From nobody Sat Jul 1 13:34:19 2017 Return-Path: X-Original-To: secdir@ietfa.amsl.com Delivered-To: secdir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 78D98129AB7; Sat, 1 Jul 2017 13:34:13 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.398 X-Spam-Level: X-Spam-Status: No, score=-2.398 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, FREEMAIL_FORGED_FROMDOMAIN=0.199, FREEMAIL_FROM=0.001, HEADER_FROM_DIFFERENT_DOMAINS=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id XeQaN3Np7lDe; Sat, 1 Jul 2017 13:34:11 -0700 (PDT) Received: from mail-qk0-x22c.google.com (mail-qk0-x22c.google.com [IPv6:2607:f8b0:400d:c09::22c]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 7CBAD126BFD; Sat, 1 Jul 2017 13:34:11 -0700 (PDT) Received: by mail-qk0-x22c.google.com with SMTP id p21so123306381qke.3; Sat, 01 Jul 2017 13:34:11 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=sender:mime-version:subject:from:in-reply-to:date:cc:message-id :references:to; bh=YExZneN8UMCwHT9fCjQ3w099en3+pfW4HdXkhHcTsXc=; b=EPoJjgK6y5ZMlmMr2rJE4gqHNMCUbighlsygO4DwtojXCaAcpYJm+rs78196E8+7Ub VVv9CtFdVR6ZMtxbLL1BsHvR9kMFwWMcfz/bWOsbH8nMMyau12rvI8kVf7dpKRgU3BYT +NDvZ8FMFW/xRQTmJQ+86ahvAbeiSq4z+zUeEJR+t3O2C1UhlVmVREeOD/bY1BRCklC2 aKGwLC0LEkIj49YQjbvQpS5NrpuPrUPRSLnagNw6kSK4EnnjzEgMd1xbA4SpqgqtyIuo iDISOR6DGSPFT2XuWhVbxL4BRKzUlMREH+WzuRFKdN1A8LldC10F3WXKXrhRv/cZ5IUJ y2iw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:sender:mime-version:subject:from:in-reply-to :date:cc:message-id:references:to; bh=YExZneN8UMCwHT9fCjQ3w099en3+pfW4HdXkhHcTsXc=; b=UfBajVIlmj3LDEjxRi2in6x+7B2yvPbE/HA858RWbEvPRBe7PKNJShFVvuMS+7+p94 DvNcOaUGqEhsL9XyaRGACfx4Bz7EVx4SRh6tF2Wo/c+Ee+Ox1me8HkIx5/t2SWopotqO IgmMa1RpkiSRQpwIgCMAr6+mnjchuZSdyJloW5Rpv0BdlU+5l5HKfNTUmv4z1dnM9k8o dZSmmkHaXKKNB/z8Dz2twtDyfGdo0or0o+Fb5BbJB/8OAMMDIKCTcaPdjMKEZfbWVhB5 6PWMMupuo40noWTJvi6TbTEReWgh5WcLQJO4JFptOesXz9a+dJsltPKRcIz3JiGPwda/ mA/w== X-Gm-Message-State: AKS2vOxRv1VcnKQGTytKHYC0fWEk65WXLhfRTWEIOTEUk8KDQCju4Dhl IM8RLk1Z5kr7tg== X-Received: by 10.55.23.197 with SMTP id 66mr33341228qkx.67.1498941250635; Sat, 01 Jul 2017 13:34:10 -0700 (PDT) Received: from ?IPv6:2602:306:ccb0:73f9:cca:31e4:cb2c:2296? ([2602:306:ccb0:73f9:cca:31e4:cb2c:2296]) by smtp.gmail.com with ESMTPSA id i29sm9859202qkh.4.2017.07.01.13.34.10 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Sat, 01 Jul 2017 13:34:10 -0700 (PDT) Sender: Carlos Pignataro Content-Type: multipart/alternative; boundary="Apple-Mail=_08BB7F5F-9137-4891-BD64-4F78331962AD" Mime-Version: 1.0 (Mac OS X Mail 10.3 \(3273\)) From: Carlos Pignataro In-Reply-To: <000a01d2f1a2$473494f0$d59dbed0$@nict.go.jp> Date: Sat, 1 Jul 2017 16:34:07 -0400 Cc: draft-ietf-spring-oam-usecase.all@ietf.org, The IESG , secdir@ietf.org X-Mao-Original-Outgoing-Id: 520633312.807809-a71b715c279d5537f08aff8ab1d4ae16 Message-Id: <16E8E139-A11A-48CA-B126-ABAC18682242@cisco.com> References: <000a01d2f1a2$473494f0$d59dbed0$@nict.go.jp> To: Takeshi Takahashi X-Mailer: Apple Mail (2.3273) Archived-At: Subject: Re: [secdir] Secdir review of draft-ietf-spring-oam-usecase-06 X-BeenThere: secdir@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: Security Area Directorate List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 01 Jul 2017 20:34:13 -0000 --Apple-Mail=_08BB7F5F-9137-4891-BD64-4F78331962AD Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=utf-8 Dear Take, Many thanks for your review! Agreed, elaboration was missing on the issues you list. Please note we = significantly revamped the security considerations section in response = to your as well as Alvaro=E2=80=99s review comments. Please check the = forthcoming revision. Best, =E2=80=94 Carlos. > On Jun 30, 2017, at 9:10 AM, Takeshi Takahashi = > = wrote: >=20 > I have reviewed this document as part of the security directorate's = ongoing effort to review all IETF documents being processed by the IESG. > These comments were written primarily for the benefit of the security = area directors. > Document editors and WG chairs should treat these comments just like = any other last call comments. > =20 > [General summary] > This document has small nits. > =20 > [Clarification Questions] > In the "Security Considerations" section, the draft says that "some = fundamental MPLS security properties need to be discussed." > It would be nicer if you could elaborate more details of the = "properties" in the section or put some reference that describes the = details. > =20 > The "Security Considerations" section in RFC 4379 says, "Overall, the = security needs for LSP ping are similar to those of ICMP" and elaborates = issues such as DoS attack and spoofing. > Is the proposed MPLS monitoring system free from these issues? > Since this draft discusses the path monitoring system in coparison = with RFC 4379 from time to time, it would be nice if these security = issues are also addressed. (Indeed, I could not find the term "denial" = in this document at all.) > =20 > Thank you. > Take =E2=80=94 Carlos Pignataro, carlos@cisco.com =E2=80=9CSometimes I use big words that I do not fully understand, to = make myself sound more photosynthesis." --Apple-Mail=_08BB7F5F-9137-4891-BD64-4F78331962AD Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset=utf-8 Dear Take,

Many thanks for your review!

Agreed, elaboration was missing on the = issues you list. Please note we significantly revamped the security = considerations section in response to your as well as Alvaro=E2=80=99s = review comments. Please check the forthcoming revision.

Best,

=E2=80=94 = Carlos.

On Jun 30, 2017, at 9:10 AM, Takeshi = Takahashi <takeshi_takahashi@nict.go.jp> wrote:

I have reviewed = this document as part of the security directorate's ongoing effort to = review all IETF documents being processed by the IESG.
These comments were written = primarily for the benefit of the security area directors.
Document editors and WG chairs = should treat these comments just like any other last call comments.
 
[General = summary]
This document has = small nits.
 
[Clarification = Questions]
In the "Security = Considerations" section, the draft says that "some fundamental MPLS = security properties need to be discussed."
It would be nicer if you could = elaborate more details of the "properties" in the section or put some = reference that describes the details.
 
The "Security = Considerations" section in RFC 4379 says, "Overall, the security needs = for LSP ping are similar to those of ICMP" and elaborates issues such as = DoS attack and spoofing.
Is = the proposed MPLS monitoring system free from these issues?
Since this draft discusses the = path monitoring system in coparison with RFC 4379 from time to time, it = would be nice if these security issues are also addressed. (Indeed, I = could not find the term "denial" in this document at all.)
 
Thank you.
Take

=E2=80=94
Carlos Pignataro, carlos@cisco.com

=E2=80=9CSometimes I use big = words that I do not fully understand, to make myself sound = more photosynthesis."

= --Apple-Mail=_08BB7F5F-9137-4891-BD64-4F78331962AD-- From nobody Mon Jul 3 11:46:56 2017 Return-Path: X-Original-To: secdir@ietfa.amsl.com Delivered-To: secdir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C4C311316FD for ; Mon, 3 Jul 2017 11:46:44 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.599 X-Spam-Level: X-Spam-Status: No, score=-2.599 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_DNSWL_LOW=-0.7, URIBL_BLOCKED=0.001] autolearn=unavailable autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=yahoo.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id NjtyEXH-Pqxu for ; Mon, 3 Jul 2017 11:46:43 -0700 (PDT) Received: from nm17-vm5.access.bullet.mail.bf1.yahoo.com (nm17-vm5.access.bullet.mail.bf1.yahoo.com [216.109.115.68]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id C611C13170B for ; Mon, 3 Jul 2017 11:46:41 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s2048; t=1499107600; bh=fOBvPaCt+N5ma3+Mz69azIFUjDdKj2qFFtPRAm4XlA0=; h=Subject:To:Cc:References:From:Date:In-Reply-To:From:Subject; b=YE3QKtwdYqFZmHe6X72adxNjlcrDe9hxyukxcRTkOdiQcabKen+9p1tQMPLVCkaC7wy/d+J0EWEYDikfxo2Ng3FUb9a7RBhe7JNr3TcQPll06pAnZVHADeFYyS7wwmVTa1i/wU3IPEbOYOjqyfVm9Ph0UoDme6Fdgy7jp1PnN32IOm9AHzabmIrOqn4lQ1egcKhritkiq3Aac8LCRkPsRkXN/o2KQthoYEtVvT4pAMnybwDZEyjpOqdKscnI7miTwBB7qpyUupcnWF/zyfHF4ZHLI0bBwpctCFA/0lkGBzCfN58DwXzeNBdgmFfKgod4wrPdssEzck85vJzggd8gJQ== Received: from [66.196.81.163] by nm17.access.bullet.mail.bf1.yahoo.com with NNFMP; 03 Jul 2017 18:46:40 -0000 Received: from [10.218.253.202] by tm9.access.bullet.mail.bf1.yahoo.com with NNFMP; 03 Jul 2017 18:46:40 -0000 Received: from [127.0.0.1] by smtp119.sbc.mail.ne1.yahoo.com with NNFMP; 03 Jul 2017 18:46:40 -0000 X-Yahoo-Newman-Id: 214355.56391.bm@smtp119.sbc.mail.ne1.yahoo.com X-Yahoo-Newman-Property: ymail-3 X-YMail-OSG: byi6XMUVM1kfKn4aK4qNpANiqE.dfurR2Wk6734c8VutEDf fB_.0kwntabYFsp2vWNXvOXAk6uitzyXMfKlaICQJ4HLDfyV_PGsnbr9y0t0 Kx.3Q3rbvHXetDkN7rdd478rspHIlpUXfE4TpRM9fnPWCFemj92NstXv8mJa EHpJCsaNsiU3cAMxIWi.KPcOjGdlKzzUo.rNK2HIznXjKp_7jZSmw4k8UXK5 lk5SOFkNKMM.1qIvp5r0grX7TU8RF3BZR4HrMpAon6eEG6Ke86zaTa2_m6_M GGdtSfPUHxUFZU2TNaIML6rAHlRmS4VJ8KzoCVNmsfCinhZ4BdRoYtiLQx3L tw.5roWMtWzDFKxRWwX70VesCh2Ma3aEsUsUaLern1K_C6O_BdHb62MkE.L2 AdlZ4VaRx7VDKgmgb1j__atVgnAc9VVgiFw2o_uo4JN3XM9rQfH11ThmB_dv K_2cCVoXTTDs9lPBzhxBKB5W7_MQv8we0WhMbHkVQXnf7DPsEjvO_iFK_mEY JbMb9t307_HrSkQ-- X-Yahoo-SMTP: 4kJJK.qswBDPuwyc5wW.BPAQqNXdy5j09UNyeAS0pyOQ708- Received: from [192.168.1.152] (DD-WRT [192.168.1.1]) by uriel.mandelberg.org (Postfix) with ESMTPSA id 3C4441C6033; Mon, 3 Jul 2017 14:46:39 -0400 (EDT) To: =?UTF-8?Q?Michael_B=c3=a4uerle?= Cc: iesg@ietf.org, secdir@ietf.org, draft-baeuerle-netnews-cancel-lock.all@ietf.org References: <79785418-2159-2dba-3beb-b9391a5a2ddf@mandelberg.org> <20170628180933.29d97ee9@WStation4> From: David Mandelberg Message-ID: <7427049b-3269-3683-6f95-dee16231effa@mandelberg.org> Date: Mon, 3 Jul 2017 14:46:34 -0400 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Thunderbird/52.1.1 MIME-Version: 1.0 In-Reply-To: <20170628180933.29d97ee9@WStation4> Content-Type: multipart/signed; micalg=pgp-sha1; protocol="application/pgp-signature"; boundary="bPmbHPdm7EacvB4Jh7dvXrldugWxjMcpw" Archived-At: Subject: Re: [secdir] secdir review of draft-baeuerle-netnews-cancel-lock-05 X-BeenThere: secdir@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: Security Area Directorate List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 03 Jul 2017 18:46:45 -0000 This is an OpenPGP/MIME signed message (RFC 4880 and 3156) --bPmbHPdm7EacvB4Jh7dvXrldugWxjMcpw Content-Type: multipart/mixed; boundary="FTsI33dFiGK6Uskqn7nPm6ix4i3IwM25Q"; protected-headers="v1" From: David Mandelberg To: =?UTF-8?Q?Michael_B=c3=a4uerle?= Cc: iesg@ietf.org, secdir@ietf.org, draft-baeuerle-netnews-cancel-lock.all@ietf.org Message-ID: <7427049b-3269-3683-6f95-dee16231effa@mandelberg.org> Subject: Re: secdir review of draft-baeuerle-netnews-cancel-lock-05 References: <79785418-2159-2dba-3beb-b9391a5a2ddf@mandelberg.org> <20170628180933.29d97ee9@WStation4> In-Reply-To: <20170628180933.29d97ee9@WStation4> --FTsI33dFiGK6Uskqn7nPm6ix4i3IwM25Q Content-Type: text/plain; charset=iso-8859-15 Content-Language: en-US Content-Transfer-Encoding: quoted-printable On 06/28/2017 12:09 PM, Michael B=E4uerle wrote: > David Mandelberg wrote: >> >> [...] >> This document recommends calculating a single key K for each article >> (section 4), then publishing base64(hash(base64(K))) values for multip= le >> different hash algorithms. This means that the preimage resistance of >> the weakest hash algorithm places an upper bound on the security of th= e >> authentication, even if the receiver ignores weaker algorithms. (An >> attacker who can calculate K from the weak hash can generate valid key= s >> for the stronger hashes.) >=20 > The option to add multiple entries with different hash algorithms in > the new draft is intended for the transition period. SHA1 (as defined > in the old draft from Simon Lyall) was used for decades and it is > unlikely that all existing implementations will add SHA2 support > quickly. >=20 >> Additionally, while plenty of research goes >> into preimage security of individual hash algorithms, I don't think as= >> much research goes into preimage security of multiple algorithms used = in >> parallel on the same input. While I don't know of any non-brute-force >> attacks that can find X given sha256(X) and sha512(X), I see no reason= >> that it wouldn't be easier than the easiest of the two individual >> preimage attacks. (I am not an expert though, there might be something= >> I'm missing.) >=20 > Suggested additional words for Section 4 (Calculating the key data): >=20 > In general every agent must not use the same secret if > multiple elements are added. Section 4 is only a RECOMMENDED way to calculate K, so I don't think adding anything to section 4 is sufficient. I'd suggest adding something to section 2.1 like: "If multiple are present in a , each MUST use a unique key K." Adding text to Section 4 would be good too though. --=20 David Eric Mandelberg / dseomn http://david.mandelberg.org/ --FTsI33dFiGK6Uskqn7nPm6ix4i3IwM25Q-- --bPmbHPdm7EacvB4Jh7dvXrldugWxjMcpw Content-Type: application/pgp-signature; name="signature.asc" Content-Description: OpenPGP digital signature Content-Disposition: attachment; filename="signature.asc" -----BEGIN PGP SIGNATURE----- Version: GnuPG v2 iEYEARECAAYFAllakQoACgkQRKlmUHCg4sB6IACfULrnyMu/5s3jkqEN5/lhTegy zIIAn0CJNEbFhpSU0GilhACnPMtIKlnr =i3po -----END PGP SIGNATURE----- --bPmbHPdm7EacvB4Jh7dvXrldugWxjMcpw-- From nobody Mon Jul 3 12:01:19 2017 Return-Path: X-Original-To: secdir@ietfa.amsl.com Delivered-To: secdir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id A001E131772 for ; Mon, 3 Jul 2017 12:01:11 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.599 X-Spam-Level: X-Spam-Status: No, score=-2.599 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_DNSWL_LOW=-0.7, URIBL_BLOCKED=0.001] autolearn=unavailable autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=yahoo.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id dnIYzPP_q-Y6 for ; Mon, 3 Jul 2017 12:01:10 -0700 (PDT) Received: from nm15-vm7.access.bullet.mail.bf1.yahoo.com (nm15-vm7.access.bullet.mail.bf1.yahoo.com [216.109.115.38]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 6EC731317ED for ; Mon, 3 Jul 2017 12:00:50 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s2048; t=1499108448; bh=17J1kNCi6Fm0A081hWXi2I2St/n1Ibi00OCafHVn7GQ=; h=Subject:To:Cc:References:From:Date:In-Reply-To:From:Subject; b=Ftpiee5XTWU5G9WgrC07orLbM00v083ayS0/05GuLNRiLPn/7gLMhyqjJYGbyLeUdKFlptrolSkmnIBTWK1/v+ZYTMNG9hHc9lWkRHyyKyxpOcFKnf9yo8KeiZVq7AtCGr/vh7YWOdhRbYnWgCHJehdcmlMQhPHZ/Fuox0KHlDyMbIEj2z9UjQCGYGpQr5o3NOSuEDsJNxn+061fGcWb6Y4lgvBBCvw1OvJqMG04rUHmOboNCT+WEl+as7qwoacpI6gvkW1YbEIYK3Ni5PflBHA6H8YhOEQ5DP2tFb/cOaGbcLQeJgxWnJsGRJjE0voZjXL6CQM/1S1t4kp2csswMw== Received: from [66.196.81.157] by nm15.access.bullet.mail.bf1.yahoo.com with NNFMP; 03 Jul 2017 19:00:48 -0000 Received: from [10.218.253.201] by tm3.access.bullet.mail.bf1.yahoo.com with NNFMP; 03 Jul 2017 19:00:48 -0000 Received: from [127.0.0.1] by smtp120.sbc.mail.ne1.yahoo.com with NNFMP; 03 Jul 2017 19:00:48 -0000 X-Yahoo-Newman-Id: 901881.34942.bm@smtp120.sbc.mail.ne1.yahoo.com X-Yahoo-Newman-Property: ymail-3 X-YMail-OSG: B8vTNggVM1kfcdGDrv2lPfgoPDpFEXfrO_MR9o73yI84MCF fM9UntQciRbch7vpQMjWObW.FB6Z6e64ALn2kEMOBmwxOH8Xs6ybE6fx0AtX _J9tFd5ql0EO2MVCJ562UxadKgdM7wkkMqBbR4iiSqx03Lch8C1r70K8qXIt 51iCifYYXhkkLVSKyXWAhK4VVVq8c8wBv_e6V7_7JO7KtVRtqYDVQfLNARX2 DtCu7MQZ3I3EDYQ5evqVCRhzTT09TjWRxvnGbeS_EHP3dU_e_DrV_5EtZ.Fz 3av8BIJiFLy3d_PtnKxV8_lrfOvQSWGCGVxNjkm5458k.PfEnRn9YDlgz43g HZPNDIkr9uVKy18GPPK9T4v7HL7dTF6pXfKzNHuq7mKyZMGwaJI8NnCY3Htx CRzZ36ka6atKLKqR5JD1gVoKRbw3p1BwrAWBW4yNL3L6o0as7FiJqVuFU6pP wH2R4s.ens6WytOJX6olvM4FZy4i50KPU9L2ZbYdh3kHu4plKN_3XhPY5sm3 fYkbjSP2EDbwUHg-- X-Yahoo-SMTP: 4kJJK.qswBDPuwyc5wW.BPAQqNXdy5j09UNyeAS0pyOQ708- Received: from [192.168.1.152] (DD-WRT [192.168.1.1]) by uriel.mandelberg.org (Postfix) with ESMTPSA id 5E5931C6033; Mon, 3 Jul 2017 14:53:06 -0400 (EDT) To: =?UTF-8?Q?Michael_B=c3=a4uerle?= Cc: iesg@ietf.org, secdir@ietf.org, draft-baeuerle-netnews-cancel-lock.all@ietf.org References: <79785418-2159-2dba-3beb-b9391a5a2ddf@mandelberg.org> <20170629195337.431deba7@WStation4> From: David Mandelberg Message-ID: <5ff8e064-46b8-6b31-ecf4-c1f349b1b204@mandelberg.org> Date: Mon, 3 Jul 2017 14:53:06 -0400 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Thunderbird/52.1.1 MIME-Version: 1.0 In-Reply-To: <20170629195337.431deba7@WStation4> Content-Type: multipart/signed; micalg=pgp-sha1; protocol="application/pgp-signature"; boundary="KA0sLt0cR3heNlHOidO62MuB2gKJ74RDf" Archived-At: Subject: Re: [secdir] secdir review of draft-baeuerle-netnews-cancel-lock-05 X-BeenThere: secdir@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: Security Area Directorate List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 03 Jul 2017 19:01:12 -0000 This is an OpenPGP/MIME signed message (RFC 4880 and 3156) --KA0sLt0cR3heNlHOidO62MuB2gKJ74RDf Content-Type: multipart/mixed; boundary="XWOK6C4MwHkBCGe6xk9lXWn7fJ8PD93EN"; protected-headers="v1" From: David Mandelberg To: =?UTF-8?Q?Michael_B=c3=a4uerle?= Cc: iesg@ietf.org, secdir@ietf.org, draft-baeuerle-netnews-cancel-lock.all@ietf.org Message-ID: <5ff8e064-46b8-6b31-ecf4-c1f349b1b204@mandelberg.org> Subject: Re: secdir review of draft-baeuerle-netnews-cancel-lock-05 References: <79785418-2159-2dba-3beb-b9391a5a2ddf@mandelberg.org> <20170629195337.431deba7@WStation4> In-Reply-To: <20170629195337.431deba7@WStation4> --XWOK6C4MwHkBCGe6xk9lXWn7fJ8PD93EN Content-Type: text/plain; charset=iso-8859-15 Content-Language: en-US Content-Transfer-Encoding: quoted-printable On 06/29/2017 01:53 PM, Michael B=E4uerle wrote: > David Mandelberg wrote: >> >> [...] >> Section 4: Is it ever possible for two different (uid, mid) pairs to >> have the same concatenated value? E.g., alice@example.co + mfoo and >> alice@example.com + foo. If that ever happened and one of the two >> articles was canceled, an attacker would be able to cancel the other >> article. >=20 > Literal angle brackets at start and end must be part of mid (words are > already present in Section 4). >=20 > Adding additional words that forbid angle brackets in uid would make an= > overlap impossible (the first opening angle bracket would always be the= > junction point in this case). > Suggestion for additional words in Section 4: >=20 > The User-ID must not contain angle brackets. If imposing that requirement is acceptable, then that does solve the security issue. >=20 >> Section 4: I don't understand Q1. Are you asking me if the existing >> implementations are doing something insecure? (It's not specified well= >> enough for me to tell.) >=20 > Q1 is there because the draft intentionally does not formalize the > algorithm used by some existing implementations that support uid: >=20 > HMAC(data, secret key) > Existing : K =3D HMAC(mid, uid+sec) > Recommended by draft: K =3D HMAC(uid+mid, sec) >=20 > It is unclear why existing implementations with support for uid are > using it in a specific way (there was no User-ID in the old draft from > Simon Lyall). >=20 > It is assumed that uid may be easy to guess - probably simply the > users name. > The choice for the latter option from the two above was done because: > - mid is public and sec is secret > If uid is easy to guess, it is more related to mid than to sec. > - HMAC has two input channels (data and key) > If sec is our secret key, other information should be feeded into > the data input. > - Section 4 defines recommendations for the length of sec > This definition would be more complicated (and the recommendations > harder to implement) if some potentially non-secret data with non- > constant length is concatenated to sec. >=20 > The question is why existing implementations have chosen uid+sec as > secrect key (maybe I have overlooked an advantage of this option) and > whether the different choice uid+mid as data really is the better optio= n. Gotcha. I really don't know why they would put the uid in the secret key input to HMAC. I think your HMAC(uid+mid, sec) is better. --=20 David Eric Mandelberg / dseomn http://david.mandelberg.org/ --XWOK6C4MwHkBCGe6xk9lXWn7fJ8PD93EN-- --KA0sLt0cR3heNlHOidO62MuB2gKJ74RDf Content-Type: application/pgp-signature; name="signature.asc" Content-Description: OpenPGP digital signature Content-Disposition: attachment; filename="signature.asc" -----BEGIN PGP SIGNATURE----- Version: GnuPG v2 iEYEARECAAYFAllakpIACgkQRKlmUHCg4sDBPACgiGWODN8n56GQOSCjhE67BZvR dncAn31BJfsAquYjzXYTOSRd0qijprm+ =gIQh -----END PGP SIGNATURE----- --KA0sLt0cR3heNlHOidO62MuB2gKJ74RDf-- From nobody Mon Jul 3 12:21:08 2017 Return-Path: X-Original-To: secdir@ietfa.amsl.com Delivered-To: secdir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 5DCC712ECCB for ; Mon, 3 Jul 2017 12:21:01 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.599 X-Spam-Level: X-Spam-Status: No, score=-2.599 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_DNSWL_LOW=-0.7, URIBL_BLOCKED=0.001] autolearn=unavailable autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=yahoo.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id AWhcoYqMRQGs for ; Mon, 3 Jul 2017 12:20:59 -0700 (PDT) Received: from nm18-vm4.access.bullet.mail.bf1.yahoo.com (nm18-vm4.access.bullet.mail.bf1.yahoo.com [216.109.115.83]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 8A5FD12EE8D for ; Mon, 3 Jul 2017 12:20:58 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s2048; t=1499109656; bh=nTaECD3rGvTvN1veNSwhneHPMbR4VQGYqQj3L7VrYLE=; h=Subject:To:Cc:References:From:Date:In-Reply-To:From:Subject; b=iG6MDln5euDwSqXtrV9W3+SRLWCtLHKwV7M6JtmiRC5OBOQQPK6pRAY4ByoMoyLEiwnK19PDrVAWdjBtj8tVdmskrhUWaovZAd3SK/S2imsG7v3EsZGtcipMVoO+kzn7JhuLgZXTOm4XvqensUSPxX5nE+DBqDskWZpsxXHmNdmVqnuR0SQzjT+mHHokuUQAm4Ugq3g+NtS2vkN4EEKR0EIojIt6LCDVpO7C+SphQFTlcHDyujcKxS6aAx6pxfUjSLdM6es92UuS4iPRVvHfT50RL/qxSGIwZb4vFDQA4WgqCLxoS/gm0ptd+GLQRO3vJpKBsDQV9ZDt14apz46e7g== Received: from [66.196.81.162] by nm18.access.bullet.mail.bf1.yahoo.com with NNFMP; 03 Jul 2017 19:20:56 -0000 Received: from [10.218.253.203] by tm8.access.bullet.mail.bf1.yahoo.com with NNFMP; 03 Jul 2017 19:20:56 -0000 Received: from [127.0.0.1] by smtp118.sbc.mail.ne1.yahoo.com with NNFMP; 03 Jul 2017 19:20:49 -0000 X-Yahoo-Newman-Id: 292614.31219.bm@smtp118.sbc.mail.ne1.yahoo.com X-Yahoo-Newman-Property: ymail-3 X-YMail-OSG: SQIjSdIVM1lTPmSabs.QX2zKMgHuDUpy6PHdNDst_Thiejw Ia7yKGqT1L8rizikw4_TO3noXrfS2C_C_1GRek6DvYTzp5DB4cw7d3bFo_m7 OK0ZZ1BqNB.sBhhNxWZ0DqicNAUbwBq7gYQ3dAYZibYHkVC6TWUtOYcaoaL. QthtiG2QLqPXe.1iZ4uvMqgOberuzj0yQ2lc33EnCINRyLczNqIgm3IgQcZa nEhejZmDb5Xjlild4dP2MxL5jloMjI9aSsCoULGR6D1X_21E80pueHTX90jw 1iIBBj9N84ch7TFNJUxnjYlqKLzrZLxWnghoAShLGEPZQxFyFgOntjj8SWWa .oDOaDKwJmPQ1..iSJo.5v_iGNutZ5R2w23J0t2RI4knhy1JtWXhsOdD1Z4_ VQue5LQyq8Mco3Y5WNaRmWe4IMDzibVEXdv8AhO5diMWFn7z8QUH8dmeytOG Osv9mW.06pfXvrdzmv.yiJohvcRaeGzE_grgb2jSjSEfe8Y9wefJDZGpk_R0 wrPYmnPVhFBuMjTfxR.Vl3aPop8Q2BZmcg4.r.k4ZRu5TjdFc9g-- X-Yahoo-SMTP: 4kJJK.qswBDPuwyc5wW.BPAQqNXdy5j09UNyeAS0pyOQ708- Received: from [192.168.1.152] (DD-WRT [192.168.1.1]) by uriel.mandelberg.org (Postfix) with ESMTPSA id B39951C6033; Mon, 3 Jul 2017 15:01:36 -0400 (EDT) To: =?UTF-8?Q?Michael_B=c3=a4uerle?= Cc: iesg@ietf.org, secdir@ietf.org, draft-baeuerle-netnews-cancel-lock.all@ietf.org References: <79785418-2159-2dba-3beb-b9391a5a2ddf@mandelberg.org> <20170630183122.5b8b10ae@WStation4> From: David Mandelberg Message-ID: Date: Mon, 3 Jul 2017 15:01:36 -0400 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Thunderbird/52.1.1 MIME-Version: 1.0 In-Reply-To: <20170630183122.5b8b10ae@WStation4> Content-Type: multipart/signed; micalg=pgp-sha1; protocol="application/pgp-signature"; boundary="IvsunHjEKrUwANf4uADpixpBJ1NIJUnkn" Archived-At: Subject: Re: [secdir] secdir review of draft-baeuerle-netnews-cancel-lock-05 X-BeenThere: secdir@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: Security Area Directorate List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 03 Jul 2017 19:21:02 -0000 This is an OpenPGP/MIME signed message (RFC 4880 and 3156) --IvsunHjEKrUwANf4uADpixpBJ1NIJUnkn Content-Type: multipart/mixed; boundary="HCDW9C6PJRV426xWVNrxjWnNstlP4tvjp"; protected-headers="v1" From: David Mandelberg To: =?UTF-8?Q?Michael_B=c3=a4uerle?= Cc: iesg@ietf.org, secdir@ietf.org, draft-baeuerle-netnews-cancel-lock.all@ietf.org Message-ID: Subject: Re: secdir review of draft-baeuerle-netnews-cancel-lock-05 References: <79785418-2159-2dba-3beb-b9391a5a2ddf@mandelberg.org> <20170630183122.5b8b10ae@WStation4> In-Reply-To: <20170630183122.5b8b10ae@WStation4> --HCDW9C6PJRV426xWVNrxjWnNstlP4tvjp Content-Type: text/plain; charset=iso-8859-15 Content-Language: en-US Content-Transfer-Encoding: quoted-printable On 06/30/2017 12:31 PM, Michael B=E4uerle wrote: > David Mandelberg wrote: >> >> [...] >> Section 4: I think you should run any user-supplied password through a= >> key derivation function before using it as a MAC key. >=20 > The obvious solution would be HKDF, but RFC5869 says in section 4: > |=20 > | [...] Applications interested > | in a password-based KDF should consider whether, for example, > | [PKCS5] meets their needs better than HKDF. >=20 > Would PKCS5 (RFC8018) be a good solution for this purpose? Sorry, I don't have a lot of experience with KDFs. From what I understand, I think you want to pick something that is computationally difficult, and can be made more difficult over time as computers get more powerful. (To make attacks against the password closer in complexity to brute-force attacks against the output of the KDF.) >=20 > A workaround would be to change the words from section 4 of the draft: > |=20 > | The local secret should have a length of at least the output > | size of the hash function that is used by HMAC (256 bit / 32 octets > | for SHA256). If the secret is not a random value, but e.g. some sort > | of human readable password, it should be much longer. In any case it > | is important that this secret can not be guessed. >=20 > to: >=20 > The local secret should have a length of at least the output > size of the hash function that is used by HMAC (256 bit / 32 octets > for SHA256) and must be a random value. >=20 > This would simply push the problem beyond the scope of the document. Yup, that would work if you don't need to support passwords. >=20 >> Section 7: As I understand the terms, you care about preimage >> resistance, but not second preimage. (I think preimage covers finding >> any input that results in the specified output, not only the input tha= t >> originally generated the specified output. But I might be >> misunderstanding the terms.) >=20 > If second preimage always is associated with known input, then I have > used the wrong term and paragraph 1 in section 7 should say: >=20 > The important property of the hash function used for is the= > preimage resistance. A successful preimage attack either reveals the= > real Cancel-Key (that was used to create the Cancel-Lock of the orig= inal > article) or gives a different Cancel-Key (that matches a Cancel-Lock= too). > This would break the authentication system defined in this document.= Looks good. --=20 David Eric Mandelberg / dseomn http://david.mandelberg.org/ --HCDW9C6PJRV426xWVNrxjWnNstlP4tvjp-- --IvsunHjEKrUwANf4uADpixpBJ1NIJUnkn Content-Type: application/pgp-signature; name="signature.asc" Content-Description: OpenPGP digital signature Content-Disposition: attachment; filename="signature.asc" -----BEGIN PGP SIGNATURE----- Version: GnuPG v2 iEYEARECAAYFAllalJAACgkQRKlmUHCg4sAkbwCfTK6RC5Khrcvzt1ub52Mghg7+ fBcAnjxTViz+nDrzdtAjkZkmmlmHCwaS =NNVA -----END PGP SIGNATURE----- --IvsunHjEKrUwANf4uADpixpBJ1NIJUnkn-- From nobody Mon Jul 3 12:49:51 2017 Return-Path: X-Original-To: secdir@ietfa.amsl.com Delivered-To: secdir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 1A39C126BFD; Mon, 3 Jul 2017 12:49:50 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.9 X-Spam-Level: X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id XqhBA409Ac2E; Mon, 3 Jul 2017 12:49:47 -0700 (PDT) Received: from fgont.go6lab.si (fgont.go6lab.si [IPv6:2001:67c:27e4::14]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 563A2131768; Mon, 3 Jul 2017 12:49:47 -0700 (PDT) Received: from [192.168.88.73] (unknown [88.135.141.100]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by fgont.go6lab.si (Postfix) with ESMTPSA id A2EC6827C2; Mon, 3 Jul 2017 21:51:02 +0200 (CEST) Cc: iarce@quarkslab.com, "secdir@ietf.org" , "privsec-program@iab.org" From: Fernando Gont To: "saag@ietf.org" Message-ID: Date: Mon, 3 Jul 2017 22:49:59 +0300 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Thunderbird/52.1.1 MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Language: en-US Content-Transfer-Encoding: 7bit Archived-At: Subject: [secdir] Predictable Numeric Identifiers -- progress? X-BeenThere: secdir@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: Security Area Directorate List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 03 Jul 2017 19:49:50 -0000 Folks, We have published a revision of a number of I-Ds we had published on the topic of "security/privacy properties of numeric identifiers", in the hopes of helping improving the security and privacy properties of the numeric identifiers employed in IETF protocols. The main revised I-D is available at: Based on feedback received from SAAG, we have also published the same content, but split into three stand-alone document (which might be easier to digest and progress): * History of flawed numeric identifiers: * Generation of numeric identifiers: * A proposed update to RFC3552, wrt numeric identifiers: The first version of these I-Ds were published one year ago now, and to some extent were stalled waiting for progress on rfc3552bis. As expected, rfc3552bis will take time to be published, but the IETF is still published documents with no proper requirements regarding numeric I-Ds... which is not a good thing. At this point we'd like to receive feedback on the topic (whether for the main/big document, or for the split I-Ds), and also would like to make progress on these document. Thoughts? Thanks! Best regards, -- Fernando Gont SI6 Networks e-mail: fgont@si6networks.com PGP Fingerprint: 6666 31C6 D484 63B2 8FB1 E3C4 AE25 0D55 1D4E 7492 From nobody Tue Jul 4 06:40:18 2017 Return-Path: X-Original-To: secdir@ietfa.amsl.com Delivered-To: secdir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 2A1B3132090; Tue, 4 Jul 2017 06:40:17 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.699 X-Spam-Level: X-Spam-Status: No, score=-2.699 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id pE5yWMKzdmi6; Tue, 4 Jul 2017 06:40:07 -0700 (PDT) Received: from mail-vk0-x231.google.com (mail-vk0-x231.google.com [IPv6:2607:f8b0:400c:c05::231]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 8824113208F; Tue, 4 Jul 2017 06:40:07 -0700 (PDT) Received: by mail-vk0-x231.google.com with SMTP id r126so111240415vkg.0; Tue, 04 Jul 2017 06:40:07 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:from:date:message-id:subject:to; bh=jjj9rVd9d0QbYxj6ZJaO9w7Tica8MLdUJa/R1ml6SmA=; b=uNiZy/8fQCQIeVpxvqBQdMlVZVMnlJ8PwxtdWAewoTYGw+8hakQFOH5XQqDXuubT8F /qhHEJAqGr9tUzCP9U32dLVpdwsYzB+9osyO/5FUVW/Zo4wVwQvM76TCpIeL3pMc3dPV cIQvifXTdkX5zaSjayR6j5VYxqieMpcusbX71f6ftGMOT768h9nCwetB6grzBLFKolHo DO+ElthLOoQSUvyNyoR0JERPV1xQfrhsBUvV0UpsA+KQ4M8p2ukWXL8cablarmNZ3hCN lcmWhzxeH2sY07cPnpsIJ1qg2QGN31/z7oYon9psMT7+ULZY5KN6tNpZW2ssBOGZHe61 JlgA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:from:date:message-id:subject:to; bh=jjj9rVd9d0QbYxj6ZJaO9w7Tica8MLdUJa/R1ml6SmA=; b=VWmiaa/Tk8N5/ZIJAAB21pW4PkCmQY/duf5mSd0bonCo1sYY1LQu4VRzglpDde/3hR 25HDZwuUNg5optUQTcObau7vkrI8zPkLv6OmZaJPUV9qWnRYeAdsL3paOVCn7R8bUsMX e3fVFduJpfTbV0LNQX2IhrwUSspohQ8ohmF06GrkpgsQ8T3X7OtyUnqvtQ2YHfQun16H lJdlEU0WukUsvCwvAW/Q61GsVldsagFmlG2ryg8QT2YKAt1TEknZqnqxxTNkwZ9RljJ1 HMLpfcQvYoC97DVsyi6IRCux7EIqnjX3n2weVbDYpGuiYJkvVmgjVc759zASHOjATutx QJ3g== X-Gm-Message-State: AKS2vOywmfdWoy24kemv7tmimV94TYFNrZbVPQc3CiViu+75DXa61dBY zTpbwFvSVrQzTaJ9NYw0MhFjn3evNYTPdxY= X-Received: by 10.31.218.196 with SMTP id r187mr21387371vkg.96.1499175146044; Tue, 04 Jul 2017 06:32:26 -0700 (PDT) MIME-Version: 1.0 Received: by 10.176.76.29 with HTTP; Tue, 4 Jul 2017 06:32:25 -0700 (PDT) From: Rifaat Shekh-Yusef Date: Tue, 4 Jul 2017 09:32:25 -0400 Message-ID: To: draft-ietf-teas-gmpls-lsp-fastreroute.all@ietf.org, secdir@ietf.org, The IESG Content-Type: multipart/alternative; boundary="94eb2c07c56209431305537deaa2" Archived-At: Subject: [secdir] secdir review of draft-ietf-teas-gmpls-lsp-fastreroute-09 X-BeenThere: secdir@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: Security Area Directorate List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 04 Jul 2017 13:40:17 -0000 --94eb2c07c56209431305537deaa2 Content-Type: text/plain; charset="UTF-8" I have reviewed this document as part of the security directorate's ongoing effort to review all IETF documents being processed by the IESG. These comments were written primarily for the benefit of the security area directors. Document editors and WG chairs should treat these comments just like any other last call comments. Summary: Ready with Nits I did not have enough background on MLPS and GMPLS and their related RFCs, so I had to do some reading to get some familiarity with this subject to be able to provide some reasonable review of this document. This document builds on an existing mechanism, "Fast Reroute Extensions to RSVP-TE for LSP Tunnels" defined in RFC4090, which defines a mechanism to establish a backup tunnels for local LSP tunnels. One limitation of the existing mechanism is that in some situations it might assign different uni-directional bypass tunnels for the forward and reverse directions. This document extends the mechanism defined in RFC4090, by adding a new BYPASS_ASSIGNMENT subobject to the existing RECORD_ROUTE Object (RRO) used in PATH and RESV requests, to allow the establishment of a bi-directional bypass tunnel. The security of the existing mechanism still applies with the new mechanism, and the security section discusses the implications of the new subobject and the new error associated with that, which seems reasonable. The document also points to an MPLS/GMPLS Security Framework (RFC5920) document that has an extensive discussion of the security of MPLS/GMPLS network in general that also applies to this document. Nits Because the document extends RFC4090, it should add "Updates: 4090" at the top of the document. Regards, Rifaat --94eb2c07c56209431305537deaa2 Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable
I have reviewed this document as part of the security= directorate's
ongoing effort to review all IETF documents be= ing processed by the
IESG.=C2=A0 These comments were written prim= arily for the benefit of the
security area directors.=C2=A0 Docum= ent editors and WG chairs should treat
these comments just like a= ny other last call comments.

Summary: Ready with N= its


I did not have enough backgroun= d on MLPS and GMPLS and their related RFCs,
so I had to do some r= eading to get some familiarity with this subject to be
able to pr= ovide some reasonable review of this document.

Thi= s document builds on an existing mechanism, "Fast Reroute Extensions t= o
RSVP-TE for LSP Tunnels" defined in RFC4090, which defines= a mechanism to
establish a backup tunnels for local LSP tunnels.= One limitation of the
existing mechanism is that in some situati= ons it might assign different
uni-directional bypass tunnels for = the forward and reverse directions.

This document = extends the mechanism defined in RFC4090, by adding a new
BYPASS_= ASSIGNMENT subobject to the existing RECORD_ROUTE Object (RRO) used
in PATH and RESV requests, to allow the establishment of a bi-directiona= l
bypass tunnel.

The security of the exi= sting mechanism still applies with the new mechanism,
and the sec= urity section discusses the implications of the new subobject and
the new error associated with that, which seems reasonable.

=
The document also points to an MPLS/GMPLS Security Framework (RF= C5920)
document that has an extensive discussion of the security = of MPLS/GMPLS
network in general that also applies to this docume= nt.


Nits

B= ecause the document extends RFC4090, it should add "Updates: 4090"= ; at the
top of the document.

