From nobody Wed Aug 1 17:03:36 2018 Return-Path: X-Original-To: secdir@ietfa.amsl.com Delivered-To: secdir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E8D3D130EA2 for ; Wed, 1 Aug 2018 17:03:29 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -17.51 X-Spam-Level: X-Spam-Status: No, score=-17.51 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, ENV_AND_HDR_SPF_MATCH=-0.5, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, T_DKIMWL_WL_MED=-0.01, USER_IN_DEF_DKIM_WL=-7.5, USER_IN_DEF_SPF_WL=-7.5] autolearn=unavailable autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=google.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id wopl5pmyXwls for ; Wed, 1 Aug 2018 17:03:28 -0700 (PDT) Received: from mail-ua0-x234.google.com (mail-ua0-x234.google.com [IPv6:2607:f8b0:400c:c08::234]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id B655D130DE3 for ; Wed, 1 Aug 2018 17:03:25 -0700 (PDT) Received: by mail-ua0-x234.google.com with SMTP id i4-v6so288863uak.0 for ; Wed, 01 Aug 2018 17:03:25 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=20161025; h=mime-version:in-reply-to:references:from:date:message-id:subject:to :cc; bh=vZ2pZqhd4hkm5bYv7HFI2O7Y9QCZw9mhKjYMPBnLKIE=; b=GbCg2hrnWbyiD4o8EjQT/zb6rZII6YIi01faSB4AMu0/l+5usYphqvDOkQrF9xbPGl QbJ9nkZyNTvJ72GPZVejaw+Hfebb9ZtfruP0izCfjmjXdwDan3drgJoseIo1F6hf0poH ZQfavbl9LnQ/N6uNS5uix1zxtowP228FbYaTLFP1G5Sojd6uJmcqjxktxh6/WPorzn6n RruIoh0BXc6dkv8xAabsFchCL5+l0PjoQNUJ7z/zU/5YN9ujXqKI2MvXKiNWQ4IiW1rC kBXWz/yqGUXEQkCwF/zl9/sx//0xd0k5cumA9mEOJ1wD9uWiIX2sG/Imn+q36jEnNFXj Ngew== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:in-reply-to:references:from:date :message-id:subject:to:cc; bh=vZ2pZqhd4hkm5bYv7HFI2O7Y9QCZw9mhKjYMPBnLKIE=; b=mRwzlS+WYwStxN03lt5XaanGHfrBLeKWh0JINNhSvwHCBClsLA8IF8hj7fYhY0KS1d 07K9UEbk61bQDQSdl6EV3Z7iJiO+k8ZtypUCwikOSKSmjJpYIm721Kwgnz11uve+06nW PMb9e9fOJF/XQunXJYKQMM8ohuNNnLkzpjpQQkyd3OVKYxHWvsnax0+wotrdzaSO3a7D o/dTsvs7qlP32nbrrTwYNkscD2GhNS85f/HBnr2HDv69n6zOZDyjgk7g0SwMzJCFBfPH vSN6h97hqeLoqcMeZKgwtA8N7UDrwZZ1Gkbw27icf8PeUbcuF5STfqaGIy36orSGaXEq opEA== X-Gm-Message-State: AOUpUlEm6SEnk7fi9UYnhprAFfxBf3c9R8f5cWOejnuIniYdUbWAcvmg e8fglKbt9RcOeFwpWrWR8+rmHHqxnK1mjLcbus0VIg== X-Google-Smtp-Source: AAOMgpdthd4yc9PpooYHDZV9KaQbIIjqs49rw2W0fZGKMYquDKOtPrUuvVTSnyQVnbV9dxh/UvXyC4lFcgaMDOtEydA= X-Received: by 2002:ab0:4987:: with SMTP id e7-v6mr380810uad.198.1533168204393; Wed, 01 Aug 2018 17:03:24 -0700 (PDT) MIME-Version: 1.0 Received: by 2002:ab0:185a:0:0:0:0:0 with HTTP; Wed, 1 Aug 2018 17:03:03 -0700 (PDT) In-Reply-To: References: From: William Denniss Date: Wed, 1 Aug 2018 17:03:03 -0700 Message-ID: To: Christopher Wood Cc: The IESG , secdir@ietf.org, draft-ietf-oauth-device-flow.all@ietf.org Content-Type: multipart/alternative; boundary="00000000000034915d0572688aa3" Archived-At: Subject: Re: [secdir] secdir review of draft-ietf-oauth-device-flow X-BeenThere: secdir@ietf.org X-Mailman-Version: 2.1.27 Precedence: list List-Id: Security Area Directorate List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 02 Aug 2018 00:03:30 -0000 --00000000000034915d0572688aa3 Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable Christopher, Thank you for your valuable feedback. Version 12 incorporates much of your feedback. Replies inline: On Tue, Jun 12, 2018 at 5:55 PM, Christopher Wood < christopherwood07@gmail.com> wrote: > Hello, > > I have reviewed this document as part of the security directorate's > ongoing effort to review all IETF documents being processed by the > IESG. These comments were written primarily for the benefit of the > security area directors. Document editors and WG chairs should treat > these comments just like any other last call comments. > > The summary of my review is: Ready with nits. > > Overall, the document is in fine shape. I have a few general comments (no= t > quite nits, > though not quite issues either), listed below: > > - Section 3.5, fifth paragraph: Requiring clients to poll at a > =E2=80=9Creasonable=E2=80=9D polling interval > without a suggestion of what is reasonable seems strange. Could you > suggest a value that=E2=80=99s > within reason, e.g., every second? > We documented a default of 5s in version 12. > - Section 5.1, first paragraph: It might be useful to point to Section 6.= 1 > wherein User Code > generation is discussed. Right now minimum entropy =E2=80=9Crequirements= =E2=80=9D are > listed without further > details regarding viable mechanisms. > The authors are still considering this feedback, along with Benjamin Kaduk's DISCUSS. > - Section 5.2, second paragraph: The text claims that an end user would > end up =E2=80=9Con the > authorization page of the wrong service.=E2=80=9D Can you provide more de= tails > here? What stops > the malicious MITM from serving an authorization page that=E2=80=99s > indistinguishable from the > legitimate service page? > - Section 5.3, first paragraph: How specifically does the authorization > service prevent > devices from lying when providing =E2=80=9Cinformation about the device= =E2=80=9D? Or, > alternatively, how > does the authorization service learn this information? > These 2 also pending. > - Section 5.4: Would it be useful to suggest that clients SHOULD use a > secure (encrypted > and authenticated) channel when communicating to the user device? > This section is actually referring to real-world spying, i.e. someone in the same room as you who can see the TV. Perhaps we need to make that more clear? > > The remainder of my comments, listed below, are editorial in nature, aime= d > towards improving > readability of the document. > > - Section 1, step (E): This is the first time client polling is mentioned > without > discussion of timeouts or server-generated errors. The draft provides suc= h > details later > on, so it would be helpful to allude or point to them here. > I believe this is covered in detail in the document, this section is intending to just be a high-level overview. > - Section 3.3, second paragraph: Please cite TLS upon use (=E2=80=9C=E2= =80=A6 in a secure > TLS-protected > session.=E2=80=9D). > Done, thanks! > - Section 3.3, second paragraph: The text suggests that the server inform= s > the user to > =E2=80=9Creturn to their device.=E2=80=9D Perhaps this should be prefaced= with a MAY, as > the client will > eventually learn that authorization is complete upon polling. > MAY was added, thanks! > - Section 3.3.1, first paragraph: Should it be required that > =E2=80=9Cverification_uri_complete=E2=80=9D > is constructed in part from the =E2=80=9Cverification_uri=E2=80=9D and = =E2=80=9Cuser_code=E2=80=9D? I=E2=80=99m > not sure this is > necessary, though the example given is constructed this way. If not > required, this might be > worth noting. > The working group considered this, in fact originally we were not going to have verification_uri_complete and it would just be defined as a composition of those two values. In the end, the work group decided to make it separate. The authorization server can combine them to create the complete verification URI, or may use something else. The text currently states the following which I believe covers this: "A verification URI that includes the "user_code" (or other information with the same function as the "user_code"), designed for non-textual transmission." - Section 3.5, first paragraph: s/token endpoint/authentication server? > This section does actually relate to the token endpoint. > - Section 5.1, third paragraph: This text is mostly redundant with the > preceding paragraphs. > I would remove or merge it with the paragraphs above. > I don't agree that it's redundant. Willing to review text if you have a concrete proposal. Please let me know if you=E2=80=99ve further questions, comments, or concer= ns. I > hope this helps. > > Best, > Chris > Best, William --00000000000034915d0572688aa3 Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable
Christopher,

Thank you for your = valuable feedback. Version 12 incorporates much of your feedback. Replies i= nline:

On Tue, Jun 12, 2018 at= 5:55 PM, Christopher Wood <christopherwood07@gmail.com><= /span> wrote:
Hello,
I have reviewed this document as part of the security directorate's
ongoing effort to review all IETF documents being processed by the
IESG.=C2=A0 These comments were written primarily for the benefit of the security area directors.=C2=A0 Document editors and WG chairs should treat<= br> these comments just like any other last call comments.

=C2=A0 The summary of my review is: Ready with nits.

Overall, the document is in fine shape. I have a few general comments (not = quite nits,
though not quite issues either), listed below:

- Section 3.5, fifth paragraph: Requiring clients to poll at a =E2=80=9Crea= sonable=E2=80=9D polling interval
without a suggestion of what is reasonable seems strange. Could you suggest= a value that=E2=80=99s
within reason, e.g., every second?

We d= ocumented a default of 5s in version 12.
=C2=A0
- Section 5.1, first paragraph: It might be useful to point to Section 6.1 = wherein User Code
generation is discussed. Right now minimum entropy =E2=80=9Crequirements=E2= =80=9D are listed without further
details regarding viable mechanisms.

Th= e authors are still considering this feedback, along with Benjamin Kaduk= 9;s DISCUSS.
=C2=A0
- Section 5.2, second paragraph: The text claims that an end user would end= up =E2=80=9Con the
authorization page of the wrong service.=E2=80=9D Can you provide more deta= ils here? What stops
the malicious MITM from serving an authorization page that=E2=80=99s indist= inguishable from the
legitimate service page?
=C2=A0
- Section 5.3, first paragraph: How specifically does the authorization ser= vice prevent
devices from lying when providing =E2=80=9Cinformation about the device=E2= =80=9D? Or, alternatively, how
does the authorization service learn this information?

These 2 also pending.
=C2=A0
- Section 5.4: Would it be useful to suggest that clients SHOULD use a secu= re (encrypted
and authenticated) channel when communicating to the user device?

This section is actually referring to real-world= spying, i.e. someone in the same room as you who can see the TV. Perhaps w= e need to make that more clear?
=C2=A0

The remainder of my comments, listed below, are editorial in nature, aimed = towards improving
readability of the document.

- Section 1, step (E): This is the first time client polling is mentioned w= ithout
discussion of timeouts or server-generated errors. The draft provides such = details later
on, so it would be helpful to allude or point to them here.

I believe this is covered in detail in the document, t= his section is intending to just be a high-level overview.
=C2=A0=
- Section 3.3, second paragraph: Please cite TLS upon use (=E2=80=9C=E2=80= =A6 in a secure TLS-protected
session.=E2=80=9D).

Done, thanks!
=
=C2=A0
- Section 3.3, second paragraph: The text suggests that the server informs = the user to
=E2=80=9Creturn to their device.=E2=80=9D Perhaps this should be prefaced w= ith a MAY, as the client will
eventually learn that authorization is complete upon polling.

MAY was added, thanks!
=C2=A0
- Section 3.3.1, first paragraph: Should it be required that =E2=80=9Cverif= ication_uri_complete=E2=80=9D
is constructed in part from the =E2=80=9Cverification_uri=E2=80=9D and =E2= =80=9Cuser_code=E2=80=9D? I=E2=80=99m not sure this is
necessary, though the example given is constructed this way. If not require= d, this might be
worth noting.

The working group conside= red this, in fact originally we were not going to have verification_uri_com= plete and it would just be defined as a composition of those two values. In= the end, the work group decided to make it separate. The authorization ser= ver can combine them to create the complete verification URI, or may use so= mething else.
=C2=A0
The text currently states the foll= owing which I believe covers this:

"A verification URI that incl= udes the "user_code" (or
other information with th= e same function as the "user_code"),
designed for = non-textual transmission."

- Section 3.5, first paragraph: s/token endpoint/authentication server?
=

This section does actually relate to the t= oken endpoint.
=C2=A0
- Section 5.1, third paragraph: This text is mostly redundant with the prec= eding paragraphs.
I would remove or merge it with the paragraphs above.
=
I don't agree that it's redundant. Willing to review= text if you have a concrete proposal.
=C2=A0

Please let me know if you=E2=80=99ve further questions, comments, or concer= ns. I hope this helps.

