU28geW91IGNvdWxk IHNheSB0aGF0ICMxIGlzIG1vcmUgdHJpdmlhbCB0byBpbXBsZW1lbnQsIHdoZXJlYXMgIzMNCj4g aGFzIGJldHRlciBwcm9wZXJ0aWVzICh3aGVuIHRoZXJlIGFyZSBvbmdvaW5nIGNvbW11bmljYXRp b25zIHdpdGgNCj4gbXVsdGlwbGUgZGVzdGluYXRpb25zIHRoYXQgbWFrZSB5b3UgaGl0IHRoZSBs aW1pdCBvZiBlbnRyaWVzIGluIHRoZQ0KPiBEZXN0aW5hdGlvbiBDYWNoZSkuDQo+IA0KPiANCj4g DQo+Pj4+IFNvIHJlYWxseSB0aGUgY2hvaWNlIGlzIGJldHdlZW4gYSByYW5kb20gdmFsdWUgZm9y IGV2ZXJ5IGRhdGFncmFtDQo+Pj4+IG9yIGEgcmFuZG9tIHZhbHVlIGF0IGluaXRpYWxpc2F0aW9u IG9mIGEgY29ubmVjdGlvbiBhbmQNCj4+Pj4gaW5jcmVhc2luZyBieSAxIGZvciBldmVyeSBzdWJz ZXF1ZW50IGRhdGFncmFtLg0KPj4+PiANCj4+Pj4gSeKAmWQgcmVhbGx5IGxpa2UgdG8gc2VlIHNv bWUgcXVhbnRpdGF0aXZlIGFuYWx5c2lzIGFzIHRvIHRoZQ0KPj4+PiBpbXBhY3Qgb2YgYSByYW5k b20gdmFsdWUgcGVyIHBhY2tldCBhcyB3ZWxsIGFzIGJldHdlZW4gMSBhbmQgMy4NCj4+PiANCj4+ PiBJbXBhY3QgaW4gdGVybXMgb2Ygd2hhdD8NCj4+IA0KPj4gV2VsbCwgYXMgYW4gaW1wbGVtZW50 ZXIgSSB3YW50IHRvIGNob29zZSBiZXR3ZWVuIG9uZSBvZiB0aGUNCj4+IGFsZ29yaXRobXMgeW91 IHByb3Bvc2UuIEJ1dCBzaW5jZSBJIGhhdmUgbm8gY2x1ZSB3aGF0IHRoZSBwZW5hbHR5IGlzDQo+ PiBmb3IgZG9pbmcgcGVyIHBhY2tldCByYW5kb21pc2F0aW9uIGFzIG9wcG9zZWQgdG8gcGVyIGZs b3cgdGhhdCBpcw0KPj4gaGFyZC4NCj4gDQo+IFdlbCwgdGhlIHRoaW5nIGlzIHRoYXQsIHRvIGEg bGFyZ2UgZXh0ZW50LCBpdCBkZXBlbmRzIG9uIHRoZSBkZXRhaWxzIG9mDQo+IGltcGxlbWVudGF0 aW9uLiBlLmcuLCB3aGF0J3MgdGhlIGFsZ29yaXRobSB5b3UgdXNlIGZvciB0aGUgcmFuZG9uKCkN Cj4gZnVuY3Rpb24sIGV0Yy4NCj4gDQo+IA0KPiANCj4+IElmIHRoZSBjb3N0IG9mIGEgcHNldWRv cmFuZG9tIG9wZXJhdGlvbiBpcyBvdXR3ZWlnaGVkIGJ5IG90aGVyDQo+PiBmYWN0b3JzIGludm9s dmVkIGluIHNlbmRpbmcgYSBwYWNrZXQgSSB3b3VsZCBwcm9iYWJseSBjaG9vc2Ugb3B0aW9uDQo+ PiAyLiBNeSBndXQgZmVlbGluZyBzYXlzIGhvd2V2ZXIgdGhhdCBpdCBpcyBhIHByZXR0eSBleHBl bnNpdmUNCj4+IG9wZXJhdGlvbiB0byBkbyBvbiBhIHBlciBwYWNrZXQgYmFzaXMsIHNvIEkgd291 bGQgZXhwZWN0IHRoZSBhZHZpc2UNCj4+IHRvIGJlIOKAnHVzZSAxIG9yIDPigJ0gdW5sZXNz4oCm Li4NCj4gDQo+IFdlIHRyaWVkIHRvIHByb3ZpZGUgb3B0aW9ucyByYXRoZXIgdGhhbiBwdXNoaW5n IG9uZSBzcGVjaWZpYyBhbGdvcml0aG0uDQo+IA0KPiANCj4+IEFuZCBzaW1pbGFybHksIHdoYXQg aXMgdGhlIGNvc3Qgb2YgdGhlDQo+PiBoYXNoIHZlcnN1cyB0aGUgcHJnPyBJZiB0aGV5IGFyZSBj b21wYXJhYmxlIHdvdWxkIG9wdGlvbiAzIG5vdCBiZQ0KPj4gYmV0dGVyPw0KPiANCj4gSXQgZGVw ZW5kcyBvbiB3aGljaCBoYXNoIGZ1bmN0aW9uIHZzIFBSRy4gRm9yIGluc3RhbmNlLCB5b3UgY291 bGQgZW1wbG95DQo+IGEgaGFzaCBmdW5jdGlvbiBmb3IgdGhlIFBSRy4NCj4gDQo+IFNvIGFueSBh c3NlcnRpb24gb24gcGVyZm9ybWFjZSB3b3VsZCByZWFsbHkgYmUgcXVlc3Rpb25hYmxlLi4uDQo+ IA0KPiBUaG91Z2h0cz8NCj4gDQo+IFRoYW5rcyENCj4gDQo+IENoZWVycywNCj4gLS0gDQo+IEZl cm5hbmRvIEdvbnQNCj4gU0k2IE5ldHdvcmtzDQo+IGUtbWFpbDogZmdvbnRAc2k2bmV0d29ya3Mu Y29tDQo+IFBHUCBGaW5nZXJwcmludDogNjY2NiAzMUM2IEQ0ODQgNjNCMiA4RkIxIEUzQzQgQUUy NSAwRDU1IDFENEUgNzQ5Mg0KPiANCj4gDQo+IA0KPiANCg0K From nobody Thu Oct 22 01:42:08 2015 Return-Path: X-Original-To: secdir@ietfa.amsl.com Delivered-To: secdir@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 280991ACEAE for ; Thu, 22 Oct 2015 01:42:07 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.121 X-Spam-Level: X-Spam-Status: No, score=-1.121 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, SPF_NEUTRAL=0.779] autolearn=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id mAiGVTCRR3PF for ; Thu, 22 Oct 2015 01:42:05 -0700 (PDT) Received: from mail.kivinen.iki.fi (fireball.acr.fi [83.145.195.1]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id D59851ACE6F for ; Thu, 22 Oct 2015 01:42:04 -0700 (PDT) Received: from fireball.acr.fi (localhost [127.0.0.1]) by mail.kivinen.iki.fi (8.15.1/8.14.8) with ESMTPS id t9M8g1C6013008 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=NO) for ; Thu, 22 Oct 2015 11:42:01 +0300 (EEST) Received: (from kivinen@localhost) by fireball.acr.fi (8.15.1/8.14.8/Submit) id t9M8g02w029371; Thu, 22 Oct 2015 11:42:00 +0300 (EEST) MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit Message-ID: <22056.41304.758209.486325@fireball.acr.fi> Date: Thu, 22 Oct 2015 11:42:00 +0300 From: Tero Kivinen To: secdir@ietf.org X-Edit-Time: 0 min X-Total-Time: 0 min Archived-At: Subject: [secdir] Assignments X-BeenThere: secdir@ietf.org X-Mailman-Version: 2.1.15 Precedence: list Reply-To: secdir-secretary@mit.edu List-Id: Security Area Directorate List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 22 Oct 2015 08:42:07 -0000 Review instructions and related resources are at: http://tools.ietf.org/area/sec/trac/wiki/SecDirReview Carl Wallace is next in the rotation. For telechat 2015-10-22 Reviewer LC end Draft Chris Inacio T 2015-07-29 draft-ietf-homenet-dncp-11 Matt Lepinski T 2015-10-14 draft-ietf-pcp-port-set-11 Catherine Meadows T 2015-10-19 draft-ietf-trill-rfc7180bis-06 Russ Mundy T 2015-10-15 draft-ietf-aqm-ecn-benefits-06 Magnus Nystrom T 2015-10-21 draft-ietf-ippm-type-p-monitor-02 Vincent Roca T 2015-10-15 draft-ietf-pals-ms-pw-protection-03 For telechat 2015-11-19 Eric Osterweil T 2015-10-20 draft-ietf-mpls-lsp-ping-mpls-tp-oam-conf-14 Sean Turner T 2015-11-02 draft-ietf-sidr-rfc6485bis-04 Last calls and special requests: Donald Eastlake 2015-09-11 draft-ietf-dane-openpgpkey-05 Daniel Kahn Gillmor E None draft-ietf-rtcweb-security-08 Chris Inacio 2015-10-02 draft-ietf-lwig-ikev2-minimal-04 Warren Kumari 2015-10-26 draft-ietf-ipfix-mib-variable-export-09 Alexey Melnikov 2015-10-27 draft-mglt-ipsecme-clone-ike-sa-05 Rich Salz 2015-10-28 draft-ietf-ippm-checksum-trailer-03 Takeshi Takahashi E None draft-ietf-netconf-yang-push-00 Hannes Tschofenig 2015-10-30 draft-ietf-isis-route-preference-02 Tina TSOU 2015-11-02 draft-ietf-pcp-third-party-id-option-03 -- kivinen@iki.fi From nobody Thu Oct 22 05:17:36 2015 Return-Path: X-Original-To: secdir@ietfa.amsl.com Delivered-To: secdir@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 6832F1B3657; Thu, 22 Oct 2015 05:17:34 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -6.559 X-Spam-Level: X-Spam-Status: No, score=-6.559 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HELO_EQ_FR=0.35, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_HI=-5, T_RP_MATCHES_RCVD=-0.01] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id TSV9pOcLBW7J; Thu, 22 Oct 2015 05:17:32 -0700 (PDT) Received: from mail2-relais-roc.national.inria.fr (mail2-relais-roc.national.inria.fr [192.134.164.83]) (using TLSv1.2 with cipher RC4-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 888341B3655; Thu, 22 Oct 2015 05:17:31 -0700 (PDT) X-IronPort-AV: E=Sophos;i="5.20,182,1444687200"; d="asc'?scan'208,217";a="184010555" Received: from geve.inrialpes.fr ([194.199.24.116]) by mail2-relais-roc.national.inria.fr with ESMTP/TLS/DHE-RSA-AES256-SHA; 22 Oct 2015 14:17:29 +0200 From: Vincent Roca X-Pgp-Agent: GPGMail 2.5.2 Content-Type: multipart/signed; boundary="Apple-Mail=_319D0A96-25DC-4119-BABE-2A912ACB035A"; protocol="application/pgp-signature"; micalg=pgp-sha512 Date: Thu, 22 Oct 2015 14:17:28 +0200 Message-Id: <4EA4F51C-8A76-43F6-B53A-0473023933FE@inria.fr> To: IESG , secdir@ietf.org, draft-ietf-pals-ms-pw-protection@tools.ietf.org Mime-Version: 1.0 (Mac OS X Mail 8.2 \(2104\)) X-Mailer: Apple Mail (2.2104) Archived-At: Subject: [secdir] Secdir review of draft-ietf-pals-ms-pw-protection-03 X-BeenThere: secdir@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: Security Area Directorate List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 22 Oct 2015 12:17:34 -0000 --Apple-Mail=_319D0A96-25DC-4119-BABE-2A912ACB035A Content-Type: multipart/alternative; boundary="Apple-Mail=_B5BD50B0-BBD9-434C-AB92-AD6E97E0726A" --Apple-Mail=_B5BD50B0-BBD9-434C-AB92-AD6E97E0726A Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=utf-8 Hello, I have reviewed this document as part of the security directorate=E2=80=99= s ongoing effort to review all IETF documents being processed by the IESG. These comments were written primarily for the benefit of the security area directors. Document editors and WG chairs should treat these comments = just like any other last call comments. IMHO, the document is ready. This document refers to RFC 6478 and other RFCs for the security = considerations. Given that no new mechanism is defined this seems reasonable. Additional comments: - Introduction: the PSN acronym is not expanded nor introduced. - Fig. 1 refers to T-PE1 and T-PE2, while the corresponding description = mentions PE1 and PE2: =C2=AB In this figure, CE1 is connected to PE1 and CE2 is = connected to PE2." - typo, p.4: s/describes/describe in: =C2=AB Sections 6 = and 7 = of RFC 6870 describes=E2=80=A6= =C2=BB Also the references to section 6 and 7 point to the current I-D rather = than sections 6 and 7 of RFC 6870. Cheers, Vincent --Apple-Mail=_B5BD50B0-BBD9-434C-AB92-AD6E97E0726A Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset=utf-8 Hello,

I have reviewed this document as part of the = security directorate=E2=80=99s ongoing
effort to review = all IETF documents being processed by the IESG. These
comments were written primarily for the benefit of the = security area
directors.  Document editors and WG = chairs should treat these comments just
like any other = last call comments.


IMHO, the document = is ready.

This document refers to RFC 6478 and = other RFCs for the security considerations.
Given = that no new mechanism is defined this seems reasonable. 


Additional comments:

- Introduction: the PSN acronym is not = expanded nor introduced.

- Fig. 1 refers to T-PE1 and T-PE2, while the corresponding = description mentions PE1 and PE2:
= =C2=AB In this figure, CE1 is connected to PE1 and CE2 is = connected to PE2."

- typo, p.4: s/describes/describe in:
= =C2=AB Sections 6 and 7 of RFC 6870 = describes=E2=80=A6 =C2=BB
  Also the = references to section 6 and 7 point to the current I-D rather than = sections 6 and 7 of RFC 6870.
 
Cheers,


  Vincent
= --Apple-Mail=_B5BD50B0-BBD9-434C-AB92-AD6E97E0726A-- --Apple-Mail=_319D0A96-25DC-4119-BABE-2A912ACB035A Content-Transfer-Encoding: 7bit Content-Disposition: attachment; filename=signature.asc Content-Type: application/pgp-signature; name=signature.asc Content-Description: Message signed with OpenPGP using GPGMail -----BEGIN PGP SIGNATURE----- Comment: GPGTools - https://gpgtools.org iQIcBAEBCgAGBQJWKNPZAAoJEHBYw8t72N4rZPAP/11TkGM4PI7oXa+GKWO77BM+ vezJp1YZ7Q8AImOc5xDfXyPdMM2IaOInRj0AgdCuvPcNa40wGrKaKNYhfI4cY2GU YOGGcsYY/pqHe06pCQSz5yadZeerC2L9uG4KZ2ove77EssmHdCZH0QQcjPw9T5ym YbNQhPtsLAuZ5RPbYp6cDxpXZg2kF6geWbPL7sC3Eesqy3UwtYrDM/mBuV0Cl0wR YTg7JQluShZCaJHH0rnEhDIu2vh1jPBHDHl/udRjhWJ9KhjjwaPpmeXnTMWQ5s8M MCkiNLPMfYX6orUhRgwSaj7338GgTdq07QnXm7lxJXQaRZ7zHwm4LFPe47mQBnHt hiY+rgY9Gy+Uxss+UwFybQBmeSWpO27wCrtnHGrxUQwOuhAtFmgzz951GEaGTZOY oSolnBCTGO3TupR3wZzI3tvejvQLRrUwS5KavXuXf0vbNeibimHa7lyMQLvEkWOe B1KYxLF7+9kwA//oEJ6zj4Srv+vOQzNh0VsohGC3mZwUI5SeB+zTANm/JMR9VR4j AGLPt6MqG+nZ7m4Joq8gf6wTd27KEU4OZzUsSY/haEfS2bS6N8z6/E40O1EVsOA7 G8+GHiijEs7cRIwoSfoD6ClWPoMQybD1EZg9OnRSImU9e8rmLRGD3zoe3zm0dOtP kZDnYRU3rN/iPqHkvNZV =u8uS -----END PGP SIGNATURE----- --Apple-Mail=_319D0A96-25DC-4119-BABE-2A912ACB035A-- From nobody Thu Oct 22 06:10:01 2015 Return-Path: X-Original-To: secdir@ietfa.amsl.com Delivered-To: secdir@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C069D1A6F42; Thu, 22 Oct 2015 06:10:00 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.999 X-Spam-Level: X-Spam-Status: No, score=-1.999 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, SPF_PASS=-0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id R4jhWY51KOkh; Thu, 22 Oct 2015 06:09:59 -0700 (PDT) Received: from mail-wi0-x235.google.com (mail-wi0-x235.google.com [IPv6:2a00:1450:400c:c05::235]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id D3B1E1A21A5; Thu, 22 Oct 2015 06:09:58 -0700 (PDT) Received: by wicfx6 with SMTP id fx6so134940349wic.1; Thu, 22 Oct 2015 06:09:57 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:in-reply-to:references:from:date:message-id:subject:to :cc:content-type; bh=Cy4ZM8gbqlajBrn+t2fssyR0ZYigwVr1nyCd9tCK/IE=; b=VG6yLL+yoCgYR74XK1E2y/ugaqzFM5/snpcU+sLyBRKVx0tPZHmpwef9tVN2X1nuOB NWAhgfBY+E7ox0tw+zdWHonHY8OlTE4VJZegqFrovAcUTNlVZ1vKhMGKaHpzMmMyZ/dn rp3cHmENUgjUaZSTHxv31TKc0+rOVxuAY2ZWArUg/gz8jHBAjv6T5Z45uRyBSKtiQ8jU siTUNak83xlqQTJG961SgYZ3C/1ZDjiGjoVmlVLP/+wrOMs3G7sFS3Qt38ZR/BuGZPJw qEaLP4wBbZFcDBzwLSVaCL4EGD5jA13L8kubL1lwEQH49xdptnXvFLBfXc2bqr8h1scE ibWg== X-Received: by 10.180.81.199 with SMTP id c7mr16946147wiy.87.1445519397413; Thu, 22 Oct 2015 06:09:57 -0700 (PDT) MIME-Version: 1.0 Received: by 10.28.9.212 with HTTP; Thu, 22 Oct 2015 06:09:37 -0700 (PDT) In-Reply-To: <4EA4F51C-8A76-43F6-B53A-0473023933FE@inria.fr> References: <4EA4F51C-8A76-43F6-B53A-0473023933FE@inria.fr> From: "Andrew G. Malis" Date: Thu, 22 Oct 2015 09:09:37 -0400 Message-ID: To: Vincent Roca Content-Type: multipart/alternative; boundary=f46d0444029232edf80522b1368a Archived-At: Cc: draft-ietf-pals-ms-pw-protection@tools.ietf.org, IESG , secdir@ietf.org Subject: Re: [secdir] Secdir review of draft-ietf-pals-ms-pw-protection-03 X-BeenThere: secdir@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: Security Area Directorate List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 22 Oct 2015 13:10:00 -0000 --f46d0444029232edf80522b1368a Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: quoted-printable Vincent, Thanks for your comments! I=E2=80=99ve been updating the draft based on previously received comments,= and I=E2=80=99ve already corrected your first two additional comments. I=E2=80= =99ll fix the third one as well, thanks again for the close read. Cheers, Andy On Thu, Oct 22, 2015 at 8:17 AM, Vincent Roca wrote= : > Hello, > > I have reviewed this document as part of the security directorate=E2=80= =99s ongoing > effort to review all IETF documents being processed by the IESG. These > comments were written primarily for the benefit of the security area > directors. Document editors and WG chairs should treat these comments ju= st > like any other last call comments. > > > IMHO, the document is *ready.* > > This document refers to RFC 6478 and other RFCs for the security > considerations. > Given that no new mechanism is defined this seems reasonable. > > > Additional comments: > > - Introduction: the PSN acronym is not expanded nor introduced. > > - Fig. 1 refers to T-PE1 and T-PE2, while the corresponding description > mentions PE1 and PE2: > =C2=AB In this figure, CE1 is connected to PE1 and CE2 is connected to PE= 2." > > - typo, p.4: s/describes/describe in: > =C2=AB Sections 6 and 7 of RFC 6870 > describes=E2=80=A6 =C2=BB > Also the references to section 6 and 7 point to the current I-D rather > than sections 6 and 7 of RFC 6870. > > Cheers, > > > Vincent > --f46d0444029232edf80522b1368a Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: quoted-printable
Vincent,

Thanks for your comments!

I=E2=80=99ve been updating the draft based on previous= ly received comments, and I=E2=80=99ve already corrected your first two add= itional comments. I=E2=80=99ll fix the third one as well, thanks again for = the close read.

Cheers,
Andy
<= br>

On= Thu, Oct 22, 2015 at 8:17 AM, Vincent Roca <vincent.roca@inria.fr> wrote:
Hello,

I have reviewed this document as part of the = security directorate=E2=80=99s ongoing
effort to review all IETF documen= ts being processed by the IESG. These
comments were written primarily fo= r the benefit of the security area
directors.=C2=A0 Document editors and= WG chairs should treat these comments just
like any other last call com= ments.


IMHO, the document is=C2=A0read= y.

This document refers to RFC 6478 and other = RFCs for the security considerations.
Given that no new mechanism= is defined this seems reasonable.=C2=A0

=C2=A0 Also the re= ferences to section 6 and 7 point to the current I-D rather than sections 6= and 7 of RFC 6870.
=C2=A0
Cheers,

<= /div>

=C2=A0 Vincent

--f46d0444029232edf80522b1368a-- From nobody Thu Oct 22 07:18:07 2015 Return-Path: X-Original-To: secdir@ietfa.amsl.com Delivered-To: secdir@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 8B3131A893A; Sun, 11 Oct 2015 06:07:57 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: 1.009 X-Spam-Level: * X-Spam-Status: No, score=1.009 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, J_CHICKENPOX_84=0.6, MANGLED_MEDS=2.3, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001, T_HTML_ATTACH=0.01] autolearn=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id FWkZ_1WwSm03; Sun, 11 Oct 2015 06:07:50 -0700 (PDT) Received: from na01-bn1-obe.outbound.protection.outlook.com (mail-bn1on0702.outbound.protection.outlook.com [IPv6:2a01:111:f400:fc10::702]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id D64421A891C; Sun, 11 Oct 2015 06:07:49 -0700 (PDT) Received: from BY1PR0501MB1382.namprd05.prod.outlook.com (10.160.107.140) by BY1PR0501MB1159.namprd05.prod.outlook.com (10.160.104.11) with Microsoft SMTP Server (TLS) id 15.1.286.20; Sun, 11 Oct 2015 13:07:31 +0000 Received: from BY1PR0501MB1381.namprd05.prod.outlook.com (10.160.107.139) by BY1PR0501MB1382.namprd05.prod.outlook.com (10.160.107.140) with Microsoft SMTP Server (TLS) id 15.1.293.16; Sun, 11 Oct 2015 13:07:28 +0000 Received: from BY1PR0501MB1381.namprd05.prod.outlook.com ([10.160.107.139]) by BY1PR0501MB1381.namprd05.prod.outlook.com ([10.160.107.139]) with mapi id 15.01.0286.019; Sun, 11 Oct 2015 13:07:28 +0000 From: Shraddha Hegde To: "Acee Lindem (acee)" , Benjamin Kaduk , "iesg@ietf.org" , "secdir@ietf.org" , "draft-ietf-ospf-node-admin-tag.all@ietf.org" Thread-Topic: secdir review of draft-ietf-ospf-node-admin-tag-05 Thread-Index: AQHRAtRkmhe1qX1HzE+v6FQBX6gc055lH6mAgABoLJA= Date: Sun, 11 Oct 2015 13:07:28 +0000 Message-ID: References: In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: yes X-MS-TNEF-Correlator: authentication-results: spf=none (sender IP is ) smtp.mailfrom=shraddha@juniper.net; x-originating-ip: [116.197.184.14] x-microsoft-exchange-diagnostics: 1; BY1PR0501MB1382; 5:pvejb3/SQuR2V2pEG2rG9QhOtKqQaYc8+njiYw/wYsRg9vYZwh2R1NzBZqJ+7oQeGADLiqoEs+92asekEmX/nfuTdqpbBCGNRVzcUQLhXLWcDgbTzXtzFdUWXNmQmXVGrGoIzcfFdFQ/61CnmGylHw==; 24:5zZTCGMVbh2GZODyo0dHz4Q6K69KxzneEEsfWmgVPds88U6XJEnRSIPCm+gOdoaRr9m51WrFlJ7J4UDx3r3drO6elqkO/JdIahqp1Aw7xY4=; 20:gl4rp30XZb/MCwIq9+0DMJiK/XFrynq4YuQLtqQUMNhUqjU54wCjWuLwO4XOIqkPG9tqhfbdpjzSzufoSJWtnA== x-microsoft-antispam: UriScan:;BCL:0;PCL:0;RULEID:;SRVR:BY1PR0501MB1382; x-microsoft-antispam-prvs: x-exchange-antispam-report-test: UriScan:(95692535739014); x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(601004)(2401047)(520078)(5005006)(8121501046)(3002001); SRVR:BY1PR0501MB1382; BCL:0; PCL:0; RULEID:; SRVR:BY1PR0501MB1382; x-forefront-prvs: 0726B2D7A6 x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(6009001)(479174004)(377454003)(13464003)(189002)(24454002)(51914003)(164054003)(199003)(46102003)(10400500002)(110136002)(107886002)(5001960100002)(230783001)(33656002)(64706001)(189998001)(66066001)(74316001)(5001770100001)(81156007)(5008740100001)(2501003)(97736004)(5890100001)(2201001)(106356001)(76576001)(106116001)(105586002)(5002640100001)(11100500001)(99286002)(5004730100002)(86362001)(5007970100001)(19580395003)(19580405001)(5003600100002)(15975445007)(102836002)(77096005)(2171001)(87936001)(101416001)(2900100001)(2950100001)(76176999)(54356999)(50986999)(99936001)(122556002)(40100003)(92566002); DIR:OUT; SFP:1102; SCL:1; SRVR:BY1PR0501MB1382; H:BY1PR0501MB1381.namprd05.prod.outlook.com; FPR:; SPF:None; PTR:InfoNoRecords; MX:1; A:1; LANG:en; received-spf: None (protection.outlook.com: juniper.net does not designate permitted sender hosts) spamdiagnosticoutput: 1:23 spamdiagnosticmetadata: NSPM Content-Type: multipart/mixed; boundary="_002_BY1PR0501MB1381A8D06B804AE4508F371AD5320BY1PR0501MB1381_" MIME-Version: 1.0 X-MS-Exchange-CrossTenant-originalarrivaltime: 11 Oct 2015 13:07:28.4275 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: bea78b3c-4cdb-4130-854a-1d193232e5f4 X-MS-Exchange-Transport-CrossTenantHeadersStamped: BY1PR0501MB1382 X-Microsoft-Exchange-Diagnostics: 1; BY1PR0501MB1159; 2:kLH+7mQvPBynzOzEs6rClAf6mc2mrGfZu7Bu0oiP4Z2oSQcIOO61UmCOXXSKmPH7EgZiea4Fym0q67Mxj1WfHOE+88YDdCfGGv7QX/dpcCOcENt/UFYzHLTXHAjN6i+NzOiUqwPt50KhOW7Jrd0pTw+LSLziafsc3N4mUTgTmfA=; 23:JPkNQPrMTkyiOHxnfTVQ0P+7Z4v/7eVKZK9rois2NSIsf2K8itcw1dW24C0eWQtmVWQ2hWdu02b74HHCB5w0YYWiupY9Zy97Chp53bn5BNsKjZB8+8U6L3FN4iDEnnwIto8BeCcbKEnaC+gAfjuyEMlaenEOXHBcFRt1qOwl9+Eoik4SrqmFd7vGlZ433W6Q X-OriginatorOrg: juniper.net Archived-At: X-Mailman-Approved-At: Thu, 22 Oct 2015 07:18:02 -0700 Subject: Re: [secdir] secdir review of draft-ietf-ospf-node-admin-tag-05 X-BeenThere: secdir@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: Security Area Directorate List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 11 Oct 2015 13:07:57 -0000 --_002_BY1PR0501MB1381A8D06B804AE4508F371AD5320BY1PR0501MB1381_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 DQpUaGFua3MgQmVuIGZvciBkZXRhaWxlZCByZXZpZXcgY29tbWVudHMuVGhhbmtzIEFjZWUgZm9y IGNoaW1pbmctaW4uDQpGZXcgbW9yZSBleHBsYW5hdGlvbnMgaW4tbGluZS4NCg0KLS0tLS1Pcmln aW5hbCBNZXNzYWdlLS0tLS0NCkZyb206IEFjZWUgTGluZGVtIChhY2VlKSBbbWFpbHRvOmFjZWVA Y2lzY28uY29tXSANClNlbnQ6IFN1bmRheSwgT2N0b2JlciAxMSwgMjAxNSAxOjA0IEFNDQpUbzog QmVuamFtaW4gS2FkdWsgPGthZHVrQE1JVC5FRFU+OyBpZXNnQGlldGYub3JnOyBzZWNkaXJAaWV0 Zi5vcmc7IGRyYWZ0LWlldGYtb3NwZi1ub2RlLWFkbWluLXRhZy5hbGxAaWV0Zi5vcmcNClN1Ympl Y3Q6IFJlOiBzZWNkaXIgcmV2aWV3IG9mIGRyYWZ0LWlldGYtb3NwZi1ub2RlLWFkbWluLXRhZy0w NQ0KDQpIaSBCZW4sIA0KDQpBcyB0aGUgZG9jdW1lbnQgc2hlcGhlcmQgYW5kIGEgbG9uZy10aW1l IE9TUEYgY29udHJpYnV0b3IsIEnigJltIGdvaW5nIHRvIHRyeSBhbmQgc29ydCBvdXQgc29tZSBv ZiB5b3VyIGNvbW1lbnRzLiBOb3RlIHRoYXQgcm91dGUgdGFnZ2luZyBoYXMgYmVlbiBpbiB1c2Ug Zm9yIGRlY2FkZXMgYW5kIHRoaXMgZG9jdW1lbnQgaXMgbWVyZWx5IGV4dGVuZGluZyB0aGUgYWRt aW5pc3RyYXRpdmUgcG9saWNpZXMgYWR2ZXJ0aXNlbWVudCB0byB0aGUgbm9kZSBsZXZlbC4NCg0K T24gMTAvOS8xNSwgNDo1MiBQTSwgIkJlbmphbWluIEthZHVrIiA8a2FkdWtATUlULkVEVT4gd3Jv dGU6DQoNCj5JIGhhdmUgcmV2aWV3ZWQgdGhpcyBkb2N1bWVudCBhcyBwYXJ0IG9mIHRoZSBzZWN1 cml0eSBkaXJlY3RvcmF0ZSdzIA0KPm9uZ29pbmcgZWZmb3J0IHRvIHJldmlldyBhbGwgSUVURiBk b2N1bWVudHMgYmVpbmcgcHJvY2Vzc2VkIGJ5IHRoZSANCj5JRVNHLiAgVGhlc2UgY29tbWVudHMg d2VyZSB3cml0dGVuIHByaW1hcmlseSBmb3IgdGhlIGJlbmVmaXQgb2YgdGhlIA0KPnNlY3VyaXR5 IGFyZWEgZGlyZWN0b3JzLiAgRG9jdW1lbnQgZWRpdG9ycyBhbmQgV0cgY2hhaXJzIHNob3VsZCB0 cmVhdCANCj50aGVzZSBjb21tZW50cyBqdXN0IGxpa2UgYW55IG90aGVyIGxhc3QgY2FsbCBjb21t ZW50cy4NCj4NCj5JIHdpbGwgcHJlZmFjZSB0aGVzZSBjb21tZW50cyB3aXRoIGEgbm90ZSB0aGF0 IG15IHJvdXRpbmcgYmFja2dyb3VuZCBpcyANCj5xdWl0ZSB3ZWFrLCBhbmQgSSBuZWVkZWQgdG8g cmVhZCBSRkMgMjMyOCBhbmQgUkZDIDQ5NzAgdG8gaGF2ZSBlbm91Z2ggDQo+Y29udGV4dCB0byBi ZSBhYmxlIHRvIHNheSBtdWNoIHVzZWZ1bCBhYm91dCB3aGF0J3MgZ29pbmcgb24gaGVyZTsgSSBt YXkgDQo+c3RpbGwgYmUgc3VmZmVyaW5nIGZyb20gc29tZSBtaXNjb25jZXB0aW9ucy4NCj4NCj5P biB0aGUgd2hvbGUsIHRoaXMgZG9jdW1lbnQgbGVhdmVzIG1lIGZlZWxpbmcgdW5zYXRpc2ZpZWQ7 IGl0IHNwZW5kcyANCj5tYXliZSB0aHJlZSBwYWdlcyB0YWxraW5nIGFib3V0IHRoZSBhY3R1YWwg bmV3IHByb3RvY29sIGV4dGVuc2lvbiBhbmQgDQo+dGhlbiBnaXZlcyBmb3VyIHBhZ2VzIG9mIGV4 YW1wbGUgdXNhZ2UsIGFsbCB0aGUgd2hpbGUgY2xhaW1pbmcgdGhhdCB0aGUgDQo+YWN0dWFsIHRh ZyB2YWx1ZXMgYXJlIG9ubHkgbWVhbmluZ2Z1bCB3aXRoaW4gYSBzaW5nbGUgYWRtaW5pc3RyYXRp dmUgDQo+ZG9tYWluL25ldHdvcmssIGFyZSBmb3IgZ2VuZXJpYyB1c2UsIGFuZCBkbyBub3QgcmVx dWlyZSBhbiBJQU5BIA0KPnJlZ2lzdHJ5LiAgVGhhdCBpcywgaXQgaXMgdHJ5aW5nIHRvIHdhbGsg YSBtaWRkbGUgbGluZSBiZXR3ZWVuICJ0aGlzIA0KPmRvY3VtZW50IGFsbG9jYXRlcyBhIHZhbHVl IGluIHRoZSBPU1BGIFRMVnMgcmVnaXN0cnkgZm9yIHNpdGUtbG9jYWwgDQo+dXNlLCB1c2UgaXQg YXMgeW91IHdpbGwiIGFuZCAidGhpcyBkb2N1bWVudCBzcGVjaWZpZXMgYSBjb21wbGV0ZSANCj5w cm90b2NvbCBleHRlbnNpb24gZm9yIHRhZ2dpbmcgT1NQRiBub2RlcyBmb3IgdHJhZmZpYyBlbmdp bmVlcmluZywgTEZBLCANCj5hbmQgb3RoZXIgcHVycG9zZXMiLiAgVGhhdCBpcyBhIGhhcmQgbWlk ZGxlIGxpbmUgdG8gZm9sbG93LCBhbmQgSSBhbSBub3Qgc3VyZSB0aGF0IHRoaXMgZG9jdW1lbnQg ZG9lcyBzbyBzdWNjZXNzZnVsbHkuDQo+SSB3aWxsIG5vdCB0cnkgdG8gcmVvcGVuIHRoZSBxdWVz dGlvbiBvZiB3aGV0aGVyIGl0IHdvdWxkIGJlIGJldHRlciB0byANCj50YWtlIG9uZSBvZiB0aGUg bm9uLW1pZGRsZSBwYXRocywgYW5kIGNvbnRpbnVlIG9uIHRoZSBhc3N1bXB0aW9uIHRoYXQgDQo+ dGhpcyBkb2N1bWVudCB3aWxsIHRha2UgdGhlIG1pZGRsZSBwYXRoLiAgSSB0aGluayB0aGVyZSBh cmUgYSBmZXcgDQo+dGhpbmdzIHRoYXQgYXJlIG1pc3NpbmcgYmVmb3JlIHRoaXMgZG9jdW1lbnQg c2hvdWxkIGJlIHB1Ymxpc2hlZCwgYW5kIA0KPnRoYXQgaXQgbWlnaHQgYmUgd29ydGggY29uc2lk ZXJpbmcgYSBtb3JlIGRyYXN0aWMgcmVzdHJ1Y3R1cmluZyBhcyB3ZWxsLg0KPg0KPkl0IHdvdWxk IHByb2JhYmx5IGJlIGdvb2QgdG8gaW5jbHVkZSBzb21lIHRleHQgd2l0aCB0aGUgcmVhc29uaW5n IA0KPmJlaGluZCB0aGUgY2hvaWNlIG9mIHRoZSAibWlkZGxlIGxpbmUiIC0tIHRoZSBjdXJyZW50 IHRleHQgYXR0ZW1wdGluZyANCj50byBlbmZvcmNlIGl0LCAibmV3IE9TUEYgZXh0ZW5zaW9ucyBN VVNUIE5PVCByZXF1aXJlIHVzZSBvZiBwZXItbm9kZSANCj5hZG1pbmlzdHJhdGl2ZSB0YWdzIG9y IGRlZmluZSB3ZWxsLWtub3duIHRhZyB2YWx1ZXMiLCBzZWVtcyANCj51bmVuZm9yY2FibGUsIGFz IGEgZnV0dXJlIFJGQyB1cGRhdGluZyB0aGlzIG9uZSBjb3VsZCBqdXN0IHJlbW92ZSB0aGF0IHJl c3RyaWN0aW9uLg0KDQpUaGUgaW50ZW50IGhlcmUgaXMgdGhhdCB0aGlzIFRMViBpcyB0byBiZSBz b2xlbHkgZm9yIGxvY2FsbHkgZGVmaW5lZCBwb2xpY2llcy4gSWYgdGhlcmUgd2VyZSB0byBiZSBh IFRMViBmb3Igd2VsbC1rbm93biB0YWdzIGFuZCBwb2xpY2llcywgdGhpcyBjb3VsZCBiZSBhY2Nv bXBsaXNoZWQgd2l0aCBhIHNlcGFyYXRlIE9TUEYgUkkgVExWLiBJIGFncmVlIHRoYXQgdGhlIG5v cm1hdGl2ZSB0ZXh0IHNob3VsZCBiZSBzb2Z0ZW5lZCBmcm9tIOKAnE1VU1QgTk9U4oCdIHRvIOKA nGFyZSBub3QgZXhwZWN0ZWQgdG/igJ0uIA0KDQo8U2hyYWRkaGE+IFRoZXJlIHdhcyBhIGxvbmcg ZGlzY3Vzc2lvbiBvbiB0aGUgbWFpbGluZyBsaXN0IG9uIHdoZXRoZXIgd2Ugc2hvdWxkIGFsbG93 IHdlbGwgZGVmaW5lZCB2YWx1ZXMgZm9yIHRoZSBhZG1pbiB0YWdzIG1ham9yaXR5IGNvbnNlbnN1 cyB3YXMgdGhhdCB3ZSBzaG91bGQgbm90IGFsbG93IGFueSBzdGFuZGFyZCB2YWx1ZXMgZm9yIG5v ZGUgYWRtaW4gdGFncyBhbmQgaW4gZnV0dXJlIGlmIHN1Y2ggYSByZXF1aXJlbWVudCBhcmlzZXMg aXQnbGwgZ28gYXMgbmV3IGZlYXR1cmUgaW4gUkkgVExWIGFzIEFjZWUgYWxyZWFkeSBtZW50aW9u ZWQuIEkgYW0gdHJ5aW5nIHRvIHVuZGVyc3RhbmQgd2h5IHRoZSB0ZXh0IG5lZWQgdG8gYmUgc29m dGVuZWQgd2hlbiBhbnkgZnV0dXJlIHN0YW5kYXJkaXphdGlvbiB3b3VsZCBuZWVkIGFsdG9nZXRo ZXIgYSBuZXcgZG9jdW1lbnQgYW5kIHdpbGwgbm90IHJlcXVpcmUgYW55IGNoYW5nZXMgdG8gdGhp cyBkb2N1bWVudC4NCj4NCj5JdCBsb29rcyBsaWtlIHRoZXJlJ3Mgbm93IGFuIC0wNiwgYnV0IHRo ZSBjaGFuZ2VzIGZyb20gdGhlIC0wNSBhcmUgbm90IA0KPnNpZ25pZmljYW50LiAgVGhlIHNlY3Vy aXR5IGNvbnNpZGVyYXRpb25zIGluIHRoZSAtMDUgY29ycmVjdGx5IG5vdGUgDQo+d2hhdCBhcmUg ZXNzZW50aWFsbHkgcHJpdmFjeSBjb25zaWRlcmF0aW9ucyByZWdhcmRpbmcgdGhlIGNvbnRlbnRz IG9mIA0KPnRoZSBhZG1pbiB0YWdzLiAgSG93ZXZlciwgaXQgc2VlbXMgbGlrZSB0aGVyZSBhcmUg YWxzbyBwb3RlbnRpYWwgDQo+c2VjdXJpdHkgY29uc2lkZXJhdGlvbnMgb24gdGhlIGFjdHVhbCBv cGVyYXRpb24gb2YgdGhlIG5ldHdvcmsgdGhhdCBhcmUgDQo+bm90IGRpc2N1c3NlZCBoZXJlLCBu b3IgaW4gUkZDIDIzMjggKE9TUEZ2Mikgb3IgUkZDIDUzNDAgKE9TUEZ2MykuICBSRkMgDQo+NTM0 MCdzIHNlY3VyaXR5IGNvbnNpZGVyYXRpb25zIGV4cGxpY2l0bHkgZGlzY2xhaW1zIHByb3RlY3Rp b25zIGFnYWluc3QgDQo+Y29tcHJvbWlzZWQsIG1hbGZ1bmN0aW9uaW5nLCBvciBtaXNjb25maWd1 cmVkIHJvdXRlcnMsIGRlZmVycmluZyB0byBSRkMgDQo+NDU5MywgIkdlbmVyaWMgVGhyZWF0cyB0 byBSb3V0aW5nIFByb3RvY29scyIuICBJIGJlbGlldmUgdGhhdCB0aGUgDQo+c2VjdXJpdHkgY29u c2lkZXJhdGlvbnMgb2YgdGhpcyBkb2N1bWVudCBzaG91bGQgYWRkcmVzcywgZWl0aGVyIA0KPmRp cmVjdGx5IG9yIGluZGlyZWN0bHksIHByb3RlY3Rpb25zIGFnYWluc3QgY29tcHJvbWlzZWQsIA0K Pm1hbGZ1bmN0aW9uaW5nLCBvciBtaXNjb25maWd1cmVkIHJvdXRlcnMsIGFuZCBhZGRpdGlvbmFs bHkgcHJvdGVjdGlvbiANCj5hZ2FpbnN0IG1hbGljaW91cyBhY3RvcnMgd2l0aCBhY2Nlc3MgdG8g dGhlIGxheWVyLTMgbmV0d29yayAoYW5kIG1heWJlIA0KPmxvd2VyIGxheWVycyBhcyB3ZWxsKS4N Cj4NCj5UaGF0IHByb2JhYmx5IG1lYW5zIG1lbnRpb25pbmcgUkZDIDQ1OTMgZGlyZWN0bHksIG9y IG1heWJlIGp1c3QgDQo+cG9pbnRpbmcgb3V0IHRoYXQgUkZDIDUzNDAgZG9lcyBzby4gIFRoZXJl IGFyZSBzdGlsbCBhZGRpdGlvbmFsIA0KPmNvbnNpZGVyYXRpb25zIGludHJvZHVjZWQgYnkgdGhp cyBkb2N1bWVudCwgdGhvdWdoOyB1bmZvcnR1bmF0ZWx5LCANCj5iZWNhdXNlIHRoZSBidWxrIG9m IHRoZSBpbnRlcnByZXRhdGlvbiBvZiB0aGUgYWRtaW4gdGFncyBpcyBsZWZ0IHRvIHRoZSANCj5z aXRlIGFkbWluaXN0cmF0b3IsIGl0IGlzIGhhcmQgdG8gZ2l2ZSBhIGNvbXByZWhlbnNpdmUgc2Vj dXJpdHkgDQo+YW5hbHlzaXMsIGJ1dCB0aGUgZXhhbXBsZXMgYW5kIHRoZSBwcm90b2NvbCBkZXNj cmlwdGlvbiBpdHNlbGYgZG8gZ2l2ZSBzb21lIGFyZWFzIGZvciBjb25zaWRlcmF0aW9uLg0KDQpU aGUgZG9jdW1lbnQgY291bGQgcmVmZXJlbmNlIFJGQyA0NTkzL1JGQyA2ODYzIGFuZCBzdGF0ZSB0 aGF0IGF1dGhlbnRpY2F0aW9uIGFzIHNwZWNpZmllZCBpbiBSRkMgNzQ3NCBvciBSRkMgNzE2NiBT SE9VTEQgYmUgdXNlZCBpbiBkZXBsb3ltZW50cyB3aGVyZSBhdHRhY2tlcnMgaGF2ZSBhY2Nlc3Mg dG8gdGhlIHBoeXNpY2FsIG5ldHdvcmtzIGluY2x1ZGVkIGluIHRoZSBPU1BGIGRvbWFpbiBhcmUg dnVsbmVyYWJsZS4NCjxTaHJhZGRoYT4gb2suIFVwZGF0aW5nIHRoZSBTZWN1cml0eSBjb25zaWRl cmF0aW9uIHNlY3Rpb24NCg0KDQoNCj4NCj5UaGUgUkkgTFNBcyBjYXJyeWluZyBhZG1pbmlzdHJh dGl2ZSB0YWdzIGNhbiBiZSBhdCBsaW5rLSwgYXJlYS0sIG9yIA0KPkFTLWxldmVsIHNjb3BlOyBh biBhZG1pbmlzdHJhdG9yIGFzc2lnbmluZyB0YWcgdmFsdWVzIGFuZCBhc3NvY2lhdGVkIA0KPnBv bGljaWVzIHNob3VsZCBjb25zaWRlciB3aGF0IHdvdWxkIGhhcHBlbiBpZiBhIGdpdmVuIHRhZyB3 YXMgDQo+YWR2ZXJ0aXNlZCBhdCBhIGRpZmZlcmVudCBzY29wZSB0aGFuIGludGVuZGVkLiAgQ29t cGxpYW50IA0KPmltcGxlbWVudGF0aW9ucyBNVVNUIE5PVCBnZW5lcmF0ZSB0aGUgc2FtZSB0YWcg YXQgZGlmZmVyZW50IHNjb3BlcywgYnV0IA0KPmEgcmVjZWl2ZXIgd291bGQgbmVlZCB0byB0YWtl IHNvbWUgYWN0aW9uIGlmIGl0IGhhcHBlbmVkLCB3aGV0aGVyIGR1ZSANCj50byBuZXR3b3JrIGds aXRjaCBvciBtYWxpY2lvdXMgYWN0aW9uIC0tIHdoYXQgc2hvdWxkIHRoZXkgZG8/DQoNCknigJlt IG5vdCBhbiBhdXRob3IsIGJ1dCB0aGlzIGlzIHdoYXQgSeKAmWQgcmVjb21tZW5kOg0KDQogICBU aGUgY29uZmxpY3RpbmcgdGFnIFNIT1VMRCBub3QgYmUgdXNlZCBhbmQgdGhpcyBzaXR1YXRpb24g U0hPVUxEIGJlIGxvZ2dlZCBhcyBhbiBlcnJvciBpbmNsdWRpbmcgdGhlIHRhZyB3aXRoIGNvbmZs aWN0aW5nIHNjb3BlcyBhbmQgdGhlIG9yaWdpbmF0b3IocykuIA0KPFNocmFkZGhhPiBVcGRhdGVk IHRoZSBkb2N1bWVudCB3aXRoIGFib3ZlIHN0YXRlbWVudC4NCg0KVGhlcmUgaXMgYSBjYXNlIHRo YXQgbXVzdCBiZSBhbGxvd2VkIC0gdGhlIHNhbWUgdGFnIGNvdWxkIGJlIHJlY2VpdmVkIGJ5IGFu IEFCUiBhdCBib3RoIHRoZSBBUyBzY29wZSBhbmQgdGhlIGFyZWEgc2NvcGUgaW4gYSBzdHViIG9y IE5TU0EgYXJlYS4NCjxTaHJhZGRoYT4gQ291bGQgeW91IHBscyBlbGFib3JhdGUgdGhlIGNhc2Uu IEkgZG9uJ3QgcXVpdGUgdW5kZXJzdGFuZCB3aHkgdGhlIEFCUiBpbiBhIHN0dWIvTlNTQSBhcmVh IHdvdWxkIGdlbmVyYXRlIG9yIHJlY2VpdmUgUkkgTFNBcyB3aXRoIGRpZmZlcmVudCBzY29wZXMu SSB0aGluayBpdCdzIHBlcmZlY3RseSB2YWxpZCB0byBmbG9vZCB0aGUgQVMgc2NvcGVkIFJJIExT QXMgaW50byB0aGUgc3R1YiAvIE5TU0EgYXJlYS4NCg0KDQo+DQo+QW5vdGhlciBwb3RlbnRpYWwg aXNzdWUgbGllcyBpbiB0aGUgInN0aWNraW5lc3MiIG9mIHRoZSBhZG1pbiB0YWdzIC0tIA0KPnRo ZSB0ZXh0ICJ0aGUgbm9kZSBhZG1pbmlzdHJhdGl2ZSB0YWdzIGFzc29jaWF0ZWQgd2l0aCBhIG5v ZGUgZm9yIHRoZSANCj5wdXJwb3NlIG9mIGFueSBjb21wdXRhdGlvbiBvciBwcm9jZXNzaW5nIFNI T1VMRCBiZSBhIHN1cGVyc2V0IG9mIG5vZGUgDQo+YWRtaW5pc3RyYXRpdmUgdGFncyBmcm9tIGFs bCB0aGUgVExWcyBpbiBhbGwgaW5zdGFuY2VzIG9mIHRoZSBSSSBMU0EgDQo+b3JpZ2luYXRlZCBi eSB0aGF0IG5vZGUiIHNlZW1zIHRvIG1lYW4gdGhhdCBvbmNlIGEgdGFnIGlzIHNldCwgaXQgDQo+ Y2Fubm90DQo+KGVhc2lseSkgYmUgdW5zZXQuICBXb3VsZCBmb3JjZS1leHBpcmluZyBhbiBMU0Eg YmUgZW5vdWdoIHRvIHJlc2V0IHRoZSANCj50YWcsIG9yIHNvbWV0aGluZyBlbHNlPwkNCg0KWWVz IC0gdGhpcyBpcyBzdGFuZGFyZCBmb3IgYW55IE9TUEYgTFNBLiBIb3dldmVyLCBzaW5jZSB0aGUg T1NQRiBSSSBMU0EgbWF5IGluY2x1ZGUgb3RoZXIgVExWcyBvciBldmVuIG90aGVyIHRhZ3MsIGEg dGFnIGNvdWxkIGFsc28gYmUgd2l0aGRyYXduIGJ5IHJlb3JpZ2luYXRpbmcgdGhlIFJJIExTQSB3 aXRob3V0IHRoZSBUTFYgb3Igd2l0aCBhIFRMViB0aGF0IGRvZXNu4oCZdCBpbmNsdWRlIHRoZSB3 aXRoZHJhd24gdGFnLg0KDQo+IEhvdyBkaXNydXB0aXZlIHdvdWxkIHRoYXQgYmU/ICBJdCB3b3Vs ZCBiZSBoZWxwZnVsIHRvIHNlZSBzb21lIA0KPmRpc2N1c3Npb24gb2YgaG93IGEgdGFnIHdvdWxk IGJlIHJlbW92ZWQuDQoNCkkgbWF5IG9mIHdvcmtlZCBvbiBPU1BGIGZvciB0b28gbG9uZyBidXQg dGhpcyBzaG91bGQgYmUgb2J2aW91cyB0byBhbnlvbmUgaW1wbGVtZW50aW5nIHRoZSBkcmFmdCBm cm9tIHRoZSBzcGVjaWZpY2F0aW9uLg0KPFNocmFkZGhhPiBUaGUgYmVsb3cgcGFyYWdyYXBoIChm cm9tIC0wNyB2ZXJzaW9uKSBpcyBjbGVhciBvbiB0aGlzIEkgaG9wZS4NCg0KIldoZW4gdGhlcmUg aXMgYSBjaGFuZ2Ugb3IgcmVtb3ZhbCBvZiBhbiBhZG1pbmlzdHJhdGl2ZSBhZmZpbGlhdGlvbiBv ZiBhIG5vZGUsIA0KICAgdGhlIG5vZGUgTVVTVCByZS1vcmlnaW5hdGUgdGhlIFJJIExTQSB3aXRo IHRoZSBsYXRlc3Qgc2V0IG9mIG5vZGUgYWRtaW5pc3RyYXRpdmUgdGFncy4NCiAgIE9uIHRoZSBy ZWNlaXZlciwgV2hlbiB0aGVyZSBpcyBhIGNoYW5nZSBpbiB0aGUgbm9kZSBhZG1pbmlzdHJhdGl2 ZSB0YWcgVExWIG9yIHJlbW92YWwvDQogICBhZGRpdGlvbiBvZiBhIFRMViBpbiBhbnkgaW5zdGFu Y2Ugb2YgdGhlIFJJLUxTQSwgaW1wbGVtZW50YXRpb25zIE1VU1QNCiAgIHRha2UgYXBwcm9wcmlh dGUgbWVhc3VyZXMgdG8gdXBkYXRlIGl0cyBzdGF0ZSBhY2NvcmRpbmcgdG8gdGhlDQogICBjaGFu Z2VkIHNldCBvZiB0YWdzLiAgRXhhY3QgYWN0aW9ucyBkZXBlbmQgb24gZmVhdHVyZXMgd29ya2lu ZyB3aXRoDQogICBhZG1pbmlzdHJhdGl2ZSB0YWdzIGFuZCBpcyBvdXRzaWRlIG9mIHNjb3BlIG9m IHRoaXMgc3BlY2lmaWNhdGlvbi4iDQoNCg0KDQoNCj4NCj5UaGF0IGlzIHBhcnRpY3VsYXJseSBl YXN5IGZvciBhbiBhdHRhY2tlciB3aGVuIHRoZSBudWxsIE9TUEYgDQo+YXV0aGVudGljYXRpb24g bWVjaGFuaXNtIGlzIGluIHVzZSAoaG93IGNvbW1vbiBpcyB0aGF0PyAgSSBzYXcgc29tZSANCj53 ZWJzaXRlcyBpbmRpY2F0aW5nIGl0IHdhcyB0aGUgZGVmYXVsdCBiZWhhdmlvciwgYXQgbGVhc3Qg c29tZXRpbWVzKS4gIA0KPkkgZG8gbm90IHNlZSBhIG5lZWQgdG8gdHVybiB0aGlzIGRvY3VtZW50 IGludG8gInNlY3VyaXR5IGNvbnNpZGVyYXRpb25zIA0KPmZvciBPU1BGIGF1dGhlbnRpY2F0aW9u IiwgYnV0IG1heWJlIGl0IGlzIHdvcnRoIG1lbnRpb25pbmcgc29tZSB0aGluZ3M6IA0KPnRoZQ0K Pm1kNSBzY2hlbWUgc2VlbXMgcHJldHR5IHdlZWsgYXQgdGhpcyBwb2ludCAodGhvdWdoIHByb2Jh Ymx5IG5vdCANCj50cml2aWFsbHkgYnJva2VuKSwgdGhlIGhtYWMtc2hhIHNjaGVtZSBvZiBSRkMg NTcwOSBpcyBvbmx5IGZyb20gMjAwOSwgDQo+YW5kIFJGQyA3NDc0IChvbmx5IHNpeCBtb250aHMg b2xkKSBwb2ludHMgb3V0IGNhc2VzIHdoZXJlIGJvdGggYXJlIA0KPnN1c2NlcHRpYmxlIHRvIHJl cGxheSBhdHRhY2tzLiAgSnVzdCBsb29raW5nIGF0IHRoZSBzZWN1cml0eSANCj5jb25zaWRlcmF0 aW9ucyBvZiB0aGlzIGRvY3VtZW50IGFuZCB0aGUgY29yZSBPU1BGIHYyL3YzIHNwZWNzIGRvZXMg bm90IA0KPmNvbnZleSB0aGlzIHRvIHRoZSByZWFkZXIsIHNvIEkgd291bGQgbGlrZSB0byBzZWUg YXQgbGVhc3QgYSBwb2ludGVyIHRvIA0KPnN1Y2ggY29uc2lkZXJhdGlvbnMuICAoVGhlIHN0YW5j ZSBvZiBSRkMgMjMyOCB0aGF0ICJhbGwgT1NQRiBwcm90b2NvbCBleGNoYW5nZXMgYXJlIGF1dGhl bnRpY2F0ZWQiDQo+c2VlbXMgcGFydGljdWxhcmx5IGRpc2luZ2Vub3VzIGdpdmVuIHRoZSBwcmVz ZW5jZSBvZiB0aGUgbnVsbCANCj5hdXRoZW50aWNhdGlvbiBzY2hlbWUuKQ0KDQpJIHRoaW5rIGJv dGggUkZDIDc0NzQgYW5kIFJGQyA3MTc2IHNob3VsZCBiZSByZWZlcmVuY2VkLiBUaGUgT1NQRiB2 dWxuZXJhYmlsaXR5IHRvIHJlcGxheSBhdHRhY2tzIHRvIE9TUEZ2Mi9PU1BGdjMgcm91dGVycyBp bXBsZW1lbnRpbmcgdGhlc2Ugc3BlY2lmaWNhdGlvbnMgaXMgZXh0cmVtZWx5IHNtYWxsIGFuZCBo YXMgYmVlbiByZWR1Y2VkIGFzIG11Y2ggYXMgcHJhY3RpY2FsLiBJZiB5b3UgYXJlIHN0aWxsIGNv bmNlcm5lZCwgSSBzdWdnZXN0IHlvdSBkaXNjdXNzIHdpdGggU2FtIEhhcnRtYW4gKGFsc28gb25j ZSBhZmZpbGlhdGVkIHdpdGggTUlUKS4NCjxTaHJhZGRoYT4gU2VjdXJpdHkgY29uc2lkZXJhdGlv biBzZWN0aW9uIHVwZGF0ZWQgd2l0aCB0aGUgcmVmZXJlbmNlIHRvIFJGQyA3NDc0IGFuZCA3MTc2 Lg0KDQo+DQo+VGhlcmUgaXMgYWxzbyB0aGUgcG9zc2liaWxpdHkgdGhhdCBhbiBhdHRhY2tlciBj b3VsZCBibG9jayBkZWxpdmVyeSBvZiANCj5hbiBMU0EsIGNhdXNpbmcgYSB0YWcgdGhhdCBzaG91 bGQgYmUgc2V0IHRvIG5vdCBiZSBzZWVuLiAgVGhpcyBzZWVtcyANCj51bmxpa2VseSBmb3Igd2ly ZWQgcG9pbnQtdG8tcG9pbnQgbGlua3MsIGJ1dCBpcyBtb3JlIHBsYXVzaWJsZSBpbiBvdGhlciAN Cj5lbnZpcm9ubWVudHMsIHN1Y2ggYXMgcmFkaW8gbGlua3MuICBJIHRoaW5rIEkgY2FuIGltYWdp bmUgc2NlbmFyaW9zIA0KPndoZXJlIHRoaXMgd291bGQgY2F1c2UgZHJhc3RpYyBkYW1hZ2UgdG8g dGhlIHJvdXRpbmcgdG9wb2xvZ3kuDQoNClRoZSBkZXNjcmlwdGlvbiBhbmQgbWl0aWdhdGlvbiBv ZiBzdWNoIGEgZ2VuZXJpYyB0aHJlYXQgZG9lc27igJl0IGJlbG9uZyBpbiBhIG1pbm9yICh0aG91 Z2ggaW1wb3J0YW50KSBPU1BGIHNwZWNpZmljYXRpb24uIFRoZSBlZmZlY3Qgb2YgYmxvY2tpbmcg Y29udHJvbCB0cmFmZmljIGlzIG5ldmVyIHBvc2l0aXZlIDteKS4gQXQgbGVhc3QgT1NQRiB1c2Vz IHJlbGlhYmxlIGZsb29kaW5nIHNvIGl0IHdpbGwgYmUgcmV0cmFuc21pdHRlZC4NCjxTaHJhZGRo YT4gQWdyZWUgd2l0aCBBY2VlIG9uIHRoaXMuDQoNCg0KPg0KPlRoZSBwYXJlbnRoZXRpY2FsIGlu IHNlY3Rpb24gMy4yIHdoZXJlaW4gcm91dGVycyBtaWdodCBhZHZlcnRpc2UgYQ0KPnBlci1ub2Rl IGFtaW5pc3RyYXRpdmUgdGFnICJ3aXRob3V0IGtub3dpbmcgKG9yIGV2ZW4gZXhwbGljaXRseQ0K PnN1cHBvcnRpbmcpIGZ1bmN0aW9uYWxpdHkgaW1wbGllZCBieSB0aGUgdGFnIiBzZWVtcyBwb3Rl bnRpYWxseSANCj5kYW5nZXJvdXMsIHNpbmNlIGl0IHNvdW5kcyBsaWtlIHRoZSByb3V0ZXJzIGlu IHF1ZXN0aW9uIGFyZSBseWluZyBhYm91dCANCj50aGVpciBjYXBhYmlsaXRpZXMuICBXb3VsZCB0 aGUgZG9jdW1lbnQgc3VmZmVyIGhhcm0gaWYgdGhlIA0KPnBhcmVudGhldGljYWwgd2FzIHJlbW92 ZWQ/DQoNCkluIG15IG9waW5pb24sIG5vIGhhcm0gdG8gcmVtb3ZlIC0gbWlzY29uZmlndXJhdGlv biBpcyBhbG1vc3QgYWx3YXlzIGFuIGlzc3VlLiANCjxTaHJhZGRoYT4gSXQncyBwZXJmZWN0bHkg dmFsaWQgZm9yIGEgbm9kZSBvcmlnaW5hdGUgYSB0YWcgd2hlbiB0aGUgbm9kZSBpdHNlbGYgZG9l cyBub3QNClByb2Nlc3MgYW55IHRhZ3MuIEkgdGhpbmsgdGhlIHNlbnRlbmNlIG5lZWRzIHRvIGJl IHJlcGhyYXNlZC4gQ2hhbmdpbmcgaXQgYXMgYmVsb3cuDQoNCjx0Pk1lYW5pbmcgb2YgdGhlIE5v ZGUgYWRtaW5pc3RyYXRpdmUgdGFncyBpcyBnZW5lcmFsbHkNCm9wYXF1ZSB0byBPU1BGLiBSb3V0 ZXIgYWR2ZXJ0aXNpbmcgdGhlIHBlci1ub2RlDQphZG1pbmlzdHJhdGl2ZSB0YWcgKG9yIHRhZ3Mp IG1heSBiZSBjb25maWd1cmVkIHRvIGRvIHNvDQp3aXRob3V0IGtub3dpbmcgKG9yIGV2ZW4gd2l0 aG91dCBzdXBwb3J0aW5nIHByb2Nlc3Npbmcgb2YpDQpmdW5jdGlvbmFsaXR5IGltcGxpZWQgYnkg dGhlIHRhZy48L3Q+DQoNCg0KPg0KPk9uZSByZWFzb24gSSBhbSB1bnNhdGlzZmllZCBieSBtYWtp bmcgdGhlIGludGVycHJldGF0aW9uIG9mIHRoZSB0YWcgDQo+dmFsdWVzIHNwZWNpZmljIHRvIGFu IGFkbWluaXN0cmF0aXZlIGRvbWFpbiBpcyB0aGF0IGEgbWlzY29uZmlndXJlZCANCj5ib3JkZXIg cm91dGVyIG1pZ2h0IGVycm9uZW91c2x5IHVzZSB0YWcgdmFsdWVzIGZyb20gb25lIGRvbWFpbiBv biB0aGUgDQo+b3RoZXIgc2lkZSBvZiB0aGUgYm9yZGVyLg0KPiBQZXJoYXBzIHRoZSBvdGhlciBk YW1hZ2UgZnJvbSBhIHJvdXRlciBtaXNjb25maWd1cmVkIGluIHN1Y2ggYSBmYXNoaW9uIA0KPndv dWxkIGR3YXJmIHRoZSBhZGRpdGlvbmFsIGRhbWFnZSBmcm9tIHRoZSBtaXNpbnRlcnByZXRlZCB0 YWdzIGFuZCBzbyANCj5teSBjb25jZXJuIGlzIGludmFsaWQ7IEkgcmVhbGx5IGNhbid0IHNheS4N Cg0KQWdhaW4sIEkgZG9u4oCZdCB0aGluayBtaXNjb25maWd1cmF0aW9uIG5lZWRzIHRvIGJlIGNv dmVyZWQgLSAiZW1wdG9yIGNhdmV0ZeKAnS4gDQoNCjxTaHJhZGRoYT4gLTA3IHZlcnNpb24gYWRk cmVzc2VzIHRoaXMgaXNzdWUuDQoNCiJBZHZlcnRpc2VtZW50IG9mIHRhZyB2YWx1ZXMgZm9yIG9u ZSBhZG1pbmlzdHJhdGl2ZSBkb21haW4gaW50byANCmFub3RoZXIgIHJpc2tzIG1pc2ludGVycHJl dGF0aW9uIG9mIHRoZSB0YWcgdmFsdWVzIChpZiB0aGUgdHdvIGRvbWFpbnMgaGF2ZSBhc3NpZ25l ZCANCmRpZmZlcmVudCBtZWFuaW5ncyB0byB0aGUgc2FtZSB2YWx1ZXMpLCB3aGljaCBtYXkgaGF2 ZSB1bmRlc2lyYWJsZSBhbmQgdW5hbnRpY2lwYXRlZCBzaWRlDQplZmZlY3RzLiINCg0KVGhhbmtz IGZvciB0aGUgZWRpdG9yaWFsIHJldmlldyBhcyB3ZWxsLiBTcGVhayBhcyBXRyBjaGFpciwgSSBh cHByZWNpYXRlIHRoaXMuIA0KDQpUaGFua3MsDQpBY2VlIA0KDQoNCj4NCj4NCj4NCj4NCj5JIGFs c28gaGF2ZSBzb21lIGVkaXRvcmlhbCBjb21tZW50cyB1bnJlbGF0ZWQgdG8gdGhlIHNlY2RpciBy ZXZpZXc6DQo+DQo+U2VjdGlvbiAzLjIgcmVhZHMgcmF0aGVyIGxpa2UgYSBqdW1ibGVkIGxpc3Qg YW5kIGNvdWxkIGJlbmVmaXQgZnJvbSANCj5zb21lIGFkZGl0aW9uYWwgc3RydWN0dXJlLg0KPg0K PlNpbWlsYXJseSwgSSB3b3VsZCBmaW5kIGl0IGhlbHBmdWwgaWYgdGhlcmUgd2FzIHNvbWUgdGV4 dCBtb3RpdmF0aW5nIA0KPnRoZSAibWlkZGxlIHBhdGNoIiBtZW50aW9uZWQgYWJvdmUsIHRvd2Fy ZHMgdGhlIGJlZ2lubmluZyBvZiB0aGUgDQo+dGVjaG5pY2FsDQo+KG5vbi1leGFtcGxlKSBwb3J0 aW9uIG9mIHRoZSBkb2N1bWVudC4NCj4NCj5Gb3IgYSBjb25zdHJ1Y3Rpb24gYXMgd2Vha2x5IHN0 cnVjdHVyZWQgYXMgdGhlc2UgYWRtaW5pc3RyYXRpdmUgdGFncywgDQo+cHJldmVudGluZyBhbnkg aW50ZXJuYWwgc3RydWN0dXJlIG9yIGRlcGVuZGVuY2llcyBiZXR3ZWVuIHRhZ3MgKGFzIHRoaXMg DQo+ZG9jdW1lbnQgYXR0ZW1wdHMgdG8gZG8pIHNlZW1zIGNvcnJlY3QuICBIb3dldmVyLCB0aGlz IHNlbnRpbWVudCBzZWVtcyANCj50byBiZSBleHByZXNzZWQgZGlmZmVyZW50bHkgaW4gc2V2ZXJh bCBkaWZmZXJlbnQgcGxhY2VzIGluIHRoZSANCj5kb2N1bWVudCwgYW5kIGl0IHdvdWxkIGJlIGdv b2QgdG8gY29uc29saWRhdGUgYW5kIGNvb3JkaW5hdGUgdGhlbS4gIEluIA0KPnBhcnRpY3VsYXIs IHBhcmFncmFwaCAzIG9mIHNlY3Rpb24gMy4yIGV4cGxpY2l0bHkgc2F5cyB0aGF0IHRhZyBvcmRl ciANCj5oYXMgbm8gbWVhbmluZywgYnV0IHBhcmFncmFwaCA0IGhhcyB0aGUgd2Vha2VyICJTSE9V TEQgYmUgY29uc2lkZXJlZCBhbiB1bm9yZGVyZWQgbGlzdCIuDQo+KFRoZSB3b3JkICJzZXQiIG1p Z2h0IGJlIGFwcHJvcHJpYXRlIGhlcmUuKQ0KPg0KPlBhcmFncmFwaCA3IG9mIHNlY3Rpb24gMy4y IHNlZW1zIHRvIGJlIHRyeWluZyB0byBzYXkgdGhhdCB0aGUgDQo+YWRtaW5pc3RyYXRpdmUgdGFn cyBtdXN0IGluZGljYXRlIGluaGVyZW50IG9yIGFkbWluaXN0cmF0aXZlbHkgDQo+Y29uZmlndXJl ZCBwcm9wZXJ0aWVzIG9mIGEgbm9kZSBhbmQgbXVzdCBub3QgYmUgdXNlZCB0byBjb252ZXkgDQo+ YXR0cmlidXRlcyBvZiB0aGUgcm91dGluZyB0b3BvbG9neS4gIChUaGUgd29yZCAidGllIiBzZWVt cyANCj5pbnN1ZmZpY2llbnRseSBjbGVhci4pDQo+DQo+TWFueSAoYnV0IG5vdCBhbGwpIG9mIHRo ZSBhY3Jvbnltcy9hYmJyZXZpYXRpb25zIHNob3VsZCBiZSBleHBhbmRlZCBhdCANCj5maXJzdCB1 c2UgLS0gdGhlIG9uZXMgbWFya2VkIHdpdGggYSAnKicgYXQgDQo+aHR0cHM6Ly93d3cucmZjLWVk aXRvci5vcmcvbWF0ZXJpYWxzL2FiYnJldi5leHBhbnNpb24udHh0IGFyZSBhc3N1bWVkIA0KPnRv IGJlIGNvbW1vbiBrbm93bGVkZ2UgYW5kIGRvIG5vdCBuZWVkIGV4cGFuc2lvbi4gIE90aGVyIHRo aW5ncywgbGlrZSANCj50cmFmZmljIGVuZ2luZWVyaW5nLCByb3V0ZXIgaW5mb3JtYXRpb24sIGxp bmsgc3RhdGVtZW50IGFkdmVydGlzZW1lbnQsIA0KPmF1dG9ub21vdXMgc3lzdGVtLCBldGMuLCBz aG91bGQgYmUgd3JpdHRlbiBvdXQgaW4gZnVsbCBhdCB0aGVpciBmaXJzdCANCj51c2UsIHdpdGgg dGhlIGFiYnJldmlhdGVkIHZlcnNpb24gaW4gcGFyZW50aGVzZXMgYWZ0ZXJ3YXJkcy4NCj4NCj5U aGUgZmlyc3QgcGFyYWdyYXBoIG9mIHNlY3Rpb24gMSBjb250YWlucyBhIGxpc3Qgb2YgcG90ZW50 aWFsIA0KPmFwcGxpY2F0aW9uczsgcGxlYXNlIHVzZSBzb21lIFhNTCBtYXJrdXAgdG8gcHJlc2Vy dmUgdGhlIGxpc3Qgc3RydWN0dXJlIA0KPmluIHRoZSByZW5kZXJlZCBkb2N1bWVudC4NCj4NCj5Q bGFzZSBnaXZlIGFuIGluZm9ybWF0aXZlIHJlZmVyZW5jZSBmb3IgTG9vcCBGcmVlIEFsdGVybmF0 ZSBiYWNrdXAgDQo+c2VsZWN0aW9uIGF0IGl0cyBmaXJzdCBhcHBlYXJhbmNlLg0KPg0KPlRoZSBk aXZpZGVyIGJldHdlZW4gdGhlIHR5cGUgYW5kIGxlbmd0aCBmaWVsZHMgaW4gRmlndXJlIDEgaXMg cGxhY2VkIA0KPm9uZSBiaXQgdG8gdGhlIGxlZnQgb2YgdGhlIGNvcnJlY3QgZGl2aXNpb24gZm9y IHR3byAxNi1iaXQgZmllbGRzLiAgKEluIA0KPm1hbnkgY2FzZXMgdGhlIHBvc2l0aW9uIGluZGlj YXRvcnMgYWJvdmUgdGhlIGRpYWdyYW0gYXJlIG9mZnNldCBieSBvbmUgDQo+c3BhY2Ugc28gdGhl eSBsYW5kIG92ZXIgdGhlICctJ3MgaW5zdGVhZCBvZiB0aGUgJysncywgYnV0IHRoZXJlIGlzIHNv bWUgDQo+YXJndW1lbnQgZm9yIHB1dHRpbmcgdGhlbSBpbiB0aGVpciBjdXJyZW50IGxvY2F0aW9u LCBhcyB3ZWxsLikNCj4NCj5JbiB0aGUgc2V2ZW50aCBwYXJhZ3JhcGggb2Ygc2VjdGlvbiAzLjIs IEkgdGhpbmsgaXQgd291bGQgYmUgZmluZSB0byANCj5qdXN0IHJlbW92ZSB0aGUgImJ1dCBub3Qg bGltaXRlZCB0byIgY2xhdXNlLCB3aGljaCBpcyBub3QgcXVpdGUgY29ycmVjdCANCj5ncmFtbWFy IGFuZCBpcyBub3QgcmVhbGx5IG5lZWRlZC4NCj4NCj5UaGUgbGFzdCBwYXJhZ3JhcGggb2Ygc2Vj dGlvbiAzLjIgY291bGQgcHJvYmFibHkgYmUgd3JpdHRlbiBtb3JlIGNsZWFybHkuDQo+SW4gcGFy dGljdWxhciwgImluIGFueSBpbnN0YW5jZSBvZiB0aGUgUkktTFNBIiBpcyBub3QgZW50aXJlbHkg Y2xlYXIgdG8gDQo+bWUgKGJ1dCB0aGVuIGFnYWluLCBJIGRvbid0IHJlYWxseSB1bmRlcnN0YW5k IGhvdyBMU0FzIG5vcm1hbGx5IHdvcmspLiAgDQo+SXMgaXQgZW5vdWdoIHRvIGp1c3Qgc2F5IHRo YXQgaW1wbGVtZW50YXRpb25zIE1VU1QgZGV0ZWN0IHdoZW4gdGhlIA0KPmFkbWluaXN0cmF0aXZl IHRhZ3MgYXNzb2NpYXRlZCB3aXRoIGEgZ2l2ZW4gbm9kZSBjaGFuZ2UsIGFuZCB1cGRhdGUgDQo+ dGhlaXIgc3RhdGUgYWNjb3JkaW5nbHk/DQo+DQo+SW4gc2VjdGlvbiA0LjUsIEkgZG8gbm90IHNl ZSB0aGF0IHRoZSBjb25zdHJhaW50ICJUcmFmZmljIGZyb20gQSBub2RlcyANCj50byBJIG5vZGVz IG11c3Qgbm90IGdvIHRocm91Z2ggUiBhbmQgVCBub2RlcyIgY2FuIGJlIHNhdGlzZmllZCBmb3Ig dGhlIA0KPmxlZnRtb3N0IHBhaXIgb2YgQSBub2Rlcy4NCj4NCj5JIGFtIGFsc28gYXR0YWNoaW5n IGEgZGlmZiB0byB0aGUgeG1sIHNvdXJjZXMgd2l0aCBzb21lIGdyYW1tYXIgZml4ZXMgDQo+bm90 IHdvcnRoIGVudW1lcmF0aW5nIGV4cGxpY2l0bHkuDQo+DQo+LUJlbiBLYWR1aw0KDQo= --_002_BY1PR0501MB1381A8D06B804AE4508F371AD5320BY1PR0501MB1381_ Content-Type: text/html; name="Diff draft-ietf-ospf-node-admin-tag-07.txt - draft-ietf-ospf-node-admin-tag-08.txt.htm" Content-Description: Diff draft-ietf-ospf-node-admin-tag-07.txt - draft-ietf-ospf-node-admin-tag-08.txt.htm Content-Disposition: attachment; filename="Diff draft-ietf-ospf-node-admin-tag-07.txt - draft-ietf-ospf-node-admin-tag-08.txt.htm"; size=56843; creation-date="Sun, 11 Oct 2015 13:06:13 GMT"; modification-date="Sun, 11 Oct 2015 13:06:13 GMT" Content-Transfer-Encoding: base64 PGh0bWw+PGhlYWQ+DQo8bWV0YSBodHRwLWVxdWl2PSJjb250ZW50LXR5cGUiIGNvbnRlbnQ9InRl eHQvaHRtbDsgY2hhcnNldD1VVEYtOCI+PC9oZWFkPjxib2R5PkNvbnRlbnQtVHlwZTogdGV4dC9o dG1sDQoNCg0KIA0KPCEtLSBHZW5lcmF0ZWQgYnkgcmZjZGlmZiAxLjQyOiByZmNkaWZmICAtLT4g DQo8IS0tIDwhRE9DVFlQRSBodG1sIFBVQkxJQyAiLS8vVzNDLy9EVEQgSFRNTCA0LjAxIFRyYW5z aXRpb25hbCIgPiAtLT4NCjwhLS0gU3lzdGVtOiBMaW51eCB6aW5mYW5kZWwgMy4yLjAtNC1hbWQ2 NCAjMSBTTVAgRGViaWFuIDMuMi42OC0xK2RlYjd1MiB4ODZfNjQgR05VL0xpbnV4IC0tPiANCjwh LS0gVXNpbmcgYXdrOiAvdXNyL2Jpbi9nYXdrOiBHTlUgQXdrIDQuMC4xIC0tPiANCjwhLS0gVXNp bmcgZGlmZjogL3Vzci9iaW4vZGlmZjogZGlmZiAoR05VIGRpZmZ1dGlscykgMy4yIC0tPiANCjwh LS0gVXNpbmcgd2RpZmY6IC91c3IvYmluL3dkaWZmOiB3ZGlmZiAoR05VIHdkaWZmKSAxLjEuMiAt LT4gDQogDQogDQogIDxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIgY29udGVudD0idGV4 dC9odG1sOyBjaGFyc2V0PVVURi04Ij4gDQogIDxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtU3R5 bGUtVHlwZSIgY29udGVudD0idGV4dC9jc3MiPiANCiAgPHRpdGxlPkRpZmY6IGRyYWZ0LWlldGYt b3NwZi1ub2RlLWFkbWluLXRhZy0wNy50eHQgLSBkcmFmdC1pZXRmLW9zcGYtbm9kZS1hZG1pbi10 YWctMDgudHh0PC90aXRsZT4gDQogIDxzdHlsZSB0eXBlPSJ0ZXh0L2NzcyI+IA0KICAgIGJvZHkg ICAgeyBtYXJnaW46IDAuNGV4OyBtYXJnaW4tcmlnaHQ6IGF1dG87IH0gDQogICAgdHIgICAgICB7 IH0gDQogICAgdGQgICAgICB7IHdoaXRlLXNwYWNlOiBwcmU7IGZvbnQtZmFtaWx5OiBtb25vc3Bh Y2U7IHZlcnRpY2FsLWFsaWduOiB0b3A7IGZvbnQtc2l6ZTogMC44NmVtO30gDQogICAgdGggICAg ICB7IGZvbnQtc2l6ZTogMC44NmVtOyB9IA0KICAgIC5zbWFsbCAgeyBmb250LXNpemU6IDAuNmVt OyBmb250LXN0eWxlOiBpdGFsaWM7IGZvbnQtZmFtaWx5OiBWZXJkYW5hLCBIZWx2ZXRpY2EsIHNh bnMtc2VyaWY7IH0gDQogICAgLmxlZnQgICB7IGJhY2tncm91bmQtY29sb3I6ICNFRUU7IH0gDQog ICAgLnJpZ2h0ICB7IGJhY2tncm91bmQtY29sb3I6ICNGRkY7IH0gDQogICAgLmRpZmYgICB7IGJh Y2tncm91bmQtY29sb3I6ICNDQ0Y7IH0gDQogICAgLmxibG9jayB7IGJhY2tncm91bmQtY29sb3I6 ICNCRkI7IH0gDQogICAgLnJibG9jayB7IGJhY2tncm91bmQtY29sb3I6ICNGRjg7IH0gDQogICAg Lmluc2VydCB7IGJhY2tncm91bmQtY29sb3I6ICM4RkY7IH0gDQogICAgLmRlbGV0ZSB7IGJhY2tn cm91bmQtY29sb3I6ICNBQ0Y7IH0gDQogICAgLnZvaWQgICB7IGJhY2tncm91bmQtY29sb3I6ICNG RkI7IH0gDQogICAgLmNvbnQgICB7IGJhY2tncm91bmQtY29sb3I6ICNFRUU7IH0gDQogICAgLmxp bmViciB7IGJhY2tncm91bmQtY29sb3I6ICNBQUE7IH0gDQogICAgLmxpbmVubyB7IGNvbG9yOiBy ZWQ7IGJhY2tncm91bmQtY29sb3I6ICNGRkY7IGZvbnQtc2l6ZTogMC43ZW07IHRleHQtYWxpZ246 IHJpZ2h0OyBwYWRkaW5nOiAwIDJweDsgfSANCiAgICAuZWxpcHNpc3sgYmFja2dyb3VuZC1jb2xv cjogI0FBQTsgfSANCiAgICAubGVmdCAuY29udCB7IGJhY2tncm91bmQtY29sb3I6ICNEREQ7IH0g DQogICAgLnJpZ2h0IC5jb250IHsgYmFja2dyb3VuZC1jb2xvcjogI0VFRTsgfSANCiAgICAubGJs b2NrIC5jb250IHsgYmFja2dyb3VuZC1jb2xvcjogIzlEOTsgfSANCiAgICAucmJsb2NrIC5jb250 IHsgYmFja2dyb3VuZC1jb2xvcjogI0RENjsgfSANCiAgICAuaW5zZXJ0IC5jb250IHsgYmFja2dy b3VuZC1jb2xvcjogIzBERDsgfSANCiAgICAuZGVsZXRlIC5jb250IHsgYmFja2dyb3VuZC1jb2xv cjogIzhBRDsgfSANCiAgICAuc3RhdHMsIC5zdGF0cyB0ZCwgLnN0YXRzIHRoIHsgYmFja2dyb3Vu ZC1jb2xvcjogI0VFRTsgcGFkZGluZzogMnB4IDA7IH0gDQogIDwvc3R5bGU+IA0KIA0KIA0KICA8 dGFibGUgYm9yZGVyPSIwIiBjZWxscGFkZGluZz0iMCIgY2VsbHNwYWNpbmc9IjAiPiANCiAgPHRi b2R5Pjx0ciBiZ2NvbG9yPSJvcmFuZ2UiPjx0aD48L3RoPjx0aD48YSBocmVmPSJodHRwczovL3Rv b2xzLmlldGYub3JnL3JmY2RpZmY/dXJsMj1kcmFmdC1pZXRmLW9zcGYtbm9kZS1hZG1pbi10YWct MDcudHh0IiBzdHlsZT0iY29sb3I6IzAwODsgdGV4dC1kZWNvcmF0aW9uOm5vbmU7Ij4mbHQ7PC9h PiZuYnNwOzxhIGhyZWY9Imh0dHBzOi8vdG9vbHMuaWV0Zi5vcmcvaHRtbC9kcmFmdC1pZXRmLW9z cGYtbm9kZS1hZG1pbi10YWctMDcudHh0IiBzdHlsZT0iY29sb3I6IzAwOCI+ZHJhZnQtaWV0Zi1v c3BmLW5vZGUtYWRtaW4tdGFnLTA3LnR4dDwvYT4mbmJzcDs8L3RoPjx0aD4gPC90aD48dGg+Jm5i c3A7PGEgaHJlZj0iaHR0cHM6Ly90b29scy5pZXRmLm9yZy9odG1sL2RyYWZ0LWlldGYtb3NwZi1u b2RlLWFkbWluLXRhZy0wOC50eHQiIHN0eWxlPSJjb2xvcjojMDA4Ij5kcmFmdC1pZXRmLW9zcGYt bm9kZS1hZG1pbi10YWctMDgudHh0PC9hPiZuYnNwOzxhIGhyZWY9Imh0dHBzOi8vdG9vbHMuaWV0 Zi5vcmcvcmZjZGlmZj91cmwxPWRyYWZ0LWlldGYtb3NwZi1ub2RlLWFkbWluLXRhZy0wOC50eHQi IHN0eWxlPSJjb2xvcjojMDA4OyB0ZXh0LWRlY29yYXRpb246bm9uZTsiPiZndDs8L2E+PC90aD48 dGg+PC90aD48L3RyPiANCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3Ai PjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij48 L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRy Pjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPk9w ZW4gU2hvcnRlc3QgUGF0aCBGaXJzdCBJR1AgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICBTLiBIZWdkZTwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPk9wZW4gU2hvcnRl c3QgUGF0aCBGaXJzdCBJR1AgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICBTLiBI ZWdkZTwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAg ICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVm dCI+SW50ZXJuZXQtRHJhZnQgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICBKdW5p cGVyIE5ldHdvcmtzLCBJbmMuPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+SW50ZXJu ZXQtRHJhZnQgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICBKdW5pcGVyIE5ldHdv cmtzLCBJbmMuPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4N CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNz PSJsZWZ0Ij5JbnRlbmRlZCBzdGF0dXM6IFN0YW5kYXJkcyBUcmFjayAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICBSLiBTaGFraXI8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij5J bnRlbmRlZCBzdGF0dXM6IFN0YW5kYXJkcyBUcmFjayAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICBSLiBTaGFraXI8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48 L3RyPg0KICAgICAgPHRyPjx0ZD48YSBuYW1lPSJkaWZmMDAwMSI+PC9hPjwvdGQ+PC90cj4NCiAg ICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJs YmxvY2siPkV4cGlyZXM6IEFwcmlsIDE8c3BhbiBjbGFzcz0iZGVsZXRlIj4xPC9zcGFuPiwgMjAx NiAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIEluZGl2aWR1YWw8L3RkPjx0 ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+RXhwaXJlczogQXByaWwgMTxzcGFuIGNsYXNzPSJp bnNlcnQiPjM8L3NwYW4+LCAyMDE2ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgSW5kaXZpZHVhbDwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwv dHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBj bGFzcz0ibGVmdCI+ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICBBLiBTbWlybm92PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdo dCI+ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICBBLiBTbWlybm92PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwv dGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+ PHRkIGNsYXNzPSJsZWZ0Ij4gICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgIENpc2NvIFN5c3RlbXMsIEluYy48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9 InJpZ2h0Ij4gICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgIENpc2NvIFN5c3RlbXMsIEluYy48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRv cCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+ PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICBaLiBMaTwvdGQ+PHRkPiA8L3RkPjx0ZCBj bGFzcz0icmlnaHQiPiAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICBaLiBMaTwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGln bj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0i dG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICBIdWF3ZWkgVGVjaG5vbG9naWVzPC90ZD48dGQ+IDwvdGQ+ PHRkIGNsYXNzPSJyaWdodCI+ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICBIdWF3ZWkgVGVjaG5vbG9naWVzPC90ZD48dGQgY2xhc3M9ImxpbmVubyIg dmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFs aWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgQi4gRGVjcmFlbmU8L3RkPjx0ZD4g PC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgQi4gRGVjcmFlbmU8L3RkPjx0ZCBjbGFzcz0ibGlu ZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5v IiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIE9yYW5nZTwvdGQ+ PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIE9yYW5nZTwvdGQ+PHRkIGNsYXNz PSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkPjxhIG5hbWU9 ImRpZmYwMDAyIj48L2E+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2 YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+ICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICA8c3BhbiBjbGFzcz0iZGVsZXRlIj4g T2N0b2JlciA5PC9zcGFuPiwgMjAxNTwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj4g ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIDxz cGFuIGNsYXNzPSJpbnNlcnQiPk9jdG9iZXIgMTE8L3NwYW4+LCAyMDE1PC90ZD48dGQgY2xhc3M9 ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9Imxp bmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij48L3RkPjx0ZD4gPC90ZD48 dGQgY2xhc3M9InJpZ2h0Ij48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90 ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48 dGQgY2xhc3M9ImxlZnQiPiAgICAgICAgICAgIEFkdmVydGlzaW5nIHBlci1ub2RlIGFkbWluaXN0 cmF0aXZlIHRhZ3MgaW4gT1NQRjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgICAg ICAgICAgIEFkdmVydGlzaW5nIHBlci1ub2RlIGFkbWluaXN0cmF0aXZlIHRhZ3MgaW4gT1NQRjwv dGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+ PHRkPjxhIG5hbWU9ImRpZmYwMDAzIj48L2E+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFz cz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+ICAgICAgICAg ICAgICAgICAgIGRyYWZ0LWlldGYtb3NwZi1ub2RlLWFkbWluLXRhZy0wPHNwYW4gY2xhc3M9ImRl bGV0ZSI+Nzwvc3Bhbj48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+ICAgICAgICAg ICAgICAgICAgIGRyYWZ0LWlldGYtb3NwZi1ub2RlLWFkbWluLXRhZy0wPHNwYW4gY2xhc3M9Imlu c2VydCI+ODwvc3Bhbj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48 L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQg Y2xhc3M9ImxlZnQiPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPjwvdGQ+PHRkIGNs YXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNz PSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+QWJzdHJhY3Q8L3Rk Pjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij5BYnN0cmFjdDwvdGQ+PHRkIGNsYXNzPSJsaW5l bm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8i IHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNs YXNzPSJyaWdodCI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90 cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNs YXNzPSJsZWZ0Ij4gICBUaGlzIGRvY3VtZW50IGRlc2NyaWJlcyBhbiBleHRlbnNpb24gdG8gT1NQ RiBwcm90b2NvbCB0byBhZGQgYW48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBU aGlzIGRvY3VtZW50IGRlc2NyaWJlcyBhbiBleHRlbnNpb24gdG8gT1NQRiBwcm90b2NvbCB0byBh ZGQgYW48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAg ICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9Imxl ZnQiPiAgIG9wdGlvbmFsIG9wZXJhdGlvbmFsIGNhcGFiaWxpdHksIHRoYXQgYWxsb3dzIHRhZ2dp bmcgYW5kIGdyb3VwaW5nIG9mPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgb3B0 aW9uYWwgb3BlcmF0aW9uYWwgY2FwYWJpbGl0eSwgdGhhdCBhbGxvd3MgdGFnZ2luZyBhbmQgZ3Jv dXBpbmcgb2Y8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0K ICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9 ImxlZnQiPiAgIHRoZSBub2RlcyBpbiBhbiBPU1BGIGRvbWFpbi4gIFRoaXMgYWxsb3dzIHNpbXBs aWZpY2F0aW9uLCBlYXNlIG9mPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgdGhl IG5vZGVzIGluIGFuIE9TUEYgZG9tYWluLiAgVGhpcyBhbGxvd3Mgc2ltcGxpZmljYXRpb24sIGVh c2Ugb2Y8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAg ICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9Imxl ZnQiPiAgIG1hbmFnZW1lbnQgYW5kIGNvbnRyb2wgb3ZlciByb3V0ZSBhbmQgcGF0aCBzZWxlY3Rp b24gYmFzZWQgb248L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBtYW5hZ2VtZW50 IGFuZCBjb250cm9sIG92ZXIgcm91dGUgYW5kIHBhdGggc2VsZWN0aW9uIGJhc2VkIG9uPC90ZD48 dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQg Y2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBjb25m aWd1cmVkIHBvbGljaWVzLiAgVGhpcyBkb2N1bWVudCBkZXNjcmliZXMgYW4gZXh0ZW5zaW9uIHRv IE9TUEY8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBjb25maWd1cmVkIHBvbGlj aWVzLiAgVGhpcyBkb2N1bWVudCBkZXNjcmliZXMgYW4gZXh0ZW5zaW9uIHRvIE9TUEY8L3RkPjx0 ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBj bGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIHByb3Rv Y29sIHRvIGFkdmVydGlzZSBwZXItbm9kZSBhZG1pbmlzdHJhdGl2ZSB0YWdzLiAgVGhlIG5vZGUt dGFnczwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIHByb3RvY29sIHRvIGFkdmVy dGlzZSBwZXItbm9kZSBhZG1pbmlzdHJhdGl2ZSB0YWdzLiAgVGhlIG5vZGUtdGFnczwvdGQ+PHRk IGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNs YXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgY2FuIGJl IHVzZWQgdG8gZXhwcmVzcyBhbmQgYXBwbHkgbG9jYWxseS1kZWZpbmVkIG5ldHdvcmsgcG9saWNp ZXM8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBjYW4gYmUgdXNlZCB0byBleHBy ZXNzIGFuZCBhcHBseSBsb2NhbGx5LWRlZmluZWQgbmV0d29yayBwb2xpY2llczwvdGQ+PHRkIGNs YXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNz PSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9 InJpZ2h0Ij48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+DQogICAgICA8dHIgYmdj b2xvcj0iZ3JheSI+PHRkPjwvdGQ+PHRoPjxhIG5hbWU9InBhcnQtbDIiPjxzbWFsbD5za2lwcGlu ZyB0byBjaGFuZ2UgYXQ8L3NtYWxsPjxlbT4gcGFnZSAyLCBsaW5lIDEwPC9lbT48L2E+PC90aD48 dGg+IDwvdGg+PHRoPjxhIG5hbWU9InBhcnQtcjIiPjxzbWFsbD5za2lwcGluZyB0byBjaGFuZ2Ug YXQ8L3NtYWxsPjxlbT4gcGFnZSAyLCBsaW5lIDEwPC9lbT48L2E+PC90aD48dGQ+PC90ZD48L3Ry Pg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xh c3M9ImxlZnQiPiAgIEludGVybmV0LURyYWZ0cyBhcmUgd29ya2luZyBkb2N1bWVudHMgb2YgdGhl IEludGVybmV0IEVuZ2luZWVyaW5nPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAg SW50ZXJuZXQtRHJhZnRzIGFyZSB3b3JraW5nIGRvY3VtZW50cyBvZiB0aGUgSW50ZXJuZXQgRW5n aW5lZXJpbmc8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0K ICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9 ImxlZnQiPiAgIFRhc2sgRm9yY2UgKElFVEYpLiAgTm90ZSB0aGF0IG90aGVyIGdyb3VwcyBtYXkg YWxzbyBkaXN0cmlidXRlPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgVGFzayBG b3JjZSAoSUVURikuICBOb3RlIHRoYXQgb3RoZXIgZ3JvdXBzIG1heSBhbHNvIGRpc3RyaWJ1dGU8 L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRy Pjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAg IHdvcmtpbmcgZG9jdW1lbnRzIGFzIEludGVybmV0LURyYWZ0cy4gIFRoZSBsaXN0IG9mIGN1cnJl bnQgSW50ZXJuZXQtPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgd29ya2luZyBk b2N1bWVudHMgYXMgSW50ZXJuZXQtRHJhZnRzLiAgVGhlIGxpc3Qgb2YgY3VycmVudCBJbnRlcm5l dC08L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAg PHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQi PiAgIERyYWZ0cyBpcyBhdCBodHRwOi8vZGF0YXRyYWNrZXIuaWV0Zi5vcmcvZHJhZnRzL2N1cnJl bnQvLjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIERyYWZ0cyBpcyBhdCBodHRw Oi8vZGF0YXRyYWNrZXIuaWV0Zi5vcmcvZHJhZnRzL2N1cnJlbnQvLjwvdGQ+PHRkIGNsYXNzPSJs aW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5l bm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+PC90ZD48dGQ+IDwvdGQ+PHRk IGNsYXNzPSJyaWdodCI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+ PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRk IGNsYXNzPSJsZWZ0Ij4gICBJbnRlcm5ldC1EcmFmdHMgYXJlIGRyYWZ0IGRvY3VtZW50cyB2YWxp ZCBmb3IgYSBtYXhpbXVtIG9mIHNpeCBtb250aHM8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJp Z2h0Ij4gICBJbnRlcm5ldC1EcmFmdHMgYXJlIGRyYWZ0IGRvY3VtZW50cyB2YWxpZCBmb3IgYSBt YXhpbXVtIG9mIHNpeCBtb250aHM8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+ PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90 ZD48dGQgY2xhc3M9ImxlZnQiPiAgIGFuZCBtYXkgYmUgdXBkYXRlZCwgcmVwbGFjZWQsIG9yIG9i c29sZXRlZCBieSBvdGhlciBkb2N1bWVudHMgYXQgYW55PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNz PSJyaWdodCI+ICAgYW5kIG1heSBiZSB1cGRhdGVkLCByZXBsYWNlZCwgb3Igb2Jzb2xldGVkIGJ5 IG90aGVyIGRvY3VtZW50cyBhdCBhbnk8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRv cCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+ PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIHRpbWUuICBJdCBpcyBpbmFwcHJvcHJpYXRlIHRvIHVz ZSBJbnRlcm5ldC1EcmFmdHMgYXMgcmVmZXJlbmNlPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJy aWdodCI+ICAgdGltZS4gIEl0IGlzIGluYXBwcm9wcmlhdGUgdG8gdXNlIEludGVybmV0LURyYWZ0 cyBhcyByZWZlcmVuY2U8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48 L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQg Y2xhc3M9ImxlZnQiPiAgIG1hdGVyaWFsIG9yIHRvIGNpdGUgdGhlbSBvdGhlciB0aGFuIGFzICJ3 b3JrIGluIHByb2dyZXNzLiI8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBtYXRl cmlhbCBvciB0byBjaXRlIHRoZW0gb3RoZXIgdGhhbiBhcyAid29yayBpbiBwcm9ncmVzcy4iPC90 ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48 dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij48L3Rk Pjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxp Z249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZD48YSBuYW1lPSJkaWZmMDAwNCI+PC9h PjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwv dGQ+PHRkIGNsYXNzPSJsYmxvY2siPiAgIFRoaXMgSW50ZXJuZXQtRHJhZnQgd2lsbCBleHBpcmUg b24gQXByaWwgMTxzcGFuIGNsYXNzPSJkZWxldGUiPjE8L3NwYW4+LCAyMDE2LjwvdGQ+PHRkPiA8 L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj4gICBUaGlzIEludGVybmV0LURyYWZ0IHdpbGwgZXhwaXJl IG9uIEFwcmlsIDE8c3BhbiBjbGFzcz0iaW5zZXJ0Ij4zPC9zcGFuPiwgMjAxNi48L3RkPjx0ZCBj bGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFz cz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPjwvdGQ+PHRkPiA8 L3RkPjx0ZCBjbGFzcz0icmlnaHQiPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9w Ij48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48 L3RkPjx0ZCBjbGFzcz0ibGVmdCI+Q29weXJpZ2h0IE5vdGljZTwvdGQ+PHRkPiA8L3RkPjx0ZCBj bGFzcz0icmlnaHQiPkNvcHlyaWdodCBOb3RpY2U8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxp Z249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249 InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmln aHQiPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAg ICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVm dCI+ICAgQ29weXJpZ2h0IChjKSAyMDE1IElFVEYgVHJ1c3QgYW5kIHRoZSBwZXJzb25zIGlkZW50 aWZpZWQgYXMgdGhlPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgQ29weXJpZ2h0 IChjKSAyMDE1IElFVEYgVHJ1c3QgYW5kIHRoZSBwZXJzb25zIGlkZW50aWZpZWQgYXMgdGhlPC90 ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48 dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBk b2N1bWVudCBhdXRob3JzLiAgQWxsIHJpZ2h0cyByZXNlcnZlZC48L3RkPjx0ZD4gPC90ZD48dGQg Y2xhc3M9InJpZ2h0Ij4gICBkb2N1bWVudCBhdXRob3JzLiAgQWxsIHJpZ2h0cyByZXNlcnZlZC48 L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRy Pjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPjwv dGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZh bGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGln bj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgVGhpcyBkb2N1bWVudCBpcyBzdWJqZWN0 IHRvIEJDUCA3OCBhbmQgdGhlIElFVEYgVHJ1c3QncyBMZWdhbDwvdGQ+PHRkPiA8L3RkPjx0ZCBj bGFzcz0icmlnaHQiPiAgIFRoaXMgZG9jdW1lbnQgaXMgc3ViamVjdCB0byBCQ1AgNzggYW5kIHRo ZSBJRVRGIFRydXN0J3MgTGVnYWw8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+ PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90 ZD48dGQgY2xhc3M9ImxlZnQiPiAgIFByb3Zpc2lvbnMgUmVsYXRpbmcgdG8gSUVURiBEb2N1bWVu dHM8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBQcm92aXNpb25zIFJlbGF0aW5n IHRvIElFVEYgRG9jdW1lbnRzPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwv dGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+ PHRkIGNsYXNzPSJsZWZ0Ij4gICAoaHR0cDovL3RydXN0ZWUuaWV0Zi5vcmcvbGljZW5zZS1pbmZv KSBpbiBlZmZlY3Qgb24gdGhlIGRhdGUgb2Y8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0 Ij4gICAoaHR0cDovL3RydXN0ZWUuaWV0Zi5vcmcvbGljZW5zZS1pbmZvKSBpbiBlZmZlY3Qgb24g dGhlIGRhdGUgb2Y8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3Ry Pg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xh c3M9ImxlZnQiPiAgIHB1YmxpY2F0aW9uIG9mIHRoaXMgZG9jdW1lbnQuICBQbGVhc2UgcmV2aWV3 IHRoZXNlIGRvY3VtZW50czwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIHB1Ymxp Y2F0aW9uIG9mIHRoaXMgZG9jdW1lbnQuICBQbGVhc2UgcmV2aWV3IHRoZXNlIGRvY3VtZW50czwv dGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+ PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij48L3RkPjx0ZD4gPC90ZD48 dGQgY2xhc3M9InJpZ2h0Ij48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+DQogICAg ICA8dHIgYmdjb2xvcj0iZ3JheSI+PHRkPjwvdGQ+PHRoPjxhIG5hbWU9InBhcnQtbDMiPjxzbWFs bD5za2lwcGluZyB0byBjaGFuZ2UgYXQ8L3NtYWxsPjxlbT4gcGFnZSAyLCBsaW5lIDQzPC9lbT48 L2E+PC90aD48dGg+IDwvdGg+PHRoPjxhIG5hbWU9InBhcnQtcjMiPjxzbWFsbD5za2lwcGluZyB0 byBjaGFuZ2UgYXQ8L3NtYWxsPjxlbT4gcGFnZSAyLCBsaW5lIDQzPC9lbT48L2E+PC90aD48dGQ+ PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90 ZD48dGQgY2xhc3M9ImxlZnQiPiAgICAgMy4yLiAgRWxlbWVudHMgb2YgcHJvY2VkdXJlIC4gLiAu IC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuICAgNDwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFz cz0icmlnaHQiPiAgICAgMy4yLiAgRWxlbWVudHMgb2YgcHJvY2VkdXJlIC4gLiAuIC4gLiAuIC4g LiAuIC4gLiAuIC4gLiAuIC4gLiAuICAgNDwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0i dG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9w Ij48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgNC4gIEFwcGxpY2F0aW9ucyAgLiAuIC4gLiAuIC4g LiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gICA2PC90ZD48dGQ+IDwvdGQ+PHRk IGNsYXNzPSJyaWdodCI+ICAgNC4gIEFwcGxpY2F0aW9ucyAgLiAuIC4gLiAuIC4gLiAuIC4gLiAu IC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gICA2PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFs aWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWdu PSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICAgIDQuMS4gIFNlcnZpY2UgYXV0by1kaXNj b3ZlcnkgIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAgIDY8L3RkPjx0ZD4gPC90 ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICAgIDQuMS4gIFNlcnZpY2UgYXV0by1kaXNjb3ZlcnkgIC4g LiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAgIDY8L3RkPjx0ZCBjbGFzcz0ibGluZW5v IiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2 YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgICAgNC4yLiAgRmFzdC1SZS1yb3V0 aW5nIHBvbGljeSAgLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuICAgNjwvdGQ+PHRk PiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgICAgNC4yLiAgRmFzdC1SZS1yb3V0aW5nIHBvbGlj eSAgLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuICAgNjwvdGQ+PHRkIGNsYXNzPSJs aW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5l bm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgICA0LjMuICBDb250cm9s bGluZyBSZW1vdGUgTEZBIHR1bm5lbCB0ZXJtaW5hdGlvbiAuIC4gLiAuIC4gLiAuIC4gICA3PC90 ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgICA0LjMuICBDb250cm9sbGluZyBSZW1v dGUgTEZBIHR1bm5lbCB0ZXJtaW5hdGlvbiAuIC4gLiAuIC4gLiAuIC4gICA3PC90ZD48dGQgY2xh c3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9 ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICAgIDQuNC4gIE1v YmlsZSBiYWNrLWhhdWwgbmV0d29yayBzZXJ2aWNlIGRlcGxveW1lbnQgLiAuIC4gLiAuIC4gLiAg IDg8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICAgIDQuNC4gIE1vYmlsZSBiYWNr LWhhdWwgbmV0d29yayBzZXJ2aWNlIGRlcGxveW1lbnQgLiAuIC4gLiAuIC4gLiAgIDg8L3RkPjx0 ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBj bGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgICAgNC41 LiAgRXhwbGljaXQgcm91dGluZyBwb2xpY3kgLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4g LiAuICAgOTwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgICAgNC41LiAgRXhwbGlj aXQgcm91dGluZyBwb2xpY3kgLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuICAgOTwv dGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+ PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAg NS4gIFNlY3VyaXR5IENvbnNpZGVyYXRpb25zIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAu IC4gLiAuIC4gIDExPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgNS4gIFNlY3Vy aXR5IENvbnNpZGVyYXRpb25zIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4g IDExPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAg IDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0 Ij4gICA2LiAgT3BlcmF0aW9uYWwgQ29uc2lkZXJhdGlvbnMgIC4gLiAuIC4gLiAuIC4gLiAuIC4g LiAuIC4gLiAuIC4gLiAgMTE8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICA2LiAg T3BlcmF0aW9uYWwgQ29uc2lkZXJhdGlvbnMgIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAu IC4gLiAgMTE8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0K ICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9 ImxlZnQiPiAgIDcuICBNYW5hZ2VhYmlsaXR5IENvbnNpZGVyYXRpb25zICAuIC4gLiAuIC4gLiAu IC4gLiAuIC4gLiAuIC4gLiAuICAxMTwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAg IDcuICBNYW5hZ2VhYmlsaXR5IENvbnNpZGVyYXRpb25zICAuIC4gLiAuIC4gLiAuIC4gLiAuIC4g LiAuIC4gLiAuICAxMTwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwv dHI+DQogICAgICA8dHI+PHRkPjxhIG5hbWU9ImRpZmYwMDA1Ij48L2E+PC90ZD48L3RyPg0KICAg ICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9Imxi bG9jayI+ICAgOC4gIElBTkEgQ29uc2lkZXJhdGlvbnMgLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4g LiAuIC4gLiAuIC4gLiAuIC4gIDE8c3BhbiBjbGFzcz0iZGVsZXRlIj4xPC9zcGFuPjwvdGQ+PHRk PiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj4gICA4LiAgSUFOQSBDb25zaWRlcmF0aW9ucyAuIC4g LiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAgMTxzcGFuIGNsYXNzPSJpbnNl cnQiPjI8L3NwYW4+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90 cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNs YXNzPSJsZWZ0Ij4gICA5LiAgQ29udHJpYnV0b3JzICAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAu IC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAgMTI8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0 Ij4gICA5LiAgQ29udHJpYnV0b3JzICAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4g LiAuIC4gLiAuIC4gLiAgMTI8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90 ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48 dGQgY2xhc3M9ImxlZnQiPiAgIDEwLiBBY2tub3dsZWRnZW1lbnRzICAuIC4gLiAuIC4gLiAuIC4g LiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuICAxMjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0i cmlnaHQiPiAgIDEwLiBBY2tub3dsZWRnZW1lbnRzICAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAu IC4gLiAuIC4gLiAuIC4gLiAuICAxMjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9w Ij48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48 L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgMTEuIFJlZmVyZW5jZXMgIC4gLiAuIC4gLiAuIC4gLiAu IC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gIDEyPC90ZD48dGQ+IDwvdGQ+PHRkIGNs YXNzPSJyaWdodCI+ICAgMTEuIFJlZmVyZW5jZXMgIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4g LiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gIDEyPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWdu PSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0 b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICAgIDExLjEuICBOb3JtYXRpdmUgUmVmZXJlbmNl cyAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAgMTI8L3RkPjx0ZD4gPC90ZD48 dGQgY2xhc3M9InJpZ2h0Ij4gICAgIDExLjEuICBOb3JtYXRpdmUgUmVmZXJlbmNlcyAuIC4gLiAu IC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAgMTI8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2 YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxp Z249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgICAgMTEuMi4gIEluZm9ybWF0aXZlIFJl ZmVyZW5jZXMgLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuICAxMzwvdGQ+PHRkPiA8 L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgICAgMTEuMi4gIEluZm9ybWF0aXZlIFJlZmVyZW5jZXMg LiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuICAxMzwvdGQ+PHRkIGNsYXNzPSJsaW5l bm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkPjxhIG5hbWU9ImRpZmYw MDA2Ij48L2E+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249 InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+ICAgQXV0aG9ycycgQWRkcmVzc2VzICAuIC4g LiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gIDE8c3BhbiBjbGFzcz0i ZGVsZXRlIj4zPC9zcGFuPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj4gICBBdXRo b3JzJyBBZGRyZXNzZXMgIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAu IC4gLiAgMTxzcGFuIGNsYXNzPSJpbnNlcnQiPjQ8L3NwYW4+PC90ZD48dGQgY2xhc3M9ImxpbmVu byIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIg dmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij48L3RkPjx0ZD4gPC90ZD48dGQgY2xh c3M9InJpZ2h0Ij48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3Ry Pg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xh c3M9ImxlZnQiPjEuICBJbnRyb2R1Y3Rpb248L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0 Ij4xLiAgSW50cm9kdWN0aW9uPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwv dGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+ PHRkIGNsYXNzPSJsZWZ0Ij48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij48L3RkPjx0 ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBj bGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIEl0IGlz IHVzZWZ1bCB0byBhc3NpZ24gYSBwZXItbm9kZSBhZG1pbmlzdHJhdGl2ZSB0YWcgdG8gYSByb3V0 ZXIgaW48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBJdCBpcyB1c2VmdWwgdG8g YXNzaWduIGEgcGVyLW5vZGUgYWRtaW5pc3RyYXRpdmUgdGFnIHRvIGEgcm91dGVyIGluPC90ZD48 dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQg Y2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICB0aGUg T1NQRiBkb21haW4gYW5kIHVzZSBpdCBhcyBhbiBhdHRyaWJ1dGUgYXNzb2NpYXRlZCB3aXRoIHRo ZSBub2RlLjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIHRoZSBPU1BGIGRvbWFp biBhbmQgdXNlIGl0IGFzIGFuIGF0dHJpYnV0ZSBhc3NvY2lhdGVkIHdpdGggdGhlIG5vZGUuPC90 ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48 dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBU aGUgcGVyLW5vZGUgYWRtaW5pc3RyYXRpdmUgdGFnIGNhbiBiZSB1c2VkIGluIHZhcmlldHkgb2Y8 L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBUaGUgcGVyLW5vZGUgYWRtaW5pc3Ry YXRpdmUgdGFnIGNhbiBiZSB1c2VkIGluIHZhcmlldHkgb2Y8L3RkPjx0ZCBjbGFzcz0ibGluZW5v IiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2 YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIGFwcGxpY2F0aW9ucywgZm9yIGV4 OiAtIFRyYWZmaWMtZW5naW5lZXJpbmcgYXBwbGljYXRpb25zIHRvIHByb3ZpZGU8L3RkPjx0ZD4g PC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBhcHBsaWNhdGlvbnMsIGZvciBleDogLSBUcmFmZmlj LWVuZ2luZWVyaW5nIGFwcGxpY2F0aW9ucyB0byBwcm92aWRlPC90ZD48dGQgY2xhc3M9ImxpbmVu byIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIg dmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBkaWZmZXJlbnQgcGF0aC1zZWxl Y3Rpb24gY3JpdGVyaWEsIC0gUHJlZmVyIG9yIHBydW5lIGNlcnRhaW4gcGF0aHMgaW48L3RkPjx0 ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBkaWZmZXJlbnQgcGF0aC1zZWxlY3Rpb24gY3Jp dGVyaWEsIC0gUHJlZmVyIG9yIHBydW5lIGNlcnRhaW4gcGF0aHMgaW48L3RkPjx0ZCBjbGFzcz0i bGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGlu ZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIExvb3AgRnJlZSBBbHRl cm5hdGUgKExGQSkgYmFja3VwIHNlbGVjdGlvbiB2aWEgbG9jYWwgcG9saWNpZXMuPC90ZD48dGQ+ IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgTG9vcCBGcmVlIEFsdGVybmF0ZSAoTEZBKSBiYWNr dXAgc2VsZWN0aW9uIHZpYSBsb2NhbCBwb2xpY2llcy48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2 YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxp Z249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0i cmlnaHQiPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQog ICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij48L3RkPjx0 ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwv dHI+DQogICAgICA8dHIgYmdjb2xvcj0iZ3JheSI+PHRkPjwvdGQ+PHRoPjxhIG5hbWU9InBhcnQt bDQiPjxzbWFsbD5za2lwcGluZyB0byBjaGFuZ2UgYXQ8L3NtYWxsPjxlbT4gcGFnZSA0LCBsaW5l IDM1PC9lbT48L2E+PC90aD48dGg+IDwvdGg+PHRoPjxhIG5hbWU9InBhcnQtcjQiPjxzbWFsbD5z a2lwcGluZyB0byBjaGFuZ2UgYXQ8L3NtYWxsPjxlbT4gcGFnZSA0LCBsaW5lIDM1PC9lbT48L2E+ PC90aD48dGQ+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249 InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIG9mIHRhZ3MgYWR2ZXJ0aXNlZC48L3RkPjx0 ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBvZiB0YWdzIGFkdmVydGlzZWQuPC90ZD48dGQg Y2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xh c3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij48L3RkPjx0ZD4g PC90ZD48dGQgY2xhc3M9InJpZ2h0Ij48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRv cCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+ PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIFZhbHVlOiBBIHNlcXVlbmNlIG9mIG11bHRpcGxlIDQg b2N0ZXRzIGRlZmluaW5nIHRoZSBhZG1pbmlzdHJhdGl2ZTwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFz cz0icmlnaHQiPiAgIFZhbHVlOiBBIHNlcXVlbmNlIG9mIG11bHRpcGxlIDQgb2N0ZXRzIGRlZmlu aW5nIHRoZSBhZG1pbmlzdHJhdGl2ZTwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9w Ij48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48 L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgdGFncy4gIEF0IGxlYXN0IG9uZSB0YWcgTVVTVCBiZSBj YXJyaWVkIGlmIHRoaXMgVExWIGlzIGluY2x1ZGVkIGluPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNz PSJyaWdodCI+ICAgdGFncy4gIEF0IGxlYXN0IG9uZSB0YWcgTVVTVCBiZSBjYXJyaWVkIGlmIHRo aXMgVExWIGlzIGluY2x1ZGVkIGluPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3Ai PjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwv dGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICB0aGUgUkktTFNBLjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFz cz0icmlnaHQiPiAgIHRoZSBSSS1MU0EuPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0 b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3Ai PjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij48 L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRy Pjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPjMu Mi4gIEVsZW1lbnRzIG9mIHByb2NlZHVyZTwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQi PjMuMi4gIEVsZW1lbnRzIG9mIHByb2NlZHVyZTwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGln bj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0i dG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdo dCI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAg IDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0 Ij4gICBNZWFuaW5nIG9mIHRoZSBOb2RlIGFkbWluaXN0cmF0aXZlIHRhZ3MgaXMgZ2VuZXJhbGx5 IG9wYXF1ZSB0byBPU1BGLjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIE1lYW5p bmcgb2YgdGhlIE5vZGUgYWRtaW5pc3RyYXRpdmUgdGFncyBpcyBnZW5lcmFsbHkgb3BhcXVlIHRv IE9TUEYuPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAg ICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJs ZWZ0Ij4gICBSb3V0ZXIgYWR2ZXJ0aXNpbmcgdGhlIHBlci1ub2RlIGFkbWluaXN0cmF0aXZlIHRh ZyAob3IgdGFncykgbWF5IGJlPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgUm91 dGVyIGFkdmVydGlzaW5nIHRoZSBwZXItbm9kZSBhZG1pbmlzdHJhdGl2ZSB0YWcgKG9yIHRhZ3Mp IG1heSBiZTwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQog ICAgICA8dHI+PHRkPjxhIG5hbWU9ImRpZmYwMDA3Ij48L2E+PC90ZD48L3RyPg0KICAgICAgPHRy Pjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+ ICAgY29uZmlndXJlZCB0byBkbyBzbyB3aXRob3V0IGtub3dpbmcgKG9yIGV2ZW4gPHNwYW4gY2xh c3M9ImRlbGV0ZSI+ZXhwbGljaXRseSBzdXBwb3J0aW5nKTwvc3Bhbj48L3RkPjx0ZD4gPC90ZD48 dGQgY2xhc3M9InJibG9jayI+ICAgY29uZmlndXJlZCB0byBkbyBzbyB3aXRob3V0IGtub3dpbmcg KG9yIGV2ZW4gPHNwYW4gY2xhc3M9Imluc2VydCI+d2l0aG91dCBzdXBwb3J0aW5nPC9zcGFuPjwv dGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+ PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj4g ICBmdW5jdGlvbmFsaXR5IGltcGxpZWQgYnkgdGhlIHRhZy48L3RkPjx0ZD4gPC90ZD48dGQgY2xh c3M9InJibG9jayI+PHNwYW4gY2xhc3M9Imluc2VydCI+ICAgcHJvY2Vzc2luZyBvZik8L3NwYW4+ IGZ1bmN0aW9uYWxpdHkgaW1wbGllZCBieSB0aGUgdGFnLjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8i IHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZh bGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNz PSJyaWdodCI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4N CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNz PSJsZWZ0Ij4gICBJbnRlcnByZXRhdGlvbiBvZiB0YWcgdmFsdWVzIGlzIHNwZWNpZmljIHRvIHRo ZSBhZG1pbmlzdHJhdGl2ZSBkb21haW48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4g ICBJbnRlcnByZXRhdGlvbiBvZiB0YWcgdmFsdWVzIGlzIHNwZWNpZmljIHRvIHRoZSBhZG1pbmlz dHJhdGl2ZSBkb21haW48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48 L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQg Y2xhc3M9ImxlZnQiPiAgIG9mIGEgcGFydGljdWxhciBuZXR3b3JrIG9wZXJhdG9yLCBhbmQgaGVu Y2UgdGFnIHZhbHVlcyBTSE9VTEQgTk9UIGJlPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdo dCI+ICAgb2YgYSBwYXJ0aWN1bGFyIG5ldHdvcmsgb3BlcmF0b3IsIGFuZCBoZW5jZSB0YWcgdmFs dWVzIFNIT1VMRCBOT1QgYmU8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90 ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48 dGQgY2xhc3M9ImxlZnQiPiAgIHByb3BhZ2F0ZWQgb3V0c2lkZSB0aGUgYWRtaW5pc3RyYXRpdmUg ZG9tYWluIHRvIHdoaWNoIHRoZXkgYXBwbHkuPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdo dCI+ICAgcHJvcGFnYXRlZCBvdXRzaWRlIHRoZSBhZG1pbmlzdHJhdGl2ZSBkb21haW4gdG8gd2hp Y2ggdGhleSBhcHBseS48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48 L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQg Y2xhc3M9ImxlZnQiPiAgIFRoZSBtZWFuaW5nIG9mIGEgcGVyLW5vZGUgYWRtaW5pc3RyYXRpdmUg dGFnIGlzIGRlZmluZWQgYnkgdGhlPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAg VGhlIG1lYW5pbmcgb2YgYSBwZXItbm9kZSBhZG1pbmlzdHJhdGl2ZSB0YWcgaXMgZGVmaW5lZCBi eSB0aGU8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAg ICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9Imxl ZnQiPiAgIG5ldHdvcmsgbG9jYWwgcG9saWN5IGFuZCBpcyBjb250cm9sbGVkIHZpYSB0aGUgY29u ZmlndXJhdGlvbi4gIElmIGE8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBuZXR3 b3JrIGxvY2FsIHBvbGljeSBhbmQgaXMgY29udHJvbGxlZCB2aWEgdGhlIGNvbmZpZ3VyYXRpb24u ICBJZiBhPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAg ICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJs ZWZ0Ij4gICByZWNlaXZpbmcgbm9kZSBkb2VzIG5vdCB1bmRlcnN0YW5kIHRoZSB0YWcgdmFsdWUg b3IgZG9lcyBub3QgaGF2ZSBhPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgcmVj ZWl2aW5nIG5vZGUgZG9lcyBub3QgdW5kZXJzdGFuZCB0aGUgdGFnIHZhbHVlIG9yIGRvZXMgbm90 IGhhdmUgYTwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQog ICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0i bGVmdCI+ICAgbG9jYWwgcG9saWN5IGNvcnJlc3BvbmRpbmcgdG8gdGhlIHRhZywgaXQgaWdub3Jl cyB0aGUgc3BlY2lmaWMgdGFnPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgbG9j YWwgcG9saWN5IGNvcnJlc3BvbmRpbmcgdG8gdGhlIHRhZywgaXQgaWdub3JlcyB0aGUgc3BlY2lm aWMgdGFnPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAg ICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJs ZWZ0Ij4gICBhbmQgZmxvb2RzIHRoZSBSSSBMU0Egd2l0aG91dCBhbnkgY2hhbmdlIGFzIGRlZmlu ZWQgaW4gW1JGQzQ5NzBdLjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIGFuZCBm bG9vZHMgdGhlIFJJIExTQSB3aXRob3V0IGFueSBjaGFuZ2UgYXMgZGVmaW5lZCBpbiBbUkZDNDk3 MF0uPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAg IDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0 Ij48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij48L3RkPjx0ZCBjbGFzcz0ibGluZW5v IiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48 L3RkPjx0ZCBjbGFzcz0ibGVmdCI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+PC90 ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPg0KICAgICAgPHRyIGJnY29sb3I9ImdyYXki Pjx0ZD48L3RkPjx0aD48YSBuYW1lPSJwYXJ0LWw1Ij48c21hbGw+c2tpcHBpbmcgdG8gY2hhbmdl IGF0PC9zbWFsbD48ZW0+IHBhZ2UgNSwgbGluZSAyMTwvZW0+PC9hPjwvdGg+PHRoPiA8L3RoPjx0 aD48YSBuYW1lPSJwYXJ0LXI1Ij48c21hbGw+c2tpcHBpbmcgdG8gY2hhbmdlIGF0PC9zbWFsbD48 ZW0+IHBhZ2UgNSwgbGluZSAyMTwvZW0+PC9hPjwvdGg+PHRkPjwvdGQ+PC90cj4NCiAgICAgIDx0 cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4g ICBBTkQgdGFnIEIgYXJlIHByZXNlbnQpLCB0aGV5IE1VU1QgTk9UIGJlIHJlbGlhbnQgdXBvbiB0 aGUgb3JkZXIgb2Y8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBBTkQgdGFnIEIg YXJlIHByZXNlbnQpLCB0aGV5IE1VU1QgTk9UIGJlIHJlbGlhbnQgdXBvbiB0aGUgb3JkZXIgb2Y8 L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRy Pjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAg IHRoZSB0YWdzIChpLmUuLCBhbGwgcG9saWNpZXMgc2hvdWxkIGJlIGNvbnNpZGVyZWQgY29tbXV0 YXRpdmU8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICB0aGUgdGFncyAoaS5lLiwg YWxsIHBvbGljaWVzIHNob3VsZCBiZSBjb25zaWRlcmVkIGNvbW11dGF0aXZlPC90ZD48dGQgY2xh c3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9 ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBvcGVyYXRpb25z LCBzdWNoIHRoYXQgdGFnIEEgcHJlY2VkaW5nIG9yIGZvbGxvd2luZyB0YWcgQiBkb2VzIG5vdDwv dGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIG9wZXJhdGlvbnMsIHN1Y2ggdGhhdCB0 YWcgQSBwcmVjZWRpbmcgb3IgZm9sbG93aW5nIHRhZyBCIGRvZXMgbm90PC90ZD48dGQgY2xhc3M9 ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9Imxp bmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBjaGFuZ2UgdGhlaXIg b3V0Y29tZSkuPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgY2hhbmdlIHRoZWly IG91dGNvbWUpLjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+ DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFz cz0ibGVmdCI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+PC90ZD48dGQgY2xhc3M9 ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9Imxp bmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBUbyBhdm9pZCBpbmNv bXBsZXRlIG9yIGluY29uc2lzdGVudCBpbnRlcnByZXRhdGlvbnMgb2YgdGhlIHBlci1ub2RlPC90 ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgVG8gYXZvaWQgaW5jb21wbGV0ZSBvciBp bmNvbnNpc3RlbnQgaW50ZXJwcmV0YXRpb25zIG9mIHRoZSBwZXItbm9kZTwvdGQ+PHRkIGNsYXNz PSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJs aW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgYWRtaW5pc3RyYXRp dmUgdGFncyB0aGUgc2FtZSB0YWcgdmFsdWUgTVVTVCBOT1QgYmUgYWR2ZXJ0aXNlZCBieSBhPC90 ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgYWRtaW5pc3RyYXRpdmUgdGFncyB0aGUg c2FtZSB0YWcgdmFsdWUgTVVTVCBOT1QgYmUgYWR2ZXJ0aXNlZCBieSBhPC90ZD48dGQgY2xhc3M9 ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9Imxp bmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICByb3V0ZXIgaW4gUkkg TFNBcyBvZiBkaWZmZXJlbnQgc2NvcGVzLiAgVGhlIHNhbWUgdGFnIE1BWSBiZTwvdGQ+PHRkPiA8 L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIHJvdXRlciBpbiBSSSBMU0FzIG9mIGRpZmZlcmVudCBz Y29wZXMuICBUaGUgc2FtZSB0YWcgTUFZIGJlPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWdu PSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0 b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBhZHZlcnRpc2VkIGluIG11bHRpcGxlIFJJIExT QXMgb2YgdGhlIHNhbWUgc2NvcGUsIGZvciBleGFtcGxlLCBPU1BGPC90ZD48dGQ+IDwvdGQ+PHRk IGNsYXNzPSJyaWdodCI+ICAgYWR2ZXJ0aXNlZCBpbiBtdWx0aXBsZSBSSSBMU0FzIG9mIHRoZSBz YW1lIHNjb3BlLCBmb3IgZXhhbXBsZSwgT1NQRjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGln bj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0i dG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgQXJlYSBCb3JkZXIgUm91dGVyIChBQlIpIG1h eSBhZHZlcnRpc2UgdGhlIHNhbWUgdGFnIGluIGFyZWEtc2NvcGUgUkk8L3RkPjx0ZD4gPC90ZD48 dGQgY2xhc3M9InJpZ2h0Ij4gICBBcmVhIEJvcmRlciBSb3V0ZXIgKEFCUikgbWF5IGFkdmVydGlz ZSB0aGUgc2FtZSB0YWcgaW4gYXJlYS1zY29wZSBSSTwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZh bGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkPjxhIG5hbWU9ImRpZmYwMDA4Ij48 L2E+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+ PC90ZD48dGQgY2xhc3M9ImxibG9jayI+ICAgTFNBcyBpbiBtdWx0aXBsZSBhcmVhcyBjb25uZWN0 ZWQgdG8gdGhlIEFCUi48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+ICAgTFNBcyBp biBtdWx0aXBsZSBhcmVhcyBjb25uZWN0ZWQgdG8gdGhlIEFCUi4gIDxzcGFuIGNsYXNzPSJpbnNl cnQiPklmIGEgbm9kZTwvc3Bhbj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+ PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90 ZD48dGQgY2xhc3M9ImxibG9jayI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPjxz cGFuIGNsYXNzPSJpbnNlcnQiPiAgIGFkbWluaXN0cmF0aXZlIHRhZyBpcyByZWNlaXZlZCBpbiBk aWZmZXJlbnQgc2NvcGVzLCB0aGUgY29uZmxpY3Rpbmc8L3NwYW4+PC90ZD48dGQgY2xhc3M9Imxp bmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVu byIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPjwvdGQ+PHRkPiA8L3RkPjx0 ZCBjbGFzcz0icmJsb2NrIj48c3BhbiBjbGFzcz0iaW5zZXJ0Ij4gICB0YWcgU0hPVUxEIG5vdCBi ZSB1c2VkIGFuZCB0aGlzIHNpdHVhdGlvbiBTSE9VTEQgYmUgbG9nZ2VkIGFzIGFuPC9zcGFuPjwv dGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+ PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48 L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+PHNwYW4gY2xhc3M9Imluc2VydCI+ICAg ZXJyb3IgaW5jbHVkaW5nIHRoZSB0YWcgd2l0aCBjb25mbGljdGluZyBzY29wZXMgYW5kIHRoZTwv c3Bhbj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAg ICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9Imxi bG9jayI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPjxzcGFuIGNsYXNzPSJpbnNl cnQiPiAgIG9yaWdpbmF0b3IocykuPC9zcGFuPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGln bj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0i dG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdo dCI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAg IDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0 Ij4gICBUaGUgcGVyLW5vZGUgYWRtaW5pc3RyYXRpdmUgdGFncyBhcmUgbm90IG1lYW50IHRvIGJl IGV4dGVuZGVkIGJ5IHRoZTwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIFRoZSBw ZXItbm9kZSBhZG1pbmlzdHJhdGl2ZSB0YWdzIGFyZSBub3QgbWVhbnQgdG8gYmUgZXh0ZW5kZWQg YnkgdGhlPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAg ICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJs ZWZ0Ij4gICBmdXR1cmUgT1NQRiBzdGFuZGFyZHMuICBUaGUgbmV3IE9TUEYgZXh0ZW5zaW9ucyBN VVNUIE5PVCByZXF1aXJlIHVzZTwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIGZ1 dHVyZSBPU1BGIHN0YW5kYXJkcy4gIFRoZSBuZXcgT1NQRiBleHRlbnNpb25zIE1VU1QgTk9UIHJl cXVpcmUgdXNlPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4N CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNz PSJsZWZ0Ij4gICBvZiBwZXItbm9kZSBhZG1pbmlzdHJhdGl2ZSB0YWdzIG9yIGRlZmluZSB3ZWxs LWtub3duIHRhZyB2YWx1ZXMuPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgb2Yg cGVyLW5vZGUgYWRtaW5pc3RyYXRpdmUgdGFncyBvciBkZWZpbmUgd2VsbC1rbm93biB0YWcgdmFs dWVzLjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAg ICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVm dCI+ICAgTm9kZSBhZG1pbmlzdHJhdGl2ZSB0YWdzIGFyZSBmb3IgZ2VuZXJpYyB1c2UgYW5kIGRv IG5vdCByZXF1aXJlIElBTkE8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBOb2Rl IGFkbWluaXN0cmF0aXZlIHRhZ3MgYXJlIGZvciBnZW5lcmljIHVzZSBhbmQgZG8gbm90IHJlcXVp cmUgSUFOQTwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQog ICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0i bGVmdCI+ICAgcmVnaXN0cnkuICBUaGUgZnV0dXJlIE9TUEYgZXh0ZW5zaW9ucyByZXF1aXJpbmcg d2VsbCBrbm93biB2YWx1ZXMgTUFZPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAg cmVnaXN0cnkuICBUaGUgZnV0dXJlIE9TUEYgZXh0ZW5zaW9ucyByZXF1aXJpbmcgd2VsbCBrbm93 biB2YWx1ZXMgTUFZPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90 cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNs YXNzPSJsZWZ0Ij4gICBkZWZpbmUgdGhlaXIgb3duIGRhdGEgc2lnbmFsbGluZyB0YWlsb3JlZCB0 byB0aGUgbmVlZHMgb2YgdGhlIGZlYXR1cmU8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0 Ij4gICBkZWZpbmUgdGhlaXIgb3duIGRhdGEgc2lnbmFsbGluZyB0YWlsb3JlZCB0byB0aGUgbmVl ZHMgb2YgdGhlIGZlYXR1cmU8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90 ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48 dGQgY2xhc3M9ImxlZnQiPiAgIG9yIE1BWSB1c2UgY2FwYWJpbGl0eSBUTFYgYXMgZGVmaW5lZCBp biBbUkZDNDk3MF0uPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgb3IgTUFZIHVz ZSBjYXBhYmlsaXR5IFRMViBhcyBkZWZpbmVkIGluIFtSRkM0OTcwXS48L3RkPjx0ZCBjbGFzcz0i bGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGlu ZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPjwvdGQ+PHRkPiA8L3RkPjx0 ZCBjbGFzcz0icmlnaHQiPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3Rk PjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0 ZCBjbGFzcz0ibGVmdCI+ICAgQmVpbmcgcGFydCBvZiB0aGUgUkkgTFNBLCB0aGUgcGVyLW5vZGUg YWRtaW5pc3RyYXRpdmUgdGFnIFRMViBtdXN0IGJlPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJy aWdodCI+ICAgQmVpbmcgcGFydCBvZiB0aGUgUkkgTFNBLCB0aGUgcGVyLW5vZGUgYWRtaW5pc3Ry YXRpdmUgdGFnIFRMViBtdXN0IGJlPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3Ai PjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9 ImxlZnQiPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPjwvdGQ+PHRkIGNsYXNzPSJs aW5lbm8iPjwvdGQ+PC90cj4NCiAgICAgIDx0ciBiZ2NvbG9yPSJncmF5Ij48dGQ+PC90ZD48dGg+ PGEgbmFtZT0icGFydC1sNiI+PHNtYWxsPnNraXBwaW5nIHRvIGNoYW5nZSBhdDwvc21hbGw+PGVt PiBwYWdlIDExLCBsaW5lIDIwPC9lbT48L2E+PC90aD48dGg+IDwvdGg+PHRoPjxhIG5hbWU9InBh cnQtcjYiPjxzbWFsbD5za2lwcGluZyB0byBjaGFuZ2UgYXQ8L3NtYWxsPjxlbT4gcGFnZSAxMSwg bGluZSAyMDwvZW0+PC9hPjwvdGg+PHRkPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9 ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBnZW9ncmFwaGlj YWwgbG9jYXRpb24gb3Igb3RoZXIgc2Vuc2l0aXZlIGluZm9ybWF0aW9uLiAgQXMgaW5kaWNhdGVk PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgZ2VvZ3JhcGhpY2FsIGxvY2F0aW9u IG9yIG90aGVyIHNlbnNpdGl2ZSBpbmZvcm1hdGlvbi4gIEFzIGluZGljYXRlZDwvdGQ+PHRkIGNs YXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNz PSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgaW4gW1JGQzIz MjhdIGFuZCBbUkZDNTM0MF0gT1NQRiBhdXRoZW50aWNhdGlvbiBtZWNoYW5pc21zIGRvIG5vdDwv dGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIGluIFtSRkMyMzI4XSBhbmQgW1JGQzUz NDBdIE9TUEYgYXV0aGVudGljYXRpb24gbWVjaGFuaXNtcyBkbyBub3Q8L3RkPjx0ZCBjbGFzcz0i bGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGlu ZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIHByb3ZpZGUgY29uZmlk ZW50aWFsaXR5IGFuZCB0aGUgaW5mb3JtYXRpb24gY2FycmllZCBpbiBub2RlPC90ZD48dGQ+IDwv dGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgcHJvdmlkZSBjb25maWRlbnRpYWxpdHkgYW5kIHRoZSBp bmZvcm1hdGlvbiBjYXJyaWVkIGluIG5vZGU8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249 InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRv cCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIGFkbWluaXN0cmF0aXZlIHRhZ3MgY291bGQgYmUg bGVha2VkIHRvIGFuIElHUCBzbm9vcGVyLjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQi PiAgIGFkbWluaXN0cmF0aXZlIHRhZ3MgY291bGQgYmUgbGVha2VkIHRvIGFuIElHUCBzbm9vcGVy LjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8 dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIg dmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFs aWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBBZHZlcnRpc2VtZW50IG9mIHRhZyB2 YWx1ZXMgZm9yIG9uZSBhZG1pbmlzdHJhdGl2ZSBkb21haW4gaW50bzwvdGQ+PHRkPiA8L3RkPjx0 ZCBjbGFzcz0icmlnaHQiPiAgIEFkdmVydGlzZW1lbnQgb2YgdGFnIHZhbHVlcyBmb3Igb25lIGFk bWluaXN0cmF0aXZlIGRvbWFpbiBpbnRvPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0 b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3Ai PjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBhbm90aGVyIHJpc2tzIG1pc2ludGVycHJldGF0aW9u IG9mIHRoZSB0YWcgdmFsdWVzIChpZiB0aGUgdHdvIGRvbWFpbnM8L3RkPjx0ZD4gPC90ZD48dGQg Y2xhc3M9InJpZ2h0Ij4gICBhbm90aGVyIHJpc2tzIG1pc2ludGVycHJldGF0aW9uIG9mIHRoZSB0 YWcgdmFsdWVzIChpZiB0aGUgdHdvIGRvbWFpbnM8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxp Z249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249 InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIGhhdmUgYXNzaWduZWQgZGlmZmVyZW50IG1l YW5pbmdzIHRvIHRoZSBzYW1lIHZhbHVlcyksIHdoaWNoIG1heSBoYXZlPC90ZD48dGQ+IDwvdGQ+ PHRkIGNsYXNzPSJyaWdodCI+ICAgaGF2ZSBhc3NpZ25lZCBkaWZmZXJlbnQgbWVhbmluZ3MgdG8g dGhlIHNhbWUgdmFsdWVzKSwgd2hpY2ggbWF5IGhhdmU8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2 YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxp Z249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIHVuZGVzaXJhYmxlIGFuZCB1bmFudGlj aXBhdGVkIHNpZGUgZWZmZWN0cy48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICB1 bmRlc2lyYWJsZSBhbmQgdW5hbnRpY2lwYXRlZCBzaWRlIGVmZmVjdHMuPC90ZD48dGQgY2xhc3M9 ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9Imxp bmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij48L3RkPjx0ZD4gPC90ZD48 dGQgY2xhc3M9InJpZ2h0Ij48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90 ZD48L3RyPg0KICAgICAgPHRyPjx0ZD48YSBuYW1lPSJkaWZmMDAwOSI+PC9hPjwvdGQ+PC90cj4N CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNz PSJsYmxvY2siPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj4gICA8c3BhbiBjbGFz cz0iaW5zZXJ0Ij5bUkZDNDU5M10gYW5kIFtSRkM2ODYzXSAgZGlzY3VzcyB0aGUgZ2VuZXJpYyB0 aHJlYXRzIHRvIHJvdXRpbmc8L3NwYW4+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0 b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3Ai PjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2Nr Ij48c3BhbiBjbGFzcz0iaW5zZXJ0Ij4gICBwcm90b2NvbHMgYW5kIE9TUEYgcmVzcGVjdGl2ZWx5 LiAgVGhlc2Ugc2VjdXJpdHkgdGhyZWF0cyBhcmUgYWxzbzwvc3Bhbj48L3RkPjx0ZCBjbGFzcz0i bGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGlu ZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+PC90ZD48dGQ+IDwvdGQ+ PHRkIGNsYXNzPSJyYmxvY2siPjxzcGFuIGNsYXNzPSJpbnNlcnQiPiAgIGFwcGxpY2FibGUgdG8g dGhlIG1lY2hhbmlzbXMgZGVzY3JpYmVkIGluIHRoaXMgZG9jdW1lbnQuT1NQRjwvc3Bhbj48L3Rk Pjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0 ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+PC90 ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPjxzcGFuIGNsYXNzPSJpbnNlcnQiPiAgIGF1 dGhlbnRpY2F0aW9uIGRlc2NyaWJlZCBpbiBbUkZDMjMyOF0gYW5kIFtSRkM1MzQwXSBvciBleHRl bmRlZDwvc3Bhbj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3Ry Pg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xh c3M9ImxibG9jayI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPjxzcGFuIGNsYXNz PSJpbnNlcnQiPiAgIGF1dGhlbnRpY2F0aW9uIG1lY2hhbmlzbXMgZGVzY3JpYmVkIGluIFtSRkM3 NDc0XSBvciBbUkZDNzE2Nl0gU0hPVUxEPC9zcGFuPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZh bGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGln bj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9 InJibG9jayI+PHNwYW4gY2xhc3M9Imluc2VydCI+ICAgYmUgdXNlZCBpbiBkZXBsb3ltZW50cyB3 aGVyZSBhdHRhY2tlcnMgaGF2ZSBhY2Nlc3MgdG8gdGhlIHBoeXNpY2FsPC9zcGFuPjwvdGQ+PHRk IGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNs YXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48L3RkPjx0 ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+PHNwYW4gY2xhc3M9Imluc2VydCI+ICAgbmV0d29y a3MgYW5kIG5vZGVzIGluY2x1ZGVkIGluIHRoZSBPU1BGIGRvbWFpbiBhcmUgdnVsbmVyYWJsZS48 L3NwYW4+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAg ICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJs YmxvY2siPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj4gICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0 cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij42 LiAgT3BlcmF0aW9uYWwgQ29uc2lkZXJhdGlvbnM8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJp Z2h0Ij42LiAgT3BlcmF0aW9uYWwgQ29uc2lkZXJhdGlvbnM8L3RkPjx0ZCBjbGFzcz0ibGluZW5v IiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2 YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFz cz0icmlnaHQiPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+ DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFz cz0ibGVmdCI+ICAgT3BlcmF0b3JzIGNhbiBhc3NpZ24gbWVhbmluZyB0byB0aGUgbm9kZSBhZG1p bmlzdHJhdGl2ZSB0YWdzIHdoaWNoIGlzPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ ICAgT3BlcmF0b3JzIGNhbiBhc3NpZ24gbWVhbmluZyB0byB0aGUgbm9kZSBhZG1pbmlzdHJhdGl2 ZSB0YWdzIHdoaWNoIGlzPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+ PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRk IGNsYXNzPSJsZWZ0Ij4gICBsb2NhbCB0byB0aGUgb3BlcmF0b3IncyBhZG1pbmlzdHJhdGl2ZSBk b21haW4uICBUaGUgb3BlcmF0aW9uYWwgdXNlPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdo dCI+ICAgbG9jYWwgdG8gdGhlIG9wZXJhdG9yJ3MgYWRtaW5pc3RyYXRpdmUgZG9tYWluLiAgVGhl IG9wZXJhdGlvbmFsIHVzZTwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3Rk PjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0 ZCBjbGFzcz0ibGVmdCI+ICAgb2Ygbm9kZSBhZG1pbmlzdHJhdGl2ZSB0YWdzIGlzIGFuYWxvZ2lj YWwgdG8gdGhlIElTLUlTIHByZWZpeCB0YWdzPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdo dCI+ICAgb2Ygbm9kZSBhZG1pbmlzdHJhdGl2ZSB0YWdzIGlzIGFuYWxvZ2ljYWwgdG8gdGhlIElT LUlTIHByZWZpeCB0YWdzPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+ PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRk IGNsYXNzPSJsZWZ0Ij4gICBbUkZDNTEzMF0gYW5kIEJHUCBjb21tdW5pdGllcyBbUkZDMTk5N10u ICBPcGVyYXRpb25hbCBkaXNjaXBsaW5lIGFuZDwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmln aHQiPiAgIFtSRkM1MTMwXSBhbmQgQkdQIGNvbW11bml0aWVzIFtSRkMxOTk3XS4gIE9wZXJhdGlv bmFsIGRpc2NpcGxpbmUgYW5kPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwv dGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+ PHRkIGNsYXNzPSJsZWZ0Ij4gICBwcm9jZWR1cmVzIGZvbGxvd2VkIGluIGNvbmZpZ3VyaW5nIGFu ZCB1c2luZyBCR1AgY29tbXVuaXRpZXMgYW5kIElTSVM8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9 InJpZ2h0Ij4gICBwcm9jZWR1cmVzIGZvbGxvd2VkIGluIGNvbmZpZ3VyaW5nIGFuZCB1c2luZyBC R1AgY29tbXVuaXRpZXMgYW5kIElTSVM8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRv cCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+ PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIFByZWZpeCB0YWdzIGlzIGFsc28gYXBwbGljYWJsZSB0 byB0aGUgdXNhZ2Ugb2Ygbm9kZSBhZG1pbmlzdHJhdGl2ZTwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFz cz0icmlnaHQiPiAgIFByZWZpeCB0YWdzIGlzIGFsc28gYXBwbGljYWJsZSB0byB0aGUgdXNhZ2Ug b2Ygbm9kZSBhZG1pbmlzdHJhdGl2ZTwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9w Ij48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48 L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgdGFncy48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJp Z2h0Ij4gICB0YWdzLjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwv dHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBj bGFzcz0ibGVmdCI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+PC90ZD48dGQgY2xh c3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9 ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0i cmlnaHQiPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4NCiAgICAgIDx0ciBiZ2Nv bG9yPSJncmF5Ij48dGQ+PC90ZD48dGg+PGEgbmFtZT0icGFydC1sNyI+PHNtYWxsPnNraXBwaW5n IHRvIGNoYW5nZSBhdDwvc21hbGw+PGVtPiBwYWdlIDEzLCBsaW5lIDMzPC9lbT48L2E+PC90aD48 dGg+IDwvdGg+PHRoPjxhIG5hbWU9InBhcnQtcjciPjxzbWFsbD5za2lwcGluZyB0byBjaGFuZ2Ug YXQ8L3NtYWxsPjxlbT4gcGFnZSAxMywgbGluZSA0MjwvZW0+PC9hPjwvdGg+PHRkPjwvdGQ+PC90 cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNs YXNzPSJsZWZ0Ij4gICBbSS1ELmlldGYtcnRnd2ctcG9saWN5LW1vZGVsXTwvdGQ+PHRkPiA8L3Rk Pjx0ZCBjbGFzcz0icmlnaHQiPiAgIFtJLUQuaWV0Zi1ydGd3Zy1wb2xpY3ktbW9kZWxdPC90ZD48 dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQg Y2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICAgICAg ICAgICAgIFNoYWlraCwgQS4sIHJqc0Byb2Iuc2gsIHIuLCBEJ1NvdXphLCBLLiwgYW5kIEMuIENo YXNlLDwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgICAgICAgICAgICAgU2hhaWto LCBBLiwgcmpzQHJvYi5zaCwgci4sIEQnU291emEsIEsuLCBhbmQgQy4gQ2hhc2UsPC90ZD48dGQg Y2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xh c3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICAgICAgICAg ICAgICJSb3V0aW5nIFBvbGljeSBDb25maWd1cmF0aW9uIE1vZGVsIGZvciBTZXJ2aWNlIFByb3Zp ZGVyPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgICAgICAgICAgICAiUm91dGlu ZyBQb2xpY3kgQ29uZmlndXJhdGlvbiBNb2RlbCBmb3IgU2VydmljZSBQcm92aWRlcjwvdGQ+PHRk IGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNs YXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgICAgICAg ICAgICBOZXR3b3JrcyIsIGRyYWZ0LWlldGYtcnRnd2ctcG9saWN5LW1vZGVsLTAwICh3b3JrIGlu PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgICAgICAgICAgICBOZXR3b3JrcyIs IGRyYWZ0LWlldGYtcnRnd2ctcG9saWN5LW1vZGVsLTAwICh3b3JrIGluPC90ZD48dGQgY2xhc3M9 ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9Imxp bmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICAgICAgICAgICAgIHBy b2dyZXNzKSwgU2VwdGVtYmVyIDIwMTUuPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ ICAgICAgICAgICAgICBwcm9ncmVzcyksIFNlcHRlbWJlciAyMDE1LjwvdGQ+PHRkIGNsYXNzPSJs aW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5l bm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+PC90ZD48dGQ+IDwvdGQ+PHRk IGNsYXNzPSJyaWdodCI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+ PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRk IGNsYXNzPSJsZWZ0Ij4gICBbUkZDMTk5N10gIENoYW5kcmEsIFIuLCBUcmFpbmEsIFAuLCBhbmQg VC4gTGksICJCR1AgQ29tbXVuaXRpZXM8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4g ICBbUkZDMTk5N10gIENoYW5kcmEsIFIuLCBUcmFpbmEsIFAuLCBhbmQgVC4gTGksICJCR1AgQ29t bXVuaXRpZXM8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0K ICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9 ImxlZnQiPiAgICAgICAgICAgICAgQXR0cmlidXRlIiwgUkZDIDE5OTcsIERPSSAxMC4xNzQ4Ny9S RkMxOTk3LCBBdWd1c3QgMTk5Niw8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICAg ICAgICAgICAgIEF0dHJpYnV0ZSIsIFJGQyAxOTk3LCBET0kgMTAuMTc0ODcvUkZDMTk5NywgQXVn dXN0IDE5OTYsPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4N CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNz PSJsZWZ0Ij4gICAgICAgICAgICAgICZsdDtodHRwOi8vd3d3LnJmYy1lZGl0b3Iub3JnL2luZm8v cmZjMTk5NyZndDsuPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgICAgICAgICAg ICAmbHQ7aHR0cDovL3d3dy5yZmMtZWRpdG9yLm9yZy9pbmZvL3JmYzE5OTcmZ3Q7LjwvdGQ+PHRk IGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNs YXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+PC90ZD48dGQ+ IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0 b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQ+PGEgbmFtZT0iZGlmZjAwMTAiPjwvYT48L3Rk PjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0 ZCBjbGFzcz0ibGJsb2NrIj48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+ICAgPHNw YW4gY2xhc3M9Imluc2VydCI+W1JGQzQ1OTNdICBCYXJiaXIsIEEuLCBNdXJwaHksIFMuLCBhbmQg WS4gWWFuZywgIkdlbmVyaWMgVGhyZWF0cyB0bzwvc3Bhbj48L3RkPjx0ZCBjbGFzcz0ibGluZW5v IiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2 YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNs YXNzPSJyYmxvY2siPjxzcGFuIGNsYXNzPSJpbnNlcnQiPiAgICAgICAgICAgICAgUm91dGluZyBQ cm90b2NvbHMiLCBSRkMgNDU5MywgRE9JIDEwLjE3NDg3L1JGQzQ1OTMsPC9zcGFuPjwvdGQ+PHRk IGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNs YXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48L3RkPjx0 ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+PHNwYW4gY2xhc3M9Imluc2VydCI+ICAgICAgICAg ICAgICBPY3RvYmVyIDIwMDYsICZsdDtodHRwOi8vd3d3LnJmYy1lZGl0b3Iub3JnL2luZm8vcmZj NDU5MyZndDsuPC9zcGFuPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3Rk PjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0 ZCBjbGFzcz0ibGJsb2NrIj48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+ICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgIDwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+ DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFz cz0ibGVmdCI+ICAgW1JGQzUxMzBdICBQcmV2aWRpLCBTLiwgU2hhbmQsIE0uLCBFZC4sIGFuZCBD LiBNYXJ0aW4sICJBIFBvbGljeTwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIFtS RkM1MTMwXSAgUHJldmlkaSwgUy4sIFNoYW5kLCBNLiwgRWQuLCBhbmQgQy4gTWFydGluLCAiQSBQ b2xpY3k8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAg ICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9Imxl ZnQiPiAgICAgICAgICAgICAgQ29udHJvbCBNZWNoYW5pc20gaW4gSVMtSVMgVXNpbmcgQWRtaW5p c3RyYXRpdmUgVGFncyIsPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgICAgICAg ICAgICBDb250cm9sIE1lY2hhbmlzbSBpbiBJUy1JUyBVc2luZyBBZG1pbmlzdHJhdGl2ZSBUYWdz Iiw8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAg PHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQi PiAgICAgICAgICAgICAgUkZDIDUxMzAsIERPSSAxMC4xNzQ4Ny9SRkM1MTMwLCBGZWJydWFyeSAy MDA4LDwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgICAgICAgICAgICAgUkZDIDUx MzAsIERPSSAxMC4xNzQ4Ny9SRkM1MTMwLCBGZWJydWFyeSAyMDA4LDwvdGQ+PHRkIGNsYXNzPSJs aW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5l bm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgICAgICAgICAgICAmbHQ7 aHR0cDovL3d3dy5yZmMtZWRpdG9yLm9yZy9pbmZvL3JmYzUxMzAmZ3Q7LjwvdGQ+PHRkPiA8L3Rk Pjx0ZCBjbGFzcz0icmlnaHQiPiAgICAgICAgICAgICAgJmx0O2h0dHA6Ly93d3cucmZjLWVkaXRv ci5vcmcvaW5mby9yZmM1MTMwJmd0Oy48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRv cCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+ PC90ZD48dGQgY2xhc3M9ImxlZnQiPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPjwv dGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+ PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAg W1JGQzUyODZdICBBdGxhcywgQS4sIEVkLiBhbmQgQS4gWmluaW4sIEVkLiwgIkJhc2ljIFNwZWNp ZmljYXRpb24gZm9yPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgW1JGQzUyODZd ICBBdGxhcywgQS4sIEVkLiBhbmQgQS4gWmluaW4sIEVkLiwgIkJhc2ljIFNwZWNpZmljYXRpb24g Zm9yPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAg IDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0 Ij4gICAgICAgICAgICAgIElQIEZhc3QgUmVyb3V0ZTogTG9vcC1GcmVlIEFsdGVybmF0ZXMiLCBS RkMgNTI4Niw8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICAgICAgICAgICAgIElQ IEZhc3QgUmVyb3V0ZTogTG9vcC1GcmVlIEFsdGVybmF0ZXMiLCBSRkMgNTI4Niw8L3RkPjx0ZCBj bGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFz cz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgICAgICAgICAg ICAgRE9JIDEwLjE3NDg3L1JGQzUyODYsIFNlcHRlbWJlciAyMDA4LDwvdGQ+PHRkPiA8L3RkPjx0 ZCBjbGFzcz0icmlnaHQiPiAgICAgICAgICAgICAgRE9JIDEwLjE3NDg3L1JGQzUyODYsIFNlcHRl bWJlciAyMDA4LDwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+ DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFz cz0ibGVmdCI+ICAgICAgICAgICAgICAmbHQ7aHR0cDovL3d3dy5yZmMtZWRpdG9yLm9yZy9pbmZv L3JmYzUyODYmZ3Q7LjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgICAgICAgICAg ICAgJmx0O2h0dHA6Ly93d3cucmZjLWVkaXRvci5vcmcvaW5mby9yZmM1Mjg2Jmd0Oy48L3RkPjx0 ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBj bGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPjwvdGQ+PHRk PiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0i dG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkPjxhIG5hbWU9ImRpZmYwMDExIj48L2E+PC90 ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48 dGQgY2xhc3M9ImxibG9jayI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPiAgIDxz cGFuIGNsYXNzPSJpbnNlcnQiPltSRkM2ODYzXSAgSGFydG1hbiwgUy4gYW5kIEQuIFpoYW5nLCAi QW5hbHlzaXMgb2YgT1NQRiBTZWN1cml0eTwvc3Bhbj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2 YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxp Z249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNz PSJyYmxvY2siPjxzcGFuIGNsYXNzPSJpbnNlcnQiPiAgICAgICAgICAgICAgQWNjb3JkaW5nIHRv IHRoZSBLZXlpbmcgYW5kIEF1dGhlbnRpY2F0aW9uIGZvciBSb3V0aW5nPC9zcGFuPjwvdGQ+PHRk IGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNs YXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48L3RkPjx0 ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+PHNwYW4gY2xhc3M9Imluc2VydCI+ICAgICAgICAg ICAgICBQcm90b2NvbHMgKEtBUlApIERlc2lnbiBHdWlkZSIsIFJGQyA2ODYzLDwvc3Bhbj48L3Rk Pjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0 ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+PC90 ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPjxzcGFuIGNsYXNzPSJpbnNlcnQiPiAgICAg ICAgICAgICAgRE9JIDEwLjE3NDg3L1JGQzY4NjMsIE1hcmNoIDIwMTMsPC9zcGFuPjwvdGQ+PHRk IGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNs YXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48L3RkPjx0 ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+PHNwYW4gY2xhc3M9Imluc2VydCI+ICAgICAgICAg ICAgICAmbHQ7aHR0cDovL3d3dy5yZmMtZWRpdG9yLm9yZy9pbmZvL3JmYzY4NjMmZ3Q7Ljwvc3Bh bj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAg PHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9j ayI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPjxzcGFuIGNsYXNzPSJpbnNlcnQi Pjwvc3Bhbj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0K ICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9 ImxibG9jayI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPjxzcGFuIGNsYXNzPSJp bnNlcnQiPiAgIFtSRkM3MTY2XSAgQmhhdGlhLCBNLiwgTWFucmFsLCBWLiwgYW5kIEEuIExpbmRl bSwgIlN1cHBvcnRpbmc8L3NwYW4+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3Ai PjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwv dGQ+PHRkIGNsYXNzPSJsYmxvY2siPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48 c3BhbiBjbGFzcz0iaW5zZXJ0Ij4gICAgICAgICAgICAgIEF1dGhlbnRpY2F0aW9uIFRyYWlsZXIg Zm9yIE9TUEZ2MyIsIFJGQyA3MTY2LDwvc3Bhbj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxp Z249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249 InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJy YmxvY2siPjxzcGFuIGNsYXNzPSJpbnNlcnQiPiAgICAgICAgICAgICAgRE9JIDEwLjE3NDg3L1JG QzcxNjYsIE1hcmNoIDIwMTQsPC9zcGFuPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0i dG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9w Ij48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9j ayI+PHNwYW4gY2xhc3M9Imluc2VydCI+ICAgICAgICAgICAgICAmbHQ7aHR0cDovL3d3dy5yZmMt ZWRpdG9yLm9yZy9pbmZvL3JmYzcxNjYmZ3Q7Ljwvc3Bhbj48L3RkPjx0ZCBjbGFzcz0ibGluZW5v IiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2 YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNs YXNzPSJyYmxvY2siPjxzcGFuIGNsYXNzPSJpbnNlcnQiPjwvc3Bhbj48L3RkPjx0ZCBjbGFzcz0i bGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGlu ZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+PC90ZD48dGQ+IDwvdGQ+ PHRkIGNsYXNzPSJyYmxvY2siPjxzcGFuIGNsYXNzPSJpbnNlcnQiPiAgIFtSRkM3NDc0XSAgQmhh dGlhLCBNLiwgSGFydG1hbiwgUy4sIFpoYW5nLCBELiwgYW5kIEEuIExpbmRlbSwgRWQuLDwvc3Bh bj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAg PHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9j ayI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPjxzcGFuIGNsYXNzPSJpbnNlcnQi PiAgICAgICAgICAgICAgIlNlY3VyaXR5IEV4dGVuc2lvbiBmb3IgT1NQRnYyIFdoZW4gVXNpbmcg TWFudWFsIEtleTwvc3Bhbj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90 ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48 dGQgY2xhc3M9ImxibG9jayI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPjxzcGFu IGNsYXNzPSJpbnNlcnQiPiAgICAgICAgICAgICAgTWFuYWdlbWVudCIsIFJGQyA3NDc0LCBET0kg MTAuMTc0ODcvUkZDNzQ3NCwgQXByaWwgMjAxNSw8L3NwYW4+PC90ZD48dGQgY2xhc3M9ImxpbmVu byIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIg dmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPjwvdGQ+PHRkPiA8L3RkPjx0ZCBj bGFzcz0icmJsb2NrIj48c3BhbiBjbGFzcz0iaW5zZXJ0Ij4gICAgICAgICAgICAgICZsdDtodHRw Oi8vd3d3LnJmYy1lZGl0b3Iub3JnL2luZm8vcmZjNzQ3NCZndDsuPC9zcGFuPjwvdGQ+PHRkIGNs YXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNz PSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48L3RkPjx0ZD4g PC90ZD48dGQgY2xhc3M9InJibG9jayI+ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIDwvdGQ+PHRkIGNsYXNzPSJs aW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5l bm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+QXV0aG9ycycgQWRkcmVzc2Vz PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+QXV0aG9ycycgQWRkcmVzc2VzPC90ZD48 dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQg Y2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij48L3RkPjx0 ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249 InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRv cCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIFNocmFkZGhhIEhlZ2RlPC90ZD48dGQ+IDwvdGQ+ PHRkIGNsYXNzPSJyaWdodCI+ICAgU2hyYWRkaGEgSGVnZGU8L3RkPjx0ZCBjbGFzcz0ibGluZW5v IiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2 YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIEp1bmlwZXIgTmV0d29ya3MsIElu Yy48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBKdW5pcGVyIE5ldHdvcmtzLCBJ bmMuPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAg IDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0 Ij4gICBFbWJhc3N5IEJ1c2luZXNzIFBhcms8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0 Ij4gICBFbWJhc3N5IEJ1c2luZXNzIFBhcms8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249 InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRv cCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIEJhbmdhbG9yZSwgS0EgIDU2MDA5MzwvdGQ+PHRk PiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIEJhbmdhbG9yZSwgS0EgIDU2MDA5MzwvdGQ+PHRk IGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNs YXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgSW5kaWE8 L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBJbmRpYTwvdGQ+PHRkIGNsYXNzPSJs aW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5l bm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+PC90ZD48dGQ+IDwvdGQ+PHRk IGNsYXNzPSJyaWdodCI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+ PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRk IGNsYXNzPSJsZWZ0Ij4gICBFbWFpbDogc2hyYWRkaGFAanVuaXBlci5uZXQ8L3RkPjx0ZD4gPC90 ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBFbWFpbDogc2hyYWRkaGFAanVuaXBlci5uZXQ8L3RkPjx0 ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZD48 YSBuYW1lPSJkaWZmMDAxMiI+PC9hPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9Imxp bmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPjwvdGQ+PHRkPiA8L3Rk Pjx0ZCBjbGFzcz0icmJsb2NrIj48c3BhbiBjbGFzcz0iaW5zZXJ0Ij4gICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg PC9zcGFuPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQog ICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0i bGVmdCI+ICAgUm9iIFNoYWtpcjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIFJv YiBTaGFraXI8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0K ICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9 ImxlZnQiPiAgIEluZGl2aWR1YWw8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBJ bmRpdmlkdWFsPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4N CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNz PSJsZWZ0Ij48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij48L3RkPjx0ZCBjbGFzcz0i bGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGlu ZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIEVtYWlsOiByanNAcm9i LnNoPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgRW1haWw6IHJqc0Byb2Iuc2g8 L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRy Pjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPjwv dGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZh bGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGln bj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgQW50b24gU21pcm5vdjwvdGQ+PHRkPiA8 L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIEFudG9uIFNtaXJub3Y8L3RkPjx0ZCBjbGFzcz0ibGlu ZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5v IiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIENpc2NvIFN5c3RlbXMsIElu Yy48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBDaXNjbyBTeXN0ZW1zLCBJbmMu PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0 cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4g ICBEZSBLbGVldGxhYW4gNmE8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBEZSBL bGVldGxhYW4gNmE8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3Ry Pg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xh c3M9ImxlZnQiPiAgIERpZWdlbSAgMTgzMTwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQi PiAgIERpZWdlbSAgMTgzMTwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3Rk PjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0 ZCBjbGFzcz0ibGVmdCI+ICAgQmVsZ2l1bTwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQi PiAgIEJlbGdpdW08L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3Ry Pg0KDQogICAgIDx0cj48dGQ+PC90ZD48dGQgY2xhc3M9ImxlZnQiPjwvdGQ+PHRkPiA8L3RkPjx0 ZCBjbGFzcz0icmlnaHQiPjwvdGQ+PHRkPjwvdGQ+PC90cj4NCiAgICAgPHRyIGJnY29sb3I9Imdy YXkiPjx0aCBjb2xzcGFuPSI1IiBhbGlnbj0iY2VudGVyIj48YSBuYW1lPSJlbmQiPiZuYnNwO0Vu ZCBvZiBjaGFuZ2VzLiAxMiBjaGFuZ2UgYmxvY2tzLiZuYnNwOzwvYT48L3RoPjwvdHI+DQogICAg IDx0ciBjbGFzcz0ic3RhdHMiPjx0ZD48L3RkPjx0aD48aT45IGxpbmVzIGNoYW5nZWQgb3IgZGVs ZXRlZDwvaT48L3RoPjx0aD48aT4gPC9pPjwvdGg+PHRoPjxpPjQyIGxpbmVzIGNoYW5nZWQgb3Ig YWRkZWQ8L2k+PC90aD48dGQ+PC90ZD48L3RyPg0KICAgICA8dHI+PHRkIGNvbHNwYW49IjUiIGNs YXNzPSJzbWFsbCIgYWxpZ249ImNlbnRlciI+PGJyPlRoaXMgaHRtbCBkaWZmIHdhcyBwcm9kdWNl ZCBieSByZmNkaWZmIDEuNDIuIFRoZSBsYXRlc3QgdmVyc2lvbiBpcyBhdmFpbGFibGUgZnJvbSA8 YSBocmVmPSJodHRwOi8vd3d3LnRvb2xzLmlldGYub3JnL3Rvb2xzL3JmY2RpZmYvIj5odHRwOi8v dG9vbHMuaWV0Zi5vcmcvdG9vbHMvcmZjZGlmZi88L2E+IDwvdGQ+PC90cj4NCiAgIDwvdGJvZHk+ PC90YWJsZT4NCiAgIA0KICAgDQo8L2JvZHk+PC9odG1sPg0KPCEtLSBhcmdzOiB7Jy0tb2xkY29s b3VyJzogJ3JlZCcsICctLXdpZHRoJzogJycsICdkaWZmdHlwZSc6ICctLWh0bWwnLCAndXJsMSc6 ICcnLCAnc3VibWl0JzogJ0dlbmVyYXRlIGRpZmYnLCAndXJsMic6ICcnLCAnLS1uZXdjb2xvdXIn OiAnZ3JlZW4nfSAtLT4= --_002_BY1PR0501MB1381A8D06B804AE4508F371AD5320BY1PR0501MB1381_-- From nobody Thu Oct 22 07:18:09 2015 Return-Path: X-Original-To: secdir@ietfa.amsl.com Delivered-To: secdir@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 3F6571B3327; Mon, 12 Oct 2015 07:23:14 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.901 X-Spam-Level: X-Spam-Status: No, score=-1.901 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 0jJOlI3IwkQO; Mon, 12 Oct 2015 07:23:10 -0700 (PDT) Received: from na01-bn1-obe.outbound.protection.outlook.com (mail-bn1on0775.outbound.protection.outlook.com [IPv6:2a01:111:f400:fc10::775]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 3B5321B3325; Mon, 12 Oct 2015 07:23:10 -0700 (PDT) Received: from CO1PR05MB458.namprd05.prod.outlook.com (10.141.72.140) by CO1PR05MB457.namprd05.prod.outlook.com (10.141.72.141) with Microsoft SMTP Server (TLS) id 15.1.293.16; Mon, 12 Oct 2015 14:22:47 +0000 Received: from CO1PR05MB458.namprd05.prod.outlook.com ([169.254.16.74]) by CO1PR05MB458.namprd05.prod.outlook.com ([169.254.16.193]) with mapi id 15.01.0293.007; Mon, 12 Oct 2015 14:22:47 +0000 From: Kent Watsen To: Benoit Claise , Simon Josefsson , "iesg@ietf.org" , "secdir@ietf.org" , NETCONF , "draft-ietf-netconf-call-home.all@ietf.org" Thread-Topic: [Netconf] review of draft-ietf-netconf-call-home-11 Thread-Index: AQHRANYkB04UoC2GL0O6JoJSU3KY855ng5wAgAAqloA= Date: Mon, 12 Oct 2015 14:22:47 +0000 Message-ID: References: <8737xnp0rm.fsf@latte.josefsson.org> <561B663C.7080408@cisco.com> In-Reply-To: <561B663C.7080408@cisco.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/14.4.4.140807 authentication-results: spf=none (sender IP is ) smtp.mailfrom=kwatsen@juniper.net; x-ms-exchange-messagesentrepresentingtype: 1 x-originating-ip: [66.129.239.10] x-microsoft-exchange-diagnostics: 1; CO1PR05MB457; 5:mtMJbu/hjTiUoNx8Q92XiUakzMn05EW5vLtzfRCmWjo8/UXLiMNYqaZHUIXiWswR1OWoMZ+5RbY1V22a7AbOcVUquw4ZtKZYpsCJzvStuW+9B5K3OGWIDZcTAhT38dz6iwLxeDKC67K/e8Zj67zMtg==; 24:eN7ZhYoU+Tj/Lhpboey59x3sST/fvuQuUNRZyZpyFHs8bgaahZOho1/hsx3Szj8vVn0RpI+MJKYCYZBfyu2rPOIjtxdZ5+YaUZhPMDo1zSM=; 20:EZ+kCxYZi73CQNX9Y30LYbkVu9v8LgybcQpcY4aSjygIVlR4Dcwgb9gnZI5re3wjp0AiWkbJVrabi+jFBRYXxw== x-microsoft-antispam: UriScan:;BCL:0;PCL:0;RULEID:;SRVR:CO1PR05MB457; x-microsoft-antispam-prvs: x-exchange-antispam-report-test: UriScan:(95692535739014); x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(601004)(2401047)(5005006)(520078)(8121501046)(3002001); SRVR:CO1PR05MB457; BCL:0; PCL:0; RULEID:; SRVR:CO1PR05MB457; x-forefront-prvs: 0727122FC6 x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(52604005)(199003)(164054003)(377454003)(189002)(2501003)(102836002)(11100500001)(122556002)(15975445007)(2201001)(107886002)(36756003)(86362001)(5007970100001)(87936001)(105586002)(2950100001)(106116001)(189998001)(106356001)(10400500002)(2900100001)(99286002)(83506001)(40100003)(230783001)(66066001)(50986999)(5008740100001)(4001350100001)(19580405001)(76176999)(19580395003)(64706001)(97736004)(101416001)(5001770100001)(5001960100002)(5004730100002)(5002640100001)(46102003)(16236675004)(54356999)(19617315012)(92566002)(81156007); DIR:OUT; SFP:1102; SCL:1; SRVR:CO1PR05MB457; H:CO1PR05MB458.namprd05.prod.outlook.com; FPR:; SPF:None; PTR:InfoNoRecords; A:1; MX:1; LANG:en; received-spf: None (protection.outlook.com: juniper.net does not designate permitted sender hosts) spamdiagnosticoutput: 1:23 spamdiagnosticmetadata: NSPM Content-Type: multipart/alternative; boundary="_000_D24136E6E6AAAkwatsenjunipernet_" MIME-Version: 1.0 X-OriginatorOrg: juniper.net X-MS-Exchange-CrossTenant-originalarrivaltime: 12 Oct 2015 14:22:47.5849 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: bea78b3c-4cdb-4130-854a-1d193232e5f4 X-MS-Exchange-Transport-CrossTenantHeadersStamped: CO1PR05MB457 Archived-At: X-Mailman-Approved-At: Thu, 22 Oct 2015 07:18:02 -0700 Subject: Re: [secdir] [Netconf] review of draft-ietf-netconf-call-home-11 X-BeenThere: secdir@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: Security Area Directorate List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 12 Oct 2015 14:23:14 -0000 --_000_D24136E6E6AAAkwatsenjunipernet_ Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable Hi Simon, Regarding your two comments: 1. Are non-certificate-based TLS out of scope for NETCONF/RESTCONF? Yes or, more specifically, both NETCONF over TLS and and RESTCONF restrict = TLS to certificates. The relevant text is in RFC 7589, Section 1 and draft= -ietf-netconf-restconf-07, Section 2.2. Do you think there should be a no= te in this draft stating this as well? 2. Section 2 says 'The term "NETCONF/RESTCONF client" can refer to the [RFC= 6241], Section 1.1 "client".' Does Benoit's suggestion to replace "can refer" with "refers" satisfy the l= anguage vagueness issue? - And also, are you satisfied with having the si= ngle reference to RFC6241, since RESTCONF pulls the term from RFC6241 as we= ll? Thanks Kent From: Benoit Claise > Date: Monday, October 12, 2015 at 3:50 AM To: Simon Josefsson >, "ies= g@ietf.org" >, "s= ecdir@ietf.org" >, "draft-ietf-netconf-call-home.all@tools.ietf.org" >, "net= conf@ietf.org" > Subject: Re: [Netconf] review of draft-ietf-netconf-call-home-11 Hi Simon, Thanks for your review. One comment below. Hi. I have reviewed this document as part of the security directorate's ongoing effort to review all IETF documents being processed by the IESG. These comments were written primarily for the benefit of the security area directors. Document editors and WG chairs should treat these comments just like any other last call comments. I believe the document is ready. One main security concern is the reversal of roles that this document introduce, but letting TCP clients act as TLS/SSH servers, and vice versa, is not unheard of. As long as proper peer authentication is performed, and other parts of the security protocols are properly performed, I see no fundamental problem with this. I'm sure some implementations will need to be tweaked to deal with this, and terminology might confusing at times. The 'Security Considerations' section does a good job discussing this, and some other issues too. Two minor questions: 1) Are non-certificate-based TLS out of scope for NETCONF/RESTCONF? I see no discussion of it in this draft, and text in the document implicitly assumes host keys (SSH) or certificates (TLS) are used. Think about TLS-PSK for example, which seems like a relevant idea for embedded devices. This may not be the document to adress this, but if there is work towards that goal already, it might be useful to align this document with that. 2) Section 2 says 'The term "NETCONF/RESTCONF client" can refer to the [RFC6241], Section 1.1 "client".'. Shouldn't this say the term may refer to a RESTCONF client and reference draft-ietf-netconf-restconf? Or is that not intentional? The use of the word 'can' make this text vague to me. The previous section (1.5) says that 'NETCONF/RESTCONF' is an abbrevation for 'the NETCONF or the RESTCONF'. The same comment applies to section 3. Maybe this is a misunderstanding on my side, but the text confused me so it may be useful to resolve. I mentioned this point in my AD review (http://www.ietf.org/mail-archive/we= b/netconf/current/msg10535.html). I now realize that I made a typo in my email: NETCONF/RESTCONF client" can = refers to the RFC 6241 section 1.1 "client" This should read: "NETCONF/RESTCONF client" refers to the RFC 6241 section= 1.1 "client" Ditto for NETCONF/RESTCONF server. This takes care of the confusing "can" word. Thanks for spotting that. Regarding the draft-ietf-netconf-restconf reference now. https://tools.ietf.org/html/draft-ietf-netconf-restconf-07#section-1.4.1 re= fers to RFC 6241 for the client. So I believe that we're good with a single reference to RFC 6241 in this dr= aft. Regards, Benoit Thanks, /Simon --_000_D24136E6E6AAAkwatsenjunipernet_ Content-Type: text/html; charset="us-ascii" Content-ID: <46940D7A31DB374695DC0CB634C6641E@namprd05.prod.outlook.com> Content-Transfer-Encoding: quoted-printable
Hi Simon,


Regarding your two comments:

1. Are non-certificate-based TLS out= of scope for NETCONF/RESTCONF?

Yes or, more specifically, both NETC= ONF over TLS and and RESTCONF= restrict TLS to certificates.  The relevant text is in RFC 7589, Section 1 and draft-ietf-netconf-restconf-07, Section 2.2.   Do you t= hink there should be a note in this draft stating this as well?