Regards,
=C2=A0Rifaat

--94eb2c07c56209431305537deaa2-- From nobody Tue Jul 4 07:56:00 2017 Return-Path: X-Original-To: secdir@ietfa.amsl.com Delivered-To: secdir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id CF0FD131938; Tue, 4 Jul 2017 07:55:52 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -14.522 X-Spam-Level: X-Spam-Status: No, score=-14.522 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_HI=-5, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, RP_MATCHES_RCVD=-0.001, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cisco.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id fTglljUxum-U; Tue, 4 Jul 2017 07:55:50 -0700 (PDT) Received: from rcdn-iport-2.cisco.com (rcdn-iport-2.cisco.com [173.37.86.73]) (using TLSv1.2 with cipher DHE-RSA-SEED-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 0882C1320C8; Tue, 4 Jul 2017 07:55:48 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=15048; q=dns/txt; s=iport; t=1499180149; x=1500389749; h=from:to:cc:subject:date:message-id:references: in-reply-to:mime-version; bh=LTCFvmj06heFuioHfp1G3RPSMiw5JfUPX4p+QTpKpVI=; b=X2mjED5knQauou13l8uc2b/B0FimLm1T3w6eqj8FZBlHbqJzqZ7ANR9O IZeqRv7krZv9e8kPOra9/9Y3repjX6dc+x4VKxCNHe5BI+6BVN8N+7+cz q9U1X6SD+xyGOJXxwLD9SYUDZq6K3XWdvUkFx/lFPP2eEgRUp5ebFYtIC c=; X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: =?us-ascii?q?A0DxAAC/q1tZ/4MNJK1cGQEBAQEBAQEBA?= =?us-ascii?q?QEBBwEBAQEBgm9qY4EQB4NoihmRdYgsiCiFLIIRhhwCGoJwPxgBAgEBAQEBAQF?= =?us-ascii?q?rKIUYAQEBAQMjVhACAQgRAwECKwICAh8RHQgCBAENBYlLTAMVsGuCJimHCg2EB?= =?us-ascii?q?QEBAQEBAQEBAQEBAQEBAQEBAQEBAR2DJ4NMgWABK4J5gleBWVoGgm0wgjEFlym?= =?us-ascii?q?HIjsCjxmEagySEot0iT4BHziBCnUVWwGFAByBZnaIHQGBDAEBAQ?= X-IronPort-AV: E=Sophos;i="5.40,307,1496102400"; d="scan'208,217";a="268816393" Received: from alln-core-1.cisco.com ([173.36.13.131]) by rcdn-iport-2.cisco.com with ESMTP/TLS/DHE-RSA-AES256-SHA; 04 Jul 2017 14:55:48 +0000 Received: from XCH-ALN-020.cisco.com (xch-aln-020.cisco.com [173.36.7.30]) by alln-core-1.cisco.com (8.14.5/8.14.5) with ESMTP id v64EtlSu029918 (version=TLSv1/SSLv3 cipher=AES256-SHA bits=256 verify=FAIL); Tue, 4 Jul 2017 14:55:48 GMT Received: from xch-aln-018.cisco.com (173.36.7.28) by XCH-ALN-020.cisco.com (173.36.7.30) with Microsoft SMTP Server (TLS) id 15.0.1210.3; Tue, 4 Jul 2017 09:55:47 -0500 Received: from xch-aln-018.cisco.com ([173.36.7.28]) by XCH-ALN-018.cisco.com ([173.36.7.28]) with mapi id 15.00.1210.000; Tue, 4 Jul 2017 09:55:47 -0500 From: "Rakesh Gandhi (rgandhi)" To: Rifaat Shekh-Yusef , "draft-ietf-teas-gmpls-lsp-fastreroute.all@ietf.org" , "secdir@ietf.org" , The IESG CC: DEBORAH BRUNGARD , Lou Berger , "Vishnu Pavan Beeram" Thread-Topic: [secdir] secdir review of draft-ietf-teas-gmpls-lsp-fastreroute-09 Thread-Index: AQHS9MsUKApW2nmrDkSMbsBbOiyZvqJD0ouA Date: Tue, 4 Jul 2017 14:55:47 +0000 Message-ID: References: In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/f.1d.0.161209 x-ms-exchange-messagesentrepresentingtype: 1 x-ms-exchange-transport-fromentityheader: Hosted x-originating-ip: [161.44.213.85] Content-Type: multipart/alternative; boundary="_000_E6C94EE4C51B47E2AF0C50AF1E967F44ciscocom_" MIME-Version: 1.0 Archived-At: Subject: Re: [secdir] secdir review of draft-ietf-teas-gmpls-lsp-fastreroute-09 X-BeenThere: secdir@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: Security Area Directorate List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 04 Jul 2017 14:55:53 -0000 --_000_E6C94EE4C51B47E2AF0C50AF1E967F44ciscocom_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 VGhhbmtzIFJpZmFhdCBmb3IgdGhlIHJldmlldyBvZiB0aGlzIGRvY3VtZW50Lg0KDQpIaSBEZWJv cmFoLCBMb3UsIFBhdmFuLA0KDQpBbnkgdGhvdWdodHMgb24gdGhlIGZvbGxvd2luZyBzdWdnZXN0 aW9uPw0KDQrigJxCZWNhdXNlIHRoZSBkb2N1bWVudCBleHRlbmRzIFJGQzQwOTAsIGl0IHNob3Vs ZCBhZGQgIlVwZGF0ZXM6IDQwOTAiIGF0IHRoZSB0b3Agb2YgdGhlIGRvY3VtZW50LuKAnQ0KDQpU aGFua3MsDQpSYWtlc2gNCg0KDQpGcm9tOiBSaWZhYXQgU2hla2gtWXVzZWYgPHJpZmFhdC5pZXRm QGdtYWlsLmNvbT4NCkRhdGU6IFR1ZXNkYXksIEp1bHkgNCwgMjAxNyBhdCA5OjMyIEFNDQpUbzog ImRyYWZ0LWlldGYtdGVhcy1nbXBscy1sc3AtZmFzdHJlcm91dGUuYWxsQGlldGYub3JnIiA8ZHJh ZnQtaWV0Zi10ZWFzLWdtcGxzLWxzcC1mYXN0cmVyb3V0ZS5hbGxAaWV0Zi5vcmc+LCAic2VjZGly QGlldGYub3JnIiA8c2VjZGlyQGlldGYub3JnPiwgVGhlIElFU0cgPGllc2dAaWV0Zi5vcmc+DQpT dWJqZWN0OiBbc2VjZGlyXSBzZWNkaXIgcmV2aWV3IG9mIGRyYWZ0LWlldGYtdGVhcy1nbXBscy1s c3AtZmFzdHJlcm91dGUtMDkNClJlc2VudC1Gcm9tOiA8YWxpYXMtYm91bmNlc0BpZXRmLm9yZz4N ClJlc2VudC1UbzogIj1TTVRQOm10YWlsbG9uQGNpc2NvLiBjb20iIDxtdGFpbGxvbkBjaXNjby5j b20+LCA8dHNhYWRAY2lzY28uY29tPiwgIj1TTVRQOnJnYW5kaGlAY2lzY28uIGNvbSIgPHJnYW5k aGlAY2lzY28uY29tPiwgWmFmYXIgQWxpIDx6YWxpQGNpc2NvLmNvbT4sIDxtYW5hdi5iaGF0aWFA bm9raWEuY29tPiwgPG1oYXJ0bGV5QGNpc2NvLmNvbT4sIExvdSBCZXJnZXIgPGxiZXJnZXJAbGFi bi5uZXQ+LCA8dmJlZXJhbUBqdW5pcGVyLm5ldD4sIDxhcmV0YW5hQGNpc2NvLmNvbT4sIERFQk9S QUggQlJVTkdBUkQgPGRiMzU0NkBhdHQuY29tPiwgPGFrYXRsYXNAZ21haWwuY29tPg0KUmVzZW50 LURhdGU6IFR1ZXNkYXksIEp1bHkgNCwgMjAxNyBhdCA5OjQwIEFNDQoNCkkgaGF2ZSByZXZpZXdl ZCB0aGlzIGRvY3VtZW50IGFzIHBhcnQgb2YgdGhlIHNlY3VyaXR5IGRpcmVjdG9yYXRlJ3MNCm9u Z29pbmcgZWZmb3J0IHRvIHJldmlldyBhbGwgSUVURiBkb2N1bWVudHMgYmVpbmcgcHJvY2Vzc2Vk IGJ5IHRoZQ0KSUVTRy4gIFRoZXNlIGNvbW1lbnRzIHdlcmUgd3JpdHRlbiBwcmltYXJpbHkgZm9y IHRoZSBiZW5lZml0IG9mIHRoZQ0Kc2VjdXJpdHkgYXJlYSBkaXJlY3RvcnMuICBEb2N1bWVudCBl ZGl0b3JzIGFuZCBXRyBjaGFpcnMgc2hvdWxkIHRyZWF0DQp0aGVzZSBjb21tZW50cyBqdXN0IGxp a2UgYW55IG90aGVyIGxhc3QgY2FsbCBjb21tZW50cy4NCg0KU3VtbWFyeTogUmVhZHkgd2l0aCBO aXRzDQoNCg0KSSBkaWQgbm90IGhhdmUgZW5vdWdoIGJhY2tncm91bmQgb24gTUxQUyBhbmQgR01Q TFMgYW5kIHRoZWlyIHJlbGF0ZWQgUkZDcywNCnNvIEkgaGFkIHRvIGRvIHNvbWUgcmVhZGluZyB0 byBnZXQgc29tZSBmYW1pbGlhcml0eSB3aXRoIHRoaXMgc3ViamVjdCB0byBiZQ0KYWJsZSB0byBw cm92aWRlIHNvbWUgcmVhc29uYWJsZSByZXZpZXcgb2YgdGhpcyBkb2N1bWVudC4NCg0KVGhpcyBk b2N1bWVudCBidWlsZHMgb24gYW4gZXhpc3RpbmcgbWVjaGFuaXNtLCAiRmFzdCBSZXJvdXRlIEV4 dGVuc2lvbnMgdG8NClJTVlAtVEUgZm9yIExTUCBUdW5uZWxzIiBkZWZpbmVkIGluIFJGQzQwOTAs IHdoaWNoIGRlZmluZXMgYSBtZWNoYW5pc20gdG8NCmVzdGFibGlzaCBhIGJhY2t1cCB0dW5uZWxz IGZvciBsb2NhbCBMU1AgdHVubmVscy4gT25lIGxpbWl0YXRpb24gb2YgdGhlDQpleGlzdGluZyBt ZWNoYW5pc20gaXMgdGhhdCBpbiBzb21lIHNpdHVhdGlvbnMgaXQgbWlnaHQgYXNzaWduIGRpZmZl cmVudA0KdW5pLWRpcmVjdGlvbmFsIGJ5cGFzcyB0dW5uZWxzIGZvciB0aGUgZm9yd2FyZCBhbmQg cmV2ZXJzZSBkaXJlY3Rpb25zLg0KDQpUaGlzIGRvY3VtZW50IGV4dGVuZHMgdGhlIG1lY2hhbmlz bSBkZWZpbmVkIGluIFJGQzQwOTAsIGJ5IGFkZGluZyBhIG5ldw0KQllQQVNTX0FTU0lHTk1FTlQg c3Vib2JqZWN0IHRvIHRoZSBleGlzdGluZyBSRUNPUkRfUk9VVEUgT2JqZWN0IChSUk8pIHVzZWQN CmluIFBBVEggYW5kIFJFU1YgcmVxdWVzdHMsIHRvIGFsbG93IHRoZSBlc3RhYmxpc2htZW50IG9m IGEgYmktZGlyZWN0aW9uYWwNCmJ5cGFzcyB0dW5uZWwuDQoNClRoZSBzZWN1cml0eSBvZiB0aGUg ZXhpc3RpbmcgbWVjaGFuaXNtIHN0aWxsIGFwcGxpZXMgd2l0aCB0aGUgbmV3IG1lY2hhbmlzbSwN CmFuZCB0aGUgc2VjdXJpdHkgc2VjdGlvbiBkaXNjdXNzZXMgdGhlIGltcGxpY2F0aW9ucyBvZiB0 aGUgbmV3IHN1Ym9iamVjdCBhbmQNCnRoZSBuZXcgZXJyb3IgYXNzb2NpYXRlZCB3aXRoIHRoYXQs IHdoaWNoIHNlZW1zIHJlYXNvbmFibGUuDQoNClRoZSBkb2N1bWVudCBhbHNvIHBvaW50cyB0byBh biBNUExTL0dNUExTIFNlY3VyaXR5IEZyYW1ld29yayAoUkZDNTkyMCkNCmRvY3VtZW50IHRoYXQg aGFzIGFuIGV4dGVuc2l2ZSBkaXNjdXNzaW9uIG9mIHRoZSBzZWN1cml0eSBvZiBNUExTL0dNUExT DQpuZXR3b3JrIGluIGdlbmVyYWwgdGhhdCBhbHNvIGFwcGxpZXMgdG8gdGhpcyBkb2N1bWVudC4N Cg0KDQpOaXRzDQoNCkJlY2F1c2UgdGhlIGRvY3VtZW50IGV4dGVuZHMgUkZDNDA5MCwgaXQgc2hv dWxkIGFkZCAiVXBkYXRlczogNDA5MCIgYXQgdGhlDQp0b3Agb2YgdGhlIGRvY3VtZW50Lg0KDQpS ZWdhcmRzLA0KIFJpZmFhdA0KDQo= --_000_E6C94EE4C51B47E2AF0C50AF1E967F44ciscocom_ Content-Type: text/html; charset="utf-8" Content-ID: <5B437531B1F8484283C6EF71F0B2DD7F@emea.cisco.com> Content-Transfer-Encoding: base64 PGh0bWwgeG1sbnM6bz0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6b2ZmaWNlIiB4 bWxuczp3PSJ1cm46c2NoZW1hcy1taWNyb3NvZnQtY29tOm9mZmljZTp3b3JkIiB4bWxuczptPSJo dHRwOi8vc2NoZW1hcy5taWNyb3NvZnQuY29tL29mZmljZS8yMDA0LzEyL29tbWwiIHhtbG5zPSJo dHRwOi8vd3d3LnczLm9yZy9UUi9SRUMtaHRtbDQwIj4NCjxoZWFkPg0KPG1ldGEgaHR0cC1lcXVp dj0iQ29udGVudC1UeXBlIiBjb250ZW50PSJ0ZXh0L2h0bWw7IGNoYXJzZXQ9dXRmLTgiPg0KPG1l dGEgbmFtZT0iVGl0bGUiIGNvbnRlbnQ9IiI+DQo8bWV0YSBuYW1lPSJLZXl3b3JkcyIgY29udGVu dD0iIj4NCjxtZXRhIG5hbWU9IkdlbmVyYXRvciIgY29udGVudD0iTWljcm9zb2Z0IFdvcmQgMTUg KGZpbHRlcmVkIG1lZGl1bSkiPg0KPHN0eWxlPjwhLS0NCi8qIEZvbnQgRGVmaW5pdGlvbnMgKi8N CkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6IkNhbWJyaWEgTWF0aCI7DQoJcGFub3NlLTE6MiA0 IDUgMyA1IDQgNiAzIDIgNDt9DQpAZm9udC1mYWNlDQoJe2ZvbnQtZmFtaWx5OkNhbGlicmk7DQoJ cGFub3NlLTE6MiAxNSA1IDIgMiAyIDQgMyAyIDQ7fQ0KLyogU3R5bGUgRGVmaW5pdGlvbnMgKi8N CnAuTXNvTm9ybWFsLCBsaS5Nc29Ob3JtYWwsIGRpdi5Nc29Ob3JtYWwNCgl7bWFyZ2luOjBjbTsN CgltYXJnaW4tYm90dG9tOi4wMDAxcHQ7DQoJZm9udC1zaXplOjEyLjBwdDsNCglmb250LWZhbWls eToiVGltZXMgTmV3IFJvbWFuIjt9DQphOmxpbmssIHNwYW4uTXNvSHlwZXJsaW5rDQoJe21zby1z dHlsZS1wcmlvcml0eTo5OTsNCgljb2xvcjojMDU2M0MxOw0KCXRleHQtZGVjb3JhdGlvbjp1bmRl cmxpbmU7fQ0KYTp2aXNpdGVkLCBzcGFuLk1zb0h5cGVybGlua0ZvbGxvd2VkDQoJe21zby1zdHls ZS1wcmlvcml0eTo5OTsNCgljb2xvcjojOTU0RjcyOw0KCXRleHQtZGVjb3JhdGlvbjp1bmRlcmxp bmU7fQ0Kc3Bhbi5FbWFpbFN0eWxlMTcNCgl7bXNvLXN0eWxlLXR5cGU6cGVyc29uYWwtcmVwbHk7 DQoJZm9udC1mYW1pbHk6Q2FsaWJyaTsNCgljb2xvcjp3aW5kb3d0ZXh0O30NCnNwYW4ubXNvSW5z DQoJe21zby1zdHlsZS10eXBlOmV4cG9ydC1vbmx5Ow0KCW1zby1zdHlsZS1uYW1lOiIiOw0KCXRl eHQtZGVjb3JhdGlvbjp1bmRlcmxpbmU7DQoJY29sb3I6dGVhbDt9DQouTXNvQ2hwRGVmYXVsdA0K CXttc28tc3R5bGUtdHlwZTpleHBvcnQtb25seTsNCglmb250LXNpemU6MTAuMHB0O30NCkBwYWdl IFdvcmRTZWN0aW9uMQ0KCXtzaXplOjYxMi4wcHQgNzkyLjBwdDsNCgltYXJnaW46NzIuMHB0IDcy LjBwdCA3Mi4wcHQgNzIuMHB0O30NCmRpdi5Xb3JkU2VjdGlvbjENCgl7cGFnZTpXb3JkU2VjdGlv bjE7fQ0KLS0+PC9zdHlsZT4NCjwvaGVhZD4NCjxib2R5IGJnY29sb3I9IndoaXRlIiBsYW5nPSJF Ti1VUyIgbGluaz0iIzA1NjNDMSIgdmxpbms9IiM5NTRGNzIiPg0KPGRpdiBjbGFzcz0iV29yZFNl Y3Rpb24xIj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LWZhbWlseTpD YWxpYnJpIj5UaGFua3MgUmlmYWF0IGZvciB0aGUgcmV2aWV3IG9mIHRoaXMgZG9jdW1lbnQuPG86 cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZv bnQtZmFtaWx5OkNhbGlicmkiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNz PSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LWZhbWlseTpDYWxpYnJpIj5IaSBEZWJvcmFo LCBMb3UsIFBhdmFuLDxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi PjxzcGFuIHN0eWxlPSJmb250LWZhbWlseTpDYWxpYnJpIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bh bj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1mYW1pbHk6Q2Fs aWJyaSI+QW55IHRob3VnaHRzIG9uIHRoZSBmb2xsb3dpbmcgc3VnZ2VzdGlvbj88bzpwPjwvbzpw Pjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1mYW1p bHk6Q2FsaWJyaSI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05v cm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtZmFtaWx5OkNhbGlicmkiPuKAnEJlY2F1c2UgdGhlIGRv Y3VtZW50IGV4dGVuZHMgUkZDNDA5MCwgaXQgc2hvdWxkIGFkZCAmcXVvdDtVcGRhdGVzOiA0MDkw JnF1b3Q7IGF0IHRoZSB0b3Agb2YgdGhlIGRvY3VtZW50LuKAnTxvOnA+PC9vOnA+PC9zcGFuPjwv cD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LWZhbWlseTpDYWxpYnJp Ij48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3Bh biBzdHlsZT0iZm9udC1mYW1pbHk6Q2FsaWJyaSI+VGhhbmtzLDxvOnA+PC9vOnA+PC9zcGFuPjwv cD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LWZhbWlseTpDYWxpYnJp Ij5SYWtlc2g8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3Bh biBzdHlsZT0iZm9udC1mYW1pbHk6Q2FsaWJyaSI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9w Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtZmFtaWx5OkNhbGlicmki PjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxkaXYgc3R5bGU9ImJvcmRlcjpub25lO2Jv cmRlci10b3A6c29saWQgI0I1QzRERiAxLjBwdDtwYWRkaW5nOjMuMHB0IDBjbSAwY20gMGNtIj4N CjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxiPjxzcGFuIHN0eWxlPSJmb250LWZhbWlseTpDYWxpYnJp O2NvbG9yOmJsYWNrIj5Gcm9tOiA8L3NwYW4+DQo8L2I+PHNwYW4gc3R5bGU9ImZvbnQtZmFtaWx5 OkNhbGlicmk7Y29sb3I6YmxhY2siPlJpZmFhdCBTaGVraC1ZdXNlZiAmbHQ7cmlmYWF0LmlldGZA Z21haWwuY29tJmd0Ozxicj4NCjxiPkRhdGU6IDwvYj5UdWVzZGF5LCBKdWx5IDQsIDIwMTcgYXQg OTozMiBBTTxicj4NCjxiPlRvOiA8L2I+JnF1b3Q7ZHJhZnQtaWV0Zi10ZWFzLWdtcGxzLWxzcC1m YXN0cmVyb3V0ZS5hbGxAaWV0Zi5vcmcmcXVvdDsgJmx0O2RyYWZ0LWlldGYtdGVhcy1nbXBscy1s c3AtZmFzdHJlcm91dGUuYWxsQGlldGYub3JnJmd0OywgJnF1b3Q7c2VjZGlyQGlldGYub3JnJnF1 b3Q7ICZsdDtzZWNkaXJAaWV0Zi5vcmcmZ3Q7LCBUaGUgSUVTRyAmbHQ7aWVzZ0BpZXRmLm9yZyZn dDs8YnI+DQo8Yj5TdWJqZWN0OiA8L2I+W3NlY2Rpcl0gc2VjZGlyIHJldmlldyBvZiBkcmFmdC1p ZXRmLXRlYXMtZ21wbHMtbHNwLWZhc3RyZXJvdXRlLTA5PGJyPg0KPGI+UmVzZW50LUZyb206IDwv Yj4mbHQ7YWxpYXMtYm91bmNlc0BpZXRmLm9yZyZndDs8YnI+DQo8Yj5SZXNlbnQtVG86IDwvYj4m cXVvdDs9U01UUDptdGFpbGxvbkBjaXNjby4gY29tJnF1b3Q7ICZsdDttdGFpbGxvbkBjaXNjby5j b20mZ3Q7LCAmbHQ7dHNhYWRAY2lzY28uY29tJmd0OywgJnF1b3Q7PVNNVFA6cmdhbmRoaUBjaXNj by4gY29tJnF1b3Q7ICZsdDtyZ2FuZGhpQGNpc2NvLmNvbSZndDssIFphZmFyIEFsaSAmbHQ7emFs aUBjaXNjby5jb20mZ3Q7LCAmbHQ7bWFuYXYuYmhhdGlhQG5va2lhLmNvbSZndDssICZsdDttaGFy dGxleUBjaXNjby5jb20mZ3Q7LCBMb3UgQmVyZ2VyICZsdDtsYmVyZ2VyQGxhYm4ubmV0Jmd0Oywg Jmx0O3ZiZWVyYW1AanVuaXBlci5uZXQmZ3Q7LA0KICZsdDthcmV0YW5hQGNpc2NvLmNvbSZndDss IERFQk9SQUggQlJVTkdBUkQgJmx0O2RiMzU0NkBhdHQuY29tJmd0OywgJmx0O2FrYXRsYXNAZ21h aWwuY29tJmd0Ozxicj4NCjxiPlJlc2VudC1EYXRlOiA8L2I+VHVlc2RheSwgSnVseSA0LCAyMDE3 IGF0IDk6NDAgQU08bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxkaXY+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5JIGhhdmUgcmV2aWV3ZWQgdGhpcyBkb2N1bWVudCBhcyBw YXJ0IG9mIHRoZSBzZWN1cml0eSBkaXJlY3RvcmF0ZSdzPG86cD48L286cD48L3A+DQo8L2Rpdj4N CjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5vbmdvaW5nIGVmZm9ydCB0byByZXZpZXcgYWxs IElFVEYgZG9jdW1lbnRzIGJlaW5nIHByb2Nlc3NlZCBieSB0aGU8bzpwPjwvbzpwPjwvcD4NCjwv ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPklFU0cuJm5ic3A7IFRoZXNlIGNvbW1l bnRzIHdlcmUgd3JpdHRlbiBwcmltYXJpbHkgZm9yIHRoZSBiZW5lZml0IG9mIHRoZTxvOnA+PC9v OnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+c2VjdXJpdHkgYXJl YSBkaXJlY3RvcnMuJm5ic3A7IERvY3VtZW50IGVkaXRvcnMgYW5kIFdHIGNoYWlycyBzaG91bGQg dHJlYXQ8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi PnRoZXNlIGNvbW1lbnRzIGp1c3QgbGlrZSBhbnkgb3RoZXIgbGFzdCBjYWxsIGNvbW1lbnRzLjxv OnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4m bmJzcDs8L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5TdW1t YXJ5OiBSZWFkeSB3aXRoIE5pdHM8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNs YXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8 cCBjbGFzcz0iTXNvTm9ybWFsIj5JIGRpZCBub3QgaGF2ZSBlbm91Z2ggYmFja2dyb3VuZCBvbiBN TFBTIGFuZCBHTVBMUyBhbmQgdGhlaXIgcmVsYXRlZCBSRkNzLDxvOnA+PC9vOnA+PC9wPg0KPC9k aXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+c28gSSBoYWQgdG8gZG8gc29tZSByZWFk aW5nIHRvIGdldCBzb21lIGZhbWlsaWFyaXR5IHdpdGggdGhpcyBzdWJqZWN0IHRvIGJlPG86cD48 L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5hYmxlIHRvIHBy b3ZpZGUgc29tZSByZWFzb25hYmxlIHJldmlldyBvZiB0aGlzIGRvY3VtZW50LjxvOnA+PC9vOnA+ PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8L286 cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5UaGlzIGRvY3VtZW50 IGJ1aWxkcyBvbiBhbiBleGlzdGluZyBtZWNoYW5pc20sICZxdW90O0Zhc3QgUmVyb3V0ZSBFeHRl bnNpb25zIHRvPG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9y bWFsIj5SU1ZQLVRFIGZvciBMU1AgVHVubmVscyZxdW90OyBkZWZpbmVkIGluIFJGQzQwOTAsIHdo aWNoIGRlZmluZXMgYSBtZWNoYW5pc20gdG88bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4N CjxwIGNsYXNzPSJNc29Ob3JtYWwiPmVzdGFibGlzaCBhIGJhY2t1cCB0dW5uZWxzIGZvciBsb2Nh bCBMU1AgdHVubmVscy4gT25lIGxpbWl0YXRpb24gb2YgdGhlPG86cD48L286cD48L3A+DQo8L2Rp dj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5leGlzdGluZyBtZWNoYW5pc20gaXMgdGhh dCBpbiBzb21lIHNpdHVhdGlvbnMgaXQgbWlnaHQgYXNzaWduIGRpZmZlcmVudDxvOnA+PC9vOnA+ PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+dW5pLWRpcmVjdGlvbmFs IGJ5cGFzcyB0dW5uZWxzIGZvciB0aGUgZm9yd2FyZCBhbmQgcmV2ZXJzZSBkaXJlY3Rpb25zLjxv OnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4m bmJzcDs8L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5UaGlz IGRvY3VtZW50IGV4dGVuZHMgdGhlIG1lY2hhbmlzbSBkZWZpbmVkIGluIFJGQzQwOTAsIGJ5IGFk ZGluZyBhIG5ldzxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05v cm1hbCI+QllQQVNTX0FTU0lHTk1FTlQgc3Vib2JqZWN0IHRvIHRoZSBleGlzdGluZyBSRUNPUkRf Uk9VVEUgT2JqZWN0IChSUk8pIHVzZWQ8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxw IGNsYXNzPSJNc29Ob3JtYWwiPmluIFBBVEggYW5kIFJFU1YgcmVxdWVzdHMsIHRvIGFsbG93IHRo ZSBlc3RhYmxpc2htZW50IG9mIGEgYmktZGlyZWN0aW9uYWw8bzpwPjwvbzpwPjwvcD4NCjwvZGl2 Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPmJ5cGFzcyB0dW5uZWwuPG86cD48L286cD48 L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpw PjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPlRoZSBzZWN1cml0eSBv ZiB0aGUgZXhpc3RpbmcgbWVjaGFuaXNtIHN0aWxsIGFwcGxpZXMgd2l0aCB0aGUgbmV3IG1lY2hh bmlzbSw8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi PmFuZCB0aGUgc2VjdXJpdHkgc2VjdGlvbiBkaXNjdXNzZXMgdGhlIGltcGxpY2F0aW9ucyBvZiB0 aGUgbmV3IHN1Ym9iamVjdCBhbmQ8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNs YXNzPSJNc29Ob3JtYWwiPnRoZSBuZXcgZXJyb3IgYXNzb2NpYXRlZCB3aXRoIHRoYXQsIHdoaWNo IHNlZW1zIHJlYXNvbmFibGUuPG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNs YXNzPSJNc29Ob3JtYWwiPlRoZSBkb2N1bWVudCBhbHNvIHBvaW50cyB0byBhbiBNUExTL0dNUExT IFNlY3VyaXR5IEZyYW1ld29yayAoUkZDNTkyMCk8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRp dj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPmRvY3VtZW50IHRoYXQgaGFzIGFuIGV4dGVuc2l2ZSBk aXNjdXNzaW9uIG9mIHRoZSBzZWN1cml0eSBvZiBNUExTL0dNUExTPG86cD48L286cD48L3A+DQo8 L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5uZXR3b3JrIGluIGdlbmVyYWwgdGhh dCBhbHNvIGFwcGxpZXMgdG8gdGhpcyBkb2N1bWVudC48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0K PGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPC9kaXY+ DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8L2Rp dj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5OaXRzPG86cD48L286cD48L3A+DQo8L2Rp dj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjwv ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPkJlY2F1c2UgdGhlIGRvY3VtZW50IGV4 dGVuZHMgUkZDNDA5MCwgaXQgc2hvdWxkIGFkZCAmcXVvdDtVcGRhdGVzOiA0MDkwJnF1b3Q7IGF0 IHRoZTxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+ dG9wIG9mIHRoZSBkb2N1bWVudC48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNs YXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCI+UmVnYXJkcyw8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4N CjxwIGNsYXNzPSJNc29Ob3JtYWwiPiZuYnNwO1JpZmFhdDxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+ DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8L2Rp dj4NCjwvZGl2Pg0KPC9kaXY+DQo8L2JvZHk+DQo8L2h0bWw+DQo= --_000_E6C94EE4C51B47E2AF0C50AF1E967F44ciscocom_-- From nobody Tue Jul 4 08:39:01 2017 Return-Path: X-Original-To: secdir@ietfa.amsl.com Delivered-To: secdir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id DF4EE131962; Tue, 4 Jul 2017 08:38:53 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.021 X-Spam-Level: X-Spam-Status: No, score=-2.021 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H4=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=juniper.net Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id BhnjptNCgjoJ; Tue, 4 Jul 2017 08:38:50 -0700 (PDT) Received: from NAM01-BY2-obe.outbound.protection.outlook.com (mail-by2nam01on0127.outbound.protection.outlook.com [104.47.34.127]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 90C00131648; Tue, 4 Jul 2017 08:38:50 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=juniper.net; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=ZB2b+/FttQkwY9Wk/JlTGPqNEdtZUGwCn9p94cHeKCc=; b=iwiWsGxaFaIwOToyRwbnc2M5c70Mt+moZySf2LIf2DKBAlW1O/v463XL/xIJCVzA/B5Bkvds/lVQy84BK0MsxbqZ51gl9QcMG0DRqO6sf8VrGQiUgyl2vzQanIxbGFMVpmNOemDNh6e8qJNiLQwlOzAuF/O0EYe+HRiiMvngFpM= Received: from SN2PR05MB2512.namprd05.prod.outlook.com (10.166.213.21) by SN2PR05MB2493.namprd05.prod.outlook.com (10.166.213.14) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256_P256) id 15.1.1240.6; Tue, 4 Jul 2017 15:38:49 +0000 Received: from SN2PR05MB2512.namprd05.prod.outlook.com ([10.166.213.21]) by SN2PR05MB2512.namprd05.prod.outlook.com ([10.166.213.21]) with mapi id 15.01.1240.013; Tue, 4 Jul 2017 15:38:49 +0000 From: Vishnu Pavan Beeram To: "Rakesh Gandhi (rgandhi)" , Rifaat Shekh-Yusef , "draft-ietf-teas-gmpls-lsp-fastreroute.all@ietf.org" , "secdir@ietf.org" , The IESG CC: DEBORAH BRUNGARD , Lou Berger , "EXT-vishnupavan@gmail.com" Thread-Topic: [secdir] secdir review of draft-ietf-teas-gmpls-lsp-fastreroute-09 Thread-Index: AQHS9MsTRZa470ZjikupMw0zlXQIwKJDwaaA///I9wA= Date: Tue, 4 Jul 2017 15:38:49 +0000 Message-ID: <233DDE34-9818-4088-A9CE-84180A34D5A4@juniper.net> References: In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/f.17.0.160611 authentication-results: cisco.com; dkim=none (message not signed) header.d=none;cisco.com; dmarc=none action=none header.from=juniper.net; x-originating-ip: [66.129.241.10] x-ms-publictraffictype: Email x-microsoft-exchange-diagnostics: 1; SN2PR05MB2493; 7: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 x-ld-processed: bea78b3c-4cdb-4130-854a-1d193232e5f4,ExtAddr x-ms-office365-filtering-correlation-id: 7132c1f4-3d05-436e-f8d9-08d4c2f2c40a x-ms-office365-filtering-ht: Tenant x-microsoft-antispam: UriScan:; BCL:0; PCL:0; RULEID:(300000500095)(300135000095)(300000501095)(300135300095)(22001)(300000502095)(300135100095)(2017030254075)(48565401081)(300000503095)(300135400095)(2017052603031)(201703131423075)(201703031133081)(201702281549075)(300000504095)(300135200095)(300000505095)(300135600095)(300000506095)(300135500095); SRVR:SN2PR05MB2493; x-ms-traffictypediagnostic: SN2PR05MB2493: x-microsoft-antispam-prvs: x-exchange-antispam-report-test: UriScan:(151999592597050)(278178393323532)(26388249023172)(236129657087228)(192374486261705)(138986009662008)(82608151540597)(97927398514766)(148574349560750)(21748063052155); x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(100000700101)(100105000095)(100000701101)(100105300095)(100000702101)(100105100095)(6040450)(601004)(2401047)(8121501046)(5005006)(93006095)(93001095)(10201501046)(100000703101)(100105400095)(3002001)(6055026)(6041248)(20161123555025)(20161123560025)(20161123562025)(201703131423075)(201702281528075)(201703061421075)(201703061406153)(20161123564025)(20161123558100)(6072148)(100000704101)(100105200095)(100000705101)(100105500095); SRVR:SN2PR05MB2493; BCL:0; PCL:0; RULEID:(100000800101)(100110000095)(100000801101)(100110300095)(100000802101)(100110100095)(100000803101)(100110400095)(100000804101)(100110200095)(100000805101)(100110500095); SRVR:SN2PR05MB2493; x-forefront-prvs: 0358535363 x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(39410400002)(39850400002)(39400400002)(39840400002)(39860400002)(39450400003)(37854004)(377454003)(33656002)(2501003)(8936002)(2950100002)(7736002)(6116002)(102836003)(3846002)(53546010)(83506001)(82746002)(25786009)(86362001)(66066001)(83716003)(14454004)(478600001)(5660300001)(6486002)(77096006)(39060400002)(4326008)(229853002)(54906002)(236005)(6246003)(189998001)(6506006)(2906002)(54896002)(6306002)(6512007)(99286003)(53936002)(38730400002)(76176999)(3280700002)(50986999)(54356999)(6436002)(8676002)(81166006)(2900100001)(4001350100001)(3660700001)(230783001)(2201001)(36756003); DIR:OUT; SFP:1102; SCL:1; SRVR:SN2PR05MB2493; H:SN2PR05MB2512.namprd05.prod.outlook.com; FPR:; SPF:None; MLV:ovrnspm; PTR:InfoNoRecords; LANG:en; spamdiagnosticoutput: 1:99 spamdiagnosticmetadata: NSPM Content-Type: multipart/alternative; boundary="_000_233DDE3498184088A9CE84180A34D5A4junipernet_" MIME-Version: 1.0 X-OriginatorOrg: juniper.net X-MS-Exchange-CrossTenant-originalarrivaltime: 04 Jul 2017 15:38:49.2541 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: bea78b3c-4cdb-4130-854a-1d193232e5f4 X-MS-Exchange-Transport-CrossTenantHeadersStamped: SN2PR05MB2493 Archived-At: Subject: Re: [secdir] secdir review of draft-ietf-teas-gmpls-lsp-fastreroute-09 X-BeenThere: secdir@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: Security Area Directorate List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 04 Jul 2017 15:38:54 -0000 --_000_233DDE3498184088A9CE84180A34D5A4junipernet_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 UmFrZXNoLCBIaSENCg0KVGhpcyBpcyBhIHZhbGlkIGNvbW1lbnQuIDxHTVBMUy1MU1AtRlJSPiBk b2VzbuKAmXQgbW9kaWZ5IGFueSBvZiB0aGUgZXhpc3RpbmcgcHJvY2VkdXJlcyBkZWZpbmVkIGlu IFJGQzQwOTAsIGJ1dCBpdCBkb2VzIHN1cHBsZW1lbnQgaXQuIEFzIHBlciBSRkMyMjIzLCB0aGlz IGlzIHN1ZmZpY2llbnQgZ3JvdW5kcyB0byBzZXQgdGhlIOKAnFVwZGF0ZXPigJ0gZmllbGQuDQoN CkNvdXJ0ZXN5IFJGQzIyMjM6DQoNCiAgICAgIFRvIGJlIHVzZWQgYXMgYSByZWZlcmVuY2UgZnJv bSBhIG5ldyBpdGVtIHRoYXQgY2Fubm90IGJlIHVzZWQNCiAgICAgIGFsb25lIChpLmUuLCBvbmUg dGhhdCBzdXBwbGVtZW50cyBhIHByZXZpb3VzIGRvY3VtZW50KSwgdG8gcmVmZXINCiAgICAgIHRv IHRoZSBwcmV2aW91cyBkb2N1bWVudC4gIFRoZSBuZXdlciBwdWJsaWNhdGlvbiBpcyBhIHBhcnQg dGhhdA0KICAgICAgd2lsbCBzdXBwbGVtZW50IG9yIGJlIGFkZGVkIG9uIHRvIHRoZSBleGlzdGlu ZyBkb2N1bWVudDsgZS5nLiwgYW4NCiAgICAgIGFkZGVuZHVtLCBvciBzZXBhcmF0ZSwgZXh0cmEg aW5mb3JtYXRpb24gdGhhdCBpcyB0byBiZSBhZGRlZCB0bw0KICAgICAgdGhlIG9yaWdpbmFsIGRv Y3VtZW50Lg0KDQpARGVib3JhaCDigJQgQXJlIHlvdSBvayB3aXRoIHRoaXM/DQpSZWdhcmRzLA0K LVBhdmFuDQoNCkZyb206ICJSYWtlc2ggR2FuZGhpIChyZ2FuZGhpKSIgPHJnYW5kaGlAY2lzY28u Y29tPG1haWx0bzpyZ2FuZGhpQGNpc2NvLmNvbT4+DQpEYXRlOiBUdWVzZGF5LCBKdWx5IDQsIDIw MTcgYXQgMTA6NTUgQU0NClRvOiBSaWZhYXQgU2hla2gtWXVzZWYgPHJpZmFhdC5pZXRmQGdtYWls LmNvbTxtYWlsdG86cmlmYWF0LmlldGZAZ21haWwuY29tPj4sICJkcmFmdC1pZXRmLXRlYXMtZ21w bHMtbHNwLWZhc3RyZXJvdXRlLmFsbEBpZXRmLm9yZzxtYWlsdG86ZHJhZnQtaWV0Zi10ZWFzLWdt cGxzLWxzcC1mYXN0cmVyb3V0ZS5hbGxAaWV0Zi5vcmc+IiA8ZHJhZnQtaWV0Zi10ZWFzLWdtcGxz LWxzcC1mYXN0cmVyb3V0ZS5hbGxAaWV0Zi5vcmc8bWFpbHRvOmRyYWZ0LWlldGYtdGVhcy1nbXBs cy1sc3AtZmFzdHJlcm91dGUuYWxsQGlldGYub3JnPj4sICJzZWNkaXJAaWV0Zi5vcmc8bWFpbHRv OnNlY2RpckBpZXRmLm9yZz4iIDxzZWNkaXJAaWV0Zi5vcmc8bWFpbHRvOnNlY2RpckBpZXRmLm9y Zz4+LCBUaGUgSUVTRyA8aWVzZ0BpZXRmLm9yZzxtYWlsdG86aWVzZ0BpZXRmLm9yZz4+DQpDYzog REVCT1JBSCBCUlVOR0FSRCA8ZGIzNTQ2QGF0dC5jb208bWFpbHRvOmRiMzU0NkBhdHQuY29tPj4s IExvdSBCZXJnZXIgPGxiZXJnZXJAbGFibi5uZXQ8bWFpbHRvOmxiZXJnZXJAbGFibi5uZXQ+Piwg IkVYVC12aXNobnVwYXZhbkBnbWFpbC5jb208bWFpbHRvOkVYVC12aXNobnVwYXZhbkBnbWFpbC5j b20+IiA8dmlzaG51cGF2YW5AZ21haWwuY29tPG1haWx0bzp2aXNobnVwYXZhbkBnbWFpbC5jb20+ Pg0KU3ViamVjdDogUmU6IFtzZWNkaXJdIHNlY2RpciByZXZpZXcgb2YgZHJhZnQtaWV0Zi10ZWFz LWdtcGxzLWxzcC1mYXN0cmVyb3V0ZS0wOQ0KUmVzZW50LUZyb206IDxhbGlhcy1ib3VuY2VzQGll dGYub3JnPG1haWx0bzphbGlhcy1ib3VuY2VzQGlldGYub3JnPj4NClJlc2VudC1UbzogPG10YWls bG9uQGNpc2NvLmNvbTxtYWlsdG86bXRhaWxsb25AY2lzY28uY29tPj4sIDx0c2FhZEBjaXNjby5j b208bWFpbHRvOnRzYWFkQGNpc2NvLmNvbT4+LCA8cmdhbmRoaUBjaXNjby5jb208bWFpbHRvOnJn YW5kaGlAY2lzY28uY29tPj4sIFphZmFyIEFsaSA8emFsaUBjaXNjby5jb208bWFpbHRvOnphbGlA Y2lzY28uY29tPj4sIDxtYW5hdi5iaGF0aWFAbm9raWEuY29tPG1haWx0bzptYW5hdi5iaGF0aWFA bm9raWEuY29tPj4sIDxtaGFydGxleUBjaXNjby5jb208bWFpbHRvOm1oYXJ0bGV5QGNpc2NvLmNv bT4+LCBMb3UgQmVyZ2VyIDxsYmVyZ2VyQGxhYm4ubmV0PG1haWx0bzpsYmVyZ2VyQGxhYm4ubmV0 Pj4sIFZpc2hudSBQYXZhbiBCZWVyYW0gPHZiZWVyYW1AanVuaXBlci5uZXQ8bWFpbHRvOnZiZWVy YW1AanVuaXBlci5uZXQ+PiwgPGFyZXRhbmFAY2lzY28uY29tPG1haWx0bzphcmV0YW5hQGNpc2Nv LmNvbT4+LCA8ZGIzNTQ2QGF0dC5jb208bWFpbHRvOmRiMzU0NkBhdHQuY29tPj4sIDxha2F0bGFz QGdtYWlsLmNvbTxtYWlsdG86YWthdGxhc0BnbWFpbC5jb20+Pg0KUmVzZW50LURhdGU6IFR1ZXNk YXksIEp1bHkgNCwgMjAxNyBhdCAxMDo1NSBBTQ0KDQpUaGFua3MgUmlmYWF0IGZvciB0aGUgcmV2 aWV3IG9mIHRoaXMgZG9jdW1lbnQuDQoNCkhpIERlYm9yYWgsIExvdSwgUGF2YW4sDQoNCkFueSB0 aG91Z2h0cyBvbiB0aGUgZm9sbG93aW5nIHN1Z2dlc3Rpb24/DQoNCuKAnEJlY2F1c2UgdGhlIGRv Y3VtZW50IGV4dGVuZHMgUkZDNDA5MCwgaXQgc2hvdWxkIGFkZCAiVXBkYXRlczogNDA5MCIgYXQg dGhlIHRvcCBvZiB0aGUgZG9jdW1lbnQu4oCdDQoNClRoYW5rcywNClJha2VzaA0KDQoNCkZyb206 IFJpZmFhdCBTaGVraC1ZdXNlZiA8cmlmYWF0LmlldGZAZ21haWwuY29tPG1haWx0bzpyaWZhYXQu aWV0ZkBnbWFpbC5jb20+Pg0KRGF0ZTogVHVlc2RheSwgSnVseSA0LCAyMDE3IGF0IDk6MzIgQU0N ClRvOiAiZHJhZnQtaWV0Zi10ZWFzLWdtcGxzLWxzcC1mYXN0cmVyb3V0ZS5hbGxAaWV0Zi5vcmc8 bWFpbHRvOmRyYWZ0LWlldGYtdGVhcy1nbXBscy1sc3AtZmFzdHJlcm91dGUuYWxsQGlldGYub3Jn PiIgPGRyYWZ0LWlldGYtdGVhcy1nbXBscy1sc3AtZmFzdHJlcm91dGUuYWxsQGlldGYub3JnPG1h aWx0bzpkcmFmdC1pZXRmLXRlYXMtZ21wbHMtbHNwLWZhc3RyZXJvdXRlLmFsbEBpZXRmLm9yZz4+ LCAic2VjZGlyQGlldGYub3JnPG1haWx0bzpzZWNkaXJAaWV0Zi5vcmc+IiA8c2VjZGlyQGlldGYu b3JnPG1haWx0bzpzZWNkaXJAaWV0Zi5vcmc+PiwgVGhlIElFU0cgPGllc2dAaWV0Zi5vcmc8bWFp bHRvOmllc2dAaWV0Zi5vcmc+Pg0KU3ViamVjdDogW3NlY2Rpcl0gc2VjZGlyIHJldmlldyBvZiBk cmFmdC1pZXRmLXRlYXMtZ21wbHMtbHNwLWZhc3RyZXJvdXRlLTA5DQpSZXNlbnQtRnJvbTogPGFs aWFzLWJvdW5jZXNAaWV0Zi5vcmc8bWFpbHRvOmFsaWFzLWJvdW5jZXNAaWV0Zi5vcmc+Pg0KUmVz ZW50LVRvOiAiPVNNVFA6bXRhaWxsb25AY2lzY28uIGNvbSIgPG10YWlsbG9uQGNpc2NvLmNvbTxt YWlsdG86bXRhaWxsb25AY2lzY28uY29tPj4sIDx0c2FhZEBjaXNjby5jb208bWFpbHRvOnRzYWFk QGNpc2NvLmNvbT4+LCAiPVNNVFA6cmdhbmRoaUBjaXNjby4gY29tIiA8cmdhbmRoaUBjaXNjby5j b208bWFpbHRvOnJnYW5kaGlAY2lzY28uY29tPj4sIFphZmFyIEFsaSA8emFsaUBjaXNjby5jb208 bWFpbHRvOnphbGlAY2lzY28uY29tPj4sIDxtYW5hdi5iaGF0aWFAbm9raWEuY29tPG1haWx0bzpt YW5hdi5iaGF0aWFAbm9raWEuY29tPj4sIDxtaGFydGxleUBjaXNjby5jb208bWFpbHRvOm1oYXJ0 bGV5QGNpc2NvLmNvbT4+LCBMb3UgQmVyZ2VyIDxsYmVyZ2VyQGxhYm4ubmV0PG1haWx0bzpsYmVy Z2VyQGxhYm4ubmV0Pj4sIDx2YmVlcmFtQGp1bmlwZXIubmV0PG1haWx0bzp2YmVlcmFtQGp1bmlw ZXIubmV0Pj4sIDxhcmV0YW5hQGNpc2NvLmNvbTxtYWlsdG86YXJldGFuYUBjaXNjby5jb20+Piwg REVCT1JBSCBCUlVOR0FSRCA8ZGIzNTQ2QGF0dC5jb208bWFpbHRvOmRiMzU0NkBhdHQuY29tPj4s IDxha2F0bGFzQGdtYWlsLmNvbTxtYWlsdG86YWthdGxhc0BnbWFpbC5jb20+Pg0KUmVzZW50LURh dGU6IFR1ZXNkYXksIEp1bHkgNCwgMjAxNyBhdCA5OjQwIEFNDQoNCkkgaGF2ZSByZXZpZXdlZCB0 aGlzIGRvY3VtZW50IGFzIHBhcnQgb2YgdGhlIHNlY3VyaXR5IGRpcmVjdG9yYXRlJ3MNCm9uZ29p bmcgZWZmb3J0IHRvIHJldmlldyBhbGwgSUVURiBkb2N1bWVudHMgYmVpbmcgcHJvY2Vzc2VkIGJ5 IHRoZQ0KSUVTRy4gIFRoZXNlIGNvbW1lbnRzIHdlcmUgd3JpdHRlbiBwcmltYXJpbHkgZm9yIHRo ZSBiZW5lZml0IG9mIHRoZQ0Kc2VjdXJpdHkgYXJlYSBkaXJlY3RvcnMuICBEb2N1bWVudCBlZGl0 b3JzIGFuZCBXRyBjaGFpcnMgc2hvdWxkIHRyZWF0DQp0aGVzZSBjb21tZW50cyBqdXN0IGxpa2Ug YW55IG90aGVyIGxhc3QgY2FsbCBjb21tZW50cy4NCg0KU3VtbWFyeTogUmVhZHkgd2l0aCBOaXRz DQoNCg0KSSBkaWQgbm90IGhhdmUgZW5vdWdoIGJhY2tncm91bmQgb24gTUxQUyBhbmQgR01QTFMg YW5kIHRoZWlyIHJlbGF0ZWQgUkZDcywNCnNvIEkgaGFkIHRvIGRvIHNvbWUgcmVhZGluZyB0byBn ZXQgc29tZSBmYW1pbGlhcml0eSB3aXRoIHRoaXMgc3ViamVjdCB0byBiZQ0KYWJsZSB0byBwcm92 aWRlIHNvbWUgcmVhc29uYWJsZSByZXZpZXcgb2YgdGhpcyBkb2N1bWVudC4NCg0KVGhpcyBkb2N1 bWVudCBidWlsZHMgb24gYW4gZXhpc3RpbmcgbWVjaGFuaXNtLCAiRmFzdCBSZXJvdXRlIEV4dGVu c2lvbnMgdG8NClJTVlAtVEUgZm9yIExTUCBUdW5uZWxzIiBkZWZpbmVkIGluIFJGQzQwOTAsIHdo aWNoIGRlZmluZXMgYSBtZWNoYW5pc20gdG8NCmVzdGFibGlzaCBhIGJhY2t1cCB0dW5uZWxzIGZv ciBsb2NhbCBMU1AgdHVubmVscy4gT25lIGxpbWl0YXRpb24gb2YgdGhlDQpleGlzdGluZyBtZWNo YW5pc20gaXMgdGhhdCBpbiBzb21lIHNpdHVhdGlvbnMgaXQgbWlnaHQgYXNzaWduIGRpZmZlcmVu dA0KdW5pLWRpcmVjdGlvbmFsIGJ5cGFzcyB0dW5uZWxzIGZvciB0aGUgZm9yd2FyZCBhbmQgcmV2 ZXJzZSBkaXJlY3Rpb25zLg0KDQpUaGlzIGRvY3VtZW50IGV4dGVuZHMgdGhlIG1lY2hhbmlzbSBk ZWZpbmVkIGluIFJGQzQwOTAsIGJ5IGFkZGluZyBhIG5ldw0KQllQQVNTX0FTU0lHTk1FTlQgc3Vi b2JqZWN0IHRvIHRoZSBleGlzdGluZyBSRUNPUkRfUk9VVEUgT2JqZWN0IChSUk8pIHVzZWQNCmlu IFBBVEggYW5kIFJFU1YgcmVxdWVzdHMsIHRvIGFsbG93IHRoZSBlc3RhYmxpc2htZW50IG9mIGEg YmktZGlyZWN0aW9uYWwNCmJ5cGFzcyB0dW5uZWwuDQoNClRoZSBzZWN1cml0eSBvZiB0aGUgZXhp c3RpbmcgbWVjaGFuaXNtIHN0aWxsIGFwcGxpZXMgd2l0aCB0aGUgbmV3IG1lY2hhbmlzbSwNCmFu ZCB0aGUgc2VjdXJpdHkgc2VjdGlvbiBkaXNjdXNzZXMgdGhlIGltcGxpY2F0aW9ucyBvZiB0aGUg bmV3IHN1Ym9iamVjdCBhbmQNCnRoZSBuZXcgZXJyb3IgYXNzb2NpYXRlZCB3aXRoIHRoYXQsIHdo aWNoIHNlZW1zIHJlYXNvbmFibGUuDQoNClRoZSBkb2N1bWVudCBhbHNvIHBvaW50cyB0byBhbiBN UExTL0dNUExTIFNlY3VyaXR5IEZyYW1ld29yayAoUkZDNTkyMCkNCmRvY3VtZW50IHRoYXQgaGFz IGFuIGV4dGVuc2l2ZSBkaXNjdXNzaW9uIG9mIHRoZSBzZWN1cml0eSBvZiBNUExTL0dNUExTDQpu ZXR3b3JrIGluIGdlbmVyYWwgdGhhdCBhbHNvIGFwcGxpZXMgdG8gdGhpcyBkb2N1bWVudC4NCg0K DQpOaXRzDQoNCkJlY2F1c2UgdGhlIGRvY3VtZW50IGV4dGVuZHMgUkZDNDA5MCwgaXQgc2hvdWxk IGFkZCAiVXBkYXRlczogNDA5MCIgYXQgdGhlDQp0b3Agb2YgdGhlIGRvY3VtZW50Lg0KDQpSZWdh cmRzLA0KIFJpZmFhdA0KDQo= --_000_233DDE3498184088A9CE84180A34D5A4junipernet_ Content-Type: text/html; charset="utf-8" Content-ID: <1938DFE4E4E092428931B0C48D2C82B2@namprd05.prod.outlook.com> Content-Transfer-Encoding: base64 PGh0bWw+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIgY29udGVudD0i dGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjwvaGVhZD4NCjxib2R5IHN0eWxlPSJ3b3JkLXdy YXA6IGJyZWFrLXdvcmQ7IC13ZWJraXQtbmJzcC1tb2RlOiBzcGFjZTsgLXdlYmtpdC1saW5lLWJy ZWFrOiBhZnRlci13aGl0ZS1zcGFjZTsgY29sb3I6IHJnYigwLCAwLCAwKTsgZm9udC1zaXplOiAx NHB4OyBmb250LWZhbWlseTogQ2FsaWJyaSwgc2Fucy1zZXJpZjsiPg0KPGRpdj4NCjxkaXY+UmFr ZXNoLCBIaSE8L2Rpdj4NCjxkaXY+PGJyPg0KPC9kaXY+DQo8ZGl2PlRoaXMgaXMgYSB2YWxpZCBj b21tZW50LiAmbHQ7R01QTFMtTFNQLUZSUiZndDsgZG9lc27igJl0IG1vZGlmeSBhbnkgb2YgdGhl IGV4aXN0aW5nIHByb2NlZHVyZXMgZGVmaW5lZCBpbiBSRkM0MDkwLCBidXQgaXQgZG9lcyBzdXBw bGVtZW50IGl0LiBBcyBwZXIgUkZDMjIyMywgdGhpcyBpcyBzdWZmaWNpZW50IGdyb3VuZHMgdG8g c2V0IHRoZSDigJxVcGRhdGVz4oCdIGZpZWxkLjwvZGl2Pg0KPGRpdj48YnI+DQo8L2Rpdj4NCjxk aXY+Q291cnRlc3kgUkZDMjIyMzo8L2Rpdj4NCjxkaXY+DQo8cHJlIGNsYXNzPSJuZXdwYWdlIj4g ICAgICBUbyBiZSB1c2VkIGFzIGEgcmVmZXJlbmNlIGZyb20gYSBuZXcgaXRlbSB0aGF0IGNhbm5v dCBiZSB1c2VkDQogICAgICBhbG9uZSAoaS5lLiwgb25lIHRoYXQgc3VwcGxlbWVudHMgYSBwcmV2 aW91cyBkb2N1bWVudCksIHRvIHJlZmVyDQogICAgICB0byB0aGUgcHJldmlvdXMgZG9jdW1lbnQu ICBUaGUgbmV3ZXIgcHVibGljYXRpb24gaXMgYSBwYXJ0IHRoYXQNCiAgICAgIHdpbGwgc3VwcGxl bWVudCBvciBiZSBhZGRlZCBvbiB0byB0aGUgZXhpc3RpbmcgZG9jdW1lbnQ7IGUuZy4sIGFuDQog ICAgICBhZGRlbmR1bSwgb3Igc2VwYXJhdGUsIGV4dHJhIGluZm9ybWF0aW9uIHRoYXQgaXMgdG8g YmUgYWRkZWQgdG8NCiAgICAgIHRoZSBvcmlnaW5hbCBkb2N1bWVudC48L3ByZT4NCjwvZGl2Pg0K PC9kaXY+DQo8ZGl2PkBEZWJvcmFoIOKAlCBBcmUgeW91IG9rIHdpdGggdGhpcz88L2Rpdj4NCjxk aXY+UmVnYXJkcyw8L2Rpdj4NCjxkaXY+LVBhdmFuPC9kaXY+DQo8ZGl2Pjxicj4NCjwvZGl2Pg0K PHNwYW4gaWQ9Ik9MS19TUkNfQk9EWV9TRUNUSU9OIj4NCjxkaXYgc3R5bGU9ImZvbnQtZmFtaWx5 OkNhbGlicmk7IGZvbnQtc2l6ZToxMnB0OyB0ZXh0LWFsaWduOmxlZnQ7IGNvbG9yOmJsYWNrOyBC T1JERVItQk9UVE9NOiBtZWRpdW0gbm9uZTsgQk9SREVSLUxFRlQ6IG1lZGl1bSBub25lOyBQQURE SU5HLUJPVFRPTTogMGluOyBQQURESU5HLUxFRlQ6IDBpbjsgUEFERElORy1SSUdIVDogMGluOyBC T1JERVItVE9QOiAjYjVjNGRmIDFwdCBzb2xpZDsgQk9SREVSLVJJR0hUOiBtZWRpdW0gbm9uZTsg UEFERElORy1UT1A6IDNwdCI+DQo8c3BhbiBzdHlsZT0iZm9udC13ZWlnaHQ6Ym9sZCI+RnJvbTog PC9zcGFuPiZxdW90O1Jha2VzaCBHYW5kaGkgKHJnYW5kaGkpJnF1b3Q7ICZsdDs8YSBocmVmPSJt YWlsdG86cmdhbmRoaUBjaXNjby5jb20iPnJnYW5kaGlAY2lzY28uY29tPC9hPiZndDs8YnI+DQo8 c3BhbiBzdHlsZT0iZm9udC13ZWlnaHQ6Ym9sZCI+RGF0ZTogPC9zcGFuPlR1ZXNkYXksIEp1bHkg NCwgMjAxNyBhdCAxMDo1NSBBTTxicj4NCjxzcGFuIHN0eWxlPSJmb250LXdlaWdodDpib2xkIj5U bzogPC9zcGFuPlJpZmFhdCBTaGVraC1ZdXNlZiAmbHQ7PGEgaHJlZj0ibWFpbHRvOnJpZmFhdC5p ZXRmQGdtYWlsLmNvbSI+cmlmYWF0LmlldGZAZ21haWwuY29tPC9hPiZndDssICZxdW90OzxhIGhy ZWY9Im1haWx0bzpkcmFmdC1pZXRmLXRlYXMtZ21wbHMtbHNwLWZhc3RyZXJvdXRlLmFsbEBpZXRm Lm9yZyI+ZHJhZnQtaWV0Zi10ZWFzLWdtcGxzLWxzcC1mYXN0cmVyb3V0ZS5hbGxAaWV0Zi5vcmc8 L2E+JnF1b3Q7ICZsdDs8YSBocmVmPSJtYWlsdG86ZHJhZnQtaWV0Zi10ZWFzLWdtcGxzLWxzcC1m YXN0cmVyb3V0ZS5hbGxAaWV0Zi5vcmciPmRyYWZ0LWlldGYtdGVhcy1nbXBscy1sc3AtZmFzdHJl cm91dGUuYWxsQGlldGYub3JnPC9hPiZndDssDQogJnF1b3Q7PGEgaHJlZj0ibWFpbHRvOnNlY2Rp ckBpZXRmLm9yZyI+c2VjZGlyQGlldGYub3JnPC9hPiZxdW90OyAmbHQ7PGEgaHJlZj0ibWFpbHRv OnNlY2RpckBpZXRmLm9yZyI+c2VjZGlyQGlldGYub3JnPC9hPiZndDssIFRoZSBJRVNHICZsdDs8 YSBocmVmPSJtYWlsdG86aWVzZ0BpZXRmLm9yZyI+aWVzZ0BpZXRmLm9yZzwvYT4mZ3Q7PGJyPg0K PHNwYW4gc3R5bGU9ImZvbnQtd2VpZ2h0OmJvbGQiPkNjOiA8L3NwYW4+REVCT1JBSCBCUlVOR0FS RCAmbHQ7PGEgaHJlZj0ibWFpbHRvOmRiMzU0NkBhdHQuY29tIj5kYjM1NDZAYXR0LmNvbTwvYT4m Z3Q7LCBMb3UgQmVyZ2VyICZsdDs8YSBocmVmPSJtYWlsdG86bGJlcmdlckBsYWJuLm5ldCI+bGJl cmdlckBsYWJuLm5ldDwvYT4mZ3Q7LCAmcXVvdDs8YSBocmVmPSJtYWlsdG86RVhULXZpc2hudXBh dmFuQGdtYWlsLmNvbSI+RVhULXZpc2hudXBhdmFuQGdtYWlsLmNvbTwvYT4mcXVvdDsNCiAmbHQ7 PGEgaHJlZj0ibWFpbHRvOnZpc2hudXBhdmFuQGdtYWlsLmNvbSI+dmlzaG51cGF2YW5AZ21haWwu Y29tPC9hPiZndDs8YnI+DQo8c3BhbiBzdHlsZT0iZm9udC13ZWlnaHQ6Ym9sZCI+U3ViamVjdDog PC9zcGFuPlJlOiBbc2VjZGlyXSBzZWNkaXIgcmV2aWV3IG9mIGRyYWZ0LWlldGYtdGVhcy1nbXBs cy1sc3AtZmFzdHJlcm91dGUtMDk8YnI+DQo8c3BhbiBzdHlsZT0iZm9udC13ZWlnaHQ6Ym9sZCI+ UmVzZW50LUZyb206IDwvc3Bhbj4mbHQ7PGEgaHJlZj0ibWFpbHRvOmFsaWFzLWJvdW5jZXNAaWV0 Zi5vcmciPmFsaWFzLWJvdW5jZXNAaWV0Zi5vcmc8L2E+Jmd0Ozxicj4NCjxzcGFuIHN0eWxlPSJm b250LXdlaWdodDpib2xkIj5SZXNlbnQtVG86IDwvc3Bhbj4mbHQ7PGEgaHJlZj0ibWFpbHRvOm10 YWlsbG9uQGNpc2NvLmNvbSI+bXRhaWxsb25AY2lzY28uY29tPC9hPiZndDssICZsdDs8YSBocmVm PSJtYWlsdG86dHNhYWRAY2lzY28uY29tIj50c2FhZEBjaXNjby5jb208L2E+Jmd0OywgJmx0Ozxh IGhyZWY9Im1haWx0bzpyZ2FuZGhpQGNpc2NvLmNvbSI+cmdhbmRoaUBjaXNjby5jb208L2E+Jmd0 OywgWmFmYXIgQWxpICZsdDs8YSBocmVmPSJtYWlsdG86emFsaUBjaXNjby5jb20iPnphbGlAY2lz Y28uY29tPC9hPiZndDssDQogJmx0OzxhIGhyZWY9Im1haWx0bzptYW5hdi5iaGF0aWFAbm9raWEu Y29tIj5tYW5hdi5iaGF0aWFAbm9raWEuY29tPC9hPiZndDssICZsdDs8YSBocmVmPSJtYWlsdG86 bWhhcnRsZXlAY2lzY28uY29tIj5taGFydGxleUBjaXNjby5jb208L2E+Jmd0OywgTG91IEJlcmdl ciAmbHQ7PGEgaHJlZj0ibWFpbHRvOmxiZXJnZXJAbGFibi5uZXQiPmxiZXJnZXJAbGFibi5uZXQ8 L2E+Jmd0OywgVmlzaG51IFBhdmFuIEJlZXJhbSAmbHQ7PGEgaHJlZj0ibWFpbHRvOnZiZWVyYW1A anVuaXBlci5uZXQiPnZiZWVyYW1AanVuaXBlci5uZXQ8L2E+Jmd0OywNCiAmbHQ7PGEgaHJlZj0i bWFpbHRvOmFyZXRhbmFAY2lzY28uY29tIj5hcmV0YW5hQGNpc2NvLmNvbTwvYT4mZ3Q7LCAmbHQ7 PGEgaHJlZj0ibWFpbHRvOmRiMzU0NkBhdHQuY29tIj5kYjM1NDZAYXR0LmNvbTwvYT4mZ3Q7LCAm bHQ7PGEgaHJlZj0ibWFpbHRvOmFrYXRsYXNAZ21haWwuY29tIj5ha2F0bGFzQGdtYWlsLmNvbTwv YT4mZ3Q7PGJyPg0KPHNwYW4gc3R5bGU9ImZvbnQtd2VpZ2h0OmJvbGQiPlJlc2VudC1EYXRlOiA8 L3NwYW4+VHVlc2RheSwgSnVseSA0LCAyMDE3IGF0IDEwOjU1IEFNPGJyPg0KPC9kaXY+DQo8ZGl2 Pjxicj4NCjwvZGl2Pg0KPHNwYW4gc3R5bGU9Im1zby1ib29rbWFyazpfTWFpbE9yaWdpbmFsQm9k eSI+DQo8ZGl2IHhtbG5zOm89InVybjpzY2hlbWFzLW1pY3Jvc29mdC1jb206b2ZmaWNlOm9mZmlj ZSIgeG1sbnM6dz0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6d29yZCIgeG1sbnM6 bT0iaHR0cDovL3NjaGVtYXMubWljcm9zb2Z0LmNvbS9vZmZpY2UvMjAwNC8xMi9vbW1sIiB4bWxu cz0iaHR0cDovL3d3dy53My5vcmcvVFIvUkVDLWh0bWw0MCI+DQo8bWV0YSBuYW1lPSJUaXRsZSIg Y29udGVudD0iIj4NCjxtZXRhIG5hbWU9IktleXdvcmRzIiBjb250ZW50PSIiPg0KPG1ldGEgbmFt ZT0iR2VuZXJhdG9yIiBjb250ZW50PSJNaWNyb3NvZnQgV29yZCAxNSAoZmlsdGVyZWQgbWVkaXVt KSI+DQo8c3R5bGU+PCEtLQ0KLyogRm9udCBEZWZpbml0aW9ucyAqLw0KQGZvbnQtZmFjZQ0KCXtm b250LWZhbWlseToiQ2FtYnJpYSBNYXRoIjsNCglwYW5vc2UtMToyIDQgNSAzIDUgNCA2IDMgMiA0 O30NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6Q2FsaWJyaTsNCglwYW5vc2UtMToyIDE1IDUg MiAyIDIgNCAzIDIgNDt9DQovKiBTdHlsZSBEZWZpbml0aW9ucyAqLw0KcC5Nc29Ob3JtYWwsIGxp Lk1zb05vcm1hbCwgZGl2Lk1zb05vcm1hbA0KCXttYXJnaW46MGNtOw0KCW1hcmdpbi1ib3R0b206 LjAwMDFwdDsNCglmb250LXNpemU6MTIuMHB0Ow0KCWZvbnQtZmFtaWx5OiJUaW1lcyBOZXcgUm9t YW4iO30NCmE6bGluaywgc3Bhbi5Nc29IeXBlcmxpbmsNCgl7bXNvLXN0eWxlLXByaW9yaXR5Ojk5 Ow0KCWNvbG9yOiMwNTYzQzE7DQoJdGV4dC1kZWNvcmF0aW9uOnVuZGVybGluZTt9DQphOnZpc2l0 ZWQsIHNwYW4uTXNvSHlwZXJsaW5rRm9sbG93ZWQNCgl7bXNvLXN0eWxlLXByaW9yaXR5Ojk5Ow0K CWNvbG9yOiM5NTRGNzI7DQoJdGV4dC1kZWNvcmF0aW9uOnVuZGVybGluZTt9DQpzcGFuLkVtYWls U3R5bGUxNw0KCXttc28tc3R5bGUtdHlwZTpwZXJzb25hbC1yZXBseTsNCglmb250LWZhbWlseTpD YWxpYnJpOw0KCWNvbG9yOndpbmRvd3RleHQ7fQ0Kc3Bhbi5tc29JbnMNCgl7bXNvLXN0eWxlLXR5 cGU6ZXhwb3J0LW9ubHk7DQoJbXNvLXN0eWxlLW5hbWU6IiI7DQoJdGV4dC1kZWNvcmF0aW9uOnVu ZGVybGluZTsNCgljb2xvcjp0ZWFsO30NCi5Nc29DaHBEZWZhdWx0DQoJe21zby1zdHlsZS10eXBl OmV4cG9ydC1vbmx5Ow0KCWZvbnQtc2l6ZToxMC4wcHQ7fQ0KQHBhZ2UgV29yZFNlY3Rpb24xDQoJ e3NpemU6NjEyLjBwdCA3OTIuMHB0Ow0KCW1hcmdpbjo3Mi4wcHQgNzIuMHB0IDcyLjBwdCA3Mi4w cHQ7fQ0KZGl2LldvcmRTZWN0aW9uMQ0KCXtwYWdlOldvcmRTZWN0aW9uMTt9DQotLT48L3N0eWxl Pg0KPGRpdiBiZ2NvbG9yPSJ3aGl0ZSIgbGFuZz0iRU4tVVMiIGxpbms9IiMwNTYzQzEiIHZsaW5r PSIjOTU0RjcyIj4NCjxkaXYgY2xhc3M9IldvcmRTZWN0aW9uMSI+DQo8cCBjbGFzcz0iTXNvTm9y bWFsIj48c3BhbiBzdHlsZT0iZm9udC1mYW1pbHk6Q2FsaWJyaSI+VGhhbmtzIFJpZmFhdCBmb3Ig dGhlIHJldmlldyBvZiB0aGlzIGRvY3VtZW50LjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNs YXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LWZhbWlseTpDYWxpYnJpIj48bzpwPiZu YnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0i Zm9udC1mYW1pbHk6Q2FsaWJyaSI+SGkgRGVib3JhaCwgTG91LCBQYXZhbiw8bzpwPjwvbzpwPjwv c3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1mYW1pbHk6 Q2FsaWJyaSI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1h bCI+PHNwYW4gc3R5bGU9ImZvbnQtZmFtaWx5OkNhbGlicmkiPkFueSB0aG91Z2h0cyBvbiB0aGUg Zm9sbG93aW5nIHN1Z2dlc3Rpb24/PG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1z b05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtZmFtaWx5OkNhbGlicmkiPjxvOnA+Jm5ic3A7PC9v OnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LWZh bWlseTpDYWxpYnJpIj7igJxCZWNhdXNlIHRoZSBkb2N1bWVudCBleHRlbmRzIFJGQzQwOTAsIGl0 IHNob3VsZCBhZGQgJnF1b3Q7VXBkYXRlczogNDA5MCZxdW90OyBhdCB0aGUgdG9wIG9mIHRoZSBk b2N1bWVudC7igJ08bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48 c3BhbiBzdHlsZT0iZm9udC1mYW1pbHk6Q2FsaWJyaSI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+ PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtZmFtaWx5OkNhbGli cmkiPlRoYW5rcyw8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48 c3BhbiBzdHlsZT0iZm9udC1mYW1pbHk6Q2FsaWJyaSI+UmFrZXNoPG86cD48L286cD48L3NwYW4+ PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtZmFtaWx5OkNhbGli cmkiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxz cGFuIHN0eWxlPSJmb250LWZhbWlseTpDYWxpYnJpIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48 L3A+DQo8ZGl2IHN0eWxlPSJib3JkZXI6bm9uZTtib3JkZXItdG9wOnNvbGlkICNCNUM0REYgMS4w cHQ7cGFkZGluZzozLjBwdCAwY20gMGNtIDBjbSI+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48Yj48 c3BhbiBzdHlsZT0iZm9udC1mYW1pbHk6Q2FsaWJyaTtjb2xvcjpibGFjayI+RnJvbTogPC9zcGFu Pg0KPC9iPjxzcGFuIHN0eWxlPSJmb250LWZhbWlseTpDYWxpYnJpO2NvbG9yOmJsYWNrIj5SaWZh YXQgU2hla2gtWXVzZWYgJmx0OzxhIGhyZWY9Im1haWx0bzpyaWZhYXQuaWV0ZkBnbWFpbC5jb20i PnJpZmFhdC5pZXRmQGdtYWlsLmNvbTwvYT4mZ3Q7PGJyPg0KPGI+RGF0ZTogPC9iPlR1ZXNkYXks IEp1bHkgNCwgMjAxNyBhdCA5OjMyIEFNPGJyPg0KPGI+VG86IDwvYj4mcXVvdDs8YSBocmVmPSJt YWlsdG86ZHJhZnQtaWV0Zi10ZWFzLWdtcGxzLWxzcC1mYXN0cmVyb3V0ZS5hbGxAaWV0Zi5vcmci PmRyYWZ0LWlldGYtdGVhcy1nbXBscy1sc3AtZmFzdHJlcm91dGUuYWxsQGlldGYub3JnPC9hPiZx dW90OyAmbHQ7PGEgaHJlZj0ibWFpbHRvOmRyYWZ0LWlldGYtdGVhcy1nbXBscy1sc3AtZmFzdHJl cm91dGUuYWxsQGlldGYub3JnIj5kcmFmdC1pZXRmLXRlYXMtZ21wbHMtbHNwLWZhc3RyZXJvdXRl LmFsbEBpZXRmLm9yZzwvYT4mZ3Q7LA0KICZxdW90OzxhIGhyZWY9Im1haWx0bzpzZWNkaXJAaWV0 Zi5vcmciPnNlY2RpckBpZXRmLm9yZzwvYT4mcXVvdDsgJmx0OzxhIGhyZWY9Im1haWx0bzpzZWNk aXJAaWV0Zi5vcmciPnNlY2RpckBpZXRmLm9yZzwvYT4mZ3Q7LCBUaGUgSUVTRyAmbHQ7PGEgaHJl Zj0ibWFpbHRvOmllc2dAaWV0Zi5vcmciPmllc2dAaWV0Zi5vcmc8L2E+Jmd0Ozxicj4NCjxiPlN1 YmplY3Q6IDwvYj5bc2VjZGlyXSBzZWNkaXIgcmV2aWV3IG9mIGRyYWZ0LWlldGYtdGVhcy1nbXBs cy1sc3AtZmFzdHJlcm91dGUtMDk8YnI+DQo8Yj5SZXNlbnQtRnJvbTogPC9iPiZsdDs8YSBocmVm PSJtYWlsdG86YWxpYXMtYm91bmNlc0BpZXRmLm9yZyI+YWxpYXMtYm91bmNlc0BpZXRmLm9yZzwv YT4mZ3Q7PGJyPg0KPGI+UmVzZW50LVRvOiA8L2I+JnF1b3Q7PVNNVFA6bXRhaWxsb25AY2lzY28u IGNvbSZxdW90OyAmbHQ7PGEgaHJlZj0ibWFpbHRvOm10YWlsbG9uQGNpc2NvLmNvbSI+bXRhaWxs b25AY2lzY28uY29tPC9hPiZndDssICZsdDs8YSBocmVmPSJtYWlsdG86dHNhYWRAY2lzY28uY29t Ij50c2FhZEBjaXNjby5jb208L2E+Jmd0OywgJnF1b3Q7PVNNVFA6cmdhbmRoaUBjaXNjby4gY29t JnF1b3Q7ICZsdDs8YSBocmVmPSJtYWlsdG86cmdhbmRoaUBjaXNjby5jb20iPnJnYW5kaGlAY2lz Y28uY29tPC9hPiZndDssIFphZmFyDQogQWxpICZsdDs8YSBocmVmPSJtYWlsdG86emFsaUBjaXNj by5jb20iPnphbGlAY2lzY28uY29tPC9hPiZndDssICZsdDs8YSBocmVmPSJtYWlsdG86bWFuYXYu YmhhdGlhQG5va2lhLmNvbSI+bWFuYXYuYmhhdGlhQG5va2lhLmNvbTwvYT4mZ3Q7LCAmbHQ7PGEg aHJlZj0ibWFpbHRvOm1oYXJ0bGV5QGNpc2NvLmNvbSI+bWhhcnRsZXlAY2lzY28uY29tPC9hPiZn dDssIExvdSBCZXJnZXIgJmx0OzxhIGhyZWY9Im1haWx0bzpsYmVyZ2VyQGxhYm4ubmV0Ij5sYmVy Z2VyQGxhYm4ubmV0PC9hPiZndDssDQogJmx0OzxhIGhyZWY9Im1haWx0bzp2YmVlcmFtQGp1bmlw ZXIubmV0Ij52YmVlcmFtQGp1bmlwZXIubmV0PC9hPiZndDssICZsdDs8YSBocmVmPSJtYWlsdG86 YXJldGFuYUBjaXNjby5jb20iPmFyZXRhbmFAY2lzY28uY29tPC9hPiZndDssIERFQk9SQUggQlJV TkdBUkQgJmx0OzxhIGhyZWY9Im1haWx0bzpkYjM1NDZAYXR0LmNvbSI+ZGIzNTQ2QGF0dC5jb208 L2E+Jmd0OywgJmx0OzxhIGhyZWY9Im1haWx0bzpha2F0bGFzQGdtYWlsLmNvbSI+YWthdGxhc0Bn bWFpbC5jb208L2E+Jmd0Ozxicj4NCjxiPlJlc2VudC1EYXRlOiA8L2I+VHVlc2RheSwgSnVseSA0 LCAyMDE3IGF0IDk6NDAgQU08bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8 cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4N CjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5JIGhhdmUgcmV2aWV3ZWQgdGhpcyBkb2N1bWVu dCBhcyBwYXJ0IG9mIHRoZSBzZWN1cml0eSBkaXJlY3RvcmF0ZSdzPG86cD48L286cD48L3A+DQo8 L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5vbmdvaW5nIGVmZm9ydCB0byByZXZp ZXcgYWxsIElFVEYgZG9jdW1lbnRzIGJlaW5nIHByb2Nlc3NlZCBieSB0aGU8bzpwPjwvbzpwPjwv cD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPklFU0cuJm5ic3A7IFRoZXNl IGNvbW1lbnRzIHdlcmUgd3JpdHRlbiBwcmltYXJpbHkgZm9yIHRoZSBiZW5lZml0IG9mIHRoZTxv OnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+c2VjdXJp dHkgYXJlYSBkaXJlY3RvcnMuJm5ic3A7IERvY3VtZW50IGVkaXRvcnMgYW5kIFdHIGNoYWlycyBz aG91bGQgdHJlYXQ8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29O b3JtYWwiPnRoZXNlIGNvbW1lbnRzIGp1c3QgbGlrZSBhbnkgb3RoZXIgbGFzdCBjYWxsIGNvbW1l bnRzLjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+ PG86cD4mbmJzcDs8L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFs Ij5TdW1tYXJ5OiBSZWFkeSB3aXRoIE5pdHM8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4N CjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2 Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8L2Rpdj4NCjxk aXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5JIGRpZCBub3QgaGF2ZSBlbm91Z2ggYmFja2dyb3Vu ZCBvbiBNTFBTIGFuZCBHTVBMUyBhbmQgdGhlaXIgcmVsYXRlZCBSRkNzLDxvOnA+PC9vOnA+PC9w Pg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+c28gSSBoYWQgdG8gZG8gc29t ZSByZWFkaW5nIHRvIGdldCBzb21lIGZhbWlsaWFyaXR5IHdpdGggdGhpcyBzdWJqZWN0IHRvIGJl PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5hYmxl IHRvIHByb3ZpZGUgc29tZSByZWFzb25hYmxlIHJldmlldyBvZiB0aGlzIGRvY3VtZW50LjxvOnA+ PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJz cDs8L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5UaGlzIGRv Y3VtZW50IGJ1aWxkcyBvbiBhbiBleGlzdGluZyBtZWNoYW5pc20sICZxdW90O0Zhc3QgUmVyb3V0 ZSBFeHRlbnNpb25zIHRvPG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0i TXNvTm9ybWFsIj5SU1ZQLVRFIGZvciBMU1AgVHVubmVscyZxdW90OyBkZWZpbmVkIGluIFJGQzQw OTAsIHdoaWNoIGRlZmluZXMgYSBtZWNoYW5pc20gdG88bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0K PGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPmVzdGFibGlzaCBhIGJhY2t1cCB0dW5uZWxzIGZv ciBsb2NhbCBMU1AgdHVubmVscy4gT25lIGxpbWl0YXRpb24gb2YgdGhlPG86cD48L286cD48L3A+ DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5leGlzdGluZyBtZWNoYW5pc20g aXMgdGhhdCBpbiBzb21lIHNpdHVhdGlvbnMgaXQgbWlnaHQgYXNzaWduIGRpZmZlcmVudDxvOnA+ PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+dW5pLWRpcmVj dGlvbmFsIGJ5cGFzcyB0dW5uZWxzIGZvciB0aGUgZm9yd2FyZCBhbmQgcmV2ZXJzZSBkaXJlY3Rp b25zLjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+ PG86cD4mbmJzcDs8L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFs Ij5UaGlzIGRvY3VtZW50IGV4dGVuZHMgdGhlIG1lY2hhbmlzbSBkZWZpbmVkIGluIFJGQzQwOTAs IGJ5IGFkZGluZyBhIG5ldzxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9 Ik1zb05vcm1hbCI+QllQQVNTX0FTU0lHTk1FTlQgc3Vib2JqZWN0IHRvIHRoZSBleGlzdGluZyBS RUNPUkRfUk9VVEUgT2JqZWN0IChSUk8pIHVzZWQ8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRp dj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPmluIFBBVEggYW5kIFJFU1YgcmVxdWVzdHMsIHRvIGFs bG93IHRoZSBlc3RhYmxpc2htZW50IG9mIGEgYmktZGlyZWN0aW9uYWw8bzpwPjwvbzpwPjwvcD4N CjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPmJ5cGFzcyB0dW5uZWwuPG86cD48 L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNw OzwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPlRoZSBzZWN1 cml0eSBvZiB0aGUgZXhpc3RpbmcgbWVjaGFuaXNtIHN0aWxsIGFwcGxpZXMgd2l0aCB0aGUgbmV3 IG1lY2hhbmlzbSw8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29O b3JtYWwiPmFuZCB0aGUgc2VjdXJpdHkgc2VjdGlvbiBkaXNjdXNzZXMgdGhlIGltcGxpY2F0aW9u cyBvZiB0aGUgbmV3IHN1Ym9iamVjdCBhbmQ8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4N CjxwIGNsYXNzPSJNc29Ob3JtYWwiPnRoZSBuZXcgZXJyb3IgYXNzb2NpYXRlZCB3aXRoIHRoYXQs IHdoaWNoIHNlZW1zIHJlYXNvbmFibGUuPG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8 cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4N CjxwIGNsYXNzPSJNc29Ob3JtYWwiPlRoZSBkb2N1bWVudCBhbHNvIHBvaW50cyB0byBhbiBNUExT L0dNUExTIFNlY3VyaXR5IEZyYW1ld29yayAoUkZDNTkyMCk8bzpwPjwvbzpwPjwvcD4NCjwvZGl2 Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPmRvY3VtZW50IHRoYXQgaGFzIGFuIGV4dGVu c2l2ZSBkaXNjdXNzaW9uIG9mIHRoZSBzZWN1cml0eSBvZiBNUExTL0dNUExTPG86cD48L286cD48 L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5uZXR3b3JrIGluIGdlbmVy YWwgdGhhdCBhbHNvIGFwcGxpZXMgdG8gdGhpcyBkb2N1bWVudC48bzpwPjwvbzpwPjwvcD4NCjwv ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0K PC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+ DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5OaXRzPG86cD48L286cD48L3A+ DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwv cD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPkJlY2F1c2UgdGhlIGRvY3Vt ZW50IGV4dGVuZHMgUkZDNDA5MCwgaXQgc2hvdWxkIGFkZCAmcXVvdDtVcGRhdGVzOiA0MDkwJnF1 b3Q7IGF0IHRoZTxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05v cm1hbCI+dG9wIG9mIHRoZSBkb2N1bWVudC48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4N CjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2 Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+UmVnYXJkcyw8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0K PGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPiZuYnNwO1JpZmFhdDxvOnA+PC9vOnA+PC9wPg0K PC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+ DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9zcGFuPjwvc3Bhbj4N CjwvYm9keT4NCjwvaHRtbD4NCg== --_000_233DDE3498184088A9CE84180A34D5A4junipernet_-- From nobody Tue Jul 4 12:37:25 2017 Return-Path: X-Original-To: secdir@ietf.org Delivered-To: secdir@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 8071D132830; Tue, 4 Jul 2017 12:37:17 -0700 (PDT) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: Melinda Shore To: Cc: draft-ietf-httpbis-early-hints.all@ietf.org, ietf@ietf.org, ietf-http-wg@w3.org X-Test-IDTracker: no X-IETF-IDTracker: 6.55.2 Auto-Submitted: auto-generated Precedence: bulk Message-ID: <149919703750.15996.5462759432298024921@ietfa.amsl.com> Date: Tue, 04 Jul 2017 12:37:17 -0700 Archived-At: Subject: [secdir] Secdir last call review of draft-ietf-httpbis-early-hints-03 X-BeenThere: secdir@ietf.org X-Mailman-Version: 2.1.22 List-Id: Security Area Directorate List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 04 Jul 2017 19:37:18 -0000 Reviewer: Melinda Shore Review result: Has Issues I have reviewed this document as part of the security directorate's ongoing effort to review all IETF documents being processed by the IESG. These comments were written primarily for the benefit of the security area directors. Document editors and WG chairs should treat these comments just like any other last call comments. Summary: Has minor issues. This draft defines a status code for sending an informational response that contains header fields that are likely to be included in the final response. A server can send the informational response containing some of the header fields to help the client start making preparations for processing the final response, and then run time-consuming operations to generate the final response. The informational response can also be used by an origin server to trigger HTTP/2 server push at a caching intermediary. Passed nit checker without complaints other than publication date. Sections 5 and 6 should be appendices. One minor issue: in the security considerations section, "Therefore, a server might refrain from sending Early Hints over HTTP/1.1 unless when the client is known to handle informational responses correctly" is a bit squishy (and contains a superfluous "when"). I'm not sure this merits a text change and I'm rather certain that it doesn't merit normative 2119 language but it did stand out as an overly soft recommendation. From nobody Wed Jul 5 17:10:37 2017 Return-Path: X-Original-To: secdir@ietfa.amsl.com Delivered-To: secdir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id CC78113155D for ; Wed, 5 Jul 2017 17:10:31 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: 0.391 X-Spam-Level: X-Spam-Status: No, score=0.391 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, FSL_HELO_BARE_IP_2=1.499, RDNS_NONE=0.793, SPF_PASS=-0.001] autolearn=no autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 17fKq97bpE34 for ; Wed, 5 Jul 2017 17:10:30 -0700 (PDT) Received: from spam.nsr.re.kr (unknown [210.104.33.65]) by ietfa.amsl.com (Postfix) with ESMTP id B99D4127286 for ; Wed, 5 Jul 2017 17:10:29 -0700 (PDT) Received: from unknown (HELO nsr.re.kr) (210.104.33.70) by 210.104.33.65 with ESMTP; 6 Jul 2017 09:09:11 +0900 X-Original-SENDERIP: 210.104.33.70 X-Original-MAILFROM: whkim5@nsr.re.kr Received: from 192.168.155.183 ([192.168.155.183]) by mail.nsr.re.kr (Crinity Message Backbone-7.0.1) with SMTP ID 609; Thu, 6 Jul 2017 09:09:53 +0900 (KST) From: Woo-Hwan Kim To: 'Ben Laurie' , 'The IESG' , secdir@ietf.org, draft-ietf-avtcore-aria-srtp.all@ietf.org References: In-Reply-To: Date: Thu, 6 Jul 2017 09:10:08 +0900 Message-ID: <000701d2f5ec$3a25d2d0$ae717870$@nsr.re.kr> MIME-Version: 1.0 Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable X-Mailer: Microsoft Outlook 15.0 Thread-Index: AQHEfWE+54shbuQ7KD+oG8V/7T/tNKJi3Ylw Content-Language: ko Archived-At: Subject: Re: [secdir] Security review of draft-ietf-avtcore-aria-srtp-09 X-BeenThere: secdir@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: Security Area Directorate List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 06 Jul 2017 00:10:32 -0000 Sorry for our late reply and thank you for your comments. >>I have reviewed this document as part of the security directorate's = ongoing effort to review >>all IETF documents being processed by the = IESG. These comments were written primarily for >>the benefit of the = security area directors. Document editors and WG chairs should treat = >>these comments just like any other last call comments. >> >>The summary of the review is ready with nits. >> >>This is essentially a drop-in replacement of AES for SRTP with ARIA, a = cipher I've never >>heard of. >> >>Because it is a drop-in replacement, it uses SHA-1. Probably it would = be better practice to >>update the hash function to something more = modern. We agree. But we think that such updates should be based on the revision = of the standard RFC (including RFC 3711). So it may be not possible in = this stage. >>The I-D also somewhat eccentrically says that no security problems = have been found with ARIA >>whilst referencing a paper on a = meet-in-the-middle attack on reduced round ARIA. I am not >>sure what to = make of this, though clearly it is not a fatal flaw. The reason for referencing the paper [TSL] is that the results of the = security analysis on ARIA up to the time when first draft was proposed = are summarized in the paper. We wanted that the reference paper is = accepted as an evidence of the security of ARIA. Considering the problem = you pointed out, however, it seems to be failed to clearly express our = intension. So we revised the draft by adding the sentence = =E2=80=9CPrevious security analysis results are summarized in = [ATY]=E2=80=9D. In addition, we replaced the reference [TSL] by the new = reference [ATY] because the results of the security analysis on ARIA = have been published to date. This new reference also contains a summary = of almost all results of security analysis on ARIA up to date. Thanks again for your review, and we've posted a revision(-10) that = reflects your feedback. Sincerely, Woo-Hwan Kim From nobody Thu Jul 6 08:31:24 2017 Return-Path: X-Original-To: secdir@ietfa.amsl.com Delivered-To: secdir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 71EF313162C; Thu, 6 Jul 2017 08:31:17 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -14.522 X-Spam-Level: X-Spam-Status: No, score=-14.522 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_HI=-5, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, RP_MATCHES_RCVD=-0.001, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cisco.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 7dQvQMuTayfG; Thu, 6 Jul 2017 08:31:14 -0700 (PDT) Received: from rcdn-iport-9.cisco.com (rcdn-iport-9.cisco.com [173.37.86.80]) (using TLSv1.2 with cipher DHE-RSA-SEED-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 84DC61317BF; Thu, 6 Jul 2017 08:31:13 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=30358; q=dns/txt; s=iport; t=1499355073; x=1500564673; h=from:to:cc:subject:date:message-id:references: in-reply-to:mime-version; bh=vZlc6JLuiS/rpLSLU7sui97ybjbnleueljH391WiEEM=; b=cTzDMNwP7qmjJWD6L0CGlBFfKsCO6oN7oDQYJQg3zMmazr0lKtWhTcPs Pgr4+cZy5+r3p7CAHrjZgMbb6Rwr9oSTVbJtfS9fLWdJu2a6fRqADS1eR lywEH1Pof6+dv/UuO9qU3ObKu1uIYR1GZS6gCs9TjKmKG4j/B4pLMfeh8 k=; X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: =?us-ascii?q?A0CZAABeVl5Z/4cNJK1cGQEBAQEBAQEBA?= =?us-ascii?q?QEBBwEBAQEBgm9qY4ERB44CkWmILo1VghGGHAIagxU/GAECAQEBAQEBAWsohRg?= =?us-ascii?q?BAQEBAyNWEAIBCBEDAQIhBwMCAgIfERQJCAIEAQ0FiUtMAxWxDIImKYNrAYMkD?= =?us-ascii?q?YNzAQEBAQEBAQEBAQEBAQEBAQEBAQEBHYMng0yBYAErgnmCV4FZWgYQAoJbMII?= =?us-ascii?q?xBZcuhyY7Ao8ZhGuCDIVKikiLd4lAAR84gQp1FVsBhQAcgSwBOnaHZQGBDAEBA?= =?us-ascii?q?Q?= X-IronPort-AV: E=Sophos;i="5.40,317,1496102400"; d="scan'208,217";a="264459829" Received: from alln-core-2.cisco.com ([173.36.13.135]) by rcdn-iport-9.cisco.com with ESMTP/TLS/DHE-RSA-AES256-SHA; 06 Jul 2017 15:31:12 +0000 Received: from XCH-RCD-018.cisco.com (xch-rcd-018.cisco.com [173.37.102.28]) by alln-core-2.cisco.com (8.14.5/8.14.5) with ESMTP id v66FVCdB001998 (version=TLSv1/SSLv3 cipher=AES256-SHA bits=256 verify=FAIL); Thu, 6 Jul 2017 15:31:12 GMT Received: from xch-aln-018.cisco.com (173.36.7.28) by XCH-RCD-018.cisco.com (173.37.102.28) with Microsoft SMTP Server (TLS) id 15.0.1210.3; Thu, 6 Jul 2017 10:31:11 -0500 Received: from xch-aln-018.cisco.com ([173.36.7.28]) by XCH-ALN-018.cisco.com ([173.36.7.28]) with mapi id 15.00.1210.000; Thu, 6 Jul 2017 10:31:11 -0500 From: "Rakesh Gandhi (rgandhi)" To: Vishnu Pavan Beeram , Rifaat Shekh-Yusef , "draft-ietf-teas-gmpls-lsp-fastreroute.all@ietf.org" , "secdir@ietf.org" , The IESG CC: DEBORAH BRUNGARD , Lou Berger , "EXT-vishnupavan@gmail.com" Thread-Topic: [secdir] secdir review of draft-ietf-teas-gmpls-lsp-fastreroute-09 Thread-Index: AQHS9MsUKApW2nmrDkSMbsBbOiyZvqJD0ouAgABO84CAAt+CAA== Date: Thu, 6 Jul 2017 15:31:11 +0000 Message-ID: <5C02CE7F-DEE3-48D0-898C-347CF4CB6595@cisco.com> References: <233DDE34-9818-4088-A9CE-84180A34D5A4@juniper.net> In-Reply-To: <233DDE34-9818-4088-A9CE-84180A34D5A4@juniper.net> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/f.1d.0.161209 x-ms-exchange-messagesentrepresentingtype: 1 x-ms-exchange-transport-fromentityheader: Hosted x-originating-ip: [161.44.212.116] Content-Type: multipart/alternative; boundary="_000_5C02CE7FDEE348D0898C347CF4CB6595ciscocom_" MIME-Version: 1.0 Archived-At: Subject: Re: [secdir] secdir review of draft-ietf-teas-gmpls-lsp-fastreroute-09 X-BeenThere: secdir@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: Security Area Directorate List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 06 Jul 2017 15:31:17 -0000 --_000_5C02CE7FDEE348D0898C347CF4CB6595ciscocom_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 VGhhbmtzIFBhdmFuLg0KDQpIaSBEZWJvcmFoLA0KUGxlYXNlIGxldCB1cyBrbm93IGlmIHlvdSBh cmUgT0sgd2l0aCB0aGUgc3VnZ2VzdGlvbi4NCg0K4oCcQmVjYXVzZSB0aGUgZG9jdW1lbnQgZXh0 ZW5kcyBSRkM0MDkwLCBpdCBzaG91bGQgYWRkICJVcGRhdGVzOiA0MDkwIiBhdCB0aGUgdG9wIG9m IHRoZSBkb2N1bWVudC7igJ0NCg0KVGhhbmtzLA0KUmFrZXNoDQoNCg0KDQpGcm9tOiBWaXNobnUg UGF2YW4gQmVlcmFtIDx2YmVlcmFtQGp1bmlwZXIubmV0Pg0KRGF0ZTogVHVlc2RheSwgSnVseSA0 LCAyMDE3IGF0IDExOjM4IEFNDQpUbzogIj1TTVRQOnJnYW5kaGlAY2lzY28uIGNvbSIgPHJnYW5k aGlAY2lzY28uY29tPiwgUmlmYWF0IFNoZWtoLVl1c2VmIDxyaWZhYXQuaWV0ZkBnbWFpbC5jb20+ LCAiZHJhZnQtaWV0Zi10ZWFzLWdtcGxzLWxzcC1mYXN0cmVyb3V0ZS5hbGxAaWV0Zi5vcmciIDxk cmFmdC1pZXRmLXRlYXMtZ21wbHMtbHNwLWZhc3RyZXJvdXRlLmFsbEBpZXRmLm9yZz4sICJzZWNk aXJAaWV0Zi5vcmciIDxzZWNkaXJAaWV0Zi5vcmc+LCBUaGUgSUVTRyA8aWVzZ0BpZXRmLm9yZz4N CkNjOiBERUJPUkFIIEJSVU5HQVJEIDxkYjM1NDZAYXR0LmNvbT4sIExvdSBCZXJnZXIgPGxiZXJn ZXJAbGFibi5uZXQ+LCAiRVhULXZpc2hudXBhdmFuQGdtYWlsLmNvbSIgPHZpc2hudXBhdmFuQGdt YWlsLmNvbT4NClN1YmplY3Q6IFJlOiBbc2VjZGlyXSBzZWNkaXIgcmV2aWV3IG9mIGRyYWZ0LWll dGYtdGVhcy1nbXBscy1sc3AtZmFzdHJlcm91dGUtMDkNCg0KUmFrZXNoLCBIaSENCg0KVGhpcyBp cyBhIHZhbGlkIGNvbW1lbnQuIDxHTVBMUy1MU1AtRlJSPiBkb2VzbuKAmXQgbW9kaWZ5IGFueSBv ZiB0aGUgZXhpc3RpbmcgcHJvY2VkdXJlcyBkZWZpbmVkIGluIFJGQzQwOTAsIGJ1dCBpdCBkb2Vz IHN1cHBsZW1lbnQgaXQuIEFzIHBlciBSRkMyMjIzLCB0aGlzIGlzIHN1ZmZpY2llbnQgZ3JvdW5k cyB0byBzZXQgdGhlIOKAnFVwZGF0ZXPigJ0gZmllbGQuDQoNCkNvdXJ0ZXN5IFJGQzIyMjM6DQoN CiAgICAgIFRvIGJlIHVzZWQgYXMgYSByZWZlcmVuY2UgZnJvbSBhIG5ldyBpdGVtIHRoYXQgY2Fu bm90IGJlIHVzZWQNCg0KICAgICAgYWxvbmUgKGkuZS4sIG9uZSB0aGF0IHN1cHBsZW1lbnRzIGEg cHJldmlvdXMgZG9jdW1lbnQpLCB0byByZWZlcg0KDQogICAgICB0byB0aGUgcHJldmlvdXMgZG9j dW1lbnQuICBUaGUgbmV3ZXIgcHVibGljYXRpb24gaXMgYSBwYXJ0IHRoYXQNCg0KICAgICAgd2ls bCBzdXBwbGVtZW50IG9yIGJlIGFkZGVkIG9uIHRvIHRoZSBleGlzdGluZyBkb2N1bWVudDsgZS5n LiwgYW4NCg0KICAgICAgYWRkZW5kdW0sIG9yIHNlcGFyYXRlLCBleHRyYSBpbmZvcm1hdGlvbiB0 aGF0IGlzIHRvIGJlIGFkZGVkIHRvDQoNCiAgICAgIHRoZSBvcmlnaW5hbCBkb2N1bWVudC4NCkBE ZWJvcmFoIOKAlCBBcmUgeW91IG9rIHdpdGggdGhpcz8NClJlZ2FyZHMsDQotUGF2YW4NCg0KRnJv bTogIlJha2VzaCBHYW5kaGkgKHJnYW5kaGkpIiA8cmdhbmRoaUBjaXNjby5jb208bWFpbHRvOnJn YW5kaGlAY2lzY28uY29tPj4NCkRhdGU6IFR1ZXNkYXksIEp1bHkgNCwgMjAxNyBhdCAxMDo1NSBB TQ0KVG86IFJpZmFhdCBTaGVraC1ZdXNlZiA8cmlmYWF0LmlldGZAZ21haWwuY29tPG1haWx0bzpy aWZhYXQuaWV0ZkBnbWFpbC5jb20+PiwgImRyYWZ0LWlldGYtdGVhcy1nbXBscy1sc3AtZmFzdHJl cm91dGUuYWxsQGlldGYub3JnPG1haWx0bzpkcmFmdC1pZXRmLXRlYXMtZ21wbHMtbHNwLWZhc3Ry ZXJvdXRlLmFsbEBpZXRmLm9yZz4iIDxkcmFmdC1pZXRmLXRlYXMtZ21wbHMtbHNwLWZhc3RyZXJv dXRlLmFsbEBpZXRmLm9yZzxtYWlsdG86ZHJhZnQtaWV0Zi10ZWFzLWdtcGxzLWxzcC1mYXN0cmVy b3V0ZS5hbGxAaWV0Zi5vcmc+PiwgInNlY2RpckBpZXRmLm9yZzxtYWlsdG86c2VjZGlyQGlldGYu b3JnPiIgPHNlY2RpckBpZXRmLm9yZzxtYWlsdG86c2VjZGlyQGlldGYub3JnPj4sIFRoZSBJRVNH IDxpZXNnQGlldGYub3JnPG1haWx0bzppZXNnQGlldGYub3JnPj4NCkNjOiBERUJPUkFIIEJSVU5H QVJEIDxkYjM1NDZAYXR0LmNvbTxtYWlsdG86ZGIzNTQ2QGF0dC5jb20+PiwgTG91IEJlcmdlciA8 bGJlcmdlckBsYWJuLm5ldDxtYWlsdG86bGJlcmdlckBsYWJuLm5ldD4+LCAiRVhULXZpc2hudXBh dmFuQGdtYWlsLmNvbTxtYWlsdG86RVhULXZpc2hudXBhdmFuQGdtYWlsLmNvbT4iIDx2aXNobnVw YXZhbkBnbWFpbC5jb208bWFpbHRvOnZpc2hudXBhdmFuQGdtYWlsLmNvbT4+DQpTdWJqZWN0OiBS ZTogW3NlY2Rpcl0gc2VjZGlyIHJldmlldyBvZiBkcmFmdC1pZXRmLXRlYXMtZ21wbHMtbHNwLWZh c3RyZXJvdXRlLTA5DQpSZXNlbnQtRnJvbTogPGFsaWFzLWJvdW5jZXNAaWV0Zi5vcmc8bWFpbHRv OmFsaWFzLWJvdW5jZXNAaWV0Zi5vcmc+Pg0KUmVzZW50LVRvOiA8bXRhaWxsb25AY2lzY28uY29t PG1haWx0bzptdGFpbGxvbkBjaXNjby5jb20+PiwgPHRzYWFkQGNpc2NvLmNvbTxtYWlsdG86dHNh YWRAY2lzY28uY29tPj4sIDxyZ2FuZGhpQGNpc2NvLmNvbTxtYWlsdG86cmdhbmRoaUBjaXNjby5j b20+PiwgWmFmYXIgQWxpIDx6YWxpQGNpc2NvLmNvbTxtYWlsdG86emFsaUBjaXNjby5jb20+Piwg PG1hbmF2LmJoYXRpYUBub2tpYS5jb208bWFpbHRvOm1hbmF2LmJoYXRpYUBub2tpYS5jb20+Piwg PG1oYXJ0bGV5QGNpc2NvLmNvbTxtYWlsdG86bWhhcnRsZXlAY2lzY28uY29tPj4sIExvdSBCZXJn ZXIgPGxiZXJnZXJAbGFibi5uZXQ8bWFpbHRvOmxiZXJnZXJAbGFibi5uZXQ+PiwgVmlzaG51IFBh dmFuIEJlZXJhbSA8dmJlZXJhbUBqdW5pcGVyLm5ldDxtYWlsdG86dmJlZXJhbUBqdW5pcGVyLm5l dD4+LCA8YXJldGFuYUBjaXNjby5jb208bWFpbHRvOmFyZXRhbmFAY2lzY28uY29tPj4sIDxkYjM1 NDZAYXR0LmNvbTxtYWlsdG86ZGIzNTQ2QGF0dC5jb20+PiwgPGFrYXRsYXNAZ21haWwuY29tPG1h aWx0bzpha2F0bGFzQGdtYWlsLmNvbT4+DQpSZXNlbnQtRGF0ZTogVHVlc2RheSwgSnVseSA0LCAy MDE3IGF0IDEwOjU1IEFNDQoNClRoYW5rcyBSaWZhYXQgZm9yIHRoZSByZXZpZXcgb2YgdGhpcyBk b2N1bWVudC4NCg0KSGkgRGVib3JhaCwgTG91LCBQYXZhbiwNCg0KQW55IHRob3VnaHRzIG9uIHRo ZSBmb2xsb3dpbmcgc3VnZ2VzdGlvbj8NCg0K4oCcQmVjYXVzZSB0aGUgZG9jdW1lbnQgZXh0ZW5k cyBSRkM0MDkwLCBpdCBzaG91bGQgYWRkICJVcGRhdGVzOiA0MDkwIiBhdCB0aGUgdG9wIG9mIHRo ZSBkb2N1bWVudC7igJ0NCg0KVGhhbmtzLA0KUmFrZXNoDQoNCg0KRnJvbTogUmlmYWF0IFNoZWto LVl1c2VmIDxyaWZhYXQuaWV0ZkBnbWFpbC5jb208bWFpbHRvOnJpZmFhdC5pZXRmQGdtYWlsLmNv bT4+DQpEYXRlOiBUdWVzZGF5LCBKdWx5IDQsIDIwMTcgYXQgOTozMiBBTQ0KVG86ICJkcmFmdC1p ZXRmLXRlYXMtZ21wbHMtbHNwLWZhc3RyZXJvdXRlLmFsbEBpZXRmLm9yZzxtYWlsdG86ZHJhZnQt aWV0Zi10ZWFzLWdtcGxzLWxzcC1mYXN0cmVyb3V0ZS5hbGxAaWV0Zi5vcmc+IiA8ZHJhZnQtaWV0 Zi10ZWFzLWdtcGxzLWxzcC1mYXN0cmVyb3V0ZS5hbGxAaWV0Zi5vcmc8bWFpbHRvOmRyYWZ0LWll dGYtdGVhcy1nbXBscy1sc3AtZmFzdHJlcm91dGUuYWxsQGlldGYub3JnPj4sICJzZWNkaXJAaWV0 Zi5vcmc8bWFpbHRvOnNlY2RpckBpZXRmLm9yZz4iIDxzZWNkaXJAaWV0Zi5vcmc8bWFpbHRvOnNl Y2RpckBpZXRmLm9yZz4+LCBUaGUgSUVTRyA8aWVzZ0BpZXRmLm9yZzxtYWlsdG86aWVzZ0BpZXRm Lm9yZz4+DQpTdWJqZWN0OiBbc2VjZGlyXSBzZWNkaXIgcmV2aWV3IG9mIGRyYWZ0LWlldGYtdGVh cy1nbXBscy1sc3AtZmFzdHJlcm91dGUtMDkNClJlc2VudC1Gcm9tOiA8YWxpYXMtYm91bmNlc0Bp ZXRmLm9yZzxtYWlsdG86YWxpYXMtYm91bmNlc0BpZXRmLm9yZz4+DQpSZXNlbnQtVG86ICI9U01U UDptdGFpbGxvbkBjaXNjby4gY29tIiA8bXRhaWxsb25AY2lzY28uY29tPG1haWx0bzptdGFpbGxv bkBjaXNjby5jb20+PiwgPHRzYWFkQGNpc2NvLmNvbTxtYWlsdG86dHNhYWRAY2lzY28uY29tPj4s ICI9U01UUDpyZ2FuZGhpQGNpc2NvLiBjb20iIDxyZ2FuZGhpQGNpc2NvLmNvbTxtYWlsdG86cmdh bmRoaUBjaXNjby5jb20+PiwgWmFmYXIgQWxpIDx6YWxpQGNpc2NvLmNvbTxtYWlsdG86emFsaUBj aXNjby5jb20+PiwgPG1hbmF2LmJoYXRpYUBub2tpYS5jb208bWFpbHRvOm1hbmF2LmJoYXRpYUBu b2tpYS5jb20+PiwgPG1oYXJ0bGV5QGNpc2NvLmNvbTxtYWlsdG86bWhhcnRsZXlAY2lzY28uY29t Pj4sIExvdSBCZXJnZXIgPGxiZXJnZXJAbGFibi5uZXQ8bWFpbHRvOmxiZXJnZXJAbGFibi5uZXQ+ PiwgPHZiZWVyYW1AanVuaXBlci5uZXQ8bWFpbHRvOnZiZWVyYW1AanVuaXBlci5uZXQ+PiwgPGFy ZXRhbmFAY2lzY28uY29tPG1haWx0bzphcmV0YW5hQGNpc2NvLmNvbT4+LCBERUJPUkFIIEJSVU5H QVJEIDxkYjM1NDZAYXR0LmNvbTxtYWlsdG86ZGIzNTQ2QGF0dC5jb20+PiwgPGFrYXRsYXNAZ21h aWwuY29tPG1haWx0bzpha2F0bGFzQGdtYWlsLmNvbT4+DQpSZXNlbnQtRGF0ZTogVHVlc2RheSwg SnVseSA0LCAyMDE3IGF0IDk6NDAgQU0NCg0KSSBoYXZlIHJldmlld2VkIHRoaXMgZG9jdW1lbnQg YXMgcGFydCBvZiB0aGUgc2VjdXJpdHkgZGlyZWN0b3JhdGUncw0Kb25nb2luZyBlZmZvcnQgdG8g cmV2aWV3IGFsbCBJRVRGIGRvY3VtZW50cyBiZWluZyBwcm9jZXNzZWQgYnkgdGhlDQpJRVNHLiAg VGhlc2UgY29tbWVudHMgd2VyZSB3cml0dGVuIHByaW1hcmlseSBmb3IgdGhlIGJlbmVmaXQgb2Yg dGhlDQpzZWN1cml0eSBhcmVhIGRpcmVjdG9ycy4gIERvY3VtZW50IGVkaXRvcnMgYW5kIFdHIGNo YWlycyBzaG91bGQgdHJlYXQNCnRoZXNlIGNvbW1lbnRzIGp1c3QgbGlrZSBhbnkgb3RoZXIgbGFz dCBjYWxsIGNvbW1lbnRzLg0KDQpTdW1tYXJ5OiBSZWFkeSB3aXRoIE5pdHMNCg0KDQpJIGRpZCBu b3QgaGF2ZSBlbm91Z2ggYmFja2dyb3VuZCBvbiBNTFBTIGFuZCBHTVBMUyBhbmQgdGhlaXIgcmVs YXRlZCBSRkNzLA0Kc28gSSBoYWQgdG8gZG8gc29tZSByZWFkaW5nIHRvIGdldCBzb21lIGZhbWls aWFyaXR5IHdpdGggdGhpcyBzdWJqZWN0IHRvIGJlDQphYmxlIHRvIHByb3ZpZGUgc29tZSByZWFz b25hYmxlIHJldmlldyBvZiB0aGlzIGRvY3VtZW50Lg0KDQpUaGlzIGRvY3VtZW50IGJ1aWxkcyBv biBhbiBleGlzdGluZyBtZWNoYW5pc20sICJGYXN0IFJlcm91dGUgRXh0ZW5zaW9ucyB0bw0KUlNW UC1URSBmb3IgTFNQIFR1bm5lbHMiIGRlZmluZWQgaW4gUkZDNDA5MCwgd2hpY2ggZGVmaW5lcyBh IG1lY2hhbmlzbSB0bw0KZXN0YWJsaXNoIGEgYmFja3VwIHR1bm5lbHMgZm9yIGxvY2FsIExTUCB0 dW5uZWxzLiBPbmUgbGltaXRhdGlvbiBvZiB0aGUNCmV4aXN0aW5nIG1lY2hhbmlzbSBpcyB0aGF0 IGluIHNvbWUgc2l0dWF0aW9ucyBpdCBtaWdodCBhc3NpZ24gZGlmZmVyZW50DQp1bmktZGlyZWN0 aW9uYWwgYnlwYXNzIHR1bm5lbHMgZm9yIHRoZSBmb3J3YXJkIGFuZCByZXZlcnNlIGRpcmVjdGlv bnMuDQoNClRoaXMgZG9jdW1lbnQgZXh0ZW5kcyB0aGUgbWVjaGFuaXNtIGRlZmluZWQgaW4gUkZD NDA5MCwgYnkgYWRkaW5nIGEgbmV3DQpCWVBBU1NfQVNTSUdOTUVOVCBzdWJvYmplY3QgdG8gdGhl IGV4aXN0aW5nIFJFQ09SRF9ST1VURSBPYmplY3QgKFJSTykgdXNlZA0KaW4gUEFUSCBhbmQgUkVT ViByZXF1ZXN0cywgdG8gYWxsb3cgdGhlIGVzdGFibGlzaG1lbnQgb2YgYSBiaS1kaXJlY3Rpb25h bA0KYnlwYXNzIHR1bm5lbC4NCg0KVGhlIHNlY3VyaXR5IG9mIHRoZSBleGlzdGluZyBtZWNoYW5p c20gc3RpbGwgYXBwbGllcyB3aXRoIHRoZSBuZXcgbWVjaGFuaXNtLA0KYW5kIHRoZSBzZWN1cml0 eSBzZWN0aW9uIGRpc2N1c3NlcyB0aGUgaW1wbGljYXRpb25zIG9mIHRoZSBuZXcgc3Vib2JqZWN0 IGFuZA0KdGhlIG5ldyBlcnJvciBhc3NvY2lhdGVkIHdpdGggdGhhdCwgd2hpY2ggc2VlbXMgcmVh c29uYWJsZS4NCg0KVGhlIGRvY3VtZW50IGFsc28gcG9pbnRzIHRvIGFuIE1QTFMvR01QTFMgU2Vj dXJpdHkgRnJhbWV3b3JrIChSRkM1OTIwKQ0KZG9jdW1lbnQgdGhhdCBoYXMgYW4gZXh0ZW5zaXZl IGRpc2N1c3Npb24gb2YgdGhlIHNlY3VyaXR5IG9mIE1QTFMvR01QTFMNCm5ldHdvcmsgaW4gZ2Vu ZXJhbCB0aGF0IGFsc28gYXBwbGllcyB0byB0aGlzIGRvY3VtZW50Lg0KDQoNCk5pdHMNCg0KQmVj YXVzZSB0aGUgZG9jdW1lbnQgZXh0ZW5kcyBSRkM0MDkwLCBpdCBzaG91bGQgYWRkICJVcGRhdGVz OiA0MDkwIiBhdCB0aGUNCnRvcCBvZiB0aGUgZG9jdW1lbnQuDQoNClJlZ2FyZHMsDQogUmlmYWF0 DQoNCg== --_000_5C02CE7FDEE348D0898C347CF4CB6595ciscocom_ Content-Type: text/html; charset="utf-8" Content-ID: <1EA4F06E83E1404BAAAC4183ABE018C7@emea.cisco.com> Content-Transfer-Encoding: base64 PGh0bWwgeG1sbnM6bz0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6b2ZmaWNlIiB4 bWxuczp3PSJ1cm46c2NoZW1hcy1taWNyb3NvZnQtY29tOm9mZmljZTp3b3JkIiB4bWxuczptPSJo dHRwOi8vc2NoZW1hcy5taWNyb3NvZnQuY29tL29mZmljZS8yMDA0LzEyL29tbWwiIHhtbG5zPSJo dHRwOi8vd3d3LnczLm9yZy9UUi9SRUMtaHRtbDQwIj4NCjxoZWFkPg0KPG1ldGEgaHR0cC1lcXVp dj0iQ29udGVudC1UeXBlIiBjb250ZW50PSJ0ZXh0L2h0bWw7IGNoYXJzZXQ9dXRmLTgiPg0KPG1l dGEgbmFtZT0iVGl0bGUiIGNvbnRlbnQ9IiI+DQo8bWV0YSBuYW1lPSJLZXl3b3JkcyIgY29udGVu dD0iIj4NCjxtZXRhIG5hbWU9IkdlbmVyYXRvciIgY29udGVudD0iTWljcm9zb2Z0IFdvcmQgMTUg KGZpbHRlcmVkIG1lZGl1bSkiPg0KPHN0eWxlPjwhLS0NCi8qIEZvbnQgRGVmaW5pdGlvbnMgKi8N CkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6IkNvdXJpZXIgTmV3IjsNCglwYW5vc2UtMToyIDcg MyA5IDIgMiA1IDIgNCA0O30NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6IkNhbWJyaWEgTWF0 aCI7DQoJcGFub3NlLTE6MiA0IDUgMyA1IDQgNiAzIDIgNDt9DQpAZm9udC1mYWNlDQoJe2ZvbnQt ZmFtaWx5OkNhbGlicmk7DQoJcGFub3NlLTE6MiAxNSA1IDIgMiAyIDQgMyAyIDQ7fQ0KLyogU3R5 bGUgRGVmaW5pdGlvbnMgKi8NCnAuTXNvTm9ybWFsLCBsaS5Nc29Ob3JtYWwsIGRpdi5Nc29Ob3Jt YWwNCgl7bWFyZ2luOjBjbTsNCgltYXJnaW4tYm90dG9tOi4wMDAxcHQ7DQoJZm9udC1zaXplOjEy LjBwdDsNCglmb250LWZhbWlseToiVGltZXMgTmV3IFJvbWFuIjt9DQphOmxpbmssIHNwYW4uTXNv SHlwZXJsaW5rDQoJe21zby1zdHlsZS1wcmlvcml0eTo5OTsNCgljb2xvcjojMDU2M0MxOw0KCXRl eHQtZGVjb3JhdGlvbjp1bmRlcmxpbmU7fQ0KYTp2aXNpdGVkLCBzcGFuLk1zb0h5cGVybGlua0Zv bGxvd2VkDQoJe21zby1zdHlsZS1wcmlvcml0eTo5OTsNCgljb2xvcjojOTU0RjcyOw0KCXRleHQt ZGVjb3JhdGlvbjp1bmRlcmxpbmU7fQ0KcHJlDQoJe21zby1zdHlsZS1wcmlvcml0eTo5OTsNCglt c28tc3R5bGUtbGluazoiSFRNTCBQcmVmb3JtYXR0ZWQgQ2hhciI7DQoJbWFyZ2luOjBjbTsNCglt YXJnaW4tYm90dG9tOi4wMDAxcHQ7DQoJZm9udC1zaXplOjEwLjBwdDsNCglmb250LWZhbWlseToi Q291cmllciBOZXciO30NCnNwYW4uSFRNTFByZWZvcm1hdHRlZENoYXINCgl7bXNvLXN0eWxlLW5h bWU6IkhUTUwgUHJlZm9ybWF0dGVkIENoYXIiOw0KCW1zby1zdHlsZS1wcmlvcml0eTo5OTsNCglt c28tc3R5bGUtbGluazoiSFRNTCBQcmVmb3JtYXR0ZWQiOw0KCWZvbnQtZmFtaWx5OkNvdXJpZXI7 fQ0Kc3Bhbi5FbWFpbFN0eWxlMTkNCgl7bXNvLXN0eWxlLXR5cGU6cGVyc29uYWw7DQoJZm9udC1m YW1pbHk6Q2FsaWJyaTsNCgljb2xvcjp3aW5kb3d0ZXh0O30NCnNwYW4uRW1haWxTdHlsZTIwDQoJ e21zby1zdHlsZS10eXBlOnBlcnNvbmFsLXJlcGx5Ow0KCWZvbnQtZmFtaWx5OkNhbGlicmk7DQoJ Y29sb3I6d2luZG93dGV4dDt9DQpzcGFuLm1zb0lucw0KCXttc28tc3R5bGUtdHlwZTpleHBvcnQt b25seTsNCgltc28tc3R5bGUtbmFtZToiIjsNCgl0ZXh0LWRlY29yYXRpb246dW5kZXJsaW5lOw0K CWNvbG9yOnRlYWw7fQ0KLk1zb0NocERlZmF1bHQNCgl7bXNvLXN0eWxlLXR5cGU6ZXhwb3J0LW9u bHk7DQoJZm9udC1zaXplOjEwLjBwdDt9DQpAcGFnZSBXb3JkU2VjdGlvbjENCgl7c2l6ZTo2MTIu MHB0IDc5Mi4wcHQ7DQoJbWFyZ2luOjcyLjBwdCA3Mi4wcHQgNzIuMHB0IDcyLjBwdDt9DQpkaXYu V29yZFNlY3Rpb24xDQoJe3BhZ2U6V29yZFNlY3Rpb24xO30NCi0tPjwvc3R5bGU+DQo8L2hlYWQ+ DQo8Ym9keSBiZ2NvbG9yPSJ3aGl0ZSIgbGFuZz0iRU4tVVMiIGxpbms9IiMwNTYzQzEiIHZsaW5r PSIjOTU0RjcyIj4NCjxkaXYgY2xhc3M9IldvcmRTZWN0aW9uMSI+DQo8cCBjbGFzcz0iTXNvTm9y bWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTpDYWxpYnJpIj5U aGFua3MgUGF2YW4uPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+ PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6Q2FsaWJyaSI+PG86cD4m bmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9 ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6Q2FsaWJyaSI+SGkgRGVib3JhaCw8bzpwPjwv bzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1z aXplOjExLjBwdDtmb250LWZhbWlseTpDYWxpYnJpIj5QbGVhc2UgbGV0IHVzIGtub3cgaWYgeW91 IGFyZSBPSyB3aXRoIHRoZSBzdWdnZXN0aW9uLjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNs YXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5 OkNhbGlicmkiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3Jt YWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OkNhbGlicmkiPuKA nEJlY2F1c2UgdGhlIGRvY3VtZW50IGV4dGVuZHMgUkZDNDA5MCwgaXQgc2hvdWxkIGFkZCAmcXVv dDtVcGRhdGVzOiA0MDkwJnF1b3Q7IGF0IHRoZSB0b3Agb2YgdGhlIGRvY3VtZW50LuKAnTwvc3Bh bj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdCI+PG86cD48L286cD48L3NwYW4+PC9wPg0K PHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1m YW1pbHk6Q2FsaWJyaSI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1z b05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6Q2FsaWJy aSI+VGhhbmtzLDxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxz cGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OkNhbGlicmkiPlJha2VzaDxv OnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJm b250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OkNhbGlicmkiPjxvOnA+Jm5ic3A7PC9vOnA+PC9z cGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEu MHB0O2ZvbnQtZmFtaWx5OkNhbGlicmkiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxw IGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFt aWx5OkNhbGlicmkiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxkaXYgc3R5bGU9ImJv cmRlcjpub25lO2JvcmRlci10b3A6c29saWQgI0I1QzRERiAxLjBwdDtwYWRkaW5nOjMuMHB0IDBj bSAwY20gMGNtIj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxiPjxzcGFuIHN0eWxlPSJmb250LWZh bWlseTpDYWxpYnJpO2NvbG9yOmJsYWNrIj5Gcm9tOiA8L3NwYW4+DQo8L2I+PHNwYW4gc3R5bGU9 ImZvbnQtZmFtaWx5OkNhbGlicmk7Y29sb3I6YmxhY2siPlZpc2hudSBQYXZhbiBCZWVyYW0gJmx0 O3ZiZWVyYW1AanVuaXBlci5uZXQmZ3Q7PGJyPg0KPGI+RGF0ZTogPC9iPlR1ZXNkYXksIEp1bHkg NCwgMjAxNyBhdCAxMTozOCBBTTxicj4NCjxiPlRvOiA8L2I+JnF1b3Q7PVNNVFA6cmdhbmRoaUBj aXNjby4gY29tJnF1b3Q7ICZsdDtyZ2FuZGhpQGNpc2NvLmNvbSZndDssIFJpZmFhdCBTaGVraC1Z dXNlZiAmbHQ7cmlmYWF0LmlldGZAZ21haWwuY29tJmd0OywgJnF1b3Q7ZHJhZnQtaWV0Zi10ZWFz LWdtcGxzLWxzcC1mYXN0cmVyb3V0ZS5hbGxAaWV0Zi5vcmcmcXVvdDsgJmx0O2RyYWZ0LWlldGYt dGVhcy1nbXBscy1sc3AtZmFzdHJlcm91dGUuYWxsQGlldGYub3JnJmd0OywgJnF1b3Q7c2VjZGly QGlldGYub3JnJnF1b3Q7ICZsdDtzZWNkaXJAaWV0Zi5vcmcmZ3Q7LCBUaGUgSUVTRyAmbHQ7aWVz Z0BpZXRmLm9yZyZndDs8YnI+DQo8Yj5DYzogPC9iPkRFQk9SQUggQlJVTkdBUkQgJmx0O2RiMzU0 NkBhdHQuY29tJmd0OywgTG91IEJlcmdlciAmbHQ7bGJlcmdlckBsYWJuLm5ldCZndDssICZxdW90 O0VYVC12aXNobnVwYXZhbkBnbWFpbC5jb20mcXVvdDsgJmx0O3Zpc2hudXBhdmFuQGdtYWlsLmNv bSZndDs8YnI+DQo8Yj5TdWJqZWN0OiA8L2I+UmU6IFtzZWNkaXJdIHNlY2RpciByZXZpZXcgb2Yg ZHJhZnQtaWV0Zi10ZWFzLWdtcGxzLWxzcC1mYXN0cmVyb3V0ZS0wOTxvOnA+PC9vOnA+PC9zcGFu PjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9v OnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPlJha2Vz aCwgSGkhPG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFs Ij48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3Jt YWwiPlRoaXMgaXMgYSB2YWxpZCBjb21tZW50LiAmbHQ7R01QTFMtTFNQLUZSUiZndDsgZG9lc27i gJl0IG1vZGlmeSBhbnkgb2YgdGhlIGV4aXN0aW5nIHByb2NlZHVyZXMgZGVmaW5lZCBpbiBSRkM0 MDkwLCBidXQgaXQgZG9lcyBzdXBwbGVtZW50IGl0LiBBcyBwZXIgUkZDMjIyMywgdGhpcyBpcyBz dWZmaWNpZW50IGdyb3VuZHMgdG8gc2V0IHRoZSDigJxVcGRhdGVz4oCdIGZpZWxkLjxvOnA+PC9v OnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8 L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5Db3VydGVzeSBS RkMyMjIzOjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHByZT4mbmJzcDsmbmJzcDsm bmJzcDsmbmJzcDsmbmJzcDsgVG8gYmUgdXNlZCBhcyBhIHJlZmVyZW5jZSBmcm9tIGEgbmV3IGl0 ZW0gdGhhdCBjYW5ub3QgYmUgdXNlZDxvOnA+PC9vOnA+PC9wcmU+DQo8cHJlPiZuYnNwOyZuYnNw OyZuYnNwOyZuYnNwOyZuYnNwOyBhbG9uZSAoaS5lLiwgb25lIHRoYXQgc3VwcGxlbWVudHMgYSBw cmV2aW91cyBkb2N1bWVudCksIHRvIHJlZmVyPG86cD48L286cD48L3ByZT4NCjxwcmU+Jm5ic3A7 Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7IHRvIHRoZSBwcmV2aW91cyBkb2N1bWVudC4mbmJzcDsg VGhlIG5ld2VyIHB1YmxpY2F0aW9uIGlzIGEgcGFydCB0aGF0PG86cD48L286cD48L3ByZT4NCjxw cmU+Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7IHdpbGwgc3VwcGxlbWVudCBvciBiZSBh ZGRlZCBvbiB0byB0aGUgZXhpc3RpbmcgZG9jdW1lbnQ7IGUuZy4sIGFuPG86cD48L286cD48L3By ZT4NCjxwcmU+Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7IGFkZGVuZHVtLCBvciBzZXBh cmF0ZSwgZXh0cmEgaW5mb3JtYXRpb24gdGhhdCBpcyB0byBiZSBhZGRlZCB0bzxvOnA+PC9vOnA+ PC9wcmU+DQo8cHJlPiZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyB0aGUgb3JpZ2luYWwg ZG9jdW1lbnQuPG86cD48L286cD48L3ByZT4NCjwvZGl2Pg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xh c3M9Ik1zb05vcm1hbCI+QERlYm9yYWgg4oCUIEFyZSB5b3Ugb2sgd2l0aCB0aGlzPzxvOnA+PC9v OnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+UmVnYXJkcyw8bzpw PjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPi1QYXZhbjxv OnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4m bmJzcDs8L286cD48L3A+DQo8L2Rpdj4NCjxkaXYgc3R5bGU9ImJvcmRlcjpub25lO2JvcmRlci10 b3A6c29saWQgI0I1QzRERiAxLjBwdDtwYWRkaW5nOjMuMHB0IDBjbSAwY20gMGNtIj4NCjxwIGNs YXNzPSJNc29Ob3JtYWwiPjxiPjxzcGFuIHN0eWxlPSJmb250LWZhbWlseTpDYWxpYnJpO2NvbG9y OmJsYWNrIj5Gcm9tOiA8L3NwYW4+DQo8L2I+PHNwYW4gc3R5bGU9ImZvbnQtZmFtaWx5OkNhbGli cmk7Y29sb3I6YmxhY2siPiZxdW90O1Jha2VzaCBHYW5kaGkgKHJnYW5kaGkpJnF1b3Q7ICZsdDs8 YSBocmVmPSJtYWlsdG86cmdhbmRoaUBjaXNjby5jb20iPnJnYW5kaGlAY2lzY28uY29tPC9hPiZn dDs8YnI+DQo8Yj5EYXRlOiA8L2I+VHVlc2RheSwgSnVseSA0LCAyMDE3IGF0IDEwOjU1IEFNPGJy Pg0KPGI+VG86IDwvYj5SaWZhYXQgU2hla2gtWXVzZWYgJmx0OzxhIGhyZWY9Im1haWx0bzpyaWZh YXQuaWV0ZkBnbWFpbC5jb20iPnJpZmFhdC5pZXRmQGdtYWlsLmNvbTwvYT4mZ3Q7LCAmcXVvdDs8 YSBocmVmPSJtYWlsdG86ZHJhZnQtaWV0Zi10ZWFzLWdtcGxzLWxzcC1mYXN0cmVyb3V0ZS5hbGxA aWV0Zi5vcmciPmRyYWZ0LWlldGYtdGVhcy1nbXBscy1sc3AtZmFzdHJlcm91dGUuYWxsQGlldGYu b3JnPC9hPiZxdW90OyAmbHQ7PGEgaHJlZj0ibWFpbHRvOmRyYWZ0LWlldGYtdGVhcy1nbXBscy1s c3AtZmFzdHJlcm91dGUuYWxsQGlldGYub3JnIj5kcmFmdC1pZXRmLXRlYXMtZ21wbHMtbHNwLWZh c3RyZXJvdXRlLmFsbEBpZXRmLm9yZzwvYT4mZ3Q7LA0KICZxdW90OzxhIGhyZWY9Im1haWx0bzpz ZWNkaXJAaWV0Zi5vcmciPnNlY2RpckBpZXRmLm9yZzwvYT4mcXVvdDsgJmx0OzxhIGhyZWY9Im1h aWx0bzpzZWNkaXJAaWV0Zi5vcmciPnNlY2RpckBpZXRmLm9yZzwvYT4mZ3Q7LCBUaGUgSUVTRyAm bHQ7PGEgaHJlZj0ibWFpbHRvOmllc2dAaWV0Zi5vcmciPmllc2dAaWV0Zi5vcmc8L2E+Jmd0Ozxi cj4NCjxiPkNjOiA8L2I+REVCT1JBSCBCUlVOR0FSRCAmbHQ7PGEgaHJlZj0ibWFpbHRvOmRiMzU0 NkBhdHQuY29tIj5kYjM1NDZAYXR0LmNvbTwvYT4mZ3Q7LCBMb3UgQmVyZ2VyICZsdDs8YSBocmVm PSJtYWlsdG86bGJlcmdlckBsYWJuLm5ldCI+bGJlcmdlckBsYWJuLm5ldDwvYT4mZ3Q7LCAmcXVv dDs8YSBocmVmPSJtYWlsdG86RVhULXZpc2hudXBhdmFuQGdtYWlsLmNvbSI+RVhULXZpc2hudXBh dmFuQGdtYWlsLmNvbTwvYT4mcXVvdDsgJmx0OzxhIGhyZWY9Im1haWx0bzp2aXNobnVwYXZhbkBn bWFpbC5jb20iPnZpc2hudXBhdmFuQGdtYWlsLmNvbTwvYT4mZ3Q7PGJyPg0KPGI+U3ViamVjdDog PC9iPlJlOiBbc2VjZGlyXSBzZWNkaXIgcmV2aWV3IG9mIGRyYWZ0LWlldGYtdGVhcy1nbXBscy1s c3AtZmFzdHJlcm91dGUtMDk8YnI+DQo8Yj5SZXNlbnQtRnJvbTogPC9iPiZsdDs8YSBocmVmPSJt YWlsdG86YWxpYXMtYm91bmNlc0BpZXRmLm9yZyI+YWxpYXMtYm91bmNlc0BpZXRmLm9yZzwvYT4m Z3Q7PGJyPg0KPGI+UmVzZW50LVRvOiA8L2I+Jmx0OzxhIGhyZWY9Im1haWx0bzptdGFpbGxvbkBj aXNjby5jb20iPm10YWlsbG9uQGNpc2NvLmNvbTwvYT4mZ3Q7LCAmbHQ7PGEgaHJlZj0ibWFpbHRv OnRzYWFkQGNpc2NvLmNvbSI+dHNhYWRAY2lzY28uY29tPC9hPiZndDssICZsdDs8YSBocmVmPSJt YWlsdG86cmdhbmRoaUBjaXNjby5jb20iPnJnYW5kaGlAY2lzY28uY29tPC9hPiZndDssIFphZmFy IEFsaSAmbHQ7PGEgaHJlZj0ibWFpbHRvOnphbGlAY2lzY28uY29tIj56YWxpQGNpc2NvLmNvbTwv YT4mZ3Q7LA0KICZsdDs8YSBocmVmPSJtYWlsdG86bWFuYXYuYmhhdGlhQG5va2lhLmNvbSI+bWFu YXYuYmhhdGlhQG5va2lhLmNvbTwvYT4mZ3Q7LCAmbHQ7PGEgaHJlZj0ibWFpbHRvOm1oYXJ0bGV5 QGNpc2NvLmNvbSI+bWhhcnRsZXlAY2lzY28uY29tPC9hPiZndDssIExvdSBCZXJnZXIgJmx0Ozxh IGhyZWY9Im1haWx0bzpsYmVyZ2VyQGxhYm4ubmV0Ij5sYmVyZ2VyQGxhYm4ubmV0PC9hPiZndDss IFZpc2hudSBQYXZhbiBCZWVyYW0gJmx0OzxhIGhyZWY9Im1haWx0bzp2YmVlcmFtQGp1bmlwZXIu bmV0Ij52YmVlcmFtQGp1bmlwZXIubmV0PC9hPiZndDssDQogJmx0OzxhIGhyZWY9Im1haWx0bzph cmV0YW5hQGNpc2NvLmNvbSI+YXJldGFuYUBjaXNjby5jb208L2E+Jmd0OywgJmx0OzxhIGhyZWY9 Im1haWx0bzpkYjM1NDZAYXR0LmNvbSI+ZGIzNTQ2QGF0dC5jb208L2E+Jmd0OywgJmx0OzxhIGhy ZWY9Im1haWx0bzpha2F0bGFzQGdtYWlsLmNvbSI+YWthdGxhc0BnbWFpbC5jb208L2E+Jmd0Ozxi cj4NCjxiPlJlc2VudC1EYXRlOiA8L2I+VHVlc2RheSwgSnVseSA0LCAyMDE3IGF0IDEwOjU1IEFN PG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1h bCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9 Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtZmFtaWx5OkNhbGlicmkiPlRoYW5rcyBSaWZh YXQgZm9yIHRoZSByZXZpZXcgb2YgdGhpcyBkb2N1bWVudC48L3NwYW4+PG86cD48L286cD48L3A+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1mYW1pbHk6Q2FsaWJyaSI+ Jm5ic3A7PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4g c3R5bGU9ImZvbnQtZmFtaWx5OkNhbGlicmkiPkhpIERlYm9yYWgsIExvdSwgUGF2YW4sPC9zcGFu PjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQt ZmFtaWx5OkNhbGlicmkiPiZuYnNwOzwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJN c29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LWZhbWlseTpDYWxpYnJpIj5BbnkgdGhvdWdodHMg b24gdGhlIGZvbGxvd2luZyBzdWdnZXN0aW9uPzwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjxwIGNs YXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LWZhbWlseTpDYWxpYnJpIj4mbmJzcDs8 L3NwYW4+PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0i Zm9udC1mYW1pbHk6Q2FsaWJyaSI+4oCcQmVjYXVzZSB0aGUgZG9jdW1lbnQgZXh0ZW5kcyBSRkM0 MDkwLCBpdCBzaG91bGQgYWRkICZxdW90O1VwZGF0ZXM6IDQwOTAmcXVvdDsgYXQgdGhlIHRvcCBv ZiB0aGUgZG9jdW1lbnQu4oCdPC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05v cm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtZmFtaWx5OkNhbGlicmkiPiZuYnNwOzwvc3Bhbj48bzpw PjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LWZhbWls eTpDYWxpYnJpIj5UaGFua3MsPC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05v cm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtZmFtaWx5OkNhbGlicmkiPlJha2VzaDwvc3Bhbj48bzpw PjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LWZhbWls eTpDYWxpYnJpIj4mbmJzcDs8L3NwYW4+PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9y bWFsIj48c3BhbiBzdHlsZT0iZm9udC1mYW1pbHk6Q2FsaWJyaSI+Jm5ic3A7PC9zcGFuPjxvOnA+ PC9vOnA+PC9wPg0KPGRpdiBzdHlsZT0iYm9yZGVyOm5vbmU7Ym9yZGVyLXRvcDpzb2xpZCAjQjVD NERGIDEuMHB0O3BhZGRpbmc6My4wcHQgMGNtIDBjbSAwY20iPg0KPHAgY2xhc3M9Ik1zb05vcm1h bCI+PGI+PHNwYW4gc3R5bGU9ImZvbnQtZmFtaWx5OkNhbGlicmk7Y29sb3I6YmxhY2siPkZyb206 IDwvc3Bhbj4NCjwvYj48c3BhbiBzdHlsZT0iZm9udC1mYW1pbHk6Q2FsaWJyaTtjb2xvcjpibGFj ayI+UmlmYWF0IFNoZWtoLVl1c2VmICZsdDs8YSBocmVmPSJtYWlsdG86cmlmYWF0LmlldGZAZ21h aWwuY29tIj5yaWZhYXQuaWV0ZkBnbWFpbC5jb208L2E+Jmd0Ozxicj4NCjxiPkRhdGU6IDwvYj5U dWVzZGF5LCBKdWx5IDQsIDIwMTcgYXQgOTozMiBBTTxicj4NCjxiPlRvOiA8L2I+JnF1b3Q7PGEg aHJlZj0ibWFpbHRvOmRyYWZ0LWlldGYtdGVhcy1nbXBscy1sc3AtZmFzdHJlcm91dGUuYWxsQGll dGYub3JnIj5kcmFmdC1pZXRmLXRlYXMtZ21wbHMtbHNwLWZhc3RyZXJvdXRlLmFsbEBpZXRmLm9y ZzwvYT4mcXVvdDsgJmx0OzxhIGhyZWY9Im1haWx0bzpkcmFmdC1pZXRmLXRlYXMtZ21wbHMtbHNw LWZhc3RyZXJvdXRlLmFsbEBpZXRmLm9yZyI+ZHJhZnQtaWV0Zi10ZWFzLWdtcGxzLWxzcC1mYXN0 cmVyb3V0ZS5hbGxAaWV0Zi5vcmc8L2E+Jmd0OywNCiAmcXVvdDs8YSBocmVmPSJtYWlsdG86c2Vj ZGlyQGlldGYub3JnIj5zZWNkaXJAaWV0Zi5vcmc8L2E+JnF1b3Q7ICZsdDs8YSBocmVmPSJtYWls dG86c2VjZGlyQGlldGYub3JnIj5zZWNkaXJAaWV0Zi5vcmc8L2E+Jmd0OywgVGhlIElFU0cgJmx0 OzxhIGhyZWY9Im1haWx0bzppZXNnQGlldGYub3JnIj5pZXNnQGlldGYub3JnPC9hPiZndDs8YnI+ DQo8Yj5TdWJqZWN0OiA8L2I+W3NlY2Rpcl0gc2VjZGlyIHJldmlldyBvZiBkcmFmdC1pZXRmLXRl YXMtZ21wbHMtbHNwLWZhc3RyZXJvdXRlLTA5PGJyPg0KPGI+UmVzZW50LUZyb206IDwvYj4mbHQ7 PGEgaHJlZj0ibWFpbHRvOmFsaWFzLWJvdW5jZXNAaWV0Zi5vcmciPmFsaWFzLWJvdW5jZXNAaWV0 Zi5vcmc8L2E+Jmd0Ozxicj4NCjxiPlJlc2VudC1UbzogPC9iPiZxdW90Oz1TTVRQOm10YWlsbG9u QGNpc2NvLiBjb20mcXVvdDsgJmx0OzxhIGhyZWY9Im1haWx0bzptdGFpbGxvbkBjaXNjby5jb20i Pm10YWlsbG9uQGNpc2NvLmNvbTwvYT4mZ3Q7LCAmbHQ7PGEgaHJlZj0ibWFpbHRvOnRzYWFkQGNp c2NvLmNvbSI+dHNhYWRAY2lzY28uY29tPC9hPiZndDssICZxdW90Oz1TTVRQOnJnYW5kaGlAY2lz Y28uIGNvbSZxdW90OyAmbHQ7PGEgaHJlZj0ibWFpbHRvOnJnYW5kaGlAY2lzY28uY29tIj5yZ2Fu ZGhpQGNpc2NvLmNvbTwvYT4mZ3Q7LCBaYWZhcg0KIEFsaSAmbHQ7PGEgaHJlZj0ibWFpbHRvOnph bGlAY2lzY28uY29tIj56YWxpQGNpc2NvLmNvbTwvYT4mZ3Q7LCAmbHQ7PGEgaHJlZj0ibWFpbHRv Om1hbmF2LmJoYXRpYUBub2tpYS5jb20iPm1hbmF2LmJoYXRpYUBub2tpYS5jb208L2E+Jmd0Oywg Jmx0OzxhIGhyZWY9Im1haWx0bzptaGFydGxleUBjaXNjby5jb20iPm1oYXJ0bGV5QGNpc2NvLmNv bTwvYT4mZ3Q7LCBMb3UgQmVyZ2VyICZsdDs8YSBocmVmPSJtYWlsdG86bGJlcmdlckBsYWJuLm5l dCI+bGJlcmdlckBsYWJuLm5ldDwvYT4mZ3Q7LA0KICZsdDs8YSBocmVmPSJtYWlsdG86dmJlZXJh bUBqdW5pcGVyLm5ldCI+dmJlZXJhbUBqdW5pcGVyLm5ldDwvYT4mZ3Q7LCAmbHQ7PGEgaHJlZj0i bWFpbHRvOmFyZXRhbmFAY2lzY28uY29tIj5hcmV0YW5hQGNpc2NvLmNvbTwvYT4mZ3Q7LCBERUJP UkFIIEJSVU5HQVJEICZsdDs8YSBocmVmPSJtYWlsdG86ZGIzNTQ2QGF0dC5jb20iPmRiMzU0NkBh dHQuY29tPC9hPiZndDssICZsdDs8YSBocmVmPSJtYWlsdG86YWthdGxhc0BnbWFpbC5jb20iPmFr YXRsYXNAZ21haWwuY29tPC9hPiZndDs8YnI+DQo8Yj5SZXNlbnQtRGF0ZTogPC9iPlR1ZXNkYXks IEp1bHkgNCwgMjAxNyBhdCA5OjQwIEFNPC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8 ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+Jm5ic3A7PG86cD48L286cD48L3A+DQo8L2Rpdj4N CjxkaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+SSBoYXZlIHJldmlld2VkIHRoaXMg ZG9jdW1lbnQgYXMgcGFydCBvZiB0aGUgc2VjdXJpdHkgZGlyZWN0b3JhdGUnczxvOnA+PC9vOnA+ PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+b25nb2luZyBlZmZvcnQg dG8gcmV2aWV3IGFsbCBJRVRGIGRvY3VtZW50cyBiZWluZyBwcm9jZXNzZWQgYnkgdGhlPG86cD48 L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5JRVNHLiZuYnNw OyBUaGVzZSBjb21tZW50cyB3ZXJlIHdyaXR0ZW4gcHJpbWFyaWx5IGZvciB0aGUgYmVuZWZpdCBv ZiB0aGU8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi PnNlY3VyaXR5IGFyZWEgZGlyZWN0b3JzLiZuYnNwOyBEb2N1bWVudCBlZGl0b3JzIGFuZCBXRyBj aGFpcnMgc2hvdWxkIHRyZWF0PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIj50aGVzZSBjb21tZW50cyBqdXN0IGxpa2UgYW55IG90aGVyIGxhc3QgY2Fs bCBjb21tZW50cy48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29O b3JtYWwiPiZuYnNwOzxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1z b05vcm1hbCI+U3VtbWFyeTogUmVhZHkgd2l0aCBOaXRzPG86cD48L286cD48L3A+DQo8L2Rpdj4N CjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj4mbmJzcDs8bzpwPjwvbzpwPjwvcD4NCjwvZGl2 Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPiZuYnNwOzxvOnA+PC9vOnA+PC9wPg0KPC9k aXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+SSBkaWQgbm90IGhhdmUgZW5vdWdoIGJh Y2tncm91bmQgb24gTUxQUyBhbmQgR01QTFMgYW5kIHRoZWlyIHJlbGF0ZWQgUkZDcyw8bzpwPjwv bzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPnNvIEkgaGFkIHRv IGRvIHNvbWUgcmVhZGluZyB0byBnZXQgc29tZSBmYW1pbGlhcml0eSB3aXRoIHRoaXMgc3ViamVj dCB0byBiZTxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1h bCI+YWJsZSB0byBwcm92aWRlIHNvbWUgcmVhc29uYWJsZSByZXZpZXcgb2YgdGhpcyBkb2N1bWVu dC48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPiZu YnNwOzxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+ VGhpcyBkb2N1bWVudCBidWlsZHMgb24gYW4gZXhpc3RpbmcgbWVjaGFuaXNtLCAmcXVvdDtGYXN0 IFJlcm91dGUgRXh0ZW5zaW9ucyB0bzxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCI+UlNWUC1URSBmb3IgTFNQIFR1bm5lbHMmcXVvdDsgZGVmaW5lZCBp biBSRkM0MDkwLCB3aGljaCBkZWZpbmVzIGEgbWVjaGFuaXNtIHRvPG86cD48L286cD48L3A+DQo8 L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5lc3RhYmxpc2ggYSBiYWNrdXAgdHVu bmVscyBmb3IgbG9jYWwgTFNQIHR1bm5lbHMuIE9uZSBsaW1pdGF0aW9uIG9mIHRoZTxvOnA+PC9v OnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+ZXhpc3RpbmcgbWVj aGFuaXNtIGlzIHRoYXQgaW4gc29tZSBzaXR1YXRpb25zIGl0IG1pZ2h0IGFzc2lnbiBkaWZmZXJl bnQ8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPnVu aS1kaXJlY3Rpb25hbCBieXBhc3MgdHVubmVscyBmb3IgdGhlIGZvcndhcmQgYW5kIHJldmVyc2Ug ZGlyZWN0aW9ucy48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29O b3JtYWwiPiZuYnNwOzxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1z b05vcm1hbCI+VGhpcyBkb2N1bWVudCBleHRlbmRzIHRoZSBtZWNoYW5pc20gZGVmaW5lZCBpbiBS RkM0MDkwLCBieSBhZGRpbmcgYSBuZXc8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxw IGNsYXNzPSJNc29Ob3JtYWwiPkJZUEFTU19BU1NJR05NRU5UIHN1Ym9iamVjdCB0byB0aGUgZXhp c3RpbmcgUkVDT1JEX1JPVVRFIE9iamVjdCAoUlJPKSB1c2VkPG86cD48L286cD48L3A+DQo8L2Rp dj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5pbiBQQVRIIGFuZCBSRVNWIHJlcXVlc3Rz LCB0byBhbGxvdyB0aGUgZXN0YWJsaXNobWVudCBvZiBhIGJpLWRpcmVjdGlvbmFsPG86cD48L286 cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5ieXBhc3MgdHVubmVs LjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+Jm5i c3A7PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5U aGUgc2VjdXJpdHkgb2YgdGhlIGV4aXN0aW5nIG1lY2hhbmlzbSBzdGlsbCBhcHBsaWVzIHdpdGgg dGhlIG5ldyBtZWNoYW5pc20sPG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIj5hbmQgdGhlIHNlY3VyaXR5IHNlY3Rpb24gZGlzY3Vzc2VzIHRoZSBpbXBs aWNhdGlvbnMgb2YgdGhlIG5ldyBzdWJvYmplY3QgYW5kPG86cD48L286cD48L3A+DQo8L2Rpdj4N CjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj50aGUgbmV3IGVycm9yIGFzc29jaWF0ZWQgd2l0 aCB0aGF0LCB3aGljaCBzZWVtcyByZWFzb25hYmxlLjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8 ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+Jm5ic3A7PG86cD48L286cD48L3A+DQo8L2Rpdj4N CjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5UaGUgZG9jdW1lbnQgYWxzbyBwb2ludHMgdG8g YW4gTVBMUy9HTVBMUyBTZWN1cml0eSBGcmFtZXdvcmsgKFJGQzU5MjApPG86cD48L286cD48L3A+ DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5kb2N1bWVudCB0aGF0IGhhcyBh biBleHRlbnNpdmUgZGlzY3Vzc2lvbiBvZiB0aGUgc2VjdXJpdHkgb2YgTVBMUy9HTVBMUzxvOnA+ PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+bmV0d29yayBp biBnZW5lcmFsIHRoYXQgYWxzbyBhcHBsaWVzIHRvIHRoaXMgZG9jdW1lbnQuPG86cD48L286cD48 L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj4mbmJzcDs8bzpwPjwvbzpw PjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPiZuYnNwOzxvOnA+PC9v OnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+Tml0czxvOnA+PC9v OnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+Jm5ic3A7PG86cD48 L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5CZWNhdXNlIHRo ZSBkb2N1bWVudCBleHRlbmRzIFJGQzQwOTAsIGl0IHNob3VsZCBhZGQgJnF1b3Q7VXBkYXRlczog NDA5MCZxdW90OyBhdCB0aGU8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNz PSJNc29Ob3JtYWwiPnRvcCBvZiB0aGUgZG9jdW1lbnQuPG86cD48L286cD48L3A+DQo8L2Rpdj4N CjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj4mbmJzcDs8bzpwPjwvbzpwPjwvcD4NCjwvZGl2 Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPlJlZ2FyZHMsPG86cD48L286cD48L3A+DQo8 L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj4mbmJzcDtSaWZhYXQ8bzpwPjwvbzpw PjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPiZuYnNwOzxvOnA+PC9v OnA+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjwvYm9keT4N CjwvaHRtbD4NCg== --_000_5C02CE7FDEE348D0898C347CF4CB6595ciscocom_-- From nobody Thu Jul 6 21:40:16 2017 Return-Path: X-Original-To: secdir@ietfa.amsl.com Delivered-To: secdir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 7098F12EC1C; Thu, 6 Jul 2017 21:40:09 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2 X-Spam-Level: X-Spam-Status: No, score=-2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id PxALMlTBQ74Y; Thu, 6 Jul 2017 21:40:07 -0700 (PDT) Received: from mail-pg0-x22d.google.com (mail-pg0-x22d.google.com [IPv6:2607:f8b0:400e:c05::22d]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 901AF124D85; Thu, 6 Jul 2017 21:40:07 -0700 (PDT) Received: by mail-pg0-x22d.google.com with SMTP id t186so11204891pgb.1; Thu, 06 Jul 2017 21:40:07 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:in-reply-to:references:from:date:message-id:subject:to :cc; bh=h3TGgKimQqBFyGHcd9y1oiGbpFwHsWNBlN9QXv6g2Uc=; b=JrANn2ACo6aoni6iXhcQDwOOpBOepnPDHCn2c6WOAvzaOLaWOFvEg4JFkDX37VN0k1 yPIfwbUw/OciwVimUfAhFZq1Jih9embei5F933MytcW0oP06wY/SDebvueYyD6EAgrfI IOHLQBz27hZqX6o7Kgm+r6+oyxq31YHsLs263Yw+keoGznKYvGpWYA/8j4LQD6jSolWy V41hJiC35fYbPuu/F+AL3f7KFozi8QUkbUN9VUFTXtJaif+/vbNG/4lZBpKWRY/33ryp wIVJxGkW+vWXAWnl8pnHrTiiPehRoseapAyqJXRiYbl7Mpq3150jiCT44sIwPJ4gKwrW yeBw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:in-reply-to:references:from:date :message-id:subject:to:cc; bh=h3TGgKimQqBFyGHcd9y1oiGbpFwHsWNBlN9QXv6g2Uc=; b=ch4cUp6zj4RogF2w53M82kUUXLXAO2lp3uNPHnM6vfhRnXBkrk+KqQwd8kxW/oEsLD Y4w0Szand6/iw0W6/HUpL1IO97jtdwB2kYE6y6+7PHtGvMfBV2eGF6PEib6/SpDMh+Je dt3lKTh0oVeNYgQy/mCis+ZVtl/UzdjCs2V3r2/1qTQ5TLbBAtvBgYCZYYcDkInJv8Qq Fa2T3WgD0tcCy3LbMGCzs7ZBdic5PGWmkoQ9rfXMx4TqXJySlAzM0wpoj58YcUNGvNHH /gG/wGcmkgLpzJ+2UxIL7xyoxSmCBGSPRRHAhRA7Vg6oanI5L78jOpa6BXunrBoeK9me hOLQ== X-Gm-Message-State: AIVw111+OX2oyJQA2ba7Iw+Sqo9ITwShMjGUxaYslNB29aPYfX7SbSsd FCHKNS2Ms5R6Z/9GgSD6J9IRlK6z7Q== X-Received: by 10.99.104.74 with SMTP id d71mr30456784pgc.7.1499402407145; Thu, 06 Jul 2017 21:40:07 -0700 (PDT) MIME-Version: 1.0 Received: by 10.100.130.3 with HTTP; Thu, 6 Jul 2017 21:40:06 -0700 (PDT) In-Reply-To: <149919703750.15996.5462759432298024921@ietfa.amsl.com> References: <149919703750.15996.5462759432298024921@ietfa.amsl.com> From: Kazuho Oku Date: Fri, 7 Jul 2017 13:40:06 +0900 Message-ID: To: Melinda Shore Cc: secdir@ietf.org, draft-ietf-httpbis-early-hints.all@ietf.org, IETF Discussion Mailing List , HTTP Working Group Content-Type: text/plain; charset="UTF-8" Archived-At: Subject: Re: [secdir] Secdir last call review of draft-ietf-httpbis-early-hints-03 X-BeenThere: secdir@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: Security Area Directorate List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 07 Jul 2017 04:40:09 -0000 Hi Melinda, Thank you very much for the review. My responses below. 2017-07-05 4:37 GMT+09:00 Melinda Shore : > Reviewer: Melinda Shore > Review result: Has Issues > > I have reviewed this document as part of the security directorate's > ongoing effort to review all IETF documents being processed by the > IESG. These comments were written primarily for the benefit of the > security area directors. Document editors and WG chairs should treat > these comments just like any other last call comments. > > Summary: Has minor issues. > > This draft defines a status code for sending an informational > response that contains header fields that are likely to be included in the > final response. A server can send the informational response containing > some of the header fields to help the client start making preparations > for processing the final response, and then run time-consuming operations > to generate the final response. The informational response can also be used by an > origin server to trigger HTTP/2 server push at a caching intermediary. > > Passed nit checker without complaints other than publication date. Sections > 5 and 6 should be appendices. The issue has been fixed in the github repo. > > One minor issue: in the security considerations section, "Therefore, > a server might refrain from sending Early Hints over HTTP/1.1 unless when > the client is known to handle informational responses correctly" is a bit squishy > (and contains a superfluous "when"). I'm not sure this merits a text change and > I'm rather certain that it doesn't merit normative 2119 language but it did stand > out as an overly soft recommendation. The superfluous "when" has been removed from the github repo. Regarding the wording, I think it would be better to keep the tone as-is, rather than suggesting implementers not to send an Early Hints response over HTTP/1.1 depending on the client. Users behind a proxy that cannot handle informational response correctly is exposed to response splitting attack regardless of if Early Hints is used (in HTTP/1.1, a server is allowed to send any informational response at it's own discretion). So while it is beneficial to warn the risks, I think that there is no merit in restricting the use of Early Hints. -- Kazuho Oku From nobody Thu Jul 6 22:54:13 2017 Return-Path: X-Original-To: secdir@ietfa.amsl.com Delivered-To: secdir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id BAD2C12FEE1; Thu, 6 Jul 2017 22:54:05 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2 X-Spam-Level: X-Spam-Status: No, score=-2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id M38TgKKxAq-W; Thu, 6 Jul 2017 22:54:01 -0700 (PDT) Received: from mail-pf0-x234.google.com (mail-pf0-x234.google.com [IPv6:2607:f8b0:400e:c00::234]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 62BC812F257; Thu, 6 Jul 2017 22:54:01 -0700 (PDT) Received: by mail-pf0-x234.google.com with SMTP id e7so11998769pfk.0; Thu, 06 Jul 2017 22:54:01 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=subject:to:references:cc:from:message-id:date:user-agent :mime-version:in-reply-to; bh=5poBw+n7N9x7eJzrIhs1M1VExP+MFP3lWFUVhGDSkq8=; b=lSAGZoJG2NCF/M6lnbmupRt0a+X0IT2ajgkd67VNavozq4vlHf2+xL256uJTJTA0Bh eQ4xgxnLkbKwjz7uIkrdJNKFyKGbLbXjwpkGbl9ckwSJBgxcieDeFpy1bSs66r+byqgx z0YIc8U2jgAO5/VwpUSc0feEOvURfjKvDs+bsTwIVmmeI2IjEZKurbx4J+uzzCoYKaz+ sHj+zRnrV8CKjqIdzNt1nwyJyxStozzoUVUgGNQJAt4Rf/Ukt5l6UGN8Zj//66g6iGYB W34aMj/ynZhIiYMJ7RQfhW2ZMd4p/HACM4yNx6ekGOqUBMbZiQ4AwwQyGDYBUlboSCUO IMsg== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:subject:to:references:cc:from:message-id:date :user-agent:mime-version:in-reply-to; bh=5poBw+n7N9x7eJzrIhs1M1VExP+MFP3lWFUVhGDSkq8=; b=uQ3roHhn3rrEufsT6r5RHkMNcLxuyHX7VZLvybcOmOM8tG3EDePSSvn7vG0i19QSil x9/9/AG3t/BaS2/iOiN/HI9IOUOWakIw5YiabGwh1wsiuGRAe0/nt3jc2OpqyZ8K/lGX gyH2fm+izOc1RTvPdRuQYNU3cmzjOzYWzhoPW+8fTWJfOKv2vRdmivp34Btite9SVr4T M3LliiJo30V5KGVc/vQckGHTdBPjugNHJmtmgLaN4btaEwshSr8nU78/jQ1N4ej3hqPY sG5P+s5/4ppeaTeEsa5N8mtjn493LCqofcB+vDaDMCW7I41LxDW0DwXptDkmOkmRPkMI BMWQ== X-Gm-Message-State: AIVw113EAL4m2eWZryGDEWR7a7wrQwh3FI4gM/iqT+EfQnsC1US7NjjM AanrsTUeCl6w4Q== X-Received: by 10.99.165.28 with SMTP id n28mr29641696pgf.163.1499406840877; Thu, 06 Jul 2017 22:54:00 -0700 (PDT) Received: from aspen.local (216-67-119-73-radius.dynamic.acsalaska.net. [216.67.119.73]) by smtp.gmail.com with ESMTPSA id p77sm3424077pfd.62.2017.07.06.22.53.58 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Thu, 06 Jul 2017 22:53:59 -0700 (PDT) To: Kazuho Oku References: <149919703750.15996.5462759432298024921@ietfa.amsl.com> Cc: secdir@ietf.org, draft-ietf-httpbis-early-hints.all@ietf.org, IETF Discussion Mailing List , HTTP Working Group From: Melinda Shore Message-ID: <7273f8ab-c1ff-5dff-862e-0a1ead6d28b2@gmail.com> Date: Thu, 6 Jul 2017 21:53:53 -0800 User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.12; rv:45.0) Gecko/20100101 Thunderbird/45.8.0 MIME-Version: 1.0 In-Reply-To: Content-Type: multipart/signed; micalg=pgp-sha512; protocol="application/pgp-signature"; boundary="Tjam5Rpp1D8XFnUOWslnmBv3pTBb37dHF" Archived-At: Subject: Re: [secdir] Secdir last call review of draft-ietf-httpbis-early-hints-03 X-BeenThere: secdir@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: Security Area Directorate List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 07 Jul 2017 05:54:06 -0000 This is an OpenPGP/MIME signed message (RFC 4880 and 3156) --Tjam5Rpp1D8XFnUOWslnmBv3pTBb37dHF Content-Type: multipart/mixed; boundary="nFa2W5wKPdwcbSct4vbstqABB4BHX1W9Q"; protected-headers="v1" From: Melinda Shore To: Kazuho Oku Cc: secdir@ietf.org, draft-ietf-httpbis-early-hints.all@ietf.org, IETF Discussion Mailing List , HTTP Working Group Message-ID: <7273f8ab-c1ff-5dff-862e-0a1ead6d28b2@gmail.com> Subject: Re: Secdir last call review of draft-ietf-httpbis-early-hints-03 References: <149919703750.15996.5462759432298024921@ietfa.amsl.com> In-Reply-To: --nFa2W5wKPdwcbSct4vbstqABB4BHX1W9Q Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable On 7/6/17 8:40 PM, Kazuho Oku wrote: > Regarding the wording, I think it would be better to keep the tone > as-is, rather than suggesting implementers not to send an Early Hints > response over HTTP/1.1 depending on the client. Yeah, you don't want to discourage implementation. I think the goal is to find some balance between not putting off implementers on the one hand, and having to deal with an embarrassing incident on the other. I'd be more comfortable with language that's a bit stronger but it's not a huge issue, certainly not one that's an impediment to moving the document forward (particularly given that it's intended for publication as an experimental standard). In general I thought the draft was clearly written and straightforward, and ready for publication modulo this one minor issue. Melinda --nFa2W5wKPdwcbSct4vbstqABB4BHX1W9Q-- --Tjam5Rpp1D8XFnUOWslnmBv3pTBb37dHF Content-Type: application/pgp-signature; name="signature.asc" Content-Description: OpenPGP digital signature Content-Disposition: attachment; filename="signature.asc" -----BEGIN PGP SIGNATURE----- iQIcBAEBCgAGBQJZXyHyAAoJELiGRpM6HoEufgQQAKCMtE1IioaC+U80toAhu7FS 3IxxHAClVOI4PTzcrq3MVytnfUUPSW/hExDe6ll7RfaeN0a5dFiT7V+vVBvRgRGa Kz1ygu34aO69LJhgkJCEK1YqVF3RRDMHa4hhtHLqQvApt5i1TSc1vrnCr2IvbgsO Mn9d3z0QLE/nDF6laXzwgohWF436QAEJppoHNMjd4S5iN3y3cPN8JGfIA/qQiRCT /GHGIrI7H42vrWQAKjD8U/0MfI6+09LLR8LtfsyZ64O4IxTqVEVkvoLkek/m2RGQ 1mKhOiZsK79/3MkVmUmlNgc0rsH26CeO17PZTBDGM8fQKSQWqEZG+yXygUhxxKDo Lr5bBIO01F9dX6oGgpP7UAaG7j8YEB/8kTR2f1TuX1F9uUdFImXzGZV73FzEBLVb eGSVj3ufn+ylXBKUegFxoYjwtI7lvBs5pNlVIq75GxnJNvEiagWdIiV3eQFO5inN BLBwd4uEDTs+cbxeID03C2fe3WRDJ5Qy3d3auMQZtwq0n7oB0IUxyGC/AMLQYJqQ Cwi1yqFhNJ16o11G/Ao4wwQTk7bRP7cW34JJXzxYLVJUwHX88TLzYXtkZRbdxAgf 5iCvyz1MBL0K94yP1xv/l6Q3kMUz408AOEUwYa4wvXZiigcTouN4vMfEWQ7toojj /7Td1UNgPvJ32UH6Hx4u =x16F -----END PGP SIGNATURE----- --Tjam5Rpp1D8XFnUOWslnmBv3pTBb37dHF-- From nobody Fri Jul 7 02:23:34 2017 Return-Path: X-Original-To: secdir@ietfa.amsl.com Delivered-To: secdir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 0D8A7126B6D; Fri, 7 Jul 2017 02:23:27 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.902 X-Spam-Level: X-Spam-Status: No, score=-1.902 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id lqGdnzzFhqAd; Fri, 7 Jul 2017 02:23:25 -0700 (PDT) Received: from 1wt.eu (wtarreau.pck.nerim.net [62.212.114.60]) by ietfa.amsl.com (Postfix) with ESMTP id DC1D41204DA; Fri, 7 Jul 2017 02:23:24 -0700 (PDT) Received: (from willy@localhost) by pcw.home.local (8.15.2/8.15.2/Submit) id v679NG3K027610; Fri, 7 Jul 2017 11:23:16 +0200 Date: Fri, 7 Jul 2017 11:23:16 +0200 From: Willy Tarreau To: Melinda Shore Cc: Kazuho Oku , secdir@ietf.org, draft-ietf-httpbis-early-hints.all@ietf.org, IETF Discussion Mailing List , HTTP Working Group Message-ID: <20170707092316.GA27560@1wt.eu> References: <149919703750.15996.5462759432298024921@ietfa.amsl.com> <7273f8ab-c1ff-5dff-862e-0a1ead6d28b2@gmail.com> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <7273f8ab-c1ff-5dff-862e-0a1ead6d28b2@gmail.com> User-Agent: Mutt/1.6.1 (2016-04-27) Archived-At: Subject: Re: [secdir] Secdir last call review of draft-ietf-httpbis-early-hints-03 X-BeenThere: secdir@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: Security Area Directorate List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 07 Jul 2017 09:23:27 -0000 On Fri, Jul 07, 2017 at 05:54:41AM +0000, Melinda Shore wrote: > On 7/6/17 8:40 PM, Kazuho Oku wrote: > > Regarding the wording, I think it would be better to keep the tone > > as-is, rather than suggesting implementers not to send an Early Hints > > response over HTTP/1.1 depending on the client. > > Yeah, you don't want to discourage implementation. I think > the goal is to find some balance between not putting off > implementers on the one hand, and having to deal with an > embarrassing incident on the other. I'd be more comfortable > with language that's a bit stronger but it's not a huge > issue, certainly not one that's an impediment to moving the > document forward (particularly given that it's intended for > publication as an experimental standard). I'm just thinking about the fact that we're not even sure that any HTTP/1.1 client doesn't support these informational responses, because such clients can already make use of Expect: 100-continue (so they know about 100), and if I remember well when designing the 101 upgrade for WebSocket, which was reused for HTTP/2, some of the difficulties we faced was that some clients/intermediaries were consuming 101 as 1xx and waiting for a final response after it. Maybe the stronger wording should be oriented differently, such as "Servers MUST not send 103 to HTTP/1.0 clients nor to any client known not to support 1xx informational responses" ? This way it leaves the possibility opened (ie rely on version and/or user-agent or anything else once an exception is known). Just my two cents, Willy From nobody Fri Jul 7 02:33:26 2017 Return-Path: X-Original-To: secdir@ietfa.amsl.com Delivered-To: secdir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id B6AA4129AD0; Fri, 7 Jul 2017 02:33:25 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.72 X-Spam-Level: X-Spam-Status: No, score=-2.72 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_LOW=-0.7, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=mnot.net header.b=Cma8/Rkw; dkim=pass (2048-bit key) header.d=messagingengine.com header.b=puPRxddm Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id mU9U5EJOReF7; Fri, 7 Jul 2017 02:33:22 -0700 (PDT) Received: from out2-smtp.messagingengine.com (out2-smtp.messagingengine.com [66.111.4.26]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id D3A541204DA; Fri, 7 Jul 2017 02:33:22 -0700 (PDT) Received: from compute3.internal (compute3.nyi.internal [10.202.2.43]) by mailout.nyi.internal (Postfix) with ESMTP id 38B8A20AED; Fri, 7 Jul 2017 05:33:22 -0400 (EDT) Received: from frontend1 ([10.202.2.160]) by compute3.internal (MEProxy); Fri, 07 Jul 2017 05:33:22 -0400 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=mnot.net; h=cc :content-transfer-encoding:content-type:date:from:in-reply-to :message-id:mime-version:references:subject:to:x-me-sender :x-me-sender:x-sasl-enc:x-sasl-enc; s=fm1; bh=6Ez5dztVkOe0no5bFI AR8hk3QaCOUlMCN4iPKfnWRZY=; b=Cma8/RkwvpQO0Sie4hey5Hk9ExK8phDzvo zv+U1cYY9w0Q2/Gg1GcKRb2ZarT/wxhB2GzIwMoja8X7TN7TUsQwx95cYbsSyOHn 5zsqipIpGPCYrOrBN7Lr3A+G4u1Wj9yhbqm83nDoP4bYAWa/q7D7qmNr/Vw82e4p aLrORisfT9DjcRv+gG/cX8WQDrm1vS2zFyVeVn4H0zf0Dcb3xNtisij0QWhiMPN1 iOf+Htcvz+WJ9teS2BhfeuyltBjQPj/LGY8XFUuRSJ+BLfaEuOagLi11Qf3XlXX0 DIj+tbv1nYV2WrBM5HG123D5OZvWC+xF5Uhz6iQO78PZMSPzU8AA== DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d= messagingengine.com; h=cc:content-transfer-encoding:content-type :date:from:in-reply-to:message-id:mime-version:references :subject:to:x-me-sender:x-me-sender:x-sasl-enc:x-sasl-enc; s= fm1; bh=6Ez5dztVkOe0no5bFIAR8hk3QaCOUlMCN4iPKfnWRZY=; b=puPRxddm rhvDjLPBDOq7SjJqWNC4PV+4EroHYRjZcQ3WWbbGX1JOnNyUl5eUAI8WBRs/RNR4 vw/TUG6A7vEe8Lacr6EQ/YccYAT0rYRo+kfILzdUlFiLNu4n9yovAqATAhleyEQW SqLcs3zogTW5rZL40L6wfwsGdWye9W3kqVb8V0LJPexQ/RVXqnonqtolMMgICVIn 3/4blOAOUukqBFAglFSpR14ZDD9St1T1s3cu1LecWGpOsVNx38Nh2DCiZhVP7joa C4i2Itbf0UHQsZkvaATwXKGcOZVLK/3bgvqoeg/WOfL5Za3Y3vIOF/0Nc1SENdaZ xwIVhkGabFBsuw== X-ME-Sender: X-Sasl-enc: Fe7ag9UYwYd4bVPwo1iczLrddTr7u7FilIlrfXoZFfwf 1499420001 Received: from [192.168.1.14] (cpe-124-188-19-231.hdbq1.win.bigpond.net.au [124.188.19.231]) by mail.messagingengine.com (Postfix) with ESMTPA id ED5167E622; Fri, 7 Jul 2017 05:33:19 -0400 (EDT) Content-Type: text/plain; charset=us-ascii Mime-Version: 1.0 (Mac OS X Mail 10.3 \(3273\)) From: Mark Nottingham In-Reply-To: <20170707092316.GA27560@1wt.eu> Date: Fri, 7 Jul 2017 19:33:17 +1000 Cc: Melinda Shore , Kazuho Oku , secdir , draft-ietf-httpbis-early-hints.all@ietf.org, IETF Discussion Mailing List , HTTP Working Group Content-Transfer-Encoding: quoted-printable Message-Id: References: <149919703750.15996.5462759432298024921@ietfa.amsl.com> <7273f8ab-c1ff-5dff-862e-0a1ead6d28b2@gmail.com> <20170707092316.GA27560@1wt.eu> To: Willy Tarreau X-Mailer: Apple Mail (2.3273) Archived-At: Subject: Re: [secdir] Secdir last call review of draft-ietf-httpbis-early-hints-03 X-BeenThere: secdir@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: Security Area Directorate List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 07 Jul 2017 09:33:25 -0000 On 7 Jul 2017, at 7:23 pm, Willy Tarreau wrote: >=20 > Maybe the stronger wording should be oriented differently, such as > "Servers MUST not send 103 to HTTP/1.0 clients nor to any client > known not to support 1xx informational responses" ? This way it > leaves the possibility opened (ie rely on version and/or user-agent > or anything else once an exception is known). RFC7231 already says "Since HTTP/1.0 did not define any 1xx status = codes, a server MUST NOT send a 1xx response to an HTTP/1.0 client." -- Mark Nottingham https://www.mnot.net/ From nobody Fri Jul 7 04:29:40 2017 Return-Path: X-Original-To: secdir@ietfa.amsl.com Delivered-To: secdir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id CB497129B4C; Fri, 7 Jul 2017 04:29:38 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.999 X-Spam-Level: X-Spam-Status: No, score=-1.999 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id LaugGBbv1rvI; Fri, 7 Jul 2017 04:29:37 -0700 (PDT) Received: from mail-pg0-x22e.google.com (mail-pg0-x22e.google.com [IPv6:2607:f8b0:400e:c05::22e]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 67CD8129B2C; Fri, 7 Jul 2017 04:29:37 -0700 (PDT) Received: by mail-pg0-x22e.google.com with SMTP id u62so15901996pgb.3; Fri, 07 Jul 2017 04:29:37 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:in-reply-to:references:from:date:message-id:subject:to :cc; bh=IEUlzBRv5plxZSUVTaichvRvfRAM4EwEQnR14+AQ7EA=; b=phqCYs5f1xP1+IMVmaGK5fYb2wcWtwk5kZ1Izk8VZRzGgctZQppIxbGcqTUx3iPvxg bZZU6ovAKp8tCs0GlTBW5J41yYZMz0owIaxBXoMzsOZ1CcUlC08ceFO6YQPovvQWzJwt e8a+r8ClpkS18Tdkt333oDsirt2BviI/Ed1Ci/GR2abOlCt5tqhEEqY4TOEJusqxSlJr IThZRUAw/8CRUCF9MIzuqFEJ6+0D8w1cpgwK6Oc8eDGccqW3p21IUS0tCweYvFA3eX1Z aETtBB2tH4AnzaPAb74ZxSVl2zwrdMh5uOokacdmfx/Ffd2CIEkKBX4ajS4PZ8Lqvx5X 2qCA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:in-reply-to:references:from:date :message-id:subject:to:cc; bh=IEUlzBRv5plxZSUVTaichvRvfRAM4EwEQnR14+AQ7EA=; b=W0VWlPCHDRszRBKx2CJ6/YpNUSEg5GfO+U7IPb7S9bY6/dLzCcMjNLh54fJz/WSBof r53ySxW1srAog4c1Bh6wg5AiRKFKbV/OCM9/6oS0AksZa/asLjVgQHdi5Aaaan9uBoyc 5dvhSqJt+GC3vqbJm06gbZSSem2e4u4WJ+29XzTk1JIP3zSXxJm04EnDVbz3J8vh/u9G aoZGSDuUwpIEBDPxlQVIM3d1A44t6M5e/m9CZZDdogOR7PhR+N7CnLe29duCqUfZ9g6L pGDbcEdMSpJh/XRJausxP4NMAZ200BivLwIhcq5d/tjqZmLzBMZvgnSnqY54rhNj6Yos nnYQ== X-Gm-Message-State: AIVw112oBZKUxUJeZsi6EoaDe389B89aYn+iNgRTw0uOOGlcmNfYgc0N QMu0lG4kp87CPhre6GC49jrUaE/LSQ== X-Received: by 10.98.79.130 with SMTP id f2mr31197225pfj.133.1499426976952; Fri, 07 Jul 2017 04:29:36 -0700 (PDT) MIME-Version: 1.0 Received: by 10.100.130.3 with HTTP; Fri, 7 Jul 2017 04:29:36 -0700 (PDT) In-Reply-To: <20170707092316.GA27560@1wt.eu> References: <149919703750.15996.5462759432298024921@ietfa.amsl.com> <7273f8ab-c1ff-5dff-862e-0a1ead6d28b2@gmail.com> <20170707092316.GA27560@1wt.eu> From: Kazuho Oku Date: Fri, 7 Jul 2017 20:29:36 +0900 Message-ID: To: Willy Tarreau Cc: Melinda Shore , secdir@ietf.org, draft-ietf-httpbis-early-hints.all@ietf.org, IETF Discussion Mailing List , HTTP Working Group Content-Type: text/plain; charset="UTF-8" Archived-At: Subject: Re: [secdir] Secdir last call review of draft-ietf-httpbis-early-hints-03 X-BeenThere: secdir@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: Security Area Directorate List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 07 Jul 2017 11:29:39 -0000 2017-07-07 18:23 GMT+09:00 Willy Tarreau : > On Fri, Jul 07, 2017 at 05:54:41AM +0000, Melinda Shore wrote: >> On 7/6/17 8:40 PM, Kazuho Oku wrote: >> > Regarding the wording, I think it would be better to keep the tone >> > as-is, rather than suggesting implementers not to send an Early Hints >> > response over HTTP/1.1 depending on the client. >> >> Yeah, you don't want to discourage implementation. I think >> the goal is to find some balance between not putting off >> implementers on the one hand, and having to deal with an >> embarrassing incident on the other. I'd be more comfortable >> with language that's a bit stronger but it's not a huge >> issue, certainly not one that's an impediment to moving the >> document forward (particularly given that it's intended for >> publication as an experimental standard). > > I'm just thinking about the fact that we're not even sure that any > HTTP/1.1 client doesn't support these informational responses, > because such clients can already make use of Expect: 100-continue > (so they know about 100), and if I remember well when designing the > 101 upgrade for WebSocket, which was reused for HTTP/2, some of > the difficulties we faced was that some clients/intermediaries > were consuming 101 as 1xx and waiting for a final response after > it. > > Maybe the stronger wording should be oriented differently, such as > "Servers MUST not send 103 to HTTP/1.0 clients nor to any client > known not to support 1xx informational responses" ? This way it > leaves the possibility opened (ie rely on version and/or user-agent > or anything else once an exception is known). Considering that this is merely an advice on how to deal with broken clients, I think that we should not use the verbs defined in RFC 2119 or state a strong prohibition. I also believe that a whitelist-based approach will be a better choice than a blacklist-based one, since 103 is an optimization that is beneficial when sent to a client that is known to make use of it. For most websites, whitelisting the major browsers that support it (once they do) or the CDN they use will be enough to get the most out of the status code. > Just my two cents, > Willy -- Kazuho Oku From nobody Fri Jul 7 04:44:33 2017 Return-Path: X-Original-To: secdir@ietfa.amsl.com Delivered-To: secdir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 971B112EA7C; Fri, 7 Jul 2017 04:44:25 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.001 X-Spam-Level: X-Spam-Status: No, score=-2.001 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RP_MATCHES_RCVD=-0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=greenbytes.de header.b=FK0WGOGU; dkim=pass (1024-bit key) header.d=greenbytes.de header.b=MQie0i0t Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 9Jl7l4J-KUfb; Fri, 7 Jul 2017 04:44:23 -0700 (PDT) Received: from mail.greenbytes.de (mail.greenbytes.de [217.91.35.233]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 17F6B129AD2; Fri, 7 Jul 2017 04:44:22 -0700 (PDT) Received: by mail.greenbytes.de (Postfix, from userid 117) id 9FEA615A3BC2; Fri, 7 Jul 2017 13:44:20 +0200 (CEST) DKIM-Signature: v=1; a=rsa-sha256; c=simple/simple; d=greenbytes.de; s=mail; t=1499427860; bh=0mXG+i6vAshXeCMWrnXN6xMGBPErEjzMWIY/WYLK54w=; h=Subject:From:In-Reply-To:Date:Cc:References:To:From; b=FK0WGOGUzTLJiNzoqRpOB2wK6gBnNfFntSsDruDyceZc92Ww6FE7lFC7vl0Ukdrbt 1QgvlZZ55kq0OxU3ZwABUU/FRPqFhMREhK2KXJonrPuM20xCJj9g1jMwHsvK1m4OHw BIhfPhMUqunH/g5XgfwwJXUNlUkWBwipAyKuiuXs= Received: from resistance.greenbytes.local (unknown [217.91.35.233]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client did not present a certificate) by mail.greenbytes.de (Postfix) with ESMTPSA id 7342815A0221; Fri, 7 Jul 2017 13:44:19 +0200 (CEST) DKIM-Signature: v=1; a=rsa-sha256; c=simple/simple; d=greenbytes.de; s=mail; t=1499427859; bh=0mXG+i6vAshXeCMWrnXN6xMGBPErEjzMWIY/WYLK54w=; h=Subject:From:In-Reply-To:Date:Cc:References:To:From; b=MQie0i0taoJuO8AHwqH4QtSVOXq1oO0KNeiBaUttj8PPlqW+QRX6lH6e/eZg7ubT+ 5RBpMqFyR1PIi9Z7xNZUze+f7M10/GN1RckvM9S/IR3FICTflHyb9IcCVFJkNGlr7W HwyePHYRaNE9g/RL5nocMirsktNtyujtlfJUppIU= Content-Type: text/plain; charset=us-ascii Mime-Version: 1.0 (Mac OS X Mail 10.3 \(3273\)) From: Stefan Eissing In-Reply-To: Date: Fri, 7 Jul 2017 13:44:19 +0200 Cc: Willy Tarreau , Melinda Shore , secdir@ietf.org, draft-ietf-httpbis-early-hints.all@ietf.org, IETF Discussion Mailing List , HTTP Working Group Content-Transfer-Encoding: quoted-printable Message-Id: References: <149919703750.15996.5462759432298024921@ietfa.amsl.com> <7273f8ab-c1ff-5dff-862e-0a1ead6d28b2@gmail.com> <20170707092316.GA27560@1wt.eu> To: Kazuho Oku X-Mailer: Apple Mail (2.3273) Archived-At: Subject: Re: [secdir] Secdir last call review of draft-ietf-httpbis-early-hints-03 X-BeenThere: secdir@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: Security Area Directorate List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 07 Jul 2017 11:44:25 -0000 I am not a big fan of "MUST not use protocol features if it is known not = to work" advise. > Am 07.07.2017 um 13:29 schrieb Kazuho Oku : >=20 > 2017-07-07 18:23 GMT+09:00 Willy Tarreau : >> On Fri, Jul 07, 2017 at 05:54:41AM +0000, Melinda Shore wrote: >>> On 7/6/17 8:40 PM, Kazuho Oku wrote: >>>> Regarding the wording, I think it would be better to keep the tone >>>> as-is, rather than suggesting implementers not to send an Early = Hints >>>> response over HTTP/1.1 depending on the client. >>>=20 >>> Yeah, you don't want to discourage implementation. I think >>> the goal is to find some balance between not putting off >>> implementers on the one hand, and having to deal with an >>> embarrassing incident on the other. I'd be more comfortable >>> with language that's a bit stronger but it's not a huge >>> issue, certainly not one that's an impediment to moving the >>> document forward (particularly given that it's intended for >>> publication as an experimental standard). >>=20 >> I'm just thinking about the fact that we're not even sure that any >> HTTP/1.1 client doesn't support these informational responses, >> because such clients can already make use of Expect: 100-continue >> (so they know about 100), and if I remember well when designing the >> 101 upgrade for WebSocket, which was reused for HTTP/2, some of >> the difficulties we faced was that some clients/intermediaries >> were consuming 101 as 1xx and waiting for a final response after >> it. >>=20 >> Maybe the stronger wording should be oriented differently, such as >> "Servers MUST not send 103 to HTTP/1.0 clients nor to any client >> known not to support 1xx informational responses" ? This way it >> leaves the possibility opened (ie rely on version and/or user-agent >> or anything else once an exception is known). >=20 > Considering that this is merely an advice on how to deal with broken > clients, I think that we should not use the verbs defined in RFC 2119 > or state a strong prohibition. >=20 > I also believe that a whitelist-based approach will be a better choice > than a blacklist-based one, since 103 is an optimization that is > beneficial when sent to a client that is known to make use of it. For > most websites, whitelisting the major browsers that support it (once > they do) or the CDN they use will be enough to get the most out of the > status code. >=20 >> Just my two cents, >> Willy >=20 >=20 >=20 > --=20 > Kazuho Oku >=20 From nobody Fri Jul 7 04:56:18 2017 Return-Path: X-Original-To: secdir@ietfa.amsl.com Delivered-To: secdir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id B6CA612EAAA; Fri, 7 Jul 2017 04:56:09 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.902 X-Spam-Level: X-Spam-Status: No, score=-1.902 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id R9y5Jy3OsUAw; Fri, 7 Jul 2017 04:56:07 -0700 (PDT) Received: from 1wt.eu (wtarreau.pck.nerim.net [62.212.114.60]) by ietfa.amsl.com (Postfix) with ESMTP id 7EDE4129AD2; Fri, 7 Jul 2017 04:56:07 -0700 (PDT) Received: (from willy@localhost) by pcw.home.local (8.15.2/8.15.2/Submit) id v67Bu1EG027915; Fri, 7 Jul 2017 13:56:01 +0200 Date: Fri, 7 Jul 2017 13:56:01 +0200 From: Willy Tarreau To: Kazuho Oku Cc: Melinda Shore , secdir@ietf.org, draft-ietf-httpbis-early-hints.all@ietf.org, IETF Discussion Mailing List , HTTP Working Group Message-ID: <20170707115601.GB27560@1wt.eu> References: <149919703750.15996.5462759432298024921@ietfa.amsl.com> <7273f8ab-c1ff-5dff-862e-0a1ead6d28b2@gmail.com> <20170707092316.GA27560@1wt.eu> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: User-Agent: Mutt/1.6.1 (2016-04-27) Archived-At: Subject: Re: [secdir] Secdir last call review of draft-ietf-httpbis-early-hints-03 X-BeenThere: secdir@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: Security Area Directorate List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 07 Jul 2017 11:56:10 -0000 On Fri, Jul 07, 2017 at 08:29:36PM +0900, Kazuho Oku wrote: > I also believe that a whitelist-based approach will be a better choice > than a blacklist-based one, since 103 is an optimization that is > beneficial when sent to a client that is known to make use of it. For > most websites, whitelisting the major browsers that support it (once > they do) or the CDN they use will be enough to get the most out of the > status code. OK. That was just a proposal :-) Willy From nobody Fri Jul 7 13:19:59 2017 Return-Path: X-Original-To: secdir@ietfa.amsl.com Delivered-To: secdir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id A3785126C3D; Fri, 7 Jul 2017 13:19:53 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.88 X-Spam-Level: X-Spam-Status: No, score=-1.88 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RP_MATCHES_RCVD=-0.001, T_SPF_HELO_PERMERROR=0.01, T_SPF_PERMERROR=0.01, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id hjcCmEKpC2sc; Fri, 7 Jul 2017 13:19:52 -0700 (PDT) Received: from nostrum.com (raven-v6.nostrum.com [IPv6:2001:470:d:1130::1]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 47CE8124217; Fri, 7 Jul 2017 13:19:51 -0700 (PDT) Received: from [10.0.1.63] (cpe-66-25-7-22.tx.res.rr.com [66.25.7.22]) (authenticated bits=0) by nostrum.com (8.15.2/8.15.2) with ESMTPSA id v67KJi5U068863 (version=TLSv1.2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128 verify=NO); Fri, 7 Jul 2017 15:19:48 -0500 (CDT) (envelope-from ben@nostrum.com) X-Authentication-Warning: raven.nostrum.com: Host cpe-66-25-7-22.tx.res.rr.com [66.25.7.22] claimed to be [10.0.1.63] Content-Type: text/plain; charset=utf-8 Mime-Version: 1.0 (Mac OS X Mail 10.3 \(3273\)) From: Ben Campbell In-Reply-To: <000701d2f5ec$3a25d2d0$ae717870$@nsr.re.kr> Date: Fri, 7 Jul 2017 15:19:43 -0500 Cc: Ben Laurie , The IESG , secdir@ietf.org, draft-ietf-avtcore-aria-srtp.all@ietf.org Content-Transfer-Encoding: quoted-printable Message-Id: References: <000701d2f5ec$3a25d2d0$ae717870$@nsr.re.kr> To: Woo-Hwan Kim X-Mailer: Apple Mail (2.3273) Archived-At: Subject: Re: [secdir] Security review of draft-ietf-avtcore-aria-srtp-09 X-BeenThere: secdir@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: Security Area Directorate List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 07 Jul 2017 20:19:54 -0000 > On Jul 5, 2017, at 7:10 PM, Woo-Hwan Kim wrote: >=20 > Sorry for our late reply and thank you for your comments. >=20 >>> I have reviewed this document as part of the security directorate's = ongoing effort to review >>all IETF documents being processed by the = IESG. These comments were written primarily for >>the benefit of the = security area directors. Document editors and WG chairs should treat = >>these comments just like any other last call comments. >>>=20 >>> The summary of the review is ready with nits. >>>=20 >>> This is essentially a drop-in replacement of AES for SRTP with ARIA, = a cipher I've never >>heard of. >>>=20 >>> Because it is a drop-in replacement, it uses SHA-1. Probably it = would be better practice to >>update the hash function to something more = modern. >=20 > We agree. But we think that such updates should be based on the = revision of the standard RFC (including RFC 3711). So it may be not = possible in this stage. Given that a main point of this draft is to register current usage, I = agree. But would it make sense to add a paragraph to the security = considerations pointing out the use of SHA1 and mentioning what needs to = happen to evolve the specs to support newer hash functions? (or even = hash agility). >=20 >>> The I-D also somewhat eccentrically says that no security problems = have been found with ARIA >>whilst referencing a paper on a = meet-in-the-middle attack on reduced round ARIA. I am not >>sure what to = make of this, though clearly it is not a fatal flaw. >=20 > The reason for referencing the paper [TSL] is that the results of the = security analysis on ARIA up to the time when first draft was proposed = are summarized in the paper. We wanted that the reference paper is = accepted as an evidence of the security of ARIA. Considering the problem = you pointed out, however, it seems to be failed to clearly express our = intension. So we revised the draft by adding the sentence =E2=80=9CPreviou= s security analysis results are summarized in [ATY]=E2=80=9D. In = addition, we replaced the reference [TSL] by the new reference [ATY] = because the results of the security analysis on ARIA have been published = to date. This new reference also contains a summary of almost all = results of security analysis on ARIA up to date. >=20 > Thanks again for your review, and we've posted a revision(-10) that = reflects your feedback. >=20 > Sincerely, Woo-Hwan Kim >=20 From nobody Fri Jul 7 15:10:13 2017 Return-Path: X-Original-To: secdir@ietfa.amsl.com Delivered-To: secdir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 149B21316BC for ; Fri, 7 Jul 2017 15:10:12 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2 X-Spam-Level: X-Spam-Status: No, score=-2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id FPnQK4KC7yS2 for ; Fri, 7 Jul 2017 15:10:10 -0700 (PDT) Received: from mail-wr0-x231.google.com (mail-wr0-x231.google.com [IPv6:2a00:1450:400c:c0c::231]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id C48ED12EC2B for ; Fri, 7 Jul 2017 15:10:09 -0700 (PDT) Received: by mail-wr0-x231.google.com with SMTP id k67so64189564wrc.2 for ; Fri, 07 Jul 2017 15:10:09 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=from:content-transfer-encoding:mime-version:date:subject:message-id :to; bh=VKCaNBVys6sgPSWpeLdw00V/X8YXyRKyC/DvgqVBjVI=; b=uNGoi0T4yj+z2MIfqr6LEGTUMDnWjPrw4d/2l2BauPYKvHWvcJ9VHLT1WWyP9UPmqJ NiQwQxLUOl3KOdSCMn2WcHZ0mFEbBQR7NWJScr9P2xWAIciBijcdNF1daeXpOxBocB0y ebIUDjpUXIr1WOCk3xqa3/UG8oiWTIa3+e6RQyWAQUvJIJT5WeP3OYqhwS+nn6FkISvf Mrc8YDb0SMCBwN3bn3vcKl7nXnOUXIoxX9JY51KUL8PiynIpOPwinAUg1oveoh55avBE kkiJbVfBDkhRCgvqt1M0cQ10QpZJpAmZLKTEkqDp05nniu3t/gTv54vBzzffrnX8pd0i O5Rw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:from:content-transfer-encoding:mime-version:date :subject:message-id:to; bh=VKCaNBVys6sgPSWpeLdw00V/X8YXyRKyC/DvgqVBjVI=; b=cNHzeP7Y41axt7YZcYIqBh4AsEXzaMz8mYcrom+JEYaW7z9/Y0OgywfcvPcOswgU+k LpO6nmh2Z8B7iaKhx8qyzChS+vHhlOaSLAyzy/qbyvk9YIbIPey14zJU8MXLJopSumeI EArVbFhns6z58qXJhFdhQEuHoB/RHBSqTVbhkdvS9Huitv349gGaIHF7LI7dXM0kNLrC hcgdeXaDXdehjQ332FuslGYD1uy5MZA6XuvZ97PEMoIioC8YGFigX4eM1tIAVNft2Kgu LHNiAN5K0mOW9lfPLB3/mpm1lFcxrxelZOrHPDj2yYLY2EISOlQE+XO9Mil/gSa8qgyn 6RLw== X-Gm-Message-State: AIVw110ouj01LA8YQu213sYYhgDt8i5NDDYz0CuvGi3wA3snMrKIcVYd lncCHSoYm2wVtgK8Mn8= X-Received: by 10.80.158.199 with SMTP id a65mr3577273edf.169.1499465408090; Fri, 07 Jul 2017 15:10:08 -0700 (PDT) Received: from [192.168.1.5] ([51.37.134.169]) by smtp.gmail.com with ESMTPSA id s4sm2621193edd.28.2017.07.07.15.10.07 for (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Fri, 07 Jul 2017 15:10:07 -0700 (PDT) From: Kathleen Moriarty Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: quoted-printable Mime-Version: 1.0 (1.0) Date: Fri, 7 Jul 2017 23:10:06 +0100 Message-Id: To: secdir@ietf.org X-Mailer: iPhone Mail (14F89) Archived-At: Subject: [secdir] SecDir lunch X-BeenThere: secdir@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: Security Area Directorate List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 07 Jul 2017 22:10:12 -0000 Hello, The SecDir lunch will take place on Tuesday of the IETF week in the Berlin/B= russels rooms. We have to wrap up by 13:15 for the next session. Best regards, Kathleen=20 Sent from my iPhone= From nobody Sun Jul 9 13:10:34 2017 Return-Path: X-Original-To: secdir@ietfa.amsl.com Delivered-To: secdir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 986631270B4 for ; Sun, 9 Jul 2017 13:10:27 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.599 X-Spam-Level: X-Spam-Status: No, score=-2.599 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_DNSWL_LOW=-0.7, URIBL_BLOCKED=0.001] autolearn=unavailable autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=yahoo.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id NjOn1jmLP0LN for ; Sun, 9 Jul 2017 13:10:26 -0700 (PDT) Received: from nm10-vm5.access.bullet.mail.bf1.yahoo.com (nm10-vm5.access.bullet.mail.bf1.yahoo.com [216.109.114.212]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 86C20129B3A for ; Sun, 9 Jul 2017 13:10:26 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s2048; t=1499631025; bh=Y1QeyiYJMaZH79utjT++8SMmGYgXRhQ5GJETqJu+56M=; h=To:From:Subject:Date:From:Subject; b=RnpfSX0LDHixgc1O18EZDikazPTMH3z2M5URtxKFQ4SjLo/t35kVuiEOHCW/USqx4FqUjhsVgQry9Qn+PhN880+YynFCiolg56wXz3sd+b2mEiwfPyrn+e01YlCu71XAWSdu0LFNERbOYHTuNKJh56pRp/wRNZBYosAsFpFuWz7a6FGabmi3tKNqetnqpXqtLMpTMBj9TWnCMyb1T6XPhQBewTvkwsPnxilg+j7b8JpmgN/egcxkVpRKhbzJpZb6lGCYY55/to+K4HiF4i+ad+ZSZXD4ZCkdNdZwS8sPis8WsQnd/sep8LcZ/2MH9i7Tw4mXurkW5U1cv1XHMYg8NA== Received: from [66.196.81.159] by nm10.access.bullet.mail.bf1.yahoo.com with NNFMP; 09 Jul 2017 20:10:25 -0000 Received: from [98.138.226.240] by tm5.access.bullet.mail.bf1.yahoo.com with NNFMP; 09 Jul 2017 20:10:25 -0000 Received: from [127.0.0.1] by smtp111.sbc.mail.ne1.yahoo.com with NNFMP; 09 Jul 2017 20:10:25 -0000 X-Yahoo-Newman-Id: 80221.85640.bm@smtp111.sbc.mail.ne1.yahoo.com X-Yahoo-Newman-Property: ymail-3 X-YMail-OSG: zDg9.gkVM1kzfkoVUhRTVb_M3j_zbUyZIP4fedSr49gRNzo Qm.FrfolQHnAS24qfjjhe5B1zs2EZSuqXW9WtlvYssCyUMFSW8hbCZwRtkFI xCbJzhvtKy8g.lDMCZX65R0fLHBZWCh4szHJUEFqMTpv400D4_XmghNaQObr 4IGEVrJHCY_mvTr7TH2S1O7HwptlEKEzW9rvfSYrd3yFkSRu1NaZs2__mpjO Du3hqFAk8bsFBTJG15P4adDweSuKU25kcU9h1nNPGZrcBUXm5tMitWtPYFel WGB5KoL2TCK392g.vHCyO4fVyi5lVHnafRYHApV7QZD8CK1mWjc.awzBtjLt KQMTmns5odt739olVez3WZEmUz_lM72yGT.coThP_XBBVjJVJIwKjVnklSG3 szyWlnQ9VdL_dTBImwZiciqnfcmQutfIQK8ByvjVcL3pzWPrYru0xD8KhXyr Wz6uto4VXqgdddXov7UAmCbPYOu2MQR9P4CMIiRdhUu_YVr29ImHwL9F6xJF NWpQmepV47yzQvg-- X-Yahoo-SMTP: 4kJJK.qswBDPuwyc5wW.BPAQqNXdy5j09UNyeAS0pyOQ708- Received: from [192.168.1.127] (DD-WRT [192.168.1.1]) by uriel.mandelberg.org (Postfix) with ESMTPSA id 9C2561C6040; Sun, 9 Jul 2017 16:10:23 -0400 (EDT) To: iesg@ietf.org, secdir@ietf.org, draft-ietf-pce-pceps.all@tools.ietf.org From: David Mandelberg Message-ID: <13f2461e-1df9-be60-0fb7-ae784bbaca68@mandelberg.org> Date: Sun, 9 Jul 2017 16:10:19 -0400 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Thunderbird/52.1.1 MIME-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha1; protocol="application/pgp-signature"; boundary="KX0khb7QfwiXtB76MkaGGtLp2NgoeEqg3" Archived-At: Subject: [secdir] secdir review of draft-ietf-pce-pceps-14 X-BeenThere: secdir@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: Security Area Directorate List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 09 Jul 2017 20:10:27 -0000 This is an OpenPGP/MIME signed message (RFC 4880 and 3156) --KX0khb7QfwiXtB76MkaGGtLp2NgoeEqg3 Content-Type: multipart/mixed; boundary="bCiNpGmL2g3I8bfqCXvFTTlkAhFfI2FIu"; protected-headers="v1" From: David Mandelberg To: iesg@ietf.org, secdir@ietf.org, draft-ietf-pce-pceps.all@tools.ietf.org Message-ID: <13f2461e-1df9-be60-0fb7-ae784bbaca68@mandelberg.org> Subject: secdir review of draft-ietf-pce-pceps-14 --bCiNpGmL2g3I8bfqCXvFTTlkAhFfI2FIu Content-Type: text/plain; charset=utf-8 Content-Language: en-US Content-Transfer-Encoding: quoted-printable Hi, I reviewed the diff between -06 (which I had previously reviewed) and -14. All of the issues I brought up in my previous review appear to be resolved, and I saw no new issues. I think this draft is Ready. --=20 David Eric Mandelberg / dseomn http://david.mandelberg.org/ --bCiNpGmL2g3I8bfqCXvFTTlkAhFfI2FIu-- --KX0khb7QfwiXtB76MkaGGtLp2NgoeEqg3 Content-Type: application/pgp-signature; name="signature.asc" Content-Description: OpenPGP digital signature Content-Disposition: attachment; filename="signature.asc" -----BEGIN PGP SIGNATURE----- Version: GnuPG v2 iEYEARECAAYFAllijasACgkQRKlmUHCg4sAh6gCaAke+rmTC9oIJbKMUedG39d8A xjMAn1Eyvx8zcYE2PioGB7trJDGCIY4r =uWp7 -----END PGP SIGNATURE----- --KX0khb7QfwiXtB76MkaGGtLp2NgoeEqg3-- From nobody Mon Jul 10 12:07:40 2017 Return-Path: X-Original-To: secdir@ietfa.amsl.com Delivered-To: secdir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 43BC3131861; Mon, 10 Jul 2017 12:07:33 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.999 X-Spam-Level: X-Spam-Status: No, score=-1.999 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 8ee4IUCaG8J9; Mon, 10 Jul 2017 12:07:30 -0700 (PDT) Received: from mail-qt0-x230.google.com (mail-qt0-x230.google.com [IPv6:2607:f8b0:400d:c0d::230]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 3D1321315FF; Mon, 10 Jul 2017 12:07:29 -0700 (PDT) Received: by mail-qt0-x230.google.com with SMTP id r30so81163405qtc.0; Mon, 10 Jul 2017 12:07:29 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:in-reply-to:references:from:date:message-id:subject:to :cc; bh=9VX5QQHUL49Pkt44UEiRtvJP0TfDVjCbK+DePjF6hoM=; b=UNA07IkjTnOLVZjF+E597LITtAx6OtblO/kd+TIMgNq6qmLy7VlJnL/ciu1VGmMMyu ZJ2Dbi5LSZoPoVB1Mi5zVHrZTiERhWuOgBuEGiLihVkYDQUNvtEs2z1lAOWGxnhZgzCd tZYN3svD6Jg0K6H4c+VPmNAgm8PgcH+kQeykWu56usYeBdzS2aQQtimA7W0+J3Y5Zw5r OcGv0Arcc1RVH1McwU5rYdlJq+yACr6ncLhZnrs+6/MeOYI/4nHrBZLnGURMvNIQVLHp 4mclgkGLAujDTHdOufazVFKReYAZRcTS7c1wjrgnguXk3VfTjUzQzHQ9dDRrH5ubdccd UqPA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:in-reply-to:references:from:date :message-id:subject:to:cc; bh=9VX5QQHUL49Pkt44UEiRtvJP0TfDVjCbK+DePjF6hoM=; b=DfYwrEKVYUXzJfrtHhtWJZjW2cBkPTGQ7PaXyGZfzKn52lY0jXdP8+x+a5wSt2+mcZ ulaNO19nwY9twFvXfZifioX94eEq5EHKhJvntf3Aie/dEt+/J2N+ZOUiHyLPQA45BL62 a8ZQNj4c0YpgyCtH86GygeTknSRREtMhvotnjWvwUEhzmxSh0oZhI2fv+iCIvZLBSQB2 Tsc3dpyFVT03jGef1e1EFftSV2LZSPQEDfNScnWoze4kLi6ZlP/gcXG/QJ2ZPRztIOgT i8iz44eObtFLRm5mD4VUJTR1+Bpymx3lnuMr31zVilKwJL9NFmBbsJLnVoEQ/z6Do57n A66A== X-Gm-Message-State: AIVw112naIb6xE3r8BzsRhpKAtJrE1wx5B+j5ZYx3pX+XVw983bRIbYu q1W5yZd2bYc1X/b5PWrivrrWu3t3YA== X-Received: by 10.200.46.184 with SMTP id h53mr6736520qta.96.1499713648364; Mon, 10 Jul 2017 12:07:28 -0700 (PDT) MIME-Version: 1.0 Received: by 10.200.58.129 with HTTP; Mon, 10 Jul 2017 12:07:27 -0700 (PDT) In-Reply-To: <13f2461e-1df9-be60-0fb7-ae784bbaca68@mandelberg.org> References: <13f2461e-1df9-be60-0fb7-ae784bbaca68@mandelberg.org> From: Dhruv Dhody Date: Tue, 11 Jul 2017 00:37:27 +0530 Message-ID: To: David Mandelberg Cc: "iesg@ietf.org" , "secdir@ietf.org" , "draft-ietf-pce-pceps.all@tools.ietf.org" Content-Type: multipart/alternative; boundary="001a113bde284691030553fb4be3" Archived-At: Subject: Re: [secdir] secdir review of draft-ietf-pce-pceps-14 X-BeenThere: secdir@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: Security Area Directorate List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 10 Jul 2017 19:07:33 -0000 --001a113bde284691030553fb4be3 Content-Type: text/plain; charset="UTF-8" Thanks David, for your (re)-review :) On Monday, July 10, 2017, David Mandelberg wrote: > Hi, > > I reviewed the diff between -06 (which I had previously reviewed) and > -14. All of the issues I brought up in my previous review appear to be > resolved, and I saw no new issues. I think this draft is Ready. > > -- > David Eric Mandelberg / dseomn > http://david.mandelberg.org/ > > --001a113bde284691030553fb4be3 Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable Thanks David, for your (re)-review :)=C2=A0