Best,
Chris


Best,
William
--00000000000034915d0572688aa3-- From nobody Wed Aug 1 22:40:59 2018 Return-Path: X-Original-To: secdir@ietfa.amsl.com Delivered-To: secdir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 49B0F12F1A2; Wed, 1 Aug 2018 22:40:50 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.221 X-Spam-Level: X-Spam-Status: No, score=-4.221 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 41nrcZAPF0aG; Wed, 1 Aug 2018 22:40:48 -0700 (PDT) Received: from dmz-mailsec-scanner-5.mit.edu (dmz-mailsec-scanner-5.mit.edu [18.7.68.34]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 3E34B128C65; Wed, 1 Aug 2018 22:40:48 -0700 (PDT) X-AuditID: 12074422-589ff7000000235d-3d-5b62995cf8a6 Received: from mailhub-auth-2.mit.edu ( [18.7.62.36]) (using TLS with cipher DHE-RSA-AES256-SHA (256/256 bits)) (Client did not present a certificate) by dmz-mailsec-scanner-5.mit.edu (Symantec Messaging Gateway) with SMTP id 04.92.09053.D59926B5; Thu, 2 Aug 2018 01:40:46 -0400 (EDT) Received: from outgoing.mit.edu (OUTGOING-AUTH-1.MIT.EDU [18.9.28.11]) by mailhub-auth-2.mit.edu (8.13.8/8.9.2) with ESMTP id w725ea0f028305; Thu, 2 Aug 2018 01:40:38 -0400 Received: from localhost (nyc-02.triskelion.com [162.243.175.178]) (authenticated bits=0) (User authenticated as tlyu@ATHENA.MIT.EDU) by outgoing.mit.edu (8.13.8/8.12.4) with ESMTP id w725eYtR013802; Thu, 2 Aug 2018 01:40:36 -0400 From: Taylor Yu To: iesg@ietf.org, secdir@ietf.org, draft-ietf-regext-rdap-object-tag.all@ietf.org Date: Thu, 02 Aug 2018 05:40:34 +0000 Message-ID: Lines: 34 MIME-Version: 1.0 Content-Type: text/plain X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFjrEIsWRmVeSWpSXmKPExsUixG6nohs3Myna4MVVOYv9H6+xWsz4M5HZ 4sPChywOzB5LlvxkCmCM4rJJSc3JLEst0rdL4MpYdKOZreAJd8XLaUsYGxgXcHYxcnJICJhI PLn9lbmLkYtDSGAxk8SdP18ZIZwNjBJr+yewQzhfGSX2P1jF1MXIwcEmICdx+VYwSLeIQLRE 79nDTCC2sICdxP1Pu5lBbBYBVYnd3/cwgti8AjYSty8/AqvhEeCU6O3rZoaIC0qcnPmEBcRm FpCQOPjiBfMERp5ZSFKzkKQWMDKtYpRNya3SzU3MzClOTdYtTk7My0st0jXVy80s0UtNKd3E CA4YF6UdjBP/eR1iFOBgVOLhvcGQFC3EmlhWXJl7iFGSg0lJlNclHSjEl5SfUpmRWJwRX1Sa k1p8iFGCg1lJhLfZAyjHm5JYWZValA+TkuZgURLnvV8THi0kkJ5YkpqdmlqQWgSTleHgUJLg FZsB1ChYlJqeWpGWmVOCkGbi4AQZzgM0vHU6yPDigsTc4sx0iPwpRmOOP++nTmLm2Nc9bRKz EEtefl6qlDjvGZBSAZDSjNI8uGmgqF/0ef2mV4ziQM8J86qDLOUBJgy4ea+AVjEBrcp2TARZ VZKIkJJqYAw7Mq2+Y2mK1oXFdmlyhsnMUzfa5q/rYI1fpWRqI7DuR/SWXL+s5eZ72m20e9Pc Dv7q7Pn7+bv3LIcL2/8/P3bBK41Z+ZPhErXmuOSznUW1Fn2qE6pzuVYvNzN+1XC3fuLTGIfs yxIs+/l2SjtN01Z7EmvfYajc807jnf3rfs8XFb/MuPl3KbEUZyQaajEXFScCAHNdSYPVAgAA Archived-At: Subject: [secdir] secdir review of draft-ietf-regext-rdap-object-tag-04 X-BeenThere: secdir@ietf.org X-Mailman-Version: 2.1.27 Precedence: list List-Id: Security Area Directorate List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 02 Aug 2018 05:40:50 -0000 I have reviewed this document as part of the security directorate's ongoing effort to review all IETF documents being processed by the IESG. These comments were written primarily for the benefit of the security area directors. Document editors and WG chairs should treat these comments just like any other last call comments. The summary of the review is Ready with nits. I agree with Ben Kaduk's comment: > Section 7 > > Perhaps note that it is using IANA as a well-known central trusted > authority in order to provide the property of allowing users to get RDAP > data from an authoritative source? > > [...] The method has the same security > properties as the RDAP protocols themselves. The transport used to > access the IANA registries can be more secure by using TLS [RFC5246], > which IANA supports. > > Well, I don't know that "the same as" is quite right, especially given the > following sentence. The composed chain of "talk to iana, talk to referred > RDAP server" depends both on the security of the connection to the RDAP > server and that of the connection to IANA; it seems prudent to note that if > TLS is used for the RDAP connection, TLS should also be used when talking > to IANA, or even that TLS should always be used when talking to IANA. There is also the issue of trust anchors when using TLS. The normative references also do not mention this issue, so maybe it is out of scope to deal with it here. Best regards, -Taylor From nobody Thu Aug 2 05:28:37 2018 Return-Path: X-Original-To: secdir@ietfa.amsl.com Delivered-To: secdir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 22A2F130F1B; Thu, 2 Aug 2018 05:28:22 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.301 X-Spam-Level: X-Spam-Status: No, score=-4.301 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=verisign.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id hlv-lMh29e1f; Thu, 2 Aug 2018 05:28:18 -0700 (PDT) Received: from mail2.verisign.com (mail2.verisign.com [72.13.63.31]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 5E416130F25; Thu, 2 Aug 2018 05:28:18 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=simple/simple; d=verisign.com; l=1929; q=dns/txt; s=VRSN; t=1533212899; h=from:to:date:message-id:references:in-reply-to: content-transfer-encoding:mime-version:subject; bh=xhEZ6Gogg47xR1Se3ssmq0ldVSMkzo0FAG1PqCimEq4=; b=S4nMQihE7CuQkkAtlm992i1l3r0XFcrucaJCwcY1io9BQ8OheD/aGz92 0nGmAna1YJNQXimda0L08SrQkA3oVbLoAhFRThBNHTxW/6LjsgIPiTOys 1IAPWlgxyEQcb7seOUAzAxUNW8N23EIOPrD+DZEKh3RG/O1ZDTlOFwJ6X YduD9HmIvqETNQp9zffCoDAOdcOtd/7plNttIQWbhTH5uMDt777QmcPoq I9My89M/Avf4Tq9xfWGPkCQLB3Lp6W9TsuUdAjYelveyWObfd/BRt+/vm K6mfp1Yq6Dd1uwXlxintoD723xWVzfQIMiUWCFPfTaoBoaZQT25+2S49N A==; X-IronPort-AV: E=Sophos;i="5.51,435,1526342400"; d="scan'208";a="5061916" IronPort-PHdr: =?us-ascii?q?9a23=3A9qv4fhNbHkeHZAMbNs0l6mtUPXoX/o7sNwtQ0KIM?= =?us-ascii?q?zox0K/76oMbcNUDSrc9gkEXOFd2Cra4c1ayO6+jJYi8p2d65qncMcZhBBVcuqP?= =?us-ascii?q?49uEgeOvODElDxN/XwbiY3T4xoXV5h+GynYwAOQJ6tL1LdrWev4jEMBx7xKRR6?= =?us-ascii?q?JvjvGo7Vks+7y/2+94fcbglUhTexe69+IAmrpgjNq8cahpdvJLwswRXTuHtIfO?= =?us-ascii?q?pWxWJsJV2Nmhv3+9m98p1+/SlOovwt78FPX7n0cKQ+VrxYES8pM3sp683xtBnM?= =?us-ascii?q?VhWA630BWWgLiBVIAgzF7BbnXpfttybxq+Rw1DWGMcDwULs5Xymp4aV2Rx/ykC?= =?us-ascii?q?oJNyA3/nzLisJ+j6xbrhCupx1jzIDbb46YL+Z+frrffd8GWWZNQthdWipcCY28?= =?us-ascii?q?dYsPCO8BMP5Wo4f/oFsOqR++CheqBOz01DBHmnz20bUn2Oo8DQ7G2xAgH84AvH?= =?us-ascii?q?/Jq9j1L6cSUeexzKnM0zrDaehZ1inh54jLaR0hv++DXahxccrKyEkvGAXFgk+M?= =?us-ascii?q?poziOjOYz+IAuHWY4ep4Te+jlnIrpxtsrjWtyMogkJTFi4Ibx1ze+ih0xJ45Kc?= =?us-ascii?q?CkREJhfNKpEodcuzuHO4Z5Qc4uWXxktSUixr0Ip5G2fzQGxZEiyhPdd/OLb5KH?= =?us-ascii?q?7xf+WOmNPTh1gXJod6+hiBa89EWtzvDzWdSq31tMsyFLiMPDtmoX2BzW8sWHT/?= =?us-ascii?q?x98Vq/1juXzADT7/1EIVgzlarGN54t2r4wmYQXsUTEBiL7hVn4greLekok4uam?= =?us-ascii?q?5OXobqn4qpOGKY97lgb+Mr42msClG+s3LxICX3aB+eSn0r3v51H2QLJPjvEuk6?= =?us-ascii?q?nZto7VJdgDq6KkHwNZyJsv5hSxAju8zdgVnXcKIEhKdR+Dl4TpPkvBIPH8Dfex?= =?us-ascii?q?mVSslzJryujdPr3hBZXNKnzDn6nnfblm9UFT1AkzwMtB551KELEBIenzWk7+tN?= =?us-ascii?q?zeFBM2Lwu0w+P/BNVnyoweQX6PArOeMK7KrV+I4uIuI/SXaY8QuTb9N+Ip6ODz?= =?us-ascii?q?gn8kgVUdZ7Wm3YMLaHCkGfRrO0SZbmT3gtcOCmoKvxQxTPDkiFGYVj5TfXmyVb?= =?us-ascii?q?om5j4nEIKmEZvDRoe1jbyawii0AoBZZmFcCl2XEHfnaZmEW/kWZCKVOM9hnSQO?= =?us-ascii?q?VaK9RI85yRGuqAj6xqJ6IerO4CIYu47j2MF05+LNiREy+yV4D96D3GGCUW51kX?= =?us-ascii?q?8ISyYs3K9iu0N90k6P0a9jjPxaC9Nc++9JXh4mNZHGwOx2Ecr9WgbFftqSSVap?= =?us-ascii?q?XMmmAT8rQtI22d8ObBU1J9L3xF/f2zu3K7oUi/qGCIF7uOqIw3zgOu54ymqA2a?= =?us-ascii?q?U82R1uCIROOHaprq9y6waVAJTG3A/Rw6enbqs03SPR+iGE12XY+AkSHxV9WqnE?= =?us-ascii?q?R1gea1fY69Pj6QyIB+u1BL8rMxFpyMOeJO1NcNK/yR0MC/v5MdrCJmO8h2n1Hx?= =?us-ascii?q?uHy6OQKZDmcn1Y2y/fBUMY1hwa8jCPMQwWByq9rSTZFjMhXxq7b1nl//U7qX6n?= =?us-ascii?q?QAouwg6Hf1Ekzba84lsSj/6RQO9WwrsL/i4lrx11EUqzmdXMBIzTiRBmefAWQd?= =?us-ascii?q?Q55FpB32/StEg1BZenM7wozgoFcwNzu07o3Rh8Ca1enNIrt3Ilykx5LqfOgwAJ?= =?us-ascii?q?TC+RwZ2lYu6fEWL15h36M6M=3D?= X-IPAS-Result: =?us-ascii?q?A2GyAwDK92Jb/zGZrQpbDg4BAQEEAQEKAQGFWAqaSoMukiy?= =?us-ascii?q?BeguEbAKDJTYWAQIBAQEBAQECAQECgRGCNSKCYQEBAQEDOksEAgEIEQQBAR8QM?= =?us-ascii?q?h0IAgQBEgi3dIpYiR+BQj6BEoMShGiFbAKaJgMGAokDhjWOHJIiAgQCBAUCFIF?= =?us-ascii?q?IA4IBcIM5kBk6b41vgRsBAQ?= Received: from BRN1WNEX02.vcorp.ad.vrsn.com (10.173.153.49) by BRN1WNEX02.vcorp.ad.vrsn.com (10.173.153.49) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256) id 15.1.1466.3; Thu, 2 Aug 2018 08:28:16 -0400 Received: from BRN1WNEX02.vcorp.ad.vrsn.com ([fe80::7c0a:1cc:5def:9dde]) by BRN1WNEX02.vcorp.ad.vrsn.com ([fe80::7c0a:1cc:5def:9dde%4]) with mapi id 15.01.1466.003; Thu, 2 Aug 2018 08:28:16 -0400 From: "Hollenbeck, Scott" To: "'tlyu@mit.edu'" , "'iesg@ietf.org'" , "'secdir@ietf.org'" , "'draft-ietf-regext-rdap-object-tag.all@ietf.org'" Thread-Topic: [EXTERNAL] secdir review of draft-ietf-regext-rdap-object-tag-04 Thread-Index: AQHUKiNgOcZsa6t9lkakT4eS2Sgvw6SsY7FQ Date: Thu, 2 Aug 2018 12:28:16 +0000 Message-ID: References: In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.170.148.18] Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 Archived-At: Subject: Re: [secdir] secdir review of draft-ietf-regext-rdap-object-tag-04 X-BeenThere: secdir@ietf.org X-Mailman-Version: 2.1.27 Precedence: list List-Id: Security Area Directorate List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 02 Aug 2018 12:28:28 -0000 > -----Original Message----- > From: Taylor Yu > Sent: Thursday, August 02, 2018 1:41 AM > To: iesg@ietf.org; secdir@ietf.org; draft-ietf-regext-rdap-object- > tag.all@ietf.org > Subject: [EXTERNAL] secdir review of draft-ietf-regext-rdap-object-tag-04 > > I have reviewed this document as part of the security directorate's > ongoing effort to review all IETF documents being processed by the IESG. > These comments were written primarily for the benefit of the security are= a > directors. Document editors and WG chairs should treat these comments > just like any other last call comments. > > The summary of the review is Ready with nits. > > I agree with Ben Kaduk's comment: > > > Section 7 > > > > Perhaps note that it is using IANA as a well-known central trusted > > authority in order to provide the property of allowing users to get > > RDAP data from an authoritative source? > > > > [...] The method has the same security > > properties as the RDAP protocols themselves. The transport used to > > access the IANA registries can be more secure by using TLS [RFC5246]= , > > which IANA supports. > > > > Well, I don't know that "the same as" is quite right, especially given > > the following sentence. The composed chain of "talk to iana, talk to > > referred RDAP server" depends both on the security of the connection > > to the RDAP server and that of the connection to IANA; it seems > > prudent to note that if TLS is used for the RDAP connection, TLS > > should also be used when talking to IANA, or even that TLS should alway= s > be used when talking to IANA. > > There is also the issue of trust anchors when using TLS. The normative > references also do not mention this issue, so maybe it is out of scope to > deal with it here. Thanks for the review, Taylor. I have new text provided by Ben enqueued for= replacement. Scott From nobody Thu Aug 2 08:08:06 2018 Return-Path: X-Original-To: secdir@ietf.org Delivered-To: secdir@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 004E2130F6F for ; Thu, 2 Aug 2018 08:07:55 -0700 (PDT) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: Tero Kivinen To: X-Test-IDTracker: no X-IETF-IDTracker: 6.83.0 Auto-Submitted: auto-generated Precedence: bulk Reply-To: secdir-secretary@mit.edu Message-ID: <153322247599.2083.6180299616017307717.idtracker@ietfa.amsl.com> Date: Thu, 02 Aug 2018 08:07:55 -0700 Archived-At: Subject: [secdir] Assignments X-BeenThere: secdir@ietf.org X-Mailman-Version: 2.1.27 List-Id: Security Area Directorate List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 02 Aug 2018 15:08:00 -0000 Review instructions and related resources are at: http://tools.ietf.org/area/sec/trac/wiki/SecDirReview For telechat 2018-08-02 Reviewer LC end Draft Daniel Gillmor 2018-06-25 draft-ietf-dnsop-session-signal-13 Phillip Hallam-Baker 2018-07-10 draft-ietf-codec-ambisonics-07 Tina Tsou 2018-05-21 draft-ietf-v6ops-conditional-ras-06 Last calls: Reviewer LC end Draft John Bradley 2018-06-18 draft-ietf-bfd-multipoint-active-tail-09 Daniel Franke 2018-06-28 draft-ietf-netconf-rfc7895bis-06 Daniel Gillmor 2018-03-19 draft-gutmann-scep-10 Christian Huitema 2018-07-09 draft-ietf-netconf-nmda-netconf-06 Catherine Meadows 2018-07-30 draft-sahib-451-new-protocol-elements-03 Adam Montville 2018-08-14 draft-ietf-httpbis-expect-ct-07 Kathleen Moriarty 2018-08-13 draft-ietf-radext-coa-proxy-05 Russ Mundy 2018-08-13 draft-ietf-dnsop-terminology-bis-11 Russ Mundy 2017-09-14 draft-spinosa-urn-lex-13 Sandra Murphy 2018-08-10 draft-ietf-sidrops-rpki-tree-validation-02 Yoav Nir 2018-08-10 draft-ietf-sidrops-ov-clarify-03 Magnus Nystrom 2018-08-08 draft-ietf-doh-dns-over-https-12 Hilarie Orman 2018-08-06 draft-ietf-oauth-token-exchange-14 Samuel Weiler 2018-05-21 draft-ietf-bfd-multipoint-18 Early review requests: Reviewer Due Draft Daniel Franke 2018-01-31 draft-ietf-intarea-provisioning-domains-00 Next in the reviewer rotation: Radia Perlman Derrell Piper Tim Polk Vincent Roca Kyle Rose Joseph Salowey Rich Salz Stefan Santesson Yaron Sheffer Rifaat Shekh-Yusef From nobody Sat Aug 4 13:33:08 2018 Return-Path: X-Original-To: secdir@ietf.org Delivered-To: secdir@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 410D3130DE9; Sat, 4 Aug 2018 13:33:00 -0700 (PDT) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: Yoav Nir To: Cc: draft-ietf-sidrops-ov-clarify.all@ietf.org, sidrops@ietf.org, ietf@ietf.org X-Test-IDTracker: no X-IETF-IDTracker: 6.83.0 Auto-Submitted: auto-generated Precedence: bulk Message-ID: <153341478021.31715.18305969749704687082@ietfa.amsl.com> Date: Sat, 04 Aug 2018 13:33:00 -0700 Archived-At: Subject: [secdir] Secdir last call review of draft-ietf-sidrops-ov-clarify-03 X-BeenThere: secdir@ietf.org X-Mailman-Version: 2.1.27 List-Id: Security Area Directorate List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 04 Aug 2018 20:33:00 -0000 Reviewer: Yoav Nir Review result: Ready I have reviewed this document as part of the security directorate's ongoing effort to review all IETF documents being processed by the IESG. These comments were written primarily for the benefit of the security area directors. Document editors and WG chairs should treat these comments just like any other last call comments. The document clarifies two things about RFC 6811: That all routes MUST be marked as Valid, Invalid, or NotFound unless policy specifically says not to do so. The original text in RFC 6811 said SHOULD (perform a lookup...) and MAY (provide configuration options...), so this interpretation seems to be already strongly implied by 6811. That policy (such as rejecting invalid routes) MUST NOT be applied unless the operator specifically configured it. RFC 6811 already says, "An implementation MUST NOT exclude a route from the Adj-RIB-In or from consideration in the decision process as a side effect of its validation state, unless explicitly configured to do so." so I believe this is already stated in RFC 6811. Still, the text says that some implementers got it wrong. So I think the claim in the security considerations section, that this document does not introduce any security considerations beyond those of 6811 is reasonable. The fact that the security policy suggested by RFC 6811 MUST NOT be turned on by default may have been pointed out more emphatically, but this perhaps should have to be done in 6811. From nobody Sun Aug 5 17:28:15 2018 Return-Path: X-Original-To: secdir@ietf.org Delivered-To: secdir@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 655F4130DF3; Sun, 5 Aug 2018 17:28:02 -0700 (PDT) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: Christian Huitema To: Cc: ietf@ietf.org, draft-ietf-netconf-nmda-netconf.all@ietf.org, netconf@ietf.org X-Test-IDTracker: no X-IETF-IDTracker: 6.83.0 Auto-Submitted: auto-generated Precedence: bulk Message-ID: <153351528236.13444.6191328032557284868@ietfa.amsl.com> Date: Sun, 05 Aug 2018 17:28:02 -0700 Archived-At: Subject: [secdir] Secdir last call review of draft-ietf-netconf-nmda-netconf-06 X-BeenThere: secdir@ietf.org X-Mailman-Version: 2.1.27 List-Id: Security Area Directorate List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 06 Aug 2018 00:28:03 -0000 Reviewer: Christian Huitema Review result: Ready I have reviewed this document as part of the security directorate's ongoing effort to review all IETF documents being processed by the IESG. These comments were written primarily for the benefit of the security area directors. Document editors and WG chairs should treat these comments just like any other last call comments. The summary of the review is Ready The document (draft-ietf-netconf-nmda-netconf-06) presents extentions to the original NETCONG protocol (RFC 6241). RFC 6241 defined operations to "get-config" and "edit-config". The proposed revision defines "get-data" and "edit-data" that have more parameters than "get-config" and "edit-config", allowing for more precise filtering of the data being retrieved or edited. The security consideration section essentially points to the security considerations of the original NETCONF protocol, enhanced by the access control procedures defined in RFC 8341. The security of NETCONF depends on operation over a secure transport, the default being SSH, with NETCONF over SSH defined in RFC 6242. In my mind, the newly defined operations are similar to the previously defined operation, with an option for more narrow targeting to a subset of the configuration data. If the security of NETCONF was adequate, it will still be adequate after these extensions. From nobody Tue Aug 7 01:56:45 2018 Return-Path: X-Original-To: secdir@ietfa.amsl.com Delivered-To: secdir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 8C646130E6F for ; Tue, 7 Aug 2018 01:56:43 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.9 X-Spam-Level: X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id nE5Te_BdN7v6 for ; Tue, 7 Aug 2018 01:56:42 -0700 (PDT) Received: from mail.tail-f.com (mail.tail-f.com [46.21.102.45]) by ietfa.amsl.com (Postfix) with ESMTP id CF640130DF2 for ; Tue, 7 Aug 2018 01:56:41 -0700 (PDT) Received: from localhost (unknown [173.38.220.61]) by mail.tail-f.com (Postfix) with ESMTPSA id E8A261AE0144; Tue, 7 Aug 2018 10:56:40 +0200 (CEST) Date: Tue, 07 Aug 2018 10:56:40 +0200 (CEST) Message-Id: <20180807.105640.1680662026219965166.mbj@tail-f.com> To: shawn.emery@gmail.com Cc: lhotka@nic.cz, secdir@ietf.org, draft-ietf-netmod-schema-mount.all@tools.ietf.org From: Martin Bjorklund In-Reply-To: <87po0fgf4f.fsf@nic.cz> References: <87po0fgf4f.fsf@nic.cz> X-Mailer: Mew version 6.7 on Emacs 24.5 / Mule 6.0 (HANACHIRUSATO) Mime-Version: 1.0 Content-Type: Text/Plain; charset=us-ascii Content-Transfer-Encoding: 7bit Archived-At: Subject: Re: [secdir] Review of draft-ietf-netmod-schema-mount-10 X-BeenThere: secdir@ietf.org X-Mailman-Version: 2.1.27 Precedence: list List-Id: Security Area Directorate List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 07 Aug 2018 08:56:44 -0000 Hi Shawn, As mentioned, this text comes from the YANG security template (https://trac.ietf.org/trac/ops/wiki/yang-security-guidelines) that has been approved by the security ADs. [This doesn't mean that the text can't be changed, but if it needs to be changed, the template should be changed (after being approved by the ADs).] But I brought this up in the WG, and a comment was made that *if* this change is made, we also need to change not just this sentence, but also the rest of the template; these are written as a list of data nodes/subtrees and their corresponding sensitivity/vulnerability. So, if the change is accepted, new drafts would need to be written as a list of sensitivities/vulnerabilities with the data nodes and subtrees to which they apply. So I suggest we keep the current text in this document. /martin Ladislav Lhotka wrote: > Hi Shawn, > > thank you for the review, please see my comment below. > > Shawn Emery writes: > > > Reviewer: Shawn M. Emery > > Review result: Ready with nits > > > > I have reviewed this document as part of the security directorate's > > ongoing effort to review all IETF documents being processed by the IESG. > > These comments were written primarily for the benefit of the security > > area directors. Document editors and WG chairs should treat these > > comments just like any other last call comments. > > > > This draft specifies a schema for YANG module mount points for yet another > > specified schema location. > > > > The security considerations section does exist and refers to transport > > security > > through SSH and HTTPS for NETCONF and RESTCONF, respectively. For > > authorization, the spec refers to RFC 8341 for controlling NETCONF and > > RESTCONF user access. Data that would be considered sensitive or subject > > to attack is briefly described and prescribes read access controls for said > > data. > > I agree with the authors' assertions. > > > > General comments: > > > > None. > > > > Editorial comments: > > > > OLD: > > > > These are the subtrees and data nodes and their sensitivity/vulnerability: > > > > NEW: > > > > The following should be considered for subtrees/data nodes and their > > corresponding > > > > sensitivity/vulnerability: > > > > The OLD formulation actually comes from RFC 6087, section 6.1 (Security > Considerations Section Template). Your NEW formulation indeed looks > better, so we will use it in the present draft, and I will also send it > to the netmod mailing list in order to apply this change in > draft-ietf-netmod-rfc6087bis. > > Thanks, Lada > > > > > Shawn. > > -- > > -- > Ladislav Lhotka > Head, CZ.NIC Labs > PGP Key ID: 0xB8F92B08A9F76C67 > From nobody Tue Aug 7 16:19:11 2018 Return-Path: X-Original-To: secdir@ietfa.amsl.com Delivered-To: secdir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 3154F131118; Tue, 7 Aug 2018 16:19:04 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.198 X-Spam-Level: X-Spam-Status: No, score=-4.198 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HEADER_FROM_DIFFERENT_DOMAINS=0.001, RCVD_IN_DNSWL_MED=-2.3, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id MDJu9Q0rS2mD; Tue, 7 Aug 2018 16:19:02 -0700 (PDT) Received: from faui40.informatik.uni-erlangen.de (faui40.informatik.uni-erlangen.de [IPv6:2001:638:a000:4134::ffff:40]) (using TLSv1.2 with cipher ADH-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 2B8C21310DD; Tue, 7 Aug 2018 16:19:01 -0700 (PDT) Received: from faui48e.informatik.uni-erlangen.de (faui48e.informatik.uni-erlangen.de [131.188.34.51]) by faui40.informatik.uni-erlangen.de (Postfix) with ESMTP id 0D95758C507; Wed, 8 Aug 2018 01:18:56 +0200 (CEST) Received: by faui48e.informatik.uni-erlangen.de (Postfix, from userid 10463) id 8A37F4E0C64; Wed, 8 Aug 2018 01:18:56 +0200 (CEST) Date: Wed, 8 Aug 2018 01:18:56 +0200 From: Toerless Eckert To: Liang Xia Cc: secdir@ietf.org, anima@ietf.org, ietf@ietf.org, draft-ietf-anima-autonomic-control-plane.all@ietf.org Message-ID: <20180807231856.mtngivnzifh5uj2j@faui48e.informatik.uni-erlangen.de> References: <151944288538.13853.12008661353663855742@ietfa.amsl.com> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <151944288538.13853.12008661353663855742@ietfa.amsl.com> User-Agent: NeoMutt/20170113 (1.7.2) Archived-At: Subject: Re: [secdir] Secdir early review of draft-ietf-anima-autonomic-control-plane-13 X-BeenThere: secdir@ietf.org X-Mailman-Version: 2.1.27 Precedence: list List-Id: Security Area Directorate List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 07 Aug 2018 23:19:04 -0000 Liang: Just posted draft version -17 does include the fix from your review i missed to put into -16. Thanks! Toerless On Fri, Feb 23, 2018 at 07:28:05PM -0800, Liang Xia wrote: > Reviewer: Liang Xia > Review result: Has Issues > > In general, this document is well-written and considers security issues > carefully throughout the whole architecture. > > nits: > Abstract: /or not misconfigured/or misconfigured/ > > the fifth paragraph of section 6.1: the last ")" is redundant, therefore can be > deleted > > some section titles don't comply the rule of starting from a capital letter > > section 6.5 > /("IP security", see [RFC4301] and "Internet Key Exchange protocol version 2", > see [RFC7296]/("IP security", see [RFC4301] and "Internet Key Exchange protocol > version 2", see [RFC7296])/ > > suggestion: > all the Figures (e.g., Figure 1,2...) should have a title for explanation > > section 2, please update the last paragraph to reference RFC8174 to indicate > that lowercase versions of the keywords are not normative > > Section 11 (Security Considerations) Since section 9.2 has described the > self-protection properties of ACP well, it may be useful in this section to > mention them as a whole. -- --- tte@cs.fau.de From nobody Wed Aug 8 00:47:27 2018 Return-Path: X-Original-To: secdir@ietfa.amsl.com Delivered-To: secdir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id A6BE8126CB6; Wed, 8 Aug 2018 00:47:18 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.62 X-Spam-Level: X-Spam-Status: No, score=-2.62 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_LOW=-0.7, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id BwDv42fzl98x; Wed, 8 Aug 2018 00:47:17 -0700 (PDT) Received: from out01.mta.xmission.com (out01.mta.xmission.com [166.70.13.231]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 07B22130DC9; Wed, 8 Aug 2018 00:47:13 -0700 (PDT) Received: from in02.mta.xmission.com ([166.70.13.52]) by out01.mta.xmission.com with esmtps (TLS1.2:ECDHE_RSA_AES_128_GCM_SHA256:128) (Exim 4.87) (envelope-from ) id 1fnJBZ-0006B7-1d; Wed, 08 Aug 2018 01:47:13 -0600 Received: from [72.250.219.84] (helo=rumpleteazer.rhmr.com) by in02.mta.xmission.com with esmtpsa (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.87) (envelope-from ) id 1fnJBX-0007Ly-C4; Wed, 08 Aug 2018 01:47:12 -0600 Received: from rumpleteazer.rhmr.com (localhost [127.0.0.1]) by rumpleteazer.rhmr.com (8.14.4/8.14.4/Debian-4.1ubuntu1) with ESMTP id w787kdal021070; Wed, 8 Aug 2018 01:46:39 -0600 Received: (from hilarie@localhost) by rumpleteazer.rhmr.com (8.14.4/8.14.4/Submit) id w787kd74021069; Wed, 8 Aug 2018 01:46:39 -0600 Date: Wed, 8 Aug 2018 01:46:39 -0600 Message-Id: <201808080746.w787kd74021069@rumpleteazer.rhmr.com> From: "Hilarie Orman" Reply-To: "Hilarie Orman" To: iesg@ietf.org, secdir@ietf.org Cc: draft-ietf-oauth-token-exchange.all@ietf.org X-XM-SPF: eid=1fnJBX-0007Ly-C4; ; ; mid=<201808080746.w787kd74021069@rumpleteazer.rhmr.com>; ; ; hst=in02.mta.xmission.com; ; ; ip=72.250.219.84; ; ; frm=hilarie@purplestreak.com; ; ; spf=none X-XM-AID: U2FsdGVkX1+yDEGh9rIDbtCD+LPE3ziU X-SA-Exim-Connect-IP: 72.250.219.84 X-SA-Exim-Mail-From: hilarie@purplestreak.com X-Spam-DCC: XMission; sa04 1397; Body=1 Fuz1=1 Fuz2=1 X-Spam-Combo: *;iesg@ietf.org, secdir@ietf.org X-Spam-Relay-Country: X-Spam-Timing: total 1348 ms - load_scoreonly_sql: 0.06 (0.0%), signal_user_changed: 3.6 (0.3%), b_tie_ro: 2.5 (0.2%), parse: 1.25 (0.1%), extract_message_metadata: 6 (0.5%), get_uri_detail_list: 2.5 (0.2%), tests_pri_-1000: 4.7 (0.3%), tests_pri_-950: 2.1 (0.2%), tests_pri_-900: 1.77 (0.1%), tests_pri_-400: 27 (2.0%), check_bayes: 25 (1.9%), b_tokenize: 9 (0.7%), b_tok_get_all: 7 (0.5%), b_comp_prob: 3.9 (0.3%), b_tok_touch_all: 2.9 (0.2%), b_finish: 0.81 (0.1%), tests_pri_0: 1294 (96.0%), check_dkim_signature: 0.90 (0.1%), check_dkim_adsp: 7 (0.5%), tests_pri_500: 3.4 (0.3%), rewrite_mail: 0.00 (0.0%) X-SA-Exim-Version: 4.2.1 (built Thu, 05 May 2016 13:38:54 -0600) X-SA-Exim-Scanned: Yes (on in02.mta.xmission.com) Archived-At: Subject: [secdir] Security review of draft-ietf-oauth-token-exchange-14 X-BeenThere: secdir@ietf.org X-Mailman-Version: 2.1.27 Precedence: list List-Id: Security Area Directorate List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 08 Aug 2018 07:47:19 -0000 Security review of draft-ietf-oauth-token-exchange-14 OAuth 2.0 Token Exchange I have reviewed this document as part of the security directorate's ongoing effort to review all IETF documents being processed by the IESG. These comments were written primarily for the benefit of the security area directors. Document editors and WG chairs should treat these comments just like any other last call comments. The abstract states: This specification defines a protocol for an HTTP- and JSON- based Security Token Service (STS) by defining how to request and obtain security tokens from OAuth 2.0 authorization servers, including security tokens employing impersonation and delegation. [This review is late because I mistook the due date, dd-mm-yyyy = 06-08-2018 for mm-dd-yyyy = 06-08-2018 and ignored the mm because obviously it is August and just focused on the day. Which goes to show that it is important to understand what a message means.] I'm not at all sure I understand what the various fields in the new OAuth 2.0 tokens really mean. For example, section 4.1 about Actor Claims says that a web application might receive a token expressing that subject "admin" is acting for subject "user". The web application could "exchange" that token for a new one showing itself as the actor for "user". As a "chain of delegation", this is confusing. It would seem that the original token could be used to access resources, and the "exchange" of one token for another is not necessary. The complications of delegation and "impersonation" and "may act for" aside, section 7 (Privacy) seems to open a can of worms. Tokens may "reveal details of the target services" and thus may give away information about what the subject is doing or intends to do. But the subject must send the token in order to access the resource. What is a rational privacy policy for Oauth tokens? Will clients find it expedient to include all their tokens in every request? How does a client know which tokens a server can be trusted with? The document suggests that the tokens should only be communicated according to the privacy policies of the "respective organizations". How do two organizations communicate their privacy policies to one another? This section needs some amplification. The document is well-written, but the subject is complex. Hilarie From nobody Thu Aug 9 13:30:54 2018 Return-Path: X-Original-To: secdir@ietf.org Delivered-To: secdir@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 340C6130E0F for ; Thu, 9 Aug 2018 13:30:52 -0700 (PDT) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: Tero Kivinen To: X-Test-IDTracker: no X-IETF-IDTracker: 6.83.0 Auto-Submitted: auto-generated Precedence: bulk Reply-To: secdir-secretary@mit.edu Message-ID: <153384665220.28539.3455084134150165166.idtracker@ietfa.amsl.com> Date: Thu, 09 Aug 2018 13:30:52 -0700 Archived-At: Subject: [secdir] Assignments X-BeenThere: secdir@ietf.org X-Mailman-Version: 2.1.27 List-Id: Security Area Directorate List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 09 Aug 2018 20:30:53 -0000 Review instructions and related resources are at: http://tools.ietf.org/area/sec/trac/wiki/SecDirReview For telechat 2018-08-16 Reviewer LC end Draft Magnus Nystrom 2018-08-08 draft-ietf-doh-dns-over-https-13 Last calls: Reviewer LC end Draft John Bradley 2018-06-18 draft-ietf-bfd-multipoint-active-tail-09 Daniel Franke 2018-06-28 draft-ietf-netconf-rfc7895bis-06 Daniel Gillmor 2018-06-25 draft-ietf-dnsop-session-signal-14 Daniel Gillmor 2018-03-19 draft-gutmann-scep-10 Phillip Hallam-Baker 2018-07-10 draft-ietf-codec-ambisonics-08 Catherine Meadows 2018-07-30 draft-sahib-451-new-protocol-elements-03 Adam Montville 2018-08-14 draft-ietf-httpbis-expect-ct-07 Kathleen Moriarty 2018-08-13 draft-ietf-radext-coa-proxy-05 Russ Mundy 2018-08-13 draft-ietf-dnsop-terminology-bis-11 Russ Mundy 2017-09-14 draft-spinosa-urn-lex-13 Sandra Murphy 2018-08-10 draft-ietf-sidrops-rpki-tree-validation-02 Radia Perlman 2018-08-21 draft-ietf-anima-reference-model-06 Tina Tsou 2018-05-21 draft-ietf-v6ops-conditional-ras-06 Samuel Weiler 2018-05-21 draft-ietf-bfd-multipoint-18 Early review requests: Reviewer Due Draft Daniel Franke 2018-01-31 draft-ietf-intarea-provisioning-domains-00 Next in the reviewer rotation: Vincent Roca Kyle Rose Joseph Salowey Rich Salz Stefan Santesson Yaron Sheffer Rifaat Shekh-Yusef Melinda Shore Robert Sparks Takeshi Takahashi From nobody Thu Aug 9 17:23:52 2018 Return-Path: X-Original-To: secdir@ietfa.amsl.com Delivered-To: secdir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 7D1EC130FEE; Thu, 9 Aug 2018 17:23:44 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.71 X-Spam-Level: X-Spam-Status: No, score=-2.71 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001, T_DKIMWL_WL_HIGH=-0.01, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=juniper.net Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ydwFaxM-sPS3; Thu, 9 Aug 2018 17:23:33 -0700 (PDT) Received: from mx0b-00273201.pphosted.com (mx0b-00273201.pphosted.com [67.231.152.164]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 944E0130FE6; Thu, 9 Aug 2018 17:23:32 -0700 (PDT) Received: from pps.filterd (m0108161.ppops.net [127.0.0.1]) by mx0b-00273201.pphosted.com (8.16.0.22/8.16.0.22) with SMTP id w7A0Jf9e029078; Thu, 9 Aug 2018 17:23:31 -0700 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=juniper.net; h=from : to : subject : date : message-id : references : in-reply-to : content-type : mime-version; s=PPS1017; bh=6TyDIezMljcIMogfojuzZBVf7v51URP1NlSED2wsgjo=; b=noTX0z9Xrg9mTcmvi4Vs23SmO9zGojVIh/yc9l+jrXlfp0raR9n7S2lepKpVFdGr7MLB SJ/ai78H/k6ivaY+PpzOFcOJGHCsIz5nEaQnhMGG1BwvPIaV45FPWGQvC/GmMOh7Mtn2 KtSrXTzHMVFywZ0pMN/iwFHHvKednb0KeEqL+m/UVflIPTJOFlc/c1MVwglU/G1aRNaB YPWW6dV8dG8Ow9+1uHjvG6GXUjOAATaSjf8yHD3aEqUhmAV+Xb3WzXMD0NJGu1DT/eOv bhvPX0uVjCWddzMqrICpTIyM/GZs15dMTvOAqHP6bfbp60dS+mfXUsjafLcDbpE73iGX 9Q== Received: from nam04-co1-obe.outbound.protection.outlook.com (mail-co1nam04lp0054.outbound.protection.outlook.com [216.32.181.54]) by mx0b-00273201.pphosted.com with ESMTP id 2krv988cqt-1 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-SHA384 bits=256 verify=NOT); Thu, 09 Aug 2018 17:23:30 -0700 Received: from DM6PR05MB4665.namprd05.prod.outlook.com (20.176.109.202) by DM6PR05MB4250.namprd05.prod.outlook.com (20.176.78.11) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.1038.13; Fri, 10 Aug 2018 00:23:27 +0000 Received: from DM6PR05MB4665.namprd05.prod.outlook.com ([fe80::e0bc:6a82:571d:258]) by DM6PR05MB4665.namprd05.prod.outlook.com ([fe80::e0bc:6a82:571d:258%2]) with mapi id 15.20.1059.010; Fri, 10 Aug 2018 00:23:27 +0000 From: Kent Watsen To: David Mandelberg , "draft-ietf-netconf-zerotouch.all@ietf.org" , "iesg@ietf.org" , "secdir@ietf.org" Thread-Topic: secdir review of draft-ietf-netconf-zerotouch-22 Thread-Index: AQHUI6TomGkNAzmsB0eB34I+6n1ia6SiHHoAgAeQwACADkkdgA== Date: Fri, 10 Aug 2018 00:23:26 +0000 Message-ID: <51E98D22-1DBF-4069-A750-90987EB96B0D@juniper.net> References: <361393b0-6666-08ff-bdf4-3ba3bf4323c7@mandelberg.org> <47EEE9B6-5BC2-4A1F-ABB2-2ACB1C494545@juniper.net> <4579f9bf-0ead-a6af-dc80-a841527414eb@mandelberg.org> In-Reply-To: <4579f9bf-0ead-a6af-dc80-a841527414eb@mandelberg.org> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: yes X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/f.20.0.170309 x-originating-ip: [66.129.241.12] x-ms-publictraffictype: Email x-microsoft-exchange-diagnostics: 1; DM6PR05MB4250; 6:qWfI4vaayKZHI2WWQOndX0IO5yLknzZ7OC7GILHu6bdwxLG3S5IuwcAP5RiIp3CuBbRuIBUTn2tGLouVmXS3IvYANZnqr4QhokJvNBT4GI/DCSv6s1vwDtGrK1JDu7abP9hFxOm+SKIekDeQnIUHXJ5SWX08bwu+Kyt70YouF3nn6CK8m2enrgLbiB3M/cPUnN7bDSxUAjTbKp0oUQmyTESbaxRsslmbqseQh+9DveKj5LGH1TuNaF9bt3uXUX344txUHEK2lRcdGqX/l0xjRL2sEo+tml0OMtx/5ecKU8lrr29BNx78+TYovkVOLaRlXkdoTEDzNSrW0nNFzuL4mm+j60Ik/AQdJ0qmm716cudih+c6I7+RswfasXrloK3wmyT6mh5rxXvNRhDrpVfubHrBaVXwyYkCWtKBooo+OaS7xy5lhEq5Y8DSVEuEA/895w03kj2iSiT0LuMNr0qRVw==; 5:1uK8yP70aKHHJPojhr1J3ea8zigDSwGLQJOntXc0cSzhMkwOy8UceZR80+BkTfZIGCQEi5FyO9XxP9v9M1m9XcoczkC77k7T5Toe1y+Dz8D4yUnLpbbGokvIGJpjjmpwOvTeGOXX8KF/eCY6lpGK/otrk+4ZmVf/vubO1qYMPuI=; 7:y29QTj5+PBDmXj/dgMkczy65YqEL9VAMzURWcWOdcgWnHLYrmWMzecw5vdt7So9eOoNP1BgA5HUIVFCzZM/iCRX0AtFXvudkUNaGI6JhUKUUKPfgFbT8PsS74UxJiJ8dFq/WSHiyK2TZrk7fU94Z7zVDMxLyTmABnjFzpP2l7q3VTQWQYTV3xvDE2enGWmubLDaCBXck4H/djL4x+R0IvK5fEvCSG4lCIcV7yXEVxD/dmFcS4V1yp4ieZkX1xqIS x-ms-exchange-antispam-srfa-diagnostics: SOS; x-ms-office365-filtering-correlation-id: 7b324a11-fca6-45d3-ce5a-08d5fe577dee x-ms-office365-filtering-ht: Tenant x-microsoft-antispam: BCL:0; PCL:0; RULEID:(7020095)(4652040)(8989117)(4534165)(4627221)(201703031133081)(201702281549075)(8990107)(5600074)(711020)(4618075)(2017052603328)(7153060)(49563074)(7193020); SRVR:DM6PR05MB4250; x-ms-traffictypediagnostic: DM6PR05MB4250: x-microsoft-antispam-prvs: x-exchange-antispam-report-test: UriScan:(60795455431006)(158342451672863)(209352067349851)(192374486261705)(788757137089)(176510541525296); x-ms-exchange-senderadcheck: 1 x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(8211001083)(102415395)(6040522)(2401047)(8121501046)(5005006)(10201501046)(93006095)(93001095)(3002001)(3231311)(944501410)(52105095)(6055026)(149027)(150027)(6041310)(201703131423095)(201702281528075)(20161123555045)(201703061421075)(201703061406153)(20161123558120)(20161123564045)(20161123562045)(20161123560045)(6072148)(201708071742011)(7699016); SRVR:DM6PR05MB4250; BCL:0; PCL:0; RULEID:; SRVR:DM6PR05MB4250; x-forefront-prvs: 07607ED19A x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(376002)(346002)(39860400002)(396003)(136003)(366004)(199004)(189003)(478694002)(51444003)(446003)(11346002)(83716003)(102836004)(476003)(3846002)(99936001)(66066001)(6116002)(229853002)(5660300001)(6306002)(68736007)(5250100002)(6246003)(6512007)(36756003)(82746002)(33656002)(2616005)(53946003)(25786009)(53936002)(186003)(2201001)(86362001)(2906002)(81156014)(26005)(8676002)(81166006)(966005)(478600001)(6436002)(7736002)(106356001)(76176011)(99286004)(97736004)(8936002)(2501003)(6486002)(486006)(2900100001)(110136005)(58126008)(6506007)(305945005)(14454004)(105586002)(14444005)(316002)(256004)(5024004); DIR:OUT; SFP:1102; SCL:1; SRVR:DM6PR05MB4250; H:DM6PR05MB4665.namprd05.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; A:1; MX:1; received-spf: None (protection.outlook.com: juniper.net does not designate permitted sender hosts) x-microsoft-antispam-message-info: 8RfghRFaUr/QNYA8R4MD2jMy4E3ucOEg1po1eqPskVD28NFI6D2LtTRtGKW19aJBL/WmQXLlKTrz6By8FpnJ3CeFppu1QWFK5aX5/lsWG+PkeMTaVK3EUe7sRZwVaaLDokPVjiFeegvHJHyf49R3jHEjFXK2zJ/PNWKoB2Z4rgNSxAyHbjOTWtPWfxxvgsqR0JhcO+UYtNhpVZBF3C7gyrkyqDAtpZGAwz2lyvULZ4FuLx1OfsVhZSIObf2OnMZNk9rWkWiHSLv4N8jjdk9y6YDH6aEm7+4UADGSfeZSUHH5fMiUUuGC5wCNY7+YqOQkDfeGjlYFFdfGrm5ROv/ksKnTXcX5Cm/p4mO5sm8FBJs= spamdiagnosticoutput: 1:99 spamdiagnosticmetadata: NSPM Content-Type: multipart/mixed; boundary="_002_51E98D221DBF4069A75090987EB96B0Djunipernet_" MIME-Version: 1.0 X-OriginatorOrg: juniper.net X-MS-Exchange-CrossTenant-Network-Message-Id: 7b324a11-fca6-45d3-ce5a-08d5fe577dee X-MS-Exchange-CrossTenant-originalarrivaltime: 10 Aug 2018 00:23:27.0124 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: bea78b3c-4cdb-4130-854a-1d193232e5f4 X-MS-Exchange-Transport-CrossTenantHeadersStamped: DM6PR05MB4250 X-Proofpoint-Virus-Version: vendor=fsecure engine=2.50.10434:, , definitions=2018-08-09_09:, , signatures=0 X-Proofpoint-Spam-Details: rule=outbound_spam_notspam policy=outbound_spam score=0 priorityscore=1501 malwarescore=0 suspectscore=0 phishscore=0 bulkscore=0 spamscore=0 clxscore=1015 lowpriorityscore=0 mlxscore=0 impostorscore=0 mlxlogscore=999 adultscore=0 classifier=spam adjust=0 reason=mlx scancount=1 engine=8.0.1-1807170000 definitions=main-1808100002 Archived-At: Subject: Re: [secdir] secdir review of draft-ietf-netconf-zerotouch-22 X-BeenThere: secdir@ietf.org X-Mailman-Version: 2.1.27 Precedence: list List-Id: Security Area Directorate List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 10 Aug 2018 00:23:45 -0000 --_002_51E98D221DBF4069A75090987EB96B0Djunipernet_ Content-Type: text/plain; charset="utf-8" Content-ID: Content-Transfer-Encoding: base64 SGkgRGF2aWQsDQoNClNvcnJ5IGZvciB0aGUgZGVsYXkuICBJJ3ZlIGJlZW4gYnVzeSB3aXRoIHdv cmsgYW5kIHRyYXZlbC4NCg0KSSdtIGtlZXBpbmcgdGhlIGVudGlyZSBoaXN0b3J5IGZvciBwb3N0 ZXJpdHksIGJ1dCBwbGVhc2UNCnRyaW0gZG93biB0byByZW1haW5pbmcgcG9pbnRzIGlmIHlvdSBs aWtlLg0KDQpUaGFua3MsDQpLZW50DQoNCg0KDQo+Pj4gSXMgdGhlcmUgYW55IHByb3RlY3Rpb24g YWdhaW5zdCBvbGQgc2lnbmVkIFplcm8gVG91Y2ggSW5mb3JtYXRpb24/IEkgc2VlDQo+Pj4gdGhh dCBPd25lcnNoaXAgVm91Y2hlcnMgYW5kIE93bmVyIENlcnRpZmljYXRlcyBib3RoIGhhdmUgbWVj aGFuaXNtcyBmb3INCj4+PiBleHBpcmF0aW9uIChhbmQgZm9yIGNlcnRzLCByZXZvY2F0aW9uKSwg YnV0IEkgZG9uJ3Qgc2VlIGFueXRoaW5nDQo+Pj4gY29tcGFyYWJsZSBmb3IgcmVkaXJlY3Qgb3Ig b25ib2FyZGluZyBpbmZvcm1hdGlvbi4gSWYgYW4gb3duZXIgY3JlYXRlcyBhDQo+Pj4gdmFsaWQg cmVkaXJlY3Qgb3Igb25ib2FyZGluZyBvYmplY3QgYW5kIGRpc2NvdmVycyBhIGJ1ZyBpbiBpdCwg aXMgdGhlcmUNCj4+PiBhbnkgd2F5IGZvciB0aGUgb3duZXIgdG8gbWFrZSB0aGF0IG9iamVjdCBu by1sb25nZXItdmFsaWQgd2l0aG91dA0KPj4+IGdldHRpbmcgYW4gZW50aXJlbHkgbmV3IG93bmVy IGNlcnRpZmljYXRlIGFuZCByZXZva2luZyB0aGUgb2xkIGNlcnQ/IElzDQo+Pj4gdGhhdCBpbnRl bnRpb25hbD8NCj4+IA0KPj4gTm8sIGFzIHlvdSBzYXksIGl0IGlzIG5vdCBwb3NzaWJsZSB0byBy ZXZva2Ugc2lnbmVkIGRhdGEsIG90aGVyIHRoYW4NCj4+IHRvIHJldm9rZSB0aGUgT3duZXIgQ2Vy dGlmaWNhdGUgYXNzb2NpYXRlZCB3aXRoIHRoZSBwcml2YXRlIGtleSB0aGF0DQo+PiBzaWduZWQg aXQuDQo+PiANCj4+IEkgd291bGRuJ3Qgc2F5IHRoYXQgdGhpcyB3YXMvaXMgaW50ZW50aW9uYWws IG90aGVyIHRoYW4gbm90ZSB0aGF0DQo+PiBpdCBzZWVtcyBjb25zaXN0ZW50IHdpdGggYXNzdW1w dGlvbnMgbWFkZSB3aGVuIHRoZSBib290c3RyYXBwaW5nDQo+PiBkZXZpY2Ugb2J0YWlucyB1bnNp Z25lZCBkYXRhIGZyb20gYSB0cnVzdGVkIGJvb3RzdHJhcCBzZXJ2ZXIsIGluDQo+PiB0aGF0IHRo ZSBkYXRhIGlzIG9ubHkgcHJvdGVjdGVkIGJ5IHRoZSBib290c3RyYXAgc2VydmVyJ3MgVExTDQo+ PiBjZXJ0aWZpY2F0ZTsgdGhlIGRldmljZSBjYW4gY2hlY2sgdGhhdCB0aGUgY2VydGlmaWNhdGUg aGFzbid0IGJlZW4NCj4+IHJldm9rZWQsIGJ1dCB0aGF0IGRvZXNuJ3Qgc2F5IGFueXRoaW5nIGFi b3V0IHRoZSBjdXJyZW50IHZhbGlkaXR5DQo+PiBvZiB0aGUgZGF0YS4NCj4NCj4gSSB0aGluayB0 aGUgVExTIGNhc2UgYW5kIHRoZSBjYXNlIG9mIHNpZ25lZCBvYmplY3RzIHRyYW5zbWl0dGVkDQo+ IG92ZXIgaW5zZWN1cmUgY2hhbm5lbHMvbWVkaXVtcyBhcmUgZGlmZmVyZW50LCBiZWNhdXNlIG9m IFRMUydzIA0KPiByZXBsYXkgcHJvdGVjdGlvbi4NCj4NCj4NCj4+IERvIHlvdSB0aGluayBhIFNl Y3VyaXR5IENvbnNpZGVyYXRpb24gd291bGQgY292ZXIgaXQ/ICBTb21ldGhpbmcNCj4+IGxpa2U6 DQo+PiANCj4+ICAgICBaZXJvdG91Y2ggaW5mb3JtYXRpb24sIHJlZ2FyZGxlc3Mgb2YgaG93IG9i dGFpbmVkIG9yIGhvdw0KPj4gICAgIHRydXN0ZWQsIGRvZXMgbm90IGhhdmUgYSB2YWxpZGl0eSBh c3NlcnRpb24gYmV5b25kIHRoZSBQS0kNCj4+ICAgICB1c2VkIHRvIGF1dGhlbnRpY2F0ZSBpdC4g IFplcm90b3VjaCBpbmZvcm1hdGlvbiBuZWl0aGVyDQo+PiAgICAgZXhwaXJlcyBub3IgY2FuIGJl IHJldm9rZWQuICBXaGVuIHByb3ZpZGVkIGJ5IGEgdHJ1c3RlZA0KPj4gICAgIGJvb3RzdHJhcCBz ZXJ2ZXIsIHRoZSB2YWxpZGl0eSBvZiB0aGUgemVyb3RvdWNoIGluZm9ybWF0aW9uDQo+PiAgICAg aXMgaW1wbGllZCBieSBpdHMgYXZhaWxhYmlsaXR5LiAgSG93ZXZlciwgd2hlbiB6ZXJvdG91Y2gN Cj4+ICAgICBpbmZvcm1hdGlvbiBpcyBwcm92aWRlZCBvdXRzaWRlIHRoZSBwdXJ2aWV3IG9mIGEg Ym9vdHN0cmFwDQo+PiAgICAgc2VydmVyIChpLmUuLCBzaWduZWQgZGF0YSBvbiBhIHJlbW92YWJs ZSBzdG9yYWdlIGRldmljZSksDQo+DQo+IEknZCBzdWdnZXN0IGFkZGluZyBhIHdvcmQgdG8gbWFr ZSB0aGF0ICJhIHRydXN0ZWQgYm9vdHN0cmFwIHNlcnZlciIuIA0KPiAoQm9vdHN0cmFwIHNlcnZl cnMgY2FuIGJlIHVudHJ1c3RlZCwgcmlnaHQ/KQ0KPg0KPj4gICAgIGl0cyBjdXJyZW50IHZhbGlk aXR5IGlzIGxlc3MgY2VydGFpbi4gIE9wZXJhdG9ycyBhcmUgYWR2aXNlZA0KPj4gICAgIHRvIGVu c3VyZSBvbmx5IGFjY3VyYXRlIHplcm90b3VjaCBpbmZvcm1hdGlvbiBpcyBldmVyDQo+PiAgICAg cHVibGlzaGVkLiAgSW4gY2FzZSBpbmFjY3VyYXRlIHplcm90b3VjaCBpbmZvcm1hdGlvbiBpcw0K Pj4gICAgIHB1Ymxpc2hlZCwgb3Igb3RoZXJ3aXNlIGRlZW1lZCBubyBsb25nZXIgdmFsaWQsIGFu ZCBpdCBpcw0KPj4gICAgIGRlZW1lZCBhIHNlY3VyaXR5IHJpc2ssIHRoZSBzaWduaW5nIGNlcnRp ZmljYXRlIFNIT1VMRCBiZQ0KPj4gICAgIHJldm9rZWQgYW5kIGEgbmV3IG9uZSBjcmVhdGVkIGhh dmluZyBhIGNoYWluIHRvIHRydXN0DQo+PiAgICAgbGVhZGluZyB0byB0aGUgc2FtZSAncGlubmVk LWRvbWFpbi1jZXJ0aWZpY2F0ZScgcHJvdmlkZWQNCj4+ICAgICBpbiB0aGUgT3duZXJzaGlwIFZv dWNoZXIgZm9yIHRoZSBkZXZpY2UuICBIb3dldmVyLCBkb2luZw0KPj4gICAgIHNvLCB3aWxsIG5l Y2Vzc2FyaWx5IGFmZmVjdCB0aGUgdmFsaWRpdHkgb2YgYW55IG90aGVyDQo+PiAgICAgcHJldmlv dXNseSBwdWJsaXNoZWQgemVyb3RvdWNoIGluZm9ybWF0aW9uIGFydGlmYWN0cw0KPj4gICAgIHNp Z25lZCB1c2luZyB0aGUganVzdC1yZXZva2VkIGNlcnRpZmljYXRlLiAgSXQgdGhlIG5lZWQNCj4+ ICAgICB0byBkbyB0aGlzIGlzIGZhaXJseSBjb21tb24sIG9wZXJhdG9ycyBjYW4gZGVmaW5lIGFu DQo+PiAgICAgT3duZXIgQ2VydGlmaWNhdGUgcGVyIGRldmljZS4NCj4NCj4gT3duZXIgY2VydHMg Y2FuIGJlIHZhbGlkIGZvciB5ZWFycywgcmlnaHQ/IE15IGludHVpdGlvbiAod2hpY2ggbWlnaHQg YmUgDQo+IHdyb25nKSBpcyB0aGF0IGl0J3MgaGFyZCBlbm91Z2ggdG8gcmVtZW1iZXIgZXZlcnkg b2xkIGNvbmZpZ3VyYXRpb24gdXNlZCANCj4gaW4gdGhlIHBhc3QgZmV3IHllYXJzLCB0aGF0IG9w ZXJhdG9ycyB3b24ndCByZWFsbHkga25vdyBpZiBhbnkgb2YgdGhlIA0KPiBvbGQgY29uZmlndXJh dGlvbnMgc2hvdWxkIGJlICJkZWVtZWQgYSBzZWN1cml0eSByaXNrIi4gWW91IHByb2JhYmx5IGhh dmUgDQo+IGEgYmV0dGVyIHVuZGVyc3RhbmRpbmcgb2YgdGhlIG9wZXJhdGlvbmFsIGVudmlyb25t ZW50cyB0aGlzIHByb3RvY29sIA0KPiB3aWxsIGJlIHVzZWQgaW4gdGhvdWdoLiBJZiB5b3UgZG9u J3QgdGhpbmsgdGhlcmUncyBhIHNpZ25pZmljYW50IA0KPiBvcGVyYXRpb25hbCBzZWN1cml0eSBy aXNrIGZyb20gdGhpcywgdGhlbiBJJ20gaGFwcHkgd2l0aCB5b3VyIHRleHQuDQoNClllcywgb3du ZXIgY2VydHMgY291bGQgYmUgdmFsaWQgZm9yIHllYXJzLCB0aG91Z2gsIGluIHByYWN0aWNlLCBJ IA0Kb3B0aW1pc3RpY2FsbHkgaW1hZ2luZSB0aGF0IHRoZXknZCBiZSByZWZyZXNoZWQgYW5udWFs bHkuDQoNCkkgd2FzIHdyaXRpbmcgdGhlIFNlY3VyaXR5IENvbnNpZGVyYXRpb25zIGZvciB0aGlz IHdoZW4gaXQgc2VlbWVkDQp0aGF0IHRoZSBiZXR0ZXIgdGhpbmcgdG8gZG8gaGVyZSBpcyB0byBp bnN0ZWFkIGFkZCAibm90LWJlZm9yZSIgYW5kDQoibm90LWFmdGVyIiBsZWFmcyB0byB0aGUgemVy b3RvdWNoIGluZm9ybWF0aW9uIGFydGlmYWN0LiAgVGhlIGRyYWZ0DQp3b3VsZCB0aGVuIGV4cGxh aW4gdGhhdCBkZXZpY2VzIE1VU1QgZW5zdXJlIHRoZSBjdXJyZW50IHRpbWUgaXMgaW4NCmJldHdl ZW4uDQoNCldvdWxkIHN1Y2ggYW4gYWRkaXRpb24gcmVzb2x2ZSB0aGlzIGlzc3VlIGZvciB5b3U/ DQoNCg0KDQo+Pj4gSXQgc2VlbXMgbGlrZSB0aGlzIHByb3RvY29sIHBsYWNlcyBtb3JlIHRydXN0 IGluIGRldmljZSBtYW51ZmFjdHVyZXJzDQo+Pj4gdGhhbiB3YXMgcHJldmlvdXNseSByZXF1aXJl ZCwgYnV0IEkgZG9uJ3Qgc2VlIGFueSBkaXNjdXNzaW9uIG9mIHRoYXQgaW4NCj4+PiB0aGUgc2Vj dXJpdHkgY29uc2lkZXJhdGlvbnMuIElmIG5lY2Vzc2FyeSwgaXMgdGhlcmUgYW55IHdheSB0byBk aXNhYmxlDQo+Pj4gemVybyB0b3VjaCwgYW5kIGNvbmZpZ3VyZSBhIGRldmljZSBtYW51YWxseT8g RS5nLiwgaWYgdGhlIHN1cHBseSBjaGFpbg0KPj4+IGlzIHByZXN1bWVkLXNlY3VyZSwgYnV0IHRo ZSBtYW51ZmFjdHVyZXIncyB3ZWxsLWtub3duIGJvb3RzdHJhcCBzZXJ2ZXINCj4+PiBpcyBjb21w cm9taXNlZCwgaXMgdGhlcmUgYW55IHdheSB0byBzZWN1cmVseSBwcm92aXNpb24gYSBuZXcgZGV2 aWNlPw0KPj4gDQo+PiBSZWdhcmRpbmcgcGxhY2luZyBtb3JlIHRydXN0IGluIGRldmljZSBtYW51 ZmFjdHVyZXJzLCBhbmQgYQ0KPj4gcG90ZW50aWFsIFNlY3VyaXR5IENvbnNpZGVyYXRpb25zIHN0 YXRlbWVudCwgSSdtIHRyeWluZyB0bw0KPj4gZGV0ZXJtaW5lIHdoYXQgc3RhdGVtZW50cyB5b3Un cmUgbG9va2luZyBmb3IuDQo+PiANCj4+IEJ1dCBmaXJzdCwgSSB0aGluayB5b3UgbWVhbiAid2Vs bC1rbm93biBib290c3RyYXAgc2VydmVycyIgbW9yZQ0KPj4gc28gdGhhbiAibWFudWZhY3R1cmVy cyIuICBBRkFJSywgdGhlIGRyYWZ0IG5ldmVyIHNheXMgaW4gbm9ybWF0aXZlDQo+PiB0ZXh0IHRo YXQgdGhlIHdlbGwta25vd24gYm9vdHN0cmFwIHNlcnZlcnMgYXJlIGhvc3RlZCBieSB0aGUNCj4+ IG1hbnVmYWN0dXJlciAodGhvdWdoIGVudGlyZWx5IHBvc3NpYmxlIGFuZCBzb21ld2hhdCBsaWtl bHkpLg0KPg0KPiBDb3JyZWN0LCBzb3JyeSBmb3IgdGhlIGFzc3VtcHRpb24uDQo+DQo+PiBTbyBt YXliZSBhIGNvdXBsZSBTZWN1cml0eSBDb25zaWRlcmF0aW9uIHN0YXRlbWVudHMgcmVsYXRlZCB0 bzoNCj4+IA0KPj4gMSkgdGhlIHNlY3VyaXR5IGlzc3VlIHRoYXQgdGhlIHdlbGwta25vd24gYm9v dHN0cmFwIHNlcnZlciBtYXkgaGF2ZQ0KPj4gICAgIGJlZW4gY29tcHJvbWlzZWQuICBUaG91Z2gs IGl0IHNlZW1zIHRoYXQgdGhpcyBpcyBhIHN0YXRlbWVudCB0aGF0DQo+PiAgICAgYW55IFRMUy1w cm90ZWN0ZWQgcmVzb3VyY2UgY291bGQgbWFrZS4NCj4+IA0KPj4gMikgdGhlIHByaXZhY3kgaXNz dWUgdGhhdCB0aGUgaW5mb3JtYXRpb24gcHJvdmlkZWQgdG8gdGhlIHdlbGwta25vd24NCj4+ICAg ICBib290c3RyYXAgc2VydmljZSBtYXkgYmUgdmlzaWJsZSB0byBvdGhlcnMgKGUuZy4sIGFkbWlu cyBvZiB0aGUNCj4+ICAgICBib290c3RyYXAgc2VydmVyKSBpZiBub3QgZW5jcnlwdGVkLg0KPj4g DQo+PiBBcmUgdGhlc2Ugd2hhdCB5b3UgaGFkIGluIG1pbmQ/ICBJZiBub3QsIGNhbiB5b3UgcGxl YXNlIGpvdCBkb3duIGENCj4+IGZldyBsaW5lcyBjYXB0dXJpbmcgd2hhdCB5b3UgaG9wZSB0byBz ZWU/DQo+DQo+IFRob3NlIGFyZSBwYXJ0IG9mIHdoYXQgSSBoYWQgaW4gbWluZCwgYnV0IEknbSBs b29raW5nIGZvciBzb21ldGhpbmcgYXQgYSANCj4gaGlnaGVyIGxldmVsLiBJdCBzZWVtcyB0aGF0 IHRoZSBuYXR1cmUgb2YgdGhpcyBwcm90b2NvbCBpcyB0byBzaGlmdCBzb21lIA0KPiBjb250cm9s IG9mIGluaXRpYWwgY29uZmlndXJhdGlvbiBhd2F5IGZyb20gdGhlIG93bmVyIGFuZCB0b3dhcmRz IHRoZSANCj4gbWFudWZhY3R1cmVyIChvciB3aG9ldmVyIHBpY2tzIHRoZSBsaXN0IG9mIHdlbGwt a25vd24gYm9vdHN0cmFwIHNlcnZlcnMpIA0KPiBhbmQvb3IgdGhlIHdlbGwta25vd24gYm9vdHN0 cmFwIHNlcnZlciBvcGVyYXRvcnMuIFRoYXQncyBub3QgYSBwcm9ibGVtIA0KPiBhdCBhbGwsIGl0 IHdvdWxkIGp1c3QgYmUgbmljZSB0byBzZWUgc29tZSBkaXNjdXNzaW9uIG9mIHRoYXQgc2hpZnQg aW4gDQo+IGNvbnRyb2wuIEl0IHdvdWxkIGJlIGV2ZW4gZ3JlYXRlciB0byBzZWUgYSBkaXNjdXNz aW9uIG9mIGhvdyB0aGF0IHNoaWZ0IA0KPiBpbiBjb250cm9sIG1hdGNoZXMgdXAgd2l0aCBhIHRo cmVhdCBtb2RlbC4NCj4NCj4gRG9lcyB0aGF0IG1ha2Ugc2Vuc2U/IEknbSBub3Qgc3VyZSBob3cg bXVjaCB0aGF0J3MgaW4gc2NvcGUgZm9yIHRoaXMgDQo+IHBhcnRpY3VsYXIgZG9jdW1lbnQsIGl0 IGp1c3Qgc2VlbXMgbGlrZSB0aGVyZSdzIHNvbWUgbWFqb3Igc3R1ZmYgZ29pbmcgDQo+IG9uIHdp dGggb3duZXJzIG5lZWRpbmcgdG8gdHJ1c3Qgb3RoZXJzIG1vcmUgaW4gd2F5cyB0aGF0IHRoZXkg ZGlkIG5vdCANCj4gd2l0aG91dCB6ZXJvdG91Y2gsIHNvIGl0IHdvdWxkIGJlIGdvb2QgdG8gc2Vl IGFuIGV4cGxhbmF0aW9uIG9mIHRoZSANCj4gZXh0ZW50IG9mIHRoYXQgc29tZXdoZXJlLg0KDQpJ cyB0aGlzIHdoYXQgeW91IGhhZCBpbiBtaW5kPw0KDQogICA5LjkuICBJbmNyZWFzZWQgUmVsaWFu Y2Ugb24gTWFudWZhY3R1cmVycw0KDQogICBUaGUgemVybyB0b3VjaCBib290c3RyYXBwaW5nIHBy b3RvY29sIHByZXNlbnRlZCBpbiB0aGlzIGRvY3VtZW50DQogICBzaGlmdHMgc29tZSBjb250cm9s IG9mIGluaXRpYWwgY29uZmlndXJhdGlvbiBhd2F5IGZyb20gdGhlIHJpZ2h0ZnVsDQogICBvd25l ciBvZiB0aGUgZGV2aWNlIGFuZCB0b3dhcmRzIHRoZSBtYW51ZmFjdHVyZXIgYW5kIGl0cyBkZWxl Z2F0ZXMuDQoNCiAgIFRoZSBtYW51ZmFjdHVyZXIgbWFpbnRhaW5zIHRoZSBsaXN0IG9mIHdlbGwt a25vd24gYm9vdHN0cmFwIHNlcnZlcnMNCiAgIGl0cyBkZXZpY2VzIHdpbGwgdHJ1c3QuICBCeSBk ZXNpZ24sIGlmIG5vIGJvb3RzdHJhcHBpbmcgZGF0YSBpcyBmb3VuZA0KICAgdmlhIG90aGVyIG1l dGhvZHMgZmlyc3QsIHRoZSBkZXZpY2Ugd2lsbCB0cnkgdG8gcmVhY2ggb3V0IHRvIHRoZQ0KICAg d2VsbC1rbm93biBib290c3RyYXAgc2VydmVycy4gIFRoZXJlIGlzIG5vIG1lY2hhbmlzbSB0byBw cmV2ZW50IHRoaXMNCiAgIGZyb20gb2NjdXJyaW5nIG90aGVyIHRoYW4gYnkgdXNpbmcgYW4gZXh0 ZXJuYWwgZmlyZXdhbGwgdG8gYmxvY2sgc3VjaA0KICAgY29ubmVjdGlvbnMuICBDb25jZXJucyBy ZWxhdGVkIHRvIHRydXN0ZWQgYm9vdHN0cmFwIHNlcnZlcnMgYXJlDQogICBkaXNjdXNzZWQgaW4g U2VjdGlvbiA5LjEwLg0KDQogICBTaW1pbGFybHksIHRoZSBtYW51ZmFjdHVyZXIgbWFpbnRhaW5z IHRoZSBsaXN0IG9mIHZvdWNoZXIgc2lnbmluZw0KICAgYXV0aG9yaXRpZXMgaXRzIGRldmljZXMg d2lsbCB0cnVzdC4gIFRoZSB2b3VjaGVyIHNpZ25pbmcgYXV0aG9yaXRpZXMNCiAgIGlzc3VlIHRo ZSB2b3VjaGVycyB0aGF0IGVuYWJsZSBhIGRldmljZSB0byB0cnVzdCBhbiBvd25lcidzIGRvbWFp bg0KICAgY2VydGlmaWNhdGUuICBJdCBpcyB2aXRhbCB0aGF0IG1hbnVmYWN0dXJlcnMgZW5zdXJl IHRoZSBpbnRlZ3JpdHkgb2YNCiAgIHRoZXNlIHZvdWNoZXIgc2lnbmluZyBhdXRob3JpdGllcywg c28gYXMgdG8gYXZvaWQgaW5jb3JyZWN0DQogICBhc3NpZ25tZW50cy4NCiANCiAgIE9wZXJhdG9y cyBzaG91bGQgYmUgYXdhcmUgdGhhdCB0aGlzIHN5c3RlbSBhc3N1bWVzIHRoYXQgdGhleSB0cnVz dA0KICAgYWxsIHRoZSBwcmUtY29uZmlndXJlZCBib290c3RyYXAgc2VydmVycyBhbmQgdm91Y2hl ciBzaWduaW5nIA0KICAgYXV0aG9yaXRpZXMgZGVzaWduYXRlZCBieSB0aGUgbWFudWZhY3R1cmVy cy4NCg0KICAgOS4xMC4gIENvbmNlcm5zIHdpdGggVHJ1c3RlZCBCb290c3RyYXAgU2VydmVycw0K DQogICBUcnVzdGVkIGJvb3RzdHJhcCBzZXJ2ZXJzLCB3aGV0aGVyIHdlbGwta25vd24gb3IgZGlz Y292ZXJlZCwgaGF2ZSB0aGUNCiAgIHBvdGVudGlhbCBjYXVzZSBwcm9ibGVtcywgc3VjaCBhcyB0 aGUgZm9sbG93aW5nLg0KDQogICBvICBBIHRydXN0ZWQgYm9vdHN0cmFwIHNlcnZlciB0aGF0IGhh cyBiZWVuIGNvbXByb21pc2VkIG1heSBiZQ0KICAgICAgbW9kaWZpZWQgdG8gcmV0dXJuIHVuc2ln bmVkIGRhdGEgb2YgYW55IHNvcnQuICBGb3IgaW5zdGFuY2UsIGENCiAgICAgIGJvb3RzdHJhcCBz ZXJ2ZXIgdGhhdCBpcyBvbmx5IHN1cHBvc2VkIHRvIHJldHVybiByZWRpcmVjdA0KICAgICAgaW5m b3JtYXRpb24gbWlnaHQgYmUgbW9kaWZpZWQgdG8gcmV0dXJuIG9uYm9hcmRpbmcgaW5mb3JtYXRp b24uDQogICAgICBTaW1pbGFybHksIGEgYm9vdHN0cmFwIHNlcnZlciB0aGF0IGlzIG9ubHkgc3Vw cG9zZWQgdG8gcmV0dXJuDQogICAgICBzaWduZWQgZGF0YSwgbWF5IGJlIG1vZGlmaWVkIHRvIHJl dHVybiB1bnNpZ25lZCBkYXRhLiAgSW4gYm90aA0KICAgICAgY2FzZXMsIHRoZSBkZXZpY2Ugd2ls bCBhY2NlcHQgdGhlIHJlc3BvbnNlLCB1bmF3YXJlIHRoYXQgaXQgd2Fzbid0DQogICAgICBzdXBw b3NlIHRvIGJlIGFueSBkaWZmZXJlbnQuICBJdCBpcyBSRUNPTU1FTkRFRCB0aGF0IG1haW50YWlu ZXJzDQogICAgICBvZiB0cnVzdGVkIGJvb3RzdHJhcCBzZXJ2ZXJzIGVuc3VyZSB0aGF0IHRoZWly IHN5c3RlbXMgYXJlIG5vdA0KICAgICAgZWFzaWx5IGNvbXByb21pc2VkIGFuZCwgaXQgY2FzZSBv ZiBjb21wcm9taXNlLCBoYXZlIG1lY2hhbmlzbXMgaW4NCiAgICAgIHBsYWNlIHRvIGRldGVjdCBh bmQgcmVtZWRpYXRlIHRoZSBjb21wcm9taXNlIGFzIGV4cGVkaWVudGx5IGFzDQogICAgICBwb3Nz aWJsZS4NCg0KICAgbyAgQSB0cnVzdGVkIGJvb3RzdHJhcCBzZXJ2ZXIgaG9zdGluZyBlaXRoZXIg dW5zaWduZWQgb3Igc2lnbmVkIGJ1dA0KICAgICAgbm90IGVuY3J5cHRlZCBkYXRhIG1heSBkaXNj bG9zZSBpbmZvcm1hdGlvbiB0byB1bndhbnRlZCBwYXJ0aWVzDQogICAgICAoZS5nLiwgYW4gYWRt aW5pc3RyYXRvciBvZiB0aGUgYm9vdHN0cmFwIHNlcnZlcikuICBUaGlzIGlzIGENCiAgICAgIHBy aXZhY3kgaXNzdWUgb25seSwgYnV0IGNvdWxkIHJldmVhbCBpbmZvcm1hdGlvbiB0aGF0IG1pZ2h0 IGJlDQogICAgICB1c2VkIGluIGEgc3Vic2VxdWVudCBhdHRhY2suICBEaXNjbG9zdXJlIG9mIHJl ZGlyZWN0IGluZm9ybWF0aW9uDQogICAgICBoYXMgbGltaXRlZCBleHBvc3VyZSAoaXQgaXMganVz dCBhIGxpc3Qgb2YgYm9vdHN0cmFwIHNlcnZlcnMpLA0KICAgICAgd2hlcmVhcyBkaXNjbG9zdXJl IG9mIG9uYm9hcmRpbmcgaW5mb3JtYXRpb24gY291bGQgYmUgaGlnaGx5DQogICAgICByZXZlYWxp bmcgKGUuZy4sIG5ldHdvcmsgdG9wb2xvZ3ksIGZpcmV3YWxsIHBvbGljaWVzLCBldGMuKS4gIEl0 DQogICAgICBpcyBSRUNPTU1FTkRFRCB0aGF0IG9wZXJhdG9ycyBlbmNyeXB0IHRoZSBib290c3Ry YXBwaW5nIGRhdGEgd2hlbg0KICAgICAgaXRzIGNvbnRlbnRzIGFyZSBjb25zaWRlcmVkIHNlbnNp dGl2ZS4NCg0KDQoNCj4+IFJlZ2FyZGluZyAiaXMgdGhlcmUgYW55IHdheSB0byBkaXNhYmxlIHpl cm8gdG91Y2gsIGFuZCBjb25maWd1cmUgYQ0KPj4gZGV2aWNlIG1hbnVhbGx5IiwgSSB0aGluayB0 aGF0IHRoaXMgaXMgb3V0c2lkZSB0aGUgc2NvcGUgb2YgdGhlDQo+PiBkb2N1bWVudC4gIFNvbWUg dmVuZG9ycyBtYXkgbG9jayBkb3duIGEgZGV2aWNlIHN1Y2ggdGhhdCBpdCBjYW4NCj4+IG9ubHkg YWN0aXZhdGUgdGhydSB0aGUgYm9vdHN0cmFwcGluZyBwcm9jZXNzLCB3aGlsZSBvdGhlciBkZXZp Y2VzDQo+PiBzaW11bHRhbmVvdXNseSBlbmFibGUgY29uc29sZSBhY2Nlc3MuDQo+DQo+IEFDSy4g SSB0aGluayB0aG9zZSBoYXZlIHNpZ25pZmljYW50IGVmZmVjdHMgb24gc2VjdXJpdHksIGJ1dCBp dCdzIGZpbmUgDQo+IGlmIGl0J3Mgb3V0IG9mIHNjb3BlLg0KPg0KPg0KPj4gUmVnYXJkaW5nICJp cyB0aGVyZSBhbnkgd2F5IHRvIHNlY3VyZWx5IHByb3Zpc2lvbiBhIG5ldyBkZXZpY2UiDQo+PiB3 aGVuIGEgd2VsbC1rbm93biBib290c3RyYXAgc2VydmVyIGlzIGtub3duIHRvIGJlIGNvbXByb21p c2VkLiAgTXkNCj4+IGZpcnN0IHRob3VnaHQgaXMsIGlmIGl0J3Mga25vd24gdG8gYmUgY29tcHJv bWlzZWQsIHRoZW4gaXQncyBhbHNvDQo+PiBsaWtlbHkgcGF0Y2hlZC4gIEJ1dCBsZXQncyBzYXkg dGhlIGlzc3VlIGlzIG1vcmUgbGlrZSBhbiBvcGVyYXRvcg0KPj4gbm90IHRydXN0aW5nIGEgcGFy dGljdWxhciB3ZWxsLWtub3duIGJvb3RzdHJhcCBzZXJ2ZXIgZm9yIHNvbWUNCj4+IG90aGVyIHJl YXNvbiwgYW5kIHdvdWxkIGxpa2UgdG8gbmV2ZXIgYWxsb3cgZGV2aWNlcyB0byBvYnRhaW4NCj4+ IGJvb3RzdHJhcHBpbmcgZGF0YSB0aGVyZS4uLnRoZW4gdGhlIG9wdGlvbnMgYXJlIHNsaW0sIGFu IGV4dGVybmFsDQo+PiBmaXJld2FsbCBwb2xpY3kgYmxvY2tpbmcgYWNjZXNzIHRvIHRoYXQgYm9v dHN0cmFwIHNlcnZlciBtYXkgYmUNCj4+IG5lZWRlZC4NCj4NCj4gVGhhdCB0eXBlIG9mIHJlbWVk eSBzb3VuZHMgb3V0IG9mIHNjb3BlLCBidXQgdG8gbXkgaW5pdGlhbCBwb2ludCBhYm92ZSwgDQo+ IEkgdGhpbmsgaXQgbWlnaHQgYmUgd29ydGggc2F5aW5nIHNvbWV0aGluZyBhbG9uZyB0aGUgbGlu ZXMgb2YgInRoaXMgDQo+IHN5c3RlbSBhc3N1bWVzIHRoYXQgb3duZXJzIHRydXN0IGFsbCBwcmUt Y29uZmlndXJlZCB3ZWxsLWtub3duIGJvb3RzdHJhcCANCj4gc2VydmVycyB0byBjb25maWd1cmUg dGhlaXIgZGV2aWNlcyIuDQoNCkRvbmUsIGZhY3RvcmVkIGludG8gdGhlIHRleHQgYWJvdmUuDQoN Cg0KDQo+Pj4gU2VjdGlvbiAzLjQgbWVudGlvbnMgYSBkZXZpY2UgaWRlbnRpZnkgY2VydGlmaWNh dGUuIEkgYXNzdW1lIHRoZQ0KPj4+IHB1YmxpYyBrZXlzIGluIHRob3NlIGNlcnRpZmljYXRlcyBh cmUgdW5pcXVlIHBlci1kZXZpY2U/IElmIG5vdCwNCj4+PiBJIHdhbnQgdG8gdGhpbmsgYSBiaXQg bW9yZSBhYm91dCBwb3NzaWJsZSBhdHRhY2tzIHdoZXJlIHRoZQ0KPj4+IGF0dGFja2VyIGNvcnJl bGF0ZXMgZW5jcnlwdGVkIGFydGlmYWN0cyB3aXRob3V0IGJlaW5nIGFibGUgdG8NCj4+PiBkZWNy eXB0IHRoZW0uDQo+PiANCj4+IFllcywgcHJvYmFiaWxpc3RpY2FsbHkvY3J5cHRvZ3JhcGhpY2Fs bHkgdW5pcXVlIGtleXMgcGVyIGRldmljZS4NCj4NCj4gQUNLLCBJIGhhdmUgbm8gY29uY2VybiBo ZXJlIHRoZW4uDQo+DQo+DQo+Pj4gU2VjdGlvbiA1LjQgc2F5cyB3aGF0IHRvIGRvICJpZiB0aGUg cmV2b2NhdGlvbiBzdGF0dXMgaXMgbm90DQo+Pj4gYXR0YWluYWJsZSIuIFdoYXQgZG9lcyB0aGF0 IG1lYW4gcHJlY2lzZWx5PyBFLmcuLCBJIGFzc3VtZSBmYWlsdXJlIHRvDQo+Pj4gZG93bmxvYWQg YSBDUkwsIGFic2VuY2Ugb2YgYSBDUkwgaW4gdGhlIENNUyBkYXRhLCBhbmQgZmFpbHVyZSB0byBj b250YWN0DQo+Pj4gYW4gT0NTUCBzZXJ2ZXIgYWxsIGNvdW50LiBCdXQgd2hhdCBpZiB0aGUgZGV2 aWNlIGFjcXVpcmVzIGEgdmFsaWQgQ1JMDQo+Pj4gdGhhdCBpcyBzdGFsZSAobmV4dFVwZGF0ZSA8 IG5vdyk/DQo+PiANCj4+IFllcywgZXhhY3RseSwgaXQgbWVhbnQgdG8gY292ZXIgdGhvc2UgY2Fz ZXMsIGFzIHdlbGwgYXMgdGhlICJzdGFsZSINCj4+IGNhc2UsIHRob3VnaCBJIGFkbWl0IHRoZSB0 ZXh0IGRvZXNuJ3QgZXhhY3RseSBzYXkgaXQuICBIb3cgYWJvdXQgdGhpcz8NCj4+IA0KPj4gICAg T0xEDQo+PiAgICAgICBpZiB0aGUgcmV2b2NhdGlvbiBzdGF0dXMgaXMgdW5hdHRhaW5hYmxlDQo+ PiAgICBORVcNCj4+ICAgICAgIGlmIHN1aXRhYmx5LWZyZXNoIHJldm9jYXRpb24gc3RhdHVzIGlz IHVuYXR0YWluYWJsZQ0KPg0KPkxvb2tzIGdvb2QuDQo+DQo+DQo+Pj4gSWYgSSdtIHVuZGVyc3Rh bmRpbmcgY29ycmVjdGx5LCB0aGUgaW50ZW50IG9mIHdlbGwta25vd24gYm9vdHN0cmFwDQo+Pj4g c2VydmVycyBpcyB0aGF0IHRoZSBtYW51ZmFjdHVyZXIgY2FuIHJlZGlyZWN0IGRldmljZXMgdG8g Y3VzdG9tZXINCj4+PiBib290c3RyYXAgc2VydmVycyB0aGF0IGhhdmUgdGhlIGFjdHVhbCBvbmJv YXJkaW5nIGluZm9ybWF0aW9uLiBCdXQgSQ0KPj4+IGFsc28gZG9uJ3Qgc2VlIGFueSByZWFzb24g dGhhdCBhIChwb3RlbnRpYWxseSBjb21wcm9taXNlZCkgdHJ1c3RlZA0KPj4+IG1hbnVmYWN0dXJl cidzIGJvb3RzdHJhcCBzZXJ2ZXIgY291bGRuJ3QgcHJvdmlkZSB0aGUgb25ib2FyZGluZw0KPj4+ IGluZm9ybWF0aW9uIGRpcmVjdGx5LiBJdCdzIHByb2JhYmx5IGVhc2llciB0byBzZWN1cmUgdGhl IChwb3RlbnRpYWxseQ0KPj4+IG9mZmxpbmUpIHByaXZhdGUga2V5cyB1c2VkIHRvIHNpZ24gb3du ZXJzaGlwIHZvdWNoZXJzIHRoYW4gaXQgaXMgdG8NCj4+PiBzZWN1cmUgdGhlIChwcmVzdW1hYmx5 IGhpZ2hseSBhdmFpbGFibGUsIG9ubGluZSkgd2VsbC1rbm93biBib290c3RyYXANCj4+PiBzZXJ2 ZXJzLiBTbyBpdCBzZWVtcyBsaWtlIHRoZSBzeXN0ZW0gYXMgYSB3aG9sZSBjb3VsZCBiZSBtb3Jl IHNlY3VyZSBpZg0KPj4+IHdlbGwta25vd24gYm9vdHN0cmFwIHNlcnZlcnMgY291bGQgb25seSBw cm92aWRlIHVudHJ1c3RlZCByZWRpcmVjdHMuDQo+PiANCj4+IEZpcnN0LCBsZXQncyByZXBsYWNl ICJtYW51ZmFjdHVyZXIiIHdpdGggIndlbGwta25vd24gYm9vdHN0cmFwIHNlcnZlciINCj4+IGFi b3ZlLiAgQnV0LCB0byB5b3VyIG1haW4gcG9pbnQsIGFic29sdXRlbHksIGFueSBib290c3RyYXAt c2VydmVyIGNvdWxkDQo+PiByZXR1cm4gZWl0aGVyIHJlZGlyZWN0IG9yIG9uYm9hcmRpbmcgaW5m b3JtYXRpb24sIGFuZCBwZXJoYXBzIGl0IGlzIGENCj4+IGZlYXR1cmUgZm9yIHNvbWUgd2VsbC1r bm93biBib290c3RyYXAgc2VydmVycyB0byBkbyBzby4gIEFuZCB5ZXMgYWdhaW4sDQo+PiB0aGUg a2V5cyBmb3IgYW4gb25saW5lIHNlcnZpY2UgYXJlIHBvdGVudGlhbGx5IG1vcmUgZWFzaWx5IGNv bXByb21pc2VkLA0KPj4gcGVyaGFwcyBhIFNlY3VyaXR5IENvbnNpZGVyYXRpb24gZm9yIHRoZSB1 c2Ugb2YgSFNNcyBzaW1pbGFyIHRvIFsxXQ0KPj4gd291bGQgaGVscD8gIFdoaWxlIEkgYWdyZWUg d2l0aCB5b3VyIGNvbmNsdXNpb24sIGl0IGJyaW5ncyBpbnRvIHF1ZXN0aW9uDQo+PiB3aGF0ICJ0 cnVzdGVkIiBtZWFucy4gIFdoYXQgYWJvdXQgYW4gT0NTUCBzZXJ2ZXIgd2l0aCBpdHMgb25saW5l IGtleT8NCj4+IElmIHRoZSBtYW51ZmFjdHVyZXIgbm8gbG9uZ2VyIGRlZW1zICh0aHJvdWdoIGF1 ZGl0cyBvciB3aGF0ZXZlcikgdGhhdA0KPj4gYSB3ZWxsLWtub3duIGJvb3RzdHJhcCBzZXJ2ZXIg aXMgbm8gbG9uZ2VyIHRydXN0ZWQsIGl0IGNhbiByZXZva2UgdGhlDQo+PiBib290c3RyYXAgc2Vy dmVyJ3MgY2VydGlmaWNhdGUuICBKdXN0IHdvbmRlcmluZywgaXMgdGhpcyByZWFsbHkgYQ0KPj4g cHJvYmxlbT8gIENhbiBhIFNlY3VyaXR5IENvbnNpZGVyYXRpb24gYmUgdXNlZCB0byBhZGRyZXNz IHRoaXMgdG8NCj4+IHlvdXIgc2F0aXNmYWN0aW9uPw0KPj4gDQo+PiBbMV0gaHR0cHM6Ly90b29s cy5pZXRmLm9yZy9odG1sL2RyYWZ0LWlldGYtYW5pbWEtdm91Y2hlci0wNyNzZWN0aW9uLTcuMg0K Pg0KPiBTaW5jZSBpdCdzIGludGVudGlvbmFsIHRoYXQgYSB3ZWxsLWtub3duIGJvb3RzdHJhcCBz ZXJ2ZXIgY2FuIHJldHVybiANCj4gb25ib2FyZGluZyBpbmZvcm1hdGlvbiwgdGhlbiBJIHRoaW5r IHRoaXMgaXMganVzdCBhbm90aGVyIHBhcnQgdGhlIGhpZ2ggDQo+IGxldmVsIGRpc2N1c3Npb24g b2YgdGhlIHNoaWZ0IGluIGNvbnRyb2wgdGhhdCBJIGFza2VkIGZvciBhYm92ZS4NCg0KSSBiZWxp ZXZlIHRoYXQgdGhpcyBpcyBhZGRyZXNzZWQgaW4gdGV4dCBhYm92ZSAoczkuMTApLCBnb29kPw0K DQoNCj4+PiBJIGRvbid0IHVuZGVyc3RhbmQgdGhlIGVycm9yIGNhc2VzIGFyb3VuZCB0aGUgImZs YWcgdG8gZW5hYmxlIHplcm90b3VjaA0KPj4+IGJvb3RzdHJhcHBpbmciIGluIHNlY3Rpb24gNS4x LiBIb3cgZXhhY3RseSBpcyB0aGF0IGZsYWcgc2V0IHRvIGZhbHNlPyBJcw0KPj4+IGl0IGJ5IHRo ZSBpbml0aWFsIGNvbmZpZ3VyYXRpb24gc3RlcCBpbiBzZWN0aW9uIDUuNj8gSWYgdGhhdCdzIHdo ZXJlIHRoZQ0KPj4+IGZsYWcgaXMgc2V0IHRvIGZhbHNlLCB3b24ndCBzb21lIG93bmVycyBmb3Jn ZXQgdG8gaW5jbHVkZSB0aGF0IGluIHRoZWlyDQo+Pj4gY29uZmlnPyBBbHNvLCBob3cgYXRvbWlj IGlzIHRoZSBhcHBsaWNhdGlvbiBvZiBpbml0aWFsIGNvbmZpZ3VyYXRpb24/IElzDQo+Pj4gdGhl cmUgYW55IHBvc3NpYmxlIGNhc2UgaW4gd2hpY2ggc29tZSBvZiB0aGUgaW5pdGlhbCBjb25maWd1 cmF0aW9uIGNhbg0KPj4+IGJlIGFwcGxpZWQgd2l0aG91dCB0b3VjaGluZyB0aGUgZmxhZywgc28g dGhhdCB0aGUgZGV2aWNlIGFwcGVhcnMgdG8gYmUNCj4+PiBjb3JyZWN0bHkgY29uZmlndXJlZCwg YnV0IHdpbGwgdHJ5IHRvIGJvb3RzdHJhcCBhZ2FpbiBvbiB0aGUgbmV4dA0KPj4+IHJlYm9vdD8g Q29udmVyc2VseSwgY2FuIHRoZSBmbGFnIGJlIHNldCB0byBmYWxzZSB3aXRob3V0IHRoZSBkZXZp Y2UNCj4+PiBiZWluZyBmdWxseSBjb25maWd1cmVkPyAoSSBkb24ndCB0aGluayB0aGF0J3MgYSBz ZWN1cml0eSBpc3N1ZSwganVzdA0KPj4+IHBvdGVudGlhbGx5IGEgbWFuYWdlbWVudCBoZWFkYWNo ZS4pDQo+PiANCj4+IFllcywgdGhlIGluaXRpYWwtc3RlcCBpbiBTZWN0aW9uIDUuNi4gIFllcywg c29tZSBvcGVyYXRvcnMgbWF5IGZvcmdldA0KPj4gKHRob3VnaCB0aGV5IHdpbGwgbGVhcm4pLiAg VGhlIGNvbmZpZyBpcyBpbnRlbmRlZCB0byBlaXRoZXIgYmUgYXBwbGllZA0KPj4gY29tcGxldGVs eSBvciBub3QgYXQgYWxsLiAgVGhlIHNlY29uZCBwYXJhZ3JhcGggaW4gc2VjdGlvbiA1LjYgc2F5 cw0KPj4gIklmIHRoZSBkZXZpY2UgZW5jb3VudGVycyBhbiBlcnJvciBhdCBhbnkgc3RlcCwgaXQg TVVTVCBOT1QgcHJvY2VlZA0KPj4gdG8gdGhlIG5leHQgc3RlcC4iICBQZXJoYXBzIHRoZSA2dGgg cGFyYWdyYXBoIGluIHRoYXQgc2VjdGlvbiBjb3VsZA0KPj4gY291bGQgc3RhdGUgdGhhdCBhbiAi ZXJyb3IiIGNvbnN0aXR1dGVzIGFueXRoaW5nIGxlc3MgdGhhbiAxMDAlPw0KPg0KPiBEbyB5b3Ug dGhpbmsgaXQncyB3b3J0aCBhZGRpbmcgYSB3YXJuaW5nIHRvIG9wZXJhdG9ycyBzb21ld2hlcmUg dG8gDQo+IHJlbWluZCB0aGVtIHRvIGNoYW5nZSB0aGUgZmxhZz8gT3IgbWF5YmUgdGhlICJkZXZp Y2UgU0hPVUxEIHJlcG9ydCBhIA0KPiB3YXJuaW5nIGlmIHRoZSBib290c3RyYXBwaW5nIGNvbXBs ZXRlcyBzdWNjZXNzZnVsbHkgYnV0IHplcm90b3VjaCANCj4gYm9vdHN0cmFwcGluZyBpcyBzdGls bCBlbmFibGVkIj8NCj4NCj4gSSB0aGluayBpdCdzIGFscmVhZHkgY2xlYXIgd2hhdCBhbiBlcnJv ciBpbiBwYXJhZ3JhcGggNiBpcy4gV2hhdCBJIGZvdW5kIA0KPiB1bmNsZWFyIHdhcyB3aGF0IHRv IGRvIHdpdGggZXJyb3JzIGluIHBhcmFncmFwaHMgNiBvciA3LiBZZXMsIGRvbid0IGdvIA0KPiBv biB0byB0aGUgbmV4dCBzdGVwLCBidXQgd2hhdCBhYm91dDogSW4gcGFyYWdyYXBoIDYsIHNob3Vs ZCB0aGUgZGV2aWNlIA0KPiByb2xsYmFjayBhbnkgcGFydGlhbCBjb25maWcgdXBkYXRlIGlmIHRo ZXJlJ3MgYW4gZXJyb3I/IEluIHBhcmFncmFwaCA3LCANCj4gc2hvdWxkIHRoZSBkZXZpY2Ugcm9s bGJhY2sgYWxsIGNvbmZpZyBmcm9tIHBhcmFncmFwaCA2IGlmIHRoZXJlJ3MgYW4gZXJyb3I/DQoN ClRoaXMgdmVyeSBzYW1lIGlzc3VlIHdhcyByYWlzZWQgdG8gbWUgc2VwYXJhdGVseSBhbmQgbXkg cmVzcG9uc2UgaGFzIGJlZW4NCnRvIGVzc2VudGlhbGx5IHJld3JpdGUgc2VjdGlvbiA1LjYgdG8g YmUgY3J5c3RhbCBjbGVhciBvbiBob3cgZXJyb3JzIGFyZQ0KaGFuZGxlZCwgZXNwZWNpYWxseSB3 aXRoIHJlZ2FyZCB0byBzdGF0ZSByZXRhaW5lZC4gIFBsZWFzZSBzZWUgYXR0YWNoZWQNCmZvciBh IHByZXZpZXcgb2YgLTIzLg0KDQoNCj4+PiBTZWN0aW9uIDkuNCBzYXlzIHRvIGFzc3VtZSBvd25l ciBjZXJ0aWZpY2F0ZXMgImFyZSBub3QgcmV2b2thYmxlIiBpZg0KPj4+IHRoZXJlJ3Mgbm8gYWNj dXJhdGUgY2xvY2suIElzIHRoZXJlIG5vIHZhbHVlIGluIGNoZWNraW5nIGZvciBhIENSTCBvcg0K Pj4+IE9DU1AgcmVzcG9uc2UsIGV2ZW4gd2l0aG91dCB0aGUgYWJpbGl0eSB0byBkZXRlcm1pbmUg aWYgaXQncyByZWNlbnQ/IEl0DQo+Pj4gc2VlbXMgdG8gbWUgdGhhdCBjaGVja2luZyB3aXRoIGFu IGFjdGl2ZSBzZXJ2ZXIgKENSTCBEaXN0cmlidXRpb24gUG9pbnQNCj4+PiBvciBPQ1NQIHNlcnZl ciwgYXMgb3Bwb3NlZCB0byBhIHN0YXBsZWQgQ1JMIG9yIE9DU1AgcmVzcG9uc2UpIHdvdWxkIG1h a2UNCj4+PiBpdCBzaWduaWZpY2FudGx5IGhhcmRlciAobm90IGluZmVhc2libGUsIGp1c3QgaGFy ZGVyKSBmb3IgYW4gYXR0YWNrZXIgdG8NCj4+PiB1c2UgYSByZXZva2VkIGNlcnQgYWdhaW5zdCBh IGRldmljZSB3aXRoIG5vIGNsb2NrLg0KPj4gDQo+PiBPa2F5LCBmYWlyIHBvaW50LCBhIGxpdmUg cmVzcG9uc2Ugc29ydCBvZiByZWZsZWN0cyAibm93IiwgcmVnYXJkbGVzcw0KPj4gd2hhdCB0aGUg ZGV2aWNlIGNsb2NrIHNheXMuICBUaGF0IHNhaWQsIHdpdGhvdXQgYW4gYWNjdXJhdGUgY2xvY2ss IHRoZQ0KPj4gZGV2aWNlIHdvdWxkbid0IGJlIGFibGUgdG8gdmFsaWRhdGUgdGhlIHNpZ25pbmcg Y2VydGlmaWNhdGUgYW5kLCBpZg0KPj4gcHJvdmlkZWQgb3ZlciBhbiBIVFRQUyB0cmFuc3BvcnQs IGl0IHdvdWxkbid0IGJlIGFibGUgdG8gdmFsaWRhdGUgdGhlDQo+PiBzZXJ2ZXIncyBlbmQtZW50 aXR5IGNlcnRpZmljYXRlIGVpdGhlci4gIEluIGZhY3QsIGNlcnRhaW4gZGV2aWNlIGJhZA0KPj4g Y2xvY2sgdmFsdWVzIG1pZ2h0IGFjdHVhbGx5IGJsb2NrIHRoZSBUTFMgY29ubmVjdGlvbiBkdWUg dG8gaXQgYmVpbmcNCj4+IG91dHNpZGUgdGhlIGVuZC1lbnRpdHkgY2VydCdzIHZhbGlkaXR5IHBl cmlvZC4gIFVnaC4gIEN1cnJlbnRseSB0aGUNCj4+IHRleHQgc2F5cyB0aGF0IGRldmljZSAiaW1w bGVtZW50YXRpb25zIHNob3VsZCBhc3N1bWUgW3RoaW5nc10gIGFyZSBub3QNCj4+IHJldm9jYWJs ZSIgLSBkbyB5b3Ugd2FudCB0byBhZGQgYSB0ZXh0IGxpa2UgImJ1dCBNQVkgY2hlY2sgJ2N1cnJl bnQnDQo+PiByZXZvY2F0aW9uIHVzaW5nIG9uIG9ubGluZSBDUkwgRGlzdHJpYnV0aW9uIFBvaW50 IG9yDQo+PiBPQ1NQIHNlcnZlciI/DQo+DQo+IEdvb2QgcG9pbnRzLiBJJ20gbm90IHN1cmUgd2hh dCB0aGUgcmlnaHQgYW5zd2VyIGlzLCBzbyBJJ2xsIGRlZmVyDQo+IHRvIHlvdSBvbiB0aGlzLg0K DQpJIHRoaW5rIHRoZSBjdXJyZW50IHRleHQgaXMgZ29vZC4gIEFueW1vcmUgYW5kIHdlIHJpc2sg bWVzc2luZyBzb21ldGhpbmcNCnVwLg0KDQoNCg0KPj4gQlRXLCB0aGUgZW5kIG9mIHRoaXMgc2Vj dGlvbiBzYXlzICJJbXBsZW1lbnRhdGlvbnMgU0hPVUxEIE5PVCByZWx5IG9uDQo+PiBOVFAgZm9y IHRpbWUsIGFzIE5UUCBpcyBub3QgYSBzZWN1cmUgcHJvdG9jb2wuIiAtIGFueSB0aG91Z2h0cyBv biB0aGlzDQo+PiBzdGF0ZW1lbnQ/DQo+DQo+IEkga25vdyB2ZXJ5IGxpdHRsZSBhYm91dCB0aGUg c2VjdXJpdHkgb2YgdGltZSBzeW5jaHJvbml6YXRpb24sIHNvcnJ5Lg0KDQpPa2F5Lg0KDQoNCg0K L2t3DQoNCg0K --_002_51E98D221DBF4069A75090987EB96B0Djunipernet_ Content-Type: text/plain; name="draft-ietf-netconf-zerotouch-23.txt" Content-Description: draft-ietf-netconf-zerotouch-23.txt Content-Disposition: attachment; filename="draft-ietf-netconf-zerotouch-23.txt"; size=190893; creation-date="Fri, 10 Aug 2018 00:23:26 GMT"; modification-date="Fri, 10 Aug 2018 00:23:26 GMT" Content-ID: Content-Transfer-Encoding: base64 CgoKCk5FVENPTkYgV29ya2luZyBHcm91cCAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgIEsuIFdhdHNlbgpJbnRlcm5ldC1EcmFmdCAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgIEp1bmlwZXIgTmV0d29ya3MKSW50ZW5kZWQgc3RhdHVzOiBTdGFu ZGFyZHMgVHJhY2sgICAgICAgICAgICAgICAgICAgICAgICAgIE0uIEFicmFoYW1zc29uCkV4cGly ZXM6IEZlYnJ1YXJ5IDEwLCAyMDE5ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg IFQtU3lzdGVtcwogICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICBJLiBGYXJyZXIKICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICBEZXV0c2NoZSBUZWxla29tIEFHCiAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICBBdWd1c3QgOSwgMjAx OAoKCiAgICAgICAgICAgICBaZXJvIFRvdWNoIFByb3Zpc2lvbmluZyBmb3IgTmV0d29ya2luZyBE ZXZpY2VzCiAgICAgICAgICAgICAgICAgICAgZHJhZnQtaWV0Zi1uZXRjb25mLXplcm90b3VjaC0y MwoKQWJzdHJhY3QKCiAgIFRoaXMgZHJhZnQgcHJlc2VudHMgYSB0ZWNobmlxdWUgdG8gc2VjdXJl bHkgcHJvdmlzaW9uIGEgbmV0d29ya2luZwogICBkZXZpY2Ugd2hlbiBpdCBpcyBib290aW5nIGlu IGEgZmFjdG9yeS1kZWZhdWx0IHN0YXRlLiAgVmFyaWF0aW9ucyBpbgogICB0aGUgc29sdXRpb24g ZW5hYmxlcyBpdCB0byBiZSB1c2VkIG9uIGJvdGggcHVibGljIGFuZCBwcml2YXRlCiAgIG5ldHdv cmtzLiAgVGhlIHByb3Zpc2lvbmluZyBzdGVwcyBhcmUgYWJsZSB0byB1cGRhdGUgdGhlIGJvb3Qg aW1hZ2UsCiAgIGNvbW1pdCBhbiBpbml0aWFsIGNvbmZpZ3VyYXRpb24sIGFuZCBleGVjdXRlIGFy Yml0cmFyeSBzY3JpcHRzIHRvCiAgIGFkZHJlc3MgYXV4aWxpYXJ5IG5lZWRzLiAgVGhlIHVwZGF0 ZWQgZGV2aWNlIGlzIHN1YnNlcXVlbnRseSBhYmxlIHRvCiAgIGVzdGFibGlzaCBzZWN1cmUgY29u bmVjdGlvbnMgd2l0aCBvdGhlciBzeXN0ZW1zLiAgRm9yIGluc3RhbmNlLCBhCiAgIGRldmljZSBt YXkgZXN0YWJsaXNoIE5FVENPTkYgKFJGQyA2MjQxKSBhbmQvb3IgUkVTVENPTkYgKFJGQyA4MDQw KQogICBjb25uZWN0aW9ucyB3aXRoIGRlcGxveW1lbnQtc3BlY2lmaWMgbmV0d29yayBtYW5hZ2Vt ZW50IHN5c3RlbXMuCgpFZGl0b3JpYWwgTm90ZSAoVG8gYmUgcmVtb3ZlZCBieSBSRkMgRWRpdG9y KQoKICAgVGhpcyBkcmFmdCBjb250YWlucyBtYW55IHBsYWNlaG9sZGVyIHZhbHVlcyB0aGF0IG5l ZWQgdG8gYmUgcmVwbGFjZWQKICAgd2l0aCBmaW5hbGl6ZWQgdmFsdWVzIGF0IHRoZSB0aW1lIG9m IHB1YmxpY2F0aW9uLiAgVGhpcyBub3RlCiAgIHN1bW1hcml6ZXMgYWxsIG9mIHRoZSBzdWJzdGl0 dXRpb25zIHRoYXQgYXJlIG5lZWRlZC4gIE5vIG90aGVyIFJGQwogICBFZGl0b3IgaW5zdHJ1Y3Rp b25zIGFyZSBzcGVjaWZpZWQgZWxzZXdoZXJlIGluIHRoaXMgZG9jdW1lbnQuCgogICBBcnR3b3Jr IGluIHRoZSBJQU5BIENvbnNpZGVyYXRpb25zIHNlY3Rpb24gY29udGFpbnMgcGxhY2Vob2xkZXIK ICAgdmFsdWVzIGZvciBESENQIG9wdGlvbnMgcGVuZGluZyBJQU5BIGFzc2lnbm1lbnQuICBQbGVh c2UgYXBwbHkgdGhlCiAgIGZvbGxvd2luZyByZXBsYWNlbWVudHM6CgogICBvICAiVEJEMSIgLS0+ IHRoZSBhc3NpZ25lZCB2YWx1ZSBmb3IgaWQtY3QtemVyb3RvdWNoSW5mb3JtYXRpb25YTUwKCiAg IG8gICJUQkQyIiAtLT4gdGhlIGFzc2lnbmVkIHZhbHVlIGZvciBpZC1jdC16ZXJvdG91Y2hJbmZv cm1hdGlvbkpTT04KCiAgIEFydHdvcmsgaW4gdGhpcyBkb2N1bWVudCBjb250YWlucyBzaG9ydGhh bmQgcmVmZXJlbmNlcyB0byBkcmFmdHMgaW4KICAgcHJvZ3Jlc3MuICBQbGVhc2UgYXBwbHkgdGhl IGZvbGxvd2luZyByZXBsYWNlbWVudHM6CgogICBvICAiWFhYWCIgLS0+IHRoZSBhc3NpZ25lZCBu dW1lcmljYWwgUkZDIHZhbHVlIGZvciB0aGlzIGRyYWZ0CgogICBBcnR3b3JrIGluIHRoaXMgZG9j dW1lbnQgY29udGFpbnMgcGxhY2Vob2xkZXIgdmFsdWVzIGZvciB0aGUgZGF0ZSBvZgogICBwdWJs aWNhdGlvbiBvZiB0aGlzIGRyYWZ0LiAgUGxlYXNlIGFwcGx5IHRoZSBmb2xsb3dpbmcgcmVwbGFj ZW1lbnQ6CgogICBvICAiMjAxOC0wOC0wOSIgLS0+IHRoZSBwdWJsaWNhdGlvbiBkYXRlIG9mIHRo aXMgZHJhZnQKCgoKV2F0c2VuLCBldCBhbC4gICAgICAgICAgRXhwaXJlcyBGZWJydWFyeSAxMCwg MjAxOSAgICAgICAgICAgICAgIFtQYWdlIDFdCgwKSW50ZXJuZXQtRHJhZnQgICAgU2VjdXJlIFpl cm8gVG91Y2ggUHJvdmlzaW9uaW5nIChTWlRQKSAgICAgIEF1Z3VzdCAyMDE4CgoKICAgVGhlIGZv bGxvd2luZyBvbmUgQXBwZW5kaXggc2VjdGlvbiBpcyB0byBiZSByZW1vdmVkIHByaW9yIHRvCiAg IHB1YmxpY2F0aW9uOgoKICAgbyAgQXBwZW5kaXggQS4gIENoYW5nZSBMb2cKClN0YXR1cyBvZiBU aGlzIE1lbW8KCiAgIFRoaXMgSW50ZXJuZXQtRHJhZnQgaXMgc3VibWl0dGVkIGluIGZ1bGwgY29u Zm9ybWFuY2Ugd2l0aCB0aGUKICAgcHJvdmlzaW9ucyBvZiBCQ1AgNzggYW5kIEJDUCA3OS4KCiAg IEludGVybmV0LURyYWZ0cyBhcmUgd29ya2luZyBkb2N1bWVudHMgb2YgdGhlIEludGVybmV0IEVu Z2luZWVyaW5nCiAgIFRhc2sgRm9yY2UgKElFVEYpLiAgTm90ZSB0aGF0IG90aGVyIGdyb3VwcyBt YXkgYWxzbyBkaXN0cmlidXRlCiAgIHdvcmtpbmcgZG9jdW1lbnRzIGFzIEludGVybmV0LURyYWZ0 cy4gIFRoZSBsaXN0IG9mIGN1cnJlbnQgSW50ZXJuZXQtCiAgIERyYWZ0cyBpcyBhdCBodHRwOi8v ZGF0YXRyYWNrZXIuaWV0Zi5vcmcvZHJhZnRzL2N1cnJlbnQvLgoKICAgSW50ZXJuZXQtRHJhZnRz IGFyZSBkcmFmdCBkb2N1bWVudHMgdmFsaWQgZm9yIGEgbWF4aW11bSBvZiBzaXggbW9udGhzCiAg IGFuZCBtYXkgYmUgdXBkYXRlZCwgcmVwbGFjZWQsIG9yIG9ic29sZXRlZCBieSBvdGhlciBkb2N1 bWVudHMgYXQgYW55CiAgIHRpbWUuICBJdCBpcyBpbmFwcHJvcHJpYXRlIHRvIHVzZSBJbnRlcm5l dC1EcmFmdHMgYXMgcmVmZXJlbmNlCiAgIG1hdGVyaWFsIG9yIHRvIGNpdGUgdGhlbSBvdGhlciB0 aGFuIGFzICJ3b3JrIGluIHByb2dyZXNzLiIKCiAgIFRoaXMgSW50ZXJuZXQtRHJhZnQgd2lsbCBl eHBpcmUgb24gRmVicnVhcnkgMTAsIDIwMTkuCgpDb3B5cmlnaHQgTm90aWNlCgogICBDb3B5cmln aHQgKGMpIDIwMTggSUVURiBUcnVzdCBhbmQgdGhlIHBlcnNvbnMgaWRlbnRpZmllZCBhcyB0aGUK ICAgZG9jdW1lbnQgYXV0aG9ycy4gIEFsbCByaWdodHMgcmVzZXJ2ZWQuCgogICBUaGlzIGRvY3Vt ZW50IGlzIHN1YmplY3QgdG8gQkNQIDc4IGFuZCB0aGUgSUVURiBUcnVzdCdzIExlZ2FsCiAgIFBy b3Zpc2lvbnMgUmVsYXRpbmcgdG8gSUVURiBEb2N1bWVudHMKICAgKGh0dHA6Ly90cnVzdGVlLmll dGYub3JnL2xpY2Vuc2UtaW5mbykgaW4gZWZmZWN0IG9uIHRoZSBkYXRlIG9mCiAgIHB1YmxpY2F0 aW9uIG9mIHRoaXMgZG9jdW1lbnQuICBQbGVhc2UgcmV2aWV3IHRoZXNlIGRvY3VtZW50cwogICBj YXJlZnVsbHksIGFzIHRoZXkgZGVzY3JpYmUgeW91ciByaWdodHMgYW5kIHJlc3RyaWN0aW9ucyB3 aXRoIHJlc3BlY3QKICAgdG8gdGhpcyBkb2N1bWVudC4gIENvZGUgQ29tcG9uZW50cyBleHRyYWN0 ZWQgZnJvbSB0aGlzIGRvY3VtZW50IG11c3QKICAgaW5jbHVkZSBTaW1wbGlmaWVkIEJTRCBMaWNl bnNlIHRleHQgYXMgZGVzY3JpYmVkIGluIFNlY3Rpb24gNC5lIG9mCiAgIHRoZSBUcnVzdCBMZWdh bCBQcm92aXNpb25zIGFuZCBhcmUgcHJvdmlkZWQgd2l0aG91dCB3YXJyYW50eSBhcwogICBkZXNj cmliZWQgaW4gdGhlIFNpbXBsaWZpZWQgQlNEIExpY2Vuc2UuCgpUYWJsZSBvZiBDb250ZW50cwoK ICAgMS4gIEludHJvZHVjdGlvbiAgLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4g LiAuIC4gLiAuIC4gICA0CiAgICAgMS4xLiAgVXNlIENhc2VzIC4gLiAuIC4gLiAuIC4gLiAuIC4g LiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuICAgNQogICAgIDEuMi4gIFRlcm1pbm9sb2d5IC4g LiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAgIDYKICAgICAxLjMu ICBSZXF1aXJlbWVudHMgTGFuZ3VhZ2UgLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAu IC4gICA3CiAgICAgMS40LiAgVHJlZSBEaWFncmFtcyAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAu IC4gLiAuIC4gLiAuIC4gLiAuICAgOAogICAyLiAgVHlwZXMgb2YgQm9vdHN0cmFwcGluZyBJbmZv cm1hdGlvbiAgLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAgIDgKICAgICAyLjEuICBSZWRpcmVj dCBJbmZvcm1hdGlvbiAgLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gICA4CiAg ICAgMi4yLiAgT25ib2FyZGluZyBJbmZvcm1hdGlvbiAgLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4g LiAuIC4gLiAuICAgOQogICAzLiAgQXJ0aWZhY3RzIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4g LiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAgIDkKCgoKV2F0c2VuLCBldCBhbC4gICAgICAgICAg RXhwaXJlcyBGZWJydWFyeSAxMCwgMjAxOSAgICAgICAgICAgICAgIFtQYWdlIDJdCgwKSW50ZXJu ZXQtRHJhZnQgICAgU2VjdXJlIFplcm8gVG91Y2ggUHJvdmlzaW9uaW5nIChTWlRQKSAgICAgIEF1 Z3VzdCAyMDE4CgoKICAgICAzLjEuICBaZXJvIFRvdWNoIEluZm9ybWF0aW9uICAuIC4gLiAuIC4g LiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gIDEwCiAgICAgMy4yLiAgT3duZXIgQ2VydGlmaWNhdGUg LiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuICAxMQogICAgIDMuMy4gIE93 bmVyc2hpcCBWb3VjaGVyIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAg MTIKICAgICAzLjQuICBBcnRpZmFjdCBFbmNyeXB0aW9uIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAu IC4gLiAuIC4gLiAuIC4gIDEyCiAgICAgMy41LiAgQXJ0aWZhY3QgR3JvdXBpbmdzICAuIC4gLiAu IC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuICAxMwogICA0LiAgU291cmNlcyBvZiBCb290 c3RyYXBwaW5nIERhdGEgLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAgMTQKICAgICA0 LjEuICBSZW1vdmFibGUgU3RvcmFnZSAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4g LiAuIC4gIDE0CiAgICAgNC4yLiAgRE5TIFNlcnZlciAgLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4g LiAuIC4gLiAuIC4gLiAuIC4gLiAuICAxNQogICAgIDQuMy4gIERIQ1AgU2VydmVyIC4gLiAuIC4g LiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAgMTYKICAgICA0LjQuICBCb290 c3RyYXAgU2VydmVyICAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gIDE3 CiAgIDUuICBEZXZpY2UgRGV0YWlscyAgLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAu IC4gLiAuIC4gLiAuICAxOAogICAgIDUuMS4gIEluaXRpYWwgU3RhdGUgLiAuIC4gLiAuIC4gLiAu IC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAgMTgKICAgICA1LjIuICBCb290IFNlcXVlbmNl IC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gIDIwCiAgICAgNS4z LiAgUHJvY2Vzc2luZyBhIFNvdXJjZSBvZiBCb290c3RyYXBwaW5nIERhdGEgLiAuIC4gLiAuIC4g LiAuICAyMQogICAgIDUuNC4gIFZhbGlkYXRpbmcgU2lnbmVkIERhdGEgIC4gLiAuIC4gLiAuIC4g LiAuIC4gLiAuIC4gLiAuIC4gLiAgMjMKICAgICA1LjUuICBQcm9jZXNzaW5nIFJlZGlyZWN0IElu Zm9ybWF0aW9uIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gIDI0CiAgICAgNS42LiAgUHJvY2Vz c2luZyBPbmJvYXJkaW5nIEluZm9ybWF0aW9uIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuICAyNQog ICA2LiAgVGhlIFplcm8gVG91Y2ggSW5mb3JtYXRpb24gRGF0YSBNb2RlbCAuIC4gLiAuIC4gLiAu IC4gLiAuIC4gLiAgMjgKICAgICA2LjEuICBEYXRhIE1vZGVsIE92ZXJ2aWV3IC4gLiAuIC4gLiAu IC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gIDI4CiAgICAgNi4yLiAgRXhhbXBsZSBVc2FnZSAu IC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuICAyOQogICAgIDYuMy4g IFlBTkcgTW9kdWxlIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4g LiAgMzEKICAgNy4gIFRoZSBaZXJvIFRvdWNoIEJvb3RzdHJhcCBTZXJ2ZXIgQVBJIC4gLiAuIC4g LiAuIC4gLiAuIC4gLiAuIC4gIDM3CiAgICAgNy4xLiAgQVBJIE92ZXJ2aWV3ICAuIC4gLiAuIC4g LiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuICAzNwogICAgIDcuMi4gIEV4YW1wbGUg VXNhZ2UgLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAgMzgKICAg ICA3LjMuICBZQU5HIE1vZHVsZSAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAu IC4gLiAuIC4gIDQxCiAgIDguICBESENQIFplcm8gVG91Y2ggT3B0aW9ucyAuIC4gLiAuIC4gLiAu IC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuICA1MQogICAgIDguMS4gIERIQ1B2NCBaZXJvIFRvdWNo IE9wdGlvbiAgLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAgNTEKICAgICA4LjIuICBE SENQdjYgWmVybyBUb3VjaCBPcHRpb24gIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4g IDUzCiAgICAgOC4zLiAgQ29tbW9uIEZpZWxkIEVuY29kaW5nIC4gLiAuIC4gLiAuIC4gLiAuIC4g LiAuIC4gLiAuIC4gLiAuICA1NAogICA5LiAgU2VjdXJpdHkgQ29uc2lkZXJhdGlvbnMgLiAuIC4g LiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAgNTQKICAgICA5LjEuICBJbW11dGFibGUg U3RvcmFnZSBmb3IgVHJ1c3QgQW5jaG9ycyAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gIDU0CiAgICAg OS4yLiAgU2VjdXJlIFN0b3JhZ2UgZm9yIExvbmctbGl2ZWQgUHJpdmF0ZSBLZXlzICAuIC4gLiAu IC4gLiAuICA1NAogICAgIDkuMy4gIFVzZSBvZiBJRGV2SUQgQ2VydGlmaWNhdGVzICAuIC4gLiAu IC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAgNTUKICAgICA5LjQuICBDbG9jayBTZW5zaXRpdml0eSAu IC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gIDU1CiAgICAgOS41LiAgQmxp bmRseSBhdXRoZW50aWNhdGluZyBhIGJvb3RzdHJhcCBzZXJ2ZXIgLiAuIC4gLiAuIC4gLiAuICA1 NQogICAgIDkuNi4gIERpc2Nsb3NpbmcgSW5mb3JtYXRpb24gdG8gVW50cnVzdGVkIFNlcnZlcnMg LiAuIC4gLiAuIC4gLiAgNTUKICAgICA5LjcuICBTZXF1ZW5jaW5nIFNvdXJjZXMgb2YgQm9vdHN0 cmFwcGluZyBEYXRhICAuIC4gLiAuIC4gLiAuIC4gIDU2CiAgICAgOS44LiAgSW5maW5pdGUgUmVk aXJlY3Rpb24gTG9vcHMgYW5kIFNlcXVlbmNlcyAgLiAuIC4gLiAuIC4gLiAuICA1NgogICAgIDku OS4gIEluY3JlYXNlZCBSZWxpYW5jZSBvbiBNYW51ZmFjdHVyZXJzIC4gLiAuIC4gLiAuIC4gLiAu IC4gLiAgNTcKICAgICA5LjEwLiBDb25jZXJucyB3aXRoIFRydXN0ZWQgQm9vdHN0cmFwIFNlcnZl cnMgLiAuIC4gLiAuIC4gLiAuIC4gIDU3CiAgICAgOS4xMS4gVGhlICJpZXRmLXplcm90b3VjaC1p bmZvcm1hdGlvbiIgWUFORyBNb2R1bGUgIC4gLiAuIC4gLiAuICA1OAogICAgIDkuMTIuIFRoZSAi aWV0Zi16ZXJvdG91Y2gtYm9vdHN0cmFwLXNlcnZlciIgWUFORyBNb2R1bGUgLiAuIC4gLiAgNTgK ICAgMTAuIElBTkEgQ29uc2lkZXJhdGlvbnMgLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4g LiAuIC4gLiAuIC4gIDU5CiAgICAgMTAuMS4gIFRoZSBJRVRGIFhNTCBSZWdpc3RyeSAgLiAuIC4g LiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuICA1OQogICAgIDEwLjIuICBUaGUgWUFORyBNb2R1 bGUgTmFtZXMgUmVnaXN0cnkgLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAgNTkKICAgICAxMC4z LiAgVGhlIFNNSSBTZWN1cml0eSBmb3IgUy9NSU1FIENNUyBDb250ZW50IFR5cGUgUmVnaXN0cnkg IC4gIDYwCiAgICAgMTAuNC4gIFRoZSBCT09UUCBNYW51ZmFjdHVyZXIgRXh0ZW5zaW9ucyBhbmQg REhDUCBPcHRpb25zCiAgICAgICAgICAgIFJlZ2lzdHJ5IC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAu IC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuICA2MAoKCgpXYXRzZW4sIGV0IGFsLiAgICAgICAgICBF eHBpcmVzIEZlYnJ1YXJ5IDEwLCAyMDE5ICAgICAgICAgICAgICAgW1BhZ2UgM10KDApJbnRlcm5l dC1EcmFmdCAgICBTZWN1cmUgWmVybyBUb3VjaCBQcm92aXNpb25pbmcgKFNaVFApICAgICAgQXVn dXN0IDIwMTgKCgogICAxMS4gUmVmZXJlbmNlcyAgLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAu IC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAgNjEKICAgICAxMS4xLiAgTm9ybWF0aXZlIFJlZmVyZW5j ZXMgLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gIDYxCiAgICAgMTEuMi4gIElu Zm9ybWF0aXZlIFJlZmVyZW5jZXMgLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuICA2 MwogICBBcHBlbmRpeCBBLiAgVGhlIFplcm8gVG91Y2ggRGV2aWNlIERhdGEgTW9kZWwgLiAuIC4g LiAuIC4gLiAuIC4gLiAgNjUKICAgICBBLjEuICBEYXRhIE1vZGVsIE92ZXJ2aWV3IC4gLiAuIC4g LiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gIDY1CiAgICAgQS4yLiAgRXhhbXBsZSBVc2Fn ZSAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuICA2NQogICAgIEEu My4gIFlBTkcgTW9kdWxlIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAu IC4gLiAgNjYKICAgQXBwZW5kaXggQi4gIFByb21vdGluZyBhIENvbm5lY3Rpb24gZnJvbSBVbnRy dXN0ZWQgdG8gVHJ1c3RlZCAuIC4gIDY5CiAgIEFwcGVuZGl4IEMuICBXb3JrZmxvdyBPdmVydmll dyAgLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuICA3MQogICAgIEMuMS4gIEVucm9s bG1lbnQgYW5kIE9yZGVyaW5nIERldmljZXMgLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAgNzEK ICAgICBDLjIuICBPd25lciBTdGFnZXMgdGhlIE5ldHdvcmsgZm9yIEJvb3RzdHJhcCAgLiAuIC4g LiAuIC4gLiAuIC4gIDczCiAgICAgQy4zLiAgRGV2aWNlIFBvd2VycyBPbiAgLiAuIC4gLiAuIC4g LiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuICA3NgogICBBcHBlbmRpeCBELiAgQ2hhbmdlIExv ZyAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAgNzgKICAgICBELjEu ICBJRCB0byAwMCAgLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAu IC4gIDc4CiAgICAgRC4yLiAgMDAgdG8gMDEgIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAu IC4gLiAuIC4gLiAuIC4gLiAuICA3OAogICAgIEQuMy4gIDAxIHRvIDAyICAuIC4gLiAuIC4gLiAu IC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAgNzkKICAgICBELjQuICAwMiB0byAw MyAgLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gIDc5CiAg ICAgRC41LiAgMDMgdG8gMDQgIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4g LiAuIC4gLiAuICA3OQogICAgIEQuNi4gIDA0IHRvIDA1ICAuIC4gLiAuIC4gLiAuIC4gLiAuIC4g LiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAgNzkKICAgICBELjcuICAwNSB0byAwNiAgLiAuIC4g LiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gIDgwCiAgICAgRC44LiAg MDYgdG8gMDcgIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAu ICA4MAogICAgIEQuOS4gIDA3IHRvIDA4ICAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAu IC4gLiAuIC4gLiAuIC4gLiAgODAKICAgICBELjEwLiAwOCB0byAwOSAgLiAuIC4gLiAuIC4gLiAu IC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gIDgwCiAgICAgRC4xMS4gMDkgdG8gMTAg IC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuICA4MAogICAg IEQuMTIuIDEwIHRvIDExICAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4g LiAuIC4gLiAgODEKICAgICBELjEzLiAxMSB0byAxMiAgLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4g LiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gIDgxCiAgICAgRC4xNC4gMTIgdG8gMTMgIC4gLiAuIC4g LiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuICA4MgogICAgIEQuMTUuIDEz IHRvIDE0ICAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAg ODIKICAgICBELjE2LiAxNCB0byAxNSAgLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAu IC4gLiAuIC4gLiAuIC4gIDgyCiAgICAgRC4xNy4gMTUgdG8gMTYgIC4gLiAuIC4gLiAuIC4gLiAu IC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuICA4MwogICAgIEQuMTguIDE2IHRvIDE3ICAu IC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAgODMKICAgICBE LjE5LiAxNyB0byAxOCAgLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4g LiAuIC4gIDg0CiAgICAgRC4yMC4gMTggdG8gMTkgIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4g LiAuIC4gLiAuIC4gLiAuIC4gLiAuICA4NAogICAgIEQuMjEuIDE5IHRvIDIwICAuIC4gLiAuIC4g LiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAgODQKICAgICBELjIyLiAyMCB0 byAyMSAgLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gIDg1 CiAgICAgRC4yMy4gMjEgdG8gMjIgIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAu IC4gLiAuIC4gLiAuICA4NQogICAgIEQuMjQuIDIyIHRvIDIzICAuIC4gLiAuIC4gLiAuIC4gLiAu IC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAgODYKICAgQWNrbm93bGVkZ2VtZW50cyAgLiAu IC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gIDg2CiAgIEF1dGhv cnMnIEFkZHJlc3NlcyAgLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4g LiAuICA4NwoKMS4gIEludHJvZHVjdGlvbgoKICAgQSBmdW5kYW1lbnRhbCBidXNpbmVzcyByZXF1 aXJlbWVudCBmb3IgYW55IG5ldHdvcmsgb3BlcmF0b3IgaXMgdG8KICAgcmVkdWNlIGNvc3RzIHdo ZXJlIHBvc3NpYmxlLiAgRm9yIG5ldHdvcmsgb3BlcmF0b3JzLCBkZXBsb3lpbmcKICAgZGV2aWNl cyB0byBtYW55IGxvY2F0aW9ucyBjYW4gYmUgYSBzaWduaWZpY2FudCBjb3N0LCBhcyBzZW5kaW5n CiAgIHRyYWluZWQgc3BlY2lhbGlzdHMgdG8gZWFjaCBzaXRlIGZvciBpbnN0YWxsYXRpb25zIGlz IGJvdGggY29zdAogICBwcm9oaWJpdGl2ZSBhbmQgZG9lcyBub3Qgc2NhbGUuCgoKCgpXYXRzZW4s IGV0IGFsLiAgICAgICAgICBFeHBpcmVzIEZlYnJ1YXJ5IDEwLCAyMDE5ICAgICAgICAgICAgICAg W1BhZ2UgNF0KDApJbnRlcm5ldC1EcmFmdCAgICBTZWN1cmUgWmVybyBUb3VjaCBQcm92aXNpb25p bmcgKFNaVFApICAgICAgQXVndXN0IDIwMTgKCgogICBUaGlzIGRvY3VtZW50IGRlZmluZXMgU2Vj dXJlIFplcm8gVG91Y2ggUHJvdmlzaW9uaW5nIChTWlRQKSwgYQogICBib290c3RyYXBwaW5nIHN0 cmF0ZWd5IGVuYWJsaW5nIGRldmljZXMgdG8gc2VjdXJlbHkgb2J0YWluCiAgIGJvb3RzdHJhcHBp bmcgZGF0YSB3aXRoIG5vIGluc3RhbGxlciBhY3Rpb24gYmV5b25kIHBoeXNpY2FsIHBsYWNlbWVu dAogICBhbmQgY29ubmVjdGluZyBuZXR3b3JrIGFuZCBwb3dlciBjYWJsZXMuICBBcyBzdWNoLCBT WlRQIGVuYWJsZXMgbm9uLQogICB0ZWNobmljYWwgcGVyc29ubmVsIHRvIGJyaW5nIHVwIGRldmlj ZXMgaW4gcmVtb3RlIGxvY2F0aW9ucyB3aXRob3V0CiAgIHRoZSBuZWVkIGZvciBhbnkgb3BlcmF0 b3IgaW5wdXQuCgogICBUaGUgU1pUUCBzb2x1dGlvbiBpbmNsdWRlcyB1cGRhdGluZyB0aGUgYm9v dCBpbWFnZSwgY29tbWl0dGluZyBhbgogICBpbml0aWFsIGNvbmZpZ3VyYXRpb24sIGFuZCBleGVj dXRpbmcgYXJiaXRyYXJ5IHNjcmlwdHMgdG8gYWRkcmVzcwogICBhdXhpbGlhcnkgbmVlZHMuICBU aGUgdXBkYXRlZCBkZXZpY2UgaXMgc3Vic2VxdWVudGx5IGFibGUgdG8KICAgZXN0YWJsaXNoIHNl Y3VyZSBjb25uZWN0aW9ucyB3aXRoIG90aGVyIHN5c3RlbXMuICBGb3IgaW5zdGFuY2UsIGEKICAg ZGV2aWNlcyBtYXkgZXN0YWJsaXNoIE5FVENPTkYgW1JGQzgwNDBdIGFuZC9vciBSRVNUQ09ORiBb UkZDNjI0MV0KICAgY29ubmVjdGlvbnMgd2l0aCBkZXBsb3ltZW50LXNwZWNpZmljIG5ldHdvcmsg bWFuYWdlbWVudCBzeXN0ZW1zLgoKICAgVGhpcyBkb2N1bWVudCBwcmltYXJpbHkgcmVnYXJkcyBw aHlzaWNhbCBkZXZpY2VzLCB3aGVyZSB0aGUgc2V0dGluZwogICBvZiB0aGUgZGV2aWNlJ3MgaW5p dGlhbCBzdGF0ZSwgZGVzY3JpYmVkIGluIFNlY3Rpb24gNS4xLCBvY2N1cnMKICAgZHVyaW5nIHRo ZSBkZXZpY2UncyBtYW51ZmFjdHVyaW5nIHByb2Nlc3MuICBUaGUgU1pUUCBzb2x1dGlvbiBtYXkg YmUKICAgZXh0ZW5kZWQgdG8gc3VwcG9ydCB2aXJ0dWFsIG1hY2hpbmVzIG9yIG90aGVyIHN1Y2gg bG9naWNhbAogICBjb25zdHJ1Y3RzLCBidXQgZGV0YWlscyBmb3IgaG93IHRoaXMgY2FuIGJlIGFj Y29tcGxpc2hlZCBpcyBsZWZ0IGZvcgogICBmdXR1cmUgd29yay4KCjEuMS4gIFVzZSBDYXNlcwoK ICAgbyAgRGV2aWNlIGNvbm5lY3RpbmcgdG8gYSByZW1vdGVseSBhZG1pbmlzdGVyZWQgbmV0d29y awoKICAgICAgICAgVGhpcyB1c2UtY2FzZSBpbnZvbHZlcyBzY2VuYXJpb3MsIHN1Y2ggYXMgYSBy ZW1vdGUgYnJhbmNoCiAgICAgICAgIG9mZmljZSBvciBjb252ZW5pZW5jZSBzdG9yZSwgd2hlcmVi eSBhIGRldmljZSBjb25uZWN0cyBhcyBhbgogICAgICAgICBhY2Nlc3MgZ2F0ZXdheSB0byBhbiBJ U1AncyBuZXR3b3JrLiAgQXNzdW1pbmcgaXQgaXMgbm90CiAgICAgICAgIHBvc3NpYmxlIHRvIGN1 c3RvbWl6ZSB0aGUgSVNQJ3MgbmV0d29yayB0byBwcm92aWRlIGFueQogICAgICAgICBib290c3Ry YXBwaW5nIHN1cHBvcnQsIGFuZCB3aXRoIG5vIG90aGVyIG5lYXJieSBkZXZpY2UgdG8KICAgICAg ICAgbGV2ZXJhZ2UsIHRoZSBkZXZpY2UgaGFzIG5vIHJlY291cnNlIGJ1dCB0byByZWFjaCBvdXQg dG8gYW4KICAgICAgICAgSW50ZXJuZXQtYmFzZWQgYm9vdHN0cmFwIHNlcnZlciB0byBib290c3Ry YXAgZnJvbS4KCiAgIG8gIERldmljZSBjb25uZWN0aW5nIHRvIGEgbG9jYWxseSBhZG1pbmlzdGVy ZWQgbmV0d29yawoKICAgICAgICAgVGhpcyB1c2UtY2FzZSBjb3ZlcnMgYWxsIG90aGVyIHNjZW5h cmlvcyBhbmQgZGlmZmVycyBvbmx5IGluCiAgICAgICAgIHRoYXQgdGhlIGRldmljZSBtYXkgYWRk aXRpb25hbGx5IGxldmVyYWdlIG5lYXJieSBkZXZpY2VzLCB3aGljaAogICAgICAgICBtYXkgZGly ZWN0IGl0IHRvIHVzZSBhIGxvY2FsIHNlcnZpY2UgdG8gYm9vdHN0cmFwIGZyb20uICBJZiBubwog ICAgICAgICBzdWNoIGluZm9ybWF0aW9uIGlzIGF2YWlsYWJsZSwgb3IgdGhlIGRldmljZSBpcyB1 bmFibGUgdG8gdXNlCiAgICAgICAgIHRoZSBpbmZvcm1hdGlvbiBwcm92aWRlZCwgaXQgY2FuIHRo ZW4gcmVhY2ggb3V0IHRvIHRoZSBuZXR3b3JrCiAgICAgICAgIGp1c3QgYXMgaXQgd291bGQgZm9y IHRoZSByZW1vdGVseSBhZG1pbmlzdGVyZWQgbmV0d29yayB1c2UtCiAgICAgICAgIGNhc2UuCgog ICBDb25jZXB0dWFsIHdvcmtmbG93cyBmb3IgaG93IFNaVFAgbWlnaHQgYmUgZGVwbG95ZWQgYXJl IHByb3ZpZGVkIGluCiAgIEFwcGVuZGl4IEMuCgoKCgoKCldhdHNlbiwgZXQgYWwuICAgICAgICAg IEV4cGlyZXMgRmVicnVhcnkgMTAsIDIwMTkgICAgICAgICAgICAgICBbUGFnZSA1XQoMCkludGVy bmV0LURyYWZ0ICAgIFNlY3VyZSBaZXJvIFRvdWNoIFByb3Zpc2lvbmluZyAoU1pUUCkgICAgICBB dWd1c3QgMjAxOAoKCjEuMi4gIFRlcm1pbm9sb2d5CgogICBUaGlzIGRvY3VtZW50IHVzZXMgdGhl IGZvbGxvd2luZyB0ZXJtcyAoc29ydGVkIGJ5IG5hbWUpOgoKICAgQXJ0aWZhY3Q6ICBUaGUgdGVy bSAiYXJ0aWZhY3QiIGlzIHVzZWQgdGhyb3VnaG91dCB0byByZXByZXNlbnQgYW55IG9mCiAgICAg ICB0aGUgdGhyZWUgYXJ0aWZhY3RzIGRlZmluZWQgaW4gU2VjdGlvbiAzICh6ZXJvIHRvdWNoIGlu Zm9ybWF0aW9uLAogICAgICAgb3duZXJzaGlwIHZvdWNoZXIsIGFuZCBvd25lciBjZXJ0aWZpY2F0 ZSkuICBUaGVzZSBhcnRpZmFjdHMKICAgICAgIGNvbGxlY3RpdmVseSBwcm92aWRlIGFsbCB0aGUg Ym9vdHN0cmFwcGluZyBkYXRhIGEgZGV2aWNlIG1heSB1c2UuCgogICBCb290c3RyYXBwaW5nIERh dGE6ICBUaGUgdGVybSAiYm9vdHN0cmFwcGluZyBkYXRhIiBpcyB1c2VkIHRocm91Z2hvdXQKICAg ICAgIHRoaXMgZG9jdW1lbnQgdG8gcmVmZXIgdG8gdGhlIGNvbGxlY3Rpb24gb2YgZGF0YSB0aGF0 IGEgZGV2aWNlCiAgICAgICBtYXkgb2J0YWluIGR1cmluZyB0aGUgYm9vdHN0cmFwcGluZyBwcm9j ZXNzLiAgU3BlY2lmaWNhbGx5LCBpdAogICAgICAgcmVmZXJzIHRvIHRoZSB0aHJlZSBhcnRpZmFj dHMgemVybyB0b3VjaCBpbmZvcm1hdGlvbiwgb3duZXIKICAgICAgIGNlcnRpZmljYXRlLCBhbmQg b3duZXJzaGlwIHZvdWNoZXIsIGFzIGRlc2NyaWJlZCBpbiBTZWN0aW9uIDMuCgogICBCb290c3Ry YXAgU2VydmVyOiAgVGhlIHRlcm0gImJvb3RzdHJhcCBzZXJ2ZXIiIGlzIHVzZWQgd2l0aGluIHRo aXMKICAgICAgIGRvY3VtZW50IHRvIG1lYW4gYW55IFJFU1RDT05GIHNlcnZlciBpbXBsZW1lbnRp bmcgdGhlIFlBTkcgbW9kdWxlCiAgICAgICBkZWZpbmVkIGluIFNlY3Rpb24gNy4zLgoKICAgRGV2 aWNlOiAgVGhlIHRlcm0gImRldmljZSIgaXMgdXNlZCB0aHJvdWdob3V0IHRoaXMgZG9jdW1lbnQg dG8gcmVmZXIKICAgICAgIHRvIGEgbmV0d29yayBlbGVtZW50IHRoYXQgbmVlZHMgdG8gYmUgYm9v dHN0cmFwcGVkLiAgU2VlCiAgICAgICBTZWN0aW9uIDUgZm9yIG1vcmUgaW5mb3JtYXRpb24gYWJv dXQgZGV2aWNlcy4KCiAgIE1hbnVmYWN0dXJlcjogIFRoZSB0ZXJtICJtYW51ZmFjdHVyZXIiIGlz IHVzZWQgaGVyZWluIHRvIHJlZmVyIHRvIHRoZQogICAgICAgbWFudWZhY3R1cmVyIG9mIGEgZGV2 aWNlIG9yIGEgZGVsZWdhdGUgb2YgdGhlIG1hbnVmYWN0dXJlci4KCiAgIE5ldHdvcmsgTWFuYWdl bWVudCBTeXN0ZW0gKE5NUyk6ICBUaGUgYWNyb255bSAiTk1TIiBpcyB1c2VkCiAgICAgICB0aHJv dWdob3V0IHRoaXMgZG9jdW1lbnQgdG8gcmVmZXIgdG8gdGhlIGRlcGxveW1lbnQgc3BlY2lmaWMK ICAgICAgIG1hbmFnZW1lbnQgc3lzdGVtIHRoYXQgdGhlIGJvb3RzdHJhcHBpbmcgcHJvY2VzcyBp cyByZXNwb25zaWJsZQogICAgICAgZm9yIGludHJvZHVjaW5nIGRldmljZXMgdG8uICBGcm9tIGEg ZGV2aWNlJ3MgcGVyc3BlY3RpdmUsIHdoZW4KICAgICAgIHRoZSBib290c3RyYXBwaW5nIHByb2Nl c3MgaGFzIGNvbXBsZXRlZCwgdGhlIE5NUyBpcyBhIE5FVENPTkYgb3IKICAgICAgIFJFU1RDT05G IGNsaWVudC4KCiAgIE9uYm9hcmRpbmcgSW5mb3JtYXRpb246ICBUaGUgdGVybSAib25ib2FyZGlu ZyBpbmZvcm1hdGlvbiIgaXMgdXNlZAogICAgICAgaGVyZWluIHRvIHJlZmVyIHRvIG9uZSBvZiB0 aGUgdHdvIHR5cGVzIG9mICJ6ZXJvIHRvdWNoCiAgICAgICBpbmZvcm1hdGlvbiIgZGVmaW5lZCBp biB0aGlzIGRvY3VtZW50LCB0aGUgb3RoZXIgYmVpbmcgInJlZGlyZWN0CiAgICAgICBpbmZvcm1h dGlvbiIuICBPbmJvYXJkaW5nIGluZm9ybWF0aW9uIGlzIGZvcm1hbGx5IGRlZmluZWQgYnkgdGhl CiAgICAgICAib25ib2FyZGluZy1pbmZvcm1hdGlvbiIgWUFORy1kYXRhIHN0cnVjdHVyZSBpbiBT ZWN0aW9uIDYuMy4KCiAgIE9uYm9hcmRpbmcgU2VydmVyOiAgVGhlIHRlcm0gIm9uYm9hcmRpbmcg c2VydmVyIiBpcyB1c2VkIGhlcmVpbiB0bwogICAgICAgcmVmZXIgdG8gYSBib290c3RyYXAgc2Vy dmVyIHRoYXQgb25seSByZXR1cm5zIG9uYm9hcmRpbmcKICAgICAgIGluZm9ybWF0aW9uLgoKICAg T3duZXI6ICBUaGUgdGVybSAib3duZXIiIGlzIHVzZWQgdGhyb3VnaG91dCB0aGlzIGRvY3VtZW50 IHRvIHJlZmVyIHRvCiAgICAgICB0aGUgcGVyc29uIG9yIG9yZ2FuaXphdGlvbiB0aGF0IHB1cmNo YXNlZCBvciBvdGhlcndpc2Ugb3ducyBhCiAgICAgICBkZXZpY2UuCgoKCgoKV2F0c2VuLCBldCBh bC4gICAgICAgICAgRXhwaXJlcyBGZWJydWFyeSAxMCwgMjAxOSAgICAgICAgICAgICAgIFtQYWdl IDZdCgwKSW50ZXJuZXQtRHJhZnQgICAgU2VjdXJlIFplcm8gVG91Y2ggUHJvdmlzaW9uaW5nIChT WlRQKSAgICAgIEF1Z3VzdCAyMDE4CgoKICAgT3duZXIgQ2VydGlmaWNhdGU6ICBUaGUgdGVybSAi b3duZXIgY2VydGlmaWNhdGUiIGlzIHVzZWQgaW4gdGhpcwogICAgICAgZG9jdW1lbnQgdG8gcmVw cmVzZW50IGFuIFguNTA5IGNlcnRpZmljYXRlIHRoYXQgYmluZHMgYW4gb3duZXIKICAgICAgIGlk ZW50aXR5IHRvIGEgcHVibGljIGtleSwgd2hpY2ggYSBkZXZpY2UgY2FuIHVzZSB0byB2YWxpZGF0 ZSBhCiAgICAgICBzaWduYXR1cmUgb3ZlciB0aGUgemVybyB0b3VjaCBpbmZvcm1hdGlvbiBhcnRp ZmFjdC4gIFRoZSBvd25lcgogICAgICAgY2VydGlmaWNhdGUgbWF5IGJlIGNvbW11bmljYXRlZCBh bG9uZyB3aXRoIGl0cyBjaGFpbiBvZgogICAgICAgaW50ZXJtZWRpYXRlIGNlcnRpZmljYXRlcyBs ZWFkaW5nIHVwIHRvIGEga25vd24gdHJ1c3QgYW5jaG9yLgogICAgICAgVGhlIG93bmVyIGNlcnRp ZmljYXRlIGlzIG9uZSBvZiB0aGUgdGhyZWUgYm9vdHN0cmFwcGluZyBhcnRpZmFjdHMKICAgICAg IGRlc2NyaWJlZCBpbiBTZWN0aW9uIDMuCgogICBPd25lcnNoaXAgVm91Y2hlcjogIFRoZSB0ZXJt ICJvd25lcnNoaXAgdm91Y2hlciIgaXMgdXNlZCBpbiB0aGlzCiAgICAgICBkb2N1bWVudCB0byBy ZXByZXNlbnQgdGhlIHZvdWNoZXIgYXJ0aWZhY3QgZGVmaW5lZCBpbiBbUkZDODM2Nl0uCiAgICAg ICBUaGUgb3duZXJzaGlwIHZvdWNoZXIgaXMgdXNlZCB0byBhc3NpZ24gYSBkZXZpY2UgdG8gYW4g b3duZXIuCiAgICAgICBUaGUgb3duZXJzaGlwIHZvdWNoZXIgaXMgb25lIG9mIHRoZSB0aHJlZSBi b290c3RyYXBwaW5nIGFydGlmYWN0cwogICAgICAgZGVzY3JpYmVkIGluIFNlY3Rpb24gMy4KCiAg IFJlZGlyZWN0IEluZm9ybWF0aW9uOiAgVGhlIHRlcm0gInJlZGlyZWN0IGluZm9ybWF0aW9uIiBp cyB1c2VkIGhlcmVpbgogICAgICAgdG8gcmVmZXIgdG8gb25lIG9mIHRoZSB0d28gdHlwZXMgb2Yg Inplcm8gdG91Y2ggaW5mb3JtYXRpb24iCiAgICAgICBkZWZpbmVkIGluIHRoaXMgZG9jdW1lbnQs IHRoZSBvdGhlciBiZWluZyAib25ib2FyZGluZwogICAgICAgaW5mb3JtYXRpb24iLiAgUmVkaXJl Y3QgaW5mb3JtYXRpb24gaXMgZm9ybWFsbHkgZGVmaW5lZCBieSB0aGUKICAgICAgICJyZWRpcmVj dC1pbmZvcm1hdGlvbiIgWUFORy1kYXRhIHN0cnVjdHVyZSBpbiBTZWN0aW9uIDYuMy4KCiAgIFJl ZGlyZWN0IFNlcnZlcjogIFRoZSB0ZXJtICJyZWRpcmVjdCBzZXJ2ZXIiIGlzIHVzZWQgdG8gcmVm ZXIgdG8gYQogICAgICAgYm9vdHN0cmFwIHNlcnZlciB0aGF0IG9ubHkgcmV0dXJucyByZWRpcmVj dCBpbmZvcm1hdGlvbi4gIEEKICAgICAgIHJlZGlyZWN0IHNlcnZlciBpcyBwYXJ0aWN1bGFybHkg dXNlZnVsIHdoZW4gaG9zdGVkIGJ5IGEKICAgICAgIG1hbnVmYWN0dXJlciwgYXMgYSB3ZWxsLWtu b3duIChlLmcuLCBJbnRlcm5ldC1iYXNlZCkgcmVzb3VyY2UgdG8KICAgICAgIHJlZGlyZWN0IGRl dmljZXMgdG8gZGVwbG95bWVudC1zcGVjaWZpYyBib290c3RyYXAgc2VydmVycy4KCiAgIFNpZ25l ZCBEYXRhOiAgVGhlIHRlcm0gInNpZ25lZCBkYXRhIiBpcyB1c2VkIHRocm91Z2hvdXQgdG8gbWVh biB6ZXJvCiAgICAgICB0b3VjaCBpbmZvcm1hdGlvbiB0aGF0IGhhcyBiZWVuIHNpZ25lZCwgc3Bl Y2lmaWNhbGx5IGJ5IGEgcHJpdmF0ZQogICAgICAga2V5IHBvc3Nlc3NlZCBieSBhIGRldmljZSdz IG93bmVyLgoKICAgVW5zaWduZWQgRGF0YTogIFRoZSB0ZXJtICJ1bnNpZ25lZCBkYXRhIiBpcyB1 c2VkIHRocm91Z2hvdXQgdG8gbWVhbgogICAgICAgemVybyB0b3VjaCBpbmZvcm1hdGlvbiB0aGF0 IGhhcyBub3QgYmVlbiBzaWduZWQuCgogICBaZXJvIFRvdWNoIEluZm9ybWF0aW9uOiAgVGhlIHRl cm0gInplcm8gdG91Y2ggaW5mb3JtYXRpb24iIGlzIHVzZWQKICAgICAgIGhlcmVpbiB0byByZWZl ciBlaXRoZXIgcmVkaXJlY3QgaW5mb3JtYXRpb24gb3Igb25ib2FyZGluZwogICAgICAgaW5mb3Jt YXRpb24uICBaZXJvIHRvdWNoIGluZm9ybWF0aW9uIGlzIG9uZSBvZiB0aGUgdGhyZWUKICAgICAg IGJvb3RzdHJhcHBpbmcgYXJ0aWZhY3RzIGRlc2NyaWJlZCBpbiBTZWN0aW9uIDMuCgoxLjMuICBS ZXF1aXJlbWVudHMgTGFuZ3VhZ2UKCiAgIFRoZSBrZXkgd29yZHMgIk1VU1QiLCAiTVVTVCBOT1Qi LCAiUkVRVUlSRUQiLCAiU0hBTEwiLCAiU0hBTEwgTk9UIiwKICAgIlNIT1VMRCIsICJTSE9VTEQg Tk9UIiwgIlJFQ09NTUVOREVEIiwgIk5PVCBSRUNPTU1FTkRFRCIsICJNQVkiLCBhbmQKICAgIk9Q VElPTkFMIiBpbiB0aGlzIGRvY3VtZW50IGFyZSB0byBiZSBpbnRlcnByZXRlZCBhcyBkZXNjcmli ZWQgaW4gQkNQCiAgIDE0IFtSRkMyMTE5XSBbUkZDODE3NF0gd2hlbiwgYW5kIG9ubHkgd2hlbiwg dGhleSBhcHBlYXIgaW4gYWxsCiAgIGNhcGl0YWxzLCBhcyBzaG93biBoZXJlLgoKCgoKCldhdHNl biwgZXQgYWwuICAgICAgICAgIEV4cGlyZXMgRmVicnVhcnkgMTAsIDIwMTkgICAgICAgICAgICAg ICBbUGFnZSA3XQoMCkludGVybmV0LURyYWZ0ICAgIFNlY3VyZSBaZXJvIFRvdWNoIFByb3Zpc2lv bmluZyAoU1pUUCkgICAgICBBdWd1c3QgMjAxOAoKCjEuNC4gIFRyZWUgRGlhZ3JhbXMKCiAgIFRy ZWUgZGlhZ3JhbXMgdXNlZCBpbiB0aGlzIGRvY3VtZW50IGZvbGxvdyB0aGUgbm90YXRpb24gZGVm aW5lZCBpbgogICBbUkZDODM0MF0uCgoyLiAgVHlwZXMgb2YgQm9vdHN0cmFwcGluZyBJbmZvcm1h dGlvbgoKICAgVGhpcyBkb2N1bWVudCBkZWZpbmVzIHR3byB0eXBlcyBvZiBpbmZvcm1hdGlvbiB0 aGF0IGRldmljZXMgY2FuCiAgIGFjY2VzcyBkdXJpbmcgdGhlIGJvb3RzdHJhcHBpbmcgcHJvY2Vz cy4gIFRoZXNlIGluZm9ybWF0aW9uIHR5cGVzIGFyZQogICBkZXNjcmliZWQgaW4gdGhpcyBzZWN0 aW9uLiAgRXhhbXBsZXMgYXJlIHByb3ZpZGVkIGluIFNlY3Rpb24gNi4yCgoyLjEuICBSZWRpcmVj dCBJbmZvcm1hdGlvbgoKICAgUmVkaXJlY3QgaW5mb3JtYXRpb24gcmVkaXJlY3RzIGEgZGV2aWNl IHRvIGFub3RoZXIgYm9vdHN0cmFwIHNlcnZlci4KICAgUmVkaXJlY3QgaW5mb3JtYXRpb24gZW5j b2RlcyBhIGxpc3Qgb2YgYm9vdHN0cmFwIHNlcnZlcnMsIGVhY2gKICAgc3BlY2lmeWluZyB0aGUg Ym9vdHN0cmFwIHNlcnZlcidzIGhvc3RuYW1lIChvciBJUCBhZGRyZXNzKSwgYW4KICAgb3B0aW9u YWwgcG9ydCwgYW5kIGFuIG9wdGlvbmFsIHRydXN0IGFuY2hvciBjZXJ0aWZpY2F0ZSB0aGF0IHRo ZQogICBkZXZpY2UgY2FuIHVzZSB0byBhdXRoZW50aWNhdGUgdGhlIGJvb3RzdHJhcCBzZXJ2ZXIg d2l0aC4KCiAgIFJlZGlyZWN0IGluZm9ybWF0aW9uIGlzIFlBTkcgbW9kZWxlZCBkYXRhIGZvcm1h bGx5IGRlZmluZWQgYnkgdGhlCiAgICJyZWRpcmVjdC1pbmZvcm1hdGlvbiIgY29udGFpbmVyIGlu IHRoZSBZQU5HIG1vZHVsZSBwcmVzZW50ZWQgaW4KICAgU2VjdGlvbiA2LjMuICBUaGlzIGNvbnRh aW5lciBoYXMgdGhlIHRyZWUgZGlhZ3JhbSBzaG93biBiZWxvdy4KCiAgICstLToocmVkaXJlY3Qt aW5mb3JtYXRpb24pCiAgICAgICstLSByZWRpcmVjdC1pbmZvcm1hdGlvbgogICAgICAgICArLS0g Ym9vdHN0cmFwLXNlcnZlciogW2FkZHJlc3NdCiAgICAgICAgICAgICstLSBhZGRyZXNzICAgICAg ICAgaW5ldDpob3N0CiAgICAgICAgICAgICstLSBwb3J0PyAgICAgICAgICAgaW5ldDpwb3J0LW51 bWJlcgogICAgICAgICAgICArLS0gdHJ1c3QtYW5jaG9yPyAgIGNtcwoKICAgUmVkaXJlY3QgaW5m b3JtYXRpb24gbWF5IGJlIHRydXN0ZWQgb3IgdW50cnVzdGVkLiAgVGhlIHJlZGlyZWN0CiAgIGlu Zm9ybWF0aW9uIGlzIHRydXN0ZWQgd2hlbmV2ZXIgaXQgaXMgb2J0YWluZWQgdmlhIGEgc2VjdXJl CiAgIGNvbm5lY3Rpb24gdG8gYSB0cnVzdGVkIGJvb3RzdHJhcCBzZXJ2ZXIsIG9yIHdoZW5ldmVy IGl0IGlzIHNpZ25lZCBieQogICB0aGUgZGV2aWNlJ3Mgb3duZXIuICBJbiBhbGwgb3RoZXIgY2Fz ZXMsIHRoZSByZWRpcmVjdCBpbmZvcm1hdGlvbiBpcwogICB1bnRydXN0ZWQuCgogICBUcnVzdGVk IHJlZGlyZWN0IGluZm9ybWF0aW9uIGlzIHVzZWZ1bCBmb3IgZW5hYmxpbmcgYSBkZXZpY2UgdG8K ICAgZXN0YWJsaXNoIGEgc2VjdXJlIGNvbm5lY3Rpb24gdG8gYSBzcGVjaWZpZWQgYm9vdHN0cmFw IHNlcnZlciwgd2hpY2gKICAgaXMgcG9zc2libGUgd2hlbiB0aGUgcmVkaXJlY3QgaW5mb3JtYXRp b24gaW5jbHVkZXMgdGhlIGJvb3RzdHJhcAogICBzZXJ2ZXIncyB0cnVzdCBhbmNob3IgY2VydGlm aWNhdGUuCgogICBVbnRydXN0ZWQgcmVkaXJlY3QgaW5mb3JtYXRpb24gaXMgdXNlZnVsIGZvciBk aXJlY3RpbmcgYSBkZXZpY2UgdG8gYQogICBib290c3RyYXAgc2VydmVyIHdoZXJlIHNpZ25lZCBk YXRhIGhhcyBiZWVuIHN0YWdlZCBmb3IgaXQgdG8gb2J0YWluLgogICBOb3RlIHRoYXQsIHdoZW4g dGhlIHJlZGlyZWN0IGluZm9ybWF0aW9uIGlzIHVudHJ1c3RlZCwgZGV2aWNlcwogICBkaXNjYXJk IGFueSBwb3RlbnRpYWxseSBpbmNsdWRlZCB0cnVzdCBhbmNob3IgY2VydGlmaWNhdGVzLgoKICAg SG93IGRldmljZXMgcHJvY2VzcyByZWRpcmVjdCBpbmZvcm1hdGlvbiBpcyBkZXNjcmliZWQgaW4g U2VjdGlvbiA1LjUuCgoKCgpXYXRzZW4sIGV0IGFsLiAgICAgICAgICBFeHBpcmVzIEZlYnJ1YXJ5 IDEwLCAyMDE5ICAgICAgICAgICAgICAgW1BhZ2UgOF0KDApJbnRlcm5ldC1EcmFmdCAgICBTZWN1 cmUgWmVybyBUb3VjaCBQcm92aXNpb25pbmcgKFNaVFApICAgICAgQXVndXN0IDIwMTgKCgoyLjIu ICBPbmJvYXJkaW5nIEluZm9ybWF0aW9uCgogICBPbmJvYXJkaW5nIGluZm9ybWF0aW9uIHByb3Zp ZGVzIGRhdGEgbmVjZXNzYXJ5IGZvciBhIGRldmljZSB0bwogICBib290c3RyYXAgaXRzZWxmIGFu ZCBlc3RhYmxpc2ggc2VjdXJlIGNvbm5lY3Rpb25zIHdpdGggb3RoZXIgc3lzdGVtcy4KICAgQXMg ZGVmaW5lZCBpbiB0aGlzIGRvY3VtZW50LCBvbmJvYXJkaW5nIGluZm9ybWF0aW9uIGNhbiBzcGVj aWZ5CiAgIGRldGFpbHMgYWJvdXQgdGhlIGJvb3QgaW1hZ2UgYSBkZXZpY2UgbXVzdCBiZSBydW5u aW5nLCBzcGVjaWZ5IGFuCiAgIGluaXRpYWwgY29uZmlndXJhdGlvbiB0aGUgZGV2aWNlIG11c3Qg Y29tbWl0LCBhbmQgc3BlY2lmeSBzY3JpcHRzCiAgIHRoYXQgdGhlIGRldmljZSBtdXN0IHN1Y2Nl c3NmdWxseSBleGVjdXRlLgoKICAgT25ib2FyZGluZyBpbmZvcm1hdGlvbiBpcyBZQU5HIG1vZGVs ZWQgZGF0YSBmb3JtYWxseSBkZWZpbmVkIGJ5IHRoZQogICAib25ib2FyZGluZy1pbmZvcm1hdGlv biIgY29udGFpbmVyIGluIHRoZSBZQU5HIG1vZHVsZSBwcmVzZW50ZWQgaW4KICAgU2VjdGlvbiA2 LjMuICBUaGlzIGNvbnRhaW5lciBoYXMgdGhlIHRyZWUgZGlhZ3JhbSBzaG93biBiZWxvdy4KCiAg ICstLToob25ib2FyZGluZy1pbmZvcm1hdGlvbikKICAgICAgKy0tIG9uYm9hcmRpbmctaW5mb3Jt YXRpb24KICAgICAgICAgKy0tIGJvb3QtaW1hZ2UKICAgICAgICAgfCAgKy0tIG9zLW5hbWU/ICAg ICAgICAgICAgICBzdHJpbmcKICAgICAgICAgfCAgKy0tIG9zLXZlcnNpb24/ICAgICAgICAgICBz dHJpbmcKICAgICAgICAgfCAgKy0tIGRvd25sb2FkLXVyaSogICAgICAgICBpbmV0OnVyaQogICAg ICAgICB8ICArLS0gaW1hZ2UtdmVyaWZpY2F0aW9uKiBbaGFzaC1hbGdvcml0aG1dCiAgICAgICAg IHwgICAgICstLSBoYXNoLWFsZ29yaXRobSAgICBpZGVudGl0eXJlZgogICAgICAgICB8ICAgICAr LS0gaGFzaC12YWx1ZSAgICAgICAgeWFuZzpoZXgtc3RyaW5nCiAgICAgICAgICstLSBjb25maWd1 cmF0aW9uLWhhbmRsaW5nPyAgICAgIGVudW1lcmF0aW9uCiAgICAgICAgICstLSBwcmUtY29uZmln dXJhdGlvbi1zY3JpcHQ/ICAgIHNjcmlwdAogICAgICAgICArLS0gY29uZmlndXJhdGlvbj8gICAg ICAgICAgICAgICBiaW5hcnkKICAgICAgICAgKy0tIHBvc3QtY29uZmlndXJhdGlvbi1zY3JpcHQ/ ICAgc2NyaXB0CgogICBPbmJvYXJkaW5nIGluZm9ybWF0aW9uIG11c3QgYmUgdHJ1c3RlZCBmb3Ig aXQgdG8gYmUgb2YgYW55IHVzZSB0byBhCiAgIGRldmljZS4gIFRoZXJlIGlzIG5vIG9wdGlvbiBm b3IgYSBkZXZpY2UgdG8gcHJvY2VzcyB1bnRydXN0ZWQKICAgb25ib2FyZGluZyBpbmZvcm1hdGlv bi4KCiAgIE9uYm9hcmRpbmcgaW5mb3JtYXRpb24gaXMgdHJ1c3RlZCB3aGVuZXZlciBpdCBpcyBv YnRhaW5lZCB2aWEgYQogICBzZWN1cmUgY29ubmVjdGlvbiB0byBhIHRydXN0ZWQgYm9vdHN0cmFw IHNlcnZlciwgb3Igd2hlbmV2ZXIgaXQgaXMKICAgc2lnbmVkIGJ5IHRoZSBkZXZpY2UncyBvd25l ci4gIEluIGFsbCBvdGhlciBjYXNlcywgdGhlIG9uYm9hcmRpbmcKICAgaW5mb3JtYXRpb24gaXMg dW50cnVzdGVkLgoKICAgSG93IGRldmljZXMgcHJvY2VzcyBvbmJvYXJkaW5nIGluZm9ybWF0aW9u IGlzIGRlc2NyaWJlZCBpbgogICBTZWN0aW9uIDUuNi4KCjMuICBBcnRpZmFjdHMKCiAgIFRoaXMg ZG9jdW1lbnQgZGVmaW5lcyB0aHJlZSBhcnRpZmFjdHMgdGhhdCBjYW4gYmUgbWFkZSBhdmFpbGFi bGUgdG8KICAgZGV2aWNlcyB3aGlsZSB0aGV5IGFyZSBib290c3RyYXBwaW5nLiAgRWFjaCBzb3Vy Y2Ugb2YgYm9vdHN0cmFwcGluZwogICBpbmZvcm1hdGlvbiBzcGVjaWZpZXMgaG93IGl0IHByb3Zp ZGVzIHRoZSBhcnRpZmFjdHMgZGVmaW5lZCBpbiB0aGlzCiAgIHNlY3Rpb24gKHNlZSBTZWN0aW9u IDQpLgoKCgoKCgpXYXRzZW4sIGV0IGFsLiAgICAgICAgICBFeHBpcmVzIEZlYnJ1YXJ5IDEwLCAy MDE5ICAgICAgICAgICAgICAgW1BhZ2UgOV0KDApJbnRlcm5ldC1EcmFmdCAgICBTZWN1cmUgWmVy byBUb3VjaCBQcm92aXNpb25pbmcgKFNaVFApICAgICAgQXVndXN0IDIwMTgKCgozLjEuICBaZXJv IFRvdWNoIEluZm9ybWF0aW9uCgogICBUaGUgemVybyB0b3VjaCBpbmZvcm1hdGlvbiBhcnRpZmFj dCBlbmNvZGVzIHRoZSBlc3NlbnRpYWwKICAgYm9vdHN0cmFwcGluZyBkYXRhIGZvciB0aGUgZGV2 aWNlLiAgVGhpcyBhcnRpZmFjdCBpcyB1c2VkIHRvIGVuY29kZQogICB0aGUgcmVkaXJlY3QgaW5m b3JtYXRpb24gYW5kIG9uYm9hcmRpbmcgaW5mb3JtYXRpb24gdHlwZXMgZGlzY3Vzc2VkCiAgIGlu IFNlY3Rpb24gMi4KCiAgIFRoZSB6ZXJvIHRvdWNoIGluZm9ybWF0aW9uIGFydGlmYWN0IGlzIGEg Q01TIHN0cnVjdHVyZSwgYXMgZGVzY3JpYmVkCiAgIGluIFtSRkM1NjUyXSwgZW5jb2RlZCB1c2lu ZyBBU04uMSBkaXN0aW5ndWlzaGVkIGVuY29kaW5nIHJ1bGVzIChERVIpLAogICBhcyBzcGVjaWZp ZWQgaW4gSVRVLVQgWC42OTAgW0lUVS5YNjkwLjIwMTVdLiAgVGhlIENNUyBzdHJ1Y3R1cmUgTVVT VAogICBjb250YWluIGNvbnRlbnQgY29uZm9ybWluZyB0byB0aGUgWUFORyBtb2R1bGUgc3BlY2lm aWVkIGluCiAgIFNlY3Rpb24gNi4zLgoKICAgVGhlIHplcm8gdG91Y2ggaW5mb3JtYXRpb24gQ01T IHN0cnVjdHVyZSBtYXkgZW5jb2RlIHNpZ25lZCBvcgogICB1bnNpZ25lZCBib290c3RyYXBwaW5n IGRhdGEuICBXaGVuIHRoZSBib290c3RyYXBwaW5nIGRhdGEgaXMgc2lnbmVkLAogICBpdCBtYXkg YWxzbyBiZSBlbmNyeXB0ZWQgYnV0LCBmcm9tIGEgdGVybWlub2xvZ3kgcGVyc3BlY3RpdmUsIGl0 IGlzCiAgIHN0aWxsICJzaWduZWQgZGF0YSIgU2VjdGlvbiAxLjIuCgogICBXaGVuIHRoZSB6ZXJv IHRvdWNoIGluZm9ybWF0aW9uIGFydGlmYWN0IGlzIHVuc2lnbmVkLCBhcyBpdCBtaWdodCBiZQog ICB3aGVuIGNvbW11bmljYXRlZCBvdmVyIHRydXN0ZWQgY2hhbm5lbHMsIHRoZSBDTVMgc3RydWN0 dXJlJ3MgdG9wLW1vc3QKICAgY29udGVudCB0eXBlIE1VU1QgYmUgb25lIG9mIHRoZSBPSURzIGRl c2NyaWJlZCBpbiBTZWN0aW9uIDEwLjMsIG9yCiAgIHRoZSBPSUQgaWQtZGF0YSAoMS4yLjg0MC4x MTM1NDkuMS43LjEpLCBpbiB3aGljaCBjYXNlIHRoZSBlbmNvZGluZwogICAoSlNPTiwgWE1MLCBl dGMuKSAgU0hPVUxEIGJlIGNvbW11bmljYXRlZCBleHRlcm5hbGx5LiAgSW4gZWl0aGVyCiAgIGNh c2UsIHRoZSBhc3NvY2lhdGVkIGNvbnRlbnQgaXMgYW4gb2N0ZXQgc3RyaW5nIGNvbnRhaW5pbmcK ICAgInplcm90b3VjaC1pbmZvcm1hdGlvbiIgZGF0YSBpbiB0aGUgZXhwZWN0ZWQgZW5jb2Rpbmcu CgogICBXaGVuIHRoZSB6ZXJvIHRvdWNoIGluZm9ybWF0aW9uIGFydGlmYWN0IGlzIHNpZ25lZCwg YXMgaXQgbWlnaHQgYmUKICAgd2hlbiBjb21tdW5pY2F0ZWQgb3ZlciB1bnRydXN0ZWQgY2hhbm5l bHMsIHRoZSBDTVMgc3RydWN0dXJlJ3MgdG9wLQogICBtb3N0IGNvbnRlbnQgdHlwZSBNVVNUIGJl IHRoZSBPSUQgaWQtc2lnbmVkRGF0YQogICAoMS4yLjg0MC4xMTM1NDkuMS43LjIpLCBhbmQgaXRz IGlubmVyIGVDb250ZW50VHlwZSBNVVNUIGJlIG9uZSBvZiB0aGUKICAgT0lEcyBkZXNjcmliZWQg aW4gU2VjdGlvbiAxMC4zLCBvciB0aGUgT0lEIGlkLWRhdGEKICAgKDEuMi44NDAuMTEzNTQ5LjEu Ny4xKSwgaW4gd2hpY2ggY2FzZSB0aGUgZW5jb2RpbmcgKEpTT04sIFhNTCwgZXRjLikKICAgU0hP VUxEIGJlIGNvbW11bmljYXRlZCBleHRlcm5hbGx5LiAgSW4gZWl0aGVyIGNhc2UsIHRoZSBhc3Nv Y2lhdGVkCiAgIGNvbnRlbnQgb3IgZUNvbnRlbnQgaXMgYW4gb2N0ZXQgc3RyaW5nIGNvbnRhaW5p bmcgInplcm90b3VjaC0KICAgaW5mb3JtYXRpb24iIGRhdGEgaW4gdGhlIGV4cGVjdGVkIGVuY29k aW5nLgoKICAgV2hlbiB0aGUgemVybyB0b3VjaCBpbmZvcm1hdGlvbiBhcnRpZmFjdCBpcyBzaWdu ZWQgYW5kIGVuY3J5cHRlZCwgYXMKICAgaXQgbWlnaHQgYmUgd2hlbiBjb21tdW5pY2F0ZWQgb3Zl ciB1bnRydXN0ZWQgY2hhbm5lbHMgYW5kIHByaXZhY3kgaXMKICAgaW1wb3J0YW50LCB0aGUgQ01T IHN0cnVjdHVyZSdzIHRvcC1tb3N0IGNvbnRlbnQgdHlwZSBNVVNUIGJlIHRoZSBPSUQKICAgaWQt ZW52ZWxvcGVkRGF0YSAoMS4yLjg0MC4xMTM1NDkuMS43LjMpLCBhbmQgdGhlCiAgIGVuY3J5cHRl ZENvbnRlbnRJbmZvJ3MgY29udGVudCB0eXBlIE1VU1QgYmUgdGhlIE9JRCBpZC1zaWduZWREYXRh CiAgICgxLjIuODQwLjExMzU0OS4xLjcuMiksIHdob3NlIGVDb250ZW50VHlwZSBNVVNUIGJlIG9u ZSBvZiB0aGUgT0lEcwogICBkZXNjcmliZWQgaW4gU2VjdGlvbiAxMC4zLCBvciB0aGUgT0lEIGlk LWRhdGEgKDEuMi44NDAuMTEzNTQ5LjEuNy4xKSwKICAgaW4gd2hpY2ggY2FzZSB0aGUgZW5jb2Rp bmcgKEpTT04sIFhNTCwgZXRjLikgIFNIT1VMRCBiZSBjb21tdW5pY2F0ZWQKICAgZXh0ZXJuYWxs eS4gIEluIGVpdGhlciBjYXNlLCB0aGUgYXNzb2NpYXRlZCBjb250ZW50IG9yIGVDb250ZW50IGlz IGFuCiAgIG9jdGV0IHN0cmluZyBjb250YWluaW5nICJ6ZXJvdG91Y2gtaW5mb3JtYXRpb24iIGRh dGEgaW4gdGhlIGV4cGVjdGVkCiAgIGVuY29kaW5nLgoKCgoKV2F0c2VuLCBldCBhbC4gICAgICAg ICAgRXhwaXJlcyBGZWJydWFyeSAxMCwgMjAxOSAgICAgICAgICAgICAgW1BhZ2UgMTBdCgwKSW50 ZXJuZXQtRHJhZnQgICAgU2VjdXJlIFplcm8gVG91Y2ggUHJvdmlzaW9uaW5nIChTWlRQKSAgICAg IEF1Z3VzdCAyMDE4CgoKMy4yLiAgT3duZXIgQ2VydGlmaWNhdGUKCiAgIFRoZSBvd25lciBjZXJ0 aWZpY2F0ZSBhcnRpZmFjdCBpcyBhbiBYLjUwOSBjZXJ0aWZpY2F0ZSBbUkZDNTI4MF0gdGhhdAog ICBpcyB1c2VkIHRvIGlkZW50aWZ5IGFuICJvd25lciIgKGUuZy4sIGFuIG9yZ2FuaXphdGlvbiku ICBUaGUgb3duZXIKICAgY2VydGlmaWNhdGUgY2FuIGJlIHNpZ25lZCBieSBhbnkgY2VydGlmaWNh dGUgYXV0aG9yaXR5IChDQSkuICBUaGUKICAgb3duZXIgY2VydGlmaWNhdGUgZWl0aGVyIE1VU1Qg aGF2ZSBubyBLZXkgVXNhZ2Ugc3BlY2lmaWVkIG9yIHRoZSBLZXkKICAgVXNhZ2UgTVVTVCBhdCBs ZWFzdCBzZXQgdGhlICJkaWdpdGFsU2lnbmF0dXJlIiBiaXQuICBUaGUgdmFsdWVzIGZvcgogICB0 aGUgb3duZXIgY2VydGlmaWNhdGUncyAic3ViamVjdCIgYW5kL29yICJzdWJqZWN0QWx0TmFtZSIg YXJlIG5vdAogICBjb25zdHJhaW5lZCBieSB0aGlzIGRvY3VtZW50LgoKICAgVGhlIG93bmVyIGNl cnRpZmljYXRlIGlzIHVzZWQgYnkgYSBkZXZpY2UgdG8gdmVyaWZ5IHRoZSBzaWduYXR1cmUKICAg b3ZlciB0aGUgemVybyB0b3VjaCBpbmZvcm1hdGlvbiBhcnRpZmFjdCAoU2VjdGlvbiAzLjEpIHRo YXQgdGhlCiAgIGRldmljZSBzaG91bGQgaGF2ZSBhbHNvIHJlY2VpdmVkLCBhcyBkZXNjcmliZWQg aW4gU2VjdGlvbiAzLjUuICBJbgogICBwYXJ0aWN1bGFyLCB0aGUgZGV2aWNlIHZlcmlmaWVzIHRo ZSBzaWduYXR1cmUgdXNpbmcgdGhlIHB1YmxpYyBrZXkgaW4KICAgdGhlIG93bmVyIGNlcnRpZmlj YXRlIG92ZXIgdGhlIGNvbnRlbnQgY29udGFpbmVkIHdpdGhpbiB0aGUgemVybwogICB0b3VjaCBp bmZvcm1hdGlvbiBhcnRpZmFjdC4KCiAgIFRoZSBvd25lciBjZXJ0aWZpY2F0ZSBhcnRpZmFjdCBp cyBmb3JtYWxseSBhIENNUyBzdHJ1Y3R1cmUsIGFzCiAgIHNwZWNpZmllZCBieSBbUkZDNTY1Ml0s IGVuY29kZWQgdXNpbmcgQVNOLjEgZGlzdGluZ3Vpc2hlZCBlbmNvZGluZwogICBydWxlcyAoREVS KSwgYXMgc3BlY2lmaWVkIGluIElUVS1UIFguNjkwIFtJVFUuWDY5MC4yMDE1XS4KCiAgIFRoZSBv d25lciBjZXJ0aWZpY2F0ZSBDTVMgc3RydWN0dXJlIE1VU1QgY29udGFpbiB0aGUgb3duZXIKICAg Y2VydGlmaWNhdGUgaXRzZWxmLCBhcyB3ZWxsIGFzIGFsbCBpbnRlcm1lZGlhdGUgY2VydGlmaWNh dGVzIGxlYWRpbmcKICAgdG8gdGhlICJwaW5uZWQtZG9tYWluLWNlcnQiIGNlcnRpZmljYXRlIHNw ZWNpZmllZCBpbiB0aGUgb3duZXJzaGlwCiAgIHZvdWNoZXIuICBUaGUgb3duZXIgY2VydGlmaWNh dGUgYXJ0aWZhY3QgTUFZIG9wdGlvbmFsbHkgaW5jbHVkZSB0aGUKICAgInBpbm5lZC1kb21haW4t Y2VydCIgYXMgd2VsbC4KCiAgIEluIG9yZGVyIHRvIHN1cHBvcnQgZGV2aWNlcyBkZXBsb3llZCBv biBwcml2YXRlIG5ldHdvcmtzLCB0aGUgb3duZXIKICAgY2VydGlmaWNhdGUgQ01TIHN0cnVjdHVy ZSBNQVkgYWxzbyBjb250YWluIHN1aXRhYmx5IGZyZXNoLCBhcwogICBkZXRlcm1pbmVkIGJ5IGxv Y2FsIHBvbGljeSwgcmV2b2NhdGlvbiBvYmplY3RzIChlLmcuLCBDUkxzKS4gIEhhdmluZwogICB0 aGVzZSByZXZvY2F0aW9uIG9iamVjdHMgc3RhcGxlZCB0byB0aGUgb3duZXIgY2VydGlmaWNhdGUg bWF5IG9idmlhdGUKICAgdGhlIG5lZWQgZm9yIHRoZSBkZXZpY2UgdG8gaGF2ZSB0byBkb3dubG9h ZCB0aGVtIGR5bmFtaWNhbGx5IHVzaW5nCiAgIHRoZSBDUkwgZGlzdHJpYnV0aW9uIHBvaW50IG9y IGFuIE9DU1AgcmVzcG9uZGVyIHNwZWNpZmllZCBpbiB0aGUKICAgYXNzb2NpYXRlZCBjZXJ0aWZp Y2F0ZXMuCgogICBXaGVuIHVuZW5jcnlwdGVkLCB0aGUgb3duZXIgY2VydGlmaWNhdGUgYXJ0aWZh Y3QncyBDTVMgc3RydWN0dXJlJ3MKICAgdG9wLW1vc3QgY29udGVudCB0eXBlIE1VU1QgYmUgdGhl IE9JRCBpZC1zaWduZWREYXRhCiAgICgxLjIuODQwLjExMzU0OS4xLjcuMikuICBUaGUgaW5uZXIg U2lnbmVkRGF0YSBzdHJ1Y3R1cmUgaXMgdGhlCiAgIGRlZ2VuZXJhdGUgZm9ybSwgd2hlcmVieSB0 aGVyZSBhcmUgbm8gc2lnbmVycywgdGhhdCBpcyBjb21tb25seSB1c2VkCiAgIHRvIGRpc3NlbWlu YXRlIGNlcnRpZmljYXRlcyBhbmQgcmV2b2NhdGlvbiBvYmplY3RzLgoKICAgV2hlbiBlbmNyeXB0 ZWQsIHRoZSBvd25lciBjZXJ0aWZpY2F0ZSBhcnRpZmFjdCdzIENNUyBzdHJ1Y3R1cmUncyB0b3At CiAgIG1vc3QgY29udGVudCB0eXBlIE1VU1QgYmUgdGhlIE9JRCBpZC1lbnZlbG9wZWREYXRhCiAg ICgxLjIuODQwLjExMzU0OS4xLjcuMyksIGFuZCB0aGUgZW5jcnlwdGVkQ29udGVudEluZm8ncyBj b250ZW50IHR5cGUKICAgTVVTVCBiZSB0aGUgT0lEIGlkLXNpZ25lZERhdGEgKDEuMi44NDAuMTEz NTQ5LjEuNy4yKSwgd2hlcmVieSB0aGUKICAgaW5uZXIgU2lnbmVkRGF0YSBzdHJ1Y3R1cmUgaXMg dGhlIGRlZ2VuZXJhdGUgZm9ybSB0aGF0IGhhcyBubyBzaWduZXJzCiAgIGNvbW1vbmx5IHVzZWQg dG8gZGlzc2VtaW5hdGUgY2VydGlmaWNhdGVzIGFuZCByZXZvY2F0aW9uIG9iamVjdHMuCgoKCgpX YXRzZW4sIGV0IGFsLiAgICAgICAgICBFeHBpcmVzIEZlYnJ1YXJ5IDEwLCAyMDE5ICAgICAgICAg ICAgICBbUGFnZSAxMV0KDApJbnRlcm5ldC1EcmFmdCAgICBTZWN1cmUgWmVybyBUb3VjaCBQcm92 aXNpb25pbmcgKFNaVFApICAgICAgQXVndXN0IDIwMTgKCgozLjMuICBPd25lcnNoaXAgVm91Y2hl cgoKICAgVGhlIG93bmVyc2hpcCB2b3VjaGVyIGFydGlmYWN0IGlzIHVzZWQgdG8gc2VjdXJlbHkg aWRlbnRpZnkgYQogICBkZXZpY2UncyBvd25lciwgYXMgaXQgaXMga25vd24gdG8gdGhlIG1hbnVm YWN0dXJlci4gIFRoZSBvd25lcnNoaXAKICAgdm91Y2hlciBpcyBzaWduZWQgYnkgdGhlIGRldmlj ZSdzIG1hbnVmYWN0dXJlci4KCiAgIFRoZSBvd25lcnNoaXAgdm91Y2hlciBpcyB1c2VkIHRvIHZl cmlmeSB0aGUgb3duZXIgY2VydGlmaWNhdGUKICAgKFNlY3Rpb24gMy4yKSB0aGF0IHRoZSBkZXZp Y2Ugc2hvdWxkIGhhdmUgYWxzbyByZWNlaXZlZCwgYXMgZGVzY3JpYmVkCiAgIGluIFNlY3Rpb24g My41LiAgSW4gcGFydGljdWxhciwgdGhlIGRldmljZSB2ZXJpZmllcyB0aGF0IHRoZSBvd25lcgog ICBjZXJ0aWZpY2F0ZSBoYXMgYSBjaGFpbiBvZiB0cnVzdCBsZWFkaW5nIHRvIHRoZSB0cnVzdGVk IGNlcnRpZmljYXRlCiAgIGluY2x1ZGVkIGluIHRoZSBvd25lcnNoaXAgdm91Y2hlciAoInBpbm5l ZC1kb21haW4tY2VydCIpLiAgTm90ZSB0aGF0CiAgIHRoaXMgcmVsYXRpb25zaGlwIGhvbGRzIGV2 ZW4gd2hlbiB0aGUgb3duZXIgY2VydGlmaWNhdGUgaXMgYSBzZWxmLQogICBzaWduZWQgY2VydGlm aWNhdGUsIGFuZCBoZW5jZSBhbHNvIHRoZSBwaW5uZWQtZG9tYWluLWNlcnQuCgogICBXaGVuIHVu ZW5jcnlwdGVkLCB0aGUgb3duZXJzaGlwIHZvdWNoZXIgYXJ0aWZhY3QgaXMgYXMgZGVmaW5lZCBp bgogICBbUkZDODM2Nl0uICBBcyBkZXNjcmliZWQsIGl0IGlzIGEgQ01TIHN0cnVjdHVyZSB3aG9z ZSB0b3AtbW9zdAogICBjb250ZW50IHR5cGUgTVVTVCBiZSB0aGUgT0lEIGlkLXNpZ25lZERhdGEg KDEuMi44NDAuMTEzNTQ5LjEuNy4yKSwKICAgd2hvc2UgZUNvbnRlbnRUeXBlIE1VU1QgYmUgT0lE IGlkLWN0LWFuaW1hSlNPTlZvdWNoZXIKICAgKDEuMi44NDAuMTEzNTQ5LjEuOS4xNi4xKSwgb3Ig dGhlIE9JRCBpZC1kYXRhICgxLjIuODQwLjExMzU0OS4xLjcuMSksCiAgIGluIHdoaWNoIGNhc2Ug dGhlIGVuY29kaW5nIChKU09OLCBYTUwsIGV0Yy4pICBTSE9VTEQgYmUgY29tbXVuaWNhdGVkCiAg IGV4dGVybmFsbHkuICBJbiBlaXRoZXIgY2FzZSwgdGhlIGFzc29jaWF0ZWQgY29udGVudCBpcyBh biBvY3RldAogICBzdHJpbmcgY29udGFpbmluZyBpZXRmLXZvdWNoZXIgZGF0YSBpbiB0aGUgZXhw ZWN0ZWQgZW5jb2RpbmcuCgogICBXaGVuIGVuY3J5cHRlZCwgdGhlIG93bmVyc2hpcCB2b3VjaGVy IGFydGlmYWN0J3MgQ01TIHN0cnVjdHVyZSdzIHRvcC0KICAgbW9zdCBjb250ZW50IHR5cGUgTVVT VCBiZSB0aGUgT0lEIGlkLWVudmVsb3BlZERhdGEKICAgKDEuMi44NDAuMTEzNTQ5LjEuNy4zKSwg YW5kIHRoZSBlbmNyeXB0ZWRDb250ZW50SW5mbydzIGNvbnRlbnQgdHlwZQogICBNVVNUIGJlIHRo ZSBPSUQgaWQtc2lnbmVkRGF0YSAoMS4yLjg0MC4xMTM1NDkuMS43LjIpLCB3aG9zZQogICBlQ29u dGVudFR5cGUgTVVTVCBiZSBPSUQgaWQtY3QtYW5pbWFKU09OVm91Y2hlcgogICAoMS4yLjg0MC4x MTM1NDkuMS45LjE2LjEpLCBvciB0aGUgT0lEIGlkLWRhdGEgKDEuMi44NDAuMTEzNTQ5LjEuNy4x KSwKICAgaW4gd2hpY2ggY2FzZSB0aGUgZW5jb2RpbmcgKEpTT04sIFhNTCwgZXRjLikgIFNIT1VM RCBiZSBjb21tdW5pY2F0ZWQKICAgZXh0ZXJuYWxseS4gIEluIGVpdGhlciBjYXNlLCB0aGUgYXNz b2NpYXRlZCBjb250ZW50IGlzIGFuIG9jdGV0CiAgIHN0cmluZyBjb250YWluaW5nIGlldGYtdm91 Y2hlciBkYXRhIGluIHRoZSBleHBlY3RlZCBlbmNvZGluZy4KCjMuNC4gIEFydGlmYWN0IEVuY3J5 cHRpb24KCiAgIEVhY2ggb2YgdGhlIHRocmVlIGFydGlmYWN0cyBNQVkgYmUgaW5kaXZpZHVhbGx5 IGVuY3J5cHRlZC4KICAgRW5jcnlwdGlvbiBtYXkgYmUgaW1wb3J0YW50IGluIHNvbWUgZW52aXJv bm1lbnRzIHdoZXJlIHRoZSBjb250ZW50IGlzCiAgIGNvbnNpZGVyZWQgc2Vuc2l0aXZlLgoKICAg RWFjaCBvZiB0aGUgdGhyZWUgYXJ0aWZhY3RzIGFyZSBlbmNyeXB0ZWQgaW4gdGhlIHNhbWUgd2F5 LCBieSB0aGUKICAgdW5lbmNyeXB0ZWQgZm9ybSBiZWluZyBlbmNhcHN1bGF0ZWQgaW5zaWRlIGEg Q01TIEVudmVsb3BlZERhdGEgdHlwZS4KCiAgIEFzIGEgY29uc2VxdWVuY2UsIGJvdGggdGhlIHpl cm90b3VjaC1pbmZvcm1hdGlvbiBhbmQgb3duZXJzaGlwCiAgIHZvdWNoZXIgYXJ0aWZhY3RzIGFy ZSBzaWduZWQgYW5kIHRoZW4gZW5jcnlwdGVkLCBuZXZlciBlbmNyeXB0ZWQgYW5kCiAgIHRoZW4g c2lnbmVkLgoKICAgVGhpcyBzZXF1ZW5jaW5nIGhhcyB0aGUgYWR2YW50YWdlIG9mIHNocm91ZGlu ZyB0aGUgc2lnbmVyJ3MKICAgY2VydGlmaWNhdGUsIGFuZCBlbnN1cmluZyB0aGF0IHRoZSBvd25l ciBrbm93cyB0aGUgY29udGVudCBiZWluZwoKCgpXYXRzZW4sIGV0IGFsLiAgICAgICAgICBFeHBp cmVzIEZlYnJ1YXJ5IDEwLCAyMDE5ICAgICAgICAgICAgICBbUGFnZSAxMl0KDApJbnRlcm5ldC1E cmFmdCAgICBTZWN1cmUgWmVybyBUb3VjaCBQcm92aXNpb25pbmcgKFNaVFApICAgICAgQXVndXN0 IDIwMTgKCgogICBzaWduZWQuICBUaGlzIHNlcXVlbmNpbmcgZnVydGhlciBlbmFibGVzIHRoZSBv d25lciB0byBpbnNwZWN0IGFuCiAgIHVuZW5jcnlwdGVkIHZvdWNoZXIgb2J0YWluZWQgZnJvbSBh IG1hbnVmYWN0dXJlciBhbmQgdGhlbiBlbmNyeXB0IHRoZQogICB2b3VjaGVyIGxhdGVyIHRoZW1z ZWx2ZXMsIHBlcmhhcHMgd2hpbGUgYWxzbyBzdGFwbGluZyBpbiBjdXJyZW50CiAgIHJldm9jYXRp b24gb2JqZWN0cywgd2hlbiByZWFkeSB0byBwbGFjZSB0aGUgYXJ0aWZhY3QgaW4gYW4gdW5zYWZl CiAgIGxvY2F0aW9uLgoKICAgV2hlbiBlbmNyeXB0ZWQsIHRoZSBDTVMgTVVTVCBiZSBlbmNyeXB0 ZWQgdXNpbmcgYSBzZWN1cmUgZGV2aWNlCiAgIGlkZW50aXR5IGNlcnRpZmljYXRlIGZvciB0aGUg ZGV2aWNlLiAgVGhpcyBjZXJ0aWZpY2F0ZSBNQVkgYmUgdGhlCiAgIHNhbWUgYXMgdGhlIFRMUy1s ZXZlbCBjbGllbnQgY2VydGlmaWNhdGUgdGhlIGRldmljZSB1c2VzIHdoZW4KICAgY29ubmVjdGlu ZyB0byBib290c3RyYXAgc2VydmVycy4gIFRoZSBvd25lciBtdXN0IHBvc3Nlc3MgdGhlIGRldmlj ZSdzCiAgIGlkZW50aXR5IGNlcnRpZmljYXRlIGF0IHRoZSB0aW1lIG9mIGVuY3J5cHRpbmcgdGhl IGRhdGEuICBIb3cgdGhlCiAgIG93bmVyIGNvbWVzIHRvIHBvc3NlcyB0aGUgZGV2aWNlJ3MgaWRl bnRpdHkgY2VydGlmaWNhdGUgZm9yIHRoaXMKICAgcHVycG9zZSBpcyBvdXRzaWRlIHRoZSBzY29w ZSBvZiB0aGlzIGRvY3VtZW50LgoKMy41LiAgQXJ0aWZhY3QgR3JvdXBpbmdzCgogICBUaGUgcHJl dmlvdXMgc2VjdGlvbnMgZGlzY3Vzc2VkIHRoZSBib290c3RyYXBwaW5nIGFydGlmYWN0cywgYnV0 IG9ubHkKICAgY2VydGFpbiBncm91cGluZ3Mgb2YgdGhlc2UgYXJ0aWZhY3RzIG1ha2Ugc2Vuc2Ug dG8gcmV0dXJuIGluIHRoZQogICB2YXJpb3VzIGJvb3RzdHJhcHBpbmcgc2l0dWF0aW9ucyBkZXNj cmliZWQgaW4gdGhpcyBkb2N1bWVudC4gIFRoZXNlCiAgIGdyb3VwaW5ncyBhcmU6CgogICAgICBV bnNpZ25lZCBJbmZvcm1hdGlvbjogIFRoaXMgZ3JvdXBpbmcgaXMgdXNlZnVsIGZvciBjYXNlcyB3 aGVuCiAgICAgICAgIHRyYW5zcG9ydCBsZXZlbCBzZWN1cml0eSBjYW4gYmUgdXNlZCB0byBjb252 ZXkgdHJ1c3QgKGUuZy4sCiAgICAgICAgIEhUVFBTKSwgb3Igd2hlbiB0aGUgaW5mb3JtYXRpb24g Y2FuIGJlIHByb2Nlc3NlZCBpbiBhCiAgICAgICAgIHByb3Zpc2lvbmFsIG1hbm5lciAoaS5lLiAg dW5zaWduZWQgcmVkaXJlY3QgaW5mb3JtYXRpb24pLgoKICAgICAgU2lnbmVkIEluZm9ybWF0aW9u LCB3aXRob3V0IHJldm9jYXRpb25zOiAgVGhpcyBncm91cGluZyBpcyB1c2VmdWwKICAgICAgICAg d2hlbiBzaWduZWQgaW5mb3JtYXRpb24gaXMgbmVlZGVkLCBiZWNhdXNlIGl0IGlzIG9idGFpbmVk IGZyb20KICAgICAgICAgYW4gdW50cnVzdGVkIHNvdXJjZSwgYW5kIGl0IGNhbm5vdCBiZSBwcm9j ZXNzZWQgcHJvdmlzaW9uYWxseSwKICAgICAgICAgYW5kIHlldCBlaXRoZXIgcmV2b2NhdGlvbnMg YXJlIG5vdCBuZWVkZWQgb3IgdGhleSBjYW4gYmUKICAgICAgICAgb2J0YWluZWQgZHluYW1pY2Fs bHkuCgogICAgICBTaWduZWQgSW5mb3JtYXRpb24sIHdpdGggcmV2b2NhdGlvbnM6ICBUaGlzIGdy b3VwaW5nIGlzIHVzZWZ1bAogICAgICAgICB3aGVuIHNpZ25lZCBpbmZvcm1hdGlvbiBpcyBuZWVk ZWQsIGJlY2F1c2UgaXQgaXMgb2J0YWluZWQgZnJvbQogICAgICAgICBhbiB1bnRydXN0ZWQgc291 cmNlLCBhbmQgaXQgY2Fubm90IGJlIHByb2Nlc3NlZCBwcm92aXNpb25hbGx5LAogICAgICAgICBh bmQgcmV2b2NhdGlvbnMgYXJlIG5lZWRlZCBhbmQgY2Fubm90IGJlIG9idGFpbmVkIGR5bmFtaWNh bGx5LgoKICAgVGhlIGFydGlmYWN0cyBhc3NvY2lhdGVkIHdpdGggdGhlc2UgZ3JvdXBpbmdzIGFy ZSBkZXNjcmliZWQgYmVsb3c6CgoKCgoKCgoKCgoKCgpXYXRzZW4sIGV0IGFsLiAgICAgICAgICBF eHBpcmVzIEZlYnJ1YXJ5IDEwLCAyMDE5ICAgICAgICAgICAgICBbUGFnZSAxM10KDApJbnRlcm5l dC1EcmFmdCAgICBTZWN1cmUgWmVybyBUb3VjaCBQcm92aXNpb25pbmcgKFNaVFApICAgICAgQXVn dXN0IDIwMTgKCgogICAgICAgICAgICAgICAgICAgICAgICAgICBaZXJvIFRvdWNoICAgICAgIE93 bmVyc2hpcCAgICAgICBPd25lcgogICBHcm91cGluZyAgICAgICAgICAgICAgICBJbmZvcm1hdGlv biAgICAgIFZvdWNoZXIgICAgICAgICBDZXJ0aWZpY2F0ZQogICAtLS0tLS0tLS0tLS0tLS0tLS0t LSAgICAtLS0tLS0tLS0tLS0tICAgIC0tLS0tLS0tLS0tLSAgICAtLS0tLS0tLS0tLQogICBVbnNp Z25lZCBJbmZvcm1hdGlvbiAgICBZZXMsIG5vIHNpZyAgICAgIE5vICAgICAgICAgICAgICBObwoK ICAgU2lnbmVkIEluZm9ybWF0aW9uLCAgICAgWWVzLCB3aXRoIHNpZyAgICBZZXMsIHdpdGhvdXQg ICAgWWVzLCB3aXRob3V0CiAgIHdpdGhvdXQgcmV2b2NhdGlvbnMgICAgICAgICAgICAgICAgICAg ICAgcmV2b2NhdGlvbnMgICAgIHJldm9jYXRpb25zCgogICBTaWduZWQgSW5mb3JtYXRpb24sICAg ICBZZXMsIHdpdGggc2lnICAgIFllcywgd2l0aCAgICAgICBZZXMsIHdpdGgKICAgd2l0aCByZXZv Y2F0aW9ucyAgICAgICAgICAgICAgICAgICAgICAgICByZXZvY2F0aW9ucyAgICAgcmV2b2NhdGlv bnMKCjQuICBTb3VyY2VzIG9mIEJvb3RzdHJhcHBpbmcgRGF0YQoKICAgVGhpcyBzZWN0aW9uIGRl ZmluZXMgc29tZSBzb3VyY2VzIGZvciBib290c3RyYXBwaW5nIGRhdGEgdGhhdCBhCiAgIGRldmlj ZSBjYW4gYWNjZXNzLiAgVGhlIGxpc3Qgb2Ygc291cmNlcyBkZWZpbmVkIGhlcmUgaXMgbm90IG1l YW50IHRvCiAgIGJlIGV4aGF1c3RpdmUuICBJdCBpcyBsZWZ0IHRvIGZ1dHVyZSBkb2N1bWVudHMg dG8gZGVmaW5lIGFkZGl0aW9uYWwKICAgc291cmNlcyBmb3Igb2J0YWluaW5nIGJvb3RzdHJhcHBp bmcgZGF0YS4KCiAgIEZvciBlYWNoIHNvdXJjZSBvZiBib290c3RyYXBwaW5nIGRhdGEgZGVmaW5l ZCBpbiB0aGlzIHNlY3Rpb24sCiAgIGRldGFpbHMgYXJlIGdpdmVuIGZvciBob3cgdGhlIHRocmVl IGFydGlmYWN0cyBsaXN0ZWQgaW4gU2VjdGlvbiAzIGFyZQogICBwcm92aWRlZC4KCjQuMS4gIFJl bW92YWJsZSBTdG9yYWdlCgogICBBIGRpcmVjdGx5IGF0dGFjaGVkIHJlbW92YWJsZSBzdG9yYWdl IGRldmljZSAoZS5nLiwgYSBVU0IgZmxhc2gKICAgZHJpdmUpIE1BWSBiZSB1c2VkIGFzIGEgc291 cmNlIG9mIHplcm8gdG91Y2ggYm9vdHN0cmFwcGluZyBkYXRhLgoKICAgVXNlIG9mIGEgcmVtb3Zh YmxlIHN0b3JhZ2UgZGV2aWNlIGlzIGNvbXBlbGxpbmcsIGFzIGl0IGRvZXMgbm90CiAgIHJlcXVp cmUgYW55IGV4dGVybmFsIGluZnJhc3RydWN0dXJlIHRvIHdvcmsuICBJdCBpcyBub3RhYmxlIHRo YXQgdGhlCiAgIHJhdyBib290IGltYWdlIGZpbGUgY2FuIGFsc28gYmUgbG9jYXRlZCBvbiB0aGUg cmVtb3ZhYmxlIHN0b3JhZ2UKICAgZGV2aWNlLCBlbmFibGluZyBhIHJlbW92YWJsZSBzdG9yYWdl IGRldmljZSB0byBiZSBhIGZ1bGx5IHNlbGYtCiAgIHN0YW5kaW5nIGJvb3RzdHJhcHBpbmcgc29s dXRpb24uCgogICBUbyB1c2UgYSByZW1vdmFibGUgc3RvcmFnZSBkZXZpY2UgYXMgYSBzb3VyY2Ug b2YgYm9vdHN0cmFwcGluZyBkYXRhLAogICBhIGRldmljZSBuZWVkIG9ubHkgZGV0ZWN0IGlmIHRo ZSByZW1vdmFibGUgc3RvcmFnZSBkZXZpY2UgaXMgcGx1Z2dlZAogICBpbiBhbmQgbW91bnQgaXRz IGZpbGVzeXN0ZW0uCgogICBBIHJlbW92YWJsZSBzdG9yYWdlIGRldmljZSBpcyBhbiB1bnRydXN0 ZWQgc291cmNlIG9mIGJvb3RzdHJhcHBpbmcKICAgZGF0YS4gIFRoaXMgbWVhbnMgdGhhdCB0aGUg aW5mb3JtYXRpb24gc3RvcmVkIG9uIHRoZSByZW1vdmFibGUKICAgc3RvcmFnZSBkZXZpY2UgZWl0 aGVyIE1VU1QgYmUgc2lnbmVkIG9yIE1VU1QgYmUgaW5mb3JtYXRpb24gdGhhdCBjYW4KICAgYmUg cHJvY2Vzc2VkIHByb3Zpc2lvbmFsbHkgKGUuZy4sIHVuc2lnbmVkIHJlZGlyZWN0IGluZm9ybWF0 aW9uKS4KCiAgIEZyb20gYW4gYXJ0aWZhY3QgcGVyc3BlY3RpdmUsIHNpbmNlIGEgcmVtb3ZhYmxl IHN0b3JhZ2UgZGV2aWNlCiAgIHByZXNlbnRzIGl0c2VsZiBhcyBhIGZpbGVzeXN0ZW0sIHRoZSBi b290c3RyYXBwaW5nIGFydGlmYWN0cyBuZWVkIHRvCiAgIGJlIHByZXNlbnRlZCBhcyBmaWxlcy4g IFRoZSB0aHJlZSBhcnRpZmFjdHMgZGVmaW5lZCBpbiBTZWN0aW9uIDMgYXJlCiAgIG1hcHBlZCB0 byBmaWxlcyBiZWxvdy4KCiAgIEFydGlmYWN0IHRvIEZpbGUgTWFwcGluZzoKCgoKV2F0c2VuLCBl dCBhbC4gICAgICAgICAgRXhwaXJlcyBGZWJydWFyeSAxMCwgMjAxOSAgICAgICAgICAgICAgW1Bh Z2UgMTRdCgwKSW50ZXJuZXQtRHJhZnQgICAgU2VjdXJlIFplcm8gVG91Y2ggUHJvdmlzaW9uaW5n IChTWlRQKSAgICAgIEF1Z3VzdCAyMDE4CgoKICAgICAgWmVybyBUb3VjaCBJbmZvcm1hdGlvbjog IE1hcHBlZCB0byBhIGZpbGUgY29udGFpbmluZyB0aGUgYmluYXJ5CiAgICAgICAgIGFydGlmYWN0 IGRlc2NyaWJlZCBpbiBTZWN0aW9uIDMuMSAoZS5nLiwgemVyb3RvdWNoLQogICAgICAgICBpbmZv cm1hdGlvbi5jbXMpLgoKICAgICAgT3duZXIgQ2VydGlmaWNhdGU6ICBNYXBwZWQgdG8gYSBmaWxl IGNvbnRhaW5pbmcgdGhlIGJpbmFyeQogICAgICAgICBhcnRpZmFjdCBkZXNjcmliZWQgaW4gU2Vj dGlvbiAzLjIgKGUuZy4sIG93bmVyLQogICAgICAgICBjZXJ0aWZpY2F0ZS5jbXMpLgoKICAgICAg T3duZXJzaGlwIFZvdWNoZXI6ICBNYXBwZWQgdG8gYSBmaWxlIGNvbnRhaW5pbmcgdGhlIGJpbmFy eQogICAgICAgICBhcnRpZmFjdCBkZXNjcmliZWQgaW4gU2VjdGlvbiAzLjMgKGUuZy4sIG93bmVy c2hpcC12b3VjaGVyLmNtcwogICAgICAgICBvciBvd25lcnNoaXAtdm91Y2hlci52Y2opLgoKICAg VGhlIGZvcm1hdCBvZiB0aGUgcmVtb3ZhYmxlIHN0b3JhZ2UgZGV2aWNlJ3MgZmlsZXN5c3RlbSBh bmQgdGhlCiAgIG5hbWluZyBvZiB0aGUgZmlsZXMgYXJlIG91dHNpZGUgdGhlIHNjb3BlIG9mIHRo aXMgZG9jdW1lbnQuICBIb3dldmVyLAogICBpbiBvcmRlciB0byBmYWNpbGl0YXRlIGludGVyb3Bl cmFiaWxpdHksIGl0IGlzIFJFQ09NTUVOREVEIGRldmljZXMKICAgc3VwcG9ydCBvcGVuIGFuZC9v ciBzdGFuZGFyZHMgYmFzZWQgZmlsZXN5c3RlbXMuICBJdCBpcyBhbHNvCiAgIFJFQ09NTUVOREVE IHRoYXQgZGV2aWNlcyBhc3N1bWUgYSBmaWxlIG5hbWluZyBjb252ZW50aW9uIHRoYXQgZW5hYmxl cwogICBtb3JlIHRoYW4gb25lIGluc3RhbmNlIG9mIGJvb3RzdHJhcHBpbmcgZGF0YSAoaS5lLiwg Zm9yIGRpZmZlcmVudAogICBkZXZpY2VzKSB0byBleGlzdCBvbiBhIHJlbW92YWJsZSBzdG9yYWdl IGRldmljZS4gIFRoZSBmaWxlIG5hbWluZwogICBjb252ZW50aW9uIFNIT1VMRCBhZGRpdGlvbmFs bHkgYmUgdW5pcXVlIHRvIHRoZSBtYW51ZmFjdHVyZXIsIGluCiAgIG9yZGVyIHRvIGVuYWJsZSBi b290c3RyYXBwaW5nIGRhdGEgZnJvbSBtdWx0aXBsZSBtYW51ZmFjdHVyZXJzIHRvCiAgIGV4aXN0 IG9uIGEgcmVtb3ZhYmxlIHN0b3JhZ2UgZGV2aWNlLgoKNC4yLiAgRE5TIFNlcnZlcgoKICAgQSBE TlMgc2VydmVyIE1BWSBiZSB1c2VkIGFzIGEgc291cmNlIG9mIHplcm8gdG91Y2ggYm9vdHN0cmFw cGluZwogICBkYXRhLgoKICAgVXNpbmcgYSBETlMgc2VydmVyIG1heSBiZSBhIGNvbXBlbGxpbmcg b3B0aW9uIGZvciBkZXBsb3ltZW50cyBoYXZpbmcKICAgZXhpc3RpbmcgRE5TIGluZnJhc3RydWN0 dXJlLCBhcyBpdCBlbmFibGVzIGEgdG91Y2hsZXNzIGJvb3RzdHJhcHBpbmcKICAgb3B0aW9uIHRo YXQgZG9lcyBub3QgZW50YWlsIHV0aWxpemluZyBhbiBJbnRlcm5ldCBiYXNlZCByZXNvdXJjZQog ICBob3N0ZWQgYnkgYSAzcmQtcGFydHkuCgogICBUbyB1c2UgYSBETlMgc2VydmVyIGFzIGEgc291 cmNlIG9mIGJvb3RzdHJhcHBpbmcgZGF0YSwgYSBkZXZpY2UgTUFZCiAgIHBlcmZvcm0gYSBtdWx0 aWNhc3QgRE5TIFtSRkM2NzYyXSBxdWVyeSBzZWFyY2hpbmcgZm9yIHRoZSBzZXJ2aWNlCiAgICJf emVyb3RvdWNoLl90Y3AubG9jYWwuIi4gIEFsdGVybmF0aXZlbHkgdGhlIGRldmljZSBNQVkgcGVy Zm9ybSBETlMtCiAgIFNEIFtSRkM2NzYzXSB2aWEgbm9ybWFsIEROUyBvcGVyYXRpb24sIHVzaW5n IHRoZSBkb21haW4gcmV0dXJuZWQgdG8KICAgaXQgZnJvbSB0aGUgREhDUCBzZXJ2ZXI7IGZvciBl eGFtcGxlLCBzZWFyY2hpbmcgZm9yIHRoZSBzZXJ2aWNlCiAgICJfemVyb3RvdWNoLl90Y3AuZXhh bXBsZS5jb20iLgoKICAgVW5zaWduZWQgRE5TIHJlY29yZHMgKGUuZy4sIG5vdCB1c2luZyBETlNT RUMgYXMgZGVzY3JpYmVkIGluCiAgIFtSRkM2Njk4XSkgYXJlIGFuIHVudHJ1c3RlZCBzb3VyY2Ug b2YgYm9vdHN0cmFwcGluZyBkYXRhLiAgVGhpcyBtZWFucwogICB0aGF0IHRoZSBpbmZvcm1hdGlv biBzdG9yZWQgaW4gdGhlIEROUyByZWNvcmRzIGVpdGhlciBNVVNUIGJlIHNpZ25lZCwKICAgb3Ig TVVTVCBiZSBpbmZvcm1hdGlvbiB0aGF0IGNhbiBiZSBwcm9jZXNzZWQgcHJvdmlzaW9uYWxseSAo ZS5nLiwKICAgdW5zaWduZWQgcmVkaXJlY3QgaW5mb3JtYXRpb24pLgoKICAgRnJvbSBhbiBhcnRp ZmFjdCBwZXJzcGVjdGl2ZSwgc2luY2UgYSBETlMgc2VydmVyIHByZXNlbnRzIHJlc291cmNlCiAg IHJlY29yZHMgKFNlY3Rpb24gMy4yLjEgb2YgW1JGQzEwMzVdKSwgdGhlIGJvb3RzdHJhcHBpbmcg YXJ0aWZhY3RzCgoKCldhdHNlbiwgZXQgYWwuICAgICAgICAgIEV4cGlyZXMgRmVicnVhcnkgMTAs IDIwMTkgICAgICAgICAgICAgIFtQYWdlIDE1XQoMCkludGVybmV0LURyYWZ0ICAgIFNlY3VyZSBa ZXJvIFRvdWNoIFByb3Zpc2lvbmluZyAoU1pUUCkgICAgICBBdWd1c3QgMjAxOAoKCiAgIG5lZWQg dG8gYmUgcHJlc2VudGVkIGFzIHJlc291cmNlIHJlY29yZHMuICBUaGUgdGhyZWUgYXJ0aWZhY3Rz CiAgIGRlZmluZWQgaW4gU2VjdGlvbiAzIGFyZSBtYXBwZWQgdG8gcmVzb3VyY2UgcmVjb3JkcyBi ZWxvdy4KCiAgIEFydGlmYWN0IHRvIFJlc291cmNlIFJlY29yZCBNYXBwaW5nOgoKICAgICAgWmVy byBUb3VjaCBJbmZvcm1hdGlvbjogIE1hcHBlZCB0byBhIFRYVCByZWNvcmQgY2FsbGVkICJ6dC1p bmZvIgogICAgICAgICBjb250YWluaW5nIHRoZSBiYXNlNjQtZW5jb2Rpbmcgb2YgdGhlIGJpbmFy eSBhcnRpZmFjdCBkZXNjcmliZWQKICAgICAgICAgaW4gU2VjdGlvbiAzLjEuCgogICAgICBPd25l ciBDZXJ0aWZpY2F0ZTogIE1hcHBlZCB0byBhIFRYVCByZWNvcmQgY2FsbGVkICJ6dC1jZXJ0Igog ICAgICAgICBjb250YWluaW5nIHRoZSBiYXNlNjQtZW5jb2Rpbmcgb2YgdGhlIGJpbmFyeSBhcnRp ZmFjdCBkZXNjcmliZWQKICAgICAgICAgaW4gU2VjdGlvbiAzLjIuCgogICAgICBPd25lcnNoaXAg Vm91Y2hlcjogIE1hcHBlZCB0byBhIFRYVCByZWNvcmQgY2FsbGVkICJ6dC12b3VjaGVyIgogICAg ICAgICBjb250YWluaW5nIHRoZSBiYXNlNjQtZW5jb2Rpbmcgb2YgdGhlIGJpbmFyeSBhcnRpZmFj dCBkZXNjcmliZWQKICAgICAgICAgaW4gU2VjdGlvbiAzLjMuCgogICBUWFQgcmVjb3JkcyBoYXZl IGFuIHVwcGVyIHNpemUgbGltaXQgb2YgNjU1MzUgYnl0ZXMgKFNlY3Rpb24gMy4yLjEgaW4KICAg UkZDMTAzNSksIHNpbmNlICJSRExFTkdUSCIgaXMgYSAxNi1iaXQgZmllbGQuICBQbGVhc2Ugc2Vl CiAgIFNlY3Rpb24gMy4xLjMgaW4gUkZDNDQwOCBmb3IgaG93IGEgVFhUIHJlY29yZCBjYW4gYWNo aWV2ZSB0aGlzIHNpemUuCiAgIER1ZSB0byB0aGlzIHNpemUgbGltaXRhdGlvbiwgc29tZSB6ZXJv IHRvdWNoIGluZm9ybWF0aW9uIGFydGlmYWN0cwogICBtYXkgbm90IGZpdC4gIEluIHBhcnRpY3Vs YXIsIG9uYm9hcmRpbmcgaW5mb3JtYXRpb24gY291bGQgaGl0IHRoaXMKICAgdXBwZXIgYm91bmQs IGRlcGVuZGluZyBvbiB0aGUgc2l6ZSBvZiB0aGUgaW5jbHVkZWQgY29uZmlndXJhdGlvbiBhbmQK ICAgc2NyaXB0cy4KCjQuMy4gIERIQ1AgU2VydmVyCgogICBBIERIQ1Agc2VydmVyIE1BWSBiZSB1 c2VkIGFzIGEgc291cmNlIG9mIHplcm8gdG91Y2ggYm9vdHN0cmFwcGluZwogICBkYXRhLgoKICAg VXNpbmcgYSBESENQIHNlcnZlciBtYXkgYmUgYSBjb21wZWxsaW5nIG9wdGlvbiBmb3IgZGVwbG95 bWVudHMgaGF2aW5nCiAgIGV4aXN0aW5nIERIQ1AgaW5mcmFzdHJ1Y3R1cmUsIGFzIGl0IGVuYWJs ZXMgYSB0b3VjaGxlc3MgYm9vdHN0cmFwcGluZwogICBvcHRpb24gdGhhdCBkb2VzIG5vdCBlbnRh aWwgdXRpbGl6aW5nIGFuIEludGVybmV0IGJhc2VkIHJlc291cmNlCiAgIGhvc3RlZCBieSBhIDNy ZC1wYXJ0eS4KCiAgIEEgREhDUCBzZXJ2ZXIgaXMgYW4gdW50cnVzdGVkIHNvdXJjZSBvZiBib290 c3RyYXBwaW5nIGRhdGEuICBUaHVzIHRoZQogICBpbmZvcm1hdGlvbiBzdG9yZWQgb24gdGhlIERI Q1Agc2VydmVyIGVpdGhlciBNVVNUIGJlIHNpZ25lZCwgb3IgaXQKICAgTVVTVCBiZSBpbmZvcm1h dGlvbiB0aGF0IGNhbiBiZSBwcm9jZXNzZWQgcHJvdmlzaW9uYWxseSAoZS5nLiwKICAgdW5zaWdu ZWQgcmVkaXJlY3QgaW5mb3JtYXRpb24pLgoKICAgSG93ZXZlciwgdW5saWtlIG90aGVyIHNvdXJj ZXMgb2YgYm9vdHN0cmFwcGluZyBkYXRhIGRlc2NyaWJlZCBpbiB0aGlzCiAgIGRvY3VtZW50LCB0 aGUgREhDUCBwcm90b2NvbCAoZXNwZWNpYWxseSBESENQIGZvciBJUHY0KSBpcyB2ZXJ5CiAgIGxp bWl0ZWQgaW4gdGhlIGFtb3VudCBvZiBkYXRhIHRoYXQgY2FuIGJlIGNvbnZleWVkLCB0byB0aGUg ZXh0ZW50CiAgIHRoYXQgc2lnbmVkIGRhdGEgY2Fubm90IGJlIGNvbW11bmljYXRlZC4gIFRoaXMg bWVhbnMgdGhhdCBvbmx5CiAgIHVuc2lnbmVkIHJlZGlyZWN0IGluZm9ybWF0aW9uIGNhbiBiZSBj b252ZXllZCB2aWEgREhDUC4KCiAgIFNpbmNlIHRoZSByZWRpcmVjdCBpbmZvcm1hdGlvbiBpcyB1 bnNpZ25lZCwgaXQgU0hPVUxEIE5PVCBpbmNsdWRlIHRoZQogICBvcHRpb25hbCB0cnVzdCBhbmNo b3IgY2VydGlmaWNhdGUsIGFzIGl0IHRha2VzIHVwIHNwYWNlIGluIHRoZSBESENQCgoKCldhdHNl biwgZXQgYWwuICAgICAgICAgIEV4cGlyZXMgRmVicnVhcnkgMTAsIDIwMTkgICAgICAgICAgICAg IFtQYWdlIDE2XQoMCkludGVybmV0LURyYWZ0ICAgIFNlY3VyZSBaZXJvIFRvdWNoIFByb3Zpc2lv bmluZyAoU1pUUCkgICAgICBBdWd1c3QgMjAxOAoKCiAgIG1lc3NhZ2UsIGFuZCB0aGUgZGV2aWNl IHdvdWxkIGhhdmUgdG8gZGlzY2FyZCBpdCBhbnl3YXkuICBGb3IgdGhpcwogICByZWFzb24sIHRo ZSBESENQIG9wdGlvbnMgZGVmaW5lZCBpbiBTZWN0aW9uIDggZG8gbm90IGVuYWJsZSB0aGUgdHJ1 c3QKICAgYW5jaG9yIGNlcnRpZmljYXRlIHRvIGJlIGVuY29kZWQuCgogICBGcm9tIGFuIGFydGlm YWN0IHBlcnNwZWN0aXZlLCB0aGUgdGhyZWUgYXJ0aWZhY3RzIGRlZmluZWQgaW4KICAgU2VjdGlv biAzIGFyZSBtYXBwZWQgdG8gdGhlIERIQ1AgZmllbGRzIHNwZWNpZmllZCBpbiBTZWN0aW9uIDgg YXMKICAgZm9sbG93czoKCiAgICAgIFplcm8gVG91Y2ggSW5mb3JtYXRpb246ICBUaGlzIGFydGlm YWN0IGlzIG5vdCBzdXBwb3J0ZWQgZGlyZWN0bHkuCiAgICAgICAgIEluc3RlYWQsIHRoZSBlc3Nl bmNlIG9mIHVuc2lnbmVkIHJlZGlyZWN0IGluZm9ybWF0aW9uIGlzIG1hcHBlZAogICAgICAgICB0 byB0aGUgREhDUCBvcHRpb25zIGRlc2NyaWJlZCBpbiBTZWN0aW9uIDguCgogICAgICBPd25lciBD ZXJ0aWZpY2F0ZTogIE5vdCBzdXBwb3J0ZWQuICBUaGVyZSBpcyBub3QgZW5vdWdoIHNwYWNlIGlu CiAgICAgICAgIHRoZSBESENQIHBhY2tldCB0byBob2xkIGFuIG93bmVyIGNlcnRpZmljYXRlIGFy dGlmYWN0LgoKICAgICAgT3duZXJzaGlwIFZvdWNoZXI6ICBOb3Qgc3VwcG9ydGVkLiAgVGhlcmUg aXMgbm90IGVub3VnaCBzcGFjZSBpbgogICAgICAgICB0aGUgREhDUCBwYWNrZXQgdG8gaG9sZCBh biBvd25lcnNoaXAgdm91Y2hlciBhcnRpZmFjdC4KCjQuNC4gIEJvb3RzdHJhcCBTZXJ2ZXIKCiAg IEEgYm9vdHN0cmFwIHNlcnZlciBNQVkgYmUgdXNlZCBhcyBhIHNvdXJjZSBvZiB6ZXJvIHRvdWNo CiAgIGJvb3RzdHJhcHBpbmcgZGF0YS4gIEEgYm9vdHN0cmFwIHNlcnZlciBpcyBkZWZpbmVkIGFz IGEgUkVTVENPTkYKICAgW1JGQzgwNDBdIHNlcnZlciBpbXBsZW1lbnRpbmcgdGhlIFlBTkcgbW9k dWxlIHByb3ZpZGVkIGluIFNlY3Rpb24gNy4KCiAgIFVzaW5nIGEgYm9vdHN0cmFwIHNlcnZlciBh cyBhIHNvdXJjZSBvZiBib290c3RyYXBwaW5nIGRhdGEgaXMgYQogICBjb21wZWxsaW5nIG9wdGlv biBhcyBpdCBNQVkgdXNlIHRyYW5zcG9ydC1sZXZlbCBzZWN1cml0eSwgb2J2aWF0aW5nCiAgIHRo ZSBuZWVkIGZvciBzaWduZWQgZGF0YSwgd2hpY2ggbWF5IGJlIGVhc2llciB0byBkZXBsb3kgaW4g c29tZQogICBzaXR1YXRpb25zLgoKICAgVW5saWtlIGFueSBvdGhlciBzb3VyY2Ugb2YgYm9vdHN0 cmFwcGluZyBkYXRhIGRlc2NyaWJlZCBpbiB0aGlzCiAgIGRvY3VtZW50LCBhIGJvb3RzdHJhcCBz ZXJ2ZXIgaXMgbm90IG9ubHkgYSBzb3VyY2Ugb2YgZGF0YSwgYnV0IGl0IGNhbgogICBhbHNvIHJl Y2VpdmUgZGF0YSBmcm9tIGRldmljZXMgdXNpbmcgdGhlIFlBTkctZGVmaW5lZCAicmVwb3J0LQog ICBwcm9ncmVzcyIgUlBDIGRlZmluZWQgaW4gdGhlIFlBTkcgbW9kdWxlIChTZWN0aW9uIDcuMyku ICBUaGUgInJlcG9ydC0KICAgcHJvZ3Jlc3MiIFJQQyBlbmFibGVzIHZpc2liaWxpdHkgaW50byB0 aGUgYm9vdHN0cmFwcGluZyBwcm9jZXNzCiAgIChlLmcuLCB3YXJuaW5ncyBhbmQgZXJyb3JzKSwg YW5kIHByb3ZpZGVzIHBvdGVudGlhbGx5IHVzZWZ1bAogICBpbmZvcm1hdGlvbiB1cG9uIGNvbXBs ZXRpb24gKGUuZy4sIHRoZSBkZXZpY2UncyBTU0ggaG9zdC1rZXlzKS4KCiAgIEEgYm9vdHN0cmFw IHNlcnZlciBtYXkgYmUgYSB0cnVzdGVkIG9yIGFuIHVudHJ1c3RlZCBzb3VyY2Ugb2YKICAgYm9v dHN0cmFwcGluZyBkYXRhLCBkZXBlbmRpbmcgb24gaWYgdGhlIGRldmljZSBsZWFybmVkIGFib3V0 IHRoZQogICBib290c3RyYXAgc2VydmVyJ3MgdHJ1c3QgYW5jaG9yIGZyb20gYSB0cnVzdGVkIHNv dXJjZS4gIFdoZW4gYQogICBib290c3RyYXAgc2VydmVyIGlzIHRydXN0ZWQsIHRoZSBpbmZvcm1h dGlvbiByZXR1cm5lZCBmcm9tIGl0IE1BWSBiZQogICBzaWduZWQuICBIb3dldmVyLCB3aGVuIHRo ZSBzZXJ2ZXIgaXMgdW50cnVzdGVkLCBpbiBvcmRlciBmb3IgaXRzCiAgIGluZm9ybWF0aW9uIHRv IGJlIG9mIGFueSB1c2UgdG8gdGhlIGRldmljZSwgdGhlIGJvb3RzdHJhcCBpbmZvcm1hdGlvbgog ICBlaXRoZXIgTVVTVCBiZSBzaWduZWQgb3IgTVVTVCBiZSBpbmZvcm1hdGlvbiB0aGF0IGNhbiBi ZSBwcm9jZXNzZWQKICAgcHJvdmlzaW9uYWxseSAoZS5nLiwgdW5zaWduZWQgcmVkaXJlY3QgaW5m b3JtYXRpb24pLgoKICAgRnJvbSBhbiBhcnRpZmFjdCBwZXJzcGVjdGl2ZSwgc2luY2UgYSBib290 c3RyYXAgc2VydmVyIHByZXNlbnRzIGRhdGEKICAgY29uZm9ybWluZyB0byBhIFlBTkcgZGF0YSBt b2RlbCwgdGhlIGJvb3RzdHJhcHBpbmcgYXJ0aWZhY3RzIG5lZWQgdG8KCgoKV2F0c2VuLCBldCBh bC4gICAgICAgICAgRXhwaXJlcyBGZWJydWFyeSAxMCwgMjAxOSAgICAgICAgICAgICAgW1BhZ2Ug MTddCgwKSW50ZXJuZXQtRHJhZnQgICAgU2VjdXJlIFplcm8gVG91Y2ggUHJvdmlzaW9uaW5nIChT WlRQKSAgICAgIEF1Z3VzdCAyMDE4CgoKICAgYmUgbWFwcGVkIHRvIFlBTkcgbm9kZXMuICBUaGUg dGhyZWUgYXJ0aWZhY3RzIGRlZmluZWQgaW4gU2VjdGlvbiAzCiAgIGFyZSBtYXBwZWQgdG8gIm91 dHB1dCIgbm9kZXMgb2YgdGhlICJnZXQtYm9vdHN0cmFwcGluZy1kYXRhIiBSUEMKICAgZGVmaW5l ZCBpbiBTZWN0aW9uIDcuMyBiZWxvdy4KCiAgIEFydGlmYWN0IHRvIEJvb3RzdHJhcCBTZXJ2ZXIg TWFwcGluZzoKCiAgICAgIFplcm8gVG91Y2ggSW5mb3JtYXRpb246ICBNYXBwZWQgdG8gdGhlICJ6 ZXJvdG91Y2gtaW5mb3JtYXRpb24iCiAgICAgICAgIGxlYWYgaW4gdGhlIG91dHB1dCBvZiB0aGUg ImdldC1ib290c3RyYXBwaW5nLWRhdGEiIFJQQy4KCiAgICAgIE93bmVyIENlcnRpZmljYXRlOiAg TWFwcGVkIHRvIHRoZSAib3duZXItY2VydGlmaWNhdGUiIGxlYWYgaW4gdGhlCiAgICAgICAgIG91 dHB1dCBvZiB0aGUgImdldC1ib290c3RyYXBwaW5nLWRhdGEiIFJQQy4KCiAgICAgIE93bmVyc2hp cCBWb3VjaGVyOiAgTWFwcGVkIHRvIHRoZSAib3duZXJzaGlwLXZvdWNoZXIiIGxlYWYgaW4gdGhl CiAgICAgICAgIG91dHB1dCBvZiB0aGUgImdldC1ib290c3RyYXBwaW5nLWRhdGEiIFJQQy4KCiAg IFplcm8gdG91Y2ggYm9vdHN0cmFwIHNlcnZlcnMgaGF2ZSBvbmx5IHR3byBlbmRwb2ludHMsIG9u ZSBmb3IgdGhlCiAgICJnZXQtYm9vdHN0cmFwcGluZy1kYXRhIiBSUEMgYW5kIG9uZSBmb3IgdGhl ICJyZXBvcnQtcHJvZ3Jlc3MiIFJQQy4KICAgVGhlc2UgUlBDcyB1c2UgdGhlIGF1dGhlbnRpY2F0 ZWQgUkVTVENPTkYgdXNlcm5hbWUgdG8gaXNvbGF0ZSB0aGUKICAgZXhlY3V0aW9uIG9mIHRoZSBS UEMgZnJvbSBvdGhlciBkZXZpY2VzLgoKNS4gIERldmljZSBEZXRhaWxzCgogICBEZXZpY2VzIHN1 cHBvcnRpbmcgdGhlIGJvb3RzdHJhcHBpbmcgc3RyYXRlZ3kgZGVzY3JpYmVkIGluIHRoaXMKICAg ZG9jdW1lbnQgTVVTVCBoYXZlIHRoZSBwcmVjb25maWd1cmVkIHN0YXRlIGFuZCBib290c3RyYXBw aW5nIGxvZ2ljCiAgIGRlc2NyaWJlZCBpbiB0aGUgZm9sbG93aW5nIHNlY3Rpb25zLgoKNS4xLiAg SW5pdGlhbCBTdGF0ZQoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgpXYXRzZW4sIGV0IGFsLiAgICAg ICAgICBFeHBpcmVzIEZlYnJ1YXJ5IDEwLCAyMDE5ICAgICAgICAgICAgICBbUGFnZSAxOF0KDApJ bnRlcm5ldC1EcmFmdCAgICBTZWN1cmUgWmVybyBUb3VjaCBQcm92aXNpb25pbmcgKFNaVFApICAg ICAgQXVndXN0IDIwMTgKCgogICArLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLSsKICAgfCAgICAgICAgICAgICAgICAgICAgICAgICAg IDxkZXZpY2U+ICAgICAgICAgICAgICAgICAgICAgICAgICB8CiAgIHwgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgfAogICB8ICstLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0rIHwK ICAgfCB8ICAgICAgICAgICAgICAgICAgIDxyZWFkL3dyaXRlIHN0b3JhZ2U+ICAgICAgICAgICAg ICAgICAgfCB8CiAgIHwgfCAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgIHwgfAogICB8IHwgMS4gZmxhZyB0byBlbmFibGUgemVyb3RvdWNoIGJv b3RzdHJhcHBpbmcgc2V0IHRvICJ0cnVlIiB8IHwKICAgfCArLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tKyB8CiAgIHwgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgfAogICB8ICst LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0r IHwKICAgfCB8ICAgICAgICAgICAgICAgICAgIDxyZWFkLW9ubHkgc3RvcmFnZT4gICAgICAgICAg ICAgICAgICAgfCB8CiAgIHwgfCAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgIHwgfAogICB8IHwgMi4gVExTIGNsaWVudCBjZXJ0ICYgcmVsYXRl ZCBpbnRlcm1lZGlhdGUgY2VydGlmaWNhdGVzICB8IHwKICAgfCB8IDMuIGxpc3Qgb2YgdHJ1c3Rl ZCB3ZWxsLWtub3duIGJvb3RzdHJhcCBzZXJ2ZXJzICAgICAgICAgfCB8CiAgIHwgfCA0LiBsaXN0 IG9mIHRydXN0IGFuY2hvciBjZXJ0cyBmb3IgYm9vdHN0cmFwIHNlcnZlcnMgICAgIHwgfAogICB8 IHwgNS4gbGlzdCBvZiB0cnVzdCBhbmNob3IgY2VydHMgZm9yIG93bmVyc2hpcCB2b3VjaGVycyAg ICB8IHwKICAgfCArLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tKyB8CiAgIHwgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgfAogICB8ICAgKy0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tKyAgIHwKICAgfCAgIHwgICAgICAgICAgICAg ICAgIDxzZWN1cmUgc3RvcmFnZT4gICAgICAgICAgICAgICAgICAgIHwgICB8CiAgIHwgICB8ICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICB8ICAgfAog ICB8ICAgfCAgNi4gcHJpdmF0ZSBrZXkgZm9yIFRMUyBjbGllbnQgY2VydGlmaWNhdGUgICAgICAg ICAgfCAgIHwKICAgfCAgIHwgIDcuIHByaXZhdGUga2V5IGZvciBkZWNyeXB0aW5nIHplcm90b3Vj aCBhcnRpZmFjdHMgIHwgICB8CiAgIHwgICArLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0rICAgfAogICB8ICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIHwKICAgKy0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0rCgogICBFYWNo IG51bWJlcmVkIGl0ZW0gYmVsb3cgY29ycmVzcG9uZHMgdG8gYSBudW1iZXJlZCBpdGVtIGluIHRo ZQogICBkaWFncmFtIGFib3ZlLgoKICAgMS4gIERldmljZXMgTVVTVCBoYXZlIGEgY29uZmlndXJh YmxlIHZhcmlhYmxlIHRoYXQgaXMgdXNlZCB0byBlbmFibGUvCiAgICAgICBkaXNhYmxlIHplcm90 b3VjaCBib290c3RyYXBwaW5nLiAgVGhpcyB2YXJpYWJsZSBNVVNUIGJlIGVuYWJsZWQKICAgICAg IGJ5IGRlZmF1bHQgaW4gb3JkZXIgZm9yIHplcm90b3VjaCBib290c3RyYXBwaW5nIHRvIHJ1biB3 aGVuIHRoZQogICAgICAgZGV2aWNlIGZpcnN0IHBvd2VycyBvbi4gIEJlY2F1c2UgaXQgaXMgYSBn b2FsIHRoYXQgdGhlCiAgICAgICBjb25maWd1cmF0aW9uIGluc3RhbGxlZCBieSB0aGUgYm9vdHN0 cmFwcGluZyBwcm9jZXNzIGRpc2FibGVzCiAgICAgICB6ZXJvdG91Y2ggYm9vdHN0cmFwcGluZywg YW5kIGJlY2F1c2UgdGhlIGNvbmZpZ3VyYXRpb24gbWF5IGJlCiAgICAgICBtZXJnZWQgaW50byB0 aGUgZXhpc3RpbmcgY29uZmlndXJhdGlvbiwgdXNpbmcgYSBjb25maWd1cmF0aW9uCiAgICAgICBu b2RlIHRoYXQgcmVsaWVzIG9uIHByZXNlbmNlIGlzIE5PVCBSRUNPTU1FTkRFRCwgYXMgaXQgY2Fu bm90IGJlCiAgICAgICByZW1vdmVkIGJ5IHRoZSBtZXJnaW5nIHByb2Nlc3MuCgogICAyLiAgRGV2 aWNlcyB0aGF0IHN1cHBvcnQgbG9hZGluZyBib290c3RyYXBwaW5nIGRhdGEgZnJvbSBib290c3Ry YXAKICAgICAgIHNlcnZlcnMgKHNlZSBTZWN0aW9uIDQuNCkgU0hPVUxEIHBvc3Nlc3MgYSBUTFMt bGV2ZWwgY2xpZW50CiAgICAgICBjZXJ0aWZpY2F0ZSBhbmQgYW55IGludGVybWVkaWF0ZSBjZXJ0 aWZpY2F0ZXMgbGVhZGluZyB0byB0aGUKICAgICAgIGNlcnRpZmljYXRlJ3Mgd2VsbC1rbm93biB0 cnVzdC1hbmNob3IuICBUaGUgd2VsbC1rbm93biB0cnVzdAogICAgICAgYW5jaG9yIGNlcnRpZmlj YXRlIG1heSBiZSBhbiBpbnRlcm1lZGlhdGUgY2VydGlmaWNhdGUgb3IgYSBzZWxmLQogICAgICAg c2lnbmVkIHJvb3QgY2VydGlmaWNhdGUuICBUbyBzdXBwb3J0IGRldmljZXMgbm90IGhhdmluZyBh IGNsaWVudAogICAgICAgY2VydGlmaWNhdGUsIGRldmljZXMgTUFZLCBhbHRlcm5hdGl2ZWx5IG9y IGluIGFkZGl0aW9uIHRvLAogICAgICAgaWRlbnRpZnkgYW5kIGF1dGhlbnRpY2F0ZSB0aGVtc2Vs dmVzIHRvIHRoZSBib290c3RyYXAgc2VydmVyCgoKCldhdHNlbiwgZXQgYWwuICAgICAgICAgIEV4 cGlyZXMgRmVicnVhcnkgMTAsIDIwMTkgICAgICAgICAgICAgIFtQYWdlIDE5XQoMCkludGVybmV0 LURyYWZ0ICAgIFNlY3VyZSBaZXJvIFRvdWNoIFByb3Zpc2lvbmluZyAoU1pUUCkgICAgICBBdWd1 c3QgMjAxOAoKCiAgICAgICB1c2luZyBhbiBIVFRQIGF1dGhlbnRpY2F0aW9uIHNjaGVtZSwgYXMg YWxsb3dlZCBieSBTZWN0aW9uIDIuNSBpbgogICAgICAgW1JGQzgwNDBdOyBob3dldmVyLCB0aGlz IGRvY3VtZW50IGRvZXMgbm90IGRlZmluZSBhIG1lY2hhbmlzbSBmb3IKICAgICAgIG9wZXJhdG9y IGlucHV0IGVuYWJsaW5nLCBmb3IgZXhhbXBsZSwgdGhlIGVudGVyaW5nIG9mIGEgcGFzc3dvcmQu CgogICAzLiAgRGV2aWNlcyB0aGF0IHN1cHBvcnQgbG9hZGluZyBib290c3RyYXBwaW5nIGRhdGEg ZnJvbSB3ZWxsLWtub3duCiAgICAgICBib290c3RyYXAgc2VydmVycyBNVVNUIHBvc3Nlc3MgYSBs aXN0IG9mIHRoZSB3ZWxsLWtub3duIGJvb3RzdHJhcAogICAgICAgc2VydmVycy4gIENvbnNpc3Rl bnQgd2l0aCByZWRpcmVjdCBpbmZvcm1hdGlvbiAoU2VjdGlvbiAyLjEsIGVhY2gKICAgICAgIGJv b3RzdHJhcCBzZXJ2ZXIgY2FuIGJlIGlkZW50aWZpZWQgYnkgaXRzIGhvc3RuYW1lIG9yIElQIGFk ZHJlc3MsCiAgICAgICBhbmQgYW4gb3B0aW9uYWwgcG9ydC4KCiAgIDQuICBEZXZpY2VzIHRoYXQg c3VwcG9ydCBsb2FkaW5nIGJvb3RzdHJhcHBpbmcgZGF0YSBmcm9tIHdlbGwta25vd24KICAgICAg IGJvb3RzdHJhcCBzZXJ2ZXJzIE1VU1QgYWxzbyBwb3NzZXNzIGEgbGlzdCBvZiB0cnVzdCBhbmNo b3IKICAgICAgIGNlcnRpZmljYXRlcyB0aGF0IGNhbiBiZSB1c2VkIHRvIGF1dGhlbnRpY2F0ZSB0 aGUgd2VsbC1rbm93bgogICAgICAgYm9vdHN0cmFwIHNlcnZlcnMuICBGb3IgZWFjaCB0cnVzdCBh bmNob3IgY2VydGlmaWNhdGUsIGlmIGl0IGlzCiAgICAgICBub3QgaXRzZWxmIGEgc2VsZi1zaWdu ZWQgcm9vdCBjZXJ0aWZpY2F0ZSwgdGhlIGRldmljZSBTSE9VTEQgYWxzbwogICAgICAgcG9zc2Vz cyB0aGUgY2hhaW4gb2YgaW50ZXJtZWRpYXRlIGNlcnRpZmljYXRlcyBsZWFkaW5nIHVwIHRvIGFu ZAogICAgICAgaW5jbHVkaW5nIHRoZSBzZWxmLXNpZ25lZCByb290IGNlcnRpZmljYXRlLgoKICAg NS4gIERldmljZXMgdGhhdCBzdXBwb3J0IGxvYWRpbmcgc2lnbmVkIGRhdGEgKHNlZSBTZWN0aW9u IDEuMikgTVVTVAogICAgICAgcG9zc2VzcyB0aGUgdHJ1c3QgYW5jaG9yIGNlcnRpZmljYXRlcyBm b3IgdmFsaWRhdGluZyBvd25lcnNoaXAKICAgICAgIHZvdWNoZXJzLiAgRm9yIGVhY2ggdHJ1c3Qg YW5jaG9yIGNlcnRpZmljYXRlLCBpZiBpdCBpcyBub3QgaXRzZWxmCiAgICAgICBhIHNlbGYtc2ln bmVkIHJvb3QgY2VydGlmaWNhdGUsIHRoZSBkZXZpY2UgU0hPVUxEIGFsc28gcG9zc2VzcwogICAg ICAgdGhlIGNoYWluIG9mIGludGVybWVkaWF0ZSBjZXJ0aWZpY2F0ZXMgbGVhZGluZyB1cCB0byBh bmQKICAgICAgIGluY2x1ZGluZyB0aGUgc2VsZi1zaWduZWQgcm9vdCBjZXJ0aWZpY2F0ZS4KCiAg IDYuICBEZXZpY2VzIHRoYXQgc3VwcG9ydCB1c2luZyBhIFRMUy1sZXZlbCBjbGllbnQgY2VydGlm aWNhdGUgdG8KICAgICAgIGlkZW50aWZ5IGFuZCBhdXRoZW50aWNhdGUgdGhlbXNlbHZlcyB0byBh IGJvb3RzdHJhcCBzZXJ2ZXIgTVVTVAogICAgICAgcG9zc2VzcyB0aGUgcHJpdmF0ZSBrZXkgdGhh dCBjb3JyZXNwb25kcyB0byB0aGUgcHVibGljIGtleQogICAgICAgZW5jb2RlZCBpbiB0aGUgVExT LWxldmVsIGNsaWVudCBjZXJ0aWZpY2F0ZS4gIFRoaXMgcHJpdmF0ZSBrZXkKICAgICAgIFNIT1VM RCBiZSBzZWN1cmVseSBzdG9yZWQsIGlkZWFsbHkgaW4gYSBjcnlwdG9ncmFwaGljIHByb2Nlc3Nv cgogICAgICAgKGUuZy4sIGEgVFBNKS4KCiAgIDcuICBEZXZpY2VzIHRoYXQgc3VwcG9ydCBkZWNy eXB0aW5nIHplcm90b3VjaCBhcnRpZmFjdHMgTVVTVCBwb3NzZXMKICAgICAgIHRoZSBwcml2YXRl IGtleSB0aGF0IGNvcnJlc3BvbmRzIHRvIHRoZSBwdWJsaWMga2V5IGVuY29kZWQgaW4gdGhlCiAg ICAgICBzZWN1cmUgZGV2aWNlIGlkZW50aXR5IGNlcnRpZmljYXRlIHVzZWQgd2hlbiBlbmNyeXB0 aW5nIHRoZQogICAgICAgYXJ0aWZhY3RzLiAgVGhpcyBwcml2YXRlIGtleSBTSE9VTEQgYmUgc2Vj dXJlbHkgc3RvcmVkLCBpZGVhbGx5CiAgICAgICBpbiBhIGNyeXB0b2dyYXBoaWMgcHJvY2Vzc29y IChlLmcuLCBhIFRQTSkuICBUaGlzIHByaXZhdGUga2V5IE1BWQogICAgICAgYmUgdGhlIHNhbWUg YXMgdGhlIG9uZSBhc3NvY2lhdGVkIHRvIHRoZSBUTFMtbGV2ZWwgY2xpZW50CiAgICAgICBjZXJ0 aWZpY2F0ZSB1c2VkIHdoZW4gY29ubmVjdGluZyB0byBib290c3RyYXAgc2VydmVycy4KCiAgIEEg WUFORyBtb2R1bGUgcmVwcmVzZW50aW5nIHRoaXMgZGF0YSBpcyBwcm92aWRlZCBpbiBBcHBlbmRp eCBBLgoKNS4yLiAgQm9vdCBTZXF1ZW5jZQoKICAgQSBkZXZpY2UgY2xhaW1pbmcgdG8gc3VwcG9y dCB0aGUgYm9vdHN0cmFwcGluZyBzdHJhdGVneSBkZWZpbmVkIGluCiAgIHRoaXMgZG9jdW1lbnQg TVVTVCBzdXBwb3J0IHRoZSBib290IHNlcXVlbmNlIGRlc2NyaWJlZCBpbiB0aGlzCiAgIHNlY3Rp b24uCgoKCgpXYXRzZW4sIGV0IGFsLiAgICAgICAgICBFeHBpcmVzIEZlYnJ1YXJ5IDEwLCAyMDE5 ICAgICAgICAgICAgICBbUGFnZSAyMF0KDApJbnRlcm5ldC1EcmFmdCAgICBTZWN1cmUgWmVybyBU b3VjaCBQcm92aXNpb25pbmcgKFNaVFApICAgICAgQXVndXN0IDIwMTgKCgogICAgICAgUG93ZXIg T24KICAgICAgICAgICB8CiAgICAgICAgICAgdiAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgTm8KICAgIDEuIFplcm90b3VjaCBib290c3RyYXBwaW5nIGNvbmZpZ3VyZWQgLS0tLS0tPiBC b290IG5vcm1hbGx5CiAgICAgICAgICAgfAogICAgICAgICAgIHwgWWVzCiAgICAgICAgICAgdgog ICAgMi4gRm9yIGVhY2ggc3VwcG9ydGVkIHNvdXJjZSBvZiBib290c3RyYXBwaW5nIGRhdGEsCiAg ICAgICB0cnkgdG8gbG9hZCBib290c3RyYXBwaW5nIGRhdGEgZnJvbSB0aGUgc291cmNlCiAgICAg ICAgICAgfAogICAgICAgICAgIHwKICAgICAgICAgICB2ICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgIFllcwogICAgMy4gQWJsZSB0byBib290c3RyYXAgZnJvbSBhbnkgc291cmNlPyAtLS0t LT4gUnVuIHdpdGggbmV3IGNvbmZpZwogICAgICAgICAgIHwKICAgICAgICAgICB8IE5vCiAgICAg ICAgICAgdgogICAgNC4gTG9vcCBhbmQvb3Igd2FpdCBmb3IgbWFudWFsIHByb3Zpc2lvbmluZy4K CgogICBFYWNoIG51bWJlcmVkIGl0ZW0gYmVsb3cgY29ycmVzcG9uZHMgdG8gYSBudW1iZXJlZCBp dGVtIGluIHRoZQogICBkaWFncmFtIGFib3ZlLgoKICAgMS4gIFdoZW4gdGhlIGRldmljZSBwb3dl cnMgb24sIGl0IGZpcnN0IGNoZWNrcyB0byBzZWUgaWYgemVyb3RvdWNoCiAgICAgICBib290c3Ry YXBwaW5nIGlzIGNvbmZpZ3VyZWQsIGFzIGlzIGV4cGVjdGVkIHRvIGJlIHRoZSBjYXNlIGZvcgog ICAgICAgdGhlIGRldmljZSdzIHByZWNvbmZpZ3VyZWQgaW5pdGlhbCBzdGF0ZS4gIElmIHplcm90 b3VjaAogICAgICAgYm9vdHN0cmFwcGluZyBpcyBub3QgY29uZmlndXJlZCwgdGhlbiB0aGUgZGV2 aWNlIGJvb3RzIG5vcm1hbGx5LgoKICAgMi4gIFRoZSBkZXZpY2UgaXRlcmF0ZXMgb3ZlciBpdHMg bGlzdCBvZiBzb3VyY2VzIGZvciBib290c3RyYXBwaW5nCiAgICAgICBkYXRhIChTZWN0aW9uIDQp LiAgRGV0YWlscyBmb3IgaG93IHRvIHByb2Nlc3NlcyBhIHNvdXJjZSBvZgogICAgICAgYm9vdHN0 cmFwcGluZyBkYXRhIGFyZSBwcm92aWRlZCBpbiBTZWN0aW9uIDUuMy4KCiAgIDMuICBJZiB0aGUg ZGV2aWNlIGlzIGFibGUgdG8gYm9vdHN0cmFwIGl0c2VsZiBmcm9tIGFueSBvZiB0aGUgc291cmNl cwogICAgICAgb2YgYm9vdHN0cmFwcGluZyBkYXRhLCBpdCBydW5zIHdpdGggdGhlIG5ldyBib290 c3RyYXBwZWQKICAgICAgIGNvbmZpZ3VyYXRpb24uCgogICA0LiAgT3RoZXJ3aXNlIHRoZSBkZXZp Y2UgTUFZIGxvb3AgYmFjayB0aHJvdWdoIHRoZSBsaXN0IG9mCiAgICAgICBib290c3RyYXBwaW5n IHNvdXJjZXMgYWdhaW4gYW5kL29yIHdhaXQgZm9yIG1hbnVhbCBwcm92aXNpb25pbmcuCgo1LjMu ICBQcm9jZXNzaW5nIGEgU291cmNlIG9mIEJvb3RzdHJhcHBpbmcgRGF0YQoKICAgVGhpcyBzZWN0 aW9uIGRlc2NyaWJlcyBhIHJlY3Vyc2l2ZSBhbGdvcml0aG0gdGhhdCBkZXZpY2VzIGNhbiB1c2Ug dG8sCiAgIHVsdGltYXRlbHksIG9idGFpbiBvbmJvYXJkaW5nIGluZm9ybWF0aW9uLiAgVGhlIGFs Z29yaXRobSBpcwogICByZWN1cnNpdmUgYmVjYXVzZSBzb3VyY2VzIG9mIGJvb3RzdHJhcHBpbmcg ZGF0YSBtYXkgcmV0dXJuIHJlZGlyZWN0CiAgIGluZm9ybWF0aW9uLCB3aGljaCBjYXVzZXMgdGhl IGFsZ29yaXRobSB0byBydW4gYWdhaW4sIGZvciB0aGUgbmV3bHkKICAgZGlzY292ZXJlZCBzb3Vy Y2VzIG9mIGJvb3RzdHJhcHBpbmcgaW5mb3JtYXRpb24uICBBbiBleHByZXNzaW9uIHRoYXQKICAg Y2FwdHVyZXMgYWxsIHBvc3NpYmxlIHN1Y2Nlc3NmdWwgc2VxdWVuY2VzIG9mIGJvb3RzdHJhcHBp bmcKICAgaW5mb3JtYXRpb24gaXMgemVybyBvciBtb3JlIHJlZGlyZWN0IGluZm9ybWF0aW9uIHJl c3BvbnNlcywgZm9sbG93ZWQKICAgYnkgb25lIG9uYm9hcmRpbmcgaW5mb3JtYXRpb24gcmVzcG9u c2UuCgoKCldhdHNlbiwgZXQgYWwuICAgICAgICAgIEV4cGlyZXMgRmVicnVhcnkgMTAsIDIwMTkg ICAgICAgICAgICAgIFtQYWdlIDIxXQoMCkludGVybmV0LURyYWZ0ICAgIFNlY3VyZSBaZXJvIFRv dWNoIFByb3Zpc2lvbmluZyAoU1pUUCkgICAgICBBdWd1c3QgMjAxOAoKCiAgIEFuIGltcG9ydGFu dCBhc3BlY3Qgb2YgdGhlIGFsZ29yaXRobSBpcyBrbm93aW5nIHdoZW4gZGF0YSBuZWVkcyB0byBi ZQogICBzaWduZWQgb3Igbm90LiAgVGhlIGZvbGxvd2luZyBmaWd1cmUgcHJvdmlkZXMgYSBzdW1t YXJ5IG9mIG9wdGlvbnM6CgogICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICBVbnRy dXN0ZWQgU291cmNlICBUcnVzdGVkIFNvdXJjZQogICAgICAgS2luZCBvZiBCb290c3RyYXBwaW5n IERhdGEgICAgIENhbiBQcm92aWRlPyAgICAgQ2FuIFByb3ZpZGU/CgogICAgICAgVW5zaWduZWQg UmVkaXJlY3QgSW5mbyAgICAgOiAgICAgICBZZXMrICAgICAgICAgICAgIFllcwogICAgICAgU2ln bmVkIFJlZGlyZWN0IEluZm8gICAgICAgOiAgICAgICBZZXMgICAgICAgICAgICAgIFllcyoKICAg ICAgIFVuc2lnbmVkIE9uYm9hcmRpbmcgSW5mbyAgIDogICAgICAgIE5vICAgICAgICAgICAgICBZ ZXMKICAgICAgIFNpZ25lZCBPbmJvYXJkaW5nIEluZm8gICAgIDogICAgICAgWWVzICAgICAgICAg ICAgICBZZXMqCgogICAgICAgVGhlICcrJyBhYm92ZSBkZW5vdGVzIHRoYXQgdGhlIHNvdXJjZSBy ZWRpcmVjdGVkIHRvIE1VU1QKICAgICAgIHJldHVybiBzaWduZWQgZGF0YSwgb3IgbW9yZSB1bnNp Z25lZCByZWRpcmVjdCBpbmZvcm1hdGlvbi4KCiAgICAgICBUaGUgJyonIGFib3ZlIGRlbm90ZXMg dGhhdCwgd2hpbGUgcG9zc2libGUsIGl0IGlzIGdlbmVyYWxseQogICAgICAgdW5uZWNlc3Nhcnkg Zm9yIGEgdHJ1c3RlZCBzb3VyY2UgdG8gcmV0dXJuIHNpZ25lZCBkYXRhLgoKICAgVGhlIHJlY3Vy c2l2ZSBhbGdvcml0aG0gdXNlcyBhIGNvbmNlcHR1YWwgZ2xvYmFsLXNjb3BlZCB2YXJpYWJsZQog ICBjYWxsZWQgInRydXN0LXN0YXRlIi4gIFRoZSB0cnVzdC1zdGF0ZSB2YXJpYWJsZSBpcyBpbml0 aWFsaXplZCB0bwogICBGQUxTRS4gIFRoZSB1bHRpbWF0ZSBnb2FsIG9mIHRoaXMgYWxnb3JpdGht IGlzIGZvciB0aGUgZGV2aWNlIHRvCiAgIHByb2Nlc3Mgb25ib2FyZGluZyBpbmZvcm1hdGlvbiAo U2VjdGlvbiAyLjIpIHdoaWxlIHRoZSB0cnVzdC1zdGF0ZQogICB2YXJpYWJsZSBpcyBUUlVFLgoK ICAgSWYgdGhlIHNvdXJjZSBvZiBib290c3RyYXBwaW5nIGRhdGEgKFNlY3Rpb24gNCkgaXMgYSBi b290c3RyYXAgc2VydmVyCiAgIChTZWN0aW9uIDQuNCksIGFuZCB0aGUgZGV2aWNlIGlzIGFibGUg dG8gYXV0aGVudGljYXRlIHRoZSBib290c3RyYXAKICAgc2VydmVyIHVzaW5nIFguNTA5IGNlcnRp ZmljYXRlIHBhdGggdmFsaWRhdGlvbiAoW1JGQzYxMjVdLCBTZWN0aW9uIDYpCiAgIHRvIG9uZSBv ZiB0aGUgZGV2aWNlJ3MgcHJlY29uZmlndXJlZCB0cnVzdCBhbmNob3JzLCBvciB0byBhIHRydXN0 CiAgIGFuY2hvciB0aGF0IGl0IGxlYXJuZWQgZnJvbSBhIHByZXZpb3VzIHN0ZXAsIHRoZW4gdGhl IGRldmljZSBNVVNUIHNldAogICB0cnVzdC1zdGF0ZSB0byBUUlVFLgoKICAgV2hlbiBlc3RhYmxp c2hpbmcgYSBjb25uZWN0aW9uIHRvIGEgdHJ1c3RlZCBib290c3RyYXAgc2VydmVyIChpLmUuCiAg IHRydXN0LXN0YXRlIGlzIFRSVUUpLCB0aGUgZGV2aWNlIE1BWSwgcGVyIFNlY3Rpb24gMi41IGlu IFtSRkM4MDQwXSwKICAgaWRlbnRpZnkgYW5kIGF1dGhlbnRpY2F0ZSBpdHNlbGYgdG8gdGhlIGJv b3RzdHJhcCBzZXJ2ZXIgdXNpbmcgYSBUTFMtCiAgIGxldmVsIGNsaWVudCBjZXJ0aWZpY2F0ZSBh bmQvb3IgYW4gSFRUUCBhdXRoZW50aWNhdGlvbiBzY2hlbWUuICBJZgogICBib3RoIG1lY2hhbmlz bXMgYXJlIHVzZWQsIHRoZXkgTVVTVCBib3RoIGlkZW50aWZ5IHRoZSBzYW1lIGRldmljZQogICB1 c2luZyBpdHMgc2VyaWFsIG51bWJlci4KCiAgIFdoZW4gZXN0YWJsaXNoaW5nIGEgY29ubmVjdGlv biB0byBhbiB1bnRydXN0ZWQgYm9vdHN0cmFwIHNlcnZlciAoaS5lLgogICB0cnVzdC1zdGF0ZSBp cyBGQUxTRSksIGl0IGlzIHN0aWxsIG5lY2Vzc2FyeSBmb3IgdGhlIGRldmljZSB0bwogICBpZGVu dGlmeSBpdHNlbGYsIGluIG9yZGVyIHRvIHJlY2VpdmUgZGV2aWNlLXNwZWNpZmljIHNpZ25lZCBk YXRhLCBkdWUKICAgdG8gdGhlIG93bmVyc2hpcCB2b3VjaGVyIGVuY29kaW5nIHRoZSBkZXZpY2Un cyBzZXJpYWwgbnVtYmVyLiAgVGhlCiAgIGRldmljZSBNVVNUIGlkZW50aWZ5IGFuZCBhdXRoZW50 aWNhdGUgaXRzZWxmIHRvIHRoZSBib290c3RyYXAgc2VydmVyCiAgIHVzaW5nIGEgVExTLWxldmVs IGNsaWVudCBjZXJ0aWZpY2F0ZSBhbmQvb3IgYW4gSFRUUCBhdXRoZW50aWNhdGlvbgogICBzY2hl bWUuICBIb3dldmVyLCBiZWNhdXNlIHRoZSBib290c3RyYXAgc2VydmVyIGlzIHVudHJ1c3RlZCwg dGhlCiAgIGRldmljZSBNVVNUIE5PVCB1c2UgYW4gYXV0aGVudGljYXRpb24gc2NoZW1lIHRoYXQg Y29udmV5cyBhIHNoYXJlZAogICBzZWNyZXQsIHN1Y2ggYXMgYSBwYXNzd29yZC4KCgoKCgpXYXRz ZW4sIGV0IGFsLiAgICAgICAgICBFeHBpcmVzIEZlYnJ1YXJ5IDEwLCAyMDE5ICAgICAgICAgICAg ICBbUGFnZSAyMl0KDApJbnRlcm5ldC1EcmFmdCAgICBTZWN1cmUgWmVybyBUb3VjaCBQcm92aXNp b25pbmcgKFNaVFApICAgICAgQXVndXN0IDIwMTgKCgogICBXaGVuIHNlbmRpbmcgYSBjbGllbnQg Y2VydGlmaWNhdGUsIHRoZSBkZXZpY2UgTVVTVCBhbHNvIHNlbmQgYWxsIHRoZQogICBpbnRlcm1l ZGlhdGUgY2VydGlmaWNhdGVzIGxlYWRpbmcgdXAgdG8sIGFuZCBvcHRpb25hbGx5IGluY2x1ZGlu ZywKICAgdGhlIGNsaWVudCBjZXJ0aWZpY2F0ZSdzIHdlbGwta25vd24gdHJ1c3QgYW5jaG9yIGNl cnRpZmljYXRlLgoKICAgRm9yIGFueSBzb3VyY2Ugb2YgYm9vdHN0cmFwcGluZyBkYXRhIChlLmcu LCBTZWN0aW9uIDQpLCBpZiBhbnkKICAgYXJ0aWZhY3Qgb2J0YWluZWQgaXMgZW5jcnlwdGVkLCB0 aGUgZGV2aWNlIE1VU1QgZmlyc3QgZGVjcnlwdCBpdAogICB1c2luZyB0aGUgcHJpdmF0ZSBrZXkg YXNzb2NpYXRlZCB3aXRoIHRoZSBkZXZpY2UgY2VydGlmaWNhdGUgdXNlZCB0bwogICBlbmNyeXB0 IHRoZSBhcnRpZmFjdC4KCiAgIElmIHRoZSB6ZXJvIHRvdWNoIGluZm9ybWF0aW9uIGFydGlmYWN0 IGlzIHNpZ25lZCwgYW5kIHRoZSBkZXZpY2UgaXMKICAgYWJsZSB0byB2YWxpZGF0ZSB0aGUgc2ln bmVkIGRhdGEgdXNpbmcgdGhlIGFsZ29yaXRobSBkZXNjcmliZWQgaW4KICAgU2VjdGlvbiA1LjQs IHRoZW4gdGhlIGRldmljZSBNVVNUIHNldCB0cnVzdC1zdGF0ZSB0byBUUlVFOyBvdGhlcndpc2Us CiAgIGlmIHRoZSBkZXZpY2UgaXMgdW5hYmxlIHRvIHZhbGlkYXRlIHRoZSBzaWduZWQgZGF0YSwg dGhlIGRldmljZSBNVVNUCiAgIHNldCB0cnVzdC1zdGF0ZSB0byBGQUxTRS4gIE5vdGUsIHRoaXMg aXMgd29yZGVkIHRvIGNvdmVyIHRoZSBzcGVjaWFsCiAgIGNhc2Ugd2hlbiBzaWduZWQgZGF0YSBp cyByZXR1cm5lZCBldmVuIGZyb20gYSB0cnVzdGVkIGJvb3RzdHJhcAogICBzZXJ2ZXIuCgogICBJ ZiB0aGUgemVybyB0b3VjaCBpbmZvcm1hdGlvbiBhcnRpZmFjdCBjb250YWlucyBvbmJvYXJkaW5n CiAgIGluZm9ybWF0aW9uLCBhbmQgdHJ1c3Qtc3RhdGUgaXMgRkFMU0UsIHRoZSBkZXZpY2UgTVVT VCBleGl0IHRoZQogICByZWN1cnNpdmUgYWxnb3JpdGhtIChhcyB0aGlzIGlzIG5vdCBhbGxvd2Vk LCBzZWUgdGhlIGZpZ3VyZSBhYm92ZSksCiAgIHJldHVybmluZyB0byB0aGUgYm9vdHN0cmFwcGlu ZyBzZXF1ZW5jZSBkZXNjcmliZWQgaW4gU2VjdGlvbiA1LjIuCiAgIE90aGVyd2lzZSwgdGhlIGRl dmljZSBNVVNUIGF0dGVtcHQgdG8gcHJvY2VzcyB0aGUgb25ib2FyZGluZwogICBpbmZvcm1hdGlv biBhcyBkZXNjcmliZWQgaW4gU2VjdGlvbiA1LjYuICBJbiBlaXRoZXIgY2FzZSwgc3VjY2VzcyBv cgogICBmYWlsdXJlLCB0aGUgZGV2aWNlIE1VU1QgZXhpdCB0aGUgcmVjdXJzaXZlIGFsZ29yaXRo bSwgcmV0dXJuaW5nIHRvCiAgIHRoZSBib290c3RyYXBwaW5nIHNlcXVlbmNlIGRlc2NyaWJlZCBp biBTZWN0aW9uIDUuMiwgdGhlIG9ubHkKICAgZGlmZmVyZW5jZSBiZWluZyBpbiBob3cgaXQgcmVz cG9uZHMgdG8gdGhlICJBYmxlIHRvIGJvb3RzdHJhcCBmcm9tCiAgIGFueSBzb3VyY2U/IiBjb25k aXRpb25hbCBkZXNjcmliZWQgaW4gdGhlIGZpZ3VyZSBpbiB0aGUgc2VjdGlvbi4KCiAgIElmIHRo ZSB6ZXJvIHRvdWNoIGluZm9ybWF0aW9uIGFydGlmYWN0IGNvbnRhaW5zIHJlZGlyZWN0IGluZm9y bWF0aW9uLAogICB0aGUgZGV2aWNlIE1VU1QsIHdpdGhpbiBsaW1pdHMgb2YgaG93IG1hbnkgcmVj dXJzaXZlIGxvb3BzIHRoZSBkZXZpY2UKICAgYWxsb3dzLCBwcm9jZXNzIHRoZSByZWRpcmVjdCBp bmZvcm1hdGlvbiBhcyBkZXNjcmliZWQgaW4gU2VjdGlvbiA1LjUuCiAgIFRoaXMgaXMgdGhlIHJl Y3Vyc2lvbiBzdGVwLCBpdCB3aWxsIGNhdXNlIHRoZSBkZXZpY2UgdG8gcmVlbnRlciB0aGlzCiAg IGFsZ29yaXRobSwgYnV0IHRoaXMgdGltZSB0aGUgZGF0YSBzb3VyY2Ugd2lsbCBkZWZpbml0ZWx5 IGJlIGEKICAgYm9vdHN0cmFwIHNlcnZlciwgYXMgdGhhdCBpcyBhbGwgcmVkaXJlY3QgaW5mb3Jt YXRpb24gaXMgYWJsZSB0bwogICByZWRpcmVjdCBhIGRldmljZSB0by4KCjUuNC4gIFZhbGlkYXRp bmcgU2lnbmVkIERhdGEKCiAgIFdoZW5ldmVyIGEgZGV2aWNlIGlzIHByZXNlbnRlZCBzaWduZWQg ZGF0YSwgaXQgTVVTVCB2YWxpZGF0ZSB0aGUKICAgc2lnbmVkIGRhdGEgYXMgZGVzY3JpYmVkIGlu IHRoaXMgc2VjdGlvbi4gIFRoaXMgaW5jbHVkZXMgdGhlIGNhc2UKICAgd2hlcmUgdGhlIHNpZ25l ZCBkYXRhIGlzIHByb3ZpZGVkIGJ5IGEgdHJ1c3RlZCBzb3VyY2UuCgogICBXaGVuZXZlciB0aGVy ZSBpcyBzaWduZWQgZGF0YSwgdGhlIGRldmljZSBNVVNUIGFsc28gYmUgcHJvdmlkZWQgYW4KICAg b3duZXJzaGlwIHZvdWNoZXIgYW5kIGFuIG93bmVyIGNlcnRpZmljYXRlLiAgSG93IGFsbCB0aGUg bmVlZGVkCiAgIGFydGlmYWN0cyBhcmUgcHJvdmlkZWQgZm9yIGVhY2ggc291cmNlIG9mIGJvb3Rz dHJhcHBpbmcgZGF0YSBpcwogICBkZXNjcmliZWQgaW4gU2VjdGlvbiA0LgoKCgoKCldhdHNlbiwg ZXQgYWwuICAgICAgICAgIEV4cGlyZXMgRmVicnVhcnkgMTAsIDIwMTkgICAgICAgICAgICAgIFtQ YWdlIDIzXQoMCkludGVybmV0LURyYWZ0ICAgIFNlY3VyZSBaZXJvIFRvdWNoIFByb3Zpc2lvbmlu ZyAoU1pUUCkgICAgICBBdWd1c3QgMjAxOAoKCiAgIEluIG9yZGVyIHRvIHZhbGlkYXRlIHNpZ25l ZCBkYXRhLCB0aGUgZGV2aWNlIE1VU1QgZmlyc3QgYXV0aGVudGljYXRlCiAgIHRoZSBvd25lcnNo aXAgdm91Y2hlciBieSB2YWxpZGF0aW5nIGl0cyBzaWduYXR1cmUgdG8gb25lIG9mIGl0cwogICBw cmVjb25maWd1cmVkIHRydXN0IGFuY2hvcnMgKHNlZSBTZWN0aW9uIDUuMSksIHdoaWNoIG1heSBl bnRhaWwgdXNpbmcKICAgYWRkaXRpb25hbCBpbnRlcm1lZGlhdGUgY2VydGlmaWNhdGVzIGF0dGFj aGVkIHRvIHRoZSBvd25lcnNoaXAKICAgdm91Y2hlci4gIElmIHRoZSBkZXZpY2UgaGFzIGFuIGFj Y3VyYXRlIGNsb2NrLCBpdCBNVVNUIHZlcmlmeSB0aGF0CiAgIHRoZSBvd25lcnNoaXAgdm91Y2hl ciB3YXMgY3JlYXRlZCBpbiB0aGUgcGFzdCAoaS5lLiwgImNyZWF0ZWQtb24iIDwKICAgbm93KSBh bmQsIGlmIHRoZSAiZXhwaXJlcy1vbiIgbGVhZiBpcyBwcmVzZW50LCB0aGUgZGV2aWNlIE1VU1Qg dmVyaWZ5CiAgIHRoYXQgdGhlIG93bmVyc2hpcCB2b3VjaGVyIGhhcyBub3QgeWV0IGV4cGlyZWQg KGkuZS4sIG5vdyA8ICJleHBpcmVzLQogICBvbiIpLiAgVGhlIGRldmljZSBNVVNUIHZlcmlmeSB0 aGF0IHRoZSBvd25lcnNoaXAgdm91Y2hlcidzCiAgICJhc3NlcnRpb24iIHZhbHVlIGlzIGFjY2Vw dGFibGUgKGUuZy4sIHNvbWUgZGV2aWNlcyBtYXkgb25seSBhY2NlcHQKICAgdGhlIGFzc2VydGlv biB2YWx1ZSAidmVyaWZpZWQiKS4gIFRoZSBkZXZpY2UgTVVTVCB2ZXJpZnkgdGhhdCB0aGUKICAg b3duZXJzaGlwIHZvdWNoZXIgc3BlY2lmaWVzIHRoZSBkZXZpY2UncyBzZXJpYWwgbnVtYmVyIGlu IHRoZQogICAic2VyaWFsLW51bWJlciIgbGVhZi4gIElmIHRoZSAiaWRldmlkLWlzc3VlciIgbGVh ZiBpcyBwcmVzZW50LCB0aGUKICAgZGV2aWNlIE1VU1QgdmVyaWZ5IHRoYXQgdGhlIHZhbHVlIGlz IHNldCBjb3JyZWN0bHkuICBJZiB0aGUKICAgYXV0aGVudGljYXRpb24gb2YgdGhlIG93bmVyc2hp cCB2b3VjaGVyIGlzIHN1Y2Nlc3NmdWwsIHRoZSBkZXZpY2UKICAgZXh0cmFjdHMgdGhlICJwaW5u ZWQtZG9tYWluLWNlcnQiIG5vZGUsIGFuIFguNTA5IGNlcnRpZmljYXRlLCB0aGF0IGlzCiAgIG5l ZWRlZCB0byB2ZXJpZnkgdGhlIG93bmVyIGNlcnRpZmljYXRlIGluIHRoZSBuZXh0IHN0ZXAuCgog ICBUaGUgZGV2aWNlIE1VU1QgbmV4dCBhdXRoZW50aWNhdGUgdGhlIG93bmVyIGNlcnRpZmljYXRl IGJ5IHBlcmZvcm1pbmcKICAgWC41MDkgY2VydGlmaWNhdGUgcGF0aCB2ZXJpZmljYXRpb24gdG8g dGhlIHRydXN0ZWQgY2VydGlmaWNhdGUKICAgZXh0cmFjdGVkIGZyb20gdGhlIG93bmVyc2hpcCB2 b3VjaGVyJ3MgInBpbm5lZC1kb21haW4tY2VydCIgbm9kZS4KICAgVGhpcyB2ZXJpZmljYXRpb24g bWF5IGVudGFpbCB1c2luZyBhZGRpdGlvbmFsIGludGVybWVkaWF0ZQogICBjZXJ0aWZpY2F0ZXMg YXR0YWNoZWQgdG8gdGhlIG93bmVyIGNlcnRpZmljYXRlIGFydGlmYWN0LiAgSWYgdGhlCiAgIG93 bmVyc2hpcCB2b3VjaGVyJ3MgImRvbWFpbi1jZXJ0LXJldm9jYXRpb24tY2hlY2tzIiBub2RlJ3Mg dmFsdWUgaXMKICAgc2V0IHRvICJ0cnVlIiwgdGhlIGRldmljZSBNVVNUIHZlcmlmeSB0aGUgcmV2 b2NhdGlvbiBzdGF0dXMgb2YgdGhlCiAgIGNlcnRpZmljYXRlIGNoYWluIHVzZWQgdG8gc2lnbiB0 aGUgb3duZXIgY2VydGlmaWNhdGUgYW5kLCBpZgogICBzdWl0YWJseS1mcmVzaCByZXZvY2F0aW9u IHN0YXR1cyBpcyB1bmF0dGFpbmFibGUgb3IgaWYgaXQgaXMKICAgZGV0ZXJtaW5lZCB0aGF0IGEg Y2VydGlmaWNhdGUgaGFzIGJlZW4gcmV2b2tlZCwgdGhlIGRldmljZSBNVVNUIE5PVAogICB2YWxp ZGF0ZSB0aGUgb3duZXIgY2VydGlmaWNhdGUuCgogICBGaW5hbGx5IHRoZSBkZXZpY2UgTVVTVCB2 ZXJpZnkgdGhlIHplcm8gdG91Y2ggaW5mb3JtYXRpb24gYXJ0aWZhY3QKICAgd2FzIHNpZ25lZCBi eSB0aGUgdmFsaWRhdGVkIG93bmVyIGNlcnRpZmljYXRlLgoKICAgSWYgYW55IG9mIHRoZXNlIHN0 ZXBzIGZhaWwsIHRoZSBkZXZpY2UgTVVTVCBpbnZhbGlkYXRlIHRoZSBzaWduZWQKICAgZGF0YSBh bmQgbm90IHBlcmZvcm0gYW55IHN1YnNlcXVlbnQgc3RlcHMuCgo1LjUuICBQcm9jZXNzaW5nIFJl ZGlyZWN0IEluZm9ybWF0aW9uCgogICBJbiBvcmRlciB0byBwcm9jZXNzIHJlZGlyZWN0IGluZm9y bWF0aW9uIChTZWN0aW9uIDIuMSksIHRoZSBkZXZpY2UKICAgTVVTVCBmb2xsb3cgdGhlIHN0ZXBz IHByZXNlbnRlZCBpbiB0aGlzIHNlY3Rpb24uCgogICBQcm9jZXNzaW5nIHJlZGlyZWN0IGluZm9y bWF0aW9uIGlzIHN0cmFpZ2h0Zm9yd2FyZCwgdGhlIGRldmljZQogICBzZXF1ZW50aWFsbHkgc3Rl cHMgdGhyb3VnaCB0aGUgbGlzdCBvZiBwcm92aWRlZCBib290c3RyYXAgc2VydmVycwogICB1bnRp bCBpdCBjYW4gZmluZCBvbmUgaXQgY2FuIGJvb3RzdHJhcCBmcm9tLgoKICAgSWYgYSBob3N0bmFt ZSBpcyBwcm92aWRlZCwgYW5kIHRoZSBob3N0bmFtZSdzIEROUyByZXNvbHV0aW9uIGlzIHRvCiAg IG1vcmUgdGhhbiBvbmUgSVAgYWRkcmVzcywgdGhlIGRldmljZSBNVVNUIGF0dGVtcHQgdG8gY29u bmVjdCB0byBhbGwKICAgb2YgdGhlIEROUyByZXNvbHZlZCBhZGRyZXNzZXMgYXQgbGVhc3Qgb25j ZSwgYmVmb3JlIG1vdmluZyBvbiB0byB0aGUKCgoKV2F0c2VuLCBldCBhbC4gICAgICAgICAgRXhw aXJlcyBGZWJydWFyeSAxMCwgMjAxOSAgICAgICAgICAgICAgW1BhZ2UgMjRdCgwKSW50ZXJuZXQt RHJhZnQgICAgU2VjdXJlIFplcm8gVG91Y2ggUHJvdmlzaW9uaW5nIChTWlRQKSAgICAgIEF1Z3Vz dCAyMDE4CgoKICAgbmV4dCBib290c3RyYXAgc2VydmVyLiAgSWYgdGhlIGRldmljZSBpcyBhYmxl IHRvIG9idGFpbiBib290c3RyYXBwaW5nCiAgIGRhdGEgZnJvbSBhbnkgb2YgdGhlIEROUyByZXNv bHZlZCBhZGRyZXNzZXMsIGl0IE1VU1QgaW1tZWRpYXRlbHkKICAgcHJvY2VzcyB0aGF0IGRhdGEs IHdpdGhvdXQgYXR0ZW1wdGluZyB0byBjb25uZWN0IHRvIGFueSBvZiB0aGUgb3RoZXIKICAgRE5T IHJlc29sdmVkIGFkZHJlc3Nlcy4KCiAgIElmIHRoZSByZWRpcmVjdCBpbmZvcm1hdGlvbiBpcyB0 cnVzdGVkIChlLmcuLCB0cnVzdC1zdGF0ZSBpcyBUUlVFKSwKICAgYW5kIHRoZSBib290c3RyYXAg c2VydmVyIGVudHJ5IGNvbnRhaW5zIGEgdHJ1c3QgYW5jaG9yIGNlcnRpZmljYXRlLAogICB0aGVu IHRoZSBkZXZpY2UgTVVTVCBhdXRoZW50aWNhdGUgdGhlIHNwZWNpZmllZCBib290c3RyYXAgc2Vy dmVyJ3MKICAgVExTIHNlcnZlciBjZXJ0aWZpY2F0ZSB1c2luZyBYLjUwOSBjZXJ0aWZpY2F0ZSBw YXRoIHZhbGlkYXRpb24KICAgKFtSRkM2MTI1XSwgU2VjdGlvbiA2KSB0byB0aGUgc3BlY2lmaWVk IHRydXN0IGFuY2hvci4gIElmIHRoZQogICBib290c3RyYXAgc2VydmVyIGVudHJ5IGRvZXMgbm90 IGNvbnRhaW4gYSB0cnVzdCBhbmNob3IgY2VydGlmaWNhdGUKICAgZGV2aWNlLCB0aGUgZGV2aWNl IE1VU1QgZXN0YWJsaXNoIGEgcHJvdmlzaW9uYWwgY29ubmVjdGlvbiB0byB0aGUKICAgYm9vdHN0 cmFwIHNlcnZlciAoaS5lLiwgYnkgYmxpbmRseSBhY2NlcHRpbmcgaXRzIHNlcnZlciBjZXJ0aWZp Y2F0ZSksCiAgIGFuZCBzZXQgdHJ1c3Qtc3RhdGUgdG8gRkFMU0UuCgogICBJZiB0aGUgcmVkaXJl Y3QgaW5mb3JtYXRpb24gaXMgdW50cnVzdGVkIChlLmcuLCB0cnVzdC1zdGF0ZSBpcwogICBGQUxT RSksIHRoZSBkZXZpY2UgTVVTVCBkaXNjYXJkIGFueSB0cnVzdCBhbmNob3JzIHByb3ZpZGVkIGJ5 IHRoZQogICByZWRpcmVjdCBpbmZvcm1hdGlvbiBhbmQgZXN0YWJsaXNoIGEgcHJvdmlzaW9uYWwg Y29ubmVjdGlvbiB0byB0aGUKICAgYm9vdHN0cmFwIHNlcnZlciAoaS5lLiwgYnkgYmxpbmRseSBh Y2NlcHRpbmcgaXRzIFRMUyBzZXJ2ZXIKICAgY2VydGlmaWNhdGUpLgoKNS42LiAgUHJvY2Vzc2lu ZyBPbmJvYXJkaW5nIEluZm9ybWF0aW9uCgogICBJbiBvcmRlciB0byBwcm9jZXNzIG9uYm9hcmRp bmcgaW5mb3JtYXRpb24gKFNlY3Rpb24gMi4yKSwgdGhlIGRldmljZQogICBNVVNUIGZvbGxvdyB0 aGUgc3RlcHMgcHJlc2VudGVkIGluIHRoaXMgc2VjdGlvbi4KCiAgIFdoZW4gcHJvY2Vzc2luZyBv bmJvYXJkaW5nIGluZm9ybWF0aW9uLCB0aGUgZGV2aWNlIE1VU1QgZmlyc3QgcHJvY2VzcwogICB0 aGUgYm9vdCBpbWFnZSBpbmZvcm1hdGlvbiAoaWYgYW55KSwgdGhlbiBleGVjdXRlIHRoZSBwcmUt CiAgIGNvbmZpZ3VyYXRpb24gc2NyaXB0IChpZiBhbnkpLCB0aGVuIGNvbW1pdCB0aGUgaW5pdGlh bCBjb25maWd1cmF0aW9uCiAgIChpZiBhbnkpLCBhbmQgdGhlbiBleGVjdXRlIHRoZSBwb3N0LWNv bmZpZ3VyYXRpb24gc2NyaXB0IChpZiBhbnkpLCBpbgogICB0aGF0IG9yZGVyLgoKICAgV2hlbiB0 aGUgb25ib2FyZGluZyBpbmZvcm1hdGlvbiBpcyBvYnRhaW5lZCBmcm9tIGEgdHJ1c3RlZCBib290 c3RyYXAKICAgc2VydmVyLCB0aGUgZGV2aWNlIE1VU1Qgc2VuZCB0aGUgImJvb3RzdHJhcC1pbml0 aWF0ZWQiIHByb2dyZXNzCiAgIHJlcG9ydCwgYW5kIHNlbmQgZWl0aGVyIGEgImJvb3RzdHJhcC1j b21wbGV0ZSIgcHJvZ3Jlc3MgcmVwb3J0IG9yIGFuCiAgIGVycm9yLXNwZWNpZmljIHByb2dyZXNz IHJlcG9ydCBpbmRpY2F0aW5nIHRoZSBlcnJvciB0aGUgZGV2aWNlCiAgIGVuY291bnRlcmVkLiAg VGhlIGRldmljZSBNQVkgc2VuZCBvdGhlciBwcm9ncmVzcyByZXBvcnRzIHRocm91Z2hvdXQKICAg dGhlIGJvb3RzdHJhcHBpbmcgcHJvY2VzcywgYXMgbWF5IGJlIGRlc2lyZWQgZm9yIHZpc2liaWxp dHkgcmVhc29ucy4KCiAgIFdoZW4gdGhlIG9uYm9hcmRpbmcgaW5mb3JtYXRpb24gaXMgb2J0YWlu ZWQgZnJvbSBhbiB1bnRydXN0ZWQKICAgYm9vdHN0cmFwIHNlcnZlciwgdGhlIGRldmljZSBNVVNU IE5PVCBzZW5kIGFueSBwcm9ncmVzcyByZXBvcnRzIHRvCiAgIHRoZSBib290c3RyYXAgc2VydmVy IChpLmUuLCB1c2luZyB0aGUgInJlcG9ydC1wcm9ncmVzcyIgUlBDKS4KCiAgIElmIHRoZSBkZXZp Y2UgZW5jb3VudGVycyBhbiBlcnJvciBhdCBhbnkgc3RlcCwgaXQgTVVTVCBzdG9wCiAgIHByb2Nl c3NpbmcgdGhlIG9uYm9hcmRpbmcgaW5mb3JtYXRpb24gYW5kIHJldHVybiB0byB0aGUgYm9vdHN0 cmFwcGluZwogICBzZXF1ZW5jZSBkZXNjcmliZWQgaW4gU2VjdGlvbiA1LjIuICBJbiB0aGUgY29u dGV4dCBvZiBhIHJlY3Vyc2l2ZQogICBhbGdvcml0aG0sIHRoZSBkZXZpY2UgTVVTVCByZXR1cm4g dG8gdGhlIGVuY2xvc2luZyBsb29wLCBub3QgYmFjayB0bwogICB0aGUgdmVyeSBiZWdpbm5pbmcu ICBTb21lIHN0YXRlIE1BWSBiZSByZXRhaW5lZCBmcm9tIHRoZQoKCgpXYXRzZW4sIGV0IGFsLiAg ICAgICAgICBFeHBpcmVzIEZlYnJ1YXJ5IDEwLCAyMDE5ICAgICAgICAgICAgICBbUGFnZSAyNV0K DApJbnRlcm5ldC1EcmFmdCAgICBTZWN1cmUgWmVybyBUb3VjaCBQcm92aXNpb25pbmcgKFNaVFAp ICAgICAgQXVndXN0IDIwMTgKCgogICBib290c3RyYXBwaW5nIHByb2Nlc3MgKGUuZy4sIHVwZGF0 ZWQgYm9vdCBpbWFnZSwgbG9ncywgcmVtbmFudHMgZnJvbQogICBhIHNjcmlwdCwgZXRjLiksIGhv d2V2ZXIsIHRoZSByZXRhaW5lZCBzdGF0ZSBNVVNUIE5PVCBoaW5kZXIgdGhlCiAgIGFiaWxpdHkg Zm9yIHRoZSBkZXZpY2UgdG8gY29udGludWUgdGhlIGJvb3RzdHJhcHBpbmcgc2VxdWVuY2UgKGku ZS4sCiAgIHByb2Nlc3Mgb25ib2FyZGluZyBpbmZvcm1hdGlvbiBmcm9tIGFub3RoZXIgYm9vdHN0 cmFwIHNlcnZlcikuCgogICBBdCB0aGlzIHBvaW50LCB0aGUgc3BlY2lmaWMgb3JkZXJlZCBzZXF1 ZW5jZSBvZiBhY3Rpb25zIHRoZSBkZXZpY2UKICAgTVVTVCBwZXJmb3JtIGlzIGRlc2NyaWJlZC4K CiAgIElmIHRoZSBvbmJvYXJkaW5nIGluZm9ybWF0aW9uIGlzIG9idGFpbmVkIGZyb20gYSB0cnVz dGVkIGJvb3RzdHJhcAogICBzZXJ2ZXIsIHRoZSBkZXZpY2UgTVVTVCBzZW5kIGEgImJvb3RzdHJh cC1pbml0aWF0ZWQiIHByb2dyZXNzIHJlcG9ydC4KICAgSXQgaXMgYW4gZXJyb3IgaWYgdGhlIGRl dmljZSBkb2VzIG5vdCByZWNlaXZlIGJhY2sgdGhlICIyMDQgTm8KICAgQ29udGVudCIgSFRUUCBz dGF0dXMgbGluZS4gIElmIGFuIGVycm9yIG9jY3VycywgdGhlIGRldmljZSBNVVNUIHRyeQogICB0 byBzZW5kIGEgInJlc3BvbnNlLWVycm9yIiBwcm9ncmVzcyByZXBvcnQuCgogICBUaGUgZGV2aWNl IE1VU1QgcGFyc2UgdGhlIHByb3ZpZGVkIG9uYm9hcmRpbmcgaW5mb3JtYXRpb24gZG9jdW1lbnQs CiAgIHRvIGV4dHJhY3QgdmFsdWVzIHVzZWQgaW4gc3Vic2VxdWVudCBzdGVwcy4gIElmIHRoZXJl IGlzIGFuIGVycm9yCiAgIHdoZW4gcGFyc2luZyB0aGUgb25ib2FyZGluZyBpbmZvcm1hdGlvbiwg YW5kIHRoZSBkZXZpY2UgaXMgY29ubmVjdGVkCiAgIHRvIGEgdHJ1c3RlZCBib290c3RyYXAgc2Vy dmVyLCB0aGUgZGV2aWNlIE1VU1QgdHJ5IHRvIHNlbmQgYQogICAicGFyc2luZy1lcnJvciIgcHJv Z3Jlc3MgcmVwb3J0LgoKICAgSWYgYm9vdCBpbWFnZSBjcml0ZXJpYSBhcmUgc3BlY2lmaWVkLCB0 aGUgZGV2aWNlIE1VU1QgZmlyc3QgZGV0ZXJtaW5lCiAgIGlmIHRoZSBib290IGltYWdlIGl0IGlz IHJ1bm5pbmcgc2F0aXNmaWVzIHRoZSBzcGVjaWZpZWQgYm9vdCBpbWFnZQogICBjcml0ZXJpYS4g IElmIHRoZSBkZXZpY2UgaXMgYWxyZWFkeSBydW5uaW5nIHRoZSBzcGVjaWZpZWQgYm9vdCBpbWFn ZSwKICAgdGhlbiBpdCBza2lwcyB0aGUgcmVtYWluZGVyIG9mIHRoaXMgc3RlcC4gIElmIHRoZSBk ZXZpY2UgaXMgbm90CiAgIHJ1bm5pbmcgdGhlIHNwZWNpZmllZCBib290IGltYWdlLCB0aGVuIHRo ZSBkZXZpY2UgTVVTVCBkb3dubG9hZCwKICAgdmVyaWZ5LCBhbmQgaW5zdGFsbCwgaW4gdGhhdCBv cmRlciwgdGhlIHNwZWNpZmllZCBib290IGltYWdlLCBhbmQKICAgdGhlbiByZWJvb3QuICBUbyBk b3dubG9hZCB0aGUgYm9vdCBpbWFnZSwgdGhlIGRldmljZSBNVVNUIG9ubHkgdXNlCiAgIHRoZSBV UklzIHN1cHBsaWVkIGJ5IHRoZSBvbmJvYXJkaW5nIGluZm9ybWF0aW9uLiAgVG8gdmVyaWZ5IHRo ZSBib290CiAgIGltYWdlLCB0aGUgZGV2aWNlIE1VU1QgZWl0aGVyIHVzZSBvbmUgb2YgdGhlIHZl cmlmaWNhdGlvbgogICBmaW5nZXJwcmludHMgc3VwcGxpZWQgYnkgdGhlIG9uYm9hcmRpbmcgaW5m b3JtYXRpb24sIG9yIHVzZSBhCiAgIGNyeXB0b2dyYXBoaWMgc2lnbmF0dXJlIGVtYmVkZGVkIGlu dG8gdGhlIGJvb3QgaW1hZ2UgaXRzZWxmLCB0aGF0IGNhbgogICBiZSB2YWxpZGF0ZWQgdXNpbmcg YSBwdWJsaWMga2V5IG5vdCBkZXNjcmliZWQgaW4gU2VjdGlvbiA1LjEuICBVcG9uCiAgIHJlYm9v dGluZywgdGhlIGJvb3RzdHJhcHBpbmcgcHJvY2VzcyBydW5zIGFnYWluLCB3aGljaCB3aWxsCiAg IGV2ZW50dWFsbHkgY29tZSB0byB0aGlzIHN0ZXAgYnV0LCBhdCB0aGF0IHRpbWUsIHRoZSBkZXZp Y2Ugd2lsbCBiZQogICBydW5uaW5nIHRoZSBzcGVjaWZpZWQgYm9vdCBpbWFnZSwgYW5kIHRodXMg d2lsbCBtb3ZlIHRvIHByb2Nlc3NpbmcKICAgdGhlIG5leHQgc3RlcC4gIElmIGFuIGVycm9yIG9j Y3VycyBhdCBhbnkgc3RlcCB3aGlsZSB0aGUgZGV2aWNlIGlzCiAgIGNvbm5lY3RlZCB0byBhIHRy dXN0ZWQgYm9vdHN0cmFwIHNlcnZlciAoaS5lLiwgYmVmb3JlIHRoZSByZWJvb3QpLAogICB0aGUg ZGV2aWNlIE1VU1QgdHJ5IHRvIHNlbmQgYSAiYm9vdC1pbWFnZS1lcnJvciIgcHJvZ3Jlc3MgcmVw b3J0LgoKICAgSWYgYSBwcmUtY29uZmlndXJhdGlvbiBzY3JpcHQgaGFzIGJlZW4gc3BlY2lmaWVk LCB0aGUgZGV2aWNlIE1VU1QKICAgZXhlY3V0ZSB0aGUgc2NyaXB0LCBjYXB0dXJlIGFueSBvdXRw dXQgZW1pdHRlZCBmcm9tIHRoZSBzY3JpcHQsIGFuZAogICBjaGVjayBpZiB0aGUgc2NyaXB0IGhh ZCBhbnkgd2FybmluZ3Mgb3IgZXJyb3JzLiAgTm90ZSB0aGF0LCBpbiB0aGUKICAgY2FzZSBvZiBh biBlcnJvciwgdGhlIHByZS1jb25maWd1cmF0aW9uIHNjcmlwdCBpcyByZXF1aXJlZCB0bwogICBn cmFjZWZ1bGx5IGV4aXQsIHJlbW92aW5nIGFueSBzdGF0ZSB0aGF0IG1pZ2h0IGhpbmRlciB0aGUg ZGV2aWNlJ3MKICAgYWJpbGl0eSB0byBjb250aW51ZSB0aGUgYm9vdHN0cmFwcGluZyBzZXF1ZW5j ZSAoaS5lLiwgcHJvY2VzcwogICBvbmJvYXJkaW5nIGluZm9ybWF0aW9uIGZyb20gYW5vdGhlciBi b290c3RyYXAgc2VydmVyKS4gIElmIGFuIGVycm9yCiAgIG9jY3VycyB3aGlsZSB0aGUgZGV2aWNl IGlzIGNvbm5lY3RlZCB0byBhIHRydXN0ZWQgYm9vdHN0cmFwIHNlcnZlciwKICAgdGhlIGRldmlj ZSBNVVNUIHRyeSB0byBzZW5kIGEgInByZS1zY3JpcHQtZXJyb3IiIHByb2dyZXNzIHJlcG9ydC4K CgoKV2F0c2VuLCBldCBhbC4gICAgICAgICAgRXhwaXJlcyBGZWJydWFyeSAxMCwgMjAxOSAgICAg ICAgICAgICAgW1BhZ2UgMjZdCgwKSW50ZXJuZXQtRHJhZnQgICAgU2VjdXJlIFplcm8gVG91Y2gg UHJvdmlzaW9uaW5nIChTWlRQKSAgICAgIEF1Z3VzdCAyMDE4CgoKICAgSWYgYW4gaW5pdGlhbCBj b25maWd1cmF0aW9uIGhhcyBiZWVuIHNwZWNpZmllZCwgdGhlIGRldmljZSBNVVNUCiAgIGF0b21p Y2FsbHkgY29tbWl0IHRoZSBwcm92aWRlZCBpbml0aWFsIGNvbmZpZ3VyYXRpb24sIHVzaW5nIHRo ZQogICBhcHByb2FjaCBzcGVjaWZpZWQgYnkgdGhlICJjb25maWd1cmF0aW9uLWhhbmRsaW5nIiBs ZWFmLiAgSWYgYW4gZXJyb3IKICAgb2NjdXJzLCB0aGUgZGV2aWNlIE1VU1QgcGVyZm9ybSB0aGUg Zm9sbG93aW5nIGdyYWNlZnVsIGV4aXQgc3RlcHM6CgogICBvICBJZiBhIHByZS1jb25maWd1cmF0 aW9uIHNjcmlwdCB3YXMgc3BlY2lmaWVkLCBhbmQgaGVuY2UgZXhlY3V0ZWQsCiAgICAgIHRoZSBk ZXZpY2UgTVVTVCBleGVjdXRlIHRoZSBwcmUtY29uZmlndXJhdGlvbiBzY3JpcHQgYWdhaW4gdXNp bmcgYQogICAgICBmbGFnIGluZGljYXRpbmcgdGhhdCB0aGUgc2NyaXB0IG5lZWRzIHRvIGNsZWFu IHVwIGl0cyBzdGF0ZSBmcm9tCiAgICAgIGl0cyBwcmV2aW91cyBleGVjdXRpb24uICBJbiBjYXNl IHRoZSBzY3JpcHQgcmV0dXJucyBhbiBlcnJvciwgdGhlCiAgICAgIGRldmljZSBNVVNUIHJlc2V0 IGl0c2VsZiBpbiBzdWNoIGEgd2F5IHRoYXQgd2lwZXMgb3V0IGFueSBiYWQKICAgICAgc3RhdGUg dGhlIHNjcmlwdCBtYXkgaGF2ZSBsZWZ0IGJlaGluZC4KCiAgIG8gIElmIGNvbm5lY3RlZCB0byBh IHRydXN0ZWQgYm9vdHN0cmFwIHNlcnZlciwgdGhlIGRldmljZSBNVVNUIHRyeSB0bwogICAgICBz ZW5kIGEgImNvbmZpZy1lcnJvciIgcHJvZ3Jlc3MgcmVwb3J0LgoKICAgSWYgYSBwb3N0LWNvbmZp Z3VyYXRpb24gc2NyaXB0IGhhcyBiZWVuIHNwZWNpZmllZCwgdGhlIGRldmljZSBNVVNUCiAgIGV4 ZWN1dGUgdGhlIHNjcmlwdCwgY2FwdHVyZSBhbnkgb3V0cHV0IGVtaXR0ZWQgZnJvbSB0aGUgc2Ny aXB0LCBhbmQKICAgY2hlY2sgaWYgdGhlIHNjcmlwdCBoYWQgYW55IHdhcm5pbmdzIG9yIGVycm9y cy4gIE5vdGUgdGhhdCwgaW4gdGhlCiAgIGNhc2Ugb2YgYW4gZXJyb3IsIHRoZSBwb3N0LWNvbmZp Z3VyYXRpb24gc2NyaXB0IGlzIHJlcXVpcmVkIHRvCiAgIGdyYWNlZnVsbHkgZXhpdCwgcmVtb3Zp bmcgYW55IHN0YXRlIHRoYXQgbWlnaHQgaGluZGVyIHRoZSBkZXZpY2UncwogICBhYmlsaXR5IHRv IGNvbnRpbnVlIHRoZSBib290c3RyYXBwaW5nIHNlcXVlbmNlIChpLmUuLCBwcm9jZXNzCiAgIG9u Ym9hcmRpbmcgaW5mb3JtYXRpb24gZnJvbSBhbm90aGVyIGJvb3RzdHJhcCBzZXJ2ZXIpLiAgSWYg YW4gZXJyb3IKICAgb2NjdXJzLCB0aGUgZGV2aWNlIE1VU1QgcGVyZm9ybSB0aGUgZm9sbG93aW5n IGdyYWNlZnVsIGV4aXQgc3RlcHM6CgogICBvICBJZiBhbiBpbml0aWFsIGNvbmZpZ3VyYXRpb24g d2FzIHNwZWNpZmllZCwgYW5kIGhlbmNlIGNvbW1pdHRlZCwKICAgICAgdGhlIGRldmljZSBNVVNU IHJlc3RvcmUgdGhlIGNvbmZpZ3VyYXRpb24gdG8gdGhlIGNvbmZpZ3VyYXRpb24KICAgICAgdGhh dCBleGlzdGVkIHByaW9yIHRvIHRoZSBjb25maWd1cmF0aW9uIGJlaW5nIGNvbW1pdHRlZC4KCiAg IG8gIElmIGEgcHJlLWNvbmZpZ3VyYXRpb24gc2NyaXB0IHdhcyBzcGVjaWZpZWQsIGFuZCBoZW5j ZSBleGVjdXRlZCwKICAgICAgdGhlIGRldmljZSBNVVNUIGV4ZWN1dGUgdGhlIHByZS1jb25maWd1 cmF0aW9uIHNjcmlwdCBhZ2FpbiB1c2luZyBhCiAgICAgIGZsYWcgaW5kaWNhdGluZyB0aGF0IHRo ZSBzY3JpcHQgbmVlZHMgdG8gY2xlYW4gdXAgaXRzIHN0YXRlIGZyb20KICAgICAgaXRzIHByZXZp b3VzIGV4ZWN1dGlvbi4gIEluIGNhc2UgdGhlIHNjcmlwdCByZXR1cm5zIGFuIGVycm9yLCB0aGUK ICAgICAgZGV2aWNlIE1VU1QgcmVzZXQgaXRzZWxmIGluIHN1Y2ggYSB3YXkgdGhhdCB3aXBlcyBv dXQgYW55IGJhZAogICAgICBzdGF0ZSB0aGUgc2NyaXB0IG1heSBoYXZlIGxlZnQgYmVoaW5kLgoK ICAgbyAgSWYgY29ubmVjdGVkIHRvIGEgdHJ1c3RlZCBib290c3RyYXAgc2VydmVyLCB0aGUgZGV2 aWNlIE1VU1QgdHJ5IHRvCiAgICAgIHNlbmQgYSAicG9zdC1zY3JpcHQtZXJyb3IiIHByb2dyZXNz IHJlcG9ydC4KCiAgIElmIHRoZSBvbmJvYXJkaW5nIGluZm9ybWF0aW9uIHdhcyBvYnRhaW5lZCBm cm9tIGEgdHJ1c3RlZCBib290c3RyYXAKICAgc2VydmVyLCB0aGUgZGV2aWNlIE1VU1Qgc2VuZCBh ICJib290c3RyYXAtY29tcGxldGUiIHByb2dyZXNzIHJlcG9ydC4KICAgSXQgaXMgYW4gZXJyb3Ig aWYgdGhlIGRldmljZSBkb2VzIG5vdCByZWNlaXZlIGJhY2sgdGhlICIyMDQgTm8KICAgQ29udGVu dCIgSFRUUCBzdGF0dXMgbGluZS4gIElmIGFuIGVycm9yIG9jY3VycywgdGhlIGRldmljZSBNVVNU CiAgIHBlcmZvcm0gdGhlIGZvbGxvd2luZyBncmFjZWZ1bCBleGl0IHN0ZXBzOgoKICAgbyAgSWYg YSBwb3N0LWNvbmZpZ3VyYXRpb24gc2NyaXB0IHdhcyBzcGVjaWZpZWQsIGFuZCBoZW5jZSBleGVj dXRlZCwKICAgICAgdGhlIGRldmljZSBNVVNUIGV4ZWN1dGUgdGhlIHBvc3QtY29uZmlndXJhdGlv biBzY3JpcHQgYWdhaW4gdXNpbmcKICAgICAgYSBmbGFnIGluZGljYXRpbmcgdGhhdCB0aGUgc2Ny aXB0IG5lZWRzIHRvIGNsZWFuIHVwIGl0cyBzdGF0ZSBmcm9tCiAgICAgIGl0cyBwcmV2aW91cyBl eGVjdXRpb24uICBJbiBjYXNlIHRoZSBzY3JpcHQgcmV0dXJucyBhbiBlcnJvciwgdGhlCgoKCldh dHNlbiwgZXQgYWwuICAgICAgICAgIEV4cGlyZXMgRmVicnVhcnkgMTAsIDIwMTkgICAgICAgICAg ICAgIFtQYWdlIDI3XQoMCkludGVybmV0LURyYWZ0ICAgIFNlY3VyZSBaZXJvIFRvdWNoIFByb3Zp c2lvbmluZyAoU1pUUCkgICAgICBBdWd1c3QgMjAxOAoKCiAgICAgIGRldmljZSBNVVNUIHJlc2V0 IGl0c2VsZiBpbiBzdWNoIGEgd2F5IHRoYXQgd2lwZXMgb3V0IGFueSBiYWQKICAgICAgc3RhdGUg dGhlIHNjcmlwdCBtYXkgaGF2ZSBsZWZ0IGJlaGluZC4KCiAgIG8gIElmIGFuIGluaXRpYWwgY29u ZmlndXJhdGlvbiB3YXMgc3BlY2lmaWVkLCBhbmQgaGVuY2UgY29tbWl0dGVkLAogICAgICB0aGUg ZGV2aWNlIE1VU1QgcmVzdG9yZSB0aGUgY29uZmlndXJhdGlvbiB0byB0aGUgY29uZmlndXJhdGlv bgogICAgICB0aGF0IGV4aXN0ZWQgcHJpb3IgdG8gdGhlIGNvbmZpZ3VyYXRpb24gYmVpbmcgY29t bWl0dGVkLgoKICAgbyAgSWYgYSBwcmUtY29uZmlndXJhdGlvbiBzY3JpcHQgd2FzIHNwZWNpZmll ZCwgYW5kIGhlbmNlIGV4ZWN1dGVkLAogICAgICB0aGUgZGV2aWNlIE1VU1QgZXhlY3V0ZSB0aGUg cHJlLWNvbmZpZ3VyYXRpb24gc2NyaXB0IGFnYWluIHVzaW5nIGEKICAgICAgZmxhZyBpbmRpY2F0 aW5nIHRoYXQgdGhlIHNjcmlwdCBuZWVkcyB0byBjbGVhbiB1cCBpdHMgc3RhdGUgZnJvbQogICAg ICBpdHMgcHJldmlvdXMgZXhlY3V0aW9uLiAgSW4gY2FzZSB0aGUgc2NyaXB0IHJldHVybnMgYW4g ZXJyb3IsIHRoZQogICAgICBkZXZpY2UgTVVTVCByZXNldCBpdHNlbGYgaW4gc3VjaCBhIHdheSB0 aGF0IHdpcGVzIG91dCBhbnkgYmFkCiAgICAgIHN0YXRlIHRoZSBzY3JpcHQgbWF5IGhhdmUgbGVm dCBiZWhpbmQuCgogICBvICBJZiBjb25uZWN0ZWQgdG8gYSB0cnVzdGVkIGJvb3RzdHJhcCBzZXJ2 ZXIsIHRoZSBkZXZpY2UgTVVTVCB0cnkgdG8KICAgICAgc2VuZCBhICJyZXNwb25zZS1lcnJvciIg cHJvZ3Jlc3MgcmVwb3J0LgoKICAgQXQgdGhpcyBwb2ludCwgdGhlIGRldmljZSBoYXMgY29tcGxl dGVseSBwcm9jZXNzZWQgdGhlIGJvb3RzdHJhcHBpbmcKICAgZGF0YS4KCiAgIFRoZSBkZXZpY2Ug aXMgbm93IHJ1bm5pbmcgaXRzIGluaXRpYWwgY29uZmlndXJhdGlvbi4gIE5vdGFibHksIGlmCiAg IE5FVENPTkYgQ2FsbCBIb21lIG9yIFJFU1RDT05GIENhbGwgSG9tZSBbUkZDODA3MV0gaXMgY29u ZmlndXJlZCwgdGhlCiAgIGRldmljZSBpbml0aWF0ZXMgdHJ5aW5nIHRvIGVzdGFibGlzaCB0aGUg Y2FsbCBob21lIGNvbm5lY3Rpb25zIGF0CiAgIHRoaXMgdGltZS4KCjYuICBUaGUgWmVybyBUb3Vj aCBJbmZvcm1hdGlvbiBEYXRhIE1vZGVsCgogICBUaGlzIHNlY3Rpb24gZGVmaW5lcyBhIFlBTkcg MS4xIFtSRkM3OTUwXSBtb2R1bGUgdGhhdCBpcyB1c2VkIHRvCiAgIGRlZmluZSB0aGUgZGF0YSBt b2RlbCBmb3IgdGhlIHplcm8gdG91Y2ggaW5mb3JtYXRpb24gYXJ0aWZhY3QKICAgZGVzY3JpYmVk IGluIFNlY3Rpb24gMy4xLiAgVGhpcyBkYXRhIG1vZGVsIHVzZXMgdGhlICJ5YW5nLWRhdGEiCiAg IGV4dGVuc2lvbiBzdGF0ZW1lbnQgZGVmaW5lZCBpbiBbSS1ELmlldGYtbmV0bW9kLXlhbmctZGF0 YS1leHRdLgogICBFeGFtcGxlcyBpbGx1c3RyYXRpbmcgdGhpcyBkYXRhIG1vZGVsIGFyZSBwcm92 aWRlZCBpbiBTZWN0aW9uIDYuMi4KCjYuMS4gIERhdGEgTW9kZWwgT3ZlcnZpZXcKCiAgIFRoZSBm b2xsb3dpbmcgdHJlZSBkaWFncmFtIHByb3ZpZGVzIGFuIG92ZXJ2aWV3IG9mIHRoZSBkYXRhIG1v ZGVsIGZvcgogICB0aGUgemVybyB0b3VjaCBpbmZvcm1hdGlvbiBhcnRpZmFjdC4KCgoKCgoKCgoK CgoKCgpXYXRzZW4sIGV0IGFsLiAgICAgICAgICBFeHBpcmVzIEZlYnJ1YXJ5IDEwLCAyMDE5ICAg ICAgICAgICAgICBbUGFnZSAyOF0KDApJbnRlcm5ldC1EcmFmdCAgICBTZWN1cmUgWmVybyBUb3Vj aCBQcm92aXNpb25pbmcgKFNaVFApICAgICAgQXVndXN0IDIwMTgKCgogICBtb2R1bGU6IGlldGYt emVyb3RvdWNoLWluZm9ybWF0aW9uCgogICAgIHlhbmctZGF0YSB6ZXJvdG91Y2gtaW5mb3JtYXRp b246CiAgICAgICArLS0gKGluZm9ybWF0aW9uLXR5cGUpCiAgICAgICAgICArLS06KHJlZGlyZWN0 LWluZm9ybWF0aW9uKQogICAgICAgICAgfCAgKy0tIHJlZGlyZWN0LWluZm9ybWF0aW9uCiAgICAg ICAgICB8ICAgICArLS0gYm9vdHN0cmFwLXNlcnZlciogW2FkZHJlc3NdCiAgICAgICAgICB8ICAg ICAgICArLS0gYWRkcmVzcyAgICAgICAgIGluZXQ6aG9zdAogICAgICAgICAgfCAgICAgICAgKy0t IHBvcnQ/ICAgICAgICAgICBpbmV0OnBvcnQtbnVtYmVyCiAgICAgICAgICB8ICAgICAgICArLS0g dHJ1c3QtYW5jaG9yPyAgIGNtcwogICAgICAgICAgKy0tOihvbmJvYXJkaW5nLWluZm9ybWF0aW9u KQogICAgICAgICAgICAgKy0tIG9uYm9hcmRpbmctaW5mb3JtYXRpb24KICAgICAgICAgICAgICAg ICstLSBib290LWltYWdlCiAgICAgICAgICAgICAgICB8ICArLS0gb3MtbmFtZT8gICAgICAgICAg ICAgIHN0cmluZwogICAgICAgICAgICAgICAgfCAgKy0tIG9zLXZlcnNpb24/ICAgICAgICAgICBz dHJpbmcKICAgICAgICAgICAgICAgIHwgICstLSBkb3dubG9hZC11cmkqICAgICAgICAgaW5ldDp1 cmkKICAgICAgICAgICAgICAgIHwgICstLSBpbWFnZS12ZXJpZmljYXRpb24qIFtoYXNoLWFsZ29y aXRobV0KICAgICAgICAgICAgICAgIHwgICAgICstLSBoYXNoLWFsZ29yaXRobSAgICBpZGVudGl0 eXJlZgogICAgICAgICAgICAgICAgfCAgICAgKy0tIGhhc2gtdmFsdWUgICAgICAgIHlhbmc6aGV4 LXN0cmluZwogICAgICAgICAgICAgICAgKy0tIGNvbmZpZ3VyYXRpb24taGFuZGxpbmc/ICAgICAg ZW51bWVyYXRpb24KICAgICAgICAgICAgICAgICstLSBwcmUtY29uZmlndXJhdGlvbi1zY3JpcHQ/ ICAgIHNjcmlwdAogICAgICAgICAgICAgICAgKy0tIGNvbmZpZ3VyYXRpb24/ICAgICAgICAgICAg ICAgYmluYXJ5CiAgICAgICAgICAgICAgICArLS0gcG9zdC1jb25maWd1cmF0aW9uLXNjcmlwdD8g ICBzY3JpcHQKCjYuMi4gIEV4YW1wbGUgVXNhZ2UKCiAgIFRoZSBmb2xsb3dpbmcgZXhhbXBsZSBp bGx1c3RyYXRlcyBob3cgcmVkaXJlY3QgaW5mb3JtYXRpb24KICAgKFNlY3Rpb24gMi4xKSBjYW4g YmUgZW5jb2RlZCB1c2luZyBKU09OLgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCldhdHNlbiwgZXQg YWwuICAgICAgICAgIEV4cGlyZXMgRmVicnVhcnkgMTAsIDIwMTkgICAgICAgICAgICAgIFtQYWdl IDI5XQoMCkludGVybmV0LURyYWZ0ICAgIFNlY3VyZSBaZXJvIFRvdWNoIFByb3Zpc2lvbmluZyAo U1pUUCkgICAgICBBdWd1c3QgMjAxOAoKCiAgIHsKICAgICAiaWV0Zi16ZXJvdG91Y2gtaW5mb3Jt YXRpb246cmVkaXJlY3QtaW5mb3JtYXRpb24iIDogewogICAgICAgImJvb3RzdHJhcC1zZXJ2ZXIi IDogWwogICAgICAgICB7CiAgICAgICAgICAgImFkZHJlc3MiIDogInBoczEuZXhhbXBsZS5jb20i LAogICAgICAgICAgICJwb3J0IiA6IDg0NDMsCiAgICAgICAgICAgInRydXN0LWFuY2hvciIgOiAi YmFzZTY0ZW5jb2RlZHZhbHVlPT0iCiAgICAgICAgIH0sCiAgICAgICAgIHsKICAgICAgICAgICAi YWRkcmVzcyIgOiAicGhzMi5leGFtcGxlLmNvbSIsCiAgICAgICAgICAgInBvcnQiIDogODQ0MywK ICAgICAgICAgICAidHJ1c3QtYW5jaG9yIiA6ICJiYXNlNjRlbmNvZGVkdmFsdWU9PSIKICAgICAg ICAgfSwKICAgICAgICAgewogICAgICAgICAgICJhZGRyZXNzIiA6ICJwaHMzLmV4YW1wbGUuY29t IiwKICAgICAgICAgICAicG9ydCIgOiA4NDQzLAogICAgICAgICAgICJ0cnVzdC1hbmNob3IiIDog ImJhc2U2NGVuY29kZWR2YWx1ZT09IgogICAgICAgICB9CiAgICAgICBdCiAgICAgfQogICB9Cgog ICBUaGUgZm9sbG93aW5nIGV4YW1wbGUgaWxsdXN0cmF0ZXMgaG93IG9uYm9hcmRpbmcgaW5mb3Jt YXRpb24KICAgKFNlY3Rpb24gMi4yKSBjYW4gYmUgZW5jb2RlZCB1c2luZyBKU09OLgoKCiAgIFtO b3RlOiAnXCcgbGluZSB3cmFwcGluZyBmb3IgZm9ybWF0dGluZyBvbmx5XQoKICAgewogICAgICJp ZXRmLXplcm90b3VjaC1pbmZvcm1hdGlvbjpvbmJvYXJkaW5nLWluZm9ybWF0aW9uIiA6IHsKICAg ICAgICJib290LWltYWdlIiA6IHsKICAgICAgICAgIm9zLW5hbWUiIDogIlZlbmRvck9TIiwKICAg ICAgICAgIm9zLXZlcnNpb24iIDogIjE3LjJSMS42IiwKICAgICAgICAgImRvd25sb2FkLXVyaSIg OiBbICJodHRwOi8vc29tZS9wYXRoL3RvL3Jhdy9maWxlIiBdLAogICAgICAgICAiaW1hZ2UtdmVy aWZpY2F0aW9uIiA6IFsKICAgICAgICAgICB7CiAgICAgICAgICAgICAiaGFzaC1hbGdvcml0aG0i IDogImlldGYtemVyb3RvdWNoLWluZm9ybWF0aW9uOnNoYS0yNTYiLAogICAgICAgICAgICAgImhh c2gtdmFsdWUiIDogImJhOmVjOmNmOmE1OjY3OjgyOmI0OjEwOjc3OmM2OjY3OmE2OjIyOmFiOlwK ICAgN2Q6NTA6MDQ6YTc6OGI6OGY6MGU6ZGI6MDI6OGI6ZjQ6NzU6NTU6ZmI6YzE6MTM6YjI6MzMi CiAgICAgICAgICAgfQogICAgICAgICBdCiAgICAgICB9LAogICAgICAgImNvbmZpZ3VyYXRpb24t aGFuZGxpbmciIDogIm1lcmdlIiwKICAgICAgICJwcmUtY29uZmlndXJhdGlvbi1zY3JpcHQiIDog ImJhc2U2NGVuY29kZWR2YWx1ZT09IiwKICAgICAgICJjb25maWd1cmF0aW9uIiA6ICJiYXNlNjRl bmNvZGVkdmFsdWU9PSIsCiAgICAgICAicG9zdC1jb25maWd1cmF0aW9uLXNjcmlwdCIgOiAiYmFz ZTY0ZW5jb2RlZHZhbHVlPT0iCiAgICAgfQogICB9CgoKCldhdHNlbiwgZXQgYWwuICAgICAgICAg IEV4cGlyZXMgRmVicnVhcnkgMTAsIDIwMTkgICAgICAgICAgICAgIFtQYWdlIDMwXQoMCkludGVy bmV0LURyYWZ0ICAgIFNlY3VyZSBaZXJvIFRvdWNoIFByb3Zpc2lvbmluZyAoU1pUUCkgICAgICBB dWd1c3QgMjAxOAoKCjYuMy4gIFlBTkcgTW9kdWxlCgogICBUaGUgemVybyB0b3VjaCBpbmZvcm1h dGlvbiBkYXRhIG1vZGVsIGlzIGRlZmluZWQgYnkgdGhlIFlBTkcgbW9kdWxlCiAgIHByZXNlbnRl ZCBpbiB0aGlzIHNlY3Rpb24uCgogICBUaGlzIG1vZHVsZSB1c2VzIGRhdGEgdHlwZXMgZGVmaW5l ZCBpbiBbUkZDNTI4MF0sIFtSRkM1NjUyXSwKICAgW1JGQzYyMzRdLCBhbmQgW1JGQzY5OTFdLCBh biBleHRlbnNpb24gc3RhdGVtZW50IGZyb20KICAgW0ktRC5pZXRmLW5ldG1vZC15YW5nLWRhdGEt ZXh0XSwgYW5kIGFuIGVuY29kaW5nIGRlZmluZWQgaW4KICAgW0lUVS5YNjkwLjIwMTVdLgoKICAg PENPREUgQkVHSU5TPiBmaWxlICJpZXRmLXplcm90b3VjaC1pbmZvcm1hdGlvbkAyMDE4LTA4LTA5 