2. Secti= on 2 says 'The term "NETCONF/RESTCONF client" can refer to the [R= FC6241], Section 1.1 "client".'

Does Benoit's suggestion to replace = "can refer" with "refers" satisfy the language vaguenes= s issue?   - And also, are you satisfied with having the single refere= nce to RFC6241, since RESTCONF pulls the term from RFC6241 as well?


Thanks
Kent


From: Benoit Claise <bclaise@cisco.com>
Date: Monday, October 12, 2015 at 3= :50 AM
To: Simon Josefsson <simon@josefsson.org>, "iesg@ietf.org" <iesg@ietf.org>, "secd= ir@ietf.org" <secdir@ietf.org>, "draft-ietf-n= etconf-call-home.all@tools.ietf.org" <draft-ietf-netconf-call-home.all@= tools.ietf.org>, "netconf@ietf.org" <<= a href=3D"mailto:netconf@ietf.org">netconf@ietf.org>
Subject: Re: [Netconf] review of dr= aft-ietf-netconf-call-home-11

Hi Simon,

Thanks for your review.
One comment below.
Hi.

I have reviewed this document as part of the security directorate's
ongoing effort to review all IETF documents being processed by the IESG.
These comments were written primarily for the benefit of the security
area directors.  Document editors and WG chairs should treat these
comments just like any other last call comments.

I believe the document is ready.

One main security concern is the reversal of roles that this document
introduce, but letting TCP clients act as TLS/SSH servers, and vice
versa, is not unheard of.  As long as proper peer authentication is
performed, and other parts of the security protocols are properly
performed, I see no fundamental problem with this.  I'm sure some
implementations will need to be tweaked to deal with this, and
terminology might confusing at times.  The 'Security Considerations'
section does a good job discussing this, and some other issues too.

Two minor questions:

1) Are non-certificate-based TLS out of scope for NETCONF/RESTCONF?  I
see no discussion of it in this draft, and text in the document
implicitly assumes host keys (SSH) or certificates (TLS) are used.
Think about TLS-PSK for example, which seems like a relevant idea for
embedded devices.  This may not be the document to adress this, but if
there is work towards that goal already, it might be useful to align
this document with that.

2) Section 2 says 'The term "NETCONF/RESTCONF client" can refer t=
o the
[RFC6241], Section 1.1 "client".'.  Shouldn't this say the term m=
ay
refer to a RESTCONF client and reference draft-ietf-netconf-restconf?
Or is that not intentional?  The use of the word 'can' make this text
vague to me.  The previous section (1.5) says that 'NETCONF/RESTCONF' is
an abbrevation for 'the NETCONF or the RESTCONF'.  The same comment
applies to section 3.  Maybe this is a misunderstanding on my side, but
the text confused me so it may be useful to resolve.
I mentioned this point in my AD review (http://www.ietf.org/mail-archive/web/netconf/current/msg10535.html). I now realize that I made a typo in my email: NETCONF/RESTCONF client"= can refers to the RFC 6241 section 1.1 "client"
This should read:  "NETCONF/RESTCONF client" refers to the R= FC 6241 section 1.1 "client"
Ditto for NETCONF/RESTCONF server.
This takes care of the confusing "can" word. Thanks for spotting = that.

Regarding the draft-ietf-netconf-restconf reference now.
https://tools.ietf.org/html/draft= -ietf-netconf-restconf-07#section-1.4.1 refers to RFC 6241 for the clie= nt.
So I believe that we're good with a single reference to RFC 6241 in this dr= aft.

Regards, Benoit
Thanks,
/Simon

--_000_D24136E6E6AAAkwatsenjunipernet_-- From nobody Thu Oct 22 07:18:10 2015 Return-Path: X-Original-To: secdir@ietfa.amsl.com Delivered-To: secdir@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 056451A1A0B; Thu, 8 Oct 2015 07:33:09 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.201 X-Spam-Level: X-Spam-Status: No, score=-4.201 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id iAww6ubAJQQg; Thu, 8 Oct 2015 07:33:07 -0700 (PDT) Received: from usevmg21.ericsson.net (usevmg21.ericsson.net [198.24.6.65]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id B1EEF1A1A15; Thu, 8 Oct 2015 07:33:07 -0700 (PDT) X-AuditID: c6180641-f792c6d00000686a-dc-5616129533f7 Received: from EUSAAHC007.ericsson.se (Unknown_Domain [147.117.188.93]) by usevmg21.ericsson.net (Symantec Mail Security) with SMTP id 48.41.26730.59216165; Thu, 8 Oct 2015 08:52:05 +0200 (CEST) Received: from EUSAAMB103.ericsson.se ([147.117.188.120]) by EUSAAHC007.ericsson.se ([147.117.188.93]) with mapi id 14.03.0248.002; Thu, 8 Oct 2015 10:33:06 -0400 From: Kevin Ma J To: Tero Kivinen , "iesg@ietf.org" , "secdir@ietf.org" , "draft-ietf-cdni-media-type.all@tools.ietf.org" Thread-Topic: Secdir review of draft-ietf-cdni-media-type-04 Thread-Index: AQHRAajHGzHszqzt8UW8Jlr5SC9Jo55hp+jQ Date: Thu, 8 Oct 2015 14:33:05 +0000 Message-ID: References: <22038.12816.208794.496704@fireball.acr.fi> In-Reply-To: <22038.12816.208794.496704@fireball.acr.fi> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [147.117.188.9] Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFnrCLMWRmVeSWpSXmKPExsUyuXRPrO5UIbEwgwOdshYfdx5htpjxZyKz xdHzz9ksPix8yOLA4rFkyU8mj8NfF7J4fLn8mS2AOYrLJiU1J7MstUjfLoErY8aHL0wF80Qq Ph2RaGCcK9DFyMkhIWAisePDIzYIW0ziwr31QDYXh5DAUUaJlZcvMEI4yxglvs99yQRSxSag JfH4618mkISIwDlGicbHy8ASwgLWEgtub2QFsUUEbCQmn3oPZRtJ9DfOAlvBIqAiseznbrB6 XgFfiS+HHjGC2EIC5hL922eD1XAKWEjc6PvNDmIzAp30/dQasHpmAXGJW0/mM0GcKiCxZM95 ZghbVOLl43+sELaixL7+6ewQ9ToSC3Z/YoOwtSWWLXzNDLFXUOLkzCcsExhFZyEZOwtJyywk LbOQtCxgZFnFyFFanFqWm25kuIkRGC3HJNgcdzAu+GR5iFGAg1GJhzeBTSxMiDWxrLgy9xCj NAeLkjjvvBn3Q4UE0hNLUrNTUwtSi+KLSnNSiw8xMnFwSjUwSnc3LTkh1NswPfRXYK6Sab8S i6djV/Axfn/HNy7Xzhlt51hVHMB66NF7gcwY83mJOj5/D0bUb48y3VJgtSM5v0lwB2/GtoYZ MbtfqB7+FR0rpD/ty8IZ5nWuiQyZ+6eKHryzMHv/jsqZnw87/mlkXFokMNnlUD1j3W/JdEHO 8Jnz1rizT4lSYinOSDTUYi4qTgQA5WySEXcCAAA= Archived-At: X-Mailman-Approved-At: Thu, 22 Oct 2015 07:18:03 -0700 Subject: Re: [secdir] Secdir review of draft-ietf-cdni-media-type-04 X-BeenThere: secdir@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: Security Area Directorate List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 08 Oct 2015 14:33:09 -0000 Hi Tero, Thank you for the review. I have fixed the ABNF. I have also added the following text to the security considerations: The application/cdni media type is a generic media type to be used=09 by multiple CDNI interfaces for transporting different types of=09 control and logging information. Proper validation of message=09 data requires parsing and understanding the ptype parameter and=09 the associated data encoding. Failure to properly validate=09 payloads may allow data extrusion under the auspices of the=09 application/cdni media type. thanx! -- Kevin J. Ma > -----Original Message----- > From: Tero Kivinen [mailto:kivinen@iki.fi] > Sent: Thursday, October 08, 2015 5:06 AM > To: iesg@ietf.org; secdir@ietf.org; draft-ietf-cdni-media- > type.all@tools.ietf.org > Subject: Secdir review of draft-ietf-cdni-media-type-04 >=20 > I have reviewed this document as part of the security directorate's > ongoing effort to review all IETF documents being processed by the > IESG. These comments were written primarily for the benefit of the > security area directors. Document editors and WG chairs should treat > these comments just like any other last call comments. >=20 > This document allocates new media type for genera purpose content > delivery network interconnection protocol. It is general media type > which can be used to transmit whatever between CDNs. The actual format > of the content depends on the mandatory ptype parameter. >=20 > This document does not include separate Security considerations > section, but there is security considerations part of the section 2.1 > which describes the media type itself. >=20 > As this is general purpose media type which can be used to transfer > anything, the security considerations section is quite vague, just > pointing out that the individual CDNI interface specifications need to > specify the security considerations for the ptypes used. Perhaps the > security considerations section could mention that as this is generic > media type, it can easily used to transfer data out from the CDN > network without anybody noticing as firewalls will most likely just > see application/cdni, and do not look at the ptype itself. >=20 > Nits: >=20 > The ptype parameter defines ptype-char as follows: >=20 > ptype-char =3D %x21 / %23-3A / %x3C / %x3E-7E >=20 > I think there is 'x' missing from the "%23-3A", i.e. it should be > "%x23-3A". >=20 > I think this document is ready with nits. > -- > kivinen@iki.fi From nobody Thu Oct 22 07:18:12 2015 Return-Path: X-Original-To: secdir@ietfa.amsl.com Delivered-To: secdir@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 7BDF11B421C; Fri, 9 Oct 2015 07:55:44 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -3.85 X-Spam-Level: X-Spam-Status: No, score=-3.85 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HELO_EQ_SE=0.35, RCVD_IN_DNSWL_MED=-2.3] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id xJG_sK91lxFm; Fri, 9 Oct 2015 07:55:42 -0700 (PDT) Received: from nasse.dc.kau.se (smtp.kau.se [193.10.220.39]) (using TLSv1 with cipher ADH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 77BBE1B4293; Fri, 9 Oct 2015 07:55:42 -0700 (PDT) X-Spam-Processed: mail.kau.se, Fri, 09 Oct 2015 16:55:35 +0200 (not processed: spam filter heuristic analysis disabled) X-MDRemoteIP: 193.11.155.133 X-MDArrival-Date: Fri, 09 Oct 2015 16:55:35 +0200 X-Authenticated-Sender: anna.brunstrom@kau.se X-Return-Path: anna.brunstrom@kau.se X-Envelope-From: anna.brunstrom@kau.se To: David Mandelberg , iesg@ietf.org, secdir@ietf.org, draft-ietf-tcpm-rtorestart.all@tools.ietf.org References: <08c33803c2e1397c9467ad269bc55edc@mail.mandelberg.org> From: Anna Brunstrom Message-ID: <5617D566.50408@kau.se> Date: Fri, 9 Oct 2015 16:55:34 +0200 User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:38.0) Gecko/20100101 Thunderbird/38.2.0 MIME-Version: 1.0 In-Reply-To: <08c33803c2e1397c9467ad269bc55edc@mail.mandelberg.org> Content-Type: text/plain; charset=utf-8; format=flowed Content-Transfer-Encoding: 7bit Archived-At: X-Mailman-Approved-At: Thu, 22 Oct 2015 07:18:03 -0700 Subject: Re: [secdir] secdir review of draft-ietf-tcpm-rtorestart-08 X-BeenThere: secdir@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: Security Area Directorate List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 09 Oct 2015 14:55:44 -0000 Hi David, Thanks for your question. Answer inline. On 2015-10-06 23:22, David Mandelberg wrote: > I have reviewed this document as part of the security directorate's > ongoing effort to review all IETF documents being processed by the > IESG. These comments were written primarily for the benefit of the > security area directors. Document editors and WG chairs should treat > these comments just like any other last call comments. > > This document describes an experimental change to a TCP and SCTP > retransmission timer. > > I thought about multiple ways to attack the specified algorithm, and > was unable to come up with anything noteworthy. However, I should note > that I do not feel qualified to comment on the impact this change > might have on congestion in the Internet. > > The security considerations section primarily references RFC 6298, > which I believe is sufficient. > > As such, I think this document is Ready. > > > Venturing outside my area of expertise (so feel free to disregard > this), I have a question about section 4, step 3a. Would it make more > sense for the "0" to be replaced with a configurable parameter? It > seems to me that the number should be close to an inter-packet arrival > time to more accurately avoid the issue mentioned below ("this is > required to ensure that RTOR does not trigger retransmissions > prematurely when previously retransmitted segments are acknowledged"). You are correct in that an acknowledgment for a retransmitted segment may result in a value of RTO - T_earliest that is larger than zero. However in that case the RTO will be reset anyway when the segment is retransmitted in response to the ACK, so it is not a problem. So using a value of zero is the simplest approach to solve the issue. This thread on the tcpm list discusses the scenario in more detail: http://www.ietf.org/mail-archive/web/tcpm/current/msg09179.html . Best Regards, Anna From nobody Thu Oct 22 07:18:13 2015 Return-Path: X-Original-To: secdir@ietfa.amsl.com Delivered-To: secdir@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 1CE041B3904; Mon, 12 Oct 2015 23:13:15 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -6.56 X-Spam-Level: X-Spam-Status: No, score=-6.56 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HELO_EQ_FR=0.35, RCVD_IN_DNSWL_HI=-5, T_RP_MATCHES_RCVD=-0.01] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id F-9uduA4ybCh; Mon, 12 Oct 2015 23:13:12 -0700 (PDT) Received: from mail2-relais-roc.national.inria.fr (mail2-relais-roc.national.inria.fr [192.134.164.83]) (using TLSv1.2 with cipher RC4-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 1B89E1B3901; Mon, 12 Oct 2015 23:13:11 -0700 (PDT) X-IronPort-AV: E=Sophos;i="5.17,676,1437429600"; d="scan'208";a="182463755" Received: from ppp-seco21th2-46-193-174-136.wb.wifirst.net (HELO [10.188.169.250]) ([46.193.174.136]) by mail2-relais-roc.national.inria.fr with ESMTP/TLS/AES128-SHA; 13 Oct 2015 08:13:09 +0200 Content-Type: text/plain; charset=us-ascii Mime-Version: 1.0 (Mac OS X Mail 7.3 \(1878.6\)) From: Damien Saucez In-Reply-To: <201510130301.t9D31WfT016243@sylvester.rhmr.com> Date: Tue, 13 Oct 2015 08:13:08 +0200 Content-Transfer-Encoding: quoted-printable Message-Id: <5CB43879-FDB2-4C69-9B3C-9830E2E9F8E0@inria.fr> References: <201510130301.t9D31WfT016243@sylvester.rhmr.com> To: Hilarie Orman X-Mailer: Apple Mail (2.1878.6) Archived-At: X-Mailman-Approved-At: Thu, 22 Oct 2015 07:18:03 -0700 Cc: draft-saucez-lisp-impact@tools.ietf.org, iesg@ietf.org, secdir@ietf.org Subject: Re: [secdir] review of draft-saucez-lisp-impact-04.txt X-BeenThere: secdir@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: Security Area Directorate List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 13 Oct 2015 06:13:15 -0000 Dear Hilarie, Thank you for the review. I would have a question regarding the document = you reviewed. Did you review th draft-sauces-lisp-impact-04 or=20 draft-ietf-lisp-impact-04 Thank you, Damien Saucez=20 On 13 Oct 2015, at 05:01, Hilarie Orman wrote: > Secdir review of LISP Impact > draft-saucez-lisp-impact-04.txt >=20 > Do not be alarmed. I have reviewed this document as part of the > security directorate's ongoing effort to review all IETF documents > being processed by the IESG. These comments were written primarily > for the benefit of the security area directors. Document editors and > WG chairs should treat these comments just like any other last call > comments. >=20 > A new way of handling routing information has been defined in IETF > documents about the Locator/Identifier Separation Protocol (LISP). > The draft under discussion here elaborates on the possible > consequences of widespread use of LISP. >=20 > The draft punts on security considerations and refers to previous > documents describing threats to LISP and how LISP uses cryptography > for protecting the integrity of its messages. >=20 > It seems to me that if the purported impact of LISP is to "scale the > Internet", then its impact on security should be a major part of the > equation. Will it make routing information more or less vulnerable > malicious manipulation? How will it affect the stability of a network > that is under constant threat of attack? >=20 > I don't feel that the draft can achieve its purpose without addressing > security. >=20 > Hilarie >=20 > PS. I was very disappointed to realize that this was not a draft > about my favorite programming language. >=20 From nobody Thu Oct 22 07:18:14 2015 Return-Path: X-Original-To: secdir@ietfa.amsl.com Delivered-To: secdir@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id F26FD1B4285; Tue, 13 Oct 2015 07:12:48 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.598 X-Spam-Level: X-Spam-Status: No, score=-2.598 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001, UNPARSEABLE_RELAY=0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id nEMP2Ph9Ks9j; Tue, 13 Oct 2015 07:12:40 -0700 (PDT) Received: from relais-inet.francetelecom.com (relais-ias91.francetelecom.com [193.251.215.91]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id ABEF91B320A; Tue, 13 Oct 2015 07:12:38 -0700 (PDT) Received: from omfedm06.si.francetelecom.fr (unknown [xx.xx.xx.2]) by omfedm12.si.francetelecom.fr (ESMTP service) with ESMTP id ECEE918C404; Tue, 13 Oct 2015 16:12:36 +0200 (CEST) Received: from Exchangemail-eme2.itn.ftgroup (unknown [10.114.31.69]) by omfedm06.si.francetelecom.fr (ESMTP service) with ESMTP id B979C27C053; Tue, 13 Oct 2015 16:12:36 +0200 (CEST) Received: from OPEXCLILM21.corporate.adroot.infra.ftgroup ([fe80::e92a:c932:907e:8f06]) by OPEXCLILMA2.corporate.adroot.infra.ftgroup ([fe80::bc1c:ad2f:eda3:8c3d%19]) with mapi id 14.03.0248.002; Tue, 13 Oct 2015 16:12:36 +0200 From: To: Benjamin Kaduk , Shraddha Hegde Thread-Topic: secdir review of draft-ietf-ospf-node-admin-tag-05 Thread-Index: AQHRAtRlvV1UQkvmNE6+tMDsl/U1DJ5pef1g Date: Tue, 13 Oct 2015 14:12:36 +0000 Message-ID: <27748_1444745556_561D1154_27748_5857_1_53C29892C857584299CBF5D05346208A0F677EDF@OPEXCLILM21.corporate.adroot.infra.ftgroup> References: In-Reply-To: Accept-Language: fr-FR, en-US Content-Language: fr-FR X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.168.234.5] Content-Type: multipart/alternative; boundary="_000_53C29892C857584299CBF5D05346208A0F677EDFOPEXCLILM21corp_" MIME-Version: 1.0 X-PMX-Version: 6.2.1.2478543, Antispam-Engine: 2.7.2.2107409, Antispam-Data: 2015.10.13.132415 Archived-At: X-Mailman-Approved-At: Thu, 22 Oct 2015 07:18:03 -0700 Cc: "draft-ietf-ospf-node-admin-tag.all@ietf.org" , "iesg@ietf.org" , "secdir@ietf.org" Subject: Re: [secdir] secdir review of draft-ietf-ospf-node-admin-tag-05 X-BeenThere: secdir@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: Security Area Directorate List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 13 Oct 2015 14:12:49 -0000 --_000_53C29892C857584299CBF5D05346208A0F677EDFOPEXCLILM21corp_ Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable Hi Ben, > In section 4.5, I do not see that the constraint "Traffic from A nodes to > I nodes must not go through R and T nodes" can be satisfied for the > leftmost pair of A nodes. Thanks for the careful review. My mistake. I missed the left part of the network. I see 2 options: a) add some network topology on the left part b) remove the leftmost pair of A nodes. Option "b" makes the asci art easier to read, but remove some of the comple= xity of the network hence some part of the use case. Option "a" would make something like that: +----------------------+ +----------------+ | \ / | | +-----------------+ x +---------+ | | | \/ \/ | | | | +-T-10-T | | | | / | /| | | | | / 100 / | | | | | / | | 100 | | | | / +-+-+ | | | | | / / | | | | | | / / R-18-R | | | | 10 10 /\ /\ | | | | / / / \ / \ | | | | / / / x \ | | | | / / 10 10 \ \ | | | | / / / / 10 10 | | | | / / / / \ \ | | | | A-25-A A-25-A A-25-A | | | | | | \ \ / / | | | | | | 201 201 201 201 | | | | | | \ \ / / | | | | 201 201 \ x / | | | | | | \ / \ / | | | | | | \/ \/ | | | | I-24-I I-24-I 100 100 | | / / | | | | | +-+ / | +-----------+ | +---------+ +---------------------+ Ben, Shraddha, what would be your preference? (Personally I'm biased as I know the network topology so any asci art seems= readable to me) Thanks, -- Bruno > From: Benjamin Kaduk [mailto:kaduk@MIT.EDU] > Sent: Friday, October 09, 2= 015 10:52 PM > > I have reviewed this document as part of the security directorate's > ongoing effort to review all IETF documents being processed by the > IESG. These comments were written primarily for the benefit of the > security area directors. Document editors and WG chairs should treat > these comments just like any other last call comments. > > I will preface these comments with a note that my routing background is > quite weak, and I needed to read RFC 2328 and RFC 4970 to have enough > context to be able to say much useful about what's going on here; I may > still be suffering from some misconceptions. > > On the whole, this document leaves me feeling unsatisfied; it spends maybe > three pages talking about the actual new protocol extension and then gives > four pages of example usage, all the while claiming that the actual tag > values are only meaningful within a single administrative domain/network, > are for generic use, and do not require an IANA registry. That is, it is > trying to walk a middle line between "this document allocates a value in > the OSPF TLVs registry for site-local use, use it as you will" and "this > document specifies a complete protocol extension for tagging OSPF nodes > for traffic engineering, LFA, and other purposes". That is a hard middle > line to follow, and I am not sure that this document does so successfully. > I will not try to reopen the question of whether it would be better to > take one of the non-middle paths, and continue on the assumption that this > document will take the middle path. I think there are a few things that > are missing before this document should be published, and that it might be > worth considering a more drastic restructuring as well. > > It would probably be good to include some text with the reasoning behind > the choice of the "middle line" -- the current text attempting to enforce > it, "new OSPF extensions MUST NOT require use of per-node administrative > tags or define well-known tag values", seems unenforcable, as a future RFC > updating this one could just remove that restriction. > > It looks like there's now an -06, but the changes from the -05 are not > significant. The security considerations in the -05 correctly note what > are essentially privacy considerations regarding the contents of the admin > tags. However, it seems like there are also potential security > considerations on the actual operation of the network that are not > discussed here, nor in RFC 2328 (OSPFv2) or RFC 5340 (OSPFv3). RFC 5340's > security considerations explicitly disclaims protections against > compromised, malfunctioning, or misconfigured routers, deferring to RFC > 4593, "Generic Threats to Routing Protocols". I believe that the security > considerations of this document should address, either directly or > indirectly, protections against compromised, malfunctioning, or > misconfigured routers, and additionally protection against malicious > actors with access to the layer-3 network (and maybe lower layers as > well). > > That probably means mentioning RFC 4593 directly, or maybe just pointing > out that RFC 5340 does so. There are still additional considerations > introduced by this document, though; unfortunately, because the bulk of > the interpretation of the admin tags is left to the site administrator, it > is hard to give a comprehensive security analysis, but the examples and > the protocol description itself do give some areas for consideration. > > The RI LSAs carrying administrative tags can be at link-, area-, or > AS-level scope; an administrator assigning tag values and associated > policies should consider what would happen if a given tag was advertised > at a different scope than intended. Compliant implementations MUST NOT > generate the same tag at different scopes, but a receiver would need to > take some action if it happened, whether due to network glitch or > malicious action -- what should they do? > > Another potential issue lies in the "stickiness" of the admin tags -- the > text "the node administrative tags associated with a node for the purpose > of any computation or processing SHOULD be a superset of node > administrative tags from all the TLVs in all instances of the RI LSA > originated by that node" seems to mean that once a tag is set, it cannot > (easily) be unset. Would force-expiring an LSA be enough to reset the > tag, or something else? How disruptive would that be? It would be > helpful to see some discussion of how a tag would be removed. > > That is particularly easy for an attacker when the null OSPF > authentication mechanism is in use (how common is that? I saw some > websites indicating it was the default behavior, at least sometimes). I > do not see a need to turn this document into "security considerations for > OSPF authentication", but maybe it is worth mentioning some things: the > md5 scheme seems pretty week at this point (though probably not trivially > broken), the hmac-sha scheme of RFC 5709 is only from 2009, and RFC 7474 > (only six months old) points out cases where both are susceptible to > replay attacks. Just looking at the security considerations of this > document and the core OSPF v2/v3 specs does not convey this to the reader, > so I would like to see at least a pointer to such considerations. (The > stance of RFC 2328 that "all OSPF protocol exchanges are authenticated" > seems particularly disingenous given the presence of the null > authentication scheme.) > > There is also the possibility that an attacker could block delivery of an > LSA, causing a tag that should be set to not be seen. This seems unlikely > for wired point-to-point links, but is more plausible in other > environments, such as radio links. I think I can imagine scenarios where > this would cause drastic damage to the routing topology. > > The parenthetical in section 3.2 wherein routers might advertise a > per-node aministrative tag "without knowing (or even explicitly > supporting) functionality implied by the tag" seems potentially dangerous, > since it sounds like the routers in question are lying about their > capabilities. Would the document suffer harm if the parenthetical was > removed? > > One reason I am unsatisfied by making the interpretation of the tag values > specific to an administrative domain is that a misconfigured border router > might erroneously use tag values from one domain on the other side of the > border. Perhaps the other damage from a router misconfigured in such a > fashion would dwarf the additional damage from the misinterpreted tags and > so my concern is invalid; I really can't say. > > > > > I also have some editorial comments unrelated to the secdir review: > > Section 3.2 reads rather like a jumbled list and could benefit from some > additional structure. > > Similarly, I would find it helpful if there was some text motivating the > "middle patch" mentioned above, towards the beginning of the technical > (non-example) portion of the document. > > For a construction as weakly structured as these administrative tags, > preventing any internal structure or dependencies between tags (as this > document attempts to do) seems correct. However, this sentiment seems to > be expressed differently in several different places in the document, and > it would be good to consolidate and coordinate them. In particular, > paragraph 3 of section 3.2 explicitly says that tag order has no meaning, > but paragraph 4 has the weaker "SHOULD be considered an unordered list". > (The word "set" might be appropriate here.) > > Paragraph 7 of section 3.2 seems to be trying to say that the > administrative tags must indicate inherent or administratively configured > properties of a node and must not be used to convey attributes of the > routing topology. (The word "tie" seems insufficiently clear.) > > Many (but not all) of the acronyms/abbreviations should be expanded at > first use -- the ones marked with a '*' at > https://www.rfc-editor.org/materials/abbrev.expansion.txt are assumed to > be common knowledge and do not need expansion. Other things, like traffic > engineering, router information, link statement advertisement, autonomous > system, etc., should be written out in full at their first use, with the > abbreviated version in parentheses afterwards. > > The first paragraph of section 1 contains a list of potential > applications; please use some XML markup to preserve the list structure in > the rendered document. > > Plase give an informative reference for Loop Free Alternate backup > selection at its first appearance. > > The divider between the type and length fields in Figure 1 is placed one > bit to the left of the correct division for two 16-bit fields. (In many > cases the position indicators above the diagram are offset by one space so > they land over the '-'s instead of the '+'s, but there is some argument > for putting them in their current location, as well.) > > In the seventh paragraph of section 3.2, I think it would be fine to just > remove the "but not limited to" clause, which is not quite correct grammar > and is not really needed. > > The last paragraph of section 3.2 could probably be written more clearly. > In particular, "in any instance of the RI-LSA" is not entirely clear to me > (but then again, I don't really understand how LSAs normally work). Is it > enough to just say that implementations MUST detect when the > administrative tags associated with a given node change, and update their > state accordingly? > > In section 4.5, I do not see that the constraint "Traffic from A nodes to > I nodes must not go through R and T nodes" can be satisfied for the > leftmost pair of A nodes. > > I am also attaching a diff to the xml sources with some grammar fixes not > worth enumerating explicitly. > > -Ben Kaduk ___________________________________________________________________________= ______________________________________________ Ce message et ses pieces jointes peuvent contenir des informations confiden= tielles ou privilegiees et ne doivent donc pas etre diffuses, exploites ou copies sans autorisation. Si vous avez recu= ce message par erreur, veuillez le signaler a l'expediteur et le detruire ainsi que les pieces jointes. Les messages el= ectroniques etant susceptibles d'alteration, Orange decline toute responsabilite si ce message a ete altere, deforme ou = falsifie. Merci. This message and its attachments may contain confidential or privileged inf= ormation that may be protected by law; they should not be distributed, used or copied without authorisation. If you have received this email in error, please notify the sender and dele= te this message and its attachments. As emails may be altered, Orange is not liable for messages that have been = modified, changed or falsified. Thank you. --_000_53C29892C857584299CBF5D05346208A0F677EDFOPEXCLILM21corp_ Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable

Hi Ben,

 

> In section 4.5, I do not see that the constraint "Traffic f= rom A nodes to

> I nodes must not go through R and T nodes" can be satisfied= for the

> leftmost pair of A nodes.

 

 

Thanks for the careful review.

My mistake. I missed the left part of the network.

I see 2 options:

a) add some network topology on the left part

b) remove the leftmost pair of A nodes.

 

Option "b" makes the asci art easier to read, but remove so= me of the complexity of the network hence some part of the use case.

Option “a” would make something like that:

 

=      +----------------------+&nb= sp;  +----------------+

&= nbsp;    |     &nbs= p;            &= nbsp;    \ / &n= bsp;            = ;   |

=      |   +---------= --------+  x   +--= -------+    |

=      |   |         = ;         \/  \/          |    |

=      |   |         = ;       +-T-10-T    = ;      |&n= bsp;   |

=      |   |         = ;      /  |   /|     &nb= sp;    |  =   |

=      |   |         = ;     /  100 / |    &n= bsp;     |    |

=      |   |         = ;    /    | | 100<= span style=3D"mso-spacerun:yes">       &= nbsp; |    |

=      |   |         = ;   /   +-+-&#= 43;  |     &nbs= p;    |  &= nbsp; |

=      |   |         = ;  /   /  |    |        &= nbsp; |    |

=      |   |          /   /   R-18-R     = ;     | &n= bsp;  |

=      |   |        10   10  /\   /\       &nbs= p;  |    |

=      |   |        /   /   /  \ /  \     &nbs= p;   |    |

=      |   |       /   /   /    x    \     &nbs= p;  |    |

=      |   |  &nb= sp;   /   /   10  10 \    \     &nbs= p; |    |

=      |   |     /   /   /    /   10   10     |    |

=      |   |    /   /   /    /     \    \     |    |

=      |   |   A-25-A  = A-25-A       A-25-A    |    |

=      |   |   |    |   \    \     /    /     |    |

=      |   |   |    |   201  201  201 201     |    |

=      |   |   |    |     \    \ /    /     &nbs= p; |    |

=      |   |  201  201     \    x    /     &nbs= p;  |    |

=      |   |   |    |       \  / \  /     &nbs= p;   |    |

=      |   |   |    |        \/   \/          |    |

=     | &nbs= p; |   I-24-I        I-24-I          100  100

=      |   |  /    /         |    |        &= nbsp;  |    |

=      |   +-+    /     &nbs= p;    |  &= nbsp; +-----------+  &n= bsp; |

=      +---------+  &nbs= p;        +------------------= ---+

 

 

Ben, Shraddha, what would be your preference?

(Personally I’m biased as I know the network topology so any as= ci art seems readable to me)

 

Thanks,

-- Bruno

> From: Benjamin Kaduk [mailto:kaduk@MIT.EDU] > Sent: Frida= y, October 09, 2015 10:52 PM

>

> I have reviewed this document as part of the security directorat= e's

> ongoing effort to review all IETF documents being processed by the

> IESG.  These comments were written primarily for the benefit of the

> security area directors.  Document editors and WG chairs should treat

> these comments just like any other last call comments.

>

> I will preface these comments with a note that my routing backgr= ound is

> quite weak, and I needed to read RFC 2328 and RFC 4970 to have enoug= h

> context to be able to say much useful about what's going on here; I = may

> still be suffering from some misconceptions.

>

> On the whole, this document leaves me feeling unsatisfied; it sp= ends maybe

> three pages talking about the actual new protocol extension and then= gives

> four pages of example usage, all the while claiming that the actual = tag

> values are only meaningful within a single administrative domain/net= work,

> are for generic use, and do not require an IANA registry.  That is, it is

> trying to walk a middle line between "this document allocat= es a value in

> the OSPF TLVs registry for site-local use, use it as you will&qu= ot; and "this

> document specifies a complete protocol extension for tagging OSPF no= des

> for traffic engineering, LFA, and other p= urposes".  That is a hard middle

> line to follow, and I am not sure that this document does so success= fully.

> I will not try to reopen the question of whether it would be bet= ter to

> take one of the non-middle paths, and continue on the assumption= that this

> document will take the middle path.=   I think there are a few things that

> are missing before this document should be published, and that i= t might be

> worth considering a more drastic restructuring as well.

>

> It would probably be good to include some text with the reasonin= g behind

> the choice of the "middle line" -- the current text attemp= ting to enforce

> it, "new OSPF extensions MUST NOT require use of per-node admin= istrative

> tags or define well-known tag values", seems unenforcable, as a future RFC

> updating this one could just remove that restriction.=

>

> It looks like there's now an -06, but the changes from the -05 a= re not

> significant.  The secur= ity considerations in the -05 correctly note what

> are essentially privacy considerations regarding the contents of= the admin

> tags.  However, it seem= s like there are also potential security

> considerations on the actual operation of the network that are not

> discussed here, nor in RFC 2328 (OSPFv2) or RFC 5340 (OSPFv3).  RFC 5340's

> security considerations explicitly disclaims protections against

> compromised, malfunctioning, or misconfigured routers, deferring to = RFC

> 4593, "Generic Threats to Routing Protocols".  I believe that the security

> considerations of this document should address, either directly or

> indirectly, protections against compromised, malfunctioning, or=

> misconfigured routers, and additionally protection against malicious=

> actors with access to the layer-3 network (and maybe lower layers as=

> well).

>

> That probably means mentioning RFC 4593 directly, or maybe just = pointing

> out that RFC 5340 does so.  There are still additional considerations

> introduced by this document, though; unfortunately, because the = bulk of

> the interpretation of the admin tags is left to the site administrat= or, it

> is hard to give a comprehensive security analysis, but the examp= les and

> the protocol description itself do give some areas for consideration= .

>

> The RI LSAs carrying administrative tags can be at link-, area-,= or

> AS-level scope; an administrator assigning tag values and associ= ated

> policies should consider what would happen if a given tag was advert= ised

> at a different scope than intended.=   Compliant implementations MUST NOT

> generate the same tag at different scopes, but a receiver would = need to

> take some action if it happened, whether due to network glitch o= r

> malicious action -- what should they do?

>

> Another potential issue lies in the "stickiness" of th= e admin tags -- the

> text "the node administrative tags associated with a node for t= he purpose

> of any computation or processing SHOULD be a superset of node

> administrative tags from all the TLVs in all instances of the RI LSA=

> originated by that node" seems to mean that once a tag is s= et, it cannot

> (easily) be unset.  Would force-expiring an LSA be enough to reset the=

> tag, or something else?  How disruptive would that be?  It would be

> helpful to see some discussion of how a tag would be removed.

>

> That is particularly easy for an attacker when the null OSPF

> authentication mechanism is in use (how common is that?  I saw some

> websites indicating it was the default behavior, at least someti= mes).  I

> do not see a need to turn this document into "security cons= iderations for

> OSPF authentication", but maybe it is worth mentioning some= things: the

> md5 scheme seems pretty week at this point (though probably not triv= ially

> broken), the hmac-sha scheme of RFC 5709 is only from 2009= , and RFC 7474

> (only six months old) points out cases where both are susceptibl= e to

> replay attacks.  Just looking at the security considerations of this

> document and the core OSPF v2/v3 specs does not convey this to the r= eader,

> so I would like to see at least a pointer to such considerations.  (The

> stance of RFC 2328 that "all OSPF protocol exchanges are authen= ticated"

> seems particularly disingenous given the presence of the null

> authentication scheme.)

>

> There is also the possibility that an attacker could block deliv= ery of an

> LSA, causing a tag that should be set to not be seen.  This seems unlikely

> for wired point-to-point links, but is more plausible in other<= /o:p>

> environments, such as radio links.&= nbsp; I think I can imagine scenarios where

> this would cause drastic damage to the routing topology.<= /span>

>

> The parenthetical in section 3.2 wherein routers might advertise= a

> per-node aministrative tag "witho= ut knowing (or even explicitly

> supporting) functionality implied by the tag" seems potenti= ally dangerous,

> since it sounds like the routers in question are lying about their

> capabilities.  Would th= e document suffer harm if the parenthetical was

> removed?

>

> One reason I am unsatisfied by making the interpretation of the = tag values

> specific to an administrative domain is that a misconfigured border = router

> might erroneously use tag values from one domain on the other si= de of the

> border.  Perhaps the ot= her damage from a router misconfigured in such a

> fashion would dwarf the additional damage from the misinterpreted ta= gs and

> so my concern is invalid; I really can't say.

>

>

>

>

> I also have some editorial comments unrelated to the secdir review:

>

> Section 3.2 reads rather like a jumbled list and could benefit f= rom some

> additional structure.

>

> Similarly, I would find it helpful if there was some text motiva= ting the

> "middle patch" mentioned above, towards the beginning = of the technical

> (non-example) portion of the document.

>

> For a construction as weakly structured as these administrative = tags,

> preventing any internal structure or dependencies between tags (= as this

> document attempts to do) seems correct.  However, this sentiment seems to

> be expressed differently in several different places in the docu= ment, and

> it would be good to consolidate and coordinate them.  In particular,

> paragraph 3 of section 3.2 explicitly says that tag order has no mea= ning,

> but paragraph 4 has the weaker "SHOULD be considered an unorder= ed list".

> (The word "set" might be appropriate here.)=

>

> Paragraph 7 of section 3.2 seems to be trying to say that the

> administrative tags must indicate inherent or administratively confi= gured

> properties of a node and must not be used to convey attributes of th= e

> routing topology.  (The word "tie" seems insufficiently clear.)

>

> Many (but not all) of the acronyms/abbreviations should be expan= ded at

> first use -- the ones marked with a '*' at

> https://www.rfc-editor.org/materials/abbrev.expansion.txt are assumed to

> be common knowledge and do not need expansion.  Other things, like traffic

> engineering, router information, link statement advertisement, auton= omous

> system, etc., should be written out in full at their first use, with= the

> abbreviated version in parentheses afterwards.

>

> The first paragraph of section 1 contains a list of potential

> applications; please use some XML markup to preserve the list struct= ure in

> the rendered document.

>

> Plase give an informative reference for= Loop Free Alternate backup

> selection at its first appearance.

>

> The divider between the type and length fields in Figure 1 is pl= aced one

> bit to the left of the correct division for two 16-bit fields.  (In many

> cases the position indicators above the diagram are offset by one sp= ace so

> they land over the '-'s instead of the '+'s, but there is some a= rgument

> for putting them in their current locatio= n, as well.)

>

> In the seventh paragraph of section 3.2, I think it would be fin= e to just

> remove the "but not limited to" clause, which is not q= uite correct grammar

> and is not really needed.

>

> The last paragraph of section 3.2 could probably be written more= clearly.

> In particular, "in any instance of the RI-LSA" is not = entirely clear to me

> (but then again, I don't really understand how LSAs normally wor= k).  Is it

> enough to just say that implementations MUST detect when the

> administrative tags associated with a given node change, and update = their

> state accordingly?

>

> In section 4.5, I do not see that the constraint "Traffic f= rom A nodes to

> I nodes must not go through R and T nodes" can be satisfied= for the

> leftmost pair of A nodes.

>

> I am also attaching a diff to the xml sources with some grammar = fixes not

> worth enumerating explicitly= .

>

> -Ben Kaduk

______________________________________________________________________=
___________________________________________________

Ce message et ses pieces jointes peuvent contenir des informations confiden=
tielles ou privilegiees et ne doivent donc
pas etre diffuses, exploites ou copies sans autorisation. Si vous avez recu=
 ce message par erreur, veuillez le signaler
a l'expediteur et le detruire ainsi que les pieces jointes. Les messages el=
ectroniques etant susceptibles d'alteration,
Orange decline toute responsabilite si ce message a ete altere, deforme ou =
falsifie. Merci.