On Monday, J= uly 10, 2017, David Mandelberg <= david@mandelberg.org> wrote:
Hi,
I reviewed the diff between -06 (which I had previously reviewed) and
-14. All of the issues I brought up in my previous review appear to be
resolved, and I saw no new issues. I think this draft is Ready.

--
David Eric Mandelberg / dseomn
http://david.man= delberg.org/

--001a113bde284691030553fb4be3-- From nobody Tue Jul 11 04:25:39 2017 Return-Path: X-Original-To: secdir@ietfa.amsl.com Delivered-To: secdir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 9698813169C; Tue, 11 Jul 2017 04:25:35 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -5.399 X-Spam-Level: X-Spam-Status: No, score=-5.399 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7, RCVD_IN_MSPIKE_H2=-2.8, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id FlRC8AMWeYvR; Tue, 11 Jul 2017 04:25:32 -0700 (PDT) Received: from mx0a-00191d01.pphosted.com (mx0b-00191d01.pphosted.com [67.231.157.136]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id A6675131687; Tue, 11 Jul 2017 04:25:32 -0700 (PDT) Received: from pps.filterd (m0083689.ppops.net [127.0.0.1]) by m0083689.ppops.net-00191d01. (8.16.0.17/8.16.0.17) with SMTP id v6BBPRuM043978; Tue, 11 Jul 2017 07:25:27 -0400 Received: from alpi155.enaf.aldc.att.com (sbcsmtp7.sbc.com [144.160.229.24]) by m0083689.ppops.net-00191d01. with ESMTP id 2bmpw8yk89-1 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT); Tue, 11 Jul 2017 07:25:27 -0400 Received: from enaf.aldc.att.com (localhost [127.0.0.1]) by alpi155.enaf.aldc.att.com (8.14.5/8.14.5) with ESMTP id v6BBPQxc003904; Tue, 11 Jul 2017 07:25:26 -0400 Received: from mlpi408.sfdc.sbc.com (mlpi408.sfdc.sbc.com [130.9.128.240]) by alpi155.enaf.aldc.att.com (8.14.5/8.14.5) with ESMTP id v6BBPNDh003882 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-GCM-SHA384 bits=256 verify=NO); Tue, 11 Jul 2017 07:25:23 -0400 Received: from MISOUT7MSGHUBAA.ITServices.sbc.com (MISOUT7MSGHUBAA.itservices.sbc.com [130.9.129.145]) by mlpi408.sfdc.sbc.com (RSA Interceptor); Tue, 11 Jul 2017 11:25:06 GMT Received: from MISOUT7MSGUSRDE.ITServices.sbc.com ([169.254.5.17]) by MISOUT7MSGHUBAA.ITServices.sbc.com ([130.9.129.145]) with mapi id 14.03.0319.002; Tue, 11 Jul 2017 07:25:06 -0400 From: "BRUNGARD, DEBORAH A" To: "Rakesh Gandhi (rgandhi)" , Vishnu Pavan Beeram , Rifaat Shekh-Yusef , "draft-ietf-teas-gmpls-lsp-fastreroute.all@ietf.org" , "secdir@ietf.org" , The IESG CC: Lou Berger , "EXT-vishnupavan@gmail.com" Thread-Topic: [secdir] secdir review of draft-ietf-teas-gmpls-lsp-fastreroute-09 Thread-Index: AQHS9MsWaGEBYuByQU6NJCOAub4enqJEBLSAgAAMBoCAAyKIgIAHUdaQ Date: Tue, 11 Jul 2017 11:25:05 +0000 Message-ID: References: <233DDE34-9818-4088-A9CE-84180A34D5A4@juniper.net> <5C02CE7F-DEE3-48D0-898C-347CF4CB6595@cisco.com> In-Reply-To: <5C02CE7F-DEE3-48D0-898C-347CF4CB6595@cisco.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [135.70.203.125] Content-Type: multipart/alternative; boundary="_000_F64C10EAA68C8044B33656FA214632C85DF42E24MISOUT7MSGUSRDE_" MIME-Version: 1.0 X-RSA-Inspected: yes X-RSA-Classifications: public X-Proofpoint-Virus-Version: vendor=fsecure engine=2.50.10432:, , definitions=2017-07-11_05:, , signatures=0 X-Proofpoint-Spam-Details: rule=outbound_policy_notspam policy=outbound_policy score=0 priorityscore=1501 malwarescore=0 suspectscore=0 phishscore=0 bulkscore=0 spamscore=0 clxscore=1011 lowpriorityscore=0 impostorscore=0 adultscore=0 classifier=spam adjust=0 reason=mlx scancount=1 engine=8.0.1-1703280000 definitions=main-1707110180 Archived-At: Subject: Re: [secdir] secdir review of draft-ietf-teas-gmpls-lsp-fastreroute-09 X-BeenThere: secdir@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: Security Area Directorate List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 11 Jul 2017 11:25:35 -0000 --_000_F64C10EAA68C8044B33656FA214632C85DF42E24MISOUT7MSGUSRDE_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 SGkgUmFrZXNoLCBhbGwsDQooSSB3YXMgb24gdmFjYXRpb24gbGFzdCB3ZWVrOi0pKQ0KDQpJIGxl YW4gdG93YXJkcyBhIHNvbWV3aGF0IHN0cmljdCBpbnRlcnByZXRhdGlvbiBvZiDigJx1cGRhdGXi gJ0sIG90aGVyd2lzZSBpbXBsZW1lbnRlcnMgbmVlZCB0byBicm93c2UgYWxsIHRoZSB1cGRhdGVz IHRvIHNlZSB3aGF0IGlzIGFwcHJvcHJpYXRlLiBPbiB0aGlzLCBpdCBpcyBtb3JlIHRoYW4gZXh0 ZW5zaW9uLCBpdCBkZWZpbml0ZWx5IGltcHJvdmVzIGFuIGltcGxlbWVudGF0aW9uLCBzbyBpdCBz aG91bGQgYmUgYW4g4oCcdXBkYXRl4oCdLg0KDQpBdXRob3JzIOKAkyB3aGVuIGRvIHRoZSBuZXh0 IHVwZGF0ZSAtIHJld29yZCDigJxUaGlzIGRvY3VtZW50IGV4dGVuZHMgdGhlIG1lY2hhbmlzbSAu LuKAnSB0byDigJxUaGlzIGRvY3VtZW50IHVwZGF0ZXMgdGhlIG1lY2hhbmlzbSAuLuKAnS4NCg0K VGhhbmtzIFJpZmFhdCDigJMgZ3JlYXQgY29tbWVudC0NCkRlYm9yYWgNCg0KDQoNCkZyb206IFJh a2VzaCBHYW5kaGkgKHJnYW5kaGkpIFttYWlsdG86cmdhbmRoaUBjaXNjby5jb21dDQpTZW50OiBU aHVyc2RheSwgSnVseSAwNiwgMjAxNyAxMTozMSBBTQ0KVG86IFZpc2hudSBQYXZhbiBCZWVyYW0g PHZiZWVyYW1AanVuaXBlci5uZXQ+OyBSaWZhYXQgU2hla2gtWXVzZWYgPHJpZmFhdC5pZXRmQGdt YWlsLmNvbT47IGRyYWZ0LWlldGYtdGVhcy1nbXBscy1sc3AtZmFzdHJlcm91dGUuYWxsQGlldGYu b3JnOyBzZWNkaXJAaWV0Zi5vcmc7IFRoZSBJRVNHIDxpZXNnQGlldGYub3JnPg0KQ2M6IEJSVU5H QVJELCBERUJPUkFIIEEgPGRiMzU0NkBhdHQuY29tPjsgTG91IEJlcmdlciA8bGJlcmdlckBsYWJu Lm5ldD47IEVYVC12aXNobnVwYXZhbkBnbWFpbC5jb20gPHZpc2hudXBhdmFuQGdtYWlsLmNvbT4N ClN1YmplY3Q6IFJlOiBbc2VjZGlyXSBzZWNkaXIgcmV2aWV3IG9mIGRyYWZ0LWlldGYtdGVhcy1n bXBscy1sc3AtZmFzdHJlcm91dGUtMDkNCg0KVGhhbmtzIFBhdmFuLg0KDQpIaSBEZWJvcmFoLA0K UGxlYXNlIGxldCB1cyBrbm93IGlmIHlvdSBhcmUgT0sgd2l0aCB0aGUgc3VnZ2VzdGlvbi4NCg0K 4oCcQmVjYXVzZSB0aGUgZG9jdW1lbnQgZXh0ZW5kcyBSRkM0MDkwLCBpdCBzaG91bGQgYWRkICJV cGRhdGVzOiA0MDkwIiBhdCB0aGUgdG9wIG9mIHRoZSBkb2N1bWVudC7igJ0NCg0KVGhhbmtzLA0K UmFrZXNoDQoNCg0KDQpGcm9tOiBWaXNobnUgUGF2YW4gQmVlcmFtIDx2YmVlcmFtQGp1bmlwZXIu bmV0PG1haWx0bzp2YmVlcmFtQGp1bmlwZXIubmV0Pj4NCkRhdGU6IFR1ZXNkYXksIEp1bHkgNCwg MjAxNyBhdCAxMTozOCBBTQ0KVG86ICI9U01UUDpyZ2FuZGhpQGNpc2NvLiBjb20iIDxyZ2FuZGhp QGNpc2NvLmNvbTxtYWlsdG86cmdhbmRoaUBjaXNjby5jb20+PiwgUmlmYWF0IFNoZWtoLVl1c2Vm IDxyaWZhYXQuaWV0ZkBnbWFpbC5jb208bWFpbHRvOnJpZmFhdC5pZXRmQGdtYWlsLmNvbT4+LCAi ZHJhZnQtaWV0Zi10ZWFzLWdtcGxzLWxzcC1mYXN0cmVyb3V0ZS5hbGxAaWV0Zi5vcmc8bWFpbHRv OmRyYWZ0LWlldGYtdGVhcy1nbXBscy1sc3AtZmFzdHJlcm91dGUuYWxsQGlldGYub3JnPiIgPGRy YWZ0LWlldGYtdGVhcy1nbXBscy1sc3AtZmFzdHJlcm91dGUuYWxsQGlldGYub3JnPG1haWx0bzpk cmFmdC1pZXRmLXRlYXMtZ21wbHMtbHNwLWZhc3RyZXJvdXRlLmFsbEBpZXRmLm9yZz4+LCAic2Vj ZGlyQGlldGYub3JnPG1haWx0bzpzZWNkaXJAaWV0Zi5vcmc+IiA8c2VjZGlyQGlldGYub3JnPG1h aWx0bzpzZWNkaXJAaWV0Zi5vcmc+PiwgVGhlIElFU0cgPGllc2dAaWV0Zi5vcmc8bWFpbHRvOmll c2dAaWV0Zi5vcmc+Pg0KQ2M6IERFQk9SQUggQlJVTkdBUkQgPGRiMzU0NkBhdHQuY29tPG1haWx0 bzpkYjM1NDZAYXR0LmNvbT4+LCBMb3UgQmVyZ2VyIDxsYmVyZ2VyQGxhYm4ubmV0PG1haWx0bzps YmVyZ2VyQGxhYm4ubmV0Pj4sICJFWFQtdmlzaG51cGF2YW5AZ21haWwuY29tPG1haWx0bzpFWFQt dmlzaG51cGF2YW5AZ21haWwuY29tPiIgPHZpc2hudXBhdmFuQGdtYWlsLmNvbTxtYWlsdG86dmlz aG51cGF2YW5AZ21haWwuY29tPj4NClN1YmplY3Q6IFJlOiBbc2VjZGlyXSBzZWNkaXIgcmV2aWV3 IG9mIGRyYWZ0LWlldGYtdGVhcy1nbXBscy1sc3AtZmFzdHJlcm91dGUtMDkNCg0KUmFrZXNoLCBI aSENCg0KVGhpcyBpcyBhIHZhbGlkIGNvbW1lbnQuIDxHTVBMUy1MU1AtRlJSPiBkb2VzbuKAmXQg bW9kaWZ5IGFueSBvZiB0aGUgZXhpc3RpbmcgcHJvY2VkdXJlcyBkZWZpbmVkIGluIFJGQzQwOTAs IGJ1dCBpdCBkb2VzIHN1cHBsZW1lbnQgaXQuIEFzIHBlciBSRkMyMjIzLCB0aGlzIGlzIHN1ZmZp Y2llbnQgZ3JvdW5kcyB0byBzZXQgdGhlIOKAnFVwZGF0ZXPigJ0gZmllbGQuDQoNCkNvdXJ0ZXN5 IFJGQzIyMjM6DQoNCiAgICAgIFRvIGJlIHVzZWQgYXMgYSByZWZlcmVuY2UgZnJvbSBhIG5ldyBp dGVtIHRoYXQgY2Fubm90IGJlIHVzZWQNCg0KICAgICAgYWxvbmUgKGkuZS4sIG9uZSB0aGF0IHN1 cHBsZW1lbnRzIGEgcHJldmlvdXMgZG9jdW1lbnQpLCB0byByZWZlcg0KDQogICAgICB0byB0aGUg cHJldmlvdXMgZG9jdW1lbnQuICBUaGUgbmV3ZXIgcHVibGljYXRpb24gaXMgYSBwYXJ0IHRoYXQN Cg0KICAgICAgd2lsbCBzdXBwbGVtZW50IG9yIGJlIGFkZGVkIG9uIHRvIHRoZSBleGlzdGluZyBk b2N1bWVudDsgZS5nLiwgYW4NCg0KICAgICAgYWRkZW5kdW0sIG9yIHNlcGFyYXRlLCBleHRyYSBp bmZvcm1hdGlvbiB0aGF0IGlzIHRvIGJlIGFkZGVkIHRvDQoNCiAgICAgIHRoZSBvcmlnaW5hbCBk b2N1bWVudC4NCkBEZWJvcmFoIOKAlCBBcmUgeW91IG9rIHdpdGggdGhpcz8NClJlZ2FyZHMsDQot UGF2YW4NCg0KRnJvbTogIlJha2VzaCBHYW5kaGkgKHJnYW5kaGkpIiA8cmdhbmRoaUBjaXNjby5j b208bWFpbHRvOnJnYW5kaGlAY2lzY28uY29tPj4NCkRhdGU6IFR1ZXNkYXksIEp1bHkgNCwgMjAx NyBhdCAxMDo1NSBBTQ0KVG86IFJpZmFhdCBTaGVraC1ZdXNlZiA8cmlmYWF0LmlldGZAZ21haWwu Y29tPG1haWx0bzpyaWZhYXQuaWV0ZkBnbWFpbC5jb20+PiwgImRyYWZ0LWlldGYtdGVhcy1nbXBs cy1sc3AtZmFzdHJlcm91dGUuYWxsQGlldGYub3JnPG1haWx0bzpkcmFmdC1pZXRmLXRlYXMtZ21w bHMtbHNwLWZhc3RyZXJvdXRlLmFsbEBpZXRmLm9yZz4iIDxkcmFmdC1pZXRmLXRlYXMtZ21wbHMt bHNwLWZhc3RyZXJvdXRlLmFsbEBpZXRmLm9yZzxtYWlsdG86ZHJhZnQtaWV0Zi10ZWFzLWdtcGxz LWxzcC1mYXN0cmVyb3V0ZS5hbGxAaWV0Zi5vcmc+PiwgInNlY2RpckBpZXRmLm9yZzxtYWlsdG86 c2VjZGlyQGlldGYub3JnPiIgPHNlY2RpckBpZXRmLm9yZzxtYWlsdG86c2VjZGlyQGlldGYub3Jn Pj4sIFRoZSBJRVNHIDxpZXNnQGlldGYub3JnPG1haWx0bzppZXNnQGlldGYub3JnPj4NCkNjOiBE RUJPUkFIIEJSVU5HQVJEIDxkYjM1NDZAYXR0LmNvbTxtYWlsdG86ZGIzNTQ2QGF0dC5jb20+Piwg TG91IEJlcmdlciA8bGJlcmdlckBsYWJuLm5ldDxtYWlsdG86bGJlcmdlckBsYWJuLm5ldD4+LCAi RVhULXZpc2hudXBhdmFuQGdtYWlsLmNvbTxtYWlsdG86RVhULXZpc2hudXBhdmFuQGdtYWlsLmNv bT4iIDx2aXNobnVwYXZhbkBnbWFpbC5jb208bWFpbHRvOnZpc2hudXBhdmFuQGdtYWlsLmNvbT4+ DQpTdWJqZWN0OiBSZTogW3NlY2Rpcl0gc2VjZGlyIHJldmlldyBvZiBkcmFmdC1pZXRmLXRlYXMt Z21wbHMtbHNwLWZhc3RyZXJvdXRlLTA5DQpSZXNlbnQtRnJvbTogPGFsaWFzLWJvdW5jZXNAaWV0 Zi5vcmc8bWFpbHRvOmFsaWFzLWJvdW5jZXNAaWV0Zi5vcmc+Pg0KUmVzZW50LVRvOiA8bXRhaWxs b25AY2lzY28uY29tPG1haWx0bzptdGFpbGxvbkBjaXNjby5jb20+PiwgPHRzYWFkQGNpc2NvLmNv bTxtYWlsdG86dHNhYWRAY2lzY28uY29tPj4sIDxyZ2FuZGhpQGNpc2NvLmNvbTxtYWlsdG86cmdh bmRoaUBjaXNjby5jb20+PiwgWmFmYXIgQWxpIDx6YWxpQGNpc2NvLmNvbTxtYWlsdG86emFsaUBj aXNjby5jb20+PiwgPG1hbmF2LmJoYXRpYUBub2tpYS5jb208bWFpbHRvOm1hbmF2LmJoYXRpYUBu b2tpYS5jb20+PiwgPG1oYXJ0bGV5QGNpc2NvLmNvbTxtYWlsdG86bWhhcnRsZXlAY2lzY28uY29t Pj4sIExvdSBCZXJnZXIgPGxiZXJnZXJAbGFibi5uZXQ8bWFpbHRvOmxiZXJnZXJAbGFibi5uZXQ+ PiwgVmlzaG51IFBhdmFuIEJlZXJhbSA8dmJlZXJhbUBqdW5pcGVyLm5ldDxtYWlsdG86dmJlZXJh bUBqdW5pcGVyLm5ldD4+LCA8YXJldGFuYUBjaXNjby5jb208bWFpbHRvOmFyZXRhbmFAY2lzY28u Y29tPj4sIDxkYjM1NDZAYXR0LmNvbTxtYWlsdG86ZGIzNTQ2QGF0dC5jb20+PiwgPGFrYXRsYXNA Z21haWwuY29tPG1haWx0bzpha2F0bGFzQGdtYWlsLmNvbT4+DQpSZXNlbnQtRGF0ZTogVHVlc2Rh eSwgSnVseSA0LCAyMDE3IGF0IDEwOjU1IEFNDQoNClRoYW5rcyBSaWZhYXQgZm9yIHRoZSByZXZp ZXcgb2YgdGhpcyBkb2N1bWVudC4NCg0KSGkgRGVib3JhaCwgTG91LCBQYXZhbiwNCg0KQW55IHRo b3VnaHRzIG9uIHRoZSBmb2xsb3dpbmcgc3VnZ2VzdGlvbj8NCg0K4oCcQmVjYXVzZSB0aGUgZG9j dW1lbnQgZXh0ZW5kcyBSRkM0MDkwLCBpdCBzaG91bGQgYWRkICJVcGRhdGVzOiA0MDkwIiBhdCB0 aGUgdG9wIG9mIHRoZSBkb2N1bWVudC7igJ0NCg0KVGhhbmtzLA0KUmFrZXNoDQoNCg0KRnJvbTog UmlmYWF0IFNoZWtoLVl1c2VmIDxyaWZhYXQuaWV0ZkBnbWFpbC5jb208bWFpbHRvOnJpZmFhdC5p ZXRmQGdtYWlsLmNvbT4+DQpEYXRlOiBUdWVzZGF5LCBKdWx5IDQsIDIwMTcgYXQgOTozMiBBTQ0K VG86ICJkcmFmdC1pZXRmLXRlYXMtZ21wbHMtbHNwLWZhc3RyZXJvdXRlLmFsbEBpZXRmLm9yZzxt YWlsdG86ZHJhZnQtaWV0Zi10ZWFzLWdtcGxzLWxzcC1mYXN0cmVyb3V0ZS5hbGxAaWV0Zi5vcmc+ IiA8ZHJhZnQtaWV0Zi10ZWFzLWdtcGxzLWxzcC1mYXN0cmVyb3V0ZS5hbGxAaWV0Zi5vcmc8bWFp bHRvOmRyYWZ0LWlldGYtdGVhcy1nbXBscy1sc3AtZmFzdHJlcm91dGUuYWxsQGlldGYub3JnPj4s ICJzZWNkaXJAaWV0Zi5vcmc8bWFpbHRvOnNlY2RpckBpZXRmLm9yZz4iIDxzZWNkaXJAaWV0Zi5v cmc8bWFpbHRvOnNlY2RpckBpZXRmLm9yZz4+LCBUaGUgSUVTRyA8aWVzZ0BpZXRmLm9yZzxtYWls dG86aWVzZ0BpZXRmLm9yZz4+DQpTdWJqZWN0OiBbc2VjZGlyXSBzZWNkaXIgcmV2aWV3IG9mIGRy YWZ0LWlldGYtdGVhcy1nbXBscy1sc3AtZmFzdHJlcm91dGUtMDkNClJlc2VudC1Gcm9tOiA8YWxp YXMtYm91bmNlc0BpZXRmLm9yZzxtYWlsdG86YWxpYXMtYm91bmNlc0BpZXRmLm9yZz4+DQpSZXNl bnQtVG86ICI9U01UUDptdGFpbGxvbkBjaXNjby4gY29tIiA8bXRhaWxsb25AY2lzY28uY29tPG1h aWx0bzptdGFpbGxvbkBjaXNjby5jb20+PiwgPHRzYWFkQGNpc2NvLmNvbTxtYWlsdG86dHNhYWRA Y2lzY28uY29tPj4sICI9U01UUDpyZ2FuZGhpQGNpc2NvLiBjb20iIDxyZ2FuZGhpQGNpc2NvLmNv bTxtYWlsdG86cmdhbmRoaUBjaXNjby5jb20+PiwgWmFmYXIgQWxpIDx6YWxpQGNpc2NvLmNvbTxt YWlsdG86emFsaUBjaXNjby5jb20+PiwgPG1hbmF2LmJoYXRpYUBub2tpYS5jb208bWFpbHRvOm1h bmF2LmJoYXRpYUBub2tpYS5jb20+PiwgPG1oYXJ0bGV5QGNpc2NvLmNvbTxtYWlsdG86bWhhcnRs ZXlAY2lzY28uY29tPj4sIExvdSBCZXJnZXIgPGxiZXJnZXJAbGFibi5uZXQ8bWFpbHRvOmxiZXJn ZXJAbGFibi5uZXQ+PiwgPHZiZWVyYW1AanVuaXBlci5uZXQ8bWFpbHRvOnZiZWVyYW1AanVuaXBl ci5uZXQ+PiwgPGFyZXRhbmFAY2lzY28uY29tPG1haWx0bzphcmV0YW5hQGNpc2NvLmNvbT4+LCBE RUJPUkFIIEJSVU5HQVJEIDxkYjM1NDZAYXR0LmNvbTxtYWlsdG86ZGIzNTQ2QGF0dC5jb20+Piwg PGFrYXRsYXNAZ21haWwuY29tPG1haWx0bzpha2F0bGFzQGdtYWlsLmNvbT4+DQpSZXNlbnQtRGF0 ZTogVHVlc2RheSwgSnVseSA0LCAyMDE3IGF0IDk6NDAgQU0NCg0KSSBoYXZlIHJldmlld2VkIHRo aXMgZG9jdW1lbnQgYXMgcGFydCBvZiB0aGUgc2VjdXJpdHkgZGlyZWN0b3JhdGUncw0Kb25nb2lu ZyBlZmZvcnQgdG8gcmV2aWV3IGFsbCBJRVRGIGRvY3VtZW50cyBiZWluZyBwcm9jZXNzZWQgYnkg dGhlDQpJRVNHLiAgVGhlc2UgY29tbWVudHMgd2VyZSB3cml0dGVuIHByaW1hcmlseSBmb3IgdGhl IGJlbmVmaXQgb2YgdGhlDQpzZWN1cml0eSBhcmVhIGRpcmVjdG9ycy4gIERvY3VtZW50IGVkaXRv cnMgYW5kIFdHIGNoYWlycyBzaG91bGQgdHJlYXQNCnRoZXNlIGNvbW1lbnRzIGp1c3QgbGlrZSBh bnkgb3RoZXIgbGFzdCBjYWxsIGNvbW1lbnRzLg0KDQpTdW1tYXJ5OiBSZWFkeSB3aXRoIE5pdHMN Cg0KDQpJIGRpZCBub3QgaGF2ZSBlbm91Z2ggYmFja2dyb3VuZCBvbiBNTFBTIGFuZCBHTVBMUyBh bmQgdGhlaXIgcmVsYXRlZCBSRkNzLA0Kc28gSSBoYWQgdG8gZG8gc29tZSByZWFkaW5nIHRvIGdl dCBzb21lIGZhbWlsaWFyaXR5IHdpdGggdGhpcyBzdWJqZWN0IHRvIGJlDQphYmxlIHRvIHByb3Zp ZGUgc29tZSByZWFzb25hYmxlIHJldmlldyBvZiB0aGlzIGRvY3VtZW50Lg0KDQpUaGlzIGRvY3Vt ZW50IGJ1aWxkcyBvbiBhbiBleGlzdGluZyBtZWNoYW5pc20sICJGYXN0IFJlcm91dGUgRXh0ZW5z aW9ucyB0bw0KUlNWUC1URSBmb3IgTFNQIFR1bm5lbHMiIGRlZmluZWQgaW4gUkZDNDA5MCwgd2hp Y2ggZGVmaW5lcyBhIG1lY2hhbmlzbSB0bw0KZXN0YWJsaXNoIGEgYmFja3VwIHR1bm5lbHMgZm9y IGxvY2FsIExTUCB0dW5uZWxzLiBPbmUgbGltaXRhdGlvbiBvZiB0aGUNCmV4aXN0aW5nIG1lY2hh bmlzbSBpcyB0aGF0IGluIHNvbWUgc2l0dWF0aW9ucyBpdCBtaWdodCBhc3NpZ24gZGlmZmVyZW50 DQp1bmktZGlyZWN0aW9uYWwgYnlwYXNzIHR1bm5lbHMgZm9yIHRoZSBmb3J3YXJkIGFuZCByZXZl cnNlIGRpcmVjdGlvbnMuDQoNClRoaXMgZG9jdW1lbnQgZXh0ZW5kcyB0aGUgbWVjaGFuaXNtIGRl ZmluZWQgaW4gUkZDNDA5MCwgYnkgYWRkaW5nIGEgbmV3DQpCWVBBU1NfQVNTSUdOTUVOVCBzdWJv YmplY3QgdG8gdGhlIGV4aXN0aW5nIFJFQ09SRF9ST1VURSBPYmplY3QgKFJSTykgdXNlZA0KaW4g UEFUSCBhbmQgUkVTViByZXF1ZXN0cywgdG8gYWxsb3cgdGhlIGVzdGFibGlzaG1lbnQgb2YgYSBi aS1kaXJlY3Rpb25hbA0KYnlwYXNzIHR1bm5lbC4NCg0KVGhlIHNlY3VyaXR5IG9mIHRoZSBleGlz dGluZyBtZWNoYW5pc20gc3RpbGwgYXBwbGllcyB3aXRoIHRoZSBuZXcgbWVjaGFuaXNtLA0KYW5k IHRoZSBzZWN1cml0eSBzZWN0aW9uIGRpc2N1c3NlcyB0aGUgaW1wbGljYXRpb25zIG9mIHRoZSBu ZXcgc3Vib2JqZWN0IGFuZA0KdGhlIG5ldyBlcnJvciBhc3NvY2lhdGVkIHdpdGggdGhhdCwgd2hp Y2ggc2VlbXMgcmVhc29uYWJsZS4NCg0KVGhlIGRvY3VtZW50IGFsc28gcG9pbnRzIHRvIGFuIE1Q TFMvR01QTFMgU2VjdXJpdHkgRnJhbWV3b3JrIChSRkM1OTIwKQ0KZG9jdW1lbnQgdGhhdCBoYXMg YW4gZXh0ZW5zaXZlIGRpc2N1c3Npb24gb2YgdGhlIHNlY3VyaXR5IG9mIE1QTFMvR01QTFMNCm5l dHdvcmsgaW4gZ2VuZXJhbCB0aGF0IGFsc28gYXBwbGllcyB0byB0aGlzIGRvY3VtZW50Lg0KDQoN Ck5pdHMNCg0KQmVjYXVzZSB0aGUgZG9jdW1lbnQgZXh0ZW5kcyBSRkM0MDkwLCBpdCBzaG91bGQg YWRkICJVcGRhdGVzOiA0MDkwIiBhdCB0aGUNCnRvcCBvZiB0aGUgZG9jdW1lbnQuDQoNClJlZ2Fy ZHMsDQogUmlmYWF0DQoNCg== --_000_F64C10EAA68C8044B33656FA214632C85DF42E24MISOUT7MSGUSRDE_ Content-Type: text/html; charset="utf-8" Content-Transfer-Encoding: base64 PGh0bWwgeG1sbnM6dj0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTp2bWwiIHhtbG5zOm89InVy bjpzY2hlbWFzLW1pY3Jvc29mdC1jb206b2ZmaWNlOm9mZmljZSIgeG1sbnM6dz0idXJuOnNjaGVt YXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6d29yZCIgeG1sbnM6bT0iaHR0cDovL3NjaGVtYXMubWlj cm9zb2Z0LmNvbS9vZmZpY2UvMjAwNC8xMi9vbW1sIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcv VFIvUkVDLWh0bWw0MCI+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIg Y29udGVudD0idGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjxtZXRhIG5hbWU9IkdlbmVyYXRv ciIgY29udGVudD0iTWljcm9zb2Z0IFdvcmQgMTUgKGZpbHRlcmVkIG1lZGl1bSkiPg0KPHN0eWxl PjwhLS0NCi8qIEZvbnQgRGVmaW5pdGlvbnMgKi8NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6 Q291cmllcjsNCglwYW5vc2UtMToyIDcgNCA5IDIgMiA1IDIgNCA0O30NCkBmb250LWZhY2UNCgl7 Zm9udC1mYW1pbHk6IkNhbWJyaWEgTWF0aCI7DQoJcGFub3NlLTE6MiA0IDUgMyA1IDQgNiAzIDIg NDt9DQpAZm9udC1mYWNlDQoJe2ZvbnQtZmFtaWx5OkNhbGlicmk7DQoJcGFub3NlLTE6MiAxNSA1 IDIgMiAyIDQgMyAyIDQ7fQ0KLyogU3R5bGUgRGVmaW5pdGlvbnMgKi8NCnAuTXNvTm9ybWFsLCBs aS5Nc29Ob3JtYWwsIGRpdi5Nc29Ob3JtYWwNCgl7bWFyZ2luOjBpbjsNCgltYXJnaW4tYm90dG9t Oi4wMDAxcHQ7DQoJZm9udC1zaXplOjEyLjBwdDsNCglmb250LWZhbWlseToiVGltZXMgTmV3IFJv bWFuIixzZXJpZjt9DQphOmxpbmssIHNwYW4uTXNvSHlwZXJsaW5rDQoJe21zby1zdHlsZS1wcmlv cml0eTo5OTsNCgljb2xvcjojMDU2M0MxOw0KCXRleHQtZGVjb3JhdGlvbjp1bmRlcmxpbmU7fQ0K YTp2aXNpdGVkLCBzcGFuLk1zb0h5cGVybGlua0ZvbGxvd2VkDQoJe21zby1zdHlsZS1wcmlvcml0 eTo5OTsNCgljb2xvcjojOTU0RjcyOw0KCXRleHQtZGVjb3JhdGlvbjp1bmRlcmxpbmU7fQ0KcHJl DQoJe21zby1zdHlsZS1wcmlvcml0eTo5OTsNCgltc28tc3R5bGUtbGluazoiSFRNTCBQcmVmb3Jt YXR0ZWQgQ2hhciI7DQoJbWFyZ2luOjBpbjsNCgltYXJnaW4tYm90dG9tOi4wMDAxcHQ7DQoJZm9u dC1zaXplOjEwLjBwdDsNCglmb250LWZhbWlseToiQ291cmllciBOZXciO30NCnNwYW4uSFRNTFBy ZWZvcm1hdHRlZENoYXINCgl7bXNvLXN0eWxlLW5hbWU6IkhUTUwgUHJlZm9ybWF0dGVkIENoYXIi Ow0KCW1zby1zdHlsZS1wcmlvcml0eTo5OTsNCgltc28tc3R5bGUtbGluazoiSFRNTCBQcmVmb3Jt YXR0ZWQiOw0KCWZvbnQtZmFtaWx5OkNvdXJpZXI7fQ0Kc3Bhbi5FbWFpbFN0eWxlMTkNCgl7bXNv LXN0eWxlLXR5cGU6cGVyc29uYWw7DQoJZm9udC1mYW1pbHk6IkNhbGlicmkiLHNhbnMtc2VyaWY7 DQoJY29sb3I6d2luZG93dGV4dDt9DQpzcGFuLkVtYWlsU3R5bGUyMA0KCXttc28tc3R5bGUtdHlw ZTpwZXJzb25hbDsNCglmb250LWZhbWlseToiQ2FsaWJyaSIsc2Fucy1zZXJpZjsNCgljb2xvcjp3 aW5kb3d0ZXh0O30NCnNwYW4uRW1haWxTdHlsZTIxDQoJe21zby1zdHlsZS10eXBlOnBlcnNvbmFs LXJlcGx5Ow0KCWZvbnQtZmFtaWx5OiJDYWxpYnJpIixzYW5zLXNlcmlmOw0KCWNvbG9yOiMxRjQ5 N0Q7fQ0KLk1zb0NocERlZmF1bHQNCgl7bXNvLXN0eWxlLXR5cGU6ZXhwb3J0LW9ubHk7DQoJZm9u dC1zaXplOjEwLjBwdDt9DQpAcGFnZSBXb3JkU2VjdGlvbjENCgl7c2l6ZTo4LjVpbiAxMS4waW47 DQoJbWFyZ2luOjEuMGluIDEuMGluIDEuMGluIDEuMGluO30NCmRpdi5Xb3JkU2VjdGlvbjENCgl7 cGFnZTpXb3JkU2VjdGlvbjE7fQ0KLS0+PC9zdHlsZT48IS0tW2lmIGd0ZSBtc28gOV0+PHhtbD4N CjxvOnNoYXBlZGVmYXVsdHMgdjpleHQ9ImVkaXQiIHNwaWRtYXg9IjEwMjYiIC8+DQo8L3htbD48 IVtlbmRpZl0tLT48IS0tW2lmIGd0ZSBtc28gOV0+PHhtbD4NCjxvOnNoYXBlbGF5b3V0IHY6ZXh0 PSJlZGl0Ij4NCjxvOmlkbWFwIHY6ZXh0PSJlZGl0IiBkYXRhPSIxIiAvPg0KPC9vOnNoYXBlbGF5 b3V0PjwveG1sPjwhW2VuZGlmXS0tPg0KPC9oZWFkPg0KPGJvZHkgYmdjb2xvcj0id2hpdGUiIGxh bmc9IkVOLVVTIiBsaW5rPSIjMDU2M0MxIiB2bGluaz0iIzk1NEY3MiI+DQo8ZGl2IGNsYXNzPSJX b3JkU2VjdGlvbjEiPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6 ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlmO2NvbG9y OiMxRjQ5N0QiPkhpIFJha2VzaCwgYWxsLDxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNz PSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZx dW90O0NhbGlicmkmcXVvdDssc2Fucy1zZXJpZjtjb2xvcjojMUY0OTdEIj4oSSB3YXMgb24gdmFj YXRpb24gbGFzdCB3ZWVrOi0pKTxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29O b3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0Nh bGlicmkmcXVvdDssc2Fucy1zZXJpZjtjb2xvcjojMUY0OTdEIj48bzpwPiZuYnNwOzwvbzpwPjwv c3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEx LjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWY7Y29sb3I6IzFG NDk3RCI+SSBsZWFuIHRvd2FyZHMgYSBzb21ld2hhdCBzdHJpY3QgaW50ZXJwcmV0YXRpb24gb2Yg 4oCcdXBkYXRl4oCdLCBvdGhlcndpc2UgaW1wbGVtZW50ZXJzIG5lZWQgdG8gYnJvd3NlIGFsbCB0 aGUgdXBkYXRlcyB0byBzZWUgd2hhdCBpcyBhcHByb3ByaWF0ZS4gT24gdGhpcywgaXQgaXMNCiBt b3JlIHRoYW4gZXh0ZW5zaW9uLCBpdCBkZWZpbml0ZWx5IGltcHJvdmVzIGFuIGltcGxlbWVudGF0 aW9uLCBzbyBpdCBzaG91bGQgYmUgYW4g4oCcdXBkYXRl4oCdLjxvOnA+PC9vOnA+PC9zcGFuPjwv cD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2Zv bnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssc2Fucy1zZXJpZjtjb2xvcjojMUY0OTdEIj48 bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBz dHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LHNh bnMtc2VyaWY7Y29sb3I6IzFGNDk3RCI+QXV0aG9ycyDigJMgd2hlbiBkbyB0aGUgbmV4dCB1cGRh dGUgLSByZXdvcmQg4oCcVGhpcyBkb2N1bWVudCBleHRlbmRzIHRoZSBtZWNoYW5pc20gLi7igJ0g dG8g4oCcVGhpcyBkb2N1bWVudCB1cGRhdGVzIHRoZSBtZWNoYW5pc20gLi7igJ0uPG86cD48L286 cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6 ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlmO2NvbG9y OiMxRjQ5N0QiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3Jt YWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGli cmkmcXVvdDssc2Fucy1zZXJpZjtjb2xvcjojMUY0OTdEIj5UaGFua3MgUmlmYWF0IOKAkyBncmVh dCBjb21tZW50LTxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxz cGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVv dDssc2Fucy1zZXJpZjtjb2xvcjojMUY0OTdEIj5EZWJvcmFoPG86cD48L286cD48L3NwYW4+PC9w Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9u dC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlmO2NvbG9yOiMxRjQ5N0QiPjxv OnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0 eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssc2Fu cy1zZXJpZjtjb2xvcjojMUY0OTdEIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBj bGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWls eTomcXVvdDtDYWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWY7Y29sb3I6IzFGNDk3RCI+PG86cD4mbmJz cDs8L286cD48L3NwYW4+PC9wPg0KPGRpdiBzdHlsZT0iYm9yZGVyOm5vbmU7Ym9yZGVyLWxlZnQ6 c29saWQgYmx1ZSAxLjVwdDtwYWRkaW5nOjBpbiAwaW4gMGluIDQuMHB0Ij4NCjxkaXY+DQo8ZGl2 IHN0eWxlPSJib3JkZXI6bm9uZTtib3JkZXItdG9wOnNvbGlkICNFMUUxRTEgMS4wcHQ7cGFkZGlu ZzozLjBwdCAwaW4gMGluIDBpbiI+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48Yj48c3BhbiBzdHls ZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LHNhbnMt c2VyaWYiPkZyb206PC9zcGFuPjwvYj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250 LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWYiPiBSYWtlc2ggR2FuZGhpIChy Z2FuZGhpKSBbbWFpbHRvOnJnYW5kaGlAY2lzY28uY29tXQ0KPGJyPg0KPGI+U2VudDo8L2I+IFRo dXJzZGF5LCBKdWx5IDA2LCAyMDE3IDExOjMxIEFNPGJyPg0KPGI+VG86PC9iPiBWaXNobnUgUGF2 YW4gQmVlcmFtICZsdDt2YmVlcmFtQGp1bmlwZXIubmV0Jmd0OzsgUmlmYWF0IFNoZWtoLVl1c2Vm ICZsdDtyaWZhYXQuaWV0ZkBnbWFpbC5jb20mZ3Q7OyBkcmFmdC1pZXRmLXRlYXMtZ21wbHMtbHNw LWZhc3RyZXJvdXRlLmFsbEBpZXRmLm9yZzsgc2VjZGlyQGlldGYub3JnOyBUaGUgSUVTRyAmbHQ7 aWVzZ0BpZXRmLm9yZyZndDs8YnI+DQo8Yj5DYzo8L2I+IEJSVU5HQVJELCBERUJPUkFIIEEgJmx0 O2RiMzU0NkBhdHQuY29tJmd0OzsgTG91IEJlcmdlciAmbHQ7bGJlcmdlckBsYWJuLm5ldCZndDs7 IEVYVC12aXNobnVwYXZhbkBnbWFpbC5jb20gJmx0O3Zpc2hudXBhdmFuQGdtYWlsLmNvbSZndDs8 YnI+DQo8Yj5TdWJqZWN0OjwvYj4gUmU6IFtzZWNkaXJdIHNlY2RpciByZXZpZXcgb2YgZHJhZnQt aWV0Zi10ZWFzLWdtcGxzLWxzcC1mYXN0cmVyb3V0ZS0wOTxvOnA+PC9vOnA+PC9zcGFuPjwvcD4N CjwvZGl2Pg0KPC9kaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwv cD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2Zv bnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssc2Fucy1zZXJpZiI+VGhhbmtzIFBhdmFuLjxv OnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJm b250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssc2Fucy1zZXJp ZiI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNw YW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90 OyxzYW5zLXNlcmlmIj5IaSBEZWJvcmFoLDxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNz PSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZx dW90O0NhbGlicmkmcXVvdDssc2Fucy1zZXJpZiI+UGxlYXNlIGxldCB1cyBrbm93IGlmIHlvdSBh cmUgT0sgd2l0aCB0aGUgc3VnZ2VzdGlvbi48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTom cXVvdDtDYWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWYiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwv cD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2Zv bnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssc2Fucy1zZXJpZiI+4oCcQmVjYXVzZSB0aGUg ZG9jdW1lbnQgZXh0ZW5kcyBSRkM0MDkwLCBpdCBzaG91bGQgYWRkICZxdW90O1VwZGF0ZXM6IDQw OTAmcXVvdDsgYXQgdGhlIHRvcCBvZiB0aGUgZG9jdW1lbnQu4oCdPC9zcGFuPjxzcGFuIHN0eWxl PSJmb250LXNpemU6MTEuMHB0Ij48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtD YWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWYiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxw IGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFt aWx5OiZxdW90O0NhbGlicmkmcXVvdDssc2Fucy1zZXJpZiI+VGhhbmtzLDxvOnA+PC9vOnA+PC9z cGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEu MHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssc2Fucy1zZXJpZiI+UmFrZXNoPG86 cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZv bnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlm Ij48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3Bh biBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7 LHNhbnMtc2VyaWYiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29O b3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0Nh bGlicmkmcXVvdDssc2Fucy1zZXJpZiI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPGRp diBzdHlsZT0iYm9yZGVyOm5vbmU7Ym9yZGVyLXRvcDpzb2xpZCAjQjVDNERGIDEuMHB0O3BhZGRp bmc6My4wcHQgMGluIDBpbiAwaW4iPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PGI+PHNwYW4gc3R5 bGU9ImZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssc2Fucy1zZXJpZjtjb2xvcjpibGFj ayI+RnJvbToNCjwvc3Bhbj48L2I+PHNwYW4gc3R5bGU9ImZvbnQtZmFtaWx5OiZxdW90O0NhbGli cmkmcXVvdDssc2Fucy1zZXJpZjtjb2xvcjpibGFjayI+VmlzaG51IFBhdmFuIEJlZXJhbSAmbHQ7 PGEgaHJlZj0ibWFpbHRvOnZiZWVyYW1AanVuaXBlci5uZXQiPnZiZWVyYW1AanVuaXBlci5uZXQ8 L2E+Jmd0Ozxicj4NCjxiPkRhdGU6IDwvYj5UdWVzZGF5LCBKdWx5IDQsIDIwMTcgYXQgMTE6Mzgg QU08YnI+DQo8Yj5UbzogPC9iPiZxdW90Oz1TTVRQOnJnYW5kaGlAY2lzY28uIGNvbSZxdW90OyAm bHQ7PGEgaHJlZj0ibWFpbHRvOnJnYW5kaGlAY2lzY28uY29tIj5yZ2FuZGhpQGNpc2NvLmNvbTwv YT4mZ3Q7LCBSaWZhYXQgU2hla2gtWXVzZWYgJmx0OzxhIGhyZWY9Im1haWx0bzpyaWZhYXQuaWV0 ZkBnbWFpbC5jb20iPnJpZmFhdC5pZXRmQGdtYWlsLmNvbTwvYT4mZ3Q7LCAmcXVvdDs8YSBocmVm PSJtYWlsdG86ZHJhZnQtaWV0Zi10ZWFzLWdtcGxzLWxzcC1mYXN0cmVyb3V0ZS5hbGxAaWV0Zi5v cmciPmRyYWZ0LWlldGYtdGVhcy1nbXBscy1sc3AtZmFzdHJlcm91dGUuYWxsQGlldGYub3JnPC9h PiZxdW90Ow0KICZsdDs8YSBocmVmPSJtYWlsdG86ZHJhZnQtaWV0Zi10ZWFzLWdtcGxzLWxzcC1m YXN0cmVyb3V0ZS5hbGxAaWV0Zi5vcmciPmRyYWZ0LWlldGYtdGVhcy1nbXBscy1sc3AtZmFzdHJl cm91dGUuYWxsQGlldGYub3JnPC9hPiZndDssICZxdW90OzxhIGhyZWY9Im1haWx0bzpzZWNkaXJA aWV0Zi5vcmciPnNlY2RpckBpZXRmLm9yZzwvYT4mcXVvdDsgJmx0OzxhIGhyZWY9Im1haWx0bzpz ZWNkaXJAaWV0Zi5vcmciPnNlY2RpckBpZXRmLm9yZzwvYT4mZ3Q7LCBUaGUgSUVTRyAmbHQ7PGEg aHJlZj0ibWFpbHRvOmllc2dAaWV0Zi5vcmciPmllc2dAaWV0Zi5vcmc8L2E+Jmd0Ozxicj4NCjxi PkNjOiA8L2I+REVCT1JBSCBCUlVOR0FSRCAmbHQ7PGEgaHJlZj0ibWFpbHRvOmRiMzU0NkBhdHQu Y29tIj5kYjM1NDZAYXR0LmNvbTwvYT4mZ3Q7LCBMb3UgQmVyZ2VyICZsdDs8YSBocmVmPSJtYWls dG86bGJlcmdlckBsYWJuLm5ldCI+bGJlcmdlckBsYWJuLm5ldDwvYT4mZ3Q7LCAmcXVvdDs8YSBo cmVmPSJtYWlsdG86RVhULXZpc2hudXBhdmFuQGdtYWlsLmNvbSI+RVhULXZpc2hudXBhdmFuQGdt YWlsLmNvbTwvYT4mcXVvdDsgJmx0OzxhIGhyZWY9Im1haWx0bzp2aXNobnVwYXZhbkBnbWFpbC5j b20iPnZpc2hudXBhdmFuQGdtYWlsLmNvbTwvYT4mZ3Q7PGJyPg0KPGI+U3ViamVjdDogPC9iPlJl OiBbc2VjZGlyXSBzZWNkaXIgcmV2aWV3IG9mIGRyYWZ0LWlldGYtdGVhcy1nbXBscy1sc3AtZmFz dHJlcm91dGUtMDk8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxkaXY+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5SYWtlc2gsIEhpITxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+ DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8L2Rp dj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5UaGlzIGlzIGEgdmFsaWQgY29tbWVudC4g Jmx0O0dNUExTLUxTUC1GUlImZ3Q7IGRvZXNu4oCZdCBtb2RpZnkgYW55IG9mIHRoZSBleGlzdGlu ZyBwcm9jZWR1cmVzIGRlZmluZWQgaW4gUkZDNDA5MCwgYnV0IGl0IGRvZXMgc3VwcGxlbWVudCBp dC4gQXMgcGVyIFJGQzIyMjMsIHRoaXMgaXMgc3VmZmljaWVudCBncm91bmRzIHRvIHNldCB0aGUg 4oCcVXBkYXRlc+KAnSBmaWVsZC48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNs YXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCI+Q291cnRlc3kgUkZDMjIyMzo8bzpwPjwvbzpwPjwvcD4NCjwvZGl2 Pg0KPGRpdj4NCjxwcmU+Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7IFRvIGJlIHVzZWQg YXMgYSByZWZlcmVuY2UgZnJvbSBhIG5ldyBpdGVtIHRoYXQgY2Fubm90IGJlIHVzZWQ8bzpwPjwv bzpwPjwvcHJlPg0KPHByZT4mbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsgYWxvbmUgKGku ZS4sIG9uZSB0aGF0IHN1cHBsZW1lbnRzIGEgcHJldmlvdXMgZG9jdW1lbnQpLCB0byByZWZlcjxv OnA+PC9vOnA+PC9wcmU+DQo8cHJlPiZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyB0byB0 aGUgcHJldmlvdXMgZG9jdW1lbnQuJm5ic3A7IFRoZSBuZXdlciBwdWJsaWNhdGlvbiBpcyBhIHBh cnQgdGhhdDxvOnA+PC9vOnA+PC9wcmU+DQo8cHJlPiZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZu YnNwOyB3aWxsIHN1cHBsZW1lbnQgb3IgYmUgYWRkZWQgb24gdG8gdGhlIGV4aXN0aW5nIGRvY3Vt ZW50OyBlLmcuLCBhbjxvOnA+PC9vOnA+PC9wcmU+DQo8cHJlPiZuYnNwOyZuYnNwOyZuYnNwOyZu YnNwOyZuYnNwOyBhZGRlbmR1bSwgb3Igc2VwYXJhdGUsIGV4dHJhIGluZm9ybWF0aW9uIHRoYXQg aXMgdG8gYmUgYWRkZWQgdG88bzpwPjwvbzpwPjwvcHJlPg0KPHByZT4mbmJzcDsmbmJzcDsmbmJz cDsmbmJzcDsmbmJzcDsgdGhlIG9yaWdpbmFsIGRvY3VtZW50LjxvOnA+PC9vOnA+PC9wcmU+DQo8 L2Rpdj4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPkBEZWJvcmFoIOKAlCBB cmUgeW91IG9rIHdpdGggdGhpcz88bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNs YXNzPSJNc29Ob3JtYWwiPlJlZ2FyZHMsPG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8 cCBjbGFzcz0iTXNvTm9ybWFsIj4tUGF2YW48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4N CjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2 IHN0eWxlPSJib3JkZXI6bm9uZTtib3JkZXItdG9wOnNvbGlkICNCNUM0REYgMS4wcHQ7cGFkZGlu ZzozLjBwdCAwaW4gMGluIDBpbiI+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48Yj48c3BhbiBzdHls ZT0iZm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlmO2NvbG9yOmJsYWNr Ij5Gcm9tOg0KPC9zcGFuPjwvYj48c3BhbiBzdHlsZT0iZm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJy aSZxdW90OyxzYW5zLXNlcmlmO2NvbG9yOmJsYWNrIj4mcXVvdDtSYWtlc2ggR2FuZGhpIChyZ2Fu ZGhpKSZxdW90OyAmbHQ7PGEgaHJlZj0ibWFpbHRvOnJnYW5kaGlAY2lzY28uY29tIj5yZ2FuZGhp QGNpc2NvLmNvbTwvYT4mZ3Q7PGJyPg0KPGI+RGF0ZTogPC9iPlR1ZXNkYXksIEp1bHkgNCwgMjAx NyBhdCAxMDo1NSBBTTxicj4NCjxiPlRvOiA8L2I+UmlmYWF0IFNoZWtoLVl1c2VmICZsdDs8YSBo cmVmPSJtYWlsdG86cmlmYWF0LmlldGZAZ21haWwuY29tIj5yaWZhYXQuaWV0ZkBnbWFpbC5jb208 L2E+Jmd0OywgJnF1b3Q7PGEgaHJlZj0ibWFpbHRvOmRyYWZ0LWlldGYtdGVhcy1nbXBscy1sc3At ZmFzdHJlcm91dGUuYWxsQGlldGYub3JnIj5kcmFmdC1pZXRmLXRlYXMtZ21wbHMtbHNwLWZhc3Ry ZXJvdXRlLmFsbEBpZXRmLm9yZzwvYT4mcXVvdDsgJmx0OzxhIGhyZWY9Im1haWx0bzpkcmFmdC1p ZXRmLXRlYXMtZ21wbHMtbHNwLWZhc3RyZXJvdXRlLmFsbEBpZXRmLm9yZyI+ZHJhZnQtaWV0Zi10 ZWFzLWdtcGxzLWxzcC1mYXN0cmVyb3V0ZS5hbGxAaWV0Zi5vcmc8L2E+Jmd0OywNCiAmcXVvdDs8 YSBocmVmPSJtYWlsdG86c2VjZGlyQGlldGYub3JnIj5zZWNkaXJAaWV0Zi5vcmc8L2E+JnF1b3Q7 ICZsdDs8YSBocmVmPSJtYWlsdG86c2VjZGlyQGlldGYub3JnIj5zZWNkaXJAaWV0Zi5vcmc8L2E+ Jmd0OywgVGhlIElFU0cgJmx0OzxhIGhyZWY9Im1haWx0bzppZXNnQGlldGYub3JnIj5pZXNnQGll dGYub3JnPC9hPiZndDs8YnI+DQo8Yj5DYzogPC9iPkRFQk9SQUggQlJVTkdBUkQgJmx0OzxhIGhy ZWY9Im1haWx0bzpkYjM1NDZAYXR0LmNvbSI+ZGIzNTQ2QGF0dC5jb208L2E+Jmd0OywgTG91IEJl cmdlciAmbHQ7PGEgaHJlZj0ibWFpbHRvOmxiZXJnZXJAbGFibi5uZXQiPmxiZXJnZXJAbGFibi5u ZXQ8L2E+Jmd0OywgJnF1b3Q7PGEgaHJlZj0ibWFpbHRvOkVYVC12aXNobnVwYXZhbkBnbWFpbC5j b20iPkVYVC12aXNobnVwYXZhbkBnbWFpbC5jb208L2E+JnF1b3Q7ICZsdDs8YSBocmVmPSJtYWls dG86dmlzaG51cGF2YW5AZ21haWwuY29tIj52aXNobnVwYXZhbkBnbWFpbC5jb208L2E+Jmd0Ozxi cj4NCjxiPlN1YmplY3Q6IDwvYj5SZTogW3NlY2Rpcl0gc2VjZGlyIHJldmlldyBvZiBkcmFmdC1p ZXRmLXRlYXMtZ21wbHMtbHNwLWZhc3RyZXJvdXRlLTA5PGJyPg0KPGI+UmVzZW50LUZyb206IDwv Yj4mbHQ7PGEgaHJlZj0ibWFpbHRvOmFsaWFzLWJvdW5jZXNAaWV0Zi5vcmciPmFsaWFzLWJvdW5j ZXNAaWV0Zi5vcmc8L2E+Jmd0Ozxicj4NCjxiPlJlc2VudC1UbzogPC9iPiZsdDs8YSBocmVmPSJt YWlsdG86bXRhaWxsb25AY2lzY28uY29tIj5tdGFpbGxvbkBjaXNjby5jb208L2E+Jmd0OywgJmx0 OzxhIGhyZWY9Im1haWx0bzp0c2FhZEBjaXNjby5jb20iPnRzYWFkQGNpc2NvLmNvbTwvYT4mZ3Q7 LCAmbHQ7PGEgaHJlZj0ibWFpbHRvOnJnYW5kaGlAY2lzY28uY29tIj5yZ2FuZGhpQGNpc2NvLmNv bTwvYT4mZ3Q7LCBaYWZhciBBbGkgJmx0OzxhIGhyZWY9Im1haWx0bzp6YWxpQGNpc2NvLmNvbSI+ emFsaUBjaXNjby5jb208L2E+Jmd0OywNCiAmbHQ7PGEgaHJlZj0ibWFpbHRvOm1hbmF2LmJoYXRp YUBub2tpYS5jb20iPm1hbmF2LmJoYXRpYUBub2tpYS5jb208L2E+Jmd0OywgJmx0OzxhIGhyZWY9 Im1haWx0bzptaGFydGxleUBjaXNjby5jb20iPm1oYXJ0bGV5QGNpc2NvLmNvbTwvYT4mZ3Q7LCBM b3UgQmVyZ2VyICZsdDs8YSBocmVmPSJtYWlsdG86bGJlcmdlckBsYWJuLm5ldCI+bGJlcmdlckBs YWJuLm5ldDwvYT4mZ3Q7LCBWaXNobnUgUGF2YW4gQmVlcmFtICZsdDs8YSBocmVmPSJtYWlsdG86 dmJlZXJhbUBqdW5pcGVyLm5ldCI+dmJlZXJhbUBqdW5pcGVyLm5ldDwvYT4mZ3Q7LA0KICZsdDs8 YSBocmVmPSJtYWlsdG86YXJldGFuYUBjaXNjby5jb20iPmFyZXRhbmFAY2lzY28uY29tPC9hPiZn dDssICZsdDs8YSBocmVmPSJtYWlsdG86ZGIzNTQ2QGF0dC5jb20iPmRiMzU0NkBhdHQuY29tPC9h PiZndDssICZsdDs8YSBocmVmPSJtYWlsdG86YWthdGxhc0BnbWFpbC5jb20iPmFrYXRsYXNAZ21h aWwuY29tPC9hPiZndDs8YnI+DQo8Yj5SZXNlbnQtRGF0ZTogPC9iPlR1ZXNkYXksIEp1bHkgNCwg MjAxNyBhdCAxMDo1NSBBTTxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxw IGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0K PGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LWZhbWlseTomcXVv dDtDYWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWYiPlRoYW5rcyBSaWZhYXQgZm9yIHRoZSByZXZpZXcg b2YgdGhpcyBkb2N1bWVudC48L3NwYW4+PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9y bWFsIj48c3BhbiBzdHlsZT0iZm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNl cmlmIj4mbmJzcDs8L3NwYW4+PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48 c3BhbiBzdHlsZT0iZm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlmIj5I aSBEZWJvcmFoLCBMb3UsIFBhdmFuLDwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJN c29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LHNh bnMtc2VyaWYiPiZuYnNwOzwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3Jt YWwiPjxzcGFuIHN0eWxlPSJmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LHNhbnMtc2Vy aWYiPkFueSB0aG91Z2h0cyBvbiB0aGUgZm9sbG93aW5nIHN1Z2dlc3Rpb24/PC9zcGFuPjxvOnA+ PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtZmFtaWx5 OiZxdW90O0NhbGlicmkmcXVvdDssc2Fucy1zZXJpZiI+Jm5ic3A7PC9zcGFuPjxvOnA+PC9vOnA+ PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtZmFtaWx5OiZxdW90 O0NhbGlicmkmcXVvdDssc2Fucy1zZXJpZiI+4oCcQmVjYXVzZSB0aGUgZG9jdW1lbnQgZXh0ZW5k cyBSRkM0MDkwLCBpdCBzaG91bGQgYWRkICZxdW90O1VwZGF0ZXM6IDQwOTAmcXVvdDsgYXQgdGhl IHRvcCBvZiB0aGUgZG9jdW1lbnQu4oCdPC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9 Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDss c2Fucy1zZXJpZiI+Jm5ic3A7PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05v cm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssc2Fucy1z ZXJpZiI+VGhhbmtzLDwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi PjxzcGFuIHN0eWxlPSJmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWYi PlJha2VzaDwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFu IHN0eWxlPSJmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWYiPiZuYnNw Ozwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxl PSJmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWYiPiZuYnNwOzwvc3Bh bj48bzpwPjwvbzpwPjwvcD4NCjxkaXYgc3R5bGU9ImJvcmRlcjpub25lO2JvcmRlci10b3A6c29s aWQgI0I1QzRERiAxLjBwdDtwYWRkaW5nOjMuMHB0IDBpbiAwaW4gMGluIj4NCjxwIGNsYXNzPSJN c29Ob3JtYWwiPjxiPjxzcGFuIHN0eWxlPSJmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7 LHNhbnMtc2VyaWY7Y29sb3I6YmxhY2siPkZyb206DQo8L3NwYW4+PC9iPjxzcGFuIHN0eWxlPSJm b250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWY7Y29sb3I6YmxhY2siPlJp ZmFhdCBTaGVraC1ZdXNlZiAmbHQ7PGEgaHJlZj0ibWFpbHRvOnJpZmFhdC5pZXRmQGdtYWlsLmNv bSI+cmlmYWF0LmlldGZAZ21haWwuY29tPC9hPiZndDs8YnI+DQo8Yj5EYXRlOiA8L2I+VHVlc2Rh eSwgSnVseSA0LCAyMDE3IGF0IDk6MzIgQU08YnI+DQo8Yj5UbzogPC9iPiZxdW90OzxhIGhyZWY9 Im1haWx0bzpkcmFmdC1pZXRmLXRlYXMtZ21wbHMtbHNwLWZhc3RyZXJvdXRlLmFsbEBpZXRmLm9y ZyI+ZHJhZnQtaWV0Zi10ZWFzLWdtcGxzLWxzcC1mYXN0cmVyb3V0ZS5hbGxAaWV0Zi5vcmc8L2E+ JnF1b3Q7ICZsdDs8YSBocmVmPSJtYWlsdG86ZHJhZnQtaWV0Zi10ZWFzLWdtcGxzLWxzcC1mYXN0 cmVyb3V0ZS5hbGxAaWV0Zi5vcmciPmRyYWZ0LWlldGYtdGVhcy1nbXBscy1sc3AtZmFzdHJlcm91 dGUuYWxsQGlldGYub3JnPC9hPiZndDssDQogJnF1b3Q7PGEgaHJlZj0ibWFpbHRvOnNlY2RpckBp ZXRmLm9yZyI+c2VjZGlyQGlldGYub3JnPC9hPiZxdW90OyAmbHQ7PGEgaHJlZj0ibWFpbHRvOnNl Y2RpckBpZXRmLm9yZyI+c2VjZGlyQGlldGYub3JnPC9hPiZndDssIFRoZSBJRVNHICZsdDs8YSBo cmVmPSJtYWlsdG86aWVzZ0BpZXRmLm9yZyI+aWVzZ0BpZXRmLm9yZzwvYT4mZ3Q7PGJyPg0KPGI+ U3ViamVjdDogPC9iPltzZWNkaXJdIHNlY2RpciByZXZpZXcgb2YgZHJhZnQtaWV0Zi10ZWFzLWdt cGxzLWxzcC1mYXN0cmVyb3V0ZS0wOTxicj4NCjxiPlJlc2VudC1Gcm9tOiA8L2I+Jmx0OzxhIGhy ZWY9Im1haWx0bzphbGlhcy1ib3VuY2VzQGlldGYub3JnIj5hbGlhcy1ib3VuY2VzQGlldGYub3Jn PC9hPiZndDs8YnI+DQo8Yj5SZXNlbnQtVG86IDwvYj4mcXVvdDs9U01UUDptdGFpbGxvbkBjaXNj by4gY29tJnF1b3Q7ICZsdDs8YSBocmVmPSJtYWlsdG86bXRhaWxsb25AY2lzY28uY29tIj5tdGFp bGxvbkBjaXNjby5jb208L2E+Jmd0OywgJmx0OzxhIGhyZWY9Im1haWx0bzp0c2FhZEBjaXNjby5j b20iPnRzYWFkQGNpc2NvLmNvbTwvYT4mZ3Q7LCAmcXVvdDs9U01UUDpyZ2FuZGhpQGNpc2NvLiBj b20mcXVvdDsgJmx0OzxhIGhyZWY9Im1haWx0bzpyZ2FuZGhpQGNpc2NvLmNvbSI+cmdhbmRoaUBj aXNjby5jb208L2E+Jmd0OywgWmFmYXINCiBBbGkgJmx0OzxhIGhyZWY9Im1haWx0bzp6YWxpQGNp c2NvLmNvbSI+emFsaUBjaXNjby5jb208L2E+Jmd0OywgJmx0OzxhIGhyZWY9Im1haWx0bzptYW5h di5iaGF0aWFAbm9raWEuY29tIj5tYW5hdi5iaGF0aWFAbm9raWEuY29tPC9hPiZndDssICZsdDs8 YSBocmVmPSJtYWlsdG86bWhhcnRsZXlAY2lzY28uY29tIj5taGFydGxleUBjaXNjby5jb208L2E+ Jmd0OywgTG91IEJlcmdlciAmbHQ7PGEgaHJlZj0ibWFpbHRvOmxiZXJnZXJAbGFibi5uZXQiPmxi ZXJnZXJAbGFibi5uZXQ8L2E+Jmd0OywNCiAmbHQ7PGEgaHJlZj0ibWFpbHRvOnZiZWVyYW1AanVu aXBlci5uZXQiPnZiZWVyYW1AanVuaXBlci5uZXQ8L2E+Jmd0OywgJmx0OzxhIGhyZWY9Im1haWx0 bzphcmV0YW5hQGNpc2NvLmNvbSI+YXJldGFuYUBjaXNjby5jb208L2E+Jmd0OywgREVCT1JBSCBC UlVOR0FSRCAmbHQ7PGEgaHJlZj0ibWFpbHRvOmRiMzU0NkBhdHQuY29tIj5kYjM1NDZAYXR0LmNv bTwvYT4mZ3Q7LCAmbHQ7PGEgaHJlZj0ibWFpbHRvOmFrYXRsYXNAZ21haWwuY29tIj5ha2F0bGFz QGdtYWlsLmNvbTwvYT4mZ3Q7PGJyPg0KPGI+UmVzZW50LURhdGU6IDwvYj5UdWVzZGF5LCBKdWx5 IDQsIDIwMTcgYXQgOTo0MCBBTTwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4N CjxwIGNsYXNzPSJNc29Ob3JtYWwiPiZuYnNwOzxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2 Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPkkgaGF2ZSByZXZpZXdlZCB0aGlzIGRvY3Vt ZW50IGFzIHBhcnQgb2YgdGhlIHNlY3VyaXR5IGRpcmVjdG9yYXRlJ3M8bzpwPjwvbzpwPjwvcD4N CjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPm9uZ29pbmcgZWZmb3J0IHRvIHJl dmlldyBhbGwgSUVURiBkb2N1bWVudHMgYmVpbmcgcHJvY2Vzc2VkIGJ5IHRoZTxvOnA+PC9vOnA+ PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+SUVTRy4mbmJzcDsgVGhl c2UgY29tbWVudHMgd2VyZSB3cml0dGVuIHByaW1hcmlseSBmb3IgdGhlIGJlbmVmaXQgb2YgdGhl PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5zZWN1 cml0eSBhcmVhIGRpcmVjdG9ycy4mbmJzcDsgRG9jdW1lbnQgZWRpdG9ycyBhbmQgV0cgY2hhaXJz IHNob3VsZCB0cmVhdDxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1z b05vcm1hbCI+dGhlc2UgY29tbWVudHMganVzdCBsaWtlIGFueSBvdGhlciBsYXN0IGNhbGwgY29t bWVudHMuPG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFs Ij4mbmJzcDs8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3Jt YWwiPlN1bW1hcnk6IFJlYWR5IHdpdGggTml0czxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2 Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+Jm5ic3A7PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxk aXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj4mbmJzcDs8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0K PGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPkkgZGlkIG5vdCBoYXZlIGVub3VnaCBiYWNrZ3Jv dW5kIG9uIE1MUFMgYW5kIEdNUExTIGFuZCB0aGVpciByZWxhdGVkIFJGQ3MsPG86cD48L286cD48 L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5zbyBJIGhhZCB0byBkbyBz b21lIHJlYWRpbmcgdG8gZ2V0IHNvbWUgZmFtaWxpYXJpdHkgd2l0aCB0aGlzIHN1YmplY3QgdG8g YmU8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPmFi bGUgdG8gcHJvdmlkZSBzb21lIHJlYXNvbmFibGUgcmV2aWV3IG9mIHRoaXMgZG9jdW1lbnQuPG86 cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj4mbmJzcDs8 bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPlRoaXMg ZG9jdW1lbnQgYnVpbGRzIG9uIGFuIGV4aXN0aW5nIG1lY2hhbmlzbSwgJnF1b3Q7RmFzdCBSZXJv dXRlIEV4dGVuc2lvbnMgdG88bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNz PSJNc29Ob3JtYWwiPlJTVlAtVEUgZm9yIExTUCBUdW5uZWxzJnF1b3Q7IGRlZmluZWQgaW4gUkZD NDA5MCwgd2hpY2ggZGVmaW5lcyBhIG1lY2hhbmlzbSB0bzxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+ DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+ZXN0YWJsaXNoIGEgYmFja3VwIHR1bm5lbHMg Zm9yIGxvY2FsIExTUCB0dW5uZWxzLiBPbmUgbGltaXRhdGlvbiBvZiB0aGU8bzpwPjwvbzpwPjwv cD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPmV4aXN0aW5nIG1lY2hhbmlz bSBpcyB0aGF0IGluIHNvbWUgc2l0dWF0aW9ucyBpdCBtaWdodCBhc3NpZ24gZGlmZmVyZW50PG86 cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj51bmktZGly ZWN0aW9uYWwgYnlwYXNzIHR1bm5lbHMgZm9yIHRoZSBmb3J3YXJkIGFuZCByZXZlcnNlIGRpcmVj dGlvbnMuPG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFs Ij4mbmJzcDs8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3Jt YWwiPlRoaXMgZG9jdW1lbnQgZXh0ZW5kcyB0aGUgbWVjaGFuaXNtIGRlZmluZWQgaW4gUkZDNDA5 MCwgYnkgYWRkaW5nIGEgbmV3PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIj5CWVBBU1NfQVNTSUdOTUVOVCBzdWJvYmplY3QgdG8gdGhlIGV4aXN0aW5n IFJFQ09SRF9ST1VURSBPYmplY3QgKFJSTykgdXNlZDxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8 ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+aW4gUEFUSCBhbmQgUkVTViByZXF1ZXN0cywgdG8g YWxsb3cgdGhlIGVzdGFibGlzaG1lbnQgb2YgYSBiaS1kaXJlY3Rpb25hbDxvOnA+PC9vOnA+PC9w Pg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+YnlwYXNzIHR1bm5lbC48bzpw PjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPiZuYnNwOzxv OnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+VGhlIHNl Y3VyaXR5IG9mIHRoZSBleGlzdGluZyBtZWNoYW5pc20gc3RpbGwgYXBwbGllcyB3aXRoIHRoZSBu ZXcgbWVjaGFuaXNtLDxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1z b05vcm1hbCI+YW5kIHRoZSBzZWN1cml0eSBzZWN0aW9uIGRpc2N1c3NlcyB0aGUgaW1wbGljYXRp b25zIG9mIHRoZSBuZXcgc3Vib2JqZWN0IGFuZDxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2 Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+dGhlIG5ldyBlcnJvciBhc3NvY2lhdGVkIHdpdGggdGhh dCwgd2hpY2ggc2VlbXMgcmVhc29uYWJsZS48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4N CjxwIGNsYXNzPSJNc29Ob3JtYWwiPiZuYnNwOzxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2 Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+VGhlIGRvY3VtZW50IGFsc28gcG9pbnRzIHRvIGFuIE1Q TFMvR01QTFMgU2VjdXJpdHkgRnJhbWV3b3JrIChSRkM1OTIwKTxvOnA+PC9vOnA+PC9wPg0KPC9k aXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+ZG9jdW1lbnQgdGhhdCBoYXMgYW4gZXh0 ZW5zaXZlIGRpc2N1c3Npb24gb2YgdGhlIHNlY3VyaXR5IG9mIE1QTFMvR01QTFM8bzpwPjwvbzpw PjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPm5ldHdvcmsgaW4gZ2Vu ZXJhbCB0aGF0IGFsc28gYXBwbGllcyB0byB0aGlzIGRvY3VtZW50LjxvOnA+PC9vOnA+PC9wPg0K PC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+Jm5ic3A7PG86cD48L286cD48L3A+ DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj4mbmJzcDs8bzpwPjwvbzpwPjwv cD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPk5pdHM8bzpwPjwvbzpwPjwv cD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPiZuYnNwOzxvOnA+PC9vOnA+ PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+QmVjYXVzZSB0aGUgZG9j dW1lbnQgZXh0ZW5kcyBSRkM0MDkwLCBpdCBzaG91bGQgYWRkICZxdW90O1VwZGF0ZXM6IDQwOTAm cXVvdDsgYXQgdGhlPG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIj50b3Agb2YgdGhlIGRvY3VtZW50LjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2 Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+Jm5ic3A7PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxk aXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5SZWdhcmRzLDxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+ DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+Jm5ic3A7UmlmYWF0PG86cD48L286cD48L3A+ DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj4mbmJzcDs8bzpwPjwvbzpwPjwv cD4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjwvYm9k eT4NCjwvaHRtbD4NCg== --_000_F64C10EAA68C8044B33656FA214632C85DF42E24MISOUT7MSGUSRDE_-- From nobody Tue Jul 11 07:11:03 2017 Return-Path: X-Original-To: secdir@ietfa.amsl.com Delivered-To: secdir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id B3E57124D37; Tue, 11 Jul 2017 07:11:00 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -14.521 X-Spam-Level: X-Spam-Status: No, score=-14.521 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_HI=-5, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, RP_MATCHES_RCVD=-0.001, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cisco.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id M-OWA2giaqrI; Tue, 11 Jul 2017 07:10:57 -0700 (PDT) Received: from alln-iport-5.cisco.com (alln-iport-5.cisco.com [173.37.142.92]) (using TLSv1.2 with cipher DHE-RSA-SEED-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 6B48512F29A; Tue, 11 Jul 2017 07:10:57 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=40526; q=dns/txt; s=iport; t=1499782257; x=1500991857; h=from:to:cc:subject:date:message-id:references: in-reply-to:mime-version; bh=VLcmh3ddtfEaKLNxvBdECcWEuRyJ4SlvU4vol3doXRE=; b=JYakL5BAnj2kUicA2PAEwnonqaMmue0H9fapObZ8o6+v2f9UcCEP7a68 +PpAA0/GpGXW5zouKWMdBvy+Bo1eyYomdB7jfZjdGBHlWVBn2DjfBRwZY Hkv1c9kMufQN+JkwXT5GBSqynK8bEZOeXL88wKr0wakNixUTYetkKNaTY g=; X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: =?us-ascii?q?A0ABAgAN3GRZ/5NdJa1dGQEBAQEBAQEBA?= =?us-ascii?q?QEBBwEBAQEBgm9rZIEUB59OIogujVWCEYV2AhqDI0EWAQIBAQEBAQEBayiFGAE?= =?us-ascii?q?BAQEDI1YQAgEIEQMBAQEhAQYDAgICHxEUCQgCBAENBYlLTAMVq3aCJieDawGDH?= =?us-ascii?q?A2DeAEBAQEBAQEBAQEBAQEBAQEBAQEBAR2DKINNgWABKwuCboJXgVlRCQYQAoJ?= =?us-ascii?q?bMIIxBZc7hy47Ao8chG6CDIVLik6JO4JCiUkBJQExgQp1FVsBhQAcgSwBOnaHI?= =?us-ascii?q?QGBDAEBAQ?= X-IronPort-AV: E=Sophos;i="5.40,346,1496102400"; d="scan'208,217";a="451941215" Received: from rcdn-core-11.cisco.com ([173.37.93.147]) by alln-iport-5.cisco.com with ESMTP/TLS/DHE-RSA-AES256-GCM-SHA384; 11 Jul 2017 14:10:56 +0000 Received: from XCH-ALN-020.cisco.com (xch-aln-020.cisco.com [173.36.7.30]) by rcdn-core-11.cisco.com (8.14.5/8.14.5) with ESMTP id v6BEAukk007568 (version=TLSv1/SSLv3 cipher=AES256-SHA bits=256 verify=FAIL); Tue, 11 Jul 2017 14:10:56 GMT Received: from xch-aln-018.cisco.com (173.36.7.28) by XCH-ALN-020.cisco.com (173.36.7.30) with Microsoft SMTP Server (TLS) id 15.0.1210.3; Tue, 11 Jul 2017 09:10:55 -0500 Received: from xch-aln-018.cisco.com ([173.36.7.28]) by XCH-ALN-018.cisco.com ([173.36.7.28]) with mapi id 15.00.1210.000; Tue, 11 Jul 2017 09:10:55 -0500 From: "Rakesh Gandhi (rgandhi)" To: "BRUNGARD, DEBORAH A" , Vishnu Pavan Beeram , Rifaat Shekh-Yusef , "draft-ietf-teas-gmpls-lsp-fastreroute.all@ietf.org" , "secdir@ietf.org" , The IESG CC: Lou Berger , "EXT-vishnupavan@gmail.com" Thread-Topic: [secdir] secdir review of draft-ietf-teas-gmpls-lsp-fastreroute-09 Thread-Index: AQHS9MsUKApW2nmrDkSMbsBbOiyZvqJD0ouAgABO84CAAt+CAIAH2euA///raYA= Date: Tue, 11 Jul 2017 14:10:55 +0000 Message-ID: References: <233DDE34-9818-4088-A9CE-84180A34D5A4@juniper.net> <5C02CE7F-DEE3-48D0-898C-347CF4CB6595@cisco.com> In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/f.1d.0.161209 x-ms-exchange-messagesentrepresentingtype: 1 x-ms-exchange-transport-fromentityheader: Hosted x-originating-ip: [161.44.213.149] Content-Type: multipart/alternative; boundary="_000_B8956E3352254C8CA2A56BEA8055EE03ciscocom_" MIME-Version: 1.0 Archived-At: Subject: Re: [secdir] secdir review of draft-ietf-teas-gmpls-lsp-fastreroute-09 X-BeenThere: secdir@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: Security Area Directorate List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 11 Jul 2017 14:11:01 -0000 --_000_B8956E3352254C8CA2A56BEA8055EE03ciscocom_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 SGkgRGVib3JhaCwNCg0KVGhhbmsgeW91IGZvciB5b3VyIHN1Z2dlc3Rpb25zLiBXaWxsIHVwZGF0 ZSB0aGUgZG9jdW1lbnQgYWNjb3JkaW5nbHkuDQoNClRoYW5rcywNClJha2VzaA0KDQoNCkZyb206 IERFQk9SQUggQlJVTkdBUkQgPGRiMzU0NkBhdHQuY29tPg0KRGF0ZTogVHVlc2RheSwgSnVseSAx MSwgMjAxNyBhdCA3OjI1IEFNDQpUbzogIj1TTVRQOnJnYW5kaGlAY2lzY28uIGNvbSIgPHJnYW5k aGlAY2lzY28uY29tPiwgVmlzaG51IFBhdmFuIEJlZXJhbSA8dmJlZXJhbUBqdW5pcGVyLm5ldD4s IFJpZmFhdCBTaGVraC1ZdXNlZiA8cmlmYWF0LmlldGZAZ21haWwuY29tPiwgImRyYWZ0LWlldGYt dGVhcy1nbXBscy1sc3AtZmFzdHJlcm91dGUuYWxsQGlldGYub3JnIiA8ZHJhZnQtaWV0Zi10ZWFz LWdtcGxzLWxzcC1mYXN0cmVyb3V0ZS5hbGxAaWV0Zi5vcmc+LCAic2VjZGlyQGlldGYub3JnIiA8 c2VjZGlyQGlldGYub3JnPiwgVGhlIElFU0cgPGllc2dAaWV0Zi5vcmc+DQpDYzogTG91IEJlcmdl ciA8bGJlcmdlckBsYWJuLm5ldD4sICJFWFQtdmlzaG51cGF2YW5AZ21haWwuY29tIiA8dmlzaG51 cGF2YW5AZ21haWwuY29tPg0KU3ViamVjdDogUkU6IFtzZWNkaXJdIHNlY2RpciByZXZpZXcgb2Yg ZHJhZnQtaWV0Zi10ZWFzLWdtcGxzLWxzcC1mYXN0cmVyb3V0ZS0wOQ0KDQpIaSBSYWtlc2gsIGFs bCwNCihJIHdhcyBvbiB2YWNhdGlvbiBsYXN0IHdlZWs6LSkpDQoNCkkgbGVhbiB0b3dhcmRzIGEg c29tZXdoYXQgc3RyaWN0IGludGVycHJldGF0aW9uIG9mIOKAnHVwZGF0ZeKAnSwgb3RoZXJ3aXNl IGltcGxlbWVudGVycyBuZWVkIHRvIGJyb3dzZSBhbGwgdGhlIHVwZGF0ZXMgdG8gc2VlIHdoYXQg aXMgYXBwcm9wcmlhdGUuIE9uIHRoaXMsIGl0IGlzIG1vcmUgdGhhbiBleHRlbnNpb24sIGl0IGRl ZmluaXRlbHkgaW1wcm92ZXMgYW4gaW1wbGVtZW50YXRpb24sIHNvIGl0IHNob3VsZCBiZSBhbiDi gJx1cGRhdGXigJ0uDQoNCkF1dGhvcnMg4oCTIHdoZW4gZG8gdGhlIG5leHQgdXBkYXRlIC0gcmV3 b3JkIOKAnFRoaXMgZG9jdW1lbnQgZXh0ZW5kcyB0aGUgbWVjaGFuaXNtIC4u4oCdIHRvIOKAnFRo aXMgZG9jdW1lbnQgdXBkYXRlcyB0aGUgbWVjaGFuaXNtIC4u4oCdLg0KDQpUaGFua3MgUmlmYWF0 IOKAkyBncmVhdCBjb21tZW50LQ0KRGVib3JhaA0KDQoNCg0KRnJvbTogUmFrZXNoIEdhbmRoaSAo cmdhbmRoaSkgW21haWx0bzpyZ2FuZGhpQGNpc2NvLmNvbV0NClNlbnQ6IFRodXJzZGF5LCBKdWx5 IDA2LCAyMDE3IDExOjMxIEFNDQpUbzogVmlzaG51IFBhdmFuIEJlZXJhbSA8dmJlZXJhbUBqdW5p cGVyLm5ldD47IFJpZmFhdCBTaGVraC1ZdXNlZiA8cmlmYWF0LmlldGZAZ21haWwuY29tPjsgZHJh ZnQtaWV0Zi10ZWFzLWdtcGxzLWxzcC1mYXN0cmVyb3V0ZS5hbGxAaWV0Zi5vcmc7IHNlY2RpckBp ZXRmLm9yZzsgVGhlIElFU0cgPGllc2dAaWV0Zi5vcmc+DQpDYzogQlJVTkdBUkQsIERFQk9SQUgg QSA8ZGIzNTQ2QGF0dC5jb20+OyBMb3UgQmVyZ2VyIDxsYmVyZ2VyQGxhYm4ubmV0PjsgRVhULXZp c2hudXBhdmFuQGdtYWlsLmNvbSA8dmlzaG51cGF2YW5AZ21haWwuY29tPg0KU3ViamVjdDogUmU6 IFtzZWNkaXJdIHNlY2RpciByZXZpZXcgb2YgZHJhZnQtaWV0Zi10ZWFzLWdtcGxzLWxzcC1mYXN0 cmVyb3V0ZS0wOQ0KDQpUaGFua3MgUGF2YW4uDQoNCkhpIERlYm9yYWgsDQpQbGVhc2UgbGV0IHVz IGtub3cgaWYgeW91IGFyZSBPSyB3aXRoIHRoZSBzdWdnZXN0aW9uLg0KDQrigJxCZWNhdXNlIHRo ZSBkb2N1bWVudCBleHRlbmRzIFJGQzQwOTAsIGl0IHNob3VsZCBhZGQgIlVwZGF0ZXM6IDQwOTAi IGF0IHRoZSB0b3Agb2YgdGhlIGRvY3VtZW50LuKAnQ0KDQpUaGFua3MsDQpSYWtlc2gNCg0KDQoN CkZyb206IFZpc2hudSBQYXZhbiBCZWVyYW0gPHZiZWVyYW1AanVuaXBlci5uZXQ8bWFpbHRvOnZi ZWVyYW1AanVuaXBlci5uZXQ+Pg0KRGF0ZTogVHVlc2RheSwgSnVseSA0LCAyMDE3IGF0IDExOjM4 IEFNDQpUbzogIj1TTVRQOnJnYW5kaGlAY2lzY28uIGNvbSIgPHJnYW5kaGlAY2lzY28uY29tPG1h aWx0bzpyZ2FuZGhpQGNpc2NvLmNvbT4+LCBSaWZhYXQgU2hla2gtWXVzZWYgPHJpZmFhdC5pZXRm QGdtYWlsLmNvbTxtYWlsdG86cmlmYWF0LmlldGZAZ21haWwuY29tPj4sICJkcmFmdC1pZXRmLXRl YXMtZ21wbHMtbHNwLWZhc3RyZXJvdXRlLmFsbEBpZXRmLm9yZzxtYWlsdG86ZHJhZnQtaWV0Zi10 ZWFzLWdtcGxzLWxzcC1mYXN0cmVyb3V0ZS5hbGxAaWV0Zi5vcmc+IiA8ZHJhZnQtaWV0Zi10ZWFz LWdtcGxzLWxzcC1mYXN0cmVyb3V0ZS5hbGxAaWV0Zi5vcmc8bWFpbHRvOmRyYWZ0LWlldGYtdGVh cy1nbXBscy1sc3AtZmFzdHJlcm91dGUuYWxsQGlldGYub3JnPj4sICJzZWNkaXJAaWV0Zi5vcmc8 bWFpbHRvOnNlY2RpckBpZXRmLm9yZz4iIDxzZWNkaXJAaWV0Zi5vcmc8bWFpbHRvOnNlY2RpckBp ZXRmLm9yZz4+LCBUaGUgSUVTRyA8aWVzZ0BpZXRmLm9yZzxtYWlsdG86aWVzZ0BpZXRmLm9yZz4+ DQpDYzogREVCT1JBSCBCUlVOR0FSRCA8ZGIzNTQ2QGF0dC5jb208bWFpbHRvOmRiMzU0NkBhdHQu Y29tPj4sIExvdSBCZXJnZXIgPGxiZXJnZXJAbGFibi5uZXQ8bWFpbHRvOmxiZXJnZXJAbGFibi5u ZXQ+PiwgIkVYVC12aXNobnVwYXZhbkBnbWFpbC5jb208bWFpbHRvOkVYVC12aXNobnVwYXZhbkBn bWFpbC5jb20+IiA8dmlzaG51cGF2YW5AZ21haWwuY29tPG1haWx0bzp2aXNobnVwYXZhbkBnbWFp bC5jb20+Pg0KU3ViamVjdDogUmU6IFtzZWNkaXJdIHNlY2RpciByZXZpZXcgb2YgZHJhZnQtaWV0 Zi10ZWFzLWdtcGxzLWxzcC1mYXN0cmVyb3V0ZS0wOQ0KDQpSYWtlc2gsIEhpIQ0KDQpUaGlzIGlz IGEgdmFsaWQgY29tbWVudC4gPEdNUExTLUxTUC1GUlI+IGRvZXNu4oCZdCBtb2RpZnkgYW55IG9m IHRoZSBleGlzdGluZyBwcm9jZWR1cmVzIGRlZmluZWQgaW4gUkZDNDA5MCwgYnV0IGl0IGRvZXMg c3VwcGxlbWVudCBpdC4gQXMgcGVyIFJGQzIyMjMsIHRoaXMgaXMgc3VmZmljaWVudCBncm91bmRz IHRvIHNldCB0aGUg4oCcVXBkYXRlc+KAnSBmaWVsZC4NCg0KQ291cnRlc3kgUkZDMjIyMzoNCg0K ICAgICAgVG8gYmUgdXNlZCBhcyBhIHJlZmVyZW5jZSBmcm9tIGEgbmV3IGl0ZW0gdGhhdCBjYW5u b3QgYmUgdXNlZA0KDQogICAgICBhbG9uZSAoaS5lLiwgb25lIHRoYXQgc3VwcGxlbWVudHMgYSBw cmV2aW91cyBkb2N1bWVudCksIHRvIHJlZmVyDQoNCiAgICAgIHRvIHRoZSBwcmV2aW91cyBkb2N1 bWVudC4gIFRoZSBuZXdlciBwdWJsaWNhdGlvbiBpcyBhIHBhcnQgdGhhdA0KDQogICAgICB3aWxs IHN1cHBsZW1lbnQgb3IgYmUgYWRkZWQgb24gdG8gdGhlIGV4aXN0aW5nIGRvY3VtZW50OyBlLmcu LCBhbg0KDQogICAgICBhZGRlbmR1bSwgb3Igc2VwYXJhdGUsIGV4dHJhIGluZm9ybWF0aW9uIHRo YXQgaXMgdG8gYmUgYWRkZWQgdG8NCg0KICAgICAgdGhlIG9yaWdpbmFsIGRvY3VtZW50Lg0KQERl Ym9yYWgg4oCUIEFyZSB5b3Ugb2sgd2l0aCB0aGlzPw0KUmVnYXJkcywNCi1QYXZhbg0KDQpGcm9t OiAiUmFrZXNoIEdhbmRoaSAocmdhbmRoaSkiIDxyZ2FuZGhpQGNpc2NvLmNvbTxtYWlsdG86cmdh bmRoaUBjaXNjby5jb20+Pg0KRGF0ZTogVHVlc2RheSwgSnVseSA0LCAyMDE3IGF0IDEwOjU1IEFN DQpUbzogUmlmYWF0IFNoZWtoLVl1c2VmIDxyaWZhYXQuaWV0ZkBnbWFpbC5jb208bWFpbHRvOnJp ZmFhdC5pZXRmQGdtYWlsLmNvbT4+LCAiZHJhZnQtaWV0Zi10ZWFzLWdtcGxzLWxzcC1mYXN0cmVy b3V0ZS5hbGxAaWV0Zi5vcmc8bWFpbHRvOmRyYWZ0LWlldGYtdGVhcy1nbXBscy1sc3AtZmFzdHJl cm91dGUuYWxsQGlldGYub3JnPiIgPGRyYWZ0LWlldGYtdGVhcy1nbXBscy1sc3AtZmFzdHJlcm91 dGUuYWxsQGlldGYub3JnPG1haWx0bzpkcmFmdC1pZXRmLXRlYXMtZ21wbHMtbHNwLWZhc3RyZXJv dXRlLmFsbEBpZXRmLm9yZz4+LCAic2VjZGlyQGlldGYub3JnPG1haWx0bzpzZWNkaXJAaWV0Zi5v cmc+IiA8c2VjZGlyQGlldGYub3JnPG1haWx0bzpzZWNkaXJAaWV0Zi5vcmc+PiwgVGhlIElFU0cg PGllc2dAaWV0Zi5vcmc8bWFpbHRvOmllc2dAaWV0Zi5vcmc+Pg0KQ2M6IERFQk9SQUggQlJVTkdB UkQgPGRiMzU0NkBhdHQuY29tPG1haWx0bzpkYjM1NDZAYXR0LmNvbT4+LCBMb3UgQmVyZ2VyIDxs YmVyZ2VyQGxhYm4ubmV0PG1haWx0bzpsYmVyZ2VyQGxhYm4ubmV0Pj4sICJFWFQtdmlzaG51cGF2 YW5AZ21haWwuY29tPG1haWx0bzpFWFQtdmlzaG51cGF2YW5AZ21haWwuY29tPiIgPHZpc2hudXBh dmFuQGdtYWlsLmNvbTxtYWlsdG86dmlzaG51cGF2YW5AZ21haWwuY29tPj4NClN1YmplY3Q6IFJl OiBbc2VjZGlyXSBzZWNkaXIgcmV2aWV3IG9mIGRyYWZ0LWlldGYtdGVhcy1nbXBscy1sc3AtZmFz dHJlcm91dGUtMDkNClJlc2VudC1Gcm9tOiA8YWxpYXMtYm91bmNlc0BpZXRmLm9yZzxtYWlsdG86 YWxpYXMtYm91bmNlc0BpZXRmLm9yZz4+DQpSZXNlbnQtVG86IDxtdGFpbGxvbkBjaXNjby5jb208 bWFpbHRvOm10YWlsbG9uQGNpc2NvLmNvbT4+LCA8dHNhYWRAY2lzY28uY29tPG1haWx0bzp0c2Fh ZEBjaXNjby5jb20+PiwgPHJnYW5kaGlAY2lzY28uY29tPG1haWx0bzpyZ2FuZGhpQGNpc2NvLmNv bT4+LCBaYWZhciBBbGkgPHphbGlAY2lzY28uY29tPG1haWx0bzp6YWxpQGNpc2NvLmNvbT4+LCA8 bWFuYXYuYmhhdGlhQG5va2lhLmNvbTxtYWlsdG86bWFuYXYuYmhhdGlhQG5va2lhLmNvbT4+LCA8 bWhhcnRsZXlAY2lzY28uY29tPG1haWx0bzptaGFydGxleUBjaXNjby5jb20+PiwgTG91IEJlcmdl ciA8bGJlcmdlckBsYWJuLm5ldDxtYWlsdG86bGJlcmdlckBsYWJuLm5ldD4+LCBWaXNobnUgUGF2 YW4gQmVlcmFtIDx2YmVlcmFtQGp1bmlwZXIubmV0PG1haWx0bzp2YmVlcmFtQGp1bmlwZXIubmV0 Pj4sIDxhcmV0YW5hQGNpc2NvLmNvbTxtYWlsdG86YXJldGFuYUBjaXNjby5jb20+PiwgPGRiMzU0 NkBhdHQuY29tPG1haWx0bzpkYjM1NDZAYXR0LmNvbT4+LCA8YWthdGxhc0BnbWFpbC5jb208bWFp bHRvOmFrYXRsYXNAZ21haWwuY29tPj4NClJlc2VudC1EYXRlOiBUdWVzZGF5LCBKdWx5IDQsIDIw MTcgYXQgMTA6NTUgQU0NCg0KVGhhbmtzIFJpZmFhdCBmb3IgdGhlIHJldmlldyBvZiB0aGlzIGRv Y3VtZW50Lg0KDQpIaSBEZWJvcmFoLCBMb3UsIFBhdmFuLA0KDQpBbnkgdGhvdWdodHMgb24gdGhl IGZvbGxvd2luZyBzdWdnZXN0aW9uPw0KDQrigJxCZWNhdXNlIHRoZSBkb2N1bWVudCBleHRlbmRz IFJGQzQwOTAsIGl0IHNob3VsZCBhZGQgIlVwZGF0ZXM6IDQwOTAiIGF0IHRoZSB0b3Agb2YgdGhl IGRvY3VtZW50LuKAnQ0KDQpUaGFua3MsDQpSYWtlc2gNCg0KDQpGcm9tOiBSaWZhYXQgU2hla2gt WXVzZWYgPHJpZmFhdC5pZXRmQGdtYWlsLmNvbTxtYWlsdG86cmlmYWF0LmlldGZAZ21haWwuY29t Pj4NCkRhdGU6IFR1ZXNkYXksIEp1bHkgNCwgMjAxNyBhdCA5OjMyIEFNDQpUbzogImRyYWZ0LWll dGYtdGVhcy1nbXBscy1sc3AtZmFzdHJlcm91dGUuYWxsQGlldGYub3JnPG1haWx0bzpkcmFmdC1p ZXRmLXRlYXMtZ21wbHMtbHNwLWZhc3RyZXJvdXRlLmFsbEBpZXRmLm9yZz4iIDxkcmFmdC1pZXRm LXRlYXMtZ21wbHMtbHNwLWZhc3RyZXJvdXRlLmFsbEBpZXRmLm9yZzxtYWlsdG86ZHJhZnQtaWV0 Zi10ZWFzLWdtcGxzLWxzcC1mYXN0cmVyb3V0ZS5hbGxAaWV0Zi5vcmc+PiwgInNlY2RpckBpZXRm Lm9yZzxtYWlsdG86c2VjZGlyQGlldGYub3JnPiIgPHNlY2RpckBpZXRmLm9yZzxtYWlsdG86c2Vj ZGlyQGlldGYub3JnPj4sIFRoZSBJRVNHIDxpZXNnQGlldGYub3JnPG1haWx0bzppZXNnQGlldGYu b3JnPj4NClN1YmplY3Q6IFtzZWNkaXJdIHNlY2RpciByZXZpZXcgb2YgZHJhZnQtaWV0Zi10ZWFz LWdtcGxzLWxzcC1mYXN0cmVyb3V0ZS0wOQ0KUmVzZW50LUZyb206IDxhbGlhcy1ib3VuY2VzQGll dGYub3JnPG1haWx0bzphbGlhcy1ib3VuY2VzQGlldGYub3JnPj4NClJlc2VudC1UbzogIj1TTVRQ Om10YWlsbG9uQGNpc2NvLiBjb20iIDxtdGFpbGxvbkBjaXNjby5jb208bWFpbHRvOm10YWlsbG9u QGNpc2NvLmNvbT4+LCA8dHNhYWRAY2lzY28uY29tPG1haWx0bzp0c2FhZEBjaXNjby5jb20+Piwg Ij1TTVRQOnJnYW5kaGlAY2lzY28uIGNvbSIgPHJnYW5kaGlAY2lzY28uY29tPG1haWx0bzpyZ2Fu ZGhpQGNpc2NvLmNvbT4+LCBaYWZhciBBbGkgPHphbGlAY2lzY28uY29tPG1haWx0bzp6YWxpQGNp c2NvLmNvbT4+LCA8bWFuYXYuYmhhdGlhQG5va2lhLmNvbTxtYWlsdG86bWFuYXYuYmhhdGlhQG5v a2lhLmNvbT4+LCA8bWhhcnRsZXlAY2lzY28uY29tPG1haWx0bzptaGFydGxleUBjaXNjby5jb20+ PiwgTG91IEJlcmdlciA8bGJlcmdlckBsYWJuLm5ldDxtYWlsdG86bGJlcmdlckBsYWJuLm5ldD4+ LCA8dmJlZXJhbUBqdW5pcGVyLm5ldDxtYWlsdG86dmJlZXJhbUBqdW5pcGVyLm5ldD4+LCA8YXJl dGFuYUBjaXNjby5jb208bWFpbHRvOmFyZXRhbmFAY2lzY28uY29tPj4sIERFQk9SQUggQlJVTkdB UkQgPGRiMzU0NkBhdHQuY29tPG1haWx0bzpkYjM1NDZAYXR0LmNvbT4+LCA8YWthdGxhc0BnbWFp bC5jb208bWFpbHRvOmFrYXRsYXNAZ21haWwuY29tPj4NClJlc2VudC1EYXRlOiBUdWVzZGF5LCBK dWx5IDQsIDIwMTcgYXQgOTo0MCBBTQ0KDQpJIGhhdmUgcmV2aWV3ZWQgdGhpcyBkb2N1bWVudCBh cyBwYXJ0IG9mIHRoZSBzZWN1cml0eSBkaXJlY3RvcmF0ZSdzDQpvbmdvaW5nIGVmZm9ydCB0byBy ZXZpZXcgYWxsIElFVEYgZG9jdW1lbnRzIGJlaW5nIHByb2Nlc3NlZCBieSB0aGUNCklFU0cuICBU aGVzZSBjb21tZW50cyB3ZXJlIHdyaXR0ZW4gcHJpbWFyaWx5IGZvciB0aGUgYmVuZWZpdCBvZiB0 aGUNCnNlY3VyaXR5IGFyZWEgZGlyZWN0b3JzLiAgRG9jdW1lbnQgZWRpdG9ycyBhbmQgV0cgY2hh aXJzIHNob3VsZCB0cmVhdA0KdGhlc2UgY29tbWVudHMganVzdCBsaWtlIGFueSBvdGhlciBsYXN0 IGNhbGwgY29tbWVudHMuDQoNClN1bW1hcnk6IFJlYWR5IHdpdGggTml0cw0KDQoNCkkgZGlkIG5v dCBoYXZlIGVub3VnaCBiYWNrZ3JvdW5kIG9uIE1MUFMgYW5kIEdNUExTIGFuZCB0aGVpciByZWxh dGVkIFJGQ3MsDQpzbyBJIGhhZCB0byBkbyBzb21lIHJlYWRpbmcgdG8gZ2V0IHNvbWUgZmFtaWxp YXJpdHkgd2l0aCB0aGlzIHN1YmplY3QgdG8gYmUNCmFibGUgdG8gcHJvdmlkZSBzb21lIHJlYXNv bmFibGUgcmV2aWV3IG9mIHRoaXMgZG9jdW1lbnQuDQoNClRoaXMgZG9jdW1lbnQgYnVpbGRzIG9u IGFuIGV4aXN0aW5nIG1lY2hhbmlzbSwgIkZhc3QgUmVyb3V0ZSBFeHRlbnNpb25zIHRvDQpSU1ZQ LVRFIGZvciBMU1AgVHVubmVscyIgZGVmaW5lZCBpbiBSRkM0MDkwLCB3aGljaCBkZWZpbmVzIGEg bWVjaGFuaXNtIHRvDQplc3RhYmxpc2ggYSBiYWNrdXAgdHVubmVscyBmb3IgbG9jYWwgTFNQIHR1 bm5lbHMuIE9uZSBsaW1pdGF0aW9uIG9mIHRoZQ0KZXhpc3RpbmcgbWVjaGFuaXNtIGlzIHRoYXQg aW4gc29tZSBzaXR1YXRpb25zIGl0IG1pZ2h0IGFzc2lnbiBkaWZmZXJlbnQNCnVuaS1kaXJlY3Rp b25hbCBieXBhc3MgdHVubmVscyBmb3IgdGhlIGZvcndhcmQgYW5kIHJldmVyc2UgZGlyZWN0aW9u cy4NCg0KVGhpcyBkb2N1bWVudCBleHRlbmRzIHRoZSBtZWNoYW5pc20gZGVmaW5lZCBpbiBSRkM0 MDkwLCBieSBhZGRpbmcgYSBuZXcNCkJZUEFTU19BU1NJR05NRU5UIHN1Ym9iamVjdCB0byB0aGUg ZXhpc3RpbmcgUkVDT1JEX1JPVVRFIE9iamVjdCAoUlJPKSB1c2VkDQppbiBQQVRIIGFuZCBSRVNW IHJlcXVlc3RzLCB0byBhbGxvdyB0aGUgZXN0YWJsaXNobWVudCBvZiBhIGJpLWRpcmVjdGlvbmFs DQpieXBhc3MgdHVubmVsLg0KDQpUaGUgc2VjdXJpdHkgb2YgdGhlIGV4aXN0aW5nIG1lY2hhbmlz bSBzdGlsbCBhcHBsaWVzIHdpdGggdGhlIG5ldyBtZWNoYW5pc20sDQphbmQgdGhlIHNlY3VyaXR5 IHNlY3Rpb24gZGlzY3Vzc2VzIHRoZSBpbXBsaWNhdGlvbnMgb2YgdGhlIG5ldyBzdWJvYmplY3Qg YW5kDQp0aGUgbmV3IGVycm9yIGFzc29jaWF0ZWQgd2l0aCB0aGF0LCB3aGljaCBzZWVtcyByZWFz b25hYmxlLg0KDQpUaGUgZG9jdW1lbnQgYWxzbyBwb2ludHMgdG8gYW4gTVBMUy9HTVBMUyBTZWN1 cml0eSBGcmFtZXdvcmsgKFJGQzU5MjApDQpkb2N1bWVudCB0aGF0IGhhcyBhbiBleHRlbnNpdmUg ZGlzY3Vzc2lvbiBvZiB0aGUgc2VjdXJpdHkgb2YgTVBMUy9HTVBMUw0KbmV0d29yayBpbiBnZW5l cmFsIHRoYXQgYWxzbyBhcHBsaWVzIHRvIHRoaXMgZG9jdW1lbnQuDQoNCg0KTml0cw0KDQpCZWNh dXNlIHRoZSBkb2N1bWVudCBleHRlbmRzIFJGQzQwOTAsIGl0IHNob3VsZCBhZGQgIlVwZGF0ZXM6 IDQwOTAiIGF0IHRoZQ0KdG9wIG9mIHRoZSBkb2N1bWVudC4NCg0KUmVnYXJkcywNCiBSaWZhYXQN Cg0K --_000_B8956E3352254C8CA2A56BEA8055EE03ciscocom_ Content-Type: text/html; charset="utf-8" Content-ID: Content-Transfer-Encoding: base64 PGh0bWwgeG1sbnM6bz0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6b2ZmaWNlIiB4 bWxuczp3PSJ1cm46c2NoZW1hcy1taWNyb3NvZnQtY29tOm9mZmljZTp3b3JkIiB4bWxuczptPSJo dHRwOi8vc2NoZW1hcy5taWNyb3NvZnQuY29tL29mZmljZS8yMDA0LzEyL29tbWwiIHhtbG5zPSJo dHRwOi8vd3d3LnczLm9yZy9UUi9SRUMtaHRtbDQwIj4NCjxoZWFkPg0KPG1ldGEgaHR0cC1lcXVp dj0iQ29udGVudC1UeXBlIiBjb250ZW50PSJ0ZXh0L2h0bWw7IGNoYXJzZXQ9dXRmLTgiPg0KPG1l dGEgbmFtZT0iVGl0bGUiIGNvbnRlbnQ9IiI+DQo8bWV0YSBuYW1lPSJLZXl3b3JkcyIgY29udGVu dD0iIj4NCjxtZXRhIG5hbWU9IkdlbmVyYXRvciIgY29udGVudD0iTWljcm9zb2Z0IFdvcmQgMTUg KGZpbHRlcmVkIG1lZGl1bSkiPg0KPHN0eWxlPjwhLS0NCi8qIEZvbnQgRGVmaW5pdGlvbnMgKi8N CkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6IkNvdXJpZXIgTmV3IjsNCglwYW5vc2UtMToyIDcg MyA5IDIgMiA1IDIgNCA0O30NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6IkNhbWJyaWEgTWF0 aCI7DQoJcGFub3NlLTE6MiA0IDUgMyA1IDQgNiAzIDIgNDt9DQpAZm9udC1mYWNlDQoJe2ZvbnQt ZmFtaWx5OkNhbGlicmk7DQoJcGFub3NlLTE6MiAxNSA1IDIgMiAyIDQgMyAyIDQ7fQ0KLyogU3R5 bGUgRGVmaW5pdGlvbnMgKi8NCnAuTXNvTm9ybWFsLCBsaS5Nc29Ob3JtYWwsIGRpdi5Nc29Ob3Jt YWwNCgl7bWFyZ2luOjBjbTsNCgltYXJnaW4tYm90dG9tOi4wMDAxcHQ7DQoJZm9udC1zaXplOjEy LjBwdDsNCglmb250LWZhbWlseToiVGltZXMgTmV3IFJvbWFuIjt9DQphOmxpbmssIHNwYW4uTXNv SHlwZXJsaW5rDQoJe21zby1zdHlsZS1wcmlvcml0eTo5OTsNCgljb2xvcjojMDU2M0MxOw0KCXRl eHQtZGVjb3JhdGlvbjp1bmRlcmxpbmU7fQ0KYTp2aXNpdGVkLCBzcGFuLk1zb0h5cGVybGlua0Zv bGxvd2VkDQoJe21zby1zdHlsZS1wcmlvcml0eTo5OTsNCgljb2xvcjojOTU0RjcyOw0KCXRleHQt ZGVjb3JhdGlvbjp1bmRlcmxpbmU7fQ0KcHJlDQoJe21zby1zdHlsZS1wcmlvcml0eTo5OTsNCglt c28tc3R5bGUtbGluazoiSFRNTCBQcmVmb3JtYXR0ZWQgQ2hhciI7DQoJbWFyZ2luOjBjbTsNCglt YXJnaW4tYm90dG9tOi4wMDAxcHQ7DQoJZm9udC1zaXplOjEwLjBwdDsNCglmb250LWZhbWlseToi Q291cmllciBOZXciO30NCnNwYW4uSFRNTFByZWZvcm1hdHRlZENoYXINCgl7bXNvLXN0eWxlLW5h bWU6IkhUTUwgUHJlZm9ybWF0dGVkIENoYXIiOw0KCW1zby1zdHlsZS1wcmlvcml0eTo5OTsNCglt c28tc3R5bGUtbGluazoiSFRNTCBQcmVmb3JtYXR0ZWQiOw0KCWZvbnQtZmFtaWx5OkNvdXJpZXI7 fQ0Kc3Bhbi5FbWFpbFN0eWxlMTkNCgl7bXNvLXN0eWxlLXR5cGU6cGVyc29uYWw7DQoJZm9udC1m YW1pbHk6Q2FsaWJyaTsNCgljb2xvcjp3aW5kb3d0ZXh0O30NCnNwYW4uRW1haWxTdHlsZTIwDQoJ e21zby1zdHlsZS10eXBlOnBlcnNvbmFsOw0KCWZvbnQtZmFtaWx5OkNhbGlicmk7DQoJY29sb3I6 d2luZG93dGV4dDt9DQpzcGFuLkVtYWlsU3R5bGUyMQ0KCXttc28tc3R5bGUtdHlwZTpwZXJzb25h bDsNCglmb250LWZhbWlseTpDYWxpYnJpOw0KCWNvbG9yOiMxRjQ5N0Q7fQ0Kc3Bhbi5FbWFpbFN0 eWxlMjINCgl7bXNvLXN0eWxlLXR5cGU6cGVyc29uYWwtcmVwbHk7DQoJZm9udC1mYW1pbHk6Q2Fs aWJyaTsNCgljb2xvcjp3aW5kb3d0ZXh0O30NCnNwYW4ubXNvSW5zDQoJe21zby1zdHlsZS10eXBl OmV4cG9ydC1vbmx5Ow0KCW1zby1zdHlsZS1uYW1lOiIiOw0KCXRleHQtZGVjb3JhdGlvbjp1bmRl cmxpbmU7DQoJY29sb3I6dGVhbDt9DQouTXNvQ2hwRGVmYXVsdA0KCXttc28tc3R5bGUtdHlwZTpl eHBvcnQtb25seTsNCglmb250LXNpemU6MTAuMHB0O30NCkBwYWdlIFdvcmRTZWN0aW9uMQ0KCXtz aXplOjYxMi4wcHQgNzkyLjBwdDsNCgltYXJnaW46NzIuMHB0IDcyLjBwdCA3Mi4wcHQgNzIuMHB0 O30NCmRpdi5Xb3JkU2VjdGlvbjENCgl7cGFnZTpXb3JkU2VjdGlvbjE7fQ0KLS0+PC9zdHlsZT4N CjwvaGVhZD4NCjxib2R5IGJnY29sb3I9IndoaXRlIiBsYW5nPSJFTi1VUyIgbGluaz0iIzA1NjND MSIgdmxpbms9IiM5NTRGNzIiPg0KPGRpdiBjbGFzcz0iV29yZFNlY3Rpb24xIj4NCjxwIGNsYXNz PSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OkNh bGlicmkiPkhpIERlYm9yYWgsDQo8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTpDYWxpYnJp Ij48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3Bh biBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTpDYWxpYnJpIj5UaGFuayB5b3Ug Zm9yIHlvdXIgc3VnZ2VzdGlvbnMuIFdpbGwgdXBkYXRlIHRoZSBkb2N1bWVudCBhY2NvcmRpbmds eS48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHls ZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTpDYWxpYnJpIj48bzpwPiZuYnNwOzwvbzpw Pjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXpl OjExLjBwdDtmb250LWZhbWlseTpDYWxpYnJpIj5UaGFua3MsPG86cD48L286cD48L3NwYW4+PC9w Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9u dC1mYW1pbHk6Q2FsaWJyaSI+UmFrZXNoPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9 Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6Q2Fs aWJyaSI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+ PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6Q2FsaWJyaSI+PG86cD4m bmJzcDs8L286cD48L3NwYW4+PC9wPg0KPGRpdiBzdHlsZT0iYm9yZGVyOm5vbmU7Ym9yZGVyLXRv cDpzb2xpZCAjQjVDNERGIDEuMHB0O3BhZGRpbmc6My4wcHQgMGNtIDBjbSAwY20iPg0KPHAgY2xh c3M9Ik1zb05vcm1hbCI+PGI+PHNwYW4gc3R5bGU9ImZvbnQtZmFtaWx5OkNhbGlicmk7Y29sb3I6 YmxhY2siPkZyb206IDwvc3Bhbj4NCjwvYj48c3BhbiBzdHlsZT0iZm9udC1mYW1pbHk6Q2FsaWJy aTtjb2xvcjpibGFjayI+REVCT1JBSCBCUlVOR0FSRCAmbHQ7ZGIzNTQ2QGF0dC5jb20mZ3Q7PGJy Pg0KPGI+RGF0ZTogPC9iPlR1ZXNkYXksIEp1bHkgMTEsIDIwMTcgYXQgNzoyNSBBTTxicj4NCjxi PlRvOiA8L2I+JnF1b3Q7PVNNVFA6cmdhbmRoaUBjaXNjby4gY29tJnF1b3Q7ICZsdDtyZ2FuZGhp QGNpc2NvLmNvbSZndDssIFZpc2hudSBQYXZhbiBCZWVyYW0gJmx0O3ZiZWVyYW1AanVuaXBlci5u ZXQmZ3Q7LCBSaWZhYXQgU2hla2gtWXVzZWYgJmx0O3JpZmFhdC5pZXRmQGdtYWlsLmNvbSZndDss ICZxdW90O2RyYWZ0LWlldGYtdGVhcy1nbXBscy1sc3AtZmFzdHJlcm91dGUuYWxsQGlldGYub3Jn JnF1b3Q7ICZsdDtkcmFmdC1pZXRmLXRlYXMtZ21wbHMtbHNwLWZhc3RyZXJvdXRlLmFsbEBpZXRm Lm9yZyZndDssICZxdW90O3NlY2RpckBpZXRmLm9yZyZxdW90Ow0KICZsdDtzZWNkaXJAaWV0Zi5v cmcmZ3Q7LCBUaGUgSUVTRyAmbHQ7aWVzZ0BpZXRmLm9yZyZndDs8YnI+DQo8Yj5DYzogPC9iPkxv dSBCZXJnZXIgJmx0O2xiZXJnZXJAbGFibi5uZXQmZ3Q7LCAmcXVvdDtFWFQtdmlzaG51cGF2YW5A Z21haWwuY29tJnF1b3Q7ICZsdDt2aXNobnVwYXZhbkBnbWFpbC5jb20mZ3Q7PGJyPg0KPGI+U3Vi amVjdDogPC9iPlJFOiBbc2VjZGlyXSBzZWNkaXIgcmV2aWV3IG9mIGRyYWZ0LWlldGYtdGVhcy1n bXBscy1sc3AtZmFzdHJlcm91dGUtMDk8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxk aXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjwvZGl2Pg0K PHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1m YW1pbHk6Q2FsaWJyaTtjb2xvcjojMUY0OTdEIj5IaSBSYWtlc2gsIGFsbCw8L3NwYW4+PG86cD48 L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEx LjBwdDtmb250LWZhbWlseTpDYWxpYnJpO2NvbG9yOiMxRjQ5N0QiPihJIHdhcyBvbiB2YWNhdGlv biBsYXN0IHdlZWs6LSkpPC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1h bCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6Q2FsaWJyaTtjb2xv cjojMUY0OTdEIj4mbmJzcDs8L3NwYW4+PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9y bWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTpDYWxpYnJpO2Nv bG9yOiMxRjQ5N0QiPkkgbGVhbiB0b3dhcmRzIGEgc29tZXdoYXQgc3RyaWN0IGludGVycHJldGF0 aW9uIG9mIOKAnHVwZGF0ZeKAnSwgb3RoZXJ3aXNlIGltcGxlbWVudGVycyBuZWVkIHRvIGJyb3dz ZSBhbGwgdGhlIHVwZGF0ZXMgdG8gc2VlIHdoYXQgaXMgYXBwcm9wcmlhdGUuIE9uIHRoaXMsIGl0 IGlzIG1vcmUgdGhhbiBleHRlbnNpb24sDQogaXQgZGVmaW5pdGVseSBpbXByb3ZlcyBhbiBpbXBs ZW1lbnRhdGlvbiwgc28gaXQgc2hvdWxkIGJlIGFuIOKAnHVwZGF0ZeKAnS48L3NwYW4+PG86cD48 L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEx LjBwdDtmb250LWZhbWlseTpDYWxpYnJpO2NvbG9yOiMxRjQ5N0QiPiZuYnNwOzwvc3Bhbj48bzpw PjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6 MTEuMHB0O2ZvbnQtZmFtaWx5OkNhbGlicmk7Y29sb3I6IzFGNDk3RCI+QXV0aG9ycyDigJMgd2hl biBkbyB0aGUgbmV4dCB1cGRhdGUgLSByZXdvcmQg4oCcVGhpcyBkb2N1bWVudCBleHRlbmRzIHRo ZSBtZWNoYW5pc20gLi7igJ0gdG8g4oCcVGhpcyBkb2N1bWVudCB1cGRhdGVzIHRoZSBtZWNoYW5p c20gLi7igJ0uPC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNw YW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6Q2FsaWJyaTtjb2xvcjojMUY0 OTdEIj4mbmJzcDs8L3NwYW4+PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48 c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTpDYWxpYnJpO2NvbG9yOiMx RjQ5N0QiPlRoYW5rcyBSaWZhYXQg4oCTIGdyZWF0IGNvbW1lbnQtPC9zcGFuPjxvOnA+PC9vOnA+ PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7 Zm9udC1mYW1pbHk6Q2FsaWJyaTtjb2xvcjojMUY0OTdEIj5EZWJvcmFoPC9zcGFuPjxvOnA+PC9v OnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4w cHQ7Zm9udC1mYW1pbHk6Q2FsaWJyaTtjb2xvcjojMUY0OTdEIj4mbmJzcDs8L3NwYW4+PG86cD48 L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEx LjBwdDtmb250LWZhbWlseTpDYWxpYnJpO2NvbG9yOiMxRjQ5N0QiPiZuYnNwOzwvc3Bhbj48bzpw PjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6 MTEuMHB0O2ZvbnQtZmFtaWx5OkNhbGlicmk7Y29sb3I6IzFGNDk3RCI+Jm5ic3A7PC9zcGFuPjxv OnA+PC9vOnA+PC9wPg0KPGRpdiBzdHlsZT0iYm9yZGVyOm5vbmU7Ym9yZGVyLWxlZnQ6c29saWQg Ymx1ZSAxLjVwdDtwYWRkaW5nOjBjbSAwY20gMGNtIDQuMHB0Ij4NCjxkaXY+DQo8ZGl2IHN0eWxl PSJib3JkZXI6bm9uZTtib3JkZXItdG9wOnNvbGlkICNFMUUxRTEgMS4wcHQ7cGFkZGluZzozLjBw dCAwY20gMGNtIDBjbSI+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48Yj48c3BhbiBzdHlsZT0iZm9u dC1zaXplOjExLjBwdDtmb250LWZhbWlseTpDYWxpYnJpIj5Gcm9tOjwvc3Bhbj48L2I+PHNwYW4g c3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6Q2FsaWJyaSI+IFJha2VzaCBHYW5k aGkgKHJnYW5kaGkpIFttYWlsdG86cmdhbmRoaUBjaXNjby5jb21dDQo8YnI+DQo8Yj5TZW50Ojwv Yj4gVGh1cnNkYXksIEp1bHkgMDYsIDIwMTcgMTE6MzEgQU08YnI+DQo8Yj5Ubzo8L2I+IFZpc2hu dSBQYXZhbiBCZWVyYW0gJmx0O3ZiZWVyYW1AanVuaXBlci5uZXQmZ3Q7OyBSaWZhYXQgU2hla2gt WXVzZWYgJmx0O3JpZmFhdC5pZXRmQGdtYWlsLmNvbSZndDs7IGRyYWZ0LWlldGYtdGVhcy1nbXBs cy1sc3AtZmFzdHJlcm91dGUuYWxsQGlldGYub3JnOyBzZWNkaXJAaWV0Zi5vcmc7IFRoZSBJRVNH ICZsdDtpZXNnQGlldGYub3JnJmd0Ozxicj4NCjxiPkNjOjwvYj4gQlJVTkdBUkQsIERFQk9SQUgg QSAmbHQ7ZGIzNTQ2QGF0dC5jb20mZ3Q7OyBMb3UgQmVyZ2VyICZsdDtsYmVyZ2VyQGxhYm4ubmV0 Jmd0OzsgRVhULXZpc2hudXBhdmFuQGdtYWlsLmNvbSAmbHQ7dmlzaG51cGF2YW5AZ21haWwuY29t Jmd0Ozxicj4NCjxiPlN1YmplY3Q6PC9iPiBSZTogW3NlY2Rpcl0gc2VjZGlyIHJldmlldyBvZiBk cmFmdC1pZXRmLXRlYXMtZ21wbHMtbHNwLWZhc3RyZXJvdXRlLTA5PC9zcGFuPjxvOnA+PC9vOnA+ PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPiZuYnNwOzxvOnA+PC9v OnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4w cHQ7Zm9udC1mYW1pbHk6Q2FsaWJyaSI+VGhhbmtzIFBhdmFuLjwvc3Bhbj48bzpwPjwvbzpwPjwv cD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2Zv bnQtZmFtaWx5OkNhbGlicmkiPiZuYnNwOzwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNz PSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OkNh bGlicmkiPkhpIERlYm9yYWgsPC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05v cm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6Q2FsaWJyaSI+ UGxlYXNlIGxldCB1cyBrbm93IGlmIHlvdSBhcmUgT0sgd2l0aCB0aGUgc3VnZ2VzdGlvbi48L3Nw YW4+PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9u dC1zaXplOjExLjBwdDtmb250LWZhbWlseTpDYWxpYnJpIj4mbmJzcDs8L3NwYW4+PG86cD48L286 cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBw dDtmb250LWZhbWlseTpDYWxpYnJpIj7igJxCZWNhdXNlIHRoZSBkb2N1bWVudCBleHRlbmRzIFJG QzQwOTAsIGl0IHNob3VsZCBhZGQgJnF1b3Q7VXBkYXRlczogNDA5MCZxdW90OyBhdCB0aGUgdG9w IG9mIHRoZSBkb2N1bWVudC7igJ08L3NwYW4+PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTpDYWxpYnJp Ij4mbmJzcDs8L3NwYW4+PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3Bh biBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTpDYWxpYnJpIj5UaGFua3MsPC9z cGFuPjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZv bnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6Q2FsaWJyaSI+UmFrZXNoPC9zcGFuPjxvOnA+PC9v OnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4w cHQ7Zm9udC1mYW1pbHk6Q2FsaWJyaSI+Jm5ic3A7PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1p bHk6Q2FsaWJyaSI+Jm5ic3A7PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05v cm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6Q2FsaWJyaSI+ Jm5ic3A7PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPGRpdiBzdHlsZT0iYm9yZGVyOm5vbmU7Ym9y ZGVyLXRvcDpzb2xpZCAjQjVDNERGIDEuMHB0O3BhZGRpbmc6My4wcHQgMGNtIDBjbSAwY20iPg0K PHAgY2xhc3M9Ik1zb05vcm1hbCI+PGI+PHNwYW4gc3R5bGU9ImZvbnQtZmFtaWx5OkNhbGlicmk7 Y29sb3I6YmxhY2siPkZyb206IDwvc3Bhbj4NCjwvYj48c3BhbiBzdHlsZT0iZm9udC1mYW1pbHk6 Q2FsaWJyaTtjb2xvcjpibGFjayI+VmlzaG51IFBhdmFuIEJlZXJhbSAmbHQ7PGEgaHJlZj0ibWFp bHRvOnZiZWVyYW1AanVuaXBlci5uZXQiPnZiZWVyYW1AanVuaXBlci5uZXQ8L2E+Jmd0Ozxicj4N CjxiPkRhdGU6IDwvYj5UdWVzZGF5LCBKdWx5IDQsIDIwMTcgYXQgMTE6MzggQU08YnI+DQo8Yj5U bzogPC9iPiZxdW90Oz1TTVRQOnJnYW5kaGlAY2lzY28uIGNvbSZxdW90OyAmbHQ7PGEgaHJlZj0i bWFpbHRvOnJnYW5kaGlAY2lzY28uY29tIj5yZ2FuZGhpQGNpc2NvLmNvbTwvYT4mZ3Q7LCBSaWZh YXQgU2hla2gtWXVzZWYgJmx0OzxhIGhyZWY9Im1haWx0bzpyaWZhYXQuaWV0ZkBnbWFpbC5jb20i PnJpZmFhdC5pZXRmQGdtYWlsLmNvbTwvYT4mZ3Q7LCAmcXVvdDs8YSBocmVmPSJtYWlsdG86ZHJh ZnQtaWV0Zi10ZWFzLWdtcGxzLWxzcC1mYXN0cmVyb3V0ZS5hbGxAaWV0Zi5vcmciPmRyYWZ0LWll dGYtdGVhcy1nbXBscy1sc3AtZmFzdHJlcm91dGUuYWxsQGlldGYub3JnPC9hPiZxdW90Ow0KICZs dDs8YSBocmVmPSJtYWlsdG86ZHJhZnQtaWV0Zi10ZWFzLWdtcGxzLWxzcC1mYXN0cmVyb3V0ZS5h bGxAaWV0Zi5vcmciPmRyYWZ0LWlldGYtdGVhcy1nbXBscy1sc3AtZmFzdHJlcm91dGUuYWxsQGll dGYub3JnPC9hPiZndDssICZxdW90OzxhIGhyZWY9Im1haWx0bzpzZWNkaXJAaWV0Zi5vcmciPnNl Y2RpckBpZXRmLm9yZzwvYT4mcXVvdDsgJmx0OzxhIGhyZWY9Im1haWx0bzpzZWNkaXJAaWV0Zi5v cmciPnNlY2RpckBpZXRmLm9yZzwvYT4mZ3Q7LCBUaGUgSUVTRyAmbHQ7PGEgaHJlZj0ibWFpbHRv Omllc2dAaWV0Zi5vcmciPmllc2dAaWV0Zi5vcmc8L2E+Jmd0Ozxicj4NCjxiPkNjOiA8L2I+REVC T1JBSCBCUlVOR0FSRCAmbHQ7PGEgaHJlZj0ibWFpbHRvOmRiMzU0NkBhdHQuY29tIj5kYjM1NDZA YXR0LmNvbTwvYT4mZ3Q7LCBMb3UgQmVyZ2VyICZsdDs8YSBocmVmPSJtYWlsdG86bGJlcmdlckBs YWJuLm5ldCI+bGJlcmdlckBsYWJuLm5ldDwvYT4mZ3Q7LCAmcXVvdDs8YSBocmVmPSJtYWlsdG86 RVhULXZpc2hudXBhdmFuQGdtYWlsLmNvbSI+RVhULXZpc2hudXBhdmFuQGdtYWlsLmNvbTwvYT4m