LnlhbmciCiAgIG1vZHVsZSBpZXRmLXplcm90b3VjaC1pbmZvcm1hdGlvbiB7CiAgICAgeWFuZy12 ZXJzaW9uIDEuMTsKICAgICBuYW1lc3BhY2UgInVybjppZXRmOnBhcmFtczp4bWw6bnM6eWFuZzpp ZXRmLXplcm90b3VjaC1pbmZvcm1hdGlvbiI7CiAgICAgcHJlZml4IHp0aTsKCiAgICAgaW1wb3J0 IGlldGYteWFuZy10eXBlcyB7CiAgICAgICBwcmVmaXggeWFuZzsKICAgICAgIHJlZmVyZW5jZSAi UkZDIDY5OTE6IENvbW1vbiBZQU5HIERhdGEgVHlwZXMiOwogICAgIH0KICAgICBpbXBvcnQgaWV0 Zi1pbmV0LXR5cGVzIHsKICAgICAgIHByZWZpeCBpbmV0OwogICAgICAgcmVmZXJlbmNlICJSRkMg Njk5MTogQ29tbW9uIFlBTkcgRGF0YSBUeXBlcyI7CiAgICAgfQogICAgIGltcG9ydCBpZXRmLXlh bmctZGF0YS1leHQgewogICAgICAgcHJlZml4IHlkOwogICAgICAgcmVmZXJlbmNlICJJLUQuaWV0 Zi1uZXRtb2QteWFuZy1kYXRhLWV4dDogWUFORyBEYXRhIEV4dGVuc2lvbnMiOwogICAgIH0KCiAg ICAgb3JnYW5pemF0aW9uCiAgICAgICAiSUVURiBORVRDT05GIChOZXR3b3JrIENvbmZpZ3VyYXRp b24pIFdvcmtpbmcgR3JvdXAiOwoKICAgICBjb250YWN0CiAgICAgICAiV0cgV2ViOiAgIGh0dHA6 Ly90b29scy5pZXRmLm9yZy93Zy9uZXRjb25mCiAgICAgICAgV0cgTGlzdDogIDxtYWlsdG86bmV0 Y29uZkBpZXRmLm9yZz4KICAgICAgICBBdXRob3I6ICAgS2VudCBXYXRzZW4gPG1haWx0bzprd2F0 c2VuQGp1bmlwZXIubmV0PiI7CgogICAgIGRlc2NyaXB0aW9uCiAgICAgICJUaGlzIG1vZHVsZSBk ZWZpbmVzIHRoZSBkYXRhIG1vZGVsIGZvciB0aGUgWmVybyBUb3VjaAogICAgICAgSW5mb3JtYXRp b24gYXJ0aWZhY3QgZGVmaW5lZCBpbiBSRkMgWFhYWDogWmVybyBUb3VjaAogICAgICAgUHJvdmlz aW9uaW5nIGZvciBOZXR3b3JraW5nIERldmljZXMuCgogICAgICAgVGhlIGtleSB3b3JkcyAnTVVT VCcsICdNVVNUIE5PVCcsICdSRVFVSVJFRCcsICdTSEFMTCcsCiAgICAgICAnU0hBTEwgTk9UJywg J1NIT1VMRCcsICdTSE9VTEQgTk9UJywgJ1JFQ09NTUVOREVEJywgJ01BWScsCiAgICAgICBhbmQg J09QVElPTkFMJyBpbiB0aGUgbW9kdWxlIHRleHQgYXJlIHRvIGJlIGludGVycHJldGVkIGFzCiAg ICAgICBkZXNjcmliZWQgaW4gUkZDIDIxMTkuCgogICAgICAgQ29weXJpZ2h0IChjKSAyMDE4IElF VEYgVHJ1c3QgYW5kIHRoZSBwZXJzb25zIGlkZW50aWZpZWQgYXMKCgoKV2F0c2VuLCBldCBhbC4g ICAgICAgICAgRXhwaXJlcyBGZWJydWFyeSAxMCwgMjAxOSAgICAgICAgICAgICAgW1BhZ2UgMzFd CgwKSW50ZXJuZXQtRHJhZnQgICAgU2VjdXJlIFplcm8gVG91Y2ggUHJvdmlzaW9uaW5nIChTWlRQ KSAgICAgIEF1Z3VzdCAyMDE4CgoKICAgICAgIGF1dGhvcnMgb2YgdGhlIGNvZGUuIEFsbCByaWdo dHMgcmVzZXJ2ZWQuCgogICAgICAgUmVkaXN0cmlidXRpb24gYW5kIHVzZSBpbiBzb3VyY2UgYW5k IGJpbmFyeSBmb3Jtcywgd2l0aCBvcgogICAgICAgd2l0aG91dCBtb2RpZmljYXRpb24sIGlzIHBl cm1pdHRlZCBwdXJzdWFudCB0bywgYW5kIHN1YmplY3QKICAgICAgIHRvIHRoZSBsaWNlbnNlIHRl cm1zIGNvbnRhaW5lZCBpbiwgdGhlIFNpbXBsaWZpZWQgQlNEIExpY2Vuc2UKICAgICAgIHNldCBm b3J0aCBpbiBTZWN0aW9uIDQuYyBvZiB0aGUgSUVURiBUcnVzdCdzIExlZ2FsIFByb3Zpc2lvbnMK ICAgICAgIFJlbGF0aW5nIHRvIElFVEYgRG9jdW1lbnRzIChodHRwOi8vdHJ1c3RlZS5pZXRmLm9y Zy9saWNlbnNlLWluZm8pCgogICAgICAgVGhpcyB2ZXJzaW9uIG9mIHRoaXMgWUFORyBtb2R1bGUg aXMgcGFydCBvZiBSRkMgWFhYWDsgc2VlIHRoZQogICAgICAgUkZDIGl0c2VsZiBmb3IgZnVsbCBs ZWdhbCBub3RpY2VzLiI7CgogICAgIHJldmlzaW9uIDIwMTgtMDgtMDkgewogICAgICAgZGVzY3Jp cHRpb24KICAgICAgICAgIkluaXRpYWwgdmVyc2lvbiI7CiAgICAgICByZWZlcmVuY2UKICAgICAg ICAgIlJGQyBYWFhYOiBaZXJvIFRvdWNoIFByb3Zpc2lvbmluZyBmb3IgTmV0d29ya2luZyBEZXZp Y2VzIjsKICAgICB9CgogICAgIC8vIGlkZW50aXRpZXMKCiAgICAgaWRlbnRpdHkgaGFzaC1hbGdv cml0aG0gewogICAgICAgZGVzY3JpcHRpb24KICAgICAgICAgIkEgYmFzZSBpZGVudGl0eSBmb3Ig aGFzaCBhbGdvcml0aG0gdmVyaWZpY2F0aW9uIjsKICAgICB9CgogICAgIGlkZW50aXR5IHNoYS0y NTYgewogICAgICAgYmFzZSAiaGFzaC1hbGdvcml0aG0iOwogICAgICAgZGVzY3JpcHRpb24gIlRo ZSBTSEEtMjU2IGFsZ29yaXRobS4iOwogICAgICAgcmVmZXJlbmNlICJSRkMgNjIzNDogVVMgU2Vj dXJlIEhhc2ggQWxnb3JpdGhtcy4iOwogICAgIH0KCiAgICAgLy8gdHlwZWRlZnMKCiAgICAgdHlw ZWRlZiBjbXMgewogICAgICAgdHlwZSBiaW5hcnk7CiAgICAgICBkZXNjcmlwdGlvbgogICAgICAg ICAiQSBDb250ZW50SW5mbyBzdHJ1Y3R1cmUsIGFzIHNwZWNpZmllZCBpbiBSRkMgNTY1MiwKICAg ICAgICAgIGVuY29kZWQgdXNpbmcgQVNOLjEgZGlzdGluZ3Vpc2hlZCBlbmNvZGluZyBydWxlcyAo REVSKSwKICAgICAgICAgIGFzIHNwZWNpZmllZCBpbiBJVFUtVCBYLjY5MC4iOwogICAgICAgcmVm ZXJlbmNlCiAgICAgICAgICJSRkMgNTY1MjoKICAgICAgICAgICAgQ3J5cHRvZ3JhcGhpYyBNZXNz YWdlIFN5bnRheCAoQ01TKQogICAgICAgICAgSVRVLVQgWC42OTA6CiAgICAgICAgICAgIEluZm9y bWF0aW9uIHRlY2hub2xvZ3kgLSBBU04uMSBlbmNvZGluZyBydWxlczoKICAgICAgICAgICAgU3Bl Y2lmaWNhdGlvbiBvZiBCYXNpYyBFbmNvZGluZyBSdWxlcyAoQkVSKSwKICAgICAgICAgICAgQ2Fu b25pY2FsIEVuY29kaW5nIFJ1bGVzIChDRVIpIGFuZCBEaXN0aW5ndWlzaGVkCiAgICAgICAgICAg IEVuY29kaW5nIFJ1bGVzIChERVIpLiI7CiAgICAgfQoKCgpXYXRzZW4sIGV0IGFsLiAgICAgICAg ICBFeHBpcmVzIEZlYnJ1YXJ5IDEwLCAyMDE5ICAgICAgICAgICAgICBbUGFnZSAzMl0KDApJbnRl cm5ldC1EcmFmdCAgICBTZWN1cmUgWmVybyBUb3VjaCBQcm92aXNpb25pbmcgKFNaVFApICAgICAg QXVndXN0IDIwMTgKCgogICAgIC8vIHlhbmctZGF0YQoKICAgICB5ZDp5YW5nLWRhdGEgInplcm90 b3VjaC1pbmZvcm1hdGlvbiIgewogICAgICAgY2hvaWNlIGluZm9ybWF0aW9uLXR5cGUgewogICAg ICAgICBtYW5kYXRvcnkgdHJ1ZTsKICAgICAgICAgZGVzY3JpcHRpb24KICAgICAgICAgICAiVGhp cyBjaG9pY2Ugc3RhdGVtZW50IGVuc3VyZXMgdGhlIHJlc3BvbnNlIGNvbnRhaW5zCiAgICAgICAg ICAgIHJlZGlyZWN0LWluZm9ybWF0aW9uIG9yIG9uYm9hcmRpbmctaW5mb3JtYXRpb24uIjsKICAg ICAgICAgY29udGFpbmVyIHJlZGlyZWN0LWluZm9ybWF0aW9uIHsKICAgICAgICAgICBkZXNjcmlw dGlvbgogICAgICAgICAgICAgIlJlZGlyZWN0IGluZm9ybWF0aW9uIGlzIGRlc2NyaWJlZCBpbiBT ZWN0aW9uIDIuMSBpbgogICAgICAgICAgICAgIFJGQyBYWFhYLiAgSXRzIHB1cnBvc2UgaXMgdG8g cmVkaXJlY3QgYSBkZXZpY2UgdG8KICAgICAgICAgICAgICBhbm90aGVyIGJvb3RzdHJhcCBzZXJ2 ZXIuIjsKICAgICAgICAgICByZWZlcmVuY2UKICAgICAgICAgICAgICJSRkMgWFhYWDogWmVybyBU b3VjaCBQcm92aXNpb25pbmcgZm9yIE5ldHdvcmtpbmcgRGV2aWNlcyI7CiAgICAgICAgICAgbGlz dCBib290c3RyYXAtc2VydmVyIHsKICAgICAgICAgICAgIGtleSAiYWRkcmVzcyI7CiAgICAgICAg ICAgICBtaW4tZWxlbWVudHMgMTsKICAgICAgICAgICAgIGRlc2NyaXB0aW9uCiAgICAgICAgICAg ICAgICJBIGJvb3RzdHJhcCBzZXJ2ZXIgZW50cnkuIjsKICAgICAgICAgICAgIGxlYWYgYWRkcmVz cyB7CiAgICAgICAgICAgICAgIHR5cGUgaW5ldDpob3N0OwogICAgICAgICAgICAgICBtYW5kYXRv cnkgdHJ1ZTsKICAgICAgICAgICAgICAgZGVzY3JpcHRpb24KICAgICAgICAgICAgICAgICJUaGUg SVAgYWRkcmVzcyBvciBob3N0bmFtZSBvZiB0aGUgYm9vdHN0cmFwIHNlcnZlciB0aGUKICAgICAg ICAgICAgICAgICBkZXZpY2Ugc2hvdWxkIHJlZGlyZWN0IHRvLiI7CiAgICAgICAgICAgICB9CiAg ICAgICAgICAgICBsZWFmIHBvcnQgewogICAgICAgICAgICAgICB0eXBlIGluZXQ6cG9ydC1udW1i ZXI7CiAgICAgICAgICAgICAgIGRlZmF1bHQgIjQ0MyI7CiAgICAgICAgICAgICAgIGRlc2NyaXB0 aW9uCiAgICAgICAgICAgICAgICAiVGhlIHBvcnQgbnVtYmVyIHRoZSBib290c3RyYXAgc2VydmVy IGxpc3RlbnMgb24uICBJZiBubwogICAgICAgICAgICAgICAgIHBvcnQgaXMgc3BlY2lmaWVkLCB0 aGUgSUFOQS1hc3NpZ25lZCBwb3J0IGZvciAnaHR0cHMnCiAgICAgICAgICAgICAgICAgKDQ0Mykg aXMgdXNlZC4iOwogICAgICAgICAgICAgfQogICAgICAgICAgICAgbGVhZiB0cnVzdC1hbmNob3Ig ewogICAgICAgICAgICAgICB0eXBlIGNtczsKICAgICAgICAgICAgICAgZGVzY3JpcHRpb24KICAg ICAgICAgICAgICAgICAiQSBDTVMgc3RydWN0dXJlIHRoYXQgTVVTVCBjb250YWluIHRoZSBjaGFp biBvZgogICAgICAgICAgICAgICAgICBYLjUwOSBjZXJ0aWZpY2F0ZXMgbmVlZGVkIHRvIGF1dGhl bnRpY2F0ZSB0aGUgVExTCiAgICAgICAgICAgICAgICAgIGNlcnRpZmljYXRlIHByZXNlbnRlZCBi eSB0aGlzIGJvb3RzdHJhcCBzZXJ2ZXIuCgogICAgICAgICAgICAgICAgICBUaGUgQ01TIE1VU1Qg b25seSBjb250YWluIGEgc2luZ2xlIGNoYWluIG9mCiAgICAgICAgICAgICAgICAgIGNlcnRpZmlj YXRlcy4gIFRoZSBib290c3RyYXAgc2VydmVyIE1VU1Qgb25seQogICAgICAgICAgICAgICAgICBh dXRoZW50aWNhdGUgdG8gbGFzdCBpbnRlcm1lZGlhdGUgQ0EgY2VydGlmaWNhdGUKICAgICAgICAg ICAgICAgICAgbGlzdGVkIGluIHRoZSBjaGFpbi4KCiAgICAgICAgICAgICAgICAgIEluIGFsbCBj YXNlcywgdGhlIGNoYWluIE1VU1QgaW5jbHVkZSBhIHNlbGYtc2lnbmVkCgoKCldhdHNlbiwgZXQg YWwuICAgICAgICAgIEV4cGlyZXMgRmVicnVhcnkgMTAsIDIwMTkgICAgICAgICAgICAgIFtQYWdl IDMzXQoMCkludGVybmV0LURyYWZ0ICAgIFNlY3VyZSBaZXJvIFRvdWNoIFByb3Zpc2lvbmluZyAo U1pUUCkgICAgICBBdWd1c3QgMjAxOAoKCiAgICAgICAgICAgICAgICAgIHJvb3QgY2VydGlmaWNh dGUuICBJbiB0aGUgY2FzZSB3aGVyZSB0aGUgcm9vdAogICAgICAgICAgICAgICAgICBjZXJ0aWZp Y2F0ZSBpcyBpdHNlbGYgdGhlIGlzc3VlciBvZiB0aGUgYm9vdHN0cmFwCiAgICAgICAgICAgICAg ICAgIHNlcnZlcidzIFRMUyBjZXJ0aWZpY2F0ZSwgb25seSBvbmUgY2VydGlmaWNhdGUKICAgICAg ICAgICAgICAgICAgaXMgcHJlc2VudC4KCiAgICAgICAgICAgICAgICAgIElmIG5lZWRlZCBieSB0 aGUgZGV2aWNlLCB0aGlzIENNUyBzdHJ1Y3R1cmUgTUFZCiAgICAgICAgICAgICAgICAgIGFsc28g Y29udGFpbiBzdWl0YWJseSBmcmVzaCByZXZvY2F0aW9uIG9iamVjdHMKICAgICAgICAgICAgICAg ICAgd2l0aCB3aGljaCB0aGUgZGV2aWNlIGNhbiB2ZXJpZnkgdGhlIHJldm9jYXRpb24KICAgICAg ICAgICAgICAgICAgc3RhdHVzIG9mIHRoZSBjZXJ0aWZpY2F0ZXMuCgogICAgICAgICAgICAgICAg ICBUaGlzIENNUyBlbmNvZGVzIHRoZSBkZWdlbmVyYXRlIGZvcm0gb2YgdGhlIFNpZ25lZERhdGEK ICAgICAgICAgICAgICAgICAgc3RydWN0dXJlIHRoYXQgaXMgY29tbW9ubHkgdXNlZCB0byBkaXNz ZW1pbmF0ZSBYLjUwOQogICAgICAgICAgICAgICAgICBjZXJ0aWZpY2F0ZXMgYW5kIHJldm9jYXRp b24gb2JqZWN0cyAoUkZDIDUyODApLiI7CiAgICAgICAgICAgICAgIHJlZmVyZW5jZQogICAgICAg ICAgICAgICAgICJSRkMgNTI4MDoKICAgICAgICAgICAgICAgICAgICBJbnRlcm5ldCBYLjUwOSBQ dWJsaWMgS2V5IEluZnJhc3RydWN0dXJlIENlcnRpZmljYXRlCiAgICAgICAgICAgICAgICAgICAg YW5kIENlcnRpZmljYXRlIFJldm9jYXRpb24gTGlzdCAoQ1JMKSBQcm9maWxlLiI7CiAgICAgICAg ICAgICB9CiAgICAgICAgICAgfQogICAgICAgICB9CiAgICAgICAgIGNvbnRhaW5lciBvbmJvYXJk aW5nLWluZm9ybWF0aW9uIHsKICAgICAgICAgICBkZXNjcmlwdGlvbgogICAgICAgICAgICAgIk9u Ym9hcmRpbmcgaW5mb3JtYXRpb24gaXMgZGVzY3JpYmVkIGluIFNlY3Rpb24gMi4yIGluCiAgICAg ICAgICAgICAgUkZDIFhYWFguICBJdHMgcHVycG9zZSBpcyB0byBwcm92aWRlIHRoZSBkZXZpY2Ug ZXZlcnl0aGluZwogICAgICAgICAgICAgIGl0IG5lZWRzIHRvIGJvb3RzdHJhcCBpdHNlbGYuIjsK ICAgICAgICAgICByZWZlcmVuY2UKICAgICAgICAgICAgICJSRkMgWFhYWDogWmVybyBUb3VjaCBQ cm92aXNpb25pbmcgZm9yIE5ldHdvcmtpbmcgRGV2aWNlcyI7CiAgICAgICAgICAgY29udGFpbmVy IGJvb3QtaW1hZ2UgewogICAgICAgICAgICAgZGVzY3JpcHRpb24KICAgICAgICAgICAgICAgIlNw ZWNpZmllcyBjcml0ZXJpYSBmb3IgdGhlIGJvb3QgaW1hZ2UgdGhlIGRldmljZSBNVVNUCiAgICAg ICAgICAgICAgICBiZSBydW5uaW5nLCBhcyB3ZWxsIGFzIGluZm9ybWF0aW9uIGVuYWJsaW5nIHRo ZSBkZXZpY2UKICAgICAgICAgICAgICAgIHRvIGluc3RhbGwgdGhlIHJlcXVpcmVkIGJvb3QgaW1h Z2UuIjsKICAgICAgICAgICAgIGxlYWYgb3MtbmFtZSB7CiAgICAgICAgICAgICAgIHR5cGUgc3Ry aW5nOwogICAgICAgICAgICAgICBkZXNjcmlwdGlvbgogICAgICAgICAgICAgICAgICJUaGUgbmFt ZSBvZiB0aGUgb3BlcmF0aW5nIHN5c3RlbSBzb2Z0d2FyZSB0aGUgZGV2aWNlCiAgICAgICAgICAg ICAgICAgIE1VU1QgYmUgcnVubmluZyBpbiBvcmRlciB0byBub3QgcmVxdWlyZSBhIHNvZnR3YXJl CiAgICAgICAgICAgICAgICAgIGltYWdlIHVwZ3JhZGUgKGV4LiBWZW5kb3JPUykuIjsKICAgICAg ICAgICAgIH0KICAgICAgICAgICAgIGxlYWYgb3MtdmVyc2lvbiB7CiAgICAgICAgICAgICAgIHR5 cGUgc3RyaW5nOwogICAgICAgICAgICAgICBkZXNjcmlwdGlvbgogICAgICAgICAgICAgICAgICJU aGUgdmVyc2lvbiBvZiB0aGUgb3BlcmF0aW5nIHN5c3RlbSBzb2Z0d2FyZSB0aGUKICAgICAgICAg ICAgICAgICAgZGV2aWNlIE1VU1QgYmUgcnVubmluZyBpbiBvcmRlciB0byBub3QgcmVxdWlyZSBh CiAgICAgICAgICAgICAgICAgIHNvZnR3YXJlIGltYWdlIHVwZ3JhZGUgKGV4LiAxNy4zUjIuMSku IjsKICAgICAgICAgICAgIH0KICAgICAgICAgICAgIGxlYWYtbGlzdCBkb3dubG9hZC11cmkgewog ICAgICAgICAgICAgICB0eXBlIGluZXQ6dXJpOwoKCgpXYXRzZW4sIGV0IGFsLiAgICAgICAgICBF eHBpcmVzIEZlYnJ1YXJ5IDEwLCAyMDE5ICAgICAgICAgICAgICBbUGFnZSAzNF0KDApJbnRlcm5l dC1EcmFmdCAgICBTZWN1cmUgWmVybyBUb3VjaCBQcm92aXNpb25pbmcgKFNaVFApICAgICAgQXVn dXN0IDIwMTgKCgogICAgICAgICAgICAgICBvcmRlcmVkLWJ5IHVzZXI7CiAgICAgICAgICAgICAg IGRlc2NyaXB0aW9uCiAgICAgICAgICAgICAgICAgIkFuIG9yZGVyZWQgbGlzdCBvZiBVUklzIHRv IHdoZXJlIHRoZSBuZWNlc3NhcnkKICAgICAgICAgICAgICAgICAgYm9vdC1pbWFnZSBmaWxlIG1h eSBiZSBvYnRhaW5lZC4gIERlcGxveW1lbnRzIG11c3QKICAgICAgICAgICAgICAgICAga25vdyB0 aHJvdWdoIG91dC1vZi1iYW5kIG1lYW5zIHdoaWNoIFVSSSBzY2hlbWVzCiAgICAgICAgICAgICAg ICAgIChodHRwLCBmdHAsIGV0Yy4pIHRoZSBib290c3RyYXBwaW5nIGRldmljZSBzdXBwb3J0cy4K ICAgICAgICAgICAgICAgICAgSWYgYSBzZWN1cmUgc2NoZW1lIChlLmcuLCBodHRwcykgaXMgcHJv dmlkZWQsIGEKICAgICAgICAgICAgICAgICAgZGV2aWNlIE1BWSBlc3RhYmxpc2ggYW4gdW50cnVz dGVkIGNvbm5lY3Rpb24gdG8gdGhlCiAgICAgICAgICAgICAgICAgIHJlbW90ZSBzZXJ2ZXIgdG8g b2J0YWluIHRoZSBib290LWltYWdlLiI7CiAgICAgICAgICAgICB9CiAgICAgICAgICAgICBsaXN0 IGltYWdlLXZlcmlmaWNhdGlvbiB7CiAgICAgICAgICAgICAgIG11c3QgJy4uL2Rvd25sb2FkLXVy aScgewogICAgICAgICAgICAgICAgIGRlc2NyaXB0aW9uCiAgICAgICAgICAgICAgICAgICAiRG93 bmxvYWQgVVJJcyBtdXN0IGJlIHByb3ZpZGVkIGlmIGFuIGltYWdlIGlzIHRvCiAgICAgICAgICAg ICAgICAgICAgYmUgdmVyaWZpZWQuIjsKICAgICAgICAgICAgICAgfQogICAgICAgICAgICAgICBr ZXkgaGFzaC1hbGdvcml0aG07CiAgICAgICAgICAgICAgIGRlc2NyaXB0aW9uCiAgICAgICAgICAg ICAgICAgIkEgbGlzdCBvZiBoYXNoIHZhbHVlcyB0aGF0IGEgZGV2aWNlIGNhbiB1c2UgdG8gdmVy aWZ5CiAgICAgICAgICAgICAgICAgIGJvb3QgaW1hZ2UgZmlsZXMgd2l0aC4iOwogICAgICAgICAg ICAgICBsZWFmIGhhc2gtYWxnb3JpdGhtIHsKICAgICAgICAgICAgICAgICB0eXBlIGlkZW50aXR5 cmVmIHsKICAgICAgICAgICAgICAgICAgIGJhc2UgImhhc2gtYWxnb3JpdGhtIjsKICAgICAgICAg ICAgICAgICB9CiAgICAgICAgICAgICAgICAgZGVzY3JpcHRpb24KICAgICAgICAgICAgICAgICAg ICJJZGVudGlmaWVzIHRoZSBoYXNoIGFsZ29yaXRobSB1c2VkLiI7CiAgICAgICAgICAgICAgIH0K ICAgICAgICAgICAgICAgbGVhZiBoYXNoLXZhbHVlIHsKICAgICAgICAgICAgICAgICB0eXBlIHlh bmc6aGV4LXN0cmluZzsKICAgICAgICAgICAgICAgICBtYW5kYXRvcnkgdHJ1ZTsKICAgICAgICAg ICAgICAgICBkZXNjcmlwdGlvbgogICAgICAgICAgICAgICAgICAgIlRoZSBoZXgtZW5jb2RlZCB2 YWx1ZSBvZiB0aGUgc3BlY2lmaWVkIGhhc2gKICAgICAgICAgICAgICAgICAgICBhbGdvcml0aG0g b3ZlciB0aGUgY29udGVudHMgb2YgdGhlIGJvb3QgaW1hZ2UKICAgICAgICAgICAgICAgICAgICBm aWxlLiI7CiAgICAgICAgICAgICAgIH0KICAgICAgICAgICAgIH0KICAgICAgICAgICB9CiAgICAg ICAgICAgbGVhZiBjb25maWd1cmF0aW9uLWhhbmRsaW5nIHsKICAgICAgICAgICAgIHR5cGUgZW51 bWVyYXRpb24gewogICAgICAgICAgICAgICBlbnVtICJtZXJnZSIgewogICAgICAgICAgICAgICAg IGRlc2NyaXB0aW9uCiAgICAgICAgICAgICAgICAgICAiTWVyZ2UgY29uZmlndXJhdGlvbiBpbnRv IHRoZSBydW5uaW5nIGRhdGFzdG9yZS4iOwogICAgICAgICAgICAgICB9CiAgICAgICAgICAgICAg IGVudW0gInJlcGxhY2UiIHsKICAgICAgICAgICAgICAgICBkZXNjcmlwdGlvbgogICAgICAgICAg ICAgICAgICAgIlJlcGxhY2UgdGhlIGV4aXN0aW5nIHJ1bm5pbmcgZGF0YXN0b3JlIHdpdGggdGhl CiAgICAgICAgICAgICAgICAgICAgcGFzc2VkIGNvbmZpZ3VyYXRpb24uIjsKICAgICAgICAgICAg ICAgfQoKCgpXYXRzZW4sIGV0IGFsLiAgICAgICAgICBFeHBpcmVzIEZlYnJ1YXJ5IDEwLCAyMDE5 ICAgICAgICAgICAgICBbUGFnZSAzNV0KDApJbnRlcm5ldC1EcmFmdCAgICBTZWN1cmUgWmVybyBU b3VjaCBQcm92aXNpb25pbmcgKFNaVFApICAgICAgQXVndXN0IDIwMTgKCgogICAgICAgICAgICAg fQogICAgICAgICAgICAgbXVzdCAnLi4vY29uZmlndXJhdGlvbic7CiAgICAgICAgICAgICBkZXNj cmlwdGlvbgogICAgICAgICAgICAgICAiVGhpcyBlbnVtZXJhdGlvbiBpbmRpY2F0ZXMgaG93IHRo ZSBzZXJ2ZXIgc2hvdWxkIHByb2Nlc3MKICAgICAgICAgICAgICAgIHRoZSBwcm92aWRlZCBjb25m aWd1cmF0aW9uLiI7CiAgICAgICAgICAgfQogICAgICAgICAgIGxlYWYgcHJlLWNvbmZpZ3VyYXRp b24tc2NyaXB0IHsKICAgICAgICAgICAgIHR5cGUgc2NyaXB0OwogICAgICAgICAgICAgZGVzY3Jp cHRpb24KICAgICAgICAgICAgICAgIkEgc2NyaXB0IHRoYXQsIHdoZW4gcHJlc2VudCwgaXMgZXhl Y3V0ZWQgYmVmb3JlIHRoZQogICAgICAgICAgICAgICAgY29uZmlndXJhdGlvbiBoYXMgYmVlbiBw cm9jZXNzZWQuIjsKICAgICAgICAgICB9CiAgICAgICAgICAgbGVhZiBjb25maWd1cmF0aW9uIHsK ICAgICAgICAgICAgIHR5cGUgYmluYXJ5OwogICAgICAgICAgICAgbXVzdCAnLi4vY29uZmlndXJh dGlvbi1oYW5kbGluZyc7CiAgICAgICAgICAgICBkZXNjcmlwdGlvbgogICAgICAgICAgICAgICAi QW55IGNvbmZpZ3VyYXRpb24ga25vd24gdG8gdGhlIGRldmljZS4gIFRoZSB1c2Ugb2YKICAgICAg ICAgICAgICAgIHRoZSAnYmluYXJ5JyB0eXBlIGVuYWJsZXMgZS5nLiwgWE1MLWNvbnRlbnQgdG8g YmUKICAgICAgICAgICAgICAgIGVtYmVkZGVkIGludG8gYSBKU09OIGRvY3VtZW50LiAgVGhlIGV4 YWN0IGVuY29kaW5nCiAgICAgICAgICAgICAgICBvZiB0aGUgY29udGVudCwgYXMgd2l0aCB0aGUg c2NyaXB0cywgaXMgdmVuZG9yCiAgICAgICAgICAgICAgICBzcGVjaWZpYy4iOwogICAgICAgICAg IH0KICAgICAgICAgICBsZWFmIHBvc3QtY29uZmlndXJhdGlvbi1zY3JpcHQgewogICAgICAgICAg ICAgdHlwZSBzY3JpcHQ7CiAgICAgICAgICAgICBkZXNjcmlwdGlvbgogICAgICAgICAgICAgICAi QSBzY3JpcHQgdGhhdCwgd2hlbiBwcmVzZW50LCBpcyBleGVjdXRlZCBhZnRlciB0aGUKICAgICAg ICAgICAgICAgIGNvbmZpZ3VyYXRpb24gaGFzIGJlZW4gcHJvY2Vzc2VkLiI7CiAgICAgICAgICAg fQogICAgICAgICB9CiAgICAgICB9CiAgICAgfQoKICAgICB0eXBlZGVmIHNjcmlwdCB7CiAgICAg ICB0eXBlIGJpbmFyeTsKICAgICAgIGRlc2NyaXB0aW9uCiAgICAgICAgICJBIGRldmljZSBzcGVj aWZpYyBzY3JpcHQgdGhhdCBlbmFibGVzIHRoZSBleGVjdXRpb24gb2YKICAgICAgICAgIGNvbW1h bmRzIHRvIHBlcmZvcm0gYWN0aW9ucyBub3QgcG9zc2libGUgdGhydSBjb25maWd1cmF0aW9uCiAg ICAgICAgICBhbG9uZS4KCiAgICAgICAgICBObyBhdHRlbXB0IGlzIG1hZGUgdG8gc3RhbmRhcmRp emUgdGhlIGNvbnRlbnRzLCBydW5uaW5nCiAgICAgICAgICBjb250ZXh0LCBvciBwcm9ncmFtbWlu ZyBsYW5ndWFnZSBvZiB0aGUgc2NyaXB0LCBvdGhlciB0aGFuCiAgICAgICAgICB0aGF0IGl0IGNh biBpbmRpY2F0ZSBpZiBhbnkgd2FybmluZ3Mgb3IgZXJyb3JzIG9jY3VycmVkIGFuZAogICAgICAg ICAgY2FuIGVtaXQgb3V0cHV0LiAgVGhlIGNvbnRlbnRzIG9mIHRoZSBzY3JpcHQgYXJlIGNvbnNp ZGVyZWQKICAgICAgICAgIHNwZWNpZmljIHRvIHRoZSB2ZW5kb3IsIHByb2R1Y3QgbGluZSwgYW5k L29yIG1vZGVsIG9mIHRoZQogICAgICAgICAgZGV2aWNlLgoKICAgICAgICAgIElmIGEgc2NyaXB0 IGlzIGVycm9uZW91c2x5IHByb3ZpZGVkIHRvIGEgZGV2aWNlIHRoYXQgZG9lcyBub3QKICAgICAg ICAgIHN1cHBvcnQgdGhlIGV4ZWN1dGlvbiBvZiBzY3JpcHRzLCBhbmQgdGhlIGRldmljZSBvYnRh aW5lZCB0aGUKCgoKV2F0c2VuLCBldCBhbC4gICAgICAgICAgRXhwaXJlcyBGZWJydWFyeSAxMCwg MjAxOSAgICAgICAgICAgICAgW1BhZ2UgMzZdCgwKSW50ZXJuZXQtRHJhZnQgICAgU2VjdXJlIFpl cm8gVG91Y2ggUHJvdmlzaW9uaW5nIChTWlRQKSAgICAgIEF1Z3VzdCAyMDE4CgoKICAgICAgICAg IG9uYm9hcmRpbmcgaW5mb3JtYXRpb24gZnJvbSBhIHRydXN0ZWQgYm9vdHN0cmFwIHNlcnZlciwg dGhlbgogICAgICAgICAgdGhlIGRldmljZSBTSE9VTEQgc2VuZCBlaXRoZXIgYSAncHJlLXNjcmlw dC13YXJuaW5nJyBvcgogICAgICAgICAgJ3Bvc3Qtc2NyaXB0LXdhcm5pbmcnIHByb2dyZXNzIHJl cG9ydCwgYmFzZWQgb24gd2hpY2gga2luZAogICAgICAgICAgb2Ygc2NyaXB0IHdhcyBwcmVzZW50 ZWQsIGJ1dCBvdGhlcndpc2UgY29udGludWUgcHJvY2Vzc2luZwogICAgICAgICAgdGhlIGJvb3Rz dHJhcHBpbmcgZGF0YSBhcyBpZiB0aGUgc2NyaXB0IGhhZCBub3QgYmVlbiBwcmVzZW50LgoKICAg ICAgICAgIElmIHRoZSBzY3JpcHQgZXhlY3V0aW9uIGluZGljYXRlcyB0aGF0IGFuIHdhcm5pbmcg b2NjdXJyZWQsCiAgICAgICAgICB0aGVuIHRoZSBkZXZpY2UgTVVTVCBhc3N1bWUgdGhhdCB0aGUg c2NyaXB0IGhhZCBhIHNvZnQgZXJyb3IKICAgICAgICAgIHRoYXQgdGhlIHNjcmlwdCBiZWxpZXZl cyB3aWxsIG5vdCBhZmZlY3QgbWFuYWdlYWJpbGl0eS4gIElmCiAgICAgICAgICB0aGUgZGV2aWNl IG9idGFpbmVkIHRoZSBib290c3RyYXAgaW5mb3JtYXRpb24gZnJvbSBhIHRydXN0ZWQKICAgICAg ICAgIGJvb3RzdHJhcCBzZXJ2ZXIsIGl0IFNIT1VMRCBlaXRoZXIgc2VuZCBhICdwcmUtc2NyaXB0 LXdhcm5pbmcnCiAgICAgICAgICBvciAncG9zdC1zY3JpcHQtd2FybmluZycgcHJvZ3Jlc3MgcmVw b3J0LCBiYXNlZCBvbiB3aGljaCBraW5kCiAgICAgICAgICBvZiBzY3JpcHQgd2FzIGV4ZWN1dGVk LgoKICAgICAgICAgIElmIHRoZSBzY3JpcHQgZXhlY3V0aW9uIGluZGljYXRlcyB0aGF0IGFuIGVy cm9yIG9jY3VycmVkLCB0aGUKICAgICAgICAgIGRldmljZSBNVVNUIGFzc3VtZSB0aGUgc2NyaXB0 IGhhZCBhIGhhcmQgZXJyb3IgdGhhdCB0aGUgc2NyaXB0CiAgICAgICAgICBiZWxpZXZlcyB3aWxs IGFmZmVjdCBtYW5hZ2VhYmlsaXR5LiAgSWYgdGhlIGRldmljZSBvYnRhaW5lZAogICAgICAgICAg dGhlIGJvb3RzdHJhcCBpbmZvcm1hdGlvbiBmcm9tIGEgdHJ1c3RlZCBib290c3RyYXAgc2VydmVy LCBpdAogICAgICAgICAgU0hPVUxEIHNlbmQgYSAncHJlLXNjcmlwdC1lcnJvcicgb3IgJ3Bvc3Qt c2NyaXB0LWVycm9yJwogICAgICAgICAgcHJvZ3Jlc3MgcmVwb3J0LCAgYmFzZWQgb24gd2hpY2gg a2luZCBvZiBzY3JpcHQgd2FzIGV4ZWN1dGVkLAogICAgICAgICAgZm9sbG93ZWQgYnkgYSByZXNl dCB0aGF0IHdpbGwgd2lwZSBvdXQgYW55IGJhZCBzdGF0ZSBsZWZ0IGJ5CiAgICAgICAgICB0aGUg c2NyaXB0LCBhbmQgcmVzdGFydCB0aGUgZW50aXJlIGJvb3RzdHJhcHBpbmcgcHJvY2Vzcy4iOwog ICAgIH0KICAgfQogICA8Q09ERSBFTkRTPgoKNy4gIFRoZSBaZXJvIFRvdWNoIEJvb3RzdHJhcCBT ZXJ2ZXIgQVBJCgogICBUaGlzIHNlY3Rpb24gZGVmaW5lcyB0aGUgQVBJIGZvciBib290c3RyYXAg c2VydmVycy4gIFRoZSBBUEkgaXMKICAgZGVmaW5lZCBhcyB0aGF0IHByb2R1Y2VkIGJ5IGEgUkVT VENPTkYgW1JGQzgwNDBdIHNlcnZlciB0aGF0IHN1cHBvcnRzCiAgIHRoZSBZQU5HIDEuMSBbUkZD Nzk1MF0gbW9kdWxlIGRlZmluZWQgaW4gdGhpcyBzZWN0aW9uLgoKNy4xLiAgQVBJIE92ZXJ2aWV3 CgogICBUaGUgZm9sbG93aW5nIHRyZWUgZGlhZ3JhbSBwcm92aWRlcyBhbiBvdmVydmlldyBmb3Ig dGhlIGJvb3RzdHJhcAogICBzZXJ2ZXIgUkVTVENPTkYgQVBJLgoKCgoKCgoKCgoKCgoKCgpXYXRz ZW4sIGV0IGFsLiAgICAgICAgICBFeHBpcmVzIEZlYnJ1YXJ5IDEwLCAyMDE5ICAgICAgICAgICAg ICBbUGFnZSAzN10KDApJbnRlcm5ldC1EcmFmdCAgICBTZWN1cmUgWmVybyBUb3VjaCBQcm92aXNp b25pbmcgKFNaVFApICAgICAgQXVndXN0IDIwMTgKCgogICBtb2R1bGU6IGlldGYtemVyb3RvdWNo LWJvb3RzdHJhcC1zZXJ2ZXIKCiAgICAgcnBjczoKICAgICAgICstLS14IGdldC1ib290c3RyYXBw aW5nLWRhdGEKICAgICAgIHwgICstLS13IGlucHV0CiAgICAgICB8ICB8ICArLS0tdyB1bnRydXN0 ZWQtY29ubmVjdGlvbj8gICBlbXB0eQogICAgICAgfCAgfCAgKy0tLXcgaHctbW9kZWw/ICAgICAg ICAgICAgICAgc3RyaW5nCiAgICAgICB8ICB8ICArLS0tdyBvcy1uYW1lPyAgICAgICAgICAgICAg ICBzdHJpbmcKICAgICAgIHwgIHwgICstLS13IG9zLXZlcnNpb24/ICAgICAgICAgICAgIHN0cmlu ZwogICAgICAgfCAgfCAgKy0tLXcgbm9uY2U/ICAgICAgICAgICAgICAgICAgYmluYXJ5CiAgICAg ICB8ICArLS1ybyBvdXRwdXQKICAgICAgIHwgICAgICstLXJvIHplcm90b3VjaC1pbmZvcm1hdGlv biAgICBjbXMKICAgICAgIHwgICAgICstLXJvIG93bmVyLWNlcnRpZmljYXRlPyAgICAgICBjbXMK ICAgICAgIHwgICAgICstLXJvIG93bmVyc2hpcC12b3VjaGVyPyAgICAgICBjbXMKICAgICAgICst LS14IHJlcG9ydC1wcm9ncmVzcwogICAgICAgICAgKy0tLXcgaW5wdXQKICAgICAgICAgICAgICst LS13IHByb2dyZXNzLXR5cGUgICAgICAgICBlbnVtZXJhdGlvbgogICAgICAgICAgICAgKy0tLXcg bWVzc2FnZT8gICAgICAgICAgICAgIHN0cmluZwogICAgICAgICAgICAgKy0tLXcgc3NoLWhvc3Qt a2V5cwogICAgICAgICAgICAgfCAgKy0tLXcgc3NoLWhvc3Qta2V5KiAgIGJpbmFyeQogICAgICAg ICAgICAgKy0tLXcgdHJ1c3QtYW5jaG9yLWNlcnRzCiAgICAgICAgICAgICAgICArLS0tdyB0cnVz dC1hbmNob3ItY2VydCogICBjbXMKCjcuMi4gIEV4YW1wbGUgVXNhZ2UKCiAgIFRoaXMgc2VjdGlv biBwcmVzZW50cyB0aHJlZSBleGFtcGxlcyBpbGx1c3RyYXRpbmcgdGhlIGJvb3RzdHJhcAogICBz ZXJ2ZXIncyBBUEkuICBUd28gZXhhbXBsZXMgYXJlIHByb3ZpZGVkIGZvciB0aGUgImdldC1ib290 c3RyYXBwaW5nLQogICBkYXRhIiBSUEMgKG9uY2UgdG8gYW4gdW50cnVzdGVkIGJvb3RzdHJhcCBz ZXJ2ZXIsIGFuZCBhZ2FpbiB0byBhCiAgIHRydXN0ZWQgYm9vdHN0cmFwIHNlcnZlciksIGFuZCBv bmUgZXhhbXBsZSBmb3IgdGhlICJyZXBvcnQtcHJvZ3Jlc3MiCiAgIFJQQy4KCiAgIFRoZSBmb2xs b3dpbmcgZXhhbXBsZSBpbGx1c3RyYXRlcyBhIGRldmljZSB1c2luZyB0aGUgQVBJIHRvIGZldGNo IGl0cwogICBib290c3RyYXBwaW5nIGRhdGEgZnJvbSBhIHVudHJ1c3RlZCBib290c3RyYXAgc2Vy dmVyLiAgSW4gdGhpcwogICBleGFtcGxlLCB0aGUgZGV2aWNlIHNlbmRzIHRoZSAidW50cnVzdGVk LWNvbm5lY3Rpb24iIGlucHV0IHBhcmFtZXRlcgogICBhbmQgcmVjZWl2ZXMgc2lnbmVkIGRhdGEg aW4gdGhlIHJlc3BvbnNlLgoKCgoKCgoKCgoKCgoKCgoKV2F0c2VuLCBldCBhbC4gICAgICAgICAg RXhwaXJlcyBGZWJydWFyeSAxMCwgMjAxOSAgICAgICAgICAgICAgW1BhZ2UgMzhdCgwKSW50ZXJu ZXQtRHJhZnQgICAgU2VjdXJlIFplcm8gVG91Y2ggUHJvdmlzaW9uaW5nIChTWlRQKSAgICAgIEF1 Z3VzdCAyMDE4CgoKICAgUkVRVUVTVAogICAtLS0tLS0tCiAgIFsnXCcgbGluZSB3cmFwcGluZyBh ZGRlZCBmb3IgZm9ybWF0dGluZyBvbmx5XQoKICAgUE9TVCAvcmVzdGNvbmYvb3BlcmF0aW9ucy9p ZXRmLXplcm90b3VjaC1ib290c3RyYXAtc2VydmVyOmdldC1ib290XAogICBzdHJhcHBpbmctZGF0 YSBIVFRQLzEuMQogICBIT1NUOiBleGFtcGxlLmNvbQogICBDb250ZW50LVR5cGU6IGFwcGxpY2F0 aW9uL3lhbmcuZGF0YSt4bWwKCiAgIDxpbnB1dAogICAgeG1sbnM9InVybjppZXRmOnBhcmFtczp4 bWw6bnM6eWFuZzppZXRmLXplcm90b3VjaC1ib290c3RyYXAtc2VydmVyIj4KICAgICA8dW50cnVz dGVkLWNvbm5lY3Rpb24vPgogICA8L2lucHV0PgoKCiAgIFJFU1BPTlNFCiAgIC0tLS0tLS0tCgog ICBIVFRQLzEuMSAyMDAgT0sKICAgRGF0ZTogU2F0LCAzMSBPY3QgMjAxNSAxNzowMjo0MCBHTVQK ICAgU2VydmVyOiBleGFtcGxlLXNlcnZlcgogICBDb250ZW50LVR5cGU6IGFwcGxpY2F0aW9uL3lh bmcuZGF0YSt4bWwKCiAgIDxvdXRwdXQKICAgIHhtbG5zPSJ1cm46aWV0ZjpwYXJhbXM6eG1sOm5z Onlhbmc6aWV0Zi16ZXJvdG91Y2gtYm9vdHN0cmFwLXNlcnZlciI+CiAgICAgPHplcm90b3VjaC1p bmZvcm1hdGlvbj5iYXNlNjRlbmNvZGVkdmFsdWU9PTwvemVyb3RvdWNoLWluZm9ybWF0aW9uPgog ICAgIDxvd25lci1jZXJ0aWZpY2F0ZT5iYXNlNjRlbmNvZGVkdmFsdWU9PTwvb3duZXItY2VydGlm aWNhdGU+CiAgICAgPG93bmVyc2hpcC12b3VjaGVyPmJhc2U2NGVuY29kZWR2YWx1ZT09PC9vd25l cnNoaXAtdm91Y2hlcj4KICAgPC9vdXRwdXQ+CgogICBUaGUgZm9sbG93aW5nIGV4YW1wbGUgaWxs dXN0cmF0ZXMgYSBkZXZpY2UgdXNpbmcgdGhlIEFQSSB0byBmZXRjaCBpdHMKICAgYm9vdHN0cmFw cGluZyBkYXRhIGZyb20gYSB0cnVzdGVkIGJvb3RzdHJhcCBzZXJ2ZXIuICBJbiB0aGlzIGV4YW1w bGUsCiAgIHRoZSBkZXZpY2Ugc2VuZHMgYWRkaXRpb24gaW5wdXQgcGFyYW1ldGVycyB0byB0aGUg Ym9vdHN0cmFwIHNlcnZlciwKICAgd2hpY2ggaXQgbWF5IHVzZSB3aGVuIGZvcm11bGF0aW5nIGl0 cyByZXNwb25zZSB0byB0aGUgZGV2aWNlLgoKCgoKCgoKCgoKCgoKCgoKCldhdHNlbiwgZXQgYWwu ICAgICAgICAgIEV4cGlyZXMgRmVicnVhcnkgMTAsIDIwMTkgICAgICAgICAgICAgIFtQYWdlIDM5 XQoMCkludGVybmV0LURyYWZ0ICAgIFNlY3VyZSBaZXJvIFRvdWNoIFByb3Zpc2lvbmluZyAoU1pU UCkgICAgICBBdWd1c3QgMjAxOAoKCiAgIFJFUVVFU1QKICAgLS0tLS0tLQogICBbJ1wnIGxpbmUg d3JhcHBpbmcgYWRkZWQgZm9yIGZvcm1hdHRpbmcgb25seV0KCiAgIFBPU1QgL3Jlc3Rjb25mL29w ZXJhdGlvbnMvaWV0Zi16ZXJvdG91Y2gtYm9vdHN0cmFwLXNlcnZlcjpnZXQtYm9vdFwKICAgc3Ry YXBwaW5nLWRhdGEgSFRUUC8xLjEKICAgSE9TVDogZXhhbXBsZS5jb20KICAgQ29udGVudC1UeXBl OiBhcHBsaWNhdGlvbi95YW5nLmRhdGEreG1sCgogICA8aW5wdXQKICAgIHhtbG5zPSJ1cm46aWV0 ZjpwYXJhbXM6eG1sOm5zOnlhbmc6aWV0Zi16ZXJvdG91Y2gtYm9vdHN0cmFwLXNlcnZlciI+CiAg ICAgPGh3LW1vZGVsPm1vZGVsLXg8L2h3LW1vZGVsPgogICAgIDxvcy1uYW1lPnZlbmRvci1vczwv b3MtbmFtZT4KICAgICA8b3MtdmVyc2lvbj4xNy4zUjIuMTwvb3MtdmVyc2lvbj4KICAgICA8bm9u Y2U+YmFzZTY0ZW5jb2RlZHZhbHVlPT08L25vbmNlPgogICA8L2lucHV0PgoKICAgUkVTUE9OU0UK ICAgLS0tLS0tLS0KCiAgIEhUVFAvMS4xIDIwMCBPSwogICBEYXRlOiBTYXQsIDMxIE9jdCAyMDE1 IDE3OjAyOjQwIEdNVAogICBTZXJ2ZXI6IGV4YW1wbGUtc2VydmVyCiAgIENvbnRlbnQtVHlwZTog YXBwbGljYXRpb24veWFuZy5kYXRhK3htbAoKICAgPG91dHB1dAogICAgeG1sbnM9InVybjppZXRm OnBhcmFtczp4bWw6bnM6eWFuZzppZXRmLXplcm90b3VjaC1ib290c3RyYXAtc2VydmVyIj4KICAg ICA8emVyb3RvdWNoLWluZm9ybWF0aW9uPmJhc2U2NGVuY29kZWR2YWx1ZT09PC96ZXJvdG91Y2gt aW5mb3JtYXRpb24+CiAgIDwvb3V0cHV0PgoKCiAgIFRoZSBmb2xsb3dpbmcgZXhhbXBsZSBpbGx1 c3RyYXRlcyBhIGRldmljZSB1c2luZyB0aGUgQVBJIHRvIHBvc3QgYQogICBwcm9ncmVzcyByZXBv cnQgdG8gYSBib290c3RyYXAgc2VydmVyLiAgSWxsdXN0cmF0ZWQgYmVsb3cgaXMgdGhlCiAgICJi b290c3RyYXAtY29tcGxldGUiIG1lc3NhZ2UsIGJ1dCB0aGUgZGV2aWNlIG1heSBzZW5kIG90aGVy IHByb2dyZXNzCiAgIHJlcG9ydHMgdG8gdGhlIHNlcnZlciB3aGlsZSBib290c3RyYXBwaW5nLiAg SW4gdGhpcyBleGFtcGxlLCB0aGUKICAgZGV2aWNlIGlzIHNlbmRpbmcgYm90aCBpdHMgU1NIIGhv c3Qga2V5cyBhbmQgYSBUTFMgc2VydmVyCiAgIGNlcnRpZmljYXRlLCB3aGljaCB0aGUgYm9vdHN0 cmFwIHNlcnZlciBtYXksIGZvciBleGFtcGxlLCBwYXNzIHRvIGFuCiAgIE5NUywgYXMgZGlzY3Vz c2VkIGluIEFwcGVuZGl4IEMuMy4KCgoKCgoKCgoKCgoKCldhdHNlbiwgZXQgYWwuICAgICAgICAg IEV4cGlyZXMgRmVicnVhcnkgMTAsIDIwMTkgICAgICAgICAgICAgIFtQYWdlIDQwXQoMCkludGVy bmV0LURyYWZ0ICAgIFNlY3VyZSBaZXJvIFRvdWNoIFByb3Zpc2lvbmluZyAoU1pUUCkgICAgICBB dWd1c3QgMjAxOAoKCiAgIFJFUVVFU1QKICAgLS0tLS0tLQogICBbJ1wnIGxpbmUgd3JhcHBpbmcg YWRkZWQgZm9yIGZvcm1hdHRpbmcgb25seV0KCiAgIFBPU1QgL3Jlc3Rjb25mL29wZXJhdGlvbnMv aWV0Zi16ZXJvdG91Y2gtYm9vdHN0cmFwLXNlcnZlcjpyZXBvcnQtXAogICBwcm9ncmVzcyBIVFRQ LzEuMQogICBIT1NUOiBleGFtcGxlLmNvbQogICBDb250ZW50LVR5cGU6IGFwcGxpY2F0aW9uL3lh bmcuZGF0YSt4bWwKCiAgIDxpbnB1dCB4bWxucz0KICAgICAidXJuOmlldGY6cGFyYW1zOnhtbDpu czp5YW5nOmlldGYtemVyb3RvdWNoLWJvb3RzdHJhcC1zZXJ2ZXIiPgogICAgIDxwcm9ncmVzcy10 eXBlPmJvb3RzdHJhcC1jb21wbGV0ZTwvcHJvZ3Jlc3MtdHlwZT4KICAgICA8bWVzc2FnZT5leGFt cGxlIG1lc3NhZ2U8L21lc3NhZ2U+CiAgICAgPHNzaC1ob3N0LWtleXM+CiAgICAgICA8c3NoLWhv c3Qta2V5PmJhc2U2NGVuY29kZWR2YWx1ZT09PC9zc2gtaG9zdC1rZXk+CiAgICAgICA8c3NoLWhv c3Qta2V5PmJhc2U2NGVuY29kZWR2YWx1ZTI9PC9zc2gtaG9zdC1rZXk+CiAgICAgPC9zc2gtaG9z dC1rZXlzPgogICAgIDx0cnVzdC1hbmNob3ItY2VydHM+CiAgICAgICA8dHJ1c3QtYW5jaG9yLWNl cnQ+YmFzZTY0ZW5jb2RlZHZhbHVlPT08L3RydXN0LWFuY2hvci1jZXJ0PgogICAgIDwvdHJ1c3Qt YW5jaG9yLWNlcnRzPgogICA8L2lucHV0PgoKICAgUkVTUE9OU0UKICAgLS0tLS0tLS0KCiAgIEhU VFAvMS4xIDIwNCBObyBDb250ZW50CiAgIERhdGU6IFNhdCwgMzEgT2N0IDIwMTUgMTc6MDI6NDAg R01UCiAgIFNlcnZlcjogZXhhbXBsZS1zZXJ2ZXIKCjcuMy4gIFlBTkcgTW9kdWxlCgogICBUaGUg Ym9vdHN0cmFwIHNlcnZlcidzIGRldmljZS1mYWNpbmcgQVBJIGlzIG5vcm1hdGl2ZWx5IGRlZmlu ZWQgYnkKICAgdGhlIFlBTkcgbW9kdWxlIGRlZmluZWQgaW4gdGhpcyBzZWN0aW9uLgoKICAgVGhp cyBtb2R1bGUgdXNlcyBkYXRhIHR5cGVzIGRlZmluZWQgaW4gW1JGQzQyNTNdLCBbUkZDNTY1Ml0s CiAgIFtSRkM1MjgwXSwgW1JGQzY5NjBdLCBhbmQgW1JGQzgzNjZdLCBhbmQgdXNlcyBhbiBlbmNv ZGluZyBkZWZpbmVkIGluCiAgIFtJVFUuWDY5MC4yMDE1XS4KCiAgIDxDT0RFIEJFR0lOUz4gZmls ZSAiaWV0Zi16ZXJvdG91Y2gtYm9vdHN0cmFwLXNlcnZlckAyMDE4LTA4LTA5LnlhbmciCiAgIG1v ZHVsZSBpZXRmLXplcm90b3VjaC1ib290c3RyYXAtc2VydmVyIHsKICAgICB5YW5nLXZlcnNpb24g MS4xOwogICAgIG5hbWVzcGFjZQogICAgICAgInVybjppZXRmOnBhcmFtczp4bWw6bnM6eWFuZzpp ZXRmLXplcm90b3VjaC1ib290c3RyYXAtc2VydmVyIjsKICAgICBwcmVmaXggenRiczsKCiAgICAg b3JnYW5pemF0aW9uCiAgICAgICAiSUVURiBORVRDT05GIChOZXR3b3JrIENvbmZpZ3VyYXRpb24p IFdvcmtpbmcgR3JvdXAiOwoKCgoKV2F0c2VuLCBldCBhbC4gICAgICAgICAgRXhwaXJlcyBGZWJy dWFyeSAxMCwgMjAxOSAgICAgICAgICAgICAgW1BhZ2UgNDFdCgwKSW50ZXJuZXQtRHJhZnQgICAg U2VjdXJlIFplcm8gVG91Y2ggUHJvdmlzaW9uaW5nIChTWlRQKSAgICAgIEF1Z3VzdCAyMDE4CgoK ICAgICBjb250YWN0CiAgICAgICAiV0cgV2ViOiAgIDxodHRwOi8vdG9vbHMuaWV0Zi5vcmcvd2cv bmV0Y29uZi8+CiAgICAgICAgV0cgTGlzdDogIDxtYWlsdG86bmV0Y29uZkBpZXRmLm9yZz4KICAg ICAgICBBdXRob3I6ICAgS2VudCBXYXRzZW4gPG1haWx0bzprd2F0c2VuQGp1bmlwZXIubmV0PiI7 CgogICAgIGRlc2NyaXB0aW9uCiAgICAgICJUaGlzIG1vZHVsZSBkZWZpbmVzIGFuIGludGVyZmFj ZSBmb3IgYm9vdHN0cmFwIHNlcnZlcnMsIGFzCiAgICAgICBkZWZpbmVkIGJ5IFJGQyBYWFhYOiBa ZXJvIFRvdWNoIFByb3Zpc2lvbmluZyBmb3IgTmV0d29ya2luZwogICAgICAgRGV2aWNlcy4KCiAg ICAgICBUaGUga2V5IHdvcmRzICdNVVNUJywgJ01VU1QgTk9UJywgJ1JFUVVJUkVEJywgJ1NIQUxM JywKICAgICAgICdTSEFMTCBOT1QnLCAnU0hPVUxEJywgJ1NIT1VMRCBOT1QnLCAnUkVDT01NRU5E RUQnLCAnTUFZJywKICAgICAgIGFuZCAnT1BUSU9OQUwnIGluIHRoZSBtb2R1bGUgdGV4dCBhcmUg dG8gYmUgaW50ZXJwcmV0ZWQgYXMKICAgICAgIGRlc2NyaWJlZCBpbiBSRkMgMjExOS4KCiAgICAg ICBDb3B5cmlnaHQgKGMpIDIwMTggSUVURiBUcnVzdCBhbmQgdGhlIHBlcnNvbnMgaWRlbnRpZmll ZCBhcwogICAgICAgYXV0aG9ycyBvZiB0aGUgY29kZS4gQWxsIHJpZ2h0cyByZXNlcnZlZC4KCiAg ICAgICBSZWRpc3RyaWJ1dGlvbiBhbmQgdXNlIGluIHNvdXJjZSBhbmQgYmluYXJ5IGZvcm1zLCB3 aXRoIG9yCiAgICAgICB3aXRob3V0IG1vZGlmaWNhdGlvbiwgaXMgcGVybWl0dGVkIHB1cnN1YW50 IHRvLCBhbmQgc3ViamVjdAogICAgICAgdG8gdGhlIGxpY2Vuc2UgdGVybXMgY29udGFpbmVkIGlu LCB0aGUgU2ltcGxpZmllZCBCU0QgTGljZW5zZQogICAgICAgc2V0IGZvcnRoIGluIFNlY3Rpb24g NC5jIG9mIHRoZSBJRVRGIFRydXN0J3MgTGVnYWwgUHJvdmlzaW9ucwogICAgICAgUmVsYXRpbmcg dG8gSUVURiBEb2N1bWVudHMgKGh0dHA6Ly90cnVzdGVlLmlldGYub3JnL2xpY2Vuc2UtaW5mbykK CiAgICAgICBUaGlzIHZlcnNpb24gb2YgdGhpcyBZQU5HIG1vZHVsZSBpcyBwYXJ0IG9mIFJGQyBY WFhYOyBzZWUgdGhlCiAgICAgICBSRkMgaXRzZWxmIGZvciBmdWxsIGxlZ2FsIG5vdGljZXMuIjsK CiAgICAgcmV2aXNpb24gMjAxOC0wOC0wOSB7CiAgICAgICBkZXNjcmlwdGlvbgogICAgICAgICAi SW5pdGlhbCB2ZXJzaW9uIjsKICAgICAgIHJlZmVyZW5jZQogICAgICAgICAiUkZDIFhYWFg6IFpl cm8gVG91Y2ggUHJvdmlzaW9uaW5nIGZvciBOZXR3b3JraW5nIERldmljZXMiOwogICAgIH0KCiAg ICAgLy8gdHlwZWRlZnMKCiAgICAgdHlwZWRlZiBjbXMgewogICAgICAgdHlwZSBiaW5hcnk7CiAg ICAgICBkZXNjcmlwdGlvbgogICAgICAgICAiQSBDTVMgc3RydWN0dXJlLCBhcyBzcGVjaWZpZWQg aW4gUkZDIDU2NTIsIGVuY29kZWQgdXNpbmcKICAgICAgICAgIEFTTi4xIGRpc3Rpbmd1aXNoZWQg ZW5jb2RpbmcgcnVsZXMgKERFUiksIGFzIHNwZWNpZmllZCBpbgogICAgICAgICAgSVRVLVQgWC42 OTAuIjsKICAgICAgIHJlZmVyZW5jZQogICAgICAgICAiUkZDIDU2NTI6CiAgICAgICAgICAgIENy eXB0b2dyYXBoaWMgTWVzc2FnZSBTeW50YXggKENNUykKICAgICAgICAgIElUVS1UIFguNjkwOgog ICAgICAgICAgICBJbmZvcm1hdGlvbiB0ZWNobm9sb2d5IC0gQVNOLjEgZW5jb2RpbmcgcnVsZXM6 CiAgICAgICAgICAgIFNwZWNpZmljYXRpb24gb2YgQmFzaWMgRW5jb2RpbmcgUnVsZXMgKEJFUiks CgoKCldhdHNlbiwgZXQgYWwuICAgICAgICAgIEV4cGlyZXMgRmVicnVhcnkgMTAsIDIwMTkgICAg ICAgICAgICAgIFtQYWdlIDQyXQoMCkludGVybmV0LURyYWZ0ICAgIFNlY3VyZSBaZXJvIFRvdWNo IFByb3Zpc2lvbmluZyAoU1pUUCkgICAgICBBdWd1c3QgMjAxOAoKCiAgICAgICAgICAgIENhbm9u aWNhbCBFbmNvZGluZyBSdWxlcyAoQ0VSKSBhbmQgRGlzdGluZ3Vpc2hlZAogICAgICAgICAgICBF bmNvZGluZyBSdWxlcyAoREVSKS4iOwogICAgIH0KCiAgICAgLy8gUlBDcwoKICAgICBycGMgZ2V0 LWJvb3RzdHJhcHBpbmctZGF0YSB7CiAgICAgICBkZXNjcmlwdGlvbgogICAgICAgICAiVGhpcyBS UEMgZW5hYmxlcyBhIGRldmljZSwgYXMgaWRlbnRpZmllZCBieSB0aGUgUkVTVENPTkYKICAgICAg ICAgIHVzZXJuYW1lLCB0byBvYnRhaW4gYm9vdHN0cmFwcGluZyBkYXRhIHRoYXQgaGFzIGJlZW4g bWFkZQogICAgICAgICAgYXZhaWxhYmxlIGZvciBpdC4iOwogICAgICAgaW5wdXQgewogICAgICAg ICBsZWFmIHVudHJ1c3RlZC1jb25uZWN0aW9uIHsKICAgICAgICAgICB0eXBlIGVtcHR5OwogICAg ICAgICAgIGRlc2NyaXB0aW9uCiAgICAgICAgICAgICAiVGhpcyBvcHRpb25hbCBpbnB1dCBwYXJh bWV0ZXIgZW5hYmxlcyBhIGRldmljZSB0bwogICAgICAgICAgICAgIGNvbW11bmljYXRlIHRvIHRo ZSBib290c3RyYXAgc2VydmVyIHRoYXQgaXQgaXMgdW5hYmxlIHRvCiAgICAgICAgICAgICAgYXV0 aGVudGljYXRlIHRoZSBib290c3RyYXAgc2VydmVyJ3MgVExTIGNlcnRpZmljYXRlLiAgSW4KICAg ICAgICAgICAgICBzdWNoIGNpcmN1bXN0YW5jZXMsIHRoZSBkZXZpY2UgbGlrZWx5IGRvZXMgbm90 IHNlbmQgYW55CiAgICAgICAgICAgICAgb2YgdGhlIG90aGVyIGlucHV0IHBhcmFtZXRlcnMsIGV4 Y2VwdCBmb3IgdGhlICdub25jZScKICAgICAgICAgICAgICBwYXJhbWV0ZXIuICBVcG9uIHJlY2Vp dmluZyB0aGlzIGlucHV0IHBhcmFtZXRlciwgdGhlCiAgICAgICAgICAgICAgYm9vdHN0cmFwIHNl cnZlciBzaG91bGQgb25seSByZXR1cm4gdW5zaWduZWQgcmVkaXJlY3QKICAgICAgICAgICAgICBp bmZvcm1hdGlvbiBvciBzaWduZWQgZGF0YSBvZiBhbnkgdHlwZS4iOwogICAgICAgICB9CiAgICAg ICAgIGxlYWYgaHctbW9kZWwgewogICAgICAgICAgIHR5cGUgc3RyaW5nOwogICAgICAgICAgIGRl c2NyaXB0aW9uCiAgICAgICAgICAgICAiVGhpcyBvcHRpb25hbCBpbnB1dCBwYXJhbWV0ZXIgZW5h YmxlcyBhIGRldmljZSB0bwogICAgICAgICAgICAgIGNvbW11bmljYXRlIHRvIHRoZSBib290c3Ry YXAgc2VydmVyIGl0cyB2ZW5kb3Igc3BlY2lmaWMKICAgICAgICAgICAgICBoYXJkd2FyZSBtb2Rl bCBudW1iZXIuICBUaGlzIHBhcmFtZXRlciBtYXkgYmUgbmVlZGVkLAogICAgICAgICAgICAgIGZv ciBpbnN0YW5jZSwgd2hlbiBhIGRldmljZSdzIElEZXZJRCBjZXJ0aWZpY2F0ZSBkb2VzCiAgICAg ICAgICAgICAgbm90IGluY2x1ZGUgdGhlICdoYXJkd2FyZU1vZGVsTmFtZScgdmFsdWUgaW4gaXRz CiAgICAgICAgICAgICAgc3ViamVjdEFsdE5hbWUgZmllbGQsIGFzIGlzIGFsbG93ZWQgYnkgODAy LjFBUi0yMDA5LiI7CiAgICAgICAgICAgcmVmZXJlbmNlCiAgICAgICAgICAgICAiSUVFRSA4MDIu MUFSLTIwMDk6IElFRUUgU3RhbmRhcmQgZm9yIExvY2FsIGFuZAogICAgICAgICAgICAgICAgbWV0 cm9wb2xpdGFuIGFyZWEgbmV0d29ya3MgLSBTZWN1cmUgRGV2aWNlIElkZW50aXR5IjsKICAgICAg ICAgfQogICAgICAgICBsZWFmIG9zLW5hbWUgewogICAgICAgICAgIHR5cGUgc3RyaW5nOwogICAg ICAgICAgIGRlc2NyaXB0aW9uCiAgICAgICAgICAgICAiVGhpcyBvcHRpb25hbCBpbnB1dCBwYXJh bWV0ZXIgZW5hYmxlcyBhIGRldmljZSB0bwogICAgICAgICAgICAgIGNvbW11bmljYXRlIHRvIHRo ZSBib290c3RyYXAgc2VydmVyIHRoZSBuYW1lIG9mIGl0cwogICAgICAgICAgICAgIG9wZXJhdGlu ZyBzeXN0ZW0uICBUaGlzIHBhcmFtZXRlciBtYXkgYmUgdXNlZnVsIGlmCiAgICAgICAgICAgICAg dGhlIGRldmljZSwgYXMgaWRlbnRpZmllZCBieSBpdHMgc2VyaWFsIG51bWJlciwgY2FuCiAgICAg ICAgICAgICAgcnVuIG1vcmUgdGhhbiBvbmUgdHlwZSBvZiBvcGVyYXRpbmcgc3lzdGVtIChlLmcu LAogICAgICAgICAgICAgIG9uIGEgd2hpdGUtYm94IHN5c3RlbS4iOwogICAgICAgICB9CiAgICAg ICAgIGxlYWYgb3MtdmVyc2lvbiB7CgoKCldhdHNlbiwgZXQgYWwuICAgICAgICAgIEV4cGlyZXMg RmVicnVhcnkgMTAsIDIwMTkgICAgICAgICAgICAgIFtQYWdlIDQzXQoMCkludGVybmV0LURyYWZ0 ICAgIFNlY3VyZSBaZXJvIFRvdWNoIFByb3Zpc2lvbmluZyAoU1pUUCkgICAgICBBdWd1c3QgMjAx OAoKCiAgICAgICAgICAgdHlwZSBzdHJpbmc7CiAgICAgICAgICAgZGVzY3JpcHRpb24KICAgICAg ICAgICAgICJUaGlzIG9wdGlvbmFsIGlucHV0IHBhcmFtZXRlciBlbmFibGVzIGEgZGV2aWNlIHRv CiAgICAgICAgICAgICAgY29tbXVuaWNhdGUgdG8gdGhlIGJvb3RzdHJhcCBzZXJ2ZXIgdGhlIHZl cnNpb24gb2YgaXRzCiAgICAgICAgICAgICAgb3BlcmF0aW5nIHN5c3RlbS4gIFRoaXMgcGFyYW1l dGVyIG1heSBiZSB1c2VkIGJ5IGEKICAgICAgICAgICAgICBib290c3RyYXAgc2VydmVyIHRvIHJl dHVybiBhbiBvcGVyYXRpbmcgc3lzdGVtIHNwZWNpZmljCiAgICAgICAgICAgICAgcmVzcG9uc2Ug dG8gdGhlIGRldmljZSwgdGh1cyBuZWdhdGluZyB0aGUgbmVlZCBmb3IgYQogICAgICAgICAgICAg IHBvdGVudGlhbGx5IGV4cGVuc2l2ZSBib290LWltYWdlIHVwZGF0ZS4iOwogICAgICAgICB9CiAg ICAgICAgIGxlYWYgbm9uY2UgewogICAgICAgICAgIHR5cGUgYmluYXJ5IHsKICAgICAgICAgICAg IGxlbmd0aCAiOC4uMzIiOwogICAgICAgICAgIH0KICAgICAgICAgICBkZXNjcmlwdGlvbgogICAg ICAgICAgICAgIlRoaXMgb3B0aW9uYWwgaW5wdXQgcGFyYW1ldGVyIGVuYWJsZXMgYSBkZXZpY2Ug dG8KICAgICAgICAgICAgICBjb21tdW5pY2F0ZSB0byB0aGUgYm9vdHN0cmFwIHNlcnZlciBhIG5v bmNlIHZhbHVlLgogICAgICAgICAgICAgIFRoaXMgbWF5IGJlIGVzcGVjaWFsbHkgdXNlZnVsIGZv ciBkZXZpY2VzIGxhY2tpbmcKICAgICAgICAgICAgICBhbiBhY2N1cmF0ZSBjbG9jaywgYXMgdGhl biB0aGUgYm9vdHN0cmFwIHNlcnZlcgogICAgICAgICAgICAgIGNhbiBkeW5hbWljYWxseSBvYnRh aW4gZnJvbSB0aGUgbWFudWZhY3R1cmVyIGEKICAgICAgICAgICAgICB2b3VjaGVyIHdpdGggdGhl IG5vbmNlIHZhbHVlIGluIGl0LCBhcyBkZXNjcmliZWQKICAgICAgICAgICAgICBpbiBSRkMgODM2 Ni4iOwogICAgICAgICAgIHJlZmVyZW5jZQogICAgICAgICAgICAgIlJGQyA4MzY2OgogICAgICAg ICAgICAgICAgQSBWb3VjaGVyIEFydGlmYWN0IGZvciBCb290c3RyYXBwaW5nIFByb3RvY29scyI7 CiAgICAgICAgIH0KICAgICAgIH0KICAgICAgIG91dHB1dCB7CiAgICAgICAgIGxlYWYgemVyb3Rv dWNoLWluZm9ybWF0aW9uIHsKICAgICAgICAgICB0eXBlIGNtczsKICAgICAgICAgICBtYW5kYXRv cnkgdHJ1ZTsKICAgICAgICAgICBkZXNjcmlwdGlvbgogICAgICAgICAgICAgIkEgemVybyB0b3Vj aCBpbmZvcm1hdGlvbiBhcnRpZmFjdCwgYXMgZGVzY3JpYmVkIGluCiAgICAgICAgICAgICAgU2Vj dGlvbiAzLjEgb2YgUkZDIFhYWFguIjsKICAgICAgICAgICByZWZlcmVuY2UKICAgICAgICAgICAg ICJSRkMgWFhYWDoKICAgICAgICAgICAgICAgICBaZXJvIFRvdWNoIFByb3Zpc2lvbmluZyBmb3Ig TmV0d29ya2luZyBEZXZpY2VzIjsKICAgICAgICAgfQogICAgICAgICBsZWFmIG93bmVyLWNlcnRp ZmljYXRlIHsKICAgICAgICAgICB0eXBlIGNtczsKICAgICAgICAgICBtdXN0ICcuLi9vd25lcnNo aXAtdm91Y2hlcicgewogICAgICAgICAgICAgZGVzY3JpcHRpb24KICAgICAgICAgICAgICAgIkFu IG93bmVyc2hpcCB2b3VjaGVyIG11c3QgYmUgcHJlc2VudCB3aGVuZXZlciBhbiBvd25lcgogICAg ICAgICAgICAgICAgY2VydGlmaWNhdGUgaXMgcHJlc2VudGVkLiI7CiAgICAgICAgICAgfQogICAg ICAgICAgIGRlc2NyaXB0aW9uCiAgICAgICAgICAgICAiQW4gb3duZXIgY2VydGlmaWNhdGUgYXJ0 aWZhY3QsIGFzIGRlc2NyaWJlZCBpbiBTZWN0aW9uCiAgICAgICAgICAgICAgMy4yIG9mIFJGQyBY WFhYLiAgVGhpcyBsZWFmIGlzIG9wdGlvbmFsIGJlY2F1c2UgaXQgaXMKICAgICAgICAgICAgICBv bmx5IG5lZWRlZCB3aGVuIHRoZSB6ZXJvIHRvdWNoIGluZm9ybWF0aW9uIGFydGlmYWN0CgoKCldh dHNlbiwgZXQgYWwuICAgICAgICAgIEV4cGlyZXMgRmVicnVhcnkgMTAsIDIwMTkgICAgICAgICAg ICAgIFtQYWdlIDQ0XQoMCkludGVybmV0LURyYWZ0ICAgIFNlY3VyZSBaZXJvIFRvdWNoIFByb3Zp c2lvbmluZyAoU1pUUCkgICAgICBBdWd1c3QgMjAxOAoKCiAgICAgICAgICAgICAgaXMgc2lnbmVk LiI7CiAgICAgICAgICAgcmVmZXJlbmNlCiAgICAgICAgICAgICAiUkZDIFhYWFg6CiAgICAgICAg ICAgICAgICAgWmVybyBUb3VjaCBQcm92aXNpb25pbmcgZm9yIE5ldHdvcmtpbmcgRGV2aWNlcyI7 CiAgICAgICAgIH0KICAgICAgICAgbGVhZiBvd25lcnNoaXAtdm91Y2hlciB7CiAgICAgICAgICAg dHlwZSBjbXM7CiAgICAgICAgICAgbXVzdCAnLi4vb3duZXItY2VydGlmaWNhdGUnIHsKICAgICAg ICAgICAgIGRlc2NyaXB0aW9uCiAgICAgICAgICAgICAgICJBbiBvd25lciBjZXJ0aWZpY2F0ZSBt dXN0IGJlIHByZXNlbnQgd2hlbmV2ZXIgYW4KICAgICAgICAgICAgICAgIG93bmVyc2hpcCB2b3Vj aGVyIGlzIHByZXNlbnRlZC4iOwogICAgICAgICAgIH0KICAgICAgICAgICBkZXNjcmlwdGlvbgog ICAgICAgICAgICAgIkFuIG93bmVyc2hpcCB2b3VjaGVyIGFydGlmYWN0LCBhcyBkZXNjcmliZWQg YnkgU2VjdGlvbgogICAgICAgICAgICAgIDMuMyBvZiBSRkMgWFhYWC4gIFRoaXMgbGVhZiBpcyBv cHRpb25hbCBiZWNhdXNlIGl0IGlzCiAgICAgICAgICAgICAgb25seSBuZWVkZWQgd2hlbiB0aGUg emVybyB0b3VjaCBpbmZvcm1hdGlvbiBhcnRpZmFjdAogICAgICAgICAgICAgIGlzIHNpZ25lZC4i OwogICAgICAgICAgIHJlZmVyZW5jZQogICAgICAgICAgICAgIlJGQyBYWFhYOgogICAgICAgICAg ICAgICAgIFplcm8gVG91Y2ggUHJvdmlzaW9uaW5nIGZvciBOZXR3b3JraW5nIERldmljZXMiOwog ICAgICAgICB9CiAgICAgICB9CiAgICAgfQoKICAgICBycGMgcmVwb3J0LXByb2dyZXNzIHsKICAg ICAgIGRlc2NyaXB0aW9uCiAgICAgICAgICJUaGlzIFJQQyBlbmFibGVzIGEgZGV2aWNlLCBhcyBp ZGVudGlmaWVkIGJ5IHRoZSBSRVNUQ09ORgogICAgICAgICAgdXNlcm5hbWUsIHRvIHJlcG9ydCBp dHMgYm9vdHN0cmFwcGluZyBwcm9ncmVzcyB0byB0aGUKICAgICAgICAgIGJvb3RzdHJhcCBzZXJ2 ZXIuICBUaGlzIFJQQyBpcyBleHBlY3RlZCB0byBiZSB1c2VkIHdoZW4KICAgICAgICAgIHRoZSBk ZXZpY2Ugb2J0YWlucyBvbmJvYXJkaW5nLWluZm9ybWF0aW9uIGZyb20gYSB0cnVzdGVkCiAgICAg ICAgICBib290c3RhcCBzZXJ2ZXIuIjsKICAgICAgIGlucHV0IHsKICAgICAgICAgbGVhZiBwcm9n cmVzcy10eXBlIHsKICAgICAgICAgICB0eXBlIGVudW1lcmF0aW9uIHsKICAgICAgICAgICAgIGVu dW0gImJvb3RzdHJhcC1pbml0aWF0ZWQiIHsKICAgICAgICAgICAgICAgZGVzY3JpcHRpb24KICAg ICAgICAgICAgICAgICAiSW5kaWNhdGVzIHRoYXQgdGhlIGRldmljZSBqdXN0IHVzZWQgdGhlCiAg ICAgICAgICAgICAgICAgICdnZXQtYm9vdHN0cmFwcGluZy1kYXRhJyBSUEMuICBUaGUgJ21lc3Nh Z2UnIG5vZGUKICAgICAgICAgICAgICAgICAgYmVsb3cgTUFZIGNvbnRhaW4gYW55IGFkZGl0aW9u YWwgaW5mb3JtYXRpb24gdGhhdAogICAgICAgICAgICAgICAgICB0aGUgbWFudWZhY3R1cmVyIHRo aW5rcyBtaWdodCBiZSB1c2VmdWwuIjsKICAgICAgICAgICAgIH0KICAgICAgICAgICAgIGVudW0g InBhcnNpbmctaW5pdGlhdGVkIiB7CiAgICAgICAgICAgICAgIGRlc2NyaXB0aW9uCiAgICAgICAg ICAgICAgICAgIkluZGljYXRlcyB0aGF0IHRoZSBkZXZpY2UgaXMgYWJvdXQgdG8gc3RhcnQgcGFy c2luZwogICAgICAgICAgICAgICAgICB0aGUgb25ib2FyZGluZyBpbmZvcm1hdGlvbi4gIFRoaXMg cHJvZ3Jlc3MgdHlwZSBpcwogICAgICAgICAgICAgICAgICBvbmx5IGZvciB3aGVuIHBhcnNpbmcg aXMgaW1wbGVtZW50ZWQgYXMgYSBkaXN0aW5jdAogICAgICAgICAgICAgICAgICBzdGVwLiI7CiAg ICAgICAgICAgICB9CgoKCldhdHNlbiwgZXQgYWwuICAgICAgICAgIEV4cGlyZXMgRmVicnVhcnkg MTAsIDIwMTkgICAgICAgICAgICAgIFtQYWdlIDQ1XQoMCkludGVybmV0LURyYWZ0ICAgIFNlY3Vy ZSBaZXJvIFRvdWNoIFByb3Zpc2lvbmluZyAoU1pUUCkgICAgICBBdWd1c3QgMjAxOAoKCiAgICAg ICAgICAgICBlbnVtICJwYXJzaW5nLXdhcm5pbmciIHsKICAgICAgICAgICAgICAgZGVzY3JpcHRp b24KICAgICAgICAgICAgICAgICAiSW5kaWNhdGVzIHRoYXQgdGhlIGRldmljZSBoYWQgYSBub24t ZmF0YWwgZXJyb3Igd2hlbgogICAgICAgICAgICAgICAgICBwYXJzaW5nIHRoZSByZXNwb25zZSBm cm9tIHRoZSBib290c3RyYXAgc2VydmVyLiAgVGhlCiAgICAgICAgICAgICAgICAgICdtZXNzYWdl JyBub2RlIGJlbG93IFNIT1VMRCBpbmRpY2F0ZSB0aGUgc3BlY2lmaWMKICAgICAgICAgICAgICAg ICAgd2FybmluZyB0aGF0IG9jY3VycmVkLiI7CiAgICAgICAgICAgICB9CiAgICAgICAgICAgICBl bnVtICJwYXJzaW5nLWVycm9yIiB7CiAgICAgICAgICAgICAgIGRlc2NyaXB0aW9uCiAgICAgICAg ICAgICAgICAgIkluZGljYXRlcyB0aGF0IHRoZSBkZXZpY2UgZW5jb3VudGVyZWQgYSBmYXRhbCBl cnJvcgogICAgICAgICAgICAgICAgICB3aGVuIHBhcnNpbmcgdGhlIHJlc3BvbnNlIGZyb20gdGhl IGJvb3RzdHJhcCBzZXJ2ZXIuCiAgICAgICAgICAgICAgICAgIEZvciBpbnN0YW5jZSwgdGhpcyBj b3VsZCBiZSBkdWUgdG8gbWFsZm9ybWVkIGVuY29kaW5nLAogICAgICAgICAgICAgICAgICB0aGUg ZGV2aWNlIGV4cGVjdGluZyBzaWduZWQgZGF0YSB3aGVuIG9ubHkgdW5zaWduZWQKICAgICAgICAg ICAgICAgICAgZGF0YSBpcyBwcm92aWRlZCwgdGhlIG93bmVyc2hpcCB2b3VjaGVyIG5vdCBsaXN0 aW5nCiAgICAgICAgICAgICAgICAgIHRoZSBkZXZpY2UncyBzZXJpYWwgbnVtYmVyLCBvciBiZWNh dXNlIHRoZSBzaWduYXR1cmUKICAgICAgICAgICAgICAgICAgZGlkbid0IG1hdGNoLiAgVGhlICdt ZXNzYWdlJyBub2RlIGJlbG93IFNIT1VMRAogICAgICAgICAgICAgICAgICBpbmRpY2F0ZSB0aGUg c3BlY2lmaWMgZXJyb3IuICBUaGlzIHByb2dyZXNzIHR5cGUKICAgICAgICAgICAgICAgICAgYWxz byBpbmRpY2F0ZXMgdGhhdCB0aGUgZGV2aWNlIGhhcyBhYmFuZG9uZWQgdHJ5aW5nCiAgICAgICAg ICAgICAgICAgIHRvIGJvb3RzdHJhcCBvZmYgdGhpcyBib290c3RyYXAgc2VydmVyLiI7CiAgICAg ICAgICAgICB9CiAgICAgICAgICAgICBlbnVtICJwYXJzaW5nLWNvbXBsZXRlZCIgewogICAgICAg ICAgICAgICBkZXNjcmlwdGlvbgogICAgICAgICAgICAgICAgICJJbmRpY2F0ZXMgdGhhdCB0aGUg ZGV2aWNlIHN1Y2Nlc3NmdWxseSBjb21wbGV0ZWQKICAgICAgICAgICAgICAgICAgcGFyc2luZyB0 aGUgb25ib2FyZGluZyBpbmZvcm1hdGlvbi4gIFRoaXMgcHJvZ3Jlc3MKICAgICAgICAgICAgICAg ICAgdHlwZSBpcyBvbmx5IGZvciB3aGVuIHBhcnNpbmcgaXMgaW1wbGVtZW50ZWQgYXMgYQogICAg ICAgICAgICAgICAgICBkaXN0aW5jdCBzdGVwLiI7CiAgICAgICAgICAgICB9CiAgICAgICAgICAg ICBlbnVtICJib290LWltYWdlLWluaXRpYXRlZCIgewogICAgICAgICAgICAgICBkZXNjcmlwdGlv bgogICAgICAgICAgICAgICAgICJJbmRpY2F0ZXMgdGhhdCB0aGUgZGV2aWNlIGlzIGFib3V0IHRv IHN0YXJ0CiAgICAgICAgICAgICAgICAgIHByb2Nlc3NpbmcgdGhlIGJvb3QtaW1hZ2UgaW5mb3Jt YXRpb24uIjsKICAgICAgICAgICAgIH0KICAgICAgICAgICAgIGVudW0gImJvb3QtaW1hZ2Utd2Fy bmluZyIgewogICAgICAgICAgICAgICBkZXNjcmlwdGlvbgogICAgICAgICAgICAgICAgICJJbmRp Y2F0ZXMgdGhhdCB0aGUgZGV2aWNlIGVuY291bnRlcmVkIGEgbm9uLWZhdGFsCiAgICAgICAgICAg ICAgICAgIGVycm9yIGNvbmRpdGlvbiB3aGVuIHRyeWluZyB0byBpbnN0YWxsIGEgYm9vdC1pbWFn ZS4KICAgICAgICAgICAgICAgICAgQSBwb3NzaWJsZSByZWFzb24gbWlnaHQgaW5jbHVkZSBhIG5l ZWQgdG8gcmVmb3JtYXQgYQogICAgICAgICAgICAgICAgICBwYXJ0aXRpb24gY2F1c2luZyBsb3Nz IG9mIGRhdGEuICBUaGUgJ21lc3NhZ2UnIG5vZGUKICAgICAgICAgICAgICAgICAgYmVsb3cgU0hP VUxEIGluZGljYXRlIGFueSB3YXJuaW5nIG1lc3NhZ2VzIHRoYXQgd2VyZQogICAgICAgICAgICAg ICAgICBnZW5lcmF0ZWQuIjsKICAgICAgICAgICAgIH0KICAgICAgICAgICAgIGVudW0gImJvb3Qt aW1hZ2UtZXJyb3IiIHsKICAgICAgICAgICAgICAgZGVzY3JpcHRpb24KICAgICAgICAgICAgICAg ICAiSW5kaWNhdGVzIHRoYXQgdGhlIGRldmljZSBlbmNvdW50ZXJlZCBhbiBlcnJvciB3aGVuCiAg ICAgICAgICAgICAgICAgIHRyeWluZyB0byBpbnN0YWxsIGEgYm9vdC1pbWFnZSwgd2hpY2ggY291 bGQgYmUgZm9yCiAgICAgICAgICAgICAgICAgIHJlYXNvbnMgc3VjaCBhcyBhIGZpbGUgc2VydmVy IGJlaW5nIHVucmVhY2hhYmxlLAogICAgICAgICAgICAgICAgICBmaWxlIG5vdCBmb3VuZCwgc2ln bmF0dXJlIG1pc21hdGNoLCBldGMuICBUaGUKICAgICAgICAgICAgICAgICAgJ21lc3NhZ2UnIG5v ZGUgU0hPVUxEIGluZGljYXRlIHRoZSBzcGVjaWZpYyBlcnJvcgoKCgpXYXRzZW4sIGV0IGFsLiAg ICAgICAgICBFeHBpcmVzIEZlYnJ1YXJ5IDEwLCAyMDE5ICAgICAgICAgICAgICBbUGFnZSA0Nl0K DApJbnRlcm5ldC1EcmFmdCAgICBTZWN1cmUgWmVybyBUb3VjaCBQcm92aXNpb25pbmcgKFNaVFAp ICAgICAgQXVndXN0IDIwMTgKCgogICAgICAgICAgICAgICAgICB0aGF0IG9jY3VycmVkLiAgVGhp cyBwcm9ncmVzcyB0eXBlIGFsc28gaW5kaWNhdGVzCiAgICAgICAgICAgICAgICAgIHRoYXQgdGhl IGRldmljZSBoYXMgYWJhbmRvbmVkIHRyeWluZyB0byBib290c3RyYXAKICAgICAgICAgICAgICAg ICAgb2ZmIHRoaXMgYm9vdHN0cmFwIHNlcnZlci4iOwogICAgICAgICAgICAgfQogICAgICAgICAg ICAgZW51bSAiYm9vdC1pbWFnZS1hbHJlYWR5LWluc3RhbGxlZCIgewogICAgICAgICAgICAgICBk ZXNjcmlwdGlvbgogICAgICAgICAgICAgICAgICJJbmRpY2F0ZXMgdGhhdCB0aGUgZGV2aWNlIHN1 Y2Nlc3NmdWxseSBjb21wbGV0ZWQKICAgICAgICAgICAgICAgICAgcHJvY2Vzc2luZyB0aGUgYm9v dCBpbWFnZSBpbmZvcm1hdGlvbiwgZmluZGluZwogICAgICAgICAgICAgICAgICB0aGF0IGl0IGlz IGFscmVhZHkgcnVubmluZyB0aGUgY29ycmVjdCBib290IGltYWdlLiI7CiAgICAgICAgICAgICB9 CiAgICAgICAgICAgICBlbnVtICJib290LWltYWdlLWluc3RhbGxlZC1yZWJvb3QtZW1pbmVudCIg ewogICAgICAgICAgICAgICBkZXNjcmlwdGlvbgogICAgICAgICAgICAgICAgICJJbmRpY2F0ZXMg dGhhdCB0aGUgZGV2aWNlIHN1Y2Nlc3NmdWxseSBpbnN0YWxsZWQKICAgICAgICAgICAgICAgICAg YSBuZXcgYm9vdCBpbWFnZSBhbmQgaXMgYWJvdXQgdG8gcmVib290LiAgQWZ0ZXIKICAgICAgICAg ICAgICAgICAgc2VuZGluZyB0aGlzIHByb2dyZXNzIHR5cGUsIHRoZSBkZXZpY2UgaXMgbm90CiAg ICAgICAgICAgICAgICAgIGV4cGVjdGVkIHRvIGFjY2VzcyB0aGUgYm9vdHN0cmFwIHNlcnZlciBh Z2Fpbi4iOwogICAgICAgICAgICAgfQogICAgICAgICAgICAgZW51bSAicHJlLXNjcmlwdC1pbml0 aWF0ZWQiIHsKICAgICAgICAgICAgICAgZGVzY3JpcHRpb24KICAgICAgICAgICAgICAgICAiSW5k aWNhdGVzIHRoYXQgdGhlIGRldmljZSBpcyBhYm91dCB0byBleGVjdXRlIHRoZQogICAgICAgICAg ICAgICAgICAncHJlLWNvbmZpZ3VyYXRpb24tc2NyaXB0Jy4iOwogICAgICAgICAgICAgfQogICAg ICAgICAgICAgZW51bSAicHJlLXNjcmlwdC13YXJuaW5nIiB7CiAgICAgICAgICAgICAgIGRlc2Ny aXB0aW9uCiAgICAgICAgICAgICAgICAgIkluZGljYXRlcyB0aGF0IHRoZSBkZXZpY2Ugb2J0YWlu ZWQgYSB3YXJuaW5nIGZyb20gdGhlCiAgICAgICAgICAgICAgICAgICdwcmUtY29uZmlndXJhdGlv bi1zY3JpcHQnIHdoZW4gaXQgd2FzIGV4ZWN1dGVkLiAgVGhlCiAgICAgICAgICAgICAgICAgICdt ZXNzYWdlJyBub2RlIGJlbG93IFNIT1VMRCBjYXB0dXJlIGFueSBvdXRwdXQgdGhlCiAgICAgICAg ICAgICAgICAgIHNjcmlwdCBwcm9kdWNlcy4iOwogICAgICAgICAgICAgfQogICAgICAgICAgICAg ZW51bSAicHJlLXNjcmlwdC1lcnJvciIgewogICAgICAgICAgICAgICBkZXNjcmlwdGlvbgogICAg ICAgICAgICAgICAgICJJbmRpY2F0ZXMgdGhhdCB0aGUgZGV2aWNlIG9idGFpbmVkIGFuIGVycm9y IGZyb20gdGhlCiAgICAgICAgICAgICAgICAgICdwcmUtY29uZmlndXJhdGlvbi1zY3JpcHQnIHdo ZW4gaXQgd2FzIGV4ZWN1dGVkLiBUaGUKICAgICAgICAgICAgICAgICAgJ21lc3NhZ2UnIG5vZGUg YmVsb3cgU0hPVUxEIGNhcHR1cmUgYW55IG91dHB1dCB0aGUKICAgICAgICAgICAgICAgICAgc2Ny aXB0IHByb2R1Y2VzLiAgVGhpcyBwcm9ncmVzcyB0eXBlIGFsc28gaW5kaWNhdGVzCiAgICAgICAg ICAgICAgICAgIHRoYXQgdGhlIGRldmljZSBoYXMgYWJhbmRvbmVkIHRyeWluZyB0byBib290c3Ry YXAKICAgICAgICAgICAgICAgICAgb2ZmIHRoaXMgYm9vdHN0cmFwIHNlcnZlci4iOwogICAgICAg ICAgICAgfQogICAgICAgICAgICAgZW51bSAicHJlLXNjcmlwdC1jb21wbGV0ZWQiIHsKICAgICAg ICAgICAgICAgZGVzY3JpcHRpb24KICAgICAgICAgICAgICAgICAiSW5kaWNhdGVzIHRoYXQgdGhl IGRldmljZSBzdWNjZXNzZnVsbHkgZXhlY3V0ZWQgdGhlCiAgICAgICAgICAgICAgICAgICdwcmUt Y29uZmlndXJhdGlvbi1zY3JpcHQnLiI7CiAgICAgICAgICAgICB9CiAgICAgICAgICAgICBlbnVt ICJjb25maWctaW5pdGlhdGVkIiB7CiAgICAgICAgICAgICAgIGRlc2NyaXB0aW9uCiAgICAgICAg ICAgICAgICAgIkluZGljYXRlcyB0aGF0IHRoZSBkZXZpY2UgaXMgYWJvdXQgdG8gY29tbWl0IHRo ZQogICAgICAgICAgICAgICAgICBpbml0aWFsIGNvbmZpZ3VyYXRpb24uIjsKICAgICAgICAgICAg IH0KCgoKV2F0c2VuLCBldCBhbC4gICAgICAgICAgRXhwaXJlcyBGZWJydWFyeSAxMCwgMjAxOSAg ICAgICAgICAgICAgW1BhZ2UgNDddCgwKSW50ZXJuZXQtRHJhZnQgICAgU2VjdXJlIFplcm8gVG91 Y2ggUHJvdmlzaW9uaW5nIChTWlRQKSAgICAgIEF1Z3VzdCAyMDE4CgoKICAgICAgICAgICAgIGVu dW0gImNvbmZpZy13YXJuaW5nIiB7CiAgICAgICAgICAgICAgIGRlc2NyaXB0aW9uCiAgICAgICAg ICAgICAgICAgIkluZGljYXRlcyB0aGF0IHRoZSBkZXZpY2Ugb2J0YWluZWQgd2FybmluZyBtZXNz YWdlcwogICAgICAgICAgICAgICAgICB3aGVuIGl0IGNvbW1pdHRlZCB0aGUgaW5pdGlhbCBjb25m aWd1cmF0aW9uLiAgVGhlCiAgICAgICAgICAgICAgICAgICdtZXNzYWdlJyBub2RlIGJlbG93IFNI T1VMRCBpbmRpY2F0ZSBhbnkgd2FybmluZwogICAgICAgICAgICAgICAgICBtZXNzYWdlcyB0aGF0 IHdlcmUgZ2VuZXJhdGVkLiI7CiAgICAgICAgICAgICB9CiAgICAgICAgICAgICBlbnVtICJjb25m aWctZXJyb3IiIHsKICAgICAgICAgICAgICAgZGVzY3JpcHRpb24KICAgICAgICAgICAgICAgICAi SW5kaWNhdGVzIHRoYXQgdGhlIGRldmljZSBvYnRhaW5lZCBlcnJvciBtZXNzYWdlcwogICAgICAg ICAgICAgICAgICB3aGVuIGl0IGNvbW1pdHRlZCB0aGUgaW5pdGlhbCBjb25maWd1cmF0aW9uLiAg VGhlCiAgICAgICAgICAgICAgICAgICdtZXNzYWdlJyBub2RlIGJlbG93IFNIT1VMRCBpbmRpY2F0 ZSB0aGUgZXJyb3IKICAgICAgICAgICAgICAgICAgbWVzc2FnZXMgdGhhdCB3ZXJlIGdlbmVyYXRl ZC4gIFRoaXMgcHJvZ3Jlc3MgdHlwZQogICAgICAgICAgICAgICAgICBhbHNvIGluZGljYXRlcyB0 aGF0IHRoZSBkZXZpY2UgaGFzIGFiYW5kb25lZCB0cnlpbmcKICAgICAgICAgICAgICAgICAgdG8g Ym9vdHN0cmFwIG9mZiB0aGlzIGJvb3RzdHJhcCBzZXJ2ZXIuIjsKICAgICAgICAgICAgIH0KICAg ICAgICAgICAgIGVudW0gImNvbmZpZy1jb21wbGV0ZWQiIHsKICAgICAgICAgICAgICAgZGVzY3Jp cHRpb24KICAgICAgICAgICAgICAgICAiSW5kaWNhdGVzIHRoYXQgdGhlIGRldmljZSBzdWNjZXNz ZnVsbHkgY29tbWl0dGVkCiAgICAgICAgICAgICAgICAgIHRoZSBpbml0aWFsIGNvbmZpZ3VyYXRp b24uIjsKICAgICAgICAgICAgIH0KICAgICAgICAgICAgIGVudW0gInBvc3Qtc2NyaXB0LWluaXRp YXRlZCIgewogICAgICAgICAgICAgICBkZXNjcmlwdGlvbgogICAgICAgICAgICAgICAgICJJbmRp Y2F0ZXMgdGhhdCB0aGUgZGV2aWNlIGlzIGFib3V0IHRvIGV4ZWN1dGUgdGhlCiAgICAgICAgICAg ICAgICAgICdwb3N0LWNvbmZpZ3VyYXRpb24tc2NyaXB0Jy4iOwogICAgICAgICAgICAgfQogICAg ICAgICAgICAgZW51bSAicG9zdC1zY3JpcHQtd2FybmluZyIgewogICAgICAgICAgICAgICBkZXNj cmlwdGlvbgogICAgICAgICAgICAgICAgICJJbmRpY2F0ZXMgdGhhdCB0aGUgZGV2aWNlIG9idGFp bmVkIGEgd2FybmluZyBmcm9tIHRoZQogICAgICAgICAgICAgICAgICAncG9zdC1jb25maWd1cmF0 aW9uLXNjcmlwdCcgd2hlbiBpdCB3YXMgZXhlY3V0ZWQuIFRoZQogICAgICAgICAgICAgICAgICAn bWVzc2FnZScgbm9kZSBiZWxvdyBTSE9VTEQgY2FwdHVyZSBhbnkgb3V0cHV0IHRoZQogICAgICAg ICAgICAgICAgICBzY3JpcHQgcHJvZHVjZXMuIjsKICAgICAgICAgICAgIH0KICAgICAgICAgICAg IGVudW0gInBvc3Qtc2NyaXB0LWVycm9yIiB7CiAgICAgICAgICAgICAgIGRlc2NyaXB0aW9uCiAg ICAgICAgICAgICAgICAgIkluZGljYXRlcyB0aGF0IHRoZSBkZXZpY2Ugb2J0YWluZWQgYW4gZXJy b3IgZnJvbSB0aGUKICAgICAgICAgICAgICAgICAgJ3Bvc3QtY29uZmlndXJhdGlvbi1zY3JpcHQn IHdoZW4gaXQgd2FzIGV4ZWN1dGVkLiBUaGUKICAgICAgICAgICAgICAgICAgJ21lc3NhZ2UnIG5v ZGUgYmVsb3cgU0hPVUxEIGNhcHR1cmUgYW55IG91dHB1dCB0aGUKICAgICAgICAgICAgICAgICAg c2NyaXB0IHByb2R1Y2VzLiAgVGhpcyBwcm9ncmVzcyB0eXBlIGFsc28gaW5kaWNhdGVzCiAgICAg ICAgICAgICAgICAgIHRoYXQgdGhlIGRldmljZSBoYXMgYWJhbmRvbmVkIHRyeWluZyB0byBib290 c3RyYXAKICAgICAgICAgICAgICAgICAgb2ZmIHRoaXMgYm9vdHN0cmFwIHNlcnZlci4iOwogICAg ICAgICAgICAgfQogICAgICAgICAgICAgZW51bSAicG9zdC1zY3JpcHQtY29tcGxldGVkIiB7CiAg ICAgICAgICAgICAgIGRlc2NyaXB0aW9uCiAgICAgICAgICAgICAgICAgIkluZGljYXRlcyB0aGF0 IHRoZSBkZXZpY2Ugc3VjY2Vzc2Z1bGx5IGV4ZWN1dGVkIHRoZQogICAgICAgICAgICAgICAgICAn cG9zdC1jb25maWd1cmF0aW9uLXNjcmlwdCcuIjsKICAgICAgICAgICAgIH0KICAgICAgICAgICAg IGVudW0gImJvb3RzdHJhcC1jb21wbGV0ZSIgewoKCgpXYXRzZW4sIGV0IGFsLiAgICAgICAgICBF eHBpcmVzIEZlYnJ1YXJ5IDEwLCAyMDE5ICAgICAgICAgICAgICBbUGFnZSA0OF0KDApJbnRlcm5l dC1EcmFmdCAgICBTZWN1cmUgWmVybyBUb3VjaCBQcm92aXNpb25pbmcgKFNaVFApICAgICAgQXVn dXN0IDIwMTgKCgogICAgICAgICAgICAgICBkZXNjcmlwdGlvbgogICAgICAgICAgICAgICAgICJJ bmRpY2F0ZXMgdGhhdCB0aGUgZGV2aWNlIHN1Y2Nlc3NmdWxseSBwcm9jZXNzZWQKICAgICAgICAg ICAgICAgICAgYWxsICdvbmJvYXJkaW5nLWluZm9ybWF0aW9uJyBwcm92aWRlZCwgYW5kIHRoYXQg aXQKICAgICAgICAgICAgICAgICAgaXMgcmVhZHkgdG8gYmUgbWFuYWdlZC4gIFRoZSAnbWVzc2Fn ZScgbm9kZSBiZWxvdwogICAgICAgICAgICAgICAgICBNQVkgY29udGFpbiBhbnkgYWRkaXRpb25h bCBpbmZvcm1hdGlvbiB0aGF0IHRoZQogICAgICAgICAgICAgICAgICBtYW51ZmFjdHVyZXIgdGhp bmtzIG1pZ2h0IGJlIHVzZWZ1bC4gIEFmdGVyIHNlbmRpbmcKICAgICAgICAgICAgICAgICAgdGhp cyBwcm9ncmVzcyB0eXBlLCB0aGUgZGV2aWNlIGlzIG5vdCBleHBlY3RlZCB0bwogICAgICAgICAg ICAgICAgICBhY2Nlc3MgdGhlIGJvb3RzdHJhcCBzZXJ2ZXIgYWdhaW4uIjsKICAgICAgICAgICAg IH0KICAgICAgICAgICAgIGVudW0gInJlc3BvbnNlLXdhcm5pbmciIHsKICAgICAgICAgICAgICAg ZGVzY3JpcHRpb24KICAgICAgICAgICAgICAgICAiSW5kaWNhdGVzIHRoYXQgdGhlIGRldmljZSBo YWQgYSBub24tY3JpdGljYWwgaXNzdWUKICAgICAgICAgICAgICAgICAgd2l0aCB0aGUgUlBDLXJl cGx5IGZyb20gYSBwcmV2aW91cyBpbnZvY2F0aW9uIG9mCiAgICAgICAgICAgICAgICAgIHRoZSAn cmVwb3J0LXByb2dyZXNzJyBSUEMuIjsKICAgICAgICAgICAgIH0KICAgICAgICAgICAgIGVudW0g InJlc3BvbnNlLWVycm9yIiB7CiAgICAgICAgICAgICAgIGRlc2NyaXB0aW9uCiAgICAgICAgICAg ICAgICAgIkluZGljYXRlcyB0aGF0IHRoZSBkZXZpY2UgaGFkIGEgY3JpdGljYWwgaXNzdWUKICAg ICAgICAgICAgICAgICAgd2l0aCB0aGUgUlBDLXJlcGx5IGZyb20gYSBwcmV2aW91cyBpbnZvY2F0 aW9uIG9mCiAgICAgICAgICAgICAgICAgIHRoZSAncmVwb3J0LXByb2dyZXNzJyBSUEMuICBBZnRl ciBzZW5kaW5nIHRoaXMKICAgICAgICAgICAgICAgICAgcHJvZ3Jlc3MgdHlwZSwgdGhlIGRldmlj ZSBpcyBub3QgZXhwZWN0ZWQgdG8KICAgICAgICAgICAgICAgICAgYWNjZXNzIHRoZSBib290c3Ry YXAgc2VydmVyIGFnYWluLiI7CiAgICAgICAgICAgICB9CiAgICAgICAgICAgICBlbnVtICJpbmZv cm1hdGlvbmFsIiB7CiAgICAgICAgICAgICAgIGRlc2NyaXB0aW9uCiAgICAgICAgICAgICAgICAg IkluZGljYXRlcyBhbnkgYWRkaXRpb25hbCBpbmZvcm1hdGlvbiBub3QgY2FwdHVyZWQKICAgICAg ICAgICAgICAgICAgYnkgYW55IG9mIHRoZSBvdGhlciBwcm9ncmVzcyB0eXBlcy4gRm9yIGluc3Rh bmNlLAogICAgICAgICAgICAgICAgICBhIG1lc3NhZ2UgaW5kaWNhdGluZyB0aGF0IHRoZSBkZXZp Y2UgaXMgYWJvdXQgdG8KICAgICAgICAgICAgICAgICAgcmVib290IGFmdGVyIGhhdmluZyBpbnN0 YWxsZWQgYSBib290LWltYWdlIGNvdWxkCiAgICAgICAgICAgICAgICAgIGJlIHByb3ZpZGVkLiAg VGhlICdtZXNzYWdlJyBub2RlIGJlbG93IFNIT1VMRAogICAgICAgICAgICAgICAgICBjb250YWlu IGluZm9ybWF0aW9uIHRoYXQgdGhlIG1hbnVmYWN0dXJlciB0aGlua3MKICAgICAgICAgICAgICAg ICAgbWlnaHQgYmUgdXNlZnVsLiI7CiAgICAgICAgICAgICB9CiAgICAgICAgICAgfQogICAgICAg ICAgIG1hbmRhdG9yeSB0cnVlOwogICAgICAgICAgIGRlc2NyaXB0aW9uCiAgICAgICAgICAgICAi VGhlIHR5cGUgb2YgcHJvZ3Jlc3MgcmVwb3J0IHByb3ZpZGVkLiI7CiAgICAgICAgIH0KICAgICAg ICAgbGVhZiBtZXNzYWdlIHsKICAgICAgICAgICB0eXBlIHN0cmluZzsKICAgICAgICAgICBkZXNj cmlwdGlvbgogICAgICAgICAgICAgIkFuIG9wdGlvbmFsIGFyYml0cmFyeSB2YWx1ZS4iOwogICAg ICAgICB9CiAgICAgICAgIGNvbnRhaW5lciBzc2gtaG9zdC1rZXlzIHsKICAgICAgICAgICB3aGVu ICIuLi9wcm9ncmVzcy10eXBlID0gJ2Jvb3RzdHJhcC1jb21wbGV0ZSciIHsKICAgICAgICAgICAg IGRlc2NyaXB0aW9uCiAgICAgICAgICAgICAgICJTU0ggaG9zdCBrZXlzIGFyZSBvbmx5IHNlbnQg d2hlbiB0aGUgcHJvZ3Jlc3MgdHlwZQogICAgICAgICAgICAgICAgaXMgJ2Jvb3RzdHJhcC1jb21w bGV0ZScuIjsKCgoKV2F0c2VuLCBldCBhbC4gICAgICAgICAgRXhwaXJlcyBGZWJydWFyeSAxMCwg MjAxOSAgICAgICAgICAgICAgW1BhZ2UgNDldCgwKSW50ZXJuZXQtRHJhZnQgICAgU2VjdXJlIFpl cm8gVG91Y2ggUHJvdmlzaW9uaW5nIChTWlRQKSAgICAgIEF1Z3VzdCAyMDE4CgoKICAgICAgICAg ICB9CiAgICAgICAgICAgZGVzY3JpcHRpb24KICAgICAgICAgICAgICJBIGxpc3Qgb2YgdHJ1c3Qg YW5jaG9yIGNlcnRpZmljYXRlcyBhbiBOTVMgbWF5IHVzZSB0bwogICAgICAgICAgICAgIGF1dGhl bnRpY2F0ZSBzdWJzZXF1ZW50IFNTSC1iYXNlZCBjb25uZWN0aW9ucyB0byB0aGlzCiAgICAgICAg ICAgICAgZGV2aWNlIChlLmcuLCBuZXRjb25mLXNzaCwgbmV0Y29uZi1jaC1zc2gpLiI7CiAgICAg ICAgICAgbGVhZi1saXN0IHNzaC1ob3N0LWtleSB7CiAgICAgICAgICAgICB0eXBlIGJpbmFyeTsK ICAgICAgICAgICAgIGRlc2NyaXB0aW9uCiAgICAgICAgICAgICAgICJUaGUgYmluYXJ5IHB1Ymxp YyBrZXkgZGF0YSBmb3IgdGhpcyBTU0gga2V5LCBhcwogICAgICAgICAgICAgICAgc3BlY2lmaWVk IGJ5IFJGQyA0MjUzLCBTZWN0aW9uIDYuNiwgaS5lLjoKCiAgICAgICAgICAgICAgICAgIHN0cmlu ZyAgICBjZXJ0aWZpY2F0ZSBvciBwdWJsaWMga2V5IGZvcm1hdAogICAgICAgICAgICAgICAgICAg ICAgICAgICAgaWRlbnRpZmllcgogICAgICAgICAgICAgICAgICBieXRlW25dICAga2V5L2NlcnRp ZmljYXRlIGRhdGEuIjsKICAgICAgICAgICAgIHJlZmVyZW5jZQogICAgICAgICAgICAgICAiUkZD IDQyNTM6IFRoZSBTZWN1cmUgU2hlbGwgKFNTSCkgVHJhbnNwb3J0IExheWVyCiAgICAgICAgICAg ICAgICAgICAgICAgICAgUHJvdG9jb2wiOwogICAgICAgICAgIH0KICAgICAgICAgfQogICAgICAg ICBjb250YWluZXIgdHJ1c3QtYW5jaG9yLWNlcnRzIHsKICAgICAgICAgICB3aGVuICIuLi9wcm9n cmVzcy10eXBlID0gJ2Jvb3RzdHJhcC1jb21wbGV0ZSciIHsKICAgICAgICAgICAgIGRlc2NyaXB0 aW9uCiAgICAgICAgICAgICAgICJUcnVzdCBhbmNob3JzIGFyZSBvbmx5IHNlbnQgd2hlbiB0aGUg cHJvZ3Jlc3MgdHlwZQogICAgICAgICAgICAgICAgaXMgJ2Jvb3RzdHJhcC1jb21wbGV0ZScuIjsK ICAgICAgICAgICB9CiAgICAgICAgICAgZGVzY3JpcHRpb24KICAgICAgICAgICAgICJBIGxpc3Qg b2YgdHJ1c3QgYW5jaG9yIGNlcnRpZmljYXRlcyBhbiBOTVMgbWF5IHVzZSB0bwogICAgICAgICAg ICAgIGF1dGhlbnRpY2F0ZSBzdWJzZXF1ZW50IGNlcnRpZmljYXRlLWJhc2VkIGNvbm5lY3Rpb25z CiAgICAgICAgICAgICAgdG8gdGhpcyBkZXZpY2UgKGUuZy4sIHJlc3Rjb25mLXRscywgbmV0Y29u Zi10bHMsIG9yCiAgICAgICAgICAgICAgZXZlbiBuZXRjb25mLXNzaCB3aXRoIFguNTA5IHN1cHBv cnQgZnJvbSBSRkMgNjE4NykuCiAgICAgICAgICAgICAgSW4gcHJhY3RpY2UsIHRydXN0IGFuY2hv cnMgZm9yIElEZXZJRCBjZXJ0aWZpY2F0ZXMgZG8KICAgICAgICAgICAgICBub3QgbmVlZCB0byBi ZSBjb252ZXllZCB1c2luZyB0aGlzIG1lY2hhbmlzbS4iOwogICAgICAgICAgIHJlZmVyZW5jZQog ICAgICAgICAgICAgIlJGQyA2MTg3OgogICAgICAgICAgICAgICAgWC41MDl2MyBDZXJ0aWZpY2F0 ZXMgZm9yIFNlY3VyZSBTaGVsbCBBdXRoZW50aWNhdGlvbi4iOwogICAgICAgICAgIGxlYWYtbGlz dCB0cnVzdC1hbmNob3ItY2VydCB7CiAgICAgICAgICAgICB0eXBlIGNtczsKICAgICAgICAgICAg IGRlc2NyaXB0aW9uCiAgICAgICAgICAgICAgIkEgQ01TIHN0cnVjdHVyZSB3aG9zZSB0b3AtbW9z dCBjb250ZW50IHR5cGUgTVVTVCBiZSB0aGUKICAgICAgICAgICAgICAgc2lnbmVkLWRhdGEgY29u dGVudCB0eXBlLCBhcyBkZXNjcmliZWQgYnkgU2VjdGlvbiA1IGluCiAgICAgICAgICAgICAgIFJG QyA1NjUyLgoKICAgICAgICAgICAgICAgVGhlIENNUyBNVVNUIGNvbnRhaW4gdGhlIGNoYWluIG9m IFguNTA5IGNlcnRpZmljYXRlcwogICAgICAgICAgICAgICBuZWVkZWQgdG8gYXV0aGVudGljYXRl IHRoZSBjZXJ0aWZpY2F0ZSBwcmVzZW50ZWQgYnkKICAgICAgICAgICAgICAgdGhlIGRldmljZS4K CiAgICAgICAgICAgICAgIFRoZSBDTVMgTVVTVCBjb250YWluIG9ubHkgYSBzaW5nbGUgY2hhaW4g b2YKICAgICAgICAgICAgICAgY2VydGlmaWNhdGVzLiAgVGhlIGRldmljZSdzIGVuZC1lbnRpdHkg Y2VydGlmaWNhdGUKCgoKV2F0c2VuLCBldCBhbC4gICAgICAgICAgRXhwaXJlcyBGZWJydWFyeSAx MCwgMjAxOSAgICAgICAgICAgICAgW1BhZ2UgNTBdCgwKSW50ZXJuZXQtRHJhZnQgICAgU2VjdXJl IFplcm8gVG91Y2ggUHJvdmlzaW9uaW5nIChTWlRQKSAgICAgIEF1Z3VzdCAyMDE4CgoKICAgICAg ICAgICAgICAgTVVTVCBvbmx5IGF1dGhlbnRpY2F0ZSB0byBsYXN0IGludGVybWVkaWF0ZSBDQQog ICAgICAgICAgICAgICBjZXJ0aWZpY2F0ZSBsaXN0ZWQgaW4gdGhlIGNoYWluLgoKICAgICAgICAg ICAgICAgSW4gYWxsIGNhc2VzLCB0aGUgY2hhaW4gTVVTVCBpbmNsdWRlIGEgc2VsZi1zaWduZWQK ICAgICAgICAgICAgICAgcm9vdCBjZXJ0aWZpY2F0ZS4gIEluIHRoZSBjYXNlIHdoZXJlIHRoZSBy b290CiAgICAgICAgICAgICAgIGNlcnRpZmljYXRlIGlzIGl0c2VsZiB0aGUgaXNzdWVyIG9mIHRo ZSBkZXZpY2UncwogICAgICAgICAgICAgICBlbmQtZW50aXR5IGNlcnRpZmljYXRlLCBvbmx5IG9u ZSBjZXJ0aWZpY2F0ZSBpcwogICAgICAgICAgICAgICBwcmVzZW50LgoKICAgICAgICAgICAgICAg VGhpcyBDTVMgZW5jb2RlcyB0aGUgZGVnZW5lcmF0ZSBmb3JtIG9mIHRoZSBTaWduZWREYXRhCiAg ICAgICAgICAgICAgIHN0cnVjdHVyZSB0aGF0IGlzIGNvbW1vbmx5IHVzZWQgdG8gZGlzc2VtaW5h dGUgWC41MDkKICAgICAgICAgICAgICAgY2VydGlmaWNhdGVzIGFuZCByZXZvY2F0aW9uIG9iamVj dHMgKFJGQyA1MjgwKS4iOwogICAgICAgICAgICAgcmVmZXJlbmNlCiAgICAgICAgICAgICAgICJS RkMgNTI4MDoKICAgICAgICAgICAgICAgICAgSW50ZXJuZXQgWC41MDkgUHVibGljIEtleSBJbmZy YXN0cnVjdHVyZQogICAgICAgICAgICAgICAgICBDZXJ0aWZpY2F0ZSBhbmQgQ2VydGlmaWNhdGUg UmV2b2NhdGlvbiBMaXN0IChDUkwpCiAgICAgICAgICAgICAgICAgIFByb2ZpbGUuCiAgICAgICAg ICAgICAgICBSRkMgNTY1MjoKICAgICAgICAgICAgICAgICAgQ3J5cHRvZ3JhcGhpYyBNZXNzYWdl IFN5bnRheCAoQ01TKSI7CiAgICAgICAgICAgfQogICAgICAgICB9CiAgICAgICB9CiAgICAgfQog ICB9CiAgIDxDT0RFIEVORFM+Cgo4LiAgREhDUCBaZXJvIFRvdWNoIE9wdGlvbnMKCiAgIFRoaXMg c2VjdGlvbiBkZWZpbmVzIHR3byBESENQIG9wdGlvbnMsIG9uZSBmb3IgREhDUHY0IGFuZCBvbmUg Zm9yCiAgIERIQ1B2Ni4gIFRoZXNlIHR3byBvcHRpb25zIGFyZSBzZW1hbnRpY2FsbHkgdGhlIHNh bWUsIHRob3VnaAogICBzeW50YWN0aWNhbGx5IGRpZmZlcmVudC4KCjguMS4gIERIQ1B2NCBaZXJv IFRvdWNoIE9wdGlvbgoKICAgVGhlIERIQ1B2NCBaZXJvIFRvdWNoIE9wdGlvbiBpcyB1c2VkIHRv IHByb3Zpc2lvbiB0aGUgY2xpZW50IHdpdGggb25lCiAgIG9yIG1vcmUgVVJJcyBmb3IgYm9vdHN0 cmFwIHNlcnZlcnMgdGhhdCBjYW4gYmUgY29udGFjdGVkIHRvIGF0dGVtcHQKICAgZnVydGhlciBj b25maWd1cmF0aW9uLgoKCgoKCgoKCgoKCgoKCldhdHNlbiwgZXQgYWwuICAgICAgICAgIEV4cGly ZXMgRmVicnVhcnkgMTAsIDIwMTkgICAgICAgICAgICAgIFtQYWdlIDUxXQoMCkludGVybmV0LURy YWZ0ICAgIFNlY3VyZSBaZXJvIFRvdWNoIFByb3Zpc2lvbmluZyAoU1pUUCkgICAgICBBdWd1c3Qg MjAxOAoKCiAgICAgIERIQ1B2NCBaZXJvIFRvdWNoIFJlZGlyZWN0IE9wdGlvbgoKICAgICAgIDAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgIDEKICAgICAgIDAgIDEgIDIgIDMgIDQgIDUgIDYg IDcgIDggIDkgIDAgIDEgIDIgIDMgIDQgIDUKICAgICAgKy0tKy0tKy0tKy0tKy0tKy0tKy0tKy0t Ky0tKy0tKy0tKy0tKy0tKy0tKy0tKy0tKwogICAgICB8ICAgb3B0aW9uLWNvZGUgKDE0MykgICB8 ICAgICBvcHRpb24tbGVuZ3RoICAgICB8CiAgICAgICstLSstLSstLSstLSstLSstLSstLSstLSst LSstLSstLSstLSstLSstLSstLSstLSsKICAgICAgLiAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgLgogICAgICAuICAgIGJvb3RzdHJhcC1zZXJ2ZXItbGlzdCAo dmFyaWFibGUgbGVuZ3RoKSAgICAuCiAgICAgIC4gICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgIC4KICAgICAgKy0tKy0tKy0tKy0tKy0tKy0tKy0tKy0tKy0tKy0t Ky0tKy0tKy0tKy0tKy0tKy0tKwoKICAgICAgbyBvcHRpb24tY29kZTogT1BUSU9OX1Y0X1pFUk9U T1VDSF9SRURJUkVDVCAoMTQzKQogICAgICBvIG9wdGlvbi1sZW5ndGg6IFRoZSBvcHRpb24gbGVu Z3RoIGluIG9jdGV0cwogICAgICBvIGJvb3RzdHJhcC1zZXJ2ZXItbGlzdDogQSBsaXN0IG9mIHNl cnZlcnMgZm9yIHRoZQogICAgICAgICBjbGllbnQgdG8gYXR0ZW1wdCBjb250YWN0aW5nLCBpbiBv cmRlciB0byBvYnRhaW4KICAgICAgICAgZnVydGhlciBib290c3RyYXBwaW5nIGRhdGEsIGluIHRo ZSBmb3JtYXQgc2hvd24KICAgICAgICAgaW4gW2NvbW1vbi1maWVsZC1lbmNvZGluZ10uCgogICBE SENQdjQgQ2xpZW50IEJlaGF2aW9yCgogICBDbGllbnRzIE1BWSByZXF1ZXN0IHRoZSBPUFRJT05f VjRfWkVST1RPVUNIX1JFRElSRUNUIGJ5IGluY2x1ZGluZyBpdHMKICAgb3B0aW9uIGNvZGUgaW4g dGhlIFBhcmFtZXRlciBSZXF1ZXN0IExpc3QgKDU1KSBpbiBESENQIHJlcXVlc3QKICAgbWVzc2Fn ZXMuCgogICBPbiByZWNlaXB0IG9mIGEgREhDUHY0IFJlcGx5IG1lc3NhZ2Ugd2hpY2ggY29udGFp bnMgdGhlCiAgIE9QVElPTl9WNF9aRVJPVE9VQ0hfUkVESVJFQ1QsIHRoZSBjbGllbnQgcHJvY2Vz c2VzIHRoZSByZXNwb25zZQogICBhY2NvcmRpbmcgdG8gU2VjdGlvbiA1LjUsIHdpdGggdGhlIHVu ZGVyc3RhbmRpbmcgdGhhdCB0aGUgImFkZHJlc3MiCiAgIGFuZCAicG9ydCIgdmFsdWVzIGFyZSBl bmNvZGVkIGluIHRoZSBVUklzLgoKICAgQW55IGludmFsaWQgVVJJIGVudHJpZXMgcmVjZWl2ZWQg aW4gdGhlIHVyaS1kYXRhIGZpZWxkIGFyZSBpZ25vcmVkIGJ5CiAgIHRoZSBjbGllbnQuICBJZiBP UFRJT05fVjRfWkVST1RPVUNIX1JFRElSRUNUIGRvZXMgbm90IGNvbnRhaW4gYXQKICAgbGVhc3Qg b25lIHZhbGlkIFVSSSBlbnRyeSBpbiB0aGUgdXJpLWRhdGEgZmllbGQsIHRoZW4gdGhlIGNsaWVu dCBNVVNUCiAgIGRpc2NhcmQgdGhlIG9wdGlvbi4KCiAgIEFzIHRoZSBsaXN0IG9mIFVSSXMgbWF5 IGV4Y2VlZCB0aGUgbWF4aW11bSBhbGxvd2VkIGxlbmd0aCBvZiBhIHNpbmdsZQogICBESENQdjQg b3B0aW9uICgyNTUgb2N0ZXRzKSwgdGhlIGNsaWVudCBNVVNUIGltcGxlbWVudCBbUkZDMzM5Nl0s CiAgIGFsbG93aW5nIHRoZSBVUkkgbGlzdCB0byBiZSBzcGxpdCBhY3Jvc3MgYSBudW1iZXIgb2YK ICAgT1BUSU9OX1Y0X1pFUk9UT1VDSF9SRURJUkVDVCBvcHRpb24gaW5zdGFuY2VzLgoKICAgREhD UHY0IFNlcnZlciBCZWhhdmlvcgoKICAgVGhlIERIQ1B2NCBzZXJ2ZXIgTUFZIGluY2x1ZGUgYSBz aW5nbGUgaW5zdGFuY2Ugb2YgT3B0aW9uCiAgIE9QVElPTl9WNF9aRVJPVE9VQ0hfUkVESVJFQ1Qg aW4gREhDUCBtZXNzYWdlcyBpdCBzZW5kcy4gIFNlcnZlcnMgTVVTVAogICBOT1Qgc2VuZCBtb3Jl IHRoYW4gb25lIGluc3RhbmNlIG9mIHRoZSBPUFRJT05fVjRfWkVST1RPVUNIX1JFRElSRUNUCiAg IG9wdGlvbi4KCgoKCgpXYXRzZW4sIGV0IGFsLiAgICAgICAgICBFeHBpcmVzIEZlYnJ1YXJ5IDEw LCAyMDE5ICAgICAgICAgICAgICBbUGFnZSA1Ml0KDApJbnRlcm5ldC1EcmFmdCAgICBTZWN1cmUg WmVybyBUb3VjaCBQcm92aXNpb25pbmcgKFNaVFApICAgICAgQXVndXN0IDIwMTgKCgogICBBcyB0 aGUgbGlzdCBvZiBVUklzIG1heSBleGNlZWQgdGhlIG1heGltdW0gYWxsb3dlZCBsZW5ndGggb2Yg YSBzaW5nbGUKICAgREhDUHY0IG9wdGlvbiAoMjU1IG9jdGV0cyksIHRoZSBzZXJ2ZXIgTVVTVCBp bXBsZW1lbnQgW1JGQzMzOTZdLAogICBhbGxvd2luZyB0aGUgVVJJIGxpc3QgdG8gYmUgc3BsaXQg YWNyb3NzIGEgbnVtYmVyIG9mCiAgIE9QVElPTl9WNF9aRVJPVE9VQ0hfUkVESVJFQ1Qgb3B0aW9u IGluc3RhbmNlcy4KCjguMi4gIERIQ1B2NiBaZXJvIFRvdWNoIE9wdGlvbgoKICAgVGhlIERIQ1B2 NiBaZXJvIFRvdWNoIE9wdGlvbiBpcyB1c2VkIHRvIHByb3Zpc2lvbiB0aGUgY2xpZW50IHdpdGgg b25lCiAgIG9yIG1vcmUgVVJJcyBmb3IgYm9vdHN0cmFwIHNlcnZlcnMgdGhhdCBjYW4gYmUgY29u dGFjdGVkIHRvIGF0dGVtcHQKICAgZnVydGhlciBjb25maWd1cmF0aW9uLgoKICAgICAgREhDUHY2 IFplcm8gVG91Y2ggUmVkaXJlY3QgT3B0aW9uCgogICAgICAgMCAgICAgICAgICAgICAgICAgICAx ICAgICAgICAgICAgICAgICAgIDIgICAgICAgICAgICAgICAgICAgMwogICAgICAgMCAxIDIgMyA0 IDUgNiA3IDggOSAwIDEgMiAzIDQgNSA2IDcgOCA5IDAgMSAyIDMgNCA1IDYgNyA4IDkgMCAxCiAg ICAgICstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0r LSstKy0rLSstKy0rCiAgICAgIHwgICAgICAgb3B0aW9uLWNvZGUgKDEzNikgICAgICB8ICAgICAg ICAgIG9wdGlvbi1sZW5ndGggICAgICAgICB8CiAgICAgICstKy0rLSstKy0rLSstKy0rLSstKy0r LSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rCiAgICAgIC4gICAgICAg ICAgIGJvb3RzdHJhcC1zZXJ2ZXItbGlzdCAodmFyaWFibGUgbGVuZ3RoKSAgICAgICAgICAgICAu CiAgICAgICstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSst Ky0rLSstKy0rLSstKy0rCgogICAgICBvIG9wdGlvbi1jb2RlOiBPUFRJT05fVjZfWkVST1RPVUNI X1JFRElSRUNUICgxMzYpCiAgICAgIG8gb3B0aW9uLWxlbmd0aDogVGhlIG9wdGlvbiBsZW5ndGgg aW4gb2N0ZXRzCiAgICAgIG8gYm9vdHN0cmFwLXNlcnZlci1saXN0OiBBIGxpc3Qgb2Ygc2VydmVy cyBmb3IgdGhlIGNsaWVudCB0bwogICAgICAgIGF0dGVtcHQgY29udGFjdGluZywgaW4gb3JkZXIg dG8gb2J0YWluIGZ1cnRoZXIgYm9vdHN0cmFwcGluZwogICAgICAgIGRhdGEsIGluIHRoZSBmb3Jt YXQgc2hvd24gaW4gW2NvbW1vbi1maWVsZC1lbmNvZGluZ10uCgogICBESENQdjYgQ2xpZW50IEJl aGF2aW9yCgogICBDbGllbnRzIE1BWSByZXF1ZXN0IHRoZSBPUFRJT05fVjZfWkVST1RPVUNIX1JF RElSRUNUIG9wdGlvbiwgYXMKICAgZGVmaW5lZCBpbiBbUkZDMzMxNV0sIFNlY3Rpb25zIDE3LjEu MSwgMTguMS4xLCAxOC4xLjMsIDE4LjEuNCwKICAgMTguMS41LCBhbmQgMjIuNy4gICBBcyBhIGNv bnZlbmllbmNlIHRvIHRoZSByZWFkZXIsIHdlIG1lbnRpb24gaGVyZQogICB0aGF0IHRoZSBjbGll bnQgaW5jbHVkZXMgcmVxdWVzdGVkIG9wdGlvbiBjb2RlcyBpbiB0aGUgT3B0aW9uIFJlcXVlc3QK ICAgT3B0aW9uLgoKICAgT24gcmVjZWlwdCBvZiBhIERIQ1B2NiBSZXBseSBtZXNzYWdlIHdoaWNo IGNvbnRhaW5zIHRoZQogICBPUFRJT05fVjZfWkVST1RPVUNIX1JFRElSRUNULCB0aGUgY2xpZW50 IHByb2Nlc3NlcyB0aGUgcmVzcG9uc2UKICAgYWNjb3JkaW5nIHRvIFNlY3Rpb24gNS41LCB3aXRo IHRoZSB1bmRlcnN0YW5kaW5nIHRoYXQgdGhlICJhZGRyZXNzIgogICBhbmQgInBvcnQiIHZhbHVl cyBhcmUgZW5jb2RlZCBpbiB0aGUgVVJJcy4KCiAgIEFueSBpbnZhbGlkIFVSSSBlbnRyaWVzIHJl Y2VpdmVkIGluIHRoZSB1cmktZGF0YSBmaWVsZCBhcmUgaWdub3JlZCBieQogICB0aGUgY2xpZW50 LiAgSWYgT1BUSU9OX1Y2X1pFUk9UT1VDSF9SRURJUkVDVCBkb2VzIG5vdCBjb250YWluIGF0CiAg IGxlYXN0IG9uZSB2YWxpZCBVUkkgZW50cnkgaW4gdGhlIHVyaS1kYXRhIGZpZWxkLCB0aGVuIHRo ZSBjbGllbnQgTVVTVAogICBkaXNjYXJkIHRoZSBvcHRpb24uCgogICBESENQdjYgU2VydmVyIEJl aGF2aW9yCgoKCgoKV2F0c2VuLCBldCBhbC4gICAgICAgICAgRXhwaXJlcyBGZWJydWFyeSAxMCwg MjAxOSAgICAgICAgICAgICAgW1BhZ2UgNTNdCgwKSW50ZXJuZXQtRHJhZnQgICAgU2VjdXJlIFpl cm8gVG91Y2ggUHJvdmlzaW9uaW5nIChTWlRQKSAgICAgIEF1Z3VzdCAyMDE4CgoKICAgU2VjdGlv bnMgMTcuMi4yIGFuZCAxOC4yIG9mIFtSRkMzMzE1XSBnb3Zlcm4gc2VydmVyIG9wZXJhdGlvbgog ICBpbiByZWdhcmQgdG8gb3B0aW9uIGFzc2lnbm1lbnQuICBBcyBhIGNvbnZlbmllbmNlIHRvIHRo ZSByZWFkZXIsCiAgIHdlIG1lbnRpb24gaGVyZSB0aGF0IHRoZSBzZXJ2ZXIgd2lsbCBzZW5kIGEg cGFydGljdWxhciBvcHRpb24gY29kZQogICBvbmx5IGlmIGNvbmZpZ3VyZWQgd2l0aCBzcGVjaWZp YyB2YWx1ZXMgZm9yIHRoYXQgb3B0aW9uIGNvZGUgYW5kIGlmCiAgIHRoZSBjbGllbnQgcmVxdWVz dGVkIGl0LgoKICAgT3B0aW9uIE9QVElPTl9WNl9aRVJPVE9VQ0hfUkVESVJFQ1QgaXMgYSBzaW5n bGV0b24uICBTZXJ2ZXJzIE1VU1QgTk9UCiAgIHNlbmQgbW9yZSB0aGFuIG9uZSBpbnN0YW5jZSBv ZiB0aGUgT1BUSU9OX1Y2X1pFUk9UT1VDSF9SRURJUkVDVAogICBvcHRpb24uCgo4LjMuICBDb21t b24gRmllbGQgRW5jb2RpbmcKCiAgIEJvdGggb2YgdGhlIERIQ1B2NCBhbmQgREhDUHY2IG9wdGlv bnMgZGVmaW5lZCBpbiB0aGlzIHNlY3Rpb24gZW5jb2RlCiAgIGEgbGlzdCBvZiBib290c3RyYXAg c2VydmVyIFVSSXMuICBUaGUgIlVSSSIgc3RydWN0dXJlIGlzIGFuIG9wdGlvbgogICB0aGF0IGNh biBjb250YWluIG11bHRpcGxlIFVSSXMgKHNlZSBbUkZDNzIyN10sIFNlY3Rpb24gNS43KS4KCiAg ICAgYm9vdHN0cmFwLXNlcnZlci1saXN0OgoKICAgICArLSstKy0rLSstKy0rLSstKy0rLSstKy0r LSstKy0rLSstKy0rLSstKy0rLSstKy0uLi4tKy0rLSstKy0rLSstKwogICAgIHwgICAgICAgdXJp LWxlbmd0aCAgICAgICAgICAgICAgfCAgICAgICAgICBVUkkgICAgICAgICAgICAgICAgICB8CiAg ICAgKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstLi4uLSst Ky0rLSstKy0rLSsKCiAgICAgbyB1cmktbGVuZ3RoOiB2YXJpYWJsZSwgaW4gb2N0ZXRzLgoKICAg ICBvIFVSSTogVVJJIG9mIHplcm90b3VjaCBib290c3RyYXAgc2VydmVyLCB1c2luZyB0aGUgSFRU UFMgVVJJCiAgICAgICBzY2hlbWUgZGVmaW5lZCBpbiBTZWN0aW9uIDIuNy4yIG9mIFJGQzcyMzAu ICBVUkkgTVVTVCBiZSBpbgogICAgICAgZm9ybSAiaHR0cHM6Ly88aXAtYWRkcmVzcy1vci1ob3N0 bmFtZT5bOjxwb3J0Pl0iLgoKOS4gIFNlY3VyaXR5IENvbnNpZGVyYXRpb25zCgo5LjEuICBJbW11 dGFibGUgU3RvcmFnZSBmb3IgVHJ1c3QgQW5jaG9ycwoKICAgRGV2aWNlcyBNVVNUIGVuc3VyZSB0 aGF0IGFsbCB0aGVpciB0cnVzdCBhbmNob3IgY2VydGlmaWNhdGVzLAogICBpbmNsdWRpbmcgdGhv c2UgZm9yIGNvbm5lY3RpbmcgdG8gYm9vdHN0cmFwIHNlcnZlcnMgYW5kIHZlcmlmeWluZwogICBv d25lcnNoaXAgdm91Y2hlcnMsIGFyZSBwcm90ZWN0ZWQgZnJvbSBleHRlcm5hbCBtb2RpZmljYXRp b24uCgogICBJdCBtYXkgYmUgbmVjZXNzYXJ5IHRvIHVwZGF0ZSB0aGVzZSBjZXJ0aWZpY2F0ZXMg b3ZlciB0aW1lIChlLmcuLCB0aGUKICAgbWFudWZhY3R1cmVyIHdhbnRzIHRvIGRlbGVnYXRlIHRy dXN0IHRvIGEgbmV3IENBKS4gIEl0IGlzIHRoZXJlZm9yZQogICBleHBlY3RlZCB0aGF0IGRldmlj ZXMgTUFZIHVwZGF0ZSB0aGVzZSB0cnVzdCBhbmNob3JzIHdoZW4gbmVlZGVkCiAgIHRocm91Z2gg YSB2ZXJpZmlhYmxlIHByb2Nlc3MsIHN1Y2ggYXMgYSBzb2Z0d2FyZSB1cGdyYWRlIHVzaW5nIHNp Z25lZAogICBzb2Z0d2FyZSBpbWFnZXMuCgo5LjIuICBTZWN1cmUgU3RvcmFnZSBmb3IgTG9uZy1s aXZlZCBQcml2YXRlIEtleXMKCiAgIE1hbnVmYWN0dXJlci1nZW5lcmF0ZWQgZGV2aWNlIGlkZW50 aWZpZXJzIG1heSBoYXZlIHZlcnkgbG9uZwogICBsaWZldGltZXMuICBGb3IgaW5zdGFuY2UsIFtT dGQtODAyLjFBUi0yMDA5XSByZWNvbW1lbmRzIHVzaW5nIHRoZQogICAibm90QWZ0ZXIiIHZhbHVl IDk5OTkxMjMxMjM1OTU5WiBpbiBJRGV2SUQgY2VydGlmaWNhdGVzLiAgR2l2ZW4gdGhlCiAgIGxv bmctbGl2ZWQgbmF0dXJlIG9mIHRoZXNlIHByaXZhdGUga2V5cywgaXQgaXMgcGFyYW1vdW50IHRo YXQgdGhleQoKCgpXYXRzZW4sIGV0IGFsLiAgICAgICAgICBFeHBpcmVzIEZlYnJ1YXJ5IDEwLCAy MDE5ICAgICAgICAgICAgICBbUGFnZSA1NF0KDApJbnRlcm5ldC1EcmFmdCAgICBTZWN1cmUgWmVy byBUb3VjaCBQcm92aXNpb25pbmcgKFNaVFApICAgICAgQXVndXN0IDIwMTgKCgogICBhcmUgc3Rv cmVkIHNvIGFzIHRvIHJlc2lzdCBkaXNjb3ZlcnksIHN1Y2ggYXMgaW4gYSBzZWN1cmUKICAgY3J5 cHRvZ3JhcGhpYyBwcm9jZXNzb3IgKGUuZy4sIGEgVFBNKS4KCjkuMy4gIFVzZSBvZiBJRGV2SUQg Q2VydGlmaWNhdGVzCgogICBJRGV2SUQgY2VydGlmaWNhdGVzLCBhcyBkZWZpbmVkIGluIFtTdGQt ODAyLjFBUi0yMDA5XSwgYXJlCiAgIFJFQ09NTUVOREVELCBib3RoIGZvciB0aGUgVExTLWxldmVs IGNsaWVudCBjZXJ0aWZpY2F0ZSB1c2VkIGJ5CiAgIGRldmljZXMgd2hlbiBjb25uZWN0aW5nIHRv IGEgYm9vdHN0cmFwIHNlcnZlciwgYXMgd2VsbCBhcyBmb3IgdGhlCiAgIGRldmljZSBpZGVudGl0 eSBjZXJ0aWZpY2F0ZSB1c2VkIGJ5IG93bmVycyB3aGVuIGVuY3J5cHRpbmcgdGhlIHplcm8KICAg dG91Y2ggYXJ0aWZhY3RzLgoKOS40LiAgQ2xvY2sgU2Vuc2l0aXZpdHkKCiAgIFRoZSBzb2x1dGlv biBpbiB0aGlzIGRvY3VtZW50IHJlbGllcyBvbiBUTFMgY2VydGlmaWNhdGVzLCBvd25lcgogICBj ZXJ0aWZpY2F0ZXMsIGFuZCBvd25lcnNoaXAgdm91Y2hlcnMsIGFsbCBvZiB3aGljaCByZXF1aXJl IGFuCiAgIGFjY3VyYXRlIGNsb2NrIGluIG9yZGVyIHRvIGJlIHByb2Nlc3NlZCBjb3JyZWN0bHkg KGUuZy4sIHRvIHRlc3QKICAgdmFsaWRpdHkgZGF0ZXMgYW5kIHJldm9jYXRpb24gc3RhdHVzKS4g IEltcGxlbWVudGF0aW9ucyBTSE9VTEQgZW5zdXJlCiAgIGRldmljZXMgaGF2ZSBhbiBhY2N1cmF0 ZSBjbG9jayB3aGVuIHNoaXBwZWQgZnJvbSBtYW51ZmFjdHVyaW5nCiAgIGZhY2lsaXRpZXMsIGFu ZCB0YWtlIHN0ZXBzIHRvIHByZXZlbnQgY2xvY2sgdGFtcGVyaW5nLgoKICAgSWYgaXQgaXMgbm90 IHBvc3NpYmxlIHRvIGVuc3VyZSBjbG9jayBhY2N1cmFjeSwgaXQgaXMgUkVDT01NRU5ERUQKICAg dGhhdCBpbXBsZW1lbnRhdGlvbnMgZGlzYWJsZSB0aGUgYXNwZWN0cyBvZiB0aGUgc29sdXRpb24g aGF2aW5nIGNsb2NrCiAgIHNlbnNpdGl2aXR5LiAgSW4gcGFydGljdWxhciwgc3VjaCBpbXBsZW1l bnRhdGlvbnMgc2hvdWxkIGFzc3VtZSB0aGF0CiAgIFRMUyBjZXJ0aWZpY2F0ZXMsIG93bmVyc2hp cCB2b3VjaGVycywgYW5kIG93bmVyIGNlcnRpZmljYXRlcyBuZXZlcgogICBleHBpcmUgYW5kIGFy ZSBub3QgcmV2b2thYmxlLiAgRnJvbSBhbiBvd25lcnNoaXAgdm91Y2hlciBwZXJzcGVjdGl2ZSwK ICAgbWFudWZhY3R1cmVycyBTSE9VTEQgaXNzdWUgYSBzaW5nbGUgb3duZXJzaGlwIHZvdWNoZXIg Zm9yIHRoZQogICBsaWZldGltZSBvZiBzdWNoIGRldmljZXMuCgogICBJbXBsZW1lbnRhdGlvbnMg U0hPVUxEIE5PVCByZWx5IG9uIE5UUCBmb3IgdGltZSwgYXMgTlRQIGlzIG5vdCBhCiAgIHNlY3Vy ZSBwcm90b2NvbC4KCjkuNS4gIEJsaW5kbHkgYXV0aGVudGljYXRpbmcgYSBib290c3RyYXAgc2Vy dmVyCgogICBUaGlzIGRvY3VtZW50IGFsbG93cyBhIGRldmljZSB0byBibGluZGx5IGF1dGhlbnRp Y2F0ZSBhIGJvb3RzdHJhcAogICBzZXJ2ZXIncyBUTFMgY2VydGlmaWNhdGUuICBJdCBkb2VzIHNv IHRvIGFsbG93IGZvciBjYXNlcyB3aGVyZSB0aGUKICAgcmVkaXJlY3QgaW5mb3JtYXRpb24gbWF5 IGJlIG9idGFpbmVkIGluIGFuIHVuc2VjdXJlZCBtYW5uZXIsIHdoaWNoIGlzCiAgIGRlc2lyYWJs ZSB0byBzdXBwb3J0IGluIHNvbWUgY2FzZXMuCgogICBUbyBjb21wZW5zYXRlIGZvciB0aGlzLCB0 aGlzIGRvY3VtZW50IHJlcXVpcmVzIHRoYXQgZGV2aWNlcywgd2hlbgogICBjb25uZWN0ZWQgdG8g YW4gdW50cnVzdGVkIGJvb3RzdHJhcCBzZXJ2ZXIsIGFzc2VydCB0aGF0IGRhdGEKICAgZG93bmxv YWRlZCBmcm9tIHRoZSBzZXJ2ZXIgaXMgc2lnbmVkLgoKOS42LiAgRGlzY2xvc2luZyBJbmZvcm1h dGlvbiB0byBVbnRydXN0ZWQgU2VydmVycwoKICAgVGhpcyBkb2N1bWVudCBlbmFibGVzIGRldmlj ZXMgdG8gZXN0YWJsaXNoIHByb3Zpc2lvbmFsIGNvbm5lY3Rpb25zIHRvCiAgIGJvb3RzdHJhcCBz ZXJ2ZXJzLCBpbiBvcmRlciBmb3IgdGhlIGJvb3RzdHJhcCBzZXJ2ZXIgdG8gcHJvdmlkZQogICBl aXRoZXIgdW5zaWduZWQgcmVkaXJlY3QgaW5mb3JtYXRpb24gb3Igc2lnbmVkIGRhdGEgb2YgYW55 IHR5cGUgdG8KICAgdGhlIGRldmljZS4gIEhvd2V2ZXIsIHNpbmNlIHRoZSBzZXJ2ZXIgaXMgdW50 cnVzdGVkLCBpdCBtYXkgYmUgdW5kZXIKCgoKV2F0c2VuLCBldCBhbC4gICAgICAgICAgRXhwaXJl cyBGZWJydWFyeSAxMCwgMjAxOSAgICAgICAgICAgICAgW1BhZ2UgNTVdCgwKSW50ZXJuZXQtRHJh ZnQgICAgU2VjdXJlIFplcm8gVG91Y2ggUHJvdmlzaW9uaW5nIChTWlRQKSAgICAgIEF1Z3VzdCAy MDE4CgoKICAgdGhlIGNvbnRyb2wgb2YgYW4gYWR2ZXJzYXJ5LCBhbmQgdGhlcmVmb3JlIGRldmlj ZXMgc2hvdWxkIGJlIGNhdXRpb3VzCiAgIGFib3V0IHRoZSBkYXRhIHRoZXkgc2VuZCBpbiBzdWNo IGNhc2VzLgoKICAgVGhpcyBkb2N1bWVudCByZXF1aXJlcyBkZXZpY2VzIGlkZW50aWZ5IGFuZCBh dXRoZW50aWNhdGUgdGhlbXNlbHZlcwogICB0byB1bnRydXN0ZWQgYm9vdHN0cmFwIHNlcnZlcnMu ICBEZXBlbmRpbmcgb24gdGhlIGF1dGhlbnRpY2F0aW9uCiAgIG1lY2hhbmlzbXMgdXNlZCwgdGhp cyBtZWFucyB0aGF0LCBhdCBhIG1pbmltdW0sIHRoZSBkZXZpY2UncyBzZXJpYWwKICAgbnVtYmVy IG1heSBiZSBkaXNjbG9zZWQgdG8gYW4gYWR2ZXJzYXJ5LiAgU2VyaWFsIG51bWJlcnMgYXJlCiAg IHViaXF1aXRvdXMgYW5kIHByb21pbmVudGx5IGNvbnRhaW5lZCBpbiBpbnZvaWNlcyBhbmQgb24g bGFiZWxzCiAgIGFmZml4ZWQgdG8gZGV2aWNlcyBhbmQgdGhlaXIgcGFja2FnaW5nLiAgVGhhdCBz YWlkLCBzZXJpYWwgbnVtYmVycwogICBtYW55IHRpbWVzIGVuY29kZSByZXZlYWxpbmcgaW5mb3Jt YXRpb24sIHN1Y2ggYXMgdGhlIGRldmljZSdzIG1vZGVsCiAgIG51bWJlciwgbWFudWZhY3R1cmUg ZGF0ZSwgYW5kL29yIG1hbnVmYWN0dXJpbmcgc2VxdWVuY2UgbnVtYmVyLgogICBLbm93bGVkZ2Ug b2YgdGhpcyBpbmZvcm1hdGlvbiBtYXkgcHJvdmlkZSBhbiBhZHZlcnNhcnkgd2l0aCBkZXRhaWxz CiAgIG5lZWRlZCB0byBsYXVuY2ggYW4gYXR0YWNrLgoKICAgSW4gYWRkaXRpb24gdG8gdGhlIGlu Zm9ybWF0aW9uIHJlbGF5ZWQgZHVyaW5nIHRoZSBhdXRoZW50aWNhdGlvbiwKICAgb3RoZXIgcG90 ZW50aWFsbHkgaWRlbnRpZnlpbmcgdmFsdWVzIHRoYXQgbWF5IGJlIGRpc2Nsb3NlZCB0byBhbgog ICB1bnRydXN0ZWQgc2VydmVyLCBpbmNsdWRpbmcgIm9zLW5hbWUiLCAib3MtdmVyc2lvbiIsICJo dy1tb2RlbCIsIGFuZAogICBwcm9ncmVzcyByZXBvcnRzLiAgSW4gb3JkZXIgdG8gYWRkcmVzcyB0 aGlzIGlzc3VlLCBpdCBpcyBSRUNPTU1FTkRFRAogICB0aGF0IGJvb3RzdHJhcCBzZXJ2ZXIgaW1w bGVtZW50YXRpb25zIHByb21vdGUgdGhlIHVudHJ1c3RlZAogICBjb25uZWN0aW9uIHRvIGEgdHJ1 c3RlZCBjb25uZWN0aW9uLCBhcyBkZXNjcmliZWQgaW4gQXBwZW5kaXggQi4KCjkuNy4gIFNlcXVl bmNpbmcgU291cmNlcyBvZiBCb290c3RyYXBwaW5nIERhdGEKCiAgIEZvciBkZXZpY2VzIHN1cHBv cnRpbmcgbW9yZSB0aGFuIG9uZSBzb3VyY2UgZm9yIGJvb3RzdHJhcHBpbmcgZGF0YSwKICAgbm8g cGFydGljdWxhciBzZXF1ZW5jaW5nIG9yZGVyIGhhcyB0byBiZSBvYnNlcnZlZCBmb3Igc2VjdXJp dHkKICAgcmVhc29ucywgYXMgdGhlIHNvbHV0aW9uIGZvciBlYWNoIHNvdXJjZSBpcyBjb25zaWRl cmVkIGVxdWFsbHkKICAgc2VjdXJlLiAgSG93ZXZlciwgZnJvbSBhIHByaXZhY3kgcGVyc3BlY3Rp dmUsIGl0IGlzIFJFQ09NTUVOREVEIHRoYXQKICAgZGV2aWNlcyBhY2Nlc3MgbG9jYWwgc291cmNl cyBiZWZvcmUgYWNjZXNzaW5nIHJlbW90ZSBzb3VyY2VzLgoKOS44LiAgSW5maW5pdGUgUmVkaXJl Y3Rpb24gTG9vcHMgYW5kIFNlcXVlbmNlcwoKICAgVGhlIHJlY3Vyc2l2ZSBhbGdvcml0aG0gZGVz Y3JpYmVkIGluIHRoaXMgZG9jdW1lbnQgZW5hYmxlcyByZWRpcmVjdAogICBpbmZvcm1hdGlvbiB0 byBsZWFkIHRvIG1vcmUgcmVkaXJlY3QgaW5mb3JtYXRpb24sIHdoaWNoIG1heSBjYXVzZSBhCiAg IGRldmljZSB0byByZWRpcmVjdCBmb3JldmVyLgoKICAgV2hpbHN0IGEgdHJ1c3RlZCBib290c3Ry YXAgc2VydmVyIG1heSBiZSBtaXNjb25maWd1cmVkIHRvIGNhdXNlIGEKICAgZGV2aWNlIHRvIHJl dHVybiB0byBpdCBhZ2FpbiBhZCBpbmZpdHVtLCB0aGUgZ3JlYXRlciBjb25jZXJuIGlzIHRoYXQK ICAgYW55IHVudHJ1c3RlZCBzb3VyY2Ugb2YgYm9vdHN0cmFwcGluZyBkYXRhIGNvdWxkIGJlIHVz ZWQgYnkgYW4KICAgYWR2ZXJzYXJ5IHRvIHB1cnBvc2VseSBjYXVzZSB0aGlzLgoKICAgSW5maW5p dGUgcmVkaXJlY3Rpb25zIGFyZSBtb3N0IGVhc2lseSBjb25zdHJ1Y3RlZCB2aWEgbG9vcHMsIHdo ZXJlCiAgIHNvbWUgYm9vdHN0cmFwIHNlcnZlciByZWRpcmVjdHMgYmFjayB0byBhIHByZXZpb3Vz bHkgdmlzaXRlZAogICBib290c3RyYXAgc2VydmVyLiAgSW5maW5pdGUgcmVkaXJlY3Rpb25zIGNh biBhbHNvIGJlIGNyZWF0ZWQgd2l0aG91dAogICBhIGxvb3AgYnkgYW4gYWR2ZXJzYXJ5IGR5bmFt aWNhbGx5IGluc3RhbnRpYXRlZCBib290c3RyYXAgc2VydmVycyBvbgogICB0aGUgZmx5LgoKICAg SW1wbGVtZW50YXRpb25zIFNIT1VMRCBsaW1pdCB0aGUgbWF4aW11bSBudW1iZXIgb2YgcmVjdXJz aXZlCiAgIHJlZGlyZWN0cyBhbGxvd2VkOyBubyBtb3JlIHRoYW4gYSBoYWxmIGRvemVuIHNlZW1z IHJlYXNvbmFibGUuCgoKCldhdHNlbiwgZXQgYWwuICAgICAgICAgIEV4cGlyZXMgRmVicnVhcnkg MTAsIDIwMTkgICAgICAgICAgICAgIFtQYWdlIDU2XQoMCkludGVybmV0LURyYWZ0ICAgIFNlY3Vy ZSBaZXJvIFRvdWNoIFByb3Zpc2lvbmluZyAoU1pUUCkgICAgICBBdWd1c3QgMjAxOAoKCjkuOS4g IEluY3JlYXNlZCBSZWxpYW5jZSBvbiBNYW51ZmFjdHVyZXJzCgogICBUaGUgemVybyB0b3VjaCBi b290c3RyYXBwaW5nIHByb3RvY29sIHByZXNlbnRlZCBpbiB0aGlzIGRvY3VtZW50CiAgIHNoaWZ0 cyBzb21lIGNvbnRyb2wgb2YgaW5pdGlhbCBjb25maWd1cmF0aW9uIGF3YXkgZnJvbSB0aGUgcmln aHRmdWwKICAgb3duZXIgb2YgdGhlIGRldmljZSBhbmQgdG93YXJkcyB0aGUgbWFudWZhY3R1cmVy IGFuZCBpdHMgZGVsZWdhdGVzLgoKICAgVGhlIG1hbnVmYWN0dXJlciBtYWludGFpbnMgdGhlIGxp c3Qgb2Ygd2VsbC1rbm93biBib290c3RyYXAgc2VydmVycwogICBpdHMgZGV2aWNlcyB3aWxsIHRy dXN0LiAgQnkgZGVzaWduLCBpZiBubyBib290c3RyYXBwaW5nIGRhdGEgaXMgZm91bmQKICAgdmlh IG90aGVyIG1ldGhvZHMgZmlyc3QsIHRoZSBkZXZpY2Ugd2lsbCB0cnkgdG8gcmVhY2ggb3V0IHRv IHRoZQogICB3ZWxsLWtub3duIGJvb3RzdHJhcCBzZXJ2ZXJzLiAgVGhlcmUgaXMgbm8gbWVjaGFu aXNtIHRvIHByZXZlbnQgdGhpcwogICBmcm9tIG9jY3VycmluZyBvdGhlciB0aGFuIGJ5IHVzaW5n IGFuIGV4dGVybmFsIGZpcmV3YWxsIHRvIGJsb2NrIHN1Y2gKICAgY29ubmVjdGlvbnMuICBDb25j ZXJucyByZWxhdGVkIHRvIHRydXN0ZWQgYm9vdHN0cmFwIHNlcnZlcnMgYXJlCiAgIGRpc2N1c3Nl ZCBpbiBTZWN0aW9uIDkuMTAuCgogICBTaW1pbGFybHksIHRoZSBtYW51ZmFjdHVyZXIgbWFpbnRh aW5zIHRoZSBsaXN0IG9mIHZvdWNoZXIgc2lnbmluZwogICBhdXRob3JpdGllcyBpdHMgZGV2aWNl cyB3aWxsIHRydXN0LiAgVGhlIHZvdWNoZXIgc2lnbmluZyBhdXRob3JpdGllcwogICBpc3N1ZSB0 aGUgdm91Y2hlcnMgdGhhdCBlbmFibGUgYSBkZXZpY2UgdG8gdHJ1c3QgYW4gb3duZXIncyBkb21h aW4KICAgY2VydGlmaWNhdGUuICBJdCBpcyB2aXRhbCB0aGF0IG1hbnVmYWN0dXJlcnMgZW5zdXJl IHRoZSBpbnRlZ3JpdHkgb2YKICAgdGhlc2Ugdm91Y2hlciBzaWduaW5nIGF1dGhvcml0aWVzLCBz byBhcyB0byBhdm9pZCBpbmNvcnJlY3QKICAgYXNzaWdubWVudHMuCgogICBPcGVyYXRvcnMgc2hv dWxkIGJlIGF3YXJlIHRoYXQgdGhpcyBzeXN0ZW0gYXNzdW1lcyB0aGF0IHRoZXkgdHJ1c3QKICAg YWxsIHRoZSBwcmUtY29uZmlndXJlZCBib290c3RyYXAgc2VydmVycyBhbmQgdm91Y2hlciBzaWdu aW5nCiAgIGF1dGhvcml0aWVzIGRlc2lnbmF0ZWQgYnkgdGhlIG1hbnVmYWN0dXJlcnMuCgo5LjEw LiAgQ29uY2VybnMgd2l0aCBUcnVzdGVkIEJvb3RzdHJhcCBTZXJ2ZXJzCgogICBUcnVzdGVkIGJv b3RzdHJhcCBzZXJ2ZXJzLCB3aGV0aGVyIHdlbGwta25vd24gb3IgZGlzY292ZXJlZCwgaGF2ZSB0 aGUKICAgcG90ZW50aWFsIGNhdXNlIHByb2JsZW1zLCBzdWNoIGFzIHRoZSBmb2xsb3dpbmcuCgog ICBvICBBIHRydXN0ZWQgYm9vdHN0cmFwIHNlcnZlciB0aGF0IGhhcyBiZWVuIGNvbXByb21pc2Vk IG1heSBiZQogICAgICBtb2RpZmllZCB0byByZXR1cm4gdW5zaWduZWQgZGF0YSBvZiBhbnkgc29y dC4gIEZvciBpbnN0YW5jZSwgYQogICAgICBib290c3RyYXAgc2VydmVyIHRoYXQgaXMgb25seSBz dXBwb3NlIHRvIHJldHVybiByZWRpcmVjdAogICAgICBpbmZvcm1hdGlvbiBtaWdodCBiZSBtb2Rp ZmllZCB0byByZXR1cm4gb25ib2FyZGluZyBpbmZvcm1hdGlvbi4KICAgICAgU2ltaWxhcmx5LCBh IGJvb3RzdHJhcCBzZXJ2ZXIgdGhhdCBpcyBvbmx5IHN1cHBvc2VkIHRvIHJldHVybgogICAgICBz aWduZWQgZGF0YSwgbWF5IGJlIG1vZGlmaWVkIHRvIHJldHVybiB1bnNpZ25lZCBkYXRhLiAgSW4g Ym90aAogICAgICBjYXNlcywgdGhlIGRldmljZSB3aWxsIGFjY2VwdCB0aGUgcmVzcG9uc2UsIHVu YXdhcmUgdGhhdCBpdCB3YXNuJ3QKICAgICAgc3VwcG9zZWQgdG8gYmUgYW55IGRpZmZlcmVudC4g IEl0IGlzIFJFQ09NTUVOREVEIHRoYXQgbWFpbnRhaW5lcnMKICAgICAgb2YgdHJ1c3RlZCBib290 c3RyYXAgc2VydmVycyBlbnN1cmUgdGhhdCB0aGVpciBzeXN0ZW1zIGFyZSBub3QKICAgICAgZWFz aWx5IGNvbXByb21pc2VkIGFuZCwgaXQgY2FzZSBvZiBjb21wcm9taXNlLCBoYXZlIG1lY2hhbmlz bXMgaW4KICAgICAgcGxhY2UgdG8gZGV0ZWN0IGFuZCByZW1lZGlhdGUgdGhlIGNvbXByb21pc2Ug YXMgZXhwZWRpZW50bHkgYXMKICAgICAgcG9zc2libGUuCgogICBvICBBIHRydXN0ZWQgYm9vdHN0 cmFwIHNlcnZlciBob3N0aW5nIGVpdGhlciB1bnNpZ25lZCBvciBzaWduZWQgYnV0CiAgICAgIG5v dCBlbmNyeXB0ZWQgZGF0YSBtYXkgZGlzY2xvc2UgaW5mb3JtYXRpb24gdG8gdW53YW50ZWQgcGFy dGllcwogICAgICAoZS5nLiwgYW4gYWRtaW5pc3RyYXRvciBvZiB0aGUgYm9vdHN0cmFwIHNlcnZl cikuICBUaGlzIGlzIGEKICAgICAgcHJpdmFjeSBpc3N1ZSBvbmx5LCBidXQgY291bGQgcmV2ZWFs IGluZm9ybWF0aW9uIHRoYXQgbWlnaHQgYmUKICAgICAgdXNlZCBpbiBhIHN1YnNlcXVlbnQgYXR0 YWNrLiAgRGlzY2xvc3VyZSBvZiByZWRpcmVjdCBpbmZvcm1hdGlvbgoKCgpXYXRzZW4sIGV0IGFs LiAgICAgICAgICBFeHBpcmVzIEZlYnJ1YXJ5IDEwLCAyMDE5ICAgICAgICAgICAgICBbUGFnZSA1 N10KDApJbnRlcm5ldC1EcmFmdCAgICBTZWN1cmUgWmVybyBUb3VjaCBQcm92aXNpb25pbmcgKFNa VFApICAgICAgQXVndXN0IDIwMTgKCgogICAgICBoYXMgbGltaXRlZCBleHBvc3VyZSAoaXQgaXMg anVzdCBhIGxpc3Qgb2YgYm9vdHN0cmFwIHNlcnZlcnMpLAogICAgICB3aGVyZWFzIGRpc2Nsb3N1 cmUgb2Ygb25ib2FyZGluZyBpbmZvcm1hdGlvbiBjb3VsZCBiZSBoaWdobHkKICAgICAgcmV2ZWFs aW5nIChlLmcuLCBuZXR3b3JrIHRvcG9sb2d5LCBmaXJld2FsbCBwb2xpY2llcywgZXRjLikuICBJ dAogICAgICBpcyBSRUNPTU1FTkRFRCB0aGF0IG9wZXJhdG9ycyBlbmNyeXB0IHRoZSBib290c3Ry YXBwaW5nIGRhdGEgd2hlbgogICAgICBpdHMgY29udGVudHMgYXJlIGNvbnNpZGVyZWQgc2Vuc2l0 aXZlLgoKOS4xMS4gIFRoZSAiaWV0Zi16ZXJvdG91Y2gtaW5mb3JtYXRpb24iIFlBTkcgTW9kdWxl CgogICBUaGUgaWV0Zi16ZXJvdG91Y2gtaW5mb3JtYXRpb24gbW9kdWxlIGRlZmluZWQgaW4gdGhp cyBkb2N1bWVudAogICBkZWZpbmVzIGEgZGF0YSBzdHJ1Y3R1cmUgdGhhdCBpcyBhbHdheXMgd3Jh cHBlZCBieSBhIENNUyBzdHJ1Y3R1cmUuCiAgIFdoZW4gYWNjZXNzZWQgYnkgYSBzZWN1cmUgbWVj aGFuaXNtIChlLmcuLCBwcm90ZWN0ZWQgYnkgVExTKSwgdGhlbgogICB0aGUgQ01TIHN0cnVjdHVy ZSBtYXkgYmUgdW5zaWduZWQuICBIb3dldmVyLCB3aGVuIGFjY2Vzc2VkIGJ5IGFuCiAgIGluc2Vj dXJlIG1lY2hhbmlzbSAoZS5nLiwgcmVtb3ZhYmxlIHN0b3JhZ2UgZGV2aWNlKSwgdGhlbiB0aGUg Q01TCiAgIHN0cnVjdHVyZSBtdXN0IGJlIHNpZ25lZCwgaW4gb3JkZXIgZm9yIHRoZSBkZXZpY2Ug dG8gdHJ1c3QgaXQuCgogICBJbXBsZW1lbnRhdGlvbnMgc2hvdWxkIGJlIGF3YXJlIHRoYXQgc2ln bmVkIGJvb3RzdHJhcHBpbmcgZGF0YSBvbmx5CiAgIHByb3RlY3RzIHRoZSBkYXRhIGZyb20gbW9k aWZpY2F0aW9uLCB0aGUgY29udGVudHMgYXJlIHN0aWxsIHZpc2libGUKICAgdG8gb3RoZXJzLiAg VGhpcyBkb2Vzbid0IGFmZmVjdCBTZWN1cml0eSBzbyBtdWNoIGFzIFByaXZhY3kuICBUaGF0CiAg IHRoZSBjb250ZW50cyBtYXkgYmUgcmVhZCBieSB1bmludGVuZGVkIHBhcnRpZXMgd2hlbiBhY2Nl c3NlZCBieQogICBpbnNlY3VyZSBtZWNoYW5pc21zIGlzIGNvbnNpZGVyZWQgbmV4dC4KCiAgIFRo ZSBpZXRmLXplcm90b3VjaC1pbmZvcm1hdGlvbiBtb2R1bGUgZGVmaW5lcyBhIHRvcC1sZXZlbCAi Y2hvaWNlIgogICBzdGF0ZW1lbnQgdGhhdCBkZWNsYXJlcyB0aGUgY29udGVudHMgYXJlIGVpdGhl ciAicmVkaXJlY3QtCiAgIGluZm9ybWF0aW9uIiBvciAib25ib2FyZGluZy1pbmZvcm1hdGlvbiIu ICBFYWNoIG9mIHRoZXNlIHR3byBjYXNlcwogICBhcmUgbm93IGNvbnNpZGVyZWQuCgogICBXaGVu IHRoZSBjb250ZW50cyBvZiB0aGUgQ01TIHN0cnVjdHVyZSBhcmUgcmVkaXJlY3QtaW5mb3JtYXRp b24sIGFuCiAgIG9ic2VydmVyIGNhbiBsZWFybiBhYm91dCB0aGUgYm9vdHN0cmFwIHNlcnZlcnMg dGhlIGRldmljZSBpcyBiZWluZwogICBkaXJlY3RlZCwgdGhlaXIgSVAgYWRkcmVzc2VzIG9yIGhv c3RuYW1lcywgcG9ydHMsIGFuZCB0cnVzdCBhbmNob3IKICAgY2VydGlmaWNhdGVzLiAgS25vd2xl ZGdlIG9mIHRoaXMgaW5mb3JtYXRpb24gY291bGQgcHJvdmlkZSBhbgogICBvYnNlcnZlciBzb21l IGluc2lnaHQgaW50byBhIG5ldHdvcmsncyBpbm5lciBzdHJ1Y3R1cmUuCgogICBXaGVuIHRoZSBj b250ZW50cyBvZiB0aGUgQ01TIHN0cnVjdHVyZSBhcmUgb25ib2FyZGluZy1pbmZvcm1hdGlvbiwg YXMKICAgb2JzZXJ2ZXIgY291bGQgbGVhcm4gY29uc2lkZXJhYmxlIGluZm9ybWF0aW9uIGFib3V0 IGhvdyB0aGUgZGV2aWNlIGlzCiAgIHRvIGJlIHByb3Zpc2lvbmVkLiAgVGhpcyBpbmZvcm1hdGlv biBpbmNsdWRlcyB0aGUgc3BlY2lmaWMgb3BlcmF0aW5nCiAgIHN5c3RlbSB2ZXJzaW9uLCB0aGUg aW5pdGlhbCBjb25maWd1cmF0aW9uLCBhbmQgdGhlIHNwZWNpZmljIHNjcmlwdHMKICAgdGhhdCB0 aGUgZGV2aWNlIGlzIHRvIHJ1bi4gIEFsbCBvZiB0aGlzIGluZm9ybWF0aW9uIHNob3VsZCBiZQog ICBjb25zaWRlcmVkIGhpZ2hseSBzZW5zaXRpdmUgYW5kIHByZWNhdXRpb25zIHNob3VsZCBiZSB0 YWtlbiB0bwogICBwcm90ZWN0IGl0IGZyb20gZmFsbGluZyBpbnRvIHRoZSB3cm9uZyBoYW5kcy4K CjkuMTIuICBUaGUgImlldGYtemVyb3RvdWNoLWJvb3RzdHJhcC1zZXJ2ZXIiIFlBTkcgTW9kdWxl CgogICBUaGUgaWV0Zi16ZXJvdG91Y2gtYm9vdHN0cmFwLXNlcnZlciBtb2R1bGUgZGVmaW5lZCBp biB0aGlzIGRvY3VtZW50CiAgIHNwZWNpZmllcyBhbiBBUEkgZm9yIGEgUkVTVENPTkYgW1JGQzgw NDBdLiAgVGhlIGxvd2VzdCBSRVNUQ09ORiBsYXllcgogICBpcyBIVFRQUywgYW5kIHRoZSBtYW5k YXRvcnktdG8taW1wbGVtZW50IHNlY3VyZSB0cmFuc3BvcnQgaXMgVExTCiAgIFtSRkM1MjQ2XS4K CgoKCgpXYXRzZW4sIGV0IGFsLiAgICAgICAgICBFeHBpcmVzIEZlYnJ1YXJ5IDEwLCAyMDE5ICAg ICAgICAgICAgICBbUGFnZSA1OF0KDApJbnRlcm5ldC1EcmFmdCAgICBTZWN1cmUgWmVybyBUb3Vj aCBQcm92aXNpb25pbmcgKFNaVFApICAgICAgQXVndXN0IDIwMTgKCgogICBUaGUgTkVUQ09ORiBB Y2Nlc3MgQ29udHJvbCBNb2RlbCAoTkFDTSkgW1JGQzY1MzZdIHByb3ZpZGVzIHRoZSBtZWFucwog ICB0byByZXN0cmljdCBhY2Nlc3MgZm9yIHBhcnRpY3VsYXIgdXNlcnMgdG8gYSBwcmVjb25maWd1 cmVkIHN1YnNldCBvZgogICBhbGwgYXZhaWxhYmxlIHByb3RvY29sIG9wZXJhdGlvbnMgYW5kIGNv bnRlbnQuCgogICBUaGlzIG1vZHVsZSBwcmVzZW50cyBubyBkYXRhIG5vZGVzIChvbmx5IFJQQ3Mp LiAgVGhlcmUgaXMgbm8gbmVlZCB0bwogICBkaXNjdXNzIHRoZSBzZW5zaXRpdml0eSBvZiBkYXRh IG5vZGVzLgoKICAgVGhpcyBtb2R1bGUgZGVmaW5lcyB0d28gUlBDIG9wZXJhdGlvbnMgdGhhdCBt YXkgYmUgY29uc2lkZXJlZAogICBzZW5zaXRpdmUgaW4gc29tZSBuZXR3b3JrIGVudmlyb25tZW50 cy4gIFRoZXNlIGFyZSB0aGUgb3BlcmF0aW9ucyBhbmQKICAgdGhlaXIgc2Vuc2l0aXZpdHkvdnVs bmVyYWJpbGl0eToKCiAgIGdldC1ib290c3RyYXBwaW5nLWRhdGE6ICBUaGlzIFJQQyBpcyB1c2Vk IGJ5IGRldmljZXMgdG8gb2J0YWluIHRoZWlyCiAgICAgICBib290c3RyYXBwaW5nIGRhdGEuICBC eSBkZXNpZ24sIGVhY2ggZGV2aWNlLCBhcyBpZGVudGlmaWVkIGJ5IGl0cwogICAgICAgYXV0aGVu dGljYXRpb24gY3JlZGVudGlhbHMgKGUuZy4gY2xpZW50IGNlcnRpZmljYXRlKSwgY2FuIG9ubHkK ICAgICAgIG9idGFpbiBpdHMgb3duIGRhdGEuICBOQUNNIGlzIG5vdCBuZWVkZWQgdG8gZnVydGhl ciBjb25zdHJhaW4KICAgICAgIGFjY2VzcyB0byB0aGlzIFJQQy4KCiAgIHJlcG9ydC1wcm9ncmVz czogIFRoaXMgUlBDIGlzIHVzZWQgYnkgZGV2aWNlcyB0byByZXBvcnQgdGhlaXIKICAgICAgIGJv b3RzdHJhcHBpbmcgcHJvZ3Jlc3MuICBCeSBkZXNpZ24sIGVhY2ggZGV2aWNlLCBhcyBpZGVudGlm aWVkIGJ5CiAgICAgICBpdHMgYXV0aGVudGljYXRpb24gY3JlZGVudGlhbHMgKGUuZy4gY2xpZW50 IGNlcnRpZmljYXRlKSwgY2FuCiAgICAgICBvbmx5IHJlcG9ydCBkYXRhIGZvciBpdHNlbGYuICBO QUNNIGlzIG5vdCBuZWVkZWQgdG8gZnVydGhlcgogICAgICAgY29uc3RyYWluIGFjY2VzcyB0byB0 aGlzIFJQQy4KCjEwLiAgSUFOQSBDb25zaWRlcmF0aW9ucwoKMTAuMS4gIFRoZSBJRVRGIFhNTCBS ZWdpc3RyeQoKICAgVGhpcyBkb2N1bWVudCByZWdpc3RlcnMgdHdvIFVSSXMgaW4gdGhlIElFVEYg WE1MIHJlZ2lzdHJ5IFtSRkMzNjg4XS4KICAgRm9sbG93aW5nIHRoZSBmb3JtYXQgaW4gW1JGQzM2 ODhdLCB0aGUgZm9sbG93aW5nIHJlZ2lzdHJhdGlvbnMgYXJlCiAgIHJlcXVlc3RlZDoKCiAgIFVS STogdXJuOmlldGY6cGFyYW1zOnhtbDpuczp5YW5nOmlldGYtemVyb3RvdWNoLWluZm9ybWF0aW9u CiAgIFJlZ2lzdHJhbnQgQ29udGFjdDogVGhlIE5FVENPTkYgV0cgb2YgdGhlIElFVEYuCiAgIFhN TDogTi9BLCB0aGUgcmVxdWVzdGVkIFVSSSBpcyBhbiBYTUwgbmFtZXNwYWNlLgoKICAgVVJJOiB1 cm46aWV0ZjpwYXJhbXM6eG1sOm5zOnlhbmc6aWV0Zi16ZXJvdG91Y2gtYm9vdHN0cmFwLXNlcnZl cgogICBSZWdpc3RyYW50IENvbnRhY3Q6IFRoZSBORVRDT05GIFdHIG9mIHRoZSBJRVRGLgogICBY TUw6IE4vQSwgdGhlIHJlcXVlc3RlZCBVUkkgaXMgYW4gWE1MIG5hbWVzcGFjZS4KCjEwLjIuICBU aGUgWUFORyBNb2R1bGUgTmFtZXMgUmVnaXN0cnkKCiAgIFRoaXMgZG9jdW1lbnQgcmVnaXN0ZXJz IHR3byBZQU5HIG1vZHVsZXMgaW4gdGhlIFlBTkcgTW9kdWxlIE5hbWVzCiAgIHJlZ2lzdHJ5IFtS RkM2MDIwXS4gIEZvbGxvd2luZyB0aGUgZm9ybWF0IGRlZmluZWQgaW4gW1JGQzYwMjBdLCB0aGUK ICAgdGhlIGZvbGxvd2luZyByZWdpc3RyYXRpb25zIGFyZSByZXF1ZXN0ZWQ6CgoKCgoKCgpXYXRz ZW4sIGV0IGFsLiAgICAgICAgICBFeHBpcmVzIEZlYnJ1YXJ5IDEwLCAyMDE5ICAgICAgICAgICAg ICBbUGFnZSA1OV0KDApJbnRlcm5ldC1EcmFmdCAgICBTZWN1cmUgWmVybyBUb3VjaCBQcm92aXNp b25pbmcgKFNaVFApICAgICAgQXVndXN0IDIwMTgKCgogICBuYW1lOiAgICAgIGlldGYtemVyb3Rv dWNoLWluZm9ybWF0aW9uCiAgIG5hbWVzcGFjZTogdXJuOmlldGY6cGFyYW1zOnhtbDpuczp5YW5n OmlldGYtemVyb3RvdWNoLWluZm9ybWF0aW9uCiAgIHByZWZpeDogICAgenRpCiAgIHJlZmVyZW5j ZTogUkZDIFhYWFgKCiAgIG5hbWU6ICAgICAgaWV0Zi16ZXJvdG91Y2gtYm9vdHN0cmFwLXNlcnZl cgogICBuYW1lc3BhY2U6IHVybjppZXRmOnBhcmFtczp4bWw6bnM6eWFuZzppZXRmLXplcm90b3Vj aC1ib290c3RyYXAtXAogICAgICAgICAgICAgIHNlcnZlciAgKG5vdGU6ICdcJyB1c2VkIGZvciBm b3JtYXR0aW5nIHJlYXNvbnMgb25seSkKICAgcHJlZml4OiAgICB6dGJzCiAgIHJlZmVyZW5jZTog UkZDIFhYWFgKCjEwLjMuICBUaGUgU01JIFNlY3VyaXR5IGZvciBTL01JTUUgQ01TIENvbnRlbnQg VHlwZSBSZWdpc3RyeQoKICAgSUFOQSBpcyBraW5kbHkgcmVxdWVzdGVkIHRvIHR3byBlbnRyaWVz IGluIHRoZSAiU01JIFNlY3VyaXR5IGZvciBTLwogICBNSU1FIENNUyBDb250ZW50IFR5cGUiIHJl Z2lzdHJ5ICgxLjIuODQwLjExMzU0OS4xLjkuMTYuMSksIHdpdGgKICAgdmFsdWVzIGFzIGZvbGxv d3M6CgoKICAgRGVjaW1hbCAgRGVzY3JpcHRpb24gICAgICAgICAgICAgICAgICAgICAgICAgICAg IFJlZmVyZW5jZXMKICAgLS0tLS0tLSAgLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0gIC0tLS0tLS0tLS0KICAgVEJEMSAgICAgIGlkLWN0LXplcm90b3VjaEluZm9ybWF0aW9u WE1MICAgICAgICAgIFtSRkNYWFhYXQogICBUQkQyICAgICAgaWQtY3QtemVyb3RvdWNoSW5mb3Jt YXRpb25KU09OICAgICAgICAgW1JGQ1hYWFhdCgogICBpZC1jdC16ZXJvdG91Y2hJbmZvcm1hdGlv blhNTCBpbmRpY2F0ZXMgdGhhdCB0aGUgInplcm90b3VjaC0KICAgaW5mb3JtYXRpb24iIGlzIGVu Y29kZWQgdXNpbmcgWE1MLiAgaWQtY3QtemVyb3RvdWNoSW5mb3JtYXRpb25KU09OCiAgIGluZGlj YXRlcyB0aGF0IHRoZSAiemVyb3RvdWNoLWluZm9ybWF0aW9uIiBpcyBlbmNvZGVkIHVzaW5nIEpT T04uCgoxMC40LiAgVGhlIEJPT1RQIE1hbnVmYWN0dXJlciBFeHRlbnNpb25zIGFuZCBESENQIE9w dGlvbnMgUmVnaXN0cnkKCiAgIElBTkEgaXMga2luZGx5IHJlcXVlc3RlZCB0byBtYWtlIHBlcm1h bmVudCB0aGUgZm9sbG93aW5nIGVhcmx5IGNvZGUKICAgcG9pbnQgYWxsb2NhdGlvbiBpbiB0aGUg IkJPT1RQIE1hbnVmYWN0dXJlciBFeHRlbnNpb25zIGFuZCBESENQCiAgIE9wdGlvbnMiIHJlZ2lz dHJ5IG1haW50YWluZWQgYXQgaHR0cDovL3d3dy5pYW5hLm9yZy9hc3NpZ25tZW50cy8KICAgYm9v dHAtZGhjcC1wYXJhbWV0ZXJzOgoKICAgVGFnOiAxNDMKICAgTmFtZTogT1BUSU9OX1Y0X1pFUk9U T1VDSF9SRURJUkVDVAogICBEYXRhIExlbmd0aDogTgogICBNZWFuaW5nOiBUaGlzIG9wdGlvbiBw cm92aWRlcyBhIGxpc3Qgb2YgVVJJcwogICAgICAgICAgICBmb3IgemVyb3RvdWNoIGJvb3RzdHJh cCBzZXJ2ZXJzCiAgIFJlZmVyZW5jZTogW1JGQ1hYWFhdCgogICBBbmQgdGhlIGZvbGxvd2luZyBl YXJseSBjb2RlIHBvaW50IGFsbG9jYXRpb24gaW4gdGhlICJEeW5hbWljIEhvc3QKICAgQ29uZmln dXJhdGlvbiBQcm90b2NvbCBmb3IgSVB2NiAoREhDUHY2KSIgcmVnaXN0cnkgbWFpbnRhaW5lZCBh dAogICBodHRwOi8vd3d3LmlhbmEub3JnL2Fzc2lnbm1lbnRzL2RoY3B2Ni1wYXJhbWV0ZXJzOgoK ICAgVmFsdWU6IDEzNgogICBEZXNjcmlwdGlvbjogT1BUSU9OX1Y2X1pFUk9UT1VDSF9SRURJUkVD VAogICBSZWZlcmVuY2U6IFtSRkNYWFhYXQoKCgpXYXRzZW4sIGV0IGFsLiAgICAgICAgICBFeHBp cmVzIEZlYnJ1YXJ5IDEwLCAyMDE5ICAgICAgICAgICAgICBbUGFnZSA2MF0KDApJbnRlcm5ldC1E cmFmdCAgICBTZWN1cmUgWmVybyBUb3VjaCBQcm92aXNpb25pbmcgKFNaVFApICAgICAgQXVndXN0 IDIwMTgKCgoxMS4gIFJlZmVyZW5jZXMKCjExLjEuICBOb3JtYXRpdmUgUmVmZXJlbmNlcwoKICAg W0ktRC5pZXRmLW5ldG1vZC15YW5nLWRhdGEtZXh0XQogICAgICAgICAgICAgIEJpZXJtYW4sIEEu LCBCam9ya2x1bmQsIE0uLCBhbmQgSy4gV2F0c2VuLCAiWUFORyBEYXRhCiAgICAgICAgICAgICAg RXh0ZW5zaW9ucyIsIGRyYWZ0LWlldGYtbmV0bW9kLXlhbmctZGF0YS1leHQtMDEgKHdvcmsgaW4K ICAgICAgICAgICAgICBwcm9ncmVzcyksIE1hcmNoIDIwMTguCgogICBbSVRVLlg2OTAuMjAxNV0K ICAgICAgICAgICAgICBJbnRlcm5hdGlvbmFsIFRlbGVjb21tdW5pY2F0aW9uIFVuaW9uLCAiSW5m b3JtYXRpb24KICAgICAgICAgICAgICBUZWNobm9sb2d5IC0gQVNOLjEgZW5jb2RpbmcgcnVsZXM6 IFNwZWNpZmljYXRpb24gb2YgQmFzaWMKICAgICAgICAgICAgICBFbmNvZGluZyBSdWxlcyAoQkVS KSwgQ2Fub25pY2FsIEVuY29kaW5nIFJ1bGVzIChDRVIpIGFuZAogICAgICAgICAgICAgIERpc3Rp bmd1aXNoZWQgRW5jb2RpbmcgUnVsZXMgKERFUikiLCBJVFUtVCBSZWNvbW1lbmRhdGlvbgogICAg ICAgICAgICAgIFguNjkwLCBJU08vSUVDIDg4MjUtMSwgQXVndXN0IDIwMTUsCiAgICAgICAgICAg ICAgPGh0dHBzOi8vd3d3Lml0dS5pbnQvcmVjL1QtUkVDLVguNjkwLz4uCgogICBbUkZDMTAzNV0g IE1vY2thcGV0cmlzLCBQLiwgIkRvbWFpbiBuYW1lcyAtIGltcGxlbWVudGF0aW9uIGFuZAogICAg ICAgICAgICAgIHNwZWNpZmljYXRpb24iLCBTVEQgMTMsIFJGQyAxMDM1LCBET0kgMTAuMTc0ODcv UkZDMTAzNSwKICAgICAgICAgICAgICBOb3ZlbWJlciAxOTg3LCA8aHR0cHM6Ly93d3cucmZjLWVk aXRvci5vcmcvaW5mby9yZmMxMDM1Pi4KCiAgIFtSRkMyMTE5XSAgQnJhZG5lciwgUy4sICJLZXkg d29yZHMgZm9yIHVzZSBpbiBSRkNzIHRvIEluZGljYXRlCiAgICAgICAgICAgICAgUmVxdWlyZW1l bnQgTGV2ZWxzIiwgQkNQIDE0LCBSRkMgMjExOSwKICAgICAgICAgICAgICBET0kgMTAuMTc0ODcv UkZDMjExOSwgTWFyY2ggMTk5NywgPGh0dHBzOi8vd3d3LnJmYy0KICAgICAgICAgICAgICBlZGl0 b3Iub3JnL2luZm8vcmZjMjExOT4uCgogICBbUkZDMzMxNV0gIERyb21zLCBSLiwgRWQuLCBCb3Vu ZCwgSi4sIFZvbHosIEIuLCBMZW1vbiwgVC4sIFBlcmtpbnMsCiAgICAgICAgICAgICAgQy4sIGFu ZCBNLiBDYXJuZXksICJEeW5hbWljIEhvc3QgQ29uZmlndXJhdGlvbiBQcm90b2NvbAogICAgICAg ICAgICAgIGZvciBJUHY2IChESENQdjYpIiwgUkZDIDMzMTUsIERPSSAxMC4xNzQ4Ny9SRkMzMzE1 LCBKdWx5CiAgICAgICAgICAgICAgMjAwMywgPGh0dHBzOi8vd3d3LnJmYy1lZGl0b3Iub3JnL2lu Zm8vcmZjMzMxNT4uCgogICBbUkZDMzM5Nl0gIExlbW9uLCBULiBhbmQgUy4gQ2hlc2hpcmUsICJF bmNvZGluZyBMb25nIE9wdGlvbnMgaW4gdGhlCiAgICAgICAgICAgICAgRHluYW1pYyBIb3N0IENv bmZpZ3VyYXRpb24gUHJvdG9jb2wgKERIQ1B2NCkiLCBSRkMgMzM5NiwKICAgICAgICAgICAgICBE T0kgMTAuMTc0ODcvUkZDMzM5NiwgTm92ZW1iZXIgMjAwMiwgPGh0dHBzOi8vd3d3LnJmYy0KICAg ICAgICAgICAgICBlZGl0b3Iub3JnL2luZm8vcmZjMzM5Nj4uCgogICBbUkZDNDI1M10gIFlsb25l biwgVC4gYW5kIEMuIExvbnZpY2ssIEVkLiwgIlRoZSBTZWN1cmUgU2hlbGwgKFNTSCkKICAgICAg ICAgICAgICBUcmFuc3BvcnQgTGF5ZXIgUHJvdG9jb2wiLCBSRkMgNDI1MywgRE9JIDEwLjE3NDg3 L1JGQzQyNTMsCiAgICAgICAgICAgICAgSmFudWFyeSAyMDA2LCA8aHR0cHM6Ly93d3cucmZjLWVk aXRvci5vcmcvaW5mby9yZmM0MjUzPi4KCiAgIFtSRkM1MjgwXSAgQ29vcGVyLCBELiwgU2FudGVz c29uLCBTLiwgRmFycmVsbCwgUy4sIEJvZXllbiwgUy4sCiAgICAgICAgICAgICAgSG91c2xleSwg Ui4sIGFuZCBXLiBQb2xrLCAiSW50ZXJuZXQgWC41MDkgUHVibGljIEtleQogICAgICAgICAgICAg IEluZnJhc3RydWN0dXJlIENlcnRpZmljYXRlIGFuZCBDZXJ0aWZpY2F0ZSBSZXZvY2F0aW9uIExp c3QKICAgICAgICAgICAgICAoQ1JMKSBQcm9maWxlIiwgUkZDIDUyODAsIERPSSAxMC4xNzQ4Ny9S RkM1MjgwLCBNYXkgMjAwOCwKICAgICAgICAgICAgICA8aHR0cHM6Ly93d3cucmZjLWVkaXRvci5v cmcvaW5mby9yZmM1MjgwPi4KCgoKCgoKV2F0c2VuLCBldCBhbC4gICAgICAgICAgRXhwaXJlcyBG ZWJydWFyeSAxMCwgMjAxOSAgICAgICAgICAgICAgW1BhZ2UgNjFdCgwKSW50ZXJuZXQtRHJhZnQg ICAgU2VjdXJlIFplcm8gVG91Y2ggUHJvdmlzaW9uaW5nIChTWlRQKSAgICAgIEF1Z3VzdCAyMDE4 CgoKICAgW1JGQzU2NTJdICBIb3VzbGV5LCBSLiwgIkNyeXB0b2dyYXBoaWMgTWVzc2FnZSBTeW50 YXggKENNUykiLCBTVEQgNzAsCiAgICAgICAgICAgICAgUkZDIDU2NTIsIERPSSAxMC4xNzQ4Ny9S RkM1NjUyLCBTZXB0ZW1iZXIgMjAwOSwKICAgICAgICAgICAgICA8aHR0cHM6Ly93d3cucmZjLWVk aXRvci5vcmcvaW5mby9yZmM1NjUyPi4KCiAgIFtSRkM2MDIwXSAgQmpvcmtsdW5kLCBNLiwgRWQu LCAiWUFORyAtIEEgRGF0YSBNb2RlbGluZyBMYW5ndWFnZSBmb3IKICAgICAgICAgICAgICB0aGUg TmV0d29yayBDb25maWd1cmF0aW9uIFByb3RvY29sIChORVRDT05GKSIsIFJGQyA2MDIwLAogICAg ICAgICAgICAgIERPSSAxMC4xNzQ4Ny9SRkM2MDIwLCBPY3RvYmVyIDIwMTAsIDxodHRwczovL3d3 dy5yZmMtCiAgICAgICAgICAgICAgZWRpdG9yLm9yZy9pbmZvL3JmYzYwMjA+LgoKICAgW1JGQzYx MjVdICBTYWludC1BbmRyZSwgUC4gYW5kIEouIEhvZGdlcywgIlJlcHJlc2VudGF0aW9uIGFuZAog ICAgICAgICAgICAgIFZlcmlmaWNhdGlvbiBvZiBEb21haW4tQmFzZWQgQXBwbGljYXRpb24gU2Vy dmljZSBJZGVudGl0eQogICAgICAgICAgICAgIHdpdGhpbiBJbnRlcm5ldCBQdWJsaWMgS2V5IElu ZnJhc3RydWN0dXJlIFVzaW5nIFguNTA5CiAgICAgICAgICAgICAgKFBLSVgpIENlcnRpZmljYXRl cyBpbiB0aGUgQ29udGV4dCBvZiBUcmFuc3BvcnQgTGF5ZXIKICAgICAgICAgICAgICBTZWN1cml0 eSAoVExTKSIsIFJGQyA2MTI1LCBET0kgMTAuMTc0ODcvUkZDNjEyNSwgTWFyY2gKICAgICAgICAg ICAgICAyMDExLCA8aHR0cHM6Ly93d3cucmZjLWVkaXRvci5vcmcvaW5mby9yZmM2MTI1Pi4KCiAg IFtSRkM2MjM0XSAgRWFzdGxha2UgM3JkLCBELiBhbmQgVC4gSGFuc2VuLCAiVVMgU2VjdXJlIEhh c2ggQWxnb3JpdGhtcwogICAgICAgICAgICAgIChTSEEgYW5kIFNIQS1iYXNlZCBITUFDIGFuZCBI S0RGKSIsIFJGQyA2MjM0LAogICAgICAgICAgICAgIERPSSAxMC4xNzQ4Ny9SRkM2MjM0LCBNYXkg MjAxMSwgPGh0dHBzOi8vd3d3LnJmYy0KICAgICAgICAgICAgICBlZGl0b3Iub3JnL2luZm8vcmZj NjIzND4uCgogICBbUkZDNjc2Ml0gIENoZXNoaXJlLCBTLiBhbmQgTS4gS3JvY2htYWwsICJNdWx0 aWNhc3QgRE5TIiwgUkZDIDY3NjIsCiAgICAgICAgICAgICAgRE9JIDEwLjE3NDg3L1JGQzY3NjIs IEZlYnJ1YXJ5IDIwMTMsIDxodHRwczovL3d3dy5yZmMtCiAgICAgICAgICAgICAgZWRpdG9yLm9y Zy9pbmZvL3JmYzY3NjI+LgoKICAgW1JGQzY3NjNdICBDaGVzaGlyZSwgUy4gYW5kIE0uIEtyb2No bWFsLCAiRE5TLUJhc2VkIFNlcnZpY2UKICAgICAgICAgICAgICBEaXNjb3ZlcnkiLCBSRkMgNjc2 MywgRE9JIDEwLjE3NDg3L1JGQzY3NjMsIEZlYnJ1YXJ5IDIwMTMsCiAgICAgICAgICAgICAgPGh0 dHBzOi8vd3d3LnJmYy1lZGl0b3Iub3JnL2luZm8vcmZjNjc2Mz4uCgogICBbUkZDNjk5MV0gIFNj aG9lbndhZWxkZXIsIEouLCBFZC4sICJDb21tb24gWUFORyBEYXRhIFR5cGVzIiwKICAgICAgICAg ICAgICBSRkMgNjk5MSwgRE9JIDEwLjE3NDg3L1JGQzY5OTEsIEp1bHkgMjAxMywKICAgICAgICAg ICAgICA8aHR0cHM6Ly93d3cucmZjLWVkaXRvci5vcmcvaW5mby9yZmM2OTkxPi4KCiAgIFtSRkM3 MjI3XSAgSGFua2lucywgRC4sIE1ydWdhbHNraSwgVC4sIFNpb2RlbHNraSwgTS4sIEppYW5nLCBT LiwgYW5kCiAgICAgICAgICAgICAgUy4gS3Jpc2huYW4sICJHdWlkZWxpbmVzIGZvciBDcmVhdGlu ZyBOZXcgREhDUHY2IE9wdGlvbnMiLAogICAgICAgICAgICAgIEJDUCAxODcsIFJGQyA3MjI3LCBE T0kgMTAuMTc0ODcvUkZDNzIyNywgTWF5IDIwMTQsCiAgICAgICAgICAgICAgPGh0dHBzOi8vd3d3 LnJmYy1lZGl0b3Iub3JnL2luZm8vcmZjNzIyNz4uCgogICBbUkZDNzk1MF0gIEJqb3JrbHVuZCwg TS4sIEVkLiwgIlRoZSBZQU5HIDEuMSBEYXRhIE1vZGVsaW5nIExhbmd1YWdlIiwKICAgICAgICAg ICAgICBSRkMgNzk1MCwgRE9JIDEwLjE3NDg3L1JGQzc5NTAsIEF1Z3VzdCAyMDE2LAogICAgICAg ICAgICAgIDxodHRwczovL3d3dy5yZmMtZWRpdG9yLm9yZy9pbmZvL3JmYzc5NTA+LgoKICAgW1JG QzgwNDBdICBCaWVybWFuLCBBLiwgQmpvcmtsdW5kLCBNLiwgYW5kIEsuIFdhdHNlbiwgIlJFU1RD T05GCiAgICAgICAgICAgICAgUHJvdG9jb2wiLCBSRkMgODA0MCwgRE9JIDEwLjE3NDg3L1JGQzgw NDAsIEphbnVhcnkgMjAxNywKICAgICAgICAgICAgICA8aHR0cHM6Ly93d3cucmZjLWVkaXRvci5v cmcvaW5mby9yZmM4MDQwPi4KCgoKCgoKV2F0c2VuLCBldCBhbC4gICAgICAgICAgRXhwaXJlcyBG ZWJydWFyeSAxMCwgMjAxOSAgICAgICAgICAgICAgW1BhZ2UgNjJdCgwKSW50ZXJuZXQtRHJhZnQg ICAgU2VjdXJlIFplcm8gVG91Y2ggUHJvdmlzaW9uaW5nIChTWlRQKSAgICAgIEF1Z3VzdCAyMDE4 CgoKICAgW1JGQzgxNzRdICBMZWliYSwgQi4sICJBbWJpZ3VpdHkgb2YgVXBwZXJjYXNlIHZzIExv d2VyY2FzZSBpbiBSRkMKICAgICAgICAgICAgICAyMTE5IEtleSBXb3JkcyIsIEJDUCAxNCwgUkZD IDgxNzQsIERPSSAxMC4xNzQ4Ny9SRkM4MTc0LAogICAgICAgICAgICAgIE1heSAyMDE3LCA8aHR0 cHM6Ly93d3cucmZjLWVkaXRvci5vcmcvaW5mby9yZmM4MTc0Pi4KCiAgIFtSRkM4MzY2XSAgV2F0 c2VuLCBLLiwgUmljaGFyZHNvbiwgTS4sIFByaXRpa2luLCBNLiwgYW5kIFQuIEVja2VydCwKICAg ICAgICAgICAgICAiQSBWb3VjaGVyIEFydGlmYWN0IGZvciBCb290c3RyYXBwaW5nIFByb3RvY29s cyIsCiAgICAgICAgICAgICAgUkZDIDgzNjYsIERPSSAxMC4xNzQ4Ny9SRkM4MzY2LCBNYXkgMjAx OCwKICAgICAgICAgICAgICA8aHR0cHM6Ly93d3cucmZjLWVkaXRvci5vcmcvaW5mby9yZmM4MzY2 Pi4KCiAgIFtTdGQtODAyLjFBUi0yMDA5XQogICAgICAgICAgICAgIElFRUUgU0EtU3RhbmRhcmRz IEJvYXJkLCAiSUVFRSBTdGFuZGFyZCBmb3IgTG9jYWwgYW5kCiAgICAgICAgICAgICAgbWV0cm9w b2xpdGFuIGFyZWEgbmV0d29ya3MgLSBTZWN1cmUgRGV2aWNlIElkZW50aXR5IiwKICAgICAgICAg ICAgICBEZWNlbWJlciAyMDA5LCA8aHR0cDovL3N0YW5kYXJkcy5pZWVlLm9yZy9maW5kc3Rkcy8K ICAgICAgICAgICAgICBzdGFuZGFyZC84MDIuMUFSLTIwMDkuaHRtbD4uCgoxMS4yLiAgSW5mb3Jt YXRpdmUgUmVmZXJlbmNlcwoKICAgW0ktRC5pZXRmLW5ldGNvbmYtY3J5cHRvLXR5cGVzXQogICAg ICAgICAgICAgIFdhdHNlbiwgSy4sICJDb21tb24gWUFORyBEYXRhIFR5cGVzIGZvciBDcnlwdG9n cmFwaHkiLAogICAgICAgICAgICAgIGRyYWZ0LWlldGYtbmV0Y29uZi1jcnlwdG8tdHlwZXMtMDAg KHdvcmsgaW4gcHJvZ3Jlc3MpLAogICAgICAgICAgICAgIEp1bmUgMjAxOC4KCiAgIFtJLUQuaWV0 Zi1uZXRjb25mLXRydXN0LWFuY2hvcnNdCiAgICAgICAgICAgICAgV2F0c2VuLCBLLiwgIllBTkcg RGF0YSBNb2RlbCBmb3IgR2xvYmFsIFRydXN0IEFuY2hvcnMiLAogICAgICAgICAgICAgIGRyYWZ0 LWlldGYtbmV0Y29uZi10cnVzdC1hbmNob3JzLTAwICh3b3JrIGluIHByb2dyZXNzKSwKICAgICAg ICAgICAgICBKdW5lIDIwMTguCgogICBbUkZDMzY4OF0gIE1lYWxsaW5nLCBNLiwgIlRoZSBJRVRG IFhNTCBSZWdpc3RyeSIsIEJDUCA4MSwgUkZDIDM2ODgsCiAgICAgICAgICAgICAgRE9JIDEwLjE3 NDg3L1JGQzM2ODgsIEphbnVhcnkgMjAwNCwgPGh0dHBzOi8vd3d3LnJmYy0KICAgICAgICAgICAg ICBlZGl0b3Iub3JnL2luZm8vcmZjMzY4OD4uCgogICBbUkZDNTI0Nl0gIERpZXJrcywgVC4gYW5k IEUuIFJlc2NvcmxhLCAiVGhlIFRyYW5zcG9ydCBMYXllciBTZWN1cml0eQogICAgICAgICAgICAg IChUTFMpIFByb3RvY29sIFZlcnNpb24gMS4yIiwgUkZDIDUyNDYsCiAgICAgICAgICAgICAgRE9J IDEwLjE3NDg3L1JGQzUyNDYsIEF1Z3VzdCAyMDA4LCA8aHR0cHM6Ly93d3cucmZjLQogICAgICAg ICAgICAgIGVkaXRvci5vcmcvaW5mby9yZmM1MjQ2Pi4KCiAgIFtSRkM2MjQxXSAgRW5ucywgUi4s IEVkLiwgQmpvcmtsdW5kLCBNLiwgRWQuLCBTY2hvZW53YWVsZGVyLCBKLiwgRWQuLAogICAgICAg ICAgICAgIGFuZCBBLiBCaWVybWFuLCBFZC4sICJOZXR3b3JrIENvbmZpZ3VyYXRpb24gUHJvdG9j b2wKICAgICAgICAgICAgICAoTkVUQ09ORikiLCBSRkMgNjI0MSwgRE9JIDEwLjE3NDg3L1JGQzYy NDEsIEp1bmUgMjAxMSwKICAgICAgICAgICAgICA8aHR0cHM6Ly93d3cucmZjLWVkaXRvci5vcmcv aW5mby9yZmM2MjQxPi4KCiAgIFtSRkM2NTM2XSAgQmllcm1hbiwgQS4gYW5kIE0uIEJqb3JrbHVu ZCwgIk5ldHdvcmsgQ29uZmlndXJhdGlvbgogICAgICAgICAgICAgIFByb3RvY29sIChORVRDT05G KSBBY2Nlc3MgQ29udHJvbCBNb2RlbCIsIFJGQyA2NTM2LAogICAgICAgICAgICAgIERPSSAxMC4x NzQ4Ny9SRkM2NTM2LCBNYXJjaCAyMDEyLCA8aHR0cHM6Ly93d3cucmZjLQogICAgICAgICAgICAg IGVkaXRvci5vcmcvaW5mby9yZmM2NTM2Pi4KCgoKCgoKV2F0c2VuLCBldCBhbC4gICAgICAgICAg RXhwaXJlcyBGZWJydWFyeSAxMCwgMjAxOSAgICAgICAgICAgICAgW1BhZ2UgNjNdCgwKSW50ZXJu ZXQtRHJhZnQgICAgU2VjdXJlIFplcm8gVG91Y2ggUHJvdmlzaW9uaW5nIChTWlRQKSAgICAgIEF1 Z3VzdCAyMDE4CgoKICAgW1JGQzY2OThdICBIb2ZmbWFuLCBQLiBhbmQgSi4gU2NobHl0ZXIsICJU aGUgRE5TLUJhc2VkIEF1dGhlbnRpY2F0aW9uCiAgICAgICAgICAgICAgb2YgTmFtZWQgRW50aXRp ZXMgKERBTkUpIFRyYW5zcG9ydCBMYXllciBTZWN1cml0eSAoVExTKQogICAgICAgICAgICAgIFBy b3RvY29sOiBUTFNBIiwgUkZDIDY2OTgsIERPSSAxMC4xNzQ4Ny9SRkM2Njk4LCBBdWd1c3QKICAg ICAgICAgICAgICAyMDEyLCA8aHR0cHM6Ly93d3cucmZjLWVkaXRvci5vcmcvaW5mby9yZmM2Njk4 Pi4KCiAgIFtSRkM2OTYwXSAgU2FudGVzc29uLCBTLiwgTXllcnMsIE0uLCBBbmtuZXksIFIuLCBN YWxwYW5pLCBBLiwKICAgICAgICAgICAgICBHYWxwZXJpbiwgUy4sIGFuZCBDLiBBZGFtcywgIlgu NTA5IEludGVybmV0IFB1YmxpYyBLZXkKICAgICAgICAgICAgICBJbmZyYXN0cnVjdHVyZSBPbmxp bmUgQ2VydGlmaWNhdGUgU3RhdHVzIFByb3RvY29sIC0gT0NTUCIsCiAgICAgICAgICAgICAgUkZD IDY5NjAsIERPSSAxMC4xNzQ4Ny9SRkM2OTYwLCBKdW5lIDIwMTMsCiAgICAgICAgICAgICAgPGh0 dHBzOi8vd3d3LnJmYy1lZGl0b3Iub3JnL2luZm8vcmZjNjk2MD4uCgogICBbUkZDODA3MV0gIFdh dHNlbiwgSy4sICJORVRDT05GIENhbGwgSG9tZSBhbmQgUkVTVENPTkYgQ2FsbCBIb21lIiwKICAg ICAgICAgICAgICBSRkMgODA3MSwgRE9JIDEwLjE3NDg3L1JGQzgwNzEsIEZlYnJ1YXJ5IDIwMTcs CiAgICAgICAgICAgICAgPGh0dHBzOi8vd3d3LnJmYy1lZGl0b3Iub3JnL2luZm8vcmZjODA3MT4u CgogICBbUkZDODM0MF0gIEJqb3JrbHVuZCwgTS4gYW5kIEwuIEJlcmdlciwgRWQuLCAiWUFORyBU cmVlIERpYWdyYW1zIiwKICAgICAgICAgICAgICBCQ1AgMjE1LCBSRkMgODM0MCwgRE9JIDEwLjE3 NDg3L1JGQzgzNDAsIE1hcmNoIDIwMTgsCiAgICAgICAgICAgICAgPGh0dHBzOi8vd3d3LnJmYy1l ZGl0b3Iub3JnL2luZm8vcmZjODM0MD4uCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoK CldhdHNlbiwgZXQgYWwuICAgICAgICAgIEV4cGlyZXMgRmVicnVhcnkgMTAsIDIwMTkgICAgICAg ICAgICAgIFtQYWdlIDY0XQoMCkludGVybmV0LURyYWZ0ICAgIFNlY3VyZSBaZXJvIFRvdWNoIFBy b3Zpc2lvbmluZyAoU1pUUCkgICAgICBBdWd1c3QgMjAxOAoKCkFwcGVuZGl4IEEuICBUaGUgWmVy byBUb3VjaCBEZXZpY2UgRGF0YSBNb2RlbAoKICAgVGhpcyBzZWN0aW9uIGRlZmluZXMgYSBub24t bm9ybWF0aXZlIGRhdGEgbW9kZWwgdGhhdCBlbmFibGVzIHRoZQogICBjb25maWd1cmF0aW9uIG9m IHplcm90b3VjaCBib290c3RyYXBwaW5nIGFuZCBkaXNjb3Zlcnkgb2Ygd2hhdAogICBwYXJhbWV0 ZXJzIGFyZSB1c2VkIGJ5IGEgZGV2aWNlJ3MgYm9vdHN0cmFwcGluZyBsb2dpYy4KCkEuMS4gIERh dGEgTW9kZWwgT3ZlcnZpZXcKCiAgIFRoZSBmb2xsb3dpbmcgdHJlZSBkaWFncmFtIHByb3ZpZGVz IGFuIG92ZXJ2aWV3IGZvciB0aGUgemVyb3RvdWNoCiAgIGRldmljZSBkYXRhIG1vZGVsLgoKICAg bW9kdWxlOiBleGFtcGxlLXplcm90b3VjaC1kZXZpY2UKICAgICArLS1ydyB6ZXJvdG91Y2gKICAg ICAgICArLS1ydyBlbmFibGVkPyAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgYm9vbGVh bgogICAgICAgICstLXJvIGlkZXZpZC1jZXJ0aWZpY2F0ZT8KICAgICAgICB8ICAgICAgIGN0OmVu ZC1lbnRpdHktY2VydC1jbXMge2Jvb3RzdHJhcC1zZXJ2ZXJzfT8KICAgICAgICArLS1ybyBib290 c3RyYXAtc2VydmVycyB7Ym9vdHN0cmFwLXNlcnZlcnN9PwogICAgICAgIHwgICstLXJvIGJvb3Rz dHJhcC1zZXJ2ZXIqIFthZGRyZXNzXQogICAgICAgIHwgICAgICstLXJvIGFkZHJlc3MgICAgaW5l dDpob3N0CiAgICAgICAgfCAgICAgKy0tcm8gcG9ydD8gICAgICBpbmV0OnBvcnQtbnVtYmVyCiAg ICAgICAgKy0tcm8gYm9vdHN0cmFwLXNlcnZlci1waW5uZWQtY2VydGlmaWNhdGVzPwogICAgICAg IHwgICAgICAgdGE6cGlubmVkLWNlcnRpZmljYXRlcy1yZWYge2Jvb3RzdHJhcC1zZXJ2ZXJzfT8K ICAgICAgICArLS1ybyB2b3VjaGVyLXBpbm5lZC1jZXJ0aWZpY2F0ZXM/CiAgICAgICAgICAgICAg ICB0YTpwaW5uZWQtY2VydGlmaWNhdGVzLXJlZiB7c2lnbmVkLWRhdGF9PwoKICAgSW4gdGhlIGFi b3ZlIGRpYWdyYW0sIG5vdGljZSB0aGF0IHRoZXJlIGlzIG9ubHkgb25lIGNvbmZpZ3VyYWJsZSBu b2RlCiAgICJlbmFibGVkIi4gIFRoZSBleHBlY3RhdGlvbiBpcyB0aGF0IHRoaXMgbm9kZSB3b3Vs ZCBiZSBzZXQgdG8gInRydWUiCiAgIGluIGRldmljZSdzIGZhY3RvcnkgZGVmYXVsdCBjb25maWd1 cmF0aW9uIGFuZCB0aGF0IGl0IHdvdWxkIGVpdGhlciBiZQogICBzZXQgdG8gImZhbHNlIiBvciBk ZWxldGVkIHdoZW4gdGhlIHplcm90b3VjaCBib290c3RyYXBwaW5nIGlzIGxvbmdlcgogICBuZWVk ZWQuCgpBLjIuICBFeGFtcGxlIFVzYWdlCgogICBGb2xsb3dpbmcgaXMgYW4gaW5zdGFuY2UgZXhh bXBsZSBmb3IgdGhpcyBkYXRhIG1vZGVsLgoKCgoKCgoKCgoKCgoKCgoKCldhdHNlbiwgZXQgYWwu ICAgICAgICAgIEV4cGlyZXMgRmVicnVhcnkgMTAsIDIwMTkgICAgICAgICAgICAgIFtQYWdlIDY1 XQoMCkludGVybmV0LURyYWZ0ICAgIFNlY3VyZSBaZXJvIFRvdWNoIFByb3Zpc2lvbmluZyAoU1pU UCkgICAgICBBdWd1c3QgMjAxOAoKCiAgIFtOb3RlOiAnXCcgbGluZSB3cmFwcGluZyBmb3IgZm9y bWF0dGluZyBvbmx5XQoKICAgPHplcm90b3VjaAogICAgIHhtbG5zPSJodHRwczovL2V4YW1wbGUu Y29tL3plcm90b3VjaC1kZXZpY2UiPgogICAgIDxlbmFibGVkPnRydWU8L2VuYWJsZWQ+CiAgICAg PGlkZXZpZC1jZXJ0aWZpY2F0ZT5iYXNlNjRlbmNvZGVkdmFsdWU9PTwvaWRldmlkLWNlcnRpZmlj YXRlPgogICAgIDxib290c3RyYXAtc2VydmVycz4KICAgICAgIDxib290c3RyYXAtc2VydmVyPgog ICAgICAgICA8YWRkcmVzcz5waHMxLmV4YW1wbGUuY29tPC9hZGRyZXNzPgogICAgICAgICA8cG9y dD44NDQzPC9wb3J0PgogICAgICAgPC9ib290c3RyYXAtc2VydmVyPgogICAgICAgPGJvb3RzdHJh cC1zZXJ2ZXI+CiAgICAgICAgIDxhZGRyZXNzPnBoczIuZXhhbXBsZS5jb208L2FkZHJlc3M+CiAg ICAgICAgIDxwb3J0Pjg0NDM8L3BvcnQ+CiAgICAgICA8L2Jvb3RzdHJhcC1zZXJ2ZXI+CiAgICAg ICA8Ym9vdHN0cmFwLXNlcnZlcj4KICAgICAgICAgPGFkZHJlc3M+cGhzMy5leGFtcGxlLmNvbTwv YWRkcmVzcz4KICAgICAgICAgPHBvcnQ+ODQ0MzwvcG9ydD4KICAgICAgIDwvYm9vdHN0cmFwLXNl cnZlcj4KICAgICA8L2Jvb3RzdHJhcC1zZXJ2ZXJzPgogICAgIDxib290c3RyYXAtc2VydmVyLXBp bm5lZC1jZXJ0aWZpY2F0ZXM+bWFudWZhY3R1cmVycy1yb290LWNhLWNlcnRzPFwKICAgL2Jvb3Rz dHJhcC1zZXJ2ZXItcGlubmVkLWNlcnRpZmljYXRlcz4KICAgICA8dm91Y2hlci1waW5uZWQtY2Vy dGlmaWNhdGVzPm1hbnVmYWN0dXJlcnMtcm9vdC1jYS1jZXJ0czwvdm91Y2hlci1cCiAgIHBpbm5l ZC1jZXJ0aWZpY2F0ZXM+CiAgIDwvemVyb3RvdWNoPgoKQS4zLiAgWUFORyBNb2R1bGUKCiAgIFRo ZSBkZXZpY2UgbW9kZWwgaXMgZGVmaW5lZCBieSB0aGUgWUFORyBtb2R1bGUgZGVmaW5lZCBpbiB0 aGlzCiAgIHNlY3Rpb24uCgogICBUaGlzIG1vZHVsZSB1c2VzIGRhdGEgdHlwZXMgZGVmaW5lZCBp biBbUkZDNjk5MV0sCiAgIFtJLUQuaWV0Zi1uZXRjb25mLWNyeXB0by10eXBlc10sIGFuZAogICBb SS1ELmlldGYtbmV0Y29uZi10cnVzdC1hbmNob3JzXS4KCiAgIG1vZHVsZSBleGFtcGxlLXplcm90 b3VjaC1kZXZpY2UgewogICAgIHlhbmctdmVyc2lvbiAxLjE7CiAgICAgbmFtZXNwYWNlICJodHRw czovL2V4YW1wbGUuY29tL3plcm90b3VjaC1kZXZpY2UiOwogICAgIHByZWZpeCB6dGQ7CgogICAg IGltcG9ydCBpZXRmLWluZXQtdHlwZXMgewogICAgICAgcHJlZml4IGluZXQ7CiAgICAgICByZWZl cmVuY2UgIlJGQyA2OTkxOiBDb21tb24gWUFORyBEYXRhIFR5cGVzIjsKICAgICB9CgogICAgIGlt cG9ydCBpZXRmLWNyeXB0by10eXBlcyB7CiAgICAgICBwcmVmaXggY3Q7CiAgICAgICByZXZpc2lv bi1kYXRlIDIwMTgtMDYtMDQ7CgoKCldhdHNlbiwgZXQgYWwuICAgICAgICAgIEV4cGlyZXMgRmVi cnVhcnkgMTAsIDIwMTkgICAgICAgICAgICAgIFtQYWdlIDY2XQoMCkludGVybmV0LURyYWZ0ICAg IFNlY3VyZSBaZXJvIFRvdWNoIFByb3Zpc2lvbmluZyAoU1pUUCkgICAgICBBdWd1c3QgMjAxOAoK CiAgICAgICBkZXNjcmlwdGlvbgogICAgICAgICJUaGlzIHJldmlzaW9uIGlzIGRlZmluZWQgaW4g dGhlIC0wMCB2ZXJzaW9uIG9mCiAgICAgICAgIGRyYWZ0LWlldGYtbmV0Y29uZi1jcnlwdG8tdHlw ZXMiOwogICAgICAgcmVmZXJlbmNlCiAgICAgICAgImRyYWZ0LWlldGYtbmV0Y29uZi1jcnlwdG8t dHlwZXM6CiAgICAgICAgICAgQ29tbW9uIFlBTkcgRGF0YSBUeXBlcyBmb3IgQ3J5cHRvZ3JhcGh5 IjsKICAgICB9CgogICAgIGltcG9ydCBpZXRmLXRydXN0LWFuY2hvcnMgewogICAgICAgcHJlZml4 IHRhOwogICAgICAgcmV2aXNpb24tZGF0ZSAyMDE4LTA2LTA0OwogICAgICAgZGVzY3JpcHRpb24K ICAgICAgICAiVGhpcyByZXZpc2lvbiBpcyBkZWZpbmVkIGluIC0wMCB2ZXJzaW9uIG9mCiAgICAg ICAgIGRyYWZ0LWlldGYtbmV0Y29uZi10cnVzdC1hbmNob3JzLiI7CiAgICAgICByZWZlcmVuY2UK ICAgICAgICAiZHJhZnQtaWV0Zi1uZXRjb25mLXRydXN0LWFuY2hvcnM6CiAgICAgICAgICAgWUFO RyBEYXRhIE1vZGVsIGZvciBHbG9iYWwgVHJ1c3QgQW5jaG9ycyI7CiAgICAgfQoKICAgICBvcmdh bml6YXRpb24KICAgICAgICJFeGFtcGxlIENvcnBvcmF0aW9uIjsKCiAgICAgY29udGFjdAogICAg ICAgIkF1dGhvcjogQm9vdHN0cmFwIEFkbWluIDxtYWlsdG86YWRtaW5AZXhhbXBsZS5jb20+IjsK CiAgICAgZGVzY3JpcHRpb24KICAgICAgICJUaGlzIG1vZHVsZSBkZWZpbmVzIGEgZGF0YSBtb2Rl bCB0byBlbmFibGUgemVyb3RvdWNoCiAgICAgICAgYm9vdHN0cmFwcGluZyBhbmQgZGlzY292ZXIg d2hhdCBwYXJhbWV0ZXJzIGFyZSB1c2VkLgogICAgICAgIFRoaXMgbW9kdWxlIGFzc3VtZXMgdGhl IHVzZSBvZiBhbiBJRGV2SUQgY2VydGlmaWNhdGUsCiAgICAgICAgYXMgb3Bwb3NlZCB0byBhbnkg b3RoZXIgY2xpZW50IGNlcnRpZmljYXRlLCBvciB0aGUKICAgICAgICB1c2Ugb2YgYW4gSFRUUC1i YXNlZCBjbGllbnQgYXV0aGVudGljYXRpb24gc2NoZW1lLiI7CgogICAgIHJldmlzaW9uIDIwMTgt MDgtMDkgewogICAgICAgZGVzY3JpcHRpb24KICAgICAgICAgIkluaXRpYWwgdmVyc2lvbiI7CiAg ICAgICByZWZlcmVuY2UKICAgICAgICAgIlJGQyBYWFhYOiBaZXJvIFRvdWNoIFByb3Zpc2lvbmlu ZyBmb3IgTmV0d29ya2luZyBEZXZpY2VzIjsKICAgICB9CgogICAgIC8vIGZlYXR1cmVzCgogICAg IGZlYXR1cmUgYm9vdHN0cmFwLXNlcnZlcnMgewogICAgICAgZGVzY3JpcHRpb24KICAgICAgICAg IlRoZSBkZXZpY2Ugc3VwcG9ydHMgYm9vdHN0cmFwcGluZyBvZmYgYm9vdHN0cmFwIHNlcnZlcnMu IjsKICAgICB9CgogICAgIGZlYXR1cmUgc2lnbmVkLWRhdGEgewogICAgICAgZGVzY3JpcHRpb24K CgoKV2F0c2VuLCBldCBhbC4gICAgICAgICAgRXhwaXJlcyBGZWJydWFyeSAxMCwgMjAxOSAgICAg ICAgICAgICAgW1BhZ2UgNjddCgwKSW50ZXJuZXQtRHJhZnQgICAgU2VjdXJlIFplcm8gVG91Y2gg UHJvdmlzaW9uaW5nIChTWlRQKSAgICAgIEF1Z3VzdCAyMDE4CgoKICAgICAgICAgIlRoZSBkZXZp Y2Ugc3VwcG9ydHMgYm9vdHN0cmFwcGluZyBvZmYgc2lnbmVkIGRhdGEuIjsKICAgICB9CgogICAg IC8vIHByb3RvY29sIGFjY2Vzc2libGUgbm9kZXMKCiAgICAgY29udGFpbmVyIHplcm90b3VjaCB7 CiAgICAgICBkZXNjcmlwdGlvbgogICAgICAgICAiVG9wLWxldmVsIGNvbnRhaW5lciBmb3IgemVy b3RvdWNoIGRhdGEgbW9kZWwuIjsKICAgICAgIGxlYWYgZW5hYmxlZCB7CiAgICAgICAgIHR5cGUg Ym9vbGVhbjsKICAgICAgICAgZGVmYXVsdCBmYWxzZTsKICAgICAgICAgZGVzY3JpcHRpb24KICAg ICAgICAgICAiVGhlICdlbmFibGVkJyBsZWFmIGNvbnRyb2xzIGlmIHplcm90b3VjaCBib290c3Ry YXBwaW5nIGlzCiAgICAgICAgICAgIGVuYWJsZWQgb3IgZGlzYWJsZWQuICBUaGUgZGVmYXVsdCBp cyAnZmFsc2UnIHNvIHRoYXQsIHdoZW4KICAgICAgICAgICAgbm90IGVuYWJsZWQsIHdoaWNoIGlz IG1vc3Qgb2YgdGhlIHRpbWUsIG5vIGNvbmZpZ3VyYXRpb24KICAgICAgICAgICAgaXMgbmVlZGVk LiI7CiAgICAgICB9CiAgICAgICBsZWFmIGlkZXZpZC1jZXJ0aWZpY2F0ZSB7CiAgICAgICAgIGlm LWZlYXR1cmUgYm9vdHN0cmFwLXNlcnZlcnM7CiAgICAgICAgIHR5cGUgY3Q6ZW5kLWVudGl0eS1j ZXJ0LWNtczsKICAgICAgICAgY29uZmlnIGZhbHNlOwogICAgICAgICBkZXNjcmlwdGlvbgogICAg ICAgICAgICJUaGlzIENNUyBzdHJ1Y3R1cmUgY29udGFpbnMgdGhlIElFRUUgODAyLjFBUi0yMDA5 CiAgICAgICAgICAgIElEZXZJRCBjZXJ0aWZpY2F0ZSBpdHNlbGYsIGFuZCBhbGwgaW50ZXJtZWRp YXRlCiAgICAgICAgICAgIGNlcnRpZmljYXRlcyBsZWFkaW5nIHVwIHRvLCBhbmQgb3B0aW9uYWxs eSBpbmNsdWRpbmcsCiAgICAgICAgICAgIHRoZSBtYW51ZmFjdHVyZXIncyB3ZWxsLWtub3duIHRy dXN0IGFuY2hvciBjZXJ0aWZpY2F0ZQogICAgICAgICAgICBmb3IgSURldklEIGNlcnRpZmljYXRl cy4gIFRoZSB3ZWxsLWtub3duIHRydXN0IGFuY2hvcgogICAgICAgICAgICBkb2VzIG5vdCBoYXZl IHRvIGJlIGEgc2VsZi1zaWduZWQgY2VydGlmaWNhdGUuIjsKICAgICAgICAgcmVmZXJlbmNlCiAg ICAgICAgICAgIklFRUUgODAyLjFBUi0yMDA5OgogICAgICAgICAgICAgIElFRUUgU3RhbmRhcmQg Zm9yIExvY2FsIGFuZCBtZXRyb3BvbGl0YW4gYXJlYQogICAgICAgICAgICAgIG5ldHdvcmtzIC0g U2VjdXJlIERldmljZSBJZGVudGl0eS4iOwogICAgICAgfQogICAgICAgY29udGFpbmVyIGJvb3Rz dHJhcC1zZXJ2ZXJzIHsKICAgICAgICAgaWYtZmVhdHVyZSBib290c3RyYXAtc2VydmVyczsKICAg ICAgICAgY29uZmlnIGZhbHNlOwogICAgICAgICBkZXNjcmlwdGlvbgogICAgICAgICAgICJMaXN0 IG9mIGJvb3RzdHJhcCBzZXJ2ZXJzIHRoaXMgZGV2aWNlIHdpbGwgYXR0ZW1wdAogICAgICAgICAg ICB0byByZWFjaCBvdXQgdG8gd2hlbiBib290c3RyYXBwaW5nLiI7CiAgICAgICAgIGxpc3QgYm9v dHN0cmFwLXNlcnZlciB7CiAgICAgICAgICAga2V5ICJhZGRyZXNzIjsKICAgICAgICAgICBkZXNj cmlwdGlvbgogICAgICAgICAgICAgIkEgYm9vdHN0cmFwIHNlcnZlciBlbnRyeS4iOwogICAgICAg ICAgIGxlYWYgYWRkcmVzcyB7CiAgICAgICAgICAgICB0eXBlIGluZXQ6aG9zdDsKICAgICAgICAg ICAgIG1hbmRhdG9yeSB0cnVlOwogICAgICAgICAgICAgZGVzY3JpcHRpb24KICAgICAgICAgICAg ICAgIlRoZSBJUCBhZGRyZXNzIG9yIGhvc3RuYW1lIG9mIHRoZSBib290c3RyYXAgc2VydmVyIHRo ZQoKCgpXYXRzZW4sIGV0IGFsLiAgICAgICAgICBFeHBpcmVzIEZlYnJ1YXJ5IDEwLCAyMDE5ICAg ICAgICAgICAgICBbUGFnZSA2OF0KDApJbnRlcm5ldC1EcmFmdCAgICBTZWN1cmUgWmVybyBUb3Vj aCBQcm92aXNpb25pbmcgKFNaVFApICAgICAgQXVndXN0IDIwMTgKCgogICAgICAgICAgICAgICAg ZGV2aWNlIHNob3VsZCByZWRpcmVjdCB0by4iOwogICAgICAgICAgIH0KICAgICAgICAgICBsZWFm IHBvcnQgewogICAgICAgICAgICAgdHlwZSBpbmV0OnBvcnQtbnVtYmVyOwogICAgICAgICAgICAg ZGVmYXVsdCAiNDQzIjsKICAgICAgICAgICAgIGRlc2NyaXB0aW9uCiAgICAgICAgICAgICAgICJU aGUgcG9ydCBudW1iZXIgdGhlIGJvb3RzdHJhcCBzZXJ2ZXIgbGlzdGVucyBvbi4gIElmIG5vCiAg ICAgICAgICAgICAgICBwb3J0IGlzIHNwZWNpZmllZCwgdGhlIElBTkEtYXNzaWduZWQgcG9ydCBm b3IgJ2h0dHBzJwogICAgICAgICAgICAgICAgKDQ0MykgaXMgdXNlZC4iOwogICAgICAgICAgIH0K ICAgICAgICAgfQogICAgICAgfQogICAgICAgbGVhZiBib290c3RyYXAtc2VydmVyLXBpbm5lZC1j ZXJ0aWZpY2F0ZXMgewogICAgICAgICBpZi1mZWF0dXJlIGJvb3RzdHJhcC1zZXJ2ZXJzOwogICAg ICAgICB0eXBlIHRhOnBpbm5lZC1jZXJ0aWZpY2F0ZXMtcmVmOwogICAgICAgICBjb25maWcgZmFs c2U7CiAgICAgICAgIGRlc2NyaXB0aW9uCiAgICAgICAgICAgIkEgcmVmZXJlbmNlIHRvIGEgbGlz dCBvZiBwaW5uZWQgY2VydGlmaWNhdGUgYXV0aG9yaXR5IChDQSkKICAgICAgICAgICAgY2VydGlm aWNhdGVzIHRoYXQgdGhlIGRldmljZSB1c2VzIHRvIHZhbGlkYXRlIGJvb3RzdHJhcAogICAgICAg ICAgICBzZXJ2ZXJzIHdpdGguIjsKICAgICAgIH0KICAgICAgIGxlYWYgdm91Y2hlci1waW5uZWQt Y2VydGlmaWNhdGVzIHsKICAgICAgICAgaWYtZmVhdHVyZSBzaWduZWQtZGF0YTsKICAgICAgICAg dHlwZSB0YTpwaW5uZWQtY2VydGlmaWNhdGVzLXJlZjsKICAgICAgICAgY29uZmlnIGZhbHNlOwog ICAgICAgICBkZXNjcmlwdGlvbgogICAgICAgICAgICJBIHJlZmVyZW5jZSB0byBhIGxpc3Qgb2Yg cGlubmVkIGNlcnRpZmljYXRlIGF1dGhvcml0eSAoQ0EpCiAgICAgICAgICAgIGNlcnRpZmljYXRl cyB0aGF0IHRoZSBkZXZpY2UgdXNlcyB0byB2YWxpZGF0ZSBvd25lcnNoaXAKICAgICAgICAgICAg dm91Y2hlcnMgd2l0aC4iOwogICAgICAgfQogICAgIH0KICAgfQoKCkFwcGVuZGl4IEIuICBQcm9t b3RpbmcgYSBDb25uZWN0aW9uIGZyb20gVW50cnVzdGVkIHRvIFRydXN0ZWQKCiAgIFRoZSBmb2xs b3dpbmcgZGlhZ3JhbSBpbGx1c3RyYXRlcyBhIHNlcXVlbmNlIG9mIGJvb3RzdHJhcHBpbmcKICAg YWN0aXZpdGllcyB0aGF0IHByb21vdGUgYW4gdW50cnVzdGVkIGNvbm5lY3Rpb24gdG8gYSBib290 c3RyYXAgc2VydmVyCiAgIHRvIGEgdHJ1c3RlZCBjb25uZWN0aW9uIHRvIHRoZSBzYW1lIGJvb3Rz dHJhcCBzZXJ2ZXIuICBUaGlzIGVuYWJsZXMgYQogICBkZXZpY2UgdG8gbGltaXQgdGhlIGFtb3Vu dCBvZiBpbmZvcm1hdGlvbiBpdCBtaWdodCBkaXNjbG9zZSB0byBhbgogICBhZHZlcnNhcnkgaG9z dGluZyBhbiB1bnRydXN0ZWQgYm9vdHN0cmFwIHNlcnZlci4KCgoKCgoKCgoKCldhdHNlbiwgZXQg YWwuICAgICAgICAgIEV4cGlyZXMgRmVicnVhcnkgMTAsIDIwMTkgICAgICAgICAgICAgIFtQYWdl IDY5XQoMCkludGVybmV0LURyYWZ0ICAgIFNlY3VyZSBaZXJvIFRvdWNoIFByb3Zpc2lvbmluZyAo U1pUUCkgICAgICBBdWd1c3QgMjAxOAoKCiAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICstLS0tLS0tLS0tKwogICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICB8RGVwbG95bWVudHwKICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgfCBTcGVj aWZpYyB8CiAgICstLS0tLS0rICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgIHxCb290c3RyYXAgfAogICB8RGV2aWNlfCAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICB8ICBTZXJ2ZXIgIHwKICAgKy0tLS0tLSsgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgKy0tLS0tLS0tLS0rCiAgICAgIHwgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIHwKICAg ICAgfCAxLiAiSFRUUFMiIFJlcXVlc3QgKCJ1bnRydXN0ZWQtY29ubmVjdGlvbiIsIG5vbmNlKSAg ICAgfAogICAgICB8LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLT58CiAgICAgIHwgMi4gIkhUVFBTIiBSZXNwb25zZSAoc2lnbmVkIHJlZGlyZWN0 IGluZm9ybWF0aW9uKSAgICAgIHwKICAgICAgfDwtLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tfAogICAgICB8ICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICB8CiAgICAgIHwgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIHwKICAgICAgfCAzLiBI VFRQUyBSZXF1ZXN0IChvcy1uYW1lPXh5eiwgb3MtdmVyc2lvbj0xMjMsIGV0Yy4pICAgfAogICAg ICB8LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LT58CiAgICAgIHwgNC4gSFRUUFMgUmVzcG9uc2UgKHVuc2lnbmVkIG9uYm9hcmRpbmcgaW5mb3Jt YXRpb24gICAgIHwKICAgICAgfDwtLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tfAogICAgICB8ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICB8CgogICBUaGUgaW50ZXJhY3Rpb25zIGluIHRoZSBh Ym92ZSBkaWFncmFtIGFyZSBkZXNjcmliZWQgYmVsb3cuCgogICAxLiAgVGhlIGRldmljZSBpbml0 aWF0ZXMgYW4gdW50cnVzdGVkIGNvbm5lY3Rpb24gdG8gYSBib290c3RyYXAKICAgICAgIHNlcnZl ciwgYXMgaXMgaW5kaWNhdGVkIGJ5IHB1dHRpbmcgIkhUVFBTIiBpbiBkb3VibGUgcXVvdGVzCiAg ICAgICBhYm92ZS4gIEl0IGlzIHN0aWxsIGFuIEhUVFBTIGNvbm5lY3Rpb24sIGJ1dCB0aGUgZGV2 aWNlIGlzIHVuYWJsZQogICAgICAgdG8gYXV0aGVudGljYXRlIHRoZSBib290c3RyYXAgc2VydmVy J3MgVExTIGNlcnRpZmljYXRlLiAgQmVjYXVzZQogICAgICAgdGhlIGRldmljZSBpcyB1bmFibGUg dG8gdHJ1c3QgdGhlIGJvb3RzdHJhcCBzZXJ2ZXIsIGl0IHNlbmRzIHRoZQogICAgICAgInVudHJ1 c3RlZC1jb25uZWN0aW9uIiBpbnB1dCBwYXJhbWV0ZXIsIGFuZCBvcHRpb25hbGx5IGFsc28gdGhl CiAgICAgICAibm9uY2UiIGlucHV0IHBhcmFtZXRlciwgaW4gdGhlICJnZXQtYm9vdHN0cmFwcGlu Zy1kYXRhIiBSUEMuCiAgICAgICBUaGUgInVudHJ1c3RlZC1jb25uZWN0aW9uIiBwYXJhbWV0ZXIg aW5mb3JtcyB0aGUgYm9vdHN0cmFwIHNlcnZlcgogICAgICAgdGhhdCB0aGUgZGV2aWNlIGRvZXMg bm90IHRydXN0IGl0IGFuZCBtYXkgYmUgaG9sZGluZyBiYWNrIHNvbWUKICAgICAgIGFkZGl0aW9u YWwgaW5wdXQgcGFyYW1ldGVycyBmcm9tIHRoZSBzZXJ2ZXIgKGUuZy4sIG90aGVyIGlucHV0CiAg ICAgICBwYXJhbWV0ZXJzLCBwcm9ncmVzcyByZXBvcnRzLCBldGMuKS4gIFRoZSAibm9uY2UiIGlu cHV0IHBhcmFtZXRlcgogICAgICAgZW5hYmxlcyB0aGUgYm9vdHN0cmFwIHNlcnZlciB0byBkeW5h bWljYWxseSBvYnRhaW4gYW4gb3duZXJzaGlwCiAgICAgICB2b3VjaGVyIGZyb20gYSBNQVNBLCB3 aGljaCBtYXkgYmUgaW1wb3J0YW50IGZvciBkZXZpY2VzIHRoYXQgZG8KICAgICAgIG5vdCBoYXZl IGEgcmVsaWFibGUgY2xvY2suCgogICAyLiAgVGhlIGJvb3RzdHJhcCBzZXJ2ZXIsIHNlZWluZyB0 aGUgInVudHJ1c3RlZC1jb25uZWN0aW9uIiBpbnB1dAogICAgICAgcGFyYW1ldGVyLCBrbm93cyB0 aGF0IGl0IGNhbiBlaXRoZXIgc2VuZCB1bnNpZ25lZCByZWRpcmVjdAogICAgICAgaW5mb3JtYXRp b24gb3Igc2lnbmVkIGRhdGEgb2YgYW55IHR5cGUuICBCdXQsIGluIHRoaXMgY2FzZSwgdGhlCiAg ICAgICBib290c3RyYXAgc2VydmVyIGhhcyB0aGUgYWJpbGl0eSB0byBzaWduIGRhdGEgYW5kIGNo b29zZXMgdG8KICAgICAgIHJlc3BvbmQgd2l0aCBzaWduZWQgcmVkaXJlY3QgaW5mb3JtYXRpb24s IG5vdCBzaWduZWQgb25ib2FyZGluZwogICAgICAgaW5mb3JtYXRpb24gYXMgbWlnaHQgYmUgZXhw ZWN0ZWQsIHNlY3VyZWx5IHJlZGlyZWN0aW5nIHRoZSBkZXZpY2UKICAgICAgIGJhY2sgdG8gaXQg YWdhaW4uICBOb3QgZGlzcGxheWVkIGJ1dCwgaWYgdGhlICJub25jZSIgaW5wdXQKICAgICAgIHBh cmFtZXRlciB3YXMgcGFzc2VkLCB0aGUgYm9vdHN0cmFwIHNlcnZlciBjb3VsZCBkeW5hbWljYWxs eQogICAgICAgY29ubmVjdCB0byBhIGRvd25sb2FkIGEgdm91Y2hlciBmcm9tIHRoZSBNQVNBIGhh dmluZyB0aGUgbm9uY2UKICAgICAgIHZhbHVlIGluIGl0LiAgRGV0YWlscyByZWdhcmRpbmcgYSBw cm90b2NvbCBlbmFibGluZyB0aGlzCiAgICAgICBpbnRlZ3JhdGlvbiBpcyBvdXRzaWRlIHRoZSBz Y29wZSBvZiB0aGlzIGRvY3VtZW50LgoKCgoKV2F0c2VuLCBldCBhbC4gICAgICAgICAgRXhwaXJl cyBGZWJydWFyeSAxMCwgMjAxOSAgICAgICAgICAgICAgW1BhZ2UgNzBdCgwKSW50ZXJuZXQtRHJh ZnQgICAgU2VjdXJlIFplcm8gVG91Y2ggUHJvdmlzaW9uaW5nIChTWlRQKSAgICAgIEF1Z3VzdCAy MDE4CgoKICAgMy4gIFVwb24gdmFsaWRhdGluZyB0aGUgc2lnbmVkIHJlZGlyZWN0IGluZm9ybWF0 aW9uLCB0aGUgZGV2aWNlCiAgICAgICBlc3RhYmxpc2hlcyBhIHNlY3VyZSBjb25uZWN0aW9uIHRv IHRoZSBib290c3RyYXAgc2VydmVyLgogICAgICAgVW5iZWtub3duc3QgdG8gdGhlIGRldmljZSwg aXQgaXMgdGhlIHNhbWUgYm9vdHN0cmFwIHNlcnZlciBpdCB3YXMKICAgICAgIGNvbm5lY3RlZCB0 byBwcmV2aW91c2x5IGJ1dCwgYmVjYXVzZSB0aGUgZGV2aWNlIGlzIGFibGUgdG8KICAgICAgIGF1 dGhlbnRpY2F0ZSB0aGUgYm9vdHN0cmFwIHNlcnZlciB0aXMgdGltZSwgaXQgc2VuZHMgaXRzIG5v cm1hbAogICAgICAgImdldC1ib290c3RyYXBwaW5nLWRhdGEiIHJlcXVlc3QgKGkuZS4sIHdpdGgg YWRkaXRpb25hbCBpbnB1dAogICAgICAgcGFyYW1ldGVycykgYXMgd2VsbCBhcyBpdHMgcHJvZ3Jl c3MgcmVwb3J0cyAobm90IGRlcGljdGVkKS4KCiAgIDQuICBUaGlzIHRpbWUsIGJlY2F1c2UgdGhl ICJ1bnRydXN0ZWQtY29ubmVjdGlvbiIgcGFyYW1ldGVyIHdhcyBub3QKICAgICAgIHBhc3NlZCwg aGF2aW5nIGFjY2VzcyB0byBhbGwgb2YgdGhlIGRldmljZSdzIGlucHV0IHBhcmFtZXRlcnMsCiAg ICAgICB0aGUgYm9vdHN0cmFwIHNlcnZlciByZXR1cm5zIHVuc2lnbmVkIG9uYm9hcmRpbmcgaW5m b3JtYXRpb24gdG8KICAgICAgIHRoZSBkZXZpY2UuCgpBcHBlbmRpeCBDLiAgV29ya2Zsb3cgT3Zl cnZpZXcKCiAgIFRoZSB6ZXJvIHRvdWNoIHNvbHV0aW9uIHByZXNlbnRlZCBpbiB0aGlzIGRvY3Vt ZW50IGlzIGNvbmNlcHR1YWxpemVkCiAgIHRvIGJlIGNvbXBvc2VkIG9mIHRoZSBub24tbm9ybWF0 aXZlIHdvcmtmbG93cyBkZXNjcmliZWQgaW4gdGhpcwogICBzZWN0aW9uLiAgSW1wbGVtZW50YXRp b24gZGV0YWlscyBhcmUgZXhwZWN0ZWQgdG8gdmFyeS4gIEVhY2ggZGlhZ3JhbQogICBpcyBmb2xs b3dlZCBieSBhIGRldGFpbGVkIGRlc2NyaXB0aW9uIG9mIHRoZSBzdGVwcyBwcmVzZW50ZWQgaW4g dGhlCiAgIGRpYWdyYW0sIHdpdGggZnVydGhlciBleHBsYW5hdGlvbiBvbiBob3cgaW1wbGVtZW50 YXRpb25zIG1heSB2YXJ5LgoKQy4xLiAgRW5yb2xsbWVudCBhbmQgT3JkZXJpbmcgRGV2aWNlcwoK ICAgVGhlIGZvbGxvd2luZyBkaWFncmFtIGlsbHVzdHJhdGVzIGtleSBpbnRlcmFjdGlvbnMgdGhh dCBtYXkgb2NjdXIKICAgZnJvbSB3aGVuIGEgcHJvc3BlY3RpdmUgb3duZXIgZW5yb2xscyBpbiBh IG1hbnVmYWN0dXJlcidzIHplcm8gdG91Y2gKICAgcHJvZ3JhbSB0byB3aGVuIHRoZSBtYW51ZmFj dHVyZXIgc2hpcHMgZGV2aWNlcyBmb3IgYW4gb3JkZXIgcGxhY2VkIGJ5CiAgIHRoZSBwcm9zcGVj dGl2ZSBvd25lci4KCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKV2F0c2VuLCBldCBhbC4gICAgICAg ICAgRXhwaXJlcyBGZWJydWFyeSAxMCwgMjAxOSAgICAgICAgICAgICAgW1BhZ2UgNzFdCgwKSW50 ZXJuZXQtRHJhZnQgICAgU2VjdXJlIFplcm8gVG91Y2ggUHJvdmlzaW9uaW5nIChTWlRQKSAgICAg IEF1Z3VzdCAyMDE4CgoKICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICstLS0tLS0t LS0tLSsKICAgKy0tLS0tLS0tLS0tLSsgICAgICAgICAgICAgICAgIHxQcm9zcGVjdGl2ZXwgICAg ICAgICAgICAgICAgICAgICstLS0rCiAgIHxNYW51ZmFjdHVyZXJ8ICAgICAgICAgICAgICAgICB8 ICAgT3duZXIgICB8ICAgICAgICAgICAgICAgICAgICB8Tk1TfAogICArLS0tLS0tLS0tLS0tKyAg ICAgICAgICAgICAgICAgKy0tLS0tLS0tLS0tKyAgICAgICAgICAgICAgICAgICAgKy0tLSsKICAg ICAgICAgfCAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIHwgICAgICAgICAgICAgICAgICAg ICAgICAgICAgfAogICAgICAgICB8ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgfCAgICAg ICAgICAgICAgICAgICAgICAgICAgICB8CiAgICAgICAgIHwgIDEuIGluaXRpYXRlIGVucm9sbG1l bnQgICAgICB8ICAgICAgICAgICAgICAgICAgICAgICAgICAgIHwKICAgICAgICAgIzwtLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLXwgICAgICAgICAgICAgICAgICAgICAgICAgICAgfAogICAg ICAgICAjICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgfCAgICAgICAgICAgICAgICAgICAg ICAgICAgICB8CiAgICAgICAgICMgICAgICAgICAgICAgICAgICAgICAgICAgICAgICB8ICAgICAg ICAgICAgICAgICAgICAgICAgICAgIHwKICAgICAgICAgIyAgICAgSURldklEIHRydXN0IGFuY2hv ciAgICAgIHwgICAgICAgICAgICAgICAgICAgICAgICAgICAgfAogICAgICAgICAjLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0+IyAgc2V0IElEZXZJRCB0cnVzdCBhbmNob3IgICB8CiAgICAg ICAgICMgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAjLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tPnwKICAgICAgICAgIyAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIHwgICAgICAg ICAgICAgICAgICAgICAgICAgICAgfAogICAgICAgICAjICAgICBib290c3RyYXAgc2VydmVyICAg ICAgICAgfCAgICAgICAgICAgICAgICAgICAgICAgICAgICB8CiAgICAgICAgICMgICAgIGFjY291 bnQgY3JlZGVudGlhbHMgICAgICB8ICAgICAgICAgICAgICAgICAgICAgICAgICAgIHwKICAgICAg ICAgIy0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tPiMgIHNldCBjcmVkZW50aWFscyAgICAg ICAgICAgfAogICAgICAgICB8ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIy0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLT58CiAgICAgICAgIHwgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICB8ICAgICAgICAgICAgICAgICAgICAgICAgICAgIHwKICAgICAgICAgfCAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgIHwgICAgICAgICAgICAgICAgICAgICAgICAgICAgfAogICAgICAg ICB8ICAyLiBzZXQgb3duZXIgY2VydGlmaWNhdGUgdHJ1c3QgYW5jaG9yICAgICAgICAgICAgICAg ICAgICB8CiAgICAgICAgIHw8LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLXwKICAgICAgICAgfCAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgIHwgICAgICAgICAgICAgICAgICAgICAgICAgICAgfAogICAgICAgICB8ICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgfCAgICAgICAgICAgICAgICAgICAgICAgICAgICB8CiAgICAgICAg IHwgIDMuIHBsYWNlIGRldmljZSBvcmRlciAgICAgICB8ICAgICAgICAgICAgICAgICAgICAgICAg ICAgIHwKICAgICAgICAgfDwtLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLSMgIG1vZGVsIGRl dmljZXMgICAgICAgICAgICAgfAogICAgICAgICB8ICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgIy0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLT58CiAgICAgICAgIHwgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICB8ICAgICAgICAgICAgICAgICAgICAgICAgICAgIHwKICAgICAgICAg fCAgNC4gc2hpcCBkZXZpY2VzIGFuZCBzZW5kICAgIHwgICAgICAgICAgICAgICAgICAgICAgICAg ICAgfAogICAgICAgICB8ICAgICBkZXZpY2UgaWRlbnRpZmllcnMgYW5kICAgfCAgICAgICAgICAg ICAgICAgICAgICAgICAgICB8CiAgICAgICAgIHwgICAgIG93bmVyc2hpcCB2b3VjaGVycyAgICAg ICB8ICAgICAgICAgICAgICAgICAgICAgICAgICAgIHwKICAgICAgICAgfC0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tPiMgIHNldCBkZXZpY2UgaWRlbnRpZmllcnMgICAgfAogICAgICAgICB8 ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIyAgYW5kIG93bmVyc2hpcCB2b3VjaGVycyAg ICB8CiAgICAgICAgIHwgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAjLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tPnwKICAgICAgICAgfCAgICAgICAgICAgICAgICAgICAgICAgICAgICAg IHwgICAgICAgICAgICAgICAgICAgICAgICAgICAgfAoKICAgRWFjaCBudW1iZXJlZCBpdGVtIGJl bG93IGNvcnJlc3BvbmRzIHRvIGEgbnVtYmVyZWQgaXRlbSBpbiB0aGUKICAgZGlhZ3JhbSBhYm92 ZS4KCiAgIDEuICBBIHByb3NwZWN0aXZlIG93bmVyIG9mIGEgbWFudWZhY3R1cmVyJ3MgZGV2aWNl cyBpbml0aWF0ZXMgYW4KICAgICAgIGVucm9sbG1lbnQgcHJvY2VzcyB3aXRoIHRoZSBtYW51ZmFj dHVyZXIuICBUaGlzIHByb2Nlc3MgaW5jbHVkZXMKICAgICAgIHRoZSBmb2xsb3dpbmc6CgogICAg ICAgKiAgUmVnYXJkbGVzcyBob3cgdGhlIHByb3NwZWN0aXZlIG93bmVyIGludGVuZHMgdG8gYm9v dHN0cmFwCiAgICAgICAgICB0aGVpciBkZXZpY2VzLCB0aGV5IHdpbGwgYWx3YXlzIG9idGFpbiBm cm9tIHRoZSBtYW51ZmFjdHVyZXIKICAgICAgICAgIHRoZSB0cnVzdCBhbmNob3IgY2VydGlmaWNh dGUgZm9yIHRoZSBJRGV2SUQgY2VydGlmaWNhdGVzLgogICAgICAgICAgVGhpcyBjZXJ0aWZpY2F0 ZSB3aWxsIGlzIGluc3RhbGxlZCBvbiB0aGUgcHJvc3BlY3RpdmUgb3duZXIncwoKCgoKV2F0c2Vu LCBldCBhbC4gICAgICAgICAgRXhwaXJlcyBGZWJydWFyeSAxMCwgMjAxOSAgICAgICAgICAgICAg W1BhZ2UgNzJdCgwKSW50ZXJuZXQtRHJhZnQgICAgU2VjdXJlIFplcm8gVG91Y2ggUHJvdmlzaW9u aW5nIChTWlRQKSAgICAgIEF1Z3VzdCAyMDE4CgoKICAgICAgICAgIE5NUyBzbyB0aGF0IHRoZSBO TVMgY2FuIGF1dGhlbnRpY2F0ZSB0aGUgSURldklEIGNlcnRpZmljYXRlcwogICAgICAgICAgd2hl biB0aGV5IGFyZSBwcmVzZW50ZWQgdG8gc3Vic2VxdWVudCBzdGVwcy4KCiAgICAgICAqICBJZiB0 aGUgbWFudWZhY3R1cmVyIGhvc3RzIGFuIEludGVybmV0IGJhc2VkIGJvb3RzdHJhcCBzZXJ2ZXIK ICAgICAgICAgIChlLmcuLCBhIHJlZGlyZWN0IHNlcnZlcikgc3VjaCBhcyBkZXNjcmliZWQgaW4g U2VjdGlvbiA0LjQsCiAgICAgICAgICB0aGVuIGNyZWRlbnRpYWxzIG5lY2Vzc2FyeSB0byBjb25m aWd1cmUgdGhlIGJvb3RzdHJhcCBzZXJ2ZXIKICAgICAgICAgIHdvdWxkIGJlIHByb3ZpZGVkIHRv IHRoZSBwcm9zcGVjdGl2ZSBvd25lci4gIElmIHRoZSBib290c3RyYXAKICAgICAgICAgIHNlcnZl ciBpcyBjb25maWd1cmFibGUgdGhyb3VnaCBhbiBBUEkgKG91dHNpZGUgdGhlIHNjb3BlIG9mCiAg ICAgICAgICB0aGlzIGRvY3VtZW50KSwgdGhlbiB0aGUgY3JlZGVudGlhbHMgbWlnaHQgYmUgaW5z dGFsbGVkIG9uIHRoZQogICAgICAgICAgcHJvc3BlY3RpdmUgb3duZXIncyBOTVMgc28gdGhhdCB0 aGUgTk1TIGNhbiBzdWJzZXF1ZW50bHkKICAgICAgICAgIGNvbmZpZ3VyZSB0aGUgbWFudWZhY3R1 cmVyLWhvc3RlZCBib290c3RyYXAgc2VydmVyIGRpcmVjdGx5LgoKICAgMi4gIElmIHRoZSBtYW51 ZmFjdHVyZXIncyBkZXZpY2VzIGFyZSBhYmxlIHRvIHZhbGlkYXRlIHNpZ25lZCBkYXRhCiAgICAg ICAoU2VjdGlvbiA1LjQpLCBhbmQgYXNzdW1pbmcgdGhhdCB0aGUgcHJvc3BlY3RpdmUgb3duZXIn cyBOTVMgaXMKICAgICAgIGFibGUgdG8gcHJlcGFyZSBhbmQgc2lnbiB0aGUgYm9vdHN0cmFwcGlu ZyBkYXRhIGl0c2VsZiwgdGhlCiAgICAgICBwcm9zcGVjdGl2ZSBvd25lcidzIE5NUyBtaWdodCBz ZXQgYSB0cnVzdCBhbmNob3IgY2VydGlmaWNhdGUgb250bwogICAgICAgdGhlIG1hbnVmYWN0dXJl cidzIGJvb3RzdHJhcCBzZXJ2ZXIsIHVzaW5nIHRoZSBjcmVkZW50aWFscwogICAgICAgcHJvdmlk ZWQgaW4gdGhlIHByZXZpb3VzIHN0ZXAuICBUaGlzIGNlcnRpZmljYXRlIGlzIHRoZSB0cnVzdAog ICAgICAgYW5jaG9yIGNlcnRpZmljYXRlIHRoYXQgdGhlIHByb3NwZWN0aXZlIG93bmVyIHdvdWxk IGxpa2UgdGhlCiAgICAgICBtYW51ZmFjdHVyZXIgdG8gcGxhY2UgaW50byB0aGUgb3duZXJzaGlw IHZvdWNoZXJzIGl0IGdlbmVyYXRlcywKICAgICAgIHRoZXJlYnkgZW5hYmxpbmcgZGV2aWNlcyB0 byB0cnVzdCB0aGUgb3duZXIncyBvd25lciBjZXJ0aWZpY2F0ZS4KICAgICAgIEhvdyB0aGlzIHRy dXN0IGFuY2hvciBjZXJ0aWZpY2F0ZSBpcyB1c2VkIHRvIGVuYWJsZSBkZXZpY2VzIHRvCiAgICAg ICB2YWxpZGF0ZSBzaWduZWQgYm9vdHN0cmFwcGluZyBkYXRhIGlzIGRlc2NyaWJlZCBpbiBTZWN0 aW9uIDUuNC4KCiAgIDMuICBTb21lIHRpbWUgbGF0ZXIsIHRoZSBwcm9zcGVjdGl2ZSBvd25lciBw bGFjZXMgYW4gb3JkZXIgd2l0aCB0aGUKICAgICAgIG1hbnVmYWN0dXJlciwgcGVyaGFwcyB3aXRo IGEgc3BlY2lhbCBmbGFnIGNoZWNrZWQgZm9yIHplcm8gdG91Y2gKICAgICAgIGhhbmRsaW5nLiAg QXQgdGhpcyB0aW1lLCBvciBwZXJoYXBzIGJlZm9yZSBwbGFjaW5nIHRoZSBvcmRlciwgdGhlCiAg ICAgICBvd25lciBtYXkgbW9kZWwgdGhlIGRldmljZXMgaW4gdGhlaXIgTk1TLCBjcmVhdGluZyB2 aXJ0dWFsCiAgICAgICBvYmplY3RzIGZvciB0aGUgZGV2aWNlcyB3aXRoIG5vIHJlYWwtd29ybGQg ZGV2aWNlIGFzc29jaWF0aW9ucy4KICAgICAgIEZvciBpbnN0YW5jZSB0aGUgbW9kZWwgY2FuIGJl IHVzZWQgdG8gc2ltdWxhdGUgdGhlIGRldmljZSdzCiAgICAgICBsb2NhdGlvbiBpbiB0aGUgbmV0 d29yayBhbmQgdGhlIGNvbmZpZ3VyYXRpb24gaXQgc2hvdWxkIGhhdmUgd2hlbgogICAgICAgZnVs bHkgb3BlcmF0aW9uYWwuCgogICA0LiAgV2hlbiB0aGUgbWFudWZhY3R1cmVyIGZ1bGZpbGxzIHRo ZSBvcmRlciwgc2hpcHBpbmcgdGhlIGRldmljZXMgdG8KICAgICAgIHRoZWlyIGludGVuZGVkIGxv Y2F0aW9ucywgdGhleSBtYXkgbm90aWZ5IHRoZSBvd25lciBvZiB0aGUKICAgICAgIGRldmljZXMn IHNlcmlhbCBudW1iZXJzIGFuZCBzaGlwcGluZyBkZXN0aW5hdGlvbnMsIHdoaWNoIHRoZQogICAg ICAgb3duZXIgbWF5IHVzZSB0byBzdGFnZSB0aGUgbmV0d29yayBmb3Igd2hlbiB0aGUgZGV2aWNl cyBwb3dlciBvbi4KICAgICAgIEFkZGl0aW9uYWxseSwgdGhlIG1hbnVmYWN0dXJlciBtYXkgc2Vu ZCBvbmUgb3IgbW9yZSBvd25lcnNoaXAKICAgICAgIHZvdWNoZXJzLCBjcnlwdG9ncmFwaGljYWxs eSBhc3NpZ25pbmcgb3duZXJzaGlwIG9mIHRob3NlIGRldmljZXMKICAgICAgIHRvIHRoZSBvd25l ci4gIFRoZSBvd25lciBtYXkgc2V0IHRoaXMgaW5mb3JtYXRpb24gb24gdGhlaXIgTk1TLAogICAg ICAgcGVyaGFwcyBiaW5kaW5nIHNwZWNpZmljIG1vZGVsZWQgZGV2aWNlcyB0byB0aGUgc2VyaWFs IG51bWJlcnMKICAgICAgIGFuZCBvd25lcnNoaXAgdm91Y2hlcnMuCgpDLjIuICBPd25lciBTdGFn ZXMgdGhlIE5ldHdvcmsgZm9yIEJvb3RzdHJhcAoKICAgVGhlIGZvbGxvd2luZyBkaWFncmFtIGls bHVzdHJhdGVzIGhvdyBhbiBvd25lciBtaWdodCBzdGFnZSB0aGUKICAgbmV0d29yayBmb3IgYm9v dHN0cmFwcGluZyBkZXZpY2VzLgoKCgoKV2F0c2VuLCBldCBhbC4gICAgICAgICAgRXhwaXJlcyBG ZWJydWFyeSAxMCwgMjAxOSAgICAgICAgICAgICAgW1BhZ2UgNzNdCgwKSW50ZXJuZXQtRHJhZnQg ICAgU2VjdXJlIFplcm8gVG91Y2ggUHJvdmlzaW9uaW5nIChTWlRQKSAgICAgIEF1Z3VzdCAyMDE4 CgoKICAgICAgICAgICAgICAgKy0tLS0tLS0tLS0rICstLS0tLS0tLS0tLS0rCiAgICAgICAgICAg ICAgIHxEZXBsb3ltZW50fCB8TWFudWZhY3R1cmVyfCArLS0tLS0tKyArLS0tLS0tKwogICAgICAg ICAgICAgICB8IFNwZWNpZmljIHwgfCAgIEhvc3RlZCAgIHwgfCBMb2NhbHwgfCBMb2NhbHwgKy0t LS0tLS0tLSsKICAgICAgICAgKy0tLSsgfEJvb3RzdHJhcCB8IHwgQm9vdHN0cmFwICB8IHwgIERO UyB8IHwgREhDUCB8IHxSZW1vdmFibGV8CiAgICAgICAgIHxOTVN8IHwgIFNlcnZlciAgfCB8ICAg U2VydmVyICAgfCB8U2VydmVyfCB8U2VydmVyfCB8IFN0b3JhZ2UgfAogICAgICAgICArLS0tKyAr LS0tLS0tLS0tLSsgKy0tLS0tLS0tLS0tLSsgKy0tLS0tLSsgKy0tLS0tLSsgKy0tLS0tLS0tLSsK ICAgICAgICAgICB8ICAgICAgICB8ICAgICAgICAgICAgIHwgICAgICAgICAgICB8ICAgICAgICB8 ICAgICAgICAgfAogICAxLiAgICAgIHwgICAgICAgIHwgICAgICAgICAgICAgfCAgICAgICAgICAg IHwgICAgICAgIHwgICAgICAgICB8CiAgIGFjdGl2YXRlfCAgICAgICAgfCAgICAgICAgICAgICB8 ICAgICAgICAgICAgfCAgICAgICAgfCAgICAgICAgIHwKICAgbW9kZWxlZCB8ICAgICAgICB8ICAg ICAgICAgICAgIHwgICAgICAgICAgICB8ICAgICAgICB8ICAgICAgICAgfAogICBkZXZpY2UgIHwg ICAgICAgIHwgICAgICAgICAgICAgfCAgICAgICAgICAgIHwgICAgICAgIHwgICAgICAgICB8CiAg IC0tLS0tLS0+fCAgICAgICAgfCAgICAgICAgICAgICB8ICAgICAgICAgICAgfCAgICAgICAgfCAg ICAgICAgIHwKICAgICAgICAgICB8IDIuIChvcHRpb25hbCkgICAgICAgIHwgICAgICAgICAgICB8 ICAgICAgICB8ICAgICAgICAgfAogICAgICAgICAgIHwgICAgY29uZmlndXJlICAgICAgICAgfCAg ICAgICAgICAgIHwgICAgICAgIHwgICAgICAgICB8CiAgICAgICAgICAgfCAgICBib290c3RyYXAg ICAgICAgICB8ICAgICAgICAgICAgfCAgICAgICAgfCAgICAgICAgIHwKICAgICAgICAgICB8ICAg IHNlcnZlciAgICAgICAgICAgIHwgICAgICAgICAgICB8ICAgICAgICB8ICAgICAgICAgfAogICAg ICAgICAgIHwtLS0tLS0tPnwgICAgICAgICAgICAgfCAgICAgICAgICAgIHwgICAgICAgIHwgICAg ICAgICB8CiAgICAgICAgICAgfCAgICAgICAgfCAgICAgICAgICAgICB8ICAgICAgICAgICAgfCAg ICAgICAgfCAgICAgICAgIHwKICAgICAgICAgICB8IDMuIChvcHRpb25hbCkgY29uZmlndXJlICAg ICAgICAgICB8ICAgICAgICB8ICAgICAgICAgfAogICAgICAgICAgIHwgICAgYm9vdHN0cmFwIHNl cnZlciAgfCAgICAgICAgICAgIHwgICAgICAgIHwgICAgICAgICB8CiAgICAgICAgICAgfC0tLS0t LS0tLS0tLS0tLS0tLS0tLT58ICAgICAgICAgICAgfCAgICAgICAgfCAgICAgICAgIHwKICAgICAg ICAgICB8ICAgICAgICB8ICAgICAgICAgICAgIHwgICAgICAgICAgICB8ICAgICAgICB8ICAgICAg ICAgfAogICAgICAgICAgIHwgICAgICAgIHwgICAgICAgICAgICAgfCAgICAgICAgICAgIHwgICAg ICAgIHwgICAgICAgICB8CiAgICAgICAgICAgfCA0LiAob3B0aW9uYWwpIGNvbmZpZ3VyZSBETlMg c2VydmVyfCAgICAgICAgfCAgICAgICAgIHwKICAgICAgICAgICB8LS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLT58ICAgICAgICB8ICAgICAgICAgfAogICAgICAgICAgIHwgICAgICAg IHwgICAgICAgICAgICAgfCAgICAgICAgICAgIHwgICAgICAgIHwgICAgICAgICB8CiAgICAgICAg ICAgfCAgICAgICAgfCAgICAgICAgICAgICB8ICAgICAgICAgICAgfCAgICAgICAgfCAgICAgICAg IHwKICAgICAgICAgICB8IDUuIChvcHRpb25hbCkgY29uZmlndXJlIERIQ1Agc2VydmVyICAgICAg ICB8ICAgICAgICAgfAogICAgICAgICAgIHwtLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tPnwgICAgICAgICB8CiAgICAgICAgICAgfCAgICAgICAgfCAgICAgICAgICAg ICB8ICAgICAgICAgICAgfCAgICAgICAgfCAgICAgICAgIHwKICAgICAgICAgICB8ICAgICAgICB8 ICAgICAgICAgICAgIHwgICAgICAgICAgICB8ICAgICAgICB8ICAgICAgICAgfAogICAgICAgICAg IHwgNi4gKG9wdGlvbmFsKSBzdG9yZSBib290c3RyYXBwaW5nIGFydGlmYWN0cyBvbiBtZWRpYSB8 CiAgICAgICAgICAgfC0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tPnwKICAgICAgICAgICB8ICAgICAgICB8ICAgICAgICAgICAgIHwgICAgICAgICAg ICB8ICAgICAgICB8ICAgICAgICAgfAogICAgICAgICAgIHwgICAgICAgIHwgICAgICAgICAgICAg fCAgICAgICAgICAgIHwgICAgICAgIHwgICAgICAgICB8CgogICBFYWNoIG51bWJlcmVkIGl0ZW0g YmVsb3cgY29ycmVzcG9uZHMgdG8gYSBudW1iZXJlZCBpdGVtIGluIHRoZQogICBkaWFncmFtIGFi b3ZlLgoKICAgMS4gIEhhdmluZyBwcmV2aW91c2x5IG1vZGVsZWQgdGhlIGRldmljZXMsIGluY2x1 ZGluZyBzZXR0aW5nIHRoZWlyCiAgICAgICBmdWxseSBvcGVyYXRpb25hbCBjb25maWd1cmF0aW9u cyBhbmQgYXNzb2NpYXRpbmcgZGV2aWNlIHNlcmlhbAogICAgICAgbnVtYmVycyBhbmQgKG9wdGlv bmFsbHkpIG93bmVyc2hpcCB2b3VjaGVycywgdGhlIG93bmVyIG1pZ2h0CiAgICAgICAiYWN0aXZh dGUiIG9uZSBvciBtb3JlIG1vZGVsZWQgZGV2aWNlcy4gIFRoYXQgaXMsIHRoZSBvd25lciB0ZWxs cwogICAgICAgdGhlIE5NUyB0byBwZXJmb3JtIHRoZSBzdGVwcyBuZWNlc3NhcnkgdG8gcHJlcGFy ZSBmb3Igd2hlbiB0aGUKICAgICAgIHJlYWwtd29ybGQgZGV2aWNlcyBwb3dlciB1cCBhbmQgaW5p dGlhdGUgdGhlIGJvb3RzdHJhcHBpbmcKICAgICAgIHByb2Nlc3MuICBOb3RlIHRoYXQsIGluIHNv bWUgZGVwbG95bWVudHMsIHRoaXMgc3RlcCBtaWdodCBiZQogICAgICAgY29tYmluZWQgd2l0aCB0 aGUgbGFzdCBzdGVwIGZyb20gdGhlIHByZXZpb3VzIHdvcmtmbG93LiAgSGVyZSBpdAoKCgoKV2F0 c2VuLCBldCBhbC4gICAgICAgICAgRXhwaXJlcyBGZWJydWFyeSAxMCwgMjAxOSAgICAgICAgICAg ICAgW1BhZ2UgNzRdCgwKSW50ZXJuZXQtRHJhZnQgICAgU2VjdXJlIFplcm8gVG91Y2ggUHJvdmlz aW9uaW5nIChTWlRQKSAgICAgIEF1Z3VzdCAyMDE4CgoKICAgICAgIGlzIGRlcGljdGVkIHRoYXQg YW4gTk1TIHBlcmZvcm1zIHRoZSBzdGVwcywgYnV0IHRoZXkgbWF5IGJlCiAgICAgICBwZXJmb3Jt ZWQgbWFudWFsbHkgb3IgdGhyb3VnaCBzb21lIG90aGVyIG1lY2hhbmlzbS4KCiAgIDIuICBJZiBp dCBpcyBkZXNpcmVkIHRvIHVzZSBhIGRlcGxveW1lbnQgc3BlY2lmaWMgYm9vdHN0cmFwIHNlcnZl ciwKICAgICAgIGl0IG11c3QgYmUgY29uZmlndXJlZCB0byBwcm92aWRlIHRoZSBib290c3RyYXBw aW5nIGluZm9ybWF0aW9uCiAgICAgICBmb3IgdGhlIHNwZWNpZmljIGRldmljZXMuICBDb25maWd1 cmluZyB0aGUgYm9vdHN0cmFwIHNlcnZlciBtYXkKICAgICAgIG9jY3VyIHZpYSBhIHByb2dyYW1t YXRpYyBBUEkgbm90IGRlZmluZWQgYnkgdGhpcyBkb2N1bWVudC4KICAgICAgIElsbHVzdHJhdGVk IGhlcmUgYXMgYW4gZXh0ZXJuYWwgY29tcG9uZW50LCB0aGUgYm9vdHN0cmFwIHNlcnZlcgogICAg ICAgbWF5IGJlIGltcGxlbWVudGVkIGFzIGFuIGludGVybmFsIGNvbXBvbmVudCBvZiB0aGUgTk1T IGl0c2VsZi4KCiAgIDMuICBJZiBpdCBpcyBkZXNpcmVkIHRvIHVzZSBhIG1hbnVmYWN0dXJlciBo b3N0ZWQgYm9vdHN0cmFwIHNlcnZlciwKICAgICAgIGl0IG11c3QgYmUgY29uZmlndXJlZCB0byBw cm92aWRlIHRoZSBib290c3RyYXBwaW5nIGluZm9ybWF0aW9uCiAgICAgICBmb3IgdGhlIHNwZWNp ZmljIGRldmljZXMuICBUaGUgY29uZmlndXJhdGlvbiBtdXN0IGJlIGVpdGhlcgogICAgICAgcmVk aXJlY3Qgb3Igb25ib2FyZGluZyBpbmZvcm1hdGlvbi4gIFRoYXQgaXMsIGVpdGhlciB0aGUKICAg ICAgIG1hbnVmYWN0dXJlciBob3N0ZWQgYm9vdHN0cmFwIHNlcnZlciB3aWxsIHJlZGlyZWN0IHRo ZSBkZXZpY2UgdG8KICAgICAgIGFub3RoZXIgYm9vdHN0cmFwIHNlcnZlciwgb3IgcHJvdmlkZSB0 aGUgZGV2aWNlIHdpdGggdGhlCiAgICAgICBvbmJvYXJkaW5nIGluZm9ybWF0aW9uIGl0c2VsZi4g IFRoZSB0eXBlcyBvZiBib290c3RyYXBwaW5nCiAgICAgICBpbmZvcm1hdGlvbiB0aGUgbWFudWZh Y3R1cmVyIGhvc3RlZCBib290c3RyYXAgc2VydmVyIHN1cHBvcnRzIG1heQogICAgICAgdmFyeSBi eSBpbXBsZW1lbnRhdGlvbjsgc29tZSBpbXBsZW1lbnRhdGlvbnMgbWF5IG9ubHkgc3VwcG9ydAog ICAgICAgcmVkaXJlY3QgaW5mb3JtYXRpb24sIG9yIG9ubHkgc3VwcG9ydCBvbmJvYXJkaW5nIGlu Zm9ybWF0aW9uLCBvcgogICAgICAgc3VwcG9ydCBib3RoIHJlZGlyZWN0IGFuZCBvbmJvYXJkaW5n IGluZm9ybWF0aW9uLiAgQ29uZmlndXJpbmcKICAgICAgIHRoZSBib290c3RyYXAgc2VydmVyIG1h eSBvY2N1ciB2aWEgYSBwcm9ncmFtbWF0aWMgQVBJIG5vdCBkZWZpbmVkCiAgICAgICBieSB0aGlz IGRvY3VtZW50LgoKICAgNC4gIElmIGl0IGlzIGRlc2lyZWQgdG8gdXNlIGEgRE5TIHNlcnZlciB0 byBzdXBwbHkgYm9vdHN0cmFwcGluZwogICAgICAgaW5mb3JtYXRpb24sIGEgRE5TIHNlcnZlciBu ZWVkcyB0byBiZSBjb25maWd1cmVkLiAgSWYgbXVsdGljYXN0CiAgICAgICBETlMtU0QgaXMgZGVz aXJlZCwgdGhlbiB0aGUgc2VydmVyIG11c3QgcmVzaWRlIG9uIHRoZSBsb2NhbAogICAgICAgbmV0 d29yaywgb3RoZXJ3aXNlIHRoZSBETlMgc2VydmVyIG1heSByZXNpZGUgb24gYSByZW1vdGUgbmV0 d29yay4KICAgICAgIFBsZWFzZSBzZWUgU2VjdGlvbiA0LjIgZm9yIG1vcmUgaW5mb3JtYXRpb24g YWJvdXQgaG93IHRvCiAgICAgICBjb25maWd1cmUgRE5TIHNlcnZlcnMuICBDb25maWd1cmluZyB0 aGUgRE5TIHNlcnZlciBtYXkgb2NjdXIgdmlhCiAgICAgICBhIHByb2dyYW1tYXRpYyBBUEkgbm90 IGRlZmluZWQgYnkgdGhpcyBkb2N1bWVudC4KCiAgIDUuICBJZiBpdCBpcyBkZXNpcmVkIHRvIHVz ZSBhIERIQ1Agc2VydmVyIHRvIHN1cHBseSBib290c3RyYXBwaW5nCiAgICAgICBkYXRhLCBhIERI Q1Agc2VydmVyIG5lZWRzIHRvIGJlIGNvbmZpZ3VyZWQuICBUaGUgREhDUCBzZXJ2ZXIgbWF5CiAg ICAgICBiZSBhY2Nlc3NlZCBkaXJlY3RseSBvciB2aWEgYSBESENQIHJlbGF5LiAgUGxlYXNlIHNl ZSBTZWN0aW9uIDQuMwogICAgICAgZm9yIG1vcmUgaW5mb3JtYXRpb24gYWJvdXQgaG93IHRvIGNv bmZpZ3VyZSBESENQIHNlcnZlcnMuCiAgICAgICBDb25maWd1cmluZyB0aGUgREhDUCBzZXJ2ZXIg bWF5IG9jY3VyIHZpYSBhIHByb2dyYW1tYXRpYyBBUEkgbm90CiAgICAgICBkZWZpbmVkIGJ5IHRo aXMgZG9jdW1lbnQuCgogICA2LiAgSWYgaXQgaXMgZGVzaXJlZCB0byB1c2UgYSByZW1vdmFibGUg c3RvcmFnZSBkZXZpY2UgKGUuZy4sIFVTQgogICAgICAgZmxhc2ggZHJpdmUpIHRvIHN1cHBseSBi b290c3RyYXBwaW5nIGluZm9ybWF0aW9uLCB0aGUgaW5mb3JtYXRpb24KICAgICAgIHdvdWxkIG5l ZWQgdG8gYmUgcGxhY2VkIG9udG8gaXQuICBQbGVhc2Ugc2VlIFNlY3Rpb24gNC4xIGZvciBtb3Jl CiAgICAgICBpbmZvcm1hdGlvbiBhYm91dCBob3cgdG8gY29uZmlndXJlIGEgcmVtb3ZhYmxlIHN0 b3JhZ2UgZGV2aWNlLgoKCgoKCgoKCldhdHNlbiwgZXQgYWwuICAgICAgICAgIEV4cGlyZXMgRmVi cnVhcnkgMTAsIDIwMTkgICAgICAgICAgICAgIFtQYWdlIDc1XQoMCkludGVybmV0LURyYWZ0ICAg IFNlY3VyZSBaZXJvIFRvdWNoIFByb3Zpc2lvbmluZyAoU1pUUCkgICAgICBBdWd1c3QgMjAxOAoK CkMuMy4gIERldmljZSBQb3dlcnMgT24KCiAgIFRoZSBmb2xsb3dpbmcgZGlhZ3JhbSBpbGx1c3Ry YXRlcyB0aGUgc2VxdWVuY2Ugb2YgYWN0aXZpdGllcyB0aGF0CiAgIG9jY3VyIHdoZW4gYSBkZXZp Y2UgcG93ZXJzIG9uLgoKICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICArLS0tLS0tLS0tLSsKICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICArLS0tLS0tLS0tLS0rICB8RGVwbG95bWVudHwKICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICB8IFNvdXJjZSBvZiB8ICB8IFNwZWNpZmljIHwKICAgKy0tLS0tLSsgICAg ICAgICAgICAgICAgICAgICAgICAgICB8IEJvb3RzdHJhcCB8ICB8Qm9vdHN0cmFwIHwgICstLS0r CiAgIHxEZXZpY2V8ICAgICAgICAgICAgICAgICAgICAgICAgICAgfCAgIERhdGEgICAgfCAgfCAg U2VydmVyICB8ICB8Tk1TfAogICArLS0tLS0tKyAgICAgICAgICAgICAgICAgICAgICAgICAgICst LS0tLS0tLS0tLSsgICstLS0tLS0tLS0tKyAgKy0tLSsKICAgICAgfCAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICB8ICAgICAgICAgICAgICB8ICAgICAgICAgfAogICAgICB8ICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIHwgICAgICAgICAgICAgIHwgICAgICAg ICB8CiAgICAgIHwgMS4gaWYgemVyb3RvdWNoIGJvb3RzdHJhcCBzZXJ2aWNlICAgfCAgICAgICAg ICAgICAgfCAgICAgICAgIHwKICAgICAgfCAgICBpcyBub3QgZW5hYmxlZCwgdGhlbiBleGl0LiAg ICAgICB8ICAgICAgICAgICAgICB8ICAgICAgICAgfAogICAgICB8ICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgIHwgICAgICAgICAgICAgIHwgICAgICAgICB8CiAgICAgIHwgMi4g Zm9yIGVhY2ggc291cmNlIHN1cHBvcnRlZCwgY2hlY2sgfCAgICAgICAgICAgICAgfCAgICAgICAg IHwKICAgICAgfCAgICBmb3IgYm9vdHN0cmFwcGluZyBkYXRhLiAgICAgICAgICB8ICAgICAgICAg ICAgICB8ICAgICAgICAgfAogICAgICB8LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tPnwgICAgICAgICAgICAgIHwgICAgICAgICB8CiAgICAgIHwgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgfCAgICAgICAgICAgICAgfCAgICAgICAgIHwKICAgICAgfCAzLiBp ZiBvbmJvYXJkaW5nIGluZm9ybWF0aW9uIGZvdW5kLCB8ICAgICAgICAgICAgICB8ICAgICAgICAg fAogICAgICB8ICAgIGluaXRpYWxpemUgc2VsZiBhbmQsIG9ubHkgaWYgICAgIHwgICAgICAgICAg ICAgIHwgICAgICAgICB8CiAgICAgIHwgICAgc291cmNlIGlzIGEgYm9vdHN0cmFwIHNlcnZlciwg ICAgfCAgICAgICAgICAgICAgfCAgICAgICAgIHwKICAgICAgfCAgICBzZW5kIHByb2dyZXNzIHVw ZGF0ZXMuICAgICAgICAgICB8ICAgICAgICAgICAgICB8ICAgICAgICAgfAogICAgICB8LS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tPiMgICAgICAgICAgICAgIHwgICAgICAgICB8 CiAgICAgIHwgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIyB3ZWJob29rICAg ICAgfCAgICAgICAgIHwKICAgICAgfCAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAjLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0+fAogICAgICB8ICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIHwgICAgICAgICB8CiAgICAgIHwgNC4gZWxz ZSBpZiByZWRpcmVjdC1pbmZvcm1hdGlvbiBmb3VuZCwgZm9yIGVhY2ggICAgfCAgICAgICAgIHwK ICAgICAgfCAgICBib290c3RyYXAgc2VydmVyIHNwZWNpZmllZCwgY2hlY2sgZm9yIGRhdGEuICAg ICB8ICAgICAgICAgfAogICAgICB8LSstLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tPnwgICAgICAgICB8CiAgICAgIHwgfCAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgfCAgICAgICAgIHwKICAgICAgfCB8IGlmIG1v cmUgcmVkaXJlY3QtaW5mb3JtYXRpb24gaXMgZm91bmQsIHJlY3Vyc2UgICB8ICAgICAgICAgfAog ICAgICB8IHwgKG5vdCBkZXBpY3RlZCksIGVsc2UgaWYgb25ib2FyZGluZy1pbmZvcm1hdGlvbiAg IHwgICAgICAgICB8CiAgICAgIHwgfCBmb3VuZCwgaW5pdGlhbGl6ZSBzZWxmIGFuZCBwb3N0IHBy b2dyZXNzIHJlcG9ydHMgfCAgICAgICAgIHwKICAgICAgfCArLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLT4jICAgICAgICAgfAogICAgICB8ICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICMgd2ViaG9vayB8CiAg ICAgIHwgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg Iy0tLS0tLS0tPnwKICAgICAgfAogICAgICB8IDUuIHJldHJ5IHNvdXJjZXMgYW5kL29yIHdhaXQg Zm9yIG1hbnVhbCBwcm92aXNpb25pbmcuCiAgICAgIHwKCiAgIFRoZSBpbnRlcmFjdGlvbnMgaW4g dGhlIGFib3ZlIGRpYWdyYW0gYXJlIGRlc2NyaWJlZCBiZWxvdy4KCiAgIDEuICBVcG9uIHBvd2Vy IGJlaW5nIGFwcGxpZWQsIHRoZSBkZXZpY2UgY2hlY2tzIHRvIHNlZSBpZiB6ZXJvdG91Y2gKICAg ICAgIGJvb3RzdHJhcHBpbmcgaXMgY29uZmlndXJlZCwgc3VjaCBhcyBtdXN0IGJlIHRoZSBjYXNl IHdoZW4KICAgICAgIHJ1bm5pbmcgaXRzICJmYWN0b3J5IGRlZmF1bHQiIGNvbmZpZ3VyYXRpb24u ICBJZiB6ZXJvdG91Y2gKCgoKCldhdHNlbiwgZXQgYWwuICAgICAgICAgIEV4cGlyZXMgRmVicnVh cnkgMTAsIDIwMTkgICAgICAgICAgICAgIFtQYWdlIDc2XQoMCkludGVybmV0LURyYWZ0ICAgIFNl Y3VyZSBaZXJvIFRvdWNoIFByb3Zpc2lvbmluZyAoU1pUUCkgICAgICBBdWd1c3QgMjAxOAoKCiAg ICAgICBib290c3RyYXBwaW5nIGlzIG5vdCBjb25maWd1cmVkLCB0aGVuIHRoZSBib290c3RyYXBw aW5nIGxvZ2ljCiAgICAgICBleGl0cyBhbmQgbm9uZSBvZiB0aGUgZm9sbG93aW5nIGludGVyYWN0 aW9ucyBvY2N1ci4KCiAgIDIuICBGb3IgZWFjaCBzb3VyY2Ugb2YgYm9vdHN0cmFwcGluZyBkYXRh IHRoZSBkZXZpY2Ugc3VwcG9ydHMsCiAgICAgICBwcmVmZXJhYmx5IGluIG9yZGVyIG9mIGNsb3Nl bmVzcyB0byB0aGUgZGV2aWNlIChlLmcuLCByZW1vdmFibGUKICAgICAgIHN0b3JhZ2UgYmVmb3Jl IEludGVybmV0IGJhc2VkIHNlcnZlcnMpLCB0aGUgZGV2aWNlIGNoZWNrcyB0byBzZWUKICAgICAg IGlmIHRoZXJlIGlzIGFueSBib290c3RyYXBwaW5nIGRhdGEgZm9yIGl0IHRoZXJlLgoKICAgMy4g IElmIG9uYm9hcmRpbmcgaW5mb3JtYXRpb24gaXMgZm91bmQsIHRoZSBkZXZpY2UgaW5pdGlhbGl6 ZXMgaXRzZWxmCiAgICAgICBhY2NvcmRpbmdseSAoZS5nLiwgaW5zdGFsbGluZyBhIGJvb3QtaW1h Z2UgYW5kIGNvbW1pdHRpbmcgYW4KICAgICAgIGluaXRpYWwgY29uZmlndXJhdGlvbikuICBJZiB0 aGUgc291cmNlIGlzIGEgYm9vdHN0cmFwIHNlcnZlciwgYW5kCiAgICAgICB0aGUgYm9vdHN0cmFw IHNlcnZlciBjYW4gYmUgdHJ1c3RlZCAoaS5lLiwgVExTLWxldmVsCiAgICAgICBhdXRoZW50aWNh dGlvbiksIHRoZSBkZXZpY2UgYWxzbyBzZW5kcyBwcm9ncmVzcyByZXBvcnRzIHRvIHRoZQogICAg ICAgYm9vdHN0cmFwIHNlcnZlci4KCiAgICAgICAqICBUaGUgY29udGVudHMgb2YgdGhlIGluaXRp YWwgY29uZmlndXJhdGlvbiBzaG91bGQgY29uZmlndXJlIGFuCiAgICAgICAgICBhZG1pbmlzdHJh dG9yIGFjY291bnQgb24gdGhlIGRldmljZSAoZS5nLiwgdXNlcm5hbWUsIHNzaC1yc2EKICAgICAg ICAgIGtleSwgZXRjLiksIGFuZCBzaG91bGQgY29uZmlndXJlIHRoZSBkZXZpY2UgZWl0aGVyIHRv IGxpc3RlbgogICAgICAgICAgZm9yIE5FVENPTkYgb3IgUkVTVENPTkYgY29ubmVjdGlvbnMgb3Ig dG8gaW5pdGlhdGUgY2FsbCBob21lCiAgICAgICAgICBjb25uZWN0aW9ucyBbUkZDODA3MV0sIGFu ZCBzaG91bGQgZGlzYWJsZSB0aGUgemVyb3RvdWNoCiAgICAgICAgICBib290c3RyYXBwaW5nIHNl cnZpY2UgKGUuZy4sIHRoZSAiZW5hYmxlZCIgbGVhZiBpbiBkYXRhIG1vZGVsCiAgICAgICAgICBw cmVzZW50ZWQgaW4gQXBwZW5kaXggQSkuCgogICAgICAgKiAgSWYgdGhlIGJvb3RzdHJhcCBzZXJ2 ZXIgc3VwcG9ydHMgZm9yd2FyZGluZyBkZXZpY2UgcHJvZ3Jlc3MKICAgICAgICAgIHJlcG9ydHMg dG8gZXh0ZXJuYWwgc3lzdGVtcyAoZS5nLiwgdmlhIGEgd2ViaG9vayksIGEKICAgICAgICAgICJi b290c3RyYXAtY29tcGxldGUiIHByb2dyZXNzIHJlcG9ydCAoU2VjdGlvbiA3LjMpIGluZm9ybXMg dGhlCiAgICAgICAgICBleHRlcm5hbCBzeXN0ZW0gdG8ga25vdyB3aGVuIGl0IGNhbiwgZm9yIGlu c3RhbmNlLCBpbml0aWF0ZSBhCiAgICAgICAgICBjb25uZWN0aW9uIHRvIHRoZSBkZXZpY2UuICBU byBzdXBwb3J0IHRoaXMgc2NlbmFyaW8gZnVydGhlciwKICAgICAgICAgIHRoZSAiYm9vdHN0cmFw LWNvbXBsZXRlIiBwcm9ncmVzcyByZXBvcnQgbWF5IGFsc28gcmVsYXkgdGhlCiAgICAgICAgICBk ZXZpY2UncyBTU0ggaG9zdCBrZXlzIGFuZC9vciBUTFMgY2VydGlmaWNhdGVzLCB3aXRoIHdoaWNo IHRoZQogICAgICAgICAgZXh0ZXJuYWwgc3lzdGVtIGNhbiB1c2UgdG8gYXV0aGVudGljYXRlIHN1 YnNlcXVlbnQgY29ubmVjdGlvbnMKICAgICAgICAgIHRvIHRoZSBkZXZpY2UuCgogICAgICAgSWYg dGhlIGRldmljZSBzdWNjZXNzZnVsbHkgY29tcGxldGVzIHRoZSBib290c3RyYXBwaW5nIHByb2Nl c3MsCiAgICAgICBpdCBleGl0cyB0aGUgYm9vdHN0cmFwcGluZyBsb2dpYyB3aXRob3V0IGNvbnNp ZGVyaW5nIGFueQogICAgICAgYWRkaXRpb25hbCBzb3VyY2VzIG9mIGJvb3RzdHJhcHBpbmcgZGF0 YS4KCiAgIDQuICBPdGhlcndpc2UsIGlmIHJlZGlyZWN0IGluZm9ybWF0aW9uIGlzIGZvdW5kLCB0 aGUgZGV2aWNlIGl0ZXJhdGVzCiAgICAgICB0aHJvdWdoIHRoZSBsaXN0IG9mIHNwZWNpZmllZCBi b290c3RyYXAgc2VydmVycywgY2hlY2tpbmcgdG8gc2VlCiAgICAgICBpZiBpdCBoYXMgYm9vdHN0 cmFwcGluZyBkYXRhIGZvciB0aGUgZGV2aWNlLiAgSWYgdGhlIGJvb3RzdHJhcAogICAgICAgc2Vy dmVyIHJldHVybnMgbW9yZSByZWRpcmVjdCBpbmZvcm1hdGlvbiwgdGhlbiB0aGUgZGV2aWNlCiAg ICAgICBwcm9jZXNzZXMgaXQgcmVjdXJzaXZlbHkuICBPdGhlcndpc2UsIGlmIHRoZSBib290c3Ry YXAgc2VydmVyCiAgICAgICByZXR1cm5zIG9uYm9hcmRpbmcgaW5mb3JtYXRpb24sIHRoZSBkZXZp Y2UgcHJvY2Vzc2VzIGl0IGZvbGxvd2luZwogICAgICAgdGhlIGRlc2NyaXB0aW9uIHByb3ZpZGVk IGluICgzKSBhYm92ZS4KCiAgIDUuICBBZnRlciBoYXZpbmcgdHJpZWQgYWxsIHN1cHBvcnRlZCBz b3VyY2VzIG9mIGJvb3RzdHJhcHBpbmcgZGF0YSwKICAgICAgIHRoZSBkZXZpY2UgbWF5IHJldHJ5 IGFnYWluIGFsbCB0aGUgc291cmNlcyBhbmQvb3IgcHJvdmlkZQogICAgICAgbWFuYWdlYWJpbGl0 eSBpbnRlcmZhY2VzIGZvciBtYW51YWwgY29uZmlndXJhdGlvbiAoZS5nLiwgQ0xJLAoKCgpXYXRz ZW4sIGV0IGFsLiAgICAgICAgICBFeHBpcmVzIEZlYnJ1YXJ5IDEwLCAyMDE5ICAgICAgICAgICAg ICBbUGFnZSA3N10KDApJbnRlcm5ldC1EcmFmdCAgICBTZWN1cmUgWmVybyBUb3VjaCBQcm92aXNp b25pbmcgKFNaVFApICAgICAgQXVndXN0IDIwMTgKCgogICAgICAgSFRUUCwgTkVUQ09ORiwgZXRj LikuICBJZiBtYW51YWwgY29uZmlndXJhdGlvbiBpcyBhbGxvd2VkLCBhbmQKICAgICAgIHN1Y2gg Y29uZmlndXJhdGlvbiBpcyBwcm92aWRlZCwgdGhlIGNvbmZpZ3VyYXRpb24gc2hvdWxkIGFsc28K ICAgICAgIGRpc2FibGUgdGhlIHplcm90b3VjaCBib290c3RyYXBwaW5nIHNlcnZpY2UsIGFzIHRo ZSBuZWVkIGZvcgogICAgICAgYm9vdHN0cmFwcGluZyB3b3VsZCBubyBsb25nZXIgYmUgcHJlc2Vu dC4KCkFwcGVuZGl4IEQuICBDaGFuZ2UgTG9nCgpELjEuICBJRCB0byAwMAoKICAgbyAgTWFqb3Ig c3RydWN0dXJhbCB1cGRhdGU7IHRoZSBlc3NlbmNlIGlzIHRoZSBzYW1lLiAgTW9zdCBldmVyeQog ICAgICBzZWN0aW9uIHdhcyByZXdyaXR0ZW4gdG8gc29tZSBkZWdyZWUuCgogICBvICBBZGRlZCBh IFVzZSBDYXNlcyBzZWN0aW9uCgogICBvICBBZGRlZCBkaWFncmFtcyBmb3IgIkFjdG9ycyBhbmQg Um9sZXMiIGFuZCAiTk1TIFByZWNvbmRpdGlvbiIKICAgICAgc2VjdGlvbnMsIGFuZCBncmVhdGx5 IGltcHJvdmVkIHRoZSAiRGV2aWNlIEJvb3QgU2VxdWVuY2UiIGRpYWdyYW0KCiAgIG8gIFJlbW92 ZWQgc3VwcG9ydCBmb3IgcGh5c2ljYWwgcHJlc2VuY2Ugb3IgYW55IGFiaWxpdHkgZm9yCiAgICAg IGNvbmZpZ2xldHMgdG8gbm90IGJlIHNpZ25lZC4KCiAgIG8gIERlZmluZWQgdGhlIFplcm8gVG91 Y2ggSW5mb3JtYXRpb24gREhDUCBvcHRpb24KCiAgIG8gIEFkZGVkIGFuIGFiaWxpdHkgZm9yIGRl dmljZXMgdG8gYWxzbyBkb3dubG9hZCBpbWFnZXMgZnJvbQogICAgICBjb25maWd1cmF0aW9uIHNl cnZlcnMKCiAgIG8gIEFkZGVkIGFuIGFiaWxpdHkgZm9yIGNvbmZpZ2xldHMgdG8gYmUgZW5jcnlw dGVkCgogICBvICBOb3cgY29uZmlndXJhdGlvbiBzZXJ2ZXJzIG9ubHkgaGF2ZSB0byBzdXBwb3J0 IEhUVFAvUyAtIG5vIG90aGVyCiAgICAgIHNjaGVtZXMgcG9zc2libGUKCkQuMi4gIDAwIHRvIDAx CgogICBvICBBZGRlZCBib290LWltYWdlIGFuZCB2YWxpZGF0ZS1vd25lciBhbm5vdGF0aW9ucyB0 byB0aGUgIkFjdG9ycyBhbmQKICAgICAgUm9sZXMiIGRpYWdyYW0uCgogICBvICBGaXhlZCAybmQg cGFyYWdyYXBoIGluIHNlY3Rpb24gNy4xIHRvIHJlZmxlY3QgY3VycmVudCB1c2Ugb2YKICAgICAg YW55eG1sLgoKICAgbyAgQWRkZWQgZW5jcnlwdGVkIGFuZCBzaWduZWQtZW5jcnlwdGVkIGV4YW1w bGVzCgogICBvICBSZXBsYWNlZCBZQU5HIG1vZHVsZSB3aXRoIFhTRCBzY2hlbWEKCiAgIG8gIEFk ZGVkIElBTkEgcmVxdWVzdCBmb3IgdGhlIFplcm8gVG91Y2ggSW5mb3JtYXRpb24gREhDUCBPcHRp b24KCiAgIG8gIEFkZGVkIElBTkEgcmVxdWVzdCBmb3IgbWVkaWEgdHlwZXMgZm9yIGJvb3QtaW1h Z2UgYW5kCiAgICAgIGNvbmZpZ3VyYXRpb24KCgoKCgpXYXRzZW4sIGV0IGFsLiAgICAgICAgICBF eHBpcmVzIEZlYnJ1YXJ5IDEwLCAyMDE5ICAgICAgICAgICAgICBbUGFnZSA3OF0KDApJbnRlcm5l dC1EcmFmdCAgICBTZWN1cmUgWmVybyBUb3VjaCBQcm92aXNpb25pbmcgKFNaVFApICAgICAgQXVn dXN0IDIwMTgKCgpELjMuICAwMSB0byAwMgoKICAgbyAgUmVwbGFjZWQgdGhlIG5lZWQgZm9yIGEg Y29uZmlndXJhdGlvbiBzaWduZXIgd2l0aCB0aGUgYWJpbGl0eSBmb3IKICAgICAgZWFjaCBOTVMg dG8gYmUgYWJsZSB0byBzaWduIGl0cyBvd24gY29uZmlndXJhdGlvbnMsIHVzaW5nCiAgICAgIG1h bnVmYWN0dXJlciBzaWduZWQgb3duZXJzaGlwIHZvdWNoZXJzIGFuZCBvd25lciBjZXJ0aWZpY2F0 ZXMuCgogICBvICBSZW5hbWVkIGNvbmZpZ3VyYXRpb24gc2VydmVyIHRvIGJvb3RzdHJhcCBzZXJ2 ZXIsIGEgbW9yZQogICAgICByZXByZXNlbnRhdGl2ZSBuYW1lIGdpdmVuIHRoZSBpbmZvcm1hdGlv biBkZXZpY2VzIGRvd25sb2FkIGZyb20KICAgICAgaXQuCgogICBvICBSZXBsYWNlZCB0aGUgY29u Y2VwdCBvZiBhIGNvbmZpZ2xldCBieSBkZWZpbmluZyBhIHNvdXRoYm91bmQKICAgICAgaW50ZXJm YWNlIGZvciB0aGUgYm9vdHN0cmFwIHNlcnZlciB1c2luZyBZQU5HLgoKICAgbyAgUmVtb3ZlZCB0 aGUgSUFOQSByZXF1ZXN0IGZvciB0aGUgYm9vdC1pbWFnZSBhbmQgY29uZmlndXJhdGlvbgogICAg ICBtZWRpYSB0eXBlcwoKRC40LiAgMDIgdG8gMDMKCiAgIG8gIE1pbm9yIHVwZGF0ZSwgbW9zdGx5 IGp1c3QgdG8gYWRkIGFuIEVkaXRvcidzIE5vdGUgdG8gc2hvdyBob3cgdGhpcwogICAgICBkcmFm dCBtaWdodCBpbnRlZ3JhdGUgd2l0aCB0aGUgZHJhZnQtcHJpdGlraW4tYW5pbWEtYm9vdHN0cmFw cGluZy0KICAgICAga2V5aW5mcmEuCgpELjUuICAwMyB0byAwNAoKICAgbyAgTWFqb3IgdXBkYXRl IGZvcm1hbGx5IGludHJvZHVjaW5nIHVuc2lnbmVkIGRhdGEgYW5kIHN1cHBvcnQgZm9yCiAgICAg IEludGVybmV0LWJhc2VkIHJlZGlyZWN0IHNlcnZlcnMuCgogICBvICBBZGRlZCBtYW55IHRlcm1z IHRvIFRlcm1pbm9sb2d5IHNlY3Rpb24uCgogICBvICBBZGRlZCBhbGwgbmV3ICJHdWlkaW5nIFBy aW5jaXBsZXMiIHNlY3Rpb24uCgogICBvICBBZGRlZCBhbGwgbmV3ICJTb3VyY2VzIGZvciBCb290 c3RyYXBwaW5nIERhdGEiIHNlY3Rpb24uCgogICBvICBSZXdyb3RlIHRoZSAiSW50ZXJhY3Rpb25z IiBzZWN0aW9uIGFuZCByZW5hbWVkIGl0ICJXb3JrZmxvdwogICAgICBPdmVydmlldyIuCgpELjYu ICAwNCB0byAwNQoKICAgbyAgU2VtaS1tYWpvciB1cGRhdGUsIHJlZmFjdG9yaW5nIHRoZSBkb2N1 bWVudCBpbnRvIG1vcmUgbG9naWNhbAogICAgICBwYXJ0cwoKICAgbyAgQ3JlYXRlZCBuZXcgc2Vj dGlvbiBmb3IgaW5mb3JtYXRpb24gdHlwZXMKCiAgIG8gIEFkZGVkIHN1cHBvcnQgZm9yIEROUyBz ZXJ2ZXJzCgogICBvICBOb3cgYWxsb3dzIHByb3Zpc2lvbmFsIFRMUyBjb25uZWN0aW9ucwoKICAg byAgQm9vdHN0cmFwcGluZyBkYXRhIG5vdyBzdXBwb3J0cyBzY3JpcHRzCgoKCldhdHNlbiwgZXQg YWwuICAgICAgICAgIEV4cGlyZXMgRmVicnVhcnkgMTAsIDIwMTkgICAgICAgICAgICAgIFtQYWdl IDc5XQoMCkludGVybmV0LURyYWZ0ICAgIFNlY3VyZSBaZXJvIFRvdWNoIFByb3Zpc2lvbmluZyAo U1pUUCkgICAgICBBdWd1c3QgMjAxOAoKCiAgIG8gIERldmljZSBEZXRhaWxzIHNlY3Rpb24gb3Zl cmhhdWxlZAoKICAgbyAgU2VjdXJpdHkgQ29uc2lkZXJhdGlvbnMgZXhwYW5kZWQKCiAgIG8gIEZp bGxlZCBpbiBlbnVtZXJhdGlvbnMgZm9yIG5vdGlmaWNhdGlvbiB0eXBlcwoKRC43LiAgMDUgdG8g MDYKCiAgIG8gIE1pbm9yIHVwZGF0ZQoKICAgbyAgQWRkZWQgbWFueSBOb3JtYXRpdmUgYW5kIElu Zm9ybWF0aXZlIHJlZmVyZW5jZXMuCgogICBvICBBZGRlZCBuZXcgc2VjdGlvbiBPdGhlciBDb25z aWRlcmF0aW9ucy4KCkQuOC4gIDA2IHRvIDA3CgogICBvICBNaW5vciB1cGRhdGUKCiAgIG8gIEFk ZGVkIGFuIEVkaXRvcmlhbCBOb3RlIHNlY3Rpb24gZm9yIFJGQyBFZGl0b3IuCgogICBvICBVcGRh dGVkIHRoZSBJQU5BIENvbnNpZGVyYXRpb25zIHNlY3Rpb24uCgpELjkuICAwNyB0byAwOAoKICAg byAgTWlub3IgdXBkYXRlCgogICBvICBVcGRhdGVkIHRvIHJlZmxlY3QgcmV2aWV3IGZyb20gTWlj aGFlbCBSaWNoYXJkc29uLgoKRC4xMC4gIDA4IHRvIDA5CgogICBvICBBZGRlZCBpbiBtaXNzaW5n ICJTaWduYXR1cmUiIGFydGlmYWN0IGV4YW1wbGUuCgogICBvICBBZGRlZCByZWNvbW1lbmRhdGlv biBmb3IgbWFudWZhY3R1cmVycyB0byB1c2UgaW50ZXJvcGVyYWJsZQogICAgICBmb3JtYXRzIGFu ZCBmaWxlIG5hbWluZyBjb252ZW50aW9ucyBmb3IgcmVtb3ZhYmxlIHN0b3JhZ2UgZGV2aWNlcy4K CiAgIG8gIEFkZGVkIGNvbmZpZ3VyYXRpb24taGFuZGxpbmcgbGVhZiB0byBndWlkZSBpZiBjb25m aWcgc2hvdWxkIGJlCiAgICAgIG1lcmdlZCwgcmVwbGFjZWQsIG9yIHByb2Nlc3NlZCBsaWtlIGFu IGVkaXQtY29uZmlnL3lhbmctcGF0Y2gKICAgICAgZG9jdW1lbnQuCgogICBvICBBZGRlZCBhIHBy ZS1jb25maWd1cmF0aW9uIHNjcmlwdCwgaW4gYWRkaXRpb24gdG8gdGhlIHBvc3QtCiAgICAgIGNv bmZpZ3VyYXRpb24gc2NyaXB0IGZyb20gLTA1IChpc3N1ZSAjMTUpLgoKRC4xMS4gIDA5IHRvIDEw CgogICBvICBGYWN0b3JlZCBvd25lcnNoaXAgdm91Y2hlciBhbmQgdm91Y2hlciByZXZvY2F0aW9u IHRvIGEgc2VwYXJhdGUKICAgICAgZG9jdW1lbnQ6IGRyYWZ0LWt3YXRzZW4tbmV0Y29uZi12b3Vj aGVyLiAoaXNzdWUgIzExKQoKCgoKCldhdHNlbiwgZXQgYWwuICAgICAgICAgIEV4cGlyZXMgRmVi cnVhcnkgMTAsIDIwMTkgICAgICAgICAgICAgIFtQYWdlIDgwXQoMCkludGVybmV0LURyYWZ0ICAg IFNlY3VyZSBaZXJvIFRvdWNoIFByb3Zpc2lvbmluZyAoU1pUUCkgICAgICBBdWd1c3QgMjAxOAoK CiAgIG8gIFJlbW92ZWQgPGNvbmZpZ3VyYXRpb24taGFuZGxpbmc+IG9wdGlvbnMgImVkaXQtY29u ZmlnIiBhbmQgInlhbmctCiAgICAgIHBhdGNoIi4gKGlzc3VlICMxMikKCiAgIG8gIERlZmluZWQg aG93IGEgc2lnbmF0dXJlIG92ZXIgc2lnbmVkLWRhdGEgcmV0dXJuZWQgZnJvbSBhIGJvb3RzdHJh cAogICAgICBzZXJ2ZXIgaXMgcHJvY2Vzc2VkLiAoaXNzdWUgIzEzKQoKICAgbyAgQWRkZWQgcmVj b21tZW5kYXRpb24gZm9yIHJlbW92YWJsZSBzdG9yYWdlIGRldmljZXMgdG8gdXNlIG9wZW4vCiAg ICAgIHN0YW5kYXJkIGZpbGUgc3lzdGVtcyB3aGVuIHBvc3NpYmxlLiAgKGlzc3VlICMxNCkKCiAg IG8gIFJlcGxhY2VkIG5vdGlmaWNhdGlvbnMgInNjcmlwdC1bd2FybmluZy9lcnJvcl0iIHdpdGgg IltwcmUvcG9zdF0tCiAgICAgIHNjcmlwdC1bd2FybmluZy9lcnJvcl0iLiAoZ29lcyB3aXRoIGlz c3VlICMxNSkKCiAgIG8gIHN3aXRjaGVkIG93bmVyLWNlcnRpZmljYXRlIHRvIGJlIGVuY29kZWQg dXNpbmcgdGhlIFBLQ1MgIzcgZm9ybWF0LgogICAgICAoaXNzdWUgIzE2KQoKICAgbyAgUmVwbGFj ZWQgbWQ1L3NoYTEgd2l0aCBzaGEyNTYgaW5zaWRlIGEgY2hvaWNlIHN0YXRlbWVudCwgZm9yCiAg ICAgIGZ1dHVyZSBleHRlbnNpYmlsaXR5LiAoaXNzdWUgIzE3KQoKICAgbyAgQSB0b24gb2YgZWRp dG9yaWFsIGNoYW5nZXMsIGFzIEkgd2VudCB0aHJ1IHRoZSBlbnRpcmUgZHJhZnQgd2l0aCBhCiAg ICAgIGZpbmUtdG9vdGhlZCBjb21iLgoKRC4xMi4gIDEwIHRvIDExCgogICBvICBmaXhlZCB5YW5n IHZhbGlkYXRpb24gaXNzdWVzIGZvdW5kIGJ5IElFVEZZQU5HUGFnZUNvbXBpbGF0aW9uLgogICAg ICBub3RlOiB0aGVzZSBpc3N1ZXMgd2VyZSBOT1QgZm91bmQgYnkgcHlhbmcgLS1pZXRmIG9yIGJ5 IHRoZQogICAgICBzdWJtaXNzaW9uLXRpbWUgdmFsaWRhdG9yLi4uCgogICBvICBmaXhlZCBhIHR5 cG8gaW4gdGhlIHlhbmcgbW9kdWxlLCBzb21lb25lIHRoZSBjb25maWcgZmFsc2UKICAgICAgc3Rh dGVtZW50IHdhcyByZW1vdmVkLgoKRC4xMy4gIDExIHRvIDEyCgogICBvICBmaXhlZCB0eXBvIHRo YXQgcHJldmVudGVkIEFwcGVuZGl4IEIgZnJvbSBsb2FkaW5nIHRoZSBleGFtcGxlcwogICAgICBj b3JyZWN0bHkuCgogICBvICBmaXhlZCBtb3JlIHlhbmcgdmFsaWRhdGlvbiBpc3N1ZXMgZm91bmQg YnkKICAgICAgSUVURllBTkdQYWdlQ29tcGlsYXRpb24uICBub3RlOiBhZ2FpbiwgdGhlc2UgaXNz dWVzIHdlcmUgTk9UIGZvdW5kCiAgICAgIGJ5IHB5YW5nIC0taWV0ZiBvciBieSB0aGUgc3VibWlz c2lvbi10aW1lIHZhbGlkYXRvci4uLgoKICAgbyAgdXBkYXRlZCBhIGZldyBvZiB0aGUgbm90aWZp Y2F0aW9uIGVudW1lcmF0aW9ucyB0byBiZSBtb3JlCiAgICAgIGNvbnNpc3RlbnQgd2l0aCB0aGUg b3RoZXIgZW51bWVyYXRpb25zIChmb2xsb3dpbmcgdGhlIHdhcm5pbmcvCiAgICAgIGVycm9yIHBh dHRlcm4pLgoKICAgbyAgdXBkYXRlZCB0aGUgaW5mb3JtYXRpb24tdHlwZSBhcnRpZmFjdCB0byBz dGF0ZSBob3cgaXQncyBlbmNvZGVkLAogICAgICBtYXRjaGluZyB0aGUgbGFuZ3VhZ2UgdGhhdCB3 YXMgaW4gQXBwZW5kaXggQi4KCgoKCgoKV2F0c2VuLCBldCBhbC4gICAgICAgICAgRXhwaXJlcyBG ZWJydWFyeSAxMCwgMjAxOSAgICAgICAgICAgICAgW1BhZ2UgODFdCgwKSW50ZXJuZXQtRHJhZnQg ICAgU2VjdXJlIFplcm8gVG91Y2ggUHJvdmlzaW9uaW5nIChTWlRQKSAgICAgIEF1Z3VzdCAyMDE4 CgoKRC4xNC4gIDEyIHRvIDEzCgogICBvICBkZWZpbmVkIGEgc3RhbmRhbG9uZSBhcnRpZmFjdCB0 byBlbmNvZGUgdGhlIG9sZCBpbmZvcm1hdGlvbi10eXBlCiAgICAgIGludG8gYSBQS0NTICM3IHN0 cnVjdHVyZS4KCiAgIG8gIHN0YW5kYWxvbmUgaW5mb3JtYXRpb24gYXJ0aWZhY3QgaGFyZGNvZGVz IEpTT04gZW5jb2RpbmcgKHRvIG1hdGNoCiAgICAgIHRoZSB2b3VjaGVyIGRyYWZ0KS4KCiAgIG8g IGNvbWJpbmVkIHRoZSBpbmZvcm1hdGlvbiBhbmQgc2lnbmF0dXJlIFBLQ1MgIzcgc3RydWN0dXJl cyBpbnRvIGEKICAgICAgc2luZ2xlIFBLQ1MgIzcgc3RydWN0dXJlLgoKICAgbyAgbW92ZWQgdGhl IGNlcnRpZmljYXRlLXJldm9jYXRpb25zIGludG8gdGhlIG93bmVyLWNlcnRpZmljYXRlJ3MKICAg ICAgUEtDUyAjNyBzdHJ1Y3R1cmUuCgogICBvICBlbGltaW5hdGVkIHN1cHBvcnQgZm9yIHZvdWNo ZXItcmV2b2NhdGlvbnMsIHRvIHJlZmxlY3QgdGhlCiAgICAgIHZvdWNoZXItZHJhZnQncyBzd2l0 Y2ggZnJvbSByZXZvY2F0aW9ucyB0byByZW5ld2Fscy4KCkQuMTUuICAxMyB0byAxNAoKICAgbyAg UmVuYW1lZCAiYm9vdHN0cmFwIGluZm9ybWF0aW9uIiB0byAib25ib2FyZGluZyBpbmZvcm1hdGlv biIuCgogICBvICBSZXdyb3RlIERIQ1Agc2VjdGlvbnMgdG8gYWRkcmVzcyB0aGUgcGFja2V0LXNp emUgbGltaXRhdGlvbiBpc3N1ZSwKICAgICAgYXMgZGlzY3Vzc2VkIGluIENoaWNhZ28uCgogICBv ICBBZGRlZCBJYW4gYXMgYW4gYXV0aG9yIGZvciBoaXMgdGV4dC1jb250cmlidXRpb25zIHRvIHRo ZSBESENQCiAgICAgIHNlY3Rpb25zLgoKICAgbyAgUmVtb3ZlZCB0aGUgR3VpZGluZyBQcmluY2lw bGVzIHNlY3Rpb24uCgpELjE2LiAgMTQgdG8gMTUKCiAgIG8gIFJlbmFtZWQgYWN0aW9uICJub3Rp ZmljYXRpb24iIHRvICJ1cGRhdGUtcHJvZ3Jlc3MiIGFuZCwgbGlrZXdpc2UKICAgICAgIm5vdGlm aWNhdGlvbi10eXBlIiB0byAidXBkYXRlLXR5cGUiLgoKICAgbyAgVXBkYXRlZCBleGFtcGxlcyB0 byB1c2UgImJhc2U2NGVuY29kZWR2YWx1ZT09IiBmb3IgYmluYXJ5IHZhbHVlcy4KCiAgIG8gIEdy ZWF0bHkgc2ltcGxpZmllZCB0aGUgIkFydGlmYWN0IEdyb3VwaW5ncyIgc2VjdGlvbiwgYW5kIG1v dmVkIGl0CiAgICAgIGFzIGEgc3Vic2VjdGlvbiB0byB0aGUgIkFydGlmYWN0cyIgc2VjdGlvbi4K CiAgIG8gIE1vdmVkIHRoZSAiV29ya2Zsb3cgT3ZlcnZpZXciIHNlY3Rpb24gdG8gdGhlIEFwcGVu ZGl4LgoKICAgbyAgUmVuYW1lZCAiYm9vdHN0cmFwIGluZm9ybWF0aW9uIiB0byAidXBkYXRlIGlu Zm9ybWF0aW9uIi4KCiAgIG8gIFJlbW92ZWQgIk90aGVyIENvbnNpZGVyYXRpb25zIiBzZWN0aW9u LgoKICAgbyAgVG9ucyBvZiBlZGl0b3JpYWwgdXBkYXRlcy4KCgoKCgpXYXRzZW4sIGV0IGFsLiAg ICAgICAgICBFeHBpcmVzIEZlYnJ1YXJ5IDEwLCAyMDE5ICAgICAgICAgICAgICBbUGFnZSA4Ml0K DApJbnRlcm5ldC1EcmFmdCAgICBTZWN1cmUgWmVybyBUb3VjaCBQcm92aXNpb25pbmcgKFNaVFAp ICAgICAgQXVndXN0IDIwMTgKCgpELjE3LiAgMTUgdG8gMTYKCiAgIG8gIHR3ZWFrZWQgbGFuZ3Vh Z2UgdG8gcmVmZXIgdG8gImluaXRpYWwgc3RhdGUiIHJhdGhlciB0aGFuICJmYWN0b3J5CiAgICAg IGRlZmF1bHQgY29uZmlndXJhdGlvbiIsIHNvIGFzIGFjY29tbW9kYXRlIHdoaXRlLWJveCBzY2Vu YXJpb3MuCgogICBvICBhZGRlZCBhIHBhcmFncmFwaCB0byBJbnRybyByZWdhcmRpbmcgaG93IHRo ZSBzb2x1dGlvbiBwcmltYXJpbHkKICAgICAgcmVnYXJkcyBwaHlzaWNhbCBtYWNoaW5lcywgYnV0 IGNvdWxkIGJlIGV4dGVuZGVkIHRvIFZNcyBieSBhCiAgICAgIGZ1dHVyZSBkb2N1bWVudC4KCiAg IG8gIGFkZGVkIGEgcG9pbnRlciB0byB0aGUgV29ya2Zsb3cgT3ZlcnZpZXcgc2VjdGlvbiAocmVj ZW50bHkgbW92ZWQKICAgICAgdG8gdGhlIEFwcGVuZGl4KSB0byB0aGUgSW50cm8uCgogICBvICBh ZGRlZCBhIG5vdGUgdGhhdCwgaW4gb3JkZXIgdG8gc2ltcGxpZnkgdGhlIHZlcmlmaWNhdGlvbiBw cm9jZXNzLAogICAgICB0aGUgIlplcm90b3VjaCBJbmZvcm1hdGlvbiIgUEtDUyAjNyBzdHJ1Y3R1 cmUgTVVTVCBhbHNvIGNvbnRhaW4KICAgICAgdGhlIHNpZ25pbmcgWC41MDkgY2VydGlmaWNhdGUu CgogICBvICBub3RlZCB0aGF0IHRoZSBvd25lciBjZXJ0aWZpY2F0ZSdzIG11c3QgZWl0aGVyIGhh dmUgbm8gS2V5IFVzYWdlCiAgICAgIG9yIHRoZSBLZXkgVXNhZ2UgbXVzdCBzZXQgdGhlICJkaWdp dGFsU2lnbmF0dXJlIiBiaXQuCgogICBvICBub3RlZCB0aGF0IHRoZSBvd25lciBjZXJ0aWZpY2F0 ZSdzIHN1YmplY3QgYW5kIHN1YmplY3RBbHROYW1lCiAgICAgIHZhbHVlcyBhcmUgbm90IGNvbnN0 cmFpbmVkLgoKICAgbyAgbW92ZWQvY29uc29saWRhdGVkIHNvbWUgdGV4dCBmcm9tIHRoZSBBcnRp ZmFjdHMgc2VjdGlvbiBkb3duIHRvCiAgICAgIHRoZSBEZXZpY2UgRGV0YWlscyBzZWN0aW9uLgoK ICAgbyAgdGlnaHRlbmVkIHVwIHNvbWUgYW1iaWd1b3VzIGxhbmd1YWdlLCBmb3IgaW5zdGFuY2Us IGJ5IHJlZmVycmluZwogICAgICB0byBzcGVjaWZpYyBsZWFmIG5hbWVzIGluIHRoZSBWb3VjaGVy IGFydGlmYWN0LgoKICAgbyAgcmV2ZXJ0ZWQgYSBwcmV2aW91c2x5IG92ZXJ6ZWFsb3VzIHMvdW5p cXVlLWlkL3NlcmlhbC1udW1iZXIvCiAgICAgIGNoYW5nZS4KCiAgIG8gIG1vZGlmaWVkIGxhbmd1 YWdlIGZvciB3aGVuIFpUUCBydW5zIGZyb20gd2hlbiBmYWN0b3J5LWRlZmF1bHQKICAgICAgY29u ZmlnIGlzIHJ1bm5pbmcgdG8gd2hlbiBaVFAgaXMgY29uZmlndXJlZCwgd2hpY2ggdGhlIGZhY3Rv cnktCiAgICAgIGRlZmF1bHRzIHNob3VsZCBzZXQgLgoKRC4xOC4gIDE2IHRvIDE3CgogICBvICBB ZGRlZCBhbiBleGFtcGxlIGZvciBob3cgdG8gcHJvbW90ZSBhbiB1bnRydXN0ZWQgY29ubmVjdGlv biB0byBhCiAgICAgIHRydXN0ZWQgY29ubmVjdGlvbi4KCiAgIG8gIEFkZGVkIGEgInF1ZXJ5IHBh cmFtZXRlcnMiIHNlY3Rpb24gZGVmaW5pbmcgc29tZSBwYXJhbWV0ZXJzCiAgICAgIGVuYWJsaW5n IHNjZW5hcmlvcyByYWlzZWQgaW4gbGFzdCBjYWxsLgoKICAgbyAgQWRkZWQgYSAiRGlzY2xvc2lu ZyBJbmZvcm1hdGlvbiB0byBVbnRydXN0ZWQgU2VydmVycyIgc2VjdGlvbiB0bwogICAgICB0aGUg U2VjdXJpdHkgQ29uc2lkZXJhdGlvbnMuCgoKCgoKCldhdHNlbiwgZXQgYWwuICAgICAgICAgIEV4 cGlyZXMgRmVicnVhcnkgMTAsIDIwMTkgICAgICAgICAgICAgIFtQYWdlIDgzXQoMCkludGVybmV0 LURyYWZ0ICAgIFNlY3VyZSBaZXJvIFRvdWNoIFByb3Zpc2lvbmluZyAoU1pUUCkgICAgICBBdWd1 c3QgMjAxOAoKCkQuMTkuICAxNyB0byAxOAoKICAgbyAgQWRkZWQgU2VjdXJpdHkgQ29uc2lkZXJh dGlvbnMgZm9yIGVhY2ggWUFORyBtb2R1bGUuCgogICBvICBSZXZlcnRlZCBiYWNrIHRvIHRoZSBk ZXZpY2UgYWx3YXlzIHNlbmRpbmcgaXRzIERldklEIGNlcnQuCgogICBvICBNb3ZlZCBkYXRhIHRy ZWUgdG8gImdldC1ib290c3RyYXBwaW5nLWRhdGEiIFJQQy4KCiAgIG8gIE1vdmVkIHRoZSAidXBk YXRlLXByb2dyZXNzIiBhY3Rpb24gdG8gYSAicmVwb3J0LXByb2dyZXNzIiBSUEMuCgogICBvICBB ZGRlZCBhbiAidW50cnVzdGVkLWNvbm5lY3Rpb24iIHBhcmFtZXRlciB0byAiZ2V0LWJvb3RzdHJh cHBpbmctCiAgICAgIGRhdGEiIFJQQy4KCiAgIG8gIEFkZGVkIHRoZSAiaWV0Zi16ZXJvdG91Y2gt ZGV2aWNlIiBtb2R1bGUuCgogICBvICBMb3RzIG9mIHNtYWxsIHVwZGF0ZXMuCgpELjIwLiAgMTgg dG8gMTkKCiAgIG8gIEZpeGVkICJtdXN0IiBleHByZXNzaW9ucywgYnkgY29udmVydGluZyAiY2hv aWNlIiB0byBhICJsaXN0IiBvZgogICAgICAiaW1hZ2UtdmVyaWZpY2F0aW9uIiwgZWFjaCBvZiB3 aGljaCBub3cgcG9pbnRzIHRvIGEgYmFzZSBpZGVudGl0eQogICAgICBjYWxsZWQgImhhc2gtYWxn b3JpdGhtIi4gIFRoZXJlJ3MganVzdCBvbmUgYWxnb3JpdGhtIGN1cnJlbnRseQogICAgICBkZWZp bmVkIChzaGEtMjU2KS4gIFdpc2ggdGhlcmUgd2FzIGEgc3RhbmRhcmQgY3J5cHRvIG1vZHVsZSB0 aGF0CiAgICAgIGNvdWxkIGlkZW50aWZ5IHN1Y2ggaWRlbnRpdGllcy4KCkQuMjEuICAxOSB0byAy MAoKICAgbyAgTm93IHJlZmVyZW5jZXMgSS1ELmlldGYtbmV0bW9kLXlhbmctdHJlZS1kaWFncmFt cy4KCiAgIG8gIEZpeGVkIHRyZWUtZGlhZ3JhbXMgaW4gU2VjdGlvbiAyIHRvIGFsd2F5cyByZWZs ZWN0IGN1cnJlbnQgWUFORwogICAgICAobm93IHRoZXkgYXJlIG5vdyBkeW5hbWljYWxseSBnZW5l cmF0ZWQpLgoKICAgbyAgVGhlICJyZWRpcmVjdC1pbmZvcm1hdGlvbiIgY29udGFpbmVyJ3MgInRy dXN0LWFuY2hvciIgaXMgbm93IGEgQ01TCiAgICAgIHN0cnVjdHVyZSB0aGF0IGNhbiBjb250YWlu IGEgY2hhaW4gb2YgY2VydGlmaWNhdGVzLCByYXRoZXIgdGhhbiBhCiAgICAgIHNpbmdsZSBjZXJ0 aWZpY2F0ZS4KCiAgIG8gIFRoZSAib25ib2FyZGluZy1pbmZvcm1hdGlvbiIgY29udGFpbmVyJ3Mg c3VwcG9ydCBmb3IgaW1hZ2UKICAgICAgdmVyaWZpY2F0aW9uIHJld29ya2VkIHRvIGJlIGV4dGVu c2libGUuCgogICBvICBBZGRlZCBhIHJlZmVyZW5jZSB0byB0aGUgIkRldmljZSBEZXRhaWxzIiBz ZWN0aW9uIHRvIHRoZSBuZXcKICAgICAgZXhhbXBsZS16ZXJvdG91Y2gtZGV2aWNlIG1vZHVsZS4K CiAgIG8gIENsYXJpZmllZCB0aGF0IHRoZSBkZXZpY2UgbXVzdCBhbHdheXMgcGFzcyBpdHMgSURl dklEIGNlcnRpZmljYXRlLAogICAgICBldmVuIGZvciB1bnRydXN0ZWQgYm9vdHN0cmFwIHNlcnZl cnMuCgogICBvICBGaXhlZCB0aGUgZGVzY3JpcHRpb24gc3RhdGVtZW50IGZvciB0aGUgInNjcmlw dCIgdHlwZWRlZiB0byByZWZlcgogICAgICB0byB0aGUgW3ByZS9wb3N0XS1zY3JpcHQtW3dhcm5p bmcvZXJyb3JdIGVudW1zLCByYXRoZXIgdGhhbiB0aGUKICAgICAgbGVnYWN5IHNjcmlwdC1bd2Fy bmluZy9lcnJvcl0gZW51bXMuCgoKCldhdHNlbiwgZXQgYWwuICAgICAgICAgIEV4cGlyZXMgRmVi cnVhcnkgMTAsIDIwMTkgICAgICAgICAgICAgIFtQYWdlIDg0XQoMCkludGVybmV0LURyYWZ0ICAg IFNlY3VyZSBaZXJvIFRvdWNoIFByb3Zpc2lvbmluZyAoU1pUUCkgICAgICBBdWd1c3QgMjAxOAoK CiAgIG8gIEZvciB0aGUgZ2V0LWJvb3RzdHJhcHBpbmctZGF0YSBSUEMncyBpbnB1dCwgcmVtb3Zl ZCB0aGUgInJlbW90ZS0KICAgICAgaWQiIGFuZCAiY2lyY3VpdC1pZCIgZmllbGRzLCBhbmQgYWRk ZWQgYSAiaHctbW9kZWwiIGZpZWxkLgoKICAgbyAgSW1wcm92ZWQgREhDUCBlcnJvciBoYW5kbGlu ZyB0ZXh0LgoKICAgbyAgQWRkZWQgTVVTVCByZXF1aXJlbWVudCBmb3IgREhDUHY2IGNsaWVudCBh bmQgc2VydmVyIGltcGxlbWVudGluZwogICAgICBbUkZDMzM5Nl0gdG8gaGFuZGxlIFVSSSBsaXN0 cyBsb25nZXIgdGhhbiAyNTUgb2N0ZXRzLgoKICAgbyAgQ2hhbmdlZCB0aGUgImNvbmZpZ3VyYXRp b24iIHZhbHVlIGluIG9uYm9hcmRpbmctaW5mb3JtYXRpb24gdG8gYmUKICAgICAgdHlwZSAiYmlu YXJ5IiBpbnN0ZWFkIG9mICJhbnlkYXRhIi4KCiAgIG8gIE1vdmVkIGV2ZXJ5dGhpbmcgZnJvbSBQ S0NTIzcgdG8gQ01TICh0aGlzIHNob3dzIHVwIGFzIGEgYmlnCiAgICAgIGNoYW5nZSkuCgogICBv ICBBZGRlZCB0aGUgZWFybHkgY29kZSBwb2ludCBhbGxvY2F0aW9uIGFzc2lnbm1lbnRzIGZvciB0 aGUgREhDUAogICAgICBPcHRpb25zIGluIHRoZSBJQU5BIENvbnNpZGVyYXRpb25zIHNlY3Rpb24s IGFuZCB1cGRhdGVkIHRoZSBSRkMKICAgICAgRWRpdG9yIG5vdGUgYWNjb3JkaW5nbHkuCgogICBv ICBBZGRlZCBSRkMgRWRpdG9yIHJlcXVlc3QgdG8gcmVwbGFjZSB0aGUgYXNzaWduZWQgdmFsdWVz IGZvciB0aGUKICAgICAgQ01TIGNvbnRlbnQgdHlwZXMuCgogICBvICBSZWxheGVkIGF1dGggcmVx dWlyZW1lbnRzIGZyb20gZGV2aWNlIG5lZWRpbmcgdG8gYWx3YXlzIHNlbmQKICAgICAgSURldklE IGNlcnQgdG8gZGV2aWNlIG5lZWRpbmcgdG8gYWx3YXlzIHNlbmQgYXV0aGVudGljYXRpb24KICAg ICAgY3JlZGVudGlhbHMsIGFzIHRoaXMgYmV0dGVyIG1hdGNoZXMgd2hhdCBSRkMgODA0MCBTZWN0 aW9uIDIuNQogICAgICBzYXlzLgoKICAgbyAgTW92ZWQgbm9ybWF0aXZlIG1vZHVsZSAiaWV0Zi16 ZXJvdG91Y2gtZGV2aWNlIiB0byBub24tbm9ybWF0aXZlCiAgICAgIG1vZHVsZSAiZXhhbXBsZS16 ZXJvdG91Y2gtZGV2aWNlIi4KCiAgIG8gIFVwZGF0ZWQgVGl0bGUsIEFic3RyYWN0LCBhbmQgSW50 cm9kdWN0aW9uIHBlciBkaXNjdXNzaW9uIG9uIGxpc3QuCgpELjIyLiAgMjAgdG8gMjEKCiAgIG8g IE5vdyBhbnkgb2YgdGhlIHRocmVlIGFydGlmYWN0IGNhbiBiZSBlbmNyeXB0ZWQuCgogICBvICBG aXhlZCBzb21lIGxpbmUtdG9vLWxvbmcgaXNzdWVzLgoKRC4yMy4gIDIxIHRvIDIyCgogICBvICBS ZW1vdmVkIHNwZWNpZmljcyBhcm91bmQgaG93IHNjcmlwdHMgaW5kaWNhdGUgd2FybmluZ3Mgb3Ig ZXJyb3JzCiAgICAgIGFuZCBob3cgc2NyaXB0cyBlbWl0IG91dHB1dC4KCiAgIG8gIE1vdmVkIHRo ZSBaZXJvIFRvdWNoIERldmljZSBEYXRhIE1vZGVsIHNlY3Rpb24gdG8gdGhlIEFwcGVuZGl4LgoK ICAgbyAgTW9kaWZpZWQgdGhlIFlBTkcgbW9kdWxlIGluIHRoZSBaZXJvIFRvdWNoIERldmljZSBE YXRhIE1vZGVsCiAgICAgIHNlY3Rpb24gdG8gcmVmbGVjdCB0aGUgbGF0ZXN0IHRydXN0LWFuY2hv cnMgYW5kIGtleXN0b3JlIGRyYWZ0cy4KCgoKCgpXYXRzZW4sIGV0IGFsLiAgICAgICAgICBFeHBp cmVzIEZlYnJ1YXJ5IDEwLCAyMDE5ICAgICAgICAgICAgICBbUGFnZSA4NV0KDApJbnRlcm5ldC1E cmFmdCAgICBTZWN1cmUgWmVybyBUb3VjaCBQcm92aXNpb25pbmcgKFNaVFApICAgICAgQXVndXN0 IDIwMTgKCgogICBvICBNb2RpZmllZCB0eXBlcyBpbiBvdGhlciBZQU5HIG1vZHVsZXMgdG8gbW9y ZSBjbG9zZWx5IGVtdWxhdGUgd2hhdAogICAgICBpcyBpbiBkcmFmdC1pZXRmLW5ldGNvbmYtY3J5 cHRvLXR5cGVzLgoKRC4yNC4gIDIyIHRvIDIzCgogICBvICBSZXdyb3RlIHNlY2V0aW9uIDUuNiAo cHJvY2Vzc2luZyBvbmJvYm9hcmRpbmcgaW5mb3JtYXRpb24pIHRvIGJlCiAgICAgIGNsZWFyZXIg YWJvdXQgZXJyb3IgaGFuZGxpbmcgYW5kIHJldGFpbmVkIHN0YXRlLiAgU3BlY2lmaWNhbGx5OgoK ICAgICAgKiAgQ2xhcmlmaWVkIHRoYXQgYSBzY3JpcHQsIHVwb24gaGF2aW5nIGFuIGVycm9yLCBt dXN0IGdyYWNlZnVsbHkKICAgICAgICAgZXhpdCwgY2xlYW5pbmcgdXAgYW55IHN0YXRlIHRoYXQg bWlnaHQgaGluZGVyIHN1YnNlcXVlbnQKICAgICAgICAgZXhlY3V0aW9ucy4KCiAgICAgICogIEFk ZGVkIGFiaWxpdHkgZm9yIHNjcmlwdHMgdG8gYmUgZXhlY3V0ZWQgYWdhaW4gd2l0aCBhIGZsYWcK ICAgICAgICAgZW5hYmxpbmcgdGhlbSB0byBjbGVhbiB1cCBzdGF0ZSBmcm9tIGEgcHJldmlvdXMg ZXhlY3V0aW9uLgoKICAgICAgKiAgQ2xhcmlmaWVkIHRoYXQgdGhlIGNvbmlmZ3VyYXRpb24gY29t bWl0IGlzIGF0b21pYy4KCiAgICAgICogIENsYXJpZmllZCB0aGF0IGFueSBlcnJvciBlbmNvdW50 ZXJlZCBhZnRlciBjb21taXR0aW5nIHRoZQogICAgICAgICBjb25maWd1cmF0aW9uIChlLmcuLCBp biB0aGUgInBvc3QtY29uZmlndXJhdGlvbi1zY3JpcHQiKSBtdXN0CiAgICAgICAgIHJvbGxiYWNr IHRoZSBjb25maWd1cmF0aW9uIHRvIHRoZSBwcmV2aW91cyBjb25maWd1cmF0aW9uLgoKICAgICAg KiAgQ2xhcmlmaWVkIHRoYXQgZmFpbHVyZSB0byBzdWNjZXNzZnVsbHkgZGVsaXZlciB0aGUgImJv b3RzdHJhcC0KICAgICAgICAgaW5pdGlhdGVkIiBhbmQgImJvb3RzdHJhcC1jb21wbGV0ZSIgcHJv Z3Jlc3MgdHlwZXMgbXVzdCBiZQogICAgICAgICB0cmVhdGVkIGFzIGFuIGVycm9yLgoKICAgICAg KiAgQ2xhcmlmaWVkIHdoZW4gdGhlICJyZXNwb25zZS1lcnJvciIgcHJvZ3Jlc3MgdHlwZSBpcyB0 byBiZQogICAgICAgICBzZW50LgoKICAgICAgKiAgQ2xhcmlmaWVkIHRoYXQgInJldHVybiB0byBi b290c3RyYXBwaW5nIHNlcXVlbmNlIiBpcyB0byBiZQogICAgICAgICBpbnRlcnByZXRlZCBpbiB0 aGUgcmVjdXJzaXZlIGNvbnRleHQuICBNZWFuaW5nIHRoYXQgdGhlIGRldmljZQogICAgICAgICBy b2xscy1iYWNrIG9uZSBsb29wLCByYXRoZXIgdGhhbiBzdGFydCBvdmVyIGZyb20gc2NyYXRjaC4K CiAgIG8gIENoYW5nZWQgaG93IGEgZGV2aWNlIHZlcmlmaWVzIGEgYm9vdC1pbWFnZSBmcm9tIGp1 c3QgIk1VU1QgbWF0Y2gKICAgICAgb25lIG9mIHRoZSBzdXBwbGllZCBmaW5nZXJwcmludHMiIHRv IGFsc28gYWxsb3cgZm9yIHRoZQogICAgICB2ZXJpZmljYXRpb24gdG8gdXNlIGFuIGN5cnB0b2dy YXBoaWMgc2lnbmF0dXJlIGVtYmVkZGVkIGludG8gdGhlCiAgICAgIGltYWdlIGl0c2VsZi4KCiAg IG8gIEFkZGVkIG1vcmUgInByb2dyZXNzLXR5cGUiIGVudW1zIGZvciB2aXNpYmlsaXR5IHJlYXNv bnMsIGVuYWJsaW5nCiAgICAgIG1vcmUgc3Ryb25nbHktdHlwZWQgZGVidWcgaW5mb3JtYXRpb24g dG8gYmUgc2VudCB0byB0aGUgYm9vdHN0cmFwCiAgICAgIHNlcnZlci4KCkFja25vd2xlZGdlbWVu dHMKCiAgIFRoZSBhdXRob3JzIHdvdWxkIGxpa2UgdG8gdGhhbmsgZm9yIGZvbGxvd2luZyBmb3Ig bGl2ZWx5IGRpc2N1c3Npb25zCiAgIG9uIGxpc3QgYW5kIGluIHRoZSBoYWxscyAob3JkZXJlZCBi eSBsYXN0IG5hbWUpOiBNaWNoYWVsIEJlaHJpbmdlciwKICAgRGVhbiBCb2dkYW5vdmljLCBNYXJ0 aW4gQmpvcmtsdW5kLCBKb2UgQ2xhcmtlLCBUb2VybGVzcyBFY2tlcnQsCiAgIFN0ZXBoZW4gRmFy cmVsbCwgU3RlcGhlbiBIYW5uYSwgV2VzIEhhcmRha2VyLCBEYXZpZCBIYXJyaW5ndG9uLCBSYWRl awoKCgoKV2F0c2VuLCBldCBhbC4gICAgICAgICAgRXhwaXJlcyBGZWJydWFyeSAxMCwgMjAxOSAg ICAgICAgICAgICAgW1BhZ2UgODZdCgwKSW50ZXJuZXQtRHJhZnQgICAgU2VjdXJlIFplcm8gVG91 Y2ggUHJvdmlzaW9uaW5nIChTWlRQKSAgICAgIEF1Z3VzdCAyMDE4CgoKICAgS3JlamNpLCBEYXZp ZCBNYW5kZWxiZXJnLCBSdXNzIE11bmR5LCBSZWluYWxkbyBQZW5ubywgUmFuZHkgUHJlc3VobiwK ICAgTWF4IFByaXRpa2luLCBNaWNoYWVsIFJpY2hhcmRzb24sIFBoaWwgU2hhZmVyLCBKdWVyZ2Vu IFNjaG9lbndhZWxkZXIuCgogICBTcGVjaWFsIHRoYW5rcyBnb2VzIHRvIFN0ZXZlIEhhbm5hLCBS dXNzIE11bmR5LCBhbmQgV2VzIEhhcmRha2VyIGZvcgogICBicmFpbnN0b3JtaW5nIHRoZSBvcmln aW5hbCBJLUQncyBzb2x1dGlvbiBkdXJpbmcgdGhlIElFVEYgODcgbWVldGluZwogICBpbiBCZXJs aW4uCgpBdXRob3JzJyBBZGRyZXNzZXMKCiAgIEtlbnQgV2F0c2VuCiAgIEp1bmlwZXIgTmV0d29y a3MKCiAgIEVNYWlsOiBrd2F0c2VuQGp1bmlwZXIubmV0CgoKICAgTWlrYWVsIEFicmFoYW1zc29u CiAgIFQtU3lzdGVtcwoKICAgRU1haWw6IG1pa2FlbC5hYnJhaGFtc3NvbkB0LXN5c3RlbXMuc2UK CgogICBJYW4gRmFycmVyCiAgIERldXRzY2hlIFRlbGVrb20gQUcKCiAgIEVNYWlsOiBpYW4uZmFy cmVyQHRlbGVrb20uZGUKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgpXYXRzZW4sIGV0IGFsLiAg ICAgICAgICBFeHBpcmVzIEZlYnJ1YXJ5IDEwLCAyMDE5ICAgICAgICAgICAgICBbUGFnZSA4N10K --_002_51E98D221DBF4069A75090987EB96B0Djunipernet_-- From nobody Fri Aug 10 12:36:43 2018 Return-Path: X-Original-To: secdir@ietfa.amsl.com Delivered-To: secdir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id DE346130F69 for ; Fri, 10 Aug 2018 12:36:41 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2 X-Spam-Level: X-Spam-Status: No, score=-2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001] autolearn=unavailable autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=pingidentity.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id gU6Y_E4-tkrw for ; Fri, 10 Aug 2018 12:36:39 -0700 (PDT) Received: from mail-it0-x231.google.com (mail-it0-x231.google.com [IPv6:2607:f8b0:4001:c0b::231]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 0E7E2130F6D for ; Fri, 10 Aug 2018 12:36:39 -0700 (PDT) Received: by mail-it0-x231.google.com with SMTP id 139-v6so4213543itf.0 for ; Fri, 10 Aug 2018 12:36:39 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=pingidentity.com; s=gmail; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=osB3l8oZTJKQ5xDLyX55a6/LgGySCPzIVv1kLKW9EoY=; b=hVNf2ITQosp9ZXVxei0UUaTiX+5yjXbd0HLABhstT2aiDG8pnDF7gjcB7KclIu46qV ZNw5xI4o+PaIsC8l/BB1Qirt1SK+JY4jYqagmD6/ds1/b83NKITE/y2D/nd612NoCN0s 3DbvCkF6OW98dgmGWNm3PPlk76fJ7iaZPw2ug= X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=osB3l8oZTJKQ5xDLyX55a6/LgGySCPzIVv1kLKW9EoY=; b=WRQCG0DN/W1vUxwYRsopPDGP2EIYx8BK82wrMAdCilCZ4B+YZ2nA6yUj2wtFeig4oY Z8j8npZ7ubLOLENfC4O+Z5rkLNLeES9946jn5rtcQM8Kl5mKEkelP7seV38Htb3ziLfx D7yEr8xRimPVaZWoYwlGzIRu/s1Z79c0glqXppAfm2gldXDXHs7bnrj0E7EFD+j03U7N 7e6sdipk3Knrg7Az+VKON4LOqBkV9SLqDbrv7IWlvZrk9ZD1nVWYhzllUlRGzY+N77X3 WSGhiKy9KFqNgMJx/O+5Tmtnh0xghxWcTQ8BFqrN4O8cXYR+lHAjo8eDuFMVzLf3Dfs7 xRuA== X-Gm-Message-State: AOUpUlGcwyNlAN4UViGFXdimP171jrn6xSgu29hUjs8YvxNY0wkOENPq 1Hx1Dc/ng9cmpQ47fdvAvmeri0d5oA5DNfM3OXYPn6y5LhXovFftXZnVgD3NZkpvqTphZX9gtxV N7FlJpKq3FORNno4= X-Google-Smtp-Source: AA+uWPxIbCtl7S1HTJ7ezASxbeUG//FHDoKnK+xPloRtW3A+w+OLAHqwT4Zn62xwjMmcXPN6PMJJHMOd9GU+v5IRnp4= X-Received: by 2002:a24:ed0c:: with SMTP id r12-v6mr3400980ith.37.1533929798081; Fri, 10 Aug 2018 12:36:38 -0700 (PDT) MIME-Version: 1.0 References: <201808080746.w787kd74021069@rumpleteazer.rhmr.com> In-Reply-To: From: Brian Campbell Date: Fri, 10 Aug 2018 13:36:11 -0600 Message-ID: To: hilarie@purplestreak.com Cc: The IESG , secdir@ietf.org, draft-ietf-oauth-token-exchange.all@ietf.org Content-Type: multipart/alternative; boundary="000000000000b9c229057319dc5b" Archived-At: Subject: Re: [secdir] Security review of draft-ietf-oauth-token-exchange-14 X-BeenThere: secdir@ietf.org X-Mailman-Version: 2.1.27 Precedence: list List-Id: Security Area Directorate List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 10 Aug 2018 19:36:42 -0000 --000000000000b9c229057319dc5b Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable Hi Hilarie and thank you for the review. In looking again at the example in section 4.1 about nested Actor Claims I agree that the scenario depicted by the example is confusing and rather unrealistic. I'll endeavor to produce a better example in the next revision of the draft. I think perhaps showing a chain of delegation where the actors are different systems rather than mixing users and systems would be more straightforward. So to be totally forthright, the Privacy Considerations section was written in response to a single but persistent mailing list commenter who was objecting to this (and other drafts for that matter) on the grounds that details of services being accessed and personal information may be revealed to the entities involved. But as you've noted, that's kinda fundamental to how this stuff works - the token is obtained and sent in order to access the resource. The Privacy Considerations text was basically just a compromise noting that the concerns had been heard but so the draft could move forward. Like many compromises, I don't know that anyone was particularly happy with this one. I don't think the text really adds any value - would simply removing it close that can of worms? Or would perhaps incorporating some text similar to what's in https://tools.ietf.org/html/rfc7523#section-7 be helpful here? I honestly don't know that much more concrete can be said about it. But I'm certainly open to suggestions, should you have them. Thanks, Brian ---------- Forwarded message --------- > From: Hilarie Orman > Date: Wed, Aug 8, 2018 at 1:47 AM > Subject: Security review of draft-ietf-oauth-token-exchange-14 > To: , > Cc: > > > Security review of draft-ietf-oauth-token-exchange-14 > OAuth 2.0 Token Exchange > > I have reviewed this document as part of the security directorate's > ongoing effort to review all IETF documents being processed by the IESG. > These comments were written primarily for the benefit of the security are= a > directors. Document editors and WG chairs should treat these comments > just like any other last call comments. > > The abstract states: > This specification defines a protocol for an HTTP- and JSON- based > Security Token Service (STS) by defining how to request and obtain > security tokens from OAuth 2.0 authorization servers, including > security tokens employing impersonation and delegation. > > [This review is late because I mistook the due date, > dd-mm-yyyy =3D 06-08-2018 > for > mm-dd-yyyy =3D 06-08-2018 > and ignored the mm because obviously it is August and just focused on > the day. Which goes to show that it is important to understand what > a message means.] > > I'm not at all sure I understand what the various fields in the new > OAuth 2.0 tokens really mean. For example, section 4.1 about Actor > Claims says that a web application might receive a token expressing > that subject "admin" is acting for subject "user". The web > application could "exchange" that token for a new one showing itself > as the actor for "user". As a "chain of delegation", this is > confusing. It would seem that the original token could be used to > access resources, and the "exchange" of one token for another is not > necessary. > > The complications of delegation and "impersonation" and "may act for" > aside, section 7 (Privacy) seems to open a can of worms. Tokens may > "reveal details of the target services" and thus may give away > information about what the subject is doing or intends to do. But the > subject must send the token in order to access the resource. What is > a rational privacy policy for Oauth tokens? Will clients find it > expedient to include all their tokens in every request? How does a > client know which tokens a server can be trusted with? The document > suggests that the tokens should only be communicated according to the > privacy policies of the "respective organizations". How do two > organizations communicate their privacy policies to one another? > This section needs some amplification. > > The document is well-written, but the subject is complex. > > Hilarie > > --=20 _CONFIDENTIALITY NOTICE: This email may contain confidential and privileged= =20 material for the sole use of the intended recipient(s). Any review, use,=20 distribution or disclosure by others is strictly prohibited.=C2=A0 If you h= ave=20 received this communication in error, please notify the sender immediately= =20 by e-mail and delete the message and any file attachments from your=20 computer. Thank you._ --000000000000b9c229057319dc5b Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable
Hi Hilarie and thank you for the review.