This message and its attachments may contain confidential or privileged inf=
ormation that may be protected by law;
they should not be distributed, used or copied without authorisation.
If you have received this email in error, please notify the sender and dele=
te this message and its attachments.
As emails may be altered, Orange is not liable for messages that have been =
modified, changed or falsified.
Thank you.
--_000_53C29892C857584299CBF5D05346208A0F677EDFOPEXCLILM21corp_-- From nobody Thu Oct 22 07:18:17 2015 Return-Path: X-Original-To: secdir@ietfa.amsl.com Delivered-To: secdir@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 2285A1B2B41; Tue, 13 Oct 2015 21:35:23 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.902 X-Spam-Level: X-Spam-Status: No, score=-1.902 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 1duUd_pg28PS; Tue, 13 Oct 2015 21:35:18 -0700 (PDT) Received: from na01-by2-obe.outbound.protection.outlook.com (mail-by2on0123.outbound.protection.outlook.com [207.46.100.123]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id AD3681B2B3F; Tue, 13 Oct 2015 21:35:18 -0700 (PDT) Received: from BY1PR0501MB1381.namprd05.prod.outlook.com (10.160.107.139) by BY1PR0501MB1381.namprd05.prod.outlook.com (10.160.107.139) with Microsoft SMTP Server (TLS) id 15.1.293.16; Wed, 14 Oct 2015 04:35:16 +0000 Received: from BY1PR0501MB1381.namprd05.prod.outlook.com ([10.160.107.139]) by BY1PR0501MB1381.namprd05.prod.outlook.com ([10.160.107.139]) with mapi id 15.01.0293.007; Wed, 14 Oct 2015 04:35:16 +0000 From: Shraddha Hegde To: "Acee Lindem (acee)" , Benjamin Kaduk Thread-Topic: secdir review of draft-ietf-ospf-node-admin-tag-05 Thread-Index: AQHRAtRkmhe1qX1HzE+v6FQBX6gc055lH6mAgABoLJCABH8tgIAABXOAgABbK5A= Date: Wed, 14 Oct 2015 04:35:15 +0000 Message-ID: References: In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: authentication-results: spf=none (sender IP is ) smtp.mailfrom=shraddha@juniper.net; x-originating-ip: [116.197.184.11] x-microsoft-exchange-diagnostics: 1; BY1PR0501MB1381; 5:uFdvOpqy3yK8Fq26A53MD6uoiy1egV9YxNVXSc+TQpWxX7/fY4fKTQKeCo2PGW6Wdn9eJQb/DYd5LUFEMFI2lX1rBsMsTDRjvUXUlSreFCZuVKKTD/hG9TyNK845KOQ/9H6XPEEWe5jCnw71mk6QIQ==; 24:04zt9jzksp0+eDZdSnk64QLS5K5AOIJUvhU42Qhf+zHINl4HZtrTPJ/s+ePf0Klmcd8gGunEkUQgFZXcnbwM2IizLaFnFlIFKyxcHJ09rdw=; 20:GwCVKu5YX3seo64K6NDHJ6n6NCRc5nWBX13ZVI20LPnlSr2MkKy4rU22ii5UEevX+mh5VG88RlJFsPfDZI1E4w== x-microsoft-antispam: UriScan:;BCL:0;PCL:0;RULEID:;SRVR:BY1PR0501MB1381; x-microsoft-antispam-prvs: x-exchange-antispam-report-test: UriScan:(138986009662008)(95692535739014); x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(601004)(2401047)(520078)(5005006)(8121501046)(3002001); SRVR:BY1PR0501MB1381; BCL:0; PCL:0; RULEID:; SRVR:BY1PR0501MB1381; x-forefront-prvs: 0729050452 x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(6009001)(199003)(164054003)(377454003)(51444003)(24454002)(13464003)(189002)(479174004)(52034003)(51914003)(92566002)(66066001)(64706001)(2900100001)(46102003)(81156007)(99286002)(33656002)(102836002)(110136002)(106116001)(19580395003)(5004730100002)(77096005)(5001960100002)(87936001)(101416001)(93886004)(2171001)(105586002)(97736004)(54356999)(5890100001)(40100003)(50986999)(19580405001)(2950100001)(5003600100002)(11100500001)(122556002)(5002640100001)(5001770100001)(5001920100001)(106356001)(76576001)(189998001)(5007970100001)(5008740100001)(230783001)(86362001)(10400500002)(74316001)(76176999)(579004); DIR:OUT; SFP:1102; SCL:1; SRVR:BY1PR0501MB1381; H:BY1PR0501MB1381.namprd05.prod.outlook.com; FPR:; SPF:None; PTR:InfoNoRecords; A:1; MX:1; LANG:en; received-spf: None (protection.outlook.com: juniper.net does not designate permitted sender hosts) spamdiagnosticoutput: 1:23 spamdiagnosticmetadata: NSPM Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-OriginatorOrg: juniper.net X-MS-Exchange-CrossTenant-originalarrivaltime: 14 Oct 2015 04:35:15.2075 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: bea78b3c-4cdb-4130-854a-1d193232e5f4 X-MS-Exchange-Transport-CrossTenantHeadersStamped: BY1PR0501MB1381 Archived-At: X-Mailman-Approved-At: Thu, 22 Oct 2015 07:18:02 -0700 Cc: "draft-ietf-ospf-node-admin-tag.all@ietf.org" , "iesg@ietf.org" , "secdir@ietf.org" Subject: Re: [secdir] secdir review of draft-ietf-ospf-node-admin-tag-05 X-BeenThere: secdir@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: Security Area Directorate List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 14 Oct 2015 04:35:23 -0000 QWNlZSwNCg0KPC0tLXNuaXBwZWQgdG8gb3BlbiBwb2ludHMtLS0+DQoNCg0KLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0NCg0KPj4gPFNocmFkZGhhPiBDb3VsZCB5b3UgcGxzIGVsYWJv cmF0ZSB0aGUgY2FzZS4gSSBkb24ndCBxdWl0ZSB1bmRlcnN0YW5kIA0KPj4gd2h5IHRoZSBBQlIg aW4gYSBzdHViL05TU0EgYXJlYSB3b3VsZCBnZW5lcmF0ZSBvciByZWNlaXZlIFJJIExTQXMgDQo+ PiB3aXRoIGRpZmZlcmVudCBzY29wZXMuSSB0aGluayBpdCdzIHBlcmZlY3RseSB2YWxpZCB0byBm bG9vZCB0aGUgQVMgDQo+PiBzY29wZWQgUkkgTFNBcyBpbnRvIHRoZSBzdHViIC8gTlNTQSBhcmVh Lg0KPg0KPkFjZWUsIEkgdGhpbmsgdGhpcyBpcyBhIHF1ZXN0aW9uIGZvciB5b3UuDQoNClllYWgg LSBJIG1pc3NlZCB0aGlzIHdpdGhvdXQgRS1tYWlsIHF1b3RpbmfigKYNCg0KU2hyYWRkaGEsIA0K DQpBUy1zY29wZWQgTFNBcyBhcmUgbm90IGZsb29kZWQgaW50byBzdHViIG9yIE5TU0EgYXJlYXMu IFNvLCBpZiBhbiBBQlIgaXMgZ29pbmcgdG8gYWR2ZXJ0aXNlIHRhZ3MgdG8gaXRzIGF0dGFjaGVk IGFyZWFzIGFuZCB0aGUgcmVzdCBvZiB0aGUgT1NQRiBSb3V0aW5nIGRvbWFpbiwgaXQgd2lsbCBu ZWVkIHRvIG9yaWdpbmF0ZSB0aGUgTFNBIGF0IGRpZmZlcmVudCBzY29wZXMuDQoNCjxTaHJhZGRo YT4gQWNlZSwgIEkgdGhpbmsgcmVzdHJpY3RpbmcgIEFTIHNjb3BlZCBSSSBMU0EgaW50byBOU1NB IC9zdHViIGFyZWFzIHdpbGwgaGF2ZSBtYW55IGlzc3Vlcy4NCiAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgSWYgYSBub24tQUJSIHJvdXRlciBmcm9tIG90aGVyIGFyZWEgb3Jp Z2luYXRlcyBSSSBMU0Egd2l0aCBub2RlIHRhZyBhbmQgdGhlIHNwZWNpZmljIGFwcGxpY2F0aW9u IG5lZWRzIHRoZSANCiAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgVGFnIHRv IGJlIGF2YWlsYWJsZSBpbiB0aGUgZW50aXJlIE9QRiBkb21haW4sIGhvdyB3aWxsIHRoZSBzdHVi L05TU0EgYXJlYSByb3V0ZXJzIHJlY2VpdmUgaXQ/DQogICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgIEkgdGhpbmsgdGhpcyBkaXNjdXNzaW9uIGlzIGVxdWFsbHkgcmVsZXZhbnQg dG8gNDk3MGJpcy4NCiAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIEkgZG9u J3Qgc2VlIGEgcmVhc29uIHdoeSBBUyBzY29wZWQgUkkgTFNBIHNob3VsZCBiZSByZXN0cmljdGVk IGluIHN0dWIvTlNTQS4NCiAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICBS SSBMU0FzIGRvIG5vdCBjb250YWluIGFueSByb3V0ZSBpbmZvcm1hdGlvbiBzbyBpdCdzIG5vdCBn b2luZyB0byBiZSBodWdlIGluIG51bWJlci4NCiAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgDQogICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIA0KDQoN Cg0KDQoNCi0tLS0tT3JpZ2luYWwgTWVzc2FnZS0tLS0tDQpGcm9tOiBBY2VlIExpbmRlbSAoYWNl ZSkgW21haWx0bzphY2VlQGNpc2NvLmNvbV0gDQpTZW50OiBXZWRuZXNkYXksIE9jdG9iZXIgMTQs IDIwMTUgNDoxNyBBTQ0KVG86IEJlbmphbWluIEthZHVrIDxrYWR1a0BNSVQuRURVPjsgU2hyYWRk aGEgSGVnZGUgPHNocmFkZGhhQGp1bmlwZXIubmV0Pg0KQ2M6IGllc2dAaWV0Zi5vcmc7IHNlY2Rp ckBpZXRmLm9yZzsgZHJhZnQtaWV0Zi1vc3BmLW5vZGUtYWRtaW4tdGFnLmFsbEBpZXRmLm9yZw0K U3ViamVjdDogUmU6IHNlY2RpciByZXZpZXcgb2YgZHJhZnQtaWV0Zi1vc3BmLW5vZGUtYWRtaW4t dGFnLTA1DQoNClNlZSBpbmxpbmUuIA0KDQpPbiAxMC8xMy8xNSwgNjoyNyBQTSwgIkJlbmphbWlu IEthZHVrIiA8a2FkdWtATUlULkVEVT4gd3JvdGU6DQoNCj5UaGFua3MsIFNocmFkZGhhIGFuZCBB Y2VlLCBmb3IgaGVscGluZyBtZSBmaW5kIHNvbWUgb2YgdGhlIGNvbnRleHQgSSANCj53YXMgbWlz c2luZy4NCj4NCj5PbiBTdW4sIDExIE9jdCAyMDE1LCBTaHJhZGRoYSBIZWdkZSB3cm90ZToNCj4N Cj4+DQo+PiBUaGFua3MgQmVuIGZvciBkZXRhaWxlZCByZXZpZXcgY29tbWVudHMuVGhhbmtzIEFj ZWUgZm9yIGNoaW1pbmctaW4uDQo+PiBGZXcgbW9yZSBleHBsYW5hdGlvbnMgaW4tbGluZS4NCj4+ DQo+PiAtLS0tLU9yaWdpbmFsIE1lc3NhZ2UtLS0tLQ0KPj4gRnJvbTogQWNlZSBMaW5kZW0gKGFj ZWUpIFttYWlsdG86YWNlZUBjaXNjby5jb21dDQo+PiBTZW50OiBTdW5kYXksIE9jdG9iZXIgMTEs IDIwMTUgMTowNCBBTQ0KPj4gVG86IEJlbmphbWluIEthZHVrIDxrYWR1a0BNSVQuRURVPjsgaWVz Z0BpZXRmLm9yZzsgc2VjZGlyQGlldGYub3JnOyANCj4+ZHJhZnQtaWV0Zi1vc3BmLW5vZGUtYWRt aW4tdGFnLmFsbEBpZXRmLm9yZw0KPj4gU3ViamVjdDogUmU6IHNlY2RpciByZXZpZXcgb2YgZHJh ZnQtaWV0Zi1vc3BmLW5vZGUtYWRtaW4tdGFnLTA1DQo+Pg0KPj4gSGkgQmVuLA0KPj4NCj4+IEFz IHRoZSBkb2N1bWVudCBzaGVwaGVyZCBhbmQgYSBsb25nLXRpbWUgT1NQRiBjb250cmlidXRvciwg SeKAmW0gZ29pbmcgDQo+PiB0byB0cnkgYW5kIHNvcnQgb3V0IHNvbWUgb2YgeW91ciBjb21tZW50 cy4gTm90ZSB0aGF0IHJvdXRlIHRhZ2dpbmcgDQo+PiBoYXMgYmVlbiBpbiB1c2UgZm9yIGRlY2Fk ZXMgYW5kIHRoaXMgZG9jdW1lbnQgaXMgbWVyZWx5IGV4dGVuZGluZyB0aGUgDQo+PiBhZG1pbmlz dHJhdGl2ZSBwb2xpY2llcyBhZHZlcnRpc2VtZW50IHRvIHRoZSBub2RlIGxldmVsLg0KPg0KPkdv b2QgdG8ga25vdzsgSSBkaWRuJ3QgZ2V0IHRvIGxvb2sgYXQgbWFueSB1cGRhdGVzIHBhc3QgdGhl IGNvcmUgT1NQRnYyIA0KPnNwZWMuDQo+DQo+PiBPbiAxMC85LzE1LCA0OjUyIFBNLCAiQmVuamFt aW4gS2FkdWsiIDxrYWR1a0BNSVQuRURVPiB3cm90ZToNCj4+DQo+PiA+SSBoYXZlIHJldmlld2Vk IHRoaXMgZG9jdW1lbnQgYXMgcGFydCBvZiB0aGUgc2VjdXJpdHkgZGlyZWN0b3JhdGUncyANCj4+ ID5vbmdvaW5nIGVmZm9ydCB0byByZXZpZXcgYWxsIElFVEYgZG9jdW1lbnRzIGJlaW5nIHByb2Nl c3NlZCBieSB0aGUgDQo+PiA+SUVTRy4gIFRoZXNlIGNvbW1lbnRzIHdlcmUgd3JpdHRlbiBwcmlt YXJpbHkgZm9yIHRoZSBiZW5lZml0IG9mIHRoZSANCj4+ID5zZWN1cml0eSBhcmVhIGRpcmVjdG9y cy4gIERvY3VtZW50IGVkaXRvcnMgYW5kIFdHIGNoYWlycyBzaG91bGQgDQo+PiA+dHJlYXQgdGhl c2UgY29tbWVudHMganVzdCBsaWtlIGFueSBvdGhlciBsYXN0IGNhbGwgY29tbWVudHMuDQo+PiA+ DQo+PiA+SSB3aWxsIHByZWZhY2UgdGhlc2UgY29tbWVudHMgd2l0aCBhIG5vdGUgdGhhdCBteSBy b3V0aW5nIGJhY2tncm91bmQgDQo+PiA+aXMgcXVpdGUgd2VhaywgYW5kIEkgbmVlZGVkIHRvIHJl YWQgUkZDIDIzMjggYW5kIFJGQyA0OTcwIHRvIGhhdmUgDQo+PiA+ZW5vdWdoIGNvbnRleHQgdG8g YmUgYWJsZSB0byBzYXkgbXVjaCB1c2VmdWwgYWJvdXQgd2hhdCdzIGdvaW5nIG9uIA0KPj4gPmhl cmU7IEkgbWF5IHN0aWxsIGJlIHN1ZmZlcmluZyBmcm9tIHNvbWUgbWlzY29uY2VwdGlvbnMuDQo+ PiA+DQo+PiA+T24gdGhlIHdob2xlLCB0aGlzIGRvY3VtZW50IGxlYXZlcyBtZSBmZWVsaW5nIHVu c2F0aXNmaWVkOyBpdCBzcGVuZHMgDQo+PiA+bWF5YmUgdGhyZWUgcGFnZXMgdGFsa2luZyBhYm91 dCB0aGUgYWN0dWFsIG5ldyBwcm90b2NvbCBleHRlbnNpb24gDQo+PiA+YW5kIHRoZW4gZ2l2ZXMg Zm91ciBwYWdlcyBvZiBleGFtcGxlIHVzYWdlLCBhbGwgdGhlIHdoaWxlIGNsYWltaW5nIA0KPj4g PnRoYXQgdGhlIGFjdHVhbCB0YWcgdmFsdWVzIGFyZSBvbmx5IG1lYW5pbmdmdWwgd2l0aGluIGEg c2luZ2xlIA0KPj4gPmFkbWluaXN0cmF0aXZlIGRvbWFpbi9uZXR3b3JrLCBhcmUgZm9yIGdlbmVy aWMgdXNlLCBhbmQgZG8gbm90IA0KPj4gPnJlcXVpcmUgYW4gSUFOQSByZWdpc3RyeS4gIFRoYXQg aXMsIGl0IGlzIHRyeWluZyB0byB3YWxrIGEgbWlkZGxlIA0KPj4gPmxpbmUgYmV0d2VlbiAidGhp cyBkb2N1bWVudCBhbGxvY2F0ZXMgYSB2YWx1ZSBpbiB0aGUgT1NQRiBUTFZzIA0KPj4gPnJlZ2lz dHJ5IGZvciBzaXRlLWxvY2FsIHVzZSwgdXNlIGl0IGFzIHlvdSB3aWxsIiBhbmQgInRoaXMgZG9j dW1lbnQgDQo+PiA+c3BlY2lmaWVzIGEgY29tcGxldGUgcHJvdG9jb2wgZXh0ZW5zaW9uIGZvciB0 YWdnaW5nIE9TUEYgbm9kZXMgZm9yIA0KPj4gPnRyYWZmaWMgZW5naW5lZXJpbmcsIExGQSwgYW5k IG90aGVyIHB1cnBvc2VzIi4gIFRoYXQgaXMgYSBoYXJkIA0KPj4gPm1pZGRsZSBsaW5lIHRvIGZv bGxvdywgYW5kIEkgYW0NCj4+bm90IHN1cmUgdGhhdCB0aGlzIGRvY3VtZW50IGRvZXMgc28gc3Vj Y2Vzc2Z1bGx5Lg0KPj4gPkkgd2lsbCBub3QgdHJ5IHRvIHJlb3BlbiB0aGUgcXVlc3Rpb24gb2Yg d2hldGhlciBpdCB3b3VsZCBiZSBiZXR0ZXIgDQo+PiA+dG8gdGFrZSBvbmUgb2YgdGhlIG5vbi1t aWRkbGUgcGF0aHMsIGFuZCBjb250aW51ZSBvbiB0aGUgYXNzdW1wdGlvbiANCj4+ID50aGF0IHRo aXMgZG9jdW1lbnQgd2lsbCB0YWtlIHRoZSBtaWRkbGUgcGF0aC4gIEkgdGhpbmsgdGhlcmUgYXJl IGEgDQo+PiA+ZmV3IHRoaW5ncyB0aGF0IGFyZSBtaXNzaW5nIGJlZm9yZSB0aGlzIGRvY3VtZW50 IHNob3VsZCBiZSANCj4+ID5wdWJsaXNoZWQsIGFuZCB0aGF0IGl0IG1pZ2h0IGJlIHdvcnRoIGNv bnNpZGVyaW5nIGEgbW9yZSBkcmFzdGljIA0KPj4gPnJlc3RydWN0dXJpbmcgYXMNCj4+d2VsbC4N Cj4+ID4NCj4+ID5JdCB3b3VsZCBwcm9iYWJseSBiZSBnb29kIHRvIGluY2x1ZGUgc29tZSB0ZXh0 IHdpdGggdGhlIHJlYXNvbmluZyANCj4+ID5iZWhpbmQgdGhlIGNob2ljZSBvZiB0aGUgIm1pZGRs ZSBsaW5lIiAtLSB0aGUgY3VycmVudCB0ZXh0IA0KPj4gPmF0dGVtcHRpbmcgdG8gZW5mb3JjZSBp dCwgIm5ldyBPU1BGIGV4dGVuc2lvbnMgTVVTVCBOT1QgcmVxdWlyZSB1c2UgDQo+PiA+b2YgcGVy LW5vZGUgYWRtaW5pc3RyYXRpdmUgdGFncyBvciBkZWZpbmUgd2VsbC1rbm93biB0YWcgdmFsdWVz IiwgDQo+PiA+c2VlbXMgdW5lbmZvcmNhYmxlLCBhcyBhIGZ1dHVyZSBSRkMgdXBkYXRpbmcgdGhp cyBvbmUgY291bGQganVzdCANCj4+ID5yZW1vdmUgdGhhdA0KPj5yZXN0cmljdGlvbi4NCj4+DQo+ PiBUaGUgaW50ZW50IGhlcmUgaXMgdGhhdCB0aGlzIFRMViBpcyB0byBiZSBzb2xlbHkgZm9yIGxv Y2FsbHkgZGVmaW5lZCANCj4+IHBvbGljaWVzLiBJZiB0aGVyZSB3ZXJlIHRvIGJlIGEgVExWIGZv ciB3ZWxsLWtub3duIHRhZ3MgYW5kIHBvbGljaWVzLCANCj4+IHRoaXMgY291bGQgYmUgYWNjb21w bGlzaGVkIHdpdGggYSBzZXBhcmF0ZSBPU1BGIFJJIFRMVi4gSSBhZ3JlZSB0aGF0IA0KPj4gdGhl IG5vcm1hdGl2ZSB0ZXh0IHNob3VsZCBiZSBzb2Z0ZW5lZCBmcm9tIOKAnE1VU1QgTk9U4oCdIHRv IOKAnGFyZSBub3QgDQo+PiBleHBlY3RlZCB0b+KAnS4NCj4+DQo+PiA8U2hyYWRkaGE+IFRoZXJl IHdhcyBhIGxvbmcgZGlzY3Vzc2lvbiBvbiB0aGUgbWFpbGluZyBsaXN0IG9uIHdoZXRoZXIgDQo+ PiB3ZSBzaG91bGQgYWxsb3cgd2VsbCBkZWZpbmVkIHZhbHVlcyBmb3IgdGhlIGFkbWluIHRhZ3Mg bWFqb3JpdHkgDQo+PiBjb25zZW5zdXMgd2FzIHRoYXQgd2Ugc2hvdWxkIG5vdCBhbGxvdyBhbnkg c3RhbmRhcmQgdmFsdWVzIGZvciBub2RlIA0KPj4gYWRtaW4gdGFncyBhbmQgaW4gZnV0dXJlIGlm IHN1Y2ggYSByZXF1aXJlbWVudCBhcmlzZXMgaXQnbGwgZ28gYXMgbmV3IA0KPj4gZmVhdHVyZSBp biBSSSBUTFYgYXMgQWNlZSBhbHJlYWR5IG1lbnRpb25lZC4gSSBhbSB0cnlpbmcgdG8gDQo+PiB1 bmRlcnN0YW5kIHdoeSB0aGUgdGV4dCBuZWVkIHRvIGJlIHNvZnRlbmVkIHdoZW4gYW55IGZ1dHVy ZSANCj4+IHN0YW5kYXJkaXphdGlvbiB3b3VsZCBuZWVkIGFsdG9nZXRoZXIgYSBuZXcgZG9jdW1l bnQgYW5kIHdpbGwgbm90IHJlcXVpcmUgYW55IGNoYW5nZXMgdG8gdGhpcyBkb2N1bWVudC4NCj4N Cj5JIHN1Z2dlc3RlZCB0aGF0IHRoZSB0ZXh0IGJlIHNvZnRlbmVkIGJlY2F1c2UgdGhlIGN1cnJl bnQgc3RhdGVtZW50IA0KPmRvZXMgbm90IGhhdmUgYW55IHByYWN0aWNhbCBlZmZlY3QuICBJdCdz IHRyeWluZyB0byBwbGFjZSByZXN0cmljdGlvbnMgDQo+b24gd2hhdCB7dGhlIHNldCBvZiBmdXR1 cmUgUkZDcyB0aGF0IHVwZGF0ZSB0aGlzIGRvY3VtZW50fSBjYW4gZG8sIGJ1dCANCj5hbnkgZG9j dW1lbnQgaW4gdGhhdCBzZXQgY291bGQgcmVtb3ZlIHN1Y2ggYSByZXN0cmljdGlvbiBhbmQgb3Zl cnJpZGUgDQo+aXQgYXQgdGhlIHNhbWUgdGltZS4NCj4NCj5JIHRoaW5rIGl0IHdvdWxkIGJlIGdv b2QgdG8gaGF2ZSBhIG5vdGUgaW4gc2VjdGlvbiAyIHRvIHRoZSBlZmZlY3QgdGhhdCANCj4idGhl c2UgYWRtaW5pc3RyYXRpdmUgdGFncyBhcmUgc29sZWx5IGZvciB1c2Ugd2l0aGluIGFuIGFkbWlu aXN0cmF0aXZlIA0KPmRvbWFpbiBhbmQgYXJlIHRoZWlyIGludGVycHJldGF0aW9uIGlzIGEgbWF0 dGVyIG9mIGxvY2FsIHBvbGljeS4gIEl0IGlzIA0KPmV4cGVjdGVkIHRoYXQgdmFsdWVzIHdpbGwg bm90IGJlIHBvcnRhYmxlIGFjcm9zcyBhZG1pbmlzdHJhdGl2ZSBkb21haW5zIi4NCj5JIGtub3cg dGhhdCB0aGlzIHRvcGljIGlzIGNvdmVyZWQgbGF0ZXIgaW4gdGhlIGRvY3VtZW50LCBidXQgaGF2 aW5nIGl0IA0KPmVhcmx5IHdvdWxkIGhlbHAgc2V0IHRoZSBzdGFnZSBmb3IgdGhlIHJlc3Qgb2Yg dGhlIGRvY3VtZW50Lg0KPg0KPj4gPkl0IGxvb2tzIGxpa2UgdGhlcmUncyBub3cgYW4gLTA2LCBi dXQgdGhlIGNoYW5nZXMgZnJvbSB0aGUgLTA1IGFyZSANCj4+ID5ub3Qgc2lnbmlmaWNhbnQuICBU aGUgc2VjdXJpdHkgY29uc2lkZXJhdGlvbnMgaW4gdGhlIC0wNSBjb3JyZWN0bHkgDQo+PiA+bm90 ZSB3aGF0IGFyZSBlc3NlbnRpYWxseSBwcml2YWN5IGNvbnNpZGVyYXRpb25zIHJlZ2FyZGluZyB0 aGUgDQo+PiA+Y29udGVudHMgb2YgdGhlIGFkbWluIHRhZ3MuICBIb3dldmVyLCBpdCBzZWVtcyBs aWtlIHRoZXJlIGFyZSBhbHNvIA0KPj4gPnBvdGVudGlhbCBzZWN1cml0eSBjb25zaWRlcmF0aW9u cyBvbiB0aGUgYWN0dWFsIG9wZXJhdGlvbiBvZiB0aGUgDQo+PiA+bmV0d29yayB0aGF0IGFyZSBu b3QgZGlzY3Vzc2VkIGhlcmUsIG5vciBpbiBSRkMgMjMyOCAoT1NQRnYyKSBvciBSRkMgDQo+PiA+ NTM0MCAoT1NQRnYzKS4gIFJGQyA1MzQwJ3Mgc2VjdXJpdHkgY29uc2lkZXJhdGlvbnMgZXhwbGlj aXRseSANCj4+ID5kaXNjbGFpbXMgcHJvdGVjdGlvbnMgYWdhaW5zdCBjb21wcm9taXNlZCwgbWFs ZnVuY3Rpb25pbmcsIG9yIA0KPj4gPm1pc2NvbmZpZ3VyZWQgcm91dGVycywgZGVmZXJyaW5nIHRv IFJGQyA0NTkzLCAiR2VuZXJpYyBUaHJlYXRzIHRvIA0KPj4gPlJvdXRpbmcgUHJvdG9jb2xzIi4g IEkgYmVsaWV2ZSB0aGF0IHRoZSBzZWN1cml0eSBjb25zaWRlcmF0aW9ucyBvZiANCj4+ID50aGlz IGRvY3VtZW50IHNob3VsZCBhZGRyZXNzLCBlaXRoZXIgZGlyZWN0bHkgb3IgaW5kaXJlY3RseSwg DQo+PiA+cHJvdGVjdGlvbnMgYWdhaW5zdCBjb21wcm9taXNlZCwgbWFsZnVuY3Rpb25pbmcsIG9y IG1pc2NvbmZpZ3VyZWQgDQo+PiA+cm91dGVycywgYW5kIGFkZGl0aW9uYWxseSBwcm90ZWN0aW9u IGFnYWluc3QgbWFsaWNpb3VzIGFjdG9ycyB3aXRoIA0KPj4gPmFjY2VzcyB0byB0aGUgbGF5ZXIt MyBuZXR3b3JrIChhbmQgbWF5YmUgbG93ZXIgbGF5ZXJzIGFzIHdlbGwpLg0KPj4gPg0KPj4gPlRo YXQgcHJvYmFibHkgbWVhbnMgbWVudGlvbmluZyBSRkMgNDU5MyBkaXJlY3RseSwgb3IgbWF5YmUg anVzdCANCj4+ID5wb2ludGluZyBvdXQgdGhhdCBSRkMgNTM0MCBkb2VzIHNvLiAgVGhlcmUgYXJl IHN0aWxsIGFkZGl0aW9uYWwgDQo+PiA+Y29uc2lkZXJhdGlvbnMgaW50cm9kdWNlZCBieSB0aGlz IGRvY3VtZW50LCB0aG91Z2g7IHVuZm9ydHVuYXRlbHksIA0KPj4gPmJlY2F1c2UgdGhlIGJ1bGsg b2YgdGhlIGludGVycHJldGF0aW9uIG9mIHRoZSBhZG1pbiB0YWdzIGlzIGxlZnQgdG8gDQo+PiA+ dGhlIHNpdGUgYWRtaW5pc3RyYXRvciwgaXQgaXMgaGFyZCB0byBnaXZlIGEgY29tcHJlaGVuc2l2 ZSBzZWN1cml0eSANCj4+ID5hbmFseXNpcywgYnV0IHRoZSBleGFtcGxlcyBhbmQgdGhlIHByb3Rv Y29sIGRlc2NyaXB0aW9uIGl0c2VsZiBkbyANCj4+ID5naXZlDQo+PnNvbWUgYXJlYXMgZm9yIGNv bnNpZGVyYXRpb24uDQo+Pg0KPj4gVGhlIGRvY3VtZW50IGNvdWxkIHJlZmVyZW5jZSBSRkMgNDU5 My9SRkMgNjg2MyBhbmQgc3RhdGUgdGhhdCANCj4+IGF1dGhlbnRpY2F0aW9uIGFzIHNwZWNpZmll ZCBpbiBSRkMgNzQ3NCBvciBSRkMgNzE2NiBTSE9VTEQgYmUgdXNlZCBpbiANCj4+IGRlcGxveW1l bnRzIHdoZXJlIGF0dGFja2VycyBoYXZlIGFjY2VzcyB0byB0aGUgcGh5c2ljYWwgbmV0d29ya3Mg DQo+PiBpbmNsdWRlZCBpbiB0aGUgT1NQRiBkb21haW4gYXJlIHZ1bG5lcmFibGUuDQo+PiA8U2hy YWRkaGE+IG9rLiBVcGRhdGluZyB0aGUgU2VjdXJpdHkgY29uc2lkZXJhdGlvbiBzZWN0aW9uDQo+ DQo+VGhhbmtzLg0KPg0KPj4NCj4+ID4NCj4+ID5UaGUgUkkgTFNBcyBjYXJyeWluZyBhZG1pbmlz dHJhdGl2ZSB0YWdzIGNhbiBiZSBhdCBsaW5rLSwgYXJlYS0sIG9yIA0KPj4gPkFTLWxldmVsIHNj b3BlOyBhbiBhZG1pbmlzdHJhdG9yIGFzc2lnbmluZyB0YWcgdmFsdWVzIGFuZCBhc3NvY2lhdGVk IA0KPj4gPnBvbGljaWVzIHNob3VsZCBjb25zaWRlciB3aGF0IHdvdWxkIGhhcHBlbiBpZiBhIGdp dmVuIHRhZyB3YXMgDQo+PiA+YWR2ZXJ0aXNlZCBhdCBhIGRpZmZlcmVudCBzY29wZSB0aGFuIGlu dGVuZGVkLiAgQ29tcGxpYW50IA0KPj4gPmltcGxlbWVudGF0aW9ucyBNVVNUIE5PVCBnZW5lcmF0 ZSB0aGUgc2FtZSB0YWcgYXQgZGlmZmVyZW50IHNjb3BlcywgDQo+PiA+YnV0IGEgcmVjZWl2ZXIg d291bGQgbmVlZCB0byB0YWtlIHNvbWUgYWN0aW9uIGlmIGl0IGhhcHBlbmVkLCANCj4+ID53aGV0 aGVyIGR1ZSB0byBuZXR3b3JrIGdsaXRjaCBvciBtYWxpY2lvdXMgYWN0aW9uIC0tIHdoYXQgc2hv dWxkIHRoZXkgZG8/DQo+Pg0KPj4gSeKAmW0gbm90IGFuIGF1dGhvciwgYnV0IHRoaXMgaXMgd2hh dCBJ4oCZZCByZWNvbW1lbmQ6DQo+Pg0KPj4gICAgVGhlIGNvbmZsaWN0aW5nIHRhZyBTSE9VTEQg bm90IGJlIHVzZWQgYW5kIHRoaXMgc2l0dWF0aW9uIFNIT1VMRCANCj4+IGJlIGxvZ2dlZCBhcyBh biBlcnJvciBpbmNsdWRpbmcgdGhlIHRhZyB3aXRoIGNvbmZsaWN0aW5nIHNjb3BlcyBhbmQgDQo+ PiB0aGUgb3JpZ2luYXRvcihzKS4NCj4+IDxTaHJhZGRoYT4gVXBkYXRlZCB0aGUgZG9jdW1lbnQg d2l0aCBhYm92ZSBzdGF0ZW1lbnQuDQo+Pg0KPj4gVGhlcmUgaXMgYSBjYXNlIHRoYXQgbXVzdCBi ZSBhbGxvd2VkIC0gdGhlIHNhbWUgdGFnIGNvdWxkIGJlIHJlY2VpdmVkIA0KPj4gYnkgYW4gQUJS IGF0IGJvdGggdGhlIEFTIHNjb3BlIGFuZCB0aGUgYXJlYSBzY29wZSBpbiBhIHN0dWIgb3IgTlNT QSBhcmVhLg0KPj4gPFNocmFkZGhhPiBDb3VsZCB5b3UgcGxzIGVsYWJvcmF0ZSB0aGUgY2FzZS4g SSBkb24ndCBxdWl0ZSB1bmRlcnN0YW5kIA0KPj4gd2h5IHRoZSBBQlIgaW4gYSBzdHViL05TU0Eg YXJlYSB3b3VsZCBnZW5lcmF0ZSBvciByZWNlaXZlIFJJIExTQXMgDQo+PiB3aXRoIGRpZmZlcmVu dCBzY29wZXMuSSB0aGluayBpdCdzIHBlcmZlY3RseSB2YWxpZCB0byBmbG9vZCB0aGUgQVMgDQo+ PiBzY29wZWQgUkkgTFNBcyBpbnRvIHRoZSBzdHViIC8gTlNTQSBhcmVhLg0KPg0KPkFjZWUsIEkg dGhpbmsgdGhpcyBpcyBhIHF1ZXN0aW9uIGZvciB5b3UuDQoNClllYWggLSBJIG1pc3NlZCB0aGlz IHdpdGhvdXQgRS1tYWlsIHF1b3RpbmfigKYNCg0KU2hyYWRkaGEsIA0KDQpBUy1zY29wZWQgTFNB cyBhcmUgbm90IGZsb29kZWQgaW50byBzdHViIG9yIE5TU0EgYXJlYXMuIFNvLCBpZiBhbiBBQlIg aXMgZ29pbmcgdG8gYWR2ZXJ0aXNlIHRhZ3MgdG8gaXRzIGF0dGFjaGVkIGFyZWFzIGFuZCB0aGUg cmVzdCBvZiB0aGUgT1NQRiBSb3V0aW5nIGRvbWFpbiwgaXQgd2lsbCBuZWVkIHRvIG9yaWdpbmF0 ZSB0aGUgTFNBIGF0IGRpZmZlcmVudCBzY29wZXMuDQoNCg0KDQo+DQo+PiA+QW5vdGhlciBwb3Rl bnRpYWwgaXNzdWUgbGllcyBpbiB0aGUgInN0aWNraW5lc3MiIG9mIHRoZSBhZG1pbiB0YWdzIA0K Pj4gPi0tIHRoZSB0ZXh0ICJ0aGUgbm9kZSBhZG1pbmlzdHJhdGl2ZSB0YWdzIGFzc29jaWF0ZWQg d2l0aCBhIG5vZGUgZm9yIA0KPj4gPnRoZSBwdXJwb3NlIG9mIGFueSBjb21wdXRhdGlvbiBvciBw cm9jZXNzaW5nIFNIT1VMRCBiZSBhIHN1cGVyc2V0IG9mIA0KPj4gPm5vZGUgYWRtaW5pc3RyYXRp dmUgdGFncyBmcm9tIGFsbCB0aGUgVExWcyBpbiBhbGwgaW5zdGFuY2VzIG9mIHRoZSANCj4+ID5S SSBMU0Egb3JpZ2luYXRlZCBieSB0aGF0IG5vZGUiIHNlZW1zIHRvIG1lYW4gdGhhdCBvbmNlIGEg dGFnIGlzIA0KPj4gPnNldCwgaXQgY2Fubm90DQo+PiA+KGVhc2lseSkgYmUgdW5zZXQuICBXb3Vs ZCBmb3JjZS1leHBpcmluZyBhbiBMU0EgYmUgZW5vdWdoIHRvIHJlc2V0IA0KPj4gPnRoZSB0YWcs IG9yIHNvbWV0aGluZyBlbHNlPw0KPj4NCj4+IFllcyAtIHRoaXMgaXMgc3RhbmRhcmQgZm9yIGFu eSBPU1BGIExTQS4gSG93ZXZlciwgc2luY2UgdGhlIE9TUEYgUkkgDQo+PiBMU0EgbWF5IGluY2x1 ZGUgb3RoZXIgVExWcyBvciBldmVuIG90aGVyIHRhZ3MsIGEgdGFnIGNvdWxkIGFsc28gYmUgDQo+ PiB3aXRoZHJhd24gYnkgcmVvcmlnaW5hdGluZyB0aGUgUkkgTFNBIHdpdGhvdXQgdGhlIFRMViBv ciB3aXRoIGEgVExWIA0KPj4gdGhhdCBkb2VzbuKAmXQgaW5jbHVkZSB0aGUgd2l0aGRyYXduIHRh Zy4NCj4NCj5JIG1heSBzdGlsbCBiZSBjb25mdXNlZCwgYnV0IEkgZGlkIG5vdCBpbnRlcnByZXQg dGhlIHRleHQgaW4gdGhhdCB3YXkuDQo+VGhhdCBpcywgdGhlIHRleHQgYWJvdXQgImFsbCBpbnN0 YW5jZXMgb2YgdGhlIFJJIExTQSBvcmlnaW5hdGVkIGJ5IHRoYXQgDQo+bm9kZSIuICAoV2hpY2gg SSBjaGFuZ2VkIHRvICJpbnN0YW5jZXMgb2YgUkkgTFNBcyIgaW4gbXkgZ3JhbW1hciBlZGl0cywg DQo+cG9zc2libHkgaW5jb3JyZWN0bHkgaWYgSSdtIHN0aWxsIGNvbmZ1c2VkLikgIEkgd2FzIGlu dGVycHJldGluZyB0aGUgDQo+d29yZCAiaW5zdGFuY2VzIiB0byBpbmNsdWRlIGhpc3RvcmljYWwg b25lcyBvdmVyIHRpbWUsIHNvIHRoYXQgZXZlbiBpZiANCj5hbiBSSSBMU0EgY2FycnlpbmcgYSBw YXJ0aWN1bGFyIGFkbWluIHRhZyB3YXMgcmVwbGFjZWQgYnkgYSBkaWZmZXJlbnQgDQo+UkkgTFNB IGZvciB0aGUgc2FtZSBhZHZlcnRpc2luZyByb3V0ZXIsIHRoZSBvbGQgb25lIHdvdWxkIHN0aWxs IGJlIGFuIA0KPmluc3RhbmNlIG9mIHRoYXQgUkkgTFNBLiAgR29pbmcgYmFjayB0byBSRkMgMjMy OCwgSSdtIG5vdCBzdXJlIHdoYXQgDQo+ZXhhY3RseSBJIGhhZCBpbiBtaW5kIGluIHRlcm1zIG9m IGFnZXMgYW5kIHNjb3BlcyBhbmQgc2VxdWVuY2UgbnVtYmVycyANCj50aGF0IHdvdWxkIGNhdXNl IHRoaXMgc2l0dWF0aW9uLCBidXQgSSBzb21laG93IGhhZCBpdCBpbiBteSBtaW5kIHRoYXQgDQo+ dGhlcmUgY291bGQgYmUgbXVsdGlwbGUgUkkgTFNBcyBhY3RpdmUgYXQgdGhlIHNhbWUgdGltZSB0 aGF0IGFwcGx5IHRvIGEgDQo+Z2l2ZW4gbm9kZSwgc3VjaCBhcyBpZiB0aGUgYWRtaW4ganVzdCBh ZGRlZCBhIG5ldyBSSSBMU0EgY29udGFpbmluZyANCj5vbmx5IHRoZSBhZG1pbiB0YWcgdG8gYXVn bWVudCB0aGUgZXhpc3RpbmcgUkkgTFNBcyBiZWluZyBzZW50LiAgSXMgdGhhdCANCj5wb3NzaWJs ZT8NCg0KSW4gT1NQRiwgYSBtb3JlLXJlY2VudCB2ZXJzaW9uIG9yIGluc3RhbmNlIG9mIGFuIExT QSB3aWxsIGFsd2F5cyBzdXBlcnNlZGUgYWxsIHByZXZpb3VzIGluc3RhbmNlcyBvZiB0aGUgc2Ft ZSBMU0EuDQoNCj4NCj5JZiB0aGVyZSBjYW4gb25seSBiZSBvbmUgUkkgTFNBIHRoYXQgaXMgImN1 cnJlbnQiIGZvciBhIGdpdmVuIG5vZGUgKGF0IA0KPmEgZ2l2ZW4gc2NvcGU/KSwgdGhlbiBpdCBz ZWVtcyBsaWtlIGl0IHdvdWxkIGJlIHVzZWZ1bCB0byBjaGFuZ2UgdGhlIA0KPnRleHQgdG8gZXhw bGljaXRseSBzYXkgImFsbCBjdXJyZW50IGluc3RhbmNlcyIgLS0gdGhhdCB3b3VsZCBoYXZlIA0K PmhlbHBlZCBtZSBhcyBJIHJlYWQgaXQuDQoNCkkgc2VlIHRoZSBjb25mdXNpb24gaXMgYmV0d2Vl biBpbnN0YW5jZXMgb2YgdGhlIHNhbWUgTFNBIGluIHRoZSBnZW5lcmFsIHNlbnNlIGFuZCBtdWx0 aXBsZSBpbnN0YW5jZXMgb2YgdGhlIE9TUEYgUkkgTFNBLiBSZWZlciB0byBSRkMgMjMyOCBzZWN0 aW9uIDEzLjEuICANCg0KDQo+DQo+PiA+IEhvdyBkaXNydXB0aXZlIHdvdWxkIHRoYXQgYmU/ICBJ dCB3b3VsZCBiZSBoZWxwZnVsIHRvIHNlZSBzb21lIA0KPj4gPmRpc2N1c3Npb24gb2YgaG93IGEg dGFnIHdvdWxkIGJlIHJlbW92ZWQuDQo+Pg0KPj4gSSBtYXkgb2Ygd29ya2VkIG9uIE9TUEYgZm9y IHRvbyBsb25nIGJ1dCB0aGlzIHNob3VsZCBiZSBvYnZpb3VzIHRvIA0KPj4gYW55b25lIGltcGxl bWVudGluZyB0aGUgZHJhZnQgZnJvbSB0aGUgc3BlY2lmaWNhdGlvbi4NCj4NCj5JZiBpdCdzIHNp bXBseSBhIG1hdHRlciBvZiByZS1pc3N1aW5nIHRoZSBSSSBMU0EgKEkgd2FzIG5vdCBzdXJlIHdo ZW4gSSANCj53YXMgd3JpdGluZyBteSByZXZpZXcpLCB0aGVuIEkgYWdyZWUgaXQgc2hvdWxkIGJl IG9idmlvdXMuDQo+DQo+PiA8U2hyYWRkaGE+IFRoZSBiZWxvdyBwYXJhZ3JhcGggKGZyb20gLTA3 IHZlcnNpb24pIGlzIGNsZWFyIG9uIHRoaXMgSSANCj4+aG9wZS4NCj4+DQo+PiAiV2hlbiB0aGVy ZSBpcyBhIGNoYW5nZSBvciByZW1vdmFsIG9mIGFuIGFkbWluaXN0cmF0aXZlIGFmZmlsaWF0aW9u IA0KPj5vZiBhIG5vZGUsDQo+PiAgICB0aGUgbm9kZSBNVVNUIHJlLW9yaWdpbmF0ZSB0aGUgUkkg TFNBIHdpdGggdGhlIGxhdGVzdCBzZXQgb2Ygbm9kZSANCj4+YWRtaW5pc3RyYXRpdmUgdGFncy4N Cj4+ICAgIE9uIHRoZSByZWNlaXZlciwgV2hlbiB0aGVyZSBpcyBhIGNoYW5nZSBpbiB0aGUgbm9k ZSBhZG1pbmlzdHJhdGl2ZSANCj4+dGFnIFRMViBvciByZW1vdmFsLw0KPj4gICAgYWRkaXRpb24g b2YgYSBUTFYgaW4gYW55IGluc3RhbmNlIG9mIHRoZSBSSS1MU0EsIGltcGxlbWVudGF0aW9ucyBN VVNUDQo+PiAgICB0YWtlIGFwcHJvcHJpYXRlIG1lYXN1cmVzIHRvIHVwZGF0ZSBpdHMgc3RhdGUg YWNjb3JkaW5nIHRvIHRoZQ0KPj4gICAgY2hhbmdlZCBzZXQgb2YgdGFncy4gIEV4YWN0IGFjdGlv bnMgZGVwZW5kIG9uIGZlYXR1cmVzIHdvcmtpbmcgd2l0aA0KPj4gICAgYWRtaW5pc3RyYXRpdmUg dGFncyBhbmQgaXMgb3V0c2lkZSBvZiBzY29wZSBvZiB0aGlzIHNwZWNpZmljYXRpb24uIg0KPg0K PlRoaXMgaXMgZGVmaW5pdGVseSBpbXByb3ZlZCwgYnV0IGl0IGRvZXMgbm90IGRvIG11Y2ggdG8g YWRkcmVzcyB0aGUgDQo+aXNzdWUgSSBoYWQgaW4gbWluZCB3aGVuIEkgd2FzIHdyaXRpbmcgbXkg cmV2aWV3LiAgSG93ZXZlciwgaXQgc2VlbXMgDQo+bGlrZSB0aGF0IGlzc3VlIGlzIG5vdCBhY3R1 YWxseSBhbiBpc3N1ZSwgc28gbm8gZnVydGhlciBjaGFuZ2VzIHRvIHRoaXMgDQo+dGV4dCB3b3Vs ZCBiZSBuZWVkZWQuDQo+DQo+DQo+PiA+DQo+PiA+VGhhdCBpcyBwYXJ0aWN1bGFybHkgZWFzeSBm b3IgYW4gYXR0YWNrZXIgd2hlbiB0aGUgbnVsbCBPU1BGIA0KPj4gPmF1dGhlbnRpY2F0aW9uIG1l Y2hhbmlzbSBpcyBpbiB1c2UgKGhvdyBjb21tb24gaXMgdGhhdD8gIEkgc2F3IHNvbWUgDQo+PiA+ d2Vic2l0ZXMgaW5kaWNhdGluZyBpdCB3YXMgdGhlIGRlZmF1bHQgYmVoYXZpb3IsIGF0IGxlYXN0 IHNvbWV0aW1lcykuDQo+PiA+SSBkbyBub3Qgc2VlIGEgbmVlZCB0byB0dXJuIHRoaXMgZG9jdW1l bnQgaW50byAic2VjdXJpdHkgDQo+PiA+Y29uc2lkZXJhdGlvbnMgZm9yIE9TUEYgYXV0aGVudGlj YXRpb24iLCBidXQgbWF5YmUgaXQgaXMgd29ydGggbWVudGlvbmluZyBzb21lIHRoaW5nczoNCj4+ ID50aGUNCj4+ID5tZDUgc2NoZW1lIHNlZW1zIHByZXR0eSB3ZWVrIGF0IHRoaXMgcG9pbnQgKHRo b3VnaCBwcm9iYWJseSBub3QgDQo+PiA+dHJpdmlhbGx5IGJyb2tlbiksIHRoZSBobWFjLXNoYSBz Y2hlbWUgb2YgUkZDIDU3MDkgaXMgb25seSBmcm9tIA0KPj4gPjIwMDksIGFuZCBSRkMgNzQ3NCAo b25seSBzaXggbW9udGhzIG9sZCkgcG9pbnRzIG91dCBjYXNlcyB3aGVyZSBib3RoIA0KPj4gPmFy ZSBzdXNjZXB0aWJsZSB0byByZXBsYXkgYXR0YWNrcy4gIEp1c3QgbG9va2luZyBhdCB0aGUgc2Vj dXJpdHkgDQo+PiA+Y29uc2lkZXJhdGlvbnMgb2YgdGhpcyBkb2N1bWVudCBhbmQgdGhlIGNvcmUg T1NQRiB2Mi92MyBzcGVjcyBkb2VzIA0KPj4gPm5vdCBjb252ZXkgdGhpcyB0byB0aGUgcmVhZGVy LCBzbyBJIHdvdWxkIGxpa2UgdG8gc2VlIGF0IGxlYXN0IGEgDQo+PiA+cG9pbnRlciB0byBzdWNo IGNvbnNpZGVyYXRpb25zLiAgKFRoZSBzdGFuY2Ugb2YgUkZDIDIzMjggdGhhdCAiYWxsIA0KPj4g Pk9TUEYgcHJvdG9jb2wNCj4+ZXhjaGFuZ2VzIGFyZSBhdXRoZW50aWNhdGVkIg0KPj4gPnNlZW1z IHBhcnRpY3VsYXJseSBkaXNpbmdlbm91cyBnaXZlbiB0aGUgcHJlc2VuY2Ugb2YgdGhlIG51bGwg DQo+PiA+YXV0aGVudGljYXRpb24gc2NoZW1lLikNCj4+DQo+PiBJIHRoaW5rIGJvdGggUkZDIDc0 NzQgYW5kIFJGQyA3MTc2IHNob3VsZCBiZSByZWZlcmVuY2VkLiBUaGUgT1NQRiANCj4+IHZ1bG5l cmFiaWxpdHkgdG8gcmVwbGF5IGF0dGFja3MgdG8gT1NQRnYyL09TUEZ2MyByb3V0ZXJzIGltcGxl bWVudGluZyANCj4+IHRoZXNlIHNwZWNpZmljYXRpb25zIGlzIGV4dHJlbWVseSBzbWFsbCBhbmQg aGFzIGJlZW4gcmVkdWNlZCBhcyBtdWNoIA0KPj4gYXMgcHJhY3RpY2FsLiBJZiB5b3UgYXJlIHN0 aWxsIGNvbmNlcm5lZCwgSSBzdWdnZXN0IHlvdSBkaXNjdXNzIHdpdGggDQo+PiBTYW0gSGFydG1h biAoYWxzbyBvbmNlIGFmZmlsaWF0ZWQgd2l0aCBNSVQpLg0KPg0KPkkgYW0gbm90IGVzcGVjaWFs bHkgY29uY2VybmVkIGFib3V0IHRoaXMgYXR0YWNrLCBJIGp1c3Qgbm90aWNlZCB0aGF0IA0KPnRo ZXJlIHdhcyBhbiBSRkMgYWJvdXQgaXQuICBTaW5jZSBSRkMgNzQ3NCB3YXMgc28gcmVjZW50LCBp dCBtYWRlIG1lIA0KPndvbmRlciBob3cgd2lkZWx5IGRlcGxveWVkIHRoZSBzZWN1cml0eSBmaXhl cyBhcmUgdG9kYXkuDQoNCkNvcnJlY3QgLSBpdCBpcyBub3Qgd2lkZWx5IGltcGxlbWVudGVkIG9y IGRlcGxveWVkLg0KDQpUaGFua3MsDQpBY2VlDQoNCj4NCj4+IDxTaHJhZGRoYT4gU2VjdXJpdHkg Y29uc2lkZXJhdGlvbiBzZWN0aW9uIHVwZGF0ZWQgd2l0aCB0aGUgcmVmZXJlbmNlIA0KPj4gdG8g UkZDIDc0NzQgYW5kIDcxNzYuDQo+DQo+VGhhbmtzLg0KPg0KPj4gPg0KPj4gPlRoZXJlIGlzIGFs c28gdGhlIHBvc3NpYmlsaXR5IHRoYXQgYW4gYXR0YWNrZXIgY291bGQgYmxvY2sgZGVsaXZlcnkg DQo+PiA+b2YgYW4gTFNBLCBjYXVzaW5nIGEgdGFnIHRoYXQgc2hvdWxkIGJlIHNldCB0byBub3Qg YmUgc2Vlbi4gIFRoaXMgDQo+PiA+c2VlbXMgdW5saWtlbHkgZm9yIHdpcmVkIHBvaW50LXRvLXBv aW50IGxpbmtzLCBidXQgaXMgbW9yZSBwbGF1c2libGUgDQo+PiA+aW4gb3RoZXIgZW52aXJvbm1l bnRzLCBzdWNoIGFzIHJhZGlvIGxpbmtzLiAgSSB0aGluayBJIGNhbiBpbWFnaW5lIA0KPj4gPnNj ZW5hcmlvcyB3aGVyZSB0aGlzIHdvdWxkIGNhdXNlIGRyYXN0aWMgZGFtYWdlIHRvIHRoZSByb3V0 aW5nIHRvcG9sb2d5Lg0KPj4NCj4+IFRoZSBkZXNjcmlwdGlvbiBhbmQgbWl0aWdhdGlvbiBvZiBz dWNoIGEgZ2VuZXJpYyB0aHJlYXQgZG9lc27igJl0IA0KPj5iZWxvbmcgaW4gYSBtaW5vciAodGhv dWdoIGltcG9ydGFudCkgT1NQRiBzcGVjaWZpY2F0aW9uLiBUaGUgZWZmZWN0IG9mIA0KPj5ibG9j a2luZyBjb250cm9sIHRyYWZmaWMgaXMgbmV2ZXIgcG9zaXRpdmUgO14pLiBBdCBsZWFzdCBPU1BG IHVzZXMgDQo+PnJlbGlhYmxlIGZsb29kaW5nIHNvIGl0IHdpbGwgYmUgcmV0cmFuc21pdHRlZC4N Cj4+IDxTaHJhZGRoYT4gQWdyZWUgd2l0aCBBY2VlIG9uIHRoaXMuDQo+DQo+SSBoYWQgZm9yZ290 dGVuIHRoYXQgT1NQRiBmbG9vZGluZyB3YXMgcmVsaWFibGU7IEkgYWdyZWUgdGhpcyBkb2VzIG5v dCANCj5uZWVkIHRvIGJlIGV4cGxpY2l0bHkgY2FsbGVkIG91dCBpbiB0aGlzIGRvY3VtZW50LCBz aW5jZSBpdCdzIGEgZ2VuZXJhbCANCj5yb3V0aW5nIGNvbmNlcm4uDQo+DQo+PiA+VGhlIHBhcmVu dGhldGljYWwgaW4gc2VjdGlvbiAzLjIgd2hlcmVpbiByb3V0ZXJzIG1pZ2h0IGFkdmVydGlzZSBh IA0KPj4gPnBlci1ub2RlIGFtaW5pc3RyYXRpdmUgdGFnICJ3aXRob3V0IGtub3dpbmcgKG9yIGV2 ZW4gZXhwbGljaXRseQ0KPj4gPnN1cHBvcnRpbmcpIGZ1bmN0aW9uYWxpdHkgaW1wbGllZCBieSB0 aGUgdGFnIiBzZWVtcyBwb3RlbnRpYWxseSANCj4+ID5kYW5nZXJvdXMsIHNpbmNlIGl0IHNvdW5k cyBsaWtlIHRoZSByb3V0ZXJzIGluIHF1ZXN0aW9uIGFyZSBseWluZyANCj4+ID5hYm91dCB0aGVp ciBjYXBhYmlsaXRpZXMuICBXb3VsZCB0aGUgZG9jdW1lbnQgc3VmZmVyIGhhcm0gaWYgdGhlIA0K Pj4gPnBhcmVudGhldGljYWwgd2FzIHJlbW92ZWQ/DQo+Pg0KPj4gSW4gbXkgb3Bpbmlvbiwgbm8g aGFybSB0byByZW1vdmUgLSBtaXNjb25maWd1cmF0aW9uIGlzIGFsbW9zdCBhbHdheXMgDQo+PmFu IGlzc3VlLg0KPj4gPFNocmFkZGhhPiBJdCdzIHBlcmZlY3RseSB2YWxpZCBmb3IgYSBub2RlIG9y aWdpbmF0ZSBhIHRhZyB3aGVuIHRoZSANCj4+bm9kZSAgaXRzZWxmIGRvZXMgbm90IFByb2Nlc3Mg YW55IHRhZ3MuIEkgdGhpbmsgdGhlIHNlbnRlbmNlIG5lZWRzIHRvIA0KPj5iZSAgcmVwaHJhc2Vk LiBDaGFuZ2luZyBpdCBhcyBiZWxvdy4NCj4+DQo+PiA8dD5NZWFuaW5nIG9mIHRoZSBOb2RlIGFk bWluaXN0cmF0aXZlIHRhZ3MgaXMgZ2VuZXJhbGx5IG9wYXF1ZSB0byANCj4+IE9TUEYuIFJvdXRl ciBhZHZlcnRpc2luZyB0aGUgcGVyLW5vZGUgYWRtaW5pc3RyYXRpdmUgdGFnIChvciB0YWdzKSAN Cj4+IG1heSBiZSBjb25maWd1cmVkIHRvIGRvIHNvIHdpdGhvdXQga25vd2luZyAob3IgZXZlbiB3 aXRob3V0IA0KPj4gc3VwcG9ydGluZyBwcm9jZXNzaW5nIG9mKSBmdW5jdGlvbmFsaXR5IGltcGxp ZWQgYnkgdGhlIHRhZy48L3Q+DQo+DQo+SSB0aGluayB0aGVyZSBpcyBhIHF1ZXN0aW9uIGFib3V0 IHdoZXRoZXIgdGhpcyBtZWFucyB0aGF0IHRoZSByb3V0ZXIgDQo+ZG9lc24ndCBuZWVkIHRvIGtu b3cgd2hhdCBmZWF0dXJlIHRoZSB0YWcgbnVtYmVyIG1lYW5zLCBvciB3aGV0aGVyIGl0IA0KPm1l YW5zIHRoYXQgdGhlIHJvdXRlciBkb2Vzbid0IG5lZWQgdG8gaW1wbGVtZW50IHRoZSBmZWF0dXJl IGluZGljYXRlZCANCj5ieSB0aGF0IHRhZyB2YWx1ZS4gIEkgcmVhZCB0aGlzIHRleHQgYXMgYmVp bmcgaW4gdGhlIHNlY29uZCBjYXNlLCBidXQgSSANCj5hbSBpbnRlcnByZXRpbmcgeW91ciBkaXNj dXNzaW9uIGFib3V0IHRoaXMgdGV4dCB0byBtZWFuIHRoYXQgeW91IHRoaW5rIA0KPml0IGlzIGNv dmVyaW5nIHRoZSBmaXJzdCBjYXNlLiAgKFllcywgdGhlcmUgY2FuIGJlIHRhZyB2YWx1ZXMgdGhh dCBqdXN0IA0KPmluZGljYXRlIGFuIGFkbWluaXN0cmF0aXZlIGdyb3VwaW5nIGFuZCB0aGVyZSBp cyBubyBjb3JyZXNwb25kaW5nIA0KPmZ1bmN0aW9uYWxpdHkgbmVlZGVkIG9uIHRoZSByb3V0ZXIs IGJ1dCB0aGVyZSBjYW4gYWxzbyBiZSB0YWcgdmFsdWVzIA0KPnRoYXQgaW5kaWNhdGUgInRoZSBy b3V0ZXIgb3JpZ2luYXRpbmcgdGhpcyBSSSBMU0Egc3VwcG9ydHMgYWNjZXB0aW5nIHRhcmdldGVk IExEUCBzZXNzaW9ucyINCj4tLSBhIHJvdXRlciB3aWxsIGNhdXNlIGJyZWFrYWdlIGlmIGl0IHNl bmRzIHN1Y2ggYSB0YWcgYnV0IGRvZXMgbm90IA0KPmFjdHVhbGx5IHN1cHBvcnQgYWNjZXB0aW5n IHRhcmdldGVkIExEUCBzZXNzaW9ucy4pDQo+DQo+QmFzZWQgb24gdGhpcyBkaXNjdXNzaW9uLCBJ IHRoaW5rIHRoYXQgd2hhdCB0aGUgcGFyZW50aGV0aWNhbCBpcyB0cnlpbmcgDQo+dG8gc2F5IGlz IHRoYXQgInRoZSByb3V0ZXIgb3JpZ2luYXRpbmcgdGhlIHRhZyBtYXkgbm90IHVzZSB0aGF0IHRh ZyBpbiANCj5hbnkgb2YgaXRzIHByb2Nlc3NpbmcgZGVjaXNpb25zIiAtLSBpcyB0aGF0IGNvcnJl Y3Q/DQo+DQo+Q2hhbmdpbmcgdGhlIHdvcmQgImZ1bmN0aW9uYWxpdHkiIHRvICJhdHRyaWJ1dGVz IiB3b3VsZCBjYXVzZSBtZSB0byANCj5yZWFkIHRoZSB0ZXh0IGFzIGJlaW5nIGluIHRoZSBmaXJz dCBjYXNlIEkgZGVzY3JpYmVkIGFib3ZlLg0KPg0KPihCeSB0aGUgd2F5LCB0aGlzIHBhcmFncmFw aCBoYWQgYSBsb3Qgb2YgY2hhbmdlcyBpbiBteSBwYXRjaCBmb3IgDQo+Z3JhbW1hcjsgaXQgbWln aHQgaGF2ZSBiZWVuIGVhc2llciB0byBhcHBseSB0aGF0IHBhdGNoIGJlZm9yZSBtYWtpbmcgDQo+ ZnVydGhlciBlZGl0cywgdG8gcmVkdWNlIHRoZSBudW1iZXIgb2YgbWVyZ2UgY29uZmxpY3RzLiAg VGhlIGdyYW1tYXIgaW4gDQo+dGhlIHF1b3RlZCBuZXcgdGV4dCBoYXMgc2V2ZXJhbCBlcnJvcnMu KQ0KPg0KPj4gPk9uZSByZWFzb24gSSBhbSB1bnNhdGlzZmllZCBieSBtYWtpbmcgdGhlIGludGVy cHJldGF0aW9uIG9mIHRoZSB0YWcgDQo+PiA+dmFsdWVzIHNwZWNpZmljIHRvIGFuIGFkbWluaXN0 cmF0aXZlIGRvbWFpbiBpcyB0aGF0IGEgbWlzY29uZmlndXJlZCANCj4+ID5ib3JkZXIgcm91dGVy IG1pZ2h0IGVycm9uZW91c2x5IHVzZSB0YWcgdmFsdWVzIGZyb20gb25lIGRvbWFpbiBvbiANCj4+ ID50aGUgb3RoZXIgc2lkZSBvZiB0aGUgYm9yZGVyLg0KPj4gPiBQZXJoYXBzIHRoZSBvdGhlciBk YW1hZ2UgZnJvbSBhIHJvdXRlciBtaXNjb25maWd1cmVkIGluIHN1Y2ggYSANCj4+ID5mYXNoaW9u IHdvdWxkIGR3YXJmIHRoZSBhZGRpdGlvbmFsIGRhbWFnZSBmcm9tIHRoZSBtaXNpbnRlcnByZXRl ZCANCj4+ID50YWdzIGFuZCBzbyBteSBjb25jZXJuIGlzIGludmFsaWQ7IEkgcmVhbGx5IGNhbid0 IHNheS4NCj4+DQo+PiBBZ2FpbiwgSSBkb27igJl0IHRoaW5rIG1pc2NvbmZpZ3VyYXRpb24gbmVl ZHMgdG8gYmUgY292ZXJlZCAtICJlbXB0b3IgDQo+PmNhdmV0ZeKAnS4NCj4NCj5BIG1pc2NvbmZp Z3VyZWQgcm91dGVyIGlzIGJ5IGRlZmluaXRpb24gYnJva2VuLiAgU3VjaCBtaXNjb25maWd1cmF0 aW9uIA0KPmNhbiBoYXBwZW4gZWl0aGVyIGJ5IGFjY2lkZW50IGR1ZSB0byBvcGVyYXRvciBlcnJv ciwgb3IgbWFsaWNpb3VzbHksIGlmIA0KPmFuIGF0dGFja2VyIGhhcyBjb21wcm9taXNlZCB0aGUg c3lzdGVtLiAgV2hpbGUgaXQgbWF5IG5vdCBiZSBuZWNlc3NhcnkgDQo+dG8gc2F5IHRoYXQgYSBi cm9rZW4gcm91dGVyIHdpbGwgbm90IHBhc3MgdHJhZmZpYyB0aGUgd2F5IGl0J3Mgc3VwcG9zZWQg DQo+dG8sIGlmIGEgbWlzY29uZmlndXJlZCByb3V0ZXIgY2FuIGVtaXQgcm91dGluZyBwcm90b2Nv bCBtZXNzYWdlcyB0aGF0IA0KPmFmZmVjdCB0aGUgc3RhdGUgb2YgdGhlIG5ldHdvcmsgYXMgYSB3 aG9sZSwgbm90IGp1c3QgaXRzIGxvY2FsIA0KPnN1cnJvdW5kaW5ncywgdGhhdCBzZWVtcyBsaWtl IGFuIGFuYWx5c2lzIHRoYXQgaXMgYXBwcm9wcmlhdGUgZm9yIHRoZSANCj5zZWN1cml0eSBjb25z aWRlcmF0aW9ucyBvZiBhIHJvdXRpbmcgcHJvdG9jb2wgZG9jdW1lbnQuICBOb3csIEkgZG9uJ3Qg DQo+aGF2ZSBhIGdvb2QgcGljdHVyZSBvZiBzcGVjaWZpYyBleGFtcGxlcyBvZiBuZXR3b3JrLXdp ZGUgaXNzdWVzIGR1ZSB0byANCj50aGUgYWRtaW4gdGFnLCBidXQgSSB0aGluayB0aGVyZSdzIGEg bGFyZ2UgZW5vdWdoIHByb2JhYmlsaXR5IHRoYXQgaXQncyANCj5wb3NzaWJsZSBmb3Igc3VjaCBh IHRoaW5nIHRvIGhhcHBlbiB0aGF0IEkgd2FudGVkIHRvIG1lbnRpb24gaXQgaW4gbXkgDQo+cmV2 aWV3IGNvbW1lbnRzLiAgTWF5YmUgdGhlcmUgaXMgbm90IGFueXRoaW5nIHdvcnRoIG1lbnRpb25p bmcgYWJvdXQgaXQgDQo+aW4gdGhlIHNlY3VyaXR5IGNvbnNpZGVyYXRpb25zIHNlY3Rpb24sIGJ1 dCBJIGRvbid0IHRoaW5rIHRoYXQgDQo+Im1pc2NvbmZpZ3VyYXRpb24gZG9lc24ndCBuZWVkIHRv IGJlIGNvdmVyZWQiIGFkZHJlc3NlcyB0aGUgY29uY2VybiBJIHdhcyBhdHRlbXB0aW5nIHRvIHJh aXNlLg0KPg0KPj4gPFNocmFkZGhhPiAtMDcgdmVyc2lvbiBhZGRyZXNzZXMgdGhpcyBpc3N1ZS4N Cj4+DQo+PiAiQWR2ZXJ0aXNlbWVudCBvZiB0YWcgdmFsdWVzIGZvciBvbmUgYWRtaW5pc3RyYXRp dmUgZG9tYWluIGludG8gIA0KPj5hbm90aGVyICByaXNrcyBtaXNpbnRlcnByZXRhdGlvbiBvZiB0 aGUgdGFnIHZhbHVlcyAoaWYgdGhlIHR3byBkb21haW5zIA0KPj5oYXZlIGFzc2lnbmVkICBkaWZm ZXJlbnQgbWVhbmluZ3MgdG8gdGhlIHNhbWUgdmFsdWVzKSwgd2hpY2ggbWF5IGhhdmUgDQo+PnVu ZGVzaXJhYmxlIGFuZCB1bmFudGljaXBhdGVkIHNpZGUgIGVmZmVjdHMuIg0KPg0KPlRoYW5rIHlv dSwgdGhhdCBoZWxwcy4NCj4NCj4+IFRoYW5rcyBmb3IgdGhlIGVkaXRvcmlhbCByZXZpZXcgYXMg d2VsbC4gU3BlYWsgYXMgV0cgY2hhaXIsIEkgDQo+PmFwcHJlY2lhdGUgdGhpcy4NCj4NCj5Zb3Un cmUgd2VsY29tZSENCj4NCj4tQmVuDQoNCg== From nobody Thu Oct 22 07:18:20 2015 Return-Path: X-Original-To: secdir@ietfa.amsl.com Delivered-To: secdir@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id D08321AD355; Wed, 14 Oct 2015 00:24:09 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: 4.008 X-Spam-Level: **** X-Spam-Status: No, score=4.008 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, J_CHICKENPOX_35=0.6, J_CHICKENPOX_84=0.6, MANGLED_MEDS=2.3, MANY_SPAN_IN_TEXT=2.399, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001, T_HTML_ATTACH=0.01] autolearn=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id OZOCcYKek2mv; Wed, 14 Oct 2015 00:23:56 -0700 (PDT) Received: from na01-bn1-obe.outbound.protection.outlook.com (mail-bn1bon0727.outbound.protection.outlook.com [IPv6:2a01:111:f400:fc10::1:727]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 2BAA61ACF59; Wed, 14 Oct 2015 00:23:54 -0700 (PDT) Received: from BY1PR0501MB1381.namprd05.prod.outlook.com (10.160.107.139) by BY1PR0501MB1384.namprd05.prod.outlook.com (10.160.107.142) with Microsoft SMTP Server (TLS) id 15.1.293.16; Wed, 14 Oct 2015 07:23:36 +0000 Received: from BY1PR0501MB1381.namprd05.prod.outlook.com ([10.160.107.139]) by BY1PR0501MB1381.namprd05.prod.outlook.com ([10.160.107.139]) with mapi id 15.01.0293.007; Wed, 14 Oct 2015 07:23:36 +0000 From: Shraddha Hegde To: Benjamin Kaduk Thread-Topic: secdir review of draft-ietf-ospf-node-admin-tag-05 Thread-Index: AQHRAtRkmhe1qX1HzE+v6FQBX6gc055lH6mAgABoLJCABH8tgIAAbyug Date: Wed, 14 Oct 2015 07:23:35 +0000 Message-ID: References: In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: yes X-MS-TNEF-Correlator: authentication-results: spf=none (sender IP is ) smtp.mailfrom=shraddha@juniper.net; x-originating-ip: [116.197.184.11] x-microsoft-exchange-diagnostics: 1; BY1PR0501MB1384; 5:H6aWLiXaoHQxmM7lF91bCTGB1YyC4WXIxFTqkyqI98i/Vxmz6x47Sv+Q7bReBtByK+jJb1KoQDESjsG9VyQqiJW+1qA5WDihzewWaGX08beURFSLMSqGNEYMw5DwGVyBrFUZVTN/bPwAqa4q85OryA==; 24:VLNtqn0QLNUEXlJhIcIZ1XJiE/yGojcVExP+yEeT+ANQMfAKoOI5pz9+rO2KZ8iu1z+onZR8FVdNNbULBCeCcYbC0wI2Gv1Cmbp0pMcRb0I=; 20:8SSE49A8SuIo0iKk2I7QKWzuCyvUXKkMVpRgVJgSuDxnV5pG3+8y+osJH4RY/gyWV/txd9PaSe1w8esF541QIw== x-microsoft-antispam: UriScan:;BCL:0;PCL:0;RULEID:;SRVR:BY1PR0501MB1384; x-microsoft-antispam-prvs: x-exchange-antispam-report-test: UriScan:(240460790083961)(138986009662008)(95692535739014); x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(601004)(2401047)(520078)(5005006)(8121501046)(3002001); SRVR:BY1PR0501MB1384; BCL:0; PCL:0; RULEID:; SRVR:BY1PR0501MB1384; x-forefront-prvs: 0729050452 x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(6009001)(377454003)(13464003)(24454002)(51914003)(52034003)(199003)(43784003)(479174004)(189002)(51444003)(164054003)(97736004)(5003600100002)(106116001)(2171001)(189998001)(87936001)(15975445007)(122556002)(5001960100002)(110136002)(99286002)(19580395003)(230783001)(106356001)(81156007)(101416001)(33656002)(10400500002)(93886004)(19580405001)(76176999)(5008740100001)(105586002)(77096005)(5007970100001)(54356999)(2900100001)(5002640100001)(46102003)(102836002)(92566002)(64706001)(5890100001)(50986999)(74316001)(66066001)(2950100001)(76576001)(5004730100002)(99936001)(11100500001)(86362001)(40100003)(579004); DIR:OUT; SFP:1102; SCL:1; SRVR:BY1PR0501MB1384; H:BY1PR0501MB1381.namprd05.prod.outlook.com; FPR:; SPF:None; PTR:InfoNoRecords; A:1; MX:1; LANG:en; received-spf: None (protection.outlook.com: juniper.net does not designate permitted sender hosts) spamdiagnosticoutput: 1:23 spamdiagnosticmetadata: NSPM Content-Type: multipart/mixed; boundary="_002_BY1PR0501MB13815C096D0BF8D4221E5600D53F0BY1PR0501MB1381_" MIME-Version: 1.0 X-OriginatorOrg: juniper.net X-MS-Exchange-CrossTenant-originalarrivaltime: 14 Oct 2015 07:23:35.7491 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: bea78b3c-4cdb-4130-854a-1d193232e5f4 X-MS-Exchange-Transport-CrossTenantHeadersStamped: BY1PR0501MB1384 Archived-At: X-Mailman-Approved-At: Thu, 22 Oct 2015 07:18:02 -0700 Cc: "draft-ietf-ospf-node-admin-tag.all@ietf.org" , "Acee Lindem \(acee\)" , "iesg@ietf.org" , "secdir@ietf.org" Subject: Re: [secdir] secdir review of draft-ietf-ospf-node-admin-tag-05 X-BeenThere: secdir@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: Security Area Directorate List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 14 Oct 2015 07:24:10 -0000 --_002_BY1PR0501MB13815C096D0BF8D4221E5600D53F0BY1PR0501MB1381_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 QmVuLA0KDQpUaGFua3MgYWdhaW4gZm9yIHRoZSBmb2xsb3ctdXAuDQpQbHMgc2VlIGJlbG93Lg0K DQo8Li4uIHNuaXBwZWQgdG8gb3BlbiBjb21tZW50cy4uLj4NCg0KDQoNCi0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tDQoNCj4gVGhlIGludGVudCBoZXJlIGlzIHRoYXQgdGhpcyBUTFYgaXMgdG8gYmUgc29sZWx5 IGZvciBsb2NhbGx5IGRlZmluZWQgDQo+IHBvbGljaWVzLiBJZiB0aGVyZSB3ZXJlIHRvIGJlIGEg VExWIGZvciB3ZWxsLWtub3duIHRhZ3MgYW5kIHBvbGljaWVzLCANCj4gdGhpcyBjb3VsZCBiZSBh Y2NvbXBsaXNoZWQgd2l0aCBhIHNlcGFyYXRlIE9TUEYgUkkgVExWLiBJIGFncmVlIHRoYXQgDQo+ IHRoZSBub3JtYXRpdmUgdGV4dCBzaG91bGQgYmUgc29mdGVuZWQgZnJvbSDigJxNVVNUIE5PVOKA nSB0byDigJxhcmUgbm90IA0KPiBleHBlY3RlZCB0b+KAnS4NCj4NCj4gPFNocmFkZGhhPiBUaGVy ZSB3YXMgYSBsb25nIGRpc2N1c3Npb24gb24gdGhlIG1haWxpbmcgbGlzdCBvbiB3aGV0aGVyIA0K PiB3ZSBzaG91bGQgYWxsb3cgd2VsbCBkZWZpbmVkIHZhbHVlcyBmb3IgdGhlIGFkbWluIHRhZ3Mg bWFqb3JpdHkgDQo+IGNvbnNlbnN1cyB3YXMgdGhhdCB3ZSBzaG91bGQgbm90IGFsbG93IGFueSBz dGFuZGFyZCB2YWx1ZXMgZm9yIG5vZGUgDQo+IGFkbWluIHRhZ3MgYW5kIGluIGZ1dHVyZSBpZiBz dWNoIGEgcmVxdWlyZW1lbnQgYXJpc2VzIGl0J2xsIGdvIGFzIG5ldyANCj4gZmVhdHVyZSBpbiBS SSBUTFYgYXMgQWNlZSBhbHJlYWR5IG1lbnRpb25lZC4gSSBhbSB0cnlpbmcgdG8gdW5kZXJzdGFu ZCANCj4gd2h5IHRoZSB0ZXh0IG5lZWQgdG8gYmUgc29mdGVuZWQgd2hlbiBhbnkgZnV0dXJlIHN0 YW5kYXJkaXphdGlvbiB3b3VsZCANCj4gbmVlZCBhbHRvZ2V0aGVyIGEgbmV3IGRvY3VtZW50IGFu ZCB3aWxsIG5vdCByZXF1aXJlIGFueSBjaGFuZ2VzIHRvIHRoaXMgZG9jdW1lbnQuDQoNCkkgc3Vn Z2VzdGVkIHRoYXQgdGhlIHRleHQgYmUgc29mdGVuZWQgYmVjYXVzZSB0aGUgY3VycmVudCBzdGF0 ZW1lbnQgZG9lcyBub3QgaGF2ZSBhbnkgcHJhY3RpY2FsIGVmZmVjdC4gIEl0J3MgdHJ5aW5nIHRv IHBsYWNlIHJlc3RyaWN0aW9ucyBvbiB3aGF0IHt0aGUgc2V0IG9mIGZ1dHVyZSBSRkNzIHRoYXQg dXBkYXRlIHRoaXMgZG9jdW1lbnR9IGNhbiBkbywgYnV0IGFueSBkb2N1bWVudCBpbiB0aGF0IHNl dCBjb3VsZCByZW1vdmUgc3VjaCBhIHJlc3RyaWN0aW9uIGFuZCBvdmVycmlkZSBpdCBhdCB0aGUg c2FtZSB0aW1lLg0KDQpJIHRoaW5rIGl0IHdvdWxkIGJlIGdvb2QgdG8gaGF2ZSBhIG5vdGUgaW4g c2VjdGlvbiAyIHRvIHRoZSBlZmZlY3QgdGhhdCAidGhlc2UgYWRtaW5pc3RyYXRpdmUgdGFncyBh cmUgc29sZWx5IGZvciB1c2Ugd2l0aGluIGFuIGFkbWluaXN0cmF0aXZlIGRvbWFpbiBhbmQgYXJl IHRoZWlyIGludGVycHJldGF0aW9uIGlzIGEgbWF0dGVyIG9mIGxvY2FsIHBvbGljeS4gIEl0IGlz IGV4cGVjdGVkIHRoYXQgdmFsdWVzIHdpbGwgbm90IGJlIHBvcnRhYmxlIGFjcm9zcyBhZG1pbmlz dHJhdGl2ZSBkb21haW5zIi4NCkkga25vdyB0aGF0IHRoaXMgdG9waWMgaXMgY292ZXJlZCBsYXRl ciBpbiB0aGUgZG9jdW1lbnQsIGJ1dCBoYXZpbmcgaXQgZWFybHkgd291bGQgaGVscCBzZXQgdGhl IHN0YWdlIGZvciB0aGUgcmVzdCBvZiB0aGUgZG9jdW1lbnQuDQoNCjxTaHJhZGRoYT4gT0suIEdl dCB5b3VyIHBvaW50LiBVcGRhdGVkIGFuZCBkaWZmIGF0dGFjaGVkLg0KDQotLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t DQoNCkkgY29tcGxldGVseSBtaXNzZWQgbG9va2luZyBhdCBlZGl0b3JpYWwgY29tbWVudHMgYW5k IHRoZSBkaWZmIGluIHByZXZpb3VzIG1haWwuIFNvcnJ5IGFib3V0IHRoYXQuDQoNCkhhdmUgdGFr ZW4geW91ciBjaGFuZ2VzIGluIHRoZSBsYXRlc3QgdmVyc2lvbiBhbmQgZGlmZiAoLTA2IHRvIC0w OCkgYXR0YWNoZWQuIFBscyB0YWtlIGEgbG9vay4NCg0KDQpFZGl0b3JpYWwgY29tbWVudHM6DQoN Cj4gDQo+IEkgYWxzbyBoYXZlIHNvbWUgZWRpdG9yaWFsIGNvbW1lbnRzIHVucmVsYXRlZCB0byB0 aGUgc2VjZGlyIHJldmlldzoNCj4gDQo+IFNlY3Rpb24gMy4yIHJlYWRzIHJhdGhlciBsaWtlIGEg anVtYmxlZCBsaXN0IGFuZCBjb3VsZCBiZW5lZml0IGZyb20gc29tZQ0KPiBhZGRpdGlvbmFsIHN0 cnVjdHVyZS4NCjxTaHJhZGRoYS4+VXBkYXRlZC4gUGxzIHJlZmVyIGRpZmYuDQo+IA0KPiBTaW1p bGFybHksIEkgd291bGQgZmluZCBpdCBoZWxwZnVsIGlmIHRoZXJlIHdhcyBzb21lIHRleHQgbW90 aXZhdGluZyB0aGUNCj4gIm1pZGRsZSBwYXRjaCIgbWVudGlvbmVkIGFib3ZlLCB0b3dhcmRzIHRo ZSBiZWdpbm5pbmcgb2YgdGhlIHRlY2huaWNhbA0KPiAobm9uLWV4YW1wbGUpIHBvcnRpb24gb2Yg dGhlIGRvY3VtZW50Lg0KDQo8U2hyYWRkaGE+IEkgY291bGQgbm90IGdldCB0aGlzIGNvbW1lbnQu IENvdWxkIHlvdSBwbHMgZWxhYm9yYXRlPw0KDQo+IA0KPiBGb3IgYSBjb25zdHJ1Y3Rpb24gYXMg d2Vha2x5IHN0cnVjdHVyZWQgYXMgdGhlc2UgYWRtaW5pc3RyYXRpdmUgdGFncywNCj4gcHJldmVu dGluZyBhbnkgaW50ZXJuYWwgc3RydWN0dXJlIG9yIGRlcGVuZGVuY2llcyBiZXR3ZWVuIHRhZ3Mg KGFzIHRoaXMNCj4gZG9jdW1lbnQgYXR0ZW1wdHMgdG8gZG8pIHNlZW1zIGNvcnJlY3QuICBIb3dl dmVyLCB0aGlzIHNlbnRpbWVudCBzZWVtcyB0bw0KPiBiZSBleHByZXNzZWQgZGlmZmVyZW50bHkg aW4gc2V2ZXJhbCBkaWZmZXJlbnQgcGxhY2VzIGluIHRoZSBkb2N1bWVudCwgYW5kDQo+IGl0IHdv dWxkIGJlIGdvb2QgdG8gY29uc29saWRhdGUgYW5kIGNvb3JkaW5hdGUgdGhlbS4gIEluIHBhcnRp Y3VsYXIsDQo+IHBhcmFncmFwaCAzIG9mIHNlY3Rpb24gMy4yIGV4cGxpY2l0bHkgc2F5cyB0aGF0 IHRhZyBvcmRlciBoYXMgbm8gbWVhbmluZywNCj4gYnV0IHBhcmFncmFwaCA0IGhhcyB0aGUgd2Vh a2VyICJTSE9VTEQgYmUgY29uc2lkZXJlZCBhbiB1bm9yZGVyZWQgbGlzdCIuDQo+IChUaGUgd29y ZCAic2V0IiBtaWdodCBiZSBhcHByb3ByaWF0ZSBoZXJlLikNCg0KPHNocmFkZGhhPkJlbG93IGlz IHRoZSBsYXRlc3QgdGV4dC4gU0hPVUxEIGlzIGNoYW5nZWQgdG8gTVVTVA0KDQoiIEVhY2ggdGFn IE1VU1QgYmUgdHJlYXRlZCBhcyBhbiBpbmRlcGVuZGVudA0KaWRlbnRpZmllciB0aGF0IE1BWSBi ZSB1c2VkIGluIHBvbGljeSB0byBwZXJmb3JtIGEgcG9saWN5DQphY3Rpb24uIEVhY2ggdGFnIGNh cnJpZWQgYnkgdGhlIGFkbWluaXN0cmF0aXZlIHRhZyBUTFYgU0hPVUxEIGJlIHVzZWQgdG8NCmlu ZGljYXRlIGEgY2hhcmFjdGVyaXN0aWMgb2YgYSBub2RlIHRoYXQgaXMgaW5kZXBlbmRlbnQgb2Yg dGhlDQpjaGFyYWN0ZXJpc3RpY3MgaW5kaWNhdGVkIGJ5IG90aGVyIGFkbWluaXN0cmF0aXZlIHRh Z3MuDQpUaGUgYWRtaW5pc3RyYXRpdmUgdGFnIGxpc3Qgd2l0aGluIHRoZSBUTFYgTVVTVCBiZSBj b25zaWRlcmVkIA0KYW4gdW5vcmRlcmVkIGxpc3QuIFdoaWxzdCBwb2xpY2llcyBtYXkgYmUgaW1w bGVtZW50ZWQgYmFzZWQgb24gdGhlIA0KcHJlc2VuY2Ugb2YgbXVsdGlwbGUgdGFncyAoZS5nLiwg aWYgdGFnIEEgQU5EIHRhZyBCIGFyZSBwcmVzZW50KSwgDQp0aGV5IE1VU1QgTk9UIGJlIHJlbGlh bnQgdXBvbiB0aGUgb3JkZXIgb2YgdGhlIHRhZ3MgKGkuZS4sDQphbGwgcG9saWNpZXMgc2hvdWxk IGJlIGNvbnNpZGVyZWQgY29tbXV0YXRpdmUgb3BlcmF0aW9ucywgc3VjaCB0aGF0DQp0YWcgQSBw cmVjZWRpbmcgb3IgZm9sbG93aW5nIHRhZyBCIGRvZXMgbm90IGNoYW5nZSB0aGVpciBvdXRjb21l KS4iDQoNCg0KDQo+IA0KPiBQYXJhZ3JhcGggNyBvZiBzZWN0aW9uIDMuMiBzZWVtcyB0byBiZSB0 cnlpbmcgdG8gc2F5IHRoYXQgdGhlDQo+IGFkbWluaXN0cmF0aXZlIHRhZ3MgbXVzdCBpbmRpY2F0 ZSBpbmhlcmVudCBvciBhZG1pbmlzdHJhdGl2ZWx5IGNvbmZpZ3VyZWQNCj4gcHJvcGVydGllcyBv ZiBhIG5vZGUgYW5kIG11c3Qgbm90IGJlIHVzZWQgdG8gY29udmV5IGF0dHJpYnV0ZXMgb2YgdGhl DQo+IHJvdXRpbmcgdG9wb2xvZ3kuICAoVGhlIHdvcmQgInRpZSIgc2VlbXMgaW5zdWZmaWNpZW50 bHkgY2xlYXIuKQ0KDQo8U2hyYWRkaGE+Q2hhbmdlZCB0byB0ZXh0IGJlbG93Lg0KDQoiQmVpbmcg cGFydCBvZiB0aGUgUkkgTFNBLCB0aGUgcGVyLW5vZGUgYWRtaW5pc3RyYXRpdmUgdGFnDQpUTFYg bXVzdCBiZSByZWFzb25hYmx5IHNtYWxsIGFuZCBzdGFibGUuIEluIHBhcnRpY3VsYXIsDQpidXQg bm90IGxpbWl0ZWQgdG8sIGltcGxlbWVudGF0aW9ucyBzdXBwb3J0aW5nIHBlci1ub2RlDQphZG1p bmlzdHJhdGl2ZSB0YWdzIE1VU1QgTk9UIGJlIHVzZWQgdG8gY29udmV5IGF0dHJpYnV0ZXMgb2Yg dGhlDQpyb3V0aW5nIHRvcG9sb2d5IG9yIGFzc29jaWF0ZSB0YWdzIHdpdGggDQpjaGFuZ2VzIGlu IHRoZSBuZXR3b3JrIHRvcG9sb2d5IChib3RoIHdpdGhpbiBhbmQgb3V0c2lkZQ0KdGhlIE9TUEYg ZG9tYWluKSBvciByZWFjaGFiaWxpdHkgb2Ygcm91dGVzLiINCg0KPiANCj4gTWFueSAoYnV0IG5v dCBhbGwpIG9mIHRoZSBhY3Jvbnltcy9hYmJyZXZpYXRpb25zIHNob3VsZCBiZSBleHBhbmRlZCBh dA0KPiBmaXJzdCB1c2UgLS0gdGhlIG9uZXMgbWFya2VkIHdpdGggYSAnKicgYXQNCj4gaHR0cHM6 Ly93d3cucmZjLWVkaXRvci5vcmcvbWF0ZXJpYWxzL2FiYnJldi5leHBhbnNpb24udHh0IGFyZSBh c3N1bWVkIHRvDQo+IGJlIGNvbW1vbiBrbm93bGVkZ2UgYW5kIGRvIG5vdCBuZWVkIGV4cGFuc2lv bi4gIE90aGVyIHRoaW5ncywgbGlrZSB0cmFmZmljDQo+IGVuZ2luZWVyaW5nLCByb3V0ZXIgaW5m b3JtYXRpb24sIGxpbmsgc3RhdGVtZW50IGFkdmVydGlzZW1lbnQsIGF1dG9ub21vdXMNCj4gc3lz dGVtLCBldGMuLCBzaG91bGQgYmUgd3JpdHRlbiBvdXQgaW4gZnVsbCBhdCB0aGVpciBmaXJzdCB1 c2UsIHdpdGggdGhlDQo+IGFiYnJldmlhdGVkIHZlcnNpb24gaW4gcGFyZW50aGVzZXMgYWZ0ZXJ3 YXJkcy4NCj4gDQo8U2hyYWRkaGE+IERvbmUuDQoNCj4gVGhlIGZpcnN0IHBhcmFncmFwaCBvZiBz ZWN0aW9uIDEgY29udGFpbnMgYSBsaXN0IG9mIHBvdGVudGlhbA0KPiBhcHBsaWNhdGlvbnM7IHBs ZWFzZSB1c2Ugc29tZSBYTUwgbWFya3VwIHRvIHByZXNlcnZlIHRoZSBsaXN0IHN0cnVjdHVyZSBp bg0KPiB0aGUgcmVuZGVyZWQgZG9jdW1lbnQuDQo+IA0KPFNocmFkZGhhPiBEb25lDQo+IFBsYXNl IGdpdmUgYW4gaW5mb3JtYXRpdmUgcmVmZXJlbmNlIGZvciBMb29wIEZyZWUgQWx0ZXJuYXRlIGJh Y2t1cA0KPiBzZWxlY3Rpb24gYXQgaXRzIGZpcnN0IGFwcGVhcmFuY2UuDQoNCjxTaHJhZGRoYT4g RG9uZQ0KPiANCj4gVGhlIGRpdmlkZXIgYmV0d2VlbiB0aGUgdHlwZSBhbmQgbGVuZ3RoIGZpZWxk cyBpbiBGaWd1cmUgMSBpcyBwbGFjZWQgb25lDQo+IGJpdCB0byB0aGUgbGVmdCBvZiB0aGUgY29y cmVjdCBkaXZpc2lvbiBmb3IgdHdvIDE2LWJpdCBmaWVsZHMuICAoSW4gbWFueQ0KPiBjYXNlcyB0 aGUgcG9zaXRpb24gaW5kaWNhdG9ycyBhYm92ZSB0aGUgZGlhZ3JhbSBhcmUgb2Zmc2V0IGJ5IG9u ZSBzcGFjZSBzbw0KPiB0aGV5IGxhbmQgb3ZlciB0aGUgJy0ncyBpbnN0ZWFkIG9mIHRoZSAnKydz LCBidXQgdGhlcmUgaXMgc29tZSBhcmd1bWVudA0KPiBmb3IgcHV0dGluZyB0aGVtIGluIHRoZWly IGN1cnJlbnQgbG9jYXRpb24sIGFzIHdlbGwuKQ0KPiANCj4gSW4gdGhlIHNldmVudGggcGFyYWdy YXBoIG9mIHNlY3Rpb24gMy4yLCBJIHRoaW5rIGl0IHdvdWxkIGJlIGZpbmUgdG8ganVzdA0KPiBy ZW1vdmUgdGhlICJidXQgbm90IGxpbWl0ZWQgdG8iIGNsYXVzZSwgd2hpY2ggaXMgbm90IHF1aXRl IGNvcnJlY3QgZ3JhbW1hcg0KPiBhbmQgaXMgbm90IHJlYWxseSBuZWVkZWQuDQoNCjxTaHJhZGRo YT4gZG9uZQ0KPiANCj4gVGhlIGxhc3QgcGFyYWdyYXBoIG9mIHNlY3Rpb24gMy4yIGNvdWxkIHBy b2JhYmx5IGJlIHdyaXR0ZW4gbW9yZSBjbGVhcmx5Lg0KPiBJbiBwYXJ0aWN1bGFyLCAiaW4gYW55 IGluc3RhbmNlIG9mIHRoZSBSSS1MU0EiIGlzIG5vdCBlbnRpcmVseSBjbGVhciB0byBtZQ0KPiAo YnV0IHRoZW4gYWdhaW4sIEkgZG9uJ3QgcmVhbGx5IHVuZGVyc3RhbmQgaG93IExTQXMgbm9ybWFs bHkgd29yaykuICBJcyBpdA0KPiBlbm91Z2ggdG8ganVzdCBzYXkgdGhhdCBpbXBsZW1lbnRhdGlv bnMgTVVTVCBkZXRlY3Qgd2hlbiB0aGUNCj4gYWRtaW5pc3RyYXRpdmUgdGFncyBhc3NvY2lhdGVk IHdpdGggYSBnaXZlbiBub2RlIGNoYW5nZSwgYW5kIHVwZGF0ZSB0aGVpcg0KPiBzdGF0ZSBhY2Nv cmRpbmdseT8NCj4gDQo8U2hyYWRkaGE+IGhvcGUgdGhpcyBpc3N1ZSBpcyByZXNvbHZlZCBpbiBv dGhlciBtYWlsIHRocmVhZC4NCg0KPiBJbiBzZWN0aW9uIDQuNSwgSSBkbyBub3Qgc2VlIHRoYXQg dGhlIGNvbnN0cmFpbnQgIlRyYWZmaWMgZnJvbSBBIG5vZGVzIHRvDQo+IEkgbm9kZXMgbXVzdCBu b3QgZ28gdGhyb3VnaCBSIGFuZCBUIG5vZGVzIiBjYW4gYmUgc2F0aXNmaWVkIGZvciB0aGUNCj4g bGVmdG1vc3QgcGFpciBvZiBBIG5vZGVzLg0KDQo8U2hyYWRkaGE+IExldHMgY2xvc2UgdGhpcyBw b2ludCBpbiB0aGUgbWFpbCB0aHJlYWQgd2l0aCBCcnVuby4NCj4gDQo+IEkgYW0gYWxzbyBhdHRh Y2hpbmcgYSBkaWZmIHRvIHRoZSB4bWwgc291cmNlcyB3aXRoIHNvbWUgZ3JhbW1hciBmaXhlcyBu b3QNCj4gd29ydGggZW51bWVyYXRpbmcgZXhwbGljaXRseS4NCjxTaHJhZGRoYT4gVGhhbmsgeW91 LiBIYXZlIGFwcGxpZWQgZGlmZiBpbiBsYXRlc3QgLTA4IHZlcnNpb24NCg0KLS0tLS1PcmlnaW5h bCBNZXNzYWdlLS0tLS0NCkZyb206IEJlbmphbWluIEthZHVrIFttYWlsdG86a2FkdWtATUlULkVE VV0gDQpTZW50OiBXZWRuZXNkYXksIE9jdG9iZXIgMTQsIDIwMTUgMzo1NyBBTQ0KVG86IFNocmFk ZGhhIEhlZ2RlIDxzaHJhZGRoYUBqdW5pcGVyLm5ldD4NCkNjOiBBY2VlIExpbmRlbSAoYWNlZSkg PGFjZWVAY2lzY28uY29tPjsgaWVzZ0BpZXRmLm9yZzsgc2VjZGlyQGlldGYub3JnOyBkcmFmdC1p ZXRmLW9zcGYtbm9kZS1hZG1pbi10YWcuYWxsQGlldGYub3JnDQpTdWJqZWN0OiBSRTogc2VjZGly IHJldmlldyBvZiBkcmFmdC1pZXRmLW9zcGYtbm9kZS1hZG1pbi10YWctMDUNCg0KVGhhbmtzLCBT aHJhZGRoYSBhbmQgQWNlZSwgZm9yIGhlbHBpbmcgbWUgZmluZCBzb21lIG9mIHRoZSBjb250ZXh0 IEkgd2FzIG1pc3NpbmcuDQoNCk9uIFN1biwgMTEgT2N0IDIwMTUsIFNocmFkZGhhIEhlZ2RlIHdy b3RlOg0KDQo+DQo+IFRoYW5rcyBCZW4gZm9yIGRldGFpbGVkIHJldmlldyBjb21tZW50cy5UaGFu a3MgQWNlZSBmb3IgY2hpbWluZy1pbi4NCj4gRmV3IG1vcmUgZXhwbGFuYXRpb25zIGluLWxpbmUu DQo+DQo+IC0tLS0tT3JpZ2luYWwgTWVzc2FnZS0tLS0tDQo+IEZyb206IEFjZWUgTGluZGVtIChh Y2VlKSBbbWFpbHRvOmFjZWVAY2lzY28uY29tXQ0KPiBTZW50OiBTdW5kYXksIE9jdG9iZXIgMTEs IDIwMTUgMTowNCBBTQ0KPiBUbzogQmVuamFtaW4gS2FkdWsgPGthZHVrQE1JVC5FRFU+OyBpZXNn QGlldGYub3JnOyBzZWNkaXJAaWV0Zi5vcmc7IA0KPiBkcmFmdC1pZXRmLW9zcGYtbm9kZS1hZG1p bi10YWcuYWxsQGlldGYub3JnDQo+IFN1YmplY3Q6IFJlOiBzZWNkaXIgcmV2aWV3IG9mIGRyYWZ0 LWlldGYtb3NwZi1ub2RlLWFkbWluLXRhZy0wNQ0KPg0KPiBIaSBCZW4sDQo+DQo+IEFzIHRoZSBk b2N1bWVudCBzaGVwaGVyZCBhbmQgYSBsb25nLXRpbWUgT1NQRiBjb250cmlidXRvciwgSeKAmW0g Z29pbmcgDQo+IHRvIHRyeSBhbmQgc29ydCBvdXQgc29tZSBvZiB5b3VyIGNvbW1lbnRzLiBOb3Rl IHRoYXQgcm91dGUgdGFnZ2luZyBoYXMgDQo+IGJlZW4gaW4gdXNlIGZvciBkZWNhZGVzIGFuZCB0 aGlzIGRvY3VtZW50IGlzIG1lcmVseSBleHRlbmRpbmcgdGhlIA0KPiBhZG1pbmlzdHJhdGl2ZSBw b2xpY2llcyBhZHZlcnRpc2VtZW50IHRvIHRoZSBub2RlIGxldmVsLg0KDQpHb29kIHRvIGtub3c7 IEkgZGlkbid0IGdldCB0byBsb29rIGF0IG1hbnkgdXBkYXRlcyBwYXN0IHRoZSBjb3JlIE9TUEZ2 MiBzcGVjLg0KDQo+IE9uIDEwLzkvMTUsIDQ6NTIgUE0sICJCZW5qYW1pbiBLYWR1ayIgPGthZHVr QE1JVC5FRFU+IHdyb3RlOg0KPg0KPiA+SSBoYXZlIHJldmlld2VkIHRoaXMgZG9jdW1lbnQgYXMg cGFydCBvZiB0aGUgc2VjdXJpdHkgZGlyZWN0b3JhdGUncyANCj4gPm9uZ29pbmcgZWZmb3J0IHRv IHJldmlldyBhbGwgSUVURiBkb2N1bWVudHMgYmVpbmcgcHJvY2Vzc2VkIGJ5IHRoZSANCj4gPklF U0cuICBUaGVzZSBjb21tZW50cyB3ZXJlIHdyaXR0ZW4gcHJpbWFyaWx5IGZvciB0aGUgYmVuZWZp dCBvZiB0aGUgDQo+ID5zZWN1cml0eSBhcmVhIGRpcmVjdG9ycy4gIERvY3VtZW50IGVkaXRvcnMg YW5kIFdHIGNoYWlycyBzaG91bGQgdHJlYXQgDQo+ID50aGVzZSBjb21tZW50cyBqdXN0IGxpa2Ug YW55IG90aGVyIGxhc3QgY2FsbCBjb21tZW50cy4NCj4gPg0KPiA+SSB3aWxsIHByZWZhY2UgdGhl c2UgY29tbWVudHMgd2l0aCBhIG5vdGUgdGhhdCBteSByb3V0aW5nIGJhY2tncm91bmQgDQo+ID5p cyBxdWl0ZSB3ZWFrLCBhbmQgSSBuZWVkZWQgdG8gcmVhZCBSRkMgMjMyOCBhbmQgUkZDIDQ5NzAg dG8gaGF2ZSANCj4gPmVub3VnaCBjb250ZXh0IHRvIGJlIGFibGUgdG8gc2F5IG11Y2ggdXNlZnVs IGFib3V0IHdoYXQncyBnb2luZyBvbiANCj4gPmhlcmU7IEkgbWF5IHN0aWxsIGJlIHN1ZmZlcmlu ZyBmcm9tIHNvbWUgbWlzY29uY2VwdGlvbnMuDQo+ID4NCj4gPk9uIHRoZSB3aG9sZSwgdGhpcyBk b2N1bWVudCBsZWF2ZXMgbWUgZmVlbGluZyB1bnNhdGlzZmllZDsgaXQgc3BlbmRzIA0KPiA+bWF5 YmUgdGhyZWUgcGFnZXMgdGFsa2luZyBhYm91dCB0aGUgYWN0dWFsIG5ldyBwcm90b2NvbCBleHRl bnNpb24gYW5kIA0KPiA+dGhlbiBnaXZlcyBmb3VyIHBhZ2VzIG9mIGV4YW1wbGUgdXNhZ2UsIGFs bCB0aGUgd2hpbGUgY2xhaW1pbmcgdGhhdCANCj4gPnRoZSBhY3R1YWwgdGFnIHZhbHVlcyBhcmUg b25seSBtZWFuaW5nZnVsIHdpdGhpbiBhIHNpbmdsZSANCj4gPmFkbWluaXN0cmF0aXZlIGRvbWFp bi9uZXR3b3JrLCBhcmUgZm9yIGdlbmVyaWMgdXNlLCBhbmQgZG8gbm90IA0KPiA+cmVxdWlyZSBh biBJQU5BIHJlZ2lzdHJ5LiAgVGhhdCBpcywgaXQgaXMgdHJ5aW5nIHRvIHdhbGsgYSBtaWRkbGUg DQo+ID5saW5lIGJldHdlZW4gInRoaXMgZG9jdW1lbnQgYWxsb2NhdGVzIGEgdmFsdWUgaW4gdGhl IE9TUEYgVExWcyANCj4gPnJlZ2lzdHJ5IGZvciBzaXRlLWxvY2FsIHVzZSwgdXNlIGl0IGFzIHlv dSB3aWxsIiBhbmQgInRoaXMgZG9jdW1lbnQgDQo+ID5zcGVjaWZpZXMgYSBjb21wbGV0ZSBwcm90 b2NvbCBleHRlbnNpb24gZm9yIHRhZ2dpbmcgT1NQRiBub2RlcyBmb3IgDQo+ID50cmFmZmljIGVu Z2luZWVyaW5nLCBMRkEsIGFuZCBvdGhlciBwdXJwb3NlcyIuICBUaGF0IGlzIGEgaGFyZCBtaWRk bGUgbGluZSB0byBmb2xsb3csIGFuZCBJIGFtIG5vdCBzdXJlIHRoYXQgdGhpcyBkb2N1bWVudCBk b2VzIHNvIHN1Y2Nlc3NmdWxseS4NCj4gPkkgd2lsbCBub3QgdHJ5IHRvIHJlb3BlbiB0aGUgcXVl c3Rpb24gb2Ygd2hldGhlciBpdCB3b3VsZCBiZSBiZXR0ZXIgDQo+ID50byB0YWtlIG9uZSBvZiB0 aGUgbm9uLW1pZGRsZSBwYXRocywgYW5kIGNvbnRpbnVlIG9uIHRoZSBhc3N1bXB0aW9uIA0KPiA+ dGhhdCB0aGlzIGRvY3VtZW50IHdpbGwgdGFrZSB0aGUgbWlkZGxlIHBhdGguICBJIHRoaW5rIHRo ZXJlIGFyZSBhIA0KPiA+ZmV3IHRoaW5ncyB0aGF0IGFyZSBtaXNzaW5nIGJlZm9yZSB0aGlzIGRv Y3VtZW50IHNob3VsZCBiZSBwdWJsaXNoZWQsIA0KPiA+YW5kIHRoYXQgaXQgbWlnaHQgYmUgd29y dGggY29uc2lkZXJpbmcgYSBtb3JlIGRyYXN0aWMgcmVzdHJ1Y3R1cmluZyBhcyB3ZWxsLg0KPiA+ DQo+ID5JdCB3b3VsZCBwcm9iYWJseSBiZSBnb29kIHRvIGluY2x1ZGUgc29tZSB0ZXh0IHdpdGgg dGhlIHJlYXNvbmluZyANCj4gPmJlaGluZCB0aGUgY2hvaWNlIG9mIHRoZSAibWlkZGxlIGxpbmUi IC0tIHRoZSBjdXJyZW50IHRleHQgYXR0ZW1wdGluZyANCj4gPnRvIGVuZm9yY2UgaXQsICJuZXcg T1NQRiBleHRlbnNpb25zIE1VU1QgTk9UIHJlcXVpcmUgdXNlIG9mIHBlci1ub2RlIA0KPiA+YWRt aW5pc3RyYXRpdmUgdGFncyBvciBkZWZpbmUgd2VsbC1rbm93biB0YWcgdmFsdWVzIiwgc2VlbXMg DQo+ID51bmVuZm9yY2FibGUsIGFzIGEgZnV0dXJlIFJGQyB1cGRhdGluZyB0aGlzIG9uZSBjb3Vs ZCBqdXN0IHJlbW92ZSB0aGF0IHJlc3RyaWN0aW9uLg0KPg0KPiBUaGUgaW50ZW50IGhlcmUgaXMg dGhhdCB0aGlzIFRMViBpcyB0byBiZSBzb2xlbHkgZm9yIGxvY2FsbHkgZGVmaW5lZCANCj4gcG9s aWNpZXMuIElmIHRoZXJlIHdlcmUgdG8gYmUgYSBUTFYgZm9yIHdlbGwta25vd24gdGFncyBhbmQg cG9saWNpZXMsIA0KPiB0aGlzIGNvdWxkIGJlIGFjY29tcGxpc2hlZCB3aXRoIGEgc2VwYXJhdGUg T1NQRiBSSSBUTFYuIEkgYWdyZWUgdGhhdCANCj4gdGhlIG5vcm1hdGl2ZSB0ZXh0IHNob3VsZCBi ZSBzb2Z0ZW5lZCBmcm9tIOKAnE1VU1QgTk9U4oCdIHRvIOKAnGFyZSBub3QgDQo+IGV4cGVjdGVk IHRv4oCdLg0KPg0KPiA8U2hyYWRkaGE+IFRoZXJlIHdhcyBhIGxvbmcgZGlzY3Vzc2lvbiBvbiB0 aGUgbWFpbGluZyBsaXN0IG9uIHdoZXRoZXIgDQo+IHdlIHNob3VsZCBhbGxvdyB3ZWxsIGRlZmlu ZWQgdmFsdWVzIGZvciB0aGUgYWRtaW4gdGFncyBtYWpvcml0eSANCj4gY29uc2Vuc3VzIHdhcyB0 aGF0IHdlIHNob3VsZCBub3QgYWxsb3cgYW55IHN0YW5kYXJkIHZhbHVlcyBmb3Igbm9kZSANCj4g YWRtaW4gdGFncyBhbmQgaW4gZnV0dXJlIGlmIHN1Y2ggYSByZXF1aXJlbWVudCBhcmlzZXMgaXQn bGwgZ28gYXMgbmV3IA0KPiBmZWF0dXJlIGluIFJJIFRMViBhcyBBY2VlIGFscmVhZHkgbWVudGlv bmVkLiBJIGFtIHRyeWluZyB0byB1bmRlcnN0YW5kIA0KPiB3aHkgdGhlIHRleHQgbmVlZCB0byBi ZSBzb2Z0ZW5lZCB3aGVuIGFueSBmdXR1cmUgc3RhbmRhcmRpemF0aW9uIHdvdWxkIA0KPiBuZWVk IGFsdG9nZXRoZXIgYSBuZXcgZG9jdW1lbnQgYW5kIHdpbGwgbm90IHJlcXVpcmUgYW55IGNoYW5n ZXMgdG8gdGhpcyBkb2N1bWVudC4NCg0KSSBzdWdnZXN0ZWQgdGhhdCB0aGUgdGV4dCBiZSBzb2Z0 ZW5lZCBiZWNhdXNlIHRoZSBjdXJyZW50IHN0YXRlbWVudCBkb2VzIG5vdCBoYXZlIGFueSBwcmFj dGljYWwgZWZmZWN0LiAgSXQncyB0cnlpbmcgdG8gcGxhY2UgcmVzdHJpY3Rpb25zIG9uIHdoYXQg e3RoZSBzZXQgb2YgZnV0dXJlIFJGQ3MgdGhhdCB1cGRhdGUgdGhpcyBkb2N1bWVudH0gY2FuIGRv LCBidXQgYW55IGRvY3VtZW50IGluIHRoYXQgc2V0IGNvdWxkIHJlbW92ZSBzdWNoIGEgcmVzdHJp Y3Rpb24gYW5kIG92ZXJyaWRlIGl0IGF0IHRoZSBzYW1lIHRpbWUuDQoNCkkgdGhpbmsgaXQgd291 bGQgYmUgZ29vZCB0byBoYXZlIGEgbm90ZSBpbiBzZWN0aW9uIDIgdG8gdGhlIGVmZmVjdCB0aGF0 ICJ0aGVzZSBhZG1pbmlzdHJhdGl2ZSB0YWdzIGFyZSBzb2xlbHkgZm9yIHVzZSB3aXRoaW4gYW4g YWRtaW5pc3RyYXRpdmUgZG9tYWluIGFuZCBhcmUgdGhlaXIgaW50ZXJwcmV0YXRpb24gaXMgYSBt YXR0ZXIgb2YgbG9jYWwgcG9saWN5LiAgSXQgaXMgZXhwZWN0ZWQgdGhhdCB2YWx1ZXMgd2lsbCBu b3QgYmUgcG9ydGFibGUgYWNyb3NzIGFkbWluaXN0cmF0aXZlIGRvbWFpbnMiLg0KSSBrbm93IHRo YXQgdGhpcyB0b3BpYyBpcyBjb3ZlcmVkIGxhdGVyIGluIHRoZSBkb2N1bWVudCwgYnV0IGhhdmlu ZyBpdCBlYXJseSB3b3VsZCBoZWxwIHNldCB0aGUgc3RhZ2UgZm9yIHRoZSByZXN0IG9mIHRoZSBk b2N1bWVudC4NCg0KPiA+SXQgbG9va3MgbGlrZSB0aGVyZSdzIG5vdyBhbiAtMDYsIGJ1dCB0aGUg Y2hhbmdlcyBmcm9tIHRoZSAtMDUgYXJlIA0KPiA+bm90IHNpZ25pZmljYW50LiAgVGhlIHNlY3Vy aXR5IGNvbnNpZGVyYXRpb25zIGluIHRoZSAtMDUgY29ycmVjdGx5IA0KPiA+bm90ZSB3aGF0IGFy ZSBlc3NlbnRpYWxseSBwcml2YWN5IGNvbnNpZGVyYXRpb25zIHJlZ2FyZGluZyB0aGUgDQo+ID5j b250ZW50cyBvZiB0aGUgYWRtaW4gdGFncy4gIEhvd2V2ZXIsIGl0IHNlZW1zIGxpa2UgdGhlcmUg YXJlIGFsc28gDQo+ID5wb3RlbnRpYWwgc2VjdXJpdHkgY29uc2lkZXJhdGlvbnMgb24gdGhlIGFj dHVhbCBvcGVyYXRpb24gb2YgdGhlIA0KPiA+bmV0d29yayB0aGF0IGFyZSBub3QgZGlzY3Vzc2Vk IGhlcmUsIG5vciBpbiBSRkMgMjMyOCAoT1NQRnYyKSBvciBSRkMgDQo+ID41MzQwIChPU1BGdjMp LiAgUkZDIDUzNDAncyBzZWN1cml0eSBjb25zaWRlcmF0aW9ucyBleHBsaWNpdGx5IA0KPiA+ZGlz Y2xhaW1zIHByb3RlY3Rpb25zIGFnYWluc3QgY29tcHJvbWlzZWQsIG1hbGZ1bmN0aW9uaW5nLCBv ciANCj4gPm1pc2NvbmZpZ3VyZWQgcm91dGVycywgZGVmZXJyaW5nIHRvIFJGQyA0NTkzLCAiR2Vu ZXJpYyBUaHJlYXRzIHRvIA0KPiA+Um91dGluZyBQcm90b2NvbHMiLiAgSSBiZWxpZXZlIHRoYXQg dGhlIHNlY3VyaXR5IGNvbnNpZGVyYXRpb25zIG9mIA0KPiA+dGhpcyBkb2N1bWVudCBzaG91bGQg YWRkcmVzcywgZWl0aGVyIGRpcmVjdGx5IG9yIGluZGlyZWN0bHksIA0KPiA+cHJvdGVjdGlvbnMg YWdhaW5zdCBjb21wcm9taXNlZCwgbWFsZnVuY3Rpb25pbmcsIG9yIG1pc2NvbmZpZ3VyZWQgDQo+ ID5yb3V0ZXJzLCBhbmQgYWRkaXRpb25hbGx5IHByb3RlY3Rpb24gYWdhaW5zdCBtYWxpY2lvdXMg YWN0b3JzIHdpdGggDQo+ID5hY2Nlc3MgdG8gdGhlIGxheWVyLTMgbmV0d29yayAoYW5kIG1heWJl IGxvd2VyIGxheWVycyBhcyB3ZWxsKS4NCj4gPg0KPiA+VGhhdCBwcm9iYWJseSBtZWFucyBtZW50 aW9uaW5nIFJGQyA0NTkzIGRpcmVjdGx5LCBvciBtYXliZSBqdXN0IA0KPiA+cG9pbnRpbmcgb3V0 IHRoYXQgUkZDIDUzNDAgZG9lcyBzby4gIFRoZXJlIGFyZSBzdGlsbCBhZGRpdGlvbmFsIA0KPiA+ Y29uc2lkZXJhdGlvbnMgaW50cm9kdWNlZCBieSB0aGlzIGRvY3VtZW50LCB0aG91Z2g7IHVuZm9y dHVuYXRlbHksIA0KPiA+YmVjYXVzZSB0aGUgYnVsayBvZiB0aGUgaW50ZXJwcmV0YXRpb24gb2Yg dGhlIGFkbWluIHRhZ3MgaXMgbGVmdCB0byANCj4gPnRoZSBzaXRlIGFkbWluaXN0cmF0b3IsIGl0 IGlzIGhhcmQgdG8gZ2l2ZSBhIGNvbXByZWhlbnNpdmUgc2VjdXJpdHkgDQo+ID5hbmFseXNpcywg YnV0IHRoZSBleGFtcGxlcyBhbmQgdGhlIHByb3RvY29sIGRlc2NyaXB0aW9uIGl0c2VsZiBkbyBn aXZlIHNvbWUgYXJlYXMgZm9yIGNvbnNpZGVyYXRpb24uDQo+DQo+IFRoZSBkb2N1bWVudCBjb3Vs ZCByZWZlcmVuY2UgUkZDIDQ1OTMvUkZDIDY4NjMgYW5kIHN0YXRlIHRoYXQgDQo+IGF1dGhlbnRp Y2F0aW9uIGFzIHNwZWNpZmllZCBpbiBSRkMgNzQ3NCBvciBSRkMgNzE2NiBTSE9VTEQgYmUgdXNl ZCBpbiANCj4gZGVwbG95bWVudHMgd2hlcmUgYXR0YWNrZXJzIGhhdmUgYWNjZXNzIHRvIHRoZSBw aHlzaWNhbCBuZXR3b3JrcyANCj4gaW5jbHVkZWQgaW4gdGhlIE9TUEYgZG9tYWluIGFyZSB2dWxu ZXJhYmxlLg0KPiA8U2hyYWRkaGE+IG9rLiBVcGRhdGluZyB0aGUgU2VjdXJpdHkgY29uc2lkZXJh dGlvbiBzZWN0aW9uDQoNClRoYW5rcy4NCg0KPg0KPiA+DQo+ID5UaGUgUkkgTFNBcyBjYXJyeWlu ZyBhZG1pbmlzdHJhdGl2ZSB0YWdzIGNhbiBiZSBhdCBsaW5rLSwgYXJlYS0sIG9yIA0KPiA+QVMt bGV2ZWwgc2NvcGU7IGFuIGFkbWluaXN0cmF0b3IgYXNzaWduaW5nIHRhZyB2YWx1ZXMgYW5kIGFz c29jaWF0ZWQgDQo+ID5wb2xpY2llcyBzaG91bGQgY29uc2lkZXIgd2hhdCB3b3VsZCBoYXBwZW4g aWYgYSBnaXZlbiB0YWcgd2FzIA0KPiA+YWR2ZXJ0aXNlZCBhdCBhIGRpZmZlcmVudCBzY29wZSB0 aGFuIGludGVuZGVkLiAgQ29tcGxpYW50IA0KPiA+aW1wbGVtZW50YXRpb25zIE1VU1QgTk9UIGdl bmVyYXRlIHRoZSBzYW1lIHRhZyBhdCBkaWZmZXJlbnQgc2NvcGVzLCANCj4gPmJ1dCBhIHJlY2Vp dmVyIHdvdWxkIG5lZWQgdG8gdGFrZSBzb21lIGFjdGlvbiBpZiBpdCBoYXBwZW5lZCwgd2hldGhl ciANCj4gPmR1ZSB0byBuZXR3b3JrIGdsaXRjaCBvciBtYWxpY2lvdXMgYWN0aW9uIC0tIHdoYXQg c2hvdWxkIHRoZXkgZG8/DQo+DQo+IEnigJltIG5vdCBhbiBhdXRob3IsIGJ1dCB0aGlzIGlzIHdo YXQgSeKAmWQgcmVjb21tZW5kOg0KPg0KPiAgICBUaGUgY29uZmxpY3RpbmcgdGFnIFNIT1VMRCBu b3QgYmUgdXNlZCBhbmQgdGhpcyBzaXR1YXRpb24gU0hPVUxEIGJlIA0KPiBsb2dnZWQgYXMgYW4g ZXJyb3IgaW5jbHVkaW5nIHRoZSB0YWcgd2l0aCBjb25mbGljdGluZyBzY29wZXMgYW5kIHRoZSAN Cj4gb3JpZ2luYXRvcihzKS4NCj4gPFNocmFkZGhhPiBVcGRhdGVkIHRoZSBkb2N1bWVudCB3aXRo IGFib3ZlIHN0YXRlbWVudC4NCj4NCj4gVGhlcmUgaXMgYSBjYXNlIHRoYXQgbXVzdCBiZSBhbGxv d2VkIC0gdGhlIHNhbWUgdGFnIGNvdWxkIGJlIHJlY2VpdmVkIA0KPiBieSBhbiBBQlIgYXQgYm90 aCB0aGUgQVMgc2NvcGUgYW5kIHRoZSBhcmVhIHNjb3BlIGluIGEgc3R1YiBvciBOU1NBIGFyZWEu DQo+IDxTaHJhZGRoYT4gQ291bGQgeW91IHBscyBlbGFib3JhdGUgdGhlIGNhc2UuIEkgZG9uJ3Qg cXVpdGUgdW5kZXJzdGFuZCANCj4gd2h5IHRoZSBBQlIgaW4gYSBzdHViL05TU0EgYXJlYSB3b3Vs ZCBnZW5lcmF0ZSBvciByZWNlaXZlIFJJIExTQXMgd2l0aCANCj4gZGlmZmVyZW50IHNjb3Blcy5J IHRoaW5rIGl0J3MgcGVyZmVjdGx5IHZhbGlkIHRvIGZsb29kIHRoZSBBUyBzY29wZWQgDQo+IFJJ IExTQXMgaW50byB0aGUgc3R1YiAvIE5TU0EgYXJlYS4NCg0KQWNlZSwgSSB0aGluayB0aGlzIGlz IGEgcXVlc3Rpb24gZm9yIHlvdS4NCg0KPiA+QW5vdGhlciBwb3RlbnRpYWwgaXNzdWUgbGllcyBp biB0aGUgInN0aWNraW5lc3MiIG9mIHRoZSBhZG1pbiB0YWdzIC0tIA0KPiA+dGhlIHRleHQgInRo ZSBub2RlIGFkbWluaXN0cmF0aXZlIHRhZ3MgYXNzb2NpYXRlZCB3aXRoIGEgbm9kZSBmb3IgdGhl IA0KPiA+cHVycG9zZSBvZiBhbnkgY29tcHV0YXRpb24gb3IgcHJvY2Vzc2luZyBTSE9VTEQgYmUg YSBzdXBlcnNldCBvZiBub2RlIA0KPiA+YWRtaW5pc3RyYXRpdmUgdGFncyBmcm9tIGFsbCB0aGUg VExWcyBpbiBhbGwgaW5zdGFuY2VzIG9mIHRoZSBSSSBMU0EgDQo+ID5vcmlnaW5hdGVkIGJ5IHRo YXQgbm9kZSIgc2VlbXMgdG8gbWVhbiB0aGF0IG9uY2UgYSB0YWcgaXMgc2V0LCBpdCANCj4gPmNh bm5vdA0KPiA+KGVhc2lseSkgYmUgdW5zZXQuICBXb3VsZCBmb3JjZS1leHBpcmluZyBhbiBMU0Eg YmUgZW5vdWdoIHRvIHJlc2V0IA0KPiA+dGhlIHRhZywgb3Igc29tZXRoaW5nIGVsc2U/DQo+DQo+ IFllcyAtIHRoaXMgaXMgc3RhbmRhcmQgZm9yIGFueSBPU1BGIExTQS4gSG93ZXZlciwgc2luY2Ug dGhlIE9TUEYgUkkgDQo+IExTQSBtYXkgaW5jbHVkZSBvdGhlciBUTFZzIG9yIGV2ZW4gb3RoZXIg dGFncywgYSB0YWcgY291bGQgYWxzbyBiZSANCj4gd2l0aGRyYXduIGJ5IHJlb3JpZ2luYXRpbmcg dGhlIFJJIExTQSB3aXRob3V0IHRoZSBUTFYgb3Igd2l0aCBhIFRMViANCj4gdGhhdCBkb2VzbuKA mXQgaW5jbHVkZSB0aGUgd2l0aGRyYXduIHRhZy4NCg0KSSBtYXkgc3RpbGwgYmUgY29uZnVzZWQs IGJ1dCBJIGRpZCBub3QgaW50ZXJwcmV0IHRoZSB0ZXh0IGluIHRoYXQgd2F5Lg0KVGhhdCBpcywg dGhlIHRleHQgYWJvdXQgImFsbCBpbnN0YW5jZXMgb2YgdGhlIFJJIExTQSBvcmlnaW5hdGVkIGJ5 IHRoYXQgbm9kZSIuICAoV2hpY2ggSSBjaGFuZ2VkIHRvICJpbnN0YW5jZXMgb2YgUkkgTFNBcyIg aW4gbXkgZ3JhbW1hciBlZGl0cywgcG9zc2libHkgaW5jb3JyZWN0bHkgaWYgSSdtIHN0aWxsIGNv bmZ1c2VkLikgIEkgd2FzIGludGVycHJldGluZyB0aGUgd29yZCAiaW5zdGFuY2VzIiB0byBpbmNs dWRlIGhpc3RvcmljYWwgb25lcyBvdmVyIHRpbWUsIHNvIHRoYXQgZXZlbiBpZiBhbiBSSSBMU0Eg Y2FycnlpbmcgYSBwYXJ0aWN1bGFyIGFkbWluIHRhZyB3YXMgcmVwbGFjZWQgYnkgYSBkaWZmZXJl bnQgUkkgTFNBIGZvciB0aGUgc2FtZSBhZHZlcnRpc2luZyByb3V0ZXIsIHRoZSBvbGQgb25lIHdv dWxkIHN0aWxsIGJlIGFuIGluc3RhbmNlIG9mIHRoYXQgUkkgTFNBLiAgR29pbmcgYmFjayB0byBS RkMgMjMyOCwgSSdtIG5vdCBzdXJlIHdoYXQgZXhhY3RseSBJIGhhZCBpbiBtaW5kIGluIHRlcm1z IG9mIGFnZXMgYW5kIHNjb3BlcyBhbmQgc2VxdWVuY2UgbnVtYmVycyB0aGF0IHdvdWxkIGNhdXNl IHRoaXMgc2l0dWF0aW9uLCBidXQgSSBzb21laG93IGhhZCBpdCBpbiBteSBtaW5kIHRoYXQgdGhl cmUgY291bGQgYmUgbXVsdGlwbGUgUkkgTFNBcyBhY3RpdmUgYXQgdGhlIHNhbWUgdGltZSB0aGF0 IGFwcGx5IHRvIGEgZ2l2ZW4gbm9kZSwgc3VjaCBhcyBpZiB0aGUgYWRtaW4ganVzdCBhZGRlZCBh IG5ldyBSSSBMU0EgY29udGFpbmluZyBvbmx5IHRoZSBhZG1pbiB0YWcgdG8gYXVnbWVudCB0aGUg ZXhpc3RpbmcgUkkgTFNBcyBiZWluZyBzZW50LiAgSXMgdGhhdCBwb3NzaWJsZT8NCg0KSWYgdGhl cmUgY2FuIG9ubHkgYmUgb25lIFJJIExTQSB0aGF0IGlzICJjdXJyZW50IiBmb3IgYSBnaXZlbiBu b2RlIChhdCBhIGdpdmVuIHNjb3BlPyksIHRoZW4gaXQgc2VlbXMgbGlrZSBpdCB3b3VsZCBiZSB1 c2VmdWwgdG8gY2hhbmdlIHRoZSB0ZXh0IHRvIGV4cGxpY2l0bHkgc2F5ICJhbGwgY3VycmVudCBp bnN0YW5jZXMiIC0tIHRoYXQgd291bGQgaGF2ZSBoZWxwZWQgbWUgYXMgSSByZWFkIGl0Lg0KDQo+ ID4gSG93IGRpc3J1cHRpdmUgd291bGQgdGhhdCBiZT8gIEl0IHdvdWxkIGJlIGhlbHBmdWwgdG8g c2VlIHNvbWUgDQo+ID5kaXNjdXNzaW9uIG9mIGhvdyBhIHRhZyB3b3VsZCBiZSByZW1vdmVkLg0K Pg0KPiBJIG1heSBvZiB3b3JrZWQgb24gT1NQRiBmb3IgdG9vIGxvbmcgYnV0IHRoaXMgc2hvdWxk IGJlIG9idmlvdXMgdG8gDQo+IGFueW9uZSBpbXBsZW1lbnRpbmcgdGhlIGRyYWZ0IGZyb20gdGhl IHNwZWNpZmljYXRpb24uDQoNCklmIGl0J3Mgc2ltcGx5IGEgbWF0dGVyIG9mIHJlLWlzc3Vpbmcg dGhlIFJJIExTQSAoSSB3YXMgbm90IHN1cmUgd2hlbiBJIHdhcyB3cml0aW5nIG15IHJldmlldyks IHRoZW4gSSBhZ3JlZSBpdCBzaG91bGQgYmUgb2J2aW91cy4NCg0KPiA8U2hyYWRkaGE+IFRoZSBi ZWxvdyBwYXJhZ3JhcGggKGZyb20gLTA3IHZlcnNpb24pIGlzIGNsZWFyIG9uIHRoaXMgSSBob3Bl Lg0KPg0KPiAiV2hlbiB0aGVyZSBpcyBhIGNoYW5nZSBvciByZW1vdmFsIG9mIGFuIGFkbWluaXN0 cmF0aXZlIGFmZmlsaWF0aW9uIG9mIGEgbm9kZSwNCj4gICAgdGhlIG5vZGUgTVVTVCByZS1vcmln aW5hdGUgdGhlIFJJIExTQSB3aXRoIHRoZSBsYXRlc3Qgc2V0IG9mIG5vZGUgYWRtaW5pc3RyYXRp dmUgdGFncy4NCj4gICAgT24gdGhlIHJlY2VpdmVyLCBXaGVuIHRoZXJlIGlzIGEgY2hhbmdlIGlu IHRoZSBub2RlIGFkbWluaXN0cmF0aXZlIHRhZyBUTFYgb3IgcmVtb3ZhbC8NCj4gICAgYWRkaXRp b24gb2YgYSBUTFYgaW4gYW55IGluc3RhbmNlIG9mIHRoZSBSSS1MU0EsIGltcGxlbWVudGF0aW9u cyBNVVNUDQo+ICAgIHRha2UgYXBwcm9wcmlhdGUgbWVhc3VyZXMgdG8gdXBkYXRlIGl0cyBzdGF0 ZSBhY2NvcmRpbmcgdG8gdGhlDQo+ICAgIGNoYW5nZWQgc2V0IG9mIHRhZ3MuICBFeGFjdCBhY3Rp b25zIGRlcGVuZCBvbiBmZWF0dXJlcyB3b3JraW5nIHdpdGgNCj4gICAgYWRtaW5pc3RyYXRpdmUg dGFncyBhbmQgaXMgb3V0c2lkZSBvZiBzY29wZSBvZiB0aGlzIHNwZWNpZmljYXRpb24uIg0KDQpU aGlzIGlzIGRlZmluaXRlbHkgaW1wcm92ZWQsIGJ1dCBpdCBkb2VzIG5vdCBkbyBtdWNoIHRvIGFk ZHJlc3MgdGhlIGlzc3VlIEkgaGFkIGluIG1pbmQgd2hlbiBJIHdhcyB3cml0aW5nIG15IHJldmll dy4gIEhvd2V2ZXIsIGl0IHNlZW1zIGxpa2UgdGhhdCBpc3N1ZSBpcyBub3QgYWN0dWFsbHkgYW4g aXNzdWUsIHNvIG5vIGZ1cnRoZXIgY2hhbmdlcyB0byB0aGlzIHRleHQgd291bGQgYmUgbmVlZGVk Lg0KDQoNCj4gPg0KPiA+VGhhdCBpcyBwYXJ0aWN1bGFybHkgZWFzeSBmb3IgYW4gYXR0YWNrZXIg d2hlbiB0aGUgbnVsbCBPU1BGIA0KPiA+YXV0aGVudGljYXRpb24gbWVjaGFuaXNtIGlzIGluIHVz ZSAoaG93IGNvbW1vbiBpcyB0aGF0PyAgSSBzYXcgc29tZSANCj4gPndlYnNpdGVzIGluZGljYXRp bmcgaXQgd2FzIHRoZSBkZWZhdWx0IGJlaGF2aW9yLCBhdCBsZWFzdCBzb21ldGltZXMpLg0KPiA+ SSBkbyBub3Qgc2VlIGEgbmVlZCB0byB0dXJuIHRoaXMgZG9jdW1lbnQgaW50byAic2VjdXJpdHkg DQo+ID5jb25zaWRlcmF0aW9ucyBmb3IgT1NQRiBhdXRoZW50aWNhdGlvbiIsIGJ1dCBtYXliZSBp dCBpcyB3b3J0aCBtZW50aW9uaW5nIHNvbWUgdGhpbmdzOg0KPiA+dGhlDQo+ID5tZDUgc2NoZW1l IHNlZW1zIHByZXR0eSB3ZWVrIGF0IHRoaXMgcG9pbnQgKHRob3VnaCBwcm9iYWJseSBub3QgDQo+ ID50cml2aWFsbHkgYnJva2VuKSwgdGhlIGhtYWMtc2hhIHNjaGVtZSBvZiBSRkMgNTcwOSBpcyBv bmx5IGZyb20gMjAwOSwgDQo+ID5hbmQgUkZDIDc0NzQgKG9ubHkgc2l4IG1vbnRocyBvbGQpIHBv aW50cyBvdXQgY2FzZXMgd2hlcmUgYm90aCBhcmUgDQo+ID5zdXNjZXB0aWJsZSB0byByZXBsYXkg YXR0YWNrcy4gIEp1c3QgbG9va2luZyBhdCB0aGUgc2VjdXJpdHkgDQo+ID5jb25zaWRlcmF0aW9u cyBvZiB0aGlzIGRvY3VtZW50IGFuZCB0aGUgY29yZSBPU1BGIHYyL3YzIHNwZWNzIGRvZXMgDQo+ ID5ub3QgY29udmV5IHRoaXMgdG8gdGhlIHJlYWRlciwgc28gSSB3b3VsZCBsaWtlIHRvIHNlZSBh dCBsZWFzdCBhIA0KPiA+cG9pbnRlciB0byBzdWNoIGNvbnNpZGVyYXRpb25zLiAgKFRoZSBzdGFu Y2Ugb2YgUkZDIDIzMjggdGhhdCAiYWxsIE9TUEYgcHJvdG9jb2wgZXhjaGFuZ2VzIGFyZSBhdXRo ZW50aWNhdGVkIg0KPiA+c2VlbXMgcGFydGljdWxhcmx5IGRpc2luZ2Vub3VzIGdpdmVuIHRoZSBw cmVzZW5jZSBvZiB0aGUgbnVsbCANCj4gPmF1dGhlbnRpY2F0aW9uIHNjaGVtZS4pDQo+DQo+IEkg dGhpbmsgYm90aCBSRkMgNzQ3NCBhbmQgUkZDIDcxNzYgc2hvdWxkIGJlIHJlZmVyZW5jZWQuIFRo ZSBPU1BGIA0KPiB2dWxuZXJhYmlsaXR5IHRvIHJlcGxheSBhdHRhY2tzIHRvIE9TUEZ2Mi9PU1BG djMgcm91dGVycyBpbXBsZW1lbnRpbmcgDQo+IHRoZXNlIHNwZWNpZmljYXRpb25zIGlzIGV4dHJl bWVseSBzbWFsbCBhbmQgaGFzIGJlZW4gcmVkdWNlZCBhcyBtdWNoIA0KPiBhcyBwcmFjdGljYWwu IElmIHlvdSBhcmUgc3RpbGwgY29uY2VybmVkLCBJIHN1Z2dlc3QgeW91IGRpc2N1c3Mgd2l0aCAN Cj4gU2FtIEhhcnRtYW4gKGFsc28gb25jZSBhZmZpbGlhdGVkIHdpdGggTUlUKS4NCg0KSSBhbSBu b3QgZXNwZWNpYWxseSBjb25jZXJuZWQgYWJvdXQgdGhpcyBhdHRhY2ssIEkganVzdCBub3RpY2Vk IHRoYXQgdGhlcmUgd2FzIGFuIFJGQyBhYm91dCBpdC4gIFNpbmNlIFJGQyA3NDc0IHdhcyBzbyBy ZWNlbnQsIGl0IG1hZGUgbWUgd29uZGVyIGhvdyB3aWRlbHkgZGVwbG95ZWQgdGhlIHNlY3VyaXR5 IGZpeGVzIGFyZSB0b2RheS4NCg0KPiA8U2hyYWRkaGE+IFNlY3VyaXR5IGNvbnNpZGVyYXRpb24g c2VjdGlvbiB1cGRhdGVkIHdpdGggdGhlIHJlZmVyZW5jZSANCj4gdG8gUkZDIDc0NzQgYW5kIDcx NzYuDQoNClRoYW5rcy4NCg0KPiA+DQo+ID5UaGVyZSBpcyBhbHNvIHRoZSBwb3NzaWJpbGl0eSB0 aGF0IGFuIGF0dGFja2VyIGNvdWxkIGJsb2NrIGRlbGl2ZXJ5IA0KPiA+b2YgYW4gTFNBLCBjYXVz aW5nIGEgdGFnIHRoYXQgc2hvdWxkIGJlIHNldCB0byBub3QgYmUgc2Vlbi4gIFRoaXMgDQo+ID5z ZWVtcyB1bmxpa2VseSBmb3Igd2lyZWQgcG9pbnQtdG8tcG9pbnQgbGlua3MsIGJ1dCBpcyBtb3Jl IHBsYXVzaWJsZSANCj4gPmluIG90aGVyIGVudmlyb25tZW50cywgc3VjaCBhcyByYWRpbyBsaW5r cy4gIEkgdGhpbmsgSSBjYW4gaW1hZ2luZSANCj4gPnNjZW5hcmlvcyB3aGVyZSB0aGlzIHdvdWxk IGNhdXNlIGRyYXN0aWMgZGFtYWdlIHRvIHRoZSByb3V0aW5nIHRvcG9sb2d5Lg0KPg0KPiBUaGUg ZGVzY3JpcHRpb24gYW5kIG1pdGlnYXRpb24gb2Ygc3VjaCBhIGdlbmVyaWMgdGhyZWF0IGRvZXNu 4oCZdCBiZWxvbmcgaW4gYSBtaW5vciAodGhvdWdoIGltcG9ydGFudCkgT1NQRiBzcGVjaWZpY2F0 aW9uLiBUaGUgZWZmZWN0IG9mIGJsb2NraW5nIGNvbnRyb2wgdHJhZmZpYyBpcyBuZXZlciBwb3Np dGl2ZSA7XikuIEF0IGxlYXN0IE9TUEYgdXNlcyByZWxpYWJsZSBmbG9vZGluZyBzbyBpdCB3aWxs IGJlIHJldHJhbnNtaXR0ZWQuDQo+IDxTaHJhZGRoYT4gQWdyZWUgd2l0aCBBY2VlIG9uIHRoaXMu DQoNCkkgaGFkIGZvcmdvdHRlbiB0aGF0IE9TUEYgZmxvb2Rpbmcgd2FzIHJlbGlhYmxlOyBJIGFn cmVlIHRoaXMgZG9lcyBub3QgbmVlZCB0byBiZSBleHBsaWNpdGx5IGNhbGxlZCBvdXQgaW4gdGhp cyBkb2N1bWVudCwgc2luY2UgaXQncyBhIGdlbmVyYWwgcm91dGluZyBjb25jZXJuLg0KDQo+ID5U aGUgcGFyZW50aGV0aWNhbCBpbiBzZWN0aW9uIDMuMiB3aGVyZWluIHJvdXRlcnMgbWlnaHQgYWR2 ZXJ0aXNlIGEgDQo+ID5wZXItbm9kZSBhbWluaXN0cmF0aXZlIHRhZyAid2l0aG91dCBrbm93aW5n IChvciBldmVuIGV4cGxpY2l0bHkNCj4gPnN1cHBvcnRpbmcpIGZ1bmN0aW9uYWxpdHkgaW1wbGll ZCBieSB0aGUgdGFnIiBzZWVtcyBwb3RlbnRpYWxseSANCj4gPmRhbmdlcm91cywgc2luY2UgaXQg c291bmRzIGxpa2UgdGhlIHJvdXRlcnMgaW4gcXVlc3Rpb24gYXJlIGx5aW5nIA0KPiA+YWJvdXQg dGhlaXIgY2FwYWJpbGl0aWVzLiAgV291bGQgdGhlIGRvY3VtZW50IHN1ZmZlciBoYXJtIGlmIHRo ZSANCj4gPnBhcmVudGhldGljYWwgd2FzIHJlbW92ZWQ/DQo+DQo+IEluIG15IG9waW5pb24sIG5v IGhhcm0gdG8gcmVtb3ZlIC0gbWlzY29uZmlndXJhdGlvbiBpcyBhbG1vc3QgYWx3YXlzIGFuIGlz c3VlLg0KPiA8U2hyYWRkaGE+IEl0J3MgcGVyZmVjdGx5IHZhbGlkIGZvciBhIG5vZGUgb3JpZ2lu YXRlIGEgdGFnIHdoZW4gdGhlIA0KPiBub2RlIGl0c2VsZiBkb2VzIG5vdCBQcm9jZXNzIGFueSB0 YWdzLiBJIHRoaW5rIHRoZSBzZW50ZW5jZSBuZWVkcyB0byANCj4gYmUgcmVwaHJhc2VkLiBDaGFu Z2luZyBpdCBhcyBiZWxvdy4NCj4NCj4gPHQ+TWVhbmluZyBvZiB0aGUgTm9kZSBhZG1pbmlzdHJh dGl2ZSB0YWdzIGlzIGdlbmVyYWxseSBvcGFxdWUgdG8gDQo+IE9TUEYuIFJvdXRlciBhZHZlcnRp c2luZyB0aGUgcGVyLW5vZGUgYWRtaW5pc3RyYXRpdmUgdGFnIChvciB0YWdzKSBtYXkgDQo+IGJl IGNvbmZpZ3VyZWQgdG8gZG8gc28gd2l0aG91dCBrbm93aW5nIChvciBldmVuIHdpdGhvdXQgc3Vw cG9ydGluZyANCj4gcHJvY2Vzc2luZyBvZikgZnVuY3Rpb25hbGl0eSBpbXBsaWVkIGJ5IHRoZSB0 YWcuPC90Pg0KDQpJIHRoaW5rIHRoZXJlIGlzIGEgcXVlc3Rpb24gYWJvdXQgd2hldGhlciB0aGlz IG1lYW5zIHRoYXQgdGhlIHJvdXRlciBkb2Vzbid0IG5lZWQgdG8ga25vdyB3aGF0IGZlYXR1cmUg dGhlIHRhZyBudW1iZXIgbWVhbnMsIG9yIHdoZXRoZXIgaXQgbWVhbnMgdGhhdCB0aGUgcm91dGVy IGRvZXNuJ3QgbmVlZCB0byBpbXBsZW1lbnQgdGhlIGZlYXR1cmUgaW5kaWNhdGVkIGJ5IHRoYXQg dGFnIHZhbHVlLiAgSSByZWFkIHRoaXMgdGV4dCBhcyBiZWluZyBpbiB0aGUgc2Vjb25kIGNhc2Us IGJ1dCBJIGFtIGludGVycHJldGluZyB5b3VyIGRpc2N1c3Npb24gYWJvdXQgdGhpcyB0ZXh0IHRv IG1lYW4gdGhhdCB5b3UgdGhpbmsgaXQgaXMgY292ZXJpbmcgdGhlIGZpcnN0IGNhc2UuICAoWWVz LCB0aGVyZSBjYW4gYmUgdGFnIHZhbHVlcyB0aGF0IGp1c3QgaW5kaWNhdGUgYW4gYWRtaW5pc3Ry YXRpdmUgZ3JvdXBpbmcgYW5kIHRoZXJlIGlzIG5vIGNvcnJlc3BvbmRpbmcgZnVuY3Rpb25hbGl0 eSBuZWVkZWQgb24gdGhlIHJvdXRlciwgYnV0IHRoZXJlIGNhbiBhbHNvIGJlIHRhZyB2YWx1ZXMg dGhhdCBpbmRpY2F0ZSAidGhlIHJvdXRlciBvcmlnaW5hdGluZyB0aGlzIFJJIExTQSBzdXBwb3J0 cyBhY2NlcHRpbmcgdGFyZ2V0ZWQgTERQIHNlc3Npb25zIg0KLS0gYSByb3V0ZXIgd2lsbCBjYXVz ZSBicmVha2FnZSBpZiBpdCBzZW5kcyBzdWNoIGEgdGFnIGJ1dCBkb2VzIG5vdCBhY3R1YWxseSBz dXBwb3J0IGFjY2VwdGluZyB0YXJnZXRlZCBMRFAgc2Vzc2lvbnMuKQ0KDQpCYXNlZCBvbiB0aGlz IGRpc2N1c3Npb24sIEkgdGhpbmsgdGhhdCB3aGF0IHRoZSBwYXJlbnRoZXRpY2FsIGlzIHRyeWlu ZyB0byBzYXkgaXMgdGhhdCAidGhlIHJvdXRlciBvcmlnaW5hdGluZyB0aGUgdGFnIG1heSBub3Qg dXNlIHRoYXQgdGFnIGluIGFueSBvZiBpdHMgcHJvY2Vzc2luZyBkZWNpc2lvbnMiIC0tIGlzIHRo YXQgY29ycmVjdD8NCg0KQ2hhbmdpbmcgdGhlIHdvcmQgImZ1bmN0aW9uYWxpdHkiIHRvICJhdHRy aWJ1dGVzIiB3b3VsZCBjYXVzZSBtZSB0byByZWFkIHRoZSB0ZXh0IGFzIGJlaW5nIGluIHRoZSBm aXJzdCBjYXNlIEkgZGVzY3JpYmVkIGFib3ZlLg0KDQooQnkgdGhlIHdheSwgdGhpcyBwYXJhZ3Jh cGggaGFkIGEgbG90IG9mIGNoYW5nZXMgaW4gbXkgcGF0Y2ggZm9yIGdyYW1tYXI7IGl0IG1pZ2h0 IGhhdmUgYmVlbiBlYXNpZXIgdG8gYXBwbHkgdGhhdCBwYXRjaCBiZWZvcmUgbWFraW5nIGZ1cnRo ZXIgZWRpdHMsIHRvIHJlZHVjZSB0aGUgbnVtYmVyIG9mIG1lcmdlIGNvbmZsaWN0cy4gIFRoZSBn cmFtbWFyIGluIHRoZSBxdW90ZWQgbmV3IHRleHQgaGFzIHNldmVyYWwgZXJyb3JzLikNCg0KPiA+ T25lIHJlYXNvbiBJIGFtIHVuc2F0aXNmaWVkIGJ5IG1ha2luZyB0aGUgaW50ZXJwcmV0YXRpb24g b2YgdGhlIHRhZyANCj4gPnZhbHVlcyBzcGVjaWZpYyB0byBhbiBhZG1pbmlzdHJhdGl2ZSBkb21h aW4gaXMgdGhhdCBhIG1pc2NvbmZpZ3VyZWQgDQo+ID5ib3JkZXIgcm91dGVyIG1pZ2h0IGVycm9u ZW91c2x5IHVzZSB0YWcgdmFsdWVzIGZyb20gb25lIGRvbWFpbiBvbiB0aGUgDQo+ID5vdGhlciBz aWRlIG9mIHRoZSBib3JkZXIuDQo+ID4gUGVyaGFwcyB0aGUgb3RoZXIgZGFtYWdlIGZyb20gYSBy b3V0ZXIgbWlzY29uZmlndXJlZCBpbiBzdWNoIGEgDQo+ID5mYXNoaW9uIHdvdWxkIGR3YXJmIHRo ZSBhZGRpdGlvbmFsIGRhbWFnZSBmcm9tIHRoZSBtaXNpbnRlcnByZXRlZCANCj4gPnRhZ3MgYW5k IHNvIG15IGNvbmNlcm4gaXMgaW52YWxpZDsgSSByZWFsbHkgY2FuJ3Qgc2F5Lg0KPg0KPiBBZ2Fp biwgSSBkb27igJl0IHRoaW5rIG1pc2NvbmZpZ3VyYXRpb24gbmVlZHMgdG8gYmUgY292ZXJlZCAt ICJlbXB0b3IgY2F2ZXRl4oCdLg0KDQpBIG1pc2NvbmZpZ3VyZWQgcm91dGVyIGlzIGJ5IGRlZmlu aXRpb24gYnJva2VuLiAgU3VjaCBtaXNjb25maWd1cmF0aW9uIGNhbiBoYXBwZW4gZWl0aGVyIGJ5 IGFjY2lkZW50IGR1ZSB0byBvcGVyYXRvciBlcnJvciwgb3IgbWFsaWNpb3VzbHksIGlmIGFuIGF0 dGFja2VyIGhhcyBjb21wcm9taXNlZCB0aGUgc3lzdGVtLiAgV2hpbGUgaXQgbWF5IG5vdCBiZSBu ZWNlc3NhcnkgdG8gc2F5IHRoYXQgYSBicm9rZW4gcm91dGVyIHdpbGwgbm90IHBhc3MgdHJhZmZp YyB0aGUgd2F5IGl0J3Mgc3VwcG9zZWQgdG8sIGlmIGEgbWlzY29uZmlndXJlZCByb3V0ZXIgY2Fu IGVtaXQgcm91dGluZyBwcm90b2NvbCBtZXNzYWdlcyB0aGF0IGFmZmVjdCB0aGUgc3RhdGUgb2Yg dGhlIG5ldHdvcmsgYXMgYSB3aG9sZSwgbm90IGp1c3QgaXRzIGxvY2FsIHN1cnJvdW5kaW5ncywg dGhhdCBzZWVtcyBsaWtlIGFuIGFuYWx5c2lzIHRoYXQgaXMgYXBwcm9wcmlhdGUgZm9yIHRoZSBz ZWN1cml0eSBjb25zaWRlcmF0aW9ucyBvZiBhIHJvdXRpbmcgcHJvdG9jb2wgZG9jdW1lbnQuICBO b3csIEkgZG9uJ3QgaGF2ZSBhIGdvb2QgcGljdHVyZSBvZiBzcGVjaWZpYyBleGFtcGxlcyBvZiBu ZXR3b3JrLXdpZGUgaXNzdWVzIGR1ZSB0byB0aGUgYWRtaW4gdGFnLCBidXQgSSB0aGluayB0aGVy ZSdzIGEgbGFyZ2UgZW5vdWdoIHByb2JhYmlsaXR5IHRoYXQgaXQncyBwb3NzaWJsZSBmb3Igc3Vj aCBhIHRoaW5nIHRvIGhhcHBlbiB0aGF0IEkgd2FudGVkIHRvIG1lbnRpb24gaXQgaW4gbXkgcmV2 aWV3IGNvbW1lbnRzLiAgTWF5YmUgdGhlcmUgaXMgbm90IGFueXRoaW5nIHdvcnRoIG1lbnRpb25p bmcgYWJvdXQgaXQgaW4gdGhlIHNlY3VyaXR5IGNvbnNpZGVyYXRpb25zIHNlY3Rpb24sIGJ1dCBJ IGRvbid0IHRoaW5rIHRoYXQgIm1pc2NvbmZpZ3VyYXRpb24gZG9lc24ndCBuZWVkIHRvIGJlIGNv dmVyZWQiIGFkZHJlc3NlcyB0aGUgY29uY2VybiBJIHdhcyBhdHRlbXB0aW5nIHRvIHJhaXNlLg0K DQo+IDxTaHJhZGRoYT4gLTA3IHZlcnNpb24gYWRkcmVzc2VzIHRoaXMgaXNzdWUuDQo+DQo+ICJB ZHZlcnRpc2VtZW50IG9mIHRhZyB2YWx1ZXMgZm9yIG9uZSBhZG1pbmlzdHJhdGl2ZSBkb21haW4g aW50byANCj4gYW5vdGhlciAgcmlza3MgbWlzaW50ZXJwcmV0YXRpb24gb2YgdGhlIHRhZyB2YWx1 ZXMgKGlmIHRoZSB0d28gZG9tYWlucyANCj4gaGF2ZSBhc3NpZ25lZCBkaWZmZXJlbnQgbWVhbmlu Z3MgdG8gdGhlIHNhbWUgdmFsdWVzKSwgd2hpY2ggbWF5IGhhdmUgDQo+IHVuZGVzaXJhYmxlIGFu ZCB1bmFudGljaXBhdGVkIHNpZGUgZWZmZWN0cy4iDQoNClRoYW5rIHlvdSwgdGhhdCBoZWxwcy4N Cg0KPiBUaGFua3MgZm9yIHRoZSBlZGl0b3JpYWwgcmV2aWV3IGFzIHdlbGwuIFNwZWFrIGFzIFdH IGNoYWlyLCBJIGFwcHJlY2lhdGUgdGhpcy4NCg0KWW91J3JlIHdlbGNvbWUhDQoNCi1CZW4NCg== --_002_BY1PR0501MB13815C096D0BF8D4221E5600D53F0BY1PR0501MB1381_ Content-Type: text/html; name="Diff draft-ietf-ospf-node-admin-tag-06.txt - draft-ietf-ospf-node-admin-tag-08.txt.htm" Content-Description: Diff draft-ietf-ospf-node-admin-tag-06.txt - draft-ietf-ospf-node-admin-tag-08.txt.htm Content-Disposition: attachment; filename="Diff draft-ietf-ospf-node-admin-tag-06.txt - draft-ietf-ospf-node-admin-tag-08.txt.htm"; size=164558; creation-date="Wed, 14 Oct 2015 07:22:05 GMT"; modification-date="Wed, 14 Oct 2015 07:22:05 GMT" Content-Transfer-Encoding: base64 PGh0bWw+PGhlYWQ+DQo8bWV0YSBodHRwLWVxdWl2PSJjb250ZW50LXR5cGUiIGNvbnRlbnQ9InRl eHQvaHRtbDsgY2hhcnNldD1VVEYtOCI+PC9oZWFkPjxib2R5PkNvbnRlbnQtVHlwZTogdGV4dC9o dG1sDQoNCg0KIA0KPCEtLSBHZW5lcmF0ZWQgYnkgcmZjZGlmZiAxLjQyOiByZmNkaWZmICAtLT4g DQo8IS0tIDwhRE9DVFlQRSBodG1sIFBVQkxJQyAiLS8vVzNDLy9EVEQgSFRNTCA0LjAxIFRyYW5z aXRpb25hbCIgPiAtLT4NCjwhLS0gU3lzdGVtOiBMaW51eCBnYW1heSAyLjYuMzktMi02ODYtcGFl ICMxIFNNUCBUdWUgSnVsIDUgMDM6NDg6NDkgVVRDIDIwMTEgaTY4NiBHTlUvTGludXggLS0+IA0K PCEtLSBVc2luZyBhd2s6IC91c3IvYmluL2dhd2s6IEdOVSBBd2sgNC4wLjEgLS0+IA0KPCEtLSBV c2luZyBkaWZmOiAvdXNyL2Jpbi9kaWZmOiBkaWZmIChHTlUgZGlmZnV0aWxzKSAzLjMgLS0+IA0K PCEtLSBVc2luZyB3ZGlmZjogL3Vzci9iaW4vd2RpZmY6IHdkaWZmIChHTlUgd2RpZmYpIDEuMi4x IC0tPiANCiANCiANCiAgPG1ldGEgaHR0cC1lcXVpdj0iQ29udGVudC1UeXBlIiBjb250ZW50PSJ0 ZXh0L2h0bWw7IGNoYXJzZXQ9VVRGLTgiPiANCiAgPG1ldGEgaHR0cC1lcXVpdj0iQ29udGVudC1T dHlsZS1UeXBlIiBjb250ZW50PSJ0ZXh0L2NzcyI+IA0KICA8dGl0bGU+RGlmZjogZHJhZnQtaWV0 Zi1vc3BmLW5vZGUtYWRtaW4tdGFnLTA2LnR4dCAtIGRyYWZ0LWlldGYtb3NwZi1ub2RlLWFkbWlu LXRhZy0wOC50eHQ8L3RpdGxlPiANCiAgPHN0eWxlIHR5cGU9InRleHQvY3NzIj4gDQogICAgYm9k eSAgICB7IG1hcmdpbjogMC40ZXg7IG1hcmdpbi1yaWdodDogYXV0bzsgfSANCiAgICB0ciAgICAg IHsgfSANCiAgICB0ZCAgICAgIHsgd2hpdGUtc3BhY2U6IHByZTsgZm9udC1mYW1pbHk6IG1vbm9z cGFjZTsgdmVydGljYWwtYWxpZ246IHRvcDsgZm9udC1zaXplOiAwLjg2ZW07fSANCiAgICB0aCAg ICAgIHsgZm9udC1zaXplOiAwLjg2ZW07IH0gDQogICAgLnNtYWxsICB7IGZvbnQtc2l6ZTogMC42 ZW07IGZvbnQtc3R5bGU6IGl0YWxpYzsgZm9udC1mYW1pbHk6IFZlcmRhbmEsIEhlbHZldGljYSwg c2Fucy1zZXJpZjsgfSANCiAgICAubGVmdCAgIHsgYmFja2dyb3VuZC1jb2xvcjogI0VFRTsgfSAN CiAgICAucmlnaHQgIHsgYmFja2dyb3VuZC1jb2xvcjogI0ZGRjsgfSANCiAgICAuZGlmZiAgIHsg YmFja2dyb3VuZC1jb2xvcjogI0NDRjsgfSANCiAgICAubGJsb2NrIHsgYmFja2dyb3VuZC1jb2xv cjogI0JGQjsgfSANCiAgICAucmJsb2NrIHsgYmFja2dyb3VuZC1jb2xvcjogI0ZGODsgfSANCiAg ICAuaW5zZXJ0IHsgYmFja2dyb3VuZC1jb2xvcjogIzhGRjsgfSANCiAgICAuZGVsZXRlIHsgYmFj a2dyb3VuZC1jb2xvcjogI0FDRjsgfSANCiAgICAudm9pZCAgIHsgYmFja2dyb3VuZC1jb2xvcjog I0ZGQjsgfSANCiAgICAuY29udCAgIHsgYmFja2dyb3VuZC1jb2xvcjogI0VFRTsgfSANCiAgICAu bGluZWJyIHsgYmFja2dyb3VuZC1jb2xvcjogI0FBQTsgfSANCiAgICAubGluZW5vIHsgY29sb3I6 IHJlZDsgYmFja2dyb3VuZC1jb2xvcjogI0ZGRjsgZm9udC1zaXplOiAwLjdlbTsgdGV4dC1hbGln bjogcmlnaHQ7IHBhZGRpbmc6IDAgMnB4OyB9IA0KICAgIC5lbGlwc2lzeyBiYWNrZ3JvdW5kLWNv bG9yOiAjQUFBOyB9IA0KICAgIC5sZWZ0IC5jb250IHsgYmFja2dyb3VuZC1jb2xvcjogI0RERDsg fSANCiAgICAucmlnaHQgLmNvbnQgeyBiYWNrZ3JvdW5kLWNvbG9yOiAjRUVFOyB9IA0KICAgIC5s YmxvY2sgLmNvbnQgeyBiYWNrZ3JvdW5kLWNvbG9yOiAjOUQ5OyB9IA0KICAgIC5yYmxvY2sgLmNv bnQgeyBiYWNrZ3JvdW5kLWNvbG9yOiAjREQ2OyB9IA0KICAgIC5pbnNlcnQgLmNvbnQgeyBiYWNr Z3JvdW5kLWNvbG9yOiAjMEREOyB9IA0KICAgIC5kZWxldGUgLmNvbnQgeyBiYWNrZ3JvdW5kLWNv bG9yOiAjOEFEOyB9IA0KICAgIC5zdGF0cywgLnN0YXRzIHRkLCAuc3RhdHMgdGggeyBiYWNrZ3Jv dW5kLWNvbG9yOiAjRUVFOyBwYWRkaW5nOiAycHggMDsgfSANCiAgPC9zdHlsZT4gDQogDQogDQog IDx0YWJsZSBib3JkZXI9IjAiIGNlbGxwYWRkaW5nPSIwIiBjZWxsc3BhY2luZz0iMCI+IA0KICA8 dGJvZHk+PHRyIGJnY29sb3I9Im9yYW5nZSI+PHRoPjwvdGg+PHRoPjxhIGhyZWY9Imh0dHBzOi8v dG9vbHMuaWV0Zi5vcmcvcmZjZGlmZj91cmwyPWRyYWZ0LWlldGYtb3NwZi1ub2RlLWFkbWluLXRh Zy0wNi50eHQiIHN0eWxlPSJjb2xvcjojMDA4OyB0ZXh0LWRlY29yYXRpb246bm9uZTsiPiZsdDs8 L2E+Jm5ic3A7PGEgaHJlZj0iaHR0cHM6Ly90b29scy5pZXRmLm9yZy9odG1sL2RyYWZ0LWlldGYt b3NwZi1ub2RlLWFkbWluLXRhZy0wNi50eHQiIHN0eWxlPSJjb2xvcjojMDA4Ij5kcmFmdC1pZXRm LW9zcGYtbm9kZS1hZG1pbi10YWctMDYudHh0PC9hPiZuYnNwOzwvdGg+PHRoPiA8L3RoPjx0aD4m bmJzcDs8YSBocmVmPSJodHRwczovL3Rvb2xzLmlldGYub3JnL2h0bWwvZHJhZnQtaWV0Zi1vc3Bm LW5vZGUtYWRtaW4tdGFnLTA4LnR4dCIgc3R5bGU9ImNvbG9yOiMwMDgiPmRyYWZ0LWlldGYtb3Nw Zi1ub2RlLWFkbWluLXRhZy0wOC50eHQ8L2E+Jm5ic3A7PGEgaHJlZj0iaHR0cHM6Ly90b29scy5p ZXRmLm9yZy9yZmNkaWZmP3VybDE9ZHJhZnQtaWV0Zi1vc3BmLW5vZGUtYWRtaW4tdGFnLTA4LnR4 dCIgc3R5bGU9ImNvbG9yOiMwMDg7IHRleHQtZGVjb3JhdGlvbjpub25lOyI+Jmd0OzwvYT48L3Ro Pjx0aD48L3RoPjwvdHI+IA0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRv cCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQi PjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8 dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ T3BlbiBTaG9ydGVzdCBQYXRoIEZpcnN0IElHUCAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgIFMuIEhlZ2RlPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+T3BlbiBTaG9y dGVzdCBQYXRoIEZpcnN0IElHUCAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIFMu IEhlZ2RlPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAg ICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJs ZWZ0Ij5JbnRlcm5ldC1EcmFmdCAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIEp1 bmlwZXIgTmV0d29ya3MsIEluYy48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij5JbnRl cm5ldC1EcmFmdCAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIEp1bmlwZXIgTmV0 d29ya3MsIEluYy48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3Ry Pg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xh c3M9ImxlZnQiPkludGVuZGVkIHN0YXR1czogU3RhbmRhcmRzIFRyYWNrICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgIFIuIFNoYWtpcjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQi PkludGVuZGVkIHN0YXR1czogU3RhbmRhcmRzIFRyYWNrICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgIFIuIFNoYWtpcjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3Rk PjwvdHI+DQogICAgICA8dHI+PHRkPjxhIG5hbWU9ImRpZmYwMDAxIj48L2E+PC90ZD48L3RyPg0K ICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9 ImxibG9jayI+RXhwaXJlczogPHNwYW4gY2xhc3M9ImRlbGV0ZSI+TWFyY2ggMzE8L3NwYW4+LCAy MDE2ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgSW5kaXZpZHVhbDwvdGQ+ PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj5FeHBpcmVzOiA8c3BhbiBjbGFzcz0iaW5zZXJ0 Ij5BcHJpbCAxNjwvc3Bhbj4sIDIwMTYgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICBJbmRpdmlkdWFsPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+ PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRk IGNsYXNzPSJsZWZ0Ij4gICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgIEEuIFNtaXJub3Y8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJp Z2h0Ij4gICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgIEEuIFNtaXJub3Y8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+ PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90 ZD48dGQgY2xhc3M9ImxlZnQiPiAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgQ2lzY28gU3lzdGVtcywgSW5jLjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFz cz0icmlnaHQiPiAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgQ2lzY28gU3lzdGVtcywgSW5jLjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0i dG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9w Ij48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIFouIExpPC90ZD48dGQ+IDwvdGQ+PHRk IGNsYXNzPSJyaWdodCI+ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgIFouIExpPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFs aWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWdu PSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgIEh1YXdlaSBUZWNobm9sb2dpZXM8L3RkPjx0ZD4gPC90 ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgIEh1YXdlaSBUZWNobm9sb2dpZXM8L3RkPjx0ZCBjbGFzcz0ibGluZW5v IiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2 YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICBCLiBEZWNyYWVuZTwvdGQ+PHRk PiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICBCLiBEZWNyYWVuZTwvdGQ+PHRkIGNsYXNzPSJs aW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5l bm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgT3JhbmdlPC90 ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgT3JhbmdlPC90ZD48dGQgY2xh c3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQ+PGEgbmFt ZT0iZGlmZjAwMDIiPjwvYT48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8i IHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj4gICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICA8c3BhbiBjbGFzcz0iZGVsZXRlIj5T ZXB0ZW1iZXIgMjg8L3NwYW4+LCAyMDE1PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2si PiAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIDxz cGFuIGNsYXNzPSJpbnNlcnQiPiAgT2N0b2JlciAxNDwvc3Bhbj4sIDIwMTU8L3RkPjx0ZCBjbGFz cz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0i bGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPjwvdGQ+PHRkPiA8L3Rk Pjx0ZCBjbGFzcz0icmlnaHQiPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48 L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3Rk Pjx0ZCBjbGFzcz0ibGVmdCI+ICAgICAgICAgICAgQWR2ZXJ0aXNpbmcgcGVyLW5vZGUgYWRtaW5p c3RyYXRpdmUgdGFncyBpbiBPU1BGPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAg ICAgICAgICAgQWR2ZXJ0aXNpbmcgcGVyLW5vZGUgYWRtaW5pc3RyYXRpdmUgdGFncyBpbiBPU1BG PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0 cj48dGQ+PGEgbmFtZT0iZGlmZjAwMDMiPjwvYT48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNs YXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj4gICAgICAg ICAgICAgICAgICAgZHJhZnQtaWV0Zi1vc3BmLW5vZGUtYWRtaW4tdGFnLTA8c3BhbiBjbGFzcz0i ZGVsZXRlIj42PC9zcGFuPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj4gICAgICAg ICAgICAgICAgICAgZHJhZnQtaWV0Zi1vc3BmLW5vZGUtYWRtaW4tdGFnLTA8c3BhbiBjbGFzcz0i aW5zZXJ0Ij44PC9zcGFuPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3Rk PjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0 ZCBjbGFzcz0ibGVmdCI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+PC90ZD48dGQg Y2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xh c3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij5BYnN0cmFjdDwv dGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPkFic3RyYWN0PC90ZD48dGQgY2xhc3M9Imxp bmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVu byIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij48L3RkPjx0ZD4gPC90ZD48dGQg Y2xhc3M9InJpZ2h0Ij48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48 L3RyPg0KICAgICAgPHRyPjx0ZD48YSBuYW1lPSJkaWZmMDAwNCI+PC9hPjwvdGQ+PC90cj4NCiAg ICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJs YmxvY2siPiAgIFRoaXMgZG9jdW1lbnQgZGVzY3JpYmVzIGFuIGV4dGVuc2lvbiB0byBPU1BGIHBy b3RvY29sIHRvIGFkZCBhbjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj4gICBUaGlz IGRvY3VtZW50IGRlc2NyaWJlcyBhbiBleHRlbnNpb24gdG8gPHNwYW4gY2xhc3M9Imluc2VydCI+ dGhlIDwvc3Bhbj5PU1BGIHByb3RvY29sIHRvIGFkZCBhbjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8i IHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZh bGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgb3B0aW9uYWwgb3BlcmF0aW9uYWwg Y2FwYWJpbGl0eSwgdGhhdCBhbGxvd3MgdGFnZ2luZyBhbmQgZ3JvdXBpbmcgb2Y8L3RkPjx0ZD4g PC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBvcHRpb25hbCBvcGVyYXRpb25hbCBjYXBhYmlsaXR5 LCB0aGF0IGFsbG93cyB0YWdnaW5nIGFuZCBncm91cGluZyBvZjwvdGQ+PHRkIGNsYXNzPSJsaW5l bm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8i IHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgdGhlIG5vZGVzIGluIGFuIE9T UEYgZG9tYWluLiAgVGhpcyBhbGxvd3Mgc2ltcGxpZmljYXRpb24sIGVhc2Ugb2Y8L3RkPjx0ZD4g PC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICB0aGUgbm9kZXMgaW4gYW4gT1NQRiBkb21haW4uICBU aGlzIGFsbG93cyBzaW1wbGlmaWNhdGlvbiwgZWFzZSBvZjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8i IHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZh bGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgbWFuYWdlbWVudCBhbmQgY29udHJv bCBvdmVyIHJvdXRlIGFuZCBwYXRoIHNlbGVjdGlvbiBiYXNlZCBvbjwvdGQ+PHRkPiA8L3RkPjx0 ZCBjbGFzcz0icmlnaHQiPiAgIG1hbmFnZW1lbnQgYW5kIGNvbnRyb2wgb3ZlciByb3V0ZSBhbmQg cGF0aCBzZWxlY3Rpb24gYmFzZWQgb248L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRv cCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZD48YSBuYW1lPSJkaWZmMDAwNSI+PC9hPjwvdGQ+ PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRk IGNsYXNzPSJsYmxvY2siPiAgIGNvbmZpZ3VyZWQgcG9saWNpZXMuICBUaGlzIGRvY3VtZW50IGRl c2NyaWJlcyBhbiBleHRlbnNpb24gdG8gT1NQRjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJs b2NrIj4gICBjb25maWd1cmVkIHBvbGljaWVzLiAgVGhpcyBkb2N1bWVudCBkZXNjcmliZXMgYW4g ZXh0ZW5zaW9uIHRvIDxzcGFuIGNsYXNzPSJpbnNlcnQiPnRoZTwvc3Bhbj48L3RkPjx0ZCBjbGFz cz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0i bGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+ICAgcHJvdG9jb2wg dG8gYWR2ZXJ0aXNlIHBlci1ub2RlIGFkbWluaXN0cmF0aXZlIHRhZ3MuICBUaGUgPHNwYW4gY2xh c3M9ImRlbGV0ZSI+bm9kZS10YWdzPC9zcGFuPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJs b2NrIj4gICBPU1BGIHByb3RvY29sIHRvIGFkdmVydGlzZSBwZXItbm9kZSBhZG1pbmlzdHJhdGl2 ZSB0YWdzLiAgVGhlIDxzcGFuIGNsYXNzPSJpbnNlcnQiPm5vZGUtPC9zcGFuPjwvdGQ+PHRkIGNs YXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNz PSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj4gICBjYW4gYmUg dXNlZCB0byBleHByZXNzIGFuZCBhcHBseSBsb2NhbGx5LWRlZmluZWQgbmV0d29yayBwb2xpY2ll czwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48c3BhbiBjbGFzcz0iaW5zZXJ0Ij4g ICB0YWdzPC9zcGFuPiBjYW4gYmUgdXNlZCB0byBleHByZXNzIGFuZCBhcHBseSBsb2NhbGx5LWRl ZmluZWQgbmV0d29yazwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwv dHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBj bGFzcz0ibGJsb2NrIj4gICB3aGljaCBpcyBhIHZlcnkgdXNlZnVsIG9wZXJhdGlvbmFsIGNhcGFi aWxpdHkuICBOb2RlIHRhZ3MgbWF5IGJlIHVzZWQ8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJi bG9jayI+ICAgcG9saWNpZXMgd2hpY2ggaXMgYSB2ZXJ5IHVzZWZ1bCBvcGVyYXRpb25hbCBjYXBh YmlsaXR5LiAgTm9kZSB0YWdzPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwv dGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+ PHRkIGNsYXNzPSJsYmxvY2siPiAgIGVpdGhlciBieSBPU1BGIGl0c2VsZiBvciBieSBvdGhlciBh cHBsaWNhdGlvbnMgY29uc3VtaW5nIGluZm9ybWF0aW9uPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNz PSJyYmxvY2siPiAgIG1heSBiZSB1c2VkIGVpdGhlciBieSBPU1BGIGl0c2VsZiBvciBieSBvdGhl ciBhcHBsaWNhdGlvbnMgY29uc3VtaW5nPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0 b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3Ai PjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPiAgIHByb3BhZ2F0ZWQgdmlhIE9TUEYuPC90ZD48dGQ+ IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPiAgIGluZm9ybWF0aW9uIHByb3BhZ2F0ZWQgdmlhIE9T UEYuPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAg IDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0 Ij48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij48L3RkPjx0ZCBjbGFzcz0ibGluZW5v IiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2 YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIFRoaXMgZG9jdW1lbnQgZGVzY3Jp YmVzIHRoZSBwcm90b2NvbCBleHRlbnNpb25zIHRvIGRpc3NlbWluYXRlIHBlci08L3RkPjx0ZD4g PC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBUaGlzIGRvY3VtZW50IGRlc2NyaWJlcyB0aGUgcHJv dG9jb2wgZXh0ZW5zaW9ucyB0byBkaXNzZW1pbmF0ZSBwZXItPC90ZD48dGQgY2xhc3M9ImxpbmVu byIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQ+PGEgbmFtZT0iZGlmZjAw MDYiPjwvYT48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0i dG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj4gICBub2RlIGFkbWluaXN0cmF0aXZlPHNwYW4g Y2xhc3M9ImRlbGV0ZSI+LTwvc3Bhbj50YWdzIHRvIHRoZSBPU1BGdjIgYW5kIE9TUEZ2MyBwcm90 b2NvbC4gIEl0PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPiAgIG5vZGUgYWRtaW5p c3RyYXRpdmU8c3BhbiBjbGFzcz0iaW5zZXJ0Ij4gPC9zcGFuPnRhZ3MgdG8gdGhlIE9TUEZ2MiBh bmQgT1NQRnYzIHByb3RvY29sLiAgSXQ8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRv cCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+ PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIHByb3ZpZGVzIGV4YW1wbGUgdXNlIGNhc2VzIG9mIGFk bWluaXN0cmF0aXZlIG5vZGUgdGFncy48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4g ICBwcm92aWRlcyBleGFtcGxlIHVzZSBjYXNlcyBvZiBhZG1pbmlzdHJhdGl2ZSBub2RlIHRhZ3Mu PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0 cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij48 L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2 YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxp Z249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPlJlcXVpcmVtZW50cyBMYW5ndWFnZTwvdGQ+ PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPlJlcXVpcmVtZW50cyBMYW5ndWFnZTwvdGQ+PHRk IGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNs YXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+PC90ZD48dGQ+ IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0 b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3Ai PjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBUaGUga2V5IHdvcmRzICJNVVNUIiwgIk1VU1QgTk9U IiwgIlJFUVVJUkVEIiwgIlNIQUxMIiwgIlNIQUxMIE5PVCIsPC90ZD48dGQ+IDwvdGQ+PHRkIGNs YXNzPSJyaWdodCI+ICAgVGhlIGtleSB3b3JkcyAiTVVTVCIsICJNVVNUIE5PVCIsICJSRVFVSVJF RCIsICJTSEFMTCIsICJTSEFMTCBOT1QiLDwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0i dG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9w Ij48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgIlNIT1VMRCIsICJTSE9VTEQgTk9UIiwgIlJFQ09N TUVOREVEIiwgIk1BWSIsIGFuZCAiT1BUSU9OQUwiIGluIHRoaXM8L3RkPjx0ZD4gPC90ZD48dGQg Y2xhc3M9InJpZ2h0Ij4gICAiU0hPVUxEIiwgIlNIT1VMRCBOT1QiLCAiUkVDT01NRU5ERUQiLCAi TUFZIiwgYW5kICJPUFRJT05BTCIgaW4gdGhpczwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGln bj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0i dG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgZG9jdW1lbnQgYXJlIHRvIGJlIGludGVycHJl dGVkIGFzIGRlc2NyaWJlZCBpbiBSRkMgMjExOSBbUkZDMjExOV0uPC90ZD48dGQ+IDwvdGQ+PHRk IGNsYXNzPSJyaWdodCI+ICAgZG9jdW1lbnQgYXJlIHRvIGJlIGludGVycHJldGVkIGFzIGRlc2Ny aWJlZCBpbiBSRkMgMjExOSBbUkZDMjExOV0uPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWdu PSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0 b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0 Ij48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAg PHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQi PlN0YXR1cyBvZiBUaGlzIE1lbW88L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij5TdGF0 dXMgb2YgVGhpcyBNZW1vPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+ PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRk IGNsYXNzPSJsZWZ0Ij48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij48L3RkPjx0ZCBj bGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFz cz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNz PSJyaWdodCI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPg0KICAgICAgPHRyIGJn Y29sb3I9ImdyYXkiPjx0ZD48L3RkPjx0aD48YSBuYW1lPSJwYXJ0LWwyIj48c21hbGw+c2tpcHBp bmcgdG8gY2hhbmdlIGF0PC9zbWFsbD48ZW0+IHBhZ2UgMiwgbGluZSAxMDwvZW0+PC9hPjwvdGg+ PHRoPiA8L3RoPjx0aD48YSBuYW1lPSJwYXJ0LXIyIj48c21hbGw+c2tpcHBpbmcgdG8gY2hhbmdl IGF0PC9zbWFsbD48ZW0+IHBhZ2UgMiwgbGluZSAxMDwvZW0+PC9hPjwvdGg+PHRkPjwvdGQ+PC90 cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNs YXNzPSJsZWZ0Ij4gICBJbnRlcm5ldC1EcmFmdHMgYXJlIHdvcmtpbmcgZG9jdW1lbnRzIG9mIHRo ZSBJbnRlcm5ldCBFbmdpbmVlcmluZzwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAg IEludGVybmV0LURyYWZ0cyBhcmUgd29ya2luZyBkb2N1bWVudHMgb2YgdGhlIEludGVybmV0IEVu Z2luZWVyaW5nPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4N CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNz PSJsZWZ0Ij4gICBUYXNrIEZvcmNlIChJRVRGKS4gIE5vdGUgdGhhdCBvdGhlciBncm91cHMgbWF5 IGFsc28gZGlzdHJpYnV0ZTwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIFRhc2sg Rm9yY2UgKElFVEYpLiAgTm90ZSB0aGF0IG90aGVyIGdyb3VwcyBtYXkgYWxzbyBkaXN0cmlidXRl PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0 cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4g ICB3b3JraW5nIGRvY3VtZW50cyBhcyBJbnRlcm5ldC1EcmFmdHMuICBUaGUgbGlzdCBvZiBjdXJy ZW50IEludGVybmV0LTwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIHdvcmtpbmcg ZG9jdW1lbnRzIGFzIEludGVybmV0LURyYWZ0cy4gIFRoZSBsaXN0IG9mIGN1cnJlbnQgSW50ZXJu ZXQtPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAg IDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0 Ij4gICBEcmFmdHMgaXMgYXQgaHR0cDovL2RhdGF0cmFja2VyLmlldGYub3JnL2RyYWZ0cy9jdXJy ZW50Ly48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBEcmFmdHMgaXMgYXQgaHR0 cDovL2RhdGF0cmFja2VyLmlldGYub3JnL2RyYWZ0cy9jdXJyZW50Ly48L3RkPjx0ZCBjbGFzcz0i bGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGlu ZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPjwvdGQ+PHRkPiA8L3RkPjx0 ZCBjbGFzcz0icmlnaHQiPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3Rk PjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0 ZCBjbGFzcz0ibGVmdCI+ICAgSW50ZXJuZXQtRHJhZnRzIGFyZSBkcmFmdCBkb2N1bWVudHMgdmFs aWQgZm9yIGEgbWF4aW11bSBvZiBzaXggbW9udGhzPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJy aWdodCI+ICAgSW50ZXJuZXQtRHJhZnRzIGFyZSBkcmFmdCBkb2N1bWVudHMgdmFsaWQgZm9yIGEg bWF4aW11bSBvZiBzaXggbW9udGhzPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3Ai PjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwv dGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBhbmQgbWF5IGJlIHVwZGF0ZWQsIHJlcGxhY2VkLCBvciBv YnNvbGV0ZWQgYnkgb3RoZXIgZG9jdW1lbnRzIGF0IGFueTwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFz cz0icmlnaHQiPiAgIGFuZCBtYXkgYmUgdXBkYXRlZCwgcmVwbGFjZWQsIG9yIG9ic29sZXRlZCBi eSBvdGhlciBkb2N1bWVudHMgYXQgYW55PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0 b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3Ai PjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICB0aW1lLiAgSXQgaXMgaW5hcHByb3ByaWF0ZSB0byB1 c2UgSW50ZXJuZXQtRHJhZnRzIGFzIHJlZmVyZW5jZTwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0i cmlnaHQiPiAgIHRpbWUuICBJdCBpcyBpbmFwcHJvcHJpYXRlIHRvIHVzZSBJbnRlcm5ldC1EcmFm dHMgYXMgcmVmZXJlbmNlPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+ PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRk IGNsYXNzPSJsZWZ0Ij4gICBtYXRlcmlhbCBvciB0byBjaXRlIHRoZW0gb3RoZXIgdGhhbiBhcyAi d29yayBpbiBwcm9ncmVzcy4iPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgbWF0 ZXJpYWwgb3IgdG8gY2l0ZSB0aGVtIG90aGVyIHRoYW4gYXMgIndvcmsgaW4gcHJvZ3Jlc3MuIjwv dGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+ PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+PC90 ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFs aWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQ+PGEgbmFtZT0iZGlmZjAwMDciPjwv YT48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48 L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj4gICBUaGlzIEludGVybmV0LURyYWZ0IHdpbGwgZXhwaXJl IG9uIDxzcGFuIGNsYXNzPSJkZWxldGUiPk1hcmNoIDMxPC9zcGFuPiwgMjAxNi48L3RkPjx0ZD4g PC90ZD48dGQgY2xhc3M9InJibG9jayI+ICAgVGhpcyBJbnRlcm5ldC1EcmFmdCB3aWxsIGV4cGly ZSBvbiA8c3BhbiBjbGFzcz0iaW5zZXJ0Ij5BcHJpbCAxNjwvc3Bhbj4sIDIwMTYuPC90ZD48dGQg Y2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xh c3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij48L3RkPjx0ZD4g PC90ZD48dGQgY2xhc3M9InJpZ2h0Ij48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRv cCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+ PC90ZD48dGQgY2xhc3M9ImxlZnQiPkNvcHlyaWdodCBOb3RpY2U8L3RkPjx0ZD4gPC90ZD48dGQg Y2xhc3M9InJpZ2h0Ij5Db3B5cmlnaHQgTm90aWNlPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFs aWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWdu PSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJp Z2h0Ij48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAg ICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9Imxl ZnQiPiAgIENvcHlyaWdodCAoYykgMjAxNSBJRVRGIFRydXN0IGFuZCB0aGUgcGVyc29ucyBpZGVu dGlmaWVkIGFzIHRoZTwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIENvcHlyaWdo dCAoYykgMjAxNSBJRVRGIFRydXN0IGFuZCB0aGUgcGVyc29ucyBpZGVudGlmaWVkIGFzIHRoZTwv dGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+ PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAg ZG9jdW1lbnQgYXV0aG9ycy4gIEFsbCByaWdodHMgcmVzZXJ2ZWQuPC90ZD48dGQ+IDwvdGQ+PHRk IGNsYXNzPSJyaWdodCI+ICAgZG9jdW1lbnQgYXV0aG9ycy4gIEFsbCByaWdodHMgcmVzZXJ2ZWQu PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0 cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij48 L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2 YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxp Z249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIFRoaXMgZG9jdW1lbnQgaXMgc3ViamVj dCB0byBCQ1AgNzggYW5kIHRoZSBJRVRGIFRydXN0J3MgTGVnYWw8L3RkPjx0ZD4gPC90ZD48dGQg Y2xhc3M9InJpZ2h0Ij4gICBUaGlzIGRvY3VtZW50IGlzIHN1YmplY3QgdG8gQkNQIDc4IGFuZCB0 aGUgSUVURiBUcnVzdCdzIExlZ2FsPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3Ai PjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwv dGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBQcm92aXNpb25zIFJlbGF0aW5nIHRvIElFVEYgRG9jdW1l bnRzPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgUHJvdmlzaW9ucyBSZWxhdGlu ZyB0byBJRVRGIERvY3VtZW50czwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48 L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3Rk Pjx0ZCBjbGFzcz0ibGVmdCI+ICAgKGh0dHA6Ly90cnVzdGVlLmlldGYub3JnL2xpY2Vuc2UtaW5m bykgaW4gZWZmZWN0IG9uIHRoZSBkYXRlIG9mPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdo dCI+ICAgKGh0dHA6Ly90cnVzdGVlLmlldGYub3JnL2xpY2Vuc2UtaW5mbykgaW4gZWZmZWN0IG9u IHRoZSBkYXRlIG9mPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90 cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNs YXNzPSJsZWZ0Ij4gICBwdWJsaWNhdGlvbiBvZiB0aGlzIGRvY3VtZW50LiAgUGxlYXNlIHJldmll dyB0aGVzZSBkb2N1bWVudHM8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBwdWJs aWNhdGlvbiBvZiB0aGlzIGRvY3VtZW50LiAgUGxlYXNlIHJldmlldyB0aGVzZSBkb2N1bWVudHM8 L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRy Pjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+PC90ZD48dGQ+IDwvdGQ+ PHRkIGNsYXNzPSJyaWdodCI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPg0KICAg ICAgPHRyIGJnY29sb3I9ImdyYXkiPjx0ZD48L3RkPjx0aD48YSBuYW1lPSJwYXJ0LWwzIj48c21h bGw+c2tpcHBpbmcgdG8gY2hhbmdlIGF0PC9zbWFsbD48ZW0+IHBhZ2UgMiwgbGluZSAzNDwvZW0+ PC9hPjwvdGg+PHRoPiA8L3RoPjx0aD48YSBuYW1lPSJwYXJ0LXIzIj48c21hbGw+c2tpcHBpbmcg dG8gY2hhbmdlIGF0PC9zbWFsbD48ZW0+IHBhZ2UgMiwgbGluZSAzNDwvZW0+PC9hPjwvdGg+PHRk PjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwv dGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICB0aGUgVHJ1c3QgTGVnYWwgUHJvdmlzaW9ucyBhbmQgYXJl IHByb3ZpZGVkIHdpdGhvdXQgd2FycmFudHkgYXM8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJp Z2h0Ij4gICB0aGUgVHJ1c3QgTGVnYWwgUHJvdmlzaW9ucyBhbmQgYXJlIHByb3ZpZGVkIHdpdGhv dXQgd2FycmFudHkgYXM8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48 L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQg Y2xhc3M9ImxlZnQiPiAgIGRlc2NyaWJlZCBpbiB0aGUgU2ltcGxpZmllZCBCU0QgTGljZW5zZS48 L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBkZXNjcmliZWQgaW4gdGhlIFNpbXBs aWZpZWQgQlNEIExpY2Vuc2UuPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwv dGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+ PHRkIGNsYXNzPSJsZWZ0Ij48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij48L3RkPjx0 ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBj bGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPlRhYmxlIG9m IENvbnRlbnRzPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+VGFibGUgb2YgQ29udGVu dHM8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAg PHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQi PjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8i IHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZh bGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgMS4gIEludHJvZHVjdGlvbiAgLiAu IC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gICAzPC90ZD48dGQ+ IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgMS4gIEludHJvZHVjdGlvbiAgLiAuIC4gLiAuIC4g LiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gICAzPC90ZD48dGQgY2xhc3M9Imxp bmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVu byIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICAyLiAgQWRtaW5pc3RyYXRp dmUgVGFnIFRMViAgLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAgIDM8L3Rk Pjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICAyLiAgQWRtaW5pc3RyYXRpdmUgVGFnIFRM ViAgLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAgIDM8L3RkPjx0ZCBjbGFz cz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0i bGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIDMuICBPU1BGIHBl ci1ub2RlIGFkbWluaXN0cmF0aXZlIHRhZyBUTFYgIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuICAg MzwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIDMuICBPU1BGIHBlci1ub2RlIGFk bWluaXN0cmF0aXZlIHRhZyBUTFYgIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuICAgMzwvdGQ+PHRk IGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNs YXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgICAzLjEu ICBUTFYgZm9ybWF0ICAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAu IC4gICAzPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgICAzLjEuICBUTFYgZm9y bWF0ICAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gICAzPC90 ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48 dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICAg IDMuMi4gIEVsZW1lbnRzIG9mIHByb2NlZHVyZSAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4g LiAuIC4gLiAgIDQ8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICAgIDMuMi4gIEVs ZW1lbnRzIG9mIHByb2NlZHVyZSAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAg IDQ8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAg PHRyPjx0ZD48YSBuYW1lPSJkaWZmMDAwOCI+PC9hPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQg Y2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPiAgIDQu ICBBcHBsaWNhdGlvbnMgIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAu IC4gLiAuICAgPHNwYW4gY2xhc3M9ImRlbGV0ZSI+NTwvc3Bhbj48L3RkPjx0ZD4gPC90ZD48dGQg Y2xhc3M9InJibG9jayI+ICAgICAgIDxzcGFuIGNsYXNzPSJpbnNlcnQiPjMuMi4xLiAgSW50ZXJw cmV0YXRpb24gb2YgTm9kZSBBZG1pbmlzdHJhdGl2ZSBUYWdzICAuIC4gLiAuIC4gICA0PC9zcGFu PjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8 dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2Nr Ij48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+PHNwYW4gY2xhc3M9Imluc2VydCI+ ICAgICAgIDMuMi4yLiAgVXNlIG9mIE5vZGUgQWRtaW5pc3RyYXRpdmUgVGFncyAuIC4gLiAuIC4g LiAuIC4gLiAuIC4gICA1PC9zcGFuPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9w Ij48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48 L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+ PHNwYW4gY2xhc3M9Imluc2VydCI+ICAgICAgIDMuMi4zLiAgUHJvY2Vzc2luZyBOb2RlIEFkbWlu aXN0cmF0aXZlIFRhZyBjaGFuZ2VzICAuIC4gLiAuIC4gICA2PC9zcGFuPjwvdGQ+PHRkIGNsYXNz PSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJs aW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48L3RkPjx0ZD4gPC90 ZD48dGQgY2xhc3M9InJibG9jayI+ICAgNC4gIEFwcGxpY2F0aW9ucyAgLiAuIC4gLiAuIC4gLiAu IC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gICA8c3BhbiBjbGFzcz0iaW5zZXJ0Ij42 PC9zcGFuPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQog ICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0i bGVmdCI+ICAgICA0LjEuICBTZXJ2aWNlIGF1dG8tZGlzY292ZXJ5ICAuIC4gLiAuIC4gLiAuIC4g LiAuIC4gLiAuIC4gLiAuIC4gICA2PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAg ICA0LjEuICBTZXJ2aWNlIGF1dG8tZGlzY292ZXJ5ICAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAu IC4gLiAuIC4gICA2PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90 cj4NCiAgICAgIDx0cj48dGQ+PGEgbmFtZT0iZGlmZjAwMDkiPjwvYT48L3RkPjwvdHI+DQogICAg ICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJs b2NrIj4gICAgIDQuMi4gIEZhc3QtUmUtcm91dGluZyBwb2xpY3kgIC4gLiAuIC4gLiAuIC4gLiAu IC4gLiAuIC4gLiAuIC4gLiAgIDxzcGFuIGNsYXNzPSJkZWxldGUiPjY8L3NwYW4+PC90ZD48dGQ+ IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPiAgICAgNC4yLiAgRmFzdC1SZS1yb3V0aW5nIHBvbGlj eSAgLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuICAgPHNwYW4gY2xhc3M9Imluc2Vy dCI+Nzwvc3Bhbj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3Ry Pg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xh c3M9ImxibG9jayI+ICAgICA0LjMuICBDb250cm9sbGluZyBSZW1vdGUgTEZBIHR1bm5lbCB0ZXJt aW5hdGlvbiAuIC4gLiAuIC4gLiAuIC4gICA8c3BhbiBjbGFzcz0iZGVsZXRlIj43PC9zcGFuPjwv dGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj4gICAgIDQuMy4gIENvbnRyb2xsaW5nIFJl bW90ZSBMRkEgdHVubmVsIHRlcm1pbmF0aW9uIC4gLiAuIC4gLiAuIC4gLiAgIDxzcGFuIGNsYXNz PSJpbnNlcnQiPjg8L3NwYW4+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwv dGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+ PHRkIGNsYXNzPSJsYmxvY2siPiAgICAgNC40LiAgTW9iaWxlIGJhY2staGF1bCBuZXR3b3JrIHNl cnZpY2UgZGVwbG95bWVudCAuIC4gLiAuIC4gLiAuICAgPHNwYW4gY2xhc3M9ImRlbGV0ZSI+Nzwv c3Bhbj48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+ICAgICA0LjQuICBNb2JpbGUg YmFjay1oYXVsIG5ldHdvcmsgc2VydmljZSBkZXBsb3ltZW50IC4gLiAuIC4gLiAuIC4gICA8c3Bh biBjbGFzcz0iaW5zZXJ0Ij44PC9zcGFuPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0i dG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9w Ij48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgICA0LjUuICBFeHBsaWNpdCByb3V0aW5nIHBvbGlj eSAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gICA5PC90ZD48dGQ+IDwvdGQ+PHRk IGNsYXNzPSJyaWdodCI+ICAgICA0LjUuICBFeHBsaWNpdCByb3V0aW5nIHBvbGljeSAuIC4gLiAu IC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gICA5PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFs aWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQ+PGEgbmFtZT0iZGlmZjAwMTAiPjwv YT48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48 L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj4gICA1LiAgU2VjdXJpdHkgQ29uc2lkZXJhdGlvbnMgLiAu IC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAgPHNwYW4gY2xhc3M9ImRlbGV0ZSI+ MTA8L3NwYW4+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPiAgIDUuICBTZWN1cml0 eSBDb25zaWRlcmF0aW9ucyAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuICA8 c3BhbiBjbGFzcz0iaW5zZXJ0Ij4xMTwvc3Bhbj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxp Z249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249 InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+ICAgNi4gIElBTkEgQ29uc2lkZXJhdGlvbnMg LiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gIDxzcGFuIGNsYXNzPSJk ZWxldGUiPjEwPC9zcGFuPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj4gICA2LiAg PHNwYW4gY2xhc3M9Imluc2VydCI+T3BlcmF0aW9uYWwgQ29uc2lkZXJhdGlvbnMgIC4gLiAuIC4g LiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAgMTE8L3NwYW4+PC90ZD48dGQgY2xhc3M9ImxpbmVu byIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIg dmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPjxzcGFuIGNsYXNzPSJkZWxldGUi PiAgIDcuPC9zcGFuPiAgQ29udHJpYnV0b3JzICAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4g LiAuIC4gLiAuIC4gLiAuIC4gLiAgPHNwYW4gY2xhc3M9ImRlbGV0ZSI+MTA8L3NwYW4+PC90ZD48 dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPjxzcGFuIGNsYXNzPSJpbnNlcnQiPiAgIDcuICBN YW5hZ2VhYmlsaXR5IENvbnNpZGVyYXRpb25zICAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4g LiAuICAxMjwvc3Bhbj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48 L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQg Y2xhc3M9ImxibG9jayI+PHNwYW4gY2xhc3M9ImRlbGV0ZSI+ICAgOC48L3NwYW4+ICBBY2tub3ds ZWRnZW1lbnRzICAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuICA8 c3BhbiBjbGFzcz0iZGVsZXRlIj4xMDwvc3Bhbj48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJi bG9jayI+PHNwYW4gY2xhc3M9Imluc2VydCI+ICAgOC48L3NwYW4+ICBJQU5BIENvbnNpZGVyYXRp b25zIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuICA8c3BhbiBjbGFz cz0iaW5zZXJ0Ij4xMjwvc3Bhbj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+ PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90 ZD48dGQgY2xhc3M9ImxibG9jayI+PHNwYW4gY2xhc3M9ImRlbGV0ZSI+ICAgOS48L3NwYW4+ICBS ZWZlcmVuY2VzICAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4g LiAuICA8c3BhbiBjbGFzcz0iZGVsZXRlIj4xMDwvc3Bhbj48L3RkPjx0ZD4gPC90ZD48dGQgY2xh c3M9InJibG9jayI+PHNwYW4gY2xhc3M9Imluc2VydCI+ICAgOS48L3NwYW4+ICBDb250cmlidXRv cnMgIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuICA8c3Bh biBjbGFzcz0iaW5zZXJ0Ij4xMjwvc3Bhbj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249 InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRv cCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+PHNwYW4gY2xhc3M9ImRlbGV0ZSI+ICAgICA5LjEu PC9zcGFuPiAgTm9ybWF0aXZlIFJlZmVyZW5jZXMgIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4g LiAuIC4gLiAuICA8c3BhbiBjbGFzcz0iZGVsZXRlIj4xMDwvc3Bhbj48L3RkPjx0ZD4gPC90ZD48 dGQgY2xhc3M9InJibG9jayI+PHNwYW4gY2xhc3M9Imluc2VydCI+ICAgMTAuPC9zcGFuPiBBY2tu b3dsZWRnZW1lbnRzICAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAu ICA8c3BhbiBjbGFzcz0iaW5zZXJ0Ij4xMjwvc3Bhbj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2 YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxp Z249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+PHNwYW4gY2xhc3M9ImRlbGV0ZSI+ICAg ICA5LjIuPC9zcGFuPiAgSW5mb3JtYXRpdmUgUmVmZXJlbmNlcyAgLiAuIC4gLiAuIC4gLiAuIC4g LiAuIC4gLiAuIC4gLiAuICA8c3BhbiBjbGFzcz0iZGVsZXRlIj4xMTwvc3Bhbj48L3RkPjx0ZD4g PC90ZD48dGQgY2xhc3M9InJibG9jayI+PHNwYW4gY2xhc3M9Imluc2VydCI+ICAgMTEuPC9zcGFu PiBSZWZlcmVuY2VzICAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAu IC4gLiAuICA8c3BhbiBjbGFzcz0iaW5zZXJ0Ij4xMjwvc3Bhbj48L3RkPjx0ZCBjbGFzcz0ibGlu ZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5v IiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+ICAgQXV0aG9ycycgQWRkcmVz c2VzICAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gIDxzcGFu IGNsYXNzPSJkZWxldGUiPjExPC9zcGFuPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2Nr Ij48c3BhbiBjbGFzcz0iaW5zZXJ0Ij4gICAgIDExLjEuPC9zcGFuPiAgTm9ybWF0aXZlIFJlZmVy ZW5jZXMgLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gIDxzcGFuIGNsYXNzPSJp bnNlcnQiPjEyPC9zcGFuPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3Rk PjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0 ZCBjbGFzcz0ibGJsb2NrIj48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+PHNwYW4g Y2xhc3M9Imluc2VydCI+ICAgICAxMS4yLjwvc3Bhbj4gIEluZm9ybWF0aXZlIFJlZmVyZW5jZXMg LiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuICA8c3BhbiBjbGFzcz0iaW5zZXJ0Ij4x Mzwvc3Bhbj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0K ICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9 ImxibG9jayI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPiAgIEF1dGhvcnMnIEFk ZHJlc3NlcyAgLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuICA8 c3BhbiBjbGFzcz0iaW5zZXJ0Ij4xNDwvc3Bhbj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxp Z249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249 InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmln aHQiPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAg ICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVm dCI+MS4gIEludHJvZHVjdGlvbjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPjEuICBJ bnRyb2R1Y3Rpb248L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3Ry Pg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xh c3M9ImxlZnQiPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPjwvdGQ+PHRkIGNsYXNz PSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJs aW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgSXQgaXMgdXNlZnVs IHRvIGFzc2lnbiBhIHBlci1ub2RlIGFkbWluaXN0cmF0aXZlIHRhZyB0byBhIHJvdXRlciBpbjwv dGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIEl0IGlzIHVzZWZ1bCB0byBhc3NpZ24g YSBwZXItbm9kZSBhZG1pbmlzdHJhdGl2ZSB0YWcgdG8gYSByb3V0ZXIgaW48L3RkPjx0ZCBjbGFz cz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0i bGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIHRoZSBPU1BGIGRv bWFpbiBhbmQgdXNlIGl0IGFzIGFuIGF0dHJpYnV0ZSBhc3NvY2lhdGVkIHdpdGggdGhlIG5vZGUu PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgdGhlIE9TUEYgZG9tYWluIGFuZCB1 c2UgaXQgYXMgYW4gYXR0cmlidXRlIGFzc29jaWF0ZWQgd2l0aCB0aGUgbm9kZS48L3RkPjx0ZCBj bGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFz cz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIFRoZSBwZXIt bm9kZSBhZG1pbmlzdHJhdGl2ZSB0YWcgY2FuIGJlIHVzZWQgaW4gdmFyaWV0eSBvZjwvdGQ+PHRk PiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIFRoZSBwZXItbm9kZSBhZG1pbmlzdHJhdGl2ZSB0 YWcgY2FuIGJlIHVzZWQgaW4gdmFyaWV0eSBvZjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGln bj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkPjxhIG5hbWU9ImRpZmYwMDExIj48L2E+ PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90 ZD48dGQgY2xhc3M9ImxibG9jayI+ICAgYXBwbGljYXRpb25zLCBmb3IgPHNwYW4gY2xhc3M9ImRl bGV0ZSI+ZXg6IC08L3NwYW4+IFRyYWZmaWMtZW5naW5lZXJpbmcgYXBwbGljYXRpb25zIHRvIHBy b3ZpZGU8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+ICAgYXBwbGljYXRpb25zLCBm b3IgPHNwYW4gY2xhc3M9Imluc2VydCI+ZXhhbXBsZTo8L3NwYW4+PC90ZD48dGQgY2xhc3M9Imxp bmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVu byIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPiAgIGRpZmZlcmVudCA8c3Bh biBjbGFzcz0iZGVsZXRlIj5wYXRoLXNlbGVjdGlvbiBjcml0ZXJpYSwgLTwvc3Bhbj4gUHJlZmVy IG9yIHBydW5lIGNlcnRhaW4gcGF0aHMgaW48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9j ayI+PHNwYW4gY2xhc3M9Imluc2VydCI+PC9zcGFuPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZh bGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGln bj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj4gICBMb29wIEZyZWUgQWx0ZXJuYXRlIChM RkEpIGJhY2t1cCBzZWxlY3Rpb24gdmlhIGxvY2FsIDxzcGFuIGNsYXNzPSJkZWxldGUiPnBvbGlj aWVzLjwvc3Bhbj48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+PHNwYW4gY2xhc3M9 Imluc2VydCI+ICAgKGEpPC9zcGFuPiAgVHJhZmZpYy1lbmdpbmVlcmluZyBhcHBsaWNhdGlvbnMg dG8gcHJvdmlkZSBkaWZmZXJlbnQgPHNwYW4gY2xhc3M9Imluc2VydCI+cGF0aC08L3NwYW4+PC90 ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48 dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPjwv dGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48c3BhbiBjbGFzcz0iaW5zZXJ0Ij4gICAg ICAgc2VsZWN0aW9uIGNyaXRlcmlhLjwvc3Bhbj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxp Z249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249 InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJy YmxvY2siPjxzcGFuIGNsYXNzPSJpbnNlcnQiPjwvc3Bhbj48L3RkPjx0ZCBjbGFzcz0ibGluZW5v IiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2 YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNs YXNzPSJyYmxvY2siPjxzcGFuIGNsYXNzPSJpbnNlcnQiPiAgIChiKTwvc3Bhbj4gIFByZWZlciBv ciBwcnVuZSBjZXJ0YWluIHBhdGhzIGluIExvb3AgRnJlZSBBbHRlcm5hdGUgKExGQSk8L3RkPjx0 ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBj bGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+PC90ZD48 dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPiAgICAgICBiYWNrdXAgc2VsZWN0aW9uIHZpYSBs b2NhbCA8c3BhbiBjbGFzcz0iaW5zZXJ0Ij5wb2xpY2llcyBhcyBkZWZpbmVkIGluPC9zcGFuPjwv dGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+ PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48 L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+PHNwYW4gY2xhc3M9Imluc2VydCI+ICAg ICAgIFtJLUQuaWV0Zi1ydGd3Zy1sZmEtbWFuYWdlYWJpbGl0eV0uPC9zcGFuPjwvdGQ+PHRkIGNs YXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNz PSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+PC90ZD48dGQ+IDwv dGQ+PHRkIGNsYXNzPSJyaWdodCI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3Ai PjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwv dGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBUaGlzIGRvY3VtZW50IHByb3ZpZGVzIG1lY2hhbmlzbXMg dG8gYWR2ZXJ0aXNlIHBlci1ub2RlPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAg VGhpcyBkb2N1bWVudCBwcm92aWRlcyBtZWNoYW5pc21zIHRvIGFkdmVydGlzZSBwZXItbm9kZTwv dGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+ PHRkPjxhIG5hbWU9ImRpZmYwMDEyIj48L2E+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFz cz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+ICAgYWRtaW5p c3RyYXRpdmUgdGFncyBpbiA8c3BhbiBjbGFzcz0iZGVsZXRlIj5PU1BGLiAgUGF0aDwvc3Bhbj4g c2VsZWN0aW9uIDxzcGFuIGNsYXNzPSJkZWxldGUiPmlzIGEgZnVuY3Rpb25hbCBzZXQ8L3NwYW4+ PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPiAgIGFkbWluaXN0cmF0aXZlIHRhZ3Mg aW4gPHNwYW4gY2xhc3M9Imluc2VydCI+T1NQRiBmb3Igcm91dGUgYW5kIHBhdGggc2VsZWN0aW9u LiAgUm91dGUgYW5kPC9zcGFuPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48 L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3Rk Pjx0ZCBjbGFzcz0ibGJsb2NrIj48c3BhbiBjbGFzcz0iZGVsZXRlIj4gICB3aGljaDwvc3Bhbj4g YXBwbGllcyBib3RoIHRvIFRFIGFuZCA8c3BhbiBjbGFzcz0iZGVsZXRlIj5ub24tVEU8L3NwYW4+ IGFwcGxpY2F0aW9ucyBhbmQgaGVuY2UgbmV3IFRMVjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0i cmJsb2NrIj48c3BhbiBjbGFzcz0iaW5zZXJ0Ij4gICBwYXRoPC9zcGFuPiBzZWxlY3Rpb24gPHNw YW4gY2xhc3M9Imluc2VydCI+ZnVuY3Rpb25hbGl0eTwvc3Bhbj4gYXBwbGllcyA8c3BhbiBjbGFz cz0iaW5zZXJ0Ij50bzwvc3Bhbj4gYm90aCB0byBURSBhbmQgPHNwYW4gY2xhc3M9Imluc2VydCI+ bm9uIFRyYWZmaWM8L3NwYW4+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwv dGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+ PHRkIGNsYXNzPSJsYmxvY2siPiAgIGZvciBjYXJyeWluZyBwZXItbm9kZSBhZG1pbmlzdHJhdGl2 ZSB0YWdzIGlzIGluY2x1ZGVkIGluIFJvdXRlcjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJs b2NrIj48c3BhbiBjbGFzcz0iaW5zZXJ0Ij4gICBFbmdpbmVlcmluZyAoVEUpPC9zcGFuPiBhcHBs aWNhdGlvbnMgYW5kIGhlbmNlIG5ldyBUTFYgZm9yIGNhcnJ5aW5nIHBlci1ub2RlPC90ZD48dGQg Y2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xh c3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPiAgIEluZm9y bWF0aW9uIDxzcGFuIGNsYXNzPSJkZWxldGUiPkxTQSBbUkZDNDk3MF0gLjwvc3Bhbj48L3RkPjx0 ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+ICAgYWRtaW5pc3RyYXRpdmUgdGFncyBpcyBpbmNs dWRlZCBpbiBSb3V0ZXIgSW5mb3JtYXRpb24gPHNwYW4gY2xhc3M9Imluc2VydCI+KFJJKSBMaW5r IFN0YXRlPC9zcGFuPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwv dHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBj bGFzcz0ibGJsb2NrIj48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+PHNwYW4gY2xh c3M9Imluc2VydCI+ICAgQWR2ZXJ0aXNlbWVudCAoTFNBKSBbUkZDNDk3MF0uPC9zcGFuPjwvdGQ+ PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRk IGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+PC90ZD48 dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWdu PSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0 b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4yLiAgQWRtaW5pc3RyYXRpdmUgVGFnIFRMVjwvdGQ+ PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPjIuICBBZG1pbmlzdHJhdGl2ZSBUYWcgVExWPC90 ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48 dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij48L3Rk Pjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxp Z249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249 InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIEFuIGFkbWluaXN0cmF0aXZlIFRhZyBpcyBh IDMyLWJpdCBpbnRlZ2VyIHZhbHVlIHRoYXQgY2FuIGJlIHVzZWQgdG88L3RkPjx0ZD4gPC90ZD48 dGQgY2xhc3M9InJpZ2h0Ij4gICBBbiBhZG1pbmlzdHJhdGl2ZSBUYWcgaXMgYSAzMi1iaXQgaW50 ZWdlciB2YWx1ZSB0aGF0IGNhbiBiZSB1c2VkIHRvPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFs aWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWdu PSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBpZGVudGlmeSBhIGdyb3VwIG9mIG5vZGVz IGluIHRoZSBPU1BGIGRvbWFpbi48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBp ZGVudGlmeSBhIGdyb3VwIG9mIG5vZGVzIGluIHRoZSBPU1BGIGRvbWFpbi48L3RkPjx0ZCBjbGFz cz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0i bGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPjwvdGQ+PHRkPiA8L3Rk Pjx0ZCBjbGFzcz0icmlnaHQiPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48 L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3Rk Pjx0ZCBjbGFzcz0ibGVmdCI+ICAgVGhlIG5ldyBUTFYgZGVmaW5lZCB3aWxsIGJlIGNhcnJpZWQg d2l0aGluIGFuIFJJIExTQSBmb3IgT1NQRlYyIGFuZDwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0i cmlnaHQiPiAgIFRoZSBuZXcgVExWIGRlZmluZWQgd2lsbCBiZSBjYXJyaWVkIHdpdGhpbiBhbiBS SSBMU0EgZm9yIE9TUEZWMiBhbmQ8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+ PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZD48YSBuYW1lPSJkaWZmMDAxMyI+PC9hPjwvdGQ+PC90 cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNs YXNzPSJsYmxvY2siPiAgIE9TUEZWMy4gIFJvdXRlciBpbmZvcm1hdGlvbiA8c3BhbiBjbGFzcz0i ZGVsZXRlIj5MU0E8L3NwYW4+IFtSRkM0OTcwXSBjYW4gaGF2ZSA8c3BhbiBjbGFzcz0iZGVsZXRl Ij5saW5rLCBhcmVhPC9zcGFuPiBvciA8c3BhbiBjbGFzcz0iZGVsZXRlIj5BUzwvc3Bhbj48L3Rk Pjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+ICAgT1NQRlYzLiAgUm91dGVyIGluZm9ybWF0 aW9uIDxzcGFuIGNsYXNzPSJpbnNlcnQiPihSSSlMU0E8L3NwYW4+IFtSRkM0OTcwXSBjYW4gaGF2 ZSA8c3BhbiBjbGFzcz0iaW5zZXJ0Ij5saW5rLSwgYXJlYS08L3NwYW4+PC90ZD48dGQgY2xhc3M9 ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9Imxp bmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPiAgIGxldmVsIGZsb29k aW5nIHNjb3BlLiAgPHNwYW4gY2xhc3M9ImRlbGV0ZSI+Q2hvb3NpbmcgdGhlIGZsb29kaW5nPC9z cGFuPiBzY29wZSB0byBmbG9vZCB0aGUgZ3JvdXA8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJi bG9jayI+ICAgb3IgPHNwYW4gY2xhc3M9Imluc2VydCI+QXV0b25vbW91cyBTeXRlbSAoQVMpPC9z cGFuPiBsZXZlbCBmbG9vZGluZyBzY29wZS4gIDxzcGFuIGNsYXNzPSJpbnNlcnQiPlRoZSBjaG9p Y2Ugb2Ygd2hhdDwvc3Bhbj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90 ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48 dGQgY2xhc3M9ImxibG9jayI+ICAgdGFncyA8c3BhbiBjbGFzcz0iZGVsZXRlIj5hcmUgZGVmaW5l ZCBieSB0aGUgcG9saWNpZXMgYW5kPC9zcGFuPiBpcyBhIGxvY2FsIDxzcGFuIGNsYXNzPSJkZWxl dGUiPm1hdHRlci48L3NwYW4+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPiAgIHNj b3BlIDxzcGFuIGNsYXNzPSJpbnNlcnQiPmF0IHdoaWNoPC9zcGFuPiB0byBmbG9vZCB0aGUgZ3Jv dXAgdGFncyBpcyBhIDxzcGFuIGNsYXNzPSJpbnNlcnQiPm1hdHRlciBvZjwvc3Bhbj4gbG9jYWwg PHNwYW4gY2xhc3M9Imluc2VydCI+cG9saWN5Lkl0PC9zcGFuPjwvdGQ+PHRkIGNsYXNzPSJsaW5l bm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8i IHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48L3RkPjx0ZD4gPC90ZD48dGQg Y2xhc3M9InJibG9jayI+PHNwYW4gY2xhc3M9Imluc2VydCI+ICAgaXMgZXhwZWN0ZWQgdGhhdCBu b2RlIGFkbWluaXN0cmF0aXZlIHRhZyB2YWx1ZXMgd2lsbCBub3QgYmUgcG9ydGFibGU8L3NwYW4+ PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0 cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2si PjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48c3BhbiBjbGFzcz0iaW5zZXJ0Ij4g ICBhY3Jvc3MgYWRtaW5pc3RyYXRpdmUgZG9tYWlucy48L3NwYW4+PC90ZD48dGQgY2xhc3M9Imxp bmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVu byIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij48L3RkPjx0ZD4gPC90ZD48dGQg Y2xhc3M9InJpZ2h0Ij48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48 L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQg Y2xhc3M9ImxlZnQiPiAgIFRoZSBUTFYgc3BlY2lmaWVzIG9uZSBvciBtb3JlIGFkbWluaXN0cmF0 aXZlIHRhZyB2YWx1ZXMuICBBbiBPU1BGPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ ICAgVGhlIFRMViBzcGVjaWZpZXMgb25lIG9yIG1vcmUgYWRtaW5pc3RyYXRpdmUgdGFnIHZhbHVl cy4gIEFuIE9TUEY8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3Ry Pg0KICAgICAgPHRyPjx0ZD48YSBuYW1lPSJkaWZmMDAxNCI+PC9hPjwvdGQ+PC90cj4NCiAgICAg IDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxv Y2siPiAgIG5vZGUgYWR2ZXJ0aXNlcyB0aGUgc2V0IG9mIGdyb3VwcyBpdCBpcyBwYXJ0IG9mIGlu IHRoZSBPU1BGIGRvbWFpbjxzcGFuIGNsYXNzPSJkZWxldGUiPi48L3NwYW4+PC90ZD48dGQ+IDwv dGQ+PHRkIGNsYXNzPSJyYmxvY2siPiAgIG5vZGUgYWR2ZXJ0aXNlcyB0aGUgc2V0IG9mIGdyb3Vw cyBpdCBpcyBwYXJ0IG9mIGluIHRoZSBPU1BGIGRvbWFpbjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8i IHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZh bGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgKGZvciBleGFtcGxlLCBhbGwgUEUt bm9kZXMgYXJlIGNvbmZpZ3VyZWQgd2l0aCBjZXJ0YWluIHRhZyB2YWx1ZSwgYWxsPC90ZD48dGQ+ IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgKGZvciBleGFtcGxlLCBhbGwgUEUtbm9kZXMgYXJl IGNvbmZpZ3VyZWQgd2l0aCBjZXJ0YWluIHRhZyB2YWx1ZSwgYWxsPC90ZD48dGQgY2xhc3M9Imxp bmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVu byIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBQLW5vZGVzIGFyZSBjb25m aWd1cmVkIHdpdGggYSBkaWZmZXJlbnQgdGFnIHZhbHVlIGluIHRoZSBkb21haW4pLjwvdGQ+PHRk PiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIFAtbm9kZXMgYXJlIGNvbmZpZ3VyZWQgd2l0aCBh IGRpZmZlcmVudCB0YWcgdmFsdWUgaW4gdGhlIGRvbWFpbikuPC90ZD48dGQgY2xhc3M9ImxpbmVu byIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIg dmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBNdWx0aXBsZSBUTFZzIE1BWSBi ZSBhZGRlZCBpbiBzYW1lIFJJLUxTQSBvciBpbiBhIGRpZmZlcmVudCBpbnN0YW5jZTwvdGQ+PHRk PiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIE11bHRpcGxlIFRMVnMgTUFZIGJlIGFkZGVkIGlu IHNhbWUgUkktTFNBIG9yIGluIGEgZGlmZmVyZW50IGluc3RhbmNlPC90ZD48dGQgY2xhc3M9Imxp bmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVu byIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBvZiB0aGUgUkkgTFNBIGFz IGRlZmluZWQgaW4gW0ktRC5hY2VlLW9zcGYtcmZjNDk3MGJpc10uPC90ZD48dGQ+IDwvdGQ+PHRk IGNsYXNzPSJyaWdodCI+ICAgb2YgdGhlIFJJIExTQSBhcyBkZWZpbmVkIGluIFtJLUQuYWNlZS1v c3BmLXJmYzQ5NzBiaXNdLjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3Rk PjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0 ZCBjbGFzcz0ibGVmdCI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+PC90ZD48dGQg Y2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xh c3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4zLiAgT1NQRiBw ZXItbm9kZSBhZG1pbmlzdHJhdGl2ZSB0YWcgVExWPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJy aWdodCI+My4gIE9TUEYgcGVyLW5vZGUgYWRtaW5pc3RyYXRpdmUgdGFnIFRMVjwvdGQ+PHRkIGNs YXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNz PSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+PC90ZD48dGQ+IDwv dGQ+PHRkIGNsYXNzPSJyaWdodCI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3Ai PjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwv dGQ+PHRkIGNsYXNzPSJsZWZ0Ij4zLjEuICBUTFYgZm9ybWF0PC90ZD48dGQ+IDwvdGQ+PHRkIGNs YXNzPSJyaWdodCI+My4xLiAgVExWIGZvcm1hdDwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGln bj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0i dG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdo dCI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAg IDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0 Ij4gICBbUkZDNDk3MF0sIGRlZmluZXMgUm91dGVyIEluZm9ybWF0aW9uIChSSSkgTFNBIHdoaWNo IG1heSBiZSB1c2VkIHRvPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgW1JGQzQ5 NzBdLCBkZWZpbmVzIFJvdXRlciBJbmZvcm1hdGlvbiAoUkkpIExTQSB3aGljaCBtYXkgYmUgdXNl ZCB0bzwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAg ICA8dHI+PHRkPjxhIG5hbWU9ImRpZmYwMDE1Ij48L2E+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0 ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+ICAg YWR2ZXJ0aXNlIHByb3BlcnRpZXMgb2YgdGhlIG9yaWdpbmF0aW5nIHJvdXRlci4gIDxzcGFuIGNs YXNzPSJkZWxldGUiPlBheWxvYWQ8L3NwYW4+IG9mIHRoZSBSSTwvdGQ+PHRkPiA8L3RkPjx0ZCBj bGFzcz0icmJsb2NrIj4gICBhZHZlcnRpc2UgcHJvcGVydGllcyBvZiB0aGUgb3JpZ2luYXRpbmcg cm91dGVyLiAgPHNwYW4gY2xhc3M9Imluc2VydCI+VGhlIHBheWxvYWQ8L3NwYW4+IG9mIHRoZTwv dGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+ PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj4g ICBMU0EgY29uc2lzdHMgb2Ygb25lIG9yIG1vcmUgbmVzdGVkIFR5cGUvTGVuZ3RoL1ZhbHVlIChU TFYpIHRyaXBsZXRzLjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj4gICBSSSBMU0Eg Y29uc2lzdHMgb2Ygb25lIG9yIG1vcmUgbmVzdGVkIFR5cGUvTGVuZ3RoL1ZhbHVlIChUTFYpPC90 ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48 dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPiAg IE5vZGUgYWRtaW5pc3RyYXRpdmUgdGFncyBhcmUgYWR2ZXJ0aXNlZCBpbiB0aGUgTm9kZSBBZG1p bmlzdHJhdGl2ZTwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj4gICB0cmlwbGV0cy4g IE5vZGUgYWRtaW5pc3RyYXRpdmUgdGFncyBhcmUgYWR2ZXJ0aXNlZCBpbiB0aGUgTm9kZTwvdGQ+ PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRk IGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj4gICBU YWcgVExWLiAgVGhlIGZvcm1hdCBvZiBOb2RlIEFkbWluaXN0cmF0aXZlIFRhZyBUTFYgaXM6PC90 ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPiAgIEFkbWluaXN0cmF0aXZlIFRhZyBUTFYu ICBUaGUgZm9ybWF0IG9mIDxzcGFuIGNsYXNzPSJpbnNlcnQiPnRoZTwvc3Bhbj4gTm9kZSBBZG1p bmlzdHJhdGl2ZSBUYWc8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48 L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQg Y2xhc3M9ImxibG9jayI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPiAgIFRMViBp czo8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAg PHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQi PjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8i IHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZh bGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgMCAgICAgICAgICAgICAgIDEgICAg ICAgICAgICAgMiAgICAgICAgICAgICAzPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ ICAgMCAgICAgICAgICAgICAgIDEgICAgICAgICAgICAgMiAgICAgICAgICAgICAzPC90ZD48dGQg Y2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xh c3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICAwIDEgMiAz IDQgNSA2IDcgOCA5IDAgMSAyIDMgNCA1IDYgNyA4IDkgMCAxIDIgMyA0IDUgNiA3IDggOSAwIDE8 L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICAwIDEgMiAzIDQgNSA2IDcgOCA5IDAg MSAyIDMgNCA1IDYgNyA4IDkgMCAxIDIgMyA0IDUgNiA3IDggOSAwIDE8L3RkPjx0ZCBjbGFzcz0i bGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGlu ZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgICstKy0rLSstKy0rLSst Ky0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rPC90ZD48 dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0r LSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSs8L3RkPjx0ZCBjbGFzcz0ibGlu ZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5v IiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIHwgVHlwZSAgICAgICAgICAg ICAgICAgICAgICAgIHwgTGVuZ3RoICAgICAgICAgICAgICAgICAgICAgICAgICB8PC90ZD48dGQ+ IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgfCBUeXBlICAgICAgICAgICAgICAgICAgICAgICAg fCBMZW5ndGggICAgICAgICAgICAgICAgICAgICAgICAgIHw8L3RkPjx0ZCBjbGFzcz0ibGluZW5v IiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2 YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgICstKy0rLSstKy0rLSstKy0rLSst Ky0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rPC90ZD48dGQ+IDwv dGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0r LSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSs8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2 YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxp Z249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIHwgICAgICAgICAgICAgICAgICAgQWRt aW5pc3RyYXRpdmUgVGFnICMxICAgICAgICAgICAgICAgICAgICAgICB8PC90ZD48dGQ+IDwvdGQ+ PHRkIGNsYXNzPSJyaWdodCI+ICAgfCAgICAgICAgICAgICAgICAgICBBZG1pbmlzdHJhdGl2ZSBU YWcgIzEgICAgICAgICAgICAgICAgICAgICAgIHw8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxp Z249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249 InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgICstKy0rLSstKy0rLSstKy0rLSstKy0rLSst Ky0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rPC90ZD48dGQ+IDwvdGQ+PHRk IGNsYXNzPSJyaWdodCI+ICAgKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0r LSstKy0rLSstKy0rLSstKy0rLSstKy0rLSs8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249 InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRv cCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIHwgICAgICAgICAgICAgICAgICAgQWRtaW5pc3Ry YXRpdmUgVGFnICMyICAgICAgICAgICAgICAgICAgICAgICB8PC90ZD48dGQ+IDwvdGQ+PHRkIGNs YXNzPSJyaWdodCI+ICAgfCAgICAgICAgICAgICAgICAgICBBZG1pbmlzdHJhdGl2ZSBUYWcgIzIg ICAgICAgICAgICAgICAgICAgICAgIHw8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRv cCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+ PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgICstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSst Ky0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNz PSJyaWdodCI+ICAgKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0r LSstKy0rLSstKy0rLSstKy0rLSs8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+ PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0i bGVmdCI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+PC90ZD48dGQgY2xhc3M9Imxp bmVubyI+PC90ZD48L3RyPg0KICAgICAgPHRyIGJnY29sb3I9ImdyYXkiPjx0ZD48L3RkPjx0aD48 YSBuYW1lPSJwYXJ0LWw0Ij48c21hbGw+c2tpcHBpbmcgdG8gY2hhbmdlIGF0PC9zbWFsbD48ZW0+ IHBhZ2UgNCwgbGluZSAyNzwvZW0+PC9hPjwvdGg+PHRoPiA8L3RoPjx0aD48YSBuYW1lPSJwYXJ0 LXI0Ij48c21hbGw+c2tpcHBpbmcgdG8gY2hhbmdlIGF0PC9zbWFsbD48ZW0+IHBhZ2UgNCwgbGlu ZSAyOTwvZW0+PC9hPjwvdGg+PHRkPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9Imxp bmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICArLSstKy0rLSstKy0r LSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKzwvdGQ+ PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgICstKy0rLSstKy0rLSstKy0rLSstKy0rLSst Ky0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rPC90ZD48dGQgY2xhc3M9Imxp bmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVu byIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij48L3RkPjx0ZD4gPC90ZD48dGQg Y2xhc3M9InJpZ2h0Ij48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48 L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQg Y2xhc3M9ImxlZnQiPiAgICAgICAgICAgICAgRmlndXJlIDE6IE9TUEYgcGVyLW5vZGUgQWRtaW5p c3RyYXRpdmUgVGFnIFRMVjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgICAgICAg ICAgICAgRmlndXJlIDE6IE9TUEYgcGVyLW5vZGUgQWRtaW5pc3RyYXRpdmUgVGFnIFRMVjwvdGQ+ PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRk IGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+PC90ZD48 dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWdu PSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0 b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBUeXBlIDogVEJBLCBTdWdnZXN0ZWQgdmFsdWUg MTA8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBUeXBlIDogVEJBLCBTdWdnZXN0 ZWQgdmFsdWUgMTA8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3Ry Pg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xh c3M9ImxlZnQiPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPjwvdGQ+PHRkIGNsYXNz PSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJs aW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgTGVuZ3RoOiBBIDE2 LWJpdCBmaWVsZCB0aGF0IGluZGljYXRlcyB0aGUgbGVuZ3RoIG9mIHRoZSB2YWx1ZSBwb3J0aW9u PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgTGVuZ3RoOiBBIDE2LWJpdCBmaWVs ZCB0aGF0IGluZGljYXRlcyB0aGUgbGVuZ3RoIG9mIHRoZSB2YWx1ZSBwb3J0aW9uPC90ZD48dGQg Y2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xh c3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBpbiBvY3Rl dHMgYW5kIHdpbGwgYmUgYSBtdWx0aXBsZSBvZiA0IG9jdGV0cyBkZXBlbmRlbnQgb24gdGhlIG51 bWJlcjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIGluIG9jdGV0cyBhbmQgd2ls bCBiZSBhIG11bHRpcGxlIG9mIDQgb2N0ZXRzIGRlcGVuZGVudCBvbiB0aGUgbnVtYmVyPC90ZD48 dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQg Y2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBvZiB0 YWdzIGFkdmVydGlzZWQuPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgb2YgdGFn cyBhZHZlcnRpc2VkLjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwv dHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBj bGFzcz0ibGVmdCI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+PC90ZD48dGQgY2xh c3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQ+PGEgbmFt ZT0iZGlmZjAwMTYiPjwvYT48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8i IHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj4gICBWYWx1ZTogQSBzZXF1ZW5j ZSBvZiBtdWx0aXBsZSA8c3BhbiBjbGFzcz0iZGVsZXRlIj40PC9zcGFuPiBvY3RldHMgZGVmaW5p bmcgdGhlIGFkbWluaXN0cmF0aXZlPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPiAg IFZhbHVlOiBBIHNlcXVlbmNlIG9mIG11bHRpcGxlIDxzcGFuIGNsYXNzPSJpbnNlcnQiPmZvdXI8 L3NwYW4+IG9jdGV0cyBkZWZpbmluZyB0aGUgYWRtaW5pc3RyYXRpdmU8L3RkPjx0ZCBjbGFzcz0i bGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGlu ZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIHRhZ3MuICBBdCBsZWFz dCBvbmUgdGFnIE1VU1QgYmUgY2FycmllZCBpZiB0aGlzIFRMViBpcyBpbmNsdWRlZCBpbjwvdGQ+ PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIHRhZ3MuICBBdCBsZWFzdCBvbmUgdGFnIE1V U1QgYmUgY2FycmllZCBpZiB0aGlzIFRMViBpcyBpbmNsdWRlZCBpbjwvdGQ+PHRkIGNsYXNzPSJs aW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5l bm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgdGhlIFJJLUxTQS48L3Rk Pjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICB0aGUgUkktTFNBLjwvdGQ+PHRkIGNsYXNz PSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJs aW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+PC90ZD48dGQ+IDwvdGQ+ PHRkIGNsYXNzPSJyaWdodCI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwv dGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+ PHRkIGNsYXNzPSJsZWZ0Ij4zLjIuICBFbGVtZW50cyBvZiBwcm9jZWR1cmU8L3RkPjx0ZD4gPC90 ZD48dGQgY2xhc3M9InJpZ2h0Ij4zLjIuICBFbGVtZW50cyBvZiBwcm9jZWR1cmU8L3RkPjx0ZCBj bGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFz cz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPjwvdGQ+PHRkPiA8 L3RkPjx0ZCBjbGFzcz0icmlnaHQiPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9w Ij48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkPjxhIG5hbWU9ImRpZmYwMDE3Ij48L2E+PC90ZD48 L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQg Y2xhc3M9ImxibG9jayI+ICAgPHNwYW4gY2xhc3M9ImRlbGV0ZSI+TWVhbmluZzwvc3Bhbj4gb2Yg dGhlIE5vZGUgYWRtaW5pc3RyYXRpdmUgdGFncyBpcyBnZW5lcmFsbHkgb3BhcXVlIHRvIE9TUEYu PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPjxzcGFuIGNsYXNzPSJpbnNlcnQiPjMu Mi4xLiAgSW50ZXJwcmV0YXRpb24gb2YgTm9kZSBBZG1pbmlzdHJhdGl2ZSBUYWdzPC9zcGFuPjwv dGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+ PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj4g ICA8c3BhbiBjbGFzcz0iZGVsZXRlIj5Sb3V0ZXI8L3NwYW4+IGFkdmVydGlzaW5nIHRoZSBwZXIt bm9kZSBhZG1pbmlzdHJhdGl2ZSB0YWcgKG9yIHRhZ3MpIG1heSBiZTwvdGQ+PHRkPiA8L3RkPjx0 ZCBjbGFzcz0icmJsb2NrIj48c3BhbiBjbGFzcz0iaW5zZXJ0Ij48L3NwYW4+PC90ZD48dGQgY2xh c3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9 ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPiAgIGNvbmZpZ3Vy ZWQgdG8gZG8gc28gd2l0aG91dCBrbm93aW5nIChvciBldmVuIDxzcGFuIGNsYXNzPSJkZWxldGUi PmV4cGxpY2l0bHkgc3VwcG9ydGluZyk8L3NwYW4+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJy YmxvY2siPjxzcGFuIGNsYXNzPSJpbnNlcnQiPiAgIFRoZSBtZWFuaW5nPC9zcGFuPiBvZiB0aGUg Tm9kZSBhZG1pbmlzdHJhdGl2ZSB0YWdzIGlzIGdlbmVyYWxseSBvcGFxdWUgdG88L3RkPjx0ZCBj bGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFz cz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+ICAgZnVuY3Rp b25hbGl0eSBpbXBsaWVkIGJ5IHRoZSB0YWcuPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxv Y2siPiAgIE9TUEYuICA8c3BhbiBjbGFzcz0iaW5zZXJ0Ij5Sb3V0ZXJzPC9zcGFuPiBhZHZlcnRp c2luZyB0aGUgcGVyLW5vZGUgYWRtaW5pc3RyYXRpdmUgdGFnIChvciB0YWdzKTwvdGQ+PHRkIGNs YXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNz PSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48L3RkPjx0ZD4g PC90ZD48dGQgY2xhc3M9InJibG9jayI+ICAgbWF5IGJlIGNvbmZpZ3VyZWQgdG8gZG8gc28gd2l0 aG91dCBrbm93aW5nIChvciBldmVuIDxzcGFuIGNsYXNzPSJpbnNlcnQiPndpdGhvdXQ8L3NwYW4+ PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0 cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2si PjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48c3BhbiBjbGFzcz0iaW5zZXJ0Ij4g ICBzdXBwb3J0aW5nIHByb2Nlc3Npbmcgb2YpIHRoZTwvc3Bhbj4gZnVuY3Rpb25hbGl0eSBpbXBs aWVkIGJ5IHRoZSB0YWcuPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+ PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRk IGNsYXNzPSJsZWZ0Ij48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij48L3RkPjx0ZCBj bGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFz cz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIEludGVycHJl dGF0aW9uIG9mIHRhZyB2YWx1ZXMgaXMgc3BlY2lmaWMgdG8gdGhlIGFkbWluaXN0cmF0aXZlIGRv bWFpbjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIEludGVycHJldGF0aW9uIG9m IHRhZyB2YWx1ZXMgaXMgc3BlY2lmaWMgdG8gdGhlIGFkbWluaXN0cmF0aXZlIGRvbWFpbjwvdGQ+ PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRk PjxhIG5hbWU9ImRpZmYwMDE4Ij48L2E+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0i bGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+ICAgb2YgYSBwYXJ0 aWN1bGFyIG5ldHdvcmsgPHNwYW4gY2xhc3M9ImRlbGV0ZSI+b3BlcmF0b3IuPC9zcGFuPiAgVGhl IG1lYW5pbmcgb2YgYSBwZXItbm9kZTwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj4g ICBvZiBhIHBhcnRpY3VsYXIgbmV0d29yayA8c3BhbiBjbGFzcz0iaW5zZXJ0Ij5vcGVyYXRvciwg YW5kIGhlbmNlIHRhZyB2YWx1ZXMgU0hPVUxEIE5PVCBiZTwvc3Bhbj48L3RkPjx0ZCBjbGFzcz0i bGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGlu ZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+ICAgYWRtaW5pc3RyYXRp dmUgdGFnIGlzIGRlZmluZWQgYnkgdGhlIG5ldHdvcmsgbG9jYWwgcG9saWN5IGFuZCBpczwvdGQ+ PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48c3BhbiBjbGFzcz0iaW5zZXJ0Ij4gICBwcm9w YWdhdGVkIG91dHNpZGUgdGhlIGFkbWluaXN0cmF0aXZlIGRvbWFpbiB0byB3aGljaCB0aGV5IGFw cGx5Ljwvc3Bhbj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3Ry Pg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xh c3M9ImxibG9jayI+ICAgY29udHJvbGxlZCB2aWEgdGhlIGNvbmZpZ3VyYXRpb24uICBJZiBhIHJl Y2VpdmluZyBub2RlIGRvZXMgbm90PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPiAg IFRoZSBtZWFuaW5nIG9mIGEgcGVyLW5vZGUgYWRtaW5pc3RyYXRpdmUgdGFnIGlzIGRlZmluZWQg YnkgdGhlPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAg ICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJs YmxvY2siPiAgIHVuZGVyc3RhbmQgdGhlIHRhZyA8c3BhbiBjbGFzcz0iZGVsZXRlIj52YWx1ZSw8 L3NwYW4+IGl0IGlnbm9yZXMgdGhlIHNwZWNpZmljIHRhZyBhbmQgZmxvb2RzIHRoZTwvdGQ+PHRk PiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj4gICBuZXR3b3JrIGxvY2FsIHBvbGljeSBhbmQgaXMg Y29udHJvbGxlZCB2aWEgdGhlIGNvbmZpZ3VyYXRpb24uICBJZiBhPC90ZD48dGQgY2xhc3M9Imxp bmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVu byIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPiAgIFJJIExTQSB3aXRob3V0 IGFueSBjaGFuZ2UgYXMgZGVmaW5lZCBpbiBbUkZDNDk3MF0uPC90ZD48dGQ+IDwvdGQ+PHRkIGNs YXNzPSJyYmxvY2siPiAgIHJlY2VpdmluZyBub2RlIGRvZXMgbm90IHVuZGVyc3RhbmQgdGhlIHRh ZyA8c3BhbiBjbGFzcz0iaW5zZXJ0Ij52YWx1ZSBvciBkb2VzIG5vdCBoYXZlIGE8L3NwYW4+PC90 ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48 dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPjwv dGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48c3BhbiBjbGFzcz0iaW5zZXJ0Ij4gICBs b2NhbCBwb2xpY3kgY29ycmVzcG9uZGluZyB0byB0aGUgdGFnLDwvc3Bhbj4gaXQgaWdub3JlcyB0 aGUgc3BlY2lmaWMgdGFnPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+ PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRk IGNsYXNzPSJsYmxvY2siPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj4gICBhbmQg Zmxvb2RzIHRoZSBSSSBMU0Egd2l0aG91dCBhbnkgY2hhbmdlIGFzIGRlZmluZWQgaW4gW1JGQzQ5 NzBdLjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAg ICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVm dCI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+PC90ZD48dGQgY2xhc3M9ImxpbmVu byIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIg dmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBUaGUgc2VtYW50aWNzIG9mIHRo ZSB0YWcgb3JkZXIgaGFzIG5vIG1lYW5pbmcuICBUaGF0IGlzLCB0aGVyZSBpcyBubzwvdGQ+PHRk PiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIFRoZSBzZW1hbnRpY3Mgb2YgdGhlIHRhZyBvcmRl ciBoYXMgbm8gbWVhbmluZy4gIFRoYXQgaXMsIHRoZXJlIGlzIG5vPC90ZD48dGQgY2xhc3M9Imxp bmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVu byIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBpbXBsaWVkIG1lYW5pbmcg dG8gdGhlIG9yZGVyaW5nIG9mIHRoZSB0YWdzIHRoYXQgaW5kaWNhdGVzIGEgY2VydGFpbjwvdGQ+ PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIGltcGxpZWQgbWVhbmluZyB0byB0aGUgb3Jk ZXJpbmcgb2YgdGhlIHRhZ3MgdGhhdCBpbmRpY2F0ZXMgYSBjZXJ0YWluPC90ZD48dGQgY2xhc3M9 ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9Imxp bmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBvcGVyYXRpb24gb3Ig c2V0IG9mIG9wZXJhdGlvbnMgdGhhdCBuZWVkIHRvIGJlIHBlcmZvcm1lZCBiYXNlZCBvbiB0aGU8 L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBvcGVyYXRpb24gb3Igc2V0IG9mIG9w ZXJhdGlvbnMgdGhhdCBuZWVkIHRvIGJlIHBlcmZvcm1lZCBiYXNlZCBvbiB0aGU8L3RkPjx0ZCBj bGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFz cz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIG9yZGVyaW5n LjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIG9yZGVyaW5nLjwvdGQ+PHRkIGNs YXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNz PSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+PC90ZD48dGQ+IDwv dGQ+PHRkIGNsYXNzPSJyaWdodCI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3Ai PjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQ+PGEgbmFtZT0iZGlmZjAwMTkiPjwvYT48L3RkPjwv dHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBj bGFzcz0ibGJsb2NrIj4gICBFYWNoIHRhZyA8c3BhbiBjbGFzcz0iZGVsZXRlIj5TSE9VTEQ8L3Nw YW4+IGJlIHRyZWF0ZWQgYXMgYW4gaW5kZXBlbmRlbnQgaWRlbnRpZmllciB0aGF0IE1BWSBiZTwv dGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj4gICBFYWNoIHRhZyA8c3BhbiBjbGFzcz0i aW5zZXJ0Ij5NVVNUPC9zcGFuPiBiZSB0cmVhdGVkIGFzIGFuIGluZGVwZW5kZW50IGlkZW50aWZp ZXIgdGhhdCBNQVkgYmU8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48 L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQg Y2xhc3M9ImxibG9jayI+ICAgdXNlZCBpbiBwb2xpY3kgdG8gcGVyZm9ybSBhIHBvbGljeSBhY3Rp b24uICA8c3BhbiBjbGFzcz0iZGVsZXRlIj5UYWdzPC9zcGFuPiBjYXJyaWVkIGJ5IHRoZTwvdGQ+ PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj4gICB1c2VkIGluIHBvbGljeSB0byBwZXJmb3Jt IGEgcG9saWN5IGFjdGlvbi4gIDxzcGFuIGNsYXNzPSJpbnNlcnQiPkVhY2ggdGFnPC9zcGFuPiBj YXJyaWVkIGJ5IHRoZTwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwv dHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBj bGFzcz0ibGJsb2NrIj4gICBhZG1pbmlzdHJhdGl2ZSB0YWcgVExWIFNIT1VMRCBiZSB1c2VkIHRv IGluZGljYXRlIDxzcGFuIGNsYXNzPSJkZWxldGUiPmluZGVwZW5kZW50PC9zcGFuPjwvdGQ+PHRk PiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj4gICBhZG1pbmlzdHJhdGl2ZSB0YWcgVExWIFNIT1VM RCBiZSB1c2VkIHRvIGluZGljYXRlIDxzcGFuIGNsYXNzPSJpbnNlcnQiPmEgY2hhcmFjdGVyaXN0 aWM8L3NwYW4+IG9mPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90 cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNs YXNzPSJsYmxvY2siPjxzcGFuIGNsYXNzPSJkZWxldGUiPiAgIGNoYXJhY3RlcmlzdGljczwvc3Bh bj4gb2YgYSA8c3BhbiBjbGFzcz0iZGVsZXRlIj5ub2RlLjwvc3Bhbj4gIFRoZSBhZG1pbmlzdHJh dGl2ZSB0YWcgbGlzdCB3aXRoaW4gdGhlPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2si PiAgIGEgPHNwYW4gY2xhc3M9Imluc2VydCI+bm9kZSB0aGF0IGlzIGluZGVwZW5kZW50IG9mIHRo ZSBjaGFyYWN0ZXJpc3RpY3MgaW5kaWNhdGVkIGJ5IG90aGVyPC9zcGFuPjwvdGQ+PHRkIGNsYXNz PSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJs aW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj4gICBUTFYgPHNwYW4g Y2xhc3M9ImRlbGV0ZSI+U0hPVUxEPC9zcGFuPiBiZSBjb25zaWRlcmVkIGFuIHVub3JkZXJlZCBs aXN0LiAgV2hpbHN0IHBvbGljaWVzIG1heSBiZTwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJs b2NrIj48c3BhbiBjbGFzcz0iaW5zZXJ0Ij4gICBhZG1pbmlzdHJhdGl2ZSB0YWdzLjwvc3Bhbj4g IFRoZSBhZG1pbmlzdHJhdGl2ZSB0YWcgbGlzdCB3aXRoaW4gdGhlIFRMViA8c3BhbiBjbGFzcz0i aW5zZXJ0Ij5NVVNUPC9zcGFuPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48 L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3Rk Pjx0ZCBjbGFzcz0ibGJsb2NrIj4gICBpbXBsZW1lbnRlZCBiYXNlZCBvbiB0aGUgcHJlc2VuY2Ug b2YgbXVsdGlwbGUgdGFncyAoZS5nLiwgaWYgdGFnIEE8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9 InJibG9jayI+ICAgYmUgY29uc2lkZXJlZCBhbiB1bm9yZGVyZWQgbGlzdC4gIFdoaWxzdCBwb2xp Y2llcyBtYXkgYmUgaW1wbGVtZW50ZWQ8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRv cCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+ PC90ZD48dGQgY2xhc3M9ImxibG9jayI+ICAgQU5EIHRhZyBCIGFyZSBwcmVzZW50KSwgdGhleSBN VVNUIE5PVCBiZSByZWxpYW50IHVwb24gdGhlIG9yZGVyIG9mPC90ZD48dGQ+IDwvdGQ+PHRkIGNs YXNzPSJyYmxvY2siPiAgIGJhc2VkIG9uIHRoZSBwcmVzZW5jZSBvZiBtdWx0aXBsZSB0YWdzIChl LmcuLCBpZiB0YWcgQSBBTkQgdGFnIEIgYXJlPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWdu PSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0 b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPiAgIHRoZSB0YWdzIChpLmUuLCBhbGwgcG9saWNp ZXMgc2hvdWxkIGJlIGNvbnNpZGVyZWQgY29tbXV0YXRpdmU8L3RkPjx0ZD4gPC90ZD48dGQgY2xh c3M9InJibG9jayI+ICAgcHJlc2VudCksIHRoZXkgTVVTVCBOT1QgYmUgcmVsaWFudCB1cG9uIHRo ZSBvcmRlciBvZiB0aGUgdGFncyAoaS5lLiw8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249 InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRv cCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+ICAgb3BlcmF0aW9ucywgc3VjaCB0aGF0IHRhZyBB IHByZWNlZGluZyBvciBmb2xsb3dpbmcgdGFnIEIgZG9lcyBub3Q8L3RkPjx0ZD4gPC90ZD48dGQg Y2xhc3M9InJibG9jayI+ICAgYWxsIHBvbGljaWVzIHNob3VsZCBiZSBjb25zaWRlcmVkIGNvbW11 dGF0aXZlIG9wZXJhdGlvbnMsIHN1Y2ggdGhhdDwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGln bj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0i dG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj4gICBjaGFuZ2UgdGhlaXIgb3V0Y29tZSkuPC90 ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPiAgIHRhZyBBIHByZWNlZGluZyBvciBmb2xs b3dpbmcgdGFnIEIgZG9lcyBub3QgY2hhbmdlIHRoZWlyIG91dGNvbWUpLjwvdGQ+PHRkIGNsYXNz PSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJs aW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+PC90ZD48dGQ+IDwvdGQ+ PHRkIGNsYXNzPSJyaWdodCI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwv dGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+ PHRkIGNsYXNzPSJsZWZ0Ij4gICBUbyBhdm9pZCBpbmNvbXBsZXRlIG9yIGluY29uc2lzdGVudCBp bnRlcnByZXRhdGlvbnMgb2YgdGhlIHBlci1ub2RlPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJy aWdodCI+ICAgVG8gYXZvaWQgaW5jb21wbGV0ZSBvciBpbmNvbnNpc3RlbnQgaW50ZXJwcmV0YXRp b25zIG9mIHRoZSBwZXItbm9kZTwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48 L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3Rk Pjx0ZCBjbGFzcz0ibGVmdCI+ICAgYWRtaW5pc3RyYXRpdmUgdGFncyB0aGUgc2FtZSB0YWcgdmFs dWUgTVVTVCBOT1QgYmUgYWR2ZXJ0aXNlZCBieSBhPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJy aWdodCI+ICAgYWRtaW5pc3RyYXRpdmUgdGFncyB0aGUgc2FtZSB0YWcgdmFsdWUgTVVTVCBOT1Qg YmUgYWR2ZXJ0aXNlZCBieSBhPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwv dGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+ PHRkIGNsYXNzPSJsZWZ0Ij4gICByb3V0ZXIgaW4gUkkgTFNBcyBvZiBkaWZmZXJlbnQgc2NvcGVz LiAgVGhlIHNhbWUgdGFnIE1BWSBiZTwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAg IHJvdXRlciBpbiBSSSBMU0FzIG9mIGRpZmZlcmVudCBzY29wZXMuICBUaGUgc2FtZSB0YWcgTUFZ IGJlPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAg IDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0 Ij4gICBhZHZlcnRpc2VkIGluIG11bHRpcGxlIFJJIExTQXMgb2YgdGhlIHNhbWUgc2NvcGUsIGZv ciBleGFtcGxlLCBPU1BGPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgYWR2ZXJ0 aXNlZCBpbiBtdWx0aXBsZSBSSSBMU0FzIG9mIHRoZSBzYW1lIHNjb3BlLCBmb3IgZXhhbXBsZSwg T1NQRjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAg ICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVm dCI+ICAgQXJlYSBCb3JkZXIgUm91dGVyIChBQlIpIG1heSBhZHZlcnRpc2UgdGhlIHNhbWUgdGFn IGluIGFyZWEtc2NvcGUgUkk8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBBcmVh IEJvcmRlciBSb3V0ZXIgKEFCUikgbWF5IGFkdmVydGlzZSB0aGUgc2FtZSB0YWcgaW4gYXJlYS1z Y29wZSBSSTwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQog ICAgICA8dHI+PHRkPjxhIG5hbWU9ImRpZmYwMDIwIj48L2E+PC90ZD48L3RyPg0KICAgICAgPHRy Pjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+ ICAgTFNBcyBpbiBtdWx0aXBsZSBhcmVhcyBjb25uZWN0ZWQgdG8gdGhlIEFCUi48L3RkPjx0ZD4g PC90ZD48dGQgY2xhc3M9InJibG9jayI+ICAgTFNBcyBpbiBtdWx0aXBsZSBhcmVhcyBjb25uZWN0 ZWQgdG8gdGhlIEFCUi4gIDxzcGFuIGNsYXNzPSJpbnNlcnQiPklmIGEgbm9kZTwvc3Bhbj48L3Rk Pjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0 ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+PC90 ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPjxzcGFuIGNsYXNzPSJpbnNlcnQiPiAgIGFk bWluaXN0cmF0aXZlIHRhZyBpcyByZWNlaXZlZCBpbiBkaWZmZXJlbnQgc2NvcGVzLCB0aGUgY29u ZmxpY3Rpbmc8L3NwYW4+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+ PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRk IGNsYXNzPSJsYmxvY2siPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48c3BhbiBj bGFzcz0iaW5zZXJ0Ij4gICB0YWcgU0hPVUxEIG5vdCBiZSB1c2VkIGFuZCB0aGlzIHNpdHVhdGlv biBTSE9VTEQgYmUgbG9nZ2VkIGFzIGFuPC9zcGFuPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZh bGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGln bj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9 InJibG9jayI+PHNwYW4gY2xhc3M9Imluc2VydCI+ICAgZXJyb3IgaW5jbHVkaW5nIHRoZSB0YWcg d2l0aCBjb25mbGljdGluZyBzY29wZXMgYW5kIHRoZTwvc3Bhbj48L3RkPjx0ZCBjbGFzcz0ibGlu ZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5v IiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+PC90ZD48dGQ+IDwvdGQ+PHRk IGNsYXNzPSJyYmxvY2siPjxzcGFuIGNsYXNzPSJpbnNlcnQiPiAgIG9yaWdpbmF0b3IocykuPC9z cGFuPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAg ICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVm dCI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+PC90ZD48dGQgY2xhc3M9ImxpbmVu byIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQ+PGEgbmFtZT0iZGlmZjAw MjEiPjwvYT48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0i dG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj4gICBUaGUgcGVyLW5vZGUgYWRtaW5pc3RyYXRp dmUgdGFncyBhcmUgbm90IG1lYW50IHRvIGJlIGV4dGVuZGVkIGJ5IDxzcGFuIGNsYXNzPSJkZWxl dGUiPnRoZTwvc3Bhbj48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+PHNwYW4gY2xh c3M9Imluc2VydCI+My4yLjIuICBVc2Ugb2YgTm9kZSBBZG1pbmlzdHJhdGl2ZSBUYWdzPC9zcGFu PjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8 dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2Nr Ij4gICBmdXR1cmUgT1NQRiBzdGFuZGFyZHMuICA8c3BhbiBjbGFzcz0iZGVsZXRlIj5UaGUgbmV3 PC9zcGFuPiBPU1BGIGV4dGVuc2lvbnMgPHNwYW4gY2xhc3M9ImRlbGV0ZSI+TVVTVCBOT1Q8L3Nw YW4+IHJlcXVpcmUgdXNlPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPiAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICA8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0K ICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9 ImxibG9jayI+ICAgb2YgcGVyLW5vZGUgYWRtaW5pc3RyYXRpdmUgdGFncyBvciBkZWZpbmUgd2Vs bC1rbm93biB0YWcgdmFsdWVzLjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj4gICBU aGUgcGVyLW5vZGUgYWRtaW5pc3RyYXRpdmUgdGFncyBhcmUgbm90IG1lYW50IHRvIGJlIGV4dGVu ZGVkIGJ5PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAg ICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJs YmxvY2siPiAgIE5vZGUgYWRtaW5pc3RyYXRpdmUgdGFncyBhcmUgZm9yIGdlbmVyaWMgdXNlIGFu ZCBkbyBub3QgcmVxdWlyZSBJQU5BPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPiAg IGZ1dHVyZSBPU1BGIHN0YW5kYXJkcy4gIDxzcGFuIGNsYXNzPSJpbnNlcnQiPk5ldzwvc3Bhbj4g T1NQRiBleHRlbnNpb25zIDxzcGFuIGNsYXNzPSJpbnNlcnQiPmFyZSBub3QgZXhwZWN0ZWQgdG88 L3NwYW4+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAg ICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJs YmxvY2siPiAgIHJlZ2lzdHJ5LiAgPHNwYW4gY2xhc3M9ImRlbGV0ZSI+VGhlIGZ1dHVyZTwvc3Bh bj4gT1NQRiBleHRlbnNpb25zIHJlcXVpcmluZyB3ZWxsIGtub3duIHZhbHVlcyBNQVk8L3RkPjx0 ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+ICAgcmVxdWlyZSB1c2Ugb2YgcGVyLW5vZGUgYWRt aW5pc3RyYXRpdmUgdGFncyBvciBkZWZpbmUgd2VsbC1rbm93biB0YWc8L3RkPjx0ZCBjbGFzcz0i bGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGlu ZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+ICAgZGVmaW5lIHRoZWly IG93biBkYXRhIHNpZ25hbGxpbmcgdGFpbG9yZWQgdG8gdGhlIG5lZWRzIG9mIHRoZSBmZWF0dXJl PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPiAgIHZhbHVlcy4gIE5vZGUgYWRtaW5p c3RyYXRpdmUgdGFncyBhcmUgZm9yIGdlbmVyaWMgdXNlIGFuZCBkbyBub3Q8L3RkPjx0ZCBjbGFz cz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0i bGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+ICAgb3IgTUFZIHVz ZSBjYXBhYmlsaXR5IFRMViBhcyBkZWZpbmVkIGluIFtSRkM0OTcwXS48L3RkPjx0ZD4gPC90ZD48 dGQgY2xhc3M9InJibG9jayI+ICAgcmVxdWlyZSBJQU5BIHJlZ2lzdHJ5LiAgPHNwYW4gY2xhc3M9 Imluc2VydCI+RnV0dXJlPC9zcGFuPiBPU1BGIGV4dGVuc2lvbnMgcmVxdWlyaW5nIHdlbGwga25v d248L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAg PHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9j ayI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPiAgIHZhbHVlcyBNQVkgZGVmaW5l IHRoZWlyIG93biBkYXRhIHNpZ25hbGxpbmcgdGFpbG9yZWQgdG8gdGhlIG5lZWRzIG9mPC90ZD48 dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQg Y2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPjwvdGQ+ PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj4gICB0aGUgZmVhdHVyZSBvciBNQVkgdXNlIDxz cGFuIGNsYXNzPSJpbnNlcnQiPnRoZTwvc3Bhbj4gY2FwYWJpbGl0eSBUTFYgYXMgZGVmaW5lZCBp biBbUkZDNDk3MF0uPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90 cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNs YXNzPSJsZWZ0Ij48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij48L3RkPjx0ZCBjbGFz cz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0i bGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIEJlaW5nIHBhcnQg b2YgdGhlIFJJIExTQSwgdGhlIHBlci1ub2RlIGFkbWluaXN0cmF0aXZlIHRhZyBUTFYgbXVzdCBi ZTwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIEJlaW5nIHBhcnQgb2YgdGhlIFJJ IExTQSwgdGhlIHBlci1ub2RlIGFkbWluaXN0cmF0aXZlIHRhZyBUTFYgbXVzdCBiZTwvdGQ+PHRk IGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkPjxh IG5hbWU9ImRpZmYwMDIyIj48L2E+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGlu ZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+ICAgcmVhc29uYWJseSBz bWFsbCBhbmQgc3RhYmxlLiAgSW4gcGFydGljdWxhciwgPHNwYW4gY2xhc3M9ImRlbGV0ZSI+YnV0 IG5vdCBsaW1pdGVkIHRvLDwvc3Bhbj48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+ ICAgcmVhc29uYWJseSBzbWFsbCBhbmQgc3RhYmxlLiAgSW4gcGFydGljdWxhciwgaW1wbGVtZW50 YXRpb25zPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAg ICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJs YmxvY2siPiAgIGltcGxlbWVudGF0aW9ucyBzdXBwb3J0aW5nIDxzcGFuIGNsYXNzPSJkZWxldGUi PnRoZTwvc3Bhbj4gcGVyLW5vZGUgYWRtaW5pc3RyYXRpdmUgdGFncyBNVVNUIE5PVDwvdGQ+PHRk PiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj4gICBzdXBwb3J0aW5nIHBlci1ub2RlIGFkbWluaXN0 cmF0aXZlIHRhZ3MgTVVTVCBOT1QgPHNwYW4gY2xhc3M9Imluc2VydCI+YmUgdXNlZDwvc3Bhbj4g dG8gPHNwYW4gY2xhc3M9Imluc2VydCI+Y29udmV5PC9zcGFuPjwvdGQ+PHRkIGNsYXNzPSJsaW5l bm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8i IHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj4gICA8c3BhbiBjbGFzcz0iZGVs ZXRlIj50aWUgYWR2ZXJ0aXNlZCB0YWdzPC9zcGFuPiB0byBjaGFuZ2VzIGluIHRoZSBuZXR3b3Jr IHRvcG9sb2d5IChib3RoIHdpdGhpbjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48 c3BhbiBjbGFzcz0iaW5zZXJ0Ij4gICBhdHRyaWJ1dGVzIG9mIHRoZSByb3V0aW5nIHRvcG9sb2d5 IG9yIGFzc29jaWF0ZSB0YWdzIHdpdGg8L3NwYW4+IGNoYW5nZXMgaW48L3RkPjx0ZCBjbGFzcz0i bGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGlu ZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+ICAgYW5kIG91dHNpZGUg dGhlIE9TUEYgZG9tYWluKSBvciByZWFjaGFiaWxpdHkgb2Ygcm91dGVzLjwvdGQ+PHRkPiA8L3Rk Pjx0ZCBjbGFzcz0icmJsb2NrIj4gICB0aGUgbmV0d29yayB0b3BvbG9neSAoYm90aCB3aXRoaW4g YW5kIG91dHNpZGUgdGhlIE9TUEYgZG9tYWluKSBvcjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZh bGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGln bj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9 InJibG9jayI+ICAgcmVhY2hhYmlsaXR5IG9mIHJvdXRlcy48L3RkPjx0ZCBjbGFzcz0ibGluZW5v IiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2 YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNs YXNzPSJyYmxvY2siPiAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICA8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxp Z249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249 InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJy YmxvY2siPjxzcGFuIGNsYXNzPSJpbnNlcnQiPjMuMi4zLiAgUHJvY2Vzc2luZyBOb2RlIEFkbWlu aXN0cmF0aXZlIFRhZyBjaGFuZ2VzPC9zcGFuPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGln bj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0i dG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdo dCI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAg IDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0 Ij4gICBNdWx0aXBsZSBub2RlIGFkbWluaXN0cmF0aXZlIHRhZyBUTFZzIE1BWSBhcHBlYXIgaW4g YW4gUkkgTFNBIG9yPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgTXVsdGlwbGUg bm9kZSBhZG1pbmlzdHJhdGl2ZSB0YWcgVExWcyBNQVkgYXBwZWFyIGluIGFuIFJJIExTQSBvcjwv dGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+ PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAg bXVsdGlwbGUgbm9kZSBhZG1pbmlzdHJhdGl2ZSB0YWcgVExWcyBNQVkgYmUgY29udGFpbmVkIGlu IGRpZmZlcmVudDwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIG11bHRpcGxlIG5v ZGUgYWRtaW5pc3RyYXRpdmUgdGFnIFRMVnMgTUFZIGJlIGNvbnRhaW5lZCBpbiBkaWZmZXJlbnQ8 L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRy Pjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAg IGluc3RhbmNlcyBvZiB0aGUgUkkgTFNBLiAgVGhlIG5vZGUgYWRtaW5pc3RyYXRpdmUgdGFncyBh c3NvY2lhdGVkPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgaW5zdGFuY2VzIG9m IHRoZSBSSSBMU0EuICBUaGUgbm9kZSBhZG1pbmlzdHJhdGl2ZSB0YWdzIGFzc29jaWF0ZWQ8L3Rk Pjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0 ZD48YSBuYW1lPSJkaWZmMDAyMyI+PC9hPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9 ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPiAgIHdpdGggYSBu b2RlIGZvciB0aGUgcHVycG9zZSBvZiBhbnkgY29tcHV0YXRpb24gb3IgcHJvY2Vzc2luZyBTSE9V TEQ8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+ICAgd2l0aCBhIG5vZGUgPHNwYW4g Y2xhc3M9Imluc2VydCI+dGhhdCBvcmlnaW5hdGVzIHRhZ3M8L3NwYW4+IGZvciB0aGUgcHVycG9z ZSBvZiBhbnkgY29tcHV0YXRpb248L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+ PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90 ZD48dGQgY2xhc3M9ImxibG9jayI+ICAgYmUgYSBzdXBlcnNldCBvZiBub2RlIGFkbWluaXN0cmF0 aXZlIHRhZ3MgZnJvbSBhbGwgdGhlIFRMVnMgaW4gYWxsPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNz PSJyYmxvY2siPiAgIG9yIHByb2Nlc3NpbmcgPHNwYW4gY2xhc3M9Imluc2VydCI+YXQgYSByZWNl aXZpbmcgbm9kZTwvc3Bhbj4gU0hPVUxEIGJlIGEgc3VwZXJzZXQgb2Ygbm9kZTwvdGQ+PHRkIGNs YXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNz PSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj4gICA8c3BhbiBj bGFzcz0iZGVsZXRlIj5pbnN0YW5jZXMgb2Y8L3NwYW4+IHRoZSBSSSBMU0Egb3JpZ2luYXRlZCBi eSB0aGF0IDxzcGFuIGNsYXNzPSJkZWxldGUiPm5vZGUuPC9zcGFuPjwvdGQ+PHRkPiA8L3RkPjx0 ZCBjbGFzcz0icmJsb2NrIj4gICBhZG1pbmlzdHJhdGl2ZSB0YWdzIGZyb20gYWxsIHRoZSBUTFZz IGluIGFsbCB0aGUgPHNwYW4gY2xhc3M9Imluc2VydCI+cmVjZWl2ZWQ8L3NwYW4+IFJJIExTQTwv dGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+ PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48 L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+ICAgPHNwYW4gY2xhc3M9Imluc2VydCI+ aW5zdGFuY2VzPC9zcGFuPiBvcmlnaW5hdGVkIGJ5IHRoYXQgPHNwYW4gY2xhc3M9Imluc2VydCI+ bm9kZS5XaGVuIGFuIFJJIExTQSBpcyByZWNlaXZlZCB0aGF0PC9zcGFuPjwvdGQ+PHRkIGNsYXNz PSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJs aW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48L3RkPjx0ZD4gPC90 ZD48dGQgY2xhc3M9InJibG9jayI+PHNwYW4gY2xhc3M9Imluc2VydCI+ICAgY2hhbmdlcyB0aGUg c2V0IG9mIHRhZ3MgYXBwbGljYWJsZSB0byBhbnkgb3JpZ2luYXRpbmcgbm9kZSwgYTwvc3Bhbj48 L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRy Pjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+ PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPjxzcGFuIGNsYXNzPSJpbnNlcnQiPiAg IHJlY2VpdmluZyBub2RlIE1VU1QgcmVwZWF0IGFueSBjb21wdXRhdGlvbiBvciBwcm9jZXNzaW5n IHRoYXQgaXM8L3NwYW4+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+ PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRk IGNsYXNzPSJsYmxvY2siPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48c3BhbiBj bGFzcz0iaW5zZXJ0Ij4gICBiYXNlZCBvbiB0aG9zZSBhZG1pbmlzdHJhdGl2ZSB0YWdzLjwvc3Bh bj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAg PHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQi PjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8i IHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkPjxhIG5hbWU9ImRpZmYwMDI0 Ij48L2E+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRv cCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+ICAgV2hlbiB0aGVyZSBpcyBhIGNoYW5nZSBpbiB0 aGUgbm9kZSBhZG1pbmlzdHJhdGl2ZSB0YWcgVExWIG9yIHJlbW92YWwvPC90ZD48dGQ+IDwvdGQ+ PHRkIGNsYXNzPSJyYmxvY2siPiAgIFdoZW4gdGhlcmUgaXMgYSBjaGFuZ2UgPHNwYW4gY2xhc3M9 Imluc2VydCI+b3IgcmVtb3ZhbCBvZiBhbiBhZG1pbmlzdHJhdGl2ZSBhZmZpbGlhdGlvbiBvZjwv c3Bhbj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAg ICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9Imxi bG9jayI+ICAgYWRkaXRpb24gb2YgYSBUTFYgaW4gYW55IGluc3RhbmNlIG9mIHRoZSBSSS1MU0Es IGltcGxlbWVudGF0aW9ucyBNVVNUPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPjxz cGFuIGNsYXNzPSJpbnNlcnQiPiAgIGEgbm9kZSwgdGhlIG5vZGUgTVVTVCByZS1vcmlnaW5hdGUg dGhlIFJJIExTQSB3aXRoIHRoZSBsYXRlc3Qgc2V0IG9mPC9zcGFuPjwvdGQ+PHRkIGNsYXNzPSJs aW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5l bm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj4gICB0YWtlIGFwcHJvcHJp YXRlIG1lYXN1cmVzIHRvIHVwZGF0ZSA8c3BhbiBjbGFzcz0iZGVsZXRlIj5pdHM8L3NwYW4+IHN0 YXRlIGFjY29yZGluZyB0byB0aGU8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+PHNw YW4gY2xhc3M9Imluc2VydCI+ICAgbm9kZSBhZG1pbmlzdHJhdGl2ZSB0YWdzLiAgT24gdGhlIHJl Y2VpdmVyLCBXaGVuIHRoZXJlIGlzIGEgY2hhbmdlPC9zcGFuPiBpbjwvdGQ+PHRkIGNsYXNzPSJs aW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5l bm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj4gICBjaGFuZ2VkIHNldCBv ZiB0YWdzLiAgPHNwYW4gY2xhc3M9ImRlbGV0ZSI+RXhhY3Q8L3NwYW4+IGFjdGlvbnMgZGVwZW5k IG9uIGZlYXR1cmVzIHdvcmtpbmcgd2l0aDwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2Nr Ij4gICB0aGUgbm9kZSBhZG1pbmlzdHJhdGl2ZSB0YWcgVExWIG9yIHJlbW92YWwvIGFkZGl0aW9u IG9mIGEgVExWIGluIGFueTwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3Rk PjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0 ZCBjbGFzcz0ibGJsb2NrIj48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+ICAgaW5z dGFuY2Ugb2YgdGhlIFJJLUxTQSwgaW1wbGVtZW50YXRpb25zIE1VU1QgdGFrZSBhcHByb3ByaWF0 ZTwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8 dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2Nr Ij48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+ICAgbWVhc3VyZXMgdG8gdXBkYXRl IDxzcGFuIGNsYXNzPSJpbnNlcnQiPnRoZWlyPC9zcGFuPiBzdGF0ZSBhY2NvcmRpbmcgdG8gdGhl IGNoYW5nZWQgc2V0IG9mIHRhZ3MuPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3Ai PjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwv dGQ+PHRkIGNsYXNzPSJsYmxvY2siPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj4g ICA8c3BhbiBjbGFzcz0iaW5zZXJ0Ij5UaGUgZXhhY3Q8L3NwYW4+IGFjdGlvbnMgPHNwYW4gY2xh c3M9Imluc2VydCI+bmVlZGVkPC9zcGFuPiBkZXBlbmQgb24gZmVhdHVyZXMgd29ya2luZyB3aXRo PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0 cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4g ICBhZG1pbmlzdHJhdGl2ZSB0YWdzIGFuZCBpcyBvdXRzaWRlIG9mIHNjb3BlIG9mIHRoaXMgc3Bl Y2lmaWNhdGlvbi48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBhZG1pbmlzdHJh dGl2ZSB0YWdzIGFuZCBpcyBvdXRzaWRlIG9mIHNjb3BlIG9mIHRoaXMgc3BlY2lmaWNhdGlvbi48 L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRy Pjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPjwv dGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZh bGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGln bj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+NC4gIEFwcGxpY2F0aW9uczwvdGQ+PHRkPiA8 L3RkPjx0ZCBjbGFzcz0icmlnaHQiPjQuICBBcHBsaWNhdGlvbnM8L3RkPjx0ZCBjbGFzcz0ibGlu ZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5v IiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPjwvdGQ+PHRkPiA8L3RkPjx0ZCBj bGFzcz0icmlnaHQiPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwv dHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBj bGFzcz0ibGVmdCI+ICAgVGhpcyBzZWN0aW9uIGxpc3RzIHNldmVyYWwgZXhhbXBsZXMgb2YgaG93 IGltcGxlbWVudGF0aW9ucyBtaWdodCB1c2U8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0 Ij4gICBUaGlzIHNlY3Rpb24gbGlzdHMgc2V2ZXJhbCBleGFtcGxlcyBvZiBob3cgaW1wbGVtZW50 YXRpb25zIG1pZ2h0IHVzZTwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3Rk PjwvdHI+DQogICAgICA8dHI+PHRkPjxhIG5hbWU9ImRpZmYwMDI1Ij48L2E+PC90ZD48L3RyPg0K ICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9 ImxibG9jayI+ICAgdGhlIDxzcGFuIGNsYXNzPSJkZWxldGUiPk5vZGU8L3NwYW4+IGFkbWluaXN0 cmF0aXZlIHRhZ3MuICBUaGVzZSBleGFtcGxlcyBhcmUgZ2l2ZW4gb25seSB0bzwvdGQ+PHRkPiA8 L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj4gICB0aGUgPHNwYW4gY2xhc3M9Imluc2VydCI+cGVyLW5v ZGU8L3NwYW4+IGFkbWluaXN0cmF0aXZlIHRhZ3MuICBUaGVzZSBleGFtcGxlcyBhcmUgZ2l2ZW4g b25seSB0bzwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQog ICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0i bGJsb2NrIj4gICBkZW1vbnN0cmF0ZSBnZW5lcmljIHVzZWZ1bG5lc3Mgb2YgdGhlIHJvdXRlciB0 YWdnaW5nIG1lY2hhbmlzbS48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+ICAgZGVt b25zdHJhdGUgPHNwYW4gY2xhc3M9Imluc2VydCI+dGhlPC9zcGFuPiBnZW5lcmljIHVzZWZ1bG5l c3Mgb2YgdGhlIHJvdXRlciB0YWdnaW5nIG1lY2hhbmlzbS48L3RkPjx0ZCBjbGFzcz0ibGluZW5v IiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2 YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+ICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIDwvdGQ+ PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj4gICA8c3BhbiBjbGFzcz0iaW5zZXJ0Ij5JbXBs ZW1lbnRhdGlvbnM8L3NwYW4+IHN1cHBvcnRpbmcgdGhpcyBzcGVjaWZpY2F0aW9uIDxzcGFuIGNs YXNzPSJpbnNlcnQiPmFyZTwvc3Bhbj4gbm90IHJlcXVpcmVkIHRvPC90ZD48dGQgY2xhc3M9Imxp bmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVu byIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPiAgIDxzcGFuIGNsYXNzPSJk ZWxldGUiPkltcGxlbWVudGF0aW9uPC9zcGFuPiBzdXBwb3J0aW5nIHRoaXMgc3BlY2lmaWNhdGlv biA8c3BhbiBjbGFzcz0iZGVsZXRlIj5pczwvc3Bhbj4gbm90IHJlcXVpcmVkIHRvPC90ZD48dGQ+ IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPiAgIGltcGxlbWVudCBhbnkgb2YgPHNwYW4gY2xhc3M9 Imluc2VydCI+dGhlc2U8L3NwYW4+IHVzZSBjYXNlcy4gIEl0IGlzIGFsc28gd29ydGggbm90aW5n IHRoYXQgaW48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0K ICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9 ImxibG9jayI+ICAgaW1wbGVtZW50IGFueSBvZiA8c3BhbiBjbGFzcz0iZGVsZXRlIj50aGU8L3Nw YW4+IHVzZSBjYXNlcy4gIEl0IGlzIGFsc28gd29ydGggbm90aW5nIHRoYXQgaW4gc29tZTwvdGQ+ PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj4gICBzb21lIGRlc2NyaWJlZCB1c2UgY2FzZXMg cm91dGVycyBjb25maWd1cmVkIHRvIGFkdmVydGlzZSB0YWdzIGhlbHA8L3RkPjx0ZCBjbGFzcz0i bGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGlu ZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+ICAgZGVzY3JpYmVkIHVz ZSBjYXNlcyByb3V0ZXJzIGNvbmZpZ3VyZWQgdG8gYWR2ZXJ0aXNlIHRhZ3MgaGVscCBvdGhlcjwv dGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj4gICBvdGhlciByb3V0ZXJzIGluIHRoZWly IGNhbGN1bGF0aW9ucyBidXQgZG8gbm90IHRoZW1zZWx2ZXMgaW1wbGVtZW50PC90ZD48dGQgY2xh c3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9 ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPiAgIHJvdXRlcnMg aW4gdGhlaXIgY2FsY3VsYXRpb25zIGJ1dCBkbyBub3QgdGhlbXNlbHZlcyBpbXBsZW1lbnQgdGhl PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPiAgIHRoZSBzYW1lIGZ1bmN0aW9uYWxp dHkuPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAg IDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxv Y2siPiAgIHNhbWUgZnVuY3Rpb25hbGl0eS48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9j ayI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAg IDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0 Ij48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij48L3RkPjx0ZCBjbGFzcz0ibGluZW5v IiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2 YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPjQuMS4gIFNlcnZpY2UgYXV0by1kaXNj b3Zlcnk8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij40LjEuICBTZXJ2aWNlIGF1dG8t ZGlzY292ZXJ5PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4N CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNz PSJsZWZ0Ij48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij48L3RkPjx0ZCBjbGFzcz0i bGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZD48YSBuYW1lPSJk aWZmMDAyNiI+PC9hPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFs aWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPiAgIFJvdXRlciB0YWdnaW5nIG1heSBi ZSB1c2VkIHRvIGF1dG9tYXRpY2FsbHkgZGlzY292ZXIgZ3JvdXAgb2Ygcm91dGVyczwvdGQ+PHRk PiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj4gICBSb3V0ZXIgdGFnZ2luZyBtYXkgYmUgdXNlZCB0 byBhdXRvbWF0aWNhbGx5IGRpc2NvdmVyIDxzcGFuIGNsYXNzPSJpbnNlcnQiPmE8L3NwYW4+IGdy b3VwIG9mPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAg ICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJs YmxvY2siPiAgIHNoYXJpbmcgYSBwYXJ0aWN1bGFyIHNlcnZpY2UuPC90ZD48dGQ+IDwvdGQ+PHRk IGNsYXNzPSJyYmxvY2siPiAgIHJvdXRlcnMgc2hhcmluZyBhIHBhcnRpY3VsYXIgc2VydmljZS48 L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRy Pjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPjwv dGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZh bGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkPjxhIG5hbWU9ImRpZmYwMDI3Ij48 L2E+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+ PC90ZD48dGQgY2xhc3M9ImxibG9jayI+ICAgRm9yIGV4YW1wbGUsIHNlcnZpY2UgcHJvdmlkZXIg bWlnaHQgZGVzaXJlIHRvIGVzdGFibGlzaCBmdWxsIG1lc2ggb2Y8L3RkPjx0ZD4gPC90ZD48dGQg Y2xhc3M9InJibG9jayI+ICAgRm9yIGV4YW1wbGUsIDxzcGFuIGNsYXNzPSJpbnNlcnQiPmE8L3Nw YW4+IHNlcnZpY2UgcHJvdmlkZXIgbWlnaHQgZGVzaXJlIHRvIGVzdGFibGlzaCA8c3BhbiBjbGFz cz0iaW5zZXJ0Ij5hPC9zcGFuPiBmdWxsIG1lc2g8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxp Z249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249 InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+ICAgTVBMUyBURSB0dW5uZWxzIGJldHdlZW4g YWxsIFBFIHJvdXRlcnMgaW4gdGhlIGFyZWEgb2YgTVBMUyBWUE48L3RkPjx0ZD4gPC90ZD48dGQg Y2xhc3M9InJibG9jayI+ICAgb2YgTVBMUyBURSB0dW5uZWxzIGJldHdlZW4gYWxsIFBFIHJvdXRl cnMgaW4gdGhlIGFyZWEgb2YgPHNwYW4gY2xhc3M9Imluc2VydCI+dGhlPC9zcGFuPiBNUExTIFZQ TjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8 dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ ICAgbmV0d29yay4gIE1hcmtpbmcgYWxsIFBFIHJvdXRlcnMgd2l0aCBhIHRhZyBhbmQgY29uZmln dXJpbmcgZGV2aWNlczwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIG5ldHdvcmsu ICBNYXJraW5nIGFsbCBQRSByb3V0ZXJzIHdpdGggYSB0YWcgYW5kIGNvbmZpZ3VyaW5nIGRldmlj ZXM8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAg PHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQi PiAgIHdpdGggYSBwb2xpY3kgdG8gY3JlYXRlIE1QTFMgVEUgdHVubmVscyB0byBhbGwgb3RoZXIg ZGV2aWNlczwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIHdpdGggYSBwb2xpY3kg dG8gY3JlYXRlIE1QTFMgVEUgdHVubmVscyB0byBhbGwgb3RoZXIgZGV2aWNlczwvdGQ+PHRkIGNs YXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNz PSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgYWR2ZXJ0aXNp bmcgdGhpcyB0YWcgd2lsbCBhdXRvbWF0ZSBtYWludGVuYW5jZSBvZiB0aGUgZnVsbCBtZXNoLjwv dGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIGFkdmVydGlzaW5nIHRoaXMgdGFnIHdp bGwgYXV0b21hdGUgbWFpbnRlbmFuY2Ugb2YgdGhlIGZ1bGwgbWVzaC48L3RkPjx0ZCBjbGFzcz0i bGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGlu ZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIFdoZW4gbmV3IFBFIHJv dXRlciBpcyBhZGRlZCB0byB0aGUgYXJlYSwgYWxsIG90aGVyIFBFIGRldmljZXMgd2lsbDwvdGQ+ PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIFdoZW4gbmV3IFBFIHJvdXRlciBpcyBhZGRl ZCB0byB0aGUgYXJlYSwgYWxsIG90aGVyIFBFIGRldmljZXMgd2lsbDwvdGQ+PHRkIGNsYXNzPSJs aW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5l bm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgb3BlbiBURSB0dW5uZWxz IHRvIGl0IHdpdGhvdXQgdGhlIG5lZWQgb2YgcmVjb25maWd1cmluZyB0aGVtLjwvdGQ+PHRkPiA8 L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIG9wZW4gVEUgdHVubmVscyB0byBpdCB3aXRob3V0IHRo ZSBuZWVkIG9mIHJlY29uZmlndXJpbmcgdGhlbS48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxp Z249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249 InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmln aHQiPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAg ICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVm dCI+NC4yLiAgRmFzdC1SZS1yb3V0aW5nIHBvbGljeTwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0i cmlnaHQiPjQuMi4gIEZhc3QtUmUtcm91dGluZyBwb2xpY3k8L3RkPjx0ZCBjbGFzcz0ibGluZW5v IiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2 YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFz cz0icmlnaHQiPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+ DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFz cz0ibGVmdCI+ICAgSW5jcmVhc2VkIGRlcGxveW1lbnQgb2YgTG9vcCBGcmVlIEFsdGVybmF0ZXMg KExGQSkgYXMgZGVmaW5lZCBpbjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIElu Y3JlYXNlZCBkZXBsb3ltZW50IG9mIExvb3AgRnJlZSBBbHRlcm5hdGVzIChMRkEpIGFzIGRlZmlu ZWQgaW48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAg ICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9Imxl ZnQiPiAgIFtSRkM1Mjg2XSBwb3NlcyBvcGVyYXRpb24gYW5kIG1hbmFnZW1lbnQgY2hhbGxlbmdl cy48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBbUkZDNTI4Nl0gcG9zZXMgb3Bl cmF0aW9uIGFuZCBtYW5hZ2VtZW50IGNoYWxsZW5nZXMuPC90ZD48dGQgY2xhc3M9ImxpbmVubyIg dmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFs aWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBbSS1ELmlldGYtcnRnd2ctbGZhLW1h bmFnZWFiaWxpdHldIHByb3Bvc2VzIHBvbGljaWVzIHdoaWNoLCB3aGVuPC90ZD48dGQ+IDwvdGQ+ PHRkIGNsYXNzPSJyaWdodCI+ICAgW0ktRC5pZXRmLXJ0Z3dnLWxmYS1tYW5hZ2VhYmlsaXR5XSBw cm9wb3NlcyBwb2xpY2llcyB3aGljaCwgd2hlbjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGln bj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0i dG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgaW1wbGVtZW50ZWQsIHdpbGwgZWFzZSBMRkEg b3BlcmF0aW9uIGNvbmNlcm5zLjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIGlt cGxlbWVudGVkLCB3aWxsIGVhc2UgTEZBIG9wZXJhdGlvbiBjb25jZXJucy48L3RkPjx0ZCBjbGFz cz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0i bGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPjwvdGQ+PHRkPiA8L3Rk Pjx0ZCBjbGFzcz0icmlnaHQiPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48 L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3Rk Pjx0ZCBjbGFzcz0ibGVmdCI+ICAgT25lIG9mIHRoZSBwcm9wb3NlZCByZWZpbmVtZW50cyBpcyB0 byBiZSBhYmxlIHRvIGdyb3VwIHRoZSBub2RlcyBpbjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0i cmlnaHQiPiAgIE9uZSBvZiB0aGUgcHJvcG9zZWQgcmVmaW5lbWVudHMgaXMgdG8gYmUgYWJsZSB0 byBncm91cCB0aGUgbm9kZXMgaW48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+ PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZD48YSBuYW1lPSJkaWZmMDAyOCI+PC9hPjwvdGQ+PC90 cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNs YXNzPSJsYmxvY2siPiAgIElHUCBkb21haW4gd2l0aCBhZG1pbmlzdHJhdGl2ZSB0YWdzIGFuZCBl bmdpbmVlciB0aGUgTEZBIGJhc2VkIG9uPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2si PiAgIDxzcGFuIGNsYXNzPSJpbnNlcnQiPmFuIDwvc3Bhbj5JR1AgZG9tYWluIHdpdGggYWRtaW5p c3RyYXRpdmUgdGFncyBhbmQgZW5naW5lZXIgdGhlIExGQSBiYXNlZCBvbjwvdGQ+PHRkIGNsYXNz PSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJs aW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgY29uZmlndXJlZCBw b2xpY2llcy48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBjb25maWd1cmVkIHBv bGljaWVzLjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQog ICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0i bGVmdCI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+PC90ZD48dGQgY2xhc3M9Imxp bmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVu byIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICAoYSkgIEFkbWluaXN0cmF0 aXZlIGxpbWl0YXRpb24gb2YgTEZBIHNjb3BlPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdo dCI+ICAgKGEpICBBZG1pbmlzdHJhdGl2ZSBsaW1pdGF0aW9uIG9mIExGQSBzY29wZTwvdGQ+PHRk IGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNs YXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+PC90ZD48dGQ+ IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0 b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3Ai PjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICAgICAgU2VydmljZSBwcm92aWRlciBhY2Nlc3MgaW5m cmFzdHJ1Y3R1cmUgaXMgZnJlcXVlbnRseSBkZXNpZ25lZCBpbjwvdGQ+PHRkPiA8L3RkPjx0ZCBj bGFzcz0icmlnaHQiPiAgICAgICBTZXJ2aWNlIHByb3ZpZGVyIGFjY2VzcyBpbmZyYXN0cnVjdHVy ZSBpcyBmcmVxdWVudGx5IGRlc2lnbmVkIGluPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWdu PSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQ+PGEgbmFtZT0iZGlmZjAwMjkiPjwvYT48 L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3Rk Pjx0ZCBjbGFzcz0ibGJsb2NrIj4gICAgICAgbGF5ZXJlZCBhcHByb2FjaCB3aXRoIGVhY2ggbGF5 ZXIgb2YgZGV2aWNlcyBzZXJ2aW5nIGRpZmZlcmVudDwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0i cmJsb2NrIj4gICAgICAgPHNwYW4gY2xhc3M9Imluc2VydCI+YSA8L3NwYW4+bGF5ZXJlZCBhcHBy b2FjaCB3aXRoIGVhY2ggbGF5ZXIgb2YgZGV2aWNlcyBzZXJ2aW5nIGRpZmZlcmVudDwvdGQ+PHRk IGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNs YXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgICAgIHB1 cnBvc2VzIGFuZCB0aHVzIGhhdmluZyBkaWZmZXJlbnQgaGFyZHdhcmUgY2FwYWJpbGl0aWVzIGFu ZDwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgICAgICBwdXJwb3NlcyBhbmQgdGh1 cyBoYXZpbmcgZGlmZmVyZW50IGhhcmR3YXJlIGNhcGFiaWxpdGllcyBhbmQ8L3RkPjx0ZCBjbGFz cz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0i bGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgICAgICBjb25maWd1 cmVkIHNvZnR3YXJlIGZlYXR1cmVzLiAgV2hlbiBMRkEgcmVwYWlyIHBhdGhzIGFyZSBiZWluZzwv dGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgICAgICBjb25maWd1cmVkIHNvZnR3YXJl IGZlYXR1cmVzLiAgV2hlbiBMRkEgcmVwYWlyIHBhdGhzIGFyZSBiZWluZzwvdGQ+PHRkIGNsYXNz PSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJs aW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgICAgIGNvbXB1dGVk LCBpdCBtYXkgYmUgZGVzaXJhYmxlIHRvIGV4Y2x1ZGUgZGV2aWNlcyBmcm9tIGJlaW5nPC90ZD48 dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgICAgIGNvbXB1dGVkLCBpdCBtYXkgYmUgZGVz aXJhYmxlIHRvIGV4Y2x1ZGUgZGV2aWNlcyBmcm9tIGJlaW5nPC90ZD48dGQgY2xhc3M9ImxpbmVu byIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIg dmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICAgICAgY29uc2lkZXJlZCBhcyBM RkEgY2FuZGlkYXRlcyBiYXNlZCBvbiB0aGVpciBsYXllci48L3RkPjx0ZD4gPC90ZD48dGQgY2xh c3M9InJpZ2h0Ij4gICAgICAgY29uc2lkZXJlZCBhcyBMRkEgY2FuZGlkYXRlcyBiYXNlZCBvbiB0 aGVpciBsYXllci48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3Ry Pg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xh c3M9ImxlZnQiPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPjwvdGQ+PHRkIGNsYXNz PSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJs aW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgICAgIEZvciBleGFt cGxlLCBpZiB0aGUgYWNjZXNzIGluZnJhc3RydWN0dXJlIGlzIGRpdmlkZWQgaW50byB0aGU8L3Rk Pjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICAgICAgRm9yIGV4YW1wbGUsIGlmIHRoZSBh Y2Nlc3MgaW5mcmFzdHJ1Y3R1cmUgaXMgZGl2aWRlZCBpbnRvIHRoZTwvdGQ+PHRkIGNsYXNzPSJs aW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5l bm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgICAgIEFjY2VzcywgRGlz dHJpYnV0aW9uIGFuZCBDb3JlIGxheWVycyBpdCBtYXkgYmUgZGVzaXJhYmxlIGZvciBhPC90ZD48 dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgICAgIEFjY2VzcywgRGlzdHJpYnV0aW9uIGFu ZCBDb3JlIGxheWVycyBpdCBtYXkgYmUgZGVzaXJhYmxlIGZvciBhPC90ZD48dGQgY2xhc3M9Imxp bmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVu byIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICAgICAgRGlzdHJpYnV0aW9u IGRldmljZSB0byBjb21wdXRlIExGQSBvbmx5IHZpYSBEaXN0cmlidXRpb24gb3IgQ29yZTwvdGQ+ PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgICAgICBEaXN0cmlidXRpb24gZGV2aWNlIHRv IGNvbXB1dGUgTEZBIG9ubHkgdmlhIERpc3RyaWJ1dGlvbiBvciBDb3JlPC90ZD48dGQgY2xhc3M9 ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9Imxp bmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICAgICAgZGV2aWNlcyBi dXQgbm90IHZpYSBBY2Nlc3MgZGV2aWNlcy4gIFRoaXMgbWF5IGJlIGR1ZSB0byBmZWF0dXJlczwv dGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgICAgICBkZXZpY2VzIGJ1dCBub3Qgdmlh IEFjY2VzcyBkZXZpY2VzLiAgVGhpcyBtYXkgYmUgZHVlIHRvIGZlYXR1cmVzPC90ZD48dGQgY2xh c3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQ+PGEgbmFt ZT0iZGlmZjAwMzAiPjwvYT48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8i IHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj4gICAgICAgZW5hYmxlZCBvbiBB Y2Nlc3Mgcm91dGVyczxzcGFuIGNsYXNzPSJkZWxldGUiPjs8L3NwYW4+IGR1ZSB0byBjYXBhY2l0 eSBsaW1pdGF0aW9ucyBvciBkdWUgdG88L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+ ICAgICAgIGVuYWJsZWQgb24gQWNjZXNzIHJvdXRlcnM8c3BhbiBjbGFzcz0iaW5zZXJ0Ij4sPC9z cGFuPiBkdWUgdG8gY2FwYWNpdHkgbGltaXRhdGlvbnMgb3IgZHVlIHRvPC90ZD48dGQgY2xhc3M9 ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9Imxp bmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICAgICAgdGhlIHNlY3Vy aXR5IHJlcXVpcmVtZW50cy4gIE1hbmFnaW5nIHN1Y2ggYSBwb2xpY3kgdmlhPC90ZD48dGQ+IDwv dGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgICAgIHRoZSBzZWN1cml0eSByZXF1aXJlbWVudHMuICBN YW5hZ2luZyBzdWNoIGEgcG9saWN5IHZpYTwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0i dG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9w Ij48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgICAgIGNvbmZpZ3VyYXRpb24gb2YgdGhlIHJvdXRl ciBjb21wdXRpbmcgTEZBIGlzIGN1bWJlcnNvbWUgYW5kIGVycm9yPC90ZD48dGQ+IDwvdGQ+PHRk IGNsYXNzPSJyaWdodCI+ICAgICAgIGNvbmZpZ3VyYXRpb24gb2YgdGhlIHJvdXRlciBjb21wdXRp bmcgTEZBIGlzIGN1bWJlcnNvbWUgYW5kIGVycm9yPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFs aWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWdu PSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICAgICAgcHJvbmUuPC90ZD48dGQ+IDwvdGQ+ PHRkIGNsYXNzPSJyaWdodCI+ICAgICAgIHByb25lLjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZh bGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGln bj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJy aWdodCI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAg ICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJs ZWZ0Ij4gICAgICAgV2l0aCB0aGUgTm9kZSBhZG1pbmlzdHJhdGl2ZSB0YWdzIGl0IGlzIHBvc3Np YmxlIHRvIGFzc2lnbiBhIHRhZzwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgICAg ICBXaXRoIHRoZSBOb2RlIGFkbWluaXN0cmF0aXZlIHRhZ3MgaXQgaXMgcG9zc2libGUgdG8gYXNz aWduIGEgdGFnPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4N CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNz PSJsZWZ0Ij4gICAgICAgdG8gZWFjaCBsYXllciBhbmQgaW1wbGVtZW50IExGQSBwb2xpY3kgb2Yg Y29tcHV0aW5nIExGQSByZXBhaXI8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICAg ICAgdG8gZWFjaCBsYXllciBhbmQgaW1wbGVtZW50IExGQSBwb2xpY3kgb2YgY29tcHV0aW5nIExG QSByZXBhaXI8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0K ICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9 ImxlZnQiPiAgICAgICBwYXRocyBvbmx5IHZpYSBuZWlnaGJvcnMgd2hpY2ggYWR2ZXJ0aXNlIHRo ZSBDb3JlIG9yIERpc3RyaWJ1dGlvbjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAg ICAgICBwYXRocyBvbmx5IHZpYSBuZWlnaGJvcnMgd2hpY2ggYWR2ZXJ0aXNlIHRoZSBDb3JlIG9y IERpc3RyaWJ1dGlvbjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwv dHI+DQogICAgICA8dHI+PHRkPjxhIG5hbWU9ImRpZmYwMDMxIj48L2E+PC90ZD48L3RyPg0KICAg ICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9Imxi bG9jayI+ICAgICAgIHRhZy4gIFRoaXMgcmVxdWlyZXMgbWluaW1hbCBwZXItbm9kZSBjb25maWd1 cmF0aW9uIGFuZCBuZXR3b3JrPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPiAgICAg ICB0YWcuICBUaGlzIHJlcXVpcmVzIG1pbmltYWwgcGVyLW5vZGUgY29uZmlndXJhdGlvbiBhbmQg PHNwYW4gY2xhc3M9Imluc2VydCI+dGhlPC9zcGFuPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZh bGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGln bj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj4gICAgICAgYXV0b21hdGljYWxseSBhZGFw dHMgd2hlbiBuZXcgbGlua3Mgb3Igcm91dGVycyBhcmUgYWRkZWQuPC90ZD48dGQ+IDwvdGQ+PHRk IGNsYXNzPSJyYmxvY2siPiAgICAgICBuZXR3b3JrIGF1dG9tYXRpY2FsbHkgYWRhcHRzIHdoZW4g bmV3IGxpbmtzIG9yIHJvdXRlcnMgYXJlIGFkZGVkLjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZh bGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGln bj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJy aWdodCI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAg ICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJs ZWZ0Ij4gICAoYikgIExGQSBjYWxjdWxhdGlvbiBvcHRpbWl6YXRpb248L3RkPjx0ZD4gPC90ZD48 dGQgY2xhc3M9InJpZ2h0Ij4gICAoYikgIExGQSBjYWxjdWxhdGlvbiBvcHRpbWl6YXRpb248L3Rk Pjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0 ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPjwvdGQ+ PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGln bj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0i dG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgICAgIENhbGN1bGF0aW9uIG9mIExGQSBwYXRo cyBtYXkgcmVxdWlyZSBzaWduaWZpY2FudCByZXNvdXJjZXMgb2YgdGhlPC90ZD48dGQ+IDwvdGQ+ PHRkIGNsYXNzPSJyaWdodCI+ICAgICAgIENhbGN1bGF0aW9uIG9mIExGQSBwYXRocyBtYXkgcmVx dWlyZSBzaWduaWZpY2FudCByZXNvdXJjZXMgb2YgdGhlPC90ZD48dGQgY2xhc3M9ImxpbmVubyIg dmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQ+PGEgbmFtZT0iZGlmZjAwMzIi PjwvYT48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9w Ij48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj4gICAgICAgcm91dGVyLiAgT25lIGV4ZWN1dGlvbiBv ZiA8c3BhbiBjbGFzcz0iZGVsZXRlIj5EaWprc3RyYTwvc3Bhbj4gYWxnb3JpdGhtIGlzIHJlcXVp cmVkIGZvciBlYWNoPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPiAgICAgICByb3V0 ZXIuICBPbmUgZXhlY3V0aW9uIG9mIDxzcGFuIGNsYXNzPSJpbnNlcnQiPkRpamtzdHJhJ3M8L3Nw YW4+IGFsZ29yaXRobSBpcyByZXF1aXJlZCBmb3I8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxp Z249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249 InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+ICAgICAgIG5laWdoYm9yIGVsaWdpYmxlIHRv IGJlY29tZSBuZXh0IGhvcCBvZiByZXBhaXIgcGF0aHMuICA8c3BhbiBjbGFzcz0iZGVsZXRlIj5U aHVzPC9zcGFuPiBhPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPiAgICAgICBlYWNo IG5laWdoYm9yIGVsaWdpYmxlIHRvIGJlY29tZSA8c3BhbiBjbGFzcz0iaW5zZXJ0Ij50aGU8L3Nw YW4+IG5leHQgaG9wIG9mIHJlcGFpciBwYXRocy48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxp Z249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249 InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+ICAgICAgIHJvdXRlciB3aXRoIGEgZmV3IGh1 bmRyZWRzIG9mIG5laWdoYm9ycyBtYXkgbmVlZCB0byBleGVjdXRlIHRoZTwvdGQ+PHRkPiA8L3Rk Pjx0ZCBjbGFzcz0icmJsb2NrIj4gICAgICAgPHNwYW4gY2xhc3M9Imluc2VydCI+VGh1cyw8L3Nw YW4+IGEgcm91dGVyIHdpdGggYSBmZXcgaHVuZHJlZHMgb2YgbmVpZ2hib3JzIG1heSBuZWVkIHRv PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0 cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2si PiAgICAgICBhbGdvcml0aG0gaHVuZHJlZHMgb2YgdGltZXMgYmVmb3JlIHRoZSBiZXN0IChvciBl dmVuIHZhbGlkKTwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj4gICAgICAgZXhlY3V0 ZSB0aGUgYWxnb3JpdGhtIGh1bmRyZWRzIG9mIHRpbWVzIGJlZm9yZSB0aGUgYmVzdCAob3IgZXZl bjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8 dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2Nr Ij4gICAgICAgcmVwYWlyIHBhdGggaXMgZm91bmQuICBNYW51YWxseSBleGNsdWRpbmcgZnJvbSB0 aGUgY2FsY3VsYXRpb248L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+ICAgICAgIHZh bGlkKSByZXBhaXIgcGF0aCBpcyBmb3VuZC4gIE1hbnVhbGx5IGV4Y2x1ZGluZyBmcm9tIHRoZTwv dGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+ PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj4g ICAgICAgbmVpZ2hib3JzIDxzcGFuIGNsYXNzPSJkZWxldGUiPndoaWNoPC9zcGFuPiBhcmUga25v d24gdG8gcHJvdmlkZSBubyB2YWxpZCBMRkEgKHN1Y2ggYXM8L3RkPjx0ZD4gPC90ZD48dGQgY2xh c3M9InJibG9jayI+ICAgICAgIGNhbGN1bGF0aW9uIG5laWdoYm9ycyA8c3BhbiBjbGFzcz0iaW5z ZXJ0Ij50aGF0PC9zcGFuPiBhcmUga25vd24gdG8gcHJvdmlkZSBubyB2YWxpZCBMRkE8L3RkPjx0 ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBj bGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+ICAgICAg IHNpbmdsZS1jb25uZWN0ZWQgcm91dGVycykgbWF5IHNpZ25pZmljYW50bHkgcmVkdWNlIG51bWJl ciBvZjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj4gICAgICAgKHN1Y2ggYXMgc2lu Z2xlLWNvbm5lY3RlZCByb3V0ZXJzKSBtYXkgc2lnbmlmaWNhbnRseSByZWR1Y2U8L3RkPjx0ZCBj bGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFz cz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+ICAgICAgIERp amtzdHJhIGFsZ29yaXRobSBydW5zLjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj4g ICAgICAgbnVtYmVyIG9mIERpamtzdHJhIGFsZ29yaXRobSBydW5zLjwvdGQ+PHRkIGNsYXNzPSJs aW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5l bm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+PC90ZD48dGQ+IDwvdGQ+PHRk IGNsYXNzPSJyaWdodCI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+ PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRk IGNsYXNzPSJsZWZ0Ij4gICAgICAgTEZBIGNhbGN1bGF0aW9uIHBvbGljeSBtYXkgYmUgY29uZmln dXJlZCBzbyB0aGF0IHJvdXRlcnM8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICAg ICAgTEZBIGNhbGN1bGF0aW9uIHBvbGljeSBtYXkgYmUgY29uZmlndXJlZCBzbyB0aGF0IHJvdXRl cnM8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAg PHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQi PiAgICAgICBhZHZlcnRpc2luZyBjZXJ0YWluIHRhZyB2YWx1ZSBhcmUgZXhjbHVkZWQgZnJvbSBM RkEgY2FsY3VsYXRpb248L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICAgICAgYWR2 ZXJ0aXNpbmcgY2VydGFpbiB0YWcgdmFsdWUgYXJlIGV4Y2x1ZGVkIGZyb20gTEZBIGNhbGN1bGF0 aW9uPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAg IDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0 Ij4gICAgICAgZXZlbiBpZiB0aGV5IGFyZSBvdGhlcndpc2Ugc3VpdGFibGUuPC90ZD48dGQ+IDwv dGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgICAgIGV2ZW4gaWYgdGhleSBhcmUgb3RoZXJ3aXNlIHN1 aXRhYmxlLjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQog ICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0i bGVmdCI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+PC90ZD48dGQgY2xhc3M9Imxp bmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVu byIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij40LjMuICBDb250cm9sbGluZyBS ZW1vdGUgTEZBIHR1bm5lbCB0ZXJtaW5hdGlvbjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmln aHQiPjQuMy4gIENvbnRyb2xsaW5nIFJlbW90ZSBMRkEgdHVubmVsIHRlcm1pbmF0aW9uPC90ZD48 dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQg Y2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij48L3RkPjx0 ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249 InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRv cCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIFtSRkM3NDkwXSBkZWZpbmVkIGEgbWV0aG9kIG9m IHR1bm5lbGxpbmcgdHJhZmZpYyBhZnRlciBjb25uZWN0ZWQgbGluazwvdGQ+PHRkPiA8L3RkPjx0 ZCBjbGFzcz0icmlnaHQiPiAgIFtSRkM3NDkwXSBkZWZpbmVkIGEgbWV0aG9kIG9mIHR1bm5lbGxp bmcgdHJhZmZpYyBhZnRlciBjb25uZWN0ZWQgbGluazwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZh bGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkPjxhIG5hbWU9ImRpZmYwMDMzIj48 L2E+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+ PC90ZD48dGQgY2xhc3M9ImxibG9jayI+ICAgZmFpbHVyZSB0byBleHRlbmQgdGhlIGJhc2ljIExG QSBjb3ZlcmFnZSBhbmQgYWxnb3JpdGhtIHRvIGZpbmQgdHVubmVsPC90ZD48dGQ+IDwvdGQ+PHRk IGNsYXNzPSJyYmxvY2siPiAgIGZhaWx1cmUgdG8gZXh0ZW5kIHRoZSBiYXNpYyBMRkEgY292ZXJh Z2UgYW5kIDxzcGFuIGNsYXNzPSJpbnNlcnQiPmFuPC9zcGFuPiBhbGdvcml0aG0gdG8gZmluZDwv dGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+ PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj4g ICB0YWlsLWVuZCByb3V0ZXJzIGZpdHRpbmcgTEZBIHJlcXVpcmVtZW50LiAgSW4gbW9zdCBjYXNl cyBwcm9wb3NlZDwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj4gICB0dW5uZWwgdGFp bC1lbmQgcm91dGVycyBmaXR0aW5nIExGQSByZXF1aXJlbWVudC4gIEluIG1vc3QgY2FzZXMgPHNw YW4gY2xhc3M9Imluc2VydCI+dGhlPC9zcGFuPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGln bj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0i dG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj4gICBhbGdvcml0aG0gZmluZHMgbW9yZSB0aGFu IG9uZSBjYW5kaWRhdGUgdGFpbC1lbmQgcm91dGVyLiAgSW4gPHNwYW4gY2xhc3M9ImRlbGV0ZSI+ cmVhbDwvc3Bhbj48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+ICAgcHJvcG9zZWQg YWxnb3JpdGhtIGZpbmRzIG1vcmUgdGhhbiBvbmUgY2FuZGlkYXRlIHRhaWwtZW5kIHJvdXRlci4g IEluPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAg IDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxv Y2siPjxzcGFuIGNsYXNzPSJkZWxldGUiPiAgIGxpZmU8L3NwYW4+IG5ldHdvcmsgaXQgbWF5IGJl IGRlc2lyYWJsZSB0byBleGNsdWRlIHNvbWUgbm9kZXMgZnJvbSB0aGUgbGlzdDwvdGQ+PHRkPiA8 L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj4gICA8c3BhbiBjbGFzcz0iaW5zZXJ0Ij5yZWFsLWxpZmU8 L3NwYW4+IG5ldHdvcmsgaXQgbWF5IGJlIGRlc2lyYWJsZSB0byBleGNsdWRlIHNvbWUgbm9kZXMg ZnJvbSB0aGU8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0K ICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9 ImxibG9jayI+ICAgb2YgY2FuZGlkYXRlcyBiYXNlZCBvbiB0aGUgbG9jYWwgcG9saWN5LiAgVGhp cyBtYXkgYmUgZWl0aGVyIGR1ZSB0bzwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj4g ICBsaXN0IG9mIGNhbmRpZGF0ZXMgYmFzZWQgb24gdGhlIGxvY2FsIHBvbGljeS4gIFRoaXMgbWF5 IGJlIGVpdGhlciBkdWU8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48 L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQg Y2xhc3M9ImxibG9jayI+ICAga25vd24gbGltaXRhdGlvbnMgb2YgdGhlIG5vZGUgKHRoZSByb3V0 ZXIgZG9lcyBub3QgYWNjZXB0IHRhcmdldGVkPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxv Y2siPiAgIHRvIGtub3duIGxpbWl0YXRpb25zIG9mIHRoZSBub2RlICh0aGUgcm91dGVyIGRvZXMg bm90IGFjY2VwdCA8c3BhbiBjbGFzcz0iaW5zZXJ0Ij50aGU8L3NwYW4+PC90ZD48dGQgY2xhc3M9 ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9Imxp bmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPiAgIExEUCBzZXNzaW9u cyByZXF1aXJlZCB0byBpbXBsZW1lbnQgUmVtb3RlIExGQSB0dW5uZWxsaW5nKSBvciBkdWUgdG88 L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+ICAgdGFyZ2V0ZWQgTERQIHNlc3Npb25z IHJlcXVpcmVkIHRvIGltcGxlbWVudCBSZW1vdGUgTEZBIHR1bm5lbGxpbmcpIG9yPC90ZD48dGQg Y2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xh c3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPiAgIGFkbWlu aXN0cmF0aXZlIHJlcXVpcmVtZW50cyAoZm9yIGV4YW1wbGUsIGl0IG1heSBiZSBkZXNpcmFibGUg dG88L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+ICAgZHVlIHRvIGFkbWluaXN0cmF0 aXZlIHJlcXVpcmVtZW50cyAoZm9yIGV4YW1wbGUsIGl0IG1heSBiZSBkZXNpcmFibGU8L3RkPjx0 ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBj bGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+ICAgY2hv b3NlIHRhaWwtZW5kIHJvdXRlciBhbW9uZyBjby1sb2NhdGVkIGRldmljZXMpLjwvdGQ+PHRkPiA8 L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj4gICB0byBjaG9vc2UgPHNwYW4gY2xhc3M9Imluc2VydCI+ dGhlPC9zcGFuPiB0YWlsLWVuZCByb3V0ZXIgYW1vbmcgY28tbG9jYXRlZCBkZXZpY2VzKS48L3Rk Pjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0 ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPjwvdGQ+ PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGln bj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkPjxhIG5hbWU9ImRpZmYwMDM0Ij48L2E+ PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90 ZD48dGQgY2xhc3M9ImxibG9jayI+ICAgVGhlIE5vZGUgYWRtaW5pc3RyYXRpdmUgdGFnIGRlbGl2 ZXJzIHNpbXBsZSBhbmQgc2NhbGFibGUgc29sdXRpb24uPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNz PSJyYmxvY2siPiAgIFRoZSBOb2RlIGFkbWluaXN0cmF0aXZlIHRhZyBkZWxpdmVycyA8c3BhbiBj bGFzcz0iaW5zZXJ0Ij5hIDwvc3Bhbj5zaW1wbGUgYW5kIHNjYWxhYmxlIHNvbHV0aW9uLjwvdGQ+ PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRk IGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgUmVt b3RlIExGQSBjYW4gYmUgY29uZmlndXJlZCB3aXRoIGEgcG9saWN5IHRvIGFjY2VwdCBkdXJpbmcg dGhlIHRhaWwtPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgUmVtb3RlIExGQSBj YW4gYmUgY29uZmlndXJlZCB3aXRoIGEgcG9saWN5IHRvIGFjY2VwdCBkdXJpbmcgdGhlIHRhaWwt PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0 cj48dGQ+PGEgbmFtZT0iZGlmZjAwMzUiPjwvYT48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNs YXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj4gICBlbmQg cm91dGVyIGNhbGN1bGF0aW9uIGFzIGNhbmRpZGF0ZXMgb25seSByb3V0ZXJzIGFkdmVydGlzaW5n IGNlcnRhaW48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+ICAgZW5kIHJvdXRlciBj YWxjdWxhdGlvbiBhcyBjYW5kaWRhdGVzIG9ubHkgcm91dGVycyBhZHZlcnRpc2luZyA8c3BhbiBj bGFzcz0iaW5zZXJ0Ij5hPC9zcGFuPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9w Ij48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48 L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj4gICB0YWcuICBUYWdnaW5nIHJvdXRlcnMgYWxsb3dzIHRv IGJvdGggZXhjbHVkZSBub2RlcyBub3QgY2FwYWJsZSBvZjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFz cz0icmJsb2NrIj4gICBjZXJ0YWluIHRhZy4gIFRhZ2dpbmcgcm91dGVycyBhbGxvd3MgdG8gYm90 aCBleGNsdWRlIG5vZGVzIG5vdDwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48 L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3Rk Pjx0ZCBjbGFzcz0ibGJsb2NrIj4gICBzZXJ2aW5nIGFzIFJlbW90ZSBMRkEgdHVubmVsIHRhaWwt ZW5kcyBhbmQgdG8gZGVmaW5lIGEgcmVnaW9uIGZyb208L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9 InJibG9jayI+ICAgY2FwYWJsZSBvZiBzZXJ2aW5nIGFzIFJlbW90ZSBMRkEgdHVubmVsIHRhaWwt ZW5kcyBhbmQgdG8gZGVmaW5lIGE8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+ PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90 ZD48dGQgY2xhc3M9ImxibG9jayI+ICAgd2hpY2ggdGFpbC1lbmQgcm91dGVyIG11c3QgYmUgc2Vs ZWN0ZWQuPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPiAgIHJlZ2lvbiBmcm9tIHdo aWNoIHRhaWwtZW5kIHJvdXRlciBtdXN0IGJlIHNlbGVjdGVkLjwvdGQ+PHRkIGNsYXNzPSJsaW5l bm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8i IHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNs YXNzPSJyaWdodCI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90 cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNs YXNzPSJsZWZ0Ij40LjQuICBNb2JpbGUgYmFjay1oYXVsIG5ldHdvcmsgc2VydmljZSBkZXBsb3lt ZW50PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+NC40LiAgTW9iaWxlIGJhY2staGF1 bCBuZXR3b3JrIHNlcnZpY2UgZGVwbG95bWVudDwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGln bj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0i dG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdo dCI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAg IDx0cj48dGQ+PGEgbmFtZT0iZGlmZjAwMzYiPjwvYT48L3RkPjwvdHI+DQogICAgICA8dHI+PHRk IGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj4gICA8 c3BhbiBjbGFzcz0iZGVsZXRlIj5UaGUgdG9wb2xvZ3kgb2YgbW9iaWxlPC9zcGFuPiBiYWNrLWhh dWwgPHNwYW4gY2xhc3M9ImRlbGV0ZSI+bmV0d29yazwvc3Bhbj4gdXN1YWxseSA8c3BhbiBjbGFz cz0iZGVsZXRlIj5hZG9wdHM8L3NwYW4+IHJpbmcgdG9wb2xvZ3k8L3RkPjx0ZD4gPC90ZD48dGQg Y2xhc3M9InJibG9jayI+ICAgPHNwYW4gY2xhc3M9Imluc2VydCI+TW9iaWxlPC9zcGFuPiBiYWNr LWhhdWwgPHNwYW4gY2xhc3M9Imluc2VydCI+bmV0d29ya3M8L3NwYW4+IHVzdWFsbHkgPHNwYW4g Y2xhc3M9Imluc2VydCI+YWRvcHQgYTwvc3Bhbj4gcmluZyB0b3BvbG9neSB0byBzYXZlIGZpYnJl PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0 cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2si PiAgIHRvIHNhdmUgZmlicmUgPHNwYW4gY2xhc3M9ImRlbGV0ZSI+cmVzb3VyY2UgYW5kPC9zcGFu PiBpdCBpcyBkaXZpZGVkIGludG8gdGhlIGFnZ3JlZ2F0ZSBuZXR3b3JrPC90ZD48dGQ+IDwvdGQ+ PHRkIGNsYXNzPSJyYmxvY2siPiAgIDxzcGFuIGNsYXNzPSJpbnNlcnQiPnJlc291cmNlczs8L3Nw YW4+IGl0IGlzIDxzcGFuIGNsYXNzPSJpbnNlcnQiPnVzdWFsbHk8L3NwYW4+IGRpdmlkZWQgaW50 byB0aGUgYWdncmVnYXRlIG5ldHdvcmsgYW5kIHRoZTwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZh bGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGln bj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj4gICBhbmQgdGhlIGFjY2VzcyBuZXR3b3Jr LiAgQ2VsbCBTaXRlIEdhdGV3YXlzKENTR3MpIGNvbm5lY3RzIHRoZTwvdGQ+PHRkPiA8L3RkPjx0 ZCBjbGFzcz0icmJsb2NrIj4gICBhY2Nlc3MgbmV0d29yay4gIENlbGwgU2l0ZSBHYXRld2F5cyhD U0dzKSBjb25uZWN0cyB0aGUgZU5vZGVCcyBhbmQ8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxp Z249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249 InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+ICAgZU5vZGVCcyBhbmQgUk5DKFJhZGlvIE5l dHdvcmsgQ29udHJvbGxlcikgU2l0ZSBHYXRld2F5cyhSU0dzKTwvdGQ+PHRkPiA8L3RkPjx0ZCBj bGFzcz0icmJsb2NrIj4gICBSTkMoUmFkaW8gTmV0d29yayBDb250cm9sbGVyKSBTaXRlIEdhdGV3 YXlzKFJTR3MpIGNvbm5lY3RzIHRoZSBSTkNzLjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGln bj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0i dG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj4gICBjb25uZWN0cyB0aGUgUk5Dcy4gIFRoZSBt b2JpbGUgdHJhZmZpYyBpcyB0cmFuc3BvcnRlZCBmcm9tIENTR3MgdG88L3RkPjx0ZD4gPC90ZD48 dGQgY2xhc3M9InJibG9jayI+ICAgVGhlIG1vYmlsZSB0cmFmZmljIGlzIHRyYW5zcG9ydGVkIGZy b20gQ1NHcyB0byBSU0dzLiAgVGhlIG5ldHdvcms8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxp Z249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249 InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+ICAgUlNHcy4gIFRoZSBuZXR3b3JrIHRha2Vz IGEgdHlwaWNhbCBhZ2dyZWdhdGUgdHJhZmZpYyBtb2RlbCB0aGF0IG1vcmU8L3RkPjx0ZD4gPC90 ZD48dGQgY2xhc3M9InJibG9jayI+ICAgdGFrZXMgYSB0eXBpY2FsIGFnZ3JlZ2F0ZSB0cmFmZmlj IG1vZGVsIHRoYXQgbW9yZSB0aGFuIG9uZSBhY2Nlc3M8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2 YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxp Z249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+ICAgdGhhbiBvbmUgYWNjZXNzIHJpbmdz IHdpbGwgYXR0YWNoIHRvIG9uZSBwYWlyIG9mIGFnZ3JlZ2F0ZSBzaXRlPC90ZD48dGQ+IDwvdGQ+ PHRkIGNsYXNzPSJyYmxvY2siPiAgIHJpbmdzIHdpbGwgYXR0YWNoIHRvIG9uZSBwYWlyIG9mIGFn Z3JlZ2F0ZSBzaXRlIGdhdGV3YXlzKEFTR3MpIGFuZDwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZh bGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGln bj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj4gICBnYXRld2F5cyhBU0dzKSBhbmQgbW9y ZSB0aGFuIG9uZSBhZ2dyZWdhdGUgcmluZ3Mgd2lsbCBhdHRhY2ggdG8gb25lPC90ZD48dGQ+IDwv dGQ+PHRkIGNsYXNzPSJyYmxvY2siPiAgIG1vcmUgdGhhbiBvbmUgYWdncmVnYXRlIHJpbmdzIHdp bGwgYXR0YWNoIHRvIG9uZSBwYWlyIG9mIFJTR3MuPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFs aWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWdu PSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPiAgIHBhaXIgb2YgUlNHcy48L3RkPjx0ZD4g PC90ZD48dGQgY2xhc3M9InJibG9jayI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0 b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3Ai PjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij48 L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRy Pjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAg ICAgICAgICAgICAgICAgICAgIC0tLS0tLS0tLS0tLS0tLS08L3RkPjx0ZD4gPC90ZD48dGQgY2xh c3M9InJpZ2h0Ij4gICAgICAgICAgICAgICAgICAgICAtLS0tLS0tLS0tLS0tLS0tPC90ZD48dGQg Y2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xh c3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICAgICAgICAg ICAgICAgICAgIC8gICAgICAgICAgICAgICAgXDwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmln aHQiPiAgICAgICAgICAgICAgICAgICAgLyAgICAgICAgICAgICAgICBcPC90ZD48dGQgY2xhc3M9 ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9Imxp bmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICAgICAgICAgICAgICAg ICAgLyAgICAgICAgICAgICAgICAgIFw8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4g ICAgICAgICAgICAgICAgICAgLyAgICAgICAgICAgICAgICAgIFw8L3RkPjx0ZCBjbGFzcz0ibGlu ZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5v IiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgICAgICAgICAgICAgICAgIC8g ICAgICAgICAgICAgICAgICAgIFw8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICAg ICAgICAgICAgICAgICAvICAgICAgICAgICAgICAgICAgICBcPC90ZD48dGQgY2xhc3M9ImxpbmVu byIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIg dmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICAgICstLS0tLS0rICAgKy0tLS0r ICAgIEFjY2VzcyAgICAgKy0tLS0rPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAg ICArLS0tLS0tKyAgICstLS0tKyAgICBBY2Nlc3MgICAgICstLS0tKzwvdGQ+PHRkIGNsYXNzPSJs aW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5l bm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgICB8ZU5vZGVCfC0tLXxD U0cxfCAgICBSaW5nIDEgICAgIHxBU0cxfC0tLS0tLS0tLS0tLTwvdGQ+PHRkPiA8L3RkPjx0ZCBj bGFzcz0icmlnaHQiPiAgICAgfGVOb2RlQnwtLS18Q1NHMXwgICAgUmluZyAxICAgICB8QVNHMXwt LS0tLS0tLS0tLS08L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3Ry Pg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xh c3M9ImxlZnQiPiAgICAgKy0tLS0tLSsgICArLS0tLSsgICAgICAgICAgICAgICArLS0tLSsgICAg ICAgICAgICBcPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgICArLS0tLS0tKyAg ICstLS0tKyAgICAgICAgICAgICAgICstLS0tKyAgICAgICAgICAgIFw8L3RkPjx0ZCBjbGFzcz0i bGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGlu ZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgICAgICAgICAgICAgICAg IFwgICAgICAgICAgICAgICAgICAgIC8gICAgICAgICAgICAgICAgXDwvdGQ+PHRkPiA8L3RkPjx0 ZCBjbGFzcz0icmlnaHQiPiAgICAgICAgICAgICAgICAgIFwgICAgICAgICAgICAgICAgICAgIC8g ICAgICAgICAgICAgICAgXDwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3Rk PjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0 ZCBjbGFzcz0ibGVmdCI+ICAgICAgICAgICAgICAgICAgIFwgICAgICAgICAgICAgICAgICAvICAg ICAgICAgICAgICAgICAgKy0tLS0rICAgICstLS0rPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJy aWdodCI+ICAgICAgICAgICAgICAgICAgIFwgICAgICAgICAgICAgICAgICAvICAgICAgICAgICAg ICAgICAgKy0tLS0rICAgICstLS0rPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3Ai PjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9 ImxlZnQiPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPjwvdGQ+PHRkIGNsYXNzPSJs aW5lbm8iPjwvdGQ+PC90cj4NCiAgICAgIDx0ciBiZ2NvbG9yPSJncmF5Ij48dGQ+PC90ZD48dGg+ PGEgbmFtZT0icGFydC1sNSI+PHNtYWxsPnNraXBwaW5nIHRvIGNoYW5nZSBhdDwvc21hbGw+PGVt PiBwYWdlIDgsIGxpbmUgMzg8L2VtPjwvYT48L3RoPjx0aD4gPC90aD48dGg+PGEgbmFtZT0icGFy dC1yNSI+PHNtYWxsPnNraXBwaW5nIHRvIGNoYW5nZSBhdDwvc21hbGw+PGVtPiBwYWdlIDksIGxp bmUgMzM8L2VtPjwvYT48L3RoPjx0ZD48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJs aW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgICArLS0tLS0tKyAg ICstLS0tKyAgICAgICAgICAgICAgICArLS0tLSs8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJp Z2h0Ij4gICAgICstLS0tLS0rICAgKy0tLS0rICAgICAgICAgICAgICAgICstLS0tKzwvdGQ+PHRk IGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNs YXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgICAgICAg ICAgICAgICBcICAgICAgICAgICAgICAgICAgICAgLzwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0i cmlnaHQiPiAgICAgICAgICAgICAgICAgXCAgICAgICAgICAgICAgICAgICAgIC88L3RkPjx0ZCBj bGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFz cz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgICAgICAgICAg ICAgICAgIFwgICAgICAgICAgICAgICAgICAgLzwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmln aHQiPiAgICAgICAgICAgICAgICAgIFwgICAgICAgICAgICAgICAgICAgLzwvdGQ+PHRkIGNsYXNz PSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJs aW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgICAgICAgICAgICAg ICAgIFwgICAgICAgICAgICAgICAgIC88L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4g ICAgICAgICAgICAgICAgICAgXCAgICAgICAgICAgICAgICAgLzwvdGQ+PHRkIGNsYXNzPSJsaW5l bm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8i IHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgICAgICAgICAgICAgICAgICAt LS0tLS0tLS0tLS0tLS0tLTwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgICAgICAg ICAgICAgICAgICAgLS0tLS0tLS0tLS0tLS0tLS08L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxp Z249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249 InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmln aHQiPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAg ICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVm dCI+ICAgICAgICAgICAgICAgICAgICAgRmlndXJlIDI6IE1vYmlsZSBCYWNraGF1bCBOZXR3b3Jr PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgICAgICAgICAgICAgICAgICAgRmln dXJlIDI6IE1vYmlsZSBCYWNraGF1bCBOZXR3b3JrPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFs aWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWdu PSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJp Z2h0Ij48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAg ICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9Imxl ZnQiPiAgIEEgdHlwaWNhbCBtb2JpbGUgYmFjay1oYXVsIG5ldHdvcmsgd2l0aCBhY2Nlc3Mgcmlu Z3MgYW5kIGFnZ3JlZ2F0ZTwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIEEgdHlw aWNhbCBtb2JpbGUgYmFjay1oYXVsIG5ldHdvcmsgd2l0aCBhY2Nlc3MgcmluZ3MgYW5kIGFnZ3Jl Z2F0ZTwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAg ICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVm dCI+ICAgbGlua3MgaXMgc2hvd24gaW4gZmlndXJlIGFib3ZlLiAgVGhlIG1vYmlsZSBiYWNrLWhh dWwgbmV0d29ya3MgZGVwbG95PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgbGlu a3MgaXMgc2hvd24gaW4gZmlndXJlIGFib3ZlLiAgVGhlIG1vYmlsZSBiYWNrLWhhdWwgbmV0d29y a3MgZGVwbG95PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4N CiAgICAgIDx0cj48dGQ+PGEgbmFtZT0iZGlmZjAwMzciPjwvYT48L3RkPjwvdHI+DQogICAgICA8 dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2Nr Ij4gICB0cmFmZmljIGVuZ2luZWVyaW5nIGR1ZSB0byA8c3BhbiBjbGFzcz0iZGVsZXRlIj50aGU8 L3NwYW4+IHN0cmljdCBTZXJ2aWNlIExldmVsIEFncmVlbWVudHMoU0xBKS48L3RkPjx0ZD4gPC90 ZD48dGQgY2xhc3M9InJibG9jayI+ICAgdHJhZmZpYyBlbmdpbmVlcmluZyBkdWUgdG8gc3RyaWN0 IFNlcnZpY2UgTGV2ZWwgQWdyZWVtZW50cyhTTEEpLiAgVGhlPC90ZD48dGQgY2xhc3M9ImxpbmVu byIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIg dmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPiAgIFRoZSA8c3BhbiBjbGFzcz0i ZGVsZXRlIj5URTwvc3Bhbj4gcGF0aHMgbWF5IGhhdmUgYWRkaXRpb25hbCBjb25zdHJhaW50cyB0 byBhdm9pZCBwYXNzaW5nIHZpYTwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj4gICA8 c3BhbiBjbGFzcz0iaW5zZXJ0Ij5UcmFmZmljIEVuZ2luZWVyaW5nKFRFKTwvc3Bhbj4gcGF0aHMg bWF5IGhhdmUgYWRkaXRpb25hbCBjb25zdHJhaW50cyB0bzwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8i IHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZh bGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj4gICBkaWZmZXJlbnQgYWNjZXNzIHJp bmdzIG9yIHRvIGdldCBjb21wbGV0ZWx5IGRpc2pvaW50IGJhY2t1cCBURSBwYXRocy48L3RkPjx0 ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+ICAgYXZvaWQgcGFzc2luZyB2aWEgZGlmZmVyZW50 IGFjY2VzcyByaW5ncyBvciB0byBnZXQgY29tcGxldGVseTwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8i IHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZh bGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj4gICBUaGUgbW9iaWxlIGJhY2staGF1 bCBuZXR3b3JrcyB0b3dhcmRzIHRoZSBhY2Nlc3Mgc2lkZSBjaGFuZ2U8L3RkPjx0ZD4gPC90ZD48 dGQgY2xhc3M9InJibG9jayI+ICAgZGlzam9pbnQgYmFja3VwIFRFIHBhdGhzLiAgVGhlIG1vYmls ZSBiYWNrLWhhdWwgbmV0d29ya3MgdG93YXJkcyB0aGU8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2 YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxp Z249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+ICAgZnJlcXVlbnRseSBkdWUgdG8gdGhl IGdyb3dpbmcgbW9iaWxlIHRyYWZmaWMgYW5kIGFkZGl0aW9uIG9mIG5ldzwvdGQ+PHRkPiA8L3Rk Pjx0ZCBjbGFzcz0icmJsb2NrIj4gICBhY2Nlc3Mgc2lkZSBjaGFuZ2UgZnJlcXVlbnRseSBkdWUg dG8gdGhlIGdyb3dpbmcgbW9iaWxlIHRyYWZmaWMgYW5kPC90ZD48dGQgY2xhc3M9ImxpbmVubyIg dmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFs aWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPiAgIDxzcGFuIGNsYXNzPSJkZWxldGUi PmVOb2RlQnMuPC9zcGFuPiAgSXQncyBjb21wbGV4IHRvIHNhdGlzZnkgdGhlIHJlcXVpcmVtZW50 cyB1c2luZyBjb3N0LCBsaW5rPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPiAgIGFk ZGl0aW9uIG9mIG5ldyA8c3BhbiBjbGFzcz0iaW5zZXJ0Ij5MVEUgRXZvbHZlZCBOb2RlQnMgKGVO b2RlQikuPC9zcGFuPiAgSXQncyBjb21wbGV4IHRvIHNhdGlzZnk8L3RkPjx0ZCBjbGFzcz0ibGlu ZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5v IiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+ICAgY29sb3Igb3IgZXhwbGlj aXQgcGF0aCBjb25maWd1cmF0aW9ucy4gIFRoZSBub2RlIGFkbWluaXN0cmF0aXZlIHRhZzwvdGQ+ PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj4gICB0aGUgcmVxdWlyZW1lbnRzIHVzaW5nIGNv c3QsIGxpbmsgY29sb3Igb3IgZXhwbGljaXQgcGF0aDwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZh bGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGln bj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj4gICBkZWZpbmVkIGluIHRoaXMgZG9jdW1l bnQgY2FuIGJlIGVmZmVjdGl2ZWx5IHVzZWQgdG8gc29sdmUgdGhlIHByb2JsZW08L3RkPjx0ZD4g PC90ZD48dGQgY2xhc3M9InJibG9jayI+ICAgY29uZmlndXJhdGlvbnMuICBUaGUgbm9kZSBhZG1p bmlzdHJhdGl2ZSB0YWcgZGVmaW5lZCBpbiB0aGlzIGRvY3VtZW50PC90ZD48dGQgY2xhc3M9Imxp bmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVu byIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPiAgIGZvciBtb2JpbGUgYmFj ay1oYXVsIG5ldHdvcmtzLiAgVGhlIG5vZGVzIGluIGRpZmZlcmVudCByaW5ncyBjYW4gYmU8L3Rk Pjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+ICAgY2FuIGJlIGVmZmVjdGl2ZWx5IHVzZWQg dG8gc29sdmUgdGhlIHByb2JsZW0gZm9yIG1vYmlsZSBiYWNrLWhhdWw8L3RkPjx0ZCBjbGFzcz0i bGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGlu ZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+ICAgYXNzaWduZWQgd2l0 aCBzcGVjaWZpYyB0YWdzLiAgVEUgcGF0aCBjb21wdXRhdGlvbiBjYW4gYmUgZW5oYW5jZWQgdG88 L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+ICAgbmV0d29ya3MuICBUaGUgbm9kZXMg aW4gZGlmZmVyZW50IHJpbmdzIGNhbiBiZSBhc3NpZ25lZCB3aXRoIHNwZWNpZmljPC90ZD48dGQg Y2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xh c3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPiAgIGNvbnNp ZGVyIGFkZGl0aW9uYWwgY29uc3RyYWludHMgYmFzZWQgb24gbm9kZSBhZG1pbmlzdHJhdGl2ZSB0 YWdzLjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj4gICB0YWdzLiAgVEUgcGF0aCBj b21wdXRhdGlvbiBjYW4gYmUgZW5oYW5jZWQgdG8gY29uc2lkZXIgYWRkaXRpb25hbDwvdGQ+PHRk IGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNs YXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48L3RkPjx0 ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+ICAgY29uc3RyYWludHMgYmFzZWQgb24gbm9kZSBh ZG1pbmlzdHJhdGl2ZSB0YWdzLjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48 L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3Rk Pjx0ZCBjbGFzcz0ibGVmdCI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+PC90ZD48 dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQg Y2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij40LjUuICBF eHBsaWNpdCByb3V0aW5nIHBvbGljeTwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPjQu NS4gIEV4cGxpY2l0IHJvdXRpbmcgcG9saWN5PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWdu PSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0 b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0 Ij48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAg PHRyPjx0ZD48YSBuYW1lPSJkaWZmMDAzOCI+PC9hPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQg Y2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPiAgIDxz cGFuIGNsYXNzPSJkZWxldGUiPlA8L3NwYW4+YXJ0aWFsbHkgbWVzaGVkIG5ldHdvcmsgcHJvdmlk ZXMgbXVsdGlwbGUgcGF0aHMgYmV0d2VlbiBhbnkgdHdvPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNz PSJyYmxvY2siPiAgIDxzcGFuIGNsYXNzPSJpbnNlcnQiPkEgcDwvc3Bhbj5hcnRpYWxseSBtZXNo ZWQgbmV0d29yayBwcm92aWRlcyBtdWx0aXBsZSBwYXRocyBiZXR3ZWVuIGFueSB0d288L3RkPjx0 ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBj bGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIG5vZGVz IGluIHRoZSBuZXR3b3JrLiAgSW4gYSBkYXRhIGNlbnRyZSBlbnZpcm9ubWVudCwgdGhlIHRvcG9s b2d5IGlzPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgbm9kZXMgaW4gdGhlIG5l dHdvcmsuICBJbiBhIGRhdGEgY2VudHJlIGVudmlyb25tZW50LCB0aGUgdG9wb2xvZ3kgaXM8L3Rk Pjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0 ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIHVz dWFsbHkgaGlnaGx5IHN5bW1ldHJpYyB3aXRoIG1hbnkvYWxsIHBhdGhzIGhhdmluZyBlcXVhbCBj b3N0LiAgSW4gYTwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIHVzdWFsbHkgaGln aGx5IHN5bW1ldHJpYyB3aXRoIG1hbnkvYWxsIHBhdGhzIGhhdmluZyBlcXVhbCBjb3N0LiAgSW4g YTwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8 dHI+PHRkPjxhIG5hbWU9ImRpZmYwMDM5Ij48L2E+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBj bGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+ICAgbG9u ZyBkaXN0YW5jZSBuZXR3b3JrLCB0aGlzIGlzIHVzdWFsbHkgbGVzcyB0aGUgPHNwYW4gY2xhc3M9 ImRlbGV0ZSI+Y2FzZTwvc3Bhbj4gZm9yIGEgdmFyaWV0eSBvZjwvdGQ+PHRkPiA8L3RkPjx0ZCBj bGFzcz0icmJsb2NrIj4gICBsb25nIGRpc3RhbmNlIG5ldHdvcmssIHRoaXMgaXMgdXN1YWxseSBs ZXNzIHRoZSA8c3BhbiBjbGFzcz0iaW5zZXJ0Ij5jYXNlLDwvc3Bhbj4gZm9yIGEgdmFyaWV0eTwv dGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+ PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj4g ICByZWFzb25zIChlLmcuIGhpc3RvcmljLCBmaWJyZSBhdmFpbGFiaWxpdHkgY29uc3RyYWludHMs IGRpZmZlcmVudDwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj4gICBvZiByZWFzb25z IChlLmcuIGhpc3RvcmljLCBmaWJyZSBhdmFpbGFiaWxpdHkgY29uc3RyYWludHMsIGRpZmZlcmVu dDwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8 dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ ICAgZGlzdGFuY2VzIGJldHdlZW4gdHJhbnNpdCBub2RlcywgZGlmZmVyZW50IHJvbGVzIC4uLiku ICBIZW5jZSBiZXR3ZWVuPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgZGlzdGFu Y2VzIGJldHdlZW4gdHJhbnNpdCBub2RlcywgZGlmZmVyZW50IHJvbGVzIC4uLikuICBIZW5jZSBi ZXR3ZWVuPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAg ICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJs ZWZ0Ij4gICBhIGdpdmVuIHNvdXJjZSBhbmQgZGVzdGluYXRpb24sIGEgcGF0aCBpcyB0eXBpY2Fs bHkgcHJlZmVycmVkIG92ZXI8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBhIGdp dmVuIHNvdXJjZSBhbmQgZGVzdGluYXRpb24sIGEgcGF0aCBpcyB0eXBpY2FsbHkgcHJlZmVycmVk IG92ZXI8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAg ICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9Imxl ZnQiPiAgIHRoZSBvdGhlcnMsIHdoaWxlIGJldHdlZW4gdGhlIHNhbWUgc291cmNlIGFuZCBhbm90 aGVyIGRlc3RpbmF0aW9uLCBhPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgdGhl IG90aGVycywgd2hpbGUgYmV0d2VlbiB0aGUgc2FtZSBzb3VyY2UgYW5kIGFub3RoZXIgZGVzdGlu YXRpb24sIGE8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0K ICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9 ImxlZnQiPiAgIGRpZmZlcmVudCBwYXRoIG1heSBiZSBwcmVmZXJyZWQuPC90ZD48dGQ+IDwvdGQ+ PHRkIGNsYXNzPSJyaWdodCI+ICAgZGlmZmVyZW50IHBhdGggbWF5IGJlIHByZWZlcnJlZC48L3Rk Pjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0 ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPjwvdGQ+ PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGln bj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0i dG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICstLS0tLS0tLS0tLS0tLS0tLS0tLSs8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4g ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgKy0tLS0tLS0tLS0tLS0tLS0tLS0tKzwvdGQ+ PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRk IGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgIHwgICAgICAgICAgICAgICAgICAgIHw8L3RkPjx0ZD4g PC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgfCAg ICAgICAgICAgICAgICAgICAgfDwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48 L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3Rk Pjx0ZCBjbGFzcz0ibGVmdCI+ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIHwgICAgKy0t LS0tLS0tLS0rICAgIHw8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgfCAgICArLS0tLS0tLS0tLSsgICAgfDwvdGQ+PHRkIGNsYXNz PSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJs aW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgIHwgICAgfCAgICAgICAgICB8ICAgIHw8L3RkPjx0ZD4gPC90ZD48dGQg Y2xhc3M9InJpZ2h0Ij4gICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgfCAgICB8ICAgICAg ICAgIHwgICAgfDwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+ DQogICAgICA8dHI+PHRkPjxhIG5hbWU9ImRpZmYwMDQwIj48L2E+PC90ZD48L3RyPg0KICAgICAg PHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9j ayI+ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIDxzcGFuIGNsYXNzPSJkZWxldGUiPlQt MTAtVDwvc3Bhbj4gICAgICAgICAgfCAgICB8PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxv Y2siPiAgICAgICAgICAgICAgICAgICAgICAgICAgICAgPHNwYW4gY2xhc3M9Imluc2VydCI+Ky1U LTEwLVQ8L3NwYW4+ICAgICAgICAgIHwgICAgfDwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGln bj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0i dG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj4gICAgICAgICAgICAgICAgICAgICAgICAgICAg ICA8c3BhbiBjbGFzcz0iZGVsZXRlIj4vfDwvc3Bhbj4gICAvfCAgICAgICAgICB8ICAgIHw8L3Rk Pjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+ICAgICAgICAgICAgICAgICAgICAgICAgICAg IDxzcGFuIGNsYXNzPSJpbnNlcnQiPi8gIHw8L3NwYW4+ICAgL3wgICAgICAgICAgfCAgICB8PC90 ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48 dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPiAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgLyA8c3BhbiBjbGFzcz0iZGVsZXRlIj58PC9zcGFu PiAgLyB8ICAgICAgICAgIHwgICAgfDwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj4g ICAgICAgICAgICAgICAgICAgICAgICAgICAvICA8c3BhbiBjbGFzcz0iaW5zZXJ0Ij4xMDA8L3Nw YW4+IC8gfCAgICAgICAgICB8ICAgIHw8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRv cCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+ PC90ZD48dGQgY2xhc3M9ImxibG9jayI+ICAgICAgICAgICAgICAgICAgICAgICAgICA8c3BhbiBj bGFzcz0iZGVsZXRlIj4tLSsgIHw8L3NwYW4+IHwgIHwgICAgICAgICAgfCAgICB8PC90ZD48dGQ+ IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPiAgICAgICAgICAgICAgICAgICAgICAgICAgPHNwYW4g Y2xhc3M9Imluc2VydCI+Lzwvc3Bhbj4gICAgfCB8IDxzcGFuIGNsYXNzPSJpbnNlcnQiPjEwMDwv c3Bhbj4gICAgICAgICB8ICAgIHw8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+ PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90 ZD48dGQgY2xhc3M9ImxibG9jayI+ICAgICAgICAgICAgICAgICAgICAgICAgIC8gIDxzcGFuIGNs YXNzPSJkZWxldGUiPistLSstKyAxMDA8L3NwYW4+ICAgICAgICAgfCAgICB8PC90ZD48dGQ+IDwv dGQ+PHRkIGNsYXNzPSJyYmxvY2siPiAgICAgICAgICAgICAgICAgICAgICAgICAvICAgPHNwYW4g Y2xhc3M9Imluc2VydCI+Ky0rLSsgIHw8L3NwYW4+ICAgICAgICAgIHwgICAgfDwvdGQ+PHRkIGNs YXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNz PSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj4gICAgICAgICAg ICAgICAgICAgICAgICAvICAvICAgfCAgICB8ICAgICAgICAgIHwgICAgfDwvdGQ+PHRkPiA8L3Rk Pjx0ZCBjbGFzcz0icmJsb2NrIj4gICAgICAgICAgICAgICAgICAgICAgICAvICAgLyAgfCAgICB8 ICAgICAgICAgIHwgICAgfDwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3Rk PjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0 ZCBjbGFzcz0ibGJsb2NrIj4gICAgICAgICAgICAgICAgICAgICAgIC8gIC8gICAgUi0xOC1SICAg ICAgICAgIHwgICAgfDwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj4gICAgICAgICAg ICAgICAgICAgICAgIC8gICAvICAgUi0xOC1SICAgICAgICAgIHwgICAgfDwvdGQ+PHRkIGNsYXNz PSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJs aW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj4gICAgICAgICAgICAg ICAgICAgICAgPHNwYW4gY2xhc3M9ImRlbGV0ZSI+LyAgLzwvc3Bhbj4gICAgL1wgICAvXCAgICAg ICAgICB8ICAgIHw8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+ICAgICAgICAgICAg ICAgICAgICAgPHNwYW4gY2xhc3M9Imluc2VydCI+MTAgICAxMDwvc3Bhbj4gIC9cICAgL1wgICAg ICAgICAgfCAgICB8PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90 cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNs YXNzPSJsYmxvY2siPiAgICAgICAgICAgICAgICAgICAgIC8gIDxzcGFuIGNsYXNzPSJkZWxldGUi Pnw8L3NwYW4+ICAgIC8gIFwgLyAgXCAgICAgICAgIHwgICAgfDwvdGQ+PHRkPiA8L3RkPjx0ZCBj bGFzcz0icmJsb2NrIj4gICAgICAgICAgICAgICAgICAgICAvICAgPHNwYW4gY2xhc3M9Imluc2Vy dCI+Lzwvc3Bhbj4gICAvICBcIC8gIFwgICAgICAgICB8ICAgIHw8L3RkPjx0ZCBjbGFzcz0ibGlu ZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5v IiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgICAgICAgICAgICAgICAgICAg LyAgIHwgICAvICAgIHggICAgXCAgICAgICAgfCAgICB8PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNz PSJyaWdodCI+ICAgICAgICAgICAgICAgICAgICAvICAgfCAgIC8gICAgeCAgICBcICAgICAgICB8 ICAgIHw8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAg ICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9Imxl ZnQiPiAgICAgICAgICAgICAgICAgICBBLTI1LUEgIDEwICAxMCBcICAgIFwgICAgICAgfCAgICB8 PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgICAgICAgICAgICAgICAgIEEtMjUt QSAgMTAgIDEwIFwgICAgXCAgICAgICB8ICAgIHw8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxp Z249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249 InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgICAgICAgICAgICAgICAgICAgICAgICAgLyAg ICAvICAgMTAgICAxMCAgICAgfCAgICB8PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ ICAgICAgICAgICAgICAgICAgICAgICAgICAvICAgIC8gICAxMCAgIDEwICAgICB8ICAgIHw8L3Rk Pjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0 ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgICAg ICAgICAgICAgICAgICAgICAgICAvICAgIC8gICAgIFwgICAgXCAgICAgfCAgICB8PC90ZD48dGQ+ IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgICAgICAgICAgICAgICAgICAgICAgIC8gICAgLyAg ICAgXCAgICBcICAgICB8ICAgIHw8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+ PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90 ZD48dGQgY2xhc3M9ImxlZnQiPiAgICAgICAgICAgICAgICAgICAgICAgIEEtMjUtQSAgICAgICBB LTI1LUEgICAgfCAgICB8PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgICAgICAg ICAgICAgICAgICAgICAgQS0yNS1BICAgICAgIEEtMjUtQSAgICB8ICAgIHw8L3RkPjx0ZCBjbGFz cz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0i bGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgICAgICAgICAgICAg ICAgICAgICAgICBcICAgIFwgICAgIC8gICAgLyAgICAgfCAgICB8PC90ZD48dGQ+IDwvdGQ+PHRk IGNsYXNzPSJyaWdodCI+ICAgICAgICAgICAgICAgICAgICAgICAgIFwgICAgXCAgICAgLyAgICAv ICAgICB8ICAgIHw8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3Ry Pg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xh c3M9ImxlZnQiPiAgICAgICAgICAgICAgICAgICAgICAgICAyMDEgIDIwMSAgMjAxIDIwMSAgICAg fCAgICB8PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgICAgICAgICAgICAgICAg ICAgICAgIDIwMSAgMjAxICAyMDEgMjAxICAgICB8ICAgIHw8L3RkPjx0ZCBjbGFzcz0ibGluZW5v IiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2 YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgICAgICAgICAgICAgICAgICAgICAg ICAgIFwgICAgXCAvICAgIC8gICAgICAgfCAgICB8PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJy aWdodCI+ICAgICAgICAgICAgICAgICAgICAgICAgICAgXCAgICBcIC8gICAgLyAgICAgICB8ICAg IHw8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAg PHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQi PiAgICAgICAgICAgICAgICAgICAgICAgICAgICBcICAgIHggICAgLyAgICAgICAgfCAgICB8PC90 ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgICAgICAgICAgICAgICAgICAgICAgICAg IFwgICAgeCAgICAvICAgICAgICB8ICAgIHw8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249 InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRv cCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgICAgICAgICAgICAgICAgICAgICAgICAgICAgXCAg LyBcICAvICAgICAgICAgfCAgICB8PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAg ICAgICAgICAgICAgICAgICAgICAgICAgICBcICAvIFwgIC8gICAgICAgICB8ICAgIHw8L3RkPjx0 ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBj bGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgIFwvICAgXC8gICAgICAgICAgfCAgICB8PC90ZD48dGQ+IDwv dGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgXC8gICBc LyAgICAgICAgICB8ICAgIHw8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90 ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48 dGQgY2xhc3M9ImxlZnQiPiAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIEktMjQtSSAgICAg ICAgICAxMDAgIDEwMDwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgIEktMjQtSSAgICAgICAgICAxMDAgIDEwMDwvdGQ+PHRkIGNsYXNz PSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJs aW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgfCAgICB8ICAgICAgICAgICB8ICAgIHw8L3RkPjx0ZD4gPC90ZD48dGQg Y2xhc3M9InJpZ2h0Ij4gICAgICAgICAgICAgICAgICAgICAgICAgICAgICB8ICAgIHwgICAgICAg ICAgIHwgICAgfDwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+ DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFz cz0ibGVmdCI+ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgfCAgICArLS0tLS0tLS0tLS0r ICAgIHw8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICAgICAgICAgICAgICAgICAg ICAgICAgICAgICB8ICAgICstLS0tLS0tLS0tLSsgICAgfDwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8i IHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZh bGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgfCAgICAgICAgICAgICAgICAgICAgIHw8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJp Z2h0Ij4gICAgICAgICAgICAgICAgICAgICAgICAgICAgICB8ICAgICAgICAgICAgICAgICAgICAg fDwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8 dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgKy0tLS0tLS0tLS0tLS0tLS0tLS0tLSs8L3Rk Pjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICAgICAgICAgICAgICAgICAgICAgICAgICAg ICArLS0tLS0tLS0tLS0tLS0tLS0tLS0tKzwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0i dG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9w Ij48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0 cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4g ICAgICAgICAgICAgICAgICAgIEZpZ3VyZSAzOiBFeHBsaWNpdCBSb3V0aW5nIHRvcG9sb2d5PC90 ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgICAgICAgICAgICAgICAgICBGaWd1cmUg MzogRXhwbGljaXQgUm91dGluZyB0b3BvbG9neTwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGln bj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0i dG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdo dCI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAg IDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0 Ij4gICBJbiB0aGUgYWJvdmUgdG9wb2xvZ3ksIG9wZXJhdG9yIG1heSB3YW50IHRvIGVuZm9yY2Ug dGhlIGZvbGxvd2luZzwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIEluIHRoZSBh Ym92ZSB0b3BvbG9neSwgb3BlcmF0b3IgbWF5IHdhbnQgdG8gZW5mb3JjZSB0aGUgZm9sbG93aW5n PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0 cj48dGQ+PGEgbmFtZT0iZGlmZjAwNDEiPjwvYT48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNs YXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj4gICBoaWdo IGxldmVsIGV4cGxpY2l0PHNwYW4gY2xhc3M9ImRlbGV0ZSI+bHkgcm91dGVkPC9zcGFuPiBwb2xp Y2llczo8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+ICAgaGlnaCBsZXZlbCBleHBs aWNpdDxzcGFuIGNsYXNzPSJpbnNlcnQiPiByb3V0aW5nPC9zcGFuPiBwb2xpY2llczo8L3RkPjx0 ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBj bGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPjwvdGQ+PHRk PiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0i dG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkPjxhIG5hbWU9ImRpZmYwMDQyIj48L2E+PC90 ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48 dGQgY2xhc3M9ImxibG9jayI+ICAgICAgLSBUcmFmZmljIGZyb20gQSBub2RlcyB0byBBIG5vZGVz IDxzcGFuIGNsYXNzPSJkZWxldGUiPm11c3Qgbm90PC9zcGFuPiBnbyB0aHJvdWdoIDxzcGFuIGNs YXNzPSJkZWxldGUiPkk8L3NwYW4+IG5vZGVzPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxv Y2siPiAgICAgIC0gVHJhZmZpYyBmcm9tIEEgbm9kZXMgdG8gQSBub2RlcyA8c3BhbiBjbGFzcz0i aW5zZXJ0Ij5zaG91bGQgcHJlZmVyYWJseTwvc3Bhbj4gZ28gdGhyb3VnaCA8c3BhbiBjbGFzcz0i aW5zZXJ0Ij5SPC9zcGFuPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3Rk PjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0 ZCBjbGFzcz0ibGJsb2NrIj48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+PHNwYW4g Y2xhc3M9Imluc2VydCI+ICAgICAgb3IgVDwvc3Bhbj4gbm9kZXMgPHNwYW4gY2xhc3M9Imluc2Vy dCI+KHJhdGhlciB0aGFuIHRocm91Z2ggSSBub2Rlcyk7PC9zcGFuPjwvdGQ+PHRkIGNsYXNzPSJs aW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5l bm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+PC90ZD48dGQ+IDwvdGQ+PHRk IGNsYXNzPSJyaWdodCI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+ PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRk IGNsYXNzPSJsZWZ0Ij4gICAgICAtIFRyYWZmaWMgZnJvbSBBIG5vZGVzIHRvIEkgbm9kZXMgbXVz dCBub3QgZ28gdGhyb3VnaCBSIGFuZCBUPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ ICAgICAgLSBUcmFmZmljIGZyb20gQSBub2RlcyB0byBJIG5vZGVzIG11c3Qgbm90IGdvIHRocm91 Z2ggUiBhbmQgVDwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+ DQogICAgICA8dHI+PHRkPjxhIG5hbWU9ImRpZmYwMDQzIj48L2E+PC90ZD48L3RyPg0KICAgICAg PHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9j ayI+ICAgICAgbm9kZXM8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+ICAgICAgbm9k ZXM8c3BhbiBjbGFzcz0iaW5zZXJ0Ij4uPC9zcGFuPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZh bGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGln bj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJy aWdodCI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAg ICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJs ZWZ0Ij4gICBXaXRoIG5vZGUgYWRtaW4gdGFncywgdGFnIEEgKHJlc3AuICBJLCBSLCBUKSBjYW4g YmUgY29uZmlndXJlZCBvbiBhbGw8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBX aXRoIG5vZGUgYWRtaW4gdGFncywgdGFnIEEgKHJlc3AuICBJLCBSLCBUKSBjYW4gYmUgY29uZmln dXJlZCBvbiBhbGw8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3Ry Pg0KICAgICAgPHRyPjx0ZD48YSBuYW1lPSJkaWZmMDA0NCI+PC9hPjwvdGQ+PC90cj4NCiAgICAg IDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxv Y2siPiAgIEEgKHJlc3AuICBJLCBSLCBUKSBub2RlcyB0byBhZHZlcnRpc2UgdGhlaXIgcm9sZS4g IDxzcGFuIGNsYXNzPSJkZWxldGUiPlRoZW48L3NwYW4+IGEgZ2VuZXJpYzwvdGQ+PHRkPiA8L3Rk Pjx0ZCBjbGFzcz0icmJsb2NrIj4gICBBIChyZXNwLiAgSSwgUiwgVCkgbm9kZXMgdG8gYWR2ZXJ0 aXNlIHRoZWlyIHJvbGUuICA8c3BhbiBjbGFzcz0iaW5zZXJ0Ij5UaGUgZmlyc3QgcG9saWN5PC9z cGFuPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAg ICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJs b2NrIj4gICBDU1BGIHBvbGljeSA8c3BhbiBjbGFzcz0iZGVsZXRlIj5jYW4gYmU8L3NwYW4+IGNv bmZpZ3VyZWQgb24gPHNwYW4gY2xhc3M9ImRlbGV0ZSI+YWxsPC9zcGFuPiBBIG5vZGVzIDxzcGFu IGNsYXNzPSJkZWxldGUiPnRvIGVuZm9yY2U8L3NwYW4+IHRoZSA8c3BhbiBjbGFzcz0iZGVsZXRl Ij5hYm92ZTwvc3Bhbj48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+PHNwYW4gY2xh c3M9Imluc2VydCI+ICAgaXMgYWJvdXQgcHJlZmVycmluZyBvbmUgcGF0aCBvdmVyIGFub3RoZXIu ICBHaXZlbiB0aGUgY2hvc2VuIG1ldHJpY3MsPC9zcGFuPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8i IHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZh bGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48c3BhbiBjbGFzcz0iZGVsZXRlIj4g ICBleHBsaWNpdCByb3V0aW5nIG9iamVjdGl2ZXMuICAoZS5nLjwvc3Bhbj4gIENTUEYgPHNwYW4g Y2xhc3M9ImRlbGV0ZSI+dG8gZGVzdGluYXRpb25zIEEgZXhjbHVkZTwvc3Bhbj48L3RkPjx0ZD4g PC90ZD48dGQgY2xhc3M9InJibG9jayI+PHNwYW4gY2xhc3M9Imluc2VydCI+ICAgaXQgaXMgYWNo aWV2ZWQgd2l0aCByZWd1bGFyIFNQRiByb3V0aW5nLiAgVGhlIHNlY29uZCBwb2xpY3kgaXMgYWJv dXQ8L3NwYW4+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4N CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNz PSJsYmxvY2siPjxzcGFuIGNsYXNzPSJkZWxldGUiPiAgIG5vZGU8L3NwYW4+IHdpdGggPHNwYW4g Y2xhc3M9ImRlbGV0ZSI+dGFncyBJKS48L3NwYW4+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJy YmxvY2siPjxzcGFuIGNsYXNzPSJpbnNlcnQiPiAgIHByb2hpYml0aW5nIChwcnVuaW5nKSBzb21l IHBhdGhzLiAgSXQgcmVxdWlyZXMgYW4gZXhwbGljaXQgcm91dGluZzwvc3Bhbj48L3RkPjx0ZCBj bGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFz cz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+PC90ZD48dGQ+ IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPjxzcGFuIGNsYXNzPSJpbnNlcnQiPiAgIHBvbGljeS4g IFdpdGggdGhlIHVzZSBvZiBub2RlIHRhZ3MsIHRoaXMgbWF5IGJlIGFjaGlldmVkIHdpdGg8L3Nw YW4+IGE8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAg ICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9Imxi bG9jayI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPiAgIGdlbmVyaWMgQ1NQRiBw b2xpY3kgY29uZmlndXJlZCBvbiBBIDxzcGFuIGNsYXNzPSJpbnNlcnQiPm5vZGVzOiBmb3IgZGVz dGluYXRpb248L3NwYW4+IG5vZGVzPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3Ai PjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwv dGQ+PHRkIGNsYXNzPSJsYmxvY2siPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj4g ICA8c3BhbiBjbGFzcz0iaW5zZXJ0Ij5oYXZpbmc8L3NwYW4+IHRoZSA8c3BhbiBjbGFzcz0iaW5z ZXJ0Ij50YWcgIkEiIHJ1bnMgYTwvc3Bhbj4gQ1NQRiB3aXRoIDxzcGFuIGNsYXNzPSJpbnNlcnQi PnRoZSBleGNsdXNpb24gb2Ygbm9kZXMgaGF2aW5nIHRoZTwvc3Bhbj48L3RkPjx0ZCBjbGFzcz0i bGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGlu ZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+PC90ZD48dGQ+IDwvdGQ+ PHRkIGNsYXNzPSJyYmxvY2siPjxzcGFuIGNsYXNzPSJpbnNlcnQiPiAgIHRhZyAiSSIuPC9zcGFu PjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8 dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIg dmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFs aWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij41LiAgU2VjdXJpdHkgQ29uc2lkZXJhdGlv bnM8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij41LiAgU2VjdXJpdHkgQ29uc2lkZXJh dGlvbnM8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAg ICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9Imxl ZnQiPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPjwvdGQ+PHRkIGNsYXNzPSJsaW5l bm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkPjxhIG5hbWU9ImRpZmYw MDQ1Ij48L2E+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249 InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+ICAgTm9kZSA8c3BhbiBjbGFzcz0iZGVsZXRl Ij5hZG1pbjwvc3Bhbj4gdGFncyBtYXkgYmUgdXNlZCBieSBvcGVyYXRvcnMgdG8gaW5kaWNhdGUg Z2VvZ3JhcGhpY2FsPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPiAgIE5vZGUgPHNw YW4gY2xhc3M9Imluc2VydCI+YWRtaW5pc3RyYXRpdmU8L3NwYW4+IHRhZ3MgbWF5IGJlIHVzZWQg Ynkgb3BlcmF0b3JzIHRvIGluZGljYXRlPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0 b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3Ai PjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPiAgIGxvY2F0aW9uIG9yIG90aGVyIHNlbnNpdGl2ZSBp bmZvcm1hdGlvbi4gIEFzIGluZGljYXRlZCBpbiBbUkZDMjMyOF08L3RkPjx0ZD4gPC90ZD48dGQg Y2xhc3M9InJibG9jayI+ICAgZ2VvZ3JhcGhpY2FsIGxvY2F0aW9uIG9yIG90aGVyIHNlbnNpdGl2 ZSBpbmZvcm1hdGlvbi4gIEFzIGluZGljYXRlZDwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGln bj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0i dG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj4gICBhbmQgW1JGQzUzNDBdIE9TUEYgYXV0aGVu dGljYXRpb24gbWVjaGFuaXNtcyBkbyBub3QgcHJvdmlkZTwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFz cz0icmJsb2NrIj4gICBpbiBbUkZDMjMyOF0gYW5kIFtSRkM1MzQwXSBPU1BGIGF1dGhlbnRpY2F0 aW9uIG1lY2hhbmlzbXMgZG8gbm90PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3Ai PjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwv dGQ+PHRkIGNsYXNzPSJsYmxvY2siPiAgIGNvbmZpZGVudGlhbGl0eSBhbmQgdGhlIGluZm9ybWF0 aW9uIGNhcnJpZWQgaW4gbm9kZSA8c3BhbiBjbGFzcz0iZGVsZXRlIj5hZG1pbjwvc3Bhbj4gdGFn cyBjb3VsZDwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj4gICBwcm92aWRlIGNvbmZp ZGVudGlhbGl0eSBhbmQgdGhlIGluZm9ybWF0aW9uIGNhcnJpZWQgaW4gbm9kZTwvdGQ+PHRkIGNs YXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNz PSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj4gICBiZSBsZWFr ZWQgdG8gYW4gSUdQIHNub29wZXIuPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPiAg IDxzcGFuIGNsYXNzPSJpbnNlcnQiPmFkbWluaXN0cmF0aXZlPC9zcGFuPiB0YWdzIGNvdWxkIGJl IGxlYWtlZCB0byBhbiBJR1Agc25vb3Blci48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249 InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRv cCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQi PjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8 dHI+PHRkPjxhIG5hbWU9ImRpZmYwMDQ2Ij48L2E+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBj bGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+Ni4gIElB TkEgQ29uc2lkZXJhdGlvbnM8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+ICAgPHNw YW4gY2xhc3M9Imluc2VydCI+QWR2ZXJ0aXNlbWVudCBvZiB0YWcgdmFsdWVzIGZvciBvbmUgYWRt aW5pc3RyYXRpdmUgZG9tYWluIGludG88L3NwYW4+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFs aWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWdu PSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0i cmJsb2NrIj48c3BhbiBjbGFzcz0iaW5zZXJ0Ij4gICBhbm90aGVyIHJpc2tzIG1pc2ludGVycHJl dGF0aW9uIG9mIHRoZSB0YWcgdmFsdWVzIChpZiB0aGUgdHdvIGRvbWFpbnM8L3NwYW4+PC90ZD48 dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQg Y2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPjwvdGQ+ PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48c3BhbiBjbGFzcz0iaW5zZXJ0Ij4gICBoYXZl IGFzc2lnbmVkIGRpZmZlcmVudCBtZWFuaW5ncyB0byB0aGUgc2FtZSB2YWx1ZXMpLCB3aGljaCBt YXkgaGF2ZTwvc3Bhbj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48 L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQg Y2xhc3M9ImxibG9jayI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPjxzcGFuIGNs YXNzPSJpbnNlcnQiPiAgIHVuZGVzaXJhYmxlIGFuZCB1bmFudGljaXBhdGVkIHNpZGUgZWZmZWN0 cy48L3NwYW4+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4N CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNz PSJsYmxvY2siPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48c3BhbiBjbGFzcz0i aW5zZXJ0Ij48L3NwYW4+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+ PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRk IGNsYXNzPSJsYmxvY2siPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48c3BhbiBj bGFzcz0iaW5zZXJ0Ij4gICBbUkZDNDU5M10gYW5kIFtSRkM2ODYzXSAgZGlzY3VzcyB0aGUgZ2Vu ZXJpYyB0aHJlYXRzIHRvIHJvdXRpbmc8L3NwYW4+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFs aWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWdu PSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0i cmJsb2NrIj48c3BhbiBjbGFzcz0iaW5zZXJ0Ij4gICBwcm90b2NvbHMgYW5kIE9TUEYgcmVzcGVj dGl2ZWx5LiAgVGhlc2Ugc2VjdXJpdHkgdGhyZWF0cyBhcmUgYWxzbzwvc3Bhbj48L3RkPjx0ZCBj bGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFz cz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+PC90ZD48dGQ+ IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPjxzcGFuIGNsYXNzPSJpbnNlcnQiPiAgIGFwcGxpY2Fi bGUgdG8gdGhlIG1lY2hhbmlzbXMgZGVzY3JpYmVkIGluIHRoaXMgZG9jdW1lbnQuT1NQRjwvc3Bh bj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAg PHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9j ayI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPjxzcGFuIGNsYXNzPSJpbnNlcnQi PiAgIGF1dGhlbnRpY2F0aW9uIGRlc2NyaWJlZCBpbiBbUkZDMjMyOF0gYW5kIFtSRkM1MzQwXSBv ciBleHRlbmRlZDwvc3Bhbj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90 ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48 dGQgY2xhc3M9ImxibG9jayI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPjxzcGFu IGNsYXNzPSJpbnNlcnQiPiAgIGF1dGhlbnRpY2F0aW9uIG1lY2hhbmlzbXMgZGVzY3JpYmVkIGlu IFtSRkM3NDc0XSBvciBbUkZDNzE2Nl0gU0hPVUxEPC9zcGFuPjwvdGQ+PHRkIGNsYXNzPSJsaW5l bm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8i IHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48L3RkPjx0ZD4gPC90ZD48dGQg Y2xhc3M9InJibG9jayI+PHNwYW4gY2xhc3M9Imluc2VydCI+ICAgYmUgdXNlZCBpbiBkZXBsb3lt ZW50cyB3aGVyZSBhdHRhY2tlcnMgaGF2ZSBhY2Nlc3MgdG8gdGhlIHBoeXNpY2FsPC9zcGFuPjwv dGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+ PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48 L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+PHNwYW4gY2xhc3M9Imluc2VydCI+ICAg bmV0d29ya3MgYW5kIG5vZGVzIGluY2x1ZGVkIGluIHRoZSBPU1BGIGRvbWFpbiBhcmUgdnVsbmVy YWJsZS48L3NwYW4+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90 cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNs YXNzPSJsYmxvY2siPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj4gICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAg ICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJs YmxvY2siPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj42LiAgPHNwYW4gY2xhc3M9 Imluc2VydCI+T3BlcmF0aW9uYWwgQ29uc2lkZXJhdGlvbnM8L3NwYW4+PC90ZD48dGQgY2xhc3M9 ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9Imxp bmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPjwvdGQ+PHRkPiA8L3Rk Pjx0ZCBjbGFzcz0icmJsb2NrIj48c3BhbiBjbGFzcz0iaW5zZXJ0Ij48L3NwYW4+PC90ZD48dGQg Y2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xh c3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPjwvdGQ+PHRk PiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48c3BhbiBjbGFzcz0iaW5zZXJ0Ij4gICBPcGVyYXRv cnMgY2FuIGFzc2lnbiBtZWFuaW5nIHRvIHRoZSBub2RlIGFkbWluaXN0cmF0aXZlIHRhZ3Mgd2hp Y2ggaXM8L3NwYW4+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90 cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNs YXNzPSJsYmxvY2siPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48c3BhbiBjbGFz cz0iaW5zZXJ0Ij4gICBsb2NhbCB0byB0aGUgb3BlcmF0b3IncyBhZG1pbmlzdHJhdGl2ZSBkb21h aW4uICBUaGUgb3BlcmF0aW9uYWwgdXNlPC9zcGFuPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZh bGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGln bj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9 InJibG9jayI+PHNwYW4gY2xhc3M9Imluc2VydCI+ICAgb2Ygbm9kZSBhZG1pbmlzdHJhdGl2ZSB0 YWdzIGlzIGFuYWxvZ2ljYWwgdG8gdGhlIElTLUlTIHByZWZpeCB0YWdzPC9zcGFuPjwvdGQ+PHRk IGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNs YXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48L3RkPjx0 ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+PHNwYW4gY2xhc3M9Imluc2VydCI+ICAgW1JGQzUx MzBdIGFuZCBCR1AgY29tbXVuaXRpZXMgW1JGQzE5OTddLiAgT3BlcmF0aW9uYWwgZGlzY2lwbGlu ZSBhbmQ8L3NwYW4+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90 cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNs YXNzPSJsYmxvY2siPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48c3BhbiBjbGFz cz0iaW5zZXJ0Ij4gICBwcm9jZWR1cmVzIGZvbGxvd2VkIGluIGNvbmZpZ3VyaW5nIGFuZCB1c2lu ZyBCR1AgY29tbXVuaXRpZXMgYW5kIElTSVM8L3NwYW4+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIg dmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFs aWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFz cz0icmJsb2NrIj48c3BhbiBjbGFzcz0iaW5zZXJ0Ij4gICBQcmVmaXggdGFncyBpcyBhbHNvIGFw cGxpY2FibGUgdG8gdGhlIHVzYWdlIG9mIG5vZGUgYWRtaW5pc3RyYXRpdmU8L3NwYW4+PC90ZD48 dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQg Y2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPjwvdGQ+ PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48c3BhbiBjbGFzcz0iaW5zZXJ0Ij4gICB0YWdz Ljwvc3Bhbj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0K ICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9 ImxibG9jayI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPjxzcGFuIGNsYXNzPSJp bnNlcnQiPjwvc3Bhbj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48 L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQg Y2xhc3M9ImxibG9jayI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPjxzcGFuIGNs YXNzPSJpbnNlcnQiPiAgIERlZmluaW5nIGxhbmd1YWdlIGZvciBsb2NhbCBwb2xpY2llcyBpcyBv dXRzaWRlIHRoZSBzY29wZSBvZiB0aGlzPC9zcGFuPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZh bGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGln bj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9 InJibG9jayI+PHNwYW4gY2xhc3M9Imluc2VydCI+ICAgZG9jdW1lbnQuICBBcyBpbiBjYXNlIG9m IG90aGVyIHBvbGljeSBhcHBsaWNhdGlvbnMsIHRoZSBwcnVuaW5nPC9zcGFuPjwvdGQ+PHRkIGNs YXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNz PSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48L3RkPjx0ZD4g PC90ZD48dGQgY2xhc3M9InJibG9jayI+PHNwYW4gY2xhc3M9Imluc2VydCI+ICAgcG9saWNpZXMg Y2FuIGNhdXNlIHRoZSBwYXRoIHRvIGJlIGNvbXBsZXRlbHkgcmVtb3ZlZCBmcm9tIGZvcndhcmRp bmc8L3NwYW4+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4N CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNz PSJsYmxvY2siPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48c3BhbiBjbGFzcz0i aW5zZXJ0Ij4gICBwbGFuZSwgYW5kIGhlbmNlIGhhdmUgdGhlIHBvdGVudGlhbCBmb3IgbW9yZSBz ZXZlcmUgb3BlcmF0aW9uYWw8L3NwYW4+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0 b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3Ai PjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2Nr Ij48c3BhbiBjbGFzcz0iaW5zZXJ0Ij4gICBpbXBhY3QgKGUuZy4sIG5vZGUgdW5yZWFjaGFiaWxp dHkgZHVlIHRvIHBhdGggcmVtb3ZhbCkgYnkgY29tcGFyaXNvbjwvc3Bhbj48L3RkPjx0ZCBjbGFz cz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0i bGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+PC90ZD48dGQ+IDwv dGQ+PHRkIGNsYXNzPSJyYmxvY2siPjxzcGFuIGNsYXNzPSJpbnNlcnQiPiAgIHRvIHByZWZlcmVu Y2UgcG9saWNpZXMgdGhhdCBvbmx5IGFmZmVjdCBwYXRoIHNlbGVjdGlvbi48L3NwYW4+PC90ZD48 dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQg Y2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPjwvdGQ+ PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48c3BhbiBjbGFzcz0iaW5zZXJ0Ij48L3NwYW4+ PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0 cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2si PjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48c3BhbiBjbGFzcz0iaW5zZXJ0Ij43 LiAgTWFuYWdlYWJpbGl0eSBDb25zaWRlcmF0aW9uczwvc3Bhbj48L3RkPjx0ZCBjbGFzcz0ibGlu ZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5v IiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+PC90ZD48dGQ+IDwvdGQ+PHRk IGNsYXNzPSJyYmxvY2siPjxzcGFuIGNsYXNzPSJpbnNlcnQiPjwvc3Bhbj48L3RkPjx0ZCBjbGFz cz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0i bGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+PC90ZD48dGQ+IDwv dGQ+PHRkIGNsYXNzPSJyYmxvY2siPjxzcGFuIGNsYXNzPSJpbnNlcnQiPiAgIE5vZGUgYWRtaW5p c3RyYXRpdmUgdGFncyBhcmUgY29uZmlndXJlZCBhbmQgbWFuYWdlZCB1c2luZyByb3V0aW5nPC9z cGFuPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAg ICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJs b2NrIj48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+PHNwYW4gY2xhc3M9Imluc2Vy dCI+ICAgcG9saWN5IGVuaGFuY2VtZW50cy4gIFlBTkcgZGF0YSBkZWZpbml0aW9uIGxhbmd1YWdl IGlzIHRoZSBsYXRlc3Q8L3NwYW4+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3Ai PjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwv dGQ+PHRkIGNsYXNzPSJsYmxvY2siPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48 c3BhbiBjbGFzcz0iaW5zZXJ0Ij4gICBtb2RlbCB0byBkZXNjcmliZSBhbmQgZGVmaW5lIGNvbmZp Z3VyYXRpb24gZm9yIG5ldHdvcmsgZGV2aWNlcy4gIE9TUEY8L3NwYW4+PC90ZD48dGQgY2xhc3M9 ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9Imxp bmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPjwvdGQ+PHRkPiA8L3Rk Pjx0ZCBjbGFzcz0icmJsb2NrIj48c3BhbiBjbGFzcz0iaW5zZXJ0Ij4gICBZQU5HIGRhdGEgbW9k ZWwgaXMgZGVzY3JpYmVkIGluIFtJLUQuaWV0Zi1vc3BmLXlhbmddIGFuZCByb3V0aW5nPC9zcGFu PjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8 dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2Nr Ij48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+PHNwYW4gY2xhc3M9Imluc2VydCI+ ICAgcG9saWN5IGNvbmZpZ3VyYXRpb24gbW9kZWwgaXMgZGVzY3JpYmVkIGluPC9zcGFuPjwvdGQ+ PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRk IGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48L3Rk Pjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+PHNwYW4gY2xhc3M9Imluc2VydCI+ICAgW0kt RC5pZXRmLXJ0Z3dnLXBvbGljeS1tb2RlbF0uICBUaGVzZSB0d28gZG9jdW1lbnRzIHdpbGwgYmUg ZW5oYW5jZWQ8L3NwYW4+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+ PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRk IGNsYXNzPSJsYmxvY2siPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48c3BhbiBj bGFzcz0iaW5zZXJ0Ij4gICB0byBpbmNsdWRlIHRoZSBub2RlIGFkbWluaXN0cmF0aXZlIHRhZyBy ZWxhdGVkIGNvbmZpZ3VyYXRpb25zLjwvc3Bhbj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxp Z249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249 InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJy YmxvY2siPjxzcGFuIGNsYXNzPSJpbnNlcnQiPjwvc3Bhbj48L3RkPjx0ZCBjbGFzcz0ibGluZW5v IiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2 YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNs YXNzPSJyYmxvY2siPjxzcGFuIGNsYXNzPSJpbnNlcnQiPjguPC9zcGFuPiAgSUFOQSBDb25zaWRl cmF0aW9uczwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQog ICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0i bGVmdCI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+PC90ZD48dGQgY2xhc3M9Imxp bmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVu byIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBUaGlzIHNwZWNpZmljYXRp b24gdXBkYXRlcyBvbmUgT1NQRiByZWdpc3RyeTogT1NQRiBSb3V0ZXIgSW5mb3JtYXRpb248L3Rk Pjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBUaGlzIHNwZWNpZmljYXRpb24gdXBkYXRl cyBvbmUgT1NQRiByZWdpc3RyeTogT1NQRiBSb3V0ZXIgSW5mb3JtYXRpb248L3RkPjx0ZCBjbGFz cz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0i bGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIChSSSkgVExWcyBS ZWdpc3RyeTwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIChSSSkgVExWcyBSZWdp c3RyeTwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAg ICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVm dCI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+PC90ZD48dGQgY2xhc3M9ImxpbmVu byIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIg dmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBpKSBOb2RlIEFkbWluIFRhZyBU TFYgLSBTdWdnZXN0ZWQgdmFsdWUgMTA8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4g ICBpKSBOb2RlIEFkbWluIFRhZyBUTFYgLSBTdWdnZXN0ZWQgdmFsdWUgMTA8L3RkPjx0ZCBjbGFz cz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0i bGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPjwvdGQ+PHRkPiA8L3Rk Pjx0ZCBjbGFzcz0icmlnaHQiPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48 L3RkPjwvdHI+DQogICAgICA8dHI+PHRkPjxhIG5hbWU9ImRpZmYwMDQ3Ij48L2E+PC90ZD48L3Ry Pg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xh c3M9ImxibG9jayI+PHNwYW4gY2xhc3M9ImRlbGV0ZSI+Ny48L3NwYW4+ICBDb250cmlidXRvcnM8 L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+ICAgPHNwYW4gY2xhc3M9Imluc2VydCI+ KiogUkZDIEVkaXRvcioqOiBQbGVhc2UgcmVwbGFjZSBhYm92ZSBzdWdnZXN0ZWQgdmFsdWUgd2l0 aCB0aGUgSUFOQS08L3NwYW4+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwv dGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+ PHRkIGNsYXNzPSJsYmxvY2siPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48c3Bh biBjbGFzcz0iaW5zZXJ0Ij4gICBhc3NpZ25lZCB2YWx1ZS48L3NwYW4+PC90ZD48dGQgY2xhc3M9 ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9Imxp bmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPjwvdGQ+PHRkPiA8L3Rk Pjx0ZCBjbGFzcz0icmJsb2NrIj48c3BhbiBjbGFzcz0iaW5zZXJ0Ij48L3NwYW4+PC90ZD48dGQg Y2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xh c3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPjwvdGQ+PHRk PiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48c3BhbiBjbGFzcz0iaW5zZXJ0Ij45Ljwvc3Bhbj4g IENvbnRyaWJ1dG9yczwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwv dHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBj bGFzcz0ibGVmdCI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+PC90ZD48dGQgY2xh c3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9 ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBUaGFua3MgdG8g SGFubmVzIEdyZWRsZXIgZm9yIGhpcyBzdWJzdGFudGlhbCByZXZpZXcsZ3VpZGFuY2UgYW5kIHRv PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgVGhhbmtzIHRvIEhhbm5lcyBHcmVk bGVyIGZvciBoaXMgc3Vic3RhbnRpYWwgcmV2aWV3LGd1aWRhbmNlIGFuZCB0bzwvdGQ+PHRkIGNs YXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNz PSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgdGhlIGVkaXRp bmcgb2YgdGhpcyBkb2N1bWVudC4gIFRoYW5rcyB0byBIYXJpc2ggUmFndXZlZXIgZm9yIGhpczwv dGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIHRoZSBlZGl0aW5nIG9mIHRoaXMgZG9j dW1lbnQuICBUaGFua3MgdG8gSGFyaXNoIFJhZ3V2ZWVyIGZvciBoaXM8L3RkPjx0ZCBjbGFzcz0i bGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGlu ZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIGNvbnRyaWJ1dGlvbnMg dG8gaW5pdGlhbCB2ZXJzaW9ucyBvZiB0aGUgZHJhZnQuPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNz PSJyaWdodCI+ICAgY29udHJpYnV0aW9ucyB0byBpbml0aWFsIHZlcnNpb25zIG9mIHRoZSBkcmFm dC48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAg PHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQi PjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8i IHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkPjxhIG5hbWU9ImRpZmYwMDQ4 Ij48L2E+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRv cCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+PHNwYW4gY2xhc3M9ImRlbGV0ZSI+ODwvc3Bhbj4u ICBBY2tub3dsZWRnZW1lbnRzPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPjxzcGFu IGNsYXNzPSJpbnNlcnQiPjEwPC9zcGFuPi4gIEFja25vd2xlZGdlbWVudHM8L3RkPjx0ZCBjbGFz cz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0i bGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPjwvdGQ+PHRkPiA8L3Rk Pjx0ZCBjbGFzcz0icmlnaHQiPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48 L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3Rk Pjx0ZCBjbGFzcz0ibGVmdCI+ICAgVGhhbmtzIHRvIEJoYXJhdGggUiwgUHVzaHBhc2lzIFNhcmFr YXIgYW5kIERocnV2IERob2R5IGZvciB1c2VmdWw8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJp Z2h0Ij4gICBUaGFua3MgdG8gQmhhcmF0aCBSLCBQdXNocGFzaXMgU2FyYWthciBhbmQgRGhydXYg RGhvZHkgZm9yIHVzZWZ1bDwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3Rk PjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0 ZCBjbGFzcz0ibGVmdCI+ICAgaW5wdXRzLiAgVGhhbmtzIHRvIENocmlzIEJvd2VycyBmb3IgcHJv dmlkaW5nIHVzZWZ1bCBpbnB1dHMgdG8gcmVtb3ZlPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJy aWdodCI+ICAgaW5wdXRzLiAgVGhhbmtzIHRvIENocmlzIEJvd2VycyBmb3IgcHJvdmlkaW5nIHVz ZWZ1bCBpbnB1dHMgdG8gcmVtb3ZlPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3Ai PjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwv dGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBhbWJpZ3VpdHkgcmVsYXRlZCB0byB0YWctb3JkZXJpbmcu ICBUaGFua3MgdG8gTGVzIEdpbnNiZXJnIGFuZCBBY2VlPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNz PSJyaWdodCI+ICAgYW1iaWd1aXR5IHJlbGF0ZWQgdG8gdGFnLW9yZGVyaW5nLiAgVGhhbmtzIHRv IExlcyBHaW5zYmVyZyBhbmQgQWNlZTwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9w Ij48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkPjxhIG5hbWU9ImRpZmYwMDQ5Ij48L2E+PC90ZD48 L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQg Y2xhc3M9ImxibG9jayI+ICAgTGluZGVtIGZvciB0aGUgaW5wdXRzLjwvdGQ+PHRkPiA8L3RkPjx0 ZCBjbGFzcz0icmJsb2NrIj4gICBMaW5kZW0gZm9yIHRoZSBpbnB1dHMuICA8c3BhbiBjbGFzcz0i aW5zZXJ0Ij5UaGFua3MgdG8gRGF2aWQgQmxhY2sgZm9yIGNhcmVmdWwgcmV2aWV3IGFuZDwvc3Bh bj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAg PHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9j ayI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPjxzcGFuIGNsYXNzPSJpbnNlcnQi PiAgIHZhbHVhYmxlIHN1Z2dlc3Rpb25zIGZvciB0aGUgZG9jdW1lbnQgZXNwZWNpYWxseSBmb3Ig dGhlIG9wZXJhdGlvbnM8L3NwYW4+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3Ai PjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwv dGQ+PHRkIGNsYXNzPSJsYmxvY2siPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48 c3BhbiBjbGFzcz0iaW5zZXJ0Ij4gICBzZWN0aW9uLjwvc3Bhbj48L3RkPjx0ZCBjbGFzcz0ibGlu ZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5v IiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPjwvdGQ+PHRkPiA8L3RkPjx0ZCBj bGFzcz0icmlnaHQiPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwv dHI+DQogICAgICA8dHI+PHRkPjxhIG5hbWU9ImRpZmYwMDUwIj48L2E+PC90ZD48L3RyPg0KICAg ICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9Imxi bG9jayI+PHNwYW4gY2xhc3M9ImRlbGV0ZSI+OTwvc3Bhbj4uICBSZWZlcmVuY2VzPC90ZD48dGQ+ IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPjxzcGFuIGNsYXNzPSJpbnNlcnQiPjExPC9zcGFuPi4g IFJlZmVyZW5jZXM8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3Ry Pg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xh c3M9ImxlZnQiPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPjwvdGQ+PHRkIGNsYXNz PSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkPjxhIG5hbWU9 ImRpZmYwMDUxIj48L2E+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2 YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+PHNwYW4gY2xhc3M9ImRlbGV0ZSI+ OTwvc3Bhbj4uMS4gIE5vcm1hdGl2ZSBSZWZlcmVuY2VzPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNz PSJyYmxvY2siPjxzcGFuIGNsYXNzPSJpbnNlcnQiPjExPC9zcGFuPi4xLiAgTm9ybWF0aXZlIFJl ZmVyZW5jZXM8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0K ICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9 ImxlZnQiPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPjwvdGQ+PHRkIGNsYXNzPSJs aW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5l bm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgW0ktRC5hY2VlLW9zcGYt cmZjNDk3MGJpc108L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBbSS1ELmFjZWUt b3NwZi1yZmM0OTcwYmlzXTwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3Rk PjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0 ZCBjbGFzcz0ibGVmdCI+ICAgICAgICAgICAgICBMaW5kZW0sIEEuLCBTaGVuLCBOLiwgVmFzc2V1 ciwgSi4sIEFnZ2Fyd2FsLCBSLiwgYW5kIFMuPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdo dCI+ICAgICAgICAgICAgICBMaW5kZW0sIEEuLCBTaGVuLCBOLiwgVmFzc2V1ciwgSi4sIEFnZ2Fy d2FsLCBSLiwgYW5kIFMuPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+ PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRk IGNsYXNzPSJsZWZ0Ij4gICAgICAgICAgICAgIFNoYWZmZXIsICJFeHRlbnNpb25zIHRvIE9TUEYg Zm9yIEFkdmVydGlzaW5nIE9wdGlvbmFsPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ ICAgICAgICAgICAgICBTaGFmZmVyLCAiRXh0ZW5zaW9ucyB0byBPU1BGIGZvciBBZHZlcnRpc2lu ZyBPcHRpb25hbDwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+ DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFz cz0ibGVmdCI+ICAgICAgICAgICAgICBSb3V0ZXIgQ2FwYWJpbGl0aWVzIiwgZHJhZnQtYWNlZS1v c3BmLXJmYzQ5NzBiaXMtMDAgKHdvcms8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4g ICAgICAgICAgICAgIFJvdXRlciBDYXBhYmlsaXRpZXMiLCBkcmFmdC1hY2VlLW9zcGYtcmZjNDk3 MGJpcy0wMCAod29yazwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwv dHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBj bGFzcz0ibGVmdCI+ICAgICAgICAgICAgICBpbiBwcm9ncmVzcyksIEp1bHkgMjAxNC48L3RkPjx0 ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICAgICAgICAgICAgIGluIHByb2dyZXNzKSwgSnVs eSAyMDE0LjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQog ICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0i bGVmdCI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+PC90ZD48dGQgY2xhc3M9Imxp bmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVu byIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBbUkZDMjExOV0gIEJyYWRu ZXIsIFMuLCAiS2V5IHdvcmRzIGZvciB1c2UgaW4gUkZDcyB0byBJbmRpY2F0ZTwvdGQ+PHRkPiA8 L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIFtSRkMyMTE5XSAgQnJhZG5lciwgUy4sICJLZXkgd29y ZHMgZm9yIHVzZSBpbiBSRkNzIHRvIEluZGljYXRlPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFs aWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWdu PSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICAgICAgICAgICAgIFJlcXVpcmVtZW50IExl dmVscyIsIEJDUCAxNCwgUkZDIDIxMTksPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ ICAgICAgICAgICAgICBSZXF1aXJlbWVudCBMZXZlbHMiLCBCQ1AgMTQsIFJGQyAyMTE5LDwvdGQ+ PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRk IGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgICAg ICAgICAgICBET0kgMTAuMTc0ODcvUkZDMjExOSwgTWFyY2ggMTk5Nyw8L3RkPjx0ZD4gPC90ZD48 dGQgY2xhc3M9InJpZ2h0Ij4gICAgICAgICAgICAgIERPSSAxMC4xNzQ4Ny9SRkMyMTE5LCBNYXJj aCAxOTk3LDwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQog ICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij48L3RkPjx0 ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwv dHI+DQogICAgICA8dHIgYmdjb2xvcj0iZ3JheSI+PHRkPjwvdGQ+PHRoPjxhIG5hbWU9InBhcnQt bDYiPjxzbWFsbD5za2lwcGluZyB0byBjaGFuZ2UgYXQ8L3NtYWxsPjxlbT4gcGFnZSAxMSwgbGlu ZSAyODwvZW0+PC9hPjwvdGg+PHRoPiA8L3RoPjx0aD48YSBuYW1lPSJwYXJ0LXI2Ij48c21hbGw+ c2tpcHBpbmcgdG8gY2hhbmdlIGF0PC9zbWFsbD48ZW0+IHBhZ2UgMTMsIGxpbmUgMjg8L2VtPjwv YT48L3RoPjx0ZD48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGln bj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJy aWdodCI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAg ICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJs ZWZ0Ij4gICBbUkZDNTM0MF0gIENvbHR1biwgUi4sIEZlcmd1c29uLCBELiwgTW95LCBKLiwgYW5k IEEuIExpbmRlbSwgIk9TUEY8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBbUkZD NTM0MF0gIENvbHR1biwgUi4sIEZlcmd1c29uLCBELiwgTW95LCBKLiwgYW5kIEEuIExpbmRlbSwg Ik9TUEY8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAg ICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9Imxl ZnQiPiAgICAgICAgICAgICAgZm9yIElQdjYiLCBSRkMgNTM0MCwgRE9JIDEwLjE3NDg3L1JGQzUz NDAsIEp1bHkgMjAwOCw8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICAgICAgICAg ICAgIGZvciBJUHY2IiwgUkZDIDUzNDAsIERPSSAxMC4xNzQ4Ny9SRkM1MzQwLCBKdWx5IDIwMDgs PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0 cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4g ICAgICAgICAgICAgICZsdDtodHRwOi8vd3d3LnJmYy1lZGl0b3Iub3JnL2luZm8vcmZjNTM0MCZn dDsuPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgICAgICAgICAgICAmbHQ7aHR0 cDovL3d3dy5yZmMtZWRpdG9yLm9yZy9pbmZvL3JmYzUzNDAmZ3Q7LjwvdGQ+PHRkIGNsYXNzPSJs aW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5l bm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+PC90ZD48dGQ+IDwvdGQ+PHRk IGNsYXNzPSJyaWdodCI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+ PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRk IGNsYXNzPSJsZWZ0Ij4gICBbUkZDNzQ5MF0gIEJyeWFudCwgUy4sIEZpbHNmaWxzLCBDLiwgUHJl dmlkaSwgUy4sIFNoYW5kLCBNLiwgYW5kIE4uPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdo dCI+ICAgW1JGQzc0OTBdICBCcnlhbnQsIFMuLCBGaWxzZmlscywgQy4sIFByZXZpZGksIFMuLCBT aGFuZCwgTS4sIGFuZCBOLjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3Rk PjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0 ZCBjbGFzcz0ibGVmdCI+ICAgICAgICAgICAgICBTbywgIlJlbW90ZSBMb29wLUZyZWUgQWx0ZXJu YXRlIChMRkEpIEZhc3QgUmVyb3V0ZSAoRlJSKSIsPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJy aWdodCI+ICAgICAgICAgICAgICBTbywgIlJlbW90ZSBMb29wLUZyZWUgQWx0ZXJuYXRlIChMRkEp IEZhc3QgUmVyb3V0ZSAoRlJSKSIsPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3Ai PjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwv dGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICAgICAgICAgICAgIFJGQyA3NDkwLCBET0kgMTAuMTc0ODcv UkZDNzQ5MCwgQXByaWwgMjAxNSw8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICAg ICAgICAgICAgIFJGQyA3NDkwLCBET0kgMTAuMTc0ODcvUkZDNzQ5MCwgQXByaWwgMjAxNSw8L3Rk Pjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0 ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgICAg ICAgICAgICAgJmx0O2h0dHA6Ly93d3cucmZjLWVkaXRvci5vcmcvaW5mby9yZmM3NDkwJmd0Oy48 L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICAgICAgICAgICAgICZsdDtodHRwOi8v d3d3LnJmYy1lZGl0b3Iub3JnL2luZm8vcmZjNzQ5MCZndDsuPC90ZD48dGQgY2xhc3M9ImxpbmVu byIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIg dmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij48L3RkPjx0ZD4gPC90ZD48dGQgY2xh c3M9InJpZ2h0Ij48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3Ry Pg0KICAgICAgPHRyPjx0ZD48YSBuYW1lPSJkaWZmMDA1MiI+PC9hPjwvdGQ+PC90cj4NCiAgICAg IDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxv Y2siPjxzcGFuIGNsYXNzPSJkZWxldGUiPjkuMi48L3NwYW4+ICBJbmZvcm1hdGl2ZSBSZWZlcmVu Y2VzPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPjxzcGFuIGNsYXNzPSJpbnNlcnQi PjExLjIuPC9zcGFuPiAgSW5mb3JtYXRpdmUgUmVmZXJlbmNlczwvdGQ+PHRkIGNsYXNzPSJsaW5l bm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8i IHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48L3RkPjx0ZD4gPC90ZD48dGQg Y2xhc3M9InJibG9jayI+ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIDwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZh bGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGln bj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9 InJibG9jayI+ICAgPHNwYW4gY2xhc3M9Imluc2VydCI+W0ktRC5pZXRmLW9zcGYteWFuZ108L3Nw YW4+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAg IDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxv Y2siPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48c3BhbiBjbGFzcz0iaW5zZXJ0 Ij4gICAgICAgICAgICAgIFlldW5nLCBELiwgUXUsIFkuLCBaaGFuZywgSi4sIEJvZ2Rhbm92aWMs IEQuLCBhbmQgSy48L3NwYW4+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwv dGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+ PHRkIGNsYXNzPSJsYmxvY2siPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48c3Bh biBjbGFzcz0iaW5zZXJ0Ij4gICAgICAgICAgICAgIEtvdXNoaWssICJZYW5nIERhdGEgTW9kZWwg Zm9yIE9TUEYgUHJvdG9jb2wiLCBkcmFmdC1pZXRmLTwvc3Bhbj48L3RkPjx0ZCBjbGFzcz0ibGlu ZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5v IiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+PC90ZD48dGQ+IDwvdGQ+PHRk IGNsYXNzPSJyYmxvY2siPjxzcGFuIGNsYXNzPSJpbnNlcnQiPiAgICAgICAgICAgICAgb3NwZi15 YW5nLTAyICh3b3JrIGluIHByb2dyZXNzKSwgU2VwdGVtYmVyIDIwMTUuPC9zcGFuPjwvdGQ+PHRk IGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNs YXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+PC90ZD48dGQ+ IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0 b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3Ai PjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBbSS1ELmlldGYtcnRnd2ctbGZhLW1hbmFnZWFiaWxp dHldPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgW0ktRC5pZXRmLXJ0Z3dnLWxm YS1tYW5hZ2VhYmlsaXR5XTwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3Rk PjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0 ZCBjbGFzcz0ibGVmdCI+ICAgICAgICAgICAgICBMaXRrb3dza2ksIFMuLCBEZWNyYWVuZSwgQi4s IEZpbHNmaWxzLCBDLiwgUmF6YSwgSy4sPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ ICAgICAgICAgICAgICBMaXRrb3dza2ksIFMuLCBEZWNyYWVuZSwgQi4sIEZpbHNmaWxzLCBDLiwg UmF6YSwgSy4sPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4N CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNz PSJsZWZ0Ij4gICAgICAgICAgICAgIEhvcm5lZmZlciwgTS4sIGFuZCBQLiBTYXJrYXIsICJPcGVy YXRpb25hbCBtYW5hZ2VtZW50IG9mPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAg ICAgICAgICAgICBIb3JuZWZmZXIsIE0uLCBhbmQgUC4gU2Fya2FyLCAiT3BlcmF0aW9uYWwgbWFu YWdlbWVudCBvZjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+ DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFz cz0ibGVmdCI+ICAgICAgICAgICAgICBMb29wIEZyZWUgQWx0ZXJuYXRlcyIsIGRyYWZ0LWlldGYt cnRnd2ctbGZhLTwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgICAgICAgICAgICAg TG9vcCBGcmVlIEFsdGVybmF0ZXMiLCBkcmFmdC1pZXRmLXJ0Z3dnLWxmYS08L3RkPjx0ZCBjbGFz cz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0i bGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgICAgICAgICAgICAg bWFuYWdlYWJpbGl0eS0xMSAod29yayBpbiBwcm9ncmVzcyksIEp1bmUgMjAxNS48L3RkPjx0ZD4g PC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICAgICAgICAgICAgIG1hbmFnZWFiaWxpdHktMTEgKHdv cmsgaW4gcHJvZ3Jlc3MpLCBKdW5lIDIwMTUuPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWdu PSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0 b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0 Ij48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAg PHRyPjx0ZD48YSBuYW1lPSJkaWZmMDA1MyI+PC9hPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQg Y2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPjwvdGQ+ PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj4gICA8c3BhbiBjbGFzcz0iaW5zZXJ0Ij5bSS1E LmlldGYtcnRnd2ctcG9saWN5LW1vZGVsXTwvc3Bhbj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2 YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxp Z249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNz PSJyYmxvY2siPjxzcGFuIGNsYXNzPSJpbnNlcnQiPiAgICAgICAgICAgICAgU2hhaWtoLCBBLiwg cmpzQHJvYi5zaCwgci4sIEQnU291emEsIEsuLCBhbmQgQy4gQ2hhc2UsPC9zcGFuPjwvdGQ+PHRk IGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNs YXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48L3RkPjx0 ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+PHNwYW4gY2xhc3M9Imluc2VydCI+ICAgICAgICAg ICAgICAiUm91dGluZyBQb2xpY3kgQ29uZmlndXJhdGlvbiBNb2RlbCBmb3IgU2VydmljZSBQcm92 aWRlcjwvc3Bhbj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3Ry Pg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xh c3M9ImxibG9jayI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPjxzcGFuIGNsYXNz PSJpbnNlcnQiPiAgICAgICAgICAgICAgTmV0d29ya3MiLCBkcmFmdC1pZXRmLXJ0Z3dnLXBvbGlj eS1tb2RlbC0wMCAod29yayBpbjwvc3Bhbj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249 InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRv cCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxv Y2siPjxzcGFuIGNsYXNzPSJpbnNlcnQiPiAgICAgICAgICAgICAgcHJvZ3Jlc3MpLCBTZXB0ZW1i ZXIgMjAxNS48L3NwYW4+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+ PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRk IGNsYXNzPSJsYmxvY2siPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48c3BhbiBj bGFzcz0iaW5zZXJ0Ij48L3NwYW4+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3Ai PjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwv dGQ+PHRkIGNsYXNzPSJsYmxvY2siPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48 c3BhbiBjbGFzcz0iaW5zZXJ0Ij4gICBbUkZDMTk5N10gIENoYW5kcmEsIFIuLCBUcmFpbmEsIFAu LCBhbmQgVC4gTGksICJCR1AgQ29tbXVuaXRpZXM8L3NwYW4+PC90ZD48dGQgY2xhc3M9ImxpbmVu byIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIg dmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPjwvdGQ+PHRkPiA8L3RkPjx0ZCBj bGFzcz0icmJsb2NrIj48c3BhbiBjbGFzcz0iaW5zZXJ0Ij4gICAgICAgICAgICAgIEF0dHJpYnV0 ZSIsIFJGQyAxOTk3LCBET0kgMTAuMTc0ODcvUkZDMTk5NywgQXVndXN0IDE5OTYsPC9zcGFuPjwv dGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+ PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48 L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+PHNwYW4gY2xhc3M9Imluc2VydCI+ICAg ICAgICAgICAgICAmbHQ7aHR0cDovL3d3dy5yZmMtZWRpdG9yLm9yZy9pbmZvL3JmYzE5OTcmZ3Q7 Ljwvc3Bhbj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0K ICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9 ImxibG9jayI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPjxzcGFuIGNsYXNzPSJp bnNlcnQiPjwvc3Bhbj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48 L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQg Y2xhc3M9ImxibG9jayI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPjxzcGFuIGNs YXNzPSJpbnNlcnQiPiAgIFtSRkM0NTkzXSAgQmFyYmlyLCBBLiwgTXVycGh5LCBTLiwgYW5kIFku IFlhbmcsICJHZW5lcmljIFRocmVhdHMgdG88L3NwYW4+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIg dmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFs aWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFz cz0icmJsb2NrIj48c3BhbiBjbGFzcz0iaW5zZXJ0Ij4gICAgICAgICAgICAgIFJvdXRpbmcgUHJv dG9jb2xzIiwgUkZDIDQ1OTMsIERPSSAxMC4xNzQ4Ny9SRkM0NTkzLDwvc3Bhbj48L3RkPjx0ZCBj bGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFz cz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+PC90ZD48dGQ+ IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPjxzcGFuIGNsYXNzPSJpbnNlcnQiPiAgICAgICAgICAg ICAgT2N0b2JlciAyMDA2LCAmbHQ7aHR0cDovL3d3dy5yZmMtZWRpdG9yLm9yZy9pbmZvL3JmYzQ1 OTMmZ3Q7Ljwvc3Bhbj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48 L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQg Y2xhc3M9ImxibG9jayI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPjxzcGFuIGNs YXNzPSJpbnNlcnQiPjwvc3Bhbj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+ PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90 ZD48dGQgY2xhc3M9ImxibG9jayI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPjxz cGFuIGNsYXNzPSJpbnNlcnQiPiAgIFtSRkM1MTMwXSAgUHJldmlkaSwgUy4sIFNoYW5kLCBNLiwg RWQuLCBhbmQgQy4gTWFydGluLCAiQSBQb2xpY3k8L3NwYW4+PC90ZD48dGQgY2xhc3M9ImxpbmVu byIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIg dmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPjwvdGQ+PHRkPiA8L3RkPjx0ZCBj bGFzcz0icmJsb2NrIj48c3BhbiBjbGFzcz0iaW5zZXJ0Ij4gICAgICAgICAgICAgIENvbnRyb2wg TWVjaGFuaXNtIGluIElTLUlTIFVzaW5nIEFkbWluaXN0cmF0aXZlIFRhZ3MiLDwvc3Bhbj48L3Rk Pjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0 ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+PC90 ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPjxzcGFuIGNsYXNzPSJpbnNlcnQiPiAgICAg ICAgICAgICAgUkZDIDUxMzAsIERPSSAxMC4xNzQ4Ny9SRkM1MTMwLCBGZWJydWFyeSAyMDA4LDwv c3Bhbj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAg ICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9Imxi bG9jayI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPjxzcGFuIGNsYXNzPSJpbnNl cnQiPiAgICAgICAgICAgICAgJmx0O2h0dHA6Ly93d3cucmZjLWVkaXRvci5vcmcvaW5mby9yZmM1 MTMwJmd0Oy48L3NwYW4+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+ PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRk IGNsYXNzPSJsYmxvY2siPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj4gICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4N CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNz PSJsZWZ0Ij4gICBbUkZDNTI4Nl0gIEF0bGFzLCBBLiwgRWQuIGFuZCBBLiBaaW5pbiwgRWQuLCAi QmFzaWMgU3BlY2lmaWNhdGlvbiBmb3I8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4g ICBbUkZDNTI4Nl0gIEF0bGFzLCBBLiwgRWQuIGFuZCBBLiBaaW5pbiwgRWQuLCAiQmFzaWMgU3Bl Y2lmaWNhdGlvbiBmb3I8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48 L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQg Y2xhc3M9ImxlZnQiPiAgICAgICAgICAgICAgSVAgRmFzdCBSZXJvdXRlOiBMb29wLUZyZWUgQWx0 ZXJuYXRlcyIsIFJGQyA1Mjg2LDwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgICAg ICAgICAgICAgSVAgRmFzdCBSZXJvdXRlOiBMb29wLUZyZWUgQWx0ZXJuYXRlcyIsIFJGQyA1Mjg2 LDwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8 dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ ICAgICAgICAgICAgICBET0kgMTAuMTc0ODcvUkZDNTI4NiwgU2VwdGVtYmVyIDIwMDgsPC90ZD48 dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgICAgICAgICAgICBET0kgMTAuMTc0ODcvUkZD NTI4NiwgU2VwdGVtYmVyIDIwMDgsPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3Ai PjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwv dGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICAgICAgICAgICAgICZsdDtodHRwOi8vd3d3LnJmYy1lZGl0 b3Iub3JnL2luZm8vcmZjNTI4NiZndDsuPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ ICAgICAgICAgICAgICAmbHQ7aHR0cDovL3d3dy5yZmMtZWRpdG9yLm9yZy9pbmZvL3JmYzUyODYm Z3Q7LjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAg ICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVm dCI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+PC90ZD48dGQgY2xhc3M9ImxpbmVu byIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQ+PGEgbmFtZT0iZGlmZjAw NTQiPjwvYT48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0i dG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJi bG9jayI+ICAgPHNwYW4gY2xhc3M9Imluc2VydCI+W1JGQzY4NjNdICBIYXJ0bWFuLCBTLiBhbmQg RC4gWmhhbmcsICJBbmFseXNpcyBvZiBPU1BGIFNlY3VyaXR5PC9zcGFuPjwvdGQ+PHRkIGNsYXNz PSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJs aW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48L3RkPjx0ZD4gPC90 ZD48dGQgY2xhc3M9InJibG9jayI+PHNwYW4gY2xhc3M9Imluc2VydCI+ICAgICAgICAgICAgICBB Y2NvcmRpbmcgdG8gdGhlIEtleWluZyBhbmQgQXV0aGVudGljYXRpb24gZm9yIFJvdXRpbmc8L3Nw YW4+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAg IDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxv Y2siPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48c3BhbiBjbGFzcz0iaW5zZXJ0 Ij4gICAgICAgICAgICAgIFByb3RvY29scyAoS0FSUCkgRGVzaWduIEd1aWRlIiwgUkZDIDY4NjMs PC9zcGFuPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQog ICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0i bGJsb2NrIj48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+PHNwYW4gY2xhc3M9Imlu c2VydCI+ICAgICAgICAgICAgICBET0kgMTAuMTc0ODcvUkZDNjg2MywgTWFyY2ggMjAxMyw8L3Nw YW4+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAg IDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxv Y2siPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48c3BhbiBjbGFzcz0iaW5zZXJ0 Ij4gICAgICAgICAgICAgICZsdDtodHRwOi8vd3d3LnJmYy1lZGl0b3Iub3JnL2luZm8vcmZjNjg2 MyZndDsuPC9zcGFuPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwv dHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBj bGFzcz0ibGJsb2NrIj48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+PHNwYW4gY2xh c3M9Imluc2VydCI+PC9zcGFuPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48 L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3Rk Pjx0ZCBjbGFzcz0ibGJsb2NrIj48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+PHNw YW4gY2xhc3M9Imluc2VydCI+ICAgW1JGQzcxNjZdICBCaGF0aWEsIE0uLCBNYW5yYWwsIFYuLCBh bmQgQS4gTGluZGVtLCAiU3VwcG9ydGluZzwvc3Bhbj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2 YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxp Z249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNz PSJyYmxvY2siPjxzcGFuIGNsYXNzPSJpbnNlcnQiPiAgICAgICAgICAgICAgQXV0aGVudGljYXRp b24gVHJhaWxlciBmb3IgT1NQRnYzIiwgUkZDIDcxNjYsPC9zcGFuPjwvdGQ+PHRkIGNsYXNzPSJs aW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5l bm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48L3RkPjx0ZD4gPC90ZD48 dGQgY2xhc3M9InJibG9jayI+PHNwYW4gY2xhc3M9Imluc2VydCI+ICAgICAgICAgICAgICBET0kg MTAuMTc0ODcvUkZDNzE2NiwgTWFyY2ggMjAxNCw8L3NwYW4+PC90ZD48dGQgY2xhc3M9ImxpbmVu byIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIg dmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPjwvdGQ+PHRkPiA8L3RkPjx0ZCBj bGFzcz0icmJsb2NrIj48c3BhbiBjbGFzcz0iaW5zZXJ0Ij4gICAgICAgICAgICAgICZsdDtodHRw Oi8vd3d3LnJmYy1lZGl0b3Iub3JnL2luZm8vcmZjNzE2NiZndDsuPC9zcGFuPjwvdGQ+PHRkIGNs YXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNz PSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48L3RkPjx0ZD4g PC90ZD48dGQgY2xhc3M9InJibG9jayI+PHNwYW4gY2xhc3M9Imluc2VydCI+PC9zcGFuPjwvdGQ+ PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRk IGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48L3Rk Pjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+PHNwYW4gY2xhc3M9Imluc2VydCI+ICAgW1JG Qzc0NzRdICBCaGF0aWEsIE0uLCBIYXJ0bWFuLCBTLiwgWmhhbmcsIEQuLCBhbmQgQS4gTGluZGVt LCBFZC4sPC9zcGFuPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwv dHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBj bGFzcz0ibGJsb2NrIj48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+PHNwYW4gY2xh c3M9Imluc2VydCI+ICAgICAgICAgICAgICAiU2VjdXJpdHkgRXh0ZW5zaW9uIGZvciBPU1BGdjIg V2hlbiBVc2luZyBNYW51YWwgS2V5PC9zcGFuPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGln bj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0i dG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJi bG9jayI+PHNwYW4gY2xhc3M9Imluc2VydCI+ICAgICAgICAgICAgICBNYW5hZ2VtZW50IiwgUkZD IDc0NzQsIERPSSAxMC4xNzQ4Ny9SRkM3NDc0LCBBcHJpbCAyMDE1LDwvc3Bhbj48L3RkPjx0ZCBj bGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFz cz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+PC90ZD48dGQ+ IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPjxzcGFuIGNsYXNzPSJpbnNlcnQiPiAgICAgICAgICAg ICAgJmx0O2h0dHA6Ly93d3cucmZjLWVkaXRvci5vcmcvaW5mby9yZmM3NDc0Jmd0Oy48L3NwYW4+ PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0 cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2si PjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj4gICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgPC90ZD48 dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQg Y2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij5BdXRob3Jz JyBBZGRyZXNzZXM8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij5BdXRob3JzJyBBZGRy ZXNzZXM8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAg ICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9Imxl ZnQiPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPjwvdGQ+PHRkIGNsYXNzPSJsaW5l bm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8i IHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgU2hyYWRkaGEgSGVnZGU8L3Rk Pjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBTaHJhZGRoYSBIZWdkZTwvdGQ+PHRkIGNs YXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNz PSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgSnVuaXBlciBO ZXR3b3JrcywgSW5jLjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIEp1bmlwZXIg TmV0d29ya3MsIEluYy48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48 L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQg Y2xhc3M9ImxlZnQiPiAgIEVtYmFzc3kgQnVzaW5lc3MgUGFyazwvdGQ+PHRkPiA8L3RkPjx0ZCBj bGFzcz0icmlnaHQiPiAgIEVtYmFzc3kgQnVzaW5lc3MgUGFyazwvdGQ+PHRkIGNsYXNzPSJsaW5l bm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8i IHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgQmFuZ2Fsb3JlLCBLQSAgNTYw MDkzPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgQmFuZ2Fsb3JlLCBLQSAgNTYw MDkzPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAg IDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0 Ij4gICBJbmRpYTwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIEluZGlhPC90ZD48 dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQg Y2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij48L3RkPjx0 ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249 InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRv cCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIEVtYWlsOiBzaHJhZGRoYUBqdW5pcGVyLm5ldDwv dGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIEVtYWlsOiBzaHJhZGRoYUBqdW5pcGVy Lm5ldDwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAg ICA8dHI+PHRkPjxhIG5hbWU9ImRpZmYwMDU1Ij48L2E+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0 ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+PC90 ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPjxzcGFuIGNsYXNzPSJpbnNlcnQiPiAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICA8L3NwYW4+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwv dGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+ PHRkIGNsYXNzPSJsZWZ0Ij4gICBSb2IgU2hha2lyPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJy aWdodCI+ICAgUm9iIFNoYWtpcjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48 L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3Rk Pjx0ZCBjbGFzcz0ibGVmdCI+ICAgSW5kaXZpZHVhbDwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0i cmlnaHQiPiAgIEluZGl2aWR1YWw8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+ PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90 ZD48dGQgY2xhc3M9ImxlZnQiPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPjwvdGQ+ PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRk IGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgRW1h aWw6IHJqc0Byb2Iuc2g8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBFbWFpbDog cmpzQHJvYi5zaDwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+ DQogICAgICA8dHI+PHRkPjxhIG5hbWU9ImRpZmYwMDU2Ij48L2E+PC90ZD48L3RyPg0KICAgICAg PHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9j ayI+PHNwYW4gY2xhc3M9ImRlbGV0ZSI+ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIDwvc3Bhbj48L3RkPjx0ZD4g PC90ZD48dGQgY2xhc3M9InJibG9jayI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0 b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3Ai PjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBBbnRvbiBTbWlybm92PC90ZD48dGQ+IDwvdGQ+PHRk IGNsYXNzPSJyaWdodCI+ICAgQW50b24gU21pcm5vdjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZh bGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGln bj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgQ2lzY28gU3lzdGVtcywgSW5jLjwvdGQ+ PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIENpc2NvIFN5c3RlbXMsIEluYy48L3RkPjx0 ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBj bGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIERlIEts ZWV0bGFhbiA2YTwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIERlIEtsZWV0bGFh biA2YTwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAg ICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVm dCI+ICAgRGllZ2VtICAxODMxPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgRGll Z2VtICAxODMxPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4N CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNz PSJsZWZ0Ij4gICBCZWxnaXVtPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgQmVs Z2l1bTwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAg ICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVm dCI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+PC90ZD48dGQgY2xhc3M9ImxpbmVu byIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIg dmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBFbWFpbDogYXNAY2lzY28uY29t PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgRW1haWw6IGFzQGNpc2NvLmNvbTwv dGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+ PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+PC90 ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFs aWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWdu PSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBMaSB6aGVuYmluPC90ZD48dGQ+IDwvdGQ+ PHRkIGNsYXNzPSJyaWdodCI+ICAgTGkgemhlbmJpbjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZh bGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGln bj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgSHVhd2VpIFRlY2hub2xvZ2llczwvdGQ+ PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIEh1YXdlaSBUZWNobm9sb2dpZXM8L3RkPjx0 ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KDQogICAgIDx0cj48dGQ+ PC90ZD48dGQgY2xhc3M9ImxlZnQiPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPjwv dGQ+PHRkPjwvdGQ+PC90cj4NCiAgICAgPHRyIGJnY29sb3I9ImdyYXkiPjx0aCBjb2xzcGFuPSI1 IiBhbGlnbj0iY2VudGVyIj48YSBuYW1lPSJlbmQiPiZuYnNwO0VuZCBvZiBjaGFuZ2VzLiA1NiBj aGFuZ2UgYmxvY2tzLiZuYnNwOzwvYT48L3RoPjwvdHI+DQogICAgIDx0ciBjbGFzcz0ic3RhdHMi Pjx0ZD48L3RkPjx0aD48aT4xNjkgbGluZXMgY2hhbmdlZCBvciBkZWxldGVkPC9pPjwvdGg+PHRo PjxpPiA8L2k+PC90aD48dGg+PGk+MjkyIGxpbmVzIGNoYW5nZWQgb3IgYWRkZWQ8L2k+PC90aD48 dGQ+PC90ZD48L3RyPg0KICAgICA8dHI+PHRkIGNvbHNwYW49IjUiIGNsYXNzPSJzbWFsbCIgYWxp Z249ImNlbnRlciI+PGJyPlRoaXMgaHRtbCBkaWZmIHdhcyBwcm9kdWNlZCBieSByZmNkaWZmIDEu NDIuIFRoZSBsYXRlc3QgdmVyc2lvbiBpcyBhdmFpbGFibGUgZnJvbSA8YSBocmVmPSJodHRwOi8v d3d3LnRvb2xzLmlldGYub3JnL3Rvb2xzL3JmY2RpZmYvIj5odHRwOi8vdG9vbHMuaWV0Zi5vcmcv dG9vbHMvcmZjZGlmZi88L2E+IDwvdGQ+PC90cj4NCiAgIDwvdGJvZHk+PC90YWJsZT4NCiAgIA0K ICAgDQo8L2JvZHk+PC9odG1sPg0KPCEtLSBhcmdzOiB7Jy0tb2xkY29sb3VyJzogJ3JlZCcsICct LXdpZHRoJzogJycsICdkaWZmdHlwZSc6ICctLWh0bWwnLCAndXJsMSc6ICcnLCAnc3VibWl0Jzog J0dlbmVyYXRlIGRpZmYnLCAndXJsMic6ICcnLCAnLS1uZXdjb2xvdXInOiAnZ3JlZW4nfSAtLT4= --_002_BY1PR0501MB13815C096D0BF8D4221E5600D53F0BY1PR0501MB1381_-- From nobody Thu Oct 22 07:18:22 2015 Return-Path: X-Original-To: secdir@ietfa.amsl.com Delivered-To: secdir@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 3E28B1B2BD3; Wed, 14 Oct 2015 00:34:17 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.599 X-Spam-Level: X-Spam-Status: No, score=-2.599 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001, UNPARSEABLE_RELAY=0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id uS-zbiEq3NWz; Wed, 14 Oct 2015 00:34:15 -0700 (PDT) Received: from relais-inet.francetelecom.com (relais-ias244.francetelecom.com [80.12.204.244]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id B39C21B2BCF; Wed, 14 Oct 2015 00:34:14 -0700 (PDT) Received: from omfeda06.si.francetelecom.fr (unknown [xx.xx.xx.199]) by omfeda10.si.francetelecom.fr (ESMTP service) with ESMTP id EF6E9374401; Wed, 14 Oct 2015 09:34:12 +0200 (CEST) Received: from Exchangemail-eme2.itn.ftgroup (unknown [10.114.31.60]) by omfeda06.si.francetelecom.fr (ESMTP service) with ESMTP id CAD66C8013; Wed, 14 Oct 2015 09:34:12 +0200 (CEST) Received: from OPEXCLILM21.corporate.adroot.infra.ftgroup ([fe80::e92a:c932:907e:8f06]) by OPEXCLILM7F.corporate.adroot.infra.ftgroup ([fe80::c1d7:e278:e357:11ad%19]) with mapi id 14.03.0248.002; Wed, 14 Oct 2015 09:34:12 +0200 From: To: Benjamin Kaduk , Shraddha Hegde Thread-Topic: secdir review of draft-ietf-ospf-node-admin-tag-05 Thread-Index: AQHRBihOez3/m1ZZ50yEZ1HEd2QNGJ5ql+tA Date: Wed, 14 Oct 2015 07:34:11 +0000 Message-ID: <15267_1444808052_561E0574_15267_17748_1_53C29892C857584299CBF5D05346208A0F678F48@OPEXCLILM21.corporate.adroot.infra.ftgroup> References: <27748_1444745556_561D1154_27748_5857_1_53C29892C857584299CBF5D05346208A0F677EDF@OPEXCLILM21.corporate.adroot.infra.ftgroup> In-Reply-To: Accept-Language: fr-FR, en-US Content-Language: fr-FR X-MS-Has-Attach: yes X-MS-TNEF-Correlator: x-originating-ip: [10.168.234.1] Content-Type: multipart/mixed; boundary="_002_53C29892C857584299CBF5D05346208A0F678F48OPEXCLILM21corp_" MIME-Version: 1.0 X-PMX-Version: 6.2.1.2478543, Antispam-Engine: 2.7.2.2107409, Antispam-Data: 2015.10.14.70617 Archived-At: X-Mailman-Approved-At: Thu, 22 Oct 2015 07:18:03 -0700 Cc: "draft-ietf-ospf-node-admin-tag.all@ietf.org" , "iesg@ietf.org" , "secdir@ietf.org" Subject: Re: [secdir] secdir review of draft-ietf-ospf-node-admin-tag-05 X-BeenThere: secdir@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: Security Area Directorate List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 14 Oct 2015 07:34:17 -0000 --_002_53C29892C857584299CBF5D05346208A0F678F48OPEXCLILM21corp_ Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable Ben, Shraddha, > From: Benjamin Kaduk [mailto:kaduk@MIT.EDU] > Sent: Wednesday, October 14= , 2015 4:31 AM >=20 > On Tue, 13 Oct 2015, bruno.decraene@orange.com wrote: >=20 > > Hi Ben, > > > > > > > > > In section 4.5, I do not see that the constraint "Traffic from A node= s to > > > > > I nodes must not go through R and T nodes" can be satisfied for the > > > > > leftmost pair of A nodes. > > > > > > > > > > > > Thanks for the careful review. > > > > My mistake. I missed the left part of the network. > > > > I see 2 options: > > > > a) add some network topology on the left part > > > > b) remove the leftmost pair of A nodes. >=20 > Option 'a' sounds good to me. ok. Shraddha, please find enclosed the updated "artwork". My xml file is out of sync. You should only copy the figure
=20 -- Bruno > -Ben ___________________________________________________________________________= ______________________________________________ Ce message et ses pieces jointes peuvent contenir des informations confiden= tielles ou privilegiees et ne doivent donc pas etre diffuses, exploites ou copies sans autorisation. Si vous avez recu= ce message par erreur, veuillez le signaler a l'expediteur et le detruire ainsi que les pieces jointes. Les messages el= ectroniques etant susceptibles d'alteration, Orange decline toute responsabilite si ce message a ete altere, deforme ou = falsifie. Merci. This message and its attachments may contain confidential or privileged inf= ormation that may be protected by law; they should not be distributed, used or copied without authorisation. If you have received this email in error, please notify the sender and dele= te this message and its attachments. As emails may be altered, Orange is not liable for messages that have been = modified, changed or falsified. Thank you. --_002_53C29892C857584299CBF5D05346208A0F678F48OPEXCLILM21corp_ Content-Type: application/xml; name="draft-ietf-ospf-node-admin-tag-07 - Bruno2.xml" Content-Description: draft-ietf-ospf-node-admin-tag-07 - Bruno2.xml Content-Disposition: attachment; filename="draft-ietf-ospf-node-admin-tag-07 - Bruno2.xml"; size=26676; creation-date="Wed, 14 Oct 2015 07:30:30 GMT"; modification-date="Tue, 13 Oct 2015 14:12:39 GMT" Content-Transfer-Encoding: base64 PD94bWwgdmVyc2lvbj0iMS4wIj8+DQo8IURPQ1RZUEUgcmZjIFNZU1RFTSAicmZjMjYyOS5kdGQi IFsNCjwhRU5USVRZIFJGQzIxMTkgUFVCTElDICIiICJodHRwOi8veG1sLnJlc291cmNlLm9yZy9w dWJsaWMvcmZjL2JpYnhtbC9yZWZlcmVuY2UuUkZDLjIxMTkueG1sIj4NCjwhRU5USVRZIFJGQzIz MjggUFVCTElDICIiICJodHRwOi8veG1sLnJlc291cmNlLm9yZy9wdWJsaWMvcmZjL2JpYnhtbC9y ZWZlcmVuY2UuUkZDLjIzMjgueG1sIj4NCjwhRU5USVRZIFJGQzUzNDAgUFVCTElDICIiICJodHRw Oi8veG1sLnJlc291cmNlLm9yZy9wdWJsaWMvcmZjL2JpYnhtbC9yZWZlcmVuY2UuUkZDLjUzNDAu eG1sIj4NCjwhRU5USVRZIFJGQzQ5NzAgUFVCTElDICIiICJodHRwOi8veG1sLnJlc291cmNlLm9y Zy9wdWJsaWMvcmZjL2JpYnhtbC9yZWZlcmVuY2UuUkZDLjQ5NzAueG1sIj4NCjwhRU5USVRZIFJG QzUyODYgUFVCTElDICIiICJodHRwOi8veG1sLnJlc291cmNlLm9yZy9wdWJsaWMvcmZjL2JpYnht bC9yZWZlcmVuY2UuUkZDLjUyODYueG1sIj4NCjwhRU5USVRZIFJGQzc0OTAgUFVCTElDICIiICJo dHRwOi8veG1sLnJlc291cmNlLm9yZy9wdWJsaWMvcmZjL2JpYnhtbC9yZWZlcmVuY2UuUkZDLjc0 OTAueG1sIj4NCjwhRU5USVRZIFJGQzUxMzAgUFVCTElDICIiICJodHRwOi8veG1sLnJlc291cmNl Lm9yZy9wdWJsaWMvcmZjL2JpYnhtbC9yZWZlcmVuY2UuUkZDLjUxMzAueG1sIj4NCjwhRU5USVRZ IFJGQzE5OTcgUFVCTElDICIiICJodHRwOi8veG1sLnJlc291cmNlLm9yZy9wdWJsaWMvcmZjL2Jp YnhtbC9yZWZlcmVuY2UuUkZDLjE5OTcueG1sIj4NCl0+DQo8P3JmYyB0b2M9InllcyI/Pg0KPD9y ZmMgdG9jb21wYWN0PSJ5ZXMiPz4NCjw/cmZjIHRvY2RlcHRoPSIzIj8+DQo8P3JmYyB0b2NpbmRl bnQ9InllcyI/Pg0KPD9yZmMgc3ltcmVmcz0ieWVzIj8+DQo8P3JmYyBzb3J0cmVmcz0ieWVzIj8+ DQo8P3JmYyBjb21tZW50cz0ieWVzIj8+DQo8P3JmYyBpbmxpbmU9InllcyI/Pg0KPD9yZmMgY29t cGFjdD0ieWVzIj8+DQo8P3JmYyBzdWJjb21wYWN0PSJubyI/Pg0KPHJmYyBjYXRlZ29yeT0ic3Rk IiBkb2NOYW1lPSJkcmFmdC1pZXRmLW9zcGYtbm9kZS1hZG1pbi10YWctMDYiIGlwcj0idHJ1c3Qy MDA5MDIiPg0KPGZyb250Pg0KPHRpdGxlIGFiYnJldj0iT1NQRiBub2RlIGFkbWluIHRhZ3MiPkFk dmVydGlzaW5nIHBlci1ub2RlIGFkbWluaXN0cmF0aXZlIHRhZ3MgaW4gT1NQRjwvdGl0bGU+DQo8 YXV0aG9yIGluaXRpYWxzPSJTLiIgc3VybmFtZT0iSGVnZGUiIGZ1bGxuYW1lPSJTaHJhZGRoYSBI ZWdkZSI+DQo8b3JnYW5pemF0aW9uPkp1bmlwZXIgTmV0d29ya3MsIEluYy48L29yZ2FuaXphdGlv bj4NCjxhZGRyZXNzPg0KPHBvc3RhbD4NCjxzdHJlZXQ+RW1iYXNzeSBCdXNpbmVzcyBQYXJrPC9z dHJlZXQ+DQo8Y2l0eT5CYW5nYWxvcmU8L2NpdHk+DQo8cmVnaW9uPktBPC9yZWdpb24+DQo8Y29k ZT41NjAwOTM8L2NvZGU+DQo8Y291bnRyeT5JbmRpYTwvY291bnRyeT4NCjwvcG9zdGFsPg0KPGVt YWlsPnNocmFkZGhhQGp1bmlwZXIubmV0PC9lbWFpbD4NCjwvYWRkcmVzcz4NCjwvYXV0aG9yPg0K DQoNCjxhdXRob3IgaW5pdGlhbHMgPSAnUi4nIHN1cm5hbWU9J1NoYWtpcicgZnVsbG5hbWU9J1Jv YiBTaGFraXInPg0KICAgIDxvcmdhbml6YXRpb24gYWJicmV2PSdJbmRpdmlkdWFsJz4NCiAgICAg ICAgSW5kaXZpZHVhbA0KICAgIDwvb3JnYW5pemF0aW9uPg0KICAgIDxhZGRyZXNzPg0KICAgICAg ICA8ZW1haWw+cmpzQHJvYi5zaDwvZW1haWw+DQogICAgPC9hZGRyZXNzPg0KPC9hdXRob3I+DQoN CjxhdXRob3IgZnVsbG5hbWU9IkFudG9uIFNtaXJub3YiIGluaXRpYWxzPSJBLiIgc3VybmFtZT0i U21pcm5vdiI+DQo8b3JnYW5pemF0aW9uPkNpc2NvIFN5c3RlbXMsIEluYy48L29yZ2FuaXphdGlv bj4NCjxhZGRyZXNzPg0KPHBvc3RhbD4NCjxzdHJlZXQ+RGUgS2xlZXRsYWFuIDZhPC9zdHJlZXQ+ DQo8Y2l0eT5EaWVnZW08L2NpdHk+DQo8cmVnaW9uLz4NCjxjb2RlPjE4MzE8L2NvZGU+DQo8Y291 bnRyeT5CZWxnaXVtPC9jb3VudHJ5Pg0KPC9wb3N0YWw+DQo8ZW1haWw+YXNAY2lzY28uY29tPC9l bWFpbD4NCjwvYWRkcmVzcz4NCjwvYXV0aG9yPg0KPGF1dGhvciBmdWxsbmFtZT0iTGkgemhlbmJp biIgaW5pdGlhbHM9IlouIiBzdXJuYW1lPSJMaSI+DQo8b3JnYW5pemF0aW9uPkh1YXdlaSBUZWNo bm9sb2dpZXM8L29yZ2FuaXphdGlvbj4NCjxhZGRyZXNzPg0KPHBvc3RhbD4NCjxzdHJlZXQ+SHVh d2VpIEJsZC4gTm8uMTU2IEJlaXFpbmcgUmQ8L3N0cmVldD4NCjxjaXR5PiBCZWlqaW5nPC9jaXR5 Pg0KPHJlZ2lvbi8+DQo8Y29kZT4xMDAwOTU8L2NvZGU+DQo8Y291bnRyeT5DaGluYTwvY291bnRy eT4NCjwvcG9zdGFsPg0KPGVtYWlsPmxpemhlbmJpbkBodWF3ZWkuY29tPC9lbWFpbD4NCjwvYWRk cmVzcz4NCjwvYXV0aG9yPg0KPGF1dGhvciBmdWxsbmFtZT0iQnJ1bm8gRGVjcmFlbmUiIGluaXRp YWxzPSJCLiIgc3VybmFtZT0iRGVjcmFlbmUiPg0KPG9yZ2FuaXphdGlvbj5PcmFuZ2U8L29yZ2Fu aXphdGlvbj4NCjxhZGRyZXNzPg0KPHBvc3RhbD4NCjxzdHJlZXQ+PC9zdHJlZXQ+DQo8Y2l0eT4g PC9jaXR5Pg0KPHJlZ2lvbi8+DQo8Y29kZT48L2NvZGU+DQo8Y291bnRyeT48L2NvdW50cnk+DQo8 L3Bvc3RhbD4NCjxlbWFpbD5icnVuby5kZWNyYWVuZUBvcmFuZ2UuY29tPC9lbWFpbD4NCjwvYWRk cmVzcz4NCjwvYXV0aG9yPg0KPGRhdGUgeWVhcj0iMjAxNSIgLz4NCjxhcmVhPlJvdXRpbmc8L2Fy ZWE+DQo8d29ya2dyb3VwPk9wZW4gU2hvcnRlc3QgUGF0aCBGaXJzdCBJR1A8L3dvcmtncm91cD4N CjxrZXl3b3JkPk1QTFM8L2tleXdvcmQ+DQo8a2V5d29yZD5JR1A8L2tleXdvcmQ+DQo8a2V5d29y ZD5PU1BGPC9rZXl3b3JkPg0KPGtleXdvcmQ+YWRtaW4tdGFnPC9rZXl3b3JkPg0KPGtleXdvcmQ+ dHJhZmZpYyBlbmdpbmVlcmluZzwva2V5d29yZD4NCjxhYnN0cmFjdD4NCjx0PiANClRoaXMgZG9j dW1lbnQgZGVzY3JpYmVzIGFuIGV4dGVuc2lvbiB0byBPU1BGIHByb3RvY29sIHRvDQphZGQgYW4g b3B0aW9uYWwgb3BlcmF0aW9uYWwgY2FwYWJpbGl0eSwgdGhhdCBhbGxvd3MgdGFnZ2luZyBhbmQg Z3JvdXBpbmcgb2YNCnRoZSBub2RlcyBpbiBhbiBPU1BGIGRvbWFpbi4gVGhpcyBhbGxvd3Mgc2lt cGxpZmljYXRpb24sIGVhc2Ugb2YgbWFuYWdlbWVudCBhbmQNCmNvbnRyb2wgb3ZlciByb3V0ZSBh bmQgcGF0aCBzZWxlY3Rpb24gYmFzZWQgb24gY29uZmlndXJlZCBwb2xpY2llcy4NCg0KVGhpcyBk b2N1bWVudCBkZXNjcmliZXMgYW4gZXh0ZW5zaW9uIHRvIE9TUEYgcHJvdG9jb2wgdG8gYWR2ZXJ0 aXNlIHBlci1ub2RlIA0KYWRtaW5pc3RyYXRpdmUgdGFncy4gVGhlIG5vZGUtdGFncyBjYW4gYmUg dXNlZCB0byBleHByZXNzIGFuZCBhcHBseSBsb2NhbGx5LWRlZmluZWQNCm5ldHdvcmsgcG9saWNp ZXMgd2hpY2ggaXMgYSB2ZXJ5IHVzZWZ1bCBvcGVyYXRpb25hbCBjYXBhYmlsaXR5LiBOb2RlIHRh Z3MgbWF5IGJlIHVzZWQgZWl0aGVyIGJ5IE9TUEYgDQppdHNlbGYgb3IgYnkgb3RoZXIgYXBwbGlj YXRpb25zIGNvbnN1bWluZyBpbmZvcm1hdGlvbiBwcm9wYWdhdGVkIHZpYSBPU1BGLiA8L3Q+DQo8 dD5UaGlzIGRvY3VtZW50IGRlc2NyaWJlcyB0aGUgcHJvdG9jb2wgZXh0ZW5zaW9ucyB0byBkaXNz ZW1pbmF0ZQ0KcGVyLW5vZGUgYWRtaW5pc3RyYXRpdmUtdGFncyB0byB0aGUgT1NQRnYyIGFuZCBP U1BGdjMgcHJvdG9jb2wuIEl0IHByb3ZpZGVzIGV4YW1wbGUNCiB1c2UgY2FzZXMgb2YgYWRtaW5p c3RyYXRpdmUgbm9kZSB0YWdzLjwvdD4NCjwvYWJzdHJhY3Q+DQo8bm90ZSB0aXRsZT0iUmVxdWly ZW1lbnRzIExhbmd1YWdlIj4NCjx0PlRoZSBrZXkgd29yZHMgIk1VU1QiLCAiTVVTVCBOT1QiLCAi UkVRVUlSRUQiLCAiU0hBTEwiLCAiU0hBTEwgTk9UIiwNCiJTSE9VTEQiLCAiU0hPVUxEIE5PVCIs ICJSRUNPTU1FTkRFRCIsICJNQVkiLCBhbmQgIk9QVElPTkFMIiBpbiB0aGlzDQpkb2N1bWVudCBh cmUgdG8gYmUgaW50ZXJwcmV0ZWQgYXMgZGVzY3JpYmVkIGluIDx4cmVmDQp0YXJnZXQ9IlJGQzIx MTkiPlJGQyAyMTE5PC94cmVmPi48L3Q+DQo8L25vdGU+DQo8L2Zyb250Pg0KPG1pZGRsZT4NCjxz ZWN0aW9uIHRpdGxlPSJJbnRyb2R1Y3Rpb24iIGFuY2hvcj0naW50cm8nPg0KPHQ+IA0KSXQgaXMg dXNlZnVsIHRvIGFzc2lnbiBhIHBlci1ub2RlIGFkbWluaXN0cmF0aXZlIHRhZyB0byBhIHJvdXRl ciBpbiB0aGUgT1NQRiBkb21haW4gYW5kIHVzZQ0KaXQgYXMgYW4gYXR0cmlidXRlIGFzc29jaWF0 ZWQgd2l0aCB0aGUgbm9kZS4gVGhlIHBlci1ub2RlIGFkbWluaXN0cmF0aXZlIHRhZyBjYW4gYmUg dXNlZCBpbg0KdmFyaWV0eSBvZiBhcHBsaWNhdGlvbnMsIGZvciBleDoNCiAgLSAgVHJhZmZpYy1l bmdpbmVlcmluZyBhcHBsaWNhdGlvbnMgdG8gcHJvdmlkZSBkaWZmZXJlbnQgcGF0aC1zZWxlY3Rp b24gY3JpdGVyaWEsIA0KICAtICBQcmVmZXIgb3IgcHJ1bmUgY2VydGFpbiBwYXRocyBpbiBMb29w IEZyZWUgQWx0ZXJuYXRlIChMRkEpIGJhY2t1cCBzZWxlY3Rpb24gdmlhIGxvY2FsIHBvbGljaWVz LjwvdD4NCg0KDQo8dD5UaGlzIGRvY3VtZW50IHByb3ZpZGVzIG1lY2hhbmlzbXMgdG8gYWR2ZXJ0 aXNlIHBlci1ub2RlIGFkbWluaXN0cmF0aXZlDQp0YWdzIGluIE9TUEYgZm9yIHJvdXRlIGFuZCBw YXRoIHNlbGVjdGlvbi4gUm91dGUgYW5kIHBhdGggc2VsZWN0aW9uIGZ1bmN0aW9uYWxpdHkgYXBw bGllcyB0bw0KYm90aCB0byBURSBhbmQgbm9uLVRFIGFwcGxpY2F0aW9ucyBhbmQgaGVuY2UgbmV3 IFRMViBmb3IgY2FycnlpbmcgcGVyLW5vZGUgDQphZG1pbmlzdHJhdGl2ZSB0YWdzIGlzIGluY2x1 ZGVkIGluIFJvdXRlciBJbmZvcm1hdGlvbiBMU0EgPHhyZWYgdGFyZ2V0PSJSRkM0OTcwIi8+IC4N Cg0KPC90Pg0KPC9zZWN0aW9uPg0KDQo8c2VjdGlvbiB0aXRsZT0nQWRtaW5pc3RyYXRpdmUgVGFn IFRMVic+DQo8dD4gQW4gYWRtaW5pc3RyYXRpdmUgVGFnIGlzIGEgMzItYml0IGludGVnZXIgdmFs dWUgdGhhdCBjYW4gYmUNCnVzZWQgdG8gaWRlbnRpZnkgYSBncm91cCBvZiBub2RlcyBpbiB0aGUg T1NQRiBkb21haW4uDQo8dnNwYWNlIGJsYW5rTGluZXM9IjEiIC8+DQpUaGUgbmV3IFRMViBkZWZp bmVkIHdpbGwgYmUgY2FycmllZCB3aXRoaW4gYW4gUkkgTFNBIGZvciBPU1BGVjIgYW5kDQpPU1BG VjMuIFJvdXRlciBpbmZvcm1hdGlvbiBMU0EgPHhyZWYgdGFyZ2V0PSJSRkM0OTcwIi8+IGNhbiBo YXZlIGxpbmssIGFyZWEgb3IgQVMgbGV2ZWwNCmZsb29kaW5nIHNjb3BlLiBDaG9vc2luZyB0aGUg Zmxvb2Rpbmcgc2NvcGUgdG8gZmxvb2QgdGhlIGdyb3VwDQp0YWdzIGFyZSBkZWZpbmVkIGJ5IHRo ZSBwb2xpY2llcyBhbmQgaXMgYSBsb2NhbCBtYXR0ZXIuDQo8dnNwYWNlIGJsYW5rTGluZXM9IjEi IC8+DQpUaGUgVExWIHNwZWNpZmllcyBvbmUgb3IgbW9yZSBhZG1pbmlzdHJhdGl2ZSB0YWcgdmFs dWVzLiBBbiBPU1BGDQpub2RlIGFkdmVydGlzZXMgdGhlIHNldCBvZiBncm91cHMgaXQgaXMgcGFy dCBvZiBpbiB0aGUgT1NQRiBkb21haW4uDQooZm9yIGV4YW1wbGUsIGFsbCBQRS1ub2RlcyBhcmUg Y29uZmlndXJlZCB3aXRoIGNlcnRhaW4gdGFnIHZhbHVlLA0KYWxsIFAtbm9kZXMgYXJlIGNvbmZp Z3VyZWQgd2l0aCBhIGRpZmZlcmVudCB0YWcgdmFsdWUgaW4gdGhlIGRvbWFpbikuDQpNdWx0aXBs ZSBUTFZzIE1BWSBiZSBhZGRlZCBpbiBzYW1lIFJJLUxTQSBvcg0KaW4gYSBkaWZmZXJlbnQgaW5z dGFuY2Ugb2YgdGhlIFJJIExTQSBhcyBkZWZpbmVkIGluDQo8eHJlZiB0YXJnZXQ9IkktRC5hY2Vl LW9zcGYtcmZjNDk3MGJpcyIvPi4NCjwvdD4NCjwvc2VjdGlvbj4NCjxzZWN0aW9uIHRpdGxlPSdP U1BGIHBlci1ub2RlIGFkbWluaXN0cmF0aXZlIHRhZyBUTFYnPg0KPHNlY3Rpb24gdGl0bGU9J1RM ViBmb3JtYXQnPg0KPHQ+IDx4cmVmIHRhcmdldD0iUkZDNDk3MCIvPiwgZGVmaW5lcyBSb3V0ZXIg SW5mb3JtYXRpb24gKFJJKSBMU0Egd2hpY2ggbWF5IGJlIHVzZWQgdG8gDQphZHZlcnRpc2UgcHJv cGVydGllcyBvZiB0aGUgb3JpZ2luYXRpbmcgcm91dGVyLiBQYXlsb2FkIG9mIHRoZSBSSSBMU0Eg Y29uc2lzdHMgb2Ygb25lIG9yDQptb3JlIG5lc3RlZCBUeXBlL0xlbmd0aC9WYWx1ZSAoVExWKSB0 cmlwbGV0cy4NCg0KTm9kZSBhZG1pbmlzdHJhdGl2ZSB0YWdzIGFyZSBhZHZlcnRpc2VkIGluIHRo ZSBOb2RlIEFkbWluaXN0cmF0aXZlIFRhZyBUTFYuDQpUaGUgZm9ybWF0IG9mIE5vZGUgQWRtaW5p c3RyYXRpdmUgVGFnIFRMViBpczoNCg0KPHZzcGFjZSBibGFua0xpbmVzPSIyIiAvPg0KPGZpZ3Vy ZSBhbmNob3I9Ik9TUEYtQWRtaW4tdGFnLVRMViIgdGl0bGU9Ik9TUEYgcGVyLW5vZGUgQWRtaW5p c3RyYXRpdmUgVGFnIFRMViI+DQo8YXJ0d29yaz4NCjAgICAgICAgICAgICAgICAxICAgICAgICAg ICAgIDIgICAgICAgICAgICAgMw0KMCAxIDIgMyA0IDUgNiA3IDggOSAwIDEgMiAzIDQgNSA2IDcg OCA5IDAgMSAyIDMgNCA1IDYgNyA4IDkgMCAxDQorLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSst Ky0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKw0KfCBUeXBlICAgICAgICAgICAg ICAgICAgICAgICAgfCBMZW5ndGggICAgICAgICAgICAgICAgICAgICAgICAgIHwNCistKy0rLSst Ky0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0r DQp8ICAgICAgICAgICAgICAgICAgIEFkbWluaXN0cmF0aXZlIFRhZyAjMSAgICAgICAgICAgICAg ICAgICAgICAgfA0KKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0r LSstKy0rLSstKy0rLSstKy0rLSsNCnwgICAgICAgICAgICAgICAgICAgQWRtaW5pc3RyYXRpdmUg VGFnICMyICAgICAgICAgICAgICAgICAgICAgICB8DQorLSstKy0rLSstKy0rLSstKy0rLSstKy0r LSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKw0KLy8gICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgLy8NCistKy0r LSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSst Ky0rDQp8ICAgICAgICAgICAgICAgICAgQWRtaW5pc3RyYXRpdmUgVGFnICNOICAgICAgICAgICAg ICAgICAgICAgICAgfA0KKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSst Ky0rLSstKy0rLSstKy0rLSstKy0rLSsNCjwvYXJ0d29yaz4NCjwvZmlndXJlPg0KPHZzcGFjZSBi bGFua0xpbmVzPSIxIiAvPg0KPHZzcGFjZSBibGFua0xpbmVzPSIxIiAvPg0KVHlwZSA6IFRCQSwg U3VnZ2VzdGVkIHZhbHVlIDEwDQo8dnNwYWNlIGJsYW5rTGluZXM9IjEiIC8+DQpMZW5ndGg6IEEg MTYtYml0IGZpZWxkIHRoYXQgaW5kaWNhdGVzIHRoZSBsZW5ndGggb2YgdGhlIHZhbHVlDQpwb3J0 aW9uIGluIG9jdGV0cyBhbmQgd2lsbCBiZSBhIG11bHRpcGxlIG9mIDQgb2N0ZXRzDQpkZXBlbmRl bnQgb24gdGhlIG51bWJlciBvZiB0YWdzIGFkdmVydGlzZWQuDQo8dnNwYWNlIGJsYW5rTGluZXM9 IjEiIC8+DQpWYWx1ZTogQSBzZXF1ZW5jZSBvZiBtdWx0aXBsZSA0IG9jdGV0cyBkZWZpbmluZyB0 aGUNCmFkbWluaXN0cmF0aXZlIHRhZ3MuICBBdCBsZWFzdCBvbmUgdGFnIE1VU1QgYmUgY2Fycmll ZCBpZg0KdGhpcyBUTFYgaXMgaW5jbHVkZWQgaW4gdGhlIFJJLUxTQS4NCjwvdD4NCjwvc2VjdGlv bj4NCjxzZWN0aW9uIHRpdGxlPSdFbGVtZW50cyBvZiBwcm9jZWR1cmUnPg0KPHQ+TWVhbmluZyBv ZiB0aGUgTm9kZSBhZG1pbmlzdHJhdGl2ZSB0YWdzIGlzIGdlbmVyYWxseQ0Kb3BhcXVlIHRvIE9T UEYuIFJvdXRlciBhZHZlcnRpc2luZyB0aGUgcGVyLW5vZGUNCmFkbWluaXN0cmF0aXZlIHRhZyAo b3IgdGFncykgbWF5IGJlIGNvbmZpZ3VyZWQgdG8gZG8gc28NCndpdGhvdXQga25vd2luZyAob3Ig ZXZlbiBleHBsaWNpdGx5IHN1cHBvcnRpbmcpDQpmdW5jdGlvbmFsaXR5IGltcGxpZWQgYnkgdGhl IHRhZy48L3Q+DQo8dD5JbnRlcnByZXRhdGlvbiBvZiB0YWcgdmFsdWVzIGlzIHNwZWNpZmljIHRv IHRoZSBhZG1pbmlzdHJhdGl2ZSBkb21haW4gb2YgYSBwYXJ0aWN1bGFyIG5ldHdvcmsgb3BlcmF0 b3IsIGFuZA0KIGhlbmNlIHRhZyB2YWx1ZXMgU0hPVUxEIE5PVCBiZSBwcm9wYWdhdGVkIG91dHNp ZGUgdGhlIGFkbWluaXN0cmF0aXZlIGRvbWFpbiB0byB3aGljaCB0aGV5IGFwcGx5Lg0KVGhlIG1l YW5pbmcgb2YgYSBwZXItbm9kZSBhZG1pbmlzdHJhdGl2ZSB0YWcgaXMgZGVmaW5lZCBieSB0aGUg bmV0d29yayBsb2NhbCBwb2xpY3kNCmFuZCBpcyBjb250cm9sbGVkIHZpYSB0aGUgY29uZmlndXJh dGlvbi4gSWYgYSByZWNlaXZpbmcgbm9kZSBkb2VzIG5vdA0KdW5kZXJzdGFuZCB0aGUgdGFnIHZh bHVlIG9yIGRvZXMgbm90IGhhdmUgYSBsb2NhbCBwb2xpY3kgY29ycmVzcG9uZGluZyB0byB0aGUg dGFnLA0KaXQgaWdub3JlcyB0aGUgc3BlY2lmaWMgdGFnIGFuZCBmbG9vZHMgdGhlIFJJIExTQSB3 aXRob3V0IGFueSBjaGFuZ2UgYXMgZGVmaW5lZCBpbiA8eHJlZiB0YXJnZXQ9IlJGQzQ5NzAiLz4u IDwvdD4NCjx0PlRoZSBzZW1hbnRpY3Mgb2YgdGhlIHRhZyBvcmRlciBoYXMgbm8gbWVhbmluZy4N ClRoYXQgaXMsIHRoZXJlIGlzIG5vIGltcGxpZWQgbWVhbmluZyB0byB0aGUgb3JkZXJpbmcgb2Yg dGhlDQp0YWdzIHRoYXQgaW5kaWNhdGVzIGEgY2VydGFpbiBvcGVyYXRpb24gb3Igc2V0IG9mIG9w ZXJhdGlvbnMNCnRoYXQgbmVlZCB0byBiZSBwZXJmb3JtZWQgYmFzZWQgb24gdGhlIG9yZGVyaW5n LjwvdD4NCjx0PkVhY2ggdGFnIE1VU1QgYmUgdHJlYXRlZCBhcyBhbiBpbmRlcGVuZGVudA0KaWRl bnRpZmllciB0aGF0IE1BWSBiZSB1c2VkIGluIHBvbGljeSB0byBwZXJmb3JtIGEgcG9saWN5DQph Y3Rpb24uIFRhZ3MgY2FycmllZCBieSB0aGUgYWRtaW5pc3RyYXRpdmUgdGFnIFRMViBTSE9VTEQg YmUgdXNlZCB0byBpbmRpY2F0ZQ0KaW5kZXBlbmRlbnQgY2hhcmFjdGVyaXN0aWNzIG9mIGEgbm9k ZS4gVGhlIGFkbWluaXN0cmF0aXZlIHRhZyBsaXN0IHdpdGhpbiB0aGUgVExWIE1VU1QgYmUgY29u c2lkZXJlZCANCmFuIHVub3JkZXJlZCBsaXN0LiBXaGlsc3QgcG9saWNpZXMgbWF5IGJlIGltcGxl bWVudGVkIGJhc2VkIG9uIHRoZSANCnByZXNlbmNlIG9mIG11bHRpcGxlIHRhZ3MgKGUuZy4sIGlm IHRhZyBBIEFORCB0YWcgQiBhcmUgcHJlc2VudCksIA0KdGhleSBNVVNUIE5PVCBiZSByZWxpYW50 IHVwb24gdGhlIG9yZGVyIG9mIHRoZSB0YWdzIChpLmUuLA0KYWxsIHBvbGljaWVzIHNob3VsZCBi ZSBjb25zaWRlcmVkIGNvbW11dGF0aXZlIG9wZXJhdGlvbnMsIHN1Y2ggdGhhdA0KdGFnIEEgcHJl Y2VkaW5nIG9yIGZvbGxvd2luZyB0YWcgQiBkb2VzIG5vdCBjaGFuZ2UgdGhlaXIgb3V0Y29tZSku DQo8L3Q+DQo8dD5UbyBhdm9pZCBpbmNvbXBsZXRlIG9yIGluY29uc2lzdGVudCBpbnRlcnByZXRh dGlvbnMgb2YNCnRoZSBwZXItbm9kZSBhZG1pbmlzdHJhdGl2ZSB0YWdzIHRoZSBzYW1lIHRhZyB2 YWx1ZSBNVVNUIE5PVA0KYmUgYWR2ZXJ0aXNlZCBieSBhIHJvdXRlciBpbiBSSSBMU0FzIG9mIGRp ZmZlcmVudA0Kc2NvcGVzLiBUaGUgc2FtZSB0YWcgTUFZIGJlIGFkdmVydGlzZWQgaW4gbXVsdGlw bGUgUkkNCkxTQXMgb2YgdGhlIHNhbWUgc2NvcGUsIGZvciBleGFtcGxlLCBPU1BGIEFyZWEgQm9y ZGVyDQpSb3V0ZXIgKEFCUikgbWF5IGFkdmVydGlzZSB0aGUgc2FtZSB0YWcgaW4gYXJlYS1zY29w ZSBSSQ0KTFNBcyBpbiBtdWx0aXBsZSBhcmVhcyBjb25uZWN0ZWQgdG8gdGhlIEFCUi48L3Q+DQo8 dD5UaGUgcGVyLW5vZGUgYWRtaW5pc3RyYXRpdmUgdGFncyBhcmUgbm90IG1lYW50IHRvIGJlDQpl eHRlbmRlZCBieSB0aGUgZnV0dXJlIE9TUEYgc3RhbmRhcmRzLiBUaGUgbmV3IE9TUEYNCmV4dGVu c2lvbnMgTVVTVCBOT1QgcmVxdWlyZSB1c2Ugb2YgcGVyLW5vZGUgYWRtaW5pc3RyYXRpdmUNCnRh Z3Mgb3IgZGVmaW5lIHdlbGwta25vd24gdGFnIHZhbHVlcy4gTm9kZSBhZG1pbmlzdHJhdGl2ZSB0 YWdzDQphcmUgZm9yIGdlbmVyaWMgdXNlIGFuZCBkbyBub3QgcmVxdWlyZSBJQU5BIHJlZ2lzdHJ5 Lg0KVGhlIGZ1dHVyZSBPU1BGIGV4dGVuc2lvbnMgcmVxdWlyaW5nIHdlbGwga25vd24gdmFsdWVz IE1BWQ0KZGVmaW5lIHRoZWlyIG93biBkYXRhIHNpZ25hbGxpbmcgdGFpbG9yZWQgdG8gdGhlIG5l ZWRzIG9mIHRoZQ0KZmVhdHVyZSBvciBNQVkgdXNlIGNhcGFiaWxpdHkgVExWIGFzIGRlZmluZWQg aW4NCjx4cmVmIHRhcmdldD0iUkZDNDk3MCIvPi4gPC90Pg0KPHQ+QmVpbmcgcGFydCBvZiB0aGUg UkkgTFNBLCB0aGUgcGVyLW5vZGUgYWRtaW5pc3RyYXRpdmUgdGFnDQpUTFYgbXVzdCBiZSByZWFz b25hYmx5IHNtYWxsIGFuZCBzdGFibGUuIEluIHBhcnRpY3VsYXIsDQpidXQgbm90IGxpbWl0ZWQg dG8sIGltcGxlbWVudGF0aW9ucyBzdXBwb3J0aW5nIHRoZSBwZXItbm9kZQ0KYWRtaW5pc3RyYXRp dmUgdGFncyBNVVNUIE5PVCB0aWUgYWR2ZXJ0aXNlZCB0YWdzIHRvDQpjaGFuZ2VzIGluIHRoZSBu ZXR3b3JrIHRvcG9sb2d5IChib3RoIHdpdGhpbiBhbmQgb3V0c2lkZQ0KdGhlIE9TUEYgZG9tYWlu KSBvciByZWFjaGFiaWxpdHkgb2Ygcm91dGVzLjwvdD4NCg0KPHQ+IE11bHRpcGxlIG5vZGUgYWRt aW5pc3RyYXRpdmUgdGFnIFRMVnMgTUFZIGFwcGVhciBpbiBhbiBSSSBMU0Egb3IgDQogICBtdWx0 aXBsZSBub2RlIGFkbWluaXN0cmF0aXZlIHRhZyBUTFZzIE1BWSBiZSBjb250YWluZWQgaW4gZGlm ZmVyZW50DQogICBpbnN0YW5jZXMgb2YgdGhlIFJJIExTQS4gIFRoZSBub2RlIGFkbWluaXN0cmF0 aXZlIHRhZ3MgYXNzb2NpYXRlZA0KICAgd2l0aCBhIG5vZGUgdGhhdCBvcmlnaW5hdGVzIHRhZ3Mg Zm9yIHRoZSBwdXJwb3NlIG9mIGFueSBjb21wdXRhdGlvbiBvciBwcm9jZXNzaW5nIGF0IGEgcmVj ZWl2aW5nIG5vZGUNCiAgIFNIT1VMRCBiZSBhIHN1cGVyc2V0IG9mIG5vZGUgYWRtaW5pc3RyYXRp dmUgdGFncyBmcm9tIGFsbCB0aGUgVExWcyBpbiBhbGwgdGhlDQogICByZWNlaXZlZCBSSSBMU0Eg aW5zdGFuY2VzIG9yaWdpbmF0ZWQgYnkgdGhhdCBub2RlLldoZW4gYW4gUkkgTFNBIGlzIHJlY2Vp dmVkIHRoYXQgY2hhbmdlcyB0aGUgc2V0IG9mIA0KICAgdGFncyBhcHBsaWNhYmxlIHRvIGFueSBv cmlnaW5hdGluZyBub2RlLCBhIHJlY2VpdmluZyBub2RlIE1VU1QgcmVwZWF0IGFueSBjb21wdXRh dGlvbiBvcg0KCXByb2Nlc3NpbmcgdGhhdCBpcyBiYXNlZCBvbiB0aG9zZSBhZG1pbmlzdHJhdGl2 ZSB0YWdzLg0KPC90Pg0KPHQ+V2hlbiB0aGVyZSBpcyBhIGNoYW5nZSBvciByZW1vdmFsIG9mIGFu IGFkbWluaXN0cmF0aXZlIGFmZmlsaWF0aW9uIG9mIGEgbm9kZSwgDQogICB0aGUgbm9kZSBNVVNU IHJlLW9yaWdpbmF0ZSB0aGUgUkkgTFNBIHdpdGggdGhlIGxhdGVzdCBzZXQgb2Ygbm9kZSBhZG1p bmlzdHJhdGl2ZSB0YWdzLg0KICAgT24gdGhlIHJlY2VpdmVyLCBXaGVuIHRoZXJlIGlzIGEgY2hh bmdlIGluIHRoZSBub2RlIGFkbWluaXN0cmF0aXZlIHRhZyBUTFYgb3IgcmVtb3ZhbC8NCiAgIGFk ZGl0aW9uIG9mIGEgVExWIGluIGFueSBpbnN0YW5jZSBvZiB0aGUgUkktTFNBLCBpbXBsZW1lbnRh dGlvbnMgTVVTVA0KICAgdGFrZSBhcHByb3ByaWF0ZSBtZWFzdXJlcyB0byB1cGRhdGUgaXRzIHN0 YXRlIGFjY29yZGluZyB0byB0aGUNCiAgIGNoYW5nZWQgc2V0IG9mIHRhZ3MuICBFeGFjdCBhY3Rp b25zIGRlcGVuZCBvbiBmZWF0dXJlcyB3b3JraW5nIHdpdGgNCiAgIGFkbWluaXN0cmF0aXZlIHRh Z3MgYW5kIGlzIG91dHNpZGUgb2Ygc2NvcGUgb2YgdGhpcyBzcGVjaWZpY2F0aW9uLg0KPC90Pg0K PC9zZWN0aW9uPg0KPC9zZWN0aW9uPg0KPHNlY3Rpb24gdGl0bGU9J0FwcGxpY2F0aW9ucyc+DQo8 dD5UaGlzIHNlY3Rpb24gbGlzdHMgc2V2ZXJhbCBleGFtcGxlcyBvZiBob3cgaW1wbGVtZW50YXRp b25zDQptaWdodCB1c2UgdGhlIE5vZGUgYWRtaW5pc3RyYXRpdmUgdGFncy4gVGhlc2UgZXhhbXBs ZXMgYXJlDQpnaXZlbiBvbmx5IHRvIGRlbW9uc3RyYXRlIGdlbmVyaWMgdXNlZnVsbmVzcyBvZiB0 aGUgcm91dGVyDQp0YWdnaW5nIG1lY2hhbmlzbS4gSW1wbGVtZW50YXRpb24gc3VwcG9ydGluZyB0 aGlzDQpzcGVjaWZpY2F0aW9uIGlzIG5vdCByZXF1aXJlZCB0byBpbXBsZW1lbnQgYW55IG9mIHRo ZSB1c2UNCmNhc2VzLiBJdCBpcyBhbHNvIHdvcnRoIG5vdGluZyB0aGF0IGluIHNvbWUgZGVzY3Jp YmVkIHVzZQ0KY2FzZXMgcm91dGVycyBjb25maWd1cmVkIHRvIGFkdmVydGlzZSB0YWdzIGhlbHAg b3RoZXIgcm91dGVycw0KaW4gdGhlaXIgY2FsY3VsYXRpb25zIGJ1dCBkbyBub3QgdGhlbXNlbHZl cyBpbXBsZW1lbnQgdGhlDQpzYW1lIGZ1bmN0aW9uYWxpdHkuPC90Pg0KPHNlY3Rpb24gdGl0bGU9 J1NlcnZpY2UgYXV0by1kaXNjb3ZlcnknPg0KPHQ+DQo8dnNwYWNlIGJsYW5rTGluZXM9IjEiLz4N ClJvdXRlciB0YWdnaW5nIG1heSBiZSB1c2VkIHRvIGF1dG9tYXRpY2FsbHkgZGlzY292ZXINCmdy b3VwIG9mIHJvdXRlcnMgc2hhcmluZyBhIHBhcnRpY3VsYXIgc2VydmljZS4NCjx2c3BhY2UgYmxh bmtMaW5lcz0iMSIvPg0KRm9yIGV4YW1wbGUsIHNlcnZpY2UgcHJvdmlkZXIgbWlnaHQgZGVzaXJl IHRvIGVzdGFibGlzaA0KZnVsbCBtZXNoIG9mIE1QTFMgVEUgdHVubmVscyBiZXR3ZWVuIGFsbCBQ RSByb3V0ZXJzIGluDQp0aGUgYXJlYSBvZiBNUExTIFZQTiBuZXR3b3JrLiBNYXJraW5nIGFsbCBQ RSByb3V0ZXJzIHdpdGgNCmEgdGFnIGFuZCBjb25maWd1cmluZyBkZXZpY2VzIHdpdGggYSBwb2xp Y3kgdG8gY3JlYXRlDQpNUExTIFRFIHR1bm5lbHMgdG8gYWxsIG90aGVyIGRldmljZXMgYWR2ZXJ0 aXNpbmcgdGhpcyB0YWcNCndpbGwgYXV0b21hdGUgbWFpbnRlbmFuY2Ugb2YgdGhlIGZ1bGwgbWVz aC4gV2hlbiBuZXcgUEUNCnJvdXRlciBpcyBhZGRlZCB0byB0aGUgYXJlYSwgYWxsIG90aGVyIFBF IGRldmljZXMgd2lsbA0Kb3BlbiBURSB0dW5uZWxzIHRvIGl0IHdpdGhvdXQgdGhlIG5lZWQgb2Yg cmVjb25maWd1cmluZw0KdGhlbS4NCjwvdD4NCjwvc2VjdGlvbj4NCjxzZWN0aW9uIHRpdGxlPSdG YXN0LVJlLXJvdXRpbmcgcG9saWN5Jz4NCjx0Pg0KPHZzcGFjZSBibGFua0xpbmVzPSIxIi8+DQpJ bmNyZWFzZWQgZGVwbG95bWVudCBvZiBMb29wIEZyZWUgQWx0ZXJuYXRlcyAoTEZBKSBhcw0KZGVm aW5lZCBpbiA8eHJlZiB0YXJnZXQ9IlJGQzUyODYiLz4gcG9zZXMgb3BlcmF0aW9uIGFuZA0KbWFu YWdlbWVudCBjaGFsbGVuZ2VzLiA8eHJlZg0KdGFyZ2V0PSJJLUQuaWV0Zi1ydGd3Zy1sZmEtbWFu YWdlYWJpbGl0eSIvPiBwcm9wb3Nlcw0KcG9saWNpZXMgd2hpY2gsIHdoZW4gaW1wbGVtZW50ZWQs IHdpbGwgZWFzZSBMRkEgb3BlcmF0aW9uDQpjb25jZXJucy4NCjx2c3BhY2UgYmxhbmtMaW5lcz0i MSIvPg0KT25lIG9mIHRoZSBwcm9wb3NlZCByZWZpbmVtZW50cyBpcyB0byBiZSBhYmxlIHRvIGdy b3VwDQp0aGUgbm9kZXMgaW4gSUdQIGRvbWFpbiB3aXRoIGFkbWluaXN0cmF0aXZlIHRhZ3MgYW5k DQplbmdpbmVlciB0aGUgTEZBIGJhc2VkIG9uIGNvbmZpZ3VyZWQgcG9saWNpZXMuDQo8bGlzdCBz dHlsZT0iZm9ybWF0ICglYykiIGhhbmdJbmRlbnQ9IjQiPg0KPHQ+QWRtaW5pc3RyYXRpdmUgbGlt aXRhdGlvbiBvZiBMRkEgc2NvcGUNCjx2c3BhY2UgYmxhbmtMaW5lcz0iMSIvPg0KU2VydmljZSBw cm92aWRlciBhY2Nlc3MgaW5mcmFzdHJ1Y3R1cmUgaXMgZnJlcXVlbnRseQ0KZGVzaWduZWQgaW4g bGF5ZXJlZCBhcHByb2FjaCB3aXRoIGVhY2ggbGF5ZXIgb2YNCmRldmljZXMgc2VydmluZyBkaWZm ZXJlbnQgcHVycG9zZXMgYW5kIHRodXMgaGF2aW5nDQpkaWZmZXJlbnQgaGFyZHdhcmUgY2FwYWJp bGl0aWVzIGFuZCBjb25maWd1cmVkDQpzb2Z0d2FyZSBmZWF0dXJlcy4gV2hlbiBMRkEgcmVwYWly IHBhdGhzIGFyZSBiZWluZw0KY29tcHV0ZWQsIGl0IG1heSBiZSBkZXNpcmFibGUgdG8gZXhjbHVk ZSBkZXZpY2VzIGZyb20NCmJlaW5nIGNvbnNpZGVyZWQgYXMgTEZBIGNhbmRpZGF0ZXMgYmFzZWQg b24gdGhlaXINCmxheWVyLg0KPHZzcGFjZSBibGFua0xpbmVzPSIxIi8+DQpGb3IgZXhhbXBsZSwg aWYgdGhlIGFjY2VzcyBpbmZyYXN0cnVjdHVyZSBpcyBkaXZpZGVkDQppbnRvIHRoZSBBY2Nlc3Ms IERpc3RyaWJ1dGlvbiBhbmQgQ29yZSBsYXllcnMgaXQgbWF5DQpiZSBkZXNpcmFibGUgZm9yIGEg RGlzdHJpYnV0aW9uIGRldmljZSB0byBjb21wdXRlIExGQQ0Kb25seSB2aWEgRGlzdHJpYnV0aW9u IG9yIENvcmUgZGV2aWNlcyBidXQgbm90IHZpYQ0KQWNjZXNzIGRldmljZXMuIFRoaXMgbWF5IGJl IGR1ZSB0byBmZWF0dXJlcyBlbmFibGVkDQpvbiBBY2Nlc3Mgcm91dGVyczsgZHVlIHRvIGNhcGFj aXR5IGxpbWl0YXRpb25zIG9yIGR1ZQ0KdG8gdGhlIHNlY3VyaXR5IHJlcXVpcmVtZW50cy4gTWFu YWdpbmcgc3VjaCBhIHBvbGljeQ0KdmlhIGNvbmZpZ3VyYXRpb24gb2YgdGhlIHJvdXRlciBjb21w dXRpbmcgTEZBIGlzDQpjdW1iZXJzb21lIGFuZCBlcnJvciBwcm9uZS4NCjx2c3BhY2UgYmxhbmtM aW5lcz0iMSIvPg0KV2l0aCB0aGUgTm9kZSBhZG1pbmlzdHJhdGl2ZSB0YWdzIGl0IGlzIHBvc3Np YmxlIHRvDQphc3NpZ24gYSB0YWcgdG8gZWFjaCBsYXllciBhbmQgaW1wbGVtZW50IExGQSBwb2xp Y3kNCm9mIGNvbXB1dGluZyBMRkEgcmVwYWlyIHBhdGhzIG9ubHkgdmlhIG5laWdoYm9ycw0Kd2hp Y2ggYWR2ZXJ0aXNlIHRoZSBDb3JlIG9yIERpc3RyaWJ1dGlvbiB0YWcuIFRoaXMNCnJlcXVpcmVz IG1pbmltYWwgcGVyLW5vZGUgY29uZmlndXJhdGlvbiBhbmQgbmV0d29yaw0KYXV0b21hdGljYWxs eSBhZGFwdHMgd2hlbiBuZXcgbGlua3Mgb3Igcm91dGVycyBhcmUNCmFkZGVkLg0KPC90Pg0KPHQ+ TEZBIGNhbGN1bGF0aW9uIG9wdGltaXphdGlvbg0KPHZzcGFjZSBibGFua0xpbmVzPSIxIi8+DQpD YWxjdWxhdGlvbiBvZiBMRkEgcGF0aHMgbWF5IHJlcXVpcmUgc2lnbmlmaWNhbnQNCnJlc291cmNl cyBvZiB0aGUgcm91dGVyLiBPbmUgZXhlY3V0aW9uIG9mIERpamtzdHJhDQphbGdvcml0aG0gaXMg cmVxdWlyZWQgZm9yIGVhY2ggbmVpZ2hib3IgZWxpZ2libGUgdG8NCmJlY29tZSBuZXh0IGhvcCBv ZiByZXBhaXIgcGF0aHMuIFRodXMgYSByb3V0ZXIgd2l0aCBhDQpmZXcgaHVuZHJlZHMgb2YgbmVp Z2hib3JzIG1heSBuZWVkIHRvIGV4ZWN1dGUgdGhlDQphbGdvcml0aG0gaHVuZHJlZHMgb2YgdGlt ZXMgYmVmb3JlIHRoZSBiZXN0IChvciBldmVuDQp2YWxpZCkgcmVwYWlyIHBhdGggaXMgZm91bmQu IE1hbnVhbGx5IGV4Y2x1ZGluZyBmcm9tDQp0aGUgY2FsY3VsYXRpb24gbmVpZ2hib3JzIHdoaWNo IGFyZSBrbm93biB0byBwcm92aWRlDQpubyB2YWxpZCBMRkEgKHN1Y2ggYXMgc2luZ2xlLWNvbm5l Y3RlZCByb3V0ZXJzKSBtYXkNCnNpZ25pZmljYW50bHkgcmVkdWNlIG51bWJlciBvZiBEaWprc3Ry YSBhbGdvcml0aG0NCnJ1bnMuDQo8dnNwYWNlIGJsYW5rTGluZXM9IjEiLz4NCkxGQSBjYWxjdWxh dGlvbiBwb2xpY3kgbWF5IGJlIGNvbmZpZ3VyZWQgc28gdGhhdA0Kcm91dGVycyBhZHZlcnRpc2lu ZyBjZXJ0YWluIHRhZyB2YWx1ZSBhcmUgZXhjbHVkZWQNCmZyb20gTEZBIGNhbGN1bGF0aW9uIGV2 ZW4gaWYgdGhleSBhcmUgb3RoZXJ3aXNlDQpzdWl0YWJsZS4NCjwvdD4NCjwvbGlzdD4NCjwvdD4N Cjwvc2VjdGlvbj4NCjxzZWN0aW9uIHRpdGxlID0nQ29udHJvbGxpbmcgUmVtb3RlIExGQSB0dW5u ZWwgdGVybWluYXRpb24nPg0KPHQ+DQo8dnNwYWNlIGJsYW5rTGluZXM9IjEiLz4NCjx4cmVmIHRh cmdldD0iUkZDNzQ5MCIvPiBkZWZpbmVkIGENCm1ldGhvZCBvZiB0dW5uZWxsaW5nIHRyYWZmaWMg YWZ0ZXIgY29ubmVjdGVkIGxpbmsgZmFpbHVyZQ0KdG8gZXh0ZW5kIHRoZSBiYXNpYyBMRkEgY292 ZXJhZ2UgYW5kIGFsZ29yaXRobSB0byBmaW5kDQp0dW5uZWwgdGFpbC1lbmQgcm91dGVycyBmaXR0 aW5nIExGQSByZXF1aXJlbWVudC4gSW4gbW9zdA0KY2FzZXMgcHJvcG9zZWQgYWxnb3JpdGhtIGZp bmRzIG1vcmUgdGhhbiBvbmUgY2FuZGlkYXRlDQp0YWlsLWVuZCByb3V0ZXIuIEluIHJlYWwgbGlm ZSBuZXR3b3JrIGl0IG1heSBiZSBkZXNpcmFibGUNCnRvIGV4Y2x1ZGUgc29tZSBub2RlcyBmcm9t IHRoZSBsaXN0IG9mIGNhbmRpZGF0ZXMgYmFzZWQNCm9uIHRoZSBsb2NhbCBwb2xpY3kuIFRoaXMg bWF5IGJlIGVpdGhlciBkdWUgdG8ga25vd24NCmxpbWl0YXRpb25zIG9mIHRoZSBub2RlICh0aGUg cm91dGVyIGRvZXMgbm90IGFjY2VwdCB0YXJnZXRlZA0KTERQIHNlc3Npb25zIHJlcXVpcmVkIHRv IGltcGxlbWVudCBSZW1vdGUgTEZBIHR1bm5lbGxpbmcpDQpvciBkdWUgdG8gYWRtaW5pc3RyYXRp dmUgcmVxdWlyZW1lbnRzIChmb3IgZXhhbXBsZSwgaXQNCm1heSBiZSBkZXNpcmFibGUgdG8gY2hv b3NlIHRhaWwtZW5kIHJvdXRlciBhbW9uZw0KY28tbG9jYXRlZCBkZXZpY2VzKS4NCjx2c3BhY2Ug YmxhbmtMaW5lcz0iMSIvPg0KVGhlIE5vZGUgYWRtaW5pc3RyYXRpdmUgdGFnIGRlbGl2ZXJzIHNp bXBsZSBhbmQgc2NhbGFibGUNCnNvbHV0aW9uLiBSZW1vdGUgTEZBIGNhbiBiZSBjb25maWd1cmVk IHdpdGggYSBwb2xpY3kgdG8NCmFjY2VwdCBkdXJpbmcgdGhlIHRhaWwtZW5kIHJvdXRlciBjYWxj dWxhdGlvbiBhcw0KY2FuZGlkYXRlcyBvbmx5IHJvdXRlcnMgYWR2ZXJ0aXNpbmcgY2VydGFpbiB0 YWcuIFRhZ2dpbmcNCnJvdXRlcnMgYWxsb3dzIHRvIGJvdGggZXhjbHVkZSBub2RlcyBub3QgY2Fw YWJsZSBvZg0Kc2VydmluZyBhcyBSZW1vdGUgTEZBIHR1bm5lbCB0YWlsLWVuZHMgYW5kIHRvIGRl ZmluZSBhDQpyZWdpb24gZnJvbSB3aGljaCB0YWlsLWVuZCByb3V0ZXIgbXVzdCBiZSBzZWxlY3Rl ZC4NCjwvdD4NCjwvc2VjdGlvbj4NCjxzZWN0aW9uIHRpdGxlPSdNb2JpbGUgYmFjay1oYXVsIG5l dHdvcmsgc2VydmljZSBkZXBsb3ltZW50Jz4NCjx0Pg0KPHZzcGFjZSBibGFua0xpbmVzPSIxIi8+ DQpUaGUgdG9wb2xvZ3kgb2YgbW9iaWxlIGJhY2staGF1bCBuZXR3b3JrIHVzdWFsbHkgYWRvcHRz IHJpbmcgdG9wb2xvZ3kNCnRvIHNhdmUgZmlicmUgcmVzb3VyY2UgYW5kIGl0IGlzIGRpdmlkZWQg aW50byB0aGUgYWdncmVnYXRlIG5ldHdvcmsgYW5kDQp0aGUgYWNjZXNzIG5ldHdvcmsuIENlbGwg U2l0ZSBHYXRld2F5cyhDU0dzKSBjb25uZWN0cyB0aGUgZU5vZGVCcyBhbmQNClJOQyhSYWRpbyBO ZXR3b3JrIENvbnRyb2xsZXIpIFNpdGUgR2F0ZXdheXMoUlNHcykgY29ubmVjdHMgdGhlIFJOQ3Mu DQpUaGUgbW9iaWxlIHRyYWZmaWMgaXMgdHJhbnNwb3J0ZWQgZnJvbSBDU0dzIHRvIFJTR3MuIFRo ZSBuZXR3b3JrIHRha2VzDQphIHR5cGljYWwgYWdncmVnYXRlIHRyYWZmaWMgbW9kZWwgdGhhdCBt b3JlIHRoYW4gb25lIGFjY2VzcyByaW5ncyB3aWxsDQphdHRhY2ggdG8gb25lIHBhaXIgb2YgYWdn cmVnYXRlIHNpdGUgZ2F0ZXdheXMoQVNHcykgYW5kIG1vcmUgdGhhbiBvbmUNCmFnZ3JlZ2F0ZSBy aW5ncyB3aWxsIGF0dGFjaCB0byBvbmUgcGFpciBvZiBSU0dzLg0KPHZzcGFjZSBibGFua0xpbmVz PSIxIi8+DQo8ZmlndXJlIGFuY2hvcj0ibW9iaWxlLWJhY2staGF1bC1uZXR3b3JrIiB0aXRsZT0i TW9iaWxlIEJhY2toYXVsIE5ldHdvcmsiPg0KPGFydHdvcms+DQogICAgICAgICAgICAgICAgICAt LS0tLS0tLS0tLS0tLS0tDQogICAgICAgICAgICAgICAgIC8gICAgICAgICAgICAgICAgXA0KICAg ICAgICAgICAgICAgIC8gICAgICAgICAgICAgICAgICBcDQogICAgICAgICAgICAgICAvICAgICAg ICAgICAgICAgICAgICBcDQogICstLS0tLS0rICAgKy0tLS0rICAgIEFjY2VzcyAgICAgKy0tLS0r DQogIHxlTm9kZUJ8LS0tfENTRzF8ICAgIFJpbmcgMSAgICAgfEFTRzF8LS0tLS0tLS0tLS0tDQog ICstLS0tLS0rICAgKy0tLS0rICAgICAgICAgICAgICAgKy0tLS0rICAgICAgICAgICAgXA0KICAg ICAgICAgICAgICAgXCAgICAgICAgICAgICAgICAgICAgLyAgICAgICAgICAgICAgICBcDQogICAg ICAgICAgICAgICAgXCAgICAgICAgICAgICAgICAgIC8gICAgICAgICAgICAgICAgICArLS0tLSsg ICAgKy0tLSsNCiAgICAgICAgICAgICAgICAgXCAgICAgICAgICAgICArLS0tLSsgICAgICAgICAg ICAgICAgIHxSU0cxfC0tLS18Uk5DfA0KICAgICAgICAgICAgICAgICAgLS0tLS0tLS0tLS0tLXwg ICAgfCAgICBBZ2dyZWdhdGUgICAgKy0tLS0rICAgICstLS0rDQogICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgfEFTRzJ8ICAgICAgUmluZyAgICAgICAgIHwNCiAgICAgICAgICAgICAgICAg IC0tLS0tLS0tLS0tLS18ICAgIHwgICAgICAgICAgICAgICAgICstLS0tKyAgICArLS0tKw0KICAg ICAgICAgICAgICAgICAvICAgICAgICAgICAgICstLS0tKyAgICAgICAgICAgICAgICAgfFJTRzJ8 LS0tLXxSTkN8DQogICAgICAgICAgICAgICAgLyAgICAgICAgICAgICAgICAgIFwgICAgICAgICAg ICAgICAgICArLS0tLSsgICAgKy0tLSsNCiAgICAgICAgICAgICAgIC8gICAgICAgICAgICAgICAg ICAgIFwgICAgICAgICAgICAgICAgLw0KICArLS0tLS0tKyAgICstLS0tKyAgICAgQWNjZXNzICAg ICArLS0tLSsgICAgICAgICAgIC8NCiAgfGVOb2RlQnwtLS18Q1NHMnwgICAgIFJpbmcgMiAgICAg fEFTRzN8LS0tLS0tLS0tLS0NCiAgKy0tLS0tLSsgICArLS0tLSsgICAgICAgICAgICAgICAgKy0t LS0rDQogICAgICAgICAgICAgIFwgICAgICAgICAgICAgICAgICAgICAvDQogICAgICAgICAgICAg ICBcICAgICAgICAgICAgICAgICAgIC8NCiAgICAgICAgICAgICAgICBcICAgICAgICAgICAgICAg ICAvDQogICAgICAgICAgICAgICAgIC0tLS0tLS0tLS0tLS0tLS0tDQo8L2FydHdvcms+DQo8L2Zp Z3VyZT4NCjx2c3BhY2UgYmxhbmtMaW5lcz0iMSIvPg0KQSB0eXBpY2FsIG1vYmlsZSBiYWNrLWhh dWwgbmV0d29yayB3aXRoIGFjY2VzcyByaW5ncyBhbmQgYWdncmVnYXRlDQpsaW5rcyBpcyBzaG93 biBpbiBmaWd1cmUgYWJvdmUuIFRoZSBtb2JpbGUgYmFjay1oYXVsIG5ldHdvcmtzIGRlcGxveQ0K dHJhZmZpYyBlbmdpbmVlcmluZyBkdWUgdG8gdGhlIHN0cmljdCBTZXJ2aWNlIExldmVsIEFncmVl bWVudHMoU0xBKS4NClRoZSBURSBwYXRocyBtYXkgaGF2ZSBhZGRpdGlvbmFsIGNvbnN0cmFpbnRz IHRvIGF2b2lkIHBhc3NpbmcgdmlhIGRpZmZlcmVudA0KYWNjZXNzIHJpbmdzIG9yIHRvIGdldCBj b21wbGV0ZWx5IGRpc2pvaW50IGJhY2t1cCBURSBwYXRocy4gVGhlIG1vYmlsZSBiYWNrLWhhdWwN Cm5ldHdvcmtzIHRvd2FyZHMgdGhlIGFjY2VzcyBzaWRlIGNoYW5nZSBmcmVxdWVudGx5IGR1ZSB0 byB0aGUgZ3Jvd2luZyBtb2JpbGUNCnRyYWZmaWMgYW5kIGFkZGl0aW9uIG9mIG5ldyBFdm9sdmVk IE5vZGVCcyAoZU5vZGVCKS4gSXQncyBjb21wbGV4IHRvIHNhdGlzZnkgdGhlIHJlcXVpcmVtZW50 cw0KdXNpbmcgY29zdCwgbGluayBjb2xvciBvciBleHBsaWNpdCBwYXRoIGNvbmZpZ3VyYXRpb25z Lg0KVGhlIG5vZGUgYWRtaW5pc3RyYXRpdmUgdGFnIGRlZmluZWQgaW4gdGhpcyBkb2N1bWVudCBj YW4gYmUgZWZmZWN0aXZlbHkgdXNlZA0KdG8gc29sdmUgdGhlIHByb2JsZW0gZm9yIG1vYmlsZSBi YWNrLWhhdWwgbmV0d29ya3MuIFRoZSBub2RlcyBpbiBkaWZmZXJlbnQgcmluZ3MNCmNhbiBiZSBh c3NpZ25lZCB3aXRoIHNwZWNpZmljIHRhZ3MuIFRFIHBhdGggY29tcHV0YXRpb24gY2FuIGJlIGVu aGFuY2VkIHRvDQpjb25zaWRlciBhZGRpdGlvbmFsIGNvbnN0cmFpbnRzIGJhc2VkIG9uIG5vZGUg YWRtaW5pc3RyYXRpdmUgdGFncy4gPC90Pg0KPC9zZWN0aW9uPg0KPHNlY3Rpb24gdGl0bGU9J0V4 cGxpY2l0IHJvdXRpbmcgcG9saWN5Jz4NCjx0Pg0KPHZzcGFjZSBibGFua0xpbmVzPSIxIi8+DQpQ YXJ0aWFsbHkgbWVzaGVkIG5ldHdvcmsgcHJvdmlkZXMgbXVsdGlwbGUgcGF0aHMgYmV0d2VlbiBh bnkgdHdvIG5vZGVzIGluIHRoZSBuZXR3b3JrLg0KSW4gYSBkYXRhIGNlbnRyZSBlbnZpcm9ubWVu dCwgdGhlIHRvcG9sb2d5IGlzIHVzdWFsbHkgaGlnaGx5IHN5bW1ldHJpYyB3aXRoIG1hbnkvYWxs DQpwYXRocyBoYXZpbmcgZXF1YWwgY29zdC4gSW4gYSBsb25nIGRpc3RhbmNlIG5ldHdvcmssIHRo aXMgaXMgdXN1YWxseSBsZXNzIHRoZSBjYXNlIGZvcg0KYSB2YXJpZXR5IG9mIHJlYXNvbnMgKGUu Zy4gaGlzdG9yaWMsIGZpYnJlIGF2YWlsYWJpbGl0eSBjb25zdHJhaW50cywgZGlmZmVyZW50IGRp c3RhbmNlcw0KYmV0d2VlbiB0cmFuc2l0IG5vZGVzLCBkaWZmZXJlbnQgcm9sZXMgLi4uKS4gSGVu Y2UgYmV0d2VlbiBhIGdpdmVuIHNvdXJjZSBhbmQgZGVzdGluYXRpb24sDQphIHBhdGggaXMgdHlw aWNhbGx5IHByZWZlcnJlZCBvdmVyIHRoZSBvdGhlcnMsIHdoaWxlIGJldHdlZW4gdGhlIHNhbWUg c291cmNlIGFuZCBhbm90aGVyDQpkZXN0aW5hdGlvbiwgYSBkaWZmZXJlbnQgcGF0aCBtYXkgYmUg cHJlZmVycmVkLg0KPHZzcGFjZSBibGFua0xpbmVzPSIxIi8+DQo8ZmlndXJlIGFuY2hvcj0iRXhw bGljaXRfcm91dGluZ190b3BvbG9neSIgdGl0bGU9IkV4cGxpY2l0IFJvdXRpbmcgdG9wb2xvZ3ki Pg0KPGFydHdvcms+DQoNCiAgICAgKy0tLS0tLS0tLS0tLS0tLS0tLS0tLS0rICAgKy0tLS0tLS0t LS0tLS0tLS0rDQoJIHwgICAgICAgICAgICAgICAgICAgICAgIFwgLyAgICAgICAgICAgICAgICAg fA0KICAgICB8ICAgKy0tLS0tLS0tLS0tLS0tLS0tKyAgeCAgICstLS0tLS0tLS0rICAgIHwNCiAg ICAgfCAgIHwgICAgICAgICAgICAgICAgICBcLyAgXC8gICAgICAgICAgfCAgICB8DQogICAgIHwg ICB8ICAgICAgICAgICAgICAgICstVC0xMC1UICAgICAgICAgIHwgICAgfA0KICAgICB8ICAgfCAg ICAgICAgICAgICAgIC8gIHwgICAvfCAgICAgICAgICB8ICAgIHwNCiAgICAgfCAgIHwgICAgICAg ICAgICAgIC8gIDEwMCAvIHwgICAgICAgICAgfCAgICB8DQogICAgIHwgICB8ICAgICAgICAgICAg IC8gICAgfCB8IDEwMCAgICAgICAgIHwgICAgfA0KICAgICB8ICAgfCAgICAgICAgICAgIC8gICAr LSstKyAgfCAgICAgICAgICB8ICAgIHwNCiAgICAgfCAgIHwgICAgICAgICAgIC8gICAvICB8ICAg IHwgICAgICAgICAgfCAgICB8DQogICAgIHwgICB8ICAgICAgICAgIC8gICAvICAgUi0xOC1SICAg ICAgICAgIHwgICAgfA0KICAgICB8ICAgfCAgICAgICAgMTAgICAxMCAgL1wgICAvXCAgICAgICAg ICB8ICAgIHwNCiAgICAgfCAgIHwgICAgICAgIC8gICAvICAgLyAgXCAvICBcICAgICAgICAgfCAg ICB8DQogICAgIHwgICB8ICAgICAgIC8gICAvICAgLyAgICB4ICAgIFwgICAgICAgIHwgICAgfA0K ICAgICB8ICAgfCAgICAgIC8gICAvICAgMTAgIDEwIFwgICAgXCAgICAgICB8ICAgIHwNCiAgICAg fCAgIHwgICAgIC8gICAvICAgLyAgICAvICAgMTAgICAxMCAgICAgfCAgICB8DQogICAgIHwgICB8 ICAgIC8gICAvICAgLyAgICAvICAgICBcICAgIFwgICAgIHwgICAgfA0KICAgICB8ICAgfCAgIEEt MjUtQSAgQS0yNS1BICAgICAgIEEtMjUtQSAgICB8ICAgIHwNCiAgICAgfCAgIHwgICB8ICAgIHwg ICBcICAgIFwgICAgIC8gICAgLyAgICAgfCAgICB8DQogICAgIHwgICB8ICAgfCAgICB8ICAgMjAx ICAyMDEgIDIwMSAyMDEgICAgIHwgICAgfA0KICAgICB8ICAgfCAgIHwgICAgfCAgICAgXCAgICBc IC8gICAgLyAgICAgICB8ICAgIHwNCiAgICAgfCAgIHwgIDIwMSAgMjAxICAgICBcICAgIHggICAg LyAgICAgICAgfCAgICB8DQogICAgIHwgICB8ICAgfCAgICB8ICAgICAgIFwgIC8gXCAgLyAgICAg ICAgIHwgICAgfA0KICAgICB8ICAgfCAgIHwgICAgfCAgICAgICAgXC8gICBcLyAgICAgICAgICB8 ICAgIHwNCiAgICAgfCAgIHwgICBJLTI0LUkgICAgICAgIEktMjQtSSAgICAgICAgICAxMDAgIDEw MA0KICAgICB8ICAgfCAgLyAgICAvICAgICAgICAgfCAgICB8ICAgICAgICAgICB8ICAgIHwNCiAg ICAgfCAgICstKyAgICAvICAgICAgICAgIHwgICAgKy0tLS0tLS0tLS0tKyAgICB8DQogICAgICst LS0tLS0tLS0rICAgICAgICAgICArLS0tLS0tLS0tLS0tLS0tLS0tLS0tKw0KPC9hcnR3b3JrPg0K PC9maWd1cmU+DQo8dnNwYWNlIGJsYW5rTGluZXM9IjEiLz4NCkluIHRoZSBhYm92ZSB0b3BvbG9n eSwgb3BlcmF0b3IgbWF5IHdhbnQgdG8gZW5mb3JjZSB0aGUgZm9sbG93aW5nIGhpZ2ggbGV2ZWwg ZXhwbGljaXQgcm91dGluZyBwb2xpY2llczoNCjxsaXN0Pg0KICAgIDx0Pi0gVHJhZmZpYyBmcm9t IEEgbm9kZXMgdG8gQSBub2RlcyBzaG91bGQgcHJlZmVyYWJseSBnbyB0aHJvdWdoIFIgb3IgVCBu b2RlcyAocmF0aGVyIHRoYW4gdGhyb3VnaCBJIG5vZGVzKTs8L3Q+DQogICAgPHQ+LSBUcmFmZmlj IGZyb20gQSBub2RlcyB0byBJIG5vZGVzIG11c3Qgbm90IGdvIHRocm91Z2ggUiBhbmQgVCBub2Rl cy48L3Q+DQo8L2xpc3Q+DQpXaXRoIG5vZGUgYWRtaW4gdGFncywgdGFnICBBIChyZXNwLiBJLCBS LCBUKSBjYW4gYmUgY29uZmlndXJlZCBvbiBhbGwgQSAocmVzcC4gSSwgUiwgVCkgbm9kZXMgdG8g YWR2ZXJ0aXNlIHRoZWlyIHJvbGUuIA0KVGhlIGZpcnN0IHBvbGljeSBpcyBhYm91dCBwcmVmZXJy aW5nIG9uZSBwYXRoIG92ZXIgYW5vdGhlci4gR2l2ZW4gdGhlIGNob3NlbiBtZXRyaWNzLCBpdCBp cyBhY2hpZXZlZCB3aXRoIHJlZ3VsYXIgU1BGIHJvdXRpbmcuDQpUaGUgc2Vjb25kIHBvbGljeSBp cyBhYm91dCBwcm9oaWJpdGluZyAocHJ1bmluZykgc29tZSBwYXRocy4gSXQgcmVxdWlyZXMgYW4g ZXhwbGljaXQgcm91dGluZyBwb2xpY3kuIFdpdGggdGhlIHVzZSBvZiBub2RlIHRhZ3MsIHRoaXMg bWF5IGJlIGFjaGlldmVkIHdpdGggYSBnZW5lcmljIENTUEYgcG9saWN5IGNvbmZpZ3VyZWQgb24g QSBub2RlczogZm9yIGRlc3RpbmF0aW9uIG5vZGVzIGhhdmluZyB0aGUgdGFnICJBIiBydW5zIGEg Q1NQRiB3aXRoIHRoZSBleGNsdXNpb24gb2Ygbm9kZXMgaGF2aW5nIHRoZSB0YWcgIkkiLg0KPC90 Pg0KPC9zZWN0aW9uPg0KDQoNCjwvc2VjdGlvbj4NCjwhLS0gSEc6IEZJWE1FOiBhZGQgdHJhZmZp Yy1lbmdpbmVlcmluZyByZWZlcmVuY2UgLS0+DQo8c2VjdGlvbiB0aXRsZT0nU2VjdXJpdHkgQ29u c2lkZXJhdGlvbnMnIGFuY2hvcj0nc2VjLWNvbic+DQo8dD4NCiBOb2RlIGFkbWluaXN0cmF0aXZl IHRhZ3MgbWF5IGJlIHVzZWQgYnkgb3BlcmF0b3JzIHRvIGluZGljYXRlIGdlb2dyYXBoaWNhbCBs b2NhdGlvbiBvciBvdGhlciBzZW5zaXRpdmUgaW5mb3JtYXRpb24uDQogQXMgaW5kaWNhdGVkIGlu IDx4cmVmIHRhcmdldD0iUkZDMjMyOCIvPiBhbmQgPHhyZWYgdGFyZ2V0PSJSRkM1MzQwIi8+IE9T UEYgYXV0aGVudGljYXRpb24gbWVjaGFuaXNtcyBkbyBub3QgcHJvdmlkZSANCiBjb25maWRlbnRp YWxpdHkgYW5kIHRoZSBpbmZvcm1hdGlvbiBjYXJyaWVkIGluIG5vZGUgYWRtaW5pc3RyYXRpdmUg dGFncyBjb3VsZCBiZSBsZWFrZWQgdG8gYW4gSUdQIHNub29wZXIuPC90Pg0KIDx0PiBBZHZlcnRp c2VtZW50IG9mIHRhZyB2YWx1ZXMgZm9yIG9uZSBhZG1pbmlzdHJhdGl2ZSBkb21haW4gaW50byAN CmFub3RoZXIgIHJpc2tzIG1pc2ludGVycHJldGF0aW9uIG9mIHRoZSB0YWcgdmFsdWVzIChpZiB0 aGUgdHdvIGRvbWFpbnMgaGF2ZSBhc3NpZ25lZCANCmRpZmZlcmVudCBtZWFuaW5ncyB0byB0aGUg c2FtZSB2YWx1ZXMpLCB3aGljaCBtYXkgaGF2ZSB1bmRlc2lyYWJsZSBhbmQgdW5hbnRpY2lwYXRl ZCBzaWRlDQplZmZlY3RzLjwvdD4NCjwvc2VjdGlvbj4NCg0KPHNlY3Rpb24gdGl0bGU9J09wZXJh dGlvbmFsIENvbnNpZGVyYXRpb25zJyBhbmNob3I9J29wLWNvbic+DQo8dD5PcGVyYXRvcnMgY2Fu IGFzc2lnbiBtZWFuaW5nIHRvIHRoZSBub2RlIGFkbWluaXN0cmF0aXZlIHRhZ3Mgd2hpY2ggaXMg bG9jYWwgdG8gdGhlIG9wZXJhdG9yJ3MgYWRtaW5pc3RyYXRpdmUgZG9tYWluLg0KVGhlIG9wZXJh dGlvbmFsIHVzZSBvZiBub2RlIGFkbWluaXN0cmF0aXZlIHRhZ3MgaXMgYW5hbG9naWNhbCB0byB0 aGUgSVMtSVMgcHJlZml4IHRhZ3MgIDx4cmVmIHRhcmdldD0iUkZDNTEzMCIvPiBhbmQNCkJHUCBj b21tdW5pdGllcyA8eHJlZiB0YXJnZXQ9IlJGQzE5OTciLz4uIE9wZXJhdGlvbmFsIGRpc2NpcGxp bmUgYW5kIHByb2NlZHVyZXMgZm9sbG93ZWQgaW4gY29uZmlndXJpbmcgYW5kIHVzaW5nIEJHUCBj b21tdW5pdGllcyANCmFuZCBJU0lTIFByZWZpeCB0YWdzIGlzIGFsc28gYXBwbGljYWJsZSB0byB0 aGUgdXNhZ2Ugb2Ygbm9kZSBhZG1pbmlzdHJhdGl2ZSB0YWdzLjwvdD4NCjx0PiBEZWZpbmluZyBs YW5ndWFnZSBmb3IgbG9jYWwgcG9saWNpZXMgaXMgb3V0c2lkZSB0aGUgc2NvcGUgb2YgdGhpcyBk b2N1bWVudC4gQXMgaW4gY2FzZSBvZiBvdGhlciBwb2xpY3kgYXBwbGljYXRpb25zLA0KIHRoZSBw cnVuaW5nIHBvbGljaWVzICBjYW4gY2F1c2UgdGhlIHBhdGggdG8gYmUgY29tcGxldGVseSByZW1v dmVkIGZyb20gZm9yd2FyZGluZyBwbGFuZSwNCiBoZW5jZSBhcmUgbGVzcyBwcmVmZXJyZWQgdGhh biB0aGUgcHJlZmVyZW5jZSBwb2xpY2llcy4NCiA8L3Q+DQogDQo8L3NlY3Rpb24+DQoNCjxzZWN0 aW9uIHRpdGxlPSdNYW5hZ2VhYmlsaXR5IENvbnNpZGVyYXRpb25zJyBhbmNob3I9J21hbmFnZS1j b24nPg0KPHQ+Tm9kZSBhZG1pbmlzdHJhdGl2ZSB0YWdzIGFyZSBjb25maWd1cmVkIGFuZCBtYW5h Z2VkIHVzaW5nIHJvdXRpbmcgcG9saWN5IGVuaGFuY2VtZW50cy4gWUFORyBkYXRhIGRlZmluaXRp b24gbGFuZ3VhZ2UgaXMgdGhlDQpsYXRlc3QgbW9kZWwgdG8gZGVzY3JpYmUgYW5kIGRlZmluZSBj b25maWd1cmF0aW9uIGZvciBuZXR3b3JrIGRldmljZXMuIE9TUEYgWUFORyBkYXRhIG1vZGVsIGlz IGRlc2NyaWJlZCBpbiA8eHJlZiB0YXJnZXQ9IkktRC5pZXRmLW9zcGYteWFuZyIvPg0KYW5kIHJv dXRpbmcgcG9saWN5IGNvbmZpZ3VyYXRpb24gbW9kZWwgaXMgZGVzY3JpYmVkIGluIDx4cmVmIHRh cmdldD0iSS1ELmlldGYtcnRnd2ctcG9saWN5LW1vZGVsIi8+LiBUaGVzZSB0d28gZG9jdW1lbnRz IHdpbGwgYmUNCmVuaGFuY2VkIHRvIGluY2x1ZGUgdGhlIG5vZGUgYWRtaW5pc3RyYXRpdmUgdGFn IHJlbGF0ZWQgY29uZmlndXJhdGlvbnMuPC90PiANCjwvc2VjdGlvbj4NCjxzZWN0aW9uIGFuY2hv cj0iSUFOQSIgdGl0bGU9IklBTkEgQ29uc2lkZXJhdGlvbnMiPg0KPHQ+DQpUaGlzIHNwZWNpZmlj YXRpb24gdXBkYXRlcyBvbmUgT1NQRiByZWdpc3RyeToNCk9TUEYgUm91dGVyIEluZm9ybWF0aW9u IChSSSkgVExWcyBSZWdpc3RyeQ0KPHZzcGFjZSBibGFua0xpbmVzPSIxIi8+DQogICBpKSBOb2Rl IEFkbWluIFRhZyBUTFYgLSBTdWdnZXN0ZWQgdmFsdWUgMTANCjwvdD4NCjwvc2VjdGlvbj4NCg0K PHNlY3Rpb24gYW5jaG9yPSJFZGl0b3ItTm90ZSIgdGl0bGU9IlJGQyBFZGl0b3IgTm90ZSI+DQo8 dD4NClBsZWFzZSByZXBsYWNlIGFib3ZlIHN1Z2dlc3RlZCB2YWx1ZSB3aXRoIHRoZSBhY3R1YWwg SUFOQS1hc3NpZ25lZCB2YWx1ZS4NCjwvdD4NCjwvc2VjdGlvbj4NCg0KPHNlY3Rpb24gdGl0bGU9 J0NvbnRyaWJ1dG9ycyc+DQo8dD5UaGFua3MgdG8gSGFubmVzIEdyZWRsZXIgZm9yIGhpcyBzdWJz dGFudGlhbCByZXZpZXcsZ3VpZGFuY2UgYW5kIHRvIHRoZSBlZGl0aW5nIG9mIHRoaXMgZG9jdW1l bnQuDQogICBUaGFua3MgdG8gSGFyaXNoIFJhZ3V2ZWVyIGZvciBoaXMgY29udHJpYnV0aW9ucyB0 byBpbml0aWFsIHZlcnNpb25zIG9mIHRoZSBkcmFmdC4NCjwvdD4NCjwvc2VjdGlvbj4NCjxzZWN0 aW9uIHRpdGxlPSdBY2tub3dsZWRnZW1lbnRzJz4NCjx0PlRoYW5rcyB0byBCaGFyYXRoIFIsIFB1 c2hwYXNpcyBTYXJha2FyIGFuZCBEaHJ1diBEaG9keSBmb3IgdXNlZnVsIGlucHV0cy4gVGhhbmtz IHRvIENocmlzIEJvd2Vycw0KZm9yIHByb3ZpZGluZyB1c2VmdWwgaW5wdXRzIHRvIHJlbW92ZSBh bWJpZ3VpdHkgcmVsYXRlZCB0byB0YWctb3JkZXJpbmcuIFRoYW5rcyB0byBMZXMgR2luc2Jlcmcg YW5kIEFjZWUgTGluZGVtIGZvcg0KdGhlIGlucHV0cy4NCjwvdD4NCjwvc2VjdGlvbj4NCjwvbWlk ZGxlPg0KPGJhY2s+DQo8cmVmZXJlbmNlcyB0aXRsZT0nTm9ybWF0aXZlIFJlZmVyZW5jZXMnPg0K JlJGQzIzMjg7DQomUkZDNTM0MDsNCiZSRkM0OTcwOw0KJlJGQzIxMTk7DQomUkZDNzQ5MDsNCjw/ cmZjIGluY2x1ZGU9InJlZmVyZW5jZS5JLUQuYWNlZS1vc3BmLXJmYzQ5NzBiaXMiPz4NCjwvcmVm ZXJlbmNlcz4NCjxyZWZlcmVuY2VzIHRpdGxlPSdJbmZvcm1hdGl2ZSBSZWZlcmVuY2VzJz4NCiZS RkM1Mjg2Ow0KJlJGQzUxMzA7DQomUkZDMTk5NzsNCjw/cmZjIGluY2x1ZGU9InJlZmVyZW5jZS5J LUQuaWV0Zi1ydGd3Zy1sZmEtbWFuYWdlYWJpbGl0eSI/Pg0KPD9yZmMgaW5jbHVkZT0icmVmZXJl bmNlLkktRC5pZXRmLXJ0Z3dnLXBvbGljeS1tb2RlbCI/Pg0KPD9yZmMgaW5jbHVkZT0icmVmZXJl bmNlLkktRC5pZXRmLW9zcGYteWFuZyI/Pg0KPC9yZWZlcmVuY2VzPg0KPC9iYWNrPg0KPC9yZmM+ --_002_53C29892C857584299CBF5D05346208A0F678F48OPEXCLILM21corp_-- From nobody Thu Oct 22 07:18:25 2015 Return-Path: X-Original-To: secdir@ietfa.amsl.com Delivered-To: secdir@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id B2B7D1B2CE4; Wed, 14 Oct 2015 02:26:22 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: 4.008 X-Spam-Level: **** X-Spam-Status: No, score=4.008 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, J_CHICKENPOX_35=0.6, J_CHICKENPOX_84=0.6, MANGLED_MEDS=2.3, MANY_SPAN_IN_TEXT=2.399, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001, T_HTML_ATTACH=0.01] autolearn=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id JxTSJkXVBL9y; Wed, 14 Oct 2015 02:26:13 -0700 (PDT) Received: from na01-bn1-obe.outbound.protection.outlook.com (mail-bn1bon0744.outbound.protection.outlook.com [IPv6:2a01:111:f400:fc10::1:744]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 41F3C1B2CF9; Wed, 14 Oct 2015 02:26:12 -0700 (PDT) Received: from BY1PR0501MB1381.namprd05.prod.outlook.com (10.160.107.139) by BY1PR0501MB1383.namprd05.prod.outlook.com (10.160.107.141) with Microsoft SMTP Server (TLS) id 15.1.293.16; Wed, 14 Oct 2015 09:25:53 +0000 Received: from BY1PR0501MB1381.namprd05.prod.outlook.com ([10.160.107.139]) by BY1PR0501MB1381.namprd05.prod.outlook.com ([10.160.107.139]) with mapi id 15.01.0293.007; Wed, 14 Oct 2015 09:25:53 +0000 From: Shraddha Hegde To: "bruno.decraene@orange.com" , Benjamin Kaduk Thread-Topic: secdir review of draft-ietf-ospf-node-admin-tag-05 Thread-Index: AQHRAtRkmhe1qX1HzE+v6FQBX6gc055pfMIAgADOMgCAAFTSgIAAHung Date: Wed, 14 Oct 2015 09:25:52 +0000 Message-ID: References: <27748_1444745556_561D1154_27748_5857_1_53C29892C857584299CBF5D05346208A0F677EDF@OPEXCLILM21.corporate.adroot.infra.ftgroup> <15267_1444808052_561E0574_15267_17748_1_53C29892C857584299CBF5D05346208A0F678F48@OPEXCLILM21.corporate.adroot.infra.ftgroup> In-Reply-To: <15267_1444808052_561E0574_15267_17748_1_53C29892C857584299CBF5D05346208A0F678F48@OPEXCLILM21.corporate.adroot.infra.ftgroup> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: yes X-MS-TNEF-Correlator: authentication-results: spf=none (sender IP is ) smtp.mailfrom=shraddha@juniper.net; x-originating-ip: [116.197.184.10] x-microsoft-exchange-diagnostics: 1; BY1PR0501MB1383; 5:2ThhaQD/T8FaaiSUhtlkbUIscb6CqxOILMzhSbW7Av4WKcIB5Oneag8trmKMJ+EcfHqrKgIuXEx/hmSM/1qw5tK+n1wzjEttjKAstSgpLin/MECRtJempM6etV+iBTDXaLBJ/HzoDTJBd1HDKSJMLw==; 24:oBYNSXqsFimOmFXZhXcDp5y4d89ScBf8BftF4GvjrmUb7BGYMdcBimv2XpN7+O8VFRkXEtKr0cgQpwOGwgwG0h7nm7HMIiTNYZ6U9sEzdFo=; 20:QeJOjno26qoN/inU272VuhG//pnjA7K1WVQIGDKhPl9kxYPQ0hWKPrbwaOutfK4ZUj13cjKMdPeKpqiFKGXSvQ== x-microsoft-antispam: UriScan:;BCL:0;PCL:0;RULEID:;SRVR:BY1PR0501MB1383; x-microsoft-antispam-prvs: x-exchange-antispam-report-test: UriScan:(138986009662008)(240460790083961); x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(601004)(2401047)(5005006)(8121501046)(520078)(3002001); SRVR:BY1PR0501MB1383; BCL:0; PCL:0; RULEID:; SRVR:BY1PR0501MB1383; x-forefront-prvs: 0729050452 x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(6009001)(189002)(199003)(13464003)(377454003)(24454002)(51914003)(110136002)(5003600100002)(2501003)(5007970100001)(86362001)(77096005)(5002640100001)(19580405001)(11100500001)(2950100001)(66066001)(50986999)(64706001)(92566002)(46102003)(76576001)(2900100001)(99936001)(5004730100002)(40100003)(76176999)(81156007)(2171001)(5001960100002)(106356001)(10400500002)(5890100001)(97736004)(5001770100001)(122556002)(99286002)(93886004)(106116001)(5001920100001)(74316001)(101416001)(230783001)(33656002)(102836002)(19580395003)(189998001)(5008740100001)(54356999)(87936001)(105586002); DIR:OUT; SFP:1102; SCL:1; SRVR:BY1PR0501MB1383; H:BY1PR0501MB1381.namprd05.prod.outlook.com; FPR:; SPF:None; PTR:InfoNoRecords; MX:1; A:1; LANG:en; received-spf: None (protection.outlook.com: juniper.net does not designate permitted sender hosts) spamdiagnosticoutput: 1:23 spamdiagnosticmetadata: NSPM Content-Type: multipart/mixed; boundary="_002_BY1PR0501MB1381F6F77C13B89DF71CCE33D53F0BY1PR0501MB1381_" MIME-Version: 1.0 X-OriginatorOrg: juniper.net X-MS-Exchange-CrossTenant-originalarrivaltime: 14 Oct 2015 09:25:53.0041 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: bea78b3c-4cdb-4130-854a-1d193232e5f4 X-MS-Exchange-Transport-CrossTenantHeadersStamped: BY1PR0501MB1383 Archived-At: X-Mailman-Approved-At: Thu, 22 Oct 2015 07:18:02 -0700 Cc: "draft-ietf-ospf-node-admin-tag.all@ietf.org" , "iesg@ietf.org" , "secdir@ietf.org" Subject: Re: [secdir] secdir review of draft-ietf-ospf-node-admin-tag-05 X-BeenThere: secdir@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: Security Area Directorate List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 14 Oct 2015 09:26:22 -0000 --_002_BY1PR0501MB1381F6F77C13B89DF71CCE33D53F0BY1PR0501MB1381_ Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable Thanks Bruno. Attaching the latest diff. Rgds Shraddha -----Original Message----- From: bruno.decraene@orange.com [mailto:bruno.decraene@orange.com]=20 Sent: Wednesday, October 14, 2015 1:04 PM To: Benjamin Kaduk ; Shraddha Hegde Cc: iesg@ietf.org; secdir@ietf.org; draft-ietf-ospf-node-admin-tag.all@ietf= .org Subject: RE: secdir review of draft-ietf-ospf-node-admin-tag-05 Ben, Shraddha, > From: Benjamin Kaduk [mailto:kaduk@MIT.EDU] > Sent: Wednesday, October=20 > 14, 2015 4:31 AM >=20 > On Tue, 13 Oct 2015, bruno.decraene@orange.com wrote: >=20 > > Hi Ben, > > > > > > > > > In section 4.5, I do not see that the constraint "Traffic from A=20 > > > nodes to > > > > > I nodes must not go through R and T nodes" can be satisfied for=20 > > > the > > > > > leftmost pair of A nodes. > > > > > > > > > > > > Thanks for the careful review. > > > > My mistake. I missed the left part of the network. > > > > I see 2 options: > > > > a) add some network topology on the left part > > > > b) remove the leftmost pair of A nodes. >=20 > Option 'a' sounds good to me. ok. Shraddha, please find enclosed the updated "artwork". My xml file is out of sync. You should only copy the figure
=20 -- Bruno > -Ben ___________________________________________________________________________= ______________________________________________ Ce message et ses pieces jointes peuvent contenir des informations confiden= tielles ou privilegiees et ne doivent donc pas etre diffuses, exploites ou = copies sans autorisation. Si vous avez recu ce message par erreur, veuillez= le signaler a l'expediteur et le detruire ainsi que les pieces jointes. Le= s messages electroniques etant susceptibles d'alteration, Orange decline to= ute responsabilite si ce message a ete altere, deforme ou falsifie. Merci. This message and its attachments may contain confidential or privileged inf= ormation that may be protected by law; they should not be distributed, used= or copied without authorisation. If you have received this email in error, please notify the sender and dele= te this message and its attachments. As emails may be altered, Orange is not liable for messages that have been = modified, changed or falsified. Thank you. --_002_BY1PR0501MB1381F6F77C13B89DF71CCE33D53F0BY1PR0501MB1381_ Content-Type: text/html; name="Diff draft-ietf-ospf-node-admin-tag-06.txt - draft-ietf-ospf-node-admin-tag-08.txt.htm" Content-Description: Diff draft-ietf-ospf-node-admin-tag-06.txt - draft-ietf-ospf-node-admin-tag-08.txt.htm Content-Disposition: attachment; filename="Diff draft-ietf-ospf-node-admin-tag-06.txt - draft-ietf-ospf-node-admin-tag-08.txt.htm"; size=165325; creation-date="Wed, 14 Oct 2015 07:22:05 GMT"; modification-date="Wed, 14 Oct 2015 09:24:29 GMT" Content-Transfer-Encoding: base64 PGh0bWw+PGhlYWQ+DQo8bWV0YSBodHRwLWVxdWl2PSJjb250ZW50LXR5cGUiIGNvbnRlbnQ9InRl eHQvaHRtbDsgY2hhcnNldD1VVEYtOCI+PC9oZWFkPjxib2R5PkNvbnRlbnQtVHlwZTogdGV4dC9o dG1sDQoNCg0KIA0KPCEtLSBHZW5lcmF0ZWQgYnkgcmZjZGlmZiAxLjQyOiByZmNkaWZmICAtLT4g DQo8IS0tIDwhRE9DVFlQRSBodG1sIFBVQkxJQyAiLS8vVzNDLy9EVEQgSFRNTCA0LjAxIFRyYW5z aXRpb25hbCIgPiAtLT4NCjwhLS0gU3lzdGVtOiBMaW51eCBnYW1heSAyLjYuMzktMi02ODYtcGFl ICMxIFNNUCBUdWUgSnVsIDUgMDM6NDg6NDkgVVRDIDIwMTEgaTY4NiBHTlUvTGludXggLS0+IA0K PCEtLSBVc2luZyBhd2s6IC91c3IvYmluL2dhd2s6IEdOVSBBd2sgNC4wLjEgLS0+IA0KPCEtLSBV c2luZyBkaWZmOiAvdXNyL2Jpbi9kaWZmOiBkaWZmIChHTlUgZGlmZnV0aWxzKSAzLjMgLS0+IA0K PCEtLSBVc2luZyB3ZGlmZjogL3Vzci9iaW4vd2RpZmY6IHdkaWZmIChHTlUgd2RpZmYpIDEuMi4x IC0tPiANCiANCiANCiAgPG1ldGEgaHR0cC1lcXVpdj0iQ29udGVudC1UeXBlIiBjb250ZW50PSJ0 ZXh0L2h0bWw7IGNoYXJzZXQ9VVRGLTgiPiANCiAgPG1ldGEgaHR0cC1lcXVpdj0iQ29udGVudC1T dHlsZS1UeXBlIiBjb250ZW50PSJ0ZXh0L2NzcyI+IA0KICA8dGl0bGU+RGlmZjogZHJhZnQtaWV0 Zi1vc3BmLW5vZGUtYWRtaW4tdGFnLTA2LnR4dCAtIGRyYWZ0LWlldGYtb3NwZi1ub2RlLWFkbWlu LXRhZy0wOC50eHQ8L3RpdGxlPiANCiAgPHN0eWxlIHR5cGU9InRleHQvY3NzIj4gDQogICAgYm9k eSAgICB7IG1hcmdpbjogMC40ZXg7IG1hcmdpbi1yaWdodDogYXV0bzsgfSANCiAgICB0ciAgICAg IHsgfSANCiAgICB0ZCAgICAgIHsgd2hpdGUtc3BhY2U6IHByZTsgZm9udC1mYW1pbHk6IG1vbm9z cGFjZTsgdmVydGljYWwtYWxpZ246IHRvcDsgZm9udC1zaXplOiAwLjg2ZW07fSANCiAgICB0aCAg ICAgIHsgZm9udC1zaXplOiAwLjg2ZW07IH0gDQogICAgLnNtYWxsICB7IGZvbnQtc2l6ZTogMC42 ZW07IGZvbnQtc3R5bGU6IGl0YWxpYzsgZm9udC1mYW1pbHk6IFZlcmRhbmEsIEhlbHZldGljYSwg c2Fucy1zZXJpZjsgfSANCiAgICAubGVmdCAgIHsgYmFja2dyb3VuZC1jb2xvcjogI0VFRTsgfSAN CiAgICAucmlnaHQgIHsgYmFja2dyb3VuZC1jb2xvcjogI0ZGRjsgfSANCiAgICAuZGlmZiAgIHsg YmFja2dyb3VuZC1jb2xvcjogI0NDRjsgfSANCiAgICAubGJsb2NrIHsgYmFja2dyb3VuZC1jb2xv cjogI0JGQjsgfSANCiAgICAucmJsb2NrIHsgYmFja2dyb3VuZC1jb2xvcjogI0ZGODsgfSANCiAg ICAuaW5zZXJ0IHsgYmFja2dyb3VuZC1jb2xvcjogIzhGRjsgfSANCiAgICAuZGVsZXRlIHsgYmFj a2dyb3VuZC1jb2xvcjogI0FDRjsgfSANCiAgICAudm9pZCAgIHsgYmFja2dyb3VuZC1jb2xvcjog I0ZGQjsgfSANCiAgICAuY29udCAgIHsgYmFja2dyb3VuZC1jb2xvcjogI0VFRTsgfSANCiAgICAu bGluZWJyIHsgYmFja2dyb3VuZC1jb2xvcjogI0FBQTsgfSANCiAgICAubGluZW5vIHsgY29sb3I6 IHJlZDsgYmFja2dyb3VuZC1jb2xvcjogI0ZGRjsgZm9udC1zaXplOiAwLjdlbTsgdGV4dC1hbGln bjogcmlnaHQ7IHBhZGRpbmc6IDAgMnB4OyB9IA0KICAgIC5lbGlwc2lzeyBiYWNrZ3JvdW5kLWNv bG9yOiAjQUFBOyB9IA0KICAgIC5sZWZ0IC5jb250IHsgYmFja2dyb3VuZC1jb2xvcjogI0RERDsg fSANCiAgICAucmlnaHQgLmNvbnQgeyBiYWNrZ3JvdW5kLWNvbG9yOiAjRUVFOyB9IA0KICAgIC5s YmxvY2sgLmNvbnQgeyBiYWNrZ3JvdW5kLWNvbG9yOiAjOUQ5OyB9IA0KICAgIC5yYmxvY2sgLmNv bnQgeyBiYWNrZ3JvdW5kLWNvbG9yOiAjREQ2OyB9IA0KICAgIC5pbnNlcnQgLmNvbnQgeyBiYWNr Z3JvdW5kLWNvbG9yOiAjMEREOyB9IA0KICAgIC5kZWxldGUgLmNvbnQgeyBiYWNrZ3JvdW5kLWNv bG9yOiAjOEFEOyB9IA0KICAgIC5zdGF0cywgLnN0YXRzIHRkLCAuc3RhdHMgdGggeyBiYWNrZ3Jv dW5kLWNvbG9yOiAjRUVFOyBwYWRkaW5nOiAycHggMDsgfSANCiAgPC9zdHlsZT4gDQogDQogDQog IDx0YWJsZSBib3JkZXI9IjAiIGNlbGxwYWRkaW5nPSIwIiBjZWxsc3BhY2luZz0iMCI+IA0KICA8 dGJvZHk+PHRyIGJnY29sb3I9Im9yYW5nZSI+PHRoPjwvdGg+PHRoPjxhIGhyZWY9Imh0dHBzOi8v dG9vbHMuaWV0Zi5vcmcvcmZjZGlmZj91cmwyPWRyYWZ0LWlldGYtb3NwZi1ub2RlLWFkbWluLXRh Zy0wNi50eHQiIHN0eWxlPSJjb2xvcjojMDA4OyB0ZXh0LWRlY29yYXRpb246bm9uZTsiPiZsdDs8 L2E+Jm5ic3A7PGEgaHJlZj0iaHR0cHM6Ly90b29scy5pZXRmLm9yZy9odG1sL2RyYWZ0LWlldGYt b3NwZi1ub2RlLWFkbWluLXRhZy0wNi50eHQiIHN0eWxlPSJjb2xvcjojMDA4Ij5kcmFmdC1pZXRm LW9zcGYtbm9kZS1hZG1pbi10YWctMDYudHh0PC9hPiZuYnNwOzwvdGg+PHRoPiA8L3RoPjx0aD4m bmJzcDs8YSBocmVmPSJodHRwczovL3Rvb2xzLmlldGYub3JnL2h0bWwvZHJhZnQtaWV0Zi1vc3Bm LW5vZGUtYWRtaW4tdGFnLTA4LnR4dCIgc3R5bGU9ImNvbG9yOiMwMDgiPmRyYWZ0LWlldGYtb3Nw Zi1ub2RlLWFkbWluLXRhZy0wOC50eHQ8L2E+Jm5ic3A7PGEgaHJlZj0iaHR0cHM6Ly90b29scy5p ZXRmLm9yZy9yZmNkaWZmP3VybDE9ZHJhZnQtaWV0Zi1vc3BmLW5vZGUtYWRtaW4tdGFnLTA4LnR4 dCIgc3R5bGU9ImNvbG9yOiMwMDg7IHRleHQtZGVjb3JhdGlvbjpub25lOyI+Jmd0OzwvYT48L3Ro Pjx0aD48L3RoPjwvdHI+IA0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRv cCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQi PjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8 dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ T3BlbiBTaG9ydGVzdCBQYXRoIEZpcnN0IElHUCAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgIFMuIEhlZ2RlPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+T3BlbiBTaG9y dGVzdCBQYXRoIEZpcnN0IElHUCAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIFMu IEhlZ2RlPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAg ICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJs ZWZ0Ij5JbnRlcm5ldC1EcmFmdCAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIEp1 bmlwZXIgTmV0d29ya3MsIEluYy48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij5JbnRl cm5ldC1EcmFmdCAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIEp1bmlwZXIgTmV0 d29ya3MsIEluYy48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3Ry Pg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xh c3M9ImxlZnQiPkludGVuZGVkIHN0YXR1czogU3RhbmRhcmRzIFRyYWNrICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgIFIuIFNoYWtpcjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQi PkludGVuZGVkIHN0YXR1czogU3RhbmRhcmRzIFRyYWNrICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgIFIuIFNoYWtpcjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3Rk PjwvdHI+DQogICAgICA8dHI+PHRkPjxhIG5hbWU9ImRpZmYwMDAxIj48L2E+PC90ZD48L3RyPg0K ICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9 ImxibG9jayI+RXhwaXJlczogPHNwYW4gY2xhc3M9ImRlbGV0ZSI+TWFyY2ggMzE8L3NwYW4+LCAy MDE2ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgSW5kaXZpZHVhbDwvdGQ+ PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj5FeHBpcmVzOiA8c3BhbiBjbGFzcz0iaW5zZXJ0 Ij5BcHJpbCAxNjwvc3Bhbj4sIDIwMTYgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICBJbmRpdmlkdWFsPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+ PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRk IGNsYXNzPSJsZWZ0Ij4gICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgIEEuIFNtaXJub3Y8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJp Z2h0Ij4gICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgIEEuIFNtaXJub3Y8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+ PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90 ZD48dGQgY2xhc3M9ImxlZnQiPiAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgQ2lzY28gU3lzdGVtcywgSW5jLjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFz cz0icmlnaHQiPiAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgQ2lzY28gU3lzdGVtcywgSW5jLjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0i dG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9w Ij48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIFouIExpPC90ZD48dGQ+IDwvdGQ+PHRk IGNsYXNzPSJyaWdodCI+ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgIFouIExpPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFs aWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWdu PSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgIEh1YXdlaSBUZWNobm9sb2dpZXM8L3RkPjx0ZD4gPC90 ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgIEh1YXdlaSBUZWNobm9sb2dpZXM8L3RkPjx0ZCBjbGFzcz0ibGluZW5v IiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2 YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICBCLiBEZWNyYWVuZTwvdGQ+PHRk PiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICBCLiBEZWNyYWVuZTwvdGQ+PHRkIGNsYXNzPSJs aW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5l bm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgT3JhbmdlPC90 ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgT3JhbmdlPC90ZD48dGQgY2xh c3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQ+PGEgbmFt ZT0iZGlmZjAwMDIiPjwvYT48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8i IHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj4gICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICA8c3BhbiBjbGFzcz0iZGVsZXRlIj5T ZXB0ZW1iZXIgMjg8L3NwYW4+LCAyMDE1PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2si PiAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIDxz cGFuIGNsYXNzPSJpbnNlcnQiPiAgT2N0b2JlciAxNDwvc3Bhbj4sIDIwMTU8L3RkPjx0ZCBjbGFz cz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0i bGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPjwvdGQ+PHRkPiA8L3Rk Pjx0ZCBjbGFzcz0icmlnaHQiPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48 L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3Rk Pjx0ZCBjbGFzcz0ibGVmdCI+ICAgICAgICAgICAgQWR2ZXJ0aXNpbmcgcGVyLW5vZGUgYWRtaW5p c3RyYXRpdmUgdGFncyBpbiBPU1BGPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAg ICAgICAgICAgQWR2ZXJ0aXNpbmcgcGVyLW5vZGUgYWRtaW5pc3RyYXRpdmUgdGFncyBpbiBPU1BG PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0 cj48dGQ+PGEgbmFtZT0iZGlmZjAwMDMiPjwvYT48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNs YXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj4gICAgICAg ICAgICAgICAgICAgZHJhZnQtaWV0Zi1vc3BmLW5vZGUtYWRtaW4tdGFnLTA8c3BhbiBjbGFzcz0i ZGVsZXRlIj42PC9zcGFuPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj4gICAgICAg ICAgICAgICAgICAgZHJhZnQtaWV0Zi1vc3BmLW5vZGUtYWRtaW4tdGFnLTA8c3BhbiBjbGFzcz0i aW5zZXJ0Ij44PC9zcGFuPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3Rk PjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0 ZCBjbGFzcz0ibGVmdCI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+PC90ZD48dGQg Y2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xh c3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij5BYnN0cmFjdDwv dGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPkFic3RyYWN0PC90ZD48dGQgY2xhc3M9Imxp bmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVu byIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij48L3RkPjx0ZD4gPC90ZD48dGQg Y2xhc3M9InJpZ2h0Ij48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48 L3RyPg0KICAgICAgPHRyPjx0ZD48YSBuYW1lPSJkaWZmMDAwNCI+PC9hPjwvdGQ+PC90cj4NCiAg ICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJs YmxvY2siPiAgIFRoaXMgZG9jdW1lbnQgZGVzY3JpYmVzIGFuIGV4dGVuc2lvbiB0byBPU1BGIHBy b3RvY29sIHRvIGFkZCBhbjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj4gICBUaGlz IGRvY3VtZW50IGRlc2NyaWJlcyBhbiBleHRlbnNpb24gdG8gPHNwYW4gY2xhc3M9Imluc2VydCI+ dGhlIDwvc3Bhbj5PU1BGIHByb3RvY29sIHRvIGFkZCBhbjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8i IHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZh bGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgb3B0aW9uYWwgb3BlcmF0aW9uYWwg Y2FwYWJpbGl0eSwgdGhhdCBhbGxvd3MgdGFnZ2luZyBhbmQgZ3JvdXBpbmcgb2Y8L3RkPjx0ZD4g PC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBvcHRpb25hbCBvcGVyYXRpb25hbCBjYXBhYmlsaXR5 LCB0aGF0IGFsbG93cyB0YWdnaW5nIGFuZCBncm91cGluZyBvZjwvdGQ+PHRkIGNsYXNzPSJsaW5l bm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8i IHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgdGhlIG5vZGVzIGluIGFuIE9T UEYgZG9tYWluLiAgVGhpcyBhbGxvd3Mgc2ltcGxpZmljYXRpb24sIGVhc2Ugb2Y8L3RkPjx0ZD4g PC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICB0aGUgbm9kZXMgaW4gYW4gT1NQRiBkb21haW4uICBU aGlzIGFsbG93cyBzaW1wbGlmaWNhdGlvbiwgZWFzZSBvZjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8i IHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZh bGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgbWFuYWdlbWVudCBhbmQgY29udHJv bCBvdmVyIHJvdXRlIGFuZCBwYXRoIHNlbGVjdGlvbiBiYXNlZCBvbjwvdGQ+PHRkPiA8L3RkPjx0 ZCBjbGFzcz0icmlnaHQiPiAgIG1hbmFnZW1lbnQgYW5kIGNvbnRyb2wgb3ZlciByb3V0ZSBhbmQg cGF0aCBzZWxlY3Rpb24gYmFzZWQgb248L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRv cCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZD48YSBuYW1lPSJkaWZmMDAwNSI+PC9hPjwvdGQ+ PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRk IGNsYXNzPSJsYmxvY2siPiAgIGNvbmZpZ3VyZWQgcG9saWNpZXMuICBUaGlzIGRvY3VtZW50IGRl c2NyaWJlcyBhbiBleHRlbnNpb24gdG8gT1NQRjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJs b2NrIj4gICBjb25maWd1cmVkIHBvbGljaWVzLiAgVGhpcyBkb2N1bWVudCBkZXNjcmliZXMgYW4g ZXh0ZW5zaW9uIHRvIDxzcGFuIGNsYXNzPSJpbnNlcnQiPnRoZTwvc3Bhbj48L3RkPjx0ZCBjbGFz cz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0i bGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+ICAgcHJvdG9jb2wg dG8gYWR2ZXJ0aXNlIHBlci1ub2RlIGFkbWluaXN0cmF0aXZlIHRhZ3MuICBUaGUgPHNwYW4gY2xh c3M9ImRlbGV0ZSI+bm9kZS10YWdzPC9zcGFuPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJs b2NrIj4gICBPU1BGIHByb3RvY29sIHRvIGFkdmVydGlzZSBwZXItbm9kZSBhZG1pbmlzdHJhdGl2 ZSB0YWdzLiAgVGhlIDxzcGFuIGNsYXNzPSJpbnNlcnQiPm5vZGUtPC9zcGFuPjwvdGQ+PHRkIGNs YXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNz PSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj4gICBjYW4gYmUg dXNlZCB0byBleHByZXNzIGFuZCBhcHBseSBsb2NhbGx5LWRlZmluZWQgbmV0d29yayBwb2xpY2ll czwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48c3BhbiBjbGFzcz0iaW5zZXJ0Ij4g ICB0YWdzPC9zcGFuPiBjYW4gYmUgdXNlZCB0byBleHByZXNzIGFuZCBhcHBseSBsb2NhbGx5LWRl ZmluZWQgbmV0d29yazwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwv dHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBj bGFzcz0ibGJsb2NrIj4gICB3aGljaCBpcyBhIHZlcnkgdXNlZnVsIG9wZXJhdGlvbmFsIGNhcGFi aWxpdHkuICBOb2RlIHRhZ3MgbWF5IGJlIHVzZWQ8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJi bG9jayI+ICAgcG9saWNpZXMgd2hpY2ggaXMgYSB2ZXJ5IHVzZWZ1bCBvcGVyYXRpb25hbCBjYXBh YmlsaXR5LiAgTm9kZSB0YWdzPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwv dGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+ PHRkIGNsYXNzPSJsYmxvY2siPiAgIGVpdGhlciBieSBPU1BGIGl0c2VsZiBvciBieSBvdGhlciBh cHBsaWNhdGlvbnMgY29uc3VtaW5nIGluZm9ybWF0aW9uPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNz PSJyYmxvY2siPiAgIG1heSBiZSB1c2VkIGVpdGhlciBieSBPU1BGIGl0c2VsZiBvciBieSBvdGhl ciBhcHBsaWNhdGlvbnMgY29uc3VtaW5nPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0 b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3Ai PjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPiAgIHByb3BhZ2F0ZWQgdmlhIE9TUEYuPC90ZD48dGQ+ IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPiAgIGluZm9ybWF0aW9uIHByb3BhZ2F0ZWQgdmlhIE9T UEYuPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAg IDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0 Ij48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij48L3RkPjx0ZCBjbGFzcz0ibGluZW5v IiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2 YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIFRoaXMgZG9jdW1lbnQgZGVzY3Jp YmVzIHRoZSBwcm90b2NvbCBleHRlbnNpb25zIHRvIGRpc3NlbWluYXRlIHBlci08L3RkPjx0ZD4g PC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBUaGlzIGRvY3VtZW50IGRlc2NyaWJlcyB0aGUgcHJv dG9jb2wgZXh0ZW5zaW9ucyB0byBkaXNzZW1pbmF0ZSBwZXItPC90ZD48dGQgY2xhc3M9ImxpbmVu byIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQ+PGEgbmFtZT0iZGlmZjAw MDYiPjwvYT48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0i dG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj4gICBub2RlIGFkbWluaXN0cmF0aXZlPHNwYW4g Y2xhc3M9ImRlbGV0ZSI+LTwvc3Bhbj50YWdzIHRvIHRoZSBPU1BGdjIgYW5kIE9TUEZ2MyBwcm90 b2NvbC4gIEl0PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPiAgIG5vZGUgYWRtaW5p c3RyYXRpdmU8c3BhbiBjbGFzcz0iaW5zZXJ0Ij4gPC9zcGFuPnRhZ3MgdG8gdGhlIE9TUEZ2MiBh bmQgT1NQRnYzIHByb3RvY29sLiAgSXQ8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRv cCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+ PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIHByb3ZpZGVzIGV4YW1wbGUgdXNlIGNhc2VzIG9mIGFk bWluaXN0cmF0aXZlIG5vZGUgdGFncy48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4g ICBwcm92aWRlcyBleGFtcGxlIHVzZSBjYXNlcyBvZiBhZG1pbmlzdHJhdGl2ZSBub2RlIHRhZ3Mu PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0 cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij48 L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2 YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxp Z249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPlJlcXVpcmVtZW50cyBMYW5ndWFnZTwvdGQ+ PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPlJlcXVpcmVtZW50cyBMYW5ndWFnZTwvdGQ+PHRk IGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNs YXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+PC90ZD48dGQ+ IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0 b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3Ai PjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBUaGUga2V5IHdvcmRzICJNVVNUIiwgIk1VU1QgTk9U IiwgIlJFUVVJUkVEIiwgIlNIQUxMIiwgIlNIQUxMIE5PVCIsPC90ZD48dGQ+IDwvdGQ+PHRkIGNs YXNzPSJyaWdodCI+ICAgVGhlIGtleSB3b3JkcyAiTVVTVCIsICJNVVNUIE5PVCIsICJSRVFVSVJF RCIsICJTSEFMTCIsICJTSEFMTCBOT1QiLDwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0i dG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9w Ij48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgIlNIT1VMRCIsICJTSE9VTEQgTk9UIiwgIlJFQ09N TUVOREVEIiwgIk1BWSIsIGFuZCAiT1BUSU9OQUwiIGluIHRoaXM8L3RkPjx0ZD4gPC90ZD48dGQg Y2xhc3M9InJpZ2h0Ij4gICAiU0hPVUxEIiwgIlNIT1VMRCBOT1QiLCAiUkVDT01NRU5ERUQiLCAi TUFZIiwgYW5kICJPUFRJT05BTCIgaW4gdGhpczwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGln bj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0i dG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgZG9jdW1lbnQgYXJlIHRvIGJlIGludGVycHJl dGVkIGFzIGRlc2NyaWJlZCBpbiBSRkMgMjExOSBbUkZDMjExOV0uPC90ZD48dGQ+IDwvdGQ+PHRk IGNsYXNzPSJyaWdodCI+ICAgZG9jdW1lbnQgYXJlIHRvIGJlIGludGVycHJldGVkIGFzIGRlc2Ny aWJlZCBpbiBSRkMgMjExOSBbUkZDMjExOV0uPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWdu PSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0 b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0 Ij48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAg PHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQi PlN0YXR1cyBvZiBUaGlzIE1lbW88L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij5TdGF0 dXMgb2YgVGhpcyBNZW1vPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+ PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRk IGNsYXNzPSJsZWZ0Ij48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij48L3RkPjx0ZCBj bGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFz cz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNz PSJyaWdodCI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPg0KICAgICAgPHRyIGJn Y29sb3I9ImdyYXkiPjx0ZD48L3RkPjx0aD48YSBuYW1lPSJwYXJ0LWwyIj48c21hbGw+c2tpcHBp bmcgdG8gY2hhbmdlIGF0PC9zbWFsbD48ZW0+IHBhZ2UgMiwgbGluZSAxMDwvZW0+PC9hPjwvdGg+ PHRoPiA8L3RoPjx0aD48YSBuYW1lPSJwYXJ0LXIyIj48c21hbGw+c2tpcHBpbmcgdG8gY2hhbmdl IGF0PC9zbWFsbD48ZW0+IHBhZ2UgMiwgbGluZSAxMDwvZW0+PC9hPjwvdGg+PHRkPjwvdGQ+PC90 cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNs YXNzPSJsZWZ0Ij4gICBJbnRlcm5ldC1EcmFmdHMgYXJlIHdvcmtpbmcgZG9jdW1lbnRzIG9mIHRo ZSBJbnRlcm5ldCBFbmdpbmVlcmluZzwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAg IEludGVybmV0LURyYWZ0cyBhcmUgd29ya2luZyBkb2N1bWVudHMgb2YgdGhlIEludGVybmV0IEVu Z2luZWVyaW5nPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4N CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNz PSJsZWZ0Ij4gICBUYXNrIEZvcmNlIChJRVRGKS4gIE5vdGUgdGhhdCBvdGhlciBncm91cHMgbWF5 IGFsc28gZGlzdHJpYnV0ZTwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIFRhc2sg Rm9yY2UgKElFVEYpLiAgTm90ZSB0aGF0IG90aGVyIGdyb3VwcyBtYXkgYWxzbyBkaXN0cmlidXRl PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0 cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4g ICB3b3JraW5nIGRvY3VtZW50cyBhcyBJbnRlcm5ldC1EcmFmdHMuICBUaGUgbGlzdCBvZiBjdXJy ZW50IEludGVybmV0LTwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIHdvcmtpbmcg ZG9jdW1lbnRzIGFzIEludGVybmV0LURyYWZ0cy4gIFRoZSBsaXN0IG9mIGN1cnJlbnQgSW50ZXJu ZXQtPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAg IDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0 Ij4gICBEcmFmdHMgaXMgYXQgaHR0cDovL2RhdGF0cmFja2VyLmlldGYub3JnL2RyYWZ0cy9jdXJy ZW50Ly48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBEcmFmdHMgaXMgYXQgaHR0 cDovL2RhdGF0cmFja2VyLmlldGYub3JnL2RyYWZ0cy9jdXJyZW50Ly48L3RkPjx0ZCBjbGFzcz0i bGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGlu ZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPjwvdGQ+PHRkPiA8L3RkPjx0 ZCBjbGFzcz0icmlnaHQiPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3Rk PjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0 ZCBjbGFzcz0ibGVmdCI+ICAgSW50ZXJuZXQtRHJhZnRzIGFyZSBkcmFmdCBkb2N1bWVudHMgdmFs aWQgZm9yIGEgbWF4aW11bSBvZiBzaXggbW9udGhzPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJy aWdodCI+ICAgSW50ZXJuZXQtRHJhZnRzIGFyZSBkcmFmdCBkb2N1bWVudHMgdmFsaWQgZm9yIGEg bWF4aW11bSBvZiBzaXggbW9udGhzPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3Ai PjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwv dGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBhbmQgbWF5IGJlIHVwZGF0ZWQsIHJlcGxhY2VkLCBvciBv YnNvbGV0ZWQgYnkgb3RoZXIgZG9jdW1lbnRzIGF0IGFueTwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFz cz0icmlnaHQiPiAgIGFuZCBtYXkgYmUgdXBkYXRlZCwgcmVwbGFjZWQsIG9yIG9ic29sZXRlZCBi eSBvdGhlciBkb2N1bWVudHMgYXQgYW55PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0 b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3Ai PjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICB0aW1lLiAgSXQgaXMgaW5hcHByb3ByaWF0ZSB0byB1 c2UgSW50ZXJuZXQtRHJhZnRzIGFzIHJlZmVyZW5jZTwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0i cmlnaHQiPiAgIHRpbWUuICBJdCBpcyBpbmFwcHJvcHJpYXRlIHRvIHVzZSBJbnRlcm5ldC1EcmFm dHMgYXMgcmVmZXJlbmNlPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+ PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRk IGNsYXNzPSJsZWZ0Ij4gICBtYXRlcmlhbCBvciB0byBjaXRlIHRoZW0gb3RoZXIgdGhhbiBhcyAi d29yayBpbiBwcm9ncmVzcy4iPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgbWF0 ZXJpYWwgb3IgdG8gY2l0ZSB0aGVtIG90aGVyIHRoYW4gYXMgIndvcmsgaW4gcHJvZ3Jlc3MuIjwv dGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+ PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+PC90 ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFs aWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQ+PGEgbmFtZT0iZGlmZjAwMDciPjwv YT48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48 L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj4gICBUaGlzIEludGVybmV0LURyYWZ0IHdpbGwgZXhwaXJl IG9uIDxzcGFuIGNsYXNzPSJkZWxldGUiPk1hcmNoIDMxPC9zcGFuPiwgMjAxNi48L3RkPjx0ZD4g PC90ZD48dGQgY2xhc3M9InJibG9jayI+ICAgVGhpcyBJbnRlcm5ldC1EcmFmdCB3aWxsIGV4cGly ZSBvbiA8c3BhbiBjbGFzcz0iaW5zZXJ0Ij5BcHJpbCAxNjwvc3Bhbj4sIDIwMTYuPC90ZD48dGQg Y2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xh c3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij48L3RkPjx0ZD4g PC90ZD48dGQgY2xhc3M9InJpZ2h0Ij48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRv cCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+ PC90ZD48dGQgY2xhc3M9ImxlZnQiPkNvcHlyaWdodCBOb3RpY2U8L3RkPjx0ZD4gPC90ZD48dGQg Y2xhc3M9InJpZ2h0Ij5Db3B5cmlnaHQgTm90aWNlPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFs aWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWdu PSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJp Z2h0Ij48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAg ICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9Imxl ZnQiPiAgIENvcHlyaWdodCAoYykgMjAxNSBJRVRGIFRydXN0IGFuZCB0aGUgcGVyc29ucyBpZGVu dGlmaWVkIGFzIHRoZTwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIENvcHlyaWdo dCAoYykgMjAxNSBJRVRGIFRydXN0IGFuZCB0aGUgcGVyc29ucyBpZGVudGlmaWVkIGFzIHRoZTwv dGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+ PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAg ZG9jdW1lbnQgYXV0aG9ycy4gIEFsbCByaWdodHMgcmVzZXJ2ZWQuPC90ZD48dGQ+IDwvdGQ+PHRk IGNsYXNzPSJyaWdodCI+ICAgZG9jdW1lbnQgYXV0aG9ycy4gIEFsbCByaWdodHMgcmVzZXJ2ZWQu PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0 cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij48 L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2 YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxp Z249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIFRoaXMgZG9jdW1lbnQgaXMgc3ViamVj dCB0byBCQ1AgNzggYW5kIHRoZSBJRVRGIFRydXN0J3MgTGVnYWw8L3RkPjx0ZD4gPC90ZD48dGQg Y2xhc3M9InJpZ2h0Ij4gICBUaGlzIGRvY3VtZW50IGlzIHN1YmplY3QgdG8gQkNQIDc4IGFuZCB0 aGUgSUVURiBUcnVzdCdzIExlZ2FsPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3Ai PjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwv dGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBQcm92aXNpb25zIFJlbGF0aW5nIHRvIElFVEYgRG9jdW1l bnRzPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgUHJvdmlzaW9ucyBSZWxhdGlu ZyB0byBJRVRGIERvY3VtZW50czwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48 L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3Rk Pjx0ZCBjbGFzcz0ibGVmdCI+ICAgKGh0dHA6Ly90cnVzdGVlLmlldGYub3JnL2xpY2Vuc2UtaW5m bykgaW4gZWZmZWN0IG9uIHRoZSBkYXRlIG9mPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdo dCI+ICAgKGh0dHA6Ly90cnVzdGVlLmlldGYub3JnL2xpY2Vuc2UtaW5mbykgaW4gZWZmZWN0IG9u IHRoZSBkYXRlIG9mPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90 cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNs YXNzPSJsZWZ0Ij4gICBwdWJsaWNhdGlvbiBvZiB0aGlzIGRvY3VtZW50LiAgUGxlYXNlIHJldmll dyB0aGVzZSBkb2N1bWVudHM8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBwdWJs aWNhdGlvbiBvZiB0aGlzIGRvY3VtZW50LiAgUGxlYXNlIHJldmlldyB0aGVzZSBkb2N1bWVudHM8 L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRy Pjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+PC90ZD48dGQ+IDwvdGQ+ PHRkIGNsYXNzPSJyaWdodCI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPg0KICAg ICAgPHRyIGJnY29sb3I9ImdyYXkiPjx0ZD48L3RkPjx0aD48YSBuYW1lPSJwYXJ0LWwzIj48c21h bGw+c2tpcHBpbmcgdG8gY2hhbmdlIGF0PC9zbWFsbD48ZW0+IHBhZ2UgMiwgbGluZSAzNDwvZW0+ PC9hPjwvdGg+PHRoPiA8L3RoPjx0aD48YSBuYW1lPSJwYXJ0LXIzIj48c21hbGw+c2tpcHBpbmcg dG8gY2hhbmdlIGF0PC9zbWFsbD48ZW0+IHBhZ2UgMiwgbGluZSAzNDwvZW0+PC9hPjwvdGg+PHRk PjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwv dGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICB0aGUgVHJ1c3QgTGVnYWwgUHJvdmlzaW9ucyBhbmQgYXJl IHByb3ZpZGVkIHdpdGhvdXQgd2FycmFudHkgYXM8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJp Z2h0Ij4gICB0aGUgVHJ1c3QgTGVnYWwgUHJvdmlzaW9ucyBhbmQgYXJlIHByb3ZpZGVkIHdpdGhv dXQgd2FycmFudHkgYXM8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48 L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQg Y2xhc3M9ImxlZnQiPiAgIGRlc2NyaWJlZCBpbiB0aGUgU2ltcGxpZmllZCBCU0QgTGljZW5zZS48 L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBkZXNjcmliZWQgaW4gdGhlIFNpbXBs aWZpZWQgQlNEIExpY2Vuc2UuPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwv dGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+ PHRkIGNsYXNzPSJsZWZ0Ij48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij48L3RkPjx0 ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBj bGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPlRhYmxlIG9m IENvbnRlbnRzPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+VGFibGUgb2YgQ29udGVu dHM8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAg PHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQi PjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8i IHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZh bGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgMS4gIEludHJvZHVjdGlvbiAgLiAu IC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gICAzPC90ZD48dGQ+ IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgMS4gIEludHJvZHVjdGlvbiAgLiAuIC4gLiAuIC4g LiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gICAzPC90ZD48dGQgY2xhc3M9Imxp bmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVu byIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICAyLiAgQWRtaW5pc3RyYXRp dmUgVGFnIFRMViAgLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAgIDM8L3Rk Pjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICAyLiAgQWRtaW5pc3RyYXRpdmUgVGFnIFRM ViAgLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAgIDM8L3RkPjx0ZCBjbGFz cz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0i bGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIDMuICBPU1BGIHBl ci1ub2RlIGFkbWluaXN0cmF0aXZlIHRhZyBUTFYgIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuICAg MzwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIDMuICBPU1BGIHBlci1ub2RlIGFk bWluaXN0cmF0aXZlIHRhZyBUTFYgIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuICAgMzwvdGQ+PHRk IGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNs YXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgICAzLjEu ICBUTFYgZm9ybWF0ICAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAu IC4gICAzPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgICAzLjEuICBUTFYgZm9y bWF0ICAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gICAzPC90 ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48 dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICAg IDMuMi4gIEVsZW1lbnRzIG9mIHByb2NlZHVyZSAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4g LiAuIC4gLiAgIDQ8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICAgIDMuMi4gIEVs ZW1lbnRzIG9mIHByb2NlZHVyZSAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAg IDQ8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAg PHRyPjx0ZD48YSBuYW1lPSJkaWZmMDAwOCI+PC9hPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQg Y2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPiAgIDQu ICBBcHBsaWNhdGlvbnMgIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAu IC4gLiAuICAgPHNwYW4gY2xhc3M9ImRlbGV0ZSI+NTwvc3Bhbj48L3RkPjx0ZD4gPC90ZD48dGQg Y2xhc3M9InJibG9jayI+ICAgICAgIDxzcGFuIGNsYXNzPSJpbnNlcnQiPjMuMi4xLiAgSW50ZXJw cmV0YXRpb24gb2YgTm9kZSBBZG1pbmlzdHJhdGl2ZSBUYWdzICAuIC4gLiAuIC4gICA0PC9zcGFu PjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8 dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2Nr Ij48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+PHNwYW4gY2xhc3M9Imluc2VydCI+ ICAgICAgIDMuMi4yLiAgVXNlIG9mIE5vZGUgQWRtaW5pc3RyYXRpdmUgVGFncyAuIC4gLiAuIC4g LiAuIC4gLiAuIC4gICA1PC9zcGFuPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9w Ij48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48 L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+ PHNwYW4gY2xhc3M9Imluc2VydCI+ICAgICAgIDMuMi4zLiAgUHJvY2Vzc2luZyBOb2RlIEFkbWlu aXN0cmF0aXZlIFRhZyBjaGFuZ2VzICAuIC4gLiAuIC4gICA2PC9zcGFuPjwvdGQ+PHRkIGNsYXNz PSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJs aW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48L3RkPjx0ZD4gPC90 ZD48dGQgY2xhc3M9InJibG9jayI+ICAgNC4gIEFwcGxpY2F0aW9ucyAgLiAuIC4gLiAuIC4gLiAu IC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gICA8c3BhbiBjbGFzcz0iaW5zZXJ0Ij42 PC9zcGFuPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQog ICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0i bGVmdCI+ICAgICA0LjEuICBTZXJ2aWNlIGF1dG8tZGlzY292ZXJ5ICAuIC4gLiAuIC4gLiAuIC4g LiAuIC4gLiAuIC4gLiAuIC4gICA2PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAg ICA0LjEuICBTZXJ2aWNlIGF1dG8tZGlzY292ZXJ5ICAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAu IC4gLiAuIC4gICA2PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90 cj4NCiAgICAgIDx0cj48dGQ+PGEgbmFtZT0iZGlmZjAwMDkiPjwvYT48L3RkPjwvdHI+DQogICAg ICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJs b2NrIj4gICAgIDQuMi4gIEZhc3QtUmUtcm91dGluZyBwb2xpY3kgIC4gLiAuIC4gLiAuIC4gLiAu IC4gLiAuIC4gLiAuIC4gLiAgIDxzcGFuIGNsYXNzPSJkZWxldGUiPjY8L3NwYW4+PC90ZD48dGQ+ IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPiAgICAgNC4yLiAgRmFzdC1SZS1yb3V0aW5nIHBvbGlj eSAgLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuICAgPHNwYW4gY2xhc3M9Imluc2Vy dCI+Nzwvc3Bhbj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3Ry Pg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xh c3M9ImxibG9jayI+ICAgICA0LjMuICBDb250cm9sbGluZyBSZW1vdGUgTEZBIHR1bm5lbCB0ZXJt aW5hdGlvbiAuIC4gLiAuIC4gLiAuIC4gICA8c3BhbiBjbGFzcz0iZGVsZXRlIj43PC9zcGFuPjwv dGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj4gICAgIDQuMy4gIENvbnRyb2xsaW5nIFJl bW90ZSBMRkEgdHVubmVsIHRlcm1pbmF0aW9uIC4gLiAuIC4gLiAuIC4gLiAgIDxzcGFuIGNsYXNz PSJpbnNlcnQiPjg8L3NwYW4+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwv dGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+ PHRkIGNsYXNzPSJsYmxvY2siPiAgICAgNC40LiAgTW9iaWxlIGJhY2staGF1bCBuZXR3b3JrIHNl cnZpY2UgZGVwbG95bWVudCAuIC4gLiAuIC4gLiAuICAgPHNwYW4gY2xhc3M9ImRlbGV0ZSI+Nzwv c3Bhbj48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+ICAgICA0LjQuICBNb2JpbGUg YmFjay1oYXVsIG5ldHdvcmsgc2VydmljZSBkZXBsb3ltZW50IC4gLiAuIC4gLiAuIC4gICA8c3Bh biBjbGFzcz0iaW5zZXJ0Ij44PC9zcGFuPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0i dG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9w Ij48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgICA0LjUuICBFeHBsaWNpdCByb3V0aW5nIHBvbGlj eSAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gICA5PC90ZD48dGQ+IDwvdGQ+PHRk IGNsYXNzPSJyaWdodCI+ICAgICA0LjUuICBFeHBsaWNpdCByb3V0aW5nIHBvbGljeSAuIC4gLiAu IC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gICA5PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFs aWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQ+PGEgbmFtZT0iZGlmZjAwMTAiPjwv YT48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48 L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj4gICA1LiAgU2VjdXJpdHkgQ29uc2lkZXJhdGlvbnMgLiAu IC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAgPHNwYW4gY2xhc3M9ImRlbGV0ZSI+ MTA8L3NwYW4+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPiAgIDUuICBTZWN1cml0 eSBDb25zaWRlcmF0aW9ucyAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuICA8 c3BhbiBjbGFzcz0iaW5zZXJ0Ij4xMTwvc3Bhbj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxp Z249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249 InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+ICAgNi4gIElBTkEgQ29uc2lkZXJhdGlvbnMg LiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gIDxzcGFuIGNsYXNzPSJk ZWxldGUiPjEwPC9zcGFuPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj4gICA2LiAg PHNwYW4gY2xhc3M9Imluc2VydCI+T3BlcmF0aW9uYWwgQ29uc2lkZXJhdGlvbnMgIC4gLiAuIC4g LiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAgMTE8L3NwYW4+PC90ZD48dGQgY2xhc3M9ImxpbmVu byIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIg dmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPjxzcGFuIGNsYXNzPSJkZWxldGUi PiAgIDcuPC9zcGFuPiAgQ29udHJpYnV0b3JzICAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4g LiAuIC4gLiAuIC4gLiAuIC4gLiAgPHNwYW4gY2xhc3M9ImRlbGV0ZSI+MTA8L3NwYW4+PC90ZD48 dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPjxzcGFuIGNsYXNzPSJpbnNlcnQiPiAgIDcuICBN YW5hZ2VhYmlsaXR5IENvbnNpZGVyYXRpb25zICAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4g LiAuICAxMjwvc3Bhbj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48 L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQg Y2xhc3M9ImxibG9jayI+PHNwYW4gY2xhc3M9ImRlbGV0ZSI+ICAgOC48L3NwYW4+ICBBY2tub3ds ZWRnZW1lbnRzICAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuICA8 c3BhbiBjbGFzcz0iZGVsZXRlIj4xMDwvc3Bhbj48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJi bG9jayI+PHNwYW4gY2xhc3M9Imluc2VydCI+ICAgOC48L3NwYW4+ICBJQU5BIENvbnNpZGVyYXRp b25zIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuICA8c3BhbiBjbGFz cz0iaW5zZXJ0Ij4xMjwvc3Bhbj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+ PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90 ZD48dGQgY2xhc3M9ImxibG9jayI+PHNwYW4gY2xhc3M9ImRlbGV0ZSI+ICAgOS48L3NwYW4+ICBS ZWZlcmVuY2VzICAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4g LiAuICA8c3BhbiBjbGFzcz0iZGVsZXRlIj4xMDwvc3Bhbj48L3RkPjx0ZD4gPC90ZD48dGQgY2xh c3M9InJibG9jayI+PHNwYW4gY2xhc3M9Imluc2VydCI+ICAgOS48L3NwYW4+ICBDb250cmlidXRv cnMgIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuICA8c3Bh biBjbGFzcz0iaW5zZXJ0Ij4xMjwvc3Bhbj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249 InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRv cCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+PHNwYW4gY2xhc3M9ImRlbGV0ZSI+ICAgICA5LjEu PC9zcGFuPiAgTm9ybWF0aXZlIFJlZmVyZW5jZXMgIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4g LiAuIC4gLiAuICA8c3BhbiBjbGFzcz0iZGVsZXRlIj4xMDwvc3Bhbj48L3RkPjx0ZD4gPC90ZD48 dGQgY2xhc3M9InJibG9jayI+PHNwYW4gY2xhc3M9Imluc2VydCI+ICAgMTAuPC9zcGFuPiBBY2tu b3dsZWRnZW1lbnRzICAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAu ICA8c3BhbiBjbGFzcz0iaW5zZXJ0Ij4xMjwvc3Bhbj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2 YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxp Z249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+PHNwYW4gY2xhc3M9ImRlbGV0ZSI+ICAg ICA5LjIuPC9zcGFuPiAgSW5mb3JtYXRpdmUgUmVmZXJlbmNlcyAgLiAuIC4gLiAuIC4gLiAuIC4g LiAuIC4gLiAuIC4gLiAuICA8c3BhbiBjbGFzcz0iZGVsZXRlIj4xMTwvc3Bhbj48L3RkPjx0ZD4g PC90ZD48dGQgY2xhc3M9InJibG9jayI+PHNwYW4gY2xhc3M9Imluc2VydCI+ICAgMTEuPC9zcGFu PiBSZWZlcmVuY2VzICAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAu IC4gLiAuICA8c3BhbiBjbGFzcz0iaW5zZXJ0Ij4xMjwvc3Bhbj48L3RkPjx0ZCBjbGFzcz0ibGlu ZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5v IiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+ICAgQXV0aG9ycycgQWRkcmVz c2VzICAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gIDxzcGFu IGNsYXNzPSJkZWxldGUiPjExPC9zcGFuPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2Nr Ij48c3BhbiBjbGFzcz0iaW5zZXJ0Ij4gICAgIDExLjEuPC9zcGFuPiAgTm9ybWF0aXZlIFJlZmVy ZW5jZXMgLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gIDxzcGFuIGNsYXNzPSJp bnNlcnQiPjEyPC9zcGFuPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3Rk PjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0 ZCBjbGFzcz0ibGJsb2NrIj48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+PHNwYW4g Y2xhc3M9Imluc2VydCI+ICAgICAxMS4yLjwvc3Bhbj4gIEluZm9ybWF0aXZlIFJlZmVyZW5jZXMg LiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuICA8c3BhbiBjbGFzcz0iaW5zZXJ0Ij4x Mzwvc3Bhbj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0K ICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9 ImxibG9jayI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPiAgIEF1dGhvcnMnIEFk ZHJlc3NlcyAgLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuICA8 c3BhbiBjbGFzcz0iaW5zZXJ0Ij4xNDwvc3Bhbj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxp Z249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249 InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmln aHQiPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAg ICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVm dCI+MS4gIEludHJvZHVjdGlvbjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPjEuICBJ bnRyb2R1Y3Rpb248L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3Ry Pg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xh c3M9ImxlZnQiPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPjwvdGQ+PHRkIGNsYXNz PSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJs aW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgSXQgaXMgdXNlZnVs IHRvIGFzc2lnbiBhIHBlci1ub2RlIGFkbWluaXN0cmF0aXZlIHRhZyB0byBhIHJvdXRlciBpbjwv dGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIEl0IGlzIHVzZWZ1bCB0byBhc3NpZ24g YSBwZXItbm9kZSBhZG1pbmlzdHJhdGl2ZSB0YWcgdG8gYSByb3V0ZXIgaW48L3RkPjx0ZCBjbGFz cz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0i bGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIHRoZSBPU1BGIGRv bWFpbiBhbmQgdXNlIGl0IGFzIGFuIGF0dHJpYnV0ZSBhc3NvY2lhdGVkIHdpdGggdGhlIG5vZGUu PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgdGhlIE9TUEYgZG9tYWluIGFuZCB1 c2UgaXQgYXMgYW4gYXR0cmlidXRlIGFzc29jaWF0ZWQgd2l0aCB0aGUgbm9kZS48L3RkPjx0ZCBj bGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFz cz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIFRoZSBwZXIt bm9kZSBhZG1pbmlzdHJhdGl2ZSB0YWcgY2FuIGJlIHVzZWQgaW4gdmFyaWV0eSBvZjwvdGQ+PHRk PiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIFRoZSBwZXItbm9kZSBhZG1pbmlzdHJhdGl2ZSB0 YWcgY2FuIGJlIHVzZWQgaW4gdmFyaWV0eSBvZjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGln bj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkPjxhIG5hbWU9ImRpZmYwMDExIj48L2E+ PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90 ZD48dGQgY2xhc3M9ImxibG9jayI+ICAgYXBwbGljYXRpb25zLCBmb3IgPHNwYW4gY2xhc3M9ImRl bGV0ZSI+ZXg6IC08L3NwYW4+IFRyYWZmaWMtZW5naW5lZXJpbmcgYXBwbGljYXRpb25zIHRvIHBy b3ZpZGU8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+ICAgYXBwbGljYXRpb25zLCBm b3IgPHNwYW4gY2xhc3M9Imluc2VydCI+ZXhhbXBsZTo8L3NwYW4+PC90ZD48dGQgY2xhc3M9Imxp bmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVu byIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPiAgIGRpZmZlcmVudCA8c3Bh biBjbGFzcz0iZGVsZXRlIj5wYXRoLXNlbGVjdGlvbiBjcml0ZXJpYSwgLTwvc3Bhbj4gUHJlZmVy IG9yIHBydW5lIGNlcnRhaW4gcGF0aHMgaW48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9j ayI+PHNwYW4gY2xhc3M9Imluc2VydCI+PC9zcGFuPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZh bGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGln bj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj4gICBMb29wIEZyZWUgQWx0ZXJuYXRlIChM RkEpIGJhY2t1cCBzZWxlY3Rpb24gdmlhIGxvY2FsIDxzcGFuIGNsYXNzPSJkZWxldGUiPnBvbGlj aWVzLjwvc3Bhbj48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+PHNwYW4gY2xhc3M9 Imluc2VydCI+ICAgKGEpPC9zcGFuPiAgVHJhZmZpYy1lbmdpbmVlcmluZyBhcHBsaWNhdGlvbnMg dG8gcHJvdmlkZSBkaWZmZXJlbnQgPHNwYW4gY2xhc3M9Imluc2VydCI+cGF0aC08L3NwYW4+PC90 ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48 dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPjwv dGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48c3BhbiBjbGFzcz0iaW5zZXJ0Ij4gICAg ICAgc2VsZWN0aW9uIGNyaXRlcmlhLjwvc3Bhbj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxp Z249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249 InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJy YmxvY2siPjxzcGFuIGNsYXNzPSJpbnNlcnQiPjwvc3Bhbj48L3RkPjx0ZCBjbGFzcz0ibGluZW5v IiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2 YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNs YXNzPSJyYmxvY2siPjxzcGFuIGNsYXNzPSJpbnNlcnQiPiAgIChiKTwvc3Bhbj4gIFByZWZlciBv ciBwcnVuZSBjZXJ0YWluIHBhdGhzIGluIExvb3AgRnJlZSBBbHRlcm5hdGUgKExGQSk8L3RkPjx0 ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBj bGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+PC90ZD48 dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPiAgICAgICBiYWNrdXAgc2VsZWN0aW9uIHZpYSBs b2NhbCA8c3BhbiBjbGFzcz0iaW5zZXJ0Ij5wb2xpY2llcyBhcyBkZWZpbmVkIGluPC9zcGFuPjwv dGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+ PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48 L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+PHNwYW4gY2xhc3M9Imluc2VydCI+ICAg ICAgIFtJLUQuaWV0Zi1ydGd3Zy1sZmEtbWFuYWdlYWJpbGl0eV0uPC9zcGFuPjwvdGQ+PHRkIGNs YXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNz PSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+PC90ZD48dGQ+IDwv dGQ+PHRkIGNsYXNzPSJyaWdodCI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3Ai PjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwv dGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBUaGlzIGRvY3VtZW50IHByb3ZpZGVzIG1lY2hhbmlzbXMg dG8gYWR2ZXJ0aXNlIHBlci1ub2RlPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAg VGhpcyBkb2N1bWVudCBwcm92aWRlcyBtZWNoYW5pc21zIHRvIGFkdmVydGlzZSBwZXItbm9kZTwv dGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+ PHRkPjxhIG5hbWU9ImRpZmYwMDEyIj48L2E+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFz cz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+ICAgYWRtaW5p c3RyYXRpdmUgdGFncyBpbiA8c3BhbiBjbGFzcz0iZGVsZXRlIj5PU1BGLiAgUGF0aDwvc3Bhbj4g c2VsZWN0aW9uIDxzcGFuIGNsYXNzPSJkZWxldGUiPmlzIGEgZnVuY3Rpb25hbCBzZXQ8L3NwYW4+ PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPiAgIGFkbWluaXN0cmF0aXZlIHRhZ3Mg aW4gPHNwYW4gY2xhc3M9Imluc2VydCI+T1NQRiBmb3Igcm91dGUgYW5kIHBhdGggc2VsZWN0aW9u LiAgUm91dGUgYW5kPC9zcGFuPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48 L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3Rk Pjx0ZCBjbGFzcz0ibGJsb2NrIj48c3BhbiBjbGFzcz0iZGVsZXRlIj4gICB3aGljaDwvc3Bhbj4g YXBwbGllcyBib3RoIHRvIFRFIGFuZCA8c3BhbiBjbGFzcz0iZGVsZXRlIj5ub24tVEU8L3NwYW4+ IGFwcGxpY2F0aW9ucyBhbmQgaGVuY2UgbmV3IFRMVjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0i cmJsb2NrIj48c3BhbiBjbGFzcz0iaW5zZXJ0Ij4gICBwYXRoPC9zcGFuPiBzZWxlY3Rpb24gPHNw YW4gY2xhc3M9Imluc2VydCI+ZnVuY3Rpb25hbGl0eTwvc3Bhbj4gYXBwbGllcyA8c3BhbiBjbGFz cz0iaW5zZXJ0Ij50bzwvc3Bhbj4gYm90aCB0byBURSBhbmQgPHNwYW4gY2xhc3M9Imluc2VydCI+ bm9uIFRyYWZmaWM8L3NwYW4+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwv dGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+ PHRkIGNsYXNzPSJsYmxvY2siPiAgIGZvciBjYXJyeWluZyBwZXItbm9kZSBhZG1pbmlzdHJhdGl2 ZSB0YWdzIGlzIGluY2x1ZGVkIGluIFJvdXRlcjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJs b2NrIj48c3BhbiBjbGFzcz0iaW5zZXJ0Ij4gICBFbmdpbmVlcmluZyAoVEUpPC9zcGFuPiBhcHBs aWNhdGlvbnMgYW5kIGhlbmNlIG5ldyBUTFYgZm9yIGNhcnJ5aW5nIHBlci1ub2RlPC90ZD48dGQg Y2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xh c3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPiAgIEluZm9y bWF0aW9uIDxzcGFuIGNsYXNzPSJkZWxldGUiPkxTQSBbUkZDNDk3MF0gLjwvc3Bhbj48L3RkPjx0 ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+ICAgYWRtaW5pc3RyYXRpdmUgdGFncyBpcyBpbmNs dWRlZCBpbiBSb3V0ZXIgSW5mb3JtYXRpb24gPHNwYW4gY2xhc3M9Imluc2VydCI+KFJJKSBMaW5r IFN0YXRlPC9zcGFuPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwv dHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBj bGFzcz0ibGJsb2NrIj48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+PHNwYW4gY2xh c3M9Imluc2VydCI+ICAgQWR2ZXJ0aXNlbWVudCAoTFNBKSBbUkZDNDk3MF0uPC9zcGFuPjwvdGQ+ PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRk IGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+PC90ZD48 dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWdu PSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0 b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4yLiAgQWRtaW5pc3RyYXRpdmUgVGFnIFRMVjwvdGQ+ PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPjIuICBBZG1pbmlzdHJhdGl2ZSBUYWcgVExWPC90 ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48 dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij48L3Rk Pjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxp Z249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249 InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIEFuIGFkbWluaXN0cmF0aXZlIFRhZyBpcyBh IDMyLWJpdCBpbnRlZ2VyIHZhbHVlIHRoYXQgY2FuIGJlIHVzZWQgdG88L3RkPjx0ZD4gPC90ZD48 dGQgY2xhc3M9InJpZ2h0Ij4gICBBbiBhZG1pbmlzdHJhdGl2ZSBUYWcgaXMgYSAzMi1iaXQgaW50 ZWdlciB2YWx1ZSB0aGF0IGNhbiBiZSB1c2VkIHRvPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFs aWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWdu PSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBpZGVudGlmeSBhIGdyb3VwIG9mIG5vZGVz IGluIHRoZSBPU1BGIGRvbWFpbi48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBp ZGVudGlmeSBhIGdyb3VwIG9mIG5vZGVzIGluIHRoZSBPU1BGIGRvbWFpbi48L3RkPjx0ZCBjbGFz cz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0i bGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPjwvdGQ+PHRkPiA8L3Rk Pjx0ZCBjbGFzcz0icmlnaHQiPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48 L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3Rk Pjx0ZCBjbGFzcz0ibGVmdCI+ICAgVGhlIG5ldyBUTFYgZGVmaW5lZCB3aWxsIGJlIGNhcnJpZWQg d2l0aGluIGFuIFJJIExTQSBmb3IgT1NQRlYyIGFuZDwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0i cmlnaHQiPiAgIFRoZSBuZXcgVExWIGRlZmluZWQgd2lsbCBiZSBjYXJyaWVkIHdpdGhpbiBhbiBS SSBMU0EgZm9yIE9TUEZWMiBhbmQ8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+ PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZD48YSBuYW1lPSJkaWZmMDAxMyI+PC9hPjwvdGQ+PC90 cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNs YXNzPSJsYmxvY2siPiAgIE9TUEZWMy4gIFJvdXRlciBpbmZvcm1hdGlvbiA8c3BhbiBjbGFzcz0i ZGVsZXRlIj5MU0E8L3NwYW4+IFtSRkM0OTcwXSBjYW4gaGF2ZSA8c3BhbiBjbGFzcz0iZGVsZXRl Ij5saW5rLCBhcmVhPC9zcGFuPiBvciA8c3BhbiBjbGFzcz0iZGVsZXRlIj5BUzwvc3Bhbj48L3Rk Pjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+ICAgT1NQRlYzLiAgUm91dGVyIGluZm9ybWF0 aW9uIDxzcGFuIGNsYXNzPSJpbnNlcnQiPihSSSlMU0E8L3NwYW4+IFtSRkM0OTcwXSBjYW4gaGF2 ZSA8c3BhbiBjbGFzcz0iaW5zZXJ0Ij5saW5rLSwgYXJlYS08L3NwYW4+PC90ZD48dGQgY2xhc3M9 ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9Imxp bmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPiAgIGxldmVsIGZsb29k aW5nIHNjb3BlLiAgPHNwYW4gY2xhc3M9ImRlbGV0ZSI+Q2hvb3NpbmcgdGhlIGZsb29kaW5nPC9z cGFuPiBzY29wZSB0byBmbG9vZCB0aGUgZ3JvdXA8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJi bG9jayI+ICAgb3IgPHNwYW4gY2xhc3M9Imluc2VydCI+QXV0b25vbW91cyBTeXRlbSAoQVMpPC9z cGFuPiBsZXZlbCBmbG9vZGluZyBzY29wZS4gIDxzcGFuIGNsYXNzPSJpbnNlcnQiPlRoZSBjaG9p Y2Ugb2Ygd2hhdDwvc3Bhbj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90 ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48 dGQgY2xhc3M9ImxibG9jayI+ICAgdGFncyA8c3BhbiBjbGFzcz0iZGVsZXRlIj5hcmUgZGVmaW5l ZCBieSB0aGUgcG9saWNpZXMgYW5kPC9zcGFuPiBpcyBhIGxvY2FsIDxzcGFuIGNsYXNzPSJkZWxl dGUiPm1hdHRlci48L3NwYW4+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPiAgIHNj b3BlIDxzcGFuIGNsYXNzPSJpbnNlcnQiPmF0IHdoaWNoPC9zcGFuPiB0byBmbG9vZCB0aGUgZ3Jv dXAgdGFncyBpcyBhIDxzcGFuIGNsYXNzPSJpbnNlcnQiPm1hdHRlciBvZjwvc3Bhbj4gbG9jYWwg PHNwYW4gY2xhc3M9Imluc2VydCI+cG9saWN5Lkl0PC9zcGFuPjwvdGQ+PHRkIGNsYXNzPSJsaW5l bm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8i IHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48L3RkPjx0ZD4gPC90ZD48dGQg Y2xhc3M9InJibG9jayI+PHNwYW4gY2xhc3M9Imluc2VydCI+ICAgaXMgZXhwZWN0ZWQgdGhhdCBu b2RlIGFkbWluaXN0cmF0aXZlIHRhZyB2YWx1ZXMgd2lsbCBub3QgYmUgcG9ydGFibGU8L3NwYW4+ PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0 cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2si PjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48c3BhbiBjbGFzcz0iaW5zZXJ0Ij4g ICBhY3Jvc3MgYWRtaW5pc3RyYXRpdmUgZG9tYWlucy48L3NwYW4+PC90ZD48dGQgY2xhc3M9Imxp bmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVu byIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij48L3RkPjx0ZD4gPC90ZD48dGQg Y2xhc3M9InJpZ2h0Ij48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48 L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQg Y2xhc3M9ImxlZnQiPiAgIFRoZSBUTFYgc3BlY2lmaWVzIG9uZSBvciBtb3JlIGFkbWluaXN0cmF0 aXZlIHRhZyB2YWx1ZXMuICBBbiBPU1BGPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ ICAgVGhlIFRMViBzcGVjaWZpZXMgb25lIG9yIG1vcmUgYWRtaW5pc3RyYXRpdmUgdGFnIHZhbHVl cy4gIEFuIE9TUEY8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3Ry Pg0KICAgICAgPHRyPjx0ZD48YSBuYW1lPSJkaWZmMDAxNCI+PC9hPjwvdGQ+PC90cj4NCiAgICAg IDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxv Y2siPiAgIG5vZGUgYWR2ZXJ0aXNlcyB0aGUgc2V0IG9mIGdyb3VwcyBpdCBpcyBwYXJ0IG9mIGlu IHRoZSBPU1BGIGRvbWFpbjxzcGFuIGNsYXNzPSJkZWxldGUiPi48L3NwYW4+PC90ZD48dGQ+IDwv dGQ+PHRkIGNsYXNzPSJyYmxvY2siPiAgIG5vZGUgYWR2ZXJ0aXNlcyB0aGUgc2V0IG9mIGdyb3Vw cyBpdCBpcyBwYXJ0IG9mIGluIHRoZSBPU1BGIGRvbWFpbjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8i IHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZh bGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgKGZvciBleGFtcGxlLCBhbGwgUEUt bm9kZXMgYXJlIGNvbmZpZ3VyZWQgd2l0aCBjZXJ0YWluIHRhZyB2YWx1ZSwgYWxsPC90ZD48dGQ+ IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgKGZvciBleGFtcGxlLCBhbGwgUEUtbm9kZXMgYXJl IGNvbmZpZ3VyZWQgd2l0aCBjZXJ0YWluIHRhZyB2YWx1ZSwgYWxsPC90ZD48dGQgY2xhc3M9Imxp bmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVu byIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBQLW5vZGVzIGFyZSBjb25m aWd1cmVkIHdpdGggYSBkaWZmZXJlbnQgdGFnIHZhbHVlIGluIHRoZSBkb21haW4pLjwvdGQ+PHRk PiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIFAtbm9kZXMgYXJlIGNvbmZpZ3VyZWQgd2l0aCBh IGRpZmZlcmVudCB0YWcgdmFsdWUgaW4gdGhlIGRvbWFpbikuPC90ZD48dGQgY2xhc3M9ImxpbmVu byIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIg dmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBNdWx0aXBsZSBUTFZzIE1BWSBi ZSBhZGRlZCBpbiBzYW1lIFJJLUxTQSBvciBpbiBhIGRpZmZlcmVudCBpbnN0YW5jZTwvdGQ+PHRk PiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIE11bHRpcGxlIFRMVnMgTUFZIGJlIGFkZGVkIGlu IHNhbWUgUkktTFNBIG9yIGluIGEgZGlmZmVyZW50IGluc3RhbmNlPC90ZD48dGQgY2xhc3M9Imxp bmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVu byIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBvZiB0aGUgUkkgTFNBIGFz IGRlZmluZWQgaW4gW0ktRC5hY2VlLW9zcGYtcmZjNDk3MGJpc10uPC90ZD48dGQ+IDwvdGQ+PHRk IGNsYXNzPSJyaWdodCI+ICAgb2YgdGhlIFJJIExTQSBhcyBkZWZpbmVkIGluIFtJLUQuYWNlZS1v c3BmLXJmYzQ5NzBiaXNdLjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3Rk PjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0 ZCBjbGFzcz0ibGVmdCI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+PC90ZD48dGQg Y2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xh c3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4zLiAgT1NQRiBw ZXItbm9kZSBhZG1pbmlzdHJhdGl2ZSB0YWcgVExWPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJy aWdodCI+My4gIE9TUEYgcGVyLW5vZGUgYWRtaW5pc3RyYXRpdmUgdGFnIFRMVjwvdGQ+PHRkIGNs YXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNz PSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+PC90ZD48dGQ+IDwv dGQ+PHRkIGNsYXNzPSJyaWdodCI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3Ai PjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwv dGQ+PHRkIGNsYXNzPSJsZWZ0Ij4zLjEuICBUTFYgZm9ybWF0PC90ZD48dGQ+IDwvdGQ+PHRkIGNs YXNzPSJyaWdodCI+My4xLiAgVExWIGZvcm1hdDwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGln bj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0i dG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdo dCI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAg IDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0 Ij4gICBbUkZDNDk3MF0sIGRlZmluZXMgUm91dGVyIEluZm9ybWF0aW9uIChSSSkgTFNBIHdoaWNo IG1heSBiZSB1c2VkIHRvPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgW1JGQzQ5 NzBdLCBkZWZpbmVzIFJvdXRlciBJbmZvcm1hdGlvbiAoUkkpIExTQSB3aGljaCBtYXkgYmUgdXNl ZCB0bzwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAg ICA8dHI+PHRkPjxhIG5hbWU9ImRpZmYwMDE1Ij48L2E+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0 ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+ICAg YWR2ZXJ0aXNlIHByb3BlcnRpZXMgb2YgdGhlIG9yaWdpbmF0aW5nIHJvdXRlci4gIDxzcGFuIGNs YXNzPSJkZWxldGUiPlBheWxvYWQ8L3NwYW4+IG9mIHRoZSBSSTwvdGQ+PHRkPiA8L3RkPjx0ZCBj bGFzcz0icmJsb2NrIj4gICBhZHZlcnRpc2UgcHJvcGVydGllcyBvZiB0aGUgb3JpZ2luYXRpbmcg cm91dGVyLiAgPHNwYW4gY2xhc3M9Imluc2VydCI+VGhlIHBheWxvYWQ8L3NwYW4+IG9mIHRoZTwv dGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+ PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj4g ICBMU0EgY29uc2lzdHMgb2Ygb25lIG9yIG1vcmUgbmVzdGVkIFR5cGUvTGVuZ3RoL1ZhbHVlIChU TFYpIHRyaXBsZXRzLjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj4gICBSSSBMU0Eg Y29uc2lzdHMgb2Ygb25lIG9yIG1vcmUgbmVzdGVkIFR5cGUvTGVuZ3RoL1ZhbHVlIChUTFYpPC90 ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48 dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPiAg IE5vZGUgYWRtaW5pc3RyYXRpdmUgdGFncyBhcmUgYWR2ZXJ0aXNlZCBpbiB0aGUgTm9kZSBBZG1p bmlzdHJhdGl2ZTwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj4gICB0cmlwbGV0cy4g IE5vZGUgYWRtaW5pc3RyYXRpdmUgdGFncyBhcmUgYWR2ZXJ0aXNlZCBpbiB0aGUgTm9kZTwvdGQ+ PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRk IGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj4gICBU YWcgVExWLiAgVGhlIGZvcm1hdCBvZiBOb2RlIEFkbWluaXN0cmF0aXZlIFRhZyBUTFYgaXM6PC90 ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPiAgIEFkbWluaXN0cmF0aXZlIFRhZyBUTFYu ICBUaGUgZm9ybWF0IG9mIDxzcGFuIGNsYXNzPSJpbnNlcnQiPnRoZTwvc3Bhbj4gTm9kZSBBZG1p bmlzdHJhdGl2ZSBUYWc8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48 L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQg Y2xhc3M9ImxibG9jayI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPiAgIFRMViBp czo8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAg PHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQi PjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8i IHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZh bGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgMCAgICAgICAgICAgICAgIDEgICAg ICAgICAgICAgMiAgICAgICAgICAgICAzPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ ICAgMCAgICAgICAgICAgICAgIDEgICAgICAgICAgICAgMiAgICAgICAgICAgICAzPC90ZD48dGQg Y2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xh c3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICAwIDEgMiAz IDQgNSA2IDcgOCA5IDAgMSAyIDMgNCA1IDYgNyA4IDkgMCAxIDIgMyA0IDUgNiA3IDggOSAwIDE8 L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICAwIDEgMiAzIDQgNSA2IDcgOCA5IDAg MSAyIDMgNCA1IDYgNyA4IDkgMCAxIDIgMyA0IDUgNiA3IDggOSAwIDE8L3RkPjx0ZCBjbGFzcz0i bGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGlu ZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgICstKy0rLSstKy0rLSst Ky0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rPC90ZD48 dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0r LSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSs8L3RkPjx0ZCBjbGFzcz0ibGlu ZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5v IiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIHwgVHlwZSAgICAgICAgICAg ICAgICAgICAgICAgIHwgTGVuZ3RoICAgICAgICAgICAgICAgICAgICAgICAgICB8PC90ZD48dGQ+ IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgfCBUeXBlICAgICAgICAgICAgICAgICAgICAgICAg fCBMZW5ndGggICAgICAgICAgICAgICAgICAgICAgICAgIHw8L3RkPjx0ZCBjbGFzcz0ibGluZW5v IiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2 YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgICstKy0rLSstKy0rLSstKy0rLSst Ky0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rPC90ZD48dGQ+IDwv dGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0r LSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSs8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2 YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxp Z249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIHwgICAgICAgICAgICAgICAgICAgQWRt aW5pc3RyYXRpdmUgVGFnICMxICAgICAgICAgICAgICAgICAgICAgICB8PC90ZD48dGQ+IDwvdGQ+ PHRkIGNsYXNzPSJyaWdodCI+ICAgfCAgICAgICAgICAgICAgICAgICBBZG1pbmlzdHJhdGl2ZSBU YWcgIzEgICAgICAgICAgICAgICAgICAgICAgIHw8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxp Z249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249 InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgICstKy0rLSstKy0rLSstKy0rLSstKy0rLSst Ky0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rPC90ZD48dGQ+IDwvdGQ+PHRk IGNsYXNzPSJyaWdodCI+ICAgKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0r LSstKy0rLSstKy0rLSstKy0rLSstKy0rLSs8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249 InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRv cCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIHwgICAgICAgICAgICAgICAgICAgQWRtaW5pc3Ry YXRpdmUgVGFnICMyICAgICAgICAgICAgICAgICAgICAgICB8PC90ZD48dGQ+IDwvdGQ+PHRkIGNs YXNzPSJyaWdodCI+ICAgfCAgICAgICAgICAgICAgICAgICBBZG1pbmlzdHJhdGl2ZSBUYWcgIzIg ICAgICAgICAgICAgICAgICAgICAgIHw8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRv cCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+ PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgICstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSst Ky0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNz PSJyaWdodCI+ICAgKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0r LSstKy0rLSstKy0rLSstKy0rLSs8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+ PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0i bGVmdCI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+PC90ZD48dGQgY2xhc3M9Imxp bmVubyI+PC90ZD48L3RyPg0KICAgICAgPHRyIGJnY29sb3I9ImdyYXkiPjx0ZD48L3RkPjx0aD48 YSBuYW1lPSJwYXJ0LWw0Ij48c21hbGw+c2tpcHBpbmcgdG8gY2hhbmdlIGF0PC9zbWFsbD48ZW0+ IHBhZ2UgNCwgbGluZSAyNzwvZW0+PC9hPjwvdGg+PHRoPiA8L3RoPjx0aD48YSBuYW1lPSJwYXJ0 LXI0Ij48c21hbGw+c2tpcHBpbmcgdG8gY2hhbmdlIGF0PC9zbWFsbD48ZW0+IHBhZ2UgNCwgbGlu ZSAyOTwvZW0+PC9hPjwvdGg+PHRkPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9Imxp bmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICArLSstKy0rLSstKy0r LSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKzwvdGQ+ PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgICstKy0rLSstKy0rLSstKy0rLSstKy0rLSst Ky0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rPC90ZD48dGQgY2xhc3M9Imxp bmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVu byIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij48L3RkPjx0ZD4gPC90ZD48dGQg Y2xhc3M9InJpZ2h0Ij48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48 L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQg Y2xhc3M9ImxlZnQiPiAgICAgICAgICAgICAgRmlndXJlIDE6IE9TUEYgcGVyLW5vZGUgQWRtaW5p c3RyYXRpdmUgVGFnIFRMVjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgICAgICAg ICAgICAgRmlndXJlIDE6IE9TUEYgcGVyLW5vZGUgQWRtaW5pc3RyYXRpdmUgVGFnIFRMVjwvdGQ+ PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRk IGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+PC90ZD48 dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWdu PSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0 b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBUeXBlIDogVEJBLCBTdWdnZXN0ZWQgdmFsdWUg MTA8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBUeXBlIDogVEJBLCBTdWdnZXN0 ZWQgdmFsdWUgMTA8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3Ry Pg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xh c3M9ImxlZnQiPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPjwvdGQ+PHRkIGNsYXNz PSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJs aW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgTGVuZ3RoOiBBIDE2 LWJpdCBmaWVsZCB0aGF0IGluZGljYXRlcyB0aGUgbGVuZ3RoIG9mIHRoZSB2YWx1ZSBwb3J0aW9u PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgTGVuZ3RoOiBBIDE2LWJpdCBmaWVs ZCB0aGF0IGluZGljYXRlcyB0aGUgbGVuZ3RoIG9mIHRoZSB2YWx1ZSBwb3J0aW9uPC90ZD48dGQg Y2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xh c3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBpbiBvY3Rl dHMgYW5kIHdpbGwgYmUgYSBtdWx0aXBsZSBvZiA0IG9jdGV0cyBkZXBlbmRlbnQgb24gdGhlIG51 bWJlcjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIGluIG9jdGV0cyBhbmQgd2ls bCBiZSBhIG11bHRpcGxlIG9mIDQgb2N0ZXRzIGRlcGVuZGVudCBvbiB0aGUgbnVtYmVyPC90ZD48 dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQg Y2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBvZiB0 YWdzIGFkdmVydGlzZWQuPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgb2YgdGFn cyBhZHZlcnRpc2VkLjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwv dHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBj bGFzcz0ibGVmdCI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+PC90ZD48dGQgY2xh c3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQ+PGEgbmFt ZT0iZGlmZjAwMTYiPjwvYT48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8i IHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj4gICBWYWx1ZTogQSBzZXF1ZW5j ZSBvZiBtdWx0aXBsZSA8c3BhbiBjbGFzcz0iZGVsZXRlIj40PC9zcGFuPiBvY3RldHMgZGVmaW5p bmcgdGhlIGFkbWluaXN0cmF0aXZlPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPiAg IFZhbHVlOiBBIHNlcXVlbmNlIG9mIG11bHRpcGxlIDxzcGFuIGNsYXNzPSJpbnNlcnQiPmZvdXI8 L3NwYW4+IG9jdGV0cyBkZWZpbmluZyB0aGUgYWRtaW5pc3RyYXRpdmU8L3RkPjx0ZCBjbGFzcz0i bGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGlu ZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIHRhZ3MuICBBdCBsZWFz dCBvbmUgdGFnIE1VU1QgYmUgY2FycmllZCBpZiB0aGlzIFRMViBpcyBpbmNsdWRlZCBpbjwvdGQ+ PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIHRhZ3MuICBBdCBsZWFzdCBvbmUgdGFnIE1V U1QgYmUgY2FycmllZCBpZiB0aGlzIFRMViBpcyBpbmNsdWRlZCBpbjwvdGQ+PHRkIGNsYXNzPSJs aW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5l bm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgdGhlIFJJLUxTQS48L3Rk Pjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICB0aGUgUkktTFNBLjwvdGQ+PHRkIGNsYXNz PSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJs aW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+PC90ZD48dGQ+IDwvdGQ+ PHRkIGNsYXNzPSJyaWdodCI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwv dGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+ PHRkIGNsYXNzPSJsZWZ0Ij4zLjIuICBFbGVtZW50cyBvZiBwcm9jZWR1cmU8L3RkPjx0ZD4gPC90 ZD48dGQgY2xhc3M9InJpZ2h0Ij4zLjIuICBFbGVtZW50cyBvZiBwcm9jZWR1cmU8L3RkPjx0ZCBj bGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFz cz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPjwvdGQ+PHRkPiA8 L3RkPjx0ZCBjbGFzcz0icmlnaHQiPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9w Ij48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkPjxhIG5hbWU9ImRpZmYwMDE3Ij48L2E+PC90ZD48 L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQg Y2xhc3M9ImxibG9jayI+ICAgPHNwYW4gY2xhc3M9ImRlbGV0ZSI+TWVhbmluZzwvc3Bhbj4gb2Yg dGhlIE5vZGUgYWRtaW5pc3RyYXRpdmUgdGFncyBpcyBnZW5lcmFsbHkgb3BhcXVlIHRvIE9TUEYu PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPjxzcGFuIGNsYXNzPSJpbnNlcnQiPjMu Mi4xLiAgSW50ZXJwcmV0YXRpb24gb2YgTm9kZSBBZG1pbmlzdHJhdGl2ZSBUYWdzPC9zcGFuPjwv dGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+ PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj4g ICA8c3BhbiBjbGFzcz0iZGVsZXRlIj5Sb3V0ZXI8L3NwYW4+IGFkdmVydGlzaW5nIHRoZSBwZXIt bm9kZSBhZG1pbmlzdHJhdGl2ZSB0YWcgKG9yIHRhZ3MpIG1heSBiZTwvdGQ+PHRkPiA8L3RkPjx0 ZCBjbGFzcz0icmJsb2NrIj48c3BhbiBjbGFzcz0iaW5zZXJ0Ij48L3NwYW4+PC90ZD48dGQgY2xh c3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9 ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPiAgIGNvbmZpZ3Vy ZWQgdG8gZG8gc28gd2l0aG91dCBrbm93aW5nIChvciBldmVuIDxzcGFuIGNsYXNzPSJkZWxldGUi PmV4cGxpY2l0bHkgc3VwcG9ydGluZyk8L3NwYW4+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJy YmxvY2siPjxzcGFuIGNsYXNzPSJpbnNlcnQiPiAgIFRoZSBtZWFuaW5nPC9zcGFuPiBvZiB0aGUg Tm9kZSBhZG1pbmlzdHJhdGl2ZSB0YWdzIGlzIGdlbmVyYWxseSBvcGFxdWUgdG88L3RkPjx0ZCBj bGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFz cz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+ICAgZnVuY3Rp b25hbGl0eSBpbXBsaWVkIGJ5IHRoZSB0YWcuPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxv Y2siPiAgIE9TUEYuICA8c3BhbiBjbGFzcz0iaW5zZXJ0Ij5Sb3V0ZXJzPC9zcGFuPiBhZHZlcnRp c2luZyB0aGUgcGVyLW5vZGUgYWRtaW5pc3RyYXRpdmUgdGFnIChvciB0YWdzKTwvdGQ+PHRkIGNs YXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNz PSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48L3RkPjx0ZD4g PC90ZD48dGQgY2xhc3M9InJibG9jayI+ICAgbWF5IGJlIGNvbmZpZ3VyZWQgdG8gZG8gc28gd2l0 aG91dCBrbm93aW5nIChvciBldmVuIDxzcGFuIGNsYXNzPSJpbnNlcnQiPndpdGhvdXQ8L3NwYW4+ PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0 cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2si PjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48c3BhbiBjbGFzcz0iaW5zZXJ0Ij4g ICBzdXBwb3J0aW5nIHByb2Nlc3Npbmcgb2YpIHRoZTwvc3Bhbj4gZnVuY3Rpb25hbGl0eSBpbXBs aWVkIGJ5IHRoZSB0YWcuPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+ PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRk IGNsYXNzPSJsZWZ0Ij48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij48L3RkPjx0ZCBj bGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFz cz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIEludGVycHJl dGF0aW9uIG9mIHRhZyB2YWx1ZXMgaXMgc3BlY2lmaWMgdG8gdGhlIGFkbWluaXN0cmF0aXZlIGRv bWFpbjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIEludGVycHJldGF0aW9uIG9m IHRhZyB2YWx1ZXMgaXMgc3BlY2lmaWMgdG8gdGhlIGFkbWluaXN0cmF0aXZlIGRvbWFpbjwvdGQ+ PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRk PjxhIG5hbWU9ImRpZmYwMDE4Ij48L2E+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0i bGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+ICAgb2YgYSBwYXJ0 aWN1bGFyIG5ldHdvcmsgPHNwYW4gY2xhc3M9ImRlbGV0ZSI+b3BlcmF0b3IuPC9zcGFuPiAgVGhl IG1lYW5pbmcgb2YgYSBwZXItbm9kZTwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj4g ICBvZiBhIHBhcnRpY3VsYXIgbmV0d29yayA8c3BhbiBjbGFzcz0iaW5zZXJ0Ij5vcGVyYXRvciwg YW5kIGhlbmNlIHRhZyB2YWx1ZXMgU0hPVUxEIE5PVCBiZTwvc3Bhbj48L3RkPjx0ZCBjbGFzcz0i bGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGlu ZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+ICAgYWRtaW5pc3RyYXRp dmUgdGFnIGlzIGRlZmluZWQgYnkgdGhlIG5ldHdvcmsgbG9jYWwgcG9saWN5IGFuZCBpczwvdGQ+ PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48c3BhbiBjbGFzcz0iaW5zZXJ0Ij4gICBwcm9w YWdhdGVkIG91dHNpZGUgdGhlIGFkbWluaXN0cmF0aXZlIGRvbWFpbiB0byB3aGljaCB0aGV5IGFw cGx5Ljwvc3Bhbj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3Ry Pg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xh c3M9ImxibG9jayI+ICAgY29udHJvbGxlZCB2aWEgdGhlIGNvbmZpZ3VyYXRpb24uICBJZiBhIHJl Y2VpdmluZyBub2RlIGRvZXMgbm90PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPiAg IFRoZSBtZWFuaW5nIG9mIGEgcGVyLW5vZGUgYWRtaW5pc3RyYXRpdmUgdGFnIGlzIGRlZmluZWQg YnkgdGhlPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAg ICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJs YmxvY2siPiAgIHVuZGVyc3RhbmQgdGhlIHRhZyA8c3BhbiBjbGFzcz0iZGVsZXRlIj52YWx1ZSw8 L3NwYW4+IGl0IGlnbm9yZXMgdGhlIHNwZWNpZmljIHRhZyBhbmQgZmxvb2RzIHRoZTwvdGQ+PHRk PiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj4gICBuZXR3b3JrIGxvY2FsIHBvbGljeSBhbmQgaXMg Y29udHJvbGxlZCB2aWEgdGhlIGNvbmZpZ3VyYXRpb24uICBJZiBhPC90ZD48dGQgY2xhc3M9Imxp bmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVu byIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPiAgIFJJIExTQSB3aXRob3V0 IGFueSBjaGFuZ2UgYXMgZGVmaW5lZCBpbiBbUkZDNDk3MF0uPC90ZD48dGQ+IDwvdGQ+PHRkIGNs YXNzPSJyYmxvY2siPiAgIHJlY2VpdmluZyBub2RlIGRvZXMgbm90IHVuZGVyc3RhbmQgdGhlIHRh ZyA8c3BhbiBjbGFzcz0iaW5zZXJ0Ij52YWx1ZSBvciBkb2VzIG5vdCBoYXZlIGE8L3NwYW4+PC90 ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48 dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPjwv dGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48c3BhbiBjbGFzcz0iaW5zZXJ0Ij4gICBs b2NhbCBwb2xpY3kgY29ycmVzcG9uZGluZyB0byB0aGUgdGFnLDwvc3Bhbj4gaXQgaWdub3JlcyB0 aGUgc3BlY2lmaWMgdGFnPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+ PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRk IGNsYXNzPSJsYmxvY2siPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj4gICBhbmQg Zmxvb2RzIHRoZSBSSSBMU0Egd2l0aG91dCBhbnkgY2hhbmdlIGFzIGRlZmluZWQgaW4gW1JGQzQ5 NzBdLjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAg ICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVm dCI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+PC90ZD48dGQgY2xhc3M9ImxpbmVu byIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIg dmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBUaGUgc2VtYW50aWNzIG9mIHRo ZSB0YWcgb3JkZXIgaGFzIG5vIG1lYW5pbmcuICBUaGF0IGlzLCB0aGVyZSBpcyBubzwvdGQ+PHRk PiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIFRoZSBzZW1hbnRpY3Mgb2YgdGhlIHRhZyBvcmRl ciBoYXMgbm8gbWVhbmluZy4gIFRoYXQgaXMsIHRoZXJlIGlzIG5vPC90ZD48dGQgY2xhc3M9Imxp bmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVu byIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBpbXBsaWVkIG1lYW5pbmcg dG8gdGhlIG9yZGVyaW5nIG9mIHRoZSB0YWdzIHRoYXQgaW5kaWNhdGVzIGEgY2VydGFpbjwvdGQ+ PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIGltcGxpZWQgbWVhbmluZyB0byB0aGUgb3Jk ZXJpbmcgb2YgdGhlIHRhZ3MgdGhhdCBpbmRpY2F0ZXMgYSBjZXJ0YWluPC90ZD48dGQgY2xhc3M9 ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9Imxp bmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBvcGVyYXRpb24gb3Ig c2V0IG9mIG9wZXJhdGlvbnMgdGhhdCBuZWVkIHRvIGJlIHBlcmZvcm1lZCBiYXNlZCBvbiB0aGU8 L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBvcGVyYXRpb24gb3Igc2V0IG9mIG9w ZXJhdGlvbnMgdGhhdCBuZWVkIHRvIGJlIHBlcmZvcm1lZCBiYXNlZCBvbiB0aGU8L3RkPjx0ZCBj bGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFz cz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIG9yZGVyaW5n LjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIG9yZGVyaW5nLjwvdGQ+PHRkIGNs YXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNz PSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+PC90ZD48dGQ+IDwv dGQ+PHRkIGNsYXNzPSJyaWdodCI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3Ai PjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQ+PGEgbmFtZT0iZGlmZjAwMTkiPjwvYT48L3RkPjwv dHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBj bGFzcz0ibGJsb2NrIj4gICBFYWNoIHRhZyA8c3BhbiBjbGFzcz0iZGVsZXRlIj5TSE9VTEQ8L3Nw YW4+IGJlIHRyZWF0ZWQgYXMgYW4gaW5kZXBlbmRlbnQgaWRlbnRpZmllciB0aGF0IE1BWSBiZTwv dGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj4gICBFYWNoIHRhZyA8c3BhbiBjbGFzcz0i aW5zZXJ0Ij5NVVNUPC9zcGFuPiBiZSB0cmVhdGVkIGFzIGFuIGluZGVwZW5kZW50IGlkZW50aWZp ZXIgdGhhdCBNQVkgYmU8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48 L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQg Y2xhc3M9ImxibG9jayI+ICAgdXNlZCBpbiBwb2xpY3kgdG8gcGVyZm9ybSBhIHBvbGljeSBhY3Rp b24uICA8c3BhbiBjbGFzcz0iZGVsZXRlIj5UYWdzPC9zcGFuPiBjYXJyaWVkIGJ5IHRoZTwvdGQ+ PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj4gICB1c2VkIGluIHBvbGljeSB0byBwZXJmb3Jt IGEgcG9saWN5IGFjdGlvbi4gIDxzcGFuIGNsYXNzPSJpbnNlcnQiPkVhY2ggdGFnPC9zcGFuPiBj YXJyaWVkIGJ5IHRoZTwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwv dHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBj bGFzcz0ibGJsb2NrIj4gICBhZG1pbmlzdHJhdGl2ZSB0YWcgVExWIFNIT1VMRCBiZSB1c2VkIHRv IGluZGljYXRlIDxzcGFuIGNsYXNzPSJkZWxldGUiPmluZGVwZW5kZW50PC9zcGFuPjwvdGQ+PHRk PiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj4gICBhZG1pbmlzdHJhdGl2ZSB0YWcgVExWIFNIT1VM RCBiZSB1c2VkIHRvIGluZGljYXRlIDxzcGFuIGNsYXNzPSJpbnNlcnQiPmEgY2hhcmFjdGVyaXN0 aWM8L3NwYW4+IG9mPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90 cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNs YXNzPSJsYmxvY2siPjxzcGFuIGNsYXNzPSJkZWxldGUiPiAgIGNoYXJhY3RlcmlzdGljczwvc3Bh bj4gb2YgYSA8c3BhbiBjbGFzcz0iZGVsZXRlIj5ub2RlLjwvc3Bhbj4gIFRoZSBhZG1pbmlzdHJh dGl2ZSB0YWcgbGlzdCB3aXRoaW4gdGhlPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2si PiAgIGEgPHNwYW4gY2xhc3M9Imluc2VydCI+bm9kZSB0aGF0IGlzIGluZGVwZW5kZW50IG9mIHRo ZSBjaGFyYWN0ZXJpc3RpY3MgaW5kaWNhdGVkIGJ5IG90aGVyPC9zcGFuPjwvdGQ+PHRkIGNsYXNz PSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJs aW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj4gICBUTFYgPHNwYW4g Y2xhc3M9ImRlbGV0ZSI+U0hPVUxEPC9zcGFuPiBiZSBjb25zaWRlcmVkIGFuIHVub3JkZXJlZCBs aXN0LiAgV2hpbHN0IHBvbGljaWVzIG1heSBiZTwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJs b2NrIj48c3BhbiBjbGFzcz0iaW5zZXJ0Ij4gICBhZG1pbmlzdHJhdGl2ZSB0YWdzLjwvc3Bhbj4g IFRoZSBhZG1pbmlzdHJhdGl2ZSB0YWcgbGlzdCB3aXRoaW4gdGhlIFRMViA8c3BhbiBjbGFzcz0i aW5zZXJ0Ij5NVVNUPC9zcGFuPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48 L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3Rk Pjx0ZCBjbGFzcz0ibGJsb2NrIj4gICBpbXBsZW1lbnRlZCBiYXNlZCBvbiB0aGUgcHJlc2VuY2Ug b2YgbXVsdGlwbGUgdGFncyAoZS5nLiwgaWYgdGFnIEE8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9 InJibG9jayI+ICAgYmUgY29uc2lkZXJlZCBhbiB1bm9yZGVyZWQgbGlzdC4gIFdoaWxzdCBwb2xp Y2llcyBtYXkgYmUgaW1wbGVtZW50ZWQ8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRv cCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+ PC90ZD48dGQgY2xhc3M9ImxibG9jayI+ICAgQU5EIHRhZyBCIGFyZSBwcmVzZW50KSwgdGhleSBN VVNUIE5PVCBiZSByZWxpYW50IHVwb24gdGhlIG9yZGVyIG9mPC90ZD48dGQ+IDwvdGQ+PHRkIGNs YXNzPSJyYmxvY2siPiAgIGJhc2VkIG9uIHRoZSBwcmVzZW5jZSBvZiBtdWx0aXBsZSB0YWdzIChl LmcuLCBpZiB0YWcgQSBBTkQgdGFnIEIgYXJlPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWdu PSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0 b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPiAgIHRoZSB0YWdzIChpLmUuLCBhbGwgcG9saWNp ZXMgc2hvdWxkIGJlIGNvbnNpZGVyZWQgY29tbXV0YXRpdmU8L3RkPjx0ZD4gPC90ZD48dGQgY2xh c3M9InJibG9jayI+ICAgcHJlc2VudCksIHRoZXkgTVVTVCBOT1QgYmUgcmVsaWFudCB1cG9uIHRo ZSBvcmRlciBvZiB0aGUgdGFncyAoaS5lLiw8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249 InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRv cCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+ICAgb3BlcmF0aW9ucywgc3VjaCB0aGF0IHRhZyBB IHByZWNlZGluZyBvciBmb2xsb3dpbmcgdGFnIEIgZG9lcyBub3Q8L3RkPjx0ZD4gPC90ZD48dGQg Y2xhc3M9InJibG9jayI+ICAgYWxsIHBvbGljaWVzIHNob3VsZCBiZSBjb25zaWRlcmVkIGNvbW11 dGF0aXZlIG9wZXJhdGlvbnMsIHN1Y2ggdGhhdDwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGln bj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0i dG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj4gICBjaGFuZ2UgdGhlaXIgb3V0Y29tZSkuPC90 ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPiAgIHRhZyBBIHByZWNlZGluZyBvciBmb2xs b3dpbmcgdGFnIEIgZG9lcyBub3QgY2hhbmdlIHRoZWlyIG91dGNvbWUpLjwvdGQ+PHRkIGNsYXNz PSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJs aW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+PC90ZD48dGQ+IDwvdGQ+ PHRkIGNsYXNzPSJyaWdodCI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwv dGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+ PHRkIGNsYXNzPSJsZWZ0Ij4gICBUbyBhdm9pZCBpbmNvbXBsZXRlIG9yIGluY29uc2lzdGVudCBp bnRlcnByZXRhdGlvbnMgb2YgdGhlIHBlci1ub2RlPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJy aWdodCI+ICAgVG8gYXZvaWQgaW5jb21wbGV0ZSBvciBpbmNvbnNpc3RlbnQgaW50ZXJwcmV0YXRp b25zIG9mIHRoZSBwZXItbm9kZTwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48 L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3Rk Pjx0ZCBjbGFzcz0ibGVmdCI+ICAgYWRtaW5pc3RyYXRpdmUgdGFncyB0aGUgc2FtZSB0YWcgdmFs dWUgTVVTVCBOT1QgYmUgYWR2ZXJ0aXNlZCBieSBhPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJy aWdodCI+ICAgYWRtaW5pc3RyYXRpdmUgdGFncyB0aGUgc2FtZSB0YWcgdmFsdWUgTVVTVCBOT1Qg YmUgYWR2ZXJ0aXNlZCBieSBhPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwv dGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+ PHRkIGNsYXNzPSJsZWZ0Ij4gICByb3V0ZXIgaW4gUkkgTFNBcyBvZiBkaWZmZXJlbnQgc2NvcGVz LiAgVGhlIHNhbWUgdGFnIE1BWSBiZTwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAg IHJvdXRlciBpbiBSSSBMU0FzIG9mIGRpZmZlcmVudCBzY29wZXMuICBUaGUgc2FtZSB0YWcgTUFZ IGJlPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAg IDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0 Ij4gICBhZHZlcnRpc2VkIGluIG11bHRpcGxlIFJJIExTQXMgb2YgdGhlIHNhbWUgc2NvcGUsIGZv ciBleGFtcGxlLCBPU1BGPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgYWR2ZXJ0 aXNlZCBpbiBtdWx0aXBsZSBSSSBMU0FzIG9mIHRoZSBzYW1lIHNjb3BlLCBmb3IgZXhhbXBsZSwg T1NQRjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAg ICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVm dCI+ICAgQXJlYSBCb3JkZXIgUm91dGVyIChBQlIpIG1heSBhZHZlcnRpc2UgdGhlIHNhbWUgdGFn IGluIGFyZWEtc2NvcGUgUkk8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBBcmVh IEJvcmRlciBSb3V0ZXIgKEFCUikgbWF5IGFkdmVydGlzZSB0aGUgc2FtZSB0YWcgaW4gYXJlYS1z Y29wZSBSSTwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQog ICAgICA8dHI+PHRkPjxhIG5hbWU9ImRpZmYwMDIwIj48L2E+PC90ZD48L3RyPg0KICAgICAgPHRy Pjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+ ICAgTFNBcyBpbiBtdWx0aXBsZSBhcmVhcyBjb25uZWN0ZWQgdG8gdGhlIEFCUi48L3RkPjx0ZD4g PC90ZD48dGQgY2xhc3M9InJibG9jayI+ICAgTFNBcyBpbiBtdWx0aXBsZSBhcmVhcyBjb25uZWN0 ZWQgdG8gdGhlIEFCUi4gIDxzcGFuIGNsYXNzPSJpbnNlcnQiPklmIGEgbm9kZTwvc3Bhbj48L3Rk Pjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0 ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+PC90 ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPjxzcGFuIGNsYXNzPSJpbnNlcnQiPiAgIGFk bWluaXN0cmF0aXZlIHRhZyBpcyByZWNlaXZlZCBpbiBkaWZmZXJlbnQgc2NvcGVzLCB0aGUgY29u ZmxpY3Rpbmc8L3NwYW4+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+ PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRk IGNsYXNzPSJsYmxvY2siPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48c3BhbiBj bGFzcz0iaW5zZXJ0Ij4gICB0YWcgU0hPVUxEIG5vdCBiZSB1c2VkIGFuZCB0aGlzIHNpdHVhdGlv biBTSE9VTEQgYmUgbG9nZ2VkIGFzIGFuPC9zcGFuPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZh bGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGln bj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9 InJibG9jayI+PHNwYW4gY2xhc3M9Imluc2VydCI+ICAgZXJyb3IgaW5jbHVkaW5nIHRoZSB0YWcg d2l0aCBjb25mbGljdGluZyBzY29wZXMgYW5kIHRoZTwvc3Bhbj48L3RkPjx0ZCBjbGFzcz0ibGlu ZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5v IiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+PC90ZD48dGQ+IDwvdGQ+PHRk IGNsYXNzPSJyYmxvY2siPjxzcGFuIGNsYXNzPSJpbnNlcnQiPiAgIG9yaWdpbmF0b3IocykuPC9z cGFuPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAg ICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVm dCI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+PC90ZD48dGQgY2xhc3M9ImxpbmVu byIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQ+PGEgbmFtZT0iZGlmZjAw MjEiPjwvYT48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0i dG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj4gICBUaGUgcGVyLW5vZGUgYWRtaW5pc3RyYXRp dmUgdGFncyBhcmUgbm90IG1lYW50IHRvIGJlIGV4dGVuZGVkIGJ5IDxzcGFuIGNsYXNzPSJkZWxl dGUiPnRoZTwvc3Bhbj48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+PHNwYW4gY2xh c3M9Imluc2VydCI+My4yLjIuICBVc2Ugb2YgTm9kZSBBZG1pbmlzdHJhdGl2ZSBUYWdzPC9zcGFu PjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8 dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2Nr Ij4gICBmdXR1cmUgT1NQRiBzdGFuZGFyZHMuICA8c3BhbiBjbGFzcz0iZGVsZXRlIj5UaGUgbmV3 PC9zcGFuPiBPU1BGIGV4dGVuc2lvbnMgPHNwYW4gY2xhc3M9ImRlbGV0ZSI+TVVTVCBOT1Q8L3Nw YW4+IHJlcXVpcmUgdXNlPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPiAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICA8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0K ICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9 ImxibG9jayI+ICAgb2YgcGVyLW5vZGUgYWRtaW5pc3RyYXRpdmUgdGFncyBvciBkZWZpbmUgd2Vs bC1rbm93biB0YWcgdmFsdWVzLjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj4gICBU aGUgcGVyLW5vZGUgYWRtaW5pc3RyYXRpdmUgdGFncyBhcmUgbm90IG1lYW50IHRvIGJlIGV4dGVu ZGVkIGJ5PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAg ICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJs YmxvY2siPiAgIE5vZGUgYWRtaW5pc3RyYXRpdmUgdGFncyBhcmUgZm9yIGdlbmVyaWMgdXNlIGFu ZCBkbyBub3QgcmVxdWlyZSBJQU5BPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPiAg IGZ1dHVyZSBPU1BGIHN0YW5kYXJkcy4gIDxzcGFuIGNsYXNzPSJpbnNlcnQiPk5ldzwvc3Bhbj4g T1NQRiBleHRlbnNpb25zIDxzcGFuIGNsYXNzPSJpbnNlcnQiPmFyZSBub3QgZXhwZWN0ZWQgdG88 L3NwYW4+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAg ICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJs YmxvY2siPiAgIHJlZ2lzdHJ5LiAgPHNwYW4gY2xhc3M9ImRlbGV0ZSI+VGhlIGZ1dHVyZTwvc3Bh bj4gT1NQRiBleHRlbnNpb25zIHJlcXVpcmluZyB3ZWxsIGtub3duIHZhbHVlcyBNQVk8L3RkPjx0 ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+ICAgcmVxdWlyZSB1c2Ugb2YgcGVyLW5vZGUgYWRt aW5pc3RyYXRpdmUgdGFncyBvciBkZWZpbmUgd2VsbC1rbm93biB0YWc8L3RkPjx0ZCBjbGFzcz0i bGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGlu ZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+ICAgZGVmaW5lIHRoZWly IG93biBkYXRhIHNpZ25hbGxpbmcgdGFpbG9yZWQgdG8gdGhlIG5lZWRzIG9mIHRoZSBmZWF0dXJl PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPiAgIHZhbHVlcy4gIE5vZGUgYWRtaW5p c3RyYXRpdmUgdGFncyBhcmUgZm9yIGdlbmVyaWMgdXNlIGFuZCBkbyBub3Q8L3RkPjx0ZCBjbGFz cz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0i bGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+ICAgb3IgTUFZIHVz ZSBjYXBhYmlsaXR5IFRMViBhcyBkZWZpbmVkIGluIFtSRkM0OTcwXS48L3RkPjx0ZD4gPC90ZD48 dGQgY2xhc3M9InJibG9jayI+ICAgcmVxdWlyZSBJQU5BIHJlZ2lzdHJ5LiAgPHNwYW4gY2xhc3M9 Imluc2VydCI+RnV0dXJlPC9zcGFuPiBPU1BGIGV4dGVuc2lvbnMgcmVxdWlyaW5nIHdlbGwga25v d248L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAg PHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9j ayI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPiAgIHZhbHVlcyBNQVkgZGVmaW5l IHRoZWlyIG93biBkYXRhIHNpZ25hbGxpbmcgdGFpbG9yZWQgdG8gdGhlIG5lZWRzIG9mPC90ZD48 dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQg Y2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPjwvdGQ+ PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj4gICB0aGUgZmVhdHVyZSBvciBNQVkgdXNlIDxz cGFuIGNsYXNzPSJpbnNlcnQiPnRoZTwvc3Bhbj4gY2FwYWJpbGl0eSBUTFYgYXMgZGVmaW5lZCBp biBbUkZDNDk3MF0uPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90 cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNs YXNzPSJsZWZ0Ij48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij48L3RkPjx0ZCBjbGFz cz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0i bGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIEJlaW5nIHBhcnQg b2YgdGhlIFJJIExTQSwgdGhlIHBlci1ub2RlIGFkbWluaXN0cmF0aXZlIHRhZyBUTFYgbXVzdCBi ZTwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIEJlaW5nIHBhcnQgb2YgdGhlIFJJ IExTQSwgdGhlIHBlci1ub2RlIGFkbWluaXN0cmF0aXZlIHRhZyBUTFYgbXVzdCBiZTwvdGQ+PHRk IGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkPjxh IG5hbWU9ImRpZmYwMDIyIj48L2E+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGlu ZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+ICAgcmVhc29uYWJseSBz bWFsbCBhbmQgc3RhYmxlLiAgSW4gcGFydGljdWxhciwgPHNwYW4gY2xhc3M9ImRlbGV0ZSI+YnV0 IG5vdCBsaW1pdGVkIHRvLDwvc3Bhbj48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+ ICAgcmVhc29uYWJseSBzbWFsbCBhbmQgc3RhYmxlLiAgSW4gcGFydGljdWxhciwgaW1wbGVtZW50 YXRpb25zPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAg ICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJs YmxvY2siPiAgIGltcGxlbWVudGF0aW9ucyBzdXBwb3J0aW5nIDxzcGFuIGNsYXNzPSJkZWxldGUi PnRoZTwvc3Bhbj4gcGVyLW5vZGUgYWRtaW5pc3RyYXRpdmUgdGFncyBNVVNUIE5PVDwvdGQ+PHRk PiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj4gICBzdXBwb3J0aW5nIHBlci1ub2RlIGFkbWluaXN0 cmF0aXZlIHRhZ3MgTVVTVCBOT1QgPHNwYW4gY2xhc3M9Imluc2VydCI+YmUgdXNlZDwvc3Bhbj4g dG8gPHNwYW4gY2xhc3M9Imluc2VydCI+Y29udmV5PC9zcGFuPjwvdGQ+PHRkIGNsYXNzPSJsaW5l bm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8i IHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj4gICA8c3BhbiBjbGFzcz0iZGVs ZXRlIj50aWUgYWR2ZXJ0aXNlZCB0YWdzPC9zcGFuPiB0byBjaGFuZ2VzIGluIHRoZSBuZXR3b3Jr IHRvcG9sb2d5IChib3RoIHdpdGhpbjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48 c3BhbiBjbGFzcz0iaW5zZXJ0Ij4gICBhdHRyaWJ1dGVzIG9mIHRoZSByb3V0aW5nIHRvcG9sb2d5 IG9yIGFzc29jaWF0ZSB0YWdzIHdpdGg8L3NwYW4+IGNoYW5nZXMgaW48L3RkPjx0ZCBjbGFzcz0i bGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGlu ZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+ICAgYW5kIG91dHNpZGUg dGhlIE9TUEYgZG9tYWluKSBvciByZWFjaGFiaWxpdHkgb2Ygcm91dGVzLjwvdGQ+PHRkPiA8L3Rk Pjx0ZCBjbGFzcz0icmJsb2NrIj4gICB0aGUgbmV0d29yayB0b3BvbG9neSAoYm90aCB3aXRoaW4g YW5kIG91dHNpZGUgdGhlIE9TUEYgZG9tYWluKSBvcjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZh bGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGln bj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9 InJibG9jayI+ICAgcmVhY2hhYmlsaXR5IG9mIHJvdXRlcy48L3RkPjx0ZCBjbGFzcz0ibGluZW5v IiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2 YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNs YXNzPSJyYmxvY2siPiAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICA8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxp Z249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249 InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJy YmxvY2siPjxzcGFuIGNsYXNzPSJpbnNlcnQiPjMuMi4zLiAgUHJvY2Vzc2luZyBOb2RlIEFkbWlu aXN0cmF0aXZlIFRhZyBjaGFuZ2VzPC9zcGFuPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGln bj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0i dG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdo dCI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAg IDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0 Ij4gICBNdWx0aXBsZSBub2RlIGFkbWluaXN0cmF0aXZlIHRhZyBUTFZzIE1BWSBhcHBlYXIgaW4g YW4gUkkgTFNBIG9yPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgTXVsdGlwbGUg bm9kZSBhZG1pbmlzdHJhdGl2ZSB0YWcgVExWcyBNQVkgYXBwZWFyIGluIGFuIFJJIExTQSBvcjwv dGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+ PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAg bXVsdGlwbGUgbm9kZSBhZG1pbmlzdHJhdGl2ZSB0YWcgVExWcyBNQVkgYmUgY29udGFpbmVkIGlu IGRpZmZlcmVudDwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIG11bHRpcGxlIG5v ZGUgYWRtaW5pc3RyYXRpdmUgdGFnIFRMVnMgTUFZIGJlIGNvbnRhaW5lZCBpbiBkaWZmZXJlbnQ8 L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRy Pjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAg IGluc3RhbmNlcyBvZiB0aGUgUkkgTFNBLiAgVGhlIG5vZGUgYWRtaW5pc3RyYXRpdmUgdGFncyBh c3NvY2lhdGVkPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgaW5zdGFuY2VzIG9m IHRoZSBSSSBMU0EuICBUaGUgbm9kZSBhZG1pbmlzdHJhdGl2ZSB0YWdzIGFzc29jaWF0ZWQ8L3Rk Pjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0 ZD48YSBuYW1lPSJkaWZmMDAyMyI+PC9hPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9 ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPiAgIHdpdGggYSBu b2RlIGZvciB0aGUgcHVycG9zZSBvZiBhbnkgY29tcHV0YXRpb24gb3IgcHJvY2Vzc2luZyBTSE9V TEQ8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+ICAgd2l0aCBhIG5vZGUgPHNwYW4g Y2xhc3M9Imluc2VydCI+dGhhdCBvcmlnaW5hdGVzIHRhZ3M8L3NwYW4+IGZvciB0aGUgcHVycG9z ZSBvZiBhbnkgY29tcHV0YXRpb248L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+ PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90 ZD48dGQgY2xhc3M9ImxibG9jayI+ICAgYmUgYSBzdXBlcnNldCBvZiBub2RlIGFkbWluaXN0cmF0 aXZlIHRhZ3MgZnJvbSBhbGwgdGhlIFRMVnMgaW4gYWxsPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNz PSJyYmxvY2siPiAgIG9yIHByb2Nlc3NpbmcgPHNwYW4gY2xhc3M9Imluc2VydCI+YXQgYSByZWNl aXZpbmcgbm9kZTwvc3Bhbj4gU0hPVUxEIGJlIGEgc3VwZXJzZXQgb2Ygbm9kZTwvdGQ+PHRkIGNs YXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNz PSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj4gICA8c3BhbiBj bGFzcz0iZGVsZXRlIj5pbnN0YW5jZXMgb2Y8L3NwYW4+IHRoZSBSSSBMU0Egb3JpZ2luYXRlZCBi eSB0aGF0IDxzcGFuIGNsYXNzPSJkZWxldGUiPm5vZGUuPC9zcGFuPjwvdGQ+PHRkPiA8L3RkPjx0 ZCBjbGFzcz0icmJsb2NrIj4gICBhZG1pbmlzdHJhdGl2ZSB0YWdzIGZyb20gYWxsIHRoZSBUTFZz IGluIGFsbCB0aGUgPHNwYW4gY2xhc3M9Imluc2VydCI+cmVjZWl2ZWQ8L3NwYW4+IFJJIExTQTwv dGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+ PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48 L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+ICAgPHNwYW4gY2xhc3M9Imluc2VydCI+ aW5zdGFuY2VzPC9zcGFuPiBvcmlnaW5hdGVkIGJ5IHRoYXQgPHNwYW4gY2xhc3M9Imluc2VydCI+ bm9kZS5XaGVuIGFuIFJJIExTQSBpcyByZWNlaXZlZCB0aGF0PC9zcGFuPjwvdGQ+PHRkIGNsYXNz PSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJs aW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48L3RkPjx0ZD4gPC90 ZD48dGQgY2xhc3M9InJibG9jayI+PHNwYW4gY2xhc3M9Imluc2VydCI+ICAgY2hhbmdlcyB0aGUg c2V0IG9mIHRhZ3MgYXBwbGljYWJsZSB0byBhbnkgb3JpZ2luYXRpbmcgbm9kZSwgYTwvc3Bhbj48 L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRy Pjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+ PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPjxzcGFuIGNsYXNzPSJpbnNlcnQiPiAg IHJlY2VpdmluZyBub2RlIE1VU1QgcmVwZWF0IGFueSBjb21wdXRhdGlvbiBvciBwcm9jZXNzaW5n IHRoYXQgaXM8L3NwYW4+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+ PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRk IGNsYXNzPSJsYmxvY2siPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48c3BhbiBj bGFzcz0iaW5zZXJ0Ij4gICBiYXNlZCBvbiB0aG9zZSBhZG1pbmlzdHJhdGl2ZSB0YWdzLjwvc3Bh bj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAg PHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQi PjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8i IHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkPjxhIG5hbWU9ImRpZmYwMDI0 Ij48L2E+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRv cCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+ICAgV2hlbiB0aGVyZSBpcyBhIGNoYW5nZSBpbiB0 aGUgbm9kZSBhZG1pbmlzdHJhdGl2ZSB0YWcgVExWIG9yIHJlbW92YWwvPC90ZD48dGQ+IDwvdGQ+ PHRkIGNsYXNzPSJyYmxvY2siPiAgIFdoZW4gdGhlcmUgaXMgYSBjaGFuZ2UgPHNwYW4gY2xhc3M9 Imluc2VydCI+b3IgcmVtb3ZhbCBvZiBhbiBhZG1pbmlzdHJhdGl2ZSBhZmZpbGlhdGlvbiBvZjwv c3Bhbj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAg ICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9Imxi bG9jayI+ICAgYWRkaXRpb24gb2YgYSBUTFYgaW4gYW55IGluc3RhbmNlIG9mIHRoZSBSSS1MU0Es IGltcGxlbWVudGF0aW9ucyBNVVNUPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPjxz cGFuIGNsYXNzPSJpbnNlcnQiPiAgIGEgbm9kZSwgdGhlIG5vZGUgTVVTVCByZS1vcmlnaW5hdGUg dGhlIFJJIExTQSB3aXRoIHRoZSBsYXRlc3Qgc2V0IG9mPC9zcGFuPjwvdGQ+PHRkIGNsYXNzPSJs aW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5l bm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj4gICB0YWtlIGFwcHJvcHJp YXRlIG1lYXN1cmVzIHRvIHVwZGF0ZSA8c3BhbiBjbGFzcz0iZGVsZXRlIj5pdHM8L3NwYW4+IHN0 YXRlIGFjY29yZGluZyB0byB0aGU8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+PHNw YW4gY2xhc3M9Imluc2VydCI+ICAgbm9kZSBhZG1pbmlzdHJhdGl2ZSB0YWdzLiAgT24gdGhlIHJl Y2VpdmVyLCBXaGVuIHRoZXJlIGlzIGEgY2hhbmdlPC9zcGFuPiBpbjwvdGQ+PHRkIGNsYXNzPSJs aW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5l bm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj4gICBjaGFuZ2VkIHNldCBv ZiB0YWdzLiAgPHNwYW4gY2xhc3M9ImRlbGV0ZSI+RXhhY3Q8L3NwYW4+IGFjdGlvbnMgZGVwZW5k IG9uIGZlYXR1cmVzIHdvcmtpbmcgd2l0aDwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2Nr Ij4gICB0aGUgbm9kZSBhZG1pbmlzdHJhdGl2ZSB0YWcgVExWIG9yIHJlbW92YWwvIGFkZGl0aW9u IG9mIGEgVExWIGluIGFueTwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3Rk PjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0 ZCBjbGFzcz0ibGJsb2NrIj48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+ICAgaW5z dGFuY2Ugb2YgdGhlIFJJLUxTQSwgaW1wbGVtZW50YXRpb25zIE1VU1QgdGFrZSBhcHByb3ByaWF0 ZTwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8 dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2Nr Ij48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+ICAgbWVhc3VyZXMgdG8gdXBkYXRl IDxzcGFuIGNsYXNzPSJpbnNlcnQiPnRoZWlyPC9zcGFuPiBzdGF0ZSBhY2NvcmRpbmcgdG8gdGhl IGNoYW5nZWQgc2V0IG9mIHRhZ3MuPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3Ai PjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwv dGQ+PHRkIGNsYXNzPSJsYmxvY2siPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj4g ICA8c3BhbiBjbGFzcz0iaW5zZXJ0Ij5UaGUgZXhhY3Q8L3NwYW4+IGFjdGlvbnMgPHNwYW4gY2xh c3M9Imluc2VydCI+bmVlZGVkPC9zcGFuPiBkZXBlbmQgb24gZmVhdHVyZXMgd29ya2luZyB3aXRo PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0 cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4g ICBhZG1pbmlzdHJhdGl2ZSB0YWdzIGFuZCBpcyBvdXRzaWRlIG9mIHNjb3BlIG9mIHRoaXMgc3Bl Y2lmaWNhdGlvbi48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBhZG1pbmlzdHJh dGl2ZSB0YWdzIGFuZCBpcyBvdXRzaWRlIG9mIHNjb3BlIG9mIHRoaXMgc3BlY2lmaWNhdGlvbi48 L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRy Pjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPjwv dGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZh bGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGln bj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+NC4gIEFwcGxpY2F0aW9uczwvdGQ+PHRkPiA8 L3RkPjx0ZCBjbGFzcz0icmlnaHQiPjQuICBBcHBsaWNhdGlvbnM8L3RkPjx0ZCBjbGFzcz0ibGlu ZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5v IiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPjwvdGQ+PHRkPiA8L3RkPjx0ZCBj bGFzcz0icmlnaHQiPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwv dHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBj bGFzcz0ibGVmdCI+ICAgVGhpcyBzZWN0aW9uIGxpc3RzIHNldmVyYWwgZXhhbXBsZXMgb2YgaG93 IGltcGxlbWVudGF0aW9ucyBtaWdodCB1c2U8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0 Ij4gICBUaGlzIHNlY3Rpb24gbGlzdHMgc2V2ZXJhbCBleGFtcGxlcyBvZiBob3cgaW1wbGVtZW50 YXRpb25zIG1pZ2h0IHVzZTwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3Rk PjwvdHI+DQogICAgICA8dHI+PHRkPjxhIG5hbWU9ImRpZmYwMDI1Ij48L2E+PC90ZD48L3RyPg0K ICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9 ImxibG9jayI+ICAgdGhlIDxzcGFuIGNsYXNzPSJkZWxldGUiPk5vZGU8L3NwYW4+IGFkbWluaXN0 cmF0aXZlIHRhZ3MuICBUaGVzZSBleGFtcGxlcyBhcmUgZ2l2ZW4gb25seSB0bzwvdGQ+PHRkPiA8 L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj4gICB0aGUgPHNwYW4gY2xhc3M9Imluc2VydCI+cGVyLW5v ZGU8L3NwYW4+IGFkbWluaXN0cmF0aXZlIHRhZ3MuICBUaGVzZSBleGFtcGxlcyBhcmUgZ2l2ZW4g b25seSB0bzwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQog ICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0i bGJsb2NrIj4gICBkZW1vbnN0cmF0ZSBnZW5lcmljIHVzZWZ1bG5lc3Mgb2YgdGhlIHJvdXRlciB0 YWdnaW5nIG1lY2hhbmlzbS48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+ICAgZGVt b25zdHJhdGUgPHNwYW4gY2xhc3M9Imluc2VydCI+dGhlPC9zcGFuPiBnZW5lcmljIHVzZWZ1bG5l c3Mgb2YgdGhlIHJvdXRlciB0YWdnaW5nIG1lY2hhbmlzbS48L3RkPjx0ZCBjbGFzcz0ibGluZW5v IiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2 YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+ICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIDwvdGQ+ PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj4gICA8c3BhbiBjbGFzcz0iaW5zZXJ0Ij5JbXBs ZW1lbnRhdGlvbnM8L3NwYW4+IHN1cHBvcnRpbmcgdGhpcyBzcGVjaWZpY2F0aW9uIDxzcGFuIGNs YXNzPSJpbnNlcnQiPmFyZTwvc3Bhbj4gbm90IHJlcXVpcmVkIHRvPC90ZD48dGQgY2xhc3M9Imxp bmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVu byIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPiAgIDxzcGFuIGNsYXNzPSJk ZWxldGUiPkltcGxlbWVudGF0aW9uPC9zcGFuPiBzdXBwb3J0aW5nIHRoaXMgc3BlY2lmaWNhdGlv biA8c3BhbiBjbGFzcz0iZGVsZXRlIj5pczwvc3Bhbj4gbm90IHJlcXVpcmVkIHRvPC90ZD48dGQ+ IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPiAgIGltcGxlbWVudCBhbnkgb2YgPHNwYW4gY2xhc3M9 Imluc2VydCI+dGhlc2U8L3NwYW4+IHVzZSBjYXNlcy4gIEl0IGlzIGFsc28gd29ydGggbm90aW5n IHRoYXQgaW48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0K ICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9 ImxibG9jayI+ICAgaW1wbGVtZW50IGFueSBvZiA8c3BhbiBjbGFzcz0iZGVsZXRlIj50aGU8L3Nw YW4+IHVzZSBjYXNlcy4gIEl0IGlzIGFsc28gd29ydGggbm90aW5nIHRoYXQgaW4gc29tZTwvdGQ+ PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj4gICBzb21lIGRlc2NyaWJlZCB1c2UgY2FzZXMg cm91dGVycyBjb25maWd1cmVkIHRvIGFkdmVydGlzZSB0YWdzIGhlbHA8L3RkPjx0ZCBjbGFzcz0i bGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGlu ZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+ICAgZGVzY3JpYmVkIHVz ZSBjYXNlcyByb3V0ZXJzIGNvbmZpZ3VyZWQgdG8gYWR2ZXJ0aXNlIHRhZ3MgaGVscCBvdGhlcjwv dGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj4gICBvdGhlciByb3V0ZXJzIGluIHRoZWly IGNhbGN1bGF0aW9ucyBidXQgZG8gbm90IHRoZW1zZWx2ZXMgaW1wbGVtZW50PC90ZD48dGQgY2xh c3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9 ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPiAgIHJvdXRlcnMg aW4gdGhlaXIgY2FsY3VsYXRpb25zIGJ1dCBkbyBub3QgdGhlbXNlbHZlcyBpbXBsZW1lbnQgdGhl PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPiAgIHRoZSBzYW1lIGZ1bmN0aW9uYWxp dHkuPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAg IDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxv Y2siPiAgIHNhbWUgZnVuY3Rpb25hbGl0eS48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9j ayI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAg IDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0 Ij48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij48L3RkPjx0ZCBjbGFzcz0ibGluZW5v IiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2 YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPjQuMS4gIFNlcnZpY2UgYXV0by1kaXNj b3Zlcnk8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij40LjEuICBTZXJ2aWNlIGF1dG8t ZGlzY292ZXJ5PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4N CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNz PSJsZWZ0Ij48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij48L3RkPjx0ZCBjbGFzcz0i bGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZD48YSBuYW1lPSJk aWZmMDAyNiI+PC9hPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFs aWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPiAgIFJvdXRlciB0YWdnaW5nIG1heSBi ZSB1c2VkIHRvIGF1dG9tYXRpY2FsbHkgZGlzY292ZXIgZ3JvdXAgb2Ygcm91dGVyczwvdGQ+PHRk PiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj4gICBSb3V0ZXIgdGFnZ2luZyBtYXkgYmUgdXNlZCB0 byBhdXRvbWF0aWNhbGx5IGRpc2NvdmVyIDxzcGFuIGNsYXNzPSJpbnNlcnQiPmE8L3NwYW4+IGdy b3VwIG9mPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAg ICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJs YmxvY2siPiAgIHNoYXJpbmcgYSBwYXJ0aWN1bGFyIHNlcnZpY2UuPC90ZD48dGQ+IDwvdGQ+PHRk IGNsYXNzPSJyYmxvY2siPiAgIHJvdXRlcnMgc2hhcmluZyBhIHBhcnRpY3VsYXIgc2VydmljZS48 L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRy Pjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPjwv dGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZh bGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkPjxhIG5hbWU9ImRpZmYwMDI3Ij48 L2E+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+ PC90ZD48dGQgY2xhc3M9ImxibG9jayI+ICAgRm9yIGV4YW1wbGUsIHNlcnZpY2UgcHJvdmlkZXIg bWlnaHQgZGVzaXJlIHRvIGVzdGFibGlzaCBmdWxsIG1lc2ggb2Y8L3RkPjx0ZD4gPC90ZD48dGQg Y2xhc3M9InJibG9jayI+ICAgRm9yIGV4YW1wbGUsIDxzcGFuIGNsYXNzPSJpbnNlcnQiPmE8L3Nw YW4+IHNlcnZpY2UgcHJvdmlkZXIgbWlnaHQgZGVzaXJlIHRvIGVzdGFibGlzaCA8c3BhbiBjbGFz cz0iaW5zZXJ0Ij5hPC9zcGFuPiBmdWxsIG1lc2g8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxp Z249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249 InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+ICAgTVBMUyBURSB0dW5uZWxzIGJldHdlZW4g YWxsIFBFIHJvdXRlcnMgaW4gdGhlIGFyZWEgb2YgTVBMUyBWUE48L3RkPjx0ZD4gPC90ZD48dGQg Y2xhc3M9InJibG9jayI+ICAgb2YgTVBMUyBURSB0dW5uZWxzIGJldHdlZW4gYWxsIFBFIHJvdXRl cnMgaW4gdGhlIGFyZWEgb2YgPHNwYW4gY2xhc3M9Imluc2VydCI+dGhlPC9zcGFuPiBNUExTIFZQ TjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8 dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ ICAgbmV0d29yay4gIE1hcmtpbmcgYWxsIFBFIHJvdXRlcnMgd2l0aCBhIHRhZyBhbmQgY29uZmln dXJpbmcgZGV2aWNlczwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIG5ldHdvcmsu ICBNYXJraW5nIGFsbCBQRSByb3V0ZXJzIHdpdGggYSB0YWcgYW5kIGNvbmZpZ3VyaW5nIGRldmlj ZXM8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAg PHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQi PiAgIHdpdGggYSBwb2xpY3kgdG8gY3JlYXRlIE1QTFMgVEUgdHVubmVscyB0byBhbGwgb3RoZXIg ZGV2aWNlczwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIHdpdGggYSBwb2xpY3kg dG8gY3JlYXRlIE1QTFMgVEUgdHVubmVscyB0byBhbGwgb3RoZXIgZGV2aWNlczwvdGQ+PHRkIGNs YXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNz PSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgYWR2ZXJ0aXNp bmcgdGhpcyB0YWcgd2lsbCBhdXRvbWF0ZSBtYWludGVuYW5jZSBvZiB0aGUgZnVsbCBtZXNoLjwv dGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIGFkdmVydGlzaW5nIHRoaXMgdGFnIHdp bGwgYXV0b21hdGUgbWFpbnRlbmFuY2Ugb2YgdGhlIGZ1bGwgbWVzaC48L3RkPjx0ZCBjbGFzcz0i bGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGlu ZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIFdoZW4gbmV3IFBFIHJv dXRlciBpcyBhZGRlZCB0byB0aGUgYXJlYSwgYWxsIG90aGVyIFBFIGRldmljZXMgd2lsbDwvdGQ+ PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIFdoZW4gbmV3IFBFIHJvdXRlciBpcyBhZGRl ZCB0byB0aGUgYXJlYSwgYWxsIG90aGVyIFBFIGRldmljZXMgd2lsbDwvdGQ+PHRkIGNsYXNzPSJs aW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5l bm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgb3BlbiBURSB0dW5uZWxz IHRvIGl0IHdpdGhvdXQgdGhlIG5lZWQgb2YgcmVjb25maWd1cmluZyB0aGVtLjwvdGQ+PHRkPiA8 L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIG9wZW4gVEUgdHVubmVscyB0byBpdCB3aXRob3V0IHRo ZSBuZWVkIG9mIHJlY29uZmlndXJpbmcgdGhlbS48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxp Z249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249 InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmln aHQiPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAg ICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVm dCI+NC4yLiAgRmFzdC1SZS1yb3V0aW5nIHBvbGljeTwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0i cmlnaHQiPjQuMi4gIEZhc3QtUmUtcm91dGluZyBwb2xpY3k8L3RkPjx0ZCBjbGFzcz0ibGluZW5v IiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2 YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFz cz0icmlnaHQiPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+ DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFz cz0ibGVmdCI+ICAgSW5jcmVhc2VkIGRlcGxveW1lbnQgb2YgTG9vcCBGcmVlIEFsdGVybmF0ZXMg KExGQSkgYXMgZGVmaW5lZCBpbjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIElu Y3JlYXNlZCBkZXBsb3ltZW50IG9mIExvb3AgRnJlZSBBbHRlcm5hdGVzIChMRkEpIGFzIGRlZmlu ZWQgaW48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAg ICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9Imxl ZnQiPiAgIFtSRkM1Mjg2XSBwb3NlcyBvcGVyYXRpb24gYW5kIG1hbmFnZW1lbnQgY2hhbGxlbmdl cy48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBbUkZDNTI4Nl0gcG9zZXMgb3Bl cmF0aW9uIGFuZCBtYW5hZ2VtZW50IGNoYWxsZW5nZXMuPC90ZD48dGQgY2xhc3M9ImxpbmVubyIg dmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFs aWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBbSS1ELmlldGYtcnRnd2ctbGZhLW1h bmFnZWFiaWxpdHldIHByb3Bvc2VzIHBvbGljaWVzIHdoaWNoLCB3aGVuPC90ZD48dGQ+IDwvdGQ+ PHRkIGNsYXNzPSJyaWdodCI+ICAgW0ktRC5pZXRmLXJ0Z3dnLWxmYS1tYW5hZ2VhYmlsaXR5XSBw cm9wb3NlcyBwb2xpY2llcyB3aGljaCwgd2hlbjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGln bj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0i dG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgaW1wbGVtZW50ZWQsIHdpbGwgZWFzZSBMRkEg b3BlcmF0aW9uIGNvbmNlcm5zLjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIGlt cGxlbWVudGVkLCB3aWxsIGVhc2UgTEZBIG9wZXJhdGlvbiBjb25jZXJucy48L3RkPjx0ZCBjbGFz cz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0i bGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPjwvdGQ+PHRkPiA8L3Rk Pjx0ZCBjbGFzcz0icmlnaHQiPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48 L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3Rk Pjx0ZCBjbGFzcz0ibGVmdCI+ICAgT25lIG9mIHRoZSBwcm9wb3NlZCByZWZpbmVtZW50cyBpcyB0 byBiZSBhYmxlIHRvIGdyb3VwIHRoZSBub2RlcyBpbjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0i cmlnaHQiPiAgIE9uZSBvZiB0aGUgcHJvcG9zZWQgcmVmaW5lbWVudHMgaXMgdG8gYmUgYWJsZSB0 byBncm91cCB0aGUgbm9kZXMgaW48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+ PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZD48YSBuYW1lPSJkaWZmMDAyOCI+PC9hPjwvdGQ+PC90 cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNs YXNzPSJsYmxvY2siPiAgIElHUCBkb21haW4gd2l0aCBhZG1pbmlzdHJhdGl2ZSB0YWdzIGFuZCBl bmdpbmVlciB0aGUgTEZBIGJhc2VkIG9uPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2si PiAgIDxzcGFuIGNsYXNzPSJpbnNlcnQiPmFuIDwvc3Bhbj5JR1AgZG9tYWluIHdpdGggYWRtaW5p c3RyYXRpdmUgdGFncyBhbmQgZW5naW5lZXIgdGhlIExGQSBiYXNlZCBvbjwvdGQ+PHRkIGNsYXNz PSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJs aW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgY29uZmlndXJlZCBw b2xpY2llcy48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBjb25maWd1cmVkIHBv bGljaWVzLjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQog ICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0i bGVmdCI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+PC90ZD48dGQgY2xhc3M9Imxp bmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVu byIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICAoYSkgIEFkbWluaXN0cmF0 aXZlIGxpbWl0YXRpb24gb2YgTEZBIHNjb3BlPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdo dCI+ICAgKGEpICBBZG1pbmlzdHJhdGl2ZSBsaW1pdGF0aW9uIG9mIExGQSBzY29wZTwvdGQ+PHRk IGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNs YXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+PC90ZD48dGQ+ IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0 b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3Ai PjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICAgICAgU2VydmljZSBwcm92aWRlciBhY2Nlc3MgaW5m cmFzdHJ1Y3R1cmUgaXMgZnJlcXVlbnRseSBkZXNpZ25lZCBpbjwvdGQ+PHRkPiA8L3RkPjx0ZCBj bGFzcz0icmlnaHQiPiAgICAgICBTZXJ2aWNlIHByb3ZpZGVyIGFjY2VzcyBpbmZyYXN0cnVjdHVy ZSBpcyBmcmVxdWVudGx5IGRlc2lnbmVkIGluPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWdu PSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQ+PGEgbmFtZT0iZGlmZjAwMjkiPjwvYT48 L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3Rk Pjx0ZCBjbGFzcz0ibGJsb2NrIj4gICAgICAgbGF5ZXJlZCBhcHByb2FjaCB3aXRoIGVhY2ggbGF5 ZXIgb2YgZGV2aWNlcyBzZXJ2aW5nIGRpZmZlcmVudDwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0i cmJsb2NrIj4gICAgICAgPHNwYW4gY2xhc3M9Imluc2VydCI+YSA8L3NwYW4+bGF5ZXJlZCBhcHBy b2FjaCB3aXRoIGVhY2ggbGF5ZXIgb2YgZGV2aWNlcyBzZXJ2aW5nIGRpZmZlcmVudDwvdGQ+PHRk IGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNs YXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgICAgIHB1 cnBvc2VzIGFuZCB0aHVzIGhhdmluZyBkaWZmZXJlbnQgaGFyZHdhcmUgY2FwYWJpbGl0aWVzIGFu ZDwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgICAgICBwdXJwb3NlcyBhbmQgdGh1 cyBoYXZpbmcgZGlmZmVyZW50IGhhcmR3YXJlIGNhcGFiaWxpdGllcyBhbmQ8L3RkPjx0ZCBjbGFz cz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0i bGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgICAgICBjb25maWd1 cmVkIHNvZnR3YXJlIGZlYXR1cmVzLiAgV2hlbiBMRkEgcmVwYWlyIHBhdGhzIGFyZSBiZWluZzwv dGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgICAgICBjb25maWd1cmVkIHNvZnR3YXJl IGZlYXR1cmVzLiAgV2hlbiBMRkEgcmVwYWlyIHBhdGhzIGFyZSBiZWluZzwvdGQ+PHRkIGNsYXNz PSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJs aW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgICAgIGNvbXB1dGVk LCBpdCBtYXkgYmUgZGVzaXJhYmxlIHRvIGV4Y2x1ZGUgZGV2aWNlcyBmcm9tIGJlaW5nPC90ZD48 dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgICAgIGNvbXB1dGVkLCBpdCBtYXkgYmUgZGVz aXJhYmxlIHRvIGV4Y2x1ZGUgZGV2aWNlcyBmcm9tIGJlaW5nPC90ZD48dGQgY2xhc3M9ImxpbmVu byIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIg dmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICAgICAgY29uc2lkZXJlZCBhcyBM RkEgY2FuZGlkYXRlcyBiYXNlZCBvbiB0aGVpciBsYXllci48L3RkPjx0ZD4gPC90ZD48dGQgY2xh c3M9InJpZ2h0Ij4gICAgICAgY29uc2lkZXJlZCBhcyBMRkEgY2FuZGlkYXRlcyBiYXNlZCBvbiB0 aGVpciBsYXllci48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3Ry Pg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xh c3M9ImxlZnQiPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPjwvdGQ+PHRkIGNsYXNz PSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJs aW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgICAgIEZvciBleGFt cGxlLCBpZiB0aGUgYWNjZXNzIGluZnJhc3RydWN0dXJlIGlzIGRpdmlkZWQgaW50byB0aGU8L3Rk Pjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICAgICAgRm9yIGV4YW1wbGUsIGlmIHRoZSBh Y2Nlc3MgaW5mcmFzdHJ1Y3R1cmUgaXMgZGl2aWRlZCBpbnRvIHRoZTwvdGQ+PHRkIGNsYXNzPSJs aW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5l bm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgICAgIEFjY2VzcywgRGlz dHJpYnV0aW9uIGFuZCBDb3JlIGxheWVycyBpdCBtYXkgYmUgZGVzaXJhYmxlIGZvciBhPC90ZD48 dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgICAgIEFjY2VzcywgRGlzdHJpYnV0aW9uIGFu ZCBDb3JlIGxheWVycyBpdCBtYXkgYmUgZGVzaXJhYmxlIGZvciBhPC90ZD48dGQgY2xhc3M9Imxp bmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVu byIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICAgICAgRGlzdHJpYnV0aW9u IGRldmljZSB0byBjb21wdXRlIExGQSBvbmx5IHZpYSBEaXN0cmlidXRpb24gb3IgQ29yZTwvdGQ+ PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgICAgICBEaXN0cmlidXRpb24gZGV2aWNlIHRv IGNvbXB1dGUgTEZBIG9ubHkgdmlhIERpc3RyaWJ1dGlvbiBvciBDb3JlPC90ZD48dGQgY2xhc3M9 ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9Imxp bmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICAgICAgZGV2aWNlcyBi dXQgbm90IHZpYSBBY2Nlc3MgZGV2aWNlcy4gIFRoaXMgbWF5IGJlIGR1ZSB0byBmZWF0dXJlczwv dGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgICAgICBkZXZpY2VzIGJ1dCBub3Qgdmlh IEFjY2VzcyBkZXZpY2VzLiAgVGhpcyBtYXkgYmUgZHVlIHRvIGZlYXR1cmVzPC90ZD48dGQgY2xh c3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQ+PGEgbmFt ZT0iZGlmZjAwMzAiPjwvYT48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8i IHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj4gICAgICAgZW5hYmxlZCBvbiBB Y2Nlc3Mgcm91dGVyczxzcGFuIGNsYXNzPSJkZWxldGUiPjs8L3NwYW4+IGR1ZSB0byBjYXBhY2l0 eSBsaW1pdGF0aW9ucyBvciBkdWUgdG88L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+ ICAgICAgIGVuYWJsZWQgb24gQWNjZXNzIHJvdXRlcnM8c3BhbiBjbGFzcz0iaW5zZXJ0Ij4sPC9z cGFuPiBkdWUgdG8gY2FwYWNpdHkgbGltaXRhdGlvbnMgb3IgZHVlIHRvPC90ZD48dGQgY2xhc3M9 ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9Imxp bmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICAgICAgdGhlIHNlY3Vy aXR5IHJlcXVpcmVtZW50cy4gIE1hbmFnaW5nIHN1Y2ggYSBwb2xpY3kgdmlhPC90ZD48dGQ+IDwv dGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgICAgIHRoZSBzZWN1cml0eSByZXF1aXJlbWVudHMuICBN YW5hZ2luZyBzdWNoIGEgcG9saWN5IHZpYTwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0i dG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9w Ij48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgICAgIGNvbmZpZ3VyYXRpb24gb2YgdGhlIHJvdXRl ciBjb21wdXRpbmcgTEZBIGlzIGN1bWJlcnNvbWUgYW5kIGVycm9yPC90ZD48dGQ+IDwvdGQ+PHRk IGNsYXNzPSJyaWdodCI+ICAgICAgIGNvbmZpZ3VyYXRpb24gb2YgdGhlIHJvdXRlciBjb21wdXRp bmcgTEZBIGlzIGN1bWJlcnNvbWUgYW5kIGVycm9yPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFs aWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWdu PSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICAgICAgcHJvbmUuPC90ZD48dGQ+IDwvdGQ+ PHRkIGNsYXNzPSJyaWdodCI+ICAgICAgIHByb25lLjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZh bGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGln bj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJy aWdodCI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAg ICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJs ZWZ0Ij4gICAgICAgV2l0aCB0aGUgTm9kZSBhZG1pbmlzdHJhdGl2ZSB0YWdzIGl0IGlzIHBvc3Np YmxlIHRvIGFzc2lnbiBhIHRhZzwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgICAg ICBXaXRoIHRoZSBOb2RlIGFkbWluaXN0cmF0aXZlIHRhZ3MgaXQgaXMgcG9zc2libGUgdG8gYXNz aWduIGEgdGFnPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4N CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNz PSJsZWZ0Ij4gICAgICAgdG8gZWFjaCBsYXllciBhbmQgaW1wbGVtZW50IExGQSBwb2xpY3kgb2Yg Y29tcHV0aW5nIExGQSByZXBhaXI8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICAg ICAgdG8gZWFjaCBsYXllciBhbmQgaW1wbGVtZW50IExGQSBwb2xpY3kgb2YgY29tcHV0aW5nIExG QSByZXBhaXI8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0K ICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9 ImxlZnQiPiAgICAgICBwYXRocyBvbmx5IHZpYSBuZWlnaGJvcnMgd2hpY2ggYWR2ZXJ0aXNlIHRo ZSBDb3JlIG9yIERpc3RyaWJ1dGlvbjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAg ICAgICBwYXRocyBvbmx5IHZpYSBuZWlnaGJvcnMgd2hpY2ggYWR2ZXJ0aXNlIHRoZSBDb3JlIG9y IERpc3RyaWJ1dGlvbjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwv dHI+DQogICAgICA8dHI+PHRkPjxhIG5hbWU9ImRpZmYwMDMxIj48L2E+PC90ZD48L3RyPg0KICAg ICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9Imxi bG9jayI+ICAgICAgIHRhZy4gIFRoaXMgcmVxdWlyZXMgbWluaW1hbCBwZXItbm9kZSBjb25maWd1 cmF0aW9uIGFuZCBuZXR3b3JrPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPiAgICAg ICB0YWcuICBUaGlzIHJlcXVpcmVzIG1pbmltYWwgcGVyLW5vZGUgY29uZmlndXJhdGlvbiBhbmQg PHNwYW4gY2xhc3M9Imluc2VydCI+dGhlPC9zcGFuPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZh bGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGln bj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj4gICAgICAgYXV0b21hdGljYWxseSBhZGFw dHMgd2hlbiBuZXcgbGlua3Mgb3Igcm91dGVycyBhcmUgYWRkZWQuPC90ZD48dGQ+IDwvdGQ+PHRk IGNsYXNzPSJyYmxvY2siPiAgICAgICBuZXR3b3JrIGF1dG9tYXRpY2FsbHkgYWRhcHRzIHdoZW4g bmV3IGxpbmtzIG9yIHJvdXRlcnMgYXJlIGFkZGVkLjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZh bGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGln bj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJy aWdodCI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAg ICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJs ZWZ0Ij4gICAoYikgIExGQSBjYWxjdWxhdGlvbiBvcHRpbWl6YXRpb248L3RkPjx0ZD4gPC90ZD48 dGQgY2xhc3M9InJpZ2h0Ij4gICAoYikgIExGQSBjYWxjdWxhdGlvbiBvcHRpbWl6YXRpb248L3Rk Pjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0 ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPjwvdGQ+ PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGln bj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0i dG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgICAgIENhbGN1bGF0aW9uIG9mIExGQSBwYXRo cyBtYXkgcmVxdWlyZSBzaWduaWZpY2FudCByZXNvdXJjZXMgb2YgdGhlPC90ZD48dGQ+IDwvdGQ+ PHRkIGNsYXNzPSJyaWdodCI+ICAgICAgIENhbGN1bGF0aW9uIG9mIExGQSBwYXRocyBtYXkgcmVx dWlyZSBzaWduaWZpY2FudCByZXNvdXJjZXMgb2YgdGhlPC90ZD48dGQgY2xhc3M9ImxpbmVubyIg dmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQ+PGEgbmFtZT0iZGlmZjAwMzIi PjwvYT48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9w Ij48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj4gICAgICAgcm91dGVyLiAgT25lIGV4ZWN1dGlvbiBv ZiA8c3BhbiBjbGFzcz0iZGVsZXRlIj5EaWprc3RyYTwvc3Bhbj4gYWxnb3JpdGhtIGlzIHJlcXVp cmVkIGZvciBlYWNoPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPiAgICAgICByb3V0 ZXIuICBPbmUgZXhlY3V0aW9uIG9mIDxzcGFuIGNsYXNzPSJpbnNlcnQiPkRpamtzdHJhJ3M8L3Nw YW4+IGFsZ29yaXRobSBpcyByZXF1aXJlZCBmb3I8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxp Z249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249 InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+ICAgICAgIG5laWdoYm9yIGVsaWdpYmxlIHRv IGJlY29tZSBuZXh0IGhvcCBvZiByZXBhaXIgcGF0aHMuICA8c3BhbiBjbGFzcz0iZGVsZXRlIj5U aHVzPC9zcGFuPiBhPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPiAgICAgICBlYWNo IG5laWdoYm9yIGVsaWdpYmxlIHRvIGJlY29tZSA8c3BhbiBjbGFzcz0iaW5zZXJ0Ij50aGU8L3Nw YW4+IG5leHQgaG9wIG9mIHJlcGFpciBwYXRocy48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxp Z249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249 InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+ICAgICAgIHJvdXRlciB3aXRoIGEgZmV3IGh1 bmRyZWRzIG9mIG5laWdoYm9ycyBtYXkgbmVlZCB0byBleGVjdXRlIHRoZTwvdGQ+PHRkPiA8L3Rk Pjx0ZCBjbGFzcz0icmJsb2NrIj4gICAgICAgPHNwYW4gY2xhc3M9Imluc2VydCI+VGh1cyw8L3Nw YW4+IGEgcm91dGVyIHdpdGggYSBmZXcgaHVuZHJlZHMgb2YgbmVpZ2hib3JzIG1heSBuZWVkIHRv PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0 cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2si PiAgICAgICBhbGdvcml0aG0gaHVuZHJlZHMgb2YgdGltZXMgYmVmb3JlIHRoZSBiZXN0IChvciBl dmVuIHZhbGlkKTwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj4gICAgICAgZXhlY3V0 ZSB0aGUgYWxnb3JpdGhtIGh1bmRyZWRzIG9mIHRpbWVzIGJlZm9yZSB0aGUgYmVzdCAob3IgZXZl bjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8 dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2Nr Ij4gICAgICAgcmVwYWlyIHBhdGggaXMgZm91bmQuICBNYW51YWxseSBleGNsdWRpbmcgZnJvbSB0 aGUgY2FsY3VsYXRpb248L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+ICAgICAgIHZh bGlkKSByZXBhaXIgcGF0aCBpcyBmb3VuZC4gIE1hbnVhbGx5IGV4Y2x1ZGluZyBmcm9tIHRoZTwv dGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+ PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj4g ICAgICAgbmVpZ2hib3JzIDxzcGFuIGNsYXNzPSJkZWxldGUiPndoaWNoPC9zcGFuPiBhcmUga25v d24gdG8gcHJvdmlkZSBubyB2YWxpZCBMRkEgKHN1Y2ggYXM8L3RkPjx0ZD4gPC90ZD48dGQgY2xh c3M9InJibG9jayI+ICAgICAgIGNhbGN1bGF0aW9uIG5laWdoYm9ycyA8c3BhbiBjbGFzcz0iaW5z ZXJ0Ij50aGF0PC9zcGFuPiBhcmUga25vd24gdG8gcHJvdmlkZSBubyB2YWxpZCBMRkE8L3RkPjx0 ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBj bGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+ICAgICAg IHNpbmdsZS1jb25uZWN0ZWQgcm91dGVycykgbWF5IHNpZ25pZmljYW50bHkgcmVkdWNlIG51bWJl ciBvZjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj4gICAgICAgKHN1Y2ggYXMgc2lu Z2xlLWNvbm5lY3RlZCByb3V0ZXJzKSBtYXkgc2lnbmlmaWNhbnRseSByZWR1Y2U8L3RkPjx0ZCBj bGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFz cz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+ICAgICAgIERp amtzdHJhIGFsZ29yaXRobSBydW5zLjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj4g ICAgICAgbnVtYmVyIG9mIERpamtzdHJhIGFsZ29yaXRobSBydW5zLjwvdGQ+PHRkIGNsYXNzPSJs aW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5l bm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+PC90ZD48dGQ+IDwvdGQ+PHRk IGNsYXNzPSJyaWdodCI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+ PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRk IGNsYXNzPSJsZWZ0Ij4gICAgICAgTEZBIGNhbGN1bGF0aW9uIHBvbGljeSBtYXkgYmUgY29uZmln dXJlZCBzbyB0aGF0IHJvdXRlcnM8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICAg ICAgTEZBIGNhbGN1bGF0aW9uIHBvbGljeSBtYXkgYmUgY29uZmlndXJlZCBzbyB0aGF0IHJvdXRl cnM8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAg PHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQi PiAgICAgICBhZHZlcnRpc2luZyBjZXJ0YWluIHRhZyB2YWx1ZSBhcmUgZXhjbHVkZWQgZnJvbSBM RkEgY2FsY3VsYXRpb248L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICAgICAgYWR2 ZXJ0aXNpbmcgY2VydGFpbiB0YWcgdmFsdWUgYXJlIGV4Y2x1ZGVkIGZyb20gTEZBIGNhbGN1bGF0 aW9uPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAg IDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0 Ij4gICAgICAgZXZlbiBpZiB0aGV5IGFyZSBvdGhlcndpc2Ugc3VpdGFibGUuPC90ZD48dGQ+IDwv dGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgICAgIGV2ZW4gaWYgdGhleSBhcmUgb3RoZXJ3aXNlIHN1 aXRhYmxlLjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQog ICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0i bGVmdCI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+PC90ZD48dGQgY2xhc3M9Imxp bmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVu byIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij40LjMuICBDb250cm9sbGluZyBS ZW1vdGUgTEZBIHR1bm5lbCB0ZXJtaW5hdGlvbjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmln aHQiPjQuMy4gIENvbnRyb2xsaW5nIFJlbW90ZSBMRkEgdHVubmVsIHRlcm1pbmF0aW9uPC90ZD48 dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQg Y2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij48L3RkPjx0 ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249 InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRv cCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIFtSRkM3NDkwXSBkZWZpbmVkIGEgbWV0aG9kIG9m IHR1bm5lbGxpbmcgdHJhZmZpYyBhZnRlciBjb25uZWN0ZWQgbGluazwvdGQ+PHRkPiA8L3RkPjx0 ZCBjbGFzcz0icmlnaHQiPiAgIFtSRkM3NDkwXSBkZWZpbmVkIGEgbWV0aG9kIG9mIHR1bm5lbGxp bmcgdHJhZmZpYyBhZnRlciBjb25uZWN0ZWQgbGluazwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZh bGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkPjxhIG5hbWU9ImRpZmYwMDMzIj48 L2E+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+ PC90ZD48dGQgY2xhc3M9ImxibG9jayI+ICAgZmFpbHVyZSB0byBleHRlbmQgdGhlIGJhc2ljIExG QSBjb3ZlcmFnZSBhbmQgYWxnb3JpdGhtIHRvIGZpbmQgdHVubmVsPC90ZD48dGQ+IDwvdGQ+PHRk IGNsYXNzPSJyYmxvY2siPiAgIGZhaWx1cmUgdG8gZXh0ZW5kIHRoZSBiYXNpYyBMRkEgY292ZXJh Z2UgYW5kIDxzcGFuIGNsYXNzPSJpbnNlcnQiPmFuPC9zcGFuPiBhbGdvcml0aG0gdG8gZmluZDwv dGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+ PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj4g ICB0YWlsLWVuZCByb3V0ZXJzIGZpdHRpbmcgTEZBIHJlcXVpcmVtZW50LiAgSW4gbW9zdCBjYXNl cyBwcm9wb3NlZDwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj4gICB0dW5uZWwgdGFp bC1lbmQgcm91dGVycyBmaXR0aW5nIExGQSByZXF1aXJlbWVudC4gIEluIG1vc3QgY2FzZXMgPHNw YW4gY2xhc3M9Imluc2VydCI+dGhlPC9zcGFuPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGln bj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0i dG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj4gICBhbGdvcml0aG0gZmluZHMgbW9yZSB0aGFu IG9uZSBjYW5kaWRhdGUgdGFpbC1lbmQgcm91dGVyLiAgSW4gPHNwYW4gY2xhc3M9ImRlbGV0ZSI+ cmVhbDwvc3Bhbj48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+ICAgcHJvcG9zZWQg YWxnb3JpdGhtIGZpbmRzIG1vcmUgdGhhbiBvbmUgY2FuZGlkYXRlIHRhaWwtZW5kIHJvdXRlci4g IEluPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAg IDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxv Y2siPjxzcGFuIGNsYXNzPSJkZWxldGUiPiAgIGxpZmU8L3NwYW4+IG5ldHdvcmsgaXQgbWF5IGJl IGRlc2lyYWJsZSB0byBleGNsdWRlIHNvbWUgbm9kZXMgZnJvbSB0aGUgbGlzdDwvdGQ+PHRkPiA8 L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj4gICA8c3BhbiBjbGFzcz0iaW5zZXJ0Ij5yZWFsLWxpZmU8 L3NwYW4+IG5ldHdvcmsgaXQgbWF5IGJlIGRlc2lyYWJsZSB0byBleGNsdWRlIHNvbWUgbm9kZXMg ZnJvbSB0aGU8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0K ICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9 ImxibG9jayI+ICAgb2YgY2FuZGlkYXRlcyBiYXNlZCBvbiB0aGUgbG9jYWwgcG9saWN5LiAgVGhp cyBtYXkgYmUgZWl0aGVyIGR1ZSB0bzwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj4g ICBsaXN0IG9mIGNhbmRpZGF0ZXMgYmFzZWQgb24gdGhlIGxvY2FsIHBvbGljeS4gIFRoaXMgbWF5 IGJlIGVpdGhlciBkdWU8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48 L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQg Y2xhc3M9ImxibG9jayI+ICAga25vd24gbGltaXRhdGlvbnMgb2YgdGhlIG5vZGUgKHRoZSByb3V0 ZXIgZG9lcyBub3QgYWNjZXB0IHRhcmdldGVkPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxv Y2siPiAgIHRvIGtub3duIGxpbWl0YXRpb25zIG9mIHRoZSBub2RlICh0aGUgcm91dGVyIGRvZXMg bm90IGFjY2VwdCA8c3BhbiBjbGFzcz0iaW5zZXJ0Ij50aGU8L3NwYW4+PC90ZD48dGQgY2xhc3M9 ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9Imxp bmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPiAgIExEUCBzZXNzaW9u cyByZXF1aXJlZCB0byBpbXBsZW1lbnQgUmVtb3RlIExGQSB0dW5uZWxsaW5nKSBvciBkdWUgdG88 L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+ICAgdGFyZ2V0ZWQgTERQIHNlc3Npb25z IHJlcXVpcmVkIHRvIGltcGxlbWVudCBSZW1vdGUgTEZBIHR1bm5lbGxpbmcpIG9yPC90ZD48dGQg Y2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xh c3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPiAgIGFkbWlu aXN0cmF0aXZlIHJlcXVpcmVtZW50cyAoZm9yIGV4YW1wbGUsIGl0IG1heSBiZSBkZXNpcmFibGUg dG88L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+ICAgZHVlIHRvIGFkbWluaXN0cmF0 aXZlIHJlcXVpcmVtZW50cyAoZm9yIGV4YW1wbGUsIGl0IG1heSBiZSBkZXNpcmFibGU8L3RkPjx0 ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBj bGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+ICAgY2hv b3NlIHRhaWwtZW5kIHJvdXRlciBhbW9uZyBjby1sb2NhdGVkIGRldmljZXMpLjwvdGQ+PHRkPiA8 L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj4gICB0byBjaG9vc2UgPHNwYW4gY2xhc3M9Imluc2VydCI+ dGhlPC9zcGFuPiB0YWlsLWVuZCByb3V0ZXIgYW1vbmcgY28tbG9jYXRlZCBkZXZpY2VzKS48L3Rk Pjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0 ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPjwvdGQ+ PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGln bj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkPjxhIG5hbWU9ImRpZmYwMDM0Ij48L2E+ PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90 ZD48dGQgY2xhc3M9ImxibG9jayI+ICAgVGhlIE5vZGUgYWRtaW5pc3RyYXRpdmUgdGFnIGRlbGl2 ZXJzIHNpbXBsZSBhbmQgc2NhbGFibGUgc29sdXRpb24uPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNz PSJyYmxvY2siPiAgIFRoZSBOb2RlIGFkbWluaXN0cmF0aXZlIHRhZyBkZWxpdmVycyA8c3BhbiBj bGFzcz0iaW5zZXJ0Ij5hIDwvc3Bhbj5zaW1wbGUgYW5kIHNjYWxhYmxlIHNvbHV0aW9uLjwvdGQ+ PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRk IGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgUmVt b3RlIExGQSBjYW4gYmUgY29uZmlndXJlZCB3aXRoIGEgcG9saWN5IHRvIGFjY2VwdCBkdXJpbmcg dGhlIHRhaWwtPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgUmVtb3RlIExGQSBj YW4gYmUgY29uZmlndXJlZCB3aXRoIGEgcG9saWN5IHRvIGFjY2VwdCBkdXJpbmcgdGhlIHRhaWwt PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0 cj48dGQ+PGEgbmFtZT0iZGlmZjAwMzUiPjwvYT48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNs YXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj4gICBlbmQg cm91dGVyIGNhbGN1bGF0aW9uIGFzIGNhbmRpZGF0ZXMgb25seSByb3V0ZXJzIGFkdmVydGlzaW5n IGNlcnRhaW48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+ICAgZW5kIHJvdXRlciBj YWxjdWxhdGlvbiBhcyBjYW5kaWRhdGVzIG9ubHkgcm91dGVycyBhZHZlcnRpc2luZyA8c3BhbiBj bGFzcz0iaW5zZXJ0Ij5hPC9zcGFuPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9w Ij48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48 L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj4gICB0YWcuICBUYWdnaW5nIHJvdXRlcnMgYWxsb3dzIHRv IGJvdGggZXhjbHVkZSBub2RlcyBub3QgY2FwYWJsZSBvZjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFz cz0icmJsb2NrIj4gICBjZXJ0YWluIHRhZy4gIFRhZ2dpbmcgcm91dGVycyBhbGxvd3MgdG8gYm90 aCBleGNsdWRlIG5vZGVzIG5vdDwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48 L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3Rk Pjx0ZCBjbGFzcz0ibGJsb2NrIj4gICBzZXJ2aW5nIGFzIFJlbW90ZSBMRkEgdHVubmVsIHRhaWwt ZW5kcyBhbmQgdG8gZGVmaW5lIGEgcmVnaW9uIGZyb208L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9 InJibG9jayI+ICAgY2FwYWJsZSBvZiBzZXJ2aW5nIGFzIFJlbW90ZSBMRkEgdHVubmVsIHRhaWwt ZW5kcyBhbmQgdG8gZGVmaW5lIGE8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+ PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90 ZD48dGQgY2xhc3M9ImxibG9jayI+ICAgd2hpY2ggdGFpbC1lbmQgcm91dGVyIG11c3QgYmUgc2Vs ZWN0ZWQuPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPiAgIHJlZ2lvbiBmcm9tIHdo aWNoIHRhaWwtZW5kIHJvdXRlciBtdXN0IGJlIHNlbGVjdGVkLjwvdGQ+PHRkIGNsYXNzPSJsaW5l bm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8i IHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNs YXNzPSJyaWdodCI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90 cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNs YXNzPSJsZWZ0Ij40LjQuICBNb2JpbGUgYmFjay1oYXVsIG5ldHdvcmsgc2VydmljZSBkZXBsb3lt ZW50PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+NC40LiAgTW9iaWxlIGJhY2staGF1 bCBuZXR3b3JrIHNlcnZpY2UgZGVwbG95bWVudDwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGln bj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0i dG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdo dCI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAg IDx0cj48dGQ+PGEgbmFtZT0iZGlmZjAwMzYiPjwvYT48L3RkPjwvdHI+DQogICAgICA8dHI+PHRk IGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj4gICA8 c3BhbiBjbGFzcz0iZGVsZXRlIj5UaGUgdG9wb2xvZ3kgb2YgbW9iaWxlPC9zcGFuPiBiYWNrLWhh dWwgPHNwYW4gY2xhc3M9ImRlbGV0ZSI+bmV0d29yazwvc3Bhbj4gdXN1YWxseSA8c3BhbiBjbGFz cz0iZGVsZXRlIj5hZG9wdHM8L3NwYW4+IHJpbmcgdG9wb2xvZ3k8L3RkPjx0ZD4gPC90ZD48dGQg Y2xhc3M9InJibG9jayI+ICAgPHNwYW4gY2xhc3M9Imluc2VydCI+TW9iaWxlPC9zcGFuPiBiYWNr LWhhdWwgPHNwYW4gY2xhc3M9Imluc2VydCI+bmV0d29ya3M8L3NwYW4+IHVzdWFsbHkgPHNwYW4g Y2xhc3M9Imluc2VydCI+YWRvcHQgYTwvc3Bhbj4gcmluZyB0b3BvbG9neSB0byBzYXZlIGZpYnJl PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0 cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2si PiAgIHRvIHNhdmUgZmlicmUgPHNwYW4gY2xhc3M9ImRlbGV0ZSI+cmVzb3VyY2UgYW5kPC9zcGFu PiBpdCBpcyBkaXZpZGVkIGludG8gdGhlIGFnZ3JlZ2F0ZSBuZXR3b3JrPC90ZD48dGQ+IDwvdGQ+ PHRkIGNsYXNzPSJyYmxvY2siPiAgIDxzcGFuIGNsYXNzPSJpbnNlcnQiPnJlc291cmNlczs8L3Nw YW4+IGl0IGlzIDxzcGFuIGNsYXNzPSJpbnNlcnQiPnVzdWFsbHk8L3NwYW4+IGRpdmlkZWQgaW50 byB0aGUgYWdncmVnYXRlIG5ldHdvcmsgYW5kIHRoZTwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZh bGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGln bj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj4gICBhbmQgdGhlIGFjY2VzcyBuZXR3b3Jr LiAgQ2VsbCBTaXRlIEdhdGV3YXlzKENTR3MpIGNvbm5lY3RzIHRoZTwvdGQ+PHRkPiA8L3RkPjx0 ZCBjbGFzcz0icmJsb2NrIj4gICBhY2Nlc3MgbmV0d29yay4gIENlbGwgU2l0ZSBHYXRld2F5cyhD U0dzKSBjb25uZWN0cyB0aGUgZU5vZGVCcyBhbmQ8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxp Z249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249 InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+ICAgZU5vZGVCcyBhbmQgUk5DKFJhZGlvIE5l dHdvcmsgQ29udHJvbGxlcikgU2l0ZSBHYXRld2F5cyhSU0dzKTwvdGQ+PHRkPiA8L3RkPjx0ZCBj bGFzcz0icmJsb2NrIj4gICBSTkMoUmFkaW8gTmV0d29yayBDb250cm9sbGVyKSBTaXRlIEdhdGV3 YXlzKFJTR3MpIGNvbm5lY3RzIHRoZSBSTkNzLjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGln bj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0i dG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj4gICBjb25uZWN0cyB0aGUgUk5Dcy4gIFRoZSBt b2JpbGUgdHJhZmZpYyBpcyB0cmFuc3BvcnRlZCBmcm9tIENTR3MgdG88L3RkPjx0ZD4gPC90ZD48 dGQgY2xhc3M9InJibG9jayI+ICAgVGhlIG1vYmlsZSB0cmFmZmljIGlzIHRyYW5zcG9ydGVkIGZy b20gQ1NHcyB0byBSU0dzLiAgVGhlIG5ldHdvcms8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxp Z249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249 InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+ICAgUlNHcy4gIFRoZSBuZXR3b3JrIHRha2Vz IGEgdHlwaWNhbCBhZ2dyZWdhdGUgdHJhZmZpYyBtb2RlbCB0aGF0IG1vcmU8L3RkPjx0ZD4gPC90 ZD48dGQgY2xhc3M9InJibG9jayI+ICAgdGFrZXMgYSB0eXBpY2FsIGFnZ3JlZ2F0ZSB0cmFmZmlj IG1vZGVsIHRoYXQgbW9yZSB0aGFuIG9uZSBhY2Nlc3M8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2 YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxp Z249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+ICAgdGhhbiBvbmUgYWNjZXNzIHJpbmdz IHdpbGwgYXR0YWNoIHRvIG9uZSBwYWlyIG9mIGFnZ3JlZ2F0ZSBzaXRlPC90ZD48dGQ+IDwvdGQ+ PHRkIGNsYXNzPSJyYmxvY2siPiAgIHJpbmdzIHdpbGwgYXR0YWNoIHRvIG9uZSBwYWlyIG9mIGFn Z3JlZ2F0ZSBzaXRlIGdhdGV3YXlzKEFTR3MpIGFuZDwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZh bGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGln bj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj4gICBnYXRld2F5cyhBU0dzKSBhbmQgbW9y ZSB0aGFuIG9uZSBhZ2dyZWdhdGUgcmluZ3Mgd2lsbCBhdHRhY2ggdG8gb25lPC90ZD48dGQ+IDwv dGQ+PHRkIGNsYXNzPSJyYmxvY2siPiAgIG1vcmUgdGhhbiBvbmUgYWdncmVnYXRlIHJpbmdzIHdp bGwgYXR0YWNoIHRvIG9uZSBwYWlyIG9mIFJTR3MuPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFs aWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWdu PSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPiAgIHBhaXIgb2YgUlNHcy48L3RkPjx0ZD4g PC90ZD48dGQgY2xhc3M9InJibG9jayI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0 b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3Ai PjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij48 L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRy Pjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAg ICAgICAgICAgICAgICAgICAgIC0tLS0tLS0tLS0tLS0tLS08L3RkPjx0ZD4gPC90ZD48dGQgY2xh c3M9InJpZ2h0Ij4gICAgICAgICAgICAgICAgICAgICAtLS0tLS0tLS0tLS0tLS0tPC90ZD48dGQg Y2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xh c3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICAgICAgICAg ICAgICAgICAgIC8gICAgICAgICAgICAgICAgXDwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmln aHQiPiAgICAgICAgICAgICAgICAgICAgLyAgICAgICAgICAgICAgICBcPC90ZD48dGQgY2xhc3M9 ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9Imxp bmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICAgICAgICAgICAgICAg ICAgLyAgICAgICAgICAgICAgICAgIFw8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4g ICAgICAgICAgICAgICAgICAgLyAgICAgICAgICAgICAgICAgIFw8L3RkPjx0ZCBjbGFzcz0ibGlu ZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5v IiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgICAgICAgICAgICAgICAgIC8g ICAgICAgICAgICAgICAgICAgIFw8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICAg ICAgICAgICAgICAgICAvICAgICAgICAgICAgICAgICAgICBcPC90ZD48dGQgY2xhc3M9ImxpbmVu byIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIg dmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICAgICstLS0tLS0rICAgKy0tLS0r ICAgIEFjY2VzcyAgICAgKy0tLS0rPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAg ICArLS0tLS0tKyAgICstLS0tKyAgICBBY2Nlc3MgICAgICstLS0tKzwvdGQ+PHRkIGNsYXNzPSJs aW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5l bm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgICB8ZU5vZGVCfC0tLXxD U0cxfCAgICBSaW5nIDEgICAgIHxBU0cxfC0tLS0tLS0tLS0tLTwvdGQ+PHRkPiA8L3RkPjx0ZCBj bGFzcz0icmlnaHQiPiAgICAgfGVOb2RlQnwtLS18Q1NHMXwgICAgUmluZyAxICAgICB8QVNHMXwt LS0tLS0tLS0tLS08L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3Ry Pg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xh c3M9ImxlZnQiPiAgICAgKy0tLS0tLSsgICArLS0tLSsgICAgICAgICAgICAgICArLS0tLSsgICAg ICAgICAgICBcPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgICArLS0tLS0tKyAg ICstLS0tKyAgICAgICAgICAgICAgICstLS0tKyAgICAgICAgICAgIFw8L3RkPjx0ZCBjbGFzcz0i bGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGlu ZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgICAgICAgICAgICAgICAg IFwgICAgICAgICAgICAgICAgICAgIC8gICAgICAgICAgICAgICAgXDwvdGQ+PHRkPiA8L3RkPjx0 ZCBjbGFzcz0icmlnaHQiPiAgICAgICAgICAgICAgICAgIFwgICAgICAgICAgICAgICAgICAgIC8g ICAgICAgICAgICAgICAgXDwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3Rk PjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0 ZCBjbGFzcz0ibGVmdCI+ICAgICAgICAgICAgICAgICAgIFwgICAgICAgICAgICAgICAgICAvICAg ICAgICAgICAgICAgICAgKy0tLS0rICAgICstLS0rPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJy aWdodCI+ICAgICAgICAgICAgICAgICAgIFwgICAgICAgICAgICAgICAgICAvICAgICAgICAgICAg ICAgICAgKy0tLS0rICAgICstLS0rPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3Ai PjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9 ImxlZnQiPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPjwvdGQ+PHRkIGNsYXNzPSJs aW5lbm8iPjwvdGQ+PC90cj4NCiAgICAgIDx0ciBiZ2NvbG9yPSJncmF5Ij48dGQ+PC90ZD48dGg+ PGEgbmFtZT0icGFydC1sNSI+PHNtYWxsPnNraXBwaW5nIHRvIGNoYW5nZSBhdDwvc21hbGw+PGVt PiBwYWdlIDgsIGxpbmUgMzg8L2VtPjwvYT48L3RoPjx0aD4gPC90aD48dGg+PGEgbmFtZT0icGFy dC1yNSI+PHNtYWxsPnNraXBwaW5nIHRvIGNoYW5nZSBhdDwvc21hbGw+PGVtPiBwYWdlIDksIGxp bmUgMzM8L2VtPjwvYT48L3RoPjx0ZD48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJs aW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgICArLS0tLS0tKyAg ICstLS0tKyAgICAgICAgICAgICAgICArLS0tLSs8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJp Z2h0Ij4gICAgICstLS0tLS0rICAgKy0tLS0rICAgICAgICAgICAgICAgICstLS0tKzwvdGQ+PHRk IGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNs YXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgICAgICAg ICAgICAgICBcICAgICAgICAgICAgICAgICAgICAgLzwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0i cmlnaHQiPiAgICAgICAgICAgICAgICAgXCAgICAgICAgICAgICAgICAgICAgIC88L3RkPjx0ZCBj bGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFz cz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgICAgICAgICAg ICAgICAgIFwgICAgICAgICAgICAgICAgICAgLzwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmln aHQiPiAgICAgICAgICAgICAgICAgIFwgICAgICAgICAgICAgICAgICAgLzwvdGQ+PHRkIGNsYXNz PSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJs aW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgICAgICAgICAgICAg ICAgIFwgICAgICAgICAgICAgICAgIC88L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4g ICAgICAgICAgICAgICAgICAgXCAgICAgICAgICAgICAgICAgLzwvdGQ+PHRkIGNsYXNzPSJsaW5l bm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8i IHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgICAgICAgICAgICAgICAgICAt LS0tLS0tLS0tLS0tLS0tLTwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgICAgICAg ICAgICAgICAgICAgLS0tLS0tLS0tLS0tLS0tLS08L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxp Z249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249 InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmln aHQiPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAg ICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVm dCI+ICAgICAgICAgICAgICAgICAgICAgRmlndXJlIDI6IE1vYmlsZSBCYWNraGF1bCBOZXR3b3Jr PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgICAgICAgICAgICAgICAgICAgRmln dXJlIDI6IE1vYmlsZSBCYWNraGF1bCBOZXR3b3JrPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFs aWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWdu PSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJp Z2h0Ij48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAg ICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9Imxl ZnQiPiAgIEEgdHlwaWNhbCBtb2JpbGUgYmFjay1oYXVsIG5ldHdvcmsgd2l0aCBhY2Nlc3Mgcmlu Z3MgYW5kIGFnZ3JlZ2F0ZTwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIEEgdHlw aWNhbCBtb2JpbGUgYmFjay1oYXVsIG5ldHdvcmsgd2l0aCBhY2Nlc3MgcmluZ3MgYW5kIGFnZ3Jl Z2F0ZTwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAg ICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVm dCI+ICAgbGlua3MgaXMgc2hvd24gaW4gZmlndXJlIGFib3ZlLiAgVGhlIG1vYmlsZSBiYWNrLWhh dWwgbmV0d29ya3MgZGVwbG95PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgbGlu a3MgaXMgc2hvd24gaW4gZmlndXJlIGFib3ZlLiAgVGhlIG1vYmlsZSBiYWNrLWhhdWwgbmV0d29y a3MgZGVwbG95PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4N CiAgICAgIDx0cj48dGQ+PGEgbmFtZT0iZGlmZjAwMzciPjwvYT48L3RkPjwvdHI+DQogICAgICA8 dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2Nr Ij4gICB0cmFmZmljIGVuZ2luZWVyaW5nIGR1ZSB0byA8c3BhbiBjbGFzcz0iZGVsZXRlIj50aGU8 L3NwYW4+IHN0cmljdCBTZXJ2aWNlIExldmVsIEFncmVlbWVudHMoU0xBKS48L3RkPjx0ZD4gPC90 ZD48dGQgY2xhc3M9InJibG9jayI+ICAgdHJhZmZpYyBlbmdpbmVlcmluZyBkdWUgdG8gc3RyaWN0 IFNlcnZpY2UgTGV2ZWwgQWdyZWVtZW50cyhTTEEpLiAgVGhlPC90ZD48dGQgY2xhc3M9ImxpbmVu byIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIg dmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPiAgIFRoZSA8c3BhbiBjbGFzcz0i ZGVsZXRlIj5URTwvc3Bhbj4gcGF0aHMgbWF5IGhhdmUgYWRkaXRpb25hbCBjb25zdHJhaW50cyB0 byBhdm9pZCBwYXNzaW5nIHZpYTwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj4gICA8 c3BhbiBjbGFzcz0iaW5zZXJ0Ij5UcmFmZmljIEVuZ2luZWVyaW5nKFRFKTwvc3Bhbj4gcGF0aHMg bWF5IGhhdmUgYWRkaXRpb25hbCBjb25zdHJhaW50cyB0bzwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8i IHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZh bGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj4gICBkaWZmZXJlbnQgYWNjZXNzIHJp bmdzIG9yIHRvIGdldCBjb21wbGV0ZWx5IGRpc2pvaW50IGJhY2t1cCBURSBwYXRocy48L3RkPjx0 ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+ICAgYXZvaWQgcGFzc2luZyB2aWEgZGlmZmVyZW50 IGFjY2VzcyByaW5ncyBvciB0byBnZXQgY29tcGxldGVseTwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8i IHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZh bGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj4gICBUaGUgbW9iaWxlIGJhY2staGF1 bCBuZXR3b3JrcyB0b3dhcmRzIHRoZSBhY2Nlc3Mgc2lkZSBjaGFuZ2U8L3RkPjx0ZD4gPC90ZD48 dGQgY2xhc3M9InJibG9jayI+ICAgZGlzam9pbnQgYmFja3VwIFRFIHBhdGhzLiAgVGhlIG1vYmls ZSBiYWNrLWhhdWwgbmV0d29ya3MgdG93YXJkcyB0aGU8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2 YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxp Z249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+ICAgZnJlcXVlbnRseSBkdWUgdG8gdGhl IGdyb3dpbmcgbW9iaWxlIHRyYWZmaWMgYW5kIGFkZGl0aW9uIG9mIG5ldzwvdGQ+PHRkPiA8L3Rk Pjx0ZCBjbGFzcz0icmJsb2NrIj4gICBhY2Nlc3Mgc2lkZSBjaGFuZ2UgZnJlcXVlbnRseSBkdWUg dG8gdGhlIGdyb3dpbmcgbW9iaWxlIHRyYWZmaWMgYW5kPC90ZD48dGQgY2xhc3M9ImxpbmVubyIg dmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFs aWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPiAgIDxzcGFuIGNsYXNzPSJkZWxldGUi PmVOb2RlQnMuPC9zcGFuPiAgSXQncyBjb21wbGV4IHRvIHNhdGlzZnkgdGhlIHJlcXVpcmVtZW50 cyB1c2luZyBjb3N0LCBsaW5rPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPiAgIGFk ZGl0aW9uIG9mIG5ldyA8c3BhbiBjbGFzcz0iaW5zZXJ0Ij5MVEUgRXZvbHZlZCBOb2RlQnMgKGVO b2RlQikuPC9zcGFuPiAgSXQncyBjb21wbGV4IHRvIHNhdGlzZnk8L3RkPjx0ZCBjbGFzcz0ibGlu ZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5v IiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+ICAgY29sb3Igb3IgZXhwbGlj aXQgcGF0aCBjb25maWd1cmF0aW9ucy4gIFRoZSBub2RlIGFkbWluaXN0cmF0aXZlIHRhZzwvdGQ+ PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj4gICB0aGUgcmVxdWlyZW1lbnRzIHVzaW5nIGNv c3QsIGxpbmsgY29sb3Igb3IgZXhwbGljaXQgcGF0aDwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZh bGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGln bj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj4gICBkZWZpbmVkIGluIHRoaXMgZG9jdW1l bnQgY2FuIGJlIGVmZmVjdGl2ZWx5IHVzZWQgdG8gc29sdmUgdGhlIHByb2JsZW08L3RkPjx0ZD4g PC90ZD48dGQgY2xhc3M9InJibG9jayI+ICAgY29uZmlndXJhdGlvbnMuICBUaGUgbm9kZSBhZG1p bmlzdHJhdGl2ZSB0YWcgZGVmaW5lZCBpbiB0aGlzIGRvY3VtZW50PC90ZD48dGQgY2xhc3M9Imxp bmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVu byIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPiAgIGZvciBtb2JpbGUgYmFj ay1oYXVsIG5ldHdvcmtzLiAgVGhlIG5vZGVzIGluIGRpZmZlcmVudCByaW5ncyBjYW4gYmU8L3Rk Pjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+ICAgY2FuIGJlIGVmZmVjdGl2ZWx5IHVzZWQg dG8gc29sdmUgdGhlIHByb2JsZW0gZm9yIG1vYmlsZSBiYWNrLWhhdWw8L3RkPjx0ZCBjbGFzcz0i bGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGlu ZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+ICAgYXNzaWduZWQgd2l0 aCBzcGVjaWZpYyB0YWdzLiAgVEUgcGF0aCBjb21wdXRhdGlvbiBjYW4gYmUgZW5oYW5jZWQgdG88 L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+ICAgbmV0d29ya3MuICBUaGUgbm9kZXMg aW4gZGlmZmVyZW50IHJpbmdzIGNhbiBiZSBhc3NpZ25lZCB3aXRoIHNwZWNpZmljPC90ZD48dGQg Y2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xh c3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPiAgIGNvbnNp ZGVyIGFkZGl0aW9uYWwgY29uc3RyYWludHMgYmFzZWQgb24gbm9kZSBhZG1pbmlzdHJhdGl2ZSB0 YWdzLjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj4gICB0YWdzLiAgVEUgcGF0aCBj b21wdXRhdGlvbiBjYW4gYmUgZW5oYW5jZWQgdG8gY29uc2lkZXIgYWRkaXRpb25hbDwvdGQ+PHRk IGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNs YXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48L3RkPjx0 ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+ICAgY29uc3RyYWludHMgYmFzZWQgb24gbm9kZSBh ZG1pbmlzdHJhdGl2ZSB0YWdzLjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48 L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3Rk Pjx0ZCBjbGFzcz0ibGVmdCI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+PC90ZD48 dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQg Y2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij40LjUuICBF eHBsaWNpdCByb3V0aW5nIHBvbGljeTwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPjQu NS4gIEV4cGxpY2l0IHJvdXRpbmcgcG9saWN5PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWdu PSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0 b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0 Ij48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAg PHRyPjx0ZD48YSBuYW1lPSJkaWZmMDAzOCI+PC9hPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQg Y2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPiAgIDxz cGFuIGNsYXNzPSJkZWxldGUiPlA8L3NwYW4+YXJ0aWFsbHkgbWVzaGVkIG5ldHdvcmsgcHJvdmlk ZXMgbXVsdGlwbGUgcGF0aHMgYmV0d2VlbiBhbnkgdHdvPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNz PSJyYmxvY2siPiAgIDxzcGFuIGNsYXNzPSJpbnNlcnQiPkEgcDwvc3Bhbj5hcnRpYWxseSBtZXNo ZWQgbmV0d29yayBwcm92aWRlcyBtdWx0aXBsZSBwYXRocyBiZXR3ZWVuIGFueSB0d288L3RkPjx0 ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBj bGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIG5vZGVz IGluIHRoZSBuZXR3b3JrLiAgSW4gYSBkYXRhIGNlbnRyZSBlbnZpcm9ubWVudCwgdGhlIHRvcG9s b2d5IGlzPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgbm9kZXMgaW4gdGhlIG5l dHdvcmsuICBJbiBhIGRhdGEgY2VudHJlIGVudmlyb25tZW50LCB0aGUgdG9wb2xvZ3kgaXM8L3Rk Pjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0 ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIHVz dWFsbHkgaGlnaGx5IHN5bW1ldHJpYyB3aXRoIG1hbnkvYWxsIHBhdGhzIGhhdmluZyBlcXVhbCBj b3N0LiAgSW4gYTwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIHVzdWFsbHkgaGln aGx5IHN5bW1ldHJpYyB3aXRoIG1hbnkvYWxsIHBhdGhzIGhhdmluZyBlcXVhbCBjb3N0LiAgSW4g YTwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8 dHI+PHRkPjxhIG5hbWU9ImRpZmYwMDM5Ij48L2E+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBj bGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+ICAgbG9u ZyBkaXN0YW5jZSBuZXR3b3JrLCB0aGlzIGlzIHVzdWFsbHkgbGVzcyB0aGUgPHNwYW4gY2xhc3M9 ImRlbGV0ZSI+Y2FzZTwvc3Bhbj4gZm9yIGEgdmFyaWV0eSBvZjwvdGQ+PHRkPiA8L3RkPjx0ZCBj bGFzcz0icmJsb2NrIj4gICBsb25nIGRpc3RhbmNlIG5ldHdvcmssIHRoaXMgaXMgdXN1YWxseSBs ZXNzIHRoZSA8c3BhbiBjbGFzcz0iaW5zZXJ0Ij5jYXNlLDwvc3Bhbj4gZm9yIGEgdmFyaWV0eTwv dGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+ PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj4g ICByZWFzb25zIChlLmcuIGhpc3RvcmljLCBmaWJyZSBhdmFpbGFiaWxpdHkgY29uc3RyYWludHMs IGRpZmZlcmVudDwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj4gICBvZiByZWFzb25z IChlLmcuIGhpc3RvcmljLCBmaWJyZSBhdmFpbGFiaWxpdHkgY29uc3RyYWludHMsIGRpZmZlcmVu dDwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8 dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ ICAgZGlzdGFuY2VzIGJldHdlZW4gdHJhbnNpdCBub2RlcywgZGlmZmVyZW50IHJvbGVzIC4uLiku ICBIZW5jZSBiZXR3ZWVuPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgZGlzdGFu Y2VzIGJldHdlZW4gdHJhbnNpdCBub2RlcywgZGlmZmVyZW50IHJvbGVzIC4uLikuICBIZW5jZSBi ZXR3ZWVuPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAg ICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJs ZWZ0Ij4gICBhIGdpdmVuIHNvdXJjZSBhbmQgZGVzdGluYXRpb24sIGEgcGF0aCBpcyB0eXBpY2Fs bHkgcHJlZmVycmVkIG92ZXI8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBhIGdp dmVuIHNvdXJjZSBhbmQgZGVzdGluYXRpb24sIGEgcGF0aCBpcyB0eXBpY2FsbHkgcHJlZmVycmVk IG92ZXI8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAg ICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9Imxl ZnQiPiAgIHRoZSBvdGhlcnMsIHdoaWxlIGJldHdlZW4gdGhlIHNhbWUgc291cmNlIGFuZCBhbm90 aGVyIGRlc3RpbmF0aW9uLCBhPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgdGhl IG90aGVycywgd2hpbGUgYmV0d2VlbiB0aGUgc2FtZSBzb3VyY2UgYW5kIGFub3RoZXIgZGVzdGlu YXRpb24sIGE8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0K ICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9 ImxlZnQiPiAgIGRpZmZlcmVudCBwYXRoIG1heSBiZSBwcmVmZXJyZWQuPC90ZD48dGQ+IDwvdGQ+ PHRkIGNsYXNzPSJyaWdodCI+ICAgZGlmZmVyZW50IHBhdGggbWF5IGJlIHByZWZlcnJlZC48L3Rk Pjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0 ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPjwvdGQ+ PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGln bj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkPjxhIG5hbWU9ImRpZmYwMDQwIj48L2E+ PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90 ZD48dGQgY2xhc3M9ImxibG9jayI+ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIDxzcGFu IGNsYXNzPSJkZWxldGUiPistLS0tLS0tLS0tLS0tLS0tLS0tLSs8L3NwYW4+PC90ZD48dGQ+IDwv dGQ+PHRkIGNsYXNzPSJyYmxvY2siPiAgICAgICAgPHNwYW4gY2xhc3M9Imluc2VydCI+Ky0tLS0t LS0tLS0tLS0tLS0tLS0tLS0rICAgKy0tLS0tLS0tLS0tLS0tLS0rPC9zcGFuPjwvdGQ+PHRkIGNs YXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNz PSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj4gICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgfCAgICAgICAgICAgICAgICAgICAgfDwvdGQ+PHRkPiA8L3Rk Pjx0ZCBjbGFzcz0icmJsb2NrIj4gICAgICAgICAgICB8ICAgICAgICAgICAgICAgICAgICAgICA8 c3BhbiBjbGFzcz0iaW5zZXJ0Ij5cIC88L3NwYW4+ICAgICAgICAgICAgICAgICB8PC90ZD48dGQg Y2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xh c3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPiAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICB8ICAgIDxzcGFuIGNsYXNzPSJkZWxldGUiPistLS0tLS0t LS0tKzwvc3Bhbj4gICAgfDwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj4gICAgICAg IHwgICA8c3BhbiBjbGFzcz0iaW5zZXJ0Ij4rLS0tLS0tLS0tLS0tLS0tLS0rICB4ICAgKy0tLS0t LS0tLSs8L3NwYW4+ICAgIHw8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90 ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48 dGQgY2xhc3M9ImxibG9jayI+ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIHwgICAgfCAg ICAgICAgICB8ICAgIHw8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+ICAgICAgICB8 ICAgfCAgICAgICAgICAgICAgICAgIDxzcGFuIGNsYXNzPSJpbnNlcnQiPlwvICBcLzwvc3Bhbj4g ICAgICAgICAgfCAgICB8PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+ PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRk IGNsYXNzPSJsYmxvY2siPiAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICA8c3BhbiBjbGFz cz0iZGVsZXRlIj5ULTEwLVQ8L3NwYW4+ICAgICAgICAgIHwgICAgfDwvdGQ+PHRkPiA8L3RkPjx0 ZCBjbGFzcz0icmJsb2NrIj4gICAgICAgIHwgICB8ICAgICAgICAgICAgICAgIDxzcGFuIGNsYXNz PSJpbnNlcnQiPistVC0xMC1UICAgICAgICAgIHw8L3NwYW4+ICAgIHw8L3RkPjx0ZCBjbGFzcz0i bGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGlu ZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+ICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgPHNwYW4gY2xhc3M9ImRlbGV0ZSI+L3wgICAvfDwvc3Bhbj4gICAgICAg ICAgfCAgICB8PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPiAgICAgICAgfCAgIHwg ICAgICAgICAgICAgICAvICB8ICAgPHNwYW4gY2xhc3M9Imluc2VydCI+L3w8L3NwYW4+ICAgICAg ICAgIHwgICAgfDwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+ DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFz cz0ibGJsb2NrIj4gICAgICAgICAgICAgICAgICAgICAgICAgICAgIDxzcGFuIGNsYXNzPSJkZWxl dGUiPi88L3NwYW4+IHwgIC8gfCAgICAgICAgICB8ICAgIHw8L3RkPjx0ZD4gPC90ZD48dGQgY2xh c3M9InJibG9jayI+ICAgICAgICA8c3BhbiBjbGFzcz0iaW5zZXJ0Ij58ICAgfCAgICAgICAgICAg ICAgLyAgMTAwIC88L3NwYW4+IHwgICAgICAgICAgfCAgICB8PC90ZD48dGQgY2xhc3M9ImxpbmVu byIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIg dmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPiAgICAgICAgICAgICAgICAgICAg ICAgICAgPHNwYW4gY2xhc3M9ImRlbGV0ZSI+LS0rPC9zcGFuPiAgfCB8ICB8ICAgICAgICAgIHwg ICAgfDwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj4gICAgICAgIHwgICB8ICAgICAg ICAgICAgIC8gICAgPHNwYW4gY2xhc3M9Imluc2VydCI+fCB8PC9zcGFuPiAxMDAgICAgICAgICB8 ICAgIHw8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAg ICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9Imxi bG9jayI+ICAgICAgICAgICAgICAgICAgICAgICAgIC8gIDxzcGFuIGNsYXNzPSJkZWxldGUiPist LSstKzwvc3Bhbj4gMTAwICAgICAgICAgfCAgICB8PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJy YmxvY2siPiAgICAgICAgPHNwYW4gY2xhc3M9Imluc2VydCI+fCAgIHw8L3NwYW4+ICAgICAgICAg ICAgLyAgIDxzcGFuIGNsYXNzPSJpbnNlcnQiPistKy0rICB8PC9zcGFuPiAgICAgICAgICB8ICAg IHw8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAg PHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9j ayI+ICAgICAgICAgICAgICAgICAgICAgICAgLyAgPHNwYW4gY2xhc3M9ImRlbGV0ZSI+Lzwvc3Bh bj4gICB8ICAgIHwgICAgICAgICAgfCAgICB8PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxv Y2siPiAgICAgICAgfCAgIHwgICAgICAgICAgIC8gICAvICA8c3BhbiBjbGFzcz0iaW5zZXJ0Ij58 ICAgIHwgICAgICAgICAgfCAgICB8PC9zcGFuPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGln bj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0i dG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj4gICAgICAgICAgICAgICAgICAgICAgIC8gIC8g ICAgPHNwYW4gY2xhc3M9ImRlbGV0ZSI+Ui0xOC1SPC9zcGFuPiAgICAgICAgICB8ICAgIHw8L3Rk Pjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+ICAgICAgICB8ICAgfCAgICAgICAgICAvICAg LyAgIDxzcGFuIGNsYXNzPSJpbnNlcnQiPlItMTgtUiAgICAgICAgICB8ICAgIHw8L3NwYW4+PC90 ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48 dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPiAg ICAgICAgICAgICAgICAgICAgICAvICAvICAgIC9cICAgL1wgICAgICAgICAgfCAgICB8PC90ZD48 dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPjxzcGFuIGNsYXNzPSJpbnNlcnQiPiAgICAgICAg fCAgIHwgICAgICAgIDEwICAgMTA8L3NwYW4+ICAvXCAgIC9cICAgICAgICAgIHwgICAgfDwvdGQ+ PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRk IGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj4gICAg ICAgICAgICAgICAgICAgICA8c3BhbiBjbGFzcz0iZGVsZXRlIj4vPC9zcGFuPiAgfCAgICAvICBc IC8gIFwgICAgICAgICB8ICAgIHw8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+ICAg ICAgICB8ICAgPHNwYW4gY2xhc3M9Imluc2VydCI+fCAgICAgICAgLyAgIC88L3NwYW4+ICAgLyAg XCAvICBcICAgICAgICAgfCAgICB8PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3Ai PjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwv dGQ+PHRkIGNsYXNzPSJsYmxvY2siPiAgICAgICAgICAgICAgICAgICAgPHNwYW4gY2xhc3M9ImRl bGV0ZSI+Lzwvc3Bhbj4gICB8ICAgLyAgICB4ICAgIFwgICAgICAgIHwgICAgfDwvdGQ+PHRkPiA8 L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj4gICAgICAgIHwgICA8c3BhbiBjbGFzcz0iaW5zZXJ0Ij58 ICAgICAgIC8gICAvPC9zcGFuPiAgIC8gICAgeCAgICBcICAgICAgICB8ICAgIHw8L3RkPjx0ZCBj bGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFz cz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+ICAgICAgICAg ICAgICAgICAgIDxzcGFuIGNsYXNzPSJkZWxldGUiPkEtMjUtQTwvc3Bhbj4gIDEwICAxMCBcICAg IFwgICAgICAgfCAgICB8PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPiAgICAgICAg PHNwYW4gY2xhc3M9Imluc2VydCI+fCAgIHwgICAgICAvICAgLzwvc3Bhbj4gICAxMCAgMTAgXCAg ICBcICAgICAgIHwgICAgfDwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3Rk PjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0 ZCBjbGFzcz0ibGJsb2NrIj4gICAgICAgICAgICAgICAgICAgICAgICAgIC8gICAgLyAgIDEwICAg MTAgICAgIHwgICAgfDwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj4gICAgICAgIDxz cGFuIGNsYXNzPSJpbnNlcnQiPnwgICB8ICAgICAvICAgLzwvc3Bhbj4gICAvICAgIC8gICAxMCAg IDEwICAgICB8ICAgIHw8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48 L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQg Y2xhc3M9ImxibG9jayI+ICAgICAgICAgICAgICAgICAgICAgICAgIC8gICAgLyAgICAgXCAgICBc ICAgICB8ICAgIHw8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+ICAgICAgICA8c3Bh biBjbGFzcz0iaW5zZXJ0Ij58ICAgfCAgICAvICAgLzwvc3Bhbj4gICAvICAgIC8gICAgIFwgICAg XCAgICAgfCAgICB8PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90 cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNs YXNzPSJsYmxvY2siPiAgICAgICAgICAgICAgICAgICAgICAgIEEtMjUtQSAgICAgICBBLTI1LUEg ICAgfCAgICB8PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPiAgICAgICAgPHNwYW4g Y2xhc3M9Imluc2VydCI+fCAgIHwgICBBLTI1LUE8L3NwYW4+ICBBLTI1LUEgICAgICAgQS0yNS1B ICAgIHwgICAgfDwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+ DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFz cz0ibGJsb2NrIj4gICAgICAgICAgICAgICAgICAgICAgICAgXCAgICBcICAgICAvICAgIC8gICAg IHwgICAgfDwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj4gICAgICAgIDxzcGFuIGNs YXNzPSJpbnNlcnQiPnwgICB8ICAgfCAgICB8PC9zcGFuPiAgIFwgICAgXCAgICAgLyAgICAvICAg ICB8ICAgIHw8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0K ICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9 ImxibG9jayI+ICAgICAgICAgICAgICAgICAgICAgICAgIDIwMSAgMjAxICAyMDEgMjAxICAgICB8 ICAgIHw8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+ICAgICAgICA8c3BhbiBjbGFz cz0iaW5zZXJ0Ij58ICAgfCAgIHwgICAgfDwvc3Bhbj4gICAyMDEgIDIwMSAgMjAxIDIwMSAgICAg fCAgICB8PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAg ICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJs YmxvY2siPiAgICAgICAgICAgICAgICAgICAgICAgICAgIFwgICAgXCAvICAgIC8gICAgICAgfCAg ICB8PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPiAgICAgICAgPHNwYW4gY2xhc3M9 Imluc2VydCI+fCAgIHwgICB8ICAgIHw8L3NwYW4+ICAgICBcICAgIFwgLyAgICAvICAgICAgIHwg ICAgfDwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAg ICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJs b2NrIj4gICAgICAgICAgICAgICAgICAgICAgICAgICAgXCAgICB4ICAgIC8gICAgICAgIHwgICAg fDwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj4gICAgICAgIDxzcGFuIGNsYXNzPSJp bnNlcnQiPnwgICB8ICAyMDEgIDIwMTwvc3Bhbj4gICAgIFwgICAgeCAgICAvICAgICAgICB8ICAg IHw8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAg PHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9j ayI+ICAgICAgICAgICAgICAgICAgICAgICAgICAgICBcICAvIFwgIC8gICAgICAgICB8ICAgIHw8 L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+ICAgICAgICA8c3BhbiBjbGFzcz0iaW5z ZXJ0Ij58ICAgfCAgIHwgICAgfDwvc3Bhbj4gICAgICAgXCAgLyBcICAvICAgICAgICAgfCAgICB8 PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0 cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2si PiAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIFwvICAgXC8gICAgICAgICAgfCAgICB8PC90 ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPiAgICAgICAgPHNwYW4gY2xhc3M9Imluc2Vy dCI+fCAgIHwgICB8ICAgIHw8L3NwYW4+ICAgICAgICBcLyAgIFwvICAgICAgICAgIHwgICAgfDwv dGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+ PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj4g ICAgICAgICAgICAgICAgICAgICAgICAgICAgICBJLTI0LUkgICAgICAgICAgMTAwICAxMDA8L3Rk Pjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+ICAgICAgICA8c3BhbiBjbGFzcz0iaW5zZXJ0 Ij58ICAgfCAgIEktMjQtSTwvc3Bhbj4gICAgICAgIEktMjQtSSAgICAgICAgICAxMDAgIDEwMDwv dGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+ PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj4g ICAgICAgICAgICAgICAgICAgICAgICAgICAgICB8ICAgIHwgICAgICAgICAgIHwgICAgfDwvdGQ+ PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj4gICAgICAgIHwgICB8ICA8c3BhbiBjbGFzcz0i aW5zZXJ0Ij4vICAgIC88L3NwYW4+ICAgICAgICAgfCAgICB8ICAgICAgICAgICB8ICAgIHw8L3Rk Pjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0 ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+ICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgfCAgICA8c3BhbiBjbGFzcz0iZGVsZXRlIj4rLS0t LS0tLS0tLS0rPC9zcGFuPiAgICB8PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPiAg ICAgICAgfCAgIDxzcGFuIGNsYXNzPSJpbnNlcnQiPistKyAgICAvICAgICAgICAgIHwgICAgKy0t LS0tLS0tLS0tKzwvc3Bhbj4gICAgfDwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9w Ij48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48 L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj4gICAgICAgICAgICAgICAgICAgICAgICAgICAgICB8ICAg ICAgICAgICAgICAgICAgICAgfDwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj4gICAg ICAgIDxzcGFuIGNsYXNzPSJpbnNlcnQiPistLS0tLS0tLS0rPC9zcGFuPiAgICAgICAgICAgKy0t LS0tLS0tLS0tLS0tLS0tLS0tLSs8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+ PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90 ZD48dGQgY2xhc3M9ImxibG9jayI+ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgKy0tLS0t LS0tLS0tLS0tLS0tLS0tLSs8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+PC90ZD48 dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQg Y2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij48L3RkPjx0 ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249 InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRv cCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgICAgICAgICAgICAgICAgICAgRmlndXJlIDM6IEV4 cGxpY2l0IFJvdXRpbmcgdG9wb2xvZ3k8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4g ICAgICAgICAgICAgICAgICAgIEZpZ3VyZSAzOiBFeHBsaWNpdCBSb3V0aW5nIHRvcG9sb2d5PC90 ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48 dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij48L3Rk Pjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxp Z249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249 InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIEluIHRoZSBhYm92ZSB0b3BvbG9neSwgb3Bl cmF0b3IgbWF5IHdhbnQgdG8gZW5mb3JjZSB0aGUgZm9sbG93aW5nPC90ZD48dGQ+IDwvdGQ+PHRk IGNsYXNzPSJyaWdodCI+ICAgSW4gdGhlIGFib3ZlIHRvcG9sb2d5LCBvcGVyYXRvciBtYXkgd2Fu dCB0byBlbmZvcmNlIHRoZSBmb2xsb3dpbmc8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249 InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZD48YSBuYW1lPSJkaWZmMDA0MSI+PC9hPjwv dGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+ PHRkIGNsYXNzPSJsYmxvY2siPiAgIGhpZ2ggbGV2ZWwgZXhwbGljaXQ8c3BhbiBjbGFzcz0iZGVs ZXRlIj5seSByb3V0ZWQ8L3NwYW4+IHBvbGljaWVzOjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0i cmJsb2NrIj4gICBoaWdoIGxldmVsIGV4cGxpY2l0PHNwYW4gY2xhc3M9Imluc2VydCI+IHJvdXRp bmc8L3NwYW4+IHBvbGljaWVzOjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48 L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3Rk Pjx0ZCBjbGFzcz0ibGVmdCI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+PC90ZD48 dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQ+ PGEgbmFtZT0iZGlmZjAwNDIiPjwvYT48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJs aW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj4gICAgICAtIFRyYWZm aWMgZnJvbSBBIG5vZGVzIHRvIEEgbm9kZXMgPHNwYW4gY2xhc3M9ImRlbGV0ZSI+bXVzdCBub3Q8 L3NwYW4+IGdvIHRocm91Z2ggPHNwYW4gY2xhc3M9ImRlbGV0ZSI+STwvc3Bhbj4gbm9kZXM8L3Rk Pjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+ICAgICAgLSBUcmFmZmljIGZyb20gQSBub2Rl cyB0byBBIG5vZGVzIDxzcGFuIGNsYXNzPSJpbnNlcnQiPnNob3VsZCBwcmVmZXJhYmx5PC9zcGFu PiBnbyB0aHJvdWdoIDxzcGFuIGNsYXNzPSJpbnNlcnQiPlI8L3NwYW4+PC90ZD48dGQgY2xhc3M9 ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9Imxp bmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPjwvdGQ+PHRkPiA8L3Rk Pjx0ZCBjbGFzcz0icmJsb2NrIj48c3BhbiBjbGFzcz0iaW5zZXJ0Ij4gICAgICBvciBUPC9zcGFu PiBub2RlcyA8c3BhbiBjbGFzcz0iaW5zZXJ0Ij4ocmF0aGVyIHRoYW4gdGhyb3VnaCBJIG5vZGVz KTs8L3NwYW4+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4N CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNz PSJsZWZ0Ij48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij48L3RkPjx0ZCBjbGFzcz0i bGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGlu ZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgICAgIC0gVHJhZmZpYyBm cm9tIEEgbm9kZXMgdG8gSSBub2RlcyBtdXN0IG5vdCBnbyB0aHJvdWdoIFIgYW5kIFQ8L3RkPjx0 ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICAgICAtIFRyYWZmaWMgZnJvbSBBIG5vZGVzIHRv IEkgbm9kZXMgbXVzdCBub3QgZ28gdGhyb3VnaCBSIGFuZCBUPC90ZD48dGQgY2xhc3M9ImxpbmVu byIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQ+PGEgbmFtZT0iZGlmZjAw NDMiPjwvYT48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0i dG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj4gICAgICBub2RlczwvdGQ+PHRkPiA8L3RkPjx0 ZCBjbGFzcz0icmJsb2NrIj4gICAgICBub2RlczxzcGFuIGNsYXNzPSJpbnNlcnQiPi48L3NwYW4+ PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0 cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij48 L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2 YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxp Z249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIFdpdGggbm9kZSBhZG1pbiB0YWdzLCB0 YWcgQSAocmVzcC4gIEksIFIsIFQpIGNhbiBiZSBjb25maWd1cmVkIG9uIGFsbDwvdGQ+PHRkPiA8 L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIFdpdGggbm9kZSBhZG1pbiB0YWdzLCB0YWcgQSAocmVz cC4gIEksIFIsIFQpIGNhbiBiZSBjb25maWd1cmVkIG9uIGFsbDwvdGQ+PHRkIGNsYXNzPSJsaW5l bm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkPjxhIG5hbWU9ImRpZmYw MDQ0Ij48L2E+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249 InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+ICAgQSAocmVzcC4gIEksIFIsIFQpIG5vZGVz IHRvIGFkdmVydGlzZSB0aGVpciByb2xlLiAgPHNwYW4gY2xhc3M9ImRlbGV0ZSI+VGhlbjwvc3Bh bj4gYSBnZW5lcmljPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPiAgIEEgKHJlc3Au ICBJLCBSLCBUKSBub2RlcyB0byBhZHZlcnRpc2UgdGhlaXIgcm9sZS4gIDxzcGFuIGNsYXNzPSJp bnNlcnQiPlRoZSBmaXJzdCBwb2xpY3k8L3NwYW4+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFs aWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWdu PSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPiAgIENTUEYgcG9saWN5IDxzcGFuIGNsYXNz PSJkZWxldGUiPmNhbiBiZTwvc3Bhbj4gY29uZmlndXJlZCBvbiA8c3BhbiBjbGFzcz0iZGVsZXRl Ij5hbGw8L3NwYW4+IEEgbm9kZXMgPHNwYW4gY2xhc3M9ImRlbGV0ZSI+dG8gZW5mb3JjZTwvc3Bh bj4gdGhlIDxzcGFuIGNsYXNzPSJkZWxldGUiPmFib3ZlPC9zcGFuPjwvdGQ+PHRkPiA8L3RkPjx0 ZCBjbGFzcz0icmJsb2NrIj48c3BhbiBjbGFzcz0iaW5zZXJ0Ij4gICBpcyBhYm91dCBwcmVmZXJy aW5nIG9uZSBwYXRoIG92ZXIgYW5vdGhlci4gIEdpdmVuIHRoZSBjaG9zZW4gbWV0cmljcyw8L3Nw YW4+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAg IDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxv Y2siPjxzcGFuIGNsYXNzPSJkZWxldGUiPiAgIGV4cGxpY2l0IHJvdXRpbmcgb2JqZWN0aXZlcy4g IChlLmcuPC9zcGFuPiAgQ1NQRiA8c3BhbiBjbGFzcz0iZGVsZXRlIj50byBkZXN0aW5hdGlvbnMg QSBleGNsdWRlPC9zcGFuPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48c3BhbiBj bGFzcz0iaW5zZXJ0Ij4gICBpdCBpcyBhY2hpZXZlZCB3aXRoIHJlZ3VsYXIgU1BGIHJvdXRpbmcu ICBUaGUgc2Vjb25kIHBvbGljeSBpcyBhYm91dDwvc3Bhbj48L3RkPjx0ZCBjbGFzcz0ibGluZW5v IiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2 YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+PHNwYW4gY2xhc3M9ImRlbGV0ZSI+ ICAgbm9kZTwvc3Bhbj4gd2l0aCA8c3BhbiBjbGFzcz0iZGVsZXRlIj50YWdzIEkpLjwvc3Bhbj48 L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+PHNwYW4gY2xhc3M9Imluc2VydCI+ICAg cHJvaGliaXRpbmcgKHBydW5pbmcpIHNvbWUgcGF0aHMuICBJdCByZXF1aXJlcyBhbiBleHBsaWNp dCByb3V0aW5nPC9zcGFuPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3Rk PjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0 ZCBjbGFzcz0ibGJsb2NrIj48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+PHNwYW4g Y2xhc3M9Imluc2VydCI+ICAgcG9saWN5LiAgV2l0aCB0aGUgdXNlIG9mIG5vZGUgdGFncywgdGhp cyBtYXkgYmUgYWNoaWV2ZWQgd2l0aDwvc3Bhbj4gYTwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZh bGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGln bj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9 InJibG9jayI+ICAgZ2VuZXJpYyBDU1BGIHBvbGljeSBjb25maWd1cmVkIG9uIEEgPHNwYW4gY2xh c3M9Imluc2VydCI+bm9kZXM6IGZvciBkZXN0aW5hdGlvbjwvc3Bhbj4gbm9kZXM8L3RkPjx0ZCBj bGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFz cz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+PC90ZD48dGQ+ IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPiAgIDxzcGFuIGNsYXNzPSJpbnNlcnQiPmhhdmluZzwv c3Bhbj4gdGhlIDxzcGFuIGNsYXNzPSJpbnNlcnQiPnRhZyAiQSIgcnVucyBhPC9zcGFuPiBDU1BG IHdpdGggPHNwYW4gY2xhc3M9Imluc2VydCI+dGhlIGV4Y2x1c2lvbiBvZiBub2RlcyBoYXZpbmcg dGhlPC9zcGFuPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+ DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFz cz0ibGJsb2NrIj48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+PHNwYW4gY2xhc3M9 Imluc2VydCI+ICAgdGFnICJJIi48L3NwYW4+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWdu PSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0 b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0 Ij48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAg PHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQi PjUuICBTZWN1cml0eSBDb25zaWRlcmF0aW9uczwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmln aHQiPjUuICBTZWN1cml0eSBDb25zaWRlcmF0aW9uczwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZh bGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGln bj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJy aWdodCI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAg ICAgIDx0cj48dGQ+PGEgbmFtZT0iZGlmZjAwNDUiPjwvYT48L3RkPjwvdHI+DQogICAgICA8dHI+ PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj4g ICBOb2RlIDxzcGFuIGNsYXNzPSJkZWxldGUiPmFkbWluPC9zcGFuPiB0YWdzIG1heSBiZSB1c2Vk IGJ5IG9wZXJhdG9ycyB0byBpbmRpY2F0ZSBnZW9ncmFwaGljYWw8L3RkPjx0ZD4gPC90ZD48dGQg Y2xhc3M9InJibG9jayI+ICAgTm9kZSA8c3BhbiBjbGFzcz0iaW5zZXJ0Ij5hZG1pbmlzdHJhdGl2 ZTwvc3Bhbj4gdGFncyBtYXkgYmUgdXNlZCBieSBvcGVyYXRvcnMgdG8gaW5kaWNhdGU8L3RkPjx0 ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBj bGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+ICAgbG9j YXRpb24gb3Igb3RoZXIgc2Vuc2l0aXZlIGluZm9ybWF0aW9uLiAgQXMgaW5kaWNhdGVkIGluIFtS RkMyMzI4XTwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj4gICBnZW9ncmFwaGljYWwg bG9jYXRpb24gb3Igb3RoZXIgc2Vuc2l0aXZlIGluZm9ybWF0aW9uLiAgQXMgaW5kaWNhdGVkPC90 ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48 dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPiAg IGFuZCBbUkZDNTM0MF0gT1NQRiBhdXRoZW50aWNhdGlvbiBtZWNoYW5pc21zIGRvIG5vdCBwcm92 aWRlPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPiAgIGluIFtSRkMyMzI4XSBhbmQg W1JGQzUzNDBdIE9TUEYgYXV0aGVudGljYXRpb24gbWVjaGFuaXNtcyBkbyBub3Q8L3RkPjx0ZCBj bGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFz cz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+ICAgY29uZmlk ZW50aWFsaXR5IGFuZCB0aGUgaW5mb3JtYXRpb24gY2FycmllZCBpbiBub2RlIDxzcGFuIGNsYXNz PSJkZWxldGUiPmFkbWluPC9zcGFuPiB0YWdzIGNvdWxkPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNz PSJyYmxvY2siPiAgIHByb3ZpZGUgY29uZmlkZW50aWFsaXR5IGFuZCB0aGUgaW5mb3JtYXRpb24g Y2FycmllZCBpbiBub2RlPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+ PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRk IGNsYXNzPSJsYmxvY2siPiAgIGJlIGxlYWtlZCB0byBhbiBJR1Agc25vb3Blci48L3RkPjx0ZD4g PC90ZD48dGQgY2xhc3M9InJibG9jayI+ICAgPHNwYW4gY2xhc3M9Imluc2VydCI+YWRtaW5pc3Ry YXRpdmU8L3NwYW4+IHRhZ3MgY291bGQgYmUgbGVha2VkIHRvIGFuIElHUCBzbm9vcGVyLjwvdGQ+ PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRk IGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+PC90ZD48 dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWdu PSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQ+PGEgbmFtZT0iZGlmZjAwNDYiPjwvYT48 L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3Rk Pjx0ZCBjbGFzcz0ibGJsb2NrIj42LiAgSUFOQSBDb25zaWRlcmF0aW9uczwvdGQ+PHRkPiA8L3Rk Pjx0ZCBjbGFzcz0icmJsb2NrIj4gICA8c3BhbiBjbGFzcz0iaW5zZXJ0Ij5BZHZlcnRpc2VtZW50 IG9mIHRhZyB2YWx1ZXMgZm9yIG9uZSBhZG1pbmlzdHJhdGl2ZSBkb21haW4gaW50bzwvc3Bhbj48 L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRy Pjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+ PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPjxzcGFuIGNsYXNzPSJpbnNlcnQiPiAg IGFub3RoZXIgcmlza3MgbWlzaW50ZXJwcmV0YXRpb24gb2YgdGhlIHRhZyB2YWx1ZXMgKGlmIHRo ZSB0d28gZG9tYWluczwvc3Bhbj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+ PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90 ZD48dGQgY2xhc3M9ImxibG9jayI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPjxz cGFuIGNsYXNzPSJpbnNlcnQiPiAgIGhhdmUgYXNzaWduZWQgZGlmZmVyZW50IG1lYW5pbmdzIHRv IHRoZSBzYW1lIHZhbHVlcyksIHdoaWNoIG1heSBoYXZlPC9zcGFuPjwvdGQ+PHRkIGNsYXNzPSJs aW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5l bm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48L3RkPjx0ZD4gPC90ZD48 dGQgY2xhc3M9InJibG9jayI+PHNwYW4gY2xhc3M9Imluc2VydCI+ICAgdW5kZXNpcmFibGUgYW5k IHVuYW50aWNpcGF0ZWQgc2lkZSBlZmZlY3RzLjwvc3Bhbj48L3RkPjx0ZCBjbGFzcz0ibGluZW5v IiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2 YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNs YXNzPSJyYmxvY2siPjxzcGFuIGNsYXNzPSJpbnNlcnQiPjwvc3Bhbj48L3RkPjx0ZCBjbGFzcz0i bGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGlu ZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+PC90ZD48dGQ+IDwvdGQ+ PHRkIGNsYXNzPSJyYmxvY2siPjxzcGFuIGNsYXNzPSJpbnNlcnQiPiAgIFtSRkM0NTkzXSBhbmQg W1JGQzY4NjNdICBkaXNjdXNzIHRoZSBnZW5lcmljIHRocmVhdHMgdG8gcm91dGluZzwvc3Bhbj48 L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRy Pjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+ PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPjxzcGFuIGNsYXNzPSJpbnNlcnQiPiAg IHByb3RvY29scyBhbmQgT1NQRiByZXNwZWN0aXZlbHkuICBUaGVzZSBzZWN1cml0eSB0aHJlYXRz IGFyZSBhbHNvPC9zcGFuPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3Rk PjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0 ZCBjbGFzcz0ibGJsb2NrIj48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+PHNwYW4g Y2xhc3M9Imluc2VydCI+ICAgYXBwbGljYWJsZSB0byB0aGUgbWVjaGFuaXNtcyBkZXNjcmliZWQg aW4gdGhpcyBkb2N1bWVudC5PU1BGPC9zcGFuPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGln bj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0i dG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJi bG9jayI+PHNwYW4gY2xhc3M9Imluc2VydCI+ICAgYXV0aGVudGljYXRpb24gZGVzY3JpYmVkIGlu IFtSRkMyMzI4XSBhbmQgW1JGQzUzNDBdIG9yIGV4dGVuZGVkPC9zcGFuPjwvdGQ+PHRkIGNsYXNz PSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJs aW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48L3RkPjx0ZD4gPC90 ZD48dGQgY2xhc3M9InJibG9jayI+PHNwYW4gY2xhc3M9Imluc2VydCI+ICAgYXV0aGVudGljYXRp b24gbWVjaGFuaXNtcyBkZXNjcmliZWQgaW4gW1JGQzc0NzRdIG9yIFtSRkM3MTY2XSBTSE9VTEQ8 L3NwYW4+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAg ICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJs YmxvY2siPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48c3BhbiBjbGFzcz0iaW5z ZXJ0Ij4gICBiZSB1c2VkIGluIGRlcGxveW1lbnRzIHdoZXJlIGF0dGFja2VycyBoYXZlIGFjY2Vz cyB0byB0aGUgcGh5c2ljYWw8L3NwYW4+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0 b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3Ai PjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2Nr Ij48c3BhbiBjbGFzcz0iaW5zZXJ0Ij4gICBuZXR3b3JrcyBhbmQgbm9kZXMgaW5jbHVkZWQgaW4g dGhlIE9TUEYgZG9tYWluIGFyZSB2dWxuZXJhYmxlLjwvc3Bhbj48L3RkPjx0ZCBjbGFzcz0ibGlu ZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5v IiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+PC90ZD48dGQ+IDwvdGQ+PHRk IGNsYXNzPSJyYmxvY2siPiAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICA8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2 YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxp Z249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNz PSJyYmxvY2siPjYuICA8c3BhbiBjbGFzcz0iaW5zZXJ0Ij5PcGVyYXRpb25hbCBDb25zaWRlcmF0 aW9uczwvc3Bhbj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3Ry Pg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xh c3M9ImxibG9jayI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPjxzcGFuIGNsYXNz PSJpbnNlcnQiPjwvc3Bhbj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90 ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48 dGQgY2xhc3M9ImxibG9jayI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPjxzcGFu IGNsYXNzPSJpbnNlcnQiPiAgIE9wZXJhdG9ycyBjYW4gYXNzaWduIG1lYW5pbmcgdG8gdGhlIG5v ZGUgYWRtaW5pc3RyYXRpdmUgdGFncyB3aGljaCBpczwvc3Bhbj48L3RkPjx0ZCBjbGFzcz0ibGlu ZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5v IiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+PC90ZD48dGQ+IDwvdGQ+PHRk IGNsYXNzPSJyYmxvY2siPjxzcGFuIGNsYXNzPSJpbnNlcnQiPiAgIGxvY2FsIHRvIHRoZSBvcGVy YXRvcidzIGFkbWluaXN0cmF0aXZlIGRvbWFpbi4gIFRoZSBvcGVyYXRpb25hbCB1c2U8L3NwYW4+ PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0 cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2si PjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48c3BhbiBjbGFzcz0iaW5zZXJ0Ij4g ICBvZiBub2RlIGFkbWluaXN0cmF0aXZlIHRhZ3MgaXMgYW5hbG9naWNhbCB0byB0aGUgSVMtSVMg cHJlZml4IHRhZ3M8L3NwYW4+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwv dGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+ PHRkIGNsYXNzPSJsYmxvY2siPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48c3Bh biBjbGFzcz0iaW5zZXJ0Ij4gICBbUkZDNTEzMF0gYW5kIEJHUCBjb21tdW5pdGllcyBbUkZDMTk5 N10uICBPcGVyYXRpb25hbCBkaXNjaXBsaW5lIGFuZDwvc3Bhbj48L3RkPjx0ZCBjbGFzcz0ibGlu ZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5v IiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+PC90ZD48dGQ+IDwvdGQ+PHRk IGNsYXNzPSJyYmxvY2siPjxzcGFuIGNsYXNzPSJpbnNlcnQiPiAgIHByb2NlZHVyZXMgZm9sbG93 ZWQgaW4gY29uZmlndXJpbmcgYW5kIHVzaW5nIEJHUCBjb21tdW5pdGllcyBhbmQgSVNJUzwvc3Bh bj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAg PHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9j ayI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPjxzcGFuIGNsYXNzPSJpbnNlcnQi PiAgIFByZWZpeCB0YWdzIGlzIGFsc28gYXBwbGljYWJsZSB0byB0aGUgdXNhZ2Ugb2Ygbm9kZSBh ZG1pbmlzdHJhdGl2ZTwvc3Bhbj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+ PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90 ZD48dGQgY2xhc3M9ImxibG9jayI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPjxz cGFuIGNsYXNzPSJpbnNlcnQiPiAgIHRhZ3MuPC9zcGFuPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8i IHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZh bGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48L3RkPjx0ZD4gPC90ZD48dGQgY2xh c3M9InJibG9jayI+PHNwYW4gY2xhc3M9Imluc2VydCI+PC9zcGFuPjwvdGQ+PHRkIGNsYXNzPSJs aW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5l bm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48L3RkPjx0ZD4gPC90ZD48 dGQgY2xhc3M9InJibG9jayI+PHNwYW4gY2xhc3M9Imluc2VydCI+ICAgRGVmaW5pbmcgbGFuZ3Vh Z2UgZm9yIGxvY2FsIHBvbGljaWVzIGlzIG91dHNpZGUgdGhlIHNjb3BlIG9mIHRoaXM8L3NwYW4+ PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0 cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2si PjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48c3BhbiBjbGFzcz0iaW5zZXJ0Ij4g ICBkb2N1bWVudC4gIEFzIGluIGNhc2Ugb2Ygb3RoZXIgcG9saWN5IGFwcGxpY2F0aW9ucywgdGhl IHBydW5pbmc8L3NwYW4+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+ PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRk IGNsYXNzPSJsYmxvY2siPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48c3BhbiBj bGFzcz0iaW5zZXJ0Ij4gICBwb2xpY2llcyBjYW4gY2F1c2UgdGhlIHBhdGggdG8gYmUgY29tcGxl dGVseSByZW1vdmVkIGZyb20gZm9yd2FyZGluZzwvc3Bhbj48L3RkPjx0ZCBjbGFzcz0ibGluZW5v IiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2 YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNs YXNzPSJyYmxvY2siPjxzcGFuIGNsYXNzPSJpbnNlcnQiPiAgIHBsYW5lLCBhbmQgaGVuY2UgaGF2 ZSB0aGUgcG90ZW50aWFsIGZvciBtb3JlIHNldmVyZSBvcGVyYXRpb25hbDwvc3Bhbj48L3RkPjx0 ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBj bGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+PC90ZD48 dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPjxzcGFuIGNsYXNzPSJpbnNlcnQiPiAgIGltcGFj dCAoZS5nLiwgbm9kZSB1bnJlYWNoYWJpbGl0eSBkdWUgdG8gcGF0aCByZW1vdmFsKSBieSBjb21w YXJpc29uPC9zcGFuPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwv dHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBj bGFzcz0ibGJsb2NrIj48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+PHNwYW4gY2xh c3M9Imluc2VydCI+ICAgdG8gcHJlZmVyZW5jZSBwb2xpY2llcyB0aGF0IG9ubHkgYWZmZWN0IHBh dGggc2VsZWN0aW9uLjwvc3Bhbj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+ PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90 ZD48dGQgY2xhc3M9ImxibG9jayI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPjxz cGFuIGNsYXNzPSJpbnNlcnQiPjwvc3Bhbj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249 InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRv cCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxv Y2siPjxzcGFuIGNsYXNzPSJpbnNlcnQiPjcuICBNYW5hZ2VhYmlsaXR5IENvbnNpZGVyYXRpb25z PC9zcGFuPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQog ICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0i bGJsb2NrIj48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+PHNwYW4gY2xhc3M9Imlu c2VydCI+PC9zcGFuPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwv dHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBj bGFzcz0ibGJsb2NrIj48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+PHNwYW4gY2xh c3M9Imluc2VydCI+ICAgTm9kZSBhZG1pbmlzdHJhdGl2ZSB0YWdzIGFyZSBjb25maWd1cmVkIGFu ZCBtYW5hZ2VkIHVzaW5nIHJvdXRpbmc8L3NwYW4+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFs aWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWdu PSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0i cmJsb2NrIj48c3BhbiBjbGFzcz0iaW5zZXJ0Ij4gICBwb2xpY3kgZW5oYW5jZW1lbnRzLiAgWUFO RyBkYXRhIGRlZmluaXRpb24gbGFuZ3VhZ2UgaXMgdGhlIGxhdGVzdDwvc3Bhbj48L3RkPjx0ZCBj bGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFz cz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+PC90ZD48dGQ+ IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPjxzcGFuIGNsYXNzPSJpbnNlcnQiPiAgIG1vZGVsIHRv IGRlc2NyaWJlIGFuZCBkZWZpbmUgY29uZmlndXJhdGlvbiBmb3IgbmV0d29yayBkZXZpY2VzLiAg T1NQRjwvc3Bhbj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3Ry Pg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xh c3M9ImxibG9jayI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPjxzcGFuIGNsYXNz PSJpbnNlcnQiPiAgIFlBTkcgZGF0YSBtb2RlbCBpcyBkZXNjcmliZWQgaW4gW0ktRC5pZXRmLW9z cGYteWFuZ10gYW5kIHJvdXRpbmc8L3NwYW4+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWdu PSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0 b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJs b2NrIj48c3BhbiBjbGFzcz0iaW5zZXJ0Ij4gICBwb2xpY3kgY29uZmlndXJhdGlvbiBtb2RlbCBp cyBkZXNjcmliZWQgaW48L3NwYW4+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3Ai PjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwv dGQ+PHRkIGNsYXNzPSJsYmxvY2siPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48 c3BhbiBjbGFzcz0iaW5zZXJ0Ij4gICBbSS1ELmlldGYtcnRnd2ctcG9saWN5LW1vZGVsXS4gIFRo ZXNlIHR3byBkb2N1bWVudHMgd2lsbCBiZSBlbmhhbmNlZDwvc3Bhbj48L3RkPjx0ZCBjbGFzcz0i bGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGlu ZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+PC90ZD48dGQ+IDwvdGQ+ PHRkIGNsYXNzPSJyYmxvY2siPjxzcGFuIGNsYXNzPSJpbnNlcnQiPiAgIHRvIGluY2x1ZGUgdGhl IG5vZGUgYWRtaW5pc3RyYXRpdmUgdGFnIHJlbGF0ZWQgY29uZmlndXJhdGlvbnMuPC9zcGFuPjwv dGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+ PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48 L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+PHNwYW4gY2xhc3M9Imluc2VydCI+PC9z cGFuPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAg ICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJs b2NrIj48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+PHNwYW4gY2xhc3M9Imluc2Vy dCI+OC48L3NwYW4+ICBJQU5BIENvbnNpZGVyYXRpb25zPC90ZD48dGQgY2xhc3M9ImxpbmVubyIg dmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFs aWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9 InJpZ2h0Ij48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0K ICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9 ImxlZnQiPiAgIFRoaXMgc3BlY2lmaWNhdGlvbiB1cGRhdGVzIG9uZSBPU1BGIHJlZ2lzdHJ5OiBP U1BGIFJvdXRlciBJbmZvcm1hdGlvbjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAg IFRoaXMgc3BlY2lmaWNhdGlvbiB1cGRhdGVzIG9uZSBPU1BGIHJlZ2lzdHJ5OiBPU1BGIFJvdXRl ciBJbmZvcm1hdGlvbjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwv dHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBj bGFzcz0ibGVmdCI+ICAgKFJJKSBUTFZzIFJlZ2lzdHJ5PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNz PSJyaWdodCI+ICAgKFJJKSBUTFZzIFJlZ2lzdHJ5PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFs aWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWdu PSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJp Z2h0Ij48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAg ICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9Imxl ZnQiPiAgIGkpIE5vZGUgQWRtaW4gVGFnIFRMViAtIFN1Z2dlc3RlZCB2YWx1ZSAxMDwvdGQ+PHRk PiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIGkpIE5vZGUgQWRtaW4gVGFnIFRMViAtIFN1Z2dl c3RlZCB2YWx1ZSAxMDwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwv dHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBj bGFzcz0ibGVmdCI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+PC90ZD48dGQgY2xh c3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQ+PGEgbmFt ZT0iZGlmZjAwNDciPjwvYT48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8i IHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48c3BhbiBjbGFzcz0iZGVsZXRl Ij43Ljwvc3Bhbj4gIENvbnRyaWJ1dG9yczwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2Nr Ij4gICA8c3BhbiBjbGFzcz0iaW5zZXJ0Ij4qKiBSRkMgRWRpdG9yKio6IFBsZWFzZSByZXBsYWNl IGFib3ZlIHN1Z2dlc3RlZCB2YWx1ZSB3aXRoIHRoZSBJQU5BLTwvc3Bhbj48L3RkPjx0ZCBjbGFz cz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0i bGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+PC90ZD48dGQ+IDwv dGQ+PHRkIGNsYXNzPSJyYmxvY2siPjxzcGFuIGNsYXNzPSJpbnNlcnQiPiAgIGFzc2lnbmVkIHZh bHVlLjwvc3Bhbj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3Ry Pg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xh c3M9ImxibG9jayI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPjxzcGFuIGNsYXNz PSJpbnNlcnQiPjwvc3Bhbj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90 ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48 dGQgY2xhc3M9ImxibG9jayI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPjxzcGFu IGNsYXNzPSJpbnNlcnQiPjkuPC9zcGFuPiAgQ29udHJpYnV0b3JzPC90ZD48dGQgY2xhc3M9Imxp bmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVu byIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij48L3RkPjx0ZD4gPC90ZD48dGQg Y2xhc3M9InJpZ2h0Ij48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48 L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQg Y2xhc3M9ImxlZnQiPiAgIFRoYW5rcyB0byBIYW5uZXMgR3JlZGxlciBmb3IgaGlzIHN1YnN0YW50 aWFsIHJldmlldyxndWlkYW5jZSBhbmQgdG88L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0 Ij4gICBUaGFua3MgdG8gSGFubmVzIEdyZWRsZXIgZm9yIGhpcyBzdWJzdGFudGlhbCByZXZpZXcs Z3VpZGFuY2UgYW5kIHRvPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+ PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRk IGNsYXNzPSJsZWZ0Ij4gICB0aGUgZWRpdGluZyBvZiB0aGlzIGRvY3VtZW50LiAgVGhhbmtzIHRv IEhhcmlzaCBSYWd1dmVlciBmb3IgaGlzPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ ICAgdGhlIGVkaXRpbmcgb2YgdGhpcyBkb2N1bWVudC4gIFRoYW5rcyB0byBIYXJpc2ggUmFndXZl ZXIgZm9yIGhpczwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+ DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFz cz0ibGVmdCI+ICAgY29udHJpYnV0aW9ucyB0byBpbml0aWFsIHZlcnNpb25zIG9mIHRoZSBkcmFm dC48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBjb250cmlidXRpb25zIHRvIGlu aXRpYWwgdmVyc2lvbnMgb2YgdGhlIGRyYWZ0LjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGln bj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0i dG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdo dCI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAg IDx0cj48dGQ+PGEgbmFtZT0iZGlmZjAwNDgiPjwvYT48L3RkPjwvdHI+DQogICAgICA8dHI+PHRk IGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48c3Bh biBjbGFzcz0iZGVsZXRlIj44PC9zcGFuPi4gIEFja25vd2xlZGdlbWVudHM8L3RkPjx0ZD4gPC90 ZD48dGQgY2xhc3M9InJibG9jayI+PHNwYW4gY2xhc3M9Imluc2VydCI+MTA8L3NwYW4+LiAgQWNr bm93bGVkZ2VtZW50czwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwv dHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBj bGFzcz0ibGVmdCI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+PC90ZD48dGQgY2xh c3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9 ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBUaGFua3MgdG8g QmhhcmF0aCBSLCBQdXNocGFzaXMgU2FyYWthciBhbmQgRGhydXYgRGhvZHkgZm9yIHVzZWZ1bDwv dGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIFRoYW5rcyB0byBCaGFyYXRoIFIsIFB1 c2hwYXNpcyBTYXJha2FyIGFuZCBEaHJ1diBEaG9keSBmb3IgdXNlZnVsPC90ZD48dGQgY2xhc3M9 ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9Imxp bmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBpbnB1dHMuICBUaGFu a3MgdG8gQ2hyaXMgQm93ZXJzIGZvciBwcm92aWRpbmcgdXNlZnVsIGlucHV0cyB0byByZW1vdmU8 L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBpbnB1dHMuICBUaGFua3MgdG8gQ2hy aXMgQm93ZXJzIGZvciBwcm92aWRpbmcgdXNlZnVsIGlucHV0cyB0byByZW1vdmU8L3RkPjx0ZCBj bGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFz cz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIGFtYmlndWl0 eSByZWxhdGVkIHRvIHRhZy1vcmRlcmluZy4gIFRoYW5rcyB0byBMZXMgR2luc2JlcmcgYW5kIEFj