cXVvdDsgJmx0OzxhIGhyZWY9Im1haWx0bzp2aXNobnVwYXZhbkBnbWFpbC5jb20iPnZpc2hudXBh dmFuQGdtYWlsLmNvbTwvYT4mZ3Q7PGJyPg0KPGI+U3ViamVjdDogPC9iPlJlOiBbc2VjZGlyXSBz ZWNkaXIgcmV2aWV3IG9mIGRyYWZ0LWlldGYtdGVhcy1nbXBscy1sc3AtZmFzdHJlcm91dGUtMDk8 L3NwYW4+PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFs Ij4mbmJzcDs8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxkaXY+DQo8cCBjbGFzcz0i TXNvTm9ybWFsIj5SYWtlc2gsIEhpITxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCI+Jm5ic3A7PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8 cCBjbGFzcz0iTXNvTm9ybWFsIj5UaGlzIGlzIGEgdmFsaWQgY29tbWVudC4gJmx0O0dNUExTLUxT UC1GUlImZ3Q7IGRvZXNu4oCZdCBtb2RpZnkgYW55IG9mIHRoZSBleGlzdGluZyBwcm9jZWR1cmVz IGRlZmluZWQgaW4gUkZDNDA5MCwgYnV0IGl0IGRvZXMgc3VwcGxlbWVudCBpdC4gQXMgcGVyIFJG QzIyMjMsIHRoaXMgaXMgc3VmZmljaWVudCBncm91bmRzIHRvIHNldCB0aGUg4oCcVXBkYXRlc+KA nSBmaWVsZC48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3Jt YWwiPiZuYnNwOzxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05v cm1hbCI+Q291cnRlc3kgUkZDMjIyMzo8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxw cmU+Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7IFRvIGJlIHVzZWQgYXMgYSByZWZlcmVu Y2UgZnJvbSBhIG5ldyBpdGVtIHRoYXQgY2Fubm90IGJlIHVzZWQ8bzpwPjwvbzpwPjwvcHJlPg0K PHByZT4mbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsgYWxvbmUgKGkuZS4sIG9uZSB0aGF0 IHN1cHBsZW1lbnRzIGEgcHJldmlvdXMgZG9jdW1lbnQpLCB0byByZWZlcjxvOnA+PC9vOnA+PC9w cmU+DQo8cHJlPiZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyB0byB0aGUgcHJldmlvdXMg ZG9jdW1lbnQuJm5ic3A7IFRoZSBuZXdlciBwdWJsaWNhdGlvbiBpcyBhIHBhcnQgdGhhdDxvOnA+ PC9vOnA+PC9wcmU+DQo8cHJlPiZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyB3aWxsIHN1 cHBsZW1lbnQgb3IgYmUgYWRkZWQgb24gdG8gdGhlIGV4aXN0aW5nIGRvY3VtZW50OyBlLmcuLCBh bjxvOnA+PC9vOnA+PC9wcmU+DQo8cHJlPiZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyBh ZGRlbmR1bSwgb3Igc2VwYXJhdGUsIGV4dHJhIGluZm9ybWF0aW9uIHRoYXQgaXMgdG8gYmUgYWRk ZWQgdG88bzpwPjwvbzpwPjwvcHJlPg0KPHByZT4mbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJz cDsgdGhlIG9yaWdpbmFsIGRvY3VtZW50LjxvOnA+PC9vOnA+PC9wcmU+DQo8L2Rpdj4NCjwvZGl2 Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPkBEZWJvcmFoIOKAlCBBcmUgeW91IG9rIHdp dGggdGhpcz88bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3Jt YWwiPlJlZ2FyZHMsPG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIj4tUGF2YW48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJN c29Ob3JtYWwiPiZuYnNwOzxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2IHN0eWxlPSJib3Jk ZXI6bm9uZTtib3JkZXItdG9wOnNvbGlkICNCNUM0REYgMS4wcHQ7cGFkZGluZzozLjBwdCAwY20g MGNtIDBjbSI+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48Yj48c3BhbiBzdHlsZT0iZm9udC1mYW1p bHk6Q2FsaWJyaTtjb2xvcjpibGFjayI+RnJvbTogPC9zcGFuPg0KPC9iPjxzcGFuIHN0eWxlPSJm b250LWZhbWlseTpDYWxpYnJpO2NvbG9yOmJsYWNrIj4mcXVvdDtSYWtlc2ggR2FuZGhpIChyZ2Fu ZGhpKSZxdW90OyAmbHQ7PGEgaHJlZj0ibWFpbHRvOnJnYW5kaGlAY2lzY28uY29tIj5yZ2FuZGhp QGNpc2NvLmNvbTwvYT4mZ3Q7PGJyPg0KPGI+RGF0ZTogPC9iPlR1ZXNkYXksIEp1bHkgNCwgMjAx NyBhdCAxMDo1NSBBTTxicj4NCjxiPlRvOiA8L2I+UmlmYWF0IFNoZWtoLVl1c2VmICZsdDs8YSBo cmVmPSJtYWlsdG86cmlmYWF0LmlldGZAZ21haWwuY29tIj5yaWZhYXQuaWV0ZkBnbWFpbC5jb208 L2E+Jmd0OywgJnF1b3Q7PGEgaHJlZj0ibWFpbHRvOmRyYWZ0LWlldGYtdGVhcy1nbXBscy1sc3At ZmFzdHJlcm91dGUuYWxsQGlldGYub3JnIj5kcmFmdC1pZXRmLXRlYXMtZ21wbHMtbHNwLWZhc3Ry ZXJvdXRlLmFsbEBpZXRmLm9yZzwvYT4mcXVvdDsgJmx0OzxhIGhyZWY9Im1haWx0bzpkcmFmdC1p ZXRmLXRlYXMtZ21wbHMtbHNwLWZhc3RyZXJvdXRlLmFsbEBpZXRmLm9yZyI+ZHJhZnQtaWV0Zi10 ZWFzLWdtcGxzLWxzcC1mYXN0cmVyb3V0ZS5hbGxAaWV0Zi5vcmc8L2E+Jmd0OywNCiAmcXVvdDs8 YSBocmVmPSJtYWlsdG86c2VjZGlyQGlldGYub3JnIj5zZWNkaXJAaWV0Zi5vcmc8L2E+JnF1b3Q7 ICZsdDs8YSBocmVmPSJtYWlsdG86c2VjZGlyQGlldGYub3JnIj5zZWNkaXJAaWV0Zi5vcmc8L2E+ Jmd0OywgVGhlIElFU0cgJmx0OzxhIGhyZWY9Im1haWx0bzppZXNnQGlldGYub3JnIj5pZXNnQGll dGYub3JnPC9hPiZndDs8YnI+DQo8Yj5DYzogPC9iPkRFQk9SQUggQlJVTkdBUkQgJmx0OzxhIGhy ZWY9Im1haWx0bzpkYjM1NDZAYXR0LmNvbSI+ZGIzNTQ2QGF0dC5jb208L2E+Jmd0OywgTG91IEJl cmdlciAmbHQ7PGEgaHJlZj0ibWFpbHRvOmxiZXJnZXJAbGFibi5uZXQiPmxiZXJnZXJAbGFibi5u ZXQ8L2E+Jmd0OywgJnF1b3Q7PGEgaHJlZj0ibWFpbHRvOkVYVC12aXNobnVwYXZhbkBnbWFpbC5j b20iPkVYVC12aXNobnVwYXZhbkBnbWFpbC5jb208L2E+JnF1b3Q7ICZsdDs8YSBocmVmPSJtYWls dG86dmlzaG51cGF2YW5AZ21haWwuY29tIj52aXNobnVwYXZhbkBnbWFpbC5jb208L2E+Jmd0Ozxi cj4NCjxiPlN1YmplY3Q6IDwvYj5SZTogW3NlY2Rpcl0gc2VjZGlyIHJldmlldyBvZiBkcmFmdC1p ZXRmLXRlYXMtZ21wbHMtbHNwLWZhc3RyZXJvdXRlLTA5PGJyPg0KPGI+UmVzZW50LUZyb206IDwv Yj4mbHQ7PGEgaHJlZj0ibWFpbHRvOmFsaWFzLWJvdW5jZXNAaWV0Zi5vcmciPmFsaWFzLWJvdW5j ZXNAaWV0Zi5vcmc8L2E+Jmd0Ozxicj4NCjxiPlJlc2VudC1UbzogPC9iPiZsdDs8YSBocmVmPSJt YWlsdG86bXRhaWxsb25AY2lzY28uY29tIj5tdGFpbGxvbkBjaXNjby5jb208L2E+Jmd0OywgJmx0 OzxhIGhyZWY9Im1haWx0bzp0c2FhZEBjaXNjby5jb20iPnRzYWFkQGNpc2NvLmNvbTwvYT4mZ3Q7 LCAmbHQ7PGEgaHJlZj0ibWFpbHRvOnJnYW5kaGlAY2lzY28uY29tIj5yZ2FuZGhpQGNpc2NvLmNv bTwvYT4mZ3Q7LCBaYWZhciBBbGkgJmx0OzxhIGhyZWY9Im1haWx0bzp6YWxpQGNpc2NvLmNvbSI+ emFsaUBjaXNjby5jb208L2E+Jmd0OywNCiAmbHQ7PGEgaHJlZj0ibWFpbHRvOm1hbmF2LmJoYXRp YUBub2tpYS5jb20iPm1hbmF2LmJoYXRpYUBub2tpYS5jb208L2E+Jmd0OywgJmx0OzxhIGhyZWY9 Im1haWx0bzptaGFydGxleUBjaXNjby5jb20iPm1oYXJ0bGV5QGNpc2NvLmNvbTwvYT4mZ3Q7LCBM b3UgQmVyZ2VyICZsdDs8YSBocmVmPSJtYWlsdG86bGJlcmdlckBsYWJuLm5ldCI+bGJlcmdlckBs YWJuLm5ldDwvYT4mZ3Q7LCBWaXNobnUgUGF2YW4gQmVlcmFtICZsdDs8YSBocmVmPSJtYWlsdG86 dmJlZXJhbUBqdW5pcGVyLm5ldCI+dmJlZXJhbUBqdW5pcGVyLm5ldDwvYT4mZ3Q7LA0KICZsdDs8 YSBocmVmPSJtYWlsdG86YXJldGFuYUBjaXNjby5jb20iPmFyZXRhbmFAY2lzY28uY29tPC9hPiZn dDssICZsdDs8YSBocmVmPSJtYWlsdG86ZGIzNTQ2QGF0dC5jb20iPmRiMzU0NkBhdHQuY29tPC9h PiZndDssICZsdDs8YSBocmVmPSJtYWlsdG86YWthdGxhc0BnbWFpbC5jb20iPmFrYXRsYXNAZ21h aWwuY29tPC9hPiZndDs8YnI+DQo8Yj5SZXNlbnQtRGF0ZTogPC9iPlR1ZXNkYXksIEp1bHkgNCwg MjAxNyBhdCAxMDo1NSBBTTwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxw IGNsYXNzPSJNc29Ob3JtYWwiPiZuYnNwOzxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0K PGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LWZhbWlseTpDYWxp YnJpIj5UaGFua3MgUmlmYWF0IGZvciB0aGUgcmV2aWV3IG9mIHRoaXMgZG9jdW1lbnQuPC9zcGFu PjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQt ZmFtaWx5OkNhbGlicmkiPiZuYnNwOzwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJN c29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LWZhbWlseTpDYWxpYnJpIj5IaSBEZWJvcmFoLCBM b3UsIFBhdmFuLDwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxz cGFuIHN0eWxlPSJmb250LWZhbWlseTpDYWxpYnJpIj4mbmJzcDs8L3NwYW4+PG86cD48L286cD48 L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1mYW1pbHk6Q2FsaWJy aSI+QW55IHRob3VnaHRzIG9uIHRoZSBmb2xsb3dpbmcgc3VnZ2VzdGlvbj88L3NwYW4+PG86cD48 L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1mYW1pbHk6 Q2FsaWJyaSI+Jm5ic3A7PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1h bCI+PHNwYW4gc3R5bGU9ImZvbnQtZmFtaWx5OkNhbGlicmkiPuKAnEJlY2F1c2UgdGhlIGRvY3Vt ZW50IGV4dGVuZHMgUkZDNDA5MCwgaXQgc2hvdWxkIGFkZCAmcXVvdDtVcGRhdGVzOiA0MDkwJnF1 b3Q7IGF0IHRoZSB0b3Agb2YgdGhlIGRvY3VtZW50LuKAnTwvc3Bhbj48bzpwPjwvbzpwPjwvcD4N CjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LWZhbWlseTpDYWxpYnJpIj4m bmJzcDs8L3NwYW4+PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBz dHlsZT0iZm9udC1mYW1pbHk6Q2FsaWJyaSI+VGhhbmtzLDwvc3Bhbj48bzpwPjwvbzpwPjwvcD4N CjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LWZhbWlseTpDYWxpYnJpIj5S YWtlc2g8L3NwYW4+PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBz dHlsZT0iZm9udC1mYW1pbHk6Q2FsaWJyaSI+Jm5ic3A7PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0K PHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtZmFtaWx5OkNhbGlicmkiPiZu YnNwOzwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjxkaXYgc3R5bGU9ImJvcmRlcjpub25lO2JvcmRl ci10b3A6c29saWQgI0I1QzRERiAxLjBwdDtwYWRkaW5nOjMuMHB0IDBjbSAwY20gMGNtIj4NCjxw IGNsYXNzPSJNc29Ob3JtYWwiPjxiPjxzcGFuIHN0eWxlPSJmb250LWZhbWlseTpDYWxpYnJpO2Nv bG9yOmJsYWNrIj5Gcm9tOiA8L3NwYW4+DQo8L2I+PHNwYW4gc3R5bGU9ImZvbnQtZmFtaWx5OkNh bGlicmk7Y29sb3I6YmxhY2siPlJpZmFhdCBTaGVraC1ZdXNlZiAmbHQ7PGEgaHJlZj0ibWFpbHRv OnJpZmFhdC5pZXRmQGdtYWlsLmNvbSI+cmlmYWF0LmlldGZAZ21haWwuY29tPC9hPiZndDs8YnI+ DQo8Yj5EYXRlOiA8L2I+VHVlc2RheSwgSnVseSA0LCAyMDE3IGF0IDk6MzIgQU08YnI+DQo8Yj5U bzogPC9iPiZxdW90OzxhIGhyZWY9Im1haWx0bzpkcmFmdC1pZXRmLXRlYXMtZ21wbHMtbHNwLWZh c3RyZXJvdXRlLmFsbEBpZXRmLm9yZyI+ZHJhZnQtaWV0Zi10ZWFzLWdtcGxzLWxzcC1mYXN0cmVy b3V0ZS5hbGxAaWV0Zi5vcmc8L2E+JnF1b3Q7ICZsdDs8YSBocmVmPSJtYWlsdG86ZHJhZnQtaWV0 Zi10ZWFzLWdtcGxzLWxzcC1mYXN0cmVyb3V0ZS5hbGxAaWV0Zi5vcmciPmRyYWZ0LWlldGYtdGVh cy1nbXBscy1sc3AtZmFzdHJlcm91dGUuYWxsQGlldGYub3JnPC9hPiZndDssDQogJnF1b3Q7PGEg aHJlZj0ibWFpbHRvOnNlY2RpckBpZXRmLm9yZyI+c2VjZGlyQGlldGYub3JnPC9hPiZxdW90OyAm bHQ7PGEgaHJlZj0ibWFpbHRvOnNlY2RpckBpZXRmLm9yZyI+c2VjZGlyQGlldGYub3JnPC9hPiZn dDssIFRoZSBJRVNHICZsdDs8YSBocmVmPSJtYWlsdG86aWVzZ0BpZXRmLm9yZyI+aWVzZ0BpZXRm Lm9yZzwvYT4mZ3Q7PGJyPg0KPGI+U3ViamVjdDogPC9iPltzZWNkaXJdIHNlY2RpciByZXZpZXcg b2YgZHJhZnQtaWV0Zi10ZWFzLWdtcGxzLWxzcC1mYXN0cmVyb3V0ZS0wOTxicj4NCjxiPlJlc2Vu dC1Gcm9tOiA8L2I+Jmx0OzxhIGhyZWY9Im1haWx0bzphbGlhcy1ib3VuY2VzQGlldGYub3JnIj5h bGlhcy1ib3VuY2VzQGlldGYub3JnPC9hPiZndDs8YnI+DQo8Yj5SZXNlbnQtVG86IDwvYj4mcXVv dDs9U01UUDptdGFpbGxvbkBjaXNjby4gY29tJnF1b3Q7ICZsdDs8YSBocmVmPSJtYWlsdG86bXRh aWxsb25AY2lzY28uY29tIj5tdGFpbGxvbkBjaXNjby5jb208L2E+Jmd0OywgJmx0OzxhIGhyZWY9 Im1haWx0bzp0c2FhZEBjaXNjby5jb20iPnRzYWFkQGNpc2NvLmNvbTwvYT4mZ3Q7LCAmcXVvdDs9 U01UUDpyZ2FuZGhpQGNpc2NvLiBjb20mcXVvdDsgJmx0OzxhIGhyZWY9Im1haWx0bzpyZ2FuZGhp QGNpc2NvLmNvbSI+cmdhbmRoaUBjaXNjby5jb208L2E+Jmd0OywgWmFmYXINCiBBbGkgJmx0Ozxh IGhyZWY9Im1haWx0bzp6YWxpQGNpc2NvLmNvbSI+emFsaUBjaXNjby5jb208L2E+Jmd0OywgJmx0 OzxhIGhyZWY9Im1haWx0bzptYW5hdi5iaGF0aWFAbm9raWEuY29tIj5tYW5hdi5iaGF0aWFAbm9r aWEuY29tPC9hPiZndDssICZsdDs8YSBocmVmPSJtYWlsdG86bWhhcnRsZXlAY2lzY28uY29tIj5t aGFydGxleUBjaXNjby5jb208L2E+Jmd0OywgTG91IEJlcmdlciAmbHQ7PGEgaHJlZj0ibWFpbHRv OmxiZXJnZXJAbGFibi5uZXQiPmxiZXJnZXJAbGFibi5uZXQ8L2E+Jmd0OywNCiAmbHQ7PGEgaHJl Zj0ibWFpbHRvOnZiZWVyYW1AanVuaXBlci5uZXQiPnZiZWVyYW1AanVuaXBlci5uZXQ8L2E+Jmd0 OywgJmx0OzxhIGhyZWY9Im1haWx0bzphcmV0YW5hQGNpc2NvLmNvbSI+YXJldGFuYUBjaXNjby5j b208L2E+Jmd0OywgREVCT1JBSCBCUlVOR0FSRCAmbHQ7PGEgaHJlZj0ibWFpbHRvOmRiMzU0NkBh dHQuY29tIj5kYjM1NDZAYXR0LmNvbTwvYT4mZ3Q7LCAmbHQ7PGEgaHJlZj0ibWFpbHRvOmFrYXRs YXNAZ21haWwuY29tIj5ha2F0bGFzQGdtYWlsLmNvbTwvYT4mZ3Q7PGJyPg0KPGI+UmVzZW50LURh dGU6IDwvYj5UdWVzZGF5LCBKdWx5IDQsIDIwMTcgYXQgOTo0MCBBTTwvc3Bhbj48bzpwPjwvbzpw PjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPiZuYnNwOzxvOnA+PC9v OnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPkkgaGF2 ZSByZXZpZXdlZCB0aGlzIGRvY3VtZW50IGFzIHBhcnQgb2YgdGhlIHNlY3VyaXR5IGRpcmVjdG9y YXRlJ3M8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi Pm9uZ29pbmcgZWZmb3J0IHRvIHJldmlldyBhbGwgSUVURiBkb2N1bWVudHMgYmVpbmcgcHJvY2Vz c2VkIGJ5IHRoZTxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05v cm1hbCI+SUVTRy4mbmJzcDsgVGhlc2UgY29tbWVudHMgd2VyZSB3cml0dGVuIHByaW1hcmlseSBm b3IgdGhlIGJlbmVmaXQgb2YgdGhlPG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBj bGFzcz0iTXNvTm9ybWFsIj5zZWN1cml0eSBhcmVhIGRpcmVjdG9ycy4mbmJzcDsgRG9jdW1lbnQg ZWRpdG9ycyBhbmQgV0cgY2hhaXJzIHNob3VsZCB0cmVhdDxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+ DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+dGhlc2UgY29tbWVudHMganVzdCBsaWtlIGFu eSBvdGhlciBsYXN0IGNhbGwgY29tbWVudHMuPG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj4mbmJzcDs8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRp dj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPlN1bW1hcnk6IFJlYWR5IHdpdGggTml0czxvOnA+PC9v OnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+Jm5ic3A7PG86cD48 L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj4mbmJzcDs8bzpw PjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPkkgZGlkIG5v dCBoYXZlIGVub3VnaCBiYWNrZ3JvdW5kIG9uIE1MUFMgYW5kIEdNUExTIGFuZCB0aGVpciByZWxh dGVkIFJGQ3MsPG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9y bWFsIj5zbyBJIGhhZCB0byBkbyBzb21lIHJlYWRpbmcgdG8gZ2V0IHNvbWUgZmFtaWxpYXJpdHkg d2l0aCB0aGlzIHN1YmplY3QgdG8gYmU8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxw IGNsYXNzPSJNc29Ob3JtYWwiPmFibGUgdG8gcHJvdmlkZSBzb21lIHJlYXNvbmFibGUgcmV2aWV3 IG9mIHRoaXMgZG9jdW1lbnQuPG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIj4mbmJzcDs8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNs YXNzPSJNc29Ob3JtYWwiPlRoaXMgZG9jdW1lbnQgYnVpbGRzIG9uIGFuIGV4aXN0aW5nIG1lY2hh bmlzbSwgJnF1b3Q7RmFzdCBSZXJvdXRlIEV4dGVuc2lvbnMgdG88bzpwPjwvbzpwPjwvcD4NCjwv ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPlJTVlAtVEUgZm9yIExTUCBUdW5uZWxz JnF1b3Q7IGRlZmluZWQgaW4gUkZDNDA5MCwgd2hpY2ggZGVmaW5lcyBhIG1lY2hhbmlzbSB0bzxv OnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+ZXN0YWJs aXNoIGEgYmFja3VwIHR1bm5lbHMgZm9yIGxvY2FsIExTUCB0dW5uZWxzLiBPbmUgbGltaXRhdGlv biBvZiB0aGU8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3Jt YWwiPmV4aXN0aW5nIG1lY2hhbmlzbSBpcyB0aGF0IGluIHNvbWUgc2l0dWF0aW9ucyBpdCBtaWdo dCBhc3NpZ24gZGlmZmVyZW50PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIj51bmktZGlyZWN0aW9uYWwgYnlwYXNzIHR1bm5lbHMgZm9yIHRoZSBmb3J3 YXJkIGFuZCByZXZlcnNlIGRpcmVjdGlvbnMuPG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj4mbmJzcDs8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRp dj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPlRoaXMgZG9jdW1lbnQgZXh0ZW5kcyB0aGUgbWVjaGFu aXNtIGRlZmluZWQgaW4gUkZDNDA5MCwgYnkgYWRkaW5nIGEgbmV3PG86cD48L286cD48L3A+DQo8 L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5CWVBBU1NfQVNTSUdOTUVOVCBzdWJv YmplY3QgdG8gdGhlIGV4aXN0aW5nIFJFQ09SRF9ST1VURSBPYmplY3QgKFJSTykgdXNlZDxvOnA+ PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+aW4gUEFUSCBh bmQgUkVTViByZXF1ZXN0cywgdG8gYWxsb3cgdGhlIGVzdGFibGlzaG1lbnQgb2YgYSBiaS1kaXJl Y3Rpb25hbDxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1h bCI+YnlwYXNzIHR1bm5lbC48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNz PSJNc29Ob3JtYWwiPiZuYnNwOzxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xh c3M9Ik1zb05vcm1hbCI+VGhlIHNlY3VyaXR5IG9mIHRoZSBleGlzdGluZyBtZWNoYW5pc20gc3Rp bGwgYXBwbGllcyB3aXRoIHRoZSBuZXcgbWVjaGFuaXNtLDxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+ DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+YW5kIHRoZSBzZWN1cml0eSBzZWN0aW9uIGRp c2N1c3NlcyB0aGUgaW1wbGljYXRpb25zIG9mIHRoZSBuZXcgc3Vib2JqZWN0IGFuZDxvOnA+PC9v OnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+dGhlIG5ldyBlcnJv ciBhc3NvY2lhdGVkIHdpdGggdGhhdCwgd2hpY2ggc2VlbXMgcmVhc29uYWJsZS48bzpwPjwvbzpw PjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPiZuYnNwOzxvOnA+PC9v OnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+VGhlIGRvY3VtZW50 IGFsc28gcG9pbnRzIHRvIGFuIE1QTFMvR01QTFMgU2VjdXJpdHkgRnJhbWV3b3JrIChSRkM1OTIw KTxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+ZG9j dW1lbnQgdGhhdCBoYXMgYW4gZXh0ZW5zaXZlIGRpc2N1c3Npb24gb2YgdGhlIHNlY3VyaXR5IG9m IE1QTFMvR01QTFM8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29O b3JtYWwiPm5ldHdvcmsgaW4gZ2VuZXJhbCB0aGF0IGFsc28gYXBwbGllcyB0byB0aGlzIGRvY3Vt ZW50LjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+ Jm5ic3A7PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFs Ij4mbmJzcDs8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3Jt YWwiPk5pdHM8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3Jt YWwiPiZuYnNwOzxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05v cm1hbCI+QmVjYXVzZSB0aGUgZG9jdW1lbnQgZXh0ZW5kcyBSRkM0MDkwLCBpdCBzaG91bGQgYWRk ICZxdW90O1VwZGF0ZXM6IDQwOTAmcXVvdDsgYXQgdGhlPG86cD48L286cD48L3A+DQo8L2Rpdj4N CjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj50b3Agb2YgdGhlIGRvY3VtZW50LjxvOnA+PC9v OnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+Jm5ic3A7PG86cD48 L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5SZWdhcmRzLDxv OnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+Jm5ic3A7 UmlmYWF0PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFs Ij4mbmJzcDs8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0K PC9kaXY+DQo8L2Rpdj4NCjwvYm9keT4NCjwvaHRtbD4NCg== --_000_B8956E3352254C8CA2A56BEA8055EE03ciscocom_-- From nobody Tue Jul 11 08:37:43 2017 Return-Path: X-Original-To: secdir@ietfa.amsl.com Delivered-To: secdir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id B17A813145A; Tue, 11 Jul 2017 08:37:40 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -14.511 X-Spam-Level: X-Spam-Status: No, score=-14.511 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_HI=-5, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, RP_MATCHES_RCVD=-0.001, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001, T_HTML_ATTACH=0.01, URIBL_BLOCKED=0.001, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cisco.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id iih7i0cCijCG; Tue, 11 Jul 2017 08:37:32 -0700 (PDT) Received: from alln-iport-3.cisco.com (alln-iport-3.cisco.com [173.37.142.90]) (using TLSv1.2 with cipher DHE-RSA-SEED-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 44DDC128B8F; Tue, 11 Jul 2017 08:37:32 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=221713; q=dns/txt; s=iport; t=1499787452; x=1500997052; h=from:to:cc:subject:date:message-id:references: in-reply-to:mime-version; bh=NzpqATzgd8M+85L2B8Wd5d/LwQt+iRrc1nNtJBcB4gI=; b=SyzEvDnYcWjac2TQw1RFlsIXNDiQwyLVtGdzO3qnadzLKRnQSlHmFAUA c/yDMo6DDWm2SLcSNGnvVwuTsldxA5KG3bmhRz+n0xzD4xwzY5aYRGSpn JxVEZRdleKZXKOCpYjHDA+5YEmF9tWGEjPJooQmdk0HbLVPpkUhve35SO 0=; X-Files: Diff_ draft-ietf-teas-gmpls-lsp-fastreroute-09.txt - draft-ietf-teas-gmpls-lsp-fastreroute-10.txt.html, draft-ietf-teas-gmpls-lsp-fastreroute-10.txt : 78932, 49558 X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: =?us-ascii?q?A0CcAAAC8GRZ/5NdJa1TChkBAQEBAQEBA?= =?us-ascii?q?QEBAQcBAQEBAYJvPi1kgRQHhW+IE5FuiC6NVYIRLoNpgV8CGoMiPxgBAgEBAQE?= =?us-ascii?q?BAQFrKIUYAQEBAQMaAQgEBhogEhACAQgRAwEBASEBBgMCAgIfERQJCAIEAQ0FC?= =?us-ascii?q?QUNiXwDFRCrf4FsOieDFFcBgxwNg3gBAQEBAQEBAQEBAQEBAQEBAQEBAQEOD4M?= =?us-ascii?q?og02BYAErgnmCV0+BCgsHCwEjBwkJBgYMglswgjEFiVyMBIEqMYJbhFM7AoQog?= =?us-ascii?q?x6BC4I6g0ZLgVKDHIIMGT6EdIkKgUSJO4JCiUkBHzh/C3UVSRIBhEc2AxyBLAE?= =?us-ascii?q?6dgGFbgcIF4EMAYEMAQEB?= X-IronPort-AV: E=Sophos;i="5.40,347,1496102400"; d="txt'?html'217?scan'217,208,217";a="453133608" Received: from rcdn-core-11.cisco.com ([173.37.93.147]) by alln-iport-3.cisco.com with ESMTP/TLS/DHE-RSA-AES256-GCM-SHA384; 11 Jul 2017 15:37:29 +0000 Received: from XCH-ALN-018.cisco.com (xch-aln-018.cisco.com [173.36.7.28]) by rcdn-core-11.cisco.com (8.14.5/8.14.5) with ESMTP id v6BFbSjs002494 (version=TLSv1/SSLv3 cipher=AES256-SHA bits=256 verify=FAIL); Tue, 11 Jul 2017 15:37:28 GMT Received: from xch-aln-018.cisco.com (173.36.7.28) by XCH-ALN-018.cisco.com (173.36.7.28) with Microsoft SMTP Server (TLS) id 15.0.1210.3; Tue, 11 Jul 2017 10:37:27 -0500 Received: from xch-aln-018.cisco.com ([173.36.7.28]) by XCH-ALN-018.cisco.com ([173.36.7.28]) with mapi id 15.00.1210.000; Tue, 11 Jul 2017 10:37:27 -0500 From: "Rakesh Gandhi (rgandhi)" To: "BRUNGARD, DEBORAH A" , Vishnu Pavan Beeram , Rifaat Shekh-Yusef , "draft-ietf-teas-gmpls-lsp-fastreroute.all@ietf.org" , "secdir@ietf.org" , The IESG CC: Lou Berger , "EXT-vishnupavan@gmail.com" Thread-Topic: [secdir] secdir review of draft-ietf-teas-gmpls-lsp-fastreroute-09 Thread-Index: AQHS9MsUKApW2nmrDkSMbsBbOiyZvqJD0ouAgABO84CAAt+CAIAH2euA///raYCAABguAA== Date: Tue, 11 Jul 2017 15:37:27 +0000 Message-ID: <8FCEBCD6-6CFE-4961-A7E8-A39801486434@cisco.com> References: <233DDE34-9818-4088-A9CE-84180A34D5A4@juniper.net> <5C02CE7F-DEE3-48D0-898C-347CF4CB6595@cisco.com> In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: yes X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/f.1d.0.161209 x-ms-exchange-messagesentrepresentingtype: 1 x-ms-exchange-transport-fromentityheader: Hosted x-originating-ip: [161.44.213.149] Content-Type: multipart/mixed; boundary="_005_8FCEBCD66CFE4961A7E8A39801486434ciscocom_" MIME-Version: 1.0 Archived-At: Subject: Re: [secdir] secdir review of draft-ietf-teas-gmpls-lsp-fastreroute-09 X-BeenThere: secdir@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: Security Area Directorate List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 11 Jul 2017 15:37:41 -0000 --_005_8FCEBCD66CFE4961A7E8A39801486434ciscocom_ Content-Type: multipart/alternative; boundary="_000_8FCEBCD66CFE4961A7E8A39801486434ciscocom_" --_000_8FCEBCD66CFE4961A7E8A39801486434ciscocom_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 SGkgQWxsLA0KDQpBdHRhY2hlZCBwbGVhc2UgZmluZCB0aGUgc3VnZ2VzdGVkIGNoYW5nZXMsIHdo aWNoIGluY2x1ZGVzIEdlbi1BUlQgcmV2aWV3IGFzIHdlbGwuIFdpbGwgdXBsb2FkIHRoZSByZXZp c2VkIGRvY3VtZW50IG9uY2UgdGhlIGZsb29kIGdhdGUgb3BlbnMuDQoNClRoYW5rcywNClJha2Vz aA0KDQoNCg0KRnJvbTogIj1TTVRQOnJnYW5kaGlAY2lzY28uIGNvbSIgPHJnYW5kaGlAY2lzY28u Y29tPg0KRGF0ZTogVHVlc2RheSwgSnVseSAxMSwgMjAxNyBhdCAxMDoxMSBBTQ0KVG86IERFQk9S QUggQlJVTkdBUkQgPGRiMzU0NkBhdHQuY29tPiwgVmlzaG51IFBhdmFuIEJlZXJhbSA8dmJlZXJh bUBqdW5pcGVyLm5ldD4sIFJpZmFhdCBTaGVraC1ZdXNlZiA8cmlmYWF0LmlldGZAZ21haWwuY29t PiwgImRyYWZ0LWlldGYtdGVhcy1nbXBscy1sc3AtZmFzdHJlcm91dGUuYWxsQGlldGYub3JnIiA8 ZHJhZnQtaWV0Zi10ZWFzLWdtcGxzLWxzcC1mYXN0cmVyb3V0ZS5hbGxAaWV0Zi5vcmc+LCAic2Vj ZGlyQGlldGYub3JnIiA8c2VjZGlyQGlldGYub3JnPiwgVGhlIElFU0cgPGllc2dAaWV0Zi5vcmc+ DQpDYzogTG91IEJlcmdlciA8bGJlcmdlckBsYWJuLm5ldD4sICJFWFQtdmlzaG51cGF2YW5AZ21h aWwuY29tIiA8dmlzaG51cGF2YW5AZ21haWwuY29tPg0KU3ViamVjdDogUmU6IFtzZWNkaXJdIHNl Y2RpciByZXZpZXcgb2YgZHJhZnQtaWV0Zi10ZWFzLWdtcGxzLWxzcC1mYXN0cmVyb3V0ZS0wOQ0K DQpIaSBEZWJvcmFoLA0KDQpUaGFuayB5b3UgZm9yIHlvdXIgc3VnZ2VzdGlvbnMuIFdpbGwgdXBk YXRlIHRoZSBkb2N1bWVudCBhY2NvcmRpbmdseS4NCg0KVGhhbmtzLA0KUmFrZXNoDQoNCg0KRnJv bTogREVCT1JBSCBCUlVOR0FSRCA8ZGIzNTQ2QGF0dC5jb20+DQpEYXRlOiBUdWVzZGF5LCBKdWx5 IDExLCAyMDE3IGF0IDc6MjUgQU0NClRvOiAiPVNNVFA6cmdhbmRoaUBjaXNjby4gY29tIiA8cmdh bmRoaUBjaXNjby5jb20+LCBWaXNobnUgUGF2YW4gQmVlcmFtIDx2YmVlcmFtQGp1bmlwZXIubmV0 PiwgUmlmYWF0IFNoZWtoLVl1c2VmIDxyaWZhYXQuaWV0ZkBnbWFpbC5jb20+LCAiZHJhZnQtaWV0 Zi10ZWFzLWdtcGxzLWxzcC1mYXN0cmVyb3V0ZS5hbGxAaWV0Zi5vcmciIDxkcmFmdC1pZXRmLXRl YXMtZ21wbHMtbHNwLWZhc3RyZXJvdXRlLmFsbEBpZXRmLm9yZz4sICJzZWNkaXJAaWV0Zi5vcmci IDxzZWNkaXJAaWV0Zi5vcmc+LCBUaGUgSUVTRyA8aWVzZ0BpZXRmLm9yZz4NCkNjOiBMb3UgQmVy Z2VyIDxsYmVyZ2VyQGxhYm4ubmV0PiwgIkVYVC12aXNobnVwYXZhbkBnbWFpbC5jb20iIDx2aXNo bnVwYXZhbkBnbWFpbC5jb20+DQpTdWJqZWN0OiBSRTogW3NlY2Rpcl0gc2VjZGlyIHJldmlldyBv ZiBkcmFmdC1pZXRmLXRlYXMtZ21wbHMtbHNwLWZhc3RyZXJvdXRlLTA5DQoNCkhpIFJha2VzaCwg YWxsLA0KKEkgd2FzIG9uIHZhY2F0aW9uIGxhc3Qgd2VlazotKSkNCg0KSSBsZWFuIHRvd2FyZHMg YSBzb21ld2hhdCBzdHJpY3QgaW50ZXJwcmV0YXRpb24gb2Yg4oCcdXBkYXRl4oCdLCBvdGhlcndp c2UgaW1wbGVtZW50ZXJzIG5lZWQgdG8gYnJvd3NlIGFsbCB0aGUgdXBkYXRlcyB0byBzZWUgd2hh dCBpcyBhcHByb3ByaWF0ZS4gT24gdGhpcywgaXQgaXMgbW9yZSB0aGFuIGV4dGVuc2lvbiwgaXQg ZGVmaW5pdGVseSBpbXByb3ZlcyBhbiBpbXBsZW1lbnRhdGlvbiwgc28gaXQgc2hvdWxkIGJlIGFu IOKAnHVwZGF0ZeKAnS4NCg0KQXV0aG9ycyDigJMgd2hlbiBkbyB0aGUgbmV4dCB1cGRhdGUgLSBy ZXdvcmQg4oCcVGhpcyBkb2N1bWVudCBleHRlbmRzIHRoZSBtZWNoYW5pc20gLi7igJ0gdG8g4oCc VGhpcyBkb2N1bWVudCB1cGRhdGVzIHRoZSBtZWNoYW5pc20gLi7igJ0uDQoNClRoYW5rcyBSaWZh YXQg4oCTIGdyZWF0IGNvbW1lbnQtDQpEZWJvcmFoDQoNCg0KDQpGcm9tOiBSYWtlc2ggR2FuZGhp IChyZ2FuZGhpKSBbbWFpbHRvOnJnYW5kaGlAY2lzY28uY29tXQ0KU2VudDogVGh1cnNkYXksIEp1 bHkgMDYsIDIwMTcgMTE6MzEgQU0NClRvOiBWaXNobnUgUGF2YW4gQmVlcmFtIDx2YmVlcmFtQGp1 bmlwZXIubmV0PjsgUmlmYWF0IFNoZWtoLVl1c2VmIDxyaWZhYXQuaWV0ZkBnbWFpbC5jb20+OyBk cmFmdC1pZXRmLXRlYXMtZ21wbHMtbHNwLWZhc3RyZXJvdXRlLmFsbEBpZXRmLm9yZzsgc2VjZGly QGlldGYub3JnOyBUaGUgSUVTRyA8aWVzZ0BpZXRmLm9yZz4NCkNjOiBCUlVOR0FSRCwgREVCT1JB SCBBIDxkYjM1NDZAYXR0LmNvbT47IExvdSBCZXJnZXIgPGxiZXJnZXJAbGFibi5uZXQ+OyBFWFQt dmlzaG51cGF2YW5AZ21haWwuY29tIDx2aXNobnVwYXZhbkBnbWFpbC5jb20+DQpTdWJqZWN0OiBS ZTogW3NlY2Rpcl0gc2VjZGlyIHJldmlldyBvZiBkcmFmdC1pZXRmLXRlYXMtZ21wbHMtbHNwLWZh c3RyZXJvdXRlLTA5DQoNClRoYW5rcyBQYXZhbi4NCg0KSGkgRGVib3JhaCwNClBsZWFzZSBsZXQg dXMga25vdyBpZiB5b3UgYXJlIE9LIHdpdGggdGhlIHN1Z2dlc3Rpb24uDQoNCuKAnEJlY2F1c2Ug dGhlIGRvY3VtZW50IGV4dGVuZHMgUkZDNDA5MCwgaXQgc2hvdWxkIGFkZCAiVXBkYXRlczogNDA5 MCIgYXQgdGhlIHRvcCBvZiB0aGUgZG9jdW1lbnQu4oCdDQoNClRoYW5rcywNClJha2VzaA0KDQoN Cg0KRnJvbTogVmlzaG51IFBhdmFuIEJlZXJhbSA8dmJlZXJhbUBqdW5pcGVyLm5ldDxtYWlsdG86 dmJlZXJhbUBqdW5pcGVyLm5ldD4+DQpEYXRlOiBUdWVzZGF5LCBKdWx5IDQsIDIwMTcgYXQgMTE6 MzggQU0NClRvOiAiPVNNVFA6cmdhbmRoaUBjaXNjby4gY29tIiA8cmdhbmRoaUBjaXNjby5jb208 bWFpbHRvOnJnYW5kaGlAY2lzY28uY29tPj4sIFJpZmFhdCBTaGVraC1ZdXNlZiA8cmlmYWF0Lmll dGZAZ21haWwuY29tPG1haWx0bzpyaWZhYXQuaWV0ZkBnbWFpbC5jb20+PiwgImRyYWZ0LWlldGYt dGVhcy1nbXBscy1sc3AtZmFzdHJlcm91dGUuYWxsQGlldGYub3JnPG1haWx0bzpkcmFmdC1pZXRm LXRlYXMtZ21wbHMtbHNwLWZhc3RyZXJvdXRlLmFsbEBpZXRmLm9yZz4iIDxkcmFmdC1pZXRmLXRl YXMtZ21wbHMtbHNwLWZhc3RyZXJvdXRlLmFsbEBpZXRmLm9yZzxtYWlsdG86ZHJhZnQtaWV0Zi10 ZWFzLWdtcGxzLWxzcC1mYXN0cmVyb3V0ZS5hbGxAaWV0Zi5vcmc+PiwgInNlY2RpckBpZXRmLm9y ZzxtYWlsdG86c2VjZGlyQGlldGYub3JnPiIgPHNlY2RpckBpZXRmLm9yZzxtYWlsdG86c2VjZGly QGlldGYub3JnPj4sIFRoZSBJRVNHIDxpZXNnQGlldGYub3JnPG1haWx0bzppZXNnQGlldGYub3Jn Pj4NCkNjOiBERUJPUkFIIEJSVU5HQVJEIDxkYjM1NDZAYXR0LmNvbTxtYWlsdG86ZGIzNTQ2QGF0 dC5jb20+PiwgTG91IEJlcmdlciA8bGJlcmdlckBsYWJuLm5ldDxtYWlsdG86bGJlcmdlckBsYWJu Lm5ldD4+LCAiRVhULXZpc2hudXBhdmFuQGdtYWlsLmNvbTxtYWlsdG86RVhULXZpc2hudXBhdmFu QGdtYWlsLmNvbT4iIDx2aXNobnVwYXZhbkBnbWFpbC5jb208bWFpbHRvOnZpc2hudXBhdmFuQGdt YWlsLmNvbT4+DQpTdWJqZWN0OiBSZTogW3NlY2Rpcl0gc2VjZGlyIHJldmlldyBvZiBkcmFmdC1p ZXRmLXRlYXMtZ21wbHMtbHNwLWZhc3RyZXJvdXRlLTA5DQoNClJha2VzaCwgSGkhDQoNClRoaXMg aXMgYSB2YWxpZCBjb21tZW50LiA8R01QTFMtTFNQLUZSUj4gZG9lc27igJl0IG1vZGlmeSBhbnkg b2YgdGhlIGV4aXN0aW5nIHByb2NlZHVyZXMgZGVmaW5lZCBpbiBSRkM0MDkwLCBidXQgaXQgZG9l cyBzdXBwbGVtZW50IGl0LiBBcyBwZXIgUkZDMjIyMywgdGhpcyBpcyBzdWZmaWNpZW50IGdyb3Vu ZHMgdG8gc2V0IHRoZSDigJxVcGRhdGVz4oCdIGZpZWxkLg0KDQpDb3VydGVzeSBSRkMyMjIzOg0K DQogICAgICBUbyBiZSB1c2VkIGFzIGEgcmVmZXJlbmNlIGZyb20gYSBuZXcgaXRlbSB0aGF0IGNh bm5vdCBiZSB1c2VkDQoNCiAgICAgIGFsb25lIChpLmUuLCBvbmUgdGhhdCBzdXBwbGVtZW50cyBh IHByZXZpb3VzIGRvY3VtZW50KSwgdG8gcmVmZXINCg0KICAgICAgdG8gdGhlIHByZXZpb3VzIGRv Y3VtZW50LiAgVGhlIG5ld2VyIHB1YmxpY2F0aW9uIGlzIGEgcGFydCB0aGF0DQoNCiAgICAgIHdp bGwgc3VwcGxlbWVudCBvciBiZSBhZGRlZCBvbiB0byB0aGUgZXhpc3RpbmcgZG9jdW1lbnQ7IGUu Zy4sIGFuDQoNCiAgICAgIGFkZGVuZHVtLCBvciBzZXBhcmF0ZSwgZXh0cmEgaW5mb3JtYXRpb24g dGhhdCBpcyB0byBiZSBhZGRlZCB0bw0KDQogICAgICB0aGUgb3JpZ2luYWwgZG9jdW1lbnQuDQpA RGVib3JhaCDigJQgQXJlIHlvdSBvayB3aXRoIHRoaXM/DQpSZWdhcmRzLA0KLVBhdmFuDQoNCkZy b206ICJSYWtlc2ggR2FuZGhpIChyZ2FuZGhpKSIgPHJnYW5kaGlAY2lzY28uY29tPG1haWx0bzpy Z2FuZGhpQGNpc2NvLmNvbT4+DQpEYXRlOiBUdWVzZGF5LCBKdWx5IDQsIDIwMTcgYXQgMTA6NTUg QU0NClRvOiBSaWZhYXQgU2hla2gtWXVzZWYgPHJpZmFhdC5pZXRmQGdtYWlsLmNvbTxtYWlsdG86 cmlmYWF0LmlldGZAZ21haWwuY29tPj4sICJkcmFmdC1pZXRmLXRlYXMtZ21wbHMtbHNwLWZhc3Ry ZXJvdXRlLmFsbEBpZXRmLm9yZzxtYWlsdG86ZHJhZnQtaWV0Zi10ZWFzLWdtcGxzLWxzcC1mYXN0 cmVyb3V0ZS5hbGxAaWV0Zi5vcmc+IiA8ZHJhZnQtaWV0Zi10ZWFzLWdtcGxzLWxzcC1mYXN0cmVy b3V0ZS5hbGxAaWV0Zi5vcmc8bWFpbHRvOmRyYWZ0LWlldGYtdGVhcy1nbXBscy1sc3AtZmFzdHJl cm91dGUuYWxsQGlldGYub3JnPj4sICJzZWNkaXJAaWV0Zi5vcmc8bWFpbHRvOnNlY2RpckBpZXRm Lm9yZz4iIDxzZWNkaXJAaWV0Zi5vcmc8bWFpbHRvOnNlY2RpckBpZXRmLm9yZz4+LCBUaGUgSUVT RyA8aWVzZ0BpZXRmLm9yZzxtYWlsdG86aWVzZ0BpZXRmLm9yZz4+DQpDYzogREVCT1JBSCBCUlVO R0FSRCA8ZGIzNTQ2QGF0dC5jb208bWFpbHRvOmRiMzU0NkBhdHQuY29tPj4sIExvdSBCZXJnZXIg PGxiZXJnZXJAbGFibi5uZXQ8bWFpbHRvOmxiZXJnZXJAbGFibi5uZXQ+PiwgIkVYVC12aXNobnVw YXZhbkBnbWFpbC5jb208bWFpbHRvOkVYVC12aXNobnVwYXZhbkBnbWFpbC5jb20+IiA8dmlzaG51 cGF2YW5AZ21haWwuY29tPG1haWx0bzp2aXNobnVwYXZhbkBnbWFpbC5jb20+Pg0KU3ViamVjdDog UmU6IFtzZWNkaXJdIHNlY2RpciByZXZpZXcgb2YgZHJhZnQtaWV0Zi10ZWFzLWdtcGxzLWxzcC1m YXN0cmVyb3V0ZS0wOQ0KUmVzZW50LUZyb206IDxhbGlhcy1ib3VuY2VzQGlldGYub3JnPG1haWx0 bzphbGlhcy1ib3VuY2VzQGlldGYub3JnPj4NClJlc2VudC1UbzogPG10YWlsbG9uQGNpc2NvLmNv bTxtYWlsdG86bXRhaWxsb25AY2lzY28uY29tPj4sIDx0c2FhZEBjaXNjby5jb208bWFpbHRvOnRz YWFkQGNpc2NvLmNvbT4+LCA8cmdhbmRoaUBjaXNjby5jb208bWFpbHRvOnJnYW5kaGlAY2lzY28u Y29tPj4sIFphZmFyIEFsaSA8emFsaUBjaXNjby5jb208bWFpbHRvOnphbGlAY2lzY28uY29tPj4s IDxtYW5hdi5iaGF0aWFAbm9raWEuY29tPG1haWx0bzptYW5hdi5iaGF0aWFAbm9raWEuY29tPj4s IDxtaGFydGxleUBjaXNjby5jb208bWFpbHRvOm1oYXJ0bGV5QGNpc2NvLmNvbT4+LCBMb3UgQmVy Z2VyIDxsYmVyZ2VyQGxhYm4ubmV0PG1haWx0bzpsYmVyZ2VyQGxhYm4ubmV0Pj4sIFZpc2hudSBQ YXZhbiBCZWVyYW0gPHZiZWVyYW1AanVuaXBlci5uZXQ8bWFpbHRvOnZiZWVyYW1AanVuaXBlci5u ZXQ+PiwgPGFyZXRhbmFAY2lzY28uY29tPG1haWx0bzphcmV0YW5hQGNpc2NvLmNvbT4+LCA8ZGIz NTQ2QGF0dC5jb208bWFpbHRvOmRiMzU0NkBhdHQuY29tPj4sIDxha2F0bGFzQGdtYWlsLmNvbTxt YWlsdG86YWthdGxhc0BnbWFpbC5jb20+Pg0KUmVzZW50LURhdGU6IFR1ZXNkYXksIEp1bHkgNCwg MjAxNyBhdCAxMDo1NSBBTQ0KDQpUaGFua3MgUmlmYWF0IGZvciB0aGUgcmV2aWV3IG9mIHRoaXMg ZG9jdW1lbnQuDQoNCkhpIERlYm9yYWgsIExvdSwgUGF2YW4sDQoNCkFueSB0aG91Z2h0cyBvbiB0 aGUgZm9sbG93aW5nIHN1Z2dlc3Rpb24/DQoNCuKAnEJlY2F1c2UgdGhlIGRvY3VtZW50IGV4dGVu ZHMgUkZDNDA5MCwgaXQgc2hvdWxkIGFkZCAiVXBkYXRlczogNDA5MCIgYXQgdGhlIHRvcCBvZiB0 aGUgZG9jdW1lbnQu4oCdDQoNClRoYW5rcywNClJha2VzaA0KDQoNCkZyb206IFJpZmFhdCBTaGVr aC1ZdXNlZiA8cmlmYWF0LmlldGZAZ21haWwuY29tPG1haWx0bzpyaWZhYXQuaWV0ZkBnbWFpbC5j b20+Pg0KRGF0ZTogVHVlc2RheSwgSnVseSA0LCAyMDE3IGF0IDk6MzIgQU0NClRvOiAiZHJhZnQt aWV0Zi10ZWFzLWdtcGxzLWxzcC1mYXN0cmVyb3V0ZS5hbGxAaWV0Zi5vcmc8bWFpbHRvOmRyYWZ0 LWlldGYtdGVhcy1nbXBscy1sc3AtZmFzdHJlcm91dGUuYWxsQGlldGYub3JnPiIgPGRyYWZ0LWll dGYtdGVhcy1nbXBscy1sc3AtZmFzdHJlcm91dGUuYWxsQGlldGYub3JnPG1haWx0bzpkcmFmdC1p ZXRmLXRlYXMtZ21wbHMtbHNwLWZhc3RyZXJvdXRlLmFsbEBpZXRmLm9yZz4+LCAic2VjZGlyQGll dGYub3JnPG1haWx0bzpzZWNkaXJAaWV0Zi5vcmc+IiA8c2VjZGlyQGlldGYub3JnPG1haWx0bzpz ZWNkaXJAaWV0Zi5vcmc+PiwgVGhlIElFU0cgPGllc2dAaWV0Zi5vcmc8bWFpbHRvOmllc2dAaWV0 Zi5vcmc+Pg0KU3ViamVjdDogW3NlY2Rpcl0gc2VjZGlyIHJldmlldyBvZiBkcmFmdC1pZXRmLXRl YXMtZ21wbHMtbHNwLWZhc3RyZXJvdXRlLTA5DQpSZXNlbnQtRnJvbTogPGFsaWFzLWJvdW5jZXNA aWV0Zi5vcmc8bWFpbHRvOmFsaWFzLWJvdW5jZXNAaWV0Zi5vcmc+Pg0KUmVzZW50LVRvOiAiPVNN VFA6bXRhaWxsb25AY2lzY28uIGNvbSIgPG10YWlsbG9uQGNpc2NvLmNvbTxtYWlsdG86bXRhaWxs b25AY2lzY28uY29tPj4sIDx0c2FhZEBjaXNjby5jb208bWFpbHRvOnRzYWFkQGNpc2NvLmNvbT4+ LCAiPVNNVFA6cmdhbmRoaUBjaXNjby4gY29tIiA8cmdhbmRoaUBjaXNjby5jb208bWFpbHRvOnJn YW5kaGlAY2lzY28uY29tPj4sIFphZmFyIEFsaSA8emFsaUBjaXNjby5jb208bWFpbHRvOnphbGlA Y2lzY28uY29tPj4sIDxtYW5hdi5iaGF0aWFAbm9raWEuY29tPG1haWx0bzptYW5hdi5iaGF0aWFA bm9raWEuY29tPj4sIDxtaGFydGxleUBjaXNjby5jb208bWFpbHRvOm1oYXJ0bGV5QGNpc2NvLmNv bT4+LCBMb3UgQmVyZ2VyIDxsYmVyZ2VyQGxhYm4ubmV0PG1haWx0bzpsYmVyZ2VyQGxhYm4ubmV0 Pj4sIDx2YmVlcmFtQGp1bmlwZXIubmV0PG1haWx0bzp2YmVlcmFtQGp1bmlwZXIubmV0Pj4sIDxh cmV0YW5hQGNpc2NvLmNvbTxtYWlsdG86YXJldGFuYUBjaXNjby5jb20+PiwgREVCT1JBSCBCUlVO R0FSRCA8ZGIzNTQ2QGF0dC5jb208bWFpbHRvOmRiMzU0NkBhdHQuY29tPj4sIDxha2F0bGFzQGdt YWlsLmNvbTxtYWlsdG86YWthdGxhc0BnbWFpbC5jb20+Pg0KUmVzZW50LURhdGU6IFR1ZXNkYXks IEp1bHkgNCwgMjAxNyBhdCA5OjQwIEFNDQoNCkkgaGF2ZSByZXZpZXdlZCB0aGlzIGRvY3VtZW50 IGFzIHBhcnQgb2YgdGhlIHNlY3VyaXR5IGRpcmVjdG9yYXRlJ3MNCm9uZ29pbmcgZWZmb3J0IHRv IHJldmlldyBhbGwgSUVURiBkb2N1bWVudHMgYmVpbmcgcHJvY2Vzc2VkIGJ5IHRoZQ0KSUVTRy4g IFRoZXNlIGNvbW1lbnRzIHdlcmUgd3JpdHRlbiBwcmltYXJpbHkgZm9yIHRoZSBiZW5lZml0IG9m IHRoZQ0Kc2VjdXJpdHkgYXJlYSBkaXJlY3RvcnMuICBEb2N1bWVudCBlZGl0b3JzIGFuZCBXRyBj aGFpcnMgc2hvdWxkIHRyZWF0DQp0aGVzZSBjb21tZW50cyBqdXN0IGxpa2UgYW55IG90aGVyIGxh c3QgY2FsbCBjb21tZW50cy4NCg0KU3VtbWFyeTogUmVhZHkgd2l0aCBOaXRzDQoNCg0KSSBkaWQg bm90IGhhdmUgZW5vdWdoIGJhY2tncm91bmQgb24gTUxQUyBhbmQgR01QTFMgYW5kIHRoZWlyIHJl bGF0ZWQgUkZDcywNCnNvIEkgaGFkIHRvIGRvIHNvbWUgcmVhZGluZyB0byBnZXQgc29tZSBmYW1p bGlhcml0eSB3aXRoIHRoaXMgc3ViamVjdCB0byBiZQ0KYWJsZSB0byBwcm92aWRlIHNvbWUgcmVh c29uYWJsZSByZXZpZXcgb2YgdGhpcyBkb2N1bWVudC4NCg0KVGhpcyBkb2N1bWVudCBidWlsZHMg b24gYW4gZXhpc3RpbmcgbWVjaGFuaXNtLCAiRmFzdCBSZXJvdXRlIEV4dGVuc2lvbnMgdG8NClJT VlAtVEUgZm9yIExTUCBUdW5uZWxzIiBkZWZpbmVkIGluIFJGQzQwOTAsIHdoaWNoIGRlZmluZXMg YSBtZWNoYW5pc20gdG8NCmVzdGFibGlzaCBhIGJhY2t1cCB0dW5uZWxzIGZvciBsb2NhbCBMU1Ag dHVubmVscy4gT25lIGxpbWl0YXRpb24gb2YgdGhlDQpleGlzdGluZyBtZWNoYW5pc20gaXMgdGhh dCBpbiBzb21lIHNpdHVhdGlvbnMgaXQgbWlnaHQgYXNzaWduIGRpZmZlcmVudA0KdW5pLWRpcmVj dGlvbmFsIGJ5cGFzcyB0dW5uZWxzIGZvciB0aGUgZm9yd2FyZCBhbmQgcmV2ZXJzZSBkaXJlY3Rp b25zLg0KDQpUaGlzIGRvY3VtZW50IGV4dGVuZHMgdGhlIG1lY2hhbmlzbSBkZWZpbmVkIGluIFJG QzQwOTAsIGJ5IGFkZGluZyBhIG5ldw0KQllQQVNTX0FTU0lHTk1FTlQgc3Vib2JqZWN0IHRvIHRo ZSBleGlzdGluZyBSRUNPUkRfUk9VVEUgT2JqZWN0IChSUk8pIHVzZWQNCmluIFBBVEggYW5kIFJF U1YgcmVxdWVzdHMsIHRvIGFsbG93IHRoZSBlc3RhYmxpc2htZW50IG9mIGEgYmktZGlyZWN0aW9u YWwNCmJ5cGFzcyB0dW5uZWwuDQoNClRoZSBzZWN1cml0eSBvZiB0aGUgZXhpc3RpbmcgbWVjaGFu aXNtIHN0aWxsIGFwcGxpZXMgd2l0aCB0aGUgbmV3IG1lY2hhbmlzbSwNCmFuZCB0aGUgc2VjdXJp dHkgc2VjdGlvbiBkaXNjdXNzZXMgdGhlIGltcGxpY2F0aW9ucyBvZiB0aGUgbmV3IHN1Ym9iamVj dCBhbmQNCnRoZSBuZXcgZXJyb3IgYXNzb2NpYXRlZCB3aXRoIHRoYXQsIHdoaWNoIHNlZW1zIHJl YXNvbmFibGUuDQoNClRoZSBkb2N1bWVudCBhbHNvIHBvaW50cyB0byBhbiBNUExTL0dNUExTIFNl Y3VyaXR5IEZyYW1ld29yayAoUkZDNTkyMCkNCmRvY3VtZW50IHRoYXQgaGFzIGFuIGV4dGVuc2l2 ZSBkaXNjdXNzaW9uIG9mIHRoZSBzZWN1cml0eSBvZiBNUExTL0dNUExTDQpuZXR3b3JrIGluIGdl bmVyYWwgdGhhdCBhbHNvIGFwcGxpZXMgdG8gdGhpcyBkb2N1bWVudC4NCg0KDQpOaXRzDQoNCkJl Y2F1c2UgdGhlIGRvY3VtZW50IGV4dGVuZHMgUkZDNDA5MCwgaXQgc2hvdWxkIGFkZCAiVXBkYXRl czogNDA5MCIgYXQgdGhlDQp0b3Agb2YgdGhlIGRvY3VtZW50Lg0KDQpSZWdhcmRzLA0KIFJpZmFh dA0KDQo= --_000_8FCEBCD66CFE4961A7E8A39801486434ciscocom_ Content-Type: text/html; charset="utf-8" Content-ID: <7D577B24E925414183B2A05924D296D1@emea.cisco.com> Content-Transfer-Encoding: base64 PGh0bWwgeG1sbnM6bz0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6b2ZmaWNlIiB4 bWxuczp3PSJ1cm46c2NoZW1hcy1taWNyb3NvZnQtY29tOm9mZmljZTp3b3JkIiB4bWxuczptPSJo dHRwOi8vc2NoZW1hcy5taWNyb3NvZnQuY29tL29mZmljZS8yMDA0LzEyL29tbWwiIHhtbG5zPSJo dHRwOi8vd3d3LnczLm9yZy9UUi9SRUMtaHRtbDQwIj4NCjxoZWFkPg0KPG1ldGEgaHR0cC1lcXVp dj0iQ29udGVudC1UeXBlIiBjb250ZW50PSJ0ZXh0L2h0bWw7IGNoYXJzZXQ9dXRmLTgiPg0KPG1l dGEgbmFtZT0iVGl0bGUiIGNvbnRlbnQ9IiI+DQo8bWV0YSBuYW1lPSJLZXl3b3JkcyIgY29udGVu dD0iIj4NCjxtZXRhIG5hbWU9IkdlbmVyYXRvciIgY29udGVudD0iTWljcm9zb2Z0IFdvcmQgMTUg KGZpbHRlcmVkIG1lZGl1bSkiPg0KPHN0eWxlPjwhLS0NCi8qIEZvbnQgRGVmaW5pdGlvbnMgKi8N CkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6IkNvdXJpZXIgTmV3IjsNCglwYW5vc2UtMToyIDcg MyA5IDIgMiA1IDIgNCA0O30NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6IkNhbWJyaWEgTWF0 aCI7DQoJcGFub3NlLTE6MiA0IDUgMyA1IDQgNiAzIDIgNDt9DQpAZm9udC1mYWNlDQoJe2ZvbnQt ZmFtaWx5OkNhbGlicmk7DQoJcGFub3NlLTE6MiAxNSA1IDIgMiAyIDQgMyAyIDQ7fQ0KLyogU3R5 bGUgRGVmaW5pdGlvbnMgKi8NCnAuTXNvTm9ybWFsLCBsaS5Nc29Ob3JtYWwsIGRpdi5Nc29Ob3Jt YWwNCgl7bWFyZ2luOjBjbTsNCgltYXJnaW4tYm90dG9tOi4wMDAxcHQ7DQoJZm9udC1zaXplOjEy LjBwdDsNCglmb250LWZhbWlseToiVGltZXMgTmV3IFJvbWFuIjt9DQphOmxpbmssIHNwYW4uTXNv SHlwZXJsaW5rDQoJe21zby1zdHlsZS1wcmlvcml0eTo5OTsNCgljb2xvcjojMDU2M0MxOw0KCXRl eHQtZGVjb3JhdGlvbjp1bmRlcmxpbmU7fQ0KYTp2aXNpdGVkLCBzcGFuLk1zb0h5cGVybGlua0Zv bGxvd2VkDQoJe21zby1zdHlsZS1wcmlvcml0eTo5OTsNCgljb2xvcjojOTU0RjcyOw0KCXRleHQt ZGVjb3JhdGlvbjp1bmRlcmxpbmU7fQ0KcHJlDQoJe21zby1zdHlsZS1wcmlvcml0eTo5OTsNCglt c28tc3R5bGUtbGluazoiSFRNTCBQcmVmb3JtYXR0ZWQgQ2hhciI7DQoJbWFyZ2luOjBjbTsNCglt YXJnaW4tYm90dG9tOi4wMDAxcHQ7DQoJZm9udC1zaXplOjEwLjBwdDsNCglmb250LWZhbWlseToi Q291cmllciBOZXciO30NCnNwYW4uSFRNTFByZWZvcm1hdHRlZENoYXINCgl7bXNvLXN0eWxlLW5h bWU6IkhUTUwgUHJlZm9ybWF0dGVkIENoYXIiOw0KCW1zby1zdHlsZS1wcmlvcml0eTo5OTsNCglt c28tc3R5bGUtbGluazoiSFRNTCBQcmVmb3JtYXR0ZWQiOw0KCWZvbnQtZmFtaWx5OkNvdXJpZXI7 fQ0Kc3Bhbi5FbWFpbFN0eWxlMTkNCgl7bXNvLXN0eWxlLXR5cGU6cGVyc29uYWw7DQoJZm9udC1m YW1pbHk6Q2FsaWJyaTsNCgljb2xvcjp3aW5kb3d0ZXh0O30NCnNwYW4uRW1haWxTdHlsZTIwDQoJ e21zby1zdHlsZS10eXBlOnBlcnNvbmFsOw0KCWZvbnQtZmFtaWx5OkNhbGlicmk7DQoJY29sb3I6 d2luZG93dGV4dDt9DQpzcGFuLkVtYWlsU3R5bGUyMQ0KCXttc28tc3R5bGUtdHlwZTpwZXJzb25h bDsNCglmb250LWZhbWlseTpDYWxpYnJpOw0KCWNvbG9yOiMxRjQ5N0Q7fQ0Kc3Bhbi5FbWFpbFN0 eWxlMjINCgl7bXNvLXN0eWxlLXR5cGU6cGVyc29uYWw7DQoJZm9udC1mYW1pbHk6Q2FsaWJyaTsN Cgljb2xvcjp3aW5kb3d0ZXh0O30NCnNwYW4uRW1haWxTdHlsZTIzDQoJe21zby1zdHlsZS10eXBl OnBlcnNvbmFsLXJlcGx5Ow0KCWZvbnQtZmFtaWx5OkNhbGlicmk7DQoJY29sb3I6d2luZG93dGV4 dDt9DQpzcGFuLm1zb0lucw0KCXttc28tc3R5bGUtdHlwZTpleHBvcnQtb25seTsNCgltc28tc3R5 bGUtbmFtZToiIjsNCgl0ZXh0LWRlY29yYXRpb246dW5kZXJsaW5lOw0KCWNvbG9yOnRlYWw7fQ0K Lk1zb0NocERlZmF1bHQNCgl7bXNvLXN0eWxlLXR5cGU6ZXhwb3J0LW9ubHk7DQoJZm9udC1zaXpl OjEwLjBwdDt9DQpAcGFnZSBXb3JkU2VjdGlvbjENCgl7c2l6ZTo2MTIuMHB0IDc5Mi4wcHQ7DQoJ bWFyZ2luOjcyLjBwdCA3Mi4wcHQgNzIuMHB0IDcyLjBwdDt9DQpkaXYuV29yZFNlY3Rpb24xDQoJ e3BhZ2U6V29yZFNlY3Rpb24xO30NCi0tPjwvc3R5bGU+DQo8L2hlYWQ+DQo8Ym9keSBiZ2NvbG9y PSJ3aGl0ZSIgbGFuZz0iRU4tVVMiIGxpbms9IiMwNTYzQzEiIHZsaW5rPSIjOTU0RjcyIj4NCjxk aXYgY2xhc3M9IldvcmRTZWN0aW9uMSI+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHls ZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTpDYWxpYnJpIj5IaSBBbGwsPG86cD48L286 cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6 ZToxMS4wcHQ7Zm9udC1mYW1pbHk6Q2FsaWJyaSI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9w Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9u dC1mYW1pbHk6Q2FsaWJyaSI+QXR0YWNoZWQgcGxlYXNlIGZpbmQgdGhlIHN1Z2dlc3RlZCBjaGFu Z2VzLCB3aGljaCBpbmNsdWRlcyBHZW4tQVJUIHJldmlldyBhcyB3ZWxsLiBXaWxsIHVwbG9hZCB0 aGUgcmV2aXNlZCBkb2N1bWVudCBvbmNlIHRoZSBmbG9vZCBnYXRlIG9wZW5zLjxvOnA+PC9vOnA+ PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6 MTEuMHB0O2ZvbnQtZmFtaWx5OkNhbGlicmkiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4N CjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQt ZmFtaWx5OkNhbGlicmkiPlRoYW5rcyw8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0i TXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTpDYWxp YnJpIj5SYWtlc2g8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48 c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTpDYWxpYnJpIj48bzpwPiZu YnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0i Zm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTpDYWxpYnJpIj48bzpwPiZuYnNwOzwvbzpwPjwv c3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEx LjBwdDtmb250LWZhbWlseTpDYWxpYnJpIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8 ZGl2IHN0eWxlPSJib3JkZXI6bm9uZTtib3JkZXItdG9wOnNvbGlkICNCNUM0REYgMS4wcHQ7cGFk ZGluZzozLjBwdCAwY20gMGNtIDBjbSI+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48Yj48c3BhbiBz dHlsZT0iZm9udC1mYW1pbHk6Q2FsaWJyaTtjb2xvcjpibGFjayI+RnJvbTogPC9zcGFuPg0KPC9i PjxzcGFuIHN0eWxlPSJmb250LWZhbWlseTpDYWxpYnJpO2NvbG9yOmJsYWNrIj4mcXVvdDs9U01U UDpyZ2FuZGhpQGNpc2NvLiBjb20mcXVvdDsgJmx0O3JnYW5kaGlAY2lzY28uY29tJmd0Ozxicj4N CjxiPkRhdGU6IDwvYj5UdWVzZGF5LCBKdWx5IDExLCAyMDE3IGF0IDEwOjExIEFNPGJyPg0KPGI+ VG86IDwvYj5ERUJPUkFIIEJSVU5HQVJEICZsdDtkYjM1NDZAYXR0LmNvbSZndDssIFZpc2hudSBQ YXZhbiBCZWVyYW0gJmx0O3ZiZWVyYW1AanVuaXBlci5uZXQmZ3Q7LCBSaWZhYXQgU2hla2gtWXVz ZWYgJmx0O3JpZmFhdC5pZXRmQGdtYWlsLmNvbSZndDssICZxdW90O2RyYWZ0LWlldGYtdGVhcy1n bXBscy1sc3AtZmFzdHJlcm91dGUuYWxsQGlldGYub3JnJnF1b3Q7ICZsdDtkcmFmdC1pZXRmLXRl YXMtZ21wbHMtbHNwLWZhc3RyZXJvdXRlLmFsbEBpZXRmLm9yZyZndDssICZxdW90O3NlY2RpckBp ZXRmLm9yZyZxdW90Ow0KICZsdDtzZWNkaXJAaWV0Zi5vcmcmZ3Q7LCBUaGUgSUVTRyAmbHQ7aWVz Z0BpZXRmLm9yZyZndDs8YnI+DQo8Yj5DYzogPC9iPkxvdSBCZXJnZXIgJmx0O2xiZXJnZXJAbGFi bi5uZXQmZ3Q7LCAmcXVvdDtFWFQtdmlzaG51cGF2YW5AZ21haWwuY29tJnF1b3Q7ICZsdDt2aXNo bnVwYXZhbkBnbWFpbC5jb20mZ3Q7PGJyPg0KPGI+U3ViamVjdDogPC9iPlJlOiBbc2VjZGlyXSBz ZWNkaXIgcmV2aWV3IG9mIGRyYWZ0LWlldGYtdGVhcy1nbXBscy1sc3AtZmFzdHJlcm91dGUtMDk8 bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFs Ij48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjwvZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNw YW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6Q2FsaWJyaSI+SGkgRGVib3Jh aCwNCjwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0 eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OkNhbGlicmkiPiZuYnNwOzwvc3Bhbj48 bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNp emU6MTEuMHB0O2ZvbnQtZmFtaWx5OkNhbGlicmkiPlRoYW5rIHlvdSBmb3IgeW91ciBzdWdnZXN0 aW9ucy4gV2lsbCB1cGRhdGUgdGhlIGRvY3VtZW50IGFjY29yZGluZ2x5Ljwvc3Bhbj48bzpwPjwv bzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEu MHB0O2ZvbnQtZmFtaWx5OkNhbGlicmkiPiZuYnNwOzwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjxw IGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFt aWx5OkNhbGlicmkiPlRoYW5rcyw8L3NwYW4+PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTpDYWxpYnJp Ij5SYWtlc2g8L3NwYW4+PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3Bh biBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTpDYWxpYnJpIj4mbmJzcDs8L3Nw YW4+PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9u dC1zaXplOjExLjBwdDtmb250LWZhbWlseTpDYWxpYnJpIj4mbmJzcDs8L3NwYW4+PG86cD48L286 cD48L3A+DQo8ZGl2IHN0eWxlPSJib3JkZXI6bm9uZTtib3JkZXItdG9wOnNvbGlkICNCNUM0REYg MS4wcHQ7cGFkZGluZzozLjBwdCAwY20gMGNtIDBjbSI+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48 Yj48c3BhbiBzdHlsZT0iZm9udC1mYW1pbHk6Q2FsaWJyaTtjb2xvcjpibGFjayI+RnJvbTogPC9z cGFuPg0KPC9iPjxzcGFuIHN0eWxlPSJmb250LWZhbWlseTpDYWxpYnJpO2NvbG9yOmJsYWNrIj5E RUJPUkFIIEJSVU5HQVJEICZsdDtkYjM1NDZAYXR0LmNvbSZndDs8YnI+DQo8Yj5EYXRlOiA8L2I+ VHVlc2RheSwgSnVseSAxMSwgMjAxNyBhdCA3OjI1IEFNPGJyPg0KPGI+VG86IDwvYj4mcXVvdDs9 U01UUDpyZ2FuZGhpQGNpc2NvLiBjb20mcXVvdDsgJmx0O3JnYW5kaGlAY2lzY28uY29tJmd0Oywg VmlzaG51IFBhdmFuIEJlZXJhbSAmbHQ7dmJlZXJhbUBqdW5pcGVyLm5ldCZndDssIFJpZmFhdCBT aGVraC1ZdXNlZiAmbHQ7cmlmYWF0LmlldGZAZ21haWwuY29tJmd0OywgJnF1b3Q7ZHJhZnQtaWV0 Zi10ZWFzLWdtcGxzLWxzcC1mYXN0cmVyb3V0ZS5hbGxAaWV0Zi5vcmcmcXVvdDsgJmx0O2RyYWZ0 LWlldGYtdGVhcy1nbXBscy1sc3AtZmFzdHJlcm91dGUuYWxsQGlldGYub3JnJmd0OywgJnF1b3Q7 c2VjZGlyQGlldGYub3JnJnF1b3Q7DQogJmx0O3NlY2RpckBpZXRmLm9yZyZndDssIFRoZSBJRVNH ICZsdDtpZXNnQGlldGYub3JnJmd0Ozxicj4NCjxiPkNjOiA8L2I+TG91IEJlcmdlciAmbHQ7bGJl cmdlckBsYWJuLm5ldCZndDssICZxdW90O0VYVC12aXNobnVwYXZhbkBnbWFpbC5jb20mcXVvdDsg Jmx0O3Zpc2hudXBhdmFuQGdtYWlsLmNvbSZndDs8YnI+DQo8Yj5TdWJqZWN0OiA8L2I+UkU6IFtz ZWNkaXJdIHNlY2RpciByZXZpZXcgb2YgZHJhZnQtaWV0Zi10ZWFzLWdtcGxzLWxzcC1mYXN0cmVy b3V0ZS0wOTwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJN c29Ob3JtYWwiPiZuYnNwOzxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8cCBjbGFzcz0iTXNvTm9y bWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTpDYWxpYnJpO2Nv bG9yOiMxRjQ5N0QiPkhpIFJha2VzaCwgYWxsLDwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjxwIGNs YXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5 OkNhbGlicmk7Y29sb3I6IzFGNDk3RCI+KEkgd2FzIG9uIHZhY2F0aW9uIGxhc3Qgd2VlazotKSk8 L3NwYW4+PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0i Zm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTpDYWxpYnJpO2NvbG9yOiMxRjQ5N0QiPiZuYnNw Ozwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxl PSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OkNhbGlicmk7Y29sb3I6IzFGNDk3RCI+SSBs ZWFuIHRvd2FyZHMgYSBzb21ld2hhdCBzdHJpY3QgaW50ZXJwcmV0YXRpb24gb2Yg4oCcdXBkYXRl 4oCdLCBvdGhlcndpc2UgaW1wbGVtZW50ZXJzIG5lZWQgdG8gYnJvd3NlIGFsbCB0aGUgdXBkYXRl cyB0byBzZWUgd2hhdCBpcyBhcHByb3ByaWF0ZS4gT24gdGhpcywgaXQgaXMgbW9yZSB0aGFuIGV4 dGVuc2lvbiwNCiBpdCBkZWZpbml0ZWx5IGltcHJvdmVzIGFuIGltcGxlbWVudGF0aW9uLCBzbyBp dCBzaG91bGQgYmUgYW4g4oCcdXBkYXRl4oCdLjwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjxwIGNs YXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5 OkNhbGlicmk7Y29sb3I6IzFGNDk3RCI+Jm5ic3A7PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1p bHk6Q2FsaWJyaTtjb2xvcjojMUY0OTdEIj5BdXRob3JzIOKAkyB3aGVuIGRvIHRoZSBuZXh0IHVw ZGF0ZSAtIHJld29yZCDigJxUaGlzIGRvY3VtZW50IGV4dGVuZHMgdGhlIG1lY2hhbmlzbSAuLuKA nSB0byDigJxUaGlzIGRvY3VtZW50IHVwZGF0ZXMgdGhlIG1lY2hhbmlzbSAuLuKAnS48L3NwYW4+ PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1z aXplOjExLjBwdDtmb250LWZhbWlseTpDYWxpYnJpO2NvbG9yOiMxRjQ5N0QiPiZuYnNwOzwvc3Bh bj48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250 LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OkNhbGlicmk7Y29sb3I6IzFGNDk3RCI+VGhhbmtzIFJp ZmFhdCDigJMgZ3JlYXQgY29tbWVudC08L3NwYW4+PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0i TXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTpDYWxp YnJpO2NvbG9yOiMxRjQ5N0QiPkRlYm9yYWg8L3NwYW4+PG86cD48L286cD48L3A+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTpD YWxpYnJpO2NvbG9yOiMxRjQ5N0QiPiZuYnNwOzwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjxwIGNs YXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5 OkNhbGlicmk7Y29sb3I6IzFGNDk3RCI+Jm5ic3A7PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1p bHk6Q2FsaWJyaTtjb2xvcjojMUY0OTdEIj4mbmJzcDs8L3NwYW4+PG86cD48L286cD48L3A+DQo8 ZGl2IHN0eWxlPSJib3JkZXI6bm9uZTtib3JkZXItbGVmdDpzb2xpZCBibHVlIDEuNXB0O3BhZGRp bmc6MGNtIDBjbSAwY20gNC4wcHQiPg0KPGRpdj4NCjxkaXYgc3R5bGU9ImJvcmRlcjpub25lO2Jv cmRlci10b3A6c29saWQgI0UxRTFFMSAxLjBwdDtwYWRkaW5nOjMuMHB0IDBjbSAwY20gMGNtIj4N CjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2Zv bnQtZmFtaWx5OkNhbGlicmkiPkZyb206PC9zcGFuPjwvYj48c3BhbiBzdHlsZT0iZm9udC1zaXpl OjExLjBwdDtmb250LWZhbWlseTpDYWxpYnJpIj4gUmFrZXNoIEdhbmRoaSAocmdhbmRoaSkgW21h aWx0bzpyZ2FuZGhpQGNpc2NvLmNvbV0NCjxicj4NCjxiPlNlbnQ6PC9iPiBUaHVyc2RheSwgSnVs eSAwNiwgMjAxNyAxMTozMSBBTTxicj4NCjxiPlRvOjwvYj4gVmlzaG51IFBhdmFuIEJlZXJhbSAm bHQ7dmJlZXJhbUBqdW5pcGVyLm5ldCZndDs7IFJpZmFhdCBTaGVraC1ZdXNlZiAmbHQ7cmlmYWF0 LmlldGZAZ21haWwuY29tJmd0OzsgZHJhZnQtaWV0Zi10ZWFzLWdtcGxzLWxzcC1mYXN0cmVyb3V0 ZS5hbGxAaWV0Zi5vcmc7IHNlY2RpckBpZXRmLm9yZzsgVGhlIElFU0cgJmx0O2llc2dAaWV0Zi5v cmcmZ3Q7PGJyPg0KPGI+Q2M6PC9iPiBCUlVOR0FSRCwgREVCT1JBSCBBICZsdDtkYjM1NDZAYXR0 LmNvbSZndDs7IExvdSBCZXJnZXIgJmx0O2xiZXJnZXJAbGFibi5uZXQmZ3Q7OyBFWFQtdmlzaG51 cGF2YW5AZ21haWwuY29tICZsdDt2aXNobnVwYXZhbkBnbWFpbC5jb20mZ3Q7PGJyPg0KPGI+U3Vi amVjdDo8L2I+IFJlOiBbc2VjZGlyXSBzZWNkaXIgcmV2aWV3IG9mIGRyYWZ0LWlldGYtdGVhcy1n bXBscy1sc3AtZmFzdHJlcm91dGUtMDk8L3NwYW4+PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjwv ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+Jm5ic3A7PG86cD48L286cD48L3A+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTpD YWxpYnJpIj5UaGFua3MgUGF2YW4uPC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1z b05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6Q2FsaWJy aSI+Jm5ic3A7PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNw YW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6Q2FsaWJyaSI+SGkgRGVib3Jh aCw8L3NwYW4+PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHls ZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTpDYWxpYnJpIj5QbGVhc2UgbGV0IHVzIGtu b3cgaWYgeW91IGFyZSBPSyB3aXRoIHRoZSBzdWdnZXN0aW9uLjwvc3Bhbj48bzpwPjwvbzpwPjwv cD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2Zv bnQtZmFtaWx5OkNhbGlicmkiPiZuYnNwOzwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNz PSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OkNh bGlicmkiPuKAnEJlY2F1c2UgdGhlIGRvY3VtZW50IGV4dGVuZHMgUkZDNDA5MCwgaXQgc2hvdWxk IGFkZCAmcXVvdDtVcGRhdGVzOiA0MDkwJnF1b3Q7IGF0IHRoZSB0b3Agb2YgdGhlIGRvY3VtZW50 LuKAnTwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0 eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OkNhbGlicmkiPiZuYnNwOzwvc3Bhbj48 bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNp emU6MTEuMHB0O2ZvbnQtZmFtaWx5OkNhbGlicmkiPlRoYW5rcyw8L3NwYW4+PG86cD48L286cD48 L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtm b250LWZhbWlseTpDYWxpYnJpIj5SYWtlc2g8L3NwYW4+PG86cD48L286cD48L3A+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTpD YWxpYnJpIj4mbmJzcDs8L3NwYW4+PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFs Ij48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTpDYWxpYnJpIj4mbmJz cDs8L3NwYW4+PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHls ZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTpDYWxpYnJpIj4mbmJzcDs8L3NwYW4+PG86 cD48L286cD48L3A+DQo8ZGl2IHN0eWxlPSJib3JkZXI6bm9uZTtib3JkZXItdG9wOnNvbGlkICNC NUM0REYgMS4wcHQ7cGFkZGluZzozLjBwdCAwY20gMGNtIDBjbSI+DQo8cCBjbGFzcz0iTXNvTm9y bWFsIj48Yj48c3BhbiBzdHlsZT0iZm9udC1mYW1pbHk6Q2FsaWJyaTtjb2xvcjpibGFjayI+RnJv bTogPC9zcGFuPg0KPC9iPjxzcGFuIHN0eWxlPSJmb250LWZhbWlseTpDYWxpYnJpO2NvbG9yOmJs YWNrIj5WaXNobnUgUGF2YW4gQmVlcmFtICZsdDs8YSBocmVmPSJtYWlsdG86dmJlZXJhbUBqdW5p cGVyLm5ldCI+dmJlZXJhbUBqdW5pcGVyLm5ldDwvYT4mZ3Q7PGJyPg0KPGI+RGF0ZTogPC9iPlR1 ZXNkYXksIEp1bHkgNCwgMjAxNyBhdCAxMTozOCBBTTxicj4NCjxiPlRvOiA8L2I+JnF1b3Q7PVNN VFA6cmdhbmRoaUBjaXNjby4gY29tJnF1b3Q7ICZsdDs8YSBocmVmPSJtYWlsdG86cmdhbmRoaUBj aXNjby5jb20iPnJnYW5kaGlAY2lzY28uY29tPC9hPiZndDssIFJpZmFhdCBTaGVraC1ZdXNlZiAm bHQ7PGEgaHJlZj0ibWFpbHRvOnJpZmFhdC5pZXRmQGdtYWlsLmNvbSI+cmlmYWF0LmlldGZAZ21h aWwuY29tPC9hPiZndDssICZxdW90OzxhIGhyZWY9Im1haWx0bzpkcmFmdC1pZXRmLXRlYXMtZ21w bHMtbHNwLWZhc3RyZXJvdXRlLmFsbEBpZXRmLm9yZyI+ZHJhZnQtaWV0Zi10ZWFzLWdtcGxzLWxz cC1mYXN0cmVyb3V0ZS5hbGxAaWV0Zi5vcmc8L2E+JnF1b3Q7DQogJmx0OzxhIGhyZWY9Im1haWx0 bzpkcmFmdC1pZXRmLXRlYXMtZ21wbHMtbHNwLWZhc3RyZXJvdXRlLmFsbEBpZXRmLm9yZyI+ZHJh ZnQtaWV0Zi10ZWFzLWdtcGxzLWxzcC1mYXN0cmVyb3V0ZS5hbGxAaWV0Zi5vcmc8L2E+Jmd0Oywg JnF1b3Q7PGEgaHJlZj0ibWFpbHRvOnNlY2RpckBpZXRmLm9yZyI+c2VjZGlyQGlldGYub3JnPC9h PiZxdW90OyAmbHQ7PGEgaHJlZj0ibWFpbHRvOnNlY2RpckBpZXRmLm9yZyI+c2VjZGlyQGlldGYu b3JnPC9hPiZndDssIFRoZSBJRVNHICZsdDs8YSBocmVmPSJtYWlsdG86aWVzZ0BpZXRmLm9yZyI+ aWVzZ0BpZXRmLm9yZzwvYT4mZ3Q7PGJyPg0KPGI+Q2M6IDwvYj5ERUJPUkFIIEJSVU5HQVJEICZs dDs8YSBocmVmPSJtYWlsdG86ZGIzNTQ2QGF0dC5jb20iPmRiMzU0NkBhdHQuY29tPC9hPiZndDss IExvdSBCZXJnZXIgJmx0OzxhIGhyZWY9Im1haWx0bzpsYmVyZ2VyQGxhYm4ubmV0Ij5sYmVyZ2Vy QGxhYm4ubmV0PC9hPiZndDssICZxdW90OzxhIGhyZWY9Im1haWx0bzpFWFQtdmlzaG51cGF2YW5A Z21haWwuY29tIj5FWFQtdmlzaG51cGF2YW5AZ21haWwuY29tPC9hPiZxdW90OyAmbHQ7PGEgaHJl Zj0ibWFpbHRvOnZpc2hudXBhdmFuQGdtYWlsLmNvbSI+dmlzaG51cGF2YW5AZ21haWwuY29tPC9h PiZndDs8YnI+DQo8Yj5TdWJqZWN0OiA8L2I+UmU6IFtzZWNkaXJdIHNlY2RpciByZXZpZXcgb2Yg ZHJhZnQtaWV0Zi10ZWFzLWdtcGxzLWxzcC1mYXN0cmVyb3V0ZS0wOTwvc3Bhbj48bzpwPjwvbzpw PjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPiZuYnNwOzxvOnA+PC9v OnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPlJha2Vz aCwgSGkhPG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFs Ij4mbmJzcDs8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3Jt YWwiPlRoaXMgaXMgYSB2YWxpZCBjb21tZW50LiAmbHQ7R01QTFMtTFNQLUZSUiZndDsgZG9lc27i gJl0IG1vZGlmeSBhbnkgb2YgdGhlIGV4aXN0aW5nIHByb2NlZHVyZXMgZGVmaW5lZCBpbiBSRkM0 MDkwLCBidXQgaXQgZG9lcyBzdXBwbGVtZW50IGl0LiBBcyBwZXIgUkZDMjIyMywgdGhpcyBpcyBz dWZmaWNpZW50IGdyb3VuZHMgdG8gc2V0IHRoZSDigJxVcGRhdGVz4oCdIGZpZWxkLjxvOnA+PC9v OnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+Jm5ic3A7PG86cD48 L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5Db3VydGVzeSBS RkMyMjIzOjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHByZT4mbmJzcDsmbmJzcDsm bmJzcDsmbmJzcDsmbmJzcDsgVG8gYmUgdXNlZCBhcyBhIHJlZmVyZW5jZSBmcm9tIGEgbmV3IGl0 ZW0gdGhhdCBjYW5ub3QgYmUgdXNlZDxvOnA+PC9vOnA+PC9wcmU+DQo8cHJlPiZuYnNwOyZuYnNw OyZuYnNwOyZuYnNwOyZuYnNwOyBhbG9uZSAoaS5lLiwgb25lIHRoYXQgc3VwcGxlbWVudHMgYSBw cmV2aW91cyBkb2N1bWVudCksIHRvIHJlZmVyPG86cD48L286cD48L3ByZT4NCjxwcmU+Jm5ic3A7 Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7IHRvIHRoZSBwcmV2aW91cyBkb2N1bWVudC4mbmJzcDsg VGhlIG5ld2VyIHB1YmxpY2F0aW9uIGlzIGEgcGFydCB0aGF0PG86cD48L286cD48L3ByZT4NCjxw cmU+Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7IHdpbGwgc3VwcGxlbWVudCBvciBiZSBh ZGRlZCBvbiB0byB0aGUgZXhpc3RpbmcgZG9jdW1lbnQ7IGUuZy4sIGFuPG86cD48L286cD48L3By ZT4NCjxwcmU+Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7IGFkZGVuZHVtLCBvciBzZXBh cmF0ZSwgZXh0cmEgaW5mb3JtYXRpb24gdGhhdCBpcyB0byBiZSBhZGRlZCB0bzxvOnA+PC9vOnA+ PC9wcmU+DQo8cHJlPiZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyB0aGUgb3JpZ2luYWwg ZG9jdW1lbnQuPG86cD48L286cD48L3ByZT4NCjwvZGl2Pg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xh c3M9Ik1zb05vcm1hbCI+QERlYm9yYWgg4oCUIEFyZSB5b3Ugb2sgd2l0aCB0aGlzPzxvOnA+PC9v OnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+UmVnYXJkcyw8bzpw PjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPi1QYXZhbjxv OnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+Jm5ic3A7 PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXYgc3R5bGU9ImJvcmRlcjpub25lO2JvcmRlci10 b3A6c29saWQgI0I1QzRERiAxLjBwdDtwYWRkaW5nOjMuMHB0IDBjbSAwY20gMGNtIj4NCjxwIGNs YXNzPSJNc29Ob3JtYWwiPjxiPjxzcGFuIHN0eWxlPSJmb250LWZhbWlseTpDYWxpYnJpO2NvbG9y OmJsYWNrIj5Gcm9tOiA8L3NwYW4+DQo8L2I+PHNwYW4gc3R5bGU9ImZvbnQtZmFtaWx5OkNhbGli cmk7Y29sb3I6YmxhY2siPiZxdW90O1Jha2VzaCBHYW5kaGkgKHJnYW5kaGkpJnF1b3Q7ICZsdDs8 YSBocmVmPSJtYWlsdG86cmdhbmRoaUBjaXNjby5jb20iPnJnYW5kaGlAY2lzY28uY29tPC9hPiZn dDs8YnI+DQo8Yj5EYXRlOiA8L2I+VHVlc2RheSwgSnVseSA0LCAyMDE3IGF0IDEwOjU1IEFNPGJy Pg0KPGI+VG86IDwvYj5SaWZhYXQgU2hla2gtWXVzZWYgJmx0OzxhIGhyZWY9Im1haWx0bzpyaWZh YXQuaWV0ZkBnbWFpbC5jb20iPnJpZmFhdC5pZXRmQGdtYWlsLmNvbTwvYT4mZ3Q7LCAmcXVvdDs8 YSBocmVmPSJtYWlsdG86ZHJhZnQtaWV0Zi10ZWFzLWdtcGxzLWxzcC1mYXN0cmVyb3V0ZS5hbGxA aWV0Zi5vcmciPmRyYWZ0LWlldGYtdGVhcy1nbXBscy1sc3AtZmFzdHJlcm91dGUuYWxsQGlldGYu b3JnPC9hPiZxdW90OyAmbHQ7PGEgaHJlZj0ibWFpbHRvOmRyYWZ0LWlldGYtdGVhcy1nbXBscy1s c3AtZmFzdHJlcm91dGUuYWxsQGlldGYub3JnIj5kcmFmdC1pZXRmLXRlYXMtZ21wbHMtbHNwLWZh c3RyZXJvdXRlLmFsbEBpZXRmLm9yZzwvYT4mZ3Q7LA0KICZxdW90OzxhIGhyZWY9Im1haWx0bzpz ZWNkaXJAaWV0Zi5vcmciPnNlY2RpckBpZXRmLm9yZzwvYT4mcXVvdDsgJmx0OzxhIGhyZWY9Im1h aWx0bzpzZWNkaXJAaWV0Zi5vcmciPnNlY2RpckBpZXRmLm9yZzwvYT4mZ3Q7LCBUaGUgSUVTRyAm bHQ7PGEgaHJlZj0ibWFpbHRvOmllc2dAaWV0Zi5vcmciPmllc2dAaWV0Zi5vcmc8L2E+Jmd0Ozxi cj4NCjxiPkNjOiA8L2I+REVCT1JBSCBCUlVOR0FSRCAmbHQ7PGEgaHJlZj0ibWFpbHRvOmRiMzU0 NkBhdHQuY29tIj5kYjM1NDZAYXR0LmNvbTwvYT4mZ3Q7LCBMb3UgQmVyZ2VyICZsdDs8YSBocmVm PSJtYWlsdG86bGJlcmdlckBsYWJuLm5ldCI+bGJlcmdlckBsYWJuLm5ldDwvYT4mZ3Q7LCAmcXVv dDs8YSBocmVmPSJtYWlsdG86RVhULXZpc2hudXBhdmFuQGdtYWlsLmNvbSI+RVhULXZpc2hudXBh dmFuQGdtYWlsLmNvbTwvYT4mcXVvdDsgJmx0OzxhIGhyZWY9Im1haWx0bzp2aXNobnVwYXZhbkBn bWFpbC5jb20iPnZpc2hudXBhdmFuQGdtYWlsLmNvbTwvYT4mZ3Q7PGJyPg0KPGI+U3ViamVjdDog PC9iPlJlOiBbc2VjZGlyXSBzZWNkaXIgcmV2aWV3IG9mIGRyYWZ0LWlldGYtdGVhcy1nbXBscy1s c3AtZmFzdHJlcm91dGUtMDk8YnI+DQo8Yj5SZXNlbnQtRnJvbTogPC9iPiZsdDs8YSBocmVmPSJt YWlsdG86YWxpYXMtYm91bmNlc0BpZXRmLm9yZyI+YWxpYXMtYm91bmNlc0BpZXRmLm9yZzwvYT4m Z3Q7PGJyPg0KPGI+UmVzZW50LVRvOiA8L2I+Jmx0OzxhIGhyZWY9Im1haWx0bzptdGFpbGxvbkBj aXNjby5jb20iPm10YWlsbG9uQGNpc2NvLmNvbTwvYT4mZ3Q7LCAmbHQ7PGEgaHJlZj0ibWFpbHRv OnRzYWFkQGNpc2NvLmNvbSI+dHNhYWRAY2lzY28uY29tPC9hPiZndDssICZsdDs8YSBocmVmPSJt YWlsdG86cmdhbmRoaUBjaXNjby5jb20iPnJnYW5kaGlAY2lzY28uY29tPC9hPiZndDssIFphZmFy IEFsaSAmbHQ7PGEgaHJlZj0ibWFpbHRvOnphbGlAY2lzY28uY29tIj56YWxpQGNpc2NvLmNvbTwv YT4mZ3Q7LA0KICZsdDs8YSBocmVmPSJtYWlsdG86bWFuYXYuYmhhdGlhQG5va2lhLmNvbSI+bWFu YXYuYmhhdGlhQG5va2lhLmNvbTwvYT4mZ3Q7LCAmbHQ7PGEgaHJlZj0ibWFpbHRvOm1oYXJ0bGV5 QGNpc2NvLmNvbSI+bWhhcnRsZXlAY2lzY28uY29tPC9hPiZndDssIExvdSBCZXJnZXIgJmx0Ozxh IGhyZWY9Im1haWx0bzpsYmVyZ2VyQGxhYm4ubmV0Ij5sYmVyZ2VyQGxhYm4ubmV0PC9hPiZndDss IFZpc2hudSBQYXZhbiBCZWVyYW0gJmx0OzxhIGhyZWY9Im1haWx0bzp2YmVlcmFtQGp1bmlwZXIu bmV0Ij52YmVlcmFtQGp1bmlwZXIubmV0PC9hPiZndDssDQogJmx0OzxhIGhyZWY9Im1haWx0bzph cmV0YW5hQGNpc2NvLmNvbSI+YXJldGFuYUBjaXNjby5jb208L2E+Jmd0OywgJmx0OzxhIGhyZWY9 Im1haWx0bzpkYjM1NDZAYXR0LmNvbSI+ZGIzNTQ2QGF0dC5jb208L2E+Jmd0OywgJmx0OzxhIGhy ZWY9Im1haWx0bzpha2F0bGFzQGdtYWlsLmNvbSI+YWthdGxhc0BnbWFpbC5jb208L2E+Jmd0Ozxi cj4NCjxiPlJlc2VudC1EYXRlOiA8L2I+VHVlc2RheSwgSnVseSA0LCAyMDE3IGF0IDEwOjU1IEFN PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1h bCI+Jm5ic3A7PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9 Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtZmFtaWx5OkNhbGlicmkiPlRoYW5rcyBSaWZh YXQgZm9yIHRoZSByZXZpZXcgb2YgdGhpcyBkb2N1bWVudC48L3NwYW4+PG86cD48L286cD48L3A+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1mYW1pbHk6Q2FsaWJyaSI+ Jm5ic3A7PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4g c3R5bGU9ImZvbnQtZmFtaWx5OkNhbGlicmkiPkhpIERlYm9yYWgsIExvdSwgUGF2YW4sPC9zcGFu PjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQt ZmFtaWx5OkNhbGlicmkiPiZuYnNwOzwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJN c29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LWZhbWlseTpDYWxpYnJpIj5BbnkgdGhvdWdodHMg b24gdGhlIGZvbGxvd2luZyBzdWdnZXN0aW9uPzwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjxwIGNs YXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LWZhbWlseTpDYWxpYnJpIj4mbmJzcDs8 L3NwYW4+PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0i Zm9udC1mYW1pbHk6Q2FsaWJyaSI+4oCcQmVjYXVzZSB0aGUgZG9jdW1lbnQgZXh0ZW5kcyBSRkM0 MDkwLCBpdCBzaG91bGQgYWRkICZxdW90O1VwZGF0ZXM6IDQwOTAmcXVvdDsgYXQgdGhlIHRvcCBv ZiB0aGUgZG9jdW1lbnQu4oCdPC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05v cm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtZmFtaWx5OkNhbGlicmkiPiZuYnNwOzwvc3Bhbj48bzpw PjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LWZhbWls eTpDYWxpYnJpIj5UaGFua3MsPC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05v cm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtZmFtaWx5OkNhbGlicmkiPlJha2VzaDwvc3Bhbj48bzpw PjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LWZhbWls eTpDYWxpYnJpIj4mbmJzcDs8L3NwYW4+PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9y bWFsIj48c3BhbiBzdHlsZT0iZm9udC1mYW1pbHk6Q2FsaWJyaSI+Jm5ic3A7PC9zcGFuPjxvOnA+ PC9vOnA+PC9wPg0KPGRpdiBzdHlsZT0iYm9yZGVyOm5vbmU7Ym9yZGVyLXRvcDpzb2xpZCAjQjVD NERGIDEuMHB0O3BhZGRpbmc6My4wcHQgMGNtIDBjbSAwY20iPg0KPHAgY2xhc3M9Ik1zb05vcm1h bCI+PGI+PHNwYW4gc3R5bGU9ImZvbnQtZmFtaWx5OkNhbGlicmk7Y29sb3I6YmxhY2siPkZyb206 IDwvc3Bhbj4NCjwvYj48c3BhbiBzdHlsZT0iZm9udC1mYW1pbHk6Q2FsaWJyaTtjb2xvcjpibGFj ayI+UmlmYWF0IFNoZWtoLVl1c2VmICZsdDs8YSBocmVmPSJtYWlsdG86cmlmYWF0LmlldGZAZ21h aWwuY29tIj5yaWZhYXQuaWV0ZkBnbWFpbC5jb208L2E+Jmd0Ozxicj4NCjxiPkRhdGU6IDwvYj5U dWVzZGF5LCBKdWx5IDQsIDIwMTcgYXQgOTozMiBBTTxicj4NCjxiPlRvOiA8L2I+JnF1b3Q7PGEg aHJlZj0ibWFpbHRvOmRyYWZ0LWlldGYtdGVhcy1nbXBscy1sc3AtZmFzdHJlcm91dGUuYWxsQGll dGYub3JnIj5kcmFmdC1pZXRmLXRlYXMtZ21wbHMtbHNwLWZhc3RyZXJvdXRlLmFsbEBpZXRmLm9y ZzwvYT4mcXVvdDsgJmx0OzxhIGhyZWY9Im1haWx0bzpkcmFmdC1pZXRmLXRlYXMtZ21wbHMtbHNw LWZhc3RyZXJvdXRlLmFsbEBpZXRmLm9yZyI+ZHJhZnQtaWV0Zi10ZWFzLWdtcGxzLWxzcC1mYXN0 cmVyb3V0ZS5hbGxAaWV0Zi5vcmc8L2E+Jmd0OywNCiAmcXVvdDs8YSBocmVmPSJtYWlsdG86c2Vj ZGlyQGlldGYub3JnIj5zZWNkaXJAaWV0Zi5vcmc8L2E+JnF1b3Q7ICZsdDs8YSBocmVmPSJtYWls dG86c2VjZGlyQGlldGYub3JnIj5zZWNkaXJAaWV0Zi5vcmc8L2E+Jmd0OywgVGhlIElFU0cgJmx0 OzxhIGhyZWY9Im1haWx0bzppZXNnQGlldGYub3JnIj5pZXNnQGlldGYub3JnPC9hPiZndDs8YnI+ DQo8Yj5TdWJqZWN0OiA8L2I+W3NlY2Rpcl0gc2VjZGlyIHJldmlldyBvZiBkcmFmdC1pZXRmLXRl YXMtZ21wbHMtbHNwLWZhc3RyZXJvdXRlLTA5PGJyPg0KPGI+UmVzZW50LUZyb206IDwvYj4mbHQ7 PGEgaHJlZj0ibWFpbHRvOmFsaWFzLWJvdW5jZXNAaWV0Zi5vcmciPmFsaWFzLWJvdW5jZXNAaWV0 Zi5vcmc8L2E+Jmd0Ozxicj4NCjxiPlJlc2VudC1UbzogPC9iPiZxdW90Oz1TTVRQOm10YWlsbG9u QGNpc2NvLiBjb20mcXVvdDsgJmx0OzxhIGhyZWY9Im1haWx0bzptdGFpbGxvbkBjaXNjby5jb20i Pm10YWlsbG9uQGNpc2NvLmNvbTwvYT4mZ3Q7LCAmbHQ7PGEgaHJlZj0ibWFpbHRvOnRzYWFkQGNp c2NvLmNvbSI+dHNhYWRAY2lzY28uY29tPC9hPiZndDssICZxdW90Oz1TTVRQOnJnYW5kaGlAY2lz Y28uIGNvbSZxdW90OyAmbHQ7PGEgaHJlZj0ibWFpbHRvOnJnYW5kaGlAY2lzY28uY29tIj5yZ2Fu ZGhpQGNpc2NvLmNvbTwvYT4mZ3Q7LCBaYWZhcg0KIEFsaSAmbHQ7PGEgaHJlZj0ibWFpbHRvOnph bGlAY2lzY28uY29tIj56YWxpQGNpc2NvLmNvbTwvYT4mZ3Q7LCAmbHQ7PGEgaHJlZj0ibWFpbHRv Om1hbmF2LmJoYXRpYUBub2tpYS5jb20iPm1hbmF2LmJoYXRpYUBub2tpYS5jb208L2E+Jmd0Oywg Jmx0OzxhIGhyZWY9Im1haWx0bzptaGFydGxleUBjaXNjby5jb20iPm1oYXJ0bGV5QGNpc2NvLmNv bTwvYT4mZ3Q7LCBMb3UgQmVyZ2VyICZsdDs8YSBocmVmPSJtYWlsdG86bGJlcmdlckBsYWJuLm5l dCI+bGJlcmdlckBsYWJuLm5ldDwvYT4mZ3Q7LA0KICZsdDs8YSBocmVmPSJtYWlsdG86dmJlZXJh bUBqdW5pcGVyLm5ldCI+dmJlZXJhbUBqdW5pcGVyLm5ldDwvYT4mZ3Q7LCAmbHQ7PGEgaHJlZj0i bWFpbHRvOmFyZXRhbmFAY2lzY28uY29tIj5hcmV0YW5hQGNpc2NvLmNvbTwvYT4mZ3Q7LCBERUJP UkFIIEJSVU5HQVJEICZsdDs8YSBocmVmPSJtYWlsdG86ZGIzNTQ2QGF0dC5jb20iPmRiMzU0NkBh dHQuY29tPC9hPiZndDssICZsdDs8YSBocmVmPSJtYWlsdG86YWthdGxhc0BnbWFpbC5jb20iPmFr YXRsYXNAZ21haWwuY29tPC9hPiZndDs8YnI+DQo8Yj5SZXNlbnQtRGF0ZTogPC9iPlR1ZXNkYXks IEp1bHkgNCwgMjAxNyBhdCA5OjQwIEFNPC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8 ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+Jm5ic3A7PG86cD48L286cD48L3A+DQo8L2Rpdj4N CjxkaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+SSBoYXZlIHJldmlld2VkIHRoaXMg ZG9jdW1lbnQgYXMgcGFydCBvZiB0aGUgc2VjdXJpdHkgZGlyZWN0b3JhdGUnczxvOnA+PC9vOnA+ PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+b25nb2luZyBlZmZvcnQg dG8gcmV2aWV3IGFsbCBJRVRGIGRvY3VtZW50cyBiZWluZyBwcm9jZXNzZWQgYnkgdGhlPG86cD48 L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5JRVNHLiZuYnNw OyBUaGVzZSBjb21tZW50cyB3ZXJlIHdyaXR0ZW4gcHJpbWFyaWx5IGZvciB0aGUgYmVuZWZpdCBv ZiB0aGU8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi PnNlY3VyaXR5IGFyZWEgZGlyZWN0b3JzLiZuYnNwOyBEb2N1bWVudCBlZGl0b3JzIGFuZCBXRyBj aGFpcnMgc2hvdWxkIHRyZWF0PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIj50aGVzZSBjb21tZW50cyBqdXN0IGxpa2UgYW55IG90aGVyIGxhc3QgY2Fs bCBjb21tZW50cy48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29O b3JtYWwiPiZuYnNwOzxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1z b05vcm1hbCI+U3VtbWFyeTogUmVhZHkgd2l0aCBOaXRzPG86cD48L286cD48L3A+DQo8L2Rpdj4N CjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj4mbmJzcDs8bzpwPjwvbzpwPjwvcD4NCjwvZGl2 Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPiZuYnNwOzxvOnA+PC9vOnA+PC9wPg0KPC9k aXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+SSBkaWQgbm90IGhhdmUgZW5vdWdoIGJh Y2tncm91bmQgb24gTUxQUyBhbmQgR01QTFMgYW5kIHRoZWlyIHJlbGF0ZWQgUkZDcyw8bzpwPjwv bzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPnNvIEkgaGFkIHRv IGRvIHNvbWUgcmVhZGluZyB0byBnZXQgc29tZSBmYW1pbGlhcml0eSB3aXRoIHRoaXMgc3ViamVj dCB0byBiZTxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1h bCI+YWJsZSB0byBwcm92aWRlIHNvbWUgcmVhc29uYWJsZSByZXZpZXcgb2YgdGhpcyBkb2N1bWVu dC48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPiZu YnNwOzxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+ VGhpcyBkb2N1bWVudCBidWlsZHMgb24gYW4gZXhpc3RpbmcgbWVjaGFuaXNtLCAmcXVvdDtGYXN0 IFJlcm91dGUgRXh0ZW5zaW9ucyB0bzxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCI+UlNWUC1URSBmb3IgTFNQIFR1bm5lbHMmcXVvdDsgZGVmaW5lZCBp biBSRkM0MDkwLCB3aGljaCBkZWZpbmVzIGEgbWVjaGFuaXNtIHRvPG86cD48L286cD48L3A+DQo8 L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5lc3RhYmxpc2ggYSBiYWNrdXAgdHVu bmVscyBmb3IgbG9jYWwgTFNQIHR1bm5lbHMuIE9uZSBsaW1pdGF0aW9uIG9mIHRoZTxvOnA+PC9v OnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+ZXhpc3RpbmcgbWVj aGFuaXNtIGlzIHRoYXQgaW4gc29tZSBzaXR1YXRpb25zIGl0IG1pZ2h0IGFzc2lnbiBkaWZmZXJl bnQ8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPnVu aS1kaXJlY3Rpb25hbCBieXBhc3MgdHVubmVscyBmb3IgdGhlIGZvcndhcmQgYW5kIHJldmVyc2Ug ZGlyZWN0aW9ucy48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29O b3JtYWwiPiZuYnNwOzxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1z b05vcm1hbCI+VGhpcyBkb2N1bWVudCBleHRlbmRzIHRoZSBtZWNoYW5pc20gZGVmaW5lZCBpbiBS RkM0MDkwLCBieSBhZGRpbmcgYSBuZXc8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxw IGNsYXNzPSJNc29Ob3JtYWwiPkJZUEFTU19BU1NJR05NRU5UIHN1Ym9iamVjdCB0byB0aGUgZXhp c3RpbmcgUkVDT1JEX1JPVVRFIE9iamVjdCAoUlJPKSB1c2VkPG86cD48L286cD48L3A+DQo8L2Rp dj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5pbiBQQVRIIGFuZCBSRVNWIHJlcXVlc3Rz LCB0byBhbGxvdyB0aGUgZXN0YWJsaXNobWVudCBvZiBhIGJpLWRpcmVjdGlvbmFsPG86cD48L286 cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5ieXBhc3MgdHVubmVs LjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+Jm5i c3A7PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5U aGUgc2VjdXJpdHkgb2YgdGhlIGV4aXN0aW5nIG1lY2hhbmlzbSBzdGlsbCBhcHBsaWVzIHdpdGgg dGhlIG5ldyBtZWNoYW5pc20sPG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIj5hbmQgdGhlIHNlY3VyaXR5IHNlY3Rpb24gZGlzY3Vzc2VzIHRoZSBpbXBs aWNhdGlvbnMgb2YgdGhlIG5ldyBzdWJvYmplY3QgYW5kPG86cD48L286cD48L3A+DQo8L2Rpdj4N CjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj50aGUgbmV3IGVycm9yIGFzc29jaWF0ZWQgd2l0 aCB0aGF0LCB3aGljaCBzZWVtcyByZWFzb25hYmxlLjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8 ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+Jm5ic3A7PG86cD48L286cD48L3A+DQo8L2Rpdj4N CjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5UaGUgZG9jdW1lbnQgYWxzbyBwb2ludHMgdG8g YW4gTVBMUy9HTVBMUyBTZWN1cml0eSBGcmFtZXdvcmsgKFJGQzU5MjApPG86cD48L286cD48L3A+ DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5kb2N1bWVudCB0aGF0IGhhcyBh biBleHRlbnNpdmUgZGlzY3Vzc2lvbiBvZiB0aGUgc2VjdXJpdHkgb2YgTVBMUy9HTVBMUzxvOnA+ PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+bmV0d29yayBp biBnZW5lcmFsIHRoYXQgYWxzbyBhcHBsaWVzIHRvIHRoaXMgZG9jdW1lbnQuPG86cD48L286cD48 L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj4mbmJzcDs8bzpwPjwvbzpw PjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPiZuYnNwOzxvOnA+PC9v OnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+Tml0czxvOnA+PC9v OnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+Jm5ic3A7PG86cD48 L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5CZWNhdXNlIHRo ZSBkb2N1bWVudCBleHRlbmRzIFJGQzQwOTAsIGl0IHNob3VsZCBhZGQgJnF1b3Q7VXBkYXRlczog NDA5MCZxdW90OyBhdCB0aGU8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNz PSJNc29Ob3JtYWwiPnRvcCBvZiB0aGUgZG9jdW1lbnQuPG86cD48L286cD48L3A+DQo8L2Rpdj4N CjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj4mbmJzcDs8bzpwPjwvbzpwPjwvcD4NCjwvZGl2 Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPlJlZ2FyZHMsPG86cD48L286cD48L3A+DQo8 L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj4mbmJzcDtSaWZhYXQ8bzpwPjwvbzpw PjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPiZuYnNwOzxvOnA+PC9v OnA+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0K PC9ib2R5Pg0KPC9odG1sPg0K --_000_8FCEBCD66CFE4961A7E8A39801486434ciscocom_-- --_005_8FCEBCD66CFE4961A7E8A39801486434ciscocom_ Content-Type: text/html; name="Diff_ draft-ietf-teas-gmpls-lsp-fastreroute-09.txt - draft-ietf-teas-gmpls-lsp-fastreroute-10.txt.html" Content-Description: Diff_ draft-ietf-teas-gmpls-lsp-fastreroute-09.txt - draft-ietf-teas-gmpls-lsp-fastreroute-10.txt.html Content-Disposition: attachment; filename="Diff_ draft-ietf-teas-gmpls-lsp-fastreroute-09.txt - draft-ietf-teas-gmpls-lsp-fastreroute-10.txt.html"; size=78932; creation-date="Tue, 11 Jul 2017 15:37:27 GMT"; modification-date="Tue, 11 Jul 2017 15:37:27 GMT" Content-ID: <4629D32A9A2A4B468DABA026859B025E@emea.cisco.com> Content-Transfer-Encoding: base64 PCFET0NUWVBFIGh0bWwgUFVCTElDICItLy9XM0MvL0RURCBYSFRNTCAxLjAgVHJhbnNpdGlvbmFs Ly9FTiIgImh0dHA6Ly93d3cudzMub3JnL1RSL3hodG1sMS9EVEQveGh0bWwxLXRyYW5zaXRpb25h bC5kdGQiPgo8IS0tIEdlbmVyYXRlZCBieSByZmNkaWZmIDEuNDU6IHJmY2RpZmYgIC0tPgo8IS0t IDwhRE9DVFlQRSBodG1sIFBVQkxJQyAiLS8vVzNDLy9EVEQgSFRNTCA0LjAxIFRyYW5zaXRpb25h bCIgPiAtLT4KPCEtLSBTeXN0ZW06IExpbnV4IHppbmZhbmRlbCAzLjIuMC00LWFtZDY0ICMxIFNN UCBEZWJpYW4gMy4yLjg0LTEgeDg2XzY0IEdOVS9MaW51eCAtLT4KPCEtLSBVc2luZyBhd2s6IC91 c3IvYmluL2dhd2s6IEdOVSBBd2sgNC4wLjEgLS0+CjwhLS0gVXNpbmcgZGlmZjogL3Vzci9iaW4v ZGlmZjogZGlmZiAoR05VIGRpZmZ1dGlscykgMy4yIC0tPgo8IS0tIFVzaW5nIHdkaWZmOiAvdXNy L2Jpbi93ZGlmZjogd2RpZmYgKEdOVSB3ZGlmZikgMS4xLjIgLS0+CjxodG1sIHhtbG5zPSJodHRw Oi8vd3d3LnczLm9yZy8xOTk5L3hodG1sIj48aGVhZD4gCiAgPG1ldGEgaHR0cC1lcXVpdj0iQ29u dGVudC1UeXBlIiBjb250ZW50PSJ0ZXh0L2h0bWw7IGNoYXJzZXQ9VVRGLTgiPiAKICA8bWV0YSBo dHRwLWVxdWl2PSJDb250ZW50LVN0eWxlLVR5cGUiIGNvbnRlbnQ9InRleHQvY3NzIj4gCiAgPHRp dGxlPkRpZmY6IGRyYWZ0LWlldGYtdGVhcy1nbXBscy1sc3AtZmFzdHJlcm91dGUtMDkudHh0IC0g ZHJhZnQtaWV0Zi10ZWFzLWdtcGxzLWxzcC1mYXN0cmVyb3V0ZS0xMC50eHQ8L3RpdGxlPiAKICA8 c3R5bGUgdHlwZT0idGV4dC9jc3MiPiAKICAgIGJvZHkgICAgeyBtYXJnaW46IDAuNGV4OyBtYXJn aW4tcmlnaHQ6IGF1dG87IH0gCiAgICB0ciAgICAgIHsgfSAKICAgIHRkICAgICAgeyB3aGl0ZS1z cGFjZTogcHJlOyBmb250LWZhbWlseTogbW9ub3NwYWNlOyB2ZXJ0aWNhbC1hbGlnbjogdG9wOyBm b250LXNpemU6IDAuODZlbTt9IAogICAgdGggICAgICB7IGZvbnQtc2l6ZTogMC44NmVtOyB9IAog ICAgLnNtYWxsICB7IGZvbnQtc2l6ZTogMC42ZW07IGZvbnQtc3R5bGU6IGl0YWxpYzsgZm9udC1m YW1pbHk6IFZlcmRhbmEsIEhlbHZldGljYSwgc2Fucy1zZXJpZjsgfSAKICAgIC5sZWZ0ICAgeyBi YWNrZ3JvdW5kLWNvbG9yOiAjRUVFOyB9IAogICAgLnJpZ2h0ICB7IGJhY2tncm91bmQtY29sb3I6 ICNGRkY7IH0gCiAgICAuZGlmZiAgIHsgYmFja2dyb3VuZC1jb2xvcjogI0NDRjsgfSAKICAgIC5s YmxvY2sgeyBiYWNrZ3JvdW5kLWNvbG9yOiAjQkZCOyB9IAogICAgLnJibG9jayB7IGJhY2tncm91 bmQtY29sb3I6ICNGRjg7IH0gCiAgICAuaW5zZXJ0IHsgYmFja2dyb3VuZC1jb2xvcjogIzhGRjsg fSAKICAgIC5kZWxldGUgeyBiYWNrZ3JvdW5kLWNvbG9yOiAjQUNGOyB9IAogICAgLnZvaWQgICB7 IGJhY2tncm91bmQtY29sb3I6ICNGRkI7IH0gCiAgICAuY29udCAgIHsgYmFja2dyb3VuZC1jb2xv cjogI0VFRTsgfSAKICAgIC5saW5lYnIgeyBiYWNrZ3JvdW5kLWNvbG9yOiAjQUFBOyB9IAogICAg LmxpbmVubyB7IGNvbG9yOiByZWQ7IGJhY2tncm91bmQtY29sb3I6ICNGRkY7IGZvbnQtc2l6ZTog MC43ZW07IHRleHQtYWxpZ246IHJpZ2h0OyBwYWRkaW5nOiAwIDJweDsgfSAKICAgIC5lbGlwc2lz eyBiYWNrZ3JvdW5kLWNvbG9yOiAjQUFBOyB9IAogICAgLmxlZnQgLmNvbnQgeyBiYWNrZ3JvdW5k LWNvbG9yOiAjREREOyB9IAogICAgLnJpZ2h0IC5jb250IHsgYmFja2dyb3VuZC1jb2xvcjogI0VF RTsgfSAKICAgIC5sYmxvY2sgLmNvbnQgeyBiYWNrZ3JvdW5kLWNvbG9yOiAjOUQ5OyB9IAogICAg LnJibG9jayAuY29udCB7IGJhY2tncm91bmQtY29sb3I6ICNERDY7IH0gCiAgICAuaW5zZXJ0IC5j b250IHsgYmFja2dyb3VuZC1jb2xvcjogIzBERDsgfSAKICAgIC5kZWxldGUgLmNvbnQgeyBiYWNr Z3JvdW5kLWNvbG9yOiAjOEFEOyB9IAogICAgLnN0YXRzLCAuc3RhdHMgdGQsIC5zdGF0cyB0aCB7 IGJhY2tncm91bmQtY29sb3I6ICNFRUU7IHBhZGRpbmc6IDJweCAwOyB9IAogICAgc3Bhbi5oaWRl IHsgZGlzcGxheTogbm9uZTsgY29sb3I6ICNhYWE7fSAgICBhOmhvdmVyIHNwYW4geyBkaXNwbGF5 OiBpbmxpbmU7IH0gICAgdHIuY2hhbmdlIHsgYmFja2dyb3VuZC1jb2xvcjogZ3JheTsgfSAKICAg IHRyLmNoYW5nZSBhIHsgdGV4dC1kZWNvcmF0aW9uOiBub25lOyBjb2xvcjogYmxhY2sgfSAKICA8 L3N0eWxlPiAKICAgICA8c2NyaXB0Pgp2YXIgY2h1bmtfaW5kZXggPSAwOwp2YXIgb2xkX2NodW5r ID0gbnVsbDsKCmZ1bmN0aW9uIGZvcm1hdF9jaHVuayhpbmRleCkgewogICAgdmFyIHByZWZpeCA9 ICJkaWZmIjsKICAgIHZhciBzdHIgPSBpbmRleC50b1N0cmluZygpOwogICAgZm9yICh4PTA7IHg8 KDQtc3RyLmxlbmd0aCk7ICsreCkgewogICAgICAgIHByZWZpeCs9JzAnOwogICAgfQogICAgcmV0 dXJuIHByZWZpeCArIHN0cjsKfQoKZnVuY3Rpb24gZmluZF9jaHVuayhuKXsKICAgIHJldHVybiBk b2N1bWVudC5xdWVyeVNlbGVjdG9yKCd0cltpZCQ9IicgKyBuICsgJyJdJyk7Cn0KCmZ1bmN0aW9u IGNoYW5nZV9jaHVuayhvZmZzZXQpIHsKICAgIHZhciBpbmRleCA9IGNodW5rX2luZGV4ICsgb2Zm c2V0OwogICAgdmFyIG5ld19zdHI7CiAgICB2YXIgbmV3X2NodW5rOwoKICAgIG5ld19zdHIgPSBm b3JtYXRfY2h1bmsoaW5kZXgpOwogICAgbmV3X2NodW5rID0gZmluZF9jaHVuayhuZXdfc3RyKTsK ICAgIGlmICghbmV3X2NodW5rKSB7CiAgICAgICAgcmV0dXJuOwogICAgfQogICAgaWYgKG9sZF9j aHVuaykgewogICAgICAgIG9sZF9jaHVuay5zdHlsZS5vdXRsaW5lID0gIiI7CiAgICB9CiAgICBv bGRfY2h1bmsgPSBuZXdfY2h1bms7CiAgICBvbGRfY2h1bmsuc3R5bGUub3V0bGluZSA9ICIxcHgg c29saWQgcmVkIjsKICAgIHdpbmRvdy5sb2NhdGlvbi5oYXNoID0gIiMiICsgbmV3X3N0cjsKICAg IHdpbmRvdy5zY3JvbGxCeSgwLC0xMDApOwogICAgY2h1bmtfaW5kZXggPSBpbmRleDsKfQoKZG9j dW1lbnQub25rZXlkb3duID0gZnVuY3Rpb24oZSkgewogICAgc3dpdGNoIChlLmtleUNvZGUpIHsK ICAgIGNhc2UgNzg6CiAgICAgICAgY2hhbmdlX2NodW5rKDEpOwogICAgICAgIGJyZWFrOwogICAg Y2FzZSA4MDoKICAgICAgICBjaGFuZ2VfY2h1bmsoLTEpOwogICAgICAgIGJyZWFrOwogICAgfQp9 OwogICA8L3NjcmlwdD4gCjwvaGVhZD4gCjxib2R5PiAKICA8dGFibGUgY2VsbHNwYWNpbmc9IjAi IGNlbGxwYWRkaW5nPSIwIiBib3JkZXI9IjAiPiAKICA8dGJvZHk+PHRyIGlkPSJwYXJ0LTEiIGJn Y29sb3I9Im9yYW5nZSI+PHRoPjwvdGg+PHRoPjxhIGhyZWY9Imh0dHBzOi8vdG9vbHMuaWV0Zi5v cmcvcmZjZGlmZj91cmwyPWRyYWZ0LWlldGYtdGVhcy1nbXBscy1sc3AtZmFzdHJlcm91dGUtMDku dHh0IiBzdHlsZT0iY29sb3I6IzAwODsgdGV4dC1kZWNvcmF0aW9uOm5vbmU7Ij4mbHQ7PC9hPiZu YnNwOzxhIGhyZWY9Imh0dHBzOi8vdG9vbHMuaWV0Zi5vcmcvaHRtbC9kcmFmdC1pZXRmLXRlYXMt Z21wbHMtbHNwLWZhc3RyZXJvdXRlLTA5LnR4dCIgc3R5bGU9ImNvbG9yOiMwMDgiPmRyYWZ0LWll dGYtdGVhcy1nbXBscy1sc3AtZmFzdHJlcm91dGUtMDkudHh0PC9hPiZuYnNwOzwvdGg+PHRoPiA8 L3RoPjx0aD4mbmJzcDs8YSBocmVmPSJodHRwczovL3Rvb2xzLmlldGYub3JnL2h0bWwvZHJhZnQt aWV0Zi10ZWFzLWdtcGxzLWxzcC1mYXN0cmVyb3V0ZS0xMC50eHQiIHN0eWxlPSJjb2xvcjojMDA4 Ij5kcmFmdC1pZXRmLXRlYXMtZ21wbHMtbHNwLWZhc3RyZXJvdXRlLTEwLnR4dDwvYT4mbmJzcDs8 YSBocmVmPSJodHRwczovL3Rvb2xzLmlldGYub3JnL3JmY2RpZmY/dXJsMT1kcmFmdC1pZXRmLXRl