In looking again at the example in section 4.1 about nest= ed Actor Claims I agree that the scenario depicted by the example is confus= ing and rather unrealistic. I'll endeavor to produce a better example i= n the next revision of the draft.=C2=A0 I think perhaps showing a chain of = delegation where the actors are different systems rather than mixing users = and systems would be more straightforward.

So= to be totally forthright, the Privacy Considerations section was written i= n response to a single but persistent mailing list commenter who was object= ing to this (and other drafts for that matter) on the grounds that details = of services being accessed and personal information may be revealed to the = entities involved. But as you've noted, that's kinda fundamental to= how this stuff works - the token is obtained and sent in order to access t= he resource. The Privacy Considerations text was basically just a compromis= e noting that the concerns had been heard but so the draft could move forwa= rd. Like many compromises, I don't know that anyone was particularly ha= ppy with this one. I don't think the text really adds any value - would= simply removing it close that can of worms? Or would perhaps incorporating= some text similar to what's in https://tools.ietf.org/html/rfc7523#section-7 be hel= pful here? I honestly don't know that much more concrete can be said ab= out it. But I'm certainly open to suggestions, should you have them.

Thanks,
Brian





---------- Forwarded m= essage ---------
From: Hilari= e Orman <hilarie@purplestreak.com>
Date: Wed, = Aug 8, 2018 at 1:47 AM
Subject: Security review of draft-ietf-oauth-toke= n-exchange-14
To: <iesg@ietf.org>, <secdir@ietf.org>
Cc: <draft-ietf-oauth-token-e= xchange.all@ietf.org>


Security review of draft-ietf= -oauth-token-exchange-14
OAuth 2.0 Token Exchange

I have reviewed this document as part of the security directorate's
ongoing effort to review all IETF documents being processed by the IESG. These comments were written primarily for the benefit of the security area<= br> directors.=C2=A0 Document editors and WG chairs should treat these comments=
just like any other last call comments.

The abstract states:
=C2=A0 =C2=A0This specification defines a protocol for an HTTP- and JSON- b= ased
=C2=A0 =C2=A0Security Token Service (STS) by defining how to request and ob= tain
=C2=A0 =C2=A0security tokens from OAuth 2.0 authorization servers, includin= g
=C2=A0 =C2=A0security tokens employing impersonation and delegation.

[This review is late because I mistook the due date,
dd-mm-yyyy =3D 06-08-2018
for
mm-dd-yyyy =3D 06-08-2018
and ignored the mm because obviously it is August and just focused on
the day.=C2=A0 Which goes to show that it is important to understand what a message means.]

I'm not at all sure I understand what the various fields in the new
OAuth 2.0 tokens really mean.=C2=A0 For example, section 4.1 about Actor Claims says that a web application might receive a token expressing
that subject "admin" is acting for subject "user".=C2= =A0 The web
application could "exchange" that token for a new one showing its= elf
as the actor for "user".=C2=A0 As a "chain of delegation&quo= t;, this is
confusing.=C2=A0 It would seem that the original token could be used to
access resources, and the "exchange" of one token for another is = not
necessary.

The complications of delegation and "impersonation" and "may= act for"
aside, section 7 (Privacy) seems to open a can of worms.=C2=A0 Tokens may "reveal details of the target services" and thus may give away information about what the subject is doing or intends to do.=C2=A0 But the=
subject must send the token in order to access the resource.=C2=A0 What is<= br> a rational privacy policy for Oauth tokens?=C2=A0 Will clients find it
expedient to include all their tokens in every request?=C2=A0 How does a client know which tokens a server can be trusted with?=C2=A0 The document suggests that the tokens should only be communicated according to the
privacy policies of the "respective organizations".=C2=A0 How do = two
organizations communicate their privacy policies to one another?
This section needs some amplification.

The document is well-written, but the subject is complex.=C2=A0

Hilarie


<= span style=3D"margin:0px;padding:0px;border:0px;outline:0px;vertical-align:= baseline;background:transparent;font-family:proxima-nova-zendesk,system-ui,= -apple-system,BlinkMacSystemFont,"Segoe UI",Roboto,Oxygen-Sans,Ub= untu,Cantarell,"Helvetica Neue",Arial,sans-serif;font-weight:600"= >CONFIDENTIALITY NOTICE: This email may contain confidenti= al and privileged material for the sole use of the intended recipient(s). A= ny review, use, distribution or disclosure by others is strictly prohibited= .=C2=A0 If you have received this communication in error, please notify the= sender immediately by e-mail and delete the message and any file attachmen= ts from your computer. Thank you. --000000000000b9c229057319dc5b-- From nobody Fri Aug 10 13:08:19 2018 Return-Path: X-Original-To: secdir@ietf.org Delivered-To: secdir@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id E7DBE130F93; Fri, 10 Aug 2018 13:08:11 -0700 (PDT) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: Adam Montville To: Cc: draft-ietf-httpbis-expect-ct.all@ietf.org, ietf@ietf.org, ietf-http-wg@w3.org X-Test-IDTracker: no X-IETF-IDTracker: 6.83.0 Auto-Submitted: auto-generated Precedence: bulk Message-ID: <153393169189.25497.11127631006997204258@ietfa.amsl.com> Date: Fri, 10 Aug 2018 13:08:11 -0700 Archived-At: Subject: [secdir] Secdir last call review of draft-ietf-httpbis-expect-ct-07 X-BeenThere: secdir@ietf.org X-Mailman-Version: 2.1.27 List-Id: Security Area Directorate List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 10 Aug 2018 20:08:12 -0000 Reviewer: Adam Montville Review result: Ready I have reviewed this document as part of the security directorate's ongoing effort to review all IETF documents being processed by the IESG. These comments were written primarily for the benefit of the security area directors. Document editors and WG chairs should treat these comments just like any other last call comments. The summary of the review is that this document is ready. Nits/comments from GENART and/or OPS reviews not repeated - I really didn't notice any nits beyond those. I felt that the document read rather well, and that the security and privacy considerations covered what needed to be covered. That said, the first paragraph of Section 4 (Security Considerations) could have a subsection of its own "Hostile Header Attacks", which would give the draft three, clear security considerations - Hostile Header Attacks, Maximum max-age, and Avoiding amplification attacks. From nobody Fri Aug 10 14:27:02 2018 Return-Path: X-Original-To: secdir@ietfa.amsl.com Delivered-To: secdir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id AF713130FC5; Fri, 10 Aug 2018 14:26:56 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.201 X-Spam-Level: X-Spam-Status: No, score=-4.201 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id jaPqgYeiUQ3x; Fri, 10 Aug 2018 14:26:54 -0700 (PDT) Received: from dmz-mailsec-scanner-8.mit.edu (dmz-mailsec-scanner-8.mit.edu [18.7.68.37]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 475BA12F1A5; Fri, 10 Aug 2018 14:26:54 -0700 (PDT) X-AuditID: 12074425-d6fff70000006a4e-09-5b6e031bf11a Received: from mailhub-auth-1.mit.edu ( [18.9.21.35]) (using TLS with cipher DHE-RSA-AES256-SHA (256/256 bits)) (Client did not present a certificate) by dmz-mailsec-scanner-8.mit.edu (Symantec Messaging Gateway) with SMTP id 8B.83.27214.C130E6B5; Fri, 10 Aug 2018 17:26:52 -0400 (EDT) Received: from outgoing.mit.edu (OUTGOING-AUTH-1.MIT.EDU [18.9.28.11]) by mailhub-auth-1.mit.edu (8.13.8/8.9.2) with ESMTP id w7ALQngM018684; Fri, 10 Aug 2018 17:26:50 -0400 Received: from kduck.kaduk.org (24-107-191-124.dhcp.stls.mo.charter.com [24.107.191.124]) (authenticated bits=56) (User authenticated as kaduk@ATHENA.MIT.EDU) by outgoing.mit.edu (8.13.8/8.12.4) with ESMTP id w7ALQjUr005599 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NOT); Fri, 10 Aug 2018 17:26:47 -0400 Date: Fri, 10 Aug 2018 16:26:45 -0500 From: Benjamin Kaduk To: Brian Campbell Cc: hilarie@purplestreak.com, The IESG , secdir@ietf.org, draft-ietf-oauth-token-exchange.all@ietf.org Message-ID: <20180810212645.GU40887@kduck.kaduk.org> References: <201808080746.w787kd74021069@rumpleteazer.rhmr.com> MIME-Version: 1.0 Content-Type: text/plain; charset=iso-8859-1 Content-Disposition: inline Content-Transfer-Encoding: 8bit In-Reply-To: User-Agent: Mutt/1.9.1 (2017-09-22) X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFlrDKsWRmVeSWpSXmKPExsUixCmqrCvDnBdtsHmXosXq/zcZLc5NfcZq sfXvJEaLGX8mMlt8WPiQxYHVY8mSn0wed49eZPF4+Uo8gDmKyyYlNSezLLVI3y6BK2P3neWM BbN0Kw52zGNuYOxV6WLk4JAQMJE4e76mi5GLQ0hgMZPEhaYeZghnI6PE+R/HmboYOYGcq0wS TW3xIDaLgKpE//cLjCA2m4CKREP3ZWYQW0RAX+L20znsIDazQJ3Ego/vWUEWCAs4SSz9kAkS 5gXa9bpvJiPE/LOMErcfPGGHSAhKnJz5hAWiV0di59Y7bCC9zALSEsv/cUCE5SWat84GW8Up ECjx4dERsHJRAWWJvX2H2CcwCs5CMmkWkkmzECbNQjJpASPLKkbZlNwq3dzEzJzi1GTd4uTE vLzUIl0LvdzMEr3UlNJNjKDAZ3dR3cE456/XIUYBDkYlHt4LG3OjhVgTy4orcw8xSnIwKYny Wt4BCvEl5adUZiQWZ8QXleakFh9ilOBgVhLhzTQFyvGmJFZWpRblw6SkOViUxHnv14RHCwmk J5akZqemFqQWwWRlODiUJHizmfKihQSLUtNTK9Iyc0oQ0kwcnCDDeYCGO4DU8BYXJOYWZ6ZD 5E8xWnLMOzp1EjPHn/cgcl/3tEnMQix5+XmpUuK8HCANAiANGaV5cDNBiUwie3/NK0ZxoBeF efNBqniASRBu6iughUxAC7M1Qb4pLklESEk1MGaodMqLsZxWLpr7kOGSW/6cL7MPnntfIdy0 Tvu4qVndynNdHhVn8z9MPR3Xd87yR4vZdi1W8e/52vHHjOyyQmLYV9ZMzTuXUhhjeedH37bw L9LF/rJbJqqu8f0Yo77z9TdhnpNCv5nbdFojdvz/FDT99j72Y2UxDhPapa0vsQqK1124paDl o8RSnJFoqMVcVJwIAAnjypE/AwAA Archived-At: Subject: Re: [secdir] Security review of draft-ietf-oauth-token-exchange-14 X-BeenThere: secdir@ietf.org X-Mailman-Version: 2.1.27 Precedence: list List-Id: Security Area Directorate List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 10 Aug 2018 21:26:57 -0000 On Fri, Aug 10, 2018 at 01:36:11PM -0600, Brian Campbell wrote: > Hi Hilarie and thank you for the review. > > In looking again at the example in section 4.1 about nested Actor Claims I > agree that the scenario depicted by the example is confusing and rather > unrealistic. I'll endeavor to produce a better example in the next revision > of the draft. I think perhaps showing a chain of delegation where the > actors are different systems rather than mixing users and systems would be > more straightforward. > > So to be totally forthright, the Privacy Considerations section was written > in response to a single but persistent mailing list commenter who was > objecting to this (and other drafts for that matter) on the grounds that > details of services being accessed and personal information may be revealed > to the entities involved. But as you've noted, that's kinda fundamental to > how this stuff works - the token is obtained and sent in order to access > the resource. The Privacy Considerations text was basically just a > compromise noting that the concerns had been heard but so the draft could > move forward. Like many compromises, I don't know that anyone was > particularly happy with this one. I don't think the text really adds any > value - would simply removing it close that can of worms? Or would perhaps > incorporating some text similar to what's in > https://tools.ietf.org/html/rfc7523#section-7 be helpful here? I honestly > don't know that much more concrete can be said about it. But I'm certainly > open to suggestions, should you have them. With the disclaimer that I haven't read token-exchange recently and am mostly going off my memory of the mailing list discussions, it seems like the key consideration here is that token exchange allows you to convert a token that may be opaque to you into one that has inspectable fields, and those fields can be privacy sensitive. So a JWT response should only be given to a requestor that trusted to know such information; a lot of the time, that has large overlap with being trusted to have the token in the first place, but potentially there is some amount of non-overlap. The considerations from 7523 of course also apply, and sensitive information should not be sent over unencrypted channels, but isn't the above paragraph an aspect inherently new to token exchange? -Benjamin > Thanks, > Brian > > > > > > ---------- Forwarded message --------- > > From: Hilarie Orman > > Date: Wed, Aug 8, 2018 at 1:47 AM > > Subject: Security review of draft-ietf-oauth-token-exchange-14 > > To: , > > Cc: > > > > > > Security review of draft-ietf-oauth-token-exchange-14 > > OAuth 2.0 Token Exchange > > > > I have reviewed this document as part of the security directorate's > > ongoing effort to review all IETF documents being processed by the IESG. > > These comments were written primarily for the benefit of the security area > > directors. Document editors and WG chairs should treat these comments > > just like any other last call comments. > > > > The abstract states: > > This specification defines a protocol for an HTTP- and JSON- based > > Security Token Service (STS) by defining how to request and obtain > > security tokens from OAuth 2.0 authorization servers, including > > security tokens employing impersonation and delegation. > > > > [This review is late because I mistook the due date, > > dd-mm-yyyy = 06-08-2018 > > for > > mm-dd-yyyy = 06-08-2018 > > and ignored the mm because obviously it is August and just focused on > > the day. Which goes to show that it is important to understand what > > a message means.] > > > > I'm not at all sure I understand what the various fields in the new > > OAuth 2.0 tokens really mean. For example, section 4.1 about Actor > > Claims says that a web application might receive a token expressing > > that subject "admin" is acting for subject "user". The web > > application could "exchange" that token for a new one showing itself > > as the actor for "user". As a "chain of delegation", this is > > confusing. It would seem that the original token could be used to > > access resources, and the "exchange" of one token for another is not > > necessary. > > > > The complications of delegation and "impersonation" and "may act for" > > aside, section 7 (Privacy) seems to open a can of worms. Tokens may > > "reveal details of the target services" and thus may give away > > information about what the subject is doing or intends to do. But the > > subject must send the token in order to access the resource. What is > > a rational privacy policy for Oauth tokens? Will clients find it > > expedient to include all their tokens in every request? How does a > > client know which tokens a server can be trusted with? The document > > suggests that the tokens should only be communicated according to the > > privacy policies of the "respective organizations". How do two > > organizations communicate their privacy policies to one another? > > This section needs some amplification. > > > > The document is well-written, but the subject is complex. > > > > Hilarie > > > > > > -- > _CONFIDENTIALITY NOTICE: This email may contain confidential and privileged > material for the sole use of the intended recipient(s). Any review, use, > distribution or disclosure by others is strictly prohibited.  If you have > received this communication in error, please notify the sender immediately > by e-mail and delete the message and any file attachments from your > computer. Thank you._ From nobody Fri Aug 10 22:48:25 2018 Return-Path: X-Original-To: secdir@ietfa.amsl.com Delivered-To: secdir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 68C78130FB2 for ; Fri, 10 Aug 2018 22:48:23 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.998 X-Spam-Level: X-Spam-Status: No, score=-1.998 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id TO4LNz6VmDvI for ; Fri, 10 Aug 2018 22:48:20 -0700 (PDT) Received: from mail-lj1-x244.google.com (mail-lj1-x244.google.com [IPv6:2a00:1450:4864:20::244]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 37ADF127332 for ; Fri, 10 Aug 2018 22:48:20 -0700 (PDT) Received: by mail-lj1-x244.google.com with SMTP id v9-v6so8720360ljk.4 for ; Fri, 10 Aug 2018 22:48:20 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:in-reply-to:references:from:date:message-id:subject:to :cc; bh=sBff6m+4K10f4zhjxVfzyIMBOLqi396qGDdAgAPGXL8=; b=ILMmlbTG1RMxJvhYfdtp5t43Fmt/fKroZMpoJ2w1yfMIof71lP3e26Y6oiYsiaV4di 96Dpi47x81a4XtUF+XsKuv8kiqn11Gn4S7BkY8GPbG0hfvvq407wTtNol/ibKYk5oKhq CsdgRUf7ONEzr4O6R/n5/JFagor/WRBpgmK1IiwNI7P1CgC7HokLr50sw35f4X2OkWKQ lzCGL/VsmhTBlusfP1oaLTRX9gD3FYaLtXo5Y0XAG9j1TjqtjraQOCGIg8icp++cYvxg Op8nPu6oJ50RTSba4A5ag7HpCzyuSXHmXa5Fa3TXZAFOD7sjqcKUoShsfrnYO6n/MX+c YFKw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:in-reply-to:references:from:date :message-id:subject:to:cc; bh=sBff6m+4K10f4zhjxVfzyIMBOLqi396qGDdAgAPGXL8=; b=U5K8av7n55c+X6MV1JFkQghilOXJRIn4MoSE4ScbneKjEZLdvlAoZnzn0ty2KXqe/F R3T+kDcPqBWjOskgH1KgpDCdDgIcDwGGyhAAVWpDvBGDJUIAyGvwFsoHDbrTyzK8qLR7 Y5c4I4NRPj5TpvJcDGb6n5Rem3v1vOnSEWg6zOAWlLZ3A+e09OpV4Ni1tDHmP2UZ8mWM uxINTLtCmKXmnwK3zRrZyhI0IYBq1cTOJp7GLcD0Auzt+2yHOI5BH9jSoSVVTpG8gStg u7CFPZorjPUXyNiXiGZ1nDd26OS9Qk0CfbCfYg4W1wG20rm7beF6g/vmLGcpjc2BRyH4 zrRQ== X-Gm-Message-State: AOUpUlFlomrHyOeS+t36M/Sb9BOTW9Tu9BoeS/wmyTQRTpsGLcWOsi77 F8TFvWeIcSldqmyDUIX584OiNebfZfDOoB4l2MQ= X-Google-Smtp-Source: AA+uWPx4m1O5Pp84iKJpSmJigke0n5KpBq/qxLmMfm3s2zK/pLGMQ+nY5fZfYuDpGBJYu5y2rZHiBCF4I0rfzFaaIW0= X-Received: by 2002:a2e:498:: with SMTP id a24-v6mr6757235ljf.27.1533966498227; Fri, 10 Aug 2018 22:48:18 -0700 (PDT) MIME-Version: 1.0 Received: by 2002:a2e:5012:0:0:0:0:0 with HTTP; Fri, 10 Aug 2018 22:48:17 -0700 (PDT) In-Reply-To: <20180807.105640.1680662026219965166.mbj@tail-f.com> References: <87po0fgf4f.fsf@nic.cz> <20180807.105640.1680662026219965166.mbj@tail-f.com> From: Shawn Emery Date: Fri, 10 Aug 2018 23:48:17 -0600 Message-ID: To: Martin Bjorklund Cc: lhotka@nic.cz, secdir@ietf.org, draft-ietf-netmod-schema-mount.all@tools.ietf.org Content-Type: multipart/alternative; boundary="000000000000396b2b0573226845" Archived-At: Subject: Re: [secdir] Review of draft-ietf-netmod-schema-mount-10 X-BeenThere: secdir@ietf.org X-Mailman-Version: 2.1.27 Precedence: list List-Id: Security Area Directorate List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 11 Aug 2018 05:48:24 -0000 --000000000000396b2b0573226845 Content-Type: text/plain; charset="UTF-8" Hi Martin, Ah, that would explain the disjointed text. Thanks for the followup and the reference. I'm fine with the original text in this case, given the scope of work otherwise. Regards, Shawn. -- On Tue, Aug 7, 2018 at 2:56 AM, Martin Bjorklund wrote: > Hi Shawn, > > As mentioned, this text comes from the YANG security template > (https://trac.ietf.org/trac/ops/wiki/yang-security-guidelines) that > has been approved by the security ADs. > > [This doesn't mean that the text can't be changed, but if it needs to > be changed, the template should be changed (after being approved by > the ADs).] > > But I brought this up in the WG, and a comment was made that *if* this > change is made, we also need to change not just this sentence, but > also the rest of the template; these are written as a list of data > nodes/subtrees and their corresponding sensitivity/vulnerability. So, > if the change is accepted, new drafts would need to be written as a > list of sensitivities/vulnerabilities with the data nodes and subtrees > to which they apply. > > So I suggest we keep the current text in this document. > > > /martin > > > > Ladislav Lhotka wrote: > > Hi Shawn, > > > > thank you for the review, please see my comment below. > > > > Shawn Emery writes: > > > > > Reviewer: Shawn M. Emery > > > Review result: Ready with nits > > > > > > I have reviewed this document as part of the security directorate's > > > ongoing effort to review all IETF documents being processed by the > IESG. > > > These comments were written primarily for the benefit of the security > > > area directors. Document editors and WG chairs should treat these > > > comments just like any other last call comments. > > > > > > This draft specifies a schema for YANG module mount points for yet > another > > > specified schema location. > > > > > > The security considerations section does exist and refers to transport > > > security > > > through SSH and HTTPS for NETCONF and RESTCONF, respectively. For > > > authorization, the spec refers to RFC 8341 for controlling NETCONF and > > > RESTCONF user access. Data that would be considered sensitive or > subject > > > to attack is briefly described and prescribes read access controls for > said > > > data. > > > I agree with the authors' assertions. > > > > > > General comments: > > > > > > None. > > > > > > Editorial comments: > > > > > > OLD: > > > > > > These are the subtrees and data nodes and their > sensitivity/vulnerability: > > > > > > NEW: > > > > > > The following should be considered for subtrees/data nodes and their > > > corresponding > > > > > > sensitivity/vulnerability: > > > > > > > The OLD formulation actually comes from RFC 6087, section 6.1 (Security > > Considerations Section Template). Your NEW formulation indeed looks > > better, so we will use it in the present draft, and I will also send it > > to the netmod mailing list in order to apply this change in > > draft-ietf-netmod-rfc6087bis. > > > > Thanks, Lada > > > > > > > > Shawn. > > > -- > > > > -- > > Ladislav Lhotka > > Head, CZ.NIC Labs > > PGP Key ID: 0xB8F92B08A9F76C67 > > > --000000000000396b2b0573226845 Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable
Hi Martin,

Ah, that would explain the= disjointed text.=C2=A0 Thanks for the followup and the reference.=C2=A0 I&= #39;m fine with the original text in this case, given the scope of work oth= erwise.

Regards,

Shawn.
--
On Tue, Aug 7, 2018 at 2:56 AM, Martin Bjorklund <mbj@tail-f.com> wrote:
Hi Shawn,

As mentioned, this text comes from the YANG security template
(https://trac.ietf.org/trac/ops/wik= i/yang-security-guidelines) that
has been approved by the security ADs.

[This doesn't mean that the text can't be changed, but if it needs = to
be changed, the template should be changed (after being approved by
the ADs).]

But I brought this up in the WG, and a comment was made that *if* this
change is made, we also need to change not just this sentence, but
also the rest of the template; these are written as a list of data
nodes/subtrees and their corresponding sensitivity/vulnerability. So,
if the change is accepted, new drafts would need to be written as a
list of sensitivities/vulnerabilities with the data nodes and subtrees
to which they apply.

So I suggest we keep the current text in this document.


/martin



Ladislav Lhotka <lhotka@nic.cz> = wrote:
> Hi Shawn,
>
> thank you for the review, please see my comment below.
>
> Shawn Emery <shawn.emery@g= mail.com> writes:
>
> > Reviewer: Shawn M. Emery
> > Review result: Ready with nits
> >
> > I have reviewed this document as part of the security directorate= 's
> > ongoing effort to review all IETF documents being processed by th= e IESG.
> > These comments were written primarily for the benefit of the secu= rity
> > area directors. Document editors and WG chairs should treat these=
> > comments just like any other last call comments.
> >
> > This draft specifies a schema for YANG module mount points for ye= t another
> > specified schema location.
> >
> > The security considerations section does exist and refers to tran= sport
> > security
> > through SSH and HTTPS for NETCONF and RESTCONF, respectively.=C2= =A0 For
> > authorization, the spec refers to RFC 8341 for controlling NETCON= F and
> > RESTCONF user access.=C2=A0 Data that would be considered sensiti= ve or subject
> > to attack is briefly described and prescribes read access control= s for said
> > data.
> > I agree with the authors' assertions.
> >
> > General comments:
> >
> > None.
> >
> > Editorial comments:
> >
> > OLD:
> >
> > These are the subtrees and data nodes and their sensitivity/vulne= rability:
> >
> > NEW:
> >
> > The following should be considered for subtrees/data nodes and th= eir
> > corresponding
> >
> > sensitivity/vulnerability:
> >
>
> The OLD formulation actually comes from RFC 6087, section 6.1 (Securit= y
> Considerations Section Template). Your NEW formulation indeed looks > better, so we will use it in the present draft, and I will also send i= t
> to the netmod mailing list in order to apply this change in
> draft-ietf-netmod-rfc6087bis.
>
> Thanks, Lada
>
> >
> > Shawn.
> > --
>
> --
> Ladislav Lhotka
> Head, CZ.NIC Labs
> PGP Key ID: 0xB8F92B08A9F76C67
>

--000000000000396b2b0573226845-- From nobody Sat Aug 11 08:47:15 2018 Return-Path: X-Original-To: secdir@ietfa.amsl.com Delivered-To: secdir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 7CD28131074 for ; Sat, 11 Aug 2018 08:47:05 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -0.998 X-Spam-Level: X-Spam-Status: No, score=-0.998 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, FREEMAIL_REPLY=1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=no autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ol6I1jsMgFQD for ; Sat, 11 Aug 2018 08:47:03 -0700 (PDT) Received: from mail-pl0-x244.google.com (mail-pl0-x244.google.com [IPv6:2607:f8b0:400e:c01::244]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 20A0F130FF9 for ; Sat, 11 Aug 2018 08:47:03 -0700 (PDT) Received: by mail-pl0-x244.google.com with SMTP id e11-v6so5225781plb.3 for ; Sat, 11 Aug 2018 08:47:03 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=subject:to:cc:references:from:openpgp:autocrypt:message-id:date :user-agent:mime-version:in-reply-to:content-language; bh=IaaRqQPOfp2PgllNT5aNesjqvpmcUd6sJmLSMPUTr2k=; b=UxQ5eoyFQMimJ4cHWYI/oML66DH2LbzLpYmEhArc9Y/QDdT3G2DV6/AevxHfRkb7SH wb/rCc4UbiRG646A128VYQM/ebAVYFypcN+sGjP/fDfcQFh02jCUxWGClRYoCv8iGys3 wuXXrrThSvBnuKQ4k1rKuwmfB4ZzANjt6jpMAVziVtUQna3JU091NSNMMnKXDmk/zZ6A XmPTSO7pOEqYsltyUDLTOqXBDf5tM2UxUrBQSXg/aZW0IBx5inGKPRVQmDsHXRcRLn0P 3He7/6ZRk+ExeMoJVHr5GwURx+lFG28VfkDGrOjzaQoYxjJ0q0+T05OYNSQSD0fkW3ok jnww== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:subject:to:cc:references:from:openpgp:autocrypt :message-id:date:user-agent:mime-version:in-reply-to :content-language; bh=IaaRqQPOfp2PgllNT5aNesjqvpmcUd6sJmLSMPUTr2k=; b=chyOGY8QBb6Ro11M5zIeiJv6s3kJs6bA0Fbya6RxcXLYXudHZs02uVEANpps2RwA/7 FnVPSD6DveFLxLXT3wXFNq2AEel11ECtzbZ0s+PdyDAEE54YJSCzuV4aBDR3oe2LoJ9R /ZXNvR8ncFZZYJRwC7lkf7s7jX4uzSR+k+zV+PWK/31gr0MPUdRHUWAbtuwxF3CbfWio JQpr5GzAkCZHW06MHQMQ7rb8AMujjfU3GtNnCtQ8yWxgc0lmowqgs8gVL0eMyWchGzig 4RemfsUD8fpWs+qvvd7dyDfflBX38cP0KIPdnGnngYaiTcO5AVnOcNESWjbXU4I0EpyF m/9A== X-Gm-Message-State: AOUpUlEEBIA4YPRDi20OD4KVWab6jmzCRQIvsriyRTSH4gZ2h89zKlF0 iwsWIJPUca7yvOlTJVewyDuZlx9E6TQ= X-Google-Smtp-Source: AA+uWPwPX0HEH25O+5ua9nX2TPcIU5ML9UOgU5pf50KNBnYJzXKhny2Cc+3KR0t/vp3kLjqUsiNSGw== X-Received: by 2002:a17:902:758a:: with SMTP id j10-v6mr10140877pll.281.1534002422496; Sat, 11 Aug 2018 08:47:02 -0700 (PDT) Received: from MBP.local (c-73-202-177-209.hsd1.ca.comcast.net. [73.202.177.209]) by smtp.gmail.com with ESMTPSA id y72-v6sm13828307pfg.10.2018.08.11.08.47.01 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Sat, 11 Aug 2018 08:47:01 -0700 (PDT) To: Shawn Emery , Martin Bjorklund Cc: lhotka@nic.cz, secdir@ietf.org, draft-ietf-netmod-schema-mount.all@tools.ietf.org References: <87po0fgf4f.fsf@nic.cz> <20180807.105640.1680662026219965166.mbj@tail-f.com> From: joel jaeggli Openpgp: preference=signencrypt Autocrypt: addr=joelja@gmail.com; prefer-encrypt=mutual; keydata= xsDiBD832SIRBADVEfzsfIX+fuN2XUPyyEXP4Mq8dqpjmcy+XTIHzZLVKzxmP+17zJYTj9MR dMA5vuZRsRpzFoeDMOJyHVVyaQeSwEApO3FJOej+CNAXpaTLYgobL1XcsQXMTbeNT5x9ZK+R ZQtoC8Vunv6UTygY+kHUHvNijhVtJtCcAW0NE2fiWwCgjKPAldaGNbPg6SKvSTFipsPPqoUE ALKjZApjCG/3Yi4kHgzCQw65mfE9u8O7bZcrvmzzRgmwShyQjrRNgxhwl2q9+e8Uo6kuk56q 0Q4On6y873W6EtBRYLTU5MiIK3mspi5YYpIi/F2XTkcW6Dx/C/ZQQ8WddAyX6QLAXHYMus86 x7tzjGM3HVlvJpWTb4CqcDOcvZakA/9aJhMEffleJx+6xrjZTUYvAQDYUSRWNmc+ehyAuh/B KH0DKqhkLlm0SBdsnKvQHXbdjhu9m9K4E6aR/s117QK60jZo1XNrVKJ1oM3X+2DNmDBl/K33 e/tPSC8byvD77doezHvWvE5n50KIEZezVgMkYWDSPWb0nefdXLY5+rgfms0fSm9lbCBKYWVn Z2xpIDxqb2VsamFAYm9ndXMuY29tPsJjBBMRAgAjAhsDBgsJCAcDAgQVAggDBBYCAwECHgEC F4AFAk3mKPcCGQEACgkQ8AA1q7Z/VrJ6vgCfYITQSd0+WXcYjEoj8+tNys5egPcAn3OUUHVt JElVkSSARJ4XWjRYqKiazsNNBD8320MQEACTNxol/GIZW4CGUnyIlr+13Dqx8aHZfbd96UQE Ys9mZkBxwP2V7D00tOETcY5apr9tr9oHf5p4xA2l2oE8KR4xbF6+0XIpeYzRcl5d0iUaSMwm HcX3J/+XyZegJqTG7zMEK72c1tPVrra9DRNZP+rhKFLJJornDiQJFQVhtQE37WA1kmC6rlyR KHA2RMYS3IugAgJfuy5pZn/5jKCv+ZxIv7tnk7GUQWwfPdr4PokPCBxSXUYch98Rcq3dbCio 8FPmrfI6K2Z9NMa/gXGpF3ynmxDJLY31aPgbUiv9VllZoeMkotbXHW1zrsXte/1MEgFrlkiQ WDJ/dHjlCdlFASfaPvVXxdiUgH7LV3cW+BOY2z4VVwhYM6/kTDoLKWZ3opBeN9KcAHPRFCkA fxwAu8PNgi74lMjcFzu66U8vVM37YqSYpXsi+mlwZDhzCJ8qm9FDwaH2bB1LJ7m41F098B29 SRG3s/XXgTCSt0js/yUp9EXRPQpME99GvwiBNFN9p9e45ZqS85Wll6GqHh+Jyvq0ODWH6XOz uop3UUqw6I2Q8rG7e/uxKWcFnt1q48uhdTHA0TfnYC5HpHf/tAuR+ui6s16xrENgFgeeu4b/ q/jA4N1ZuJU7IbnO5f28YTlJOef/HywY3OXBsrdhEXKLIc5xRj6NC4WphyQ9MQrx8cS1bwAD BQ//WNM1WUlr6tIn8/7SIqqHRg3UmzVNu4u+r9rK9LJkYRLA4xKb/TrqDhP9oyO7Oz2S5CsF wjiPc1vzGzfRgIOArPJrejM4BzHQ03tl1qb/5YNDaB1QzfPv6dT9OkhMMuth0tcmH5sjfbiF Nc41aKU5w4FFkTv3XmrXciz4+PWbAYGB7pYbhGmsx//9C2bS56Bu1QkFeSCzN5AvWAmJfyPU yMXFKDe21DlImMdkrn/K838Lm8o0CLOKbJBX8K0pE4rGEf20FLfmHx/bLZRcWhTm8cB/vHNd 8GhwFlvHylj6+5QtR0Tc0hBcOG8SZktjE/hEiYi+dAZCrwT9i8Hjulnx/vu+Knt40+5CB2hk L1VQwdGWLYO4FGqWwwv0Y8XhWOudLYCZQWrgOsIzYezahC5b9iobFx8dgAElXNPTxI/dymrI d/6foyBrGnzzOnV/gfWfQp7N1rbrh0mQXRhwwwQIjlmbUyz8fTlaTcAo8ocXTVUb6WY7U5nr ufzKsFceR/olFnvZKKhbGVG6VvqNLS1r5lcRR1J7GVZM+Sb2ZNKgnwiUf8yxKfWg84NUPt/b etviJ73LVPdjV1PNZgcxfPRO3XL6Y9FaBP9oB4f58ujuhzOLUt+6I0KuzY8H5RBBaIrJJptl DEOnxFn1J7Q0uxQ2BzqfZdKTwJS4OCjm+OsLd8HCRgQYEQIABgUCPzfbQwAKCRDwADWrtn9W soUzAJ4zatxnKYcGdyoFojBc1Y2jqaHZsQCbB25DmeFRx14xxuxdAXb0wsKf35w= Message-ID: <271413a7-d204-ad36-985b-5fbb7271dfed@gmail.com> Date: Sat, 11 Aug 2018 08:47:00 -0700 User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.13; rv:52.0) Gecko/20100101 Thunderbird/52.9.1 MIME-Version: 1.0 In-Reply-To: Content-Type: multipart/alternative; boundary="------------0ABC812B6B05FA705C7C84F0" Content-Language: en-US Archived-At: Subject: Re: [secdir] Review of draft-ietf-netmod-schema-mount-10 X-BeenThere: secdir@ietf.org X-Mailman-Version: 2.1.27 Precedence: list List-Id: Security Area Directorate List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 11 Aug 2018 15:47:13 -0000 This is a multi-part message in MIME format. --------------0ABC812B6B05FA705C7C84F0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 8bit thanks joel On 8/10/18 10:48 PM, Shawn Emery wrote: > Hi Martin, > > Ah, that would explain the disjointed text.  Thanks for the followup > and the reference.  I'm fine with the original text in this case, > given the scope of work otherwise. > > Regards, > > Shawn. > -- > On Tue, Aug 7, 2018 at 2:56 AM, Martin Bjorklund > wrote: > > Hi Shawn, > > As mentioned, this text comes from the YANG security template > (https://trac.ietf.org/trac/ops/wiki/yang-security-guidelines > ) that > has been approved by the security ADs. > > [This doesn't mean that the text can't be changed, but if it needs to > be changed, the template should be changed (after being approved by > the ADs).] > > But I brought this up in the WG, and a comment was made that *if* this > change is made, we also need to change not just this sentence, but > also the rest of the template; these are written as a list of data > nodes/subtrees and their corresponding sensitivity/vulnerability. So, > if the change is accepted, new drafts would need to be written as a > list of sensitivities/vulnerabilities with the data nodes and subtrees > to which they apply. > > So I suggest we keep the current text in this document. > > > /martin > > > > Ladislav Lhotka > wrote: > > Hi Shawn, > > > > thank you for the review, please see my comment below. > > > > Shawn Emery > writes: > > > > > Reviewer: Shawn M. Emery > > > Review result: Ready with nits > > > > > > I have reviewed this document as part of the security > directorate's > > > ongoing effort to review all IETF documents being processed by > the IESG. > > > These comments were written primarily for the benefit of the > security > > > area directors. Document editors and WG chairs should treat these > > > comments just like any other last call comments. > > > > > > This draft specifies a schema for YANG module mount points for > yet another > > > specified schema location. > > > > > > The security considerations section does exist and refers to > transport > > > security > > > through SSH and HTTPS for NETCONF and RESTCONF, respectively.  For > > > authorization, the spec refers to RFC 8341 for controlling > NETCONF and > > > RESTCONF user access.  Data that would be considered sensitive > or subject > > > to attack is briefly described and prescribes read access > controls for said > > > data. > > > I agree with the authors' assertions. > > > > > > General comments: > > > > > > None. > > > > > > Editorial comments: > > > > > > OLD: > > > > > > These are the subtrees and data nodes and their > sensitivity/vulnerability: > > > > > > NEW: > > > > > > The following should be considered for subtrees/data nodes and > their > > > corresponding > > > > > > sensitivity/vulnerability: > > > > > > > The OLD formulation actually comes from RFC 6087, section 6.1 > (Security > > Considerations Section Template). Your NEW formulation indeed looks > > better, so we will use it in the present draft, and I will also > send it > > to the netmod mailing list in order to apply this change in > > draft-ietf-netmod-rfc6087bis. > > > > Thanks, Lada > > > > > > > > Shawn. > > > -- > > > > -- > > Ladislav Lhotka > > Head, CZ.NIC Labs > > PGP Key ID: 0xB8F92B08A9F76C67 > > > > --------------0ABC812B6B05FA705C7C84F0 Content-Type: text/html; charset=utf-8 Content-Transfer-Encoding: 8bit

thanks

joel


On 8/10/18 10:48 PM, Shawn Emery wrote:
Hi Martin,

Ah, that would explain the disjointed text.  Thanks for the followup and the reference.  I'm fine with the original text in this case, given the scope of work otherwise.

Regards,

Shawn.
--
On Tue, Aug 7, 2018 at 2:56 AM, Martin Bjorklund <mbj@tail-f.com> wrote:
Hi Shawn,

As mentioned, this text comes from the YANG security template
(https://trac.ietf.org/trac/ops/wiki/yang-security-guidelines) that
has been approved by the security ADs.

[This doesn't mean that the text can't be changed, but if it needs to
be changed, the template should be changed (after being approved by
the ADs).]

But I brought this up in the WG, and a comment was made that *if* this
change is made, we also need to change not just this sentence, but
also the rest of the template; these are written as a list of data
nodes/subtrees and their corresponding sensitivity/vulnerability. So,
if the change is accepted, new drafts would need to be written as a
list of sensitivities/vulnerabilities with the data nodes and subtrees
to which they apply.

So I suggest we keep the current text in this document.