ZWU8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBhbWJpZ3VpdHkgcmVsYXRlZCB0 byB0YWctb3JkZXJpbmcuICBUaGFua3MgdG8gTGVzIEdpbnNiZXJnIGFuZCBBY2VlPC90ZD48dGQg Y2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQ+PGEg bmFtZT0iZGlmZjAwNDkiPjwvYT48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5l bm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj4gICBMaW5kZW0gZm9yIHRo ZSBpbnB1dHMuPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPiAgIExpbmRlbSBmb3Ig dGhlIGlucHV0cy4gIDxzcGFuIGNsYXNzPSJpbnNlcnQiPlRoYW5rcyB0byBEYXZpZCBCbGFjayBm b3IgY2FyZWZ1bCByZXZpZXcgYW5kPC9zcGFuPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGln bj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0i dG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJi bG9jayI+PHNwYW4gY2xhc3M9Imluc2VydCI+ICAgdmFsdWFibGUgc3VnZ2VzdGlvbnMgZm9yIHRo ZSBkb2N1bWVudCBlc3BlY2lhbGx5IGZvciB0aGUgb3BlcmF0aW9uczwvc3Bhbj48L3RkPjx0ZCBj bGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFz cz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+PC90ZD48dGQ+ IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPjxzcGFuIGNsYXNzPSJpbnNlcnQiPiAgIHNlY3Rpb24u PC9zcGFuPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQog ICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0i bGVmdCI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+PC90ZD48dGQgY2xhc3M9Imxp bmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQ+PGEgbmFtZT0iZGlm ZjAwNTAiPjwvYT48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGln bj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48c3BhbiBjbGFzcz0iZGVsZXRlIj45PC9z cGFuPi4gIFJlZmVyZW5jZXM8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+PHNwYW4g Y2xhc3M9Imluc2VydCI+MTE8L3NwYW4+LiAgUmVmZXJlbmNlczwvdGQ+PHRkIGNsYXNzPSJsaW5l bm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8i IHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNs YXNzPSJyaWdodCI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90 cj4NCiAgICAgIDx0cj48dGQ+PGEgbmFtZT0iZGlmZjAwNTEiPjwvYT48L3RkPjwvdHI+DQogICAg ICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJs b2NrIj48c3BhbiBjbGFzcz0iZGVsZXRlIj45PC9zcGFuPi4xLiAgTm9ybWF0aXZlIFJlZmVyZW5j ZXM8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+PHNwYW4gY2xhc3M9Imluc2VydCI+ MTE8L3NwYW4+LjEuICBOb3JtYXRpdmUgUmVmZXJlbmNlczwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8i IHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZh bGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNz PSJyaWdodCI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4N CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNz PSJsZWZ0Ij4gICBbSS1ELmFjZWUtb3NwZi1yZmM0OTcwYmlzXTwvdGQ+PHRkPiA8L3RkPjx0ZCBj bGFzcz0icmlnaHQiPiAgIFtJLUQuYWNlZS1vc3BmLXJmYzQ5NzBiaXNdPC90ZD48dGQgY2xhc3M9 ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9Imxp bmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICAgICAgICAgICAgIExp bmRlbSwgQS4sIFNoZW4sIE4uLCBWYXNzZXVyLCBKLiwgQWdnYXJ3YWwsIFIuLCBhbmQgUy48L3Rk Pjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICAgICAgICAgICAgIExpbmRlbSwgQS4sIFNo ZW4sIE4uLCBWYXNzZXVyLCBKLiwgQWdnYXJ3YWwsIFIuLCBhbmQgUy48L3RkPjx0ZCBjbGFzcz0i bGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGlu ZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgICAgICAgICAgICAgU2hh ZmZlciwgIkV4dGVuc2lvbnMgdG8gT1NQRiBmb3IgQWR2ZXJ0aXNpbmcgT3B0aW9uYWw8L3RkPjx0 ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICAgICAgICAgICAgIFNoYWZmZXIsICJFeHRlbnNp b25zIHRvIE9TUEYgZm9yIEFkdmVydGlzaW5nIE9wdGlvbmFsPC90ZD48dGQgY2xhc3M9ImxpbmVu byIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIg dmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICAgICAgICAgICAgIFJvdXRlciBD YXBhYmlsaXRpZXMiLCBkcmFmdC1hY2VlLW9zcGYtcmZjNDk3MGJpcy0wMCAod29yazwvdGQ+PHRk PiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgICAgICAgICAgICAgUm91dGVyIENhcGFiaWxpdGll cyIsIGRyYWZ0LWFjZWUtb3NwZi1yZmM0OTcwYmlzLTAwICh3b3JrPC90ZD48dGQgY2xhc3M9Imxp bmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVu byIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICAgICAgICAgICAgIGluIHBy b2dyZXNzKSwgSnVseSAyMDE0LjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgICAg ICAgICAgICAgaW4gcHJvZ3Jlc3MpLCBKdWx5IDIwMTQuPC90ZD48dGQgY2xhc3M9ImxpbmVubyIg dmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFs aWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9 InJpZ2h0Ij48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0K ICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9 ImxlZnQiPiAgIFtSRkMyMTE5XSAgQnJhZG5lciwgUy4sICJLZXkgd29yZHMgZm9yIHVzZSBpbiBS RkNzIHRvIEluZGljYXRlPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgW1JGQzIx MTldICBCcmFkbmVyLCBTLiwgIktleSB3b3JkcyBmb3IgdXNlIGluIFJGQ3MgdG8gSW5kaWNhdGU8 L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRy Pjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAg ICAgICAgICAgICAgUmVxdWlyZW1lbnQgTGV2ZWxzIiwgQkNQIDE0LCBSRkMgMjExOSw8L3RkPjx0 ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICAgICAgICAgICAgIFJlcXVpcmVtZW50IExldmVs cyIsIEJDUCAxNCwgUkZDIDIxMTksPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3Ai PjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwv dGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICAgICAgICAgICAgIERPSSAxMC4xNzQ4Ny9SRkMyMTE5LCBN YXJjaCAxOTk3LDwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgICAgICAgICAgICAg RE9JIDEwLjE3NDg3L1JGQzIxMTksIE1hcmNoIDE5OTcsPC90ZD48dGQgY2xhc3M9ImxpbmVubyIg dmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90 ZD48dGQgY2xhc3M9ImxlZnQiPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPjwvdGQ+ PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4NCiAgICAgIDx0ciBiZ2NvbG9yPSJncmF5Ij48 dGQ+PC90ZD48dGg+PGEgbmFtZT0icGFydC1sNiI+PHNtYWxsPnNraXBwaW5nIHRvIGNoYW5nZSBh dDwvc21hbGw+PGVtPiBwYWdlIDExLCBsaW5lIDI4PC9lbT48L2E+PC90aD48dGg+IDwvdGg+PHRo PjxhIG5hbWU9InBhcnQtcjYiPjxzbWFsbD5za2lwcGluZyB0byBjaGFuZ2UgYXQ8L3NtYWxsPjxl bT4gcGFnZSAxMywgbGluZSAyODwvZW0+PC9hPjwvdGg+PHRkPjwvdGQ+PC90cj4NCiAgICAgIDx0 cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij48 L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2 YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxp Z249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIFtSRkM1MzQwXSAgQ29sdHVuLCBSLiwg RmVyZ3Vzb24sIEQuLCBNb3ksIEouLCBhbmQgQS4gTGluZGVtLCAiT1NQRjwvdGQ+PHRkPiA8L3Rk Pjx0ZCBjbGFzcz0icmlnaHQiPiAgIFtSRkM1MzQwXSAgQ29sdHVuLCBSLiwgRmVyZ3Vzb24sIEQu LCBNb3ksIEouLCBhbmQgQS4gTGluZGVtLCAiT1NQRjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZh bGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGln bj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgICAgICAgICAgICBmb3IgSVB2NiIsIFJG QyA1MzQwLCBET0kgMTAuMTc0ODcvUkZDNTM0MCwgSnVseSAyMDA4LDwvdGQ+PHRkPiA8L3RkPjx0 ZCBjbGFzcz0icmlnaHQiPiAgICAgICAgICAgICAgZm9yIElQdjYiLCBSRkMgNTM0MCwgRE9JIDEw LjE3NDg3L1JGQzUzNDAsIEp1bHkgMjAwOCw8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249 InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRv cCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgICAgICAgICAgICAgJmx0O2h0dHA6Ly93d3cucmZj LWVkaXRvci5vcmcvaW5mby9yZmM1MzQwJmd0Oy48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJp Z2h0Ij4gICAgICAgICAgICAgICZsdDtodHRwOi8vd3d3LnJmYy1lZGl0b3Iub3JnL2luZm8vcmZj NTM0MCZndDsuPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4N CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNz PSJsZWZ0Ij48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij48L3RkPjx0ZCBjbGFzcz0i bGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGlu ZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIFtSRkM3NDkwXSAgQnJ5 YW50LCBTLiwgRmlsc2ZpbHMsIEMuLCBQcmV2aWRpLCBTLiwgU2hhbmQsIE0uLCBhbmQgTi48L3Rk Pjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBbUkZDNzQ5MF0gIEJyeWFudCwgUy4sIEZp bHNmaWxzLCBDLiwgUHJldmlkaSwgUy4sIFNoYW5kLCBNLiwgYW5kIE4uPC90ZD48dGQgY2xhc3M9 ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9Imxp bmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICAgICAgICAgICAgIFNv LCAiUmVtb3RlIExvb3AtRnJlZSBBbHRlcm5hdGUgKExGQSkgRmFzdCBSZXJvdXRlIChGUlIpIiw8 L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICAgICAgICAgICAgIFNvLCAiUmVtb3Rl IExvb3AtRnJlZSBBbHRlcm5hdGUgKExGQSkgRmFzdCBSZXJvdXRlIChGUlIpIiw8L3RkPjx0ZCBj bGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFz cz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgICAgICAgICAg ICAgUkZDIDc0OTAsIERPSSAxMC4xNzQ4Ny9SRkM3NDkwLCBBcHJpbCAyMDE1LDwvdGQ+PHRkPiA8 L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgICAgICAgICAgICAgUkZDIDc0OTAsIERPSSAxMC4xNzQ4 Ny9SRkM3NDkwLCBBcHJpbCAyMDE1LDwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9w Ij48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48 L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgICAgICAgICAgICAmbHQ7aHR0cDovL3d3dy5yZmMtZWRp dG9yLm9yZy9pbmZvL3JmYzc0OTAmZ3Q7LjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQi PiAgICAgICAgICAgICAgJmx0O2h0dHA6Ly93d3cucmZjLWVkaXRvci5vcmcvaW5mby9yZmM3NDkw Jmd0Oy48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAg ICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9Imxl ZnQiPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPjwvdGQ+PHRkIGNsYXNzPSJsaW5l bm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkPjxhIG5hbWU9ImRpZmYw MDUyIj48L2E+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249 InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+PHNwYW4gY2xhc3M9ImRlbGV0ZSI+OS4yLjwv c3Bhbj4gIEluZm9ybWF0aXZlIFJlZmVyZW5jZXM8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJi bG9jayI+PHNwYW4gY2xhc3M9Imluc2VydCI+MTEuMi48L3NwYW4+ICBJbmZvcm1hdGl2ZSBSZWZl cmVuY2VzPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAg ICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJs YmxvY2siPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj4gICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0 cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2si PjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj4gICA8c3BhbiBjbGFzcz0iaW5zZXJ0 Ij5bSS1ELmlldGYtb3NwZi15YW5nXTwvc3Bhbj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxp Z249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249 InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJy YmxvY2siPjxzcGFuIGNsYXNzPSJpbnNlcnQiPiAgICAgICAgICAgICAgWWV1bmcsIEQuLCBRdSwg WS4sIFpoYW5nLCBKLiwgQm9nZGFub3ZpYywgRC4sIGFuZCBLLjwvc3Bhbj48L3RkPjx0ZCBjbGFz cz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0i bGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+PC90ZD48dGQ+IDwv dGQ+PHRkIGNsYXNzPSJyYmxvY2siPjxzcGFuIGNsYXNzPSJpbnNlcnQiPiAgICAgICAgICAgICAg S291c2hpaywgIllhbmcgRGF0YSBNb2RlbCBmb3IgT1NQRiBQcm90b2NvbCIsIGRyYWZ0LWlldGYt PC9zcGFuPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQog ICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0i bGJsb2NrIj48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+PHNwYW4gY2xhc3M9Imlu c2VydCI+ICAgICAgICAgICAgICBvc3BmLXlhbmctMDIgKHdvcmsgaW4gcHJvZ3Jlc3MpLCBTZXB0 ZW1iZXIgMjAxNS48L3NwYW4+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwv dGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+ PHRkIGNsYXNzPSJsZWZ0Ij48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij48L3RkPjx0 ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBj bGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIFtJLUQu aWV0Zi1ydGd3Zy1sZmEtbWFuYWdlYWJpbGl0eV08L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJp Z2h0Ij4gICBbSS1ELmlldGYtcnRnd2ctbGZhLW1hbmFnZWFiaWxpdHldPC90ZD48dGQgY2xhc3M9 ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9Imxp bmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICAgICAgICAgICAgIExp dGtvd3NraSwgUy4sIERlY3JhZW5lLCBCLiwgRmlsc2ZpbHMsIEMuLCBSYXphLCBLLiw8L3RkPjx0 ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICAgICAgICAgICAgIExpdGtvd3NraSwgUy4sIERl Y3JhZW5lLCBCLiwgRmlsc2ZpbHMsIEMuLCBSYXphLCBLLiw8L3RkPjx0ZCBjbGFzcz0ibGluZW5v IiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2 YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgICAgICAgICAgICAgSG9ybmVmZmVy LCBNLiwgYW5kIFAuIFNhcmthciwgIk9wZXJhdGlvbmFsIG1hbmFnZW1lbnQgb2Y8L3RkPjx0ZD4g PC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICAgICAgICAgICAgIEhvcm5lZmZlciwgTS4sIGFuZCBQ LiBTYXJrYXIsICJPcGVyYXRpb25hbCBtYW5hZ2VtZW50IG9mPC90ZD48dGQgY2xhc3M9ImxpbmVu byIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIg dmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICAgICAgICAgICAgIExvb3AgRnJl ZSBBbHRlcm5hdGVzIiwgZHJhZnQtaWV0Zi1ydGd3Zy1sZmEtPC90ZD48dGQ+IDwvdGQ+PHRkIGNs YXNzPSJyaWdodCI+ICAgICAgICAgICAgICBMb29wIEZyZWUgQWx0ZXJuYXRlcyIsIGRyYWZ0LWll dGYtcnRnd2ctbGZhLTwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwv dHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBj bGFzcz0ibGVmdCI+ICAgICAgICAgICAgICBtYW5hZ2VhYmlsaXR5LTExICh3b3JrIGluIHByb2dy ZXNzKSwgSnVuZSAyMDE1LjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgICAgICAg ICAgICAgbWFuYWdlYWJpbGl0eS0xMSAod29yayBpbiBwcm9ncmVzcyksIEp1bmUgMjAxNS48L3Rk Pjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0 ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPjwvdGQ+ PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGln bj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkPjxhIG5hbWU9ImRpZmYwMDUzIj48L2E+ PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90 ZD48dGQgY2xhc3M9ImxibG9jayI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPiAg IDxzcGFuIGNsYXNzPSJpbnNlcnQiPltJLUQuaWV0Zi1ydGd3Zy1wb2xpY3ktbW9kZWxdPC9zcGFu PjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8 dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2Nr Ij48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+PHNwYW4gY2xhc3M9Imluc2VydCI+ ICAgICAgICAgICAgICBTaGFpa2gsIEEuLCByanNAcm9iLnNoLCByLiwgRCdTb3V6YSwgSy4sIGFu ZCBDLiBDaGFzZSw8L3NwYW4+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwv dGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+ PHRkIGNsYXNzPSJsYmxvY2siPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48c3Bh biBjbGFzcz0iaW5zZXJ0Ij4gICAgICAgICAgICAgICJSb3V0aW5nIFBvbGljeSBDb25maWd1cmF0 aW9uIE1vZGVsIGZvciBTZXJ2aWNlIFByb3ZpZGVyPC9zcGFuPjwvdGQ+PHRkIGNsYXNzPSJsaW5l bm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8i IHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48L3RkPjx0ZD4gPC90ZD48dGQg Y2xhc3M9InJibG9jayI+PHNwYW4gY2xhc3M9Imluc2VydCI+ICAgICAgICAgICAgICBOZXR3b3Jr cyIsIGRyYWZ0LWlldGYtcnRnd2ctcG9saWN5LW1vZGVsLTAwICh3b3JrIGluPC9zcGFuPjwvdGQ+ PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRk IGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48L3Rk Pjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+PHNwYW4gY2xhc3M9Imluc2VydCI+ICAgICAg ICAgICAgICBwcm9ncmVzcyksIFNlcHRlbWJlciAyMDE1Ljwvc3Bhbj48L3RkPjx0ZCBjbGFzcz0i bGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGlu ZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+PC90ZD48dGQ+IDwvdGQ+ PHRkIGNsYXNzPSJyYmxvY2siPjxzcGFuIGNsYXNzPSJpbnNlcnQiPjwvc3Bhbj48L3RkPjx0ZCBj bGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFz cz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+PC90ZD48dGQ+ IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPjxzcGFuIGNsYXNzPSJpbnNlcnQiPiAgIFtSRkMxOTk3 XSAgQ2hhbmRyYSwgUi4sIFRyYWluYSwgUC4sIGFuZCBULiBMaSwgIkJHUCBDb21tdW5pdGllczwv c3Bhbj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAg ICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9Imxi bG9jayI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPjxzcGFuIGNsYXNzPSJpbnNl cnQiPiAgICAgICAgICAgICAgQXR0cmlidXRlIiwgUkZDIDE5OTcsIERPSSAxMC4xNzQ4Ny9SRkMx OTk3LCBBdWd1c3QgMTk5Niw8L3NwYW4+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0 b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3Ai PjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2Nr Ij48c3BhbiBjbGFzcz0iaW5zZXJ0Ij4gICAgICAgICAgICAgICZsdDtodHRwOi8vd3d3LnJmYy1l ZGl0b3Iub3JnL2luZm8vcmZjMTk5NyZndDsuPC9zcGFuPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8i IHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZh bGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48L3RkPjx0ZD4gPC90ZD48dGQgY2xh c3M9InJibG9jayI+PHNwYW4gY2xhc3M9Imluc2VydCI+PC9zcGFuPjwvdGQ+PHRkIGNsYXNzPSJs aW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5l bm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48L3RkPjx0ZD4gPC90ZD48 dGQgY2xhc3M9InJibG9jayI+PHNwYW4gY2xhc3M9Imluc2VydCI+ICAgW1JGQzQ1OTNdICBCYXJi aXIsIEEuLCBNdXJwaHksIFMuLCBhbmQgWS4gWWFuZywgIkdlbmVyaWMgVGhyZWF0cyB0bzwvc3Bh bj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAg PHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9j ayI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPjxzcGFuIGNsYXNzPSJpbnNlcnQi PiAgICAgICAgICAgICAgUm91dGluZyBQcm90b2NvbHMiLCBSRkMgNDU5MywgRE9JIDEwLjE3NDg3 L1JGQzQ1OTMsPC9zcGFuPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3Rk PjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0 ZCBjbGFzcz0ibGJsb2NrIj48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+PHNwYW4g Y2xhc3M9Imluc2VydCI+ICAgICAgICAgICAgICBPY3RvYmVyIDIwMDYsICZsdDtodHRwOi8vd3d3 LnJmYy1lZGl0b3Iub3JnL2luZm8vcmZjNDU5MyZndDsuPC9zcGFuPjwvdGQ+PHRkIGNsYXNzPSJs aW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5l bm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48L3RkPjx0ZD4gPC90ZD48 dGQgY2xhc3M9InJibG9jayI+PHNwYW4gY2xhc3M9Imluc2VydCI+PC9zcGFuPjwvdGQ+PHRkIGNs YXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNz PSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48L3RkPjx0ZD4g PC90ZD48dGQgY2xhc3M9InJibG9jayI+PHNwYW4gY2xhc3M9Imluc2VydCI+ICAgW1JGQzUxMzBd ICBQcmV2aWRpLCBTLiwgU2hhbmQsIE0uLCBFZC4sIGFuZCBDLiBNYXJ0aW4sICJBIFBvbGljeTwv c3Bhbj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAg ICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9Imxi bG9jayI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPjxzcGFuIGNsYXNzPSJpbnNl cnQiPiAgICAgICAgICAgICAgQ29udHJvbCBNZWNoYW5pc20gaW4gSVMtSVMgVXNpbmcgQWRtaW5p c3RyYXRpdmUgVGFncyIsPC9zcGFuPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9w Ij48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48 L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+ PHNwYW4gY2xhc3M9Imluc2VydCI+ICAgICAgICAgICAgICBSRkMgNTEzMCwgRE9JIDEwLjE3NDg3 L1JGQzUxMzAsIEZlYnJ1YXJ5IDIwMDgsPC9zcGFuPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZh bGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGln bj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9 InJibG9jayI+PHNwYW4gY2xhc3M9Imluc2VydCI+ICAgICAgICAgICAgICAmbHQ7aHR0cDovL3d3 dy5yZmMtZWRpdG9yLm9yZy9pbmZvL3JmYzUxMzAmZ3Q7Ljwvc3Bhbj48L3RkPjx0ZCBjbGFzcz0i bGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGlu ZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+PC90ZD48dGQ+IDwvdGQ+ PHRkIGNsYXNzPSJyYmxvY2siPiAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICA8L3RkPjx0ZCBjbGFzcz0ibGluZW5v IiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2 YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIFtSRkM1Mjg2XSAgQXRsYXMsIEEu LCBFZC4gYW5kIEEuIFppbmluLCBFZC4sICJCYXNpYyBTcGVjaWZpY2F0aW9uIGZvcjwvdGQ+PHRk PiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIFtSRkM1Mjg2XSAgQXRsYXMsIEEuLCBFZC4gYW5k IEEuIFppbmluLCBFZC4sICJCYXNpYyBTcGVjaWZpY2F0aW9uIGZvcjwvdGQ+PHRkIGNsYXNzPSJs aW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5l bm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgICAgICAgICAgICBJUCBG YXN0IFJlcm91dGU6IExvb3AtRnJlZSBBbHRlcm5hdGVzIiwgUkZDIDUyODYsPC90ZD48dGQ+IDwv dGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgICAgICAgICAgICBJUCBGYXN0IFJlcm91dGU6IExvb3At RnJlZSBBbHRlcm5hdGVzIiwgUkZDIDUyODYsPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWdu PSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0 b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICAgICAgICAgICAgIERPSSAxMC4xNzQ4Ny9SRkM1 Mjg2LCBTZXB0ZW1iZXIgMjAwOCw8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICAg ICAgICAgICAgIERPSSAxMC4xNzQ4Ny9SRkM1Mjg2LCBTZXB0ZW1iZXIgMjAwOCw8L3RkPjx0ZCBj bGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFz cz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgICAgICAgICAg ICAgJmx0O2h0dHA6Ly93d3cucmZjLWVkaXRvci5vcmcvaW5mby9yZmM1Mjg2Jmd0Oy48L3RkPjx0 ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICAgICAgICAgICAgICZsdDtodHRwOi8vd3d3LnJm Yy1lZGl0b3Iub3JnL2luZm8vcmZjNTI4NiZndDsuPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFs aWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWdu PSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJp Z2h0Ij48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAg ICAgPHRyPjx0ZD48YSBuYW1lPSJkaWZmMDA1NCI+PC9hPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48 dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPjwv dGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj4gICA8c3BhbiBjbGFzcz0iaW5zZXJ0Ij5b UkZDNjg2M10gIEhhcnRtYW4sIFMuIGFuZCBELiBaaGFuZywgIkFuYWx5c2lzIG9mIE9TUEYgU2Vj dXJpdHk8L3NwYW4+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90 cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNs YXNzPSJsYmxvY2siPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48c3BhbiBjbGFz cz0iaW5zZXJ0Ij4gICAgICAgICAgICAgIEFjY29yZGluZyB0byB0aGUgS2V5aW5nIGFuZCBBdXRo ZW50aWNhdGlvbiBmb3IgUm91dGluZzwvc3Bhbj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxp Z249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249 InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJy YmxvY2siPjxzcGFuIGNsYXNzPSJpbnNlcnQiPiAgICAgICAgICAgICAgUHJvdG9jb2xzIChLQVJQ KSBEZXNpZ24gR3VpZGUiLCBSRkMgNjg2Myw8L3NwYW4+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIg dmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFs aWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFz cz0icmJsb2NrIj48c3BhbiBjbGFzcz0iaW5zZXJ0Ij4gICAgICAgICAgICAgIERPSSAxMC4xNzQ4 Ny9SRkM2ODYzLCBNYXJjaCAyMDEzLDwvc3Bhbj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxp Z249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249 InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJy YmxvY2siPjxzcGFuIGNsYXNzPSJpbnNlcnQiPiAgICAgICAgICAgICAgJmx0O2h0dHA6Ly93d3cu cmZjLWVkaXRvci5vcmcvaW5mby9yZmM2ODYzJmd0Oy48L3NwYW4+PC90ZD48dGQgY2xhc3M9Imxp bmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVu byIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPjwvdGQ+PHRkPiA8L3RkPjx0 ZCBjbGFzcz0icmJsb2NrIj48c3BhbiBjbGFzcz0iaW5zZXJ0Ij48L3NwYW4+PC90ZD48dGQgY2xh c3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9 ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPjwvdGQ+PHRkPiA8 L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48c3BhbiBjbGFzcz0iaW5zZXJ0Ij4gICBbUkZDNzE2Nl0g IEJoYXRpYSwgTS4sIE1hbnJhbCwgVi4sIGFuZCBBLiBMaW5kZW0sICJTdXBwb3J0aW5nPC9zcGFu PjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8 dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2Nr Ij48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+PHNwYW4gY2xhc3M9Imluc2VydCI+ ICAgICAgICAgICAgICBBdXRoZW50aWNhdGlvbiBUcmFpbGVyIGZvciBPU1BGdjMiLCBSRkMgNzE2 Niw8L3NwYW4+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4N CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNz PSJsYmxvY2siPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48c3BhbiBjbGFzcz0i aW5zZXJ0Ij4gICAgICAgICAgICAgIERPSSAxMC4xNzQ4Ny9SRkM3MTY2LCBNYXJjaCAyMDE0LDwv c3Bhbj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAg ICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9Imxi bG9jayI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPjxzcGFuIGNsYXNzPSJpbnNl cnQiPiAgICAgICAgICAgICAgJmx0O2h0dHA6Ly93d3cucmZjLWVkaXRvci5vcmcvaW5mby9yZmM3 MTY2Jmd0Oy48L3NwYW4+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+ PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRk IGNsYXNzPSJsYmxvY2siPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48c3BhbiBj bGFzcz0iaW5zZXJ0Ij48L3NwYW4+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3Ai PjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwv dGQ+PHRkIGNsYXNzPSJsYmxvY2siPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48 c3BhbiBjbGFzcz0iaW5zZXJ0Ij4gICBbUkZDNzQ3NF0gIEJoYXRpYSwgTS4sIEhhcnRtYW4sIFMu LCBaaGFuZywgRC4sIGFuZCBBLiBMaW5kZW0sIEVkLiw8L3NwYW4+PC90ZD48dGQgY2xhc3M9Imxp bmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVu byIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPjwvdGQ+PHRkPiA8L3RkPjx0 ZCBjbGFzcz0icmJsb2NrIj48c3BhbiBjbGFzcz0iaW5zZXJ0Ij4gICAgICAgICAgICAgICJTZWN1 cml0eSBFeHRlbnNpb24gZm9yIE9TUEZ2MiBXaGVuIFVzaW5nIE1hbnVhbCBLZXk8L3NwYW4+PC90 ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48 dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPjwv dGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48c3BhbiBjbGFzcz0iaW5zZXJ0Ij4gICAg ICAgICAgICAgIE1hbmFnZW1lbnQiLCBSRkMgNzQ3NCwgRE9JIDEwLjE3NDg3L1JGQzc0NzQsIEFw cmlsIDIwMTUsPC9zcGFuPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3Rk PjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0 ZCBjbGFzcz0ibGJsb2NrIj48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+PHNwYW4g Y2xhc3M9Imluc2VydCI+ICAgICAgICAgICAgICAmbHQ7aHR0cDovL3d3dy5yZmMtZWRpdG9yLm9y Zy9pbmZvL3JmYzc0NzQmZ3Q7Ljwvc3Bhbj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249 InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRv cCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxv Y2siPiAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICA8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+ PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90 ZD48dGQgY2xhc3M9ImxlZnQiPkF1dGhvcnMnIEFkZHJlc3NlczwvdGQ+PHRkPiA8L3RkPjx0ZCBj bGFzcz0icmlnaHQiPkF1dGhvcnMnIEFkZHJlc3NlczwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZh bGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGln bj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJy aWdodCI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAg ICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJs ZWZ0Ij4gICBTaHJhZGRoYSBIZWdkZTwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAg IFNocmFkZGhhIEhlZ2RlPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+ PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRk IGNsYXNzPSJsZWZ0Ij4gICBKdW5pcGVyIE5ldHdvcmtzLCBJbmMuPC90ZD48dGQ+IDwvdGQ+PHRk IGNsYXNzPSJyaWdodCI+ICAgSnVuaXBlciBOZXR3b3JrcywgSW5jLjwvdGQ+PHRkIGNsYXNzPSJs aW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5l bm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgRW1iYXNzeSBCdXNpbmVz cyBQYXJrPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgRW1iYXNzeSBCdXNpbmVz cyBQYXJrPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAg ICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJs ZWZ0Ij4gICBCYW5nYWxvcmUsIEtBICA1NjAwOTM8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJp Z2h0Ij4gICBCYW5nYWxvcmUsIEtBICA1NjAwOTM8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxp Z249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249 InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIEluZGlhPC90ZD48dGQ+IDwvdGQ+PHRkIGNs YXNzPSJyaWdodCI+ICAgSW5kaWE8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+ PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90 ZD48dGQgY2xhc3M9ImxlZnQiPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPjwvdGQ+ PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRk IGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgRW1h aWw6IHNocmFkZGhhQGp1bmlwZXIubmV0PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ ICAgRW1haWw6IHNocmFkZGhhQGp1bmlwZXIubmV0PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFs aWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQ+PGEgbmFtZT0iZGlmZjAwNTUiPjwv YT48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48 L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+ PHNwYW4gY2xhc3M9Imluc2VydCI+ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIDwvc3Bhbj48L3RkPjx0ZCBjbGFz cz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0i bGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIFJvYiBTaGFraXI8 L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBSb2IgU2hha2lyPC90ZD48dGQgY2xh c3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9 ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBJbmRpdmlkdWFs PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgSW5kaXZpZHVhbDwvdGQ+PHRkIGNs YXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNz PSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+PC90ZD48dGQ+IDwv dGQ+PHRkIGNsYXNzPSJyaWdodCI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3Ai PjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwv dGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBFbWFpbDogcmpzQHJvYi5zaDwvdGQ+PHRkPiA8L3RkPjx0 ZCBjbGFzcz0icmlnaHQiPiAgIEVtYWlsOiByanNAcm9iLnNoPC90ZD48dGQgY2xhc3M9ImxpbmVu byIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQ+PGEgbmFtZT0iZGlmZjAw NTYiPjwvYT48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0i dG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48c3BhbiBjbGFzcz0iZGVsZXRlIj4gICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgPC9zcGFuPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48L3RkPjx0 ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBj bGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIEFudG9u IFNtaXJub3Y8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBBbnRvbiBTbWlybm92 PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0 cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4g ICBDaXNjbyBTeXN0ZW1zLCBJbmMuPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAg Q2lzY28gU3lzdGVtcywgSW5jLjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48 L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3Rk Pjx0ZCBjbGFzcz0ibGVmdCI+ICAgRGUgS2xlZXRsYWFuIDZhPC90ZD48dGQ+IDwvdGQ+PHRkIGNs YXNzPSJyaWdodCI+ICAgRGUgS2xlZXRsYWFuIDZhPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFs aWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWdu PSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBEaWVnZW0gIDE4MzE8L3RkPjx0ZD4gPC90 ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBEaWVnZW0gIDE4MzE8L3RkPjx0ZCBjbGFzcz0ibGluZW5v IiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2 YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIEJlbGdpdW08L3RkPjx0ZD4gPC90 ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBCZWxnaXVtPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFs aWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWdu PSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJp Z2h0Ij48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAg ICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9Imxl ZnQiPiAgIEVtYWlsOiBhc0BjaXNjby5jb208L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0 Ij4gICBFbWFpbDogYXNAY2lzY28uY29tPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0 b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3Ai PjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij48 L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRy Pjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAg IExpIHpoZW5iaW48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBMaSB6aGVuYmlu PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0 cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4g ICBIdWF3ZWkgVGVjaG5vbG9naWVzPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAg SHVhd2VpIFRlY2hub2xvZ2llczwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48 L3RkPjwvdHI+DQoNCiAgICAgPHRyPjx0ZD48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+PC90ZD48dGQ+ IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+PC90ZD48dGQ+PC90ZD48L3RyPg0KICAgICA8dHIgYmdj b2xvcj0iZ3JheSI+PHRoIGNvbHNwYW49IjUiIGFsaWduPSJjZW50ZXIiPjxhIG5hbWU9ImVuZCI+ Jm5ic3A7RW5kIG9mIGNoYW5nZXMuIDU2IGNoYW5nZSBibG9ja3MuJm5ic3A7PC9hPjwvdGg+PC90 cj4NCiAgICAgPHRyIGNsYXNzPSJzdGF0cyI+PHRkPjwvdGQ+PHRoPjxpPjE4OSBsaW5lcyBjaGFu Z2VkIG9yIGRlbGV0ZWQ8L2k+PC90aD48dGg+PGk+IDwvaT48L3RoPjx0aD48aT4zMTEgbGluZXMg Y2hhbmdlZCBvciBhZGRlZDwvaT48L3RoPjx0ZD48L3RkPjwvdHI+DQogICAgIDx0cj48dGQgY29s c3Bhbj0iNSIgY2xhc3M9InNtYWxsIiBhbGlnbj0iY2VudGVyIj48YnI+VGhpcyBodG1sIGRpZmYg d2FzIHByb2R1Y2VkIGJ5IHJmY2RpZmYgMS40Mi4gVGhlIGxhdGVzdCB2ZXJzaW9uIGlzIGF2YWls YWJsZSBmcm9tIDxhIGhyZWY9Imh0dHA6Ly93d3cudG9vbHMuaWV0Zi5vcmcvdG9vbHMvcmZjZGlm Zi8iPmh0dHA6Ly90b29scy5pZXRmLm9yZy90b29scy9yZmNkaWZmLzwvYT4gPC90ZD48L3RyPg0K ICAgPC90Ym9keT48L3RhYmxlPg0KICAgDQogICANCjwvYm9keT48L2h0bWw+DQo8IS0tIGFyZ3M6 IHsnLS1vbGRjb2xvdXInOiAncmVkJywgJy0td2lkdGgnOiAnJywgJ2RpZmZ0eXBlJzogJy0taHRt bCcsICd1cmwxJzogJycsICdzdWJtaXQnOiAnR2VuZXJhdGUgZGlmZicsICd1cmwyJzogJycsICct LW5ld2NvbG91cic6ICdncmVlbid9IC0tPg== --_002_BY1PR0501MB1381F6F77C13B89DF71CCE33D53F0BY1PR0501MB1381_-- From nobody Thu Oct 22 07:18:27 2015 Return-Path: X-Original-To: secdir@ietfa.amsl.com Delivered-To: secdir@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 245D61B2FF7; Wed, 14 Oct 2015 21:05:53 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.902 X-Spam-Level: X-Spam-Status: No, score=-1.902 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ZDjcc5Qd8HKJ; Wed, 14 Oct 2015 21:05:48 -0700 (PDT) Received: from na01-by2-obe.outbound.protection.outlook.com (mail-by2on0132.outbound.protection.outlook.com [207.46.100.132]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 6C6FC1B2FF5; Wed, 14 Oct 2015 21:05:48 -0700 (PDT) Received: from BY1PR0501MB1381.namprd05.prod.outlook.com (10.160.107.139) by BY1PR0501MB1381.namprd05.prod.outlook.com (10.160.107.139) with Microsoft SMTP Server (TLS) id 15.1.293.16; Thu, 15 Oct 2015 04:05:47 +0000 Received: from BY1PR0501MB1381.namprd05.prod.outlook.com ([10.160.107.139]) by BY1PR0501MB1381.namprd05.prod.outlook.com ([10.160.107.139]) with mapi id 15.01.0293.007; Thu, 15 Oct 2015 04:05:47 +0000 From: Shraddha Hegde To: Benjamin Kaduk , "Acee Lindem (acee)" Thread-Topic: secdir review of draft-ietf-ospf-node-admin-tag-05 Thread-Index: AQHRAtRkmhe1qX1HzE+v6FQBX6gc055lH6mAgABoLJCABH8tgIAABXOAgAADDQCAAAE9AIAA3F8AgADWWYCAADQwMA== Date: Thu, 15 Oct 2015 04:05:46 +0000 Message-ID: References: In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: authentication-results: spf=none (sender IP is ) smtp.mailfrom=shraddha@juniper.net; x-originating-ip: [116.197.184.11] x-microsoft-exchange-diagnostics: 1; BY1PR0501MB1381; 5:MtpUv09JwqTkfIdFgfBO6A7r8kma52znKig88zmZ1idH7hYn+PzyXdtV9FSpO1VlkeNpqeibpWrfobt6jyqd9huUgBqlon/IVhXm+5PJekvVkdoH2h0b5O0UTLYLduLKZHvW+dCBcpL9t07jljSdbQ==; 24:CXluv5zeiSeAPWEzPKSmmqEJSzKx7s1rv/+rVSjWSHZY8eGI8kxxXGvN5PvEcU97mGZYDkkKD7qV7/WpO3j2EjVC2WB7c/AusOYwJ71Gsnk=; 20:pbFy46CCTifBiJVKX/WQVmzQgGQlCgX3RJNtTmbbqVFEo98L86+SJW0alkb30CliEuNGUVPGT9GTc+5ZWAixxA== x-microsoft-antispam: UriScan:;BCL:0;PCL:0;RULEID:;SRVR:BY1PR0501MB1381; x-microsoft-antispam-prvs: x-exchange-antispam-report-test: UriScan:(240460790083961)(138986009662008)(95692535739014); x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(601004)(2401047)(520078)(5005006)(8121501046)(3002001); SRVR:BY1PR0501MB1381; BCL:0; PCL:0; RULEID:; SRVR:BY1PR0501MB1381; x-forefront-prvs: 0730093765 x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(6009001)(199003)(377454003)(13464003)(24454002)(52604005)(189002)(479174004)(92566002)(66066001)(46102003)(64706001)(81156007)(2900100001)(102836002)(99286002)(33656002)(2171001)(5004730100002)(5001960100002)(105586002)(87936001)(19580395003)(77096005)(97736004)(93886004)(101416001)(106116001)(54356999)(5003600100002)(11100500001)(110136002)(50986999)(19580405001)(5001920100001)(10400500002)(106356001)(74316001)(122556002)(76576001)(5002640100001)(5008740100001)(5001770100001)(5007970100001)(76176999)(189998001)(86362001)(2950100001)(230783001)(40100003); DIR:OUT; SFP:1102; SCL:1; SRVR:BY1PR0501MB1381; H:BY1PR0501MB1381.namprd05.prod.outlook.com; FPR:; SPF:None; PTR:InfoNoRecords; A:1; MX:1; LANG:en; received-spf: None (protection.outlook.com: juniper.net does not designate permitted sender hosts) spamdiagnosticoutput: 1:23 spamdiagnosticmetadata: NSPM Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-OriginatorOrg: juniper.net X-MS-Exchange-CrossTenant-originalarrivaltime: 15 Oct 2015 04:05:46.8144 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: bea78b3c-4cdb-4130-854a-1d193232e5f4 X-MS-Exchange-Transport-CrossTenantHeadersStamped: BY1PR0501MB1381 Archived-At: X-Mailman-Approved-At: Thu, 22 Oct 2015 07:18:02 -0700 Cc: "draft-ietf-ospf-node-admin-tag.all@ietf.org" , "iesg@ietf.org" , "secdir@ietf.org" Subject: Re: [secdir] secdir review of draft-ietf-ospf-node-admin-tag-05 X-BeenThere: secdir@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: Security Area Directorate List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 15 Oct 2015 04:05:53 -0000 QWNlZS9CZW4sDQoNClVwZGF0ZWQgdGhlIHRleHQgYXMgYmVsb3cuDQoNCjx0PiBNdWx0aXBsZSBu b2RlIGFkbWluaXN0cmF0aXZlIHRhZyBUTFZzIE1BWSBhcHBlYXIgaW4gYW4gUkkgTFNBIG9yIA0K ICAgbXVsdGlwbGUgbm9kZSBhZG1pbmlzdHJhdGl2ZSB0YWcgVExWcyBNQVkgYmUgY29udGFpbmVk IGluIGRpZmZlcmVudA0KICAgaW5zdGFuY2VzIG9mIHRoZSBSSSBMU0EuICBUaGUgbm9kZSBhZG1p bmlzdHJhdGl2ZSB0YWdzIGFzc29jaWF0ZWQNCiAgIHdpdGggYSBub2RlIHRoYXQgb3JpZ2luYXRl cyB0YWdzIGZvciB0aGUgcHVycG9zZSBvZiBhbnkgY29tcHV0YXRpb24gb3IgcHJvY2Vzc2luZyBh dCBhIHJlY2VpdmluZyBub2RlDQogICBTSE9VTEQgYmUgYSBzdXBlcnNldCBvZiBub2RlIGFkbWlu aXN0cmF0aXZlIHRhZ3MgZnJvbSBhbGwgdGhlIFRMVnMgaW4gYWxsIHRoZQ0KICAgcmVjZWl2ZWQg UkkgTFNBIGluc3RhbmNlcyBpbiB0aGUgTGluay1TdGF0ZSBEYXRhYmFzZSAoTFNEQikgYWR2ZXJ0 aXNlZCBieSB0aGUgDQogICBjb3JyZXNwb25kaW5nIE9TUEYgcm91dGVyLldoZW4gYW4gUkkgTFNB IGlzIHJlY2VpdmVkIHRoYXQgY2hhbmdlcyB0aGUgc2V0IG9mIA0KICAgdGFncyBhcHBsaWNhYmxl IHRvIGFueSBvcmlnaW5hdGluZyBub2RlLCBhIHJlY2VpdmluZyBub2RlIE1VU1QgcmVwZWF0IGFu eSBjb21wdXRhdGlvbiBvcg0KCXByb2Nlc3NpbmcgdGhhdCBpcyBiYXNlZCBvbiB0aG9zZSBhZG1p bmlzdHJhdGl2ZSB0YWdzLg0KPC90Pg0KDQoNClJnZHMNClNocmFkZGhhDQoNCi0tLS0tT3JpZ2lu YWwgTWVzc2FnZS0tLS0tDQpGcm9tOiBCZW5qYW1pbiBLYWR1ayBbbWFpbHRvOmthZHVrQE1JVC5F RFVdIA0KU2VudDogVGh1cnNkYXksIE9jdG9iZXIgMTUsIDIwMTUgNjoyOCBBTQ0KVG86IEFjZWUg TGluZGVtIChhY2VlKSA8YWNlZUBjaXNjby5jb20+DQpDYzogU2hyYWRkaGEgSGVnZGUgPHNocmFk ZGhhQGp1bmlwZXIubmV0PjsgaWVzZ0BpZXRmLm9yZzsgc2VjZGlyQGlldGYub3JnOyBkcmFmdC1p ZXRmLW9zcGYtbm9kZS1hZG1pbi10YWcuYWxsQGlldGYub3JnDQpTdWJqZWN0OiBSZTogc2VjZGly IHJldmlldyBvZiBkcmFmdC1pZXRmLW9zcGYtbm9kZS1hZG1pbi10YWctMDUNCg0KT24gV2VkLCAx NCBPY3QgMjAxNSwgQWNlZSBMaW5kZW0gKGFjZWUpIHdyb3RlOg0KDQo+IEhpIEJlbiwNCj4NCj4g T24gMTAvMTMvMTUsIDc6MDIgUE0sICJBY2VlIExpbmRlbSAoYWNlZSkiIDxhY2VlQGNpc2NvLmNv bT4gd3JvdGU6DQo+DQo+ID4NCj4gPg0KPiA+T24gMTAvMTMvMTUsIDY6NTcgUE0sICJCZW5qYW1p biBLYWR1ayIgPGthZHVrQE1JVC5FRFU+IHdyb3RlOg0KPiA+DQo+ID4+VGhhbmtzIGZvciBjbGFy aWZ5aW5nLiAgU28sIHRoaXMgaXMgYSBub24taXNzdWUsIGFuZCB0aGUgb25seSANCj4gPj5xdWVz dGlvbiBpcyB3aGV0aGVyIHRoZSB0ZXh0IGNvdWxkL3Nob3VsZCBiZSBjaGFuZ2VkIHRvIGltcHJv dmUgY2xhcml0eS4NCj4gPg0KPiA+TGV0IG1lIHRoaW5rIGFib3V0IHRoaXMgc2luY2UgaXQgaXMg YSBnZW5lcmljIE9TUEYgUkkgYW1iaWd1aXR5IGFuZCANCj4gPml0IHdpbGwgYWZmZWN0IG11bHRp cGxlIGRvY3VtZW50cy4gSW4gYSBXZWJFeCByaWdodCBub3cgdGhvdWdo4oCmDQo+DQo+IFRoZSBr ZXkgcG9pbnQgaGVyZSBpcyB0aGF0IGFuIE9TUEYgcm91dGVyIG9ubHkgbWFpbnRhaW5zIHRoZSAN Cj4gbW9zdC1yZWNlbnQgaW5zdGFuY2Ugb2YgYW4gTFNBIGluIGl0cyBMaW5rLVN0YXRlIERhdGFi YXNlLiBTbywgdGhlcmUgDQo+IHNob3VsZG7igJl0IGJlIGFueSBhbWJpZ3VpdHkuIFBlcmhhcHMs IHRoZSB0ZXh0IGNvdWxkIGJlIGNoYW5nZWQgdG8g4oCcYWxsIA0KPiBSSSBMU0EgaW5zdGFuY2Vz IGluIHRoZSBMaW5rLVN0YXRlIERhdGFiYXNlIChMU0RCKSBhZHZlcnRpc2VkIGJ5IHRoZSANCj4g Y29ycmVzcG9uZGluZyBPU1BGIHJvdXRlci7igJ0NCg0KVGhhdCBzZWVtcyBsaWtlIGEgdXNlZnVs IGltcHJvdmVtZW50OyB0aGFua3MuDQoNCi1CZW4NCg== From nobody Thu Oct 22 07:18:29 2015 Return-Path: X-Original-To: secdir@ietfa.amsl.com Delivered-To: secdir@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 045E21B3033; Wed, 14 Oct 2015 21:35:48 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.902 X-Spam-Level: X-Spam-Status: No, score=-1.902 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 8m7tYRCpMyR4; Wed, 14 Oct 2015 21:35:45 -0700 (PDT) Received: from na01-bn1-obe.outbound.protection.outlook.com (mail-bn1on0752.outbound.protection.outlook.com [IPv6:2a01:111:f400:fc10::752]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 1BC601B3032; Wed, 14 Oct 2015 21:35:44 -0700 (PDT) Received: from BY1PR0501MB1381.namprd05.prod.outlook.com (10.160.107.139) by BY1PR0501MB1381.namprd05.prod.outlook.com (10.160.107.139) with Microsoft SMTP Server (TLS) id 15.1.293.16; Thu, 15 Oct 2015 04:35:26 +0000 Received: from BY1PR0501MB1381.namprd05.prod.outlook.com ([10.160.107.139]) by BY1PR0501MB1381.namprd05.prod.outlook.com ([10.160.107.139]) with mapi id 15.01.0293.007; Thu, 15 Oct 2015 04:35:26 +0000 From: Shraddha Hegde To: Benjamin Kaduk Thread-Topic: secdir review of draft-ietf-ospf-node-admin-tag-05 Thread-Index: AQHRAtRkmhe1qX1HzE+v6FQBX6gc055lH6mAgABoLJCABH8tgIAAbyuggAFMpwCAADYS0A== Date: Thu, 15 Oct 2015 04:35:26 +0000 Message-ID: References: In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: authentication-results: spf=none (sender IP is ) smtp.mailfrom=shraddha@juniper.net; x-originating-ip: [116.197.184.11] x-microsoft-exchange-diagnostics: 1; BY1PR0501MB1381; 5:54C2Uc6wZUlC6J1NshUAOhkMKnx6wXFzkG3LY6pO5Sh66AgyfBwfoanIi9OTuZq3q9RrUInDLTvAi5nPCIkHxtY9urlbSku7dAJbHS50DFQF/rz+N6bHmmIUUOdWafuNiNQz04ky7EDCCl9Ps8KSpw==; 24:1fkU41TGp1sthyIWhKmdA91wD505Ed4oNQNFOGKRdyO0NYUxZsRb5PgEGTec3EowFrdIKuEZYWcfeqeM/BaHxJIBeYENFUwzTelrRikVGIk=; 20:GE+lLWJQCh1GiZO8KINLxsbQ7Yk2x84NLwljy+Au58/nNZrWEZnl7EfoWCOV75drshuYIML3GRn5QmglVe37DA== x-microsoft-antispam: UriScan:;BCL:0;PCL:0;RULEID:;SRVR:BY1PR0501MB1381; x-microsoft-antispam-prvs: x-exchange-antispam-report-test: UriScan:(240460790083961)(138986009662008)(95692535739014); x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(601004)(2401047)(520078)(5005006)(8121501046)(3002001); SRVR:BY1PR0501MB1381; BCL:0; PCL:0; RULEID:; SRVR:BY1PR0501MB1381; x-forefront-prvs: 0730093765 x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(6009001)(199003)(377454003)(24454002)(13464003)(189002)(92566002)(66066001)(46102003)(64706001)(81156007)(2900100001)(102836002)(99286002)(33656002)(2171001)(5004730100002)(5001960100002)(105586002)(87936001)(19580395003)(77096005)(93886004)(97736004)(101416001)(106116001)(54356999)(5003600100002)(11100500001)(110136002)(50986999)(5001920100001)(19580405001)(106356001)(74316001)(10400500002)(122556002)(76576001)(5002640100001)(5008740100001)(5007970100001)(76176999)(189998001)(86362001)(2950100001)(5890100001)(230783001)(40100003); DIR:OUT; SFP:1102; SCL:1; SRVR:BY1PR0501MB1381; H:BY1PR0501MB1381.namprd05.prod.outlook.com; FPR:; SPF:None; PTR:InfoNoRecords; A:1; MX:1; LANG:en; received-spf: None (protection.outlook.com: juniper.net does not designate permitted sender hosts) spamdiagnosticoutput: 1:23 spamdiagnosticmetadata: NSPM Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 X-OriginatorOrg: juniper.net X-MS-Exchange-CrossTenant-originalarrivaltime: 15 Oct 2015 04:35:26.1423 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: bea78b3c-4cdb-4130-854a-1d193232e5f4 X-MS-Exchange-Transport-CrossTenantHeadersStamped: BY1PR0501MB1381 Archived-At: X-Mailman-Approved-At: Thu, 22 Oct 2015 07:18:02 -0700 Cc: "draft-ietf-ospf-node-admin-tag.all@ietf.org" , "Acee Lindem \(acee\)" , "iesg@ietf.org" , "secdir@ietf.org" Subject: Re: [secdir] secdir review of draft-ietf-ospf-node-admin-tag-05 X-BeenThere: secdir@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: Security Area Directorate List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 15 Oct 2015 04:35:48 -0000 Ben, <... snip to open comments....> The diagram for the TLV format in Figure 1 still has a 15-bit type and 17-b= it length; both should be 16 bits. done > > Similarly, I would find it helpful if there was some text motivating=20 > > the "middle patch" mentioned above, towards the beginning of the=20 > > technical > > (non-example) portion of the document. > > I could not get this comment. Could you pls elaborate? This is related to Alvaro's DISCUSS. Basically, there is conflict between = saying that the interpretation of tag values is entirely local, and imposin= g restirctions on how the tags should be interpreted. It is helpful to the= reader to discuss why the document does not pick one extreme of completely= -local interpretation and a fully specified protocol that dictates the mean= ing of all tags. Instead, the document picks something in-between, with ta= g interpretation mostly a matter of local policy, but some restrictions on = their use. Describing why this choice was made early in the text gives the= reader a better picture of what the goals of the protocol are, to better u= nderstand the details of the protocol itself. Although , the actual values of node admin tags do not need to b= e standardized and is left to the operator's discretion to allocate values = and assign meanings to it, It's necessary to layout certain rules/regulatio= ns and guidelines on how the tags can be used and how they cannot be used. That will help in getting interoperable implementation= s from vendors and avoid surprises in the field. For ex: We have a statement administrative tag order has no meaning. If th= is document does not specify such a statement, there is every possibility s= ome implementation will have policies that will look at the order in which = the tags are encoded. Some other implementation which does not care about t= he order of the tag might keep changing it at every LSA refresh so it's har= d to get them to interoperate. Added below text in section 3.2.1 " This section describes general rules/ regulations=20 and guidelines for using and interpreting an administrative tag which will facilitate interoperable implementations by vendors." Rgds Shraddha -----Original Message----- From: Benjamin Kaduk [mailto:kaduk@MIT.EDU]=20 Sent: Thursday, October 15, 2015 6:26 AM To: Shraddha Hegde Cc: Acee Lindem (acee) ; iesg@ietf.org; secdir@ietf.org; dr= aft-ietf-ospf-node-admin-tag.all@ietf.org Subject: RE: secdir review of draft-ietf-ospf-node-admin-tag-05 On Wed, 14 Oct 2015, Shraddha Hegde wrote: > > I completely missed looking at editorial comments and the diff in=20 > previous mail. Sorry about that. > > Have taken your changes in the latest version and diff (-06 to -08)=20 > attached. Pls take a look. The new version seems improved; I'll skip line-by-line discussion of the gr= ammar changes since the IESG teleconference call is fast approaching. The diagram for the TLV format in Figure 1 still has a 15-bit type and 17-b= it length; both should be 16 bits. done > Editorial comments: > > > > > I also have some editorial comments unrelated to the secdir review: > > > > Section 3.2 reads rather like a jumbled list and could benefit from=20 > > some additional structure. > Updated. Pls refer diff. > > > > Similarly, I would find it helpful if there was some text motivating=20 > > the "middle patch" mentioned above, towards the beginning of the=20 > > technical > > (non-example) portion of the document. > > I could not get this comment. Could you pls elaborate? This is related to Alvaro's DISCUSS. Basically, there is conflict between = saying that the interpretation of tag values is entirely local, and imposin= g restirctions on how the tags should be interpreted. It is helpful to the= reader to discuss why the document does not pick one extreme of completely= -local interpretation and a fully specified protocol that dictates the mean= ing of all tags. Instead, the document picks something in-between, with ta= g interpretation mostly a matter of local policy, but some restrictions on = their use. Describing why this choice was made early in the text gives the= reader a better picture of what the goals of the protocol are, to better u= nderstand the details of the protocol itself. Although , the actual values of node admin tags do not need to b= e standardized and is left to the operator's discretion to allocate values = and assign meanings to it, It's necessary to layout certain rules/regulatio= ns and guidelines on how the tags can be used and how they cannot be used. That will help in getting interoperable implementation= s from vendors and avoid surprises in the field. Added below text in section 3.2.1 " This section describes general rules/ regulations=20 and guidelines for using and interpreting an administrative tag which will facilitate interoperable implementations by vendors." > > For a construction as weakly structured as these administrative=20 > > tags, preventing any internal structure or dependencies between tags=20 > > (as this document attempts to do) seems correct. However, this=20 > > sentiment seems to be expressed differently in several different=20 > > places in the document, and it would be good to consolidate and=20 > > coordinate them. In particular, paragraph 3 of section 3.2=20 > > explicitly says that tag order has no meaning, but paragraph 4 has the = weaker "SHOULD be considered an unordered list". > > (The word "set" might be appropriate here.) > > Below is the latest text. SHOULD is changed to MUST > > " Each tag MUST be treated as an independent identifier that MAY be=20 > used in policy to perform a policy action. Each tag carried by the=20 > administrative tag TLV SHOULD be used to indicate a characteristic of=20 > a node that is independent of the characteristics indicated by other=20 > administrative tags. > The administrative tag list within the TLV MUST be considered an=20 > unordered list. Whilst policies may be implemented based on the=20 > presence of multiple tags (e.g., if tag A AND tag B are present), they=20 > MUST NOT be reliant upon the order of the tags (i.e., all policies=20 > should be considered commutative operations, such that tag A preceding=20 > or following tag B does not change their outcome)." This seems okay in a quick read, but again, the resolution of Alvaro's DISC= USS will be relevant to this text. > > Paragraph 7 of section 3.2 seems to be trying to say that the=20 > > administrative tags must indicate inherent or administratively=20 > > configured properties of a node and must not be used to convey=20 > > attributes of the routing topology. (The word "tie" seems=20 > > insufficiently clear.) > > Changed to text below. > > "Being part of the RI LSA, the per-node administrative tag TLV must be=20 > reasonably small and stable. In particular, but not limited to,=20 > implementations supporting per-node administrative tags MUST NOT be=20 > used to convey attributes of the routing topology or associate tags=20 > with changes in the network topology (both within and outside the OSPF=20 > domain) or reachability of routes." That's an improvement, thanks. ("but not limited to" is still bad grammar,= but the best fix is not immediately obvious.) > > The last paragraph of section 3.2 could probably be written more clearl= y. > > In particular, "in any instance of the RI-LSA" is not entirely clear=20 > > to me (but then again, I don't really understand how LSAs normally=20 > > work). Is it enough to just say that implementations MUST detect=20 > > when the administrative tags associated with a given node change,=20 > > and update their state accordingly? > > > hope this issue is resolved in other mail thread. I think so, yes. -Ben From nobody Thu Oct 22 07:18:31 2015 Return-Path: X-Original-To: secdir@ietfa.amsl.com Delivered-To: secdir@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 7549E1B3061; Wed, 14 Oct 2015 22:00:23 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.902 X-Spam-Level: X-Spam-Status: No, score=-1.902 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id tVv5yK2JVmzn; Wed, 14 Oct 2015 22:00:18 -0700 (PDT) Received: from na01-bn1-obe.outbound.protection.outlook.com (mail-bn1bon0786.outbound.protection.outlook.com [IPv6:2a01:111:f400:fc10::1:786]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id CCF741B3060; Wed, 14 Oct 2015 22:00:16 -0700 (PDT) Received: from BY1PR0501MB1381.namprd05.prod.outlook.com (10.160.107.139) by BY1PR0501MB1383.namprd05.prod.outlook.com (10.160.107.141) with Microsoft SMTP Server (TLS) id 15.1.293.16; Thu, 15 Oct 2015 05:00:08 +0000 Received: from BY1PR0501MB1381.namprd05.prod.outlook.com ([10.160.107.139]) by BY1PR0501MB1381.namprd05.prod.outlook.com ([10.160.107.139]) with mapi id 15.01.0293.007; Thu, 15 Oct 2015 05:00:08 +0000 From: Shraddha Hegde To: "Acee Lindem (acee)" , Benjamin Kaduk Thread-Topic: secdir review of draft-ietf-ospf-node-admin-tag-05 Thread-Index: AQHRAtRkmhe1qX1HzE+v6FQBX6gc055lH6mAgABoLJCABH8tgIAABXOAgABbK5CAAINYgIABG5Lg Date: Thu, 15 Oct 2015 05:00:08 +0000 Message-ID: References: In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: authentication-results: spf=none (sender IP is ) smtp.mailfrom=shraddha@juniper.net; x-originating-ip: [116.197.184.11] x-microsoft-exchange-diagnostics: 1; BY1PR0501MB1383; 5:Vz9hKda7qu5YLW8ecYylhVzqk5udCuLVMbzOA/myIHqs2oyteMoBwp+VReB5zNDMMw0CryeXLM568osZseq0L9drcNEzB694mQs9uKuucmj4AiwVTD/QxnozvYO2Sq0+uxg8QgbZZor/eBUWD8CVrQ==; 24:im694Ny1LsTHvHZ1iFExIEFoMQMtxoeAqA7O/uUNPSzcXQAhxny0QJ7POtZv5CEkYgtEgbtuiB7W49+bafvm4iaIuyP04o5sg5sJ/ei1JoI=; 20:TAyuMOj27KIMArbHDb07ZCg7cflfpWr8yHrtYBD130agYiMVuxlynXFcbKKvM+LLtb+tmxU+5C9M9O7VzvredA== x-microsoft-antispam: UriScan:;BCL:0;PCL:0;RULEID:;SRVR:BY1PR0501MB1383; x-microsoft-antispam-prvs: x-exchange-antispam-report-test: UriScan:(138986009662008)(95692535739014)(240460790083961); x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(601004)(2401047)(8121501046)(5005006)(520078)(3002001); SRVR:BY1PR0501MB1383; BCL:0; PCL:0; RULEID:; SRVR:BY1PR0501MB1383; x-forefront-prvs: 0730093765 x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(6009001)(13464003)(24454002)(51914003)(52034003)(199003)(377454003)(51444003)(164054003)(189002)(479174004)(129404003)(97736004)(99286002)(122556002)(5890100001)(74316001)(5001770100001)(106356001)(2171001)(93886004)(81156007)(10400500002)(106116001)(87936001)(105586002)(101416001)(5008740100001)(33656002)(230783001)(19580395003)(54356999)(102836002)(189998001)(86362001)(110136002)(19580405001)(5002640100001)(11100500001)(5007970100001)(5003600100002)(2950100001)(76576001)(5001960100002)(76176999)(40100003)(46102003)(2900100001)(5004730100002)(66066001)(50986999)(64706001)(77096005)(92566002)(579004); DIR:OUT; SFP:1102; SCL:1; SRVR:BY1PR0501MB1383; H:BY1PR0501MB1381.namprd05.prod.outlook.com; FPR:; SPF:None; PTR:InfoNoRecords; A:1; MX:1; LANG:en; received-spf: None (protection.outlook.com: juniper.net does not designate permitted sender hosts) spamdiagnosticoutput: 1:23 spamdiagnosticmetadata: NSPM Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-OriginatorOrg: juniper.net X-MS-Exchange-CrossTenant-originalarrivaltime: 15 Oct 2015 05:00:08.4312 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: bea78b3c-4cdb-4130-854a-1d193232e5f4 X-MS-Exchange-Transport-CrossTenantHeadersStamped: BY1PR0501MB1383 Archived-At: X-Mailman-Approved-At: Thu, 22 Oct 2015 07:18:03 -0700 Cc: "draft-ietf-ospf-node-admin-tag.all@ietf.org" , "iesg@ietf.org" , "secdir@ietf.org" Subject: Re: [secdir] secdir review of draft-ietf-ospf-node-admin-tag-05 X-BeenThere: secdir@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: Security Area Directorate List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 15 Oct 2015 05:00:23 -0000 QWNlZSwNCg0KQWx0aG91Z2ggUkZDIDIzMjgvNTM0MCBkbyBub3QgZXhwbGljaXRseSB0YWxrIGFi b3V0IHR5cGUgMTEgIExTQXMsIFJGQyA1MjUwIA0KUmVzdHJpY3RzIHR5cGUgMTEgaW50byBzdHVi L05TU0FzLiBBZGRpbmcgdGhlIGJsb3cgdGV4dCB0byB0aGUgZHJhZnQuDQoNCiJBbiBBQlIgaW4g YSBzdHViIG9yIE5TU0EgYXJlYSBNQVkgb3JpZ2luYXRlIEFTIHNjb3BlZCBSSSBMU0FzIGFuZCBm bG9vZCANCnRoZW0gaW50byBub24tc3R1Yi9OU1NBIGFyZWFzIGFuZCBNQVkgb3JpZ2luYXRlIGFy ZWEgc2NvcGVkIFJJIExTQXMgaW50byB0aGUgc3R1Yi9OU1NBIGFyZWFzIGFzIHRoZSBBUyBzY29w ZWQgTFNBcw0KYXJlIG5vdCBmbG9vZGVkIGludG8gc3R1Yi9OU1NBIGFyZWFzLiINCg0KUmdkcw0K U2hyYWRkaGENCg0KLS0tLS1PcmlnaW5hbCBNZXNzYWdlLS0tLS0NCkZyb206IEFjZWUgTGluZGVt IChhY2VlKSBbbWFpbHRvOmFjZWVAY2lzY28uY29tXSANClNlbnQ6IFdlZG5lc2RheSwgT2N0b2Jl ciAxNCwgMjAxNSA1OjMzIFBNDQpUbzogU2hyYWRkaGEgSGVnZGUgPHNocmFkZGhhQGp1bmlwZXIu bmV0PjsgQmVuamFtaW4gS2FkdWsgPGthZHVrQE1JVC5FRFU+DQpDYzogaWVzZ0BpZXRmLm9yZzsg c2VjZGlyQGlldGYub3JnOyBkcmFmdC1pZXRmLW9zcGYtbm9kZS1hZG1pbi10YWcuYWxsQGlldGYu b3JnDQpTdWJqZWN0OiBSZTogc2VjZGlyIHJldmlldyBvZiBkcmFmdC1pZXRmLW9zcGYtbm9kZS1h ZG1pbi10YWctMDUNCg0KSGkgU2hyYWRkaGEsIA0KDQpPbiAxMC8xNC8xNSwgMTI6MzUgQU0sICJT aHJhZGRoYSBIZWdkZSIgPHNocmFkZGhhQGp1bmlwZXIubmV0PiB3cm90ZToNCg0KPkFjZWUsDQo+ DQo+PC0tLXNuaXBwZWQgdG8gb3BlbiBwb2ludHMtLS0+DQo+DQo+DQo+LS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0N Cj4tLS0NCj4tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLQ0KPi0NCj4NCj4+PiA8U2hyYWRkaGE+IENvdWxkIHlvdSBw bHMgZWxhYm9yYXRlIHRoZSBjYXNlLiBJIGRvbid0IHF1aXRlIA0KPj4+IHVuZGVyc3RhbmQgd2h5 IHRoZSBBQlIgaW4gYSBzdHViL05TU0EgYXJlYSB3b3VsZCBnZW5lcmF0ZSBvciByZWNlaXZlIA0K Pj4+IFJJIExTQXMgd2l0aCBkaWZmZXJlbnQgc2NvcGVzLkkgdGhpbmsgaXQncyBwZXJmZWN0bHkg dmFsaWQgdG8gZmxvb2QgDQo+Pj4gdGhlIEFTIHNjb3BlZCBSSSBMU0FzIGludG8gdGhlIHN0dWIg LyBOU1NBIGFyZWEuDQo+Pg0KPj5BY2VlLCBJIHRoaW5rIHRoaXMgaXMgYSBxdWVzdGlvbiBmb3Ig eW91Lg0KPg0KPlllYWggLSBJIG1pc3NlZCB0aGlzIHdpdGhvdXQgRS1tYWlsIHF1b3RpbmfigKYN Cj4NCj5TaHJhZGRoYSwNCj4NCj5BUy1zY29wZWQgTFNBcyBhcmUgbm90IGZsb29kZWQgaW50byBz dHViIG9yIE5TU0EgYXJlYXMuIFNvLCBpZiBhbiBBQlIgDQo+aXMgZ29pbmcgdG8gYWR2ZXJ0aXNl IHRhZ3MgdG8gaXRzIGF0dGFjaGVkIGFyZWFzIGFuZCB0aGUgcmVzdCBvZiB0aGUgDQo+T1NQRiBS b3V0aW5nIGRvbWFpbiwgaXQgd2lsbCBuZWVkIHRvIG9yaWdpbmF0ZSB0aGUgTFNBIGF0IGRpZmZl cmVudCBzY29wZXMuDQo+DQo+PFNocmFkZGhhPiBBY2VlLCAgSSB0aGluayByZXN0cmljdGluZyAg QVMgc2NvcGVkIFJJIExTQSBpbnRvIE5TU0EgL3N0dWIgDQo+YXJlYXMgd2lsbCBoYXZlIG1hbnkg aXNzdWVzLg0KPiAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgSWYgYSBub24t QUJSIHJvdXRlciBmcm9tIG90aGVyIA0KPmFyZWEgb3JpZ2luYXRlcyBSSSBMU0Egd2l0aCBub2Rl IHRhZyBhbmQgdGhlIHNwZWNpZmljIGFwcGxpY2F0aW9uIG5lZWRzIHRoZQ0KPiAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgVGFnIHRvIGJlIGF2YWlsYWJsZSBpbiB0aGUgZW50 aXJlIA0KPk9QRiBkb21haW4sIGhvdyB3aWxsIHRoZSBzdHViL05TU0EgYXJlYSByb3V0ZXJzIHJl Y2VpdmUgaXQ/DQo+ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICBJIHRoaW5r IHRoaXMgZGlzY3Vzc2lvbiBpcyANCj5lcXVhbGx5IHJlbGV2YW50IHRvIDQ5NzBiaXMuDQo+ICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgSSBkb24ndCBzZWUgYSByZWFzb24g d2h5IEFTIA0KPnNjb3BlZCBSSSBMU0Egc2hvdWxkIGJlIHJlc3RyaWN0ZWQgaW4gc3R1Yi9OU1NB Lg0KPiAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICBSSSBMU0FzIGRvIG5v dCBjb250YWluIGFueSANCj5yb3V0ZSBpbmZvcm1hdGlvbiBzbyBpdCdzIG5vdCBnb2luZyB0byBi ZSBodWdlIGluIG51bWJlci4NCg0KQnkgZGVmaW5pdGlvbiwgQVMtc2NvcGVkIExTQXMgYXJlIE5P VCBmbG9vZGVkIGludG8gYSBzdHViIG9yIE5TU0EgYXJlYS4NClBsZWFzZSByZWFkIHN0dWIgYW5k IE5TU0EgYXJlYSByZWZlcmVuY2VzIGluIFJGQyAyMzI4LCBSRkMgNTM0MCwgUkZDIDUyNTAsIGFu ZCBSRkMgMzEwMS4gWW914oCZbGwgbm90ZSB0aGF0IHN0dWIgYW5kIE5TU0EgYXJlYSBoYXZlIG5v IHZpc2liaWxpdHkgdG8gdG9wb2xvZ3kgb3IgUm91dGVyIElEcyBvZiBPU1BGIHJvdXRlcnMgaW4g b3RoZXIgYXJlYXMuDQoNCkhvcGUgdGhpcyBoZWxwcywNCkFjZWUgDQoNCg0KDQoNCj4gICAgICAg ICAgICAgICAgICANCj4gICAgICAgICAgICAgICAgICANCj4NCj4NCj4NCj4NCj4NCj4tLS0tLU9y aWdpbmFsIE1lc3NhZ2UtLS0tLQ0KPkZyb206IEFjZWUgTGluZGVtIChhY2VlKSBbbWFpbHRvOmFj ZWVAY2lzY28uY29tXQ0KPlNlbnQ6IFdlZG5lc2RheSwgT2N0b2JlciAxNCwgMjAxNSA0OjE3IEFN DQo+VG86IEJlbmphbWluIEthZHVrIDxrYWR1a0BNSVQuRURVPjsgU2hyYWRkaGEgSGVnZGUgPHNo cmFkZGhhQGp1bmlwZXIubmV0Pg0KPkNjOiBpZXNnQGlldGYub3JnOyBzZWNkaXJAaWV0Zi5vcmc7 DQo+ZHJhZnQtaWV0Zi1vc3BmLW5vZGUtYWRtaW4tdGFnLmFsbEBpZXRmLm9yZw0KPlN1YmplY3Q6 IFJlOiBzZWNkaXIgcmV2aWV3IG9mIGRyYWZ0LWlldGYtb3NwZi1ub2RlLWFkbWluLXRhZy0wNQ0K Pg0KPlNlZSBpbmxpbmUuIA0KPg0KPk9uIDEwLzEzLzE1LCA2OjI3IFBNLCAiQmVuamFtaW4gS2Fk dWsiIDxrYWR1a0BNSVQuRURVPiB3cm90ZToNCj4NCj4+VGhhbmtzLCBTaHJhZGRoYSBhbmQgQWNl ZSwgZm9yIGhlbHBpbmcgbWUgZmluZCBzb21lIG9mIHRoZSBjb250ZXh0IEkNCj4+d2FzIG1pc3Np bmcuDQo+Pg0KPj5PbiBTdW4sIDExIE9jdCAyMDE1LCBTaHJhZGRoYSBIZWdkZSB3cm90ZToNCj4+ DQo+Pj4NCj4+PiBUaGFua3MgQmVuIGZvciBkZXRhaWxlZCByZXZpZXcgY29tbWVudHMuVGhhbmtz IEFjZWUgZm9yIGNoaW1pbmctaW4uDQo+Pj4gRmV3IG1vcmUgZXhwbGFuYXRpb25zIGluLWxpbmUu DQo+Pj4NCj4+PiAtLS0tLU9yaWdpbmFsIE1lc3NhZ2UtLS0tLQ0KPj4+IEZyb206IEFjZWUgTGlu ZGVtIChhY2VlKSBbbWFpbHRvOmFjZWVAY2lzY28uY29tXQ0KPj4+IFNlbnQ6IFN1bmRheSwgT2N0 b2JlciAxMSwgMjAxNSAxOjA0IEFNDQo+Pj4gVG86IEJlbmphbWluIEthZHVrIDxrYWR1a0BNSVQu RURVPjsgaWVzZ0BpZXRmLm9yZzsgc2VjZGlyQGlldGYub3JnOw0KPj4+ZHJhZnQtaWV0Zi1vc3Bm LW5vZGUtYWRtaW4tdGFnLmFsbEBpZXRmLm9yZw0KPj4+IFN1YmplY3Q6IFJlOiBzZWNkaXIgcmV2 aWV3IG9mIGRyYWZ0LWlldGYtb3NwZi1ub2RlLWFkbWluLXRhZy0wNQ0KPj4+DQo+Pj4gSGkgQmVu LA0KPj4+DQo+Pj4gQXMgdGhlIGRvY3VtZW50IHNoZXBoZXJkIGFuZCBhIGxvbmctdGltZSBPU1BG IGNvbnRyaWJ1dG9yLCBJ4oCZbSBnb2luZw0KPj4+IHRvIHRyeSBhbmQgc29ydCBvdXQgc29tZSBv ZiB5b3VyIGNvbW1lbnRzLiBOb3RlIHRoYXQgcm91dGUgdGFnZ2luZw0KPj4+IGhhcyBiZWVuIGlu IHVzZSBmb3IgZGVjYWRlcyBhbmQgdGhpcyBkb2N1bWVudCBpcyBtZXJlbHkgZXh0ZW5kaW5nIHRo ZQ0KPj4+IGFkbWluaXN0cmF0aXZlIHBvbGljaWVzIGFkdmVydGlzZW1lbnQgdG8gdGhlIG5vZGUg bGV2ZWwuDQo+Pg0KPj5Hb29kIHRvIGtub3c7IEkgZGlkbid0IGdldCB0byBsb29rIGF0IG1hbnkg dXBkYXRlcyBwYXN0IHRoZSBjb3JlIE9TUEZ2Mg0KPj5zcGVjLg0KPj4NCj4+PiBPbiAxMC85LzE1 LCA0OjUyIFBNLCAiQmVuamFtaW4gS2FkdWsiIDxrYWR1a0BNSVQuRURVPiB3cm90ZToNCj4+Pg0K Pj4+ID5JIGhhdmUgcmV2aWV3ZWQgdGhpcyBkb2N1bWVudCBhcyBwYXJ0IG9mIHRoZSBzZWN1cml0 eSBkaXJlY3RvcmF0ZSdzDQo+Pj4gPm9uZ29pbmcgZWZmb3J0IHRvIHJldmlldyBhbGwgSUVURiBk b2N1bWVudHMgYmVpbmcgcHJvY2Vzc2VkIGJ5IHRoZQ0KPj4+ID5JRVNHLiAgVGhlc2UgY29tbWVu dHMgd2VyZSB3cml0dGVuIHByaW1hcmlseSBmb3IgdGhlIGJlbmVmaXQgb2YgdGhlDQo+Pj4gPnNl Y3VyaXR5IGFyZWEgZGlyZWN0b3JzLiAgRG9jdW1lbnQgZWRpdG9ycyBhbmQgV0cgY2hhaXJzIHNo b3VsZA0KPj4+ID50cmVhdCB0aGVzZSBjb21tZW50cyBqdXN0IGxpa2UgYW55IG90aGVyIGxhc3Qg Y2FsbCBjb21tZW50cy4NCj4+PiA+DQo+Pj4gPkkgd2lsbCBwcmVmYWNlIHRoZXNlIGNvbW1lbnRz IHdpdGggYSBub3RlIHRoYXQgbXkgcm91dGluZyBiYWNrZ3JvdW5kDQo+Pj4gPmlzIHF1aXRlIHdl YWssIGFuZCBJIG5lZWRlZCB0byByZWFkIFJGQyAyMzI4IGFuZCBSRkMgNDk3MCB0byBoYXZlDQo+ Pj4gPmVub3VnaCBjb250ZXh0IHRvIGJlIGFibGUgdG8gc2F5IG11Y2ggdXNlZnVsIGFib3V0IHdo YXQncyBnb2luZyBvbg0KPj4+ID5oZXJlOyBJIG1heSBzdGlsbCBiZSBzdWZmZXJpbmcgZnJvbSBz b21lIG1pc2NvbmNlcHRpb25zLg0KPj4+ID4NCj4+PiA+T24gdGhlIHdob2xlLCB0aGlzIGRvY3Vt ZW50IGxlYXZlcyBtZSBmZWVsaW5nIHVuc2F0aXNmaWVkOyBpdCBzcGVuZHMNCj4+PiA+bWF5YmUg dGhyZWUgcGFnZXMgdGFsa2luZyBhYm91dCB0aGUgYWN0dWFsIG5ldyBwcm90b2NvbCBleHRlbnNp b24NCj4+PiA+YW5kIHRoZW4gZ2l2ZXMgZm91ciBwYWdlcyBvZiBleGFtcGxlIHVzYWdlLCBhbGwg dGhlIHdoaWxlIGNsYWltaW5nDQo+Pj4gPnRoYXQgdGhlIGFjdHVhbCB0YWcgdmFsdWVzIGFyZSBv bmx5IG1lYW5pbmdmdWwgd2l0aGluIGEgc2luZ2xlDQo+Pj4gPmFkbWluaXN0cmF0aXZlIGRvbWFp bi9uZXR3b3JrLCBhcmUgZm9yIGdlbmVyaWMgdXNlLCBhbmQgZG8gbm90DQo+Pj4gPnJlcXVpcmUg YW4gSUFOQSByZWdpc3RyeS4gIFRoYXQgaXMsIGl0IGlzIHRyeWluZyB0byB3YWxrIGEgbWlkZGxl DQo+Pj4gPmxpbmUgYmV0d2VlbiAidGhpcyBkb2N1bWVudCBhbGxvY2F0ZXMgYSB2YWx1ZSBpbiB0 aGUgT1NQRiBUTFZzDQo+Pj4gPnJlZ2lzdHJ5IGZvciBzaXRlLWxvY2FsIHVzZSwgdXNlIGl0IGFz IHlvdSB3aWxsIiBhbmQgInRoaXMgZG9jdW1lbnQNCj4+PiA+c3BlY2lmaWVzIGEgY29tcGxldGUg cHJvdG9jb2wgZXh0ZW5zaW9uIGZvciB0YWdnaW5nIE9TUEYgbm9kZXMgZm9yDQo+Pj4gPnRyYWZm aWMgZW5naW5lZXJpbmcsIExGQSwgYW5kIG90aGVyIHB1cnBvc2VzIi4gIFRoYXQgaXMgYSBoYXJk DQo+Pj4gPm1pZGRsZSBsaW5lIHRvIGZvbGxvdywgYW5kIEkgYW0NCj4+Pm5vdCBzdXJlIHRoYXQg dGhpcyBkb2N1bWVudCBkb2VzIHNvIHN1Y2Nlc3NmdWxseS4NCj4+PiA+SSB3aWxsIG5vdCB0cnkg dG8gcmVvcGVuIHRoZSBxdWVzdGlvbiBvZiB3aGV0aGVyIGl0IHdvdWxkIGJlIGJldHRlcg0KPj4+ ID50byB0YWtlIG9uZSBvZiB0aGUgbm9uLW1pZGRsZSBwYXRocywgYW5kIGNvbnRpbnVlIG9uIHRo ZSBhc3N1bXB0aW9uDQo+Pj4gPnRoYXQgdGhpcyBkb2N1bWVudCB3aWxsIHRha2UgdGhlIG1pZGRs ZSBwYXRoLiAgSSB0aGluayB0aGVyZSBhcmUgYQ0KPj4+ID5mZXcgdGhpbmdzIHRoYXQgYXJlIG1p c3NpbmcgYmVmb3JlIHRoaXMgZG9jdW1lbnQgc2hvdWxkIGJlDQo+Pj4gPnB1Ymxpc2hlZCwgYW5k IHRoYXQgaXQgbWlnaHQgYmUgd29ydGggY29uc2lkZXJpbmcgYSBtb3JlIGRyYXN0aWMNCj4+PiA+ cmVzdHJ1Y3R1cmluZyBhcw0KPj4+d2VsbC4NCj4+PiA+DQo+Pj4gPkl0IHdvdWxkIHByb2JhYmx5 IGJlIGdvb2QgdG8gaW5jbHVkZSBzb21lIHRleHQgd2l0aCB0aGUgcmVhc29uaW5nDQo+Pj4gPmJl aGluZCB0aGUgY2hvaWNlIG9mIHRoZSAibWlkZGxlIGxpbmUiIC0tIHRoZSBjdXJyZW50IHRleHQN Cj4+PiA+YXR0ZW1wdGluZyB0byBlbmZvcmNlIGl0LCAibmV3IE9TUEYgZXh0ZW5zaW9ucyBNVVNU IE5PVCByZXF1aXJlIHVzZQ0KPj4+ID5vZiBwZXItbm9kZSBhZG1pbmlzdHJhdGl2ZSB0YWdzIG9y IGRlZmluZSB3ZWxsLWtub3duIHRhZyB2YWx1ZXMiLA0KPj4+ID5zZWVtcyB1bmVuZm9yY2FibGUs IGFzIGEgZnV0dXJlIFJGQyB1cGRhdGluZyB0aGlzIG9uZSBjb3VsZCBqdXN0DQo+Pj4gPnJlbW92 ZSB0aGF0DQo+Pj5yZXN0cmljdGlvbi4NCj4+Pg0KPj4+IFRoZSBpbnRlbnQgaGVyZSBpcyB0aGF0 IHRoaXMgVExWIGlzIHRvIGJlIHNvbGVseSBmb3IgbG9jYWxseSBkZWZpbmVkDQo+Pj4gcG9saWNp ZXMuIElmIHRoZXJlIHdlcmUgdG8gYmUgYSBUTFYgZm9yIHdlbGwta25vd24gdGFncyBhbmQgcG9s aWNpZXMsDQo+Pj4gdGhpcyBjb3VsZCBiZSBhY2NvbXBsaXNoZWQgd2l0aCBhIHNlcGFyYXRlIE9T UEYgUkkgVExWLiBJIGFncmVlIHRoYXQNCj4+PiB0aGUgbm9ybWF0aXZlIHRleHQgc2hvdWxkIGJl IHNvZnRlbmVkIGZyb20g4oCcTVVTVCBOT1TigJ0gdG8g4oCcYXJlIG5vdA0KPj4+IGV4cGVjdGVk IHRv4oCdLg0KPj4+DQo+Pj4gPFNocmFkZGhhPiBUaGVyZSB3YXMgYSBsb25nIGRpc2N1c3Npb24g b24gdGhlIG1haWxpbmcgbGlzdCBvbiB3aGV0aGVyDQo+Pj4gd2Ugc2hvdWxkIGFsbG93IHdlbGwg ZGVmaW5lZCB2YWx1ZXMgZm9yIHRoZSBhZG1pbiB0YWdzIG1ham9yaXR5DQo+Pj4gY29uc2Vuc3Vz IHdhcyB0aGF0IHdlIHNob3VsZCBub3QgYWxsb3cgYW55IHN0YW5kYXJkIHZhbHVlcyBmb3Igbm9k ZQ0KPj4+IGFkbWluIHRhZ3MgYW5kIGluIGZ1dHVyZSBpZiBzdWNoIGEgcmVxdWlyZW1lbnQgYXJp c2VzIGl0J2xsIGdvIGFzIG5ldw0KPj4+IGZlYXR1cmUgaW4gUkkgVExWIGFzIEFjZWUgYWxyZWFk eSBtZW50aW9uZWQuIEkgYW0gdHJ5aW5nIHRvDQo+Pj4gdW5kZXJzdGFuZCB3aHkgdGhlIHRleHQg bmVlZCB0byBiZSBzb2Z0ZW5lZCB3aGVuIGFueSBmdXR1cmUNCj4+PiBzdGFuZGFyZGl6YXRpb24g d291bGQgbmVlZCBhbHRvZ2V0aGVyIGEgbmV3IGRvY3VtZW50IGFuZCB3aWxsIG5vdA0KPj4+cmVx dWlyZSBhbnkgY2hhbmdlcyB0byB0aGlzIGRvY3VtZW50Lg0KPj4NCj4+SSBzdWdnZXN0ZWQgdGhh dCB0aGUgdGV4dCBiZSBzb2Z0ZW5lZCBiZWNhdXNlIHRoZSBjdXJyZW50IHN0YXRlbWVudA0KPj5k b2VzIG5vdCBoYXZlIGFueSBwcmFjdGljYWwgZWZmZWN0LiAgSXQncyB0cnlpbmcgdG8gcGxhY2Ug cmVzdHJpY3Rpb25zDQo+Pm9uIHdoYXQge3RoZSBzZXQgb2YgZnV0dXJlIFJGQ3MgdGhhdCB1cGRh dGUgdGhpcyBkb2N1bWVudH0gY2FuIGRvLCBidXQNCj4+YW55IGRvY3VtZW50IGluIHRoYXQgc2V0 IGNvdWxkIHJlbW92ZSBzdWNoIGEgcmVzdHJpY3Rpb24gYW5kIG92ZXJyaWRlDQo+Pml0IGF0IHRo ZSBzYW1lIHRpbWUuDQo+Pg0KPj5JIHRoaW5rIGl0IHdvdWxkIGJlIGdvb2QgdG8gaGF2ZSBhIG5v dGUgaW4gc2VjdGlvbiAyIHRvIHRoZSBlZmZlY3QgdGhhdA0KPj4idGhlc2UgYWRtaW5pc3RyYXRp dmUgdGFncyBhcmUgc29sZWx5IGZvciB1c2Ugd2l0aGluIGFuIGFkbWluaXN0cmF0aXZlDQo+PmRv bWFpbiBhbmQgYXJlIHRoZWlyIGludGVycHJldGF0aW9uIGlzIGEgbWF0dGVyIG9mIGxvY2FsIHBv bGljeS4gIEl0IGlzDQo+PmV4cGVjdGVkIHRoYXQgdmFsdWVzIHdpbGwgbm90IGJlIHBvcnRhYmxl IGFjcm9zcyBhZG1pbmlzdHJhdGl2ZSBkb21haW5zIi4NCj4+SSBrbm93IHRoYXQgdGhpcyB0b3Bp YyBpcyBjb3ZlcmVkIGxhdGVyIGluIHRoZSBkb2N1bWVudCwgYnV0IGhhdmluZyBpdA0KPj5lYXJs eSB3b3VsZCBoZWxwIHNldCB0aGUgc3RhZ2UgZm9yIHRoZSByZXN0IG9mIHRoZSBkb2N1bWVudC4N Cj4+DQo+Pj4gPkl0IGxvb2tzIGxpa2UgdGhlcmUncyBub3cgYW4gLTA2LCBidXQgdGhlIGNoYW5n ZXMgZnJvbSB0aGUgLTA1IGFyZQ0KPj4+ID5ub3Qgc2lnbmlmaWNhbnQuICBUaGUgc2VjdXJpdHkg Y29uc2lkZXJhdGlvbnMgaW4gdGhlIC0wNSBjb3JyZWN0bHkNCj4+PiA+bm90ZSB3aGF0IGFyZSBl c3NlbnRpYWxseSBwcml2YWN5IGNvbnNpZGVyYXRpb25zIHJlZ2FyZGluZyB0aGUNCj4+PiA+Y29u dGVudHMgb2YgdGhlIGFkbWluIHRhZ3MuICBIb3dldmVyLCBpdCBzZWVtcyBsaWtlIHRoZXJlIGFy ZSBhbHNvDQo+Pj4gPnBvdGVudGlhbCBzZWN1cml0eSBjb25zaWRlcmF0aW9ucyBvbiB0aGUgYWN0 dWFsIG9wZXJhdGlvbiBvZiB0aGUNCj4+PiA+bmV0d29yayB0aGF0IGFyZSBub3QgZGlzY3Vzc2Vk IGhlcmUsIG5vciBpbiBSRkMgMjMyOCAoT1NQRnYyKSBvciBSRkMNCj4+PiA+NTM0MCAoT1NQRnYz KS4gIFJGQyA1MzQwJ3Mgc2VjdXJpdHkgY29uc2lkZXJhdGlvbnMgZXhwbGljaXRseQ0KPj4+ID5k aXNjbGFpbXMgcHJvdGVjdGlvbnMgYWdhaW5zdCBjb21wcm9taXNlZCwgbWFsZnVuY3Rpb25pbmcs IG9yDQo+Pj4gPm1pc2NvbmZpZ3VyZWQgcm91dGVycywgZGVmZXJyaW5nIHRvIFJGQyA0NTkzLCAi R2VuZXJpYyBUaHJlYXRzIHRvDQo+Pj4gPlJvdXRpbmcgUHJvdG9jb2xzIi4gIEkgYmVsaWV2ZSB0 aGF0IHRoZSBzZWN1cml0eSBjb25zaWRlcmF0aW9ucyBvZg0KPj4+ID50aGlzIGRvY3VtZW50IHNo b3VsZCBhZGRyZXNzLCBlaXRoZXIgZGlyZWN0bHkgb3IgaW5kaXJlY3RseSwNCj4+PiA+cHJvdGVj dGlvbnMgYWdhaW5zdCBjb21wcm9taXNlZCwgbWFsZnVuY3Rpb25pbmcsIG9yIG1pc2NvbmZpZ3Vy ZWQNCj4+PiA+cm91dGVycywgYW5kIGFkZGl0aW9uYWxseSBwcm90ZWN0aW9uIGFnYWluc3QgbWFs aWNpb3VzIGFjdG9ycyB3aXRoDQo+Pj4gPmFjY2VzcyB0byB0aGUgbGF5ZXItMyBuZXR3b3JrIChh bmQgbWF5YmUgbG93ZXIgbGF5ZXJzIGFzIHdlbGwpLg0KPj4+ID4NCj4+PiA+VGhhdCBwcm9iYWJs eSBtZWFucyBtZW50aW9uaW5nIFJGQyA0NTkzIGRpcmVjdGx5LCBvciBtYXliZSBqdXN0DQo+Pj4g PnBvaW50aW5nIG91dCB0aGF0IFJGQyA1MzQwIGRvZXMgc28uICBUaGVyZSBhcmUgc3RpbGwgYWRk aXRpb25hbA0KPj4+ID5jb25zaWRlcmF0aW9ucyBpbnRyb2R1Y2VkIGJ5IHRoaXMgZG9jdW1lbnQs IHRob3VnaDsgdW5mb3J0dW5hdGVseSwNCj4+PiA+YmVjYXVzZSB0aGUgYnVsayBvZiB0aGUgaW50 ZXJwcmV0YXRpb24gb2YgdGhlIGFkbWluIHRhZ3MgaXMgbGVmdCB0bw0KPj4+ID50aGUgc2l0ZSBh ZG1pbmlzdHJhdG9yLCBpdCBpcyBoYXJkIHRvIGdpdmUgYSBjb21wcmVoZW5zaXZlIHNlY3VyaXR5 DQo+Pj4gPmFuYWx5c2lzLCBidXQgdGhlIGV4YW1wbGVzIGFuZCB0aGUgcHJvdG9jb2wgZGVzY3Jp cHRpb24gaXRzZWxmIGRvDQo+Pj4gPmdpdmUNCj4+PnNvbWUgYXJlYXMgZm9yIGNvbnNpZGVyYXRp b24uDQo+Pj4NCj4+PiBUaGUgZG9jdW1lbnQgY291bGQgcmVmZXJlbmNlIFJGQyA0NTkzL1JGQyA2 ODYzIGFuZCBzdGF0ZSB0aGF0DQo+Pj4gYXV0aGVudGljYXRpb24gYXMgc3BlY2lmaWVkIGluIFJG QyA3NDc0IG9yIFJGQyA3MTY2IFNIT1VMRCBiZSB1c2VkIGluDQo+Pj4gZGVwbG95bWVudHMgd2hl cmUgYXR0YWNrZXJzIGhhdmUgYWNjZXNzIHRvIHRoZSBwaHlzaWNhbCBuZXR3b3Jrcw0KPj4+IGlu Y2x1ZGVkIGluIHRoZSBPU1BGIGRvbWFpbiBhcmUgdnVsbmVyYWJsZS4NCj4+PiA8U2hyYWRkaGE+ IG9rLiBVcGRhdGluZyB0aGUgU2VjdXJpdHkgY29uc2lkZXJhdGlvbiBzZWN0aW9uDQo+Pg0KPj5U aGFua3MuDQo+Pg0KPj4+DQo+Pj4gPg0KPj4+ID5UaGUgUkkgTFNBcyBjYXJyeWluZyBhZG1pbmlz dHJhdGl2ZSB0YWdzIGNhbiBiZSBhdCBsaW5rLSwgYXJlYS0sIG9yDQo+Pj4gPkFTLWxldmVsIHNj b3BlOyBhbiBhZG1pbmlzdHJhdG9yIGFzc2lnbmluZyB0YWcgdmFsdWVzIGFuZCBhc3NvY2lhdGVk DQo+Pj4gPnBvbGljaWVzIHNob3VsZCBjb25zaWRlciB3aGF0IHdvdWxkIGhhcHBlbiBpZiBhIGdp dmVuIHRhZyB3YXMNCj4+PiA+YWR2ZXJ0aXNlZCBhdCBhIGRpZmZlcmVudCBzY29wZSB0aGFuIGlu dGVuZGVkLiAgQ29tcGxpYW50DQo+Pj4gPmltcGxlbWVudGF0aW9ucyBNVVNUIE5PVCBnZW5lcmF0 ZSB0aGUgc2FtZSB0YWcgYXQgZGlmZmVyZW50IHNjb3BlcywNCj4+PiA+YnV0IGEgcmVjZWl2ZXIg d291bGQgbmVlZCB0byB0YWtlIHNvbWUgYWN0aW9uIGlmIGl0IGhhcHBlbmVkLA0KPj4+ID53aGV0 aGVyIGR1ZSB0byBuZXR3b3JrIGdsaXRjaCBvciBtYWxpY2lvdXMgYWN0aW9uIC0tIHdoYXQgc2hv dWxkIHRoZXkNCj4+PmRvPw0KPj4+DQo+Pj4gSeKAmW0gbm90IGFuIGF1dGhvciwgYnV0IHRoaXMg aXMgd2hhdCBJ4oCZZCByZWNvbW1lbmQ6DQo+Pj4NCj4+PiAgICBUaGUgY29uZmxpY3RpbmcgdGFn IFNIT1VMRCBub3QgYmUgdXNlZCBhbmQgdGhpcyBzaXR1YXRpb24gU0hPVUxEDQo+Pj4gYmUgbG9n Z2VkIGFzIGFuIGVycm9yIGluY2x1ZGluZyB0aGUgdGFnIHdpdGggY29uZmxpY3Rpbmcgc2NvcGVz IGFuZA0KPj4+IHRoZSBvcmlnaW5hdG9yKHMpLg0KPj4+IDxTaHJhZGRoYT4gVXBkYXRlZCB0aGUg ZG9jdW1lbnQgd2l0aCBhYm92ZSBzdGF0ZW1lbnQuDQo+Pj4NCj4+PiBUaGVyZSBpcyBhIGNhc2Ug dGhhdCBtdXN0IGJlIGFsbG93ZWQgLSB0aGUgc2FtZSB0YWcgY291bGQgYmUgcmVjZWl2ZWQNCj4+ PiBieSBhbiBBQlIgYXQgYm90aCB0aGUgQVMgc2NvcGUgYW5kIHRoZSBhcmVhIHNjb3BlIGluIGEg c3R1YiBvciBOU1NBDQo+Pj5hcmVhLg0KPj4+IDxTaHJhZGRoYT4gQ291bGQgeW91IHBscyBlbGFi b3JhdGUgdGhlIGNhc2UuIEkgZG9uJ3QgcXVpdGUgdW5kZXJzdGFuZA0KPj4+IHdoeSB0aGUgQUJS IGluIGEgc3R1Yi9OU1NBIGFyZWEgd291bGQgZ2VuZXJhdGUgb3IgcmVjZWl2ZSBSSSBMU0FzDQo+ Pj4gd2l0aCBkaWZmZXJlbnQgc2NvcGVzLkkgdGhpbmsgaXQncyBwZXJmZWN0bHkgdmFsaWQgdG8g Zmxvb2QgdGhlIEFTDQo+Pj4gc2NvcGVkIFJJIExTQXMgaW50byB0aGUgc3R1YiAvIE5TU0EgYXJl YS4NCj4+DQo+PkFjZWUsIEkgdGhpbmsgdGhpcyBpcyBhIHF1ZXN0aW9uIGZvciB5b3UuDQo+DQo+ WWVhaCAtIEkgbWlzc2VkIHRoaXMgd2l0aG91dCBFLW1haWwgcXVvdGluZ+KApg0KPg0KPlNocmFk ZGhhLCANCj4NCj5BUy1zY29wZWQgTFNBcyBhcmUgbm90IGZsb29kZWQgaW50byBzdHViIG9yIE5T U0EgYXJlYXMuIFNvLCBpZiBhbiBBQlIgaXMNCj5nb2luZyB0byBhZHZlcnRpc2UgdGFncyB0byBp dHMgYXR0YWNoZWQgYXJlYXMgYW5kIHRoZSByZXN0IG9mIHRoZSBPU1BGDQo+Um91dGluZyBkb21h aW4sIGl0IHdpbGwgbmVlZCB0byBvcmlnaW5hdGUgdGhlIExTQSBhdCBkaWZmZXJlbnQgc2NvcGVz Lg0KPg0KPg0KPg0KPj4NCj4+PiA+QW5vdGhlciBwb3RlbnRpYWwgaXNzdWUgbGllcyBpbiB0aGUg InN0aWNraW5lc3MiIG9mIHRoZSBhZG1pbiB0YWdzDQo+Pj4gPi0tIHRoZSB0ZXh0ICJ0aGUgbm9k ZSBhZG1pbmlzdHJhdGl2ZSB0YWdzIGFzc29jaWF0ZWQgd2l0aCBhIG5vZGUgZm9yDQo+Pj4gPnRo ZSBwdXJwb3NlIG9mIGFueSBjb21wdXRhdGlvbiBvciBwcm9jZXNzaW5nIFNIT1VMRCBiZSBhIHN1 cGVyc2V0IG9mDQo+Pj4gPm5vZGUgYWRtaW5pc3RyYXRpdmUgdGFncyBmcm9tIGFsbCB0aGUgVExW cyBpbiBhbGwgaW5zdGFuY2VzIG9mIHRoZQ0KPj4+ID5SSSBMU0Egb3JpZ2luYXRlZCBieSB0aGF0 IG5vZGUiIHNlZW1zIHRvIG1lYW4gdGhhdCBvbmNlIGEgdGFnIGlzDQo+Pj4gPnNldCwgaXQgY2Fu bm90DQo+Pj4gPihlYXNpbHkpIGJlIHVuc2V0LiAgV291bGQgZm9yY2UtZXhwaXJpbmcgYW4gTFNB IGJlIGVub3VnaCB0byByZXNldA0KPj4+ID50aGUgdGFnLCBvciBzb21ldGhpbmcgZWxzZT8NCj4+ Pg0KPj4+IFllcyAtIHRoaXMgaXMgc3RhbmRhcmQgZm9yIGFueSBPU1BGIExTQS4gSG93ZXZlciwg c2luY2UgdGhlIE9TUEYgUkkNCj4+PiBMU0EgbWF5IGluY2x1ZGUgb3RoZXIgVExWcyBvciBldmVu IG90aGVyIHRhZ3MsIGEgdGFnIGNvdWxkIGFsc28gYmUNCj4+PiB3aXRoZHJhd24gYnkgcmVvcmln aW5hdGluZyB0aGUgUkkgTFNBIHdpdGhvdXQgdGhlIFRMViBvciB3aXRoIGEgVExWDQo+Pj4gdGhh dCBkb2VzbuKAmXQgaW5jbHVkZSB0aGUgd2l0aGRyYXduIHRhZy4NCj4+DQo+PkkgbWF5IHN0aWxs IGJlIGNvbmZ1c2VkLCBidXQgSSBkaWQgbm90IGludGVycHJldCB0aGUgdGV4dCBpbiB0aGF0IHdh eS4NCj4+VGhhdCBpcywgdGhlIHRleHQgYWJvdXQgImFsbCBpbnN0YW5jZXMgb2YgdGhlIFJJIExT QSBvcmlnaW5hdGVkIGJ5IHRoYXQNCj4+bm9kZSIuICAoV2hpY2ggSSBjaGFuZ2VkIHRvICJpbnN0 YW5jZXMgb2YgUkkgTFNBcyIgaW4gbXkgZ3JhbW1hciBlZGl0cywNCj4+cG9zc2libHkgaW5jb3Jy ZWN0bHkgaWYgSSdtIHN0aWxsIGNvbmZ1c2VkLikgIEkgd2FzIGludGVycHJldGluZyB0aGUNCj4+ d29yZCAiaW5zdGFuY2VzIiB0byBpbmNsdWRlIGhpc3RvcmljYWwgb25lcyBvdmVyIHRpbWUsIHNv IHRoYXQgZXZlbiBpZg0KPj5hbiBSSSBMU0EgY2FycnlpbmcgYSBwYXJ0aWN1bGFyIGFkbWluIHRh ZyB3YXMgcmVwbGFjZWQgYnkgYSBkaWZmZXJlbnQNCj4+UkkgTFNBIGZvciB0aGUgc2FtZSBhZHZl cnRpc2luZyByb3V0ZXIsIHRoZSBvbGQgb25lIHdvdWxkIHN0aWxsIGJlIGFuDQo+Pmluc3RhbmNl IG9mIHRoYXQgUkkgTFNBLiAgR29pbmcgYmFjayB0byBSRkMgMjMyOCwgSSdtIG5vdCBzdXJlIHdo YXQNCj4+ZXhhY3RseSBJIGhhZCBpbiBtaW5kIGluIHRlcm1zIG9mIGFnZXMgYW5kIHNjb3BlcyBh bmQgc2VxdWVuY2UgbnVtYmVycw0KPj50aGF0IHdvdWxkIGNhdXNlIHRoaXMgc2l0dWF0aW9uLCBi dXQgSSBzb21laG93IGhhZCBpdCBpbiBteSBtaW5kIHRoYXQNCj4+dGhlcmUgY291bGQgYmUgbXVs dGlwbGUgUkkgTFNBcyBhY3RpdmUgYXQgdGhlIHNhbWUgdGltZSB0aGF0IGFwcGx5IHRvIGENCj4+ Z2l2ZW4gbm9kZSwgc3VjaCBhcyBpZiB0aGUgYWRtaW4ganVzdCBhZGRlZCBhIG5ldyBSSSBMU0Eg Y29udGFpbmluZw0KPj5vbmx5IHRoZSBhZG1pbiB0YWcgdG8gYXVnbWVudCB0aGUgZXhpc3Rpbmcg UkkgTFNBcyBiZWluZyBzZW50LiAgSXMgdGhhdA0KPj5wb3NzaWJsZT8NCj4NCj5JbiBPU1BGLCBh IG1vcmUtcmVjZW50IHZlcnNpb24gb3IgaW5zdGFuY2Ugb2YgYW4gTFNBIHdpbGwgYWx3YXlzDQo+ c3VwZXJzZWRlIGFsbCBwcmV2aW91cyBpbnN0YW5jZXMgb2YgdGhlIHNhbWUgTFNBLg0KPg0KPj4N Cj4+SWYgdGhlcmUgY2FuIG9ubHkgYmUgb25lIFJJIExTQSB0aGF0IGlzICJjdXJyZW50IiBmb3Ig YSBnaXZlbiBub2RlIChhdA0KPj5hIGdpdmVuIHNjb3BlPyksIHRoZW4gaXQgc2VlbXMgbGlrZSBp dCB3b3VsZCBiZSB1c2VmdWwgdG8gY2hhbmdlIHRoZQ0KPj50ZXh0IHRvIGV4cGxpY2l0bHkgc2F5 ICJhbGwgY3VycmVudCBpbnN0YW5jZXMiIC0tIHRoYXQgd291bGQgaGF2ZQ0KPj5oZWxwZWQgbWUg YXMgSSByZWFkIGl0Lg0KPg0KPkkgc2VlIHRoZSBjb25mdXNpb24gaXMgYmV0d2VlbiBpbnN0YW5j ZXMgb2YgdGhlIHNhbWUgTFNBIGluIHRoZSBnZW5lcmFsDQo+c2Vuc2UgYW5kIG11bHRpcGxlIGlu c3RhbmNlcyBvZiB0aGUgT1NQRiBSSSBMU0EuIFJlZmVyIHRvIFJGQyAyMzI4DQo+c2VjdGlvbiAx My4xLiAgDQo+DQo+DQo+Pg0KPj4+ID4gSG93IGRpc3J1cHRpdmUgd291bGQgdGhhdCBiZT8gIEl0 IHdvdWxkIGJlIGhlbHBmdWwgdG8gc2VlIHNvbWUNCj4+PiA+ZGlzY3Vzc2lvbiBvZiBob3cgYSB0 YWcgd291bGQgYmUgcmVtb3ZlZC4NCj4+Pg0KPj4+IEkgbWF5IG9mIHdvcmtlZCBvbiBPU1BGIGZv ciB0b28gbG9uZyBidXQgdGhpcyBzaG91bGQgYmUgb2J2aW91cyB0bw0KPj4+IGFueW9uZSBpbXBs ZW1lbnRpbmcgdGhlIGRyYWZ0IGZyb20gdGhlIHNwZWNpZmljYXRpb24uDQo+Pg0KPj5JZiBpdCdz IHNpbXBseSBhIG1hdHRlciBvZiByZS1pc3N1aW5nIHRoZSBSSSBMU0EgKEkgd2FzIG5vdCBzdXJl IHdoZW4gSQ0KPj53YXMgd3JpdGluZyBteSByZXZpZXcpLCB0aGVuIEkgYWdyZWUgaXQgc2hvdWxk IGJlIG9idmlvdXMuDQo+Pg0KPj4+IDxTaHJhZGRoYT4gVGhlIGJlbG93IHBhcmFncmFwaCAoZnJv bSAtMDcgdmVyc2lvbikgaXMgY2xlYXIgb24gdGhpcyBJDQo+Pj5ob3BlLg0KPj4+DQo+Pj4gIldo ZW4gdGhlcmUgaXMgYSBjaGFuZ2Ugb3IgcmVtb3ZhbCBvZiBhbiBhZG1pbmlzdHJhdGl2ZSBhZmZp bGlhdGlvbg0KPj4+b2YgYSBub2RlLA0KPj4+ICAgIHRoZSBub2RlIE1VU1QgcmUtb3JpZ2luYXRl IHRoZSBSSSBMU0Egd2l0aCB0aGUgbGF0ZXN0IHNldCBvZiBub2RlDQo+Pj5hZG1pbmlzdHJhdGl2 ZSB0YWdzLg0KPj4+ICAgIE9uIHRoZSByZWNlaXZlciwgV2hlbiB0aGVyZSBpcyBhIGNoYW5nZSBp biB0aGUgbm9kZSBhZG1pbmlzdHJhdGl2ZQ0KPj4+dGFnIFRMViBvciByZW1vdmFsLw0KPj4+ICAg IGFkZGl0aW9uIG9mIGEgVExWIGluIGFueSBpbnN0YW5jZSBvZiB0aGUgUkktTFNBLCBpbXBsZW1l bnRhdGlvbnMNCj4+Pk1VU1QNCj4+PiAgICB0YWtlIGFwcHJvcHJpYXRlIG1lYXN1cmVzIHRvIHVw ZGF0ZSBpdHMgc3RhdGUgYWNjb3JkaW5nIHRvIHRoZQ0KPj4+ICAgIGNoYW5nZWQgc2V0IG9mIHRh Z3MuICBFeGFjdCBhY3Rpb25zIGRlcGVuZCBvbiBmZWF0dXJlcyB3b3JraW5nIHdpdGgNCj4+PiAg ICBhZG1pbmlzdHJhdGl2ZSB0YWdzIGFuZCBpcyBvdXRzaWRlIG9mIHNjb3BlIG9mIHRoaXMgc3Bl Y2lmaWNhdGlvbi4iDQo+Pg0KPj5UaGlzIGlzIGRlZmluaXRlbHkgaW1wcm92ZWQsIGJ1dCBpdCBk b2VzIG5vdCBkbyBtdWNoIHRvIGFkZHJlc3MgdGhlDQo+Pmlzc3VlIEkgaGFkIGluIG1pbmQgd2hl biBJIHdhcyB3cml0aW5nIG15IHJldmlldy4gIEhvd2V2ZXIsIGl0IHNlZW1zDQo+Pmxpa2UgdGhh dCBpc3N1ZSBpcyBub3QgYWN0dWFsbHkgYW4gaXNzdWUsIHNvIG5vIGZ1cnRoZXIgY2hhbmdlcyB0 byB0aGlzDQo+PnRleHQgd291bGQgYmUgbmVlZGVkLg0KPj4NCj4+DQo+Pj4gPg0KPj4+ID5UaGF0 IGlzIHBhcnRpY3VsYXJseSBlYXN5IGZvciBhbiBhdHRhY2tlciB3aGVuIHRoZSBudWxsIE9TUEYN Cj4+PiA+YXV0aGVudGljYXRpb24gbWVjaGFuaXNtIGlzIGluIHVzZSAoaG93IGNvbW1vbiBpcyB0 aGF0PyAgSSBzYXcgc29tZQ0KPj4+ID53ZWJzaXRlcyBpbmRpY2F0aW5nIGl0IHdhcyB0aGUgZGVm YXVsdCBiZWhhdmlvciwgYXQgbGVhc3Qgc29tZXRpbWVzKS4NCj4+PiA+SSBkbyBub3Qgc2VlIGEg bmVlZCB0byB0dXJuIHRoaXMgZG9jdW1lbnQgaW50byAic2VjdXJpdHkNCj4+PiA+Y29uc2lkZXJh dGlvbnMgZm9yIE9TUEYgYXV0aGVudGljYXRpb24iLCBidXQgbWF5YmUgaXQgaXMgd29ydGgNCj4+ Pm1lbnRpb25pbmcgc29tZSB0aGluZ3M6DQo+Pj4gPnRoZQ0KPj4+ID5tZDUgc2NoZW1lIHNlZW1z IHByZXR0eSB3ZWVrIGF0IHRoaXMgcG9pbnQgKHRob3VnaCBwcm9iYWJseSBub3QNCj4+PiA+dHJp dmlhbGx5IGJyb2tlbiksIHRoZSBobWFjLXNoYSBzY2hlbWUgb2YgUkZDIDU3MDkgaXMgb25seSBm cm9tDQo+Pj4gPjIwMDksIGFuZCBSRkMgNzQ3NCAob25seSBzaXggbW9udGhzIG9sZCkgcG9pbnRz IG91dCBjYXNlcyB3aGVyZSBib3RoDQo+Pj4gPmFyZSBzdXNjZXB0aWJsZSB0byByZXBsYXkgYXR0 YWNrcy4gIEp1c3QgbG9va2luZyBhdCB0aGUgc2VjdXJpdHkNCj4+PiA+Y29uc2lkZXJhdGlvbnMg b2YgdGhpcyBkb2N1bWVudCBhbmQgdGhlIGNvcmUgT1NQRiB2Mi92MyBzcGVjcyBkb2VzDQo+Pj4g Pm5vdCBjb252ZXkgdGhpcyB0byB0aGUgcmVhZGVyLCBzbyBJIHdvdWxkIGxpa2UgdG8gc2VlIGF0 IGxlYXN0IGENCj4+PiA+cG9pbnRlciB0byBzdWNoIGNvbnNpZGVyYXRpb25zLiAgKFRoZSBzdGFu Y2Ugb2YgUkZDIDIzMjggdGhhdCAiYWxsDQo+Pj4gPk9TUEYgcHJvdG9jb2wNCj4+PmV4Y2hhbmdl cyBhcmUgYXV0aGVudGljYXRlZCINCj4+PiA+c2VlbXMgcGFydGljdWxhcmx5IGRpc2luZ2Vub3Vz IGdpdmVuIHRoZSBwcmVzZW5jZSBvZiB0aGUgbnVsbA0KPj4+ID5hdXRoZW50aWNhdGlvbiBzY2hl bWUuKQ0KPj4+DQo+Pj4gSSB0aGluayBib3RoIFJGQyA3NDc0IGFuZCBSRkMgNzE3NiBzaG91bGQg YmUgcmVmZXJlbmNlZC4gVGhlIE9TUEYNCj4+PiB2dWxuZXJhYmlsaXR5IHRvIHJlcGxheSBhdHRh Y2tzIHRvIE9TUEZ2Mi9PU1BGdjMgcm91dGVycyBpbXBsZW1lbnRpbmcNCj4+PiB0aGVzZSBzcGVj aWZpY2F0aW9ucyBpcyBleHRyZW1lbHkgc21hbGwgYW5kIGhhcyBiZWVuIHJlZHVjZWQgYXMgbXVj aA0KPj4+IGFzIHByYWN0aWNhbC4gSWYgeW91IGFyZSBzdGlsbCBjb25jZXJuZWQsIEkgc3VnZ2Vz dCB5b3UgZGlzY3VzcyB3aXRoDQo+Pj4gU2FtIEhhcnRtYW4gKGFsc28gb25jZSBhZmZpbGlhdGVk IHdpdGggTUlUKS4NCj4+DQo+PkkgYW0gbm90IGVzcGVjaWFsbHkgY29uY2VybmVkIGFib3V0IHRo aXMgYXR0YWNrLCBJIGp1c3Qgbm90aWNlZCB0aGF0DQo+PnRoZXJlIHdhcyBhbiBSRkMgYWJvdXQg aXQuICBTaW5jZSBSRkMgNzQ3NCB3YXMgc28gcmVjZW50LCBpdCBtYWRlIG1lDQo+PndvbmRlciBo b3cgd2lkZWx5IGRlcGxveWVkIHRoZSBzZWN1cml0eSBmaXhlcyBhcmUgdG9kYXkuDQo+DQo+Q29y cmVjdCAtIGl0IGlzIG5vdCB3aWRlbHkgaW1wbGVtZW50ZWQgb3IgZGVwbG95ZWQuDQo+DQo+VGhh bmtzLA0KPkFjZWUNCj4NCj4+DQo+Pj4gPFNocmFkZGhhPiBTZWN1cml0eSBjb25zaWRlcmF0aW9u IHNlY3Rpb24gdXBkYXRlZCB3aXRoIHRoZSByZWZlcmVuY2UNCj4+PiB0byBSRkMgNzQ3NCBhbmQg NzE3Ni4NCj4+DQo+PlRoYW5rcy4NCj4+DQo+Pj4gPg0KPj4+ID5UaGVyZSBpcyBhbHNvIHRoZSBw b3NzaWJpbGl0eSB0aGF0IGFuIGF0dGFja2VyIGNvdWxkIGJsb2NrIGRlbGl2ZXJ5DQo+Pj4gPm9m IGFuIExTQSwgY2F1c2luZyBhIHRhZyB0aGF0IHNob3VsZCBiZSBzZXQgdG8gbm90IGJlIHNlZW4u ICBUaGlzDQo+Pj4gPnNlZW1zIHVubGlrZWx5IGZvciB3aXJlZCBwb2ludC10by1wb2ludCBsaW5r cywgYnV0IGlzIG1vcmUgcGxhdXNpYmxlDQo+Pj4gPmluIG90aGVyIGVudmlyb25tZW50cywgc3Vj aCBhcyByYWRpbyBsaW5rcy4gIEkgdGhpbmsgSSBjYW4gaW1hZ2luZQ0KPj4+ID5zY2VuYXJpb3Mg d2hlcmUgdGhpcyB3b3VsZCBjYXVzZSBkcmFzdGljIGRhbWFnZSB0byB0aGUgcm91dGluZw0KPj4+ dG9wb2xvZ3kuDQo+Pj4NCj4+PiBUaGUgZGVzY3JpcHRpb24gYW5kIG1pdGlnYXRpb24gb2Ygc3Vj aCBhIGdlbmVyaWMgdGhyZWF0IGRvZXNu4oCZdA0KPj4+YmVsb25nIGluIGEgbWlub3IgKHRob3Vn aCBpbXBvcnRhbnQpIE9TUEYgc3BlY2lmaWNhdGlvbi4gVGhlIGVmZmVjdCBvZg0KPj4+YmxvY2tp bmcgY29udHJvbCB0cmFmZmljIGlzIG5ldmVyIHBvc2l0aXZlIDteKS4gQXQgbGVhc3QgT1NQRiB1 c2VzDQo+Pj5yZWxpYWJsZSBmbG9vZGluZyBzbyBpdCB3aWxsIGJlIHJldHJhbnNtaXR0ZWQuDQo+ Pj4gPFNocmFkZGhhPiBBZ3JlZSB3aXRoIEFjZWUgb24gdGhpcy4NCj4+DQo+PkkgaGFkIGZvcmdv dHRlbiB0aGF0IE9TUEYgZmxvb2Rpbmcgd2FzIHJlbGlhYmxlOyBJIGFncmVlIHRoaXMgZG9lcyBu b3QNCj4+bmVlZCB0byBiZSBleHBsaWNpdGx5IGNhbGxlZCBvdXQgaW4gdGhpcyBkb2N1bWVudCwg c2luY2UgaXQncyBhIGdlbmVyYWwNCj4+cm91dGluZyBjb25jZXJuLg0KPj4NCj4+PiA+VGhlIHBh cmVudGhldGljYWwgaW4gc2VjdGlvbiAzLjIgd2hlcmVpbiByb3V0ZXJzIG1pZ2h0IGFkdmVydGlz ZSBhDQo+Pj4gPnBlci1ub2RlIGFtaW5pc3RyYXRpdmUgdGFnICJ3aXRob3V0IGtub3dpbmcgKG9y IGV2ZW4gZXhwbGljaXRseQ0KPj4+ID5zdXBwb3J0aW5nKSBmdW5jdGlvbmFsaXR5IGltcGxpZWQg YnkgdGhlIHRhZyIgc2VlbXMgcG90ZW50aWFsbHkNCj4+PiA+ZGFuZ2Vyb3VzLCBzaW5jZSBpdCBz b3VuZHMgbGlrZSB0aGUgcm91dGVycyBpbiBxdWVzdGlvbiBhcmUgbHlpbmcNCj4+PiA+YWJvdXQg dGhlaXIgY2FwYWJpbGl0aWVzLiAgV291bGQgdGhlIGRvY3VtZW50IHN1ZmZlciBoYXJtIGlmIHRo ZQ0KPj4+ID5wYXJlbnRoZXRpY2FsIHdhcyByZW1vdmVkPw0KPj4+DQo+Pj4gSW4gbXkgb3Bpbmlv biwgbm8gaGFybSB0byByZW1vdmUgLSBtaXNjb25maWd1cmF0aW9uIGlzIGFsbW9zdCBhbHdheXMN Cj4+PmFuIGlzc3VlLg0KPj4+IDxTaHJhZGRoYT4gSXQncyBwZXJmZWN0bHkgdmFsaWQgZm9yIGEg bm9kZSBvcmlnaW5hdGUgYSB0YWcgd2hlbiB0aGUNCj4+Pm5vZGUgIGl0c2VsZiBkb2VzIG5vdCBQ cm9jZXNzIGFueSB0YWdzLiBJIHRoaW5rIHRoZSBzZW50ZW5jZSBuZWVkcyB0bw0KPj4+YmUgIHJl cGhyYXNlZC4gQ2hhbmdpbmcgaXQgYXMgYmVsb3cuDQo+Pj4NCj4+PiA8dD5NZWFuaW5nIG9mIHRo ZSBOb2RlIGFkbWluaXN0cmF0aXZlIHRhZ3MgaXMgZ2VuZXJhbGx5IG9wYXF1ZSB0bw0KPj4+IE9T UEYuIFJvdXRlciBhZHZlcnRpc2luZyB0aGUgcGVyLW5vZGUgYWRtaW5pc3RyYXRpdmUgdGFnIChv ciB0YWdzKQ0KPj4+IG1heSBiZSBjb25maWd1cmVkIHRvIGRvIHNvIHdpdGhvdXQga25vd2luZyAo b3IgZXZlbiB3aXRob3V0DQo+Pj4gc3VwcG9ydGluZyBwcm9jZXNzaW5nIG9mKSBmdW5jdGlvbmFs aXR5IGltcGxpZWQgYnkgdGhlIHRhZy48L3Q+DQo+Pg0KPj5JIHRoaW5rIHRoZXJlIGlzIGEgcXVl c3Rpb24gYWJvdXQgd2hldGhlciB0aGlzIG1lYW5zIHRoYXQgdGhlIHJvdXRlcg0KPj5kb2Vzbid0 IG5lZWQgdG8ga25vdyB3aGF0IGZlYXR1cmUgdGhlIHRhZyBudW1iZXIgbWVhbnMsIG9yIHdoZXRo ZXIgaXQNCj4+bWVhbnMgdGhhdCB0aGUgcm91dGVyIGRvZXNuJ3QgbmVlZCB0byBpbXBsZW1lbnQg dGhlIGZlYXR1cmUgaW5kaWNhdGVkDQo+PmJ5IHRoYXQgdGFnIHZhbHVlLiAgSSByZWFkIHRoaXMg dGV4dCBhcyBiZWluZyBpbiB0aGUgc2Vjb25kIGNhc2UsIGJ1dCBJDQo+PmFtIGludGVycHJldGlu ZyB5b3VyIGRpc2N1c3Npb24gYWJvdXQgdGhpcyB0ZXh0IHRvIG1lYW4gdGhhdCB5b3UgdGhpbmsN Cj4+aXQgaXMgY292ZXJpbmcgdGhlIGZpcnN0IGNhc2UuICAoWWVzLCB0aGVyZSBjYW4gYmUgdGFn IHZhbHVlcyB0aGF0IGp1c3QNCj4+aW5kaWNhdGUgYW4gYWRtaW5pc3RyYXRpdmUgZ3JvdXBpbmcg YW5kIHRoZXJlIGlzIG5vIGNvcnJlc3BvbmRpbmcNCj4+ZnVuY3Rpb25hbGl0eSBuZWVkZWQgb24g dGhlIHJvdXRlciwgYnV0IHRoZXJlIGNhbiBhbHNvIGJlIHRhZyB2YWx1ZXMNCj4+dGhhdCBpbmRp Y2F0ZSAidGhlIHJvdXRlciBvcmlnaW5hdGluZyB0aGlzIFJJIExTQSBzdXBwb3J0cyBhY2NlcHRp bmcNCj4+dGFyZ2V0ZWQgTERQIHNlc3Npb25zIg0KPj4tLSBhIHJvdXRlciB3aWxsIGNhdXNlIGJy ZWFrYWdlIGlmIGl0IHNlbmRzIHN1Y2ggYSB0YWcgYnV0IGRvZXMgbm90DQo+PmFjdHVhbGx5IHN1 cHBvcnQgYWNjZXB0aW5nIHRhcmdldGVkIExEUCBzZXNzaW9ucy4pDQo+Pg0KPj5CYXNlZCBvbiB0 aGlzIGRpc2N1c3Npb24sIEkgdGhpbmsgdGhhdCB3aGF0IHRoZSBwYXJlbnRoZXRpY2FsIGlzIHRy eWluZw0KPj50byBzYXkgaXMgdGhhdCAidGhlIHJvdXRlciBvcmlnaW5hdGluZyB0aGUgdGFnIG1h eSBub3QgdXNlIHRoYXQgdGFnIGluDQo+PmFueSBvZiBpdHMgcHJvY2Vzc2luZyBkZWNpc2lvbnMi IC0tIGlzIHRoYXQgY29ycmVjdD8NCj4+DQo+PkNoYW5naW5nIHRoZSB3b3JkICJmdW5jdGlvbmFs aXR5IiB0byAiYXR0cmlidXRlcyIgd291bGQgY2F1c2UgbWUgdG8NCj4+cmVhZCB0aGUgdGV4dCBh cyBiZWluZyBpbiB0aGUgZmlyc3QgY2FzZSBJIGRlc2NyaWJlZCBhYm92ZS4NCj4+DQo+PihCeSB0 aGUgd2F5LCB0aGlzIHBhcmFncmFwaCBoYWQgYSBsb3Qgb2YgY2hhbmdlcyBpbiBteSBwYXRjaCBm b3INCj4+Z3JhbW1hcjsgaXQgbWlnaHQgaGF2ZSBiZWVuIGVhc2llciB0byBhcHBseSB0aGF0IHBh dGNoIGJlZm9yZSBtYWtpbmcNCj4+ZnVydGhlciBlZGl0cywgdG8gcmVkdWNlIHRoZSBudW1iZXIg b2YgbWVyZ2UgY29uZmxpY3RzLiAgVGhlIGdyYW1tYXIgaW4NCj4+dGhlIHF1b3RlZCBuZXcgdGV4 dCBoYXMgc2V2ZXJhbCBlcnJvcnMuKQ0KPj4NCj4+PiA+T25lIHJlYXNvbiBJIGFtIHVuc2F0aXNm aWVkIGJ5IG1ha2luZyB0aGUgaW50ZXJwcmV0YXRpb24gb2YgdGhlIHRhZw0KPj4+ID52YWx1ZXMg c3BlY2lmaWMgdG8gYW4gYWRtaW5pc3RyYXRpdmUgZG9tYWluIGlzIHRoYXQgYSBtaXNjb25maWd1 cmVkDQo+Pj4gPmJvcmRlciByb3V0ZXIgbWlnaHQgZXJyb25lb3VzbHkgdXNlIHRhZyB2YWx1ZXMg ZnJvbSBvbmUgZG9tYWluIG9uDQo+Pj4gPnRoZSBvdGhlciBzaWRlIG9mIHRoZSBib3JkZXIuDQo+ Pj4gPiBQZXJoYXBzIHRoZSBvdGhlciBkYW1hZ2UgZnJvbSBhIHJvdXRlciBtaXNjb25maWd1cmVk IGluIHN1Y2ggYQ0KPj4+ID5mYXNoaW9uIHdvdWxkIGR3YXJmIHRoZSBhZGRpdGlvbmFsIGRhbWFn ZSBmcm9tIHRoZSBtaXNpbnRlcnByZXRlZA0KPj4+ID50YWdzIGFuZCBzbyBteSBjb25jZXJuIGlz IGludmFsaWQ7IEkgcmVhbGx5IGNhbid0IHNheS4NCj4+Pg0KPj4+IEFnYWluLCBJIGRvbuKAmXQg dGhpbmsgbWlzY29uZmlndXJhdGlvbiBuZWVkcyB0byBiZSBjb3ZlcmVkIC0gImVtcHRvcg0KPj4+ Y2F2ZXRl4oCdLg0KPj4NCj4+QSBtaXNjb25maWd1cmVkIHJvdXRlciBpcyBieSBkZWZpbml0aW9u IGJyb2tlbi4gIFN1Y2ggbWlzY29uZmlndXJhdGlvbg0KPj5jYW4gaGFwcGVuIGVpdGhlciBieSBh Y2NpZGVudCBkdWUgdG8gb3BlcmF0b3IgZXJyb3IsIG9yIG1hbGljaW91c2x5LCBpZg0KPj5hbiBh dHRhY2tlciBoYXMgY29tcHJvbWlzZWQgdGhlIHN5c3RlbS4gIFdoaWxlIGl0IG1heSBub3QgYmUg bmVjZXNzYXJ5DQo+PnRvIHNheSB0aGF0IGEgYnJva2VuIHJvdXRlciB3aWxsIG5vdCBwYXNzIHRy YWZmaWMgdGhlIHdheSBpdCdzIHN1cHBvc2VkDQo+PnRvLCBpZiBhIG1pc2NvbmZpZ3VyZWQgcm91 dGVyIGNhbiBlbWl0IHJvdXRpbmcgcHJvdG9jb2wgbWVzc2FnZXMgdGhhdA0KPj5hZmZlY3QgdGhl IHN0YXRlIG9mIHRoZSBuZXR3b3JrIGFzIGEgd2hvbGUsIG5vdCBqdXN0IGl0cyBsb2NhbA0KPj5z dXJyb3VuZGluZ3MsIHRoYXQgc2VlbXMgbGlrZSBhbiBhbmFseXNpcyB0aGF0IGlzIGFwcHJvcHJp YXRlIGZvciB0aGUNCj4+c2VjdXJpdHkgY29uc2lkZXJhdGlvbnMgb2YgYSByb3V0aW5nIHByb3Rv Y29sIGRvY3VtZW50LiAgTm93LCBJIGRvbid0DQo+PmhhdmUgYSBnb29kIHBpY3R1cmUgb2Ygc3Bl Y2lmaWMgZXhhbXBsZXMgb2YgbmV0d29yay13aWRlIGlzc3VlcyBkdWUgdG8NCj4+dGhlIGFkbWlu IHRhZywgYnV0IEkgdGhpbmsgdGhlcmUncyBhIGxhcmdlIGVub3VnaCBwcm9iYWJpbGl0eSB0aGF0 IGl0J3MNCj4+cG9zc2libGUgZm9yIHN1Y2ggYSB0aGluZyB0byBoYXBwZW4gdGhhdCBJIHdhbnRl ZCB0byBtZW50aW9uIGl0IGluIG15DQo+PnJldmlldyBjb21tZW50cy4gIE1heWJlIHRoZXJlIGlz IG5vdCBhbnl0aGluZyB3b3J0aCBtZW50aW9uaW5nIGFib3V0IGl0DQo+PmluIHRoZSBzZWN1cml0 eSBjb25zaWRlcmF0aW9ucyBzZWN0aW9uLCBidXQgSSBkb24ndCB0aGluayB0aGF0DQo+PiJtaXNj b25maWd1cmF0aW9uIGRvZXNuJ3QgbmVlZCB0byBiZSBjb3ZlcmVkIiBhZGRyZXNzZXMgdGhlIGNv bmNlcm4gSQ0KPj53YXMgYXR0ZW1wdGluZyB0byByYWlzZS4NCj4+DQo+Pj4gPFNocmFkZGhhPiAt MDcgdmVyc2lvbiBhZGRyZXNzZXMgdGhpcyBpc3N1ZS4NCj4+Pg0KPj4+ICJBZHZlcnRpc2VtZW50 IG9mIHRhZyB2YWx1ZXMgZm9yIG9uZSBhZG1pbmlzdHJhdGl2ZSBkb21haW4gaW50bw0KPj4+YW5v dGhlciAgcmlza3MgbWlzaW50ZXJwcmV0YXRpb24gb2YgdGhlIHRhZyB2YWx1ZXMgKGlmIHRoZSB0 d28gZG9tYWlucw0KPj4+aGF2ZSBhc3NpZ25lZCAgZGlmZmVyZW50IG1lYW5pbmdzIHRvIHRoZSBz YW1lIHZhbHVlcyksIHdoaWNoIG1heSBoYXZlDQo+Pj51bmRlc2lyYWJsZSBhbmQgdW5hbnRpY2lw YXRlZCBzaWRlICBlZmZlY3RzLiINCj4+DQo+PlRoYW5rIHlvdSwgdGhhdCBoZWxwcy4NCj4+DQo+ Pj4gVGhhbmtzIGZvciB0aGUgZWRpdG9yaWFsIHJldmlldyBhcyB3ZWxsLiBTcGVhayBhcyBXRyBj aGFpciwgSQ0KPj4+YXBwcmVjaWF0ZSB0aGlzLg0KPj4NCj4+WW91J3JlIHdlbGNvbWUhDQo+Pg0K Pj4tQmVuDQo+DQoNCg== From nobody Thu Oct 22 07:18:33 2015 Return-Path: X-Original-To: secdir@ietfa.amsl.com Delivered-To: secdir@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E9B271B302E; Fri, 16 Oct 2015 00:50:53 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.21 X-Spam-Level: X-Spam-Status: No, score=-4.21 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id JrSoxKo5sW30; Fri, 16 Oct 2015 00:50:52 -0700 (PDT) Received: from lhrrgout.huawei.com (lhrrgout.huawei.com [194.213.3.17]) (using TLSv1 with cipher RC4-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 6CEFB1B302D; Fri, 16 Oct 2015 00:50:50 -0700 (PDT) Received: from 172.18.7.190 (EHLO lhreml406-hub.china.huawei.com) ([172.18.7.190]) by lhrrg02-dlp.huawei.com (MOS 4.3.7-GA FastPath queued) with ESMTP id BYW51049; Fri, 16 Oct 2015 07:50:48 +0000 (GMT) Received: from NKGEML404-HUB.china.huawei.com (10.98.56.35) by lhreml406-hub.china.huawei.com (10.201.5.243) with Microsoft SMTP Server (TLS) id 14.3.235.1; Fri, 16 Oct 2015 08:50:46 +0100 Received: from NKGEML512-MBX.china.huawei.com ([169.254.7.203]) by nkgeml404-hub.china.huawei.com ([10.98.56.35]) with mapi id 14.03.0235.001; Fri, 16 Oct 2015 15:50:38 +0800 From: "Dongjie (Jimmy)" To: Joseph Salowey , secdir , The IESG , "draft-ietf-pals-redundancy-spe.all@tools.ietf.org" Thread-Topic: review of draft-ietf-pals-redundancy-spe-02 Thread-Index: AQHRB8a/ZADRztC2aE6hhQoD0pCi+J5tvmKQ Date: Fri, 16 Oct 2015 07:50:38 +0000 Message-ID: <76CD132C3ADEF848BD84D028D243C927743BB161@nkgeml512-mbx.china.huawei.com> References: In-Reply-To: Accept-Language: en-US, zh-CN Content-Language: zh-CN X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.111.97.131] Content-Type: multipart/alternative; boundary="_000_76CD132C3ADEF848BD84D028D243C927743BB161nkgeml512mbxchi_" MIME-Version: 1.0 X-CFilter-Loop: Reflected Archived-At: X-Mailman-Approved-At: Thu, 22 Oct 2015 07:18:02 -0700 Subject: Re: [secdir] review of draft-ietf-pals-redundancy-spe-02 X-BeenThere: secdir@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: Security Area Directorate List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 16 Oct 2015 07:50:54 -0000 --_000_76CD132C3ADEF848BD84D028D243C927743BB161nkgeml512mbxchi_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 SGkgSm9lLA0KDQpUaGFua3MgYSBsb3QgZm9yIHlvdXIgcmV2aWV3IGFuZCBzdWdnZXN0aW9ucy4g IFdlIHdpbGwgZXhwYW5kIGFsbCB0aGUgYWNyb255bXMgb24gZmlyc3QgdXNlLg0KDQpCZXN0IHJl Z2FyZHMsDQpKaWUNCg0KRnJvbTogSm9zZXBoIFNhbG93ZXkgW21haWx0bzpqb2VAc2Fsb3dleS5u ZXRdDQpTZW50OiBGcmlkYXksIE9jdG9iZXIgMTYsIDIwMTUgMTE6NTcgQU0NClRvOiBzZWNkaXI7 IFRoZSBJRVNHOyBkcmFmdC1pZXRmLXBhbHMtcmVkdW5kYW5jeS1zcGUuYWxsQHRvb2xzLmlldGYu b3JnDQpTdWJqZWN0OiByZXZpZXcgb2YgZHJhZnQtaWV0Zi1wYWxzLXJlZHVuZGFuY3ktc3BlLTAy DQoNCkkgaGF2ZSByZXZpZXdlZCB0aGlzIGRvY3VtZW50IGFzIHBhcnQgb2YgdGhlIHNlY3VyaXR5 IGRpcmVjdG9yYXRlJ3Mgb25nb2luZyBlZmZvcnQgdG8gcmV2aWV3IGFsbCBJRVRGIGRvY3VtZW50 cyBiZWluZyBwcm9jZXNzZWQgYnkgdGhlIElFU0cuIFRoZXNlIGNvbW1lbnRzIHdlcmUgd3JpdHRl biBwcmltYXJpbHkgZm9yIHRoZSBiZW5lZml0IG9mIHRoZSBzZWN1cml0eSBhcmVhIGRpcmVjdG9y cy4gRG9jdW1lbnQgZWRpdG9ycyBhbmQgV0cgY2hhaXJzIHNob3VsZCB0cmVhdCB0aGVzZSBjb21t ZW50cyBqdXN0IGxpa2UgYW55IG90aGVyIGxhc3QgY2FsbCBjb21tZW50cy4NCg0KRnJvbSBhIHNl Y3VyaXR5IHBlcnNwZWN0aXZlIEkgdGhpbmsgdGhlIGRvY3VtZW50IGlzIHJlYWR5LiAgSSB0aGlu ayB0aGUgZG9jdW1lbnQgY291bGQgYmUgY2xlYW5lZCB1cCBhIGxpdHRsZSB0byBtYWtlIHJlYWRp bmcgYSBsaXR0bGUgYml0IGVhc2llci4NCg0KVGhlIGRvY3VtZW50IGRpc2N1c3NlcyBhIG5ldyBw c2V1ZG8gd2lyZSByZWR1bmRhbmN5IG1vZGUuICBJIGRpZCBub3QgZmluZCB0aGUgZG9jdW1lbnQg cGFydGljdWxhcmx5IGNsZWFyLCBpdCB3b3VsZCBwcm9iYWJseSBoZWxwIHRvIGV4cGFuZCBhbGwg dGhlIGFjcm9ueW1zIG9uIGZpcnN0IHVzZS4gICBUaGUgZG9jdW1lbnQgb25seSByZWZlcnMgdG8g c2V2ZXJhbCBvdGhlciBkb2N1bWVudHMgZm9yIGl0cyBzZWN1cml0eSBjb25zaWRlcmF0aW9ucy4g IFdoaWxlIHRoaXMgaXMgb2Z0ZW4gbm90IHRoZSBmYXZvcmVkIGFwcHJvYWNoIGluIHRoaXMgY2Fz ZSBpdCBzZWVtcyB0byBiZSBPSyBhcyBiZXN0IGFzIEkgY2FuIHRlbGwuICBUaGUgZG9jdW1lbnQg ZG9lc24ndCBhcHBlYXIgdG8gYmUgZGVmaW5pbmcgYW55dGhpbmcgZnVuZGFtZW50YWxseSBuZXcg dGhhdCB3b3VsZCBjaGFuZ2UgdGhlIGNvbnNpZGVyYXRpb25zIGluIHRoZSByZWZlcmVuY2VkIGRv Y3VtZW50cyBvciByZXF1aXJlIHNwZWNpYWwgYXR0ZW50aW9uLg0KDQpDaGVlcnMsDQoNCkpvZQ0K --_000_76CD132C3ADEF848BD84D028D243C927743BB161nkgeml512mbxchi_ Content-Type: text/html; charset="utf-8" Content-Transfer-Encoding: base64 PGh0bWwgeG1sbnM6dj0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTp2bWwiIHhtbG5zOm89InVy bjpzY2hlbWFzLW1pY3Jvc29mdC1jb206b2ZmaWNlOm9mZmljZSIgeG1sbnM6dz0idXJuOnNjaGVt YXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6d29yZCIgeG1sbnM6bT0iaHR0cDovL3NjaGVtYXMubWlj cm9zb2Z0LmNvbS9vZmZpY2UvMjAwNC8xMi9vbW1sIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcv VFIvUkVDLWh0bWw0MCI+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIg Y29udGVudD0idGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjxtZXRhIG5hbWU9IkdlbmVyYXRv ciIgY29udGVudD0iTWljcm9zb2Z0IFdvcmQgMTIgKGZpbHRlcmVkIG1lZGl1bSkiPg0KPHN0eWxl PjwhLS0NCi8qIEZvbnQgRGVmaW5pdGlvbnMgKi8NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6 5a6L5L2TOw0KCXBhbm9zZS0xOjIgMSA2IDAgMyAxIDEgMSAxIDE7fQ0KQGZvbnQtZmFjZQ0KCXtm b250LWZhbWlseToiQ2FtYnJpYSBNYXRoIjsNCglwYW5vc2UtMToyIDQgNSAzIDUgNCA2IDMgMiA0 O30NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6Q2FsaWJyaTsNCglwYW5vc2UtMToyIDE1IDUg MiAyIDIgNCAzIDIgNDt9DQpAZm9udC1mYWNlDQoJe2ZvbnQtZmFtaWx5OlRhaG9tYTsNCglwYW5v c2UtMToyIDExIDYgNCAzIDUgNCA0IDIgNDt9DQpAZm9udC1mYWNlDQoJe2ZvbnQtZmFtaWx5OiJc QOWui+S9kyI7DQoJcGFub3NlLTE6MiAxIDYgMCAzIDEgMSAxIDEgMTt9DQovKiBTdHlsZSBEZWZp bml0aW9ucyAqLw0KcC5Nc29Ob3JtYWwsIGxpLk1zb05vcm1hbCwgZGl2Lk1zb05vcm1hbA0KCXtt YXJnaW46MGNtOw0KCW1hcmdpbi1ib3R0b206LjAwMDFwdDsNCglmb250LXNpemU6MTIuMHB0Ow0K CWZvbnQtZmFtaWx5OuWui+S9kzt9DQphOmxpbmssIHNwYW4uTXNvSHlwZXJsaW5rDQoJe21zby1z dHlsZS1wcmlvcml0eTo5OTsNCgljb2xvcjpibHVlOw0KCXRleHQtZGVjb3JhdGlvbjp1bmRlcmxp bmU7fQ0KYTp2aXNpdGVkLCBzcGFuLk1zb0h5cGVybGlua0ZvbGxvd2VkDQoJe21zby1zdHlsZS1w cmlvcml0eTo5OTsNCgljb2xvcjpwdXJwbGU7DQoJdGV4dC1kZWNvcmF0aW9uOnVuZGVybGluZTt9 DQpzcGFuLkVtYWlsU3R5bGUxNw0KCXttc28tc3R5bGUtdHlwZTpwZXJzb25hbC1yZXBseTsNCglm b250LWZhbWlseToiQ2FsaWJyaSIsInNhbnMtc2VyaWYiOw0KCWNvbG9yOiMxRjQ5N0Q7fQ0KLk1z b0NocERlZmF1bHQNCgl7bXNvLXN0eWxlLXR5cGU6ZXhwb3J0LW9ubHk7fQ0KQHBhZ2UgV29yZFNl Y3Rpb24xDQoJe3NpemU6NjEyLjBwdCA3OTIuMHB0Ow0KCW1hcmdpbjo3Mi4wcHQgOTAuMHB0IDcy LjBwdCA5MC4wcHQ7fQ0KZGl2LldvcmRTZWN0aW9uMQ0KCXtwYWdlOldvcmRTZWN0aW9uMTt9DQot LT48L3N0eWxlPjwhLS1baWYgZ3RlIG1zbyA5XT48eG1sPg0KPG86c2hhcGVkZWZhdWx0cyB2OmV4 dD0iZWRpdCIgc3BpZG1heD0iMTAyNiIgLz4NCjwveG1sPjwhW2VuZGlmXS0tPjwhLS1baWYgZ3Rl IG1zbyA5XT48eG1sPg0KPG86c2hhcGVsYXlvdXQgdjpleHQ9ImVkaXQiPg0KPG86aWRtYXAgdjpl eHQ9ImVkaXQiIGRhdGE9IjEiIC8+DQo8L286c2hhcGVsYXlvdXQ+PC94bWw+PCFbZW5kaWZdLS0+ DQo8L2hlYWQ+DQo8Ym9keSBsYW5nPSJaSC1DTiIgbGluaz0iYmx1ZSIgdmxpbms9InB1cnBsZSI+ DQo8ZGl2IGNsYXNzPSJXb3JkU2VjdGlvbjEiPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4g bGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6MTAuNXB0O2ZvbnQtZmFtaWx5OiZxdW90O0Nh bGlicmkmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90Oztjb2xvcjojMUY0OTdEIj5IaSBKb2Us DQo8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5n PSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZToxMC41cHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJy aSZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7O2NvbG9yOiMxRjQ5N0QiPjxvOnA+Jm5ic3A7 PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLVVT IiBzdHlsZT0iZm9udC1zaXplOjEwLjVwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7 LCZxdW90O3NhbnMtc2VyaWYmcXVvdDs7Y29sb3I6IzFGNDk3RCI+VGhhbmtzIGEgbG90IGZvciB5 b3VyIHJldmlldyBhbmQgc3VnZ2VzdGlvbnMuICZuYnNwO1dlIHdpbGwgZXhwYW5kIGFsbCB0aGUg YWNyb255bXMgb24gZmlyc3QgdXNlLjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJN c29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOjEwLjVwdDtmb250 LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDs7Y29sb3I6 IzFGNDk3RCI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1h bCI+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6MTAuNXB0O2ZvbnQtZmFtaWx5 OiZxdW90O0NhbGlicmkmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90Oztjb2xvcjojMUY0OTdE Ij5CZXN0IHJlZ2FyZHMsPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1h bCI+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6MTAuNXB0O2ZvbnQtZmFtaWx5 OiZxdW90O0NhbGlicmkmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90Oztjb2xvcjojMUY0OTdE Ij5KaWU8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBs YW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZToxMC41cHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2Fs aWJyaSZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7O2NvbG9yOiMxRjQ5N0QiPjxvOnA+Jm5i c3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxkaXYgc3R5bGU9ImJvcmRlcjpub25lO2JvcmRlci1sZWZ0 OnNvbGlkIGJsdWUgMS41cHQ7cGFkZGluZzowY20gMGNtIDBjbSA0LjBwdCI+DQo8ZGl2Pg0KPGRp diBzdHlsZT0iYm9yZGVyOm5vbmU7Ym9yZGVyLXRvcDpzb2xpZCAjQjVDNERGIDEuMHB0O3BhZGRp bmc6My4wcHQgMGNtIDBjbSAwY20iPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PGI+PHNwYW4gbGFu Zz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O1RhaG9t YSZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7Ij5Gcm9tOjwvc3Bhbj48L2I+PHNwYW4gbGFu Zz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O1RhaG9t YSZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7Ij4gSm9zZXBoIFNhbG93ZXkgW21haWx0bzpq b2VAc2Fsb3dleS5uZXRdDQo8YnI+DQo8Yj5TZW50OjwvYj4gRnJpZGF5LCBPY3RvYmVyIDE2LCAy MDE1IDExOjU3IEFNPGJyPg0KPGI+VG86PC9iPiBzZWNkaXI7IFRoZSBJRVNHOyBkcmFmdC1pZXRm LXBhbHMtcmVkdW5kYW5jeS1zcGUuYWxsQHRvb2xzLmlldGYub3JnPGJyPg0KPGI+U3ViamVjdDo8 L2I+IHJldmlldyBvZiBkcmFmdC1pZXRmLXBhbHMtcmVkdW5kYW5jeS1zcGUtMDI8bzpwPjwvbzpw Pjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4g bGFuZz0iRU4tVVMiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxkaXY+DQo8ZGl2Pg0K PHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tVVMiPkkgaGF2ZSByZXZpZXdlZCB0 aGlzIGRvY3VtZW50IGFzIHBhcnQgb2YgdGhlIHNlY3VyaXR5IGRpcmVjdG9yYXRlJ3Mgb25nb2lu ZyBlZmZvcnQgdG8gcmV2aWV3IGFsbCBJRVRGIGRvY3VtZW50cyBiZWluZyBwcm9jZXNzZWQgYnkg dGhlIElFU0cuIFRoZXNlIGNvbW1lbnRzIHdlcmUgd3JpdHRlbiBwcmltYXJpbHkgZm9yIHRoZSBi ZW5lZml0IG9mIHRoZSBzZWN1cml0eSBhcmVhIGRpcmVjdG9ycy4NCiBEb2N1bWVudCBlZGl0b3Jz IGFuZCBXRyBjaGFpcnMgc2hvdWxkIHRyZWF0IHRoZXNlIGNvbW1lbnRzIGp1c3QgbGlrZSBhbnkg b3RoZXIgbGFzdCBjYWxsIGNvbW1lbnRzLjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0K PGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLVVTIj48bzpwPiZuYnNw OzwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48 c3BhbiBsYW5nPSJFTi1VUyI+RnJvbSBhIHNlY3VyaXR5IHBlcnNwZWN0aXZlIEkgdGhpbmsgdGhl IGRvY3VtZW50IGlzIHJlYWR5LiZuYnNwOyBJIHRoaW5rIHRoZSBkb2N1bWVudCBjb3VsZCBiZSBj bGVhbmVkIHVwIGEgbGl0dGxlIHRvIG1ha2UgcmVhZGluZyBhIGxpdHRsZSBiaXQgZWFzaWVyLiAm bmJzcDs8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIj48c3BhbiBsYW5nPSJFTi1VUyI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0K PC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tVVMiPlRo ZSBkb2N1bWVudCBkaXNjdXNzZXMgYSBuZXcgcHNldWRvIHdpcmUgcmVkdW5kYW5jeSBtb2RlLiZu YnNwOyBJIGRpZCBub3QgZmluZCB0aGUgZG9jdW1lbnQgcGFydGljdWxhcmx5IGNsZWFyLCBpdCB3 b3VsZCBwcm9iYWJseSBoZWxwIHRvIGV4cGFuZCBhbGwgdGhlIGFjcm9ueW1zIG9uIGZpcnN0IHVz ZS4gJm5ic3A7IFRoZSBkb2N1bWVudCBvbmx5IHJlZmVycyB0byBzZXZlcmFsIG90aGVyIGRvY3Vt ZW50cw0KIGZvciBpdHMgc2VjdXJpdHkgY29uc2lkZXJhdGlvbnMuJm5ic3A7IFdoaWxlIHRoaXMg aXMgb2Z0ZW4gbm90IHRoZSBmYXZvcmVkIGFwcHJvYWNoIGluIHRoaXMgY2FzZSBpdCBzZWVtcyB0 byBiZSBPSyBhcyBiZXN0IGFzIEkgY2FuIHRlbGwuJm5ic3A7IFRoZSBkb2N1bWVudCBkb2Vzbid0 IGFwcGVhciB0byBiZSBkZWZpbmluZyBhbnl0aGluZyBmdW5kYW1lbnRhbGx5IG5ldyB0aGF0IHdv dWxkIGNoYW5nZSB0aGUgY29uc2lkZXJhdGlvbnMgaW4gdGhlIHJlZmVyZW5jZWQNCiBkb2N1bWVu dHMgb3IgcmVxdWlyZSBzcGVjaWFsIGF0dGVudGlvbi4mbmJzcDs8bzpwPjwvbzpwPjwvc3Bhbj48 L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1V UyI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9 Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tVVMiPkNoZWVycyw8bzpwPjwvbzpwPjwvc3Bhbj48 L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1V UyI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9 Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tVVMiPkpvZTxvOnA+PC9vOnA+PC9zcGFuPjwvcD4N CjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9ib2R5Pg0KPC9odG1sPg0K --_000_76CD132C3ADEF848BD84D028D243C927743BB161nkgeml512mbxchi_-- From nobody Thu Oct 22 07:18:34 2015 Return-Path: X-Original-To: secdir@ietfa.amsl.com Delivered-To: secdir@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 816DA1ACD33; Sat, 17 Oct 2015 12:49:30 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.351 X-Spam-Level: X-Spam-Status: No, score=-2.351 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HELO_EQ_FR=0.35, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id OM85YpfFQhvI; Sat, 17 Oct 2015 12:49:28 -0700 (PDT) Received: from zproxy120.enst.fr (zproxy120.enst.fr [137.194.52.34]) by ietfa.amsl.com (Postfix) with ESMTP id 0CD3A1ACD31; Sat, 17 Oct 2015 12:49:28 -0700 (PDT) Received: from localhost (localhost [127.0.0.1]) by zproxy120.enst.fr (Postfix) with ESMTP id E90E7FFB62; Sat, 17 Oct 2015 21:49:25 +0200 (CEST) Received: from zproxy120.enst.fr ([127.0.0.1]) by localhost (zproxy120.enst.fr [127.0.0.1]) (amavisd-new, port 10032) with ESMTP id S1k5maBqW0Dz; Sat, 17 Oct 2015 21:49:25 +0200 (CEST) Received: from localhost (localhost [127.0.0.1]) by zproxy120.enst.fr (Postfix) with ESMTP id 41E7E1001DB; Sat, 17 Oct 2015 21:49:25 +0200 (CEST) DKIM-Filter: OpenDKIM Filter v2.9.0 zproxy120.enst.fr 41E7E1001DB DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=telecom-paristech.fr; s=A6AEC2EE-1106-11E5-B10E-D103FDDA8F2E; t=1445111365; bh=treUJkF87wpyKyDgI/oVPtNJ3hGVYFMIe6yu83GceMI=; h=Content-Type:Mime-Version:Subject:From:Date: Content-Transfer-Encoding:Message-Id:To; b=YIy2LRPsquUF5AunwrkE0YZWaxOLFJC7q9kCk20Qy7bvWuw3nXTouHlIwzRhbyHt6 0ay9LNgINZOnz5lZ0SRYeRj9nMHdQau2SCpj0IY4lSFyp+kV7SLf2DYknSqSIgMOdq JaKRP83wsog4PEmXI3ySkMUNu5IY3gPukm83cWss= X-Virus-Scanned: amavisd-new at zproxy120.enst.fr Received: from zproxy120.enst.fr ([127.0.0.1]) by localhost (zproxy120.enst.fr [127.0.0.1]) (amavisd-new, port 10026) with ESMTP id qkSR0zG5D0DQ; Sat, 17 Oct 2015 21:49:25 +0200 (CEST) Received: from [192.168.0.42] (bny92-2-81-56-19-67.fbx.proxad.net [81.56.19.67]) by zproxy120.enst.fr (Postfix) with ESMTPSA id DEA9A1001D7; Sat, 17 Oct 2015 21:49:24 +0200 (CEST) Content-Type: text/plain; charset=windows-1252 Mime-Version: 1.0 (Mac OS X Mail 9.0 \(3094\)) From: Luigi Iannone In-Reply-To: Date: Sat, 17 Oct 2015 21:49:24 +0200 Content-Transfer-Encoding: quoted-printable Message-Id: References: <201510131728.t9DHSxCO017053@sylvester.rhmr.com> To: ho@alum.mit.edu X-Mailer: Apple Mail (2.3094) Archived-At: X-Mailman-Approved-At: Thu, 22 Oct 2015 07:18:02 -0700 Cc: Damien Saucez , draft-saucez-lisp-impact@tools.ietf.org, The IESG , secdir@ietf.org Subject: Re: [secdir] review of draft-saucez-lisp-impact-04.txt X-BeenThere: secdir@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: Security Area Directorate List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 17 Oct 2015 19:49:30 -0000 Hi Hilarie, In the current format the security section just states that actually=20 security is out of the scope of the document. This was actually an outcome of the WG discussion, were it was decided to clearly separate security and impact. Yet, it is true that the security section is poor, while=20 security analysis is out of the scope of the document, it does not=20 mean that we cannot mention the major security points=20 thoroughly analysed in the threats document. Hence we propose to modify the security section as follows: Old Version: Security and threats analysis of the LISP protocol is out of the scope of the present document. A thorough analysis of LISP = security threats is detailed in [I-D.ietf-lisp-threats]. NEW Version: A thorough security and threats analysis of the LISP protocol is carried out in details in [I-D.ietf-lisp-threats].=20 Like for other Internet technologies, also for LISP most of=20 threats can be mitigated using Best Current Practice, meaning=20 with careful deployment an configuration (e.g., filter) and also=20= by activating only features that are really necessary in the=20 deployment and verifying all the information obtained from third=20= parties. Unless gleaning features (actually deprecated in RFC 6830 [RFC6830]) are used, the LISP data-plane shows the=20 same level of security as other IP-over-IP technologies. =46rom a security perspective, the control-plane remains the=20 critical part of the LISP architecture. To maximally mitigate the threats on the mapping system, authentication must be used, whenever possible, for all=20= control plane messages. Current specification already offer security mechanisms=20 ([RFC6833], [I-D.ietf-lisp-sec]) able to strongly reduce = threats=20 in non-trustable environments such as the Internet. =20 Actually, LISP specifications define a generic authentication = data field=20 control plane messages [RFC6830] allowing to propose a general authentication mechanisms for the LISP control-plane while = staying backward compatible.=20 =09 We hope this delivers the information you were looking for. ciao Luigi > On 13 Oct 2015, at 19:28, Hilarie Orman wrote: >=20 > Thanks for pointing out my mistake. I have now reviewed > draft-ietf-lisp-impact-04 and the same comments about security apply. >=20 > Hilarie >=20 >> From: Damien Saucez >> Date: Tue, 13 Oct 2015 08:13:08 +0200 >=20 >=20 >> Thank you for the review. I would have a question regarding the = document you reviewed. Did you review th >=20 >> draft-sauces-lisp-impact-04 >=20 >> or=20 >=20 >> draft-ietf-lisp-impact-04 >=20 >> Thank you, >=20 >> Damien Saucez=20 >=20 >> On 13 Oct 2015, at 05:01, Hilarie Orman wrote: >=20 >>> Secdir review of LISP Impact >>> draft-saucez-lisp-impact-04.txt >>>=20 >>> Do not be alarmed. I have reviewed this document as part of the >>> security directorate's ongoing effort to review all IETF documents >>> being processed by the IESG. These comments were written primarily >>> for the benefit of the security area directors. Document editors = and >>> WG chairs should treat these comments just like any other last call >>> comments. >>>=20 >>> A new way of handling routing information has been defined in IETF >>> documents about the Locator/Identifier Separation Protocol (LISP). >>> The draft under discussion here elaborates on the possible >>> consequences of widespread use of LISP. >>>=20 >>> The draft punts on security considerations and refers to previous >>> documents describing threats to LISP and how LISP uses cryptography >>> for protecting the integrity of its messages. >>>=20 >>> It seems to me that if the purported impact of LISP is to "scale the >>> Internet", then its impact on security should be a major part of the >>> equation. Will it make routing information more or less vulnerable >>> malicious manipulation? How will it affect the stability of a = network >>> that is under constant threat of attack? >>>=20 >>> I don't feel that the draft can achieve its purpose without = addressing >>> security. >>>=20 >>> Hilarie >>>=20 >>> PS. I was very disappointed to realize that this was not a draft >>> about my favorite programming language. From nobody Thu Oct 22 07:18:35 2015 Return-Path: X-Original-To: secdir@ietfa.amsl.com Delivered-To: secdir@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E36531B30D9 for ; Tue, 20 Oct 2015 02:37:29 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.389 X-Spam-Level: X-Spam-Status: No, score=-1.389 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FM_FORGED_GMAIL=0.622, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01] autolearn=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id FOj_b5tcHwZf for ; Tue, 20 Oct 2015 02:37:29 -0700 (PDT) Received: from mail-lf0-x22e.google.com (mail-lf0-x22e.google.com [IPv6:2a00:1450:4010:c07::22e]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id D0DE41B30DB for ; Tue, 20 Oct 2015 02:37:27 -0700 (PDT) Received: by lffv3 with SMTP id v3so2668403lff.0 for ; Tue, 20 Oct 2015 02:37:26 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=20120113; h=mime-version:in-reply-to:references:from:date:message-id:subject:to :cc:content-type; bh=cK0DuTTBexZzpge3DW1dWxLRFg7x2O7Mk+P8ECqfwO4=; b=WlLDh7VWSSmm85PsnbgvJpulqX7U6CF+4NsvhhVyJhCvLs7MVCmQD4C4V8dPppuEZF k4t5knMxpkvTiFMEXkYjfe1SbasRQRQrYvLe7593vL2t3b9Du4w4vjc/Gql314o/eqTw CmN3kACk03okJvSiJIyUIA/Abr8cU8iqVm6MiZvS/iL8++VrWXql3/pWDAN2HORiXfYB 0AP2iet+dUmpk3VbnilMSor6i0QHCqgYh7UMWg/G/LxNO/aDg/o5gOl9qcAipiyY/ztO o+lbqWYTDJb20ofIT6dSL77eQagBNptqiiaRM/EnOZgFE3GbHn6kHymQ4GM0jU1kngZX 9ijQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:mime-version:in-reply-to:references:from:date :message-id:subject:to:cc:content-type; bh=cK0DuTTBexZzpge3DW1dWxLRFg7x2O7Mk+P8ECqfwO4=; b=JH9sZSXn2bFbv3FAQXst6rIXqOctNTXxC/YtFWZJn5IwUGbLW64SlmcEzonnIfuafj lu6s2VD12eCaSrBrhu1ArWuLw75k+i2lW7nEmHau18ZgrKu7u01ENsYgLc47L5MokoBo UUvor9Ntdqi5Zs/ceahmuiqSVQ6uHdwVXevAJxVrfSjhJvtw+ym6Avhcpe2tpiKaaYVZ mGem+YA9XDyOCAWhgkFM+D1tRqf5i9OOxYFHpcyfFNp7EA2/PnFEGzjhs7BtLLuKu0NX OdUuv9CEYrP+zgbcZUBCfroWJ/LbMozgnwJj2AzrEq/y2cPJiyVbYXYucd+IYhUx7fr8 /48w== X-Gm-Message-State: ALoCoQnwWxz1IawIqz7b7Vt32KFKqRVzMo53lQ5zB8y3FDxkkmhWWOL1Z4QHou+K0zcICHF0IDN1 X-Received: by 10.25.17.103 with SMTP id g100mr784377lfi.110.1445333845845; Tue, 20 Oct 2015 02:37:25 -0700 (PDT) MIME-Version: 1.0 Received: by 10.112.145.97 with HTTP; Tue, 20 Oct 2015 02:37:06 -0700 (PDT) In-Reply-To: <56214A36.5050805@nostrum.com> References: <56214A36.5050805@nostrum.com> From: Mike West Date: Tue, 20 Oct 2015 11:37:06 +0200 Message-ID: To: Robert Sparks Content-Type: text/plain; charset=UTF-8 Archived-At: X-Mailman-Approved-At: Thu, 22 Oct 2015 07:18:03 -0700 Cc: draft-west-webappsec-csp-reg.all@ietf.org, "iesg@ietf.org" , "secdir@ietf.org" Subject: Re: [secdir] Secdir review: draft-west-webappsec-csp-reg-03.txt X-BeenThere: secdir@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: Security Area Directorate List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 20 Oct 2015 09:37:30 -0000 On Fri, Oct 16, 2015 at 9:04 PM, Robert Sparks wrote: > I have reviewed this document as part of the security directorate's > ongoing effort to review all IETF documents being processed by the > IESG. These comments were written primarily for the benefit of the > security area directors. Document editors and WG chairs should treat > these comments just like any other last call comments. Thank you, Robert! > The BNF for directive-name, as copied into this draft, allows a directive > name of -, or --, ---, etc. > Are you expecting an expert to disallow these, or are they ok? > Is the answer the same for the name 42? I think we would rely on the expert to determine whether these are appropriate directive names. I'd suggest that they aren't, but I'm not sure it's worth constructing a more rigid grammar which would ban them. -mike From nobody Thu Oct 22 07:18:37 2015 Return-Path: X-Original-To: secdir@ietfa.amsl.com Delivered-To: secdir@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 146D01B34BD; Tue, 20 Oct 2015 08:26:33 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.351 X-Spam-Level: X-Spam-Status: No, score=-2.351 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HELO_EQ_FR=0.35, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id CQopcx2qLWY1; Tue, 20 Oct 2015 08:26:30 -0700 (PDT) Received: from zproxy110.enst.fr (zproxy110.enst.fr [137.194.52.33]) by ietfa.amsl.com (Postfix) with ESMTP id 11C5C1A6F6F; Tue, 20 Oct 2015 08:20:13 -0700 (PDT) Received: from localhost (localhost [127.0.0.1]) by zproxy110.enst.fr (Postfix) with ESMTP id 54A3A101878; Tue, 20 Oct 2015 17:20:11 +0200 (CEST) Received: from zproxy110.enst.fr ([127.0.0.1]) by localhost (zproxy110.enst.fr [127.0.0.1]) (amavisd-new, port 10032) with ESMTP id T3M4UzTutCL3; Tue, 20 Oct 2015 17:20:09 +0200 (CEST) Received: from localhost (localhost [127.0.0.1]) by zproxy110.enst.fr (Postfix) with ESMTP id AD83C10077B; Tue, 20 Oct 2015 17:20:09 +0200 (CEST) DKIM-Filter: OpenDKIM Filter v2.9.0 zproxy110.enst.fr AD83C10077B DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=telecom-paristech.fr; s=A6AEC2EE-1106-11E5-B10E-D103FDDA8F2E; t=1445354409; bh=IRDUX5oj+D+GV0MHea1KZCC9ot3+gjjFgLJhXbo2qnA=; h=Content-Type:Mime-Version:Subject:From:Date: Content-Transfer-Encoding:Message-Id:To; b=o21Ox01Sq9y23IKaLJiB5Goig2yplnzdAdxdJRzwfmBDMGZa09DRFOFz68dzC7fP3 Q2I0yU1X1hQSVXD260EZeX6H+53wn4NEYdurdRiuL7rW+SRNI5RWlYSmFdAL5YNzlc UQe9B5zPwN5aTgJXbJbsOUkJVCcMPOZQGdd3p2S4= X-Virus-Scanned: amavisd-new at zproxy110.enst.fr Received: from zproxy110.enst.fr ([127.0.0.1]) by localhost (zproxy110.enst.fr [127.0.0.1]) (amavisd-new, port 10026) with ESMTP id EvTnBDKaDABD; Tue, 20 Oct 2015 17:20:09 +0200 (CEST) Received: from dhcp164-197.enst.fr (dhcp164-197.enst.fr [137.194.165.197]) by zproxy110.enst.fr (Postfix) with ESMTPSA id 7BBEC1019E5; Tue, 20 Oct 2015 17:20:09 +0200 (CEST) Content-Type: text/plain; charset=utf-8 Mime-Version: 1.0 (Mac OS X Mail 9.0 \(3094\)) From: Luigi Iannone In-Reply-To: <201510191902.t9JJ2vGf019909@sylvester.rhmr.com> Date: Tue, 20 Oct 2015 17:20:09 +0200 Content-Transfer-Encoding: quoted-printable Message-Id: References: <201510191902.t9JJ2vGf019909@sylvester.rhmr.com> To: Hilarie Orman X-Mailer: Apple Mail (2.3094) Archived-At: X-Mailman-Approved-At: Thu, 22 Oct 2015 07:18:02 -0700 Cc: Damien Saucez , draft-saucez-lisp-impact@tools.ietf.org, The IESG , draft-ietf-lisp-impact@tools.ietf.org, secdir@ietf.org Subject: Re: [secdir] review of draft-saucez-lisp-impact-04.txt X-BeenThere: secdir@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: Security Area Directorate List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 20 Oct 2015 15:26:33 -0000 Hi Hilarie, Thanks again for your reply. please find our comments inline. ciao Luigi > On 19 Oct 2015, at 21:02, Hilarie Orman wrote: >=20 > [NB: this is in re draft-ietf-lisp-impact-04] >=20 > A few comments and suggestions: >=20 > Unless gleaning features (actually deprecated in > RFC 6830 [RFC6830]) are used,=20 >=20 > I don't see that gleaning is deprecated. In any event, how does = gleaning > undermine security? This is actually discussed in sections 6 and 12 of RFC6830 and analysed = in Section 3.1 of draft-ietf-lisp-threats. >=20 > the LISP data-plane shows the=20 > same level of security as other IP-over-IP technologies. > =46rom a security perspective, the control-plane remains the=20 > critical part of the LISP architecture. >=20 > To maximally mitigate the threats on the mapping >=20 > I doubt authentication is "maximal" mitigation. It just mitigates. Agreed. The sentence will be simplified as just =E2=80=9CTo mitigate the = threats=E2=80=A6." >=20 > system, authentication must be used, whenever possible, for all=20 >=20 > When would it be impossible to use authentication? >=20 The idea was to hint at deployments in ressource constrained = environments. It might in fact be misleading. The whole sentence can be reworded as = follows: To mitigate the threats on the mapping system, authentication=20 should be used for all control plane messages. > control plane messages. >=20 > Current specification already offer security mechanisms=20 > ([RFC6833], [I-D.ietf-lisp-sec]) able to strongly reduce threats=20= > in non-trustable environments such as the Internet. =20 >=20 > "The currenet specification defines security mechanisms which can > reduce threats in open network environments=E2=80=9D Just to keep the references, the sentence can be: The current specification ([RFC6833], [I-D.ietf-lisp-sec]) = defines security=20 mechanisms which can reduce threats in open network = environments.=20 > ? >=20 > Actually, LISP specifications define a generic authentication data = field=20 > control plane messages [RFC6830] allowing to propose a general > authentication mechanisms for the LISP control-plane while staying > backward compatible.=20 >=20 > "The LISP specification defines a generic authentication data field=20 > for control plane messages [RFC6830] which could be used for a = general > authentication mechanisms for the LISP control-plane while staying > backward compatible. " ?? >=20 Reads much better, thanks. Luigi > Hilarie >=20 >> Subject: Re: review of draft-saucez-lisp-impact-04.txt >> From: Luigi Iannone >> Date: Sat, 17 Oct 2015 21:49:24 +0200 >> Cc: Damien Saucez , >> draft-saucez-lisp-impact@tools.ietf.org, secdir@ietf.org, >> The IESG >=20 >> Hi Hilarie, >=20 >> In the current format the security section just states that actually=20= >> security is out of the scope of the document. >> This was actually an outcome of the WG discussion, were it was >> decided to clearly separate security and impact. >=20 >=20 >> Yet, it is true that the security section is poor, while=20 >> security analysis is out of the scope of the document, it does not=20 >> mean that we cannot mention the major security points=20 >> thoroughly analysed in the threats document. >=20 >=20 >> Hence we propose to modify the security section as follows: >=20 >> Old Version: >=20 >> Security and threats analysis of the LISP protocol is out of = the >> scope of the present document. A thorough analysis of LISP = security >> threats is detailed in [I-D.ietf-lisp-threats]. >=20 >=20 >> NEW Version: >=20 >> A thorough security and threats analysis of the LISP protocol >> is carried out in details in [I-D.ietf-lisp-threats].=20 >> Like for other Internet technologies, also for LISP most of=20= >> threats can be mitigated using Best Current Practice, meaning=20= >> with careful deployment an configuration (e.g., filter) and = also=20 >> by activating only features that are really necessary in the=20= >> deployment and verifying all the information obtained from = third=20 >> parties. Unless gleaning features (actually deprecated in >> RFC 6830 [RFC6830]) are used, the LISP data-plane shows the=20= >> same level of security as other IP-over-IP technologies. >> =46rom a security perspective, the control-plane remains the=20= >> critical part of the LISP architecture. >> To maximally mitigate the threats on the mapping >> system, authentication must be used, whenever possible, for = all=20 >> control plane messages. >> Current specification already offer security mechanisms=20 >> ([RFC6833], [I-D.ietf-lisp-sec]) able to strongly reduce = threats=20 >> in non-trustable environments such as the Internet. =20 >> Actually, LISP specifications define a generic authentication = data field=20 >> control plane messages [RFC6830] allowing to propose a = general >> authentication mechanisms for the LISP control-plane while = staying >> backward compatible.=20 >=20 >=20 >> We hope this delivers the information you were looking for. >=20 >> ciao >=20 >> Luigi >=20 >=20 >>> On 13 Oct 2015, at 19:28, Hilarie Orman wrote: >>>=20 >>> Thanks for pointing out my mistake. I have now reviewed >>> draft-ietf-lisp-impact-04 and the same comments about security = apply. >>>=20 >>> Hilarie >>>=20 >>>> From: Damien Saucez >>>> Date: Tue, 13 Oct 2015 08:13:08 +0200 >>>=20 >>>=20 >>>> Thank you for the review. I would have a question regarding the = document you reviewed. Did you review th >>>=20 >>>> draft-sauces-lisp-impact-04 >>>=20 >>>> or=20 >>>=20 >>>> draft-ietf-lisp-impact-04 >>>=20 >>>> Thank you, >>>=20 >>>> Damien Saucez=20 >>>=20 >>>> On 13 Oct 2015, at 05:01, Hilarie Orman wrote: >>>=20 >>>>> Secdir review of LISP Impact >>>>> draft-saucez-lisp-impact-04.txt >>>>>=20 >>>>> Do not be alarmed. I have reviewed this document as part of the >>>>> security directorate's ongoing effort to review all IETF documents >>>>> being processed by the IESG. These comments were written = primarily >>>>> for the benefit of the security area directors. Document editors = and >>>>> WG chairs should treat these comments just like any other last = call >>>>> comments. >>>>>=20 >>>>> A new way of handling routing information has been defined in IETF >>>>> documents about the Locator/Identifier Separation Protocol (LISP). >>>>> The draft under discussion here elaborates on the possible >>>>> consequences of widespread use of LISP. >>>>>=20 >>>>> The draft punts on security considerations and refers to previous >>>>> documents describing threats to LISP and how LISP uses = cryptography >>>>> for protecting the integrity of its messages. >>>>>=20 >>>>> It seems to me that if the purported impact of LISP is to "scale = the >>>>> Internet", then its impact on security should be a major part of = the >>>>> equation. Will it make routing information more or less = vulnerable >>>>> malicious manipulation? How will it affect the stability of a = network >>>>> that is under constant threat of attack? >>>>>=20 >>>>> I don't feel that the draft can achieve its purpose without = addressing >>>>> security. >>>>>=20 >>>>> Hilarie >>>>>=20 >>>>> PS. I was very disappointed to realize that this was not a draft >>>>> about my favorite programming language. From nobody Thu Oct 22 07:20:46 2015 Return-Path: X-Original-To: secdir@ietfa.amsl.com Delivered-To: secdir@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id A96861ACE93 for ; Thu, 22 Oct 2015 07:20:36 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.311 X-Spam-Level: X-Spam-Status: No, score=-4.311 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 0NV4tPbVwBTX for ; Thu, 22 Oct 2015 07:20:31 -0700 (PDT) Received: from mercury.scss.tcd.ie (mercury.scss.tcd.ie [134.226.56.6]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 5263F1ACF5E for ; Thu, 22 Oct 2015 07:20:27 -0700 (PDT) Received: from localhost (localhost [127.0.0.1]) by mercury.scss.tcd.ie (Postfix) with ESMTP id 2DBC4BE35 for ; Thu, 22 Oct 2015 15:20:26 +0100 (IST) Received: from mercury.scss.tcd.ie ([127.0.0.1]) by localhost (mercury.scss.tcd.ie [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id sT_cCDfLz5aT for ; Thu, 22 Oct 2015 15:20:26 +0100 (IST) Received: from [134.226.36.93] (bilbo.dsg.cs.tcd.ie [134.226.36.93]) by mercury.scss.tcd.ie (Postfix) with ESMTPSA id 59D25BDCB for ; Thu, 22 Oct 2015 15:20:25 +0100 (IST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cs.tcd.ie; s=mail; t=1445523626; bh=z4cPanyeFxDgCnwjYPAOtEuBfPPfmr/DB3Ihmw/YGTQ=; h=To:From:Subject:Date:From; b=aw5MK6xiWtQzrH91+6xV1R5h1QiGqwcZ5ieAMicOpQHPS4UmWhFOeV6BmfBY0+sic qcmZPrDCcTvhqeoxD2anEKdA1wpnsrWMLrLdPcAidIflwIOBnNl2NCvc6RsVBFDzJ3 F0ucQsTHWauAyc7EQc8yEGPs1WIlF46w1dHbBpGM= To: "secdir@ietf.org" From: Stephen Farrell Openpgp: id=D66EA7906F0B897FB2E97D582F3C8736805F8DA2; url= Message-ID: <5628F0A9.8050400@cs.tcd.ie> Date: Thu, 22 Oct 2015 15:20:25 +0100 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:38.0) Gecko/20100101 Thunderbird/38.3.0 MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 7bit Archived-At: Subject: [secdir] delayed mail X-BeenThere: secdir@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: Security Area Directorate List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 22 Oct 2015 14:20:36 -0000 Hiya, I just noticed a bunch of messages that were in the pending queue. Usually we get mails about those, but I've not been seeing them, checking it out now. Apologies for the delay(s) S. From nobody Thu Oct 22 07:50:39 2015 Return-Path: X-Original-To: secdir@ietfa.amsl.com Delivered-To: secdir@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E8F401A0171 for ; Thu, 22 Oct 2015 07:50:37 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.2 X-Spam-Level: X-Spam-Status: No, score=-4.2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id PK0YYNr4kr-U for ; Thu, 22 Oct 2015 07:50:36 -0700 (PDT) Received: from mercury.scss.tcd.ie (mercury.scss.tcd.ie [134.226.56.6]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id A84321A00A0 for ; Thu, 22 Oct 2015 07:50:36 -0700 (PDT) Received: from localhost (localhost [127.0.0.1]) by mercury.scss.tcd.ie (Postfix) with ESMTP id 300AABE79; Thu, 22 Oct 2015 15:50:35 +0100 (IST) Received: from mercury.scss.tcd.ie ([127.0.0.1]) by localhost (mercury.scss.tcd.ie [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id m6jnRYzmyx_v; Thu, 22 Oct 2015 15:50:35 +0100 (IST) Received: from [134.226.36.93] (bilbo.dsg.cs.tcd.ie [134.226.36.93]) by mercury.scss.tcd.ie (Postfix) with ESMTPSA id E1731BE33; Thu, 22 Oct 2015 15:50:34 +0100 (IST) To: "secdir@ietf.org" From: Stephen Farrell Message-ID: <5628F7BA.9000606@tolerantnetworks.com> Date: Thu, 22 Oct 2015 15:50:34 +0100 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:38.0) Gecko/20100101 Thunderbird/38.3.0 MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 7bit Archived-At: Cc: Kathleen Moriarty Subject: [secdir] test to see if this gets held X-BeenThere: secdir@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: Security Area Directorate List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 22 Oct 2015 14:50:38 -0000 A test to see if I'm getting bounce messages. S. From nobody Thu Oct 22 08:23:24 2015 Return-Path: X-Original-To: secdir@ietfa.amsl.com Delivered-To: secdir@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id A87B01A898D; Thu, 22 Oct 2015 08:07:56 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.711 X-Spam-Level: X-Spam-Status: No, score=-2.711 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id tbUHC6GHLRQE; Thu, 22 Oct 2015 08:07:52 -0700 (PDT) Received: from prod-mail-xrelay06.akamai.com (prod-mail-xrelay06.akamai.com [96.6.114.98]) by ietfa.amsl.com (Postfix) with ESMTP id 3F8B01A887B; Thu, 22 Oct 2015 08:07:31 -0700 (PDT) Received: from prod-mail-xrelay06.akamai.com (localhost.localdomain [127.0.0.1]) by postfix.imss70 (Postfix) with ESMTP id C5C17496C30; Thu, 22 Oct 2015 15:07:30 +0000 (GMT) Received: from prod-mail-relay09.akamai.com (prod-mail-relay09.akamai.com [172.27.22.68]) by prod-mail-xrelay06.akamai.com (Postfix) with ESMTP id B0192496C21; Thu, 22 Oct 2015 15:07:30 +0000 (GMT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=akamai.com; s=a1; t=1445526450; bh=yp5IAVHnVW8VMoqGMs7DgGRKy2rbDeqJGkTbTczD2Ys=; l=1492; h=From:To:Date:From; b=YTD/2/itMG+31KSwcb+uDYTR41264Zp+Faq51Hf22zDyex9/CfpKrk9ABLXOuc8nL T9MHewGpZMSaEVyrO2vK7REV6uidkGT6Gfli5yAyV/BkZCt+yJXlHsgbqs5T4i3OSM R7NNtFw/xfaFz6dsXtU/BdEWcOF5OWz2D8B1Zjn0= Received: from email.msg.corp.akamai.com (ustx2ex-cas1.msg.corp.akamai.com [172.27.25.30]) by prod-mail-relay09.akamai.com (Postfix) with ESMTP id AE1171E08C; Thu, 22 Oct 2015 15:07:30 +0000 (GMT) Received: from USTX2EX-DAG1MB3.msg.corp.akamai.com (172.27.27.103) by ustx2ex-dag1mb1.msg.corp.akamai.com (172.27.27.101) with Microsoft SMTP Server (TLS) id 15.0.1076.9; Thu, 22 Oct 2015 10:07:30 -0500 Received: from USTX2EX-DAG1MB3.msg.corp.akamai.com ([172.27.27.103]) by ustx2ex-dag1mb3.msg.corp.akamai.com ([172.27.27.103]) with mapi id 15.00.1076.000; Thu, 22 Oct 2015 10:07:29 -0500 From: "Salz, Rich" To: "draft-ietf-ippm-checksum-trailer.all@ietf.org" , "iesg@ietf.org" , "secdir@ietf.org" Thread-Topic: secdir review of draft-ietf-ippm-checksum-trailer Thread-Index: AdEM2iPxQdxYCi6cQbaim/cdxrnsTA== Date: Thu, 22 Oct 2015 15:07:29 +0000 Message-ID: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-ms-exchange-transport-fromentityheader: Hosted x-originating-ip: [172.19.47.117] Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 Archived-At: Subject: [secdir] secdir review of draft-ietf-ippm-checksum-trailer X-BeenThere: secdir@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: Security Area Directorate List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 22 Oct 2015 15:07:56 -0000 [ My first review; please let me know if anything's wrong] I have reviewed this document as part of the security directorate's ongoing= effort to review all IETF documents being processed by the IESG. These co= mments were written primarily for the benefit of the security area director= s. Document editors and WG chairs should treat these comments just like an= y other last call comments. In my view this document is Ready with nits; suggested clarification of Fig= ure 1, below. This document a mechanism for an intermediary to use space in a padding are= a to counteract the effect of a prior intermediary adding a high-accuracy t= imestamp into a UDP packet. The technique is used elsewhere (draft-ietf-ntp= -checksum-trailer and IEEE1588) and dates back to RFC 1624 from 1994. The m= echanism is better than the current approach, which zero's out the checksum= and makes any checksum impossible. The document and its security considerations are seem thorough, discussing = the impact on encrypted packets, the general idea of an MITM modifying pack= ets, and so on. I think Figure 1 could be improved by showing how and/or where the checksum= trailer is applied inside the "enabled Node" box. Is it a separate node, = or is it all a single flow within a node before the packet is put onto the = IP Network "cloud"? Also, the art of the cloud is commendable :) -- =20 Senior Architect, Akamai Technologies IM: richsalz@jabber.at Twitter: RichSalz From nobody Thu Oct 22 08:32:26 2015 Return-Path: X-Original-To: secdir@ietfa.amsl.com Delivered-To: secdir@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 50F961A1A4B; Thu, 22 Oct 2015 08:13:55 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.909 X-Spam-Level: X-Spam-Status: No, score=-1.909 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, T_RP_MATCHES_RCVD=-0.01] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id yNDThzHYrryi; Thu, 22 Oct 2015 08:13:47 -0700 (PDT) Received: from ccs.nrl.navy.mil (mx0.ccs.nrl.navy.mil [IPv6:2001:480:20:118:118::211]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 01E031A1A38; Thu, 22 Oct 2015 08:13:46 -0700 (PDT) Received: from ashurbanipal.fw5540.net (fw5540.nrl.navy.mil [132.250.196.100]) by ccs.nrl.navy.mil (8.14.4/8.14.4) with ESMTP id t9MFDjot011615 (version=TLSv1/SSLv3 cipher=AES128-SHA bits=128 verify=NOT); Thu, 22 Oct 2015 11:13:45 -0400 From: Catherine Meadows Content-Type: multipart/alternative; boundary="Apple-Mail=_EC3BD96B-C53A-4631-BE7F-80CCC603FCCD" Date: Thu, 22 Oct 2015 11:13:44 -0400 Message-Id: To: draft-ietf-trill-rfc7180bis.all@tools.ietf.org, secdir@ietf.org, iesg@ietf.org Mime-Version: 1.0 (Mac OS X Mail 7.3 \(1878.6\)) X-Mailer: Apple Mail (2.1878.6) X-CCS-MailScanner: No viruses found. X-CCS-MailScanner-Info: See: http://www.nrl.navy.mil/ccs/support/email Archived-At: Subject: [secdir] Secdir review of draft-ietf-trill-rfc7180bis-06 X-BeenThere: secdir@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: Security Area Directorate List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 22 Oct 2015 15:13:55 -0000 --Apple-Mail=_EC3BD96B-C53A-4631-BE7F-80CCC603FCCD Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=windows-1252 I have reviewed this document as part of the security directorate's=20 ongoing effort to review all IETF documents being processed by the=20 IESG. These comments were written primarily for the benefit of the=20 security area directors. Document editors and WG chairs should treat=20 these comments just like any other last call comments. This document presents a number of clarifications, corrections and = updates to the RFCs associated with the Transparent Interconnection=20 of Lots of Links (TRILL) protocol. None of seem directly related to = security, although some of it might support security by helping to give nodes a more accurate picture of state of the network. I have a few comments about the security considerations, mainly having = to do with clarification: The Security Considerations Section reads: See [RFC6325] for general TRILL security considerations. This memo improves the documentation of the TRILL protocol, corrects five errata in [RFC6325], updates [RFC6325], [RFC7177], and [RFC7179] and obsoletes [RFC7180]. In most cases, it does not change the security considerations of those RFCs. E-L1FS FS-LSPs can be authenticated with IS-IS security [RFC5310]. I found this a little unclear. Is the sentence "E-L1FS FS-LSPs can be = authenticated with IS-IS security [RFC5310].=94 intended to be the sole modification to the security considerations of = the RFC=92s. If so, it would be helpful to make this clearer by saying something like: In most cases, it does not change the security considerations of those RFCs, except in the following case. I consider document this Ready with nits. Cathy Meadows Catherine Meadows Naval Research Laboratory Code 5543 4555 Overlook Ave., S.W. Washington DC, 20375 phone: 202-767-3490 fax: 202-404-7942 email: catherine.meadows@nrl.navy.mil --Apple-Mail=_EC3BD96B-C53A-4631-BE7F-80CCC603FCCD Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset=windows-1252
 I have reviewed this document as part of = the security directorate's 
ongoing effort to review all = IETF documents being processed by the 
IESG.  These = comments were written primarily for the benefit of = the 
security area directors.  Document editors and = WG chairs should treat 
these comments just like any = other last call comments.