YXMtZ21wbHMtbHNwLWZhc3RyZXJvdXRlLTEwLnR4dCIgc3R5bGU9ImNvbG9yOiMwMDg7IHRleHQt ZGVjb3JhdGlvbjpub25lOyI+Jmd0OzwvYT48L3RoPjx0aD48L3RoPjwvdHI+IAogICAgICA8dHI+ PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij48L3RkPjx0ZD4gPC90ZD48 dGQgY2xhc3M9InJpZ2h0Ij48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAg IDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPlRFQVMgV29ya2lu ZyBHcm91cCAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgTS4gVGFp bGxvbjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPlRFQVMgV29ya2luZyBHcm91cCAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgTS4gVGFpbGxvbjwvdGQ+ PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5v Ij48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+SW50ZXJuZXQtRHJhZnQgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgVC4gU2FhZCwgRWQuPC90ZD48dGQ+IDwvdGQ+PHRk IGNsYXNzPSJyaWdodCI+SW50ZXJuZXQtRHJhZnQgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgVC4gU2FhZCwgRWQuPC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90 ZD48L3RyPgogICAgICA8dHIgaWQ9ImRpZmYwMDAxIj48dGQ+PC90ZD48L3RyPgogICAgICA8dHI+ PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPkludGVuZGVkIFN0YXR1 czogU3RhbmRhcmRzIFRyYWNrICAgICAgICAgICAgICAgICAgICAgICAgICA8c3BhbiBjbGFzcz0i ZGVsZXRlIj5SLiBHYW5kaGksIEVkLjwvc3Bhbj48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJi bG9jayI+PHNwYW4gY2xhc3M9Imluc2VydCI+VXBkYXRlczogNDA5MCAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgIFIuIEdhbmRoaSwgRWQuPC9zcGFuPjwvdGQ+PHRk IGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48 L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48c3BhbiBjbGFzcz0iZGVsZXRlIj5FeHBpcmVzOiBOb3Zl bWJlciAxNiwgMjAxNzwvc3Bhbj4gICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgWi4gQWxpPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPkludGVuZGVkIFN0YXR1 czogU3RhbmRhcmRzIFRyYWNrICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIFouIEFs aTwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0i bGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj4gICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgIENpc2NvIFN5c3RlbXMsIEluYy48L3RkPjx0ZD4g PC90ZD48dGQgY2xhc3M9InJibG9jayI+PHNwYW4gY2xhc3M9Imluc2VydCI+RXhwaXJlczogSmFu dWFyeSAxMiwgMjAxODwvc3Bhbj4gICAgICAgICAgICAgICAgICAgICAgICAgICAgQ2lzY28gU3lz dGVtcywgSW5jLjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0 ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgTS4gQmhhdGlhPC90 ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgTS4gQmhhdGlhPC90ZD48dGQgY2xh c3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+ PHRkIGNsYXNzPSJsZWZ0Ij4gICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgTm9raWE8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9 InJpZ2h0Ij4gICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgTm9raWE8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+ CiAgICAgIDx0ciBpZD0iZGlmZjAwMDIiPjx0ZD48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xh c3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+ICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICA8c3BhbiBjbGFzcz0iZGVsZXRl Ij4gTWF5IDE1PC9zcGFuPiwgMjAxNzwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj4g ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg IDxzcGFuIGNsYXNzPSJpbnNlcnQiPkp1bHkgMTE8L3NwYW4+LCAyMDE3PC90ZD48dGQgY2xhc3M9 ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRk IGNsYXNzPSJsZWZ0Ij48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij48L3RkPjx0ZCBj bGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0ciBpZD0iZGlmZjAwMDMiPjx0ZD48L3Rk PjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9ImxibG9j ayI+ICAgIDxzcGFuIGNsYXNzPSJkZWxldGUiPkV4dGVuc2lvbjwvc3Bhbj5zIHRvIFJlc291cmNl IFJlc2VydmF0aW9uIFByb3RvY29sIEZvciBGYXN0IFJlcm91dGUgb2Y8L3RkPjx0ZD4gPC90ZD48 dGQgY2xhc3M9InJibG9jayI+ICAgIDxzcGFuIGNsYXNzPSJpbnNlcnQiPlVwZGF0ZTwvc3Bhbj5z IHRvIFJlc291cmNlIFJlc2VydmF0aW9uIFByb3RvY29sIEZvciBGYXN0IFJlcm91dGUgb2Y8L3Rk Pjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVu byI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgICAgICAgICAgICAgICAgIFRyYWZmaWMgRW5naW5l ZXJpbmcgR01QTFMgTFNQczwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgICAgICAg ICAgICAgICAgIFRyYWZmaWMgRW5naW5lZXJpbmcgR01QTFMgTFNQczwvdGQ+PHRkIGNsYXNzPSJs aW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyIGlkPSJkaWZmMDAwNCI+PHRkPjwvdGQ+PC90cj4K ICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj4gICAg ICAgICAgICAgZHJhZnQtaWV0Zi10ZWFzLWdtcGxzLWxzcC1mYXN0cmVyb3V0ZS08c3BhbiBjbGFz cz0iZGVsZXRlIj4wOTwvc3Bhbj48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+ICAg ICAgICAgICAgIGRyYWZ0LWlldGYtdGVhcy1nbXBscy1sc3AtZmFzdHJlcm91dGUtPHNwYW4gY2xh c3M9Imluc2VydCI+MTA8L3NwYW4+PC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgog ICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij48L3RkPjx0 ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwv dHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPkFi c3RyYWN0PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+QWJzdHJhY3Q8L3RkPjx0ZCBj bGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90 ZD48dGQgY2xhc3M9ImxlZnQiPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPjwvdGQ+ PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyIGlkPSJkaWZmMDAwNSI+PHRk PjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0i bGJsb2NrIj4gICBUaGlzIGRvY3VtZW50IDxzcGFuIGNsYXNzPSJkZWxldGUiPmRlZmluZXM8L3Nw YW4+IFJlc291cmNlIFJlc2VydmF0aW9uIFByb3RvY29sIC0gVHJhZmZpYzwvdGQ+PHRkPiA8L3Rk Pjx0ZCBjbGFzcz0icmJsb2NrIj4gICBUaGlzIGRvY3VtZW50IDxzcGFuIGNsYXNzPSJpbnNlcnQi PnVwZGF0ZXM8L3NwYW4+IFJlc291cmNlIFJlc2VydmF0aW9uIFByb3RvY29sIC0gVHJhZmZpYzwv dGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGlu ZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj4gICBFbmdpbmVlcmluZyAoUlNWUC1URSkgc2ln bmFsaW5nIDxzcGFuIGNsYXNzPSJkZWxldGUiPmV4dGVuc2lvbnM8L3NwYW4+IHRvIHN1cHBvcnQg RmFzdCBSZXJvdXRlPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPiAgIEVuZ2luZWVy aW5nIChSU1ZQLVRFKSBzaWduYWxpbmcgdG8gc3VwcG9ydCBGYXN0IFJlcm91dGUgKEZSUikgb2Y8 L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9Imxp bmVubyI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+ICAgKEZSUikgb2YgUGFja2V0IFN3aXRjaGVk IENhcGFibGUgKFBTQykgR2VuZXJhbGl6ZWQgTXVsdGktUHJvdG9jb2w8L3RkPjx0ZD4gPC90ZD48 dGQgY2xhc3M9InJibG9jayI+ICAgUGFja2V0IFN3aXRjaGVkIENhcGFibGUgKFBTQykgR2VuZXJh bGl6ZWQgTXVsdGktUHJvdG9jb2wgTGFiZWw8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwv dHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+ ICAgTGFiZWwgU3dpdGNoaW5nIChHTVBMUykgTGFiZWwgU3dpdGNoZWQgUGF0aHMgKExTUHMpLiAg VGhlc2Ugc2lnbmFsaW5nPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPiAgIFN3aXRj aGluZyAoR01QTFMpIExhYmVsIFN3aXRjaGVkIFBhdGhzIChMU1BzKS4gIFRoZXNlIHNpZ25hbGlu ZzwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0i bGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj4gICA8c3BhbiBjbGFzcz0iZGVsZXRlIj5l eHRlbnNpb25zPC9zcGFuPiBhbGxvdyB0aGUgY29vcmRpbmF0aW9uIG9mIGEgYmlkaXJlY3Rpb25h bCBieXBhc3MgdHVubmVsPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPiAgIDxzcGFu IGNsYXNzPSJpbnNlcnQiPnVwZGF0ZXM8L3NwYW4+IGFsbG93IHRoZSBjb29yZGluYXRpb24gb2Yg YSBiaWRpcmVjdGlvbmFsIGJ5cGFzcyB0dW5uZWw8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3Rk PjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9ImxlZnQi PiAgIGFzc2lnbm1lbnQgcHJvdGVjdGluZyBhIGNvbW1vbiBmYWNpbGl0eSBpbiBib3RoIGZvcndh cmQgYW5kIHJldmVyc2U8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBhc3NpZ25t ZW50IHByb3RlY3RpbmcgYSBjb21tb24gZmFjaWxpdHkgaW4gYm90aCBmb3J3YXJkIGFuZCByZXZl cnNlPC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNz PSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBkaXJlY3Rpb25zIG9mIGEgY28tcm91 dGVkIGJpZGlyZWN0aW9uYWwgTFNQLiAgSW4gYWRkaXRpb24sIHRoZXNlPC90ZD48dGQ+IDwvdGQ+ PHRkIGNsYXNzPSJyaWdodCI+ICAgZGlyZWN0aW9ucyBvZiBhIGNvLXJvdXRlZCBiaWRpcmVjdGlv bmFsIExTUC4gIEluIGFkZGl0aW9uLCB0aGVzZTwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+ PC90cj4KICAgICAgPHRyIGlkPSJkaWZmMDAwNiI+PHRkPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0 ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj4gICA8c3BhbiBjbGFzcz0i ZGVsZXRlIj5leHRlbnNpb25zPC9zcGFuPiBlbmFibGUgdGhlIHJlLWRpcmVjdGlvbiBvZiBiaWRp cmVjdGlvbmFsIHRyYWZmaWMgb250bzwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj4g ICA8c3BhbiBjbGFzcz0iaW5zZXJ0Ij51cGRhdGVzPC9zcGFuPiBlbmFibGUgdGhlIHJlLWRpcmVj dGlvbiBvZiBiaWRpcmVjdGlvbmFsIHRyYWZmaWMgb250byBieXBhc3M8L3RkPjx0ZCBjbGFzcz0i bGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQg Y2xhc3M9ImxibG9jayI+ICAgYnlwYXNzIHR1bm5lbHMgdGhhdCBlbnN1cmUgY28tcm91dGVkbmVz cyBvZiBkYXRhIHBhdGhzIGluIHRoZSBmb3J3YXJkPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJy YmxvY2siPiAgIHR1bm5lbHMgdGhhdCBlbnN1cmUgY28tcm91dGVkbmVzcyBvZiBkYXRhIHBhdGhz IGluIHRoZSBmb3J3YXJkIGFuZDwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAg ICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj4gICBhbmQg cmV2ZXJzZSBkaXJlY3Rpb25zIGFmdGVyIEZSUiBhbmQgYXZvaWQgUlNWUCBzb2Z0LXN0YXRlIHRp bWVvdXQgaW48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+ICAgcmV2ZXJzZSBkaXJl Y3Rpb25zIGFmdGVyIEZSUiBhbmQgYXZvaWQgUlNWUCBzb2Z0LXN0YXRlIHRpbWVvdXQgaW48L3Rk Pjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVu byI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIGNvbnRyb2wtcGxhbmUuPC90ZD48dGQ+IDwvdGQ+ PHRkIGNsYXNzPSJyaWdodCI+ICAgY29udHJvbC1wbGFuZS48L3RkPjx0ZCBjbGFzcz0ibGluZW5v Ij48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9 ImxlZnQiPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPjwvdGQ+PHRkIGNsYXNzPSJs aW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBj bGFzcz0ibGVmdCI+U3RhdHVzIG9mIHRoaXMgTWVtbzwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0i cmlnaHQiPlN0YXR1cyBvZiB0aGlzIE1lbW88L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwv dHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPjwv dGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwv dGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVm dCI+ICAgVGhpcyBJbnRlcm5ldC1EcmFmdCBpcyBzdWJtaXR0ZWQgaW4gZnVsbCBjb25mb3JtYW5j ZSB3aXRoIHRoZTwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIFRoaXMgSW50ZXJu ZXQtRHJhZnQgaXMgc3VibWl0dGVkIGluIGZ1bGwgY29uZm9ybWFuY2Ugd2l0aCB0aGU8L3RkPjx0 ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+ PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIHByb3Zpc2lvbnMgb2YgQkNQIDc4IGFuZCBCQ1AgNzku PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgcHJvdmlzaW9ucyBvZiBCQ1AgNzgg YW5kIEJDUCA3OS48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48 dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPjwvdGQ+PHRkPiA8L3RkPjx0 ZCBjbGFzcz0icmlnaHQiPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAg PHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgSW50ZXJuZXQt RHJhZnRzIGFyZSB3b3JraW5nIGRvY3VtZW50cyBvZiB0aGUgSW50ZXJuZXQgRW5naW5lZXJpbmc8 L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBJbnRlcm5ldC1EcmFmdHMgYXJlIHdv cmtpbmcgZG9jdW1lbnRzIG9mIHRoZSBJbnRlcm5ldCBFbmdpbmVlcmluZzwvdGQ+PHRkIGNsYXNz PSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0 ZCBjbGFzcz0ibGVmdCI+ICAgVGFzayBGb3JjZSAoSUVURikuICBOb3RlIHRoYXQgb3RoZXIgZ3Jv dXBzIG1heSBhbHNvIGRpc3RyaWJ1dGU8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4g ICBUYXNrIEZvcmNlIChJRVRGKS4gIE5vdGUgdGhhdCBvdGhlciBncm91cHMgbWF5IGFsc28gZGlz dHJpYnV0ZTwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBj bGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgd29ya2luZyBkb2N1bWVudHMg YXMgSW50ZXJuZXQtRHJhZnRzLiAgVGhlIGxpc3Qgb2YgY3VycmVudCBJbnRlcm5ldC08L3RkPjx0 ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICB3b3JraW5nIGRvY3VtZW50cyBhcyBJbnRlcm5l dC1EcmFmdHMuICBUaGUgbGlzdCBvZiBjdXJyZW50IEludGVybmV0LTwvdGQ+PHRkIGNsYXNzPSJs aW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBj bGFzcz0ibGVmdCI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+PC90ZD48dGQgY2xh c3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8dHIgaWQ9InBhcnQtMiIgY2xhc3M9ImNoYW5n ZSI+PHRkPjwvdGQ+PHRoPjxzbWFsbD5za2lwcGluZyB0byBjaGFuZ2UgYXQ8L3NtYWxsPjxhIGhy ZWY9IiNwYXJ0LTIiPjxlbT4gcGFnZSAyLCBsaW5lIDIzPHNwYW4gY2xhc3M9ImhpZGUiPiDCtjwv c3Bhbj48L2VtPjwvYT48L3RoPjx0aD4gPC90aD48dGg+PHNtYWxsPnNraXBwaW5nIHRvIGNoYW5n ZSBhdDwvc21hbGw+PGEgaHJlZj0iI3BhcnQtMiI+PGVtPiBwYWdlIDIsIGxpbmUgMjM8c3BhbiBj bGFzcz0iaGlkZSI+IMK2PC9zcGFuPjwvZW0+PC9hPjwvdGg+PHRkPjwvdGQ+PC90cj4KICAgICAg PHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgaW5jbHVkZSBT aW1wbGlmaWVkIEJTRCBMaWNlbnNlIHRleHQgYXMgZGVzY3JpYmVkIGluIFNlY3Rpb24gNC5lIG9m PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgaW5jbHVkZSBTaW1wbGlmaWVkIEJT RCBMaWNlbnNlIHRleHQgYXMgZGVzY3JpYmVkIGluIFNlY3Rpb24gNC5lIG9mPC90ZD48dGQgY2xh c3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+ PHRkIGNsYXNzPSJsZWZ0Ij4gICB0aGUgVHJ1c3QgTGVnYWwgUHJvdmlzaW9ucyBhbmQgYXJlIHBy b3ZpZGVkIHdpdGhvdXQgd2FycmFudHkgYXM8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0 Ij4gICB0aGUgVHJ1c3QgTGVnYWwgUHJvdmlzaW9ucyBhbmQgYXJlIHByb3ZpZGVkIHdpdGhvdXQg d2FycmFudHkgYXM8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48 dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIGRlc2NyaWJlZCBpbiB0 aGUgU2ltcGxpZmllZCBCU0QgTGljZW5zZS48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0 Ij4gICBkZXNjcmliZWQgaW4gdGhlIFNpbXBsaWZpZWQgQlNEIExpY2Vuc2UuPC90ZD48dGQgY2xh c3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+ PHRkIGNsYXNzPSJsZWZ0Ij48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij48L3RkPjx0 ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+ PC90ZD48dGQgY2xhc3M9ImxlZnQiPlRhYmxlIG9mIENvbnRlbnRzPC90ZD48dGQ+IDwvdGQ+PHRk IGNsYXNzPSJyaWdodCI+VGFibGUgb2YgQ29udGVudHM8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48 L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9Imxl ZnQiPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPjwvdGQ+PHRkIGNsYXNzPSJsaW5l bm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFz cz0ibGVmdCI+ICAgMS4gIEludHJvZHVjdGlvbiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4g LiAuIC4gLiAuIC4gLiAuIC4gLiAuICA0PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ ICAgMS4gIEludHJvZHVjdGlvbiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAu IC4gLiAuIC4gLiAuICA0PC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8 dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICAyLiAgQ29udmVu dGlvbnMgVXNlZCBpbiBUaGlzIERvY3VtZW50ICAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4g IDU8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICAyLiAgQ29udmVudGlvbnMgVXNl ZCBpbiBUaGlzIERvY3VtZW50ICAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gIDU8L3RkPjx0 ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+ PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgICAgMi4xLiAgS2V5IFdvcmQgRGVmaW5pdGlvbnMgLiAu IC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAgNTwvdGQ+PHRkPiA8L3RkPjx0ZCBj bGFzcz0icmlnaHQiPiAgICAgMi4xLiAgS2V5IFdvcmQgRGVmaW5pdGlvbnMgLiAuIC4gLiAuIC4g LiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAgNTwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+ PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ ICAgICAyLjIuICBUZXJtaW5vbG9neSAgLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAu IC4gLiAuIC4gLiAuICA1PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgICAyLjIu ICBUZXJtaW5vbG9neSAgLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4g LiAuICA1PC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8dHIgaWQ9ImRp ZmYwMDA3Ij48dGQ+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+ PHRkIGNsYXNzPSJsYmxvY2siPiAgICAgMi4zLiAgQTxzcGFuIGNsYXNzPSJkZWxldGUiPmNyb255 bXMgYW5kIEFiYnJldmlhdGlvbnM8L3NwYW4+IC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAu IC4gIDY8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+ICAgICAyLjMuICBBPHNwYW4g Y2xhc3M9Imluc2VydCI+YmJyZXZpYXRpb25zICAuIC4gLiAuIC4gLjwvc3Bhbj4gLiAuIC4gLiAu IC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAgNjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90 cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAg My4gIEZhc3QgUmVyb3V0ZSBGb3IgVW5pZGlyZWN0aW9uYWwgR01QTFMgTFNQcyAuIC4gLiAuIC4g LiAuIC4gLiAuICA2PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgMy4gIEZhc3Qg UmVyb3V0ZSBGb3IgVW5pZGlyZWN0aW9uYWwgR01QTFMgTFNQcyAuIC4gLiAuIC4gLiAuIC4gLiAu ICA2PC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNz PSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICA0LiAgQnlwYXNzIFR1bm5lbCBBc3Np Z25tZW50IEZvciBCaWRpcmVjdGlvbmFsIEdNUExTIExTUHMgIC4gLiAuIC4gIDY8L3RkPjx0ZD4g PC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICA0LiAgQnlwYXNzIFR1bm5lbCBBc3NpZ25tZW50IEZv ciBCaWRpcmVjdGlvbmFsIEdNUExTIExTUHMgIC4gLiAuIC4gIDY8L3RkPjx0ZCBjbGFzcz0ibGlu ZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xh c3M9ImxlZnQiPiAgICAgNC4xLiAgQmlkaXJlY3Rpb25hbCBHTVBMUyBCeXBhc3MgVHVubmVsIERp cmVjdGlvbiAgLiAuIC4gLiAuIC4gLiAgNzwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQi PiAgICAgNC4xLiAgQmlkaXJlY3Rpb25hbCBHTVBMUyBCeXBhc3MgVHVubmVsIERpcmVjdGlvbiAg LiAuIC4gLiAuIC4gLiAgNzwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAg PHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgICA0LjIuICBN ZXJnZSBQb2ludCBMYWJlbHMgLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAu ICA3PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgICA0LjIuICBNZXJnZSBQb2lu dCBMYWJlbHMgLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuICA3PC90ZD48 dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8i PjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICAgIDQuMy4gIE1lcmdlIFBvaW50IEFkZHJlc3NlcyAg LiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gIDc8L3RkPjx0ZD4gPC90ZD48dGQg Y2xhc3M9InJpZ2h0Ij4gICAgIDQuMy4gIE1lcmdlIFBvaW50IEFkZHJlc3NlcyAgLiAuIC4gLiAu IC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gIDc8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3Rk PjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9ImxlZnQi PiAgICAgNC40LiAgUlJPIElQdjQvSVB2NiBTdWJvYmplY3QgRmxhZ3MgIC4gLiAuIC4gLiAuIC4g LiAuIC4gLiAuIC4gLiAgODwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgICAgNC40 LiAgUlJPIElQdjQvSVB2NiBTdWJvYmplY3QgRmxhZ3MgIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAu IC4gLiAgODwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBj bGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgICA0LjUuICBCaWRpcmVjdGlv bmFsIEJ5cGFzcyBUdW5uZWwgQXNzaWdubWVudCBDby1vcmRpbmF0aW9uIC4gLiAuICA4PC90ZD48 dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgICA0LjUuICBCaWRpcmVjdGlvbmFsIEJ5cGFz cyBUdW5uZWwgQXNzaWdubWVudCBDby1vcmRpbmF0aW9uIC4gLiAuICA4PC90ZD48dGQgY2xhc3M9 ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRk IGNsYXNzPSJsZWZ0Ij4gICAgICAgNC41LjEuICBCaWRpcmVjdGlvbmFsIEJ5cGFzcyBUdW5uZWwg QXNzaWdubWVudCBTaWduYWxpbmc8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICAg ICAgNC41LjEuICBCaWRpcmVjdGlvbmFsIEJ5cGFzcyBUdW5uZWwgQXNzaWdubWVudCBTaWduYWxp bmc8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9 ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgICAgICAgICAgICAgIFByb2NlZHVyZSAg LiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAgODwvdGQ+PHRkPiA8 L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgICAgICAgICAgICAgIFByb2NlZHVyZSAgLiAuIC4gLiAu IC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAgODwvdGQ+PHRkIGNsYXNzPSJsaW5l bm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFz cz0ibGVmdCI+ICAgICAgIDQuNS4yLiAgT25lLXRvLW9uZSBCaWRpcmVjdGlvbmFsIEJ5cGFzcyBU dW5uZWwgQXNzaWdubWVudCAgLiAuICA5PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ ICAgICAgIDQuNS4yLiAgT25lLXRvLW9uZSBCaWRpcmVjdGlvbmFsIEJ5cGFzcyBUdW5uZWwgQXNz aWdubWVudCAgLiAuICA5PC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8 dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij48L3RkPjx0ZD4gPC90 ZD48dGQgY2xhc3M9InJpZ2h0Ij48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAg ICAgIDx0ciBpZD0icGFydC0zIiBjbGFzcz0iY2hhbmdlIj48dGQ+PC90ZD48dGg+PHNtYWxsPnNr aXBwaW5nIHRvIGNoYW5nZSBhdDwvc21hbGw+PGEgaHJlZj0iI3BhcnQtMyI+PGVtPiBwYWdlIDQs IGxpbmUgNzxzcGFuIGNsYXNzPSJoaWRlIj4gwrY8L3NwYW4+PC9lbT48L2E+PC90aD48dGg+IDwv dGg+PHRoPjxzbWFsbD5za2lwcGluZyB0byBjaGFuZ2UgYXQ8L3NtYWxsPjxhIGhyZWY9IiNwYXJ0 LTMiPjxlbT4gcGFnZSA0LCBsaW5lIDc8c3BhbiBjbGFzcz0iaGlkZSI+IMK2PC9zcGFuPjwvZW0+ PC9hPjwvdGg+PHRkPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3Rk Pjx0ZCBjbGFzcz0ibGVmdCI+ICAgICAxMC4yLiAgRlJSIEJ5cGFzcyBBc3NpZ25tZW50IEVycm9y IE5vdGlmeSBNZXNzYWdlICAuIC4gLiAuIC4gLiAuIDE5PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNz PSJyaWdodCI+ICAgICAxMC4yLiAgRlJSIEJ5cGFzcyBBc3NpZ25tZW50IEVycm9yIE5vdGlmeSBN ZXNzYWdlICAuIC4gLiAuIC4gLiAuIDE5PC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3Ry PgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICAx MS4gIFJlZmVyZW5jZXMgIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAu IC4gLiAuIC4gMjA8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICAxMS4gIFJlZmVy ZW5jZXMgIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4g MjA8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9 ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgICAgMTEuMS4gIE5vcm1hdGl2ZSBSZWZl cmVuY2VzICAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAyMDwvdGQ+PHRkPiA8 L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgICAgMTEuMS4gIE5vcm1hdGl2ZSBSZWZlcmVuY2VzICAu IC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAyMDwvdGQ+PHRkIGNsYXNzPSJsaW5l bm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFz cz0ibGVmdCI+ICAgICAxMS4yLiAgSW5mb3JtYXRpdmUgUmVmZXJlbmNlcyAgLiAuIC4gLiAuIC4g LiAuIC4gLiAuIC4gLiAuIC4gLiAuIDIwPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ ICAgICAxMS4yLiAgSW5mb3JtYXRpdmUgUmVmZXJlbmNlcyAgLiAuIC4gLiAuIC4gLiAuIC4gLiAu IC4gLiAuIC4gLiAuIDIwPC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8 dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBBY2tub3dsZWRn ZW1lbnRzIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4g MjE8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBBY2tub3dsZWRnZW1lbnRzIC4g LiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gMjE8L3RkPjx0 ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+ PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIENvbnRyaWJ1dG9ycyAuIC4gLiAuIC4gLiAuIC4gLiAu IC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAyMTwvdGQ+PHRkPiA8L3RkPjx0ZCBj bGFzcz0icmlnaHQiPiAgIENvbnRyaWJ1dG9ycyAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4g LiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAyMTwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+ PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ ICAgQXV0aG9ycycgQWRkcmVzc2VzIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAu IC4gLiAuIC4gLiAuIDIyPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgQXV0aG9y cycgQWRkcmVzc2VzIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4g LiAuIDIyPC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNs YXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij48L3RkPjx0ZD4gPC90ZD48dGQgY2xh c3M9InJpZ2h0Ij48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48 dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPjEuICBJbnRyb2R1Y3Rpb248 L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4xLiAgSW50cm9kdWN0aW9uPC90ZD48dGQg Y2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwv dGQ+PHRkIGNsYXNzPSJsZWZ0Ij48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij48L3Rk Pjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0ciBpZD0iZGlmZjAwMDgiPjx0 ZD48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9 ImxibG9jayI+ICAgUGFja2V0IFN3aXRjaGVkIENhcGFibGUgKFBTQykgVHJhZmZpYyBFbmdpbmVl cmluZyAoVEUpIDxzcGFuIGNsYXNzPSJkZWxldGUiPnR1bm5lbHM8L3NwYW4+IGNhbiBiZTwvdGQ+ PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj4gICBQYWNrZXQgU3dpdGNoZWQgQ2FwYWJsZSAo UFNDKSBUcmFmZmljIEVuZ2luZWVyaW5nIChURSkgPHNwYW4gY2xhc3M9Imluc2VydCI+TGFiZWwg U3dpdGNoZWQ8L3NwYW4+PC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8 dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPiAgIHNldHVwIHVz aW5nIEdlbmVyYWxpemVkIE11bHRpLVByb3RvY29sIExhYmVsIFN3aXRjaGluZyAoR01QTFMpPC90 ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPjxzcGFuIGNsYXNzPSJpbnNlcnQiPiAgIFBh dGhzIChMU1BzKTwvc3Bhbj4gY2FuIGJlIHNldHVwIHVzaW5nIEdlbmVyYWxpemVkIE11bHRpLVBy b3RvY29sIExhYmVsPC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8dHI+ PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPiAgIHNpZ25hbGluZyBw cm9jZWR1cmVzIHNwZWNpZmllZCBpbiBbUkZDMzQ3M10gZm9yIGJvdGggdW5pZGlyZWN0aW9uYWw8 L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+ICAgU3dpdGNoaW5nIChHTVBMUykgc2ln bmFsaW5nIHByb2NlZHVyZXMgc3BlY2lmaWVkIGluIFtSRkMzNDczXSBmb3I8L3RkPjx0ZCBjbGFz cz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48 dGQgY2xhc3M9ImxibG9jayI+ICAgYW5kIGJpZGlyZWN0aW9uYWwgPHNwYW4gY2xhc3M9ImRlbGV0 ZSI+TFNQcy48L3NwYW4+ICBUaGUgR01QTFMgc2lnbmFsaW5nIGFsbG93cyBzZW5kaW5nIGFuZDwv dGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj4gICBib3RoIHVuaWRpcmVjdGlvbmFsIGFu ZCBiaWRpcmVjdGlvbmFsIDxzcGFuIGNsYXNzPSJpbnNlcnQiPnR1bm5lbHMuPC9zcGFuPiAgVGhl IEdNUExTIHNpZ25hbGluZzwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAg PHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj4gICByZWNlaXZp bmcgdGhlIFJTVlAgbWVzc2FnZXMgaW4tYmFuZCB3aXRoIHRoZSBkYXRhIHRyYWZmaWMgb3I8L3Rk Pjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+ICAgYWxsb3dzIHNlbmRpbmcgYW5kIHJlY2Vp dmluZyB0aGUgUlNWUCBtZXNzYWdlcyBpbi1iYW5kIHdpdGggdGhlIGRhdGE8L3RkPjx0ZCBjbGFz cz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48 dGQgY2xhc3M9ImxibG9jayI+ICAgb3V0LW9mLWJhbmQgb3ZlciBhIHNlcGFyYXRlIGNvbnRyb2wt Y2hhbm5lbC4gIEZhc3QgUmVyb3V0ZSAoRlJSKTwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJs b2NrIj4gICB0cmFmZmljIG9yIG91dC1vZi1iYW5kIG92ZXIgYSBzZXBhcmF0ZSBjb250cm9sLWNo YW5uZWwuICBGYXN0IFJlcm91dGU8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAg ICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+ICAgW1JG QzQwOTBdIGhhcyBiZWVuIHdpZGVseSBkZXBsb3llZCBpbiB0aGUgcGFja2V0IFRFIG5ldHdvcmtz IHRvZGF5PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPiAgIChGUlIpIFtSRkM0MDkw XSBoYXMgYmVlbiB3aWRlbHkgZGVwbG95ZWQgaW4gdGhlIHBhY2tldCBURSBuZXR3b3JrczwvdGQ+ PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5v Ij48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj4gICBhbmQgaXMgZGVzaXJhYmxlIGZvciBURSBHTVBM UyBMU1BzLiAgVXNpbmcgRlJSIG1ldGhvZHMgYWxzbyBhbGxvd3M8L3RkPjx0ZD4gPC90ZD48dGQg Y2xhc3M9InJibG9jayI+ICAgdG9kYXkgYW5kIGlzIGRlc2lyYWJsZSBmb3IgVEUgR01QTFMgTFNQ cy4gIFVzaW5nIEZSUiBtZXRob2RzIGFsc288L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwv dHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+ ICAgdGhlIGxldmVyYWdpbmcgb2YgdGhlIGV4aXN0aW5nIG1lY2hhbmlzbXMgZm9yIGZhaWx1cmUg ZGV0ZWN0aW9uIGFuZDwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj4gICBhbGxvd3Mg dGhlIGxldmVyYWdpbmcgb2YgdGhlIGV4aXN0aW5nIG1lY2hhbmlzbXMgZm9yIGZhaWx1cmU8L3Rk Pjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVu byI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+ICAgcmVzdG9yYXRpb24gaW4gZGVwbG95ZWQgbmV0 d29ya3MuPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPiAgIGRldGVjdGlvbiBhbmQg cmVzdG9yYXRpb24gaW4gZGVwbG95ZWQgbmV0d29ya3MuPC90ZD48dGQgY2xhc3M9ImxpbmVubyI+ PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJs ZWZ0Ij48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij48L3RkPjx0ZCBjbGFzcz0ibGlu ZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xh c3M9ImxlZnQiPiAgIFRoZSBGUlIgcHJvY2VkdXJlcyBkZWZpbmVkIGluIFtSRkM0MDkwXSBkZXNj cmliZSB0aGUgYmVoYXZpb3Igb2YgdGhlPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ ICAgVGhlIEZSUiBwcm9jZWR1cmVzIGRlZmluZWQgaW4gW1JGQzQwOTBdIGRlc2NyaWJlIHRoZSBi ZWhhdmlvciBvZiB0aGU8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0 cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIFBvaW50IG9mIExv Y2FsIFJlcGFpciAoUExSKSB0byByZXJvdXRlIHRyYWZmaWMgYW5kIHNpZ25hbGluZyBvbnRvIHRo ZTwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIFBvaW50IG9mIExvY2FsIFJlcGFp ciAoUExSKSB0byByZXJvdXRlIHRyYWZmaWMgYW5kIHNpZ25hbGluZyBvbnRvIHRoZTwvdGQ+PHRk IGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48 L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgYnlwYXNzIHR1bm5lbCBpbiB0aGUgZXZlbnQgb2YgYSBm YWlsdXJlIGZvciBwcm90ZWN0ZWQgTFNQcy4gIFRob3NlPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNz PSJyaWdodCI+ICAgYnlwYXNzIHR1bm5lbCBpbiB0aGUgZXZlbnQgb2YgYSBmYWlsdXJlIGZvciBw cm90ZWN0ZWQgTFNQcy4gIFRob3NlPC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgog ICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBwcm9j ZWR1cmVzIGFyZSBhcHBsaWNhYmxlIHRvIHRoZSB1bmlkaXJlY3Rpb25hbCBwcm90ZWN0ZWQgTFNQ czwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIHByb2NlZHVyZXMgYXJlIGFwcGxp Y2FibGUgdG8gdGhlIHVuaWRpcmVjdGlvbmFsIHByb3RlY3RlZCBMU1BzPC90ZD48dGQgY2xhc3M9 ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRk IGNsYXNzPSJsZWZ0Ij4gICBzaWduYWxlZCB1c2luZyBlaXRoZXIgUlNWUC1URSBbUkZDMzIwOV0g b3IgR01QTFMgcHJvY2VkdXJlczwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIHNp Z25hbGVkIHVzaW5nIGVpdGhlciBSU1ZQLVRFIFtSRkMzMjA5XSBvciBHTVBMUyBwcm9jZWR1cmVz PC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJs aW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBbUkZDMzQ3M10uICBXaGVuIHVzaW5nIHRo ZSBGUlIgcHJvY2VkdXJlcyBkZWZpbmVkIGluIFtSRkM0MDkwXSB3aXRoPC90ZD48dGQ+IDwvdGQ+ PHRkIGNsYXNzPSJyaWdodCI+ICAgW1JGQzM0NzNdLiAgV2hlbiB1c2luZyB0aGUgRlJSIHByb2Nl ZHVyZXMgZGVmaW5lZCBpbiBbUkZDNDA5MF0gd2l0aDwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwv dGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVm dCI+ICAgY28tcm91dGVkIGJpZGlyZWN0aW9uYWwgR01QTFMgTFNQcywgaXQgaXMgZGVzaXJlZCB0 aGF0IHNhbWUgUExSIGFuZDwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIGNvLXJv dXRlZCBiaWRpcmVjdGlvbmFsIEdNUExTIExTUHMsIGl0IGlzIGRlc2lyZWQgdGhhdCBzYW1lIFBM UiBhbmQ8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xh c3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIE1lcmdlIFBvaW50IChNUCkgcGFp cnMgYXJlIHNlbGVjdGVkIGluIGVhY2ggZGlyZWN0aW9uIGFuZCBib3RoIFBMUjwvdGQ+PHRkPiA8 L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIE1lcmdlIFBvaW50IChNUCkgcGFpcnMgYXJlIHNlbGVj dGVkIGluIGVhY2ggZGlyZWN0aW9uIGFuZCBib3RoIFBMUjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8i PjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0i bGVmdCI+ICAgYW5kIE1QIGFzc2lnbiB0aGUgc2FtZSBiaWRpcmVjdGlvbmFsIGJ5cGFzcyB0dW5u ZWwuICBUaGlzIGRvY3VtZW50PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgYW5k IE1QIGFzc2lnbiB0aGUgc2FtZSBiaWRpcmVjdGlvbmFsIGJ5cGFzcyB0dW5uZWwuICBUaGlzIGRv Y3VtZW50PC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8dHIgaWQ9ImRp ZmYwMDA5Ij48dGQ+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+ PHRkIGNsYXNzPSJsYmxvY2siPiAgIDxzcGFuIGNsYXNzPSJkZWxldGUiPmV4dGVuZDwvc3Bhbj5z IHRoZSBGUlIgcHJvY2VkdXJlcyBkZWZpbmVkIGluIFtSRkM0MDkwXSB0byBjb29yZGluYXRlIHRo ZTwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj4gICA8c3BhbiBjbGFzcz0iaW5zZXJ0 Ij51cGRhdGU8L3NwYW4+cyB0aGUgRlJSIHByb2NlZHVyZXMgZGVmaW5lZCBpbiBbUkZDNDA5MF0g dG8gY29vcmRpbmF0ZSB0aGU8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAg IDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIGJpZGlyZWN0 aW9uYWwgYnlwYXNzIHR1bm5lbCBhc3NpZ25tZW50IGFuZCB0byBleGNoYW5nZSBNUCBsYWJlbHM8 L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBiaWRpcmVjdGlvbmFsIGJ5cGFzcyB0 dW5uZWwgYXNzaWdubWVudCBhbmQgdG8gZXhjaGFuZ2UgTVAgbGFiZWxzPC90ZD48dGQgY2xhc3M9 ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRk IGNsYXNzPSJsZWZ0Ij4gICBiZXR3ZWVuIHVwc3RyZWFtIGFuZCBkb3duc3RyZWFtIFBMUnMgb2Yg dGhlIHByb3RlY3RlZCBjby1yb3V0ZWQ8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4g ICBiZXR3ZWVuIHVwc3RyZWFtIGFuZCBkb3duc3RyZWFtIFBMUnMgb2YgdGhlIHByb3RlY3RlZCBj by1yb3V0ZWQ8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQg Y2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIGJpZGlyZWN0aW9uYWwgTFNQ LjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIGJpZGlyZWN0aW9uYWwgTFNQLjwv dGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGlu ZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdo dCI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNz PSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBXaGVuIHVzaW5nIEZSUiBwcm9jZWR1 cmVzIHdpdGggY28tcm91dGVkIGJpZGlyZWN0aW9uYWwgR01QTFMgTFNQcywgaXQ8L3RkPjx0ZD4g PC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBXaGVuIHVzaW5nIEZSUiBwcm9jZWR1cmVzIHdpdGgg Y28tcm91dGVkIGJpZGlyZWN0aW9uYWwgR01QTFMgTFNQcywgaXQ8L3RkPjx0ZCBjbGFzcz0ibGlu ZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xh c3M9ImxlZnQiPiAgIGlzIHBvc3NpYmxlIGluIHNvbWUgY2FzZXMgZm9yIHRoZSBSU1ZQIHNpZ25h bGluZyByZWZyZXNoZXMgdG8gc3RvcDwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAg IGlzIHBvc3NpYmxlIGluIHNvbWUgY2FzZXMgZm9yIHRoZSBSU1ZQIHNpZ25hbGluZyByZWZyZXNo ZXMgdG8gc3RvcDwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0 ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgcmVhY2hpbmcgY2VydGFp biBub2RlcyBhbG9uZyB0aGUgcHJvdGVjdGVkIExTUCBwYXRoIGFmdGVyIHRoZSBQTFJzPC90ZD48 dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgcmVhY2hpbmcgY2VydGFpbiBub2RlcyBhbG9u ZyB0aGUgcHJvdGVjdGVkIExTUCBwYXRoIGFmdGVyIHRoZSBQTFJzPC90ZD48dGQgY2xhc3M9Imxp bmVubyI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNs YXNzPSJsZWZ0Ij4gICBmaW5pc2ggcmVyb3V0aW5nIG9mIHRoZSBzaWduYWxpbmcgbWVzc2FnZXMu ICBUaGlzIGNhbiBvY2N1ciBhZnRlciBhPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ ICAgZmluaXNoIHJlcm91dGluZyBvZiB0aGUgc2lnbmFsaW5nIG1lc3NhZ2VzLiAgVGhpcyBjYW4g b2NjdXIgYWZ0ZXIgYTwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRy Pjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgZmFpbHVyZSBldmVu dCB3aGVuIHVzaW5nIG5vZGUgcHJvdGVjdGlvbiBieXBhc3MgdHVubmVscy4gIEFzIHNob3duIGlu PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgZmFpbHVyZSBldmVudCB3aGVuIHVz aW5nIG5vZGUgcHJvdGVjdGlvbiBieXBhc3MgdHVubmVscy4gIEFzIHNob3duIGluPC90ZD48dGQg Y2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwv dGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBGaWd1cmUgMiwgdGhpcyBpcyBwb3NzaWJsZSBldmVuIHdp dGggc2VsZWN0aW5nIHRoZSBzYW1lIGJpZGlyZWN0aW9uYWw8L3RkPjx0ZD4gPC90ZD48dGQgY2xh c3M9InJpZ2h0Ij4gICBGaWd1cmUgMiwgdGhpcyBpcyBwb3NzaWJsZSBldmVuIHdpdGggc2VsZWN0 aW5nIHRoZSBzYW1lIGJpZGlyZWN0aW9uYWw8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwv dHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPjwv dGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwv dGQ+PC90cj4KICAgICAgPHRyIGlkPSJwYXJ0LTQiIGNsYXNzPSJjaGFuZ2UiPjx0ZD48L3RkPjx0 aD48c21hbGw+c2tpcHBpbmcgdG8gY2hhbmdlIGF0PC9zbWFsbD48YSBocmVmPSIjcGFydC00Ij48 ZW0+IHBhZ2UgNSwgbGluZSA0MDxzcGFuIGNsYXNzPSJoaWRlIj4gwrY8L3NwYW4+PC9lbT48L2E+ PC90aD48dGg+IDwvdGg+PHRoPjxzbWFsbD5za2lwcGluZyB0byBjaGFuZ2UgYXQ8L3NtYWxsPjxh IGhyZWY9IiNwYXJ0LTQiPjxlbT4gcGFnZSA1LCBsaW5lIDQwPHNwYW4gY2xhc3M9ImhpZGUiPiDC tjwvc3Bhbj48L2VtPjwvYT48L3RoPjx0ZD48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9 ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIFtSRkMyMjA1XSwgW1JGQzMyMDldLCBb UkZDMzQ3MV0sIFtSRkMzNDczXSwgYW5kIFtSRkM0MDkwXS48L3RkPjx0ZD4gPC90ZD48dGQgY2xh c3M9InJpZ2h0Ij4gICBbUkZDMjIwNV0sIFtSRkMzMjA5XSwgW1JGQzM0NzFdLCBbUkZDMzQ3M10s IGFuZCBbUkZDNDA5MF0uPC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8 dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij48L3RkPjx0ZD4gPC90 ZD48dGQgY2xhc3M9InJpZ2h0Ij48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAg ICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIERvd25z dHJlYW0gUExSOiBEb3duc3RyZWFtIFBvaW50IG9mIExvY2FsIFJlcGFpci4gIFRoZSBQTFIgdGhh dDwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIERvd25zdHJlYW0gUExSOiBEb3du c3RyZWFtIFBvaW50IG9mIExvY2FsIFJlcGFpci4gIFRoZSBQTFIgdGhhdDwvdGQ+PHRkIGNsYXNz PSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0 ZCBjbGFzcz0ibGVmdCI+ICAgICAgbG9jYWxseSBkZXRlY3RzIGEgZmFpbHVyZSBpbiB0aGUgZG93 bnN0cmVhbSBkaXJlY3Rpb24gb2YgdGhlPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ ICAgICAgbG9jYWxseSBkZXRlY3RzIGEgZmFpbHVyZSBpbiB0aGUgZG93bnN0cmVhbSBkaXJlY3Rp b24gb2YgdGhlPC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8dHI+PHRk IGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICAgICB0cmFmZmljIGZsb3cg YW5kIHJlcm91dGVzIHRyYWZmaWMgaW4gdGhlIHNhbWUgZGlyZWN0aW9uIG9mIHRoZTwvdGQ+PHRk PiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgICAgIHRyYWZmaWMgZmxvdyBhbmQgcmVyb3V0ZXMg dHJhZmZpYyBpbiB0aGUgc2FtZSBkaXJlY3Rpb24gb2YgdGhlPC90ZD48dGQgY2xhc3M9ImxpbmVu byI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNz PSJsZWZ0Ij4gICAgICBwcm90ZWN0ZWQgYmlkaXJlY3Rpb25hbCBMU1AgUlNWUCBQYXRoIHNpZ25h bGluZy4gIEEgZG93bnN0cmVhbSBQTFI8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4g ICAgICBwcm90ZWN0ZWQgYmlkaXJlY3Rpb25hbCBMU1AgUlNWUCBQYXRoIHNpZ25hbGluZy4gIEEg ZG93bnN0cmVhbSBQTFI8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0 cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgICAgIGhhcyBhIGNv cnJlc3BvbmRpbmcgZG93bnN0cmVhbSBNUC48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0 Ij4gICAgICBoYXMgYSBjb3JyZXNwb25kaW5nIGRvd25zdHJlYW0gTVAuPC90ZD48dGQgY2xhc3M9 ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRk IGNsYXNzPSJsZWZ0Ij48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij48L3RkPjx0ZCBj bGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90 ZD48dGQgY2xhc3M9ImxlZnQiPiAgIERvd25zdHJlYW0gTVA6IERvd25zdHJlYW0gTWVyZ2UgUG9p bnQuICBUaGUgTFNSIHdoZXJlIG9uZSBvciBtb3JlPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJy aWdodCI+ICAgRG93bnN0cmVhbSBNUDogRG93bnN0cmVhbSBNZXJnZSBQb2ludC4gIFRoZSBMU1Ig d2hlcmUgb25lIG9yIG1vcmU8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAg IDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgICAgIGJhY2t1 cCB0dW5uZWxzIHJlam9pbiB0aGUgcGF0aCBvZiB0aGUgcHJvdGVjdGVkIExTUCBpbiB0aGU8L3Rk Pjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICAgICBiYWNrdXAgdHVubmVscyByZWpvaW4g dGhlIHBhdGggb2YgdGhlIHByb3RlY3RlZCBMU1AgaW4gdGhlPC90ZD48dGQgY2xhc3M9ImxpbmVu byI+PC90ZD48L3RyPgogICAgICA8dHIgaWQ9ImRpZmYwMDEwIj48dGQ+PC90ZD48L3RyPgogICAg ICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPiAgICAgIGRv d25zdHJlYW0gZGlyZWN0aW9uIG9mIHRoZSB0cmFmZmljIGZsb3cuICBUaGUgc2FtZSBMU1IgPHNw YW4gY2xhc3M9ImRlbGV0ZSI+bWF5PC9zcGFuPiBiZTwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0i cmJsb2NrIj4gICAgICBkb3duc3RyZWFtIGRpcmVjdGlvbiBvZiB0aGUgdHJhZmZpYyBmbG93LiAg VGhlIHNhbWUgTFNSIDxzcGFuIGNsYXNzPSJpbnNlcnQiPmNhbjwvc3Bhbj4gYmU8L3RkPjx0ZCBj bGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90 ZD48dGQgY2xhc3M9ImxlZnQiPiAgICAgIGJvdGggYSBkb3duc3RyZWFtIE1QIGFuZCBhbiB1cHN0 cmVhbSBQTFIgc2ltdWx0YW5lb3VzbHkuPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ ICAgICAgYm90aCBhIGRvd25zdHJlYW0gTVAgYW5kIGFuIHVwc3RyZWFtIFBMUiBzaW11bHRhbmVv dXNseS48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xh c3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFz cz0icmlnaHQiPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0 ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgVXBzdHJlYW0gUExSOiBV cHN0cmVhbSBQb2ludCBvZiBMb2NhbCBSZXBhaXIuICBUaGUgUExSIHRoYXQgbG9jYWxseTwvdGQ+ PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIFVwc3RyZWFtIFBMUjogVXBzdHJlYW0gUG9p bnQgb2YgTG9jYWwgUmVwYWlyLiAgVGhlIFBMUiB0aGF0IGxvY2FsbHk8L3RkPjx0ZCBjbGFzcz0i bGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQg Y2xhc3M9ImxlZnQiPiAgICAgIGRldGVjdHMgYSBmYWlsdXJlIGluIHRoZSB1cHN0cmVhbSBkaXJl Y3Rpb24gb2YgdGhlIHRyYWZmaWMgZmxvdzwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQi PiAgICAgIGRldGVjdHMgYSBmYWlsdXJlIGluIHRoZSB1cHN0cmVhbSBkaXJlY3Rpb24gb2YgdGhl IHRyYWZmaWMgZmxvdzwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRy Pjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgICAgYW5kIHJlcm91 dGVzIHRyYWZmaWMgaW4gdGhlIG9wcG9zaXRlIGRpcmVjdGlvbiBvZiB0aGUgcHJvdGVjdGVkPC90 ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgICAgYW5kIHJlcm91dGVzIHRyYWZmaWMg aW4gdGhlIG9wcG9zaXRlIGRpcmVjdGlvbiBvZiB0aGUgcHJvdGVjdGVkPC90ZD48dGQgY2xhc3M9 ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRk IGNsYXNzPSJsZWZ0Ij4gICAgICBiaWRpcmVjdGlvbmFsIExTUCBSU1ZQIFBhdGggc2lnbmFsaW5n LiAgQW4gdXBzdHJlYW0gUExSIGhhcyBhPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ ICAgICAgYmlkaXJlY3Rpb25hbCBMU1AgUlNWUCBQYXRoIHNpZ25hbGluZy4gIEFuIHVwc3RyZWFt IFBMUiBoYXMgYTwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0 ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgICAgY29ycmVzcG9uZGlu ZyB1cHN0cmVhbSBNUC48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICAgICBjb3Jy ZXNwb25kaW5nIHVwc3RyZWFtIE1QLjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4K ICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+PC90ZD48 dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48 L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4g ICBVcHN0cmVhbSBNUDogVXBzdHJlYW0gTWVyZ2UgUG9pbnQuICBUaGUgTFNSIHdoZXJlIG9uZSBv ciBtb3JlIGJhY2t1cDwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIFVwc3RyZWFt IE1QOiBVcHN0cmVhbSBNZXJnZSBQb2ludC4gIFRoZSBMU1Igd2hlcmUgb25lIG9yIG1vcmUgYmFj a3VwPC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNz PSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICAgICB0dW5uZWxzIHJlam9pbiB0aGUg cGF0aCBvZiB0aGUgcHJvdGVjdGVkIExTUCBpbiB0aGUgdXBzdHJlYW08L3RkPjx0ZD4gPC90ZD48 dGQgY2xhc3M9InJpZ2h0Ij4gICAgICB0dW5uZWxzIHJlam9pbiB0aGUgcGF0aCBvZiB0aGUgcHJv dGVjdGVkIExTUCBpbiB0aGUgdXBzdHJlYW08L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwv dHI+CiAgICAgIDx0ciBpZD0iZGlmZjAwMTEiPjx0ZD48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQg Y2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+ICAgICAgZGlyZWN0aW9uIG9m IHRoZSB0cmFmZmljIGZsb3cuICBUaGUgc2FtZSBMU1IgPHNwYW4gY2xhc3M9ImRlbGV0ZSI+bWF5 PC9zcGFuPiBiZSBib3RoIGFuPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPiAgICAg IGRpcmVjdGlvbiBvZiB0aGUgdHJhZmZpYyBmbG93LiAgVGhlIHNhbWUgTFNSIDxzcGFuIGNsYXNz PSJpbnNlcnQiPmNhbjwvc3Bhbj4gYmUgYm90aCBhbjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwv dGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVm dCI+ICAgICAgdXBzdHJlYW0gTVAgYW5kIGEgZG93bnN0cmVhbSBQTFIgc2ltdWx0YW5lb3VzbHku PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgICAgdXBzdHJlYW0gTVAgYW5kIGEg ZG93bnN0cmVhbSBQTFIgc2ltdWx0YW5lb3VzbHkuPC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90 ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0 Ij48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij48L3RkPjx0ZCBjbGFzcz0ibGluZW5v Ij48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9 ImxlZnQiPiAgIFBvaW50IG9mIFJlbW90ZSBSZXBhaXIgKFBSUik6IEEgZG93bnN0cmVhbSBNUCB0 aGF0IGFzc3VtZXMgdGhlIHJvbGU8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBQ b2ludCBvZiBSZW1vdGUgUmVwYWlyIChQUlIpOiBBIGRvd25zdHJlYW0gTVAgdGhhdCBhc3N1bWVz IHRoZSByb2xlPC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8dHI+PHRk IGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICAgICBvZiB1cHN0cmVhbSBQ TFIgdXBvbiByZWNlaXZpbmcgcHJvdGVjdGVkIExTUCdzIHJlcm91dGVkIFBhdGg8L3RkPjx0ZD4g PC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICAgICBvZiB1cHN0cmVhbSBQTFIgdXBvbiByZWNlaXZp bmcgcHJvdGVjdGVkIExTUCdzIHJlcm91dGVkIFBhdGg8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48 L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9Imxl ZnQiPiAgICAgIG1lc3NhZ2UgYW5kIHRyaWdnZXJzIHJlcm91dGUgb2YgdHJhZmZpYyBhbmQgc2ln bmFsaW5nIGluIHRoZTwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgICAgIG1lc3Nh Z2UgYW5kIHRyaWdnZXJzIHJlcm91dGUgb2YgdHJhZmZpYyBhbmQgc2lnbmFsaW5nIGluIHRoZTwv dGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGlu ZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgICAgdXBzdHJlYW0gZGlyZWN0aW9uIG9mIHRo ZSB0cmFmZmljIGZsb3cgdXNpbmcgdGhlIHByb2NlZHVyZXM8L3RkPjx0ZD4gPC90ZD48dGQgY2xh c3M9InJpZ2h0Ij4gICAgICB1cHN0cmVhbSBkaXJlY3Rpb24gb2YgdGhlIHRyYWZmaWMgZmxvdyB1 c2luZyB0aGUgcHJvY2VkdXJlczwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAg ICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgICAgZGVz Y3JpYmVkIGluIHRoaXMgZG9jdW1lbnQuPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ ICAgICAgZGVzY3JpYmVkIGluIHRoaXMgZG9jdW1lbnQuPC90ZD48dGQgY2xhc3M9ImxpbmVubyI+ PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJs ZWZ0Ij48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij48L3RkPjx0ZCBjbGFzcz0ibGlu ZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0ciBpZD0iZGlmZjAwMTIiPjx0ZD48L3RkPjwvdHI+CiAg ICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+Mi4zLiAg QTxzcGFuIGNsYXNzPSJkZWxldGUiPmNyb255bXMgYW5kIEE8L3NwYW4+YmJyZXZpYXRpb25zPC90 ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPjIuMy4gIEFiYnJldmlhdGlvbnM8L3RkPjx0 ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+ PC90ZD48dGQgY2xhc3M9ImxlZnQiPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPjwv dGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGlu ZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgR01QTFM6IEdlbmVyYWxpemVkIE11bHRpLVBy b3RvY29sIExhYmVsIFN3aXRjaGluZzwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAg IEdNUExTOiBHZW5lcmFsaXplZCBNdWx0aS1Qcm90b2NvbCBMYWJlbCBTd2l0Y2hpbmc8L3RkPjx0 ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+ PC90ZD48dGQgY2xhc3M9ImxlZnQiPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPjwv dGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGlu ZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgTFNQOiBMYWJlbCBTd2l0Y2hlZCBQYXRoPC90 ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgTFNQOiBMYWJlbCBTd2l0Y2hlZCBQYXRo PC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJs aW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJp Z2h0Ij48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xh c3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIExTUjogTGFiZWwgU3dpdGNoaW5n IFJvdXRlcjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIExTUjogTGFiZWwgU3dp dGNoaW5nIFJvdXRlcjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRy Pjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+PC90ZD48dGQ+IDwvdGQ+ PHRkIGNsYXNzPSJyaWdodCI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAg ICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBNUDogTWVy Z2UgUG9pbnQ8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBNUDogTWVyZ2UgUG9p bnQ8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9 ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0i cmlnaHQiPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBj bGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgTVBMUzogTXVsdGktUHJvdG9j b2wgTGFiZWwgU3dpdGNoaW5nPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgTVBM UzogTXVsdGktUHJvdG9jb2wgTGFiZWwgU3dpdGNoaW5nPC90ZD48dGQgY2xhc3M9ImxpbmVubyI+ PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJs ZWZ0Ij48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij48L3RkPjx0ZCBjbGFzcz0ibGlu ZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0ciBpZD0icGFydC01IiBjbGFzcz0iY2hhbmdlIj48dGQ+ PC90ZD48dGg+PHNtYWxsPnNraXBwaW5nIHRvIGNoYW5nZSBhdDwvc21hbGw+PGEgaHJlZj0iI3Bh cnQtNSI+PGVtPiBwYWdlIDYsIGxpbmUgMzc8c3BhbiBjbGFzcz0iaGlkZSI+IMK2PC9zcGFuPjwv ZW0+PC9hPjwvdGg+PHRoPiA8L3RoPjx0aD48c21hbGw+c2tpcHBpbmcgdG8gY2hhbmdlIGF0PC9z bWFsbD48YSBocmVmPSIjcGFydC01Ij48ZW0+IHBhZ2UgNiwgbGluZSAzNzxzcGFuIGNsYXNzPSJo aWRlIj4gwrY8L3NwYW4+PC9lbT48L2E+PC90aD48dGQ+PC90ZD48L3RyPgogICAgICA8dHI+PHRk IGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBQU0M6IFBhY2tldCBTd2l0 Y2hlZCBDYXBhYmxlPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgUFNDOiBQYWNr ZXQgU3dpdGNoZWQgQ2FwYWJsZTwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAg ICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+PC90ZD48dGQ+ IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3Ry PgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBS U1ZQOiBSZXNvdXJjZSBSZVNlclZhdGlvbiBQcm90b2NvbDwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFz cz0icmlnaHQiPiAgIFJTVlA6IFJlc291cmNlIFJlU2VyVmF0aW9uIFByb3RvY29sPC90ZD48dGQg Y2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwv dGQ+PHRkIGNsYXNzPSJsZWZ0Ij48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij48L3Rk Pjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVu byI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIFRFOiBUcmFmZmljIEVuZ2luZWVyaW5nPC90ZD48 dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgVEU6IFRyYWZmaWMgRW5naW5lZXJpbmc8L3Rk Pjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVu byI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQi PjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0i bGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+My4gIEZhc3QgUmVyb3V0ZSBGb3IgVW5pZGly ZWN0aW9uYWwgR01QTFMgTFNQczwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPjMuICBG YXN0IFJlcm91dGUgRm9yIFVuaWRpcmVjdGlvbmFsIEdNUExTIExTUHM8L3RkPjx0ZCBjbGFzcz0i bGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQg Y2xhc3M9ImxlZnQiPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPjwvdGQ+PHRkIGNs YXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3Rk Pjx0ZCBjbGFzcz0ibGVmdCI+ICAgVGhlIEZSUiBwcm9jZWR1cmVzIGRlZmluZWQgaW4gW1JGQzQw OTBdIGZvciBSU1ZQLVRFIHNpZ25hbGluZzwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQi PiAgIFRoZSBGUlIgcHJvY2VkdXJlcyBkZWZpbmVkIGluIFtSRkM0MDkwXSBmb3IgUlNWUC1URSBz aWduYWxpbmc8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQg Y2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIFtSRkMzMjA5XSBhcmUgZXF1 YWxseSBhcHBsaWNhYmxlIHRvIHRoZSB1bmlkaXJlY3Rpb25hbCBwcm90ZWN0ZWQgTFNQczwvdGQ+ PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIFtSRkMzMjA5XSBhcmUgZXF1YWxseSBhcHBs aWNhYmxlIHRvIHRoZSB1bmlkaXJlY3Rpb25hbCBwcm90ZWN0ZWQgTFNQczwvdGQ+PHRkIGNsYXNz PSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyIGlkPSJkaWZmMDAxMyI+PHRkPjwvdGQ+PC90 cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj4g ICBzaWduYWxlZCB1c2luZyBHTVBMUyBbUkZDMzQ3M10gYW5kIGFyZSBub3QgbW9kaWZpZWQgYnkg dGhlIDxzcGFuIGNsYXNzPSJkZWxldGUiPmV4dGVuc2lvbjwvc3Bhbj5zPC90ZD48dGQ+IDwvdGQ+ PHRkIGNsYXNzPSJyYmxvY2siPiAgIHNpZ25hbGVkIHVzaW5nIEdNUExTIFtSRkMzNDczXSBhbmQg YXJlIG5vdCBtb2RpZmllZCBieSB0aGUgPHNwYW4gY2xhc3M9Imluc2VydCI+dXBkYXRlPC9zcGFu PnM8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9 ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIGRlZmluZWQgaW4gdGhpcyBkb2N1bWVu dCBleGNlcHQgdGhlIGZvbGxvd2luZy48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4g ICBkZWZpbmVkIGluIHRoaXMgZG9jdW1lbnQgZXhjZXB0IHRoZSBmb2xsb3dpbmcuPC90ZD48dGQg Y2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwv dGQ+PHRkIGNsYXNzPSJsZWZ0Ij48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij48L3Rk Pjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVu byI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIFdoZW4gdXNpbmcgdGhlIEdNUExTIG91dC1vZi1i YW5kIHNpZ25hbGluZyBbUkZDMzQ3M10sIGFmdGVyIGEgbGluazwvdGQ+PHRkPiA8L3RkPjx0ZCBj bGFzcz0icmlnaHQiPiAgIFdoZW4gdXNpbmcgdGhlIEdNUExTIG91dC1vZi1iYW5kIHNpZ25hbGlu ZyBbUkZDMzQ3M10sIGFmdGVyIGEgbGluazwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90 cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAg ZmFpbHVyZSBldmVudCwgdGhlIFJTVlAgbWVzc2FnZXMgYXJlIG5vdCByZXJvdXRlZCBvdmVyIHRo ZSBieXBhc3M8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBmYWlsdXJlIGV2ZW50 LCB0aGUgUlNWUCBtZXNzYWdlcyBhcmUgbm90IHJlcm91dGVkIG92ZXIgdGhlIGJ5cGFzczwvdGQ+ PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5v Ij48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgdHVubmVsIGJ5IHRoZSBkb3duc3RyZWFtIFBMUiBi dXQgaW5zdGVhZCByZXJvdXRlZCBvdmVyIGE8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0 Ij4gICB0dW5uZWwgYnkgdGhlIGRvd25zdHJlYW0gUExSIGJ1dCBpbnN0ZWFkIHJlcm91dGVkIG92 ZXIgYTwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFz cz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgY29udHJvbC1jaGFubmVsIHRvIHRo ZSBkb3duc3RyZWFtIE1QLjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIGNvbnRy b2wtY2hhbm5lbCB0byB0aGUgZG93bnN0cmVhbSBNUC48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48 L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9Imxl ZnQiPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPjwvdGQ+PHRkIGNsYXNzPSJsaW5l bm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFz cz0ibGVmdCI+NC4gIEJ5cGFzcyBUdW5uZWwgQXNzaWdubWVudCBGb3IgQmlkaXJlY3Rpb25hbCBH TVBMUyBMU1BzPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+NC4gIEJ5cGFzcyBUdW5u ZWwgQXNzaWdubWVudCBGb3IgQmlkaXJlY3Rpb25hbCBHTVBMUyBMU1BzPC90ZD48dGQgY2xhc3M9 ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRk IGNsYXNzPSJsZWZ0Ij48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij48L3RkPjx0ZCBj bGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90 ZD48dGQgY2xhc3M9ImxlZnQiPiAgIFRoaXMgc2VjdGlvbiBkZXNjcmliZXMgc2lnbmFsaW5nIHBy b2NlZHVyZXMgZm9yIEZSUiBiaWRpcmVjdGlvbmFsPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJy aWdodCI+ICAgVGhpcyBzZWN0aW9uIGRlc2NyaWJlcyBzaWduYWxpbmcgcHJvY2VkdXJlcyBmb3Ig RlJSIGJpZGlyZWN0aW9uYWw8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAg IDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPjwvdGQ+PHRkPiA8 L3RkPjx0ZCBjbGFzcz0icmlnaHQiPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4K ICAgICAgPHRyIGlkPSJwYXJ0LTYiIGNsYXNzPSJjaGFuZ2UiPjx0ZD48L3RkPjx0aD48c21hbGw+ c2tpcHBpbmcgdG8gY2hhbmdlIGF0PC9zbWFsbD48YSBocmVmPSIjcGFydC02Ij48ZW0+IHBhZ2Ug OSwgbGluZSA2PHNwYW4gY2xhc3M9ImhpZGUiPiDCtjwvc3Bhbj48L2VtPjwvYT48L3RoPjx0aD4g PC90aD48dGg+PHNtYWxsPnNraXBwaW5nIHRvIGNoYW5nZSBhdDwvc21hbGw+PGEgaHJlZj0iI3Bh cnQtNiI+PGVtPiBwYWdlIDksIGxpbmUgNjxzcGFuIGNsYXNzPSJoaWRlIj4gwrY8L3NwYW4+PC9l bT48L2E+PC90aD48dGQ+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwv dGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBUaGUgdXBzdHJlYW0gUExSIChkb3duc3RyZWFtIE1QKSBz aW1wbHkgcmVmbGVjdHMgdGhlIGJ5cGFzcyB0dW5uZWw8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9 InJpZ2h0Ij4gICBUaGUgdXBzdHJlYW0gUExSIChkb3duc3RyZWFtIE1QKSBzaW1wbHkgcmVmbGVj dHMgdGhlIGJ5cGFzcyB0dW5uZWw8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAg ICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIGFzc2ln bm1lbnQgaW4gdGhlIHJldmVyc2UgZGlyZWN0aW9uLiAgVGhlIGFic2VuY2Ugb2Y8L3RkPjx0ZD4g PC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBhc3NpZ25tZW50IGluIHRoZSByZXZlcnNlIGRpcmVj dGlvbi4gIFRoZSBhYnNlbmNlIG9mPC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgog ICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBCWVBB U1NfQVNTSUdOTUVOVCBzdWJvYmplY3QgaW4gUlJPIG1lYW5zIHRoYXQgdGhlIHJlbGV2YW50IG5v ZGUgb3I8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBCWVBBU1NfQVNTSUdOTUVO VCBzdWJvYmplY3QgaW4gUlJPIG1lYW5zIHRoYXQgdGhlIHJlbGV2YW50IG5vZGUgb3I8L3RkPjx0 ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+ PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIGludGVyZmFjZSBpcyBub3QgcHJvdGVjdGVkIGJ5IGEg YmlkaXJlY3Rpb25hbCBieXBhc3MgdHVubmVsLiAgSGVuY2UsPC90ZD48dGQ+IDwvdGQ+PHRkIGNs YXNzPSJyaWdodCI+ICAgaW50ZXJmYWNlIGlzIG5vdCBwcm90ZWN0ZWQgYnkgYSBiaWRpcmVjdGlv bmFsIGJ5cGFzcyB0dW5uZWwuICBIZW5jZSw8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwv dHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAg IHRoZSB1cHN0cmVhbSBQTFIgbmVlZCBub3QgYXNzaWduIGEgYnlwYXNzIHR1bm5lbCBpbiB0aGUg cmV2ZXJzZTwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIHRoZSB1cHN0cmVhbSBQ TFIgbmVlZCBub3QgYXNzaWduIGEgYnlwYXNzIHR1bm5lbCBpbiB0aGUgcmV2ZXJzZTwvdGQ+PHRk IGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48 L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgZGlyZWN0aW9uLjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFz cz0icmlnaHQiPiAgIGRpcmVjdGlvbi48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+ CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPjwvdGQ+ PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+ PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ ICAgV2hlbiB0aGUgQllQQVNTX0FTU0lHTk1FTlQgc3Vib2JqZWN0IGlzIGFkZGVkIGluIHRoZSBS Uk86PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgV2hlbiB0aGUgQllQQVNTX0FT U0lHTk1FTlQgc3Vib2JqZWN0IGlzIGFkZGVkIGluIHRoZSBSUk86PC90ZD48dGQgY2xhc3M9Imxp bmVubyI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNs YXNzPSJsZWZ0Ij48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij48L3RkPjx0ZCBjbGFz cz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48 dGQgY2xhc3M9ImxlZnQiPiAgIG8gIFRoZSBJUHY0IG9yIElQdjYgc3Vib2JqZWN0IGNvbnRhaW5p bmcgTm9kZS1JRCBhZGRyZXNzIE1VU1QgYWxzbyBiZTwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0i cmlnaHQiPiAgIG8gIFRoZSBJUHY0IG9yIElQdjYgc3Vib2JqZWN0IGNvbnRhaW5pbmcgTm9kZS1J RCBhZGRyZXNzIE1VU1QgYWxzbyBiZTwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4K ICAgICAgPHRyIGlkPSJkaWZmMDAxNCI+PHRkPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFz cz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj4gICAgICBhZGRlZCBbUkZDNDU2MV0u ICBUaGUgTm9kZS1JRCBhZGRyZXNzIDxzcGFuIGNsYXNzPSJkZWxldGUiPm11c3Q8L3NwYW4+IG1h dGNoIHRoZSBzb3VyY2U8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+ICAgICAgYWRk ZWQgW1JGQzQ1NjFdLiAgVGhlIE5vZGUtSUQgYWRkcmVzcyA8c3BhbiBjbGFzcz0iaW5zZXJ0Ij5N VVNUPC9zcGFuPiBtYXRjaCB0aGUgc291cmNlPC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48 L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4g ICAgICBhZGRyZXNzIG9mIHRoZSBieXBhc3MgdHVubmVsIHNlbGVjdGVkIGZvciB0aGlzIHByb3Rl Y3RlZCBMU1AuPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgICAgYWRkcmVzcyBv ZiB0aGUgYnlwYXNzIHR1bm5lbCBzZWxlY3RlZCBmb3IgdGhpcyBwcm90ZWN0ZWQgTFNQLjwvdGQ+ PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5v Ij48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ PC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJs aW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBvICBUaGUgQllQQVNTX0FTU0lHTk1FTlQg c3Vib2JqZWN0IE1VU1QgYmUgYWRkZWQgaW1tZWRpYXRlbHkgYWZ0ZXI8L3RkPjx0ZD4gPC90ZD48 dGQgY2xhc3M9InJpZ2h0Ij4gICBvICBUaGUgQllQQVNTX0FTU0lHTk1FTlQgc3Vib2JqZWN0IE1V U1QgYmUgYWRkZWQgaW1tZWRpYXRlbHkgYWZ0ZXI8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3Rk PjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9ImxlZnQi PiAgICAgIHRoZSBOb2RlLUlEIGFkZHJlc3MuPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdo dCI+ICAgICAgdGhlIE5vZGUtSUQgYWRkcmVzcy48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3Rk PjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9ImxlZnQi PjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8i PjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0i bGVmdCI+ICAgbyAgVGhlIExhYmVsIHN1Ym9iamVjdCBNVVNUIGFsc28gYmUgYWRkZWQgW1JGQzMy MDldLjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIG8gIFRoZSBMYWJlbCBzdWJv YmplY3QgTVVTVCBhbHNvIGJlIGFkZGVkIFtSRkMzMjA5XS48L3RkPjx0ZCBjbGFzcz0ibGluZW5v Ij48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9 ImxlZnQiPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPjwvdGQ+PHRkIGNsYXNzPSJs aW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBj bGFzcz0ibGVmdCI+ICAgVGhlIHJ1bGVzIGZvciBhZGRpbmcgYW4gSVB2NCBvciBJUHY2IEludGVy ZmFjZSBhZGRyZXNzIHN1Ym9iamVjdCBhbmQ8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0 Ij4gICBUaGUgcnVsZXMgZm9yIGFkZGluZyBhbiBJUHY0IG9yIElQdjYgSW50ZXJmYWNlIGFkZHJl c3Mgc3Vib2JqZWN0IGFuZDwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAg PHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgVW5udW1iZXJl ZCBJbnRlcmZhY2UgSUQgc3Vib2JqZWN0IGFzIHNwZWNpZmllZCBpbiBbUkZDMzIwOV0gYW5kPC90 ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgVW5udW1iZXJlZCBJbnRlcmZhY2UgSUQg c3Vib2JqZWN0IGFzIHNwZWNpZmllZCBpbiBbUkZDMzIwOV0gYW5kPC90ZD48dGQgY2xhc3M9Imxp bmVubyI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNs YXNzPSJsZWZ0Ij4gICBbUkZDNDA5MF0gYXJlIG5vdCBtb2RpZmllZCBieSB0aGUgYWJvdmUgcHJv Y2VkdXJlLiAgVGhlIG9wdGlvbnM8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBb UkZDNDA5MF0gYXJlIG5vdCBtb2RpZmllZCBieSB0aGUgYWJvdmUgcHJvY2VkdXJlLiAgVGhlIG9w dGlvbnM8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xh c3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIHNwZWNpZmllZCBpbiBTZWN0aW9u IDYuMS4zIGluIFtSRkM0OTkwXSBhcmUgYWxzbyBhcHBsaWNhYmxlIGFzIGxvbmc8L3RkPjx0ZD4g PC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBzcGVjaWZpZWQgaW4gU2VjdGlvbiA2LjEuMyBpbiBb UkZDNDk5MF0gYXJlIGFsc28gYXBwbGljYWJsZSBhcyBsb25nPC90ZD48dGQgY2xhc3M9ImxpbmVu byI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNz PSJsZWZ0Ij4gICBhcyBhYm92ZSBtZW50aW9uZWQgcnVsZXMgYXJlIGZvbGxvd2VkIHdoZW4gdXNp bmcgdGhlIEZSUiBwcm9jZWR1cmVzPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAg YXMgYWJvdmUgbWVudGlvbmVkIHJ1bGVzIGFyZSBmb2xsb3dlZCB3aGVuIHVzaW5nIHRoZSBGUlIg cHJvY2VkdXJlczwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0 ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgZGVmaW5lZCBpbiB0aGlz IGRvY3VtZW50LjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIGRlZmluZWQgaW4g dGhpcyBkb2N1bWVudC48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0 cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPjwvdGQ+PHRkPiA8L3Rk Pjx0ZCBjbGFzcz0icmlnaHQiPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAg ICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgQW4gdXBz dHJlYW0gUExSIChkb3duc3RyZWFtIE1QKSBTSE9VTEQgY2hlY2sgYWxsIEJZUEFTU19BU1NJR05N RU5UPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgQW4gdXBzdHJlYW0gUExSIChk b3duc3RyZWFtIE1QKSBTSE9VTEQgY2hlY2sgYWxsIEJZUEFTU19BU1NJR05NRU5UPC90ZD48dGQg Y2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwv dGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBzdWJvYmplY3RzIGluIHRoZSBQYXRoIFJSTyBpbiBvcmRl ciB0byBhc3NpZ24gYSByZXZlcnNlIGJ5cGFzczwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmln aHQiPiAgIHN1Ym9iamVjdHMgaW4gdGhlIFBhdGggUlJPIGluIG9yZGVyIHRvIGFzc2lnbiBhIHJl dmVyc2UgYnlwYXNzPC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8dHI+ PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICB0dW5uZWwuICBUaGUg dXBzdHJlYW0gUExSIHRoYXQgZGV0ZWN0cyBhIEJZUEFTU19BU1NJR05NRU5UIHN1Ym9iamVjdCw8 L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICB0dW5uZWwuICBUaGUgdXBzdHJlYW0g UExSIHRoYXQgZGV0ZWN0cyBhIEJZUEFTU19BU1NJR05NRU5UIHN1Ym9iamVjdCw8L3RkPjx0ZCBj bGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90 ZD48dGQgY2xhc3M9ImxlZnQiPiAgIHNlbGVjdHMgYSByZXZlcnNlIGJ5cGFzcyB0dW5uZWwgdGhh dCB0ZXJtaW5hdGVzIGxvY2FsbHkgd2l0aCB0aGU8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJp Z2h0Ij4gICBzZWxlY3RzIGEgcmV2ZXJzZSBieXBhc3MgdHVubmVsIHRoYXQgdGVybWluYXRlcyBs b2NhbGx5IHdpdGggdGhlPC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8 dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBkZXN0aW5hdGlv biBhZGRyZXNzIGFuZCB0dW5uZWwtSUQgZnJvbSB0aGUgc3Vib2JqZWN0LCBhbmQgaGFzIGE8L3Rk Pjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBkZXN0aW5hdGlvbiBhZGRyZXNzIGFuZCB0 dW5uZWwtSUQgZnJvbSB0aGUgc3Vib2JqZWN0LCBhbmQgaGFzIGE8L3RkPjx0ZCBjbGFzcz0ibGlu ZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0ciBpZD0iZGlmZjAwMTUiPjx0ZD48L3RkPjwvdHI+CiAg ICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+ICAgc291 cmNlIGFkZHJlc3MgbWF0Y2hpbmcgdGhlIE5vZGUtSUQgYWRkcmVzcy4gIFRoZSBSUk8gPHNwYW4g Y2xhc3M9ImRlbGV0ZSI+bWF5PC9zcGFuPiBjb250YWluPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNz PSJyYmxvY2siPiAgIHNvdXJjZSBhZGRyZXNzIG1hdGNoaW5nIHRoZSBOb2RlLUlEIGFkZHJlc3Mu ICBUaGUgUlJPIDxzcGFuIGNsYXNzPSJpbnNlcnQiPmNhbjwvc3Bhbj4gY29udGFpbjwvdGQ+PHRk IGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48 L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgbXVsdGlwbGUgYWRkcmVzc2VzIHRvIGlkZW50aWZ5IGEg bm9kZSwgaG93ZXZlciwgdGhlIHVwc3RyZWFtIFBMUjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0i cmlnaHQiPiAgIG11bHRpcGxlIGFkZHJlc3NlcyB0byBpZGVudGlmeSBhIG5vZGUsIGhvd2V2ZXIs IHRoZSB1cHN0cmVhbSBQTFI8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAg IDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIHJlbGllcyBv biB0aGUgTm9kZS1JRCBhZGRyZXNzIHByZWNlZGluZyB0aGUgQllQQVNTX0FTU0lHTk1FTlQ8L3Rk Pjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICByZWxpZXMgb24gdGhlIE5vZGUtSUQgYWRk cmVzcyBwcmVjZWRpbmcgdGhlIEJZUEFTU19BU1NJR05NRU5UPC90ZD48dGQgY2xhc3M9ImxpbmVu byI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNz PSJsZWZ0Ij4gICBzdWJvYmplY3QgZm9yIGlkZW50aWZ5aW5nIHRoZSBieXBhc3MgdHVubmVsLiAg SWYgdGhlIGJ5cGFzcyB0dW5uZWwgaXM8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4g ICBzdWJvYmplY3QgZm9yIGlkZW50aWZ5aW5nIHRoZSBieXBhc3MgdHVubmVsLiAgSWYgdGhlIGJ5 cGFzcyB0dW5uZWwgaXM8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0 cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIG5vdCBmb3VuZCwg dGhlIHVwc3RyZWFtIFBMUiBTSE9VTEQgc2VuZCBhIE5vdGlmeSBtZXNzYWdlIFtSRkMzNDczXTwv dGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIG5vdCBmb3VuZCwgdGhlIHVwc3RyZWFt IFBMUiBTSE9VTEQgc2VuZCBhIE5vdGlmeSBtZXNzYWdlIFtSRkMzNDczXTwvdGQ+PHRkIGNsYXNz PSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0 ZCBjbGFzcz0ibGVmdCI+ICAgd2l0aCBFcnJvci1jb2RlIC0gRlJSIEJ5cGFzcyBBc3NpZ25tZW50 IEVycm9yICh2YWx1ZTogVEJBMSkgYW5kIFN1Yi08L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJp Z2h0Ij4gICB3aXRoIEVycm9yLWNvZGUgLSBGUlIgQnlwYXNzIEFzc2lnbm1lbnQgRXJyb3IgKHZh bHVlOiBUQkExKSBhbmQgU3ViLTwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAg ICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgY29kZSAt IEJ5cGFzcyBUdW5uZWwgTm90IEZvdW5kICh2YWx1ZTogVEJBMykgdG8gdGhlIGRvd25zdHJlYW0g UExSLjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIGNvZGUgLSBCeXBhc3MgVHVu bmVsIE5vdCBGb3VuZCAodmFsdWU6IFRCQTMpIHRvIHRoZSBkb3duc3RyZWFtIFBMUi48L3RkPjx0 ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+ PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIFVwb24gcmVjZWl2aW5nIHRoaXMgZXJyb3IsIHRoZSBk b3duc3RyZWFtIFBMUiBTSE9VTEQgcmVtb3ZlIHRoZTwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0i cmlnaHQiPiAgIFVwb24gcmVjZWl2aW5nIHRoaXMgZXJyb3IsIHRoZSBkb3duc3RyZWFtIFBMUiBT SE9VTEQgcmVtb3ZlIHRoZTwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAg PHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgYnlwYXNzIHR1 bm5lbCBhc3NpZ25tZW50IGFuZCBzZWxlY3QgYW4gYWx0ZXJuYXRlIGJ5cGFzcyB0dW5uZWwgaWYg b25lPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgYnlwYXNzIHR1bm5lbCBhc3Np Z25tZW50IGFuZCBzZWxlY3QgYW4gYWx0ZXJuYXRlIGJ5cGFzcyB0dW5uZWwgaWYgb25lPC90ZD48 dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8i PjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBhdmFpbGFibGUuICBUaGUgUlJPIGNvbnRhaW5pbmcg QllQQVNTX0FTU0lHTk1FTlQgc3Vib2JqZWN0KHMpIGlzIHRoZW48L3RkPjx0ZD4gPC90ZD48dGQg Y2xhc3M9InJpZ2h0Ij4gICBhdmFpbGFibGUuICBUaGUgUlJPIGNvbnRhaW5pbmcgQllQQVNTX0FT U0lHTk1FTlQgc3Vib2JqZWN0KHMpIGlzIHRoZW48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3Rk PjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9ImxlZnQi PiAgIHNpbXBseSBmb3J3YXJkZWQgZG93bnN0cmVhbSBpbiB0aGUgUlNWUCBQYXRoIG1lc3NhZ2Uu PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgc2ltcGx5IGZvcndhcmRlZCBkb3du c3RyZWFtIGluIHRoZSBSU1ZQIFBhdGggbWVzc2FnZS48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48 L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9Imxl ZnQiPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPjwvdGQ+PHRkIGNsYXNzPSJsaW5l bm8iPjwvdGQ+PC90cj4KICAgICAgPHRyIGlkPSJwYXJ0LTciIGNsYXNzPSJjaGFuZ2UiPjx0ZD48 L3RkPjx0aD48c21hbGw+c2tpcHBpbmcgdG8gY2hhbmdlIGF0PC9zbWFsbD48YSBocmVmPSIjcGFy dC03Ij48ZW0+IHBhZ2UgMTEsIGxpbmUgNTA8c3BhbiBjbGFzcz0iaGlkZSI+IMK2PC9zcGFuPjwv ZW0+PC9hPjwvdGg+PHRoPiA8L3RoPjx0aD48c21hbGw+c2tpcHBpbmcgdG8gY2hhbmdlIGF0PC9z bWFsbD48YSBocmVmPSIjcGFydC03Ij48ZW0+IHBhZ2UgMTEsIGxpbmUgNTA8c3BhbiBjbGFzcz0i aGlkZSI+IMK2PC9zcGFuPjwvZW0+PC9hPjwvdGg+PHRkPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0 ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgIFQzPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIFQzPC90ZD48dGQgY2xhc3M9ImxpbmVu byI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNz PSJsZWZ0Ij4gICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgUEFUSCAtJmd0OzwvdGQ+ PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICBQQVRIIC0mZ3Q7PC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8 dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgJmx0Oy0gUkVTVjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0i cmlnaHQiPiAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAmbHQ7LSBSRVNWPC90ZD48 dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8i PjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij48 L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9Imxp bmVubyI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgICAgICAgICAgICAgICAgUHJvdGVjdGVkIExT UDogIHtSMS1SMi1SMy1SNC1SNS1SNn08L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4g ICAgICAgICAgICAgICAgIFByb3RlY3RlZCBMU1A6ICB7UjEtUjItUjMtUjQtUjUtUjZ9PC90ZD48 dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8i PjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICAgICAgICAgICAgICAgIFIzJ3MgQnlwYXNzIFQzOiB7 UjMtUjR9PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgICAgICAgICAgICAgICBS MydzIEJ5cGFzcyBUMzoge1IzLVI0fTwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4K ICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+PC90ZD48 dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48 L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4g ICAgICAgICBGaWd1cmUgMTogRmxvdyBvZiBSU1ZQIHNpZ25hbGluZyBhZnRlciBsaW5rIGZhaWx1 cmUgYW5kIEZSUjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgICAgICAgIEZpZ3Vy ZSAxOiBGbG93IG9mIFJTVlAgc2lnbmFsaW5nIGFmdGVyIGxpbmsgZmFpbHVyZSBhbmQgRlJSPC90 ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5l bm8iPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0 Ij48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9 ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIENvbnNpZGVyIHRoZSBURSBuZXR3b3Jr IHNob3duIGluIEZpZ3VyZSAxLiAgQXNzdW1lIGV2ZXJ5IGxpbmsgaW4gdGhlPC90ZD48dGQ+IDwv dGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgQ29uc2lkZXIgdGhlIFRFIG5ldHdvcmsgc2hvd24gaW4g RmlndXJlIDEuICBBc3N1bWUgZXZlcnkgbGluayBpbiB0aGU8L3RkPjx0ZCBjbGFzcz0ibGluZW5v Ij48L3RkPjwvdHI+CiAgICAgIDx0ciBpZD0iZGlmZjAwMTYiPjx0ZD48L3RkPjwvdHI+CiAgICAg IDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+ICAgbmV0d29y ayBpcyBwcm90ZWN0ZWQgd2l0aCBhIGxpbmsgcHJvdGVjdGlvbiBieXBhc3MgdHVubmVsIDxzcGFu IGNsYXNzPSJkZWxldGUiPihlLmcuPC9zcGFuPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJs b2NrIj4gICBuZXR3b3JrIGlzIHByb3RlY3RlZCB3aXRoIGEgbGluayBwcm90ZWN0aW9uIGJ5cGFz cyB0dW5uZWwgPHNwYW4gY2xhc3M9Imluc2VydCI+KGUuZy4sPC9zcGFuPjwvdGQ+PHRkIGNsYXNz PSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0 ZCBjbGFzcz0ibGJsb2NrIj4gICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNz PSJyYmxvY2siPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0 ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgYnlwYXNzIHR1bm5lbCBU MykuICBGb3IgdGhlIHByb3RlY3RlZCBjby1yb3V0ZWQgYmlkaXJlY3Rpb25hbCBMU1A8L3RkPjx0 ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBieXBhc3MgdHVubmVsIFQzKS4gIEZvciB0aGUg cHJvdGVjdGVkIGNvLXJvdXRlZCBiaWRpcmVjdGlvbmFsIExTUDwvdGQ+PHRkIGNsYXNzPSJsaW5l bm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFz cz0ibGVmdCI+ICAgd2hvc2UgaGVhZC1lbmQgaXMgb24gbm9kZSBSMSBhbmQgdGFpbC1lbmQgaXMg b24gbm9kZSBSNiwgZWFjaDwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIHdob3Nl IGhlYWQtZW5kIGlzIG9uIG5vZGUgUjEgYW5kIHRhaWwtZW5kIGlzIG9uIG5vZGUgUjYsIGVhY2g8 L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9Imxp bmVubyI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIHRyYXZlcnNlZCBub2RlIChhIHBvdGVudGlh bCBQTFIpIGFzc2lnbnMgYSBsaW5rIHByb3RlY3Rpb24gY28tcm91dGVkPC90ZD48dGQ+IDwvdGQ+ PHRkIGNsYXNzPSJyaWdodCI+ICAgdHJhdmVyc2VkIG5vZGUgKGEgcG90ZW50aWFsIFBMUikgYXNz aWducyBhIGxpbmsgcHJvdGVjdGlvbiBjby1yb3V0ZWQ8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48 L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9Imxl ZnQiPiAgIGJpZGlyZWN0aW9uYWwgYnlwYXNzIHR1bm5lbC48L3RkPjx0ZD4gPC90ZD48dGQgY2xh c3M9InJpZ2h0Ij4gICBiaWRpcmVjdGlvbmFsIGJ5cGFzcyB0dW5uZWwuPC90ZD48dGQgY2xhc3M9 ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRk IGNsYXNzPSJsZWZ0Ij48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij48L3RkPjx0ZCBj bGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90 ZD48dGQgY2xhc3M9ImxlZnQiPjUuMS4xLiAgQmVoYXZpb3IgQWZ0ZXIgTGluayBGYWlsdXJlPC90 ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+NS4xLjEuICBCZWhhdmlvciBBZnRlciBMaW5r IEZhaWx1cmU8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQg Y2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPjwvdGQ+PHRkPiA8L3RkPjx0ZCBj bGFzcz0icmlnaHQiPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRy Pjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgQ29uc2lkZXIgdGhl IGxpbmsgUjMtUjQgb24gdGhlIHByb3RlY3RlZCBMU1AgcGF0aCBmYWlscy4gIFRoZTwvdGQ+PHRk PiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIENvbnNpZGVyIHRoZSBsaW5rIFIzLVI0IG9uIHRo ZSBwcm90ZWN0ZWQgTFNQIHBhdGggZmFpbHMuICBUaGU8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48 L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9Imxl ZnQiPiAgIGRvd25zdHJlYW0gUExSIFIzIGFuZCB1cHN0cmVhbSBQTFIgUjQgaW5kZXBlbmRlbnRs eSB0cmlnZ2VyIGZhc3Q8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBkb3duc3Ry ZWFtIFBMUiBSMyBhbmQgdXBzdHJlYW0gUExSIFI0IGluZGVwZW5kZW50bHkgdHJpZ2dlciBmYXN0 PC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJs aW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICByZXJvdXRlIHRvIHJlZGlyZWN0IHRyYWZm aWMgb250byBieXBhc3MgdHVubmVsIFQzIGluIHRoZSBmb3J3YXJkIGFuZDwvdGQ+PHRkPiA8L3Rk Pjx0ZCBjbGFzcz0icmlnaHQiPiAgIHJlcm91dGUgdG8gcmVkaXJlY3QgdHJhZmZpYyBvbnRvIGJ5 cGFzcyB0dW5uZWwgVDMgaW4gdGhlIGZvcndhcmQgYW5kPC90ZD48dGQgY2xhc3M9ImxpbmVubyI+ PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJs ZWZ0Ij48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij48L3RkPjx0ZCBjbGFzcz0ibGlu ZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0ciBpZD0icGFydC04IiBjbGFzcz0iY2hhbmdlIj48dGQ+ PC90ZD48dGg+PHNtYWxsPnNraXBwaW5nIHRvIGNoYW5nZSBhdDwvc21hbGw+PGEgaHJlZj0iI3Bh cnQtOCI+PGVtPiBwYWdlIDE0LCBsaW5lIDM0PHNwYW4gY2xhc3M9ImhpZGUiPiDCtjwvc3Bhbj48 L2VtPjwvYT48L3RoPjx0aD4gPC90aD48dGg+PHNtYWxsPnNraXBwaW5nIHRvIGNoYW5nZSBhdDwv c21hbGw+PGEgaHJlZj0iI3BhcnQtOCI+PGVtPiBwYWdlIDE0LCBsaW5lIDM0PHNwYW4gY2xhc3M9 ImhpZGUiPiDCtjwvc3Bhbj48L2VtPjwvYT48L3RoPjx0ZD48L3RkPjwvdHI+CiAgICAgIDx0cj48 dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgICAgICAgRmlndXJlIDM6 IEZsb3cgb2YgUlNWUCBzaWduYWxpbmcgYWZ0ZXIgRlJSIGFuZCByZS1jb3JvdXRlPC90ZD48dGQ+ IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgICAgICBGaWd1cmUgMzogRmxvdyBvZiBSU1ZQIHNp Z25hbGluZyBhZnRlciBGUlIgYW5kIHJlLWNvcm91dGU8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48 L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9Imxl ZnQiPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPjwvdGQ+PHRkIGNsYXNzPSJsaW5l bm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFz cz0ibGVmdCI+ICAgRmlndXJlIDMgZGVzY3JpYmVzIHRoZSBwYXRoIHRha2VuIGJ5IHRoZSB0cmFm ZmljIGFuZCBzaWduYWxpbmcgYWZ0ZXI8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4g ICBGaWd1cmUgMyBkZXNjcmliZXMgdGhlIHBhdGggdGFrZW4gYnkgdGhlIHRyYWZmaWMgYW5kIHNp Z25hbGluZyBhZnRlcjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRy Pjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgY29tcGxldGluZyBy ZS1jb3JvdXRlIG9mIGRhdGEgYW5kIHNpZ25hbGluZyBpbiB0aGUgZm9yd2FyZCBhbmQ8L3RkPjx0 ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBjb21wbGV0aW5nIHJlLWNvcm91dGUgb2YgZGF0 YSBhbmQgc2lnbmFsaW5nIGluIHRoZSBmb3J3YXJkIGFuZDwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8i PjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0i bGVmdCI+ICAgcmV2ZXJzZSBwYXRocyBkZXNjcmliZWQgYWJvdmUuICBOb2RlIFI0IHdpbGwgc3Rv cCByZWNlaXZpbmcgdGhlIFBhdGg8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBy ZXZlcnNlIHBhdGhzIGRlc2NyaWJlZCBhYm92ZS4gIE5vZGUgUjQgd2lsbCBzdG9wIHJlY2Vpdmlu ZyB0aGUgUGF0aDwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0 ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgYW5kIFJlc3YgbWVzc2Fn ZXMgYW5kIGl0IHdpbGwgdGltZW91dCB0aGUgUlNWUCBzb2Z0LXN0YXRlLCBob3dldmVyLDwvdGQ+ PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIGFuZCBSZXN2IG1lc3NhZ2VzIGFuZCBpdCB3 aWxsIHRpbWVvdXQgdGhlIFJTVlAgc29mdC1zdGF0ZSwgaG93ZXZlciw8L3RkPjx0ZCBjbGFzcz0i bGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQg Y2xhc3M9ImxlZnQiPiAgIHRoaXMgd2lsbCBub3QgY2F1c2UgdGhlIExTUCB0byBiZSB0b3JuIGRv d24uICBSU1ZQIHNpZ25hbGluZyBhdCBub2RlPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdo dCI+ICAgdGhpcyB3aWxsIG5vdCBjYXVzZSB0aGUgTFNQIHRvIGJlIHRvcm4gZG93bi4gIFJTVlAg c2lnbmFsaW5nIGF0IG5vZGU8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAg IDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIFIyIGlzIG5v dCBhZmZlY3RlZCBieSB0aGUgRlJSIGFuZCByZS1jb3JvdXRpbmcuPC90ZD48dGQ+IDwvdGQ+PHRk IGNsYXNzPSJyaWdodCI+ICAgUjIgaXMgbm90IGFmZmVjdGVkIGJ5IHRoZSBGUlIgYW5kIHJlLWNv cm91dGluZy48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQg Y2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPjwvdGQ+PHRkPiA8L3RkPjx0ZCBj bGFzcz0icmlnaHQiPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRy Pjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgSWYgZG93bnN0cmVh bSBNUCBSNSByZWNlaXZlcyBtdWx0aXBsZSBSU1ZQIFBhdGggbWVzc2FnZXMgdGhyb3VnaDwvdGQ+ PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIElmIGRvd25zdHJlYW0gTVAgUjUgcmVjZWl2 ZXMgbXVsdGlwbGUgUlNWUCBQYXRoIG1lc3NhZ2VzIHRocm91Z2g8L3RkPjx0ZCBjbGFzcz0ibGlu ZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0ciBpZD0iZGlmZjAwMTciPjx0ZD48L3RkPjwvdHI+CiAg ICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+ICAgbXVs dGlwbGUgYnlwYXNzIHR1bm5lbHMgKGUuZy4gYXMgYSByZXN1bHQgb2YgbXVsdGlwbGUgZmFpbHVy ZXMpLCB0aGU8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+ICAgbXVsdGlwbGUgYnlw YXNzIHR1bm5lbHMgKGUuZy48c3BhbiBjbGFzcz0iaW5zZXJ0Ij4sPC9zcGFuPiBhcyBhIHJlc3Vs dCBvZiBtdWx0aXBsZSBmYWlsdXJlcyksIHRoZTwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+ PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ ICAgUFJSIFNIT1VMRCBpZGVudGlmeSBhIGJ5cGFzcyB0dW5uZWwgdGhhdCB0ZXJtaW5hdGVzIG9u IHRoZSBmYXJ0aGVzdDwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIFBSUiBTSE9V TEQgaWRlbnRpZnkgYSBieXBhc3MgdHVubmVsIHRoYXQgdGVybWluYXRlcyBvbiB0aGUgZmFydGhl c3Q8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9 ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIGRvd25zdHJlYW0gUExSIGFsb25nIHRo ZSBwcm90ZWN0ZWQgTFNQIHBhdGggKGNsb3Nlc3QgdG8gdGhlIHByb3RlY3RlZDwvdGQ+PHRkPiA8 L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIGRvd25zdHJlYW0gUExSIGFsb25nIHRoZSBwcm90ZWN0 ZWQgTFNQIHBhdGggKGNsb3Nlc3QgdG8gdGhlIHByb3RlY3RlZDwvdGQ+PHRkIGNsYXNzPSJsaW5l bm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFz cz0ibGVmdCI+ICAgYmlkaXJlY3Rpb25hbCBMU1AgaGVhZC1lbmQpIGFuZCBhY3RpdmF0ZSB0aGUg cmVyb3V0ZSBwcm9jZWR1cmVzPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgYmlk aXJlY3Rpb25hbCBMU1AgaGVhZC1lbmQpIGFuZCBhY3RpdmF0ZSB0aGUgcmVyb3V0ZSBwcm9jZWR1 cmVzPC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNz PSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBtZW50aW9uZWQgYWJvdmUuPC90ZD48 dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgbWVudGlvbmVkIGFib3ZlLjwvdGQ+PHRkIGNs YXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3Rk Pjx0ZCBjbGFzcz0ibGVmdCI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+PC90ZD48 dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8i PjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij41LjIuMi4xLiAgUmUtY29yb3V0ZSBpbiBEYXRhLXBsYW5l IEFmdGVyIExpbmsgRmFpbHVyZTwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPjUuMi4y LjEuICBSZS1jb3JvdXRlIGluIERhdGEtcGxhbmUgQWZ0ZXIgTGluayBGYWlsdXJlPC90ZD48dGQg Y2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwv dGQ+PHRkIGNsYXNzPSJsZWZ0Ij48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij48L3Rk Pjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVu byI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIFRoZSBkb3duc3RyZWFtIE1QICh1cHN0cmVhbSBQ TFIpIE1BWSBvcHRpb25hbGx5IHN1cHBvcnQgcmUtY29yb3V0aW5nPC90ZD48dGQ+IDwvdGQ+PHRk IGNsYXNzPSJyaWdodCI+ICAgVGhlIGRvd25zdHJlYW0gTVAgKHVwc3RyZWFtIFBMUikgTUFZIG9w dGlvbmFsbHkgc3VwcG9ydCByZS1jb3JvdXRpbmc8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3Rk PjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9ImxlZnQi PiAgIGluIGRhdGEtcGxhbmUgYXMgZm9sbG93cy4gIElmIHRoZSBkb3duc3RyZWFtIE1QIGhhcyBh c3NpZ25lZCBhPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgaW4gZGF0YS1wbGFu ZSBhcyBmb2xsb3dzLiAgSWYgdGhlIGRvd25zdHJlYW0gTVAgaGFzIGFzc2lnbmVkIGE8L3RkPjx0 ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+ PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIGJpZGlyZWN0aW9uYWwgYnlwYXNzIHR1bm5lbCwgYXMg c29vbiBhcyB0aGUgZG93bnN0cmVhbSBNUCByZWNlaXZlczwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFz cz0icmlnaHQiPiAgIGJpZGlyZWN0aW9uYWwgYnlwYXNzIHR1bm5lbCwgYXMgc29vbiBhcyB0aGUg ZG93bnN0cmVhbSBNUCByZWNlaXZlczwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4K ICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+PC90ZD48 dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48 L3RyPgogICAgICA8dHIgaWQ9InBhcnQtOSIgY2xhc3M9ImNoYW5nZSI+PHRkPjwvdGQ+PHRoPjxz bWFsbD5za2lwcGluZyB0byBjaGFuZ2UgYXQ8L3NtYWxsPjxhIGhyZWY9IiNwYXJ0LTkiPjxlbT4g cGFnZSAxNSwgbGluZSAzNTxzcGFuIGNsYXNzPSJoaWRlIj4gwrY8L3NwYW4+PC9lbT48L2E+PC90 aD48dGg+IDwvdGg+PHRoPjxzbWFsbD5za2lwcGluZyB0byBjaGFuZ2UgYXQ8L3NtYWxsPjxhIGhy ZWY9IiNwYXJ0LTkiPjxlbT4gcGFnZSAxNSwgbGluZSAzNTxzcGFuIGNsYXNzPSJoaWRlIj4gwrY8 L3NwYW4+PC9lbT48L2E+PC90aD48dGQ+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJs aW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICAgICBkb3duc3RyZWFtIFBMUiBSMyBhbmQg Zm9yd2FyZGluZyB0aGUgUGF0aCBtZXNzYWdlcyB0b3dhcmRzIFBSUiBSNTwvdGQ+PHRkPiA8L3Rk Pjx0ZCBjbGFzcz0icmlnaHQiPiAgICAgIGRvd25zdHJlYW0gUExSIFIzIGFuZCBmb3J3YXJkaW5n IHRoZSBQYXRoIG1lc3NhZ2VzIHRvd2FyZHMgUFJSIFI1PC90ZD48dGQgY2xhc3M9ImxpbmVubyI+ PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJs ZWZ0Ij4gICAgICBhbmQgc3RvcHMgc2VuZGluZyB0aGVtIG92ZXIgdGhlIGJ5cGFzcyB0dW5uZWwu PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgICAgYW5kIHN0b3BzIHNlbmRpbmcg dGhlbSBvdmVyIHRoZSBieXBhc3MgdHVubmVsLjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+ PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyI+ PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJs ZWZ0Ij4gICBvICBXaGVuIFBSUiBSNSByZWNlaXZlcyB0aGUgcHJvdGVjdGVkIExTUCBQYXRoIG1l c3NhZ2VzIG92ZXIgdGhlPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgbyAgV2hl biBQUlIgUjUgcmVjZWl2ZXMgdGhlIHByb3RlY3RlZCBMU1AgUGF0aCBtZXNzYWdlcyBvdmVyIHRo ZTwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0i bGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgICAgcmVzdG9yZWQgcGF0aCwgaXQgc3Rh cnRzIHNlbmRpbmcgUmVzdiBtZXNzYWdlcyBhbmQgdHJhZmZpYyBmbG93PC90ZD48dGQ+IDwvdGQ+ PHRkIGNsYXNzPSJyaWdodCI+ICAgICAgcmVzdG9yZWQgcGF0aCwgaXQgc3RhcnRzIHNlbmRpbmcg UmVzdiBtZXNzYWdlcyBhbmQgdHJhZmZpYyBmbG93PC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90 ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0 Ij4gICAgICBvdmVyIHRoZSByZXN0b3JlZCBwYXRoIGFuZCBzdG9wcyBzZW5kaW5nIHRoZW0gb3Zl ciB0aGUgYnlwYXNzPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgICAgb3ZlciB0 aGUgcmVzdG9yZWQgcGF0aCBhbmQgc3RvcHMgc2VuZGluZyB0aGVtIG92ZXIgdGhlIGJ5cGFzczwv dGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGlu ZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgICAgdHVubmVsLjwvdGQ+PHRkPiA8L3RkPjx0 ZCBjbGFzcz0icmlnaHQiPiAgICAgIHR1bm5lbC48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3Rk PjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9ImxlZnQi PjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8i PjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0i bGVmdCI+NS4zLiAgVW5pZGlyZWN0aW9uYWwgTGluayBGYWlsdXJlczwvdGQ+PHRkPiA8L3RkPjx0 ZCBjbGFzcz0icmlnaHQiPjUuMy4gIFVuaWRpcmVjdGlvbmFsIExpbmsgRmFpbHVyZXM8L3RkPjx0 ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+ PC90ZD48dGQgY2xhc3M9ImxlZnQiPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPjwv dGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyIGlkPSJkaWZmMDAxOCI+ PHRkPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFz cz0ibGJsb2NrIj4gICBVbmlkaXJlY3Rpb25hbCBsaW5rIGZhaWx1cmVzIDxzcGFuIGNsYXNzPSJk ZWxldGUiPm1heTwvc3Bhbj4gcmVzdWx0IGluIHRoZSB0cmFmZmljIGZsb3dpbmcgb248L3RkPjx0 ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+ICAgVW5pZGlyZWN0aW9uYWwgbGluayBmYWlsdXJl cyA8c3BhbiBjbGFzcz0iaW5zZXJ0Ij5jYW48L3NwYW4+IHJlc3VsdCBpbiB0aGUgdHJhZmZpYyBm bG93aW5nIG9uPC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8dHI+PHRk IGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBhc3ltbWV0cmljIHBhdGhz IGluIHRoZSBmb3J3YXJkIGFuZCByZXZlcnNlIGRpcmVjdGlvbnMuICBJbiBhZGRpdGlvbiw8L3Rk Pjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBhc3ltbWV0cmljIHBhdGhzIGluIHRoZSBm b3J3YXJkIGFuZCByZXZlcnNlIGRpcmVjdGlvbnMuICBJbiBhZGRpdGlvbiw8L3RkPjx0ZCBjbGFz cz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0ciBpZD0iZGlmZjAwMTkiPjx0ZD48L3RkPjwv dHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+ ICAgdW5pZGlyZWN0aW9uYWwgbGluayBmYWlsdXJlcyA8c3BhbiBjbGFzcz0iZGVsZXRlIj5tYXk8 L3NwYW4+IGNhdXNlIFJTVlAgc29mdC1zdGF0ZSB0aW1lb3V0IGluIHRoZTwvdGQ+PHRkPiA8L3Rk Pjx0ZCBjbGFzcz0icmJsb2NrIj4gICB1bmlkaXJlY3Rpb25hbCBsaW5rIGZhaWx1cmVzIDxzcGFu IGNsYXNzPSJpbnNlcnQiPmNhbjwvc3Bhbj4gY2F1c2UgUlNWUCBzb2Z0LXN0YXRlIHRpbWVvdXQg aW4gdGhlPC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNs YXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBjb250cm9sLXBsYW5lIGluIHNv bWUgY2FzZXMuICBBcyBhbiBleGFtcGxlLCBpZiB0aGUgdW5pZGlyZWN0aW9uYWw8L3RkPjx0ZD4g PC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBjb250cm9sLXBsYW5lIGluIHNvbWUgY2FzZXMuICBB cyBhbiBleGFtcGxlLCBpZiB0aGUgdW5pZGlyZWN0aW9uYWw8L3RkPjx0ZCBjbGFzcz0ibGluZW5v Ij48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9 ImxlZnQiPiAgIGxpbmsgZmFpbHVyZSBpcyBpbiB0aGUgdXBzdHJlYW0gZGlyZWN0aW9uIChmcm9t IFI0IHRvIFIzIGluIEZpZ3VyZXMgMTwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAg IGxpbmsgZmFpbHVyZSBpcyBpbiB0aGUgdXBzdHJlYW0gZGlyZWN0aW9uIChmcm9tIFI0IHRvIFIz IGluIEZpZ3VyZXMgMTwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRy Pjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgYW5kIDIpLCB0aGUg ZG93bnN0cmVhbSBQTFIgKG5vZGUgUjMpIGNhbiBzdG9wIHJlY2VpdmluZyB0aGUgUmVzdjwvdGQ+ PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIGFuZCAyKSwgdGhlIGRvd25zdHJlYW0gUExS IChub2RlIFIzKSBjYW4gc3RvcCByZWNlaXZpbmcgdGhlIFJlc3Y8L3RkPjx0ZCBjbGFzcz0ibGlu ZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xh c3M9ImxlZnQiPiAgIG1lc3NhZ2VzIG9mIHRoZSBwcm90ZWN0ZWQgTFNQIGZyb20gdGhlIHVwc3Ry ZWFtIFBMUiAobm9kZSBSNCBpbjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIG1l c3NhZ2VzIG9mIHRoZSBwcm90ZWN0ZWQgTFNQIGZyb20gdGhlIHVwc3RyZWFtIFBMUiAobm9kZSBS NCBpbjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFz cz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgRmlndXJlcyAxIGFuZCAyKSBhbmQg dGhpcyBjYW4gY2F1c2UgUlNWUCBzb2Z0LXN0YXRlIHRpbWVvdXQgdG8gb2NjdXI8L3RkPjx0ZD4g PC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBGaWd1cmVzIDEgYW5kIDIpIGFuZCB0aGlzIGNhbiBj YXVzZSBSU1ZQIHNvZnQtc3RhdGUgdGltZW91dCB0byBvY2N1cjwvdGQ+PHRkIGNsYXNzPSJsaW5l bm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFz cz0ibGVmdCI+ICAgb24gdGhlIGRvd25zdHJlYW0gUExSIChub2RlIFIzKS48L3RkPjx0ZD4gPC90 ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBvbiB0aGUgZG93bnN0cmVhbSBQTFIgKG5vZGUgUjMpLjwv dGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGlu ZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdo dCI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNz PSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBBIHVuaWRpcmVjdGlvbmFsIGxpbmsg ZmFpbHVyZSBpbiB0aGUgZG93bnN0cmVhbSBkaXJlY3Rpb24gKGZyb20gUjMgdG88L3RkPjx0ZD4g PC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBBIHVuaWRpcmVjdGlvbmFsIGxpbmsgZmFpbHVyZSBp biB0aGUgZG93bnN0cmVhbSBkaXJlY3Rpb24gKGZyb20gUjMgdG88L3RkPjx0ZCBjbGFzcz0ibGlu ZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xh c3M9ImxlZnQiPiAgIFI0IGluIEZpZ3VyZXMgMSBhbmQgMiksIGRvZXMgbm90IGNhdXNlIFJTVlAg c29mdC1zdGF0ZSB0aW1lb3V0IHdoZW48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4g ICBSNCBpbiBGaWd1cmVzIDEgYW5kIDIpLCBkb2VzIG5vdCBjYXVzZSBSU1ZQIHNvZnQtc3RhdGUg dGltZW91dCB3aGVuPC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8dHI+ PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICB1c2luZyB0aGUgRlJS IHByb2NlZHVyZXMgZGVmaW5lZCBpbiB0aGlzIGRvY3VtZW50LCBzaW5jZSB0aGUgdXBzdHJlYW08 L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICB1c2luZyB0aGUgRlJSIHByb2NlZHVy ZXMgZGVmaW5lZCBpbiB0aGlzIGRvY3VtZW50LCBzaW5jZSB0aGUgdXBzdHJlYW08L3RkPjx0ZCBj bGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90 ZD48dGQgY2xhc3M9ImxlZnQiPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPjwvdGQ+ PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyIGlkPSJwYXJ0LTEwIiBjbGFz cz0iY2hhbmdlIj48dGQ+PC90ZD48dGg+PHNtYWxsPnNraXBwaW5nIHRvIGNoYW5nZSBhdDwvc21h bGw+PGEgaHJlZj0iI3BhcnQtMTAiPjxlbT4gcGFnZSAxNiwgbGluZSAxNTxzcGFuIGNsYXNzPSJo aWRlIj4gwrY8L3NwYW4+PC9lbT48L2E+PC90aD48dGg+IDwvdGg+PHRoPjxzbWFsbD5za2lwcGlu ZyB0byBjaGFuZ2UgYXQ8L3NtYWxsPjxhIGhyZWY9IiNwYXJ0LTEwIj48ZW0+IHBhZ2UgMTYsIGxp bmUgMTU8c3BhbiBjbGFzcz0iaGlkZSI+IMK2PC9zcGFuPjwvZW0+PC9hPjwvdGg+PHRkPjwvdGQ+ PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ Ni4gIEZhc3QgUmVyb3V0ZSBGb3IgQmlkaXJlY3Rpb25hbCBHTVBMUyBMU1BzIHdpdGggT3V0LW9m LWJhbmQgU2lnbmFsaW5nPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+Ni4gIEZhc3Qg UmVyb3V0ZSBGb3IgQmlkaXJlY3Rpb25hbCBHTVBMUyBMU1BzIHdpdGggT3V0LW9mLWJhbmQgU2ln bmFsaW5nPC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNs YXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij48L3RkPjx0ZD4gPC90ZD48dGQgY2xh c3M9InJpZ2h0Ij48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48 dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIFdoZW4gdXNpbmcgdGhl IEdNUExTIG91dC1vZi1iYW5kIHNpZ25hbGluZyBbUkZDMzQ3M10sIGFmdGVyIGEgbGluazwvdGQ+ PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIFdoZW4gdXNpbmcgdGhlIEdNUExTIG91dC1v Zi1iYW5kIHNpZ25hbGluZyBbUkZDMzQ3M10sIGFmdGVyIGEgbGluazwvdGQ+PHRkIGNsYXNzPSJs aW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBj bGFzcz0ibGVmdCI+ICAgZmFpbHVyZSBldmVudCwgdGhlIFJTVlAgbWVzc2FnZXMgYXJlIG5vdCBy ZXJvdXRlZCBvdmVyIHRoZTwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIGZhaWx1 cmUgZXZlbnQsIHRoZSBSU1ZQIG1lc3NhZ2VzIGFyZSBub3QgcmVyb3V0ZWQgb3ZlciB0aGU8L3Rk Pjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVu byI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIGJpZGlyZWN0aW9uYWwgYnlwYXNzIHR1bm5lbCBi eSB0aGUgZG93bnN0cmVhbSBhbmQgdXBzdHJlYW0gUExScyBidXQ8L3RkPjx0ZD4gPC90ZD48dGQg Y2xhc3M9InJpZ2h0Ij4gICBiaWRpcmVjdGlvbmFsIGJ5cGFzcyB0dW5uZWwgYnkgdGhlIGRvd25z dHJlYW0gYW5kIHVwc3RyZWFtIFBMUnMgYnV0PC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48 L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4g ICBpbnN0ZWFkIHJlcm91dGVkIG92ZXIgdGhlIGNvbnRyb2wtY2hhbm5lbHMgdG8gdGhlIGRvd25z dHJlYW0gYW5kPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgaW5zdGVhZCByZXJv dXRlZCBvdmVyIHRoZSBjb250cm9sLWNoYW5uZWxzIHRvIHRoZSBkb3duc3RyZWFtIGFuZDwvdGQ+ PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5v Ij48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgdXBzdHJlYW0gTVBzLCByZXNwZWN0aXZlbHkuPC90 ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgdXBzdHJlYW0gTVBzLCByZXNwZWN0aXZl bHkuPC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNz PSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9 InJpZ2h0Ij48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQg Y2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIFRoZSBSU1ZQIHNvZnQtc3Rh dGUgdGltZW91dCBhZnRlciBGUlIgYXMgZGVzY3JpYmVkIGluIFNlY3Rpb24gNS4yIG9mPC90ZD48 dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgVGhlIFJTVlAgc29mdC1zdGF0ZSB0aW1lb3V0 IGFmdGVyIEZSUiBhcyBkZXNjcmliZWQgaW4gU2VjdGlvbiA1LjIgb2Y8L3RkPjx0ZCBjbGFzcz0i bGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQg Y2xhc3M9ImxlZnQiPiAgIHRoaXMgZG9jdW1lbnQgaXMgZXF1YWxseSBhcHBsaWNhYmxlIHRvIHRo ZSBHTVBMUyBvdXQtb2YtYmFuZDwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIHRo aXMgZG9jdW1lbnQgaXMgZXF1YWxseSBhcHBsaWNhYmxlIHRvIHRoZSBHTVBMUyBvdXQtb2YtYmFu ZDwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyIGlkPSJkaWZmMDAy MCI+PHRkPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBj bGFzcz0ibGJsb2NrIj4gICBzaWduYWxpbmcgYXMgdGhlIFJTVlAgc2lnbmFsaW5nIHJlZnJlc2hl cyA8c3BhbiBjbGFzcz0iZGVsZXRlIj5tYXk8L3NwYW4+IHN0b3AgcmVhY2hpbmcgY2VydGFpbjwv dGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj4gICBzaWduYWxpbmcgYXMgdGhlIFJTVlAg c2lnbmFsaW5nIHJlZnJlc2hlcyA8c3BhbiBjbGFzcz0iaW5zZXJ0Ij5jYW48L3NwYW4+IHN0b3Ag cmVhY2hpbmcgY2VydGFpbjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAg PHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgbm9kZXMgYWxv bmcgdGhlIHByb3RlY3RlZCBMU1AgcGF0aCBhZnRlciB0aGUgZG93bnN0cmVhbSBhbmQgdXBzdHJl YW08L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBub2RlcyBhbG9uZyB0aGUgcHJv dGVjdGVkIExTUCBwYXRoIGFmdGVyIHRoZSBkb3duc3RyZWFtIGFuZCB1cHN0cmVhbTwvdGQ+PHRk IGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48 L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgUExScyBmaW5pc2ggcmVyb3V0aW5nIG9mIHRoZSBzaWdu YWxpbmcgbWVzc2FnZXMuICBIb3dldmVyLCB1bmxpa2U8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9 InJpZ2h0Ij4gICBQTFJzIGZpbmlzaCByZXJvdXRpbmcgb2YgdGhlIHNpZ25hbGluZyBtZXNzYWdl cy4gIEhvd2V2ZXIsIHVubGlrZTwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAg ICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgd2l0aCB0 aGUgaW4tYmFuZCBzaWduYWxpbmcsIHVuaWRpcmVjdGlvbmFsIGxpbmsgZmFpbHVyZXMgYXMgZGVz Y3JpYmVkPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgd2l0aCB0aGUgaW4tYmFu ZCBzaWduYWxpbmcsIHVuaWRpcmVjdGlvbmFsIGxpbmsgZmFpbHVyZXMgYXMgZGVzY3JpYmVkPC90 ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5l bm8iPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBpbiBTZWN0aW9uIDUuMyBvZiB0aGlzIGRvY3Vt ZW50IGRvIG5vdCByZXN1bHQgaW4gc29mdC1zdGF0ZSB0aW1lb3V0PC90ZD48dGQ+IDwvdGQ+PHRk IGNsYXNzPSJyaWdodCI+ICAgaW4gU2VjdGlvbiA1LjMgb2YgdGhpcyBkb2N1bWVudCBkbyBub3Qg cmVzdWx0IGluIHNvZnQtc3RhdGUgdGltZW91dDwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+ PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ ICAgd2l0aCBHTVBMUyBvdXQtb2YtYmFuZCBzaWduYWxpbmcuICBBcGFydCBmcm9tIHRoaXMsIHRo ZSBGUlIgcHJvY2VkdXJlPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgd2l0aCBH TVBMUyBvdXQtb2YtYmFuZCBzaWduYWxpbmcuICBBcGFydCBmcm9tIHRoaXMsIHRoZSBGUlIgcHJv Y2VkdXJlPC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNs YXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBkZXNjcmliZWQgaW4gU2VjdGlv biA1IG9mIHRoaXMgZG9jdW1lbnQgaXMgZXF1YWxseSBhcHBsaWNhYmxlIHRvIHRoZTwvdGQ+PHRk PiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIGRlc2NyaWJlZCBpbiBTZWN0aW9uIDUgb2YgdGhp cyBkb2N1bWVudCBpcyBlcXVhbGx5IGFwcGxpY2FibGUgdG8gdGhlPC90ZD48dGQgY2xhc3M9Imxp bmVubyI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNs YXNzPSJsZWZ0Ij4gICBHTVBMUyBvdXQtb2YtYmFuZCBzaWduYWxpbmcuPC90ZD48dGQ+IDwvdGQ+ PHRkIGNsYXNzPSJyaWdodCI+ICAgR01QTFMgb3V0LW9mLWJhbmQgc2lnbmFsaW5nLjwvdGQ+PHRk IGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48 L3RkPjx0ZCBjbGFzcz0ibGVmdCI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+PC90 ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5l bm8iPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij43LiAgTWVzc2FnZSBhbmQgT2JqZWN0IERlZmluaXRp b25zPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+Ny4gIE1lc3NhZ2UgYW5kIE9iamVj dCBEZWZpbml0aW9uczwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRy Pjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+PC90ZD48dGQ+IDwvdGQ+ PHRkIGNsYXNzPSJyaWdodCI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAg ICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij48L3RkPjx0ZD4g PC90ZD48dGQgY2xhc3M9InJpZ2h0Ij48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+ CiAgICAgIDx0ciBpZD0icGFydC0xMSIgY2xhc3M9ImNoYW5nZSI+PHRkPjwvdGQ+PHRoPjxzbWFs bD5za2lwcGluZyB0byBjaGFuZ2UgYXQ8L3NtYWxsPjxhIGhyZWY9IiNwYXJ0LTExIj48ZW0+IHBh Z2UgMjEsIGxpbmUgMTg8c3BhbiBjbGFzcz0iaGlkZSI+IMK2PC9zcGFuPjwvZW0+PC9hPjwvdGg+ PHRoPiA8L3RoPjx0aD48c21hbGw+c2tpcHBpbmcgdG8gY2hhbmdlIGF0PC9zbWFsbD48YSBocmVm PSIjcGFydC0xMSI+PGVtPiBwYWdlIDIxLCBsaW5lIDE4PHNwYW4gY2xhc3M9ImhpZGUiPiDCtjwv c3Bhbj48L2VtPjwvYT48L3RoPjx0ZD48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9Imxp bmVubyI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIGFuZCBzdWdnZXN0aW9ucy4gIEF1dGhvcnMg d291bGQgbGlrZSB0byB0aGFuayBMb3UgQmVyZ2VyIGZvciB0aGU8L3RkPjx0ZD4gPC90ZD48dGQg Y2xhc3M9InJpZ2h0Ij4gICBhbmQgc3VnZ2VzdGlvbnMuICBBdXRob3JzIHdvdWxkIGxpa2UgdG8g dGhhbmsgTG91IEJlcmdlciBmb3IgdGhlPC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3Ry PgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBn dWlkYW5jZSBvbiB0aGlzIHdvcmsgYW5kIGZvciBwcm92aWRpbmcgcmV2aWV3IGNvbW1lbnRzLiAg QXV0aG9yczwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIGd1aWRhbmNlIG9uIHRo aXMgd29yayBhbmQgZm9yIHByb3ZpZGluZyByZXZpZXcgY29tbWVudHMuICBBdXRob3JzPC90ZD48 dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8i PjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICB3b3VsZCBhbHNvIGxpa2UgdG8gdGhhbmsgTm9ibyBB a2l5YSwgTG9hIEFuZGVyc3NvbiwgTWF0dCBIYXJ0bGV5LDwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFz cz0icmlnaHQiPiAgIHdvdWxkIGFsc28gbGlrZSB0byB0aGFuayBOb2JvIEFraXlhLCBMb2EgQW5k ZXJzc29uLCBNYXR0IEhhcnRsZXksPC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgog ICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBIaW1h bnNodSBTaGFoLCBHcmVnb3J5IE1pcnNreSBhbmQgTWFjaCBDaGVuIGZvciByZXZpZXdpbmcgdGhp czwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIEhpbWFuc2h1IFNoYWgsIEdyZWdv cnkgTWlyc2t5IGFuZCBNYWNoIENoZW4gZm9yIHJldmlld2luZyB0aGlzPC90ZD48dGQgY2xhc3M9 ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRk IGNsYXNzPSJsZWZ0Ij4gICBkb2N1bWVudCBhbmQgcHJvdmlkaW5nIHZhbHVhYmxlIGNvbW1lbnRz LiAgQSBzcGVjaWFsIHRoYW5rcyB0byBBZHJpYW48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJp Z2h0Ij4gICBkb2N1bWVudCBhbmQgcHJvdmlkaW5nIHZhbHVhYmxlIGNvbW1lbnRzLiAgQSBzcGVj aWFsIHRoYW5rcyB0byBBZHJpYW48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAg ICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIEZhcnJl bCBmb3IgaGlzIHRob3JvdWdoIHJldmlldyBvZiB0aGlzIGRvY3VtZW50LjwvdGQ+PHRkPiA8L3Rk Pjx0ZCBjbGFzcz0icmlnaHQiPiAgIEZhcnJlbCBmb3IgaGlzIHRob3JvdWdoIHJldmlldyBvZiB0 aGlzIGRvY3VtZW50LjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRy Pjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+PC90ZD48dGQ+IDwvdGQ+ PHRkIGNsYXNzPSJyaWdodCI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAg ICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij5Db250cmlidXRv cnM8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij5Db250cmlidXRvcnM8L3RkPjx0ZCBj bGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90 ZD48dGQgY2xhc3M9ImxlZnQiPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPjwvdGQ+ PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5v Ij48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgRnJlZGVyaWMgSm91bmF5PC90ZD48dGQ+IDwvdGQ+ PHRkIGNsYXNzPSJyaWdodCI+ICAgRnJlZGVyaWMgSm91bmF5PC90ZD48dGQgY2xhc3M9ImxpbmVu byI+PC90ZD48L3RyPgogICAgICA8dHIgaWQ9ImRpZmYwMDIxIj48dGQ+PC90ZD48L3RyPgogICAg ICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPiAgIE9yYW5n ZSBDSDwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj4gICBPcmFuZ2U8L3RkPjx0ZCBj bGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90 ZD48dGQgY2xhc3M9ImxibG9jayI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPiAg IENIPC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNz PSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9 InJpZ2h0Ij48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQg Y2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIEVNYWlsOiBmcmVkZXJpYy5q b3VuYXlAc2FsdC5jaDwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIEVNYWlsOiBm cmVkZXJpYy5qb3VuYXlAc2FsdC5jaDwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4K ICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+PC90ZD48 dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48 L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4g ICBMaXpob25nIEppbjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIExpemhvbmcg SmluPC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8dHIgaWQ9ImRpZmYw MDIyIj48dGQ+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRk IGNsYXNzPSJsYmxvY2siPiAgIDxzcGFuIGNsYXNzPSJkZWxldGUiPlNoYW5naGFpLCBDaGluYTwv c3Bhbj48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+ICAgPHNwYW4gY2xhc3M9Imlu c2VydCI+U2hhbmdoYWk8L3NwYW4+PC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgog ICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPjwvdGQ+ PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48c3BhbiBjbGFzcz0iaW5zZXJ0Ij4gICBDTjwv c3Bhbj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xh c3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFz cz0icmlnaHQiPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0 ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgRU1haWw6IGxpemhvLmpp bkBnbWFpbC5jb208L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBFTWFpbDogbGl6 aG8uamluQGdtYWlsLmNvbTwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAg PHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+PC90ZD48dGQ+IDwv dGQ+PHRkIGNsYXNzPSJyaWdodCI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgog ICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij5BdXRob3Jz JyBBZGRyZXNzZXM8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij5BdXRob3JzJyBBZGRy ZXNzZXM8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xh c3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFz cz0icmlnaHQiPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0 ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgTWlrZSBUYWlsbG9uPC90 ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgTWlrZSBUYWlsbG9uPC90ZD48dGQgY2xh c3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+ PHRkIGNsYXNzPSJsZWZ0Ij4gICBDaXNjbyBTeXN0ZW1zLCBJbmMuPC90ZD48dGQ+IDwvdGQ+PHRk IGNsYXNzPSJyaWdodCI+ICAgQ2lzY28gU3lzdGVtcywgSW5jLjwvdGQ+PHRkIGNsYXNzPSJsaW5l bm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFz cz0ibGVmdCI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+PC90ZD48dGQgY2xhc3M9 ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRk IGNsYXNzPSJsZWZ0Ij4gICBFTWFpbDogbXRhaWxsb25AY2lzY28uY29tPC90ZD48dGQ+IDwvdGQ+ PHRkIGNsYXNzPSJyaWdodCI+ICAgRU1haWw6IG10YWlsbG9uQGNpc2NvLmNvbTwvdGQ+PHRkIGNs YXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3Rk Pjx0ZCBjbGFzcz0ibGVmdCI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+PC90ZD48 dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgoKICAgICA8dHI+PHRkPjwvdGQ+PHRkIGNsYXNz PSJsZWZ0Ij48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij48L3RkPjx0ZD48L3RkPjwv dHI+CiAgICAgPHRyIGlkPSJlbmQiIGJnY29sb3I9ImdyYXkiPjx0aCBjb2xzcGFuPSI1IiBhbGln bj0iY2VudGVyIj4mbmJzcDtFbmQgb2YgY2hhbmdlcy4gMjIgY2hhbmdlIGJsb2Nrcy4mbmJzcDs8 L3RoPjwvdHI+CiAgICAgPHRyIGNsYXNzPSJzdGF0cyI+PHRkPjwvdGQ+PHRoPjxpPjQwIGxpbmVz IGNoYW5nZWQgb3IgZGVsZXRlZDwvaT48L3RoPjx0aD48aT4gPC9pPjwvdGg+PHRoPjxpPjQxIGxp bmVzIGNoYW5nZWQgb3IgYWRkZWQ8L2k+PC90aD48dGQ+PC90ZD48L3RyPgogICAgIDx0cj48dGQg Y29sc3Bhbj0iNSIgY2xhc3M9InNtYWxsIiBhbGlnbj0iY2VudGVyIj48YnI+VGhpcyBodG1sIGRp ZmYgd2FzIHByb2R1Y2VkIGJ5IHJmY2RpZmYgMS40NS4gVGhlIGxhdGVzdCB2ZXJzaW9uIGlzIGF2 YWlsYWJsZSBmcm9tIDxhIGhyZWY9Imh0dHA6Ly93d3cudG9vbHMuaWV0Zi5vcmcvdG9vbHMvcmZj ZGlmZi8iPmh0dHA6Ly90b29scy5pZXRmLm9yZy90b29scy9yZmNkaWZmLzwvYT4gPC90ZD48L3Ry PgogICA8L3Rib2R5PjwvdGFibGU+CiAgIAogICAKPC9ib2R5PjwvaHRtbD4= --_005_8FCEBCD66CFE4961A7E8A39801486434ciscocom_ Content-Type: text/plain; name="draft-ietf-teas-gmpls-lsp-fastreroute-10.txt" Content-Description: draft-ietf-teas-gmpls-lsp-fastreroute-10.txt Content-Disposition: attachment; filename="draft-ietf-teas-gmpls-lsp-fastreroute-10.txt"; size=49558; creation-date="Tue, 11 Jul 2017 15:37:27 GMT"; modification-date="Tue, 11 Jul 2017 15:37:27 GMT" Content-ID: <79A4221B5E0CE247A1A23CA4C4F23A41@emea.cisco.com> Content-Transfer-Encoding: base64 IA0KDQoNCg0KVEVBUyBXb3JraW5nIEdyb3VwICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICBNLiBUYWlsbG9uDQpJbnRlcm5ldC1EcmFmdCAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICBULiBTYWFkLCBFZC4NClVwZGF0ZXM6IDQwOTAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICBSLiBHYW5kaGksIEVk Lg0KSW50ZW5kZWQgU3RhdHVzOiBTdGFuZGFyZHMgVHJhY2sgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgWi4gQWxpDQpFeHBpcmVzOiBKYW51YXJ5IDEyLCAyMDE4ICAgICAgICAgICAg ICAgICAgICAgICAgICAgIENpc2NvIFN5c3RlbXMsIEluYy4NCiAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIE0uIEJoYXRpYQ0KICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgIE5va2lhDQogICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgIEp1bHkgMTEsIDIwMTcNCg0KDQogICAgVXBkYXRlcyB0byBSZXNvdXJj ZSBSZXNlcnZhdGlvbiBQcm90b2NvbCBGb3IgRmFzdCBSZXJvdXRlIG9mDQogICAgICAgICAgICAg ICAgICBUcmFmZmljIEVuZ2luZWVyaW5nIEdNUExTIExTUHMNCiAgICAgICAgICAgICBkcmFmdC1p ZXRmLXRlYXMtZ21wbHMtbHNwLWZhc3RyZXJvdXRlLTEwDQoNCg0KQWJzdHJhY3QNCg0KICAgVGhp cyBkb2N1bWVudCB1cGRhdGVzIFJlc291cmNlIFJlc2VydmF0aW9uIFByb3RvY29sIC0gVHJhZmZp Yw0KICAgRW5naW5lZXJpbmcgKFJTVlAtVEUpIHNpZ25hbGluZyB0byBzdXBwb3J0IEZhc3QgUmVy b3V0ZSAoRlJSKSBvZg0KICAgUGFja2V0IFN3aXRjaGVkIENhcGFibGUgKFBTQykgR2VuZXJhbGl6 ZWQgTXVsdGktUHJvdG9jb2wgTGFiZWwNCiAgIFN3aXRjaGluZyAoR01QTFMpIExhYmVsIFN3aXRj aGVkIFBhdGhzIChMU1BzKS4gIFRoZXNlIHNpZ25hbGluZw0KICAgdXBkYXRlcyBhbGxvdyB0aGUg Y29vcmRpbmF0aW9uIG9mIGEgYmlkaXJlY3Rpb25hbCBieXBhc3MgdHVubmVsDQogICBhc3NpZ25t ZW50IHByb3RlY3RpbmcgYSBjb21tb24gZmFjaWxpdHkgaW4gYm90aCBmb3J3YXJkIGFuZCByZXZl cnNlDQogICBkaXJlY3Rpb25zIG9mIGEgY28tcm91dGVkIGJpZGlyZWN0aW9uYWwgTFNQLiAgSW4g YWRkaXRpb24sIHRoZXNlDQogICB1cGRhdGVzIGVuYWJsZSB0aGUgcmUtZGlyZWN0aW9uIG9mIGJp ZGlyZWN0aW9uYWwgdHJhZmZpYyBvbnRvIGJ5cGFzcw0KICAgdHVubmVscyB0aGF0IGVuc3VyZSBj by1yb3V0ZWRuZXNzIG9mIGRhdGEgcGF0aHMgaW4gdGhlIGZvcndhcmQgYW5kDQogICByZXZlcnNl IGRpcmVjdGlvbnMgYWZ0ZXIgRlJSIGFuZCBhdm9pZCBSU1ZQIHNvZnQtc3RhdGUgdGltZW91dCBp bg0KICAgY29udHJvbC1wbGFuZS4NCg0KDQpTdGF0dXMgb2YgdGhpcyBNZW1vDQoNCiAgIFRoaXMg SW50ZXJuZXQtRHJhZnQgaXMgc3VibWl0dGVkIGluIGZ1bGwgY29uZm9ybWFuY2Ugd2l0aCB0aGUN CiAgIHByb3Zpc2lvbnMgb2YgQkNQIDc4IGFuZCBCQ1AgNzkuDQoNCiAgIEludGVybmV0LURyYWZ0 cyBhcmUgd29ya2luZyBkb2N1bWVudHMgb2YgdGhlIEludGVybmV0IEVuZ2luZWVyaW5nDQogICBU YXNrIEZvcmNlIChJRVRGKS4gIE5vdGUgdGhhdCBvdGhlciBncm91cHMgbWF5IGFsc28gZGlzdHJp YnV0ZQ0KICAgd29ya2luZyBkb2N1bWVudHMgYXMgSW50ZXJuZXQtRHJhZnRzLiAgVGhlIGxpc3Qg b2YgY3VycmVudCBJbnRlcm5ldC0NCiAgIERyYWZ0cyBpcyBhdCBodHRwOi8vZGF0YXRyYWNrZXIu aWV0Zi5vcmcvZHJhZnRzL2N1cnJlbnQvLg0KDQogICBJbnRlcm5ldC1EcmFmdHMgYXJlIGRyYWZ0 IGRvY3VtZW50cyB2YWxpZCBmb3IgYSBtYXhpbXVtIG9mIHNpeCBtb250aHMNCiAgIGFuZCBtYXkg YmUgdXBkYXRlZCwgcmVwbGFjZWQsIG9yIG9ic29sZXRlZCBieSBvdGhlciBkb2N1bWVudHMgYXQg YW55DQogICB0aW1lLiAgSXQgaXMgaW5hcHByb3ByaWF0ZSB0byB1c2UgSW50ZXJuZXQtRHJhZnRz IGFzIHJlZmVyZW5jZQ0KICAgbWF0ZXJpYWwgb3IgdG8gY2l0ZSB0aGVtIG90aGVyIHRoYW4gYXMg IndvcmsgaW4gcHJvZ3Jlc3MuIg0KDQoNCkNvcHlyaWdodCBOb3RpY2UNCg0KIA0KDQoNClRhaWxs b24gZXQgYWwuICAgICAgICAgIEV4cGlyZXMgSmFudWFyeSAxMiwgMjAxOCAgICAgICAgICAgICAg ICBbUGFnZSAxXQ0KDA0KSW50ZXJuZXQtRHJhZnQgICAgICAgICAgIEZSUiBmb3IgVEUgR01QTFMg TFNQcyAgICAgICAgICAgICBKdWx5IDExLCAyMDE3DQoNCg0KICAgQ29weXJpZ2h0IChjKSAyMDE3 IElFVEYgVHJ1c3QgYW5kIHRoZSBwZXJzb25zIGlkZW50aWZpZWQgYXMgdGhlDQogICBkb2N1bWVu dCBhdXRob3JzLiAgQWxsIHJpZ2h0cyByZXNlcnZlZC4NCg0KICAgVGhpcyBkb2N1bWVudCBpcyBz dWJqZWN0IHRvIEJDUCA3OCBhbmQgdGhlIElFVEYgVHJ1c3QncyBMZWdhbA0KICAgUHJvdmlzaW9u cyBSZWxhdGluZyB0byBJRVRGIERvY3VtZW50cw0KICAgKGh0dHA6Ly90cnVzdGVlLmlldGYub3Jn L2xpY2Vuc2UtaW5mbykgaW4gZWZmZWN0IG9uIHRoZSBkYXRlIG9mDQogICBwdWJsaWNhdGlvbiBv ZiB0aGlzIGRvY3VtZW50LiAgUGxlYXNlIHJldmlldyB0aGVzZSBkb2N1bWVudHMNCiAgIGNhcmVm dWxseSwgYXMgdGhleSBkZXNjcmliZSB5b3VyIHJpZ2h0cyBhbmQgcmVzdHJpY3Rpb25zIHdpdGgg cmVzcGVjdA0KICAgdG8gdGhpcyBkb2N1bWVudC4gIENvZGUgQ29tcG9uZW50cyBleHRyYWN0ZWQg ZnJvbSB0aGlzIGRvY3VtZW50IG11c3QNCiAgIGluY2x1ZGUgU2ltcGxpZmllZCBCU0QgTGljZW5z ZSB0ZXh0IGFzIGRlc2NyaWJlZCBpbiBTZWN0aW9uIDQuZSBvZg0KICAgdGhlIFRydXN0IExlZ2Fs IFByb3Zpc2lvbnMgYW5kIGFyZSBwcm92aWRlZCB3aXRob3V0IHdhcnJhbnR5IGFzDQogICBkZXNj cmliZWQgaW4gdGhlIFNpbXBsaWZpZWQgQlNEIExpY2Vuc2UuDQoNCg0KDQoNClRhYmxlIG9mIENv bnRlbnRzDQoNCiAgIDEuICBJbnRyb2R1Y3Rpb24gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAu IC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAgNA0KICAgMi4gIENvbnZlbnRpb25zIFVzZWQgaW4gVGhp cyBEb2N1bWVudCAgLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuICA1DQogICAgIDIuMS4gIEtl eSBXb3JkIERlZmluaXRpb25zIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4g IDUNCiAgICAgMi4yLiAgVGVybWlub2xvZ3kgIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAu IC4gLiAuIC4gLiAuIC4gLiAgNQ0KICAgICAyLjMuICBBYmJyZXZpYXRpb25zICAuIC4gLiAuIC4g LiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuICA2DQogICAzLiAgRmFzdCBSZXJvdXRl IEZvciBVbmlkaXJlY3Rpb25hbCBHTVBMUyBMU1BzIC4gLiAuIC4gLiAuIC4gLiAuIC4gIDYNCiAg IDQuICBCeXBhc3MgVHVubmVsIEFzc2lnbm1lbnQgRm9yIEJpZGlyZWN0aW9uYWwgR01QTFMgTFNQ cyAgLiAuIC4gLiAgNg0KICAgICA0LjEuICBCaWRpcmVjdGlvbmFsIEdNUExTIEJ5cGFzcyBUdW5u ZWwgRGlyZWN0aW9uICAuIC4gLiAuIC4gLiAuICA3DQogICAgIDQuMi4gIE1lcmdlIFBvaW50IExh YmVscyAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gIDcNCiAgICAgNC4z LiAgTWVyZ2UgUG9pbnQgQWRkcmVzc2VzICAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAu IC4gLiAgNw0KICAgICA0LjQuICBSUk8gSVB2NC9JUHY2IFN1Ym9iamVjdCBGbGFncyAgLiAuIC4g LiAuIC4gLiAuIC4gLiAuIC4gLiAuICA4DQogICAgIDQuNS4gIEJpZGlyZWN0aW9uYWwgQnlwYXNz IFR1bm5lbCBBc3NpZ25tZW50IENvLW9yZGluYXRpb24gLiAuIC4gIDgNCiAgICAgICA0LjUuMS4g IEJpZGlyZWN0aW9uYWwgQnlwYXNzIFR1bm5lbCBBc3NpZ25tZW50IFNpZ25hbGluZw0KICAgICAg ICAgICAgICAgUHJvY2VkdXJlICAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAu IC4gLiAuICA4DQogICAgICAgNC41LjIuICBPbmUtdG8tb25lIEJpZGlyZWN0aW9uYWwgQnlwYXNz IFR1bm5lbCBBc3NpZ25tZW50ICAuIC4gIDkNCiAgICAgICA0LjUuMy4gIE11bHRpcGxlIEJpZGly ZWN0aW9uYWwgQnlwYXNzIFR1bm5lbCBBc3NpZ25tZW50cyAuIC4gLiAxMA0KICAgNS4gIEZhc3Qg UmVyb3V0ZSBGb3IgQmlkaXJlY3Rpb25hbCBHTVBMUyBMU1BzIHdpdGggSW4tYmFuZA0KICAgICAg IFNpZ25hbGluZyAgLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAu IC4gLiAuIDExDQogICAgIDUuMS4gIExpbmsgUHJvdGVjdGlvbiBmb3IgQmlkaXJlY3Rpb25hbCBH TVBMUyBMU1BzIC4gLiAuIC4gLiAuIC4gMTENCiAgICAgICA1LjEuMS4gIEJlaGF2aW9yIEFmdGVy IExpbmsgRmFpbHVyZSAgLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAxMg0KICAgICAgIDUuMS4y LiAgUmV2ZXJ0aXZlIEJlaGF2aW9yIEFmdGVyIEZhc3QgUmVyb3V0ZSAgLiAuIC4gLiAuIC4gLiAu IDEyDQogICAgIDUuMi4gIE5vZGUgUHJvdGVjdGlvbiBmb3IgQmlkaXJlY3Rpb25hbCBHTVBMUyBM U1BzIC4gLiAuIC4gLiAuIC4gMTINCiAgICAgICA1LjIuMS4gIEJlaGF2aW9yIEFmdGVyIExpbmsg RmFpbHVyZSAgLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAxMw0KICAgICAgIDUuMi4yLiAgQmVo YXZpb3IgQWZ0ZXIgTGluayBGYWlsdXJlIFRvIFJlLWNvcm91dGUgIC4gLiAuIC4gLiAuIDEzDQog ICAgICAgICA1LjIuMi4xLiAgUmUtY29yb3V0ZSBpbiBEYXRhLXBsYW5lIEFmdGVyIExpbmsgRmFp bHVyZSAgLiAuIC4gMTQNCiAgICAgICA1LjIuMy4gIFJldmVydGl2ZSBCZWhhdmlvciBBZnRlciBG YXN0IFJlcm91dGUgIC4gLiAuIC4gLiAuIC4gLiAxNQ0KICAgICA1LjMuICBVbmlkaXJlY3Rpb25h bCBMaW5rIEZhaWx1cmVzIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIDE1DQogICA2LiAg RmFzdCBSZXJvdXRlIEZvciBCaWRpcmVjdGlvbmFsIEdNUExTIExTUHMgd2l0aCBPdXQtb2YtYmFu ZA0KICAgICAgIFNpZ25hbGluZyAgLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4g LiAuIC4gLiAuIC4gLiAuIDE2DQogICA3LiAgTWVzc2FnZSBhbmQgT2JqZWN0IERlZmluaXRpb25z IC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gMTYNCiANCg0KDQpUYWlsbG9uIGV0IGFs LiAgICAgICAgICBFeHBpcmVzIEphbnVhcnkgMTIsIDIwMTggICAgICAgICAgICAgICAgW1BhZ2Ug Ml0NCgwNCkludGVybmV0LURyYWZ0ICAgICAgICAgICBGUlIgZm9yIFRFIEdNUExTIExTUHMgICAg ICAgICAgICAgSnVseSAxMSwgMjAxNw0KDQoNCiAgICAgNy4xLiAgQllQQVNTX0FTU0lHTk1FTlQg U3Vib2JqZWN0ICAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAxNg0KICAgICA3LjIuICBG UlIgQnlwYXNzIEFzc2lnbm1lbnQgRXJyb3IgTm90aWZ5IE1lc3NhZ2UgLiAuIC4gLiAuIC4gLiAu IDE4DQogICA4LiAgQ29tcGF0aWJpbGl0eSAgLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4g LiAuIC4gLiAuIC4gLiAuIC4gMTgNCiAgIDkuICBTZWN1cml0eSBDb25zaWRlcmF0aW9ucyAgLiAu IC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAxOA0KICAgMTAuICBJQU5BIENvbnNp ZGVyYXRpb25zIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIDE5DQog ICAgIDEwLjEuICBCWVBBU1NfQVNTSUdOTUVOVCBTdWJvYmplY3QgLiAuIC4gLiAuIC4gLiAuIC4g LiAuIC4gLiAuIC4gMTkNCiAgICAgMTAuMi4gIEZSUiBCeXBhc3MgQXNzaWdubWVudCBFcnJvciBO b3RpZnkgTWVzc2FnZSAgLiAuIC4gLiAuIC4gLiAxOQ0KICAgMTEuICBSZWZlcmVuY2VzICAuIC4g LiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIDIwDQogICAgIDEx LjEuICBOb3JtYXRpdmUgUmVmZXJlbmNlcyAgLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4g LiAuIC4gMjANCiAgICAgMTEuMi4gIEluZm9ybWF0aXZlIFJlZmVyZW5jZXMgIC4gLiAuIC4gLiAu IC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAyMA0KICAgQWNrbm93bGVkZ2VtZW50cyAuIC4gLiAuIC4g LiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIDIxDQogICBDb250cmlidXRv cnMgLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4g MjENCiAgIEF1dGhvcnMnIEFkZHJlc3NlcyAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAu IC4gLiAuIC4gLiAuIC4gLiAyMg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0K DQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoNCiANCg0KDQpUYWlsbG9uIGV0IGFsLiAg ICAgICAgICBFeHBpcmVzIEphbnVhcnkgMTIsIDIwMTggICAgICAgICAgICAgICAgW1BhZ2UgM10N CgwNCkludGVybmV0LURyYWZ0ICAgICAgICAgICBGUlIgZm9yIFRFIEdNUExTIExTUHMgICAgICAg ICAgICAgSnVseSAxMSwgMjAxNw0KDQoNCjEuICBJbnRyb2R1Y3Rpb24NCg0KICAgUGFja2V0IFN3 aXRjaGVkIENhcGFibGUgKFBTQykgVHJhZmZpYyBFbmdpbmVlcmluZyAoVEUpIExhYmVsIFN3aXRj aGVkDQogICBQYXRocyAoTFNQcykgY2FuIGJlIHNldHVwIHVzaW5nIEdlbmVyYWxpemVkIE11bHRp LVByb3RvY29sIExhYmVsDQogICBTd2l0Y2hpbmcgKEdNUExTKSBzaWduYWxpbmcgcHJvY2VkdXJl cyBzcGVjaWZpZWQgaW4gW1JGQzM0NzNdIGZvcg0KICAgYm90aCB1bmlkaXJlY3Rpb25hbCBhbmQg YmlkaXJlY3Rpb25hbCB0dW5uZWxzLiAgVGhlIEdNUExTIHNpZ25hbGluZw0KICAgYWxsb3dzIHNl bmRpbmcgYW5kIHJlY2VpdmluZyB0aGUgUlNWUCBtZXNzYWdlcyBpbi1iYW5kIHdpdGggdGhlIGRh dGENCiAgIHRyYWZmaWMgb3Igb3V0LW9mLWJhbmQgb3ZlciBhIHNlcGFyYXRlIGNvbnRyb2wtY2hh bm5lbC4gIEZhc3QgUmVyb3V0ZQ0KICAgKEZSUikgW1JGQzQwOTBdIGhhcyBiZWVuIHdpZGVseSBk ZXBsb3llZCBpbiB0aGUgcGFja2V0IFRFIG5ldHdvcmtzDQogICB0b2RheSBhbmQgaXMgZGVzaXJh YmxlIGZvciBURSBHTVBMUyBMU1BzLiAgVXNpbmcgRlJSIG1ldGhvZHMgYWxzbw0KICAgYWxsb3dz IHRoZSBsZXZlcmFnaW5nIG9mIHRoZSBleGlzdGluZyBtZWNoYW5pc21zIGZvciBmYWlsdXJlDQog ICBkZXRlY3Rpb24gYW5kIHJlc3RvcmF0aW9uIGluIGRlcGxveWVkIG5ldHdvcmtzLg0KDQogICBU aGUgRlJSIHByb2NlZHVyZXMgZGVmaW5lZCBpbiBbUkZDNDA5MF0gZGVzY3JpYmUgdGhlIGJlaGF2 aW9yIG9mIHRoZQ0KICAgUG9pbnQgb2YgTG9jYWwgUmVwYWlyIChQTFIpIHRvIHJlcm91dGUgdHJh ZmZpYyBhbmQgc2lnbmFsaW5nIG9udG8gdGhlDQogICBieXBhc3MgdHVubmVsIGluIHRoZSBldmVu dCBvZiBhIGZhaWx1cmUgZm9yIHByb3RlY3RlZCBMU1BzLiAgVGhvc2UNCiAgIHByb2NlZHVyZXMg YXJlIGFwcGxpY2FibGUgdG8gdGhlIHVuaWRpcmVjdGlvbmFsIHByb3RlY3RlZCBMU1BzDQogICBz aWduYWxlZCB1c2luZyBlaXRoZXIgUlNWUC1URSBbUkZDMzIwOV0gb3IgR01QTFMgcHJvY2VkdXJl cw0KICAgW1JGQzM0NzNdLiAgV2hlbiB1c2luZyB0aGUgRlJSIHByb2NlZHVyZXMgZGVmaW5lZCBp biBbUkZDNDA5MF0gd2l0aA0KICAgY28tcm91dGVkIGJpZGlyZWN0aW9uYWwgR01QTFMgTFNQcywg aXQgaXMgZGVzaXJlZCB0aGF0IHNhbWUgUExSIGFuZA0KICAgTWVyZ2UgUG9pbnQgKE1QKSBwYWly cyBhcmUgc2VsZWN0ZWQgaW4gZWFjaCBkaXJlY3Rpb24gYW5kIGJvdGggUExSDQogICBhbmQgTVAg YXNzaWduIHRoZSBzYW1lIGJpZGlyZWN0aW9uYWwgYnlwYXNzIHR1bm5lbC4gIFRoaXMgZG9jdW1l bnQNCiAgIHVwZGF0ZXMgdGhlIEZSUiBwcm9jZWR1cmVzIGRlZmluZWQgaW4gW1JGQzQwOTBdIHRv IGNvb3JkaW5hdGUgdGhlDQogICBiaWRpcmVjdGlvbmFsIGJ5cGFzcyB0dW5uZWwgYXNzaWdubWVu dCBhbmQgdG8gZXhjaGFuZ2UgTVAgbGFiZWxzDQogICBiZXR3ZWVuIHVwc3RyZWFtIGFuZCBkb3du c3RyZWFtIFBMUnMgb2YgdGhlIHByb3RlY3RlZCBjby1yb3V0ZWQNCiAgIGJpZGlyZWN0aW9uYWwg TFNQLg0KDQogICBXaGVuIHVzaW5nIEZSUiBwcm9jZWR1cmVzIHdpdGggY28tcm91dGVkIGJpZGly ZWN0aW9uYWwgR01QTFMgTFNQcywgaXQNCiAgIGlzIHBvc3NpYmxlIGluIHNvbWUgY2FzZXMgZm9y IHRoZSBSU1ZQIHNpZ25hbGluZyByZWZyZXNoZXMgdG8gc3RvcA0KICAgcmVhY2hpbmcgY2VydGFp biBub2RlcyBhbG9uZyB0aGUgcHJvdGVjdGVkIExTUCBwYXRoIGFmdGVyIHRoZSBQTFJzDQogICBm aW5pc2ggcmVyb3V0aW5nIG9mIHRoZSBzaWduYWxpbmcgbWVzc2FnZXMuICBUaGlzIGNhbiBvY2N1 ciBhZnRlciBhDQogICBmYWlsdXJlIGV2ZW50IHdoZW4gdXNpbmcgbm9kZSBwcm90ZWN0aW9uIGJ5 cGFzcyB0dW5uZWxzLiAgQXMgc2hvd24gaW4NCiAgIEZpZ3VyZSAyLCB0aGlzIGlzIHBvc3NpYmxl IGV2ZW4gd2l0aCBzZWxlY3RpbmcgdGhlIHNhbWUgYmlkaXJlY3Rpb25hbA0KICAgYnlwYXNzIHR1 bm5lbHMgaW4gYm90aCBkaXJlY3Rpb25zIGFuZCB0aGUgc2FtZSBQTFIgYW5kIE1QIHBhaXJzLiAN CiAgIFRoaXMgaXMgY2F1c2VkIGJ5IHRoZSBhc3ltbWV0cnkgb2YgcGF0aHMgdGhhdCBtYXkgYmUg dGFrZW4gYnkgdGhlDQogICBiaWRpcmVjdGlvbmFsIExTUCdzIHNpZ25hbGluZyBpbiB0aGUgZm9y d2FyZCBhbmQgcmV2ZXJzZSBkaXJlY3Rpb25zDQogICBkdWUgdG8gdXBzdHJlYW0gYW5kIGRvd25z dHJlYW0gUExScyBpbmRlcGVuZGVudGx5IHRyaWdnZXJpbmcgRlJSLiAgSW4NCiAgIHN1Y2ggY2Fz ZXMsIGFmdGVyIEZSUiwgdGhlIFJTVlAgc29mdC1zdGF0ZSB0aW1lb3V0IGNhdXNlcyB0aGUNCiAg IHByb3RlY3RlZCBiaWRpcmVjdGlvbmFsIExTUCB0byBiZSB0b3JuIGRvd24sIHdpdGggc3Vic2Vx dWVudCB0cmFmZmljDQogICBsb3NzLg0KDQogICBQcm90ZWN0aW9uIFN0YXRlIENvb3JkaW5hdGlv biBQcm90b2NvbCBbUkZDNjM3OF0gaXMgYXBwbGljYWJsZSB0byBGUlINCiAgIFtSRkM0MDkwXSBm b3IgbG9jYWwgcHJvdGVjdGlvbiBvZiBjby1yb3V0ZWQgYmlkaXJlY3Rpb25hbCBMU1BzIGluDQog ICBvcmRlciB0byBtaW5pbWl6ZSB0cmFmZmljIGRpc3J1cHRpb25zIGluIGJvdGggZGlyZWN0aW9u cy4gIEhvd2V2ZXIsDQogICB0aGlzIGRvZXMgbm90IGFkZHJlc3MgdGhlIGFib3ZlIG1lbnRpb25l ZCBwcm9ibGVtIG9mIFJTVlAgc29mdC1zdGF0ZQ0KICAgdGltZW91dCB0aGF0IGNhbiBvY2N1ciBp biB0aGUgY29udHJvbC1wbGFuZS4NCg0KICAgVGhpcyBkb2N1bWVudCBkZWZpbmVzIGEgc29sdXRp b24gdG8gdGhlIFJTVlAgc29mdC1zdGF0ZSB0aW1lb3V0IGlzc3VlDQogDQoNCg0KVGFpbGxvbiBl dCBhbC4gICAgICAgICAgRXhwaXJlcyBKYW51YXJ5IDEyLCAyMDE4ICAgICAgICAgICAgICAgIFtQ YWdlIDRdDQoMDQpJbnRlcm5ldC1EcmFmdCAgICAgICAgICAgRlJSIGZvciBURSBHTVBMUyBMU1Bz ICAgICAgICAgICAgIEp1bHkgMTEsIDIwMTcNCg0KDQogICBieSBwcm92aWRpbmcgbWVjaGFuaXNt cyBpbiB0aGUgY29udHJvbC1wbGFuZSB0byBjb21wbGVtZW50IHRoZSBGUlINCiAgIHByb2NlZHVy ZXMgb2YgW1JGQzQwOTBdLiAgVGhlIHNvbHV0aW9uIGFsbG93cyB0byBtYWludGFpbiB0aGUgUlNW UA0KICAgc29mdC1zdGF0ZSBmb3IgY28tcm91dGVkIGJpZGlyZWN0aW9uYWwgcHJvdGVjdGVkIEdN UExTIExTUHMgaW4gdGhlDQogICBjb250cm9sLXBsYW5lIGFuZCBhY2hpZXZlIGNvLXJvdXRlZG5l c3Mgb2YgdGhlIHBhdGhzIGZvbGxvd2VkIGJ5IHRoZQ0KICAgdHJhZmZpYyBpbiB0aGUgZm9yd2Fy ZCBhbmQgcmV2ZXJzZSBkaXJlY3Rpb25zIGFmdGVyIEZSUi4gDQoNCiAgIFRoZSBwcm9jZWR1cmVz IGRlZmluZWQgaW4gdGhpcyBkb2N1bWVudCBhcHBseSB0byBHTVBMUyBzaWduYWxlZCBQU0MNCiAg IFRFIGNvLXJvdXRlZCBiaWRpcmVjdGlvbmFsIHByb3RlY3RlZCBMU1BzIGFuZCBjby1yb3V0ZWQg YmlkaXJlY3Rpb25hbA0KICAgRlJSIGJ5cGFzcyB0dW5uZWxzLiAgVW5sZXNzIG90aGVyd2lzZSBz cGVjaWZpZWQgaW4gdGhpcyBkb2N1bWVudCwgdGhlDQogICBGUlIgcHJvY2VkdXJlcyBkZWZpbmVk IGluIFtSRkM0MDkwXSBhcmUgbm90IG1vZGlmaWVkIGJ5IHRoaXMNCiAgIGRvY3VtZW50LiAgVGhl IEZSUiBtZWNoYW5pc20gZm9yIGFzc29jaWF0ZWQgYmlkaXJlY3Rpb25hbCBHTVBMUyBMU1BzDQog ICB3aGVyZSB0d28gdW5pZGlyZWN0aW9uYWwgR01QTFMgTFNQcyBhcmUgYm91bmQgdG9nZXRoZXIg YnkgdXNpbmcgdGhlDQogICBhc3NvY2lhdGlvbiBzaWduYWxpbmcgW1JGQzc1NTFdIGlzIG91dHNp ZGUgdGhlIHNjb3BlIG9mIHRoaXMNCiAgIGRvY3VtZW50Lg0KDQoNCjIuICBDb252ZW50aW9ucyBV c2VkIGluIFRoaXMgRG9jdW1lbnQNCg0KMi4xLiAgS2V5IFdvcmQgRGVmaW5pdGlvbnMNCg0KICAg VGhlIGtleSB3b3JkcyAiTVVTVCIsICJNVVNUIE5PVCIsICJSRVFVSVJFRCIsICJTSEFMTCIsICJT SEFMTCBOT1QiLA0KICAgIlNIT1VMRCIsICJTSE9VTEQgTk9UIiwgIlJFQ09NTUVOREVEIiwgIk1B WSIsIGFuZCAiT1BUSU9OQUwiIGluIHRoaXMNCiAgIGRvY3VtZW50IGFyZSB0byBiZSBpbnRlcnBy ZXRlZCBhcyBkZXNjcmliZWQgaW4gUkZDIDIxMTkgW1JGQzIxMTldLg0KDQoyLjIuICBUZXJtaW5v bG9neQ0KDQogICBUaGUgcmVhZGVyIGlzIGFzc3VtZWQgdG8gYmUgZmFtaWxpYXIgd2l0aCB0aGUg dGVybWlub2xvZ3kgaW4NCiAgIFtSRkMyMjA1XSwgW1JGQzMyMDldLCBbUkZDMzQ3MV0sIFtSRkMz NDczXSwgYW5kIFtSRkM0MDkwXS4NCg0KICAgRG93bnN0cmVhbSBQTFI6IERvd25zdHJlYW0gUG9p bnQgb2YgTG9jYWwgUmVwYWlyLiAgVGhlIFBMUiB0aGF0DQogICAgICBsb2NhbGx5IGRldGVjdHMg YSBmYWlsdXJlIGluIHRoZSBkb3duc3RyZWFtIGRpcmVjdGlvbiBvZiB0aGUNCiAgICAgIHRyYWZm aWMgZmxvdyBhbmQgcmVyb3V0ZXMgdHJhZmZpYyBpbiB0aGUgc2FtZSBkaXJlY3Rpb24gb2YgdGhl DQogICAgICBwcm90ZWN0ZWQgYmlkaXJlY3Rpb25hbCBMU1AgUlNWUCBQYXRoIHNpZ25hbGluZy4g IEEgZG93bnN0cmVhbSBQTFINCiAgICAgIGhhcyBhIGNvcnJlc3BvbmRpbmcgZG93bnN0cmVhbSBN UC4NCg0KICAgRG93bnN0cmVhbSBNUDogRG93bnN0cmVhbSBNZXJnZSBQb2ludC4gIFRoZSBMU1Ig d2hlcmUgb25lIG9yIG1vcmUNCiAgICAgIGJhY2t1cCB0dW5uZWxzIHJlam9pbiB0aGUgcGF0aCBv ZiB0aGUgcHJvdGVjdGVkIExTUCBpbiB0aGUNCiAgICAgIGRvd25zdHJlYW0gZGlyZWN0aW9uIG9m IHRoZSB0cmFmZmljIGZsb3cuICBUaGUgc2FtZSBMU1IgY2FuIGJlDQogICAgICBib3RoIGEgZG93 bnN0cmVhbSBNUCBhbmQgYW4gdXBzdHJlYW0gUExSIHNpbXVsdGFuZW91c2x5Lg0KDQogICBVcHN0 cmVhbSBQTFI6IFVwc3RyZWFtIFBvaW50IG9mIExvY2FsIFJlcGFpci4gIFRoZSBQTFIgdGhhdCBs b2NhbGx5DQogICAgICBkZXRlY3RzIGEgZmFpbHVyZSBpbiB0aGUgdXBzdHJlYW0gZGlyZWN0aW9u IG9mIHRoZSB0cmFmZmljIGZsb3cNCiAgICAgIGFuZCByZXJvdXRlcyB0cmFmZmljIGluIHRoZSBv cHBvc2l0ZSBkaXJlY3Rpb24gb2YgdGhlIHByb3RlY3RlZA0KICAgICAgYmlkaXJlY3Rpb25hbCBM U1AgUlNWUCBQYXRoIHNpZ25hbGluZy4gIEFuIHVwc3RyZWFtIFBMUiBoYXMgYQ0KICAgICAgY29y cmVzcG9uZGluZyB1cHN0cmVhbSBNUC4NCg0KICAgVXBzdHJlYW0gTVA6IFVwc3RyZWFtIE1lcmdl IFBvaW50LiAgVGhlIExTUiB3aGVyZSBvbmUgb3IgbW9yZSBiYWNrdXANCiAgICAgIHR1bm5lbHMg cmVqb2luIHRoZSBwYXRoIG9mIHRoZSBwcm90ZWN0ZWQgTFNQIGluIHRoZSB1cHN0cmVhbQ0KIA0K DQoNClRhaWxsb24gZXQgYWwuICAgICAgICAgIEV4cGlyZXMgSmFudWFyeSAxMiwgMjAxOCAgICAg ICAgICAgICAgICBbUGFnZSA1XQ0KDA0KSW50ZXJuZXQtRHJhZnQgICAgICAgICAgIEZSUiBmb3Ig VEUgR01QTFMgTFNQcyAgICAgICAgICAgICBKdWx5IDExLCAyMDE3DQoNCg0KICAgICAgZGlyZWN0 aW9uIG9mIHRoZSB0cmFmZmljIGZsb3cuICBUaGUgc2FtZSBMU1IgY2FuIGJlIGJvdGggYW4NCiAg ICAgIHVwc3RyZWFtIE1QIGFuZCBhIGRvd25zdHJlYW0gUExSIHNpbXVsdGFuZW91c2x5Lg0KDQog ICBQb2ludCBvZiBSZW1vdGUgUmVwYWlyIChQUlIpOiBBIGRvd25zdHJlYW0gTVAgdGhhdCBhc3N1 bWVzIHRoZSByb2xlDQogICAgICBvZiB1cHN0cmVhbSBQTFIgdXBvbiByZWNlaXZpbmcgcHJvdGVj dGVkIExTUCdzIHJlcm91dGVkIFBhdGgNCiAgICAgIG1lc3NhZ2UgYW5kIHRyaWdnZXJzIHJlcm91 dGUgb2YgdHJhZmZpYyBhbmQgc2lnbmFsaW5nIGluIHRoZQ0KICAgICAgdXBzdHJlYW0gZGlyZWN0 aW9uIG9mIHRoZSB0cmFmZmljIGZsb3cgdXNpbmcgdGhlIHByb2NlZHVyZXMNCiAgICAgIGRlc2Ny aWJlZCBpbiB0aGlzIGRvY3VtZW50Lg0KDQoyLjMuICBBYmJyZXZpYXRpb25zDQoNCiAgIEdNUExT OiBHZW5lcmFsaXplZCBNdWx0aS1Qcm90b2NvbCBMYWJlbCBTd2l0Y2hpbmcNCg0KICAgTFNQOiBM YWJlbCBTd2l0Y2hlZCBQYXRoDQoNCiAgIExTUjogTGFiZWwgU3dpdGNoaW5nIFJvdXRlcg0KDQog ICBNUDogTWVyZ2UgUG9pbnQNCg0KICAgTVBMUzogTXVsdGktUHJvdG9jb2wgTGFiZWwgU3dpdGNo aW5nDQoNCiAgIFBMUjogUG9pbnQgb2YgTG9jYWwgUmVwYWlyDQoNCiAgIFBTQzogUGFja2V0IFN3 aXRjaGVkIENhcGFibGUNCg0KICAgUlNWUDogUmVzb3VyY2UgUmVTZXJWYXRpb24gUHJvdG9jb2wN Cg0KICAgVEU6IFRyYWZmaWMgRW5naW5lZXJpbmcNCg0KDQozLiAgRmFzdCBSZXJvdXRlIEZvciBV bmlkaXJlY3Rpb25hbCBHTVBMUyBMU1BzDQoNCiAgIFRoZSBGUlIgcHJvY2VkdXJlcyBkZWZpbmVk IGluIFtSRkM0MDkwXSBmb3IgUlNWUC1URSBzaWduYWxpbmcNCiAgIFtSRkMzMjA5XSBhcmUgZXF1 YWxseSBhcHBsaWNhYmxlIHRvIHRoZSB1bmlkaXJlY3Rpb25hbCBwcm90ZWN0ZWQgTFNQcw0KICAg c2lnbmFsZWQgdXNpbmcgR01QTFMgW1JGQzM0NzNdIGFuZCBhcmUgbm90IG1vZGlmaWVkIGJ5IHRo ZSB1cGRhdGVzDQogICBkZWZpbmVkIGluIHRoaXMgZG9jdW1lbnQgZXhjZXB0IHRoZSBmb2xsb3dp bmcuICANCg0KICAgV2hlbiB1c2luZyB0aGUgR01QTFMgb3V0LW9mLWJhbmQgc2lnbmFsaW5nIFtS RkMzNDczXSwgYWZ0ZXIgYSBsaW5rDQogICBmYWlsdXJlIGV2ZW50LCB0aGUgUlNWUCBtZXNzYWdl cyBhcmUgbm90IHJlcm91dGVkIG92ZXIgdGhlIGJ5cGFzcw0KICAgdHVubmVsIGJ5IHRoZSBkb3du c3RyZWFtIFBMUiBidXQgaW5zdGVhZCByZXJvdXRlZCBvdmVyIGENCiAgIGNvbnRyb2wtY2hhbm5l bCB0byB0aGUgZG93bnN0cmVhbSBNUC4NCg0KDQo0LiAgQnlwYXNzIFR1bm5lbCBBc3NpZ25tZW50 IEZvciBCaWRpcmVjdGlvbmFsIEdNUExTIExTUHMNCg0KICAgVGhpcyBzZWN0aW9uIGRlc2NyaWJl cyBzaWduYWxpbmcgcHJvY2VkdXJlcyBmb3IgRlJSIGJpZGlyZWN0aW9uYWwNCiAgIGJ5cGFzcyB0 dW5uZWwgYXNzaWdubWVudCBmb3IgR01QTFMgc2lnbmFsZWQgUFNDIGNvLXJvdXRlZA0KICAgYmlk aXJlY3Rpb25hbCBURSBMU1BzIGZvciBib3RoIGluLWJhbmQgYW5kIG91dC1vZi1iYW5kIHNpZ25h bGluZy4NCiANCg0KDQpUYWlsbG9uIGV0IGFsLiAgICAgICAgICBFeHBpcmVzIEphbnVhcnkgMTIs IDIwMTggICAgICAgICAgICAgICAgW1BhZ2UgNl0NCgwNCkludGVybmV0LURyYWZ0ICAgICAgICAg ICBGUlIgZm9yIFRFIEdNUExTIExTUHMgICAgICAgICAgICAgSnVseSAxMSwgMjAxNw0KDQoNCjQu MS4gIEJpZGlyZWN0aW9uYWwgR01QTFMgQnlwYXNzIFR1bm5lbCBEaXJlY3Rpb24NCg0KICAgVGhp cyBkb2N1bWVudCBkZWZpbmVzIHByb2NlZHVyZXMgd2hlcmUgYmlkaXJlY3Rpb25hbCBHTVBMUyBi eXBhc3MNCiAgIHR1bm5lbHMgYXJlIHNpZ25hbGVkIGluIHRoZSBzYW1lIGRpcmVjdGlvbiBhcyB0 aGUgcHJvdGVjdGVkIEdNUExTDQogICBMU1BzLiAgSW4gb3RoZXIgd29yZHMsIHRoZSBiaWRpcmVj dGlvbmFsIEdNUExTIGJ5cGFzcyB0dW5uZWxzDQogICBvcmlnaW5hdGUgb24gdGhlIGRvd25zdHJl YW0gUExScyBhbmQgdGVybWluYXRlIG9uIHRoZSBjb3JyZXNwb25kaW5nDQogICBkb3duc3RyZWFt IE1Qcy4gIEFzIHRoZSBvcmlnaW5hdGluZyBkb3duc3RyZWFtIFBMUiBoYXMgdGhlIHBvbGljeQ0K ICAgaW5mb3JtYXRpb24gYWJvdXQgdGhlIGxvY2FsbHkgcHJvdmlzaW9uZWQgYnlwYXNzIHR1bm5l bHMsIGl0IGFsd2F5cw0KICAgaW5pdGlhdGVzIHRoZSBieXBhc3MgdHVubmVsIGFzc2lnbm1lbnQu ICBUaGUgYmlkaXJlY3Rpb25hbCBHTVBMUw0KICAgYnlwYXNzIHR1bm5lbHMgb3JpZ2luYXRpbmcg ZnJvbSB0aGUgdXBzdHJlYW0gUExScyBhbmQgdGVybWluYXRpbmcgb24NCiAgIHRoZSBjb3JyZXNw b25kaW5nIHVwc3RyZWFtIE1QcyBhcmUgb3V0c2lkZSB0aGUgc2NvcGUgb2YgdGhpcw0KICAgZG9j dW1lbnQuDQoNCjQuMi4gIE1lcmdlIFBvaW50IExhYmVscw0KDQogICBUbyBjb3JyZWN0bHkgcmVy b3V0ZSBkYXRhIHRyYWZmaWMgb3ZlciBhIG5vZGUgcHJvdGVjdGlvbiBieXBhc3MNCiAgIHR1bm5l bCwgdGhlIGRvd25zdHJlYW0gYW5kIHVwc3RyZWFtIFBMUnMgaGF2ZSB0byBrbm93LCBpbiBhZHZh bmNlLA0KICAgdGhlIGRvd25zdHJlYW0gYW5kIHVwc3RyZWFtIE1QIGxhYmVscyBvZiB0aGUgcHJv dGVjdGVkIExTUCBzbyB0aGF0DQogICBkYXRhIGluIHRoZSBmb3J3YXJkIGFuZCByZXZlcnNlIGRp cmVjdGlvbnMgY2FuIGJlIHJlZGlyZWN0ZWQgdGhyb3VnaA0KICAgdGhlIGJ5cGFzcyB0dW5uZWwg YWZ0ZXIgRlJSIHJlc3BlY3RpdmVseS4NCg0KICAgW1JGQzQwOTBdIGRlZmluZXMgcHJvY2VkdXJl cyBmb3IgdGhlIGRvd25zdHJlYW0gUExSIHRvIG9idGFpbiB0aGUNCiAgIHByb3RlY3RlZCBMU1An cyBkb3duc3RyZWFtIE1QIGxhYmVsIGZyb20gcmVjb3JkZWQgbGFiZWxzIGluIHRoZQ0KICAgUkVD T1JEX1JPVVRFIE9iamVjdCAoUlJPKSBvZiB0aGUgUlNWUCBSZXN2IG1lc3NhZ2UgcmVjZWl2ZWQg YXQgdGhlDQogICBkb3duc3RyZWFtIFBMUi4NCg0KICAgVG8gb2J0YWluIHRoZSB1cHN0cmVhbSBN UCBsYWJlbCwgdGhlIHByb2NlZHVyZXMgc3BlY2lmaWVkIGluDQogICBbUkZDNDA5MF0gYXJlIHVz ZWQgdG8gcmVjb3JkIHRoZSB1cHN0cmVhbSBNUCBsYWJlbCBpbiB0aGUgUlJPIG9mIHRoZQ0KICAg UlNWUCBQYXRoIG1lc3NhZ2Ugb2YgdGhlIHByb3RlY3RlZCBMU1AuICBUaGUgdXBzdHJlYW0gUExS IG9idGFpbnMgdGhlDQogICB1cHN0cmVhbSBNUCBsYWJlbCBmcm9tIHRoZSByZWNvcmRlZCBsYWJl bHMgaW4gdGhlIFJSTyBvZiB0aGUgcmVjZWl2ZWQNCiAgIFJTVlAgUGF0aCBtZXNzYWdlLg0KDQo0 LjMuICBNZXJnZSBQb2ludCBBZGRyZXNzZXMNCg0KICAgVG8gY29ycmVjdGx5IGFzc2lnbiBhIGJp ZGlyZWN0aW9uYWwgYnlwYXNzIHR1bm5lbCwgdGhlIGRvd25zdHJlYW0gYW5kDQogICB1cHN0cmVh bSBQTFJzIGhhdmUgdG8ga25vdywgaW4gYWR2YW5jZSwgdGhlIGRvd25zdHJlYW0gYW5kIHVwc3Ry ZWFtDQogICBNUCBhZGRyZXNzZXMuICANCg0KICAgW1JGQzQ1NjFdIGRlZmluZXMgcHJvY2VkdXJl cyBmb3IgdGhlIGRvd25zdHJlYW0gUExSIHRvIG9idGFpbiB0aGUNCiAgIHByb3RlY3RlZCBMU1An cyBkb3duc3RyZWFtIE1QIGFkZHJlc3MgZnJvbSB0aGUgcmVjb3JkZWQgTm9kZS1JRHMgaW4NCiAg IHRoZSBSUk8gb2YgdGhlIFJTVlAgUmVzdiBtZXNzYWdlIHJlY2VpdmVkIGF0IHRoZSBkb3duc3Ry ZWFtIFBMUi4NCg0KICAgVG8gb2J0YWluIHRoZSB1cHN0cmVhbSBNUCBhZGRyZXNzLCB0aGUgcHJv Y2VkdXJlcyBzcGVjaWZpZWQgaW4NCiAgIFtSRkM0NTYxXSBhcmUgdXNlZCB0byByZWNvcmQgdXBz dHJlYW0gTVAgTm9kZS1JRCBpbiB0aGUgUlJPIG9mIHRoZQ0KICAgUlNWUCBQYXRoIG1lc3NhZ2Ug b2YgdGhlIHByb3RlY3RlZCBMU1AuICBUaGUgdXBzdHJlYW0gUExSIG9idGFpbnMgdGhlDQogICB1 cHN0cmVhbSBNUCBhZGRyZXNzIGZyb20gdGhlIHJlY29yZGVkIE5vZGUtSURzIGluIHRoZSBSUk8g b2YgdGhlDQogICByZWNlaXZlZCBSU1ZQIFBhdGggbWVzc2FnZS4NCg0KIA0KDQoNClRhaWxsb24g ZXQgYWwuICAgICAgICAgIEV4cGlyZXMgSmFudWFyeSAxMiwgMjAxOCAgICAgICAgICAgICAgICBb UGFnZSA3XQ0KDA0KSW50ZXJuZXQtRHJhZnQgICAgICAgICAgIEZSUiBmb3IgVEUgR01QTFMgTFNQ cyAgICAgICAgICAgICBKdWx5IDExLCAyMDE3DQoNCg0KNC40LiAgUlJPIElQdjQvSVB2NiBTdWJv YmplY3QgRmxhZ3MNCg0KICAgUlJPIElQdjQvSVB2NiBzdWJvYmplY3QgZmxhZ3MgYXJlIGRlZmlu ZWQgaW4gW1JGQzQwOTBdLCBTZWN0aW9uIDQuNA0KICAgYW5kIGFyZSBlcXVhbGx5IGFwcGxpY2Fi bGUgdG8gdGhlIEZSUiBwcm9jZWR1cmUgZm9yIHRoZSBwcm90ZWN0ZWQNCiAgIGJpZGlyZWN0aW9u YWwgR01QTFMgTFNQcy4NCg0KICAgVGhlIHByb2NlZHVyZXMgZGVmaW5lZCBpbiBbUkZDNDA5MF0g YXJlIHVzZWQgYnkgdGhlIGRvd25zdHJlYW0gUExSIHRvDQogICBzaWduYWwgdGhlIElQdjQvSVB2 NiBzdWJvYmplY3QgZmxhZ3MgdXBzdHJlYW0gaW4gdGhlIFJSTyBvZiB0aGUgUlNWUA0KICAgUmVz diBtZXNzYWdlIG9mIHRoZSBwcm90ZWN0ZWQgTFNQLiAgU2ltaWxhcmx5LCB0aG9zZSBwcm9jZWR1 cmVzIGFyZQ0KICAgdXNlZCBieSB0aGUgZG93bnN0cmVhbSBQTFIgdG8gc2lnbmFsIHRoZSBJUHY0 L0lQdjYgc3Vib2JqZWN0IGZsYWdzDQogICBkb3duc3RyZWFtIGluIHRoZSBSUk8gb2YgdGhlIFJT VlAgUGF0aCBtZXNzYWdlIG9mIHRoZSBwcm90ZWN0ZWQgTFNQLg0KDQo0LjUuICBCaWRpcmVjdGlv bmFsIEJ5cGFzcyBUdW5uZWwgQXNzaWdubWVudCBDby1vcmRpbmF0aW9uDQoNCiAgIFRoaXMgZG9j dW1lbnQgZGVmaW5lcyBzaWduYWxpbmcgcHJvY2VkdXJlcyBhbmQgYSBuZXcNCiAgIEJZUEFTU19B U1NJR05NRU5UIHN1Ym9iamVjdCBpbiB0aGUgUlNWUCBSRUNPUkRfUk9VVEUgT2JqZWN0IChSUk8p DQogICB1c2VkIHRvIGNvLW9yZGluYXRlIHRoZSBiaWRpcmVjdGlvbmFsIGJ5cGFzcyB0dW5uZWwg YXNzaWdubWVudA0KICAgYmV0d2VlbiB0aGUgZG93bnN0cmVhbSBhbmQgdXBzdHJlYW0gUExScy4N Cg0KNC41LjEuICBCaWRpcmVjdGlvbmFsIEJ5cGFzcyBUdW5uZWwgQXNzaWdubWVudCBTaWduYWxp bmcgUHJvY2VkdXJlDQoNCiAgIEl0IGlzIGRlc2lyYWJsZSB0byBjb29yZGluYXRlIHRoZSBiaWRp cmVjdGlvbmFsIGJ5cGFzcyB0dW5uZWwNCiAgIHNlbGVjdGVkIGF0IHRoZSBkb3duc3RyZWFtIGFu ZCB1cHN0cmVhbSBQTFJzIHNvIHRoYXQgdGhlIHJlcm91dGVkDQogICB0cmFmZmljIGZsb3dzIG9u IGNvLXJvdXRlZCBwYXRocyBhZnRlciBGUlIuICBUbyBhY2hpZXZlIHRoaXMsIGEgbmV3DQogICBS U1ZQIHN1Ym9iamVjdCBpcyBkZWZpbmVkIGZvciBSUk8gdGhhdCBpZGVudGlmaWVzIGEgYmlkaXJl Y3Rpb25hbA0KICAgYnlwYXNzIHR1bm5lbCB0aGF0IGlzIGFzc2lnbmVkIGF0IGEgZG93bnN0cmVh bSBQTFIgdG8gcHJvdGVjdCBhDQogICBiaWRpcmVjdGlvbmFsIExTUC4NCg0KICAgV2hlbiB0aGUg cHJvY2VkdXJlcyBkZWZpbmVkIGluIHRoaXMgZG9jdW1lbnQgYXJlIGluIHVzZSwgdGhlDQogICBC WVBBU1NfQVNTSUdOTUVOVCBzdWJvYmplY3QgTVVTVCBiZSBhZGRlZCBieSBlYWNoIGRvd25zdHJl YW0gUExSIGluDQogICB0aGUgUlNWUCBQYXRoIFJSTyBtZXNzYWdlIG9mIHRoZSBHTVBMUyBzaWdu YWxlZCBiaWRpcmVjdGlvbmFsDQogICBwcm90ZWN0ZWQgTFNQIHRvIHJlY29yZCB0aGUgZG93bnN0 cmVhbSBiaWRpcmVjdGlvbmFsIGJ5cGFzcyB0dW5uZWwNCiAgIGFzc2lnbm1lbnQuICBUaGlzIHN1 Ym9iamVjdCBpcyBzZW50IGluIHRoZSBSU1ZQIFBhdGggUlJPIG1lc3NhZ2UNCiAgIGV2ZXJ5IHRp bWUgdGhlIGRvd25zdHJlYW0gUExSIGFzc2lnbnMgb3IgdXBkYXRlcyB0aGUgYnlwYXNzIHR1bm5l bA0KICAgYXNzaWdubWVudC4gIFRoZSBkb3duc3RyZWFtIFBMUiBjYW4gYXNzaWduIGEgYnlwYXNz IHR1bm5lbCB3aGVuDQogICBwcm9jZXNzaW5nIHRoZSBmaXJzdCBQYXRoIG1lc3NhZ2Ugb2YgdGhl IHByb3RlY3RlZCBMU1AsIGhvd2V2ZXIsIGl0DQogICBjYW4gbm90IHVwZGF0ZSB0aGUgZm9yd2Fy ZGluZyBwbGFuZSB1bnRpbCBpdCByZWNlaXZlcyB0aGUgUmVzdg0KICAgbWVzc2FnZSBjb250YWlu aW5nIHRoZSBkb3duc3RyZWFtIE1QIGxhYmVsLg0KDQogICBUaGUgdXBzdHJlYW0gUExSIChkb3du c3RyZWFtIE1QKSBzaW1wbHkgcmVmbGVjdHMgdGhlIGJ5cGFzcyB0dW5uZWwNCiAgIGFzc2lnbm1l bnQgaW4gdGhlIHJldmVyc2UgZGlyZWN0aW9uLiAgVGhlIGFic2VuY2Ugb2YNCiAgIEJZUEFTU19B U1NJR05NRU5UIHN1Ym9iamVjdCBpbiBSUk8gbWVhbnMgdGhhdCB0aGUgcmVsZXZhbnQgbm9kZSBv cg0KICAgaW50ZXJmYWNlIGlzIG5vdCBwcm90ZWN0ZWQgYnkgYSBiaWRpcmVjdGlvbmFsIGJ5cGFz cyB0dW5uZWwuICBIZW5jZSwNCiAgIHRoZSB1cHN0cmVhbSBQTFIgbmVlZCBub3QgYXNzaWduIGEg YnlwYXNzIHR1bm5lbCBpbiB0aGUgcmV2ZXJzZQ0KICAgZGlyZWN0aW9uLg0KDQogICBXaGVuIHRo ZSBCWVBBU1NfQVNTSUdOTUVOVCBzdWJvYmplY3QgaXMgYWRkZWQgaW4gdGhlIFJSTzoNCg0KIA0K DQoNClRhaWxsb24gZXQgYWwuICAgICAgICAgIEV4cGlyZXMgSmFudWFyeSAxMiwgMjAxOCAgICAg ICAgICAgICAgICBbUGFnZSA4XQ0KDA0KSW50ZXJuZXQtRHJhZnQgICAgICAgICAgIEZSUiBmb3Ig VEUgR01QTFMgTFNQcyAgICAgICAgICAgICBKdWx5IDExLCAyMDE3DQoNCg0KICAgbyAgVGhlIElQ djQgb3IgSVB2NiBzdWJvYmplY3QgY29udGFpbmluZyBOb2RlLUlEIGFkZHJlc3MgTVVTVCBhbHNv IGJlDQogICAgICBhZGRlZCBbUkZDNDU2MV0uICBUaGUgTm9kZS1JRCBhZGRyZXNzIE1VU1QgbWF0 Y2ggdGhlIHNvdXJjZQ0KICAgICAgYWRkcmVzcyBvZiB0aGUgYnlwYXNzIHR1bm5lbCBzZWxlY3Rl ZCBmb3IgdGhpcyBwcm90ZWN0ZWQgTFNQLg0KDQogICBvICBUaGUgQllQQVNTX0FTU0lHTk1FTlQg c3Vib2JqZWN0IE1VU1QgYmUgYWRkZWQgaW1tZWRpYXRlbHkgYWZ0ZXINCiAgICAgIHRoZSBOb2Rl LUlEIGFkZHJlc3MuDQoNCiAgIG8gIFRoZSBMYWJlbCBzdWJvYmplY3QgTVVTVCBhbHNvIGJlIGFk ZGVkIFtSRkMzMjA5XS4NCg0KICAgVGhlIHJ1bGVzIGZvciBhZGRpbmcgYW4gSVB2NCBvciBJUHY2 IEludGVyZmFjZSBhZGRyZXNzIHN1Ym9iamVjdCBhbmQNCiAgIFVubnVtYmVyZWQgSW50ZXJmYWNl IElEIHN1Ym9iamVjdCBhcyBzcGVjaWZpZWQgaW4gW1JGQzMyMDldIGFuZA0KICAgW1JGQzQwOTBd IGFyZSBub3QgbW9kaWZpZWQgYnkgdGhlIGFib3ZlIHByb2NlZHVyZS4gIFRoZSBvcHRpb25zDQog ICBzcGVjaWZpZWQgaW4gU2VjdGlvbiA2LjEuMyBpbiBbUkZDNDk5MF0gYXJlIGFsc28gYXBwbGlj YWJsZSBhcyBsb25nDQogICBhcyBhYm92ZSBtZW50aW9uZWQgcnVsZXMgYXJlIGZvbGxvd2VkIHdo ZW4gdXNpbmcgdGhlIEZSUiBwcm9jZWR1cmVzDQogICBkZWZpbmVkIGluIHRoaXMgZG9jdW1lbnQu ICANCg0KICAgQW4gdXBzdHJlYW0gUExSIChkb3duc3RyZWFtIE1QKSBTSE9VTEQgY2hlY2sgYWxs IEJZUEFTU19BU1NJR05NRU5UDQogICBzdWJvYmplY3RzIGluIHRoZSBQYXRoIFJSTyBpbiBvcmRl ciB0byBhc3NpZ24gYSByZXZlcnNlIGJ5cGFzcw0KICAgdHVubmVsLiAgVGhlIHVwc3RyZWFtIFBM UiB0aGF0IGRldGVjdHMgYSBCWVBBU1NfQVNTSUdOTUVOVCBzdWJvYmplY3QsDQogICBzZWxlY3Rz IGEgcmV2ZXJzZSBieXBhc3MgdHVubmVsIHRoYXQgdGVybWluYXRlcyBsb2NhbGx5IHdpdGggdGhl DQogICBkZXN0aW5hdGlvbiBhZGRyZXNzIGFuZCB0dW5uZWwtSUQgZnJvbSB0aGUgc3Vib2JqZWN0 LCBhbmQgaGFzIGENCiAgIHNvdXJjZSBhZGRyZXNzIG1hdGNoaW5nIHRoZSBOb2RlLUlEIGFkZHJl c3MuICBUaGUgUlJPIGNhbiBjb250YWluDQogICBtdWx0aXBsZSBhZGRyZXNzZXMgdG8gaWRlbnRp ZnkgYSBub2RlLCBob3dldmVyLCB0aGUgdXBzdHJlYW0gUExSDQogICByZWxpZXMgb24gdGhlIE5v ZGUtSUQgYWRkcmVzcyBwcmVjZWRpbmcgdGhlIEJZUEFTU19BU1NJR05NRU5UDQogICBzdWJvYmpl Y3QgZm9yIGlkZW50aWZ5aW5nIHRoZSBieXBhc3MgdHVubmVsLiAgSWYgdGhlIGJ5cGFzcyB0dW5u ZWwgaXMNCiAgIG5vdCBmb3VuZCwgdGhlIHVwc3RyZWFtIFBMUiBTSE9VTEQgc2VuZCBhIE5vdGlm eSBtZXNzYWdlIFtSRkMzNDczXQ0KICAgd2l0aCBFcnJvci1jb2RlIC0gRlJSIEJ5cGFzcyBBc3Np Z25tZW50IEVycm9yICh2YWx1ZTogVEJBMSkgYW5kIFN1Yi0NCiAgIGNvZGUgLSBCeXBhc3MgVHVu bmVsIE5vdCBGb3VuZCAodmFsdWU6IFRCQTMpIHRvIHRoZSBkb3duc3RyZWFtIFBMUi4gDQogICBV cG9uIHJlY2VpdmluZyB0aGlzIGVycm9yLCB0aGUgZG93bnN0cmVhbSBQTFIgU0hPVUxEIHJlbW92 ZSB0aGUNCiAgIGJ5cGFzcyB0dW5uZWwgYXNzaWdubWVudCBhbmQgc2VsZWN0IGFuIGFsdGVybmF0 ZSBieXBhc3MgdHVubmVsIGlmIG9uZQ0KICAgYXZhaWxhYmxlLiAgVGhlIFJSTyBjb250YWluaW5n IEJZUEFTU19BU1NJR05NRU5UIHN1Ym9iamVjdChzKSBpcyB0aGVuDQogICBzaW1wbHkgZm9yd2Fy ZGVkIGRvd25zdHJlYW0gaW4gdGhlIFJTVlAgUGF0aCBtZXNzYWdlLg0KDQo0LjUuMi4gIE9uZS10 by1vbmUgQmlkaXJlY3Rpb25hbCBCeXBhc3MgVHVubmVsIEFzc2lnbm1lbnQNCg0KICAgVGhlIGJp ZGlyZWN0aW9uYWwgYnlwYXNzIHR1bm5lbCBhc3NpZ25tZW50IGNvLW9yZGluYXRpb24gcHJvY2Vk dXJlDQogICBkZWZpbmVkIGluIHRoaXMgZG9jdW1lbnQgY2FuIGJlIHVzZWQgZm9yIGJvdGggZmFj aWxpdHkgYmFja3VwDQogICBkZXNjcmliZWQgaW4gU2VjdGlvbiAzLjIgb2YgW1JGQzQwOTBdIGFu ZCBvbmUtdG8tb25lIGJhY2t1cCBkZXNjcmliZWQNCiAgIGluIFNlY3Rpb24gMy4xIG9mIFtSRkM0 MDkwXS4gIEFzIHNwZWNpZmllZCBpbiBbUkZDNDA5MF0sIFNlY3Rpb24gNC4yLA0KICAgdGhlIERF VE9VUl9PQkpFQ1QgY2FuIGJlIHVzZWQgaW4gb25lLXRvLW9uZSBiYWNrdXAgbWV0aG9kIHRvIGlk ZW50aWZ5DQogICB0aGUgZGV0b3VyIExTUHMuICBJbiBvbmUtdG8tb25lIGJhY2t1cCBtZXRob2Qs IGlmIHRoZSBieXBhc3MgdHVubmVsDQogICBpcyBhbHJlYWR5IGluLXVzZSBhdCB0aGUgdXBzdHJl YW0gUExSLCBpdCBTSE9VTEQgc2VuZCBhIE5vdGlmeQ0KICAgbWVzc2FnZSBbUkZDMzQ3M10gd2l0 aCBFcnJvci1jb2RlIC0gRlJSIEJ5cGFzcyBBc3NpZ25tZW50IEVycm9yDQogICAodmFsdWU6IFRC QTEpIGFuZCBTdWItY29kZSAtIE9uZS10by1vbmUgQnlwYXNzIEFscmVhZHkgSW4tdXNlICh2YWx1 ZToNCiAgIFRCQTQpIHRvIHRoZSBkb3duc3RyZWFtIFBMUi4gIFVwb24gcmVjZWl2aW5nIHRoaXMg ZXJyb3IsIHRoZQ0KICAgZG93bnN0cmVhbSBQTFIgU0hPVUxEIHJlbW92ZSB0aGUgYnlwYXNzIHR1 bm5lbCBhc3NpZ25tZW50IGFuZCBzZWxlY3QNCiAgIGFuIGFsdGVybmF0ZSBieXBhc3MgdHVubmVs IGlmIG9uZSBhdmFpbGFibGUuDQoNCiANCg0KDQpUYWlsbG9uIGV0IGFsLiAgICAgICAgICBFeHBp cmVzIEphbnVhcnkgMTIsIDIwMTggICAgICAgICAgICAgICAgW1BhZ2UgOV0NCgwNCkludGVybmV0 LURyYWZ0ICAgICAgICAgICBGUlIgZm9yIFRFIEdNUExTIExTUHMgICAgICAgICAgICAgSnVseSAx MSwgMjAxNw0KDQoNCjQuNS4zLiAgTXVsdGlwbGUgQmlkaXJlY3Rpb25hbCBCeXBhc3MgVHVubmVs IEFzc2lnbm1lbnRzDQoNCiAgIFRoZSB1cHN0cmVhbSBQTFIgbWF5IHJlY2VpdmUgbXVsdGlwbGUg YnlwYXNzIHR1bm5lbCBhc3NpZ25tZW50cyBmb3IgYQ0KICAgcHJvdGVjdGVkIExTUCBmcm9tIGRp ZmZlcmVudCBkb3duc3RyZWFtIFBMUnMuICBUaGUgY2hvaWNlIG9mIGENCiAgIHJldmVyc2UgYnlw YXNzIHR1bm5lbCBpcyBiYXNlZCBvbiB0aGUgbG9jYWwgcG9saWN5IG9uIHRoZSB1cHN0cmVhbQ0K ICAgUExSLiAgRXhhbXBsZXMgb2Ygc3VjaCBhIHBvbGljeSBjb3VsZCBiZSB0byBwcmVmZXIgbGlu ayBwcm90ZWN0aW9uDQogICBvdmVyIG5vZGUgcHJvdGVjdGlvbiwgb3IgdG8gcHJlZmVyIHRoZSBi eXBhc3MgdHVubmVsIHRvIHRoZSBmdXJ0aGVzdA0KICAgdXBzdHJlYW0gbm9kZS4NCg0KICAgQXMg c2hvd24gaW4gRXhhbXBsZSAxIGFuZCBFeGFtcGxlIDIsIGZvciB0aGUgcHJvdGVjdGVkIGJpZGly ZWN0aW9uYWwNCiAgIEdNUExTIExTUCBSNC1SNS1SNiwgdGhlIHVwc3RyZWFtIFBMUiBSNiByZWNl aXZlcyBtdWx0aXBsZSBieXBhc3MNCiAgIHR1bm5lbCBhc3NpZ25tZW50cywgb25lIGZyb20gZG93 bnN0cmVhbSBQTFIgUjQgZm9yIG5vZGUgcHJvdGVjdGlvbg0KICAgYW5kIG9uZSBmcm9tIGRvd25z dHJlYW0gUExSIFI1IGZvciBsaW5rIHByb3RlY3Rpb24uICBJbiBFeGFtcGxlIDEsIFI2DQogICBw cmVmZXJzIHRoZSBsaW5rIHByb3RlY3Rpb24gYnlwYXNzIHR1bm5lbCBmcm9tIGRvd25zdHJlYW0g UExSIFI1DQogICB3aGVyZWFzIGluIEV4YW1wbGUgMiwgUjYgcHJlZmVycyB0aGUgbm9kZSBwcm90 ZWN0aW9uIGJ5cGFzcyB0dW5uZWwNCiAgIGZyb20gZG93bnN0cmVhbSBQTFIgUjQuDQoNCg0KICAg ICAgICAgICAgICAgICAgICAgICArLS0tLS0tLT4+LS0tLS0tLSsNCiAgICAgICAgICAgICAgICAg ICAgICAvICAgICAgICAgICArLT4+LS0rIFwNCiAgICAgICAgICAgICAgICAgICAgIC8gICAgICAg ICAgIC8gICAgICAgXCBcDQogICAgICAgICAgICAgICAgICAgIC8gICAgICAgICAgIC8gICAgICAg ICBcIFwNCiAgICAgICAgICAgICAgICAgIFtSNF0tLS0+Pi0tLVtSNV0tLS0+Pi0tLVtSNl0NCiAg ICAgICAgICAgICAgICAgICBQQVRIIC0+ICAgICAgXCAgICAgICAgIC8NCiAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgIFwgICAgICAgLw0KICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICstPDwtLSsNCg0KICAgICAgICAgRXhhbXBsZSAxOiBMaW5rIHByb3RlY3Rpb24gaXMg cHJlZmVycmVkIG9uIGRvd25zdHJlYW0gTVANCg0KDQoNCiAgICAgICAgICAgICAgICAgICAgICAg Ky0tLS0tLS0+Pi0tLS0tLS0tKw0KICAgICAgICAgICAgICAgICAgICAgIC8gICAgICAgICAgICst Pj4tLSsgXA0KICAgICAgICAgICAgICAgICAgICAgLyAgICAgICAgICAgLyAgICAgICBcIFwNCiAg ICAgICAgICAgICAgICAgICAgLyAgICAgICAgICAgLyAgICAgICAgIFwgXA0KICAgICAgICAgICAg ICAgICAgW1I0XS0tLT4+LS0tW1I1XS0tLT4+LS0tW1I2XQ0KICAgICAgICAgICAgICAgICAgICBc IFBBVEggLT4gICAgICAgICAgICAgICAvDQogICAgICAgICAgICAgICAgICAgICBcICAgICAgICAg ICAgICAgICAgICAgLw0KICAgICAgICAgICAgICAgICAgICAgIFwgICAgICAgICAgICAgICAgICAg Lw0KICAgICAgICAgICAgICAgICAgICAgICArLS0tLS0tLTw8LS0tLS0tLS0rDQoNCiAgICAgICAg IEV4YW1wbGUgMjogTm9kZSBwcm90ZWN0aW9uIGlzIHByZWZlcnJlZCBvbiBkb3duc3RyZWFtIE1Q DQoNCiAgIEluIGJvdGggZXhhbXBsZXMgYWJvdmUsIHRoZSB1cHN0cmVhbSBQTFIgU0hPVUxEIHNl bmQgYSBOb3RpZnkgbWVzc2FnZQ0KICAgW1JGQzM0NzNdIHdpdGggRXJyb3ItY29kZSAtIEZSUiBC eXBhc3MgQXNzaWdubWVudCBFcnJvciAodmFsdWU6IFRCQTEpDQogICBhbmQgU3ViLWNvZGUgLSBC eXBhc3MgQXNzaWdubWVudCBDYW5ub3QgQmUgVXNlZCAodmFsdWU6IFRCQTIpIHRvIHRoZQ0KICAg ZG93bnN0cmVhbSBQTFIgdG8gaW5kaWNhdGUgdGhhdCBpdCBjYW5ub3QgdXNlIHRoZSBieXBhc3Mg dHVubmVsDQogICBhc3NpZ25tZW50IGluIHRoZSByZXZlcnNlIGRpcmVjdGlvbi4gIFVwb24gcmVj ZWl2aW5nIHRoaXMgZXJyb3IsIHRoZQ0KIA0KDQoNClRhaWxsb24gZXQgYWwuICAgICAgICAgIEV4 cGlyZXMgSmFudWFyeSAxMiwgMjAxOCAgICAgICAgICAgICAgIFtQYWdlIDEwXQ0KDA0KSW50ZXJu ZXQtRHJhZnQgICAgICAgICAgIEZSUiBmb3IgVEUgR01QTFMgTFNQcyAgICAgICAgICAgICBKdWx5 IDExLCAyMDE3DQoNCg0KICAgZG93bnN0cmVhbSBQTFIgTUFZIHJlbW92ZSB0aGUgYnlwYXNzIHR1 bm5lbCBhc3NpZ25tZW50IGFuZCBzZWxlY3QgYW4NCiAgIGFsdGVybmF0ZSBieXBhc3MgdHVubmVs IGlmIG9uZSBhdmFpbGFibGUuDQoNCiAgIElmIG11bHRpcGxlIGJ5cGFzcyB0dW5uZWwgYXNzaWdu bWVudHMgYXJlIHByZXNlbnQgb24gdGhlIHVwc3RyZWFtIFBMUg0KICAgUjYgYXQgdGhlIHRpbWUg b2YgYSBmYWlsdXJlLCBhbnkgcmVzdWx0ZWQgYXN5bW1ldHJ5IGdldHMgY29ycmVjdGVkDQogICB1 c2luZyB0aGUgcmUtY29yb3V0ZSBwcm9jZWR1cmUgYWZ0ZXIgRlJSIGFzIHNwZWNpZmllZCBpbiBT ZWN0aW9uDQogICA1LjIuMiBvZiB0aGlzIGRvY3VtZW50LiANCg0KDQo1LiAgRmFzdCBSZXJvdXRl IEZvciBCaWRpcmVjdGlvbmFsIEdNUExTIExTUHMgd2l0aCBJbi1iYW5kIFNpZ25hbGluZw0KDQog ICBXaGVuIGEgYmlkaXJlY3Rpb25hbCBieXBhc3MgdHVubmVsIGlzIHVzZWQsIGFmdGVyIGEgbGlu ayBmYWlsdXJlLA0KICAgZm9sbG93aW5nIHByb2NlZHVyZSBpcyBmb2xsb3dlZCB3aGVuIHVzaW5n IHRoZSBpbi1iYW5kIHNpZ25hbGluZzoNCg0KICAgbyAgVGhlIGRvd25zdHJlYW0gUExSIHJlcm91 dGVzIHRyYWZmaWMgYW5kIFJTVlAgUGF0aCBzaWduYWxpbmcgb3Zlcg0KICAgICAgdGhlIGJpZGly ZWN0aW9uYWwgYnlwYXNzIHR1bm5lbCB1c2luZyB0aGUgcHJvY2VkdXJlcyBkZWZpbmVkIGluDQog ICAgICBbUkZDNDA5MF0uICANCg0KICAgbyAgVXBzdHJlYW0gUExSIHJlcm91dGVzIHRyYWZmaWMg dXBvbiBkZXRlY3RpbmcgdGhlIGxpbmsgZmFpbHVyZSBvcg0KICAgICAgdXBvbiByZWNlaXZpbmcg UlNWUCBQYXRoIG1lc3NhZ2Ugb3ZlciB0aGUgYmlkaXJlY3Rpb25hbCBieXBhc3MNCiAgICAgIHR1 bm5lbC4gIA0KDQogICBvICBVcHN0cmVhbSBQTFIgYWxzbyByZXJvdXRlcyBSU1ZQIFJlc3Ygc2ln bmFsaW5nIGFmdGVyIHJlY2VpdmluZw0KICAgICAgUlNWUCBQYXRoIG1lc3NhZ2Ugb3ZlciB0aGUg YmlkaXJlY3Rpb25hbCBieXBhc3MgdHVubmVsLiAgDQoNCiAgIFRoZSBhYm92ZSBwcm9jZWR1cmUg YWxsb3dzIGJvdGggdHJhZmZpYyBhbmQgUlNWUCBzaWduYWxpbmcgdG8gZmxvdyBvbg0KICAgc3lt bWV0cmljIHBhdGhzIGluIHRoZSBmb3J3YXJkIGFuZCByZXZlcnNlIGRpcmVjdGlvbnMgb2YgYSBw cm90ZWN0ZWQNCiAgIGJpZGlyZWN0aW9uYWwgR01QTFMgTFNQLiAgVGhlIGZvbGxvd2luZyBzZWN0 aW9ucyBkZXNjcmliZSB0aGUNCiAgIGhhbmRsaW5nIGZvciBsaW5rIHByb3RlY3Rpb24gYW5kIG5v ZGUgcHJvdGVjdGlvbiBieXBhc3MgdHVubmVscy4NCg0KNS4xLiAgTGluayBQcm90ZWN0aW9uIGZv ciBCaWRpcmVjdGlvbmFsIEdNUExTIExTUHMNCg0KICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgIDwtIFJFU1YNCiAgICAgICAgICAgIFtSMV0tLS0t W1IyXS0tLS1bUjNdLS0tLS14LS0tLS1bUjRdLS0tLVtSNV0tLS0tW1I2XQ0KICAgICAgICAgICAg IFBBVEggLT4gICAgICAgICAgXCAgICAgICAgICAgICAvDQogICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgXCAgICAgICAgICAgLw0KICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAr PDwtLS0tLT4+Kw0KICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIFQzDQogICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgUEFUSCAtPg0KICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgIDwtIFJFU1YNCg0KICAgICAgICAgICAgICAgICBQcm90ZWN0ZWQgTFNQ OiAge1IxLVIyLVIzLVI0LVI1LVI2fQ0KICAgICAgICAgICAgICAgICBSMydzIEJ5cGFzcyBUMzog e1IzLVI0fQ0KDQogICAgICAgICBGaWd1cmUgMTogRmxvdyBvZiBSU1ZQIHNpZ25hbGluZyBhZnRl ciBsaW5rIGZhaWx1cmUgYW5kIEZSUg0KDQogICBDb25zaWRlciB0aGUgVEUgbmV0d29yayBzaG93 biBpbiBGaWd1cmUgMS4gIEFzc3VtZSBldmVyeSBsaW5rIGluIHRoZQ0KICAgbmV0d29yayBpcyBw cm90ZWN0ZWQgd2l0aCBhIGxpbmsgcHJvdGVjdGlvbiBieXBhc3MgdHVubmVsIChlLmcuLA0KIA0K DQoNClRhaWxsb24gZXQgYWwuICAgICAgICAgIEV4cGlyZXMgSmFudWFyeSAxMiwgMjAxOCAgICAg ICAgICAgICAgIFtQYWdlIDExXQ0KDA0KSW50ZXJuZXQtRHJhZnQgICAgICAgICAgIEZSUiBmb3Ig VEUgR01QTFMgTFNQcyAgICAgICAgICAgICBKdWx5IDExLCAyMDE3DQoNCg0KICAgYnlwYXNzIHR1 bm5lbCBUMykuICBGb3IgdGhlIHByb3RlY3RlZCBjby1yb3V0ZWQgYmlkaXJlY3Rpb25hbCBMU1AN CiAgIHdob3NlIGhlYWQtZW5kIGlzIG9uIG5vZGUgUjEgYW5kIHRhaWwtZW5kIGlzIG9uIG5vZGUg UjYsIGVhY2gNCiAgIHRyYXZlcnNlZCBub2RlIChhIHBvdGVudGlhbCBQTFIpIGFzc2lnbnMgYSBs aW5rIHByb3RlY3Rpb24gY28tcm91dGVkDQogICBiaWRpcmVjdGlvbmFsIGJ5cGFzcyB0dW5uZWwu IA0KDQo1LjEuMS4gIEJlaGF2aW9yIEFmdGVyIExpbmsgRmFpbHVyZQ0KDQogICBDb25zaWRlciB0 aGUgbGluayBSMy1SNCBvbiB0aGUgcHJvdGVjdGVkIExTUCBwYXRoIGZhaWxzLiAgVGhlDQogICBk b3duc3RyZWFtIFBMUiBSMyBhbmQgdXBzdHJlYW0gUExSIFI0IGluZGVwZW5kZW50bHkgdHJpZ2dl ciBmYXN0DQogICByZXJvdXRlIHRvIHJlZGlyZWN0IHRyYWZmaWMgb250byBieXBhc3MgdHVubmVs IFQzIGluIHRoZSBmb3J3YXJkIGFuZA0KICAgcmV2ZXJzZSBkaXJlY3Rpb25zLiAgVGhlIGRvd25z dHJlYW0gUExSIFIzIGFsc28gcmVyb3V0ZXMgUlNWUCBQYXRoDQogICBtZXNzYWdlcyBvbnRvIHRo ZSBieXBhc3MgdHVubmVsIFQzIHVzaW5nIHRoZSBwcm9jZWR1cmVzIGRlc2NyaWJlZCBpbg0KICAg W1JGQzQwOTBdLiAgVGhlIHVwc3RyZWFtIFBMUiBSNCByZXJvdXRlcyBSU1ZQIFJlc3YgbWVzc2Fn