/martin



Ladislav Lhotka <lhotka@nic.cz> wrote:
> Hi Shawn,
>
> thank you for the review, please see my comment below.
>
> Shawn Emery <shawn.emery@gmail.com> writes:
>
> > Reviewer: Shawn M. Emery
> > Review result: Ready with nits
> >
> > I have reviewed this document as part of the security directorate's
> > ongoing effort to review all IETF documents being processed by the IESG.
> > These comments were written primarily for the benefit of the security
> > area directors. Document editors and WG chairs should treat these
> > comments just like any other last call comments.
> >
> > This draft specifies a schema for YANG module mount points for yet another
> > specified schema location.
> >
> > The security considerations section does exist and refers to transport
> > security
> > through SSH and HTTPS for NETCONF and RESTCONF, respectively.  For
> > authorization, the spec refers to RFC 8341 for controlling NETCONF and
> > RESTCONF user access.  Data that would be considered sensitive or subject
> > to attack is briefly described and prescribes read access controls for said
> > data.
> > I agree with the authors' assertions.
> >
> > General comments:
> >
> > None.
> >
> > Editorial comments:
> >
> > OLD:
> >
> > These are the subtrees and data nodes and their sensitivity/vulnerability:
> >
> > NEW:
> >
> > The following should be considered for subtrees/data nodes and their
> > corresponding
> >
> > sensitivity/vulnerability:
> >
>
> The OLD formulation actually comes from RFC 6087, section 6.1 (Security
> Considerations Section Template). Your NEW formulation indeed looks
> better, so we will use it in the present draft, and I will also send it
> to the netmod mailing list in order to apply this change in
> draft-ietf-netmod-rfc6087bis.
>
> Thanks, Lada
>
> >
> > Shawn.
> > --
>
> --
> Ladislav Lhotka
> Head, CZ.NIC Labs
> PGP Key ID: 0xB8F92B08A9F76C67
>


--------------0ABC812B6B05FA705C7C84F0-- From nobody Sun Aug 12 13:10:12 2018 Return-Path: X-Original-To: secdir@ietfa.amsl.com Delivered-To: secdir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 012A8130E3A for ; Sun, 12 Aug 2018 13:10:08 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.6 X-Spam-Level: X-Spam-Status: No, score=-2.6 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_LOW=-0.7] autolearn=unavailable autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id RnRXuBKx52fI for ; Sun, 12 Aug 2018 13:10:05 -0700 (PDT) Received: from smtp.rcn.com (smtp.rcn.com [69.168.97.78]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id DAE13130E34 for ; Sun, 12 Aug 2018 13:10:02 -0700 (PDT) X_CMAE_Category: , , X-CNFS-Analysis: v=2.2 cv=NsqTSIVJ c=1 sm=1 tr=0 a=OXtaa+9CFT7WVSERtyqzJw==:117 a=OXtaa+9CFT7WVSERtyqzJw==:17 a=KGjhK52YXX0A:10 a=IkcTkHD0fZMA:10 a=NTnny0joGdQA:10 a=dapMudl6Dx4A:10 a=bmmO2AaSJ7QA:10 a=48vgC7mUAAAA:8 a=BTUBnpS-AAAA:8 a=qDSgk0hgdLuUzsV7JjgA:9 a=2M42e5AtO2uYH3dV:21 a=sxKGVdlmf7vf2Aje:21 a=QEXdDO2ut3YA:10 a=w1C3t2QeGrPiZgrLijVG:22 a=pblkFgjdBCuYZ9-HdJ6i:22 X-CM-Score: 0 X-Scanned-by: Cloudmark Authority Engine X-Authed-Username: ZHNlb21uQHJjbi5jb20= Authentication-Results: smtp01.rcn.cmh.synacor.com header.from=david+work@mandelberg.org; sender-id=neutral Authentication-Results: smtp01.rcn.cmh.synacor.com smtp.mail=david@mandelberg.org; spf=neutral; sender-id=neutral Authentication-Results: smtp01.rcn.cmh.synacor.com smtp.user=dseomn@rcn.com; auth=pass (LOGIN) Received-SPF: neutral (smtp01.rcn.cmh.synacor.com: 209.6.43.168 is neither permitted nor denied by domain of mandelberg.org) Received: from [209.6.43.168] ([209.6.43.168:57880] helo=uriel.mandelberg.org) by smtp.rcn.com (envelope-from ) (ecelerity 3.6.25.56547 r(Core:3.6.25.0)) with ESMTPSA (cipher=DHE-RSA-AES256-GCM-SHA384) id BF/6F-43615-714907B5; Sun, 12 Aug 2018 16:09:59 -0400 Received: from [0.0.0.0] (DD-WRT [192.168.1.1]) by uriel.mandelberg.org (Postfix) with ESMTPSA id 2E6D61C605C; Sun, 12 Aug 2018 16:09:58 -0400 (EDT) From: David Mandelberg To: Kent Watsen , "draft-ietf-netconf-zerotouch.all@ietf.org" , "iesg@ietf.org" , "secdir@ietf.org" References: <361393b0-6666-08ff-bdf4-3ba3bf4323c7@mandelberg.org> <47EEE9B6-5BC2-4A1F-ABB2-2ACB1C494545@juniper.net> <4579f9bf-0ead-a6af-dc80-a841527414eb@mandelberg.org> <51E98D22-1DBF-4069-A750-90987EB96B0D@juniper.net> Message-ID: Date: Sun, 12 Aug 2018 16:09:53 -0400 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Thunderbird/52.9.1 MIME-Version: 1.0 In-Reply-To: <51E98D22-1DBF-4069-A750-90987EB96B0D@juniper.net> Content-Type: text/plain; charset=utf-8; format=flowed Content-Language: en-US Content-Transfer-Encoding: 7bit Archived-At: Subject: Re: [secdir] secdir review of draft-ietf-netconf-zerotouch-22 X-BeenThere: secdir@ietf.org X-Mailman-Version: 2.1.27 Precedence: list List-Id: Security Area Directorate List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 12 Aug 2018 20:10:08 -0000 On 08/09/2018 08:23 PM, Kent Watsen wrote: > Hi David, > > Sorry for the delay. I've been busy with work and travel. No worries. > I'm keeping the entire history for posterity, but please > trim down to remaining points if you like. > > Thanks, > Kent > > > >>>> Is there any protection against old signed Zero Touch Information? I see >>>> that Ownership Vouchers and Owner Certificates both have mechanisms for >>>> expiration (and for certs, revocation), but I don't see anything >>>> comparable for redirect or onboarding information. If an owner creates a >>>> valid redirect or onboarding object and discovers a bug in it, is there >>>> any way for the owner to make that object no-longer-valid without >>>> getting an entirely new owner certificate and revoking the old cert? Is >>>> that intentional? >>> >>> No, as you say, it is not possible to revoke signed data, other than >>> to revoke the Owner Certificate associated with the private key that >>> signed it. >>> >>> I wouldn't say that this was/is intentional, other than note that >>> it seems consistent with assumptions made when the bootstrapping >>> device obtains unsigned data from a trusted bootstrap server, in >>> that the data is only protected by the bootstrap server's TLS >>> certificate; the device can check that the certificate hasn't been >>> revoked, but that doesn't say anything about the current validity >>> of the data. >> >> I think the TLS case and the case of signed objects transmitted >> over insecure channels/mediums are different, because of TLS's >> replay protection. >> >> >>> Do you think a Security Consideration would cover it? Something >>> like: >>> >>> Zerotouch information, regardless of how obtained or how >>> trusted, does not have a validity assertion beyond the PKI >>> used to authenticate it. Zerotouch information neither >>> expires nor can be revoked. When provided by a trusted >>> bootstrap server, the validity of the zerotouch information >>> is implied by its availability. However, when zerotouch >>> information is provided outside the purview of a bootstrap >>> server (i.e., signed data on a removable storage device), >> >> I'd suggest adding a word to make that "a trusted bootstrap server". >> (Bootstrap servers can be untrusted, right?) >> >>> its current validity is less certain. Operators are advised >>> to ensure only accurate zerotouch information is ever >>> published. In case inaccurate zerotouch information is >>> published, or otherwise deemed no longer valid, and it is >>> deemed a security risk, the signing certificate SHOULD be >>> revoked and a new one created having a chain to trust >>> leading to the same 'pinned-domain-certificate' provided >>> in the Ownership Voucher for the device. However, doing >>> so, will necessarily affect the validity of any other >>> previously published zerotouch information artifacts >>> signed using the just-revoked certificate. It the need >>> to do this is fairly common, operators can define an >>> Owner Certificate per device. >> >> Owner certs can be valid for years, right? My intuition (which might be >> wrong) is that it's hard enough to remember every old configuration used >> in the past few years, that operators won't really know if any of the >> old configurations should be "deemed a security risk". You probably have >> a better understanding of the operational environments this protocol >> will be used in though. If you don't think there's a significant >> operational security risk from this, then I'm happy with your text. > > Yes, owner certs could be valid for years, though, in practice, I > optimistically imagine that they'd be refreshed annually. > > I was writing the Security Considerations for this when it seemed > that the better thing to do here is to instead add "not-before" and > "not-after" leafs to the zerotouch information artifact. The draft > would then explain that devices MUST ensure the current time is in > between. > > Would such an addition resolve this issue for you? Yes, that would work. It probably makes sense to say something in the security considerations about keeping those validity intervals short. If you prefer to leave the data formats and implementations unchanged, you could also consider using per-CMS EE certificates, like the RPKI does: https://tools.ietf.org/html/rfc6480#section-2.3. (I haven't thought about how compatible that method is with zerotouch, I'm just mentioning it as an alternative in case it happens to be easier for you.) >>>> It seems like this protocol places more trust in device manufacturers >>>> than was previously required, but I don't see any discussion of that in >>>> the security considerations. If necessary, is there any way to disable >>>> zero touch, and configure a device manually? E.g., if the supply chain >>>> is presumed-secure, but the manufacturer's well-known bootstrap server >>>> is compromised, is there any way to securely provision a new device? >>> >>> Regarding placing more trust in device manufacturers, and a >>> potential Security Considerations statement, I'm trying to >>> determine what statements you're looking for. >>> >>> But first, I think you mean "well-known bootstrap servers" more >>> so than "manufacturers". AFAIK, the draft never says in normative >>> text that the well-known bootstrap servers are hosted by the >>> manufacturer (though entirely possible and somewhat likely). >> >> Correct, sorry for the assumption. >> >>> So maybe a couple Security Consideration statements related to: >>> >>> 1) the security issue that the well-known bootstrap server may have >>> been compromised. Though, it seems that this is a statement that >>> any TLS-protected resource could make. >>> >>> 2) the privacy issue that the information provided to the well-known >>> bootstrap service may be visible to others (e.g., admins of the >>> bootstrap server) if not encrypted. >>> >>> Are these what you had in mind? If not, can you please jot down a >>> few lines capturing what you hope to see? >> >> Those are part of what I had in mind, but I'm looking for something at a >> higher level. It seems that the nature of this protocol is to shift some >> control of initial configuration away from the owner and towards the >> manufacturer (or whoever picks the list of well-known bootstrap servers) >> and/or the well-known bootstrap server operators. That's not a problem >> at all, it would just be nice to see some discussion of that shift in >> control. It would be even greater to see a discussion of how that shift >> in control matches up with a threat model. >> >> Does that make sense? I'm not sure how much that's in scope for this >> particular document, it just seems like there's some major stuff going >> on with owners needing to trust others more in ways that they did not >> without zerotouch, so it would be good to see an explanation of the >> extent of that somewhere. > > Is this what you had in mind? Yes, thank you! > 9.9. Increased Reliance on Manufacturers > > The zero touch bootstrapping protocol presented in this document > shifts some control of initial configuration away from the rightful > owner of the device and towards the manufacturer and its delegates. > > The manufacturer maintains the list of well-known bootstrap servers > its devices will trust. By design, if no bootstrapping data is found > via other methods first, the device will try to reach out to the > well-known bootstrap servers. There is no mechanism to prevent this > from occurring other than by using an external firewall to block such > connections. Concerns related to trusted bootstrap servers are > discussed in Section 9.10. > > Similarly, the manufacturer maintains the list of voucher signing > authorities its devices will trust. The voucher signing authorities > issue the vouchers that enable a device to trust an owner's domain > certificate. It is vital that manufacturers ensure the integrity of > these voucher signing authorities, so as to avoid incorrect > assignments. > > Operators should be aware that this system assumes that they trust > all the pre-configured bootstrap servers and voucher signing > authorities designated by the manufacturers. > > 9.10. Concerns with Trusted Bootstrap Servers > > Trusted bootstrap servers, whether well-known or discovered, have the > potential cause problems, such as the following. > > o A trusted bootstrap server that has been compromised may be > modified to return unsigned data of any sort. For instance, a > bootstrap server that is only supposed to return redirect > information might be modified to return onboarding information. > Similarly, a bootstrap server that is only supposed to return > signed data, may be modified to return unsigned data. In both > cases, the device will accept the response, unaware that it wasn't > suppose to be any different. It is RECOMMENDED that maintainers > of trusted bootstrap servers ensure that their systems are not > easily compromised and, it case of compromise, have mechanisms in > place to detect and remediate the compromise as expediently as > possible. > > o A trusted bootstrap server hosting either unsigned or signed but > not encrypted data may disclose information to unwanted parties > (e.g., an administrator of the bootstrap server). This is a > privacy issue only, but could reveal information that might be > used in a subsequent attack. Disclosure of redirect information > has limited exposure (it is just a list of bootstrap servers), > whereas disclosure of onboarding information could be highly > revealing (e.g., network topology, firewall policies, etc.). It > is RECOMMENDED that operators encrypt the bootstrapping data when > its contents are considered sensitive. > > > >>> Regarding "is there any way to disable zero touch, and configure a >>> device manually", I think that this is outside the scope of the >>> document. Some vendors may lock down a device such that it can >>> only activate thru the bootstrapping process, while other devices >>> simultaneously enable console access. >> >> ACK. I think those have significant effects on security, but it's fine >> if it's out of scope. >> >> >>> Regarding "is there any way to securely provision a new device" >>> when a well-known bootstrap server is known to be compromised. My >>> first thought is, if it's known to be compromised, then it's also >>> likely patched. But let's say the issue is more like an operator >>> not trusting a particular well-known bootstrap server for some >>> other reason, and would like to never allow devices to obtain >>> bootstrapping data there...then the options are slim, an external >>> firewall policy blocking access to that bootstrap server may be >>> needed. >> >> That type of remedy sounds out of scope, but to my initial point above, >> I think it might be worth saying something along the lines of "this >> system assumes that owners trust all pre-configured well-known bootstrap >> servers to configure their devices". > > Done, factored into the text above. > > > >>>> Section 3.4 mentions a device identify certificate. I assume the >>>> public keys in those certificates are unique per-device? If not, >>>> I want to think a bit more about possible attacks where the >>>> attacker correlates encrypted artifacts without being able to >>>> decrypt them. >>> >>> Yes, probabilistically/cryptographically unique keys per device. >> >> ACK, I have no concern here then. >> >> >>>> Section 5.4 says what to do "if the revocation status is not >>>> attainable". What does that mean precisely? E.g., I assume failure to >>>> download a CRL, absence of a CRL in the CMS data, and failure to contact >>>> an OCSP server all count. But what if the device acquires a valid CRL >>>> that is stale (nextUpdate < now)? >>> >>> Yes, exactly, it meant to cover those cases, as well as the "stale" >>> case, though I admit the text doesn't exactly say it. How about this? >>> >>> OLD >>> if the revocation status is unattainable >>> NEW >>> if suitably-fresh revocation status is unattainable >> >> Looks good. >> >> >>>> If I'm understanding correctly, the intent of well-known bootstrap >>>> servers is that the manufacturer can redirect devices to customer >>>> bootstrap servers that have the actual onboarding information. But I >>>> also don't see any reason that a (potentially compromised) trusted >>>> manufacturer's bootstrap server couldn't provide the onboarding >>>> information directly. It's probably easier to secure the (potentially >>>> offline) private keys used to sign ownership vouchers than it is to >>>> secure the (presumably highly available, online) well-known bootstrap >>>> servers. So it seems like the system as a whole could be more secure if >>>> well-known bootstrap servers could only provide untrusted redirects. >>> >>> First, let's replace "manufacturer" with "well-known bootstrap server" >>> above. But, to your main point, absolutely, any bootstrap-server could >>> return either redirect or onboarding information, and perhaps it is a >>> feature for some well-known bootstrap servers to do so. And yes again, >>> the keys for an online service are potentially more easily compromised, >>> perhaps a Security Consideration for the use of HSMs similar to [1] >>> would help? While I agree with your conclusion, it brings into question >>> what "trusted" means. What about an OCSP server with its online key? >>> If the manufacturer no longer deems (through audits or whatever) that >>> a well-known bootstrap server is no longer trusted, it can revoke the >>> bootstrap server's certificate. Just wondering, is this really a >>> problem? Can a Security Consideration be used to address this to >>> your satisfaction? >>> >>> [1] https://tools.ietf.org/html/draft-ietf-anima-voucher-07#section-7.2 >> >> Since it's intentional that a well-known bootstrap server can return >> onboarding information, then I think this is just another part the high >> level discussion of the shift in control that I asked for above. > > I believe that this is addressed in text above (s9.10), good? Looks good. >>>> I don't understand the error cases around the "flag to enable zerotouch >>>> bootstrapping" in section 5.1. How exactly is that flag set to false? Is >>>> it by the initial configuration step in section 5.6? If that's where the >>>> flag is set to false, won't some owners forget to include that in their >>>> config? Also, how atomic is the application of initial configuration? Is >>>> there any possible case in which some of the initial configuration can >>>> be applied without touching the flag, so that the device appears to be >>>> correctly configured, but will try to bootstrap again on the next >>>> reboot? Conversely, can the flag be set to false without the device >>>> being fully configured? (I don't think that's a security issue, just >>>> potentially a management headache.) >>> >>> Yes, the initial-step in Section 5.6. Yes, some operators may forget >>> (though they will learn). The config is intended to either be applied >>> completely or not at all. The second paragraph in section 5.6 says >>> "If the device encounters an error at any step, it MUST NOT proceed >>> to the next step." Perhaps the 6th paragraph in that section could >>> could state that an "error" constitutes anything less than 100%? >> >> Do you think it's worth adding a warning to operators somewhere to >> remind them to change the flag? Or maybe the "device SHOULD report a >> warning if the bootstrapping completes successfully but zerotouch >> bootstrapping is still enabled"? >> >> I think it's already clear what an error in paragraph 6 is. What I found >> unclear was what to do with errors in paragraphs 6 or 7. Yes, don't go >> on to the next step, but what about: In paragraph 6, should the device >> rollback any partial config update if there's an error? In paragraph 7, >> should the device rollback all config from paragraph 6 if there's an error? > > This very same issue was raised to me separately and my response has been > to essentially rewrite section 5.6 to be crystal clear on how errors are > handled, especially with regard to state retained. Please see attached > for a preview of -23. Much better, thanks! >>>> Section 9.4 says to assume owner certificates "are not revokable" if >>>> there's no accurate clock. Is there no value in checking for a CRL or >>>> OCSP response, even without the ability to determine if it's recent? It >>>> seems to me that checking with an active server (CRL Distribution Point >>>> or OCSP server, as opposed to a stapled CRL or OCSP response) would make >>>> it significantly harder (not infeasible, just harder) for an attacker to >>>> use a revoked cert against a device with no clock. >>> >>> Okay, fair point, a live response sort of reflects "now", regardless >>> what the device clock says. That said, without an accurate clock, the >>> device wouldn't be able to validate the signing certificate and, if >>> provided over an HTTPS transport, it wouldn't be able to validate the >>> server's end-entity certificate either. In fact, certain device bad >>> clock values might actually block the TLS connection due to it being >>> outside the end-entity cert's validity period. Ugh. Currently the >>> text says that device "implementations should assume [things] are not >>> revocable" - do you want to add a text like "but MAY check 'current' >>> revocation using on online CRL Distribution Point or >>> OCSP server"? >> >> Good points. I'm not sure what the right answer is, so I'll defer >> to you on this. > > I think the current text is good. Anymore and we risk messing something > up. > > > >>> BTW, the end of this section says "Implementations SHOULD NOT rely on >>> NTP for time, as NTP is not a secure protocol." - any thoughts on this >>> statement? >> >> I know very little about the security of time synchronization, sorry. > > Okay. > > > > /kw > > -- https://david.mandelberg.org/ From nobody Mon Aug 13 10:37:37 2018 Return-Path: X-Original-To: secdir@ietfa.amsl.com Delivered-To: secdir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id B1176130FCA for ; Mon, 13 Aug 2018 10:37:35 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.999 X-Spam-Level: X-Spam-Status: No, score=-1.999 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=pingidentity.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 7nJdamV_fRL3 for ; Mon, 13 Aug 2018 10:37:33 -0700 (PDT) Received: from mail-it0-x22a.google.com (mail-it0-x22a.google.com [IPv6:2607:f8b0:4001:c0b::22a]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id A4397130FCD for ; Mon, 13 Aug 2018 10:37:18 -0700 (PDT) Received: by mail-it0-x22a.google.com with SMTP id h23-v6so15251455ita.5 for ; Mon, 13 Aug 2018 10:37:18 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=pingidentity.com; s=gmail; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=dOLuwW7Oh3OKvHzH+9QHpgxZjeBwR6YsL1CuAyt581o=; b=L9vHMc0ta+XeZyMxvNruyWH0bYlOC/Av5RMkjmAgxpvPdII+tEYvIVTr3cIApe2LtB NqkIQIlGW0ESO09oLroWuVT5xOycJz8m6C3jWOqZeFOyzcxaBvOIFkSeEUPEcNjrvHfs Gx2Fq1idWullFN/t9bWcl4mrjbMCorPCNv1gU= X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=dOLuwW7Oh3OKvHzH+9QHpgxZjeBwR6YsL1CuAyt581o=; b=KrECdh2KT+T04SIwyj1RzMpyapq/usWSrAoDdYsXxdKvXCK/HhwD2JbSRImdiII9vT Lyy6HrRFAReqPb1RPEDdSlhx5BKOfEHfHNSF/YUgmNBwKlAXwbqB1tgCUJH77+1t6phJ qvqW7iAlu+IunnUD322lZrq1AvOlkD12FaTL/IcMIV6955B0WA+Ru728nVjvGw0UrnFg Y0Hjoe3N/G/wV5FV/LiXYNiG6rBc1PgjspEXuUETs5Ei7r2eEWOBBQ1ntpx+65WFZ8cw 3rO3QxnGaSWPMbaULVO8eyA3XaaoTW979wlx+05wJsY22jfbpuYaq2bmfDdo9rdQVzWr dbwA== X-Gm-Message-State: AOUpUlHo3iZC1QdiGJXxVnNlvaeCleYxu8NiQmEU6MK0EADvmFvCwDNw ZSHenzH4RnqDXLFGssWFOrSqYEzBmoYR507TDNefZk5QI3clfRS+aaB9Nm1KrJhEdv9ZA/hob2u 6VLHjIkAeg+Umgg0= X-Google-Smtp-Source: AA+uWPyRrI6tXPc917DaPmN5rN9Vok97wRtVyciPjv/NClBTYD0C7XWED/qgjMZh8ZAaSQHlE1I0pxe3f85hhKAp18I= X-Received: by 2002:a24:a308:: with SMTP id p8-v6mr11770302ite.53.1534181837673; Mon, 13 Aug 2018 10:37:17 -0700 (PDT) MIME-Version: 1.0 References: <201808080746.w787kd74021069@rumpleteazer.rhmr.com> <20180810212645.GU40887@kduck.kaduk.org> In-Reply-To: <20180810212645.GU40887@kduck.kaduk.org> From: Brian Campbell Date: Mon, 13 Aug 2018 11:36:49 -0600 Message-ID: To: Benjamin Kaduk Cc: hilarie@purplestreak.com, The IESG , secdir@ietf.org, draft-ietf-oauth-token-exchange.all@ietf.org Content-Type: multipart/alternative; boundary="00000000000074d42f0573548b3f" Archived-At: Subject: Re: [secdir] Security review of draft-ietf-oauth-token-exchange-14 X-BeenThere: secdir@ietf.org X-Mailman-Version: 2.1.27 Precedence: list List-Id: Security Area Directorate List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 13 Aug 2018 17:37:36 -0000 --00000000000074d42f0573548b3f Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable On Fri, Aug 10, 2018 at 3:26 PM Benjamin Kaduk wrote: > ... > With the disclaimer that I haven't read token-exchange recently and am > mostly going off my memory of the mailing list discussions, it seems like > the key consideration here is that token exchange allows you to convert a > token that may be opaque to you into one that has inspectable fields, and > those fields can be privacy sensitive. So a JWT response should only be > given to a requestor that trusted to know such information; a lot of the > time, that has large overlap with being trusted to have the token in the > first place, but potentially there is some amount of non-overlap. > > The considerations from 7523 of course also apply, and sensitive > information should not be sent over unencrypted channels, but isn't the > above paragraph an aspect inherently new to token exchange? I don't think it's unique to token exchange. RFC 7523, for example, defines the use of a JWT as an authorization grant used to obtain an access token from a authorization server. Unless encrypted as a JWE, the JWT in that scenario has fields that are inspectable to the client. And an OAuth access token is considered opaque to the client but whether or not information in the token is actually accessible to a client is an implementation detail of the authorization server. The latter is true for OAuth in general and not just these more specialized exchanges. The idea behind maybe incorporating some text similar to (but adapted to the context) what's in the privacy considerations of RFC 7523 is that the considerations are pretty much the same - use TLS in transit, minimize the amount of information in the token, encrypt the token if disclosure of its information to the client is a concern. --=20 _CONFIDENTIALITY NOTICE: This email may contain confidential and privileged= =20 material for the sole use of the intended recipient(s). Any review, use,=20 distribution or disclosure by others is strictly prohibited.=C2=A0 If you h= ave=20 received this communication in error, please notify the sender immediately= =20 by e-mail and delete the message and any file attachments from your=20 computer. Thank you._ --00000000000074d42f0573548b3f Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable

On Fri, Aug 10, 2018 at 3:26 PM Benjamin Kaduk <kaduk@mit.edu> wrote:
<= blockquote class=3D"gmail_quote" style=3D"margin:0px 0px 0px 0.8ex;border-l= eft:1px solid rgb(204,204,204);padding-left:1ex">...
With the disclaimer that I haven't read token-exchange recently and am<= br> mostly going off my memory of the mailing list discussions, it seems like the key consideration here is that token exchange allows you to convert a token that may be opaque to you into one that has inspectable fields, and those fields can be privacy sensitive.=C2=A0 So a JWT response should only = be
given to a requestor that trusted to know such information; a lot of the time, that has large overlap with being trusted to have the token in the first place, but potentially there is some amount of non-overlap.

The considerations from 7523 of course also apply, and sensitive
information should not be sent over unencrypted channels, but isn't the=
above paragraph an aspect inherently new to token exchange?
I don't think it's unique to token exchange. RFC 7= 523, for example, defines the use of a JWT as an authorization grant used t= o obtain an access token from a authorization server. Unless encrypted as a= JWE, the JWT in that scenario has fields that are inspectable to the clien= t. And an OAuth access token is considered opaque to the client but whether= or not information in the token is actually accessible to a client is an i= mplementation detail of the authorization server. The latter is true for OA= uth in general and not just these more specialized exchanges.

The idea behind maybe incorporat= ing some text similar to (but adapted to the context) what's in the privacy consideratio= ns of RFC 7523 is that the considerations are pretty much the same - us= e TLS in transit, minimize the amount of information in the token, encrypt = the token if disclosure of its information to the client is a concern.
=




<= /div>
<= span style=3D"margin:0px;padding:0px;border:0px;outline:0px;vertical-align:= baseline;background:transparent;font-family:proxima-nova-zendesk,system-ui,= -apple-system,BlinkMacSystemFont,"Segoe UI",Roboto,Oxygen-Sans,Ub= untu,Cantarell,"Helvetica Neue",Arial,sans-serif;font-weight:600"= >CONFIDENTIALITY NOTICE: This email may contain confidenti= al and privileged material for the sole use of the intended recipient(s). A= ny review, use, distribution or disclosure by others is strictly prohibited= .=C2=A0 If you have received this communication in error, please notify the= sender immediately by e-mail and delete the message and any file attachmen= ts from your computer. Thank you. --00000000000074d42f0573548b3f-- From nobody Mon Aug 13 14:16:45 2018 Return-Path: X-Original-To: secdir@ietfa.amsl.com Delivered-To: secdir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 04D981310D1; Mon, 13 Aug 2018 14:16:38 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.999 X-Spam-Level: X-Spam-Status: No, score=-1.999 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id HGXoBOKaTdJg; Mon, 13 Aug 2018 14:16:35 -0700 (PDT) Received: from mail-oi0-x232.google.com (mail-oi0-x232.google.com [IPv6:2607:f8b0:4003:c06::232]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id A8D191310CF; Mon, 13 Aug 2018 14:16:35 -0700 (PDT) Received: by mail-oi0-x232.google.com with SMTP id b15-v6so29796818oib.10; Mon, 13 Aug 2018 14:16:35 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:from:date:message-id:subject:to; bh=nq9r8Ze7P8GD3y7EIYY35SJOuw+NIITKMjDWnWteNkY=; b=ISRkIBMIRml9AzFxD7efDKvpWJFBDmXpzVpOORqm9cEzShrMrAOvSdzi1whMrBPXPH xsnRfVleYcqUV7zl29ntmr3XjqbeMsPHNxtSAY+wFy3xyTsocbjoQhUse2RmstXVqXgC FB/VGQp2t7hpRMM79fnzCuoHyvmGHSJbQ+rTMPwZnl+sw/lCHDbkip4Xfnfi2DcM4wHc JYsDrX8p2vkSKRb69FWvJ2Cf33g1q6mTMXkfzUWqqzyX09mbVPS+ozGsj52EQZ+8ECDt tz8acQT4kySafRTuqlwFlIi65ri9fnvHb2vynpKkp742617l6ek/ZECnamK4t49tlS+C DlMQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:from:date:message-id:subject:to; bh=nq9r8Ze7P8GD3y7EIYY35SJOuw+NIITKMjDWnWteNkY=; b=Gpo1aWFuALbaamzd23LcnBV0MnYAtskSXMaV4A+SPCYKTwfTT5BYCpR21+IdocIkyK I6oIqK7M3ps9JqIxPzCEzkSconZPU2BBdDeEDKy/uKtYxLBdQUwyuWDDQnse6IGCkSst /7RSlimSGEk2evzpsAqYzOsaJv18li6ZGKGsCWNlwRRQ4mNUbQRIUXJz+H1WqEALm6cG YBhueB81VJZmnbdTPvVBmLYsS6jLTUS2LZxgRcBo5LKnvqbUvJptKP+Q2e0O67+h42Gv bTp/On2G7n+libbw98R9ElXLrhV570HeNSWvMlm5AMF79WnL6dSBkdGrSpZjleXuCiAA SmiA== X-Gm-Message-State: AOUpUlGUfyyuUuR9VCgP7Fl1fF78tNu+cKrMIT9qe8xw52varJRPL7tU ba977dSS5QTlAVgwZ3O5bXWtLiCO4vPBwiF4RVgYWLN/ X-Google-Smtp-Source: AA+uWPwvlbKpGGROBrSAag5sSSJTSBW/zSpnIwMI4WYjiD8mq++hiH8DNQxdO5zYbWh2ds5j0kX4Yt1GGjyvst59Y18= X-Received: by 2002:aca:db09:: with SMTP id s9-v6mr20818684oig.339.1534194995103; Mon, 13 Aug 2018 14:16:35 -0700 (PDT) MIME-Version: 1.0 Received: by 2002:ac9:7ad0:0:0:0:0:0 with HTTP; Mon, 13 Aug 2018 14:15:54 -0700 (PDT) From: Kathleen Moriarty Date: Mon, 13 Aug 2018 17:15:54 -0400 Message-ID: To: draft-ietf-radext-coa-proxy.all@tools.ietf.org, IESG , IETF SecDir Content-Type: multipart/alternative; boundary="000000000000b30d4f0573579b53" Archived-At: Subject: [secdir] SecDir review of draft-ietf-radext-coa-proxy X-BeenThere: secdir@ietf.org X-Mailman-Version: 2.1.27 Precedence: list List-Id: Security Area Directorate List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 13 Aug 2018 21:16:38 -0000 --000000000000b30d4f0573579b53 Content-Type: text/plain; charset="UTF-8" I have reviewed this document as part of the security directorate's ongoing effort to review all IETF documents being processed by the IESG. These comments were written primarily for the benefit of the security area directors. Document editors and WG chairs should treat these comments just like any other last call comments. The summary of the review is that this document is ready with some editorial fixes. Thanks for your work on this draft! If this is the last draft, which I think it may be, I am really glad I got to review it to see the last one for the WG. Congratulations!!! Here's my review: Abstract: In the abstract, it reads as though RFC7542 is updated by this draft with the text that says, "This specification corrects that omission for scenarios where networks use Realm-based proxying as defined in [RFC7542]." The text in the introduction on these two draft is a bit more clear in that RFC7542 defines a use case that requires this update to RFC5176. I think it would be helpful to expand the abstract text to make these points more clear to the reader. Nit Section 3.1: s/activee/active/ Section 3.3: A sentence like the following seems to invite it to be proved wrong at some point ;-). A twenty octet string is more than sufficient to individually address all of the NASes on DeKok, Alan Informational [Page 10] INTERNET-DRAFT Dynamic Authorization Proxying in RADIUS 30 July 2018 the planet. Perhaps a statement that says it is believed this will be sufficient given current deployment trends may read better and not tempt fate. :-) Section 4.3.1 For the following paragraph: Proxies that record user session information SHOULD verify the contents of a received CoA packet against the recorded data for that user session. If the proxy determines that the information in the packet does not match the recorded user session, it SHOULD return a CoA-NAK or Disconnect-NAK packet, that contains an Error-Cause attribute having value 503 ("Session Context Not Found"). Are there privacy recommendations that have already been made to leave out certain user information, obscure it, or protect it in some way? If so, a pointer to that documentation would be a nice addition. If not, a pointer to RFC6793 would be helpful. Section 6. The ability to attack, intercept or inject data into RADIUS sessions should be mentioned as a security consideration. Is there an RFC that explains how sessions can be encrypted that can be referenced (TLS for server to server connections and DTLS for client)? If not, I think it's worth adding a sentence so that people are aware of these options even if they don't care to implement them. -- Best regards, Kathleen --000000000000b30d4f0573579b53 Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable
I have reviewe= d this document as part of the security directorate's ongoingeffort to review a= ll IETF documents being processed by the IESG.=C2=A0 These
comments were written pr= imarily for the benefit of the security area directors.
=C2=A0Document editors and W= G chairs should treat these comments just like any other
last call comments.<= br style=3D"font-size:12.8px;text-decoration-style:initial;text-decoration-= color:initial">
= The summary of the review is that this document is ready with some editoria= l fixes.

=
Thanks for your work on this dra= ft!=C2=A0 If this is the last draft, which I think it may be, I am really g= lad I got to review it to see the last one for the WG.=C2=A0 Congratulation= s!!!

Here's my review:
<= span style=3D"font-size:12.8px">
Abstract:
In = the abstract, it reads as though RFC7542 is updated by this draft with the = text that says,=C2=A0
&qu= ot;This specification corrects that omission for
=C2=A0 =C2=A0scenarios where networks use Realm-bas= ed proxying as defined in
=C2=A0 =C2=A0[RFC7542]."

The text in th= e introduction on these two draft is a bit more clear in that RFC7542 defin= es a use case that requires this update to RFC5176.=C2=A0 I think it would = be helpful to expand the abstract text to make these points more clear to t= he reader.

Nit Section 3.1:
= s/activee/active/

Section 3.3:

A sentence like the follow= ing seems to invite it to be proved wrong at some point ;-).=C2=A0

=C2=A0 =C2=A0 =C2=A0 A twenty octet string is<= /div>
=C2=A0 =C2=A0 =C2=A0 more than s= ufficient to individually address all of the NASes on

DeKok, Alan=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0= =C2=A0 =C2=A0Informational=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0= =C2=A0 =C2=A0 =C2=A0 [Page 10]
INTERNET-DRAFT=C2=A0 Dynamic Authorization Proxying in RADIUS=C2=A0 = =C2=A0 30 July 2018

<= /span>
=C2=A0 =C2=A0 =C2=A0 the = planet.

=
Perhaps a statement that says it is b= elieved this will be sufficient given current deployment trends may read be= tter and not tempt fate. :-)


Section 4.3.1

For the following paragraph:
=C2=A0 =C2=A0Proxies that record user session information SHOUL= D verify the
=C2=A0 =C2= =A0contents of a received CoA packet against the recorded data for that
=C2=A0 =C2=A0user session.= =C2=A0 If the proxy determines that the information in the
=C2=A0 =C2=A0packet does not match the re= corded user session, it SHOULD return a
=C2=A0 =C2=A0CoA-NAK or Disconnect-NAK packet, that contains= an Error-Cause
=C2=A0 = =C2=A0attribute having value 503 ("Session Context Not Found").
Are there privacy recommen= dations that have already been made to leave out certain user information, = obscure it, or protect it in some way?=C2=A0 If so, a pointer to that docum= entation would be a nice addition.=C2=A0 If not, a pointer to RFC6793 would= be helpful.

<= /div>
Section 6.

The ability to attack, intercept or inject data into RADIUS sessio= ns should be mentioned as a security consideration.=C2=A0 Is there an RFC t= hat explains how sessions can be encrypted that can be referenced (TLS for = server to server connections and DTLS for client)?=C2=A0 If not, I think it= 's worth adding a sentence so that people are aware of these options ev= en if they don't care to implement them.


--
Best regards,
Kathleen
--000000000000b30d4f0573579b53-- From nobody Mon Aug 13 23:42:29 2018 Return-Path: X-Original-To: secdir@ietfa.amsl.com Delivered-To: secdir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 5D96C126CB6; Mon, 13 Aug 2018 23:42:28 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2 X-Spam-Level: X-Spam-Status: No, score=-2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id dUCwjb-9N_JX; Mon, 13 Aug 2018 23:42:26 -0700 (PDT) Received: from mail-pf1-x436.google.com (mail-pf1-x436.google.com [IPv6:2607:f8b0:4864:20::436]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id C3D9712D7F8; Mon, 13 Aug 2018 23:42:26 -0700 (PDT) Received: by mail-pf1-x436.google.com with SMTP id p12-v6so8842060pfh.2; Mon, 13 Aug 2018 23:42:26 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:from:date:message-id:subject:to; bh=C6YEIeCv6ovv0s93UVkLez2rZ/JKk/5ZL2jRxFH6zRI=; b=oxhp/rDbaqGnm533DyUtoKXO8JqAiyN6uUvYPhOT54Mko63dL61tKG7cUr1MvYdcDT bvn0JwSmzeBp1Fv1IvhIgi4V8DoHynNx5YdKdx6g6CD16BblHTvBdWMkleFHZEwhxSL2 bDJD4KpeGpWDeIhIJwEXD4njSubshf7AQ9LY64CsznO1d8iv9hQmtXGTcj43DALCgPF3 jbjRdM/by8M1n1Valrhm/3BwEjR4wVo5RTGS7KK4LL8V1PwhSbkmCe7MtYrX9z6eyk/G jYSKea+FBCRWt55K/xtn2JeyS/4jsB6HUPgE1UoLwmE0sabSANu3wwdwxmvagqmgwtpD gBSA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:from:date:message-id:subject:to; bh=C6YEIeCv6ovv0s93UVkLez2rZ/JKk/5ZL2jRxFH6zRI=; b=gjhSQF+13dc+HYz2OgkrW6mWMZBw8XlAZwPtZ2kDSg/cQvK4Jvc7RbWjg8Knrmx8bQ vqa1Y+LPEyF8sAGJJkWgpMvSQTmQyeSbZ0wJqUuE90RG/JU4t2OjbAn/MpRJ7+AgKXb4 OtodIoN7GF8X0TqpW3hKa3IQWN9lXKLtO5g3wz87Uqm6Nko7sbmjQkiKWaMHCxerFAZU IRw3yn/tokUfK2iCXC2PUoiSc3fndfT+wMIZLZECCSqxNm1pE295jP3hM9Lmf+SM6W7P PLxGS4nLIYOyh7g5T71CTh/ciwcKTAxITYD1VzmwlN91lTa07MLrWf17WaY8bm5Np9r0 E8LA== X-Gm-Message-State: AOUpUlFIxwVoN1Z1x2FGT0hXSNm6KJR1nF6VirIdHyPV5y6g8sTmQPpk vRhDHF0SurZ1jEUUf1pdbCNd+uJOkqB+wtFBTMhU6RpO X-Google-Smtp-Source: AA+uWPyaljauWpeqSjG4GNa2yA+itiwrzVKAph0fRzaHnXXWgvBR6n71i5OntwZcNEKwChxT4YHo3OdTYJ+F++pFvzg= X-Received: by 2002:a63:4b5a:: with SMTP id k26-v6mr19297552pgl.384.1534228946171; Mon, 13 Aug 2018 23:42:26 -0700 (PDT) MIME-Version: 1.0 Received: by 2002:a17:90a:bd0f:0:0:0:0 with HTTP; Mon, 13 Aug 2018 23:42:25 -0700 (PDT) From: =?UTF-8?Q?Magnus_Nystr=C3=B6m?= Date: Mon, 13 Aug 2018 23:42:25 -0700 Message-ID: To: "secdir@ietf.org" , draft-ietf-doh-dns-over-https@ietf.org Content-Type: text/plain; charset="UTF-8" Archived-At: Subject: [secdir] Secdir review of draft-ietf-doh-dns-over-https X-BeenThere: secdir@ietf.org X-Mailman-Version: 2.1.27 Precedence: list List-Id: Security Area Directorate List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 14 Aug 2018 06:42:28 -0000 I have reviewed this document as part of the security directorate's ongoing effort to review all IETF documents being processed by the IESG. These comments were written primarily for the benefit of the security area directors. Document editors and WG chairs should treat these comments just like any other last call comments. This document describes a protocol for sending DNS queries, and receiving DNS responses, over HTTPS. The document reads well, has rich privacy and security considerations sections and includes numerous examples which is very helpful. Comments: Section 3: Why remove this section altogether before publication? It seems it provides some useful information on the background for why the protocol is designed the way it is? Section 4: Was the "A DoH client MUST NOT use a different URI simply because it was discovered outside of the client's configuration" intended to state: "A DoH client MUST NOT use URIs discovered outside of the client's configuration"? The latter seems clearer. Section 10: It is stated that HTTP/2 implementations will benefit from the TLS 1.2 profile developed for HTTP/2. How about HTTP/1.1 implementations? Should there be a TLS profile for them? Also, any particular TLS 1.3 considerations - e.g, 0-RTT and the use of the GET option here? Editorial: - It seems like the references section needs some updates - e.g., I found references to RFC 7828 and RFC 6891 in the text but not in the references section. -- -- Magnus From nobody Tue Aug 14 07:59:08 2018 Return-Path: X-Original-To: secdir@ietfa.amsl.com Delivered-To: secdir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 5709912F18C; Tue, 14 Aug 2018 07:59:06 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.234 X-Spam-Level: X-Spam-Status: No, score=-1.234 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, SPF_SOFTFAIL=0.665] autolearn=no autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id OkiHsaA05uIM; Tue, 14 Aug 2018 07:59:04 -0700 (PDT) Received: from linode64.ducksong.com (www.ducksong.com [192.155.95.102]) by ietfa.amsl.com (Postfix) with ESMTP id 4BBD812426A; Tue, 14 Aug 2018 07:59:04 -0700 (PDT) Received: from mail-oi0-f46.google.com (mail-oi0-f46.google.com [209.85.218.46]) by linode64.ducksong.com (Postfix) with ESMTPSA id AF2633A02F; Tue, 14 Aug 2018 10:59:02 -0400 (EDT) Received: by mail-oi0-f46.google.com with SMTP id v8-v6so34119761oie.5; Tue, 14 Aug 2018 07:59:02 -0700 (PDT) X-Gm-Message-State: AOUpUlGJoGbbtvQ/jCnPz4cMGu2koyKN9HpLKxSog0RTL53MDHdEEeWN JylbLK4zRSyS5ubS0fkloW20lvEJj0Q9C5TgPII= X-Google-Smtp-Source: AA+uWPzcrQ6PZKOugjQ0i9Qi8JsFhvHmvTg9l8k4D5Gkypoq+NAnHy0aSGQfs/xJAgsIyMvVv+xQg++mZOC/+NyDGCI= X-Received: by 2002:aca:31c6:: with SMTP id x189-v6mr24096667oix.213.1534258742427; Tue, 14 Aug 2018 07:59:02 -0700 (PDT) MIME-Version: 1.0 Received: by 2002:a4a:8a22:0:0:0:0:0 with HTTP; Tue, 14 Aug 2018 07:59:01 -0700 (PDT) In-Reply-To: References: From: Patrick McManus Date: Tue, 14 Aug 2018 10:59:01 -0400 X-Gmail-Original-Message-ID: Message-ID: To: =?UTF-8?Q?Magnus_Nystr=C3=B6m?= Cc: "secdir@ietf.org" , draft-ietf-doh-dns-over-https@ietf.org Content-Type: multipart/alternative; boundary="00000000000056071f0573667350" Archived-At: Subject: Re: [secdir] Secdir review of draft-ietf-doh-dns-over-https X-BeenThere: secdir@ietf.org X-Mailman-Version: 2.1.27 Precedence: list List-Id: Security Area Directorate List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 14 Aug 2018 14:59:07 -0000 --00000000000056071f0573667350 Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable Hi Magnus, thanks for the review. On Tue, Aug 14, 2018 at 2:42 AM, Magnus Nystr=C3=B6m wr= ote: > I > Comments: > > Section 3: Why remove this section altogether before publication? It > seems it provides some useful information on the background for why > the protocol is designed the way it is? > It does reflect the thinking of the authors to help guide the rest of the protocol document and I believe it to be accurate - but as it hasn't been intended for publication it hasn't received the scrutiny the rest of the document has I would be worried about completeness in particular. It was meant to help the working group keep those things in mind during design, the intended audience was never to make declarative statements to the implementer. > > Section 4: Was the "A DoH client MUST NOT use a different URI simply > because it was discovered outside of the client's configuration" > intended to state: "A DoH client MUST NOT use URIs discovered outside > of the client's configuration"? The latter seems clearer. > > The language there is meant to emphasize accidental discovery (e.g. http/2 push of DoH). Its not trying to go into all the other potential modes of more intentional discovery. > Section 10: It is stated that HTTP/2 implementations will benefit from > the TLS 1.2 profile developed for HTTP/2. How about HTTP/1.1 > implementations? Should there be a TLS profile for them? the profile in question is part of http, not part of doh (other than by inclusion). An H1 profile would not be backwards compatible. > Also, any > particular TLS 1.3 considerations - e.g, 0-RTT and the use of the GET > option here? > > The normal HTTPS considerations thankfully apply; including https://datatracker.ietf.org/doc/draft-ietf-httpbis-replay/ (in rfc ed queue) but not in any special way for DoH compared to other HTTP. > Editorial: > - It seems like the references section needs some updates - e.g., I > found references to RFC 7828 and RFC 6891 in the text but not in the > references section. > > I believe this is corrected already due to other inputs. Thanks! On Tue, Aug 14, 2018 at 2:42 AM, Magnus Nystr=C3=B6m wr= ote: > I have reviewed this document as part of the security directorate's > ongoing effort to review all IETF documents being processed by the > IESG. These comments were written primarily for the benefit of the > security area directors. Document editors and WG chairs should treat > these comments just like any other last call comments. > > This document describes a protocol for sending DNS queries, and > receiving DNS responses, over HTTPS. The document reads well, has rich > privacy and security considerations sections and includes numerous > examples which is very helpful. > > Comments: > > Section 3: Why remove this section altogether before publication? It > seems it provides some useful information on the background for why > the protocol is designed the way it is? > > Section 4: Was the "A DoH client MUST NOT use a different URI simply > because it was discovered outside of the client's configuration" > intended to state: "A DoH client MUST NOT use URIs discovered outside > of the client's configuration"? The latter seems clearer. > > Section 10: It is stated that HTTP/2 implementations will benefit from > the TLS 1.2 profile developed for HTTP/2. How about HTTP/1.1 > implementations? Should there be a TLS profile for them? Also, any > particular TLS 1.3 considerations - e.g, 0-RTT and the use of the GET > option here? > > Editorial: > - It seems like the references section needs some updates - e.g., I > found references to RFC 7828 and RFC 6891 in the text but not in the > references section. > > -- > -- Magnus > > --00000000000056071f0573667350 Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable
Hi Magnus, thanks for the review.

On Tue, Aug 14, 2018 at 2:42 AM, Magnu= s Nystr=C3=B6m <magnusn@gmail.com> wrote:
I
Comments:

Section 3: Why remove this section altogether before publication? It
seems it provides some useful information on the background for why
the protocol is designed the way it is?

It does reflect the thinking of the authors to help guide the rest of the=20 protocol document and I believe it to be accurate - but as it hasn't=20 been intended for publication it hasn't received the scrutiny the rest= =20 of the document has I would be worried about completeness in particular. It was meant to help the working group keep those things in mind during design, the intended audience was never to make declarative statements=20 to the implementer.
=C2=A0

Section 4: Was the "A DoH client MUST NOT use a different URI simply because it was discovered outside of the client's configuration" intended to state: "A DoH client MUST NOT use URIs discovered outside<= br> of the client's configuration"? The latter seems clearer.


The language there is meant=20 to emphasize accidental discovery (e.g. http/2 push of DoH). Its not=20 trying to go into all the other potential modes of more intentional=20 discovery.
=C2=A0
Section 10: It is stated that HTTP/2 implementations will benefit from
the TLS 1.2 profile developed for HTTP/2. How about HTTP/1.1
implementations? Should there be a TLS profile for them?
=
the profile in question is part of http, not part of doh (other than by=20 inclusion). An H1 profile would not be backwards compatible.
=C2=A0
Also, any
particular TLS 1.3 considerations - e.g, 0-RTT and the use of the GET
option here?


The normal HTTPS considerations= thankfully apply; including https://datatracker.ietf.org/doc/draft-ietf-httpbis-replay/ (in rfc ed queue) but not in any spec= ial way for DoH compared to other HTTP.
<= div>=C2=A0
Editorial:
- It seems like the references section needs some updates - e.g., I
found references to RFC 7828 and RFC 6891 in the text but not in the
references section.


I believe thi= s is corrected already due to other inputs. Thanks!


On Tue, Aug 1= 4, 2018 at 2:42 AM, Magnus Nystr=C3=B6m <magnusn@gmail.com> = wrote:
I have reviewed this document as p= art of the security directorate's
ongoing effort to review all IETF documents being processed by the
IESG. These comments were written primarily for the benefit of the
security area directors.=C2=A0 Document editors and WG chairs should treat<= br> these comments just like any other last call comments.

This document describes a protocol for sending DNS queries, and
receiving DNS responses, over HTTPS. The document reads well, has rich
privacy and security considerations sections and includes numerous
examples which is very helpful.

Comments:

Section 3: Why remove this section altogether before publication? It
seems it provides some useful information on the background for why
the protocol is designed the way it is?

Section 4: Was the "A DoH client MUST NOT use a different URI simply because it was discovered outside of the client's configuration" intended to state: "A DoH client MUST NOT use URIs discovered outside<= br> of the client's configuration"? The latter seems clearer.

Section 10: It is stated that HTTP/2 implementations will benefit from
the TLS 1.2 profile developed for HTTP/2. How about HTTP/1.1
implementations? Should there be a TLS profile for them? Also, any
particular TLS 1.3 considerations - e.g, 0-RTT and the use of the GET
option here?

Editorial:
- It seems like the references section needs some updates - e.g., I
found references to RFC 7828 and RFC 6891 in the text but not in the
references section.

--
-- Magnus


--00000000000056071f0573667350-- From nobody Tue Aug 14 11:42:42 2018 Return-Path: X-Original-To: secdir@ietfa.amsl.com Delivered-To: secdir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id CAD2212785F; Tue, 14 Aug 2018 11:42:40 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.999 X-Spam-Level: X-Spam-Status: No, score=-1.999 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id hMLaQt8G4WXT; Tue, 14 Aug 2018 11:42:38 -0700 (PDT) Received: from mail-pg1-x52f.google.com (mail-pg1-x52f.google.com [IPv6:2607:f8b0:4864:20::52f]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 34E3D124BE5; Tue, 14 Aug 2018 11:42:38 -0700 (PDT) Received: by mail-pg1-x52f.google.com with SMTP id y4-v6so9481307pgp.9; Tue, 14 Aug 2018 11:42:38 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:in-reply-to:references:from:date:message-id:subject:to :cc; bh=j3lwMGn8Xlooy1zfrf1svh+lOWhqw4fKXZPLIm8MMIU=; b=XM1pf8WcUMdOvsktqRl7d8amGBfw9X+qlMBMtdj5gKVhvqjWsVf5/a+jfOKNe2/sgF f+JTdmLVKMjoG1HluOeyy9d06GiuFtG2glELRmTCTG6Km78KYkCxCqqHaSbmXsfHIo2x JR53HY1gqVnOqg6eMf7DEEiHFtejtZVLe5l6h18aTPioVxGTCu5NiBwc1VkC29AvakJk d7g0LgN4qy/mCFh5E79TzuWiz0bePsue2u8Og9wBcqrcJot6Pmlu9y/Xe6x9S5FjP0NJ MdZEl6rSHo5cD41obQzFdH6B5gf9Kh2TahCMlF3gEs/fxFd9fErDArM+VYBTH0B9hQsq P3JA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:in-reply-to:references:from:date :message-id:subject:to:cc; bh=j3lwMGn8Xlooy1zfrf1svh+lOWhqw4fKXZPLIm8MMIU=; b=HBx9ovBUPHe8Nu6pVD1NZ2ojdnWrtMSIq6HbejaWgcKAhTqNfVKMcLO+YUHswRCJVb hPDJBJ6TNTcyvIoY0RYk8/UzHRMRnwFZM5GmgOotCrDnJinShMPmNDLrbxJZY6awWO87 YPeEDneIIhMIgRhNPz1JJCTSr+DyieM9Lk6kE62kvikBPAIX8320CYLL+/F+QQpY9kXl rTfLwTKdrK5P4TFGjwKbxaZsrgRnkBBcDXSHOn9tK5t6D7lBtcjAFofbHml2QEe3It6N trrjVGPiag0n9VcaMKQVoVgLNjQ6fIEKA//8225vubWfrGWjW8FReKVBR1kzJKUzkNzC rmag== X-Gm-Message-State: AOUpUlHfd42a/2dWL7d7bfIroG1nVMxZjYvJUobKoq63ihJCtIdVQN12 MkvbEve8ExT4WfSTlVpsYsWMbX/reRncInbgCR4= X-Google-Smtp-Source: AA+uWPyLhOSjTEaj3BUQC+U4NBvlsSObtMCWpg6znGvivjHczLrha6SEJ1t4QyfWRxmNepmA9MSXBGkBy4laACus3zM= X-Received: by 2002:a63:6c05:: with SMTP id h5-v6mr22423588pgc.367.1534272157741; Tue, 14 Aug 2018 11:42:37 -0700 (PDT) MIME-Version: 1.0 Received: by 2002:a17:90a:bd0f:0:0:0:0 with HTTP; Tue, 14 Aug 2018 11:42:37 -0700 (PDT) In-Reply-To: References: From: =?UTF-8?Q?Magnus_Nystr=C3=B6m?= Date: Tue, 14 Aug 2018 11:42:37 -0700 Message-ID: To: Patrick McManus Cc: "secdir@ietf.org" , draft-ietf-doh-dns-over-https@ietf.org Content-Type: multipart/alternative; boundary="000000000000f37abe05736992ea" Archived-At: Subject: Re: [secdir] Secdir review of draft-ietf-doh-dns-over-https X-BeenThere: secdir@ietf.org X-Mailman-Version: 2.1.27 Precedence: list List-Id: Security Area Directorate List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 14 Aug 2018 18:42:41 -0000 --000000000000f37abe05736992ea Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable Thanks Patrick. Perhaps the current Section 3 could be moved to an Appendix to still capture some of the reasoning behind the protocol design; it is up to you of course. On the language in Section 4, perhaps then the language could be changed (for clarity) to: "A DoH client MUST NOT use a URI Template unintentionally discovered (e.g., through HTTP/2 push of DoH)." ( Possibly amended with: "A DoH client MUST only use URI Templates being part of their configuration.") That's all, On Tue, Aug 14, 2018 at 7:59 AM, Patrick McManus wrote: > Hi Magnus, thanks for the review. > > On Tue, Aug 14, 2018 at 2:42 AM, Magnus Nystr=C3=B6m = wrote: > >> I >> Comments: >> >> Section 3: Why remove this section altogether before publication? It >> seems it provides some useful information on the background for why >> the protocol is designed the way it is? >> > > It does reflect the thinking of the authors to help guide the rest of the > protocol document and I believe it to be accurate - but as it hasn't been > intended for publication it hasn't received the scrutiny the rest of the > document has I would be worried about completeness in particular. It was > meant to help the working group keep those things in mind during design, > the intended audience was never to make declarative statements to the > implementer. > > >> >> Section 4: Was the "A DoH client MUST NOT use a different URI simply >> because it was discovered outside of the client's configuration" >> intended to state: "A DoH client MUST NOT use URIs discovered outside >> of the client's configuration"? The latter seems clearer. >> >> > The language there is meant to emphasize accidental discovery (e.g. http/= 2 > push of DoH). Its not trying to go into all the other potential modes of > more intentional discovery. > > >> Section 10: It is stated that HTTP/2 implementations will benefit from >> the TLS 1.2 profile developed for HTTP/2. How about HTTP/1.1 >> implementations? Should there be a TLS profile for them? > > > the profile in question is part of http, not part of doh (other than by > inclusion). An H1 profile would not be backwards compatible. > > >> Also, any >> particular TLS 1.3 considerations - e.g, 0-RTT and the use of the GET >> option here? >> >> > The normal HTTPS considerations thankfully apply; including > https://datatracker.ietf.org/doc/draft-ietf-httpbis-replay/ (in rfc ed > queue) but not in any special way for DoH compared to other HTTP. > > >> Editorial: >> - It seems like the references section needs some updates - e.g., I >> found references to RFC 7828 and RFC 6891 in the text but not in the >> references section. >> >> > I believe this is corrected already due to other inputs. Thanks! > > > On Tue, Aug 14, 2018 at 2:42 AM, Magnus Nystr=C3=B6m = wrote: > >> I have reviewed this document as part of the security directorate's >> ongoing effort to review all IETF documents being processed by the >> IESG. These comments were written primarily for the benefit of the >> security area directors. Document editors and WG chairs should treat >> these comments just like any other last call comments. >> >> This document describes a protocol for sending DNS queries, and >> receiving DNS responses, over HTTPS. The document reads well, has rich >> privacy and security considerations sections and includes numerous >> examples which is very helpful. >> >> Comments: >> >> Section 3: Why remove this section altogether before publication? It >> seems it provides some useful information on the background for why >> the protocol is designed the way it is? >> >> Section 4: Was the "A DoH client MUST NOT use a different URI simply >> because it was discovered outside of the client's configuration" >> intended to state: "A DoH client MUST NOT use URIs discovered outside >> of the client's configuration"? The latter seems clearer. >> >> Section 10: It is stated that HTTP/2 implementations will benefit from >> the TLS 1.2 profile developed for HTTP/2. How about HTTP/1.1 >> implementations? Should there be a TLS profile for them? Also, any >> particular TLS 1.3 considerations - e.g, 0-RTT and the use of the GET >> option here? >> >> Editorial: >> - It seems like the references section needs some updates - e.g., I >> found references to RFC 7828 and RFC 6891 in the text but not in the >> references section. >> >> -- >> -- Magnus >> >> > --=20 -- Magnus --000000000000f37abe05736992ea Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable
Thanks Patrick.
Perhaps the current Section= 3 could be moved to an Appendix to still capture some of the reasoning beh= ind the protocol design; it is up to you of course.

On the language in Section 4, perhaps then the language could be changed = (for clarity) to:

"A DoH client MUST NOT us= e a URI Template unintentionally discovered (e.g., through HTTP/2 push of D= oH)."=C2=A0 ( Possibly amended with: "A DoH client MUST only use URI Templates being= part of their configuration.")

That's al= l,


On Tue, Aug 14, 2018 at 7:59 AM, Patrick McManus <pmcm= anus@mozilla.com> wrote:
Hi Magnus, thanks for the review.

On Tue, Aug 14, 2018 at 2:42 AM, Magnus Nystr=C3=B6m <= ;magnusn@gmail.com> wrote:
I
Comments:

Section 3: Why remove this section altogether before publication? It
seems it provides some useful information on the background for why
the protocol is designed the way it is?
It does reflect the thinking of the authors to help guide the rest of the=20 protocol document and I believe it to be accurate - but as it hasn't=20 been intended for publication it hasn't received the scrutiny the rest= =20 of the document has I would be worried about completeness in particular. It was meant to help the working group keep those things in mind during design, the intended audience was never to make declarative statements=20 to the implementer.
=C2=A0

Section 4: Was the "A DoH client MUST NOT use a different URI simply because it was discovered outside of the client's configuration" intended to state: "A DoH client MUST NOT use URIs discovered outside<= br> of the client's configuration"? The latter seems clearer.


The lan= guage there is meant=20 to emphasize accidental discovery (e.g. http/2 push of DoH). Its not=20 trying to go into all the other potential modes of more intentional=20 discovery.
Section 10: It is stated that HTTP/2 implementations will benefit from
the TLS 1.2 profile developed for HTTP/2. How about HTTP/1.1
implementations? Should there be a TLS profile for them?

the profile in question is part of http, not part of doh (other than by=20 inclusion). An H1 profile would not be backwards compatible.
=C2=A0
Also, any
particular TLS 1.3 considerations - e.g, 0-RTT and the use of the GET
option here?


=C2=A0
Editorial:
- It seems like the references section needs some updates - e.g., I
found references to RFC 7828 and RFC 6891 in the text but not in the
references section.


I believe this is corrected already due to = other inputs. Thanks!


On Tue, Aug 14, 201= 8 at 2:42 AM, Magnus Nystr=C3=B6m <magnusn@gmail.com> wrote:=
I have r= eviewed this document as part of the security directorate's
ongoing effort to review all IETF documents being processed by the
IESG. These comments were written primarily for the benefit of the
security area directors.=C2=A0 Document editors and WG chairs should treat<= br> these comments just like any other last call comments.

This document describes a protocol for sending DNS queries, and
receiving DNS responses, over HTTPS. The document reads well, has rich
privacy and security considerations sections and includes numerous
examples which is very helpful.

Comments:

Section 3: Why remove this section altogether before publication? It
seems it provides some useful information on the background for why
the protocol is designed the way it is?

Section 4: Was the "A DoH client MUST NOT use a different URI simply because it was discovered outside of the client's configuration" intended to state: "A DoH client MUST NOT use URIs discovered outside<= br> of the client's configuration"? The latter seems clearer.

Section 10: It is stated that HTTP/2 implementations will benefit from
the TLS 1.2 profile developed for HTTP/2. How about HTTP/1.1
implementations? Should there be a TLS profile for them? Also, any
particular TLS 1.3 considerations - e.g, 0-RTT and the use of the GET
option here?

Editorial:
- It seems like the references section needs some updates - e.g., I
found references to RFC 7828 and RFC 6891 in the text but not in the
references section.

--
-- Magnus





--
-- Magnus
--000000000000f37abe05736992ea-- From nobody Tue Aug 14 12:13:32 2018 Return-Path: X-Original-To: secdir@ietfa.amsl.com Delivered-To: secdir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 212B7130E11; Tue, 14 Aug 2018 12:13:31 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.234 X-Spam-Level: X-Spam-Status: No, score=-1.234 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, SPF_SOFTFAIL=0.665] autolearn=no autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id wFCGUx7bu8cj; Tue, 14 Aug 2018 12:13:28 -0700 (PDT) Received: from linode64.ducksong.com (linode6only.ducksong.com [IPv6:2600:3c02::f03c:91ff:fe6e:e8da]) by ietfa.amsl.com (Postfix) with ESMTP id 86A83124BE5; Tue, 14 Aug 2018 12:13:28 -0700 (PDT) Received: from mail-oi0-f42.google.com (mail-oi0-f42.google.com [209.85.218.42]) by linode64.ducksong.com (Postfix) with ESMTPSA id D80223A03F; Tue, 14 Aug 2018 15:13:27 -0400 (EDT) Received: by mail-oi0-f42.google.com with SMTP id k12-v6so35674380oiw.8; Tue, 14 Aug 2018 12:13:27 -0700 (PDT) X-Gm-Message-State: AOUpUlHHvAx1Lc5D9jIvlBEMp8OI6XkDFXBIdj4Puky/17ZXAunK1Fsp MNDrzQY0+AoWdOiPyFQbrEpiSKFwKfEbjrgMgsM= X-Google-Smtp-Source: AA+uWPxIUEaIYHZpIDV9z4p8Smm8L0dJ5gQTB2s/+fLQ387Q7WrYxoeGzuYH+dNXd/gUZT/WFf+hSTH7omrqxR9lArQ= X-Received: by 2002:aca:31c6:: with SMTP id x189-v6mr25128269oix.213.1534274007569; Tue, 14 Aug 2018 12:13:27 -0700 (PDT) MIME-Version: 1.0 Received: by 2002:a4a:8a22:0:0:0:0:0 with HTTP; Tue, 14 Aug 2018 12:13:26 -0700 (PDT) In-Reply-To: References: From: Patrick McManus Date: Tue, 14 Aug 2018 15:13:26 -0400 X-Gmail-Original-Message-ID: Message-ID: To: =?UTF-8?Q?Magnus_Nystr=C3=B6m?= Cc: Patrick McManus , "secdir@ietf.org" , draft-ietf-doh-dns-over-https@ietf.org Content-Type: multipart/alternative; boundary="00000000000035a3a805736a016a" Archived-At: Subject: Re: [secdir] Secdir review of draft-ietf-doh-dns-over-https X-BeenThere: secdir@ietf.org X-Mailman-Version: 2.1.27 Precedence: list List-Id: Security Area Directorate List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 14 Aug 2018 19:13:31 -0000 --00000000000035a3a805736a016a Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable On Tue, Aug 14, 2018 at 2:42 PM, Magnus Nystr=C3=B6m wr= ote: > > On the language in Section 4, perhaps then the language could be changed > (for clarity) to: > > "A DoH client MUST NOT use a URI Template unintentionally discovered > (e.g., through HTTP/2 push of DoH)." ( Possibly amended with: "A DoH > client MUST only use URI Templates being part of their configuration.") > > yep.. we'll add a parenthetical "such as http/2 push" to help folks understand that's an important case. --00000000000035a3a805736a016a Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable


On Tue, Aug 14, 2018 at 2:42 PM, Magnus Nystr=C3=B6m = <magnusn@gmail.co= m> wrote:
=

On the language in Section 4, perhaps then the language= could be changed (for clarity) to:

"A DoH client MUST NOT use a URI Templ= ate unintentionally discovered (e.g., through HTTP/2 push of DoH)."=C2=A0 ( Possibly amended with: "A DoH client MUST only use URI Templates being= part of their configuration.")


<= /div>
yep.. we'll add a parenthetical "such as http/2 push&quo= t; to help folks understand that's an important case.
=C2=A0
--00000000000035a3a805736a016a-- From nobody Tue Aug 14 18:59:27 2018 Return-Path: X-Original-To: secdir@ietfa.amsl.com Delivered-To: secdir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 9B0DA130E4C; Tue, 14 Aug 2018 18:59:17 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.71 X-Spam-Level: X-Spam-Status: No, score=-2.71 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001, T_DKIMWL_WL_HIGH=-0.01, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=juniper.net Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id gasWVgE9b5yy; Tue, 14 Aug 2018 18:59:14 -0700 (PDT) Received: from mx0a-00273201.pphosted.com (mx0a-00273201.pphosted.com [208.84.65.16]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 9FC0A130EE9; Tue, 14 Aug 2018 18:59:14 -0700 (PDT) Received: from pps.filterd (m0108156.ppops.net [127.0.0.1]) by mx0a-00273201.pphosted.com (8.16.0.22/8.16.0.22) with SMTP id w7F1x9o6015031; Tue, 14 Aug 2018 18:59:13 -0700 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=juniper.net; h=from : to : subject : date : message-id : references : in-reply-to : content-type : content-id : content-transfer-encoding : mime-version; s=PPS1017; bh=qEeQt6WBLFoZ6qLL59tU2cgKtHyFLf7e4ktZQGIlfe8=; b=bASwwznGJyPWYGQI+iQJ4tmLrCyKFC4XnrtZGFad0zaV48iX3iUbGfdt3L5jkU88pVhp IOPiToy7IKHifJohSziODgDsGDw9NIkXgIE1v5uieqT8lHVOzocdYS3/7cxaItnydyaT Gkj9xksBiJnDPL8Bw7p5ZN2xbvj0klCy9KCDyV/wyNoZPPfEIPSmegESg93qYWTAsY9G +0cshvXIisiynBT8BRJ1Oyxk2aI6Cvt4Ft7K0rJRON0tqqzGxzYiMzrI+p3TTXyvRHFJ 0bnu4S5zC1cIRBJR3P7VrKc5wwz4XfZ+w6SCFonDVW7t4C8VaVV5X+6YKVfX9QthKA6G wQ== Received: from nam05-dm3-obe.outbound.protection.outlook.com (mail-dm3nam05lp0117.outbound.protection.outlook.com [216.32.181.117]) by mx0a-00273201.pphosted.com with ESMTP id 2kuyrt952e-1 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-SHA384 bits=256 verify=NOT); Tue, 14 Aug 2018 18:59:13 -0700 Received: from DM6PR05MB4665.namprd05.prod.outlook.com (20.176.109.202) by DM6PR05MB4396.namprd05.prod.outlook.com (20.176.78.153) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.1059.19; Wed, 15 Aug 2018 01:59:11 +0000 Received: from DM6PR05MB4665.namprd05.prod.outlook.com ([fe80::e0bc:6a82:571d:258]) by DM6PR05MB4665.namprd05.prod.outlook.com ([fe80::e0bc:6a82:571d:258%2]) with mapi id 15.20.1059.010; Wed, 15 Aug 2018 01:59:11 +0000 From: Kent Watsen To: David Mandelberg , "draft-ietf-netconf-zerotouch.all@ietf.org" , "iesg@ietf.org" , "secdir@ietf.org" Thread-Topic: secdir review of draft-ietf-netconf-zerotouch-22 Thread-Index: AQHUI6TomGkNAzmsB0eB34I+6n1ia6SiHHoAgAeQwACADkkdgIAEszuAgANDMwA= Date: Wed, 15 Aug 2018 01:59:10 +0000 Message-ID: References: <361393b0-6666-08ff-bdf4-3ba3bf4323c7@mandelberg.org> <47EEE9B6-5BC2-4A1F-ABB2-2ACB1C494545@juniper.net> <4579f9bf-0ead-a6af-dc80-a841527414eb@mandelberg.org> <51E98D22-1DBF-4069-A750-90987EB96B0D@juniper.net> In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/f.20.0.170309 x-originating-ip: [66.129.241.13] x-ms-publictraffictype: Email x-microsoft-exchange-diagnostics: 1; DM6PR05MB4396; 6:PBKMhHo2rF5RH+cdMAzCtN5OqiGp80srDWDgE/uSW/lfAqPW242xK5P+z9Jdd2W2o5tLFxVm/2USK9HlDQCD7oFfHsE3BCCnZmqcjDPcV6jFrogDb0VYU9so3yKCxthrADnOOjo9gbezbRN+z9dAJTDQ6fJYd/V/ji7g+2+k4vPwi1k0pKxI7H0PYMvkDpPYVOvzys9HDPlr4pzDgisy3bBS2ciuphsfLL1lsxf6WE3fWIiz1yHdT1YBHXp8QAcUZAMCNcjL0S89AO4DpSd98A3b1bveFtyZZLLFiSxh9ObwmQVGUtLHGqH5p0HgOASzHLQR5osPBdNzkE8OF+YHUPljISDPuC5IPEn6+wzeP6hUsNmmEs/zKZOKLSEvHwGURZS8lHihYqBox5fBfZc20cJhYbOODaCgPc411OYQmAsObsSV4BRRdoVWGtIz5rWHgZjf1EOn86uclnKGwtIREw==; 5:034+qheUH4sf+XfUPCRzkKfbDlKE45RWOpE2WzeZwLS9bV411NtmZtfd0jwABLj46CD31lIb49Xy4WXH9u06X5MsxSpLgphIRPajH/OYPoS3/0L32T0aLkUl1o7jcBp7bVJe/X8awt7tud9uuYQZstWm5Uh8FR0/jXdqAewMilA=; 7:sIlqXqfOUtIPCUEkpNJ12ioOZSc6PFKJ4bXewJxuL4NqQvqSQvfOJAvdA7/R3CFxgoavPor8jopoJsLwNgrIqKXWT8FtSQJFyo9LzfYPXAdm4SRXbmzjoMUyzGz2b1L74z+vi86/nIOPkaIJfx7rYpaD/Uu+VwTuqLkc5KjVgM1ZE6nZWZb9Ku5O2oP57YmJW6Ee5CvFHybGvZf8y37HDsewnjnLk1wuyAp7GIU+3VuK7Y/geFnCQfiMSIVNWPco x-ms-exchange-antispam-srfa-diagnostics: SOS; x-ms-office365-filtering-correlation-id: 33d48294-fc06-4b38-d31a-08d60252b1b9 x-ms-office365-filtering-ht: Tenant x-microsoft-antispam: BCL:0; PCL:0; RULEID:(7020095)(4652040)(8989117)(5600074)(711020)(4618075)(4534165)(4627221)(201703031133081)(201702281549075)(8990107)(2017052603328)(7153060)(7193020); SRVR:DM6PR05MB4396; x-ms-traffictypediagnostic: DM6PR05MB4396: x-microsoft-antispam-prvs: x-exchange-antispam-report-test: UriScan:(60795455431006)(158342451672863)(192374486261705); x-ms-exchange-senderadcheck: 1 x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(8211001083)(6040522)(2401047)(8121501046)(5005006)(10201501046)(3231311)(944501410)(52105095)(3002001)(93006095)(93001095)(6055026)(149027)(150027)(6041310)(20161123560045)(20161123564045)(20161123562045)(20161123558120)(201703131423095)(201702281528075)(20161123555045)(201703061421075)(201703061406153)(6072148)(201708071742011)(7699016); SRVR:DM6PR05MB4396; BCL:0; PCL:0; RULEID:; SRVR:DM6PR05MB4396; x-forefront-prvs: 07658B8EA3 x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(346002)(376002)(39860400002)(366004)(136003)(396003)(199004)(189003)(51444003)(8936002)(93886005)(97736004)(6116002)(6486002)(8676002)(229853002)(6306002)(6512007)(6436002)(6506007)(966005)(102836004)(14454004)(33656002)(76176011)(81166006)(81156014)(99286004)(2906002)(478600001)(316002)(66066001)(3846002)(2900100001)(82746002)(106356001)(86362001)(14444005)(5024004)(58126008)(5660300001)(105586002)(83716003)(11346002)(446003)(110136005)(256004)(2201001)(305945005)(476003)(2501003)(5250100002)(486006)(53936002)(6246003)(36756003)(26005)(2616005)(186003)(25786009)(68736007)(7736002); DIR:OUT; SFP:1102; SCL:1; SRVR:DM6PR05MB4396; H:DM6PR05MB4665.namprd05.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; A:1; MX:1; received-spf: None (protection.outlook.com: juniper.net does not designate permitted sender hosts) x-microsoft-antispam-message-info: Anhd/+zBD3QpG/Q+awaiLRhlJ+h+akv4dDi6A4r6Supf+O3nna8dvF+vVZhfCB8LKcyZeDZsc5VUweJ2c0PcQ7k0JwGqSR3aXeTDgZdobzKO9bK6QwhDHfdcLCzXYsjthHOf+HJDxAkKhSpu97mT7LevHG8rZkoM2o0I73P16JzT9SGxPZVVzqkdbBCU6Y212xW2cCNkrR/VSRKlrQPCxaNCDcdcHI8m/HW98WfCIhfrcBkwEfCBAPqBtKWxFv3zD9MIL+eBHkoGQf3d9oktub6ox5ATN1x2PgzVuWKfJZT9QgBaPwvv/pa8/7wyMlD3Z6JfBVzJsMEDN+/0DkEq8MIfaMKo4aG7iWYiQ7e95wY= spamdiagnosticoutput: 1:99 spamdiagnosticmetadata: NSPM Content-Type: text/plain; charset="utf-8" Content-ID: Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-OriginatorOrg: juniper.net X-MS-Exchange-CrossTenant-Network-Message-Id: 33d48294-fc06-4b38-d31a-08d60252b1b9 X-MS-Exchange-CrossTenant-originalarrivaltime: 15 Aug 2018 01:59:10.9891 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: bea78b3c-4cdb-4130-854a-1d193232e5f4 X-MS-Exchange-Transport-CrossTenantHeadersStamped: DM6PR05MB4396 X-Proofpoint-Virus-Version: vendor=fsecure engine=2.50.10434:, , definitions=2018-08-14_12:, , signatures=0 X-Proofpoint-Spam-Details: rule=outbound_spam_notspam policy=outbound_spam score=0 priorityscore=1501 malwarescore=0 suspectscore=0 phishscore=0 bulkscore=0 spamscore=0 clxscore=1015 lowpriorityscore=0 mlxscore=0 impostorscore=0 mlxlogscore=999 adultscore=0 classifier=spam adjust=0 reason=mlx scancount=1 engine=8.0.1-1807170000 definitions=main-1808150020 Archived-At: Subject: Re: [secdir] secdir review of draft-ietf-netconf-zerotouch-22 X-BeenThere: secdir@ietf.org X-Mailman-Version: 2.1.27 Precedence: list List-Id: Security Area Directorate List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 15 Aug 2018 01:59:18 -0000 DQpIaSBEYXZpZCwNCg0KVHJpbW1pbmcgZG93biB0byBqdXN0IHRoZSByZW1haW5pbmcgaXRlbXMu Li4NCg0KDQo+PiBJIHdhcyB3cml0aW5nIHRoZSBTZWN1cml0eSBDb25zaWRlcmF0aW9ucyBmb3Ig dGhpcyB3aGVuIGl0IHNlZW1lZA0KPj4gdGhhdCB0aGUgYmV0dGVyIHRoaW5nIHRvIGRvIGhlcmUg aXMgdG8gaW5zdGVhZCBhZGQgIm5vdC1iZWZvcmUiIGFuZA0KPj4gIm5vdC1hZnRlciIgbGVhZnMg dG8gdGhlIHplcm90b3VjaCBpbmZvcm1hdGlvbiBhcnRpZmFjdC4gIFRoZSBkcmFmdA0KPj4gd291 bGQgdGhlbiBleHBsYWluIHRoYXQgZGV2aWNlcyBNVVNUIGVuc3VyZSB0aGUgY3VycmVudCB0aW1l IGlzIGluDQo+PiBiZXR3ZWVuLg0KPj4gDQo+PiBXb3VsZCBzdWNoIGFuIGFkZGl0aW9uIHJlc29s dmUgdGhpcyBpc3N1ZSBmb3IgeW91Pw0KPg0KPiBZZXMsIHRoYXQgd291bGQgd29yay4gSXQgcHJv YmFibHkgbWFrZXMgc2Vuc2UgdG8gc2F5IHNvbWV0aGluZyBpbg0KPiB0aGUgc2VjdXJpdHkgY29u c2lkZXJhdGlvbnMgYWJvdXQga2VlcGluZyB0aG9zZSB2YWxpZGl0eSBpbnRlcnZhbHMNCj4gc2hv cnQuDQo+DQo+IElmIHlvdSBwcmVmZXIgdG8gbGVhdmUgdGhlIGRhdGEgZm9ybWF0cyBhbmQgaW1w bGVtZW50YXRpb25zIHVuY2hhbmdlZCwgDQo+IHlvdSBjb3VsZCBhbHNvIGNvbnNpZGVyIHVzaW5n IHBlci1DTVMgRUUgY2VydGlmaWNhdGVzLCBsaWtlIHRoZSBSUEtJIA0KPiBkb2VzOiBodHRwczov L3Rvb2xzLmlldGYub3JnL2h0bWwvcmZjNjQ4MCNzZWN0aW9uLTIuMy4gKEkgaGF2ZW4ndCANCj4g dGhvdWdodCBhYm91dCBob3cgY29tcGF0aWJsZSB0aGF0IG1ldGhvZCBpcyB3aXRoIHplcm90b3Vj aCwgSSdtIGp1c3QNCj4gbWVudGlvbmluZyBpdCBhcyBhbiBhbHRlcm5hdGl2ZSBpbiBjYXNlIGl0 IGhhcHBlbnMgdG8gYmUgZWFzaWVyIGZvciB5b3UuKQ0KDQpBaCwgdGhpcyBpcyBhbiBpbnRlcmVz dGluZyBpZGVhLiAgQWN0dWFsbHksIEknZCBzYXkgdGhhdCB0aGVyZSBpcyBhDQpuZWFyIDEtMSBj b3JyZXNwb25kZW5jZSBiZXR3ZWVuIEVFIGNlcnRpZmljYXRlcyBhbmQgd2hhdCB0aGlzIGRyYWZ0 DQppcyBjYWxsaW5nIHRoZSBvd25lciBjZXJ0LiAgU2VjdGlvbiAzLjIgc2F5cyBhYm91dCBvd25l ciBjZXJ0czoNCg0KICAgVGhlIG93bmVyIGNlcnRpZmljYXRlIENNUyBzdHJ1Y3R1cmUgTVVTVCBj b250YWluIHRoZSBvd25lcg0KICAgY2VydGlmaWNhdGUgaXRzZWxmLCBhcyB3ZWxsIGFzIGFsbCBp bnRlcm1lZGlhdGUgY2VydGlmaWNhdGVzIGxlYWRpbmcNCiAgIHRvIHRoZSAncGlubmVkLWRvbWFp bi1jZXJ0JyBjZXJ0aWZpY2F0ZSBzcGVjaWZpZWQgaW4gdGhlIG93bmVyc2hpcA0KICAgdm91Y2hl ci4gIFRoZSBvd25lciBjZXJ0aWZpY2F0ZSBhcnRpZmFjdCBNQVkgb3B0aW9uYWxseSBpbmNsdWRl IHRoZQ0KICAgJ3Bpbm5lZC1kb21haW4tY2VydCcgYXMgd2VsbC4NCg0KV2hpbGUgd2UgY29uY2Vw dHVhbGx5IHRoaW5rIG9mIHRoZSBvd25lciBjZXJ0aWZpY2F0ZSBhcyBhIHNpbmdsZXRvbiwNCnRo ZXJlIGlzIG5vdGhpbmcgaW4gdGhlIGRyYWZ0IHRoYXQgcHJldmVudHMgYSB1bmlxdWUgb3duZXIg Y2VydGlmaWNhdGUNCnBlciBkZXZpY2UsIHdoaWNoIHdvdWxkIGFsbG93IGZvciBwZXItZGV2aWNl IHZhbGlkaXR5IGFuZCByZXZvY2F0aW9uIHRvDQpiZSBzdXBwb3J0ZWQuDQoNClRoaXMgYmVpbmcg dGhlIGNhc2UsIEkgdGhpbmsgdGhhdCB0aGUgZm9sbG93aW5nIFNlY3VyaXR5IENvbnNpZGVyYXRp b24NCnNlY3Rpb24gc2hvdWxkIGJlIGFkZGVkOg0KDQogICA5LjExLiAgVmFsaWRpdHkgUGVyaW9k IGZvciBaZXJvIFRvdWNoIEluZm9ybWF0aW9uDQoNCiAgIFplcm8gdG91Y2ggaW5mb3JtYXRpb24g ZG9lcyBub3Qgc3BlY2lmeSBhIHZhbGlkaXR5IHBlcmlvZC4gIEZvcg0KICAgaW5zdGFuY2UsIG5l aXRoZXIgcmVkaXJlY3QgaW5mb3JtYXRpb24gbm9yIG9uYm9hcmRpbmcgaW5mb3JtYXRpb24NCiAg IGVuYWJsZSAibm90LWJlZm9yZSIgb3IgIm5vdC1hZnRlciIgdmFsdWVzIHRvIGJlIHNwZWNpZmll ZCwgYW5kDQogICBuZWl0aGVyIGFydGlmYWN0IGFsb25lIGNhbiBiZSByZXZva2VkLg0KDQogICBG b3IgdW5zaWduZWQgZGF0YSBwcm92aWRlZCBieSBhbiB1bnRydXN0ZWQgc291cmNlIG9mIGJvb3Rz dHJhcHBpbmcNCiAgIGRhdGEsIGl0IGlzIG5vdCBtZWFuaW5nZnVsIHRvIGRpc2N1c3MgaXRzIHZh bGlkaXR5IHBlcmlvZCB3aGVuIHRoZQ0KICAgaW5mb3JtYXRpb24gaXRzZWxmIGhhcyBubyBhdXRo ZW50aWNpdHkgYW5kIG1heSBoYXZlIGNvbWUgZnJvbQ0KICAgYW55d2hlcmUuDQoNCiAgIEZvciB1 bnNpZ25lZCBkYXRhIHByb3ZpZGVkIGJ5IGEgdHJ1c3RlZCBzb3VyY2Ugb2YgYm9vdHN0cmFwcGlu ZyBkYXRhLA0KICAgdGhlIGF2YWlsYWJpbGl0eSBvZiB0aGUgZGF0YSBpcyB0aGUgb25seSBtZWFz dXJlIG9mIGl0IGJlaW5nIGN1cnJlbnQuDQogICBTaW5jZSB0aGUgdW50cnVzdGVkIGRhdGEgY29t ZXMgZnJvbSBhIHRydXN0ZWQgc291cmNlLCBpdHMgY3VycmVudA0KICAgYXZhaWxhYmlsaXR5IGlz IG1lYW5pbmdmdWwuDQoNCiAgIEZvciBzaWduZWQgZGF0YSwgd2hldGhlciBwcm92aWRlZCBieSBh biB1bnRydXN0ZWQgb3IgdHJ1c3RlZCBzb3VyY2UNCiAgIG9mIGJvb3RzdHJhcHBpbmcgZGF0YSwg dGhlIHZhbGlkaXR5IGlzIGNvbnN0cmFpbmVkIGJ5IHRoZSB2YWxpZGl0eSBvZg0KICAgdGhlIGJv dGggdGhlIG93bmVyc2hpcCB2b3VjaGVyIGFuZCBvd25lciBjZXJ0aWZpY2F0ZSB1c2VkIHRvDQog ICBhdXRoZW50aWNhdGUgaXQuDQoNCiAgIFRoZSBvd25lcnNoaXAgdm91Y2hlcidzIHZhbGlkaXR5 IGlzIHByaW1hcmlseSBjb25zdHJhaW5lZCBieSB0aGUNCiAgIG93bmVyc2hpcCB2b3VjaGVyJ3Mg ImNyZWF0ZWQtb24iIGFuZCAiZXhwaXJlcy1vbiIgbm9kZXMuICBXaGlsZQ0KICAgW1JGQzgzNjZd IHJlY29tbWVuZHMgc2hvcnQtbGl2ZWQgdm91Y2hlcnMgKHNlZSBTZWN0aW9uIDYuMSksIHRoZQ0K ICAgImV4cGlyZXMtb24iIG5vZGUgbWF5IGJlIHNldCB0byBhbnkgcG9pbnQgaW4gdGhlIGZ1dHVy ZSwgb3Igb21pdHRlZA0KICAgYWx0b2dldGhlciB0byBpbmRpY2F0ZSB0aGF0IHRoZSB2b3VjaGVy IG5ldmVyIGV4cGlyZXMuICBUaGUgb3duZXJzaGlwDQogICB2b3VjaGVyJ3MgdmFsaWRpdHkgaXMg c2Vjb25kYXJpbHkgY29uc3RyYWluZWQgYnkgdGhlIG1hbnVmYWN0dXJlcidzDQogICBQS0kgdXNl ZCB0byBzaWduIHRoZSB2b3VjaGVyOyB3aGlsc3QgYW4gb3duZXJzaGlwIHZvdWNoZXIgY2Fubm90 IGJlDQogICByZXZva2VkIGRpcmVjdGx5LCB0aGUgUEtJIHVzZWQgdG8gc2lnbiBpdCBtYXkgYmUu DQoNCiAgIFRoZSBvd25lciBjZXJ0aWZpY2F0ZSdzIHZhbGlkaXR5IGlzIHByaW1hcmlseSBjb25z dHJhaW5lZCBieSB0aGUNCiAgIFguNTA5J3MgdmFsaWRpdHkgZmllbGQsIHRoZSAibm90QmVmb3Jl IiBhbmQgIm5vdEFmdGVyIiB2YWx1ZXMsIGFzDQogICBzcGVjaWZpZWQgYnkgdGhlIGNlcnRpZmlj YXRlIGF1dGhvcml0eSB0aGF0IHNpZ25lZCBpdC4gIFRoZSBvd25lcg0KICAgY2VydGlmaWNhdGUn cyB2YWxpZGl0eSBpcyBzZWNvbmRhcmlseSBjb25zdHJhaW5lZCBieSB0aGUgdmFsaWRpdHkgb2YN CiAgIHRoZSBQS0kgdXNlZCB0byBzaWduIHRoZSB2b3VjaGVyLiAgT3duZXIgY2VydGlmaWNhdGVz IG1heSBiZSByZXZva2VkDQogICBkaXJlY3RseS4NCg0KICAgRm9yIG93bmVycyB0aGF0IHdpc2gg dG8gaGF2ZSBtYXhpbXVtIGZsZXhpYmlsaXR5IGluIHRoZWlyIGFiaWxpdHkgdG8NCiAgIHNwZWNp ZnkgYW5kIGNvbnN0cmFpbiB0aGUgdmFsaWRpdHkgb2Ygc2lnbmVkIGRhdGEsIGl0IGlzIFJFQ09N TUVOREVEDQogICB0aGF0IGEgdW5pcXVlIG93bmVyIGNlcnRpZmljYXRlIGlzIGNyZWF0ZWQgZm9y IGVhY2ggc2lnbmVkIGFydGlmYWN0Lg0KICAgTm90IG9ubHkgZG9lcyB0aGlzIGVuYWJsZSBhIHZh bGlkaXR5IHBlcmlvZCB0byBiZSBzcGVjaWZpZWQsIGZvciBlYWNoDQogICBhcnRpZmFjdCwgYnV0 IGl0IGFsc28gZW5hYmxlcyB0byB0aGUgdmFsaWRpdHkgb2YgZWFjaCBhcnRpZmFjdCB0byBiZQ0K ICAgcmV2b2tlLg0KDQpXaGF0IGRvIHlvdSB0aGluaz8NCg0KDQoNCj4+IERvIHlvdSB0aGluayBp dCdzIHdvcnRoIGFkZGluZyBhIHdhcm5pbmcgdG8gb3BlcmF0b3JzIHNvbWV3aGVyZSB0bw0KPj4g cmVtaW5kIHRoZW0gdG8gY2hhbmdlIHRoZSBmbGFnPyBPciBtYXliZSB0aGUgImRldmljZSBTSE9V TEQgcmVwb3J0IGENCj4+IHdhcm5pbmcgaWYgdGhlIGJvb3RzdHJhcHBpbmcgY29tcGxldGVzIHN1 Y2Nlc3NmdWxseSBidXQgemVyb3RvdWNoDQo+PiBib290c3RyYXBwaW5nIGlzIHN0aWxsIGVuYWJs ZWQiPw0KDQpJIGZvcmdvdCB0byByZXNwb25kIHRvIHRoaXMgY29tbWVudCBvZiB5b3VyIGJlZm9y ZS4gIFRvIGFkZHJlc3MgdGhpcw0KY29tbWVudCwgSSBhZGRlZCB0aGUgZm9sbG93aW5nOg0KDQog ICBJZiB0aGUgb25ib2FyZGluZyBpbmZvcm1hdGlvbiB3YXMgb2J0YWluZWQgZnJvbSBhIHRydXN0 ZWQgYm9vdHN0cmFwDQogICBzZXJ2ZXIsIGFuZCB0aGUgcmVzdWx0IG9mIHRoZSBib290c3RyYXBw aW5nIHByb2Nlc3MgZGlkIG5vdCBkaXNhYmxlDQogICB0aGUgImZsYWcgdG8gZW5hYmxlIHplcm90 b3VjaCBib290c3RyYXBwaW5nIiBkZXNjcmliZWQgaW4NCiAgIFNlY3Rpb24gNS4xLCB0aGUgZGV2 aWNlIFNIT1VMRCBzZW5kIGFuICJib290c3RyYXAtd2FybmluZyIgcHJvZ3Jlc3MNCiAgIHJlcG9y dC4NCg0KDQoNCg0KPj4+IEkgdGhpbmsgaXQncyBhbHJlYWR5IGNsZWFyIHdoYXQgYW4gZXJyb3Ig aW4gcGFyYWdyYXBoIDYgaXMuIFdoYXQgSSBmb3VuZA0KPj4+IHVuY2xlYXIgd2FzIHdoYXQgdG8g ZG8gd2l0aCBlcnJvcnMgaW4gcGFyYWdyYXBocyA2IG9yIDcuIFllcywgZG9uJ3QgZ28NCj4+PiBv biB0byB0aGUgbmV4dCBzdGVwLCBidXQgd2hhdCBhYm91dDogSW4gcGFyYWdyYXBoIDYsIHNob3Vs ZCB0aGUgZGV2aWNlDQo+Pj4gcm9sbGJhY2sgYW55IHBhcnRpYWwgY29uZmlnIHVwZGF0ZSBpZiB0 aGVyZSdzIGFuIGVycm9yPyBJbiBwYXJhZ3JhcGggNywNCj4+PiBzaG91bGQgdGhlIGRldmljZSBy b2xsYmFjayBhbGwgY29uZmlnIGZyb20gcGFyYWdyYXBoIDYgaWYgdGhlcmUncyBhbiBlcnJvcj8N Cj4+IA0KPj4gVGhpcyB2ZXJ5IHNhbWUgaXNzdWUgd2FzIHJhaXNlZCB0byBtZSBzZXBhcmF0ZWx5 IGFuZCBteSByZXNwb25zZSBoYXMgYmVlbg0KPj4gdG8gZXNzZW50aWFsbHkgcmV3cml0ZSBzZWN0 aW9uIDUuNiB0byBiZSBjcnlzdGFsIGNsZWFyIG9uIGhvdyBlcnJvcnMgYXJlDQo+PiBoYW5kbGVk LCBlc3BlY2lhbGx5IHdpdGggcmVnYXJkIHRvIHN0YXRlIHJldGFpbmVkLiAgUGxlYXNlIHNlZSBh dHRhY2hlZA0KPj4gZm9yIGEgcHJldmlldyBvZiAtMjMuDQo+DQo+IE11Y2ggYmV0dGVyLCB0aGFu a3MhDQoNCkZJVywgdGhpcyB0ZXh0IGlzIGdvaW5nIHRocnUgYSBXRyBjaHVybiwgYnV0IHRoZSBl c3NlbmNlIG9mIHdoYXQgSSBhdHRhY2hlZA0KYmVmb3JlIGlzIGJlaW5nIHJldGFpbmVkLg0KDQoN Cg0KDQpLZW50DQoNCg0KDQoNCg0K From nobody Wed Aug 15 20:12:58 2018 Return-Path: X-Original-To: secdir@ietfa.amsl.com Delivered-To: secdir@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id AE5A0130EE8; Wed, 15 Aug 2018 20:05:08 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=ietf.org; s=ietf1; t=1534388708; bh=34f2R18nFPvXv5mrEvk5yjSJdZit9TcCtuZSR0MVPaw=; h=To:From:Date:Subject:List-Id:List-Unsubscribe:List-Archive: List-Post:List-Help:List-Subscribe; b=QCY5cb7OwHjcIK1ArkCG1/z3EJCSwLYDPrfag3KmMsZdyuj6IQhjiTsWqCSjlTDCN qkh0ZPCYnKE6f284gR7eVsQe5GtCiUY8pl8/tGTebkX3tnA1S0qj8WMvfQcfJmwg59 oltpy95ijg+ge6S4hYgixHBh9mspg6QvRwmg+I7Q= X-Mailbox-Line: From new-work-bounces@ietf.org Wed Aug 15 20:05:08 2018 Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id F1904130E4F; Wed, 15 Aug 2018 20:05:07 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=ietf.org; s=ietf1; t=1534388708; bh=34f2R18nFPvXv5mrEvk5yjSJdZit9TcCtuZSR0MVPaw=; h=To:From:Date:Subject:List-Id:List-Unsubscribe:List-Archive: List-Post:List-Help:List-Subscribe; b=QCY5cb7OwHjcIK1ArkCG1/z3EJCSwLYDPrfag3KmMsZdyuj6IQhjiTsWqCSjlTDCN qkh0ZPCYnKE6f284gR7eVsQe5GtCiUY8pl8/tGTebkX3tnA1S0qj8WMvfQcfJmwg59 oltpy95ijg+ge6S4hYgixHBh9mspg6QvRwmg+I7Q= X-Original-To: new-work@ietfa.amsl.com Delivered-To: new-work@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 0D7B3130E4F for ; Wed, 15 Aug 2018 20:05:06 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.059 X-Spam-Level: X-Spam-Status: No, score=-4.059 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HK_RANDOM_ENVFROM=0.001, RCVD_IN_DNSWL_MED=-2.3, RCVD_IN_SBL=0.141, SPF_PASS=-0.001] autolearn=no autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id CcaULvlBsL-R for ; Wed, 15 Aug 2018 20:05:04 -0700 (PDT) Received: from raoul.w3.org (raoul.w3.org [128.30.52.128]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id D7EF1130E4C for ; Wed, 15 Aug 2018 20:05:04 -0700 (PDT) Received: from [112.103.220.134] (helo=[192.168.1.2]) by raoul.w3.org with esmtpsa (TLS1.2:ECDHE_RSA_AES_128_GCM_SHA256:128) (Exim 4.89) (envelope-from ) id 1fq8at-0005pY-2H for new-work@ietf.org; Thu, 16 Aug 2018 03:05:03 +0000 To: new-work@ietf.org From: Xueyuan Message-ID: <13584802-9b00-d36e-4f0d-141f9c1fea38@w3.org> Date: Thu, 16 Aug 2018 11:04:59 +0800 User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.12; rv:52.0) Gecko/20100101 Thunderbird/52.9.1 MIME-Version: 1.0 Content-Language: en-US Archived-At: X-BeenThere: new-work@ietf.org X-Mailman-Version: 2.1.27 Precedence: list Content-Transfer-Encoding: base64 Content-Type: text/plain; charset="utf-8"; Format="flowed" Errors-To: new-work-bounces@ietf.org Sender: "new-work" Archived-At: X-Mailman-Approved-At: Wed, 15 Aug 2018 20:12:57 -0700 Subject: [secdir] [new-work] Proposed W3C Charter: Immersive Web Working Group (until 2018-09-14) X-BeenThere: secdir@ietf.org List-Id: Security Area Directorate List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 16 Aug 2018 03:05:10 -0000 SGVsbG8sCgpUb2RheSBXM0MgQWR2aXNvcnkgQ29tbWl0dGVlIFJlcHJlc2VudGF0aXZlcyByZWNl aXZlZCBhIFByb3Bvc2FsCnRvIHJldmlldyBhIGRyYWZ0IGNoYXJ0ZXIgZm9yIHRoZSBJbW1lcnNp dmUgV2ViIFdvcmtpbmcgR3JvdXA6CiDCoCBodHRwczovL3d3dy53My5vcmcvMjAxOC8wOC9pbW1l cnNpdmUtd2ViLXdnLWNoYXJ0ZXIuaHRtbAoKQXMgcGFydCBvZiBlbnN1cmluZyB0aGF0IHRoZSBj b21tdW5pdHkgaXMgYXdhcmUgb2YgcHJvcG9zZWQgd29yawphdCBXM0MsIHRoaXMgZHJhZnQgY2hh cnRlciBpcyBwdWJsaWMgZHVyaW5nIHRoZSBBZHZpc29yeQpDb21taXR0ZWUgcmV2aWV3IHBlcmlv ZC4KClczQyBpbnZpdGVzIHB1YmxpYyBjb21tZW50cyB0aHJvdWdoIDIwMTgtMDktMTQgb24gdGhl CnByb3Bvc2VkIGNoYXJ0ZXIuIFBsZWFzZSBzZW5kIGNvbW1lbnRzIHRvCnB1YmxpYy1uZXctd29y a0B3My5vcmcsIHdoaWNoIGhhcyBhIHB1YmxpYyBhcmNoaXZlOgogwqAgaHR0cDovL2xpc3RzLncz Lm9yZy9BcmNoaXZlcy9QdWJsaWMvcHVibGljLW5ldy13b3JrLwoKT3RoZXIgdGhhbiBjb21tZW50 cyBzZW50IGluIGZvcm1hbCByZXNwb25zZXMgYnkgVzNDIEFkdmlzb3J5CkNvbW1pdHRlZSBSZXBy ZXNlbnRhdGl2ZXMsIFczQyBjYW5ub3QgZ3VhcmFudGVlIGEgcmVzcG9uc2UgdG8KY29tbWVudHMu IElmIHlvdSB3b3JrIGZvciBhIFczQyBNZW1iZXIgWzFdLCBwbGVhc2UgY29vcmRpbmF0ZQp5b3Vy IGNvbW1lbnRzIHdpdGggeW91ciBBZHZpc29yeSBDb21taXR0ZWUgUmVwcmVzZW50YXRpdmUuIEZv cgpleGFtcGxlLCB5b3UgbWF5IHdpc2ggdG8gbWFrZSBwdWJsaWMgY29tbWVudHMgdmlhIHRoaXMg bGlzdCBhbmQKaGF2ZSB5b3VyIEFkdmlzb3J5IENvbW1pdHRlZSBSZXByZXNlbnRhdGl2ZSByZWZl ciB0byBpdCBmcm9tIGhpcwpvciBoZXIgZm9ybWFsIHJldmlldyBjb21tZW50cy4KCklmIHlvdSBz aG91bGQgaGF2ZSBhbnkgcXVlc3Rpb25zIG9yIG5lZWQgZnVydGhlciBpbmZvcm1hdGlvbiwgcGxl YXNlCmNvbnRhY3QgRG9taW5pcXVlIEhhemFlbC1NYXNzaWV1eCA8ZG9tQHczLm9yZz4uCgpUaGFu ayB5b3UsCgpYdWV5dWFuIEppYSwgVzNDIE1hcmtldGluZyAmIENvbW11bmljYXRpb25zCgpbMV0g aHR0cDovL3d3dy53My5vcmcvQ29uc29ydGl1bS9NZW1iZXIvTGlzdAoKX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX18KbmV3LXdvcmsgbWFpbGluZyBsaXN0Cm5l dy13b3JrQGlldGYub3JnCmh0dHBzOi8vd3d3LmlldGYub3JnL21haWxtYW4vbGlzdGluZm8vbmV3 LXdvcmsK From nobody Thu Aug 16 06:27:28 2018 Return-Path: X-Original-To: secdir@ietfa.amsl.com Delivered-To: secdir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C9A3E130F0B for ; Thu, 16 Aug 2018 06:27:25 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -3.332 X-Spam-Level: X-Spam-Status: No, score=-3.332 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FROM_EXCESS_BASE64=0.979, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001, T_DKIMWL_WL_HIGH=-0.01] autolearn=unavailable autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=ericsson.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 91tZE76vLdkf for ; Thu, 16 Aug 2018 06:27:19 -0700 (PDT) Received: from sessmg22.ericsson.net (sessmg22.ericsson.net [193.180.251.58]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 348F6130E8E for ; Thu, 16 Aug 2018 06:27:18 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; d=ericsson.com; s=mailgw201801; c=relaxed/simple; q=dns/txt; i=@ericsson.com; t=1534426035; h=From:Sender:Reply-To:Subject:Date:Message-ID:To:CC:MIME-Version:Content-Type: Content-Transfer-Encoding:Content-ID:Content-Description:Resent-Date:Resent-From: Resent-Sender:Resent-To:Resent-Cc:Resent-Message-ID:In-Reply-To:References:List-Id: List-Help:List-Unsubscribe:List-Subscribe:List-Post:List-Owner:List-Archive; bh=JChl/fUCi6YmIVDi44fKc+7mr0hwJnBh/Fr7J09vR1Y=; b=WaXDzPYFewyVcsA1f3K/Wn/JnvNkPDiq1X8K1sjUkOWolHghp3T60QHhylEJnwNR 2Iocw8uOYGnHwoS0tPFEEd+E5TnpGgtrZ9vUJlpGZHv1HfkNMNJlbnEZv8fg3f3A 8ixp09nX+H44mrHC8wzivOJihb+7aYzl2PAlv+eNTt8=; X-AuditID: c1b4fb3a-499ff7000000145f-8b-5b757bb3a561 Received: from ESESSMB503.ericsson.se (Unknown_Domain [153.88.183.121]) by sessmg22.ericsson.net (Symantec Mail Security) with SMTP id 26.71.05215.3BB757B5; Thu, 16 Aug 2018 15:27:15 +0200 (CEST) Received: from ESESSMB504.ericsson.se (153.88.183.165) by ESESSMB503.ericsson.se (153.88.183.164) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256_P256) id 15.1.1466.3; Thu, 16 Aug 2018 15:27:15 +0200 Received: from ESESSMB504.ericsson.se ([153.88.183.192]) by ESESSMB504.ericsson.se ([153.88.183.192]) with mapi id 15.01.1466.003; Thu, 16 Aug 2018 15:27:15 +0200 From: =?utf-8?B?R8O2cmFuIFNlbGFuZGVy?= To: "secdir@ietf.org" CC: "draft-ietf-core-object-security.all@ietf.org" , "ietf@ietf.org" , "core@ietf.org" Thread-Topic: Secdir last call review of draft-ietf-core-object-security-14 Thread-Index: AQHUKFIto6EBYWgkFk2V848NTX7yUqTAzU2AgAGrvYA= Date: Thu, 16 Aug 2018 13:27:15 +0000 Message-ID: References: <153298864768.8255.12499424928369646545@ietfa.amsl.com> In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/14.7.3.170325 x-originating-ip: [153.88.183.157] Content-Type: text/plain; charset="utf-8" Content-ID: <6658F16289D8DC45A4D12DF6F5A4D508@ericsson.com> Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFtrIIsWRmVeSWpSXmKPExsUyM2J7pe7m6tJogyfbjS32vV3PbPGtZx6r xbON81ksPix8yOLA4rFkyU+mAMYoLpuU1JzMstQifbsEroxTm46wF/x5zV6x6toVxgbGOZfY uxg5OSQETCQ+v9rD3MXIxSEkcJRRou3edRaQhJDAN0aJW39tIRLLGCVWLupkBkmwCbhIPGh4 xARiiwioS3w9v5UJpIhZYDmjxInG72AJYQEvia9Hb7FCFHlLrH20iB3CtpJ4PWcGYxcjBweL gKrE32XiIGFeAQuJRfuWsUIsLpLY/WIhWAmngKXE9O+mIGFGATGJ76fWgE1nFhCXuPVkPhPE AwISS/acZ4awRSVePv4HNkZUQE9ib087G0RcSWJL7xYmkJHMApoS63fpQ4yxlrh67hArhK0o MaX7ITvENYISJ2c+YZnAKDELybZZCN2zkHTPQtI9C0n3AkbWVYyixanFxbnpRkZ6qUWZycXF +Xl6eaklmxiBEXlwy2+rHYwHnzseYhTgYFTi4ZVdVxItxJpYVlyZe4hRgoNZSYTXvaQ0Wog3 JbGyKrUoP76oNCe1+BCjNAeLkjivU5pFlJBAemJJanZqakFqEUyWiYNTqoEx7ttj37brrkrW 884xxTnx7NNQr+vf8vnzMcnIC/EP98szPhZZcohd1+Nd/IW+JH1hx3P/3QLzv/e7/pVSnaBx L3IG55y0z9oLX+cI8M7OX+SrebJxHn9oYARn0gTTvdqNf73W6Ca6/7rbHxCR2fhlaZ/7WelV RVlT3xzm2Xmqqka/eP8jyQQlluKMREMt5qLiRAA+ZUu5xAIAAA== Archived-At: Subject: Re: [secdir] Secdir last call review of draft-ietf-core-object-security-14 X-BeenThere: secdir@ietf.org X-Mailman-Version: 2.1.27 Precedence: list List-Id: Security Area Directorate List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 16 Aug 2018 13:27:26 -0000 DQo+SGVsbG8gRGFuaWVsLA0KPg0KPlRoYW5rcyBmb3IgeW91ciByZXZpZXcuIFBsZWFzZSBmaW5k IHJlc3BvbnNlcyBpbmxpbmUuDQoNCiAgR8O2cmFuDQo+DQo+T24gMjAxOC0wNy0zMSwgMDA6MTAs ICJEYW5pZWwgTWlnYXVsdCIgPGRhbmllbC5taWdhdWx0QGVyaWNzc29uLmNvbT4NCj53cm90ZToN Cj4NCj4+UmV2aWV3ZXI6IERhbmllbCBNaWdhdWx0DQo+PlJldmlldyByZXN1bHQ6IEhhcyBJc3N1 ZXMNCj4+DQo+PkhpLA0KPj4NCj4+UmV2aWV3ZXI6IERhbmllbCBNaWdhdWx0DQo+PlJldmlldyBy ZXN1bHQ6IEhhcyBJc3N1ZXMNCj4+DQo+PkkgaGF2ZSByZXZpZXdlZCB0aGlzIGRvY3VtZW50IGFz IHBhcnQgb2YgdGhlIHNlY3VyaXR5IGRpcmVjdG9yYXRlJ3MNCj4+b25nb2luZw0KPj5lZmZvcnQg dG8gcmV2aWV3IGFsbCBJRVRGIGRvY3VtZW50cyBiZWluZyBwcm9jZXNzZWQgYnkgdGhlIElFU0cu ICBUaGVzZQ0KPj5jb21tZW50cyB3ZXJlIHdyaXR0ZW4gcHJpbWFyaWx5IGZvciB0aGUgYmVuZWZp dCBvZiB0aGUgc2VjdXJpdHkgYXJlYQ0KPj5kaXJlY3RvcnMuDQo+PiBEb2N1bWVudCBlZGl0b3Jz IGFuZCBXRyBjaGFpcnMgc2hvdWxkIHRyZWF0ICB0aGVzZSBjb21tZW50cyBqdXN0IGxpa2UNCj4+ YW55DQo+Pm90aGVyIGxhc3QgY2FsbCBjb21tZW50cy4NCj4+DQo+PlRoZSBzdW1tYXJ5IG9mIHRo ZSByZXZpZXcgaXMgSGFzIChzbWFsbCkgSXNzdWVzLg0KPj4NCj4+SSBhbSBub3QgYW4gZXhwZXJ0 IGluIENvQVAuIFRoZSBkb2N1bWVudCBpcyB3ZWxsIHdyaXR0ZW4sIGFuZCBJIGJlbGlldmUNCj4+ c2VjdXJpbmcgb2JqZWN0cyBpcyBpbXBvcnRhbnQuIEkgaGFkIGNvbW1lbnRzIHJlZ2FyZGluZyB0 aGUgZGVzY3JpcHRpb24NCj4+b2YNCj4+c2VjdXJpdHkgY29udGV4dHMuIEkgaGVzaXRhdGVkIGJl dHdlZW4gTml0cyBhbmQgSXNzdWVzLiBJIGRvIG5vdCBiZWxpZXZlDQo+PnRoZXNlDQo+PmFyZSBt YWpvciBkZXNpZ24gaXNzdWVzLCBhbmQgc29tZSBjbGFyaWZpY2F0aW9ucyBtYXkgYmUgc3VmZmlj aWVudC4gT3RoZXINCj4+Y29tbWVudHMgYXJlIG1vc3RseSBlZGl0b3JpYWwgbml0cy4gUGxlYXNl IGZpbmQgYWJvdmUgbXkgY29tbWVudHMuIEkgYW0NCj4+aGFwcHkNCj4+dG8gZm9sbG93IHVwIHRo ZSB1cGRhdGVzLg0KPj4NCj4+ICAgICBPYmplY3QgU2VjdXJpdHkgZm9yIENvbnN0cmFpbmVkIFJF U1RmdWwgRW52aXJvbm1lbnRzIChPU0NPUkUpDQo+PiAgICAgICAgICAgICAgICAgICBkcmFmdC1p ZXRmLWNvcmUtb2JqZWN0LXNlY3VyaXR5LTE0DQo+Pg0KPj4xLiAgSW50cm9kdWN0aW9uDQo+Pg0K Pj4gICBUaGUgQ29uc3RyYWluZWQgQXBwbGljYXRpb24gUHJvdG9jb2wgKENvQVApIFtSRkM3MjUy XSBpcyBhIHdlYg0KPj4gICB0cmFuc2ZlciBwcm90b2NvbCwgZGVzaWduZWQgZm9yIGNvbnN0cmFp bmVkIG5vZGVzIGFuZCBuZXR3b3Jrcw0KPj4gICBbUkZDNzIyOF0sIGFuZCBtYXkgYmUgbWFwcGVk IGZyb20gSFRUUCBbUkZDODA3NV0uICBDb0FQIHNwZWNpZmllcyB0aGUNCj4+ICAgdXNlIG9mIHBy b3hpZXMgZm9yIHNjYWxhYmlsaXR5IGFuZCBlZmZpY2llbmN5IGFuZCByZWZlcmVuY2VzIERUTFMN Cj4+ICAgW1JGQzYzNDddIGZvciBzZWN1cml0eS4gIENvQVAtdG8tQ29BUCwgSFRUUC10by1Db0FQ LCBhbmQgQ29BUC10by1IVFRQDQo+PiAgIHByb3hpZXMgcmVxdWlyZSBEVExTIG9yIFRMUyBbUkZD NTI0Nl0gdG8gYmUgdGVybWluYXRlZCBhdCB0aGUgcHJveHkuDQo+PiAgIFRoZSBwcm94eSB0aGVy ZWZvcmUgbm90IG9ubHkgaGFzIGFjY2VzcyB0byB0aGUgZGF0YSByZXF1aXJlZCBmb3INCj4+ICAg cGVyZm9ybWluZyB0aGUgaW50ZW5kZWQgcHJveHkgZnVuY3Rpb25hbGl0eSwgYnV0IGlzIGFsc28g YWJsZSB0bw0KPj4gICBlYXZlc2Ryb3Agb24sIG9yIG1hbmlwdWxhdGUgYW55IHBhcnQgb2YsIHRo ZSBtZXNzYWdlIHBheWxvYWQgYW5kDQo+PiAgIG1ldGFkYXRhIGluIHRyYW5zaXQgYmV0d2VlbiB0 aGUgZW5kcG9pbnRzLiAgVGhlIHByb3h5IGNhbiBhbHNvDQo+PiAgIGluamVjdCwgZGVsZXRlLCBv ciByZW9yZGVyIHBhY2tldHMgc2luY2UgdGhleSBhcmUgbm8gbG9uZ2VyIHByb3RlY3RlZA0KPj4g ICBieSAoRClUTFMuDQo+PjxtZ2x0Pg0KPj5UaGUgcHJveHkgY2FuIGFsbW9zdCBkbyB3aGF0ZXZl ciBpdCB3YW50cyBhcyBtZW50aW9uZWQgaW4gdGhlIHNlY29uZA0KPj5zZW50ZW5jZS4NCj4+QWNj ZXNzaW5nIHRoZSBkYXRhIGVuYWJsZXMgaXQgdG8gcGFzc2l2ZWx5IG1vbml0b3IgdGhlIGNvbW11 bmljYXRpb24uICBJDQo+PndvdWxkDQo+PnRodXMgcHJvcG9zZSBzb21lIHRleHQgYXJvdW5kIHRo ZXNlIGxpbmVzOg0KPj4NCj4+T0xEOg0KPj5UaGUgcHJveHkgdGhlcmVmb3JlIG5vdCBvbmx5IGhh cyBhY2Nlc3MgdG8gdGhlIGRhdGEgcmVxdWlyZWQgZm9yDQo+PiAgIHBlcmZvcm1pbmcgdGhlIGlu dGVuZGVkIHByb3h5IGZ1bmN0aW9uYWxpdHksIGJ1dCBpcyBhbHNvIGFibGUgdG8NCj4+ICAgZWF2 ZXNkcm9wIG9uLCBvciBtYW5pcHVsYXRlIGFueSBwYXJ0IG9mLCB0aGUgbWVzc2FnZSBwYXlsb2Fk IGFuZA0KPj4gICBtZXRhZGF0YSBpbiB0cmFuc2l0IGJldHdlZW4gdGhlIGVuZHBvaW50cy4gIFRo ZSBwcm94eSBjYW4gYWxzbw0KPj4gICBpbmplY3QsIGRlbGV0ZSwgb3IgcmVvcmRlciBwYWNrZXRz IHNpbmNlIHRoZXkgYXJlIG5vIGxvbmdlciBwcm90ZWN0ZWQNCj4+ICAgYnkgKEQpVExTLg0KPj4N Cj4+TkVXOg0KPj5UaGUgcHJveHkgdGhlcmVmb3JlIGhhcyBhY2Nlc3MgdG8gdGhlIGRhdGEgcmVx dWlyZWQgZm9yDQo+PiAgIHBlcmZvcm1pbmcgdGhlIGludGVuZGVkIHByb3h5IGZ1bmN0aW9uYWxp dHksIGFuZCBzbyBjYW4gcGFzc2l2ZWx5DQo+Pm1vbml0b3INCj4+ICAgdGhlIGNvbW11bmljYXRp b25zLiBJbiBhZGRpdGlvbiwgdGhlIHByb3h5IGNhbiBhbHNvIGluamVjdCwgZGVsZXRlLCBvcg0K Pj4gICByZW9yZGVyIHBhY2tldHMgc2luY2UgdGhleSBhcmUgbm8gbG9uZ2VyIHByb3RlY3RlZCBi eSAoRClUTFMuDQo+PjwvbWdsdD4NCj4NCj4NCj5bR1M6XSBJIGRpZG7igJl0IHJlYWxseSB1bmRl cnN0YW5kIHRoaXMgY29tbWVudC4gVGhlIHBvaW50IHdlIHRyaWVkIHRvIG1ha2UNCj5pcyB0aGF0 IHNpbmNlIChEKVRMUyBwcm90ZWN0cyBldmVyeXRoaW5nIG9yIG5vdGhpbmcsIGluIG9yZGVyIGZv ciBlLmcuIGENCj5mb3J3YXJkIHByb3h5IHRvIHJlYWQgYW5kIGNoYW5nZSBzZWxlY3RlZCBDb0FQ IG9wdGlvbnMgdG8gcGVyZm9ybSBpdHMNCj5pbnRlbmRlZCBmdW5jdGlvbiwgdGhlIGVudGlyZSBD b0FQIG1lc3NhZ2UgbmVlZHMgdG8gYmUgZGVjcnlwdGVkLCB3aGljaA0KPmVuYWJsZXMgYSByYW5n ZSBvZiBhdHRhY2tzLiBJIHRoaW5rIHlvdXIgcHJvcG9zZWQgc2VudGVuY2UgZG9lcyBub3QNCj5l eHBsYWluIHRoYXQgYWNjdXJhdGVseTogIlRoZSBwcm94eSB0aGVyZWZvcmUgaGFzIGFjY2VzcyB0 byB0aGUgZGF0YQ0KPnJlcXVpcmVkIGZvciBwZXJmb3JtaW5nIHRoZSBpbnRlbmRlZCBwcm94eSBm dW5jdGlvbmFsaXR5LCBhbmQgc28gY2FuDQo+cGFzc2l2ZWx5IG1vbml0b3IgdGhlIGNvbW11bmlj YXRpb25zLuKAnSBiZWNhdXNlIGl0IGlzIG5vdCB0aGUgZGF0YSByZXF1aXJlZA0KPmZvciBwZXJm b3JtaW5nIHRoZSBpbnRlbmRlZCBwcm94eSBmdW5jdGlvbmFsaXR5IHRoYXQgaXMgaW50ZXJlc3Rp bmcgaGVyZSwNCj5pdA0KPmlzIHRoZSBvdGhlciBkYXRhIHRoYXQgYWxzbyBiZWNvbWVzIGF2YWls YWJsZSB0byB0aGUgcHJveHkgYXMgdGhlIGVudGlyZQ0KPm1lc3NhZ2UgbmVlZHMgdG8gYmUgZGVj cnlwdGVkLiBUaGUgdGVybSDigJxlYXZlc2Ryb3BwaW5n4oCdIGlzIHVzZWQgaW4gdGhlIG9sZA0K PnRleHQsIHdvdWxkIG5vdCB0aGF0IGNvdmVyIOKAnHBhc3NpdmVseSBtb25pdG9y4oCdPyBQZXJo YXBzIHlvdSBjb3VsZCBmdXJ0aGVyDQo+ZWxhYm9yYXRlDQo+b24gd2hhdCB5b3UgdGhpbmsgaXMg aW5jb3JyZWN0IG9yIG1pc3NpbmcgaW4gdGhlIGN1cnJlbnQgdGV4dD8NCj4NCj4+DQo+PiAgIFRo aXMgZG9jdW1lbnQgZGVmaW5lcyB0aGUgT2JqZWN0IFNlY3VyaXR5IGZvciBDb25zdHJhaW5lZCBS RVNUZnVsDQo+PiAgIEVudmlyb25tZW50cyAoT1NDT1JFKSBzZWN1cml0eSBwcm90b2NvbCwgcHJv dGVjdGluZyBDb0FQIGFuZCBDb0FQLQ0KPj4gICBtYXBwYWJsZSBIVFRQIHJlcXVlc3RzIGFuZCBy ZXNwb25zZXMgZW5kLXRvLWVuZCBhY3Jvc3MgaW50ZXJtZWRpYXJ5DQo+PiAgIG5vZGVzIHN1Y2gg YXMgQ29BUCBmb3J3YXJkIHByb3hpZXMgYW5kIGNyb3NzLXByb3RvY29sIHRyYW5zbGF0b3JzDQo+ PiAgIGluY3VkaW5nIEhUVFAtdG8tQ29BUCBwcm94aWVzIFtSRkM4MDc1XS4gIEluIGFkZGl0aW9u IHRvIHRoZSBjb3JlDQo+PiAgIENvQVAgZmVhdHVyZXMgZGVmaW5lZCBpbiBbUkZDNzI1Ml0sIE9T Q09SRSBzdXBwb3J0cyBPYnNlcnZlDQo+PiAgIFtSRkM3NjQxXSwgQmxvY2std2lzZSBbUkZDNzk1 OV0sIE5vLVJlc3BvbnNlIFtSRkM3OTY3XSwgYW5kIFBBVENIIGFuZA0KPj4gICBGRVRDSCBbUkZD ODEzMl0uDQo+PjxtZ2x0Pg0KPj5NYXliZSB0b28gbWFueSAiYW5kIi4NCj4+PC9tZ2x0Pg0KPg0K PltHUzpdIEkgc2VlIHdoYXQgeW91IG1lYW4uIFRoZSB0aXRsZSBvZiBSRkMgODEzMiBpcyAiUEFU Q0ggYW5kIEZFVENIDQo+bWV0aG9kcyBmb3IgQ29BUOKAnS4gUGVyaGFwcyB3ZSBqdXN0IGNoYW5n ZSB0aGUgb3JkZXIgb2YgdGhlIGV4YW1wbGVzIGluIHRoZQ0KPmxhc3Qgc2VudGVuY2U6IA0KIE5F Vw0KPiJJbiBhZGRpdGlvbiB0byB0aGUgY29yZSBDb0FQIGZlYXR1cmVzIGRlZmluZWQgaW4NCj5b UkZDNzI1Ml0sIE9TQ09SRSBzdXBwb3J0cyBPYnNlcnZlIFtSRkM3NjQxXSwgQmxvY2std2lzZSBb UkZDNzk1OV0sIFBBVENIDQo+YW5kIEZFVENIIFtSRkM4MTMyXSwgYW5kIE5vLVJlc3BvbnNlIFtS RkM3OTY3XS7igJ0/DQo+DQo+DQo+DQo+Pg0KPj5BbiBhbmFseXNpcyBvZiBlbmQtdG8tZW5kIHNl Y3VyaXR5IGZvciBDb0FQDQo+PiAgIG1lc3NhZ2VzIHRocm91Z2ggc29tZSB0eXBlcyBvZiBpbnRl cm1lZGlhcnkgbm9kZXMgaXMgcGVyZm9ybWVkIGluDQo+PiAgIFtJLUQuaGFydGtlLWNvcmUtZTJl LXNlY3VyaXR5LXJlcXNdLiAgT1NDT1JFIGVzc2VudGlhbGx5IHByb3RlY3RzIHRoZQ0KPj4gICBS RVNUZnVsIGludGVyYWN0aW9uczsgdGhlIHJlcXVlc3QgbWV0aG9kLCB0aGUgcmVxdWVzdGVkIHJl c291cmNlLCB0aGUNCj4+ICAgbWVzc2FnZSBwYXlsb2FkLCBldGMuIChzZWUgU2VjdGlvbiA0KS4g IE9TQ09SRSBwcm90ZWN0cyBuZWl0aGVyIHRoZQ0KPj4gICBDb0FQIE1lc3NhZ2luZyBMYXllciBu b3IgdGhlIENvQVAgVG9rZW4gd2hpY2ggbWF5IGNoYW5nZSBiZXR3ZWVuIHRoZQ0KPj4gICBlbmRw b2ludHMsIGFuZCB0aG9zZSBhcmUgdGhlcmVmb3JlIHByb2Nlc3NlZCBhcyBkZWZpbmVkIGluIFtS RkM3MjUyXS4NCj4+ICAgQWRkaXRpb25hbGx5LCBzaW5jZSB0aGUgbWVzc2FnZSBmb3JtYXRzIGZv ciBDb0FQIG92ZXIgdW5yZWxpYWJsZQ0KPj4gICB0cmFuc3BvcnQgW1JGQzcyNTJdIGFuZCBmb3Ig Q29BUCBvdmVyIHJlbGlhYmxlIHRyYW5zcG9ydCBbUkZDODMyM10NCj4+ICAgZGlmZmVyIG9ubHkg aW4gdGVybXMgb2YgQ29BUCBNZXNzYWdpbmcgTGF5ZXIsIE9TQ09SRSBjYW4gYmUgYXBwbGllZA0K Pj4gICB0byBib3RoIHVucmVsaWFibGUgYW5kIHJlbGlhYmxlIHRyYW5zcG9ydHMgKHNlZSBGaWd1 cmUgMSkuDQo+Pg0KPj5TZWxhbmRlciwgZXQgYWwuICAgICAgICBFeHBpcmVzIEphbnVhcnkgMjcs IDIwMTkgICAgICAgICAgICAgICAgW1BhZ2UgNF0NCj4+DQo+PkludGVybmV0LURyYWZ0ICAgICAg ICAgICAgICAgICAgT1NDT1JFICAgICAgICAgICAgICAgICAgICAgICAgSnVseSAyMDE4DQo+Pg0K Pj4gICAgICAgICAgICAgICArLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0rDQo+ PiAgICAgICAgICAgICAgIHwgICAgICAgICAgIEFwcGxpY2F0aW9uICAgICAgICAgICAgfA0KPj4g ICAgICAgICAgICAgICArLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0rDQo+PiAg ICAgICAgICAgICAgICstLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLSsgIFwNCj4+ ICAgICAgICAgICAgICAgfCAgUmVxdWVzdHMgLyBSZXNwb25zZXMgLyBTaWduYWxpbmcgfCAgfA0K Pj4gICAgICAgICAgICAgICB8LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS18ICB8 DQo+PiAgICAgICAgICAgICAgIHwgICAgICAgICAgICAgICBPU0NPUkUgICAgICAgICAgICAgIHwg IHwgQ29BUA0KPj4gICAgICAgICAgICAgICB8LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS18ICB8DQo+PiAgICAgICAgICAgICAgIHwgTWVzc2FnaW5nIExheWVyIC8gTWVzc2FnZSBG cmFtaW5nIHwgIHwNCj4+ICAgICAgICAgICAgICAgKy0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tKyAgLw0KPj4gICAgICAgICAgICAgICArLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0rDQo+PiAgICAgICAgICAgICAgIHwgICAgICAgICAgVURQIC8gVENQIC8gLi4u ICAgICAgICAgIHwNCj4+ICAgICAgICAgICAgICAgKy0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tKw0KPj4NCj4+ICAgICAgICAgICAgICBGaWd1cmUgMTogQWJzdHJhY3QgTGF5ZXJp bmcgb2YgQ29BUCB3aXRoIE9TQ09SRQ0KPj4NCj4+ICAgT1NDT1JFIHdvcmtzIGluIHZlcnkgY29u c3RyYWluZWQgbm9kZXMgYW5kIG5ldHdvcmtzLCB0aGFua3MgdG8gaXRzDQo+PiAgIHNtYWxsIG1l c3NhZ2Ugc2l6ZSBhbmQgdGhlIHJlc3RyaWN0ZWQgY29kZSBhbmQgbWVtb3J5IHJlcXVpcmVtZW50 cyBpbg0KPj4gICBhZGRpdGlvbiB0byB3aGF0IGlzIHJlcXVpcmVkIGJ5IENvQVAuICBFeGFtcGxl cyBvZiB0aGUgdXNlIG9mIE9TQ09SRQ0KPj4gICBhcmUgZ2l2ZW4gaW4gQXBwZW5kaXggQS4gIE9T Q09SRSBkb2VzIG5vdCBkZXBlbmQgb24gdW5kZXJseWluZw0KPj4gICBsYXllcnMsIGFuZCBjYW4g YmUgdXNlZCB3aXRoIG5vbi1JUCB0cmFuc3BvcnRzIChlLmcuLA0KPj4gICBbSS1ELmJvcm1hbm4t NmxvLWNvYXAtODAyLTE1LWllXSkuICBPU0NPUkUgbWF5IGFsc28gYmUgdXNlZCBpbg0KPj4gICBk aWZmZXJlbnQgd2F5cyB3aXRoIEhUVFAuICBPU0NPUkUgbWVzc2FnZXMgbWF5IGJlIHRyYW5zcG9y dGVkIGluDQo+PiAgIEhUVFAsIGFuZCBPU0NPUkUgbWF5IGFsc28gYmUgdXNlZCB0byBwcm90ZWN0 IENvQVAtbWFwcGFibGUgSFRUUA0KPj4gICBtZXNzYWdlcywgYXMgZGVzY3JpYmVkIGJlbG93Lg0K Pj4NCj4+PG1nbHQ+DQo+PkkgYmVsaWV2ZSB0aGF0ICJ1bmRlcmx5aW5nIGxheWVycyIgc2hvdWxk IGJlIHNwZWNpZmllZC4gTXkgdW5kZXJzdGFuZGluZw0KPj5pcw0KPj50aGF0IE9TQ09SRSByZXF1 aXJlcyBDb0FQIG9yIEhUVFAuIElmIHRoYXQgaXMgY29ycmVjdCwgSSBiZWxpZXZlIHRoYXQNCj4+ c2hvdWxkIGJlDQo+PmNsYXJpZmllZCBpbiB0aGUgcGFyYWdyYXBoIGFib3ZlLiA8L21nbHQ+DQo+ DQo+W0dTOl0gTm8sIHRoZSB1bmRlcmx5aW5nIGxheWVycyBpbiB0aGlzIGNvbnRleHQgYXJlIG5v dCBDb0FQIG9yIEhUVFAsIGJ1dA0KPnRoZSBsYXllcnMgYmVsb3cgT1NDT1JFLCBlLmcuIFVEUCBv ciBUQ1AuIFRoZSBmYWN0IHRoYXQgT1NDT1JFIGNhbiBiZQ0KPmRlcGxveWVkIHdpdGggQ29BUC1t YXBwYWJsZSBIVFRQIGlzIGEgZGlmZmVyZW50IHByb3BlcnR5IHdoaWNoIGlzIHRoZQ0KPnJlYXNv biBmb3Ig4oCcYWxzb+KAnSBpbiB0aGUgbmV4dCB0byBsYXN0IHNlbnRlbmNlLiBXb3VsZCB0aGUg Zm9sbG93aW5nDQo+Y2xhcmlmaWNhdGlvbiBiZSBzdWZmaWNpZW50Pw0KPk9MRA0KPk9TQ09SRSBk b2VzIG5vdCBkZXBlbmQgb24gdW5kZXJseWluZyBsYXllcnMsIGFuZCBjYW4gYmUgdXNlZCB3aXRo IG5vbi1JUA0KPnRyYW5zcG9ydHMgKGUuZy4sIFtJLUQuYm9ybWFubi02bG8tY29hcC04MDItMTUt aWUpDQo+TkVXDQo+T1NDT1JFIGRvZXMgbm90IGRlcGVuZCBvbiB1bmRlcmx5aW5nIGxheWVycyBz dWNoIGFzIGUuZy4gVURQIG9yIFRDUCwgYW5kDQo+Y2FuIGV2ZW4gYmUgdXNlZCB3aXRoIG5vbi1J UCB0cmFuc3BvcnRzIChlLmcuLA0KPltJLUQuYm9ybWFubi02bG8tY29hcC04MDItMTUtaWVdKQ0K Pg0KPg0KPg0KPj4NCj4+ICAgT1NDT1JFIGlzIGRlc2lnbmVkIHRvIHByb3RlY3QgYXMgbXVjaCBp bmZvcm1hdGlvbiBhcyBwb3NzaWJsZSB3aGllDQo+PiAgIHN0aWxsIGFsbG93aW5nIENvQVAgcHJv eHkgb3BlcmF0aW9ucyAoU2VjdGlvbiAxMCkuICBJdCB3b3JrcyB3aXRoDQo+PiAgIGV4aXN0aW5n IENvQVAtdG8tQ29BUCBmb3J3YXJkIHByb2llcyBbUkZDNzI1Ml0sIGJ1dCBhbiBPU0NPUkUtYXdh cmUNCj4+ICAgcHJveHkgd2lsbCBiZSBtb3JlIGVmZmljaWVudC4gIEhUVFAtdG8tQ29BUCBwcm94 aWVzIFtSRkM4MDc1XSBhbmQNCj4+ICAgQ29BUC10by1IVFRQIHByb3hpZXMgY2FuIGFsc28gYmUg dXNlZCB3aXRoIE9TQ09SRSwgYXMgc3BlY2lmaWVkIGluDQo+PiAgIFNlY3Rpb24gMTEuICBPU0NP UkUgbWF5IGJlIHVzZWQgdG9nZXRoZXIgd2l0aCBUTFMgb3IgRFRMUyBvdmVyIG9uZSBvcg0KPj4g ICBtb3JlIGhvcHMgaW4gdGhlIGVuZC10by1lbmQgcGF0aCwgZS5nLiB0cmFuc3BvcnRlZCB3aXRo IEhUVFBTIGluIG9uZQ0KPj4gICBob3AgYW5kIHdpdGggcGxhaW4gQ29BUCBpbiBhbm90aGVyIGhv cC4gIFRoZSB1c2Ugb2YgT1NDT1JFIGRvZXMgbm90DQo+PiAgIGFmZmVjdCB0aGUgVVJJIHNjaGVt ZSBhbmQgT1NDT1JFIGNhbiB0aGVyZWZvcmUgYmUgdXNlZCB3aXRoIGFueSBVUkkNCj4+ICAgc2No ZW1lIGRlZmluZWQgZm9yIENvQVAgb3IgSFRUUC4gIFRoZSBhcHBsaWNhdGlvbiBkZWNpZGVzIHRo ZQ0KPj4gICBjb25kaXRpb25zIGZvciB3aGljaCBPU0NPUkUgaXMgcmVxdWlyZWQuDQo+Pg0KPj4g ICBPU0NPUkUgdXNlcyBwcmUtc2hhcmVkIGtleXMgd2hpY2ggbWF5IGhhdmUgYmVlbiBlc3RhYmxp c2hlZCBvdXQtb2YtDQo+PiAgIGJhbmQgb3Igd2l0aCBhIGtleSBlc3RhYmxpc2htZW50IHByb3Rv Y29sIChzZWUgU2VjdGlvbiAzLjIpLiAgVGhlDQo+PiAgIHRlY2huaWNhbCBzb2x1dGlvbiBidWls ZHMgb24gQ0JPUiBPYmplY3QgU2lnbmluZyBhbmQgRW5jcnlwdGlvbg0KPj4gICAoQ09TRSkgW1JG QzgxNTJdLCBwcm92aWRpbmcgZW5kLXRvLWVuZCBlbmNyeXB0aW9uLCBpbnRlZ3JpdHksIHJlcGxh eQ0KPj4gICBwcm90ZWN0aW9uLCBhbmQgYmluZGluZyBvZiByZXNwb25zZSB0byByZXF1ZXN0LiAg QSBjb21wcmVzc2VkIHZlcnNpb24NCj4+ICAgb2YgQ09TRSBpcyB1c2VkLCBhcyBzcGVjaWZpZWQg aW4gU2VjdGlvbiA2LiAgVGhlIHVzZSBvZiBPU0NPUkUgaXMNCj4+ICAgc2lnbmFsZWQgaW4gQ29Q IHdpdGggYSBuZXcgb3B0aW9uIChTZWN0aW9uIDIpLCBhbmQgaW4gSFRUUCB3aXRoIGENCj4+ICAg bmV3IGhlYWRlciBmaWVsZCAoU2N0aW9uIDExLjEpIGFuZCBjb250ZW50IHR5cGUgKFNlY3Rpb24g MTMuNSkuICBUaGUNCj4+ICAgc29sdXRpb24gdHJhbnNmb3JtcyBhIENvQVAvSFRUUCBtZXNzYWdl IGludG8gYW4gIk9TQ09SRSBtZXNzYWdlIg0KPj4gICBiZWZvcmUgc2VuZGluZywgYW5kIHZpY2Ug dmVyc2EgYXRlciByZWNlaXZpbmcuICBUaGUgT1NDT1JFIG1lc3NhZ2UNCj4+DQo+PlNlbGFuZGVy LCBldCBhbC4gICAgICAgIEV4cGlyZXMgSmFudWFyeSAyNywgMjAxOSAgICAgICAgICAgICAgICBb UGFnZSA1XQ0KPj4NCj4+SW50ZXJuZXQtRHJhZnQgICAgICAgICAgICAgICAgICAgT1NDT1JFICAg ICAgICAgICAgICAgICAgICAgICAgSnVseSAyMDE4DQo+Pg0KPj4gICBpcyBhIENvQVAvSFRUUCBt ZXNzYWdlIHJlbGF0ZWQgdG8gdGhlIG9yaWdpYWwgbWVzc2FnZSBpbiB0aGUNCj4+ICAgZm9sbG93 aW5nIHdheTogdGhlIG9yaWdpbmFsIENvQVAvSFRUUCBtZXNzYWdlIGlzIHRyYW5zbGF0ZWQgdG8g Q29BUA0KPj4gICAoaWYgbm90IGFscmVhZHkgaSBDb0FQKSBhbmQgcHJvdGVjdGVkIGluIGEgQ09T RSBvYmplY3QuICBUaGUNCj4+ICAgZW5jcnlwdGVkIG1lc3NhZ2UgZmllbGRzIG9mIHRoaXMgQ09T RSBvYmplY3QgYXJlIHRyYW5zcG9ydGVkIGluIHRoZQ0KPj4gICBDb0FQIHBheWxvYWQvSFRUUCBi b2R5IG9mIHRoZSBPU0NPUkUgbWVzc2FnZSwgYW5kIHRoZSBPU0NPUkUgb3B0aW9uLw0KPj4gICBo ZWFkZXIgZmllbGQgaXMgaW5jbHVkZWQgaW4gdGhlIG1lc3NhZ2UuICBBIHNrZXRjaCBvZiBhbiBl eGNoYW5nZSBvZg0KPj4gICBPU0NPUkUgbWVzc2FnZXMsIGluIHRoZSBjYXNlIG9mIHRoZSBvcmln aW5hbCBtZXNzYWdlIGJlaW5nIENvQVAsIGlzDQo+PiAgIHByb3ZpZGVkIGluIEZpZ3VyZSAyLg0K Pj4NCj4+ICAgICAgICAgIENsaWVudCAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgIFNlcnZlcg0KPj4gICAgICAgICAgICAgfCAgICAgIE9TQ09SRSByZXF1ZXN0IC0gUE9T VCBleGFtcGxlLmNvbTogICAgICB8DQo+PiAgICAgICAgICAgICB8ICAgICAgICBIZWFkZXIsIFRv a2VuLCAgICAgICAgICAgICAgICAgICAgICAgIHwNCj4+ICAgICAgICAgICAgIHwgICAgICAgIE9w dGlvbnM6IHtPU0NPUkUsIC4uLn0sICAgICAgICAgICAgICAgfA0KPj4gICAgICAgICAgICAgfCAg ICAgICAgUGF5bG9hZDogQ09TRSBjaXBoZXJ0ZXh0ICAgICAgICAgICAgICB8DQo+PiAgICAgICAg ICAgICArLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tPnwNCj4+ ICAgICAgICAgICAgIHwgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgfA0KPj4gICAgICAgICAgICAgfDwtLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0rDQo+PiAgICAgICAgICAgICB8ICAgICAgT1NDT1JFIHJlc3BvbnNlIC0gMi4w NCAoQ2hhbmdlZCk6ICAgICAgIHwNCj4+ICAgICAgICAgICAgIHwgICAgICAgIEhlYWRlciwgVG9r ZW4sICAgICAgICAgICAgICAgICAgICAgICAgfA0KPj4gICAgICAgICAgICAgfCAgICAgICAgT3B0 aW9uczp7T1NDT1JFLCAuLi59LCAgICAgICAgICAgICAgIHwNCj4+ICAgICAgICAgICAgIHwgICAg ICAgIFBheWxvYWQ6IENPU0UgY2lwaGVydGV4dCAgICAgICAgICAgICB8DQo+PiAgICAgICAgICAg ICB8ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIHwNCj4+DQo+ PiAgICAgICAgICAgICAgICAgICBGaWd1cmUgMjogU2tldGNoIG9mIENvQVAgd2l0aCBPU0NPUkUN Cj4+DQo+PjxtZ2x0Pg0KPj5PcHRpb25zIGFyZSBtZW50aW9uZWQgaW4ge30uIEhvdyB0aGVzZSAi e30iIHNob3VsZCBiZSBpbnRlcnByZXRlZCBtYXkgYmUNCj4+c3BlY2lmaWVkIGluIHRoZSBmaWd1 cmUuDQo+DQo+W0dTOl0gVGhlIGN1cmx5IGJyYWNrZXRzIGhhdmUgbm8gc3BlY2lhbCBtZWFuaW5n IGhlcmUgc28gd2UgY2FuIHJlbW92ZQ0KPnRoZW0gYWx0b2dldGhlcjogDQo+T0xEDQo+T3B0aW9u czoge09TQ09SRSwgLi4ufSwNCj5ORVcgIA0KPk9wdGlvbnM6IE9TQ09SRSwgLi4uICwNCj4NCj4N Cj4NCj4+DQo+PlRoZSBwYXJhZ3JhcGggYWJvdmUgbWVudGlvbnMgdGhhdCBPU0NPUkUgY2FuIGJl IHVzZWQgYm90aCB3aXRoIENvQVAgb3INCj4+SFRUUC4gSXQNCj4+bWlnaHQgYmUgaGVscGZ1bCB0 byBzcGxpdCBGaWd1cmUgMiBpbiB0byB0d28gc3ViIGZpZ3VyZXMgRmlndXJlIDJhKSB0aGF0DQo+ PmlsbHVzdHJhdGVzIHRoZSB1c2Ugb2YgT0NTT1JFIHdpdGggQ29BUCBhbmQgZmlndXJlIDJiKSB0 aGF0IGlsbHVzdHJhdGVzDQo+PnRoZSB1c2UNCj4+b2YgT1NDT1JFIHdpdGggSFRUUC4NCj4NCj5b R1M6XSBTZWN0aW9uIDExLjUgcHJvdmlkZXMgYSBkZXRhaWxlZCBleGFtcGxlLCBJIHByb3Bvc2Ug dG8gYWRkIGENCj5yZWZlcmVuY2UgdG8gc2VjdGlvbiAxMSBhYm92ZSB0aGUgZmlndXJlLg0KPg0K Pg0KPj5NeSB1bmRlcnN0YW5kaW5nIGlzIHRoYXQgQ29BUCBhbmQgSFRUUCBjYW4gZWFzaWx5IGJl IHRyYW5zbGF0ZWQuIEFzIHN1Y2gNCj4+aXQNCj4+bWlnaHQgYWxzbyBiZSBhYmxlIHRvIGNvbnNp ZGVyIE9TQ09SRSBvbmx5IHdpdGggQ29BUCBhbmQgaGF2aW5nIGENCj4+c3BlY2lmaWMNCj4+c2Vj dGlvbiB0aGF0IGRlYWxzIHdpdGggSFRUUC4gU3VjaCBzcGxpdCBtYXkgYXZvaWQgdG8gZGVhbCBp biBwYXJhbGxlbA0KPj53aXRoDQo+PkhUVFAgYW5kIENvQVAuIDwvbWdsdD4NCj4NCj5bR1M6XSBT ZWN0aW9uIDExIGlzIGEgc3BlY2lmaWMgc2VjdGlvbiB0aGF0IGRlYWxzIHdpdGggSFRUUC4gV291 bGQgdGhlDQo+cmVmZXJlbmNlIG1lbnRpb25lZCBhYm92ZSBiZSBzdWZmaWNpZW50Pw0KPg0KPg0K Pj4NCj4+ICAgQW4gaW1wbGVtZW50YXRpb24gc3VwcG9ydGluZyB0aGlzIHNwZWNpZmljYXRpb24g TUFZIGltcGxlbWVudCBvbmx5DQo+PiAgIHRoZSBjbGllbnQgcGFydCwgTUFZIGltcGxlbWVudCBv bmx5IHRoZSBzZXJ2ZXIgcGFydCwgb3IgTUFZIGltcGxlbWVudA0KPj4gICBvbmx5IG9uZSBvZiB0 aGUgcHJveHkgcGFydHMuDQo+Pg0KPj4xLjEuICBUZXJtaW5vbG9neQ0KPj4NCj4+Mi4gIFRoZSBP U0NPUkUgT3B0aW9uDQo+Pg0KPj4gICBUaGUgT1NDT1JFIG9wdGlvbiAoc2VlIEZpZ3VyZSAzLCB3 aGljaCBleHRlbmRzIFRhYmxlIDQgb2YgW1JGQzcyNTJdKQ0KPj4gICBpbmRpY2F0ZXMgdGhhdCB0 aGUgQ29BUCBtZXNzYWdlIGlzIGFuIE9TQ09SRSBtZXNzYWdlIGFuZCB0aGF0IGl0DQo+PiAgIGNv bnRhaW5zIGEgY29tcHJlc3NlZCBDT1NFIG9iamVjdCAoc2VlIFNlY3Rpb25zIDUgYW5kIDYpLiAg VGhlIE9TQ09SRQ0KPj4gICBvcHRpb24gaXMgY3JpdGljYWwsIHNhZmUgdG8gZm9yd2FyZCwgcGFy dCBvZiB0aGUgY2FjaGUga2V5LCBhbmQgbm90DQo+PiAgIHJlcGVhdGFibGUuDQo+Pg0KPj48bWds dD4NCj4+SSBiZWxpZXZlIGl0IHdvdWxkIGJlIGNsZWFyZXIgdG8gc3BlY2lmeSB0aGF0IHRoaXMg c2VjdGlvbiBkZWZpbmVzIHRoZQ0KPj5PU0NPUkUNCj4+b3B0aW9uIHdoaWNoIGlzIGEgbmV3IENv QVAgb3B0aW9uLiAgU2ltaWxhcmx5IFRhYmxlIDQgbWF5IGFsc28gYmUNCj4+ZGVzaWduYXRlZCBi eQ0KPj5Db0FQIE9wdGlvbnMgb3Igc29tZXRoaW5nIHNpbWlsYXIuIDwvbWdsdD4NCj4NCj4NCj5b R1M6XSBJIGRpZG7igJl0IHVuZGVyc3RhbmQgdGhlIHNlY29uZCBzZW50ZW5jZTogVGFibGUgNCBp cyBpbiBSRkMgNzI1MiwNCj53aGF0IGRvZXMgaXQgbWVhbiBmb3IgdGhpcyBkcmFmdCB0aGF0IHRo aXMgdGFibGUgc2hvdWxkIGJlICJkZXNpZ25hdGVkIGJ5DQo+Q29BUCBPcHRpb25z4oCdPyBJZiB0 aGVyZSBpcyBhIG5lZWQgdG8gZXhwbGFpbiB0aGUgY29udGVudCBvZg0KPmEgcmVmZXJlbmNlZCB0 YWJsZSBpbiBhbm90aGVyIGRvY3VtZW50LCB0aGVuIHBlcmhhcHMgYmV0dGVyIHJlbW92ZSB0aGUN Cj5yZWZlcmVuY2UgYWx0b2dldGhlciAtIHRoaXMgdGFibGUgaXMgYW55d2F5IHdlbGwga25vd24g dG8gYW55b25lDQo+ZmFtaWxpYXIgd2l0aCBDb0FQLiBIZXJlIGlzIGEgcHJvcG9zZWQgcmVwbGFj ZW1lbnQgb2YgdGhlIGZpcnN0IHNlbnRlbmNlDQo+b2Ygc2VjdGlvbiAyOg0KPk5FVw0KPlRoZSBP U0NPUkUgb3B0aW9uIGRlZmluZWQgaW4gdGhpcyBzZWN0aW9uIChzZWUgRmlndXJlIDMpDQo+aW5k aWNhdGVzIHRoYXQgdGhlIENvQVAgbWVzc2FnZSBpcyBhbiBPU0NPUkUgbWVzc2FnZSBhbmQgdGhh dCBpdA0KPmNvbnRhaW5zIGEgY29tcHJlc3NlZCBDT1NFIG9iamVjdCAoc2VlIFNlY3Rpb25zIDUg YW5kIDYpLg0KPg0KPg0KPg0KPg0KPg0KPlRoZSB1c2Ugb2YgT1NDT1JFIGlzIHNpZ25hbGVkIGlu IENvQVAgd2l0aCBhIG5ldyBvcHRpb24gKFNlY3Rpb24gMiksIGFuZA0KPmluIEhUVFAgd2l0aCBh IG5ldyBoZWFkZXIgZmllbGQgKFNlY3Rpb24gMTEuMSkgYW5kIGNvbnRlbnQgdHlwZSAoU2VjdGlv bg0KPjEzLjUpLg0KPg0KPj4NCj4+ICAgKy0tLS0tLSstLS0rLS0tKy0tLSstLS0rLS0tLS0tLS0t LS0tLS0tLSstLS0tLS0tLSstLS0tLS0tLSstLS0tLS0tLS0rDQo+PiAgIHwgTm8uICB8IEMgfCBV IHwgTiB8IFIgfCBOYW1lICAgICAgICAgICB8IEZvcm1hdCB8IExlbmd0aCB8IERlZmF1bHQgfA0K Pj4gICArLS0tLS0tKy0tLSstLS0rLS0tKy0tLSstLS0tLS0tLS0tLS0tLS0tKy0tLS0tLS0tKy0t LS0tLS0tKy0tLS0tLS0tLSsNCj4+ICAgfCBUQkQxIHwgeCB8ICAgfCAgIHwgICB8IE9TQ09SRSAg ICAgICAgIHwgICgqKSAgIHwgMC0yNTUgIHwgKG5vbmUpICB8DQo+PiAgICstLS0tLS0rLS0tKy0t LSstLS0rLS0tKy0tLS0tLS0tLS0tLS0tLS0rLS0tLS0tLS0rLS0tLS0tLS0rLS0tLS0tLS0tKw0K Pj4gICAgICAgQyA9IENyaXRpY2FsLCAgIFUgPSBVbnNhZmUsICAgTiA9IE5vQ2FjaGVLZXksICAg UiA9IFJlcGVhdGFibGUNCj4+ICAgICAgICgqKSBTZWUgYmVsb3cuDQo+Pg0KPj4gICAgICAgICAg ICAgICAgICAgICAgICBGaWd1cmUgMzogVGhlIE9TQ09SRSBPcHRpb24NCj4+DQo+PiAgIFRoZSBP U0NPUkUgb3B0aW9uIGluY2x1ZGVzIHRoZSBPU0NPUkUgZmxhZyBiaXRzIChTZWN0aW9uIDYpLCB0 aGUNCj4+ICAgU2VuZGVyIFNlcXVlbmNlIE51bWJlciwgdGhlIFNlbmRlciBJRCwgYW5kIHRoZSBJ RCBDb250ZXh0IHdoZW4gdGhlc2UNCj4+ICAgZmllbGRzIGFyZSBwcmVzZW50IChTZWN0aW9uIDMp LiAgVGhlIGRldGFpbGVkIGZvcm1hdCBhbmQgbGVuZ3RoIGlzDQo+PiAgIHNwZWNpZmllZCBpbiBT ZWN0aW9uIDYuICBJZiB0aGUgT1NDT1JFIGZsYWcgYml0cyBhcmUgYWxsIHplcm8gKDB4MDApDQo+ PiAgIHRoZSBPcHRpb24gdmFsdWUgU0hBTEwgYmUgZW1wdHkgKE9wdGlvbiBMZW5ndGggPSAwKS4g IEFuIGVuZHBvaW50DQo+PiAgIHJlY2VpdmluZyBhIENvQVAgbWVzc2FnZSB3aXRob3V0IHBheWxv YWQsIHRoYXQgYWxzbyBjb250YWlucyBhbg0KPj4gICBPU0NPUkUgb3B0aW9uIFNIQUxMIHRyZWF0 IGl0IGFzIG1hbGZvcm1lZCBhbmQgcmVqZWN0IGl0Lg0KPj4NCj4+PG1nbHQ+DQo+PkkgYmVsaWV2 ZSB0aGUgbG9naWMgZm9yIHRoZSBPU0NPUkUgb3B0aW9uIGlzIHRoZSBvdGhlciB3YXkgYXJvdW5k LCB0aGF0DQo+PmlzOiBhbg0KPj5Db0FQIG1lc3NhZ2Ugd2l0aCBhbiBPU0NPUkUgb3B0aW9uIHdp dGggYW4gZW1wdHkgQ29BUCBwYXlsb2FkIE1VU1QgYmUNCj4+cmVqZWN0ZWQNCj4+YXMgbWFsZm9y bWVkIGFuZCByZWplY3QgaXQuIDwvbWdsdD4NCj4NCj5bR1M6XSBCb3RoIHN0YXRlbWVudHMgYXJl IGNvcnJlY3QuIFBlcmhhcHMgaXQgaXMgZXZlbiBtb3JlIGNsZWFyIGlmICDigJxhbmTigJ0NCj5p cyB1c2VkOg0KPk5FVw0KPkFuIGVuZHBvaW50IHJlY2VpdmluZyBhIENvQVAgbWVzc2FnZSB3aXRo IHRoZSBPU0NPUkUgb3B0aW9uIGFuZCB3aXRob3V0DQo+cGF5bG9hZCBTSEFMTCB0cmVhdCBpdCBh cyBtYWxmb3JtZWQgYW5kIHJlamVjdCBpdC4NCj4NCj4NCj4+DQo+PiAgIEEgc3VjY2Vzc2Z1bCBy ZXNwb25zZSB0byBhIHJlcXVlc3Qgd2l0aCB0aGUgT1NDT1JFIG9wdGlvbiBTSEFMTA0KPj4gICBj b250YWluIHRoZSBPU0NPUkUgb3B0aW9uLiAgV2hldGhlciBlcnJvciByZXNwb25zZXMgY29udGFp biB0aGUNCj4+ICAgT1NDT1JFIG9wdGlvbiBkZXBlbmRzIG9uIHRoZSBlcnJvciB0eXBlIChzZWUg U2VjdGlvbiA4KS4NCj4+DQo+PiAgIEZvciBDb0FQIHByb3h5IG9wZXJhdGlvbnMsIHNlZSBTZWN0 aW9uIDEwLg0KPj4NCj4+My4gIFRoZSBTZWN1cml0eSBDb250ZXh0DQo+Pg0KPj4gICBPU0NPUkUg cmVxdWlyZXMgdGhhdCBjbGllbnQgYW5kIHNlcnZlciBlc3RhYmxpc2ggYSBzaGFyZWQgc2VjdXJp dHkNCj4+ICAgY29udGV4dCB1c2VkIHRvIHByb2Nlc3MgdGhlIENPU0Ugb2JqZWN0cy4gIE9TQ09S RSB1c2VzIENPU0Ugd2l0aCBhbg0KPj4gICBBdXRoZW50aWNhdGVkIG5jcnlwdGlvbiB3aXRoIEFk ZGl0aW9uYWwgRGF0YSAoQUVBRCwgW1JGQzUxMTZdKQ0KPj4gICBhbGdvcml0aG0gZm9yIHByb3Rl Y3RpbmcgZXNzYWdlIGRhdGEgYmV0d2VlbiBhIGNsaWVudCBhbmQgYSBzZXJ2ZXIuDQo+PiAgIElu IHRoaXMgc2VjdGlvbiwgd2UgZGVmaW5lIHRoZSBzZWN1cml0eSBjb250ZXh0IGFuZCBob3cgaXQg aXMgZGVyaXZlZA0KPj4NCj4+U2VsYW5kZXIsIGV0IGFsLiAgICAgICAgRXhpcmVzIEphbnVhcnkg MjcsIDIwMTkgICAgICAgICAgICAgICAgW1BhZ2UgN10NCj4+DQo+PkludGVybmV0LURyYWZ0ICAg ICAgICAgICAgICAgICAgIE9TQ09SRSAgICAgICAgICAgICAgICAgICAgICAgIEp1bHkgMjAxOA0K Pj4NCj4+ICAgaW4gY2xpZW50IGFuZCBzZXJ2ZXIgYmFzZWQgb24gYSBzaGFyZWQgc2VjcmV0IGFu ZCBhIGtleSBkZXJpdmF0aW9uDQo+PiAgIGZ1bmN0aW9uIChLREYpLg0KPj4NCj4+My4xLiAgU2Vj dXJpdHkgQ29udGV4dCBEZWZpbml0aW9uDQo+Pg0KPj4gICBUaGUgc2VjdXJpdHkgY29udGV4dCBp cyB0aGUgc2V0IG9mIGluZm9ybWF0aW9uIGVsZW1lbnRzIG5lY2Vzc2FyeSB0bw0KPj4gICBjYXJy eSBvdXQgdGhlIGNyeXB0b2dyYXBoaWMgb3BlcmF0aW9ucyBpbiBPU0NPUkUuICBGb3IgZWFjaCBl bmRwb2ludCwNCj4+ICAgdGhlIHNlY3VyaXR5IGNvbnRleHQgaXMgY29tcG9zZWQgb2YgYSAiQ29t bW9uIENvbnRleHQiLCBhICJTZW5kZXINCj4+ICAgQ29udGV4dCIsIGFuZCBhICJSZWNpcGllbnQg Q29udGV4dCIuDQo+Pg0KPj4gICBUaGUgZW5kcG9pbnRzIHByb3RlY3QgbWVzc2FnZXMgdG8gc2Vu ZCB1c2luZyB0aGUgU2VuZGVyIENvbnRleHQgYW5kDQo+PiAgIHZlcmlmeSBtZXNzYWdlcyByZWNl aXZlZCB1c2luZyB0aGUgUmVjaXBpZW50IENvbnRleHQsIGJvdGggY29udGV4dHMNCj4+ICAgYmVp bmcgZGVyaXZlZCBmcm9tIHRoZSBDb21tb24gQ29udGV4dCBhbmQgb3RoZXIgZGF0YS4gIENsaWVu dHMgYW5kDQo+PiAgIHNlcnZlcnMgbmVlZCB0byBiZSBhYmxlIHRvIHJldHJpZXZlIHRoZSBjb3Jy ZWN0IHNlY3VyaXR5IGNvbnRleHQgdG8NCj4+ICAgdXNlLg0KPj4NCj4+PG1nbHQ+DQo+PkkgYmVs aWV2ZSBpdCBtaWdodCBiZSBjbGFyaWZ5aW5nIHRvIHNwZWNpZnkgdGhhdCBDb0FQIGVuZHBvaW50 cyBoYXZlDQo+PmFsd2F5cw0KPj5iaWRpcmVjdGlvbmFsIGNvbW11bmljYXRpb25zLg0KPltHUzpd IFRoaXMgaXMgbm90IGNvcnJlY3QgZm9yIGFsbCBhcHBsaWNhdGlvbnMgb2YgT1NDT1JFLiBGb3Ig Z3JvdXANCj5jb21tdW5pY2F0aW9ucyB0aGVyZSBpcyB0aGUgY29uY2VwdCBvZiBhICJzaWxlbnQg c2VydmVy4oCdIHdoaWNoIGlzIGp1c3QNCj5saXN0ZW5pbmcgdG8gbXVsdGljYXN0IG1lc3NhZ2Vz Og0KPmh0dHBzOi8vdG9vbHMuaWV0Zi5vcmcvaHRtbC9kcmFmdC1pZXRmLWNvcmUtb3Njb3JlLWdy b3VwY29tbS0wMg0KPlRoZXJlIGlzIGFsc28gdGhlIOKAnE5vLVJlc3BvbnNl4oCdIG9wdGlvbiB3 aGljaCBpbmhpYml0cyBjZXJ0YWluIHJlc3BvbnNlcy4NCj4NCj4+SWYgdGhhdCBpcyBjb3JyZWN0 LCB0aGVuIGZvciBlYWNoIGNvbW11bmljYXRpb24NCj4+ZWFjaCBlbmQgcG9pbnQgaXMgYm90aCBh ICJTZW5kZXIiIGFuZCBhICJSZWNpcGllbnQiIGZvciBpdHMgcmVzcGVjdGl2ZQ0KPj5vdXRib3Vu ZA0KPj5hbmQgaWJvdW5kIHRyYWZmaWMuIFRoZSA0IGNvbnRleHQgYXJlIGRlcml2ZWQgZnJvbSBh IENvbW1vbiBDb250ZXh0Lg0KPj4NCj4+QXMgc2VjdXJpdHljb250ZXh0IGFyZSBlc3RhYmxpc2hl ZCB0byBzZWN1cmUgdW5pZGlyZWN0aW9uYWwNCj4+Y29tbXVuaWNhdGlvbnMsDQo+Pm1heWJlIHRo YXQgd291bGQgYmUgZWFzaWVyIHRvIGJhc2UgdGhlIGRlc2NyaXB0aW9uIG9uIHRoZSB1bmlkaXJl Y3Rpb25hbA0KPj5jb21tdWljYXRpb25zIHJhdGhlciB0aGFuIHRoZSBlbmQgcG9pbnRzLiA8L21n bHQ+DQo+DQo+W0dTOl0gSeKAmW0gbm90IHN1cmUgaG93IEkgc2hvdWxkIGFkZHJlc3MgdGhpcyBj b21tZW50LCBidXQgb25lIHJlYXNvbiB3aHkNCj50aGUgc2VjdXJpdHkgY29udGV4dCBpcyBkZXNj cmliZWQgZnJvbSB0aGUgcG9pbnQgb2YgdmlldyBvZiBlbmRwb2ludHMgcw0KPnRoYXQgYW4gZW5k cG9pbnQgdXNlcyB0aGUgc2VjdXJpdHkgY29udGV4dCBpbiB0aGUgc2FtZSB3YXkgaW5kZXBlbmVu dCBvZg0KPmJlaW5nIGNsaWVudCBvciBzZXJ2ZXIuIEUuZy4gdGhlIFNlbmRlciBDb250ZXh0IGlz IHVzZWQgYnkgYW4gZW5kb2ludCBpbg0KPnRoZSByb2xlIG9mIGNsaWVudCBzZW5kaW5nIHJlcXVl c3RzIGFuZCBpbiB0aGUgcm9sZSBvZiBzZXJ2ciBzZW5kaW5nDQo+cmVzcG9uc2VzLiANCj4NCj4N Cj4NCj4+DQo+PiAgIEFuIGVuZHBvaW50IHVzZXMgaXRzIFNlbmRlciBJRCAoU0QpIHRvIGRlcml2 ZSBpdHMgU2VuZGVyIENvbnRleHQsDQo+PiAgIGFuZCB0aGUgb3RoZXIgZW5kcG9pbnQgdXNlcyB0 aGUgc2FtZUlELCBub3cgY2FsbGVkIFJlY2lwaWVudCBJRA0KPj4gICAoUklEKSwgdG8gZGVyaXZl IGl0cyBSZWNpcGllbnQgQ29udGV4dC4gSW4gY29tbXVuaWNhdGlvbiBiZXR3ZWVuIHR3bw0KPj4g ICBlbmRwb2ludHMsIHRoZSBTZW5kZXIgQ29udGV4dCBvZiBvbmUgZW5kb2ludCBtYXRjaGVzIHRo ZSBSZWNpcGllbnQNCj4+ICAgQ29udGV4dCBvZiB0aGUgb3RoZXIgZW5kcG9pbnQsIGFuZCB2aWNl IHZlcnNhLiAgVGh1cywgdGhlIHR3bw0KPj4gICBzZWN1cml0eSBjb250ZXh0cyBpZGVudGlmaWVk IGJ5IHRoZSBzYW1lIElEcyBpbiB0aGUgdHdvIGVuZHBvaW50cyBhcmUNCj4+ICAgbm90IHRoZSBz YW1lLCBidXQgdGhleSBhcmUgcGFydGx5IG1pcnJvcmVkLiAgUmV0cmlldmFsIGFuZCB1c2Ugb2Yg dGhlDQo+PiAgIHNlY3VyaXR5IGNvbnRleHQgYXJlIHNob3duIGluIEZpZ3VyZSA0Lg0KPj4NCj4+ PG1nbHQ+DQo+PiJBbiBlbmRwb2ludCB1c2VzIGl0cyBTZW5kZXIgSUQgKFNJRCkgdG8gZGVyaXZl IGl0cyBTZW5kZXIgQ29udGV4dCwiDQo+Pg0KPj5JIHNlZSB0aGUgSUQgYXMgbW9zdGx5IHVzZWZ1 bCB0byB0aGUgcmVjaXBpZW50IGluIG9yZGVyIHRvIHJldHJpZXZlIHRoZQ0KPj5hcHByb3ByaWF0 ZWQgc2VjdXJpdHkgY29udGV4dCBhbmQgZGVjcnlwdCB0aGUgbWVzc2FnZS4gSW4gb3RoZXIgd29y ZHMsDQo+PnRoZQ0KPj5zZW5kZXIgc2hvdWxkIGtub3cgd2hvIGl0IHNlbmRzIHRoZSBtZXNzYWdl IHRvIGFuZCBkb2VzIG5vdCByZWFsbHkgbmVlZA0KPj50aGUgU0lEPj50byBtYXRjaCB0aGUgc2Vj dXJpdHkgY29udGV4dC4NCj4+DQo+PkkgYmVsaWV2ZSB0aGlzIHNob3VsZCBiZSBjbGFyaWZpZWQg YXMgdGhlIGN1cnJlbnQgdGV4dCBwcmV2ZW50cyBTZW5kZXIgSUQNCj4+Y29sbGlzaW9uLCB3aGls ZSBjb2xsaXNpb24gc2hvdWxkIG9ubHkgYmUgYXZvaWRlZCBvbiB0aGUgcmVjZWl2ZXIncyBzaWRl Lg0KPj48L21nbHQ+DQo+DQo+W0dTOl0gU2VjdGlvbiAzLjMgc3RhdGVzIHRoZSBmb2xsb3dpbmc6 ICJUbyBlbnN1cmUgdW5pcXVlIFNlbmRlciBLZXlzLCB0aGUNCj5xdWFydGV0IChNYXN0ZXIgU2Vj cmV0LCBNYXN0ZXIgU2FsdCwgSUQgQ29udGV4dCwgU2VuZGVyIElEKSBNVVNUIGJlDQo+dW5pcXVl 4oCdIGFuZCB0aGF0IHRoaXMgbWVhbnMgdGhhdCAiU2VuZGVyIElEIFNIQUxMIGJlIHVuaXF1ZSBp biB0aGUgc2V0IG9mDQo+YWxsIHNlY3VyaXR5IGNvbnRleHRzIHVzaW5nIHRoZSBzYW1lIE1hc3Rl ciBTZWNyZXQsIE1hc3RlciBTYWx0LCBhbmQgSUQNCj5Db250ZXh0OyBzdWNoIGEgcmVxdWlyZW1l bnQgZ3VhcmFudGVlcyB1bmlxdWUgKGtleSwgbm9uY2UpIHBhaXJzLCB3aGljaA0KPmF2b2lkcyBu b25jZSByZXVzZS7igJ0gVGhlIHByb29mIGZvciAoa2V5LG5vbmNlKSB1bmlxdWVuZXNzIGlzIGlu IEFwcGVuZGl4DQo+RC4zIGFuZCBjcml0aWNhbGx5IHVzZXMgdGhlIHVuaXF1ZW5lc3Mgb2YgU2Vu ZGVyIElEcywgc28gdGhhdCBpcyBpbmRlZWQNCj5yZXF1aXJlZC4NCj5BcyBhIGNvbnNlcXVlbmNl LCB0aGUgUmVjaXBpZW50IElEcyB3aXRoaW4gb25lIHNlY3VyaXR5IGNvbnRleHQgYXJlIGFsc28N Cj51bmlxdWUuDQo+Q29pbmNpZGVuY2Ugb2YgUmVjaXBpZW50IElEcyBiZXR3ZWVuIGRpZmZlcmVu dCBzZWN1cml0eSBjb250ZXh0cyBpcyBub3QgYQ0KPnNlY3VyaXR5IGlzc3VlLCBzZWN0aW9uIDMu MyBhbHNvIHN0YXRlczogIlRvIHNpbXBsaWZ5IHJldHJpZXZhbCBvZiB0aGUNCj5yaWdodCBSZWNp cGllbnQgQ29udGV4dCwgdGhlIFJlY2lwaWVudCBJRCBTSE9VTEQgYmUgdW5pcXVlIGluIHRoZSBz ZXRzIG9mDQo+YWxsIFJlY2lwaWVudCBDb250ZXh0cyB1c2VkIGJ5IGFuIGVuZHBvaW50LiBJZiBh biBlbmRwb2ludCBoYXMgdGhlIHNhbWUNCj5SZWNpcGllbnQgSUQgd2l0aCBkaWZmZXJlbnQgUmVj aXBpZW50IENvbnRleHRzLCBpLmUuIHRoZSBSZWNpcGllbnQNCj5Db250ZXh0cyBhcmUgZGVyaXZl ZCBmcm9tIGRpZmZlcmVudCBDb21tb24gQ29udGV4dHMsIHRoZW4gdGhlIGVuZHBvaW50IG1heQ0K Pm5lZWQgdG8gdHJ5IG11bHRpcGxlIHRpbWVzIGJlZm9yZSB2ZXJpZnlpbmcgdGhlIHJpZ2h0IHNl Y3VyaXR5IGNvbnRleHQNCj5hc3NvY2lhdGVkIHRvIHRoZSBSZWNpcGllbnQgSUQu4oCdIElzIHRo ZXJlIHNvbWV0aGluZyBtaXNzaW5nIGZyb20gdGhpcw0KPmRlc2NyaXB0aW9uPw0KPg0KPg0KPg0K Pj4NCj4+ICAgICAgICAgICAgICAgICAuLS0tLS0tLS0tLS0tLS4gICAgICAgICAgIC4tLS0tLS0t LS0tLS0tLg0KPj4gICAgICAgICAgICAgICAgIHwgIENvbW1vbiwgICAgfCAgICAgICAgICAgfCAg Q29tbW9uLCAgICB8DQo+PiAgICAgICAgICAgICAgICAgfCAgU2VuZGVyLCAgICB8ICAgICAgICAg ICB8ICBSZWNpcGllbnQsIHwNCj4+ICAgICAgICAgICAgICAgICB8ICBSZWNpcGllbnQgIHwgICAg ICAgICAgIHwgIFNlbmRlciAgICAgfA0KPj4gICAgICAgICAgICAgICAgICctLS0tLS0tLS0tLS0t JyAgICAgICAgICAgJy0tLS0tLS0tLS0tLS0nDQo+PiAgICAgICAgICAgICAgICAgICAgICBDbGll bnQgICAgICAgICAgICAgICAgICAgU2VydmVyDQo+PiAgICAgICAgICAgICAgICAgICAgICAgICB8 ICAgICAgICAgICAgICAgICAgICAgICB8DQo+PiAgIFJldHJpZXZlIGNvbnRleHQgZm9yICB8IE9T Q09SRSByZXF1ZXN0OiAgICAgICB8DQo+PiAgICB0YXJnZXQgcmVzb3VyY2UgICAgICB8ICAgVG9r ZW4gPSBUb2tlbjEsICAgICB8DQo+PiAgIFByb3RlY3QgcmVxdWVzdCB3aXRoICB8ICAga2lkID0g U0lELCAuLi4gICAgICB8DQo+PiAgICAgU2VuZGVyIENvbnRleHQgICAgICArLS0tLS0tLS0tLS0t LS0tLS0tLS0tLT58IFJldHJpZXZlIGNvbnRleHQgd2l0aA0KPj4gICAgICAgICAgICAgICAgICAg ICAgICAgfCAgICAgICAgICAgICAgICAgICAgICAgfCAgUklEID0ga2lkDQo+PiAgICAgICAgICAg ICAgICAgICAgICAgICB8ICAgICAgICAgICAgICAgICAgICAgICB8IFZlcmlmeSByZXF1ZXN0IHdp dGgNCj4+ICAgICAgICAgICAgICAgICAgICAgICAgIHwgICAgICAgICAgICAgICAgICAgICAgIHwg IFJlY2lwaWVudCBDb250ZXh0DQo+PiAgICAgICAgICAgICAgICAgICAgICAgICB8IE9TQ09SRSBy ZXNwb25zZTogICAgICB8IFByb3RlY3QgcmVzcG9uc2Ugd2l0aA0KPj4gICAgICAgICAgICAgICAg ICAgICAgICAgfCAgIFRva2VuID0gVG9rZW4xLCAuLi4gfCAgU2VuZGVyIENvbnRleHQNCj4+ICAg UmV0cmlldmUgY29udGV4dCB3aXRoIHw8LS0tLS0tLS0tLS0tLS0tLS0tLS0tLSsNCj4+ICAgIFRv a2VuID0gVG9rZW4xICAgICAgIHwgICAgICAgICAgICAgICAgICAgICAgIHwNCj4+ICAgVmVyaWZ5 IHJlcXVlc3Qgd2l0aCAgIHwgICAgICAgICAgICAgICAgICAgICAgIHwNCj4+ICAgIFJlY2lwaWVu dCBDb250ZXh0ICAgIHwgICAgICAgICAgICAgICAgICAgICAgIHwNCj4+DQo+PiAgICAgICAgICAg IEZpZ3VyZSA0OiBSZXRyaWV2YWwgYW5kIFVzZSBvZiB0aGUgU2VjdXJpdHkgQ29udGV4dA0KPj4N Cj4+PG1nbHQ+DQo+PkkgbWlnaHQgYmUgaGVscGZ1bCB0byBjbGFyaWZ5IHRoYXQgU2VuZGVyIENv bnRleHQgb24gYm90aCBzaWRlcyBhcmUgbm90DQo+PnRoZQ0KPj5zYW1lIGNvbnRleHQuDQo+DQo+ DQo+DQo+W0dTOl0gSXMgdGhpcyBiZXR0ZXI/DQo+T0xEDQo+VGhlIGVuZHBvaW50cyBwcm90ZWN0 IG1lc3NhZ2VzIHRvIHNlbmQgdXNpbmcgdGhlIFNlbmRlciBDb250ZXh0IGFuZA0KPnZlcmlmeSBt ZXNzYWdlcyByZWNlaXZlZCB1c2luZyB0aGUgUmVjaXBpZW50IENvbnRleHQsIGJvdGggY29udGV4 dHMNCj5iZWluZyBkZXJpdmVkIGZyb20gdGhlIENvbW1vbiBDb250ZXh0IGFuZCBvdGhlciBkYXRh Lg0KPk5FVw0KPkFuIGVuZHBvaW50IHByb3RlY3RzIG1lc3NhZ2VzIHRvIHNlbmQgdXNpbmcgaXRz IFNlbmRlciBDb250ZXh0IGFuZA0KPnZlcmlmaWVzIG1lc3NhZ2VzIHJlY2VpdmVkIHVzaW5nIGl0 cyBSZWNpcGllbnQgQ29udGV4dCwgYm90aCBjb250ZXh0cw0KPmJlaW5nIGRlcml2ZWQgZnJvbSB0 aGUgQ29tbW9uIENvbnRleHQgYW5kIG90aGVyIGRhdGEuDQo+DQo+DQo+DQo+DQo+DQo+PlNlY3Vy aXR5IENvbnRleHQgc2VlbXMgdG8gYmUgbWlzc2luZyBpbiB0aGUgYm94Lg0KPg0KPltHUzpdIEZp Z3VyZSA0IGNvbnRhaW5zIHNvbWUgYWJicmV2aWF0aW9ucyB0byBhdm9pZCBiZWNvbWluZyBvdmVy bG9hZGVkDQo+d2l0aCB0ZXh0OiBJbiB0aGUgZmlyc3QgYm94IOKAnENvbW1vbiwgU2VuZGVyLCBS ZWNpcGllbnTigJ0gaXMgYW4gYWJicmV2aWF0aW9uDQo+b2Yg4oCcQ29tbW9uIENvbnRleHQsIFNl bmRlciBDb250ZXh0LCBSZWNpcGllbnQgQ29udGV4dOKAnSAtIHdoaWNoIGluIGZhY3QgaXMNCj50 aGUgdGhlIHRvcGljIG9mIHRoaXMgc2VjdGlvbi4gRG8geW91IHRoaW5rIHRoaXMgaXMgdW5jbGVh cj8gTWF5YmUgSQ0KPm1pc3VuZGVyc3Rvb2QgdGhlIGNvbW1lbnQuDQo+DQo+Pg0KPj5JdCB3b3Vs ZCBhbHNvIGhlbHAgdG8gaGF2ZSBpbiB0aGUgZmlndXJlLCB0aGUgcmVsYXRpb24gYmV0d2VlbiB0 aGUgQ29tbW9uDQo+PlNlY3VyaXR5IENvbnRleHQsIHRoZSBTZW5kZXIgQ29udGV4dCBhbmQgUmVj aXBpZW50IENvbnRleHQgb24gYm90aCBzaWRlcy4NCj4+PC9tZ2x0Pg0KPg0KPltHUzpdIFRoZSBm aWd1cmUgaXMgYWxyZWFkeSB0cnlpbmcgdG8gaWxsdXN0cmF0ZSB0aGlzIGJ5IHRoZSBvcmRlcnMg b2YgdGhlDQo+Y29udGV4dHMgaW4gdGhlIGJveGVzIGZvciBjbGllbnQgYW5kIHNlcnZlcjogc2hv d2luZyB0aGF0IHRoZSBDb21tb24NCj5Db250ZXh0IGlzIGNvbW1vbiBmb3IgYm90aCBDbGllbnQg YW5kIFNlcnZlciB3aGVyZWFzIHRoZSBTZW5kZXIgQ29udGV4dCBvZg0KPnRoZSBDbGllbnQgY29y cmVzcG9uZHMgdG8gdGhlIFJlY2lwaWVudCBDb250ZXh0IG9mIHRoZSBTZXJ2ZXIgYW5kIHZpY2UN Cj52ZXJzYS4gSSBkb27igJl0IGtub3cgaG93IHRvIG1ha2UgdGhpcyBtb3JlIGNsZWFyIHdpdGhv dXQgb3ZlcmxvYWRpbmcgdGhlDQo+ZmlndXJlLg0KPg0KPg0KPj4NCj4+U2VsYW5kZXIsIGV0IGFs LiAgICAgICAgRXhwaXJlcyBKYW51YXJ5IDI3LCAyMDE5ICAgICAgICAgICAgICAgIFtQYWdlIDhd DQo+Pg0KPj5JbnRlcm5ldC1EcmFmdCAgICAgICAgICAgICAgICAgICBPU0NPUkUgICAgICAgICAg ICAgICAgICAgICAgICBKdWx5IDIwMTgNCj4+DQo+PiAgIFRoZSBDb21tb24gQ29udGV4dCBjb250 YWlucyB0aGUgZm9sbG93aW5nIHBhcmFtZXRlcnM6DQo+Pg0KPj4gICBvICBBRUFEIEFsZ29yaXRo bS4gIFRoZSBDT1NFIEFFQUQgYWxnb3JpdGhtIHRvIHVzZSBmb3IgZW5jcnlwdGlvbi4NCj4+DQo+ PiAgIG8gIEtleSBEZXJpdmF0aW9uIEZ1bmN0aW9uLiAgVGhlIEhNQUMgYmFzZWQgSEtERiBbUkZD NTg2OV0gdXNlZCB0bw0KPj4gICAgICBkZXJpdmUgU2VuZGVyIEtleSwgUmVjaXBpZW50IEtleSwg YW5kIENvbW1vbiBJVi4NCj4+PG1nbHQ+DQo+PlRoaXMgaXMgY29uZnVzaW5nIHRvIGhhdmUgYSBn ZW5lcmljIHRlcm0gc3VjaCBhcyBLREYgZGVmaW5lZCBieSBhIHN1cCBzZXQNCj4+b2YgaXQNCj4+ KEhLREYpLiBJIGJlbGlldmUgdGhhdCBlaXRoZXIgdGhlIEtERiBpcyBkZWZpbmVkIGdlbmVyaWMg ZW5vdWdoIGFuZCBsYXRlcg0KPj50aGUNCj4+ZGVmYXVsdCB2YWx1ZSBpcyBzZXQgdG8gSEtERiB3 aXRoIGEgc3BlY2lmaWMgaGFzaCBmdW5jdGlvbi4gQW5vdGhlcg0KPj5hbHRlcm5hdGl2ZQ0KPj5j b3VsZCBiZSB0byBsaW1pdGVkIHRoZSBzY29wZSBvZiB0aGlzIHBhcmFtZXRlciB0byBIS0RGIEhh c2ggRnVuY3Rpb24uDQo+PjwvbWdsdD4NCj4NCj4NCj5bR1M6XSBIb3cgYWJvdXQgdGhpcz8NCj5O RVcNCj4gICAgbyBUaGUgSE1BQyBiYXNlZCBrZXkgZGVyaXZhdGlvbiBmdW5jdGlvbiBIS0RGIFtS RkM1ODY5XSB1c2VkIHRvDQo+ICAgICAgZGVyaXZlIFNlbmRlciBLZXksIFJlY2lwaWVudCBLZXks IGFuZCBDb21tb24gSVYuDQo+DQo+DQo+Pg0KPj4gICBvICBNYXN0ZXIgU2VjcmV0LiAgVmFyaWFi bGUgbGVuZ3RoLCByYW5kb20gYnl0ZSBzdHJpbmcgKHNlZQ0KPj4gICAgICBTZWN0aW9uIDEyLjMp IHVzZWQgdG8gZGVyaXZlIHRyYWZmaWMga2V5cyBhbmQgSVZzLg0KPj48bWdsdD4NCj4+SSBiZWxp ZXZlIHRoYXQgSVZzIGlzIHRoZSBDb21tb24gSVYuDQo+PjwvbWdsdD4NCj4NCj5bR1M6XSBDb3Jy ZWN0LCB3aWxsIGNoYW5nZSB0aGF0Lg0KPg0KPg0KPj4gICBvICBNYXN0ZXIgU2FsdC4gIE9wdGlv bmFsIHZhcmlhYmxlIGxlbmd0aCBieXRlIHN0cmluZyBjb250YWluaW5nIHRoZQ0KPj4gICAgICBz YWx0IHVzZWQgdG8gZGVyaXZlIHRyYWZmaWMga2V5cyBhbmQgSVZzLg0KPj48bWdsdD4NCj4+SSBi ZWxpZXZlIHRoYXQgSVZzIGlzIHRoZSBDb21tb24gSVYuDQo+PjwvbWdsdD4NCj4NCj5bR1M6XSBD b3JyZWN0LCB3aWxsIGNoYW5nZSB0aGF0Lg0KPg0KPg0KPj4gICBvICBJRCBDb250ZXh0LiAgT3B0 aW9uYWwgdmFyaWFibGUgbGVuZ3RoIGJ5dGUgc3RyaW5nIHByb3ZpZGluZw0KPj4gICAgICBhZGRp dGlvbmFsIGluZm9ybWF0aW9uIHRvIGlkZW50aWZ5IHRoZSBDb21tb24gQ29udGV4dCBhbmQgdG8N Cj4+ICAgICAgZGVyaXZlIHRyYWZmaWMga2V5cyBhbmQgSVZzLg0KPj4NCj4+ICAgbyAgQ29tbW9u IElWLiAgQnl0ZSBzdHJpbmcgZGVyaXZlZCBmcm9tIE1hc3RlciBTZWNyZXQsIE1hc3RlciBTYWx0 LA0KPj4gICAgICBhbmQgSUQgQ29udGV4dC4gIExlbmd0aCBpcyBkZXRlcm1pbmVkIGJ5IHRoZSBB RUFEIEFsZ29yaXRobS4NCj4+PG1nbHQ+DQo+PlJGQzgxNTIgdXNlcyBjb250ZXh0IElWLiBJdCBp cyBub3QgY2xlYXIgdG8gbWUgaG93IHRoZXNlIHR3byBkaWZmZXIuIEkNCj4+YmVsaWV2ZQ0KPj5z b21lIHRleHQgc2hvdWxkIGJlIGFkZGVkIHRvIGV4cGxhaW4gaG93IENvbW1vbiBJViBkaWZmZXJz IGZyb20gdGhlDQo+PmNvbnRleHQgSVYuDQo+Pg0KPj5JdCBpcyB1bmNsZWFyIHRvIG1lIHdoZXRo ZXIgdGhlIENvbW1vbiBDb250ZXh0IGlzIHVzZWQgZm9yIHRoZSB0d28NCj4+YmlkaXJlY3Rpb25h bCBjb21tdW5pY2F0aW9ucy4gSWYgdGhhdCBpcyB0aGUgY2FzZSwgSSBhbSByZWFkaW5nIHRoYXQN Cj4+Q29tbW9uIElWDQo+PmFuZCBTZXF1ZW5jZSBOdW1iZXIgaW4gdGhlIHR3byBkaXJlY3Rpb25z IHdpbGwgZW5kIHVwIGluIElWIGNvbGxpc2lvbi4gU28NCj4+S2V5cw0KPj5uZWVkcyB0byBiZSB1 bmlkaXJlY3Rpb25hbCBhbmQgZGlmZmVyZW50LiA8L21nbHQ+DQo+DQo+W0dTOl0gQXMgbWVudGlv bmVkIGFib3ZlOiB3aGVuIHNlbmRpbmcsIGVhY2ggZW5kcG9pbnQgdXNlcyBpdHMgU2VuZGVyIEtl eSwNCj5hbmQgdGhlIG5vbmNlIGlzIHNwZWNpZmllZCBpbiBTZWN0aW9uIDUuMi4gVGhlIHByb29m IGZvciAoa2V5LG5vbmNlKQ0KPnVuaXF1ZW5lc3MgaXMgaW4gQXBwZW5kaXggRC4zLg0KPg0KPg0K Pj4gICBUaGUgU2VuZGVyIENvbnRleHQgY29udGFpbnMgdGhlIGZvbGxvd2luZyBwYXJhbWV0ZXJz Og0KPj4NCj4+ICAgbyAgU2VuZGVyIElELiAgQnl0ZSBzdHJpbmcgdXNlZCB0byBpZGVudGlmeSB0 aGUgU2VuZGVyIENvbnRleHQsIHRvDQo+PiAgICAgIGRlcml2ZSB0cmFmZmljIGtleXMgYW5kIElW cywgYW5kIHRvIGFzc3VyZSB1bmlxdWUgbm9uY2VzLiAgTWF4aW11bQ0KPj4gICAgICBsZW5ndGgg aXMgZGV0ZXJtaW5lZCBieSB0aGUgQUVBRCBBbGdvcml0aG0uDQo+Pg0KPj4gICBvICBTZW5kZXIg S2V5LiBCeXRlIHN0cmluZyBjb250YWluaW5nIHRoZSBzeW1tZXRyaWMga2V5IHRvIHByb3RlY3QN Cj4+ICAgICAgbWVzc2FnZXMgdG8gc2VuZC4gIERlcml2ZWQgZnJvbSBDb21tb24gQ29udGV4dCBh bmQgU2VuZGVyIElELg0KPj4gICAgICBMZW5ndGggaXMgZGV0ZXJtaW5lZCBieSB0aGUgQUVBRCBB bGdvcml0aG0uDQo+Pg0KPj4gICBvICBTZW5kZXIgU2VxdWVuY2UgTnVtYmVyLiAgTm9uLW5lZ2F0 aXZlIGludGVnZXIgdXNlZCBieSB0aGUgc2VuZGVyDQo+PiAgICAgIHRvIHByb3RlY3QgcmVxdWVz dHMgYW5kIGNlcnRhaW4gcmVzcG9uc2VzLCBlLmcuICBPYnNlcnZlDQo+PiAgICAgIG5vdGlmaWNh dGlvbnMuICBVc2VkIGFzICdQYXJ0aWFsIElWJyBbUkZDODE1Ml0gdG8gZ2VuZXJhdGUgdW5pcXVl DQo+PiAgICAgIG5vbmNlcyBmb3IgdGhlIEFFQUQuICBNYXhpbXVtIHZhbHVlIGlzIGRldGVybWlu ZWQgYnkgdGhlIEFFQUQNCj4+ICAgICAgQWxnb3JpdGhtLg0KPj4NCj4+ICAgVGhlIFJlY2lwaWVu dCBDb250ZXh0IGNvbnRhaW5zIHRoZSBmb2xsb3dpbmcgcGFyYW1ldGVyczoNCj4+DQo+PiAgIG8g IFJlY2lwaWVudCBJRC4gIEJ5dGUgc3RyaW5nIHVzZWQgdG8gaWRlbnRpZnkgdGhlIFJlY2lwaWVu dCBDb250ZXh0LA0KPj4gICAgICB0byBkZXJpdmUgdHJhZmZpYyBrZXlzIGFuZCBJVnMsIGFuZCB0 byBhc3N1cmUgdW5pcXVlIG5vbmNlcy4NCj4+ICAgICAgTWF4aW11bSBsZW5ndGggaXMgZGV0ZXJt aW5lZCBieSB0aGUgQUVBRCBBbGdvcml0aG0uDQo+Pg0KPj4gICBvICBSZWNpcGllbnQgS2V5LiBC eXRlIHN0cmluZyBjb250YWluaW5nIHRoZSBzeW1tZXRyaWMga2V5IHRvIHZlcmlmeQ0KPj4gICAg ICBtZXNzYWdlcyByZWNlaXZlZC4gIERlcml2ZWQgZnJvbSBDb21tb24gQ29udGV4dCBhbmQgUmVj aXBpZW50IElELg0KPj4gICAgICBMZW5ndGggaXMgZGV0ZXJtaW5lZCBieSB0aGUgQUVBRCBBbGdv cml0aG0uDQo+Pg0KPj4gICBvICBSZXBsYXkgV2luZG93IChTZXJ2ZXIgb25seSkuICBUaGUgcmVw bGF5IHdpbmRvdyB0byB2ZXJpZnkgcmVxdWVzdHMNCj4+ICAgICAgcmVjZWl2ZWQuDQo+Pg0KPj48 bWdsdD4NCj4+TG9va2luZyBhdCB0aGUgZGlmZmVyZW50IGNvbnRleHRzLCBtYXliZSBzb21lIHRl eHQgc2hvdWxkIGJlIGFkZGVkIHRvDQo+PnNwZWNpZnkNCj4+dGhhdCBTZW5kZXIgSUQgYW5kIFJl Y2lwaWVudCBJRCBhcmUgZXF1YWwgZm9yIGEgZ2l2ZW4gdW5pZGlyZWN0aW9uYWwNCj4+Y29tbXVu aWNhdGlvbi4gVGhlIHNhbWUgb2NjdXJzIGZvciBTZW5kZXIgS2V5IGFuZCBSZWNpcGllbnQgS2V5 Lg0KPg0KPltHUzpdIFRoZSBpbnRlbnRpb24gd2l0aCBTZWN0aW9uIDMuMSBhbmQgRmlndXJlIDQs IHdoaWNoIHlvdSBxdW90ZWQgYWJvdmUsDQo+aXMgZXhhY3RseSB0byBleHBsYWluIHRoaXM6DQo+ IkFuIGVuZHBvaW50IHVzZXMgaXRzIFNlbmRlciBJRCAoU0lEKSB0byBkZXJpdmUgaXRzIFNlbmRl ciBDb250ZXh0LCBhbmQNCj50aGUgb3RoZXIgZW5kcG9pbnQgdXNlcyB0aGUgc2FtZSBJRCwgbm93 IGNhbGxlZCBSZWNpcGllbnQgSUQgKFJJRCksIHRvDQo+ZGVyaXZlIGl0cyBSZWNpcGllbnQgQ29u dGV4dC7igJ0NCj5FeGNlcnB0IG9mIEZpZ3VyZSA0Og0KPlByb3RlY3QgcmVxdWVzdCB3aXRoICB8 ICAgICBraWQgPSBTSUQsIC4gLiAuICB8DQo+ICAgICAgU2VuZGVyIENvbnRleHQgICstLS0tLS0t LS0tLS0tLS0tLS0tLS0tPnwgUmV0cmlldmUgY29udGV4dCB3aXRoDQo+ICAgICAgICAgICAgICAg ICAgICAgIHwgICAgICAgICAgICAgICAgICAgICAgIHwgIFJJRCA9IGtpZA0KPklzIHRoYXQgc3Rp bGwgdW5jbGVhcj8NCj5TaW5jZSB0aGlzIGlzIHN5bW1ldHJpYyBjcnlwdG8sIGl0IHNob3VsZCBo b3BlZnVsbHkgYmUgY2xlYXIgdG8gYW55b25lDQo+dGhhdCB0aGUga2V5cyB1c2VkIGZvciBlbmNy eXB0aW9uIGFuZCBkZWNyeXB0aW9uIGFyZSB0aGUgc2FtZSwgZG9u4oCZdCB5b3UNCj50aGluaz8N Cj4NCj4+DQo+PkkgYmVsaWV2ZSB0aGF0IFNlbmRlciBTZXF1ZW5jZSBOdW1iZXIgYWxzbyBuZWVk cyB0byBiZSBwcmVzZW50IGluIHRoZQ0KPj5SZWNpcGllbnQNCj4+Q29udGV4dCBpbiBvcmRlciB0 byBpbXBsZW1lbnQgYW50aSByZXBsYXkgbWVjaGFuaXNtLg0KPg0KPltHUzpdIFRoZSByZXBsYXkg d2luZG93IGlzIGFscmVhZHkgcGFydCBvZiB0aGUgUmVjaXBpZW50IENvbnRleHQuIFBlcmhhcHMN Cj5hIHJlZmVyZW5jZSB0byBTZWN0aW9uIDcuNCB3b3VsZCBiZSBzdWZmaWNpZW50IHRvIG1ha2Ug dGhlIGNvbm5lY3Rpb24NCj5iZXR3ZWVuIHJlcGxheSB3aW5kb3cgYW5kIHNlcXVlbmNlIG51bWJl cj8NCj4NCj4+DQo+PlNlcXVlbmNlIE51bWJlciBNYXkgYmUgaW50ZXJwcmV0ZWQgZGlmZmVyZW50 bHkuIEkgYmVsaWV2ZSB0aGF0DQo+PmludGVycHJldGF0aW9uDQo+PnNob3VsZCBhbHNvIGJlIHBh cnQgb2YgdGhlIENvbW1vbiBTZWN1cml0eSBDb250ZXh0Lg0KPg0KPltHUzpdIEkgZGlkbuKAmXQg dW5kZXJzdGFuZCB0aGlzIGNvbW1lbnQuDQo+DQo+Pg0KPj5BcyBtZW50aW9uZWQgYWJvdmUgdGhl IGNvbnRleHRzIG1heSBwcm9iYWJseSBiZSByZWZhY3RvcmVkIHdpdGggb25lDQo+PkNvbnRleHQg cGVyDQo+PnVuaWRpcmVjdGlvbmFsIGNvbW11bmljYXRpb24uIDwvbWdsdD4NCj4NCj5bR1M6XSBJ TUhPIHRoZSBjdXJyZW50IHRleHQgZGVzY3JpYmVzIGhvdyB0byBkZXJpdmUgdGhlIHNlY3VyaXR5 DQo+Y29udGV4dCBuZWVkZWQgYnkgZW5kcG9pbnRzIHRvIHByb2Nlc3MgbWVzc2FnZXMgdG8gc2Vu ZCBhbmQgbWVzc2FnZXMNCj5yZWNlaXZlZCBpbmRlcGVuZGVudCBvZiBiZWluZyBjbGllbnQgb3Ig c2VydmVyLiBUaGlzIG1heSBhbHRlcm5hdGl2ZWx5IGJlDQo+c3RydWN0dXJlZCBpbiBhIG51bWJl ciBvZiBkaWZmZXJlbnQgY2FzZXMgYnV0IEkgZG9u4oCZdCBzZWUgaG93IHRoYXQNCj5zaW1wbGlm aWVzIHNwZWNpZmljYXRpb24sIGltcGxlbWVudGF0aW9uIG9yIHNlY3VyaXR5IGFuYWx5c2lzLg0K Pg0KPg0KPj4NCj4+U2VsYW5kZXIsIGV0IGFsLiAgICAgICAgRXhwaXJlcyBKYW51YXJ5IDI3LCAy MDE5ICAgICAgICAgICAgICAgIFtQYWdlIDldDQo+Pg0KPj5JbnRlcm5ldC1EcmFmdCAgICAgICAg ICAgICAgICAgICBPU0NPUkUgICAgICAgICAgICAgICAgICAgICAgICBKdWx5IDIwMTgNCj4+DQo+ PiAgIEFsbCBwYXJhbWV0ZXJzIGV4Y2VwdCBTZW5kZXIgU2VxdWVuY2UgTnVtYmVyIGFuZCBSZXBs YXkgV2luZG93IGFyZQ0KPj4gICBpbW11dGFibGUgb25jZSB0aGUgc2VjdXJpdHkgY29udGV4dCBp cyBlc3RhYmxpc2hlZC4gIEFuIGVuZHBvaW50IG1heQ0KPj4gICBmcmVlIHVwIG1lbW9yeSBieSBu b3Qgc3RvcmluZyB0aGUgQ29tbW9uIElWLCBTZW5kZXIgS2V5LCBhbmQNCj4+ICAgUmVjaXBpZW50 IEtleSwgZGVyaXZpbmcgdGhlbSB3aGVuIG5lZWRlZC4gIEFsdGVybmF0aXZlbHksIGFuIGVuZHBv aW50DQo+PiAgIG1heSBmcmVlIHVwIG1lbW9yeSBieSBub3Qgc3RvcmluZyB0aGUgTWFzdGVyIFNl Y3JldCBhbmQgTWFzdGVyIFNhbHQNCj4+ICAgYWZ0ZXIgdGhlIG90aGVyIHBhcmFtZXRlcnMgaGF2 ZSBiZWVuIGRlcml2ZWQuDQo+Pg0KPj4gICBFbmRwb2ludHMgTUFZIG9wZXJhdGUgYXMgYm90aCBj bGllbnQgYW5kIHNlcnZlciBhbmQgdXNlIHRoZSBzYW1lDQo+PiAgIHNlY3VyaXR5IGNvbnRleHQg Zm9yIHRob3NlIHJvbGVzLiAgSW5kZXBlbmRlbnQgb2YgYmVpbmcgY2xpZW50IG9yDQo+PiAgIHNl cnZlciwgdGhlIGVuZHBvaW50IHByb3RlY3RzIG1lc3NhZ2VzIHRvIHNlbmQgdXNpbmcgaXRzIFNl bmRlcg0KPj4gICBDb250ZXh0LCBhbmQgdmVyaWZpZXMgbWVzc2FnZXMgcmVjZWl2ZWQgdXNpbmcg aXRzIFJlY2lwaWVudCBDb250ZXh0Lg0KPj4gICBUaGUgZW5kcG9pbnRzIE1VU1QgTk9UIGNoYW5n ZSB0aGUgU2VuZGVyL1JlY2lwaWVudCBJRCB3aGVuIGNoYW5naW5nDQo+PiAgIHJvbGVzLiAgSW4g b3RoZXIgd29yZHMsIGNoYW5naW5nIHRoZSByb2xlcyBkb2VzIG5vdCBjaGFuZ2UgdGhlIHNldCBv Zg0KPj4gICBrZXlzIHRvIGJlIHVzZWQuDQo+Pg0KPj4zLjIuICBFc3RhYmxpc2htZW50IG9mIFNl Y3VyaXR5IENvbnRleHQgUGFyYW1ldGVycw0KPj4NCj4+ICAgVGhlIHBhcmFtZXRlcnMgaW4gdGhl IHNlY3VyaXR5IGNvbnRleHQgYXJlIGRlcml2ZWQgZnJvbSBhIHNtYWxsIHNldA0KPj4gICBvZiBp bnB1dCBwYXJhbWV0ZXJzLiAgVGhlIGZvbGxvd2luZyBpbnB1dCBwYXJhbWV0ZXJzIFNIQUxMIGJl IHByZS0NCj4+ICAgZXN0YWJsaXNoZWQ6DQo+Pg0KPj4gICBvICBNYXN0ZXIgU2VjcmV0DQo+Pg0K Pj4gICBvICBTZW5kZXIgSUQNCj4+DQo+PiAgIG8gIFJlY2lwaWVudCBJRA0KPj4NCj4+PG1nbHQ+ DQo+PkkgYmVsaWV2ZSB0aGF0IFNlbmRlciBJRCBhbmQgUmVjaXBpZW50IElEIGNvdWxkIGJlIHRo ZSBzYW1lIHZhbHVlIGZvciBhDQo+PmdpdmVuDQo+PnVuaWRpcmVjdGlvbmFsIGNvbW11bmljYXRp b24uIEkgYmVsaWV2ZSB0aGF0IHdoYXQgaXMgcmVxdWlyZWQgaGVyIGlzIHRoZQ0KPj50d28NCj4+ SURzIHVzZWQgYnkgdGhlIHNlc3Npb25zLiA8L21nbHQ+DQo+DQo+W0dTOl0gUGVyaGFwcyBpdCB3 YXNu4oCZdCBjbGVhciB0aGF0IHRoaXMgdGV4dCBpcyBpbiB0aGUgY29udGV4dCBvZiBhIGdpdmVu DQo+ZW5kcG9pbnQ/IEJ5IHNlY3Rpb24gMy4zLCBpbiBvbmUgZW5kcG9pbnQsIHRoZSBTZW5kZXIg SUQgYW5kIFJlY2lwaWVudCBJRA0KPmFyZSBkaWZmZXJlbnQuIFBvc3NpYmxlIGNsYXJpZmljYXRp b246DQo+T0xEDQo+VGhlIHBhcmFtZXRlcnMgaW4gdGhlIHNlY3VyaXR5IGNvbnRleHQgYXJlIGRl cml2ZWQgZnJvbSBhIHNtYWxsIHNldA0KPiAgIG9mIGlucHV0IHBhcmFtZXRlcnMuDQo+TkVXDQo+ RWFjaCBlbmRwb2ludCBkZXJpdmVzIHRoZSBwYXJhbWV0ZXJzIGluIHRoZSBzZWN1cml0eSBjb250 ZXh0IGZyb20gYSBzbWFsbA0KPnNldCBvZiBpbnB1dCBwYXJhbWV0ZXJzLg0KPg0KPg0KPj4NCj4+ ICAgVGhlIGZvbGxvd2luZyBpbnB1dCBwYXJhbWV0ZXJzIE1BWSBiZSBwcmUtZXN0YWJsaXNoZWQu ICBJbiBjYXNlIGFueQ0KPj4gICBvZiB0aGVzZSBwYXJhbWV0ZXJzIGlzIG5vdCBwcmUtZXN0YWJs aXNoZWQsIHRoZSBkZWZhdWx0IHZhbHVlDQo+PiAgIGluZGljYXRlZCBiZWxvdyBpcyB1c2VkOg0K Pj4NCj4+ICAgbyAgQUVBRCBBbGdvcml0aG0NCj4+DQo+PiAgICAgICogIERlZmF1bHQgaXMgQUVT LUNDTS0xNi02NC0xMjggKENPU0UgYWxnb3JpdGhtIGVuY29kaW5nOiAxMCkNCj4+DQo+PiAgIG8g IE1hc3RlciBTYWx0DQo+Pg0KPj4gICAgICAqICBEZWZhdWx0IGlzIHRoZSBlbXB0eSBieXRlIHN0 cmluZw0KPj48bWdsdD4NCj4+SSBiZWxpZXZlIGV4cGxpY2l0bHkgcHJvdmlkaW5nIHRoZSBzdHJp bmcgY291bGQgaGVscC4gVGhlcmUgaXMgYWx3YXlzIHRoZQ0KPj5jb25mdXNpb24gd2l0aCAiXDAi IHZlcnN1cyAiIi4gPC9tZ2x0Pg0KPg0KPltHUzpdIE5vdGUgdGhhdCB0aGUgTWFzdGVyIFNhbHQg aXMgbmV2ZXIgc2VudCBhbmQgb25seSB1c2VkIGFzIHNhbHQgaW4NCj5IS0RGIChzZWN0aW9uIDIu MiBvZiBSRkMgNTg2OSkuIFNlY3Rpb24gMy4yLjEgZGVzY3JpYmVzIGhvdyB0aGUgZW1wdHkNCj5z dHJpbmcgc2hvdWxkIGJlIGludGVycHJldGVkOg0KPiJOb3RlIHRoYXQgW1JGQzU4NjldIHNwZWNp ZmllcyB0aGF0IGlmIHRoZSBzYWx0IGlzIG5vdCBwcm92aWRlZCwgaXQgaXMgc2V0DQo+dG8gYSBz dHJpbmcgb2YNCj56ZXJvcy4gRm9yIGltcGxlbWVudGF0aW9uIHB1cnBvc2VzLCBub3QgcHJvdmlk aW5nIHRoZSBzYWx0IGlzIHRoZSBzYW1lDQo+YXMgc2V0dGluZyB0aGUgc2FsdCB0byB0aGUgZW1w dHkgYnl0ZSBzdHJpbmcuIE9TQ09SRSBzZXRzIHRoZSBzYWx0DQo+ZGVmYXVsdCB2YWx1ZSB0byBl bXB0eSBieXRlIHN0cmluZywgd2hpY2ggaW4gW1JGQzU4NjldIGlzIGNvbnZlcnRlZCB0byBhDQo+ c3RyaW5nIG9mIHplcm9lcyAoc2VlIFNlY3Rpb24gMi4yIG9mIFtSRkM1ODY5XSkuIg0KPklzIHRo YXQgc3VmZmljaWVudGx5IGNsZWFyPw0KPg0KPg0KPg0KPg0KPiB3aGljaCBkZWZpbmVzIGhvdyB0 bw0KPg0KPj4NCj4+ICAgbyAgS2V5IERlcml2YXRpb24gRnVuY3Rpb24gKEtERikNCj4+DQo+PiAg ICAgICogIERlZmF1bHQgaXMgSEtERiBTSEEtMjU2DQo+Pg0KPj4gICBvICBSZXBsYXkgV2luZG93 IFR5cGUgYW5kIFNpemUNCj4+DQo+PiAgICAgICogIERlZmF1bHQgaXMgRFRMUy10eXBlIHJlcGxh eSBwcm90ZWN0aW9uIHdpdGggYSB3aW5kb3cgc2l6ZSBvZiAzMg0KPj4gICAgICAgICBbUkZDNjM0 N10NCj4+PG1nbHQ+DQo+PlRoaXMgc2VjdGlvbiBzcGVjaWZpZXMgVHlwZSBhbmQgd2luZG93cyBm b3IgdGhlIGFudGkgcmVwbGF5IG1lY2hhbmlzbS4NCj4+VGhpcyB3YXMNCj4+ZGVzY3JpYmVkIGFz IFJlcGxheSBXaW5kb3dzIGluIHRoZSBjb250ZXh0IGRlc2NyaXB0aW9uLiA8L21nbHQ+DQo+DQo+ W0dTOl0gSSBkaWRu4oCZdCB1bmRlcnN0YW5kIHRoaXMgY29tbWVudC4gRG8geW91IG1lYW46DQo+ T0xEDQo+UmVwbGF5IFdpbmRvdyBUeXBlIGFuZCBTaXplDQo+TkVXDQo+UmVwbGF5IFdpbmRvdw0K Pg0KPg0KPg0KPg0KPj5TZWxhbmRlciwgZXQgYWwuICAgICAgICBFeHBpcmVzIEphbnVhcnkgMjcs IDIwMTkgICAgICAgICAgICAgICBbUGFnZSAxMF0NCj4+DQo+PkludGVybmV0LURyYWZ0ICAgICAg ICAgICAgICAgICAgIE9TQ09SRSAgICAgICAgICAgICAgICAgICAgICAgIEp1bHkgMjAxOA0KPj4N Cj4+ICAgQWxsIGlucHV0IHBhcmFtZXRlcnMgbmVlZCB0byBiZSBrbm93biB0byBhbmQgYWdyZWVk IG9uIGJ5IGJvdGgNCj4+ICAgZW5kcG9pbnRzLCBidXQgdGhlIHJlcGxheSB3aW5kb3cgbWF5IGJl IGRpZmZlcmVudCBpbiB0aGUgdHdvDQo+PiAgIGVuZHBvaW50cy4gIFRoZSB3YXkgdGhlIGlucHV0 IHBhcmFtZXRlcnMgYXJlIHByZS1lc3RhYmxpc2hlZCwgaXMNCj4+ICAgYXBwbGljYXRpb24gc3Bl Y2lmaWMuICBDb25zaWRlcmF0aW9ucyBvZiBzZWN1cml0eSBjb250ZXh0DQo+PiAgIGVzdGFibGlz aG1lbnQgYXJlIGdpdmVuIGluIFNlY3Rpb24gMTIuMiBhbmQgZXhhbXBsZXMgb2YgZGVwbG95aW5n DQo+PiAgIE9TQ09SRSBpbiBBcHBlbmRpeCBCLg0KPj4NCj4+My4yLjEuICBEZXJpdmF0aW9uIG9m IFNlbmRlciBLZXksIFJlY2lwaWVudCBLZXksIGFuZCBDb21tb24gSVYNCj4+DQo+PiAgIFRoZSBL REYgTVVTVCBiZSBvbmUgb2YgdGhlIEhNQUMgYmFzZWQgSEtERiBbUkZDNTg2OV0gYWxnb3JpdGht cw0KPj4gICBkZWZpbmVkIGZvciBDT1NFIFtSRkM4MTUyXS4NCj4+PG1nbHQ+DQo+Pkl0IG1pZ2h0 IGJlIGJldHRlciB0byBjb25zaWRlciBIS0RGIGluc3RlYWQgb2YgS0RGIGFuZCB0aGVuIGp1c3Qg c3BlY2lmeSANCj4+dGhlDQo+Pkhhc2ggZnVuY3Rpb24gPC9tZ2x0Pg0KPltHUzpdIElzIHRoaXMg YmV0dGVyOg0KPk5FVw0KPiBUaGUgSEtERiBNVVNUIGJlIG9uZSBvZiB0aGUgSE1BQyBiYXNlZCBI S0RGIFtSRkM1ODY5XSBhbGdvcml0aG1zDQo+ICAgZGVmaW5lZCBmb3IgQ09TRSBbUkZDODE1Ml0u DQo+DQo+DQo+DQo+DQo+Pg0KPj4gIEhLREYgU0hBLTI1NiBpcyBtYW5kYXRvcnkgdG8gaW1wbGVt ZW50Lg0KPj4gICBUaGUgc2VjdXJpdHkgY29udGV4dCBwYXJhbWV0ZXJzIFNlbmRlciBLZXksIFJl Y2lwaWVudCBLZXksIGFuZCBDb21tb24NCj4+ICAgSVYgU0hBTEwgYmUgZGVyaXZlZCBmcm9tIHRo ZSBpbnB1dCBwYXJhbWV0ZXJzIHVzaW5nIHRoZSBIS0RGLCB3aGljaA0KPj4gICBjb25zaXN0cyBv ZiB0aGUgY29tcG9zaXRpb24gb2YgdGhlIEhLREYtRXh0cmFjdCBhbmQgSEtERi1FeHBhbmQgc3Rl cHMNCj4+ICAgW1JGQzU4NjldOg0KPj4NCj4+ICAgICAgb3V0cHV0IHBhcmFtZXRlciA9IEhLREYo c2FsdCwgSUtNLCBpbmZvLCBMKQ0KPj4NCj4+ICAgd2hlcmU6DQo+Pg0KPj4gICBvICBzYWx0IGlz IHRoZSBNYXN0ZXIgU2FsdCBhcyBkZWZpbmVkIGFib3ZlDQo+Pg0KPj4gICBvICBJS00gaXMgdGhl IE1hc3RlciBTZWNyZXQgYXMgZGVmaW5lZCBhYm92ZQ0KPj4NCj4+ICAgbyAgaW5mbyBpcyB0aGUg c2VyaWFsaXphdGlvbiBvZiBhIENCT1IgYXJyYXkgY29uc2lzdGluZyBvZjoNCj4+DQo+PiAgICAg IGluZm8gPSBbDQo+PiAgICAgICAgICBpZCA6IGJzdHIsDQo+PiAgICAgICAgICBpZF9jb250ZXh0 IDogYnN0ciAvIG5pbCwNCj4+ICAgICAgICAgIGFsZ19hZWFkIDogaW50IC8gdHN0ciwNCj4+ICAg ICAgICAgIHR5cGUgOiB0c3RyLA0KPj4gICAgICAgICAgTCA6IHVpbnQNCj4+ICAgICAgXQ0KPj48 bWdsdD4NCj4+YnN0ciwgbmlsLCB0c3RyIGFyZSB1c2VkIGZvciB0aGUgZmlyc3QgdGltZSBoZXJl LiBNYXliZSBhIHJlZmVyZW5jZSB0byANCj4+ODE1MiBtYXkNCj4+YmUgY2xhcmlmeWluZy4gPC9t Z2x0Pg0KPg0KPltHUzpdIE9LLCB3aWxsIGRvIHRoYXQgYW5kIGluIHRoZSB0ZXJtaW5vbG9neSBz ZWN0aW9uLg0KPj4NCj4+ICAgd2hlcmU6DQo+Pg0KPj4gICBvICBpZCBpcyB0aGUgU2VuZGVyIElE IG9yIFJlY2lwaWVudCBJRCB3aGVuIGRlcml2aW5nIGtleXMgYW5kIHRoZQ0KPj4gICAgICBlbXB0 eSBieXRlIHN0cmluZyB3aGVuIGRlcml2aW5nIHRoZSBDb21tb24gSVYuICBUaGUgZW5jb2Rpbmcg aXMNCj4+ICAgICAgZGVzY3JpYmVkIGluIFNlY3Rpb24gNS4NCj4+DQo+PiAgIG8gIGlkX2NvbnRl eHQgaXMgdGhlIElEIENvbnRleHQsIG9yIG5pbCBpZiBJRCBDb250ZXh0IGlzIG5vdA0KPj4gICAg ICBwcm92aWRlZC4NCj4+DQo+PiAgIG8gIGFsZ19hZWFkIGlzIHRoZSBBRUFEIEFsZ29yaXRobSwg ZW5jb2RlZCBhcyBkZWZpbmVkIGluIFtSRkM4MTUyXS4NCj4+DQo+PiAgIG8gIHR5cGUgaXMgIktl eSIgb3IgIklWIi4gIFRoZSBsYWJlbCBpcyBhbiBBU0NJSSBzdHJpbmcsIGFuZCBkb2VzIG5vdA0K Pj4gICAgICBpbmNsdWRlIGEgdHJhaWxpbmcgTlVMIGJ5dGUuDQo+Pg0KPj5TZWxhbmRlciwgZXQg YWwuICAgICAgICBFeHBpcmVzIEphbnVhcnkgMjcsIDIwMTkgICAgICAgICAgICAgICBbUGFnZSAx MV0NCj4+DQo+PkludGVybmV0LURyYWZ0ICAgICAgICAgICAgICAgICAgIE9TQ09SRSAgICAgICAg ICAgICAgICAgICAgICAgIEp1bHkgMjAxOA0KPj4NCj4+ICAgbyAgTCBpcyB0aGUgc2l6ZSBvZiB0 aGUga2V5L0lWIGZvciB0aGUgQUVBRCBhbGdvcml0aG0gdXNlZCwgaW4gYnl0ZXMuDQo+Pg0KPj4g ICBGb3IgZXhhbXBsZSwgaWYgdGhlIGFsZ29yaXRobSBBRVMtQ0NNLTE2LTY0LTEyOCAoc2VlIFNl Y3Rpb24gMTAuMiBpbg0KPj4gICBbUkZDODE1Ml0pIGlzIHVzZWQsIHRoZSBpbnRlZ2VyIHZhbHVl IGZvciBhbGdfYWVhZCBpcyAxMCwgdGhlIHZhbHVlDQo+PiAgIGZvciBMIGlzIDE2IGZvciBrZXlz IGFuZCAxMyBmb3IgdGhlIENvbW1vbiBJVi4NCj4+DQo+PiAgIE5vdGUgdGhhdCBbUkZDNTg2OV0g c3BlY2lmaWVzIHRoYXQgaWYgdGhlIHNhbHQgaXMgbm90IHByb3ZpZGVkLCBpdCBpcw0KPj4gICBz ZXQgdG8gYSBzdHJpbmcgb2YgemVyb3MuICBGb3IgaW1wbGVtZW50YXRpb24gcHVycG9zZXMsIG5v dCBwcm92aWRpbmcNCj4+ICAgdGhlIHNhbHQgaXMgdGhlIHNhbWUgYXMgc2V0dGluZyB0aGUgc2Fs dCB0byB0aGUgZW1wdHkgYnl0ZSBzdHJpbmcuDQo+PiAgIE9TQ09SRSBzZXRzIHRoZSBzYWx0IGRl ZmF1bHQgdmFsdWUgdG8gZW1wdHkgYnl0ZSBzdHJpbmcsIHdoaWNoIGluDQo+PiAgIFtSRkM1ODY5 XSBpcyBjb252ZXJ0ZWQgdG8gYSBzdHJpbmcgb2YgemVyb2VzIChzZWUgU2VjdGlvbiAyLjIgb2YN Cj4+ICAgW1JGQzU4NjldKS4NCj4+DQo+PjxtZ2x0Pg0KPj5JIGJlbGlldmUgdGhhdCBob3cgU2Vu ZGVyIEtleSwgUmVjaXBpZW50IEtleSwgYW5kIENvbW1vbiBJViBhcmUgZGVyaXZlZCANCj4+ZnJv bQ0KPj50aGUgb3V0cHV0X3BhcmFtZXRlcnMgc2hvdWxkIGJlIGRlc2NyaWJlZCBhcyB3ZWxsLg0K Pg0KPltHUzpdIFRoaXMgc2VjdGlvbiBpcyBpbnRlbmRlZCB0byBkZXNjcmliZSBqdXN0IHRoYXQu IElzIHRoaXMgbW9yZSBjbGVhcjoNCj5PTEQNCj5pZCBpcyB0aGUgU2VuZGVyIElEIG9yIFJlY2lw aWVudCBJRCB3aGVuIGRlcml2aW5nIGtleXMgYW5kIHRoZSBlbXB0eSBieXRlIA0KPnN0cmluZyB3 aGVuIGRlcml2aW5nIHRoZSBDb21tb24gSVYuDQo+TkVXDQo+aWQgaXMgdGhlIFNlbmRlciBJRCBv ciBSZWNpcGllbnQgSUQgd2hlbiBkZXJpdmluZyB0aGUgU2VuZGVyIEtleSBhbmQgDQo+UmVjaXBp ZW50IEtleSwgcmVzcGVjdGl2ZWx5LCBhbmQgdGhlIGVtcHR5IGJ5dGUgc3RyaW5nIHdoZW4gZGVy aXZpbmcgdGhlIA0KPkNvbW1vbiBJVi4NCj4NCj4NCj4+Tm90ZSB0aGF0IGluIHRoaXMgY2FzZSBJ IGJlbGlldmUgdGhhdCBTZW5kZXIgS2V5IGFuZCBSZWNpcGllbnQgS2V5IGFyZSANCj4+dXNlZCBm b3INCj4+dGhlIHR3byB1bmlkaXJlY3Rpb25hbCBjb21tdW5pY2F0aW9ucy4gSW4gb3RoZXIgd29y ZHMsIHRoZSBzYW1lIGtleSANCj4+c2hvdWxkIGJlDQo+PnVzZWQgYnkgdGhlIHNlbmRlciBhbmQg dGhlIHJlY2lwaWVudCBvZiB0aGUgc2FtZSBjb21tdW5pY2F0aW9uLiBUaGUgc2FtZSANCj4+Q29t bW9uDQo+PklWIGlzIHVzZWQgaW4gYm90aCBjb21tdW5pY2F0aW9ucy4gPC9tZ2x0PiANCj4NCj5b R1M6XSBBcyBkaXNjdXNzZWQgYWJvdmUsIFNlY3Rpb24gMy4xIGRlc2NyaWJlcyBob3cgU2VuZGVy IElEIGFuZCANCj5SZWNpcGllbnQgSUQgcmVsYXRlIHRvIGVhY2ggb3RoZXIuIEFzIHByb3Bvc2Vk IGFib3ZlLCB3ZSBlbXBoYXNpc2UgaW4gDQo+U2VjdGlvbiAzLjIgdGhhdCB0aGUgZGVyaXZhdGlv bnMgYXJlIHdpdGggcmVmZXJlbmNlIHRvIG9uZSBlbmRwb2ludC4gSXMgDQo+dGhhdCBzdWZmaWNp ZW50bHkgY2xlYXIgbm93PyBBcyBmb3IgdGhlIENvbW1vbiBJViwgaXRzIHVzZSBpcyBkZXNjcmli ZWQNCj5pbiBTZWN0aW9uIDUuMi4NCj4NCj4NCj4+My4yLjIuICBJbml0aWFsIFNlcXVlbmNlIE51 bWJlcnMgYW5kDQo+PlJlcGxheSBXaW5kb3cNCj4+DQo+PiAgIFRoZSBTZW5kZXIgU2VxdWVuY2Ug TnVtYmVyIGlzIGluaXRpYWxpemVkIHRvIDAuICBUaGUgc3VwcG9ydGVkIHR5cGVzDQo+PiAgIG9m IHJlcGxheSBwcm90ZWN0aW9uIGFuZCByZXBsYXkgd2luZG93IGxlbmd0aCBpcyBhcHBsaWNhdGlv biBzcGVjaWZpYw0KPj4gICBhbmQgZGVwZW5kcyBvbiBob3cgT1NDT1JFIGlzIHRyYW5zcG9ydGVk LCBzZWUgU2VjdGlvbiA3LjQuICBUaGUNCj4+ICAgZGVmYXVsdCBpcyBEVExTLXR5cGUgcmVwbGF5 IHByb3RlY3Rpb24gd2l0aCBhIHdpbmRvdyBzaXplIG9mIDMyDQo+PiAgIGluaXRpYXRlZCBhcyBk ZXNjcmliZWQgaW4gU2VjdGlvbiA0LjEuMi42IG9mIFtSRkM2MzQ3XS4NCj4+DQo+PjxtZ2x0Pg0K Pj5UaGlzIHNob3VsZCBiZSBzcGVjaWZpZWQgdGhlIHNhbWUgaW4gdGhlIENvbnRleHQuDQo+Pjwv bWdsdD4NCj4NCj5bR1M6XSBXZSBjYW4gbWFrZSBhIHJlZmVyZW5jZSB0byB0aGlzIHNlY3Rpb24g ZnJvbSBTZWN0aW9uIDMuDQo+Pg0KPj4zLjMuICBSZXF1aXJlbWVudHMgb24gdGhlIFNlY3VyaXR5 IENvbnRleHQgUGFyYW1ldGVycw0KPj4NCj4+ICAgVG8gZW5zdXJlIHVuaXF1ZSBTZW5kZXIgS2V5 cywgdGhlIHF1YXJ0ZXQgKE1hc3RlciBTZWNyZXQsIE1hc3Rlcg0KPj4gICBTYWx0LCBJRCBDb250 ZXh0LCBTZW5kZXIgSUQpIE1VU1QgYmUgdW5pcXVlLCBpLmUuIHRoZSBwYWlyIChJRA0KPj4gICBD b250ZXh0LCBTZW5kZXIgSUQpIFNIQUxMIGJlIHVuaXF1ZSBpbiB0aGUgc2V0IG9mIGFsbCBzZWN1 cml0eQ0KPj4gICBjb250ZXh0cyB1c2luZyB0aGUgc2FtZSBNYXN0ZXIgU2VjcmV0IGFuZCBNYXN0 ZXIgU2FsdC4gIFRoaXMgbWVhbnMNCj4+ICAgdGhhdCBTZW5kZXIgSUQgU0hBTEwgYmUgdW5pcXVl IGluIHRoZSBzZXQgb2YgYWxsIHNlY3VyaXR5IGNvbnRleHRzDQo+PiAgIHVzaW5nIHRoZSBzYW1l IE1hc3RlciBTZWNyZXQsIE1hc3RlciBTYWx0LCBhbmQgSUQgQ29udGV4dDsgc3VjaCBhDQo+PiAg IHJlcXVpcmVtZW50IGd1YXJhbnRlZXMgdW5pcXVlIChrZXksIG5vbmNlKSBwYWlycywgd2hpY2gg YXZvaWRzIG5vbmNlDQo+PiAgIHJldXNlLg0KPj4NCj4+PG1nbHQ+DQo+PkkgdW5kZXJzdGFuZCB0 aGUgdXNlIG9mIFNIQUxMIGFuZCBNVVNUIGFzIHNpbWlsYXIuIElmIHRoYXQgaXMgY29ycmVjdCwg DQo+Pkl0IA0KPj5tYXkNCj4+YmUgYmV0dGVyIHRvIHVzZSB0aGUgc2FtZSB0ZXJtIHRocm91Z2hv dXQgdGhlIGRvY3VtZW50Lg0KPg0KPltHUzpdIEnigJltIG9wZW4gdG8gZ3VpZGFuY2UgaGVyZSBi dXQgSeKAmWQgcmF0aGVyIG5vdCBtYWtlIHRoZXNlIGNoYW5nZXMgDQo+dGhyb3VnaG91dCB0aGUg ZG9jdW1lbnQgdW5sZXNzIHRoZXJlIGlzIGFuIGFncmVlZCBjb252ZW50aW9uIGFib3V0IHRoaXMu IA0KPkkgDQo+aGF2ZSBsZWFybmVkIGFib3V0IG9uZSBkaXN0aW5jdGlvbiBiZXR3ZWVuIGFjdG9y IChTSEFMTCkgYW5kIHBhc3NpdmUgDQo+ZW50aXR5IChNVVNUKSBidXQgSSBkb27igJl0IHNlZSB0 aGF0IGNvbnNlcXVlbnRpYWxseSB1c2VkIGluIG90aGVyIFJGQ3MuIEkgDQo+ZG9u4oCZdCBzZWUg YW55IHJpc2sgZm9yIGVycm9ycyByZXN1bHRpbmcgZnJvbSBpbnRlcmNoYW5nZWFibHkgdXNpbmcg U0hBTEwgDQo+b3IgTVVTVC4NCj4NCj4+DQo+PkkgYmVsaWV2ZSB0aGF0IHdlIHdvdWxkIGxpa2Ug dG8gYXZvaWQgdGhhdCB0aGUgc2FtZSBJViBpcyBiZWluZyByZXVzZWQgDQo+PndpdGggdGhlDQo+ PnNhbWUga2V5LiBBbnkgY2hhbmdlIGluIHRoZSBpbnB1dHMgb2YgdGhlIEhNQUMgYmFzZWQgS0RG IHdpbGwgcmVzdWx0IGluIGENCj4+ZGlmZmVyZW50IG91dHB1dC4gQXMgc3VjaCBhbnkgY2hhbmdl IGluIHRoZSBvdXRwdXQgd2lsbCByZXN1bHQgaW4gdGhhdA0KPj5wcm9wZXJ0eS4gSSBzdXNwZWN0 IHdlIHdvdWxkIGxpa2UgdG8gc29tZSBwYXJhbWV0ZXJzIHRvIHJlbWFpbiB3aXQgdGhlIA0KPj5z YW1lDQo+PnZhbHVlLCB3aGlsZSBzb21lIGNvdWxkIGJlIGNoYW5nZWQsIGFuZCBmb3IgdGhhdCBy ZWFzb24sIHdlIGNob3NlIHRoZSANCj4+U2VuZGVyDQo+PklELiBJIGJlbGlldmUgdGhlIHRleHQg Y291bGQgYmUgY2xhcmlmaWVkIGVpdGhlciBvbiB0aGUgcmVhc29uaW5nIGJlaGluZCANCj4+b3Ig aG93DQo+PnRoaXMgc2hvdWxkIGJlIG9wZXJhdGVkLiA8L21nbHQ+DQo+DQo+W0dTOl0gQXMgbWVu dGlvbmVkIGFib3ZlLCB0aGUgZ2VuZXJhdGlvbiBvZiB0aGF0IG5vbmNlIHVzZWQgd2l0aCB0aGUg QUVBRCANCj5pcyBkZXNjcmliZWQgaW4gU2VjdGlvbiA1LjIuIFRoZSByZWFzb25pbmcgd2h5IHRo aXMgaXMgc2VjdXJlIGlzIGluIA0KPkFwcGVuZGl4IEQuMy4gSXMgdGhlcmUgYW55dGhpbmcgbWlz c2luZz8NCj4NCj4+DQo+PiAgIERpZmZlcmVudCBtZXRob2RzIGNhbiBiZSB1c2VkIHRvIGFzc2ln biBTZW5kZXIgSURzOiBhIHByb3RvY29sIHRoYXQNCj4+ICAgYWxsb3dzIHRoZSBwYXJ0aWVzIHRv IG5lZ290aWF0ZSBsb2NhbGx5IHVuaXF1ZSBpZGVudGlmaWVycywgYSB0cnVzdGVkDQo+PiAgIHRo aXJkIHBhcnR5IChlLmcuLCBbSS1ELmlldGYtYWNlLW9hdXRoLWF1dGh6XSksIG9yIHRoZSBpZGVu dGlmaWVycw0KPj4gICBjYW4gYmUgYXNzaWduZWQgb3V0LW9mLWJhbmQuICBUaGUgU2VuZGVyIElE cyBjYW4gYmUgdmVyeSBzaG9ydCAobm90ZQ0KPj4gICB0aGF0IHRoZSBlbXB0eSBzdHJpbmcgaXMg YSBsZWdpdGltYXRlIHZhbHVlKS4gIFRoZSBtYXhpbXVtIGxlbmd0aCBvZg0KPj4gICBTZW5kZXIg SUQgaW4gYnl0ZXMgZXF1YWxzIHRoZSBsZW5ndGggb2YgQUVBRCBub25jZSBtaW51cyA2LiAgRm9y IEFFUy0NCj4+ICAgQ0NNLTE2LTY0LTEyOCB0aGUgbWF4aW11bSBsZW5ndGggb2YgU2VuZGVyIElE IGlzIDcgYnl0ZXMuDQo+Pg0KPj48bWdsdD4NCj4+SSBzdXNwZWN0IHRob3NlIHJlc3RyaWN0aW9u IGNvbWluZyBmcm9tIHRoZSBDT1NFIHNwZWNpZmljYXRpb24uIElmIHRoYXQgDQo+PmlzDQo+PmNv cnJlY3QsIEkgYmVsaWV2ZSBpdCB3b3VsZCBiZSBoZWxwZnVsIHRvIGhhdmUgYSByZWZlcmVuY2Ug dG8gdGhhdCANCj4+ZG9jdW1lbnQuDQo+PjwvbWdsdD4NCj4NCj4NCj5bR1M6XSBObywgdGhlIHJl c3RyaWN0aW9uIGNvbWVzIGZyb20gdGhlIG5vbmNlIGNvbnN0cnVjdGlvbiwgSSB3aWxsIGFkZCBh IA0KPnJlZmVyZW5jZSB0byBTZWN0aW9uIDUuMi4NCj4NCj4+DQo+PiAgIFRvIHNpbXBsaWZ5IHJl dHJpZXZhbCBvZiB0aGUgcmlnaHQgUmVjaXBpZW50IENvbnRleHQsIHRoZSBSZWNpcGllbnQNCj4+ ICAgSUQgU0hPVUxEIGJlIHVuaXF1ZSBpbiB0aGUgc2V0cyBvZiBhbGwgUmVjaXBpZW50IENvbnRl eHRzIHVzZWQgYnkgYW4NCj4+ICAgZW5kcG9pbnQuICBJZiBhbiBlbmRwb2ludCBoYXMgdGhlIHNh bWUgUmVjaXBpZW50IElEIHdpdGggZGlmZmVyZW50DQo+PiAgIFJlY2lwaWVudCBDb250ZXh0cywg aS5lLiB0aGUgUmVjaXBpZW50IENvbnRleHRzIGFyZSBkZXJpdmVkIGZyb20NCj4+ICAgZGlmZmVy ZW50IENvbW1vbiBDb250ZXh0cywgdGhlbiB0aGUgZW5kcG9pbnQgbWF5IG5lZWQgdG8gdHJ5IG11 bHRpcGxlDQo+PiAgIHRpbWVzIGJlZm9yZSB2ZXJpZnlpbmcgdGhlIHJpZ2h0IHNlY3VyaXR5IGNv bnRleHQgYXNzb2NpYXRlZCB0byB0aGUNCj4+ICAgUmVjaXBpZW50IElELg0KPj4NCj4+PG1nbHQ+ DQo+PlN1Y2ggY29sbGlzaW9uIGNvdWxkIHJlcHJlc2VudCBhbiBhdHRhY2sgd2hlcmUgdGhlIGF0 dGFja2VyIGNvdWxkIGluIA0KPj5jYXNlIA0KPj5hDQo+PmNvbGxpc2lvbiBpcyBvYnNlcnZlZCBj cmFmdCBhIHBhY2tldCB0aGF0IGNvc3RzIHR3byB0aW1lIG1vcmUgDQo+PmNvbXB1dGF0aW9uIA0K Pj50aGFuDQo+PmEgcmVndWxhciBwYWNrZXQuDQo+DQo+W0dTOl0gIFRoaXMgc2VjdGlvbiBkZXNj cmliZXMgdW5uZWNlc3NhcnkgcHJvY2Vzc2luZyBkdWUgdG8gY29sbGlzaW9uIG9mIA0KPmlkZW50 aWZpZXJzLiBOb3RlIHRoYXQgYW4gYXR0YWNrZXIgY2FuIHNwb29mIGEgbWVzc2FnZSBhbmQgdXNl IGFuIA0KPmV4aXN0aW5nIA0KPmlkZW50aWZpZXIgZXZlbiBpZiB0aGVyZSBpcyBvbmx5IHNpbmds ZSBjb250ZXh0IHdpdGggdGhpcyBpZGVudGlmaWVyLCBhbmQgDQo+c3VjaCBhdHRhY2tzIGFyZSBh bHJlYWR5IG1lbnRpb25lZCBpbiB0aGUgc2VjdXJpdHkgY29uc2lkZXJhdGlvbnMuDQo+DQo+Pg0K Pj5JIG1pZ2h0IGJlIHdyb25nLCBidXQgaXQgc2VlbXMgdGhhdCB0aGUgSUQgaXMgbW9yZSBpbXBv cnRhbnQgZm9yIHRoZSANCj4+cmVjaXBpZW50Lg0KPj5UeXBpY2FsbHkgdGhlIHNlbmRlciBjYW4g ZWFzaWx5IGFkZHJlc3MgU2VuZGVyIElEIGNvbGxpc2lvbi4gICBPbiB0aGUgDQo+Pm90aGVyDQo+ PmhhbmQgdGhlIGNyeXB0b2dyYXBoaWMgcHJvcGVydGllcyBhcmUgYmFzZWQgb24gdGhlIHVuaXF1 ZW5lc3Mgb2YgdGhlIA0KPj5TZW5kZXIgSUQuDQo+Pk1heWJlIHRoZXNlIGNvdWxkIGJlIGNvbnNp ZGVyZWQgd2l0aCB0aGUgUmVjaXBpZW50IElEIGluIG1pbmQuIDwvbWdsdD4NCj4NCj5bR1M6XSBT ZWUgZGlzY3Vzc2lvbiBhYm91dCByZXF1aXJlbWVudHMgb24gc2VjdXJpdHkgY29udGV4dCBhYm92 ZS4NCj4NCj4NCj4+DQo+PlNlbGFuZGVyLCBldCBhbC4gICAgICAgIEV4cGlyZXMgSmFudWFyeSAy NywgMjAxOSAgICAgICAgICAgICAgIFtQYWdlIDEyXQ0KPj4NCj4+SW50ZXJuZXQtRHJhZnQgICAg ICAgICAgICAgICAgICAgT1NDT1JFICAgICAgICAgICAgICAgICAgICAgICAgSnVseSAyMDE4DQo+ Pg0KPj4gICBUaGUgSUQgQ29udGV4dCBpcyB1c2VkIHRvIGRpc3Rpbmd1aXNoIGJldHdlZW4gc2Vj dXJpdHkgY29udGV4dHMuICBUaGUNCj4+ICAgbWV0aG9kcyB1c2VkIGZvciBhc3NpZ25pbmcgU2Vu ZGVyIElEIGNhbiBhbHNvIGJlIHVzZWQgZm9yIGFzc2lnbmluZw0KPj4gICB0aGUgSUQgQ29udGV4 dC4gIEFkZGl0aW9uYWxseSwgdGhlIElEIENvbnRleHQgY2FuIGJlIGdlbmVyYXRlZCBieSB0aGUN Cj4+ICAgY2xpZW50IChzZWUgQXBwZW5kaXggQi4yKS4gIElEIENvbnRleHQgY2FuIGJlIGFyYml0 cmFyaWx5IGxvbmcuDQo+Pg0KPj40LiAgUHJvdGVjdGVkIE1lc3NhZ2UgRmllbGRzDQo+Pg0KPj40 LjEuICBDb0FQIE9wdGlvbnMNCj4+DQo+PjQuMS4xLiAgSW5uZXIgT3B0aW9ucw0KPj40LjEuMi4g IE91dGVyIE9wdGlvbnMNCj4+NC4xLjMuICBTcGVjaWFsIE9wdGlvbnMNCj4+NC4xLjMuMS4gIE1h eC1BZ2UNCj4+NC4xLjMuMi4gIFVyaS1Ib3N0IGFuZCBVcmktUG9ydA0KPj40LjEuMy4zLiAgUHJv eHktVXJpDQo+PjQuMS4zLjQuICBUaGUgQmxvY2sgT3B0aW9ucw0KPj40LjEuMy40LjEuICBJbm5l ciBCbG9jayBPcHRpb25zDQo+PjQuMS4zLjQuMi4gIE91dGVyIEJsb2NrIE9wdGlvbnMNCj4+NC4x LjMuNS4gIE9ic2VydmUNCj4+NC4xLjMuNS4xLiAgUmVnaXN0cmF0aW9ucyBhbmQgQ2FuY2VsbGF0 aW9ucw0KPj40LjEuMy41LjIuICBOb3RpZmljYXRpb25zDQo+Pg0KPj4gICBJZiB0aGUgc2VydmVy IGFjY2VwdHMgYW4gT2JzZXJ2ZSByZWdpc3RyYXRpb24sIGEgUGFydGlhbCBJViBNVVNUIGJlDQo+ PiAgIGluY2x1ZGVkIGluIGFsbCBub3RpZmljYXRpb25zIChib3RoIHN1Y2Nlc3NmdWwgYW5kIGVy cm9yKSwgZXhjZXB0IGZvcg0KPj4gICB0aGUgZmlyc3Qgb25lIHdoZXJlIFBhcnRpYWwgSVYgTUFZ IGJlIG9taXR0ZWQuICBUbyBwcm90ZWN0IGFnYWluc3QNCj4+ICAgcmVwbGF5LCB0aGUgY2xpZW50 IFNIQUxMIG1haW50YWluIGEgTm90aWZpY2F0aW9uIE51bWJlciBmb3IgZWFjaA0KPj4gICBPYnNl cnZhdGlvbiBpdCByZWdpc3RlcnMuICBUaGUgTm90aWZpY2F0aW9uIE51bWJlciBpcyBhIG5vbi1u ZWdhdGl2ZQ0KPj4gICBpbnRlZ2VyIGNvbnRhaW5pbmcgdGhlIGxhcmdlc3QgUGFydGlhbCBJViBv ZiB0aGUgcmVjZWl2ZWQNCj4+ICAgbm90aWZpY2F0aW9ucyBmb3IgdGhlIGFzc29jaWF0ZWQgT2Jz ZXJ2ZSByZWdpc3RyYXRpb24uICBGdXJ0aGVyDQo+PiAgIGRldGFpbHMgb2YgcmVwbGF5IHByb3Rl Y3Rpb24gb2Ygbm90aWZpY2F0aW9ucyBhcmUgc3BlY2lmaWVkIGluDQo+PiAgIFNlY3Rpb24gNy40 LjEuDQo+Pg0KPj4gICBGb3Igbm90aWZpY2F0aW9ucywgdGhlIElubmVyIE9ic2VydmUgdmFsdWUg TVVTVCBiZSBlbXB0eSAoc2VlDQo+PiAgIFNlY3Rpb24gMy4yIG9mIFtSRkM3MjUyXSkuICBUaGUg T3V0ZXIgT2JzZXJ2ZSBpbiBhIG5vdGlmaWNhdGlvbiBpcw0KPj4NCj4+U2VsYW5kZXIsIGV0IGFs LiAgICAgICAgRXhwaXJlcyBKYW51YXJ5IDI3LCAyMDE5ICAgICAgICAgICAgICAgW1BhZ2UgMjBd DQo+Pg0KPj5JbnRlcm5ldC1EcmFmdCAgICAgICAgICAgICAgICAgICBPU0NPUkUgICAgICAgICAg ICAgICAgICAgICAgICBKdWx5IDIwMTgNCj4+DQo+PiAgIG5lZWRlZCBmb3IgaW50ZXJtZWRpYXJ5 IG5vZGVzIHRvIGFsbG93IG11bHRpcGxlIHJlc3BvbnNlcyB0byBvbmUNCj4+ICAgcmVxdWVzdCwg YW5kIG1heSBiZSBzZXQgdG8gdGhlIHZhbHVlIG9mIE9ic2VydmUgaW4gdGhlIG9yaWdpbmFsIENv QVANCj4+ICAgbWVzc2FnZS4gIFRoZSBjbGllbnQgcGVyZm9ybXMgb3JkZXJpbmcgb2Ygbm90aWZp Y2F0aW9ucyBhbmQgcmVwbGF5DQo+PiAgIHByb3RlY3Rpb24gYnkgY29tcGFyaW5nIHRoZWlyIFBh cnRpYWwgSVZzIGFuZCBTSEFMTCBpZ25vcmUgdGhlIG91dGVyDQo+PiAgIE9ic2VydmUgdmFsdWUu DQo+Pg0KPj4gICBJZiB0aGUgY2xpZW50IHJlY2VpdmVzIGEgcmVzcG9uc2UgdG8gYW4gT2JzZXJ2 ZSByZXF1ZXN0IHdpdGhvdXQgYW4NCj4+ICAgSW5uZXIgT2JzZXJ2ZSBvcHRpb24sIHRoZW4gaXQg dmVyaWZpZXMgdGhlIHJlc3BvbnNlIGFzIGEgbm9uLU9ic2VydmUNCj4+ICAgcmVzcG9uc2UsIGFz IHNwZWNpZmllZCBpbiBTZWN0aW9uIDguNC4gIElmIHRoZSBjbGllbnQgcmVjZWl2ZXMgYQ0KPj4g ICByZXNwb25zZSB0byBhIG5vbi1PYnNlcnZlIHJlcXVlc3Qgd2l0aCBhbiBJbm5lciBPYnNlcnZl IG9wdGlvbiwgdGhlbg0KPj4gICBpdCBzdG9wcyBwcm9jZXNzaW5nIHRoZSBtZXNzYWdlLCBhcyBz cGVjaWZpZWQgaW4gU2VjdGlvbiA4LjQuDQo+Pg0KPj4gICBBIGNsaWVudCBNVVNUIGNvbnNpZGVy IHRoZSBub3RpZmljYXRpb24gd2l0aCB0aGUgaGlnaGVzdCBQYXJ0aWFsIElWDQo+PiAgIGFzIHRo ZSBmcmVzaGVzdCwgcmVnYXJkbGVzcyBvZiB0aGUgb3JkZXIgb2YgYXJyaXZhbC4gIEluIG9yZGVy IHRvDQo+PiAgIHN1cHBvcnQgZXhpc3RpbmcgT2JzZXJ2ZSBpbXBsZW1lbnRhdGlvbnMgdGhlIE9T Q09SRSBjbGllbnQNCj4+ICAgaW1wbGVtZW50YXRpb24gTUFZIHNldCB0aGUgT2JzZXJ2ZSB2YWx1 ZSB0byB0aGUgdGhyZWUgbGVhc3QNCj4+ICAgc2lnbmlmaWNhbnQgYnl0ZXMgb2YgdGhlIFBhcnRp YWwgSVY7IHN1Y2ggYW4gaW1wbGVtZW50YXRpb24gbmVlZHMgdG8NCj4+ICAgbWFrZSBzdXJlIHRo YXQgdGhlIE9ic2VydmUgdmFsdWUgZm9yIGFuIG9ic2VydmUgbm90aWZpY2F0aW9uIHdpdGhvdXQN Cj4+ICAgUGFydGlhbCBJViBpcyBzbWFsbGVyIHRoYW4gYSBub3RpZmljYXRpb24gd2l0aCBQYXJ0 aWFsIElWLg0KPj4NCj4+PG1nbHQ+DQo+PlRoaXMgc2VjdGlvbiBkaXNjdXNzIHRoZSBiZWhhdmlv ciByZWdhcmRpbmcgdGhlIHNlcXVlbmNlIG51bWJlci4gV2hpbGUgDQo+PnRoZQ0KPj5zZXF1ZW5j ZSBudW1iZXIgYW5kIHRoZSBwYXJ0aWFsIElWIGhhdmUgdGhlIHNhbWUgdmFsdWUsIEkgYW0gd29u ZGVyaW5nIA0KPj5pZiANCj4+aXQNCj4+d291bGQgbm90IGJlIG1vcmUgYXBwcm9wcmlhdGVkIHRv IG1lbnRpb24gdGhlIHNlcXVlbmNlIG51bWJlciB2YWx1ZSBpcyANCj4+cHJvdmlkZWQNCj4+Ynkg dGhlIHBhcnRpYWwgSVYsIGFuZCB0aGVuIHVzZSB0aGUgc2VxdWVuY2UgbnVtYmVyIHZhcmlhYmxl IHRvIGRlc2NyaWJlIA0KPj5hbnRpDQo+PnJlcGxheS4gPC9tZ2x0Pg0KPg0KPg0KPltHUzpdIFdl IGludGVuZGVkIHRvIHVzZSB0aGUgdGVybSDigJxwYXJ0aWFsIElW4oCdIHdoZW4gcmVmZXJyaW5n IHRvIHRoZSANCj5udW1iZXIgYmVpbmcgdHJhbnNwb3J0ZWQgYW5kIOKAnFNTTiIgd2hlbiByZWZl cnJpbmcgdG8gdGhlIG51bWJlciBzdG9yZWQgaW4gDQo+dGhlIGVuZHBvaW50LiBJIHdpbGwgZ28g dGhyb3VnaCB0aGUgZG9jdW1lbnQgYW5kIHNlZSB0aGF0IHRoaXMgY29udmVudGlvbiANCj5pcyBr ZXB0Lg0KPj4NCj4+NC4xLjMuNi4gIE5vLVJlc3BvbnNlDQo+PjQuMS4zLjcuICBPU0NPUkUNCj4+ NC4yLiAgQ29BUCBIZWFkZXIgRmllbGRzIGFuZCBQYXlsb2FkDQo+PjQuMy4gIFNpZ25hbGluZyBN ZXNzYWdlcw0KPj41LiAgVGhlIENPU0UgT2JqZWN0DQo+PjUuMS4gIEtpZCBDb250ZXh0DQo+PjUu Mi4gIE5vbmNlDQo+PjUuMy4gIFBsYWludGV4dA0KPj41LjQuICBBZGRpdGlvbmFsIEF1dGhlbnRp Y2F0ZWQgRGF0YQ0KPj42LiAgT1NDT1JFIEhlYWRlciBDb21wcmVzc2lvbg0KPj42LjEuICBFbmNv ZGluZyBvZiB0aGUgT1NDT1JFIE9wdGlvbiBWYWx1ZQ0KPj42LjIuICBFbmNvZGluZyBvZiB0aGUg T1NDT1JFIFBheWxvYWQNCj4+Ni4zLiAgRXhhbXBsZXMgb2YgQ29tcHJlc3NlZCBDT1NFIE9iamVj dHMNCj4+Ny4yLiAgU2VxdWVuY2UgTnVtYmVycw0KPj43LjIuMS4gIE1heGltdW0gU2VxdWVuY2Ug TnVtYmVyDQo+PjcuMy4gIEZyZXNobmVzcw0KPj43LjQuICBSZXBsYXkgUHJvdGVjdGlvbg0KPj4N Cj4+ICAgSW4gb3JkZXIgdG8gcHJvdGVjdCBmcm9tIHJlcGxheSBvZiByZXF1ZXN0cywgdGhlIHNl cnZlcidzIFJlY2lwaWVudA0KPj4gICBDb250ZXh0IGluY2x1ZGVzIGEgUmVwbGF5IFdpbmRvdy4g IEEgc2VydmVyIFNIQUxMIHZlcmlmeSB0aGF0IGENCj4+ICAgUGFydGlhbCBJViByZWNlaXZlZCBp biB0aGUgQ09TRSBvYmplY3QgaGFzIG5vdCBiZWVuIHJlY2VpdmVkIGJlZm9yZS4NCj4+ICAgSWYg dGhpcyB2ZXJpZmljYXRpb24gZmFpbHMgdGhlIHNlcnZlciBTSEFMTCBzdG9wIHByb2Nlc3Npbmcg dGhlDQo+PiAgIG1lc3NhZ2UsIGFuZCBNQVkgb3B0aW9uYWxseSByZXNwb25kIHdpdGggYSA0LjAx IFVuYXV0aG9yaXplZCBlcnJvcg0KPj4gICBtZXNzYWdlLiAgQWxzbywgdGhlIHNlcnZlciBNQVkg c2V0IGFuIE91dGVyIE1heC1BZ2Ugb3B0aW9uIHdpdGggdmFsdWUNCj4+ICAgemVybywgdG8gaW5m b3JtIGFueSBpbnRlcm1lZGlhcnkgdGhhdCB0aGUgcmVzcG9uc2UgaXMgbm90IHRvIGJlDQo+PiAg IGNhY2hlZC4gIFRoZSBkaWFnbm9zdGljIHBheWxvYWQgTUFZIGNvbnRhaW4gdGhlICJSZXBsYXkg ZGV0ZWN0ZWQiDQo+PiAgIHN0cmluZy4gIFRoZSBzaXplIGFuZCB0eXBlIG9mIHRoZSBSZXBsYXkg V2luZG93IGRlcGVuZHMgb24gdGhlIHVzZQ0KPj4gICBjYXNlIGFuZCB0aGUgcHJvdG9jb2wgd2l0 aCB3aGljaCB0aGUgT1NDT1JFIG1lc3NhZ2UgaXMgdHJhbnNwb3J0ZWQuDQo+PiAgIEluIGNhc2Ug b2YgcmVsaWFibGUgYW5kIG9yZGVyZWQgdHJhbnNwb3J0IGZyb20gZW5kcG9pbnQgdG8gZW5kcG9p bnQsDQo+PiAgIGUuZy4gIFRDUCwgdGhlIHNlcnZlciBNQVkganVzdCBzdG9yZSB0aGUgbGFzdCBy ZWNlaXZlZCBQYXJ0aWFsIElWIGFuZA0KPj4gICByZXF1aXJlIHRoYXQgbmV3bHkgcmVjZWl2ZWQg UGFydGlhbCBJVnMgZXF1YWxzIHRoZSBsYXN0IHJlY2VpdmVkDQo+PiAgIFBhcnRpYWwgSVYgKyAx LiAgSG93ZXZlciwgaW4gY2FzZSBvZiBtaXhlZCByZWxpYWJsZSBhbmQgdW5yZWxpYWJsZQ0KPj4g ICB0cmFuc3BvcnRzIGFuZCB3aGVyZSBtZXNzYWdlcyBtYXkgYmUgbG9zdCwgc3VjaCBhIHJlcGxh eSBtZWNoYW5pc20NCj4+DQo+PlNlbGFuZGVyLCBldCBhbC4gICAgICAgIEV4cGlyZXMgSmFudWFy eSAyNywgMjAxOSAgICAgICAgICAgICAgIFtQYWdlIDMzXQ0KPj4NCj4+SW50ZXJuZXQtRHJhZnQg ICAgICAgICAgICAgICAgICAgT1NDT1JFICAgICAgICAgICAgICAgICAgICAgICAgSnVseSAyMDE4 DQo+Pg0KPj4gICBtYXkgYmUgdG9vIHJlc3RyaWN0aXZlIGFuZCB0aGUgZGVmYXVsdCByZXBsYXkg d2luZG93IGJlIG1vcmUgc3VpdGFibGUNCj4+ICAgKHNlZSBTZWN0aW9uIDMuMi4yKS4NCj4+PG1n bHQ+DQo+PkkgYW0gcmVhZGluZyB0aGUgYW50aSByZXBsYXkgbWVjaGFuaXNtIHVzZWQgYXMgdmVy eSBzcGVjaWZpYy4gDQo+PkluY3JlbWVudGluZw0KPj5QYXJ0aWFsIElWIGlzIG9uZSB3YXkgdG8g cGVyZm9ybSBhbnRpLXJlcGxheSBwcm90ZWN0aW9uLiBJdCBjb3VsZCBiZSB0aGUgDQo+PndheQ0K Pj5PU0NPUkUgcGVyZm9ybXMgYW50aSByZXBsYXkgcHJvdGVjdGlvbiBidXQgdGhpcyBpcyBub3Qg dGhlIG9ubHkgd2F5IHRvIA0KPj5kby4gSW4NCj4+YWRkaXRpb24sIGluY3JlbWVudGluZyB0aGUg UGFydGlhbCBJViByZXN1bHQgaW4gdGhlIElWIGJlaW5nIA0KPj5wcmVkaWN0aWJsZS4gDQo+PlRo aXMNCj4+Y29uZGl0aW9uIG1heSBub3QgYmUgc3VmZmljaWVudCBhcyBzb21lIGFsZ29yaXRobSBt YXkgcmVxdWlyZSB0aGUgSVYgDQo+PmJlaW5nDQo+PnVucHJlZGljdGFibGUuIEkgYmVsaWV2ZSBB bnRpLVJlcGxheSBUeXBlIHNob3VkbCBiZSBjb25maWd1cmFibGUsIGFuZCANCj4+c29tZSBub3Rl DQo+PnNob3VkbCBiZSBhZGRlZCB0byBjb21wbHkgd2l0aCB0aGUgZW5jcnlwdGlvbiBiZWluZyB1 c2VkLiA8L21nbHQ+DQo+DQo+W0dTOl0gV2UgYXJlIG1haW5seSBjb25jZXJuZWQgYWJvdXQgZW5j cnlwdGlvbiBhbGdvcml0aG1zIGFuZCByZXBsYXkgDQo+bWVjaGFuaXNtcyB0aGF0IGFyZSBzdWl0 YWJsZSBmb3IgSW9UIGRlcGxveW1lbnRzIGluIGdlbmVyYWwgYW5kIA0KPmNvbnN0cmFpbmVkIGVu dmlyb25tZW50cyBpbiBwYXJ0aWN1bGFyLiBQbGVhc2UgZ2l2ZSBhbiBleGFtcGxlIG9mIGEgDQo+ cmVsZXZhbnQgYWxnb3JpdGhtIHdoZXJlIHlvdSB0aGluayB0aGUgY3VycmVudCBzcGVjaWZpY2F0 aW9uIGlzIHRvbyANCj5yZXN0cmljdGl2ZS4NCj4+DQo+PiAgIFJlc3BvbnNlcyAod2l0aCBvciB3 aXRob3V0IFBhcnRpYWwgSVYpIGFyZSBwcm90ZWN0ZWQgYWdhaW5zdCByZXBsYXkNCj4+ICAgYXMg dGhleSBhcmUgYm91bmQgdG8gdGhlIHJlcXVlc3QgYW5kIHRoZSBmYWN0IHRoYXQgb25seSBhIHNp bmdsZQ0KPj4gICByZXNwb25zZSBpcyBhY2NlcHRlZC4gIE5vdGUgdGhhdCB0aGUgUGFydGlhbCBJ ViBpcyBub3QgdXNlZCBmb3INCj4+ICAgcmVwbGF5IHByb3RlY3Rpb24gaW4gdGhpcyBjYXNlLg0K Pj4NCj4+ICAgVGhlIG9wZXJhdGlvbiBvZiB2YWxpZGF0aW5nIHRoZSBQYXJ0aWFsIElWIGFuZCB1 cGRhdGluZyB0aGUgcmVwbGF5DQo+PiAgIHByb3RlY3Rpb24gTVVTVCBiZSBhdG9taWMuDQo+Pg0K Pj43LjQuMS4gIFJlcGxheSBQcm90ZWN0aW9uIG9mIE5vdGlmaWNhdGlvbnMNCj4+Ny41LiAgTG9z aW5nIFBhcnQgb2YgdGhlIENvbnRleHQgU3RhdGUNCj4+DQo+PiAgIFRvIHByZXZlbnQgcmV1c2Ug b2YgYW4gQUVBRCBub25jZSB3aXRoIHRoZSBzYW1lIGtleSwgb3IgZnJvbQ0KPj4gICBhY2NlcHRp bmcgcmVwbGF5ZWQgbWVzc2FnZXMsIGFuIGVuZHBvaW50IG5lZWRzIHRvIGhhbmRsZSB0aGUNCj4+ ICAgc2l0dWF0aW9uIG9mIGxvc2luZyByYXBpZGx5IGNoYW5naW5nIHBhcnRzIG9mIHRoZSBjb250 ZXh0LCBzdWNoIGFzDQo+PiAgIHRoZSByZXF1ZXN0IFRva2VuLCBTZW5kZXIgU2VxdWVuY2UgTnVt YmVyLCBSZXBsYXkgV2luZG93LCBhbmQNCj4+ICAgTm90aWZpY2F0aW9uIE51bWJlcnMuICBUaGVz ZSBhcmUgdHlwaWNhbGx5IHN0b3JlZCBpbiBSQU0gYW5kDQo+PiAgIHRoZXJlZm9yZSBsb3N0IGlu IHRoZSBjYXNlIG9mIGFuIHVucGxhbm5lZCByZWJvb3QuDQo+Pg0KPj4gICBBZnRlciBib290LCBh biBlbmRwb2ludCBjYW4gZWl0aGVyIHVzZSBhIHBlcnNpc3RlbnRseSBzdG9yZWQgY29tcGxldGUN Cj4+ICAgb3IgcGFydGlhbCBzZWN1cml0eSBjb250ZXh0LCBvciBlc3RhYmxpc2ggYSBuZXcgc2Vj dXJpdHkgY29udGV4dCB3aXRoDQo+PiAgIGVhY2ggZW5kcG9pbnQgaXQgY29tbXVuaWNhdGVzIHdp dGguICBIb3dldmVyLCBlc3RhYmxpc2hpbmcgYSBmcmVzaA0KPj4gICBzZWN1cml0eSBjb250ZXh0 IG1heSBoYXZlIGEgbm9uLW5lZ2xpZ2libGUgY29zdCBpbiB0ZXJtcyBvZiwgZS5nLiwNCj4+ICAg cG93ZXIgY29uc3VtcHRpb24uDQo+Pg0KPj4gICBJZiB0aGUgZW5kcG9pbnQgdXNlcyBhIHBlcnNp c3RlbnRseSBzdG9yZWQgcGFydGlhbCBzZWN1cml0eSBjb250ZXh0LA0KPj4gICBpdCBNVVNUIE5P VCByZXVzZSBhIHByZXZpb3VzIFNlbmRlciBTZXF1ZW5jZSBOdW1iZXIgYW5kIE1VU1QgTk9UDQo+ Pg0KPj5TZWxhbmRlciwgZXQgYWwuICAgICAgICBFeHBpcmVzIEphbnVhcnkgMjcsIDIwMTkgICAg ICAgICAgICAgICBbUGFnZSAzNF0NCj4+DQo+PkludGVybmV0LURyYWZ0ICAgICAgICAgICAgICAg ICAgIE9TQ09SRSAgICAgICAgICAgICAgICAgICAgICAgIEp1bHkgMjAxOA0KPj4NCj4+ICAgYWNj ZXB0IHByZXZpb3VzbHkgcmVjZWl2ZWQgbWVzc2FnZXMuICBTb21lIHdheXMgdG8gYWNoaWV2ZSB0 aGlzIGFyZQ0KPj4gICBkZXNjcmliZWQgaW4gdGhlIGZvbGxvd2luZyBzZWN0aW9ucy4NCj4+DQo+ PjcuNS4xLiAgU2VxdWVuY2UgTnVtYmVyDQo+Pg0KPj4gICBUbyBwcmV2ZW50IHJldXNlIG9mIFNl bmRlciBTZXF1ZW5jZSBOdW1iZXJzLCBhbiBlbmRwb2ludCBtYXkgcGVyZm9ybQ0KPj4gICB0aGUg Zm9sbG93aW5nIHByb2NlZHVyZSBkdXJpbmcgbm9ybWFsIG9wZXJhdGlvbnM6DQo+Pg0KPj4gICBv ICBCZWZvcmUgdXNpbmcgYSBTZW5kZXIgU2VxdWVuY2UgTnVtYmVyIHRoYXQgaXMgZXZlbmx5IGRp dmlzaWJsZSBieQ0KPj4gICAgICBLLCB3aGVyZSBLIGlzIGEgcG9zaXRpdmUgaW50ZWdlciwgc3Rv cmUgdGhlIFNlbmRlciBTZXF1ZW5jZSBOdW1iZXINCj4+ICAgICAgaW4gcGVyc2lzdGVudCBtZW1v cnkuICBBZnRlciBib290LCB0aGUgZW5kcG9pbnQgaW5pdGlhdGVzIHRoZQ0KPj4gICAgICBTZW5k ZXIgU2VxdWVuY2UgTnVtYmVyIHRvIHRoZSB2YWx1ZSBzdG9yZWQgaW4gcGVyc2lzdGVudCBtZW1v cnkgKw0KPj4gICAgICBLLiAgU3RvcmluZyB0byBwZXJzaXN0ZW50IG1lbW9yeSBjYW4gYmUgY29z dGx5LiAgVGhlIHZhbHVlIEsgZ2l2ZXMNCj4+ICAgICAgYSB0cmFkZS1vZmYgYmV0d2VlbiB0aGUg bnVtYmVyIG9mIHN0b3JhZ2Ugb3BlcmF0aW9ucyBhbmQgZWZmaWNpZW50DQo+PiAgICAgIHVzZSBv ZiBTZW5kZXIgU2VxdWVuY2UgTnVtYmVycy4NCj4+DQo+PjxtZ2x0Pg0KPj5JIGhhdmUgaGFyZCB0 aW1lIHJlYWRpbmcgdGhlIHNlY3Rpb24gYWJvdmUuIEkgZ3Vlc3MgSyBpcyBhIHBhcmFtZXRlciAN Cj4+a25vd24gYnkNCj4+T1NDT1JFLiBNeSB1bmRlcnN0YW5kaW5nIGlzIHRoYXQgU1NOPTAgLi4u IEstMSBhcmUgc3RvcmVkIGluIHBlcnNpc3RlbnQgDQo+Pm1lbW9yeS4NCj4+QWZ0ZXIgYm9vdCBT U04gPSBTU04gKyBLLg0KPj4NCj4+SSBtaWdodCBiZSB3cm9uZyBidXQgYXMgc3RvcmFnZSBpbiBw ZXJzaXN0ZW50IG1lbW9yeSBpcyBjb3N0bHkuIEdpdmVuIEsgYQ0KPj5wYXJhbWV0ZXIgZGVmaW5l ZCBieSB0aGUgaW1wbGVtZW50YXRpb24uIEkgd291bGQgcmF0aGVyIHN0b3JlIEYgPSANCj4+Zmxv b3IoU1NOIC8gSw0KPj4pLiBTU04gPSBGLksgKyBzc24gd2l0aCBzc24gPSAwLi4uIEstMSwgc28g YSBzdG9yYWdlIG9wZXJhdGlvbiBoYXBwZW5zIA0KPj5ldmVyeSBLLg0KPj5JbiBjYXNlIG9mIHJl Ym9vdCwgU1NOID0gKEYgKyAxKS5LICsgc3NuLg0KPj4NCj4+VGhpcyBlbmRzIGluIGEganVtcCBv ZiBtYXhpbXVtIEsgYW5kIGFudGkgcmVwbGF5IG11c3QgYmUgYWJsZSB0byBoYW5kbGUgDQo+PnRo aXMuDQo+PjwvbWdsdD4NCj4NCj5bR1M6XSBLIGlzIGEgdGhlIHBhcmFtZXRlciBkZXRlcm1pbmlu ZyBob3cgb2Z0ZW4geW91IG5lZWQgdG8gc3RvcmUgdG8gDQo+cGVyc2lzdGVudCBtZW1vcnksIGFu ZCBob3cgbWFueSBzZXF1ZW5jZSBudW1iZXJzIHlvdSBtYXkg4oCcbG9zZeKAnSBpbiBjYXNlIA0K Pm9mIA0KPnJlYm9vdC4gT25seSBvbmUgU1NOIGlzIHN0b3JlZCBpbiBwZXJzaXN0ZW50IG1lbW9y eSwgYW5kIHRoYXQgbnVtYmVyIGlzIA0KPmJlaW5nIG92ZXJ3cml0dGVuIHdoZW4gYSBuZXcgbXVs dGlwbGUgb2YgSyBpcyByZWFjaGVkLiBBZnRlciByZWJvb3QsIHRoZSANCj5zZXF1ZW5jZSBudW1i ZXIgaXMgc2V0IHRvIFNTTiArIEsgdG8gcHJldmVudCB1c2Ugb2YgYW55IG51bWJlciBiZXR3ZWVu IA0KPnRoZSANCj5sYXN0IHN0b3JlZCBTU04gYW5kIHRoZSBuZXh0IG11bHRpcGxlIG9mIEsuIElz IHRoaXMgbW9yZSBjbGVhcjoNCj5PTEQNCj4gICBvIEJlZm9yZSB1c2luZyBhIFNlbmRlciBTZXF1 ZW5jZSBOdW1iZXIgdGhhdCBpcyBldmVubHkgZGl2aXNpYmxlIGJ5DQo+ICAgICAgSywgd2hlcmUg SyBpcyBhIHBvc2l0aXZlIGludGVnZXIsIHN0b3JlIHRoZSBTZW5kZXIgU2VxdWVuY2UgTnVtYmVy DQo+ICAgICAgaW4gcGVyc2lzdGVudCBtZW1vcnkuDQo+TkVXDQo+ICAgbyAgQmVmb3JlIHVzaW5n IGEgU2VuZGVyIFNlcXVlbmNlIE51bWJlciB0aGF0IGlzIGV2ZW5seSBkaXZpc2libGUgYnkNCj4g ICAgICBLLCB3aGVyZSBLIGlzIGEgcG9zaXRpdmUgaW50ZWdlciwgc3RvcmUvb3ZlcndyaXRlIHRo ZSBTZW5kZXIgDQo+U2VxdWVuY2UgTnVtYmVyDQo+ICAgICAgaW4gcGVyc2lzdGVudCBtZW1vcnku DQo+DQo+DQo+DQo+DQo+Pg0KPj43LjUuMi4gIFJlcGxheSBXaW5kb3cNCj4+Ny41LjMuICBSZXBs YXkgb2YgTm90aWZpY2F0aW9ucw0KPj44LiAgUHJvY2Vzc2luZw0KPj4NCj4+ICAgVGhpcyBzZWN0 aW9uIGRlc2NyaWJlcyB0aGUgT1NDT1JFIG1lc3NhZ2UgcHJvY2Vzc2luZy4gIEFkZGl0aW9uYWwN Cj4+ICAgcHJvY2Vzc2luZyBmb3IgT2JzZXJ2ZSBvciBCbG9jay13aXNlIGFyZSBkZXNjcmliZWQg aW4gc3Vic2VjdGlvbnMuDQo+Pg0KPj4gICBOb3RlIHRoYXQsIGFuYWxvZ291c2x5IHRvIFtSRkM3 MjUyXSB3aGVyZSB0aGUgVG9rZW4gYW5kIHNvdXJjZS8NCj4+ICAgZGVzdGluYXRpb24gcGFpciBh cmUgdXNlZCB0byBtYXRjaCBhIHJlc3BvbnNlIHdpdGggYSByZXF1ZXN0LCBib3RoDQo+PiAgIGVu ZHBvaW50cyBNVVNUIGtlZXAgdGhlIGFzc29jaWF0aW9uIChUb2tlbiwge1NlY3VyaXR5IENvbnRl eHQsDQo+Pg0KPj5TZWxhbmRlciwgZXQgYWwuICAgICAgICBFeHBpcmVzIEphbnVhcnkgMjcsIDIw MTkgICAgICAgICAgICAgICBbUGFnZSAzNV0NCj4+DQo+PkludGVybmV0LURyYWZ0ICAgICAgICAg ICAgICAgICAgIE9TQ09SRSAgICAgICAgICAgICAgICAgICAgICAgIEp1bHkgMjAxOA0KPj4NCj4+ ICAgUGFydGlhbCBJViBvZiB0aGUgcmVxdWVzdH0pLCBpbiBvcmRlciB0byBiZSBhYmxlIHRvIGZp bmQgdGhlIFNlY3VyaXR5DQo+PiAgIENvbnRleHQgYW5kIGNvbXB1dGUgdGhlIEFBRCB0byBwcm90 ZWN0IG9yIHZlcmlmeSB0aGUgcmVzcG9uc2UuICBUaGUNCj4+ICAgYXNzb2NpYXRpb24gTUFZIGJl IGZvcmdvdHRlbiBhZnRlciBpdCBoYXMgYmVlbiB1c2VkIHRvIHN1Y2Nlc3NmdWxseQ0KPj4gICBw cm90ZWN0IG9yIHZlcmlmeSB0aGUgcmVzcG9uc2UsIHdpdGggdGhlIGV4Y2VwdGlvbiBvZiBPYnNl cnZlDQo+PiAgIHByb2Nlc3NpbmcsIHdoZXJlIHRoZSBhc3NvY2lhdGlvbiBNVVNUIGJlIGtlcHQg YXMgbG9uZyBhcyB0aGUNCj4+ICAgT2JzZXJ2YXRpb24gaXMgYWN0aXZlLg0KPj4NCj4+OC4xLiAg UHJvdGVjdGluZyB0aGUgUmVxdWVzdA0KPj4NCj4+ICAgR2l2ZW4gYSBDb0FQIHJlcXVlc3QsIHRo ZSBjbGllbnQgU0hBTEwgcGVyZm9ybSB0aGUgZm9sbG93aW5nIHN0ZXBzIHRvDQo+PiAgIGNyZWF0 ZSBhbiBPU0NPUkUgcmVxdWVzdDoNCj4+DQo+PiAgIDEuICBSZXRyaWV2ZSB0aGUgU2VuZGVyIENv bnRleHQgYXNzb2NpYXRlZCB3aXRoIHRoZSB0YXJnZXQgcmVzb3VyY2UuDQo+Pg0KPj4gICAyLiAg Q29tcG9zZSB0aGUgQWRkaXRpb25hbCBBdXRoZW50aWNhdGVkIERhdGEgYW5kIHRoZSBwbGFpbnRl eHQsIGFzDQo+PiAgICAgICBkZXNjcmliZWQgaW4gU2VjdGlvbnMgNS4zIGFuZCA1LjQuDQo+Pg0K Pj4gICAzLiAgRW5jb2RlIHRoZSBQYXJ0aWFsIElWIChTZW5kZXIgU2VxdWVuY2UgTnVtYmVyIGlu IG5ldHdvcmsgYnl0ZQ0KPj4gICAgICAgb3JkZXIpIGFuZCBpbmNyZW1lbnQgdGhlIFNlbmRlciBT ZXF1ZW5jZSBOdW1iZXIgYnkgb25lLg0KPj48bWdsdD4NCj4+SSBiZWxpZXZlIHRoaXMgZGVwZW5k cyBvbiB0aGUgQW50aS1yZXBsYXkgdHlwZS4NCj4+PC9tZ2x0Pg0KPg0KPltHUzpdIEFzIG1lbnRp b25lZCBhYm92ZSwgdW50aWwgaXQgaXMgZGVtb25zdHJhdGVkIHRvIGJlIGEgdG9vIA0KPnJlc3Ry aWN0aXZlIA0KPmFzc3VtcHRpb24gSSB3b3VsZCBsaWtlIHRvIGFzc3VtZSB0aGF0IHRoZSBzZXF1 ZW50aWFsIGluY3JlbWVudCBvZiANCj5QYXJ0aWFsIElWL1NTTiBpcyANCj5zdWZmaWNpZW50IGZv ciB0aGUgcmVsZXZhbnQgZW5jcnlwdGlvbiBhbGdvcml0aG0gYW5kIHJlcGxheSBwcm90ZWN0aW9u IA0KPm1lY2hhbmlzbSBpbiB1c2UuDQo+DQo+PiAgQ29tcHV0ZQ0KPj4gICAgICAgdGhlIEFFQUQg bm9uY2UgZnJvbSB0aGUgU2VuZGVyIElELCBDb21tb24gSVYsIGFuZCBQYXJ0aWFsIElWIGFzDQo+ PiAgICAgICBkZXNjcmliZWQgaW4gU2VjdGlvbiA1LjIuDQo+Pg0KPj4gICA0LiAgRW5jcnlwdCB0 aGUgQ09TRSBvYmplY3QgdXNpbmcgdGhlIFNlbmRlciBLZXkuIENvbXByZXNzIHRoZSBDT1NFDQo+ PiAgICAgICBPYmplY3QgYXMgc3BlY2lmaWVkIGluIFNlY3Rpb24gNi4NCj4+DQo+PiAgIDUuICBG b3JtYXQgdGhlIE9TQ09SRSBtZXNzYWdlIGFjY29yZGluZyB0byBTZWN0aW9uIDQuICBUaGUgT1ND T1JFDQo+PiAgICAgICBvcHRpb24gaXMgYWRkZWQgKHNlZSBTZWN0aW9uIDQuMS4yKS4NCj4+DQo+ PjguMi4gIFZlcmlmeWluZyB0aGUgUmVxdWVzdA0KPj4NCj4+ICAgQSBzZXJ2ZXIgcmVjZWl2aW5n IGEgcmVxdWVzdCBjb250YWluaW5nIHRoZSBPU0NPUkUgb3B0aW9uIFNIQUxMDQo+PiAgIHBlcmZv cm0gdGhlIGZvbGxvd2luZyBzdGVwczoNCj4+DQo+PiAgIDEuICBEaXNjYXJkIENvZGUgYW5kIGFs bCBjbGFzcyBFIG9wdGlvbnMgKG1hcmtlZCBpbiBGaWd1cmUgNSB3aXRoICd4Jw0KPj4gICAgICAg aW4gY29sdW1uIEUpIHByZXNlbnQgaW4gdGhlIHJlY2VpdmVkIG1lc3NhZ2UuICBGb3IgZXhhbXBs ZSwgYW4NCj4+ICAgICAgIElmLU1hdGNoIE91dGVyIG9wdGlvbiBpcyBkaXNjYXJkZWQsIGJ1dCBh biBVcmktSG9zdCBPdXRlciBvcHRpb24NCj4+ICAgICAgIGlzIG5vdCBkaXNjYXJkZWQuDQo+Pg0K Pj4gICAyLiAgRGVjb21wcmVzcyB0aGUgQ09TRSBPYmplY3QgKFNlY3Rpb24gNikgYW5kIHJldHJp ZXZlIHRoZSBSZWNpcGllbnQNCj4+ICAgICAgIENvbnRleHQgYXNzb2NpYXRlZCB3aXRoIHRoZSBS ZWNpcGllbnQgSUQgaW4gdGhlICdraWQnIHBhcmFtZXRlciwNCj4+ICAgICAgIGFkZGl0aW9uYWxs eSB1c2luZyB0aGUgJ2tpZCBjb250ZXh0JywgaWYgcHJlc2VudC4gIElmIGVpdGhlciB0aGUNCj4+ ICAgICAgIGRlY29tcHJlc3Npb24gb3IgdGhlIENPU0UgbWVzc2FnZSBmYWlscyB0byBkZWNvZGUs IG9yIHRoZSBzZXJ2ZXINCj4+ICAgICAgIGZhaWxzIHRvIHJldHJpZXZlIGEgUmVjaXBpZW50IENv bnRleHQgd2l0aCBSZWNpcGllbnQgSUQNCj4+ICAgICAgIGNvcnJlc3BvbmRpbmcgdG8gdGhlICdr aWQnIHBhcmFtZXRlciByZWNlaXZlZCwgdGhlbiB0aGUgc2VydmVyDQo+PiAgICAgICBTSEFMTCBz dG9wIHByb2Nlc3NpbmcgdGhlIHJlcXVlc3QuDQo+Pg0KPj4gICAgICAgKiAgSWYgZWl0aGVyIHRo ZSBkZWNvbXByZXNzaW9uIG9yIHRoZSBDT1NFIG1lc3NhZ2UgZmFpbHMgdG8NCj4+ICAgICAgICAg IGRlY29kZSwgdGhlIHNlcnZlciBNQVkgcmVzcG9uZCB3aXRoIGEgNC4wMiBCYWQgT3B0aW9uIGVy cm9yDQo+Pg0KPj5TZWxhbmRlciwgZXQgYWwuICAgICAgICBFeHBpcmVzIEphbnVhcnkgMjcsIDIw MTkgICAgICAgICAgICAgICBbUGFnZSAzNl0NCj4+DQo+PkludGVybmV0LURyYWZ0ICAgICAgICAg ICAgICAgICAgIE9TQ09SRSAgICAgICAgICAgICAgICAgICAgICAgIEp1bHkgMjAxOA0KPj4NCj4+ ICAgICAgICAgIG1lc3NhZ2UuICBUaGUgc2VydmVyIE1BWSBzZXQgYW4gT3V0ZXIgTWF4LUFnZSBv cHRpb24gd2l0aA0KPj4gICAgICAgICAgdmFsdWUgemVyby4gIFRoZSBkaWFnbm9zdGljIHBheWxv YWQgU0hPVUxEIGNvbnRhaW4gdGhlIHN0cmluZw0KPj4gICAgICAgICAgIkZhaWxlZCB0byBkZWNv ZGUgQ09TRSIuDQo+Pg0KPj4gICAgICAgKiAgSWYgdGhlIHNlcnZlciBmYWlscyB0byByZXRyaWV2 ZSBhIFJlY2lwaWVudCBDb250ZXh0IHdpdGgNCj4+ICAgICAgICAgIFJlY2lwaWVudCBJRCBjb3Jy ZXNwb25kaW5nIHRvIHRoZSAna2lkJyBwYXJhbWV0ZXIgcmVjZWl2ZWQsDQo+PiAgICAgICAgICB0 aGUgc2VydmVyIE1BWSByZXNwb25kIHdpdGggYSA0LjAxIFVuYXV0aG9yaXplZCBlcnJvciBtZXNz YWdlLg0KPj4gICAgICAgICAgVGhlIHNlcnZlciBNQVkgc2V0IGFuIE91dGVyIE1heC1BZ2Ugb3B0 aW9uIHdpdGggdmFsdWUgemVyby4NCj4+ICAgICAgICAgIFRoZSBkaWFnbm9zdGljIHBheWxvYWQg U0hPVUxEIGNvbnRhaW4gdGhlIHN0cmluZyAiU2VjdXJpdHkNCj4+ICAgICAgICAgIGNvbnRleHQg bm90IGZvdW5kIi4NCj4+DQo+PiAgIDMuICBWZXJpZnkgdGhlICdQYXJ0aWFsIElWJyBwYXJhbWV0 ZXIgdXNpbmcgdGhlIFJlcGxheSBXaW5kb3csIGFzDQo+PiAgICAgICBkZXNjcmliZWQgaW4gU2Vj dGlvbiA3LjQuDQo+PjxtZ2x0Pg0KPj5NeSB1bmRlcnN0YW5kaW5nIGlzIHRoYXQgdGhlIFBhcnRp YWwgSVYgdmFsdWUgaGFzIG5vdCBiZWVuIA0KPj5hdXRoZW50aWNhdGVkLiANCj4+VGh1cw0KPj5J IGJlbGlldmUgdGhpcyBzdGVwIG1vc3RseSBjb25zaXN0cyBpbiBkaXNjYXJkaW5nIHBhY2tldHMg d2l0aCBpcnJlbGV2YW50DQo+PlBhcnRpYWwgSVYgdmFsdWVzLiBIZXJlIGlycmVsZXZhbnQgYXJl IGxpbWl0ZWQgdG8gcmVwZWF0ZWQgc2VxdWVuY2UgDQo+Pm51bWJlcnMNCj4+dGhhdCBpcyB0b28g c2F5IGtub3duIHJlcGxheWVkIHBhY2tldHMuIDxtZ2x0Pg0KPg0KPltHUzpdIFRoZSB0ZXJtIOKA nHZlcmlmeeKAnSByZWZlcnMgdG8gdGhlIHRleHQgaW4gDQo+c2VjdGlvbiA3LjQgInZlcmlmeSB0 aGF0IGEgUGFydGlhbCBJViByZWNlaXZlZCBpbiB0aGUgQ09TRSBvYmplY3QgaGFzIG5vdCANCj5i ZWVuIHJlY2VpdmVkIGJlZm9yZS7igJ0gV2UgY2FuIGNvcHkgb3ZlciB0aGF0IHRleHQgdG8gYXZv aWQgDQo+bWlzdW5kZXJzdGFuZGluZzoNCj5PTEQNCj4zLiBWZXJpZnkgdGhlICdQYXJ0aWFsIElW JyBwYXJhbWV0ZXIgdXNpbmcgdGhlIFJlcGxheSBXaW5kb3csIGFzDQo+ZGVzY3JpYmVkIGluIFNl Y3Rpb24gNy40Lg0KPk5FVw0KPjMuICBWZXJpZnkgdGhhdCB0aGUgJ1BhcnRpYWwgSVbigJkgaGFz IG5vdCBiZWVuIHJlY2VpdmVkIGJlZm9yZSB1c2luZyB0aGUgDQo+UmVwbGF5IFdpbmRvdywgYXMg ZGVzY3JpYmVkIGluIFNlY3Rpb24gNy40Lg0KPg0KPg0KPj4NCj4+ICAgNC4gIENvbXBvc2UgdGhl IEFkZGl0aW9uYWwgQXV0aGVudGljYXRlZCBEYXRhLCBhcyBkZXNjcmliZWQgaW4NCj4+ICAgICAg IFNlY3Rpb24gNS40Lg0KPj4NCj4+ICAgNS4gIENvbXB1dGUgdGhlIEFFQUQgbm9uY2UgZnJvbSB0 aGUgUmVjaXBpZW50IElELCBDb21tb24gSVYsIGFuZCB0aGUNCj4+ICAgICAgICdQYXJ0aWFsIElW JyBwYXJhbWV0ZXIsIHJlY2VpdmVkIGluIHRoZSBDT1NFIE9iamVjdC4NCj4+DQo+PiAgIDYuICBE ZWNyeXB0IHRoZSBDT1NFIG9iamVjdCB1c2luZyB0aGUgUmVjaXBpZW50IEtleSwgYXMgcGVyIFtS RkM4MTUyXQ0KPj4gICAgICAgU2VjdGlvbiA1LjMuICAoVGhlIGRlY3J5cHQgb3BlcmF0aW9uIGlu Y2x1ZGVzIHRoZSB2ZXJpZmljYXRpb24gb2YNCj4+ICAgICAgIHRoZSBpbnRlZ3JpdHkuKQ0KPj4N Cj4+ICAgICAgICogIElmIGRlY3J5cHRpb24gZmFpbHMsIHRoZSBzZXJ2ZXIgTVVTVCBzdG9wIHBy b2Nlc3NpbmcgdGhlDQo+PiAgICAgICAgICByZXF1ZXN0IGFuZCBNQVkgcmVzcG9uZCB3aXRoIGEg NC4wMCBCYWQgUmVxdWVzdCBlcnJvciBtZXNzYWdlLg0KPj4gICAgICAgICAgVGhlIHNlcnZlciBN QVkgc2V0IGFuIE91dGVyIE1heC1BZ2Ugb3B0aW9uIHdpdGggdmFsdWUgemVyby4NCj4+ICAgICAg ICAgIFRoZSBkaWFnbm9zdGljIHBheWxvYWQgTUFZIGNvbnRhaW4gdGhlICJEZWNyeXB0aW9uIGZh aWxlZCINCj4+ICAgICAgICAgIHN0cmluZy4NCj4+DQo+PiAgICAgICAqICBJZiBkZWNyeXB0aW9u IHN1Y2NlZWRzLCB1cGRhdGUgdGhlIFJlcGxheSBXaW5kb3csIGFzIGRlc2NyaWJlZA0KPj4gICAg ICAgICAgaW4gU2VjdGlvbiA3Lg0KPj4NCj4+ICAgNy4gIEFkZCBkZWNyeXB0ZWQgQ29kZSwgb3B0 aW9ucywgYW5kIHBheWxvYWQgdG8gdGhlIGRlY3J5cHRlZA0KPj4gICAgICAgcmVxdWVzdC4gIFRo ZSBPU0NPUkUgb3B0aW9uIGlzIHJlbW92ZWQuDQo+Pg0KPj4gICA4LiAgVGhlIGRlY3J5cHRlZCBD b0FQIHJlcXVlc3QgaXMgcHJvY2Vzc2VkIGFjY29yZGluZyB0byBbUkZDNzI1Ml0uDQo+Pg0KPj44 LjIuMS4gIFN1cHBvcnRpbmcgQmxvY2std2lzZQ0KPj44LjMuICBQcm90ZWN0aW5nIHRoZSBSZXNw b25zZQ0KPj4NCj4+ICAgSWYgYSBDb0FQIHJlc3BvbnNlIGlzIGdlbmVyYXRlZCBpbiByZXNwb25z ZSB0byBhbiBPU0NPUkUgcmVxdWVzdCwgdGhlDQo+PiAgIHNlcnZlciBTSEFMTCBwZXJmb3JtIHRo ZSBmb2xsb3dpbmcgc3RlcHMgdG8gY3JlYXRlIGFuIE9TQ09SRQ0KPj4gICByZXNwb25zZS4gIE5v dGUgdGhhdCBDb0FQIGVycm9yIHJlc3BvbnNlcyBkZXJpdmVkIGZyb20gQ29BUA0KPj4gICBwcm9j ZXNzaW5nIChzdGVwIDggaW4gU2VjdGlvbiA4LjIpIGFyZSBwcm90ZWN0ZWQsIGFzIHdlbGwgYXMN Cj4+ICAgc3VjY2Vzc2Z1bCBDb0FQIHJlc3BvbnNlcywgd2hpbGUgdGhlIE9TQ09SRSBlcnJvcnMg KHN0ZXBzIDIsIDMsIGFuZCA2DQo+PiAgIGluIFNlY3Rpb24gOC4yKSBkbyBub3QgZm9sbG93IHRo ZSBwcm9jZXNzaW5nIGJlbG93LCBidXQgYXJlIHNlbnQgYXMNCj4+ICAgc2ltcGxlIENvQVAgcmVz cG9uc2VzLCB3aXRob3V0IE9TQ09SRSBwcm9jZXNzaW5nLg0KPj4NCj4+ICAgMS4gIFJldHJpZXZl IHRoZSBTZW5kZXIgQ29udGV4dCBpbiB0aGUgU2VjdXJpdHkgQ29udGV4dCBhc3NvY2lhdGVkDQo+ PiAgICAgICB3aXRoIHRoZSBUb2tlbi4NCj4+DQo+PiAgIDIuICBDb21wb3NlIHRoZSBBZGRpdGlv bmFsIEF1dGhlbnRpY2F0ZWQgRGF0YSBhbmQgdGhlIHBsYWludGV4dCwgYXMNCj4+ICAgICAgIGRl c2NyaWJlZCBpbiBTZWN0aW9ucyA1LjMgYW5kIDUuNC4NCj4+DQo+PiAgIDMuICBDb21wdXRlIHRo ZSBBRUFEIG5vbmNlIGFzIGRlc2NyaWJlZCBpbiBTZWN0aW9uIDUuMjoNCj4+DQo+PiAgICAgICAq ICBFaXRoZXIgdXNlIHRoZSBub25jZSBmcm9tIHRoZSByZXF1ZXN0LCBvcg0KPj4NCj4+ICAgICAg ICogIEVuY29kZSB0aGUgUGFydGlhbCBJViAoU2VuZGVyIFNlcXVlbmNlIE51bWJlciBpbiBuZXR3 b3JrIGJ5dGUNCj4+ICAgICAgICAgIG9yZGVyKSBhbmQgaW5jcmVtZW50IHRoZSBTZW5kZXIgU2Vx dWVuY2UgTnVtYmVyIGJ5IG9uZS4NCj4+PG1nbHQ+DQo+PkFnYWluIHRoaXMgaXMgdmVyeSBzcGVj aWZpYy4NCj4+DQo+PkkgYW0gcmVhZGluZyB0aGF0IFNTTiBpcyBpbmNyZW1lbnRlZCBhZnRlciB0 aGUgUGFydGlhbCBJViBpcyBnZW5lcmF0ZWQuIA0KPj5JdA0KPj5zZWVtcyB0byBtZSB0aGF0IHRo ZSBQYXJ0aWFsIElWIHNob3VsZCByZWZsZWN0IHRoZSBTU04sIGFuZCBhcyBzdWNoIGJlaW5nDQo+ PmVuY29kZWQgYWZ0ZXIgdGhlIGluY3JlbWVudGF0aW9uIG9mIHRoZSBTU04uIDwvbWdsdD4NCj4N Cj5bR1M6XSBUaGUgUGFydGlhbCBJViBkb2VzIHJlZmxlY3QgdGhlIFNTTi4gQXMgdGhlIHByb2Nl ZHVyZSBpcyBjdXJyZW50bHkgDQo+ZGVzY3JpYmVkIChpbml0aWFsaXNlZCB0byB6ZXJvIGV0Yy4p IHRoZSBTU04gbmVlZHMgdG8gYmUgaW5jcmVtZW50ZWQgDQo+YWZ0ZXIgDQo+dXNlLCBub3QgYmVm b3JlLiBQbGVhc2Ugc2hvdyBieSBleGFtcGxlIHdoZXJlIHlvdSB0aGluayB0aGlzIGdvZXMgd3Jv bmcuDQo+DQo+DQo+DQo+PiAgICAgICAgICBDb21wdXRlIHRoZSBBRUFEIG5vbmNlIGZyb20gdGhl IFNlbmRlciBJRCwgQ29tbW9uIElWLCBhbmQNCj4+ICAgICAgICAgIFBhcnRpYWwgSVYuDQo+Pg0K Pj4gICA0LiAgRW5jcnlwdCB0aGUgQ09TRSBvYmplY3QgdXNpbmcgdGhlIFNlbmRlciBLZXkuIENv bXByZXNzIHRoZSBDT1NFDQo+PiAgICAgICBPYmplY3QgYXMgc3BlY2lmaWVkIGluIFNlY3Rpb24g Ni4gIElmIHRoZSBBRUFEIG5vbmNlIHdhcw0KPj4gICAgICAgY29uc3RydWN0ZWQgZnJvbSBhIG5l dyBQYXJ0aWFsIElWLCB0aGlzIFBhcnRpYWwgSVYgTVVTVCBiZQ0KPj4gICAgICAgaW5jbHVkZWQg aW4gdGhlIG1lc3NhZ2UuICBJZiB0aGUgQUVBRCBub25jZSBmcm9tIHRoZSByZXF1ZXN0IHdhcw0K Pj4gICAgICAgdXNlZCwgdGhlIFBhcnRpYWwgSVYgTVVTVCBOT1QgYmUgaW5jbHVkZWQgaW4gdGhl IG1lc3NhZ2UuDQo+Pg0KPj4gICA1LiAgRm9ybWF0IHRoZSBPU0NPUkUgbWVzc2FnZSBhY2NvcmRp bmcgdG8gU2VjdGlvbiA0LiAgVGhlIE9TQ09SRQ0KPj4gICAgICAgb3B0aW9uIGlzIGFkZGVkIChz ZWUgU2VjdGlvbiA0LjEuMikuDQo+Pg0KPj44LjMuMS4gIFN1cHBvcnRpbmcgT2JzZXJ2ZQ0KPj44 LjQuICBWZXJpZnlpbmcgdGhlIFJlc3BvbnNlDQo+PjkuICBXZWIgTGlua2luZw0KPj4xMC4gIENv QVAtdG8tQ29BUCBGb3J3YXJkaW5nIFByb3h5DQo+PjExLiAgSFRUUCBPcGVyYXRpb25zDQo+PjEx LjIuICBDb0FQLXRvLUhUVFAgTWFwcGluZw0KPj4xMS4zLiAgSFRUUC10by1Db0FQIE1hcHBpbmcN Cj4+MTEuNC4gIEhUVFAgRW5kcG9pbnRzDQo+PjExLjUuICBFeGFtcGxlOiBIVFRQIENsaWVudCBh bmQgQ29BUCBTZXJ2ZXINCj4+MTEuNi4gIEV4YW1wbGU6IENvQVAgQ2xpZW50IGFuZCBIVFRQIFNl cnZlcg0KPj4xMi4gIFNlY3VyaXR5IENvbnNpZGVyYXRpb25zDQo+Pg0KPj4gICBBbiBvdmVydmll dyBvZiB0aGUgc2VjdXJpdHkgcHJvcGVydGllcyBpcyBnaXZlbiBpbiBBcHBlbmRpeCBELg0KPj4N Cj4+MTIuMS4gIEVuZC10by1lbmQgUHJvdGVjdGlvbg0KPj4NCj4+ICAgSW4gc2NlbmFyaW9zIHdp dGggaW50ZXJtZWRpYXJ5IG5vZGVzIHN1Y2ggYXMgcHJveGllcyBvciBnYXRld2F5cywNCj4+ICAg dHJhbnNwb3J0IGxheWVyIHNlY3VyaXR5IHN1Y2ggYXMgKEQpVExTIG9ubHkgcHJvdGVjdHMgZGF0 YSBob3AtYnktDQo+PiAgIGhvcC4gIEFzIGEgY29uc2VxdWVuY2UsIHRoZSBpbnRlcm1lZGlhcnkg bm9kZXMgY2FuIHJlYWQgYW5kIG1vZGlmeQ0KPj4gICBhbnkgaW5mb3JtYXRpb24uICBUaGUgdHJ1 c3QgbW9kZWwgd2hlcmUgYWxsIGludGVybWVkaWFyeSBub2RlcyBhcmUNCj4+ICAgY29uc2lkZXJl ZCB0cnVzdHdvcnRoeSBpcyBwcm9ibGVtYXRpYywgbm90IG9ubHkgZnJvbSBhIHByaXZhY3kNCj4+ ICAgcGVyc3BlY3RpdmUsIGJ1dCBhbHNvIGZyb20gYSBzZWN1cml0eSBwZXJzcGVjdGl2ZSwgYXMg dGhlDQo+PiAgIGludGVybWVkaWFyaWVzIGFyZSBmcmVlIHRvIGRlbGV0ZSByZXNvdXJjZXMgb24g c2Vuc29ycyBhbmQgZmFsc2lmeQ0KPj4gICBjb21tYW5kcyB0byBhY3R1YXRvcnMgKHN1Y2ggYXMg InVubG9jayBkb29yIiwgInN0YXJ0IGZpcmUgYWxhcm0iLA0KPj4gICAicmFpc2UgYnJpZGdlIiku ICBFdmVuIGluIHRoZSByYXJlIGNhc2VzIHdoZXJlIGFsbCB0aGUgb3duZXJzIG9mIHRoZQ0KPj4g ICBpbnRlcm1lZGlhcnkgbm9kZXMgYXJlIGZ1bGx5IHRydXN0ZWQsIGF0dGFja3MgYW5kIGRhdGEg YnJlYWNoZXMgbWFrZQ0KPj4gICBzdWNoIGFuIGFyY2hpdGVjdHVyZSBicml0dGxlLg0KPj4NCj4+ ICAgKEQpVExTIHByb3RlY3RzIGhvcC1ieS1ob3AgdGhlIGVudGlyZSBtZXNzYWdlLiAgT1NDT1JF IHByb3RlY3RzIGVuZC0NCj4+ICAgdG8tZW5kIGFsbCBpbmZvcm1hdGlvbiB0aGF0IGlzIG5vdCBy ZXF1aXJlZCBmb3IgcHJveHkgb3BlcmF0aW9ucyAoc2VlDQo+PiAgIFNlY3Rpb24gNCkuICAoRClU TFMgYW5kIE9TQ09SRSBjYW4gYmUgY29tYmluZWQsIHRoZXJlYnkgZW5hYmxpbmcgZW5kLQ0KPj4g ICB0by1lbmQgc2VjdXJpdHkgb2YgdGhlIG1lc3NhZ2UgcGF5bG9hZCwgaW4gY29tYmluYXRpb24g d2l0aCBob3AtYnktDQo+PiAgIGhvcCBwcm90ZWN0aW9uIG9mIHRoZSBlbnRpcmUgbWVzc2FnZSwg ZHVyaW5nIHRyYW5zcG9ydCBiZXR3ZWVuIGVuZC0NCj4+ICAgcG9pbnQgYW5kIGludGVybWVkaWFy eSBub2RlLiAgSW4gcGFydGljdWxhciB3aGVuIE9TQ09SRSBpcyB1c2VkIHdpdGgNCj4+DQo+PlNl bGFuZGVyLCBldCBhbC4gICAgICAgIEV4cGlyZXMgSmFudWFyeSAyNywgMjAxOSAgICAgICAgICAg ICAgIFtQYWdlIDQ3XQ0KPj4NCj4+SW50ZXJuZXQtRHJhZnQgICAgICAgICAgICAgICAgICAgT1ND T1JFICAgICAgICAgICAgICAgICAgICAgICAgSnVseSAyMDE4DQo+Pg0KPj4gICBIVFRQLCB0aGUg YWRkaXRpb25hbCBUTFMgcHJvdGVjdGlvbiBvZiBIVFRQIGhvcHMgaXMgcmVjb21tZW5kZWQsIGUu Zy4NCj4+ICAgYmV0d2VlbiBhbiBIVFRQIGVuZHBvaW50IGFuZCBhIHByb3h5IHRyYW5zbGF0aW5n IGJldHdlZW4gSFRUUCBhbmQNCj4+ICAgQ29BUC4NCj4+DQo+PjxtZ2x0Pg0KPj5JIHNlZSB0aGF0 IChEKVRMUyBwcm92aWRlcyBwcml2YWN5IHRvIE9TQ09SRSBjb21tdW5pY2F0aW9uLCB3aGlsZSBP U0NPUkUNCj4+cHJvdGVjdHMgdGhlIGRhdGEuIDwvbWdsdD4NCj4NCj4NCj5bR1M6XSBJIGRpZG7i gJl0IHVuZGVyc3RhbmQgdGhpcyBjb21tZW50LiBUaGUgZGlmZmVyZW5jZSBpbiBwcm90ZWN0aW9u IA0KPmJldHdlZW4gKEQpVExTIGFuZCBPU0NPUkUgaXMgY2VydGFpbiBDb0FQIGhlYWRlciBmaWVs ZHMuIFRoaXMgaGFzIA0KPmltcGxpY2F0aW9ucyBib3RoIG9uIHByaXZhY3kgYW5kICJwcm90ZWN0 aW9uIG9mIGRhdGEiIGFzIGlzIGRlc2NyaWJlZCBpbiANCj5TZWN0aW9ucyAxMi44IGFuZCBBcHBl bmRpeCBELjIuIFNpbWlsYXJseSwgaWYgcHJveHkgZnVuY3Rpb25hbGl0eSANCj5yZXF1aXJlcyAN Cj5EVExTIHRvIGJlIHRlcm1pbmF0ZWQgaW4gYSBtaWRkbGVib3ggaXQgbmVpdGhlciBwcm92aWRl cyBwcml2YWN5IG5vciBkYXRhIA0KPnByb3RlY3Rpb24gaW4gdGhhdCBub2RlLg0KPg0KPg0KPj4N Cj4+ICAgQXBwbGljYXRpb25zIG5lZWQgdG8gY29uc2lkZXIgdGhhdCBjZXJ0YWluIG1lc3NhZ2Ug ZmllbGRzIGFuZA0KPj4gICBtZXNzYWdlcyB0eXBlcyBhcmUgbm90IHByb3RlY3RlZCBlbmQtdG8t ZW5kIGFuZCBtYXkgYmUgc3Bvb2ZlZCBvcg0KPj4gICBtYW5pcHVsYXRlZC4gIFRoZSBjb25zZXF1 ZW5jZXMgb2YgdW5wcm90ZWN0ZWQgbWVzc2FnZSBmaWVsZHMgYXJlDQo+PiAgIGFuYWx5emVkIGlu IEFwcGVuZGl4IEQuNC4NCj4+DQo+PjEyLjIuICBTZWN1cml0eSBDb250ZXh0IEVzdGFibGlzaG1l bnQNCj4+DQo+PjxtZ2x0Pg0KPj5Xb3VsZG4ndCBhZ3JlZW1lbnQgcHJlZmVycmVkIHRvIGVzdGFi bGlzaGVkID8NCj4+PC9tZ2x0Pg0KPg0KPltHUzpdIEkgZG9u4oCZdCBrbm93IGlmIHRoZXJlIGlz IGEgcmlnaHQgd29yZCBoZXJlLiBJTUhPIOKAnGFncmVlbWVudCIgc2VlbXMgDQo+dG8gaW5kaWNh dGUgc29tZSBzb3J0IG9mIG5lZ290aWF0aW9uLCBidXQgaW4gcHJhY3RpY2UgdGhpcyBjb3VsZCBq dXN0IGJlIA0KPmEgDQo+cHJvdmlzaW9uaW5nIHN0ZXAgd2hpY2ggbWFrZXMgdGhhdCB0ZXJtIGxl c3MgYXBwcm9wcmlhdGUuDQo+DQo+DQo+ICAgVGhlIHVzZSBvZiBDT1NFX0VuY3J5cHQwIGFuZCBB RUFEIHRvIHByb3RlY3QgbWVzc2FnZXMgYXMgc3BlY2lmaWVkIGluDQo+ICAgdGhpcyBkb2N1bWVu dCByZXF1aXJlcyBhbiBlc3RhYmxpc2hlZCBzZWN1cml0eSBjb250ZXh0LiAgVGhlIG1ldGhvZA0K PiAgIHRvIGVzdGFibGlzaCB0aGUgc2VjdXJpdHkgY29udGV4dCBkZXNjcmliZWQgaW4gU2VjdGlv biAzLjIgaXMgYmFzZWQNCj4gICBvbiBhIGNvbW1vbiBNYXN0ZXIgU2VjcmV0IGFuZCB1bmlxdWUg U2VuZGVyIElEcy4gIFRoZSBuZWNlc3NhcnkgaW5wdXQNCj4gICBwYXJhbWV0ZXJzIG1heSBiZSBw cmUtZXN0YWJsaXNoZWQgb3Igb2J0YWluZWQgdXNpbmcgYSBrZXkNCj4gICBlc3RhYmxpc2htZW50 IHByb3RvY29sIGF1Z21lbnRlZCB3aXRoIGVzdGFibGlzaG1lbnQgb2YgU2VuZGVyLw0KPiAgIFJl Y2lwaWVudCBJRCBzdWNoIGFzIHRoZSBPU0NPUkUgcHJvZmlsZSBvZiB0aGUgQUNFIGZyYW1ld29y aw0KPiAgIFtJLUQuaWV0Zi1hY2Utb3Njb3JlLXByb2ZpbGVdLiAgU3VjaCBhIHByb2NlZHVyZSBt dXN0IGVuc3VyZSB0aGF0IHRoZQ0KPiAgIHJlcXVpcmVtZW50cyBvZiB0aGUgc2VjdXJpdHkgY29u dGV4dCBwYXJhbWV0ZXJzIGZvciB0aGUgaW50ZW5kZWQgdXNlDQo+ICAgYXJlIGNvbXBsaWVkIHdp dGggKHNlZSBTZWN0aW9uIDMuMykgYW5kIGFsc28gaW4gZXJyb3Igc2l0dWF0aW9ucy4gIEl0DQo+ ICAgaXMgcmVjb21tZW5kZWQgdG8gdXNlIGEga2V5IGVzdGFibGlzaG1lbnQgcHJvdG9jb2wgd2hp Y2ggcHJvdmlkZXMNCj4gICBmb3J3YXJkIHNlY3JlY3kgd2hlbmV2ZXIgcG9zc2libGUuICBDb25z aWRlcmF0aW9ucyBmb3IgZGVwbG95aW5nDQo+ICAgT1NDT1JFIHdpdGggYSBmaXhlZCBNYXN0ZXIg U2VjcmV0IGFyZSBnaXZlbiBpbiBBcHBlbmRpeCBCLg0KPg0KPjEyLjMuICBNYXN0ZXIgU2VjcmV0 DQo+DQo+ICAgT1NDT1JFIHVzZXMgSEtERiBbUkZDNTg2OV0gYW5kIHRoZSBlc3RhYmxpc2hlZCBp bnB1dCBwYXJhbWV0ZXJzIHRvDQo+ICAgZGVyaXZlIHRoZSBzZWN1cml0eSBjb250ZXh0LiAgVGhl IHJlcXVpcmVkIHByb3BlcnRpZXMgb2YgdGhlIHNlY3VyaXR5DQo+ICAgY29udGV4dCBwYXJhbWV0 ZXJzIGFyZSBkaXNjdXNzZWQgaW4gU2VjdGlvbiAzLjMsIGluIHRoaXMgc2VjdGlvbiB3ZQ0KPiAg IGZvY3VzIG9uIHRoZSBNYXN0ZXIgU2VjcmV0LiAgSEtERiBkZW5vdGVzIGluIHRoaXMgc3BlY2lm aWNhdGlvbiB0aGUNCj4gICBjb21wb3NpdGlvbiBvZiB0aGUgZXhwYW5kIGFuZCBleHRyYWN0IGZ1 bmN0aW9ucyBhcyBkZWZpbmVkIGluDQo+ICAgW1JGQzU4NjldIGFuZCB0aGUgTWFzdGVyIFNlY3Jl dCBpcyB1c2VkIGFzIElucHV0IEtleSBNYXRlcmlhbCAoSUtNKS4NCj4NCj4gICBJbmZvcm1hbGx5 LCBIS0RGIHRha2VzIGFzIHNvdXJjZSBhbiBJS00gY29udGFpbmluZyBzb21lIGdvb2QgYW1vdW50 DQo+ICAgb2YgcmFuZG9tbmVzcyBidXQgbm90IG5lY2Vzc2FyaWx5IGRpc3RyaWJ1dGVkIHVuaWZv cm1seSAob3IgZm9yIHdoaWNoDQo+ICAgYW4gYXR0YWNrZXIgaGFzIHNvbWUgcGFydGlhbCBrbm93 bGVkZ2UpIGFuZCBkZXJpdmUgZnJvbSBpdCBvbmUgb3INCj4gICBtb3JlIGNyeXB0b2dyYXBoaWNh bGx5IHN0cm9uZyBzZWNyZXQga2V5cyBbUkZDNTg2OV0uDQo+PG1nbHQ+DQo+cmZjNDA4NiBtYXkg YmUgYSB1c2VmdWxsIHJlZmVyZW5jZS4NCj48L21nbHQ+DQo+DQo+W0dTOl0gU3VyZSwgSSBhZGQg dGhhdCByZWZlcmVuY2UgdG8gdGhlIGVuZCBvZiB0aGUgc2VjdGlvbi4NCj4NCj4NCj4gICBUaGVy ZWZvcmUsIHRoZSBtYWluIHJlcXVpcmVtZW50IGZvciB0aGUgT1NDT1JFIE1hc3RlciBTZWNyZXQs IGluDQo+ICAgYWRkaXRpb24gdG8gYmVpbmcgc2VjcmV0LCBpcyB0aGF0IGl0IGlzIGhhcyBhIGdv b2QgYW1vdW50IG9mDQo+ICAgcmFuZG9tbmVzcy4gIFRoZSBzZWxlY3RlZCBrZXkgZXN0YWJsaXNo bWVudCBzY2hlbWVzIG11c3QgZW5zdXJlIHRoYXQNCj4gICB0aGUgbmVjZXNzYXJ5IHByb3BlcnRp ZXMgZm9yIHRoZSBNYXN0ZXIgU2VjcmV0IGFyZSBmdWxmaWxsZWQuICBGb3INCj4gICBwcmUtc2hh cmVkIGtleSBkZXBsb3ltZW50cyBhbmQga2V5IHRyYW5zcG9ydCBzb2x1dGlvbnMgc3VjaCBhcw0K PiAgIFtJLUQuaWV0Zi1hY2Utb3Njb3JlLXByb2ZpbGVdLCB0aGUgTWFzdGVyIFNlY3JldCBjYW4g YmUgZ2VuZXJhdGVkDQo+ICAgb2ZmbGluZSB1c2luZyBhIGdvb2QgcmFuZG9tIG51bWJlciBnZW5l cmF0b3IuDQo+DQo+U2VsYW5kZXIsIGV0IGFsLiAgICAgICAgRXhwaXJlcyBKYW51YXJ5IDI3LCAy MDE5ICAgICAgICAgICAgICAgW1BhZ2UgNDhdDQo+DQo+SW50ZXJuZXQtRHJhZnQgICAgICAgICAg ICAgICAgICAgT1NDT1JFICAgICAgICAgICAgICAgICAgICAgICAgSnVseSAyMDE4DQo+DQo+MTIu NC4gIFJlcGxheSBQcm90ZWN0aW9uDQo+DQo+ICAgUmVwbGF5IGF0dGFja3MgbmVlZCB0byBiZSBj b25zaWRlcmVkIGluIGRpZmZlcmVudCBwYXJ0cyBvZiB0aGUNCj4gICBpbXBsZW1lbnRhdGlvbi4g IE1vc3QgQUVBRCBhbGdvcml0aG1zIHJlcXVpcmUgYSB1bmlxdWUgbm9uY2UgZm9yIGVhY2gNCj4g ICBtZXNzYWdlLCBmb3Igd2hpY2ggdGhlIHNlbmRlciBzZXF1ZW5jZSBudW1iZXJzIGluIHRoZSBD T1NFIG1lc3NhZ2UNCj4gICBmaWVsZCAnUGFydGlhbCBJVicgaXMgdXNlZC4gIElmIHRoZSByZWNp cGllbnQgYWNjZXB0cyBhbnkgc2VxdWVuY2UNCj4gICBudW1iZXIgbGFyZ2VyIHRoYW4gdGhlIG9u ZSBwcmV2aW91c2x5IHJlY2VpdmVkLCB0aGVuIHRoZSBwcm9ibGVtIG9mDQo+ICAgc2VxdWVuY2Ug bnVtYmVyIHN5bmNocm9uaXphdGlvbiBpcyBhdm9pZGVkLg0KPjxtZ2x0Pg0KPkRvIHdlIGhhdmUg Y2FzZXMgd2hlcmUgdGhlIFBhcnRpYWwgSVYgcmVwcmVzZW50cyB0aGUgTFNCIG9mIHRoZSBTU04g PyBJZiANCj50aGF0IA0KPmlzIHRoZSBjYXNlLCBpZiBtb3JlIHRoZW4gbGVuKFBhcnRpYWwgSVYp IHBhY2tldCBoYXZlIGJlZW4gZHJvcHBlZC4gVGhlIA0KPnR3bw0KPnBlZXJzIG1heSBoYXZlIGhh cmQgdGltZSB0byByZXN5bmNocm9uaXplIHRoZWlyIFNTTi4gVGhpcyBtYXkgaGFwcGVuIGluIGEN Cj5jb21tdW5pY2F0aW9uIHdpdGggYSBsb3Qgb2Ygbm90aWZpY2F0aW9ucy4gSW4gYSBxdWVyeS1y ZXNwb25zZSBwYXJhZGlnbSwgDQo+dGhlDQo+c2VuZGVyIG1heSBoYXZlIHNvbWUgaGludHMgd2hl biB0aGUgcGFja2V0IGhhcyBiZWVuIHJlY2VpZXZlZCBvciBub3QuIA0KPjwvbWdsdD4NCj4NCj4N Cj5bR1M6XSAgSSBkaWRu4oCZdCByZWFsbHkgdW5kZXJzdGFuZCB0aGUgaXNzdWUuIFNlY3Rpb24g NSBzdGF0ZXMgdGhhdCB0aGUgDQo+cGFydGlhbCBJViAiaXMgc2V0IHRvIA0KPnRoZSBTZW5kZXIg U2VxdWVuY2UgTnVtYmVyLiBBbGwgbGVhZGluZyBieXRlcyBvZiB2YWx1ZSB6ZXJvDQo+U0hBTEwg YmUgcmVtb3ZlZCB3aGVuIGVuY29kaW5nIHRoZSBQYXJ0aWFsIElWLCBleGNlcHQgaW4gdGhlIGNh c2Ugb2YgDQo+UGFydGlhbCBJViBvZiB2YWx1ZSAwIHdoaWNoIGlzIGVuY29kZWQgdG8gdGhlIGJ5 dGUgc3RyaW5nIDB4MDAu4oCdDQo+U28gdGhlIG9ubHkgdGhpbmcgdHJ1bmNhdGVkIGlzIHBvdGVu dGlhbGx5IHRoZSBsZWFkaW5nIHplcm9zLCBidXQgbm90IGluIA0KPmFsbCBjYXNlcy4gRG9lcyB0 aGF0IGFuc3dlciB0aGUgcXVlc3Rpb24/IElzIHRoZSBpc3N1ZSBzdGlsbCByZWxldmFudD8NCj4N Cj4NCj4NCj4NCj5XaXRoIHJlbGlhYmxlIHRyYW5zcG9ydCwNCj4gICBpdCBtYXkgYmUgZGVmaW5l ZCB0aGF0IG9ubHkgbWVzc2FnZXMgd2l0aCBzZXF1ZW5jZSBudW1iZXIgd2hpY2ggYXJlDQo+ICAg ZXF1YWwgdG8gcHJldmlvdXMgc2VxdWVuY2UgbnVtYmVyICsgMSBhcmUgYWNjZXB0ZWQuICBBbiBh ZHZlcnNhcnkgbWF5DQo+ICAgdHJ5IHRvIGluZHVjZSBhIGRldmljZSByZWJvb3QgZm9yIHRoZSBw dXJwb3NlIG9mIHJlcGxheWluZyBhIG1lc3NhZ2UNCj4gICAoc2VlIFNlY3Rpb24gNy41KS4NCj4N Cj4gICBOb3RlIHRoYXQgc2hhcmluZyBhIHNlY3VyaXR5IGNvbnRleHQgYmV0d2VlbiBzZXJ2ZXJz IG1heSBvcGVuIHVwIGZvcg0KPiAgIHJlcGxheSBhdHRhY2tzLCBmb3IgZXhhbXBsZSBpZiB0aGUg cmVwbGF5IHdpbmRvd3MgYXJlIG5vdA0KPiAgIHN5bmNocm9uaXplZC4NCj4NCj4xMi41LiAgQ2xp ZW50IEFsaXZlbmVzcw0KPg0KPiAgIEEgdmVyaWZpZWQgT1NDT1JFIHJlcXVlc3QgZW5hYmxlcyB0 aGUgc2VydmVyIHRvIHZlcmlmeSB0aGUgaWRlbnRpdHkNCj4gICBvZiB0aGUgZW50aXR5IHdobyBn ZW5lcmF0ZWQgdGhlIG1lc3NhZ2UuICBIb3dldmVyLCBpdCBkb2VzIG5vdCB2ZXJpZnkNCj4gICB0 aGF0IHRoZSBjbGllbnQgaXMgY3VycmVudGx5IGludm9sdmVkIGluIHRoZSBjb21tdW5pY2F0aW9u LCBzaW5jZSB0aGUNCj4gICBtZXNzYWdlIG1heSBiZSBhIGRlbGF5ZWQgZGVsaXZlcnkgb2YgYSBw cmV2aW91c2x5IGdlbmVyYXRlZCByZXF1ZXN0DQo+ICAgd2hpY2ggbm93IHJlYWNoZXMgdGhlIHNl cnZlci4gIFRvIHZlcmlmeSB0aGUgYWxpdmVuZXNzIG9mIHRoZSBjbGllbnQNCj4gICB0aGUgc2Vy dmVyIG1heSB1c2UgdGhlIEVjaG8gb3B0aW9uIGluIHRoZSByZXNwb25zZSB0byBhIHJlcXVlc3Qg ZnJvbQ0KPiAgIHRoZSBjbGllbnQgKHNlZSBbSS1ELmlldGYtY29yZS1lY2hvLXJlcXVlc3QtdGFn XSkuDQo+DQo+MTIuNi4gIENyeXB0b2dyYXBoaWMgQ29uc2lkZXJhdGlvbnMNCj4NCj4gICBUaGUg bWF4aW11bSBzZW5kZXIgc2VxdWVuY2UgbnVtYmVyIGlzIGRlcGVuZGVudCBvbiB0aGUgQUVBRA0K PiAgIGFsZ29yaXRobS4gIFRoZSBtYXhpbXVtIHNlbmRlciBzZXF1ZW5jZSBudW1iZXIgaXMgMl40 MCAtIDEsIG9yIGFueQ0KPiAgIGFsZ29yaXRobSBzcGVjaWZpYyBsb3dlciBsaW1pdCwgYWZ0ZXIg d2hpY2ggYSBuZXcgc2VjdXJpdHkgY29udGV4dA0KPiAgIG11c3QgYmUgZ2VuZXJhdGVkLiAgVGhl IG1lY2hhbmlzbSB0byBidWlsZCB0aGUgbm9uY2UgKFNlY3Rpb24gNS4yKQ0KPiAgIGFzc3VtZXMg dGhhdCB0aGUgbm9uY2UgaXMgYXQgbGVhc3QgNTYgYml0cywgYW5kIHRoZSBQYXJ0aWFsIElWIGlz IGF0DQo+ICAgbW9zdCA0MCBiaXRzLiAgVGhlIG1hbmRhdG9yeS10by1pbXBsZW1lbnQgQUVBRCBh bGdvcml0aG0gQUVTLUNDTS0NCj4gICAxNi02NC0xMjggaXMgc2VsZWN0ZWQgZm9yIGNvbXBhdGli aWxpdHkgd2l0aCBDQ00qLg0KPg0KPiAgIEluIG9yZGVyIHRvIHByZXZlbnQgY3J5cHRhbmFseXNp cyB3aGVuIHRoZSBzYW1lIHBsYWludGV4dCBpcw0KPiAgIHJlcGVhdGVkbHkgZW5jcnlwdGVkIGJ5 IG1hbnkgZGlmZmVyZW50IHVzZXJzIHdpdGggZGlzdGluY3Qga2V5cywgdGhlDQo+ICAgbm9uY2Ug aXMgZm9ybWVkIGJ5IG1peGluZyB0aGUgc2VxdWVuY2UgbnVtYmVyIHdpdGggYSBzZWNyZXQgcGVy LQ0KPiAgIGNvbnRleHQgaW5pdGlhbGl6YXRpb24gdmVjdG9yIChDb21tb24gSVYpIGRlcml2ZWQg YWxvbmcgd2l0aCB0aGUga2V5cw0KPiAgIChzZWUgU2VjdGlvbiAzLjEgb2YgW1JGQzgxNTJdKSwg YW5kIGJ5IHVzaW5nIGEgTWFzdGVyIFNhbHQgaW4gdGhlIGtleQ0KPiAgIGRlcml2YXRpb24gKHNl ZSBbTUYwMF0gZm9yIGFuIG92ZXJ2aWV3KS4gIFRoZSBNYXN0ZXIgU2VjcmV0LCBTZW5kZXINCj4g ICBLZXksIFJlY2lwaWVudCBLZXksIGFuZCBDb21tb24gSVYgbXVzdCBiZSBzZWNyZXQsIHRoZSBy ZXN0IG9mIHRoZQ0KPiAgIHBhcmFtZXRlcnMgbWF5IGJlIHB1YmxpYy4gIFRoZSBNYXN0ZXIgU2Vj cmV0IG11c3QgaGF2ZSBhIGdvb2QgYW1vdW50DQo+ICAgb2YgcmFuZG9tbmVzcyAoc2VlIFNlY3Rp b24gMTIuMykuDQo+DQo+U2VsYW5kZXIsIGV0IGFsLiAgICAgICAgRXhwaXJlcyBKYW51YXJ5IDI3 LCAyMDE5ICAgICAgICAgICAgICAgW1BhZ2UgNDldDQo+DQo+SW50ZXJuZXQtRHJhZnQgICAgICAg ICAgICAgICAgICAgT1NDT1JFICAgICAgICAgICAgICAgICAgICAgICAgSnVseSAyMDE4DQo+DQo+ MTIuNy4gIE1lc3NhZ2UgU2VnbWVudGF0aW9uDQo+DQo+ICAgVGhlIElubmVyIEJsb2NrIG9wdGlv bnMgZW5hYmxlIHRoZSBzZW5kZXIgdG8gc3BsaXQgbGFyZ2UgbWVzc2FnZXMNCj4gICBpbnRvIE9T Q09SRS1wcm90ZWN0ZWQgYmxvY2tzIHN1Y2ggdGhhdCB0aGUgcmVjZWl2aW5nIGVuZHBvaW50IGNh bg0KPiAgIHZlcmlmeSBibG9ja3MgYmVmb3JlIGhhdmluZyByZWNlaXZlZCB0aGUgY29tcGxldGUg bWVzc2FnZS4gIFRoZSBPdXRlcg0KPiAgIEJsb2NrIG9wdGlvbnMgYWxsb3cgZm9yIGFyYml0cmFy eSBwcm94eSBmcmFnbWVudGF0aW9uIG9wZXJhdGlvbnMgdGhhdA0KPiAgIGNhbm5vdCBiZSB2ZXJp ZmllZCBieSB0aGUgZW5kcG9pbnRzLCBidXQgY2FuIGJ5IHBvbGljeSBiZSByZXN0cmljdGVkDQo+ ICAgaW4gc2l6ZSBzaW5jZSB0aGUgSW5uZXIgQmxvY2sgb3B0aW9ucyBhbGxvdyBmb3Igc2VjdXJl IGZyYWdtZW50YXRpb24NCj4gICBvZiB2ZXJ5IGxhcmdlIG1lc3NhZ2VzLiAgQSBtYXhpbXVtIG1l c3NhZ2Ugc2l6ZSAoYWJvdmUgd2hpY2ggdGhlDQo+ICAgc2VuZGluZyBlbmRwb2ludCBmcmFnbWVu dHMgdGhlIG1lc3NhZ2UgYW5kIHRoZSByZWNlaXZpbmcgZW5kcG9pbnQNCj4gICBkaXNjYXJkcyB0 aGUgbWVzc2FnZSwgaWYgY29tcGx5aW5nIHRvIHRoZSBwb2xpY3kpIG1heSBiZSBvYnRhaW5lZCBh cw0KPiAgIHBhcnQgb2Ygbm9ybWFsIHJlc291cmNlIGRpc2NvdmVyeS4NCj4NCj4xMi44LiAgUHJp dmFjeSBDb25zaWRlcmF0aW9ucw0KPg0KPiAgIFByaXZhY3kgdGhyZWF0cyBleGVjdXRlZCB0aHJv dWdoIGludGVybWVkaWFyeSBub2RlcyBhcmUgY29uc2lkZXJhYmx5DQo+ICAgcmVkdWNlZCBieSBt ZWFucyBvZiBPU0NPUkUuICBFbmQtdG8tZW5kIGludGVncml0eSBwcm90ZWN0aW9uIGFuZA0KPiAg IGVuY3J5cHRpb24gb2YgdGhlIG1lc3NhZ2UgcGF5bG9hZCBhbmQgYWxsIG9wdGlvbnMgdGhhdCBh cmUgbm90IHVzZWQNCj4gICBmb3IgcHJveHkgb3BlcmF0aW9ucywgcHJvdmlkZSBtaXRpZ2F0aW9u IGFnYWluc3QgYXR0YWNrcyBvbiBzZW5zb3INCj4gICBhbmQgYWN0dWF0b3IgY29tbXVuaWNhdGlv biwgd2hpY2ggbWF5IGhhdmUgYSBkaXJlY3QgaW1wYWN0IG9uIHRoZQ0KPiAgIHBlcnNvbmFsIHNw aGVyZS4NCj4NCj4gICBUaGUgdW5wcm90ZWN0ZWQgb3B0aW9ucyAoRmlndXJlIDUpIG1heSByZXZl YWwgcHJpdmFjeSBzZW5zaXRpdmUNCj4gICBpbmZvcm1hdGlvbiwgc2VlIEFwcGVuZGl4IEQuNC4g IENvQVAgaGVhZGVycyBzZW50IGluIHBsYWludGV4dCBhbGxvdywNCj4gICBmb3IgZXhhbXBsZSwg bWF0Y2hpbmcgb2YgQ09OIGFuZCBBQ0sgKENvQVAgTWVzc2FnZSBJZGVudGlmaWVyKSwNCj4gICBt YXRjaGluZyBvZiByZXF1ZXN0IGFuZCByZXNwb25zZXMgKFRva2VuKSBhbmQgdHJhZmZpYyBhbmFs eXNpcy4NCj4gICBPU0NPUkUgZG9lcyBub3QgcHJvdmlkZSBwcm90ZWN0aW9uIGZvciBIVFRQIGhl YWRlciBmaWVsZHMgd2hpY2ggYXJlDQo+ICAgbm90IGJvdGggQ29BUC1tYXBwYWJsZSBhbmQgY2xh c3MgRS4gIFRoZSBIVFRQIG1lc3NhZ2UgZmllbGRzIHdoaWNoDQo+ICAgYXJlIHZpc2libGUgdG8g b24tcGF0aCBlbnRpdHkgYXJlIG9ubHkgdXNlZCBmb3IgdGhlIHB1cnBvc2Ugb2YNCj4gICB0cmFu c3BvcnRpbmcgdGhlIE9TQ09SRSBtZXNzYWdlLCB3aGVyZWFzIHRoZSBhcHBsaWNhdGlvbiBsYXll cg0KPiAgIG1lc3NhZ2UgaXMgZW5jb2RlZCBpbiBDb0FQIGFuZCBlbmNyeXB0ZWQuDQo+DQo+ICAg Q09TRSBtZXNzYWdlIGZpZWxkcywgaS5lLiB0aGUgT1NDT1JFIG9wdGlvbiwgbWF5IHJldmVhbCBp bmZvcm1hdGlvbg0KPiAgIGFib3V0IHRoZSBjb21tdW5pY2F0aW5nIGVuZHBvaW50cy4gIEUuZy4g J2tpZCcgYW5kICdraWQgY29udGV4dCcsDQo+ICAgd2hpY2ggYXJlIGludGVuZGVkIHRvIGhlbHAg dGhlIHNlcnZlciBmaW5kIHRoZSByaWdodCBjb250ZXh0LCBtYXkNCj4gICByZXZlYWwgaW5mb3Jt YXRpb24gYWJvdXQgdGhlIGNsaWVudC4gIFRyYWNraW5nICdraWQnIGFuZCAna2lkDQo+ICAgY29u dGV4dCcgdG8gb25lIHNlcnZlciBtYXkgYmUgdXNlZCBmb3IgY29ycmVsYXRpbmcgcmVxdWVzdHMg ZnJvbSBvbmUNCj4gICBjbGllbnQuDQo+DQo+ICAgVW5wcm90ZWN0ZWQgZXJyb3IgbWVzc2FnZXMg cmV2ZWFsIGluZm9ybWF0aW9uIGFib3V0IHRoZSBzZWN1cml0eQ0KPiAgIHN0YXRlIGluIHRoZSBj b21tdW5pY2F0aW9uIGJldHdlZW4gdGhlIGVuZHBvaW50cy4gIFVucHJvdGVjdGVkDQo+ICAgc2ln bmFsaW5nIG1lc3NhZ2VzIHJldmVhbCBpbmZvcm1hdGlvbiBhYm91dCB0aGUgcmVsaWFibGUgdHJh bnNwb3J0DQo+ICAgdXNlZCBvbiBhIGxlZyBvZiB0aGUgcGF0aC4gIFVzaW5nIHRoZSBtZWNoYW5p c21zIGRlc2NyaWJlZCBpbg0KPiAgIFNlY3Rpb24gNy41IG1heSByZXZlYWwgd2hlbiBhIGRldmlj ZSBnb2VzIHRocm91Z2ggYSByZWJvb3QuICBUaGlzIGNhbg0KPiAgIGJlIG1pdGlnYXRlZCBieSB0 aGUgZGV2aWNlIHN0b3JpbmcgdGhlIHByZWNpc2Ugc3RhdGUgb2Ygc2VuZGVyDQo+ICAgc2VxdWVu Y2UgbnVtYmVyIGFuZCByZXBsYXkgd2luZG93IG9uIGEgY2xlYW4gc2h1dGRvd24uDQo+DQo+U2Vs YW5kZXIsIGV0IGFsLiAgICAgICAgRXhwaXJlcyBKYW51YXJ5IDI3LCAyMDE5ICAgICAgICAgICAg ICAgW1BhZ2UgNTBdDQo+DQo+SW50ZXJuZXQtRHJhZnQgICAgICAgICAgICAgICAgICAgT1NDT1JF ICAgICAgICAgICAgICAgICAgICAgICAgSnVseSAyMDE4DQo+DQo+ICAgVGhlIGxlbmd0aCBvZiBt ZXNzYWdlIGZpZWxkcyBjYW4gcmV2ZWFsIGluZm9ybWF0aW9uIGFib3V0IHRoZQ0KPiAgIG1lc3Nh Z2UuICBBcHBsaWNhdGlvbnMgbWF5IHVzZSBhIHBhZGRpbmcgc2NoZW1lIHRvIHByb3RlY3QgYWdh aW5zdA0KPiAgIHRyYWZmaWMgYW5hbHlzaXMuDQo+DQo+MTMuICBJQU5BIENvbnNpZGVyYXRpb25z DQo+MTQuICBSZWZlcmVuY2VzDQo+QXBwZW5kaXggQS4gIFNjZW5hcmlvIEV4YW1wbGVzDQo+QXBw ZW5kaXggQi4gIERlcGxveW1lbnQgRXhhbXBsZXMNCj5CLjEuICBNYXN0ZXIgU2VjcmV0IFVzZWQg T25jZQ0KPg0KPiAgIEFuIGFwcGxpY2F0aW9uIG1heSBkZXJpdmUgYSBzZWN1cml0eSBjb250ZXh0 IG9uY2UgYW5kIHVzZSBpdCBmb3IgdGhlDQo+ICAgbGlmZXRpbWUgb2YgYSBkZXZpY2UuICBGb3Ig bWFueSBJb1QgZGVwbG95bWVudHMsIGEgMTI4IGJpdCB1bmlmb3JtbHkNCj4gICByYW5kb20gTWFz dGVyIEtleSBpcyBzdWZmaWNpZW50IGZvciBlbmNyeXB0aW5nIGFsbCBkYXRhIGV4Y2hhbmdlZA0K PiAgIHdpdGggdGhlIElvVCBkZXZpY2UuICBUaGlzIHNwZWNpZmljYXRpb24gZGVzY3JpYmVzIHRl Y2huaXF1ZXMgZm9yDQo+ICAgcGVyc2lzdGVudCBzdG9yYWdlIG9mIHRoZSBzZWN1cml0eSBjb250 ZXh0IGFuZCBzeW5jaHJvbml6YXRpb24gb2YNCj4gICBzZXF1ZW5jZSBudW1iZXJzIChzZWUgU2Vj dGlvbiA3LjUpIHRvIGVuc3VyZSB0aGF0IHNlY3VyaXR5IGlzDQo+ICAgbWFpbnRhaW5lZCB3aXRo IHRoZSBleGlzdGluZyBzZWN1cml0eSBjb250ZXh0Lg0KPg0KPkIuMi4gIE1hc3RlciBTZWNyZXQg VXNlZCBNdWx0aXBsZSBUaW1lcw0KPg0KPiAgIFNlY3Rpb24gMTIuMiByZWNvbW1lbmRzIHRoZSB1 c2Ugb2YgYSBrZXkgZXN0YWJsaXNobWVudCBwcm90b2NvbA0KPiAgIHByb3ZpZGluZyBmb3J3YXJk IHNlY3JlY3kgb2YgdGhlIE1hc3RlciBTZWNyZXQuDQo+PG1nbHQ+DQo+SSBiZWxpZXZlIHRoYXQg Zm9yd2FyZCBzZWNyZWN5IGlzIGEgcHJvcGVydHkgYXNzb2NpYXRlZCB0byB0aGUga2V4LiBJIGFt DQo+cmVhZGluZyBpdCBhcyBhc3NvY2lhdGVkIHRvIHRoZSBNYXN0ZXIgU2VjcmV0LiBUaGF0IHNh aWQsIEVuZ2xpc2ggaXMgbm90IA0KPm15DQo+bmF0aXZlIGxhbmd1YWdlLiA8L21nbHQ+DQo+W0dT Ol0gQ29ycmVjdC4gTmV3IGZvcm11bGF0aW9uOg0KPk5FVyAgIA0KPlNlY3Rpb24gMTIuMiByZWNv bW1lbmRzIHRoYXQgdGhlIE1hc3RlciBTZWNyZXQgaXMgb2J0YWluZWQgZnJvbSBhIGtleSANCj5l c3RhYmxpc2htZW50IHByb3RvY29sDQo+ICAgcHJvdmlkaW5nIGZvcndhcmQgc2VjcmVjeS4NCj4N Cj4NCj4NCj4gICBBbiBhcHBsaWNhdGlvbiB3aGljaCBkb2VzIG5vdCByZXF1aXJlIGZvcndhcmQg c2VjcmVjeSBtYXkgYWxsb3cNCj4gICBtdWx0aXBsZSBzZWN1cml0eSBjb250ZXh0cyB0byBiZSBk ZXJpdmVkIGZyb20gb25lIE1hc3RlciBTZWNyZXQuICBUaGUNCj4gICByZXF1aXJlbWVudHMgb24g dGhlIHNlY3VyaXR5IGNvbnRleHQgcGFyYW1ldGVycyBtdXN0IGJlIGZ1bGZpbGxlZA0KPiAgIChT ZWN0aW9uIDMuMykgZXZlbiBpZiB0aGUgY2xpZW50IG9yIHNlcnZlciBpcyByZWJvb3RlZCwNCj4g ICByZWNvbW1pc3Npb25lZCBvciBpbiBlcnJvciBjYXNlcy4NCj4NCj4gICBUaGlzIHNlY3Rpb24g Z2l2ZXMgYW4gZXhhbXBsZSBvZiBhbiBhcHBsaWNhdGlvbiBhbGxvd2luZyBuZXcgc2VjdXJpdHkN Cj4gICBjb250ZXh0cyB0byBiZSBkZXJpdmVkIGZyb20gaW5wdXQgcGFyYW1ldGVycyBwcmUtZXN0 YWJsaXNoZWQgYmV0d2Vlbg0KPiAgIGNsaWVudCBhbmQgc2VydmVyIGZvciB0aGlzIHB1cnBvc2U6 IGluIHBhcnRpY3VsYXIgTWFzdGVyIFNlY3JldCwNCj4gICBNYXN0ZXIgU2FsdCBhbmQgU2VuZGVy L1JlY2lwaWVudCBJRCAoc2VlIFNlY3Rpb24gMy4yKToNCj4NCj4gICBvICBUaGUgY2xpZW50IGdl bmVyYXRlcyBhbiBJRCBDb250ZXh0IHdoaWNoIGhhcyBwcmV2aW91c2x5IG5vdCBiZWVuDQo+ICAg ICAgdXNlZCB3aXRoIHRoZSBwcmUtZXN0YWJsaXNoZWQgaW5wdXQgcGFyYW1ldGVycyBhbmQgZGVy aXZlcyBhIG5ldw0KPiAgICAgIHNlY3VyaXR5IGNvbnRleHQuICBJRCBjb250ZXh0IG1heSBiZSBw c2V1ZG8tcmFuZG9tIGFuZCBsYXJnZSBmb3INCj4NCj5TZWxhbmRlciwgZXQgYWwuICAgICAgICBF eHBpcmVzIEphbnVhcnkgMjcsIDIwMTkgICAgICAgICAgICAgICBbUGFnZSA2Ml0NCj4NCj5JbnRl cm5ldC1EcmFmdCAgICAgICAgICAgICAgICAgICBPU0NPUkUgICAgICAgICAgICAgICAgICAgICAg ICBKdWx5IDIwMTgNCj4NCj4gICAgICBzdG9jaGFzdGljIHVuaXF1ZW5lc3MsIGJ1dCBjYXJlIG11 c3QgYmUgdGFrZW4gZS5nLiB0byBhdm9pZCByZS11c2UNCj4gICAgICBvZiB0aGUgc2FtZSBzZWVk IGZvciByYW5kb20gbnVtYmVyIGdlbmVyYXRpb24uICBVc2luZyB0aGlzIG5ldw0KPiAgICAgIHNl Y3VyaXR5IGNvbnRleHQsIHRoZSBjbGllbnQgZ2VuZXJhdGVzIGFuIE9TQ09SRSByZXF1ZXN0IHdp dGggKGtpZA0KPiAgICAgIGNvbnRleHQsIGtpZCkgPSAoSUQgQ29udGV4dCwgU2VuZGVyIElEKSBp biB0aGUgT1NDT1JFIG9wdGlvbi4NCj4NCj4gICBvICBUaGUgc2VydmVyIHJlY2VpdmluZyBzdWNo IGFuIE9TQ09SRSByZXF1ZXN0IHdpdGgga2lkIG1hdGNoaW5nIHRoZQ0KPiAgICAgIFJlY2lwaWVu dCBJRCBvZiBwcmUtZXN0YWJsaXNoZWQgaW5wdXQgcGFyYW1ldGVycywgYnV0IHdpdGggYSBuZXcN Cj4gICAgICBraWQgY29udGV4dCwgZGVyaXZlcyB0aGUgc2VjdXJpdHkgY29udGV4dCB1c2luZyBJ RCBDb250ZXh0ID0ga2lkDQo+ICAgICAgY29udGV4dC4gIElmIHRoZSBtZXNzYWdlIHZlcmlmaWVz IHRoZW4gYSBuZXcgc2VjdXJpdHkgY29udGV4dCB3aXRoDQo+ICAgICAgdGhpcyBJRCBDb250ZXh0 IGlzIHN0b3JlZCBpbiB0aGUgc2VydmVyLCBhbmQgdXNlZCBpbiB0aGUgcmVzcG9uc2UuDQo+ICAg ICAgRnVydGhlciByZXF1ZXN0cyB3aXRoIHRoZSBzYW1lIChraWQgY29udGV4dCwga2lkKSBhcmUg dmVyaWZpZWQNCj4gICAgICB3aXRoIHRoaXMgc2VjdXJpdHkgY29udGV4dC4NCj4NCj4gICBBcyBh biBhbHRlcm5hdGl2ZSBwcm9jZWR1cmUgdG8gcmVkdWNlIHRoZSBzdWJzZXF1ZW50IG92ZXJoZWFk IGluDQo+ICAgcmVxdWVzdHMgZHVlIHRvIGtpZCBjb250ZXh0LCB0aGUgdmVyaWZpY2F0aW9uIG9m IGEgbWVzc2FnZSB3aXRoIGEgbmV3DQo+ICAgSUQgQ29udGV4dCBtYXkgdHJpZ2dlciB0aGUgc2Vy dmVyIHRvIGdlbmVyYXRlIGEgbmV3IGtpZCB0byByZXBsYWNlDQo+ICAgdGhlIENsaWVudCBTZW5k ZXIgSUQgaW4gZnV0dXJlIHJlcXVlc3RzLiAgQSBjbGllbnQgbWF5IGUuZy4gaW5kaWNhdGUNCj4g ICBzdXBwb3J0IGZvciBzdWNoIGEgcHJvY2VkdXJlIGJ5IHJlcXVlc3RpbmcgYSBzcGVjaWFsIHdl bGwta25vd24gVVJJDQo+ICAgYW5kIHJlY2VpdmUgdGhlIG5ldyBraWQgaW4gdGhlIHJlc3BvbnNl LCB3aGljaCB0b2dldGhlciB3aXRoIHRoZQ0KPiAgIGlucHV0IHBhcmFtZXRlcnMgYW5kIHRoZSBJ RCBjb250ZXh0IGlzIHVzZWQgdG8gZGVyaXZlIHRoZSBuZXcNCj4gICBzZWN1cml0eSBjb250ZXh0 IHdoaWNoIG1heSBiZSBpZGVudGlmaWVkIG9ubHkgYnkgaXRzIGtpZC4gIFRoZQ0KPiAgIGRldGFp bHMgYXJlIG91dCBvZiBzY29wZSBmb3IgdGhpcyBzcGVjaWZpY2F0aW9uLg0KPg0KPiAgIFRoZSBw cm9jZWR1cmVzIG1heSBiZSBjb21wbGVtZW50ZWQgd2l0aCB0aGUgdXNlIG9mIHRoZSBFY2hvIG9w dGlvbg0KPiAgIGZvciB2ZXJpZnlpbmcgdGhlIGFsaXZlbmVzcyBvZiB0aGUgY2xpZW50IHJlcXVl c3RpbmcgYSBuZXcgc2VjdXJpdHkNCj4gICBjb250ZXh0Lg0KPg0KPkFwcGVuZGl4IEMuICBUZXN0 IFZlY3RvcnMNCj5BcHBlbmRpeCBELiAgT3ZlcnZpZXcgb2YgU2VjdXJpdHkgUHJvcGVydGllcw0K Pg0KPkQuMS4gIFN1cHBvcnRpbmcgUHJveHkgT3BlcmF0aW9ucw0KPg0KPiAgIENvQVAgaXMgZGVz aWduZWQgdG8gd29yayB3aXRoIGludGVybWVkaWFyaWVzIHJlYWRpbmcgYW5kL29yIGNoYW5naW5n DQo+ICAgQ29BUCBtZXNzYWdlIGZpZWxkcyB0byBwZXJmb3JtIHN1cHBvcnRpbmcgb3BlcmF0aW9u cyBpbiBjb25zdHJhaW5lZA0KPiAgIGVudmlyb25tZW50cywgZS5nLiBmb3J3YXJkaW5nIGFuZCBj cm9zcy1wcm90b2NvbCB0cmFuc2xhdGlvbnMuDQo+DQo+ICAgU2VjdXJpbmcgQ29BUCBvbiB0cmFu c3BvcnQgbGF5ZXIgcHJvdGVjdHMgdGhlIGVudGlyZSBtZXNzYWdlIGJldHdlZW4NCj4gICB0aGUg ZW5kcG9pbnRzIGluIHdoaWNoIGNhc2UgQ29BUCBwcm94eSBvcGVyYXRpb25zIGFyZSBub3QgcG9z c2libGUuDQo+ICAgSW4gb3JkZXIgdG8gZW5hYmxlIHByb3h5IG9wZXJhdGlvbnMsIHNlY3VyaXR5 IG9uIHRyYW5zcG9ydCBsYXllcg0KPiAgIG5lZWRzIHRvIGJlIHRlcm1pbmF0ZWQgYXQgdGhlIHBy b3h5IGluIHdoaWNoIGNhc2UgdGhlIENvQVAgbWVzc2FnZSBpbg0KPiAgIGl0cyBlbnRpcmV0eSBp cyB1bnByb3RlY3RlZCBpbiB0aGUgcHJveHkuDQo+DQo+ICAgUmVxdWlyZW1lbnRzIGZvciBDb0FQ IGVuZC10by1lbmQgc2VjdXJpdHkgYXJlIHNwZWNpZmllZCBpbg0KPiAgIFtJLUQuaGFydGtlLWNv cmUtZTJlLXNlY3VyaXR5LXJlcXNdLiAgVGhlIGNsaWVudCBhbmQgc2VydmVyIGFyZQ0KPiAgIGFz c3VtZWQgdG8gYmUgaG9uZXN0LCBidXQgcHJveGllcyBhbmQgZ2F0ZXdheXMgYXJlIG9ubHkgdHJ1 c3RlZCB0bw0KPiAgIHBlcmZvcm0gdGhlaXIgaW50ZW5kZWQgb3BlcmF0aW9ucy4NCj48bWdsdD4N Cj5JIGV4cGVjdGVkIGFmdGVyICdidXQnIHNvbWV0aGluZyBzYXlpbmcgdGhlIHByb3hpZXMgYXJl IG5vdCB0cnVzdGVkLCBidXQgdA0KPnNlZW1zIHRoYXQgZXZlcnlvbmUgaXMgaG9uZXN0IGhlcmUu IG1heWJlIHdlIHNob3VsZCByZXBsYWNlOiBPTEQgYnV0IA0KPnByb3hpZXMNCj5hbmQgZ2F0ZXdh eXMgYXJlIG9ubHkgdHJ1c3RlZCB0bw0KPiAgIHBlcmZvcm0gdGhlaXIgaW50ZW5kZWQgb3BlcmF0 aW9ucy4NCj5ORVc6DQo+YW5kIHByb3hpZXMgYW5kIGdhdGV3YXlzIGFyZSB0cnVzdGVkIHRvDQo+ ICAgcGVyZm9ybSB0aGVpciBpbnRlbmRlZCBvcGVyYXRpb25zLg0KPg0KPlRoYXQgdGhlIHNlcnZl ciBpcyBob25lc3QgZG9lcyBub3QgbWVhbnMgdGhhdCB0aGUgbm9kZSB0ZXJtaW5hdGluZyB0aGUg DQo+c2Vzc2lvbg0KPmlzIHRoZSBzZXJ2ZXIuLi4uIDwvbWdsdD4NCj4NCj5bR1M6XSBJc27igJl0 IHRoYXQgdG9vIG1hbnkg4oCcYW5k4oCdIDstKS4gV2UgY2FuIHJlcGxhY2Ug4oCcYnV04oCdIHdp dGggc29tZSBvdGhlciANCj53b3JkLCBlLmcuIOKAnHdoaWxl4oCdIHRvIGluZGljYXRlIHRoYXQg dGhlcmUgaXMgYSBkaWZmZXJlbmNlLg0KPk5FVzoNCj53aGlsZSBwcm94aWVzIGFuZCBnYXRld2F5 cyBhcmUgb25seSB0cnVzdGVkIHRvDQo+ICAgcGVyZm9ybSB0aGVpciBpbnRlbmRlZCBvcGVyYXRp b25zLg0KPg0KPg0KPg0KPg0KPg0KPiAgRm9yd2FyZGluZyBpcyBzcGVjaWZpZWQgaW4NCj4gICBT ZWN0aW9uIDIuMi4xIG9mIFtJLUQuaGFydGtlLWNvcmUtZTJlLXNlY3VyaXR5LXJlcXNdLiAgSFRU UC1Db0FQDQo+ICAgdHJhbnNsYXRpb24gaXMgc3BlY2lmaWVkIGluIFtSRkM4MDc1XS4gIEludGVy bWVkaWFyaWVzIHRyYW5zbGF0aW5nDQo+ICAgYmV0d2VlbiBkaWZmZXJlbnQgdHJhbnNwb3J0IGxh eWVycyBhcmUgaW50ZW5kZWQgdG8gcGVyZm9ybSBqdXN0IHRoYXQuDQo+DQo+ICAgQnkgd29ya2lu ZyBhdCB0aGUgQ29BUCBsYXllciwgT1NDT1JFIGVuYWJsZXMgZGlmZmVyZW50IENvQVAgbWVzc2Fn ZQ0KPiAgIGZpZWxkcyB0byBiZSBwcm90ZWN0ZWQgZGlmZmVyZW50bHksIHdoaWNoIGFsbG93cyBt ZXNzYWdlIGZpZWxkcw0KPiAgIHJlcXVpcmVkIGZvciBwcm94eSBvcGVyYXRpb25zIHRvIGJlIGF2 YWlsYWJsZSB0byB0aGUgcHJveHkgd2hpbGUNCj4gICBtZXNzYWdlIGZpZWxkcyBpbnRlbmRlZCBm b3IgdGhlIG90aGVyIGVuZHBvaW50IHJlbWFpbiBwcm90ZWN0ZWQuICBJbg0KPiAgIHRoZSByZW1h aW5kZXIgb2YgdGhpcyBzZWN0aW9uIHdlIGFuYWx5emUgaG93IE9TQ09SRSBwcm90ZWN0cyB0aGUN Cj4gICBwcm90ZWN0ZWQgbWVzc2FnZSBmaWVsZHMgYW5kIHRoZSBjb25zZXF1ZW5jZXMgb2YgbWVz c2FnZSBmaWVsZHMNCj4gICBpbnRlbmRlZCBmb3IgcHJveHkgb3BlcmF0aW9uIGJlaW5nIHVucHJv dGVjdGVkLg0KPjxtZ2x0Pg0KPlRoaXMgdGV4dCBzZWVtcyBjbGVhciB0byBtZS4gTWF5YmUgdGhl IGxhc3QgcGFyYWdyYXBoIGNvdWxkIGJlIHN1ZmZpY2llbnQuDQo+PC9tZ2x0Pg0KPg0KPltHUzpd IElzIHRoZSBwcm9wb3NhbCB0byByZW1vdmUg4oCcRm9yd2FyZGluZyBpcyBzcGVjaWZpZWQgIC4g LiAuIHRvIA0KPnBlcmZvcm0gDQo+anVzdCB0aGF04oCdPyBXZSBjb3VsZCBkbyB0aGF0IGFuZCBy ZXBsYWNlIHRoaXMgdGV4dCB3aXRoIHNvbWUgcmVmZXJlbmNlcyANCj50byANCj5vdGhlciBwYXJ0 cyBvZiB0aGUgZG9jdW1lbnQgaWYgdGhhdCBpcyBkZXNpcmFibGUuDQo+DQo+DQo+RC4yLiAgUHJv dGVjdGVkIE1lc3NhZ2UgRmllbGRzDQo+DQo+DQo+DQo+ICAgUHJvdGVjdGVkIG1lc3NhZ2UgZmll bGRzIGFyZSBpbmNsdWRlZCBpbiB0aGUgUGxhaW50ZXh0IChTZWN0aW9uIDUuMykNCj4gICBhbmQg dGhlIEFkZGl0aW9uYWwgQXV0aGVudGljYXRlZCBEYXRhIChTZWN0aW9uIDUuNCkgb2YgdGhlDQo+ ICAgQ09TRV9FbmNyeXB0MCBvYmplY3QgYW5kIGVuY3J5cHRlZCB1c2luZyBhbiBBRUFEIGFsZ29y aXRobS4NCj4NCj4gICBPU0NPUkUgZGVwZW5kcyBvbiBhIHByZS1lc3RhYmxpc2hlZCByYW5kb20g TWFzdGVyIFNlY3JldA0KPiAgIChTZWN0aW9uIDEyLjMpIHVzZWQgdG8gZGVyaXZlIGVuY3J5cHRp b24ga2V5cywgYW5kIGEgY29uc3RydWN0aW9uIGZvcg0KPiAgIG1ha2luZyAoa2V5LCBub25jZSkg cGFpcnMgdW5pcXVlIChBcHBlbmRpeCBELjMpLiAgQXNzdW1pbmcgdGhpcyBpcw0KPiAgIHRydWUs IGFuZCB0aGUga2V5cyBhcmUgdXNlZCBmb3Igbm8gbW9yZSBkYXRhIHRoYW4gaW5kaWNhdGVkIGlu DQo+ICAgU2VjdGlvbiA3LjIuMSwgT1NDT1JFIHNob3VsZCBwcm92aWRlIHRoZSBmb2xsb3dpbmcg Z3VhcmFudGVlczoNCj4NCj4gICBvICBDb25maWRlbnRpYWxpdHk6IEFuIGF0dGFja2VyIHNob3Vs ZCBub3QgYmUgYWJsZSB0byBkZXRlcm1pbmUgdGhlDQo+ICAgICAgcGxhaW50ZXh0IGNvbnRlbnRz IG9mIGEgZ2l2ZW4gT1NDT1JFIG1lc3NhZ2Ugb3IgZGV0ZXJtaW5lIHRoYXQNCj4gICAgICBkaWZm ZXJlbnQgcGxhaW50ZXh0cyBhcmUgcmVsYXRlZCAoU2VjdGlvbiA1LjMpLg0KPg0KPlNlbGFuZGVy LCBldCBhbC4gICAgICAgIEV4cGlyZXMgSmFudWFyeSAyNywgMjAxOSAgICAgICAgICAgICAgIFtQ YWdlIDc0XQ0KPg0KPkludGVybmV0LURyYWZ0ICAgICAgICAgICAgICAgICAgIE9TQ09SRSAgICAg ICAgICAgICAgICAgICAgICAgIEp1bHkgMjAxOA0KPg0KPiAgIG8gIEludGVncml0eTogQW4gYXR0 YWNrZXIgc2hvdWxkIG5vdCBiZSBhYmxlIHRvIGNyYWZ0IGEgbmV3IE9TQ09SRQ0KPiAgICAgIG1l c3NhZ2Ugd2l0aCBwcm90ZWN0ZWQgbWVzc2FnZSBmaWVsZHMgZGlmZmVyZW50IGZyb20gYW4gZXhp c3RpbmcNCj4gICAgICBPU0NPUkUgbWVzc2FnZSB3aGljaCB3aWxsIGJlIGFjY2VwdGVkIGJ5IHRo ZSByZWNlaXZlci4NCj4NCj4gICBvICBSZXF1ZXN0LXJlc3BvbnNlIGJpbmRpbmc6IEFuIGF0dGFj a2VyIHNob3VsZCBub3QgYmUgYWJsZSB0byBtYWtlIGENCj4gICAgICBjbGllbnQgbWF0Y2ggYSBy ZXNwb25zZSB0byB0aGUgd3JvbmcgcmVxdWVzdC4NCj4NCj4gICBvICBOb24tcmVwbGF5YWJpbGl0 eTogQW4gYXR0YWNrZXIgc2hvdWxkIG5vdCBiZSBhYmxlIHRvIGNhdXNlIHRoZQ0KPiAgICAgIHJl Y2VpdmVyIHRvIGFjY2VwdCBhIG1lc3NhZ2Ugd2hpY2ggaXQgaGFzIHByZXZpb3VzbHkgcmVjZWl2 ZWQgYW5kDQo+ICAgICAgYWNjZXB0ZWQuDQo+DQo+ICAgSW4gdGhlIGFib3ZlLCB0aGUgYXR0YWNr ZXIgaXMgYW55b25lIGV4Y2VwdCB0aGUgZW5kcG9pbnRzLCBlLmcuIGENCj4gICBjb21wcm9taXNl ZCBpbnRlcm1lZGlhcnkuICBJbmZvcm1hbGx5LCBPU0NPUkUgcHJvdmlkZXMgdGhlc2UNCj4gICBw cm9wZXJ0aWVzIGJ5IEFFQUQtcHJvdGVjdGluZyB0aGUgcGxhaW50ZXh0IHdpdGggYSBzdHJvbmcg a2V5IGFuZA0KPiAgIHVuaXF1ZW5lc3Mgb2YgKGtleSwgbm9uY2UpIHBhaXJzLiAgQUVBRCBlbmNy eXB0aW9uIFtSRkM1MTE2XSBwcm92aWRlcw0KPiAgIGNvbmZpZGVudGlhbGl0eSBhbmQgaW50ZWdy aXR5IGZvciB0aGUgZGF0YS4gIFJlc3BvbnNlLXJlcXVlc3QgYmluZGluZw0KPiAgIGlzIHByb3Zp ZGVkIGJ5IGluY2x1ZGluZyB0aGUga2lkIGFuZCBQYXJ0aWFsIElWIG9mIHRoZSByZXF1ZXN0IGlu IHRoZQ0KPiAgIEFBRCBvZiB0aGUgcmVzcG9uc2UuICBOb24tcmVwbGF5YWJpbGl0eSBvZiByZXF1 ZXN0cyBhbmQgbm90aWZpY2F0aW9ucw0KPiAgIGlzIHByb3ZpZGVkIGJ5IHVzaW5nIHVuaXF1ZSAo a2V5LCBub25jZSkgcGFpcnMgYW5kIGEgcmVwbGF5DQo+ICAgcHJvdGVjdGlvbiBtZWNoYW5pc20g KGFwcGxpY2F0aW9uIGRlcGVuZGVudCwgc2VlIFNlY3Rpb24gNy40KS4NCj4NCj4gICBPU0NPUkUg aXMgc3VzY2VwdGlibGUgdG8gYSB2YXJpZXR5IG9mIHRyYWZmaWMgYW5hbHlzaXMgYXR0YWNrcyBi YXNlZA0KPiAgIG9uIG9ic2VydmluZyB0aGUgbGVuZ3RoIGFuZCB0aW1pbmcgb2YgZW5jcnlwdGVk IHBhY2tldHMuICBPU0NPUkUgZG9lcw0KPiAgIG5vdCBwcm92aWRlIGFueSBzcGVjaWZpYyBkZWZl bnNlcyBhZ2FpbnN0IHRoaXMgZm9ybSBvZiBhdHRhY2sgYnV0IHRoZQ0KPiAgIGFwcGxpY2F0aW9u IG1heSB1c2UgYSBwYWRkaW5nIG1lY2hhbmlzbSB0byBwcmV2ZW50IGFuIGF0dGFja2VyIGZyb20N Cj4gICBkaXJlY3RseSBkZXRlcm1pbmUgdGhlIGxlbmd0aCBvZiB0aGUgcGFkZGluZy4gIEhvd2V2 ZXIsIGluZm9ybWF0aW9uDQo+ICAgYWJvdXQgcGFkZGluZyBtYXkgc3RpbGwgYmUgcmV2ZWFsZWQg Ynkgc2lkZS1jaGFubmVsIGF0dGFja3Mgb2JzZXJ2aW5nDQo+ICAgZGlmZmVyZW5jZXMgaW4gdGlt aW5nLg0KPg0KPkQuMy4gIFVuaXF1ZW5lc3Mgb2YgKGtleSwgbm9uY2UpDQo+DQo+ICAgSW4gdGhp cyBzZWN0aW9uIHdlIHNob3cgdGhhdCAoa2V5LCBub25jZSkgcGFpcnMgYXJlIHVuaXF1ZSBhcyBs b25nIGFzDQo+ICAgdGhlIHJlcXVpcmVtZW50cyBpbiBTZWN0aW9ucyAzLjMgYW5kIDcuMi4xIGFy ZSBmb2xsb3dlZC4NCj4NCj4gICBGaXggYSBDb21tb24gQ29udGV4dCAoU2VjdGlvbiAzLjEpIGFu ZCBhbiBlbmRwb2ludCwgY2FsbGVkIHRoZQ0KPiAgIGVuY3J5cHRpbmcgZW5kcG9pbnQuICBBbiBl bmRwb2ludCBtYXkgYWx0ZXJuYXRlIGJldHdlZW4gY2xpZW50IGFuZA0KPiAgIHNlcnZlciByb2xl cywgYnV0IGVhY2ggZW5kcG9pbnQgYWx3YXlzIGVuY3J5cHRzIHdpdGggdGhlIFNlbmRlciBLZXkN Cj4gICBvZiBpdHMgU2VuZGVyIENvbnRleHQuICBTZW5kZXIgS2V5cyBhcmUgKHN0b2NoYXN0aWNh bGx5KSB1bmlxdWUgc2luY2UNCj4gICB0aGV5IGFyZSBkZXJpdmVkIHdpdGggSEtERiB1c2luZyB1 bmlxdWUgU2VuZGVyIElEcywgc28gbWVzc2FnZXMNCj4gICBlbmNyeXB0ZWQgYnkgZGlmZmVyZW50 IGVuZHBvaW50cyB1c2UgZGlmZmVyZW50IGtleXMuICBJdCByZW1haW5zIHRvDQo+ICAgcHJvdmUg dGhhdCB0aGUgbm9uY2VzIHVzZWQgYnkgdGhlIGZpeGVkIGVuZHBvaW50IGFyZSB1bmlxdWUuDQo+ DQo+ICAgU2luY2UgdGhlIENvbW1vbiBJViBpcyBmaXhlZCwgdGhlIG5vbmNlcyBhcmUgZGV0ZXJt aW5lZCBieSBhIFBhcnRpYWwNCj4gICBJViAoUElWKSBhbmQgdGhlIFNlbmRlciBJRCBvZiB0aGUg ZW5kcG9pbnQgZ2VuZXJhdGluZyB0aGF0IFBhcnRpYWwgSVYNCj4gICAoSURfUElWKS4gIFRoZSBu b25jZSBjb25zdHJ1Y3Rpb24gKFNlY3Rpb24gNS4yKSB3aXRoIHRoZSBzaXplIG9mIHRoZQ0KPiAg IElEX1BJViAoUykgY3JlYXRlcyB1bmlxdWUgbm9uY2VzIGZvciBkaWZmZXJlbnQgKElEX1BJViwg UElWKSBwYWlycy4NCj4gICBUaGVyZSBhcmUgdHdvIGNhc2VzOg0KPg0KPlNlbGFuZGVyLCBldCBh bC4gICAgICAgIEV4cGlyZXMgSmFudWFyeSAyNywgMjAxOSAgICAgICAgICAgICAgIFtQYWdlIDc1 XQ0KPg0KPkludGVybmV0LURyYWZ0ICAgICAgICAgICAgICAgICAgIE9TQ09SRSAgICAgICAgICAg ICAgICAgICAgICAgIEp1bHkgMjAxOA0KPg0KPiAgIEEuICBGb3IgcmVxdWVzdHMsIGFuZCByZXNw b25zZXMgd2l0aCBQYXJ0aWFsIElWIChlLmcuICBPYnNlcnZlDQo+ICAgbm90aWZpY2F0aW9ucyk6 DQo+DQo+ICAgbyAgSURfUElWID0gU2VuZGVyIElEIG9mIHRoZSBlbmNyeXB0aW5nIGVuZHBvaW50 DQo+DQo+ICAgbyAgUElWID0gY3VycmVudCBQYXJ0aWFsIElWIG9mIHRoZSBlbmNyeXB0aW5nIGVu ZHBvaW50DQo+DQo+ICAgU2luY2UgdGhlIGVuY3J5cHRpbmcgZW5kcG9pbnQgc3RlcHMgdGhlIFBh cnRpYWwgSVYgZm9yIGVhY2ggdXNlLCB0aGUNCj4gICBub25jZXMgdXNlZCBpbiBjYXNlIEEgYXJl IGFsbCB1bmlxdWUgYXMgbG9uZyBhcyB0aGUgbnVtYmVyIG9mDQo+ICAgZW5jcnlwdGVkIG1lc3Nh Z2VzIGlzIGtlcHQgd2l0aGluIHRoZSByZXF1aXJlZCByYW5nZSAoU2VjdGlvbiA3LjIuMSkuDQo+ DQo+ICAgQi4gIEZvciByZXNwb25zZXMgd2l0aG91dCBQYXJ0aWFsIElWIChlLmcuIHNpbmdsZSBy ZXNwb25zZSB0byBhDQo+ICAgcmVxdWVzdCk6DQo+DQo+ICAgbyAgSURfUElWID0gU2VuZGVyIElE IG9mIHRoZSBlbmRwb2ludCBnZW5lcmF0aW5nIHRoZSByZXF1ZXN0DQo+DQo+ICAgbyAgUElWID0g UGFydGlhbCBJViBvZiB0aGUgcmVxdWVzdA0KPg0KPiAgIFNpbmNlIHRoZSBTZW5kZXIgSURzIGFy ZSB1bmlxdWUsIElEX1BJViBpcyBkaWZmZXJlbnQgZnJvbSB0aGUgU2VuZGVyDQo+ICAgSUQgb2Yg dGhlIGVuY3J5cHRpbmcgZW5kcG9pbnQuICBUaGVyZWZvcmUsIHRoZSBub25jZXMgaW4gY2FzZSBC IGFyZQ0KPiAgIGRpZmZlcmVudCBjb21wYXJlZCB0byBub25jZXMgaW4gY2FzZSBBLCB3aGVyZSB0 aGUgZW5jcnlwdGluZyBlbmRwb2ludA0KPiAgIGdlbmVyYXRlZCB0aGUgUGFydGlhbCBJVi4gIFNp bmNlIHRoZSBQYXJ0aWFsIElWIG9mIHRoZSByZXF1ZXN0IGlzDQo+ICAgdmVyaWZpZWQgZm9yIHJl cGxheSAoU2VjdGlvbiA3LjQpIGFzc29jaWF0ZWQgdG8gdGhpcyBSZWNpcGllbnQNCj4gICBDb250 ZXh0LCBQSVYgaXMgdW5pcXVlIGZvciB0aGlzIElEX1BJViwgd2hpY2ggbWFrZXMgYWxsIG5vbmNl cyBpbg0KPiAgIGNhc2UgQiBkaXN0aW5jdC4NCj4NCj5ELjQuICBVbnByb3RlY3RlZCBNZXNzYWdl IEZpZWxkcw0KPg0KPiAgIFRoaXMgc2VjdGlvbiBsaXN0cyBhbmQgZGlzY3Vzc2VzIGlzc3VlcyB3 aXRoIHVucHJvdGVjdGVkIG1lc3NhZ2UNCj4gICBmaWVsZHMuDQo+DQo+RC40LjEuICBDb0FQIEhl YWRlciBGaWVsZHMNCj4NCj4gICBvICBWZXJzaW9uLiAgVGhlIENvQVAgdmVyc2lvbiBbUkZDNzI1 Ml0gaXMgbm90IGV4cGVjdGVkIHRvIGJlDQo+ICAgICAgc2Vuc2l0aXZlIHRvIGRpc2Nsb3NlLiAg Q3VycmVudGx5IHRoZXJlIGlzIG9ubHkgb25lIENvQVAgdmVyc2lvbg0KPiAgICAgIGRlZmluZWQu ICBBIGNoYW5nZSBvZiB0aGlzIHBhcmFtZXRlciBpcyBwb3RlbnRpYWxseSBhIGRlbmlhbC1vZi0N Cj4gICAgICBzZXJ2aWNlIGF0dGFjay4gIEZ1dHVyZSB2ZXJzaW9ucyBvZiBDb0FQIG5lZWQgdG8g YW5hbHl6ZSBhdHRhY2tzDQo+ICAgICAgdG8gT1NDT1JFIHByb3RlY3RlZCBtZXNzYWdlcyBkdWUg dG8gYW4gYWR2ZXJzYXJ5IGNoYW5naW5nIHRoZSBDb0FQDQo+ICAgICAgdmVyc2lvbi4NCj4NCj4g ICBvICBUb2tlbi9Ub2tlbiBMZW5ndGguICBUaGUgVG9rZW4gZmllbGQgaXMgYSBjbGllbnQtbG9j YWwgaWRlbnRpZmllcg0KPiAgICAgIGZvciBkaWZmZXJlbnRpYXRpbmcgYmV0d2VlbiBjb25jdXJy ZW50IHJlcXVlc3RzIFtSRkM3MjUyXS4gIEFuDQo+ICAgICAgZWF2ZXNkcm9wcGVyIHJlYWRpbmcg dGhlIHRva2VuIGNhbiBtYXRjaCByZXF1ZXN0cyB0byByZXNwb25zZXMNCj4gICAgICB3aGljaCBj YW4gYmUgdXNlZCBpbiB0cmFmZmljIGFuYWx5c2lzLiAgSW4gcGFydGljdWxhciB0aGlzIGlzIHRy dWUNCj4gICAgICBmb3Igbm90aWZpY2F0aW9ucywgd2hlcmUgbXVsdGlwbGUgcmVzcG9uc2VzIGFy ZSBtYXRjaGVkIHdpdGggb25lDQo+ICAgICAgcmVxdWVzdC4gIENvQVAgcHJveGllcyBhcmUgYWxs b3dlZCB0byBjaGFuZ2UgVG9rZW4gYW5kIFRva2VuDQo+ICAgICAgTGVuZ3RoIGJldHdlZW4gVURQ IGhvcHMuICBIb3dldmVyLCBtb2RpZmljYXRpb25zIG9mIFRva2VuIGFuZA0KPiAgICAgIFRva2Vu IExlbmd0aCBkdXJpbmcgYSBVRFAgaG9wIG1heSBiZWNvbWUgYSBkZW5pYWwtb2Ytc2VydmljZQ0K Pg0KPlNlbGFuZGVyLCBldCBhbC4gICAgICAgIEV4cGlyZXMgSmFudWFyeSAyNywgMjAxOSAgICAg ICAgICAgICAgIFtQYWdlIDc2XQ0KPg0KPkludGVybmV0LURyYWZ0ICAgICAgICAgICAgICAgICAg IE9TQ09SRSAgICAgICAgICAgICAgICAgICAgICAgIEp1bHkgMjAxOA0KPg0KPiAgICAgIGF0dGFj aywgc2luY2UgaXQgbWF5IHByZXZlbnQgdGhlIGNsaWVudCB0byBpZGVudGlmeSB0byB3aGljaA0K PiAgICAgIHJlcXVlc3QgdGhlIHJlc3BvbnNlIGJlbG9uZ3Mgb3IgdG8gZmluZCB0aGUgY29ycmVj dCBpbmZvcm1hdGlvbiB0bw0KPiAgICAgIHZlcmlmeSBpbnRlZ3JpdHkgb2YgdGhlIHJlc3BvbnNl Lg0KPjxtZ2x0Pg0KPkkgYW0gcmVhZGluZyB0aGUgdGV4dCBhcy4gV2hlbiB0aGUgYXR0YWNrZXIg aXMgb24tcGF0aCwgYSBsb25nIFRva2VuIGRvZXMgDQo+bm90DQo+cHJldmVudHMgdGhlIGF0dGFj ayBiYXNlZCBvbiBhIHNwb29mZWQgcmVzcG9uc2UuIEhvd2V2ZXIsIGZvciBhbiBhdHRhY2tlciAN Cj50aGF0DQo+aXMgbm90IG9uIHBhdGgsIHRoZSBhdHRhY2tlciBuZWVkcyB0byBndWVzcyB0aGUg VG9rZW4sIGFuZCB0aGlzIGNhbiBiZQ0KPm1pdGlnYXRlZCAocGFydGlhbGx5KSBieSBpbmNyZWFz aW5nIHRoZSBUb2tlbiBzaXplLiAgTm90ZSB0aGF0IGluIHRoZSANCj5sYXRlc3QNCj5jYXNlLCBh IGxvbmcgVG9rZW4gc2hvdWxkIG5vdCBiZSBzZWVuIGFzIGEgcmVwbGFjZW1lbnQgZm9yIGNyeXB0 b2dyYXBoaWMNCj5wcm90ZWN0aW9uIG9mIHRoZSBtZXNzYWdlLiA8L21nbHQ+DQo+DQo+W0dTOl0g VGhlcmUgc2VlbXMgdG8gYmUgYSBtaXN1bmRlcnN0YW5kaW5nIHNvbWV3aGVyZS4gVGhlcmUgaXMg bm8gbmVlZCANCj5mb3IgYW55b25lIHRvIOKAnGd1ZXNzIHRoZSBUb2tlbuKAnSBzaW5jZSBpdCBp cyBub3QgZW5jcnlwdGVkLiBUaGVyZSBpcyANCj5ub3RoaW5nIGhpbnRlZCBhYm91dCBUb2tlbiBi ZWluZyBhIOKAnHJlcGxhY2VtZW50IGZvciBjcnlwdG/igJ0sIHNvIEkgZG9u4oCZdCANCj51bmRl cnN0YW5kIHdoeSBhbnlvbmUgd291bGQgYmUgbGVhZCB0byB0aGluayB0aGF0LiBUb2tlbiBsZW5n dGggaXMgDQo+bWVudGlvbmVkIHR3aWNlOyBpbiB0aGUgbmV4dCB0byBsYXN0IHNlbnRlbmNlIC0g bWVudGlvbmluZyB0aGF0IENvQVAgDQo+cHJveGllcyAobGVnaXRpbWF0ZWx5KSBtYXkgY2hhbmdl IFRva2VuIGxlbmd0aDsgYW5kIGluIHRoZSBsYXN0IHNlbnRlbmNlIA0KPi0gZGVzY3JpYmluZyB0 aGF0IGFuIG9uLXBhdGggYXR0YWNrZXIgbWF5IG1vZGlmeSB0aGUgVG9rZW4gTGVuZ3RoIHdoaWNo IA0KPmVpdGhlciBjcmVhdGVkIG1pc21hdGNoIGJldHdlZW4gcmVxdWVzdCBhbmQgcmVzcG9uc2Ug b3Igbm8gbWF0Y2ggYXQgYWxsLCANCj53aGljaCBhcmUgYm90aCBkZW5pYWwgb2Ygc2VydmljZS4g SXMgaXQgY2xlYXJlciBpbiB0aGUgZm9sbG93aW5nIHdheT8NCk5FVw0KPm8gVG9rZW4vVG9rZW4g TGVuZ3RoLiBUaGUgVG9rZW4gZmllbGQgaXMgYSBjbGllbnQtbG9jYWwgaWRlbnRpZmllcg0KPmZv ciBkaWZmZXJlbnRpYXRpbmcgYmV0d2VlbiBjb25jdXJyZW50IHJlcXVlc3RzIFtSRkM3MjUyXS4N Cj4NCj4NCj5Db0FQIHByb3hpZXMgYXJlIGFsbG93ZWQgdG8gY2hhbmdlIFRva2VuIGFuZCBUb2tl bg0KPg0KPg0KPkxlbmd0aCBiZXR3ZWVuIFVEUCBob3BzLiBBbg0KPg0KPg0KPmVhdmVzZHJvcHBl ciByZWFkaW5nIHRoZSB0b2tlbiBjYW4gbWF0Y2ggcmVxdWVzdHMgdG8gcmVzcG9uc2VzDQo+DQo+ DQo+d2hpY2ggY2FuIGJlIHVzZWQgaW4gdHJhZmZpYyBhbmFseXNpcy4gSW4gcGFydGljdWxhciB0 aGlzIGlzIHRydWUNCj4NCj4NCj5mb3Igbm90aWZpY2F0aW9ucywgd2hlcmUgbXVsdGlwbGUgcmVz cG9uc2VzIGFyZSBtYXRjaGVkIHdpdGggb25lDQo+DQo+DQo+cmVxdWVzdC4gTW9kaWZpY2F0aW9u cyBvZiBUb2tlbiBhbmQNCj4NCj4NCj5Ub2tlbiBMZW5ndGggYnkgb24tcGF0aCBhdHRhY2tlcnMg ZHVyaW5nIGEgVURQIGhvcCBtYXkgYmVjb21lIGEgDQo+ZGVuaWFsLW9mLXNlcnZpY2UNCj4NCj4N Cj5hdHRhY2ssIHNpbmNlIGl0IG1heSBwcmV2ZW50IGEgY2xpZW50IHRvIGlkZW50aWZ5IHRvIHdo aWNoDQo+DQo+DQo+cmVxdWVzdCB0aGUgcmVzcG9uc2UgYmVsb25ncyBvciB0byBmaW5kIHRoZSBj b3JyZWN0IGluZm9ybWF0aW9uIHRvDQo+DQo+DQo+dmVyaWZ5IGludGVncml0eSBvZiB0aGUgcmVz cG9uc2UuDQo+DQo+DQoNCg0KDQogICBvICBDb2RlLiAgVGhlIE91dGVyIENvQVAgQ29kZSBvZiBh biBPU0NPUkUgbWVzc2FnZSBpcyBQT1NUIG9yIEZFVENIDQogICAgICBmb3IgcmVxdWVzdHMgd2l0 aCBjb3JyZXNwb25kaW5nIHJlc3BvbnNlIGNvZGVzLiAgVGhlIHVzZSBvZiBGRVRDSA0KICAgICAg cmV2ZWFscyBubyBtb3JlIHRoYW4gd2hhdCBpcyByZXZlYWxlZCBieSB0aGUgT3V0ZXIgT2JzZXJ2 ZSBvcHRpb24uDQogICAgICBDaGFuZ2luZyB0aGUgT3V0ZXIgQ29kZSBtYXkgYmUgYSBkZW5pYWwt b2Ytc2VydmljZSBhdHRhY2sgYnkNCiAgICAgIGNhdXNpbmcgZXJyb3JzIGluIHRoZSBwcm94eSBw cm9jZXNzaW5nLg0KDQogICBvICBUeXBlL01lc3NhZ2UgSUQuICBUaGUgVHlwZS9NZXNzYWdlIElE IGZpZWxkcyBbUkZDNzI1Ml0gcmV2ZWFsDQogICAgICBpbmZvcm1hdGlvbiBhYm91dCB0aGUgVURQ IHRyYW5zcG9ydCBiaW5kaW5nLCBlLmcuIGFuIGVhdmVzZHJvcHBlcg0KICAgICAgcmVhZGluZyB0 aGUgVHlwZSBvciBNZXNzYWdlIElEIGdhaW4gaW5mb3JtYXRpb24gYWJvdXQgaG93IFVEUA0KICAg ICAgbWVzc2FnZXMgYXJlIHJlbGF0ZWQgdG8gZWFjaCBvdGhlci4gIENvQVAgcHJveGllcyBhcmUg YWxsb3dlZCB0bw0KICAgICAgY2hhbmdlIFR5cGUgYW5kIE1lc3NhZ2UgSUQuICBUaGVzZSBtZXNz YWdlIGZpZWxkcyBhcmUgbm90IHByZXNlbnQNCiAgICAgIGluIENvQVAgb3ZlciBUQ1AgW1JGQzgz MjNdLCBhbmQgZG9lcyBub3QgaW1wYWN0IHRoZSByZXF1ZXN0Lw0KICAgICAgcmVzcG9uc2UgbWVz c2FnZS4gIEEgY2hhbmdlIG9mIHRoZXNlIGZpZWxkcyBpbiBhIFVEUCBob3AgaXMgYQ0KICAgICAg ZGVuaWFsLW9mLXNlcnZpY2UgYXR0YWNrLiAgQnkgc2VuZGluZyBhbiBBQ0ssIGFuIGF0dGFja2Vy IGNhbiBtYWtlDQogICAgICB0aGUgZW5kcG9pbnQgYmVsaWV2ZSB0aGF0IHRoZSBvdGhlciBlbmRw b2ludCByZWNlaXZlZCB0aGUgcHJldmlvdXMNCiAgICAgIG1lc3NhZ2UuICBCeSBzZW5kaW5nIGEg UlNULCBhbiBhdHRhY2tlciBtYXkgYmUgYWJsZSB0byBjYW5jZWwgYW4NCiAgICAgIG9ic2VydmF0 aW9uLCBtYWtlIG9uZSBlbmRwb2ludCBiZWxpZXZlIHRoZSBvdGhlciBlbmRwb2ludCBpcw0KICAg ICAgYWxpdmUsIG9yIG1ha2Ugb25lIGVuZHBvaW50IGVuZHBvaW50IGJlbGlldmUgdGhhdCB0aGUg b3RoZXINCiAgICAgIGVuZHBvaW50IGlzIG1pc3Npbmcgc29tZSBjb250ZXh0LiAgQnkgY2hhbmdp bmcgYSBOT04gdG8gYSBDT04sIHRoZQ0KICAgICAgYXR0YWNrZXIgY2FuIGNhdXNlIHRoZSByZWNl aXZpbmcgZW5kcG9pbnQgdG8gcmVzcG9uZCB0byBtZXNzYWdlcw0KICAgICAgZm9yIHdoaWNoIG5v IHJlc3BvbnNlIHdhcyByZXF1ZXN0ZWQuDQoNCiAgIG8gIExlbmd0aC4gIFRoaXMgZmllbGQgY29u dGFpbiB0aGUgbGVuZ3RoIG9mIHRoZSBtZXNzYWdlIFtSRkM4MzIzXQ0KICAgICAgd2hpY2ggbWF5 IGJlIHVzZWQgZm9yIHRyYWZmaWMgYW5hbHlzaXMuICBUaGVzZSBtZXNzYWdlIGZpZWxkcyBhcmUN CiAgICAgIG5vdCBwcmVzZW50IGluIENvQVAgb3ZlciBVRFAsIGFuZCBkb2VzIG5vdCBpbXBhY3Qg dGhlIHJlcXVlc3QvDQogICAgICByZXNwb25zZSBtZXNzYWdlLiAgQSBjaGFuZ2Ugb2YgTGVuZ3Ro IGlzIGEgZGVuaWFsLW9mLXNlcnZpY2UNCiAgICAgIGF0dGFjayBzaW1pbGFyIHRvIGNoYW5naW5n IFRDUCBoZWFkZXIgZmllbGRzLg0KDQpELjQuMi4gIENvQVAgT3B0aW9ucw0KDQogICBvICBNYXgt QWdlLiBUaGUgT3V0ZXIgTWF4LUFnZSBpcyBzZXQgdG8gemVybyB0byBhdm9pZCB1bm5lY2Vzc2Fy eQ0KICAgICAgY2FjaGluZyBvZiBPU0NPUkUgZXJyb3IgcmVzcG9uc2VzLiAgQ2hhbmdpbmcgdGhp cyB2YWx1ZSB0aHVzIG1heQ0KICAgICAgY2F1c2UgdW5uZWNlc3NhcnkgY2FjaGluZy4gIE5vIGFk ZGl0aW9uYWwgaW5mb3JtYXRpb24gaXMgY2FycmllZA0KICAgICAgd2l0aCB0aGlzIG9wdGlvbi4N Cg0KICAgbyAgUHJveHktVXJpL1Byb3h5LVNjaGVtZS4gIFRoZXNlIG9wdGlvbnMgYXJlIHVzZWQg aW4gZm9yd2FyZCBwcm94eQ0KICAgICAgZGVwbG95bWVudHMuICBXaXRoIE9TQ09SRSwgdGhlIFBy b3h5LVVyaSBvcHRpb24gZG9lcyBub3QgY29udGFpbg0KICAgICAgdGhlIFVyaS1QYXRoL1VyaS1R dWVyeSBwYXJ0cyBvZiB0aGUgVVJJLiAgVGhlIG90aGVyIHBhcnRzIG9mDQogICAgICBQcm94eS1V cmkgY2Fubm90IGJlIHByb3RlY3RlZCBzaW5jZSB0aGV5IGFyZSBhbGxvd2VkIHRvIGJlIGNoYW5n ZWQNCiAgICAgIGJ5IGEgZm9yd2FyZCBwcm94eS4gIFRoZSBzZXJ2ZXIgY2FuIHZlcmlmeSB3aGF0 IHNjaGVtZSBpcyB1c2VkIGluDQogICAgICB0aGUgbGFzdCBob3AsIGJ1dCBub3Qgd2hhdCB3YXMg cmVxdWVzdGVkIGJ5IHRoZSBjbGllbnQgb3Igd2hhdCB3YXMNCiAgICAgIHVzZWQgaW4gcHJldmlv dXMgaG9wcy4NCg0KU2VsYW5kZXIsIGV0IGFsLiAgICAgICAgRXhwaXJlcyBKYW51YXJ5IDI3LCAy MDE5ICAgICAgICAgICAgICAgW1BhZ2UgNzddDQoNCkludGVybmV0LURyYWZ0ICAgICAgICAgICAg ICAgICAgIE9TQ09SRSAgICAgICAgICAgICAgICAgICAgICAgIEp1bHkgMjAxOA0KDQogICBvICBV cmktSG9zdC9VcmktUG9ydC4gIEluIGZvcndhcmQgcHJveHkgZGVwbG95bWVudHMsIHRoZSBVcmkt SG9zdC8NCiAgICAgIFVyaS1Qb3J0IG1heSBiZSBjaGFuZ2VkIGJ5IGFuIGFkdmVyc2FyeSwgYW5k IHRoZSBhcHBsaWNhdGlvbiBuZWVkcw0KICAgICAgdG8gaGFuZGxlIHRoZSBjb25zZXF1ZW5jZXMg b2YgdGhhdCAoc2VlIFNlY3Rpb24gNC4xLjMuMikuICBUaGUNCiAgICAgIFVyaS1Ib3N0IG1heSBl aXRoZXIgYmUgb21pdHRlZCwgcmV2ZWFsIGluZm9ybWF0aW9uIGVxdWl2YWxlbnQgdG8NCiAgICAg IHRoYXQgb2YgdGhlIElQIGFkZHJlc3Mgb3IgbW9yZSBwcml2YWN5LXNlbnNpdGl2ZSBpbmZvcm1h dGlvbiwNCiAgICAgIHdoaWNoIGlzIGRpc2NvdXJhZ2VkLg0KDQogICBvICBPYnNlcnZlLiAgVGhl IE91dGVyIE9ic2VydmUgb3B0aW9uIGlzIGludGVuZGVkIGZvciBhIHByb3h5IHRvDQogICAgICBz dXBwb3J0IGZvcndhcmRpbmcgb2YgT2JzZXJ2ZSBtZXNzYWdlcywgYnV0IGlzIGlnbm9yZWQgYnkg dGhlDQogICAgICBlbmRwb2ludHMgc2luY2UgdGhlIElubmVyIE9ic2VydmUgZGV0ZXJtaW5lcyB0 aGUgcHJvY2Vzc2luZyBpbiB0aGUNCiAgICAgIGVuZHBvaW50cy4gIFNpbmNlIHRoZSBQYXJ0aWFs IElWIHByb3ZpZGVzIGFic29sdXRlIG9yZGVyaW5nIG9mDQogICAgICBub3RpZmljYXRpb25zIGl0 IGlzIG5vdCBwb3NzaWJsZSBmb3IgYW4gaW50ZXJtZWRpYXJ5IHRvIHNwb29mDQogICAgICByZW9y ZGVyaW5nIChzZWUgU2VjdGlvbiA0LjEuMy41KS4gIFRoZSBhYnNlbmNlIG9mIFBhcnRpYWwgSVYs DQogICAgICBzaW5jZSBvbmx5IGFsbG93ZWQgZm9yIHRoZSBmaXJzdCBub3RpZmljYXRpb24sIGRv ZXMgbm90IHByZXZlbnQNCiAgICAgIGNvcnJlY3Qgb3JkZXJpbmcgb2Ygbm90aWZpY2F0aW9ucy4g IFRoZSBzaXplIGFuZCBkaXN0cmlidXRpb25zIG9mDQogICAgICBub3RpZmljYXRpb25zIG92ZXIg dGltZSBtYXkgcmV2ZWFsIGluZm9ybWF0aW9uIGFib3V0IHRoZSBjb250ZW50DQogICAgICBvciBu YXR1cmUgb2YgdGhlIG5vdGlmaWNhdGlvbnMuICBDYW5jZWxsYXRpb25zIChTZWN0aW9uIDQuMS4z LjUuMSkNCiAgICAgIGFyZSBub3QgYm91bmQgdG8gdGhlIGNvcnJlc3BvbmRpbmcgcmVnaXN0cmF0 aW9ucyBpbiB0aGUgc2FtZSB3YXkNCiAgICAgIHJlc3BvbnNlcyBhcmUgYm91bmQgdG8gcmVxdWVz dHMgaW4gT1NDT1JFIChzZWUgQXBwZW5kaXggRC4yKSwgYnV0DQogICAgICB0aGF0IGRvZXMgbm90 IG9wZW4gdXAgZm9yIGF0dGFja3MgYmFzZWQgb24gbWlzbWF0Y2hlZA0KICAgICAgY2FuY2VsbGF0 aW9ucywgc2luY2UgW1JGQzc2NDFdIHNwZWNpZmllcyB0aGF0IGZvciBjYW5jZWxsYXRpb25zIHRv DQogICAgICBiZSBhY2NlcHRlZCwgYWxsIG9wdGlvbnMgZXhjZXB0IGZvciBFVGFncyBNVVNUIGJl IHRoZSBzYW1lIChzZWUNCiAgICAgIFNlY3Rpb24gMy42IG9mIFtSRkM3NjQxXSkuICBGb3IgZGlm ZmVyZW50IHRhcmdldCByZXNvdXJjZXMsIHRoZQ0KICAgICAgT1NDT1JFIG9wdGlvbiBpcyBkaWZm ZXJlbnQsIGFuZCBldmVuIGlmIHRoZSBUb2tlbiBpcyBtb2RpZmllZCB0bw0KICAgICAgbWF0Y2gg YSBkaWZmZXJlbnQgb2JzZXJ2YXRpb24sIHN1Y2ggYSBjYW5jZWxsYXRpb24gd291bGQgbm90IGJl DQogICAgICBhY2NlcHRlZC4NCg0KICAgbyAgQmxvY2sxL0Jsb2NrMi9TaXplMS9TaXplMi4gIFRo ZSBPdXRlciBCbG9jayBvcHRpb25zIGVuYWJsZXMNCiAgICAgIGZyYWdtZW50YXRpb24gb2YgT1ND T1JFIG1lc3NhZ2VzIGluIGFkZGl0aW9uIHRvIHNlZ21lbnRhdGlvbg0KICAgICAgcGVyZm9ybWVk IGJ5IHRoZSBJbm5lciBCbG9jayBvcHRpb25zLiAgVGhlIHByZXNlbmNlIG9mIHRoZXNlDQogICAg ICBvcHRpb25zIGluZGljYXRlcyBhIGxhcmdlIG1lc3NhZ2UgYmVpbmcgc2VudCBhbmQgdGhlIG1l c3NhZ2Ugc2l6ZQ0KICAgICAgY2FuIGJlIGVzdGltYXRlZCBhbmQgdXNlZCBmb3IgdHJhZmZpYyBh bmFseXNpcy4gIE1hbmlwdWxhdGluZw0KICAgICAgdGhlc2Ugb3B0aW9ucyBpcyBhIHBvdGVudGlh bCBkZW5pYWwtb2Ytc2VydmljZSBhdHRhY2ssIGUuZy4NCiAgICAgIGluamVjdGlvbiBvZiBhbGxl Z2VkIEJsb2NrIGZyYWdtZW50cy4gIFRoZSBzcGVjaWZpY2F0aW9uIG9mIGENCiAgICAgIG1heGlt dW0gc2l6ZSBvZiBtZXNzYWdlLCBNQVhfVU5GUkFHTUVOVEVEX1NJWkUNCiAgICAgIChTZWN0aW9u IDQuMS4zLjQuMiksIGFib3ZlIHdoaWNoIG1lc3NhZ2VzIHdpbGwgYmUgZHJvcHBlZCwgaXMNCiAg ICAgIGludGVuZGVkIGFzIG9uZSBtZWFzdXJlIHRvIG1pdGlnYXRlIHRoaXMga2luZCBvZiBhdHRh Y2suDQoNCiAgIG8gIE5vLVJlc3BvbnNlLiAgVGhlIE91dGVyIE5vLVJlc3BvbnNlIG9wdGlvbiBp cyB1c2VkIHRvIHN1cHBvcnQNCiAgICAgIHByb3h5IGZ1bmN0aW9uYWxpdHksIHNwZWNpZmljYWxs eSB0byBhdm9pZCBlcnJvciB0cmFuc21pc3Npb25zDQogICAgICBmcm9tIHByb3hpZXMgdG8gY2xp ZW50cywgYW5kIHRvIGF2b2lkIGJhbmR3aWR0aCByZWR1Y3Rpb24gdG8NCiAgICAgIHNlcnZlcnMg YnkgcHJveGllcyBhcHBseWluZyBjb25nZXN0aW9uIGNvbnRyb2wgd2hlbiBub3QgcmVjZWl2aW5n DQogICAgICByZXNwb25zZXMuICBNb2RpZnlpbmcgb3IgaW50cm9kdWNpbmcgdGhpcyBvcHRpb24g aXMgYSBwb3RlbnRpYWwNCiAgICAgIGRlbmlhbC1vZi1zZXJ2aWNlIGF0dGFjayBhZ2FpbnN0IHRo ZSBwcm94eSBvcGVyYXRpb25zLCBidXQgc2luY2UNCiAgICAgIHRoZSBvcHRpb24gaGFzIGFuIElu bmVyIHZhbHVlIGl0cyB1c2UgY2FuIGJlIHNlY3VyZWx5IGFncmVlZA0KICAgICAgYmV0d2VlbiB0 aGUgZW5kcG9pbnRzLiAgVGhlIHByZXNlbmNlIG9mIHRoaXMgb3B0aW9uIGlzIG5vdA0KICAgICAg ZXhwZWN0ZWQgdG8gcmV2ZWFsIGFueSBzZW5zaXRpdmUgaW5mb3JtYXRpb24gYWJvdXQgdGhlIG1l c3NhZ2UNCiAgICAgIGV4Y2hhbmdlLg0KDQpTZWxhbmRlciwgZXQgYWwuICAgICAgICBFeHBpcmVz IEphbnVhcnkgMjcsIDIwMTkgICAgICAgICAgICAgICBbUGFnZSA3OF0NCg0KSW50ZXJuZXQtRHJh ZnQgICAgICAgICAgICAgICAgICAgT1NDT1JFICAgICAgICAgICAgICAgICAgICAgICAgSnVseSAy MDE4DQoNCiAgIG8gIE9TQ09SRS4gIFRoZSBPU0NPUkUgb3B0aW9uIGNvbnRhaW5zIGluZm9ybWF0 aW9uIGFib3V0IHRoZQ0KICAgICAgY29tcHJlc3NlZCBDT1NFIGhlYWRlci4gIENoYW5naW5nIHRo aXMgZmllbGQgbWF5IGNhdXNlIE9TQ09SRQ0KICAgICAgdmVyaWZpY2F0aW9uIHRvIGZhaWwuDQoN CkQuNC4zLiAgRXJyb3IgYW5kIFNpZ25hbGluZyBNZXNzYWdlcw0KDQogICBFcnJvciBtZXNzYWdl cyBvY2N1cnJpbmcgZHVyaW5nIENvQVAgcHJvY2Vzc2luZyBhcmUgcHJvdGVjdGVkIGVuZC10by0N CiAgIGVuZC4gIEVycm9yIG1lc3NhZ2VzIG9jY3VycmluZyBkdXJpbmcgT1NDT1JFIHByb2Nlc3Np bmcgYXJlIG5vdA0KICAgYWx3YXlzIHBvc3NpYmxlIHRvIHByb3RlY3QsIGUuZy4gaWYgdGhlIHJl Y2VpdmluZyBlbmRwb2ludCBjYW5ub3QNCiAgIGxvY2F0ZSB0aGUgcmlnaHQgc2VjdXJpdHkgY29u dGV4dC4gIEZvciB0aGlzIHNldHRpbmcsIHVucHJvdGVjdGVkDQogICBlcnJvciBtZXNzYWdlcyBh cmUgYWxsb3dlZCBhcyBzcGVjaWZpZWQgdG8gcHJldmVudCBleHRlbnNpdmUNCiAgIHJldHJhbnNt aXNzaW9ucy4gIFRob3NlIGVycm9yIG1lc3NhZ2VzIGNhbiBiZSBzcG9vZmVkIG9yIG1hbmlwdWxh dGVkLA0KICAgd2hpY2ggaXMgYSBwb3RlbnRpYWwgZGVuaWFsLW9mLXNlcnZpY2UgYXR0YWNrLg0K DQogICBTaWduYWxpbmcgbWVzc2FnZXMgdXNlZCBpbiBDb0FQIG92ZXIgVENQIFtSRkM4MzIzXSBh cmUgaW50ZW5kZWQgdG8gYmUNCiAgIGhvcC1ieS1ob3A7IHNwb29maW5nIHNpZ25hbGluZyBtZXNz YWdlcyBjYW4gYmUgdXNlZCBhcyBhIGRlbmlhbC1vZi0NCiAgIHNlcnZpY2UgYXR0YWNrIG9mIGEg VENQIGNvbm5lY3Rpb24uDQoNCkQuNC40LiAgSFRUUCBNZXNzYWdlIEZpZWxkcw0KDQogICBJbiBj b250cmFzdCB0byBDb0FQLCB3aGVyZSBPU0NPUkUgZG9lcyBub3QgcHJvdGVjdCBoZWFkZXIgZmll bGRzIHRvDQogICBlbmFibGUgQ29BUC1Db0FQIHByb3h5IG9wZXJhdGlvbnMsIHRoZSB1c2Ugb2Yg T1NDT1JFIHdpdGggSFRUUCBpcw0KICAgcmVzdHJpY3RlZCB0byB0cmFuc3BvcnRpbmcgYSBwcm90 ZWN0ZWQgQ29BUCBtZXNzYWdlIG92ZXIgYW4gSFRUUCBob3AuDQogICBBbnkgdW5wcm90ZWN0ZWQg SFRUUCBtZXNzYWdlIGZpZWxkcyBtYXkgcmV2ZWFsIGluZm9ybWF0aW9uIGFib3V0IHRoZQ0KICAg dHJhbnNwb3J0IG9mIHRoZSBPU0NPUkUgbWVzc2FnZSBhbmQgZW5hYmxlIHZhcmlvdXMgZGVuaWFs LW9mLXNlcnZpY2UNCiAgIGF0dGFja3MuICBJdCBpcyByZWNvbW1lbmRlZCB0byBhZGRpdGlvbmFs bHkgdXNlIFRMUyBbUkZDNTI0Nl0gZm9yDQogICBIVFRQIGhvcHMsIHdoaWNoIGVuYWJsZXMgZW5j cnlwdGlvbiBhbmQgaW50ZWdyaXR5IHByb3RlY3Rpb24gb2YNCiAgIGhlYWRlcnMsIGJ1dCBzdGls bCBsZWF2ZXMgc29tZSBpbmZvcm1hdGlvbiBmb3IgdHJhZmZpYyBhbmFseXNpcy4NCg0KQXBwZW5k aXggRS4gIENEREwgU3VtbWFyeQ0KDQoNCg0KDQo= From nobody Thu Aug 16 06:38:38 2018 Return-Path: X-Original-To: secdir@ietf.org Delivered-To: secdir@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id A9EED13106D for ; Thu, 16 Aug 2018 06:38:29 -0700 (PDT) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: Tero Kivinen To: X-Test-IDTracker: no X-IETF-IDTracker: 6.83.1 Auto-Submitted: auto-generated Precedence: bulk Reply-To: secdir-secretary@mit.edu Message-ID: <153442670968.12058.833810214875540347.idtracker@ietfa.amsl.com> Date: Thu, 16 Aug 2018 06:38:29 -0700 Archived-At: Subject: [secdir] Assignments X-BeenThere: secdir@ietf.org X-Mailman-Version: 2.1.27 List-Id: Security Area Directorate List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 16 Aug 2018 13:38:37 -0000 Review instructions and related resources are at: http://tools.ietf.org/area/sec/trac/wiki/SecDirReview Last calls: Reviewer LC end Draft John Bradley 2018-06-18 draft-ietf-bfd-multipoint-active-tail-09 Daniel Franke 2018-06-28 draft-ietf-netconf-rfc7895bis-06 Daniel Gillmor 2018-06-25 draft-ietf-dnsop-session-signal-14 Daniel Gillmor 2018-03-19 draft-gutmann-scep-10 Phillip Hallam-Baker 2018-07-10 draft-ietf-codec-ambisonics-09 Catherine Meadows 2018-07-30 draft-sahib-451-new-protocol-elements-03 Russ Mundy 2018-08-13 draft-ietf-dnsop-terminology-bis-12 Russ Mundy 2017-09-14 draft-spinosa-urn-lex-13 Sandra Murphy 2018-08-10 draft-ietf-sidrops-rpki-tree-validation-02 Radia Perlman 2018-08-21 draft-ietf-anima-reference-model-06 Vincent Roca 2018-08-29 draft-ietf-ospf-segment-routing-msd-15 Kyle Rose 2018-08-29 draft-ietf-lisp-rfc6830bis-14 Joseph Salowey 2018-08-28 draft-ietf-tcpm-alternativebackoff-ecn-09 Stefan Santesson 2018-08-24 draft-ietf-ipsecme-split-dns-12 Tina Tsou 2018-05-21 draft-ietf-v6ops-conditional-ras-07 Samuel Weiler 2018-05-21 draft-ietf-bfd-multipoint-18 Early review requests: Reviewer Due Draft Daniel Franke 2018-01-31 draft-ietf-intarea-provisioning-domains-00 Next in the reviewer rotation: Yaron Sheffer Rifaat Shekh-Yusef Melinda Shore Valery Smyslov Robert Sparks Takeshi Takahashi Tina Tsou Sean Turner Carl Wallace David Waltermire From nobody Fri Aug 17 17:19:44 2018 Return-Path: X-Original-To: secdir@ietfa.amsl.com Delivered-To: secdir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C03A3130FF0 for ; Fri, 17 Aug 2018 17:19:36 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.599 X-Spam-Level: X-Spam-Status: No, score=-2.599 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_LOW=-0.7, URIBL_BLOCKED=0.001] autolearn=unavailable autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 9F6VBR1BzYxC for ; Fri, 17 Aug 2018 17:19:35 -0700 (PDT) Received: from smtp.rcn.com (smtp.rcn.com [69.168.97.78]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 6A67D130FF4 for ; Fri, 17 Aug 2018 17:19:33 -0700 (PDT) X_CMAE_Category: , , X-CNFS-Analysis: v=2.2 cv=KaWQikQD c=1 sm=1 tr=0 a=OXtaa+9CFT7WVSERtyqzJw==:117 a=OXtaa+9CFT7WVSERtyqzJw==:17 a=KGjhK52YXX0A:10 a=IkcTkHD0fZMA:10 a=NTnny0joGdQA:10 a=dapMudl6Dx4A:10 a=bmmO2AaSJ7QA:10 a=48vgC7mUAAAA:8 a=BTUBnpS-AAAA:8 a=v_OVUiDecUYEfxGDTDQA:9 a=QEXdDO2ut3YA:10 a=w1C3t2QeGrPiZgrLijVG:22 a=pblkFgjdBCuYZ9-HdJ6i:22 X-CM-Score: 0 X-Scanned-by: Cloudmark Authority Engine X-Authed-Username: ZHNlb21uQHJjbi5jb20= Authentication-Results: smtp02.rcn.cmh.synacor.com header.from=david+work@mandelberg.org; sender-id=neutral Authentication-Results: smtp02.rcn.cmh.synacor.com smtp.mail=david+work@mandelberg.org; spf=neutral; sender-id=neutral Authentication-Results: smtp02.rcn.cmh.synacor.com smtp.user=dseomn@rcn.com; auth=pass (LOGIN) Received-SPF: neutral (smtp02.rcn.cmh.synacor.com: 209.6.43.168 is neither permitted nor denied by domain of mandelberg.org) Received: from [209.6.43.168] ([209.6.43.168:59462] helo=uriel.mandelberg.org) by smtp.rcn.com (envelope-from ) (ecelerity 3.6.25.56547 r(Core:3.6.25.0)) with ESMTPSA (cipher=DHE-RSA-AES256-GCM-SHA384) id 44/6B-45687-216677B5; Fri, 17 Aug 2018 20:19:31 -0400 Received: from [0.0.0.0] (DD-WRT [192.168.1.1]) by uriel.mandelberg.org (Postfix) with ESMTPSA id 47CF91C605C; Fri, 17 Aug 2018 20:19:26 -0400 (EDT) To: Kent Watsen , "draft-ietf-netconf-zerotouch.all@ietf.org" , "iesg@ietf.org" , "secdir@ietf.org" References: <361393b0-6666-08ff-bdf4-3ba3bf4323c7@mandelberg.org> <47EEE9B6-5BC2-4A1F-ABB2-2ACB1C494545@juniper.net> <4579f9bf-0ead-a6af-dc80-a841527414eb@mandelberg.org> <51E98D22-1DBF-4069-A750-90987EB96B0D@juniper.net> From: David Mandelberg Message-ID: Date: Fri, 17 Aug 2018 20:19:18 -0400 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Thunderbird/52.9.1 MIME-Version: 1.0 In-Reply-To: Content-Type: text/plain; charset=utf-8; format=flowed Content-Language: en-US Content-Transfer-Encoding: 7bit Archived-At: Subject: Re: [secdir] secdir review of draft-ietf-netconf-zerotouch-22 X-BeenThere: secdir@ietf.org X-Mailman-Version: 2.1.27 Precedence: list List-Id: Security Area Directorate List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 18 Aug 2018 00:19:37 -0000 On 08/14/2018 09:59 PM, Kent Watsen wrote: > > Hi David, > > Trimming down to just the remaining items... > > >>> I was writing the Security Considerations for this when it seemed >>> that the better thing to do here is to instead add "not-before" and >>> "not-after" leafs to the zerotouch information artifact. The draft >>> would then explain that devices MUST ensure the current time is in >>> between. >>> >>> Would such an addition resolve this issue for you? >> >> Yes, that would work. It probably makes sense to say something in >> the security considerations about keeping those validity intervals >> short. >> >> If you prefer to leave the data formats and implementations unchanged, >> you could also consider using per-CMS EE certificates, like the RPKI >> does: https://tools.ietf.org/html/rfc6480#section-2.3. (I haven't >> thought about how compatible that method is with zerotouch, I'm just >> mentioning it as an alternative in case it happens to be easier for you.) > > Ah, this is an interesting idea. Actually, I'd say that there is a > near 1-1 correspondence between EE certificates and what this draft > is calling the owner cert. Section 3.2 says about owner certs: > > The owner certificate CMS structure MUST contain the owner > certificate itself, as well as all intermediate certificates leading > to the 'pinned-domain-cert' certificate specified in the ownership > voucher. The owner certificate artifact MAY optionally include the > 'pinned-domain-cert' as well. > > While we conceptually think of the owner certificate as a singleton, > there is nothing in the draft that prevents a unique owner certificate > per device, which would allow for per-device validity and revocation to > be supported. > > This being the case, I think that the following Security Consideration > section should be added: > > 9.11. Validity Period for Zero Touch Information > > Zero touch information does not specify a validity period. For > instance, neither redirect information nor onboarding information > enable "not-before" or "not-after" values to be specified, and > neither artifact alone can be revoked. > > For unsigned data provided by an untrusted source of bootstrapping > data, it is not meaningful to discuss its validity period when the > information itself has no authenticity and may have come from > anywhere. > > For unsigned data provided by a trusted source of bootstrapping data, > the availability of the data is the only measure of it being current. > Since the untrusted data comes from a trusted source, its current > availability is meaningful. (nit) The only trusted sources of bootstrapping data are TLS servers, right? I think this paragraph would be a bit stronger if you explicitly mentioned that TLS's integrity guarantee and replay protection are what you're relying on here. > For signed data, whether provided by an untrusted or trusted source > of bootstrapping data, the validity is constrained by the validity of > the both the ownership voucher and owner certificate used to > authenticate it. > > The ownership voucher's validity is primarily constrained by the > ownership voucher's "created-on" and "expires-on" nodes. While > [RFC8366] recommends short-lived vouchers (see Section 6.1), the > "expires-on" node may be set to any point in the future, or omitted > altogether to indicate that the voucher never expires. The ownership > voucher's validity is secondarily constrained by the manufacturer's > PKI used to sign the voucher; whilst an ownership voucher cannot be > revoked directly, the PKI used to sign it may be. > > The owner certificate's validity is primarily constrained by the > X.509's validity field, the "notBefore" and "notAfter" values, as > specified by the certificate authority that signed it. The owner > certificate's validity is secondarily constrained by the validity of > the PKI used to sign the voucher. Owner certificates may be revoked > directly. > > For owners that wish to have maximum flexibility in their ability to > specify and constrain the validity of signed data, it is RECOMMENDED > that a unique owner certificate is created for each signed artifact. > Not only does this enable a validity period to be specified, for each > artifact, but it also enables to the validity of each artifact to be > revoke. > > What do you think? Looks good! >>> Do you think it's worth adding a warning to operators somewhere to >>> remind them to change the flag? Or maybe the "device SHOULD report a >>> warning if the bootstrapping completes successfully but zerotouch >>> bootstrapping is still enabled"? > > I forgot to respond to this comment of your before. To address this > comment, I added the following: > > If the onboarding information was obtained from a trusted bootstrap > server, and the result of the bootstrapping process did not disable > the "flag to enable zerotouch bootstrapping" described in > Section 5.1, the device SHOULD send an "bootstrap-warning" progress > report. Thanks! >>>> I think it's already clear what an error in paragraph 6 is. What I found >>>> unclear was what to do with errors in paragraphs 6 or 7. Yes, don't go >>>> on to the next step, but what about: In paragraph 6, should the device >>>> rollback any partial config update if there's an error? In paragraph 7, >>>> should the device rollback all config from paragraph 6 if there's an error? >>> >>> This very same issue was raised to me separately and my response has been >>> to essentially rewrite section 5.6 to be crystal clear on how errors are >>> handled, especially with regard to state retained. Please see attached >>> for a preview of -23. >> >> Much better, thanks! > > FIW, this text is going thru a WG churn, but the essence of what I attached > before is being retained. Sounds good. -- https://david.mandelberg.org/ From nobody Sun Aug 19 10:59:51 2018 Return-Path: X-Original-To: secdir@ietf.org Delivered-To: secdir@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 63C39130E91; Sun, 19 Aug 2018 10:59:35 -0700 (PDT) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: Stefan Santesson To: Cc: ipsec@ietf.org, draft-ietf-ipsecme-split-dns.all@ietf.org, ietf@ietf.org X-Test-IDTracker: no X-IETF-IDTracker: 6.83.1 Auto-Submitted: auto-generated Precedence: bulk Message-ID: <153470157533.21344.975291793985145087@ietfa.amsl.com> Date: Sun, 19 Aug 2018 10:59:35 -0700 Archived-At: Subject: [secdir] Secdir last call review of draft-ietf-ipsecme-split-dns-12 X-BeenThere: secdir@ietf.org X-Mailman-Version: 2.1.27 List-Id: Security Area Directorate List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 19 Aug 2018 17:59:36 -0000 Reviewer: Stefan Santesson Review result: Has Nits In agreement with nit comments in the Gen-Art review. 1) Section 2. Background seems to be a duplication with the introduction section and could probably be merged with this section. 2) In general I wander wether the requirement level "SHOULD" is to week in some places. The concern (and question) here is whether this may lead to uncertainty whether a Split-DNS configuration always will provide the expected level of security (or fail), or wether such configuration may lead to successful communication without the expected level of security ( in compliance with this specification). From nobody Sun Aug 19 12:09:10 2018 Return-Path: X-Original-To: secdir@ietfa.amsl.com Delivered-To: secdir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C06D9130E97; Sun, 19 Aug 2018 12:08:56 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2 X-Spam-Level: X-Spam-Status: No, score=-2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=nohats.ca Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id P2C2BuA2D8ZK; Sun, 19 Aug 2018 12:08:55 -0700 (PDT) Received: from mx.nohats.ca (mx.nohats.ca [IPv6:2a03:6000:1004:1::68]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 2772A130DD6; Sun, 19 Aug 2018 12:08:55 -0700 (PDT) Received: from localhost (localhost [IPv6:::1]) by mx.nohats.ca (Postfix) with ESMTP id 41tmgk1QYYzF1G; Sun, 19 Aug 2018 21:08:50 +0200 (CEST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=nohats.ca; s=default; t=1534705730; bh=cLlHkqbI0WvWvX5IUJF8tor+t4io2iTwxqE7LMxce74=; h=Date:From:To:cc:Subject:In-Reply-To:References; b=Mma7pO1PDuCZX2xO0clW99DXLJLJJ5hWJzfhKqSBKJ6ovqFa4NDWnMZxj4V0awl4y /LR8O1Ss3BAu+Llb61grqeDxdM1gYYcSaXtIPYmqq03N/1hfhrO/RfPIx+EWajpWTu gXCwb6TOXJVjkW2NGUw/7BjrRU8ZrJzV2I0O1hLI= X-Virus-Scanned: amavisd-new at mx.nohats.ca Received: from mx.nohats.ca ([IPv6:::1]) by localhost (mx.nohats.ca [IPv6:::1]) (amavisd-new, port 10024) with ESMTP id q7TQHIh6Kjxe; Sun, 19 Aug 2018 21:08:48 +0200 (CEST) Received: from bofh.nohats.ca (bofh.nohats.ca [76.10.157.69]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by mx.nohats.ca (Postfix) with ESMTPS; Sun, 19 Aug 2018 21:08:47 +0200 (CEST) Received: by bofh.nohats.ca (Postfix, from userid 1000) id 71F9EB379D; Sun, 19 Aug 2018 15:08:46 -0400 (EDT) DKIM-Filter: OpenDKIM Filter v2.11.0 bofh.nohats.ca 71F9EB379D Received: from localhost (localhost [127.0.0.1]) by bofh.nohats.ca (Postfix) with ESMTP id 6779340D6EB6; Sun, 19 Aug 2018 15:08:46 -0400 (EDT) Date: Sun, 19 Aug 2018 15:08:46 -0400 (EDT) From: Paul Wouters To: Stefan Santesson cc: secdir@ietf.org, ipsec@ietf.org, draft-ietf-ipsecme-split-dns.all@ietf.org, ietf@ietf.org In-Reply-To: <153470157533.21344.975291793985145087@ietfa.amsl.com> Message-ID: References: <153470157533.21344.975291793985145087@ietfa.amsl.com> User-Agent: Alpine 2.21 (LRH 202 2017-01-01) MIME-Version: 1.0 Content-Type: text/plain; charset=US-ASCII; format=flowed Archived-At: Subject: Re: [secdir] Secdir last call review of draft-ietf-ipsecme-split-dns-12 X-BeenThere: secdir@ietf.org X-Mailman-Version: 2.1.27 Precedence: list List-Id: Security Area Directorate List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 19 Aug 2018 19:08:57 -0000 On Sun, 19 Aug 2018, Stefan Santesson wrote: > Reviewer: Stefan Santesson > Review result: Has Nits Thanks for your review. > In agreement with nit comments in the Gen-Art review. > > 1) Section 2. Background seems to be a duplication with the introduction > section and could probably be merged with this section. I agree. It is so small we can pull it into the Introduction. > 2) In general I wander wether the requirement level "SHOULD" is to week in some > places. The concern (and question) here is whether this may lead to uncertainty > whether a Split-DNS configuration always will provide the expected level of > security (or fail), or wether such configuration may lead to successful > communication without the expected level of security ( in compliance with this > specification). Unfortunately, this is the case because of the original text regarding CFG requests and replies that basically allow each party to omit or send these completely ignoring which of these CFG's the other party decided to include. We actually had to loosen up the language or otherwise we would be modifying the behaviour specified in 5996/7296. Paul From nobody Mon Aug 20 07:41:23 2018 Return-Path: X-Original-To: secdir@ietfa.amsl.com Delivered-To: secdir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 163B8130F62; Mon, 20 Aug 2018 07:41:14 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.711 X-Spam-Level: X-Spam-Status: No, score=-2.711 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001, T_DKIMWL_WL_HIGH=-0.01] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=juniper.net Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id EiTs0Nmfh_wo; Mon, 20 Aug 2018 07:41:12 -0700 (PDT) Received: from mx0b-00273201.pphosted.com (mx0b-00273201.pphosted.com [67.231.152.164]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 0817F130E3F; Mon, 20 Aug 2018 07:41:11 -0700 (PDT) Received: from pps.filterd (m0108160.ppops.net [127.0.0.1]) by mx0b-00273201.pphosted.com (8.16.0.22/8.16.0.22) with SMTP id w7KEe1m6013270; Mon, 20 Aug 2018 07:41:11 -0700 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=juniper.net; h=from : to : subject : date : message-id : references : in-reply-to : content-type : content-id : content-transfer-encoding : mime-version; s=PPS1017; bh=N5VMdoht7WKybc8z6sJcPvwmkUqea2FA5lsnyg8mqv8=; b=SSFONBMM68B3NbmSK0SzKjxA5v7WhO92SJsDO3A72NxXeqK6LTNHg69m+LqGtUTrlVzD uRo1GkCTfilfuZO81BbbnHN1zwJFy7cS77CFYdFonzBoxv2P1jxZapVCRtk1dtFm3/18 eShSkiShYdOr1otq0sdMviVvMYx8VtMHozmAwliQLtNQN1JkTqOBFl8KiMKVdMcOJtq5 /GOkXhGzOQZciyEGkBIYhTsHKSEtymWELt14XK0NbUJ533RKFJk6Eswt4TeC8hWj0h2D xgRvsZqMzQyBPZUpMk14JCf4lfykXpwJ8FC8FO30WCWMr3DH5uv/pCdWAIX5u0B8/m8/ ng== Received: from nam02-cy1-obe.outbound.protection.outlook.com (mail-cys01nam02lp0053.outbound.protection.outlook.com [207.46.163.53]) by mx0b-00273201.pphosted.com with ESMTP id 2kyw6wr8vf-1 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-SHA384 bits=256 verify=NOT); Mon, 20 Aug 2018 07:41:10 -0700 Received: from DM6PR05MB4665.namprd05.prod.outlook.com (20.176.109.202) by DM6PR05MB4811.namprd05.prod.outlook.com (20.176.111.220) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.1059.20; Mon, 20 Aug 2018 14:41:09 +0000 Received: from DM6PR05MB4665.namprd05.prod.outlook.com ([fe80::14ab:9da7:be4a:fbaf]) by DM6PR05MB4665.namprd05.prod.outlook.com ([fe80::14ab:9da7:be4a:fbaf%4]) with mapi id 15.20.1080.010; Mon, 20 Aug 2018 14:41:09 +0000 From: Kent Watsen To: David Mandelberg , "draft-ietf-netconf-zerotouch.all@ietf.org" , "iesg@ietf.org" , "secdir@ietf.org" Thread-Topic: secdir review of draft-ietf-netconf-zerotouch-22 Thread-Index: AQHUNDtdBjpwOvULXkm7/Nl6y9h5TKTEqb0AgAPSa4A= Date: Mon, 20 Aug 2018 14:41:09 +0000 Message-ID: References: <361393b0-6666-08ff-bdf4-3ba3bf4323c7@mandelberg.org> <47EEE9B6-5BC2-4A1F-ABB2-2ACB1C494545@juniper.net> <4579f9bf-0ead-a6af-dc80-a841527414eb@mandelberg.org> <51E98D22-1DBF-4069-A750-90987EB96B0D@juniper.net> In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/f.20.0.170309 x-originating-ip: [66.129.241.12] x-ms-publictraffictype: Email x-microsoft-exchange-diagnostics: 1; DM6PR05MB4811; 6:FLltVbxKYQiHbQky3TCmkaCT42cnCbkFhIjFGQHB+de7mSNr1EQ2xxC+RLKDiM5ZBwkuunleO1PjvUkmIUsX70qAaW02njXfZlbDhuQXGbc/mNtw261vu86AovDc7WykY/HQ7SnliafQxUZd+DA8MLAAo4Ov4zweUJiv7CFhcUNi7jMJ3MnqhEtb2f94McU+Se5u/mrqYQWAJCxab1ojMFb/p9sOMyXq/8G/Gde8QkQlQHNGBd2c2EzyIqkO2ymDtgfdNTPswPAK6K3QceQBhQvrMiN4sp1f+36CTvW+kydt7by+UNriNBrglbHlX0E9EBmVq8rO59fe1JEOKQ9qHHWoJJ16YoyccpkbtgsE2pAL5WIutZjmyDOxKG7HAqk5LQnnS1lgGLTuhFicOCetmb/9G4Lbu1qUr4IA6B9c1VMXD2ZQi45ptX2xGrGfLttIfUm03dUVlRRgPEFNxb/new==; 5:tBcPmyEPnaZktpjLeK5qYcOpjFmqDTT1iXEK4yP5LfQw9/JqIa2ufZyJHaFPpKeRYKmf3cU2EB3iTiOpTFu8kbCq4Qz8J/XAs+V8WlZQaz4Hcras3TDcnrhyjqgPEyR6HRiiS9Qual50GMGPHAhHBdOXb35U3h2qxnVUKBvSfG0=; 7:Gti6/XCyA2/Mz4jMksoLGeZqu4oKyoGeg+WHTmDOJvVig7d3igV7fEe3TF5m1oaPtTph0pId8TUNIiC4HcOzKoVl0nRTFPuwMnuTXOTiQF+UYD8P94w3N+WPWZluoWXdBLkPi4BOySrMIDSv1v+xCXanZHbz2wBMHpPp16peTGU76LhKcXwYjqp+i2DBupRPwI9wVyAbUDq9Yz8B+HLbGu8FQQrm+REumEO39v4p/16Nq51O3IZbonkEBxRQdwmD x-ms-exchange-antispam-srfa-diagnostics: SOS; x-ms-office365-filtering-correlation-id: c05d89ec-4300-446f-388f-08d606aaf7d1 x-ms-office365-filtering-ht: Tenant x-microsoft-antispam: BCL:0; PCL:0; RULEID:(7020095)(4652040)(8989137)(4534165)(4627221)(201703031133081)(201702281549075)(8990107)(5600074)(711020)(4618075)(2017052603328)(7153060)(7193020); SRVR:DM6PR05MB4811; x-ms-traffictypediagnostic: DM6PR05MB4811: x-microsoft-antispam-prvs: x-exchange-antispam-report-test: UriScan:(158342451672863); x-ms-exchange-senderadcheck: 1 x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(8211001083)(20180801012)(6040522)(2401047)(5005006)(8121501046)(93006095)(93001095)(3231311)(944501410)(52105095)(10201501046)(3002001)(6055026)(149027)(150027)(6041310)(20161123560045)(20161123564045)(20161123562045)(20161123558120)(201703131423095)(201702281528075)(20161123555045)(201703061421075)(201703061406153)(201708071742011)(7699016); SRVR:DM6PR05MB4811; BCL:0; PCL:0; RULEID:; SRVR:DM6PR05MB4811; x-forefront-prvs: 0770F75EA9 x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(366004)(346002)(376002)(136003)(39860400002)(396003)(199004)(69224002)(189003)(26005)(66066001)(83716003)(186003)(81156014)(81166006)(6506007)(102836004)(76176011)(99286004)(105586002)(82746002)(33656002)(2616005)(2906002)(5250100002)(25786009)(93886005)(106356001)(3846002)(6116002)(446003)(11346002)(2501003)(8936002)(5660300001)(6486002)(6512007)(7736002)(14454004)(305945005)(8676002)(316002)(2900100001)(229853002)(36756003)(110136005)(58126008)(478600001)(6436002)(6246003)(68736007)(486006)(2201001)(86362001)(476003)(256004)(53936002)(97736004); DIR:OUT; SFP:1102; SCL:1; SRVR:DM6PR05MB4811; H:DM6PR05MB4665.namprd05.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; A:1; MX:1; received-spf: None (protection.outlook.com: juniper.net does not designate permitted sender hosts) x-microsoft-antispam-message-info: IX0qo19xWngIHdNLtQS91pGZMBbBYOPe7OYzyO6v9NozBoZHZXge+U1QYKXERIpZ0NAn9Xxy/eiPY0h2aWLwThlQ80oO9AW5XzBdMpkvHTLn3CljBxCsT/hK7I276uFu2pbq2K5Kj6zOfyxa417w8zT8jXF9VM0F6hxGOQSWmqNgnGM5qvRY3++VhwCuto6jk+5R1476OK2KZH7xle8xldtD9G3Uj2BlmwjihCJoj+GfTzZAxDC75Knk2jeZlybQMhYRh4xhCg4Nw//KZgR5bnqyMGdohiRn0JDsKFiQZvbKIjwMR1udhG4eKnmqOXzVRp0FqGnKsLZIV91X9ULzi8Zdl9QaO6a2n5Vn0vpvsC0= spamdiagnosticoutput: 1:99 spamdiagnosticmetadata: NSPM Content-Type: text/plain; charset="utf-8" Content-ID: <483BE572163BF343845992B44A7E8702@namprd05.prod.outlook.com> Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-OriginatorOrg: juniper.net X-MS-Exchange-CrossTenant-Network-Message-Id: c05d89ec-4300-446f-388f-08d606aaf7d1 X-MS-Exchange-CrossTenant-originalarrivaltime: 20 Aug 2018 14:41:09.1082 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: bea78b3c-4cdb-4130-854a-1d193232e5f4 X-MS-Exchange-Transport-CrossTenantHeadersStamped: DM6PR05MB4811 X-Proofpoint-Virus-Version: vendor=fsecure engine=2.50.10434:, , definitions=2018-08-20_05:, , signatures=0 X-Proofpoint-Spam-Details: rule=outbound_spam_notspam policy=outbound_spam score=0 priorityscore=1501 malwarescore=0 suspectscore=0 phishscore=0 bulkscore=0 spamscore=0 clxscore=1015 lowpriorityscore=0 mlxscore=0 impostorscore=0 mlxlogscore=885 adultscore=0 classifier=spam adjust=0 reason=mlx scancount=1 engine=8.0.1-1807170000 definitions=main-1808200158 Archived-At: Subject: Re: [secdir] secdir review of draft-ietf-netconf-zerotouch-22 X-BeenThere: secdir@ietf.org X-Mailman-Version: 2.1.27 Precedence: list List-Id: Security Area Directorate List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 20 Aug 2018 14:41:14 -0000 SGkgRGF2aWQsDQoNClJlc29sdmluZyB0aGUgcmVtYWluaW5nIG5pdC4NCg0KPj4gICAgIEZvciB1 bnNpZ25lZCBkYXRhIHByb3ZpZGVkIGJ5IGEgdHJ1c3RlZCBzb3VyY2Ugb2YgYm9vdHN0cmFwcGlu ZyBkYXRhLA0KPj4gICAgIHRoZSBhdmFpbGFiaWxpdHkgb2YgdGhlIGRhdGEgaXMgdGhlIG9ubHkg bWVhc3VyZSBvZiBpdCBiZWluZyBjdXJyZW50Lg0KPj4gICAgIFNpbmNlIHRoZSB1bnRydXN0ZWQg ZGF0YSBjb21lcyBmcm9tIGEgdHJ1c3RlZCBzb3VyY2UsIGl0cyBjdXJyZW50DQo+PiAgICAgYXZh aWxhYmlsaXR5IGlzIG1lYW5pbmdmdWwuDQo+DQo+IChuaXQpIFRoZSBvbmx5IHRydXN0ZWQgc291 cmNlcyBvZiBib290c3RyYXBwaW5nIGRhdGEgYXJlIFRMUyBzZXJ2ZXJzLCANCj4gcmlnaHQ/IEkg dGhpbmsgdGhpcyBwYXJhZ3JhcGggd291bGQgYmUgYSBiaXQgc3Ryb25nZXIgaWYgeW91IGV4cGxp Y2l0bHkgDQo+IG1lbnRpb25lZCB0aGF0IFRMUydzIGludGVncml0eSBndWFyYW50ZWUgYW5kIHJl cGxheSBwcm90ZWN0aW9uIGFyZSB3aGF0IA0KPiB5b3UncmUgcmVseWluZyBvbiBoZXJlLg0KDQpO b3cgdGhlIHBhcmFncmFwaCBzYXlzOg0KDQogICBGb3IgdW5zaWduZWQgZGF0YSBwcm92aWRlZCBi eSBhIHRydXN0ZWQgc291cmNlIG9mIGJvb3RzdHJhcHBpbmcgZGF0YQ0KICAgKGkuZS4sIGEgYm9v dHN0cmFwIHNlcnZlciksIHRoZSBhdmFpbGFiaWxpdHkgb2YgdGhlIGRhdGEgaXMgdGhlIG9ubHkN CiAgIG1lYXN1cmUgb2YgaXQgYmVpbmcgY3VycmVudC4gIFNpbmNlIHRoZSB1bnRydXN0ZWQgZGF0 YSBjb21lcyBmcm9tIGENCiAgIHRydXN0ZWQgc291cmNlLCBpdHMgY3VycmVudCBhdmFpbGFiaWxp dHkgaXMgbWVhbmluZ2Z1bCBhbmQsIHNpbmNlDQogICBib290c3RyYXAgc2VydmVycyB1c2UgVExT LCB0aGUgY29udGVudHMgb2YgdGhlIGV4Y2hhbmdlIGNhbm5vdCBiZQ0KICAgbW9kaWZpZWQgb3Ig cmVwbGF5ZWQuDQoNCk9rYXk/DQoNClRoYW5rcyBmb3IgYWxsIHRoZSBncmVhdCBzdWdnZXN0aW9u cyENCg0KS2VudA0KIA0KDQoNCg0K From nobody Tue Aug 21 21:29:50 2018 Return-Path: X-Original-To: secdir@ietfa.amsl.com Delivered-To: secdir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 837A8130DF9; Tue, 21 Aug 2018 21:29:49 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.999 X-Spam-Level: X-Spam-Status: No, score=-1.999 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ysBuRuN7VfBc; Tue, 21 Aug 2018 21:29:48 -0700 (PDT) Received: from mail-lf1-x133.google.com (mail-lf1-x133.google.com [IPv6:2a00:1450:4864:20::133]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id A9125130DE7; Tue, 21 Aug 2018 21:29:47 -0700 (PDT) Received: by mail-lf1-x133.google.com with SMTP id c7-v6so448858lfe.0; Tue, 21 Aug 2018 21:29:47 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:from:date:message-id:subject:to; bh=iaC6FgStpfZO0SNATmKH9p5uuM+fqeAfAc/6R5Pu4KI=; b=G+Rj7QhJpdZDpgKq2sZ/qo/ph9YxbfK96ZcyOlN4Es6FUPECg+MzS7ZXNz+4H0771i 3HpiWKrlZwwd037DldobqCv4xWVPBeAvPyF6+NjBBmmNKYUfusubeVEQF6PHjyM7k3cE cq+hscfcs8NL/jWRfGb1HHvkHDRt3VzNoRzHYKbhGGUfhIgKpnJRM8GNjb+4nIUz55EJ dN4FD+31+SVZefJ3zlr9dU9euhigdg5BLtaGzDKQ6Gs5IIJQUlB6NXEIGq96Osf5xDbF gPN4KbgcJeKFRXO6utuOXmZwQ6HMr2+TJANgxIWipc1LK7cCE/1fP8NrlZpO8DkgicZg V/GA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:from:date:message-id:subject:to; bh=iaC6FgStpfZO0SNATmKH9p5uuM+fqeAfAc/6R5Pu4KI=; b=UeCcs7+pYY339hZwjyy1JocGQknieYktHSl312WnuH6HgsJv7/O22tvvkEz8BHAVdC Zc7onGvh6Ar6JC+tPItac9opQGQiKHtjbD6rVnNikimoBIq5bJP1pC0hiMyyze0W5TY+ ihWA5oh3glpldgVqST2Z5wvihfAUaTWGjrhzAL228i6LSL1RqkXcXmWesVdCjgZJqQ/X 8PJmP4OrFrArahoYjv3AsEk/uv0MX7YTI7sPUB56bGNXQeaQplsrFPGiDZItNF3bo2N4 N00GPWnQA22thEBTKNZZnSudfBhJN0SB1DCdCYuvu7CDpJWwVcuRgpBHmuhj+/hzkPFD kPjQ== X-Gm-Message-State: APzg51BVrPCWptdNM+Bf5Ap8k8YRsUxkZOT6B9O+t7R75JAA7+/cBxXt Umf8c61xdrvwtSKOGw9J76Ivd7W/T0LWXcdnBGsPA7iQ X-Google-Smtp-Source: ANB0VdbrnaGXt4wCdti0x2gc5dxrZXs7QG5C3z66ICO6A60wdwHst+pIfZvcCPRkrTQzEBraVTSy3vvXpafqCXzPpbI= X-Received: by 2002:a19:730d:: with SMTP id o13-v6mr3178597lfc.130.1534912185832; Tue, 21 Aug 2018 21:29:45 -0700 (PDT) MIME-Version: 1.0 From: Radia Perlman Date: Tue, 21 Aug 2018 21:29:34 -0700 Message-ID: To: secdir@ietf.org, The IESG , draft-ietf-anima-reference-model.all@tools.ietf.org Content-Type: multipart/alternative; boundary="000000000000991a600573fe9785" Archived-At: Subject: [secdir] Secdir review of draft-ietf-anima-reference-model-06 X-BeenThere: secdir@ietf.org X-Mailman-Version: 2.1.27 Precedence: list List-Id: Security Area Directorate List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 22 Aug 2018 04:29:50 -0000 --000000000000991a600573fe9785 Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable I have reviewed this document as part of the security directorate's ongoing effort to review all IETF documents being processed by the IESG. These comments were written primarily for the benefit of the security area directors. Document editors and WG chairs should treat these comments just like any other last call comments. This document is an overview document (intended as informational) introducing a large collection of I-Ds (intended as Proposed) describing autonomic networking. Aimed at the Internet of Things with devices with very little in the way of user interface other than over the network, the design goal is to be maximally auto-configuring. Security is bootstrapped using private keys and certificates installed by the manufacturer, where to first goal is to join new devices to some sort of domain. The most suspicious thing from a security standpoint is that it appears all of the devices in a domain implicitly trust one another. This means that bringing in the proverbial light bulb into your house could compromise your whole house if the light bulb had a Trojan horse installed or some sort of bug that allowed it to be compromised. There is some mention of addressing this issue in the future, but unless I=E2=80=99m misunderstanding the appro= ach this seems like a very dangerous thing to deploy even initially. It makes much more sense for each installed device to first become manageable by a single other device in the domain. That first management device could cautiously expand trust further. The dangers are well summarized in Section 9 (Security Considerations). Section 9.2 includes this text: The above threats are in principle comparable to other solutions: In the presence of design, implementation or operational errors, security is no longer guaranteed. However, the distributed nature of AN, specifically the Autonomic Control Plane, increases the threat surface significantly. For example, a compromised device may have full IP reachability to all other devices inside the ACP, and can use all AN methods and protocols. For the next phase of the ANIMA work it is therefore recommended to introduce a sub-domain security model, to reduce the attack surface and not expose a full domain to a potential intruder. Furthermore, additional security mechanisms on the ASA level should be considered for high-risk autonomic functions. --000000000000991a600573fe9785 Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable

I have reviewed this document = as part of the security directorate's ongoing effort to review all IETF documents being process= ed by the IESG.

These comments were written primarily for the b= enefit of the security area directors. Document editors and WG chairs should treat these comments just like any other last call comments.

=C2=A0

This document is an overview document (intended= as informational) introducing a large collection of I-Ds (intended as Proposed= ) describing autonomic networking. Aimed at the Internet of Things with devic= es with very little in the way of user interface other than over the network, = the design goal is to be maximally auto-configuring. Security is bootstrapped u= sing private keys and certificates installed by the manufacturer, where to first goal is to join new devices to some sort of domain.

=C2=A0

The most suspicious thing from a security stand= point is that it appears all of the devices in a domain implicitly trust one another. Thi= s means that bringing in the proverbial light bulb into your house could compromise your whole house if the light bulb had a Trojan horse installed = or some sort of bug that allowed it to be compromised. There is some mention o= f addressing this issue in the future, but unless I=E2=80=99m misunderstandin= g the approach this seems like a very dangerous thing to deploy even initially. I= t makes much more sense for each installed device to first become manageable = by a single other device in the domain. That first management device could cautiously expand trust further.

=C2=A0

The dangers are well summarized in Section 9 (S= ecurity Considerations). Section 9.2 includes this text:

=C2=A0

The above threats are in principle comparable t= o other solutions: In

the presence of design, implementation or opera= tional errors,

security is no longer guaranteed. However, the = distributed nature of

AN, specifically the Autonomic Control Plane, i= ncreases the threat

surface significantly. For example, a compromis= ed device may have

full IP reachability to all other devices insid= e the ACP, and can use

all AN methods and protocols.

=C2=A0

For the next phase of the ANIMA work it is ther= efore recommended to

introduce a sub-domain security model, to reduc= e the attack surface

and not expose a full domain to a potential int= ruder. Furthermore,

additional security mechanisms on the ASA level= should be considered

for high-risk autonomic functions.

--000000000000991a600573fe9785-- From nobody Tue Aug 21 21:47:34 2018 Return-Path: X-Original-To: secdir@ietfa.amsl.com Delivered-To: secdir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 6EBC9130DE7; Tue, 21 Aug 2018 21:47:32 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2 X-Spam-Level: X-Spam-Status: No, score=-2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id QHVI4aie7vHr; Tue, 21 Aug 2018 21:47:29 -0700 (PDT) Received: from mail-pl0-x231.google.com (mail-pl0-x231.google.com [IPv6:2607:f8b0:400e:c01::231]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 503F412F1A6; Tue, 21 Aug 2018 21:47:29 -0700 (PDT) Received: by mail-pl0-x231.google.com with SMTP id a4-v6so323782plm.13; Tue, 21 Aug 2018 21:47:29 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=subject:to:references:from:message-id:date:user-agent:mime-version :in-reply-to:content-language:content-transfer-encoding; bh=g5imcK1CEDhNHTQfXHZgzNZXHp5EkJ6KX+Ae579UYrM=; b=uwL3GHftGiqfVncjrYiNTYz7vm3k4oOabpdHD1prHn3rTT73twj2tVh14xrbsbvbIJ A+8iVufCX9IkSgPUY/jBfJfWEgrZ8VvyqKtr+ETj5/kK4Vp9DQAsbadDU9a6jCX5bifP t4y9VKyy7LuXoMg2cQj22+GSoCepTmvQOs8ODuZvnLzqO97jxb+l74FMGqX9u5gg6U05 umS/iduwU1RiYevSHf67XWg23EpStM7K08iL6NtgZyg5wQHrc2giTZ9A9qymNiY8CJeU EzZQt2wFMKjQsYznWQVGFxPBgQNCqN6dkONHJNzlrKeV9iKck7BBl5TUVrexMnVBpwqp i8bA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:subject:to:references:from:message-id:date :user-agent:mime-version:in-reply-to:content-language :content-transfer-encoding; bh=g5imcK1CEDhNHTQfXHZgzNZXHp5EkJ6KX+Ae579UYrM=; b=Ywz8zlyEt20jfP7S+Q5P+FUmo0ZTl0Nd+XzVVFSO1NFJybdSnEV56Cic2C5tadi2/3 q/ts2Ayylp7pnPnnEjsIByr3Kk0U32FnbP5Rcsi0rmaZg/aL82OtxiWUv02s6w1vkfmt wwMyQTIfDlx/UtJ+vxT4fjoFntPPLgfzykd7a5vzkCW2ffOPJUiq5YKl7kxpbffVq6Z4 Zx2JR07lPxjSJIINiFN0kNnEhZjsfqE6+hpyWdIWmBjgzCCNxq8H9pAKZi6jqCbaXXFt swxRNAEhPnLvp7iXeTw/b4kEZvnPZ04J0bLp+wCeSqv7s1+C0V/W01CJq+jd8dAVwohw bw5g== X-Gm-Message-State: AOUpUlFyjT+Bv4pDMlRpkj5UcmujbuFPSlRXAh/DobhgwvZaoLR6D3ET D1r9i2wPe4biZzN8254hdUc= X-Google-Smtp-Source: AA+uWPwSa33AxUvUa2IiBkmg+GmuFOCBlhUnfPPBg7FEnNGMgnz4xzz7Eea6YXMCxDYdQ2iPRP8Pvw== X-Received: by 2002:a17:902:b595:: with SMTP id a21-v6mr52687154pls.23.1534913248746; Tue, 21 Aug 2018 21:47:28 -0700 (PDT) Received: from [192.168.178.30] ([118.148.68.33]) by smtp.gmail.com with ESMTPSA id z11-v6sm674631pfi.4.2018.08.21.21.47.25 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Tue, 21 Aug 2018 21:47:27 -0700 (PDT) To: Radia Perlman , secdir@ietf.org, The IESG , draft-ietf-anima-reference-model.all@tools.ietf.org References: From: Brian E Carpenter Message-ID: <96d16d3e-3a40-1043-87c1-560f087db7bc@gmail.com> Date: Wed, 22 Aug 2018 16:47:21 +1200 User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Thunderbird/52.9.1 MIME-Version: 1.0 In-Reply-To: Content-Type: text/plain; charset=utf-8 Content-Language: en-US Content-Transfer-Encoding: quoted-printable Archived-At: Subject: Re: [secdir] Secdir review of draft-ietf-anima-reference-model-06 X-BeenThere: secdir@ietf.org X-Mailman-Version: 2.1.27 Precedence: list List-Id: Security Area Directorate List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 22 Aug 2018 04:47:33 -0000 Hi Radia, Thanks for the review. > This means that > bringing in the proverbial light bulb into your house could compromise = your > whole house if the light bulb had a Trojan horse installed or some sort= of > bug that allowed it to be compromised. Indeed. But please note that ANIMA is scoped for professionally managed networks where there is indeed a form of admission control for new nodes. If that isn't made clear enough, then it should be. Secure enrolment is the main topic of two of the other drafts (BRSKI and ACP, a.k.a. draft-ietf-anima-bootstrapping-keyinfra and draft-ietf-anima- autonomic-control-plane.) In that context, where for example unknown BYOD devices simply could not join the autonomic network, because they are unknown to the registrar, we think we are covered. So in fact networks like homenets or *unmanaged* IOT edge networks are not in scope. How malicious nodes can be kept out of those networks is indeed an enormous challenge. Regards Brian Carpenter On 2018-08-22 16:29, Radia Perlman wrote: > I have reviewed this document as part of the security directorate's ong= oing > effort to review all IETF documents being processed by the IESG. >=20 > These comments were written primarily for the benefit of the security a= rea > directors. Document editors and WG chairs should treat these comments j= ust > like any other last call comments. >=20 >=20 >=20 > This document is an overview document (intended as informational) > introducing a large collection of I-Ds (intended as Proposed) describin= g > autonomic networking. Aimed at the Internet of Things with devices with= > very little in the way of user interface other than over the network, t= he > design goal is to be maximally auto-configuring. Security is bootstrapp= ed > using private keys and certificates installed by the manufacturer, wher= e to > first goal is to join new devices to some sort of domain. >=20 >=20 >=20 > The most suspicious thing from a security standpoint is that it appears= all > of the devices in a domain implicitly trust one another. This means tha= t > bringing in the proverbial light bulb into your house could compromise = your > whole house if the light bulb had a Trojan horse installed or some sort= of > bug that allowed it to be compromised. There is some mention of address= ing > this issue in the future, but unless I=E2=80=99m misunderstanding the a= pproach this > seems like a very dangerous thing to deploy even initially. It makes mu= ch > more sense for each installed device to first become manageable by a si= ngle > other device in the domain. That first management device could cautious= ly > expand trust further. >=20 >=20 >=20 > The dangers are well summarized in Section 9 (Security Considerations).= > Section 9.2 includes this text: >=20 >=20 >=20 > The above threats are in principle comparable to other solutions: In > the presence of design, implementation or operational errors, > security is no longer guaranteed. However, the distributed nature of > AN, specifically the Autonomic Control Plane, increases the threat > surface significantly. For example, a compromised device may have > full IP reachability to all other devices inside the ACP, and can use > all AN methods and protocols. >=20 >=20 >=20 > For the next phase of the ANIMA work it is therefore recommended to > introduce a sub-domain security model, to reduce the attack surface > and not expose a full domain to a potential intruder. Furthermore, > additional security mechanisms on the ASA level should be considered > for high-risk autonomic functions. >=20 From nobody Wed Aug 22 00:16:21 2018 Return-Path: X-Original-To: secdir@ietfa.amsl.com Delivered-To: secdir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id F2A24130ECE; Wed, 22 Aug 2018 00:16:14 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.199 X-Spam-Level: X-Spam-Status: No, score=-4.199 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HEADER_FROM_DIFFERENT_DOMAINS=0.001, RCVD_IN_DNSWL_MED=-2.3] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 2-pv3rGH149d; Wed, 22 Aug 2018 00:16:11 -0700 (PDT) Received: from faui40.informatik.uni-erlangen.de (faui40.informatik.uni-erlangen.de [IPv6:2001:638:a000:4134::ffff:40]) (using TLSv1.2 with cipher ADH-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 8E546130EB3; Wed, 22 Aug 2018 00:16:11 -0700 (PDT) Received: from faui48f.informatik.uni-erlangen.de (faui48f.informatik.uni-erlangen.de [IPv6:2001:638:a000:4134::ffff:52]) by faui40.informatik.uni-erlangen.de (Postfix) with ESMTP id 4C6F65491EB; Wed, 22 Aug 2018 09:16:07 +0200 (CEST) Received: by faui48f.informatik.uni-erlangen.de (Postfix, from userid 10463) id 3C8FF4402CB; Wed, 22 Aug 2018 09:16:07 +0200 (CEST) Date: Wed, 22 Aug 2018 09:16:07 +0200 From: Toerless Eckert To: Radia Perlman Cc: secdir@ietf.org, The IESG , draft-ietf-anima-reference-model.all@tools.ietf.org Message-ID: <20180822071607.ytsj466j3c546gnm@faui48f.informatik.uni-erlangen.de> References: MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: User-Agent: NeoMutt/20170113 (1.7.2) Archived-At: Subject: Re: [secdir] Secdir review of draft-ietf-anima-reference-model-06 X-BeenThere: secdir@ietf.org X-Mailman-Version: 2.1.27 Precedence: list List-Id: Security Area Directorate List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 22 Aug 2018 07:16:15 -0000 Thanks for the review, Radia Some perspective on the design choices made by ANIMA re to this group security (and i'll reference this in the sec review of ACP spec that i am now trying to get back to after an NMI i am trying to finish): a) As Brian mentioned and as the ACP spec (draft-ietf-anima-autonomic-control-plane) in section 1.1 explains in more detail than the reference model, the prime target for ANI are professional managed networks, and IoT is only addressed opportunistically right now. Meaning: there are likely things missing for IoT, such as scale-down aspects. Other WGs are already working on those (like 6tisch). b) The model of "group-security" of the ANI (either you're in, or you're out), is not the sufficient solves-all for security, but it is the necessary base level of security. For once to meet the original design goal of our current charter: The autonomic network architecture as passed from IRTF/NMRG in rfc7575 to ANIMA is meant to enable fully distributed peer-to-peer self-organization and operations of intelligent network devices/services without an assumption of any centralized backend that is orchestrating the network. c) Consider just the security methods we have today in distributed protocols. Every protocol has its own variant of peer-to-peer security: every IGP, BGP, multicast protocols and so on. reinvention of the wheel over and over. And even though a lot of security exists for such protocols, it is not even widely deployed for most of them. So allowing the next round of distributed protocols/services to be build without having to reinvent that wheel was one key goal. [ Likewise also the CBOR(binary JSON) and common discovery mechanisms of GRASP are tools to avoid the reinvention of discovery and encoding for every new distributed protocol.] Note also that the fully automated PKI architecture of ANI allows to remove suspcious nodes from the domain (group trust). d) ANI also uses this group-security to create a cryptographic version of standard "clamshell" security in network operations - even without building new protocols as proposed in c)". This is what the use case of ANI for centralized management is all about (RFC8368). Classically this security is done through ACL, separating "inside management" addresses from "user addresses", so replacing that with the cryptographic secured ANI model is certainly a big step to more security. e) Instead of just having a single "controller" empowered to have more control than other nodes as you suggest, i did suggest the notion of "roles" in the ACP spec A.10.5, also embodied via the ANI domain certificates. The reason for not including this into the normative part of the ACP spec (and therefore also not into the current reference model document) is that pretty much everyting in the ACP spec if very much based on existing commercial implementations (plus trying to fix in the standard docs details we learned to be not good in products and/or requested by WG discussion). The role assignment is more novel, not tested in deployment, and therefore better separated out. Also, it would be a part of the solution that fully peer-to-peer networks would likely not want. Finally, just specifying the security model as in A.10.5 is not the hard part of role based security. Sitting down and defining the policies implied for the important existing OAM services in nodes and the different type of roles (is NOC vs. non-NOC node good enough) will take more work and should be done with more time. At this stage of the ANI docs, it would just be scope creep for the existing docs. f) The real fun part would actually be how a full peer-to-peer autonomic network with maybe just the existing group-security or even no security at all initially would try to bootstrap itself into a more structured security model. Alas, that is IMHO far beyond what IETF or especially an OPS WG like ANIMA could or should do. But i did bring this up tangentially in my IETF 102 DINRG talk about ANIMA. Distributed voting/decision making is in scope there, so distributed security and peer-to-peer role role would certainly be a good use-case area. Alas, while being more fun, i think like you that e) is what we should do next in ANIMA because it is more immediately necessary/deployable. If you would like to contribute to that follow-up spec, that would be great! g) Final note: the reference model is really only focussing on the fully distributed ANI -> Autonomic Network primary target of ANIMA. My considerations above are also inclusive of the use of ANI standalone, e.g.: for centralized NOC operations, so please do not expect that everything i said is or should be in the reference model doc. For example re. suggestions like "sub-domains vs. what i wrote in f), i think the evolution of the fully distributed autonomic network is a lot more complex.. Cheers & thanks for the review Toerless On Tue, Aug 21, 2018 at 09:29:34PM -0700, Radia Perlman wrote: > I have reviewed this document as part of the security directorate's ongoing > effort to review all IETF documents being processed by the IESG. > > These comments were written primarily for the benefit of the security area > directors. Document editors and WG chairs should treat these comments just > like any other last call comments. > > > > This document is an overview document (intended as informational) > introducing a large collection of I-Ds (intended as Proposed) describing > autonomic networking. Aimed at the Internet of Things with devices with > very little in the way of user interface other than over the network, the > design goal is to be maximally auto-configuring. Security is bootstrapped > using private keys and certificates installed by the manufacturer, where to > first goal is to join new devices to some sort of domain. > > > > The most suspicious thing from a security standpoint is that it appears all > of the devices in a domain implicitly trust one another. This means that > bringing in the proverbial light bulb into your house could compromise your > whole house if the light bulb had a Trojan horse installed or some sort of > bug that allowed it to be compromised. There is some mention of addressing > this issue in the future, but unless I???m misunderstanding the approach this > seems like a very dangerous thing to deploy even initially. It makes much > more sense for each installed device to first become manageable by a single > other device in the domain. That first management device could cautiously > expand trust further. > > > > The dangers are well summarized in Section 9 (Security Considerations). > Section 9.2 includes this text: > > > > The above threats are in principle comparable to other solutions: In > > the presence of design, implementation or operational errors, > > security is no longer guaranteed. However, the distributed nature of > > AN, specifically the Autonomic Control Plane, increases the threat > > surface significantly. For example, a compromised device may have > > full IP reachability to all other devices inside the ACP, and can use > > all AN methods and protocols. > > > > For the next phase of the ANIMA work it is therefore recommended to > > introduce a sub-domain security model, to reduce the attack surface > > and not expose a full domain to a potential intruder. Furthermore, > > additional security mechanisms on the ASA level should be considered > > for high-risk autonomic functions. -- --- tte@cs.fau.de From nobody Thu Aug 23 05:25:41 2018 Return-Path: X-Original-To: secdir@ietf.org Delivered-To: secdir@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 49F7A130DC2 for ; Thu, 23 Aug 2018 05:25:40 -0700 (PDT) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: Tero Kivinen To: X-Test-IDTracker: no X-IETF-IDTracker: 6.83.1 Auto-Submitted: auto-generated Precedence: bulk Reply-To: secdir-secretary@mit.edu Message-ID: <153502714029.12124.6904908178679021673.idtracker@ietfa.amsl.com> Date: Thu, 23 Aug 2018 05:25:40 -0700 Archived-At: Subject: [secdir] Assignments X-BeenThere: secdir@ietf.org X-Mailman-Version: 2.1.27 List-Id: Security Area Directorate List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 23 Aug 2018 12:25:40 -0000 Review instructions and related resources are at: http://tools.ietf.org/area/sec/trac/wiki/SecDirReview For telechat 2018-08-30 Reviewer LC end Draft Russ Mundy 2018-08-13 draft-ietf-dnsop-terminology-bis-13 Sandra Murphy 2018-08-10 draft-ietf-sidrops-rpki-tree-validation-02 Last calls: Reviewer LC end Draft John Bradley 2018-06-18 draft-ietf-bfd-multipoint-active-tail-09 Daniel Franke 2018-06-28 draft-ietf-netconf-rfc7895bis-06 Daniel Gillmor 2018-06-25 draft-ietf-dnsop-session-signal-14 Daniel Gillmor 2018-03-19 draft-gutmann-scep-10 Phillip Hallam-Baker 2018-07-10 draft-ietf-codec-ambisonics-09 Catherine Meadows 2018-07-30 draft-sahib-451-new-protocol-elements-03 Russ Mundy 2017-09-14 draft-spinosa-urn-lex-13 Vincent Roca 2018-08-29 draft-ietf-ospf-segment-routing-msd-16 Kyle Rose 2018-08-29 draft-ietf-lisp-rfc6830bis-14 Joseph Salowey 2018-08-28 draft-ietf-tcpm-alternativebackoff-ecn-09 Yaron Sheffer 2018-09-04 draft-ietf-taps-minset-06 Melinda Shore 2018-09-04 draft-ietf-dnsop-refuse-any-07 Valery Smyslov 2018-09-03 draft-ietf-bess-mvpn-mib-10 Robert Sparks 2018-09-03 draft-ietf-bess-l2l3-vpn-mcast-mib-15 Takeshi Takahashi 2018-08-31 draft-ietf-lisp-rfc6833bis-12 Sean Turner 2018-08-30 draft-ietf-extra-imap-savedate-01 Samuel Weiler 2018-05-21 draft-ietf-bfd-multipoint-18 Early review requests: Reviewer Due Draft Daniel Franke 2018-01-31 draft-ietf-intarea-provisioning-domains-00 Next in the reviewer rotation: Carl Wallace David Waltermire Samuel Weiler Brian Weis Klaas Wierenga Christopher Wood Paul Wouters Liang Xia Taylor Yu Dacheng Zhang From nobody Thu Aug 23 11:13:55 2018 Return-Path: X-Original-To: secdir@ietf.org Delivered-To: secdir@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 5A6E2130EE4; Thu, 23 Aug 2018 11:13:46 -0700 (PDT) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: Robert Sparks To: Cc: draft-ietf-bess-l2l3-vpn-mcast-mib.all@ietf.org, ietf@ietf.org, bess@ietf.org X-Test-IDTracker: no X-IETF-IDTracker: 6.83.1 Auto-Submitted: auto-generated Precedence: bulk Message-ID: <153504802630.12083.17997182428916670301@ietfa.amsl.com> Date: Thu, 23 Aug 2018 11:13:46 -0700 Archived-At: Subject: [secdir] Secdir last call review of draft-ietf-bess-l2l3-vpn-mcast-mib-15 X-BeenThere: secdir@ietf.org X-Mailman-Version: 2.1.27 List-Id: Security Area Directorate List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 23 Aug 2018 18:13:47 -0000 Reviewer: Robert Sparks Review result: Ready I have reviewed this document as part of the security directorate's ongoing effort to review all IETF documents being processed by the IESG. These comments were written primarily for the benefit of the security area directors. Document editors and WG chairs should treat these comments just like any other last call comments. This document is ready for publication as Proposed Standard RFC. This document provides a pair of MIB modules intended as building blocks for other MIB modules that will monitor/configure layer 2 and layer 3 virtual private networks supporting multicast. The MIB objects are all not-accessible or read-only. The security considerations section follows the guidance at . The document had a thorough MIB doctor review. From nobody Fri Aug 24 12:34:06 2018 Return-Path: X-Original-To: secdir@ietf.org Delivered-To: secdir@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 1D55E130E03; Fri, 24 Aug 2018 12:33:49 -0700 (PDT) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: Kyle Rose To: Cc: draft-ietf-lisp-rfc6830bis.all@ietf.org, ietf@ietf.org, lisp@ietf.org X-Test-IDTracker: no X-IETF-IDTracker: 6.83.1 Auto-Submitted: auto-generated Precedence: bulk Message-ID: <153513922907.22939.10542350679349996082@ietfa.amsl.com> Date: Fri, 24 Aug 2018 12:33:49 -0700 Archived-At: Subject: [secdir] Secdir last call review of draft-ietf-lisp-rfc6830bis-15 X-BeenThere: secdir@ietf.org X-Mailman-Version: 2.1.27 List-Id: Security Area Directorate List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 24 Aug 2018 19:33:49 -0000 Reviewer: Kyle Rose Review result: Has Issues I have reviewed this document as part of the security directorate's ongoing effort to review all IETF documents being processed by the IESG. These comments were written primarily for the benefit of the security area directors. Document editors and WG chairs should treat these comments just like any other last call comments. For intranet purposes, LISP (including this document) is Ready: operators adopting this technology assume responsibility for the potentially novel operational difficulties of a routing infrastructure having seen limited deployment in adversarial environments. For internet deployment, readiness is less clear. For the internet core (DFZ RIB) use-case, LISP proposes replacing BGP sessions and global eventually-consistent state sharing with a global control plane and piecewise on-demand state pull. This new control plane presents novel opportunities for attackers, and so RFC 7834 recommends authentication for all control-plane traffic as a countermeasure for many of the threats outlined in RFC 7835. Proper authentication will be effective for certain classes of attacks, but does not completely address the security needs of the control plane, nor is it clear that the proposed authentication is appropriate to the desired scale of deployment. One area of concern, of which I have not been able to find discussion, is that of the implications of shared capacity for the control and data planes, and how this can allow a volumetric data plane attack to deny a router access to the global mapping system, slowly choking off service to uncached portions of the EID address space. Section 6.7 of draft-ietf-lisp-sec discusses denial of service attacks, but fails to distinguish between impersonation attacks (properly countered by authentication using a pre-established chain of trust) and volumetric attacks (perhaps complicated by those very authentication mechanisms, which are often quite expensive). If discussion of this class of issues exists elsewhere, I would appreciate a pointer as I have not yet found it. I would also like clarification on what defines the separation between the control plane and data plane, and whether authentication itself is used to distinguish, because that impacts how to precisely describe how attacks relate to the architecture. Lack of clarity here will lead to inconsistent sets of assumptions and security assertions. Moreso than this particular document, draft-ietf-lisp-sec is probably where the real action is for the security area. That document poses a multitude of questions, only the most obvious of which is why communication between an ITR and a Map-Resolver should be over a bespoke protocol instead of (say) DTLS. Since there must be a pre-established trust relationship between the two, and presumably a persistent session, this seems an obvious choice for confidentiality and integrity protection. (Note: this is not intended as a statement that DTLS is definitely a better choice, only that I have not been able to find documentation of consideration of this design alternative and why it was rejected.) Another question it poses is: how does the Map-Resolver authenticate the Map-Server? Symmetric authentication with the ITR-OTK demonstrates only that the response is associated with the request: it's not immediately clear to me what security guarantees it provides to the ITR. Limiting attacks to on-path attackers, yes. But what about MitM? That class of attacks requires either a pre-shared key (implying a pre-existing trust relationship between a Map-Resolver and every Map-Server it interacts with) or asymmetric authentication with some kind of trust anchor. I have been able to find no mention of the latter, and it does not seem that the former scales particularly well. Given the difficulties in evaluating the readiness of this one piece of the LISP ecosystem, it may be best to batch the set of documents describing the entire protocol and to move them through IETF LC at the same time. From nobody Fri Aug 24 13:10:13 2018 Return-Path: X-Original-To: secdir@ietfa.amsl.com Delivered-To: secdir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 79330130DDF for ; Fri, 24 Aug 2018 13:10:11 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2 X-Spam-Level: X-Spam-Status: No, score=-2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 0GjZk075kQH5 for ; Fri, 24 Aug 2018 13:10:09 -0700 (PDT) Received: from mail-pf1-x42f.google.com (mail-pf1-x42f.google.com [IPv6:2607:f8b0:4864:20::42f]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 3DDF4130DDA for ; Fri, 24 Aug 2018 13:10:09 -0700 (PDT) Received: by mail-pf1-x42f.google.com with SMTP id l9-v6so5013596pff.9 for ; Fri, 24 Aug 2018 13:10:09 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=subject:to:references:from:organization:message-id:date:user-agent :mime-version:in-reply-to:content-language:content-transfer-encoding; bh=64+5jnxl25Q6Ly4sWPzK+r5fVqbSYKmHHdrOuVi5eFw=; b=fi0Ttt1s3c+qd/b1s45OWfykpxCzuH4kNmX/QRZ8/b4jrMDLbAuqe6dS/SjgAJC6WE 6hCC1CW48mJK8Mtov6bFQ2jiESuqFjLLbTmMpIgOsnWGmJv60rV5juo1x7pcJXM5DXZd WTUEDEijU8DAOaSFI9Tay5buaDn5MwNs5pGTe1t5wySEhC9WHZYEJVsEtXRNbOD02oG1 RRH6olVLpOJ3WkZSXejzAfMGIXVE+A4Vcog652oSH+1vWAR/FJuoc5iS3fmtKqGaJ7sB 0yeM/x22VXr9icuEl3b4ZZc7Uha925SfWnTv2CBMm695ABvkXysQyqtrRxIyV/VfD7oR RX8g== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:subject:to:references:from:organization :message-id:date:user-agent:mime-version:in-reply-to :content-language:content-transfer-encoding; bh=64+5jnxl25Q6Ly4sWPzK+r5fVqbSYKmHHdrOuVi5eFw=; b=lD50AE1ihiszUJjp+9UUeZjS4wb+1CUVUsU5NEIxS3nwSjwUnwFuheve1TIRvXFDQU tU5GUz4s6Nc4EgPjiFq9qpR6LFAfKtOV1Yf4xPtuwp+juOO9uwx0GVNaTriZ76fRrgZx brBZR3BXov/TYI2Fl9TbUigr0ctb89cGG5Rp7ry7q1YsQdT2zi7QDLD2ZrhMET80MIF1 bYqA9a7i80jM1l6ApN97ROW73X6yCwAeDo2FhOkQuxOXlmRQMqTvWxls3rsIlnjrQu9C Bmr9zpneaqxdtvEKCVaYgt/l25uiXCE9UdY+m+7mfN3lh3WIMeAYiDMOl5qJZcWY9qt8 CJvg== X-Gm-Message-State: APzg51A+9Kg5Tg/jYaHn388nxSWULNrSAUuCPJfGIEdeRcpuwx61MPSs 6/xmO4j9X8u/7MNEnwVOtas= X-Google-Smtp-Source: ANB0VdbJDgl95NbZvLAR7Ny4mSAAiIOFgzWKouOk99qXZWRmjQ6mhHtr7Xx9JVrTu97eaBjXgCpRmw== X-Received: by 2002:a63:e949:: with SMTP id q9-v6mr3003478pgj.4.1535141408656; Fri, 24 Aug 2018 13:10:08 -0700 (PDT) Received: from [192.168.178.22] ([118.148.68.33]) by smtp.gmail.com with ESMTPSA id y18-v6sm10369015pfl.90.2018.08.24.13.10.06 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Fri, 24 Aug 2018 13:10:07 -0700 (PDT) To: Radia Perlman , secdir@ietf.org, draft-ietf-anima-reference-model.all@tools.ietf.org References: <96d16d3e-3a40-1043-87c1-560f087db7bc@gmail.com> From: Brian E Carpenter Organization: University of Auckland Message-ID: <79f32b5b-256a-6dcd-5257-7155c638a508@gmail.com> Date: Sat, 25 Aug 2018 08:10:03 +1200 User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Thunderbird/52.9.1 MIME-Version: 1.0 In-Reply-To: <96d16d3e-3a40-1043-87c1-560f087db7bc@gmail.com> Content-Type: text/plain; charset=utf-8 Content-Language: en-US Content-Transfer-Encoding: quoted-printable Archived-At: Subject: Re: [secdir] Secdir review of draft-ietf-anima-reference-model-06 X-BeenThere: secdir@ietf.org X-Mailman-Version: 2.1.27 Precedence: list List-Id: Security Area Directorate List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 24 Aug 2018 20:10:12 -0000 Radia, We've added this in version -07. It was definitely needed: The scope of this model is therefore limited to networks that are to=09 some extent managed by skilled human operators, loosely referred to=09 as "professionally managed" networks. Unmanaged networks raise=09 additional security and trust issues that this model does not cover. Regards Brian On 2018-08-22 16:47, Brian E Carpenter wrote: > Hi Radia, >=20 > Thanks for the review. >=20 >> This means that >> bringing in the proverbial light bulb into your house could compromise= your >> whole house if the light bulb had a Trojan horse installed or some sor= t of >> bug that allowed it to be compromised. >=20 > Indeed. But please note that ANIMA is scoped for professionally managed= > networks where there is indeed a form of admission control for new > nodes. If that isn't made clear enough, then it should be. Secure > enrolment is the main topic of two of the other drafts (BRSKI and ACP, > a.k.a. draft-ietf-anima-bootstrapping-keyinfra and draft-ietf-anima- > autonomic-control-plane.) In that context, where for example unknown > BYOD devices simply could not join the autonomic network, because they > are unknown to the registrar, we think we are covered. >=20 > So in fact networks like homenets or *unmanaged* IOT edge networks > are not in scope. How malicious nodes can be kept out of those > networks is indeed an enormous challenge. >=20 > Regards > Brian Carpenter >=20 > On 2018-08-22 16:29, Radia Perlman wrote: >> I have reviewed this document as part of the security directorate's on= going >> effort to review all IETF documents being processed by the IESG. >> >> These comments were written primarily for the benefit of the security = area >> directors. Document editors and WG chairs should treat these comments = just >> like any other last call comments. >> >> >> >> This document is an overview document (intended as informational) >> introducing a large collection of I-Ds (intended as Proposed) describi= ng >> autonomic networking. Aimed at the Internet of Things with devices wit= h >> very little in the way of user interface other than over the network, = the >> design goal is to be maximally auto-configuring. Security is bootstrap= ped >> using private keys and certificates installed by the manufacturer, whe= re to >> first goal is to join new devices to some sort of domain. >> >> >> >> The most suspicious thing from a security standpoint is that it appear= s all >> of the devices in a domain implicitly trust one another. This means th= at >> bringing in the proverbial light bulb into your house could compromise= your >> whole house if the light bulb had a Trojan horse installed or some sor= t of >> bug that allowed it to be compromised. There is some mention of addres= sing >> this issue in the future, but unless I=E2=80=99m misunderstanding the = approach this >> seems like a very dangerous thing to deploy even initially. It makes m= uch >> more sense for each installed device to first become manageable by a s= ingle >> other device in the domain. That first management device could cautiou= sly >> expand trust further. >> >> >> >> The dangers are well summarized in Section 9 (Security Considerations)= =2E >> Section 9.2 includes this text: >> >> >> >> The above threats are in principle comparable to other solutions: In >> the presence of design, implementation or operational errors, >> security is no longer guaranteed. However, the distributed nature of >> AN, specifically the Autonomic Control Plane, increases the threat >> surface significantly. For example, a compromised device may have >> full IP reachability to all other devices inside the ACP, and can use >> all AN methods and protocols. >> >> >> >> For the next phase of the ANIMA work it is therefore recommended to >> introduce a sub-domain security model, to reduce the attack surface >> and not expose a full domain to a potential intruder. Furthermore, >> additional security mechanisms on the ASA level should be considered >> for high-risk autonomic functions. >> >=20 From nobody Sat Aug 25 14:40:37 2018 Return-Path: X-Original-To: secdir@ietfa.amsl.com Delivered-To: secdir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C909D130EE8; Sat, 25 Aug 2018 14:40:21 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2 X-Spam-Level: X-Spam-Status: No, score=-2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id OS1EKFuoxXcS; Sat, 25 Aug 2018 14:40:19 -0700 (PDT) Received: from mail-pl1-x634.google.com (mail-pl1-x634.google.com [IPv6:2607:f8b0:4864:20::634]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 6B5DA130E44; Sat, 25 Aug 2018 14:40:19 -0700 (PDT) Received: by mail-pl1-x634.google.com with SMTP id p4-v6so2502137pll.8; Sat, 25 Aug 2018 14:40:19 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:subject:from:in-reply-to:date:cc :content-transfer-encoding:message-id:references:to; bh=rpa55aNt2PptfCWqNXmfgS4w7ISGEM14BSoh1NGJpvA=; b=DGUBhbC5CpLFrjZOkkzglonmI1mkmqKf9lE5wFOxs5+rO2oT3GuJvBpyXul7L7QdIp hEedIY3hu3R9Y9zKFGB3iKxmep0AvFJagcaDgPhC01Q56KjzwAbzBATU4dJfkwqCXHW4 5rJk5wDNL4/wRhNjAFSROKDMAXqGtHbWxM0qCu8mPguIGGD3u2C+fbsOgLf68fDSqtLz pN1htO5STDWLO0dYrvqic9XEacE+lOfmG9+F/dw3I0Y0z6dXi63HqcsDvRLmXyZrptDD ADN63UbG8vocthzCWgqVBVRH++0UlcPQO8CfFFgk83rfL3pcOYfC6wjPOqBDNPnbBgVX 1dKA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:subject:from:in-reply-to:date:cc :content-transfer-encoding:message-id:references:to; bh=rpa55aNt2PptfCWqNXmfgS4w7ISGEM14BSoh1NGJpvA=; b=aDDy7t2np9bMFAdnuxkb+Cj3VFs6T+x1ETwCTWfpn4bM47l6oSueBdcjIle8RmWzPr JILXo9kVLSZegCo3H0LE+OWL6tj+tJKIRmAXDZWRpK1hdMHeyp7WE3YgwkCSK77g3YfZ pGjxlH9YkHfHdYgmJBShoI/ukocklrbxQqXYvKYvZbpUgc0lOOwmzYuvxPgLxXrOGaQ8 QYEgiOeml+ye7n3Nwh/FSfZG0pNq/4jHHg9V9ju/YNQ9OgbEd6Hwogwl+lLqX8Vrs8iT P7ZaISpRPP0MKS5FJQ+T+qy1pnuKJV5oHyXURWwIZ1jWhV8a8MaJSqJTO+9QLbyzQ/tR IkWw== X-Gm-Message-State: APzg51As407VMEunLlrcS+22+rpKwk/5afuMwYpdz1pjzVcxcAD8PoB2 yZtbicj9GQOwCnM72HlOZzs= X-Google-Smtp-Source: ANB0Vda5+bgdgSOlPEhqeDrCpPqC/hJbMvhVc9ghwe8rlLoUhzgVDAxGmSTW+6MKfA01j5YJwlsGmA== X-Received: by 2002:a17:902:528a:: with SMTP id a10-v6mr6890065pli.199.1535233218835; Sat, 25 Aug 2018 14:40:18 -0700 (PDT) Received: from ?IPv6:2603:3024:151c:55f0:f595:40dc:8980:444e? ([2603:3024:151c:55f0:f595:40dc:8980:444e]) by smtp.gmail.com with ESMTPSA id s73-v6sm17087002pfi.154.2018.08.25.14.40.17 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Sat, 25 Aug 2018 14:40:18 -0700 (PDT) Content-Type: text/plain; charset=utf-8 Mime-Version: 1.0 (Mac OS X Mail 11.5 \(3445.9.1\)) From: Dino Farinacci In-Reply-To: <153513922907.22939.10542350679349996082@ietfa.amsl.com> Date: Sat, 25 Aug 2018 14:40:15 -0700 Cc: secdir@ietf.org, draft-ietf-lisp-rfc6830bis.all@ietf.org, IETF Discussion Mailing List , Dino Farinacci , "lisp@ietf.org list" Content-Transfer-Encoding: quoted-printable Message-Id: References: <153513922907.22939.10542350679349996082@ietfa.amsl.com> To: Kyle Rose X-Mailer: Apple Mail (2.3445.9.1) Archived-At: Subject: Re: [secdir] Secdir last call review of draft-ietf-lisp-rfc6830bis-15 X-BeenThere: secdir@ietf.org X-Mailman-Version: 2.1.27 Precedence: list List-Id: Security Area Directorate List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 25 Aug 2018 21:40:22 -0000 > Reviewer: Kyle Rose > Review result: Has Issues Thanks for the review Kyle. See my responses inline. > I have reviewed this document as part of the security directorate's = ongoing > effort to review all IETF documents being processed by the IESG. These = comments > were written primarily for the benefit of the security area directors. = Document > editors and WG chairs should treat these comments just like any other = last call > comments. >=20 > For intranet purposes, LISP (including this document) is Ready: = operators > adopting this technology assume responsibility for the potentially = novel > operational difficulties of a routing infrastructure having seen = limited > deployment in adversarial environments. For internet deployment, = readiness is > less clear. Right, agree. > For the internet core (DFZ RIB) use-case, LISP proposes replacing BGP = sessions > and global eventually-consistent state sharing with a global control = plane and LISP *does not propse to eliminate BGP*, in fact it needs it so RLOC = reachability across the network is available, or there would be no = underlay for the LISP overlay. > piecewise on-demand state pull. This new control plane presents novel > opportunities for attackers, and so RFC 7834 recommends authentication = for all > control-plane traffic as a countermeasure for many of the threats = outlined in > RFC 7835. Proper authentication will be effective for certain classes = of > attacks, but does not completely address the security needs of the = control > plane, nor is it clear that the proposed authentication is appropriate = to the > desired scale of deployment. You are missing pieces of the design and hence why you came to the = conclusion you did. There are three documents that enhance the security = of LISP, they are: (1) RFC 8061 - Locator/ID Separation Protocol (LISP) Data-Plane = Confidentiality (2) RFC 8111 - Locator/ID Separation Protocol Delegated Database Tree = (LISP-DDT) (3) draft-farinacci-lisp-ecdsa-auth You find strong asymmetric authenticaiton and authorization in (3). And = you=E2=80=99ll find authentication of the mapping system nodes in (2). = And note that (1) can be used and layered under the control-plane to = give encrypted control-plane flows (or use DTLS as LISP-SEC refers to = for the messages it requires for its functionality). > One area of concern, of which I have not been able to find discussion, = is that > of the implications of shared capacity for the control and data = planes, and how > this can allow a volumetric data plane attack to deny a router access = to the > global mapping system, slowly choking off service to uncached portions = of the Well yes, this happens with all our IETF protocols. It is a valid = concern and there are many operational techniques in network = infrastructure that *help* solve (but not eliminate) these problems. > EID address space. Section 6.7 of draft-ietf-lisp-sec discusses denial = of > service attacks, but fails to distinguish between impersonation = attacks > (properly countered by authentication using a pre-established chain of = trust) > and volumetric attacks (perhaps complicated by those very = authentication > mechanisms, which are often quite expensive). If discussion of this = class of > issues exists elsewhere, I would appreciate a pointer as I have not = yet found > it. In draft-farinacci-lisp-ecdsa-auth, there are mechanisms to sign = Map-Register and Map-Requests going to the mapping system. The = map-servers, that make up the mapping system, verify signatures by = looking up public-keys in another part of the mapping system. > I would also like clarification on what defines the separation between = the > control plane and data plane, and whether authentication itself is = used to A control-plane obtains information to store in a table. The data-plane = uses that table. That is the definition in the simpliest form. > distinguish, because that impacts how to precisely describe how = attacks relate > to the architecture. Lack of clarity here will lead to inconsistent = sets of > assumptions and security assertions. We have a lot of research and documentation identifying the threats and = how to manage caches to minmize the impact of an attack. See the = following documents: (1) RFC 7835 (was draft-ietf-lisp-threats)=20 (2) draft-ietf-lisp-rfc6833bis (3) RFC 7215 (was draft-ietf-lisp-deployment)=20 These documents also point to research papers that have done analysis on = threat attacks. > Moreso than this particular document, draft-ietf-lisp-sec is probably = where the > real action is for the security area. That document poses a multitude = of And the documents I cite above. > questions, only the most obvious of which is why communication between = an ITR > and a Map-Resolver should be over a bespoke protocol instead of (say) = DTLS. LISP-SEC does suggest that DTLS can be used. And there have been = proposals to run a reliable transport between the nodes that use the = mapping system and the nodes that are part of the mapping system. And = when using TCP, TLS can be acompanied as well as turning on encryption = in QUIC. This document is: (1) draft-kouvelas-lisp-reliable-transport > Since there must be a pre-established trust relationship between the = two, and > presumably a persistent session, this seems an obvious choice for > confidentiality and integrity protection. (Note: this is not intended = as a > statement that DTLS is definitely a better choice, only that I have = not been > able to find documentation of consideration of this design alternative = and why > it was rejected.) Right, agree, and understand. > Another question it poses is: how does the Map-Resolver authenticate = the > Map-Server? Symmetric authentication with the ITR-OTK demonstrates = only that We plane to add that in draft-farinacci-lisp-ecdsa-auth. Up until now it = was the clients of the mapping system that first needed to be = authenticated, but the map-servers can do the same. We plan to adding = signing Map-Notify messages which is typically an Ack to a signed = Map-Register sent by an xTR. > the response is associated with the request: it's not immediately = clear to me > what security guarantees it provides to the ITR. Limiting attacks to = on-path > attackers, yes. But what about MitM? That class of attacks requires = either a > pre-shared key (implying a pre-existing trust relationship between a We do use pre-shared keys for registering to the mapping system. And you = could encrypt messages in both directions using this shared-key. This = shared-key was intended for authorization of a particulary (IID, EID) = pair to the mapping system, but can be easily for encryption. > Map-Resolver and every Map-Server it interacts with) or asymmetric > authentication with some kind of trust anchor. I have been able to = find no > mention of the latter, and it does not seem that the former scales = particularly > well. The way draft-farinacci-lisp-ecdsa-auth specs this is out is: (1) A controller registers hash-to-pubkey mappings in the mapping = system. There is a shared key between the controller and map-server(s) = so only specific, authorized controllers can register these public-keys. (2) When Map-Register messages arrive at the Map-Server, there is a = signature-EID in the message, that is the hash of the public-key used to = lookup the hash-to-pubkey mapping, if mapping not found, Map-Register is = rejected. If found, the signature is verified.=20 (3) When Map-Requerst messages arrive at the Map-Resolver, the same = happens as in (2). Note when LISP0-DDT is used, each level of the delegation hierarchy = advertises the public-key of the children so when they send Map-Referral = messages which are signed by the children, the Map-Resolver has a = public-key to verify the Map-Referral signature. > Given the difficulties in evaluating the readiness of this one piece = of the > LISP ecosystem, it may be best to batch the set of documents = describing the > entire protocol and to move them through IETF LC at the same time. I hope I have helped you a bit. And if you have any more questions, = please don=E2=80=99t hesitate to ask. Thanks again for your review, Dino From nobody Sat Aug 25 15:22:37 2018 Return-Path: X-Original-To: secdir@ietfa.amsl.com Delivered-To: secdir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id B768B130E44 for ; Sat, 25 Aug 2018 15:22:22 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.599 X-Spam-Level: X-Spam-Status: No, score=-2.599 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_LOW=-0.7, URIBL_BLOCKED=0.001] autolearn=unavailable autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id RFc8eg5czvWs for ; Sat, 25 Aug 2018 15:22:21 -0700 (PDT) Received: from smtp.rcn.com (smtp.rcn.com [69.168.97.78]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id DEFAE130EE8 for ; Sat, 25 Aug 2018 15:22:20 -0700 (PDT) X_CMAE_Category: , , X-CNFS-Analysis: v=2.2 cv=d6a38lrE c=1 sm=1 tr=0 a=OXtaa+9CFT7WVSERtyqzJw==:117 a=OXtaa+9CFT7WVSERtyqzJw==:17 a=KGjhK52YXX0A:10 a=IkcTkHD0fZMA:10 a=NTnny0joGdQA:10 a=dapMudl6Dx4A:10 a=bmmO2AaSJ7QA:10 a=BTUBnpS-AAAA:8 a=JB6XG_uElUq02r_l0aEA:9 a=QEXdDO2ut3YA:10 a=pblkFgjdBCuYZ9-HdJ6i:22 X-CM-Score: 0 X-Scanned-by: Cloudmark Authority Engine X-Authed-Username: ZHNlb21uQHJjbi5jb20= Authentication-Results: smtp01.rcn.cmh.synacor.com smtp.mail=david+work@mandelberg.org; spf=neutral; sender-id=neutral Authentication-Results: smtp01.rcn.cmh.synacor.com header.from=david+work@mandelberg.org; sender-id=neutral Authentication-Results: smtp01.rcn.cmh.synacor.com smtp.user=dseomn@rcn.com; auth=pass (LOGIN) Received-SPF: neutral (smtp01.rcn.cmh.synacor.com: 209.6.43.168 is neither permitted nor denied by domain of mandelberg.org) Received: from [209.6.43.168] ([209.6.43.168:33684] helo=uriel.mandelberg.org) by smtp.rcn.com (envelope-from ) (ecelerity 3.6.25.56547 r(Core:3.6.25.0)) with ESMTPSA (cipher=DHE-RSA-AES256-GCM-SHA384) id 88/04-26904-B96D18B5; Sat, 25 Aug 2018 18:22:19 -0400 Received: from [192.168.1.152] (DD-WRT [192.168.1.1]) by uriel.mandelberg.org (Postfix) with ESMTPSA id 3E79A1C6093; Sat, 25 Aug 2018 18:22:18 -0400 (EDT) To: Kent Watsen , "draft-ietf-netconf-zerotouch.all@ietf.org" , "iesg@ietf.org" , "secdir@ietf.org" References: <361393b0-6666-08ff-bdf4-3ba3bf4323c7@mandelberg.org> <47EEE9B6-5BC2-4A1F-ABB2-2ACB1C494545@juniper.net> <4579f9bf-0ead-a6af-dc80-a841527414eb@mandelberg.org> <51E98D22-1DBF-4069-A750-90987EB96B0D@juniper.net> From: David Mandelberg Message-ID: Date: Sat, 25 Aug 2018 18:22:15 -0400 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Thunderbird/52.9.1 MIME-Version: 1.0 In-Reply-To: Content-Type: text/plain; charset=utf-8; format=flowed Content-Language: en-US Content-Transfer-Encoding: 7bit Archived-At: Subject: Re: [secdir] secdir review of draft-ietf-netconf-zerotouch-22 X-BeenThere: secdir@ietf.org X-Mailman-Version: 2.1.27 Precedence: list List-Id: Security Area Directorate List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 25 Aug 2018 22:22:23 -0000 Hi, Sorry for the late reply, I've been busy with the new job I just started at. On 08/20/2018 10:41 AM, Kent Watsen wrote: >>> For unsigned data provided by a trusted source of bootstrapping data, >>> the availability of the data is the only measure of it being current. >>> Since the untrusted data comes from a trusted source, its current >>> availability is meaningful. >> >> (nit) The only trusted sources of bootstrapping data are TLS servers, >> right? I think this paragraph would be a bit stronger if you explicitly >> mentioned that TLS's integrity guarantee and replay protection are what >> you're relying on here. > > Now the paragraph says: > > For unsigned data provided by a trusted source of bootstrapping data > (i.e., a bootstrap server), the availability of the data is the only > measure of it being current. Since the untrusted data comes from a > trusted source, its current availability is meaningful and, since > bootstrap servers use TLS, the contents of the exchange cannot be > modified or replayed. > > Okay? Looks good. -- https://david.mandelberg.org/ From nobody Sun Aug 26 09:42:46 2018 Return-Path: X-Original-To: secdir@ietfa.amsl.com Delivered-To: secdir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 9BFD712785F; Sun, 26 Aug 2018 09:42:44 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.201 X-Spam-Level: X-Spam-Status: No, score=-4.201 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 345xVEdSyqO5; Sun, 26 Aug 2018 09:42:43 -0700 (PDT) Received: from dmz-mailsec-scanner-4.mit.edu (dmz-mailsec-scanner-4.mit.edu [18.9.25.15]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id A8111128B14; Sun, 26 Aug 2018 09:42:42 -0700 (PDT) X-AuditID: 1209190f-2e9ff70000006e88-17-5b82d880cdc1 Received: from mailhub-auth-4.mit.edu ( [18.7.62.39]) (using TLS with cipher DHE-RSA-AES256-SHA (256/256 bits)) (Client did not present a certificate) by dmz-mailsec-scanner-4.mit.edu (Symantec Messaging Gateway) with SMTP id 96.81.28296.188D28B5; Sun, 26 Aug 2018 12:42:41 -0400 (EDT) Received: from outgoing.mit.edu (OUTGOING-AUTH-1.MIT.EDU [18.9.28.11]) by mailhub-auth-4.mit.edu (8.13.8/8.9.2) with ESMTP id w7QGgZGv016191; Sun, 26 Aug 2018 12:42:37 -0400 Received: from kduck.kaduk.org (24-107-191-124.dhcp.stls.mo.charter.com [24.107.191.124]) (authenticated bits=56) (User authenticated as kaduk@ATHENA.MIT.EDU) by outgoing.mit.edu (8.13.8/8.12.4) with ESMTP id w7QGgVP1008674 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NOT); Sun, 26 Aug 2018 12:42:33 -0400 Date: Sun, 26 Aug 2018 11:42:31 -0500 From: Benjamin Kaduk To: Dino Farinacci Cc: Kyle Rose , draft-ietf-lisp-rfc6830bis.all@ietf.org, "lisp@ietf.org list" , IETF Discussion Mailing List , secdir@ietf.org Message-ID: <20180826164230.GN59914@kduck.kaduk.org> References: <153513922907.22939.10542350679349996082@ietfa.amsl.com> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: User-Agent: Mutt/1.9.1 (2017-09-22) X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFupjleLIzCtJLcpLzFFi42IRYrdT12280RRtsGqhokXTlxvsFu27rzFa PNs4n8Vi/YtJbBZTzqpbfFj4kMWBzWPnrLvsHkuW/GTy6Lr4nSmAOYrLJiU1J7MstUjfLoEr Y8ux1IJGnorZG7exNTDe4+xi5OSQEDCROPt5F0sXIxeHkMBiJonfW5YwQTgbGSWWrt7EBlIl JHCVSWLSvnwQm0VAVeLHy0OMIDabgIpEQ/dlZhBbREBD4u773ewgzcwC+xklpv1axQSSEBbw k5i27ydYES/QutfbjrNCDC2XuPT/JiNEXFDi5MwnLCA2s4CWxI1/L4F6OYBsaYnl/zhAwpwC thIvtzSBlYgKKEvs7TvEPoFRYBaS7llIumchdC9gZF7FKJuSW6Wbm5iZU5yarFucnJiXl1qk a6KXm1mil5pSuokRFNSckvw7GOc0eB9iFOBgVOLhbVjUGC3EmlhWXJl7iFGSg0lJlPeRVVO0 EF9SfkplRmJxRnxRaU5q8SFGCQ5mJRHeM5+BynlTEiurUovyYVLSHCxK4rz3asKjhQTSE0tS s1NTC1KLYLIyHBxKErxZ14GGChalpqdWpGXmlCCkmTg4QYbzAA13B6nhLS5IzC3OTIfIn2LU 5fjzfuokZiGWvPy8VClx3pvXgIoEQIoySvPg5oCSkUT2/ppXjOJAbwnz7gEZxQNMZHCTXgEt YQJaMuNVA8iSkkSElFQDI6eIhk7V19VzKnQ+Tl9eqdqx2UIy7/RK62vPjZTZAw1CEnknNl4K e7vnzswp+qa8hwK3PGK9/WBFY+TL6zki694wPptYbSKqtorr1/4d5w86LHrwUdt+RVGehtak 23NqQ/vZAms7lKX/1C3+9iW/NjaELc9rR8kKJ84YvlyP1D+JLp/0rdSPKrEUZyQaajEXFScC AKPauwIhAwAA Archived-At: Subject: Re: [secdir] Secdir last call review of draft-ietf-lisp-rfc6830bis-15 X-BeenThere: secdir@ietf.org X-Mailman-Version: 2.1.27 Precedence: list List-Id: Security Area Directorate List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 26 Aug 2018 16:42:45 -0000 Kyle, Dino, Thanks for the review and discussion -- I look forward to seeing where it ends up. Just one note, inline... On Sat, Aug 25, 2018 at 02:40:15PM -0700, Dino Farinacci wrote: > > Reviewer: Kyle Rose > > Review result: Has Issues > > > > Another question it poses is: how does the Map-Resolver authenticate the > > Map-Server? Symmetric authentication with the ITR-OTK demonstrates only that > > We plane to add that in draft-farinacci-lisp-ecdsa-auth. Up until now it was the clients of the mapping system that first needed to be authenticated, but the map-servers can do the same. We plan to adding signing Map-Notify messages which is typically an Ack to a signed Map-Register sent by an xTR. > > > the response is associated with the request: it's not immediately clear to me > > what security guarantees it provides to the ITR. Limiting attacks to on-path > > attackers, yes. But what about MitM? That class of attacks requires either a > > pre-shared key (implying a pre-existing trust relationship between a > > We do use pre-shared keys for registering to the mapping system. And you could encrypt messages in both directions using this shared-key. This shared-key was intended for authorization of a particulary (IID, EID) pair to the mapping system, but can be easily for encryption. If the PSK does get additionally purposed for encryption, please make sure to use a modern key derivation hierarchy to provide separation between the authentication and encryption usages. -Benjamin From nobody Sun Aug 26 18:19:26 2018 Return-Path: X-Original-To: secdir@ietfa.amsl.com Delivered-To: secdir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 76C1F130DE2; Sun, 26 Aug 2018 18:19:12 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2 X-Spam-Level: X-Spam-Status: No, score=-2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id zbdLVR_tS8ed; Sun, 26 Aug 2018 18:19:11 -0700 (PDT) Received: from mail-pf1-x431.google.com (mail-pf1-x431.google.com [IPv6:2607:f8b0:4864:20::431]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 402EA1277C8; Sun, 26 Aug 2018 18:19:11 -0700 (PDT) Received: by mail-pf1-x431.google.com with SMTP id b11-v6so6928187pfo.3; Sun, 26 Aug 2018 18:19:11 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:subject:from:in-reply-to:date:cc :content-transfer-encoding:message-id:references:to; bh=f2D+zQzXcD645BJfDeDot299V9sIWuAuD4DgAKHEqyc=; b=AI4HkHuuPzt4ikYGDQUSHbsWUBnO4Kul8qbj2dXgBrNhqKMndueBWClaYd9rhwHu6M 3x3SHeaxSVYerAd0jlK4gegWg/hk0dqHSFS1doXDP2Z4ydOdd2TNjt63E1AbsrsUj4z9 h468Ljw2Ot0qBoSQl9oeHh5LsY+9H00hNtqrYmaGtyZ2giQdD5p4NmjB/d2r1yeLD6d9 27+Vbx/WGHeZGGBcZ67FVNghyOeeywbbNt4C20XThgmF+Ju/VMhgumuTOfy9wPANrile y2I7JFXV8kDkjTfzpvGRiIWxSToq0FILVRH1fgF8cqejUswd3ewWVuXYNcNCjx7k2y1L wVcQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:subject:from:in-reply-to:date:cc :content-transfer-encoding:message-id:references:to; bh=f2D+zQzXcD645BJfDeDot299V9sIWuAuD4DgAKHEqyc=; b=SdHvq2ARCvjCCh3fzTFLRvjquGUZfY2kYeJppjAxro0ZaDFtRwBJL0ALna5QQEXn5v +yJBYa619TSzyyU7YpkNoZ+D3nU2OQ0rRUYosG1WspWlIFTwi9wdRW5g51qd6BN19FTz WdEXn2/3VdQaZ6PlobpHD3GnrE2aNEm3OsxlBTvS+R1bVGxvtjvVoSLVNRCuf3LlWLD+ zYkQ9/Qey691TgGkw/SJnPXmH5QSvrB4GwaK7bN4AMjVdVRcX8tvEJiPUyLVEYOnyNLu /9gaLHlgtwsH6/9GktUiRQTnaplbn+Yy/QVSI/gAQt7RS1tacDc4MsGhTqipDagwDJrC eMJQ== X-Gm-Message-State: APzg51AfEsIKHFUj3kD76ZLkMrpSPaG9gn20rqpL08u53SQHc7koX9YX P0IuQVMJKDwrl4d+B1cb/yg= X-Google-Smtp-Source: ANB0VdaLrEMNrgN3jozPajvvtpMqPRqekYkFWkF1/f0wcm83DTMINUwS9bnyDwVeFuSs0niqxST/Lg== X-Received: by 2002:a62:fcd2:: with SMTP id e201-v6mr12057492pfh.101.1535332750774; Sun, 26 Aug 2018 18:19:10 -0700 (PDT) Received: from ?IPv6:2600:380:8534:1feb:3042:68f0:cdae:2918? ([2600:380:8534:1feb:3042:68f0:cdae:2918]) by smtp.gmail.com with ESMTPSA id s75-v6sm21326610pfd.108.2018.08.26.18.19.10 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Sun, 26 Aug 2018 18:19:10 -0700 (PDT) Content-Type: text/plain; charset=utf-8 Mime-Version: 1.0 (1.0) From: Dino Farinacci X-Mailer: iPhone Mail (15G77) In-Reply-To: <20180826164230.GN59914@kduck.kaduk.org> Date: Sun, 26 Aug 2018 18:19:09 -0700 Cc: Kyle Rose , draft-ietf-lisp-rfc6830bis.all@ietf.org, "lisp@ietf.org list" , IETF Discussion Mailing List , secdir@ietf.org Content-Transfer-Encoding: quoted-printable Message-Id: <196C2E5D-3DE1-46DD-9DC8-B3B0EC29DA10@gmail.com> References: <153513922907.22939.10542350679349996082@ietfa.amsl.com> <20180826164230.GN59914@kduck.kaduk.org> To: Benjamin Kaduk Archived-At: Subject: Re: [secdir] Secdir last call review of draft-ietf-lisp-rfc6830bis-15 X-BeenThere: secdir@ietf.org X-Mailman-Version: 2.1.27 Precedence: list List-Id: Security Area Directorate List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 27 Aug 2018 01:19:13 -0000 > If the PSK does get additionally purposed for encryption, please make sure= > to use a modern key derivation hierarchy to provide separation between the= > authentication and encryption usages. I would venture to say we wouldn=E2=80=99t use the PSK for that. Our options= are to negotiate a shared session key with the asymmetric keys already bein= g used, use DTLS or TLS, or use lisp-crypto and have control messages encaps= ulated I the LISP data-plane. And yes, the later has 6 cipher suites with co= mbinations of all the latest and greatest in Crypto (but not Edward Curves).= =20 Dino= From nobody Sun Aug 26 19:30:11 2018 Return-Path: X-Original-To: secdir@ietfa.amsl.com Delivered-To: secdir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 64CF0130E45; Sun, 26 Aug 2018 19:30:04 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.749 X-Spam-Level: X-Spam-Status: No, score=-1.749 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_ENVFROM_END_DIGIT=0.25, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001] autolearn=no autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 2YeOkujte4DR; Sun, 26 Aug 2018 19:30:03 -0700 (PDT) Received: from mail-it0-x22a.google.com (mail-it0-x22a.google.com [IPv6:2607:f8b0:4001:c0b::22a]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id F123C130E44; Sun, 26 Aug 2018 19:30:02 -0700 (PDT) Received: by mail-it0-x22a.google.com with SMTP id u13-v6so541209iti.1; Sun, 26 Aug 2018 19:30:02 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=fX0WUVTsuNp5Z/zNI+jVlwOK4ceAg6u4IFuCX+ibY/U=; b=AQ/kwyCczG0Ff14cUJSu7ylYcI2a0+fRhD9l2TXHdP+6AUlchw+/zg2zi+HDmtX76S LGBzzENfPWXtQ47/H/trRjB4ZEbLCgPwKfOSR3WP10xPE+Qb3drlgyxNmbBfCXz9BhVc 2GNKQnY3Ymu9fQEbqM158KUxaNYNMarKsrL3t0192IRuxX5xupuc6EOk+bNAZijZwDpj J5IpkAkobJaEQZv+oG+LdBkPJzVPsVQS0hAFqKaoGTKkemScg8nPaUyWAIVZEMk21R4u 6k6ThxK7lx+uUeiBsJ6Ot0xCV2CaHlmk5mzjolspuv6FIMPH30oGNfS/12fFt0VINCjr Z3wQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=fX0WUVTsuNp5Z/zNI+jVlwOK4ceAg6u4IFuCX+ibY/U=; b=F+uAzzRi5hHAFwY2ZVxgIiinVmqUxJFj10qMvBe0Zyf7qV4Cv1E7h5qgRacndZ38Jx boiwA+mKoqB58Mh8IUJ0gsokroayeiiFc5kr/3yU4XmW3aX3b92QskYDfp9dNNtenZ1z gZkeSZnksp9+lXIBeWEu/TQnV2ev7Kmc59QRTW3HJV8uIRuDtJr5xS6IQ3+6LjwhfH/o DiOue5BBy4Z065MtE7y4WgjtaisIL/O7DMWRlOQZq4KHulihuSnkxarhYzFdim2piOzT JbI7ousz7GbdsU7EgTOoR6o0lAUdr8qza3fhggHLFvHrYjv+jvBE/33SdJBNeMfkmg17 BzPQ== X-Gm-Message-State: APzg51ChvmedGSRX0p+PN8SqY5pX6cDxfRQ7GJdv6ECntjkgTnhrDrEh S8KfApM9o6UePpCgpUSZzQMiXwj8GF4hDTi6a5cG2g== X-Google-Smtp-Source: ANB0VdY83mp2GO15zr9O0VUAL++ULDiX8RVcjvjkD7iiztm3aOMY2TxH97eB+2J+CKts4k8Mq/L7g/2OJay5qolPeSw= X-Received: by 2002:a02:3b55:: with SMTP id i21-v6mr8874355jaf.118.1535337002092; Sun, 26 Aug 2018 19:30:02 -0700 (PDT) MIME-Version: 1.0 References: In-Reply-To: From: Christopher Wood Date: Sun, 26 Aug 2018 19:29:51 -0700 Message-ID: To: William Denniss Cc: The IESG , draft-ietf-oauth-device-flow.all@ietf.org, secdir@ietf.org Content-Type: multipart/alternative; boundary="0000000000009ed07705746180f3" Archived-At: Subject: Re: [secdir] secdir review of draft-ietf-oauth-device-flow X-BeenThere: secdir@ietf.org X-Mailman-Version: 2.1.27 Precedence: list List-Id: Security Area Directorate List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 27 Aug 2018 02:30:04 -0000 --0000000000009ed07705746180f3 Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable Hi William, Please see inline below. On Wed, Aug 1, 2018 at 5:03 PM William Denniss wrote: > > On Tue, Jun 12, 2018 at 5:55 PM, Christopher Wood < > christopherwood07@gmail.com> wrote: > >> Hello, >> >> I have reviewed this document as part of the security directorate's >> ongoing effort to review all IETF documents being processed by the >> IESG. These comments were written primarily for the benefit of the >> security area directors. Document editors and WG chairs should treat >> these comments just like any other last call comments. >> >> The summary of my review is: Ready with nits. >> >> Overall, the document is in fine shape. I have a few general comments >> (not quite nits, >> though not quite issues either), listed below: >> >> - Section 3.5, fifth paragraph: Requiring clients to poll at a >> =E2=80=9Creasonable=E2=80=9D polling interval >> without a suggestion of what is reasonable seems strange. Could you >> suggest a value that=E2=80=99s >> within reason, e.g., every second? >> > > We documented a default of 5s in version 12. > > >> - Section 5.1, first paragraph: It might be useful to point to Section >> 6.1 wherein User Code >> generation is discussed. Right now minimum entropy =E2=80=9Crequirements= =E2=80=9D are >> listed without further >> details regarding viable mechanisms. >> > > The authors are still considering this feedback, along with Benjamin > Kaduk's DISCUSS. > > >> - Section 5.2, second paragraph: The text claims that an end user would >> end up =E2=80=9Con the >> authorization page of the wrong service.=E2=80=9D Can you provide more d= etails >> here? What stops >> the malicious MITM from serving an authorization page that=E2=80=99s >> indistinguishable from the >> legitimate service page? > > > >> - Section 5.3, first paragraph: How specifically does the authorization >> service prevent >> devices from lying when providing =E2=80=9Cinformation about the device= =E2=80=9D? Or, >> alternatively, how >> does the authorization service learn this information? >> > > These 2 also pending. > > >> - Section 5.4: Would it be useful to suggest that clients SHOULD use a >> secure (encrypted >> and authenticated) channel when communicating to the user device? >> > > This section is actually referring to real-world spying, i.e. someone in > the same room as you who can see the TV. Perhaps we need to make that mor= e > clear? > That might help. It seems to be only a matter of clarity, not correctness. > >> >> The remainder of my comments, listed below, are editorial in nature, >> aimed towards improving >> readability of the document. >> >> - Section 1, step (E): This is the first time client polling is mentione= d >> without >> discussion of timeouts or server-generated errors. The draft provides >> such details later >> on, so it would be helpful to allude or point to them here. >> > > I believe this is covered in detail in the document, this section is > intending to just be a high-level overview. > > >> - Section 3.3, second paragraph: Please cite TLS upon use (=E2=80=9C=E2= =80=A6 in a secure >> TLS-protected >> session.=E2=80=9D). >> > > Done, thanks! > > >> - Section 3.3, second paragraph: The text suggests that the server >> informs the user to >> =E2=80=9Creturn to their device.=E2=80=9D Perhaps this should be preface= d with a MAY, as >> the client will >> eventually learn that authorization is complete upon polling. >> > > MAY was added, thanks! > > >> - Section 3.3.1, first paragraph: Should it be required that >> =E2=80=9Cverification_uri_complete=E2=80=9D >> is constructed in part from the =E2=80=9Cverification_uri=E2=80=9D and = =E2=80=9Cuser_code=E2=80=9D? I=E2=80=99m >> not sure this is >> necessary, though the example given is constructed this way. If not >> required, this might be >> worth noting. >> > > The working group considered this, in fact originally we were not going t= o > have verification_uri_complete and it would just be defined as a > composition of those two values. In the end, the work group decided to ma= ke > it separate. The authorization server can combine them to create the > complete verification URI, or may use something else. > > The text currently states the following which I believe covers this: > > "A verification URI that includes the "user_code" (or > other information with the same function as the "user_code"), > designed for non-textual transmission." > > - Section 3.5, first paragraph: s/token endpoint/authentication server? >> > > This section does actually relate to the token endpoint. > Ah, okay. I misunderstood. Thanks! > >> - Section 5.1, third paragraph: This text is mostly redundant with the >> preceding paragraphs. >> I would remove or merge it with the paragraphs above. >> > > I don't agree that it's redundant. Willing to review text if you have a > concrete proposal. > My only recommendation is to remove the paragraph. I think it=E2=80=99s alr= eady covered by the preceding paragraphs. That said, I don=E2=80=99t think this = is necessary. It=E2=80=99s merely a suggestion. > > Please let me know if you=E2=80=99ve further questions, comments, or conc= erns. I >> hope this helps. > > It does indeed. Thanks for your changes! Best, Chris --0000000000009ed07705746180f3 Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable
Hi William,

<= div dir=3D"auto">Please see inline below.