This document = presents a number of clarifications, corrections  and updates to = the RFCs associated with the Transparent = Interconnection 
of Lots of Links (TRILL) protocol. =  None of seem directly related to security, although some of it = might support security by helping to
give nodes a more = accurate picture of state of the network.

I = have a few comments about the security considerations, mainly having to = do with clarification:


The = Security Considerations Section reads:

See = [RFC6325] for general TRILL security = considerations.

   This memo improves = the documentation of the TRILL protocol, corrects
  =  five errata in [RFC6325], updates [RFC6325], [RFC7177], and = [RFC7179]
   and obsoletes [RFC7180]. In most cases, = it does not change the
   security considerations of = those RFCs.

   E-L1FS FS-LSPs can be = authenticated with IS-IS security = [RFC5310].

I found this a little unclear. =  Is the sentence "E-L1FS FS-LSPs can be authenticated with IS-IS = security [RFC5310].=94
intended to be the sole modification to = the security considerations of the RFC=92s.  If so, it would be = helpful to make this clearer
by saying something = like:

In most cases, it does not change = the
   security considerations of those RFCs, except in the = following case.

I consider document this Ready = with nits.

Cathy = Meadows

Catherine Meadows
Naval = Research Laboratory
Code 5543
4555 Overlook Ave., = S.W.
Washington DC, 20375
phone: 202-767-3490
fax: = 202-404-7942
email: catherine.meadows@nrl.navy.= mil

= --Apple-Mail=_EC3BD96B-C53A-4631-BE7F-80CCC603FCCD-- From nobody Thu Oct 22 08:58:04 2015 Return-Path: X-Original-To: secdir@ietfa.amsl.com Delivered-To: secdir@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 01DEB1B388D for ; Thu, 22 Oct 2015 08:57:52 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.001 X-Spam-Level: X-Spam-Status: No, score=-2.001 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, SPF_PASS=-0.001] autolearn=unavailable Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id RobjXKdYBryB for ; Thu, 22 Oct 2015 08:57:48 -0700 (PDT) Received: from mail-yk0-x230.google.com (mail-yk0-x230.google.com [IPv6:2607:f8b0:4002:c07::230]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 92CC61B3887 for ; Thu, 22 Oct 2015 08:57:48 -0700 (PDT) Received: by yknn9 with SMTP id n9so86906643ykn.0 for ; Thu, 22 Oct 2015 08:57:47 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=sn3rd.com; s=google; h=from:content-type:content-transfer-encoding:subject:message-id:date :to:mime-version; bh=ouZ2E2DolaKnQKLcTwkN7xWz/+r5ExmyRP3gZ//h3b4=; b=h/aiwuUx35iep4iogo9NNkCRaARZt7qq3p/aZZB86LFkcYCAAntf4/apJwARhEZ9AW hUpH2tNRZRqkptQCo/MXLKbtJwkJKabnvfIhSBUaRAiMB5EYBs8VJLgoZRCyMDvD2NQC 3x63hIe1hY7Li+MwQQSOQRXWXblRgSenPM34w= X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:from:content-type:content-transfer-encoding :subject:message-id:date:to:mime-version; bh=ouZ2E2DolaKnQKLcTwkN7xWz/+r5ExmyRP3gZ//h3b4=; b=AbDl2w0iLWmFA8ogbqbANn2LPuJJUo/f5twSpJbYcf1Lv98RZbuE/pBujruNgXFhct QxoO8FSdHktJc2qyrBQjV9zd15tXzhjvmDhIZF8a5spLYJ11nmHqAb4f/gqiNoMFIIcB F00/2etfCm4IioarJGTG+fSRuKE4Zy1iXiI31byZt2FT8tEJcKPUT3Xhy1/PTN0HIKve VIU3KQZ5qp/SEvZAPfQe+Cb44THySOiVZ51XcGRTJ8EphG3PUiEpGoHFsyJg9xR31LBE 5a5snAjFeStheO3W+RQM2M08xXD0tIPabMvcy3IGhEQyV5dzMnA8GVK+mC8NDzmA6Q2y +rTg== X-Gm-Message-State: ALoCoQndJ0CI2Au4UNa3V0Ihouk/8A6wBniqsKv7kkg4IPDatjOtrBJJqpEAbrgRvVw1HQVSMH6t X-Received: by 10.129.109.215 with SMTP id i206mr6988864ywc.50.1445529467745; Thu, 22 Oct 2015 08:57:47 -0700 (PDT) Received: from [172.16.0.112] (pool-173-73-126-234.washdc.east.verizon.net. [173.73.126.234]) by smtp.gmail.com with ESMTPSA id x3sm3995338ywb.9.2015.10.22.08.57.46 (version=TLSv1 cipher=ECDHE-RSA-RC4-SHA bits=128/128); Thu, 22 Oct 2015 08:57:47 -0700 (PDT) From: Sean Turner Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable Message-Id: <70786949-BB2E-4429-A436-EB7940EEE594@sn3rd.com> Date: Thu, 22 Oct 2015 11:57:45 -0400 To: secdir@ietf.org, The IESG , draft-ietf-sidr-rfc6485bis.all@ietf.org Mime-Version: 1.0 (Mac OS X Mail 9.1 \(3096.5\)) X-Mailer: Apple Mail (2.3096.5) Archived-At: Subject: [secdir] secdir review of draft-ietf-sidr-rfc6485bis X-BeenThere: secdir@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: Security Area Directorate List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 22 Oct 2015 15:57:52 -0000 Fear not as this is just the secdir review! I have reviewed this document as part of the security directorate=E2=80=99= s ongoing effort to review all IETF documents being processed by the = IESG. These comments were written with the intent of improving security = requirements and considerations in IETF drafts. Comments not addressed = in last call may be included in AD reviews during the IESG review. = Document editors and WG chairs should treat these comments just like any = other last call comments. draft summary: This bis document specifies crypto/CMS-related = =E2=80=9Cstuff=E2=80=9D for RPKI subscribers and relying parties: = signature and hash algorithm parameters, public key formats, etc. It = doesn=E2=80=99t define new algorithms it just says use these values from = these other RFCs in this field or that field. The authors made it = really easy for reviewers in that they included a list of all of the = changes since RFC6485 in s8; thanks for that. There=E2=80=99s a few = DOWNREFs in the draft, but they are all referenced in the IETF LC and I = have no problem with the new one; two were already in the DOWNREF = registry. secdir summary: We are go for launch! (i.e., ready) nit: There=E2=80=99s a stray =E2=80=9C/>=E2=80=9D in s6, but the RFC = editor can fix that up. spt= From nobody Fri Oct 23 10:12:09 2015 Return-Path: X-Original-To: secdir@ietfa.amsl.com Delivered-To: secdir@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 5F9F71B33E5; Fri, 23 Oct 2015 02:43:43 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.55 X-Spam-Level: X-Spam-Status: No, score=-1.55 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HELO_EQ_DE=0.35] autolearn=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id xhpSvjQlXmw1; Fri, 23 Oct 2015 02:43:42 -0700 (PDT) Received: from mailhost.informatik.uni-bremen.de (mailhost.informatik.uni-bremen.de [IPv6:2001:638:708:30c9::12]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 992C31B33D8; Fri, 23 Oct 2015 02:43:41 -0700 (PDT) X-Virus-Scanned: amavisd-new at informatik.uni-bremen.de Received: from submithost.informatik.uni-bremen.de (submithost.informatik.uni-bremen.de [134.102.201.11]) by mailhost.informatik.uni-bremen.de (8.14.5/8.14.5) with ESMTP id t9N9hbcS004684; Fri, 23 Oct 2015 11:43:37 +0200 (CEST) Received: from [192.168.1.109] (pD9F6184A.dip0.t-ipconnect.de [217.246.24.74]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by submithost.informatik.uni-bremen.de (Postfix) with ESMTPSA id 3nj0xP28bSzHxlv; Fri, 23 Oct 2015 11:43:37 +0200 (CEST) To: Adam Montville , The IESG , secdir@ietf.org, draft-ietf-ace-usecases.all@tools.ietf.org References: <89DB82B6-28DB-461D-9E19-961BB883F3D5@gmail.com> From: Stefanie Gerdes Message-ID: <562A0148.7000306@tzi.de> Date: Fri, 23 Oct 2015 11:43:36 +0200 User-Agent: Mozilla/5.0 (X11; Linux i686 on x86_64; rv:38.0) Gecko/20100101 Thunderbird/38.3.0 MIME-Version: 1.0 In-Reply-To: <89DB82B6-28DB-461D-9E19-961BB883F3D5@gmail.com> Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 8bit Archived-At: X-Mailman-Approved-At: Fri, 23 Oct 2015 10:12:08 -0700 Subject: Re: [secdir] SecDir Review of draft-ietf-ace-usecases X-BeenThere: secdir@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: Security Area Directorate List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 23 Oct 2015 09:43:43 -0000 Hi Adam, Thank you for your comments. On 10/12/2015 04:02 PM, Adam Montville wrote: > > While the draft does mention “configuration”, the context is more about ensuring flexibility of expressing access permissions. I’m not sure if this draft requires something like the following, but it would be beneficial for downstream operational processes to explicitly support endpoint posture assessment. This could be done by providing an explicit posture-related interface. Such a requirement could be alluded to in the Security Considerations section. On the other hand, this may be something addressed by CoAP and other drafts. The draft focuses on listing use cases and resulting authorization problems. Therefore, all items listed in the sections 3.2, 3.3 and 3.4 derive from the problems summary sections. We tried very hard to steer clear of listing solutions for these problems while still providing useful guidance for solution developers. Thus, the draft does not provide details on where configuration data might be coming from. Therefore, we would rather not include this comment. We will fix the Nits that you pointed out. Thanks Steffi From nobody Fri Oct 23 11:14:23 2015 Return-Path: X-Original-To: secdir@ietfa.amsl.com Delivered-To: secdir@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 047ED1A6F8F for ; Fri, 23 Oct 2015 11:14:23 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.7 X-Spam-Level: X-Spam-Status: No, score=-1.7 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, MIME_8BIT_HEADER=0.3, SPF_PASS=-0.001] autolearn=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id WoIjy6BqGtCn for ; Fri, 23 Oct 2015 11:14:22 -0700 (PDT) Received: from mail-wi0-x241.google.com (mail-wi0-x241.google.com [IPv6:2a00:1450:400c:c05::241]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 085E41A6F63 for ; Fri, 23 Oct 2015 11:14:21 -0700 (PDT) Received: by wicuk10 with SMTP id uk10so6627308wic.1 for ; Fri, 23 Oct 2015 11:14:20 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:date:message-id:subject:from:to:content-type; bh=X1SUdoRYfBd8lXihatKEhIgAfSAi5ehrUl7f5tgEgRI=; b=uPxZsnhdPPDLdIDOd+/ORszLrXsr4pNXPGCZdYO83r6DOZxF1j6d+EM8kDktQ5T4m6 2mHiFQMkwNFoanbVurpiogNcc0+L0CQjMFga5FoRo6IbaItuPaZZl9AjMe5BBsa4k3mB bvnQtGH+tfS6SLax5k31RE/DfTHzxmZ5G6aH1RJYmSdfXSPJ7575+WAeNEag2dUGJakU iYtHTAmk0F/YbwnTl5N48a6kPevZrFoRjus8Y9VOhFk8p5aX4AY9DWi08TnE2D7DUXgi L8gw5fDCUcDr6/1XIZ1zWTIl2pFoirIfqt34VC+A2Zw5G331O1s2ZCem/OUMOMrpleKC RHOg== MIME-Version: 1.0 X-Received: by 10.194.192.72 with SMTP id he8mr7231026wjc.30.1445624060536; Fri, 23 Oct 2015 11:14:20 -0700 (PDT) Received: by 10.27.175.150 with HTTP; Fri, 23 Oct 2015 11:14:20 -0700 (PDT) Date: Fri, 23 Oct 2015 14:14:20 -0400 Message-ID: From: =?UTF-8?Q?Magnus_Nystr=C3=B6m?= To: "secdir@ietf.org" , draft-ietf-ippm-type-p-monitor@tools.ietf.org Content-Type: text/plain; charset=UTF-8 Archived-At: Subject: [secdir] Secdir review of draft-ietf-ippm-type-p-monitor-02 X-BeenThere: secdir@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: Security Area Directorate List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 23 Oct 2015 18:14:23 -0000 I have reviewed this document as part of the security directorate's ongoing effort to review all IETF documents being processed by the IESG. These comments were written primarily for the benefit of the security area directors. Document editors and WG chairs should treat these comments just like any other last call comments. This memo describes an optional addition to the "two-way actual measurement protocol" (TWAMP) which allows certain monitoring such as congestions. The security considerations sections seems adequate and refers to the core documents for threat models and mitigations. /M From nobody Sun Oct 25 02:16:06 2015 Return-Path: X-Original-To: secdir@ietfa.amsl.com Delivered-To: secdir@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C6B7D1B2CE5; Sun, 25 Oct 2015 02:16:01 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -0.865 X-Spam-Level: X-Spam-Status: No, score=-0.865 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_COMMENT_SAVED_URL=1.391, HTML_MESSAGE=0.001, IP_NOT_FRIENDLY=0.334, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001, T_HTML_ATTACH=0.01] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id rWOv0TyZpuWc; Sun, 25 Oct 2015 02:15:56 -0700 (PDT) Received: from mx0b-0016f401.pphosted.com (mx0b-0016f401.pphosted.com [67.231.156.173]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 4122B1B2CE3; Sun, 25 Oct 2015 02:15:56 -0700 (PDT) Received: from pps.filterd (m0045851.ppops.net [127.0.0.1]) by mx0b-0016f401.pphosted.com (8.15.0.59/8.15.0.59) with SMTP id t9P9ALPO018383; Sun, 25 Oct 2015 02:15:55 -0700 Received: from il-exch01.marvell.com ([199.203.130.101]) by mx0b-0016f401.pphosted.com with ESMTP id 1xrnhggjjm-1 (version=TLSv1/SSLv3 cipher=ECDHE-RSA-AES256-SHA bits=256 verify=NOT); Sun, 25 Oct 2015 02:15:54 -0700 Received: from IL-EXCH01.marvell.com (10.4.102.220) by IL-EXCH01.marvell.com (10.4.102.220) with Microsoft SMTP Server (TLS) id 15.0.1044.25; Sun, 25 Oct 2015 11:15:51 +0200 Received: from IL-EXCH01.marvell.com ([fe80::41:1c9f:8611:3a4a]) by IL-EXCH01.marvell.com ([fe80::41:1c9f:8611:3a4a%20]) with mapi id 15.00.1044.021; Sun, 25 Oct 2015 11:15:51 +0200 From: Tal Mizrahi To: Sean Turner , "Danny Mayer (mayer@ntp.org)" Thread-Topic: secdir review of draft-ietf-ntp-extension-field Thread-Index: AQHQ4Mm2tnjlIbJ5SUaaXh+oe720u54/TxgAgCvHAQCAETLYYA== Date: Sun, 25 Oct 2015 09:15:50 +0000 Message-ID: References: <55F9A0AA.90300@pdmconsulting.net> <1F89C814-111B-49D6-9502-EC562C060BCC@sn3rd.com> In-Reply-To: <1F89C814-111B-49D6-9502-EC562C060BCC@sn3rd.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: yes X-MS-TNEF-Correlator: x-ms-exchange-transport-fromentityheader: Hosted x-originating-ip: [10.4.102.210] Content-Type: multipart/mixed; boundary="_003_d1d55a33735347e0a025ab478346e61dILEXCH01marvellcom_" MIME-Version: 1.0 X-Proofpoint-Virus-Version: vendor=fsecure engine=2.50.10432:, , definitions=2015-10-25_09:, , signatures=0 X-Proofpoint-Spam-Details: rule=inbound_notspam policy=inbound score=0 spamscore=0 suspectscore=0 malwarescore=0 phishscore=0 adultscore=0 bulkscore=0 classifier=spam adjust=0 reason=mlx scancount=1 engine=8.0.1-1507310000 definitions=main-1510250170 Archived-At: Cc: "Brian Haberman \(brian@innovationslab.net\)" , "secdir@ietf.org" , "draft-ietf-ntp-extension-field.all@tools.ietf.org" , "Karen ODonoghue \(odonoghue@isoc.org\)" , The IESG Subject: Re: [secdir] secdir review of draft-ietf-ntp-extension-field X-BeenThere: secdir@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: Security Area Directorate List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 25 Oct 2015 09:16:02 -0000 --_003_d1d55a33735347e0a025ab478346e61dILEXCH01marvellcom_ Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable Hi Sean, Sorry for the delayed response. We have revised the draft, and we hope the current version addresses the is= sues you raised. Since we can't currently post the new version, it is attached, along with a= diff version. Please let us know if there are further comments. Thanks, Tal. >-----Original Message----- >From: Sean Turner [mailto:sean@sn3rd.com] >Sent: Wednesday, October 14, 2015 4:34 PM >To: mayer@pdmconsulting.net >Cc: draft-ietf-ntp-extension-field.all@tools.ietf.org; The IESG; secdir@ie= tf.org >Subject: Re: secdir review of draft-ietf-ntp-extension-field > >Danny, > >Sorry it's been so long to get back to you on this. Responses inline (I s= nipped >out he nits and the ones that look like we agreed on). > >spt > >On Sep 16, 2015, at 13:02, Danny Mayer wrote: > >> Sorry for the delay in responding. I've been up to my ears in problems. >> See my feedback below. >> >> Danny >> >> On 8/27/2015 9:08 AM, Sean Turner wrote: >>> Fear not as this is just the secdir review! >>> >>> I have reviewed this document as part of the security directorate's >>> ongoing effort to review all IETF documents being processed by the >>> IESG. These comments were written with the intent of improving >>> security requirements and considerations in IETF drafts. Comments not >>> addressed in last call may be included in AD reviews during the IESG >>> review. Document editors and WG chairs should treat these comments >>> just like any other last call comments. >>> >>> draft summary: This draft updates NTPv4 Protocol and Algorithm >>> Specification (aka RFC 5905) s7.5, which is the section that >>> describes extension fields, and to paraphrase the: clarify the >>> relationship between extension fields and MACs and define the >>> behavior of a host that receives an unknown extension field. Note >>> that when comparing the "OLD" section to RFC 5905, you'll should note >>> that the "OLD" text incorporates a verified errata >>> (http://www.rfc-editor.org/errata_search.php?eid=3D3627). The "NEW" >>> text requires things like when defining an extension the definition >>> must specify whether it must be MACed or not, the MTI MAC, the length >>> of the MAC, etc. >>> >>> secdir status summary: I need to clarify something in my mind, which >>> I hope fall into the "you missed that in this spec over here" or the >>> "these are *NOT* the droids you're looking for" bucket, before I can >>> say "ready with nits": >>> >>> 0) 7.5.1.1 says an extension can support multiple MACs, that the >>> extension's document defines the MTI algorithm & MAC length, and that >>> if more than one algorithm is allowed the extension includes an >>> indication of which one was actually used; all great. But, I'm >>> trying to figure out how that fits with RFC 5905: >>> >>> - In s7.3, I see "dgst (128)" in f8 >>> >>> - In s9.2, I see "There is no specific requirement for >>> authentication; however, if authentication is implemented, then the >>> MD5-keyed hash algorithm described in [RFC1321] must be supported" >>> >>> Doesn't s7.3 limit the MAC to HMAC-MD5 and the length to 128? I mean >>> if you're going to allow an extension to override s9.2 that seems >>> like something worth noting in say the abstract/intro. >> >> Now that you bring this up, I should tell you that the reference >> implementation implements MD5 and NOT HMAC_MD5 but it also >implements >> DES (not 3DES) and SHA-1! None of this is documented of course and the >> packets are inspected for which algorithm to use based on the size of >> the MAC field! Since there is no way to know from the packet whether >> there is one or more extension fields or if there is a MAC present the >> code ends up guessing which in turn limits the size that you can give >> an extension field. This all leads to the strange wording in section >> 7.5.1.3 and 7.5.1.4 in the draft and is necessary to detect the >> presence of a MAC. >> >> We probably need to update the dgest field in RFC5905 to make it clear >> that it can have multiple lengths depending on the algorithm used. On >> the other hand I would prefer to get rid of the MAC and turn it into >> an extension field, assuming that the NTS/CMS scheme is not used. The >> advantages of that is obvious especially as no guessing would be >> required and we could specify the algorithm to use and you could have >> multiple MAC extension fields that would cover different parts of the >> packet. >> >>> >>> Thinking there's got to be a reason for this I went off and looked at >>> the other NTP WG drafts ... after finding the NTS & CMS-based specs, >>> are the changes proposed in this draft to to allow an NTP packet blob >>> that doesn't use the MAC mechanism described in RFC 5905 but instead >>> use the NTS/CMS "scheme", i.e., an NTP extension that is a CMS >>> object, with no MAC in the 5905 sense - the CMS object instead of the >>> NTP MAC field gives you the authentication? >>> >>> 1) s7.5.1.2 seems to be saying if extension A specifies alg X, and >>> extension B specifies alg X and Y, and extension C specifies alg Y >>> then extension A and B can appear together as can extension B and C, >>> but A and C can't appear together? Sounds great, but what if A and >>> C do appear together what happens? >> >> I think that the draft makes it clear that you cannot have that case >> since it requires that the MAC use one algorithm. "multiple extension >> fields that require a MAC they MUST all require use of the same >> algorithm and MAC length" > >Ah that might be it MTI vs MTU. I was reading this as extension A specifi= es the >MTI (Mandatory to Implement) algorithms X, Y. What you're saying is that = the >definition says extension A MUST use algorithm X. > >>> 2) Still on 7.5.12: "If there are multiple extension fields that >>> require a MAC they MUST all require use of the same algorithm and MAC >>> length." >>> >>> So if I specify extension A with X as the MUST, and extension B with >>> X as the SHOULD and Y as the MUST, then I can't include both >>> extension A and B? Extension A requires X, but extension B requires >>> Y. >> >> That's right. > >I guess the IETF review process for extension types should provide some >sanity here, but couldn't this result in multiple versions of the same att= ribute >one for each algorithm? Extension A requires the use of alg X, Extension = A' >requires the use of alg Y, etc? (then again maybe I'm being dense this >morning) > >>> 3) s7.5.1.3: What's the 24-octet limitation based on? >>> >> >> The MAC guessing game. See the insanity above. > >Okay so it's not just me ;) > >>> Minor: >>> >>> 0) The new s7.5 says: >>> >>> The Field Type field is specific to the defined function and is not >>> elaborated here. If a .... >>> >>> 0.a) I think what you're trying to say is that the Field Type field >>> is defined in an IANA registry and it's length and value are defined >>> by the document referred to by the registry? >>> >> >> Yes. > >Might be worth unpacking that in the draft, but I'm certainly not hard ove= r on >this ;) > > The Field Type field is specific to the defined function and is not > elaborated here; the Field Type field is defined in an IANA registry > and its length and value are defined by the document referred to > by the registry. > >>> 0.b) Neither RFC5905 nor this document specify how the padding is >>> done. Is padding determined by the document referred to by the field >>> type? I.e., can I do padding with all 1s and somebody else do it >>> with all zeros? >>> >> >> It shouldn't matter. If the extension field specification needs it to >> be specific it should state that in the specification. > >ack - you define the extension and the padding just falls out. --_003_d1d55a33735347e0a025ab478346e61dILEXCH01marvellcom_ Content-Type: text/plain; name="draft-ietf-ntp-extension-field-05.txt" Content-Description: draft-ietf-ntp-extension-field-05.txt Content-Disposition: attachment; filename="draft-ietf-ntp-extension-field-05.txt"; size=14227; creation-date="Sun, 25 Oct 2015 09:08:02 GMT"; modification-date="Sun, 25 Oct 2015 09:08:02 GMT" Content-Transfer-Encoding: base64 TlRQIFdvcmtpbmcgR3JvdXAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICBULiBNaXpyYWhpDQpJbnRlcm5ldCBEcmFmdCAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgIE1hcnZlbGwNCkludGVuZGVkIHN0YXR1czogU3RhbmRh cmRzIFRyYWNrICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICBELiBNYXllcg0KVXBkYXRl czogNTkwNSAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIE5ldHdvcmsgVGltZSBG b3VuZGF0aW9uDQpFeHBpcmVzOiBBcHJpbCAyMDE2ICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgIE9jdG9iZXIgMjUsIDIwMTUNCg0KICAgICAgIFRoZSBOZXR3b3JrIFRpbWUgUHJv dG9jb2wgVmVyc2lvbiA0IChOVFB2NCkgRXh0ZW5zaW9uIEZpZWxkcw0KICAgICAgICAgICAgICAg ICAgIGRyYWZ0LWlldGYtbnRwLWV4dGVuc2lvbi1maWVsZC0wNS50eHQNCg0KDQpBYnN0cmFjdA0K DQogICBUaGUgTmV0d29yayBUaW1lIFByb3RvY29sIFZlcnNpb24gNCAoTlRQdjQpIGRlZmluZXMg dGhlIG9wdGlvbmFsDQogICB1c2FnZSBvZiBleHRlbnNpb24gZmllbGRzLiBBbiBleHRlbnNpb24g ZmllbGQsIGRlZmluZWQgaW4gUkZDNTkwNSwgaXMNCiAgIGFuIG9wdGlvbmFsIGZpZWxkIHRoYXQg cmVzaWRlcyBhdCB0aGUgZW5kIG9mIHRoZSBOVFAgaGVhZGVyLCBhbmQgY2FuDQogICBiZSB1c2Vk IHRvIGFkZCBvcHRpb25hbCBjYXBhYmlsaXRpZXMgb3IgYWRkaXRpb25hbCBpbmZvcm1hdGlvbiB0 aGF0DQogICBpcyBub3QgY29udmV5ZWQgaW4gdGhlIHN0YW5kYXJkIE5UUCBoZWFkZXIuIFRoaXMg ZG9jdW1lbnQgdXBkYXRlcw0KICAgUkZDNTkwNSBieSBjbGFyaWZ5aW5nIHNvbWUgcG9pbnRzIHJl Z2FyZGluZyBOVFAgZXh0ZW5zaW9uIGZpZWxkcyBhbmQNCiAgIHRoZWlyIHVzYWdlIHdpdGggTWVz c2FnZSBBdXRoZW50aWNhdGlvbiBDb2RlcyAoTUFDKS4NCg0KU3RhdHVzIG9mIHRoaXMgTWVtbw0K DQogICBUaGlzIEludGVybmV0LURyYWZ0IGlzIHN1Ym1pdHRlZCB0byBJRVRGIGluIGZ1bGwgY29u Zm9ybWFuY2Ugd2l0aCB0aGUNCiAgIHByb3Zpc2lvbnMgb2YgQkNQIDc4IGFuZCBCQ1AgNzkuDQoN CiAgIEludGVybmV0LURyYWZ0cyBhcmUgd29ya2luZyBkb2N1bWVudHMgb2YgdGhlIEludGVybmV0 IEVuZ2luZWVyaW5nDQogICBUYXNrIEZvcmNlIChJRVRGKSwgaXRzIGFyZWFzLCBhbmQgaXRzIHdv cmtpbmcgZ3JvdXBzLiAgTm90ZSB0aGF0DQogICBvdGhlciBncm91cHMgbWF5IGFsc28gZGlzdHJp YnV0ZSB3b3JraW5nIGRvY3VtZW50cyBhcyBJbnRlcm5ldC0NCiAgIERyYWZ0cy4NCg0KICAgSW50 ZXJuZXQtRHJhZnRzIGFyZSBkcmFmdCBkb2N1bWVudHMgdmFsaWQgZm9yIGEgbWF4aW11bSBvZiBz aXggbW9udGhzDQogICBhbmQgbWF5IGJlIHVwZGF0ZWQsIHJlcGxhY2VkLCBvciBvYnNvbGV0ZWQg Ynkgb3RoZXIgZG9jdW1lbnRzIGF0IGFueQ0KICAgdGltZS4gIEl0IGlzIGluYXBwcm9wcmlhdGUg dG8gdXNlIEludGVybmV0LURyYWZ0cyBhcyByZWZlcmVuY2UNCiAgIG1hdGVyaWFsIG9yIHRvIGNp dGUgdGhlbSBvdGhlciB0aGFuIGFzICJ3b3JrIGluIHByb2dyZXNzLiINCg0KICAgVGhlIGxpc3Qg b2YgY3VycmVudCBJbnRlcm5ldC1EcmFmdHMgY2FuIGJlIGFjY2Vzc2VkIGF0DQogICBodHRwOi8v d3d3LmlldGYub3JnL2lldGYvMWlkLWFic3RyYWN0cy50eHQuDQoNCiAgIFRoZSBsaXN0IG9mIElu dGVybmV0LURyYWZ0IFNoYWRvdyBEaXJlY3RvcmllcyBjYW4gYmUgYWNjZXNzZWQgYXQNCiAgIGh0 dHA6Ly93d3cuaWV0Zi5vcmcvc2hhZG93Lmh0bWwuDQoNCiAgIFRoaXMgSW50ZXJuZXQtRHJhZnQg d2lsbCBleHBpcmUgb24gQXByaWwgMjUsIDIwMTYuDQoNCkNvcHlyaWdodCBOb3RpY2UNCg0KICAg Q29weXJpZ2h0IChjKSAyMDE1IElFVEYgVHJ1c3QgYW5kIHRoZSBwZXJzb25zIGlkZW50aWZpZWQg YXMgdGhlDQogICBkb2N1bWVudCBhdXRob3JzLiBBbGwgcmlnaHRzIHJlc2VydmVkLg0KDQoNCg0K DQpNaXpyYWhpLCBNYXllciAgICAgICAgICBFeHBpcmVzIEFwcmlsIDI1LCAyMDE2ICAgICAgICAg ICAgICAgICBbUGFnZSAxXQ0KDA0KSW50ZXJuZXQtRHJhZnQgICAgICAgICAgIE5UUCBFeHRlbnNp b24gRmllbGQgICAgICAgICAgICAgICBPY3RvYmVyIDIwMTUNCg0KDQogICBUaGlzIGRvY3VtZW50 IGlzIHN1YmplY3QgdG8gQkNQIDc4IGFuZCB0aGUgSUVURiBUcnVzdCdzIExlZ2FsDQogICBQcm92 aXNpb25zIFJlbGF0aW5nIHRvIElFVEYgRG9jdW1lbnRzDQogICAoaHR0cDovL3RydXN0ZWUuaWV0 Zi5vcmcvbGljZW5zZS1pbmZvKSBpbiBlZmZlY3Qgb24gdGhlIGRhdGUgb2YNCiAgIHB1YmxpY2F0 aW9uIG9mIHRoaXMgZG9jdW1lbnQuIFBsZWFzZSByZXZpZXcgdGhlc2UgZG9jdW1lbnRzDQogICBj YXJlZnVsbHksIGFzIHRoZXkgZGVzY3JpYmUgeW91ciByaWdodHMgYW5kIHJlc3RyaWN0aW9ucyB3 aXRoIHJlc3BlY3QNCiAgIHRvIHRoaXMgZG9jdW1lbnQuIENvZGUgQ29tcG9uZW50cyBleHRyYWN0 ZWQgZnJvbSB0aGlzIGRvY3VtZW50IG11c3QNCiAgIGluY2x1ZGUgU2ltcGxpZmllZCBCU0QgTGlj ZW5zZSB0ZXh0IGFzIGRlc2NyaWJlZCBpbiBTZWN0aW9uIDQuZSBvZg0KICAgdGhlIFRydXN0IExl Z2FsIFByb3Zpc2lvbnMgYW5kIGFyZSBwcm92aWRlZCB3aXRob3V0IHdhcnJhbnR5IGFzDQogICBk ZXNjcmliZWQgaW4gdGhlIFNpbXBsaWZpZWQgQlNEIExpY2Vuc2UuDQoNClRhYmxlIG9mIENvbnRl bnRzDQoNCiAgIDEuIEludHJvZHVjdGlvbi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4u Li4uLi4uLi4uLi4uLi4uLi4uLjINCiAgIDIuIENvbnZlbnRpb25zIFVzZWQgaW4gdGhpcyBEb2N1 bWVudC4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLjMNCiAgICAgIDIuMS4gVGVybWlub2xv Z3kuLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLjMNCiAgICAg IDIuMi4gVGVybXMgJiBBYmJyZXZpYXRpb25zLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4u Li4uLi4uLjMNCiAgIDMuIE5UUCBFeHRlbnNpb24gRmllbGRzIC0gUkZDIDU5MDUgVXBkYXRlLi4u Li4uLi4uLi4uLi4uLi4uLi4uLi4uLjMNCiAgIDQuIFNlY3VyaXR5IENvbnNpZGVyYXRpb25zLi4u Li4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLjYNCiAgIDUuIElBTkEgQ29uc2lk ZXJhdGlvbnMuLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLjYNCiAg IDYuIEFja25vd2xlZGdtZW50cy4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4u Li4uLi4uLi4uLjcNCiAgIDcuIFJlZmVyZW5jZXMuLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4u Li4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLjcNCiAgICAgIDcuMS4gTm9ybWF0aXZlIFJlZmVyZW5j ZXMuLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLjcNCiAgICAgIDcuMi4gSW5m b3JtYXRpdmUgUmVmZXJlbmNlcy4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLjcN Cg0KMS4gSW50cm9kdWN0aW9uDQoNCiAgIFRoZSBOVFAgaGVhZGVyIGZvcm1hdCBjb25zaXN0cyBv ZiBhIHNldCBvZiBmaXhlZCBmaWVsZHMgdGhhdCBtYXkgYmUNCiAgIGZvbGxvd2VkIGJ5IHNvbWUg b3B0aW9uYWwgZmllbGRzLiBUd28gdHlwZXMgb2Ygb3B0aW9uYWwgZmllbGRzIGFyZQ0KICAgZGVm aW5lZCwgTWVzc2FnZSBBdXRoZW50aWNhdGlvbiBDb2RlcyAoTUFDKSwgYW5kIGV4dGVuc2lvbiBm aWVsZHMsIGFzDQogICBkZWZpbmVkIGluIFNlY3Rpb24gNy41IG9mIFtSRkM1OTA1XS4NCg0KICAg SWYgYSBNQUMgaXMgdXNlZCwgaXQgcmVzaWRlcyBhdCB0aGUgZW5kIG9mIHRoZSBwYWNrZXQuIFRo aXMgZmllbGQgY2FuDQogICBiZSBlaXRoZXIgMjQgb2N0ZXRzIGxvbmcsIDIwIG9jdGV0cyBsb25n LCBvciBhIDQtb2N0ZXQgY3J5cHRvLU5BSy4NCg0KICAgTlRQIGV4dGVuc2lvbiBmaWVsZHMgd2Vy ZSBkZWZpbmVkIGluIFtSRkM1OTA1XSBhcyBhIGdlbmVyaWMgbWVjaGFuaXNtDQogICB0aGF0IGFs bG93cyB0byBhZGQgZnV0dXJlIGV4dGVuc2lvbnMgYW5kIGZlYXR1cmVzIHdpdGhvdXQgbW9kaWZ5 aW5nDQogICB0aGUgTlRQIGhlYWRlciBmb3JtYXQgKFNlY3Rpb24gMTYgb2YgW1JGQzU5MDVdKS4N Cg0KICAgVGhlIG9ubHkgY3VycmVudGx5IGRlZmluZWQgZXh0ZW5zaW9uIGZpZWxkIGlzIHRoZSBv bmUgdXNlZCBieSB0aGUNCiAgIEF1dG9LZXkgcHJvdG9jb2wgW1JGQzU5MDZdLiBUaGlzIGV4dGVu c2lvbiBmaWVsZCBpcyBhbHdheXMgZm9sbG93ZWQNCiAgIGJ5IGEgTUFDLCBhbmQgU2VjdGlvbiAx MCBvZiBbUkZDNTkwNl0gc3BlY2lmaWVzIHRoZSBwYXJzaW5nIHJ1bGVzDQogICB0aGF0IGFsbG93 IGEgaG9zdCB0byBkaXN0aW5ndWlzaCBiZXR3ZWVuIGFuIGV4dGVuc2lvbiBmaWVsZCBhbmQgYQ0K ICAgTUFDLiBIb3dldmVyLCBhIE1BQyBpcyBub3QgbWFuZGF0b3J5IGFmdGVyIGFuIGV4dGVuc2lv biBmaWVsZDsgYW4NCiAgIE5UUHY0IHBhY2tldCBjYW4gaW5jbHVkZSBvbmUgb3IgbW9yZSBleHRl bnNpb24gZmllbGRzIHdpdGhvdXQNCiAgIGluY2x1ZGluZyBhIE1BQyAoU2VjdGlvbiA3LjUgb2Yg W1JGQzU5MDVdKS4NCg0KDQoNCg0KTWl6cmFoaSwgTWF5ZXIgICAgICAgICAgRXhwaXJlcyBBcHJp bCAyNSwgMjAxNiAgICAgICAgICAgICAgICAgW1BhZ2UgMl0NCgwNCkludGVybmV0LURyYWZ0ICAg ICAgICAgICBOVFAgRXh0ZW5zaW9uIEZpZWxkICAgICAgICAgICAgICAgT2N0b2JlciAyMDE1DQoN Cg0KICAgVGhpcyBkb2N1bWVudCB1cGRhdGVzIFtSRkM1OTA1XSBieSBjbGFyaWZ5aW5nIHNvbWUg cG9pbnRzIHJlZ2FyZGluZw0KICAgdGhlIHVzYWdlIG9mIGV4dGVuc2lvbiBmaWVsZHMuIFNwZWNp ZmljYWxseSwgdGhpcyBkb2N1bWVudCB1cGRhdGVzDQogICBTZWN0aW9uIDcuNSBvZiBbUkZDNTkw NV0sIGNsYXJpZnlpbmcgdGhlIHJlbGF0aW9uc2hpcCBiZXR3ZWVuDQogICBleHRlbnNpb24gZmll bGRzIGFuZCBNQUNzLCBhbmQgZGVmaW5pbmcgdGhlIGJlaGF2aW9yIG9mIGEgaG9zdCB0aGF0DQog ICByZWNlaXZlcyBhbiB1bmtub3duIGV4dGVuc2lvbiBmaWVsZC4NCg0KMi4gQ29udmVudGlvbnMg VXNlZCBpbiB0aGlzIERvY3VtZW50DQoNCjIuMS4gVGVybWlub2xvZ3kNCg0KICAgVGhlIGtleSB3 b3JkcyAiTVVTVCIsICJNVVNUIE5PVCIsICJSRVFVSVJFRCIsICJTSEFMTCIsICJTSEFMTCBOT1Qi LA0KICAgIlNIT1VMRCIsICJTSE9VTEQgTk9UIiwgIlJFQ09NTUVOREVEIiwgIk1BWSIsIGFuZCAi T1BUSU9OQUwiIGluIHRoaXMNCiAgIGRvY3VtZW50IGFyZSB0byBiZSBpbnRlcnByZXRlZCBhcyBk ZXNjcmliZWQgaW4gW0tFWVdPUkRTXS4NCg0KMi4yLiBUZXJtcyAmIEFiYnJldmlhdGlvbnMNCg0K ICAgTlRQdjQgICAgICAgIE5ldHdvcmsgVGltZSBQcm90b2NvbCBWZXJzaW9uIDQgW1JGQzU5MDVd DQoNCiAgIE1BQyAgICAgICAgICBNZXNzYWdlIEF1dGhlbnRpY2F0aW9uIENvZGUNCg0KMy4gTlRQ IEV4dGVuc2lvbiBGaWVsZHMgLSBSRkMgNTkwNSBVcGRhdGUNCg0KICAgVGhpcyBkb2N1bWVudCB1 cGRhdGVzIFNlY3Rpb24gNy41IG9mIFtSRkM1OTA1XSBhcyBmb2xsb3dzOg0KDQogICBPTEQ6DQoN CiAgIDcuNS4gTlRQIEV4dGVuc2lvbiBGaWVsZCBGb3JtYXQNCg0KICAgSW4gTlRQdjQsIG9uZSBv ciBtb3JlIGV4dGVuc2lvbiBmaWVsZHMgY2FuIGJlIGluc2VydGVkIGFmdGVyIHRoZQ0KICAgaGVh ZGVyIGFuZCBiZWZvcmUgdGhlIE1BQywgaWYgYSBNQUMgaXMgcHJlc2VudC4gSWYgYSBNQUMgaXMg bm90DQogICBwcmVzZW50LCBvbmUgb3IgbW9yZSBleHRlbnNpb24gZmllbGRzIGNhbiBiZSBpbnNl cnRlZCBhZnRlciB0aGUNCiAgIGhlYWRlciwgYWNjb3JkaW5nIHRvIHRoZSBmb2xsb3dpbmcgcnVs ZXM6DQoNCiAgIG8gIElmIHRoZSBwYWNrZXQgaW5jbHVkZXMgYSBzaW5nbGUgZXh0ZW5zaW9uIGZp ZWxkLCB0aGUgbGVuZ3RoIG9mIHRoZQ0KICAgICAgZXh0ZW5zaW9uIGZpZWxkIE1VU1QgYmUgYXQg bGVhc3QgNyB3b3JkcywgaS5lLiwgYXQgbGVhc3QgMjgNCiAgICAgIG9jdGV0cy4NCg0KICAgbyAg SWYgdGhlIHBhY2tldCBpbmNsdWRlcyBtb3JlIHRoYW4gb25lIGV4dGVuc2lvbiBmaWVsZCwgdGhl IGxlbmd0aA0KICAgICAgb2YgdGhlIGxhc3QgZXh0ZW5zaW9uIGZpZWxkIE1VU1QgYmUgYXQgbGVh c3QgMjggb2N0ZXRzLiBUaGUgbGVuZ3RoDQogICAgICBvZiB0aGUgb3RoZXIgZXh0ZW5zaW9uIGZp ZWxkcyBpbiB0aGlzIGNhc2UgTVVTVCBiZSBhdCBsZWFzdCAxNg0KICAgICAgb2N0ZXRzIGVhY2gu DQoNCiAgIE90aGVyIHRoYW4gZGVmaW5pbmcgdGhlIGZpZWxkIGZvcm1hdCwgdGhpcyBkb2N1bWVu dCBtYWtlcyBubyB1c2Ugb2YNCiAgIHRoZSBmaWVsZCBjb250ZW50cy4gIEFuIGV4dGVuc2lvbiBm aWVsZCBjb250YWlucyBhIHJlcXVlc3Qgb3INCiAgIHJlc3BvbnNlIG1lc3NhZ2UgaW4gdGhlIGZv cm1hdCBzaG93biBpbiBGaWd1cmUgMTQuDQoNCg0KDQoNCk1penJhaGksIE1heWVyICAgICAgICAg IEV4cGlyZXMgQXByaWwgMjUsIDIwMTYgICAgICAgICAgICAgICAgIFtQYWdlIDNdDQoMDQpJbnRl cm5ldC1EcmFmdCAgICAgICAgICAgTlRQIEV4dGVuc2lvbiBGaWVsZCAgICAgICAgICAgICAgIE9j dG9iZXIgMjAxNQ0KDQoNCiAgICAgICAwICAgICAgICAgICAgICAgICAgIDEgICAgICAgICAgICAg ICAgICAgMiAgICAgICAgICAgICAgICAgICAzDQogICAgICAgMCAxIDIgMyA0IDUgNiA3IDggOSAw IDEgMiAzIDQgNSA2IDcgOCA5IDAgMSAyIDMgNCA1IDYgNyA4IDkgMCAxDQogICAgICArLSstKy0r LSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSst Kw0KICAgICAgfCAgICAgICAgICBGaWVsZCBUeXBlICAgICAgICAgICB8ICAgICAgICAgICAgTGVu Z3RoICAgICAgICAgICAgIHwNCiAgICAgICstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSst Ky0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rDQogICAgICAuICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgLg0KICAgICAg LiAgICAgICAgICAgICAgICAgICAgICAgICAgICBWYWx1ZSAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgIC4NCiAgICAgIC4gICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAuDQogICAgICArLSstKy0rLSstKy0rLSstKy0rLSstKy0r LSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKw0KICAgICAgfCAgICAgICAg ICAgICAgICAgICAgICAgUGFkZGluZyAoYXMgbmVlZGVkKSAgICAgICAgICAgICAgICAgICAgIHwN CiAgICAgICstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSst Ky0rLSstKy0rLSstKy0rDQogICAgICAgICAgICAgICAgICAgICBGaWd1cmUgMTQ6IEV4dGVuc2lv biBGaWVsZCBGb3JtYXQNCg0KICAgQWxsIGV4dGVuc2lvbiBmaWVsZHMgYXJlIHplcm8tcGFkZGVk IHRvIGEgd29yZCAoZm91ciBvY3RldHMpDQogICBib3VuZGFyeS4gIFRoZSBGaWVsZCBUeXBlIGZp ZWxkIGlzIHNwZWNpZmljIHRvIHRoZSBkZWZpbmVkIGZ1bmN0aW9uDQogICBhbmQgaXMgbm90IGVs YWJvcmF0ZWQgaGVyZS4gIFdoaWxlIHRoZSBtaW5pbXVtIGZpZWxkIGxlbmd0aA0KICAgY29udGFp bmluZyByZXF1aXJlZCBmaWVsZHMgaXMgZm91ciB3b3JkcyAoMTYgb2N0ZXRzKSwgYSBtYXhpbXVt IGZpZWxkDQogICBsZW5ndGggcmVtYWlucyB0byBiZSBlc3RhYmxpc2hlZC4NCg0KICAgVGhlIExl bmd0aCBmaWVsZCBpcyBhIDE2LWJpdCB1bnNpZ25lZCBpbnRlZ2VyIHRoYXQgaW5kaWNhdGVzIHRo ZQ0KICAgbGVuZ3RoIG9mIHRoZSBlbnRpcmUgZXh0ZW5zaW9uIGZpZWxkIGluIG9jdGV0cywgaW5j bHVkaW5nIHRoZSBQYWRkaW5nDQogICBmaWVsZC4NCg0KICAgTkVXOg0KDQogICA3LjUuIE5UUCBF eHRlbnNpb24gRmllbGQgRm9ybWF0DQoNCiAgIEluIE5UUHY0LCBvbmUgb3IgbW9yZSBleHRlbnNp b24gZmllbGRzIGNhbiBiZSBpbnNlcnRlZCBhZnRlciB0aGUNCiAgIGhlYWRlciBhbmQgYmVmb3Jl IHRoZSBNQUMsIGlmIGEgTUFDIGlzIHByZXNlbnQuDQoNCiAgIE90aGVyIHRoYW4gZGVmaW5pbmcg dGhlIGZpZWxkIGZvcm1hdCwgdGhpcyBkb2N1bWVudCBtYWtlcyBubyB1c2Ugb2YNCiAgIHRoZSBm aWVsZCBjb250ZW50cy4gIEFuIGV4dGVuc2lvbiBmaWVsZCBjb250YWlucyBhIHJlcXVlc3Qgb3IN CiAgIHJlc3BvbnNlIG1lc3NhZ2UgaW4gdGhlIGZvcm1hdCBzaG93biBpbiBGaWd1cmUgMTQuDQoN Cg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0KTWl6cmFoaSwgTWF5ZXIgICAgICAgICAgRXhwaXJl cyBBcHJpbCAyNSwgMjAxNiAgICAgICAgICAgICAgICAgW1BhZ2UgNF0NCgwNCkludGVybmV0LURy YWZ0ICAgICAgICAgICBOVFAgRXh0ZW5zaW9uIEZpZWxkICAgICAgICAgICAgICAgT2N0b2JlciAy MDE1DQoNCg0KICAgICAgIDAgICAgICAgICAgICAgICAgICAgMSAgICAgICAgICAgICAgICAgICAy ICAgICAgICAgICAgICAgICAgIDMNCiAgICAgICAwIDEgMiAzIDQgNSA2IDcgOCA5IDAgMSAyIDMg NCA1IDYgNyA4IDkgMCAxIDIgMyA0IDUgNiA3IDggOSAwIDENCiAgICAgICstKy0rLSstKy0rLSst Ky0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rDQogICAg ICB8ICAgICAgICAgIEZpZWxkIFR5cGUgICAgICAgICAgIHwgICAgICAgICAgICBMZW5ndGggICAg ICAgICAgICAgfA0KICAgICAgKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0r LSstKy0rLSstKy0rLSstKy0rLSstKy0rLSsNCiAgICAgIC4gICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAuDQogICAgICAuICAgICAg ICAgICAgICAgICAgICAgICAgICAgIFZhbHVlICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg Lg0KICAgICAgLiAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgIC4NCiAgICAgICstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSst Ky0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rDQogICAgICB8ICAgICAgICAgICAgICAg ICAgICAgICBQYWRkaW5nIChhcyBuZWVkZWQpICAgICAgICAgICAgICAgICAgICAgfA0KICAgICAg Ky0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0r LSstKy0rLSsNCiAgICAgICAgICAgICAgICAgICAgIEZpZ3VyZSAxNDogRXh0ZW5zaW9uIEZpZWxk IEZvcm1hdA0KDQogICBBbGwgZXh0ZW5zaW9uIGZpZWxkcyBhcmUgemVyby1wYWRkZWQgdG8gYSB3 b3JkIChmb3VyIG9jdGV0cykNCiAgIGJvdW5kYXJ5Lg0KDQogICBUaGUgRmllbGQgVHlwZSwgVmFs dWUsIGFuZCBQYWRkaW5nIGZpZWxkcyBhcmUgc3BlY2lmaWMgdG8gdGhlIGRlZmluZWQNCiAgIGZ1 bmN0aW9uIGFuZCBhcmUgbm90IGVsYWJvcmF0ZWQgaGVyZTsgdGhlIEZpZWxkIFR5cGUgdmFsdWUg aXMgZGVmaW5lZA0KICAgaW4gYW4gSUFOQSByZWdpc3RyeSBhbmQgaXRzIExlbmd0aCwgVmFsdWUg YW5kIFBhZGRpbmcgYXJlIGRlZmluZWQgYnkNCiAgIHRoZSBkb2N1bWVudCByZWZlcnJlZCB0byBi eSB0aGUgcmVnaXN0cnkuIElmIGEgaG9zdCByZWNlaXZlcyBhbg0KICAgZXh0ZW5zaW9uIGZpZWxk IHdpdGggYW4gdW5rbm93biBGaWVsZCBUeXBlLCB0aGUgaG9zdCBTSE9VTEQgaWdub3JlDQogICB0 aGUgZXh0ZW5zaW9uIGZpZWxkIGFuZCBNQVkgZHJvcCB0aGUgcGFja2V0IGFsdG9nZXRoZXIgaWYg cG9saWN5DQogICByZXF1aXJlcyBpdC4NCg0KICAgV2hpbGUgdGhlIG1pbmltdW0gZmllbGQgbGVu Z3RoIGNvbnRhaW5pbmcgcmVxdWlyZWQgZmllbGRzIGlzIGZvdXINCiAgIHdvcmRzICgxNiBvY3Rl dHMpLCB0aGUgbWF4aW11bSBmaWVsZCBsZW5ndGggY2Fubm90IGJlIGxvbmdlciB0aGFuDQogICA2 NTUzMiBvY3RldHMgZHVlIHRvIHRoZSBtYXhpbXVtIHNpemUgb2YgdGhlIGxlbmd0aCBmaWVsZC4N Cg0KICAgVGhlIExlbmd0aCBmaWVsZCBpcyBhIDE2LWJpdCB1bnNpZ25lZCBpbnRlZ2VyIHRoYXQg aW5kaWNhdGVzIHRoZQ0KICAgbGVuZ3RoIG9mIHRoZSBlbnRpcmUgZXh0ZW5zaW9uIGZpZWxkIGlu IG9jdGV0cywgaW5jbHVkaW5nIHRoZSBQYWRkaW5nDQogICBmaWVsZC4NCg0KICAgNy41LjEgRXh0 ZW5zaW9uIEZpZWxkcyBhbmQgTUFDcw0KDQogICA3LjUuMS4xIEV4dGVuc2lvbiBGaWVsZHMgaW4g dGhlIFByZXNlbmNlIG9mIGEgTUFDDQoNCiAgIEFuIGV4dGVuc2lvbiBmaWVsZCBjYW4gYmUgdXNl ZCBpbiBhbiBOVFAgcGFja2V0IHRoYXQgaW5jbHVkZXMgYSBNQUMsDQogICBmb3IgZXhhbXBsZSwg YXMgZGVmaW5lZCBpbiBbUkZDNTkwNl0uIEEgc3BlY2lmaWNhdGlvbiB0aGF0IGRlZmluZXMgYQ0K ICAgbmV3IGV4dGVuc2lvbiBmaWVsZCBNVVNUIHNwZWNpZnkgd2hldGhlciB0aGUgZXh0ZW5zaW9u IGZpZWxkIHJlcXVpcmVzDQogICBhIE1BQyBvciBub3QuIElmIHRoZSBleHRlbnNpb24gZmllbGQg cmVxdWlyZXMgYSBNQUMsIHRoZSBleHRlbnNpb24NCiAgIGZpZWxkIHNwZWNpZmljYXRpb24gTVVT VCBkZWZpbmUgdGhlIGFsZ29yaXRobSB0byBiZSB1c2VkIHRvIGNyZWF0ZQ0KICAgdGhlIE1BQyBh bmQgdGhlIGxlbmd0aCBvZiB0aGUgTUFDIHRodXMgY3JlYXRlZC4gQW4gZXh0ZW5zaW9uIGZpZWxk DQogICBNQVkgYWxsb3cgZm9yIG1vcmUgdGhhbiBvbmUgYWxnb3JpdGhtIHRvIGJlIHVzZWQgaW4g d2hpY2ggY2FzZSB0aGUNCiAgIGluZm9ybWF0aW9uIGFib3V0IHdoaWNoIG9uZSB3YXMgdXNlZCBN VVNUIGJlIGluY2x1ZGVkIGluIHRoZQ0KICAgZXh0ZW5zaW9uIGZpZWxkIGl0c2VsZi4NCg0KDQpN aXpyYWhpLCBNYXllciAgICAgICAgICBFeHBpcmVzIEFwcmlsIDI1LCAyMDE2ICAgICAgICAgICAg ICAgICBbUGFnZSA1XQ0KDA0KSW50ZXJuZXQtRHJhZnQgICAgICAgICAgIE5UUCBFeHRlbnNpb24g RmllbGQgICAgICAgICAgICAgICBPY3RvYmVyIDIwMTUNCg0KDQogICA3LjUuMS4yIE11bHRpcGxl IEV4dGVuc2lvbiBGaWVsZHMgd2l0aCBhIE1BQw0KDQogICBJZiB0aGVyZSBhcmUgbXVsdGlwbGUg ZXh0ZW5zaW9uIGZpZWxkcyB0aGF0IHJlcXVpcmUgYSBNQUMgdGhleSBNVVNUDQogICBhbGwgcmVx dWlyZSB1c2Ugb2YgdGhlIHNhbWUgYWxnb3JpdGhtIGFuZCBNQUMgbGVuZ3RoLiBFeHRlbnNpb24N CiAgIGZpZWxkcyB0aGF0IGRvIG5vdCByZXF1aXJlIGEgTUFDIGNhbiBiZSBpbmNsdWRlZCB3aXRo IGV4dGVuc2lvbg0KICAgZmllbGRzIHRoYXQgZG8gcmVxdWlyZSBhIE1BQy4NCg0KICAgSWYgYW4g TlRQIHBhY2tldCBpcyByZWNlaXZlZCB3aXRoIHR3byBvciBtb3JlIGV4dGVuc2lvbiBmaWVsZHMg dGhhdA0KICAgcmVxdWlyZSBhIE1BQyB3aXRoIGRpZmZlcmVudCBhbGdvcml0aG1zLCB0aGUgcGFj a2V0IE1VU1QgYmUNCiAgIGRpc2NhcmRlZC4NCg0KICAgNy41LjEuMyBNQUMgaW4gdGhlIGFic2Vu Y2Ugb2YgYW4gRXh0ZW5zaW9uIGZpZWxkDQoNCiAgIEEgTUFDIE1VU1QgTk9UIGJlIGxvbmdlciB0 aGFuIDI0IG9jdGV0cyBpZiB0aGVyZSBpcyBubyBleHRlbnNpb24NCiAgIGZpZWxkIHByZXNlbnQg dW5sZXNzIHRocm91Z2ggYSBwcmV2aW91cyBleGNoYW5nZSBvZiBwYWNrZXRzIHdpdGggYW4NCiAg IGV4dGVuc2lvbiBmaWVsZCB3aGljaCBkZWZpbmVzIHRoZSBzaXplIGFuZCBhbGdvcml0aG0gb2Yg dGhlIE1BQw0KICAgdHJhbnNtaXR0ZWQgaW4gdGhlIHBhY2tldCBhbmQgaXMgYWdyZWVkIHVwb24g YnkgYm90aCBjbGllbnQgYW5kDQogICBzZXJ2ZXIuDQoNCiAgIDcuNS4xLjQgRXh0ZW5zaW9uIEZp ZWxkcyBpbiB0aGUgQWJzZW5jZSBvZiBhIE1BQw0KDQogICBJZiBhIE1BQyBpcyBub3QgcHJlc2Vu dCwgb25lIG9yIG1vcmUgZXh0ZW5zaW9uIGZpZWxkcyBjYW4gYmUgaW5zZXJ0ZWQNCiAgIGFmdGVy IHRoZSBoZWFkZXIsIGFjY29yZGluZyB0byB0aGUgZm9sbG93aW5nIHJ1bGVzOg0KDQogICBvICBJ ZiB0aGUgcGFja2V0IGluY2x1ZGVzIGEgc2luZ2xlIGV4dGVuc2lvbiBmaWVsZCwgdGhlIGxlbmd0 aCBvZiB0aGUNCiAgICAgIGV4dGVuc2lvbiBmaWVsZCBNVVNUIGJlIGF0IGxlYXN0IDcgd29yZHMs IGkuZS4sIGF0IGxlYXN0IDI4DQogICAgICBvY3RldHMuDQoNCiAgIG8gIElmIHRoZSBwYWNrZXQg aW5jbHVkZXMgbW9yZSB0aGFuIG9uZSBleHRlbnNpb24gZmllbGQsIHRoZSBsZW5ndGgNCiAgICAg IG9mIHRoZSBsYXN0IGV4dGVuc2lvbiBmaWVsZCBNVVNUIGJlIGF0IGxlYXN0IDI4IG9jdGV0cy4g VGhlIGxlbmd0aA0KICAgICAgb2YgdGhlIG90aGVyIGV4dGVuc2lvbiBmaWVsZHMgaW4gdGhpcyBj YXNlIE1VU1QgYmUgYXQgbGVhc3QgMTYNCiAgICAgIG9jdGV0cyBlYWNoLg0KDQo0LiBTZWN1cml0 eSBDb25zaWRlcmF0aW9ucw0KDQogICBUaGUgc2VjdXJpdHkgY29uc2lkZXJhdGlvbnMgb2YgdGhl IG5ldHdvcmsgdGltZSBwcm90b2NvbCBhcmUNCiAgIGRpc2N1c3NlZCBpbiBbUkZDNTkwNV0uIFRo aXMgZG9jdW1lbnQgY2xhcmlmaWVzIHNvbWUgYW1iaWd1aXR5IHdpdGgNCiAgIHJlZ2FyZHMgdG8g dGhlIHVzYWdlIG9mIHRoZSBOVFAgZXh0ZW5zaW9uIGZpZWxkLCBhbmQgdGh1cyB0aGUNCiAgIGJl aGF2aW9yIGRlc2NyaWJlZCBpbiB0aGlzIGRvY3VtZW50IGRvZXMgbm90IGludHJvZHVjZSBuZXcg c2VjdXJpdHkNCiAgIGNvbnNpZGVyYXRpb25zLg0KDQo1LiBJQU5BIENvbnNpZGVyYXRpb25zDQoN CiAgIFRoZXJlIGFyZSBubyBuZXcgSUFOQSBjb25zaWRlcmF0aW9ucyBpbXBsaWVkIGJ5IHRoaXMg ZG9jdW1lbnQuDQoNCg0KDQoNCg0KTWl6cmFoaSwgTWF5ZXIgICAgICAgICAgRXhwaXJlcyBBcHJp bCAyNSwgMjAxNiAgICAgICAgICAgICAgICAgW1BhZ2UgNl0NCgwNCkludGVybmV0LURyYWZ0ICAg ICAgICAgICBOVFAgRXh0ZW5zaW9uIEZpZWxkICAgICAgICAgICAgICAgT2N0b2JlciAyMDE1DQoN Cg0KNi4gQWNrbm93bGVkZ21lbnRzDQoNCiAgIFRoZSBhdXRob3JzIHRoYW5rIERhdmUgTWlsbHMg Zm9yIGhpcyBpbnNpZ2h0ZnVsIGNvbW1lbnRzLg0KDQogICBUaGlzIGRvY3VtZW50IHdhcyBwcmVw YXJlZCB1c2luZyAyLVdvcmQtdjIuMC50ZW1wbGF0ZS5kb3QuDQoNCjcuIFJlZmVyZW5jZXMNCg0K Ny4xLiBOb3JtYXRpdmUgUmVmZXJlbmNlcw0KDQogICBbS0VZV09SRFNdICAgIEJyYWRuZXIsIFMu LCAiS2V5IHdvcmRzIGZvciB1c2UgaW4gUkZDcyB0byBJbmRpY2F0ZQ0KICAgICAgICAgICAgICAg ICBSZXF1aXJlbWVudCBMZXZlbHMiLCBCQ1AgMTQsIFJGQyAyMTE5LCBNYXJjaCAxOTk3Lg0KDQog ICBbUkZDNTkwNV0gICAgIE1pbGxzLCBELiwgTWFydGluLCBKLiwgQnVyYmFuaywgSi4sIEthc2No LCBXLiwNCiAgICAgICAgICAgICAgICAgIk5ldHdvcmsgVGltZSBQcm90b2NvbCBWZXJzaW9uIDQ6 IFByb3RvY29sIGFuZA0KICAgICAgICAgICAgICAgICBBbGdvcml0aG1zIFNwZWNpZmljYXRpb24i LCBSRkMgNTkwNSwgSnVuZSAyMDEwLg0KDQo3LjIuIEluZm9ybWF0aXZlIFJlZmVyZW5jZXMNCg0K ICAgW1JGQzU5MDZdICAgICBIYWJlcm1hbiwgQi4sIE1pbGxzLCBELiwgIk5ldHdvcmsgVGltZSBQ cm90b2NvbA0KICAgICAgICAgICAgICAgICBWZXJzaW9uIDQ6IEF1dG9rZXkgU3BlY2lmaWNhdGlv biIsIFJGQyA1OTA2LCBKdW5lDQogICAgICAgICAgICAgICAgIDIwMTAuDQoNCkF1dGhvcnMnIEFk ZHJlc3Nlcw0KDQogICBUYWwgTWl6cmFoaQ0KICAgTWFydmVsbA0KICAgNiBIYW1hZGEgU3QuDQog ICBZb2tuZWFtLCAyMDY5MiBJc3JhZWwNCg0KICAgRW1haWw6IHRhbG1pQG1hcnZlbGwuY29tDQoN Cg0KDQogICBEYW5ueSBNYXllcg0KICAgTmV0d29yayBUaW1lIEZvdW5kYXRpb24NCiAgIFBPIEJv eCA5MTgNCiAgIFRhbGVudCBPUiA5NzU0MA0KDQogICBFbWFpbDogbWF5ZXJAbnRwLm9yZw0KDQoN Cg0KDQoNCg0KDQoNCg0KTWl6cmFoaSwgTWF5ZXIgICAgICAgICAgRXhwaXJlcyBBcHJpbCAyNSwg MjAxNiAgICAgICAgICAgICAgICAgW1BhZ2UgN10NCgwNCg== --_003_d1d55a33735347e0a025ab478346e61dILEXCH01marvellcom_ Content-Type: text/html; name="wdiff draft-ietf-ntp-extension-field-04.txt draft-ietf-ntp-extension-field-05.txt.html" Content-Description: wdiff draft-ietf-ntp-extension-field-04.txt draft-ietf-ntp-extension-field-05.txt.html Content-Disposition: attachment; filename="wdiff draft-ietf-ntp-extension-field-04.txt draft-ietf-ntp-extension-field-05.txt.html"; size=14662; creation-date="Sun, 25 Oct 2015 09:10:17 GMT"; modification-date="Sun, 25 Oct 2015 09:10:17 GMT" Content-Transfer-Encoding: base64 CjwhLS0gc2F2ZWQgZnJvbSB1cmw9KDAwMzApaHR0cHM6Ly90b29scy5pZXRmLm9yZy9yZmNkaWZm IC0tPgo8aHRtbD48aGVhZD48bWV0YSBodHRwLWVxdWl2PSJDb250ZW50LVR5cGUiIGNvbnRlbnQ9 InRleHQvaHRtbDsgY2hhcnNldD1VVEYtOCI+PC9oZWFkPjxib2R5PkNvbnRlbnQtVHlwZTogdGV4 dC9odG1sCgoKPHRpdGxlPndkaWZmIGRyYWZ0LWlldGYtbnRwLWV4dGVuc2lvbi1maWVsZC0wNC50 eHQgZHJhZnQtaWV0Zi1udHAtZXh0ZW5zaW9uLWZpZWxkLTA1LnR4dDwvdGl0bGU+CjxwcmU+TlRQ IFdvcmtpbmcgR3JvdXAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICBULiBNaXpyYWhpCkludGVybmV0IERyYWZ0ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgTWFydmVsbApJbnRlbmRlZCBzdGF0dXM6IFN0YW5kYXJkcyBU cmFjayAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgRC4gTWF5ZXIKVXBkYXRlczogNTkw NSAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIE5ldHdvcmsgVGltZSBGb3VuZGF0 aW9uCkV4cGlyZXM6IDxzdHJpa2U+PGZvbnQgY29sb3I9InJlZCI+RmVicnVhcnk8L2ZvbnQ+PC9z dHJpa2U+IDxzdHJvbmc+PGZvbnQgY29sb3I9ImdyZWVuIj5BcHJpbDwvZm9udD48L3N0cm9uZz4g MjAxNiAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgPHN0cmlrZT48Zm9udCBjb2xv cj0icmVkIj5BdWd1c3QgMTYsPC9mb250Pjwvc3RyaWtlPiAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICA8c3Ryb25nPjxmb250IGNvbG9yPSJncmVlbiI+T2N0b2JlciAyNSw8L2Zv bnQ+PC9zdHJvbmc+IDIwMTUKCiAgICAgICBUaGUgTmV0d29yayBUaW1lIFByb3RvY29sIFZlcnNp b24gNCAoTlRQdjQpIEV4dGVuc2lvbiBGaWVsZHMKICAgICAgICAgICAgICAgICAgIDxzdHJpa2U+ PGZvbnQgY29sb3I9InJlZCI+ZHJhZnQtaWV0Zi1udHAtZXh0ZW5zaW9uLWZpZWxkLTA0LnR4dDwv Zm9udD48L3N0cmlrZT4KICAgICAgICAgICAgICAgICAgIDxzdHJvbmc+PGZvbnQgY29sb3I9Imdy ZWVuIj5kcmFmdC1pZXRmLW50cC1leHRlbnNpb24tZmllbGQtMDUudHh0PC9mb250Pjwvc3Ryb25n PgoKQWJzdHJhY3QKCiAgIFRoZSBOZXR3b3JrIFRpbWUgUHJvdG9jb2wgVmVyc2lvbiA0IChOVFB2 NCkgZGVmaW5lcyB0aGUgb3B0aW9uYWwKICAgdXNhZ2Ugb2YgZXh0ZW5zaW9uIGZpZWxkcy4gQW4g ZXh0ZW5zaW9uIGZpZWxkLCBkZWZpbmVkIGluIFJGQzU5MDUsIGlzCiAgIGFuIG9wdGlvbmFsIGZp ZWxkIHRoYXQgcmVzaWRlcyBhdCB0aGUgZW5kIG9mIHRoZSBOVFAgaGVhZGVyLCBhbmQgY2FuCiAg IGJlIHVzZWQgdG8gYWRkIG9wdGlvbmFsIGNhcGFiaWxpdGllcyBvciBhZGRpdGlvbmFsIGluZm9y bWF0aW9uIHRoYXQKICAgaXMgbm90IGNvbnZleWVkIGluIHRoZSBzdGFuZGFyZCBOVFAgaGVhZGVy LiBUaGlzIGRvY3VtZW50IHVwZGF0ZXMKICAgUkZDNTkwNSBieSBjbGFyaWZ5aW5nIHNvbWUgcG9p bnRzIHJlZ2FyZGluZyBOVFAgZXh0ZW5zaW9uIGZpZWxkcyBhbmQKICAgdGhlaXIgdXNhZ2Ugd2l0 aCBNZXNzYWdlIEF1dGhlbnRpY2F0aW9uIENvZGVzIChNQUMpLgoKU3RhdHVzIG9mIHRoaXMgTWVt bwoKICAgVGhpcyBJbnRlcm5ldC1EcmFmdCBpcyBzdWJtaXR0ZWQgdG8gSUVURiBpbiBmdWxsIGNv bmZvcm1hbmNlIHdpdGggdGhlCiAgIHByb3Zpc2lvbnMgb2YgQkNQIDc4IGFuZCBCQ1AgNzkuCgog ICBJbnRlcm5ldC1EcmFmdHMgYXJlIHdvcmtpbmcgZG9jdW1lbnRzIG9mIHRoZSBJbnRlcm5ldCBF bmdpbmVlcmluZwogICBUYXNrIEZvcmNlIChJRVRGKSwgaXRzIGFyZWFzLCBhbmQgaXRzIHdvcmtp bmcgZ3JvdXBzLiAgTm90ZSB0aGF0CiAgIG90aGVyIGdyb3VwcyBtYXkgYWxzbyBkaXN0cmlidXRl IHdvcmtpbmcgZG9jdW1lbnRzIGFzIEludGVybmV0LQogICBEcmFmdHMuCgogICBJbnRlcm5ldC1E cmFmdHMgYXJlIGRyYWZ0IGRvY3VtZW50cyB2YWxpZCBmb3IgYSBtYXhpbXVtIG9mIHNpeCBtb250 aHMKICAgYW5kIG1heSBiZSB1cGRhdGVkLCByZXBsYWNlZCwgb3Igb2Jzb2xldGVkIGJ5IG90aGVy IGRvY3VtZW50cyBhdCBhbnkKICAgdGltZS4gIEl0IGlzIGluYXBwcm9wcmlhdGUgdG8gdXNlIElu dGVybmV0LURyYWZ0cyBhcyByZWZlcmVuY2UKICAgbWF0ZXJpYWwgb3IgdG8gY2l0ZSB0aGVtIG90 aGVyIHRoYW4gYXMgIndvcmsgaW4gcHJvZ3Jlc3MuIgoKICAgVGhlIGxpc3Qgb2YgY3VycmVudCBJ bnRlcm5ldC1EcmFmdHMgY2FuIGJlIGFjY2Vzc2VkIGF0CiAgIGh0dHA6Ly93d3cuaWV0Zi5vcmcv aWV0Zi8xaWQtYWJzdHJhY3RzLnR4dC4KCiAgIFRoZSBsaXN0IG9mIEludGVybmV0LURyYWZ0IFNo YWRvdyBEaXJlY3RvcmllcyBjYW4gYmUgYWNjZXNzZWQgYXQKICAgaHR0cDovL3d3dy5pZXRmLm9y Zy9zaGFkb3cuaHRtbC4KCiAgIFRoaXMgSW50ZXJuZXQtRHJhZnQgd2lsbCBleHBpcmUgb24gPHN0 cmlrZT48Zm9udCBjb2xvcj0icmVkIj5GZWJydWFyeSAxNiw8L2ZvbnQ+PC9zdHJpa2U+IDxzdHJv bmc+PGZvbnQgY29sb3I9ImdyZWVuIj5BcHJpbCAyNSw8L2ZvbnQ+PC9zdHJvbmc+IDIwMTYuCgpD b3B5cmlnaHQgTm90aWNlCgogICBDb3B5cmlnaHQgKGMpIDIwMTUgSUVURiBUcnVzdCBhbmQgdGhl IHBlcnNvbnMgaWRlbnRpZmllZCBhcyB0aGUKICAgZG9jdW1lbnQgYXV0aG9ycy4gQWxsIHJpZ2h0 cyByZXNlcnZlZC4KCiAgIFRoaXMgZG9jdW1lbnQgaXMgc3ViamVjdCB0byBCQ1AgNzggYW5kIHRo ZSBJRVRGIFRydXN0J3MgTGVnYWwKICAgUHJvdmlzaW9ucyBSZWxhdGluZyB0byBJRVRGIERvY3Vt ZW50cwogICAoaHR0cDovL3RydXN0ZWUuaWV0Zi5vcmcvbGljZW5zZS1pbmZvKSBpbiBlZmZlY3Qg b24gdGhlIGRhdGUgb2YKICAgcHVibGljYXRpb24gb2YgdGhpcyBkb2N1bWVudC4gUGxlYXNlIHJl dmlldyB0aGVzZSBkb2N1bWVudHMKICAgY2FyZWZ1bGx5LCBhcyB0aGV5IGRlc2NyaWJlIHlvdXIg cmlnaHRzIGFuZCByZXN0cmljdGlvbnMgd2l0aCByZXNwZWN0CiAgIHRvIHRoaXMgZG9jdW1lbnQu IENvZGUgQ29tcG9uZW50cyBleHRyYWN0ZWQgZnJvbSB0aGlzIGRvY3VtZW50IG11c3QKICAgaW5j bHVkZSBTaW1wbGlmaWVkIEJTRCBMaWNlbnNlIHRleHQgYXMgZGVzY3JpYmVkIGluIFNlY3Rpb24g NC5lIG9mCiAgIHRoZSBUcnVzdCBMZWdhbCBQcm92aXNpb25zIGFuZCBhcmUgcHJvdmlkZWQgd2l0 aG91dCB3YXJyYW50eSBhcwogICBkZXNjcmliZWQgaW4gdGhlIFNpbXBsaWZpZWQgQlNEIExpY2Vu c2UuCgpUYWJsZSBvZiBDb250ZW50cwoKICAgMS4gSW50cm9kdWN0aW9uLi4uLi4uLi4uLi4uLi4u Li4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uMgogICAyLiBDb252ZW50aW9ucyBV c2VkIGluIHRoaXMgRG9jdW1lbnQuLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4zCiAgICAg IDIuMS4gVGVybWlub2xvZ3kuLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4u Li4uLi4uLjMKICAgICAgMi4yLiBUZXJtcyAmYW1wOyBBYmJyZXZpYXRpb25zLi4uLi4uLi4uLi4u Li4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLjMKICAgMy4gTlRQIEV4dGVuc2lvbiBGaWVsZHMgLSBS RkMgNTkwNSBVcGRhdGUuLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uMwogICA0LiBTZWN1cml0eSBD b25zaWRlcmF0aW9ucy4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi42CiAg IDUuIElBTkEgQ29uc2lkZXJhdGlvbnMuLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4u Li4uLi4uLi4uLjYKICAgNi4gPHN0cmlrZT48Zm9udCBjb2xvcj0icmVkIj5BY2tub3dsZWRnbWVu dHMuLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi42PC9mb250 Pjwvc3RyaWtlPiA8c3Ryb25nPjxmb250IGNvbG9yPSJncmVlbiI+QWNrbm93bGVkZ21lbnRzLi4u Li4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uNzwvZm9udD48L3N0 cm9uZz4KICAgNy4gUmVmZXJlbmNlcy4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4u Li4uLi4uLi4uLi4uLi4uLi4uNwogICAgICA3LjEuIE5vcm1hdGl2ZSBSZWZlcmVuY2VzLi4uLi4u Li4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi43CiAgICAgIDcuMi4gSW5mb3JtYXRpdmUg UmVmZXJlbmNlcy4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLjcKCjEuIEludHJv ZHVjdGlvbgoKICAgVGhlIE5UUCBoZWFkZXIgZm9ybWF0IGNvbnNpc3RzIG9mIGEgc2V0IG9mIGZp eGVkIGZpZWxkcyB0aGF0IG1heSBiZQogICBmb2xsb3dlZCBieSBzb21lIG9wdGlvbmFsIGZpZWxk cy4gVHdvIHR5cGVzIG9mIG9wdGlvbmFsIGZpZWxkcyBhcmUKICAgZGVmaW5lZCwgTWVzc2FnZSBB dXRoZW50aWNhdGlvbiBDb2RlcyAoTUFDKSwgYW5kIGV4dGVuc2lvbiBmaWVsZHMsIGFzCiAgIGRl ZmluZWQgaW4gU2VjdGlvbiA3LjUgb2YgW1JGQzU5MDVdLgoKICAgSWYgYSBNQUMgaXMgdXNlZCwg aXQgcmVzaWRlcyBhdCB0aGUgZW5kIG9mIHRoZSBwYWNrZXQuIFRoaXMgZmllbGQgY2FuCiAgIGJl IGVpdGhlciAyNCBvY3RldHMgbG9uZywgMjAgb2N0ZXRzIGxvbmcsIG9yIGEgNC1vY3RldCBjcnlw dG8tTkFLLgoKICAgTlRQIGV4dGVuc2lvbiBmaWVsZHMgd2VyZSBkZWZpbmVkIGluIFtSRkM1OTA1 XSBhcyBhIGdlbmVyaWMgbWVjaGFuaXNtCiAgIHRoYXQgYWxsb3dzIHRvIGFkZCBmdXR1cmUgZXh0 ZW5zaW9ucyBhbmQgZmVhdHVyZXMgd2l0aG91dCBtb2RpZnlpbmcKICAgdGhlIE5UUCBoZWFkZXIg Zm9ybWF0IChTZWN0aW9uIDE2IG9mIFtSRkM1OTA1XSkuCgogICBUaGUgb25seSBjdXJyZW50bHkg ZGVmaW5lZCBleHRlbnNpb24gZmllbGQgaXMgdGhlIG9uZSB1c2VkIGJ5IHRoZQogICBBdXRvS2V5 IHByb3RvY29sIFtSRkM1OTA2XS4gVGhpcyBleHRlbnNpb24gZmllbGQgaXMgYWx3YXlzIGZvbGxv d2VkCiAgIGJ5IGEgTUFDLCBhbmQgU2VjdGlvbiAxMCBvZiBbUkZDNTkwNl0gc3BlY2lmaWVzIHRo ZSBwYXJzaW5nIHJ1bGVzCiAgIHRoYXQgYWxsb3cgYSBob3N0IHRvIGRpc3Rpbmd1aXNoIGJldHdl ZW4gYW4gZXh0ZW5zaW9uIGZpZWxkIGFuZCBhCiAgIE1BQy4gSG93ZXZlciwgYSBNQUMgaXMgbm90 IG1hbmRhdG9yeSBhZnRlciBhbiBleHRlbnNpb24gZmllbGQ7IGFuCiAgIE5UUHY0IHBhY2tldCBj YW4gaW5jbHVkZSBvbmUgb3IgbW9yZSBleHRlbnNpb24gZmllbGRzIHdpdGhvdXQKICAgaW5jbHVk aW5nIGEgTUFDIChTZWN0aW9uIDcuNSBvZiBbUkZDNTkwNV0pLgoKICAgVGhpcyBkb2N1bWVudCB1 cGRhdGVzIFtSRkM1OTA1XSBieSBjbGFyaWZ5aW5nIHNvbWUgcG9pbnRzIHJlZ2FyZGluZwogICB0 aGUgdXNhZ2Ugb2YgZXh0ZW5zaW9uIGZpZWxkcy4gU3BlY2lmaWNhbGx5LCB0aGlzIGRvY3VtZW50 IHVwZGF0ZXMKICAgU2VjdGlvbiA3LjUgb2YgW1JGQzU5MDVdLCBjbGFyaWZ5aW5nIHRoZSByZWxh dGlvbnNoaXAgYmV0d2VlbgogICBleHRlbnNpb24gZmllbGRzIGFuZCBNQUNzLCBhbmQgZGVmaW5p bmcgdGhlIGJlaGF2aW9yIG9mIGEgaG9zdCB0aGF0CiAgIHJlY2VpdmVzIGFuIHVua25vd24gZXh0 ZW5zaW9uIGZpZWxkLgoKMi4gQ29udmVudGlvbnMgVXNlZCBpbiB0aGlzIERvY3VtZW50CgoyLjEu IFRlcm1pbm9sb2d5CgogICBUaGUga2V5IHdvcmRzICJNVVNUIiwgIk1VU1QgTk9UIiwgIlJFUVVJ UkVEIiwgIlNIQUxMIiwgIlNIQUxMIE5PVCIsCiAgICJTSE9VTEQiLCAiU0hPVUxEIE5PVCIsICJS RUNPTU1FTkRFRCIsICJNQVkiLCBhbmQgIk9QVElPTkFMIiBpbiB0aGlzCiAgIGRvY3VtZW50IGFy ZSB0byBiZSBpbnRlcnByZXRlZCBhcyBkZXNjcmliZWQgaW4gW0tFWVdPUkRTXS4KCjIuMi4gVGVy bXMgJmFtcDsgQWJicmV2aWF0aW9ucwoKICAgTlRQdjQgICAgICAgIE5ldHdvcmsgVGltZSBQcm90 b2NvbCBWZXJzaW9uIDQgW1JGQzU5MDVdCgogICBNQUMgICAgICAgICAgTWVzc2FnZSBBdXRoZW50 aWNhdGlvbiBDb2RlCgozLiBOVFAgRXh0ZW5zaW9uIEZpZWxkcyAtIFJGQyA1OTA1IFVwZGF0ZQoK ICAgVGhpcyBkb2N1bWVudCB1cGRhdGVzIFNlY3Rpb24gNy41IG9mIFtSRkM1OTA1XSBhcyBmb2xs b3dzOgoKICAgT0xEOgoKICAgNy41LiBOVFAgRXh0ZW5zaW9uIEZpZWxkIEZvcm1hdAoKICAgSW4g TlRQdjQsIG9uZSBvciBtb3JlIGV4dGVuc2lvbiBmaWVsZHMgY2FuIGJlIGluc2VydGVkIGFmdGVy IHRoZQogICBoZWFkZXIgYW5kIGJlZm9yZSB0aGUgTUFDLCBpZiBhIE1BQyBpcyBwcmVzZW50LiBJ ZiBhIE1BQyBpcyBub3QKICAgcHJlc2VudCwgb25lIG9yIG1vcmUgZXh0ZW5zaW9uIGZpZWxkcyBj YW4gYmUgaW5zZXJ0ZWQgYWZ0ZXIgdGhlCiAgIGhlYWRlciwgYWNjb3JkaW5nIHRvIHRoZSBmb2xs b3dpbmcgcnVsZXM6CgogICBvICBJZiB0aGUgcGFja2V0IGluY2x1ZGVzIGEgc2luZ2xlIGV4dGVu c2lvbiBmaWVsZCwgdGhlIGxlbmd0aCBvZiB0aGUKICAgICAgZXh0ZW5zaW9uIGZpZWxkIE1VU1Qg YmUgYXQgbGVhc3QgNyB3b3JkcywgaS5lLiwgYXQgbGVhc3QgMjgKICAgICAgb2N0ZXRzLgoKICAg byAgSWYgdGhlIHBhY2tldCBpbmNsdWRlcyBtb3JlIHRoYW4gb25lIGV4dGVuc2lvbiBmaWVsZCwg dGhlIGxlbmd0aAogICAgICBvZiB0aGUgbGFzdCBleHRlbnNpb24gZmllbGQgTVVTVCBiZSBhdCBs ZWFzdCAyOCBvY3RldHMuIFRoZSBsZW5ndGgKICAgICAgb2YgdGhlIG90aGVyIGV4dGVuc2lvbiBm aWVsZHMgaW4gdGhpcyBjYXNlIE1VU1QgYmUgYXQgbGVhc3QgMTYKICAgICAgb2N0ZXRzIGVhY2gu CgogICBPdGhlciB0aGFuIGRlZmluaW5nIHRoZSBmaWVsZCBmb3JtYXQsIHRoaXMgZG9jdW1lbnQg bWFrZXMgbm8gdXNlIG9mCiAgIHRoZSBmaWVsZCBjb250ZW50cy4gIEFuIGV4dGVuc2lvbiBmaWVs ZCBjb250YWlucyBhIHJlcXVlc3Qgb3IKICAgcmVzcG9uc2UgbWVzc2FnZSBpbiB0aGUgZm9ybWF0 IHNob3duIGluIEZpZ3VyZSAxNC4KCiAgICAgICAwICAgICAgICAgICAgICAgICAgIDEgICAgICAg ICAgICAgICAgICAgMiAgICAgICAgICAgICAgICAgICAzCiAgICAgICAwIDEgMiAzIDQgNSA2IDcg OCA5IDAgMSAyIDMgNCA1IDYgNyA4IDkgMCAxIDIgMyA0IDUgNiA3IDggOSAwIDEKICAgICAgKy0r LSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSst Ky0rLSsKICAgICAgfCAgICAgICAgICBGaWVsZCBUeXBlICAgICAgICAgICB8ICAgICAgICAgICAg TGVuZ3RoICAgICAgICAgICAgIHwKICAgICAgKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSst Ky0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSsKICAgICAgLiAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIC4KICAgICAg LiAgICAgICAgICAgICAgICAgICAgICAgICAgICBWYWx1ZSAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgIC4KICAgICAgLiAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgIC4KICAgICAgKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0r LSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSsKICAgICAgfCAgICAgICAgICAg ICAgICAgICAgICAgUGFkZGluZyAoYXMgbmVlZGVkKSAgICAgICAgICAgICAgICAgICAgIHwKICAg ICAgKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSst Ky0rLSstKy0rLSsKICAgICAgICAgICAgICAgICAgICAgRmlndXJlIDE0OiBFeHRlbnNpb24gRmll bGQgRm9ybWF0CgogICBBbGwgZXh0ZW5zaW9uIGZpZWxkcyBhcmUgemVyby1wYWRkZWQgdG8gYSB3 b3JkIChmb3VyIG9jdGV0cykKICAgYm91bmRhcnkuICBUaGUgRmllbGQgVHlwZSBmaWVsZCBpcyBz cGVjaWZpYyB0byB0aGUgZGVmaW5lZCBmdW5jdGlvbgogICBhbmQgaXMgbm90IGVsYWJvcmF0ZWQg aGVyZS4gIFdoaWxlIHRoZSBtaW5pbXVtIGZpZWxkIGxlbmd0aAogICBjb250YWluaW5nIHJlcXVp cmVkIGZpZWxkcyBpcyBmb3VyIHdvcmRzICgxNiBvY3RldHMpLCBhIG1heGltdW0gZmllbGQKICAg bGVuZ3RoIHJlbWFpbnMgdG8gYmUgZXN0YWJsaXNoZWQuCgogICBUaGUgTGVuZ3RoIGZpZWxkIGlz IGEgMTYtYml0IHVuc2lnbmVkIGludGVnZXIgdGhhdCBpbmRpY2F0ZXMgdGhlCiAgIGxlbmd0aCBv ZiB0aGUgZW50aXJlIGV4dGVuc2lvbiBmaWVsZCBpbiBvY3RldHMsIGluY2x1ZGluZyB0aGUgUGFk ZGluZwogICBmaWVsZC4KCiAgIE5FVzoKCiAgIDcuNS4gTlRQIEV4dGVuc2lvbiBGaWVsZCBGb3Jt YXQKCiAgIEluIE5UUHY0LCBvbmUgb3IgbW9yZSBleHRlbnNpb24gZmllbGRzIGNhbiBiZSBpbnNl cnRlZCBhZnRlciB0aGUKICAgaGVhZGVyIGFuZCBiZWZvcmUgdGhlIE1BQywgaWYgYSBNQUMgaXMg cHJlc2VudC4KCiAgIE90aGVyIHRoYW4gZGVmaW5pbmcgdGhlIGZpZWxkIGZvcm1hdCwgdGhpcyBk b2N1bWVudCBtYWtlcyBubyB1c2Ugb2YKICAgdGhlIGZpZWxkIGNvbnRlbnRzLiAgQW4gZXh0ZW5z aW9uIGZpZWxkIGNvbnRhaW5zIGEgcmVxdWVzdCBvcgogICByZXNwb25zZSBtZXNzYWdlIGluIHRo ZSBmb3JtYXQgc2hvd24gaW4gRmlndXJlIDE0LgoKICAgICAgIDAgICAgICAgICAgICAgICAgICAg MSAgICAgICAgICAgICAgICAgICAyICAgICAgICAgICAgICAgICAgIDMKICAgICAgIDAgMSAyIDMg NCA1IDYgNyA4IDkgMCAxIDIgMyA0IDUgNiA3IDggOSAwIDEgMiAzIDQgNSA2IDcgOCA5IDAgMQog ICAgICArLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSst Ky0rLSstKy0rLSstKwogICAgICB8ICAgICAgICAgIEZpZWxkIFR5cGUgICAgICAgICAgIHwgICAg ICAgICAgICBMZW5ndGggICAgICAgICAgICAgfAogICAgICArLSstKy0rLSstKy0rLSstKy0rLSst Ky0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKwogICAgICAuICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg LgogICAgICAuICAgICAgICAgICAgICAgICAgICAgICAgICAgIFZhbHVlICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgLgogICAgICAuICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgLgogICAgICArLSstKy0rLSstKy0rLSstKy0r LSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKwogICAgICB8ICAg ICAgICAgICAgICAgICAgICAgICBQYWRkaW5nIChhcyBuZWVkZWQpICAgICAgICAgICAgICAgICAg ICAgfAogICAgICArLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSst Ky0rLSstKy0rLSstKy0rLSstKwogICAgICAgICAgICAgICAgICAgICBGaWd1cmUgMTQ6IEV4dGVu c2lvbiBGaWVsZCBGb3JtYXQKCiAgIEFsbCBleHRlbnNpb24gZmllbGRzIGFyZSB6ZXJvLXBhZGRl ZCB0byBhIHdvcmQgKGZvdXIgb2N0ZXRzKQogICBib3VuZGFyeS4KCiAgIFRoZSBGaWVsZCA8c3Ry aWtlPjxmb250IGNvbG9yPSJyZWQiPlR5cGUgZmllbGQgaXM8L2ZvbnQ+PC9zdHJpa2U+IDxzdHJv bmc+PGZvbnQgY29sb3I9ImdyZWVuIj5UeXBlLCBWYWx1ZSwgYW5kIFBhZGRpbmcgZmllbGRzIGFy ZTwvZm9udD48L3N0cm9uZz4gc3BlY2lmaWMgdG8gdGhlIGRlZmluZWQKICAgZnVuY3Rpb24gYW5k IDxzdHJpa2U+PGZvbnQgY29sb3I9InJlZCI+aXM8L2ZvbnQ+PC9zdHJpa2U+IDxzdHJvbmc+PGZv bnQgY29sb3I9ImdyZWVuIj5hcmU8L2ZvbnQ+PC9zdHJvbmc+IG5vdCBlbGFib3JhdGVkIDxzdHJp a2U+PGZvbnQgY29sb3I9InJlZCI+aGVyZS48L2ZvbnQ+PC9zdHJpa2U+IDxzdHJvbmc+PGZvbnQg Y29sb3I9ImdyZWVuIj5oZXJlOyB0aGUgRmllbGQgVHlwZSB2YWx1ZSBpcyBkZWZpbmVkCiAgIGlu IGFuIElBTkEgcmVnaXN0cnkgYW5kIGl0cyBMZW5ndGgsIFZhbHVlIGFuZCBQYWRkaW5nIGFyZSBk ZWZpbmVkIGJ5CiAgIHRoZSBkb2N1bWVudCByZWZlcnJlZCB0byBieSB0aGUgcmVnaXN0cnkuPC9m b250Pjwvc3Ryb25nPiBJZiBhIGhvc3QgcmVjZWl2ZXMgYW4KICAgZXh0ZW5zaW9uIGZpZWxkIHdp dGggYW4gdW5rbm93biBGaWVsZCA8c3RyaWtlPjxmb250IGNvbG9yPSJyZWQiPlR5cGUgdmFsdWUs PC9mb250Pjwvc3RyaWtlPiA8c3Ryb25nPjxmb250IGNvbG9yPSJncmVlbiI+VHlwZSw8L2ZvbnQ+ PC9zdHJvbmc+IHRoZSBob3N0IFNIT1VMRCBpZ25vcmUKICAgdGhlIGV4dGVuc2lvbiBmaWVsZCBh bmQgTUFZIGRyb3AgdGhlIHBhY2tldCBhbHRvZ2V0aGVyIGlmIHBvbGljeQogICByZXF1aXJlcyBp dC4gPHN0cmlrZT48Zm9udCBjb2xvcj0icmVkIj5Ob3RlIHRoYXQKICAgaW4gdGhlIHByZXNlbmNl IG9mIGFuIHVua25vd24gZXh0ZW5zaW9uIGZpZWxkIGFueSBNQUMgdGhhdCBtYXkgYmUKICAgcHJl c2VudCBtYXkgYmUgbWlzaW50ZXJwcmV0ZWQgYXMgYW4gdW5rbm93biBleHRlbnNpb24gdGhvdWdo IGluIHRoaXMKICAgY2FzZSB0aGUgYXBwYXJlbnQgZXh0ZW5zaW9uIGxlbmd0aCB3aWxsIGJlIGlu Y29uc2lzdGVudCB3aXRoIHRoZQogICB0b3RhbCBsZW5ndGggb2YgdGhlIHJlc3Qgb2YgdGhlIHBh Y2tldC48L2ZvbnQ+PC9zdHJpa2U+CgogICBXaGlsZSB0aGUgbWluaW11bSBmaWVsZCBsZW5ndGgg Y29udGFpbmluZyByZXF1aXJlZCBmaWVsZHMgaXMgZm91cgogICB3b3JkcyAoMTYgb2N0ZXRzKSwg dGhlIG1heGltdW0gZmllbGQgbGVuZ3RoIGNhbm5vdCBiZSBsb25nZXIgdGhhbgogICA2NTUzMiBv Y3RldHMgZHVlIHRvIHRoZSBtYXhpbXVtIHNpemUgb2YgdGhlIGxlbmd0aCBmaWVsZC4KCiAgIFRo ZSBMZW5ndGggZmllbGQgaXMgYSAxNi1iaXQgdW5zaWduZWQgaW50ZWdlciB0aGF0IGluZGljYXRl cyB0aGUKICAgbGVuZ3RoIG9mIHRoZSBlbnRpcmUgZXh0ZW5zaW9uIGZpZWxkIGluIG9jdGV0cywg aW5jbHVkaW5nIHRoZSBQYWRkaW5nCiAgIGZpZWxkLgoKICAgNy41LjEgRXh0ZW5zaW9uIEZpZWxk cyBhbmQgTUFDcwoKICAgNy41LjEuMSBFeHRlbnNpb24gRmllbGRzIGluIHRoZSBQcmVzZW5jZSBv ZiBhIE1BQwoKICAgQW4gZXh0ZW5zaW9uIGZpZWxkIGNhbiBiZSB1c2VkIGluIGFuIE5UUCBwYWNr ZXQgdGhhdCBpbmNsdWRlcyBhIE1BQywKICAgZm9yIGV4YW1wbGUsIGFzIGRlZmluZWQgaW4gW1JG QzU5MDZdLiBBIHNwZWNpZmljYXRpb24gdGhhdCBkZWZpbmVzIGEKICAgbmV3IGV4dGVuc2lvbiBm aWVsZCBNVVNUIHNwZWNpZnkgd2hldGhlciB0aGUgZXh0ZW5zaW9uIGZpZWxkIHJlcXVpcmVzCiAg IGEgTUFDIG9yIG5vdC4gSWYgdGhlIGV4dGVuc2lvbiBmaWVsZCByZXF1aXJlcyBhIE1BQywgdGhl IGV4dGVuc2lvbgogICBmaWVsZCBzcGVjaWZpY2F0aW9uIE1VU1QgZGVmaW5lIHRoZSBhbGdvcml0 aG0gdG8gYmUgdXNlZCB0byBjcmVhdGUKICAgdGhlIE1BQyBhbmQgdGhlIGxlbmd0aCBvZiB0aGUg TUFDIHRodXMgY3JlYXRlZC4gQW4gZXh0ZW5zaW9uIGZpZWxkCiAgIE1BWSBhbGxvdyBmb3IgbW9y ZSB0aGFuIG9uZSBhbGdvcml0aG0gdG8gYmUgdXNlZCBpbiB3aGljaCBjYXNlIHRoZQogICBpbmZv cm1hdGlvbiBhYm91dCB3aGljaCBvbmUgd2FzIHVzZWQgTVVTVCBiZSBpbmNsdWRlZCBpbiB0aGUK ICAgZXh0ZW5zaW9uIGZpZWxkIGl0c2VsZi4KCiAgIDcuNS4xLjIgTXVsdGlwbGUgRXh0ZW5zaW9u IEZpZWxkcyB3aXRoIGEgTUFDCgogICBJZiB0aGVyZSBhcmUgbXVsdGlwbGUgZXh0ZW5zaW9uIGZp ZWxkcyB0aGF0IHJlcXVpcmUgYSBNQUMgdGhleSBNVVNUCiAgIGFsbCByZXF1aXJlIHVzZSBvZiB0 aGUgc2FtZSBhbGdvcml0aG0gYW5kIE1BQyBsZW5ndGguIEV4dGVuc2lvbgogICBmaWVsZHMgdGhh dCBkbyBub3QgcmVxdWlyZSBhIE1BQyBjYW4gYmUgaW5jbHVkZWQgd2l0aCBleHRlbnNpb24KICAg ZmllbGRzIHRoYXQgZG8gcmVxdWlyZSBhIE1BQy4KCiAgIDxzdHJvbmc+PGZvbnQgY29sb3I9Imdy ZWVuIj5JZiBhbiBOVFAgcGFja2V0IGlzIHJlY2VpdmVkIHdpdGggdHdvIG9yIG1vcmUgZXh0ZW5z aW9uIGZpZWxkcyB0aGF0CiAgIHJlcXVpcmUgYSBNQUMgd2l0aCBkaWZmZXJlbnQgYWxnb3JpdGht cywgdGhlIHBhY2tldCBNVVNUIGJlCiAgIGRpc2NhcmRlZC48L2ZvbnQ+PC9zdHJvbmc+CgogICA3 LjUuMS4zIE1BQyBpbiB0aGUgYWJzZW5jZSBvZiBhbiBFeHRlbnNpb24gZmllbGQKCiAgIEEgTUFD IE1VU1QgTk9UIGJlIGxvbmdlciB0aGFuIDI0IG9jdGV0cyBpZiB0aGVyZSBpcyBubyBleHRlbnNp b24KICAgZmllbGQgcHJlc2VudCB1bmxlc3MgdGhyb3VnaCBhIHByZXZpb3VzIGV4Y2hhbmdlIG9m IHBhY2tldHMgd2l0aCBhbgogICBleHRlbnNpb24gZmllbGQgd2hpY2ggZGVmaW5lcyB0aGUgc2l6 ZSBhbmQgYWxnb3JpdGhtIG9mIHRoZSBNQUMKICAgdHJhbnNtaXR0ZWQgaW4gdGhlIHBhY2tldCBh bmQgaXMgYWdyZWVkIHVwb24gYnkgYm90aCBjbGllbnQgYW5kCiAgIHNlcnZlci4KCiAgIDcuNS4x LjQgRXh0ZW5zaW9uIEZpZWxkcyBpbiB0aGUgQWJzZW5jZSBvZiBhIE1BQwoKICAgSWYgYSBNQUMg aXMgbm90IHByZXNlbnQsIG9uZSBvciBtb3JlIGV4dGVuc2lvbiBmaWVsZHMgY2FuIGJlIGluc2Vy dGVkCiAgIGFmdGVyIHRoZSBoZWFkZXIsIGFjY29yZGluZyB0byB0aGUgZm9sbG93aW5nIHJ1bGVz OgoKICAgbyAgSWYgdGhlIHBhY2tldCBpbmNsdWRlcyBhIHNpbmdsZSBleHRlbnNpb24gZmllbGQs IHRoZSBsZW5ndGggb2YgdGhlCiAgICAgIGV4dGVuc2lvbiBmaWVsZCBNVVNUIGJlIGF0IGxlYXN0 IDcgd29yZHMsIGkuZS4sIGF0IGxlYXN0IDI4CiAgICAgIG9jdGV0cy4KCiAgIG8gIElmIHRoZSBw YWNrZXQgaW5jbHVkZXMgbW9yZSB0aGFuIG9uZSBleHRlbnNpb24gZmllbGQsIHRoZSBsZW5ndGgK ICAgICAgb2YgdGhlIGxhc3QgZXh0ZW5zaW9uIGZpZWxkIE1VU1QgYmUgYXQgbGVhc3QgMjggb2N0 ZXRzLiBUaGUgbGVuZ3RoCiAgICAgIG9mIHRoZSBvdGhlciBleHRlbnNpb24gZmllbGRzIGluIHRo aXMgY2FzZSBNVVNUIGJlIGF0IGxlYXN0IDE2CiAgICAgIG9jdGV0cyBlYWNoLgoKNC4gU2VjdXJp dHkgQ29uc2lkZXJhdGlvbnMKCiAgIFRoZSBzZWN1cml0eSBjb25zaWRlcmF0aW9ucyBvZiB0aGUg bmV0d29yayB0aW1lIHByb3RvY29sIGFyZQogICBkaXNjdXNzZWQgaW4gW1JGQzU5MDVdLiBUaGlz IGRvY3VtZW50IGNsYXJpZmllcyBzb21lIGFtYmlndWl0eSB3aXRoCiAgIHJlZ2FyZHMgdG8gdGhl IHVzYWdlIG9mIHRoZSBOVFAgZXh0ZW5zaW9uIGZpZWxkLCBhbmQgdGh1cyB0aGUKICAgYmVoYXZp b3IgZGVzY3JpYmVkIGluIHRoaXMgZG9jdW1lbnQgZG9lcyBub3QgaW50cm9kdWNlIG5ldyBzZWN1 cml0eQogICBjb25zaWRlcmF0aW9ucy4KCjUuIElBTkEgQ29uc2lkZXJhdGlvbnMKCiAgIFRoZXJl IGFyZSBubyBuZXcgSUFOQSBjb25zaWRlcmF0aW9ucyBpbXBsaWVkIGJ5IHRoaXMgZG9jdW1lbnQu Cgo2LiBBY2tub3dsZWRnbWVudHMKCiAgIFRoZSBhdXRob3JzIHRoYW5rIERhdmUgTWlsbHMgZm9y IGhpcyBpbnNpZ2h0ZnVsIGNvbW1lbnRzLgoKICAgVGhpcyBkb2N1bWVudCB3YXMgcHJlcGFyZWQg dXNpbmcgMi1Xb3JkLXYyLjAudGVtcGxhdGUuZG90LgoKNy4gUmVmZXJlbmNlcwoKNy4xLiBOb3Jt YXRpdmUgUmVmZXJlbmNlcwoKICAgW0tFWVdPUkRTXSAgICBCcmFkbmVyLCBTLiwgIktleSB3b3Jk cyBmb3IgdXNlIGluIFJGQ3MgdG8gSW5kaWNhdGUKICAgICAgICAgICAgICAgICBSZXF1aXJlbWVu dCBMZXZlbHMiLCBCQ1AgMTQsIFJGQyAyMTE5LCBNYXJjaCAxOTk3LgoKICAgW1JGQzU5MDVdICAg ICBNaWxscywgRC4sIE1hcnRpbiwgSi4sIEJ1cmJhbmssIEouLCBLYXNjaCwgVy4sCiAgICAgICAg ICAgICAgICAgIk5ldHdvcmsgVGltZSBQcm90b2NvbCBWZXJzaW9uIDQ6IFByb3RvY29sIGFuZAog ICAgICAgICAgICAgICAgIEFsZ29yaXRobXMgU3BlY2lmaWNhdGlvbiIsIFJGQyA1OTA1LCBKdW5l IDIwMTAuCgo3LjIuIEluZm9ybWF0aXZlIFJlZmVyZW5jZXMKCiAgIFtSRkM1OTA2XSAgICAgSGFi ZXJtYW4sIEIuLCBNaWxscywgRC4sICJOZXR3b3JrIFRpbWUgUHJvdG9jb2wKICAgICAgICAgICAg ICAgICBWZXJzaW9uIDQ6IEF1dG9rZXkgU3BlY2lmaWNhdGlvbiIsIFJGQyA1OTA2LCBKdW5lCiAg ICAgICAgICAgICAgICAgMjAxMC4KCkF1dGhvcnMnIEFkZHJlc3NlcwoKICAgVGFsIE1penJhaGkK ICAgTWFydmVsbAogICA2IEhhbWFkYSBTdC4KICAgWW9rbmVhbSwgMjA2OTIgSXNyYWVsCgogICBF bWFpbDogdGFsbWlAbWFydmVsbC5jb20KCiAgIERhbm55IE1heWVyCiAgIE5ldHdvcmsgVGltZSBG b3VuZGF0aW9uCiAgIFBPIEJveCA5MTgKICAgVGFsZW50IE9SIDk3NTQwCgogICBFbWFpbDogbWF5 ZXJAbnRwLm9yZwo8L3ByZT4KCjwhLS0gYXJnczogeyctLW9sZGNvbG91cic6ICdyZWQnLCAnLS13 aWR0aCc6ICcnLCAnZGlmZnR5cGUnOiAnLS1od2RpZmYnLCAndXJsMSc6ICcnLCAnc3VibWl0Jzog J0dlbmVyYXRlIGRpZmYnLCAndXJsMic6ICcnLCAnLS1uZXdjb2xvdXInOiAnZ3JlZW4nfSAtLT48 L2JvZHk+PC9odG1sPg== --_003_d1d55a33735347e0a025ab478346e61dILEXCH01marvellcom_-- From nobody Sun Oct 25 13:55:24 2015 Return-Path: X-Original-To: secdir@ietfa.amsl.com Delivered-To: secdir@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 382BB1B319B; Sun, 25 Oct 2015 13:55:23 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -93.363 X-Spam-Level: X-Spam-Status: No, score=-93.363 tagged_above=-999 required=5 tests=[BAYES_50=0.8, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FH_HELO_EQ_D_D_D_D=1.597, HELO_DYNAMIC_IPADDR=1.951, HELO_EQ_DE=0.35, HELO_MISMATCH_DE=1.448, HTML_MESSAGE=0.001, J_CHICKENPOX_72=0.6, NORMAL_HTTP_TO_IP=0.001, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01, USER_IN_WHITELIST=-100] autolearn=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id QBwe_qt5Zwls; Sun, 25 Oct 2015 13:55:19 -0700 (PDT) Received: from lvps5-35-241-16.dedicated.hosteurope.de (www.gondrom.org [5.35.241.16]) (using TLSv1.1 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id C87051B319C; Sun, 25 Oct 2015 13:55:18 -0700 (PDT) Received: from [192.168.178.26] (x590f7e4f.dyn.telefonica.de [89.15.126.79]) by lvps5-35-241-16.dedicated.hosteurope.de (Postfix) with ESMTPSA id 7E7DE62DD5; Sun, 25 Oct 2015 21:55:16 +0100 (CET) DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=default; d=gondrom.org; b=0E7rXhcyAqaYbDck29YSx+lTHvUzgRC7XbNDNTOwgSJqEoSNntWPEUh/9cOFG+x5CvEv6cHmbSS9FjFNHy7gzskBbj/NoV9UYHcymg3dFaKsS4gxEbCM7KqMMbnDMfZvBk7WvsKrOxJYX5N/YeDNvHYmapzCOi8SBG/n7oxh2Xs=; h=Message-ID:Date:From:User-Agent:MIME-Version:To:CC:Subject:References:In-Reply-To:Content-Type; Message-ID: <562D41B4.7020008@gondrom.org> Date: Sun, 25 Oct 2015 21:55:16 +0100 From: Tobias Gondrom User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:31.0) Gecko/20100101 Thunderbird/31.5.0 MIME-Version: 1.0 To: tore@redpill-linpro.com References: <5603D448.3060701@gondrom.org> <20151007095517.57b606ae@echo.ms.redpill-linpro.com> In-Reply-To: <20151007095517.57b606ae@echo.ms.redpill-linpro.com> Content-Type: multipart/alternative; boundary="------------070701040302040600040702" Archived-At: Cc: draft-ietf-v6ops-siit-dc.all@tools.ietf.org, iesg@ietf.org, secdir@ietf.org Subject: Re: [secdir] secdir review of draft-ietf-v6ops-siit-dc-02 X-BeenThere: secdir@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: Security Area Directorate List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 25 Oct 2015 20:55:23 -0000 This is a multi-part message in MIME format. --------------070701040302040600040702 Content-Type: text/plain; charset=windows-1252; format=flowed Content-Transfer-Encoding: 7bit Thank you for your feedback. answers inline. On 07/10/15 09:55, Tore Anderson wrote: > Hello Tobias, and thank you very much for your feedback! > > My comments in-line. > > * Tobias Gondrom > >> One main question: Technically this document looks to me more like >> standards and not informational as I think we need to enforce consistent >> behaviour and restrictions to ensure overall consistency. IMO we need to >> spell this out more explicitly. This is a repeating element, I >> encountered in this review across multiple sections of the document (see >> explanations below). > The only standard/protocol used SIIT [RFC6145] plus its EAM extension > [I-D.ietf-v6ops-siit-eam]. That is, if an operator has an > implementation of RFC6145 and I-D.ietf-v6ops-siit-eam, then the > operator can use that implementation to deploy SIIT-DC as described in > I-D.ietf-v6ops-siit-dc. > > No additional protocols, algorithms, or features is used beyond those > already specified in RFC6145 and I-D.ietf-v6ops-siit-eam are required. > This is the reason on why I-D.ietf-v6ops-siit-dc is Informational; it > merely describes one way to deploy the standard protocols defined > elsewhere in the context of a specific use case. > >> COMMENTS: >> 0. starting with a personal comment:in general it is nice to move again >> a step closer to a V6, even though these series of baby transition steps >> are quite small. Whether we need this in addition to other existing 64 >> protocols, I leave to the V6ops WG who has much better insight into this >> one than me. >> >> 1. This document has two strong requirements, that should be expressed >> in 2119 language. >> 1.1. the SIIT algorithm MUST be used. > Ok, how about this (in section 2): > > SIIT-DC Border Relay (BR) > A device or a logical function that performs stateless protocol > translation between IPv4 and IPv6. It MUST do so in accordance with > [RFC6145] and [I-D.ietf-v6ops-siit-eam]. WFM. > >> 1.2. And the security considerations section MUST be followed. > Like so? > > If a Network-Specific Prefix from the provider's own address space is > chosen for the translation prefix, as recommended in Section 4.4, > care MUST be taken [...] WFM. Thanks. > >> 2. Section 7 Security Considerations: >> 2.1. The listed concern is correct. The listed mitigation step may work, >> I would suggest to also add a sentence when you do choose this distinct >> translation prefix, you also must configure your FW/GW at the edge to >> enforce the integrity of that naming scheme (e.g. by dropping packets >> from that prefix if not coming from a IPv4) to make sure there is no >> ambiguity or spoofing. We must avoid a blend of translated and >> untranslated addresses in the same prefix if you use the prefix as a >> marker. > I disagree with this. RFC6052 makes a distinction between > "IPv4-converted" IPv6 addresses (which occur in packets that were > originally IPv4 packets) and "IPv4-translatable" IPv6 addresses (which > are normal unicast addreses that happen to follow the address format > specified in RFC6052). > > If I understand you correctly, what you propose here would be > essentially mean forbidding the use of IPv4-translatable IPv6 > addresses. In my opinion, I-D.ietf-v6ops-siit-dc is not the right place > for such an undertaking, that would require updates to RFC6052 and > RFC6145 (and probably others). ACK. It was a suggestion. I still think that there is a potential security risk coming from that, but I leave this to the WG to decide. > >> 2.2. I am not sure you covered all the security concerns in this section. >> 2.2.1. e.g. we might want to expand more on the risk that the DC does by >> design not see that we translate this down to V4 at the edge and thereby >> loose some of the capabilities of V6 beyond the edge. Therefore the DC >> may assume a fully V6 conformant client, which is not the case. This may >> lead to the need of further filtering or protection mechanisms at the edge. > I am having difficulty understanding exactly what the possibly security > concern you have here is, and how it would need to be mitigated. > > Keep in mind that one can perform IPv4-to-IPv6 translation anywhere on > the Internet. In other words, any IPv6 packet received by any node is > possibly translated from IPv4. So if there truly is a security concern > here, it would apply to any deployment of IPv6 (except isolated > networks not connected to the Internet). > > If you'd like a demo of the above, by the way, you can visit > http://87.238.60.1/. This traffic is routed to one of my SIIT-DC BRs > located in Norway or Sweden, and afterwards forwarded as IPv6 to the > site "www.whatismyipv6.com" in the USA (I have no affiliation with this > site and it's not in my network). This means that if the > www.whatismyipv6.com web site incorrectly "assumes [your connection is > from] a fully V6 conformat client", and this assumption somehow causes > a security concern, then that security concern would have much wider > ramifications than being of interest only to operators who are > deploying SIIT-DC and thus are likely to read I-D.ietf-v6ops-siit-dc. > It would also apply to RFC6146, as you can use Stateful NAT64 to > accomplish the same thing as I use SIIT-DC. > >> 2.2.2. the authors should expand more on architecture requirements not >> to put two of these translators in sequence (see possibly conflicts with > This is exactly the subject being discussed in > I-D.ietf-v6ops-siit-dc-2xlat, which is referred to numerous times. Noted. > >> 2.2.3. the authors should expand more on restrictions of putting this in >> a mixed environment with NAT64 > To the best of my knowledge, there exist no such restrictions, beyond > the fact that you'd need to use differing RFC6052 prefixes. This fact is > mentioned in section 4.4. > >> 3. section "4.4. Choice of Translation Prefix" >> - states: "Either a Network-Specific Prefix (NSP) from the provider's >> own IPv6 address space or the IANA-allocated Well-Known Prefix >> 64:ff9b::/96 (WKP) may be used." >> I think this needs to be a MUST instead of the "may". > Could you elaborate on why? From a technical point of view, the WKP > works just as well as any NSP, and if the operator really wants to use > it (in spite of the stated disadvantages), I do not see that I have any > justification for denying that outright. > > Note that RFC6052 also discusses the use of a WKP vs an NSP at length in > section 3.3; while it advises the use of an NSP, it does not make it a > MUST. I fail to see a rationale for making I-D.ietf-v6ops-siit-dc be > more restrictive. One of my concerns is to avoid the case where addresses from none of the two would be used and potential risks arising from that. I am also not sure why we should leave this open as a "may" instead of locking this down with a "MUST". However, my knowledge is not as deep as yours on this, so I leave this to you and your WG. >> Also I do not like >> the ambiguity of prefixes here. We need to make it clear that this >> translastion MUST be consistent across all edges to the DC. > Section 3 states: > > Any number of BRs may exist simultaneously in the IDC's network > infrastructure, as long as they all configured with the same > Translation Prefix and an identical EAM Table. > > Is this somehow unclear? If so, could you propose an improved text? > >> 4. section 4.5. routing considerations: >> - do we need to specify that all alternate BRs must use the same >> algorithm and all MUST be able to support SIIT-DC? > There exists only one definition of "BR" in the document: > > SIIT-DC Border Relay (BR) > A device or a logical function that performs stateless protocol > translation between IPv4 and IPv6 in accordance with [RFC6145] and > [I-D.ietf-v6ops-siit-eam]. > > It would appear to me, therefore, that the document already makes the > statement you propose. That is, it is impossible for an alternate BR to > use another translation algorithm, because if it did so, it would by > definition no longer be a BR. That might be the case. It might not have been clear to me during the review. Therefore my question. Please consider this only as a suggestion or question for your decision. >> 5. section 4.6: >> we say "This should be understood to include all servers," >> I am not sure this is only a "should". From a lingual perspective it >> might be meaning that it "it should be understood that it requires..." >> but as the word "required" is not used, it is a bit unclear to me, >> whether that is also understood by the author/WG for this protocol. > Ack. How about this? > > [..] the BRs must be located somewhere between the IPv4 Internet > and the application delivery stack - which includes all servers, > load balancers, firewalls, intrusion detection systems, and similar > devices that are processing traffic to a greater extent than merely > forwarding it. WFM. Thank you. > >> 6. section 4.8.: >> we use "To facilitate reliable delivery of such ICMPv6 errors n SIIT-DC >> operator SHOULD implement the recommendations in [RFC6791] in the BRs." >> Is there a security consideration on the impact what happens if RFC6791 >> is not followed and ICMPv6 errors are dropped? What would be the >> security implications of loosing not transmitting these messages? > That is a question for RFC6791, which states the following: > > 6. Security Considerations > > This document recommends the generation of IPv4 ICMP messages from > IPv6 ICMP messages. These messages would otherwise have been > discarded. New considerations are not expected to result from this > change. As with a number of ICMP messages, a spoofed source address > may result in replies arriving at hosts that did not expect them > using the facility of the translator. > >> 7. section 4.9. "MTU and Fragmentation": >> it is good that we spell out the series of key differences between IPv4 >> and IPv6 relating to packet sizes and fragmentation that one needs to >> consider when deploying SIIT-DC. I am not sure a "should" is sufficient >> here. > Ack, will change to "must". Thank you. > >> Furthermore, it would be good to consider whether we need to >> specify and mandate the specific behaviour when encountering these >> limitations to avoid inconsistent behaviour from the BR if these >> parameters are encountered and this might be exploited as an attack vector. > True, but on the other hand if such attack vectors exists it is > extremely likely that these are not specific to SIIT-DC, but in SIIT > [RFC6145] itself and in quite possibly other derivative protocols such > as Stateful NAT64 [RFC6145], MAP-T [RFC7599], and likely others. > > As I mentioned earlier, please keep in mind that SIIT-DC is just > description of how one can go about deploy SIIT [RFC6145] in a > particular environment; it does not specify any new protocols or > algorithms. If there are inherent security problems inherent in the > protocols used by SIIT-DC, then the right place to deal with or > document those problems is in the specifications of those protocols, > not in a use-case document such as I-D.ietf-v6ops-siit-dc. > > Tore Thank you for your reply and considerations. Best regards, Tobias --------------070701040302040600040702 Content-Type: text/html; charset=windows-1252 Content-Transfer-Encoding: 7bit Thank you for your feedback.
answers inline.

On 07/10/15 09:55, Tore Anderson wrote:
Hello Tobias, and thank you very much for your feedback!

My comments in-line.

* Tobias Gondrom <tobias.gondrom@gondrom.org>


One main question: Technically this document looks to me more like 
standards and not informational as I think we need to enforce consistent 
behaviour and restrictions to ensure overall consistency. IMO we need to 
spell this out more explicitly. This is a repeating element, I 
encountered in this review across multiple sections of the document (see 
explanations below).

The only standard/protocol used SIIT [RFC6145] plus its EAM extension
[I-D.ietf-v6ops-siit-eam]. That is, if an operator has an
implementation of RFC6145 and I-D.ietf-v6ops-siit-eam, then the
operator can use that implementation to deploy SIIT-DC as described in
I-D.ietf-v6ops-siit-dc.

No additional protocols, algorithms, or features is used beyond those
already specified in RFC6145 and I-D.ietf-v6ops-siit-eam are required.
This is the reason on why I-D.ietf-v6ops-siit-dc is Informational; it
merely describes one way to deploy the standard protocols defined
elsewhere in the context of a specific use case.


COMMENTS:
0. starting with a personal comment:in general it is nice to move again 
a step closer to a V6, even though these series of baby transition steps 
are quite small. Whether we need this in addition to other existing 64 
protocols, I leave to the V6ops WG who has much better insight into this 
one than me.

1. This document has two strong requirements, that should be expressed 
in 2119 language.
1.1. the SIIT algorithm MUST be used.

Ok, how about this (in section 2):

   SIIT-DC Border Relay (BR)
      A device or a logical function that performs stateless protocol
      translation between IPv4 and IPv6. It MUST do so in accordance with
      [RFC6145] and [I-D.ietf-v6ops-siit-eam].

WFM. 


1.2. And the security considerations section MUST be followed.

Like so?

   If a Network-Specific Prefix from the provider's own address space is
   chosen for the translation prefix, as recommended in Section 4.4,
   care MUST be taken [...]
WFM. Thanks. 


2. Section 7 Security Considerations:
2.1. The listed concern is correct. The listed mitigation step may work, 
I would suggest to also add a sentence when you do choose this distinct 
translation prefix, you also must configure your FW/GW at the edge to 
enforce the integrity of that naming scheme (e.g. by dropping packets 
from that prefix if not coming from a IPv4) to make sure there is no 
ambiguity or spoofing. We must avoid a blend of translated and 
untranslated addresses in the same prefix if you use the prefix as a 
marker.

I disagree with this. RFC6052 makes a distinction between
"IPv4-converted" IPv6 addresses (which occur in packets that were
originally IPv4 packets) and "IPv4-translatable" IPv6 addresses (which
are normal unicast addreses that happen to follow the address format
specified in RFC6052).

If I understand you correctly, what you propose here would be
essentially mean forbidding the use of IPv4-translatable IPv6
addresses. In my opinion, I-D.ietf-v6ops-siit-dc is not the right place
for such an undertaking, that would require updates to RFC6052 and
RFC6145 (and probably others).

ACK. It was a suggestion. I still think that there is a potential security risk coming from that, but I leave this to the WG to decide. 



2.2. I am not sure you covered all the security concerns in this section.
2.2.1. e.g. we might want to expand more on the risk that the DC does by 
design not see that we translate this down to V4 at the edge and thereby 
loose some of the capabilities of V6 beyond the edge. Therefore the DC 
may assume a fully V6 conformant client, which is not the case. This may 
lead to the need of further filtering or protection mechanisms at the edge.

I am having difficulty understanding exactly what the possibly security
concern you have here is, and how it would need to be mitigated.

Keep in mind that one can perform IPv4-to-IPv6 translation anywhere on
the Internet. In other words, any IPv6 packet received by any node is
possibly translated from IPv4. So if there truly is a security concern
here, it would apply to any deployment of IPv6 (except isolated
networks not connected to the Internet).

If you'd like a demo of the above, by the way, you can visit
http://87.238.60.1/. This traffic is routed to one of my SIIT-DC BRs
located in Norway or Sweden, and afterwards forwarded as IPv6 to the
site "www.whatismyipv6.com" in the USA (I have no affiliation with this
site and it's not in my network). This means that if the
www.whatismyipv6.com web site incorrectly "assumes [your connection is
from] a fully V6 conformat client", and this assumption somehow causes
a security concern, then that security concern would have much wider
ramifications than being of interest only to operators who are
deploying SIIT-DC and thus are likely to read I-D.ietf-v6ops-siit-dc.
It would also apply to RFC6146, as you can use Stateful NAT64 to
accomplish the same thing as I use SIIT-DC.


2.2.2. the authors should expand more on architecture requirements not 
to put two of these translators in sequence (see possibly conflicts with 

This is exactly the subject being discussed in
I-D.ietf-v6ops-siit-dc-2xlat, which is referred to numerous times.

Noted. 


2.2.3. the authors should expand more on restrictions of putting this in 
a mixed environment with NAT64

To the best of my knowledge, there exist no such restrictions, beyond
the fact that you'd need to use differing RFC6052 prefixes. This fact is
mentioned in section 4.4.


3. section "4.4. Choice of Translation Prefix"
- states: "Either a Network-Specific Prefix (NSP) from the provider's 
own IPv6 address space or the IANA-allocated Well-Known Prefix 
64:ff9b::/96  (WKP) may be used."
I think this needs to be a MUST instead of the "may".

Could you elaborate on why? From a technical point of view, the WKP
works just as well as any NSP, and if the operator really wants to use
it (in spite of the stated disadvantages), I do not see that I have any
justification for denying that outright.

Note that RFC6052 also discusses the use of a WKP vs an NSP at length in
section 3.3; while it advises the use of an NSP, it does not make it a
MUST. I fail to see a rationale for making I-D.ietf-v6ops-siit-dc be
more restrictive.

One of my concerns is to avoid the case where addresses from none of the two would be used and potential risks arising from that. I am also not sure why we should leave this open as a "may" instead of locking this down with a "MUST". However, my knowledge is not as deep as yours on this, so I leave this to you and your WG. 


      

        
Also I do not like 
the ambiguity of prefixes here. We need to make it clear that this 
translastion MUST be consistent across all edges to the DC.


      

      
Section 3 states:

   Any number of BRs may exist simultaneously in the IDC's network
   infrastructure, as long as they all configured with the same
   Translation Prefix and an identical EAM Table.

Is this somehow unclear? If so, could you propose an improved text?



      

        
4. section 4.5. routing considerations:
- do we need to specify that all alternate BRs must use the same 
algorithm and all MUST be able to support SIIT-DC?


      

      
There exists only one definition of "BR" in the document:

   SIIT-DC Border Relay (BR)
      A device or a logical function that performs stateless protocol
      translation between IPv4 and IPv6 in accordance with [RFC6145] and
      [I-D.ietf-v6ops-siit-eam].

It would appear to me, therefore, that the document already makes the
statement you propose. That is, it is impossible for an alternate BR to
use another translation algorithm, because if it did so, it would by
definition no longer be a BR.


    

    That might be the case. It might not have been clear to me during
    the review. Therefore my question. Please consider this only as a
    suggestion or question for your decision. 

    

    

      

      

        
5. section 4.6:
we say "This should be understood to include all servers,"
I am not sure this is only a "should". From a lingual perspective it 
might be meaning that it "it should be understood that it requires..." 
but as the word "required" is not used, it is a bit unclear to me, 
whether that is also understood by the author/WG for this protocol.


      

      
Ack. How about this?

    [..] the BRs must be located somewhere between the IPv4 Internet
    and the application delivery stack - which includes all servers,
    load balancers, firewalls, intrusion detection systems, and similar
    devices that are processing traffic to a greater extent than merely
    forwarding it.

    

    

    WFM. Thank you. 

    

      



      

        
6. section 4.8.:
we use "To facilitate reliable delivery of such ICMPv6 errors n SIIT-DC 
operator SHOULD implement the recommendations in [RFC6791] in the BRs." 
Is there a security consideration on the impact what happens if RFC6791 
is not followed and ICMPv6 errors are dropped? What would be the 
security implications of loosing not transmitting these messages?


      

      
That is a question for RFC6791, which states the following:

6.  Security Considerations

   This document recommends the generation of IPv4 ICMP messages from
   IPv6 ICMP messages.  These messages would otherwise have been
   discarded.  New considerations are not expected to result from this
   change.  As with a number of ICMP messages, a spoofed source address
   may result in replies arriving at hosts that did not expect them
   using the facility of the translator.



      

        
7. section 4.9. "MTU and Fragmentation":
it is good that we spell out the series of key differences between IPv4 
and IPv6 relating to packet sizes and fragmentation that one needs to 
consider when deploying SIIT-DC. I am not sure a "should" is sufficient 
here.


      

      
Ack, will change to "must".

    

    

    Thank you. 

    

      



      

        
Furthermore, it would be good to consider whether we need to 
specify and mandate the specific behaviour when encountering these 
limitations to avoid inconsistent behaviour from the BR if these 
parameters are encountered and this might be exploited as an attack vector.


      

      
True, but on the other hand if such attack vectors exists it is
extremely likely that these are not specific to SIIT-DC, but in SIIT
[RFC6145] itself and in quite possibly other derivative protocols such
as Stateful NAT64 [RFC6145], MAP-T [RFC7599], and likely others.

As I mentioned earlier, please keep in mind that SIIT-DC is just
description of how one can go about deploy SIIT [RFC6145] in a
particular environment; it does not specify any new protocols or
algorithms. If there are inherent security problems inherent in the
protocols used by SIIT-DC, then the right place to deal with or
document those problems is in the specifications of those protocols,
not in a use-case document such as I-D.ietf-v6ops-siit-dc.

Tore


    

    

    

    Thank you for your reply and considerations. 

    

    Best regards, Tobias

    

  


--------------070701040302040600040702--


From nobody Thu Oct 29 04:41:59 2015
Return-Path: 
X-Original-To: secdir@ietfa.amsl.com
Delivered-To: secdir@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 02D9A1B2D81 for ; Thu, 29 Oct 2015 04:41:58 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.121
X-Spam-Level: 
X-Spam-Status: No, score=-1.121 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, SPF_NEUTRAL=0.779] autolearn=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id maCRjpLQyv_c for ; Thu, 29 Oct 2015 04:41:56 -0700 (PDT)
Received: from mail.kivinen.iki.fi (fireball.acr.fi [83.145.195.1]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id AE3D61B2D82 for ; Thu, 29 Oct 2015 04:41:55 -0700 (PDT)
Received: from fireball.acr.fi (localhost [127.0.0.1]) by mail.kivinen.iki.fi (8.15.1/8.14.8) with ESMTPS id t9TBfpQ1018706 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=NO) for ; Thu, 29 Oct 2015 13:41:51 +0200 (EET)
Received: (from kivinen@localhost) by fireball.acr.fi (8.15.1/8.14.8/Submit) id t9TBfmr2022107; Thu, 29 Oct 2015 13:41:48 +0200 (EET)
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit
Message-ID: <22066.1532.325187.542719@fireball.acr.fi>
Date: Thu, 29 Oct 2015 13:41:48 +0200
From: Tero Kivinen 
To: secdir@ietf.org
X-Edit-Time: 0 min
X-Total-Time: 0 min
Archived-At: 
Subject: [secdir] Assignments
X-BeenThere: secdir@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
Reply-To: secdir-secretary@mit.edu
List-Id: Security Area Directorate 
List-Unsubscribe: , 
List-Archive: 
List-Post: 
List-Help: 
List-Subscribe: , 
X-List-Received-Date: Thu, 29 Oct 2015 11:41:58 -0000

Review instructions and related resources are at:
http://tools.ietf.org/area/sec/trac/wiki/SecDirReview

Tom Yu is next in the rotation.

For telechat 2015-11-19

Reviewer                 LC end     Draft
Eric Osterweil         T 2015-10-20 draft-ietf-mpls-lsp-ping-mpls-tp-oam-conf-14

Last calls and special requests:

Donald Eastlake          2015-09-11 draft-ietf-dane-openpgpkey-05
Daniel Kahn Gillmor    E None       draft-ietf-rtcweb-security-08
Chris Inacio             2015-10-02 draft-ietf-lwig-ikev2-minimal-04
Warren Kumari            2015-10-26 draft-ietf-ipfix-mib-variable-export-09
Alexey Melnikov          2015-10-27 draft-mglt-ipsecme-clone-ike-sa-06
Takeshi Takahashi      E None       draft-ietf-netconf-yang-push-00
Hannes Tschofenig        2015-10-30 draft-ietf-isis-route-preference-02
Tina TSOU                2015-11-02 draft-ietf-pcp-third-party-id-option-03
Carl Wallace             2015-11-09 draft-ietf-ccamp-flexible-grid-rsvp-te-ext-03
Brian Weis             E None       draft-ietf-cdni-uri-signing-05
Klaas Wierenga           2015-11-09 draft-ietf-pce-pcep-domain-sequence-09
Paul Wouters             2015-11-10 draft-ietf-straw-b2bua-dtls-srtp-08
Frank Xialiang           2015-11-09 draft-ietf-teas-rsvp-te-domain-subobjects-03
-- 
kivinen@iki.fi


From nobody Thu Oct 29 20:18:04 2015
Return-Path: 
X-Original-To: secdir@ietfa.amsl.com
Delivered-To: secdir@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 74DD41B3575; Thu, 29 Oct 2015 20:18:03 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: 2.497
X-Spam-Level: **
X-Spam-Status: No, score=2.497 tagged_above=-999 required=5 tests=[BAYES_40=-0.001, HELO_EQ_JP=1.244, HOST_EQ_JP=1.265, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01] autolearn=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id kRZ5ejUXEYzq; Thu, 29 Oct 2015 20:18:02 -0700 (PDT)
Received: from ns1.nict.go.jp (ns1.nict.go.jp [IPv6:2001:df0:232:300::1]) by ietfa.amsl.com (Postfix) with ESMTP id BEB8A1B3574; Thu, 29 Oct 2015 20:18:01 -0700 (PDT)
Received: from gw1.nict.go.jp (gw1.nict.go.jp [133.243.18.250]) by ns1.nict.go.jp  with ESMTP id t9U3Hx0R063634; Fri, 30 Oct 2015 12:17:59 +0900 (JST)
Received: from mail1.nict.go.jp (mail1.nict.go.jp [133.243.18.14]) by gw1.nict.go.jp  with ESMTP id t9U3HxDo063626; Fri, 30 Oct 2015 12:17:59 +0900 (JST)
Received: from VAIO (unknown [133.243.119.37]) (using TLSv1.2 with cipher DHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by mail1.nict.go.jp (NICT Mail Spool Server1) with ESMTPS id 5DEBC3CA7; Fri, 30 Oct 2015 12:17:59 +0900 (JST)
From: "Takeshi Takahashi" 
To: 
Date: Fri, 30 Oct 2015 12:17:57 +0900
Message-ID: <007301d112c1$93241aa0$b96c4fe0$@nict.go.jp>
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
X-Mailer: Microsoft Outlook 14.0
Thread-Index: AdESwX8f3wXFpctfRJGGcvzjuzbYgw==
Content-Language: ja
X-Virus-Scanned: clamav-milter 0.98.7 at zenith1
X-Virus-Status: Clean
Archived-At: 
Cc: iesg@ietf.org, netconf-chairs@tools.ietf.org, secdir@ietf.org
Subject: [secdir] Early secdir review of draft-clemm-netconf-yang-push-02 (draft-ietf-netconf-yang-push-00)
X-BeenThere: secdir@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: Security Area Directorate 
List-Unsubscribe: , 
List-Archive: 
List-Post: 
List-Help: 
List-Subscribe: , 
X-List-Received-Date: Fri, 30 Oct 2015 03:18:03 -0000

Hello,

I have reviewed this document as part of the security directorate's ongoing
effort to review all IETF documents being processed by the IESG.
These comments were written primarily for the benefit of the security area
directors.
Document editors and WG chairs should treat these comments just like any
other last call comments.

[overall feeling on this draft]

As an early review, this document is fine.
I believe the topic is very important.

[overview]

This draft deals with the push mechanism of the YANG datastore's updats.
The usability of push mechanism is obvious.
The draft elaborates parameters needed for the mechanism, including filters
and subscription-config.

[questions]

It was fun to read the article, though I am not that familiar with this
area.

Here are several clarification questions.
I would appreciate if you could answer them to deepen my understanding.

1.
Let me assue that I send a create-subscription message with the period=500
parameter. If the server can only send updates with period=1000, what will
happen?
Is the subscription declined? Or is the subscription accepted with
period=1000?

If it is declined, how can I know the supported period value?
I guess the error response message does not explain the minimum value for
the period.

2.
I guess arbitrary value can be set for stop-time.
Then, the updates will be sent periodically for very long time, once the
subscription is accepted.
I am wondering if we need to check whether the subscriber is still alive
(whether the subscriber is still the authorized one).
Would you have any means to check the subscriber status ? (I guess no)
Or, do we need to specify stop-time that is not that far from now to avoid
any accident?

I am not sure how sensitive the update information is, so it could be a
nonsense question...

3.
Are you going to use the IANA tables for the values, such as the "encoding"
field?

4.
Regarding the security consideration, I have got the impression that the
current text focuses on DDoS scenarios.
How about the false update?
Malicious entity may send false update to the subscriber.
The false update may let the subscriber mis-judge the situation and initiate
some operations.
Is it going to be a viable concern?


Thanks, and kind regards,
Take




From nobody Thu Oct 29 22:33:49 2015
Return-Path: 
X-Original-To: secdir@ietfa.amsl.com
Delivered-To: secdir@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 5FDD21B3738; Thu, 29 Oct 2015 22:33:40 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -14.511
X-Spam-Level: 
X-Spam-Status: No, score=-14.511 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_HI=-5, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id MFI7fa-awFCG; Thu, 29 Oct 2015 22:33:39 -0700 (PDT)
Received: from bgl-iport-3.cisco.com (bgl-iport-3.cisco.com [72.163.197.27]) (using TLSv1 with cipher RC4-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id AEB201B3736; Thu, 29 Oct 2015 22:33:37 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=2737; q=dns/txt; s=iport; t=1446183218; x=1447392818; h=subject:to:references:cc:from:message-id:date: mime-version:in-reply-to:content-transfer-encoding; bh=ZANYjH5YERb/cO2ii18NC0lLm5xcgCdVmPmBLtCRr+4=; b=WQ9dwQMagXi7ILg2PW/xyCbd9x+KgHYmpOiqe78f53BoxPWNgsC6Ql8N DHXe1zR0kwaEFP3a4zRr8dWttWeGtQpSeNKd8zBTHKPCl2IP5GfhOHyC7 XlW+6NV6KTJSPYG+hI0d1+CtYB2dcMH2vw/8eNYlZqBJEuY5uvhyfnmit o=;
X-IronPort-Anti-Spam-Filtered: true
X-IronPort-Anti-Spam-Result: A0DNAQC0ADNW/xjFo0hexC0BDYFahhkCgXIUAQEBAQEBAYEKhDYBAQQ4NgoBEAshBBIPCQMCAQIBRQYBDAgBAYgsxGUBAQEBAQEBAQEBAQEBAQEBAQEBAQEYhneEfoRFhHsBBI4QiDONJYFZh0AjiiqIUh8BAUKEEy+GMgEBAQ
X-IronPort-AV: E=Sophos;i="5.20,217,1444694400"; d="scan'208";a="21622546"
Received: from vla196-nat.cisco.com (HELO bgl-core-1.cisco.com) ([72.163.197.24]) by bgl-iport-3.cisco.com with ESMTP; 30 Oct 2015 05:33:32 +0000
Received: from [10.70.231.100] (tky-vpn-client-231-100.cisco.com [10.70.231.100]) by bgl-core-1.cisco.com (8.14.5/8.14.5) with ESMTP id t9U5XUpj032743; Fri, 30 Oct 2015 05:33:30 GMT
To: Takeshi Takahashi , draft-ietf-netconf-yang-push.all@tools.ietf.org
References: <007301d112c1$93241aa0$b96c4fe0$@nict.go.jp>
From: Benoit Claise 
Message-ID: <56330110.9020708@cisco.com>
Date: Fri, 30 Oct 2015 14:33:04 +0900
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:38.0) Gecko/20100101 Thunderbird/38.3.0
MIME-Version: 1.0
In-Reply-To: <007301d112c1$93241aa0$b96c4fe0$@nict.go.jp>
Content-Type: text/plain; charset=windows-1252; format=flowed
Content-Transfer-Encoding: 7bit
Archived-At: 
Cc: NETCONF , netconf-chairs@tools.ietf.org, secdir@ietf.org
Subject: Re: [secdir] Early secdir review of c-02 (draft-ietf-netconf-yang-push-00)
X-BeenThere: secdir@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: Security Area Directorate 
List-Unsubscribe: , 
List-Archive: 
List-Post: 
List-Help: 
List-Subscribe: , 
X-List-Received-Date: Fri, 30 Oct 2015 05:33:40 -0000

Thanks Take,

[bcc'ed the IESG, which was in the initial distribution]
I would like this discussion to take place on the NETCONF mailing list, 
which I added.

Note also that this draft is now a WG document: draft-ietf-netconf-yang-push

Regards, Benoit
> Hello,
>
> I have reviewed this document as part of the security directorate's ongoing
> effort to review all IETF documents being processed by the IESG.
> These comments were written primarily for the benefit of the security area
> directors.
> Document editors and WG chairs should treat these comments just like any
> other last call comments.
>
> [overall feeling on this draft]
>
> As an early review, this document is fine.
> I believe the topic is very important.
>
> [overview]
>
> This draft deals with the push mechanism of the YANG datastore's updats.
> The usability of push mechanism is obvious.
> The draft elaborates parameters needed for the mechanism, including filters
> and subscription-config.
>
> [questions]
>
> It was fun to read the article, though I am not that familiar with this
> area.
>
> Here are several clarification questions.
> I would appreciate if you could answer them to deepen my understanding.
>
> 1.
> Let me assue that I send a create-subscription message with the period=500
> parameter. If the server can only send updates with period=1000, what will
> happen?
> Is the subscription declined? Or is the subscription accepted with
> period=1000?
>
> If it is declined, how can I know the supported period value?
> I guess the error response message does not explain the minimum value for
> the period.
>
> 2.
> I guess arbitrary value can be set for stop-time.
> Then, the updates will be sent periodically for very long time, once the
> subscription is accepted.
> I am wondering if we need to check whether the subscriber is still alive
> (whether the subscriber is still the authorized one).
> Would you have any means to check the subscriber status ? (I guess no)
> Or, do we need to specify stop-time that is not that far from now to avoid
> any accident?
>
> I am not sure how sensitive the update information is, so it could be a
> nonsense question...
>
> 3.
> Are you going to use the IANA tables for the values, such as the "encoding"
> field?
>
> 4.
> Regarding the security consideration, I have got the impression that the
> current text focuses on DDoS scenarios.
> How about the false update?
> Malicious entity may send false update to the subscriber.
> The false update may let the subscriber mis-judge the situation and initiate
> some operations.
> Is it going to be a viable concern?
>
>
> Thanks, and kind regards,
> Take
>
>
>
> .
>


From nobody Sat Oct 31 07:55:30 2015
Return-Path: 
X-Original-To: secdir@ietfa.amsl.com
Delivered-To: secdir@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 4641E1A0197 for ; Sat, 31 Oct 2015 07:55:26 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -4.2
X-Spam-Level: 
X-Spam-Status: No, score=-4.2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001] autolearn=unavailable
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Yp4PqW9zhCRf for ; Sat, 31 Oct 2015 07:55:24 -0700 (PDT)
Received: from eu-smtp-delivery-143.mimecast.com (eu-smtp-delivery-143.mimecast.com [207.82.80.143]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id DBD361A0149 for ; Sat, 31 Oct 2015 07:55:23 -0700 (PDT)
Received: from emea-cam-gw1.Emea.Arm.com (fw-tnat.cambridge.arm.com [217.140.96.140]) (Using TLS) by eu-smtp-1.mimecast.com with ESMTP id uk-mta-22-3uExwklBSwua4t0cck_xVw-1; Sat, 31 Oct 2015 14:55:20 +0000
Received: from GB-CAM-EXCAS2.Emea.Arm.com (10.1.106.66) by emea-cam-gw1.Emea.Arm.com (10.1.248.203) with Microsoft SMTP Server (TLS) id 8.3.298.1; Sat, 31 Oct 2015 14:55:20 +0000
Received: from emea01-db3-obe.outbound.protection.outlook.com (10.1.2.79) by nebula.arm.com (10.1.106.66) with Microsoft SMTP Server (TLS) id 14.3.235.1; Sat, 31 Oct 2015 14:55:19 +0000
Received: from HE1PR08MB0732.eurprd08.prod.outlook.com (10.163.179.30) by HE1PR08MB0732.eurprd08.prod.outlook.com (10.163.179.30) with Microsoft SMTP Server (TLS) id 15.1.312.18; Sat, 31 Oct 2015 14:55:16 +0000
Received: from HE1PR08MB0732.eurprd08.prod.outlook.com ([10.163.179.30]) by HE1PR08MB0732.eurprd08.prod.outlook.com ([10.163.179.30]) with mapi id 15.01.0312.014; Sat, 31 Oct 2015 14:55:16 +0000
From: Hannes Tschofenig 
To: "draft-ietf-isis-route-preference.all@ietf.org" 
Thread-Topic: secdir review of draft-ietf-isis-route-preference-02
Thread-Index: AdET6dtCQaKbT14zRE60LmuEBcaHDQ==
Date: Sat, 31 Oct 2015 14:55:15 +0000
Message-ID: 
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
x-originating-ip: [118.243.125.63]
x-microsoft-exchange-diagnostics: 1; HE1PR08MB0732; 5:qKtgjSbWn1kl3vc5RLW1TMvCO/l4JgeUikduXWneXo05jvxbx2aOJXvHzkbbQv76gAKDITvxll5Pw13Xd54WI9c5VbpF2VfeXWlgDk69djZqVIdv5hbf8TpbPJMDgez8U+PXGUACxLG6qajRo+svMA==; 24:Ez+eaDAdQo8h5L1hYmGspfs9VaRrUO+nHccVhT4GhH6MX4jwltM0ksbZGeIGLThTe0b+wiIUu3mag1e0W5eOBD1an3P1wuV+UfiEvyTZvmU=; 20:3E7/qAPVzgiOr91+vzLAM5R2JI/mRzaoWoSHFI9CGLgBfMpg1ifh6Vb5Ixn9KtmIK9s8/g3GAGFRqiNaEwle3nnplg0KePOtTKs/htrJFudkAMohEvPPhQwNkxwaolV5d0z26jLNXmaQNNq6n9icVy+OWanq+lTTcKNkrv2+GFs=
x-microsoft-antispam: UriScan:;BCL:0;PCL:0;RULEID:;SRVR:HE1PR08MB0732;
x-microsoft-antispam-prvs: 
x-exchange-antispam-report-test: UriScan:(108003899814671);
x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(601004)(2401047)(8121501046)(520078)(5005006)(10201501046)(3002001); SRVR:HE1PR08MB0732; BCL:0; PCL:0; RULEID:; SRVR:HE1PR08MB0732; 
x-forefront-prvs: 07467C4D33
x-forefront-antispam-report: SFV:NSPM; SFS:(10009020)(6009001)(199003)(189002)(102836002)(10400500002)(5001960100002)(587384001)(87936001)(5002640100001)(122556002)(2501003)(2900100001)(40100003)(5008740100001)(19625215002)(76576001)(19300405004)(450100001)(230783001)(105586002)(16236675004)(19580395003)(106356001)(229853001)(11100500001)(15975445007)(189998001)(77096005)(81156007)(5003600100002)(2351001)(66066001)(97736004)(5001920100001)(54356999)(92566002)(110136002)(33656002)(86362001)(101416001)(74316001)(5007970100001)(5004730100002)(50986999); DIR:OUT; SFP:1101; SCL:1; SRVR:HE1PR08MB0732; H:HE1PR08MB0732.eurprd08.prod.outlook.com; FPR:; SPF:None; PTR:InfoNoRecords;  A:1; MX:1; LANG:en; 
spamdiagnosticoutput: 1:23
spamdiagnosticmetadata: NSPM
MIME-Version: 1.0
X-MS-Exchange-CrossTenant-originalarrivaltime: 31 Oct 2015 14:55:15.7960 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: f34e5979-57d9-4aaa-ad4d-b122a662184d
X-MS-Exchange-Transport-CrossTenantHeadersStamped: HE1PR08MB0732
X-OriginatorOrg: arm.com
X-MC-Unique: 3uExwklBSwua4t0cck_xVw-1
Content-Type: multipart/alternative; boundary="_000_HE1PR08MB07327F54295D58A7DE72DBFAFA2E0HE1PR08MB0732eurp_"
Archived-At: 
Cc: "iesg@ietf.org" , "secdir@ietf.org" 
Subject: [secdir] secdir review of draft-ietf-isis-route-preference-02
X-BeenThere: secdir@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: Security Area Directorate 
List-Unsubscribe: , 
List-Archive: 
List-Post: 
List-Help: 
List-Subscribe: , 
X-List-Received-Date: Sat, 31 Oct 2015 14:55:26 -0000

--_000_HE1PR08MB07327F54295D58A7DE72DBFAFA2E0HE1PR08MB0732eurp_
Content-Type: text/plain; charset=WINDOWS-1252
Content-Transfer-Encoding: quoted-printable

I have reviewed this document as part of the security directorate's
ongoing effort to review all IETF documents being processed by the
IESG.  These comments were written primarily for the benefit of the
security area directors.  Document editors and WG chairs should treat
these comments just like any other last call comments.


In my view this document is ready.

The document fixes interoperability issues with the definition of previousl=
y published IS-IS TLVs.
While I am not an IS-IS expert and the document is not meant to be read as =
a standalone I do not see any security issues raised by the described clari=
fications.


________________________________

-- IMPORTANT NOTICE: The contents of this email and any attachments are con=
fidential and may also be privileged. If you are not the intended recipient=
, please notify the sender immediately and do not disclose the contents to =
any other person, use it for any purpose, or store or copy the information =
in any medium. Thank you.

--_000_HE1PR08MB07327F54295D58A7DE72DBFAFA2E0HE1PR08MB0732eurp_
Content-Type: text/html; charset=WINDOWS-1252
Content-Transfer-Encoding: quoted-printable











I have reviewed this document a=
s part of the security directorate's



ongoing effort to review all IE=
TF documents being processed by the



IESG.  These comments were=
 written primarily for the benefit of the



security area directors.  =
Document editors and WG chairs should treat



these comments just like any ot=
her last call comments.


 


In my view this document is =
ready.



 


The document fixes interoperabi=
lity issues with the definition of previously published IS-IS TLVs.



While I am not an IS-IS expert =
and the document is not meant to be read as a standalone I do not see any s=
ecurity issues raised by the described clarifications.

 









-- IMPORTANT NOTICE: The contents of this email and any attachments are con=
fidential and may also be privileged. If you are not the intended recipient=
, please notify the sender immediately and do not disclose the contents to =
any other person, use it for any
 purpose, or store or copy the information in any medium. Thank you.





--_000_HE1PR08MB07327F54295D58A7DE72DBFAFA2E0HE1PR08MB0732eurp_--