ZXMgb250byB0aGUNCiAgIHJldmVyc2UgYnlwYXNzIHR1bm5lbCBUMyB1cG9uIHJlY2VpdmluZyBS U1ZQIFBhdGggbWVzc2FnZSBvdmVyIGJ5cGFzcw0KICAgdHVubmVsIFQzLg0KDQo1LjEuMi4gIFJl dmVydGl2ZSBCZWhhdmlvciBBZnRlciBGYXN0IFJlcm91dGUNCg0KICAgVGhlIHJldmVydGl2ZSBi ZWhhdmlvciBkZWZpbmVkIGluIFtSRkM0MDkwXSwgU2VjdGlvbiA2LjUuMiwgaXMNCiAgIGFwcGxp Y2FibGUgdG8gdGhlIGxpbmsgcHJvdGVjdGlvbiBvZiBiaWRpcmVjdGlvbmFsIEdNUExTIExTUHMu ICBXaGVuDQogICB1c2luZyB0aGUgbG9jYWwgcmV2ZXJ0aXZlIG1vZGUsIGFmdGVyIHRoZSBsaW5r IFIzLVI0IChpbiBGaWd1cmUgMSkgaXMNCiAgIHJlc3RvcmVkLCBmb2xsb3dpbmcgbm9kZSBiZWhh dmlvcnMgYXBwbHk6DQoNCiAgIG8gIFRoZSBkb3duc3RyZWFtIFBMUiBSMyBzdGFydHMgc2VuZGlu ZyB0aGUgUGF0aCBtZXNzYWdlcyBhbmQgdHJhZmZpYw0KICAgICAgZmxvdyBvZiB0aGUgcHJvdGVj dGVkIExTUCBvdmVyIHRoZSByZXN0b3JlZCBsaW5rIGFuZCBzdG9wcyBzZW5kaW5nDQogICAgICB0 aGVtIG92ZXIgdGhlIGJ5cGFzcyB0dW5uZWwuDQoNCiAgIG8gIFRoZSB1cHN0cmVhbSBQTFIgUjQg c3RhcnRzIHNlbmRpbmcgdGhlIHRyYWZmaWMgZmxvdyBvZiB0aGUNCiAgICAgIHByb3RlY3RlZCBM U1Agb3ZlciB0aGUgcmVzdG9yZWQgbGluayBhbmQgc3RvcHMgc2VuZGluZyBpdCBvdmVyIHRoZQ0K ICAgICAgYnlwYXNzIHR1bm5lbC4gDQoNCiAgIG8gIFdoZW4gdXBzdHJlYW0gUExSIFI0IHJlY2Vp dmVzIHRoZSBwcm90ZWN0ZWQgTFNQIFBhdGggbWVzc2FnZXMgb3Zlcg0KICAgICAgdGhlIHJlc3Rv cmVkIGxpbmssIGlmIG5vdCBhbHJlYWR5IGRvbmUsIGl0IHN0YXJ0cyBzZW5kaW5nIFJlc3YNCiAg ICAgIG1lc3NhZ2VzIGFuZCB0cmFmZmljIGZsb3cgb2YgdGhlIHByb3RlY3RlZCBMU1Agb3ZlciB0 aGUgcmVzdG9yZWQNCiAgICAgIGxpbmsgYW5kIHN0b3BzIHNlbmRpbmcgdGhlbSBvdmVyIHRoZSBi eXBhc3MgdHVubmVsLg0KDQo1LjIuICBOb2RlIFByb3RlY3Rpb24gZm9yIEJpZGlyZWN0aW9uYWwg R01QTFMgTFNQcw0KDQoNCiAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIFQxDQogICAgICAg ICAgICAgICAgICAgICAgICArPDwtLS0tLS0tPj4rDQogICAgICAgICAgICAgICAgICAgICAgIC8g ICAgICAgICAgICAgXA0KICAgICAgICAgICAgICAgICAgICAgIC8gICAgICAgICAgICAgICBcICAg ICAgICAgIDwtIFJFU1YNCiAgICAgICAgICAgIFtSMV0tLS0tW1IyXS0tLS1bUjNdLS14LS1bUjRd LS0tLVtSNV0tLS0tW1I2XQ0KICAgICAgICAgICAgIFBBVEggLT4gICAgICAgICAgXCAgICAgICAg ICAgICAgIC8NCiAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICBcICAgICAgICAgICAgIC8N CiAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgKzw8LS0tLS0tLT4+Kw0KICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICBUMg0KIA0KDQoNClRhaWxsb24gZXQgYWwuICAg ICAgICAgIEV4cGlyZXMgSmFudWFyeSAxMiwgMjAxOCAgICAgICAgICAgICAgIFtQYWdlIDEyXQ0K DA0KSW50ZXJuZXQtRHJhZnQgICAgICAgICAgIEZSUiBmb3IgVEUgR01QTFMgTFNQcyAgICAgICAg ICAgICBKdWx5IDExLCAyMDE3DQoNCg0KICAgICAgICAgICAgICAgICBQcm90ZWN0ZWQgTFNQOiAg e1IxLVIyLVIzLVI0LVI1LVI2fQ0KICAgICAgICAgICAgICAgICBSMydzIEJ5cGFzcyBUMjoge1Iz LVI1fQ0KICAgICAgICAgICAgICAgICBSNCdzIEJ5cGFzcyBUMToge1I0LVIyfQ0KDQogICAgICAg RmlndXJlIDI6IEZsb3cgb2YgUlNWUCBzaWduYWxpbmcgYWZ0ZXIgbGluayBmYWlsdXJlIGFuZCBG UlINCg0KICAgQ29uc2lkZXIgdGhlIFRFIG5ldHdvcmsgc2hvd24gaW4gRmlndXJlIDIuICBBc3N1 bWUgZXZlcnkgbGluayBpbiB0aGUNCiAgIG5ldHdvcmsgaXMgcHJvdGVjdGVkIHdpdGggYSBub2Rl IHByb3RlY3Rpb24gYnlwYXNzIHR1bm5lbC4gIEZvciB0aGUNCiAgIHByb3RlY3RlZCBjby1yb3V0 ZWQgYmlkaXJlY3Rpb25hbCBMU1Agd2hvc2UgaGVhZC1lbmQgaXMgb24gbm9kZSBSMQ0KICAgYW5k IHRhaWwtZW5kIGlzIG9uIG5vZGUgUjYsIGVhY2ggdHJhdmVyc2VkIG5vZGUgKGEgcG90ZW50aWFs IFBMUikNCiAgIGFzc2lnbnMgYSBub2RlIHByb3RlY3Rpb24gY28tcm91dGVkIGJpZGlyZWN0aW9u YWwgYnlwYXNzIHR1bm5lbC4gDQoNCiAgIFRoZSBzb2x1dGlvbiBpbnRyb2R1Y2VzIHR3byBwaGFz ZXMgdG8gaW52b2tpbmcgRlJSIHByb2NlZHVyZXMgYnkgdGhlDQogICBQTFIgYWZ0ZXIgdGhlIGxp bmsgZmFpbHVyZS4gIFRoZSBmaXJzdCBwaGFzZSBjb21wcmlzZXMgb2YgRlJSDQogICBwcm9jZWR1 cmVzIHRvIGZhc3QgcmVyb3V0ZSBkYXRhIHRyYWZmaWMgb250byBieXBhc3MgdHVubmVscyBpbiB0 aGUNCiAgIGZvcndhcmQgYW5kIHJldmVyc2UgZGlyZWN0aW9ucy4gIFRoZSBzZWNvbmQgcGhhc2Ug cmUtY29yb3V0ZXMgdGhlDQogICBkYXRhIGFuZCBzaWduYWxpbmcgaW4gdGhlIGZvcndhcmQgYW5k IHJldmVyc2UgZGlyZWN0aW9ucyBhZnRlciB0aGUNCiAgIGZpcnN0IHBoYXNlLg0KDQo1LjIuMS4g IEJlaGF2aW9yIEFmdGVyIExpbmsgRmFpbHVyZQ0KDQogICBDb25zaWRlciBhIGxpbmsgUjMtUjQg KGluIEZpZ3VyZSAyKSBvbiB0aGUgcHJvdGVjdGVkIExTUCBwYXRoIGZhaWxzLiANCiAgIFRoZSBk b3duc3RyZWFtIFBMUiBSMyBhbmQgdXBzdHJlYW0gUExSIFI0IGluZGVwZW5kZW50bHkgdHJpZ2dl ciBmYXN0DQogICByZXJvdXRlIHByb2NlZHVyZXMgdG8gcmVkaXJlY3QgdHJhZmZpYyBvbnRvIHJl c3BlY3RpdmUgYnlwYXNzIHR1bm5lbHMNCiAgIFQyIGFuZCBUMSBpbiB0aGUgZm9yd2FyZCBhbmQg cmV2ZXJzZSBkaXJlY3Rpb25zLiAgVGhlIGRvd25zdHJlYW0gUExSDQogICBSMyBhbHNvIHJlcm91 dGVzIFJTVlAgUGF0aCBtZXNzYWdlcyBvdmVyIHRoZSBieXBhc3MgdHVubmVsIFQyIHVzaW5nDQog ICB0aGUgcHJvY2VkdXJlcyBkZXNjcmliZWQgaW4gW1JGQzQwOTBdLiAgTm90ZSwgYXQgdGhpcyBw b2ludCwgbm9kZSBSNA0KICAgc3RvcHMgcmVjZWl2aW5nIFJTVlAgUGF0aCByZWZyZXNoZXMgZm9y IHRoZSBwcm90ZWN0ZWQgYmlkaXJlY3Rpb25hbA0KICAgTFNQIHdoaWxlIHByb3RlY3RlZCB0cmFm ZmljIGNvbnRpbnVlcyB0byBmbG93IG92ZXIgYnlwYXNzIHR1bm5lbHMuIA0KICAgQXMgbm9kZSBS NCBkb2VzIG5vdCByZWNlaXZlIFBhdGggbWVzc2FnZXMsIGl0IGRvZXMgbm90IHJlcm91dGUgUlNW UA0KICAgUmVzdiBtZXNzYWdlcyBvdmVyIHRoZSByZXZlcnNlIGJ5cGFzcyB0dW5uZWwuDQoNCjUu Mi4yLiAgQmVoYXZpb3IgQWZ0ZXIgTGluayBGYWlsdXJlIFRvIFJlLWNvcm91dGUNCg0KICAgVGhl IGRvd25zdHJlYW0gTVAgUjUgdGhhdCByZWNlaXZlcyByZXJvdXRlZCBwcm90ZWN0ZWQgTFNQIFJT VlAgUGF0aA0KICAgbWVzc2FnZSB0aHJvdWdoIHRoZSBieXBhc3MgdHVubmVsLCBpbiBhZGRpdGlv biB0byB0aGUgcmVndWxhciBNUA0KICAgcHJvY2Vzc2luZyBkZWZpbmVkIGluIFtSRkM0MDkwXSwg Z2V0cyBwcm9tb3RlZCB0byBhIFBvaW50IG9mIFJlbW90ZQ0KICAgUmVwYWlyIChQUlIpIHJvbGUg YW5kIHBlcmZvcm1zIHRoZSBmb2xsb3dpbmcgYWN0aW9ucyB0byByZS1jb3JvdXRlDQogICBzaWdu YWxpbmcgYW5kIGRhdGEgdHJhZmZpYyBvdmVyIHRoZSBzYW1lIHBhdGggaW4gdGhlIHJldmVyc2UN CiAgIGRpcmVjdGlvbjoNCg0KICAgbyAgRmluZHMgdGhlIGJ5cGFzcyB0dW5uZWwgaW4gdGhlIHJl dmVyc2UgZGlyZWN0aW9uIHRoYXQgdGVybWluYXRlcw0KICAgICAgb24gdGhlIGRvd25zdHJlYW0g UExSIFIzLiAgTm90ZTogdGhlIGRvd25zdHJlYW0gUExSIFIzJ3MgYWRkcmVzcw0KICAgICAgY2Fu IGJlIGV4dHJhY3RlZCBmcm9tIHRoZSAiSVBWNCB0dW5uZWwgc2VuZGVyIGFkZHJlc3MiIGluIHRo ZQ0KICAgICAgU0VOREVSX1RFTVBMQVRFIE9iamVjdCBvZiB0aGUgcHJvdGVjdGVkIExTUCAoc2Vl IFtSRkM0MDkwXSwNCiAgICAgIFNlY3Rpb24gNi4xLjEpLg0KDQogICBvICBJZiByZXZlcnNlIGJ5 cGFzcyB0dW5uZWwgaXMgZm91bmQgYW5kIHRoZSBwcm90ZWN0ZWQgTFNQIHRyYWZmaWMgaXMNCiAN Cg0KDQpUYWlsbG9uIGV0IGFsLiAgICAgICAgICBFeHBpcmVzIEphbnVhcnkgMTIsIDIwMTggICAg ICAgICAgICAgICBbUGFnZSAxM10NCgwNCkludGVybmV0LURyYWZ0ICAgICAgICAgICBGUlIgZm9y IFRFIEdNUExTIExTUHMgICAgICAgICAgICAgSnVseSAxMSwgMjAxNw0KDQoNCiAgICAgIG5vdCBh bHJlYWR5IHJlcm91dGVkIG92ZXIgdGhlIGZvdW5kIGJ5cGFzcyB0dW5uZWwgVDIsIHRoZSBQUlIg UjUNCiAgICAgIGFjdGl2YXRlcyBGUlIgcmVyb3V0ZSBwcm9jZWR1cmVzIHRvIGRpcmVjdCB0cmFm ZmljIG92ZXIgdGhlIGZvdW5kDQogICAgICBieXBhc3MgdHVubmVsIFQyIGluIHRoZSByZXZlcnNl IGRpcmVjdGlvbi4gIEluIGFkZGl0aW9uLCB0aGUgUFJSDQogICAgICBSNSBhbHNvIHJlcm91dGVz IFJTVlAgUmVzdiBvdmVyIHRoZSBieXBhc3MgdHVubmVsIFQyIGluIHRoZQ0KICAgICAgcmV2ZXJz ZSBkaXJlY3Rpb24uDQoNCiAgIG8gIElmIHJldmVyc2UgYnlwYXNzIHR1bm5lbCBpcyBub3QgZm91 bmQsIHRoZSBQUlIgUjUgaW1tZWRpYXRlbHkNCiAgICAgIHRlYXJzIGRvd24gdGhlIHByb3RlY3Rl ZCBMU1AuDQoNCg0KICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgIDwtIFJFU1YNCiAgICAgICAgICAgIFtSMV0tLS0tW1IyXS0tLS1bUjNdLS1YLS1bUjRdLS0t LVtSNV0tLS0tW1I2XQ0KICAgICAgICAgICAgIFBBVEggLT4gICAgICAgICAgXCAgICAgICAgICAg ICAgIC8NCiAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICBcICAgICAgICAgICAgIC8NCiAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgKzw8LS0tLS0tLT4+Kw0KICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgQnlwYXNzIFR1bm5lbCBUMg0KICAgICAgICAgICAgICAgICAgICAg ICAgICAgICB0cmFmZmljICsgc2lnbmFsaW5nDQoNCiAgICAgICAgICAgICAgICAgIFByb3RlY3Rl ZCBMU1A6ICB7UjEtUjItUjMtUjQtUjUtUjZ9DQogICAgICAgICAgICAgICAgICBSMydzIEJ5cGFz cyBUMjoge1IzLVI1fQ0KDQogICAgICAgIEZpZ3VyZSAzOiBGbG93IG9mIFJTVlAgc2lnbmFsaW5n IGFmdGVyIEZSUiBhbmQgcmUtY29yb3V0ZQ0KDQogICBGaWd1cmUgMyBkZXNjcmliZXMgdGhlIHBh dGggdGFrZW4gYnkgdGhlIHRyYWZmaWMgYW5kIHNpZ25hbGluZyBhZnRlcg0KICAgY29tcGxldGlu ZyByZS1jb3JvdXRlIG9mIGRhdGEgYW5kIHNpZ25hbGluZyBpbiB0aGUgZm9yd2FyZCBhbmQNCiAg IHJldmVyc2UgcGF0aHMgZGVzY3JpYmVkIGFib3ZlLiAgTm9kZSBSNCB3aWxsIHN0b3AgcmVjZWl2 aW5nIHRoZSBQYXRoDQogICBhbmQgUmVzdiBtZXNzYWdlcyBhbmQgaXQgd2lsbCB0aW1lb3V0IHRo ZSBSU1ZQIHNvZnQtc3RhdGUsIGhvd2V2ZXIsDQogICB0aGlzIHdpbGwgbm90IGNhdXNlIHRoZSBM U1AgdG8gYmUgdG9ybiBkb3duLiAgUlNWUCBzaWduYWxpbmcgYXQgbm9kZQ0KICAgUjIgaXMgbm90 IGFmZmVjdGVkIGJ5IHRoZSBGUlIgYW5kIHJlLWNvcm91dGluZy4NCg0KICAgSWYgZG93bnN0cmVh bSBNUCBSNSByZWNlaXZlcyBtdWx0aXBsZSBSU1ZQIFBhdGggbWVzc2FnZXMgdGhyb3VnaA0KICAg bXVsdGlwbGUgYnlwYXNzIHR1bm5lbHMgKGUuZy4sIGFzIGEgcmVzdWx0IG9mIG11bHRpcGxlIGZh aWx1cmVzKSwgdGhlDQogICBQUlIgU0hPVUxEIGlkZW50aWZ5IGEgYnlwYXNzIHR1bm5lbCB0aGF0 IHRlcm1pbmF0ZXMgb24gdGhlIGZhcnRoZXN0DQogICBkb3duc3RyZWFtIFBMUiBhbG9uZyB0aGUg cHJvdGVjdGVkIExTUCBwYXRoIChjbG9zZXN0IHRvIHRoZSBwcm90ZWN0ZWQNCiAgIGJpZGlyZWN0 aW9uYWwgTFNQIGhlYWQtZW5kKSBhbmQgYWN0aXZhdGUgdGhlIHJlcm91dGUgcHJvY2VkdXJlcw0K ICAgbWVudGlvbmVkIGFib3ZlLg0KDQo1LjIuMi4xLiAgUmUtY29yb3V0ZSBpbiBEYXRhLXBsYW5l IEFmdGVyIExpbmsgRmFpbHVyZQ0KDQogICBUaGUgZG93bnN0cmVhbSBNUCAodXBzdHJlYW0gUExS KSBNQVkgb3B0aW9uYWxseSBzdXBwb3J0IHJlLWNvcm91dGluZw0KICAgaW4gZGF0YS1wbGFuZSBh cyBmb2xsb3dzLiAgSWYgdGhlIGRvd25zdHJlYW0gTVAgaGFzIGFzc2lnbmVkIGENCiAgIGJpZGly ZWN0aW9uYWwgYnlwYXNzIHR1bm5lbCwgYXMgc29vbiBhcyB0aGUgZG93bnN0cmVhbSBNUCByZWNl aXZlcw0KICAgdGhlIHByb3RlY3RlZCBMU1AgcGFja2V0cyBvbiB0aGUgYnlwYXNzIHR1bm5lbCwg aXQgTUFZIHN3aXRjaCB0aGUNCiAgIHVwc3RyZWFtIHRyYWZmaWMgb24gdG8gdGhlIGJ5cGFzcyB0 dW5uZWwuICBJbiBvcmRlciB0byBpZGVudGlmeSB0aGUNCiAgIHByb3RlY3RlZCBMU1AgcGFja2V0 cyB0aHJvdWdoIHRoZSBieXBhc3MgdHVubmVsLCBQZW51bHRpbWF0ZSBIb3ANCiAgIFBvcHBpbmcg KFBIUCkgb2YgdGhlIGJ5cGFzcyB0dW5uZWwgTVVTVCBiZSBkaXNhYmxlZC4gIFRoZSBkb3duc3Ry ZWFtDQogICBNUCBjaGVja3Mgd2hldGhlciB0aGUgcHJvdGVjdGVkIExTUCBzaWduYWxpbmcgaXMg cmVyb3V0ZWQgb3ZlciB0aGUNCiAgIGZvdW5kIGJ5cGFzcyB0dW5uZWwsIGFuZCBpZiBub3QsIGl0 IHBlcmZvcm1zIHRoZSBzaWduYWxpbmcgcHJvY2VkdXJlDQogDQoNCg0KVGFpbGxvbiBldCBhbC4g ICAgICAgICAgRXhwaXJlcyBKYW51YXJ5IDEyLCAyMDE4ICAgICAgICAgICAgICAgW1BhZ2UgMTRd DQoMDQpJbnRlcm5ldC1EcmFmdCAgICAgICAgICAgRlJSIGZvciBURSBHTVBMUyBMU1BzICAgICAg ICAgICAgIEp1bHkgMTEsIDIwMTcNCg0KDQogICBkZXNjcmliZWQgaW4gU2VjdGlvbiA1LjIuMiBv ZiB0aGlzIGRvY3VtZW50Lg0KDQo1LjIuMy4gIFJldmVydGl2ZSBCZWhhdmlvciBBZnRlciBGYXN0 IFJlcm91dGUNCg0KICAgVGhlIHJldmVydGl2ZSBiZWhhdmlvciBkZWZpbmVkIGluIFtSRkM0MDkw XSwgU2VjdGlvbiA2LjUuMiwgaXMNCiAgIGFwcGxpY2FibGUgdG8gdGhlIG5vZGUgcHJvdGVjdGlv biBvZiBiaWRpcmVjdGlvbmFsIEdNUExTIExTUHMuICBXaGVuDQogICB1c2luZyB0aGUgbG9jYWwg cmV2ZXJ0aXZlIG1vZGUsIGFmdGVyIHRoZSBsaW5rIFIzLVI0IChpbiBGaWd1cmVzIDINCiAgIGFu ZCAzKSBpcyByZXN0b3JlZCwgZm9sbG93aW5nIG5vZGUgYmVoYXZpb3JzIGFwcGx5OiANCg0KICAg byAgVGhlIGRvd25zdHJlYW0gUExSIFIzIHN0YXJ0cyBzZW5kaW5nIHRoZSBQYXRoIG1lc3NhZ2Vz IGFuZCB0cmFmZmljDQogICAgICBmbG93IG9mIHRoZSBwcm90ZWN0ZWQgTFNQIG92ZXIgdGhlIHJl c3RvcmVkIGxpbmsgYW5kIHN0b3BzIHNlbmRpbmcNCiAgICAgIHRoZW0gb3ZlciB0aGUgYnlwYXNz IHR1bm5lbC4NCg0KICAgbyAgVGhlIHVwc3RyZWFtIFBMUiBSNCBzdGFydHMgc2VuZGluZyB0aGUg dHJhZmZpYyBmbG93IG9mIHRoZQ0KICAgICAgcHJvdGVjdGVkIExTUCBvdmVyIHRoZSByZXN0b3Jl ZCBsaW5rIHRvd2FyZHMgZG93bnN0cmVhbSBQTFIgUjMgYW5kDQogICAgICBmb3J3YXJkaW5nIHRo ZSBQYXRoIG1lc3NhZ2VzIHRvd2FyZHMgUFJSIFI1IGFuZCBzdG9wcyBzZW5kaW5nIHRoZQ0KICAg ICAgdHJhZmZpYyBvdmVyIHRoZSBieXBhc3MgdHVubmVsLg0KDQogICBvICBXaGVuIHVwc3RyZWFt IFBMUiBSNCByZWNlaXZlcyB0aGUgcHJvdGVjdGVkIExTUCBQYXRoIG1lc3NhZ2VzIG92ZXINCiAg ICAgIHRoZSByZXN0b3JlZCBsaW5rLCBpZiBub3QgYWxyZWFkeSBkb25lLCBpdCBzdGFydHMgc2Vu ZGluZyBSZXN2DQogICAgICBtZXNzYWdlcyBhbmQgdHJhZmZpYyBmbG93IG92ZXIgdGhlIHJlc3Rv cmVkIGxpbmsgdG93YXJkcw0KICAgICAgZG93bnN0cmVhbSBQTFIgUjMgYW5kIGZvcndhcmRpbmcg dGhlIFBhdGggbWVzc2FnZXMgdG93YXJkcyBQUlIgUjUNCiAgICAgIGFuZCBzdG9wcyBzZW5kaW5n IHRoZW0gb3ZlciB0aGUgYnlwYXNzIHR1bm5lbC4NCg0KICAgbyAgV2hlbiBQUlIgUjUgcmVjZWl2 ZXMgdGhlIHByb3RlY3RlZCBMU1AgUGF0aCBtZXNzYWdlcyBvdmVyIHRoZQ0KICAgICAgcmVzdG9y ZWQgcGF0aCwgaXQgc3RhcnRzIHNlbmRpbmcgUmVzdiBtZXNzYWdlcyBhbmQgdHJhZmZpYyBmbG93 DQogICAgICBvdmVyIHRoZSByZXN0b3JlZCBwYXRoIGFuZCBzdG9wcyBzZW5kaW5nIHRoZW0gb3Zl ciB0aGUgYnlwYXNzDQogICAgICB0dW5uZWwuDQoNCjUuMy4gIFVuaWRpcmVjdGlvbmFsIExpbmsg RmFpbHVyZXMNCg0KICAgVW5pZGlyZWN0aW9uYWwgbGluayBmYWlsdXJlcyBjYW4gcmVzdWx0IGlu IHRoZSB0cmFmZmljIGZsb3dpbmcgb24NCiAgIGFzeW1tZXRyaWMgcGF0aHMgaW4gdGhlIGZvcndh cmQgYW5kIHJldmVyc2UgZGlyZWN0aW9ucy4gIEluIGFkZGl0aW9uLA0KICAgdW5pZGlyZWN0aW9u YWwgbGluayBmYWlsdXJlcyBjYW4gY2F1c2UgUlNWUCBzb2Z0LXN0YXRlIHRpbWVvdXQgaW4gdGhl DQogICBjb250cm9sLXBsYW5lIGluIHNvbWUgY2FzZXMuICBBcyBhbiBleGFtcGxlLCBpZiB0aGUg dW5pZGlyZWN0aW9uYWwNCiAgIGxpbmsgZmFpbHVyZSBpcyBpbiB0aGUgdXBzdHJlYW0gZGlyZWN0 aW9uIChmcm9tIFI0IHRvIFIzIGluIEZpZ3VyZXMgMQ0KICAgYW5kIDIpLCB0aGUgZG93bnN0cmVh bSBQTFIgKG5vZGUgUjMpIGNhbiBzdG9wIHJlY2VpdmluZyB0aGUgUmVzdg0KICAgbWVzc2FnZXMg b2YgdGhlIHByb3RlY3RlZCBMU1AgZnJvbSB0aGUgdXBzdHJlYW0gUExSIChub2RlIFI0IGluDQog ICBGaWd1cmVzIDEgYW5kIDIpIGFuZCB0aGlzIGNhbiBjYXVzZSBSU1ZQIHNvZnQtc3RhdGUgdGlt ZW91dCB0byBvY2N1cg0KICAgb24gdGhlIGRvd25zdHJlYW0gUExSIChub2RlIFIzKS4NCg0KICAg QSB1bmlkaXJlY3Rpb25hbCBsaW5rIGZhaWx1cmUgaW4gdGhlIGRvd25zdHJlYW0gZGlyZWN0aW9u IChmcm9tIFIzIHRvDQogICBSNCBpbiBGaWd1cmVzIDEgYW5kIDIpLCBkb2VzIG5vdCBjYXVzZSBS U1ZQIHNvZnQtc3RhdGUgdGltZW91dCB3aGVuDQogICB1c2luZyB0aGUgRlJSIHByb2NlZHVyZXMg ZGVmaW5lZCBpbiB0aGlzIGRvY3VtZW50LCBzaW5jZSB0aGUgdXBzdHJlYW0NCiAgIFBMUiAobm9k ZSBSNCBpbiBGaWd1cmUgMSBhbmQgbm9kZSBSNSBpbiBGaWd1cmUgMikgdHJpZ2dlcnMgdGhlDQog ICByZS1jb3JvdXRlIHByb2NlZHVyZSAoZGVmaW5lZCBpbiBTZWN0aW9uIDUuMi4yIG9mIHRoaXMg ZG9jdW1lbnQpDQogICBhZnRlciByZWNlaXZpbmcgUlNWUCBQYXRoIG1lc3NhZ2VzIG9mIHRoZSBw cm90ZWN0ZWQgTFNQIG92ZXIgdGhlDQogICBieXBhc3MgdHVubmVsIGZyb20gdGhlIGRvd25zdHJl YW0gUExSIChub2RlIFIzIGluIEZpZ3VyZXMgMSBhbmQgMikuDQogDQoNCg0KVGFpbGxvbiBldCBh bC4gICAgICAgICAgRXhwaXJlcyBKYW51YXJ5IDEyLCAyMDE4ICAgICAgICAgICAgICAgW1BhZ2Ug MTVdDQoMDQpJbnRlcm5ldC1EcmFmdCAgICAgICAgICAgRlJSIGZvciBURSBHTVBMUyBMU1BzICAg ICAgICAgICAgIEp1bHkgMTEsIDIwMTcNCg0KDQo2LiAgRmFzdCBSZXJvdXRlIEZvciBCaWRpcmVj dGlvbmFsIEdNUExTIExTUHMgd2l0aCBPdXQtb2YtYmFuZCBTaWduYWxpbmcNCg0KICAgV2hlbiB1 c2luZyB0aGUgR01QTFMgb3V0LW9mLWJhbmQgc2lnbmFsaW5nIFtSRkMzNDczXSwgYWZ0ZXIgYSBs aW5rDQogICBmYWlsdXJlIGV2ZW50LCB0aGUgUlNWUCBtZXNzYWdlcyBhcmUgbm90IHJlcm91dGVk IG92ZXIgdGhlDQogICBiaWRpcmVjdGlvbmFsIGJ5cGFzcyB0dW5uZWwgYnkgdGhlIGRvd25zdHJl YW0gYW5kIHVwc3RyZWFtIFBMUnMgYnV0DQogICBpbnN0ZWFkIHJlcm91dGVkIG92ZXIgdGhlIGNv bnRyb2wtY2hhbm5lbHMgdG8gdGhlIGRvd25zdHJlYW0gYW5kDQogICB1cHN0cmVhbSBNUHMsIHJl c3BlY3RpdmVseS4NCg0KICAgVGhlIFJTVlAgc29mdC1zdGF0ZSB0aW1lb3V0IGFmdGVyIEZSUiBh cyBkZXNjcmliZWQgaW4gU2VjdGlvbiA1LjIgb2YNCiAgIHRoaXMgZG9jdW1lbnQgaXMgZXF1YWxs eSBhcHBsaWNhYmxlIHRvIHRoZSBHTVBMUyBvdXQtb2YtYmFuZA0KICAgc2lnbmFsaW5nIGFzIHRo ZSBSU1ZQIHNpZ25hbGluZyByZWZyZXNoZXMgY2FuIHN0b3AgcmVhY2hpbmcgY2VydGFpbg0KICAg bm9kZXMgYWxvbmcgdGhlIHByb3RlY3RlZCBMU1AgcGF0aCBhZnRlciB0aGUgZG93bnN0cmVhbSBh bmQgdXBzdHJlYW0NCiAgIFBMUnMgZmluaXNoIHJlcm91dGluZyBvZiB0aGUgc2lnbmFsaW5nIG1l c3NhZ2VzLiAgSG93ZXZlciwgdW5saWtlDQogICB3aXRoIHRoZSBpbi1iYW5kIHNpZ25hbGluZywg dW5pZGlyZWN0aW9uYWwgbGluayBmYWlsdXJlcyBhcyBkZXNjcmliZWQNCiAgIGluIFNlY3Rpb24g NS4zIG9mIHRoaXMgZG9jdW1lbnQgZG8gbm90IHJlc3VsdCBpbiBzb2Z0LXN0YXRlIHRpbWVvdXQN CiAgIHdpdGggR01QTFMgb3V0LW9mLWJhbmQgc2lnbmFsaW5nLiAgQXBhcnQgZnJvbSB0aGlzLCB0 aGUgRlJSIHByb2NlZHVyZQ0KICAgZGVzY3JpYmVkIGluIFNlY3Rpb24gNSBvZiB0aGlzIGRvY3Vt ZW50IGlzIGVxdWFsbHkgYXBwbGljYWJsZSB0byB0aGUNCiAgIEdNUExTIG91dC1vZi1iYW5kIHNp Z25hbGluZy4NCg0KDQo3LiAgTWVzc2FnZSBhbmQgT2JqZWN0IERlZmluaXRpb25zDQoNCjcuMS4g IEJZUEFTU19BU1NJR05NRU5UIFN1Ym9iamVjdA0KDQogICBUaGUgQllQQVNTX0FTU0lHTk1FTlQg c3Vib2JqZWN0IGlzIHVzZWQgdG8gaW5mb3JtIHRoZSBkb3duc3RyZWFtIE1QDQogICBvZiB0aGUg YnlwYXNzIHR1bm5lbCBiZWluZyBhc3NpZ25lZCBieSB0aGUgUExSLiAgVGhpcyBjYW4gYmUgdXNl ZCB0bw0KICAgY29vcmRpbmF0ZSB0aGUgYnlwYXNzIHR1bm5lbCBhc3NpZ25tZW50IGZvciB0aGUg cHJvdGVjdGVkIExTUCBieSB0aGUNCiAgIGRvd25zdHJlYW0gYW5kIHVwc3RyZWFtIFBMUnMgaW4g dGhlIGZvcndhcmQgYW5kIHJldmVyc2UgZGlyZWN0aW9ucw0KICAgcmVzcGVjdGl2ZWx5IHByaW9y IG9yIGFmdGVyIHRoZSBmYWlsdXJlIG9jY3VycmVuY2UuICANCg0KICAgVGhpcyBzdWJvYmplY3Qg U0hPVUxEIGJlIGluc2VydGVkIGludG8gdGhlIFBhdGggUlJPIGJ5IHRoZSBkb3duc3RyZWFtDQog ICBQTFIuICBJdCBTSE9VTEQgTk9UIGJlIGluc2VydGVkIGludG8gYW4gUlJPIGJ5IGEgbm9kZSB3 aGljaCBpcyBub3QgYQ0KICAgZG93bnN0cmVhbSBQTFIuICBJdCBNVVNUIE5PVCBiZSBjaGFuZ2Vk IGJ5IGRvd25zdHJlYW0gTFNScyBhbmQgTVVTVA0KICAgTk9UIGJlIGFkZGVkIHRvIGEgUmVzdiBS Uk8uDQoNCiAgIFRoZSBCWVBBU1NfQVNTSUdOTUVOVCBJUHY0IHN1Ym9iamVjdCBpbiBSUk8gaGFz IHRoZSBmb2xsb3dpbmcgZm9ybWF0Og0KDQogICAgICAgIDAgICAgICAgICAgICAgICAgICAgMSAg ICAgICAgICAgICAgICAgICAyICAgICAgICAgICAgICAgICAgIDMNCiAgICAgIDAgMSAyIDMgNCA1 IDYgNyA4IDkgMCAxIDIgMyA0IDUgNiA3IDggOSAwIDEgMiAzIDQgNSA2IDcgOCA5IDAgMQ0KICAg ICArLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0r LSstKy0rLSstKw0KICAgICB8ICAgIFR5cGU6VEJBNSAgfCAgICAgTGVuZ3RoICAgIHwgICAgICBC eXBhc3MgVHVubmVsIElEICAgICAgICAgfA0KICAgICArLSstKy0rLSstKy0rLSstKy0rLSstKy0r LSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKw0KICAgICB8ICAgICAgICAg ICAgICAgSVB2NCBCeXBhc3MgRGVzdGluYXRpb24gQWRkcmVzcyAgICAgICAgICAgICAgICAgfA0K ICAgICArLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSst Ky0rLSstKy0rLSstKw0KDQogICAgICAgICAgICAgICAgRmlndXJlIDQ6IEJZUEFTUyBBU1NJR05N RU5UIElQdjQgUlJPIFN1Ym9iamVjdA0KDQogICAgIFR5cGUNCiANCg0KDQpUYWlsbG9uIGV0IGFs LiAgICAgICAgICBFeHBpcmVzIEphbnVhcnkgMTIsIDIwMTggICAgICAgICAgICAgICBbUGFnZSAx Nl0NCgwNCkludGVybmV0LURyYWZ0ICAgICAgICAgICBGUlIgZm9yIFRFIEdNUExTIExTUHMgICAg ICAgICAgICAgSnVseSAxMSwgMjAxNw0KDQoNCiAgICAgICAgIERvd25zdHJlYW0gQnlwYXNzIEFz c2lnbm1lbnQuICBWYWx1ZSBpcyBUQkE1IGJ5IElBTkEuDQoNCiAgICAgTGVuZ3RoDQoNCiAgICAg ICAgIFRoZSBMZW5ndGggY29udGFpbnMgdGhlIHRvdGFsIGxlbmd0aCBvZiB0aGUgc3Vib2JqZWN0 IGluIGJ5dGVzLA0KICAgICAgICAgaW5jbHVkaW5nIHRoZSBUeXBlIGFuZCBMZW5ndGggZmllbGRz LiAgVGhlIGxlbmd0aCBpcyA4IGJ5dGVzLg0KDQogICAgIEJ5cGFzcyBUdW5uZWwgSUQNCg0KICAg ICAgICAgVGhlIGJ5cGFzcyB0dW5uZWwgaWRlbnRpZmllciAoMTYgYml0cykuDQoNCiAgICAgQnlw YXNzIERlc3RpbmF0aW9uIEFkZHJlc3MNCg0KICAgICAgICAgVGhlIGJ5cGFzcyB0dW5uZWwgSVB2 NCBkZXN0aW5hdGlvbiBhZGRyZXNzLg0KDQoNCiAgIFRoZSBCWVBBU1NfQVNTSUdOTUVOVCBJUHY2 IHN1Ym9iamVjdCBpbiBSUk8gaGFzIHRoZSBmb2xsb3dpbmcgZm9ybWF0Og0KDQogICAgICAgIDAg ICAgICAgICAgICAgICAgICAgMSAgICAgICAgICAgICAgICAgICAyICAgICAgICAgICAgICAgICAg IDMNCiAgICAgIDAgMSAyIDMgNCA1IDYgNyA4IDkgMCAxIDIgMyA0IDUgNiA3IDggOSAwIDEgMiAz IDQgNSA2IDcgOCA5IDAgMQ0KICAgICArLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSst Ky0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKw0KICAgICB8ICAgIFR5cGU6VEJBNiAgfCAg ICAgTGVuZ3RoICAgIHwgICAgICBCeXBhc3MgVHVubmVsIElEICAgICAgICAgfA0KICAgICArLSst Ky0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0r LSstKw0KICAgICB8ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgfA0KICAgICArICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgKw0KICAgICB8ICAgICAgICAgICAgICAg SVB2NiBCeXBhc3MgRGVzdGluYXRpb24gQWRkcmVzcyAgICAgICAgICAgICAgICAgfA0KICAgICAr ICAgICAgICAgICAgICAgICAgICAgICAgICAoMTYgYnl0ZXMpICAgICAgICAgICAgICAgICAgICAg ICAgICAgKw0KICAgICB8ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgfA0KICAgICArICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgKw0KICAgICB8ICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgfA0KICAg ICArLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0r LSstKy0rLSstKw0KDQogICAgICAgICAgICAgICAgRmlndXJlIDU6IEJZUEFTU19BU1NJR05NRU5U IElQdjYgUlJPIFN1Ym9iamVjdCANCg0KICAgICBUeXBlDQoNCiAgICAgICAgIERvd25zdHJlYW0g QnlwYXNzIEFzc2lnbm1lbnQuICBWYWx1ZSBpcyBUQkE2IGJ5IElBTkEuDQoNCiAgICAgTGVuZ3Ro DQoNCiAgICAgICAgIFRoZSBMZW5ndGggY29udGFpbnMgdGhlIHRvdGFsIGxlbmd0aCBvZiB0aGUg c3Vib2JqZWN0IGluIGJ5dGVzLA0KICAgICAgICAgaW5jbHVkaW5nIHRoZSBUeXBlIGFuZCBMZW5n dGggZmllbGRzLiAgVGhlIGxlbmd0aCBpcyAyMCBieXRlcy4NCg0KICAgICBCeXBhc3MgVHVubmVs IElEDQoNCiAgICAgICAgIFRoZSBieXBhc3MgdHVubmVsIGlkZW50aWZpZXIgKDE2IGJpdHMpLg0K DQogICAgIEJ5cGFzcyBEZXN0aW5hdGlvbiBBZGRyZXNzDQogDQoNCg0KVGFpbGxvbiBldCBhbC4g ICAgICAgICAgRXhwaXJlcyBKYW51YXJ5IDEyLCAyMDE4ICAgICAgICAgICAgICAgW1BhZ2UgMTdd DQoMDQpJbnRlcm5ldC1EcmFmdCAgICAgICAgICAgRlJSIGZvciBURSBHTVBMUyBMU1BzICAgICAg ICAgICAgIEp1bHkgMTEsIDIwMTcNCg0KDQogICAgICAgICBUaGUgYnlwYXNzIHR1bm5lbCBJUHY2 IGRlc3RpbmF0aW9uIGFkZHJlc3MuDQoNCg0KNy4yLiAgRlJSIEJ5cGFzcyBBc3NpZ25tZW50IEVy cm9yIE5vdGlmeSBNZXNzYWdlDQoNCiAgIE5ldyBFcnJvci1jb2RlIC0gRlJSIEJ5cGFzcyBBc3Np Z25tZW50IEVycm9yICh2YWx1ZTogVEJBMSkgYW5kIGl0cw0KICAgc3ViLWNvZGVzIGFyZSBkZWZp bmVkIGZvciB0aGUgRVJST1JfU1BFQyBPYmplY3QgKEMtVHlwZSA2KSBbUkZDMjIwNV0NCiAgIGlu IHRoaXMgZG9jdW1lbnQsIHRoYXQgaXMgY2FycmllZCBieSB0aGUgTm90aWZ5IG1lc3NhZ2UgKFR5 cGUgMjEpDQogICBkZWZpbmVkIGluIFtSRkMzNDczXSBTZWN0aW9uIDQuMy4gIFRoaXMgRXJyb3Ig bWVzc2FnZSBpcyBzZW50IGJ5IHRoZQ0KICAgdXBzdHJlYW0gUExSIHRvIHRoZSBkb3duc3RyZWFt IFBMUiB0byBub3RpZnkgYSBieXBhc3MgYXNzaWdubWVudA0KICAgZXJyb3IuICBJbiB0aGUgTm90 aWZ5IG1lc3NhZ2UsIHRoZSBJUCBkZXN0aW5hdGlvbiBhZGRyZXNzIGlzIHNldCB0bw0KICAgdGhl IG5vZGUgYWRkcmVzcyBvZiB0aGUgZG93bnN0cmVhbSBQTFIgdGhhdCBoYWQgaW5pdGlhdGVkIHRo ZSBieXBhc3MNCiAgIGFzc2lnbm1lbnQuICBJbiB0aGUgRVJST1JfU1BFQyBPYmplY3QsIElQIGFk ZHJlc3MgaXMgc2V0IHRvIHRoZSBub2RlDQogICBhZGRyZXNzIG9mIHRoZSB1cHN0cmVhbSBQTFIg dGhhdCBkZXRlY3RlZCB0aGUgYnlwYXNzIGFzc2lnbm1lbnQNCiAgIGVycm9yLiAgVGhpcyBFcnJv ciBNVVNUIE5PVCBiZSBzZW50IGluIGEgUGF0aCBFcnJvciBtZXNzYWdlLiAgVGhpcw0KICAgRXJy b3IgZG9lcyBub3QgY2F1c2UgdGhlIHByb3RlY3RlZCBMU1AgdG8gYmUgdG9ybiBkb3duLg0KDQoN CjguICBDb21wYXRpYmlsaXR5DQoNCiAgIE5ldyBSU1ZQIHN1Ym9iamVjdCBCWVBBU1NfQVNTSUdO TUVOVCBpcyBkZWZpbmVkIGZvciBSRUNPUkRfUk9VVEUNCiAgIE9iamVjdCBpbiB0aGlzIGRvY3Vt ZW50IHRoYXQgaXMgY2FycmllZCBpbiB0aGUgUlNWUCBQYXRoIG1lc3NhZ2UuIA0KICAgUGVyIFtS RkMzMjA5XSwgbm9kZXMgbm90IHN1cHBvcnRpbmcgdGhpcyBzdWJvYmplY3Qgd2lsbCBpZ25vcmUg dGhlDQogICBzdWJvYmplY3QgYnV0IGZvcndhcmQgaXQgd2l0aG91dCBtb2RpZmljYXRpb24uICBB cyBkZXNjcmliZWQgaW4NCiAgIFNlY3Rpb24gNyBvZiB0aGlzIGRvY3VtZW50LCB0aGlzIHN1Ym9i amVjdCBpcyBub3QgY2FycmllZCBpbiB0aGUgUlNWUA0KICAgUmVzdiBtZXNzYWdlIGFuZCBpcyBp Z25vcmVkIGJ5IHNlbmRpbmcgdGhlIE5vdGlmeSBtZXNzYWdlIGZvciBGUlINCiAgIEJ5cGFzcyBB c3NpZ25tZW50IEVycm9yICh3aXRoIFN1YmNvZGU6IEJ5cGFzcyBBc3NpZ25tZW50IENhbm5vdCBC ZQ0KICAgVXNlZCkgZGVmaW5lZCBpbiB0aGlzIGRvY3VtZW50LiAgTm9kZXMgbm90IHN1cHBvcnRp bmcgdGhlIE5vdGlmeQ0KICAgbWVzc2FnZSBkZWZpbmVkIGluIHRoaXMgZG9jdW1lbnQgd2lsbCBp Z25vcmUgaXQgYnV0IGZvcndhcmQgaXQNCiAgIHdpdGhvdXQgbW9kaWZpY2F0aW9uLg0KDQoNCjku ICBTZWN1cml0eSBDb25zaWRlcmF0aW9ucw0KDQogICBUaGlzIGRvY3VtZW50IGludHJvZHVjZXMg YSBuZXcgQllQQVNTX0FTU0lHTk1FTlQgc3Vib2JqZWN0IGZvciB0aGUNCiAgIFJFQ09SRF9ST1VU RSBPYmplY3QgdGhhdCBpcyBjYXJyaWVkIGluIGFuIFJTVlAgc2lnbmFsaW5nIG1lc3NhZ2UuIA0K ICAgVGh1cyBpbiB0aGUgZXZlbnQgb2YgdGhlIGludGVyY2VwdGlvbiBvZiBhIHNpZ25hbGluZyBt ZXNzYWdlLCBtb3JlDQogICBpbmZvcm1hdGlvbiBhYm91dCBMU1AncyBmYXN0IHJlcm91dGUgcHJv dGVjdGlvbiBjYW4gYmUgZGVkdWNlZCB0aGFuDQogICB3YXMgcHJldmlvdXNseSB0aGUgY2FzZS4g IFRoaXMgaXMganVkZ2VkIHRvIGJlIGEgdmVyeSBtaW5vciBzZWN1cml0eQ0KICAgcmlzayBhcyB0 aGlzIGluZm9ybWF0aW9uIGlzIGFscmVhZHkgYXZhaWxhYmxlIGJ5IG90aGVyIG1lYW5zLiAgVGhl DQogICBOb3RpZnkgbWVzc2FnZSBmb3IgRlJSIEJ5cGFzcyBBc3NpZ25tZW50IEVycm9yIGRlZmlu ZWQgaW4gdGhpcw0KICAgZG9jdW1lbnQgZG9lcyBub3QgcmVzdWx0IGluIHRlYXItZG93biBvZiB0 aGUgcHJvdGVjdGVkIExTUCBhbmQgaXMgbm90DQogICBzZXJ2aWNlIGFmZmVjdGluZy4NCg0KICAg T3RoZXJ3aXNlLCB0aGlzIGRvY3VtZW50IGludHJvZHVjZXMgbm8gYWRkaXRpb25hbCBzZWN1cml0 eQ0KICAgY29uc2lkZXJhdGlvbnMuICBGb3IgZ2VuZXJhbCBkaXNjdXNzaW9uIG9uIE1QTFMgYW5k IEdNUExTIHJlbGF0ZWQNCiAgIHNlY3VyaXR5IGlzc3Vlcywgc2VlIHRoZSBNUExTL0dNUExTIHNl Y3VyaXR5IGZyYW1ld29yayBbUkZDNTkyMF0uDQoNCiANCg0KDQpUYWlsbG9uIGV0IGFsLiAgICAg ICAgICBFeHBpcmVzIEphbnVhcnkgMTIsIDIwMTggICAgICAgICAgICAgICBbUGFnZSAxOF0NCgwN CkludGVybmV0LURyYWZ0ICAgICAgICAgICBGUlIgZm9yIFRFIEdNUExTIExTUHMgICAgICAgICAg ICAgSnVseSAxMSwgMjAxNw0KDQoNCjEwLiAgSUFOQSBDb25zaWRlcmF0aW9ucw0KDQoxMC4xLiAg QllQQVNTX0FTU0lHTk1FTlQgU3Vib2JqZWN0IA0KDQogICBJQU5BIG1hbmFnZXMgdGhlICJSU1ZQ IFBBUkFNRVRFUlMiIHJlZ2lzdHJ5IGxvY2F0ZWQgYXQNCiAgIDxodHRwOi8vd3d3LmlhbmEub3Jn L2Fzc2lnbm1lbnRzL3JzdnAtcGFyYW1ldGVycz4uICBJQU5BIGlzIHJlcXVlc3RlZA0KICAgdG8g YXNzaWduIGEgdmFsdWUgZm9yIHRoZSBuZXcgQllQQVNTX0FTU0lHTk1FTlQgc3Vib2JqZWN0IGlu IHRoZQ0KICAgIkNsYXNzIFR5cGUgMjEgUk9VVEVfUkVDT1JEIC0gVHlwZSAxIFJvdXRlIFJlY29y ZCIgcmVnaXN0cnkuIA0KDQogICBUaGlzIGRvY3VtZW50IGludHJvZHVjZXMgYSBuZXcgc3Vib2Jq ZWN0IGZvciBSRUNPUkRfUk9VVEUgT2JqZWN0Og0KDQogICArLS0tLS0tLS0rLS0tLS0tLS0tLS0t LS0tLS0tLSstLS0tLS0tLS0rLS0tLS0tLS0tKy0tLS0tLS0tLS0tLS0tLSsNCiAgIHwgVHlwZSAg IHwgRGVzY3JpcHRpb24gICAgICAgfCBDYXJyaWVkIHwgQ2FycmllZCB8IFJlZmVyZW5jZSAgICAg fA0KICAgfCAgICAgICAgfCAgICAgICAgICAgICAgICAgICB8IGluIFBhdGggfCBpbiBSZXN2IHwg ICAgICAgICAgICAgICB8DQogICArLS0tLS0tLS0rLS0tLS0tLS0tLS0tLS0tLS0tLSstLS0tLS0t LS0rLS0tLS0tLS0tKy0tLS0tLS0tLS0tLS0tLSsNCiAgIHwgVEJBNSBCeXwgQllQQVNTX0FTU0lH Tk1FTlQgfCBZZXMgICAgIHwgTm8gICAgICB8IFRoaXMgZG9jdW1lbnQgfA0KICAgfCBJQU5BICAg fCBJUHY0IHN1Ym9iamVjdCAgICB8ICAgICAgICAgfCAgICAgICAgIHwgICAgICAgICAgICAgICB8 DQogICArLS0tLS0tLS0rLS0tLS0tLS0tLS0tLS0tLS0tLSstLS0tLS0tLS0rLS0tLS0tLS0tKy0t LS0tLS0tLS0tLS0tLSsNCiAgIHwgVEJBNiBCeXwgQllQQVNTX0FTU0lHTk1FTlQgfCBZZXMgICAg IHwgTm8gICAgICB8IFRoaXMgZG9jdW1lbnQgfA0KICAgfCBJQU5BICAgfCBJUHY2IHN1Ym9iamVj dCAgICB8ICAgICAgICAgfCAgICAgICAgIHwgICAgICAgICAgICAgICB8DQogICArLS0tLS0tLS0r LS0tLS0tLS0tLS0tLS0tLS0tLSstLS0tLS0tLS0rLS0tLS0tLS0tKy0tLS0tLS0tLS0tLS0tLSsN Cg0KDQoxMC4yLiAgRlJSIEJ5cGFzcyBBc3NpZ25tZW50IEVycm9yIE5vdGlmeSBNZXNzYWdlDQoN CiAgIElBTkEgbWFpbnRhaW5zIHRoZSAiUmVzb3VyY2UgUmVzZXJ2YXRpb24gUHJvdG9jb2wgKFJT VlApIFBhcmFtZXRlcnMiDQogICByZWdpc3RyeSAoc2VlIDxodHRwOi8vd3d3LmlhbmEub3JnL2Fz c2lnbm1lbnRzL3JzdnAtcGFyYW1ldGVycz4pLiANCiAgIFRoZSAiRXJyb3IgQ29kZXMgYW5kIEds b2JhbGx5LURlZmluZWQgRXJyb3IgVmFsdWUgU3ViLUNvZGVzIg0KICAgc3VicmVnaXN0cnkgaXMg aW5jbHVkZWQgaW4gdGhpcyByZWdpc3RyeS4NCg0KICAgVGhpcyByZWdpc3RyeSBoYXMgYmVlbiBl eHRlbmRlZCBmb3IgdGhlIG5ldyBFcnJvci1jb2RlIGFuZCBTdWItY29kZXMNCiAgIGRlZmluZWQg aW4gdGhpcyBkb2N1bWVudCBhcyBmb2xsb3dzOg0KDQogICBvICBFcnJvci1jb2RlIFRCQTE6IEZS UiBCeXBhc3MgQXNzaWdubWVudCBFcnJvciANCg0KICAgbyAgU3ViLWNvZGUgVEJBMjogQnlwYXNz IEFzc2lnbm1lbnQgQ2Fubm90IEJlIFVzZWQgDQoNCiAgIG8gIFN1Yi1jb2RlIFRCQTM6IEJ5cGFz cyBUdW5uZWwgTm90IEZvdW5kIA0KDQogICBvICBTdWItY29kZSBUQkE0OiBPbmUtdG8tb25lIEJ5 cGFzcyBBbHJlYWR5IEluLXVzZSANCg0KDQoNCg0KDQoNCg0KDQogDQoNCg0KVGFpbGxvbiBldCBh bC4gICAgICAgICAgRXhwaXJlcyBKYW51YXJ5IDEyLCAyMDE4ICAgICAgICAgICAgICAgW1BhZ2Ug MTldDQoMDQpJbnRlcm5ldC1EcmFmdCAgICAgICAgICAgRlJSIGZvciBURSBHTVBMUyBMU1BzICAg ICAgICAgICAgIEp1bHkgMTEsIDIwMTcNCg0KDQoxMS4gIFJlZmVyZW5jZXMNCg0KMTEuMS4gIE5v cm1hdGl2ZSBSZWZlcmVuY2VzDQoNCiAgIFtSRkMyMTE5XSAgQnJhZG5lciwgUy4sICJLZXkgd29y ZHMgZm9yIHVzZSBpbiBSRkNzIHRvIEluZGljYXRlDQogICAgICAgICAgICAgIFJlcXVpcmVtZW50 IExldmVscyIsIEJDUCAxNCwgUkZDIDIxMTksIE1hcmNoIDE5OTcuDQoNCiAgIFtSRkMyMjA1XSAg QnJhZGVuLCBSLiwgRWQuLCBaaGFuZywgTC4sIEJlcnNvbiwgUy4sIEhlcnpvZywgUy4sIGFuZCBT Lg0KICAgICAgICAgICAgICBKYW1pbiwgIlJlc291cmNlIFJlU2VyVmF0aW9uIFByb3RvY29sIChS U1ZQKSAtLSBWZXJzaW9uIDENCiAgICAgICAgICAgICAgRnVuY3Rpb25hbCBTcGVjaWZpY2F0aW9u IiwgUkZDIDIyMDUsIFNlcHRlbWJlciAxOTk3Lg0KDQogICBbUkZDMzIwOV0gIEF3ZHVjaGUsIEQu LCBCZXJnZXIsIEwuLCBHYW4sIEQuLCBMaSwgVC4sIFNyaW5pdmFzYW4sIFYuLA0KICAgICAgICAg ICAgICBhbmQgRy4gU3dhbGxvdywgIlJTVlAtVEU6IEV4dGVuc2lvbnMgdG8gUlNWUCBmb3IgTFNQ DQogICAgICAgICAgICAgIFR1bm5lbHMiLCBSRkMgMzIwOSwgRGVjZW1iZXIgMjAwMS4NCg0KICAg W1JGQzM0NzNdICBCZXJnZXIsIEwuLCBFZC4sICJHZW5lcmFsaXplZCBNdWx0aS1Qcm90b2NvbCBM YWJlbA0KICAgICAgICAgICAgICBTd2l0Y2hpbmcgKEdNUExTKSBTaWduYWxpbmcgUmVzb3VyY2Ug UmVzZXJWYXRpb24gUHJvdG9jb2wtDQogICAgICAgICAgICAgIFRyYWZmaWMgRW5naW5lZXJpbmcg KFJTVlAtVEUpIEV4dGVuc2lvbnMiLCBSRkMgMzQ3MywNCiAgICAgICAgICAgICAgSmFudWFyeSAy MDAzLg0KDQogICBbUkZDNDA5MF0gIFBhbiwgUC4sIEVkLiwgU3dhbGxvdywgRy4sIEVkLiwgYW5k IEEuIEF0bGFzLCBFZC4sICJGYXN0DQogICAgICAgICAgICAgIFJlcm91dGUgRXh0ZW5zaW9ucyB0 byBSU1ZQLVRFIGZvciBMU1AgVHVubmVscyIsIFJGQyA0MDkwLA0KICAgICAgICAgICAgICBNYXkg MjAwNS4NCg0KICAgW1JGQzQ1NjFdICBWYXNzZXVyLCBKLlAuLCBFZC4sIEFsaSwgWi4sIGFuZCBT LiBTaXZhYmFsYW4sICJEZWZpbml0aW9uDQogICAgICAgICAgICAgIG9mIGEgUmVjb3JkIFJvdXRl IE9iamVjdCAoUlJPKSBOb2RlLUlkIFN1Yi1PYmplY3QiLCBSRkMNCiAgICAgICAgICAgICAgNDU2 MSwgSnVuZSAyMDA2Lg0KDQoxMS4yLiAgSW5mb3JtYXRpdmUgUmVmZXJlbmNlcw0KDQogICBbUkZD MzQ3MV0gIEJlcmdlciwgTC4sIEVkaXRvciwgIkdlbmVyYWxpemVkIE11bHRpLVByb3RvY29sIExh YmVsDQogICAgICAgICAgICAgIFN3aXRjaGluZyAoR01QTFMpIFNpZ25hbGluZyBGdW5jdGlvbmFs IERlc2NyaXB0aW9uIiwgUkZDDQogICAgICAgICAgICAgIDM0NzEsIEphbnVhcnkgMjAwMy4NCg0K ICAgW1JGQzQ5OTBdICBTaGlvbW90bywgSy4sIFBhcG5lamEsIFIuLCBhbmQgUi4gUmFiYmF0LCAi VXNlIG9mDQogICAgICAgICAgICAgIEFkZHJlc3NlcyBpbiBHZW5lcmFsaXplZCBNdWx0aXByb3Rv Y29sIExhYmVsIFN3aXRjaGluZw0KICAgICAgICAgICAgICAoR01QTFMpIE5ldHdvcmtzIiwgUkZD IDQ5OTAsIFNlcHRlbWJlciAyMDA3Lg0KDQogICBbUkZDNTkyMF0gIEZhbmcsIEwuLCBFZC4sICJT ZWN1cml0eSBGcmFtZXdvcmsgZm9yIE1QTFMgYW5kIEdNUExTDQogICAgICAgICAgICAgIE5ldHdv cmtzIiwgUkZDIDU5MjAsIEp1bHkgMjAxMC4NCg0KICAgW1JGQzYzNzhdICBXZWluZ2FydGVuLCBZ LiwgQnJ5YW50LCBTLiwgT3Nib3JuZSwgRS4sIFNwcmVjaGVyLCBOLiwgYW5kDQogICAgICAgICAg ICAgIEEuIEZ1bGlnbm9saSwgIk1QTFMgVHJhbnNwb3J0IFByb2ZpbGUgKE1QTFMtVFApIExpbmVh cg0KICAgICAgICAgICAgICBQcm90ZWN0aW9uIiwgUkZDIDYzNzgsIE9jdG9iZXIgMjAxMS4NCg0K ICAgW1JGQzc1NTFdICBaaGFuZywgRi4sIEVkLiwgSmluZywgUi4sIGFuZCBHYW5kaGksIFIuLCBF ZC4sICJSU1ZQLVRFDQogICAgICAgICAgICAgIEV4dGVuc2lvbnMgZm9yIEFzc29jaWF0ZWQgQmlk aXJlY3Rpb25hbCBMU1BzIiwgUkZDIDc1NTEsDQogICAgICAgICAgICAgIE1heSAyMDE1Lg0KIA0K DQoNClRhaWxsb24gZXQgYWwuICAgICAgICAgIEV4cGlyZXMgSmFudWFyeSAxMiwgMjAxOCAgICAg ICAgICAgICAgIFtQYWdlIDIwXQ0KDA0KSW50ZXJuZXQtRHJhZnQgICAgICAgICAgIEZSUiBmb3Ig VEUgR01QTFMgTFNQcyAgICAgICAgICAgICBKdWx5IDExLCAyMDE3DQoNCg0KQWNrbm93bGVkZ2Vt ZW50cw0KDQogICBBdXRob3JzIHdvdWxkIGxpa2UgdG8gdGhhbmsgR2VvcmdlIFN3YWxsb3cgZm9y IG1hbnkgdXNlZnVsIGNvbW1lbnRzDQogICBhbmQgc3VnZ2VzdGlvbnMuICBBdXRob3JzIHdvdWxk IGxpa2UgdG8gdGhhbmsgTG91IEJlcmdlciBmb3IgdGhlDQogICBndWlkYW5jZSBvbiB0aGlzIHdv cmsgYW5kIGZvciBwcm92aWRpbmcgcmV2aWV3IGNvbW1lbnRzLiAgQXV0aG9ycw0KICAgd291bGQg YWxzbyBsaWtlIHRvIHRoYW5rIE5vYm8gQWtpeWEsIExvYSBBbmRlcnNzb24sIE1hdHQgSGFydGxl eSwNCiAgIEhpbWFuc2h1IFNoYWgsIEdyZWdvcnkgTWlyc2t5IGFuZCBNYWNoIENoZW4gZm9yIHJl dmlld2luZyB0aGlzDQogICBkb2N1bWVudCBhbmQgcHJvdmlkaW5nIHZhbHVhYmxlIGNvbW1lbnRz LiAgQSBzcGVjaWFsIHRoYW5rcyB0byBBZHJpYW4NCiAgIEZhcnJlbCBmb3IgaGlzIHRob3JvdWdo IHJldmlldyBvZiB0aGlzIGRvY3VtZW50Lg0KDQoNCkNvbnRyaWJ1dG9ycw0KDQoNCiAgIEZyZWRl cmljIEpvdW5heQ0KICAgT3JhbmdlIA0KICAgQ0gNCg0KICAgRU1haWw6IGZyZWRlcmljLmpvdW5h eUBzYWx0LmNoDQoNCg0KICAgTGl6aG9uZyBKaW4NCiAgIFNoYW5naGFpDQogICBDTg0KDQogICBF TWFpbDogbGl6aG8uamluQGdtYWlsLmNvbQ0KDQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0K DQoNCg0KDQoNCg0KDQogDQoNCg0KVGFpbGxvbiBldCBhbC4gICAgICAgICAgRXhwaXJlcyBKYW51 YXJ5IDEyLCAyMDE4ICAgICAgICAgICAgICAgW1BhZ2UgMjFdDQoMDQpJbnRlcm5ldC1EcmFmdCAg ICAgICAgICAgRlJSIGZvciBURSBHTVBMUyBMU1BzICAgICAgICAgICAgIEp1bHkgMTEsIDIwMTcN Cg0KDQpBdXRob3JzJyBBZGRyZXNzZXMNCg0KDQogICBNaWtlIFRhaWxsb24NCiAgIENpc2NvIFN5 c3RlbXMsIEluYy4NCg0KICAgRU1haWw6IG10YWlsbG9uQGNpc2NvLmNvbQ0KDQoNCiAgIFRhcmVr IFNhYWQgKGVkaXRvcikNCiAgIENpc2NvIFN5c3RlbXMsIEluYy4NCg0KICAgRU1haWw6IHRzYWFk QGNpc2NvLmNvbQ0KDQoNCiAgIFJha2VzaCBHYW5kaGkgKGVkaXRvcikNCiAgIENpc2NvIFN5c3Rl bXMsIEluYy4NCg0KICAgRU1haWw6IHJnYW5kaGlAY2lzY28uY29tDQoNCg0KICAgWmFmYXIgQWxp DQogICBDaXNjbyBTeXN0ZW1zLCBJbmMuDQoNCiAgIEVNYWlsOiB6YWxpQGNpc2NvLmNvbQ0KDQoN CiAgIE1hbmF2IEJoYXRpYQ0KICAgTm9raWENCiAgIEJhbmdsb3JlLCBJbmRpYQ0KDQogICBFTWFp bDogbWFuYXYuYmhhdGlhQG5va2lhLmNvbQ0KDQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0K DQoNCg0KDQpUYWlsbG9uIGV0IGFsLiAgICAgICAgICBFeHBpcmVzIEphbnVhcnkgMTIsIDIwMTgg ICAgICAgICAgICAgICBbUGFnZSAyMl0NCg== --_005_8FCEBCD66CFE4961A7E8A39801486434ciscocom_-- From nobody Thu Jul 13 17:56:30 2017 Return-Path: X-Original-To: secdir@ietf.org Delivered-To: secdir@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 1ACA4126B72 for ; Thu, 13 Jul 2017 17:56:29 -0700 (PDT) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 8bit From: Tero Kivinen To: X-Test-IDTracker: no X-IETF-IDTracker: 6.56.0 Auto-Submitted: auto-generated Precedence: bulk Reply-to: secdir-secretary@mit.edu Message-ID: <149999378910.16276.13192860589646065568.idtracker@ietfa.amsl.com> Date: Thu, 13 Jul 2017 17:56:29 -0700 Archived-At: Subject: [secdir] Assignments X-BeenThere: secdir@ietf.org X-Mailman-Version: 2.1.22 List-Id: Security Area Directorate List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 14 Jul 2017 00:56:29 -0000 Review instructions and related resources are at: http://tools.ietf.org/area/sec/trac/wiki/SecDirReview For telechat 2017-08-03 Reviewer LC end Draft John Bradley 2017-07-17 draft-ietf-urnbis-ns-reg-transition-08 Klaas Wierenga 2017-07-12 draft-ietf-mpls-rfc3107bis-02 Paul Wouters 2017-07-13 draft-ietf-teas-gmpls-scsi-03 For telechat 2017-08-17 Reviewer LC end Draft Liang Xia 2017-08-01 draft-ietf-webpush-encryption-08 Last calls: Reviewer LC end Draft Derek Atkins 2017-07-18 draft-ietf-httpbis-immutable-03 Alan DeKok 2017-05-14 draft-ietf-calext-caldav-attachments-02 Yaron Sheffer 2017-07-17 draft-weis-gdoi-rekey-ack-05 Tom Yu 2017-07-25 draft-ietf-lamps-rfc5280-i18n-update-02 Tom Yu 2017-02-20 draft-ietf-slim-negotiating-human-language-12 Dacheng Zhang 2017-07-25 draft-ietf-curdle-cms-eddsa-signatures-06 Early review requests: Reviewer Due Draft Daniel Gillmor 2016-02-01 draft-ietf-rtcweb-security-08 Catherine Meadows R2017-06-29 draft-ietf-opsawg-capwap-alt-tunnel-09 Brian Weis 2017-06-29 draft-ietf-idr-bgp-prefix-sid-06 Next in the reviewer rotation: Donald Eastlake Shawn Emery Stephen Farrell Daniel Franke Daniel Gillmor Tobias Gondrom Ólafur Guðmundsson Phillip Hallam-Baker Steve Hanna Dan Harkins From nobody Mon Jul 17 07:54:27 2017 Return-Path: X-Original-To: secdir@ietf.org Delivered-To: secdir@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id F40521316E4; Tue, 11 Jul 2017 06:37:21 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=ietf.org; s=ietf1; t=1499780242; bh=K4At2aGnYHMTUJzb1fDm/kb6Tt390S7CrME19SYEFZA=; h=To:From:Date:Subject:List-Id:List-Unsubscribe:List-Archive: List-Post:List-Help:List-Subscribe; b=ncU+dl/bbpFlVoXsnLFs3iPuAjQwYVBieROauJntGjAeMf/Vi5AQ+3MwMR4K5FqeD llyWBlTr9b+ipRxBIhkTWMHIxkP/TVxqOe2JUVeKfBOG6WUuFCuZb7zAciT5mC1uxV 45qmxjuluqgn2Ze+erCs+ltbUHER/2Vvs5NjERMc= X-Original-To: new-work@ietfa.amsl.com Delivered-To: new-work@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id CFA861316E4 for ; Tue, 11 Jul 2017 06:37:19 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.89 X-Spam-Level: X-Spam-Status: No, score=-1.89 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HK_RANDOM_ENVFROM=0.001, HK_RANDOM_FROM=0.001, RP_MATCHES_RCVD=-0.001, SPF_HELO_PASS=-0.001, T_SPF_PERMERROR=0.01] autolearn=no autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id nUC5Ur7orUJG for ; Tue, 11 Jul 2017 06:37:18 -0700 (PDT) Received: from raoul.w3.org (raoul.w3.org [IPv6:2001:470:8b2d:804:52:12:128:0]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 7CC2F127058 for ; Tue, 11 Jul 2017 06:37:17 -0700 (PDT) Received: from [123.116.100.107] (helo=[192.168.1.3]) by raoul.w3.org with esmtpsa (TLS1.2:ECDHE_RSA_AES_128_GCM_SHA256:128) (Exim 4.84_2) (envelope-from ) id 1dUvLn-000BcM-5t for new-work@ietf.org; Tue, 11 Jul 2017 13:37:16 +0000 To: new-work@ietf.org From: Xueyuan Message-ID: <9059c773-83bc-7302-3ae0-2f68c355a159@w3.org> Date: Tue, 11 Jul 2017 21:37:10 +0800 User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.12; rv:52.0) Gecko/20100101 Thunderbird/52.2.1 MIME-Version: 1.0 Content-Language: en-US Archived-At: X-BeenThere: new-work@ietf.org X-Mailman-Version: 2.1.22 Precedence: list Content-Transfer-Encoding: 7bit Content-Type: text/plain; charset="us-ascii"; Format="flowed" Errors-To: new-work-bounces@ietf.org Sender: "new-work" Archived-At: X-Mailman-Approved-At: Mon, 17 Jul 2017 07:54:26 -0700 Subject: [secdir] [new-work] Proposed W3C Charter: WebVR Working Group (until 2017-08-18) X-BeenThere: secdir@ietf.org List-Id: Security Area Directorate List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 11 Jul 2017 13:37:22 -0000 Hello, Today W3C Advisory Committee Representatives received a Proposal to review a draft charter for the WebVR Working Group: https://www.w3.org/2017/07/vr-wg-charter.html As part of ensuring that the community is aware of proposed work at W3C, this draft charter is public during the Advisory Committee review period. W3C invites public comments through 2017-08-18 on the proposed charter. Please send comments to public-new-work@w3.org, which has a public archive: http://lists.w3.org/Archives/Public/public-new-work/ Other than comments sent in formal responses by W3C Advisory Committee Representatives, W3C cannot guarantee a response to comments. If you work for a W3C Member [1], please coordinate your comments with your Advisory Committee Representative. For example, you may wish to make public comments via this list and have your Advisory Committee Representative refer to it from his or her formal review comments. If you should have any questions or need further information, please contact Dominique Hazael-Massieux, proposed Staff Contact, at . Thank you, Xueyuan Jia, W3C Marketing & Communications [1] http://www.w3.org/Consortium/Member/List _______________________________________________ new-work mailing list new-work@ietf.org https://www.ietf.org/mailman/listinfo/new-work From nobody Mon Jul 17 07:54:35 2017 Return-Path: X-Original-To: secdir@ietf.org Delivered-To: secdir@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id BCEBB13181C; Wed, 12 Jul 2017 22:50:17 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=ietf.org; s=ietf1; t=1499925017; bh=S7cdKvZ9CObjop3qsku7JIhbwtr0V6uYlCmIoWFHIho=; h=To:From:Date:Subject:List-Id:List-Unsubscribe:List-Archive: List-Post:List-Help:List-Subscribe; b=erspjKG4NZChbS43P1PxiRu2EiRq3JyjcRiTgsOI1IQ4+p3nI691J7mkjnZIiEl2M TlklkolD5e5SUgNgib7nZA6OKUjinQ5PPhkEvqj41yHNoFemrT/6IqNhYb+V6K6Ek1 Qrf24ov1CFPET8QjdOKdNOqvgpHzuVEgSUJ4Hf28= X-Original-To: new-work@ietfa.amsl.com Delivered-To: new-work@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 0C33713181C for ; Wed, 12 Jul 2017 22:50:16 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.89 X-Spam-Level: X-Spam-Status: No, score=-1.89 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HK_RANDOM_ENVFROM=0.001, HK_RANDOM_FROM=0.001, RP_MATCHES_RCVD=-0.001, SPF_HELO_PASS=-0.001, T_SPF_PERMERROR=0.01] autolearn=no autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id alcnhHiz9O6W for ; Wed, 12 Jul 2017 22:50:14 -0700 (PDT) Received: from raoul.w3.org (raoul.w3.org [IPv6:2001:470:8b2d:804:52:12:128:0]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 933FB13180F for ; Wed, 12 Jul 2017 22:50:14 -0700 (PDT) Received: from [114.246.101.180] (helo=XueyuandeMacBook-Pro.local) by raoul.w3.org with esmtpsa (TLS1.2:ECDHE_RSA_AES_128_GCM_SHA256:128) (Exim 4.84_2) (envelope-from ) id 1dVX0v-000CSq-4u for new-work@ietf.org; Thu, 13 Jul 2017 05:50:13 +0000 To: new-work@ietf.org From: Xueyuan Message-ID: <077dd53c-a4ce-afa6-24ef-8169c9f4ffcb@w3.org> Date: Thu, 13 Jul 2017 13:50:11 +0800 User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.12; rv:52.0) Gecko/20100101 Thunderbird/52.2.1 MIME-Version: 1.0 Content-Language: en-US Archived-At: X-BeenThere: new-work@ietf.org X-Mailman-Version: 2.1.22 Precedence: list Content-Transfer-Encoding: 7bit Content-Type: text/plain; charset="us-ascii"; Format="flowed" Errors-To: new-work-bounces@ietf.org Sender: "new-work" Archived-At: X-Mailman-Approved-At: Mon, 17 Jul 2017 07:54:26 -0700 Subject: [secdir] [new-work] Proposed W3C Charter: Education and Outreach Working Group (EOWG) (until 2017-08-10) X-BeenThere: secdir@ietf.org List-Id: Security Area Directorate List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 13 Jul 2017 05:50:18 -0000 Hello, Today W3C Advisory Committee Representatives received a Proposal to review a draft charter for the Education and Outreach Working Group (EOWG): https://www.w3.org/WAI/EO/charter2017 As part of ensuring that the community is aware of proposed work at W3C, this draft charter is public during the Advisory Committee review period. W3C invites public comments through 2017-08-10 on the proposed charter. Please send comments to public-new-work@w3.org, which has a public archive: http://lists.w3.org/Archives/Public/public-new-work/ Other than comments sent in formal responses by W3C Advisory Committee Representatives, W3C cannot guarantee a response to comments. If you work for a W3C Member [1], please coordinate your comments with your Advisory Committee Representative. For example, you may wish to make public comments via this list and have your Advisory Committee Representative refer to it from his or her formal review comments. If you should have any questions or need further information, please contact Shawn Henry, EOWG Staff Contact, at . Thank you, Xueyuan Jia, W3C Marketing & Communications [1] http://www.w3.org/Consortium/Member/List _______________________________________________ new-work mailing list new-work@ietf.org https://www.ietf.org/mailman/listinfo/new-work From nobody Mon Jul 17 07:54:39 2017 Return-Path: X-Original-To: secdir@ietf.org Delivered-To: secdir@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 8300112EA95; Mon, 17 Jul 2017 02:16:20 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=ietf.org; s=ietf1; t=1500282980; bh=wDfPMIGSvhjUq/h42Hwzo/3YDd20DB0mSNlEulc4hE4=; h=To:From:Date:Subject:List-Id:List-Unsubscribe:List-Archive: List-Post:List-Help:List-Subscribe; b=UJwPGfbUfABnGP02psvKDf9eFZDje229TTy8AW6oT2pnkAHX4tVjRQLX5Jk90sAKB mDYI0sq+ONkkE7/lQJ9BSeoNoXp3HEIC2dNap7YUlqQv3qrnkxpolbc6AWetHjUXgI ou0OAajGTTnqzYemd9vuOqqZ4YUIFg3DSyXrp19U= X-Original-To: new-work@ietfa.amsl.com Delivered-To: new-work@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 555F5126E3A for ; Mon, 17 Jul 2017 02:16:19 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -0.542 X-Spam-Level: X-Spam-Status: No, score=-0.542 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HK_RANDOM_ENVFROM=0.001, HK_RANDOM_FROM=0.001, RCVD_IN_BL_SPAMCOP_NET=1.347, RP_MATCHES_RCVD=-0.001, SPF_HELO_PASS=-0.001, T_SPF_PERMERROR=0.01, URIBL_BLOCKED=0.001] autolearn=no autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id oLNMQbkAAanT for ; Mon, 17 Jul 2017 02:16:17 -0700 (PDT) Received: from raoul.w3.org (raoul.w3.org [IPv6:2001:470:8b2d:804:52:12:128:0]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 84DAB12EA95 for ; Mon, 17 Jul 2017 02:16:17 -0700 (PDT) Received: from [60.207.237.116] (helo=XueyuandeMacBook-Pro.local) by raoul.w3.org with esmtpsa (TLS1.2:ECDHE_RSA_AES_128_GCM_SHA256:128) (Exim 4.84_2) (envelope-from ) id 1dX28W-0008Ud-7V for new-work@ietf.org; Mon, 17 Jul 2017 09:16:16 +0000 To: new-work@ietf.org From: Xueyuan Message-ID: <825f42c7-5c0e-078f-da5f-4ada8d29d781@w3.org> Date: Mon, 17 Jul 2017 17:16:12 +0800 User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.12; rv:52.0) Gecko/20100101 Thunderbird/52.2.1 MIME-Version: 1.0 Content-Language: en-US Archived-At: X-BeenThere: new-work@ietf.org X-Mailman-Version: 2.1.22 Precedence: list Content-Transfer-Encoding: 7bit Content-Type: text/plain; charset="us-ascii"; Format="flowed" Errors-To: new-work-bounces@ietf.org Sender: "new-work" Archived-At: X-Mailman-Approved-At: Mon, 17 Jul 2017 07:54:26 -0700 Subject: [secdir] [new-work] Proposed W3C Charter: Spatial Data on the Web Interest Group (until 2017-08-25) X-BeenThere: secdir@ietf.org List-Id: Security Area Directorate List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 17 Jul 2017 09:16:21 -0000 Hello, Today W3C Advisory Committee Representatives received a Proposal to review a draft charter for the Spatial Data on the Web Interest Group: https://w3c.github.io/sdw/jwoc/ As part of ensuring that the community is aware of proposed work at W3C, this draft charter is public during the Advisory Committee review period. W3C invites public comments through 2017-08-25 on the proposed charter. Please send comments to public-new-work@w3.org, which has a public archive: http://lists.w3.org/Archives/Public/public-new-work/ Other than comments sent in formal responses by W3C Advisory Committee Representatives, W3C cannot guarantee a response to comments. If you work for a W3C Member [1], please coordinate your comments with your Advisory Committee Representative. For example, you may wish to make public comments via this list and have your Advisory Committee Representative refer to it from his or her formal review comments. If you should have any questions or need further information, please contact Francois Daoust, proposed Spatial Data on the Web Interest Group Staff Contact, at. Thank you, Xueyuan Jia, W3C Marketing & Communications [1] http://www.w3.org/Consortium/Member/List _______________________________________________ new-work mailing list new-work@ietf.org https://www.ietf.org/mailman/listinfo/new-work From nobody Mon Jul 17 07:54:44 2017 Return-Path: X-Original-To: secdir@ietf.org Delivered-To: secdir@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id DED32131C42; Mon, 17 Jul 2017 07:44:55 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=ietf.org; s=ietf1; t=1500302695; bh=RWkJzcgBl8gF4qhmbzyuT/L0dgZ3Hn6KSMtEv24Dx3g=; h=To:From:Date:Subject:List-Id:List-Unsubscribe:List-Archive: List-Post:List-Help:List-Subscribe; b=ZgJby6WBzUxHn1dJWBkkFk76rConmiuxxiQ+6SBtyR5leO9/8U/u2E7jERS4SuMUl LEL0KMSWQOmUqAFYxrhN7hHZysmOIAonFUWzdma8dicbrbqZ/pm6C8oHqmB+Glstuz zla0npfDWjhMbGJQ/nqvGUnrupWesBJ1+vAqXDw4= X-Original-To: new-work@ietfa.amsl.com Delivered-To: new-work@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 1B7A5131C32 for ; Mon, 17 Jul 2017 07:44:54 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.89 X-Spam-Level: X-Spam-Status: No, score=-1.89 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HK_RANDOM_ENVFROM=0.001, HK_RANDOM_FROM=0.001, RP_MATCHES_RCVD=-0.001, SPF_HELO_PASS=-0.001, T_SPF_PERMERROR=0.01] autolearn=no autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id jZ3hQSZYdZXj for ; Mon, 17 Jul 2017 07:44:52 -0700 (PDT) Received: from raoul.w3.org (raoul.w3.org [IPv6:2001:470:8b2d:804:52:12:128:0]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 3ABC1131C34 for ; Mon, 17 Jul 2017 07:44:51 -0700 (PDT) Received: from [111.198.234.149] (helo=[192.168.1.3]) by raoul.w3.org with esmtpsa (TLS1.2:ECDHE_RSA_AES_128_GCM_SHA256:128) (Exim 4.84_2) (envelope-from ) id 1dX7G8-000FX7-SK for new-work@ietf.org; Mon, 17 Jul 2017 14:44:50 +0000 To: new-work@ietf.org From: Xueyuan Message-ID: <2592acc1-21c2-4eda-ba84-27168ae629a0@w3.org> Date: Mon, 17 Jul 2017 22:44:05 +0800 User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.12; rv:52.0) Gecko/20100101 Thunderbird/52.2.1 MIME-Version: 1.0 Content-Language: en-US Archived-At: X-BeenThere: new-work@ietf.org X-Mailman-Version: 2.1.22 Precedence: list Content-Transfer-Encoding: 7bit Content-Type: text/plain; charset="us-ascii"; Format="flowed" Errors-To: new-work-bounces@ietf.org Sender: "new-work" Archived-At: X-Mailman-Approved-At: Mon, 17 Jul 2017 07:54:26 -0700 Subject: [secdir] [new-work] Proposed W3C Charter: Web Commerce Interest Group (until 2017-08-28) X-BeenThere: secdir@ietf.org List-Id: Security Area Directorate List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 17 Jul 2017 14:44:56 -0000 Hello, Today W3C Advisory Committee Representatives received a Proposal to review a draft charter for the Web Commerce Interest Group: https://www.w3.org/2017/03/commerce-charter.html As part of ensuring that the community is aware of proposed work at W3C, this draft charter is public during the Advisory Committee review period. W3C invites public comments through 2017-08-28 on the proposed charter. Please send comments to public-new-work@w3.org, which has a public archive: http://lists.w3.org/Archives/Public/public-new-work/ Other than comments sent in formal responses by W3C Advisory Committee Representatives, W3C cannot guarantee a response to comments. If you work for a W3C Member [1], please coordinate your comments with your Advisory Committee Representative. For example, you may wish to make public comments via this list and have your Advisory Committee Representative refer to it from his or her formal review comments. If you should have any questions or need further information, please contact Ian Jacobs, proposed Team Contact, at . Thank you, Xueyuan Jia, W3C Marketing & Communications [1] http://www.w3.org/Consortium/Member/List _______________________________________________ new-work mailing list new-work@ietf.org https://www.ietf.org/mailman/listinfo/new-work From nobody Tue Jul 18 03:29:11 2017 Return-Path: X-Original-To: secdir@ietf.org Delivered-To: secdir@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id A5EB9131DE2; Tue, 18 Jul 2017 03:29:02 -0700 (PDT) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: John Bradley To: Cc: urn@ietf.org, ietf@ietf.org, draft-ietf-urnbis-ns-reg-transition.all@ietf.org X-Test-IDTracker: no X-IETF-IDTracker: 6.56.0 Auto-Submitted: auto-generated Precedence: bulk Message-ID: <150037374265.11421.1599883952756977836@ietfa.amsl.com> Date: Tue, 18 Jul 2017 03:29:02 -0700 Archived-At: Subject: [secdir] Secdir last call review of draft-ietf-urnbis-ns-reg-transition-08 X-BeenThere: secdir@ietf.org X-Mailman-Version: 2.1.22 List-Id: Security Area Directorate List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 18 Jul 2017 10:29:03 -0000 Reviewer: John Bradley Review result: Ready No security issues. From nobody Tue Jul 18 03:33:20 2017 Return-Path: X-Original-To: secdir@ietfa.amsl.com Delivered-To: secdir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 06E0B12EB5F; Tue, 18 Jul 2017 03:33:12 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.4 X-Spam-Level: X-Spam-Status: No, score=-2.4 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, FREEMAIL_FORGED_FROMDOMAIN=0.199, FREEMAIL_FROM=0.001, HEADER_FROM_DIFFERENT_DOMAINS=0.001, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Z9n60apZZhLn; Tue, 18 Jul 2017 03:33:10 -0700 (PDT) Received: from mail-io0-x22b.google.com (mail-io0-x22b.google.com [IPv6:2607:f8b0:4001:c06::22b]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id AB58D1270B4; Tue, 18 Jul 2017 03:33:10 -0700 (PDT) Received: by mail-io0-x22b.google.com with SMTP id z62so11248265ioi.3; Tue, 18 Jul 2017 03:33:10 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:sender:in-reply-to:references:from:date:message-id :subject:to:cc; bh=C0+6Pltv2cByzuXtnkcVjoEZJQe8LrZ57Cd+l6+ni+o=; b=maCBvmGJmUmK7QPnfVemqz20Uv9oUXameN5OWOelOha3/vOScxJ9Ema/VQSJ2RcMQc gTGSWZSoE+p9qOtHlZxEN29JYJNlTGQDRdco0K/Oyd+cDPlrkxf5leWpaNAxCkQl8jpC ZFCOu9mH1BfyexoIqljb+lhr2bOQ5slKxGD9R9CEj+puiPak7n6Z+D6rmXo7qS0MB2BU DUeitPNp18g2CblglkEufSZs9NbV+LHW5y08J2BphyFIuYPpGA6PJk9oLaVX0Qm8gxuf 5bP8rj6Nd+rgm4Lnb3PXSSc4/TTklkxnln1B6OVC8JMs7rFKdqozvjuOWLuMVvgHUGou 45gw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:sender:in-reply-to:references:from :date:message-id:subject:to:cc; bh=C0+6Pltv2cByzuXtnkcVjoEZJQe8LrZ57Cd+l6+ni+o=; b=L8hXsZG4oY/N5rhSeQtCGjOvUTLjckNG9VSbwR/Zhn7Cwj0oojY66zg5ICYliMXU5f cRd9WWcekzISc8GhqwoVjOni43ib+RskezIaAwnM8tEtEo/reQud1n36aRHyDbb05KSd y+xiFK1Lfq1VwUO8anVfdHyJA5Mob4NQTNuQQBoRCVvSyf5PG/c480t+tR49sY+phFki HF7khbehmByA4TN5fs1g7EDEpIbHfPX9jS3OXkbLpsP6m1UiTALUuj5V1tROn99nPTNI KT0GRf9wRJeqy+PEc/WwcWGmxwieZ3C85QhiZM3Xwkv7/g7kKJ1DR06FA21r46Mt9m3B PZqg== X-Gm-Message-State: AIVw112WhRgG8ALfGnNmahSQHU7jw4aqgT0tj+0cAZH83PRimFqBk3p+ POOmct5uulpMKj64PS8B7oiEPV/fSw== X-Received: by 10.107.166.212 with SMTP id p203mr786176ioe.112.1500373990032; Tue, 18 Jul 2017 03:33:10 -0700 (PDT) MIME-Version: 1.0 Sender: barryleiba@gmail.com Received: by 10.107.152.80 with HTTP; Tue, 18 Jul 2017 03:33:09 -0700 (PDT) In-Reply-To: <150037374265.11421.1599883952756977836@ietfa.amsl.com> References: <150037374265.11421.1599883952756977836@ietfa.amsl.com> From: Barry Leiba Date: Tue, 18 Jul 2017 12:33:09 +0200 X-Google-Sender-Auth: C8lr584325x9i6rhOP68u2yHKVM Message-ID: To: John Bradley Cc: "secdir@ietf.org" , "urn@ietf.org" , IETF discussion list , draft-ietf-urnbis-ns-reg-transition.all@ietf.org Content-Type: text/plain; charset="UTF-8" Archived-At: Subject: Re: [secdir] Secdir last call review of draft-ietf-urnbis-ns-reg-transition-08 X-BeenThere: secdir@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: Security Area Directorate List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 18 Jul 2017 10:33:12 -0000 Thanks, John, for taking the time to review. Barry On Tue, Jul 18, 2017 at 12:29 PM, John Bradley wrote: > Reviewer: John Bradley > Review result: Ready > > No security issues. > -- Barry -- Barry Leiba (barryleiba@computer.org) http://internetmessagingtechnology.org/ From nobody Wed Jul 19 05:08:16 2017 Return-Path: X-Original-To: secdir@ietfa.amsl.com Delivered-To: secdir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 2811C1200C1 for ; Wed, 19 Jul 2017 05:08:15 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.891 X-Spam-Level: X-Spam-Status: No, score=-1.891 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RP_MATCHES_RCVD=-0.001, SPF_HELO_PASS=-0.001, T_SPF_PERMERROR=0.01, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id LMnOJI967LW4 for ; Wed, 19 Jul 2017 05:08:13 -0700 (PDT) Received: from raoul.w3.org (raoul.w3.org [IPv6:2001:470:8b2d:804:52:12:128:0]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id A45AC1317E3 for ; Wed, 19 Jul 2017 05:08:05 -0700 (PDT) Received: from dhcp-88ee.meeting.ietf.org ([31.133.136.238]) by raoul.w3.org with esmtpsa (TLS1.2:ECDHE_RSA_AES_128_GCM_SHA256:128) (Exim 4.84_2) (envelope-from ) id 1dXnlt-000CSw-6C for secdir@ietf.org; Wed, 19 Jul 2017 12:08:05 +0000 References: To: secdir@ietf.org From: Samuel Weiler X-Forwarded-Message-Id: Message-ID: Date: Wed, 19 Jul 2017 08:08:02 -0400 User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.11; rv:45.0) Gecko/20100101 Thunderbird/45.8.0 MIME-Version: 1.0 In-Reply-To: Content-Type: text/plain; charset=windows-1252; format=flowed Content-Transfer-Encoding: 7bit Archived-At: Subject: [secdir] Fwd: PING and friends at IETF 99 X-BeenThere: secdir@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: Security Area Directorate List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 19 Jul 2017 12:08:15 -0000 The W3C's privacy interest group is having an informal gathering tomorrow during the lunch break in the Rokoska room (the ISOC meeting room) on the mezzanine. Anyone interested in web privacy issues is most welcome to join. The PING mailing list is open to all - there is no need to be a W3C member: https://lists.w3.org/Archives/Public/public-privacy/ -- Sam -------- Forwarded Message -------- Subject: PING and friends at IETF 99 Resent-Date: Fri, 07 Jul 2017 17:18:48 +0000 Resent-From: public-privacy@w3.org Date: Fri, 7 Jul 2017 17:18:11 +0000 From: Christine Runnegar To: public-privacy (W3C mailing list) Dear colleagues, For those who will be at the IETF meeting in Prague, we will be having a PING and friends get-together during the Thursday lunch break. Date: Thursday, 20 July 2017 Time: 12:00 - 13:30 Location: Rokoska Please bring your own lunch. Christine From nobody Thu Jul 20 09:59:15 2017 Return-Path: X-Original-To: secdir@ietf.org Delivered-To: secdir@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 1C582127B60 for ; Thu, 20 Jul 2017 09:59:15 -0700 (PDT) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 8bit From: Tero Kivinen To: X-Test-IDTracker: no X-IETF-IDTracker: 6.57.0 Auto-Submitted: auto-generated Precedence: bulk Reply-to: secdir-secretary@mit.edu Message-ID: <150056995511.22405.11329128459265605901.idtracker@ietfa.amsl.com> Date: Thu, 20 Jul 2017 09:59:15 -0700 Archived-At: Subject: [secdir] Assignments X-BeenThere: secdir@ietf.org X-Mailman-Version: 2.1.22 List-Id: Security Area Directorate List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 20 Jul 2017 16:59:15 -0000 Review instructions and related resources are at: http://tools.ietf.org/area/sec/trac/wiki/SecDirReview For telechat 2017-08-03 Reviewer LC end Draft Alan DeKok R2017-05-26 draft-nottingham-rfc5988bis-07 Klaas Wierenga 2017-07-12 draft-ietf-mpls-rfc3107bis-02 Paul Wouters 2017-07-13 draft-ietf-teas-gmpls-scsi-03 For telechat 2017-08-17 Reviewer LC end Draft Liang Xia 2017-08-01 draft-ietf-webpush-encryption-08 Last calls: Reviewer LC end Draft Derek Atkins 2017-07-18 draft-ietf-httpbis-immutable-03 Alan DeKok 2017-05-14 draft-ietf-calext-caldav-attachments-02 Donald Eastlake 2017-07-30 draft-ietf-curdle-ssh-modp-dh-sha2-07 Shawn Emery 2017-07-30 draft-ietf-curdle-ssh-ext-info-10 Daniel Franke 2017-07-30 draft-ietf-curdle-ssh-dh-group-exchange-05 Daniel Gillmor 2017-07-30 draft-ietf-curdle-des-des-des-die-die-die-03 Yaron Sheffer 2017-07-17 draft-weis-gdoi-rekey-ack-05 Tom Yu 2017-07-25 draft-ietf-lamps-rfc5280-i18n-update-02 Tom Yu 2017-02-20 draft-ietf-slim-negotiating-human-language-13 Dacheng Zhang 2017-07-25 draft-ietf-curdle-cms-eddsa-signatures-06 Early review requests: Reviewer Due Draft Daniel Gillmor 2016-02-01 draft-ietf-rtcweb-security-08 Catherine Meadows R2017-06-29 draft-ietf-opsawg-capwap-alt-tunnel-09 Brian Weis 2017-06-29 draft-ietf-idr-bgp-prefix-sid-06 Next in the reviewer rotation: Ólafur Guðmundsson Phillip Hallam-Baker Steve Hanna Dan Harkins Paul Hoffman Russ Housley Christian Huitema Leif Johansson Benjamin Kaduk Charlie Kaufman From nobody Sat Jul 22 03:21:47 2017 Return-Path: X-Original-To: secdir@ietf.org Delivered-To: secdir@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id F2BB7131DF6; Sat, 22 Jul 2017 03:21:39 -0700 (PDT) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 8bit From: Brian Weis To: Cc: iesg@ietf.org, draft-ietf-idr-bgp-prefix-sid.all@ietf.org X-Test-IDTracker: no X-IETF-IDTracker: 6.57.0 Auto-Submitted: auto-generated Precedence: bulk Message-ID: <150071889993.20425.5273428383173596948@ietfa.amsl.com> Date: Sat, 22 Jul 2017 03:21:39 -0700 Archived-At: Subject: [secdir] Secdir early review of draft-ietf-idr-bgp-prefix-sid-06 X-BeenThere: secdir@ietf.org X-Mailman-Version: 2.1.22 List-Id: Security Area Directorate List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 22 Jul 2017 10:21:40 -0000 Reviewer: Brian Weis Review result: Has Nits I have reviewed this document as part of the security directorate's ongoing effort to review all IETF documents being processed by the IESG. These comments were written primarily for the benefit of the security area directors. Document editors and WG chairs should treat these comments just like any other last call comments. This document describes a BGP extension to signal the BGP Prefix-SID use with Segment Routing. as well as the rules to originate, receive and handle error conditions. The BGP extension defines a new type of BGP path attribute passed within BGP, and does not change the security considerations of the BGP protocol itself. I consider this document “ready with nits”. The Security Considerations section reasonably states that the use of this BGP attribute “inherits the security considerations” of the BGP-4 RFC as well as the RFC defining how labels are carried in BGP-4. As an aside, those documents are quite old. For example, RFC 4271 says that the TCP-MD5 option is required to implement for authentication, but this has been replaced by a much stronger authentication method (TCP-AO). It would be nice if we had newer security considerations for BGP-4 but that advice doesn’t belong in this document. The Security Considerations might have said something about the how an AS would protect itself against a peer sending the Prefix-SID attribute across AS boundaries, but that text is contained in useful places elsewhere in the document and seems sufficient. I have only one nit, which is some confusion regarding scoping of the SID. The document clearly states that a SID has a limited scope within the network, which is important because outside of that scope an SID value would have a different meaning. This is a security consideration, because accepting a SID in the wrong scope could possibly cause a security issue if packets are forwarded to the wrong identity (e.g, the packets were intended for a firewall within the AS, not a service outside of the AS). (a) Section 5.1 says it should not be advertised outside of an AS unless “explicitly configured to do so”. It would be nice if the conditions for explicitly configuring the SID to be advertised outside of the AS were mentioned here. (b) The last paragraph of Section 8 says it is applicable within an SR Domain (i.e., more than an AS), and Security Considerations says something similar. (c) Security Considerations speaks of limiting BGP Prefix-SID within a “domain”. Is that intending to say an “SR domain”? I suspect whether an SID should be advertised outside of the AS depends on whether an AS is part of an “SR domain” or not, and that there's likely never a good case to advertise it outside of an AS unless it is part of an "SR domain". But it would be good if there was some text clarifying the conditions when it is reasonable to share an SID between ASes. From nobody Sun Jul 23 23:27:27 2017 Return-Path: X-Original-To: secdir@ietfa.amsl.com Delivered-To: secdir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 8CA1312EC30; Sun, 23 Jul 2017 23:27:18 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.222 X-Spam-Level: X-Spam-Status: No, score=-4.222 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, RP_MATCHES_RCVD=-0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id gHBDw5Q-iheB; Sun, 23 Jul 2017 23:27:16 -0700 (PDT) Received: from lhrrgout.huawei.com (lhrrgout.huawei.com [194.213.3.17]) (using TLSv1 with cipher RC4-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 3482B120725; Sun, 23 Jul 2017 23:27:16 -0700 (PDT) Received: from 172.18.7.190 (EHLO lhreml705-cah.china.huawei.com) ([172.18.7.190]) by lhrrg02-dlp.huawei.com (MOS 4.3.7-GA FastPath queued) with ESMTP id DLE17800; Mon, 24 Jul 2017 06:27:13 +0000 (GMT) Received: from DGGEMI406-HUB.china.huawei.com (10.3.17.144) by lhreml705-cah.china.huawei.com (10.201.108.46) with Microsoft SMTP Server (TLS) id 14.3.301.0; Mon, 24 Jul 2017 07:27:12 +0100 Received: from DGGEMI501-MBS.china.huawei.com ([169.254.2.52]) by dggemi406-hub.china.huawei.com ([10.3.17.144]) with mapi id 14.03.0301.000; Mon, 24 Jul 2017 14:27:09 +0800 From: zhangdacheng To: "secdir@ietf.org" CC: "iesg@ietf.org" , "draft-ietf-curdle-cms-eddsa-signatures.all@ietf.org" Thread-Topic: Secdir review of draft-ietf-curdle-cms-eddsa-signatures-06 Thread-Index: AdMEKyUNUNfXfz9sSLiAuvtL2NvqVA== Date: Mon, 24 Jul 2017 06:27:08 +0000 Message-ID: <879E76B64CF340468BF5E4DE504C22420160B1FA@dggemi501-mbs.china.huawei.com> Accept-Language: zh-CN, en-US Content-Language: zh-CN X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.130.167.227] Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-CFilter-Loop: Reflected X-Mirapoint-Virus-RAPID-Raw: score=unknown(0), refid=str=0001.0A020205.59759342.005E, ss=1, re=0.000, recu=0.000, reip=0.000, cl=1, cld=1, fgs=0, ip=169.254.2.52, so=2013-06-18 04:22:30, dmn=2013-03-21 17:37:32 X-Mirapoint-Loop-Id: 501115b7265d815c3a43ba494d3809e6 Archived-At: Subject: [secdir] Secdir review of draft-ietf-curdle-cms-eddsa-signatures-06 X-BeenThere: secdir@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: Security Area Directorate List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 24 Jul 2017 06:27:19 -0000 DQpJIGhhdmUgcmV2aWV3ZWQgdGhpcyBkb2N1bWVudCBhcyBwYXJ0IG9mIHRoZSBzZWN1cml0eSBk aXJlY3RvcmF0ZSdzIG9uZ29pbmcgZWZmb3J0IHRvIHJldmlldyBhbGwgSUVURiBkb2N1bWVudHMg YmVpbmcgcHJvY2Vzc2VkIGJ5IHRoZSBJRVNHLiBUaGVzZSBjb21tZW50cyB3ZXJlIHdyaXR0ZW4g cHJpbWFyaWx5IGZvciB0aGUgYmVuZWZpdCBvZiB0aGUgc2VjdXJpdHkgYXJlYSBkaXJlY3RvcnMu IERvY3VtZW50IGVkaXRvcnMgYW5kIFdHIGNoYWlycyBzaG91bGQgdHJlYXQgdGhlc2UgY29tbWVu dHMganVzdCBsaWtlIGFueSBvdGhlciBsYXN0IGNhbGwgY29tbWVudHMuDQoNClRoaXMgZG9jdW1l bnQgc3BlY2lmaWVzIHRoZSBjb252ZW50aW9ucyBmb3IgdXNpbmcgRWR3YXJkcy1jdXJ2ZSBEaWdp dGFsIFNpZ25hdHVyZSBBbGdvcml0aG0gKEVkRFNBKSBmb3IgY3VydmUyNTUxOSBhbmQgY3VydmU0 NDggaW4gdGhlIENyeXB0b2dyYXBoaWMgTWVzc2FnZSBTeW50YXggKENNUykuIEkgdGhpbmsgdGhp cyBkb2N1bWVudCBjYW4gYmUgcHVibGlzaGVkIGFmdGVyIHNvbWUgdGlueSB1cGRhdGVzLg0KDQpU aGUgY29tbWVudHMgYXJlIGxpc3RlZCBhcyBmb2xsb3dzOg0KDQoxLiBJbiBzZWN1cml0eSBjb25z aWRlcmF0aW9ucywgdGhlIGZpcnN0IGFuZCB0aGUgc2Vjb25kIHBhcmFncmFwaHMgYXJlIGFib3V0 IGhvdyBpbXBsZW1lbnRhdGlvbnMgcHJvdGVjdCB0aGUgcHJpdmF0ZSBrZXlzIGFuZCBob3cgdGhl eSBndWFyYW50ZWUgdGhlIHF1YWxpdHkgb2YgcmFuZG9tIG51bWJlcnMuIE5vcm1hbGx5LCB0aGlz IHN1Y2ggY29uc2lkZXJhdGlvbnMgYXJlIG91dCBvZiBzY29wZSBvZiBwcm90b2NvbCBzcGVjaWZp Y2F0aW9ucy4gQnV0IEkgYW0gb2sgaWYgdGhlIGF1dGhvcnMgd291bGQgbGlrZSB0byBrZWVwIHRo ZW0uIA0KDQoyLiBJbiB0aGUgNHRoIHBhcmFncmFwaCBvZiBzZWN1cml0eSBjb25zaWRlcmF0aW9u cywgJyB0aGUgc2FtZSBwcml2YXRlIGtleSBTSE9VTEQgTk9UIGJlIHVzZWQgd2l0aCBtb3JlIHRo YW4gb25lIEVkRFNBIHNldCBvZiBwYXJhbWV0ZXJzLicgLT4gJyB0aGUgc2FtZSBwcml2YXRlIGtl eSBNVVNUIE5PVCBiZSB1c2VkIHdpdGggbW9yZSB0aGFuIG9uZSBFZERTQSBzZXQgb2YgcGFyYW1l dGVycy4nIFNpbmNlIHdlIGFscmVhZHkga25vdyB0aGF0IHRoZSBzYW1lIHByaXZhdGUga2V5IHVz ZWQgZm9yIG11bHRpcGxlIGFsZ29yaXRobXMgd2lsbCBjYXVzZSBwb3RlbnRpYWwgcmlza3MsIHdl IHNob3VsZCB1c2UgYSBzdHJvbmdlciB3b3JkIGhlcmUuDQoNCjMuIEluIHRoZSA1dGggcGFyYWdy YXBoIG9mIHNlY3VyaXR5IGNvbnNpZGVyYXRpb25zLCAnIHRoZSBzYW1lIGhhc2ggZnVuY3Rpb24g c2hvdWxkIGJlIHVzZWQgZm9yIGFsbCBvcGVyYXRpb25zLicgLT4nIHRoZSBzYW1lIGhhc2ggZnVu Y3Rpb24gU0hPVUxEIGJlIHVzZWQgZm9yIGFsbCBvcGVyYXRpb25zLicNCg0KNC4gSW4gdGhlIDFz dCBwYXJhZ3JhcGgsICdXaGVuIHNpZ25pbmcgd2l0aCBFZDI1NTE5LCB0aGUgZGlnZXN0QWxnb3Jp dGhtIFNIT1VMRCBpbmNsdWRlIGlkLXNoYTUxMicgLT4nIFdoZW4gc2lnbmluZyB3aXRoIEVkMjU1 MTksIHRoZSBkaWdlc3RBbGdvcml0aG0gTVVTVCBpbmNsdWRlIGlkLXNoYTUxMicuICdXaGVuIHNp Z25pbmcgd2l0aCBFZDQ0OCwgdGhlIGRpZ2VzdEFsZ29yaXRobSBTSE9VTEQgaW5jbHVkZSBpZC1z aGFrZTI1Ni1sZW4nIC0+ICdXaGVuIHNpZ25pbmcgd2l0aCBFZDQ0OCwgdGhlIGRpZ2VzdEFsZ29y aXRobSBNVVNUIGluY2x1ZGUgaWQtc2hha2UyNTYtbGVuJy4NCg0KQ2hlZXJzDQoNCkRhY2hlbmcN Cg0KX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX18NCnNlY2Rp ciBtYWlsaW5nIGxpc3QNCnNlY2RpckBpZXRmLm9yZw0KaHR0cHM6Ly93d3cuaWV0Zi5vcmcvbWFp bG1hbi9saXN0aW5mby9zZWNkaXINCndpa2k6IGh0dHA6Ly90b29scy5pZXRmLm9yZy9hcmVhL3Nl Yy90cmFjL3dpa2kvU2VjRGlyUmV2aWV3DQo= From nobody Mon Jul 24 03:38:27 2017 Return-Path: X-Original-To: secdir@ietfa.amsl.com Delivered-To: secdir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id D8C3F131C51; Mon, 24 Jul 2017 03:38:25 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -3.961 X-Spam-Level: X-Spam-Status: No, score=-3.961 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, HTML_OBFUSCATE_05_10=0.26, RCVD_IN_DNSWL_MED=-2.3, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, RP_MATCHES_RCVD=-0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id CyxRhA8iDb-u; Mon, 24 Jul 2017 03:38:24 -0700 (PDT) Received: from lhrrgout.huawei.com (lhrrgout.huawei.com [194.213.3.17]) (using TLSv1 with cipher RC4-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 6C41512EC4B; Mon, 24 Jul 2017 03:38:23 -0700 (PDT) Received: from 172.18.7.190 (EHLO LHREML712-CAH.china.huawei.com) ([172.18.7.190]) by lhrrg02-dlp.huawei.com (MOS 4.3.7-GA FastPath queued) with ESMTP id DLE66192; Mon, 24 Jul 2017 10:38:20 +0000 (GMT) Received: from DGGEML405-HUB.china.huawei.com (10.3.17.49) by LHREML712-CAH.china.huawei.com (10.201.108.35) with Microsoft SMTP Server (TLS) id 14.3.301.0; Mon, 24 Jul 2017 11:38:19 +0100 Received: from DGGEML502-MBX.china.huawei.com ([169.254.2.84]) by dggeml405-hub.china.huawei.com ([10.3.17.49]) with mapi id 14.03.0301.000; Mon, 24 Jul 2017 18:38:15 +0800 From: "Xialiang (Frank)" To: "iesg@ietf.org" , "secdir@ietf.org" , "draft-ietf-webpush-encryption.all@ietf.org" Thread-Topic: Secdir review of draft-ietf-webpush-encryption-08 Thread-Index: AdMEaPQXX4vDafpiRhyauKY8V1g8+Q== Date: Mon, 24 Jul 2017 10:38:15 +0000 Message-ID: Accept-Language: zh-CN, en-US Content-Language: zh-CN X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.134.159.76] Content-Type: multipart/alternative; boundary="_000_C02846B1344F344EB4FAA6FA7AF481F12BB2742FDGGEML502MBXchi_" MIME-Version: 1.0 X-CFilter-Loop: Reflected X-Mirapoint-Virus-RAPID-Raw: score=unknown(0), refid=str=0001.0A020205.5975CE1D.0028, ss=1, re=0.000, recu=0.000, reip=0.000, cl=1, cld=1, fgs=0, ip=169.254.2.84, so=2013-06-18 04:22:30, dmn=2013-03-21 17:37:32 X-Mirapoint-Loop-Id: 1619ae10b4d5fc43ff93fe00200cb012 Archived-At: Subject: [secdir] Secdir review of draft-ietf-webpush-encryption-08 X-BeenThere: secdir@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: Security Area Directorate List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 24 Jul 2017 10:38:26 -0000 --_000_C02846B1344F344EB4FAA6FA7AF481F12BB2742FDGGEML502MBXchi_ Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable Hi, I have reviewed this document as part of the security directorate's ongoing= effort to review all IETF documents being processed by the IESG. These co= mments were written primarily for the benefit of the security area director= s. Document editors and WG chairs should treat these comments just like an= y other last call comments. This document describes a message encryption scheme for the Web Push protoc= ol. This scheme provides confidentiality and integrity for messages sent fr= om an Application Server to a User Agent. In general, I think it's well written and prepared for the WGLC, in additio= n to some nits and little problems: 1. The word "falsification" is used in the section 1, I am not sure i= f you see any essential difference between it and the "modification". Can y= ou clarify it? 2. In section 2.1, the sentence "Most applications that use push mess= aging have a pre-existing relationship with an Application Server": what is= the exact meaning of "pre-existing relationship"? From the context, I assu= me it's a mutual authenticated and encrypted connection between the UA and = AS, right? More texts to clarify this term seem good here; 3. The second phase listed in section 3 ("The shared secret is then c= ombined with the application secret to produce the input keying material") = seems to be described in details in section 3.4, not section 3.3. Please ch= eck it. And the term "application secret" can be changed to "authentication= secret" for accuracy; 4. In last paragraph of section 3.1, is "An Application Server" more = appropriate? 5. For the HKDF, should the salt be the authentication secret, or a r= andom (16)? 6. For formula of IKM =3D HMAC-SHA-256(PRK_cek, key_info || 0x01), sh= ould the "PRK_cek" be "PRK_key" which is calculated before from auth_secret= and ecdh_secret? 7. In Security Considerations section, the potential threats (e.g., e= avesdropping, tempering, etc) of unprotected HTTP header fields have been i= dentified, but the according protection measures are not discussed here. Wo= uld it be better to have them? B.R. Frank --_000_C02846B1344F344EB4FAA6FA7AF481F12BB2742FDGGEML502MBXchi_ Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable

Hi,

I have reviewed this documen= t as part of the security directorate's ongoing effort to review all IETF d= ocuments being processed by the IESG.  These comments were written pri= marily for the benefit of the security area directors.  Document editors and WG chairs should treat these comment= s just like any other last call comments.

 

This document describes a messa= ge encryption scheme for the Web Push protocol. This scheme provides confid= entiality and integrity for messages sent from an Application Server to a U= ser Agent.

 

In general, I think it’s = well written and prepared for the WGLC, in addition to some nits and little= problems:

 

1= .   &= nbsp;   The word “falsifi= cation” is used in the section 1, I am not sure if you see any essent= ial difference between it and the “modification”. Can you clari= fy it?

2= .   &= nbsp;   In section 2.1, the sen= tence “Most applications that use push messaging have a pre-existi= ng relationship with an Application Server”: what is the exact me= aning of “pre-existing relationship”? From the context, I assume it’s a mutual authenticated and encrypted conn= ection between the UA and AS, right? More texts to clarify this term seem g= ood here;

3= .   &= nbsp;   The second phase listed= in section 3 (“The shared secret is then combined with the applic= ation secret to produce the input keying material”) seems to be d= escribed in details in section 3.4, not section 3.3. Please check it. And the term “application secret”= can be changed to “authentication secret” for accuracy;=

4= .   &= nbsp;   In last paragraph of se= ction 3.1, is “An Application Server” more appropriate?

5= .   &= nbsp;   For the HKDF, should th= e salt be the authentication secret, or a random (16)?

6= .   &= nbsp;   For formula of IKM =3D = HMAC-SHA-256(PRK_cek, key_info || 0x01), should the “PRK_cek” b= e “PRK_key” which is calculated before from auth_secret and ecd= h_secret?

7= .   &= nbsp;   In Security Considerati= ons section, the potential threats (e.g., eavesdropping, tempering, etc) of= unprotected HTTP header fields have been identified, but the according pro= tection measures are not discussed here. Would it be better to have them?

 

B.R.

Frank

--_000_C02846B1344F344EB4FAA6FA7AF481F12BB2742FDGGEML502MBXchi_-- From nobody Mon Jul 24 09:26:27 2017 Return-Path: X-Original-To: secdir@ietfa.amsl.com Delivered-To: secdir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 90BD0131EA0 for ; Mon, 24 Jul 2017 09:26:25 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.9 X-Spam-Level: X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id NVLAdF92nqJy for ; Mon, 24 Jul 2017 09:26:23 -0700 (PDT) Received: from mail.smeinc.net (mail.smeinc.net [209.135.209.11]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id BF491131E97 for ; Mon, 24 Jul 2017 09:26:23 -0700 (PDT) Received: from localhost (localhost [127.0.0.1]) by mail.smeinc.net (Postfix) with ESMTP id 0D04D300557 for ; Mon, 24 Jul 2017 12:26:23 -0400 (EDT) X-Virus-Scanned: amavisd-new at mail.smeinc.net Received: from mail.smeinc.net ([127.0.0.1]) by localhost (mail.smeinc.net [127.0.0.1]) (amavisd-new, port 10026) with ESMTP id 2oNqBvNyn7NG for ; Mon, 24 Jul 2017 12:26:21 -0400 (EDT) Received: from a860b60074bd.home (pool-108-45-101-150.washdc.fios.verizon.net [108.45.101.150]) by mail.smeinc.net (Postfix) with ESMTPSA id 2A802300288; Mon, 24 Jul 2017 12:26:21 -0400 (EDT) Content-Type: text/plain; charset=us-ascii Mime-Version: 1.0 (Mac OS X Mail 10.3 \(3273\)) From: Russ Housley In-Reply-To: <879E76B64CF340468BF5E4DE504C22420160B1FA@dggemi501-mbs.china.huawei.com> Date: Mon, 24 Jul 2017 12:26:20 -0400 Cc: IETF SecDir , IESG , curdle Content-Transfer-Encoding: quoted-printable Message-Id: References: <879E76B64CF340468BF5E4DE504C22420160B1FA@dggemi501-mbs.china.huawei.com> To: zhangdacheng X-Mailer: Apple Mail (2.3273) Archived-At: Subject: Re: [secdir] Secdir review of draft-ietf-curdle-cms-eddsa-signatures-06 X-BeenThere: secdir@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: Security Area Directorate List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 24 Jul 2017 16:26:26 -0000 Dacheng: Thanks for taking the time to review the document. > I have reviewed this document as part of the security directorate's = ongoing effort to review all IETF documents being processed by the IESG. = These comments were written primarily for the benefit of the security = area directors. Document editors and WG chairs should treat these = comments just like any other last call comments. >=20 > This document specifies the conventions for using Edwards-curve = Digital Signature Algorithm (EdDSA) for curve25519 and curve448 in the = Cryptographic Message Syntax (CMS). I think this document can be = published after some tiny updates. >=20 > The comments are listed as follows: >=20 > 1. In security considerations, the first and the second paragraphs are = about how implementations protect the private keys and how they = guarantee the quality of random numbers. Normally, this such = considerations are out of scope of protocol specifications. But I am ok = if the authors would like to keep them.=20 These are implementation considerations that impact security. I think = they should stay in the document. > 2. In the 4th paragraph of security considerations, ' the same private = key SHOULD NOT be used with more than one EdDSA set of parameters.' -> ' = the same private key MUST NOT be used with more than one EdDSA set of = parameters.' Since we already know that the same private key used for = multiple algorithms will cause potential risks, we should use a stronger = word here. I do not think that there is a problem with using the same private key = with PureEdDSA and HashEdDSA. The prudent advice is to avoid mixing the = same private key with different parameter, thus the SHOULD NOT. I point = out that RFC 8032 goes even further: ... Thus, one can use the same key pair for Ed25519, Ed25519ctx, and Ed25519ph and correspondingly with Ed448 and Ed448ph. > 3. In the 5th paragraph of security considerations, ' the same hash = function should be used for all operations.' ->' the same hash function = SHOULD be used for all operations.' Yes, I agree. > 4. In the 1st paragraph, 'When signing with Ed25519, the = digestAlgorithm SHOULD include id-sha512' ->' When signing with Ed25519, = the digestAlgorithm MUST include id-sha512'. 'When signing with Ed448, = the digestAlgorithm SHOULD include id-shake256-len' -> 'When signing = with Ed448, the digestAlgorithm MUST include id-shake256-len'. I assume you are talking about Section 3.1 here. These should not be = changed to MUST. CMS does not require these to be filled in, but = stream-oriented processing works better if they are filled in. Thus, = the SHOULD statement. Russ From nobody Mon Jul 24 19:16:29 2017 Return-Path: X-Original-To: secdir@ietfa.amsl.com Delivered-To: secdir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 7530B129468; Mon, 24 Jul 2017 19:16:27 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.699 X-Spam-Level: X-Spam-Status: No, score=-2.699 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id FqdTqtpoyNym; Mon, 24 Jul 2017 19:16:25 -0700 (PDT) Received: from mail-it0-x22c.google.com (mail-it0-x22c.google.com [IPv6:2607:f8b0:4001:c0b::22c]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id B76A91201F8; Mon, 24 Jul 2017 19:16:25 -0700 (PDT) Received: by mail-it0-x22c.google.com with SMTP id h199so43756077ith.0; Mon, 24 Jul 2017 19:16:25 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:in-reply-to:references:from:date:message-id:subject:to :cc:content-transfer-encoding; bh=Vv2I+KZrRbvyFgbXvswmrf6R/DFzAxwGYloBQ7LxW80=; b=ogkThKknEH2V7cAFGWLrC3Om8E+mpXNDzAklGybE+80wwLvhnzwKDO2yPsepqNZ8AG fdO2hQ5rxCXgzXdlA+odvjwIUVi/Tj3AK99gdOcTxli0McKytVf0nOIYrser1uAHsi8O XnzIfKqXE8BSuOaUjtVqOO8R74/6BR0+eDnw6Ttph2uwQ8ngV41DFmKVi4iUGcosOTnA 8j8JoNs1+HCNu1Q5CE/Du6XShdykfBTSguJuVU7ikRbP/nnjYkOMOmV5f9gpOMldEHVC frTWQzTJ5ITnd8rsXwUlJ+Y99k6Qa+XFfhvEhbIKw27C4tgVB6SydCY5EP/XHw7vV/e3 V4Ww== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:in-reply-to:references:from:date :message-id:subject:to:cc:content-transfer-encoding; bh=Vv2I+KZrRbvyFgbXvswmrf6R/DFzAxwGYloBQ7LxW80=; b=HNCYgAUlpP7wfzKmBABgfzes6kAjUn1EPYl3vn5nFRL1UZxbg2DqoSI6g5Wsnzatf5 WxquXsFslfAMHILKM6OcJhO8i4I1/AbGUKfNstmKLeegUPaT7wVVQAzc203tmDf9o87m facd3/CXRBhQiW+hjwM+/tw4TENYwDyPPdfT2S3xRRap5nwdFT7wq8R7/TjdK2f11F1L dFhZ3siU9xwp8fckWHeycB514MAIqNn2nC88xI+psJBGeG5a1Il0hLrb4c8sdZuuFOnq JR/Z/ZgNtNV2W23ZQEAmphviSHEgTboA6Wbttb7uEs7Jz1jI4Z+lo/TKJSOxlNX24TPT Ajsw== X-Gm-Message-State: AIVw1103qBV50RJaWNMeB2Ey/IwTiLJjofQ7//L4P3hHc3HiNK9RyrjA mPzcliAXMRbS64jC7louTbeOqPcHVNag/Jc= X-Received: by 10.36.53.70 with SMTP id k67mr9461944ita.79.1500948984951; Mon, 24 Jul 2017 19:16:24 -0700 (PDT) MIME-Version: 1.0 Received: by 10.107.164.42 with HTTP; Mon, 24 Jul 2017 19:16:24 -0700 (PDT) In-Reply-To: References: From: Martin Thomson Date: Tue, 25 Jul 2017 12:16:24 +1000 Message-ID: To: "Xialiang (Frank)" Cc: "iesg@ietf.org" , "secdir@ietf.org" , "draft-ietf-webpush-encryption.all@ietf.org" Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable Archived-At: Subject: Re: [secdir] Secdir review of draft-ietf-webpush-encryption-08 X-BeenThere: secdir@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: Security Area Directorate List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 25 Jul 2017 02:16:27 -0000 Hi Frank, Thanks for the review. I've put changes on github here: https://github.com/webpush-wg/webpush-encryption/pull/16 On 24 July 2017 at 20:38, Xialiang (Frank) wrot= e: > 1. The word =E2=80=9Cfalsification=E2=80=9D is used in the section = 1, I am not sure if > you see any essential difference between it and the =E2=80=9Cmodification= =E2=80=9D. Can you > clarify it? The word was used intentionally to include protection against the ability to generate an inauthentic message. > 2. In section 2.1, the sentence =E2=80=9CMost applications that use= push > messaging have a pre-existing relationship with an Application Server=E2= =80=9D: what > is the exact meaning of =E2=80=9Cpre-existing relationship=E2=80=9D? From= the context, I > assume it=E2=80=99s a mutual authenticated and encrypted connection betwe= en the UA > and AS, right? More texts to clarify this term seem good here; I've expanded this a little. > 3. The second phase listed in section 3 (=E2=80=9CThe shared secret= is then > combined with the application secret to produce the input keying material= =E2=80=9D) > seems to be described in details in section 3.4, not section 3.3. Please > check it. And the term =E2=80=9Capplication secret=E2=80=9D can be change= d to > =E2=80=9Cauthentication secret=E2=80=9D for accuracy; Section 3.3 is correct. Section 3.4 is an overview of the entire process. "authentication secret" is a good catch there. > 4. In last paragraph of section 3.1, is =E2=80=9CAn Application Ser= ver=E2=80=9D more > appropriate? Yes, thanks. > 5. For the HKDF, should the salt be the authentication secret, or a > random (16)? In the case that you refer to, the authentication secret is correct. There are two randomized inputs in the entire process: the authentication secret is generated by the User Agent, and the salt is generated by the Application Server. Both are random(16) when generated, but then they are distributed to the other side. > 6. For formula of IKM =3D HMAC-SHA-256(PRK_cek, key_info || 0x01), > should the =E2=80=9CPRK_cek=E2=80=9D be =E2=80=9CPRK_key=E2=80=9D which i= s calculated before from > auth_secret and ecdh_secret? Obviously PRK_cek isn't generated until after this point, so you are right. (That's an editing error on my part.) > 7. In Security Considerations section, the potential threats (e.g., > eavesdropping, tempering, etc) of unprotected HTTP header fields have bee= n > identified, but the according protection measures are not discussed here. > Would it be better to have them? This is implied, but the mitigation is to discard them. I've made this cle= arer. From nobody Mon Jul 24 19:28:32 2017 Return-Path: X-Original-To: secdir@ietfa.amsl.com Delivered-To: secdir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 95C1D1267BB; Mon, 24 Jul 2017 19:28:30 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.221 X-Spam-Level: X-Spam-Status: No, score=-4.221 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, RP_MATCHES_RCVD=-0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id WWQojdgEJ3e3; Mon, 24 Jul 2017 19:28:28 -0700 (PDT) Received: from lhrrgout.huawei.com (lhrrgout.huawei.com [194.213.3.17]) (using TLSv1 with cipher RC4-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 5C2761201F8; Mon, 24 Jul 2017 19:28:27 -0700 (PDT) Received: from 172.18.7.190 (EHLO lhreml709-cah.china.huawei.com) ([172.18.7.190]) by lhrrg01-dlp.huawei.com (MOS 4.3.7-GA FastPath queued) with ESMTP id DRY12077; Tue, 25 Jul 2017 02:28:25 +0000 (GMT) Received: from DGGEML402-HUB.china.huawei.com (10.3.17.38) by lhreml709-cah.china.huawei.com (10.201.108.32) with Microsoft SMTP Server (TLS) id 14.3.301.0; Tue, 25 Jul 2017 03:28:23 +0100 Received: from DGGEML502-MBX.china.huawei.com ([169.254.2.84]) by DGGEML402-HUB.china.huawei.com ([fe80::fca6:7568:4ee3:c776%31]) with mapi id 14.03.0301.000; Tue, 25 Jul 2017 10:28:18 +0800 From: "Xialiang (Frank)" To: Martin Thomson CC: "iesg@ietf.org" , "secdir@ietf.org" , "draft-ietf-webpush-encryption.all@ietf.org" Thread-Topic: Secdir review of draft-ietf-webpush-encryption-08 Thread-Index: AdMEaPQXX4vDafpiRhyauKY8V1g8+QAQAEwAABDzc2A= Date: Tue, 25 Jul 2017 02:28:18 +0000 Message-ID: References: In-Reply-To: Accept-Language: zh-CN, en-US Content-Language: zh-CN X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.134.159.76] Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-CFilter-Loop: Reflected X-Mirapoint-Virus-RAPID-Raw: score=unknown(0), refid=str=0001.0A020203.5976ACC9.00E1, ss=1, re=0.000, recu=0.000, reip=0.000, cl=1, cld=1, fgs=0, ip=169.254.2.84, so=2013-06-18 04:22:30, dmn=2013-03-21 17:37:32 X-Mirapoint-Loop-Id: 4f85da376451614371bbc47680a5218f Archived-At: Subject: [secdir] =?utf-8?b?562U5aSNOiBTZWNkaXIgcmV2aWV3IG9mIGRyYWZ0LWll?= =?utf-8?q?tf-webpush-encryption-08?= X-BeenThere: secdir@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: Security Area Directorate List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 25 Jul 2017 02:28:31 -0000 SGkgTWFydGluLA0KVGhhbmtzIGZvciB5b3VyIHF1aWNrIHJlc3BvbnNlIGFuZCBhY3Rpb25zIHRv IG15IGNvbW1lbnRzLg0KDQpJIG9ubHkgaGF2ZSBvbmUgcXVlc3Rpb24gbGVmdDogc28geW91IG1l YW4gdGhlcmUgYXJlIHR3byBhdXRoZW50aWNhdGlvbiBzZWNyZXRzIGdlbmVyYXRlZCByZXNwZWN0 aXZlbHkgaW4gVUEgYW5kIEFTPyANCg0KQi5SLg0KRnJhbmsNCg0KLS0tLS3pgq7ku7bljp/ku7Yt LS0tLQ0K5Y+R5Lu25Lq6OiBNYXJ0aW4gVGhvbXNvbiBbbWFpbHRvOm1hcnRpbi50aG9tc29uQGdt YWlsLmNvbV0gDQrlj5HpgIHml7bpl7Q6IDIwMTflubQ35pyIMjXml6UgMTA6MTYNCuaUtuS7tuS6 ujogWGlhbGlhbmcgKEZyYW5rKQ0K5oqE6YCBOiBpZXNnQGlldGYub3JnOyBzZWNkaXJAaWV0Zi5v cmc7IGRyYWZ0LWlldGYtd2VicHVzaC1lbmNyeXB0aW9uLmFsbEBpZXRmLm9yZw0K5Li76aKYOiBS ZTogU2VjZGlyIHJldmlldyBvZiBkcmFmdC1pZXRmLXdlYnB1c2gtZW5jcnlwdGlvbi0wOA0KDQpI aSBGcmFuaywNCg0KVGhhbmtzIGZvciB0aGUgcmV2aWV3LiBJJ3ZlIHB1dCBjaGFuZ2VzIG9uIGdp dGh1YiBoZXJlOg0KaHR0cHM6Ly9naXRodWIuY29tL3dlYnB1c2gtd2cvd2VicHVzaC1lbmNyeXB0 aW9uL3B1bGwvMTYNCg0KT24gMjQgSnVseSAyMDE3IGF0IDIwOjM4LCBYaWFsaWFuZyAoRnJhbmsp IDxmcmFuay54aWFsaWFuZ0BodWF3ZWkuY29tPiB3cm90ZToNCj4gMS4gICAgICAgVGhlIHdvcmQg 4oCcZmFsc2lmaWNhdGlvbuKAnSBpcyB1c2VkIGluIHRoZSBzZWN0aW9uIDEsIEkgYW0gbm90IHN1 cmUgaWYNCj4geW91IHNlZSBhbnkgZXNzZW50aWFsIGRpZmZlcmVuY2UgYmV0d2VlbiBpdCBhbmQg dGhlIOKAnG1vZGlmaWNhdGlvbuKAnS4gDQo+IENhbiB5b3UgY2xhcmlmeSBpdD8NCg0KVGhlIHdv cmQgd2FzIHVzZWQgaW50ZW50aW9uYWxseSB0byBpbmNsdWRlIHByb3RlY3Rpb24gYWdhaW5zdCB0 aGUgYWJpbGl0eSB0byBnZW5lcmF0ZSBhbiBpbmF1dGhlbnRpYyBtZXNzYWdlLg0KDQo+IDIuICAg ICAgIEluIHNlY3Rpb24gMi4xLCB0aGUgc2VudGVuY2Ug4oCcTW9zdCBhcHBsaWNhdGlvbnMgdGhh dCB1c2UgcHVzaA0KPiBtZXNzYWdpbmcgaGF2ZSBhIHByZS1leGlzdGluZyByZWxhdGlvbnNoaXAg d2l0aCBhbiBBcHBsaWNhdGlvbiANCj4gU2VydmVy4oCdOiB3aGF0IGlzIHRoZSBleGFjdCBtZWFu aW5nIG9mIOKAnHByZS1leGlzdGluZyByZWxhdGlvbnNoaXDigJ0/IA0KPiBGcm9tIHRoZSBjb250 ZXh0LCBJIGFzc3VtZSBpdOKAmXMgYSBtdXR1YWwgYXV0aGVudGljYXRlZCBhbmQgZW5jcnlwdGVk IA0KPiBjb25uZWN0aW9uIGJldHdlZW4gdGhlIFVBIGFuZCBBUywgcmlnaHQ/IE1vcmUgdGV4dHMg dG8gY2xhcmlmeSB0aGlzIA0KPiB0ZXJtIHNlZW0gZ29vZCBoZXJlOw0KDQpJJ3ZlIGV4cGFuZGVk IHRoaXMgYSBsaXR0bGUuDQoNCj4gMy4gICAgICAgVGhlIHNlY29uZCBwaGFzZSBsaXN0ZWQgaW4g c2VjdGlvbiAzICjigJxUaGUgc2hhcmVkIHNlY3JldCBpcyB0aGVuDQo+IGNvbWJpbmVkIHdpdGgg dGhlIGFwcGxpY2F0aW9uIHNlY3JldCB0byBwcm9kdWNlIHRoZSBpbnB1dCBrZXlpbmcgDQo+IG1h dGVyaWFs4oCdKSBzZWVtcyB0byBiZSBkZXNjcmliZWQgaW4gZGV0YWlscyBpbiBzZWN0aW9uIDMu NCwgbm90IA0KPiBzZWN0aW9uIDMuMy4gUGxlYXNlIGNoZWNrIGl0LiBBbmQgdGhlIHRlcm0g4oCc YXBwbGljYXRpb24gc2VjcmV04oCdIGNhbiBiZSANCj4gY2hhbmdlZCB0byDigJxhdXRoZW50aWNh dGlvbiBzZWNyZXTigJ0gZm9yIGFjY3VyYWN5Ow0KDQpTZWN0aW9uIDMuMyBpcyBjb3JyZWN0LiAg U2VjdGlvbiAzLjQgaXMgYW4gb3ZlcnZpZXcgb2YgdGhlIGVudGlyZSBwcm9jZXNzLg0KDQoiYXV0 aGVudGljYXRpb24gc2VjcmV0IiBpcyBhIGdvb2QgY2F0Y2ggdGhlcmUuDQoNCj4gNC4gICAgICAg SW4gbGFzdCBwYXJhZ3JhcGggb2Ygc2VjdGlvbiAzLjEsIGlzIOKAnEFuIEFwcGxpY2F0aW9uIFNl cnZlcuKAnSBtb3JlDQo+IGFwcHJvcHJpYXRlPw0KDQpZZXMsIHRoYW5rcy4NCg0KPiA1LiAgICAg ICBGb3IgdGhlIEhLREYsIHNob3VsZCB0aGUgc2FsdCBiZSB0aGUgYXV0aGVudGljYXRpb24gc2Vj cmV0LCBvciBhDQo+IHJhbmRvbSAoMTYpPw0KDQpJbiB0aGUgY2FzZSB0aGF0IHlvdSByZWZlciB0 bywgdGhlIGF1dGhlbnRpY2F0aW9uIHNlY3JldCBpcyBjb3JyZWN0Lg0KVGhlcmUgYXJlIHR3byBy YW5kb21pemVkIGlucHV0cyBpbiB0aGUgZW50aXJlIHByb2Nlc3M6IHRoZSBhdXRoZW50aWNhdGlv biBzZWNyZXQgaXMgZ2VuZXJhdGVkIGJ5IHRoZSBVc2VyIEFnZW50LCBhbmQgdGhlIHNhbHQgaXMg Z2VuZXJhdGVkIGJ5IHRoZSBBcHBsaWNhdGlvbiBTZXJ2ZXIuICBCb3RoIGFyZSByYW5kb20oMTYp IHdoZW4gZ2VuZXJhdGVkLCBidXQgdGhlbiB0aGV5IGFyZSBkaXN0cmlidXRlZCB0byB0aGUgb3Ro ZXIgc2lkZS4NCg0KPiA2LiAgICAgICBGb3IgZm9ybXVsYSBvZiBJS00gPSBITUFDLVNIQS0yNTYo UFJLX2Nlaywga2V5X2luZm8gfHwgMHgwMSksDQo+IHNob3VsZCB0aGUg4oCcUFJLX2Nla+KAnSBi ZSDigJxQUktfa2V54oCdIHdoaWNoIGlzIGNhbGN1bGF0ZWQgYmVmb3JlIGZyb20gDQo+IGF1dGhf c2VjcmV0IGFuZCBlY2RoX3NlY3JldD8NCg0KT2J2aW91c2x5IFBSS19jZWsgaXNuJ3QgZ2VuZXJh dGVkIHVudGlsIGFmdGVyIHRoaXMgcG9pbnQsIHNvIHlvdSBhcmUgcmlnaHQuICAoVGhhdCdzIGFu IGVkaXRpbmcgZXJyb3Igb24gbXkgcGFydC4pDQoNCj4gNy4gICAgICAgSW4gU2VjdXJpdHkgQ29u c2lkZXJhdGlvbnMgc2VjdGlvbiwgdGhlIHBvdGVudGlhbCB0aHJlYXRzIChlLmcuLA0KPiBlYXZl c2Ryb3BwaW5nLCB0ZW1wZXJpbmcsIGV0Yykgb2YgdW5wcm90ZWN0ZWQgSFRUUCBoZWFkZXIgZmll bGRzIGhhdmUgDQo+IGJlZW4gaWRlbnRpZmllZCwgYnV0IHRoZSBhY2NvcmRpbmcgcHJvdGVjdGlv biBtZWFzdXJlcyBhcmUgbm90IGRpc2N1c3NlZCBoZXJlLg0KPiBXb3VsZCBpdCBiZSBiZXR0ZXIg dG8gaGF2ZSB0aGVtPw0KDQpUaGlzIGlzIGltcGxpZWQsIGJ1dCB0aGUgbWl0aWdhdGlvbiBpcyB0 byBkaXNjYXJkIHRoZW0uICBJJ3ZlIG1hZGUgdGhpcyBjbGVhcmVyLg0K From nobody Mon Jul 24 21:31:52 2017 Return-Path: X-Original-To: secdir@ietfa.amsl.com Delivered-To: secdir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 44150126BFD; Mon, 24 Jul 2017 21:31:45 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.699 X-Spam-Level: X-Spam-Status: No, score=-2.699 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id MKtCfeyoXjOJ; Mon, 24 Jul 2017 21:31:43 -0700 (PDT) Received: from mail-it0-x236.google.com (mail-it0-x236.google.com [IPv6:2607:f8b0:4001:c0b::236]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 04D2D1200F3; Mon, 24 Jul 2017 21:31:43 -0700 (PDT) Received: by mail-it0-x236.google.com with SMTP id v205so27909591itf.1; Mon, 24 Jul 2017 21:31:42 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:in-reply-to:references:from:date:message-id:subject:to :cc:content-transfer-encoding; bh=pZEors5ZP1kpB0Pe4JQvcZ5g/Rl9RdvnDUzNFj2kaRk=; b=JytyeWd/If+pwfwxWVmLoGsMwivAN8raxmCa14EDrPN82zipY6wTXeB3IKIuBdljxu R4H5Zn6E55n4cTwLukDUK8A9Q8YV6xUvp/l6vnoVoOgGJwCzWrH3Qg3E7m/0i3Do2uci UFrk4JlcSRvpb14vb2l2zTX3AIM4YswUKWsX3iTILD9AOnjbZ14LyKYiBKIpdMD3aZ0y niZp54C73QcRNBMnjMgG9cBu7Cz2QZfaMWbGt8FVj40YlHqVU6UzXdkSgw/p7UopEGDq GQBxmc+dmtTfKm0MZoY889K74GKW8NQ5Qnr+bWGGTnKylg8xkw35gN2PeHnIItOGe0XU S7JQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:in-reply-to:references:from:date :message-id:subject:to:cc:content-transfer-encoding; bh=pZEors5ZP1kpB0Pe4JQvcZ5g/Rl9RdvnDUzNFj2kaRk=; b=VsT5i23HRkeSyc7WR6UcrUvflGisqWDCihyGOo7vLNdgFWzG6aGaawerSJthcjlNBF h0XU4GdWUOrtDm8aLewyklXEqMQZaEmxW7Qzvn7tbi3pjioaJYHdf9vB/XYCN1/MUc3e weGeaIHri9DF5dmb3VCKsYIUWNXBqx11P6C2hl7HXAzETYZgUGiQifBIQfl9OmMg/HRe OSzUcRH4aBwpe4pKRoC+QZq25dp2CQyX6Rs+NEJ+bW4YzDT1A9Qd6NPY3tc0Y8m59kzM TvCnqvRWAxPNoOKe93O56YHszt9eGV6t0+5QBE8mRrb1mZkCbg+BUwH/gtcXKUBm79g3 +O0A== X-Gm-Message-State: AIVw1127jDLwGCR9M1ycNvMVO9VAWKsn8P9uI/EbcmQmh1DpFn0SUjm9 04a+zWIIoJOoMf7/YgCVl5oNhig5KA== X-Received: by 10.36.5.68 with SMTP id 65mr9801045itl.140.1500957102258; Mon, 24 Jul 2017 21:31:42 -0700 (PDT) MIME-Version: 1.0 Received: by 10.107.164.42 with HTTP; Mon, 24 Jul 2017 21:31:41 -0700 (PDT) In-Reply-To: References: From: Martin Thomson Date: Tue, 25 Jul 2017 14:31:41 +1000 Message-ID: To: "Xialiang (Frank)" Cc: "iesg@ietf.org" , "secdir@ietf.org" , "draft-ietf-webpush-encryption.all@ietf.org" Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable Archived-At: Subject: Re: [secdir] =?utf-8?b?562U5aSNOiBTZWNkaXIgcmV2aWV3IG9mIGRyYWZ0LWll?= =?utf-8?q?tf-webpush-encryption-08?= X-BeenThere: secdir@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: Security Area Directorate List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 25 Jul 2017 04:31:45 -0000 No, there is only one authentication secret. The second salt doesn't carry any significance (it just helps avoid key and IV reuse). On 25 July 2017 at 12:28, Xialiang (Frank) wrot= e: > Hi Martin, > Thanks for your quick response and actions to my comments. > > I only have one question left: so you mean there are two authentication s= ecrets generated respectively in UA and AS? > > B.R. > Frank > > -----=E9=82=AE=E4=BB=B6=E5=8E=9F=E4=BB=B6----- > =E5=8F=91=E4=BB=B6=E4=BA=BA: Martin Thomson [mailto:martin.thomson@gmail.= com] > =E5=8F=91=E9=80=81=E6=97=B6=E9=97=B4: 2017=E5=B9=B47=E6=9C=8825=E6=97=A5 = 10:16 > =E6=94=B6=E4=BB=B6=E4=BA=BA: Xialiang (Frank) > =E6=8A=84=E9=80=81: iesg@ietf.org; secdir@ietf.org; draft-ietf-webpush-en= cryption.all@ietf.org > =E4=B8=BB=E9=A2=98: Re: Secdir review of draft-ietf-webpush-encryption-08 > > Hi Frank, > > Thanks for the review. I've put changes on github here: > https://github.com/webpush-wg/webpush-encryption/pull/16 > > On 24 July 2017 at 20:38, Xialiang (Frank) wr= ote: >> 1. The word =E2=80=9Cfalsification=E2=80=9D is used in the section= 1, I am not sure if >> you see any essential difference between it and the =E2=80=9Cmodificatio= n=E2=80=9D. >> Can you clarify it? > > The word was used intentionally to include protection against the ability= to generate an inauthentic message. > >> 2. In section 2.1, the sentence =E2=80=9CMost applications that us= e push >> messaging have a pre-existing relationship with an Application >> Server=E2=80=9D: what is the exact meaning of =E2=80=9Cpre-existing rela= tionship=E2=80=9D? >> From the context, I assume it=E2=80=99s a mutual authenticated and encry= pted >> connection between the UA and AS, right? More texts to clarify this >> term seem good here; > > I've expanded this a little. > >> 3. The second phase listed in section 3 (=E2=80=9CThe shared secre= t is then >> combined with the application secret to produce the input keying >> material=E2=80=9D) seems to be described in details in section 3.4, not >> section 3.3. Please check it. And the term =E2=80=9Capplication secret= =E2=80=9D can be >> changed to =E2=80=9Cauthentication secret=E2=80=9D for accuracy; > > Section 3.3 is correct. Section 3.4 is an overview of the entire process= . > > "authentication secret" is a good catch there. > >> 4. In last paragraph of section 3.1, is =E2=80=9CAn Application Se= rver=E2=80=9D more >> appropriate? > > Yes, thanks. > >> 5. For the HKDF, should the salt be the authentication secret, or = a >> random (16)? > > In the case that you refer to, the authentication secret is correct. > There are two randomized inputs in the entire process: the authentication= secret is generated by the User Agent, and the salt is generated by the Ap= plication Server. Both are random(16) when generated, but then they are di= stributed to the other side. > >> 6. For formula of IKM =3D HMAC-SHA-256(PRK_cek, key_info || 0x01), >> should the =E2=80=9CPRK_cek=E2=80=9D be =E2=80=9CPRK_key=E2=80=9D which = is calculated before from >> auth_secret and ecdh_secret? > > Obviously PRK_cek isn't generated until after this point, so you are righ= t. (That's an editing error on my part.) > >> 7. In Security Considerations section, the potential threats (e.g.= , >> eavesdropping, tempering, etc) of unprotected HTTP header fields have >> been identified, but the according protection measures are not discussed= here. >> Would it be better to have them? > > This is implied, but the mitigation is to discard them. I've made this c= learer. From nobody Mon Jul 24 22:47:45 2017 Return-Path: X-Original-To: secdir@ietfa.amsl.com Delivered-To: secdir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 2AD2F126DC2; Mon, 24 Jul 2017 22:47:44 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.221 X-Spam-Level: X-Spam-Status: No, score=-4.221 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, RP_MATCHES_RCVD=-0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 6YjvtAUtQadM; Mon, 24 Jul 2017 22:47:42 -0700 (PDT) Received: from lhrrgout.huawei.com (lhrrgout.huawei.com [194.213.3.17]) (using TLSv1 with cipher RC4-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 28A00126B7E; Mon, 24 Jul 2017 22:47:40 -0700 (PDT) Received: from 172.18.7.190 (EHLO LHREML714-CAH.china.huawei.com) ([172.18.7.190]) by lhrrg01-dlp.huawei.com (MOS 4.3.7-GA FastPath queued) with ESMTP id DRY34306; Tue, 25 Jul 2017 05:47:38 +0000 (GMT) Received: from DGGEML401-HUB.china.huawei.com (10.3.17.32) by LHREML714-CAH.china.huawei.com (10.201.108.37) with Microsoft SMTP Server (TLS) id 14.3.301.0; Tue, 25 Jul 2017 06:47:37 +0100 Received: from DGGEML502-MBX.china.huawei.com ([169.254.2.84]) by DGGEML401-HUB.china.huawei.com ([fe80::89ed:853e:30a9:2a79%31]) with mapi id 14.03.0301.000; Tue, 25 Jul 2017 13:47:33 +0800 From: "Xialiang (Frank)" To: Martin Thomson CC: "iesg@ietf.org" , "secdir@ietf.org" , "draft-ietf-webpush-encryption.all@ietf.org" Thread-Topic: =?utf-8?B?562U5aSNOiBTZWNkaXIgcmV2aWV3IG9mIGRyYWZ0LWlldGYtd2VicHVzaC1l?= =?utf-8?Q?ncryption-08?= Thread-Index: AdMEaPQXX4vDafpiRhyauKY8V1g8+QAQAEwAABDzc2D//54wgP//ZMuw Date: Tue, 25 Jul 2017 05:47:33 +0000 Message-ID: References: In-Reply-To: Accept-Language: zh-CN, en-US Content-Language: zh-CN X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.134.159.76] Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-CFilter-Loop: Reflected X-Mirapoint-Virus-RAPID-Raw: score=unknown(0), refid=str=0001.0A020205.5976DB7B.0043, ss=1, re=0.000, recu=0.000, reip=0.000, cl=1, cld=1, fgs=0, ip=169.254.2.84, so=2013-06-18 04:22:30, dmn=2013-03-21 17:37:32 X-Mirapoint-Loop-Id: fa1a073681d43f6078cdd65ae021b313 Archived-At: Subject: [secdir] =?utf-8?b?562U5aSNOiDnrZTlpI06IFNlY2RpciByZXZpZXcgb2Yg?= =?utf-8?q?draft-ietf-webpush-encryption-08?= X-BeenThere: secdir@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: Security Area Directorate List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 25 Jul 2017 05:47:44 -0000 SSBzZWUsIHRoYW5rcyENCk5vIG1vcmUgY29tbWVudHMuLi4NCg0KLS0tLS3pgq7ku7bljp/ku7Yt LS0tLQ0K5Y+R5Lu25Lq6OiBNYXJ0aW4gVGhvbXNvbiBbbWFpbHRvOm1hcnRpbi50aG9tc29uQGdt YWlsLmNvbV0gDQrlj5HpgIHml7bpl7Q6IDIwMTflubQ35pyIMjXml6UgMTI6MzINCuaUtuS7tuS6 ujogWGlhbGlhbmcgKEZyYW5rKQ0K5oqE6YCBOiBpZXNnQGlldGYub3JnOyBzZWNkaXJAaWV0Zi5v cmc7IGRyYWZ0LWlldGYtd2VicHVzaC1lbmNyeXB0aW9uLmFsbEBpZXRmLm9yZw0K5Li76aKYOiBS ZTog562U5aSNOiBTZWNkaXIgcmV2aWV3IG9mIGRyYWZ0LWlldGYtd2VicHVzaC1lbmNyeXB0aW9u LTA4DQoNCk5vLCB0aGVyZSBpcyBvbmx5IG9uZSBhdXRoZW50aWNhdGlvbiBzZWNyZXQuICBUaGUg c2Vjb25kIHNhbHQgZG9lc24ndCBjYXJyeSBhbnkgc2lnbmlmaWNhbmNlIChpdCBqdXN0IGhlbHBz IGF2b2lkIGtleSBhbmQgSVYgcmV1c2UpLg0KDQpPbiAyNSBKdWx5IDIwMTcgYXQgMTI6MjgsIFhp YWxpYW5nIChGcmFuaykgPGZyYW5rLnhpYWxpYW5nQGh1YXdlaS5jb20+IHdyb3RlOg0KPiBIaSBN YXJ0aW4sDQo+IFRoYW5rcyBmb3IgeW91ciBxdWljayByZXNwb25zZSBhbmQgYWN0aW9ucyB0byBt eSBjb21tZW50cy4NCj4NCj4gSSBvbmx5IGhhdmUgb25lIHF1ZXN0aW9uIGxlZnQ6IHNvIHlvdSBt ZWFuIHRoZXJlIGFyZSB0d28gYXV0aGVudGljYXRpb24gc2VjcmV0cyBnZW5lcmF0ZWQgcmVzcGVj dGl2ZWx5IGluIFVBIGFuZCBBUz8NCj4NCj4gQi5SLg0KPiBGcmFuaw0KPg0KPiAtLS0tLemCruS7 tuWOn+S7ti0tLS0tDQo+IOWPkeS7tuS6ujogTWFydGluIFRob21zb24gW21haWx0bzptYXJ0aW4u dGhvbXNvbkBnbWFpbC5jb21dDQo+IOWPkemAgeaXtumXtDogMjAxN+W5tDfmnIgyNeaXpSAxMDox Ng0KPiDmlLbku7bkuro6IFhpYWxpYW5nIChGcmFuaykNCj4g5oqE6YCBOiBpZXNnQGlldGYub3Jn OyBzZWNkaXJAaWV0Zi5vcmc7IA0KPiBkcmFmdC1pZXRmLXdlYnB1c2gtZW5jcnlwdGlvbi5hbGxA aWV0Zi5vcmcNCj4g5Li76aKYOiBSZTogU2VjZGlyIHJldmlldyBvZiBkcmFmdC1pZXRmLXdlYnB1 c2gtZW5jcnlwdGlvbi0wOA0KPg0KPiBIaSBGcmFuaywNCj4NCj4gVGhhbmtzIGZvciB0aGUgcmV2 aWV3LiBJJ3ZlIHB1dCBjaGFuZ2VzIG9uIGdpdGh1YiBoZXJlOg0KPiBodHRwczovL2dpdGh1Yi5j b20vd2VicHVzaC13Zy93ZWJwdXNoLWVuY3J5cHRpb24vcHVsbC8xNg0KPg0KPiBPbiAyNCBKdWx5 IDIwMTcgYXQgMjA6MzgsIFhpYWxpYW5nIChGcmFuaykgPGZyYW5rLnhpYWxpYW5nQGh1YXdlaS5j b20+IHdyb3RlOg0KPj4gMS4gICAgICAgVGhlIHdvcmQg4oCcZmFsc2lmaWNhdGlvbuKAnSBpcyB1 c2VkIGluIHRoZSBzZWN0aW9uIDEsIEkgYW0gbm90IHN1cmUgaWYNCj4+IHlvdSBzZWUgYW55IGVz c2VudGlhbCBkaWZmZXJlbmNlIGJldHdlZW4gaXQgYW5kIHRoZSDigJxtb2RpZmljYXRpb27igJ0u DQo+PiBDYW4geW91IGNsYXJpZnkgaXQ/DQo+DQo+IFRoZSB3b3JkIHdhcyB1c2VkIGludGVudGlv bmFsbHkgdG8gaW5jbHVkZSBwcm90ZWN0aW9uIGFnYWluc3QgdGhlIGFiaWxpdHkgdG8gZ2VuZXJh dGUgYW4gaW5hdXRoZW50aWMgbWVzc2FnZS4NCj4NCj4+IDIuICAgICAgIEluIHNlY3Rpb24gMi4x LCB0aGUgc2VudGVuY2Ug4oCcTW9zdCBhcHBsaWNhdGlvbnMgdGhhdCB1c2UgcHVzaA0KPj4gbWVz c2FnaW5nIGhhdmUgYSBwcmUtZXhpc3RpbmcgcmVsYXRpb25zaGlwIHdpdGggYW4gQXBwbGljYXRp b24NCj4+IFNlcnZlcuKAnTogd2hhdCBpcyB0aGUgZXhhY3QgbWVhbmluZyBvZiDigJxwcmUtZXhp c3RpbmcgcmVsYXRpb25zaGlw4oCdPw0KPj4gRnJvbSB0aGUgY29udGV4dCwgSSBhc3N1bWUgaXTi gJlzIGEgbXV0dWFsIGF1dGhlbnRpY2F0ZWQgYW5kIGVuY3J5cHRlZCANCj4+IGNvbm5lY3Rpb24g YmV0d2VlbiB0aGUgVUEgYW5kIEFTLCByaWdodD8gTW9yZSB0ZXh0cyB0byBjbGFyaWZ5IHRoaXMg DQo+PiB0ZXJtIHNlZW0gZ29vZCBoZXJlOw0KPg0KPiBJJ3ZlIGV4cGFuZGVkIHRoaXMgYSBsaXR0 bGUuDQo+DQo+PiAzLiAgICAgICBUaGUgc2Vjb25kIHBoYXNlIGxpc3RlZCBpbiBzZWN0aW9uIDMg KOKAnFRoZSBzaGFyZWQgc2VjcmV0IGlzIHRoZW4NCj4+IGNvbWJpbmVkIHdpdGggdGhlIGFwcGxp Y2F0aW9uIHNlY3JldCB0byBwcm9kdWNlIHRoZSBpbnB1dCBrZXlpbmcNCj4+IG1hdGVyaWFs4oCd KSBzZWVtcyB0byBiZSBkZXNjcmliZWQgaW4gZGV0YWlscyBpbiBzZWN0aW9uIDMuNCwgbm90IA0K Pj4gc2VjdGlvbiAzLjMuIFBsZWFzZSBjaGVjayBpdC4gQW5kIHRoZSB0ZXJtIOKAnGFwcGxpY2F0 aW9uIHNlY3JldOKAnSBjYW4gDQo+PiBiZSBjaGFuZ2VkIHRvIOKAnGF1dGhlbnRpY2F0aW9uIHNl Y3JldOKAnSBmb3IgYWNjdXJhY3k7DQo+DQo+IFNlY3Rpb24gMy4zIGlzIGNvcnJlY3QuICBTZWN0 aW9uIDMuNCBpcyBhbiBvdmVydmlldyBvZiB0aGUgZW50aXJlIHByb2Nlc3MuDQo+DQo+ICJhdXRo ZW50aWNhdGlvbiBzZWNyZXQiIGlzIGEgZ29vZCBjYXRjaCB0aGVyZS4NCj4NCj4+IDQuICAgICAg IEluIGxhc3QgcGFyYWdyYXBoIG9mIHNlY3Rpb24gMy4xLCBpcyDigJxBbiBBcHBsaWNhdGlvbiBT ZXJ2ZXLigJ0gbW9yZQ0KPj4gYXBwcm9wcmlhdGU/DQo+DQo+IFllcywgdGhhbmtzLg0KPg0KPj4g NS4gICAgICAgRm9yIHRoZSBIS0RGLCBzaG91bGQgdGhlIHNhbHQgYmUgdGhlIGF1dGhlbnRpY2F0 aW9uIHNlY3JldCwgb3IgYQ0KPj4gcmFuZG9tICgxNik/DQo+DQo+IEluIHRoZSBjYXNlIHRoYXQg eW91IHJlZmVyIHRvLCB0aGUgYXV0aGVudGljYXRpb24gc2VjcmV0IGlzIGNvcnJlY3QuDQo+IFRo ZXJlIGFyZSB0d28gcmFuZG9taXplZCBpbnB1dHMgaW4gdGhlIGVudGlyZSBwcm9jZXNzOiB0aGUg YXV0aGVudGljYXRpb24gc2VjcmV0IGlzIGdlbmVyYXRlZCBieSB0aGUgVXNlciBBZ2VudCwgYW5k IHRoZSBzYWx0IGlzIGdlbmVyYXRlZCBieSB0aGUgQXBwbGljYXRpb24gU2VydmVyLiAgQm90aCBh cmUgcmFuZG9tKDE2KSB3aGVuIGdlbmVyYXRlZCwgYnV0IHRoZW4gdGhleSBhcmUgZGlzdHJpYnV0 ZWQgdG8gdGhlIG90aGVyIHNpZGUuDQo+DQo+PiA2LiAgICAgICBGb3IgZm9ybXVsYSBvZiBJS00g PSBITUFDLVNIQS0yNTYoUFJLX2Nlaywga2V5X2luZm8gfHwgMHgwMSksDQo+PiBzaG91bGQgdGhl IOKAnFBSS19jZWvigJ0gYmUg4oCcUFJLX2tleeKAnSB3aGljaCBpcyBjYWxjdWxhdGVkIGJlZm9y ZSBmcm9tIA0KPj4gYXV0aF9zZWNyZXQgYW5kIGVjZGhfc2VjcmV0Pw0KPg0KPiBPYnZpb3VzbHkg UFJLX2NlayBpc24ndCBnZW5lcmF0ZWQgdW50aWwgYWZ0ZXIgdGhpcyBwb2ludCwgc28geW91IGFy ZSANCj4gcmlnaHQuICAoVGhhdCdzIGFuIGVkaXRpbmcgZXJyb3Igb24gbXkgcGFydC4pDQo+DQo+ PiA3LiAgICAgICBJbiBTZWN1cml0eSBDb25zaWRlcmF0aW9ucyBzZWN0aW9uLCB0aGUgcG90ZW50 aWFsIHRocmVhdHMgKGUuZy4sDQo+PiBlYXZlc2Ryb3BwaW5nLCB0ZW1wZXJpbmcsIGV0Yykgb2Yg dW5wcm90ZWN0ZWQgSFRUUCBoZWFkZXIgZmllbGRzIGhhdmUgDQo+PiBiZWVuIGlkZW50aWZpZWQs IGJ1dCB0aGUgYWNjb3JkaW5nIHByb3RlY3Rpb24gbWVhc3VyZXMgYXJlIG5vdCBkaXNjdXNzZWQg aGVyZS4NCj4+IFdvdWxkIGl0IGJlIGJldHRlciB0byBoYXZlIHRoZW0/DQo+DQo+IFRoaXMgaXMg aW1wbGllZCwgYnV0IHRoZSBtaXRpZ2F0aW9uIGlzIHRvIGRpc2NhcmQgdGhlbS4gIEkndmUgbWFk ZSB0aGlzIGNsZWFyZXIuDQo= From nobody Wed Jul 26 06:18:48 2017 Return-Path: X-Original-To: secdir@ietfa.amsl.com Delivered-To: secdir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id ACE16132033 for ; Wed, 26 Jul 2017 06:18:46 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.9 X-Spam-Level: X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_DNSWL_NONE=-0.0001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=previdi-net.20150623.gappssmtp.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 6HopWci3yMgy for ; Wed, 26 Jul 2017 06:18:45 -0700 (PDT) Received: from mail-wm0-x241.google.com (mail-wm0-x241.google.com [IPv6:2a00:1450:400c:c09::241]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 265E013202E for ; Wed, 26 Jul 2017 06:18:45 -0700 (PDT) Received: by mail-wm0-x241.google.com with SMTP id r123so10594801wmb.5 for ; Wed, 26 Jul 2017 06:18:45 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=previdi-net.20150623.gappssmtp.com; s=20150623; h=subject:mime-version:from:in-reply-to:date:cc :content-transfer-encoding:message-id:references:to; bh=PBEBERVFpYdiNr8F6BCUx2Dsw9PJVe/ASZ87RGMiBn8=; b=GZ8mceeRmIEW4PAqtFFYVNdWnBFOP8pCnL5+UAUpdAPADfGBuo389ZkfEt/xo4Q2+2 F3nIi7yfepfUSqgWguhIsTLSHQm65XY3tkcSgaUkqzSChhVoR4yXxk1RQReOTG+mzbUj BseVfbNcHG1UWInE7CQ9ikzBGDFcTBQAU+1CBp7D28gbMzqwicUxeMQU/wlIRsgUJVcj Suth8d0qRE4uFu4r+3WAaFRLIZ4eAnCJOmfEZE2Bld+UH+TaD8Ed+bhi0wL7KIPhdSzl sYF7GWDDtHhx0T1Ydq7Brovsu3BSUaLo3ujp1XBX61HZayhr5sFL3hkYs10xj/JLI2Qm w75Q== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:subject:mime-version:from:in-reply-to:date:cc :content-transfer-encoding:message-id:references:to; bh=PBEBERVFpYdiNr8F6BCUx2Dsw9PJVe/ASZ87RGMiBn8=; b=I3yhsSaNnETcSe2bRLHdz03wdMk7d4jVkoG8H/k07wO9pbQcGE7OlZpTr/J911OZD9 2w9s550fC2I9Z9fLHYmXk78RaQWPtaJ3gndD3oqXZd+V2o8imzyUHDpUjNC4OwdrDktD Cx3mzNXq2L8iTpNE6E4plAHPZ603JvokVEvIsxLcRqo63f9rxPHDROJ7ulWHH2ghsYzw GlV6oeTKQinzWw+ZXq9ZJ1RZqaTOyu7+O7I8Q025pkofrB3Ld8SKSL50hpvEJHOQU1x9 k7gv0pVJrGzd3gEdiYpnqHYAtHpQZyaucWMHE3qnBJ8HFYX+cITxHMj0B/0eI+lqtg2I bmwA== X-Gm-Message-State: AIVw112ECJy6Je9UQPaUeRM/5AKhSDz2GeoMHGjmtNkSgIqo1MpidXWS XE6gbJsFR8faBbqb X-Received: by 10.28.212.10 with SMTP id l10mr772480wmg.40.1501075123474; Wed, 26 Jul 2017 06:18:43 -0700 (PDT) Received: from dhcp-10-61-103-15.cisco.com ([173.38.220.58]) by smtp.gmail.com with ESMTPSA id x98sm31558533wrb.47.2017.07.26.06.18.41 (version=TLS1 cipher=ECDHE-RSA-AES128-SHA bits=128/128); Wed, 26 Jul 2017 06:18:42 -0700 (PDT) Mime-Version: 1.0 (Mac OS X Mail 8.2 \(2104\)) Content-Type: text/plain; charset=utf-8 From: stefano previdi In-Reply-To: <150071889993.20425.5273428383173596948@ietfa.amsl.com> Date: Wed, 26 Jul 2017 15:18:40 +0200 Cc: secdir@ietf.org, iesg@ietf.org, draft-ietf-idr-bgp-prefix-sid.all@ietf.org Content-Transfer-Encoding: quoted-printable Message-Id: <6A05B578-F8DE-4197-97B8-82886089782B@previdi.net> References: <150071889993.20425.5273428383173596948@ietfa.amsl.com> To: Brian Weis X-Mailer: Apple Mail (2.2104) Archived-At: Subject: Re: [secdir] Secdir early review of draft-ietf-idr-bgp-prefix-sid-06 X-BeenThere: secdir@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: Security Area Directorate List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 26 Jul 2017 13:18:46 -0000 Hi Brian, thanks for the review. Some comments here below. > On Jul 22, 2017, at 12:21 PM, Brian Weis wrote: >=20 > Reviewer: Brian Weis > Review result: Has Nits >=20 > I have reviewed this document as part of the security directorate's = ongoing > effort to review all IETF documents being processed by the IESG. These = comments > were written primarily for the benefit of the security area directors. = Document > editors and WG chairs should treat these comments just like any other = last call > comments. >=20 > This document describes a BGP extension to signal the BGP Prefix-SID = use with > Segment Routing. as well as the rules to originate, receive and = handle error > conditions. The BGP extension defines a new type of BGP path attribute = passed > within BGP, and does not change the security considerations of the BGP = protocol > itself. >=20 > I consider this document =E2=80=9Cready with nits=E2=80=9D. >=20 > The Security Considerations section reasonably states that the use of = this BGP > attribute =E2=80=9Cinherits the security considerations=E2=80=9D of = the BGP-4 RFC as well as > the RFC defining how labels are carried in BGP-4. As an aside, those = documents > are quite old. For example, RFC 4271 says that the TCP-MD5 option is = required > to implement for authentication, but this has been replaced by a much = stronger > authentication method (TCP-AO). It would be nice if we had newer = security > considerations for BGP-4 but that advice doesn=E2=80=99t belong in = this document. >=20 > The Security Considerations might have said something about the how an = AS would > protect itself against a peer sending the Prefix-SID attribute across = AS > boundaries, but that text is contained in useful places elsewhere in = the > document and seems sufficient. >=20 > I have only one nit, which is some confusion regarding scoping of the = SID. The > document clearly states that a SID has a limited scope within the = network,=20 > which is important because outside of that scope an SID value would = have a > different meaning. This is a security consideration, because = accepting a SID > in the wrong scope could possibly cause a security issue if packets = are > forwarded to the wrong identity (e.g, the packets were intended for a = firewall > within the AS, not a service outside of the AS). >=20 > (a) Section 5.1 says it should not be advertised outside of an AS = unless > =E2=80=9Cexplicitly configured to do so=E2=80=9D. It would be nice if = the conditions for > explicitly configuring the SID to be advertised outside of the AS were > mentioned here. usually we don=E2=80=99t define these condition because they are related = to each individual operator policy. What we want to be sure of is that = any compliant implementation, by default, will not propagate the = attribute outside the AS. Under which conditions propagation is allowed is a local matter of the = operator and how it is effectively achieved is a matter of local = implementation. > (b) The last paragraph of Section 8 says it is applicable within an SR = Domain > (i.e., more than an AS), and Security Considerations says something = similar. >=20 > (c) Security Considerations speaks of limiting BGP Prefix-SID within a > =E2=80=9Cdomain=E2=80=9D. Is that intending to say an =E2=80=9CSR = domain=E2=80=9D? More generally, by domain we intend the set of AS under control of the = same organization/operator. > I suspect whether an SID should be advertised outside of the AS = depends on > whether an AS is part of an =E2=80=9CSR domain=E2=80=9D or not, and = that there's likely never a > good case to advertise it outside of an AS unless it is part of an "SR = domain". > But it would be good if there was some text clarifying the conditions = when it > is reasonable to share an SID between ASes. Well, I=E2=80=99m not sure that would be a good idea because the = conditions may vary over time and we will never be exhaustive anyway. Thanks. s. >=20 From nobody Thu Jul 27 02:16:14 2017 Return-Path: X-Original-To: secdir@ietfa.amsl.com Delivered-To: secdir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id EF57B13188F; Thu, 27 Jul 2017 02:16:00 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.222 X-Spam-Level: X-Spam-Status: No, score=-4.222 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, RP_MATCHES_RCVD=-0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id VBJrvdXhwNNp; Thu, 27 Jul 2017 02:15:59 -0700 (PDT) Received: from lhrrgout.huawei.com (lhrrgout.huawei.com [194.213.3.17]) (using TLSv1 with cipher RC4-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 8B1FA127180; Thu, 27 Jul 2017 02:15:58 -0700 (PDT) Received: from 172.18.7.190 (EHLO lhreml701-cah.china.huawei.com) ([172.18.7.190]) by lhrrg02-dlp.huawei.com (MOS 4.3.7-GA FastPath queued) with ESMTP id DLJ95902; Thu, 27 Jul 2017 09:15:56 +0000 (GMT) Received: from DGGEMI404-HUB.china.huawei.com (10.3.17.142) by lhreml701-cah.china.huawei.com (10.201.108.42) with Microsoft SMTP Server (TLS) id 14.3.301.0; Thu, 27 Jul 2017 10:15:54 +0100 Received: from DGGEMI501-MBS.china.huawei.com ([169.254.2.52]) by dggemi404-hub.china.huawei.com ([10.3.17.142]) with mapi id 14.03.0301.000; Thu, 27 Jul 2017 17:15:50 +0800 From: zhangdacheng To: Russ Housley CC: IETF SecDir , IESG , curdle Thread-Topic: Secdir review of draft-ietf-curdle-cms-eddsa-signatures-06 Thread-Index: AQHTBJmcnToY9SpHqUWCJHwmpqIR0KJju5nQ Date: Thu, 27 Jul 2017 09:15:49 +0000 Message-ID: <879E76B64CF340468BF5E4DE504C22420160BC01@dggemi501-mbs.china.huawei.com> References: <879E76B64CF340468BF5E4DE504C22420160B1FA@dggemi501-mbs.china.huawei.com> In-Reply-To: Accept-Language: zh-CN, en-US Content-Language: zh-CN X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.130.167.227] Content-Type: text/plain; charset="gb2312" Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-CFilter-Loop: Reflected X-Mirapoint-Virus-RAPID-Raw: score=unknown(0), refid=str=0001.0A020206.5979AF4D.0019, ss=1, re=0.000, recu=0.000, reip=0.000, cl=1, cld=1, fgs=0, ip=169.254.2.52, so=2013-06-18 04:22:30, dmn=2013-03-21 17:37:32 X-Mirapoint-Loop-Id: d0355d5fd6156d16a8383073044d4cb5 Archived-At: Subject: [secdir] =?gb2312?b?tPC4tDogU2VjZGlyIHJldmlldyBvZiBkcmFmdC1pZXRm?= =?gb2312?b?LWN1cmRsZS1jbXMtZWRkc2Etc2lnbmF0dXJlcy0wNg==?= X-BeenThere: secdir@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: Security Area Directorate List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 27 Jul 2017 09:16:01 -0000 SGksIFJ1c3M6DQoNClNlZSBtZSBjb21tZW50cyBiZWxvdyBwbGVhc2UuDQoNCj4gMS4gSW4gc2Vj dXJpdHkgY29uc2lkZXJhdGlvbnMsIHRoZSBmaXJzdCBhbmQgdGhlIHNlY29uZCBwYXJhZ3JhcGhz IGFyZSBhYm91dCBob3cgaW1wbGVtZW50YXRpb25zIHByb3RlY3QgdGhlIHByaXZhdGUga2V5cyBh bmQgaG93IHRoZXkgZ3VhcmFudGVlIHRoZSBxdWFsaXR5IG9mIHJhbmRvbSBudW1iZXJzLiBOb3Jt YWxseSwgdGhpcyBzdWNoIGNvbnNpZGVyYXRpb25zIGFyZSBvdXQgb2Ygc2NvcGUgb2YgcHJvdG9j b2wgc3BlY2lmaWNhdGlvbnMuIEJ1dCBJIGFtIG9rIGlmIHRoZSBhdXRob3JzIHdvdWxkIGxpa2Ug dG8ga2VlcCB0aGVtLiANCg0KVGhlc2UgYXJlIGltcGxlbWVudGF0aW9uIGNvbnNpZGVyYXRpb25z IHRoYXQgaW1wYWN0IHNlY3VyaXR5LiAgSSB0aGluayB0aGV5IHNob3VsZCBzdGF5IGluIHRoZSBk b2N1bWVudC4NCg0KRGFjaGVuZzogc3VyZS4NCg0KPiAyLiBJbiB0aGUgNHRoIHBhcmFncmFwaCBv ZiBzZWN1cml0eSBjb25zaWRlcmF0aW9ucywgJyB0aGUgc2FtZSBwcml2YXRlIGtleSBTSE9VTEQg Tk9UIGJlIHVzZWQgd2l0aCBtb3JlIHRoYW4gb25lIEVkRFNBIHNldCBvZiBwYXJhbWV0ZXJzLicg LT4gJyB0aGUgc2FtZSBwcml2YXRlIGtleSBNVVNUIE5PVCBiZSB1c2VkIHdpdGggbW9yZSB0aGFu IG9uZSBFZERTQSBzZXQgb2YgcGFyYW1ldGVycy4nIFNpbmNlIHdlIGFscmVhZHkga25vdyB0aGF0 IHRoZSBzYW1lIHByaXZhdGUga2V5IHVzZWQgZm9yIG11bHRpcGxlIGFsZ29yaXRobXMgd2lsbCBj YXVzZSBwb3RlbnRpYWwgcmlza3MsIHdlIHNob3VsZCB1c2UgYSBzdHJvbmdlciB3b3JkIGhlcmUu DQoNCkkgZG8gbm90IHRoaW5rIHRoYXQgdGhlcmUgaXMgYSBwcm9ibGVtIHdpdGggdXNpbmcgdGhl IHNhbWUgcHJpdmF0ZSBrZXkgd2l0aCBQdXJlRWREU0EgYW5kIEhhc2hFZERTQS4gIFRoZSBwcnVk ZW50IGFkdmljZSBpcyB0byBhdm9pZCBtaXhpbmcgdGhlIHNhbWUgcHJpdmF0ZSBrZXkgd2l0aCBk aWZmZXJlbnQgcGFyYW1ldGVyLCB0aHVzIHRoZSBTSE9VTEQgTk9ULiAgSSBwb2ludCBvdXQgdGhh dCBSRkMgODAzMiBnb2VzIGV2ZW4gZnVydGhlcjoNCg0KICAgLi4uIFRodXMsIG9uZSBjYW4gdXNl IHRoZSBzYW1lDQogICBrZXkgcGFpciBmb3IgRWQyNTUxOSwgRWQyNTUxOWN0eCwgYW5kIEVkMjU1 MTlwaCBhbmQgY29ycmVzcG9uZGluZ2x5DQogICB3aXRoIEVkNDQ4IGFuZCBFZDQ0OHBoLg0KDQpE YWNoZW5nOiBPaywgSSBzZWUgeW91ciBwb2ludC4gVGhlbiwgSSB0aGluayBpdCB3aWxsIGJlIGdv b2QgdG8gbWFrZSBzb21lIGNsYXJpZmljYXRpb24gaGVyZSBzaW5jZSB0aGUgZmlyc3Qgc2VudGVu Y2Ugb2YgdGhpcyBwYXJhZ3JhcGggc3Ryb25nbHkgYXJndWVzIHRoYXQgJyBVc2luZyB0aGUgc2Ft ZSBwcml2YXRlIGtleSBmb3IgZGlmZmVyZW50IGFsZ29yaXRobXMgaGFzIHRoZSBwb3RlbnRpYWwg b2YgYWxsb3dpbmcgYW4gYXR0YWNrZXIgdG8gZ2V0IGV4dHJhIGluZm9ybWF0aW9uIGFib3V0IHRo ZSBwcml2YXRlIGtleS4nIE1heWJlIHdlIGNhbiBjaGFuZ2UgdGhlIHNlY29uZCBzZW50ZW5jZSB0 byBzb21ldGhpbmcgbGlrZSAnIEZvciB0aGlzIHJlYXNvbiwgdGhlIHNhbWUgcHJpdmF0ZSBrZXkg U0hPVUxEIE5PVCBiZSB1c2VkIHdpdGggbW9yZSB0aGFuIG9uZSBFZERTQSBzZXQgb2YgcGFyYW1l dGVycywgYWx0aG91Z2ggcGVvcGxlIGJlbGlldmUgdGhhdCBubyBzZWN1cml0eSBpc3N1ZSB3aWxs IGJlIGNhdXNlZCB3aGVuIHVzaW5nIHRoZSBzYW1lIHByaXZhdGUga2V5IHdpdGggUHVyZUVkRFNB IGFuZCBIYXNoRWREU0EgW1JGQzgwMzJdLiAnDQoNCj4gMy4gSW4gdGhlIDV0aCBwYXJhZ3JhcGgg b2Ygc2VjdXJpdHkgY29uc2lkZXJhdGlvbnMsICcgdGhlIHNhbWUgaGFzaCBmdW5jdGlvbiBzaG91 bGQgYmUgdXNlZCBmb3IgYWxsIG9wZXJhdGlvbnMuJyAtPicgdGhlIHNhbWUgaGFzaCBmdW5jdGlv biBTSE9VTEQgYmUgdXNlZCBmb3IgYWxsIG9wZXJhdGlvbnMuJw0KDQpZZXMsIEkgYWdyZWUuDQoN Cj4gNC4gSW4gdGhlIDFzdCBwYXJhZ3JhcGgsICdXaGVuIHNpZ25pbmcgd2l0aCBFZDI1NTE5LCB0 aGUgZGlnZXN0QWxnb3JpdGhtIFNIT1VMRCBpbmNsdWRlIGlkLXNoYTUxMicgLT4nIFdoZW4gc2ln bmluZyB3aXRoIEVkMjU1MTksIHRoZSBkaWdlc3RBbGdvcml0aG0gTVVTVCBpbmNsdWRlIGlkLXNo YTUxMicuICdXaGVuIHNpZ25pbmcgd2l0aCBFZDQ0OCwgdGhlIGRpZ2VzdEFsZ29yaXRobSBTSE9V TEQgaW5jbHVkZSBpZC1zaGFrZTI1Ni1sZW4nIC0+ICdXaGVuIHNpZ25pbmcgd2l0aCBFZDQ0OCwg dGhlIGRpZ2VzdEFsZ29yaXRobSBNVVNUIGluY2x1ZGUgaWQtc2hha2UyNTYtbGVuJy4NCg0KSSBh c3N1bWUgeW91IGFyZSB0YWxraW5nIGFib3V0IFNlY3Rpb24gMy4xIGhlcmUuICBUaGVzZSBzaG91 bGQgbm90IGJlIGNoYW5nZWQgdG8gTVVTVC4gIENNUyBkb2VzIG5vdCByZXF1aXJlIHRoZXNlIHRv IGJlIGZpbGxlZCBpbiwgYnV0IHN0cmVhbS1vcmllbnRlZCBwcm9jZXNzaW5nIHdvcmtzIGJldHRl ciBpZiB0aGV5IGFyZSBmaWxsZWQgaW4uICBUaHVzLCB0aGUgU0hPVUxEIHN0YXRlbWVudC4NCg0K RGFjaGVuZzogTm8gcHJvYmxlbSB3aXRoIHRoYXQuDQoNClJ1c3MNCg0K From nobody Thu Jul 27 10:18:46 2017 Return-Path: X-Original-To: secdir@ietfa.amsl.com Delivered-To: secdir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id B386C131D10 for ; Thu, 27 Jul 2017 10:18:43 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.9 X-Spam-Level: X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9] autolearn=unavailable autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Fd6SE1DGds85 for ; Thu, 27 Jul 2017 10:18:42 -0700 (PDT) Received: from mail.smeinc.net (mail.smeinc.net [209.135.209.11]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 5CAFB131D0E for ; Thu, 27 Jul 2017 10:18:42 -0700 (PDT) Received: from localhost (localhost [127.0.0.1]) by mail.smeinc.net (Postfix) with ESMTP id 51F8C30056C for ; Thu, 27 Jul 2017 13:13:42 -0400 (EDT) X-Virus-Scanned: amavisd-new at mail.smeinc.net Received: from mail.smeinc.net ([127.0.0.1]) by localhost (mail.smeinc.net [127.0.0.1]) (amavisd-new, port 10026) with ESMTP id YLJ8g87u8TQw for ; Thu, 27 Jul 2017 13:13:41 -0400 (EDT) Received: from a860b60074bd.home (pool-108-45-101-150.washdc.fios.verizon.net [108.45.101.150]) by mail.smeinc.net (Postfix) with ESMTPSA id CDED5300429; Thu, 27 Jul 2017 13:13:40 -0400 (EDT) Content-Type: text/plain; charset=us-ascii Mime-Version: 1.0 (Mac OS X Mail 10.3 \(3273\)) From: Russ Housley In-Reply-To: <879E76B64CF340468BF5E4DE504C22420160BC01@dggemi501-mbs.china.huawei.com> Date: Thu, 27 Jul 2017 13:13:40 -0400 Cc: curdle , IESG , IETF SecDir Content-Transfer-Encoding: quoted-printable Message-Id: References: <879E76B64CF340468BF5E4DE504C22420160B1FA@dggemi501-mbs.china.huawei.com> <879E76B64CF340468BF5E4DE504C22420160BC01@dggemi501-mbs.china.huawei.com> To: zhangdacheng X-Mailer: Apple Mail (2.3273) Archived-At: Subject: Re: [secdir] =?utf-8?b?W0N1cmRsZV0g562U5aSNOiBTZWNkaXIgcmV2aWV3IG9m?= =?utf-8?q?_draft-ietf-curdle-cms-eddsa-signatures-06?= X-BeenThere: secdir@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: Security Area Directorate List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 27 Jul 2017 17:18:44 -0000 Dacheng: Trimming the parts where we have reached agreement... >> 2. In the 4th paragraph of security considerations, ' the same = private key SHOULD NOT be used with more than one EdDSA set of = parameters.' -> ' the same private key MUST NOT be used with more than = one EdDSA set of parameters.' Since we already know that the same = private key used for multiple algorithms will cause potential risks, we = should use a stronger word here. >=20 > I do not think that there is a problem with using the same private key = with PureEdDSA and HashEdDSA. The prudent advice is to avoid mixing the = same private key with different parameter, thus the SHOULD NOT. I point = out that RFC 8032 goes even further: >=20 > ... Thus, one can use the same > key pair for Ed25519, Ed25519ctx, and Ed25519ph and correspondingly > with Ed448 and Ed448ph. >=20 > Dacheng: Ok, I see your point. Then, I think it will be good to make = some clarification here since the first sentence of this paragraph = strongly argues that ' Using the same private key for different = algorithms has the potential of allowing an attacker to get extra = information about the private key.' Maybe we can change the second = sentence to something like ' For this reason, the same private key = SHOULD NOT be used with more than one EdDSA set of parameters, although = people believe that no security issue will be caused when using the same = private key with PureEdDSA and HashEdDSA [RFC8032]. ' How about: Using the same private key with different algorithms has the potential to leak extra information about the private key to an attacker. For this reason, the same private key SHOULD NOT be used with more than one set of EdDSA parameters, although people believe that there are no security concerns when using the same private key with PureEdDSA and HashEdDSA [EDDSA]. Russ From nobody Fri Jul 28 02:18:49 2017 Return-Path: X-Original-To: secdir@ietfa.amsl.com Delivered-To: secdir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 1F814126E64; Fri, 28 Jul 2017 02:18:35 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.222 X-Spam-Level: X-Spam-Status: No, score=-4.222 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, RP_MATCHES_RCVD=-0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ga2dx80OXdT9; Fri, 28 Jul 2017 02:18:33 -0700 (PDT) Received: from lhrrgout.huawei.com (lhrrgout.huawei.com [194.213.3.17]) (using TLSv1 with cipher RC4-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 5C42D127136; Fri, 28 Jul 2017 02:18:32 -0700 (PDT) Received: from 172.18.7.190 (EHLO lhreml709-cah.china.huawei.com) ([172.18.7.190]) by lhrrg02-dlp.huawei.com (MOS 4.3.7-GA FastPath queued) with ESMTP id DLL65322; Fri, 28 Jul 2017 09:18:30 +0000 (GMT) Received: from DGGEMI404-HUB.china.huawei.com (10.3.17.142) by lhreml709-cah.china.huawei.com (10.201.108.32) with Microsoft SMTP Server (TLS) id 14.3.301.0; Fri, 28 Jul 2017 10:18:28 +0100 Received: from DGGEMI501-MBS.china.huawei.com ([169.254.2.52]) by dggemi404-hub.china.huawei.com ([10.3.17.142]) with mapi id 14.03.0301.000; Fri, 28 Jul 2017 17:18:20 +0800 From: zhangdacheng To: Russ Housley CC: curdle , IESG , IETF SecDir Thread-Topic: =?gb2312?B?W0N1cmRsZV0gtPC4tDogU2VjZGlyIHJldmlldyBvZiBkcmFmdC1pZXRmLWN1?= =?gb2312?Q?rdle-cms-eddsa-signatures-06?= Thread-Index: AQHTBJmcnToY9SpHqUWCJHwmpqIR0KJju5nQgAOseQCAAZNBcA== Date: Fri, 28 Jul 2017 09:18:19 +0000 Message-ID: <879E76B64CF340468BF5E4DE504C22420160BF93@dggemi501-mbs.china.huawei.com> References: <879E76B64CF340468BF5E4DE504C22420160B1FA@dggemi501-mbs.china.huawei.com> <879E76B64CF340468BF5E4DE504C22420160BC01@dggemi501-mbs.china.huawei.com> In-Reply-To: Accept-Language: zh-CN, en-US Content-Language: zh-CN X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.130.167.227] Content-Type: text/plain; charset="gb2312" Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-CFilter-Loop: Reflected X-Mirapoint-Virus-RAPID-Raw: score=unknown(0), refid=str=0001.0A020202.597B0166.0120, ss=1, re=0.000, recu=0.000, reip=0.000, cl=1, cld=1, fgs=0, ip=169.254.2.52, so=2013-06-18 04:22:30, dmn=2013-03-21 17:37:32 X-Mirapoint-Loop-Id: 8f00d14e0d2cc21ec37eee1e0b30efff Archived-At: Subject: [secdir] =?gb2312?b?tPC4tDogW0N1cmRsZV0gtPC4tDogU2VjZGlyIHJldmll?= =?gb2312?b?dyBvZiBkcmFmdC1pZXRmLWN1cmRsZS1jbXMtZWRkc2Etc2lnbmF0dXJlcy0w?= =?gb2312?b?Ng==?= X-BeenThere: secdir@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: Security Area Directorate List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 28 Jul 2017 09:18:35 -0000 R3JlYXQhDQoNCi0tLS0t08q8/tStvP4tLS0tLQ0Kt6K8/sjLOiBSdXNzIEhvdXNsZXkgW21haWx0 bzpob3VzbGV5QHZpZ2lsc2VjLmNvbV0gDQq3osvNyrG85DogMjAxN8TqN9TCMjjI1SAxOjE0DQrK 1bz+yMs6IHpoYW5nZGFjaGVuZyA8ZGFjaGVuZy56aGFuZ0BodWF3ZWkuY29tPg0Ks63LzTogY3Vy ZGxlIDxjdXJkbGVAaWV0Zi5vcmc+OyBJRVNHIDxpZXNnQGlldGYub3JnPjsgSUVURiBTZWNEaXIg PHNlY2RpckBpZXRmLm9yZz4NCtb3zOI6IFJlOiBbQ3VyZGxlXSC08Li0OiBTZWNkaXIgcmV2aWV3 IG9mIGRyYWZ0LWlldGYtY3VyZGxlLWNtcy1lZGRzYS1zaWduYXR1cmVzLTA2DQoNCkRhY2hlbmc6 DQoNClRyaW1taW5nIHRoZSBwYXJ0cyB3aGVyZSB3ZSBoYXZlIHJlYWNoZWQgYWdyZWVtZW50Li4u DQoNCj4+IDIuIEluIHRoZSA0dGggcGFyYWdyYXBoIG9mIHNlY3VyaXR5IGNvbnNpZGVyYXRpb25z LCAnIHRoZSBzYW1lIHByaXZhdGUga2V5IFNIT1VMRCBOT1QgYmUgdXNlZCB3aXRoIG1vcmUgdGhh biBvbmUgRWREU0Egc2V0IG9mIHBhcmFtZXRlcnMuJyAtPiAnIHRoZSBzYW1lIHByaXZhdGUga2V5 IE1VU1QgTk9UIGJlIHVzZWQgd2l0aCBtb3JlIHRoYW4gb25lIEVkRFNBIHNldCBvZiBwYXJhbWV0 ZXJzLicgU2luY2Ugd2UgYWxyZWFkeSBrbm93IHRoYXQgdGhlIHNhbWUgcHJpdmF0ZSBrZXkgdXNl ZCBmb3IgbXVsdGlwbGUgYWxnb3JpdGhtcyB3aWxsIGNhdXNlIHBvdGVudGlhbCByaXNrcywgd2Ug c2hvdWxkIHVzZSBhIHN0cm9uZ2VyIHdvcmQgaGVyZS4NCj4gDQo+IEkgZG8gbm90IHRoaW5rIHRo YXQgdGhlcmUgaXMgYSBwcm9ibGVtIHdpdGggdXNpbmcgdGhlIHNhbWUgcHJpdmF0ZSBrZXkgd2l0 aCBQdXJlRWREU0EgYW5kIEhhc2hFZERTQS4gIFRoZSBwcnVkZW50IGFkdmljZSBpcyB0byBhdm9p ZCBtaXhpbmcgdGhlIHNhbWUgcHJpdmF0ZSBrZXkgd2l0aCBkaWZmZXJlbnQgcGFyYW1ldGVyLCB0 aHVzIHRoZSBTSE9VTEQgTk9ULiAgSSBwb2ludCBvdXQgdGhhdCBSRkMgODAzMiBnb2VzIGV2ZW4g ZnVydGhlcjoNCj4gDQo+ICAgLi4uIFRodXMsIG9uZSBjYW4gdXNlIHRoZSBzYW1lDQo+ICAga2V5 IHBhaXIgZm9yIEVkMjU1MTksIEVkMjU1MTljdHgsIGFuZCBFZDI1NTE5cGggYW5kIGNvcnJlc3Bv bmRpbmdseQ0KPiAgIHdpdGggRWQ0NDggYW5kIEVkNDQ4cGguDQo+IA0KPiBEYWNoZW5nOiBPaywg SSBzZWUgeW91ciBwb2ludC4gVGhlbiwgSSB0aGluayBpdCB3aWxsIGJlIGdvb2QgdG8gbWFrZSBz b21lIGNsYXJpZmljYXRpb24gaGVyZSBzaW5jZSB0aGUgZmlyc3Qgc2VudGVuY2Ugb2YgdGhpcyBw YXJhZ3JhcGggc3Ryb25nbHkgYXJndWVzIHRoYXQgJyBVc2luZyB0aGUgc2FtZSBwcml2YXRlIGtl eSBmb3IgZGlmZmVyZW50IGFsZ29yaXRobXMgaGFzIHRoZSBwb3RlbnRpYWwgb2YgYWxsb3dpbmcg YW4gYXR0YWNrZXIgdG8gZ2V0IGV4dHJhIGluZm9ybWF0aW9uIGFib3V0IHRoZSBwcml2YXRlIGtl eS4nIE1heWJlIHdlIGNhbiBjaGFuZ2UgdGhlIHNlY29uZCBzZW50ZW5jZSB0byBzb21ldGhpbmcg bGlrZSAnIEZvciB0aGlzIHJlYXNvbiwgdGhlIHNhbWUgcHJpdmF0ZSBrZXkgU0hPVUxEIE5PVCBi ZSB1c2VkIHdpdGggbW9yZSB0aGFuIG9uZSBFZERTQSBzZXQgb2YgcGFyYW1ldGVycywgYWx0aG91 Z2ggcGVvcGxlIGJlbGlldmUgdGhhdCBubyBzZWN1cml0eSBpc3N1ZSB3aWxsIGJlIGNhdXNlZCB3 aGVuIHVzaW5nIHRoZSBzYW1lIHByaXZhdGUga2V5IHdpdGggUHVyZUVkRFNBIGFuZCBIYXNoRWRE U0EgW1JGQzgwMzJdLiAnDQoNCkhvdyBhYm91dDoNCg0KVXNpbmcgdGhlIHNhbWUgcHJpdmF0ZSBr ZXkgd2l0aCBkaWZmZXJlbnQgYWxnb3JpdGhtcyBoYXMgdGhlIHBvdGVudGlhbCB0byBsZWFrIGV4 dHJhIGluZm9ybWF0aW9uIGFib3V0IHRoZSBwcml2YXRlIGtleSB0byBhbiBhdHRhY2tlci4gIEZv ciB0aGlzIHJlYXNvbiwgdGhlIHNhbWUgcHJpdmF0ZSBrZXkgU0hPVUxEIE5PVCBiZSB1c2VkIHdp dGggbW9yZSB0aGFuIG9uZSBzZXQgb2YgRWREU0EgcGFyYW1ldGVycywgYWx0aG91Z2ggcGVvcGxl IGJlbGlldmUgdGhhdCB0aGVyZSBhcmUgbm8gc2VjdXJpdHkgY29uY2VybnMgd2hlbiB1c2luZyB0 aGUgc2FtZSBwcml2YXRlIGtleSB3aXRoIFB1cmVFZERTQSBhbmQgSGFzaEVkRFNBIFtFRERTQV0u DQoNClJ1c3MNCg0K From nobody Mon Jul 31 14:12:26 2017 Return-Path: X-Original-To: secdir@ietf.org Delivered-To: secdir@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id D28F1131CDC; Mon, 31 Jul 2017 14:12:23 -0700 (PDT) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: Paul Wouters To: Cc: draft-ietf-teas-gmpls-scsi.all@ietf.org, ietf@ietf.org, teas@ietf.org X-Test-IDTracker: no X-IETF-IDTracker: 6.58.0 Auto-Submitted: auto-generated Precedence: bulk Message-ID: <150153554378.6396.10436130949472778994@ietfa.amsl.com> Date: Mon, 31 Jul 2017 14:12:23 -0700 Archived-At: Subject: [secdir] Secdir telechat review of draft-ietf-teas-gmpls-scsi-03 X-BeenThere: secdir@ietf.org X-Mailman-Version: 2.1.22 List-Id: Security Area Directorate List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 31 Jul 2017 21:12:24 -0000 Reviewer: Paul Wouters Review result: Has Issues I have reviewed this document as part of the security directorate's ongoing effort to review all IETF documents being processed by the IESG. These comments were written primarily for the benefit of the security area directors. Document editors and WG chairs should treat these comments just like any other last call comments. The summary of the review HAS ISSUES (might be minor) The security considerations section only lists those considerations of other documents it references. While that likely covers most issues, I'm not sure it covers all issues. The introduction of this document tells us the goal of this new "Generalized SCSI" value only in a somewhat vague way: [...] can be used with routing protocols that define GMPLS ISCDs, and any specific technology. Since it does not explain _how_ it can be used, it is a bit difficult to figure out what the security impact of this new field could be when it is abused. What happens when this new field contains wrong or malicious information? And when I read: SCSI-TLVs MUST be processed in the order received and, if re-originated, ordering MUST be preserved. What happens if someone maliciously re-orders these? Unknown SCSI-TLVs MUST be ignored What happens when someone mangles a valid SCSI-TLV value so it becomes ignored? Another issue that could use clarification is the padding. It is only said "may contain padding", but it is not specified how to pad. Prefix with leading zeros? Append with FFs? NITS: "[RFC7138] introduced a " This reference is broken In diagrams we tend to use "~" and not "..." to indicate variable length I tend to use +--------+------+ rather then +-+-+-+-+-+-+ I would not explain "octets (bytes)". IETF tends to use octets as term. "The value of the field MUST" -> "The value MUST" corollary - A word harder for non-native english speakers "MAY contain a sequence of zero or more SCSI- TLVs." MAY and "zero or more" is a little odd. From nobody Mon Jul 31 15:14:01 2017 Return-Path: X-Original-To: secdir@ietf.org Delivered-To: secdir@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id B96D5126CD8 for ; Mon, 31 Jul 2017 15:13:58 -0700 (PDT) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 8bit From: Tero Kivinen To: X-Test-IDTracker: no X-IETF-IDTracker: 6.58.0 Auto-Submitted: auto-generated Precedence: bulk Reply-to: secdir-secretary@mit.edu Message-ID: <150153923875.30754.1952986775162001494.idtracker@ietfa.amsl.com> Date: Mon, 31 Jul 2017 15:13:58 -0700 Archived-At: Subject: [secdir] Assignments X-BeenThere: secdir@ietf.org X-Mailman-Version: 2.1.22 List-Id: Security Area Directorate List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 31 Jul 2017 22:13:59 -0000 Review instructions and related resources are at: http://tools.ietf.org/area/sec/trac/wiki/SecDirReview For telechat 2017-08-03 Reviewer LC end Draft Derek Atkins 2017-07-18 draft-ietf-httpbis-immutable-03 Alan DeKok R2017-05-26 draft-nottingham-rfc5988bis-07 Klaas Wierenga 2017-07-12 draft-ietf-mpls-rfc3107bis-02 For telechat 2017-08-17 Reviewer LC end Draft Alan DeKok 2017-05-14 draft-ietf-calext-caldav-attachments-03 Dan Harkins 2017-08-09 draft-ietf-bess-evpn-etree-12 Rich Salz R2017-07-24 draft-ietf-mmusic-dtls-sdp-27 For telechat 2017-08-31 Reviewer LC end Draft Ólafur Guðmundsson 2017-08-15 draft-ietf-sidr-rpki-validation-reconsidered-08 Last calls: Reviewer LC end Draft Donald Eastlake 2017-07-30 draft-ietf-curdle-ssh-modp-dh-sha2-07 Shawn Emery 2017-07-30 draft-ietf-curdle-ssh-ext-info-11 Daniel Franke 2017-07-30 draft-ietf-curdle-ssh-dh-group-exchange-05 Daniel Gillmor 2017-07-30 draft-ietf-curdle-des-des-des-die-die-die-04 Phillip Hallam-Baker 2017-08-11 draft-ietf-rtcweb-jsep-21 Steve Hanna 2017-08-09 draft-ietf-codec-opus-update-08 Paul Hoffman 2017-08-08 draft-ietf-slim-multilangcontent-09 Christian Huitema None draft-ietf-sfc-nsh-18 Yaron Sheffer 2017-07-17 draft-weis-gdoi-rekey-ack-05 Tom Yu 2017-07-25 draft-ietf-lamps-rfc5280-i18n-update-02 Tom Yu 2017-02-20 draft-ietf-slim-negotiating-human-language-13 Early review requests: Reviewer Due Draft Daniel Gillmor 2016-02-01 draft-ietf-rtcweb-security-08 Leif Johansson 2017-08-09 draft-ietf-homenet-babel-profile-02 Catherine Meadows R2017-06-29 draft-ietf-opsawg-capwap-alt-tunnel-09 Next in the reviewer rotation: Benjamin Kaduk Charlie Kaufman Scott Kelly Stephen Kent Tero Kivinen Watson Ladd Ben Laurie Barry Leiba Chris Lonvick David Mandelberg