On Wed, Aug 1, 2018 at 5:03 PM William Denniss <= ;wdenniss@google.com> wrote:<= /div>

On Tue, Jun 12, 2018 at 5:55= PM, Christopher Wood <christopherwood07@gmail.com> wrote:
Hello,

I have reviewed this document as part of the security directorate's
ongoing effort to review all IETF documents being processed by the
IESG.=C2=A0 These comments were written primarily for the benefit of the security area directors.=C2=A0 Document editors and WG chairs should treat<= br> these comments just like any other last call comments.

=C2=A0 The summary of my review is: Ready with nits.

Overall, the document is in fine shape. I have a few general comments (not = quite nits,
though not quite issues either), listed below:

- Section 3.5, fifth paragraph: Requiring clients to poll at a =E2=80=9Crea= sonable=E2=80=9D polling interval
without a suggestion of what is reasonable seems strange. Could you suggest= a value that=E2=80=99s
within reason, e.g., every second?

We d= ocumented a default of 5s in version 12.
=C2=A0
- Section 5.1, first paragraph: It might be useful to point to Section 6.1 = wherein User Code
generation is discussed. Right now minimum entropy =E2=80=9Crequirements=E2= =80=9D are listed without further
details regarding viable mechanisms.

Th= e authors are still considering this feedback, along with Benjamin Kaduk= 9;s DISCUSS.
=C2=A0
- Section 5.2, second paragraph: The text claims that an end user would end= up =E2=80=9Con the
authorization page of the wrong service.=E2=80=9D Can you provide more deta= ils here? What stops
the malicious MITM from serving an authorization page that=E2=80=99s indist= inguishable from the
legitimate service page?
=C2=A0
- Section 5.3, first paragraph: How specifically does the authorization ser= vice prevent
devices from lying when providing =E2=80=9Cinformation about the device=E2= =80=9D? Or, alternatively, how
does the authorization service learn this information?

These 2 also pending.
=C2=A0
- Section 5.4: Would it be useful to suggest that clients SHOULD use a secu= re (encrypted
and authenticated) channel when communicating to the user device?

This section is actually referring to real-world= spying, i.e. someone in the same room as you who can see the TV. Perhaps w= e need to make that more clear?

That might help. It seems to be only= a matter of clarity, not correctness.

=C2=A0

The remainder of my comments, listed below, are editorial in nature, aimed = towards improving
readability of the document.

- Section 1, step (E): This is the first time client polling is mentioned w= ithout
discussion of timeouts or server-generated errors. The draft provides such = details later
on, so it would be helpful to allude or point to them here.

I believe this is covered in detail in the document, t= his section is intending to just be a high-level overview.
=C2=A0=
- Section 3.3, second paragraph: Please cite TLS upon use (=E2=80=9C=E2=80= =A6 in a secure TLS-protected
session.=E2=80=9D).

Done, thanks!
=
=C2=A0
- Section 3.3, second paragraph: The text suggests that the server informs = the user to
=E2=80=9Creturn to their device.=E2=80=9D Perhaps this should be prefaced w= ith a MAY, as the client will
eventually learn that authorization is complete upon polling.

MAY was added, thanks!
=C2=A0
- Section 3.3.1, first paragraph: Should it be required that =E2=80=9Cverif= ication_uri_complete=E2=80=9D
is constructed in part from the =E2=80=9Cverification_uri=E2=80=9D and =E2= =80=9Cuser_code=E2=80=9D? I=E2=80=99m not sure this is
necessary, though the example given is constructed this way. If not require= d, this might be
worth noting.

The working group conside= red this, in fact originally we were not going to have verification_uri_com= plete and it would just be defined as a composition of those two values. In= the end, the work group decided to make it separate. The authorization ser= ver can combine them to create the complete verification URI, or may use so= mething else.
=C2=A0
The text currently states the foll= owing which I believe covers this:

"A verification URI that incl= udes the "user_code" (or
other information with th= e same function as the "user_code"),
designed for = non-textual transmission."

- Section 3.5, first paragraph: s/token endpoint/authentication server?
=

This section does actually relate to the t= oken endpoint.

Ah, okay. I misunderstood. Thanks!

=C2=A0
- Section 5.1, third paragraph: This text is mostly redundant with the prec= eding paragraphs.
I would remove or merge it with the paragraphs above.
=
I don't agree that it's redundant. Willing to review= text if you have a concrete proposal.
=

My only recommendation is to = remove the paragraph. I think it=E2=80=99s already covered by the preceding= paragraphs. That said, I don=E2=80=99t think this is necessary. It=E2=80= =99s merely a suggestion.

=C2=A0

Please let me know if you=E2=80=99ve further questions, comments, or concer= ns. I hope this helps.

It does indeed. Thanks for your chang= es!

Best,
Chris
--0000000000009ed07705746180f3-- From nobody Sun Aug 26 22:03:55 2018 Return-Path: X-Original-To: secdir@ietf.org Delivered-To: secdir@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id C04AD130E69; Sun, 26 Aug 2018 22:03:45 -0700 (PDT) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: Yaron Sheffer To: Cc: draft-ietf-taps-minset.all@ietf.org, ietf@ietf.org, taps@ietf.org X-Test-IDTracker: no X-IETF-IDTracker: 6.83.1 Auto-Submitted: auto-generated Precedence: bulk Message-ID: <153534622572.11764.16971261463087249495@ietfa.amsl.com> Date: Sun, 26 Aug 2018 22:03:45 -0700 Archived-At: Subject: [secdir] Secdir last call review of draft-ietf-taps-minset-06 X-BeenThere: secdir@ietf.org X-Mailman-Version: 2.1.27 List-Id: Security Area Directorate List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 27 Aug 2018 05:03:46 -0000 Reviewer: Yaron Sheffer Review result: Not Ready The whole notion of TAPS is new to me, so I may be missing the point here. This document defines a minimal set of network APIs that should be available to applications, in order to allow multiple different transport protocols to be used as interchangeable plug-ins with minimal or no change to applications. However the document does not cover security, and instead refers readers to a security protocol survey (draft-ietf-taps-transport-security). There's a disconnect here: in many cases we want applications to be aware of security features. For example, a typical TCP-using application should choose whether to enable TLS encryption of the connection (or as a receiver, whether to require encryption), and if TLS is selected, should at the very least receive access to the authenticated address of the connection's peer. In other words, a meaningful minimal set of APIs cannot be defined without considering the effects and requirements of security protocols. Put differently, the application normally treats the transport protocol and the security protocol layered on it as one protocol. Hence the old name of TLS: Secure Socket Layer. The application sees a single socket, not one socket for transport and another for security. This has been the case for TCP for the last 20-odd years, and is unlikely to change any time soon. I have not surveyed the protocols discussed in this draft, and I don't know whether a viable transport-level security protocol exists for each of them. If this is not the case, then I guess the industry is not yet ready for the kind of solution proposed here. From nobody Mon Aug 27 08:53:33 2018 Return-Path: X-Original-To: secdir@ietfa.amsl.com Delivered-To: secdir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 0542D130E06; Mon, 27 Aug 2018 08:53:24 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.011 X-Spam-Level: X-Spam-Status: No, score=-2.011 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, T_DKIMWL_WL_HIGH=-0.01] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=apple.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id M9sc1t_fqbpV; Mon, 27 Aug 2018 08:53:22 -0700 (PDT) Received: from nwk-aaemail-lapp02.apple.com (nwk-aaemail-lapp02.apple.com [17.151.62.67]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id F0648124C04; Mon, 27 Aug 2018 08:53:18 -0700 (PDT) Received: from pps.filterd (nwk-aaemail-lapp02.apple.com [127.0.0.1]) by nwk-aaemail-lapp02.apple.com (8.16.0.22/8.16.0.22) with SMTP id w7RFq5Ie025250; Mon, 27 Aug 2018 08:53:18 -0700 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=apple.com; h=mime-version : content-transfer-encoding : content-type : sender : subject : from : in-reply-to : date : cc : message-id : references : to; s=20180706; bh=ROZI3Odd4tmwNnZ+nqorC2+13ZVhYV7P7Hcah4MGPSc=; b=OcfQ9rklCMw+FDBBdJFhEiNUmJGClwF8tQY2jJMyV9GeZ9FmvGC6/lznSjTMPMbdv9c6 NlnUZLoqJRCGYb15X+AbeR0wgG8vfK42lEef4VS0/PtKT2+fhvnzpZwbd7vp1ESLPpYd Ciq3Y7ikG3BUijNnctiILL/tjQJM2PS6MqyRqYo1KezAnLWYFBxYknxCMaO7IgeI9lIc p1uJ8KbKy5d126ohgccnFxKqSNqXxbDiQIlW/ctKMsnHcCbFoMFG4TUqBzlr1zMiKKHo vgctu3wrp3o7aSOocRe0a0OBNhV8FVsZr3IIPQpUUDwrFZmIiYNT8715CMSAbxqTxhxV Yw== Received: from ma1-mtap-s02.corp.apple.com (ma1-mtap-s02.corp.apple.com [17.40.76.6]) by nwk-aaemail-lapp02.apple.com with ESMTP id 2m33pk4mbe-2 (version=TLSv1.2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128 verify=NO); Mon, 27 Aug 2018 08:53:18 -0700 MIME-version: 1.0 Content-transfer-encoding: 7BIT Content-type: text/plain; CHARSET=US-ASCII Received: from nwk-mmpp-sz13.apple.com (nwk-mmpp-sz13.apple.com [17.128.115.216]) by ma1-mtap-s02.corp.apple.com (Oracle Communications Messaging Server 8.0.2.3.20180614 64bit (built Jun 14 2018)) with ESMTPS id <0PE4006F7MST6H90@ma1-mtap-s02.corp.apple.com>; Mon, 27 Aug 2018 08:53:17 -0700 (PDT) Received: from process_viserion-daemon.nwk-mmpp-sz13.apple.com by nwk-mmpp-sz13.apple.com (Oracle Communications Messaging Server 8.0.2.3.20180614 64bit (built Jun 14 2018)) id <0PE400900LSPQ900@nwk-mmpp-sz13.apple.com>; Mon, 27 Aug 2018 08:53:17 -0700 (PDT) X-Va-A: X-Va-T-CD: c3998f68f5443d99dad98dff2fd2f9f7 X-Va-E-CD: cbfa0b2259f11418691e1c39b70cf19c X-Va-R-CD: 8b3096eb4796fec17348c9603c905ec8 X-Va-CD: 0 X-Va-ID: d09a0160-010d-4011-b194-829eeaf178bd X-V-A: X-V-T-CD: c3998f68f5443d99dad98dff2fd2f9f7 X-V-E-CD: cbfa0b2259f11418691e1c39b70cf19c X-V-R-CD: 8b3096eb4796fec17348c9603c905ec8 X-V-CD: 0 X-V-ID: 10a73a85-f8e7-4f70-b28d-c956685972b0 Received: from process_milters-daemon.nwk-mmpp-sz13.apple.com by nwk-mmpp-sz13.apple.com (Oracle Communications Messaging Server 8.0.2.3.20180614 64bit (built Jun 14 2018)) id <0PE400900LS0MJ00@nwk-mmpp-sz13.apple.com>; Mon, 27 Aug 2018 08:53:16 -0700 (PDT) X-Proofpoint-Virus-Version: vendor=fsecure engine=2.50.10434:,, definitions=2018-08-27_06:,, signatures=0 X-Proofpoint-Scanner-Instance: nwk-grpmailp-qapp14.corp.apple.com-10000_instance1 Received: from tpauly.scv.apple.com (tpauly.scv.apple.com [17.192.171.37]) by nwk-mmpp-sz13.apple.com (Oracle Communications Messaging Server 8.0.2.3.20180614 64bit (built Jun 14 2018)) with ESMTPSA id <0PE400KZ4MSS5X10@nwk-mmpp-sz13.apple.com>; Mon, 27 Aug 2018 08:53:16 -0700 (PDT) Sender: tpauly@apple.com From: Tommy Pauly In-reply-to: <153534622572.11764.16971261463087249495@ietfa.amsl.com> Date: Mon, 27 Aug 2018 08:53:16 -0700 Cc: secdir@ietf.org, draft-ietf-taps-minset.all@ietf.org, ietf@ietf.org, taps@ietf.org Message-id: <11A6EDDC-06EE-47E5-B61B-ED6F7B5999A6@apple.com> References: <153534622572.11764.16971261463087249495@ietfa.amsl.com> To: Yaron Sheffer X-Mailer: Apple Mail (2.3445.100.21) X-Proofpoint-Virus-Version: vendor=fsecure engine=2.50.10434:, , definitions=2018-08-27_06:, , signatures=0 Archived-At: Subject: Re: [secdir] [Taps] Secdir last call review of draft-ietf-taps-minset-06 X-BeenThere: secdir@ietf.org X-Mailman-Version: 2.1.27 Precedence: list List-Id: Security Area Directorate List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 27 Aug 2018 15:53:24 -0000 Hi Yaron, This minimal set is a description of the surface that any generic API must have to cover the common *transport* features of protocols only. This document is not meant in itself to describe an API that applications use directly, but instead describe the distilled feature set from transport services (such as reliable/unreliable sending, etc). To that end, it essentially describes what you need to be able to use basic things like TCP, UDP, etc. Even without security considered, this distillation is a non-trivial task, thus it required this document. The security document that is referenced (draft-ietf-taps-transport-security) provides a similar survey and distillation for how transport security interfaces add more surface to control and interact with handshake and record layers used on top of/in conjunction with the base transport. The set of documents that actually describe the API surface that we want applications to use (draft-ietf-taps-arch, draft-ietf-taps-api, draft-ietf-taps-interface, draft-ietf-taps-impl) does indeed provide a unified abstraction for a secure transport connection. However, this surface depends upon both the distillation from draft-ietf-taps-minset and draft-ietf-taps-transport-security. There is no intention of promoting insecure connections for applications. Thanks, Tommy > On Aug 26, 2018, at 10:03 PM, Yaron Sheffer wrote: > > Reviewer: Yaron Sheffer > Review result: Not Ready > > The whole notion of TAPS is new to me, so I may be missing the point here. This > document defines a minimal set of network APIs that should be available to > applications, in order to allow multiple different transport protocols to be > used as interchangeable plug-ins with minimal or no change to applications. > > However the document does not cover security, and instead refers readers to a > security protocol survey (draft-ietf-taps-transport-security). > > There's a disconnect here: in many cases we want applications to be aware of > security features. For example, a typical TCP-using application should choose > whether to enable TLS encryption of the connection (or as a receiver, whether > to require encryption), and if TLS is selected, should at the very least > receive access to the authenticated address of the connection's peer. In other > words, a meaningful minimal set of APIs cannot be defined without considering > the effects and requirements of security protocols. > > Put differently, the application normally treats the transport protocol and the > security protocol layered on it as one protocol. Hence the old name of TLS: > Secure Socket Layer. The application sees a single socket, not one socket for > transport and another for security. This has been the case for TCP for the last > 20-odd years, and is unlikely to change any time soon. > > I have not surveyed the protocols discussed in this draft, and I don't know > whether a viable transport-level security protocol exists for each of them. If > this is not the case, then I guess the industry is not yet ready for the kind > of solution proposed here. > > _______________________________________________ > Taps mailing list > Taps@ietf.org > https://www.ietf.org/mailman/listinfo/taps From nobody Mon Aug 27 09:06:20 2018 Return-Path: X-Original-To: secdir@ietfa.amsl.com Delivered-To: secdir@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 13714130E09; Mon, 27 Aug 2018 08:59:15 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=ietf.org; s=ietf1; t=1535385555; bh=X5vXd6g1nRNGpkx8ynXfXY5Gee9kXxKFCROxt6mEudc=; h=From:To:Date:Subject:List-Id:List-Unsubscribe:List-Archive: List-Post:List-Help:List-Subscribe; b=CB0Hi7Q9vu0s246vimhQMTHUNBkrBJjnYqJwuBnTf9+55Mu1N8MC4FdhWddYbyTpi 1wfTO/spVFygq1xmPu2sVOXfpYNjTRHB0mWw3IaTlC/0pbtlCyAV+ARptHCOmYBuXS GYP9bJedzQSvz7cIYmneuZyIKMkL3FRDszMGN7rU= X-Mailbox-Line: From new-work-bounces@ietf.org Mon Aug 27 08:59:05 2018 Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id CD28C130ED4; Mon, 27 Aug 2018 08:59:02 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=ietf.org; s=ietf1; t=1535385542; bh=X5vXd6g1nRNGpkx8ynXfXY5Gee9kXxKFCROxt6mEudc=; h=From:To:Date:Subject:List-Id:List-Unsubscribe:List-Archive: List-Post:List-Help:List-Subscribe; b=E2vuB7fBDOatDXlLgSBxRLDxvmgeIVFG47y2n8fC4j1XM6dRKBduNdyw9ZAf8aKxG ah3r35Cddpwd2t9z17GdcYhZrubeXM/xGXC06y9vLWUY9sVMMS5VmrTyDP8hUd8wzf V2y09ev2+JgxVb/kCa6uvgLTyo8vgiRGEOCeNsWQ= X-Original-To: new-work@ietf.org Delivered-To: new-work@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 041EA130E0A for ; Mon, 27 Aug 2018 08:58:52 -0700 (PDT) MIME-Version: 1.0 From: The IESG To: X-Test-IDTracker: no X-IETF-IDTracker: 6.83.1 Auto-Submitted: auto-generated Precedence: bulk MIME-Version: 1.0 Reply_to: Message-ID: <153538553200.29963.3695179052112493011.idtracker@ietfa.amsl.com> Date: Mon, 27 Aug 2018 08:58:52 -0700 Archived-At: X-BeenThere: new-work@ietf.org X-Mailman-Version: 2.1.27 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Errors-To: new-work-bounces@ietf.org Sender: "new-work" Archived-At: X-Mailman-Approved-At: Mon, 27 Aug 2018 09:06:19 -0700 Subject: [secdir] [new-work] WG Review: IP Security Maintenance and Extensions (ipsecme) X-BeenThere: secdir@ietf.org List-Id: Security Area Directorate List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 27 Aug 2018 15:59:25 -0000 The IP Security Maintenance and Extensions (ipsecme) WG in the Security Area of the IETF is undergoing rechartering. The IESG has not made any determination yet. The following draft charter was submitted, and is provided for informational purposes only. Please send your comments to the IESG mailing list (iesg@ietf.org) by 2018-09-06. IP Security Maintenance and Extensions (ipsecme) ----------------------------------------------------------------------- Current status: Active WG Chairs: David Waltermire Tero Kivinen Assigned Area Director: Eric Rescorla Security Area Directors: Eric Rescorla Benjamin Kaduk Mailing list: Address: ipsec@ietf.org To subscribe: https://www.ietf.org/mailman/listinfo/ipsec Archive: https://mailarchive.ietf.org/arch/browse/ipsec/ Group page: https://datatracker.ietf.org/group/ipsecme/ Charter: https://datatracker.ietf.org/doc/charter-ietf-ipsecme/ The IPsec suite of protocols includes IKEv1 (RFC 2409 and associated RFCs, IKEv1 is now obsoleted), IKEv2 (RFC 7296), and the IPsec security architecture (RFC 4301). IPsec is widely deployed in VPN gateways, VPN remote access clients, and as a substrate for host-to-host, host-to-network, and network-to-network security. The IPsec Maintenance and Extensions Working Group continues the work of the earlier IPsec Working Group which was concluded in 2005. Its purpose is to maintain the IPsec standard and to facilitate discussion of clarifications, improvements, and extensions to IPsec, mostly to ESP and IKEv2. The working group also serves as a focus point for other IETF Working Groups who use IPsec in their own protocols. The current work items include: IKEv1 using shared secret authentication was partially resistant to quantum computers. IKEv2 removed this feature to make the protocol more usable. The working group will add a mode to IKEv2 or otherwise modify the shared-secret mode of IKEv2 to have similar quantum resistant properties to those of IKEv1. Split-DNS is a common configuration for VPN deployments in which only one or a few private DNS domains are accessible and resolvable via the tunnel. Adding new configuration attributes to IKEv2 for configuring Split-DNS would allow more deployments to adopt IKEv2. This configuration should also allow verification of the domains using DNSSEC. Working group will specify needed configuration attributes for IKEv2. Currently, widely used counter mode based ciphers send both the ESP sequence number and IV in the form of a counter, as they are very commonly the same. There has been interest to work on a document that will compress the packet and derive IV from the sequence number instead of sending it in separate field. The working group will specify how this compression can be negotiated in the IKEv2, and specify how the encryption algorithm and ESP format is used in this case. The Group Domain of Interpretation (GDOI - RFC 6407) is an IKEv1-based protocol for negotiating group keys for both multicast and unicast uses. The Working Group will develop an IKEv2-based alternative that will include cryptographic updates. A possible starting point is draft-yeung-g-ikev2. Postquantum Cryptography brings new key exchange methods. Most of these methods that are known to date have much larger public keys then conventional Diffie-Hellman public keys. Directly using these methods in IKEv2 might lead to a number of problems due to the increased size of initial IKEv2 messages. The working group will analyze the possible problems and develop a solution, that will make adding Postquantum key exchange methods more easy. The solution will allow post quantum key exchange to be performed in parallel with (or instead of) the existing Diffie-Hellman key exchange. A growing number of use cases for constrained networks - but not limited to those networks - have shown interest in reducing ESP (resp. IKEv2) overhead by compressing ESP (resp IKEv2) fields. The WG will define extensions of ESP and IKEv2 to enable ESP header compression. Possible starting points are draft-mglt-ipsecme-diet-esp, draft-mglt-ipsecme-ikev2-diet-esp-extension, draft-smyslov-ipsecme-ikev2-compression and draft-smyslov-ipsecme-ikev2-compact. RFC7427 allows peers to indicate hash algorithms they support, thus eliminating ambiguity in selecting a hash function for digital signature authentication. However, advances in cryptography lead to a situation when some signature algorithms have several signature formats. A prominent example is RSASSA-PKCS#1 v 1.5 and RSASSA-PSS, however it is envisioned that the same situation may repeat in future with other signature algorithms. Currently IKE peers have no explicit way to indicate to each other which signature format(s) they support. That leads to interoperability problems. The WG will investigate the situation and come up with a solution that allows peers to deal with the problem in an interoperable way. RFC7296 defines a generic notification code that is related to a failure to handle an internal address failure. That code does not explicitly allow an initiator to determine why a given address family is not assigned, nor whether it should try using another address family. The Working Group will specify a set of more specific notification codes that will provide sufficient information to the IKEv2 initiator about the encountered failure. A possible starting pointing is draft-boucadair-ipsecme-ipv6-ipv4-codes. Some systems support security labels (aka security context) as one of the selectors of the SPD. This label needs to be part of the IKE negotiation for the IPsec SA. Non-standard implementations exist for IKEv1 (formerly abusing IPSEC Security Association Attribute 10, now using private space IPSEC Security Association Attribute 32001). The work is to standarize this for IKEv2, in a way that will be backwards compatible with old implementations, meaning it must not require any changes to implementations not supporting this. Milestones: Apr 2018 - IETF Last Call on Split-DNS Configuration for IKEv2 Apr 2018 - IETF Last Call on Implicit IV in IPsec May 2018 - IETF Last Call on partially quantum resistant IKEv2 Oct 2018 - The internal address failure indication in IKEv2 to IESG Dec 2018 - The ESP on contrained network to IESG Dec 2018 - G-DOI for IKEv2 to IESG Jan 2019 - The security labels support for IKEv2 to IESG Mar 2019 - Signature algorithm negotiation for IKEv2 to IESG May 2019 - Postquantum cryptography document for IKEv2 to IESG _______________________________________________ new-work mailing list new-work@ietf.org https://www.ietf.org/mailman/listinfo/new-work From nobody Mon Aug 27 13:00:42 2018 Return-Path: X-Original-To: secdir@ietfa.amsl.com Delivered-To: secdir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id DB309130DF5; Mon, 27 Aug 2018 13:00:34 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.201 X-Spam-Level: X-Spam-Status: No, score=-4.201 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id XgpTwQabO3pT; Mon, 27 Aug 2018 13:00:32 -0700 (PDT) Received: from dmz-mailsec-scanner-5.mit.edu (dmz-mailsec-scanner-5.mit.edu [18.7.68.34]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 12559130DEA; Mon, 27 Aug 2018 13:00:31 -0700 (PDT) X-AuditID: 12074422-6f9ff7000000088b-33-5b84585c4782 Received: from mailhub-auth-4.mit.edu ( [18.7.62.39]) (using TLS with cipher DHE-RSA-AES256-SHA (256/256 bits)) (Client did not present a certificate) by dmz-mailsec-scanner-5.mit.edu (Symantec Messaging Gateway) with SMTP id 91.D3.02187.D58548B5; Mon, 27 Aug 2018 16:00:30 -0400 (EDT) Received: from outgoing.mit.edu (OUTGOING-AUTH-1.MIT.EDU [18.9.28.11]) by mailhub-auth-4.mit.edu (8.13.8/8.9.2) with ESMTP id w7RK0Nmm018792; Mon, 27 Aug 2018 16:00:25 -0400 Received: from kduck.kaduk.org (24-107-191-124.dhcp.stls.mo.charter.com [24.107.191.124]) (authenticated bits=56) (User authenticated as kaduk@ATHENA.MIT.EDU) by outgoing.mit.edu (8.13.8/8.12.4) with ESMTP id w7RK0JaK028926 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NOT); Mon, 27 Aug 2018 16:00:21 -0400 Date: Mon, 27 Aug 2018 15:00:19 -0500 From: Benjamin Kaduk To: Tommy Pauly Cc: Yaron Sheffer , taps@ietf.org, draft-ietf-taps-minset.all@ietf.org, ietf@ietf.org, secdir@ietf.org Message-ID: <20180827200019.GW59914@kduck.kaduk.org> References: <153534622572.11764.16971261463087249495@ietfa.amsl.com> <11A6EDDC-06EE-47E5-B61B-ED6F7B5999A6@apple.com> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <11A6EDDC-06EE-47E5-B61B-ED6F7B5999A6@apple.com> User-Agent: Mutt/1.9.1 (2017-09-22) X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFuplleLIzCtJLcpLzFFi42IRYrdT142LaIk2WDKFyeLd9v/sFs82zmex +LDwIYvFnRiLiScOslqsuj+D3YHNY+vJH2weO2fdZfdYsuQnUwBzFJdNSmpOZllqkb5dAlfG iUPtLAU9chUfuzaxNzCek+hi5OSQEDCRmHP/BGMXIxeHkMBiJomF+76zQjgbGSW6Oo6zQDhX mSTm310F5HBwsAioSrQuCATpZhNQkWjovswMYosIKEl0rNzMDFLPLNDGKHF1WQcjSEJYwENi 690WJhCbF2jdws+z2EHmCAmUS1z5kAoRFpQ4OfMJC4jNLKAlcePfSyaQEmYBaYnl/zhAwpwC thI3tv4FmygqoCyxt+8Q+wRGgVlIumch6Z6F0L2AkXkVo2xKbpVubmJmTnFqsm5xcmJeXmqR rqlebmaJXmpK6SZGcEi7KO1gnPjP6xCjAAejEg/vBI6WaCHWxLLiytxDjJIcTEqivCweQCG+ pPyUyozE4oz4otKc1OJDjBIczEoivHs+N0cL8aYkVlalFuXDpKQ5WJTEee/XhEcLCaQnlqRm p6YWpBbBZGU4OJQkeNPCgYYKFqWmp1akZeaUIKSZODhBhvMADe8HqeEtLkjMLc5Mh8ifYtTl +PN+6iRmIZa8/LxUKXHeMJAiAZCijNI8uDmgVCSRvb/mFaM40FvCvK9AqniAaQxu0iugJUxA S2a8agBZUpKIkJJqYJyoF7Gy58nzlXYprzJX+T/b8MWg6Ma1Td6euwPypq1v8DWf4ZvW//vT QbFbix32tW16YVVyizVbXO9WsIqFruP7lwZByvv3qW4+d+Ff5InejUxfbq28xWWkpFjN8HR3 rFNOxjeLqTnav3/OfLjKQCTu3acWG7a361T6aj8ZGgkL2LIxTwj88kuJpTgj0VCLuag4EQAu ZJpIIAMAAA== Archived-At: Subject: Re: [secdir] [Taps] Secdir last call review of draft-ietf-taps-minset-06 X-BeenThere: secdir@ietf.org X-Mailman-Version: 2.1.27 Precedence: list List-Id: Security Area Directorate List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 27 Aug 2018 20:00:35 -0000 On Mon, Aug 27, 2018 at 08:53:16AM -0700, Tommy Pauly wrote: > Hi Yaron, > > This minimal set is a description of the surface that any generic API must have to cover the common *transport* features of protocols only. This document is not meant in itself to describe an API that applications use directly, but instead describe the distilled feature set from transport services (such as reliable/unreliable sending, etc). To that end, it essentially describes what you need to be able to use basic things like TCP, UDP, etc. Even without security considered, this distillation is a non-trivial task, thus it required this document. > > The security document that is referenced (draft-ietf-taps-transport-security) provides a similar survey and distillation for how transport security interfaces add more surface to control and interact with handshake and record layers used on top of/in conjunction with the base transport. FWIW, I think that draft-ietf-taps-transport-security would benefit from some more attention from the security (is it ready enough to ask for an early secdir review?). I looked at bits of the -01, and though the -02 is improved in some ways, I think there are still some incorrect statements present about some of the protocols in question, etc.. Anyone from secdir interested? -Ben > The set of documents that actually describe the API surface that we want applications to use (draft-ietf-taps-arch, draft-ietf-taps-api, draft-ietf-taps-interface, draft-ietf-taps-impl) does indeed provide a unified abstraction for a secure transport connection. However, this surface depends upon both the distillation from draft-ietf-taps-minset and draft-ietf-taps-transport-security. There is no intention of promoting insecure connections for applications. > > Thanks, > Tommy > > > On Aug 26, 2018, at 10:03 PM, Yaron Sheffer wrote: > > > > Reviewer: Yaron Sheffer > > Review result: Not Ready > > > > The whole notion of TAPS is new to me, so I may be missing the point here. This > > document defines a minimal set of network APIs that should be available to > > applications, in order to allow multiple different transport protocols to be > > used as interchangeable plug-ins with minimal or no change to applications. > > > > However the document does not cover security, and instead refers readers to a > > security protocol survey (draft-ietf-taps-transport-security). > > > > There's a disconnect here: in many cases we want applications to be aware of > > security features. For example, a typical TCP-using application should choose > > whether to enable TLS encryption of the connection (or as a receiver, whether > > to require encryption), and if TLS is selected, should at the very least > > receive access to the authenticated address of the connection's peer. In other > > words, a meaningful minimal set of APIs cannot be defined without considering > > the effects and requirements of security protocols. > > > > Put differently, the application normally treats the transport protocol and the > > security protocol layered on it as one protocol. Hence the old name of TLS: > > Secure Socket Layer. The application sees a single socket, not one socket for > > transport and another for security. This has been the case for TCP for the last > > 20-odd years, and is unlikely to change any time soon. > > > > I have not surveyed the protocols discussed in this draft, and I don't know > > whether a viable transport-level security protocol exists for each of them. If > > this is not the case, then I guess the industry is not yet ready for the kind > > of solution proposed here. > > > > _______________________________________________ > > Taps mailing list > > Taps@ietf.org > > https://www.ietf.org/mailman/listinfo/taps > From nobody Mon Aug 27 13:02:07 2018 Return-Path: X-Original-To: secdir@ietfa.amsl.com Delivered-To: secdir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 6A981130EFC; Mon, 27 Aug 2018 13:01:55 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.999 X-Spam-Level: X-Spam-Status: No, score=-1.999 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id SSwry7muSjZh; Mon, 27 Aug 2018 13:01:52 -0700 (PDT) Received: from mail-qk0-x230.google.com (mail-qk0-x230.google.com [IPv6:2607:f8b0:400d:c09::230]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 81595130F04; Mon, 27 Aug 2018 13:01:52 -0700 (PDT) Received: by mail-qk0-x230.google.com with SMTP id g197-v6so161708qke.5; Mon, 27 Aug 2018 13:01:52 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=from:to:cc:subject:date:message-id:in-reply-to:references :mime-version; bh=sPfHCmg76VAZrqG+BWy0l94A7ko2eleyw+FXE89kV5M=; b=cgIuJIwBGGAs8JO8CKVIC1u7UgpLnVBRFBg4fpupBmNuvbRPsWW0dp4JPMXWJcgbMC OdP9TrKuTQtP91hH4f7n96tb1MYFfChU7ou22AW/1QLNUMVqihv0FY7P1kNR8WtpMN3O GO8L61Zc5Q9JThB3gPGsYCBRePNDsZDV1yj3WQTbSUVwfLyZNJw9abQft6EyJMFdKATR 5XQdg0i0/8PRylJYZedN/tWpx8ULsjsIkGB8y+NiRkUQKv8S4mWXdGU1su/lO4FZgWlE XpN+zrEX/Ed20oUkgZdns+0S3Am8fHKsz2VZ3WqyJ7aINmNax5LSkj8DZzHcblFjaiQt 6n1A== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:from:to:cc:subject:date:message-id:in-reply-to :references:mime-version; bh=sPfHCmg76VAZrqG+BWy0l94A7ko2eleyw+FXE89kV5M=; b=kxjs86mSZIoKDm1EE9G4GrDX1wFJZX7ch58LZlj9rM6r9ENx/3+rKDWyR5qleJW8eB 2Du3GVYoS9PCQgALGY8Q1Bd2hAeSKzdpm9C0kAg1fewGNO9GCP0siX1NDPbzFrG8eN4X D8tebZT/PzD2OVq7FIRUJsh7/j7vXcPvtB5JrUpYS0TEzk92KIOG7SkSBr50Jgrlil6p opsIzgbTrbrRjiYa+Okd3DVh1UPzcULaS0nz1sfA/ogil8I7aHuxC7rC5smKNupxmHaj /pApT/PLZXAz5RHPRafM9r7D1v8wc1jzqCtGINqXfjsgv9i8pWkr8fe4WAajj35hnz+E fdmw== X-Gm-Message-State: APzg51DVAWqesSmajvk8Q/L9P7JfWE42wqXPj+X3URRtsD3kRKSMhNdE xPLEJ3z2UhLyfhB+FValzuc= X-Google-Smtp-Source: ANB0VdZtvWah34ynP4N+MQQjrhPP9XAp4kEmUJAVJpwaokWQiskfNnVsqrQKLXCeEupzrnfZe5iX2Q== X-Received: by 2002:a37:8542:: with SMTP id h63-v6mr14836364qkd.307.1535400111330; Mon, 27 Aug 2018 13:01:51 -0700 (PDT) Received: from [172.19.37.217] ([2601:184:4980:a321:8d9d:417f:9ca0:8d3c]) by smtp.gmail.com with ESMTPSA id a26-v6sm99003qtc.74.2018.08.27.13.01.49 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Mon, 27 Aug 2018 13:01:50 -0700 (PDT) From: "Aaron Falk" To: "Benjamin Kaduk" Cc: "Tommy Pauly" , "Yaron Sheffer" , taps@ietf.org, draft-ietf-taps-minset.all@ietf.org, ietf@ietf.org, secdir@ietf.org Date: Mon, 27 Aug 2018 16:01:47 -0400 X-Mailer: MailMate (1.11.3r5509) Message-ID: In-Reply-To: <20180827200019.GW59914@kduck.kaduk.org> References: <153534622572.11764.16971261463087249495@ietfa.amsl.com> <11A6EDDC-06EE-47E5-B61B-ED6F7B5999A6@apple.com> <20180827200019.GW59914@kduck.kaduk.org> MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="=_MailMate_7EFFFC0B-70AE-430C-9D96-D832BCC85B63_=" Archived-At: Subject: Re: [secdir] [Taps] Secdir last call review of draft-ietf-taps-minset-06 X-BeenThere: secdir@ietf.org X-Mailman-Version: 2.1.27 Precedence: list List-Id: Security Area Directorate List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 27 Aug 2018 20:02:00 -0000 --=_MailMate_7EFFFC0B-70AE-430C-9D96-D832BCC85B63_= Content-Type: text/plain; format=flowed My $0.02: I don't think it is too early for a SecDir review. --aaron (TAPS wg chair) On 27 Aug 2018, at 16:00, Benjamin Kaduk wrote: > On Mon, Aug 27, 2018 at 08:53:16AM -0700, Tommy Pauly wrote: >> Hi Yaron, >> >> This minimal set is a description of the surface that any generic API >> must have to cover the common *transport* features of protocols only. >> This document is not meant in itself to describe an API that >> applications use directly, but instead describe the distilled feature >> set from transport services (such as reliable/unreliable sending, >> etc). To that end, it essentially describes what you need to be able >> to use basic things like TCP, UDP, etc. Even without security >> considered, this distillation is a non-trivial task, thus it required >> this document. >> >> The security document that is referenced >> (draft-ietf-taps-transport-security) provides a similar survey and >> distillation for how transport security interfaces add more surface >> to control and interact with handshake and record layers used on top >> of/in conjunction with the base transport. > > FWIW, I think that draft-ietf-taps-transport-security would benefit > from > some more attention from the security (is it ready enough to ask for > an > early secdir review?). I looked at bits of the -01, and though the > -02 is > improved in some ways, I think there are still some incorrect > statements > present about some of the protocols in question, etc.. Anyone from > secdir > interested? > > -Ben > >> The set of documents that actually describe the API surface that we >> want applications to use (draft-ietf-taps-arch, draft-ietf-taps-api, >> draft-ietf-taps-interface, draft-ietf-taps-impl) does indeed provide >> a unified abstraction for a secure transport connection. However, >> this surface depends upon both the distillation from >> draft-ietf-taps-minset and draft-ietf-taps-transport-security. There >> is no intention of promoting insecure connections for applications. >> >> Thanks, >> Tommy >> >>> On Aug 26, 2018, at 10:03 PM, Yaron Sheffer >>> wrote: >>> >>> Reviewer: Yaron Sheffer >>> Review result: Not Ready >>> >>> The whole notion of TAPS is new to me, so I may be missing the point >>> here. This >>> document defines a minimal set of network APIs that should be >>> available to >>> applications, in order to allow multiple different transport >>> protocols to be >>> used as interchangeable plug-ins with minimal or no change to >>> applications. >>> >>> However the document does not cover security, and instead refers >>> readers to a >>> security protocol survey (draft-ietf-taps-transport-security). >>> >>> There's a disconnect here: in many cases we want applications to be >>> aware of >>> security features. For example, a typical TCP-using application >>> should choose >>> whether to enable TLS encryption of the connection (or as a >>> receiver, whether >>> to require encryption), and if TLS is selected, should at the very >>> least >>> receive access to the authenticated address of the connection's >>> peer. In other >>> words, a meaningful minimal set of APIs cannot be defined without >>> considering >>> the effects and requirements of security protocols. >>> >>> Put differently, the application normally treats the transport >>> protocol and the >>> security protocol layered on it as one protocol. Hence the old name >>> of TLS: >>> Secure Socket Layer. The application sees a single socket, not one >>> socket for >>> transport and another for security. This has been the case for TCP >>> for the last >>> 20-odd years, and is unlikely to change any time soon. >>> >>> I have not surveyed the protocols discussed in this draft, and I >>> don't know >>> whether a viable transport-level security protocol exists for each >>> of them. If >>> this is not the case, then I guess the industry is not yet ready for >>> the kind >>> of solution proposed here. >>> >>> _______________________________________________ >>> Taps mailing list >>> Taps@ietf.org >>> https://www.ietf.org/mailman/listinfo/taps >> --=_MailMate_7EFFFC0B-70AE-430C-9D96-D832BCC85B63_= Content-Type: text/html Content-Transfer-Encoding: quoted-printable
<= p dir=3D"auto">My $0.02: I don't think it is too early for a SecDir revi= ew. --aaron (TAPS wg chair)

On 27 Aug 2018, at 16:00, Benjamin Kaduk wrote:

On Mon, Aug 27, 2018 at 08:53:16AM = -0700, Tommy Pauly wrote:

Hi Yaron,
This minimal set is a description of the surface that any generic API mus= t have to cover the common *transport* features of protocols only. This d= ocument is not meant in itself to describe an API that applications use d= irectly, but instead describe the distilled feature set from transport se= rvices (such as reliable/unreliable sending, etc). To that end, it essent= ially describes what you need to be able to use basic things like TCP, UD= P, etc. Even without security considered, this distillation is a non-triv= ial task, thus it required this document.

The security document that is referenced (draft-ietf-taps-transport-secur= ity) provides a similar survey and distillation for how transport securit= y interfaces add more surface to control and interact with handshake and = record layers used on top of/in conjunction with the base transport.

FWIW, I think that draft-ietf-taps-transport= -security would benefit from
some more attention from the security (is it ready enough to ask for an early secdir review?). I looked at bits of the -01, and though the -02 i= s
improved in some ways, I think there are still some incorrect statements<= br> present about some of the protocols in question, etc.. Anyone from secdi= r
interested?

-Ben

The set of = documents that actually describe the API surface that we want application= s to use (draft-ietf-taps-arch, draft-ietf-taps-api, draft-ietf-taps-inte= rface, draft-ietf-taps-impl) does indeed provide a unified abstraction fo= r a secure transport connection. However, this surface depends upon both = the distillation from draft-ietf-taps-minset and draft-ietf-taps-transpor= t-security. There is no intention of promoting insecure connections for a= pplications.

Thanks,
Tommy

On Aug 26, = 2018, at 10:03 PM, Yaron Sheffer <yaronf.ietf@gmail.com> wrote:
=
Reviewer: Yaron Sheffer
Review result: Not Ready

The whole notion of TAPS is new to me, so I may be missing the point here= =2E This
document defines a minimal set of network APIs that should be available t= o
applications, in order to allow multiple different transport protocols to= be
used as interchangeable plug-ins with minimal or no change to application= s.

However the document does not cover security, and instead refers readers = to a
security protocol survey (draft-ietf-taps-transport-security).

There's a disconnect here: in many cases we want applications to be aware= of
security features. For example, a typical TCP-using application should ch= oose
whether to enable TLS encryption of the connection (or as a receiver, whe= ther
to require encryption), and if TLS is selected, should at the very least<= br> receive access to the authenticated address of the connection's peer. In = other
words, a meaningful minimal set of APIs cannot be defined without conside= ring
the effects and requirements of security protocols.

Put differently, the application normally treats the transport protocol a= nd the
security protocol layered on it as one protocol. Hence the old name of TL= S:
Secure Socket Layer. The application sees a single socket, not one socket= for
transport and another for security. This has been the case for TCP for th= e last
20-odd years, and is unlikely to change any time soon.

I have not surveyed the protocols discussed in this draft, and I don't kn= ow
whether a viable transport-level security protocol exists for each of the= m. If
this is not the case, then I guess the industry is not yet ready for the = kind
of solution proposed here.

_______________________________________________
Taps mailing list
Taps@ietf.org
https://www.ietf.org/mailman/listinfo/taps

--=_MailMate_7EFFFC0B-70AE-430C-9D96-D832BCC85B63_=-- From nobody Mon Aug 27 23:39:45 2018 Return-Path: X-Original-To: secdir@ietfa.amsl.com Delivered-To: secdir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 12A22130DEC; Mon, 27 Aug 2018 23:39:36 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.999 X-Spam-Level: X-Spam-Status: No, score=-1.999 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 2tbjPwE3_p7r; Mon, 27 Aug 2018 23:39:34 -0700 (PDT) Received: from mail-pg1-x52d.google.com (mail-pg1-x52d.google.com [IPv6:2607:f8b0:4864:20::52d]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 31D3D130DDB; Mon, 27 Aug 2018 23:39:34 -0700 (PDT) Received: by mail-pg1-x52d.google.com with SMTP id z25-v6so306434pgu.7; Mon, 27 Aug 2018 23:39:34 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=subject:to:cc:references:from:message-id:date:user-agent :mime-version:in-reply-to:content-language:content-transfer-encoding; bh=+z5V0AFLi8r96xHmkKJSO4q+GUPsFJCQjrrQQPBqC04=; b=jA1MV7GucB4bICQcd+ENQs5ZJBswv4ULx4998/lcYon9ml1ydsVF8ihP4VBnnlS6Ec 1ptXj13r8rc9KucAJS8k0fe9BrYtRRWyI2U4zQrJZbEoa865HZB40vfY+Tqx8DAOjlbz gVY8uk+MGPp5oEH+qlwstlHHEQTREzMJh6lltRsXgclP64xyBOwi1R1rjjTv+zcdF5rE OVBPXnPoQ1zYYC7uSxywwS8jO2AvsQBogQYWasnCpwpogTb4JxbtdiOBtIYNn//MUjl+ 9czvLrrGhibvT8f1tD+ifBWiPkd+x/9CwyYxgxX8RVeHYE0Cbo93Wm8B3dHym4Dozufs fMdQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:subject:to:cc:references:from:message-id:date :user-agent:mime-version:in-reply-to:content-language :content-transfer-encoding; bh=+z5V0AFLi8r96xHmkKJSO4q+GUPsFJCQjrrQQPBqC04=; b=cPsTZ7a/1N9WpTzkmtSAJIHsLrRwAqxL8t4wMP7uNSOLuQFoJI82dgmA/wqlwu25/s qTdUPVCTcSp8o4veZDwPIi0XnhTfhofNWsT8gp+TVx8POY5iAZx0a7aKrsno7YctALyM maUhjKu5DBK40GHQG2UwzevrfNJJPkfnHzGeWyLkR0kG9xXIU2pPbsVR+C8svH7zRXC8 6F1/U0k/4LxRnWilY1oC9+95v7Vor83JJRiBWJmzK1NoTD6Dg+Aw9pCVIxqoNMQhgvOR 0ZuZqXMmbtYMGsn7MrgDkpPEHLreb2ACUR1uWzkvWphuvDnP74lRVbBZujVh21chPOKl +B5g== X-Gm-Message-State: APzg51AzZ1xoOF88JFZ2HcSUdEpTA/MFKEFEecKWrm3PyTlaSzMNxDbZ OR9pTH2KHZGFJxqsRse/z5ZdlO+ZWls= X-Google-Smtp-Source: ANB0VdalwBEVwtnPw6pMFzqtQQAvyccBaPA42ZIAagkXB1QoGppmdjkA8YTnnakRrhIzKXu+zu83fg== X-Received: by 2002:a62:34c4:: with SMTP id b187-v6mr128278pfa.15.1535438373503; Mon, 27 Aug 2018 23:39:33 -0700 (PDT) Received: from [10.20.8.46] ([209.37.97.194]) by smtp.gmail.com with ESMTPSA id h10-v6sm658340pfj.78.2018.08.27.23.39.32 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Mon, 27 Aug 2018 23:39:32 -0700 (PDT) To: Tommy Pauly Cc: secdir@ietf.org, draft-ietf-taps-minset.all@ietf.org, ietf@ietf.org, taps@ietf.org References: <153534622572.11764.16971261463087249495@ietfa.amsl.com> <11A6EDDC-06EE-47E5-B61B-ED6F7B5999A6@apple.com> From: Yaron Sheffer Message-ID: <6c3e25c8-de15-a0dd-3706-72ca47475840@gmail.com> Date: Mon, 27 Aug 2018 23:39:31 -0700 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Thunderbird/52.9.1 MIME-Version: 1.0 In-Reply-To: <11A6EDDC-06EE-47E5-B61B-ED6F7B5999A6@apple.com> Content-Type: text/plain; charset=utf-8; format=flowed Content-Language: en-US Content-Transfer-Encoding: 7bit Archived-At: Subject: Re: [secdir] [Taps] Secdir last call review of draft-ietf-taps-minset-06 X-BeenThere: secdir@ietf.org X-Mailman-Version: 2.1.27 Precedence: list List-Id: Security Area Directorate List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 28 Aug 2018 06:39:36 -0000 Thank you Tommy for setting me straight on this. I appreciate the additional context. I looked at draft-ietf-taps-interface and it does seem to cover secure connection establishment well enough. With that in mind, I am OK with the Security Considerations in draft-ietf-taps-minset. Regards, Yaron On 27/08/18 08:53, Tommy Pauly wrote: > Hi Yaron, > > This minimal set is a description of the surface that any generic API must have to cover the common *transport* features of protocols only. This document is not meant in itself to describe an API that applications use directly, but instead describe the distilled feature set from transport services (such as reliable/unreliable sending, etc). To that end, it essentially describes what you need to be able to use basic things like TCP, UDP, etc. Even without security considered, this distillation is a non-trivial task, thus it required this document. > > The security document that is referenced (draft-ietf-taps-transport-security) provides a similar survey and distillation for how transport security interfaces add more surface to control and interact with handshake and record layers used on top of/in conjunction with the base transport. > > The set of documents that actually describe the API surface that we want applications to use (draft-ietf-taps-arch, draft-ietf-taps-api, draft-ietf-taps-interface, draft-ietf-taps-impl) does indeed provide a unified abstraction for a secure transport connection. However, this surface depends upon both the distillation from draft-ietf-taps-minset and draft-ietf-taps-transport-security. There is no intention of promoting insecure connections for applications. > > Thanks, > Tommy > >> On Aug 26, 2018, at 10:03 PM, Yaron Sheffer wrote: >> >> Reviewer: Yaron Sheffer >> Review result: Not Ready >> >> The whole notion of TAPS is new to me, so I may be missing the point here. This >> document defines a minimal set of network APIs that should be available to >> applications, in order to allow multiple different transport protocols to be >> used as interchangeable plug-ins with minimal or no change to applications. >> >> However the document does not cover security, and instead refers readers to a >> security protocol survey (draft-ietf-taps-transport-security). >> >> There's a disconnect here: in many cases we want applications to be aware of >> security features. For example, a typical TCP-using application should choose >> whether to enable TLS encryption of the connection (or as a receiver, whether >> to require encryption), and if TLS is selected, should at the very least >> receive access to the authenticated address of the connection's peer. In other >> words, a meaningful minimal set of APIs cannot be defined without considering >> the effects and requirements of security protocols. >> >> Put differently, the application normally treats the transport protocol and the >> security protocol layered on it as one protocol. Hence the old name of TLS: >> Secure Socket Layer. The application sees a single socket, not one socket for >> transport and another for security. This has been the case for TCP for the last >> 20-odd years, and is unlikely to change any time soon. >> >> I have not surveyed the protocols discussed in this draft, and I don't know >> whether a viable transport-level security protocol exists for each of them. If >> this is not the case, then I guess the industry is not yet ready for the kind >> of solution proposed here. >> >> _______________________________________________ >> Taps mailing list >> Taps@ietf.org >> https://www.ietf.org/mailman/listinfo/taps > From nobody Tue Aug 28 08:36:30 2018 Return-Path: X-Original-To: secdir@ietfa.amsl.com Delivered-To: secdir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 1387D130DE7; Tue, 28 Aug 2018 08:36:07 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -0.29 X-Spam-Level: X-Spam-Status: No, score=-0.29 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, RCVD_IN_MSPIKE_H2=-0.001, RCVD_IN_SORBS_WEB=1.5, T_DKIM_INVALID=0.01, URIBL_BLOCKED=0.001] autolearn=no autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=neutral reason="invalid (public key: not available)" header.d=smyslov.net Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id F3m99E91zBwp; Tue, 28 Aug 2018 08:36:05 -0700 (PDT) Received: from direct.host-care.com (direct.host-care.com [198.136.54.115]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 7FE8D130DF0; Tue, 28 Aug 2018 08:36:02 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=smyslov.net ; s=default; h=Content-Transfer-Encoding:Content-Type:MIME-Version:Message-ID :Date:Subject:Cc:To:From:Sender:Reply-To:Content-ID:Content-Description: Resent-Date:Resent-From:Resent-Sender:Resent-To:Resent-Cc:Resent-Message-ID: In-Reply-To:References:List-Id:List-Help:List-Unsubscribe:List-Subscribe: List-Post:List-Owner:List-Archive; bh=mPwFevpl7eDuLx8qIe/aWEWHEgpP9bkgVJfTu+WX5kk=; b=puvj1WUIys7opKFc1/Ebcqv8Ot QuXlVm/W4WaEsRgYZTYVLK3MbzojPnkn1EwBrdDrNxyzMkQao5Y0rFOcPMfN8LiOTgP2Qq4U62Coe nIK1pP5GsAIOADEWdwM2Ev6TkRWoXqOJiIbB6YN+Eg9kIZmVC3Ki3nlvCtmoiu6gH6df0tYq3CDau 9vR4qZFoAcZrEBP4LsEWbqWVOCvNIkAj9gPcnqJdfte9FR2OoQIXIBEduBnipzLiQBEIB1l2d8tiU e3KqmZBfgKJa4KKGRXJkPezAFXKIBqi9m8qIx1dcjWauVx9Vq3e0KN7DunOn1LdYSHGZ5MtfFWdsk LtpJ+wog==; Received: from [82.138.51.4] (port=56552 helo=buildpc) by direct.host-care.com with esmtpsa (TLSv1:ECDHE-RSA-AES256-SHA:256) (Exim 4.91) (envelope-from ) id 1fug2A-0003My-Ni; Tue, 28 Aug 2018 11:35:59 -0400 From: "Valery Smyslov" To: Cc: , , Date: Tue, 28 Aug 2018 18:35:55 +0300 Message-ID: <07d201d43ee4$d11fe120$735fa360$@smyslov.net> MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit X-Mailer: Microsoft Outlook 14.0 Thread-Index: AdQ+2zJDek7BznleRca/q1sl+sUWeA== Content-Language: ru X-AntiAbuse: This header was added to track abuse, please include it with any abuse report X-AntiAbuse: Primary Hostname - direct.host-care.com X-AntiAbuse: Original Domain - ietf.org X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12] X-AntiAbuse: Sender Address Domain - smyslov.net X-Get-Message-Sender-Via: direct.host-care.com: authenticated_id: valery@smyslov.net X-Authenticated-Sender: direct.host-care.com: valery@smyslov.net X-Source: X-Source-Args: X-Source-Dir: Archived-At: Subject: [secdir] Secdir last call review of draft-ietf-bess-mvpn-mib-10 X-BeenThere: secdir@ietf.org X-Mailman-Version: 2.1.27 Precedence: list List-Id: Security Area Directorate List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 28 Aug 2018 15:36:08 -0000 Reviewer: Valery Smyslov Review result: Almost Ready I have reviewed this document as part of the security directorate's ongoing effort to review all IETF documents being processed by the IESG. These comments were written primarily for the benefit of the security area directors. Document editors and WG chairs should treat these comments just like any other last call comments. The document provides a MIB module for Level 3 Multicast VPNs. The MIB Module passed a thorough MIB doctor review. The Security Considerations text follows the "Security Guidelines for IETF MIB Modules" (https://trac.ietf.org/trac/ops/wiki/mib-security). In particular, all the objects with read-write access from this MIB module are listed and the possible impact of manipulating their values is described. In addition, readable address-related objects from this MIB module that may reveal the locations of the peers are listed too. My only concern with the Security Considerations is that the latter list lacks mvpnMrouteRtAddr object, which in my opinion should be there, since it's also readable and contains address-related information. I think that once this issue is resolved the document will be ready for publication. From nobody Tue Aug 28 09:10:46 2018 Return-Path: X-Original-To: secdir@ietf.org Delivered-To: secdir@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 8628C130F01; Tue, 28 Aug 2018 09:10:32 -0700 (PDT) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: Sean Turner To: Cc: extra@ietf.org, ietf@ietf.org, draft-ietf-extra-imap-savedate.all@ietf.org X-Test-IDTracker: no X-IETF-IDTracker: 6.83.1 Auto-Submitted: auto-generated Precedence: bulk Message-ID: <153547263252.23664.3169930979223430348@ietfa.amsl.com> Date: Tue, 28 Aug 2018 09:10:32 -0700 Archived-At: Subject: [secdir] Secdir last call review of draft-ietf-extra-imap-savedate-01 X-BeenThere: secdir@ietf.org X-Mailman-Version: 2.1.27 List-Id: Security Area Directorate List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 28 Aug 2018 16:10:33 -0000 Reviewer: Sean Turner Review result: Ready The only thing I really wondered about was whether disclosing this new date would leak anything to an attacker. But, if the session is TLS-protected you're good and if it's not well you can get the actual message so whatever. Can't think of anything else. PS - When I first read the subject line I was like oh interesting we're doing something cute with the "savethedate" field :) From nobody Tue Aug 28 14:48:14 2018 Return-Path: X-Original-To: secdir@ietfa.amsl.com Delivered-To: secdir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C1166130F4A for ; Tue, 28 Aug 2018 14:48:12 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.999 X-Spam-Level: X-Spam-Status: No, score=-1.999 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=krose.org Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 9Ruoe2rhLORx for ; Tue, 28 Aug 2018 14:48:09 -0700 (PDT) Received: from mail-qt0-x230.google.com (mail-qt0-x230.google.com [IPv6:2607:f8b0:400d:c0d::230]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 5EE26130E12 for ; Tue, 28 Aug 2018 14:48:09 -0700 (PDT) Received: by mail-qt0-x230.google.com with SMTP id x7-v6so3554275qtk.5 for ; Tue, 28 Aug 2018 14:48:09 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=krose.org; s=google; h=mime-version:in-reply-to:references:from:date:message-id:subject:to :cc; bh=1ktxUKMDVPAexMzciEohT5brlZpaBfxgrn7Gmtz+AaA=; b=eqK8bHOM7oVY5Z4kiWh8e9PQki0yoLGUk/RoIZPx7x7fyL4DBlwUbBFbHTY8NIuA9q e5sYa9XEqg3tRkDDokbkr4BdGT0x+Eh5gfyos8PcmTth+xnkgUi8StvwGpiOnKDKG2+z 5MWyskjTp3AUm2TnyN/sjGanGm2Jq/bnSfwiE= X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:in-reply-to:references:from:date :message-id:subject:to:cc; bh=1ktxUKMDVPAexMzciEohT5brlZpaBfxgrn7Gmtz+AaA=; b=EAuUkStaWVoJx0ZS59z4d/C6yz0JvyqKXIkJ2d+ujyTr8HN8tjQUHPhAu/k1SC3vZC 6kx/C4gyZHbjNDRvRis3sToTPyxdLINbLoLuKMu5R68gjScTLfj8OVqnSuP4q6NAnP24 zYvOmRNaapr7AjqVenZqGSIjmVkEFxeUXcCL+wJd2oDO5gFpR9b3CZWSSGjK1Tei6YAv KGM2JhqJ2F+VwB8R+3md1gvYb6rqZqBTA2LbfhUfEplioSF2wX9X9m1/uyvD4hldpQ11 cZn0UDcFlZSNgc7bp9/n6L9H0+qv574JTwL+9lSlNG+o5mKsTv45gxSW47wRTJ1R7dwY XwiA== X-Gm-Message-State: APzg51CvskcQ8judkKF1+Cetf91VeSvlxP13bdSPsVFx0EWodr0gNgy5 h05UEt8aVScjpuF3jKmACEwTJ7lMOF4zvatbFcME4w== X-Google-Smtp-Source: ANB0VdZg0eYHlhw7q1ugeGxn/qULEdPeI5kCy40iVKfw9WTIo83anNtP8ECcoUZehuIAYT3BfTCpdb+8p8yDbQXD/iE= X-Received: by 2002:ac8:2759:: with SMTP id h25-v6mr3856537qth.274.1535492888227; Tue, 28 Aug 2018 14:48:08 -0700 (PDT) MIME-Version: 1.0 Received: by 2002:a0c:f803:0:0:0:0:0 with HTTP; Tue, 28 Aug 2018 14:48:06 -0700 (PDT) X-Originating-IP: [72.246.0.14] In-Reply-To: References: <153513922907.22939.10542350679349996082@ietfa.amsl.com> From: Kyle Rose Date: Tue, 28 Aug 2018 17:48:06 -0400 Message-ID: To: Dino Farinacci Cc: IETF SecDir , draft-ietf-lisp-rfc6830bis.all@ietf.org, IETF Discussion Mailing List , "lisp@ietf.org list" , Benjamin Kaduk Content-Type: multipart/alternative; boundary="000000000000288208057485cc67" Archived-At: Subject: Re: [secdir] Secdir last call review of draft-ietf-lisp-rfc6830bis-15 X-BeenThere: secdir@ietf.org X-Mailman-Version: 2.1.27 Precedence: list List-Id: Security Area Directorate List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 28 Aug 2018 21:48:13 -0000 --000000000000288208057485cc67 Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable Hi, Dino. I have additional responses inline. > For the internet core (DFZ RIB) use-case, LISP proposes replacing BGP > sessions > > and global eventually-consistent state sharing with a global control > plane and > > LISP *does not propse to eliminate BGP*, in fact it needs it so RLOC > reachability across the network is available, or there would be no underl= ay > for the LISP overlay. > The whole point of LISP is to create a routing overlay for the EID address space, the RIB of which is managed by a global mapping system, not BGP sessions. If control plane traffic managed by BGP (or static routes, or whatever networks use once the DFZ RIB is limited to entities in the core) continues to flow, that is of small comfort to end users trying to get data over the data plane. From the perspective of end users, BGP is being replaced routing of the traffic that matters to them. Maybe this is just splitting hairs: I certainly don't want to rathole on this point. > You are missing pieces of the design and hence why you came to the > conclusion you did. There are three documents that enhance the security o= f > LISP, they are: > > (1) RFC 8061 - Locator/ID Separation Protocol (LISP) Data-Plane > Confidentiality > I did not review this document because I was following up on authentication of control plane messages. If that is covered in a document titled "Data-Plane Confidentiality", some reorganization may be in order. > (2) RFC 8111 - Locator/ID Separation Protocol Delegated Database Tree > (LISP-DDT) > (3) draft-farinacci-lisp-ecdsa-auth > I take it from the name that this has not even been adopted by the WG yet? Evaluating something I'm supposed to review for IETF LC should not depend on an unadopted draft. That said, I have been trying to make sense of this document for the past few days. I have a few basic observations: * It does not resolve the trust anchor problem. Instead of proposing a PKI, you seem to be proposing a trusted third party authoritative for the Hash-EID namespace. (Q.v. section 2, the Hash-EID definition: "Another entity") * 128 bits is already too short for a cryptographic hash, and this document proposes reducing that to 80 bits for a /48. * The entire scheme relies on the integrity of the Hash-EID mappings: if an attacker can compromise a Hash-EID mapping with a different public key that hashes to the same truncated hash, they can sign anything for that space of Crypto-EIDs. * The only protection provided by this scheme is for Map-Register and Map-Request, and not for the response to Map-Request, which (to me) is the critical gap. The problem I noted in my original review is that the ITR-OTK only allows the Map-Server to prove that a response is associated with a Map-Resolver's request, not that the Map-Server is the proper authority for the response. What the system needs is a global trust network that does not rely on either universal transitive trust (e.g., I'll just trust whatever my trusted-but-potentially-mistaken neighbors tell me about the rest of the world based on what they heard) or n^2 relationships (e.g., symmetric keys with every other entity). * Why a scheme like this for addressing Map-Register? Presumably an ETR will either be owned by the same entity running the Map-Server authoritative for its own EID space, or it will contract with one. Either case is a single, pre-established relationship per ETR, which scales fine. * What is the use case for Map-Request authentication? Its only use seems to be to keep address space -> network topology mapping hidden. From whom? The end user doesn't need to know, but every entity in the core needs to have access to a Crypto-EID's associated RLOC or it won't be able to determine the next hop. * My general recommendation for design documents is that the overall architecture should be clear to a reader with a relevant technical background without having to first consume a pile of other documents. To the authentication point specifically, you may wish to include some text regarding the properties generically offered by an asymmetric authentication scheme with the appropriate feature set, and reference those properties in the security considerations section when addressing certain classes of attacks. You can then use these requirements as input to a document describing a specific authentication scheme. * This document doesn't present a clear description of the problem it's trying to solve in the introduction. I understand what it's getting at now that I've read the whole thing, but a better introduction (for the actual problem you need to solve, I'd add) would say something like, q( The LISP architecture introduces two address spaces along with a mapping from one to the other. The integrity of this mapping is critical for achieving the intended routing of traffic through a LISP network, being directly related to service availability and end user privacy. This document describes a mechanism for implementation of strong authentication of this mapping. ) The security considerations should then discuss the turtles-all-the-way-down problem of BGP hijacking on the underlay (should BGP be employed for this purpose) so operators are clear on the limitations of the scheme. > You find strong asymmetric authenticaiton and authorization in (3). And > you=E2=80=99ll find authentication of the mapping system nodes in (2). An= d note > that (1) can be used and layered under the control-plane to give encrypte= d > control-plane flows (or use DTLS as LISP-SEC refers to for the messages i= t > requires for its functionality). > "TLS" does not appear anywhere in the draft of LISP-SEC I reviewed: https://tools.ietf.org/html/draft-ietf-lisp-sec-15#ref-I- D.ietf-lisp-rfc6833bis > One area of concern, of which I have not been able to find discussion, is > that > > of the implications of shared capacity for the control and data planes, > and how > > this can allow a volumetric data plane attack to deny a router access t= o > the > > global mapping system, slowly choking off service to uncached portions > of the > > Well yes, this happens with all our IETF protocols. It is a valid concern > and there are many operational techniques in network infrastructure that > *help* solve (but not eliminate) these problems. > I would like to see a discussion of whether and how the nature and scale of this problem differs from that of the status quo. BGP sessions and RIB push have properties that are well-established from decades of experience: surely LISP does not have exactly the same properties. The security considerations should make clear, for instance, how a loss of control plane connectivity differs from the loss of a BGP session, and how this impacts visibility and behavior of the data plane. > I would also like clarification on what defines the separation between th= e > > control plane and data plane, and whether authentication itself is used > to > > A control-plane obtains information to store in a table. The data-plane > uses that table. That is the definition in the simpliest form. > I mean specific to LISP, not generically. For instance, does "LISP Control-Plane signaling" include only valid messages, or valid + inauthentic (and presumably dropped) messages? Traditional attack traffic (e.g., a DDoS attack against a website) is part of the same data plane as all legitimate end user traffic; is attack traffic directed at control plane endpoints considered part of the control plane, or is it a third category of traffic? If the latter, then what does an operator need to do to ensure that control plane is always available? Kyle --000000000000288208057485cc67 Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable
Hi, Dino. I have additional responses inline.

> For the internet core (DFZ RIB) use-case, = LISP proposes replacing BGP sessions
> and global eventually-consistent state sharing with a global control p= lane and

LISP *does not propse to eliminate BGP*, in fact it needs it so RLOC= reachability across the network is available, or there would be no underla= y for the LISP overlay.

The whole point= of LISP is to create a routing overlay for the EID address space, the RIB = of which is managed by a global mapping system, not BGP sessions. If contro= l plane traffic managed by BGP (or static routes, or whatever networks use = once the DFZ RIB is limited to entities in the core) continues to flow, tha= t is of small comfort to end users trying to get data over the data plane. = >From the perspective of end users, BGP is being replaced routing of the tra= ffic that matters to them.

Maybe this is just = splitting hairs: I certainly don't want to rathole on this point.
=C2=A0
You are missing pieces = of the design and hence why you came to the conclusion you did. There are t= hree documents that enhance the security of LISP, they are:

(1) RFC 8061 - Locator/ID Separation Protocol (LISP) Data-Plane Confidentia= lity

I did not review this document bec= ause I was following up on authentication of control plane messages. If tha= t is covered in a document titled "Data-Plane Confidentiality", s= ome reorganization may be in order.
=C2=A0
(2) RFC 8111 - Locator/ID Separation P= rotocol Delegated Database Tree (LISP-DDT)
(3) draft-farinacci-lisp-ecdsa-auth

I take it from the name that this has not even been adopted by the WG yet= ? Evaluating something I'm supposed to review for IETF LC should not de= pend on an unadopted draft.

That said, I have = been trying to make sense of this document for the past few days. I have a = few basic observations:

=C2=A0* It does not resolv= e the trust anchor problem. Instead of proposing a PKI, you seem to be prop= osing a trusted third party authoritative for the Hash-EID namespace. (Q.v= . section 2, the Hash-EID definition: "Another entity")
=

=C2=A0* 128 bits is already too short for a crypto= graphic hash, and this document proposes reducing that to 80 bits for a /48= .

=C2=A0* The entire scheme relies on th= e integrity of the Hash-EID mappings: if an attacker can compromise a Hash-= EID mapping with a different public key that hashes to the same truncated h= ash, they can sign anything for that space of Crypto-EIDs.

= =C2=A0* The only protection provided by this scheme is for Map-Register and= Map-Request, and not for the response to Map-Request, which (to me) is the= critical gap. The problem I noted in my original review is that the ITR-OT= K only allows the Map-Server to prove that a response is associated with a = Map-Resolver's request, not that the Map-Server is the proper authority= for the response. What the system needs is a global trust network that doe= s not rely on either universal transitive trust (e.g., I'll just trust = whatever my trusted-but-potentially-mistaken neighbors tell me about the re= st of the world based on what they heard) or n^2 relationships (e.g., symme= tric keys with every other entity).

=C2=A0* Wh= y a scheme like this for addressing Map-Register? Presumably an ETR will ei= ther be owned by the same entity running the Map-Server authoritative for i= ts own EID space, or it will contract with one. Either case is a single, pr= e-established relationship per ETR, which scales fine.

=
=C2=A0* What is the use case for Map-Request authentication? Its only = use seems to be to keep address space -> network topology mapping hidden= . From whom? The end user doesn't need to know, but every entity in the= core needs to have access to a Crypto-EID's associated RLOC or it won&= #39;t be able to determine the next hop.

=C2=A0* My gener= al recommendation for design documents is that the overall architecture sho= uld be clear to a reader with a relevant technical background without havin= g to first consume a pile of other documents. To the authentication point s= pecifically, you may wish to include some text regarding the properties gen= erically offered by an asymmetric authentication scheme with the appropriat= e feature set, and reference those properties in the security consideration= s section when addressing certain classes of attacks. You can then use thes= e requirements as input to a document describing a specific authentication = scheme.

=C2=A0* This document doesn't present = a clear description of the problem it's trying to solve in the introduc= tion. I understand what it's getting at now that I've read the whol= e thing, but a better introduction (for the actual problem you need to solv= e, I'd add) would say something like, q( The LISP architecture introduc= es two address spaces along with a mapping from one to the other. The integ= rity of this mapping is critical for achieving the intended routing of traf= fic through a LISP network, being directly related to service availability = and end user privacy. This document describes a mechanism for implementatio= n of strong authentication of this mapping. ) The security considerations s= hould then discuss the turtles-all-the-way-down problem of BGP hijacking on= the underlay (should BGP be employed for this purpose) so operators are cl= ear on the limitations of the scheme.
=C2=A0
You find strong asymmetric authenticaiton and authorization in (3). And you= =E2=80=99ll find authentication of the mapping system nodes in (2). And not= e that (1) can be used and layered under the control-plane to give encrypte= d control-plane flows (or use DTLS as LISP-SEC refers to for the messages i= t requires for its functionality).

&quo= t;TLS" does not appear anywhere in the draft of LISP-SEC I reviewed:

> One area of concern, of which I have not been able to find discussion,= is that
> of the implications of shared capacity for the control and data planes= , and how
> this can allow a volumetric data plane attack to deny a router access = to the
> global mapping system, slowly choking off service to uncached portions= of the

Well yes, this happens with all our IETF protocols. It is a valid co= ncern and there are many operational techniques in network infrastructure t= hat *help* solve (but not eliminate) these problems.
> I would also like clarifi= cation on what defines the separation between the
> control plane and data plane, and whether authentication itself is use= d to

A control-plane obtains information to store in a table. The data-pl= ane uses that table. That is the definition in the simpliest form.

I mean specific to LISP, not generically. For i= nstance, does "LISP Control-Plane signaling" include only valid m= essages, or valid + inauthentic (and presumably dropped) messages? Traditio= nal attack traffic (e.g., a DDoS attack against a website) is part of the s= ame data plane as all legitimate end user traffic; is attack traffic direct= ed at control plane endpoints considered part of the control plane, or is i= t a third category of traffic? If the latter, then what does an operator ne= ed to do to ensure that control plane is always available?

Kyle
--000000000000288208057485cc67-- From nobody Tue Aug 28 15:17:43 2018 Return-Path: X-Original-To: secdir@ietfa.amsl.com Delivered-To: secdir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id A6B06130F44; Tue, 28 Aug 2018 15:17:27 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.999 X-Spam-Level: X-Spam-Status: No, score=-1.999 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id sR_LY2Pebtpr; Tue, 28 Aug 2018 15:17:25 -0700 (PDT) Received: from mail-yb0-x230.google.com (mail-yb0-x230.google.com [IPv6:2607:f8b0:4002:c09::230]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id ECC2F130F3F; Tue, 28 Aug 2018 15:17:24 -0700 (PDT) Received: by mail-yb0-x230.google.com with SMTP id y20-v6so1236162ybi.13; Tue, 28 Aug 2018 15:17:24 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:subject:from:in-reply-to:date:cc :content-transfer-encoding:message-id:references:to; bh=8THKUzmqW2Ga/t2drBHwFkg4pdleGIcMQ8DAlLABx2U=; b=WC2+PFEybR6VVcvYrqKybp0l7T21PdagR+4rsFfXzPchlZpScHGUyBgFWQjP/NMUia 48HqKMzPEatoUuXSeNOL6gZdXyzAXVhK7beRB8KQD2LLc5rFrLFymQKAA7cgdH67sFy0 iyqamR8pJYuaVCuPuL0bZFuVyJCRD2mzDTnI6PzweUrT/2ZwWvzHzw16WlPYNfD/a5rv X0LjIzkQ1/zSPTPezc8gSrcDMBZv5d2drl2oFFHSevXIuEcUo8PBrlritpq6FV4irXZ+ 8WBUJQQJ+Sh//117zxcip+NCz5DioDlYOCpzk5+pmo69PlHEWPfOmTdnsbXZwcGwlVZI f6lA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:subject:from:in-reply-to:date:cc :content-transfer-encoding:message-id:references:to; bh=8THKUzmqW2Ga/t2drBHwFkg4pdleGIcMQ8DAlLABx2U=; b=TPUyX/hrA4H8ntvLICxtGo6fA/ZDXYdW3lnroYTibnz3q6pzUWw2jhr6wCkaAFPKf3 eNn8TawoiM+437QeajIZ+Vsj+9F2yU7v/92YyVjB0QoRkDKNzvAUKdYpb0A8eSNOzbyb JvW+3Mx0RbAweu11GK39aWiwrUl2rGe4edFGF6vri2qd5+c41EhP5AdE6+lGZDKRzLwg JPVY6ZxTUhVLEpPbODwlVmn1yaE5nC/TF/Ht318pvOs9KbM6Y76izEonnLeBafEJMaoq U7Ze8iHFShVR/AWdo6lqUvIi3bpQGAHQTrcAaXW4JTfB6cIp2+EFOtcBOoPK+J1F6+lK nUTQ== X-Gm-Message-State: APzg51BTLYi2sBoJ3UKlixtf7PGLkuHjvpG0xunGYa1jha+d8mXoi9lP AO5Qk9OwolPNrtU3bHYTO/Y= X-Google-Smtp-Source: ANB0Vda1585GEHGj+k6V5nKFtECJC503LP316dZNco0mdM4YxMtuPpGsCsjCD8zmX9ohvxY9bWmE+Q== X-Received: by 2002:a5b:e:: with SMTP id a14-v6mr2000764ybp.246.1535494643981; Tue, 28 Aug 2018 15:17:23 -0700 (PDT) Received: from dino-macbook.attlocal.net (adsl-108-94-3-30.dsl.pltn13.sbcglobal.net. [108.94.3.30]) by smtp.gmail.com with ESMTPSA id e124-v6sm823659ywh.66.2018.08.28.15.17.22 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Tue, 28 Aug 2018 15:17:23 -0700 (PDT) Content-Type: text/plain; charset=utf-8 Mime-Version: 1.0 (Mac OS X Mail 11.5 \(3445.9.1\)) From: Dino Farinacci In-Reply-To: Date: Tue, 28 Aug 2018 15:17:21 -0700 Cc: IETF SecDir , draft-ietf-lisp-rfc6830bis.all@ietf.org, IETF Discussion Mailing List , "lisp@ietf.org list" , Benjamin Kaduk Content-Transfer-Encoding: quoted-printable Message-Id: References: <153513922907.22939.10542350679349996082@ietfa.amsl.com> To: Kyle Rose X-Mailer: Apple Mail (2.3445.9.1) Archived-At: Subject: Re: [secdir] Secdir last call review of draft-ietf-lisp-rfc6830bis-15 X-BeenThere: secdir@ietf.org X-Mailman-Version: 2.1.27 Precedence: list List-Id: Security Area Directorate List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 28 Aug 2018 22:17:28 -0000 > Hi, Dino. I have additional responses inline. >=20 > > For the internet core (DFZ RIB) use-case, LISP proposes replacing = BGP sessions > > and global eventually-consistent state sharing with a global control = plane and >=20 > LISP *does not propse to eliminate BGP*, in fact it needs it so RLOC = reachability across the network is available, or there would be no = underlay for the LISP overlay. >=20 > The whole point of LISP is to create a routing overlay for the EID = address space, the RIB of which is managed by a global mapping system, = not BGP sessions. If control plane traffic managed by BGP (or static = routes, or whatever networks use once the DFZ RIB is limited to entities = in the core) continues to flow, that is of small comfort to end users = trying to get data over the data plane. =46rom the perspective of end = users, BGP is being replaced routing of the traffic that matters to = them. That really is not true. You need both the overlay and underlay to get = user traffic to flow. > That said, I have been trying to make sense of this document for the = past few days. I have a few basic observations: >=20 > * It does not resolve the trust anchor problem. Instead of proposing = a PKI, you seem to be proposing a trusted third party authoritative for = the Hash-EID namespace. (Q.v. section 2, the Hash-EID definition: = "Another entity=E2=80=9D) The trust anchor is the mapping system. And that is the PKI. And the = mapping system is distributed. > * 128 bits is already too short for a cryptographic hash, and this = document proposes reducing that to 80 bits for a /48. It can go as high as 120 bits. The eid-hash-prefix is configurable on a = per LISP instance-ID basis. > * The entire scheme relies on the integrity of the Hash-EID mappings: = if an attacker can compromise a Hash-EID mapping with a different public = key that hashes to the same truncated hash, they can sign anything for = that space of Crypto-EIDs. A shared-key is also used to accept mapping system registrations. And = the signature-EID can be accompanied with additional data to make the = hash =E2=80=9Cmore unqiue=E2=80=9D. That is, the hash is only used as a = mapping system lookup key (i.e. a compressed public-key). > * The only protection provided by this scheme is for Map-Register and = Map-Request, and not for the response to Map-Request, which (to me) is = the critical gap. The problem I noted in my original review is=20 We discussed this in Montreal and we have updates pending so map-servers = have signature-IDs that can sign responses. It=E2=80=99s on our document = todo list. > that the ITR-OTK only allows the Map-Server to prove that a response = is associated with a Map-Resolver's request, not that the Map-Server is = the proper authority for the response. What the system needs is a global = trust network that does not rely on either universal transitive trust = (e.g., I'll just trust whatever my trusted-but-potentially-mistaken = neighbors tell me about the rest of the world based on what they heard) = or n^2 relationships (e.g., symmetric keys with every other entity). There is no reason why a separate mapping system can be deployed just = for this purpose. But I could be misunderstanding you. > * Why a scheme like this for addressing Map-Register? Presumably an = ETR will either be owned by the=20 You are conflating two drafts and now I am not sure which one you are = referring to. In terms of security, there are 3 documents that cover = LISP security, let=E2=80=99s call then RFC 8061 (data-plane = confidentiality and authenticstion via AEAD), LISP-SEC (that uses the = OTK so Map-Reply messages are authenticated), and lisp-ecdsa-auth (which = is used to authenticate control-plane messages from xTR to mapping = system). > same entity running the Map-Server authoritative for its own EID = space, or it will contract with one. Either case is a single, = pre-established relationship per ETR, which scales fine. The xTR is run by an entity different than the mapping system entity. = And its EID allocation comes from a completely different entity. Once an = EID is allocated, then the xTR entity shops for mapping system providers = (MSPs) and the MSP decides based on the bit pattern of the address which = map-servers the xTR registers to for the EIDs owned by the xTR (the LISP = site). At that time, a shared-key is agreed upon (out of band and at = provisioning time), to authorized the EID to be registered within an = instance-ID to those set of map-servers the MSP has chosen. And with respect to lisp-ecdsa-auth, a key-pair is generated, the = private key held by the xTR, the public-key sent out of band to the MSP, = the MSP registering the hash->pubkey mapping in its infrastrucutre so it = can verify control-plane message signatures. >=20 > * What is the use case for Map-Request authentication? Its only use = seems to be to keep address space -> network topology mapping hidden. = =46rom whom? The end user doesn't need to know, but every entity in the = core needs to have access to a Crypto-EID's associated RLOC or it won't = be able to determine the next hop. It allows only specific entities to lookup EIDs with an instance-ID. The = core knows nothing about any of this. All this machinery is done part of = the LISP overlay. > * My general recommendation for design documents is that the overall = architecture should be clear to a reader with a relevant technical = background without having to first consume a pile of other documents. To = the authentication point specifically, you may wish to include some text = regarding the properties generically offered by an asymmetric = authentication scheme with the appropriate feature set, and reference = those properties in the security considerations section when addressing = certain classes of attacks. You can then use these requirements as input = to a document describing a specific authentication scheme. Right agree. But this has evolved and improved over a 10 year period. > * This document doesn't present a clear description of the problem = it's trying to solve in the introduction. I understand what it's getting = at now that I've read the whole thing, but a better=20 There is an LISP introduction document we decided to write 5 years ago = that was intended to introduce the idea of LISP and overlays. That = document is stuck in MISREF. We are trying to unstuck it by publishing = these documents. The working group decided that RFC6830bis and RFC6833bis would be = technical and background material be put in other documents. We have = deployment and interworking documents as well. > introduction (for the actual problem you need to solve, I'd add) would = say something like, q( The LISP architecture introduces two address = spaces along with a mapping from one to the other. The integrity of this = mapping is critical for achieving the intended routing of traffic = through a LISP network, being=20 This is stated in the introduction section. > directly related to service availability and end user privacy. This = document describes a mechanism for implementation of strong = authentication of this mapping. ) The security considerations should = then=20 This is a data-plane spec. The control-plane spec (RFC6833bis) explains = more about authentication of mappings. > discuss the turtles-all-the-way-down problem of BGP hijacking on the = underlay (should BGP be employed for this purpose) so operators are = clear on the limitations of the scheme. This is out of scope. > You find strong asymmetric authenticaiton and authorization in (3). = And you=E2=80=99ll find authentication of the mapping system nodes in = (2). And note that (1) can be used and layered under the control-plane = to give encrypted control-plane flows (or use DTLS as LISP-SEC refers to = for the messages it requires for its functionality). >=20 > "TLS" does not appear anywhere in the draft of LISP-SEC I reviewed: Right as I explained DTLS does. And TLS is part of an expired Internet = Draft. > = https://tools.ietf.org/html/draft-ietf-lisp-sec-15#ref-I-D.ietf-lisp-rfc68= 33bis >=20 > > One area of concern, of which I have not been able to find = discussion, is that > > of the implications of shared capacity for the control and data = planes, and how > > this can allow a volumetric data plane attack to deny a router = access to the > > global mapping system, slowly choking off service to uncached = portions of the >=20 > Well yes, this happens with all our IETF protocols. It is a valid = concern and there are many operational techniques in network = infrastructure that *help* solve (but not eliminate) these problems. >=20 > I would like to see a discussion of whether and how the nature and = scale of this problem differs from that of the status quo. BGP sessions = and RIB push have properties that are well-established from decades of = experience: surely LISP does not have exactly the same properties. The = security considerations should make clear, for instance, how a loss of = control plane connectivity differs from the loss of a BGP session, and = how this impacts visibility and behavior of the data plane. Please look at the deployment drafts. Please note, you are reviewing a = document that is focusing on encapsulating packets on an overlay. All = the other support pieces are broken out, in what the WG felt was = logical, in sepreate documents. > > I would also like clarification on what defines the separation = between the > > control plane and data plane, and whether authentication itself is = used to >=20 > A control-plane obtains information to store in a table. The = data-plane uses that table. That is the definition in the simpliest = form. >=20 > I mean specific to LISP, not generically. For instance, does "LISP = Control-Plane signaling" include only valid messages, or valid + = inauthentic (and presumably dropped) messages? Traditional attack = traffic (e.g., a DDoS attack against a website) is part of the same data = plane as all legitimate end user traffic; is attack traffic directed at = control plane endpoints considered part of the control plane, or is it a = third category of traffic? If the latter, then what does an operator = need to do to ensure that control plane is always available? All in RFC6833bis. I=E2=80=99m sorry LISP is spread across so many = documents but we tried to divide and conquer to create a modular way of = introducing the entire design. Dino >=20 > Kyle From nobody Wed Aug 29 09:19:20 2018 Return-Path: X-Original-To: secdir@ietf.org Delivered-To: secdir@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id AA1E1130E97; Wed, 29 Aug 2018 09:19:12 -0700 (PDT) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: Joseph Salowey To: Cc: tcpm@ietf.org, iesg@ietf.org, draft-ietf-tcpm-alternativebackoff-ecn.all@ietf.org X-Test-IDTracker: no X-IETF-IDTracker: 6.83.1 Auto-Submitted: auto-generated Precedence: bulk Message-ID: <153555955265.14634.5037104008217643409@ietfa.amsl.com> Date: Wed, 29 Aug 2018 09:19:12 -0700 Archived-At: Subject: [secdir] Secdir last call review of draft-ietf-tcpm-alternativebackoff-ecn-09 X-BeenThere: secdir@ietf.org X-Mailman-Version: 2.1.27 List-Id: Security Area Directorate List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 29 Aug 2018 16:19:13 -0000 Reviewer: Joseph Salowey Review result: Ready I have reviewed this document as part of the security directorate's ongoing effort to review all IETF documents being processed by the IESG. These comments were written primarily for the benefit of the security area directors. Document editors and WG chairs should treat these comments just like any other last call comments. The summary of the review is the document is ready. This document discusses and experimental change to the TCP ECN backoff. The document was understandable and had adequate security considerations. From nobody Thu Aug 30 02:46:02 2018 Return-Path: X-Original-To: secdir@ietf.org Delivered-To: secdir@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 39E07130F03; Thu, 30 Aug 2018 02:45:44 -0700 (PDT) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: Takeshi Takahashi To: Cc: draft-ietf-lisp-rfc6833bis.all@ietf.org, ietf@ietf.org, lisp@ietf.org X-Test-IDTracker: no X-IETF-IDTracker: 6.83.1 Auto-Submitted: auto-generated Precedence: bulk Message-ID: <153562234417.3222.6616411492523634729@ietfa.amsl.com> Date: Thu, 30 Aug 2018 02:45:44 -0700 Archived-At: Subject: [secdir] Secdir last call review of draft-ietf-lisp-rfc6833bis-12 X-BeenThere: secdir@ietf.org X-Mailman-Version: 2.1.27 List-Id: Security Area Directorate List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 30 Aug 2018 09:45:45 -0000 Reviewer: Takeshi Takahashi Review result: Ready This bis document obsoletes RFC 6833. Some of the content in RFC 6830 (The Locator/ID Separation Protocol (LISP)) was added to this bis document. Though the security consideration section remains almost unchanged, I believe it is ok. Note that the security consideration section refers to RFC 7835, which shows the threats of LISP, and it covers the threats of RFC6830 as well. From nobody Thu Aug 30 04:01:29 2018 Return-Path: X-Original-To: secdir@ietfa.amsl.com Delivered-To: secdir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id AB1E3130E50 for ; Thu, 30 Aug 2018 04:01:27 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.909 X-Spam-Level: X-Spam-Status: No, score=-1.909 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, T_DKIMWL_WL_MED=-0.01, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gigix-net.20150623.gappssmtp.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 9_uKHI4TKxLu for ; Thu, 30 Aug 2018 04:01:25 -0700 (PDT) Received: from mail-wm0-x22f.google.com (mail-wm0-x22f.google.com [IPv6:2a00:1450:400c:c09::22f]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id CEE3F130E4D for ; Thu, 30 Aug 2018 04:01:24 -0700 (PDT) Received: by mail-wm0-x22f.google.com with SMTP id q8-v6so1560089wmq.4 for ; Thu, 30 Aug 2018 04:01:24 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gigix-net.20150623.gappssmtp.com; s=20150623; h=from:message-id:mime-version:subject:date:in-reply-to:cc:to :references; bh=gLVDjsZdaY2bbNjLHqG98l6mYBox4239AoGIdI7XN20=; b=VLT8eU+Cbub7agAZ0UPp9PvI4scSrUUakAgXIcnXRhQozfaqRSQj8wRgwa+HRQUCcO dipRJkikQsF9YwJY2ADOq3XcO+nWCO911DkBQAgWJ4SrzzltRiVc5HDUahrFSDmkcB69 RQ+mlOiRjONOkkOLFljQm6xC4b7vRdMfASWzFYGQ4saVraZoI1LgzjM7Fel4Lwp1cMk3 Q9zRFTepSTUKLLVsouzzxMKF4IghM3kZTecDb5E16dspoRFj3wXtbRO7Pl5I2d40I8Vh AzL3gWIILkYKA9+QT/5iJO0fGJGTnCI1U3C7BnhfsdAcBTrh/mBKarKZCJJcacm0mj6u 5kWw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:from:message-id:mime-version:subject:date :in-reply-to:cc:to:references; bh=gLVDjsZdaY2bbNjLHqG98l6mYBox4239AoGIdI7XN20=; b=neefBrZVanWSVfN6cHams4Y9Brq4sAc8z2arhxEEQZsy2vYyioaakJY5DHgL0LbqzM qFO/+ylq2fbvLT/Y1gl/L7z6dnglMYO9AWwSGVh6kDggCz/fdjxO4pLPN0rH0Nbeg6+v f+z1ijDrCeC8TrDMP3FQ1H7QRTsHOz2A6EyFtwhpbc7M0AbdBx+uEpWBqNxl6urJsHvc eBtB1aiJZpZFwq6U69EDs7k+5zcsF3LzD7HjZFFu1ST3HLbOoMmtvCYa1jVUcCeYL4+P mnxCji8JRRooBLDIJd6P+RhcklJIOR3nBvfTAsDKR6awMDVjyhn7VmMA/OLEydGbK1Ih feqA== X-Gm-Message-State: APzg51CyuJMadmDs4D74M48JqVf7EuuJMhABrkhW46RzVdbNhzzwU14Q yG6pC8xkmEOfAiW81vcnlQ/rPA== X-Google-Smtp-Source: ANB0VdYO1JtdmIrXg1VxY9nyBizIZFmJeUw0U7NoIPhC6nBwBW6agKRnXFUvFA1kurUenJaC5M/EVQ== X-Received: by 2002:a1c:93d2:: with SMTP id v201-v6mr1414066wmd.77.1535626883289; Thu, 30 Aug 2018 04:01:23 -0700 (PDT) Received: from ?IPv6:2001:660:330f:38:9171:c3a4:c6d3:6140? ([2001:660:330f:38:9171:c3a4:c6d3:6140]) by smtp.gmail.com with ESMTPSA id p89-v6sm11737564wrc.97.2018.08.30.04.01.21 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Thu, 30 Aug 2018 04:01:22 -0700 (PDT) From: Luigi Iannone Message-Id: <0F515189-0329-49F6-9A86-41DD3557BA2E@gigix.net> Content-Type: multipart/alternative; boundary="Apple-Mail=_C2831D20-2417-4C0F-844E-DA78EBCC9CF8" Mime-Version: 1.0 (Mac OS X Mail 11.5 \(3445.9.1\)) Date: Thu, 30 Aug 2018 13:01:20 +0200 In-Reply-To: Cc: Dino Farinacci , IETF SecDir , draft-ietf-lisp-rfc6830bis.all@ietf.org, IETF Discussion Mailing List , "lisp@ietf.org list" , Benjamin Kaduk To: Kyle Rose References: <153513922907.22939.10542350679349996082@ietfa.amsl.com> X-Mailer: Apple Mail (2.3445.9.1) Archived-At: Subject: Re: [secdir] Secdir last call review of draft-ietf-lisp-rfc6830bis-15 X-BeenThere: secdir@ietf.org X-Mailman-Version: 2.1.27 Precedence: list List-Id: Security Area Directorate List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 30 Aug 2018 11:01:28 -0000 --Apple-Mail=_C2831D20-2417-4C0F-844E-DA78EBCC9CF8 Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=utf-8 Kyle, Dino, I fill like this discussion is going sideways w.r.t. the original = 6830bis document. You started to discuss other documents and other solutions, which, while = certainly interesting and important, belong to other threads and = documents. IMHO here are the few points that need to be clarified: > On 28 Aug 2018, at 23:48, Kyle Rose wrote: >=20 > Hi, Dino. I have additional responses inline. >=20 > > For the internet core (DFZ RIB) use-case, LISP proposes replacing = BGP sessions > > and global eventually-consistent state sharing with a global control = plane and >=20 > LISP *does not propse to eliminate BGP*, in fact it needs it so RLOC = reachability across the network is available, or there would be no = underlay for the LISP overlay. >=20 > The whole point of LISP is to create a routing overlay for the EID = address space, the RIB of which is managed by a global mapping system, = not BGP sessions. If control plane traffic managed by BGP (or static = routes, or whatever networks use once the DFZ RIB is limited to entities = in the core) continues to flow, that is of small comfort to end users = trying to get data over the data plane. >=46rom the perspective of end = users, BGP is being replaced routing of the traffic that matters to = them. >=20 > Maybe this is just splitting hairs: I certainly don't want to rathole = on this point. @Kyle: can we consider this point closed? [trimmed] > = https://tools.ietf.org/html/draft-ietf-lisp-sec-15#ref-I-D.ietf-lisp-rfc68= 33bis = >=20 > > One area of concern, of which I have not been able to find = discussion, is that > > of the implications of shared capacity for the control and data = planes, and how > > this can allow a volumetric data plane attack to deny a router = access to the > > global mapping system, slowly choking off service to uncached = portions of the >=20 > Well yes, this happens with all our IETF protocols. It is a valid = concern and there are many operational techniques in network = infrastructure that *help* solve (but not eliminate) these problems. >=20 > I would like to see a discussion of whether and how the nature and = scale of this problem differs from that of the status quo. BGP sessions = and RIB push have properties that are well-established from decades of = experience: surely LISP does not have exactly the same properties. The = security considerations should make clear, for instance, how a loss of = control plane connectivity differs from the loss of a BGP session, and = how this impacts visibility and behavior of the data plane. =20 I am not sure I understand the point. Isn=E2=80=99t this covered by = RFC7835? Reference to that document isn=E2=80=99t sufficient? If not, can you clarify further? >=20 > > I would also like clarification on what defines the separation = between the > > control plane and data plane, and whether authentication itself is = used to >=20 > A control-plane obtains information to store in a table. The = data-plane uses that table. That is the definition in the simpliest = form. >=20 > I mean specific to LISP, not generically. For instance, does "LISP = Control-Plane signaling" include only valid messages, or valid + = inauthentic (and presumably dropped) messages? Traditional attack = traffic (e.g., a DDoS attack against a website) is part of the same data = plane as all legitimate end user traffic; is attack traffic directed at = control plane endpoints considered part of the control plane, or is it a = third category of traffic? If the latter, then what does an operator = need to do to ensure that control plane is always available? IMHO, these questions should be asked for in the 6833bis thread. Don=E2=80= =99t you guys agree? Ciao L. >=20 > Kyle --Apple-Mail=_C2831D20-2417-4C0F-844E-DA78EBCC9CF8 Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset=utf-8 Kyle,= Dino,

I fill like = this discussion is going sideways w.r.t. the original 6830bis = document.

You = started to discuss other documents and other solutions, which, while = certainly interesting and important, belong to other threads and = documents.

IMHO = here are the few points that need to be clarified:

On 28 = Aug 2018, at 23:48, Kyle Rose <krose@krose.org> wrote:

Hi, Dino. I have additional responses inline.

> For the internet core (DFZ = RIB) use-case, LISP proposes replacing BGP sessions
> and global eventually-consistent state sharing with a global = control plane and

LISP *does not propse to eliminate BGP*, in fact it needs it so = RLOC reachability across the network is available, or there would be no = underlay for the LISP overlay.

The whole point of LISP = is to create a routing overlay for the EID address space, the RIB of = which is managed by a global mapping system, not BGP sessions. If = control plane traffic managed by BGP (or static routes, or whatever = networks use once the DFZ RIB is limited to entities in the core) = continues to flow, that is of small comfort to end users trying to get = data over the data plane. >=46rom the perspective of end users, BGP = is being replaced routing of the traffic that matters to them.

Maybe this is just splitting hairs: I certainly don't want to = rathole on this point.

@Kyle: can we consider this point = closed?

[trimmed]

https://tools.ietf.org/html/draft-ietf-lisp-sec-15#ref-I-D.ietf-lisp-rfc6833bis

> One area of concern, of which I have not been able to find = discussion, is that
> of the implications of shared capacity for the control and data = planes, and how
> this can allow a volumetric data plane attack to deny a router = access to the
> global mapping system, slowly choking off service to uncached = portions of the

Well yes, this happens with all our IETF protocols. It is a valid = concern and there are many operational techniques in network = infrastructure that *help* solve (but not eliminate) these problems.

I would like to see a discussion of whether and how the = nature and scale of this problem differs from that of the status quo. = BGP sessions and RIB push have properties that are well-established from = decades of experience: surely LISP does not have exactly the same = properties. The security considerations should make clear, for instance, = how a loss of control plane connectivity differs from the loss of a BGP = session, and how this impacts visibility and behavior of the data = plane.
 
I am not sure I understand the point. Isn=E2=80=99t this covered = by RFC7835? Reference to that document isn=E2=80=99t = sufficient?
If not, can you clarify further?


> I would also like = clarification on what defines the separation between the
> control plane and data plane, and whether authentication itself is = used to

A control-plane obtains information to store in a table. The = data-plane uses that table. That is the definition in the simpliest = form.

I mean specific to LISP, not generically. For instance, does = "LISP Control-Plane signaling" include only valid messages, or valid + = inauthentic (and presumably dropped) messages? Traditional attack = traffic (e.g., a DDoS attack against a website) is part of the same data = plane as all legitimate end user traffic; is attack traffic directed at = control plane endpoints considered part of the control plane, or is it a = third category of traffic? If the latter, then what does an operator = need to do to ensure that control plane is always = available?

IMHO, these questions should be asked for in the = 6833bis thread. Don=E2=80=99t you guys agree?

Ciao

L.






Kyle

= --Apple-Mail=_C2831D20-2417-4C0F-844E-DA78EBCC9CF8-- From nobody Thu Aug 30 05:14:31 2018 Return-Path: X-Original-To: secdir@ietf.org Delivered-To: secdir@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 767F7130934 for ; Thu, 30 Aug 2018 05:14:30 -0700 (PDT) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: Tero Kivinen To: X-Test-IDTracker: no X-IETF-IDTracker: 6.83.1 Auto-Submitted: auto-generated Precedence: bulk Reply-To: secdir-secretary@mit.edu Message-ID: <153563127048.3268.6922952415740252243.idtracker@ietfa.amsl.com> Date: Thu, 30 Aug 2018 05:14:30 -0700 Archived-At: Subject: [secdir] Assignments X-BeenThere: secdir@ietf.org X-Mailman-Version: 2.1.27 List-Id: Security Area Directorate List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 30 Aug 2018 12:14:30 -0000 Review instructions and related resources are at: http://tools.ietf.org/area/sec/trac/wiki/SecDirReview For telechat 2018-08-30 Reviewer LC end Draft Russ Mundy 2018-08-13 draft-ietf-dnsop-terminology-bis-13 Sandra Murphy 2018-08-10 draft-ietf-sidrops-rpki-tree-validation-02 Last calls: Reviewer LC end Draft John Bradley 2018-06-18 draft-ietf-bfd-multipoint-active-tail-09 Daniel Franke 2018-06-28 draft-ietf-netconf-rfc7895bis-06 Daniel Gillmor 2018-06-25 draft-ietf-dnsop-session-signal-14 Daniel Gillmor 2018-03-19 draft-gutmann-scep-10 Catherine Meadows 2018-07-30 draft-sahib-451-new-protocol-elements-03 Russ Mundy 2017-09-14 draft-spinosa-urn-lex-13 Vincent Roca 2018-08-29 draft-ietf-ospf-segment-routing-msd-18 Melinda Shore 2018-09-04 draft-ietf-dnsop-refuse-any-07 Carl Wallace 2018-09-12 draft-ietf-tram-stun-pmtud-09 David Waltermire 2018-09-12 draft-ietf-isis-segment-routing-msd-15 Samuel Weiler 2018-09-07 draft-ietf-tictoc-1588v2-yang-09 Samuel Weiler 2018-05-21 draft-ietf-bfd-multipoint-18 Brian Weis 2018-09-07 draft-ietf-dhc-dhcp4o6-saddr-opt-04 Klaas Wierenga 2018-09-06 draft-ietf-softwire-mesh-multicast-22 Christopher Wood 2018-09-06 draft-ietf-lisp-gpe-05 Paul Wouters 2018-09-06 draft-ietf-dnsop-kskroll-sentinel-15 Early review requests: Reviewer Due Draft Daniel Franke 2018-01-31 draft-ietf-intarea-provisioning-domains-00 Next in the reviewer rotation: Liang Xia Taylor Yu Dacheng Zhang Derek Atkins John Bradley Shaun Cooley Roman Danyliw Alan DeKok Donald Eastlake Shawn Emery From nobody Thu Aug 30 07:20:21 2018 Return-Path: X-Original-To: secdir@ietfa.amsl.com Delivered-To: secdir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 4C661130E24; Thu, 30 Aug 2018 07:20:20 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.198 X-Spam-Level: X-Spam-Status: No, score=-4.198 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, MIME_QP_LONG_LINE=0.001, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id gMUMU9t1-l5x; Thu, 30 Aug 2018 07:20:18 -0700 (PDT) Received: from ccs.nrl.navy.mil (mx0.ccs.nrl.navy.mil [IPv6:2001:480:20:118:118::211]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 3C229130E84; Thu, 30 Aug 2018 07:20:17 -0700 (PDT) Received: from [10.0.3.109] (fw5540.nrl.navy.mil [132.250.196.100]) by ccs.nrl.navy.mil (8.14.4/8.14.4) with ESMTP id w7UEKFMS004071; Thu, 30 Aug 2018 10:20:15 -0400 User-Agent: Microsoft-MacOutlook/10.10.0.180812 Date: Thu, 30 Aug 2018 10:20:15 -0400 From: Catherine A Meadows To: , The IESG , Message-ID: Thread-Topic: SecDir Review of draft-sahib-451-new-protocol-elements-03 References: <27B365FA-6240-4774-B98F-F350A3ED0E9D@nrl.navy.mil> In-Reply-To: <27B365FA-6240-4774-B98F-F350A3ED0E9D@nrl.navy.mil> Mime-version: 1.0 Content-type: multipart/alternative; boundary="B_3618469215_190514309" X-CCS-MailScanner: No viruses found. X-CCS-MailScanner-Info: See: http://www.nrl.navy.mil/ccs/support/email Archived-At: Subject: [secdir] SecDir Review of draft-sahib-451-new-protocol-elements-03 X-BeenThere: secdir@ietf.org X-Mailman-Version: 2.1.27 Precedence: list List-Id: Security Area Directorate List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 30 Aug 2018 14:20:20 -0000 > This message is in MIME format. Since your mail reader does not understand this format, some or all of this message may not be legible. --B_3618469215_190514309 Content-type: text/plain; charset="UTF-8" Content-transfer-encoding: quoted-printable This is a resend of a review I sent last week, in which I gave the wrong ad= dress for the secdir.=C2=A0 If you=E2=80=99ve already seen this review you can just ig= nore it. =20 Cathy Meadows =20 =20 From: Catherine A Meadows Date: Thursday, August 23, 2018 at 10:11 AM To: "secdir-secretary@mit.edu" , The IESG , Cc: Catherine A Meadows Subject: SecDir Review of draft-sahib-451-new-protocol-elements-03 =20 I have reviewed this document as part of the security directorate's=20 ongoing effort to review all IETF documents being processed by the=20 IESG. These comments were written primarily for the benefit of the=20 security area directors. Document editors and WG chairs should treat=20 these comments just like any other last call comments. =20 The summary of the review is =E2=80=9Cready.=E2=80=9D =20 In my review of version 2 of this document I had some comments about confus= ing language in Sections 2.1 and 2.2. This has now been corrected, and I consider the document ready. =20 Cathy Meadows =20 --B_3618469215_190514309 Content-type: text/html; charset="UTF-8" Content-transfer-encoding: quoted-printable

This is a r= esend of a review I sent last week, in which I gave the wrong address for th= e secdir.=C2=A0 If you=E2=80=99ve already seen this review you can just ignore it.

&nb= sp;

Cathy = Meadows

 

 

From: Catherine A Meadows &l= t;catherine.meadows@nrl.navy.mil>
Date: Thursday, August 23, 20= 18 at 10:11 AM
To: "secdir-secretary@mit.edu" <secdir= -secretary@mit.edu>, The IESG <iesg@ietf.org>, <draft-sahib-451-= new-protocol-elements.all@ietf.org>
Cc: Catherine A Meadows <= ;catherine.meadows@nrl.navy.mil>
Subject: SecDir Review of draf= t-sahib-451-new-protocol-elements-03

 

I have review= ed this document as part of the security directorate's 

ongoing = effort to review all IETF documents being processed by the =

IESG= .  These comments were written primarily for the benefit of the 

security area directors.  Document editors and WG chairs should t= reat 

these comments just like any other last call comments.

 

The su= mmary of the review is =E2=80=9Cready.=E2=80=9D

=  

In my review of version 2 of this document = I had some comments about confusing language in Sections 2.1 and 2.2.=

This has no= w been corrected, and I consider the document ready.

 

=

Cathy Meadows<= /o:p>

 

--B_3618469215_190514309-- From nobody Thu Aug 30 07:58:57 2018 Return-Path: X-Original-To: secdir@ietfa.amsl.com Delivered-To: secdir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E58DB130F40; Thu, 30 Aug 2018 07:58:42 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.999 X-Spam-Level: X-Spam-Status: No, score=-1.999 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 4ICUuokvgNFO; Thu, 30 Aug 2018 07:58:39 -0700 (PDT) Received: from mail-pf1-x42d.google.com (mail-pf1-x42d.google.com [IPv6:2607:f8b0:4864:20::42d]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 81A26130F41; Thu, 30 Aug 2018 07:58:39 -0700 (PDT) Received: by mail-pf1-x42d.google.com with SMTP id b11-v6so4013617pfo.3; Thu, 30 Aug 2018 07:58:39 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:subject:from:in-reply-to:date:cc :content-transfer-encoding:message-id:references:to; bh=cLE8TtIC7KCI8SOvUMklfkoS6XRNvX1EVAU9lMU1i5o=; b=ZQt4PyGIqxRWSrWtUSecAaATAPDjjsWzGMLCD/ZAK6fZPk9c87u/mS1+1WDzt2by2S bWI2yculPYwucqH9SWtvdSAcdnAcXm/WmA0NY34Wb5iOMS0wlrARsEbDhM/LjSrS8JHf +NWlt8UySmqkA1NCteHkiAG6wMCRhcWenF85VEON5RieU6MuZfu8v1BRshy7qR1wG61a iApkAzHxtqQNfdDMSeWOnRXISDnedRUHM3H1N0Tf3ZFu0Lqf1YUaX6cEWV5sv2AEdTyW /DLrSZAVNyHU2ak1fxQtT+6qOjaezB62/J6SeWojtGSBJMnP7GW2qDmUQd1cVHSBcw5L cpnQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:subject:from:in-reply-to:date:cc :content-transfer-encoding:message-id:references:to; bh=cLE8TtIC7KCI8SOvUMklfkoS6XRNvX1EVAU9lMU1i5o=; b=MxpevapJbW8cCe+/VyHIUw3/xt/0gosib3n6S2WrsmX00SS6ng2lINvPkk2SXMQCNE GtVEyB60fbDol8ZCclNkGJmRKWP+uF0S6rEjE0zdSJReQcUUE4F5Z3WasDiZVDByUGUs Einq7C/3ggxGWUrxnWbBFPBiybNTIu58kiJj2fxSNKpH9vEogCl/uLnQQsg9xwO7cohx qI9v0PUDcCxzKvB+luNC2fa0g9Vdc/YaC2gRy2Pjs1PbTzkhO5pU7zpzXe4y+GYvt8uF FH/B7M7yTSZaius/1+0xgQooqrtDL903kZBk9YAzRz8KxG+XE/n9z12ypIvWzejPJ93Z kkGw== X-Gm-Message-State: APzg51AGUFs1gdF2/L1hgWNhSqiSpr5GBrqfu/QkAx3xOz8HAzzjjVKF wx9Ns0VrZpexV0R66xlfTAO1vd0f X-Google-Smtp-Source: ANB0VdZCjenD+Utk2oMkM+Xf7ERyQfDLkEMmfwGZCcOdrMxKcpw80FI6/MEYIPkTvoPCkmz5MNplRg== X-Received: by 2002:a63:e056:: with SMTP id n22-v6mr9934628pgj.205.1535641119149; Thu, 30 Aug 2018 07:58:39 -0700 (PDT) Received: from [10.31.79.28] ([96.72.181.209]) by smtp.gmail.com with ESMTPSA id u9-v6sm13066581pfi.104.2018.08.30.07.58.38 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Thu, 30 Aug 2018 07:58:38 -0700 (PDT) Content-Type: text/plain; charset=utf-8 Mime-Version: 1.0 (Mac OS X Mail 11.5 \(3445.9.1\)) From: Dino Farinacci In-Reply-To: <0F515189-0329-49F6-9A86-41DD3557BA2E@gigix.net> Date: Thu, 30 Aug 2018 07:58:37 -0700 Cc: Kyle Rose , IETF SecDir , draft-ietf-lisp-rfc6830bis.all@ietf.org, IETF Discussion Mailing List , "lisp@ietf.org list" , Benjamin Kaduk Content-Transfer-Encoding: quoted-printable Message-Id: References: <153513922907.22939.10542350679349996082@ietfa.amsl.com> <0F515189-0329-49F6-9A86-41DD3557BA2E@gigix.net> To: Luigi Iannone X-Mailer: Apple Mail (2.3445.9.1) Archived-At: Subject: Re: [secdir] Secdir last call review of draft-ietf-lisp-rfc6830bis-15 X-BeenThere: secdir@ietf.org X-Mailman-Version: 2.1.27 Precedence: list List-Id: Security Area Directorate List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 30 Aug 2018 14:58:48 -0000 > Kyle, Dino, >=20 > I fill like this discussion is going sideways w.r.t. the original = 6830bis document. >=20 > You started to discuss other documents and other solutions, which, = while certainly interesting and important, belong to other threads and = documents. Well I think the security guys want to make sure LISP, holistically, is = secure. So we have to present solutions that may not be in the = data-plane. I agree though we should focus on data-plane security since = that is what Kyle is reviewing. >=20 > IMHO here are the few points that need to be clarified: >=20 >> On 28 Aug 2018, at 23:48, Kyle Rose wrote: >>=20 >> Hi, Dino. I have additional responses inline. >>=20 >> > For the internet core (DFZ RIB) use-case, LISP proposes replacing = BGP sessions >> > and global eventually-consistent state sharing with a global = control plane and >>=20 >> LISP *does not propse to eliminate BGP*, in fact it needs it so RLOC = reachability across the network is available, or there would be no = underlay for the LISP overlay. >>=20 >> The whole point of LISP is to create a routing overlay for the EID = address space, the RIB of which is managed by a global mapping system, = not BGP sessions. If control plane traffic managed by BGP (or static = routes, or whatever networks use once the DFZ RIB is limited to entities = in the core) continues to flow, that is of small comfort to end users = trying to get data over the data plane. >=46rom the perspective of end = users, BGP is being replaced routing of the traffic that matters to = them. >>=20 >> Maybe this is just splitting hairs: I certainly don't want to rathole = on this point. >=20 > @Kyle: can we consider this point closed? =46rom my standpoint, it should be. >=20 > [trimmed] >=20 >> = https://tools.ietf.org/html/draft-ietf-lisp-sec-15#ref-I-D.ietf-lisp-rfc68= 33bis >>=20 >> > One area of concern, of which I have not been able to find = discussion, is that >> > of the implications of shared capacity for the control and data = planes, and how >> > this can allow a volumetric data plane attack to deny a router = access to the >> > global mapping system, slowly choking off service to uncached = portions of the >>=20 >> Well yes, this happens with all our IETF protocols. It is a valid = concern and there are many operational techniques in network = infrastructure that *help* solve (but not eliminate) these problems. >>=20 >> I would like to see a discussion of whether and how the nature and = scale of this problem differs from that of the status quo. BGP sessions = and RIB push have properties that are well-established from decades of = experience: surely LISP does not have exactly the same properties. The = security considerations should make clear, for instance, how a loss of = control plane connectivity differs from the loss of a BGP session, and = how this impacts visibility and behavior of the data plane. > =20 > I am not sure I understand the point. Isn=E2=80=99t this covered by = RFC7835? Reference to that document isn=E2=80=99t sufficient? > If not, can you clarify further? And I am not sure this is relevant to the data-plane. >=20 >>=20 >> > I would also like clarification on what defines the separation = between the >> > control plane and data plane, and whether authentication itself is = used to >>=20 >> A control-plane obtains information to store in a table. The = data-plane uses that table. That is the definition in the simpliest = form. >>=20 >> I mean specific to LISP, not generically. For instance, does "LISP = Control-Plane signaling" include only valid messages, or valid + = inauthentic (and presumably dropped) messages? Traditional attack = traffic (e.g., a DDoS attack against a website) is part of the same data = plane as all legitimate end user traffic; is attack traffic directed at = control plane endpoints considered part of the control plane, or is it a = third category of traffic? If the latter, then what does an operator = need to do to ensure that control plane is always available? >=20 > IMHO, these questions should be asked for in the 6833bis thread. = Don=E2=80=99t you guys agree? Yes, agree. Dino >=20 > Ciao >=20 > L. >=20 >=20 >=20 >=20 >=20 >>=20 >> Kyle >=20 From nobody Fri Aug 31 03:09:16 2018 Return-Path: X-Original-To: secdir@ietfa.amsl.com Delivered-To: secdir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 2FF5E130DCD; Fri, 31 Aug 2018 03:09:08 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -6.899 X-Spam-Level: X-Spam-Status: No, score=-6.899 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_HI=-5] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id oWlfPQdXLgFR; Fri, 31 Aug 2018 03:09:05 -0700 (PDT) Received: from mail2-relais-roc.national.inria.fr (mail2-relais-roc.national.inria.fr [192.134.164.83]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id C2F901277BB; Fri, 31 Aug 2018 03:09:04 -0700 (PDT) X-IronPort-AV: E=Sophos;i="5.53,311,1531778400"; d="scan'208,217";a="344384483" Received: from dom38-1-82-236-155-50.fbx.proxad.net (HELO [192.168.1.117]) ([82.236.155.50]) by mail2-relais-roc.national.inria.fr with ESMTP/TLS/DHE-RSA-AES256-GCM-SHA384; 31 Aug 2018 12:09:02 +0200 From: Vincent Roca Content-Type: multipart/alternative; boundary="Apple-Mail=_ADA480A0-2575-429B-9827-E4DF6BD8140B" Mime-Version: 1.0 (Mac OS X Mail 11.5 \(3445.9.1\)) Message-Id: Date: Fri, 31 Aug 2018 12:09:01 +0200 To: The IESG , secdir@ietf.org, draft-ietf-ospf-segment-routing-msd.all@ietf.org X-Mailer: Apple Mail (2.3445.9.1) Archived-At: Subject: [secdir] Secdir review of draft-ietf-ospf-segment-routing-msd-18 X-BeenThere: secdir@ietf.org X-Mailman-Version: 2.1.27 Precedence: list List-Id: Security Area Directorate List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 31 Aug 2018 10:09:08 -0000 --Apple-Mail=_ADA480A0-2575-429B-9827-E4DF6BD8140B Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=utf-8 Hello, I have reviewed this document as part of the security directorate=E2=80=99= s ongoing effort to review all IETF documents being processed by the IESG. These comments were written primarily for the benefit of the security area directors. Document editors and WG chairs should treat these comments = just like any other last call comments. Summary: Ready with nits The Security Considerations section refers to RFC7474 for "Security = concerns for OSPF". However, RFC7474 is limited to OSPFv2, not v3. This should be reflected = here as the authors previously explained that "OSPF means both OSPFv2 and OSPFv3" = (Abstract). I also think that a final "." is missing at the end of: "Further security analysis for OSPF protocol is done in [RFC6863]" Although a little bit old (2013), this Informational RFC6863 is a good = reference that highlights security issues and suggests work items to fix/mitigate them. In = particular OSPFv3 security that relies on IPsec raises deployment issues. There are other items. I don't = know if the situation has significantly changed since this RFC. Then the authors refer to the Security Considerations sections of = [RFC7770], [RFC7684] and [RFC8362]. Basically, RFC 7770 says that the Security Considerations "should be = described as additional capabilities are proposed for advertisement" and that's all. RFC 7684 is limited to OSPFv2, and here also it is explained that: "OSPFv2 applications utilizing these OSPFv2 extensions must = define the security considerations relating to those applications..." Then there is a discussion on malformed information/TLV that should be = ignored. Finally, RFC 8362, dedicated to OSPFv3, refers to old RFCs, prior to the = above RFC6863 reference. These three RFCs are good references but they do not provide much = insight unlike what the authors suggest. I understand that: (1) security threats do exist, and (2) = implementers should take care of malformed received packets (e.g, bad TLV). This could be highlighted in = this document and references provided to support it. Then the second paragraph quickly discusses the consequences of = advertising incorrect MSD values. The sentence is ambiguous. I understand: "[...]: either in a path computation failing and the service = (becoming?) unavailable, or (in an) instantiation of a path that can't be supported by = the head-end ([...])." Am I correct? Please fix it. Also I don't understand the definition of head-end (e.g., what does = "imposition" mean?). The authors should either be more explicit and/or refer to an architectural = document. Then, an "incorrect MSD" may refer either to a value that is either = smaller or larger than it should. What are the consequences in each case and how does it relate to the two = consequences mentioned in this paragraph? Is there something else? Is there a Denial of Service risk specific to this extension, or is it = vulnerable to replay attacks? I don't think so but it's worth clarifying. Other comments: ** Intro: there's an mbiguous sentence "In order for BGP-LS to signal MSD for all the nodes and links in the = network MSD is relevant, [...]" Do you mean "where MSD is relevant" or something else? Regards, Vincent= --Apple-Mail=_ADA480A0-2575-429B-9827-E4DF6BD8140B Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset=utf-8 Hello,

I have reviewed this = document as part of the security directorate=E2=80=99s ongoing
effort to review all IETF documents being processed by the = IESG. These
comments were written primarily for the = benefit of the security area
directors.  Document = editors and WG chairs should treat these comments just
like = any other last call comments.

Summary: Ready with nits


The Security Considerations = section refers to RFC7474 for "Security concerns for OSPF".
However, RFC7474 is limited to OSPFv2, not v3. This should be = reflected here as the authors
previously explained = that "OSPF means both OSPFv2 and OSPFv3" (Abstract).

I also think that a = final "." is missing at the end of:
"Further = security analysis for OSPF protocol is done in [RFC6863]"

Although a little bit = old (2013), this Informational RFC6863 is a good reference that = highlights
security issues and suggests work items = to fix/mitigate them. In particular OSPFv3 security that
relies on IPsec raises deployment issues. There are other = items. I don't know if the situation
has = significantly changed since this RFC.

Then the authors refer to the Security = Considerations sections of [RFC7770], [RFC7684] and [RFC8362].
Basically, RFC 7770 says that the Security Considerations = "should be described as additional
capabilities are = proposed for advertisement" and that's all.

RFC 7684 is limited to OSPFv2, and here = also it is explained that:
      =   "OSPFv2 applications utilizing these OSPFv2 extensions must = define the security
        = considerations relating to those applications..."
Then there is a discussion on malformed information/TLV that = should be ignored.

Finally, RFC 8362, dedicated to OSPFv3, refers to old RFCs, = prior to the above RFC6863 reference.

These three RFCs are good references = but they do not provide much insight unlike what the authors
suggest. I understand that: (1) security threats do exist, = and (2) implementers should take care of
malformed = received packets (e.g, bad TLV). This could be highlighted in this = document and references
provided to support = it.


Then the second paragraph quickly = discusses the consequences of advertising incorrect MSD = values.
The sentence is ambiguous. I = understand:
        "[...]: = either in a path computation failing and the service (becoming?) = unavailable,
        or (in an) = instantiation of a path that can't be supported by the head-end = ([...])."
Am I correct? Please fix it.
Also I don't understand the definition of head-end (e.g., = what does "imposition" mean?). The authors
should = either be more explicit and/or refer to an architectural = document.
Then, an "incorrect MSD" may refer either = to a value that is either smaller or larger than it should.
What are the consequences in each case and how does it relate = to the two consequences mentioned in
this = paragraph?

Is = there something else?
Is there a Denial of Service = risk specific to this extension, or is it vulnerable to replay = attacks?
I don't think so but it's worth = clarifying.


Other comments:

** Intro: = there's an mbiguous sentence
"In order for BGP-LS = to signal MSD for all the nodes and links in the network MSD is = relevant, [...]"
Do you mean "where MSD is = relevant" or something else?

Regards,

  Vincent
= --Apple-Mail=_ADA480A0-2575-429B-9827-E4DF6BD8140B-- From nobody Fri Aug 31 11:26:15 2018 Return-Path: X-Original-To: secdir@ietfa.amsl.com Delivered-To: secdir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 74BCC130DE5 for ; Fri, 31 Aug 2018 11:26:13 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -3.143 X-Spam-Level: X-Spam-Status: No, score=-3.143 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, HTML_TAG_BALANCE_BODY=1.157, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001, T_DKIMWL_WL_HIGH=-0.01, T_KAM_HTML_FONT_INVALID=0.01] autolearn=unavailable autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=ericsson.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id q_wpqT4ihIhL for ; Fri, 31 Aug 2018 11:26:03 -0700 (PDT) Received: from sesbmg22.ericsson.net (sesbmg22.ericsson.net [193.180.251.48]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id AF3A0128CFD for ; Fri, 31 Aug 2018 11:26:01 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; d=ericsson.com; s=mailgw201801; c=relaxed/simple; q=dns/txt; i=@ericsson.com; t=1535739933; h=From:Sender:Reply-To:Subject:Date:Message-ID:To:CC:MIME-Version:Content-Type: Content-Transfer-Encoding:Content-ID:Content-Description:Resent-Date:Resent-From: Resent-Sender:Resent-To:Resent-Cc:Resent-Message-ID:In-Reply-To:References:List-Id: List-Help:List-Unsubscribe:List-Subscribe:List-Post:List-Owner:List-Archive; bh=5V6bHDdrOLjt4ZYp44ZGdlZkJdPyWc+toKqAs/4NsQM=; b=Mw7LoSIG81y9ZpPSZwq1s61ZXqGmH21XI4491SpSouCVcMhqBJ6+O4D0Yd3MBcbp lDb1c0RmsiV1/E0fICXZXmhnpEo8tIVjhaC8dJum2jZgztOrU1WulQYikNUgC0RK g9WkmWxXa9SbD6HoPbXPUgLmQ9vg5haEqZR4Su6VAGM=; X-AuditID: c1b4fb30-3cd869c0000055da-73-5b89881c404e Received: from ESESBMB501.ericsson.se (Unknown_Domain [153.88.183.114]) by sesbmg22.ericsson.net (Symantec Mail Security) with SMTP id 1F.52.21978.C18898B5; Fri, 31 Aug 2018 20:25:32 +0200 (CEST) Received: from EUSASMB503.ericsson.se (147.117.188.221) by ESESBMB501.ericsson.se (153.88.183.114) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256_P256) id 15.1.1466.3; Fri, 31 Aug 2018 20:24:57 +0200 Received: from EUSASMB503.ericsson.se ([147.117.188.239]) by EUSASMB503.ericsson.se ([147.117.188.239]) with mapi id 15.01.1466.003; Fri, 31 Aug 2018 14:24:55 -0400 From: Daniel Migault To: "secdir@ietf.org" , =?utf-8?B?R8O2cmFuIFNlbGFuZGVy?= CC: "draft-ietf-core-object-security.all@ietf.org" , "ietf@ietf.org" , "core@ietf.org" Thread-Topic: Re: [secdir] Secdir last call review of draft-ietf-core-object-security-14 Thread-Index: AdRBVx/08SNLqCtSRiWIdGtlfopgIw== Date: Fri, 31 Aug 2018 18:24:55 +0000 Message-ID: <318b6f541a9b4317be4bbfa4b0b1fa3e@ericsson.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [147.117.188.8] Content-Type: multipart/alternative; boundary="_000_318b6f541a9b4317be4bbfa4b0b1fa3eericssoncom_" MIME-Version: 1.0 X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFuphkeLIzCtJLcpLzFFi42KZGbG9SFemozPa4NYhS4t9b9czW3zrmcdq 8WzjfBaLDwsfsjiweCxZ8pMpgDGKyyYlNSezLLVI3y6BK6PlNV/BrkmyFQvf3GdpYLywSaaL kZNDQsBE4sGq50xdjFwcQgJHGSUOTNkD5XxnlJjw4jMbSJWQwApGid9nwWw2ASOJtkP97CC2 iECmxIUbe9hBGpgFljNKnGj8DtTNwSEsECrx94oHiCkiECUx+ZophKkncf5ZEEgni4CqRP+T KywgNq+AtcTjtXtZQWxGATGJ76fWMIHYzALiEreezGeCuFNAYsme88wQtqjEy8f/WCFsRYnP p2+wQ9QnS1w+tIcVYqagxMmZT1gmMArPQjJqFpKyWUjKZgFdxyygKbF+lz5EiaLElO6H7BC2 hkTrnLnsyOILGNlXMYoWpxYn5aYbGemlFmUmFxfn5+nlpZZsYgTG0cEtvw12ML587niIUYCD UYmHlx0YX0KsiWXFlbmHGCU4mJVEeDkzOqKFeFMSK6tSi/Lji0pzUosPMUpzsCiJ81r4bY4S EkhPLEnNTk0tSC2CyTJxcEo1MLqqONjd771plJ1+MYz1xQxh9jitxeVBL07/i2het+Tc4jdh 6/Jz+c5yZNu0txZsuxV4bzs3x+rkjw8vfbNjeW02farKZN6PvVlXDNfsiN6zW/x8L5NxS8XV G92Sc+8lPBCb+naxntT3gwf/zmP+z2Rtlli6VCR5wWqltifV60r6VhbMTGx/uF2JpTgj0VCL uag4EQClWfwsnwIAAA== Archived-At: Subject: Re: [secdir] Secdir last call review of draft-ietf-core-object-security-14 X-BeenThere: secdir@ietf.org X-Mailman-Version: 2.1.27 Precedence: list List-Id: Security Area Directorate List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 31 Aug 2018 18:26:13 -0000 --_000_318b6f541a9b4317be4bbfa4b0b1fa3eericssoncom_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 SGkgR29yYW4sDQoNCg0KDQpUaGFuayB5b3UgZm9yIHlvdXIgZmVlZCBiYWNrcy4gSSBiZWxpZXZl IGFsbCBteSBjb25jZXJucyBoYXZlIGJlZW4gYWRkcmVzc2VkLiBZb3UgY2FuIHNlZSBpbmxpbmUg dGhlIHNwZWNpZmljIHJlc3BvbnNlLiA8bWdsdDI+PC9tZ2x0Mj4NCg0KDQoNCllvdXJzLA0KDQpE YW5pZWwNCg0KDQoNCi0tLS0tT3JpZ2luYWwgTWVzc2FnZS0tLS0tDQpGcm9tOiBzZWNkaXIgPHNl Y2Rpci1ib3VuY2VzQGlldGYub3JnPG1haWx0bzpzZWNkaXItYm91bmNlc0BpZXRmLm9yZz4+IE9u IEJlaGFsZiBPZiBHw7ZyYW4gU2VsYW5kZXINClNlbnQ6IFRodXJzZGF5LCBBdWd1c3QgMTYsIDIw MTggOToyNyBBTQ0KVG86IHNlY2RpckBpZXRmLm9yZzxtYWlsdG86c2VjZGlyQGlldGYub3JnPg0K Q2M6IGRyYWZ0LWlldGYtY29yZS1vYmplY3Qtc2VjdXJpdHkuYWxsQGlldGYub3JnPG1haWx0bzpk cmFmdC1pZXRmLWNvcmUtb2JqZWN0LXNlY3VyaXR5LmFsbEBpZXRmLm9yZz47IGlldGZAaWV0Zi5v cmc8bWFpbHRvOmlldGZAaWV0Zi5vcmc+OyBjb3JlQGlldGYub3JnPG1haWx0bzpjb3JlQGlldGYu b3JnPg0KU3ViamVjdDogUmU6IFtzZWNkaXJdIFNlY2RpciBsYXN0IGNhbGwgcmV2aWV3IG9mIGRy YWZ0LWlldGYtY29yZS1vYmplY3Qtc2VjdXJpdHktMTQNCg0KDQoNCg0KDQo+SGVsbG8gRGFuaWVs LA0KDQo+DQoNCj5UaGFua3MgZm9yIHlvdXIgcmV2aWV3LiBQbGVhc2UgZmluZCByZXNwb25zZXMg aW5saW5lLg0KDQoNCg0KICBHw7ZyYW4NCg0KPg0KDQo+T24gMjAxOC0wNy0zMSwgMDA6MTAsICJE YW5pZWwgTWlnYXVsdCIgPGRhbmllbC5taWdhdWx0QGVyaWNzc29uLmNvbTxtYWlsdG86ZGFuaWVs Lm1pZ2F1bHRAZXJpY3Nzb24uY29tPj4NCg0KPndyb3RlOg0KDQo+DQoNCj4+UmV2aWV3ZXI6IERh bmllbCBNaWdhdWx0DQoNCj4+UmV2aWV3IHJlc3VsdDogSGFzIElzc3Vlcw0KDQo+Pg0KDQo+Pkhp LA0KDQo+Pg0KDQo+PlJldmlld2VyOiBEYW5pZWwgTWlnYXVsdA0KDQo+PlJldmlldyByZXN1bHQ6 IEhhcyBJc3N1ZXMNCg0KPj4NCg0KPj5JIGhhdmUgcmV2aWV3ZWQgdGhpcyBkb2N1bWVudCBhcyBw YXJ0IG9mIHRoZSBzZWN1cml0eSBkaXJlY3RvcmF0ZSdzDQoNCj4+b25nb2luZw0KDQo+PmVmZm9y dCB0byByZXZpZXcgYWxsIElFVEYgZG9jdW1lbnRzIGJlaW5nIHByb2Nlc3NlZCBieSB0aGUgSUVT Ry4gIFRoZXNlDQoNCj4+Y29tbWVudHMgd2VyZSB3cml0dGVuIHByaW1hcmlseSBmb3IgdGhlIGJl bmVmaXQgb2YgdGhlIHNlY3VyaXR5IGFyZWENCg0KPj5kaXJlY3RvcnMuDQoNCj4+IERvY3VtZW50 IGVkaXRvcnMgYW5kIFdHIGNoYWlycyBzaG91bGQgdHJlYXQgIHRoZXNlIGNvbW1lbnRzIGp1c3Qg bGlrZQ0KDQo+PmFueQ0KDQo+Pm90aGVyIGxhc3QgY2FsbCBjb21tZW50cy4NCg0KPj4NCg0KPj5U aGUgc3VtbWFyeSBvZiB0aGUgcmV2aWV3IGlzIEhhcyAoc21hbGwpIElzc3Vlcy4NCg0KPj4NCg0K Pj5JIGFtIG5vdCBhbiBleHBlcnQgaW4gQ29BUC4gVGhlIGRvY3VtZW50IGlzIHdlbGwgd3JpdHRl biwgYW5kIEkgYmVsaWV2ZQ0KDQo+PnNlY3VyaW5nIG9iamVjdHMgaXMgaW1wb3J0YW50LiBJIGhh ZCBjb21tZW50cyByZWdhcmRpbmcgdGhlIGRlc2NyaXB0aW9uDQoNCj4+b2YNCg0KPj5zZWN1cml0 eSBjb250ZXh0cy4gSSBoZXNpdGF0ZWQgYmV0d2VlbiBOaXRzIGFuZCBJc3N1ZXMuIEkgZG8gbm90 IGJlbGlldmUNCg0KPj50aGVzZQ0KDQo+PmFyZSBtYWpvciBkZXNpZ24gaXNzdWVzLCBhbmQgc29t ZSBjbGFyaWZpY2F0aW9ucyBtYXkgYmUgc3VmZmljaWVudC4gT3RoZXINCg0KPj5jb21tZW50cyBh cmUgbW9zdGx5IGVkaXRvcmlhbCBuaXRzLiBQbGVhc2UgZmluZCBhYm92ZSBteSBjb21tZW50cy4g SSBhbQ0KDQo+PmhhcHB5DQoNCj4+dG8gZm9sbG93IHVwIHRoZSB1cGRhdGVzLg0KDQo+Pg0KDQo+ PiAgICAgT2JqZWN0IFNlY3VyaXR5IGZvciBDb25zdHJhaW5lZCBSRVNUZnVsIEVudmlyb25tZW50 cyAoT1NDT1JFKQ0KDQo+PiAgICAgICAgICAgICAgICAgICBkcmFmdC1pZXRmLWNvcmUtb2JqZWN0 LXNlY3VyaXR5LTE0DQoNCj4+DQoNCj4+MS4gIEludHJvZHVjdGlvbg0KDQo+Pg0KDQo+PiAgIFRo ZSBDb25zdHJhaW5lZCBBcHBsaWNhdGlvbiBQcm90b2NvbCAoQ29BUCkgW1JGQzcyNTJdIGlzIGEg d2ViDQoNCj4+ICAgdHJhbnNmZXIgcHJvdG9jb2wsIGRlc2lnbmVkIGZvciBjb25zdHJhaW5lZCBu b2RlcyBhbmQgbmV0d29ya3MNCg0KPj4gICBbUkZDNzIyOF0sIGFuZCBtYXkgYmUgbWFwcGVkIGZy b20gSFRUUCBbUkZDODA3NV0uICBDb0FQIHNwZWNpZmllcyB0aGUNCg0KPj4gICB1c2Ugb2YgcHJv eGllcyBmb3Igc2NhbGFiaWxpdHkgYW5kIGVmZmljaWVuY3kgYW5kIHJlZmVyZW5jZXMgRFRMUw0K DQo+PiAgIFtSRkM2MzQ3XSBmb3Igc2VjdXJpdHkuICBDb0FQLXRvLUNvQVAsIEhUVFAtdG8tQ29B UCwgYW5kIENvQVAtdG8tSFRUUA0KDQo+PiAgIHByb3hpZXMgcmVxdWlyZSBEVExTIG9yIFRMUyBb UkZDNTI0Nl0gdG8gYmUgdGVybWluYXRlZCBhdCB0aGUgcHJveHkuDQoNCj4+ICAgVGhlIHByb3h5 IHRoZXJlZm9yZSBub3Qgb25seSBoYXMgYWNjZXNzIHRvIHRoZSBkYXRhIHJlcXVpcmVkIGZvcg0K DQo+PiAgIHBlcmZvcm1pbmcgdGhlIGludGVuZGVkIHByb3h5IGZ1bmN0aW9uYWxpdHksIGJ1dCBp cyBhbHNvIGFibGUgdG8NCg0KPj4gICBlYXZlc2Ryb3Agb24sIG9yIG1hbmlwdWxhdGUgYW55IHBh cnQgb2YsIHRoZSBtZXNzYWdlIHBheWxvYWQgYW5kDQoNCj4+ICAgbWV0YWRhdGEgaW4gdHJhbnNp dCBiZXR3ZWVuIHRoZSBlbmRwb2ludHMuICBUaGUgcHJveHkgY2FuIGFsc28NCg0KPj4gICBpbmpl Y3QsIGRlbGV0ZSwgb3IgcmVvcmRlciBwYWNrZXRzIHNpbmNlIHRoZXkgYXJlIG5vIGxvbmdlciBw cm90ZWN0ZWQNCg0KPj4gICBieSAoRClUTFMuDQoNCj4+PG1nbHQ+DQoNCj4+VGhlIHByb3h5IGNh biBhbG1vc3QgZG8gd2hhdGV2ZXIgaXQgd2FudHMgYXMgbWVudGlvbmVkIGluIHRoZSBzZWNvbmQN Cg0KPj5zZW50ZW5jZS4NCg0KPj5BY2Nlc3NpbmcgdGhlIGRhdGEgZW5hYmxlcyBpdCB0byBwYXNz aXZlbHkgbW9uaXRvciB0aGUgY29tbXVuaWNhdGlvbi4gIEkNCg0KPj53b3VsZA0KDQo+PnRodXMg cHJvcG9zZSBzb21lIHRleHQgYXJvdW5kIHRoZXNlIGxpbmVzOg0KDQo+Pg0KDQo+Pk9MRDoNCg0K Pj5UaGUgcHJveHkgdGhlcmVmb3JlIG5vdCBvbmx5IGhhcyBhY2Nlc3MgdG8gdGhlIGRhdGEgcmVx dWlyZWQgZm9yDQoNCj4+ICAgcGVyZm9ybWluZyB0aGUgaW50ZW5kZWQgcHJveHkgZnVuY3Rpb25h bGl0eSwgYnV0IGlzIGFsc28gYWJsZSB0bw0KDQo+PiAgIGVhdmVzZHJvcCBvbiwgb3IgbWFuaXB1 bGF0ZSBhbnkgcGFydCBvZiwgdGhlIG1lc3NhZ2UgcGF5bG9hZCBhbmQNCg0KPj4gICBtZXRhZGF0 YSBpbiB0cmFuc2l0IGJldHdlZW4gdGhlIGVuZHBvaW50cy4gIFRoZSBwcm94eSBjYW4gYWxzbw0K DQo+PiAgIGluamVjdCwgZGVsZXRlLCBvciByZW9yZGVyIHBhY2tldHMgc2luY2UgdGhleSBhcmUg bm8gbG9uZ2VyIHByb3RlY3RlZA0KDQo+PiAgIGJ5IChEKVRMUy4NCg0KPj4NCg0KPj5ORVc6DQoN Cj4+VGhlIHByb3h5IHRoZXJlZm9yZSBoYXMgYWNjZXNzIHRvIHRoZSBkYXRhIHJlcXVpcmVkIGZv cg0KDQo+PiAgIHBlcmZvcm1pbmcgdGhlIGludGVuZGVkIHByb3h5IGZ1bmN0aW9uYWxpdHksIGFu ZCBzbyBjYW4gcGFzc2l2ZWx5DQoNCj4+bW9uaXRvcg0KDQo+PiAgIHRoZSBjb21tdW5pY2F0aW9u cy4gSW4gYWRkaXRpb24sIHRoZSBwcm94eSBjYW4gYWxzbyBpbmplY3QsIGRlbGV0ZSwgb3INCg0K Pj4gICByZW9yZGVyIHBhY2tldHMgc2luY2UgdGhleSBhcmUgbm8gbG9uZ2VyIHByb3RlY3RlZCBi eSAoRClUTFMuDQoNCj4+PC9tZ2x0Pg0KDQo+DQoNCj4NCg0KPltHUzpdIEkgZGlkbuKAmXQgcmVh bGx5IHVuZGVyc3RhbmQgdGhpcyBjb21tZW50LiBUaGUgcG9pbnQgd2UgdHJpZWQgdG8gbWFrZQ0K DQo+aXMgdGhhdCBzaW5jZSAoRClUTFMgcHJvdGVjdHMgZXZlcnl0aGluZyBvciBub3RoaW5nLCBp biBvcmRlciBmb3IgZS5nLiBhDQoNCj5mb3J3YXJkIHByb3h5IHRvIHJlYWQgYW5kIGNoYW5nZSBz ZWxlY3RlZCBDb0FQIG9wdGlvbnMgdG8gcGVyZm9ybSBpdHMNCg0KPmludGVuZGVkIGZ1bmN0aW9u LCB0aGUgZW50aXJlIENvQVAgbWVzc2FnZSBuZWVkcyB0byBiZSBkZWNyeXB0ZWQsIHdoaWNoDQoN Cj5lbmFibGVzIGEgcmFuZ2Ugb2YgYXR0YWNrcy4gSSB0aGluayB5b3VyIHByb3Bvc2VkIHNlbnRl bmNlIGRvZXMgbm90DQoNCj5leHBsYWluIHRoYXQgYWNjdXJhdGVseTogIlRoZSBwcm94eSB0aGVy ZWZvcmUgaGFzIGFjY2VzcyB0byB0aGUgZGF0YQ0KDQo+cmVxdWlyZWQgZm9yIHBlcmZvcm1pbmcg dGhlIGludGVuZGVkIHByb3h5IGZ1bmN0aW9uYWxpdHksIGFuZCBzbyBjYW4NCg0KPnBhc3NpdmVs eSBtb25pdG9yIHRoZSBjb21tdW5pY2F0aW9ucy7igJ0gYmVjYXVzZSBpdCBpcyBub3QgdGhlIGRh dGEgcmVxdWlyZWQNCg0KPmZvciBwZXJmb3JtaW5nIHRoZSBpbnRlbmRlZCBwcm94eSBmdW5jdGlv bmFsaXR5IHRoYXQgaXMgaW50ZXJlc3RpbmcgaGVyZSwNCg0KPml0DQoNCj5pcyB0aGUgb3RoZXIg ZGF0YSB0aGF0IGFsc28gYmVjb21lcyBhdmFpbGFibGUgdG8gdGhlIHByb3h5IGFzIHRoZSBlbnRp cmUNCg0KPm1lc3NhZ2UgbmVlZHMgdG8gYmUgZGVjcnlwdGVkLiBUaGUgdGVybSDigJxlYXZlc2Ry b3BwaW5n4oCdIGlzIHVzZWQgaW4gdGhlIG9sZA0KDQo+dGV4dCwgd291bGQgbm90IHRoYXQgY292 ZXIg4oCccGFzc2l2ZWx5IG1vbml0b3LigJ0/IFBlcmhhcHMgeW91IGNvdWxkIGZ1cnRoZXINCg0K PmVsYWJvcmF0ZQ0KDQo+b24gd2hhdCB5b3UgdGhpbmsgaXMgaW5jb3JyZWN0IG9yIG1pc3Npbmcg aW4gdGhlIGN1cnJlbnQgdGV4dD8NCg0KPg0KDQo8bWdsdDI+DQoNCk15IGludGVudGlvbiB3YXMg dG8gY2xhcmlmeSB3aGF0IGNvdWxkIGJlIHBlcmZvcm1lZCB3aXRob3V0IERUTFMgZGVjcnlwdGlv biBhbmQgd2l0aCB0aGUgRFRMUyBkZWNyeXB0aW9uIHBlcmZvcm1lZCBieSB0aGUgcHJveHkuIFRo YXQgc2FpZCBJIGFtIGZpbmUgd2l0aCB0aGUgdGV4dCB5b3UgcHJvcG9zZWQgYXMgd2VsbC4NCg0K PC9tZ2x0Mj4NCg0KPj4NCg0KPj4gICBUaGlzIGRvY3VtZW50IGRlZmluZXMgdGhlIE9iamVjdCBT ZWN1cml0eSBmb3IgQ29uc3RyYWluZWQgUkVTVGZ1bA0KDQo+PiAgIEVudmlyb25tZW50cyAoT1ND T1JFKSBzZWN1cml0eSBwcm90b2NvbCwgcHJvdGVjdGluZyBDb0FQIGFuZCBDb0FQLQ0KDQo+PiAg IG1hcHBhYmxlIEhUVFAgcmVxdWVzdHMgYW5kIHJlc3BvbnNlcyBlbmQtdG8tZW5kIGFjcm9zcyBp bnRlcm1lZGlhcnkNCg0KPj4gICBub2RlcyBzdWNoIGFzIENvQVAgZm9yd2FyZCBwcm94aWVzIGFu ZCBjcm9zcy1wcm90b2NvbCB0cmFuc2xhdG9ycw0KDQo+PiAgIGluY3VkaW5nIEhUVFAtdG8tQ29B UCBwcm94aWVzIFtSRkM4MDc1XS4gIEluIGFkZGl0aW9uIHRvIHRoZSBjb3JlDQoNCj4+ICAgQ29B UCBmZWF0dXJlcyBkZWZpbmVkIGluIFtSRkM3MjUyXSwgT1NDT1JFIHN1cHBvcnRzIE9ic2VydmUN Cg0KPj4gICBbUkZDNzY0MV0sIEJsb2NrLXdpc2UgW1JGQzc5NTldLCBOby1SZXNwb25zZSBbUkZD Nzk2N10sIGFuZCBQQVRDSCBhbmQNCg0KPj4gICBGRVRDSCBbUkZDODEzMl0uDQoNCj4+PG1nbHQ+ DQoNCj4+TWF5YmUgdG9vIG1hbnkgImFuZCIuDQoNCj4+PC9tZ2x0Pg0KDQo+DQoNCj5bR1M6XSBJ IHNlZSB3aGF0IHlvdSBtZWFuLiBUaGUgdGl0bGUgb2YgUkZDIDgxMzIgaXMgIlBBVENIIGFuZCBG RVRDSA0KDQo+bWV0aG9kcyBmb3IgQ29BUOKAnS4gUGVyaGFwcyB3ZSBqdXN0IGNoYW5nZSB0aGUg b3JkZXIgb2YgdGhlIGV4YW1wbGVzIGluIHRoZQ0KDQo+bGFzdCBzZW50ZW5jZToNCg0KIE5FVw0K DQo+IkluIGFkZGl0aW9uIHRvIHRoZSBjb3JlIENvQVAgZmVhdHVyZXMgZGVmaW5lZCBpbg0KDQo+ W1JGQzcyNTJdLCBPU0NPUkUgc3VwcG9ydHMgT2JzZXJ2ZSBbUkZDNzY0MV0sIEJsb2NrLXdpc2Ug W1JGQzc5NTldLCBQQVRDSA0KDQo+YW5kIEZFVENIIFtSRkM4MTMyXSwgYW5kIE5vLVJlc3BvbnNl IFtSRkM3OTY3XS7igJ0/DQoNCj4NCg0KPg0KDQo8bWdsdDI+DQoNCkkgYW0gZmluZSBlaXRoZXIg d2F5cy4gSSB0aGluayB0aGUgcHJvYmxlbSBpcyB0aGF0IHdlIGEgaGF2ZSBhIGxpc3Qgb2YgZGlm ZmVyZW50IG5hdHVyZSwgdW5sZXNzIHdlIGFyZSBjb25zaWRlcmluZyB0aGUgZG9jdW1lbnRzIHRo ZW1zZWx2ZXMuIEkgd291bGQgcHJvcG9zZToNCg0KT1NDT1JFIHN1cHBvcnRzIHRoZSBCbG9ja1dp c2UgVHJhbnNmZXJ0IFNpZ25hbGluZyAgT3B0aW9uIFtSRkM3OTU5XSwgdGhlIE9ic2VydmVkIFtS RkM3NjQxXSBhbmQgTm8tUmVzcG9uc2UgT3B0aW9uLCBbUkZDNzk2N10sIGFzIHdlbGwgYXMgdGhl IFBBVENIIGFuZCBGRVRDSCBNZXRob2RzIFtSRkM4MTMyXS4NCg0KPC9tZ2x0Mj4NCg0KPg0KDQo+ Pg0KDQo+PkFuIGFuYWx5c2lzIG9mIGVuZC10by1lbmQgc2VjdXJpdHkgZm9yIENvQVANCg0KPj4g ICBtZXNzYWdlcyB0aHJvdWdoIHNvbWUgdHlwZXMgb2YgaW50ZXJtZWRpYXJ5IG5vZGVzIGlzIHBl cmZvcm1lZCBpbg0KDQo+PiAgIFtJLUQuaGFydGtlLWNvcmUtZTJlLXNlY3VyaXR5LXJlcXNdLiAg T1NDT1JFIGVzc2VudGlhbGx5IHByb3RlY3RzIHRoZQ0KDQo+PiAgIFJFU1RmdWwgaW50ZXJhY3Rp b25zOyB0aGUgcmVxdWVzdCBtZXRob2QsIHRoZSByZXF1ZXN0ZWQgcmVzb3VyY2UsIHRoZQ0KDQo+ PiAgIG1lc3NhZ2UgcGF5bG9hZCwgZXRjLiAoc2VlIFNlY3Rpb24gNCkuICBPU0NPUkUgcHJvdGVj dHMgbmVpdGhlciB0aGUNCg0KPj4gICBDb0FQIE1lc3NhZ2luZyBMYXllciBub3IgdGhlIENvQVAg VG9rZW4gd2hpY2ggbWF5IGNoYW5nZSBiZXR3ZWVuIHRoZQ0KDQo+PiAgIGVuZHBvaW50cywgYW5k IHRob3NlIGFyZSB0aGVyZWZvcmUgcHJvY2Vzc2VkIGFzIGRlZmluZWQgaW4gW1JGQzcyNTJdLg0K DQo+PiAgIEFkZGl0aW9uYWxseSwgc2luY2UgdGhlIG1lc3NhZ2UgZm9ybWF0cyBmb3IgQ29BUCBv dmVyIHVucmVsaWFibGUNCg0KPj4gICB0cmFuc3BvcnQgW1JGQzcyNTJdIGFuZCBmb3IgQ29BUCBv dmVyIHJlbGlhYmxlIHRyYW5zcG9ydCBbUkZDODMyM10NCg0KPj4gICBkaWZmZXIgb25seSBpbiB0 ZXJtcyBvZiBDb0FQIE1lc3NhZ2luZyBMYXllciwgT1NDT1JFIGNhbiBiZSBhcHBsaWVkDQoNCj4+ ICAgdG8gYm90aCB1bnJlbGlhYmxlIGFuZCByZWxpYWJsZSB0cmFuc3BvcnRzIChzZWUgRmlndXJl IDEpLg0KDQo+Pg0KDQo+PlNlbGFuZGVyLCBldCBhbC4gICAgICAgIEV4cGlyZXMgSmFudWFyeSAy NywgMjAxOSAgICAgICAgICAgICAgICBbUGFnZSA0XQ0KDQo+Pg0KDQo+PkludGVybmV0LURyYWZ0 ICAgICAgICAgICAgICAgICAgT1NDT1JFICAgICAgICAgICAgICAgICAgICAgICAgSnVseSAyMDE4 DQoNCj4+DQoNCj4+ICAgICAgICAgICAgICAgKy0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tKw0KDQo+PiAgICAgICAgICAgICAgIHwgICAgICAgICAgIEFwcGxpY2F0aW9uICAgICAg ICAgICAgfA0KDQo+PiAgICAgICAgICAgICAgICstLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLSsNCg0KPj4gICAgICAgICAgICAgICArLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0rICBcDQoNCj4+ICAgICAgICAgICAgICAgfCAgUmVxdWVzdHMgLyBSZXNwb25zZXMg LyBTaWduYWxpbmcgfCAgfA0KDQo+PiAgICAgICAgICAgICAgIHwtLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLXwgIHwNCg0KPj4gICAgICAgICAgICAgICB8ICAgICAgICAgICAgICAg T1NDT1JFICAgICAgICAgICAgICB8ICB8IENvQVANCg0KPj4gICAgICAgICAgICAgICB8LS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS18ICB8DQoNCj4+ICAgICAgICAgICAgICAgfCBN ZXNzYWdpbmcgTGF5ZXIgLyBNZXNzYWdlIEZyYW1pbmcgfCAgfA0KDQo+PiAgICAgICAgICAgICAg ICstLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLSsgIC8NCg0KPj4gICAgICAgICAg ICAgICArLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0rDQoNCj4+ICAgICAgICAg ICAgICAgfCAgICAgICAgICBVRFAgLyBUQ1AgLyAuLi4gICAgICAgICAgfA0KDQo+PiAgICAgICAg ICAgICAgICstLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLSsNCg0KPj4NCg0KPj4g ICAgICAgICAgICAgIEZpZ3VyZSAxOiBBYnN0cmFjdCBMYXllcmluZyBvZiBDb0FQIHdpdGggT1ND T1JFDQoNCj4+DQoNCj4+ICAgT1NDT1JFIHdvcmtzIGluIHZlcnkgY29uc3RyYWluZWQgbm9kZXMg YW5kIG5ldHdvcmtzLCB0aGFua3MgdG8gaXRzDQoNCj4+ICAgc21hbGwgbWVzc2FnZSBzaXplIGFu ZCB0aGUgcmVzdHJpY3RlZCBjb2RlIGFuZCBtZW1vcnkgcmVxdWlyZW1lbnRzIGluDQoNCj4+ICAg YWRkaXRpb24gdG8gd2hhdCBpcyByZXF1aXJlZCBieSBDb0FQLiAgRXhhbXBsZXMgb2YgdGhlIHVz ZSBvZiBPU0NPUkUNCg0KPj4gICBhcmUgZ2l2ZW4gaW4gQXBwZW5kaXggQS4gIE9TQ09SRSBkb2Vz IG5vdCBkZXBlbmQgb24gdW5kZXJseWluZw0KDQo+PiAgIGxheWVycywgYW5kIGNhbiBiZSB1c2Vk IHdpdGggbm9uLUlQIHRyYW5zcG9ydHMgKGUuZy4sDQoNCj4+ICAgW0ktRC5ib3JtYW5uLTZsby1j b2FwLTgwMi0xNS1pZV0pLiAgT1NDT1JFIG1heSBhbHNvIGJlIHVzZWQgaW4NCg0KPj4gICBkaWZm ZXJlbnQgd2F5cyB3aXRoIEhUVFAuICBPU0NPUkUgbWVzc2FnZXMgbWF5IGJlIHRyYW5zcG9ydGVk IGluDQoNCj4+ICAgSFRUUCwgYW5kIE9TQ09SRSBtYXkgYWxzbyBiZSB1c2VkIHRvIHByb3RlY3Qg Q29BUC1tYXBwYWJsZSBIVFRQDQoNCj4+ICAgbWVzc2FnZXMsIGFzIGRlc2NyaWJlZCBiZWxvdy4N Cg0KPj4NCg0KPj48bWdsdD4NCg0KPj5JIGJlbGlldmUgdGhhdCAidW5kZXJseWluZyBsYXllcnMi IHNob3VsZCBiZSBzcGVjaWZpZWQuIE15IHVuZGVyc3RhbmRpbmcNCg0KPj5pcw0KDQo+PnRoYXQg T1NDT1JFIHJlcXVpcmVzIENvQVAgb3IgSFRUUC4gSWYgdGhhdCBpcyBjb3JyZWN0LCBJIGJlbGll dmUgdGhhdA0KDQo+PnNob3VsZCBiZQ0KDQo+PmNsYXJpZmllZCBpbiB0aGUgcGFyYWdyYXBoIGFi b3ZlLiA8L21nbHQ+DQoNCj4NCg0KPltHUzpdIE5vLCB0aGUgdW5kZXJseWluZyBsYXllcnMgaW4g dGhpcyBjb250ZXh0IGFyZSBub3QgQ29BUCBvciBIVFRQLCBidXQNCg0KPnRoZSBsYXllcnMgYmVs b3cgT1NDT1JFLCBlLmcuIFVEUCBvciBUQ1AuIFRoZSBmYWN0IHRoYXQgT1NDT1JFIGNhbiBiZQ0K DQo+ZGVwbG95ZWQgd2l0aCBDb0FQLW1hcHBhYmxlIEhUVFAgaXMgYSBkaWZmZXJlbnQgcHJvcGVy dHkgd2hpY2ggaXMgdGhlDQoNCj5yZWFzb24gZm9yIOKAnGFsc2/igJ0gaW4gdGhlIG5leHQgdG8g bGFzdCBzZW50ZW5jZS4gV291bGQgdGhlIGZvbGxvd2luZw0KDQo+Y2xhcmlmaWNhdGlvbiBiZSBz dWZmaWNpZW50Pw0KDQo+T0xEDQoNCj5PU0NPUkUgZG9lcyBub3QgZGVwZW5kIG9uIHVuZGVybHlp bmcgbGF5ZXJzLCBhbmQgY2FuIGJlIHVzZWQgd2l0aCBub24tSVANCg0KPnRyYW5zcG9ydHMgKGUu Zy4sIFtJLUQuYm9ybWFubi02bG8tY29hcC04MDItMTUtaWUpDQoNCj5ORVcNCg0KPk9TQ09SRSBk b2VzIG5vdCBkZXBlbmQgb24gdW5kZXJseWluZyBsYXllcnMgc3VjaCBhcyBlLmcuIFVEUCBvciBU Q1AsIGFuZA0KDQo+Y2FuIGV2ZW4gYmUgdXNlZCB3aXRoIG5vbi1JUCB0cmFuc3BvcnRzIChlLmcu LA0KDQo+W0ktRC5ib3JtYW5uLTZsby1jb2FwLTgwMi0xNS1pZV0pDQoNCj4NCg0KPg0KDQo8bWds dDI+DQoNClRoaXMgaXMgY2xhcmlmeWluZywgVGhhbmtzIGZvciB0aGUgZXhwbGFuYXRpb24uDQoN CjwvbWdsdDI+DQoNCj4NCg0KPj4NCg0KPj4gICBPU0NPUkUgaXMgZGVzaWduZWQgdG8gcHJvdGVj dCBhcyBtdWNoIGluZm9ybWF0aW9uIGFzIHBvc3NpYmxlIHdoaWUNCg0KPj4gICBzdGlsbCBhbGxv d2luZyBDb0FQIHByb3h5IG9wZXJhdGlvbnMgKFNlY3Rpb24gMTApLiAgSXQgd29ya3Mgd2l0aA0K DQo+PiAgIGV4aXN0aW5nIENvQVAtdG8tQ29BUCBmb3J3YXJkIHByb2llcyBbUkZDNzI1Ml0sIGJ1 dCBhbiBPU0NPUkUtYXdhcmUNCg0KPj4gICBwcm94eSB3aWxsIGJlIG1vcmUgZWZmaWNpZW50LiAg SFRUUC10by1Db0FQIHByb3hpZXMgW1JGQzgwNzVdIGFuZA0KDQo+PiAgIENvQVAtdG8tSFRUUCBw cm94aWVzIGNhbiBhbHNvIGJlIHVzZWQgd2l0aCBPU0NPUkUsIGFzIHNwZWNpZmllZCBpbg0KDQo+ PiAgIFNlY3Rpb24gMTEuICBPU0NPUkUgbWF5IGJlIHVzZWQgdG9nZXRoZXIgd2l0aCBUTFMgb3Ig RFRMUyBvdmVyIG9uZSBvcg0KDQo+PiAgIG1vcmUgaG9wcyBpbiB0aGUgZW5kLXRvLWVuZCBwYXRo LCBlLmcuIHRyYW5zcG9ydGVkIHdpdGggSFRUUFMgaW4gb25lDQoNCj4+ICAgaG9wIGFuZCB3aXRo IHBsYWluIENvQVAgaW4gYW5vdGhlciBob3AuICBUaGUgdXNlIG9mIE9TQ09SRSBkb2VzIG5vdA0K DQo+PiAgIGFmZmVjdCB0aGUgVVJJIHNjaGVtZSBhbmQgT1NDT1JFIGNhbiB0aGVyZWZvcmUgYmUg dXNlZCB3aXRoIGFueSBVUkkNCg0KPj4gICBzY2hlbWUgZGVmaW5lZCBmb3IgQ29BUCBvciBIVFRQ LiAgVGhlIGFwcGxpY2F0aW9uIGRlY2lkZXMgdGhlDQoNCj4+ICAgY29uZGl0aW9ucyBmb3Igd2hp Y2ggT1NDT1JFIGlzIHJlcXVpcmVkLg0KDQo+Pg0KDQo+PiAgIE9TQ09SRSB1c2VzIHByZS1zaGFy ZWQga2V5cyB3aGljaCBtYXkgaGF2ZSBiZWVuIGVzdGFibGlzaGVkIG91dC1vZi0NCg0KPj4gICBi YW5kIG9yIHdpdGggYSBrZXkgZXN0YWJsaXNobWVudCBwcm90b2NvbCAoc2VlIFNlY3Rpb24gMy4y KS4gIFRoZQ0KDQo+PiAgIHRlY2huaWNhbCBzb2x1dGlvbiBidWlsZHMgb24gQ0JPUiBPYmplY3Qg U2lnbmluZyBhbmQgRW5jcnlwdGlvbg0KDQo+PiAgIChDT1NFKSBbUkZDODE1Ml0sIHByb3ZpZGlu ZyBlbmQtdG8tZW5kIGVuY3J5cHRpb24sIGludGVncml0eSwgcmVwbGF5DQoNCj4+ICAgcHJvdGVj dGlvbiwgYW5kIGJpbmRpbmcgb2YgcmVzcG9uc2UgdG8gcmVxdWVzdC4gIEEgY29tcHJlc3NlZCB2 ZXJzaW9uDQoNCj4+ICAgb2YgQ09TRSBpcyB1c2VkLCBhcyBzcGVjaWZpZWQgaW4gU2VjdGlvbiA2 LiAgVGhlIHVzZSBvZiBPU0NPUkUgaXMNCg0KPj4gICBzaWduYWxlZCBpbiBDb1Agd2l0aCBhIG5l dyBvcHRpb24gKFNlY3Rpb24gMiksIGFuZCBpbiBIVFRQIHdpdGggYQ0KDQo+PiAgIG5ldyBoZWFk ZXIgZmllbGQgKFNjdGlvbiAxMS4xKSBhbmQgY29udGVudCB0eXBlIChTZWN0aW9uIDEzLjUpLiAg VGhlDQoNCj4+ICAgc29sdXRpb24gdHJhbnNmb3JtcyBhIENvQVAvSFRUUCBtZXNzYWdlIGludG8g YW4gIk9TQ09SRSBtZXNzYWdlIg0KDQo+PiAgIGJlZm9yZSBzZW5kaW5nLCBhbmQgdmljZSB2ZXJz YSBhdGVyIHJlY2VpdmluZy4gIFRoZSBPU0NPUkUgbWVzc2FnZQ0KDQo+Pg0KDQo+PlNlbGFuZGVy LCBldCBhbC4gICAgICAgIEV4cGlyZXMgSmFudWFyeSAyNywgMjAxOSAgICAgICAgICAgICAgICBb UGFnZSA1XQ0KDQo+Pg0KDQo+PkludGVybmV0LURyYWZ0ICAgICAgICAgICAgICAgICAgIE9TQ09S RSAgICAgICAgICAgICAgICAgICAgICAgIEp1bHkgMjAxOA0KDQo+Pg0KDQo+PiAgIGlzIGEgQ29B UC9IVFRQIG1lc3NhZ2UgcmVsYXRlZCB0byB0aGUgb3JpZ2lhbCBtZXNzYWdlIGluIHRoZQ0KDQo+ PiAgIGZvbGxvd2luZyB3YXk6IHRoZSBvcmlnaW5hbCBDb0FQL0hUVFAgbWVzc2FnZSBpcyB0cmFu c2xhdGVkIHRvIENvQVANCg0KPj4gICAoaWYgbm90IGFscmVhZHkgaSBDb0FQKSBhbmQgcHJvdGVj dGVkIGluIGEgQ09TRSBvYmplY3QuICBUaGUNCg0KPj4gICBlbmNyeXB0ZWQgbWVzc2FnZSBmaWVs ZHMgb2YgdGhpcyBDT1NFIG9iamVjdCBhcmUgdHJhbnNwb3J0ZWQgaW4gdGhlDQoNCj4+ICAgQ29B UCBwYXlsb2FkL0hUVFAgYm9keSBvZiB0aGUgT1NDT1JFIG1lc3NhZ2UsIGFuZCB0aGUgT1NDT1JF IG9wdGlvbi8NCg0KPj4gICBoZWFkZXIgZmllbGQgaXMgaW5jbHVkZWQgaW4gdGhlIG1lc3NhZ2Uu ICBBIHNrZXRjaCBvZiBhbiBleGNoYW5nZSBvZg0KDQo+PiAgIE9TQ09SRSBtZXNzYWdlcywgaW4g dGhlIGNhc2Ugb2YgdGhlIG9yaWdpbmFsIG1lc3NhZ2UgYmVpbmcgQ29BUCwgaXMNCg0KPj4gICBw cm92aWRlZCBpbiBGaWd1cmUgMi4NCg0KPj4NCg0KPj4gICAgICAgICAgQ2xpZW50ICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgU2VydmVyDQoNCg0KDQo+PiAgICAgICAg ICAgICB8ICAgICAgT1NDT1JFIHJlcXVlc3QgLSBQT1NUIGV4YW1wbGUuY29tOiAgICAgIHwNCg0K Pj4gICAgICAgICAgICAgfCAgICAgICAgSGVhZGVyLCBUb2tlbiwgICAgICAgICAgICAgICAgICAg ICAgICB8DQoNCj4+ICAgICAgICAgICAgIHwgICAgICAgIE9wdGlvbnM6IHtPU0NPUkUsIC4uLn0s ICAgICAgICAgICAgICAgfA0KDQo+PiAgICAgICAgICAgICB8ICAgICAgICBQYXlsb2FkOiBDT1NF IGNpcGhlcnRleHQgICAgICAgICAgICAgIHwNCg0KPj4gICAgICAgICAgICAgKy0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLT58DQoNCj4+ICAgICAgICAgICAgIHwg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgfA0KDQo+PiAgICAg ICAgICAgICB8PC0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLSsN Cg0KPj4gICAgICAgICAgICAgfCAgICAgIE9TQ09SRSByZXNwb25zZSAtIDIuMDQgKENoYW5nZWQp OiAgICAgICB8DQoNCj4+ICAgICAgICAgICAgIHwgICAgICAgIEhlYWRlciwgVG9rZW4sICAgICAg ICAgICAgICAgICAgICAgICAgfA0KDQo+PiAgICAgICAgICAgICB8ICAgICAgICBPcHRpb25zOntP U0NPUkUsIC4uLn0sICAgICAgICAgICAgICAgfA0KDQo+PiAgICAgICAgICAgICB8ICAgICAgICBQ YXlsb2FkOiBDT1NFIGNpcGhlcnRleHQgICAgICAgICAgICAgfA0KDQo+PiAgICAgICAgICAgICB8 ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIHwNCg0KPj4NCg0K Pj4gICAgICAgICAgICAgICAgICAgRmlndXJlIDI6IFNrZXRjaCBvZiBDb0FQIHdpdGggT1NDT1JF DQoNCj4+DQoNCj4+PG1nbHQ+DQoNCj4+T3B0aW9ucyBhcmUgbWVudGlvbmVkIGluIHt9LiBIb3cg dGhlc2UgInt9IiBzaG91bGQgYmUgaW50ZXJwcmV0ZWQgbWF5IGJlDQoNCj4+c3BlY2lmaWVkIGlu IHRoZSBmaWd1cmUuDQoNCj4NCg0KPltHUzpdIFRoZSBjdXJseSBicmFja2V0cyBoYXZlIG5vIHNw ZWNpYWwgbWVhbmluZyBoZXJlIHNvIHdlIGNhbiByZW1vdmUNCg0KPnRoZW0gYWx0b2dldGhlcjoN Cg0KPk9MRA0KDQo+T3B0aW9uczoge09TQ09SRSwgLi4ufSwNCg0KPk5FVw0KDQo+T3B0aW9uczog T1NDT1JFLCAuLi4gLA0KDQo+DQoNCjxtZ2x0Mj4NCg0KVGhhbmtzIGZvciB0aGUgY2xhcmlmaWNh dGlvbi4gTWF5YmUgdGhvc2UgYnJha2VzIGNvdWxkIGJlIHVzZWQgdG8gaW5kaWNhdGUgd2hhdCBp cyBlbmNyeXB0ZWQuIEkgYWxzbyBub3RpY2VkIHBvdGVudGlhbCB0eXBvcyAtIENvUCAsIChpZiBu b3QgYWxyZWFkeSBpIENvQVApIGlmIG5vdCBpbnRyb2R1Y2VkIGJ5IG15c2VsZi4NCg0KPC9tZ2x0 Mg0KDQo+DQoNCj4+DQoNCj4+VGhlIHBhcmFncmFwaCBhYm92ZSBtZW50aW9ucyB0aGF0IE9TQ09S RSBjYW4gYmUgdXNlZCBib3RoIHdpdGggQ29BUCBvcg0KDQo+PkhUVFAuIEl0DQoNCj4+bWlnaHQg YmUgaGVscGZ1bCB0byBzcGxpdCBGaWd1cmUgMiBpbiB0byB0d28gc3ViIGZpZ3VyZXMgRmlndXJl IDJhKSB0aGF0DQoNCj4+aWxsdXN0cmF0ZXMgdGhlIHVzZSBvZiBPQ1NPUkUgd2l0aCBDb0FQIGFu ZCBmaWd1cmUgMmIpIHRoYXQgaWxsdXN0cmF0ZXMNCg0KPj50aGUgdXNlDQoNCj4+b2YgT1NDT1JF IHdpdGggSFRUUC4NCg0KPg0KDQo+W0dTOl0gU2VjdGlvbiAxMS41IHByb3ZpZGVzIGEgZGV0YWls ZWQgZXhhbXBsZSwgSSBwcm9wb3NlIHRvIGFkZCBhDQoNCj5yZWZlcmVuY2UgdG8gc2VjdGlvbiAx MSBhYm92ZSB0aGUgZmlndXJlLg0KDQoNCg0KPG1nbHQyPg0KDQpXb3JrcyBmb3IgbWUuDQoNCjwv bWdsdDI+DQoNCj4NCg0KPg0KDQo+Pk15IHVuZGVyc3RhbmRpbmcgaXMgdGhhdCBDb0FQIGFuZCBI VFRQIGNhbiBlYXNpbHkgYmUgdHJhbnNsYXRlZC4gQXMgc3VjaA0KDQo+Pml0DQoNCj4+bWlnaHQg YWxzbyBiZSBhYmxlIHRvIGNvbnNpZGVyIE9TQ09SRSBvbmx5IHdpdGggQ29BUCBhbmQgaGF2aW5n IGENCg0KPj5zcGVjaWZpYw0KDQo+PnNlY3Rpb24gdGhhdCBkZWFscyB3aXRoIEhUVFAuIFN1Y2gg c3BsaXQgbWF5IGF2b2lkIHRvIGRlYWwgaW4gcGFyYWxsZWwNCg0KPj53aXRoDQoNCj4+SFRUUCBh bmQgQ29BUC4gPC9tZ2x0Pg0KDQo+DQoNCj5bR1M6XSBTZWN0aW9uIDExIGlzIGEgc3BlY2lmaWMg c2VjdGlvbiB0aGF0IGRlYWxzIHdpdGggSFRUUC4gV291bGQgdGhlDQoNCj5yZWZlcmVuY2UgbWVu dGlvbmVkIGFib3ZlIGJlIHN1ZmZpY2llbnQ/DQoNCj4NCg0KPg0KDQo8bWdsdD4NCg0KWWVzLg0K DQo8L21nbHQyPg0KDQo+Pg0KDQo+PiAgIEFuIGltcGxlbWVudGF0aW9uIHN1cHBvcnRpbmcgdGhp cyBzcGVjaWZpY2F0aW9uIE1BWSBpbXBsZW1lbnQgb25seQ0KDQo+PiAgIHRoZSBjbGllbnQgcGFy dCwgTUFZIGltcGxlbWVudCBvbmx5IHRoZSBzZXJ2ZXIgcGFydCwgb3IgTUFZIGltcGxlbWVudA0K DQo+PiAgIG9ubHkgb25lIG9mIHRoZSBwcm94eSBwYXJ0cy4NCg0KPj4NCg0KPj4xLjEuICBUZXJt aW5vbG9neQ0KDQo+Pg0KDQo+PjIuICBUaGUgT1NDT1JFIE9wdGlvbg0KDQo+Pg0KDQo+PiAgIFRo ZSBPU0NPUkUgb3B0aW9uIChzZWUgRmlndXJlIDMsIHdoaWNoIGV4dGVuZHMgVGFibGUgNCBvZiBb UkZDNzI1Ml0pDQoNCj4+ICAgaW5kaWNhdGVzIHRoYXQgdGhlIENvQVAgbWVzc2FnZSBpcyBhbiBP U0NPUkUgbWVzc2FnZSBhbmQgdGhhdCBpdA0KDQo+PiAgIGNvbnRhaW5zIGEgY29tcHJlc3NlZCBD T1NFIG9iamVjdCAoc2VlIFNlY3Rpb25zIDUgYW5kIDYpLiAgVGhlIE9TQ09SRQ0KDQo+PiAgIG9w dGlvbiBpcyBjcml0aWNhbCwgc2FmZSB0byBmb3J3YXJkLCBwYXJ0IG9mIHRoZSBjYWNoZSBrZXks IGFuZCBub3QNCg0KPj4gICByZXBlYXRhYmxlLg0KDQo+Pg0KDQo+PjxtZ2x0Pg0KDQo+PkkgYmVs aWV2ZSBpdCB3b3VsZCBiZSBjbGVhcmVyIHRvIHNwZWNpZnkgdGhhdCB0aGlzIHNlY3Rpb24gZGVm aW5lcyB0aGUNCg0KPj5PU0NPUkUNCg0KPj5vcHRpb24gd2hpY2ggaXMgYSBuZXcgQ29BUCBvcHRp b24uICBTaW1pbGFybHkgVGFibGUgNCBtYXkgYWxzbyBiZQ0KDQo+PmRlc2lnbmF0ZWQgYnkNCg0K Pj5Db0FQIE9wdGlvbnMgb3Igc29tZXRoaW5nIHNpbWlsYXIuIDwvbWdsdD4NCg0KPg0KDQo+DQoN Cj5bR1M6XSBJIGRpZG7igJl0IHVuZGVyc3RhbmQgdGhlIHNlY29uZCBzZW50ZW5jZTogVGFibGUg NCBpcyBpbiBSRkMgNzI1MiwNCg0KPndoYXQgZG9lcyBpdCBtZWFuIGZvciB0aGlzIGRyYWZ0IHRo YXQgdGhpcyB0YWJsZSBzaG91bGQgYmUgImRlc2lnbmF0ZWQgYnkNCg0KPkNvQVAgT3B0aW9uc+KA nT8gSWYgdGhlcmUgaXMgYSBuZWVkIHRvIGV4cGxhaW4gdGhlIGNvbnRlbnQgb2YNCg0KPmEgcmVm ZXJlbmNlZCB0YWJsZSBpbiBhbm90aGVyIGRvY3VtZW50LCB0aGVuIHBlcmhhcHMgYmV0dGVyIHJl bW92ZSB0aGUNCg0KPnJlZmVyZW5jZSBhbHRvZ2V0aGVyIC0gdGhpcyB0YWJsZSBpcyBhbnl3YXkg d2VsbCBrbm93biB0byBhbnlvbmUNCg0KPmZhbWlsaWFyIHdpdGggQ29BUC4gSGVyZSBpcyBhIHBy b3Bvc2VkIHJlcGxhY2VtZW50IG9mIHRoZSBmaXJzdCBzZW50ZW5jZQ0KDQo+b2Ygc2VjdGlvbiAy Og0KDQo+TkVXDQoNCj5UaGUgT1NDT1JFIG9wdGlvbiBkZWZpbmVkIGluIHRoaXMgc2VjdGlvbiAo c2VlIEZpZ3VyZSAzKQ0KDQo+aW5kaWNhdGVzIHRoYXQgdGhlIENvQVAgbWVzc2FnZSBpcyBhbiBP U0NPUkUgbWVzc2FnZSBhbmQgdGhhdCBpdA0KDQo+Y29udGFpbnMgYSBjb21wcmVzc2VkIENPU0Ug b2JqZWN0IChzZWUgU2VjdGlvbnMgNSBhbmQgNikuDQoNCj4NCg0KPg0KDQo8bWdsdDI+DQoNCkkg b25seSBtZW50aW9uZWQgYSBuaXQuIEkgYW0gZmluZSB3aXRoIGJvdGggYWx0ZXJuYXRpdmUgYnV0 IHByZWZlciB0aGUgc2Vjb25kLg0KDQo8L21nbHQyPg0KDQo+DQoNCj4NCg0KPg0KDQo+VGhlIHVz ZSBvZiBPU0NPUkUgaXMgc2lnbmFsZWQgaW4gQ29BUCB3aXRoIGEgbmV3IG9wdGlvbiAoU2VjdGlv biAyKSwgYW5kDQoNCj5pbiBIVFRQIHdpdGggYSBuZXcgaGVhZGVyIGZpZWxkIChTZWN0aW9uIDEx LjEpIGFuZCBjb250ZW50IHR5cGUgKFNlY3Rpb24NCg0KPjEzLjUpLg0KDQo+DQoNCj4+DQoNCj4+ ICAgKy0tLS0tLSstLS0rLS0tKy0tLSstLS0rLS0tLS0tLS0tLS0tLS0tLSstLS0tLS0tLSstLS0t LS0tLSstLS0tLS0tLS0rDQoNCj4+ICAgfCBOby4gIHwgQyB8IFUgfCBOIHwgUiB8IE5hbWUgICAg ICAgICAgIHwgRm9ybWF0IHwgTGVuZ3RoIHwgRGVmYXVsdCB8DQoNCj4+ICAgKy0tLS0tLSstLS0r LS0tKy0tLSstLS0rLS0tLS0tLS0tLS0tLS0tLSstLS0tLS0tLSstLS0tLS0tLSstLS0tLS0tLS0r DQoNCj4+ICAgfCBUQkQxIHwgeCB8ICAgfCAgIHwgICB8IE9TQ09SRSAgICAgICAgIHwgICgqKSAg IHwgMC0yNTUgIHwgKG5vbmUpICB8DQoNCj4+ICAgKy0tLS0tLSstLS0rLS0tKy0tLSstLS0rLS0t LS0tLS0tLS0tLS0tLSstLS0tLS0tLSstLS0tLS0tLSstLS0tLS0tLS0rDQoNCj4+ICAgICAgIEMg PSBDcml0aWNhbCwgICBVID0gVW5zYWZlLCAgIE4gPSBOb0NhY2hlS2V5LCAgIFIgPSBSZXBlYXRh YmxlDQoNCj4+ICAgICAgICgqKSBTZWUgYmVsb3cuDQoNCj4+DQoNCj4+ICAgICAgICAgICAgICAg ICAgICAgICAgRmlndXJlIDM6IFRoZSBPU0NPUkUgT3B0aW9uDQoNCj4+DQoNCj4+ICAgVGhlIE9T Q09SRSBvcHRpb24gaW5jbHVkZXMgdGhlIE9TQ09SRSBmbGFnIGJpdHMgKFNlY3Rpb24gNiksIHRo ZQ0KDQo+PiAgIFNlbmRlciBTZXF1ZW5jZSBOdW1iZXIsIHRoZSBTZW5kZXIgSUQsIGFuZCB0aGUg SUQgQ29udGV4dCB3aGVuIHRoZXNlDQoNCj4+ICAgZmllbGRzIGFyZSBwcmVzZW50IChTZWN0aW9u IDMpLiAgVGhlIGRldGFpbGVkIGZvcm1hdCBhbmQgbGVuZ3RoIGlzDQoNCj4+ICAgc3BlY2lmaWVk IGluIFNlY3Rpb24gNi4gIElmIHRoZSBPU0NPUkUgZmxhZyBiaXRzIGFyZSBhbGwgemVybyAoMHgw MCkNCg0KPj4gICB0aGUgT3B0aW9uIHZhbHVlIFNIQUxMIGJlIGVtcHR5IChPcHRpb24gTGVuZ3Ro ID0gMCkuICBBbiBlbmRwb2ludA0KDQo+PiAgIHJlY2VpdmluZyBhIENvQVAgbWVzc2FnZSB3aXRo b3V0IHBheWxvYWQsIHRoYXQgYWxzbyBjb250YWlucyBhbg0KDQo+PiAgIE9TQ09SRSBvcHRpb24g U0hBTEwgdHJlYXQgaXQgYXMgbWFsZm9ybWVkIGFuZCByZWplY3QgaXQuDQoNCj4+DQoNCj4+PG1n bHQ+DQoNCj4+SSBiZWxpZXZlIHRoZSBsb2dpYyBmb3IgdGhlIE9TQ09SRSBvcHRpb24gaXMgdGhl IG90aGVyIHdheSBhcm91bmQsIHRoYXQNCg0KPj5pczogYW4NCg0KPj5Db0FQIG1lc3NhZ2Ugd2l0 aCBhbiBPU0NPUkUgb3B0aW9uIHdpdGggYW4gZW1wdHkgQ29BUCBwYXlsb2FkIE1VU1QgYmUNCg0K Pj5yZWplY3RlZA0KDQo+PmFzIG1hbGZvcm1lZCBhbmQgcmVqZWN0IGl0LiA8L21nbHQ+DQoNCj4N Cg0KPltHUzpdIEJvdGggc3RhdGVtZW50cyBhcmUgY29ycmVjdC4gUGVyaGFwcyBpdCBpcyBldmVu IG1vcmUgY2xlYXIgaWYgIOKAnGFuZOKAnQ0KDQo+aXMgdXNlZDoNCg0KPk5FVw0KDQo+QW4gZW5k cG9pbnQgcmVjZWl2aW5nIGEgQ29BUCBtZXNzYWdlIHdpdGggdGhlIE9TQ09SRSBvcHRpb24gYW5k IHdpdGhvdXQNCg0KPnBheWxvYWQgU0hBTEwgdHJlYXQgaXQgYXMgbWFsZm9ybWVkIGFuZCByZWpl Y3QgaXQuDQoNCj4NCg0KPg0KDQo8bWdsdDI+DQoNClNvdW5kcyBnb29kIHRvIG1lLg0KDQo8L21n bHQyPg0KDQo+Pg0KDQo+PiAgIEEgc3VjY2Vzc2Z1bCByZXNwb25zZSB0byBhIHJlcXVlc3Qgd2l0 aCB0aGUgT1NDT1JFIG9wdGlvbiBTSEFMTA0KDQo+PiAgIGNvbnRhaW4gdGhlIE9TQ09SRSBvcHRp b24uICBXaGV0aGVyIGVycm9yIHJlc3BvbnNlcyBjb250YWluIHRoZQ0KDQo+PiAgIE9TQ09SRSBv cHRpb24gZGVwZW5kcyBvbiB0aGUgZXJyb3IgdHlwZSAoc2VlIFNlY3Rpb24gOCkuDQoNCj4+DQoN Cj4+ICAgRm9yIENvQVAgcHJveHkgb3BlcmF0aW9ucywgc2VlIFNlY3Rpb24gMTAuDQoNCj4+DQoN Cj4+My4gIFRoZSBTZWN1cml0eSBDb250ZXh0DQoNCj4+DQoNCj4+ICAgT1NDT1JFIHJlcXVpcmVz IHRoYXQgY2xpZW50IGFuZCBzZXJ2ZXIgZXN0YWJsaXNoIGEgc2hhcmVkIHNlY3VyaXR5DQoNCj4+ ICAgY29udGV4dCB1c2VkIHRvIHByb2Nlc3MgdGhlIENPU0Ugb2JqZWN0cy4gIE9TQ09SRSB1c2Vz IENPU0Ugd2l0aCBhbg0KDQo+PiAgIEF1dGhlbnRpY2F0ZWQgbmNyeXB0aW9uIHdpdGggQWRkaXRp b25hbCBEYXRhIChBRUFELCBbUkZDNTExNl0pDQoNCj4+ICAgYWxnb3JpdGhtIGZvciBwcm90ZWN0 aW5nIGVzc2FnZSBkYXRhIGJldHdlZW4gYSBjbGllbnQgYW5kIGEgc2VydmVyLg0KDQo+PiAgIElu IHRoaXMgc2VjdGlvbiwgd2UgZGVmaW5lIHRoZSBzZWN1cml0eSBjb250ZXh0IGFuZCBob3cgaXQg aXMgZGVyaXZlZA0KDQo+Pg0KDQo+PlNlbGFuZGVyLCBldCBhbC4gICAgICAgIEV4aXJlcyBKYW51 YXJ5IDI3LCAyMDE5ICAgICAgICAgICAgICAgIFtQYWdlIDddDQoNCj4+DQoNCj4+SW50ZXJuZXQt RHJhZnQgICAgICAgICAgICAgICAgICAgT1NDT1JFICAgICAgICAgICAgICAgICAgICAgICAgSnVs eSAyMDE4DQoNCj4+DQoNCj4+ICAgaW4gY2xpZW50IGFuZCBzZXJ2ZXIgYmFzZWQgb24gYSBzaGFy ZWQgc2VjcmV0IGFuZCBhIGtleSBkZXJpdmF0aW9uDQoNCj4+ICAgZnVuY3Rpb24gKEtERikuDQoN Cj4+DQoNCj4+My4xLiAgU2VjdXJpdHkgQ29udGV4dCBEZWZpbml0aW9uDQoNCj4+DQoNCj4+ICAg VGhlIHNlY3VyaXR5IGNvbnRleHQgaXMgdGhlIHNldCBvZiBpbmZvcm1hdGlvbiBlbGVtZW50cyBu ZWNlc3NhcnkgdG8NCg0KPj4gICBjYXJyeSBvdXQgdGhlIGNyeXB0b2dyYXBoaWMgb3BlcmF0aW9u cyBpbiBPU0NPUkUuICBGb3IgZWFjaCBlbmRwb2ludCwNCg0KPj4gICB0aGUgc2VjdXJpdHkgY29u dGV4dCBpcyBjb21wb3NlZCBvZiBhICJDb21tb24gQ29udGV4dCIsIGEgIlNlbmRlcg0KDQo+PiAg IENvbnRleHQiLCBhbmQgYSAiUmVjaXBpZW50IENvbnRleHQiLg0KDQo+Pg0KDQo+PiAgIFRoZSBl bmRwb2ludHMgcHJvdGVjdCBtZXNzYWdlcyB0byBzZW5kIHVzaW5nIHRoZSBTZW5kZXIgQ29udGV4 dCBhbmQNCg0KPj4gICB2ZXJpZnkgbWVzc2FnZXMgcmVjZWl2ZWQgdXNpbmcgdGhlIFJlY2lwaWVu dCBDb250ZXh0LCBib3RoIGNvbnRleHRzDQoNCj4+ICAgYmVpbmcgZGVyaXZlZCBmcm9tIHRoZSBD b21tb24gQ29udGV4dCBhbmQgb3RoZXIgZGF0YS4gIENsaWVudHMgYW5kDQoNCj4+ICAgc2VydmVy cyBuZWVkIHRvIGJlIGFibGUgdG8gcmV0cmlldmUgdGhlIGNvcnJlY3Qgc2VjdXJpdHkgY29udGV4 dCB0bw0KDQo+PiAgIHVzZS4NCg0KPj4NCg0KPj48bWdsdD4NCg0KPj5JIGJlbGlldmUgaXQgbWln aHQgYmUgY2xhcmlmeWluZyB0byBzcGVjaWZ5IHRoYXQgQ29BUCBlbmRwb2ludHMgaGF2ZQ0KDQo+ PmFsd2F5cw0KDQo+PmJpZGlyZWN0aW9uYWwgY29tbXVuaWNhdGlvbnMuDQoNCj5bR1M6XSBUaGlz IGlzIG5vdCBjb3JyZWN0IGZvciBhbGwgYXBwbGljYXRpb25zIG9mIE9TQ09SRS4gRm9yIGdyb3Vw DQoNCj5jb21tdW5pY2F0aW9ucyB0aGVyZSBpcyB0aGUgY29uY2VwdCBvZiBhICJzaWxlbnQgc2Vy dmVy4oCdIHdoaWNoIGlzIGp1c3QNCg0KPmxpc3RlbmluZyB0byBtdWx0aWNhc3QgbWVzc2FnZXM6 DQoNCj5odHRwczovL3Rvb2xzLmlldGYub3JnL2h0bWwvZHJhZnQtaWV0Zi1jb3JlLW9zY29yZS1n cm91cGNvbW0tMDINCg0KPlRoZXJlIGlzIGFsc28gdGhlIOKAnE5vLVJlc3BvbnNl4oCdIG9wdGlv biB3aGljaCBpbmhpYml0cyBjZXJ0YWluIHJlc3BvbnNlcy4NCg0KPg0KDQo+PklmIHRoYXQgaXMg Y29ycmVjdCwgdGhlbiBmb3IgZWFjaCBjb21tdW5pY2F0aW9uDQoNCj4+ZWFjaCBlbmQgcG9pbnQg aXMgYm90aCBhICJTZW5kZXIiIGFuZCBhICJSZWNpcGllbnQiIGZvciBpdHMgcmVzcGVjdGl2ZQ0K DQo+Pm91dGJvdW5kDQoNCj4+YW5kIGlib3VuZCB0cmFmZmljLiBUaGUgNCBjb250ZXh0IGFyZSBk ZXJpdmVkIGZyb20gYSBDb21tb24gQ29udGV4dC4NCg0KPj4NCg0KPj5BcyBzZWN1cml0eWNvbnRl eHQgYXJlIGVzdGFibGlzaGVkIHRvIHNlY3VyZSB1bmlkaXJlY3Rpb25hbA0KDQo+PmNvbW11bmlj YXRpb25zLA0KDQo+Pm1heWJlIHRoYXQgd291bGQgYmUgZWFzaWVyIHRvIGJhc2UgdGhlIGRlc2Ny aXB0aW9uIG9uIHRoZSB1bmlkaXJlY3Rpb25hbA0KDQo+PmNvbW11aWNhdGlvbnMgcmF0aGVyIHRo YW4gdGhlIGVuZCBwb2ludHMuIDwvbWdsdD4NCg0KPg0KDQo+W0dTOl0gSeKAmW0gbm90IHN1cmUg aG93IEkgc2hvdWxkIGFkZHJlc3MgdGhpcyBjb21tZW50LCBidXQgb25lIHJlYXNvbiB3aHkNCg0K PnRoZSBzZWN1cml0eSBjb250ZXh0IGlzIGRlc2NyaWJlZCBmcm9tIHRoZSBwb2ludCBvZiB2aWV3 IG9mIGVuZHBvaW50cyBzDQoNCj50aGF0IGFuIGVuZHBvaW50IHVzZXMgdGhlIHNlY3VyaXR5IGNv bnRleHQgaW4gdGhlIHNhbWUgd2F5IGluZGVwZW5lbnQgb2YNCg0KPmJlaW5nIGNsaWVudCBvciBz ZXJ2ZXIuIEUuZy4gdGhlIFNlbmRlciBDb250ZXh0IGlzIHVzZWQgYnkgYW4gZW5kb2ludCBpbg0K DQo+dGhlIHJvbGUgb2YgY2xpZW50IHNlbmRpbmcgcmVxdWVzdHMgYW5kIGluIHRoZSByb2xlIG9m IHNlcnZyIHNlbmRpbmcNCg0KPnJlc3BvbnNlcy4NCg0KPg0KDQo+DQoNCj4NCg0KPj4NCg0KPj4g ICBBbiBlbmRwb2ludCB1c2VzIGl0cyBTZW5kZXIgSUQgKFNEKSB0byBkZXJpdmUgaXRzIFNlbmRl ciBDb250ZXh0LA0KDQo+PiAgIGFuZCB0aGUgb3RoZXIgZW5kcG9pbnQgdXNlcyB0aGUgc2FtZUlE LCBub3cgY2FsbGVkIFJlY2lwaWVudCBJRA0KDQo+PiAgIChSSUQpLCB0byBkZXJpdmUgaXRzIFJl Y2lwaWVudCBDb250ZXh0LiBJbiBjb21tdW5pY2F0aW9uIGJldHdlZW4gdHdvDQoNCj4+ICAgZW5k cG9pbnRzLCB0aGUgU2VuZGVyIENvbnRleHQgb2Ygb25lIGVuZG9pbnQgbWF0Y2hlcyB0aGUgUmVj aXBpZW50DQoNCj4+ICAgQ29udGV4dCBvZiB0aGUgb3RoZXIgZW5kcG9pbnQsIGFuZCB2aWNlIHZl cnNhLiAgVGh1cywgdGhlIHR3bw0KDQo+PiAgIHNlY3VyaXR5IGNvbnRleHRzIGlkZW50aWZpZWQg YnkgdGhlIHNhbWUgSURzIGluIHRoZSB0d28gZW5kcG9pbnRzIGFyZQ0KDQo+PiAgIG5vdCB0aGUg c2FtZSwgYnV0IHRoZXkgYXJlIHBhcnRseSBtaXJyb3JlZC4gIFJldHJpZXZhbCBhbmQgdXNlIG9m IHRoZQ0KDQo+PiAgIHNlY3VyaXR5IGNvbnRleHQgYXJlIHNob3duIGluIEZpZ3VyZSA0Lg0KDQo+ Pg0KDQo8bWdsdDI+DQoNCk9LLiBUaGFua3MgZm9yIHRoZSBjbGFyaWZpY2F0aW9uLiBJIGJlbGll dmUgSSB3YXMgb3V0IG9mIHRoZSB0cmFjayBiZWNhdXNlIEkgd2FzIHJlYWRpbmcgaXQgd2l0aCBp cHNlYyBleWVzLiBJIHRoaW5rIHRoZSBmaWd1cmUgNCBzZWVtcyB0byBpbGx1c3RyYXRlIGJldHRl ciB3aGF0IHRoZSB0ZXh0IHNheXMg4oCTIGF0IGxlYXN0IHRvIG1lLg0KDQo8L21nbHQyPg0KDQoN Cg0KPj48bWdsdD4NCg0KPj4iQW4gZW5kcG9pbnQgdXNlcyBpdHMgU2VuZGVyIElEIChTSUQpIHRv IGRlcml2ZSBpdHMgU2VuZGVyIENvbnRleHQsIg0KDQo+Pg0KDQo+Pkkgc2VlIHRoZSBJRCBhcyBt b3N0bHkgdXNlZnVsIHRvIHRoZSByZWNpcGllbnQgaW4gb3JkZXIgdG8gcmV0cmlldmUgdGhlDQoN Cj4+YXBwcm9wcmlhdGVkIHNlY3VyaXR5IGNvbnRleHQgYW5kIGRlY3J5cHQgdGhlIG1lc3NhZ2Uu IEluIG90aGVyIHdvcmRzLA0KDQo+PnRoZQ0KDQo+PnNlbmRlciBzaG91bGQga25vdyB3aG8gaXQg c2VuZHMgdGhlIG1lc3NhZ2UgdG8gYW5kIGRvZXMgbm90IHJlYWxseSBuZWVkDQoNCj4+dGhlIFNJ RD4+dG8gbWF0Y2ggdGhlIHNlY3VyaXR5IGNvbnRleHQuDQoNCj4+DQoNCj4+SSBiZWxpZXZlIHRo aXMgc2hvdWxkIGJlIGNsYXJpZmllZCBhcyB0aGUgY3VycmVudCB0ZXh0IHByZXZlbnRzIFNlbmRl ciBJRA0KDQo+PmNvbGxpc2lvbiwgd2hpbGUgY29sbGlzaW9uIHNob3VsZCBvbmx5IGJlIGF2b2lk ZWQgb24gdGhlIHJlY2VpdmVyJ3Mgc2lkZS4NCg0KPj48L21nbHQ+DQoNCj4NCg0KPltHUzpdIFNl Y3Rpb24gMy4zIHN0YXRlcyB0aGUgZm9sbG93aW5nOiAiVG8gZW5zdXJlIHVuaXF1ZSBTZW5kZXIg S2V5cywgdGhlDQoNCj5xdWFydGV0IChNYXN0ZXIgU2VjcmV0LCBNYXN0ZXIgU2FsdCwgSUQgQ29u dGV4dCwgU2VuZGVyIElEKSBNVVNUIGJlDQoNCj51bmlxdWXigJ0gYW5kIHRoYXQgdGhpcyBtZWFu cyB0aGF0ICJTZW5kZXIgSUQgU0hBTEwgYmUgdW5pcXVlIGluIHRoZSBzZXQgb2YNCg0KPmFsbCBz ZWN1cml0eSBjb250ZXh0cyB1c2luZyB0aGUgc2FtZSBNYXN0ZXIgU2VjcmV0LCBNYXN0ZXIgU2Fs dCwgYW5kIElEDQoNCj5Db250ZXh0OyBzdWNoIGEgcmVxdWlyZW1lbnQgZ3VhcmFudGVlcyB1bmlx dWUgKGtleSwgbm9uY2UpIHBhaXJzLCB3aGljaA0KDQo+YXZvaWRzIG5vbmNlIHJldXNlLuKAnSBU aGUgcHJvb2YgZm9yIChrZXksbm9uY2UpIHVuaXF1ZW5lc3MgaXMgaW4gQXBwZW5kaXgNCg0KPkQu MyBhbmQgY3JpdGljYWxseSB1c2VzIHRoZSB1bmlxdWVuZXNzIG9mIFNlbmRlciBJRHMsIHNvIHRo YXQgaXMgaW5kZWVkDQoNCj5yZXF1aXJlZC4NCg0KPkFzIGEgY29uc2VxdWVuY2UsIHRoZSBSZWNp cGllbnQgSURzIHdpdGhpbiBvbmUgc2VjdXJpdHkgY29udGV4dCBhcmUgYWxzbw0KDQo+dW5pcXVl Lg0KDQo+Q29pbmNpZGVuY2Ugb2YgUmVjaXBpZW50IElEcyBiZXR3ZWVuIGRpZmZlcmVudCBzZWN1 cml0eSBjb250ZXh0cyBpcyBub3QgYQ0KDQo+c2VjdXJpdHkgaXNzdWUsIHNlY3Rpb24gMy4zIGFs c28gc3RhdGVzOiAiVG8gc2ltcGxpZnkgcmV0cmlldmFsIG9mIHRoZQ0KDQo+cmlnaHQgUmVjaXBp ZW50IENvbnRleHQsIHRoZSBSZWNpcGllbnQgSUQgU0hPVUxEIGJlIHVuaXF1ZSBpbiB0aGUgc2V0 cyBvZg0KDQo+YWxsIFJlY2lwaWVudCBDb250ZXh0cyB1c2VkIGJ5IGFuIGVuZHBvaW50LiBJZiBh biBlbmRwb2ludCBoYXMgdGhlIHNhbWUNCg0KPlJlY2lwaWVudCBJRCB3aXRoIGRpZmZlcmVudCBS ZWNpcGllbnQgQ29udGV4dHMsIGkuZS4gdGhlIFJlY2lwaWVudA0KDQo+Q29udGV4dHMgYXJlIGRl cml2ZWQgZnJvbSBkaWZmZXJlbnQgQ29tbW9uIENvbnRleHRzLCB0aGVuIHRoZSBlbmRwb2ludCBt YXkNCg0KPm5lZWQgdG8gdHJ5IG11bHRpcGxlIHRpbWVzIGJlZm9yZSB2ZXJpZnlpbmcgdGhlIHJp Z2h0IHNlY3VyaXR5IGNvbnRleHQNCg0KPmFzc29jaWF0ZWQgdG8gdGhlIFJlY2lwaWVudCBJRC7i gJ0gSXMgdGhlcmUgc29tZXRoaW5nIG1pc3NpbmcgZnJvbSB0aGlzDQoNCj5kZXNjcmlwdGlvbj8N Cg0KDQoNCjxtZ2x0Mj4NCg0KSSBhZ3JlZSB0aGlzIGlzIGEgc3Ryb25nIFNIT1VMRCsrLiBUaGUg UmVjaXBpZW50IElEIFNIT1VMRCBiZSB1bmlxdWUuDQoNCjwvbWdsdDI+DQoNCg0KDQo+DQoNCj4N Cg0KPg0KDQo+Pg0KDQo+PiAgICAgICAgICAgICAgICAgLi0tLS0tLS0tLS0tLS0uICAgICAgICAg ICAuLS0tLS0tLS0tLS0tLS4NCg0KPj4gICAgICAgICAgICAgICAgIHwgIENvbW1vbiwgICAgfCAg ICAgICAgICAgfCAgQ29tbW9uLCAgICB8DQoNCj4+ICAgICAgICAgICAgICAgICB8ICBTZW5kZXIs ICAgIHwgICAgICAgICAgIHwgIFJlY2lwaWVudCwgfA0KDQo+PiAgICAgICAgICAgICAgICAgfCAg UmVjaXBpZW50ICB8ICAgICAgICAgICB8ICBTZW5kZXIgICAgIHwNCg0KPj4gICAgICAgICAgICAg ICAgICctLS0tLS0tLS0tLS0tJyAgICAgICAgICAgJy0tLS0tLS0tLS0tLS0nDQoNCj4+ICAgICAg ICAgICAgICAgICAgICAgIENsaWVudCAgICAgICAgICAgICAgICAgICBTZXJ2ZXINCg0KPj4gICAg ICAgICAgICAgICAgICAgICAgICAgfCAgICAgICAgICAgICAgICAgICAgICAgfA0KDQo+PiAgIFJl dHJpZXZlIGNvbnRleHQgZm9yICB8IE9TQ09SRSByZXF1ZXN0OiAgICAgICB8DQoNCj4+ICAgIHRh cmdldCByZXNvdXJjZSAgICAgIHwgICBUb2tlbiA9IFRva2VuMSwgICAgIHwNCg0KPj4gICBQcm90 ZWN0IHJlcXVlc3Qgd2l0aCAgfCAgIGtpZCA9IFNJRCwgLi4uICAgICAgfA0KDQo+PiAgICAgU2Vu ZGVyIENvbnRleHQgICAgICArLS0tLS0tLS0tLS0tLS0tLS0tLS0tLT58IFJldHJpZXZlIGNvbnRl eHQgd2l0aA0KDQo+PiAgICAgICAgICAgICAgICAgICAgICAgICB8ICAgICAgICAgICAgICAgICAg ICAgICB8ICBSSUQgPSBraWQNCg0KPj4gICAgICAgICAgICAgICAgICAgICAgICAgfCAgICAgICAg ICAgICAgICAgICAgICAgfCBWZXJpZnkgcmVxdWVzdCB3aXRoDQoNCj4+ICAgICAgICAgICAgICAg ICAgICAgICAgIHwgICAgICAgICAgICAgICAgICAgICAgIHwgIFJlY2lwaWVudCBDb250ZXh0DQoN Cj4+ICAgICAgICAgICAgICAgICAgICAgICAgIHwgT1NDT1JFIHJlc3BvbnNlOiAgICAgIHwgUHJv dGVjdCByZXNwb25zZSB3aXRoDQoNCj4+ICAgICAgICAgICAgICAgICAgICAgICAgIHwgICBUb2tl biA9IFRva2VuMSwgLi4uIHwgIFNlbmRlciBDb250ZXh0DQoNCj4+ICAgUmV0cmlldmUgY29udGV4 dCB3aXRoIHw8LS0tLS0tLS0tLS0tLS0tLS0tLS0tLSsNCg0KPj4gICAgVG9rZW4gPSBUb2tlbjEg ICAgICAgfCAgICAgICAgICAgICAgICAgICAgICAgfA0KDQo+PiAgIFZlcmlmeSByZXF1ZXN0IHdp dGggICB8ICAgICAgICAgICAgICAgICAgICAgICB8DQoNCj4+ICAgIFJlY2lwaWVudCBDb250ZXh0 ICAgIHwgICAgICAgICAgICAgICAgICAgICAgIHwNCg0KPj4NCg0KPj4gICAgICAgICAgICBGaWd1 cmUgNDogUmV0cmlldmFsIGFuZCBVc2Ugb2YgdGhlIFNlY3VyaXR5IENvbnRleHQNCg0KPj4NCg0K Pj48bWdsdD4NCg0KPj5JIG1pZ2h0IGJlIGhlbHBmdWwgdG8gY2xhcmlmeSB0aGF0IFNlbmRlciBD b250ZXh0IG9uIGJvdGggc2lkZXMgYXJlIG5vdA0KDQo+PnRoZQ0KDQo+PnNhbWUgY29udGV4dC4N Cg0KPg0KDQo+DQoNCj4NCg0KPltHUzpdIElzIHRoaXMgYmV0dGVyPw0KDQo+T0xEDQoNCj5UaGUg ZW5kcG9pbnRzIHByb3RlY3QgbWVzc2FnZXMgdG8gc2VuZCB1c2luZyB0aGUgU2VuZGVyIENvbnRl eHQgYW5kDQoNCj52ZXJpZnkgbWVzc2FnZXMgcmVjZWl2ZWQgdXNpbmcgdGhlIFJlY2lwaWVudCBD b250ZXh0LCBib3RoIGNvbnRleHRzDQoNCj5iZWluZyBkZXJpdmVkIGZyb20gdGhlIENvbW1vbiBD b250ZXh0IGFuZCBvdGhlciBkYXRhLg0KDQo+TkVXDQoNCj5BbiBlbmRwb2ludCBwcm90ZWN0cyBt ZXNzYWdlcyB0byBzZW5kIHVzaW5nIGl0cyBTZW5kZXIgQ29udGV4dCBhbmQNCg0KPnZlcmlmaWVz IG1lc3NhZ2VzIHJlY2VpdmVkIHVzaW5nIGl0cyBSZWNpcGllbnQgQ29udGV4dCwgYm90aCBjb250 ZXh0cw0KDQo+YmVpbmcgZGVyaXZlZCBmcm9tIHRoZSBDb21tb24gQ29udGV4dCBhbmQgb3RoZXIg ZGF0YS4NCg0KPg0KDQo+DQoNCj4NCg0KPG1nbHQyPg0KDQpUaGlzIGlzIGZpbmUgdG8gbWUuDQoN CjwvbWdsdDI+DQoNCj4NCg0KPg0KDQo+PlNlY3VyaXR5IENvbnRleHQgc2VlbXMgdG8gYmUgbWlz c2luZyBpbiB0aGUgYm94Lg0KDQo+DQoNCj5bR1M6XSBGaWd1cmUgNCBjb250YWlucyBzb21lIGFi YnJldmlhdGlvbnMgdG8gYXZvaWQgYmVjb21pbmcgb3ZlcmxvYWRlZA0KDQo+d2l0aCB0ZXh0OiBJ biB0aGUgZmlyc3QgYm94IOKAnENvbW1vbiwgU2VuZGVyLCBSZWNpcGllbnTigJ0gaXMgYW4gYWJi cmV2aWF0aW9uDQoNCj5vZiDigJxDb21tb24gQ29udGV4dCwgU2VuZGVyIENvbnRleHQsIFJlY2lw aWVudCBDb250ZXh04oCdIC0gd2hpY2ggaW4gZmFjdCBpcw0KDQo+dGhlIHRoZSB0b3BpYyBvZiB0 aGlzIHNlY3Rpb24uIERvIHlvdSB0aGluayB0aGlzIGlzIHVuY2xlYXI/IE1heWJlIEkNCg0KPm1p c3VuZGVyc3Rvb2QgdGhlIGNvbW1lbnQuDQoNCj4NCg0KPG1nbHQyPg0KDQpJIGFtIGZpbmUgZWl0 aGVyIHdheXMuIEkgd2FzIHBlcmhhcHMgc3VnZ2VzdGluZyB0byBtZW50aW9uIENvbnRleHQgKG9u Y2UpLg0KDQo8L21nbHQyPg0KDQo+Pg0KDQo+Pkl0IHdvdWxkIGFsc28gaGVscCB0byBoYXZlIGlu IHRoZSBmaWd1cmUsIHRoZSByZWxhdGlvbiBiZXR3ZWVuIHRoZSBDb21tb24NCg0KPj5TZWN1cml0 eSBDb250ZXh0LCB0aGUgU2VuZGVyIENvbnRleHQgYW5kIFJlY2lwaWVudCBDb250ZXh0IG9uIGJv dGggc2lkZXMuDQoNCj4+PC9tZ2x0Pg0KDQo+DQoNCj5bR1M6XSBUaGUgZmlndXJlIGlzIGFscmVh ZHkgdHJ5aW5nIHRvIGlsbHVzdHJhdGUgdGhpcyBieSB0aGUgb3JkZXJzIG9mIHRoZQ0KDQo+Y29u dGV4dHMgaW4gdGhlIGJveGVzIGZvciBjbGllbnQgYW5kIHNlcnZlcjogc2hvd2luZyB0aGF0IHRo ZSBDb21tb24NCg0KPkNvbnRleHQgaXMgY29tbW9uIGZvciBib3RoIENsaWVudCBhbmQgU2VydmVy IHdoZXJlYXMgdGhlIFNlbmRlciBDb250ZXh0IG9mDQoNCj50aGUgQ2xpZW50IGNvcnJlc3BvbmRz IHRvIHRoZSBSZWNpcGllbnQgQ29udGV4dCBvZiB0aGUgU2VydmVyIGFuZCB2aWNlDQoNCj52ZXJz YS4gSSBkb27igJl0IGtub3cgaG93IHRvIG1ha2UgdGhpcyBtb3JlIGNsZWFyIHdpdGhvdXQgb3Zl cmxvYWRpbmcgdGhlDQoNCj5maWd1cmUuDQoNCj4NCg0KPG1nbHQyPg0KDQpUaGlzIGxvb2tzIG11 Y2ggY2xlYXJlciB0byBtZS4gQ29tbW9uIENvbnRleHQgaXMgY29tbW9uIGFuZCDigJw94oCdIGlz IHZlcnkgaGVscGZ1bCAoIHRvIG1lKS4NCg0KPC9tZ2x0Mj4NCg0KPg0KDQo+Pg0KDQo+PlNlbGFu ZGVyLCBldCBhbC4gICAgICAgIEV4cGlyZXMgSmFudWFyeSAyNywgMjAxOSAgICAgICAgICAgICAg ICBbUGFnZSA4XQ0KDQo+Pg0KDQo+PkludGVybmV0LURyYWZ0ICAgICAgICAgICAgICAgICAgIE9T Q09SRSAgICAgICAgICAgICAgICAgICAgICAgIEp1bHkgMjAxOA0KDQo+Pg0KDQo+PiAgIFRoZSBD b21tb24gQ29udGV4dCBjb250YWlucyB0aGUgZm9sbG93aW5nIHBhcmFtZXRlcnM6DQoNCj4+DQoN Cj4+ICAgbyAgQUVBRCBBbGdvcml0aG0uICBUaGUgQ09TRSBBRUFEIGFsZ29yaXRobSB0byB1c2Ug Zm9yIGVuY3J5cHRpb24uDQoNCj4+DQoNCj4+ICAgbyAgS2V5IERlcml2YXRpb24gRnVuY3Rpb24u ICBUaGUgSE1BQyBiYXNlZCBIS0RGIFtSRkM1ODY5XSB1c2VkIHRvDQoNCj4+ICAgICAgZGVyaXZl IFNlbmRlciBLZXksIFJlY2lwaWVudCBLZXksIGFuZCBDb21tb24gSVYuDQoNCj4+PG1nbHQ+DQoN Cj4+VGhpcyBpcyBjb25mdXNpbmcgdG8gaGF2ZSBhIGdlbmVyaWMgdGVybSBzdWNoIGFzIEtERiBk ZWZpbmVkIGJ5IGEgc3VwIHNldA0KDQo+Pm9mIGl0DQoNCj4+KEhLREYpLiBJIGJlbGlldmUgdGhh dCBlaXRoZXIgdGhlIEtERiBpcyBkZWZpbmVkIGdlbmVyaWMgZW5vdWdoIGFuZCBsYXRlcg0KDQo+ PnRoZQ0KDQo+PmRlZmF1bHQgdmFsdWUgaXMgc2V0IHRvIEhLREYgd2l0aCBhIHNwZWNpZmljIGhh c2ggZnVuY3Rpb24uIEFub3RoZXINCg0KPj5hbHRlcm5hdGl2ZQ0KDQo+PmNvdWxkIGJlIHRvIGxp bWl0ZWQgdGhlIHNjb3BlIG9mIHRoaXMgcGFyYW1ldGVyIHRvIEhLREYgSGFzaCBGdW5jdGlvbi4N Cg0KPj48L21nbHQ+DQoNCj4NCg0KPg0KDQo+W0dTOl0gSG93IGFib3V0IHRoaXM/DQoNCj5ORVcN Cg0KPiAgICBvIFRoZSBITUFDIGJhc2VkIGtleSBkZXJpdmF0aW9uIGZ1bmN0aW9uIEhLREYgW1JG QzU4NjldIHVzZWQgdG8NCg0KPiAgICAgIGRlcml2ZSBTZW5kZXIgS2V5LCBSZWNpcGllbnQgS2V5 LCBhbmQgQ29tbW9uIElWLg0KDQo+DQoNCj4NCg0KPG1nbHQyPg0KDQpUaGlzIGlzIGZpbmUgdG8g bWUuDQoNCjwvbWdsdDI+DQoNCj4+DQoNCj4+ICAgbyAgTWFzdGVyIFNlY3JldC4gIFZhcmlhYmxl IGxlbmd0aCwgcmFuZG9tIGJ5dGUgc3RyaW5nIChzZWUNCg0KPj4gICAgICBTZWN0aW9uIDEyLjMp IHVzZWQgdG8gZGVyaXZlIHRyYWZmaWMga2V5cyBhbmQgSVZzLg0KDQo+PjxtZ2x0Pg0KDQo+Pkkg YmVsaWV2ZSB0aGF0IElWcyBpcyB0aGUgQ29tbW9uIElWLg0KDQo+PjwvbWdsdD4NCg0KPg0KDQo+ W0dTOl0gQ29ycmVjdCwgd2lsbCBjaGFuZ2UgdGhhdC4NCg0KPg0KDQo8bWdsdDI+DQoNCkdvb2QN Cg0KPC9tZ2x0Mj4NCg0KPg0KDQo+PiAgIG8gIE1hc3RlciBTYWx0LiAgT3B0aW9uYWwgdmFyaWFi bGUgbGVuZ3RoIGJ5dGUgc3RyaW5nIGNvbnRhaW5pbmcgdGhlDQoNCj4+ICAgICAgc2FsdCB1c2Vk IHRvIGRlcml2ZSB0cmFmZmljIGtleXMgYW5kIElWcy4NCg0KPj48bWdsdD4NCg0KPj5JIGJlbGll dmUgdGhhdCBJVnMgaXMgdGhlIENvbW1vbiBJVi4NCg0KPj48L21nbHQ+DQoNCj4NCg0KPltHUzpd IENvcnJlY3QsIHdpbGwgY2hhbmdlIHRoYXQuDQoNCj4NCg0KPG1nbHQyPg0KDQpHb29kDQoNCjwv bWdsdDI+DQoNCg0KDQo+DQoNCj4+ICAgbyAgSUQgQ29udGV4dC4gIE9wdGlvbmFsIHZhcmlhYmxl IGxlbmd0aCBieXRlIHN0cmluZyBwcm92aWRpbmcNCg0KPj4gICAgICBhZGRpdGlvbmFsIGluZm9y bWF0aW9uIHRvIGlkZW50aWZ5IHRoZSBDb21tb24gQ29udGV4dCBhbmQgdG8NCg0KPj4gICAgICBk ZXJpdmUgdHJhZmZpYyBrZXlzIGFuZCBJVnMuDQoNCj4+DQoNCj4+ICAgbyAgQ29tbW9uIElWLiAg Qnl0ZSBzdHJpbmcgZGVyaXZlZCBmcm9tIE1hc3RlciBTZWNyZXQsIE1hc3RlciBTYWx0LA0KDQo+ PiAgICAgIGFuZCBJRCBDb250ZXh0LiAgTGVuZ3RoIGlzIGRldGVybWluZWQgYnkgdGhlIEFFQUQg QWxnb3JpdGhtLg0KDQo+PjxtZ2x0Pg0KDQo+PlJGQzgxNTIgdXNlcyBjb250ZXh0IElWLiBJdCBp cyBub3QgY2xlYXIgdG8gbWUgaG93IHRoZXNlIHR3byBkaWZmZXIuIEkNCg0KPj5iZWxpZXZlDQoN Cj4+c29tZSB0ZXh0IHNob3VsZCBiZSBhZGRlZCB0byBleHBsYWluIGhvdyBDb21tb24gSVYgZGlm ZmVycyBmcm9tIHRoZQ0KDQo+PmNvbnRleHQgSVYuDQoNCj4+DQoNCjxtZ2x0Mj4NCg0KQXMgZGlz Y3Vzc2VkLCBub25jZSBjb25zdHJ1Y3Rpb24gaXMgZGlmZmVyZW50IGZvciBDT1NFLCBzbyBDb250 ZXh0IElWIHNob3VsZCBub3QgYmUgdXNlZCBoZXJlLg0KDQo8L21nbHQyPg0KDQo+Pkl0IGlzIHVu Y2xlYXIgdG8gbWUgd2hldGhlciB0aGUgQ29tbW9uIENvbnRleHQgaXMgdXNlZCBmb3IgdGhlIHR3 bw0KDQo+PmJpZGlyZWN0aW9uYWwgY29tbXVuaWNhdGlvbnMuIElmIHRoYXQgaXMgdGhlIGNhc2Us IEkgYW0gcmVhZGluZyB0aGF0DQoNCj4+Q29tbW9uIElWDQoNCj4+YW5kIFNlcXVlbmNlIE51bWJl ciBpbiB0aGUgdHdvIGRpcmVjdGlvbnMgd2lsbCBlbmQgdXAgaW4gSVYgY29sbGlzaW9uLiBTbw0K DQo+PktleXMNCg0KPj5uZWVkcyB0byBiZSB1bmlkaXJlY3Rpb25hbCBhbmQgZGlmZmVyZW50LiA8 L21nbHQ+DQoNCj4NCg0KPltHUzpdIEFzIG1lbnRpb25lZCBhYm92ZTogd2hlbiBzZW5kaW5nLCBl YWNoIGVuZHBvaW50IHVzZXMgaXRzIFNlbmRlciBLZXksDQoNCj5hbmQgdGhlIG5vbmNlIGlzIHNw ZWNpZmllZCBpbiBTZWN0aW9uIDUuMi4gVGhlIHByb29mIGZvciAoa2V5LG5vbmNlKQ0KDQo+dW5p cXVlbmVzcyBpcyBpbiBBcHBlbmRpeCBELjMuDQoNCj4NCg0KPg0KDQo8bWdsdDI+DQoNCm9rDQoN CjwvbWdsdDI+DQoNCj4+ICAgVGhlIFNlbmRlciBDb250ZXh0IGNvbnRhaW5zIHRoZSBmb2xsb3dp bmcgcGFyYW1ldGVyczoNCg0KPj4NCg0KPj4gICBvICBTZW5kZXIgSUQuICBCeXRlIHN0cmluZyB1 c2VkIHRvIGlkZW50aWZ5IHRoZSBTZW5kZXIgQ29udGV4dCwgdG8NCg0KPj4gICAgICBkZXJpdmUg dHJhZmZpYyBrZXlzIGFuZCBJVnMsIGFuZCB0byBhc3N1cmUgdW5pcXVlIG5vbmNlcy4gIE1heGlt dW0NCg0KPj4gICAgICBsZW5ndGggaXMgZGV0ZXJtaW5lZCBieSB0aGUgQUVBRCBBbGdvcml0aG0u DQoNCj4+DQoNCj4+ICAgbyAgU2VuZGVyIEtleS4gQnl0ZSBzdHJpbmcgY29udGFpbmluZyB0aGUg c3ltbWV0cmljIGtleSB0byBwcm90ZWN0DQoNCj4+ICAgICAgbWVzc2FnZXMgdG8gc2VuZC4gIERl cml2ZWQgZnJvbSBDb21tb24gQ29udGV4dCBhbmQgU2VuZGVyIElELg0KDQo+PiAgICAgIExlbmd0 aCBpcyBkZXRlcm1pbmVkIGJ5IHRoZSBBRUFEIEFsZ29yaXRobS4NCg0KPj4NCg0KPj4gICBvICBT ZW5kZXIgU2VxdWVuY2UgTnVtYmVyLiAgTm9uLW5lZ2F0aXZlIGludGVnZXIgdXNlZCBieSB0aGUg c2VuZGVyDQoNCj4+ICAgICAgdG8gcHJvdGVjdCByZXF1ZXN0cyBhbmQgY2VydGFpbiByZXNwb25z ZXMsIGUuZy4gIE9ic2VydmUNCg0KPj4gICAgICBub3RpZmljYXRpb25zLiAgVXNlZCBhcyAnUGFy dGlhbCBJVicgW1JGQzgxNTJdIHRvIGdlbmVyYXRlIHVuaXF1ZQ0KDQo+PiAgICAgIG5vbmNlcyBm b3IgdGhlIEFFQUQuICBNYXhpbXVtIHZhbHVlIGlzIGRldGVybWluZWQgYnkgdGhlIEFFQUQNCg0K Pj4gICAgICBBbGdvcml0aG0uDQoNCj4+DQoNCj4+ICAgVGhlIFJlY2lwaWVudCBDb250ZXh0IGNv bnRhaW5zIHRoZSBmb2xsb3dpbmcgcGFyYW1ldGVyczoNCg0KPj4NCg0KPj4gICBvICBSZWNpcGll bnQgSUQuICBCeXRlIHN0cmluZyB1c2VkIHRvIGlkZW50aWZ5IHRoZSBSZWNpcGllbnQgQ29udGV4 dCwNCg0KPj4gICAgICB0byBkZXJpdmUgdHJhZmZpYyBrZXlzIGFuZCBJVnMsIGFuZCB0byBhc3N1 cmUgdW5pcXVlIG5vbmNlcy4NCg0KPj4gICAgICBNYXhpbXVtIGxlbmd0aCBpcyBkZXRlcm1pbmVk IGJ5IHRoZSBBRUFEIEFsZ29yaXRobS4NCg0KPj4NCg0KPj4gICBvICBSZWNpcGllbnQgS2V5LiBC eXRlIHN0cmluZyBjb250YWluaW5nIHRoZSBzeW1tZXRyaWMga2V5IHRvIHZlcmlmeQ0KDQo+PiAg ICAgIG1lc3NhZ2VzIHJlY2VpdmVkLiAgRGVyaXZlZCBmcm9tIENvbW1vbiBDb250ZXh0IGFuZCBS ZWNpcGllbnQgSUQuDQoNCj4+ICAgICAgTGVuZ3RoIGlzIGRldGVybWluZWQgYnkgdGhlIEFFQUQg QWxnb3JpdGhtLg0KDQo+Pg0KDQo+PiAgIG8gIFJlcGxheSBXaW5kb3cgKFNlcnZlciBvbmx5KS4g IFRoZSByZXBsYXkgd2luZG93IHRvIHZlcmlmeSByZXF1ZXN0cw0KDQo+PiAgICAgIHJlY2VpdmVk Lg0KDQo+Pg0KDQo+PjxtZ2x0Pg0KDQo+Pkxvb2tpbmcgYXQgdGhlIGRpZmZlcmVudCBjb250ZXh0 cywgbWF5YmUgc29tZSB0ZXh0IHNob3VsZCBiZSBhZGRlZCB0bw0KDQo+PnNwZWNpZnkNCg0KPj50 aGF0IFNlbmRlciBJRCBhbmQgUmVjaXBpZW50IElEIGFyZSBlcXVhbCBmb3IgYSBnaXZlbiB1bmlk aXJlY3Rpb25hbA0KDQo+PmNvbW11bmljYXRpb24uIFRoZSBzYW1lIG9jY3VycyBmb3IgU2VuZGVy IEtleSBhbmQgUmVjaXBpZW50IEtleS4NCg0KPg0KDQo+W0dTOl0gVGhlIGludGVudGlvbiB3aXRo IFNlY3Rpb24gMy4xIGFuZCBGaWd1cmUgNCwgd2hpY2ggeW91IHF1b3RlZCBhYm92ZSwNCg0KPmlz IGV4YWN0bHkgdG8gZXhwbGFpbiB0aGlzOg0KDQo+IkFuIGVuZHBvaW50IHVzZXMgaXRzIFNlbmRl ciBJRCAoU0lEKSB0byBkZXJpdmUgaXRzIFNlbmRlciBDb250ZXh0LCBhbmQNCg0KPnRoZSBvdGhl ciBlbmRwb2ludCB1c2VzIHRoZSBzYW1lIElELCBub3cgY2FsbGVkIFJlY2lwaWVudCBJRCAoUklE KSwgdG8NCg0KPmRlcml2ZSBpdHMgUmVjaXBpZW50IENvbnRleHQu4oCdDQoNCg0KDQo+RXhjZXJw dCBvZiBGaWd1cmUgNDoNCg0KPlByb3RlY3QgcmVxdWVzdCB3aXRoICB8ICAgICBraWQgPSBTSUQs IC4gLiAuICB8DQoNCj4gICAgICBTZW5kZXIgQ29udGV4dCAgKy0tLS0tLS0tLS0tLS0tLS0tLS0t LS0+fCBSZXRyaWV2ZSBjb250ZXh0IHdpdGgNCg0KPiAgICAgICAgICAgICAgICAgICAgICB8ICAg ICAgICAgICAgICAgICAgICAgICB8ICBSSUQgPSBraWQNCg0KPklzIHRoYXQgc3RpbGwgdW5jbGVh cj8NCg0KPlNpbmNlIHRoaXMgaXMgc3ltbWV0cmljIGNyeXB0bywgaXQgc2hvdWxkIGhvcGVmdWxs eSBiZSBjbGVhciB0byBhbnlvbmUNCg0KPnRoYXQgdGhlIGtleXMgdXNlZCBmb3IgZW5jcnlwdGlv biBhbmQgZGVjcnlwdGlvbiBhcmUgdGhlIHNhbWUsIGRvbuKAmXQgeW91DQoNCj50aGluaz8NCg0K Pg0KDQo8bWdsdDI+DQoNCkkgdGhpbmsgdGhpcyBoYXMgYmVlbiBzb2x2ZWQgZWFybGllciB0aGFu LiBUaGF0IGlzIGZpbmUgdG8gbWUgYW5kIEkgZG8gbm90IGJlbGlldmUgd2Ugc2hvdWxkIGdvIGFu eSBmdXJ0aGVyIHJlZ2FyZGluZyB0aGUga2V5IGFuZCBhc3ltbWV0cmljIGNyeXB0by4NCg0KPC9t Z2x0Mj4NCg0KDQoNCj4+DQoNCj4+SSBiZWxpZXZlIHRoYXQgU2VuZGVyIFNlcXVlbmNlIE51bWJl ciBhbHNvIG5lZWRzIHRvIGJlIHByZXNlbnQgaW4gdGhlDQoNCj4+UmVjaXBpZW50DQoNCj4+Q29u dGV4dCBpbiBvcmRlciB0byBpbXBsZW1lbnQgYW50aSByZXBsYXkgbWVjaGFuaXNtLg0KDQo+DQoN Cj5bR1M6XSBUaGUgcmVwbGF5IHdpbmRvdyBpcyBhbHJlYWR5IHBhcnQgb2YgdGhlIFJlY2lwaWVu dCBDb250ZXh0LiBQZXJoYXBzDQoNCj5hIHJlZmVyZW5jZSB0byBTZWN0aW9uIDcuNCB3b3VsZCBi ZSBzdWZmaWNpZW50IHRvIG1ha2UgdGhlIGNvbm5lY3Rpb24NCg0KPmJldHdlZW4gcmVwbGF5IHdp bmRvdyBhbmQgc2VxdWVuY2UgbnVtYmVyPw0KDQo+DQoNCjxtZ2x0Mj4NCg0KR29vZCwgdGhlbiB5 ZXMgYSByZWZlcmVuY2Ugd291bGQgYmUgdXNlZnVsbA0KDQo8L21nbHQyPg0KDQo+Pg0KDQo+PlNl cXVlbmNlIE51bWJlciBNYXkgYmUgaW50ZXJwcmV0ZWQgZGlmZmVyZW50bHkuIEkgYmVsaWV2ZSB0 aGF0DQoNCj4+aW50ZXJwcmV0YXRpb24NCg0KPj5zaG91bGQgYWxzbyBiZSBwYXJ0IG9mIHRoZSBD b21tb24gU2VjdXJpdHkgQ29udGV4dC4NCg0KPg0KDQo+W0dTOl0gSSBkaWRu4oCZdCB1bmRlcnN0 YW5kIHRoaXMgY29tbWVudC4NCg0KDQoNCjxtZ2x0Mj4NCg0KU2VxdWVuY2UgTnVtYmVyIGFyZSBu b3QgYWx3YXlzIGluY3JlbWVudGVkLiBUaGlzIGludGVycHJldGF0aW9uIG1heSBpbXBhY3QgdGhl IHNlc3Npb24sIHNvIHRoYXQgbWF5IG5lZWQgdG8gYmUgc3BlY2lmeSBpbiB0aGUgZnV0dXJlIHdo ZW4gY29uc2lkZXJpbmcgb3RoZXIgaW50ZXJwcmV0YXRpb24gb2YgdGhlIFNTTi4NCg0KPC9tZ2x0 Mj4NCg0KPg0KDQo+Pg0KDQo+PkFzIG1lbnRpb25lZCBhYm92ZSB0aGUgY29udGV4dHMgbWF5IHBy b2JhYmx5IGJlIHJlZmFjdG9yZWQgd2l0aCBvbmUNCg0KPj5Db250ZXh0IHBlcg0KDQo+PnVuaWRp cmVjdGlvbmFsIGNvbW11bmljYXRpb24uIDwvbWdsdD4NCg0KPg0KDQo+W0dTOl0gSU1ITyB0aGUg Y3VycmVudCB0ZXh0IGRlc2NyaWJlcyBob3cgdG8gZGVyaXZlIHRoZSBzZWN1cml0eQ0KDQo+Y29u dGV4dCBuZWVkZWQgYnkgZW5kcG9pbnRzIHRvIHByb2Nlc3MgbWVzc2FnZXMgdG8gc2VuZCBhbmQg bWVzc2FnZXMNCg0KPnJlY2VpdmVkIGluZGVwZW5kZW50IG9mIGJlaW5nIGNsaWVudCBvciBzZXJ2 ZXIuIFRoaXMgbWF5IGFsdGVybmF0aXZlbHkgYmUNCg0KPnN0cnVjdHVyZWQgaW4gYSBudW1iZXIg b2YgZGlmZmVyZW50IGNhc2VzIGJ1dCBJIGRvbuKAmXQgc2VlIGhvdyB0aGF0DQoNCj5zaW1wbGlm aWVzIHNwZWNpZmljYXRpb24sIGltcGxlbWVudGF0aW9uIG9yIHNlY3VyaXR5IGFuYWx5c2lzLg0K DQo+DQoNCj4NCg0KPj4NCg0KPj5TZWxhbmRlciwgZXQgYWwuICAgICAgICBFeHBpcmVzIEphbnVh cnkgMjcsIDIwMTkgICAgICAgICAgICAgICAgW1BhZ2UgOV0NCg0KPj4NCg0KPj5JbnRlcm5ldC1E cmFmdCAgICAgICAgICAgICAgICAgICBPU0NPUkUgICAgICAgICAgICAgICAgICAgICAgICBKdWx5 IDIwMTgNCg0KPj4NCg0KPj4gICBBbGwgcGFyYW1ldGVycyBleGNlcHQgU2VuZGVyIFNlcXVlbmNl IE51bWJlciBhbmQgUmVwbGF5IFdpbmRvdyBhcmUNCg0KPj4gICBpbW11dGFibGUgb25jZSB0aGUg c2VjdXJpdHkgY29udGV4dCBpcyBlc3RhYmxpc2hlZC4gIEFuIGVuZHBvaW50IG1heQ0KDQo+PiAg IGZyZWUgdXAgbWVtb3J5IGJ5IG5vdCBzdG9yaW5nIHRoZSBDb21tb24gSVYsIFNlbmRlciBLZXks IGFuZA0KDQo+PiAgIFJlY2lwaWVudCBLZXksIGRlcml2aW5nIHRoZW0gd2hlbiBuZWVkZWQuICBB bHRlcm5hdGl2ZWx5LCBhbiBlbmRwb2ludA0KDQo+PiAgIG1heSBmcmVlIHVwIG1lbW9yeSBieSBu b3Qgc3RvcmluZyB0aGUgTWFzdGVyIFNlY3JldCBhbmQgTWFzdGVyIFNhbHQNCg0KPj4gICBhZnRl ciB0aGUgb3RoZXIgcGFyYW1ldGVycyBoYXZlIGJlZW4gZGVyaXZlZC4NCg0KPj4NCg0KPj4gICBF bmRwb2ludHMgTUFZIG9wZXJhdGUgYXMgYm90aCBjbGllbnQgYW5kIHNlcnZlciBhbmQgdXNlIHRo ZSBzYW1lDQoNCj4+ICAgc2VjdXJpdHkgY29udGV4dCBmb3IgdGhvc2Ugcm9sZXMuICBJbmRlcGVu ZGVudCBvZiBiZWluZyBjbGllbnQgb3INCg0KPj4gICBzZXJ2ZXIsIHRoZSBlbmRwb2ludCBwcm90 ZWN0cyBtZXNzYWdlcyB0byBzZW5kIHVzaW5nIGl0cyBTZW5kZXINCg0KPj4gICBDb250ZXh0LCBh bmQgdmVyaWZpZXMgbWVzc2FnZXMgcmVjZWl2ZWQgdXNpbmcgaXRzIFJlY2lwaWVudCBDb250ZXh0 Lg0KDQo+PiAgIFRoZSBlbmRwb2ludHMgTVVTVCBOT1QgY2hhbmdlIHRoZSBTZW5kZXIvUmVjaXBp ZW50IElEIHdoZW4gY2hhbmdpbmcNCg0KPj4gICByb2xlcy4gIEluIG90aGVyIHdvcmRzLCBjaGFu Z2luZyB0aGUgcm9sZXMgZG9lcyBub3QgY2hhbmdlIHRoZSBzZXQgb2YNCg0KPj4gICBrZXlzIHRv IGJlIHVzZWQuDQoNCj4+DQoNCj4+My4yLiAgRXN0YWJsaXNobWVudCBvZiBTZWN1cml0eSBDb250 ZXh0IFBhcmFtZXRlcnMNCg0KPj4NCg0KPj4gICBUaGUgcGFyYW1ldGVycyBpbiB0aGUgc2VjdXJp dHkgY29udGV4dCBhcmUgZGVyaXZlZCBmcm9tIGEgc21hbGwgc2V0DQoNCj4+ICAgb2YgaW5wdXQg cGFyYW1ldGVycy4gIFRoZSBmb2xsb3dpbmcgaW5wdXQgcGFyYW1ldGVycyBTSEFMTCBiZSBwcmUt DQoNCj4+ICAgZXN0YWJsaXNoZWQ6DQoNCj4+DQoNCj4+ICAgbyAgTWFzdGVyIFNlY3JldA0KDQo+ Pg0KDQo+PiAgIG8gIFNlbmRlciBJRA0KDQo+Pg0KDQo+PiAgIG8gIFJlY2lwaWVudCBJRA0KDQo+ Pg0KDQo+PjxtZ2x0Pg0KDQo+PkkgYmVsaWV2ZSB0aGF0IFNlbmRlciBJRCBhbmQgUmVjaXBpZW50 IElEIGNvdWxkIGJlIHRoZSBzYW1lIHZhbHVlIGZvciBhDQoNCj4+Z2l2ZW4NCg0KPj51bmlkaXJl Y3Rpb25hbCBjb21tdW5pY2F0aW9uLiBJIGJlbGlldmUgdGhhdCB3aGF0IGlzIHJlcXVpcmVkIGhl ciBpcyB0aGUNCg0KPj50d28NCg0KPj5JRHMgdXNlZCBieSB0aGUgc2Vzc2lvbnMuIDwvbWdsdD4N Cg0KPg0KDQo+W0dTOl0gUGVyaGFwcyBpdCB3YXNu4oCZdCBjbGVhciB0aGF0IHRoaXMgdGV4dCBp cyBpbiB0aGUgY29udGV4dCBvZiBhIGdpdmVuDQoNCj5lbmRwb2ludD8gQnkgc2VjdGlvbiAzLjMs IGluIG9uZSBlbmRwb2ludCwgdGhlIFNlbmRlciBJRCBhbmQgUmVjaXBpZW50IElEDQoNCj5hcmUg ZGlmZmVyZW50LiBQb3NzaWJsZSBjbGFyaWZpY2F0aW9uOg0KDQo+T0xEDQoNCj5UaGUgcGFyYW1l dGVycyBpbiB0aGUgc2VjdXJpdHkgY29udGV4dCBhcmUgZGVyaXZlZCBmcm9tIGEgc21hbGwgc2V0 DQoNCj4gICBvZiBpbnB1dCBwYXJhbWV0ZXJzLg0KDQo+TkVXDQoNCj5FYWNoIGVuZHBvaW50IGRl cml2ZXMgdGhlIHBhcmFtZXRlcnMgaW4gdGhlIHNlY3VyaXR5IGNvbnRleHQgZnJvbSBhIHNtYWxs DQoNCj5zZXQgb2YgaW5wdXQgcGFyYW1ldGVycy4NCg0KPg0KDQo+DQoNCjxtZ2x0Mj4NCg0KVGhp cyBpcyBiZXR0ZXIsIGFuZCBpdCBhbHNvIGJlbmVmaXRzIGZyb20gY2xhcmlmaWNhdGlvbnMgYWJv dmVzLg0KDQo8L21nbHQyPg0KDQoNCg0KPj4NCg0KPj4gICBUaGUgZm9sbG93aW5nIGlucHV0IHBh cmFtZXRlcnMgTUFZIGJlIHByZS1lc3RhYmxpc2hlZC4gIEluIGNhc2UgYW55DQoNCj4+ICAgb2Yg dGhlc2UgcGFyYW1ldGVycyBpcyBub3QgcHJlLWVzdGFibGlzaGVkLCB0aGUgZGVmYXVsdCB2YWx1 ZQ0KDQo+PiAgIGluZGljYXRlZCBiZWxvdyBpcyB1c2VkOg0KDQo+Pg0KDQo+PiAgIG8gIEFFQUQg QWxnb3JpdGhtDQoNCj4+DQoNCj4+ICAgICAgKiAgRGVmYXVsdCBpcyBBRVMtQ0NNLTE2LTY0LTEy OCAoQ09TRSBhbGdvcml0aG0gZW5jb2Rpbmc6IDEwKQ0KDQo+Pg0KDQo+PiAgIG8gIE1hc3RlciBT YWx0DQoNCj4+DQoNCj4+ICAgICAgKiAgRGVmYXVsdCBpcyB0aGUgZW1wdHkgYnl0ZSBzdHJpbmcN Cg0KPj48bWdsdD4NCg0KPj5JIGJlbGlldmUgZXhwbGljaXRseSBwcm92aWRpbmcgdGhlIHN0cmlu ZyBjb3VsZCBoZWxwLiBUaGVyZSBpcyBhbHdheXMgdGhlDQoNCj4+Y29uZnVzaW9uIHdpdGggIlww IiB2ZXJzdXMgIiIuIDwvbWdsdD4NCg0KPg0KDQo+W0dTOl0gTm90ZSB0aGF0IHRoZSBNYXN0ZXIg U2FsdCBpcyBuZXZlciBzZW50IGFuZCBvbmx5IHVzZWQgYXMgc2FsdCBpbg0KDQo+SEtERiAoc2Vj dGlvbiAyLjIgb2YgUkZDIDU4NjkpLiBTZWN0aW9uIDMuMi4xIGRlc2NyaWJlcyBob3cgdGhlIGVt cHR5DQoNCj5zdHJpbmcgc2hvdWxkIGJlIGludGVycHJldGVkOg0KDQo+Ik5vdGUgdGhhdCBbUkZD NTg2OV0gc3BlY2lmaWVzIHRoYXQgaWYgdGhlIHNhbHQgaXMgbm90IHByb3ZpZGVkLCBpdCBpcyBz ZXQNCg0KPnRvIGEgc3RyaW5nIG9mDQoNCj56ZXJvcy4gRm9yIGltcGxlbWVudGF0aW9uIHB1cnBv c2VzLCBub3QgcHJvdmlkaW5nIHRoZSBzYWx0IGlzIHRoZSBzYW1lDQoNCj5hcyBzZXR0aW5nIHRo ZSBzYWx0IHRvIHRoZSBlbXB0eSBieXRlIHN0cmluZy4gT1NDT1JFIHNldHMgdGhlIHNhbHQNCg0K PmRlZmF1bHQgdmFsdWUgdG8gZW1wdHkgYnl0ZSBzdHJpbmcsIHdoaWNoIGluIFtSRkM1ODY5XSBp cyBjb252ZXJ0ZWQgdG8gYQ0KDQo+c3RyaW5nIG9mIHplcm9lcyAoc2VlIFNlY3Rpb24gMi4yIG9m IFtSRkM1ODY5XSkuIg0KDQo+SXMgdGhhdCBzdWZmaWNpZW50bHkgY2xlYXI/DQoNCj4NCg0KPg0K DQo8bWdsdDI+DQoNClRoaXMgaXMgZmluZS4gSXQgc2VlbXMgdG8gbWUgdGhhdCBlbXB0eSBzdHJp bmcgaXMg4oCc4oCdIGhlcmUuIEkgdXN1YWxseSBsaWtlIHRvIGNpdGUgZXhwbGljaXRseSB0aGUg c3RyaW5nIHRvIGF2b2lkIGNvbmZ1c2lvbiBiZXR3ZWVuIOKAnOKAnSBvciDigJxcMOKAnS4gSSBh Z3JlZSB0aGF0IHNheWluZyB6ZXJvIGxlbmd0aCBkb2VzIG5vdCBoZWxwIG11Y2gNCg0KVGhlIGxh dGVzdCBzZW50ZW5jZSBoYXMgdHdvIHJlZmVyZW5jZSB0byBSRkM1ODY5LCBtYXliZSBvbmUgd291 bGQgYmUgc3VmZmljaWVudC4gSWYgcG9zc2libGUsIGl0IG1pZ2h0IGJlIGJldHRlciB0byBzcGVj aWZ5IHRoZSBsZW5ndGggb2YgdGhlIHN0cmluZ3Mgb2YgemVyb3MgKEhhc2hMZW4gaW4gb3VyIGNh c2UpDQoNCjwvbWdsdDI+DQoNCj4NCg0KPg0KDQo+IHdoaWNoIGRlZmluZXMgaG93IHRvDQoNCj4N Cg0KPj4NCg0KPj4gICBvICBLZXkgRGVyaXZhdGlvbiBGdW5jdGlvbiAoS0RGKQ0KDQo+Pg0KDQo+ PiAgICAgICogIERlZmF1bHQgaXMgSEtERiBTSEEtMjU2DQoNCj4+DQoNCj4+ICAgbyAgUmVwbGF5 IFdpbmRvdyBUeXBlIGFuZCBTaXplDQoNCj4+DQoNCj4+ICAgICAgKiAgRGVmYXVsdCBpcyBEVExT LXR5cGUgcmVwbGF5IHByb3RlY3Rpb24gd2l0aCBhIHdpbmRvdyBzaXplIG9mIDMyDQoNCj4+ICAg ICAgICAgW1JGQzYzNDddDQoNCj4+PG1nbHQ+DQoNCj4+VGhpcyBzZWN0aW9uIHNwZWNpZmllcyBU eXBlIGFuZCB3aW5kb3dzIGZvciB0aGUgYW50aSByZXBsYXkgbWVjaGFuaXNtLg0KDQo+PlRoaXMg d2FzDQoNCj4+ZGVzY3JpYmVkIGFzIFJlcGxheSBXaW5kb3dzIGluIHRoZSBjb250ZXh0IGRlc2Ny aXB0aW9uLiA8L21nbHQ+DQoNCj4NCg0KPltHUzpdIEkgZGlkbuKAmXQgdW5kZXJzdGFuZCB0aGlz IGNvbW1lbnQuIERvIHlvdSBtZWFuOg0KDQo+T0xEDQoNCj5SZXBsYXkgV2luZG93IFR5cGUgYW5k IFNpemUNCg0KPk5FVw0KDQo+UmVwbGF5IFdpbmRvdw0KDQo+DQoNCj4NCg0KPG1nbHQyPg0KDQpJ ZiBkaWZmZXJlbnQgbWVjaGFuaXNtIGNvdWxkIGJlIHVzZWQsIEkgbWVhbnQ6DQoNCiogUmVwbGF5 IFdpbmRvdyBUeXBlIDogZGVmYXVsdCB0byBEVExTIDEuMg0KDQoqIFJlcGxheSBXaW5kb3cgU2l6 ZSAoUGFyYW1ldGVycyk6DQoNCjwvbWdsdD4NCg0KPg0KDQo+DQoNCj4+U2VsYW5kZXIsIGV0IGFs LiAgICAgICAgRXhwaXJlcyBKYW51YXJ5IDI3LCAyMDE5ICAgICAgICAgICAgICAgW1BhZ2UgMTBd DQoNCj4+DQoNCj4+SW50ZXJuZXQtRHJhZnQgICAgICAgICAgICAgICAgICAgT1NDT1JFICAgICAg ICAgICAgICAgICAgICAgICAgSnVseSAyMDE4DQoNCj4+DQoNCj4+ICAgQWxsIGlucHV0IHBhcmFt ZXRlcnMgbmVlZCB0byBiZSBrbm93biB0byBhbmQgYWdyZWVkIG9uIGJ5IGJvdGgNCg0KPj4gICBl bmRwb2ludHMsIGJ1dCB0aGUgcmVwbGF5IHdpbmRvdyBtYXkgYmUgZGlmZmVyZW50IGluIHRoZSB0 d28NCg0KPj4gICBlbmRwb2ludHMuICBUaGUgd2F5IHRoZSBpbnB1dCBwYXJhbWV0ZXJzIGFyZSBw cmUtZXN0YWJsaXNoZWQsIGlzDQoNCj4+ICAgYXBwbGljYXRpb24gc3BlY2lmaWMuICBDb25zaWRl cmF0aW9ucyBvZiBzZWN1cml0eSBjb250ZXh0DQoNCj4+ICAgZXN0YWJsaXNobWVudCBhcmUgZ2l2 ZW4gaW4gU2VjdGlvbiAxMi4yIGFuZCBleGFtcGxlcyBvZiBkZXBsb3lpbmcNCg0KPj4gICBPU0NP UkUgaW4gQXBwZW5kaXggQi4NCg0KPj4NCg0KPj4zLjIuMS4gIERlcml2YXRpb24gb2YgU2VuZGVy IEtleSwgUmVjaXBpZW50IEtleSwgYW5kIENvbW1vbiBJVg0KDQo+Pg0KDQo+PiAgIFRoZSBLREYg TVVTVCBiZSBvbmUgb2YgdGhlIEhNQUMgYmFzZWQgSEtERiBbUkZDNTg2OV0gYWxnb3JpdGhtcw0K DQo+PiAgIGRlZmluZWQgZm9yIENPU0UgW1JGQzgxNTJdLg0KDQo+PjxtZ2x0Pg0KDQo+Pkl0IG1p Z2h0IGJlIGJldHRlciB0byBjb25zaWRlciBIS0RGIGluc3RlYWQgb2YgS0RGIGFuZCB0aGVuIGp1 c3Qgc3BlY2lmeQ0KDQo+PnRoZQ0KDQo+Pkhhc2ggZnVuY3Rpb24gPC9tZ2x0Pg0KDQo+W0dTOl0g SXMgdGhpcyBiZXR0ZXI6DQoNCj5ORVcNCg0KPiBUaGUgSEtERiBNVVNUIGJlIG9uZSBvZiB0aGUg SE1BQyBiYXNlZCBIS0RGIFtSRkM1ODY5XSBhbGdvcml0aG1zDQoNCj4gICBkZWZpbmVkIGZvciBD T1NFIFtSRkM4MTUyXS4NCg0KPg0KDQo+DQoNCjxtZ2x0Mj4NCg0KSSB0aGluayB0aGF0IGlzIGJl dHRlci4NCg0KPC9tZ2x0Mj4NCg0KPg0KDQo+DQoNCj4+DQoNCj4+ICBIS0RGIFNIQS0yNTYgaXMg bWFuZGF0b3J5IHRvIGltcGxlbWVudC4NCg0KPj4gICBUaGUgc2VjdXJpdHkgY29udGV4dCBwYXJh bWV0ZXJzIFNlbmRlciBLZXksIFJlY2lwaWVudCBLZXksIGFuZCBDb21tb24NCg0KPj4gICBJViBT SEFMTCBiZSBkZXJpdmVkIGZyb20gdGhlIGlucHV0IHBhcmFtZXRlcnMgdXNpbmcgdGhlIEhLREYs IHdoaWNoDQoNCj4+ICAgY29uc2lzdHMgb2YgdGhlIGNvbXBvc2l0aW9uIG9mIHRoZSBIS0RGLUV4 dHJhY3QgYW5kIEhLREYtRXhwYW5kIHN0ZXBzDQoNCj4+ICAgW1JGQzU4NjldOg0KDQo+Pg0KDQo+ PiAgICAgIG91dHB1dCBwYXJhbWV0ZXIgPSBIS0RGKHNhbHQsIElLTSwgaW5mbywgTCkNCg0KPj4N Cg0KPj4gICB3aGVyZToNCg0KPj4NCg0KPj4gICBvICBzYWx0IGlzIHRoZSBNYXN0ZXIgU2FsdCBh cyBkZWZpbmVkIGFib3ZlDQoNCj4+DQoNCj4+ICAgbyAgSUtNIGlzIHRoZSBNYXN0ZXIgU2VjcmV0 IGFzIGRlZmluZWQgYWJvdmUNCg0KPj4NCg0KPj4gICBvICBpbmZvIGlzIHRoZSBzZXJpYWxpemF0 aW9uIG9mIGEgQ0JPUiBhcnJheSBjb25zaXN0aW5nIG9mOg0KDQo+Pg0KDQo+PiAgICAgIGluZm8g PSBbDQoNCj4+ICAgICAgICAgIGlkIDogYnN0ciwNCg0KPj4gICAgICAgICAgaWRfY29udGV4dCA6 IGJzdHIgLyBuaWwsDQoNCj4+ICAgICAgICAgIGFsZ19hZWFkIDogaW50IC8gdHN0ciwNCg0KPj4g ICAgICAgICAgdHlwZSA6IHRzdHIsDQoNCj4+ICAgICAgICAgIEwgOiB1aW50DQoNCj4+ICAgICAg XQ0KDQo+PjxtZ2x0Pg0KDQo+PmJzdHIsIG5pbCwgdHN0ciBhcmUgdXNlZCBmb3IgdGhlIGZpcnN0 IHRpbWUgaGVyZS4gTWF5YmUgYSByZWZlcmVuY2UgdG8NCg0KPj44MTUyIG1heQ0KDQo+PmJlIGNs YXJpZnlpbmcuIDwvbWdsdD4NCg0KPg0KDQo+W0dTOl0gT0ssIHdpbGwgZG8gdGhhdCBhbmQgaW4g dGhlIHRlcm1pbm9sb2d5IHNlY3Rpb24uDQoNCjxtZ2x0Mj4NCg0KVGhhbmtzLg0KDQo8L21nbHQy Pg0KDQo+Pg0KDQo+PiAgIHdoZXJlOg0KDQo+Pg0KDQo+PiAgIG8gIGlkIGlzIHRoZSBTZW5kZXIg SUQgb3IgUmVjaXBpZW50IElEIHdoZW4gZGVyaXZpbmcga2V5cyBhbmQgdGhlDQoNCj4+ICAgICAg ZW1wdHkgYnl0ZSBzdHJpbmcgd2hlbiBkZXJpdmluZyB0aGUgQ29tbW9uIElWLiAgVGhlIGVuY29k aW5nIGlzDQoNCj4+ICAgICAgZGVzY3JpYmVkIGluIFNlY3Rpb24gNS4NCg0KPj4NCg0KPj4gICBv ICBpZF9jb250ZXh0IGlzIHRoZSBJRCBDb250ZXh0LCBvciBuaWwgaWYgSUQgQ29udGV4dCBpcyBu b3QNCg0KPj4gICAgICBwcm92aWRlZC4NCg0KPj4NCg0KPj4gICBvICBhbGdfYWVhZCBpcyB0aGUg QUVBRCBBbGdvcml0aG0sIGVuY29kZWQgYXMgZGVmaW5lZCBpbiBbUkZDODE1Ml0uDQoNCj4+DQoN Cj4+ICAgbyAgdHlwZSBpcyAiS2V5IiBvciAiSVYiLiAgVGhlIGxhYmVsIGlzIGFuIEFTQ0lJIHN0 cmluZywgYW5kIGRvZXMgbm90DQoNCj4+ICAgICAgaW5jbHVkZSBhIHRyYWlsaW5nIE5VTCBieXRl Lg0KDQo+Pg0KDQo+PlNlbGFuZGVyLCBldCBhbC4gICAgICAgIEV4cGlyZXMgSmFudWFyeSAyNywg MjAxOSAgICAgICAgICAgICAgIFtQYWdlIDExXQ0KDQo+Pg0KDQo+PkludGVybmV0LURyYWZ0ICAg ICAgICAgICAgICAgICAgIE9TQ09SRSAgICAgICAgICAgICAgICAgICAgICAgIEp1bHkgMjAxOA0K DQo+Pg0KDQo+PiAgIG8gIEwgaXMgdGhlIHNpemUgb2YgdGhlIGtleS9JViBmb3IgdGhlIEFFQUQg YWxnb3JpdGhtIHVzZWQsIGluIGJ5dGVzLg0KDQo+Pg0KDQo+PiAgIEZvciBleGFtcGxlLCBpZiB0 aGUgYWxnb3JpdGhtIEFFUy1DQ00tMTYtNjQtMTI4IChzZWUgU2VjdGlvbiAxMC4yIGluDQoNCj4+ ICAgW1JGQzgxNTJdKSBpcyB1c2VkLCB0aGUgaW50ZWdlciB2YWx1ZSBmb3IgYWxnX2FlYWQgaXMg MTAsIHRoZSB2YWx1ZQ0KDQo+PiAgIGZvciBMIGlzIDE2IGZvciBrZXlzIGFuZCAxMyBmb3IgdGhl IENvbW1vbiBJVi4NCg0KPj4NCg0KPj4gICBOb3RlIHRoYXQgW1JGQzU4NjldIHNwZWNpZmllcyB0 aGF0IGlmIHRoZSBzYWx0IGlzIG5vdCBwcm92aWRlZCwgaXQgaXMNCg0KPj4gICBzZXQgdG8gYSBz dHJpbmcgb2YgemVyb3MuICBGb3IgaW1wbGVtZW50YXRpb24gcHVycG9zZXMsIG5vdCBwcm92aWRp bmcNCg0KPj4gICB0aGUgc2FsdCBpcyB0aGUgc2FtZSBhcyBzZXR0aW5nIHRoZSBzYWx0IHRvIHRo ZSBlbXB0eSBieXRlIHN0cmluZy4NCg0KPj4gICBPU0NPUkUgc2V0cyB0aGUgc2FsdCBkZWZhdWx0 IHZhbHVlIHRvIGVtcHR5IGJ5dGUgc3RyaW5nLCB3aGljaCBpbg0KDQo+PiAgIFtSRkM1ODY5XSBp cyBjb252ZXJ0ZWQgdG8gYSBzdHJpbmcgb2YgemVyb2VzIChzZWUgU2VjdGlvbiAyLjIgb2YNCg0K Pj4gICBbUkZDNTg2OV0pLg0KDQo+Pg0KDQo+PjxtZ2x0Pg0KDQo+PkkgYmVsaWV2ZSB0aGF0IGhv dyBTZW5kZXIgS2V5LCBSZWNpcGllbnQgS2V5LCBhbmQgQ29tbW9uIElWIGFyZSBkZXJpdmVkDQoN Cj4+ZnJvbQ0KDQo+PnRoZSBvdXRwdXRfcGFyYW1ldGVycyBzaG91bGQgYmUgZGVzY3JpYmVkIGFz IHdlbGwuDQoNCj4NCg0KPltHUzpdIFRoaXMgc2VjdGlvbiBpcyBpbnRlbmRlZCB0byBkZXNjcmli ZSBqdXN0IHRoYXQuIElzIHRoaXMgbW9yZSBjbGVhcjoNCg0KPk9MRA0KDQo+aWQgaXMgdGhlIFNl bmRlciBJRCBvciBSZWNpcGllbnQgSUQgd2hlbiBkZXJpdmluZyBrZXlzIGFuZCB0aGUgZW1wdHkg Ynl0ZQ0KDQo+c3RyaW5nIHdoZW4gZGVyaXZpbmcgdGhlIENvbW1vbiBJVi4NCg0KPk5FVw0KDQo+ aWQgaXMgdGhlIFNlbmRlciBJRCBvciBSZWNpcGllbnQgSUQgd2hlbiBkZXJpdmluZyB0aGUgU2Vu ZGVyIEtleSBhbmQNCg0KPlJlY2lwaWVudCBLZXksIHJlc3BlY3RpdmVseSwgYW5kIHRoZSBlbXB0 eSBieXRlIHN0cmluZyB3aGVuIGRlcml2aW5nIHRoZQ0KDQo+Q29tbW9uIElWLg0KDQo+DQoNCjxt Z2x0Mj4NCg0KSSBiZWxpZXZlIHRoYXQgaXMgY2xlYXJlci4NCg0KPC9tZ2x0Mj4NCg0KPg0KDQo+ Pk5vdGUgdGhhdCBpbiB0aGlzIGNhc2UgSSBiZWxpZXZlIHRoYXQgU2VuZGVyIEtleSBhbmQgUmVj aXBpZW50IEtleSBhcmUNCg0KPj51c2VkIGZvcg0KDQo+PnRoZSB0d28gdW5pZGlyZWN0aW9uYWwg Y29tbXVuaWNhdGlvbnMuIEluIG90aGVyIHdvcmRzLCB0aGUgc2FtZSBrZXkNCg0KPj5zaG91bGQg YmUNCg0KPj51c2VkIGJ5IHRoZSBzZW5kZXIgYW5kIHRoZSByZWNpcGllbnQgb2YgdGhlIHNhbWUg Y29tbXVuaWNhdGlvbi4gVGhlIHNhbWUNCg0KPj5Db21tb24NCg0KPj5JViBpcyB1c2VkIGluIGJv dGggY29tbXVuaWNhdGlvbnMuIDwvbWdsdD4NCg0KPg0KDQo+W0dTOl0gQXMgZGlzY3Vzc2VkIGFi b3ZlLCBTZWN0aW9uIDMuMSBkZXNjcmliZXMgaG93IFNlbmRlciBJRCBhbmQNCg0KPlJlY2lwaWVu dCBJRCByZWxhdGUgdG8gZWFjaCBvdGhlci4gQXMgcHJvcG9zZWQgYWJvdmUsIHdlIGVtcGhhc2lz ZSBpbg0KDQo+U2VjdGlvbiAzLjIgdGhhdCB0aGUgZGVyaXZhdGlvbnMgYXJlIHdpdGggcmVmZXJl bmNlIHRvIG9uZSBlbmRwb2ludC4gSXMNCg0KPnRoYXQgc3VmZmljaWVudGx5IGNsZWFyIG5vdz8g QXMgZm9yIHRoZSBDb21tb24gSVYsIGl0cyB1c2UgaXMgZGVzY3JpYmVkDQoNCj5pbiBTZWN0aW9u IDUuMi4NCg0KPg0KDQo+DQoNCjxtZ2x0Mj4NCg0KWWVzLCBJIGJlbGlldmUgdGhpcyBoYXMgYmVl biBjbGFyaWZpZWQgZWFybGllci4NCg0KPC9tZ2x0Mj4NCg0KPj4zLjIuMi4gIEluaXRpYWwgU2Vx dWVuY2UgTnVtYmVycyBhbmQNCg0KPj5SZXBsYXkgV2luZG93DQoNCj4+DQoNCj4+ICAgVGhlIFNl bmRlciBTZXF1ZW5jZSBOdW1iZXIgaXMgaW5pdGlhbGl6ZWQgdG8gMC4gIFRoZSBzdXBwb3J0ZWQg dHlwZXMNCg0KPj4gICBvZiByZXBsYXkgcHJvdGVjdGlvbiBhbmQgcmVwbGF5IHdpbmRvdyBsZW5n dGggaXMgYXBwbGljYXRpb24gc3BlY2lmaWMNCg0KPj4gICBhbmQgZGVwZW5kcyBvbiBob3cgT1ND T1JFIGlzIHRyYW5zcG9ydGVkLCBzZWUgU2VjdGlvbiA3LjQuICBUaGUNCg0KPj4gICBkZWZhdWx0 IGlzIERUTFMtdHlwZSByZXBsYXkgcHJvdGVjdGlvbiB3aXRoIGEgd2luZG93IHNpemUgb2YgMzIN Cg0KPj4gICBpbml0aWF0ZWQgYXMgZGVzY3JpYmVkIGluIFNlY3Rpb24gNC4xLjIuNiBvZiBbUkZD NjM0N10uDQoNCj4+DQoNCj4+PG1nbHQ+DQoNCj4+VGhpcyBzaG91bGQgYmUgc3BlY2lmaWVkIHRo ZSBzYW1lIGluIHRoZSBDb250ZXh0Lg0KDQo+PjwvbWdsdD4NCg0KPg0KDQo+W0dTOl0gV2UgY2Fu IG1ha2UgYSByZWZlcmVuY2UgdG8gdGhpcyBzZWN0aW9uIGZyb20gU2VjdGlvbiAzLg0KDQo8bWds dDI+DQoNCkkgdGhpbmsgdGhhdCB3b3VsZCBiZSBjbGFyaWZ5aW5nLg0KDQo8L21nbHQyPg0KDQo+ Pg0KDQo+PjMuMy4gIFJlcXVpcmVtZW50cyBvbiB0aGUgU2VjdXJpdHkgQ29udGV4dCBQYXJhbWV0 ZXJzDQoNCj4+DQoNCj4+ICAgVG8gZW5zdXJlIHVuaXF1ZSBTZW5kZXIgS2V5cywgdGhlIHF1YXJ0 ZXQgKE1hc3RlciBTZWNyZXQsIE1hc3Rlcg0KDQo+PiAgIFNhbHQsIElEIENvbnRleHQsIFNlbmRl ciBJRCkgTVVTVCBiZSB1bmlxdWUsIGkuZS4gdGhlIHBhaXIgKElEDQoNCj4+ICAgQ29udGV4dCwg U2VuZGVyIElEKSBTSEFMTCBiZSB1bmlxdWUgaW4gdGhlIHNldCBvZiBhbGwgc2VjdXJpdHkNCg0K Pj4gICBjb250ZXh0cyB1c2luZyB0aGUgc2FtZSBNYXN0ZXIgU2VjcmV0IGFuZCBNYXN0ZXIgU2Fs dC4gIFRoaXMgbWVhbnMNCg0KPj4gICB0aGF0IFNlbmRlciBJRCBTSEFMTCBiZSB1bmlxdWUgaW4g dGhlIHNldCBvZiBhbGwgc2VjdXJpdHkgY29udGV4dHMNCg0KPj4gICB1c2luZyB0aGUgc2FtZSBN YXN0ZXIgU2VjcmV0LCBNYXN0ZXIgU2FsdCwgYW5kIElEIENvbnRleHQ7IHN1Y2ggYQ0KDQo+PiAg IHJlcXVpcmVtZW50IGd1YXJhbnRlZXMgdW5pcXVlIChrZXksIG5vbmNlKSBwYWlycywgd2hpY2gg YXZvaWRzIG5vbmNlDQoNCj4+ICAgcmV1c2UuDQoNCj4+DQoNCj4+PG1nbHQ+DQoNCj4+SSB1bmRl cnN0YW5kIHRoZSB1c2Ugb2YgU0hBTEwgYW5kIE1VU1QgYXMgc2ltaWxhci4gSWYgdGhhdCBpcyBj b3JyZWN0LA0KDQo+Pkl0DQoNCj4+bWF5DQoNCj4+YmUgYmV0dGVyIHRvIHVzZSB0aGUgc2FtZSB0 ZXJtIHRocm91Z2hvdXQgdGhlIGRvY3VtZW50Lg0KDQo+DQoNCj5bR1M6XSBJ4oCZbSBvcGVuIHRv IGd1aWRhbmNlIGhlcmUgYnV0IEnigJlkIHJhdGhlciBub3QgbWFrZSB0aGVzZSBjaGFuZ2VzDQoN Cj50aHJvdWdob3V0IHRoZSBkb2N1bWVudCB1bmxlc3MgdGhlcmUgaXMgYW4gYWdyZWVkIGNvbnZl bnRpb24gYWJvdXQgdGhpcy4NCg0KPkkNCg0KPmhhdmUgbGVhcm5lZCBhYm91dCBvbmUgZGlzdGlu Y3Rpb24gYmV0d2VlbiBhY3RvciAoU0hBTEwpIGFuZCBwYXNzaXZlDQoNCj5lbnRpdHkgKE1VU1Qp IGJ1dCBJIGRvbuKAmXQgc2VlIHRoYXQgY29uc2VxdWVudGlhbGx5IHVzZWQgaW4gb3RoZXIgUkZD cy4gSQ0KDQo+ZG9u4oCZdCBzZWUgYW55IHJpc2sgZm9yIGVycm9ycyByZXN1bHRpbmcgZnJvbSBp bnRlcmNoYW5nZWFibHkgdXNpbmcgU0hBTEwNCg0KPm9yIE1VU1QuDQoNCj4NCg0KPG1nbHQyPg0K DQpJIHRoaW5rIHRoYXQgd2lzZS4gUHV0dGluZyB5b3VyIHNob2VzIG9uLCBJIHdvdWxkIGhhdmUg YmVlbiByZWx1Y3RhbnQgaW4gY2hhbmdpbmcgdGhlbSBhdCB0aGF0IHRpbWUuIFRoYW5rcyBmb3Ig dGhlIGV4cGxhbmF0aW9uIGJldHdlZW4gTVVTVCBhbmQgU0hBTEwuDQoNCjwvbWdsdDI+DQoNCj4+ DQoNCj4+SSBiZWxpZXZlIHRoYXQgd2Ugd291bGQgbGlrZSB0byBhdm9pZCB0aGF0IHRoZSBzYW1l IElWIGlzIGJlaW5nIHJldXNlZA0KDQo+PndpdGggdGhlDQoNCj4+c2FtZSBrZXkuIEFueSBjaGFu Z2UgaW4gdGhlIGlucHV0cyBvZiB0aGUgSE1BQyBiYXNlZCBLREYgd2lsbCByZXN1bHQgaW4gYQ0K DQo+PmRpZmZlcmVudCBvdXRwdXQuIEFzIHN1Y2ggYW55IGNoYW5nZSBpbiB0aGUgb3V0cHV0IHdp bGwgcmVzdWx0IGluIHRoYXQNCg0KPj5wcm9wZXJ0eS4gSSBzdXNwZWN0IHdlIHdvdWxkIGxpa2Ug dG8gc29tZSBwYXJhbWV0ZXJzIHRvIHJlbWFpbiB3aXQgdGhlDQoNCj4+c2FtZQ0KDQo+PnZhbHVl LCB3aGlsZSBzb21lIGNvdWxkIGJlIGNoYW5nZWQsIGFuZCBmb3IgdGhhdCByZWFzb24sIHdlIGNo b3NlIHRoZQ0KDQo+PlNlbmRlcg0KDQo+PklELiBJIGJlbGlldmUgdGhlIHRleHQgY291bGQgYmUg Y2xhcmlmaWVkIGVpdGhlciBvbiB0aGUgcmVhc29uaW5nIGJlaGluZA0KDQo+Pm9yIGhvdw0KDQo+ PnRoaXMgc2hvdWxkIGJlIG9wZXJhdGVkLiA8L21nbHQ+DQoNCj4NCg0KPltHUzpdIEFzIG1lbnRp b25lZCBhYm92ZSwgdGhlIGdlbmVyYXRpb24gb2YgdGhhdCBub25jZSB1c2VkIHdpdGggdGhlIEFF QUQNCg0KPmlzIGRlc2NyaWJlZCBpbiBTZWN0aW9uIDUuMi4gVGhlIHJlYXNvbmluZyB3aHkgdGhp cyBpcyBzZWN1cmUgaXMgaW4NCg0KPkFwcGVuZGl4IEQuMy4gSXMgdGhlcmUgYW55dGhpbmcgbWlz c2luZz8NCg0KDQoNCjxtZ2x0Mj4NCg0KTm8uIEkgZ3Vlc3MgdGhhdCBpcyBmaW5lDQoNCjwvbWds dDI+DQoNCj4NCg0KPj4NCg0KPj4gICBEaWZmZXJlbnQgbWV0aG9kcyBjYW4gYmUgdXNlZCB0byBh c3NpZ24gU2VuZGVyIElEczogYSBwcm90b2NvbCB0aGF0DQoNCj4+ICAgYWxsb3dzIHRoZSBwYXJ0 aWVzIHRvIG5lZ290aWF0ZSBsb2NhbGx5IHVuaXF1ZSBpZGVudGlmaWVycywgYSB0cnVzdGVkDQoN Cj4+ICAgdGhpcmQgcGFydHkgKGUuZy4sIFtJLUQuaWV0Zi1hY2Utb2F1dGgtYXV0aHpdKSwgb3Ig dGhlIGlkZW50aWZpZXJzDQoNCj4+ICAgY2FuIGJlIGFzc2lnbmVkIG91dC1vZi1iYW5kLiAgVGhl IFNlbmRlciBJRHMgY2FuIGJlIHZlcnkgc2hvcnQgKG5vdGUNCg0KPj4gICB0aGF0IHRoZSBlbXB0 eSBzdHJpbmcgaXMgYSBsZWdpdGltYXRlIHZhbHVlKS4gIFRoZSBtYXhpbXVtIGxlbmd0aCBvZg0K DQo+PiAgIFNlbmRlciBJRCBpbiBieXRlcyBlcXVhbHMgdGhlIGxlbmd0aCBvZiBBRUFEIG5vbmNl IG1pbnVzIDYuICBGb3IgQUVTLQ0KDQo+PiAgIENDTS0xNi02NC0xMjggdGhlIG1heGltdW0gbGVu Z3RoIG9mIFNlbmRlciBJRCBpcyA3IGJ5dGVzLg0KDQo+Pg0KDQo+PjxtZ2x0Pg0KDQo+Pkkgc3Vz cGVjdCB0aG9zZSByZXN0cmljdGlvbiBjb21pbmcgZnJvbSB0aGUgQ09TRSBzcGVjaWZpY2F0aW9u LiBJZiB0aGF0DQoNCj4+aXMNCg0KPj5jb3JyZWN0LCBJIGJlbGlldmUgaXQgd291bGQgYmUgaGVs cGZ1bCB0byBoYXZlIGEgcmVmZXJlbmNlIHRvIHRoYXQNCg0KPj5kb2N1bWVudC4NCg0KPj48L21n bHQ+DQoNCj4NCg0KPg0KDQo+W0dTOl0gTm8sIHRoZSByZXN0cmljdGlvbiBjb21lcyBmcm9tIHRo ZSBub25jZSBjb25zdHJ1Y3Rpb24sIEkgd2lsbCBhZGQgYQ0KDQo+cmVmZXJlbmNlIHRvIFNlY3Rp b24gNS4yLg0KDQo8bWdsdDI+DQoNClRoYW5rcywgSSBiZWxpZXZlIHRoYXQgd291bGQgYmUgdXNl ZnVsLg0KDQo8L21nbHQyPg0KDQo+DQoNCj4+DQoNCj4+ICAgVG8gc2ltcGxpZnkgcmV0cmlldmFs IG9mIHRoZSByaWdodCBSZWNpcGllbnQgQ29udGV4dCwgdGhlIFJlY2lwaWVudA0KDQo+PiAgIElE IFNIT1VMRCBiZSB1bmlxdWUgaW4gdGhlIHNldHMgb2YgYWxsIFJlY2lwaWVudCBDb250ZXh0cyB1 c2VkIGJ5IGFuDQoNCj4+ICAgZW5kcG9pbnQuICBJZiBhbiBlbmRwb2ludCBoYXMgdGhlIHNhbWUg UmVjaXBpZW50IElEIHdpdGggZGlmZmVyZW50DQoNCj4+ICAgUmVjaXBpZW50IENvbnRleHRzLCBp LmUuIHRoZSBSZWNpcGllbnQgQ29udGV4dHMgYXJlIGRlcml2ZWQgZnJvbQ0KDQo+PiAgIGRpZmZl cmVudCBDb21tb24gQ29udGV4dHMsIHRoZW4gdGhlIGVuZHBvaW50IG1heSBuZWVkIHRvIHRyeSBt dWx0aXBsZQ0KDQo+PiAgIHRpbWVzIGJlZm9yZSB2ZXJpZnlpbmcgdGhlIHJpZ2h0IHNlY3VyaXR5 IGNvbnRleHQgYXNzb2NpYXRlZCB0byB0aGUNCg0KPj4gICBSZWNpcGllbnQgSUQuDQoNCj4+DQoN Cj4+PG1nbHQ+DQoNCj4+U3VjaCBjb2xsaXNpb24gY291bGQgcmVwcmVzZW50IGFuIGF0dGFjayB3 aGVyZSB0aGUgYXR0YWNrZXIgY291bGQgaW4NCg0KPj5jYXNlDQoNCj4+YQ0KDQo+PmNvbGxpc2lv biBpcyBvYnNlcnZlZCBjcmFmdCBhIHBhY2tldCB0aGF0IGNvc3RzIHR3byB0aW1lIG1vcmUNCg0K Pj5jb21wdXRhdGlvbg0KDQo+PnRoYW4NCg0KPj5hIHJlZ3VsYXIgcGFja2V0Lg0KDQo+DQoNCj5b R1M6XSAgVGhpcyBzZWN0aW9uIGRlc2NyaWJlcyB1bm5lY2Vzc2FyeSBwcm9jZXNzaW5nIGR1ZSB0 byBjb2xsaXNpb24gb2YNCg0KPmlkZW50aWZpZXJzLiBOb3RlIHRoYXQgYW4gYXR0YWNrZXIgY2Fu IHNwb29mIGEgbWVzc2FnZSBhbmQgdXNlIGFuDQoNCj5leGlzdGluZw0KDQo+aWRlbnRpZmllciBl dmVuIGlmIHRoZXJlIGlzIG9ubHkgc2luZ2xlIGNvbnRleHQgd2l0aCB0aGlzIGlkZW50aWZpZXIs IGFuZA0KDQo+c3VjaCBhdHRhY2tzIGFyZSBhbHJlYWR5IG1lbnRpb25lZCBpbiB0aGUgc2VjdXJp dHkgY29uc2lkZXJhdGlvbnMuDQoNCj4NCg0KPj4NCg0KPj5JIG1pZ2h0IGJlIHdyb25nLCBidXQg aXQgc2VlbXMgdGhhdCB0aGUgSUQgaXMgbW9yZSBpbXBvcnRhbnQgZm9yIHRoZQ0KDQo+PnJlY2lw aWVudC4NCg0KPj5UeXBpY2FsbHkgdGhlIHNlbmRlciBjYW4gZWFzaWx5IGFkZHJlc3MgU2VuZGVy IElEIGNvbGxpc2lvbi4gICBPbiB0aGUNCg0KPj5vdGhlcg0KDQo+PmhhbmQgdGhlIGNyeXB0b2dy YXBoaWMgcHJvcGVydGllcyBhcmUgYmFzZWQgb24gdGhlIHVuaXF1ZW5lc3Mgb2YgdGhlDQoNCj4+ U2VuZGVyIElELg0KDQo+Pk1heWJlIHRoZXNlIGNvdWxkIGJlIGNvbnNpZGVyZWQgd2l0aCB0aGUg UmVjaXBpZW50IElEIGluIG1pbmQuIDwvbWdsdD4NCg0KPg0KDQo+W0dTOl0gU2VlIGRpc2N1c3Np b24gYWJvdXQgcmVxdWlyZW1lbnRzIG9uIHNlY3VyaXR5IGNvbnRleHQgYWJvdmUuDQoNCj4NCg0K Pg0KDQo8bWdsdDI+DQoNCk9LDQoNCjwvbWdsdDI+DQoNCj4+DQoNCj4+U2VsYW5kZXIsIGV0IGFs LiAgICAgICAgRXhwaXJlcyBKYW51YXJ5IDI3LCAyMDE5ICAgICAgICAgICAgICAgW1BhZ2UgMTJd DQoNCj4+DQoNCj4+SW50ZXJuZXQtRHJhZnQgICAgICAgICAgICAgICAgICAgT1NDT1JFICAgICAg ICAgICAgICAgICAgICAgICAgSnVseSAyMDE4DQoNCj4+DQoNCj4+ICAgVGhlIElEIENvbnRleHQg aXMgdXNlZCB0byBkaXN0aW5ndWlzaCBiZXR3ZWVuIHNlY3VyaXR5IGNvbnRleHRzLiAgVGhlDQoN Cj4+ICAgbWV0aG9kcyB1c2VkIGZvciBhc3NpZ25pbmcgU2VuZGVyIElEIGNhbiBhbHNvIGJlIHVz ZWQgZm9yIGFzc2lnbmluZw0KDQo+PiAgIHRoZSBJRCBDb250ZXh0LiAgQWRkaXRpb25hbGx5LCB0 aGUgSUQgQ29udGV4dCBjYW4gYmUgZ2VuZXJhdGVkIGJ5IHRoZQ0KDQo+PiAgIGNsaWVudCAoc2Vl IEFwcGVuZGl4IEIuMikuICBJRCBDb250ZXh0IGNhbiBiZSBhcmJpdHJhcmlseSBsb25nLg0KDQo+ Pg0KDQo+PjQuICBQcm90ZWN0ZWQgTWVzc2FnZSBGaWVsZHMNCg0KPj4NCg0KPj40LjEuICBDb0FQ IE9wdGlvbnMNCg0KPj4NCg0KPj40LjEuMS4gIElubmVyIE9wdGlvbnMNCg0KPj40LjEuMi4gIE91 dGVyIE9wdGlvbnMNCg0KPj40LjEuMy4gIFNwZWNpYWwgT3B0aW9ucw0KDQo+PjQuMS4zLjEuICBN YXgtQWdlDQoNCj4+NC4xLjMuMi4gIFVyaS1Ib3N0IGFuZCBVcmktUG9ydA0KDQo+PjQuMS4zLjMu ICBQcm94eS1VcmkNCg0KPj40LjEuMy40LiAgVGhlIEJsb2NrIE9wdGlvbnMNCg0KPj40LjEuMy40 LjEuICBJbm5lciBCbG9jayBPcHRpb25zDQoNCj4+NC4xLjMuNC4yLiAgT3V0ZXIgQmxvY2sgT3B0 aW9ucw0KDQo+PjQuMS4zLjUuICBPYnNlcnZlDQoNCj4+NC4xLjMuNS4xLiAgUmVnaXN0cmF0aW9u cyBhbmQgQ2FuY2VsbGF0aW9ucw0KDQo+PjQuMS4zLjUuMi4gIE5vdGlmaWNhdGlvbnMNCg0KPj4N Cg0KPj4gICBJZiB0aGUgc2VydmVyIGFjY2VwdHMgYW4gT2JzZXJ2ZSByZWdpc3RyYXRpb24sIGEg UGFydGlhbCBJViBNVVNUIGJlDQoNCj4+ICAgaW5jbHVkZWQgaW4gYWxsIG5vdGlmaWNhdGlvbnMg KGJvdGggc3VjY2Vzc2Z1bCBhbmQgZXJyb3IpLCBleGNlcHQgZm9yDQoNCj4+ICAgdGhlIGZpcnN0 IG9uZSB3aGVyZSBQYXJ0aWFsIElWIE1BWSBiZSBvbWl0dGVkLiAgVG8gcHJvdGVjdCBhZ2FpbnN0 DQoNCj4+ICAgcmVwbGF5LCB0aGUgY2xpZW50IFNIQUxMIG1haW50YWluIGEgTm90aWZpY2F0aW9u IE51bWJlciBmb3IgZWFjaA0KDQo+PiAgIE9ic2VydmF0aW9uIGl0IHJlZ2lzdGVycy4gIFRoZSBO b3RpZmljYXRpb24gTnVtYmVyIGlzIGEgbm9uLW5lZ2F0aXZlDQoNCj4+ICAgaW50ZWdlciBjb250 YWluaW5nIHRoZSBsYXJnZXN0IFBhcnRpYWwgSVYgb2YgdGhlIHJlY2VpdmVkDQoNCj4+ICAgbm90 aWZpY2F0aW9ucyBmb3IgdGhlIGFzc29jaWF0ZWQgT2JzZXJ2ZSByZWdpc3RyYXRpb24uICBGdXJ0 aGVyDQoNCj4+ICAgZGV0YWlscyBvZiByZXBsYXkgcHJvdGVjdGlvbiBvZiBub3RpZmljYXRpb25z IGFyZSBzcGVjaWZpZWQgaW4NCg0KPj4gICBTZWN0aW9uIDcuNC4xLg0KDQo+Pg0KDQo+PiAgIEZv ciBub3RpZmljYXRpb25zLCB0aGUgSW5uZXIgT2JzZXJ2ZSB2YWx1ZSBNVVNUIGJlIGVtcHR5IChz ZWUNCg0KPj4gICBTZWN0aW9uIDMuMiBvZiBbUkZDNzI1Ml0pLiAgVGhlIE91dGVyIE9ic2VydmUg aW4gYSBub3RpZmljYXRpb24gaXMNCg0KPj4NCg0KPj5TZWxhbmRlciwgZXQgYWwuICAgICAgICBF eHBpcmVzIEphbnVhcnkgMjcsIDIwMTkgICAgICAgICAgICAgICBbUGFnZSAyMF0NCg0KPj4NCg0K Pj5JbnRlcm5ldC1EcmFmdCAgICAgICAgICAgICAgICAgICBPU0NPUkUgICAgICAgICAgICAgICAg ICAgICAgICBKdWx5IDIwMTgNCg0KPj4NCg0KPj4gICBuZWVkZWQgZm9yIGludGVybWVkaWFyeSBu b2RlcyB0byBhbGxvdyBtdWx0aXBsZSByZXNwb25zZXMgdG8gb25lDQoNCj4+ICAgcmVxdWVzdCwg YW5kIG1heSBiZSBzZXQgdG8gdGhlIHZhbHVlIG9mIE9ic2VydmUgaW4gdGhlIG9yaWdpbmFsIENv QVANCg0KPj4gICBtZXNzYWdlLiAgVGhlIGNsaWVudCBwZXJmb3JtcyBvcmRlcmluZyBvZiBub3Rp ZmljYXRpb25zIGFuZCByZXBsYXkNCg0KPj4gICBwcm90ZWN0aW9uIGJ5IGNvbXBhcmluZyB0aGVp ciBQYXJ0aWFsIElWcyBhbmQgU0hBTEwgaWdub3JlIHRoZSBvdXRlcg0KDQo+PiAgIE9ic2VydmUg dmFsdWUuDQoNCj4+DQoNCj4+ICAgSWYgdGhlIGNsaWVudCByZWNlaXZlcyBhIHJlc3BvbnNlIHRv IGFuIE9ic2VydmUgcmVxdWVzdCB3aXRob3V0IGFuDQoNCj4+ICAgSW5uZXIgT2JzZXJ2ZSBvcHRp b24sIHRoZW4gaXQgdmVyaWZpZXMgdGhlIHJlc3BvbnNlIGFzIGEgbm9uLU9ic2VydmUNCg0KPj4g ICByZXNwb25zZSwgYXMgc3BlY2lmaWVkIGluIFNlY3Rpb24gOC40LiAgSWYgdGhlIGNsaWVudCBy ZWNlaXZlcyBhDQoNCj4+ICAgcmVzcG9uc2UgdG8gYSBub24tT2JzZXJ2ZSByZXF1ZXN0IHdpdGgg YW4gSW5uZXIgT2JzZXJ2ZSBvcHRpb24sIHRoZW4NCg0KPj4gICBpdCBzdG9wcyBwcm9jZXNzaW5n IHRoZSBtZXNzYWdlLCBhcyBzcGVjaWZpZWQgaW4gU2VjdGlvbiA4LjQuDQoNCj4+DQoNCj4+ICAg QSBjbGllbnQgTVVTVCBjb25zaWRlciB0aGUgbm90aWZpY2F0aW9uIHdpdGggdGhlIGhpZ2hlc3Qg UGFydGlhbCBJVg0KDQo+PiAgIGFzIHRoZSBmcmVzaGVzdCwgcmVnYXJkbGVzcyBvZiB0aGUgb3Jk ZXIgb2YgYXJyaXZhbC4gIEluIG9yZGVyIHRvDQoNCj4+ICAgc3VwcG9ydCBleGlzdGluZyBPYnNl cnZlIGltcGxlbWVudGF0aW9ucyB0aGUgT1NDT1JFIGNsaWVudA0KDQo+PiAgIGltcGxlbWVudGF0 aW9uIE1BWSBzZXQgdGhlIE9ic2VydmUgdmFsdWUgdG8gdGhlIHRocmVlIGxlYXN0DQoNCj4+ICAg c2lnbmlmaWNhbnQgYnl0ZXMgb2YgdGhlIFBhcnRpYWwgSVY7IHN1Y2ggYW4gaW1wbGVtZW50YXRp b24gbmVlZHMgdG8NCg0KPj4gICBtYWtlIHN1cmUgdGhhdCB0aGUgT2JzZXJ2ZSB2YWx1ZSBmb3Ig YW4gb2JzZXJ2ZSBub3RpZmljYXRpb24gd2l0aG91dA0KDQo+PiAgIFBhcnRpYWwgSVYgaXMgc21h bGxlciB0aGFuIGEgbm90aWZpY2F0aW9uIHdpdGggUGFydGlhbCBJVi4NCg0KPj4NCg0KPj48bWds dD4NCg0KPj5UaGlzIHNlY3Rpb24gZGlzY3VzcyB0aGUgYmVoYXZpb3IgcmVnYXJkaW5nIHRoZSBz ZXF1ZW5jZSBudW1iZXIuIFdoaWxlDQoNCj4+dGhlDQoNCj4+c2VxdWVuY2UgbnVtYmVyIGFuZCB0 aGUgcGFydGlhbCBJViBoYXZlIHRoZSBzYW1lIHZhbHVlLCBJIGFtIHdvbmRlcmluZw0KDQo+Pmlm DQoNCj4+aXQNCg0KPj53b3VsZCBub3QgYmUgbW9yZSBhcHByb3ByaWF0ZWQgdG8gbWVudGlvbiB0 aGUgc2VxdWVuY2UgbnVtYmVyIHZhbHVlIGlzDQoNCj4+cHJvdmlkZWQNCg0KPj5ieSB0aGUgcGFy dGlhbCBJViwgYW5kIHRoZW4gdXNlIHRoZSBzZXF1ZW5jZSBudW1iZXIgdmFyaWFibGUgdG8gZGVz Y3JpYmUNCg0KPj5hbnRpDQoNCj4+cmVwbGF5LiA8L21nbHQ+DQoNCj4NCg0KPg0KDQo+W0dTOl0g V2UgaW50ZW5kZWQgdG8gdXNlIHRoZSB0ZXJtIOKAnHBhcnRpYWwgSVbigJ0gd2hlbiByZWZlcnJp bmcgdG8gdGhlDQoNCj5udW1iZXIgYmVpbmcgdHJhbnNwb3J0ZWQgYW5kIOKAnFNTTiIgd2hlbiBy ZWZlcnJpbmcgdG8gdGhlIG51bWJlciBzdG9yZWQgaW4NCg0KPnRoZSBlbmRwb2ludC4gSSB3aWxs IGdvIHRocm91Z2ggdGhlIGRvY3VtZW50IGFuZCBzZWUgdGhhdCB0aGlzIGNvbnZlbnRpb24NCg0K PmlzIGtlcHQuDQoNCj4+DQoNCjxtZ2x0Mj4NCg0KTWF5YmUgdGhhdCB3b3VsZCBiZSB1c2VmdWwg dG8gbWVudGlvbiB0aGlzIGNvbnZlbnRpb24NCg0KPC9tZ2x0Mj4NCg0KDQoNCj4+NC4xLjMuNi4g IE5vLVJlc3BvbnNlDQoNCj4+NC4xLjMuNy4gIE9TQ09SRQ0KDQo+PjQuMi4gIENvQVAgSGVhZGVy IEZpZWxkcyBhbmQgUGF5bG9hZA0KDQo+PjQuMy4gIFNpZ25hbGluZyBNZXNzYWdlcw0KDQo+PjUu ICBUaGUgQ09TRSBPYmplY3QNCg0KPj41LjEuICBLaWQgQ29udGV4dA0KDQo+PjUuMi4gIE5vbmNl DQoNCj4+NS4zLiAgUGxhaW50ZXh0DQoNCj4+NS40LiAgQWRkaXRpb25hbCBBdXRoZW50aWNhdGVk IERhdGENCg0KPj42LiAgT1NDT1JFIEhlYWRlciBDb21wcmVzc2lvbg0KDQo+PjYuMS4gIEVuY29k aW5nIG9mIHRoZSBPU0NPUkUgT3B0aW9uIFZhbHVlDQoNCj4+Ni4yLiAgRW5jb2Rpbmcgb2YgdGhl IE9TQ09SRSBQYXlsb2FkDQoNCj4+Ni4zLiAgRXhhbXBsZXMgb2YgQ29tcHJlc3NlZCBDT1NFIE9i amVjdHMNCg0KPj43LjIuICBTZXF1ZW5jZSBOdW1iZXJzDQoNCj4+Ny4yLjEuICBNYXhpbXVtIFNl cXVlbmNlIE51bWJlcg0KDQo+PjcuMy4gIEZyZXNobmVzcw0KDQo+PjcuNC4gIFJlcGxheSBQcm90 ZWN0aW9uDQoNCj4+DQoNCj4+ICAgSW4gb3JkZXIgdG8gcHJvdGVjdCBmcm9tIHJlcGxheSBvZiBy ZXF1ZXN0cywgdGhlIHNlcnZlcidzIFJlY2lwaWVudA0KDQo+PiAgIENvbnRleHQgaW5jbHVkZXMg YSBSZXBsYXkgV2luZG93LiAgQSBzZXJ2ZXIgU0hBTEwgdmVyaWZ5IHRoYXQgYQ0KDQo+PiAgIFBh cnRpYWwgSVYgcmVjZWl2ZWQgaW4gdGhlIENPU0Ugb2JqZWN0IGhhcyBub3QgYmVlbiByZWNlaXZl ZCBiZWZvcmUuDQoNCj4+ICAgSWYgdGhpcyB2ZXJpZmljYXRpb24gZmFpbHMgdGhlIHNlcnZlciBT SEFMTCBzdG9wIHByb2Nlc3NpbmcgdGhlDQoNCj4+ICAgbWVzc2FnZSwgYW5kIE1BWSBvcHRpb25h bGx5IHJlc3BvbmQgd2l0aCBhIDQuMDEgVW5hdXRob3JpemVkIGVycm9yDQoNCj4+ICAgbWVzc2Fn ZS4gIEFsc28sIHRoZSBzZXJ2ZXIgTUFZIHNldCBhbiBPdXRlciBNYXgtQWdlIG9wdGlvbiB3aXRo IHZhbHVlDQoNCj4+ICAgemVybywgdG8gaW5mb3JtIGFueSBpbnRlcm1lZGlhcnkgdGhhdCB0aGUg cmVzcG9uc2UgaXMgbm90IHRvIGJlDQoNCj4+ICAgY2FjaGVkLiAgVGhlIGRpYWdub3N0aWMgcGF5 bG9hZCBNQVkgY29udGFpbiB0aGUgIlJlcGxheSBkZXRlY3RlZCINCg0KPj4gICBzdHJpbmcuICBU aGUgc2l6ZSBhbmQgdHlwZSBvZiB0aGUgUmVwbGF5IFdpbmRvdyBkZXBlbmRzIG9uIHRoZSB1c2UN Cg0KPj4gICBjYXNlIGFuZCB0aGUgcHJvdG9jb2wgd2l0aCB3aGljaCB0aGUgT1NDT1JFIG1lc3Nh Z2UgaXMgdHJhbnNwb3J0ZWQuDQoNCj4+ICAgSW4gY2FzZSBvZiByZWxpYWJsZSBhbmQgb3JkZXJl ZCB0cmFuc3BvcnQgZnJvbSBlbmRwb2ludCB0byBlbmRwb2ludCwNCg0KPj4gICBlLmcuICBUQ1As IHRoZSBzZXJ2ZXIgTUFZIGp1c3Qgc3RvcmUgdGhlIGxhc3QgcmVjZWl2ZWQgUGFydGlhbCBJViBh bmQNCg0KPj4gICByZXF1aXJlIHRoYXQgbmV3bHkgcmVjZWl2ZWQgUGFydGlhbCBJVnMgZXF1YWxz IHRoZSBsYXN0IHJlY2VpdmVkDQoNCj4+ICAgUGFydGlhbCBJViArIDEuICBIb3dldmVyLCBpbiBj YXNlIG9mIG1peGVkIHJlbGlhYmxlIGFuZCB1bnJlbGlhYmxlDQoNCj4+ICAgdHJhbnNwb3J0cyBh bmQgd2hlcmUgbWVzc2FnZXMgbWF5IGJlIGxvc3QsIHN1Y2ggYSByZXBsYXkgbWVjaGFuaXNtDQoN Cj4+DQoNCj4+U2VsYW5kZXIsIGV0IGFsLiAgICAgICAgRXhwaXJlcyBKYW51YXJ5IDI3LCAyMDE5 ICAgICAgICAgICAgICAgW1BhZ2UgMzNdDQoNCj4+DQoNCj4+SW50ZXJuZXQtRHJhZnQgICAgICAg ICAgICAgICAgICAgT1NDT1JFICAgICAgICAgICAgICAgICAgICAgICAgSnVseSAyMDE4DQoNCj4+ DQoNCj4+ICAgbWF5IGJlIHRvbyByZXN0cmljdGl2ZSBhbmQgdGhlIGRlZmF1bHQgcmVwbGF5IHdp bmRvdyBiZSBtb3JlIHN1aXRhYmxlDQoNCj4+ICAgKHNlZSBTZWN0aW9uIDMuMi4yKS4NCg0KPj48 bWdsdD4NCg0KPj5JIGFtIHJlYWRpbmcgdGhlIGFudGkgcmVwbGF5IG1lY2hhbmlzbSB1c2VkIGFz IHZlcnkgc3BlY2lmaWMuDQoNCj4+SW5jcmVtZW50aW5nDQoNCj4+UGFydGlhbCBJViBpcyBvbmUg d2F5IHRvIHBlcmZvcm0gYW50aS1yZXBsYXkgcHJvdGVjdGlvbi4gSXQgY291bGQgYmUgdGhlDQoN Cj4+d2F5DQoNCj4+T1NDT1JFIHBlcmZvcm1zIGFudGkgcmVwbGF5IHByb3RlY3Rpb24gYnV0IHRo aXMgaXMgbm90IHRoZSBvbmx5IHdheSB0bw0KDQo+PmRvLiBJbg0KDQo+PmFkZGl0aW9uLCBpbmNy ZW1lbnRpbmcgdGhlIFBhcnRpYWwgSVYgcmVzdWx0IGluIHRoZSBJViBiZWluZw0KDQo+PnByZWRp Y3RpYmxlLg0KDQo+PlRoaXMNCg0KPj5jb25kaXRpb24gbWF5IG5vdCBiZSBzdWZmaWNpZW50IGFz IHNvbWUgYWxnb3JpdGhtIG1heSByZXF1aXJlIHRoZSBJVg0KDQo+PmJlaW5nDQoNCj4+dW5wcmVk aWN0YWJsZS4gSSBiZWxpZXZlIEFudGktUmVwbGF5IFR5cGUgc2hvdWRsIGJlIGNvbmZpZ3VyYWJs ZSwgYW5kDQoNCj4+c29tZSBub3RlDQoNCj4+c2hvdWRsIGJlIGFkZGVkIHRvIGNvbXBseSB3aXRo IHRoZSBlbmNyeXB0aW9uIGJlaW5nIHVzZWQuIDwvbWdsdD4NCg0KPg0KDQo+W0dTOl0gV2UgYXJl IG1haW5seSBjb25jZXJuZWQgYWJvdXQgZW5jcnlwdGlvbiBhbGdvcml0aG1zIGFuZCByZXBsYXkN Cg0KPm1lY2hhbmlzbXMgdGhhdCBhcmUgc3VpdGFibGUgZm9yIElvVCBkZXBsb3ltZW50cyBpbiBn ZW5lcmFsIGFuZA0KDQo+Y29uc3RyYWluZWQgZW52aXJvbm1lbnRzIGluIHBhcnRpY3VsYXIuIFBs ZWFzZSBnaXZlIGFuIGV4YW1wbGUgb2YgYQ0KDQo+cmVsZXZhbnQgYWxnb3JpdGhtIHdoZXJlIHlv dSB0aGluayB0aGUgY3VycmVudCBzcGVjaWZpY2F0aW9uIGlzIHRvbw0KDQo+cmVzdHJpY3RpdmUu DQoNCjxtZ2x0Mj4NCg0KSVBzZWMgdHlwaWNhbGx5IGRvZXMgbm90IG5lY2Vzc2FyaWx5IGluY3Jl bWVudCB0aGUgU1NOLCBidXQgaGVyZSB5b3UgYXJlIGZvbGxvd2luZyBtY2dyZXctaXYtZ2VuLiBJ IGFwcHJlY2lhdGVkIHRoaXMgaGFzIGJlZW4gY2xlYXJseSBhZGRlZC4gSSBiZWxpZXZlIHRoYXQg aXMgY2xlYXJlciDigJMgYXQgbGVhc3QgdG8gbWUuDQoNCkFFUy1DQkMgcmVxdWlyZXMgdGhlIElW IHRvIGJlIHVucHJlZGljdGFibGUuIEkgYXBwcmVjaWF0ZWQgeW91IGFkZGVkICBpbiB0aGUgc2Vj dXJpdHkgY29uc2lkZXJhdGlvbiB0aGF0IHVucHJlZGljdGFibGUgSVYgYXJlIG5vdCBzdXBwb3J0 ZWQgYnkgdGhpcyBkcmFmdC48L21nbHQyPg0KDQo+Pg0KDQo+PiAgIFJlc3BvbnNlcyAod2l0aCBv ciB3aXRob3V0IFBhcnRpYWwgSVYpIGFyZSBwcm90ZWN0ZWQgYWdhaW5zdCByZXBsYXkNCg0KPj4g ICBhcyB0aGV5IGFyZSBib3VuZCB0byB0aGUgcmVxdWVzdCBhbmQgdGhlIGZhY3QgdGhhdCBvbmx5 IGEgc2luZ2xlDQoNCj4+ICAgcmVzcG9uc2UgaXMgYWNjZXB0ZWQuICBOb3RlIHRoYXQgdGhlIFBh cnRpYWwgSVYgaXMgbm90IHVzZWQgZm9yDQoNCj4+ICAgcmVwbGF5IHByb3RlY3Rpb24gaW4gdGhp cyBjYXNlLg0KDQo+Pg0KDQo+PiAgIFRoZSBvcGVyYXRpb24gb2YgdmFsaWRhdGluZyB0aGUgUGFy dGlhbCBJViBhbmQgdXBkYXRpbmcgdGhlIHJlcGxheQ0KDQo+PiAgIHByb3RlY3Rpb24gTVVTVCBi ZSBhdG9taWMuDQoNCj4+DQoNCj4+Ny40LjEuICBSZXBsYXkgUHJvdGVjdGlvbiBvZiBOb3RpZmlj YXRpb25zDQoNCj4+Ny41LiAgTG9zaW5nIFBhcnQgb2YgdGhlIENvbnRleHQgU3RhdGUNCg0KPj4N Cg0KPj4gICBUbyBwcmV2ZW50IHJldXNlIG9mIGFuIEFFQUQgbm9uY2Ugd2l0aCB0aGUgc2FtZSBr ZXksIG9yIGZyb20NCg0KPj4gICBhY2NlcHRpbmcgcmVwbGF5ZWQgbWVzc2FnZXMsIGFuIGVuZHBv aW50IG5lZWRzIHRvIGhhbmRsZSB0aGUNCg0KPj4gICBzaXR1YXRpb24gb2YgbG9zaW5nIHJhcGlk bHkgY2hhbmdpbmcgcGFydHMgb2YgdGhlIGNvbnRleHQsIHN1Y2ggYXMNCg0KPj4gICB0aGUgcmVx dWVzdCBUb2tlbiwgU2VuZGVyIFNlcXVlbmNlIE51bWJlciwgUmVwbGF5IFdpbmRvdywgYW5kDQoN Cj4+ICAgTm90aWZpY2F0aW9uIE51bWJlcnMuICBUaGVzZSBhcmUgdHlwaWNhbGx5IHN0b3JlZCBp biBSQU0gYW5kDQoNCj4+ICAgdGhlcmVmb3JlIGxvc3QgaW4gdGhlIGNhc2Ugb2YgYW4gdW5wbGFu bmVkIHJlYm9vdC4NCg0KPj4NCg0KPj4gICBBZnRlciBib290LCBhbiBlbmRwb2ludCBjYW4gZWl0 aGVyIHVzZSBhIHBlcnNpc3RlbnRseSBzdG9yZWQgY29tcGxldGUNCg0KPj4gICBvciBwYXJ0aWFs IHNlY3VyaXR5IGNvbnRleHQsIG9yIGVzdGFibGlzaCBhIG5ldyBzZWN1cml0eSBjb250ZXh0IHdp dGgNCg0KPj4gICBlYWNoIGVuZHBvaW50IGl0IGNvbW11bmljYXRlcyB3aXRoLiAgSG93ZXZlciwg ZXN0YWJsaXNoaW5nIGEgZnJlc2gNCg0KPj4gICBzZWN1cml0eSBjb250ZXh0IG1heSBoYXZlIGEg bm9uLW5lZ2xpZ2libGUgY29zdCBpbiB0ZXJtcyBvZiwgZS5nLiwNCg0KPj4gICBwb3dlciBjb25z dW1wdGlvbi4NCg0KPj4NCg0KPj4gICBJZiB0aGUgZW5kcG9pbnQgdXNlcyBhIHBlcnNpc3RlbnRs eSBzdG9yZWQgcGFydGlhbCBzZWN1cml0eSBjb250ZXh0LA0KDQo+PiAgIGl0IE1VU1QgTk9UIHJl dXNlIGEgcHJldmlvdXMgU2VuZGVyIFNlcXVlbmNlIE51bWJlciBhbmQgTVVTVCBOT1QNCg0KPj4N Cg0KPj5TZWxhbmRlciwgZXQgYWwuICAgICAgICBFeHBpcmVzIEphbnVhcnkgMjcsIDIwMTkgICAg ICAgICAgICAgICBbUGFnZSAzNF0NCg0KPj4NCg0KPj5JbnRlcm5ldC1EcmFmdCAgICAgICAgICAg ICAgICAgICBPU0NPUkUgICAgICAgICAgICAgICAgICAgICAgICBKdWx5IDIwMTgNCg0KPj4NCg0K Pj4gICBhY2NlcHQgcHJldmlvdXNseSByZWNlaXZlZCBtZXNzYWdlcy4gIFNvbWUgd2F5cyB0byBh Y2hpZXZlIHRoaXMgYXJlDQoNCj4+ICAgZGVzY3JpYmVkIGluIHRoZSBmb2xsb3dpbmcgc2VjdGlv bnMuDQoNCj4+DQoNCj4+Ny41LjEuICBTZXF1ZW5jZSBOdW1iZXINCg0KPj4NCg0KPj4gICBUbyBw cmV2ZW50IHJldXNlIG9mIFNlbmRlciBTZXF1ZW5jZSBOdW1iZXJzLCBhbiBlbmRwb2ludCBtYXkg cGVyZm9ybQ0KDQo+PiAgIHRoZSBmb2xsb3dpbmcgcHJvY2VkdXJlIGR1cmluZyBub3JtYWwgb3Bl cmF0aW9uczoNCg0KPj4NCg0KPj4gICBvICBCZWZvcmUgdXNpbmcgYSBTZW5kZXIgU2VxdWVuY2Ug TnVtYmVyIHRoYXQgaXMgZXZlbmx5IGRpdmlzaWJsZSBieQ0KDQo+PiAgICAgIEssIHdoZXJlIEsg aXMgYSBwb3NpdGl2ZSBpbnRlZ2VyLCBzdG9yZSB0aGUgU2VuZGVyIFNlcXVlbmNlIE51bWJlcg0K DQo+PiAgICAgIGluIHBlcnNpc3RlbnQgbWVtb3J5LiAgQWZ0ZXIgYm9vdCwgdGhlIGVuZHBvaW50 IGluaXRpYXRlcyB0aGUNCg0KPj4gICAgICBTZW5kZXIgU2VxdWVuY2UgTnVtYmVyIHRvIHRoZSB2 YWx1ZSBzdG9yZWQgaW4gcGVyc2lzdGVudCBtZW1vcnkgKw0KDQo+PiAgICAgIEsuICBTdG9yaW5n IHRvIHBlcnNpc3RlbnQgbWVtb3J5IGNhbiBiZSBjb3N0bHkuICBUaGUgdmFsdWUgSyBnaXZlcw0K DQo+PiAgICAgIGEgdHJhZGUtb2ZmIGJldHdlZW4gdGhlIG51bWJlciBvZiBzdG9yYWdlIG9wZXJh dGlvbnMgYW5kIGVmZmljaWVudA0KDQo+PiAgICAgIHVzZSBvZiBTZW5kZXIgU2VxdWVuY2UgTnVt YmVycy4NCg0KPj4NCg0KPj48bWdsdD4NCg0KPj5JIGhhdmUgaGFyZCB0aW1lIHJlYWRpbmcgdGhl IHNlY3Rpb24gYWJvdmUuIEkgZ3Vlc3MgSyBpcyBhIHBhcmFtZXRlcg0KDQo+Pmtub3duIGJ5DQoN Cj4+T1NDT1JFLiBNeSB1bmRlcnN0YW5kaW5nIGlzIHRoYXQgU1NOPTAgLi4uIEstMSBhcmUgc3Rv cmVkIGluIHBlcnNpc3RlbnQNCg0KPj5tZW1vcnkuDQoNCj4+QWZ0ZXIgYm9vdCBTU04gPSBTU04g KyBLLg0KDQo+Pg0KDQo+PkkgbWlnaHQgYmUgd3JvbmcgYnV0IGFzIHN0b3JhZ2UgaW4gcGVyc2lz dGVudCBtZW1vcnkgaXMgY29zdGx5LiBHaXZlbiBLIGENCg0KPj5wYXJhbWV0ZXIgZGVmaW5lZCBi eSB0aGUgaW1wbGVtZW50YXRpb24uIEkgd291bGQgcmF0aGVyIHN0b3JlIEYgPQ0KDQo+PmZsb29y KFNTTiAvIEsNCg0KPj4pLiBTU04gPSBGLksgKyBzc24gd2l0aCBzc24gPSAwLi4uIEstMSwgc28g YSBzdG9yYWdlIG9wZXJhdGlvbiBoYXBwZW5zDQoNCj4+ZXZlcnkgSy4NCg0KPj5JbiBjYXNlIG9m IHJlYm9vdCwgU1NOID0gKEYgKyAxKS5LICsgc3NuLg0KDQo+Pg0KDQo+PlRoaXMgZW5kcyBpbiBh IGp1bXAgb2YgbWF4aW11bSBLIGFuZCBhbnRpIHJlcGxheSBtdXN0IGJlIGFibGUgdG8gaGFuZGxl DQoNCj4+dGhpcy4NCg0KPj48L21nbHQ+DQoNCj4NCg0KPltHUzpdIEsgaXMgYSB0aGUgcGFyYW1l dGVyIGRldGVybWluaW5nIGhvdyBvZnRlbiB5b3UgbmVlZCB0byBzdG9yZSB0bw0KDQo+cGVyc2lz dGVudCBtZW1vcnksIGFuZCBob3cgbWFueSBzZXF1ZW5jZSBudW1iZXJzIHlvdSBtYXkg4oCcbG9z ZeKAnSBpbiBjYXNlDQoNCj5vZg0KDQo+cmVib290LiBPbmx5IG9uZSBTU04gaXMgc3RvcmVkIGlu IHBlcnNpc3RlbnQgbWVtb3J5LCBhbmQgdGhhdCBudW1iZXIgaXMNCg0KPmJlaW5nIG92ZXJ3cml0 dGVuIHdoZW4gYSBuZXcgbXVsdGlwbGUgb2YgSyBpcyByZWFjaGVkLiBBZnRlciByZWJvb3QsIHRo ZQ0KDQo+c2VxdWVuY2UgbnVtYmVyIGlzIHNldCB0byBTU04gKyBLIHRvIHByZXZlbnQgdXNlIG9m IGFueSBudW1iZXIgYmV0d2Vlbg0KDQo+dGhlDQoNCj5sYXN0IHN0b3JlZCBTU04gYW5kIHRoZSBu ZXh0IG11bHRpcGxlIG9mIEsuIElzIHRoaXMgbW9yZSBjbGVhcjoNCg0KPk9MRA0KDQo+ICAgbyBC ZWZvcmUgdXNpbmcgYSBTZW5kZXIgU2VxdWVuY2UgTnVtYmVyIHRoYXQgaXMgZXZlbmx5IGRpdmlz aWJsZSBieQ0KDQo+ICAgICAgSywgd2hlcmUgSyBpcyBhIHBvc2l0aXZlIGludGVnZXIsIHN0b3Jl IHRoZSBTZW5kZXIgU2VxdWVuY2UgTnVtYmVyDQoNCj4gICAgICBpbiBwZXJzaXN0ZW50IG1lbW9y eS4NCg0KPk5FVw0KDQo+ICAgbyAgQmVmb3JlIHVzaW5nIGEgU2VuZGVyIFNlcXVlbmNlIE51bWJl ciB0aGF0IGlzIGV2ZW5seSBkaXZpc2libGUgYnkNCg0KPiAgICAgIEssIHdoZXJlIEsgaXMgYSBw b3NpdGl2ZSBpbnRlZ2VyLCBzdG9yZS9vdmVyd3JpdGUgdGhlIFNlbmRlcg0KDQo+U2VxdWVuY2Ug TnVtYmVyDQoNCj4gICAgICBpbiBwZXJzaXN0ZW50IG1lbW9yeS4NCg0KPg0KDQo8bWdsdDI+DQoN Ck9LIEkgZ290IGl0Lg0KDQo8L21nbHQyPg0KDQo+DQoNCj4NCg0KPg0KDQo+Pg0KDQo+PjcuNS4y LiAgUmVwbGF5IFdpbmRvdw0KDQo+PjcuNS4zLiAgUmVwbGF5IG9mIE5vdGlmaWNhdGlvbnMNCg0K Pj44LiAgUHJvY2Vzc2luZw0KDQo+Pg0KDQo+PiAgIFRoaXMgc2VjdGlvbiBkZXNjcmliZXMgdGhl IE9TQ09SRSBtZXNzYWdlIHByb2Nlc3NpbmcuICBBZGRpdGlvbmFsDQoNCj4+ICAgcHJvY2Vzc2lu ZyBmb3IgT2JzZXJ2ZSBvciBCbG9jay13aXNlIGFyZSBkZXNjcmliZWQgaW4gc3Vic2VjdGlvbnMu DQoNCj4+DQoNCj4+ICAgTm90ZSB0aGF0LCBhbmFsb2dvdXNseSB0byBbUkZDNzI1Ml0gd2hlcmUg dGhlIFRva2VuIGFuZCBzb3VyY2UvDQoNCj4+ICAgZGVzdGluYXRpb24gcGFpciBhcmUgdXNlZCB0 byBtYXRjaCBhIHJlc3BvbnNlIHdpdGggYSByZXF1ZXN0LCBib3RoDQoNCj4+ICAgZW5kcG9pbnRz IE1VU1Qga2VlcCB0aGUgYXNzb2NpYXRpb24gKFRva2VuLCB7U2VjdXJpdHkgQ29udGV4dCwNCg0K Pj4NCg0KPj5TZWxhbmRlciwgZXQgYWwuICAgICAgICBFeHBpcmVzIEphbnVhcnkgMjcsIDIwMTkg ICAgICAgICAgICAgICBbUGFnZSAzNV0NCg0KPj4NCg0KPj5JbnRlcm5ldC1EcmFmdCAgICAgICAg ICAgICAgICAgICBPU0NPUkUgICAgICAgICAgICAgICAgICAgICAgICBKdWx5IDIwMTgNCg0KPj4N Cg0KPj4gICBQYXJ0aWFsIElWIG9mIHRoZSByZXF1ZXN0fSksIGluIG9yZGVyIHRvIGJlIGFibGUg dG8gZmluZCB0aGUgU2VjdXJpdHkNCg0KPj4gICBDb250ZXh0IGFuZCBjb21wdXRlIHRoZSBBQUQg dG8gcHJvdGVjdCBvciB2ZXJpZnkgdGhlIHJlc3BvbnNlLiAgVGhlDQoNCj4+ICAgYXNzb2NpYXRp b24gTUFZIGJlIGZvcmdvdHRlbiBhZnRlciBpdCBoYXMgYmVlbiB1c2VkIHRvIHN1Y2Nlc3NmdWxs eQ0KDQo+PiAgIHByb3RlY3Qgb3IgdmVyaWZ5IHRoZSByZXNwb25zZSwgd2l0aCB0aGUgZXhjZXB0 aW9uIG9mIE9ic2VydmUNCg0KPj4gICBwcm9jZXNzaW5nLCB3aGVyZSB0aGUgYXNzb2NpYXRpb24g TVVTVCBiZSBrZXB0IGFzIGxvbmcgYXMgdGhlDQoNCj4+ICAgT2JzZXJ2YXRpb24gaXMgYWN0aXZl Lg0KDQo+Pg0KDQo+PjguMS4gIFByb3RlY3RpbmcgdGhlIFJlcXVlc3QNCg0KPj4NCg0KPj4gICBH aXZlbiBhIENvQVAgcmVxdWVzdCwgdGhlIGNsaWVudCBTSEFMTCBwZXJmb3JtIHRoZSBmb2xsb3dp bmcgc3RlcHMgdG8NCg0KPj4gICBjcmVhdGUgYW4gT1NDT1JFIHJlcXVlc3Q6DQoNCj4+DQoNCj4+ ICAgMS4gIFJldHJpZXZlIHRoZSBTZW5kZXIgQ29udGV4dCBhc3NvY2lhdGVkIHdpdGggdGhlIHRh cmdldCByZXNvdXJjZS4NCg0KPj4NCg0KPj4gICAyLiAgQ29tcG9zZSB0aGUgQWRkaXRpb25hbCBB dXRoZW50aWNhdGVkIERhdGEgYW5kIHRoZSBwbGFpbnRleHQsIGFzDQoNCj4+ICAgICAgIGRlc2Ny aWJlZCBpbiBTZWN0aW9ucyA1LjMgYW5kIDUuNC4NCg0KPj4NCg0KPj4gICAzLiAgRW5jb2RlIHRo ZSBQYXJ0aWFsIElWIChTZW5kZXIgU2VxdWVuY2UgTnVtYmVyIGluIG5ldHdvcmsgYnl0ZQ0KDQo+ PiAgICAgICBvcmRlcikgYW5kIGluY3JlbWVudCB0aGUgU2VuZGVyIFNlcXVlbmNlIE51bWJlciBi eSBvbmUuDQoNCj4+PG1nbHQ+DQoNCj4+SSBiZWxpZXZlIHRoaXMgZGVwZW5kcyBvbiB0aGUgQW50 aS1yZXBsYXkgdHlwZS4NCg0KPj48L21nbHQ+DQoNCj4NCg0KPltHUzpdIEFzIG1lbnRpb25lZCBh Ym92ZSwgdW50aWwgaXQgaXMgZGVtb25zdHJhdGVkIHRvIGJlIGEgdG9vDQoNCj5yZXN0cmljdGl2 ZQ0KDQo+YXNzdW1wdGlvbiBJIHdvdWxkIGxpa2UgdG8gYXNzdW1lIHRoYXQgdGhlIHNlcXVlbnRp YWwgaW5jcmVtZW50IG9mDQoNCj5QYXJ0aWFsIElWL1NTTiBpcw0KDQo+c3VmZmljaWVudCBmb3Ig dGhlIHJlbGV2YW50IGVuY3J5cHRpb24gYWxnb3JpdGhtIGFuZCByZXBsYXkgcHJvdGVjdGlvbg0K DQo+bWVjaGFuaXNtIGluIHVzZS4NCg0KPG1nbHQyPg0KDQpJIGJlbGlldmUgdGhhdCBpcyBmaW5l LiBNYXliZSB3aGVuIEkgcmVhZCB0aGUgZHJhZnQgSSBoYWQgdGhlIGltcHJlc3Npb24gd2Ugd2Vy ZSB3aWxsaW5nIHRvIGJlIGFibGUgdG8gZXh0ZW5kIHRoaXMuIEkgZG8gbm90IHRoaW5rIHRoYXQg aXMgbmVjZXNzYXJ5Lg0KDQo8L21nbHQyPg0KDQo+DQoNCj4+ICBDb21wdXRlDQoNCj4+ICAgICAg IHRoZSBBRUFEIG5vbmNlIGZyb20gdGhlIFNlbmRlciBJRCwgQ29tbW9uIElWLCBhbmQgUGFydGlh bCBJViBhcw0KDQo+PiAgICAgICBkZXNjcmliZWQgaW4gU2VjdGlvbiA1LjIuDQoNCj4+DQoNCj4+ ICAgNC4gIEVuY3J5cHQgdGhlIENPU0Ugb2JqZWN0IHVzaW5nIHRoZSBTZW5kZXIgS2V5LiBDb21w cmVzcyB0aGUgQ09TRQ0KDQo+PiAgICAgICBPYmplY3QgYXMgc3BlY2lmaWVkIGluIFNlY3Rpb24g Ni4NCg0KPj4NCg0KPj4gICA1LiAgRm9ybWF0IHRoZSBPU0NPUkUgbWVzc2FnZSBhY2NvcmRpbmcg dG8gU2VjdGlvbiA0LiAgVGhlIE9TQ09SRQ0KDQo+PiAgICAgICBvcHRpb24gaXMgYWRkZWQgKHNl ZSBTZWN0aW9uIDQuMS4yKS4NCg0KPj4NCg0KPj44LjIuICBWZXJpZnlpbmcgdGhlIFJlcXVlc3QN Cg0KPj4NCg0KPj4gICBBIHNlcnZlciByZWNlaXZpbmcgYSByZXF1ZXN0IGNvbnRhaW5pbmcgdGhl IE9TQ09SRSBvcHRpb24gU0hBTEwNCg0KPj4gICBwZXJmb3JtIHRoZSBmb2xsb3dpbmcgc3RlcHM6 DQoNCj4+DQoNCj4+ICAgMS4gIERpc2NhcmQgQ29kZSBhbmQgYWxsIGNsYXNzIEUgb3B0aW9ucyAo bWFya2VkIGluIEZpZ3VyZSA1IHdpdGggJ3gnDQoNCj4+ICAgICAgIGluIGNvbHVtbiBFKSBwcmVz ZW50IGluIHRoZSByZWNlaXZlZCBtZXNzYWdlLiAgRm9yIGV4YW1wbGUsIGFuDQoNCj4+ICAgICAg IElmLU1hdGNoIE91dGVyIG9wdGlvbiBpcyBkaXNjYXJkZWQsIGJ1dCBhbiBVcmktSG9zdCBPdXRl ciBvcHRpb24NCg0KPj4gICAgICAgaXMgbm90IGRpc2NhcmRlZC4NCg0KPj4NCg0KPj4gICAyLiAg RGVjb21wcmVzcyB0aGUgQ09TRSBPYmplY3QgKFNlY3Rpb24gNikgYW5kIHJldHJpZXZlIHRoZSBS ZWNpcGllbnQNCg0KPj4gICAgICAgQ29udGV4dCBhc3NvY2lhdGVkIHdpdGggdGhlIFJlY2lwaWVu dCBJRCBpbiB0aGUgJ2tpZCcgcGFyYW1ldGVyLA0KDQo+PiAgICAgICBhZGRpdGlvbmFsbHkgdXNp bmcgdGhlICdraWQgY29udGV4dCcsIGlmIHByZXNlbnQuICBJZiBlaXRoZXIgdGhlDQoNCj4+ICAg ICAgIGRlY29tcHJlc3Npb24gb3IgdGhlIENPU0UgbWVzc2FnZSBmYWlscyB0byBkZWNvZGUsIG9y IHRoZSBzZXJ2ZXINCg0KPj4gICAgICAgZmFpbHMgdG8gcmV0cmlldmUgYSBSZWNpcGllbnQgQ29u dGV4dCB3aXRoIFJlY2lwaWVudCBJRA0KDQo+PiAgICAgICBjb3JyZXNwb25kaW5nIHRvIHRoZSAn a2lkJyBwYXJhbWV0ZXIgcmVjZWl2ZWQsIHRoZW4gdGhlIHNlcnZlcg0KDQo+PiAgICAgICBTSEFM TCBzdG9wIHByb2Nlc3NpbmcgdGhlIHJlcXVlc3QuDQoNCj4+DQoNCj4+ICAgICAgICogIElmIGVp dGhlciB0aGUgZGVjb21wcmVzc2lvbiBvciB0aGUgQ09TRSBtZXNzYWdlIGZhaWxzIHRvDQoNCj4+ ICAgICAgICAgIGRlY29kZSwgdGhlIHNlcnZlciBNQVkgcmVzcG9uZCB3aXRoIGEgNC4wMiBCYWQg T3B0aW9uIGVycm9yDQoNCj4+DQoNCj4+U2VsYW5kZXIsIGV0IGFsLiAgICAgICAgRXhwaXJlcyBK YW51YXJ5IDI3LCAyMDE5ICAgICAgICAgICAgICAgW1BhZ2UgMzZdDQoNCj4+DQoNCj4+SW50ZXJu ZXQtRHJhZnQgICAgICAgICAgICAgICAgICAgT1NDT1JFICAgICAgICAgICAgICAgICAgICAgICAg SnVseSAyMDE4DQoNCj4+DQoNCj4+ICAgICAgICAgIG1lc3NhZ2UuICBUaGUgc2VydmVyIE1BWSBz ZXQgYW4gT3V0ZXIgTWF4LUFnZSBvcHRpb24gd2l0aA0KDQo+PiAgICAgICAgICB2YWx1ZSB6ZXJv LiAgVGhlIGRpYWdub3N0aWMgcGF5bG9hZCBTSE9VTEQgY29udGFpbiB0aGUgc3RyaW5nDQoNCj4+ ICAgICAgICAgICJGYWlsZWQgdG8gZGVjb2RlIENPU0UiLg0KDQo+Pg0KDQo+PiAgICAgICAqICBJ ZiB0aGUgc2VydmVyIGZhaWxzIHRvIHJldHJpZXZlIGEgUmVjaXBpZW50IENvbnRleHQgd2l0aA0K DQo+PiAgICAgICAgICBSZWNpcGllbnQgSUQgY29ycmVzcG9uZGluZyB0byB0aGUgJ2tpZCcgcGFy YW1ldGVyIHJlY2VpdmVkLA0KDQo+PiAgICAgICAgICB0aGUgc2VydmVyIE1BWSByZXNwb25kIHdp dGggYSA0LjAxIFVuYXV0aG9yaXplZCBlcnJvciBtZXNzYWdlLg0KDQo+PiAgICAgICAgICBUaGUg c2VydmVyIE1BWSBzZXQgYW4gT3V0ZXIgTWF4LUFnZSBvcHRpb24gd2l0aCB2YWx1ZSB6ZXJvLg0K DQo+PiAgICAgICAgICBUaGUgZGlhZ25vc3RpYyBwYXlsb2FkIFNIT1VMRCBjb250YWluIHRoZSBz dHJpbmcgIlNlY3VyaXR5DQoNCj4+ICAgICAgICAgIGNvbnRleHQgbm90IGZvdW5kIi4NCg0KPj4N Cg0KPj4gICAzLiAgVmVyaWZ5IHRoZSAnUGFydGlhbCBJVicgcGFyYW1ldGVyIHVzaW5nIHRoZSBS ZXBsYXkgV2luZG93LCBhcw0KDQo+PiAgICAgICBkZXNjcmliZWQgaW4gU2VjdGlvbiA3LjQuDQoN Cj4+PG1nbHQ+DQoNCj4+TXkgdW5kZXJzdGFuZGluZyBpcyB0aGF0IHRoZSBQYXJ0aWFsIElWIHZh bHVlIGhhcyBub3QgYmVlbg0KDQo+PmF1dGhlbnRpY2F0ZWQuDQoNCj4+VGh1cw0KDQo+PkkgYmVs aWV2ZSB0aGlzIHN0ZXAgbW9zdGx5IGNvbnNpc3RzIGluIGRpc2NhcmRpbmcgcGFja2V0cyB3aXRo IGlycmVsZXZhbnQNCg0KPj5QYXJ0aWFsIElWIHZhbHVlcy4gSGVyZSBpcnJlbGV2YW50IGFyZSBs aW1pdGVkIHRvIHJlcGVhdGVkIHNlcXVlbmNlDQoNCj4+bnVtYmVycw0KDQo+PnRoYXQgaXMgdG9v IHNheSBrbm93biByZXBsYXllZCBwYWNrZXRzLiA8bWdsdD4NCg0KPg0KDQo+W0dTOl0gVGhlIHRl cm0g4oCcdmVyaWZ54oCdIHJlZmVycyB0byB0aGUgdGV4dCBpbg0KDQo+c2VjdGlvbiA3LjQgInZl cmlmeSB0aGF0IGEgUGFydGlhbCBJViByZWNlaXZlZCBpbiB0aGUgQ09TRSBvYmplY3QgaGFzIG5v dA0KDQo+YmVlbiByZWNlaXZlZCBiZWZvcmUu4oCdIFdlIGNhbiBjb3B5IG92ZXIgdGhhdCB0ZXh0 IHRvIGF2b2lkDQoNCj5taXN1bmRlcnN0YW5kaW5nOg0KDQo+T0xEDQoNCj4zLiBWZXJpZnkgdGhl ICdQYXJ0aWFsIElWJyBwYXJhbWV0ZXIgdXNpbmcgdGhlIFJlcGxheSBXaW5kb3csIGFzDQoNCj5k ZXNjcmliZWQgaW4gU2VjdGlvbiA3LjQuDQoNCj5ORVcNCg0KPjMuICBWZXJpZnkgdGhhdCB0aGUg J1BhcnRpYWwgSVbigJkgaGFzIG5vdCBiZWVuIHJlY2VpdmVkIGJlZm9yZSB1c2luZyB0aGUNCg0K PlJlcGxheSBXaW5kb3csIGFzIGRlc2NyaWJlZCBpbiBTZWN0aW9uIDcuNC4NCg0KPg0KDQo+DQoN CjxtZ2x0Mj4NCg0KT0sgdGhhbmtzLg0KDQo8L21nbHQyPg0KDQoNCg0KPj4NCg0KPj4gICA0LiAg Q29tcG9zZSB0aGUgQWRkaXRpb25hbCBBdXRoZW50aWNhdGVkIERhdGEsIGFzIGRlc2NyaWJlZCBp bg0KDQo+PiAgICAgICBTZWN0aW9uIDUuNC4NCg0KPj4NCg0KPj4gICA1LiAgQ29tcHV0ZSB0aGUg QUVBRCBub25jZSBmcm9tIHRoZSBSZWNpcGllbnQgSUQsIENvbW1vbiBJViwgYW5kIHRoZQ0KDQo+ PiAgICAgICAnUGFydGlhbCBJVicgcGFyYW1ldGVyLCByZWNlaXZlZCBpbiB0aGUgQ09TRSBPYmpl Y3QuDQoNCj4+DQoNCj4+ICAgNi4gIERlY3J5cHQgdGhlIENPU0Ugb2JqZWN0IHVzaW5nIHRoZSBS ZWNpcGllbnQgS2V5LCBhcyBwZXIgW1JGQzgxNTJdDQoNCj4+ICAgICAgIFNlY3Rpb24gNS4zLiAg KFRoZSBkZWNyeXB0IG9wZXJhdGlvbiBpbmNsdWRlcyB0aGUgdmVyaWZpY2F0aW9uIG9mDQoNCj4+ ICAgICAgIHRoZSBpbnRlZ3JpdHkuKQ0KDQo+Pg0KDQo+PiAgICAgICAqICBJZiBkZWNyeXB0aW9u IGZhaWxzLCB0aGUgc2VydmVyIE1VU1Qgc3RvcCBwcm9jZXNzaW5nIHRoZQ0KDQo+PiAgICAgICAg ICByZXF1ZXN0IGFuZCBNQVkgcmVzcG9uZCB3aXRoIGEgNC4wMCBCYWQgUmVxdWVzdCBlcnJvciBt ZXNzYWdlLg0KDQo+PiAgICAgICAgICBUaGUgc2VydmVyIE1BWSBzZXQgYW4gT3V0ZXIgTWF4LUFn ZSBvcHRpb24gd2l0aCB2YWx1ZSB6ZXJvLg0KDQo+PiAgICAgICAgICBUaGUgZGlhZ25vc3RpYyBw YXlsb2FkIE1BWSBjb250YWluIHRoZSAiRGVjcnlwdGlvbiBmYWlsZWQiDQoNCj4+ICAgICAgICAg IHN0cmluZy4NCg0KPj4NCg0KPj4gICAgICAgKiAgSWYgZGVjcnlwdGlvbiBzdWNjZWVkcywgdXBk YXRlIHRoZSBSZXBsYXkgV2luZG93LCBhcyBkZXNjcmliZWQNCg0KPj4gICAgICAgICAgaW4gU2Vj dGlvbiA3Lg0KDQo+Pg0KDQo+PiAgIDcuICBBZGQgZGVjcnlwdGVkIENvZGUsIG9wdGlvbnMsIGFu ZCBwYXlsb2FkIHRvIHRoZSBkZWNyeXB0ZWQNCg0KPj4gICAgICAgcmVxdWVzdC4gIFRoZSBPU0NP UkUgb3B0aW9uIGlzIHJlbW92ZWQuDQoNCj4+DQoNCj4+ICAgOC4gIFRoZSBkZWNyeXB0ZWQgQ29B UCByZXF1ZXN0IGlzIHByb2Nlc3NlZCBhY2NvcmRpbmcgdG8gW1JGQzcyNTJdLg0KDQo+Pg0KDQo+ PjguMi4xLiAgU3VwcG9ydGluZyBCbG9jay13aXNlDQoNCj4+OC4zLiAgUHJvdGVjdGluZyB0aGUg UmVzcG9uc2UNCg0KPj4NCg0KPj4gICBJZiBhIENvQVAgcmVzcG9uc2UgaXMgZ2VuZXJhdGVkIGlu IHJlc3BvbnNlIHRvIGFuIE9TQ09SRSByZXF1ZXN0LCB0aGUNCg0KPj4gICBzZXJ2ZXIgU0hBTEwg cGVyZm9ybSB0aGUgZm9sbG93aW5nIHN0ZXBzIHRvIGNyZWF0ZSBhbiBPU0NPUkUNCg0KPj4gICBy ZXNwb25zZS4gIE5vdGUgdGhhdCBDb0FQIGVycm9yIHJlc3BvbnNlcyBkZXJpdmVkIGZyb20gQ29B UA0KDQo+PiAgIHByb2Nlc3NpbmcgKHN0ZXAgOCBpbiBTZWN0aW9uIDguMikgYXJlIHByb3RlY3Rl ZCwgYXMgd2VsbCBhcw0KDQo+PiAgIHN1Y2Nlc3NmdWwgQ29BUCByZXNwb25zZXMsIHdoaWxlIHRo ZSBPU0NPUkUgZXJyb3JzIChzdGVwcyAyLCAzLCBhbmQgNg0KDQo+PiAgIGluIFNlY3Rpb24gOC4y KSBkbyBub3QgZm9sbG93IHRoZSBwcm9jZXNzaW5nIGJlbG93LCBidXQgYXJlIHNlbnQgYXMNCg0K Pj4gICBzaW1wbGUgQ29BUCByZXNwb25zZXMsIHdpdGhvdXQgT1NDT1JFIHByb2Nlc3NpbmcuDQoN Cj4+DQoNCj4+ICAgMS4gIFJldHJpZXZlIHRoZSBTZW5kZXIgQ29udGV4dCBpbiB0aGUgU2VjdXJp dHkgQ29udGV4dCBhc3NvY2lhdGVkDQoNCj4+ICAgICAgIHdpdGggdGhlIFRva2VuLg0KDQo+Pg0K DQo+PiAgIDIuICBDb21wb3NlIHRoZSBBZGRpdGlvbmFsIEF1dGhlbnRpY2F0ZWQgRGF0YSBhbmQg dGhlIHBsYWludGV4dCwgYXMNCg0KPj4gICAgICAgZGVzY3JpYmVkIGluIFNlY3Rpb25zIDUuMyBh bmQgNS40Lg0KDQo+Pg0KDQo+PiAgIDMuICBDb21wdXRlIHRoZSBBRUFEIG5vbmNlIGFzIGRlc2Ny aWJlZCBpbiBTZWN0aW9uIDUuMjoNCg0KPj4NCg0KPj4gICAgICAgKiAgRWl0aGVyIHVzZSB0aGUg bm9uY2UgZnJvbSB0aGUgcmVxdWVzdCwgb3INCg0KPj4NCg0KPj4gICAgICAgKiAgRW5jb2RlIHRo ZSBQYXJ0aWFsIElWIChTZW5kZXIgU2VxdWVuY2UgTnVtYmVyIGluIG5ldHdvcmsgYnl0ZQ0KDQo+ PiAgICAgICAgICBvcmRlcikgYW5kIGluY3JlbWVudCB0aGUgU2VuZGVyIFNlcXVlbmNlIE51bWJl ciBieSBvbmUuDQoNCj4+PG1nbHQ+DQoNCj4+QWdhaW4gdGhpcyBpcyB2ZXJ5IHNwZWNpZmljLg0K DQo+Pg0KDQo+PkkgYW0gcmVhZGluZyB0aGF0IFNTTiBpcyBpbmNyZW1lbnRlZCBhZnRlciB0aGUg UGFydGlhbCBJViBpcyBnZW5lcmF0ZWQuDQoNCj4+SXQNCg0KPj5zZWVtcyB0byBtZSB0aGF0IHRo ZSBQYXJ0aWFsIElWIHNob3VsZCByZWZsZWN0IHRoZSBTU04sIGFuZCBhcyBzdWNoIGJlaW5nDQoN Cj4+ZW5jb2RlZCBhZnRlciB0aGUgaW5jcmVtZW50YXRpb24gb2YgdGhlIFNTTi4gPC9tZ2x0Pg0K DQo+DQoNCj5bR1M6XSBUaGUgUGFydGlhbCBJViBkb2VzIHJlZmxlY3QgdGhlIFNTTi4gQXMgdGhl IHByb2NlZHVyZSBpcyBjdXJyZW50bHkNCg0KPmRlc2NyaWJlZCAoaW5pdGlhbGlzZWQgdG8gemVy byBldGMuKSB0aGUgU1NOIG5lZWRzIHRvIGJlIGluY3JlbWVudGVkDQoNCj5hZnRlcg0KDQo+dXNl LCBub3QgYmVmb3JlLiBQbGVhc2Ugc2hvdyBieSBleGFtcGxlIHdoZXJlIHlvdSB0aGluayB0aGlz IGdvZXMgd3JvbmcuDQoNCj4NCg0KPG1nbHQyPg0KDQpJIHdhcyByZWFkaW5nIGl0IHRoZSB3cm9u ZyB3YXksIGJ1dCB3aXQgeW91ciBjb252ZW50aW9uIHRoYXQgaXMgY2xlYXJlci4gSSBhbHNvIGJl bGlldmUgdGhhdCBpbmNyZW1lbnRhdGlvbiBjYW4gYmUgZG9uZSBiZWZvcmUgb3IgYWZ0ZXIgc2Vu ZGluZyB0aGUgcGFja2V0Lg0KDQo8L21nbHQyPg0KDQo+DQoNCj4NCg0KPj4gICAgICAgICAgQ29t cHV0ZSB0aGUgQUVBRCBub25jZSBmcm9tIHRoZSBTZW5kZXIgSUQsIENvbW1vbiBJViwgYW5kDQoN Cj4+ICAgICAgICAgIFBhcnRpYWwgSVYuDQoNCj4+DQoNCj4+ICAgNC4gIEVuY3J5cHQgdGhlIENP U0Ugb2JqZWN0IHVzaW5nIHRoZSBTZW5kZXIgS2V5LiBDb21wcmVzcyB0aGUgQ09TRQ0KDQo+PiAg ICAgICBPYmplY3QgYXMgc3BlY2lmaWVkIGluIFNlY3Rpb24gNi4gIElmIHRoZSBBRUFEIG5vbmNl IHdhcw0KDQo+PiAgICAgICBjb25zdHJ1Y3RlZCBmcm9tIGEgbmV3IFBhcnRpYWwgSVYsIHRoaXMg UGFydGlhbCBJViBNVVNUIGJlDQoNCj4+ICAgICAgIGluY2x1ZGVkIGluIHRoZSBtZXNzYWdlLiAg SWYgdGhlIEFFQUQgbm9uY2UgZnJvbSB0aGUgcmVxdWVzdCB3YXMNCg0KPj4gICAgICAgdXNlZCwg dGhlIFBhcnRpYWwgSVYgTVVTVCBOT1QgYmUgaW5jbHVkZWQgaW4gdGhlIG1lc3NhZ2UuDQoNCj4+ DQoNCj4+ICAgNS4gIEZvcm1hdCB0aGUgT1NDT1JFIG1lc3NhZ2UgYWNjb3JkaW5nIHRvIFNlY3Rp b24gNC4gIFRoZSBPU0NPUkUNCg0KPj4gICAgICAgb3B0aW9uIGlzIGFkZGVkIChzZWUgU2VjdGlv biA0LjEuMikuDQoNCj4+DQoNCj4+OC4zLjEuICBTdXBwb3J0aW5nIE9ic2VydmUNCg0KPj44LjQu ICBWZXJpZnlpbmcgdGhlIFJlc3BvbnNlDQoNCj4+OS4gIFdlYiBMaW5raW5nDQoNCj4+MTAuICBD b0FQLXRvLUNvQVAgRm9yd2FyZGluZyBQcm94eQ0KDQo+PjExLiAgSFRUUCBPcGVyYXRpb25zDQoN Cj4+MTEuMi4gIENvQVAtdG8tSFRUUCBNYXBwaW5nDQoNCj4+MTEuMy4gIEhUVFAtdG8tQ29BUCBN YXBwaW5nDQoNCj4+MTEuNC4gIEhUVFAgRW5kcG9pbnRzDQoNCj4+MTEuNS4gIEV4YW1wbGU6IEhU VFAgQ2xpZW50IGFuZCBDb0FQIFNlcnZlcg0KDQo+PjExLjYuICBFeGFtcGxlOiBDb0FQIENsaWVu dCBhbmQgSFRUUCBTZXJ2ZXINCg0KPj4xMi4gIFNlY3VyaXR5IENvbnNpZGVyYXRpb25zDQoNCj4+ DQoNCj4+ICAgQW4gb3ZlcnZpZXcgb2YgdGhlIHNlY3VyaXR5IHByb3BlcnRpZXMgaXMgZ2l2ZW4g aW4gQXBwZW5kaXggRC4NCg0KPj4NCg0KPj4xMi4xLiAgRW5kLXRvLWVuZCBQcm90ZWN0aW9uDQoN Cj4+DQoNCj4+ICAgSW4gc2NlbmFyaW9zIHdpdGggaW50ZXJtZWRpYXJ5IG5vZGVzIHN1Y2ggYXMg cHJveGllcyBvciBnYXRld2F5cywNCg0KPj4gICB0cmFuc3BvcnQgbGF5ZXIgc2VjdXJpdHkgc3Vj aCBhcyAoRClUTFMgb25seSBwcm90ZWN0cyBkYXRhIGhvcC1ieS0NCg0KPj4gICBob3AuICBBcyBh IGNvbnNlcXVlbmNlLCB0aGUgaW50ZXJtZWRpYXJ5IG5vZGVzIGNhbiByZWFkIGFuZCBtb2RpZnkN Cg0KPj4gICBhbnkgaW5mb3JtYXRpb24uICBUaGUgdHJ1c3QgbW9kZWwgd2hlcmUgYWxsIGludGVy bWVkaWFyeSBub2RlcyBhcmUNCg0KPj4gICBjb25zaWRlcmVkIHRydXN0d29ydGh5IGlzIHByb2Js ZW1hdGljLCBub3Qgb25seSBmcm9tIGEgcHJpdmFjeQ0KDQo+PiAgIHBlcnNwZWN0aXZlLCBidXQg YWxzbyBmcm9tIGEgc2VjdXJpdHkgcGVyc3BlY3RpdmUsIGFzIHRoZQ0KDQo+PiAgIGludGVybWVk aWFyaWVzIGFyZSBmcmVlIHRvIGRlbGV0ZSByZXNvdXJjZXMgb24gc2Vuc29ycyBhbmQgZmFsc2lm eQ0KDQo+PiAgIGNvbW1hbmRzIHRvIGFjdHVhdG9ycyAoc3VjaCBhcyAidW5sb2NrIGRvb3IiLCAi c3RhcnQgZmlyZSBhbGFybSIsDQoNCj4+ICAgInJhaXNlIGJyaWRnZSIpLiAgRXZlbiBpbiB0aGUg cmFyZSBjYXNlcyB3aGVyZSBhbGwgdGhlIG93bmVycyBvZiB0aGUNCg0KPj4gICBpbnRlcm1lZGlh cnkgbm9kZXMgYXJlIGZ1bGx5IHRydXN0ZWQsIGF0dGFja3MgYW5kIGRhdGEgYnJlYWNoZXMgbWFr ZQ0KDQo+PiAgIHN1Y2ggYW4gYXJjaGl0ZWN0dXJlIGJyaXR0bGUuDQoNCj4+DQoNCj4+ICAgKEQp VExTIHByb3RlY3RzIGhvcC1ieS1ob3AgdGhlIGVudGlyZSBtZXNzYWdlLiAgT1NDT1JFIHByb3Rl Y3RzIGVuZC0NCg0KPj4gICB0by1lbmQgYWxsIGluZm9ybWF0aW9uIHRoYXQgaXMgbm90IHJlcXVp cmVkIGZvciBwcm94eSBvcGVyYXRpb25zIChzZWUNCg0KPj4gICBTZWN0aW9uIDQpLiAgKEQpVExT IGFuZCBPU0NPUkUgY2FuIGJlIGNvbWJpbmVkLCB0aGVyZWJ5IGVuYWJsaW5nIGVuZC0NCg0KPj4g ICB0by1lbmQgc2VjdXJpdHkgb2YgdGhlIG1lc3NhZ2UgcGF5bG9hZCwgaW4gY29tYmluYXRpb24g d2l0aCBob3AtYnktDQoNCj4+ICAgaG9wIHByb3RlY3Rpb24gb2YgdGhlIGVudGlyZSBtZXNzYWdl LCBkdXJpbmcgdHJhbnNwb3J0IGJldHdlZW4gZW5kLQ0KDQo+PiAgIHBvaW50IGFuZCBpbnRlcm1l ZGlhcnkgbm9kZS4gIEluIHBhcnRpY3VsYXIgd2hlbiBPU0NPUkUgaXMgdXNlZCB3aXRoDQoNCj4+ DQoNCj4+U2VsYW5kZXIsIGV0IGFsLiAgICAgICAgRXhwaXJlcyBKYW51YXJ5IDI3LCAyMDE5ICAg ICAgICAgICAgICAgW1BhZ2UgNDddDQoNCj4+DQoNCj4+SW50ZXJuZXQtRHJhZnQgICAgICAgICAg ICAgICAgICAgT1NDT1JFICAgICAgICAgICAgICAgICAgICAgICAgSnVseSAyMDE4DQoNCj4+DQoN Cj4+ICAgSFRUUCwgdGhlIGFkZGl0aW9uYWwgVExTIHByb3RlY3Rpb24gb2YgSFRUUCBob3BzIGlz IHJlY29tbWVuZGVkLCBlLmcuDQoNCj4+ICAgYmV0d2VlbiBhbiBIVFRQIGVuZHBvaW50IGFuZCBh IHByb3h5IHRyYW5zbGF0aW5nIGJldHdlZW4gSFRUUCBhbmQNCg0KPj4gICBDb0FQLg0KDQo+Pg0K DQo+PjxtZ2x0Pg0KDQo+Pkkgc2VlIHRoYXQgKEQpVExTIHByb3ZpZGVzIHByaXZhY3kgdG8gT1ND T1JFIGNvbW11bmljYXRpb24sIHdoaWxlIE9TQ09SRQ0KDQo+PnByb3RlY3RzIHRoZSBkYXRhLiA8 L21nbHQ+DQoNCj4NCg0KPg0KDQo+W0dTOl0gSSBkaWRu4oCZdCB1bmRlcnN0YW5kIHRoaXMgY29t bWVudC4gVGhlIGRpZmZlcmVuY2UgaW4gcHJvdGVjdGlvbg0KDQo+YmV0d2VlbiAoRClUTFMgYW5k IE9TQ09SRSBpcyBjZXJ0YWluIENvQVAgaGVhZGVyIGZpZWxkcy4gVGhpcyBoYXMNCg0KPmltcGxp Y2F0aW9ucyBib3RoIG9uIHByaXZhY3kgYW5kICJwcm90ZWN0aW9uIG9mIGRhdGEiIGFzIGlzIGRl c2NyaWJlZCBpbg0KDQo+U2VjdGlvbnMgMTIuOCBhbmQgQXBwZW5kaXggRC4yLiBTaW1pbGFybHks IGlmIHByb3h5IGZ1bmN0aW9uYWxpdHkNCg0KPnJlcXVpcmVzDQoNCj5EVExTIHRvIGJlIHRlcm1p bmF0ZWQgaW4gYSBtaWRkbGVib3ggaXQgbmVpdGhlciBwcm92aWRlcyBwcml2YWN5IG5vciBkYXRh DQoNCj5wcm90ZWN0aW9uIGluIHRoYXQgbm9kZS4NCg0KPg0KDQo+DQoNCjxtZ2x0Mj4NCg0KQWdy ZWUgdGhpcyB3YXMgb25seSBhIGNvbW1lbnQuDQoNCjwvbWdsdDI+DQoNCj4+DQoNCj4+ICAgQXBw bGljYXRpb25zIG5lZWQgdG8gY29uc2lkZXIgdGhhdCBjZXJ0YWluIG1lc3NhZ2UgZmllbGRzIGFu ZA0KDQo+PiAgIG1lc3NhZ2VzIHR5cGVzIGFyZSBub3QgcHJvdGVjdGVkIGVuZC10by1lbmQgYW5k IG1heSBiZSBzcG9vZmVkIG9yDQoNCj4+ICAgbWFuaXB1bGF0ZWQuICBUaGUgY29uc2VxdWVuY2Vz IG9mIHVucHJvdGVjdGVkIG1lc3NhZ2UgZmllbGRzIGFyZQ0KDQo+PiAgIGFuYWx5emVkIGluIEFw cGVuZGl4IEQuNC4NCg0KPj4NCg0KPj4xMi4yLiAgU2VjdXJpdHkgQ29udGV4dCBFc3RhYmxpc2ht ZW50DQoNCj4+DQoNCj4+PG1nbHQ+DQoNCj4+V291bGRuJ3QgYWdyZWVtZW50IHByZWZlcnJlZCB0 byBlc3RhYmxpc2hlZCA/DQoNCj4+PC9tZ2x0Pg0KDQo+DQoNCj5bR1M6XSBJIGRvbuKAmXQga25v dyBpZiB0aGVyZSBpcyBhIHJpZ2h0IHdvcmQgaGVyZS4gSU1ITyDigJxhZ3JlZW1lbnQiIHNlZW1z DQoNCj50byBpbmRpY2F0ZSBzb21lIHNvcnQgb2YgbmVnb3RpYXRpb24sIGJ1dCBpbiBwcmFjdGlj ZSB0aGlzIGNvdWxkIGp1c3QgYmUNCg0KPmENCg0KPnByb3Zpc2lvbmluZyBzdGVwIHdoaWNoIG1h a2VzIHRoYXQgdGVybSBsZXNzIGFwcHJvcHJpYXRlLg0KDQo+DQoNCj4NCg0KPG1nbHQyPg0KDQpJ IGFtIGZpbmUgZWl0aGVyIHdheXMg8J+YiQ0KDQo8L21nbHQyPg0KDQo+ICAgVGhlIHVzZSBvZiBD T1NFX0VuY3J5cHQwIGFuZCBBRUFEIHRvIHByb3RlY3QgbWVzc2FnZXMgYXMgc3BlY2lmaWVkIGlu DQoNCj4gICB0aGlzIGRvY3VtZW50IHJlcXVpcmVzIGFuIGVzdGFibGlzaGVkIHNlY3VyaXR5IGNv bnRleHQuICBUaGUgbWV0aG9kDQoNCj4gICB0byBlc3RhYmxpc2ggdGhlIHNlY3VyaXR5IGNvbnRl eHQgZGVzY3JpYmVkIGluIFNlY3Rpb24gMy4yIGlzIGJhc2VkDQoNCj4gICBvbiBhIGNvbW1vbiBN YXN0ZXIgU2VjcmV0IGFuZCB1bmlxdWUgU2VuZGVyIElEcy4gIFRoZSBuZWNlc3NhcnkgaW5wdXQN Cg0KPiAgIHBhcmFtZXRlcnMgbWF5IGJlIHByZS1lc3RhYmxpc2hlZCBvciBvYnRhaW5lZCB1c2lu ZyBhIGtleQ0KDQo+ICAgZXN0YWJsaXNobWVudCBwcm90b2NvbCBhdWdtZW50ZWQgd2l0aCBlc3Rh Ymxpc2htZW50IG9mIFNlbmRlci8NCg0KPiAgIFJlY2lwaWVudCBJRCBzdWNoIGFzIHRoZSBPU0NP UkUgcHJvZmlsZSBvZiB0aGUgQUNFIGZyYW1ld29yaw0KDQo+ICAgW0ktRC5pZXRmLWFjZS1vc2Nv cmUtcHJvZmlsZV0uICBTdWNoIGEgcHJvY2VkdXJlIG11c3QgZW5zdXJlIHRoYXQgdGhlDQoNCj4g ICByZXF1aXJlbWVudHMgb2YgdGhlIHNlY3VyaXR5IGNvbnRleHQgcGFyYW1ldGVycyBmb3IgdGhl IGludGVuZGVkIHVzZQ0KDQo+ICAgYXJlIGNvbXBsaWVkIHdpdGggKHNlZSBTZWN0aW9uIDMuMykg YW5kIGFsc28gaW4gZXJyb3Igc2l0dWF0aW9ucy4gIEl0DQoNCj4gICBpcyByZWNvbW1lbmRlZCB0 byB1c2UgYSBrZXkgZXN0YWJsaXNobWVudCBwcm90b2NvbCB3aGljaCBwcm92aWRlcw0KDQo+ICAg Zm9yd2FyZCBzZWNyZWN5IHdoZW5ldmVyIHBvc3NpYmxlLiAgQ29uc2lkZXJhdGlvbnMgZm9yIGRl cGxveWluZw0KDQo+ICAgT1NDT1JFIHdpdGggYSBmaXhlZCBNYXN0ZXIgU2VjcmV0IGFyZSBnaXZl biBpbiBBcHBlbmRpeCBCLg0KDQo+DQoNCj4xMi4zLiAgTWFzdGVyIFNlY3JldA0KDQo+DQoNCj4g ICBPU0NPUkUgdXNlcyBIS0RGIFtSRkM1ODY5XSBhbmQgdGhlIGVzdGFibGlzaGVkIGlucHV0IHBh cmFtZXRlcnMgdG8NCg0KPiAgIGRlcml2ZSB0aGUgc2VjdXJpdHkgY29udGV4dC4gIFRoZSByZXF1 aXJlZCBwcm9wZXJ0aWVzIG9mIHRoZSBzZWN1cml0eQ0KDQo+ICAgY29udGV4dCBwYXJhbWV0ZXJz IGFyZSBkaXNjdXNzZWQgaW4gU2VjdGlvbiAzLjMsIGluIHRoaXMgc2VjdGlvbiB3ZQ0KDQo+ICAg Zm9jdXMgb24gdGhlIE1hc3RlciBTZWNyZXQuICBIS0RGIGRlbm90ZXMgaW4gdGhpcyBzcGVjaWZp Y2F0aW9uIHRoZQ0KDQo+ICAgY29tcG9zaXRpb24gb2YgdGhlIGV4cGFuZCBhbmQgZXh0cmFjdCBm dW5jdGlvbnMgYXMgZGVmaW5lZCBpbg0KDQo+ICAgW1JGQzU4NjldIGFuZCB0aGUgTWFzdGVyIFNl Y3JldCBpcyB1c2VkIGFzIElucHV0IEtleSBNYXRlcmlhbCAoSUtNKS4NCg0KPg0KDQo+ICAgSW5m b3JtYWxseSwgSEtERiB0YWtlcyBhcyBzb3VyY2UgYW4gSUtNIGNvbnRhaW5pbmcgc29tZSBnb29k IGFtb3VudA0KDQo+ICAgb2YgcmFuZG9tbmVzcyBidXQgbm90IG5lY2Vzc2FyaWx5IGRpc3RyaWJ1 dGVkIHVuaWZvcm1seSAob3IgZm9yIHdoaWNoDQoNCj4gICBhbiBhdHRhY2tlciBoYXMgc29tZSBw YXJ0aWFsIGtub3dsZWRnZSkgYW5kIGRlcml2ZSBmcm9tIGl0IG9uZSBvcg0KDQo+ICAgbW9yZSBj cnlwdG9ncmFwaGljYWxseSBzdHJvbmcgc2VjcmV0IGtleXMgW1JGQzU4NjldLg0KDQo+PG1nbHQ+ DQoNCj5yZmM0MDg2IG1heSBiZSBhIHVzZWZ1bGwgcmVmZXJlbmNlLg0KDQo+PC9tZ2x0Pg0KDQo+ DQoNCj5bR1M6XSBTdXJlLCBJIGFkZCB0aGF0IHJlZmVyZW5jZSB0byB0aGUgZW5kIG9mIHRoZSBz ZWN0aW9uLg0KDQo+DQoNCjxtZ2x0Mj4NCg0KVGhhbmtzLg0KDQo8L21nbHQyPg0KDQo+DQoNCj4g ICBUaGVyZWZvcmUsIHRoZSBtYWluIHJlcXVpcmVtZW50IGZvciB0aGUgT1NDT1JFIE1hc3RlciBT ZWNyZXQsIGluDQoNCj4gICBhZGRpdGlvbiB0byBiZWluZyBzZWNyZXQsIGlzIHRoYXQgaXQgaXMg aGFzIGEgZ29vZCBhbW91bnQgb2YNCg0KPiAgIHJhbmRvbW5lc3MuICBUaGUgc2VsZWN0ZWQga2V5 IGVzdGFibGlzaG1lbnQgc2NoZW1lcyBtdXN0IGVuc3VyZSB0aGF0DQoNCj4gICB0aGUgbmVjZXNz YXJ5IHByb3BlcnRpZXMgZm9yIHRoZSBNYXN0ZXIgU2VjcmV0IGFyZSBmdWxmaWxsZWQuICBGb3IN Cg0KPiAgIHByZS1zaGFyZWQga2V5IGRlcGxveW1lbnRzIGFuZCBrZXkgdHJhbnNwb3J0IHNvbHV0 aW9ucyBzdWNoIGFzDQoNCj4gICBbSS1ELmlldGYtYWNlLW9zY29yZS1wcm9maWxlXSwgdGhlIE1h c3RlciBTZWNyZXQgY2FuIGJlIGdlbmVyYXRlZA0KDQo+ICAgb2ZmbGluZSB1c2luZyBhIGdvb2Qg cmFuZG9tIG51bWJlciBnZW5lcmF0b3IuDQoNCj4NCg0KPlNlbGFuZGVyLCBldCBhbC4gICAgICAg IEV4cGlyZXMgSmFudWFyeSAyNywgMjAxOSAgICAgICAgICAgICAgIFtQYWdlIDQ4XQ0KDQo+DQoN Cj5JbnRlcm5ldC1EcmFmdCAgICAgICAgICAgICAgICAgICBPU0NPUkUgICAgICAgICAgICAgICAg ICAgICAgICBKdWx5IDIwMTgNCg0KPg0KDQo+MTIuNC4gIFJlcGxheSBQcm90ZWN0aW9uDQoNCj4N Cg0KPiAgIFJlcGxheSBhdHRhY2tzIG5lZWQgdG8gYmUgY29uc2lkZXJlZCBpbiBkaWZmZXJlbnQg cGFydHMgb2YgdGhlDQoNCj4gICBpbXBsZW1lbnRhdGlvbi4gIE1vc3QgQUVBRCBhbGdvcml0aG1z IHJlcXVpcmUgYSB1bmlxdWUgbm9uY2UgZm9yIGVhY2gNCg0KPiAgIG1lc3NhZ2UsIGZvciB3aGlj aCB0aGUgc2VuZGVyIHNlcXVlbmNlIG51bWJlcnMgaW4gdGhlIENPU0UgbWVzc2FnZQ0KDQo+ICAg ZmllbGQgJ1BhcnRpYWwgSVYnIGlzIHVzZWQuICBJZiB0aGUgcmVjaXBpZW50IGFjY2VwdHMgYW55 IHNlcXVlbmNlDQoNCj4gICBudW1iZXIgbGFyZ2VyIHRoYW4gdGhlIG9uZSBwcmV2aW91c2x5IHJl Y2VpdmVkLCB0aGVuIHRoZSBwcm9ibGVtIG9mDQoNCj4gICBzZXF1ZW5jZSBudW1iZXIgc3luY2hy b25pemF0aW9uIGlzIGF2b2lkZWQuDQoNCj48bWdsdD4NCg0KPkRvIHdlIGhhdmUgY2FzZXMgd2hl cmUgdGhlIFBhcnRpYWwgSVYgcmVwcmVzZW50cyB0aGUgTFNCIG9mIHRoZSBTU04gPyBJZg0KDQo+ dGhhdA0KDQo+aXMgdGhlIGNhc2UsIGlmIG1vcmUgdGhlbiBsZW4oUGFydGlhbCBJVikgcGFja2V0 IGhhdmUgYmVlbiBkcm9wcGVkLiBUaGUNCg0KPnR3bw0KDQo+cGVlcnMgbWF5IGhhdmUgaGFyZCB0 aW1lIHRvIHJlc3luY2hyb25pemUgdGhlaXIgU1NOLiBUaGlzIG1heSBoYXBwZW4gaW4gYQ0KDQo+ Y29tbXVuaWNhdGlvbiB3aXRoIGEgbG90IG9mIG5vdGlmaWNhdGlvbnMuIEluIGEgcXVlcnktcmVz cG9uc2UgcGFyYWRpZ20sDQoNCj50aGUNCg0KPnNlbmRlciBtYXkgaGF2ZSBzb21lIGhpbnRzIHdo ZW4gdGhlIHBhY2tldCBoYXMgYmVlbiByZWNlaWV2ZWQgb3Igbm90Lg0KDQo+PC9tZ2x0Pg0KDQo+ DQoNCj4NCg0KPltHUzpdICBJIGRpZG7igJl0IHJlYWxseSB1bmRlcnN0YW5kIHRoZSBpc3N1ZS4g U2VjdGlvbiA1IHN0YXRlcyB0aGF0IHRoZQ0KDQo+cGFydGlhbCBJViAiaXMgc2V0IHRvDQoNCj50 aGUgU2VuZGVyIFNlcXVlbmNlIE51bWJlci4gQWxsIGxlYWRpbmcgYnl0ZXMgb2YgdmFsdWUgemVy bw0KDQo+U0hBTEwgYmUgcmVtb3ZlZCB3aGVuIGVuY29kaW5nIHRoZSBQYXJ0aWFsIElWLCBleGNl cHQgaW4gdGhlIGNhc2Ugb2YNCg0KPlBhcnRpYWwgSVYgb2YgdmFsdWUgMCB3aGljaCBpcyBlbmNv ZGVkIHRvIHRoZSBieXRlIHN0cmluZyAweDAwLuKAnQ0KDQo+U28gdGhlIG9ubHkgdGhpbmcgdHJ1 bmNhdGVkIGlzIHBvdGVudGlhbGx5IHRoZSBsZWFkaW5nIHplcm9zLCBidXQgbm90IGluDQoNCj5h bGwgY2FzZXMuIERvZXMgdGhhdCBhbnN3ZXIgdGhlIHF1ZXN0aW9uPyBJcyB0aGUgaXNzdWUgc3Rp bGwgcmVsZXZhbnQ/DQoNCj4NCg0KPG1nbHQyPg0KDQpJZiBTU04gPT0gUGFydGlhbCBJViwgbXkg Y29tbWVudCBpcyBpcnJlbGV2YW50LCB0aGVuLg0KDQo8L21nbHQyPg0KDQo+DQoNCj4NCg0KPg0K DQo+V2l0aCByZWxpYWJsZSB0cmFuc3BvcnQsDQoNCj4gICBpdCBtYXkgYmUgZGVmaW5lZCB0aGF0 IG9ubHkgbWVzc2FnZXMgd2l0aCBzZXF1ZW5jZSBudW1iZXIgd2hpY2ggYXJlDQoNCj4gICBlcXVh bCB0byBwcmV2aW91cyBzZXF1ZW5jZSBudW1iZXIgKyAxIGFyZSBhY2NlcHRlZC4gIEFuIGFkdmVy c2FyeSBtYXkNCg0KPiAgIHRyeSB0byBpbmR1Y2UgYSBkZXZpY2UgcmVib290IGZvciB0aGUgcHVy cG9zZSBvZiByZXBsYXlpbmcgYSBtZXNzYWdlDQoNCj4gICAoc2VlIFNlY3Rpb24gNy41KS4NCg0K Pg0KDQo+ICAgTm90ZSB0aGF0IHNoYXJpbmcgYSBzZWN1cml0eSBjb250ZXh0IGJldHdlZW4gc2Vy dmVycyBtYXkgb3BlbiB1cCBmb3INCg0KPiAgIHJlcGxheSBhdHRhY2tzLCBmb3IgZXhhbXBsZSBp ZiB0aGUgcmVwbGF5IHdpbmRvd3MgYXJlIG5vdA0KDQo+ICAgc3luY2hyb25pemVkLg0KDQo+DQoN Cj4xMi41LiAgQ2xpZW50IEFsaXZlbmVzcw0KDQo+DQoNCj4gICBBIHZlcmlmaWVkIE9TQ09SRSBy ZXF1ZXN0IGVuYWJsZXMgdGhlIHNlcnZlciB0byB2ZXJpZnkgdGhlIGlkZW50aXR5DQoNCj4gICBv ZiB0aGUgZW50aXR5IHdobyBnZW5lcmF0ZWQgdGhlIG1lc3NhZ2UuICBIb3dldmVyLCBpdCBkb2Vz IG5vdCB2ZXJpZnkNCg0KPiAgIHRoYXQgdGhlIGNsaWVudCBpcyBjdXJyZW50bHkgaW52b2x2ZWQg aW4gdGhlIGNvbW11bmljYXRpb24sIHNpbmNlIHRoZQ0KDQo+ICAgbWVzc2FnZSBtYXkgYmUgYSBk ZWxheWVkIGRlbGl2ZXJ5IG9mIGEgcHJldmlvdXNseSBnZW5lcmF0ZWQgcmVxdWVzdA0KDQo+ICAg d2hpY2ggbm93IHJlYWNoZXMgdGhlIHNlcnZlci4gIFRvIHZlcmlmeSB0aGUgYWxpdmVuZXNzIG9m IHRoZSBjbGllbnQNCg0KPiAgIHRoZSBzZXJ2ZXIgbWF5IHVzZSB0aGUgRWNobyBvcHRpb24gaW4g dGhlIHJlc3BvbnNlIHRvIGEgcmVxdWVzdCBmcm9tDQoNCj4gICB0aGUgY2xpZW50IChzZWUgW0kt RC5pZXRmLWNvcmUtZWNoby1yZXF1ZXN0LXRhZ10pLg0KDQo+DQoNCj4xMi42LiAgQ3J5cHRvZ3Jh cGhpYyBDb25zaWRlcmF0aW9ucw0KDQo+DQoNCj4gICBUaGUgbWF4aW11bSBzZW5kZXIgc2VxdWVu Y2UgbnVtYmVyIGlzIGRlcGVuZGVudCBvbiB0aGUgQUVBRA0KDQo+ICAgYWxnb3JpdGhtLiAgVGhl IG1heGltdW0gc2VuZGVyIHNlcXVlbmNlIG51bWJlciBpcyAyXjQwIC0gMSwgb3IgYW55DQoNCj4g ICBhbGdvcml0aG0gc3BlY2lmaWMgbG93ZXIgbGltaXQsIGFmdGVyIHdoaWNoIGEgbmV3IHNlY3Vy aXR5IGNvbnRleHQNCg0KPiAgIG11c3QgYmUgZ2VuZXJhdGVkLiAgVGhlIG1lY2hhbmlzbSB0byBi dWlsZCB0aGUgbm9uY2UgKFNlY3Rpb24gNS4yKQ0KDQo+ICAgYXNzdW1lcyB0aGF0IHRoZSBub25j ZSBpcyBhdCBsZWFzdCA1NiBiaXRzLCBhbmQgdGhlIFBhcnRpYWwgSVYgaXMgYXQNCg0KPiAgIG1v c3QgNDAgYml0cy4gIFRoZSBtYW5kYXRvcnktdG8taW1wbGVtZW50IEFFQUQgYWxnb3JpdGhtIEFF Uy1DQ00tDQoNCj4gICAxNi02NC0xMjggaXMgc2VsZWN0ZWQgZm9yIGNvbXBhdGliaWxpdHkgd2l0 aCBDQ00qLg0KDQo+DQoNCj4gICBJbiBvcmRlciB0byBwcmV2ZW50IGNyeXB0YW5hbHlzaXMgd2hl biB0aGUgc2FtZSBwbGFpbnRleHQgaXMNCg0KPiAgIHJlcGVhdGVkbHkgZW5jcnlwdGVkIGJ5IG1h bnkgZGlmZmVyZW50IHVzZXJzIHdpdGggZGlzdGluY3Qga2V5cywgdGhlDQoNCj4gICBub25jZSBp cyBmb3JtZWQgYnkgbWl4aW5nIHRoZSBzZXF1ZW5jZSBudW1iZXIgd2l0aCBhIHNlY3JldCBwZXIt DQoNCj4gICBjb250ZXh0IGluaXRpYWxpemF0aW9uIHZlY3RvciAoQ29tbW9uIElWKSBkZXJpdmVk IGFsb25nIHdpdGggdGhlIGtleXMNCg0KPiAgIChzZWUgU2VjdGlvbiAzLjEgb2YgW1JGQzgxNTJd KSwgYW5kIGJ5IHVzaW5nIGEgTWFzdGVyIFNhbHQgaW4gdGhlIGtleQ0KDQo+ICAgZGVyaXZhdGlv biAoc2VlIFtNRjAwXSBmb3IgYW4gb3ZlcnZpZXcpLiAgVGhlIE1hc3RlciBTZWNyZXQsIFNlbmRl cg0KDQo+ICAgS2V5LCBSZWNpcGllbnQgS2V5LCBhbmQgQ29tbW9uIElWIG11c3QgYmUgc2VjcmV0 LCB0aGUgcmVzdCBvZiB0aGUNCg0KPiAgIHBhcmFtZXRlcnMgbWF5IGJlIHB1YmxpYy4gIFRoZSBN YXN0ZXIgU2VjcmV0IG11c3QgaGF2ZSBhIGdvb2QgYW1vdW50DQoNCj4gICBvZiByYW5kb21uZXNz IChzZWUgU2VjdGlvbiAxMi4zKS4NCg0KPg0KDQo+U2VsYW5kZXIsIGV0IGFsLiAgICAgICAgRXhw aXJlcyBKYW51YXJ5IDI3LCAyMDE5ICAgICAgICAgICAgICAgW1BhZ2UgNDldDQoNCj4NCg0KPklu dGVybmV0LURyYWZ0ICAgICAgICAgICAgICAgICAgIE9TQ09SRSAgICAgICAgICAgICAgICAgICAg ICAgIEp1bHkgMjAxOA0KDQo+DQoNCj4xMi43LiAgTWVzc2FnZSBTZWdtZW50YXRpb24NCg0KPg0K DQo+ICAgVGhlIElubmVyIEJsb2NrIG9wdGlvbnMgZW5hYmxlIHRoZSBzZW5kZXIgdG8gc3BsaXQg bGFyZ2UgbWVzc2FnZXMNCg0KPiAgIGludG8gT1NDT1JFLXByb3RlY3RlZCBibG9ja3Mgc3VjaCB0 aGF0IHRoZSByZWNlaXZpbmcgZW5kcG9pbnQgY2FuDQoNCj4gICB2ZXJpZnkgYmxvY2tzIGJlZm9y ZSBoYXZpbmcgcmVjZWl2ZWQgdGhlIGNvbXBsZXRlIG1lc3NhZ2UuICBUaGUgT3V0ZXINCg0KPiAg IEJsb2NrIG9wdGlvbnMgYWxsb3cgZm9yIGFyYml0cmFyeSBwcm94eSBmcmFnbWVudGF0aW9uIG9w ZXJhdGlvbnMgdGhhdA0KDQo+ICAgY2Fubm90IGJlIHZlcmlmaWVkIGJ5IHRoZSBlbmRwb2ludHMs IGJ1dCBjYW4gYnkgcG9saWN5IGJlIHJlc3RyaWN0ZWQNCg0KPiAgIGluIHNpemUgc2luY2UgdGhl IElubmVyIEJsb2NrIG9wdGlvbnMgYWxsb3cgZm9yIHNlY3VyZSBmcmFnbWVudGF0aW9uDQoNCj4g ICBvZiB2ZXJ5IGxhcmdlIG1lc3NhZ2VzLiAgQSBtYXhpbXVtIG1lc3NhZ2Ugc2l6ZSAoYWJvdmUg d2hpY2ggdGhlDQoNCj4gICBzZW5kaW5nIGVuZHBvaW50IGZyYWdtZW50cyB0aGUgbWVzc2FnZSBh bmQgdGhlIHJlY2VpdmluZyBlbmRwb2ludA0KDQo+ICAgZGlzY2FyZHMgdGhlIG1lc3NhZ2UsIGlm IGNvbXBseWluZyB0byB0aGUgcG9saWN5KSBtYXkgYmUgb2J0YWluZWQgYXMNCg0KPiAgIHBhcnQg b2Ygbm9ybWFsIHJlc291cmNlIGRpc2NvdmVyeS4NCg0KPg0KDQo+MTIuOC4gIFByaXZhY3kgQ29u c2lkZXJhdGlvbnMNCg0KPg0KDQo+ICAgUHJpdmFjeSB0aHJlYXRzIGV4ZWN1dGVkIHRocm91Z2gg aW50ZXJtZWRpYXJ5IG5vZGVzIGFyZSBjb25zaWRlcmFibHkNCg0KPiAgIHJlZHVjZWQgYnkgbWVh bnMgb2YgT1NDT1JFLiAgRW5kLXRvLWVuZCBpbnRlZ3JpdHkgcHJvdGVjdGlvbiBhbmQNCg0KPiAg IGVuY3J5cHRpb24gb2YgdGhlIG1lc3NhZ2UgcGF5bG9hZCBhbmQgYWxsIG9wdGlvbnMgdGhhdCBh cmUgbm90IHVzZWQNCg0KPiAgIGZvciBwcm94eSBvcGVyYXRpb25zLCBwcm92aWRlIG1pdGlnYXRp b24gYWdhaW5zdCBhdHRhY2tzIG9uIHNlbnNvcg0KDQo+ICAgYW5kIGFjdHVhdG9yIGNvbW11bmlj YXRpb24sIHdoaWNoIG1heSBoYXZlIGEgZGlyZWN0IGltcGFjdCBvbiB0aGUNCg0KPiAgIHBlcnNv bmFsIHNwaGVyZS4NCg0KPg0KDQo+ICAgVGhlIHVucHJvdGVjdGVkIG9wdGlvbnMgKEZpZ3VyZSA1 KSBtYXkgcmV2ZWFsIHByaXZhY3kgc2Vuc2l0aXZlDQoNCj4gICBpbmZvcm1hdGlvbiwgc2VlIEFw cGVuZGl4IEQuNC4gIENvQVAgaGVhZGVycyBzZW50IGluIHBsYWludGV4dCBhbGxvdywNCg0KPiAg IGZvciBleGFtcGxlLCBtYXRjaGluZyBvZiBDT04gYW5kIEFDSyAoQ29BUCBNZXNzYWdlIElkZW50 aWZpZXIpLA0KDQo+ICAgbWF0Y2hpbmcgb2YgcmVxdWVzdCBhbmQgcmVzcG9uc2VzIChUb2tlbikg YW5kIHRyYWZmaWMgYW5hbHlzaXMuDQoNCj4gICBPU0NPUkUgZG9lcyBub3QgcHJvdmlkZSBwcm90 ZWN0aW9uIGZvciBIVFRQIGhlYWRlciBmaWVsZHMgd2hpY2ggYXJlDQoNCj4gICBub3QgYm90aCBD b0FQLW1hcHBhYmxlIGFuZCBjbGFzcyBFLiAgVGhlIEhUVFAgbWVzc2FnZSBmaWVsZHMgd2hpY2gN Cg0KPiAgIGFyZSB2aXNpYmxlIHRvIG9uLXBhdGggZW50aXR5IGFyZSBvbmx5IHVzZWQgZm9yIHRo ZSBwdXJwb3NlIG9mDQoNCj4gICB0cmFuc3BvcnRpbmcgdGhlIE9TQ09SRSBtZXNzYWdlLCB3aGVy ZWFzIHRoZSBhcHBsaWNhdGlvbiBsYXllcg0KDQo+ICAgbWVzc2FnZSBpcyBlbmNvZGVkIGluIENv QVAgYW5kIGVuY3J5cHRlZC4NCg0KPg0KDQo+ICAgQ09TRSBtZXNzYWdlIGZpZWxkcywgaS5lLiB0 aGUgT1NDT1JFIG9wdGlvbiwgbWF5IHJldmVhbCBpbmZvcm1hdGlvbg0KDQo+ICAgYWJvdXQgdGhl IGNvbW11bmljYXRpbmcgZW5kcG9pbnRzLiAgRS5nLiAna2lkJyBhbmQgJ2tpZCBjb250ZXh0JywN Cg0KPiAgIHdoaWNoIGFyZSBpbnRlbmRlZCB0byBoZWxwIHRoZSBzZXJ2ZXIgZmluZCB0aGUgcmln aHQgY29udGV4dCwgbWF5DQoNCj4gICByZXZlYWwgaW5mb3JtYXRpb24gYWJvdXQgdGhlIGNsaWVu dC4gIFRyYWNraW5nICdraWQnIGFuZCAna2lkDQoNCj4gICBjb250ZXh0JyB0byBvbmUgc2VydmVy IG1heSBiZSB1c2VkIGZvciBjb3JyZWxhdGluZyByZXF1ZXN0cyBmcm9tIG9uZQ0KDQo+ICAgY2xp ZW50Lg0KDQo+DQoNCj4gICBVbnByb3RlY3RlZCBlcnJvciBtZXNzYWdlcyByZXZlYWwgaW5mb3Jt YXRpb24gYWJvdXQgdGhlIHNlY3VyaXR5DQoNCj4gICBzdGF0ZSBpbiB0aGUgY29tbXVuaWNhdGlv biBiZXR3ZWVuIHRoZSBlbmRwb2ludHMuICBVbnByb3RlY3RlZA0KDQo+ICAgc2lnbmFsaW5nIG1l c3NhZ2VzIHJldmVhbCBpbmZvcm1hdGlvbiBhYm91dCB0aGUgcmVsaWFibGUgdHJhbnNwb3J0DQoN Cj4gICB1c2VkIG9uIGEgbGVnIG9mIHRoZSBwYXRoLiAgVXNpbmcgdGhlIG1lY2hhbmlzbXMgZGVz Y3JpYmVkIGluDQoNCj4gICBTZWN0aW9uIDcuNSBtYXkgcmV2ZWFsIHdoZW4gYSBkZXZpY2UgZ29l cyB0aHJvdWdoIGEgcmVib290LiAgVGhpcyBjYW4NCg0KPiAgIGJlIG1pdGlnYXRlZCBieSB0aGUg ZGV2aWNlIHN0b3JpbmcgdGhlIHByZWNpc2Ugc3RhdGUgb2Ygc2VuZGVyDQoNCj4gICBzZXF1ZW5j ZSBudW1iZXIgYW5kIHJlcGxheSB3aW5kb3cgb24gYSBjbGVhbiBzaHV0ZG93bi4NCg0KPg0KDQo+ U2VsYW5kZXIsIGV0IGFsLiAgICAgICAgRXhwaXJlcyBKYW51YXJ5IDI3LCAyMDE5ICAgICAgICAg ICAgICAgW1BhZ2UgNTBdDQoNCj4NCg0KPkludGVybmV0LURyYWZ0ICAgICAgICAgICAgICAgICAg IE9TQ09SRSAgICAgICAgICAgICAgICAgICAgICAgIEp1bHkgMjAxOA0KDQo+DQoNCj4gICBUaGUg bGVuZ3RoIG9mIG1lc3NhZ2UgZmllbGRzIGNhbiByZXZlYWwgaW5mb3JtYXRpb24gYWJvdXQgdGhl DQoNCj4gICBtZXNzYWdlLiAgQXBwbGljYXRpb25zIG1heSB1c2UgYSBwYWRkaW5nIHNjaGVtZSB0 byBwcm90ZWN0IGFnYWluc3QNCg0KPiAgIHRyYWZmaWMgYW5hbHlzaXMuDQoNCj4NCg0KPjEzLiAg SUFOQSBDb25zaWRlcmF0aW9ucw0KDQo+MTQuICBSZWZlcmVuY2VzDQoNCj5BcHBlbmRpeCBBLiAg U2NlbmFyaW8gRXhhbXBsZXMNCg0KPkFwcGVuZGl4IEIuICBEZXBsb3ltZW50IEV4YW1wbGVzDQoN Cj5CLjEuICBNYXN0ZXIgU2VjcmV0IFVzZWQgT25jZQ0KDQo+DQoNCj4gICBBbiBhcHBsaWNhdGlv biBtYXkgZGVyaXZlIGEgc2VjdXJpdHkgY29udGV4dCBvbmNlIGFuZCB1c2UgaXQgZm9yIHRoZQ0K DQo+ICAgbGlmZXRpbWUgb2YgYSBkZXZpY2UuICBGb3IgbWFueSBJb1QgZGVwbG95bWVudHMsIGEg MTI4IGJpdCB1bmlmb3JtbHkNCg0KPiAgIHJhbmRvbSBNYXN0ZXIgS2V5IGlzIHN1ZmZpY2llbnQg Zm9yIGVuY3J5cHRpbmcgYWxsIGRhdGEgZXhjaGFuZ2VkDQoNCj4gICB3aXRoIHRoZSBJb1QgZGV2 aWNlLiAgVGhpcyBzcGVjaWZpY2F0aW9uIGRlc2NyaWJlcyB0ZWNobmlxdWVzIGZvcg0KDQo+ICAg cGVyc2lzdGVudCBzdG9yYWdlIG9mIHRoZSBzZWN1cml0eSBjb250ZXh0IGFuZCBzeW5jaHJvbml6 YXRpb24gb2YNCg0KPiAgIHNlcXVlbmNlIG51bWJlcnMgKHNlZSBTZWN0aW9uIDcuNSkgdG8gZW5z dXJlIHRoYXQgc2VjdXJpdHkgaXMNCg0KPiAgIG1haW50YWluZWQgd2l0aCB0aGUgZXhpc3Rpbmcg c2VjdXJpdHkgY29udGV4dC4NCg0KPg0KDQo+Qi4yLiAgTWFzdGVyIFNlY3JldCBVc2VkIE11bHRp cGxlIFRpbWVzDQoNCj4NCg0KPiAgIFNlY3Rpb24gMTIuMiByZWNvbW1lbmRzIHRoZSB1c2Ugb2Yg YSBrZXkgZXN0YWJsaXNobWVudCBwcm90b2NvbA0KDQo+ICAgcHJvdmlkaW5nIGZvcndhcmQgc2Vj cmVjeSBvZiB0aGUgTWFzdGVyIFNlY3JldC4NCg0KPjxtZ2x0Pg0KDQo+SSBiZWxpZXZlIHRoYXQg Zm9yd2FyZCBzZWNyZWN5IGlzIGEgcHJvcGVydHkgYXNzb2NpYXRlZCB0byB0aGUga2V4LiBJIGFt DQoNCj5yZWFkaW5nIGl0IGFzIGFzc29jaWF0ZWQgdG8gdGhlIE1hc3RlciBTZWNyZXQuIFRoYXQg c2FpZCwgRW5nbGlzaCBpcyBub3QNCg0KPm15DQoNCj5uYXRpdmUgbGFuZ3VhZ2UuIDwvbWdsdD4N Cg0KPltHUzpdIENvcnJlY3QuIE5ldyBmb3JtdWxhdGlvbjoNCg0KPk5FVw0KDQo+U2VjdGlvbiAx Mi4yIHJlY29tbWVuZHMgdGhhdCB0aGUgTWFzdGVyIFNlY3JldCBpcyBvYnRhaW5lZCBmcm9tIGEg a2V5DQoNCj5lc3RhYmxpc2htZW50IHByb3RvY29sDQoNCj4gICBwcm92aWRpbmcgZm9yd2FyZCBz ZWNyZWN5Lg0KDQo+DQoNCj4NCg0KPG1nbHQyPg0KDQpUaGFua3MuDQoNCjwvbWdsdDI+DQoNCj4N Cg0KPiAgIEFuIGFwcGxpY2F0aW9uIHdoaWNoIGRvZXMgbm90IHJlcXVpcmUgZm9yd2FyZCBzZWNy ZWN5IG1heSBhbGxvdw0KDQo+ICAgbXVsdGlwbGUgc2VjdXJpdHkgY29udGV4dHMgdG8gYmUgZGVy aXZlZCBmcm9tIG9uZSBNYXN0ZXIgU2VjcmV0LiAgVGhlDQoNCj4gICByZXF1aXJlbWVudHMgb24g dGhlIHNlY3VyaXR5IGNvbnRleHQgcGFyYW1ldGVycyBtdXN0IGJlIGZ1bGZpbGxlZA0KDQo+ICAg KFNlY3Rpb24gMy4zKSBldmVuIGlmIHRoZSBjbGllbnQgb3Igc2VydmVyIGlzIHJlYm9vdGVkLA0K DQo+ICAgcmVjb21taXNzaW9uZWQgb3IgaW4gZXJyb3IgY2FzZXMuDQoNCj4NCg0KPiAgIFRoaXMg c2VjdGlvbiBnaXZlcyBhbiBleGFtcGxlIG9mIGFuIGFwcGxpY2F0aW9uIGFsbG93aW5nIG5ldyBz ZWN1cml0eQ0KDQo+ICAgY29udGV4dHMgdG8gYmUgZGVyaXZlZCBmcm9tIGlucHV0IHBhcmFtZXRl cnMgcHJlLWVzdGFibGlzaGVkIGJldHdlZW4NCg0KPiAgIGNsaWVudCBhbmQgc2VydmVyIGZvciB0 aGlzIHB1cnBvc2U6IGluIHBhcnRpY3VsYXIgTWFzdGVyIFNlY3JldCwNCg0KPiAgIE1hc3RlciBT YWx0IGFuZCBTZW5kZXIvUmVjaXBpZW50IElEIChzZWUgU2VjdGlvbiAzLjIpOg0KDQo+DQoNCj4g ICBvICBUaGUgY2xpZW50IGdlbmVyYXRlcyBhbiBJRCBDb250ZXh0IHdoaWNoIGhhcyBwcmV2aW91 c2x5IG5vdCBiZWVuDQoNCj4gICAgICB1c2VkIHdpdGggdGhlIHByZS1lc3RhYmxpc2hlZCBpbnB1 dCBwYXJhbWV0ZXJzIGFuZCBkZXJpdmVzIGEgbmV3DQoNCj4gICAgICBzZWN1cml0eSBjb250ZXh0 LiAgSUQgY29udGV4dCBtYXkgYmUgcHNldWRvLXJhbmRvbSBhbmQgbGFyZ2UgZm9yDQoNCj4NCg0K PlNlbGFuZGVyLCBldCBhbC4gICAgICAgIEV4cGlyZXMgSmFudWFyeSAyNywgMjAxOSAgICAgICAg ICAgICAgIFtQYWdlIDYyXQ0KDQo+DQoNCj5JbnRlcm5ldC1EcmFmdCAgICAgICAgICAgICAgICAg ICBPU0NPUkUgICAgICAgICAgICAgICAgICAgICAgICBKdWx5IDIwMTgNCg0KPg0KDQo+ICAgICAg c3RvY2hhc3RpYyB1bmlxdWVuZXNzLCBidXQgY2FyZSBtdXN0IGJlIHRha2VuIGUuZy4gdG8gYXZv aWQgcmUtdXNlDQoNCj4gICAgICBvZiB0aGUgc2FtZSBzZWVkIGZvciByYW5kb20gbnVtYmVyIGdl bmVyYXRpb24uICBVc2luZyB0aGlzIG5ldw0KDQo+ICAgICAgc2VjdXJpdHkgY29udGV4dCwgdGhl IGNsaWVudCBnZW5lcmF0ZXMgYW4gT1NDT1JFIHJlcXVlc3Qgd2l0aCAoa2lkDQoNCj4gICAgICBj b250ZXh0LCBraWQpID0gKElEIENvbnRleHQsIFNlbmRlciBJRCkgaW4gdGhlIE9TQ09SRSBvcHRp b24uDQoNCj4NCg0KPiAgIG8gIFRoZSBzZXJ2ZXIgcmVjZWl2aW5nIHN1Y2ggYW4gT1NDT1JFIHJl cXVlc3Qgd2l0aCBraWQgbWF0Y2hpbmcgdGhlDQoNCj4gICAgICBSZWNpcGllbnQgSUQgb2YgcHJl LWVzdGFibGlzaGVkIGlucHV0IHBhcmFtZXRlcnMsIGJ1dCB3aXRoIGEgbmV3DQoNCj4gICAgICBr aWQgY29udGV4dCwgZGVyaXZlcyB0aGUgc2VjdXJpdHkgY29udGV4dCB1c2luZyBJRCBDb250ZXh0 ID0ga2lkDQoNCj4gICAgICBjb250ZXh0LiAgSWYgdGhlIG1lc3NhZ2UgdmVyaWZpZXMgdGhlbiBh IG5ldyBzZWN1cml0eSBjb250ZXh0IHdpdGgNCg0KPiAgICAgIHRoaXMgSUQgQ29udGV4dCBpcyBz dG9yZWQgaW4gdGhlIHNlcnZlciwgYW5kIHVzZWQgaW4gdGhlIHJlc3BvbnNlLg0KDQo+ICAgICAg RnVydGhlciByZXF1ZXN0cyB3aXRoIHRoZSBzYW1lIChraWQgY29udGV4dCwga2lkKSBhcmUgdmVy aWZpZWQNCg0KPiAgICAgIHdpdGggdGhpcyBzZWN1cml0eSBjb250ZXh0Lg0KDQo+DQoNCj4gICBB cyBhbiBhbHRlcm5hdGl2ZSBwcm9jZWR1cmUgdG8gcmVkdWNlIHRoZSBzdWJzZXF1ZW50IG92ZXJo ZWFkIGluDQoNCj4gICByZXF1ZXN0cyBkdWUgdG8ga2lkIGNvbnRleHQsIHRoZSB2ZXJpZmljYXRp b24gb2YgYSBtZXNzYWdlIHdpdGggYSBuZXcNCg0KPiAgIElEIENvbnRleHQgbWF5IHRyaWdnZXIg dGhlIHNlcnZlciB0byBnZW5lcmF0ZSBhIG5ldyBraWQgdG8gcmVwbGFjZQ0KDQo+ICAgdGhlIENs aWVudCBTZW5kZXIgSUQgaW4gZnV0dXJlIHJlcXVlc3RzLiAgQSBjbGllbnQgbWF5IGUuZy4gaW5k aWNhdGUNCg0KPiAgIHN1cHBvcnQgZm9yIHN1Y2ggYSBwcm9jZWR1cmUgYnkgcmVxdWVzdGluZyBh IHNwZWNpYWwgd2VsbC1rbm93biBVUkkNCg0KPiAgIGFuZCByZWNlaXZlIHRoZSBuZXcga2lkIGlu IHRoZSByZXNwb25zZSwgd2hpY2ggdG9nZXRoZXIgd2l0aCB0aGUNCg0KPiAgIGlucHV0IHBhcmFt ZXRlcnMgYW5kIHRoZSBJRCBjb250ZXh0IGlzIHVzZWQgdG8gZGVyaXZlIHRoZSBuZXcNCg0KPiAg IHNlY3VyaXR5IGNvbnRleHQgd2hpY2ggbWF5IGJlIGlkZW50aWZpZWQgb25seSBieSBpdHMga2lk LiAgVGhlDQoNCj4gICBkZXRhaWxzIGFyZSBvdXQgb2Ygc2NvcGUgZm9yIHRoaXMgc3BlY2lmaWNh dGlvbi4NCg0KPg0KDQo+ICAgVGhlIHByb2NlZHVyZXMgbWF5IGJlIGNvbXBsZW1lbnRlZCB3aXRo IHRoZSB1c2Ugb2YgdGhlIEVjaG8gb3B0aW9uDQoNCj4gICBmb3IgdmVyaWZ5aW5nIHRoZSBhbGl2 ZW5lc3Mgb2YgdGhlIGNsaWVudCByZXF1ZXN0aW5nIGEgbmV3IHNlY3VyaXR5DQoNCj4gICBjb250 ZXh0Lg0KDQo+DQoNCj5BcHBlbmRpeCBDLiAgVGVzdCBWZWN0b3JzDQoNCj5BcHBlbmRpeCBELiAg T3ZlcnZpZXcgb2YgU2VjdXJpdHkgUHJvcGVydGllcw0KDQo+DQoNCj5ELjEuICBTdXBwb3J0aW5n IFByb3h5IE9wZXJhdGlvbnMNCg0KPg0KDQo+ICAgQ29BUCBpcyBkZXNpZ25lZCB0byB3b3JrIHdp dGggaW50ZXJtZWRpYXJpZXMgcmVhZGluZyBhbmQvb3IgY2hhbmdpbmcNCg0KPiAgIENvQVAgbWVz c2FnZSBmaWVsZHMgdG8gcGVyZm9ybSBzdXBwb3J0aW5nIG9wZXJhdGlvbnMgaW4gY29uc3RyYWlu ZWQNCg0KPiAgIGVudmlyb25tZW50cywgZS5nLiBmb3J3YXJkaW5nIGFuZCBjcm9zcy1wcm90b2Nv bCB0cmFuc2xhdGlvbnMuDQoNCj4NCg0KPiAgIFNlY3VyaW5nIENvQVAgb24gdHJhbnNwb3J0IGxh eWVyIHByb3RlY3RzIHRoZSBlbnRpcmUgbWVzc2FnZSBiZXR3ZWVuDQoNCj4gICB0aGUgZW5kcG9p bnRzIGluIHdoaWNoIGNhc2UgQ29BUCBwcm94eSBvcGVyYXRpb25zIGFyZSBub3QgcG9zc2libGUu DQoNCj4gICBJbiBvcmRlciB0byBlbmFibGUgcHJveHkgb3BlcmF0aW9ucywgc2VjdXJpdHkgb24g dHJhbnNwb3J0IGxheWVyDQoNCj4gICBuZWVkcyB0byBiZSB0ZXJtaW5hdGVkIGF0IHRoZSBwcm94 eSBpbiB3aGljaCBjYXNlIHRoZSBDb0FQIG1lc3NhZ2UgaW4NCg0KPiAgIGl0cyBlbnRpcmV0eSBp cyB1bnByb3RlY3RlZCBpbiB0aGUgcHJveHkuDQoNCj4NCg0KPiAgIFJlcXVpcmVtZW50cyBmb3Ig Q29BUCBlbmQtdG8tZW5kIHNlY3VyaXR5IGFyZSBzcGVjaWZpZWQgaW4NCg0KPiAgIFtJLUQuaGFy dGtlLWNvcmUtZTJlLXNlY3VyaXR5LXJlcXNdLiAgVGhlIGNsaWVudCBhbmQgc2VydmVyIGFyZQ0K DQo+ICAgYXNzdW1lZCB0byBiZSBob25lc3QsIGJ1dCBwcm94aWVzIGFuZCBnYXRld2F5cyBhcmUg b25seSB0cnVzdGVkIHRvDQoNCj4gICBwZXJmb3JtIHRoZWlyIGludGVuZGVkIG9wZXJhdGlvbnMu DQoNCj48bWdsdD4NCg0KPkkgZXhwZWN0ZWQgYWZ0ZXIgJ2J1dCcgc29tZXRoaW5nIHNheWluZyB0 aGUgcHJveGllcyBhcmUgbm90IHRydXN0ZWQsIGJ1dCB0DQoNCj5zZWVtcyB0aGF0IGV2ZXJ5b25l IGlzIGhvbmVzdCBoZXJlLiBtYXliZSB3ZSBzaG91bGQgcmVwbGFjZTogT0xEIGJ1dA0KDQo+cHJv eGllcw0KDQo+YW5kIGdhdGV3YXlzIGFyZSBvbmx5IHRydXN0ZWQgdG8NCg0KPiAgIHBlcmZvcm0g dGhlaXIgaW50ZW5kZWQgb3BlcmF0aW9ucy4NCg0KPk5FVzoNCg0KPmFuZCBwcm94aWVzIGFuZCBn YXRld2F5cyBhcmUgdHJ1c3RlZCB0bw0KDQo+ICAgcGVyZm9ybSB0aGVpciBpbnRlbmRlZCBvcGVy YXRpb25zLg0KDQo+DQoNCj5UaGF0IHRoZSBzZXJ2ZXIgaXMgaG9uZXN0IGRvZXMgbm90IG1lYW5z IHRoYXQgdGhlIG5vZGUgdGVybWluYXRpbmcgdGhlDQoNCj5zZXNzaW9uDQoNCj5pcyB0aGUgc2Vy dmVyLi4uLiA8L21nbHQ+DQoNCj4NCg0KPltHUzpdIElzbuKAmXQgdGhhdCB0b28gbWFueSDigJxh bmTigJ0gOy0pLiBXZSBjYW4gcmVwbGFjZSDigJxidXTigJ0gd2l0aCBzb21lIG90aGVyDQoNCj53 b3JkLCBlLmcuIOKAnHdoaWxl4oCdIHRvIGluZGljYXRlIHRoYXQgdGhlcmUgaXMgYSBkaWZmZXJl bmNlLg0KDQo+TkVXOg0KDQo+d2hpbGUgcHJveGllcyBhbmQgZ2F0ZXdheXMgYXJlIG9ubHkgdHJ1 c3RlZCB0bw0KDQo+ICAgcGVyZm9ybSB0aGVpciBpbnRlbmRlZCBvcGVyYXRpb25zLg0KDQo+DQoN Cj4NCg0KPg0KDQo8bWdsdDI+DQoNCk1heWJlICDwn5iJIFlvdSB3b3JkaW5nIGlzIGJldHRlci4N Cg0KPC9tZ2x0Mj4NCg0KPg0KDQo+DQoNCj4gIEZvcndhcmRpbmcgaXMgc3BlY2lmaWVkIGluDQoN Cj4gICBTZWN0aW9uIDIuMi4xIG9mIFtJLUQuaGFydGtlLWNvcmUtZTJlLXNlY3VyaXR5LXJlcXNd LiAgSFRUUC1Db0FQDQoNCj4gICB0cmFuc2xhdGlvbiBpcyBzcGVjaWZpZWQgaW4gW1JGQzgwNzVd LiAgSW50ZXJtZWRpYXJpZXMgdHJhbnNsYXRpbmcNCg0KPiAgIGJldHdlZW4gZGlmZmVyZW50IHRy YW5zcG9ydCBsYXllcnMgYXJlIGludGVuZGVkIHRvIHBlcmZvcm0ganVzdCB0aGF0Lg0KDQo+DQoN Cj4gICBCeSB3b3JraW5nIGF0IHRoZSBDb0FQIGxheWVyLCBPU0NPUkUgZW5hYmxlcyBkaWZmZXJl bnQgQ29BUCBtZXNzYWdlDQoNCj4gICBmaWVsZHMgdG8gYmUgcHJvdGVjdGVkIGRpZmZlcmVudGx5 LCB3aGljaCBhbGxvd3MgbWVzc2FnZSBmaWVsZHMNCg0KPiAgIHJlcXVpcmVkIGZvciBwcm94eSBv cGVyYXRpb25zIHRvIGJlIGF2YWlsYWJsZSB0byB0aGUgcHJveHkgd2hpbGUNCg0KPiAgIG1lc3Nh Z2UgZmllbGRzIGludGVuZGVkIGZvciB0aGUgb3RoZXIgZW5kcG9pbnQgcmVtYWluIHByb3RlY3Rl ZC4gIEluDQoNCj4gICB0aGUgcmVtYWluZGVyIG9mIHRoaXMgc2VjdGlvbiB3ZSBhbmFseXplIGhv dyBPU0NPUkUgcHJvdGVjdHMgdGhlDQoNCj4gICBwcm90ZWN0ZWQgbWVzc2FnZSBmaWVsZHMgYW5k IHRoZSBjb25zZXF1ZW5jZXMgb2YgbWVzc2FnZSBmaWVsZHMNCg0KPiAgIGludGVuZGVkIGZvciBw cm94eSBvcGVyYXRpb24gYmVpbmcgdW5wcm90ZWN0ZWQuDQoNCj48bWdsdD4NCg0KPlRoaXMgdGV4 dCBzZWVtcyBjbGVhciB0byBtZS4gTWF5YmUgdGhlIGxhc3QgcGFyYWdyYXBoIGNvdWxkIGJlIHN1 ZmZpY2llbnQuDQoNCj48L21nbHQ+DQoNCj4NCg0KPltHUzpdIElzIHRoZSBwcm9wb3NhbCB0byBy ZW1vdmUg4oCcRm9yd2FyZGluZyBpcyBzcGVjaWZpZWQgIC4gLiAuIHRvDQoNCj5wZXJmb3JtDQoN Cj5qdXN0IHRoYXTigJ0/IFdlIGNvdWxkIGRvIHRoYXQgYW5kIHJlcGxhY2UgdGhpcyB0ZXh0IHdp dGggc29tZSByZWZlcmVuY2VzDQoNCj50bw0KDQo+b3RoZXIgcGFydHMgb2YgdGhlIGRvY3VtZW50 IGlmIHRoYXQgaXMgZGVzaXJhYmxlLg0KDQo+DQoNCj4NCg0KPG1nbHQyPg0KDQpOb3QgcmVhbGx5 IGEgcHJvcG9zYWwsIG1vcmUgYSBzdWdnZXN0aW9uIPCfmIkgSSBhbSBmaW5lIGVpdGhlciB3YXlz Lg0KDQo8L21nbHQyPg0KDQoNCg0KPkQuMi4gIFByb3RlY3RlZCBNZXNzYWdlIEZpZWxkcw0KDQo+ DQoNCj4NCg0KPg0KDQo+ICAgUHJvdGVjdGVkIG1lc3NhZ2UgZmllbGRzIGFyZSBpbmNsdWRlZCBp biB0aGUgUGxhaW50ZXh0IChTZWN0aW9uIDUuMykNCg0KPiAgIGFuZCB0aGUgQWRkaXRpb25hbCBB dXRoZW50aWNhdGVkIERhdGEgKFNlY3Rpb24gNS40KSBvZiB0aGUNCg0KPiAgIENPU0VfRW5jcnlw dDAgb2JqZWN0IGFuZCBlbmNyeXB0ZWQgdXNpbmcgYW4gQUVBRCBhbGdvcml0aG0uDQoNCj4NCg0K PiAgIE9TQ09SRSBkZXBlbmRzIG9uIGEgcHJlLWVzdGFibGlzaGVkIHJhbmRvbSBNYXN0ZXIgU2Vj cmV0DQoNCj4gICAoU2VjdGlvbiAxMi4zKSB1c2VkIHRvIGRlcml2ZSBlbmNyeXB0aW9uIGtleXMs IGFuZCBhIGNvbnN0cnVjdGlvbiBmb3INCg0KPiAgIG1ha2luZyAoa2V5LCBub25jZSkgcGFpcnMg dW5pcXVlIChBcHBlbmRpeCBELjMpLiAgQXNzdW1pbmcgdGhpcyBpcw0KDQo+ICAgdHJ1ZSwgYW5k IHRoZSBrZXlzIGFyZSB1c2VkIGZvciBubyBtb3JlIGRhdGEgdGhhbiBpbmRpY2F0ZWQgaW4NCg0K PiAgIFNlY3Rpb24gNy4yLjEsIE9TQ09SRSBzaG91bGQgcHJvdmlkZSB0aGUgZm9sbG93aW5nIGd1 YXJhbnRlZXM6DQoNCj4NCg0KPiAgIG8gIENvbmZpZGVudGlhbGl0eTogQW4gYXR0YWNrZXIgc2hv dWxkIG5vdCBiZSBhYmxlIHRvIGRldGVybWluZSB0aGUNCg0KPiAgICAgIHBsYWludGV4dCBjb250 ZW50cyBvZiBhIGdpdmVuIE9TQ09SRSBtZXNzYWdlIG9yIGRldGVybWluZSB0aGF0DQoNCj4gICAg ICBkaWZmZXJlbnQgcGxhaW50ZXh0cyBhcmUgcmVsYXRlZCAoU2VjdGlvbiA1LjMpLg0KDQo+DQoN Cj5TZWxhbmRlciwgZXQgYWwuICAgICAgICBFeHBpcmVzIEphbnVhcnkgMjcsIDIwMTkgICAgICAg ICAgICAgICBbUGFnZSA3NF0NCg0KPg0KDQo+SW50ZXJuZXQtRHJhZnQgICAgICAgICAgICAgICAg ICAgT1NDT1JFICAgICAgICAgICAgICAgICAgICAgICAgSnVseSAyMDE4DQoNCj4NCg0KPiAgIG8g IEludGVncml0eTogQW4gYXR0YWNrZXIgc2hvdWxkIG5vdCBiZSBhYmxlIHRvIGNyYWZ0IGEgbmV3 IE9TQ09SRQ0KDQo+ICAgICAgbWVzc2FnZSB3aXRoIHByb3RlY3RlZCBtZXNzYWdlIGZpZWxkcyBk aWZmZXJlbnQgZnJvbSBhbiBleGlzdGluZw0KDQo+ICAgICAgT1NDT1JFIG1lc3NhZ2Ugd2hpY2gg d2lsbCBiZSBhY2NlcHRlZCBieSB0aGUgcmVjZWl2ZXIuDQoNCj4NCg0KPiAgIG8gIFJlcXVlc3Qt cmVzcG9uc2UgYmluZGluZzogQW4gYXR0YWNrZXIgc2hvdWxkIG5vdCBiZSBhYmxlIHRvIG1ha2Ug YQ0KDQo+ICAgICAgY2xpZW50IG1hdGNoIGEgcmVzcG9uc2UgdG8gdGhlIHdyb25nIHJlcXVlc3Qu DQoNCj4NCg0KPiAgIG8gIE5vbi1yZXBsYXlhYmlsaXR5OiBBbiBhdHRhY2tlciBzaG91bGQgbm90 IGJlIGFibGUgdG8gY2F1c2UgdGhlDQoNCj4gICAgICByZWNlaXZlciB0byBhY2NlcHQgYSBtZXNz YWdlIHdoaWNoIGl0IGhhcyBwcmV2aW91c2x5IHJlY2VpdmVkIGFuZA0KDQo+ICAgICAgYWNjZXB0 ZWQuDQoNCj4NCg0KPiAgIEluIHRoZSBhYm92ZSwgdGhlIGF0dGFja2VyIGlzIGFueW9uZSBleGNl cHQgdGhlIGVuZHBvaW50cywgZS5nLiBhDQoNCj4gICBjb21wcm9taXNlZCBpbnRlcm1lZGlhcnku ICBJbmZvcm1hbGx5LCBPU0NPUkUgcHJvdmlkZXMgdGhlc2UNCg0KPiAgIHByb3BlcnRpZXMgYnkg QUVBRC1wcm90ZWN0aW5nIHRoZSBwbGFpbnRleHQgd2l0aCBhIHN0cm9uZyBrZXkgYW5kDQoNCj4g ICB1bmlxdWVuZXNzIG9mIChrZXksIG5vbmNlKSBwYWlycy4gIEFFQUQgZW5jcnlwdGlvbiBbUkZD NTExNl0gcHJvdmlkZXMNCg0KPiAgIGNvbmZpZGVudGlhbGl0eSBhbmQgaW50ZWdyaXR5IGZvciB0 aGUgZGF0YS4gIFJlc3BvbnNlLXJlcXVlc3QgYmluZGluZw0KDQo+ICAgaXMgcHJvdmlkZWQgYnkg aW5jbHVkaW5nIHRoZSBraWQgYW5kIFBhcnRpYWwgSVYgb2YgdGhlIHJlcXVlc3QgaW4gdGhlDQoN Cj4gICBBQUQgb2YgdGhlIHJlc3BvbnNlLiAgTm9uLXJlcGxheWFiaWxpdHkgb2YgcmVxdWVzdHMg YW5kIG5vdGlmaWNhdGlvbnMNCg0KPiAgIGlzIHByb3ZpZGVkIGJ5IHVzaW5nIHVuaXF1ZSAoa2V5 LCBub25jZSkgcGFpcnMgYW5kIGEgcmVwbGF5DQoNCj4gICBwcm90ZWN0aW9uIG1lY2hhbmlzbSAo YXBwbGljYXRpb24gZGVwZW5kZW50LCBzZWUgU2VjdGlvbiA3LjQpLg0KDQo+DQoNCj4gICBPU0NP UkUgaXMgc3VzY2VwdGlibGUgdG8gYSB2YXJpZXR5IG9mIHRyYWZmaWMgYW5hbHlzaXMgYXR0YWNr cyBiYXNlZA0KDQo+ICAgb24gb2JzZXJ2aW5nIHRoZSBsZW5ndGggYW5kIHRpbWluZyBvZiBlbmNy eXB0ZWQgcGFja2V0cy4gIE9TQ09SRSBkb2VzDQoNCj4gICBub3QgcHJvdmlkZSBhbnkgc3BlY2lm aWMgZGVmZW5zZXMgYWdhaW5zdCB0aGlzIGZvcm0gb2YgYXR0YWNrIGJ1dCB0aGUNCg0KPiAgIGFw cGxpY2F0aW9uIG1heSB1c2UgYSBwYWRkaW5nIG1lY2hhbmlzbSB0byBwcmV2ZW50IGFuIGF0dGFj a2VyIGZyb20NCg0KPiAgIGRpcmVjdGx5IGRldGVybWluZSB0aGUgbGVuZ3RoIG9mIHRoZSBwYWRk aW5nLiAgSG93ZXZlciwgaW5mb3JtYXRpb24NCg0KPiAgIGFib3V0IHBhZGRpbmcgbWF5IHN0aWxs IGJlIHJldmVhbGVkIGJ5IHNpZGUtY2hhbm5lbCBhdHRhY2tzIG9ic2VydmluZw0KDQo+ICAgZGlm ZmVyZW5jZXMgaW4gdGltaW5nLg0KDQo+DQoNCj5ELjMuICBVbmlxdWVuZXNzIG9mIChrZXksIG5v bmNlKQ0KDQo+DQoNCj4gICBJbiB0aGlzIHNlY3Rpb24gd2Ugc2hvdyB0aGF0IChrZXksIG5vbmNl KSBwYWlycyBhcmUgdW5pcXVlIGFzIGxvbmcgYXMNCg0KPiAgIHRoZSByZXF1aXJlbWVudHMgaW4g U2VjdGlvbnMgMy4zIGFuZCA3LjIuMSBhcmUgZm9sbG93ZWQuDQoNCj4NCg0KPiAgIEZpeCBhIENv bW1vbiBDb250ZXh0IChTZWN0aW9uIDMuMSkgYW5kIGFuIGVuZHBvaW50LCBjYWxsZWQgdGhlDQoN Cj4gICBlbmNyeXB0aW5nIGVuZHBvaW50LiAgQW4gZW5kcG9pbnQgbWF5IGFsdGVybmF0ZSBiZXR3 ZWVuIGNsaWVudCBhbmQNCg0KPiAgIHNlcnZlciByb2xlcywgYnV0IGVhY2ggZW5kcG9pbnQgYWx3 YXlzIGVuY3J5cHRzIHdpdGggdGhlIFNlbmRlciBLZXkNCg0KPiAgIG9mIGl0cyBTZW5kZXIgQ29u dGV4dC4gIFNlbmRlciBLZXlzIGFyZSAoc3RvY2hhc3RpY2FsbHkpIHVuaXF1ZSBzaW5jZQ0KDQo+ ICAgdGhleSBhcmUgZGVyaXZlZCB3aXRoIEhLREYgdXNpbmcgdW5pcXVlIFNlbmRlciBJRHMsIHNv IG1lc3NhZ2VzDQoNCj4gICBlbmNyeXB0ZWQgYnkgZGlmZmVyZW50IGVuZHBvaW50cyB1c2UgZGlm ZmVyZW50IGtleXMuICBJdCByZW1haW5zIHRvDQoNCj4gICBwcm92ZSB0aGF0IHRoZSBub25jZXMg dXNlZCBieSB0aGUgZml4ZWQgZW5kcG9pbnQgYXJlIHVuaXF1ZS4NCg0KPg0KDQo+ICAgU2luY2Ug dGhlIENvbW1vbiBJViBpcyBmaXhlZCwgdGhlIG5vbmNlcyBhcmUgZGV0ZXJtaW5lZCBieSBhIFBh cnRpYWwNCg0KPiAgIElWIChQSVYpIGFuZCB0aGUgU2VuZGVyIElEIG9mIHRoZSBlbmRwb2ludCBn ZW5lcmF0aW5nIHRoYXQgUGFydGlhbCBJVg0KDQo+ICAgKElEX1BJVikuICBUaGUgbm9uY2UgY29u c3RydWN0aW9uIChTZWN0aW9uIDUuMikgd2l0aCB0aGUgc2l6ZSBvZiB0aGUNCg0KPiAgIElEX1BJ ViAoUykgY3JlYXRlcyB1bmlxdWUgbm9uY2VzIGZvciBkaWZmZXJlbnQgKElEX1BJViwgUElWKSBw YWlycy4NCg0KPiAgIFRoZXJlIGFyZSB0d28gY2FzZXM6DQoNCj4NCg0KPlNlbGFuZGVyLCBldCBh bC4gICAgICAgIEV4cGlyZXMgSmFudWFyeSAyNywgMjAxOSAgICAgICAgICAgICAgIFtQYWdlIDc1 XQ0KDQo+DQoNCj5JbnRlcm5ldC1EcmFmdCAgICAgICAgICAgICAgICAgICBPU0NPUkUgICAgICAg ICAgICAgICAgICAgICAgICBKdWx5IDIwMTgNCg0KPg0KDQo+ICAgQS4gIEZvciByZXF1ZXN0cywg YW5kIHJlc3BvbnNlcyB3aXRoIFBhcnRpYWwgSVYgKGUuZy4gIE9ic2VydmUNCg0KPiAgIG5vdGlm aWNhdGlvbnMpOg0KDQo+DQoNCj4gICBvICBJRF9QSVYgPSBTZW5kZXIgSUQgb2YgdGhlIGVuY3J5 cHRpbmcgZW5kcG9pbnQNCg0KPg0KDQo+ICAgbyAgUElWID0gY3VycmVudCBQYXJ0aWFsIElWIG9m IHRoZSBlbmNyeXB0aW5nIGVuZHBvaW50DQoNCj4NCg0KPiAgIFNpbmNlIHRoZSBlbmNyeXB0aW5n IGVuZHBvaW50IHN0ZXBzIHRoZSBQYXJ0aWFsIElWIGZvciBlYWNoIHVzZSwgdGhlDQoNCj4gICBu b25jZXMgdXNlZCBpbiBjYXNlIEEgYXJlIGFsbCB1bmlxdWUgYXMgbG9uZyBhcyB0aGUgbnVtYmVy IG9mDQoNCj4gICBlbmNyeXB0ZWQgbWVzc2FnZXMgaXMga2VwdCB3aXRoaW4gdGhlIHJlcXVpcmVk IHJhbmdlIChTZWN0aW9uIDcuMi4xKS4NCg0KPg0KDQo+ICAgQi4gIEZvciByZXNwb25zZXMgd2l0 aG91dCBQYXJ0aWFsIElWIChlLmcuIHNpbmdsZSByZXNwb25zZSB0byBhDQoNCj4gICByZXF1ZXN0 KToNCg0KPg0KDQo+ICAgbyAgSURfUElWID0gU2VuZGVyIElEIG9mIHRoZSBlbmRwb2ludCBnZW5l cmF0aW5nIHRoZSByZXF1ZXN0DQoNCj4NCg0KPiAgIG8gIFBJViA9IFBhcnRpYWwgSVYgb2YgdGhl IHJlcXVlc3QNCg0KPg0KDQo+ICAgU2luY2UgdGhlIFNlbmRlciBJRHMgYXJlIHVuaXF1ZSwgSURf UElWIGlzIGRpZmZlcmVudCBmcm9tIHRoZSBTZW5kZXINCg0KPiAgIElEIG9mIHRoZSBlbmNyeXB0 aW5nIGVuZHBvaW50LiAgVGhlcmVmb3JlLCB0aGUgbm9uY2VzIGluIGNhc2UgQiBhcmUNCg0KPiAg IGRpZmZlcmVudCBjb21wYXJlZCB0byBub25jZXMgaW4gY2FzZSBBLCB3aGVyZSB0aGUgZW5jcnlw dGluZyBlbmRwb2ludA0KDQo+ICAgZ2VuZXJhdGVkIHRoZSBQYXJ0aWFsIElWLiAgU2luY2UgdGhl IFBhcnRpYWwgSVYgb2YgdGhlIHJlcXVlc3QgaXMNCg0KPiAgIHZlcmlmaWVkIGZvciByZXBsYXkg KFNlY3Rpb24gNy40KSBhc3NvY2lhdGVkIHRvIHRoaXMgUmVjaXBpZW50DQoNCj4gICBDb250ZXh0 LCBQSVYgaXMgdW5pcXVlIGZvciB0aGlzIElEX1BJViwgd2hpY2ggbWFrZXMgYWxsIG5vbmNlcyBp bg0KDQo+ICAgY2FzZSBCIGRpc3RpbmN0Lg0KDQo+DQoNCj5ELjQuICBVbnByb3RlY3RlZCBNZXNz YWdlIEZpZWxkcw0KDQo+DQoNCj4gICBUaGlzIHNlY3Rpb24gbGlzdHMgYW5kIGRpc2N1c3NlcyBp c3N1ZXMgd2l0aCB1bnByb3RlY3RlZCBtZXNzYWdlDQoNCj4gICBmaWVsZHMuDQoNCj4NCg0KPkQu NC4xLiAgQ29BUCBIZWFkZXIgRmllbGRzDQoNCj4NCg0KPiAgIG8gIFZlcnNpb24uICBUaGUgQ29B UCB2ZXJzaW9uIFtSRkM3MjUyXSBpcyBub3QgZXhwZWN0ZWQgdG8gYmUNCg0KPiAgICAgIHNlbnNp dGl2ZSB0byBkaXNjbG9zZS4gIEN1cnJlbnRseSB0aGVyZSBpcyBvbmx5IG9uZSBDb0FQIHZlcnNp b24NCg0KPiAgICAgIGRlZmluZWQuICBBIGNoYW5nZSBvZiB0aGlzIHBhcmFtZXRlciBpcyBwb3Rl bnRpYWxseSBhIGRlbmlhbC1vZi0NCg0KPiAgICAgIHNlcnZpY2UgYXR0YWNrLiAgRnV0dXJlIHZl cnNpb25zIG9mIENvQVAgbmVlZCB0byBhbmFseXplIGF0dGFja3MNCg0KPiAgICAgIHRvIE9TQ09S RSBwcm90ZWN0ZWQgbWVzc2FnZXMgZHVlIHRvIGFuIGFkdmVyc2FyeSBjaGFuZ2luZyB0aGUgQ29B UA0KDQo+ICAgICAgdmVyc2lvbi4NCg0KPg0KDQo+ICAgbyAgVG9rZW4vVG9rZW4gTGVuZ3RoLiAg VGhlIFRva2VuIGZpZWxkIGlzIGEgY2xpZW50LWxvY2FsIGlkZW50aWZpZXINCg0KPiAgICAgIGZv ciBkaWZmZXJlbnRpYXRpbmcgYmV0d2VlbiBjb25jdXJyZW50IHJlcXVlc3RzIFtSRkM3MjUyXS4g IEFuDQoNCj4gICAgICBlYXZlc2Ryb3BwZXIgcmVhZGluZyB0aGUgdG9rZW4gY2FuIG1hdGNoIHJl cXVlc3RzIHRvIHJlc3BvbnNlcw0KDQo+ICAgICAgd2hpY2ggY2FuIGJlIHVzZWQgaW4gdHJhZmZp YyBhbmFseXNpcy4gIEluIHBhcnRpY3VsYXIgdGhpcyBpcyB0cnVlDQoNCj4gICAgICBmb3Igbm90 aWZpY2F0aW9ucywgd2hlcmUgbXVsdGlwbGUgcmVzcG9uc2VzIGFyZSBtYXRjaGVkIHdpdGggb25l DQoNCj4gICAgICByZXF1ZXN0LiAgQ29BUCBwcm94aWVzIGFyZSBhbGxvd2VkIHRvIGNoYW5nZSBU b2tlbiBhbmQgVG9rZW4NCg0KPiAgICAgIExlbmd0aCBiZXR3ZWVuIFVEUCBob3BzLiAgSG93ZXZl ciwgbW9kaWZpY2F0aW9ucyBvZiBUb2tlbiBhbmQNCg0KPiAgICAgIFRva2VuIExlbmd0aCBkdXJp bmcgYSBVRFAgaG9wIG1heSBiZWNvbWUgYSBkZW5pYWwtb2Ytc2VydmljZQ0KDQo+DQoNCj5TZWxh bmRlciwgZXQgYWwuICAgICAgICBFeHBpcmVzIEphbnVhcnkgMjcsIDIwMTkgICAgICAgICAgICAg ICBbUGFnZSA3Nl0NCg0KPg0KDQo+SW50ZXJuZXQtRHJhZnQgICAgICAgICAgICAgICAgICAgT1ND T1JFICAgICAgICAgICAgICAgICAgICAgICAgSnVseSAyMDE4DQoNCj4NCg0KPiAgICAgIGF0dGFj aywgc2luY2UgaXQgbWF5IHByZXZlbnQgdGhlIGNsaWVudCB0byBpZGVudGlmeSB0byB3aGljaA0K DQo+ICAgICAgcmVxdWVzdCB0aGUgcmVzcG9uc2UgYmVsb25ncyBvciB0byBmaW5kIHRoZSBjb3Jy ZWN0IGluZm9ybWF0aW9uIHRvDQoNCj4gICAgICB2ZXJpZnkgaW50ZWdyaXR5IG9mIHRoZSByZXNw b25zZS4NCg0KPjxtZ2x0Pg0KDQo+SSBhbSByZWFkaW5nIHRoZSB0ZXh0IGFzLiBXaGVuIHRoZSBh dHRhY2tlciBpcyBvbi1wYXRoLCBhIGxvbmcgVG9rZW4gZG9lcw0KDQo+bm90DQoNCj5wcmV2ZW50 cyB0aGUgYXR0YWNrIGJhc2VkIG9uIGEgc3Bvb2ZlZCByZXNwb25zZS4gSG93ZXZlciwgZm9yIGFu IGF0dGFja2VyDQoNCj50aGF0DQoNCj5pcyBub3Qgb24gcGF0aCwgdGhlIGF0dGFja2VyIG5lZWRz IHRvIGd1ZXNzIHRoZSBUb2tlbiwgYW5kIHRoaXMgY2FuIGJlDQoNCj5taXRpZ2F0ZWQgKHBhcnRp YWxseSkgYnkgaW5jcmVhc2luZyB0aGUgVG9rZW4gc2l6ZS4gIE5vdGUgdGhhdCBpbiB0aGUNCg0K PmxhdGVzdA0KDQo+Y2FzZSwgYSBsb25nIFRva2VuIHNob3VsZCBub3QgYmUgc2VlbiBhcyBhIHJl cGxhY2VtZW50IGZvciBjcnlwdG9ncmFwaGljDQoNCj5wcm90ZWN0aW9uIG9mIHRoZSBtZXNzYWdl LiA8L21nbHQ+DQoNCj4NCg0KPltHUzpdIFRoZXJlIHNlZW1zIHRvIGJlIGEgbWlzdW5kZXJzdGFu ZGluZyBzb21ld2hlcmUuIFRoZXJlIGlzIG5vIG5lZWQNCg0KPmZvciBhbnlvbmUgdG8g4oCcZ3Vl c3MgdGhlIFRva2Vu4oCdIHNpbmNlIGl0IGlzIG5vdCBlbmNyeXB0ZWQuIFRoZXJlIGlzDQoNCj5u b3RoaW5nIGhpbnRlZCBhYm91dCBUb2tlbiBiZWluZyBhIOKAnHJlcGxhY2VtZW50IGZvciBjcnlw dG/igJ0sIHNvIEkgZG9u4oCZdA0KDQo+dW5kZXJzdGFuZCB3aHkgYW55b25lIHdvdWxkIGJlIGxl YWQgdG8gdGhpbmsgdGhhdC4gVG9rZW4gbGVuZ3RoIGlzDQoNCj5tZW50aW9uZWQgdHdpY2U7IGlu IHRoZSBuZXh0IHRvIGxhc3Qgc2VudGVuY2UgLSBtZW50aW9uaW5nIHRoYXQgQ29BUA0KDQo+cHJv eGllcyAobGVnaXRpbWF0ZWx5KSBtYXkgY2hhbmdlIFRva2VuIGxlbmd0aDsgYW5kIGluIHRoZSBs YXN0IHNlbnRlbmNlDQoNCj4tIGRlc2NyaWJpbmcgdGhhdCBhbiBvbi1wYXRoIGF0dGFja2VyIG1h eSBtb2RpZnkgdGhlIFRva2VuIExlbmd0aCB3aGljaA0KDQo+ZWl0aGVyIGNyZWF0ZWQgbWlzbWF0 Y2ggYmV0d2VlbiByZXF1ZXN0IGFuZCByZXNwb25zZSBvciBubyBtYXRjaCBhdCBhbGwsDQoNCj53 aGljaCBhcmUgYm90aCBkZW5pYWwgb2Ygc2VydmljZS4gSXMgaXQgY2xlYXJlciBpbiB0aGUgZm9s bG93aW5nIHdheT8NCg0KTkVXDQoNCj5vIFRva2VuL1Rva2VuIExlbmd0aC4gVGhlIFRva2VuIGZp ZWxkIGlzIGEgY2xpZW50LWxvY2FsIGlkZW50aWZpZXINCg0KPmZvciBkaWZmZXJlbnRpYXRpbmcg YmV0d2VlbiBjb25jdXJyZW50IHJlcXVlc3RzIFtSRkM3MjUyXS4NCg0KPg0KDQo+DQoNCjxtZ2x0 Mj4NCg0KV2hhdCBJIHdhcyB0cnlpbmcgdG8gc2F5IGlzIHRoYXQgaWYgeW91IHdhbnQgdG8gc3Bv b2YgYSByZXNwb25zZSAoIGxpa2UgaW4gRE5TKSBhbmQgeW91IGFyZSBub3Qgb24gcGF0aCwgeW91 IG5lZWQgdG8gZ3Vlc3MgdGhlIFRva2VuLiBJbiB0aGF0IHNlbnNlLCB0aGUgbG9uZ2VyIHRoZSBz YWZlci4gSG93ZXZlciwgYXMgZm9yIEROUywgd2Ugc2hvdWxkIG5vdCByZWx5IG9uIHRoaXMuDQoN CjwvbWdsdDI+DQoNCj4NCg0KQ29BUCBwcm94aWVzIGFyZSBhbGxvd2VkIHRvIGNoYW5nZSBUb2tl biBhbmQgVG9rZW4NCg0KPg0KDQo+DQoNCj5MZW5ndGggYmV0d2VlbiBVRFAgaG9wcy4gQW4NCg0K Pg0KDQo+DQoNCj5lYXZlc2Ryb3BwZXIgcmVhZGluZyB0aGUgdG9rZW4gY2FuIG1hdGNoIHJlcXVl c3RzIHRvIHJlc3BvbnNlcw0KDQo+DQoNCj4NCg0KPndoaWNoIGNhbiBiZSB1c2VkIGluIHRyYWZm aWMgYW5hbHlzaXMuIEluIHBhcnRpY3VsYXIgdGhpcyBpcyB0cnVlDQoNCj4NCg0KPg0KDQo+Zm9y IG5vdGlmaWNhdGlvbnMsIHdoZXJlIG11bHRpcGxlIHJlc3BvbnNlcyBhcmUgbWF0Y2hlZCB3aXRo IG9uZQ0KDQo+DQoNCj4NCg0KPnJlcXVlc3QuIE1vZGlmaWNhdGlvbnMgb2YgVG9rZW4gYW5kDQoN Cj4NCg0KPg0KDQo+VG9rZW4gTGVuZ3RoIGJ5IG9uLXBhdGggYXR0YWNrZXJzIGR1cmluZyBhIFVE UCBob3AgbWF5IGJlY29tZSBhDQoNCj5kZW5pYWwtb2Ytc2VydmljZQ0KDQo+DQoNCj4NCg0KPmF0 dGFjaywgc2luY2UgaXQgbWF5IHByZXZlbnQgYSBjbGllbnQgdG8gaWRlbnRpZnkgdG8gd2hpY2gN Cg0KPg0KDQo+DQoNCj5yZXF1ZXN0IHRoZSByZXNwb25zZSBiZWxvbmdzIG9yIHRvIGZpbmQgdGhl IGNvcnJlY3QgaW5mb3JtYXRpb24gdG8NCg0KPg0KDQo+DQoNCj52ZXJpZnkgaW50ZWdyaXR5IG9m IHRoZSByZXNwb25zZS4NCg0KPg0KDQo+DQoNCg0KDQoNCg0KDQoNCiAgIG8gIENvZGUuICBUaGUg T3V0ZXIgQ29BUCBDb2RlIG9mIGFuIE9TQ09SRSBtZXNzYWdlIGlzIFBPU1Qgb3IgRkVUQ0gNCg0K ICAgICAgZm9yIHJlcXVlc3RzIHdpdGggY29ycmVzcG9uZGluZyByZXNwb25zZSBjb2Rlcy4gIFRo ZSB1c2Ugb2YgRkVUQ0gNCg0KICAgICAgcmV2ZWFscyBubyBtb3JlIHRoYW4gd2hhdCBpcyByZXZl YWxlZCBieSB0aGUgT3V0ZXIgT2JzZXJ2ZSBvcHRpb24uDQoNCiAgICAgIENoYW5naW5nIHRoZSBP dXRlciBDb2RlIG1heSBiZSBhIGRlbmlhbC1vZi1zZXJ2aWNlIGF0dGFjayBieQ0KDQogICAgICBj YXVzaW5nIGVycm9ycyBpbiB0aGUgcHJveHkgcHJvY2Vzc2luZy4NCg0KDQoNCiAgIG8gIFR5cGUv TWVzc2FnZSBJRC4gIFRoZSBUeXBlL01lc3NhZ2UgSUQgZmllbGRzIFtSRkM3MjUyXSByZXZlYWwN Cg0KICAgICAgaW5mb3JtYXRpb24gYWJvdXQgdGhlIFVEUCB0cmFuc3BvcnQgYmluZGluZywgZS5n LiBhbiBlYXZlc2Ryb3BwZXINCg0KICAgICAgcmVhZGluZyB0aGUgVHlwZSBvciBNZXNzYWdlIElE IGdhaW4gaW5mb3JtYXRpb24gYWJvdXQgaG93IFVEUA0KDQogICAgICBtZXNzYWdlcyBhcmUgcmVs YXRlZCB0byBlYWNoIG90aGVyLiAgQ29BUCBwcm94aWVzIGFyZSBhbGxvd2VkIHRvDQoNCiAgICAg IGNoYW5nZSBUeXBlIGFuZCBNZXNzYWdlIElELiAgVGhlc2UgbWVzc2FnZSBmaWVsZHMgYXJlIG5v dCBwcmVzZW50DQoNCiAgICAgIGluIENvQVAgb3ZlciBUQ1AgW1JGQzgzMjNdLCBhbmQgZG9lcyBu b3QgaW1wYWN0IHRoZSByZXF1ZXN0Lw0KDQogICAgICByZXNwb25zZSBtZXNzYWdlLiAgQSBjaGFu Z2Ugb2YgdGhlc2UgZmllbGRzIGluIGEgVURQIGhvcCBpcyBhDQoNCiAgICAgIGRlbmlhbC1vZi1z ZXJ2aWNlIGF0dGFjay4gIEJ5IHNlbmRpbmcgYW4gQUNLLCBhbiBhdHRhY2tlciBjYW4gbWFrZQ0K DQogICAgICB0aGUgZW5kcG9pbnQgYmVsaWV2ZSB0aGF0IHRoZSBvdGhlciBlbmRwb2ludCByZWNl aXZlZCB0aGUgcHJldmlvdXMNCg0KICAgICAgbWVzc2FnZS4gIEJ5IHNlbmRpbmcgYSBSU1QsIGFu IGF0dGFja2VyIG1heSBiZSBhYmxlIHRvIGNhbmNlbCBhbg0KDQogICAgICBvYnNlcnZhdGlvbiwg bWFrZSBvbmUgZW5kcG9pbnQgYmVsaWV2ZSB0aGUgb3RoZXIgZW5kcG9pbnQgaXMNCg0KICAgICAg YWxpdmUsIG9yIG1ha2Ugb25lIGVuZHBvaW50IGVuZHBvaW50IGJlbGlldmUgdGhhdCB0aGUgb3Ro ZXINCg0KICAgICAgZW5kcG9pbnQgaXMgbWlzc2luZyBzb21lIGNvbnRleHQuICBCeSBjaGFuZ2lu ZyBhIE5PTiB0byBhIENPTiwgdGhlDQoNCiAgICAgIGF0dGFja2VyIGNhbiBjYXVzZSB0aGUgcmVj ZWl2aW5nIGVuZHBvaW50IHRvIHJlc3BvbmQgdG8gbWVzc2FnZXMNCg0KICAgICAgZm9yIHdoaWNo IG5vIHJlc3BvbnNlIHdhcyByZXF1ZXN0ZWQuDQoNCg0KDQogICBvICBMZW5ndGguICBUaGlzIGZp ZWxkIGNvbnRhaW4gdGhlIGxlbmd0aCBvZiB0aGUgbWVzc2FnZSBbUkZDODMyM10NCg0KICAgICAg d2hpY2ggbWF5IGJlIHVzZWQgZm9yIHRyYWZmaWMgYW5hbHlzaXMuICBUaGVzZSBtZXNzYWdlIGZp ZWxkcyBhcmUNCg0KICAgICAgbm90IHByZXNlbnQgaW4gQ29BUCBvdmVyIFVEUCwgYW5kIGRvZXMg bm90IGltcGFjdCB0aGUgcmVxdWVzdC8NCg0KICAgICAgcmVzcG9uc2UgbWVzc2FnZS4gIEEgY2hh bmdlIG9mIExlbmd0aCBpcyBhIGRlbmlhbC1vZi1zZXJ2aWNlDQoNCiAgICAgIGF0dGFjayBzaW1p bGFyIHRvIGNoYW5naW5nIFRDUCBoZWFkZXIgZmllbGRzLg0KDQoNCg0KRC40LjIuICBDb0FQIE9w dGlvbnMNCg0KDQoNCiAgIG8gIE1heC1BZ2UuIFRoZSBPdXRlciBNYXgtQWdlIGlzIHNldCB0byB6 ZXJvIHRvIGF2b2lkIHVubmVjZXNzYXJ5DQoNCiAgICAgIGNhY2hpbmcgb2YgT1NDT1JFIGVycm9y IHJlc3BvbnNlcy4gIENoYW5naW5nIHRoaXMgdmFsdWUgdGh1cyBtYXkNCg0KICAgICAgY2F1c2Ug dW5uZWNlc3NhcnkgY2FjaGluZy4gIE5vIGFkZGl0aW9uYWwgaW5mb3JtYXRpb24gaXMgY2Fycmll ZA0KDQogICAgICB3aXRoIHRoaXMgb3B0aW9uLg0KDQoNCg0KICAgbyAgUHJveHktVXJpL1Byb3h5 LVNjaGVtZS4gIFRoZXNlIG9wdGlvbnMgYXJlIHVzZWQgaW4gZm9yd2FyZCBwcm94eQ0KDQogICAg ICBkZXBsb3ltZW50cy4gIFdpdGggT1NDT1JFLCB0aGUgUHJveHktVXJpIG9wdGlvbiBkb2VzIG5v dCBjb250YWluDQoNCiAgICAgIHRoZSBVcmktUGF0aC9VcmktUXVlcnkgcGFydHMgb2YgdGhlIFVS SS4gIFRoZSBvdGhlciBwYXJ0cyBvZg0KDQogICAgICBQcm94eS1VcmkgY2Fubm90IGJlIHByb3Rl Y3RlZCBzaW5jZSB0aGV5IGFyZSBhbGxvd2VkIHRvIGJlIGNoYW5nZWQNCg0KICAgICAgYnkgYSBm b3J3YXJkIHByb3h5LiAgVGhlIHNlcnZlciBjYW4gdmVyaWZ5IHdoYXQgc2NoZW1lIGlzIHVzZWQg aW4NCg0KICAgICAgdGhlIGxhc3QgaG9wLCBidXQgbm90IHdoYXQgd2FzIHJlcXVlc3RlZCBieSB0 aGUgY2xpZW50IG9yIHdoYXQgd2FzDQoNCiAgICAgIHVzZWQgaW4gcHJldmlvdXMgaG9wcy4NCg0K DQoNClNlbGFuZGVyLCBldCBhbC4gICAgICAgIEV4cGlyZXMgSmFudWFyeSAyNywgMjAxOSAgICAg ICAgICAgICAgIFtQYWdlIDc3XQ0KDQoNCg0KSW50ZXJuZXQtRHJhZnQgICAgICAgICAgICAgICAg ICAgT1NDT1JFICAgICAgICAgICAgICAgICAgICAgICAgSnVseSAyMDE4DQoNCg0KDQogICBvICBV cmktSG9zdC9VcmktUG9ydC4gIEluIGZvcndhcmQgcHJveHkgZGVwbG95bWVudHMsIHRoZSBVcmkt SG9zdC8NCg0KICAgICAgVXJpLVBvcnQgbWF5IGJlIGNoYW5nZWQgYnkgYW4gYWR2ZXJzYXJ5LCBh bmQgdGhlIGFwcGxpY2F0aW9uIG5lZWRzDQoNCiAgICAgIHRvIGhhbmRsZSB0aGUgY29uc2VxdWVu Y2VzIG9mIHRoYXQgKHNlZSBTZWN0aW9uIDQuMS4zLjIpLiAgVGhlDQoNCiAgICAgIFVyaS1Ib3N0 IG1heSBlaXRoZXIgYmUgb21pdHRlZCwgcmV2ZWFsIGluZm9ybWF0aW9uIGVxdWl2YWxlbnQgdG8N Cg0KICAgICAgdGhhdCBvZiB0aGUgSVAgYWRkcmVzcyBvciBtb3JlIHByaXZhY3ktc2Vuc2l0aXZl IGluZm9ybWF0aW9uLA0KDQogICAgICB3aGljaCBpcyBkaXNjb3VyYWdlZC4NCg0KDQoNCiAgIG8g IE9ic2VydmUuICBUaGUgT3V0ZXIgT2JzZXJ2ZSBvcHRpb24gaXMgaW50ZW5kZWQgZm9yIGEgcHJv eHkgdG8NCg0KICAgICAgc3VwcG9ydCBmb3J3YXJkaW5nIG9mIE9ic2VydmUgbWVzc2FnZXMsIGJ1 dCBpcyBpZ25vcmVkIGJ5IHRoZQ0KDQogICAgICBlbmRwb2ludHMgc2luY2UgdGhlIElubmVyIE9i c2VydmUgZGV0ZXJtaW5lcyB0aGUgcHJvY2Vzc2luZyBpbiB0aGUNCg0KICAgICAgZW5kcG9pbnRz LiAgU2luY2UgdGhlIFBhcnRpYWwgSVYgcHJvdmlkZXMgYWJzb2x1dGUgb3JkZXJpbmcgb2YNCg0K ICAgICAgbm90aWZpY2F0aW9ucyBpdCBpcyBub3QgcG9zc2libGUgZm9yIGFuIGludGVybWVkaWFy eSB0byBzcG9vZg0KDQogICAgICByZW9yZGVyaW5nIChzZWUgU2VjdGlvbiA0LjEuMy41KS4gIFRo ZSBhYnNlbmNlIG9mIFBhcnRpYWwgSVYsDQoNCiAgICAgIHNpbmNlIG9ubHkgYWxsb3dlZCBmb3Ig dGhlIGZpcnN0IG5vdGlmaWNhdGlvbiwgZG9lcyBub3QgcHJldmVudA0KDQogICAgICBjb3JyZWN0 IG9yZGVyaW5nIG9mIG5vdGlmaWNhdGlvbnMuICBUaGUgc2l6ZSBhbmQgZGlzdHJpYnV0aW9ucyBv Zg0KDQogICAgICBub3RpZmljYXRpb25zIG92ZXIgdGltZSBtYXkgcmV2ZWFsIGluZm9ybWF0aW9u IGFib3V0IHRoZSBjb250ZW50DQoNCiAgICAgIG9yIG5hdHVyZSBvZiB0aGUgbm90aWZpY2F0aW9u cy4gIENhbmNlbGxhdGlvbnMgKFNlY3Rpb24gNC4xLjMuNS4xKQ0KDQogICAgICBhcmUgbm90IGJv dW5kIHRvIHRoZSBjb3JyZXNwb25kaW5nIHJlZ2lzdHJhdGlvbnMgaW4gdGhlIHNhbWUgd2F5DQoN CiAgICAgIHJlc3BvbnNlcyBhcmUgYm91bmQgdG8gcmVxdWVzdHMgaW4gT1NDT1JFIChzZWUgQXBw ZW5kaXggRC4yKSwgYnV0DQoNCiAgICAgIHRoYXQgZG9lcyBub3Qgb3BlbiB1cCBmb3IgYXR0YWNr cyBiYXNlZCBvbiBtaXNtYXRjaGVkDQoNCiAgICAgY2FuY2VsbGF0aW9ucywgc2luY2UgW1JGQzc2 NDFdIHNwZWNpZmllcyB0aGF0IGZvciBjYW5jZWxsYXRpb25zIHRvDQoNCiAgICAgYmUgYWNjZXB0 ZWQsIGFsbCBvcHRpb25zIGV4Y2VwdCBmb3IgRVRhZ3MgTVVTVCBiZSB0aGUgc2FtZSAoc2VlDQoN CiAgICAgIFNlY3Rpb24gMy42IG9mIFtSRkM3NjQxXSkuICBGb3IgZGlmZmVyZW50IHRhcmdldCBy ZXNvdXJjZXMsIHRoZQ0KDQogICAgICBPU0NPUkUgb3B0aW9uIGlzIGRpZmZlcmVudCwgYW5kIGV2 ZW4gaWYgdGhlIFRva2VuIGlzIG1vZGlmaWVkIHRvDQoNCiAgICAgIG1hdGNoIGEgZGlmZmVyZW50 IG9ic2VydmF0aW9uLCBzdWNoIGEgY2FuY2VsbGF0aW9uIHdvdWxkIG5vdCBiZQ0KDQogICAgICBh Y2NlcHRlZC4NCg0KDQoNCiAgIG8gIEJsb2NrMS9CbG9jazIvU2l6ZTEvU2l6ZTIuICBUaGUgT3V0 ZXIgQmxvY2sgb3B0aW9ucyBlbmFibGVzDQoNCiAgICAgIGZyYWdtZW50YXRpb24gb2YgT1NDT1JF IG1lc3NhZ2VzIGluIGFkZGl0aW9uIHRvIHNlZ21lbnRhdGlvbg0KDQogICAgICBwZXJmb3JtZWQg YnkgdGhlIElubmVyIEJsb2NrIG9wdGlvbnMuICBUaGUgcHJlc2VuY2Ugb2YgdGhlc2UNCg0KICAg ICAgb3B0aW9ucyBpbmRpY2F0ZXMgYSBsYXJnZSBtZXNzYWdlIGJlaW5nIHNlbnQgYW5kIHRoZSBt ZXNzYWdlIHNpemUNCg0KICAgICAgY2FuIGJlIGVzdGltYXRlZCBhbmQgdXNlZCBmb3IgdHJhZmZp YyBhbmFseXNpcy4gIE1hbmlwdWxhdGluZw0KDQogICAgICB0aGVzZSBvcHRpb25zIGlzIGEgcG90 ZW50aWFsIGRlbmlhbC1vZi1zZXJ2aWNlIGF0dGFjaywgZS5nLg0KDQogICAgICBpbmplY3Rpb24g b2YgYWxsZWdlZCBCbG9jayBmcmFnbWVudHMuICBUaGUgc3BlY2lmaWNhdGlvbiBvZiBhDQoNCiAg ICAgIG1heGltdW0gc2l6ZSBvZiBtZXNzYWdlLCBNQVhfVU5GUkFHTUVOVEVEX1NJWkUNCg0KICAg ICAgKFNlY3Rpb24gNC4xLjMuNC4yKSwgYWJvdmUgd2hpY2ggbWVzc2FnZXMgd2lsbCBiZSBkcm9w cGVkLCBpcw0KDQogICAgICBpbnRlbmRlZCBhcyBvbmUgbWVhc3VyZSB0byBtaXRpZ2F0ZSB0aGlz IGtpbmQgb2YgYXR0YWNrLg0KDQoNCg0KICAgbyAgTm8tUmVzcG9uc2UuICBUaGUgT3V0ZXIgTm8t UmVzcG9uc2Ugb3B0aW9uIGlzIHVzZWQgdG8gc3VwcG9ydA0KDQogICAgICBwcm94eSBmdW5jdGlv bmFsaXR5LCBzcGVjaWZpY2FsbHkgdG8gYXZvaWQgZXJyb3IgdHJhbnNtaXNzaW9ucw0KDQogICAg ICBmcm9tIHByb3hpZXMgdG8gY2xpZW50cywgYW5kIHRvIGF2b2lkIGJhbmR3aWR0aCByZWR1Y3Rp b24gdG8NCg0KICAgICAgc2VydmVycyBieSBwcm94aWVzIGFwcGx5aW5nIGNvbmdlc3Rpb24gY29u dHJvbCB3aGVuIG5vdCByZWNlaXZpbmcNCg0KICAgICAgcmVzcG9uc2VzLiAgTW9kaWZ5aW5nIG9y IGludHJvZHVjaW5nIHRoaXMgb3B0aW9uIGlzIGEgcG90ZW50aWFsDQoNCiAgICAgIGRlbmlhbC1v Zi1zZXJ2aWNlIGF0dGFjayBhZ2FpbnN0IHRoZSBwcm94eSBvcGVyYXRpb25zLCBidXQgc2luY2UN Cg0KICAgICAgdGhlIG9wdGlvbiBoYXMgYW4gSW5uZXIgdmFsdWUgaXRzIHVzZSBjYW4gYmUgc2Vj dXJlbHkgYWdyZWVkDQoNCiAgICAgIGJldHdlZW4gdGhlIGVuZHBvaW50cy4gIFRoZSBwcmVzZW5j ZSBvZiB0aGlzIG9wdGlvbiBpcyBub3QNCg0KICAgICAgZXhwZWN0ZWQgdG8gcmV2ZWFsIGFueSBz ZW5zaXRpdmUgaW5mb3JtYXRpb24gYWJvdXQgdGhlIG1lc3NhZ2UNCg0KICAgICAgZXhjaGFuZ2Uu DQoNCg0KDQpTZWxhbmRlciwgZXQgYWwuICAgICAgICBFeHBpcmVzIEphbnVhcnkgMjcsIDIwMTkg ICAgICAgICAgICAgICBbUGFnZSA3OF0NCg0KDQoNCkludGVybmV0LURyYWZ0ICAgICAgICAgICAg ICAgICAgIE9TQ09SRSAgICAgICAgICAgICAgICAgICAgICAgIEp1bHkgMjAxOA0KDQoNCg0KICAg byAgT1NDT1JFLiAgVGhlIE9TQ09SRSBvcHRpb24gY29udGFpbnMgaW5mb3JtYXRpb24gYWJvdXQg dGhlDQoNCiAgICAgIGNvbXByZXNzZWQgQ09TRSBoZWFkZXIuICBDaGFuZ2luZyB0aGlzIGZpZWxk IG1heSBjYXVzZSBPU0NPUkUNCg0KICAgICAgdmVyaWZpY2F0aW9uIHRvIGZhaWwuDQoNCg0KDQpE LjQuMy4gIEVycm9yIGFuZCBTaWduYWxpbmcgTWVzc2FnZXMNCg0KDQoNCiAgIEVycm9yIG1lc3Nh Z2VzIG9jY3VycmluZyBkdXJpbmcgQ29BUCBwcm9jZXNzaW5nIGFyZSBwcm90ZWN0ZWQgZW5kLXRv LQ0KDQogICBlbmQuICBFcnJvciBtZXNzYWdlcyBvY2N1cnJpbmcgZHVyaW5nIE9TQ09SRSBwcm9j ZXNzaW5nIGFyZSBub3QNCg0KICAgYWx3YXlzIHBvc3NpYmxlIHRvIHByb3RlY3QsIGUuZy4gaWYg dGhlIHJlY2VpdmluZyBlbmRwb2ludCBjYW5ub3QNCg0KICAgbG9jYXRlIHRoZSByaWdodCBzZWN1 cml0eSBjb250ZXh0LiAgRm9yIHRoaXMgc2V0dGluZywgdW5wcm90ZWN0ZWQNCg0KICAgZXJyb3Ig bWVzc2FnZXMgYXJlIGFsbG93ZWQgYXMgc3BlY2lmaWVkIHRvIHByZXZlbnQgZXh0ZW5zaXZlDQoN CiAgIHJldHJhbnNtaXNzaW9ucy4gIFRob3NlIGVycm9yIG1lc3NhZ2VzIGNhbiBiZSBzcG9vZmVk IG9yIG1hbmlwdWxhdGVkLA0KDQogICB3aGljaCBpcyBhIHBvdGVudGlhbCBkZW5pYWwtb2Ytc2Vy dmljZSBhdHRhY2suDQoNCg0KDQogICBTaWduYWxpbmcgbWVzc2FnZXMgdXNlZCBpbiBDb0FQIG92 ZXIgVENQIFtSRkM4MzIzXSBhcmUgaW50ZW5kZWQgdG8gYmUNCg0KICAgaG9wLWJ5LWhvcDsgc3Bv b2Zpbmcgc2lnbmFsaW5nIG1lc3NhZ2VzIGNhbiBiZSB1c2VkIGFzIGEgZGVuaWFsLW9mLQ0KDQog ICBzZXJ2aWNlIGF0dGFjayBvZiBhIFRDUCBjb25uZWN0aW9uLg0KDQoNCg0KRC40LjQuICBIVFRQ IE1lc3NhZ2UgRmllbGRzDQoNCg0KDQogICBJbiBjb250cmFzdCB0byBDb0FQLCB3aGVyZSBPU0NP UkUgZG9lcyBub3QgcHJvdGVjdCBoZWFkZXIgZmllbGRzIHRvDQoNCiAgIGVuYWJsZSBDb0FQLUNv QVAgcHJveHkgb3BlcmF0aW9ucywgdGhlIHVzZSBvZiBPU0NPUkUgd2l0aCBIVFRQIGlzDQoNCiAg IHJlc3RyaWN0ZWQgdG8gdHJhbnNwb3J0aW5nIGEgcHJvdGVjdGVkIENvQVAgbWVzc2FnZSBvdmVy IGFuIEhUVFAgaG9wLg0KDQogICBBbnkgdW5wcm90ZWN0ZWQgSFRUUCBtZXNzYWdlIGZpZWxkcyBt YXkgcmV2ZWFsIGluZm9ybWF0aW9uIGFib3V0IHRoZQ0KDQogICB0cmFuc3BvcnQgb2YgdGhlIE9T Q09SRSBtZXNzYWdlIGFuZCBlbmFibGUgdmFyaW91cyBkZW5pYWwtb2Ytc2VydmljZQ0KDQogICBh dHRhY2tzLiAgSXQgaXMgcmVjb21tZW5kZWQgdG8gYWRkaXRpb25hbGx5IHVzZSBUTFMgW1JGQzUy NDZdIGZvcg0KDQogIEhUVFAgaG9wcywgd2hpY2ggZW5hYmxlcyBlbmNyeXB0aW9uIGFuZCBpbnRl Z3JpdHkgcHJvdGVjdGlvbiBvZg0KDQogICBoZWFkZXJzLCBidXQgc3RpbGwgbGVhdmVzIHNvbWUg aW5mb3JtYXRpb24gZm9yIHRyYWZmaWMgYW5hbHlzaXMuDQoNCg0KDQpBcHBlbmRpeCBFLiAgQ0RE TCBTdW1tYXJ5DQoNCg0KDQoNCg0KDQoNCg0KDQpfX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fXw0KDQpzZWNkaXIgbWFpbGluZyBsaXN0DQoNCnNlY2RpckBpZXRm Lm9yZw0KDQpodHRwczovL3d3dy5pZXRmLm9yZy9tYWlsbWFuL2xpc3RpbmZvL3NlY2Rpcg0KDQp3 aWtpOiBodHRwOi8vdG9vbHMuaWV0Zi5vcmcvYXJlYS9zZWMvdHJhYy93aWtpL1NlY0RpclJldmll dw0KDQo= --_000_318b6f541a9b4317be4bbfa4b0b1fa3eericssoncom_ Content-Type: text/html; charset="utf-8" Content-Transfer-Encoding: base64 PGh0bWwgeG1sbnM6dj0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTp2bWwiIHhtbG5zOm89InVy bjpzY2hlbWFzLW1pY3Jvc29mdC1jb206b2ZmaWNlOm9mZmljZSIgeG1sbnM6dz0idXJuOnNjaGVt YXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6d29yZCIgeG1sbnM6bT0iaHR0cDovL3NjaGVtYXMubWlj cm9zb2Z0LmNvbS9vZmZpY2UvMjAwNC8xMi9vbW1sIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcv VFIvUkVDLWh0bWw0MCI+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIg Y29udGVudD0idGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjxtZXRhIG5hbWU9IkdlbmVyYXRv ciIgY29udGVudD0iTWljcm9zb2Z0IFdvcmQgMTUgKGZpbHRlcmVkIG1lZGl1bSkiPg0KPHN0eWxl PjwhLS0NCi8qIEZvbnQgRGVmaW5pdGlvbnMgKi8NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6 V2luZ2RpbmdzOw0KCXBhbm9zZS0xOjUgMCAwIDAgMCAwIDAgMCAwIDA7fQ0KQGZvbnQtZmFjZQ0K CXtmb250LWZhbWlseToiQ2FtYnJpYSBNYXRoIjsNCglwYW5vc2UtMToyIDQgNSAzIDUgNCA2IDMg MiA0O30NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6Q2FsaWJyaTsNCglwYW5vc2UtMToyIDE1 IDUgMiAyIDIgNCAzIDIgNDt9DQpAZm9udC1mYWNlDQoJe2ZvbnQtZmFtaWx5OiJTZWdvZSBVSSBF bW9qaSI7fQ0KLyogU3R5bGUgRGVmaW5pdGlvbnMgKi8NCnAuTXNvTm9ybWFsLCBsaS5Nc29Ob3Jt YWwsIGRpdi5Nc29Ob3JtYWwNCgl7bWFyZ2luOjBpbjsNCgltYXJnaW4tYm90dG9tOi4wMDAxcHQ7 DQoJZm9udC1zaXplOjExLjBwdDsNCglmb250LWZhbWlseToiQ2FsaWJyaSIsc2Fucy1zZXJpZjt9 DQphOmxpbmssIHNwYW4uTXNvSHlwZXJsaW5rDQoJe21zby1zdHlsZS1wcmlvcml0eTo5OTsNCglj b2xvcjojMDU2M0MxOw0KCXRleHQtZGVjb3JhdGlvbjp1bmRlcmxpbmU7fQ0KYTp2aXNpdGVkLCBz cGFuLk1zb0h5cGVybGlua0ZvbGxvd2VkDQoJe21zby1zdHlsZS1wcmlvcml0eTo5OTsNCgljb2xv cjojOTU0RjcyOw0KCXRleHQtZGVjb3JhdGlvbjp1bmRlcmxpbmU7fQ0KcC5Nc29QbGFpblRleHQs IGxpLk1zb1BsYWluVGV4dCwgZGl2Lk1zb1BsYWluVGV4dA0KCXttc28tc3R5bGUtcHJpb3JpdHk6 OTk7DQoJbXNvLXN0eWxlLWxpbms6IlBsYWluIFRleHQgQ2hhciI7DQoJbWFyZ2luOjBpbjsNCglt YXJnaW4tYm90dG9tOi4wMDAxcHQ7DQoJZm9udC1zaXplOjExLjBwdDsNCglmb250LWZhbWlseToi Q2FsaWJyaSIsc2Fucy1zZXJpZjt9DQpzcGFuLkVtYWlsU3R5bGUxNw0KCXttc28tc3R5bGUtdHlw ZTpwZXJzb25hbC1jb21wb3NlOw0KCWZvbnQtZmFtaWx5OiJDYWxpYnJpIixzYW5zLXNlcmlmOw0K CWNvbG9yOndpbmRvd3RleHQ7fQ0KcC5tc29ub3JtYWwwLCBsaS5tc29ub3JtYWwwLCBkaXYubXNv bm9ybWFsMA0KCXttc28tc3R5bGUtbmFtZTptc29ub3JtYWw7DQoJbXNvLW1hcmdpbi10b3AtYWx0 OmF1dG87DQoJbWFyZ2luLXJpZ2h0OjBpbjsNCgltc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0bzsN CgltYXJnaW4tbGVmdDowaW47DQoJZm9udC1zaXplOjExLjBwdDsNCglmb250LWZhbWlseToiQ2Fs aWJyaSIsc2Fucy1zZXJpZjt9DQpzcGFuLlBsYWluVGV4dENoYXINCgl7bXNvLXN0eWxlLW5hbWU6 IlBsYWluIFRleHQgQ2hhciI7DQoJbXNvLXN0eWxlLXByaW9yaXR5Ojk5Ow0KCW1zby1zdHlsZS1s aW5rOiJQbGFpbiBUZXh0IjsNCglmb250LWZhbWlseToiQ2FsaWJyaSIsc2Fucy1zZXJpZjt9DQpz cGFuLkVtYWlsU3R5bGUyMQ0KCXttc28tc3R5bGUtdHlwZTpwZXJzb25hbDt9DQouTXNvQ2hwRGVm YXVsdA0KCXttc28tc3R5bGUtdHlwZTpleHBvcnQtb25seTsNCglmb250LWZhbWlseToiQ2FsaWJy aSIsc2Fucy1zZXJpZjt9DQpAcGFnZSBXb3JkU2VjdGlvbjENCgl7c2l6ZTo4LjVpbiAxMS4waW47 DQoJbWFyZ2luOjEuMGluIDEuMGluIDEuMGluIDEuMGluO30NCmRpdi5Xb3JkU2VjdGlvbjENCgl7 cGFnZTpXb3JkU2VjdGlvbjE7fQ0KLyogTGlzdCBEZWZpbml0aW9ucyAqLw0KQGxpc3QgbDANCgl7 bXNvLWxpc3QtaWQ6MTI1MzkyMzgzOw0KCW1zby1saXN0LXRlbXBsYXRlLWlkczotMTAxMzgyNzc0 NDt9DQpAbGlzdCBsMDpsZXZlbDENCgl7bXNvLWxldmVsLW51bWJlci1mb3JtYXQ6YnVsbGV0Ow0K CW1zby1sZXZlbC10ZXh0Ou+CtzsNCgltc28tbGV2ZWwtdGFiLXN0b3A6LjVpbjsNCgltc28tbGV2 ZWwtbnVtYmVyLXBvc2l0aW9uOmxlZnQ7DQoJdGV4dC1pbmRlbnQ6LS4yNWluOw0KCW1zby1hbnNp LWZvbnQtc2l6ZToxMC4wcHQ7DQoJZm9udC1mYW1pbHk6U3ltYm9sO30NCkBsaXN0IGwwOmxldmVs Mg0KCXttc28tbGV2ZWwtbnVtYmVyLWZvcm1hdDpidWxsZXQ7DQoJbXNvLWxldmVsLXRleHQ674K3 Ow0KCW1zby1sZXZlbC10YWItc3RvcDoxLjBpbjsNCgltc28tbGV2ZWwtbnVtYmVyLXBvc2l0aW9u OmxlZnQ7DQoJdGV4dC1pbmRlbnQ6LS4yNWluOw0KCW1zby1hbnNpLWZvbnQtc2l6ZToxMC4wcHQ7 DQoJZm9udC1mYW1pbHk6U3ltYm9sO30NCkBsaXN0IGwwOmxldmVsMw0KCXttc28tbGV2ZWwtbnVt YmVyLWZvcm1hdDpidWxsZXQ7DQoJbXNvLWxldmVsLXRleHQ674K3Ow0KCW1zby1sZXZlbC10YWIt c3RvcDoxLjVpbjsNCgltc28tbGV2ZWwtbnVtYmVyLXBvc2l0aW9uOmxlZnQ7DQoJdGV4dC1pbmRl bnQ6LS4yNWluOw0KCW1zby1hbnNpLWZvbnQtc2l6ZToxMC4wcHQ7DQoJZm9udC1mYW1pbHk6U3lt Ym9sO30NCkBsaXN0IGwwOmxldmVsNA0KCXttc28tbGV2ZWwtbnVtYmVyLWZvcm1hdDpidWxsZXQ7 DQoJbXNvLWxldmVsLXRleHQ674K3Ow0KCW1zby1sZXZlbC10YWItc3RvcDoyLjBpbjsNCgltc28t bGV2ZWwtbnVtYmVyLXBvc2l0aW9uOmxlZnQ7DQoJdGV4dC1pbmRlbnQ6LS4yNWluOw0KCW1zby1h bnNpLWZvbnQtc2l6ZToxMC4wcHQ7DQoJZm9udC1mYW1pbHk6U3ltYm9sO30NCkBsaXN0IGwwOmxl dmVsNQ0KCXttc28tbGV2ZWwtbnVtYmVyLWZvcm1hdDpidWxsZXQ7DQoJbXNvLWxldmVsLXRleHQ6 74K3Ow0KCW1zby1sZXZlbC10YWItc3RvcDoyLjVpbjsNCgltc28tbGV2ZWwtbnVtYmVyLXBvc2l0 aW9uOmxlZnQ7DQoJdGV4dC1pbmRlbnQ6LS4yNWluOw0KCW1zby1hbnNpLWZvbnQtc2l6ZToxMC4w cHQ7DQoJZm9udC1mYW1pbHk6U3ltYm9sO30NCkBsaXN0IGwwOmxldmVsNg0KCXttc28tbGV2ZWwt bnVtYmVyLWZvcm1hdDpidWxsZXQ7DQoJbXNvLWxldmVsLXRleHQ674K3Ow0KCW1zby1sZXZlbC10 YWItc3RvcDozLjBpbjsNCgltc28tbGV2ZWwtbnVtYmVyLXBvc2l0aW9uOmxlZnQ7DQoJdGV4dC1p bmRlbnQ6LS4yNWluOw0KCW1zby1hbnNpLWZvbnQtc2l6ZToxMC4wcHQ7DQoJZm9udC1mYW1pbHk6 U3ltYm9sO30NCkBsaXN0IGwwOmxldmVsNw0KCXttc28tbGV2ZWwtbnVtYmVyLWZvcm1hdDpidWxs ZXQ7DQoJbXNvLWxldmVsLXRleHQ674K3Ow0KCW1zby1sZXZlbC10YWItc3RvcDozLjVpbjsNCglt c28tbGV2ZWwtbnVtYmVyLXBvc2l0aW9uOmxlZnQ7DQoJdGV4dC1pbmRlbnQ6LS4yNWluOw0KCW1z by1hbnNpLWZvbnQtc2l6ZToxMC4wcHQ7DQoJZm9udC1mYW1pbHk6U3ltYm9sO30NCkBsaXN0IGww OmxldmVsOA0KCXttc28tbGV2ZWwtbnVtYmVyLWZvcm1hdDpidWxsZXQ7DQoJbXNvLWxldmVsLXRl eHQ674K3Ow0KCW1zby1sZXZlbC10YWItc3RvcDo0LjBpbjsNCgltc28tbGV2ZWwtbnVtYmVyLXBv c2l0aW9uOmxlZnQ7DQoJdGV4dC1pbmRlbnQ6LS4yNWluOw0KCW1zby1hbnNpLWZvbnQtc2l6ZTox MC4wcHQ7DQoJZm9udC1mYW1pbHk6U3ltYm9sO30NCkBsaXN0IGwwOmxldmVsOQ0KCXttc28tbGV2 ZWwtbnVtYmVyLWZvcm1hdDpidWxsZXQ7DQoJbXNvLWxldmVsLXRleHQ674K3Ow0KCW1zby1sZXZl bC10YWItc3RvcDo0LjVpbjsNCgltc28tbGV2ZWwtbnVtYmVyLXBvc2l0aW9uOmxlZnQ7DQoJdGV4 dC1pbmRlbnQ6LS4yNWluOw0KCW1zby1hbnNpLWZvbnQtc2l6ZToxMC4wcHQ7DQoJZm9udC1mYW1p bHk6U3ltYm9sO30NCkBsaXN0IGwxDQoJe21zby1saXN0LWlkOjE5NjM3MjY5NTA7DQoJbXNvLWxp c3QtdHlwZTpoeWJyaWQ7DQoJbXNvLWxpc3QtdGVtcGxhdGUtaWRzOi04MjcwMzEwMTQgLTUzMjk2 MDk0IDY3Njk4NjkxIDY3Njk4NjkzIDY3Njk4Njg5IDY3Njk4NjkxIDY3Njk4NjkzIDY3Njk4Njg5 IDY3Njk4NjkxIDY3Njk4NjkzO30NCkBsaXN0IGwxOmxldmVsMQ0KCXttc28tbGV2ZWwtc3RhcnQt YXQ6MDsNCgltc28tbGV2ZWwtbnVtYmVyLWZvcm1hdDpidWxsZXQ7DQoJbXNvLWxldmVsLXRleHQ6 74K3Ow0KCW1zby1sZXZlbC10YWItc3RvcDpub25lOw0KCW1zby1sZXZlbC1udW1iZXItcG9zaXRp b246bGVmdDsNCgl0ZXh0LWluZGVudDotLjI1aW47DQoJZm9udC1mYW1pbHk6U3ltYm9sOw0KCW1z by1mYXJlYXN0LWZvbnQtZmFtaWx5OkNhbGlicmk7DQoJbXNvLWJpZGktZm9udC1mYW1pbHk6IlRp bWVzIE5ldyBSb21hbiI7fQ0KQGxpc3QgbDE6bGV2ZWwyDQoJe21zby1sZXZlbC1udW1iZXItZm9y bWF0OmJ1bGxldDsNCgltc28tbGV2ZWwtdGV4dDpvOw0KCW1zby1sZXZlbC10YWItc3RvcDpub25l Ow0KCW1zby1sZXZlbC1udW1iZXItcG9zaXRpb246bGVmdDsNCgl0ZXh0LWluZGVudDotLjI1aW47 DQoJZm9udC1mYW1pbHk6IkNvdXJpZXIgTmV3Ijt9DQpAbGlzdCBsMTpsZXZlbDMNCgl7bXNvLWxl dmVsLW51bWJlci1mb3JtYXQ6YnVsbGV0Ow0KCW1zby1sZXZlbC10ZXh0Ou+CpzsNCgltc28tbGV2 ZWwtdGFiLXN0b3A6bm9uZTsNCgltc28tbGV2ZWwtbnVtYmVyLXBvc2l0aW9uOmxlZnQ7DQoJdGV4 dC1pbmRlbnQ6LS4yNWluOw0KCWZvbnQtZmFtaWx5OldpbmdkaW5nczt9DQpAbGlzdCBsMTpsZXZl bDQNCgl7bXNvLWxldmVsLW51bWJlci1mb3JtYXQ6YnVsbGV0Ow0KCW1zby1sZXZlbC10ZXh0Ou+C tzsNCgltc28tbGV2ZWwtdGFiLXN0b3A6bm9uZTsNCgltc28tbGV2ZWwtbnVtYmVyLXBvc2l0aW9u OmxlZnQ7DQoJdGV4dC1pbmRlbnQ6LS4yNWluOw0KCWZvbnQtZmFtaWx5OlN5bWJvbDt9DQpAbGlz dCBsMTpsZXZlbDUNCgl7bXNvLWxldmVsLW51bWJlci1mb3JtYXQ6YnVsbGV0Ow0KCW1zby1sZXZl bC10ZXh0Om87DQoJbXNvLWxldmVsLXRhYi1zdG9wOm5vbmU7DQoJbXNvLWxldmVsLW51bWJlci1w b3NpdGlvbjpsZWZ0Ow0KCXRleHQtaW5kZW50Oi0uMjVpbjsNCglmb250LWZhbWlseToiQ291cmll ciBOZXciO30NCkBsaXN0IGwxOmxldmVsNg0KCXttc28tbGV2ZWwtbnVtYmVyLWZvcm1hdDpidWxs ZXQ7DQoJbXNvLWxldmVsLXRleHQ674KnOw0KCW1zby1sZXZlbC10YWItc3RvcDpub25lOw0KCW1z by1sZXZlbC1udW1iZXItcG9zaXRpb246bGVmdDsNCgl0ZXh0LWluZGVudDotLjI1aW47DQoJZm9u dC1mYW1pbHk6V2luZ2RpbmdzO30NCkBsaXN0IGwxOmxldmVsNw0KCXttc28tbGV2ZWwtbnVtYmVy LWZvcm1hdDpidWxsZXQ7DQoJbXNvLWxldmVsLXRleHQ674K3Ow0KCW1zby1sZXZlbC10YWItc3Rv cDpub25lOw0KCW1zby1sZXZlbC1udW1iZXItcG9zaXRpb246bGVmdDsNCgl0ZXh0LWluZGVudDot LjI1aW47DQoJZm9udC1mYW1pbHk6U3ltYm9sO30NCkBsaXN0IGwxOmxldmVsOA0KCXttc28tbGV2 ZWwtbnVtYmVyLWZvcm1hdDpidWxsZXQ7DQoJbXNvLWxldmVsLXRleHQ6bzsNCgltc28tbGV2ZWwt dGFiLXN0b3A6bm9uZTsNCgltc28tbGV2ZWwtbnVtYmVyLXBvc2l0aW9uOmxlZnQ7DQoJdGV4dC1p bmRlbnQ6LS4yNWluOw0KCWZvbnQtZmFtaWx5OiJDb3VyaWVyIE5ldyI7fQ0KQGxpc3QgbDE6bGV2 ZWw5DQoJe21zby1sZXZlbC1udW1iZXItZm9ybWF0OmJ1bGxldDsNCgltc28tbGV2ZWwtdGV4dDrv gqc7DQoJbXNvLWxldmVsLXRhYi1zdG9wOm5vbmU7DQoJbXNvLWxldmVsLW51bWJlci1wb3NpdGlv bjpsZWZ0Ow0KCXRleHQtaW5kZW50Oi0uMjVpbjsNCglmb250LWZhbWlseTpXaW5nZGluZ3M7fQ0K b2wNCgl7bWFyZ2luLWJvdHRvbTowaW47fQ0KdWwNCgl7bWFyZ2luLWJvdHRvbTowaW47fQ0KLS0+ PC9zdHlsZT48IS0tW2lmIGd0ZSBtc28gOV0+PHhtbD4NCjxvOnNoYXBlZGVmYXVsdHMgdjpleHQ9 ImVkaXQiIHNwaWRtYXg9IjEwMjYiIC8+DQo8L3htbD48IVtlbmRpZl0tLT48IS0tW2lmIGd0ZSBt c28gOV0+PHhtbD4NCjxvOnNoYXBlbGF5b3V0IHY6ZXh0PSJlZGl0Ij4NCjxvOmlkbWFwIHY6ZXh0 PSJlZGl0IiBkYXRhPSIxIiAvPg0KPC9vOnNoYXBlbGF5b3V0PjwveG1sPjwhW2VuZGlmXS0tPg0K PC9oZWFkPg0KPGJvZHkgbGFuZz0iRU4tVVMiIGxpbms9IiMwNTYzQzEiIHZsaW5rPSIjOTU0Rjcy Ij4NCjxkaXYgY2xhc3M9IldvcmRTZWN0aW9uMSI+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij5I aSBHb3JhbiwgPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij48bzpwPiZu YnNwOzwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPlRoYW5rIHlvdSBmb3IgeW91 ciBmZWVkIGJhY2tzLiBJIGJlbGlldmUgYWxsIG15IGNvbmNlcm5zIGhhdmUgYmVlbiBhZGRyZXNz ZWQuIFlvdSBjYW4gc2VlIGlubGluZSB0aGUgc3BlY2lmaWMgcmVzcG9uc2UuICZsdDttZ2x0MiZn dDsmbHQ7L21nbHQyJmd0OzxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+ PG86cD4mbmJzcDs8L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij5Zb3VycywgPG86 cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij5EYW5pZWw8bzpwPjwvbzpwPjwv cD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPHAgY2xh c3M9Ik1zb1BsYWluVGV4dCI+LS0tLS1PcmlnaW5hbCBNZXNzYWdlLS0tLS08YnI+DQpGcm9tOiBz ZWNkaXIgJmx0OzxhIGhyZWY9Im1haWx0bzpzZWNkaXItYm91bmNlc0BpZXRmLm9yZyI+c2VjZGly LWJvdW5jZXNAaWV0Zi5vcmc8L2E+Jmd0OyBPbiBCZWhhbGYgT2YgR8O2cmFuIFNlbGFuZGVyPGJy Pg0KU2VudDogVGh1cnNkYXksIEF1Z3VzdCAxNiwgMjAxOCA5OjI3IEFNPGJyPg0KVG86IDxhIGhy ZWY9Im1haWx0bzpzZWNkaXJAaWV0Zi5vcmciPnNlY2RpckBpZXRmLm9yZzwvYT48YnI+DQpDYzog PGEgaHJlZj0ibWFpbHRvOmRyYWZ0LWlldGYtY29yZS1vYmplY3Qtc2VjdXJpdHkuYWxsQGlldGYu b3JnIj5kcmFmdC1pZXRmLWNvcmUtb2JqZWN0LXNlY3VyaXR5LmFsbEBpZXRmLm9yZzwvYT47DQo8 YSBocmVmPSJtYWlsdG86aWV0ZkBpZXRmLm9yZyI+aWV0ZkBpZXRmLm9yZzwvYT47IDxhIGhyZWY9 Im1haWx0bzpjb3JlQGlldGYub3JnIj4NCmNvcmVAaWV0Zi5vcmc8L2E+PGJyPg0KU3ViamVjdDog UmU6IFtzZWNkaXJdIFNlY2RpciBsYXN0IGNhbGwgcmV2aWV3IG9mIGRyYWZ0LWlldGYtY29yZS1v YmplY3Qtc2VjdXJpdHktMTQ8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQi PjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+PG86cD4mbmJz cDs8L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7SGVsbG8gRGFuaWVsLDxv OnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0OzxvOnA+Jm5ic3A7PC9v OnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0O1RoYW5rcyBmb3IgeW91ciByZXZp ZXcuIFBsZWFzZSBmaW5kIHJlc3BvbnNlcyBpbmxpbmUuPG86cD48L286cD48L3A+DQo8cCBjbGFz cz0iTXNvUGxhaW5UZXh0Ij48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFp blRleHQiPiZuYnNwOyBHw7ZyYW48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRl eHQiPiZndDs8bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZn dDtPbiAyMDE4LTA3LTMxLCAwMDoxMCwgJnF1b3Q7RGFuaWVsIE1pZ2F1bHQmcXVvdDsgJmx0Ozxh IGhyZWY9Im1haWx0bzpkYW5pZWwubWlnYXVsdEBlcmljc3Nvbi5jb20iPjxzcGFuIHN0eWxlPSJj b2xvcjp3aW5kb3d0ZXh0O3RleHQtZGVjb3JhdGlvbjpub25lIj5kYW5pZWwubWlnYXVsdEBlcmlj c3Nvbi5jb208L3NwYW4+PC9hPiZndDs8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFp blRleHQiPiZndDt3cm90ZTo8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQi PiZndDs8bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDsm Z3Q7UmV2aWV3ZXI6IERhbmllbCBNaWdhdWx0PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNv UGxhaW5UZXh0Ij4mZ3Q7Jmd0O1JldmlldyByZXN1bHQ6IEhhcyBJc3N1ZXM8bzpwPjwvbzpwPjwv cD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDsmZ3Q7PG86cD4mbmJzcDs8L286cD48L3A+ DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7Jmd0O0hpLDxvOnA+PC9vOnA+PC9wPg0KPHAg Y2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0OyZndDs8bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjxwIGNs YXNzPSJNc29QbGFpblRleHQiPiZndDsmZ3Q7UmV2aWV3ZXI6IERhbmllbCBNaWdhdWx0PG86cD48 L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7Jmd0O1JldmlldyByZXN1bHQ6 IEhhcyBJc3N1ZXM8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDsm Z3Q7PG86cD4mbmJzcDs8L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7Jmd0 O0kgaGF2ZSByZXZpZXdlZCB0aGlzIGRvY3VtZW50IGFzIHBhcnQgb2YgdGhlIHNlY3VyaXR5IGRp cmVjdG9yYXRlJ3M8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDsm Z3Q7b25nb2luZzxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0OyZn dDtlZmZvcnQgdG8gcmV2aWV3IGFsbCBJRVRGIGRvY3VtZW50cyBiZWluZyBwcm9jZXNzZWQgYnkg dGhlIElFU0cuJm5ic3A7IFRoZXNlPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5U ZXh0Ij4mZ3Q7Jmd0O2NvbW1lbnRzIHdlcmUgd3JpdHRlbiBwcmltYXJpbHkgZm9yIHRoZSBiZW5l Zml0IG9mIHRoZSBzZWN1cml0eSBhcmVhPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxh aW5UZXh0Ij4mZ3Q7Jmd0O2RpcmVjdG9ycy48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Q bGFpblRleHQiPiZndDsmZ3Q7IERvY3VtZW50IGVkaXRvcnMgYW5kIFdHIGNoYWlycyBzaG91bGQg dHJlYXQmbmJzcDsgdGhlc2UgY29tbWVudHMganVzdCBsaWtlPG86cD48L286cD48L3A+DQo8cCBj bGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7Jmd0O2FueTxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9 Ik1zb1BsYWluVGV4dCI+Jmd0OyZndDtvdGhlciBsYXN0IGNhbGwgY29tbWVudHMuPG86cD48L286 cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7Jmd0OzxvOnA+Jm5ic3A7PC9vOnA+ PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0OyZndDtUaGUgc3VtbWFyeSBvZiB0aGUg cmV2aWV3IGlzIEhhcyAoc21hbGwpIElzc3Vlcy48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJN c29QbGFpblRleHQiPiZndDsmZ3Q7PG86cD4mbmJzcDs8L286cD48L3A+DQo8cCBjbGFzcz0iTXNv UGxhaW5UZXh0Ij4mZ3Q7Jmd0O0kgYW0gbm90IGFuIGV4cGVydCBpbiBDb0FQLiBUaGUgZG9jdW1l bnQgaXMgd2VsbCB3cml0dGVuLCBhbmQgSSBiZWxpZXZlPG86cD48L286cD48L3A+DQo8cCBjbGFz cz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7Jmd0O3NlY3VyaW5nIG9iamVjdHMgaXMgaW1wb3J0YW50LiBJ IGhhZCBjb21tZW50cyByZWdhcmRpbmcgdGhlIGRlc2NyaXB0aW9uPG86cD48L286cD48L3A+DQo8 cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7Jmd0O29mPG86cD48L286cD48L3A+DQo8cCBjbGFz cz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7Jmd0O3NlY3VyaXR5IGNvbnRleHRzLiBJIGhlc2l0YXRlZCBi ZXR3ZWVuIE5pdHMgYW5kIElzc3Vlcy4gSSBkbyBub3QgYmVsaWV2ZTxvOnA+PC9vOnA+PC9wPg0K PHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0OyZndDt0aGVzZTxvOnA+PC9vOnA+PC9wPg0KPHAg Y2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0OyZndDthcmUgbWFqb3IgZGVzaWduIGlzc3VlcywgYW5k IHNvbWUgY2xhcmlmaWNhdGlvbnMgbWF5IGJlIHN1ZmZpY2llbnQuIE90aGVyPG86cD48L286cD48 L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7Jmd0O2NvbW1lbnRzIGFyZSBtb3N0bHkg ZWRpdG9yaWFsIG5pdHMuIFBsZWFzZSBmaW5kIGFib3ZlIG15IGNvbW1lbnRzLiBJIGFtPG86cD48 L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7Jmd0O2hhcHB5PG86cD48L286 cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7Jmd0O3RvIGZvbGxvdyB1cCB0aGUg dXBkYXRlcy48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDsmZ3Q7 PG86cD4mbmJzcDs8L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7Jmd0OyZu YnNwOyZuYnNwOyZuYnNwOyZuYnNwOyBPYmplY3QgU2VjdXJpdHkgZm9yIENvbnN0cmFpbmVkIFJF U1RmdWwgRW52aXJvbm1lbnRzIChPU0NPUkUpPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNv UGxhaW5UZXh0Ij4mZ3Q7Jmd0OyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZu YnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNw OyZuYnNwOyZuYnNwOyBkcmFmdC1pZXRmLWNvcmUtb2JqZWN0LXNlY3VyaXR5LTE0PG86cD48L286 cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7Jmd0OzxvOnA+Jm5ic3A7PC9vOnA+ PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0OyZndDsxLiZuYnNwOyBJbnRyb2R1Y3Rp b248bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDsmZ3Q7PG86cD4m bmJzcDs8L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7Jmd0OyZuYnNwOyZu YnNwOyBUaGUgQ29uc3RyYWluZWQgQXBwbGljYXRpb24gUHJvdG9jb2wgKENvQVApIFtSRkM3MjUy XSBpcyBhIHdlYjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0OyZn dDsmbmJzcDsmbmJzcDsgdHJhbnNmZXIgcHJvdG9jb2wsIGRlc2lnbmVkIGZvciBjb25zdHJhaW5l ZCBub2RlcyBhbmQgbmV0d29ya3M8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRl eHQiPiZndDsmZ3Q7Jm5ic3A7Jm5ic3A7IFtSRkM3MjI4XSwgYW5kIG1heSBiZSBtYXBwZWQgZnJv bSBIVFRQIFtSRkM4MDc1XS4mbmJzcDsgQ29BUCBzcGVjaWZpZXMgdGhlPG86cD48L286cD48L3A+ DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7Jmd0OyZuYnNwOyZuYnNwOyB1c2Ugb2YgcHJv eGllcyBmb3Igc2NhbGFiaWxpdHkgYW5kIGVmZmljaWVuY3kgYW5kIHJlZmVyZW5jZXMgRFRMUzxv OnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0OyZndDsmbmJzcDsmbmJz cDsgW1JGQzYzNDddIGZvciBzZWN1cml0eS4mbmJzcDsgQ29BUC10by1Db0FQLCBIVFRQLXRvLUNv QVAsIGFuZCBDb0FQLXRvLUhUVFA8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRl eHQiPiZndDsmZ3Q7Jm5ic3A7Jm5ic3A7IHByb3hpZXMgcmVxdWlyZSBEVExTIG9yIFRMUyBbUkZD NTI0Nl0gdG8gYmUgdGVybWluYXRlZCBhdCB0aGUgcHJveHkuPG86cD48L286cD48L3A+DQo8cCBj bGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7Jmd0OyZuYnNwOyZuYnNwOyBUaGUgcHJveHkgdGhlcmVm b3JlIG5vdCBvbmx5IGhhcyBhY2Nlc3MgdG8gdGhlIGRhdGEgcmVxdWlyZWQgZm9yPG86cD48L286 cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7Jmd0OyZuYnNwOyZuYnNwOyBwZXJm b3JtaW5nIHRoZSBpbnRlbmRlZCBwcm94eSBmdW5jdGlvbmFsaXR5LCBidXQgaXMgYWxzbyBhYmxl IHRvPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7Jmd0OyZuYnNw OyZuYnNwOyBlYXZlc2Ryb3Agb24sIG9yIG1hbmlwdWxhdGUgYW55IHBhcnQgb2YsIHRoZSBtZXNz YWdlIHBheWxvYWQgYW5kPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4m Z3Q7Jmd0OyZuYnNwOyZuYnNwOyBtZXRhZGF0YSBpbiB0cmFuc2l0IGJldHdlZW4gdGhlIGVuZHBv aW50cy4mbmJzcDsgVGhlIHByb3h5IGNhbiBhbHNvPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0i TXNvUGxhaW5UZXh0Ij4mZ3Q7Jmd0OyZuYnNwOyZuYnNwOyBpbmplY3QsIGRlbGV0ZSwgb3IgcmVv cmRlciBwYWNrZXRzIHNpbmNlIHRoZXkgYXJlIG5vIGxvbmdlciBwcm90ZWN0ZWQ8bzpwPjwvbzpw PjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDsmZ3Q7Jm5ic3A7Jm5ic3A7IGJ5IChE KVRMUy48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDsmZ3Q7Jmx0 O21nbHQmZ3Q7PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7Jmd0 O1RoZSBwcm94eSBjYW4gYWxtb3N0IGRvIHdoYXRldmVyIGl0IHdhbnRzIGFzIG1lbnRpb25lZCBp biB0aGUgc2Vjb25kPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7 Jmd0O3NlbnRlbmNlLjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0 OyZndDtBY2Nlc3NpbmcgdGhlIGRhdGEgZW5hYmxlcyBpdCB0byBwYXNzaXZlbHkgbW9uaXRvciB0 aGUgY29tbXVuaWNhdGlvbi4mbmJzcDsgSTxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1Bs YWluVGV4dCI+Jmd0OyZndDt3b3VsZDxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWlu VGV4dCI+Jmd0OyZndDt0aHVzIHByb3Bvc2Ugc29tZSB0ZXh0IGFyb3VuZCB0aGVzZSBsaW5lczo8 bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDsmZ3Q7PG86cD4mbmJz cDs8L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7Jmd0O09MRDo8bzpwPjwv bzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDsmZ3Q7VGhlIHByb3h5IHRoZXJl Zm9yZSBub3Qgb25seSBoYXMgYWNjZXNzIHRvIHRoZSBkYXRhIHJlcXVpcmVkIGZvcjxvOnA+PC9v OnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0OyZndDsmbmJzcDsmbmJzcDsgcGVy Zm9ybWluZyB0aGUgaW50ZW5kZWQgcHJveHkgZnVuY3Rpb25hbGl0eSwgYnV0IGlzIGFsc28gYWJs ZSB0bzxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0OyZndDsmbmJz cDsmbmJzcDsgZWF2ZXNkcm9wIG9uLCBvciBtYW5pcHVsYXRlIGFueSBwYXJ0IG9mLCB0aGUgbWVz c2FnZSBwYXlsb2FkIGFuZDxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+ Jmd0OyZndDsmbmJzcDsmbmJzcDsgbWV0YWRhdGEgaW4gdHJhbnNpdCBiZXR3ZWVuIHRoZSBlbmRw b2ludHMuJm5ic3A7IFRoZSBwcm94eSBjYW4gYWxzbzxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9 Ik1zb1BsYWluVGV4dCI+Jmd0OyZndDsmbmJzcDsmbmJzcDsgaW5qZWN0LCBkZWxldGUsIG9yIHJl b3JkZXIgcGFja2V0cyBzaW5jZSB0aGV5IGFyZSBubyBsb25nZXIgcHJvdGVjdGVkPG86cD48L286 cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7Jmd0OyZuYnNwOyZuYnNwOyBieSAo RClUTFMuPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7Jmd0Ozxv OnA+Jm5ic3A7PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0OyZndDtORVc6 PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7Jmd0O1RoZSBwcm94 eSB0aGVyZWZvcmUgaGFzIGFjY2VzcyB0byB0aGUgZGF0YSByZXF1aXJlZCBmb3I8bzpwPjwvbzpw PjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDsmZ3Q7Jm5ic3A7Jm5ic3A7IHBlcmZv cm1pbmcgdGhlIGludGVuZGVkIHByb3h5IGZ1bmN0aW9uYWxpdHksIGFuZCBzbyBjYW4gcGFzc2l2 ZWx5PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7Jmd0O21vbml0 b3I8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDsmZ3Q7Jm5ic3A7 Jm5ic3A7IHRoZSBjb21tdW5pY2F0aW9ucy4gSW4gYWRkaXRpb24sIHRoZSBwcm94eSBjYW4gYWxz byBpbmplY3QsIGRlbGV0ZSwgb3I8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRl eHQiPiZndDsmZ3Q7Jm5ic3A7Jm5ic3A7IHJlb3JkZXIgcGFja2V0cyBzaW5jZSB0aGV5IGFyZSBu byBsb25nZXIgcHJvdGVjdGVkIGJ5IChEKVRMUy48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJN c29QbGFpblRleHQiPiZndDsmZ3Q7Jmx0Oy9tZ2x0Jmd0OzxvOnA+PC9vOnA+PC9wPg0KPHAgY2xh c3M9Ik1zb1BsYWluVGV4dCI+Jmd0OzxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1z b1BsYWluVGV4dCI+Jmd0OzxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWlu VGV4dCI+Jmd0O1tHUzpdIEkgZGlkbuKAmXQgcmVhbGx5IHVuZGVyc3RhbmQgdGhpcyBjb21tZW50 LiBUaGUgcG9pbnQgd2UgdHJpZWQgdG8gbWFrZTxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1z b1BsYWluVGV4dCI+Jmd0O2lzIHRoYXQgc2luY2UgKEQpVExTIHByb3RlY3RzIGV2ZXJ5dGhpbmcg b3Igbm90aGluZywgaW4gb3JkZXIgZm9yIGUuZy4gYTxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9 Ik1zb1BsYWluVGV4dCI+Jmd0O2ZvcndhcmQgcHJveHkgdG8gcmVhZCBhbmQgY2hhbmdlIHNlbGVj dGVkIENvQVAgb3B0aW9ucyB0byBwZXJmb3JtIGl0czxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9 Ik1zb1BsYWluVGV4dCI+Jmd0O2ludGVuZGVkIGZ1bmN0aW9uLCB0aGUgZW50aXJlIENvQVAgbWVz c2FnZSBuZWVkcyB0byBiZSBkZWNyeXB0ZWQsIHdoaWNoPG86cD48L286cD48L3A+DQo8cCBjbGFz cz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7ZW5hYmxlcyBhIHJhbmdlIG9mIGF0dGFja3MuIEkgdGhpbmsg eW91ciBwcm9wb3NlZCBzZW50ZW5jZSBkb2VzIG5vdDxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9 Ik1zb1BsYWluVGV4dCI+Jmd0O2V4cGxhaW4gdGhhdCBhY2N1cmF0ZWx5OiAmcXVvdDtUaGUgcHJv eHkgdGhlcmVmb3JlIGhhcyBhY2Nlc3MgdG8gdGhlIGRhdGE8bzpwPjwvbzpwPjwvcD4NCjxwIGNs YXNzPSJNc29QbGFpblRleHQiPiZndDtyZXF1aXJlZCBmb3IgcGVyZm9ybWluZyB0aGUgaW50ZW5k ZWQgcHJveHkgZnVuY3Rpb25hbGl0eSwgYW5kIHNvIGNhbjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xh c3M9Ik1zb1BsYWluVGV4dCI+Jmd0O3Bhc3NpdmVseSBtb25pdG9yIHRoZSBjb21tdW5pY2F0aW9u cy7igJ0gYmVjYXVzZSBpdCBpcyBub3QgdGhlIGRhdGEgcmVxdWlyZWQ8bzpwPjwvbzpwPjwvcD4N CjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDtmb3IgcGVyZm9ybWluZyB0aGUgaW50ZW5kZWQg cHJveHkgZnVuY3Rpb25hbGl0eSB0aGF0IGlzIGludGVyZXN0aW5nIGhlcmUsPG86cD48L286cD48 L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7aXQ8bzpwPjwvbzpwPjwvcD4NCjxwIGNs YXNzPSJNc29QbGFpblRleHQiPiZndDtpcyB0aGUgb3RoZXIgZGF0YSB0aGF0IGFsc28gYmVjb21l cyBhdmFpbGFibGUgdG8gdGhlIHByb3h5IGFzIHRoZSBlbnRpcmU8bzpwPjwvbzpwPjwvcD4NCjxw IGNsYXNzPSJNc29QbGFpblRleHQiPiZndDttZXNzYWdlIG5lZWRzIHRvIGJlIGRlY3J5cHRlZC4g VGhlIHRlcm0g4oCcZWF2ZXNkcm9wcGluZ+KAnSBpcyB1c2VkIGluIHRoZSBvbGQ8bzpwPjwvbzpw PjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDt0ZXh0LCB3b3VsZCBub3QgdGhhdCBj b3ZlciDigJxwYXNzaXZlbHkgbW9uaXRvcuKAnT8gUGVyaGFwcyB5b3UgY291bGQgZnVydGhlcjxv OnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0O2VsYWJvcmF0ZTxvOnA+ PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0O29uIHdoYXQgeW91IHRoaW5r IGlzIGluY29ycmVjdCBvciBtaXNzaW5nIGluIHRoZSBjdXJyZW50IHRleHQ/PG86cD48L286cD48 L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7PG86cD4mbmJzcDs8L286cD48L3A+DQo8 cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij48c3BhbiBzdHlsZT0iY29sb3I6cmVkIj4mbHQ7bWdsdDIm Z3Q7PG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+PHNwYW4g c3R5bGU9ImNvbG9yOnJlZCI+TXkgaW50ZW50aW9uIHdhcyB0byBjbGFyaWZ5IHdoYXQgY291bGQg YmUgcGVyZm9ybWVkIHdpdGhvdXQgRFRMUyBkZWNyeXB0aW9uIGFuZCB3aXRoIHRoZSBEVExTIGRl Y3J5cHRpb24gcGVyZm9ybWVkIGJ5IHRoZSBwcm94eS4gVGhhdCBzYWlkIEkgYW0gZmluZSB3aXRo IHRoZSB0ZXh0IHlvdSBwcm9wb3NlZCBhcyB3ZWxsLg0KPG86cD48L286cD48L3NwYW4+PC9wPg0K PHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+PHNwYW4gc3R5bGU9ImNvbG9yOnJlZCI+Jmx0Oy9tZ2x0 MiZndDs8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7 Jmd0OzxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0OyZn dDsmbmJzcDsmbmJzcDsgVGhpcyBkb2N1bWVudCBkZWZpbmVzIHRoZSBPYmplY3QgU2VjdXJpdHkg Zm9yIENvbnN0cmFpbmVkIFJFU1RmdWw8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFp blRleHQiPiZndDsmZ3Q7Jm5ic3A7Jm5ic3A7IEVudmlyb25tZW50cyAoT1NDT1JFKSBzZWN1cml0 eSBwcm90b2NvbCwgcHJvdGVjdGluZyBDb0FQIGFuZCBDb0FQLTxvOnA+PC9vOnA+PC9wPg0KPHAg Y2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0OyZndDsmbmJzcDsmbmJzcDsgbWFwcGFibGUgSFRUUCBy ZXF1ZXN0cyBhbmQgcmVzcG9uc2VzIGVuZC10by1lbmQgYWNyb3NzIGludGVybWVkaWFyeTxvOnA+ PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0OyZndDsmbmJzcDsmbmJzcDsg bm9kZXMgc3VjaCBhcyBDb0FQIGZvcndhcmQgcHJveGllcyBhbmQgY3Jvc3MtcHJvdG9jb2wgdHJh bnNsYXRvcnM8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDsmZ3Q7 Jm5ic3A7Jm5ic3A7IGluY3VkaW5nIEhUVFAtdG8tQ29BUCBwcm94aWVzIFtSRkM4MDc1XS4mbmJz cDsgSW4gYWRkaXRpb24gdG8gdGhlIGNvcmU8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Q bGFpblRleHQiPiZndDsmZ3Q7Jm5ic3A7Jm5ic3A7IENvQVAgZmVhdHVyZXMgZGVmaW5lZCBpbiBb UkZDNzI1Ml0sIE9TQ09SRSBzdXBwb3J0cyBPYnNlcnZlPG86cD48L286cD48L3A+DQo8cCBjbGFz cz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7Jmd0OyZuYnNwOyZuYnNwOyBbUkZDNzY0MV0sIEJsb2NrLXdp c2UgW1JGQzc5NTldLCBOby1SZXNwb25zZSBbUkZDNzk2N10sIGFuZCBQQVRDSCBhbmQ8bzpwPjwv bzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDsmZ3Q7Jm5ic3A7Jm5ic3A7IEZF VENIIFtSRkM4MTMyXS48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZn dDsmZ3Q7Jmx0O21nbHQmZ3Q7PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0 Ij4mZ3Q7Jmd0O01heWJlIHRvbyBtYW55ICZxdW90O2FuZCZxdW90Oy48bzpwPjwvbzpwPjwvcD4N CjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDsmZ3Q7Jmx0Oy9tZ2x0Jmd0OzxvOnA+PC9vOnA+ PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0OzxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0K PHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0O1tHUzpdIEkgc2VlIHdoYXQgeW91IG1lYW4uIFRo ZSB0aXRsZSBvZiBSRkMgODEzMiBpcyAmcXVvdDtQQVRDSCBhbmQgRkVUQ0g8bzpwPjwvbzpwPjwv cD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDttZXRob2RzIGZvciBDb0FQ4oCdLiBQZXJo YXBzIHdlIGp1c3QgY2hhbmdlIHRoZSBvcmRlciBvZiB0aGUgZXhhbXBsZXMgaW4gdGhlPG86cD48 L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7bGFzdCBzZW50ZW5jZTogPG86 cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mbmJzcDtORVc8bzpwPjwvbzpw PjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDsmcXVvdDtJbiBhZGRpdGlvbiB0byB0 aGUgY29yZSBDb0FQIGZlYXR1cmVzIGRlZmluZWQgaW48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNz PSJNc29QbGFpblRleHQiPiZndDtbUkZDNzI1Ml0sIE9TQ09SRSBzdXBwb3J0cyBPYnNlcnZlIFtS RkM3NjQxXSwgQmxvY2std2lzZSBbUkZDNzk1OV0sIFBBVENIPG86cD48L286cD48L3A+DQo8cCBj bGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7YW5kIEZFVENIIFtSRkM4MTMyXSwgYW5kIE5vLVJlc3Bv bnNlIFtSRkM3OTY3XS7igJ0/PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0 Ij4mZ3Q7PG86cD4mbmJzcDs8L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7 PG86cD4mbmJzcDs8L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij48c3BhbiBzdHls ZT0iY29sb3I6cmVkIj4mbHQ7bWdsdDImZ3Q7PG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xh c3M9Ik1zb1BsYWluVGV4dCI+PHNwYW4gc3R5bGU9ImNvbG9yOnJlZCI+SSBhbSBmaW5lIGVpdGhl ciB3YXlzLiBJIHRoaW5rIHRoZSBwcm9ibGVtIGlzIHRoYXQgd2UgYSBoYXZlIGEgbGlzdCBvZiBk aWZmZXJlbnQgbmF0dXJlLCB1bmxlc3Mgd2UgYXJlIGNvbnNpZGVyaW5nIHRoZSBkb2N1bWVudHMg dGhlbXNlbHZlcy4gSSB3b3VsZCBwcm9wb3NlOjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNs YXNzPSJNc29QbGFpblRleHQiPjxzcGFuIHN0eWxlPSJjb2xvcjpyZWQiPk9TQ09SRSBzdXBwb3J0 cyB0aGUgQmxvY2tXaXNlIFRyYW5zZmVydCBTaWduYWxpbmcmbmJzcDsgT3B0aW9uIFtSRkM3OTU5 XSwgdGhlIE9ic2VydmVkIFtSRkM3NjQxXSBhbmQgTm8tUmVzcG9uc2UgT3B0aW9uLCBbUkZDNzk2 N10sIGFzIHdlbGwgYXMgdGhlIFBBVENIIGFuZCBGRVRDSCBNZXRob2RzIFtSRkM4MTMyXS4NCjxv OnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPjxzcGFuIHN0eWxl PSJjb2xvcjpyZWQiPiZsdDsvbWdsdDImZ3Q7PG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xh c3M9Ik1zb1BsYWluVGV4dCI+Jmd0OzxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1z b1BsYWluVGV4dCI+Jmd0OyZndDs8bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Q bGFpblRleHQiPiZndDsmZ3Q7QW4gYW5hbHlzaXMgb2YgZW5kLXRvLWVuZCBzZWN1cml0eSBmb3Ig Q29BUDxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0OyZndDsmbmJz cDsmbmJzcDsgbWVzc2FnZXMgdGhyb3VnaCBzb21lIHR5cGVzIG9mIGludGVybWVkaWFyeSBub2Rl cyBpcyBwZXJmb3JtZWQgaW48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQi PiZndDsmZ3Q7Jm5ic3A7Jm5ic3A7IFtJLUQuaGFydGtlLWNvcmUtZTJlLXNlY3VyaXR5LXJlcXNd LiZuYnNwOyBPU0NPUkUgZXNzZW50aWFsbHkgcHJvdGVjdHMgdGhlPG86cD48L286cD48L3A+DQo8 cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7Jmd0OyZuYnNwOyZuYnNwOyBSRVNUZnVsIGludGVy YWN0aW9uczsgdGhlIHJlcXVlc3QgbWV0aG9kLCB0aGUgcmVxdWVzdGVkIHJlc291cmNlLCB0aGU8 bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDsmZ3Q7Jm5ic3A7Jm5i c3A7IG1lc3NhZ2UgcGF5bG9hZCwgZXRjLiAoc2VlIFNlY3Rpb24gNCkuJm5ic3A7IE9TQ09SRSBw cm90ZWN0cyBuZWl0aGVyIHRoZTxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4 dCI+Jmd0OyZndDsmbmJzcDsmbmJzcDsgQ29BUCBNZXNzYWdpbmcgTGF5ZXIgbm9yIHRoZSBDb0FQ IFRva2VuIHdoaWNoIG1heSBjaGFuZ2UgYmV0d2VlbiB0aGU8bzpwPjwvbzpwPjwvcD4NCjxwIGNs YXNzPSJNc29QbGFpblRleHQiPiZndDsmZ3Q7Jm5ic3A7Jm5ic3A7IGVuZHBvaW50cywgYW5kIHRo b3NlIGFyZSB0aGVyZWZvcmUgcHJvY2Vzc2VkIGFzIGRlZmluZWQgaW4gW1JGQzcyNTJdLjxvOnA+ PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0OyZndDsmbmJzcDsmbmJzcDsg QWRkaXRpb25hbGx5LCBzaW5jZSB0aGUgbWVzc2FnZSBmb3JtYXRzIGZvciBDb0FQIG92ZXIgdW5y ZWxpYWJsZTxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0OyZndDsm bmJzcDsgJm5ic3A7dHJhbnNwb3J0IFtSRkM3MjUyXSBhbmQgZm9yIENvQVAgb3ZlciByZWxpYWJs ZSB0cmFuc3BvcnQgW1JGQzgzMjNdPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5U ZXh0Ij4mZ3Q7Jmd0OyZuYnNwOyZuYnNwOyBkaWZmZXIgb25seSBpbiB0ZXJtcyBvZiBDb0FQIE1l c3NhZ2luZyBMYXllciwgT1NDT1JFIGNhbiBiZSBhcHBsaWVkPG86cD48L286cD48L3A+DQo8cCBj bGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7Jmd0OyZuYnNwOyZuYnNwOyB0byBib3RoIHVucmVsaWFi bGUgYW5kIHJlbGlhYmxlIHRyYW5zcG9ydHMgKHNlZSBGaWd1cmUgMSkuPG86cD48L286cD48L3A+ DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7Jmd0OzxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0K PHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0OyZndDtTZWxhbmRlciwgZXQgYWwuJm5ic3A7Jm5i c3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7IEV4cGlyZXMgSmFudWFyeSAyNywgMjAx OSZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZu YnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyBbUGFnZSA0XTxvOnA+PC9vOnA+PC9w Pg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0OyZndDs8bzpwPiZuYnNwOzwvbzpwPjwvcD4N CjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDsmZ3Q7SW50ZXJuZXQtRHJhZnQmbmJzcDsmbmJz cDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsm bmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsgT1NDT1JFJm5ic3A7Jm5ic3A7Jm5i c3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7 Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5i c3A7Jm5ic3A7IEp1bHkgMjAxODxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4 dCI+Jmd0OyZndDs8bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQi PiZndDsmZ3Q7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7 Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7ICYjNDM7LS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0mIzQzOzxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1Bs YWluVGV4dCI+Jmd0OyZndDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJz cDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsgfCZuYnNwOyZuYnNw OyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyBBcHBsaWNh dGlvbiZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNw OyZuYnNwOyZuYnNwOyB8PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4m Z3Q7Jmd0OyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZu YnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyAmIzQzOy0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tJiM0Mzs8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFp blRleHQiPiZndDsmZ3Q7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7 Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7ICYjNDM7LS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0mIzQzOyZuYnNwOyBcPG86cD48L286cD48L3A+DQo8 cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7Jmd0OyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZu YnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNw OyB8Jm5ic3A7IFJlcXVlc3RzIC8gUmVzcG9uc2VzIC8gU2lnbmFsaW5nIHwmbmJzcDsgfDxvOnA+ PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0OyZndDsmbmJzcDsmbmJzcDsm bmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJz cDsmbmJzcDsmbmJzcDsgfC0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tfCZuYnNw OyB8PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7Jmd0OyZuYnNw OyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZu YnNwOyZuYnNwOyZuYnNwOyZuYnNwOyB8Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5i c3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7IE9TQ09S RSZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZu YnNwOyZuYnNwOyZuYnNwOyZuYnNwOyB8Jm5ic3A7IHwgQ29BUDxvOnA+PC9vOnA+PC9wPg0KPHAg Y2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0OyZndDsmbmJzcDsgJm5ic3A7Jm5ic3A7Jm5ic3A7Jm5i c3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7 fC0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tfCZuYnNwOyB8PG86cD48L286cD48 L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7Jmd0OyZuYnNwOyZuYnNwOyZuYnNwOyZu YnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNw OyZuYnNwOyB8IE1lc3NhZ2luZyBMYXllciAvIE1lc3NhZ2UgRnJhbWluZyB8Jm5ic3A7IHw8bzpw PjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDsmZ3Q7Jm5ic3A7Jm5ic3A7 Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5i c3A7Jm5ic3A7Jm5ic3A7ICYjNDM7LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0m IzQzOyZuYnNwOyAvPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7 Jmd0OyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNw OyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyAmIzQzOy0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tJiM0Mzs8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRl eHQiPiZndDsmZ3Q7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5i c3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7IHwmbmJzcDsmbmJzcDsmbmJz cDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsgVURQIC8gVENQIC8gLi4uJm5i c3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7IHw8bzpw PjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDsmZ3Q7Jm5ic3A7Jm5ic3A7 Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5i c3A7Jm5ic3A7Jm5ic3A7ICYjNDM7LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0m IzQzOzxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0OyZndDs8bzpw PiZuYnNwOzwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDsmZ3Q7Jm5ic3A7 Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5i c3A7Jm5ic3A7Jm5ic3A7IEZpZ3VyZSAxOiBBYnN0cmFjdCBMYXllcmluZyBvZiBDb0FQIHdpdGgg T1NDT1JFPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7Jmd0Ozxv OnA+Jm5ic3A7PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0OyZndDsmbmJz cDsmbmJzcDsgT1NDT1JFIHdvcmtzIGluIHZlcnkgY29uc3RyYWluZWQgbm9kZXMgYW5kIG5ldHdv cmtzLCB0aGFua3MgdG8gaXRzPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0 Ij4mZ3Q7Jmd0OyZuYnNwOyZuYnNwOyBzbWFsbCBtZXNzYWdlIHNpemUgYW5kIHRoZSByZXN0cmlj dGVkIGNvZGUgYW5kIG1lbW9yeSByZXF1aXJlbWVudHMgaW48bzpwPjwvbzpwPjwvcD4NCjxwIGNs YXNzPSJNc29QbGFpblRleHQiPiZndDsmZ3Q7Jm5ic3A7Jm5ic3A7IGFkZGl0aW9uIHRvIHdoYXQg aXMgcmVxdWlyZWQgYnkgQ29BUC4mbmJzcDsgRXhhbXBsZXMgb2YgdGhlIHVzZSBvZiBPU0NPUkU8 bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDsmZ3Q7Jm5ic3A7Jm5i c3A7IGFyZSBnaXZlbiBpbiBBcHBlbmRpeCBBLiZuYnNwOyBPU0NPUkUgZG9lcyBub3QgZGVwZW5k IG9uIHVuZGVybHlpbmc8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZn dDsmZ3Q7Jm5ic3A7Jm5ic3A7IGxheWVycywgYW5kIGNhbiBiZSB1c2VkIHdpdGggbm9uLUlQIHRy YW5zcG9ydHMgKGUuZy4sPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4m Z3Q7Jmd0OyZuYnNwOyZuYnNwOyBbSS1ELmJvcm1hbm4tNmxvLWNvYXAtODAyLTE1LWllXSkuJm5i c3A7IE9TQ09SRSBtYXkgYWxzbyBiZSB1c2VkIGluPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0i TXNvUGxhaW5UZXh0Ij4mZ3Q7Jmd0OyZuYnNwOyZuYnNwOyBkaWZmZXJlbnQgd2F5cyB3aXRoIEhU VFAuJm5ic3A7IE9TQ09SRSBtZXNzYWdlcyBtYXkgYmUgdHJhbnNwb3J0ZWQgaW48bzpwPjwvbzpw PjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDsmZ3Q7Jm5ic3A7Jm5ic3A7IEhUVFAs IGFuZCBPU0NPUkUgbWF5IGFsc28gYmUgdXNlZCB0byBwcm90ZWN0IENvQVAtbWFwcGFibGUgSFRU UDxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0OyZndDsmbmJzcDsm bmJzcDsgbWVzc2FnZXMsIGFzIGRlc2NyaWJlZCBiZWxvdy48bzpwPjwvbzpwPjwvcD4NCjxwIGNs YXNzPSJNc29QbGFpblRleHQiPiZndDsmZ3Q7PG86cD4mbmJzcDs8L286cD48L3A+DQo8cCBjbGFz cz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7Jmd0OyZsdDttZ2x0Jmd0OzxvOnA+PC9vOnA+PC9wPg0KPHAg Y2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0OyZndDtJIGJlbGlldmUgdGhhdCAmcXVvdDt1bmRlcmx5 aW5nIGxheWVycyZxdW90OyBzaG91bGQgYmUgc3BlY2lmaWVkLiBNeSB1bmRlcnN0YW5kaW5nPG86 cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7Jmd0O2lzPG86cD48L286 cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7Jmd0O3RoYXQgT1NDT1JFIHJlcXVp cmVzIENvQVAgb3IgSFRUUC4gSWYgdGhhdCBpcyBjb3JyZWN0LCBJIGJlbGlldmUgdGhhdDxvOnA+ PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0OyZndDtzaG91bGQgYmU8bzpw PjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDsmZ3Q7Y2xhcmlmaWVkIGlu IHRoZSBwYXJhZ3JhcGggYWJvdmUuICZsdDsvbWdsdCZndDs8bzpwPjwvbzpwPjwvcD4NCjxwIGNs YXNzPSJNc29QbGFpblRleHQiPiZndDs8bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjxwIGNsYXNzPSJN c29QbGFpblRleHQiPiZndDtbR1M6XSBObywgdGhlIHVuZGVybHlpbmcgbGF5ZXJzIGluIHRoaXMg Y29udGV4dCBhcmUgbm90IENvQVAgb3IgSFRUUCwgYnV0PG86cD48L286cD48L3A+DQo8cCBjbGFz cz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7dGhlIGxheWVycyBiZWxvdyBPU0NPUkUsIGUuZy4gVURQIG9y IFRDUC4gVGhlIGZhY3QgdGhhdCBPU0NPUkUgY2FuIGJlPG86cD48L286cD48L3A+DQo8cCBjbGFz cz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7ZGVwbG95ZWQgd2l0aCBDb0FQLW1hcHBhYmxlIEhUVFAgaXMg YSBkaWZmZXJlbnQgcHJvcGVydHkgd2hpY2ggaXMgdGhlPG86cD48L286cD48L3A+DQo8cCBjbGFz cz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7cmVhc29uIGZvciDigJxhbHNv4oCdIGluIHRoZSBuZXh0IHRv IGxhc3Qgc2VudGVuY2UuIFdvdWxkIHRoZSBmb2xsb3dpbmc8bzpwPjwvbzpwPjwvcD4NCjxwIGNs YXNzPSJNc29QbGFpblRleHQiPiZndDtjbGFyaWZpY2F0aW9uIGJlIHN1ZmZpY2llbnQ/PG86cD48 L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7T0xEPG86cD48L286cD48L3A+ DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7T1NDT1JFIGRvZXMgbm90IGRlcGVuZCBvbiB1 bmRlcmx5aW5nIGxheWVycywgYW5kIGNhbiBiZSB1c2VkIHdpdGggbm9uLUlQPG86cD48L286cD48 L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7dHJhbnNwb3J0cyAoZS5nLiwgW0ktRC5i b3JtYW5uLTZsby1jb2FwLTgwMi0xNS1pZSk8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Q bGFpblRleHQiPiZndDtORVc8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQi PiZndDtPU0NPUkUgZG9lcyBub3QgZGVwZW5kIG9uIHVuZGVybHlpbmcgbGF5ZXJzIHN1Y2ggYXMg ZS5nLiBVRFAgb3IgVENQLCBhbmQ8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRl eHQiPiZndDtjYW4gZXZlbiBiZSB1c2VkIHdpdGggbm9uLUlQIHRyYW5zcG9ydHMgKGUuZy4sPG86 cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7W0ktRC5ib3JtYW5uLTZs by1jb2FwLTgwMi0xNS1pZV0pPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0 Ij4mZ3Q7PG86cD4mbmJzcDs8L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7 PG86cD4mbmJzcDs8L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij48c3BhbiBzdHls ZT0iY29sb3I6cmVkIj4mbHQ7bWdsdDImZ3Q7PG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xh c3M9Ik1zb1BsYWluVGV4dCI+PHNwYW4gc3R5bGU9ImNvbG9yOnJlZCI+VGhpcyBpcyBjbGFyaWZ5 aW5nLCBUaGFua3MgZm9yIHRoZSBleHBsYW5hdGlvbi48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8 cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij48c3BhbiBzdHlsZT0iY29sb3I6cmVkIj4mbHQ7L21nbHQy Jmd0OzxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDs8 bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDsmZ3Q7PG86 cD4mbmJzcDs8L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7Jmd0OyZuYnNw OyZuYnNwOyBPU0NPUkUgaXMgZGVzaWduZWQgdG8gcHJvdGVjdCBhcyBtdWNoIGluZm9ybWF0aW9u IGFzIHBvc3NpYmxlIHdoaWU8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQi PiZndDsmZ3Q7Jm5ic3A7Jm5ic3A7IHN0aWxsIGFsbG93aW5nIENvQVAgcHJveHkgb3BlcmF0aW9u cyAoU2VjdGlvbiAxMCkuJm5ic3A7IEl0IHdvcmtzIHdpdGg8bzpwPjwvbzpwPjwvcD4NCjxwIGNs YXNzPSJNc29QbGFpblRleHQiPiZndDsmZ3Q7Jm5ic3A7Jm5ic3A7IGV4aXN0aW5nIENvQVAtdG8t Q29BUCBmb3J3YXJkIHByb2llcyBbUkZDNzI1Ml0sIGJ1dCBhbiBPU0NPUkUtYXdhcmU8bzpwPjwv bzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDsmZ3Q7Jm5ic3A7Jm5ic3A7IHBy b3h5IHdpbGwgYmUgbW9yZSBlZmZpY2llbnQuJm5ic3A7IEhUVFAtdG8tQ29BUCBwcm94aWVzIFtS RkM4MDc1XSBhbmQ8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDsm Z3Q7Jm5ic3A7Jm5ic3A7IENvQVAtdG8tSFRUUCBwcm94aWVzIGNhbiBhbHNvIGJlIHVzZWQgd2l0 aCBPU0NPUkUsIGFzIHNwZWNpZmllZCBpbjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1Bs YWluVGV4dCI+Jmd0OyZndDsmbmJzcDsmbmJzcDsgU2VjdGlvbiAxMS4mbmJzcDsgT1NDT1JFIG1h eSBiZSB1c2VkIHRvZ2V0aGVyIHdpdGggVExTIG9yIERUTFMgb3ZlciBvbmUgb3I8bzpwPjwvbzpw PjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDsmZ3Q7Jm5ic3A7Jm5ic3A7IG1vcmUg aG9wcyBpbiB0aGUgZW5kLXRvLWVuZCBwYXRoLCBlLmcuIHRyYW5zcG9ydGVkIHdpdGggSFRUUFMg aW4gb25lPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7Jmd0OyZu YnNwOyZuYnNwOyBob3AgYW5kIHdpdGggcGxhaW4gQ29BUCBpbiBhbm90aGVyIGhvcC4mbmJzcDsg VGhlIHVzZSBvZiBPU0NPUkUgZG9lcyBub3Q8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Q bGFpblRleHQiPiZndDsmZ3Q7Jm5ic3A7Jm5ic3A7IGFmZmVjdCB0aGUgVVJJIHNjaGVtZSBhbmQg T1NDT1JFIGNhbiB0aGVyZWZvcmUgYmUgdXNlZCB3aXRoIGFueSBVUkk8bzpwPjwvbzpwPjwvcD4N CjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDsmZ3Q7Jm5ic3A7Jm5ic3A7IHNjaGVtZSBkZWZp bmVkIGZvciBDb0FQIG9yIEhUVFAuJm5ic3A7IFRoZSBhcHBsaWNhdGlvbiBkZWNpZGVzIHRoZTxv OnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0OyZndDsmbmJzcDsmbmJz cDsgY29uZGl0aW9ucyBmb3Igd2hpY2ggT1NDT1JFIGlzIHJlcXVpcmVkLjxvOnA+PC9vOnA+PC9w Pg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0OyZndDs8bzpwPiZuYnNwOzwvbzpwPjwvcD4N CjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDsmZ3Q7Jm5ic3A7Jm5ic3A7IE9TQ09SRSB1c2Vz IHByZS1zaGFyZWQga2V5cyB3aGljaCBtYXkgaGF2ZSBiZWVuIGVzdGFibGlzaGVkIG91dC1vZi08 bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDsmZ3Q7Jm5ic3A7Jm5i c3A7IGJhbmQgb3Igd2l0aCBhIGtleSBlc3RhYmxpc2htZW50IHByb3RvY29sIChzZWUgU2VjdGlv biAzLjIpLiZuYnNwOyBUaGU8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQi PiZndDsmZ3Q7Jm5ic3A7Jm5ic3A7IHRlY2huaWNhbCBzb2x1dGlvbiBidWlsZHMgb24gQ0JPUiBP YmplY3QgU2lnbmluZyBhbmQgRW5jcnlwdGlvbjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1z b1BsYWluVGV4dCI+Jmd0OyZndDsmbmJzcDsmbmJzcDsgKENPU0UpIFtSRkM4MTUyXSwgcHJvdmlk aW5nIGVuZC10by1lbmQgZW5jcnlwdGlvbiwgaW50ZWdyaXR5LCByZXBsYXk8bzpwPjwvbzpwPjwv cD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDsmZ3Q7Jm5ic3A7Jm5ic3A7IHByb3RlY3Rp b24sIGFuZCBiaW5kaW5nIG9mIHJlc3BvbnNlIHRvIHJlcXVlc3QuJm5ic3A7IEEgY29tcHJlc3Nl ZCB2ZXJzaW9uPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7Jmd0 OyZuYnNwOyZuYnNwOyBvZiBDT1NFIGlzIHVzZWQsIGFzIHNwZWNpZmllZCBpbiBTZWN0aW9uIDYu Jm5ic3A7IFRoZSB1c2Ugb2YgT1NDT1JFIGlzPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNv UGxhaW5UZXh0Ij4mZ3Q7Jmd0OyZuYnNwOyZuYnNwOyBzaWduYWxlZCBpbiBDb1Agd2l0aCBhIG5l dyBvcHRpb24gKFNlY3Rpb24gMiksIGFuZCBpbiBIVFRQIHdpdGggYTxvOnA+PC9vOnA+PC9wPg0K PHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0OyZndDsmbmJzcDsmbmJzcDsgbmV3IGhlYWRlciBm aWVsZCAoU2N0aW9uIDExLjEpIGFuZCBjb250ZW50IHR5cGUgKFNlY3Rpb24gMTMuNSkuJm5ic3A7 IFRoZTxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0OyZndDsmbmJz cDsmbmJzcDsgc29sdXRpb24gdHJhbnNmb3JtcyBhIENvQVAvSFRUUCBtZXNzYWdlIGludG8gYW4g JnF1b3Q7T1NDT1JFIG1lc3NhZ2UmcXVvdDs8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Q bGFpblRleHQiPiZndDsmZ3Q7Jm5ic3A7Jm5ic3A7IGJlZm9yZSBzZW5kaW5nLCBhbmQgdmljZSB2 ZXJzYSBhdGVyIHJlY2VpdmluZy4mbmJzcDsgVGhlIE9TQ09SRSBtZXNzYWdlPG86cD48L286cD48 L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7Jmd0OzxvOnA+Jm5ic3A7PC9vOnA+PC9w Pg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0OyZndDtTZWxhbmRlciwgZXQgYWwuJm5ic3A7 Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7IEV4cGlyZXMgSmFudWFyeSAyNywg MjAxOSZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNw OyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyBbUGFnZSA1XTxvOnA+PC9vOnA+ PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0OyZndDs8bzpwPiZuYnNwOzwvbzpwPjwv cD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDsmZ3Q7SW50ZXJuZXQtRHJhZnQmbmJzcDsm bmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJz cDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsgT1NDT1JFJm5ic3A7 Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7ICZu YnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNw OyZuYnNwOyZuYnNwOyZuYnNwO0p1bHkgMjAxODxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1z b1BsYWluVGV4dCI+Jmd0OyZndDs8bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Q bGFpblRleHQiPiZndDsmZ3Q7Jm5ic3A7Jm5ic3A7IGlzIGEgQ29BUC9IVFRQIG1lc3NhZ2UgcmVs YXRlZCB0byB0aGUgb3JpZ2lhbCBtZXNzYWdlIGluIHRoZTxvOnA+PC9vOnA+PC9wPg0KPHAgY2xh c3M9Ik1zb1BsYWluVGV4dCI+Jmd0OyZndDsmbmJzcDsmbmJzcDsgZm9sbG93aW5nIHdheTogdGhl IG9yaWdpbmFsIENvQVAvSFRUUCBtZXNzYWdlIGlzIHRyYW5zbGF0ZWQgdG8gQ29BUDxvOnA+PC9v OnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0OyZndDsmbmJzcDsmbmJzcDsgKGlm IG5vdCBhbHJlYWR5IGkgQ29BUCkgYW5kIHByb3RlY3RlZCBpbiBhIENPU0Ugb2JqZWN0LiZuYnNw OyBUaGU8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDsmZ3Q7Jm5i c3A7Jm5ic3A7IGVuY3J5cHRlZCBtZXNzYWdlIGZpZWxkcyBvZiB0aGlzIENPU0Ugb2JqZWN0IGFy ZSB0cmFuc3BvcnRlZCBpbiB0aGU8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRl eHQiPiZndDsmZ3Q7Jm5ic3A7Jm5ic3A7IENvQVAgcGF5bG9hZC9IVFRQIGJvZHkgb2YgdGhlIE9T Q09SRSBtZXNzYWdlLCBhbmQgdGhlIE9TQ09SRSBvcHRpb24vPG86cD48L286cD48L3A+DQo8cCBj bGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7Jmd0OyZuYnNwOyZuYnNwOyBoZWFkZXIgZmllbGQgaXMg aW5jbHVkZWQgaW4gdGhlIG1lc3NhZ2UuJm5ic3A7IEEgc2tldGNoIG9mIGFuIGV4Y2hhbmdlIG9m PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7Jmd0OyZuYnNwOyZu YnNwOyBPU0NPUkUgbWVzc2FnZXMsIGluIHRoZSBjYXNlIG9mIHRoZSBvcmlnaW5hbCBtZXNzYWdl IGJlaW5nIENvQVAsIGlzPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4m Z3Q7Jmd0OyZuYnNwOyZuYnNwOyBwcm92aWRlZCBpbiBGaWd1cmUgMi48bzpwPjwvbzpwPjwvcD4N CjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDsmZ3Q7PG86cD4mbmJzcDs8L286cD48L3A+DQo8 cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7Jmd0OyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZu YnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyBDbGllbnQmbmJzcDsmbmJzcDsmbmJzcDsmbmJz cDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsm bmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJz cDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsm bmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsgU2Vy dmVyPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij48bzpwPiZuYnNwOzwv bzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDsmZ3Q7Jm5ic3A7Jm5ic3A7Jm5i c3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7 IHwmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsgT1NDT1JFIHJlcXVlc3QgLSBQT1NUIGV4 YW1wbGUuY29tOiZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyB8PG86cD48L286cD48L3A+ DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7Jmd0OyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNw OyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyB8Jm5ic3A7 Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7IEhlYWRlciwgVG9rZW4sJm5ic3A7 Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5i c3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7 Jm5ic3A7Jm5ic3A7Jm5ic3A7IHw8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRl eHQiPiZndDsmZ3Q7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5i c3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7IHwgJm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5i c3A7Jm5ic3A7Jm5ic3A7T3B0aW9uczoge09TQ09SRSwgLi4ufSwmbmJzcDsmbmJzcDsmbmJzcDsm bmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJz cDsmbmJzcDsgfDxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0OyZn dDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsm bmJzcDsmbmJzcDsmbmJzcDsgfCZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZu YnNwOyBQYXlsb2FkOiBDT1NFIGNpcGhlcnRleHQmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJz cDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsgfDxvOnA+ PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0OyZndDsmbmJzcDsmbmJzcDsm bmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJz cDsgJiM0MzstLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0mZ3Q7 fDxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0OyZndDsmbmJzcDsm bmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJz cDsmbmJzcDsgfCZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNw OyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZu YnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNw OyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZu YnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyB8PG86 cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7Jmd0OyZuYnNwOyZuYnNw OyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZu YnNwOyB8Jmx0Oy0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLSYj NDM7PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7Jmd0OyZuYnNw OyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZu YnNwOyZuYnNwOyB8Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7IE9TQ09SRSByZXNwb25z ZSAtIDIuMDQgKENoYW5nZWQpOiZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyB8 PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7Jmd0OyZuYnNwOyZu YnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNw OyZuYnNwOyB8Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7IEhlYWRl ciwgVG9rZW4sJm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7 Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5i c3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7IHw8bzpwPjwvbzpwPjwvcD4NCjxwIGNs YXNzPSJNc29QbGFpblRleHQiPiZndDsmZ3Q7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7 Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7IHwmbmJzcDsmbmJzcDsm bmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsgT3B0aW9uczp7T1NDT1JFLCAuLi59LCZuYnNw OyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZu YnNwOyZuYnNwOyZuYnNwOyZuYnNwOyB8PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxh aW5UZXh0Ij4mZ3Q7Jmd0OyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNw OyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyB8Jm5ic3A7ICZuYnNwOyZuYnNwOyZuYnNw OyZuYnNwOyZuYnNwOyZuYnNwO1BheWxvYWQ6IENPU0UgY2lwaGVydGV4dCZuYnNwOyZuYnNwOyZu YnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNw OyB8PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7Jmd0OyZuYnNw OyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZu YnNwOyZuYnNwOyB8Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5i c3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7 Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5i c3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7 Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7IHw8 bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDsmZ3Q7PG86cD4mbmJz cDs8L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7Jmd0OyZuYnNwOyZuYnNw OyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZu YnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyBGaWd1cmUgMjogU2tldGNo IG9mIENvQVAgd2l0aCBPU0NPUkU8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRl eHQiPiZndDsmZ3Q7PG86cD4mbmJzcDs8L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0 Ij4mZ3Q7Jmd0OyZsdDttZ2x0Jmd0OzxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWlu VGV4dCI+Jmd0OyZndDtPcHRpb25zIGFyZSBtZW50aW9uZWQgaW4ge30uIEhvdyB0aGVzZSAmcXVv dDt7fSZxdW90OyBzaG91bGQgYmUgaW50ZXJwcmV0ZWQgbWF5IGJlPG86cD48L286cD48L3A+DQo8 cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7Jmd0O3NwZWNpZmllZCBpbiB0aGUgZmlndXJlLjxv OnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0OzxvOnA+Jm5ic3A7PC9v OnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0O1tHUzpdIFRoZSBjdXJseSBicmFj a2V0cyBoYXZlIG5vIHNwZWNpYWwgbWVhbmluZyBoZXJlIHNvIHdlIGNhbiByZW1vdmU8bzpwPjwv bzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDt0aGVtIGFsdG9nZXRoZXI6IDxv OnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0O09MRDxvOnA+PC9vOnA+ PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0O09wdGlvbnM6IHtPU0NPUkUsIC4uLn0s PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7TkVXJm5ic3A7IDxv OnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0O09wdGlvbnM6IE9TQ09S RSwgLi4uICw8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDs8bzpw PiZuYnNwOzwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPjxzcGFuIHN0eWxlPSJj b2xvcjpyZWQiPiZsdDttZ2x0MiZndDs8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0i TXNvUGxhaW5UZXh0Ij48c3BhbiBzdHlsZT0iY29sb3I6cmVkIj5UaGFua3MgZm9yIHRoZSBjbGFy aWZpY2F0aW9uLiBNYXliZSB0aG9zZSBicmFrZXMgY291bGQgYmUgdXNlZCB0byBpbmRpY2F0ZSB3 aGF0IGlzIGVuY3J5cHRlZC4gSSBhbHNvIG5vdGljZWQgcG90ZW50aWFsIHR5cG9zIC0gQ29QICwg KGlmIG5vdCBhbHJlYWR5IGkgQ29BUCkgaWYgbm90IGludHJvZHVjZWQgYnkgbXlzZWxmLjxvOnA+ PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPjxzcGFuIHN0eWxlPSJj b2xvcjpyZWQiPiZsdDsvbWdsdDI8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNv UGxhaW5UZXh0Ij4mZ3Q7PG86cD4mbmJzcDs8L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5U ZXh0Ij4mZ3Q7Jmd0OzxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4 dCI+Jmd0OyZndDtUaGUgcGFyYWdyYXBoIGFib3ZlIG1lbnRpb25zIHRoYXQgT1NDT1JFIGNhbiBi ZSB1c2VkIGJvdGggd2l0aCBDb0FQIG9yPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxh aW5UZXh0Ij4mZ3Q7Jmd0O0hUVFAuIEl0PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxh aW5UZXh0Ij4mZ3Q7Jmd0O21pZ2h0IGJlIGhlbHBmdWwgdG8gc3BsaXQgRmlndXJlIDIgaW4gdG8g dHdvIHN1YiBmaWd1cmVzIEZpZ3VyZSAyYSkgdGhhdDxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9 Ik1zb1BsYWluVGV4dCI+Jmd0OyZndDtpbGx1c3RyYXRlcyB0aGUgdXNlIG9mIE9DU09SRSB3aXRo IENvQVAgYW5kIGZpZ3VyZSAyYikgdGhhdCBpbGx1c3RyYXRlczxvOnA+PC9vOnA+PC9wPg0KPHAg Y2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0OyZndDt0aGUgdXNlPG86cD48L286cD48L3A+DQo8cCBj bGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7Jmd0O29mIE9TQ09SRSB3aXRoIEhUVFAuPG86cD48L286 cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7PG86cD4mbmJzcDs8L286cD48L3A+ DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7W0dTOl0gU2VjdGlvbiAxMS41IHByb3ZpZGVz IGEgZGV0YWlsZWQgZXhhbXBsZSwgSSBwcm9wb3NlIHRvIGFkZCBhPG86cD48L286cD48L3A+DQo8 cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7cmVmZXJlbmNlIHRvIHNlY3Rpb24gMTEgYWJvdmUg dGhlIGZpZ3VyZS48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPjxvOnA+ Jm5ic3A7PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+PHNwYW4gc3R5bGU9ImNv bG9yOnJlZCI+Jmx0O21nbHQyJmd0OzxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJN c29QbGFpblRleHQiPjxzcGFuIHN0eWxlPSJjb2xvcjpyZWQiPldvcmtzIGZvciBtZS4gPG86cD48 L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+PHNwYW4gc3R5bGU9ImNv bG9yOnJlZCI+Jmx0Oy9tZ2x0MiZndDs8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0i TXNvUGxhaW5UZXh0Ij4mZ3Q7PG86cD4mbmJzcDs8L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxh aW5UZXh0Ij4mZ3Q7PG86cD4mbmJzcDs8L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0 Ij4mZ3Q7Jmd0O015IHVuZGVyc3RhbmRpbmcgaXMgdGhhdCBDb0FQIGFuZCBIVFRQIGNhbiBlYXNp bHkgYmUgdHJhbnNsYXRlZC4gQXMgc3VjaDxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1Bs YWluVGV4dCI+Jmd0OyZndDtpdDxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4 dCI+Jmd0OyZndDttaWdodCBhbHNvIGJlIGFibGUgdG8gY29uc2lkZXIgT1NDT1JFIG9ubHkgd2l0 aCBDb0FQIGFuZCBoYXZpbmcgYTxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4 dCI+Jmd0OyZndDtzcGVjaWZpYzxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4 dCI+Jmd0OyZndDtzZWN0aW9uIHRoYXQgZGVhbHMgd2l0aCBIVFRQLiBTdWNoIHNwbGl0IG1heSBh dm9pZCB0byBkZWFsIGluIHBhcmFsbGVsPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxh aW5UZXh0Ij4mZ3Q7Jmd0O3dpdGg8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRl eHQiPiZndDsmZ3Q7SFRUUCBhbmQgQ29BUC4gJmx0Oy9tZ2x0Jmd0OzxvOnA+PC9vOnA+PC9wPg0K PHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0OzxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPHAgY2xh c3M9Ik1zb1BsYWluVGV4dCI+Jmd0O1tHUzpdIFNlY3Rpb24gMTEgaXMgYSBzcGVjaWZpYyBzZWN0 aW9uIHRoYXQgZGVhbHMgd2l0aCBIVFRQLiBXb3VsZCB0aGU8bzpwPjwvbzpwPjwvcD4NCjxwIGNs YXNzPSJNc29QbGFpblRleHQiPiZndDtyZWZlcmVuY2UgbWVudGlvbmVkIGFib3ZlIGJlIHN1ZmZp Y2llbnQ/PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7PG86cD4m bmJzcDs8L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7PG86cD4mbmJzcDs8 L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij48c3BhbiBzdHlsZT0iY29sb3I6cmVk Ij4mbHQ7bWdsdCZndDs8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5U ZXh0Ij48c3BhbiBzdHlsZT0iY29sb3I6cmVkIj5ZZXMuPG86cD48L286cD48L3NwYW4+PC9wPg0K PHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+PHNwYW4gc3R5bGU9ImNvbG9yOnJlZCI+Jmx0Oy9tZ2x0 MiZndDs8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7 Jmd0OzxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0OyZn dDsmbmJzcDsmbmJzcDsgQW4gaW1wbGVtZW50YXRpb24gc3VwcG9ydGluZyB0aGlzIHNwZWNpZmlj YXRpb24gTUFZIGltcGxlbWVudCBvbmx5PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxh aW5UZXh0Ij4mZ3Q7Jmd0OyZuYnNwOyZuYnNwOyB0aGUgY2xpZW50IHBhcnQsIE1BWSBpbXBsZW1l bnQgb25seSB0aGUgc2VydmVyIHBhcnQsIG9yIE1BWSBpbXBsZW1lbnQ8bzpwPjwvbzpwPjwvcD4N CjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDsmZ3Q7Jm5ic3A7Jm5ic3A7IG9ubHkgb25lIG9m IHRoZSBwcm94eSBwYXJ0cy48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQi PiZndDsmZ3Q7PG86cD4mbmJzcDs8L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4m Z3Q7Jmd0OzEuMS4mbmJzcDsgVGVybWlub2xvZ3k8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJN c29QbGFpblRleHQiPiZndDsmZ3Q7PG86cD4mbmJzcDs8L286cD48L3A+DQo8cCBjbGFzcz0iTXNv UGxhaW5UZXh0Ij4mZ3Q7Jmd0OzIuJm5ic3A7IFRoZSBPU0NPUkUgT3B0aW9uPG86cD48L286cD48 L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7Jmd0OzxvOnA+Jm5ic3A7PC9vOnA+PC9w Pg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0OyZndDsmbmJzcDsmbmJzcDsgVGhlIE9TQ09S RSBvcHRpb24gKHNlZSBGaWd1cmUgMywgd2hpY2ggZXh0ZW5kcyBUYWJsZSA0IG9mIFtSRkM3MjUy XSk8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDsmZ3Q7Jm5ic3A7 Jm5ic3A7IGluZGljYXRlcyB0aGF0IHRoZSBDb0FQIG1lc3NhZ2UgaXMgYW4gT1NDT1JFIG1lc3Nh Z2UgYW5kIHRoYXQgaXQ8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZn dDsmZ3Q7Jm5ic3A7Jm5ic3A7IGNvbnRhaW5zIGEgY29tcHJlc3NlZCBDT1NFIG9iamVjdCAoc2Vl IFNlY3Rpb25zIDUgYW5kIDYpLiZuYnNwOyBUaGUgT1NDT1JFPG86cD48L286cD48L3A+DQo8cCBj bGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7Jmd0OyZuYnNwOyZuYnNwOyBvcHRpb24gaXMgY3JpdGlj YWwsIHNhZmUgdG8gZm9yd2FyZCwgcGFydCBvZiB0aGUgY2FjaGUga2V5LCBhbmQgbm90PG86cD48 L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7Jmd0OyZuYnNwOyZuYnNwOyBy ZXBlYXRhYmxlLjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0OyZn dDs8bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDsmZ3Q7 Jmx0O21nbHQmZ3Q7PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7 Jmd0O0kgYmVsaWV2ZSBpdCB3b3VsZCBiZSBjbGVhcmVyIHRvIHNwZWNpZnkgdGhhdCB0aGlzIHNl Y3Rpb24gZGVmaW5lcyB0aGU8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQi PiZndDsmZ3Q7T1NDT1JFPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4m Z3Q7Jmd0O29wdGlvbiB3aGljaCBpcyBhIG5ldyBDb0FQIG9wdGlvbi4mbmJzcDsgU2ltaWxhcmx5 IFRhYmxlIDQgbWF5IGFsc28gYmU8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRl eHQiPiZndDsmZ3Q7ZGVzaWduYXRlZCBieTxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1Bs YWluVGV4dCI+Jmd0OyZndDtDb0FQIE9wdGlvbnMgb3Igc29tZXRoaW5nIHNpbWlsYXIuICZsdDsv bWdsdCZndDs8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDs8bzpw PiZuYnNwOzwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDs8bzpwPiZuYnNw OzwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDtbR1M6XSBJIGRpZG7igJl0 IHVuZGVyc3RhbmQgdGhlIHNlY29uZCBzZW50ZW5jZTogVGFibGUgNCBpcyBpbiBSRkMgNzI1Miw8 bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDt3aGF0IGRvZXMgaXQg bWVhbiBmb3IgdGhpcyBkcmFmdCB0aGF0IHRoaXMgdGFibGUgc2hvdWxkIGJlICZxdW90O2Rlc2ln bmF0ZWQgYnk8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDtDb0FQ IE9wdGlvbnPigJ0/IElmIHRoZXJlIGlzIGEgbmVlZCB0byBleHBsYWluIHRoZSBjb250ZW50IG9m PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7YSByZWZlcmVuY2Vk IHRhYmxlIGluIGFub3RoZXIgZG9jdW1lbnQsIHRoZW4gcGVyaGFwcyBiZXR0ZXIgcmVtb3ZlIHRo ZTxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0O3JlZmVyZW5jZSBh bHRvZ2V0aGVyIC0gdGhpcyB0YWJsZSBpcyBhbnl3YXkgd2VsbCBrbm93biB0byBhbnlvbmU8bzpw PjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDtmYW1pbGlhciB3aXRoIENv QVAuIEhlcmUgaXMgYSBwcm9wb3NlZCByZXBsYWNlbWVudCBvZiB0aGUgZmlyc3Qgc2VudGVuY2U8 bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDtvZiBzZWN0aW9uIDI6 PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7TkVXPG86cD48L286 cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7VGhlIE9TQ09SRSBvcHRpb24gZGVm aW5lZCBpbiB0aGlzIHNlY3Rpb24gKHNlZSBGaWd1cmUgMyk8bzpwPjwvbzpwPjwvcD4NCjxwIGNs YXNzPSJNc29QbGFpblRleHQiPiZndDtpbmRpY2F0ZXMgdGhhdCB0aGUgQ29BUCBtZXNzYWdlIGlz IGFuIE9TQ09SRSBtZXNzYWdlIGFuZCB0aGF0IGl0PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0i TXNvUGxhaW5UZXh0Ij4mZ3Q7Y29udGFpbnMgYSBjb21wcmVzc2VkIENPU0Ugb2JqZWN0IChzZWUg U2VjdGlvbnMgNSBhbmQgNikuPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0 Ij4mZ3Q7PG86cD4mbmJzcDs8L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7 PG86cD4mbmJzcDs8L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij48c3BhbiBzdHls ZT0iY29sb3I6cmVkIj4mbHQ7bWdsdDImZ3Q7PG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xh c3M9Ik1zb1BsYWluVGV4dCI+PHNwYW4gc3R5bGU9ImNvbG9yOnJlZCI+SSBvbmx5IG1lbnRpb25l ZCBhIG5pdC4gSSBhbSBmaW5lIHdpdGggYm90aCBhbHRlcm5hdGl2ZSBidXQgcHJlZmVyIHRoZSBz ZWNvbmQuDQo8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij48 c3BhbiBzdHlsZT0iY29sb3I6cmVkIj4mbHQ7L21nbHQyJmd0OzxvOnA+PC9vOnA+PC9zcGFuPjwv cD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDs8bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjxw IGNsYXNzPSJNc29QbGFpblRleHQiPiZndDs8bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjxwIGNsYXNz PSJNc29QbGFpblRleHQiPiZndDs8bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Q bGFpblRleHQiPiZndDtUaGUgdXNlIG9mIE9TQ09SRSBpcyBzaWduYWxlZCBpbiBDb0FQIHdpdGgg YSBuZXcgb3B0aW9uIChTZWN0aW9uIDIpLCBhbmQ8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJN c29QbGFpblRleHQiPiZndDtpbiBIVFRQIHdpdGggYSBuZXcgaGVhZGVyIGZpZWxkIChTZWN0aW9u IDExLjEpIGFuZCBjb250ZW50IHR5cGUgKFNlY3Rpb248bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNz PSJNc29QbGFpblRleHQiPiZndDsxMy41KS48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Q bGFpblRleHQiPiZndDs8bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRl eHQiPiZndDsmZ3Q7PG86cD4mbmJzcDs8L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0 Ij4mZ3Q7Jmd0OyZuYnNwOyZuYnNwOyAmIzQzOy0tLS0tLSYjNDM7LS0tJiM0MzstLS0mIzQzOy0t LSYjNDM7LS0tJiM0MzstLS0tLS0tLS0tLS0tLS0tJiM0MzstLS0tLS0tLSYjNDM7LS0tLS0tLS0m IzQzOy0tLS0tLS0tLSYjNDM7PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0 Ij4mZ3Q7Jmd0OyZuYnNwOyZuYnNwOyB8IE5vLiZuYnNwOyB8IEMgfCBVIHwgTiB8IFIgfCBOYW1l Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5i c3A7IHwgRm9ybWF0IHwgTGVuZ3RoIHwgRGVmYXVsdCB8PG86cD48L286cD48L3A+DQo8cCBjbGFz cz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7Jmd0OyZuYnNwOyZuYnNwOyAmIzQzOy0tLS0tLSYjNDM7LS0t JiM0MzstLS0mIzQzOy0tLSYjNDM7LS0tJiM0MzstLS0tLS0tLS0tLS0tLS0tJiM0MzstLS0tLS0t LSYjNDM7LS0tLS0tLS0mIzQzOy0tLS0tLS0tLSYjNDM7PG86cD48L286cD48L3A+DQo8cCBjbGFz cz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7Jmd0OyZuYnNwOyZuYnNwOyB8IFRCRDEgfCB4IHwmbmJzcDsm bmJzcDsgfCZuYnNwOyZuYnNwOyB8Jm5ic3A7Jm5ic3A7IHwgT1NDT1JFJm5ic3A7Jm5ic3A7Jm5i c3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7IHwmbmJzcDsgKCopJm5ic3A7Jm5ic3A7 IHwgMC0yNTUmbmJzcDsgfCAobm9uZSkmbmJzcDsgfDxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9 Ik1zb1BsYWluVGV4dCI+Jmd0OyZndDsmbmJzcDsmbmJzcDsgJiM0MzstLS0tLS0mIzQzOy0tLSYj NDM7LS0tJiM0MzstLS0mIzQzOy0tLSYjNDM7LS0tLS0tLS0tLS0tLS0tLSYjNDM7LS0tLS0tLS0m IzQzOy0tLS0tLS0tJiM0MzstLS0tLS0tLS0mIzQzOzxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9 Ik1zb1BsYWluVGV4dCI+Jmd0OyZndDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJz cDsgQyA9IENyaXRpY2FsLCZuYnNwOyZuYnNwOyBVID0gVW5zYWZlLCZuYnNwOyZuYnNwOyBOID0g Tm9DYWNoZUtleSwmbmJzcDsmbmJzcDsgUiA9IFJlcGVhdGFibGU8bzpwPjwvbzpwPjwvcD4NCjxw IGNsYXNzPSJNc29QbGFpblRleHQiPiZndDsmZ3Q7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5i c3A7Jm5ic3A7ICgqKSBTZWUgYmVsb3cuPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxh aW5UZXh0Ij4mZ3Q7Jmd0OzxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWlu VGV4dCI+Jmd0OyZndDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsm bmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJz cDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsgRmlndXJlIDM6IFRoZSBPU0NP UkUgT3B0aW9uPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7Jmd0 OzxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0OyZndDsm bmJzcDsmbmJzcDsgVGhlIE9TQ09SRSBvcHRpb24gaW5jbHVkZXMgdGhlIE9TQ09SRSBmbGFnIGJp dHMgKFNlY3Rpb24gNiksIHRoZTxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4 dCI+Jmd0OyZndDsmbmJzcDsmbmJzcDsgU2VuZGVyIFNlcXVlbmNlIE51bWJlciwgdGhlIFNlbmRl ciBJRCwgYW5kIHRoZSBJRCBDb250ZXh0IHdoZW4gdGhlc2U8bzpwPjwvbzpwPjwvcD4NCjxwIGNs YXNzPSJNc29QbGFpblRleHQiPiZndDsmZ3Q7Jm5ic3A7Jm5ic3A7IGZpZWxkcyBhcmUgcHJlc2Vu dCAoU2VjdGlvbiAzKS4mbmJzcDsgVGhlIGRldGFpbGVkIGZvcm1hdCBhbmQgbGVuZ3RoIGlzPG86 cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7Jmd0OyZuYnNwOyZuYnNw OyBzcGVjaWZpZWQgaW4gU2VjdGlvbiA2LiZuYnNwOyBJZiB0aGUgT1NDT1JFIGZsYWcgYml0cyBh cmUgYWxsIHplcm8gKDB4MDApPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0 Ij4mZ3Q7Jmd0OyZuYnNwOyZuYnNwOyB0aGUgT3B0aW9uIHZhbHVlIFNIQUxMIGJlIGVtcHR5IChP cHRpb24gTGVuZ3RoID0gMCkuJm5ic3A7IEFuIGVuZHBvaW50PG86cD48L286cD48L3A+DQo8cCBj bGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7Jmd0OyZuYnNwOyZuYnNwOyByZWNlaXZpbmcgYSBDb0FQ IG1lc3NhZ2Ugd2l0aG91dCBwYXlsb2FkLCB0aGF0IGFsc28gY29udGFpbnMgYW48bzpwPjwvbzpw PjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDsmZ3Q7Jm5ic3A7Jm5ic3A7IE9TQ09S RSBvcHRpb24gU0hBTEwgdHJlYXQgaXQgYXMgbWFsZm9ybWVkIGFuZCByZWplY3QgaXQuPG86cD48 L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7Jmd0OzxvOnA+Jm5ic3A7PC9v OnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0OyZndDsmbHQ7bWdsdCZndDs8bzpw PjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDsmZ3Q7SSBiZWxpZXZlIHRo ZSBsb2dpYyBmb3IgdGhlIE9TQ09SRSBvcHRpb24gaXMgdGhlIG90aGVyIHdheSBhcm91bmQsIHRo YXQ8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDsmZ3Q7aXM6IGFu PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7Jmd0O0NvQVAgbWVz c2FnZSB3aXRoIGFuIE9TQ09SRSBvcHRpb24gd2l0aCBhbiBlbXB0eSBDb0FQIHBheWxvYWQgTVVT VCBiZTxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0OyZndDtyZWpl Y3RlZDxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0OyZndDthcyBt YWxmb3JtZWQgYW5kIHJlamVjdCBpdC4gJmx0Oy9tZ2x0Jmd0OzxvOnA+PC9vOnA+PC9wPg0KPHAg Y2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0OzxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPHAgY2xhc3M9 Ik1zb1BsYWluVGV4dCI+Jmd0O1tHUzpdIEJvdGggc3RhdGVtZW50cyBhcmUgY29ycmVjdC4gUGVy aGFwcyBpdCBpcyBldmVuIG1vcmUgY2xlYXIgaWYmbmJzcDsg4oCcYW5k4oCdPG86cD48L286cD48 L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7aXMgdXNlZDo8bzpwPjwvbzpwPjwvcD4N CjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDtORVc8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNz PSJNc29QbGFpblRleHQiPiZndDtBbiBlbmRwb2ludCByZWNlaXZpbmcgYSBDb0FQIG1lc3NhZ2Ug d2l0aCB0aGUgT1NDT1JFIG9wdGlvbiBhbmQgd2l0aG91dDxvOnA+PC9vOnA+PC9wPg0KPHAgY2xh c3M9Ik1zb1BsYWluVGV4dCI+Jmd0O3BheWxvYWQgU0hBTEwgdHJlYXQgaXQgYXMgbWFsZm9ybWVk IGFuZCByZWplY3QgaXQuPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4m Z3Q7PG86cD4mbmJzcDs8L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7PG86 cD4mbmJzcDs8L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij48c3BhbiBzdHlsZT0i Y29sb3I6cmVkIj4mbHQ7bWdsdDImZ3Q7PG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9 Ik1zb1BsYWluVGV4dCI+PHNwYW4gc3R5bGU9ImNvbG9yOnJlZCI+U291bmRzIGdvb2QgdG8gbWUu PG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+PHNwYW4gc3R5 bGU9ImNvbG9yOnJlZCI+Jmx0Oy9tZ2x0MiZndDs8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBj bGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7Jmd0OzxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPHAgY2xh c3M9Ik1zb1BsYWluVGV4dCI+Jmd0OyZndDsmbmJzcDsmbmJzcDsgQSBzdWNjZXNzZnVsIHJlc3Bv bnNlIHRvIGEgcmVxdWVzdCB3aXRoIHRoZSBPU0NPUkUgb3B0aW9uIFNIQUxMPG86cD48L286cD48 L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7Jmd0OyZuYnNwOyZuYnNwOyBjb250YWlu IHRoZSBPU0NPUkUgb3B0aW9uLiZuYnNwOyBXaGV0aGVyIGVycm9yIHJlc3BvbnNlcyBjb250YWlu IHRoZTxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0OyZndDsmbmJz cDsmbmJzcDsgT1NDT1JFIG9wdGlvbiBkZXBlbmRzIG9uIHRoZSBlcnJvciB0eXBlIChzZWUgU2Vj dGlvbiA4KS48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDsmZ3Q7 PG86cD4mbmJzcDs8L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7Jmd0OyZu YnNwOyZuYnNwOyBGb3IgQ29BUCBwcm94eSBvcGVyYXRpb25zLCBzZWUgU2VjdGlvbiAxMC48bzpw PjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDsmZ3Q7PG86cD4mbmJzcDs8 L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7Jmd0OzMuJm5ic3A7IFRoZSBT ZWN1cml0eSBDb250ZXh0PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4m Z3Q7Jmd0OzxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0 OyZndDsmbmJzcDsmbmJzcDsgT1NDT1JFIHJlcXVpcmVzIHRoYXQgY2xpZW50IGFuZCBzZXJ2ZXIg ZXN0YWJsaXNoIGEgc2hhcmVkIHNlY3VyaXR5PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNv UGxhaW5UZXh0Ij4mZ3Q7Jmd0OyZuYnNwOyZuYnNwOyBjb250ZXh0IHVzZWQgdG8gcHJvY2VzcyB0 aGUgQ09TRSBvYmplY3RzLiZuYnNwOyBPU0NPUkUgdXNlcyBDT1NFIHdpdGggYW48bzpwPjwvbzpw PjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDsmZ3Q7Jm5ic3A7Jm5ic3A7IEF1dGhl bnRpY2F0ZWQgbmNyeXB0aW9uIHdpdGggQWRkaXRpb25hbCBEYXRhIChBRUFELCBbUkZDNTExNl0p PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7Jmd0OyZuYnNwOyZu YnNwOyBhbGdvcml0aG0gZm9yIHByb3RlY3RpbmcgZXNzYWdlIGRhdGEgYmV0d2VlbiBhIGNsaWVu dCBhbmQgYSBzZXJ2ZXIuPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4m Z3Q7Jmd0OyZuYnNwOyZuYnNwOyBJbiB0aGlzIHNlY3Rpb24sIHdlIGRlZmluZSB0aGUgc2VjdXJp dHkgY29udGV4dCBhbmQgaG93IGl0IGlzIGRlcml2ZWQ8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNz PSJNc29QbGFpblRleHQiPiZndDsmZ3Q7PG86cD4mbmJzcDs8L286cD48L3A+DQo8cCBjbGFzcz0i TXNvUGxhaW5UZXh0Ij4mZ3Q7Jmd0O1NlbGFuZGVyLCBldCBhbC4mbmJzcDsmbmJzcDsmbmJzcDsm bmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsgRXhpcmVzIEphbnVhcnkgMjcsIDIwMTkmbmJzcDsmbmJz cDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsm bmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsgW1BhZ2UgN108bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNz PSJNc29QbGFpblRleHQiPiZndDsmZ3Q7PG86cD4mbmJzcDs8L286cD48L3A+DQo8cCBjbGFzcz0i TXNvUGxhaW5UZXh0Ij4mZ3Q7Jmd0O0ludGVybmV0LURyYWZ0Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5i c3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7 Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7IE9TQ09SRSZuYnNwOyZuYnNwOyZuYnNwOyZu YnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNw OyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZu YnNwOyBKdWx5IDIwMTg8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZn dDsmZ3Q7PG86cD4mbmJzcDs8L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7 Jmd0OyZuYnNwOyZuYnNwOyBpbiBjbGllbnQgYW5kIHNlcnZlciBiYXNlZCBvbiBhIHNoYXJlZCBz ZWNyZXQgYW5kIGEga2V5IGRlcml2YXRpb248bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Q bGFpblRleHQiPiZndDsmZ3Q7Jm5ic3A7Jm5ic3A7IGZ1bmN0aW9uIChLREYpLjxvOnA+PC9vOnA+ PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0OyZndDs8bzpwPiZuYnNwOzwvbzpwPjwv cD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDsmZ3Q7My4xLiZuYnNwOyBTZWN1cml0eSBD b250ZXh0IERlZmluaXRpb248bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQi PiZndDsmZ3Q7PG86cD4mbmJzcDs8L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4m Z3Q7Jmd0OyZuYnNwOyZuYnNwOyBUaGUgc2VjdXJpdHkgY29udGV4dCBpcyB0aGUgc2V0IG9mIGlu Zm9ybWF0aW9uIGVsZW1lbnRzIG5lY2Vzc2FyeSB0bzxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9 Ik1zb1BsYWluVGV4dCI+Jmd0OyZndDsmbmJzcDsmbmJzcDsgY2Fycnkgb3V0IHRoZSBjcnlwdG9n cmFwaGljIG9wZXJhdGlvbnMgaW4gT1NDT1JFLiZuYnNwOyBGb3IgZWFjaCBlbmRwb2ludCw8bzpw PjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDsmZ3Q7Jm5ic3A7Jm5ic3A7 IHRoZSBzZWN1cml0eSBjb250ZXh0IGlzIGNvbXBvc2VkIG9mIGEgJnF1b3Q7Q29tbW9uIENvbnRl eHQmcXVvdDssIGEgJnF1b3Q7U2VuZGVyPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxh aW5UZXh0Ij4mZ3Q7Jmd0OyZuYnNwOyZuYnNwOyBDb250ZXh0JnF1b3Q7LCBhbmQgYSAmcXVvdDtS ZWNpcGllbnQgQ29udGV4dCZxdW90Oy48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFp blRleHQiPiZndDsmZ3Q7PG86cD4mbmJzcDs8L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5U ZXh0Ij4mZ3Q7Jmd0OyZuYnNwOyZuYnNwOyBUaGUgZW5kcG9pbnRzIHByb3RlY3QgbWVzc2FnZXMg dG8gc2VuZCB1c2luZyB0aGUgU2VuZGVyIENvbnRleHQgYW5kPG86cD48L286cD48L3A+DQo8cCBj bGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7Jmd0OyZuYnNwOyZuYnNwOyB2ZXJpZnkgbWVzc2FnZXMg cmVjZWl2ZWQgdXNpbmcgdGhlIFJlY2lwaWVudCBDb250ZXh0LCBib3RoIGNvbnRleHRzPG86cD48 L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7Jmd0OyZuYnNwOyZuYnNwOyBi ZWluZyBkZXJpdmVkIGZyb20gdGhlIENvbW1vbiBDb250ZXh0IGFuZCBvdGhlciBkYXRhLiZuYnNw OyBDbGllbnRzIGFuZDxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0 OyZndDsmbmJzcDsmbmJzcDsgc2VydmVycyBuZWVkIHRvIGJlIGFibGUgdG8gcmV0cmlldmUgdGhl IGNvcnJlY3Qgc2VjdXJpdHkgY29udGV4dCB0bzxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1z b1BsYWluVGV4dCI+Jmd0OyZndDsmbmJzcDsmbmJzcDsgdXNlLjxvOnA+PC9vOnA+PC9wPg0KPHAg Y2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0OyZndDs8bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjxwIGNs YXNzPSJNc29QbGFpblRleHQiPiZndDsmZ3Q7Jmx0O21nbHQmZ3Q7PG86cD48L286cD48L3A+DQo8 cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7Jmd0O0kgYmVsaWV2ZSBpdCBtaWdodCBiZSBjbGFy aWZ5aW5nIHRvIHNwZWNpZnkgdGhhdCBDb0FQIGVuZHBvaW50cyBoYXZlPG86cD48L286cD48L3A+ DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7Jmd0O2Fsd2F5czxvOnA+PC9vOnA+PC9wPg0K PHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0OyZndDtiaWRpcmVjdGlvbmFsIGNvbW11bmljYXRp b25zLjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0O1tHUzpdIFRo aXMgaXMgbm90IGNvcnJlY3QgZm9yIGFsbCBhcHBsaWNhdGlvbnMgb2YgT1NDT1JFLiBGb3IgZ3Jv dXA8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDtjb21tdW5pY2F0 aW9ucyB0aGVyZSBpcyB0aGUgY29uY2VwdCBvZiBhICZxdW90O3NpbGVudCBzZXJ2ZXLigJ0gd2hp Y2ggaXMganVzdDxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0O2xp c3RlbmluZyB0byBtdWx0aWNhc3QgbWVzc2FnZXM6PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0i TXNvUGxhaW5UZXh0Ij4mZ3Q7PGEgaHJlZj0iaHR0cHM6Ly90b29scy5pZXRmLm9yZy9odG1sL2Ry YWZ0LWlldGYtY29yZS1vc2NvcmUtZ3JvdXBjb21tLTAyIj48c3BhbiBzdHlsZT0iY29sb3I6d2lu ZG93dGV4dDt0ZXh0LWRlY29yYXRpb246bm9uZSI+aHR0cHM6Ly90b29scy5pZXRmLm9yZy9odG1s L2RyYWZ0LWlldGYtY29yZS1vc2NvcmUtZ3JvdXBjb21tLTAyPC9zcGFuPjwvYT48bzpwPjwvbzpw PjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDtUaGVyZSBpcyBhbHNvIHRoZSDigJxO by1SZXNwb25zZeKAnSBvcHRpb24gd2hpY2ggaW5oaWJpdHMgY2VydGFpbiByZXNwb25zZXMuPG86 cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7PG86cD4mbmJzcDs8L286 cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7Jmd0O0lmIHRoYXQgaXMgY29ycmVj dCwgdGhlbiBmb3IgZWFjaCBjb21tdW5pY2F0aW9uPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0i TXNvUGxhaW5UZXh0Ij4mZ3Q7Jmd0O2VhY2ggZW5kIHBvaW50IGlzIGJvdGggYSAmcXVvdDtTZW5k ZXImcXVvdDsgYW5kIGEgJnF1b3Q7UmVjaXBpZW50JnF1b3Q7IGZvciBpdHMgcmVzcGVjdGl2ZTxv OnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0OyZndDtvdXRib3VuZDxv OnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0OyZndDthbmQgaWJvdW5k IHRyYWZmaWMuIFRoZSA0IGNvbnRleHQgYXJlIGRlcml2ZWQgZnJvbSBhIENvbW1vbiBDb250ZXh0 LjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0OyZndDs8bzpwPiZu YnNwOzwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDsmZ3Q7QXMgc2VjdXJp dHljb250ZXh0IGFyZSBlc3RhYmxpc2hlZCB0byBzZWN1cmUgdW5pZGlyZWN0aW9uYWw8bzpwPjwv bzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDsmZ3Q7Y29tbXVuaWNhdGlvbnMs PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7Jmd0O21heWJlIHRo YXQgd291bGQgYmUgZWFzaWVyIHRvIGJhc2UgdGhlIGRlc2NyaXB0aW9uIG9uIHRoZSB1bmlkaXJl Y3Rpb25hbDxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0OyZndDtj b21tdWljYXRpb25zIHJhdGhlciB0aGFuIHRoZSBlbmQgcG9pbnRzLiAmbHQ7L21nbHQmZ3Q7PG86 cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7PG86cD4mbmJzcDs8L286 cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7W0dTOl0gSeKAmW0gbm90IHN1cmUg aG93IEkgc2hvdWxkIGFkZHJlc3MgdGhpcyBjb21tZW50LCBidXQgb25lIHJlYXNvbiB3aHk8bzpw PjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDt0aGUgc2VjdXJpdHkgY29u dGV4dCBpcyBkZXNjcmliZWQgZnJvbSB0aGUgcG9pbnQgb2YgdmlldyBvZiBlbmRwb2ludHMgczxv OnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0O3RoYXQgYW4gZW5kcG9p bnQgdXNlcyB0aGUgc2VjdXJpdHkgY29udGV4dCBpbiB0aGUgc2FtZSB3YXkgaW5kZXBlbmVudCBv ZjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0O2JlaW5nIGNsaWVu dCBvciBzZXJ2ZXIuIEUuZy4gdGhlIFNlbmRlciBDb250ZXh0IGlzIHVzZWQgYnkgYW4gZW5kb2lu dCBpbjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0O3RoZSByb2xl IG9mIGNsaWVudCBzZW5kaW5nIHJlcXVlc3RzIGFuZCBpbiB0aGUgcm9sZSBvZiBzZXJ2ciBzZW5k aW5nPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7cmVzcG9uc2Vz LiA8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDs8bzpwPiZuYnNw OzwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDs8bzpwPiZuYnNwOzwvbzpw PjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDs8bzpwPiZuYnNwOzwvbzpwPjwvcD4N CjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDsmZ3Q7PG86cD4mbmJzcDs8L286cD48L3A+DQo8 cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7Jmd0OyZuYnNwOyZuYnNwOyBBbiBlbmRwb2ludCB1 c2VzIGl0cyBTZW5kZXIgSUQgKFNEKSB0byBkZXJpdmUgaXRzIFNlbmRlciBDb250ZXh0LDxvOnA+ PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0OyZndDsmbmJzcDsmbmJzcDsg YW5kIHRoZSBvdGhlciBlbmRwb2ludCB1c2VzIHRoZSBzYW1lSUQsIG5vdyBjYWxsZWQgUmVjaXBp ZW50IElEPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7Jmd0OyZu YnNwOyZuYnNwOyAoUklEKSwgdG8gZGVyaXZlIGl0cyBSZWNpcGllbnQgQ29udGV4dC4gSW4gY29t bXVuaWNhdGlvbiBiZXR3ZWVuIHR3bzxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWlu VGV4dCI+Jmd0OyZndDsmbmJzcDsmbmJzcDsgZW5kcG9pbnRzLCB0aGUgU2VuZGVyIENvbnRleHQg b2Ygb25lIGVuZG9pbnQgbWF0Y2hlcyB0aGUgUmVjaXBpZW50PG86cD48L286cD48L3A+DQo8cCBj bGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7Jmd0OyZuYnNwOyZuYnNwOyBDb250ZXh0IG9mIHRoZSBv dGhlciBlbmRwb2ludCwgYW5kIHZpY2UgdmVyc2EuJm5ic3A7IFRodXMsIHRoZSB0d288bzpwPjwv bzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDsmZ3Q7Jm5ic3A7Jm5ic3A7IHNl Y3VyaXR5IGNvbnRleHRzIGlkZW50aWZpZWQgYnkgdGhlIHNhbWUgSURzIGluIHRoZSB0d28gZW5k cG9pbnRzIGFyZTxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0OyZn dDsmbmJzcDsmbmJzcDsgbm90IHRoZSBzYW1lLCBidXQgdGhleSBhcmUgcGFydGx5IG1pcnJvcmVk LiZuYnNwOyBSZXRyaWV2YWwgYW5kIHVzZSBvZiB0aGU8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNz PSJNc29QbGFpblRleHQiPiZndDsmZ3Q7Jm5ic3A7Jm5ic3A7IHNlY3VyaXR5IGNvbnRleHQgYXJl IHNob3duIGluIEZpZ3VyZSA0LjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4 dCI+Jmd0OyZndDs8bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQi PjxzcGFuIHN0eWxlPSJjb2xvcjpyZWQiPiZsdDttZ2x0MiZndDs8bzpwPjwvbzpwPjwvc3Bhbj48 L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij48c3BhbiBzdHlsZT0iY29sb3I6cmVkIj5PSy4g VGhhbmtzIGZvciB0aGUgY2xhcmlmaWNhdGlvbi4gSSBiZWxpZXZlIEkgd2FzIG91dCBvZiB0aGUg dHJhY2sgYmVjYXVzZSBJIHdhcyByZWFkaW5nIGl0IHdpdGggaXBzZWMgZXllcy4gSSB0aGluayB0 aGUgZmlndXJlIDQgc2VlbXMgdG8gaWxsdXN0cmF0ZSBiZXR0ZXIgd2hhdCB0aGUgdGV4dCBzYXlz IOKAkyBhdCBsZWFzdCB0byBtZS4gJm5ic3A7PG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xh c3M9Ik1zb1BsYWluVGV4dCI+PHNwYW4gc3R5bGU9ImNvbG9yOnJlZCI+Jmx0Oy9tZ2x0MiZndDs8 bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij48bzpwPiZuYnNw OzwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDsmZ3Q7Jmx0O21nbHQmZ3Q7 PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7Jmd0OyZxdW90O0Fu IGVuZHBvaW50IHVzZXMgaXRzIFNlbmRlciBJRCAoU0lEKSB0byBkZXJpdmUgaXRzIFNlbmRlciBD b250ZXh0LCZxdW90OzxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0 OyZndDs8bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDsm Z3Q7SSBzZWUgdGhlIElEIGFzIG1vc3RseSB1c2VmdWwgdG8gdGhlIHJlY2lwaWVudCBpbiBvcmRl ciB0byByZXRyaWV2ZSB0aGU8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQi PiZndDsmZ3Q7YXBwcm9wcmlhdGVkIHNlY3VyaXR5IGNvbnRleHQgYW5kIGRlY3J5cHQgdGhlIG1l c3NhZ2UuIEluIG90aGVyIHdvcmRzLDxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWlu VGV4dCI+Jmd0OyZndDt0aGU8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQi PiZndDsmZ3Q7c2VuZGVyIHNob3VsZCBrbm93IHdobyBpdCBzZW5kcyB0aGUgbWVzc2FnZSB0byBh bmQgZG9lcyBub3QgcmVhbGx5IG5lZWQ8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFp blRleHQiPiZndDsmZ3Q7dGhlIFNJRCZndDsmZ3Q7dG8gbWF0Y2ggdGhlIHNlY3VyaXR5IGNvbnRl eHQuPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7Jmd0OzxvOnA+ Jm5ic3A7PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0OyZndDtJIGJlbGll dmUgdGhpcyBzaG91bGQgYmUgY2xhcmlmaWVkIGFzIHRoZSBjdXJyZW50IHRleHQgcHJldmVudHMg U2VuZGVyIElEPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7Jmd0 O2NvbGxpc2lvbiwgd2hpbGUgY29sbGlzaW9uIHNob3VsZCBvbmx5IGJlIGF2b2lkZWQgb24gdGhl IHJlY2VpdmVyJ3Mgc2lkZS48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQi PiZndDsmZ3Q7Jmx0Oy9tZ2x0Jmd0OzxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWlu VGV4dCI+Jmd0OzxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+ Jmd0O1tHUzpdIFNlY3Rpb24gMy4zIHN0YXRlcyB0aGUgZm9sbG93aW5nOiAmcXVvdDtUbyBlbnN1 cmUgdW5pcXVlIFNlbmRlciBLZXlzLCB0aGU8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Q bGFpblRleHQiPiZndDtxdWFydGV0IChNYXN0ZXIgU2VjcmV0LCBNYXN0ZXIgU2FsdCwgSUQgQ29u dGV4dCwgU2VuZGVyIElEKSBNVVNUIGJlPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxh aW5UZXh0Ij4mZ3Q7dW5pcXVl4oCdIGFuZCB0aGF0IHRoaXMgbWVhbnMgdGhhdCAmcXVvdDtTZW5k ZXIgSUQgU0hBTEwgYmUgdW5pcXVlIGluIHRoZSBzZXQgb2Y8bzpwPjwvbzpwPjwvcD4NCjxwIGNs YXNzPSJNc29QbGFpblRleHQiPiZndDthbGwgc2VjdXJpdHkgY29udGV4dHMgdXNpbmcgdGhlIHNh bWUgTWFzdGVyIFNlY3JldCwgTWFzdGVyIFNhbHQsIGFuZCBJRDxvOnA+PC9vOnA+PC9wPg0KPHAg Y2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0O0NvbnRleHQ7IHN1Y2ggYSByZXF1aXJlbWVudCBndWFy YW50ZWVzIHVuaXF1ZSAoa2V5LCBub25jZSkgcGFpcnMsIHdoaWNoPG86cD48L286cD48L3A+DQo8 cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7YXZvaWRzIG5vbmNlIHJldXNlLuKAnSBUaGUgcHJv b2YgZm9yIChrZXksbm9uY2UpIHVuaXF1ZW5lc3MgaXMgaW4gQXBwZW5kaXg8bzpwPjwvbzpwPjwv cD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDtELjMgYW5kIGNyaXRpY2FsbHkgdXNlcyB0 aGUgdW5pcXVlbmVzcyBvZiBTZW5kZXIgSURzLCBzbyB0aGF0IGlzIGluZGVlZDxvOnA+PC9vOnA+ PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0O3JlcXVpcmVkLjxvOnA+PC9vOnA+PC9w Pg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0O0FzIGEgY29uc2VxdWVuY2UsIHRoZSBSZWNp cGllbnQgSURzIHdpdGhpbiBvbmUgc2VjdXJpdHkgY29udGV4dCBhcmUgYWxzbzxvOnA+PC9vOnA+ PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0O3VuaXF1ZS48bzpwPjwvbzpwPjwvcD4N CjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDtDb2luY2lkZW5jZSBvZiBSZWNpcGllbnQgSURz IGJldHdlZW4gZGlmZmVyZW50IHNlY3VyaXR5IGNvbnRleHRzIGlzIG5vdCBhPG86cD48L286cD48 L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7c2VjdXJpdHkgaXNzdWUsIHNlY3Rpb24g My4zIGFsc28gc3RhdGVzOiAmcXVvdDtUbyBzaW1wbGlmeSByZXRyaWV2YWwgb2YgdGhlPG86cD48 L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7cmlnaHQgUmVjaXBpZW50IENv bnRleHQsIHRoZSBSZWNpcGllbnQgSUQgU0hPVUxEIGJlIHVuaXF1ZSBpbiB0aGUgc2V0cyBvZjxv OnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0O2FsbCBSZWNpcGllbnQg Q29udGV4dHMgdXNlZCBieSBhbiBlbmRwb2ludC4gSWYgYW4gZW5kcG9pbnQgaGFzIHRoZSBzYW1l PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7UmVjaXBpZW50IElE IHdpdGggZGlmZmVyZW50IFJlY2lwaWVudCBDb250ZXh0cywgaS5lLiB0aGUgUmVjaXBpZW50PG86 cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7Q29udGV4dHMgYXJlIGRl cml2ZWQgZnJvbSBkaWZmZXJlbnQgQ29tbW9uIENvbnRleHRzLCB0aGVuIHRoZSBlbmRwb2ludCBt YXk8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDtuZWVkIHRvIHRy eSBtdWx0aXBsZSB0aW1lcyBiZWZvcmUgdmVyaWZ5aW5nIHRoZSByaWdodCBzZWN1cml0eSBjb250 ZXh0PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7YXNzb2NpYXRl ZCB0byB0aGUgUmVjaXBpZW50IElELuKAnSBJcyB0aGVyZSBzb21ldGhpbmcgbWlzc2luZyBmcm9t IHRoaXM8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDtkZXNjcmlw dGlvbj88bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPjxvOnA+Jm5ic3A7 PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+PHNwYW4gc3R5bGU9ImNvbG9yOnJl ZCI+Jmx0O21nbHQyJmd0OzxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFp blRleHQiPjxzcGFuIHN0eWxlPSJjb2xvcjpyZWQiPkkgYWdyZWUgdGhpcyBpcyBhIHN0cm9uZyBT SE9VTEQmIzQzOyYjNDM7LiBUaGUgUmVjaXBpZW50IElEIFNIT1VMRCBiZSB1bmlxdWUuDQo8bzpw PjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij48c3BhbiBzdHlsZT0i Y29sb3I6cmVkIj4mbHQ7L21nbHQyJmd0OzxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNz PSJNc29QbGFpblRleHQiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWlu VGV4dCI+Jmd0OzxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+ Jmd0OzxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0Ozxv OnA+Jm5ic3A7PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0OyZndDs8bzpw PiZuYnNwOzwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDsmZ3Q7Jm5ic3A7 Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5i c3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7IC4tLS0tLS0tLS0tLS0tLiZuYnNwOyZu YnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyAuLS0t LS0tLS0tLS0tLS48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDsm Z3Q7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7 Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7IHwmbmJzcDsgQ29tbW9u LCZuYnNwOyZuYnNwOyZuYnNwOyB8Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7 Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7IHwmbmJzcDsgQ29tbW9uLCZuYnNwOyZuYnNwOyZuYnNw OyB8PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7Jmd0OyZuYnNw OyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZu YnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyB8Jm5ic3A7IFNlbmRlciwmbmJzcDsm bmJzcDsmbmJzcDsgfCZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZu YnNwOyZuYnNwOyZuYnNwOyB8Jm5ic3A7IFJlY2lwaWVudCwgfDxvOnA+PC9vOnA+PC9wPg0KPHAg Y2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0OyZndDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJz cDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsm bmJzcDsmbmJzcDsgfCZuYnNwOyBSZWNpcGllbnQmbmJzcDsgfCZuYnNwOyZuYnNwOyZuYnNwOyZu YnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyB8Jm5ic3A7IFNlbmRlciZu YnNwOyZuYnNwOyZuYnNwOyZuYnNwOyB8PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxh aW5UZXh0Ij4mZ3Q7Jmd0OyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNw OyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyAn LS0tLS0tLS0tLS0tLScmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsm bmJzcDsmbmJzcDsmbmJzcDsgJy0tLS0tLS0tLS0tLS0nPG86cD48L286cD48L3A+DQo8cCBjbGFz cz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7Jmd0OyZuYnNwOyZuYnNwOyZuYnNwOyAmbmJzcDsmbmJzcDsm bmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJz cDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDtDbGllbnQmbmJzcDsmbmJzcDsm bmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJz cDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsgU2VydmVyPG86cD48L286cD48 L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7Jmd0OyZuYnNwOyZuYnNwOyZuYnNwOyZu YnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNw OyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZu YnNwOyZuYnNwOyB8Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5i c3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7 Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7IHw8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNz PSJNc29QbGFpblRleHQiPiZndDsmZ3Q7Jm5ic3A7Jm5ic3A7IFJldHJpZXZlIGNvbnRleHQgZm9y Jm5ic3A7IHwgT1NDT1JFIHJlcXVlc3Q6Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5i c3A7IHw8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDsmZ3Q7Jm5i c3A7Jm5ic3A7Jm5ic3A7IHRhcmdldCByZXNvdXJjZSZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZu YnNwOyB8Jm5ic3A7Jm5ic3A7IFRva2VuID0gVG9rZW4xLCZuYnNwOyZuYnNwOyZuYnNwOyZuYnNw OyB8PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7Jmd0OyZuYnNw OyZuYnNwOyBQcm90ZWN0IHJlcXVlc3Qgd2l0aCZuYnNwOyB8Jm5ic3A7Jm5ic3A7IGtpZCA9IFNJ RCwgLi4uJm5ic3A7ICZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwO3w8bzpwPjwvbzpwPjwvcD4NCjxw IGNsYXNzPSJNc29QbGFpblRleHQiPiZndDsmZ3Q7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7IFNl bmRlciBDb250ZXh0Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7ICYjNDM7LS0tLS0tLS0t LS0tLS0tLS0tLS0tLSZndDt8IFJldHJpZXZlIGNvbnRleHQgd2l0aDxvOnA+PC9vOnA+PC9wPg0K PHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0OyZndDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsm bmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJz cDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsm bmJzcDsgfCZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZu YnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNw OyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyB8Jm5ic3A7IFJJRCA9IGtpZDxvOnA+PC9vOnA+PC9w Pg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0OyZndDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJz cDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsm bmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJz cDsmbmJzcDsgfCZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNw OyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZu YnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyB8IFZlcmlmeSByZXF1ZXN0IHdpdGg8bzpwPjwv bzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDsmZ3Q7Jm5ic3A7Jm5ic3A7Jm5i c3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7 Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5i c3A7Jm5ic3A7Jm5ic3A7IHwmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJz cDsmbmJzcDsmbmJzcDsgJm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7 Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7fCZuYnNwOyBSZWNpcGllbnQgQ29u dGV4dDxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0OyZndDsmbmJz cDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsm bmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJz cDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsgfCBPU0NPUkUgcmVzcG9uc2U6Jm5ic3A7Jm5ic3A7 Jm5ic3A7Jm5ic3A7Jm5ic3A7IHwgUHJvdGVjdCByZXNwb25zZSB3aXRoPG86cD48L286cD48L3A+ DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7Jmd0OyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNw OyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZu YnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNw OyZuYnNwOyB8Jm5ic3A7Jm5ic3A7IFRva2VuID0gVG9rZW4xLCAuLi4gfCZuYnNwOyBTZW5kZXIg Q29udGV4dDxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0OyZndDsm bmJzcDsmbmJzcDsgUmV0cmlldmUgY29udGV4dCB3aXRoIHwmbHQ7LS0tLS0tLS0tLS0tLS0tLS0t LS0tLSYjNDM7PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7Jmd0 OyZuYnNwOyZuYnNwOyZuYnNwOyBUb2tlbiA9IFRva2VuMSZuYnNwOyZuYnNwOyZuYnNwOyZuYnNw OyAmbmJzcDsmbmJzcDt8Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7 Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5i c3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7IHw8bzpwPjwvbzpwPjwvcD4NCjxwIGNs YXNzPSJNc29QbGFpblRleHQiPiZndDsmZ3Q7Jm5ic3A7Jm5ic3A7IFZlcmlmeSByZXF1ZXN0IHdp dGgmbmJzcDsmbmJzcDsgfCZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNw OyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZu YnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyB8PG86cD48L286cD48L3A+DQo8cCBj bGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7Jmd0OyZuYnNwOyZuYnNwOyZuYnNwOyBSZWNpcGllbnQg Q29udGV4dCZuYnNwOyZuYnNwOyZuYnNwOyB8Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7 Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5i c3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7IHw8bzpwPjwvbzpw PjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDsmZ3Q7PG86cD4mbmJzcDs8L286cD48 L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7Jmd0OyZuYnNwOyZuYnNwOyZuYnNwOyZu YnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyBGaWd1cmUgNDog UmV0cmlldmFsIGFuZCBVc2Ugb2YgdGhlIFNlY3VyaXR5IENvbnRleHQ8bzpwPjwvbzpwPjwvcD4N CjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDsmZ3Q7PG86cD4mbmJzcDs8L286cD48L3A+DQo8 cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7Jmd0OyZsdDttZ2x0Jmd0OzxvOnA+PC9vOnA+PC9w Pg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0OyZndDtJIG1pZ2h0IGJlIGhlbHBmdWwgdG8g Y2xhcmlmeSB0aGF0IFNlbmRlciBDb250ZXh0IG9uIGJvdGggc2lkZXMgYXJlIG5vdDxvOnA+PC9v OnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0OyZndDt0aGU8bzpwPjwvbzpwPjwv cD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDsmZ3Q7c2FtZSBjb250ZXh0LjxvOnA+PC9v OnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0OzxvOnA+Jm5ic3A7PC9vOnA+PC9w Pg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0OzxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPHAg Y2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0OzxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPHAgY2xhc3M9 Ik1zb1BsYWluVGV4dCI+Jmd0O1tHUzpdIElzIHRoaXMgYmV0dGVyPzxvOnA+PC9vOnA+PC9wPg0K PHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0O09MRDxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9 Ik1zb1BsYWluVGV4dCI+Jmd0O1RoZSBlbmRwb2ludHMgcHJvdGVjdCBtZXNzYWdlcyB0byBzZW5k IHVzaW5nIHRoZSBTZW5kZXIgQ29udGV4dCBhbmQ8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJN c29QbGFpblRleHQiPiZndDt2ZXJpZnkgbWVzc2FnZXMgcmVjZWl2ZWQgdXNpbmcgdGhlIFJlY2lw aWVudCBDb250ZXh0LCBib3RoIGNvbnRleHRzPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNv UGxhaW5UZXh0Ij4mZ3Q7YmVpbmcgZGVyaXZlZCBmcm9tIHRoZSBDb21tb24gQ29udGV4dCBhbmQg b3RoZXIgZGF0YS48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDtO RVc8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDtBbiBlbmRwb2lu dCBwcm90ZWN0cyBtZXNzYWdlcyB0byBzZW5kIHVzaW5nIGl0cyBTZW5kZXIgQ29udGV4dCBhbmQ8 bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDt2ZXJpZmllcyBtZXNz YWdlcyByZWNlaXZlZCB1c2luZyBpdHMgUmVjaXBpZW50IENvbnRleHQsIGJvdGggY29udGV4dHM8 bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDtiZWluZyBkZXJpdmVk IGZyb20gdGhlIENvbW1vbiBDb250ZXh0IGFuZCBvdGhlciBkYXRhLjxvOnA+PC9vOnA+PC9wPg0K PHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0OzxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPHAgY2xh c3M9Ik1zb1BsYWluVGV4dCI+Jmd0OzxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1z b1BsYWluVGV4dCI+Jmd0OzxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWlu VGV4dCI+PHNwYW4gc3R5bGU9ImNvbG9yOnJlZCI+Jmx0O21nbHQyJmd0OzxvOnA+PC9vOnA+PC9z cGFuPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPjxzcGFuIHN0eWxlPSJjb2xvcjpyZWQi PlRoaXMgaXMgZmluZSB0byBtZS48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNv UGxhaW5UZXh0Ij48c3BhbiBzdHlsZT0iY29sb3I6cmVkIj4mbHQ7L21nbHQyJmd0OzxvOnA+PC9v OnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDs8bzpwPiZuYnNwOzwv bzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDs8bzpwPiZuYnNwOzwvbzpwPjwv cD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDsmZ3Q7U2VjdXJpdHkgQ29udGV4dCBzZWVt cyB0byBiZSBtaXNzaW5nIGluIHRoZSBib3guPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNv UGxhaW5UZXh0Ij4mZ3Q7PG86cD4mbmJzcDs8L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5U ZXh0Ij4mZ3Q7W0dTOl0gRmlndXJlIDQgY29udGFpbnMgc29tZSBhYmJyZXZpYXRpb25zIHRvIGF2 b2lkIGJlY29taW5nIG92ZXJsb2FkZWQ8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFp blRleHQiPiZndDt3aXRoIHRleHQ6IEluIHRoZSBmaXJzdCBib3gg4oCcQ29tbW9uLCBTZW5kZXIs IFJlY2lwaWVudOKAnSBpcyBhbiBhYmJyZXZpYXRpb248bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNz PSJNc29QbGFpblRleHQiPiZndDtvZiDigJxDb21tb24gQ29udGV4dCwgU2VuZGVyIENvbnRleHQs IFJlY2lwaWVudCBDb250ZXh04oCdIC0gd2hpY2ggaW4gZmFjdCBpczxvOnA+PC9vOnA+PC9wPg0K PHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0O3RoZSB0aGUgdG9waWMgb2YgdGhpcyBzZWN0aW9u LiBEbyB5b3UgdGhpbmsgdGhpcyBpcyB1bmNsZWFyPyBNYXliZSBJPG86cD48L286cD48L3A+DQo8 cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7bWlzdW5kZXJzdG9vZCB0aGUgY29tbWVudC48bzpw PjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDs8bzpwPiZuYnNwOzwvbzpw PjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPjxzcGFuIHN0eWxlPSJjb2xvcjpyZWQiPiZs dDttZ2x0MiZndDs8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0 Ij48c3BhbiBzdHlsZT0iY29sb3I6cmVkIj5JIGFtIGZpbmUgZWl0aGVyIHdheXMuIEkgd2FzIHBl cmhhcHMgc3VnZ2VzdGluZyB0byBtZW50aW9uIENvbnRleHQgKG9uY2UpLg0KPG86cD48L286cD48 L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+PHNwYW4gc3R5bGU9ImNvbG9yOnJl ZCI+Jmx0Oy9tZ2x0MiZndDs8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvUGxh aW5UZXh0Ij4mZ3Q7Jmd0OzxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWlu VGV4dCI+Jmd0OyZndDtJdCB3b3VsZCBhbHNvIGhlbHAgdG8gaGF2ZSBpbiB0aGUgZmlndXJlLCB0 aGUgcmVsYXRpb24gYmV0d2VlbiB0aGUgQ29tbW9uPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0i TXNvUGxhaW5UZXh0Ij4mZ3Q7Jmd0O1NlY3VyaXR5IENvbnRleHQsIHRoZSBTZW5kZXIgQ29udGV4 dCBhbmQgUmVjaXBpZW50IENvbnRleHQgb24gYm90aCBzaWRlcy48bzpwPjwvbzpwPjwvcD4NCjxw IGNsYXNzPSJNc29QbGFpblRleHQiPiZndDsmZ3Q7Jmx0Oy9tZ2x0Jmd0OzxvOnA+PC9vOnA+PC9w Pg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0OzxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPHAg Y2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0O1tHUzpdIFRoZSBmaWd1cmUgaXMgYWxyZWFkeSB0cnlp bmcgdG8gaWxsdXN0cmF0ZSB0aGlzIGJ5IHRoZSBvcmRlcnMgb2YgdGhlPG86cD48L286cD48L3A+ DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7Y29udGV4dHMgaW4gdGhlIGJveGVzIGZvciBj bGllbnQgYW5kIHNlcnZlcjogc2hvd2luZyB0aGF0IHRoZSBDb21tb248bzpwPjwvbzpwPjwvcD4N CjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDtDb250ZXh0IGlzIGNvbW1vbiBmb3IgYm90aCBD bGllbnQgYW5kIFNlcnZlciB3aGVyZWFzIHRoZSBTZW5kZXIgQ29udGV4dCBvZjxvOnA+PC9vOnA+ PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0O3RoZSBDbGllbnQgY29ycmVzcG9uZHMg dG8gdGhlIFJlY2lwaWVudCBDb250ZXh0IG9mIHRoZSBTZXJ2ZXIgYW5kIHZpY2U8bzpwPjwvbzpw PjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDt2ZXJzYS4gSSBkb27igJl0IGtub3cg aG93IHRvIG1ha2UgdGhpcyBtb3JlIGNsZWFyIHdpdGhvdXQgb3ZlcmxvYWRpbmcgdGhlPG86cD48 L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7ZmlndXJlLjxvOnA+PC9vOnA+ PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0OzxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0K PHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+PHNwYW4gc3R5bGU9ImNvbG9yOnJlZCI+Jmx0O21nbHQy Jmd0OzxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPjxzcGFu IHN0eWxlPSJjb2xvcjpyZWQiPlRoaXMgbG9va3MgbXVjaCBjbGVhcmVyIHRvIG1lLiBDb21tb24g Q29udGV4dCBpcyBjb21tb24gYW5kIOKAnD3igJ0gaXMgdmVyeSBoZWxwZnVsICggdG8gbWUpLjwv c3Bhbj48c3BhbiBzdHlsZT0iY29sb3I6cmVkIj48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBj bGFzcz0iTXNvUGxhaW5UZXh0Ij48c3BhbiBzdHlsZT0iY29sb3I6cmVkIj4mbHQ7L21nbHQyJmd0 OzxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDs8bzpw PiZuYnNwOzwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDsmZ3Q7PG86cD4m bmJzcDs8L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7Jmd0O1NlbGFuZGVy LCBldCBhbC4mbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsgRXhwaXJl cyBKYW51YXJ5IDI3LCAyMDE5Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5i c3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7IFtQYWdl IDhdPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7Jmd0OzxvOnA+ Jm5ic3A7PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0OyZndDtJbnRlcm5l dC1EcmFmdCZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyAmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsm bmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJz cDtPU0NPUkUmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsm bmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJz cDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsgSnVseSAyMDE4PG86cD48L286cD48L3A+ DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7Jmd0OzxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0K PHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0OyZndDsmbmJzcDsmbmJzcDsgVGhlIENvbW1vbiBD b250ZXh0IGNvbnRhaW5zIHRoZSBmb2xsb3dpbmcgcGFyYW1ldGVyczo8bzpwPjwvbzpwPjwvcD4N CjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDsmZ3Q7PG86cD4mbmJzcDs8L286cD48L3A+DQo8 cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7Jmd0OyZuYnNwOyZuYnNwOyBvJm5ic3A7IEFFQUQg QWxnb3JpdGhtLiZuYnNwOyBUaGUgQ09TRSBBRUFEIGFsZ29yaXRobSB0byB1c2UgZm9yIGVuY3J5 cHRpb24uPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7Jmd0Ozxv OnA+Jm5ic3A7PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0OyZndDsmbmJz cDsmbmJzcDsgbyZuYnNwOyBLZXkgRGVyaXZhdGlvbiBGdW5jdGlvbi4mbmJzcDsgVGhlIEhNQUMg YmFzZWQgSEtERiBbUkZDNTg2OV0gdXNlZCB0bzxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1z b1BsYWluVGV4dCI+Jmd0OyZndDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsgZGVyaXZl IFNlbmRlciBLZXksIFJlY2lwaWVudCBLZXksIGFuZCBDb21tb24gSVYuPG86cD48L286cD48L3A+ DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7Jmd0OyZsdDttZ2x0Jmd0OzxvOnA+PC9vOnA+ PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0OyZndDtUaGlzIGlzIGNvbmZ1c2luZyB0 byBoYXZlIGEgZ2VuZXJpYyB0ZXJtIHN1Y2ggYXMgS0RGIGRlZmluZWQgYnkgYSBzdXAgc2V0PG86 cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7Jmd0O29mIGl0PG86cD48 L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7Jmd0OyhIS0RGKS4gSSBiZWxp ZXZlIHRoYXQgZWl0aGVyIHRoZSBLREYgaXMgZGVmaW5lZCBnZW5lcmljIGVub3VnaCBhbmQgbGF0 ZXI8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDsmZ3Q7dGhlPG86 cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7Jmd0O2RlZmF1bHQgdmFs dWUgaXMgc2V0IHRvIEhLREYgd2l0aCBhIHNwZWNpZmljIGhhc2ggZnVuY3Rpb24uIEFub3RoZXI8 bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDsmZ3Q7YWx0ZXJuYXRp dmU8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDsmZ3Q7Y291bGQg YmUgdG8gbGltaXRlZCB0aGUgc2NvcGUgb2YgdGhpcyBwYXJhbWV0ZXIgdG8gSEtERiBIYXNoIEZ1 bmN0aW9uLjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0OyZndDsm bHQ7L21nbHQmZ3Q7PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7 PG86cD4mbmJzcDs8L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7PG86cD4m bmJzcDs8L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7W0dTOl0gSG93IGFi b3V0IHRoaXM/PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7TkVX PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7Jm5ic3A7Jm5ic3A7 Jm5ic3A7IG8gVGhlIEhNQUMgYmFzZWQga2V5IGRlcml2YXRpb24gZnVuY3Rpb24gSEtERiBbUkZD NTg2OV0gdXNlZCB0bzxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0 OyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyBkZXJpdmUgU2VuZGVyIEtleSwgUmVjaXBp ZW50IEtleSwgYW5kIENvbW1vbiBJVi48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFp blRleHQiPiZndDs8bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQi PiZndDs8bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPjxzcGFu IHN0eWxlPSJjb2xvcjpyZWQiPiZsdDttZ2x0MiZndDs8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8 cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij48c3BhbiBzdHlsZT0iY29sb3I6cmVkIj5UaGlzIGlzIGZp bmUgdG8gbWUuPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+ PHNwYW4gc3R5bGU9ImNvbG9yOnJlZCI+Jmx0Oy9tZ2x0MiZndDs8bzpwPjwvbzpwPjwvc3Bhbj48 L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7Jmd0OzxvOnA+Jm5ic3A7PC9vOnA+PC9w Pg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0OyZndDsmbmJzcDsmbmJzcDsgbyZuYnNwOyBN YXN0ZXIgU2VjcmV0LiZuYnNwOyBWYXJpYWJsZSBsZW5ndGgsIHJhbmRvbSBieXRlIHN0cmluZyAo c2VlPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7Jmd0OyZuYnNw OyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyBTZWN0aW9uIDEyLjMpIHVzZWQgdG8gZGVyaXZlIHRy YWZmaWMga2V5cyBhbmQgSVZzLjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4 dCI+Jmd0OyZndDsmbHQ7bWdsdCZndDs8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFp blRleHQiPiZndDsmZ3Q7SSBiZWxpZXZlIHRoYXQgSVZzIGlzIHRoZSBDb21tb24gSVYuPG86cD48 L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7Jmd0OyZsdDsvbWdsdCZndDs8 bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDs8bzpwPiZuYnNwOzwv bzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDtbR1M6XSBDb3JyZWN0LCB3aWxs IGNoYW5nZSB0aGF0LjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0 OzxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+PHNwYW4gc3R5 bGU9ImNvbG9yOnJlZCI+Jmx0O21nbHQyJmd0OzxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNs YXNzPSJNc29QbGFpblRleHQiPjxzcGFuIHN0eWxlPSJjb2xvcjpyZWQiPkdvb2Q8bzpwPjwvbzpw Pjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij48c3BhbiBzdHlsZT0iY29sb3I6 cmVkIj4mbHQ7L21nbHQyJmd0OzxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Q bGFpblRleHQiPiZndDs8bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRl eHQiPiZndDsmZ3Q7Jm5ic3A7Jm5ic3A7IG8mbmJzcDsgTWFzdGVyIFNhbHQuJm5ic3A7IE9wdGlv bmFsIHZhcmlhYmxlIGxlbmd0aCBieXRlIHN0cmluZyBjb250YWluaW5nIHRoZTxvOnA+PC9vOnA+ PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0OyZndDsmbmJzcDsmbmJzcDsmbmJzcDsm bmJzcDsmbmJzcDsgc2FsdCB1c2VkIHRvIGRlcml2ZSB0cmFmZmljIGtleXMgYW5kIElWcy48bzpw PjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDsmZ3Q7Jmx0O21nbHQmZ3Q7 PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7Jmd0O0kgYmVsaWV2 ZSB0aGF0IElWcyBpcyB0aGUgQ29tbW9uIElWLjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1z b1BsYWluVGV4dCI+Jmd0OyZndDsmbHQ7L21nbHQmZ3Q7PG86cD48L286cD48L3A+DQo8cCBjbGFz cz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7PG86cD4mbmJzcDs8L286cD48L3A+DQo8cCBjbGFzcz0iTXNv UGxhaW5UZXh0Ij4mZ3Q7W0dTOl0gQ29ycmVjdCwgd2lsbCBjaGFuZ2UgdGhhdC48bzpwPjwvbzpw PjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDs8bzpwPiZuYnNwOzwvbzpwPjwvcD4N CjxwIGNsYXNzPSJNc29QbGFpblRleHQiPjxzcGFuIHN0eWxlPSJjb2xvcjpyZWQiPiZsdDttZ2x0 MiZndDs8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij48c3Bh biBzdHlsZT0iY29sb3I6cmVkIj5Hb29kPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9 Ik1zb1BsYWluVGV4dCI+PHNwYW4gc3R5bGU9ImNvbG9yOnJlZCI+Jmx0Oy9tZ2x0MiZndDs8bzpw PjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij48bzpwPiZuYnNwOzwv bzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDs8bzpwPiZuYnNwOzwvbzpwPjwv cD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDsmZ3Q7Jm5ic3A7Jm5ic3A7IG8mbmJzcDsg SUQgQ29udGV4dC4mbmJzcDsgT3B0aW9uYWwgdmFyaWFibGUgbGVuZ3RoIGJ5dGUgc3RyaW5nIHBy b3ZpZGluZzxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0OyZndDsm bmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsgYWRkaXRpb25hbCBpbmZvcm1hdGlvbiB0byBp ZGVudGlmeSB0aGUgQ29tbW9uIENvbnRleHQgYW5kIHRvPG86cD48L286cD48L3A+DQo8cCBjbGFz cz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7Jmd0OyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyBk ZXJpdmUgdHJhZmZpYyBrZXlzIGFuZCBJVnMuPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNv UGxhaW5UZXh0Ij4mZ3Q7Jmd0OzxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1Bs YWluVGV4dCI+Jmd0OyZndDsmbmJzcDsmbmJzcDsgbyZuYnNwOyBDb21tb24gSVYuJm5ic3A7IEJ5 dGUgc3RyaW5nIGRlcml2ZWQgZnJvbSBNYXN0ZXIgU2VjcmV0LCBNYXN0ZXIgU2FsdCw8bzpwPjwv bzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDsmZ3Q7Jm5ic3A7Jm5ic3A7Jm5i c3A7Jm5ic3A7Jm5ic3A7IGFuZCBJRCBDb250ZXh0LiZuYnNwOyBMZW5ndGggaXMgZGV0ZXJtaW5l ZCBieSB0aGUgQUVBRCBBbGdvcml0aG0uPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxh aW5UZXh0Ij4mZ3Q7Jmd0OyZsdDttZ2x0Jmd0OzxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1z b1BsYWluVGV4dCI+Jmd0OyZndDtSRkM4MTUyIHVzZXMgY29udGV4dCBJVi4gSXQgaXMgbm90IGNs ZWFyIHRvIG1lIGhvdyB0aGVzZSB0d28gZGlmZmVyLiBJPG86cD48L286cD48L3A+DQo8cCBjbGFz cz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7Jmd0O2JlbGlldmU8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNz PSJNc29QbGFpblRleHQiPiZndDsmZ3Q7c29tZSB0ZXh0IHNob3VsZCBiZSBhZGRlZCB0byBleHBs YWluIGhvdyBDb21tb24gSVYgZGlmZmVycyBmcm9tIHRoZTxvOnA+PC9vOnA+PC9wPg0KPHAgY2xh c3M9Ik1zb1BsYWluVGV4dCI+Jmd0OyZndDtjb250ZXh0IElWLjxvOnA+PC9vOnA+PC9wPg0KPHAg Y2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0OyZndDs8bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjxwIGNs YXNzPSJNc29QbGFpblRleHQiPjxzcGFuIHN0eWxlPSJjb2xvcjpyZWQiPiZsdDttZ2x0MiZndDs8 bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij48c3BhbiBzdHls ZT0iY29sb3I6cmVkIj5BcyBkaXNjdXNzZWQsIG5vbmNlIGNvbnN0cnVjdGlvbiBpcyBkaWZmZXJl bnQgZm9yIENPU0UsIHNvIENvbnRleHQgSVYgc2hvdWxkIG5vdCBiZSB1c2VkIGhlcmUuDQo8bzpw PjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij48c3BhbiBzdHlsZT0i Y29sb3I6cmVkIj4mbHQ7L21nbHQyJmd0OzxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNz PSJNc29QbGFpblRleHQiPiZndDsmZ3Q7SXQgaXMgdW5jbGVhciB0byBtZSB3aGV0aGVyIHRoZSBD b21tb24gQ29udGV4dCBpcyB1c2VkIGZvciB0aGUgdHdvPG86cD48L286cD48L3A+DQo8cCBjbGFz cz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7Jmd0O2JpZGlyZWN0aW9uYWwgY29tbXVuaWNhdGlvbnMuIElm IHRoYXQgaXMgdGhlIGNhc2UsIEkgYW0gcmVhZGluZyB0aGF0PG86cD48L286cD48L3A+DQo8cCBj bGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7Jmd0O0NvbW1vbiBJVjxvOnA+PC9vOnA+PC9wPg0KPHAg Y2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0OyZndDthbmQgU2VxdWVuY2UgTnVtYmVyIGluIHRoZSB0 d28gZGlyZWN0aW9ucyB3aWxsIGVuZCB1cCBpbiBJViBjb2xsaXNpb24uIFNvPG86cD48L286cD48 L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7Jmd0O0tleXM8bzpwPjwvbzpwPjwvcD4N CjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDsmZ3Q7bmVlZHMgdG8gYmUgdW5pZGlyZWN0aW9u YWwgYW5kIGRpZmZlcmVudC4gJmx0Oy9tZ2x0Jmd0OzxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9 Ik1zb1BsYWluVGV4dCI+Jmd0OzxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1Bs YWluVGV4dCI+Jmd0O1tHUzpdIEFzIG1lbnRpb25lZCBhYm92ZTogd2hlbiBzZW5kaW5nLCBlYWNo IGVuZHBvaW50IHVzZXMgaXRzIFNlbmRlciBLZXksPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0i TXNvUGxhaW5UZXh0Ij4mZ3Q7YW5kIHRoZSBub25jZSBpcyBzcGVjaWZpZWQgaW4gU2VjdGlvbiA1 LjIuIFRoZSBwcm9vZiBmb3IgKGtleSxub25jZSk8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJN c29QbGFpblRleHQiPiZndDt1bmlxdWVuZXNzIGlzIGluIEFwcGVuZGl4IEQuMy48bzpwPjwvbzpw PjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDs8bzpwPiZuYnNwOzwvbzpwPjwvcD4N CjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDs8bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjxwIGNs YXNzPSJNc29QbGFpblRleHQiPjxzcGFuIHN0eWxlPSJjb2xvcjpyZWQiPiZsdDttZ2x0MiZndDs8 bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij48c3BhbiBzdHls ZT0iY29sb3I6cmVkIj5vazxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFp blRleHQiPjxzcGFuIHN0eWxlPSJjb2xvcjpyZWQiPiZsdDsvbWdsdDImZ3Q7PG86cD48L286cD48 L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0OyZndDsmbmJzcDsmbmJzcDsg VGhlIFNlbmRlciBDb250ZXh0IGNvbnRhaW5zIHRoZSBmb2xsb3dpbmcgcGFyYW1ldGVyczo8bzpw PjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDsmZ3Q7PG86cD4mbmJzcDs8 L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7Jmd0OyZuYnNwOyZuYnNwOyBv Jm5ic3A7IFNlbmRlciBJRC4mbmJzcDsgQnl0ZSBzdHJpbmcgdXNlZCB0byBpZGVudGlmeSB0aGUg U2VuZGVyIENvbnRleHQsIHRvPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0 Ij4mZ3Q7Jmd0OyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyBkZXJpdmUgdHJhZmZpYyBr ZXlzIGFuZCBJVnMsIGFuZCB0byBhc3N1cmUgdW5pcXVlIG5vbmNlcy4mbmJzcDsgTWF4aW11bTxv OnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0OyZndDsmbmJzcDsmbmJz cDsmbmJzcDsmbmJzcDsmbmJzcDsgbGVuZ3RoIGlzIGRldGVybWluZWQgYnkgdGhlIEFFQUQgQWxn b3JpdGhtLjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0OyZndDs8 bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDsmZ3Q7Jm5i c3A7Jm5ic3A7IG8mbmJzcDsgU2VuZGVyIEtleS4gQnl0ZSBzdHJpbmcgY29udGFpbmluZyB0aGUg c3ltbWV0cmljIGtleSB0byBwcm90ZWN0PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxh aW5UZXh0Ij4mZ3Q7Jmd0OyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyBtZXNzYWdlcyB0 byBzZW5kLiZuYnNwOyBEZXJpdmVkIGZyb20gQ29tbW9uIENvbnRleHQgYW5kIFNlbmRlciBJRC48 bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDsmZ3Q7Jm5ic3A7Jm5i c3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7IExlbmd0aCBpcyBkZXRlcm1pbmVkIGJ5IHRoZSBBRUFEIEFs Z29yaXRobS48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDsmZ3Q7 PG86cD4mbmJzcDs8L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7Jmd0OyZu YnNwOyZuYnNwOyBvJm5ic3A7IFNlbmRlciBTZXF1ZW5jZSBOdW1iZXIuJm5ic3A7IE5vbi1uZWdh dGl2ZSBpbnRlZ2VyIHVzZWQgYnkgdGhlIHNlbmRlcjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9 Ik1zb1BsYWluVGV4dCI+Jmd0OyZndDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsgdG8g cHJvdGVjdCByZXF1ZXN0cyBhbmQgY2VydGFpbiByZXNwb25zZXMsIGUuZy4mbmJzcDsgT2JzZXJ2 ZTxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0OyZndDsmbmJzcDsm bmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsgbm90aWZpY2F0aW9ucy4mbmJzcDsgVXNlZCBhcyAnUGFy dGlhbCBJVicgW1JGQzgxNTJdIHRvIGdlbmVyYXRlIHVuaXF1ZTxvOnA+PC9vOnA+PC9wPg0KPHAg Y2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0OyZndDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJz cDsgbm9uY2VzIGZvciB0aGUgQUVBRC4mbmJzcDsgTWF4aW11bSB2YWx1ZSBpcyBkZXRlcm1pbmVk IGJ5IHRoZSBBRUFEPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7 Jmd0OyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyBBbGdvcml0aG0uPG86cD48L286cD48 L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7Jmd0OzxvOnA+Jm5ic3A7PC9vOnA+PC9w Pg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0OyZndDsmbmJzcDsmbmJzcDsgVGhlIFJlY2lw aWVudCBDb250ZXh0IGNvbnRhaW5zIHRoZSBmb2xsb3dpbmcgcGFyYW1ldGVyczo8bzpwPjwvbzpw PjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDsmZ3Q7PG86cD4mbmJzcDs8L286cD48 L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7Jmd0OyZuYnNwOyZuYnNwOyBvJm5ic3A7 IFJlY2lwaWVudCBJRC4mbmJzcDsgQnl0ZSBzdHJpbmcgdXNlZCB0byBpZGVudGlmeSB0aGUgUmVj aXBpZW50IENvbnRleHQsPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4m Z3Q7Jmd0OyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyB0byBkZXJpdmUgdHJhZmZpYyBr ZXlzIGFuZCBJVnMsIGFuZCB0byBhc3N1cmUgdW5pcXVlIG5vbmNlcy48bzpwPjwvbzpwPjwvcD4N CjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDsmZ3Q7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7 Jm5ic3A7IE1heGltdW0gbGVuZ3RoIGlzIGRldGVybWluZWQgYnkgdGhlIEFFQUQgQWxnb3JpdGht LjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0OyZndDs8bzpwPiZu YnNwOzwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDsmZ3Q7Jm5ic3A7Jm5i c3A7IG8mbmJzcDsgUmVjaXBpZW50IEtleS4gQnl0ZSBzdHJpbmcgY29udGFpbmluZyB0aGUgc3lt bWV0cmljIGtleSB0byB2ZXJpZnk8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRl eHQiPiZndDsmZ3Q7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7IG1lc3NhZ2VzIHJlY2Vp dmVkLiZuYnNwOyBEZXJpdmVkIGZyb20gQ29tbW9uIENvbnRleHQgYW5kIFJlY2lwaWVudCBJRC48 bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDsmZ3Q7Jm5ic3A7Jm5i c3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7IExlbmd0aCBpcyBkZXRlcm1pbmVkIGJ5IHRoZSBBRUFEIEFs Z29yaXRobS48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDsmZ3Q7 PG86cD4mbmJzcDs8L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7Jmd0OyZu YnNwOyZuYnNwOyBvJm5ic3A7IFJlcGxheSBXaW5kb3cgKFNlcnZlciBvbmx5KS4mbmJzcDsgVGhl IHJlcGxheSB3aW5kb3cgdG8gdmVyaWZ5IHJlcXVlc3RzPG86cD48L286cD48L3A+DQo8cCBjbGFz cz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7Jmd0OyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyBy ZWNlaXZlZC48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDsmZ3Q7 PG86cD4mbmJzcDs8L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7Jmd0OyZs dDttZ2x0Jmd0OzxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0OyZn dDtMb29raW5nIGF0IHRoZSBkaWZmZXJlbnQgY29udGV4dHMsIG1heWJlIHNvbWUgdGV4dCBzaG91 bGQgYmUgYWRkZWQgdG88bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZn dDsmZ3Q7c3BlY2lmeTxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0 OyZndDt0aGF0IFNlbmRlciBJRCBhbmQgUmVjaXBpZW50IElEIGFyZSBlcXVhbCBmb3IgYSBnaXZl biB1bmlkaXJlY3Rpb25hbDxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+ Jmd0OyZndDtjb21tdW5pY2F0aW9uLiBUaGUgc2FtZSBvY2N1cnMgZm9yIFNlbmRlciBLZXkgYW5k IFJlY2lwaWVudCBLZXkuPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4m Z3Q7PG86cD4mbmJzcDs8L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7W0dT Ol0gVGhlIGludGVudGlvbiB3aXRoIFNlY3Rpb24gMy4xIGFuZCBGaWd1cmUgNCwgd2hpY2ggeW91 IHF1b3RlZCBhYm92ZSw8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZn dDtpcyBleGFjdGx5IHRvIGV4cGxhaW4gdGhpczo8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJN c29QbGFpblRleHQiPiZndDsmcXVvdDtBbiBlbmRwb2ludCB1c2VzIGl0cyBTZW5kZXIgSUQgKFNJ RCkgdG8gZGVyaXZlIGl0cyBTZW5kZXIgQ29udGV4dCwgYW5kPG86cD48L286cD48L3A+DQo8cCBj bGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7dGhlIG90aGVyIGVuZHBvaW50IHVzZXMgdGhlIHNhbWUg SUQsIG5vdyBjYWxsZWQgUmVjaXBpZW50IElEIChSSUQpLCB0bzxvOnA+PC9vOnA+PC9wPg0KPHAg Y2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0O2Rlcml2ZSBpdHMgUmVjaXBpZW50IENvbnRleHQu4oCd PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij48bzpwPiZuYnNwOzwvbzpw PjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDtFeGNlcnB0IG9mIEZpZ3VyZSA0Ojxv OnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0O1Byb3RlY3QgcmVxdWVz dCB3aXRoJm5ic3A7IHwmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsga2lkID0gU0lELCAuIC4gLiZu YnNwOyB8PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7Jm5ic3A7 Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7IFNlbmRlciBDb250ZXh0Jm5ic3A7ICYjNDM7LS0tLS0t LS0tLS0tLS0tLS0tLS0tLSZndDt8IFJldHJpZXZlIGNvbnRleHQgd2l0aDxvOnA+PC9vOnA+PC9w Pg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0OyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZu YnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNw OyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyB8Jm5ic3A7Jm5ic3A7 Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5i c3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7 Jm5ic3A7IHwmbmJzcDsgUklEID0ga2lkPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxh aW5UZXh0Ij4mZ3Q7SXMgdGhhdCBzdGlsbCB1bmNsZWFyPzxvOnA+PC9vOnA+PC9wPg0KPHAgY2xh c3M9Ik1zb1BsYWluVGV4dCI+Jmd0O1NpbmNlIHRoaXMgaXMgc3ltbWV0cmljIGNyeXB0bywgaXQg c2hvdWxkIGhvcGVmdWxseSBiZSBjbGVhciB0byBhbnlvbmU8bzpwPjwvbzpwPjwvcD4NCjxwIGNs YXNzPSJNc29QbGFpblRleHQiPiZndDt0aGF0IHRoZSBrZXlzIHVzZWQgZm9yIGVuY3J5cHRpb24g YW5kIGRlY3J5cHRpb24gYXJlIHRoZSBzYW1lLCBkb27igJl0IHlvdTxvOnA+PC9vOnA+PC9wPg0K PHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0O3RoaW5rPzxvOnA+PC9vOnA+PC9wPg0KPHAgY2xh c3M9Ik1zb1BsYWluVGV4dCI+Jmd0OzxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1z b1BsYWluVGV4dCI+PHNwYW4gc3R5bGU9ImNvbG9yOnJlZCI+Jmx0O21nbHQyJmd0OzxvOnA+PC9v OnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPjxzcGFuIHN0eWxlPSJjb2xv cjpyZWQiPkkgdGhpbmsgdGhpcyBoYXMgYmVlbiBzb2x2ZWQgZWFybGllciB0aGFuLiBUaGF0IGlz IGZpbmUgdG8gbWUgYW5kIEkgZG8gbm90IGJlbGlldmUgd2Ugc2hvdWxkIGdvIGFueSBmdXJ0aGVy IHJlZ2FyZGluZyB0aGUga2V5IGFuZCBhc3ltbWV0cmljIGNyeXB0by4NCjxvOnA+PC9vOnA+PC9z cGFuPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPjxzcGFuIHN0eWxlPSJjb2xvcjpyZWQi PiZsdDsvbWdsdDImZ3Q7PG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWlu VGV4dCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7 Jmd0OzxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0OyZn dDtJIGJlbGlldmUgdGhhdCBTZW5kZXIgU2VxdWVuY2UgTnVtYmVyIGFsc28gbmVlZHMgdG8gYmUg cHJlc2VudCBpbiB0aGU8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZn dDsmZ3Q7UmVjaXBpZW50PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4m Z3Q7Jmd0O0NvbnRleHQgaW4gb3JkZXIgdG8gaW1wbGVtZW50IGFudGkgcmVwbGF5IG1lY2hhbmlz bS48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDs8bzpwPiZuYnNw OzwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDtbR1M6XSBUaGUgcmVwbGF5 IHdpbmRvdyBpcyBhbHJlYWR5IHBhcnQgb2YgdGhlIFJlY2lwaWVudCBDb250ZXh0LiBQZXJoYXBz PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7YSByZWZlcmVuY2Ug dG8gU2VjdGlvbiA3LjQgd291bGQgYmUgc3VmZmljaWVudCB0byBtYWtlIHRoZSBjb25uZWN0aW9u PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7YmV0d2VlbiByZXBs YXkgd2luZG93IGFuZCBzZXF1ZW5jZSBudW1iZXI/PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0i TXNvUGxhaW5UZXh0Ij4mZ3Q7PG86cD4mbmJzcDs8L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxh aW5UZXh0Ij48c3BhbiBzdHlsZT0iY29sb3I6cmVkIj4mbHQ7bWdsdDImZ3Q7PG86cD48L286cD48 L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+PHNwYW4gc3R5bGU9ImNvbG9yOnJl ZCI+R29vZCwgdGhlbiB5ZXMgYSByZWZlcmVuY2Ugd291bGQgYmUgdXNlZnVsbDxvOnA+PC9vOnA+ PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPjxzcGFuIHN0eWxlPSJjb2xvcjpy ZWQiPiZsdDsvbWdsdDImZ3Q7PG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb1Bs YWluVGV4dCI+Jmd0OyZndDs8bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFp blRleHQiPiZndDsmZ3Q7U2VxdWVuY2UgTnVtYmVyIE1heSBiZSBpbnRlcnByZXRlZCBkaWZmZXJl bnRseS4gSSBiZWxpZXZlIHRoYXQ8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRl eHQiPiZndDsmZ3Q7aW50ZXJwcmV0YXRpb248bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Q bGFpblRleHQiPiZndDsmZ3Q7c2hvdWxkIGFsc28gYmUgcGFydCBvZiB0aGUgQ29tbW9uIFNlY3Vy aXR5IENvbnRleHQuPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7 PG86cD4mbmJzcDs8L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7W0dTOl0g SSBkaWRu4oCZdCB1bmRlcnN0YW5kIHRoaXMgY29tbWVudC48bzpwPjwvbzpwPjwvcD4NCjxwIGNs YXNzPSJNc29QbGFpblRleHQiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1Bs YWluVGV4dCI+PHNwYW4gc3R5bGU9ImNvbG9yOnJlZCI+Jmx0O21nbHQyJmd0OzxvOnA+PC9vOnA+ PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPjxzcGFuIHN0eWxlPSJjb2xvcjpy ZWQiPlNlcXVlbmNlIE51bWJlciBhcmUgbm90IGFsd2F5cyBpbmNyZW1lbnRlZC4gVGhpcyBpbnRl cnByZXRhdGlvbiBtYXkgaW1wYWN0IHRoZSBzZXNzaW9uLCBzbyB0aGF0IG1heSBuZWVkIHRvIGJl IHNwZWNpZnkgaW4gdGhlIGZ1dHVyZSB3aGVuIGNvbnNpZGVyaW5nIG90aGVyIGludGVycHJldGF0 aW9uIG9mIHRoZSBTU04uPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWlu VGV4dCI+PHNwYW4gc3R5bGU9ImNvbG9yOnJlZCI+Jmx0Oy9tZ2x0MiZndDs8bzpwPjwvbzpwPjwv c3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7PG86cD4mbmJzcDs8L286cD48 L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7Jmd0OzxvOnA+Jm5ic3A7PC9vOnA+PC9w Pg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0OyZndDtBcyBtZW50aW9uZWQgYWJvdmUgdGhl IGNvbnRleHRzIG1heSBwcm9iYWJseSBiZSByZWZhY3RvcmVkIHdpdGggb25lPG86cD48L286cD48 L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7Jmd0O0NvbnRleHQgcGVyPG86cD48L286 cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7Jmd0O3VuaWRpcmVjdGlvbmFsIGNv bW11bmljYXRpb24uICZsdDsvbWdsdCZndDs8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Q bGFpblRleHQiPiZndDs8bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRl eHQiPiZndDtbR1M6XSBJTUhPIHRoZSBjdXJyZW50IHRleHQgZGVzY3JpYmVzIGhvdyB0byBkZXJp dmUgdGhlIHNlY3VyaXR5PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4m Z3Q7Y29udGV4dCBuZWVkZWQgYnkgZW5kcG9pbnRzIHRvIHByb2Nlc3MgbWVzc2FnZXMgdG8gc2Vu ZCBhbmQgbWVzc2FnZXM8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZn dDtyZWNlaXZlZCBpbmRlcGVuZGVudCBvZiBiZWluZyBjbGllbnQgb3Igc2VydmVyLiBUaGlzIG1h eSBhbHRlcm5hdGl2ZWx5IGJlPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0 Ij4mZ3Q7c3RydWN0dXJlZCBpbiBhIG51bWJlciBvZiBkaWZmZXJlbnQgY2FzZXMgYnV0IEkgZG9u 4oCZdCBzZWUgaG93IHRoYXQ8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQi PiZndDtzaW1wbGlmaWVzIHNwZWNpZmljYXRpb24sIGltcGxlbWVudGF0aW9uIG9yIHNlY3VyaXR5 IGFuYWx5c2lzLjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0Ozxv OnA+Jm5ic3A7PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0OzxvOnA+Jm5i c3A7PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0OyZndDs8bzpwPiZuYnNw OzwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDsmZ3Q7U2VsYW5kZXIsIGV0 IGFsLiZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyBFeHBpcmVzIEph bnVhcnkgMjcsIDIwMTkmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsm bmJzcDsmbmJzcDsgJm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7W1BhZ2UgOV08 bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDsmZ3Q7PG86cD4mbmJz cDs8L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7Jmd0O0ludGVybmV0LURy YWZ0Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7 Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7IE9T Q09SRSZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNw OyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZu YnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyBKdWx5IDIwMTg8bzpwPjwvbzpwPjwvcD4NCjxw IGNsYXNzPSJNc29QbGFpblRleHQiPiZndDsmZ3Q7PG86cD4mbmJzcDs8L286cD48L3A+DQo8cCBj bGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7Jmd0OyZuYnNwOyZuYnNwOyBBbGwgcGFyYW1ldGVycyBl eGNlcHQgU2VuZGVyIFNlcXVlbmNlIE51bWJlciBhbmQgUmVwbGF5IFdpbmRvdyBhcmU8bzpwPjwv bzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDsmZ3Q7Jm5ic3A7Jm5ic3A7IGlt bXV0YWJsZSBvbmNlIHRoZSBzZWN1cml0eSBjb250ZXh0IGlzIGVzdGFibGlzaGVkLiZuYnNwOyBB biBlbmRwb2ludCBtYXk8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZn dDsmZ3Q7Jm5ic3A7Jm5ic3A7IGZyZWUgdXAgbWVtb3J5IGJ5IG5vdCBzdG9yaW5nIHRoZSBDb21t b24gSVYsIFNlbmRlciBLZXksIGFuZDxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWlu VGV4dCI+Jmd0OyZndDsmbmJzcDsmbmJzcDsgUmVjaXBpZW50IEtleSwgZGVyaXZpbmcgdGhlbSB3 aGVuIG5lZWRlZC4mbmJzcDsgQWx0ZXJuYXRpdmVseSwgYW4gZW5kcG9pbnQ8bzpwPjwvbzpwPjwv cD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDsmZ3Q7Jm5ic3A7Jm5ic3A7IG1heSBmcmVl IHVwIG1lbW9yeSBieSBub3Qgc3RvcmluZyB0aGUgTWFzdGVyIFNlY3JldCBhbmQgTWFzdGVyIFNh bHQ8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDsmZ3Q7Jm5ic3A7 Jm5ic3A7IGFmdGVyIHRoZSBvdGhlciBwYXJhbWV0ZXJzIGhhdmUgYmVlbiBkZXJpdmVkLjxvOnA+ PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0OyZndDs8bzpwPiZuYnNwOzwv bzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDsmZ3Q7Jm5ic3A7Jm5ic3A7IEVu ZHBvaW50cyBNQVkgb3BlcmF0ZSBhcyBib3RoIGNsaWVudCBhbmQgc2VydmVyIGFuZCB1c2UgdGhl IHNhbWU8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDsmZ3Q7Jm5i c3A7Jm5ic3A7IHNlY3VyaXR5IGNvbnRleHQgZm9yIHRob3NlIHJvbGVzLiZuYnNwOyBJbmRlcGVu ZGVudCBvZiBiZWluZyBjbGllbnQgb3I8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFp blRleHQiPiZndDsmZ3Q7Jm5ic3A7Jm5ic3A7IHNlcnZlciwgdGhlIGVuZHBvaW50IHByb3RlY3Rz IG1lc3NhZ2VzIHRvIHNlbmQgdXNpbmcgaXRzIFNlbmRlcjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xh c3M9Ik1zb1BsYWluVGV4dCI+Jmd0OyZndDsmbmJzcDsmbmJzcDsgQ29udGV4dCwgYW5kIHZlcmlm aWVzIG1lc3NhZ2VzIHJlY2VpdmVkIHVzaW5nIGl0cyBSZWNpcGllbnQgQ29udGV4dC48bzpwPjwv bzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDsmZ3Q7Jm5ic3A7Jm5ic3A7IFRo ZSBlbmRwb2ludHMgTVVTVCBOT1QgY2hhbmdlIHRoZSBTZW5kZXIvUmVjaXBpZW50IElEIHdoZW4g Y2hhbmdpbmc8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDsmZ3Q7 Jm5ic3A7Jm5ic3A7IHJvbGVzLiZuYnNwOyBJbiBvdGhlciB3b3JkcywgY2hhbmdpbmcgdGhlIHJv bGVzIGRvZXMgbm90IGNoYW5nZSB0aGUgc2V0IG9mPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0i TXNvUGxhaW5UZXh0Ij4mZ3Q7Jmd0OyZuYnNwOyZuYnNwOyBrZXlzIHRvIGJlIHVzZWQuPG86cD48 L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7Jmd0OzxvOnA+Jm5ic3A7PC9v OnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0OyZndDszLjIuJm5ic3A7IEVzdGFi bGlzaG1lbnQgb2YgU2VjdXJpdHkgQ29udGV4dCBQYXJhbWV0ZXJzPG86cD48L286cD48L3A+DQo8 cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7Jmd0OzxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPHAg Y2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0OyZndDsmbmJzcDsmbmJzcDsgVGhlIHBhcmFtZXRlcnMg aW4gdGhlIHNlY3VyaXR5IGNvbnRleHQgYXJlIGRlcml2ZWQgZnJvbSBhIHNtYWxsIHNldDxvOnA+ PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0OyZndDsmbmJzcDsmbmJzcDsg b2YgaW5wdXQgcGFyYW1ldGVycy4mbmJzcDsgVGhlIGZvbGxvd2luZyBpbnB1dCBwYXJhbWV0ZXJz IFNIQUxMIGJlIHByZS08bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZn dDsmZ3Q7Jm5ic3A7Jm5ic3A7IGVzdGFibGlzaGVkOjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9 Ik1zb1BsYWluVGV4dCI+Jmd0OyZndDs8bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjxwIGNsYXNzPSJN c29QbGFpblRleHQiPiZndDsmZ3Q7Jm5ic3A7Jm5ic3A7IG8mbmJzcDsgTWFzdGVyIFNlY3JldDxv OnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0OyZndDs8bzpwPiZuYnNw OzwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDsmZ3Q7Jm5ic3A7Jm5ic3A7 IG8mbmJzcDsgU2VuZGVyIElEPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0 Ij4mZ3Q7Jmd0OzxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+ Jmd0OyZndDsmbmJzcDsmbmJzcDsgbyZuYnNwOyBSZWNpcGllbnQgSUQ8bzpwPjwvbzpwPjwvcD4N CjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDsmZ3Q7PG86cD4mbmJzcDs8L286cD48L3A+DQo8 cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7Jmd0OyZsdDttZ2x0Jmd0OzxvOnA+PC9vOnA+PC9w Pg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0OyZndDtJIGJlbGlldmUgdGhhdCBTZW5kZXIg SUQgYW5kIFJlY2lwaWVudCBJRCBjb3VsZCBiZSB0aGUgc2FtZSB2YWx1ZSBmb3IgYTxvOnA+PC9v OnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0OyZndDtnaXZlbjxvOnA+PC9vOnA+ PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0OyZndDt1bmlkaXJlY3Rpb25hbCBjb21t dW5pY2F0aW9uLiBJIGJlbGlldmUgdGhhdCB3aGF0IGlzIHJlcXVpcmVkIGhlciBpcyB0aGU8bzpw PjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDsmZ3Q7dHdvPG86cD48L286 cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7Jmd0O0lEcyB1c2VkIGJ5IHRoZSBz ZXNzaW9ucy4gJmx0Oy9tZ2x0Jmd0OzxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWlu VGV4dCI+Jmd0OzxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+ Jmd0O1tHUzpdIFBlcmhhcHMgaXQgd2FzbuKAmXQgY2xlYXIgdGhhdCB0aGlzIHRleHQgaXMgaW4g dGhlIGNvbnRleHQgb2YgYSBnaXZlbjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWlu VGV4dCI+Jmd0O2VuZHBvaW50PyBCeSBzZWN0aW9uIDMuMywgaW4gb25lIGVuZHBvaW50LCB0aGUg U2VuZGVyIElEIGFuZCBSZWNpcGllbnQgSUQ8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Q bGFpblRleHQiPiZndDthcmUgZGlmZmVyZW50LiBQb3NzaWJsZSBjbGFyaWZpY2F0aW9uOjxvOnA+ PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0O09MRDxvOnA+PC9vOnA+PC9w Pg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0O1RoZSBwYXJhbWV0ZXJzIGluIHRoZSBzZWN1 cml0eSBjb250ZXh0IGFyZSBkZXJpdmVkIGZyb20gYSBzbWFsbCBzZXQ8bzpwPjwvbzpwPjwvcD4N CjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDsmbmJzcDsmbmJzcDsgb2YgaW5wdXQgcGFyYW1l dGVycy48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDtORVc8bzpw PjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDtFYWNoIGVuZHBvaW50IGRl cml2ZXMgdGhlIHBhcmFtZXRlcnMgaW4gdGhlIHNlY3VyaXR5IGNvbnRleHQgZnJvbSBhIHNtYWxs PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7c2V0IG9mIGlucHV0 IHBhcmFtZXRlcnMuPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7 PG86cD4mbmJzcDs8L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7PG86cD4m bmJzcDs8L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij48c3BhbiBzdHlsZT0iY29s b3I6cmVkIj4mbHQ7bWdsdDImZ3Q7PG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1z b1BsYWluVGV4dCI+PHNwYW4gc3R5bGU9ImNvbG9yOnJlZCI+VGhpcyBpcyBiZXR0ZXIsIGFuZCBp dCBhbHNvIGJlbmVmaXRzIGZyb20gY2xhcmlmaWNhdGlvbnMgYWJvdmVzLjxvOnA+PC9vOnA+PC9z cGFuPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPjxzcGFuIHN0eWxlPSJjb2xvcjpyZWQi PiZsdDsvbWdsdDImZ3Q7PG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWlu VGV4dCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7 Jmd0OzxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0OyZn dDsmbmJzcDsmbmJzcDsgVGhlIGZvbGxvd2luZyBpbnB1dCBwYXJhbWV0ZXJzIE1BWSBiZSBwcmUt ZXN0YWJsaXNoZWQuJm5ic3A7IEluIGNhc2UgYW55PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0i TXNvUGxhaW5UZXh0Ij4mZ3Q7Jmd0OyZuYnNwOyZuYnNwOyBvZiB0aGVzZSBwYXJhbWV0ZXJzIGlz IG5vdCBwcmUtZXN0YWJsaXNoZWQsIHRoZSBkZWZhdWx0IHZhbHVlPG86cD48L286cD48L3A+DQo8 cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7Jmd0OyZuYnNwOyZuYnNwOyBpbmRpY2F0ZWQgYmVs b3cgaXMgdXNlZDo8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDsm Z3Q7PG86cD4mbmJzcDs8L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7Jmd0 OyZuYnNwOyZuYnNwOyBvJm5ic3A7IEFFQUQgQWxnb3JpdGhtPG86cD48L286cD48L3A+DQo8cCBj bGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7Jmd0OzxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPHAgY2xh c3M9Ik1zb1BsYWluVGV4dCI+Jmd0OyZndDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsg KiZuYnNwOyBEZWZhdWx0IGlzIEFFUy1DQ00tMTYtNjQtMTI4IChDT1NFIGFsZ29yaXRobSBlbmNv ZGluZzogMTApPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7Jmd0 OzxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0OyZndDsm bmJzcDsmbmJzcDsgbyZuYnNwOyBNYXN0ZXIgU2FsdDxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9 Ik1zb1BsYWluVGV4dCI+Jmd0OyZndDs8bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjxwIGNsYXNzPSJN c29QbGFpblRleHQiPiZndDsmZ3Q7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7ICombmJz cDsgRGVmYXVsdCBpcyB0aGUgZW1wdHkgYnl0ZSBzdHJpbmc8bzpwPjwvbzpwPjwvcD4NCjxwIGNs YXNzPSJNc29QbGFpblRleHQiPiZndDsmZ3Q7Jmx0O21nbHQmZ3Q7PG86cD48L286cD48L3A+DQo8 cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7Jmd0O0kgYmVsaWV2ZSBleHBsaWNpdGx5IHByb3Zp ZGluZyB0aGUgc3RyaW5nIGNvdWxkIGhlbHAuIFRoZXJlIGlzIGFsd2F5cyB0aGU8bzpwPjwvbzpw PjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDsmZ3Q7Y29uZnVzaW9uIHdpdGggJnF1 b3Q7XDAmcXVvdDsgdmVyc3VzICZxdW90OyZxdW90Oy4gJmx0Oy9tZ2x0Jmd0OzxvOnA+PC9vOnA+ PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0OzxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0K PHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0O1tHUzpdIE5vdGUgdGhhdCB0aGUgTWFzdGVyIFNh bHQgaXMgbmV2ZXIgc2VudCBhbmQgb25seSB1c2VkIGFzIHNhbHQgaW48bzpwPjwvbzpwPjwvcD4N CjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDtIS0RGIChzZWN0aW9uIDIuMiBvZiBSRkMgNTg2 OSkuIFNlY3Rpb24gMy4yLjEgZGVzY3JpYmVzIGhvdyB0aGUgZW1wdHk8bzpwPjwvbzpwPjwvcD4N CjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDtzdHJpbmcgc2hvdWxkIGJlIGludGVycHJldGVk OjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0OyZxdW90O05vdGUg dGhhdCBbUkZDNTg2OV0gc3BlY2lmaWVzIHRoYXQgaWYgdGhlIHNhbHQgaXMgbm90IHByb3ZpZGVk LCBpdCBpcyBzZXQ8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDt0 byBhIHN0cmluZyBvZjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0 O3plcm9zLiBGb3IgaW1wbGVtZW50YXRpb24gcHVycG9zZXMsIG5vdCBwcm92aWRpbmcgdGhlIHNh bHQgaXMgdGhlIHNhbWU8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZn dDthcyBzZXR0aW5nIHRoZSBzYWx0IHRvIHRoZSBlbXB0eSBieXRlIHN0cmluZy4gT1NDT1JFIHNl dHMgdGhlIHNhbHQ8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDtk ZWZhdWx0IHZhbHVlIHRvIGVtcHR5IGJ5dGUgc3RyaW5nLCB3aGljaCBpbiBbUkZDNTg2OV0gaXMg Y29udmVydGVkIHRvIGE8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZn dDtzdHJpbmcgb2YgemVyb2VzIChzZWUgU2VjdGlvbiAyLjIgb2YgW1JGQzU4NjldKS4mcXVvdDs8 bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDtJcyB0aGF0IHN1ZmZp Y2llbnRseSBjbGVhcj88bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZn dDs8bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDs8bzpw PiZuYnNwOzwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPjxzcGFuIHN0eWxlPSJj b2xvcjpyZWQiPiZsdDttZ2x0MiZndDs8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0i TXNvUGxhaW5UZXh0Ij48c3BhbiBzdHlsZT0iY29sb3I6cmVkIj5UaGlzIGlzIGZpbmUuIEl0IHNl ZW1zIHRvIG1lIHRoYXQgZW1wdHkgc3RyaW5nIGlzIOKAnOKAnSBoZXJlLiBJIHVzdWFsbHkgbGlr ZSB0byBjaXRlIGV4cGxpY2l0bHkgdGhlIHN0cmluZyB0byBhdm9pZCBjb25mdXNpb24gYmV0d2Vl biDigJzigJ0gb3Ig4oCcXDDigJ0uIEkgYWdyZWUgdGhhdCBzYXlpbmcgemVybyBsZW5ndGggZG9l cyBub3QgaGVscCBtdWNoPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWlu VGV4dCI+PHNwYW4gc3R5bGU9ImNvbG9yOnJlZCI+VGhlIGxhdGVzdCBzZW50ZW5jZSBoYXMgdHdv IHJlZmVyZW5jZSB0byBSRkM1ODY5LCBtYXliZSBvbmUgd291bGQgYmUgc3VmZmljaWVudC4gSWYg cG9zc2libGUsIGl0IG1pZ2h0IGJlIGJldHRlciB0byBzcGVjaWZ5IHRoZSBsZW5ndGggb2YgdGhl IHN0cmluZ3Mgb2YgemVyb3MgKEhhc2hMZW4gaW4gb3VyIGNhc2UpDQo8bzpwPjwvbzpwPjwvc3Bh bj48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij48c3BhbiBzdHlsZT0iY29sb3I6cmVkIj4m bHQ7L21nbHQyJmd0Ozwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRl eHQiPiZndDs8bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZn dDs8bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDsgd2hp Y2ggZGVmaW5lcyBob3cgdG88bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQi PiZndDs8bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDsm Z3Q7PG86cD4mbmJzcDs8L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7Jmd0 OyZuYnNwOyZuYnNwOyBvJm5ic3A7IEtleSBEZXJpdmF0aW9uIEZ1bmN0aW9uIChLREYpPG86cD48 L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7Jmd0OzxvOnA+Jm5ic3A7PC9v OnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0OyZndDsmbmJzcDsmbmJzcDsmbmJz cDsmbmJzcDsmbmJzcDsgKiZuYnNwOyBEZWZhdWx0IGlzIEhLREYgU0hBLTI1NjxvOnA+PC9vOnA+ PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0OyZndDs8bzpwPiZuYnNwOzwvbzpwPjwv cD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDsmZ3Q7Jm5ic3A7Jm5ic3A7IG8mbmJzcDsg UmVwbGF5IFdpbmRvdyBUeXBlIGFuZCBTaXplPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNv UGxhaW5UZXh0Ij4mZ3Q7Jmd0OzxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1Bs YWluVGV4dCI+Jmd0OyZndDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsgKiZuYnNwOyBE ZWZhdWx0IGlzIERUTFMtdHlwZSByZXBsYXkgcHJvdGVjdGlvbiB3aXRoIGEgd2luZG93IHNpemUg b2YgMzI8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDsmZ3Q7Jm5i c3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7IFtSRkM2MzQ3XTxv OnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0OyZndDsmbHQ7bWdsdCZn dDs8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDsmZ3Q7VGhpcyBz ZWN0aW9uIHNwZWNpZmllcyBUeXBlIGFuZCB3aW5kb3dzIGZvciB0aGUgYW50aSByZXBsYXkgbWVj aGFuaXNtLjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0OyZndDtU aGlzIHdhczxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0OyZndDtk ZXNjcmliZWQgYXMgUmVwbGF5IFdpbmRvd3MgaW4gdGhlIGNvbnRleHQgZGVzY3JpcHRpb24uICZs dDsvbWdsdCZndDs8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDs8 bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDtbR1M6XSBJ IGRpZG7igJl0IHVuZGVyc3RhbmQgdGhpcyBjb21tZW50LiBEbyB5b3UgbWVhbjo8bzpwPjwvbzpw PjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDtPTEQ8bzpwPjwvbzpwPjwvcD4NCjxw IGNsYXNzPSJNc29QbGFpblRleHQiPiZndDtSZXBsYXkgV2luZG93IFR5cGUgYW5kIFNpemU8bzpw PjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDtORVc8bzpwPjwvbzpwPjwv cD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDtSZXBsYXkgV2luZG93PG86cD48L286cD48 L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7PG86cD4mbmJzcDs8L286cD48L3A+DQo8 cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7PG86cD4mbmJzcDs8L286cD48L3A+DQo8cCBjbGFz cz0iTXNvUGxhaW5UZXh0Ij48c3BhbiBzdHlsZT0iY29sb3I6cmVkIj4mbHQ7bWdsdDImZ3Q7PG86 cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+PHNwYW4gc3R5bGU9 ImNvbG9yOnJlZCI+SWYgZGlmZmVyZW50IG1lY2hhbmlzbSBjb3VsZCBiZSB1c2VkLCBJIG1lYW50 OjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPjxzcGFuIHN0 eWxlPSJjb2xvcjpyZWQiPiogUmVwbGF5IFdpbmRvdyBUeXBlIDogZGVmYXVsdCB0byBEVExTIDEu MjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPjxzcGFuIHN0 eWxlPSJjb2xvcjpyZWQiPiogUmVwbGF5IFdpbmRvdyBTaXplIChQYXJhbWV0ZXJzKToNCjxvOnA+ PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPjxzcGFuIHN0eWxlPSJj b2xvcjpyZWQiPiZsdDsvbWdsdCZndDs8L3NwYW4+PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0i TXNvUGxhaW5UZXh0Ij4mZ3Q7PG86cD4mbmJzcDs8L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxh aW5UZXh0Ij4mZ3Q7PG86cD4mbmJzcDs8L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0 Ij4mZ3Q7Jmd0O1NlbGFuZGVyLCBldCBhbC4mbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsm bmJzcDsmbmJzcDsgRXhwaXJlcyBKYW51YXJ5IDI3LCAyMDE5Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5i c3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7 Jm5ic3A7IFtQYWdlIDEwXTxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+ Jmd0OyZndDs8bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZn dDsmZ3Q7SW50ZXJuZXQtRHJhZnQmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsm bmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJz cDsmbmJzcDsmbmJzcDsgT1NDT1JFJm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7 Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5i c3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7IEp1bHkgMjAxODxv OnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0OyZndDs8bzpwPiZuYnNw OzwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDsmZ3Q7Jm5ic3A7Jm5ic3A7 IEFsbCBpbnB1dCBwYXJhbWV0ZXJzIG5lZWQgdG8gYmUga25vd24gdG8gYW5kIGFncmVlZCBvbiBi eSBib3RoPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7Jmd0OyZu YnNwOyZuYnNwOyBlbmRwb2ludHMsIGJ1dCB0aGUgcmVwbGF5IHdpbmRvdyBtYXkgYmUgZGlmZmVy ZW50IGluIHRoZSB0d288bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZn dDsmZ3Q7Jm5ic3A7Jm5ic3A7IGVuZHBvaW50cy4mbmJzcDsgVGhlIHdheSB0aGUgaW5wdXQgcGFy YW1ldGVycyBhcmUgcHJlLWVzdGFibGlzaGVkLCBpczxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9 Ik1zb1BsYWluVGV4dCI+Jmd0OyZndDsmbmJzcDsmbmJzcDsgYXBwbGljYXRpb24gc3BlY2lmaWMu Jm5ic3A7IENvbnNpZGVyYXRpb25zIG9mIHNlY3VyaXR5IGNvbnRleHQ8bzpwPjwvbzpwPjwvcD4N CjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDsmZ3Q7Jm5ic3A7Jm5ic3A7IGVzdGFibGlzaG1l bnQgYXJlIGdpdmVuIGluIFNlY3Rpb24gMTIuMiBhbmQgZXhhbXBsZXMgb2YgZGVwbG95aW5nPG86 cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7Jmd0OyZuYnNwOyZuYnNw OyBPU0NPUkUgaW4gQXBwZW5kaXggQi48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFp blRleHQiPiZndDsmZ3Q7PG86cD4mbmJzcDs8L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5U ZXh0Ij4mZ3Q7Jmd0OzMuMi4xLiZuYnNwOyBEZXJpdmF0aW9uIG9mIFNlbmRlciBLZXksIFJlY2lw aWVudCBLZXksIGFuZCBDb21tb24gSVY8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFp blRleHQiPiZndDsmZ3Q7PG86cD4mbmJzcDs8L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5U ZXh0Ij4mZ3Q7Jmd0OyZuYnNwOyZuYnNwOyBUaGUgS0RGIE1VU1QgYmUgb25lIG9mIHRoZSBITUFD IGJhc2VkIEhLREYgW1JGQzU4NjldIGFsZ29yaXRobXM8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNz PSJNc29QbGFpblRleHQiPiZndDsmZ3Q7Jm5ic3A7Jm5ic3A7IGRlZmluZWQgZm9yIENPU0UgW1JG QzgxNTJdLjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0OyZndDsm bHQ7bWdsdCZndDs8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDsm Z3Q7SXQgbWlnaHQgYmUgYmV0dGVyIHRvIGNvbnNpZGVyIEhLREYgaW5zdGVhZCBvZiBLREYgYW5k IHRoZW4ganVzdCBzcGVjaWZ5DQo8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRl eHQiPiZndDsmZ3Q7dGhlPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4m Z3Q7Jmd0O0hhc2ggZnVuY3Rpb24gJmx0Oy9tZ2x0Jmd0OzxvOnA+PC9vOnA+PC9wPg0KPHAgY2xh c3M9Ik1zb1BsYWluVGV4dCI+Jmd0O1tHUzpdIElzIHRoaXMgYmV0dGVyOjxvOnA+PC9vOnA+PC9w Pg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0O05FVzxvOnA+PC9vOnA+PC9wPg0KPHAgY2xh c3M9Ik1zb1BsYWluVGV4dCI+Jmd0OyBUaGUgSEtERiBNVVNUIGJlIG9uZSBvZiB0aGUgSE1BQyBi YXNlZCBIS0RGIFtSRkM1ODY5XSBhbGdvcml0aG1zPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0i TXNvUGxhaW5UZXh0Ij4mZ3Q7Jm5ic3A7Jm5ic3A7IGRlZmluZWQgZm9yIENPU0UgW1JGQzgxNTJd LjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0OzxvOnA+Jm5ic3A7 PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0OzxvOnA+Jm5ic3A7PC9vOnA+ PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+PHNwYW4gc3R5bGU9ImNvbG9yOnJlZCI+Jmx0 O21nbHQyJmd0OzxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQi PjxzcGFuIHN0eWxlPSJjb2xvcjpyZWQiPkkgdGhpbmsgdGhhdCBpcyBiZXR0ZXIuPG86cD48L286 cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+PHNwYW4gc3R5bGU9ImNvbG9y OnJlZCI+Jmx0Oy9tZ2x0MiZndDs8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNv UGxhaW5UZXh0Ij4mZ3Q7PG86cD4mbmJzcDs8L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5U ZXh0Ij4mZ3Q7PG86cD4mbmJzcDs8L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4m Z3Q7Jmd0OzxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0 OyZndDsmbmJzcDsgSEtERiBTSEEtMjU2IGlzIG1hbmRhdG9yeSB0byBpbXBsZW1lbnQuPG86cD48 L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7Jmd0OyZuYnNwOyZuYnNwOyBU aGUgc2VjdXJpdHkgY29udGV4dCBwYXJhbWV0ZXJzIFNlbmRlciBLZXksIFJlY2lwaWVudCBLZXks IGFuZCBDb21tb248bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDsm Z3Q7Jm5ic3A7Jm5ic3A7IElWIFNIQUxMIGJlIGRlcml2ZWQgZnJvbSB0aGUgaW5wdXQgcGFyYW1l dGVycyB1c2luZyB0aGUgSEtERiwgd2hpY2g8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Q bGFpblRleHQiPiZndDsmZ3Q7Jm5ic3A7Jm5ic3A7IGNvbnNpc3RzIG9mIHRoZSBjb21wb3NpdGlv biBvZiB0aGUgSEtERi1FeHRyYWN0IGFuZCBIS0RGLUV4cGFuZCBzdGVwczxvOnA+PC9vOnA+PC9w Pg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0OyZndDsmbmJzcDsmbmJzcDsgW1JGQzU4Njld OjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0OyZndDs8bzpwPiZu YnNwOzwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDsmZ3Q7Jm5ic3A7Jm5i c3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7IG91dHB1dCBwYXJhbWV0ZXIgPSBIS0RGKHNhbHQsIElLTSwg aW5mbywgTCk8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDsmZ3Q7 PG86cD4mbmJzcDs8L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7Jmd0OyZu YnNwOyZuYnNwOyB3aGVyZTo8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQi PiZndDsmZ3Q7PG86cD4mbmJzcDs8L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4m Z3Q7Jmd0OyZuYnNwOyZuYnNwOyBvJm5ic3A7IHNhbHQgaXMgdGhlIE1hc3RlciBTYWx0IGFzIGRl ZmluZWQgYWJvdmU8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDsm Z3Q7PG86cD4mbmJzcDs8L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7Jmd0 OyZuYnNwOyZuYnNwOyBvJm5ic3A7IElLTSBpcyB0aGUgTWFzdGVyIFNlY3JldCBhcyBkZWZpbmVk IGFib3ZlPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7Jmd0Ozxv OnA+Jm5ic3A7PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0OyZndDsmbmJz cDsmbmJzcDsgbyZuYnNwOyBpbmZvIGlzIHRoZSBzZXJpYWxpemF0aW9uIG9mIGEgQ0JPUiBhcnJh eSBjb25zaXN0aW5nIG9mOjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+ Jmd0OyZndDs8bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZn dDsmZ3Q7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7IGluZm8gPSBbPG86cD48L286cD48 L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7Jmd0OyZuYnNwOyZuYnNwOyZuYnNwOyZu YnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyBpZCA6IGJzdHIsPG86cD48L286cD48 L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7Jmd0OyZuYnNwOyZuYnNwOyZuYnNwOyZu YnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyBpZF9jb250ZXh0IDogYnN0ciAvIG5p bCw8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDsmZ3Q7Jm5ic3A7 Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7IGFsZ19hZWFk IDogaW50IC8gdHN0ciw8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZn dDsmZ3Q7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5i c3A7IHR5cGUgOiB0c3RyLDxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+ Jmd0OyZndDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsm bmJzcDsgTCA6IHVpbnQ8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZn dDsmZ3Q7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7IF08bzpwPjwvbzpwPjwvcD4NCjxw IGNsYXNzPSJNc29QbGFpblRleHQiPiZndDsmZ3Q7Jmx0O21nbHQmZ3Q7PG86cD48L286cD48L3A+ DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7Jmd0O2JzdHIsIG5pbCwgdHN0ciBhcmUgdXNl ZCBmb3IgdGhlIGZpcnN0IHRpbWUgaGVyZS4gTWF5YmUgYSByZWZlcmVuY2UgdG8NCjxvOnA+PC9v OnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0OyZndDs4MTUyIG1heTxvOnA+PC9v OnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0OyZndDtiZSBjbGFyaWZ5aW5nLiAm bHQ7L21nbHQmZ3Q7PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7 PG86cD4mbmJzcDs8L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7W0dTOl0g T0ssIHdpbGwgZG8gdGhhdCBhbmQgaW4gdGhlIHRlcm1pbm9sb2d5IHNlY3Rpb24uPG86cD48L286 cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij48c3BhbiBzdHlsZT0iY29sb3I6cmVkIj4m bHQ7bWdsdDImZ3Q7PG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4 dCI+PHNwYW4gc3R5bGU9ImNvbG9yOnJlZCI+VGhhbmtzLjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4N CjxwIGNsYXNzPSJNc29QbGFpblRleHQiPjxzcGFuIHN0eWxlPSJjb2xvcjpyZWQiPiZsdDsvbWds dDImZ3Q7PG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0 OyZndDs8bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDsm Z3Q7Jm5ic3A7Jm5ic3A7IHdoZXJlOjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWlu VGV4dCI+Jmd0OyZndDs8bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRl eHQiPiZndDsmZ3Q7Jm5ic3A7Jm5ic3A7IG8mbmJzcDsgaWQgaXMgdGhlIFNlbmRlciBJRCBvciBS ZWNpcGllbnQgSUQgd2hlbiBkZXJpdmluZyBrZXlzIGFuZCB0aGU8bzpwPjwvbzpwPjwvcD4NCjxw IGNsYXNzPSJNc29QbGFpblRleHQiPiZndDsmZ3Q7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5i c3A7IGVtcHR5IGJ5dGUgc3RyaW5nIHdoZW4gZGVyaXZpbmcgdGhlIENvbW1vbiBJVi4mbmJzcDsg VGhlIGVuY29kaW5nIGlzPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4m Z3Q7Jmd0OyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyBkZXNjcmliZWQgaW4gU2VjdGlv biA1LjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0OyZndDs8bzpw PiZuYnNwOzwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDsmZ3Q7Jm5ic3A7 Jm5ic3A7IG8mbmJzcDsgaWRfY29udGV4dCBpcyB0aGUgSUQgQ29udGV4dCwgb3IgbmlsIGlmIElE IENvbnRleHQgaXMgbm90PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4m Z3Q7Jmd0OyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyBwcm92aWRlZC48bzpwPjwvbzpw PjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDsmZ3Q7PG86cD4mbmJzcDs8L286cD48 L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7Jmd0OyZuYnNwOyZuYnNwOyBvJm5ic3A7 IGFsZ19hZWFkIGlzIHRoZSBBRUFEIEFsZ29yaXRobSwgZW5jb2RlZCBhcyBkZWZpbmVkIGluIFtS RkM4MTUyXS48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDsmZ3Q7 PG86cD4mbmJzcDs8L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7Jmd0OyZu YnNwOyZuYnNwOyBvJm5ic3A7IHR5cGUgaXMgJnF1b3Q7S2V5JnF1b3Q7IG9yICZxdW90O0lWJnF1 b3Q7LiZuYnNwOyBUaGUgbGFiZWwgaXMgYW4gQVNDSUkgc3RyaW5nLCBhbmQgZG9lcyBub3Q8bzpw PjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDsmZ3Q7Jm5ic3A7Jm5ic3A7 Jm5ic3A7Jm5ic3A7Jm5ic3A7IGluY2x1ZGUgYSB0cmFpbGluZyBOVUwgYnl0ZS48bzpwPjwvbzpw PjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDsmZ3Q7PG86cD4mbmJzcDs8L286cD48 L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7Jmd0O1NlbGFuZGVyLCBldCBhbC4mbmJz cDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsgRXhwaXJlcyBKYW51YXJ5IDI3 LCAyMDE5Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5i c3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7IFtQYWdlIDExXTxvOnA+PC9vOnA+PC9w Pg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0OyZndDs8bzpwPiZuYnNwOzwvbzpwPjwvcD4N CjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDsmZ3Q7SW50ZXJuZXQtRHJhZnQmbmJzcDsmbmJz cDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsm bmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsgT1NDT1JFJm5ic3A7Jm5i c3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7 Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5i c3A7Jm5ic3A7Jm5ic3A7IEp1bHkgMjAxODxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1Bs YWluVGV4dCI+Jmd0OyZndDs8bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFp blRleHQiPiZndDsmZ3Q7Jm5ic3A7Jm5ic3A7IG8mbmJzcDsgTCBpcyB0aGUgc2l6ZSBvZiB0aGUg a2V5L0lWIGZvciB0aGUgQUVBRCBhbGdvcml0aG0gdXNlZCwgaW4gYnl0ZXMuPG86cD48L286cD48 L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7Jmd0OzxvOnA+Jm5ic3A7PC9vOnA+PC9w Pg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0OyZndDsmbmJzcDsmbmJzcDsgRm9yIGV4YW1w bGUsIGlmIHRoZSBhbGdvcml0aG0gQUVTLUNDTS0xNi02NC0xMjggKHNlZSBTZWN0aW9uIDEwLjIg aW48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDsmZ3Q7Jm5ic3A7 Jm5ic3A7IFtSRkM4MTUyXSkgaXMgdXNlZCwgdGhlIGludGVnZXIgdmFsdWUgZm9yIGFsZ19hZWFk IGlzIDEwLCB0aGUgdmFsdWU8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQi PiZndDsmZ3Q7Jm5ic3A7Jm5ic3A7IGZvciBMIGlzIDE2IGZvciBrZXlzIGFuZCAxMyBmb3IgdGhl IENvbW1vbiBJVi48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDsm Z3Q7PG86cD4mbmJzcDs8L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7Jmd0 OyZuYnNwOyZuYnNwOyBOb3RlIHRoYXQgW1JGQzU4NjldIHNwZWNpZmllcyB0aGF0IGlmIHRoZSBz YWx0IGlzIG5vdCBwcm92aWRlZCwgaXQgaXM8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Q bGFpblRleHQiPiZndDsmZ3Q7Jm5ic3A7Jm5ic3A7IHNldCB0byBhIHN0cmluZyBvZiB6ZXJvcy4m bmJzcDsgRm9yIGltcGxlbWVudGF0aW9uIHB1cnBvc2VzLCBub3QgcHJvdmlkaW5nPG86cD48L286 cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7Jmd0OyZuYnNwOyZuYnNwOyB0aGUg c2FsdCBpcyB0aGUgc2FtZSBhcyBzZXR0aW5nIHRoZSBzYWx0IHRvIHRoZSBlbXB0eSBieXRlIHN0 cmluZy48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDsmZ3Q7Jm5i c3A7Jm5ic3A7IE9TQ09SRSBzZXRzIHRoZSBzYWx0IGRlZmF1bHQgdmFsdWUgdG8gZW1wdHkgYnl0 ZSBzdHJpbmcsIHdoaWNoIGluPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0 Ij4mZ3Q7Jmd0OyZuYnNwOyZuYnNwOyBbUkZDNTg2OV0gaXMgY29udmVydGVkIHRvIGEgc3RyaW5n IG9mIHplcm9lcyAoc2VlIFNlY3Rpb24gMi4yIG9mPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0i TXNvUGxhaW5UZXh0Ij4mZ3Q7Jmd0OyZuYnNwOyZuYnNwOyBbUkZDNTg2OV0pLjxvOnA+PC9vOnA+ PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0OyZndDs8bzpwPiZuYnNwOzwvbzpwPjwv cD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDsmZ3Q7Jmx0O21nbHQmZ3Q7PG86cD48L286 cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7Jmd0O0kgYmVsaWV2ZSB0aGF0IGhv dyBTZW5kZXIgS2V5LCBSZWNpcGllbnQgS2V5LCBhbmQgQ29tbW9uIElWIGFyZSBkZXJpdmVkDQo8 bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDsmZ3Q7ZnJvbTxvOnA+ PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0OyZndDt0aGUgb3V0cHV0X3Bh cmFtZXRlcnMgc2hvdWxkIGJlIGRlc2NyaWJlZCBhcyB3ZWxsLjxvOnA+PC9vOnA+PC9wPg0KPHAg Y2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0OzxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPHAgY2xhc3M9 Ik1zb1BsYWluVGV4dCI+Jmd0O1tHUzpdIFRoaXMgc2VjdGlvbiBpcyBpbnRlbmRlZCB0byBkZXNj cmliZSBqdXN0IHRoYXQuIElzIHRoaXMgbW9yZSBjbGVhcjo8bzpwPjwvbzpwPjwvcD4NCjxwIGNs YXNzPSJNc29QbGFpblRleHQiPiZndDtPTEQ8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Q bGFpblRleHQiPiZndDtpZCBpcyB0aGUgU2VuZGVyIElEIG9yIFJlY2lwaWVudCBJRCB3aGVuIGRl cml2aW5nIGtleXMgYW5kIHRoZSBlbXB0eSBieXRlDQo8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNz PSJNc29QbGFpblRleHQiPiZndDtzdHJpbmcgd2hlbiBkZXJpdmluZyB0aGUgQ29tbW9uIElWLjxv OnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0O05FVzxvOnA+PC9vOnA+ PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0O2lkIGlzIHRoZSBTZW5kZXIgSUQgb3Ig UmVjaXBpZW50IElEIHdoZW4gZGVyaXZpbmcgdGhlIFNlbmRlciBLZXkgYW5kDQo8bzpwPjwvbzpw PjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDtSZWNpcGllbnQgS2V5LCByZXNwZWN0 aXZlbHksIGFuZCB0aGUgZW1wdHkgYnl0ZSBzdHJpbmcgd2hlbiBkZXJpdmluZyB0aGUNCjxvOnA+ PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0O0NvbW1vbiBJVi48bzpwPjwv bzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDs8bzpwPiZuYnNwOzwvbzpwPjwv cD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPjxzcGFuIHN0eWxlPSJjb2xvcjpyZWQiPiZsdDtt Z2x0MiZndDs8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij48 c3BhbiBzdHlsZT0iY29sb3I6cmVkIj5JIGJlbGlldmUgdGhhdCBpcyBjbGVhcmVyLiA8bzpwPjwv bzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij48c3BhbiBzdHlsZT0iY29s b3I6cmVkIj4mbHQ7L21nbHQyJmd0OzxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJN c29QbGFpblRleHQiPiZndDs8bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFp blRleHQiPiZndDsmZ3Q7Tm90ZSB0aGF0IGluIHRoaXMgY2FzZSBJIGJlbGlldmUgdGhhdCBTZW5k ZXIgS2V5IGFuZCBSZWNpcGllbnQgS2V5IGFyZQ0KPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0i TXNvUGxhaW5UZXh0Ij4mZ3Q7Jmd0O3VzZWQgZm9yPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0i TXNvUGxhaW5UZXh0Ij4mZ3Q7Jmd0O3RoZSB0d28gdW5pZGlyZWN0aW9uYWwgY29tbXVuaWNhdGlv bnMuIEluIG90aGVyIHdvcmRzLCB0aGUgc2FtZSBrZXkNCjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xh c3M9Ik1zb1BsYWluVGV4dCI+Jmd0OyZndDtzaG91bGQgYmU8bzpwPjwvbzpwPjwvcD4NCjxwIGNs YXNzPSJNc29QbGFpblRleHQiPiZndDsmZ3Q7dXNlZCBieSB0aGUgc2VuZGVyIGFuZCB0aGUgcmVj aXBpZW50IG9mIHRoZSBzYW1lIGNvbW11bmljYXRpb24uIFRoZSBzYW1lDQo8bzpwPjwvbzpwPjwv cD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDsmZ3Q7Q29tbW9uPG86cD48L286cD48L3A+ DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7Jmd0O0lWIGlzIHVzZWQgaW4gYm90aCBjb21t dW5pY2F0aW9ucy4gJmx0Oy9tZ2x0Jmd0OyA8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Q bGFpblRleHQiPiZndDs8bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRl eHQiPiZndDtbR1M6XSBBcyBkaXNjdXNzZWQgYWJvdmUsIFNlY3Rpb24gMy4xIGRlc2NyaWJlcyBo b3cgU2VuZGVyIElEIGFuZA0KPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0 Ij4mZ3Q7UmVjaXBpZW50IElEIHJlbGF0ZSB0byBlYWNoIG90aGVyLiBBcyBwcm9wb3NlZCBhYm92 ZSwgd2UgZW1waGFzaXNlIGluDQo8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRl eHQiPiZndDtTZWN0aW9uIDMuMiB0aGF0IHRoZSBkZXJpdmF0aW9ucyBhcmUgd2l0aCByZWZlcmVu Y2UgdG8gb25lIGVuZHBvaW50LiBJcw0KPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxh aW5UZXh0Ij4mZ3Q7dGhhdCBzdWZmaWNpZW50bHkgY2xlYXIgbm93PyBBcyBmb3IgdGhlIENvbW1v biBJViwgaXRzIHVzZSBpcyBkZXNjcmliZWQ8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Q bGFpblRleHQiPiZndDtpbiBTZWN0aW9uIDUuMi48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJN c29QbGFpblRleHQiPiZndDs8bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFp blRleHQiPiZndDs8bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQi PjxzcGFuIHN0eWxlPSJjb2xvcjpyZWQiPiZsdDttZ2x0MiZndDs8bzpwPjwvbzpwPjwvc3Bhbj48 L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij48c3BhbiBzdHlsZT0iY29sb3I6cmVkIj5ZZXMs IEkgYmVsaWV2ZSB0aGlzIGhhcyBiZWVuIGNsYXJpZmllZCBlYXJsaWVyLg0KPG86cD48L286cD48 L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+PHNwYW4gc3R5bGU9ImNvbG9yOnJl ZCI+Jmx0Oy9tZ2x0MiZndDs8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvUGxh aW5UZXh0Ij4mZ3Q7Jmd0OzMuMi4yLiZuYnNwOyBJbml0aWFsIFNlcXVlbmNlIE51bWJlcnMgYW5k PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7Jmd0O1JlcGxheSBX aW5kb3c8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDsmZ3Q7PG86 cD4mbmJzcDs8L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7Jmd0OyZuYnNw OyZuYnNwOyBUaGUgU2VuZGVyIFNlcXVlbmNlIE51bWJlciBpcyBpbml0aWFsaXplZCB0byAwLiZu YnNwOyBUaGUgc3VwcG9ydGVkIHR5cGVzPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxh aW5UZXh0Ij4mZ3Q7Jmd0OyZuYnNwOyZuYnNwOyBvZiByZXBsYXkgcHJvdGVjdGlvbiBhbmQgcmVw bGF5IHdpbmRvdyBsZW5ndGggaXMgYXBwbGljYXRpb24gc3BlY2lmaWM8bzpwPjwvbzpwPjwvcD4N CjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDsmZ3Q7Jm5ic3A7Jm5ic3A7IGFuZCBkZXBlbmRz IG9uIGhvdyBPU0NPUkUgaXMgdHJhbnNwb3J0ZWQsIHNlZSBTZWN0aW9uIDcuNC4mbmJzcDsgVGhl PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7Jmd0OyZuYnNwOyZu YnNwOyBkZWZhdWx0IGlzIERUTFMtdHlwZSByZXBsYXkgcHJvdGVjdGlvbiB3aXRoIGEgd2luZG93 IHNpemUgb2YgMzI8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDsm Z3Q7Jm5ic3A7Jm5ic3A7IGluaXRpYXRlZCBhcyBkZXNjcmliZWQgaW4gU2VjdGlvbiA0LjEuMi42 IG9mIFtSRkM2MzQ3XS48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZn dDsmZ3Q7PG86cD4mbmJzcDs8L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7 Jmd0OyZsdDttZ2x0Jmd0OzxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+ Jmd0OyZndDtUaGlzIHNob3VsZCBiZSBzcGVjaWZpZWQgdGhlIHNhbWUgaW4gdGhlIENvbnRleHQu PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7Jmd0OyZsdDsvbWds dCZndDs8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDs8bzpwPiZu YnNwOzwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDtbR1M6XSBXZSBjYW4g bWFrZSBhIHJlZmVyZW5jZSB0byB0aGlzIHNlY3Rpb24gZnJvbSBTZWN0aW9uIDMuPG86cD48L286 cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij48c3BhbiBzdHlsZT0iY29sb3I6cmVkIj4m bHQ7bWdsdDImZ3Q7PG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4 dCI+PHNwYW4gc3R5bGU9ImNvbG9yOnJlZCI+SSB0aGluayB0aGF0IHdvdWxkIGJlIGNsYXJpZnlp bmcuDQo8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij48c3Bh biBzdHlsZT0iY29sb3I6cmVkIj4mbHQ7L21nbHQyJmd0OzxvOnA+PC9vOnA+PC9zcGFuPjwvcD4N CjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDsmZ3Q7PG86cD4mbmJzcDs8L286cD48L3A+DQo8 cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7Jmd0OzMuMy4mbmJzcDsgUmVxdWlyZW1lbnRzIG9u IHRoZSBTZWN1cml0eSBDb250ZXh0IFBhcmFtZXRlcnM8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNz PSJNc29QbGFpblRleHQiPiZndDsmZ3Q7PG86cD4mbmJzcDs8L286cD48L3A+DQo8cCBjbGFzcz0i TXNvUGxhaW5UZXh0Ij4mZ3Q7Jmd0OyZuYnNwOyZuYnNwOyBUbyBlbnN1cmUgdW5pcXVlIFNlbmRl ciBLZXlzLCB0aGUgcXVhcnRldCAoTWFzdGVyIFNlY3JldCwgTWFzdGVyPG86cD48L286cD48L3A+ DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7Jmd0OyZuYnNwOyZuYnNwOyBTYWx0LCBJRCBD b250ZXh0LCBTZW5kZXIgSUQpIE1VU1QgYmUgdW5pcXVlLCBpLmUuIHRoZSBwYWlyIChJRDxvOnA+ PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0OyZndDsmbmJzcDsmbmJzcDsg Q29udGV4dCwgU2VuZGVyIElEKSBTSEFMTCBiZSB1bmlxdWUgaW4gdGhlIHNldCBvZiBhbGwgc2Vj dXJpdHk8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDsmZ3Q7Jm5i c3A7Jm5ic3A7IGNvbnRleHRzIHVzaW5nIHRoZSBzYW1lIE1hc3RlciBTZWNyZXQgYW5kIE1hc3Rl ciBTYWx0LiZuYnNwOyBUaGlzIG1lYW5zPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxh aW5UZXh0Ij4mZ3Q7Jmd0OyZuYnNwOyZuYnNwOyB0aGF0IFNlbmRlciBJRCBTSEFMTCBiZSB1bmlx dWUgaW4gdGhlIHNldCBvZiBhbGwgc2VjdXJpdHkgY29udGV4dHM8bzpwPjwvbzpwPjwvcD4NCjxw IGNsYXNzPSJNc29QbGFpblRleHQiPiZndDsmZ3Q7Jm5ic3A7Jm5ic3A7IHVzaW5nIHRoZSBzYW1l IE1hc3RlciBTZWNyZXQsIE1hc3RlciBTYWx0LCBhbmQgSUQgQ29udGV4dDsgc3VjaCBhPG86cD48 L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7Jmd0OyZuYnNwOyZuYnNwOyBy ZXF1aXJlbWVudCBndWFyYW50ZWVzIHVuaXF1ZSAoa2V5LCBub25jZSkgcGFpcnMsIHdoaWNoIGF2 b2lkcyBub25jZTxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0OyZn dDsmbmJzcDsmbmJzcDsgcmV1c2UuPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5U ZXh0Ij4mZ3Q7Jmd0OzxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4 dCI+Jmd0OyZndDsmbHQ7bWdsdCZndDs8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFp blRleHQiPiZndDsmZ3Q7SSB1bmRlcnN0YW5kIHRoZSB1c2Ugb2YgU0hBTEwgYW5kIE1VU1QgYXMg c2ltaWxhci4gSWYgdGhhdCBpcyBjb3JyZWN0LA0KPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0i TXNvUGxhaW5UZXh0Ij4mZ3Q7Jmd0O0l0IDxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1Bs YWluVGV4dCI+Jmd0OyZndDttYXk8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRl eHQiPiZndDsmZ3Q7YmUgYmV0dGVyIHRvIHVzZSB0aGUgc2FtZSB0ZXJtIHRocm91Z2hvdXQgdGhl IGRvY3VtZW50LjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0Ozxv OnA+Jm5ic3A7PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0O1tHUzpdIEni gJltIG9wZW4gdG8gZ3VpZGFuY2UgaGVyZSBidXQgSeKAmWQgcmF0aGVyIG5vdCBtYWtlIHRoZXNl IGNoYW5nZXMNCjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0O3Ro cm91Z2hvdXQgdGhlIGRvY3VtZW50IHVubGVzcyB0aGVyZSBpcyBhbiBhZ3JlZWQgY29udmVudGlv biBhYm91dCB0aGlzLg0KPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4m Z3Q7SSA8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDtoYXZlIGxl YXJuZWQgYWJvdXQgb25lIGRpc3RpbmN0aW9uIGJldHdlZW4gYWN0b3IgKFNIQUxMKSBhbmQgcGFz c2l2ZQ0KPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7ZW50aXR5 IChNVVNUKSBidXQgSSBkb27igJl0IHNlZSB0aGF0IGNvbnNlcXVlbnRpYWxseSB1c2VkIGluIG90 aGVyIFJGQ3MuIEkNCjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0 O2RvbuKAmXQgc2VlIGFueSByaXNrIGZvciBlcnJvcnMgcmVzdWx0aW5nIGZyb20gaW50ZXJjaGFu Z2VhYmx5IHVzaW5nIFNIQUxMDQo8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRl eHQiPiZndDtvciBNVVNULjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+ Jmd0OzxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+PHNwYW4g c3R5bGU9ImNvbG9yOnJlZCI+Jmx0O21nbHQyJmd0OzxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxw IGNsYXNzPSJNc29QbGFpblRleHQiPjxzcGFuIHN0eWxlPSJjb2xvcjpyZWQiPkkgdGhpbmsgdGhh dCB3aXNlLiBQdXR0aW5nIHlvdXIgc2hvZXMgb24sIEkgd291bGQgaGF2ZSBiZWVuIHJlbHVjdGFu dCBpbiBjaGFuZ2luZyB0aGVtIGF0IHRoYXQgdGltZS4gVGhhbmtzIGZvciB0aGUgZXhwbGFuYXRp b24gYmV0d2VlbiBNVVNUIGFuZCBTSEFMTC4NCjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNs YXNzPSJNc29QbGFpblRleHQiPjxzcGFuIHN0eWxlPSJjb2xvcjpyZWQiPiZsdDsvbWdsdDImZ3Q7 PG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0OyZndDs8 bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDsmZ3Q7SSBi ZWxpZXZlIHRoYXQgd2Ugd291bGQgbGlrZSB0byBhdm9pZCB0aGF0IHRoZSBzYW1lIElWIGlzIGJl aW5nIHJldXNlZA0KPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7 Jmd0O3dpdGggdGhlPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7 Jmd0O3NhbWUga2V5LiBBbnkgY2hhbmdlIGluIHRoZSBpbnB1dHMgb2YgdGhlIEhNQUMgYmFzZWQg S0RGIHdpbGwgcmVzdWx0IGluIGE8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRl eHQiPiZndDsmZ3Q7ZGlmZmVyZW50IG91dHB1dC4gQXMgc3VjaCBhbnkgY2hhbmdlIGluIHRoZSBv dXRwdXQgd2lsbCByZXN1bHQgaW4gdGhhdDxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1Bs YWluVGV4dCI+Jmd0OyZndDtwcm9wZXJ0eS4gSSBzdXNwZWN0IHdlIHdvdWxkIGxpa2UgdG8gc29t ZSBwYXJhbWV0ZXJzIHRvIHJlbWFpbiB3aXQgdGhlDQo8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNz PSJNc29QbGFpblRleHQiPiZndDsmZ3Q7c2FtZTxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1z b1BsYWluVGV4dCI+Jmd0OyZndDt2YWx1ZSwgd2hpbGUgc29tZSBjb3VsZCBiZSBjaGFuZ2VkLCBh bmQgZm9yIHRoYXQgcmVhc29uLCB3ZSBjaG9zZSB0aGUNCjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xh c3M9Ik1zb1BsYWluVGV4dCI+Jmd0OyZndDtTZW5kZXI8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNz PSJNc29QbGFpblRleHQiPiZndDsmZ3Q7SUQuIEkgYmVsaWV2ZSB0aGUgdGV4dCBjb3VsZCBiZSBj bGFyaWZpZWQgZWl0aGVyIG9uIHRoZSByZWFzb25pbmcgYmVoaW5kDQo8bzpwPjwvbzpwPjwvcD4N CjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDsmZ3Q7b3IgaG93PG86cD48L286cD48L3A+DQo8 cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7Jmd0O3RoaXMgc2hvdWxkIGJlIG9wZXJhdGVkLiAm bHQ7L21nbHQmZ3Q7PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7 PG86cD4mbmJzcDs8L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7W0dTOl0g QXMgbWVudGlvbmVkIGFib3ZlLCB0aGUgZ2VuZXJhdGlvbiBvZiB0aGF0IG5vbmNlIHVzZWQgd2l0 aCB0aGUgQUVBRA0KPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7 aXMgZGVzY3JpYmVkIGluIFNlY3Rpb24gNS4yLiBUaGUgcmVhc29uaW5nIHdoeSB0aGlzIGlzIHNl Y3VyZSBpcyBpbg0KPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7 QXBwZW5kaXggRC4zLiBJcyB0aGVyZSBhbnl0aGluZyBtaXNzaW5nPzxvOnA+PC9vOnA+PC9wPg0K PHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8cCBjbGFzcz0i TXNvUGxhaW5UZXh0Ij48c3BhbiBzdHlsZT0iY29sb3I6cmVkIj4mbHQ7bWdsdDImZ3Q7PG86cD48 L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+PHNwYW4gc3R5bGU9ImNv bG9yOnJlZCI+Tm8uIEkgZ3Vlc3MgdGhhdCBpcyBmaW5lPG86cD48L286cD48L3NwYW4+PC9wPg0K PHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+PHNwYW4gc3R5bGU9ImNvbG9yOnJlZCI+Jmx0Oy9tZ2x0 MiZndDs8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7 PG86cD4mbmJzcDs8L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7Jmd0Ozxv OnA+Jm5ic3A7PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0OyZndDsmbmJz cDsmbmJzcDsgRGlmZmVyZW50IG1ldGhvZHMgY2FuIGJlIHVzZWQgdG8gYXNzaWduIFNlbmRlciBJ RHM6IGEgcHJvdG9jb2wgdGhhdDxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4 dCI+Jmd0OyZndDsmbmJzcDsmbmJzcDsgYWxsb3dzIHRoZSBwYXJ0aWVzIHRvIG5lZ290aWF0ZSBs b2NhbGx5IHVuaXF1ZSBpZGVudGlmaWVycywgYSB0cnVzdGVkPG86cD48L286cD48L3A+DQo8cCBj bGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7Jmd0OyZuYnNwOyZuYnNwOyB0aGlyZCBwYXJ0eSAoZS5n LiwgW0ktRC5pZXRmLWFjZS1vYXV0aC1hdXRoel0pLCBvciB0aGUgaWRlbnRpZmllcnM8bzpwPjwv bzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDsmZ3Q7Jm5ic3A7Jm5ic3A7IGNh biBiZSBhc3NpZ25lZCBvdXQtb2YtYmFuZC4mbmJzcDsgVGhlIFNlbmRlciBJRHMgY2FuIGJlIHZl cnkgc2hvcnQgKG5vdGU8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZn dDsmZ3Q7Jm5ic3A7Jm5ic3A7IHRoYXQgdGhlIGVtcHR5IHN0cmluZyBpcyBhIGxlZ2l0aW1hdGUg dmFsdWUpLiZuYnNwOyBUaGUgbWF4aW11bSBsZW5ndGggb2Y8bzpwPjwvbzpwPjwvcD4NCjxwIGNs YXNzPSJNc29QbGFpblRleHQiPiZndDsmZ3Q7Jm5ic3A7Jm5ic3A7IFNlbmRlciBJRCBpbiBieXRl cyBlcXVhbHMgdGhlIGxlbmd0aCBvZiBBRUFEIG5vbmNlIG1pbnVzIDYuJm5ic3A7IEZvciBBRVMt PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7Jmd0OyZuYnNwOyZu YnNwOyBDQ00tMTYtNjQtMTI4IHRoZSBtYXhpbXVtIGxlbmd0aCBvZiBTZW5kZXIgSUQgaXMgNyBi eXRlcy48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDsmZ3Q7PG86 cD4mbmJzcDs8L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7Jmd0OyZsdDtt Z2x0Jmd0OzxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0OyZndDtJ IHN1c3BlY3QgdGhvc2UgcmVzdHJpY3Rpb24gY29taW5nIGZyb20gdGhlIENPU0Ugc3BlY2lmaWNh dGlvbi4gSWYgdGhhdA0KPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4m Z3Q7Jmd0O2lzPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7Jmd0 O2NvcnJlY3QsIEkgYmVsaWV2ZSBpdCB3b3VsZCBiZSBoZWxwZnVsIHRvIGhhdmUgYSByZWZlcmVu Y2UgdG8gdGhhdA0KPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7 Jmd0O2RvY3VtZW50LjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0 OyZndDsmbHQ7L21nbHQmZ3Q7PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0 Ij4mZ3Q7PG86cD4mbmJzcDs8L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7 PG86cD4mbmJzcDs8L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7W0dTOl0g Tm8sIHRoZSByZXN0cmljdGlvbiBjb21lcyBmcm9tIHRoZSBub25jZSBjb25zdHJ1Y3Rpb24sIEkg d2lsbCBhZGQgYQ0KPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7 cmVmZXJlbmNlIHRvIFNlY3Rpb24gNS4yLjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1Bs YWluVGV4dCI+PHNwYW4gc3R5bGU9ImNvbG9yOnJlZCI+Jmx0O21nbHQyJmd0OzxvOnA+PC9vOnA+ PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPjxzcGFuIHN0eWxlPSJjb2xvcjpy ZWQiPlRoYW5rcywgSSBiZWxpZXZlIHRoYXQgd291bGQgYmUgdXNlZnVsLjxvOnA+PC9vOnA+PC9z cGFuPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPjxzcGFuIHN0eWxlPSJjb2xvcjpyZWQi PiZsdDsvbWdsdDImZ3Q7PG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWlu VGV4dCI+Jmd0OzxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+ Jmd0OyZndDs8bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZn dDsmZ3Q7Jm5ic3A7Jm5ic3A7IFRvIHNpbXBsaWZ5IHJldHJpZXZhbCBvZiB0aGUgcmlnaHQgUmVj aXBpZW50IENvbnRleHQsIHRoZSBSZWNpcGllbnQ8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJN c29QbGFpblRleHQiPiZndDsmZ3Q7Jm5ic3A7Jm5ic3A7IElEIFNIT1VMRCBiZSB1bmlxdWUgaW4g dGhlIHNldHMgb2YgYWxsIFJlY2lwaWVudCBDb250ZXh0cyB1c2VkIGJ5IGFuPG86cD48L286cD48 L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7Jmd0OyZuYnNwOyZuYnNwOyBlbmRwb2lu dC4mbmJzcDsgSWYgYW4gZW5kcG9pbnQgaGFzIHRoZSBzYW1lIFJlY2lwaWVudCBJRCB3aXRoIGRp ZmZlcmVudDxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0OyZndDsm bmJzcDsmbmJzcDsgUmVjaXBpZW50IENvbnRleHRzLCBpLmUuIHRoZSBSZWNpcGllbnQgQ29udGV4 dHMgYXJlIGRlcml2ZWQgZnJvbTxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4 dCI+Jmd0OyZndDsmbmJzcDsmbmJzcDsgZGlmZmVyZW50IENvbW1vbiBDb250ZXh0cywgdGhlbiB0 aGUgZW5kcG9pbnQgbWF5IG5lZWQgdG8gdHJ5IG11bHRpcGxlPG86cD48L286cD48L3A+DQo8cCBj bGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7Jmd0OyZuYnNwOyZuYnNwOyB0aW1lcyBiZWZvcmUgdmVy aWZ5aW5nIHRoZSByaWdodCBzZWN1cml0eSBjb250ZXh0IGFzc29jaWF0ZWQgdG8gdGhlPG86cD48 L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7Jmd0OyZuYnNwOyZuYnNwOyBS ZWNpcGllbnQgSUQuPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7 Jmd0OzxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0OyZn dDsmbHQ7bWdsdCZndDs8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZn dDsmZ3Q7U3VjaCBjb2xsaXNpb24gY291bGQgcmVwcmVzZW50IGFuIGF0dGFjayB3aGVyZSB0aGUg YXR0YWNrZXIgY291bGQgaW4NCjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4 dCI+Jmd0OyZndDtjYXNlIDxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+ Jmd0OyZndDthPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7Jmd0 O2NvbGxpc2lvbiBpcyBvYnNlcnZlZCBjcmFmdCBhIHBhY2tldCB0aGF0IGNvc3RzIHR3byB0aW1l IG1vcmUNCjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0OyZndDtj b21wdXRhdGlvbiA8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDsm Z3Q7dGhhbjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0OyZndDth IHJlZ3VsYXIgcGFja2V0LjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+ Jmd0OzxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0O1tH UzpdJm5ic3A7IFRoaXMgc2VjdGlvbiBkZXNjcmliZXMgdW5uZWNlc3NhcnkgcHJvY2Vzc2luZyBk dWUgdG8gY29sbGlzaW9uIG9mDQo8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRl eHQiPiZndDtpZGVudGlmaWVycy4gTm90ZSB0aGF0IGFuIGF0dGFja2VyIGNhbiBzcG9vZiBhIG1l c3NhZ2UgYW5kIHVzZSBhbg0KPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0 Ij4mZ3Q7ZXhpc3RpbmcgPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4m Z3Q7aWRlbnRpZmllciBldmVuIGlmIHRoZXJlIGlzIG9ubHkgc2luZ2xlIGNvbnRleHQgd2l0aCB0 aGlzIGlkZW50aWZpZXIsIGFuZA0KPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5U ZXh0Ij4mZ3Q7c3VjaCBhdHRhY2tzIGFyZSBhbHJlYWR5IG1lbnRpb25lZCBpbiB0aGUgc2VjdXJp dHkgY29uc2lkZXJhdGlvbnMuPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0 Ij4mZ3Q7PG86cD4mbmJzcDs8L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7 Jmd0OzxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0OyZn dDtJIG1pZ2h0IGJlIHdyb25nLCBidXQgaXQgc2VlbXMgdGhhdCB0aGUgSUQgaXMgbW9yZSBpbXBv cnRhbnQgZm9yIHRoZQ0KPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4m Z3Q7Jmd0O3JlY2lwaWVudC48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQi PiZndDsmZ3Q7VHlwaWNhbGx5IHRoZSBzZW5kZXIgY2FuIGVhc2lseSBhZGRyZXNzIFNlbmRlciBJ RCBjb2xsaXNpb24uJm5ic3A7Jm5ic3A7IE9uIHRoZQ0KPG86cD48L286cD48L3A+DQo8cCBjbGFz cz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7Jmd0O290aGVyPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0i TXNvUGxhaW5UZXh0Ij4mZ3Q7Jmd0O2hhbmQgdGhlIGNyeXB0b2dyYXBoaWMgcHJvcGVydGllcyBh cmUgYmFzZWQgb24gdGhlIHVuaXF1ZW5lc3Mgb2YgdGhlDQo8bzpwPjwvbzpwPjwvcD4NCjxwIGNs YXNzPSJNc29QbGFpblRleHQiPiZndDsmZ3Q7U2VuZGVyIElELjxvOnA+PC9vOnA+PC9wPg0KPHAg Y2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0OyZndDtNYXliZSB0aGVzZSBjb3VsZCBiZSBjb25zaWRl cmVkIHdpdGggdGhlIFJlY2lwaWVudCBJRCBpbiBtaW5kLiAmbHQ7L21nbHQmZ3Q7PG86cD48L286 cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7PG86cD4mbmJzcDs8L286cD48L3A+ DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7W0dTOl0gU2VlIGRpc2N1c3Npb24gYWJvdXQg cmVxdWlyZW1lbnRzIG9uIHNlY3VyaXR5IGNvbnRleHQgYWJvdmUuPG86cD48L286cD48L3A+DQo8 cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij48c3BhbiBsYW5nPSJGUiI+Jmd0OzxvOnA+Jm5ic3A7PC9v OnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPjxzcGFuIGxhbmc9IkZSIj4m Z3Q7PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+ PHNwYW4gbGFuZz0iRlIiIHN0eWxlPSJjb2xvcjpyZWQiPiZsdDttZ2x0MiZndDs8bzpwPjwvbzpw Pjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij48c3BhbiBsYW5nPSJGUiIgc3R5 bGU9ImNvbG9yOnJlZCI+T0s8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvUGxh aW5UZXh0Ij48c3BhbiBsYW5nPSJGUiIgc3R5bGU9ImNvbG9yOnJlZCI+Jmx0Oy9tZ2x0MiZndDs8 bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij48c3BhbiBsYW5n PSJGUiI+Jmd0OyZndDs8bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNv UGxhaW5UZXh0Ij48c3BhbiBsYW5nPSJGUiI+Jmd0OyZndDtTZWxhbmRlciwgZXQgYWwuJm5ic3A7 Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7IDwvc3Bhbj5FeHBpcmVzIEphbnVh cnkgMjcsIDIwMTkmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJz cDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsgW1BhZ2UgMTJdPG86cD48L286 cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7Jmd0OzxvOnA+Jm5ic3A7PC9vOnA+ PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0OyZndDtJbnRlcm5ldC1EcmFmdCZuYnNw OyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZu YnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyBPU0NPUkUmbmJz cDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsm bmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJz cDsmbmJzcDsmbmJzcDsmbmJzcDsgSnVseSAyMDE4PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0i TXNvUGxhaW5UZXh0Ij4mZ3Q7Jmd0OzxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1z b1BsYWluVGV4dCI+Jmd0OyZndDsmbmJzcDsmbmJzcDsgVGhlIElEIENvbnRleHQgaXMgdXNlZCB0 byBkaXN0aW5ndWlzaCBiZXR3ZWVuIHNlY3VyaXR5IGNvbnRleHRzLiZuYnNwOyBUaGU8bzpwPjwv bzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDsmZ3Q7Jm5ic3A7Jm5ic3A7IG1l dGhvZHMgdXNlZCBmb3IgYXNzaWduaW5nIFNlbmRlciBJRCBjYW4gYWxzbyBiZSB1c2VkIGZvciBh c3NpZ25pbmc8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDsmZ3Q7 Jm5ic3A7Jm5ic3A7IHRoZSBJRCBDb250ZXh0LiZuYnNwOyBBZGRpdGlvbmFsbHksIHRoZSBJRCBD b250ZXh0IGNhbiBiZSBnZW5lcmF0ZWQgYnkgdGhlPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0i TXNvUGxhaW5UZXh0Ij4mZ3Q7Jmd0OyZuYnNwOyZuYnNwOyBjbGllbnQgKHNlZSBBcHBlbmRpeCBC LjIpLiZuYnNwOyBJRCBDb250ZXh0IGNhbiBiZSBhcmJpdHJhcmlseSBsb25nLjxvOnA+PC9vOnA+ PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0OyZndDs8bzpwPiZuYnNwOzwvbzpwPjwv cD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDsmZ3Q7NC4mbmJzcDsgUHJvdGVjdGVkIE1l c3NhZ2UgRmllbGRzPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7 Jmd0OzxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0OyZn dDs0LjEuJm5ic3A7IENvQVAgT3B0aW9uczxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1Bs YWluVGV4dCI+Jmd0OyZndDs8bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFp blRleHQiPiZndDsmZ3Q7NC4xLjEuJm5ic3A7IElubmVyIE9wdGlvbnM8bzpwPjwvbzpwPjwvcD4N CjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDsmZ3Q7NC4xLjIuJm5ic3A7IE91dGVyIE9wdGlv bnM8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDsmZ3Q7NC4xLjMu Jm5ic3A7IFNwZWNpYWwgT3B0aW9uczxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWlu VGV4dCI+Jmd0OyZndDs0LjEuMy4xLiZuYnNwOyBNYXgtQWdlPG86cD48L286cD48L3A+DQo8cCBj bGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7Jmd0OzQuMS4zLjIuJm5ic3A7IFVyaS1Ib3N0IGFuZCBV cmktUG9ydDxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0OyZndDs0 LjEuMy4zLiZuYnNwOyBQcm94eS1Vcmk8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFp blRleHQiPiZndDsmZ3Q7NC4xLjMuNC4mbmJzcDsgVGhlIEJsb2NrIE9wdGlvbnM8bzpwPjwvbzpw PjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDsmZ3Q7NC4xLjMuNC4xLiZuYnNwOyBJ bm5lciBCbG9jayBPcHRpb25zPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0 Ij4mZ3Q7Jmd0OzQuMS4zLjQuMi4mbmJzcDsgT3V0ZXIgQmxvY2sgT3B0aW9uczxvOnA+PC9vOnA+ PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0OyZndDs0LjEuMy41LiZuYnNwOyBPYnNl cnZlPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7Jmd0OzQuMS4z LjUuMS4mbmJzcDsgUmVnaXN0cmF0aW9ucyBhbmQgQ2FuY2VsbGF0aW9uczxvOnA+PC9vOnA+PC9w Pg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0OyZndDs0LjEuMy41LjIuJm5ic3A7IE5vdGlm aWNhdGlvbnM8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDsmZ3Q7 PG86cD4mbmJzcDs8L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7Jmd0OyZu YnNwOyZuYnNwOyBJZiB0aGUgc2VydmVyIGFjY2VwdHMgYW4gT2JzZXJ2ZSByZWdpc3RyYXRpb24s IGEgUGFydGlhbCBJViBNVVNUIGJlPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5U ZXh0Ij4mZ3Q7Jmd0OyZuYnNwOyZuYnNwOyBpbmNsdWRlZCBpbiBhbGwgbm90aWZpY2F0aW9ucyAo Ym90aCBzdWNjZXNzZnVsIGFuZCBlcnJvciksIGV4Y2VwdCBmb3I8bzpwPjwvbzpwPjwvcD4NCjxw IGNsYXNzPSJNc29QbGFpblRleHQiPiZndDsmZ3Q7Jm5ic3A7Jm5ic3A7IHRoZSBmaXJzdCBvbmUg d2hlcmUgUGFydGlhbCBJViBNQVkgYmUgb21pdHRlZC4mbmJzcDsgVG8gcHJvdGVjdCBhZ2FpbnN0 PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7Jmd0OyZuYnNwOyZu YnNwOyByZXBsYXksIHRoZSBjbGllbnQgU0hBTEwgbWFpbnRhaW4gYSBOb3RpZmljYXRpb24gTnVt YmVyIGZvciBlYWNoPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7 Jmd0OyZuYnNwOyZuYnNwOyBPYnNlcnZhdGlvbiBpdCByZWdpc3RlcnMuJm5ic3A7IFRoZSBOb3Rp ZmljYXRpb24gTnVtYmVyIGlzIGEgbm9uLW5lZ2F0aXZlPG86cD48L286cD48L3A+DQo8cCBjbGFz cz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7Jmd0OyZuYnNwOyZuYnNwOyBpbnRlZ2VyIGNvbnRhaW5pbmcg dGhlIGxhcmdlc3QgUGFydGlhbCBJViBvZiB0aGUgcmVjZWl2ZWQ8bzpwPjwvbzpwPjwvcD4NCjxw IGNsYXNzPSJNc29QbGFpblRleHQiPiZndDsmZ3Q7Jm5ic3A7Jm5ic3A7IG5vdGlmaWNhdGlvbnMg Zm9yIHRoZSBhc3NvY2lhdGVkIE9ic2VydmUgcmVnaXN0cmF0aW9uLiZuYnNwOyBGdXJ0aGVyPG86 cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7Jmd0OyZuYnNwOyZuYnNw OyBkZXRhaWxzIG9mIHJlcGxheSBwcm90ZWN0aW9uIG9mIG5vdGlmaWNhdGlvbnMgYXJlIHNwZWNp ZmllZCBpbjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0OyZndDsm bmJzcDsmbmJzcDsgU2VjdGlvbiA3LjQuMS48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Q bGFpblRleHQiPiZndDsmZ3Q7PG86cD4mbmJzcDs8L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxh aW5UZXh0Ij4mZ3Q7Jmd0OyZuYnNwOyZuYnNwOyBGb3Igbm90aWZpY2F0aW9ucywgdGhlIElubmVy IE9ic2VydmUgdmFsdWUgTVVTVCBiZSBlbXB0eSAoc2VlPG86cD48L286cD48L3A+DQo8cCBjbGFz cz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7Jmd0OyZuYnNwOyZuYnNwOyBTZWN0aW9uIDMuMiBvZiBbUkZD NzI1Ml0pLiZuYnNwOyBUaGUgT3V0ZXIgT2JzZXJ2ZSBpbiBhIG5vdGlmaWNhdGlvbiBpczxvOnA+ PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0OyZndDs8bzpwPiZuYnNwOzwv bzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDsmZ3Q7U2VsYW5kZXIsIGV0IGFs LiZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyBFeHBpcmVzIEphbnVh cnkgMjcsIDIwMTkmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsgJm5ic3A7Jm5ic3A7Jm5i c3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7W1BhZ2UgMjBdPG86cD48L286 cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7Jmd0OzxvOnA+Jm5ic3A7PC9vOnA+ PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0OyZndDtJbnRlcm5ldC1EcmFmdCZuYnNw OyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZu YnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyBPU0NPUkUmbmJz cDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsm bmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJz cDsmbmJzcDsmbmJzcDsmbmJzcDsgSnVseSAyMDE4PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0i TXNvUGxhaW5UZXh0Ij4mZ3Q7Jmd0OzxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1z b1BsYWluVGV4dCI+Jmd0OyZndDsmbmJzcDsmbmJzcDsgbmVlZGVkIGZvciBpbnRlcm1lZGlhcnkg bm9kZXMgdG8gYWxsb3cgbXVsdGlwbGUgcmVzcG9uc2VzIHRvIG9uZTxvOnA+PC9vOnA+PC9wPg0K PHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0OyZndDsmbmJzcDsmbmJzcDsgcmVxdWVzdCwgYW5k IG1heSBiZSBzZXQgdG8gdGhlIHZhbHVlIG9mIE9ic2VydmUgaW4gdGhlIG9yaWdpbmFsIENvQVA8 bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDsmZ3Q7Jm5ic3A7Jm5i c3A7IG1lc3NhZ2UuJm5ic3A7IFRoZSBjbGllbnQgcGVyZm9ybXMgb3JkZXJpbmcgb2Ygbm90aWZp Y2F0aW9ucyBhbmQgcmVwbGF5PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0 Ij4mZ3Q7Jmd0OyZuYnNwOyZuYnNwOyBwcm90ZWN0aW9uIGJ5IGNvbXBhcmluZyB0aGVpciBQYXJ0 aWFsIElWcyBhbmQgU0hBTEwgaWdub3JlIHRoZSBvdXRlcjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xh c3M9Ik1zb1BsYWluVGV4dCI+Jmd0OyZndDsmbmJzcDsmbmJzcDsgT2JzZXJ2ZSB2YWx1ZS48bzpw PjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDsmZ3Q7PG86cD4mbmJzcDs8 L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7Jmd0OyZuYnNwOyZuYnNwOyBJ ZiB0aGUgY2xpZW50IHJlY2VpdmVzIGEgcmVzcG9uc2UgdG8gYW4gT2JzZXJ2ZSByZXF1ZXN0IHdp dGhvdXQgYW48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDsmZ3Q7 Jm5ic3A7Jm5ic3A7IElubmVyIE9ic2VydmUgb3B0aW9uLCB0aGVuIGl0IHZlcmlmaWVzIHRoZSBy ZXNwb25zZSBhcyBhIG5vbi1PYnNlcnZlPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxh aW5UZXh0Ij4mZ3Q7Jmd0OyZuYnNwOyZuYnNwOyByZXNwb25zZSwgYXMgc3BlY2lmaWVkIGluIFNl Y3Rpb24gOC40LiZuYnNwOyBJZiB0aGUgY2xpZW50IHJlY2VpdmVzIGE8bzpwPjwvbzpwPjwvcD4N CjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDsmZ3Q7Jm5ic3A7Jm5ic3A7IHJlc3BvbnNlIHRv IGEgbm9uLU9ic2VydmUgcmVxdWVzdCB3aXRoIGFuIElubmVyIE9ic2VydmUgb3B0aW9uLCB0aGVu PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7Jmd0OyZuYnNwOyZu YnNwOyBpdCBzdG9wcyBwcm9jZXNzaW5nIHRoZSBtZXNzYWdlLCBhcyBzcGVjaWZpZWQgaW4gU2Vj dGlvbiA4LjQuPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7Jmd0 OzxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0OyZndDsm bmJzcDsmbmJzcDsgQSBjbGllbnQgTVVTVCBjb25zaWRlciB0aGUgbm90aWZpY2F0aW9uIHdpdGgg dGhlIGhpZ2hlc3QgUGFydGlhbCBJVjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWlu VGV4dCI+Jmd0OyZndDsmbmJzcDsmbmJzcDsgYXMgdGhlIGZyZXNoZXN0LCByZWdhcmRsZXNzIG9m IHRoZSBvcmRlciBvZiBhcnJpdmFsLiZuYnNwOyBJbiBvcmRlciB0bzxvOnA+PC9vOnA+PC9wPg0K PHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0OyZndDsmbmJzcDsmbmJzcDsgc3VwcG9ydCBleGlz dGluZyBPYnNlcnZlIGltcGxlbWVudGF0aW9ucyB0aGUgT1NDT1JFIGNsaWVudDxvOnA+PC9vOnA+ PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0OyZndDsmbmJzcDsmbmJzcDsgaW1wbGVt ZW50YXRpb24gTUFZIHNldCB0aGUgT2JzZXJ2ZSB2YWx1ZSB0byB0aGUgdGhyZWUgbGVhc3Q8bzpw PjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDsmZ3Q7Jm5ic3A7Jm5ic3A7 IHNpZ25pZmljYW50IGJ5dGVzIG9mIHRoZSBQYXJ0aWFsIElWOyBzdWNoIGFuIGltcGxlbWVudGF0 aW9uIG5lZWRzIHRvPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7 Jmd0OyZuYnNwOyZuYnNwOyBtYWtlIHN1cmUgdGhhdCB0aGUgT2JzZXJ2ZSB2YWx1ZSBmb3IgYW4g b2JzZXJ2ZSBub3RpZmljYXRpb24gd2l0aG91dDxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1z b1BsYWluVGV4dCI+Jmd0OyZndDsmbmJzcDsmbmJzcDsgUGFydGlhbCBJViBpcyBzbWFsbGVyIHRo YW4gYSBub3RpZmljYXRpb24gd2l0aCBQYXJ0aWFsIElWLjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xh c3M9Ik1zb1BsYWluVGV4dCI+Jmd0OyZndDs8bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjxwIGNsYXNz PSJNc29QbGFpblRleHQiPiZndDsmZ3Q7Jmx0O21nbHQmZ3Q7PG86cD48L286cD48L3A+DQo8cCBj bGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7Jmd0O1RoaXMgc2VjdGlvbiBkaXNjdXNzIHRoZSBiZWhh dmlvciByZWdhcmRpbmcgdGhlIHNlcXVlbmNlIG51bWJlci4gV2hpbGUNCjxvOnA+PC9vOnA+PC9w Pg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0OyZndDt0aGU8bzpwPjwvbzpwPjwvcD4NCjxw IGNsYXNzPSJNc29QbGFpblRleHQiPiZndDsmZ3Q7c2VxdWVuY2UgbnVtYmVyIGFuZCB0aGUgcGFy dGlhbCBJViBoYXZlIHRoZSBzYW1lIHZhbHVlLCBJIGFtIHdvbmRlcmluZw0KPG86cD48L286cD48 L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7Jmd0O2lmIDxvOnA+PC9vOnA+PC9wPg0K PHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0OyZndDtpdDxvOnA+PC9vOnA+PC9wPg0KPHAgY2xh c3M9Ik1zb1BsYWluVGV4dCI+Jmd0OyZndDt3b3VsZCBub3QgYmUgbW9yZSBhcHByb3ByaWF0ZWQg dG8gbWVudGlvbiB0aGUgc2VxdWVuY2UgbnVtYmVyIHZhbHVlIGlzDQo8bzpwPjwvbzpwPjwvcD4N CjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDsmZ3Q7cHJvdmlkZWQ8bzpwPjwvbzpwPjwvcD4N CjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDsmZ3Q7YnkgdGhlIHBhcnRpYWwgSVYsIGFuZCB0 aGVuIHVzZSB0aGUgc2VxdWVuY2UgbnVtYmVyIHZhcmlhYmxlIHRvIGRlc2NyaWJlDQo8bzpwPjwv bzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDsmZ3Q7YW50aTxvOnA+PC9vOnA+ PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0OyZndDtyZXBsYXkuICZsdDsvbWdsdCZn dDs8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDs8bzpwPiZuYnNw OzwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDs8bzpwPiZuYnNwOzwvbzpw PjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDtbR1M6XSBXZSBpbnRlbmRlZCB0byB1 c2UgdGhlIHRlcm0g4oCccGFydGlhbCBJVuKAnSB3aGVuIHJlZmVycmluZyB0byB0aGUNCjxvOnA+ PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0O251bWJlciBiZWluZyB0cmFu c3BvcnRlZCBhbmQg4oCcU1NOJnF1b3Q7IHdoZW4gcmVmZXJyaW5nIHRvIHRoZSBudW1iZXIgc3Rv cmVkIGluDQo8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDt0aGUg ZW5kcG9pbnQuIEkgd2lsbCBnbyB0aHJvdWdoIHRoZSBkb2N1bWVudCBhbmQgc2VlIHRoYXQgdGhp cyBjb252ZW50aW9uDQo8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZn dDtpcyBrZXB0LjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0OyZn dDs8bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPjxzcGFuIHN0 eWxlPSJjb2xvcjpyZWQiPiZsdDttZ2x0MiZndDs8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBj bGFzcz0iTXNvUGxhaW5UZXh0Ij48c3BhbiBzdHlsZT0iY29sb3I6cmVkIj5NYXliZSB0aGF0IHdv dWxkIGJlIHVzZWZ1bCB0byBtZW50aW9uIHRoaXMgY29udmVudGlvbjxvOnA+PC9vOnA+PC9zcGFu PjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPjxzcGFuIHN0eWxlPSJjb2xvcjpyZWQiPiZs dDsvbWdsdDImZ3Q7PG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4 dCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7Jmd0 OzQuMS4zLjYuJm5ic3A7IE5vLVJlc3BvbnNlPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNv UGxhaW5UZXh0Ij4mZ3Q7Jmd0OzQuMS4zLjcuJm5ic3A7IE9TQ09SRTxvOnA+PC9vOnA+PC9wPg0K PHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0OyZndDs0LjIuJm5ic3A7IENvQVAgSGVhZGVyIEZp ZWxkcyBhbmQgUGF5bG9hZDxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+ Jmd0OyZndDs0LjMuJm5ic3A7IFNpZ25hbGluZyBNZXNzYWdlczxvOnA+PC9vOnA+PC9wPg0KPHAg Y2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0OyZndDs1LiZuYnNwOyBUaGUgQ09TRSBPYmplY3Q8bzpw PjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDsmZ3Q7NS4xLiZuYnNwOyBL aWQgQ29udGV4dDxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0OyZn dDs1LjIuJm5ic3A7IE5vbmNlPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0 Ij4mZ3Q7Jmd0OzUuMy4mbmJzcDsgUGxhaW50ZXh0PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0i TXNvUGxhaW5UZXh0Ij4mZ3Q7Jmd0OzUuNC4mbmJzcDsgQWRkaXRpb25hbCBBdXRoZW50aWNhdGVk IERhdGE8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDsmZ3Q7Ni4m bmJzcDsgT1NDT1JFIEhlYWRlciBDb21wcmVzc2lvbjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9 Ik1zb1BsYWluVGV4dCI+Jmd0OyZndDs2LjEuJm5ic3A7IEVuY29kaW5nIG9mIHRoZSBPU0NPUkUg T3B0aW9uIFZhbHVlPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7 Jmd0OzYuMi4mbmJzcDsgRW5jb2Rpbmcgb2YgdGhlIE9TQ09SRSBQYXlsb2FkPG86cD48L286cD48 L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7Jmd0OzYuMy4mbmJzcDsgRXhhbXBsZXMg b2YgQ29tcHJlc3NlZCBDT1NFIE9iamVjdHM8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Q bGFpblRleHQiPiZndDsmZ3Q7Ny4yLiZuYnNwOyBTZXF1ZW5jZSBOdW1iZXJzPG86cD48L286cD48 L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7Jmd0OzcuMi4xLiZuYnNwOyBNYXhpbXVt IFNlcXVlbmNlIE51bWJlcjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+ Jmd0OyZndDs3LjMuJm5ic3A7IEZyZXNobmVzczxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1z b1BsYWluVGV4dCI+Jmd0OyZndDs3LjQuJm5ic3A7IFJlcGxheSBQcm90ZWN0aW9uPG86cD48L286 cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7Jmd0OzxvOnA+Jm5ic3A7PC9vOnA+ PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0OyZndDsmbmJzcDsmbmJzcDsgSW4gb3Jk ZXIgdG8gcHJvdGVjdCBmcm9tIHJlcGxheSBvZiByZXF1ZXN0cywgdGhlIHNlcnZlcidzIFJlY2lw aWVudDxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0OyZndDsmbmJz cDsmbmJzcDsgQ29udGV4dCBpbmNsdWRlcyBhIFJlcGxheSBXaW5kb3cuJm5ic3A7IEEgc2VydmVy IFNIQUxMIHZlcmlmeSB0aGF0IGE8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRl eHQiPiZndDsmZ3Q7Jm5ic3A7Jm5ic3A7IFBhcnRpYWwgSVYgcmVjZWl2ZWQgaW4gdGhlIENPU0Ug b2JqZWN0IGhhcyBub3QgYmVlbiByZWNlaXZlZCBiZWZvcmUuPG86cD48L286cD48L3A+DQo8cCBj bGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7Jmd0OyZuYnNwOyZuYnNwOyBJZiB0aGlzIHZlcmlmaWNh dGlvbiBmYWlscyB0aGUgc2VydmVyIFNIQUxMIHN0b3AgcHJvY2Vzc2luZyB0aGU8bzpwPjwvbzpw PjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDsmZ3Q7Jm5ic3A7Jm5ic3A7IG1lc3Nh Z2UsIGFuZCBNQVkgb3B0aW9uYWxseSByZXNwb25kIHdpdGggYSA0LjAxIFVuYXV0aG9yaXplZCBl cnJvcjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0OyZndDsmbmJz cDsmbmJzcDsgbWVzc2FnZS4mbmJzcDsgQWxzbywgdGhlIHNlcnZlciBNQVkgc2V0IGFuIE91dGVy IE1heC1BZ2Ugb3B0aW9uIHdpdGggdmFsdWU8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Q bGFpblRleHQiPiZndDsmZ3Q7Jm5ic3A7Jm5ic3A7IHplcm8sIHRvIGluZm9ybSBhbnkgaW50ZXJt ZWRpYXJ5IHRoYXQgdGhlIHJlc3BvbnNlIGlzIG5vdCB0byBiZTxvOnA+PC9vOnA+PC9wPg0KPHAg Y2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0OyZndDsmbmJzcDsmbmJzcDsgY2FjaGVkLiZuYnNwOyBU aGUgZGlhZ25vc3RpYyBwYXlsb2FkIE1BWSBjb250YWluIHRoZSAmcXVvdDtSZXBsYXkgZGV0ZWN0 ZWQmcXVvdDs8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDsmZ3Q7 Jm5ic3A7Jm5ic3A7IHN0cmluZy4mbmJzcDsgVGhlIHNpemUgYW5kIHR5cGUgb2YgdGhlIFJlcGxh eSBXaW5kb3cgZGVwZW5kcyBvbiB0aGUgdXNlPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNv UGxhaW5UZXh0Ij4mZ3Q7Jmd0OyZuYnNwOyZuYnNwOyBjYXNlIGFuZCB0aGUgcHJvdG9jb2wgd2l0 aCB3aGljaCB0aGUgT1NDT1JFIG1lc3NhZ2UgaXMgdHJhbnNwb3J0ZWQuPG86cD48L286cD48L3A+ DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7Jmd0OyZuYnNwOyZuYnNwOyBJbiBjYXNlIG9m IHJlbGlhYmxlIGFuZCBvcmRlcmVkIHRyYW5zcG9ydCBmcm9tIGVuZHBvaW50IHRvIGVuZHBvaW50 LDxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0OyZndDsmbmJzcDsm bmJzcDsgZS5nLiZuYnNwOyBUQ1AsIHRoZSBzZXJ2ZXIgTUFZIGp1c3Qgc3RvcmUgdGhlIGxhc3Qg cmVjZWl2ZWQgUGFydGlhbCBJViBhbmQ8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFp blRleHQiPiZndDsmZ3Q7Jm5ic3A7Jm5ic3A7IHJlcXVpcmUgdGhhdCBuZXdseSByZWNlaXZlZCBQ YXJ0aWFsIElWcyBlcXVhbHMgdGhlIGxhc3QgcmVjZWl2ZWQ8bzpwPjwvbzpwPjwvcD4NCjxwIGNs YXNzPSJNc29QbGFpblRleHQiPiZndDsmZ3Q7Jm5ic3A7Jm5ic3A7IFBhcnRpYWwgSVYgJiM0Mzsg MS4mbmJzcDsgSG93ZXZlciwgaW4gY2FzZSBvZiBtaXhlZCByZWxpYWJsZSBhbmQgdW5yZWxpYWJs ZTxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0OyZndDsmbmJzcDsm bmJzcDsgdHJhbnNwb3J0cyBhbmQgd2hlcmUgbWVzc2FnZXMgbWF5IGJlIGxvc3QsIHN1Y2ggYSBy ZXBsYXkgbWVjaGFuaXNtPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4m Z3Q7Jmd0OzxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0 OyZndDtTZWxhbmRlciwgZXQgYWwuJm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7 Jm5ic3A7IEV4cGlyZXMgSmFudWFyeSAyNywgMjAxOSZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZu YnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNw OyBbUGFnZSAzM108bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDsm Z3Q7PG86cD4mbmJzcDs8L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7Jmd0 O0ludGVybmV0LURyYWZ0Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7 Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5i c3A7Jm5ic3A7IE9TQ09SRSZuYnNwOyZuYnNwOyAmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJz cDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsm bmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDtKdWx5IDIwMTg8bzpwPjwv bzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDsmZ3Q7PG86cD4mbmJzcDs8L286 cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7Jmd0OyZuYnNwOyZuYnNwOyBtYXkg YmUgdG9vIHJlc3RyaWN0aXZlIGFuZCB0aGUgZGVmYXVsdCByZXBsYXkgd2luZG93IGJlIG1vcmUg c3VpdGFibGU8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDsmZ3Q7 Jm5ic3A7Jm5ic3A7IChzZWUgU2VjdGlvbiAzLjIuMikuPG86cD48L286cD48L3A+DQo8cCBjbGFz cz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7Jmd0OyZsdDttZ2x0Jmd0OzxvOnA+PC9vOnA+PC9wPg0KPHAg Y2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0OyZndDtJIGFtIHJlYWRpbmcgdGhlIGFudGkgcmVwbGF5 IG1lY2hhbmlzbSB1c2VkIGFzIHZlcnkgc3BlY2lmaWMuDQo8bzpwPjwvbzpwPjwvcD4NCjxwIGNs YXNzPSJNc29QbGFpblRleHQiPiZndDsmZ3Q7SW5jcmVtZW50aW5nPG86cD48L286cD48L3A+DQo8 cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7Jmd0O1BhcnRpYWwgSVYgaXMgb25lIHdheSB0byBw ZXJmb3JtIGFudGktcmVwbGF5IHByb3RlY3Rpb24uIEl0IGNvdWxkIGJlIHRoZQ0KPG86cD48L286 cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7Jmd0O3dheTxvOnA+PC9vOnA+PC9w Pg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0OyZndDtPU0NPUkUgcGVyZm9ybXMgYW50aSBy ZXBsYXkgcHJvdGVjdGlvbiBidXQgdGhpcyBpcyBub3QgdGhlIG9ubHkgd2F5IHRvDQo8bzpwPjwv bzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDsmZ3Q7ZG8uIEluPG86cD48L286 cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7Jmd0O2FkZGl0aW9uLCBpbmNyZW1l bnRpbmcgdGhlIFBhcnRpYWwgSVYgcmVzdWx0IGluIHRoZSBJViBiZWluZw0KPG86cD48L286cD48 L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7Jmd0O3ByZWRpY3RpYmxlLiA8bzpwPjwv bzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDsmZ3Q7VGhpczxvOnA+PC9vOnA+ PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0OyZndDtjb25kaXRpb24gbWF5IG5vdCBi ZSBzdWZmaWNpZW50IGFzIHNvbWUgYWxnb3JpdGhtIG1heSByZXF1aXJlIHRoZSBJVg0KPG86cD48 L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7Jmd0O2JlaW5nPG86cD48L286 cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7Jmd0O3VucHJlZGljdGFibGUuIEkg YmVsaWV2ZSBBbnRpLVJlcGxheSBUeXBlIHNob3VkbCBiZSBjb25maWd1cmFibGUsIGFuZA0KPG86 cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7Jmd0O3NvbWUgbm90ZTxv OnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0OyZndDtzaG91ZGwgYmUg YWRkZWQgdG8gY29tcGx5IHdpdGggdGhlIGVuY3J5cHRpb24gYmVpbmcgdXNlZC4gJmx0Oy9tZ2x0 Jmd0OzxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0OzxvOnA+Jm5i c3A7PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0O1tHUzpdIFdlIGFyZSBt YWlubHkgY29uY2VybmVkIGFib3V0IGVuY3J5cHRpb24gYWxnb3JpdGhtcyBhbmQgcmVwbGF5DQo8 bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDttZWNoYW5pc21zIHRo YXQgYXJlIHN1aXRhYmxlIGZvciBJb1QgZGVwbG95bWVudHMgaW4gZ2VuZXJhbCBhbmQNCjxvOnA+ PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0O2NvbnN0cmFpbmVkIGVudmly b25tZW50cyBpbiBwYXJ0aWN1bGFyLiBQbGVhc2UgZ2l2ZSBhbiBleGFtcGxlIG9mIGENCjxvOnA+ PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0O3JlbGV2YW50IGFsZ29yaXRo bSB3aGVyZSB5b3UgdGhpbmsgdGhlIGN1cnJlbnQgc3BlY2lmaWNhdGlvbiBpcyB0b28NCjxvOnA+ PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0O3Jlc3RyaWN0aXZlLjxvOnA+ PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+PHNwYW4gc3R5bGU9ImNvbG9yOnJl ZCI+Jmx0O21nbHQyJmd0OzxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFp blRleHQiPjxzcGFuIHN0eWxlPSJjb2xvcjpyZWQiPklQc2VjIHR5cGljYWxseSBkb2VzIG5vdCBu ZWNlc3NhcmlseSBpbmNyZW1lbnQgdGhlIFNTTiwgYnV0IGhlcmUgeW91IGFyZSBmb2xsb3dpbmcg bWNncmV3LWl2LWdlbi4gSSBhcHByZWNpYXRlZCB0aGlzIGhhcyBiZWVuIGNsZWFybHkgYWRkZWQu IEkgYmVsaWV2ZSB0aGF0IGlzIGNsZWFyZXIg4oCTIGF0IGxlYXN0IHRvIG1lLg0KPG86cD48L286 cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+PHNwYW4gc3R5bGU9ImNvbG9y OnJlZCI+QUVTLUNCQyByZXF1aXJlcyB0aGUgSVYgdG8gYmUgdW5wcmVkaWN0YWJsZS4gSSBhcHBy ZWNpYXRlZCB5b3UgYWRkZWQgJm5ic3A7aW4gdGhlIHNlY3VyaXR5IGNvbnNpZGVyYXRpb24gdGhh dCB1bnByZWRpY3RhYmxlIElWIGFyZSBub3Qgc3VwcG9ydGVkIGJ5IHRoaXMgZHJhZnQuJmx0Oy9t Z2x0MiZndDs8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4m Z3Q7Jmd0OzxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0 OyZndDsmbmJzcDsmbmJzcDsgUmVzcG9uc2VzICh3aXRoIG9yIHdpdGhvdXQgUGFydGlhbCBJVikg YXJlIHByb3RlY3RlZCBhZ2FpbnN0IHJlcGxheTxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1z b1BsYWluVGV4dCI+Jmd0OyZndDsmbmJzcDsmbmJzcDsgYXMgdGhleSBhcmUgYm91bmQgdG8gdGhl IHJlcXVlc3QgYW5kIHRoZSBmYWN0IHRoYXQgb25seSBhIHNpbmdsZTxvOnA+PC9vOnA+PC9wPg0K PHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0OyZndDsmbmJzcDsmbmJzcDsgcmVzcG9uc2UgaXMg YWNjZXB0ZWQuJm5ic3A7IE5vdGUgdGhhdCB0aGUgUGFydGlhbCBJViBpcyBub3QgdXNlZCBmb3I8 bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDsmZ3Q7Jm5ic3A7Jm5i c3A7IHJlcGxheSBwcm90ZWN0aW9uIGluIHRoaXMgY2FzZS48bzpwPjwvbzpwPjwvcD4NCjxwIGNs YXNzPSJNc29QbGFpblRleHQiPiZndDsmZ3Q7PG86cD4mbmJzcDs8L286cD48L3A+DQo8cCBjbGFz cz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7Jmd0OyZuYnNwOyZuYnNwOyBUaGUgb3BlcmF0aW9uIG9mIHZh bGlkYXRpbmcgdGhlIFBhcnRpYWwgSVYgYW5kIHVwZGF0aW5nIHRoZSByZXBsYXk8bzpwPjwvbzpw PjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDsmZ3Q7Jm5ic3A7Jm5ic3A7IHByb3Rl Y3Rpb24gTVVTVCBiZSBhdG9taWMuPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5U ZXh0Ij4mZ3Q7Jmd0OzxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4 dCI+Jmd0OyZndDs3LjQuMS4mbmJzcDsgUmVwbGF5IFByb3RlY3Rpb24gb2YgTm90aWZpY2F0aW9u czxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0OyZndDs3LjUuJm5i c3A7IExvc2luZyBQYXJ0IG9mIHRoZSBDb250ZXh0IFN0YXRlPG86cD48L286cD48L3A+DQo8cCBj bGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7Jmd0OzxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPHAgY2xh c3M9Ik1zb1BsYWluVGV4dCI+Jmd0OyZndDsmbmJzcDsmbmJzcDsgVG8gcHJldmVudCByZXVzZSBv ZiBhbiBBRUFEIG5vbmNlIHdpdGggdGhlIHNhbWUga2V5LCBvciBmcm9tPG86cD48L286cD48L3A+ DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7Jmd0OyZuYnNwOyZuYnNwOyBhY2NlcHRpbmcg cmVwbGF5ZWQgbWVzc2FnZXMsIGFuIGVuZHBvaW50IG5lZWRzIHRvIGhhbmRsZSB0aGU8bzpwPjwv bzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDsmZ3Q7Jm5ic3A7Jm5ic3A7IHNp dHVhdGlvbiBvZiBsb3NpbmcgcmFwaWRseSBjaGFuZ2luZyBwYXJ0cyBvZiB0aGUgY29udGV4dCwg c3VjaCBhczxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0OyZndDsm bmJzcDsmbmJzcDsgdGhlIHJlcXVlc3QgVG9rZW4sIFNlbmRlciBTZXF1ZW5jZSBOdW1iZXIsIFJl cGxheSBXaW5kb3csIGFuZDxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+ Jmd0OyZndDsmbmJzcDsmbmJzcDsgTm90aWZpY2F0aW9uIE51bWJlcnMuJm5ic3A7IFRoZXNlIGFy ZSB0eXBpY2FsbHkgc3RvcmVkIGluIFJBTSBhbmQ8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJN c29QbGFpblRleHQiPiZndDsmZ3Q7Jm5ic3A7Jm5ic3A7IHRoZXJlZm9yZSBsb3N0IGluIHRoZSBj YXNlIG9mIGFuIHVucGxhbm5lZCByZWJvb3QuPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNv UGxhaW5UZXh0Ij4mZ3Q7Jmd0OzxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1Bs YWluVGV4dCI+Jmd0OyZndDsmbmJzcDsmbmJzcDsgQWZ0ZXIgYm9vdCwgYW4gZW5kcG9pbnQgY2Fu IGVpdGhlciB1c2UgYSBwZXJzaXN0ZW50bHkgc3RvcmVkIGNvbXBsZXRlPG86cD48L286cD48L3A+ DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7Jmd0OyZuYnNwOyZuYnNwOyBvciBwYXJ0aWFs IHNlY3VyaXR5IGNvbnRleHQsIG9yIGVzdGFibGlzaCBhIG5ldyBzZWN1cml0eSBjb250ZXh0IHdp dGg8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDsmZ3Q7Jm5ic3A7 Jm5ic3A7IGVhY2ggZW5kcG9pbnQgaXQgY29tbXVuaWNhdGVzIHdpdGguJm5ic3A7IEhvd2V2ZXIs IGVzdGFibGlzaGluZyBhIGZyZXNoPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5U ZXh0Ij4mZ3Q7Jmd0OyZuYnNwOyZuYnNwOyBzZWN1cml0eSBjb250ZXh0IG1heSBoYXZlIGEgbm9u LW5lZ2xpZ2libGUgY29zdCBpbiB0ZXJtcyBvZiwgZS5nLiw8bzpwPjwvbzpwPjwvcD4NCjxwIGNs YXNzPSJNc29QbGFpblRleHQiPiZndDsmZ3Q7Jm5ic3A7Jm5ic3A7IHBvd2VyIGNvbnN1bXB0aW9u LjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0OyZndDs8bzpwPiZu YnNwOzwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDsmZ3Q7Jm5ic3A7Jm5i c3A7IElmIHRoZSBlbmRwb2ludCB1c2VzIGEgcGVyc2lzdGVudGx5IHN0b3JlZCBwYXJ0aWFsIHNl Y3VyaXR5IGNvbnRleHQsPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4m Z3Q7Jmd0OyZuYnNwOyZuYnNwOyBpdCBNVVNUIE5PVCByZXVzZSBhIHByZXZpb3VzIFNlbmRlciBT ZXF1ZW5jZSBOdW1iZXIgYW5kIE1VU1QgTk9UPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNv UGxhaW5UZXh0Ij4mZ3Q7Jmd0OzxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1Bs YWluVGV4dCI+Jmd0OyZndDtTZWxhbmRlciwgZXQgYWwuJm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7 Jm5ic3A7Jm5ic3A7Jm5ic3A7IEV4cGlyZXMgSmFudWFyeSAyNywgMjAxOSZuYnNwOyZuYnNwOyZu YnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNw OyZuYnNwOyZuYnNwOyBbUGFnZSAzNF08bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFp blRleHQiPiZndDsmZ3Q7PG86cD4mbmJzcDs8L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5U ZXh0Ij4mZ3Q7Jmd0O0ludGVybmV0LURyYWZ0Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7 Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5i c3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7IE9TQ09SRSZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNw OyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZu YnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyBKdWx5 IDIwMTg8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDsmZ3Q7PG86 cD4mbmJzcDs8L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7Jmd0OyZuYnNw OyZuYnNwOyBhY2NlcHQgcHJldmlvdXNseSByZWNlaXZlZCBtZXNzYWdlcy4mbmJzcDsgU29tZSB3 YXlzIHRvIGFjaGlldmUgdGhpcyBhcmU8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFp blRleHQiPiZndDsmZ3Q7Jm5ic3A7Jm5ic3A7IGRlc2NyaWJlZCBpbiB0aGUgZm9sbG93aW5nIHNl Y3Rpb25zLjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0OyZndDs8 bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDsmZ3Q7Ny41 LjEuJm5ic3A7IFNlcXVlbmNlIE51bWJlcjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1Bs YWluVGV4dCI+Jmd0OyZndDs8bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFp blRleHQiPiZndDsmZ3Q7Jm5ic3A7Jm5ic3A7IFRvIHByZXZlbnQgcmV1c2Ugb2YgU2VuZGVyIFNl cXVlbmNlIE51bWJlcnMsIGFuIGVuZHBvaW50IG1heSBwZXJmb3JtPG86cD48L286cD48L3A+DQo8 cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7Jmd0OyZuYnNwOyZuYnNwOyB0aGUgZm9sbG93aW5n IHByb2NlZHVyZSBkdXJpbmcgbm9ybWFsIG9wZXJhdGlvbnM6PG86cD48L286cD48L3A+DQo8cCBj bGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7Jmd0OzxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPHAgY2xh c3M9Ik1zb1BsYWluVGV4dCI+Jmd0OyZndDsmbmJzcDsmbmJzcDsgbyZuYnNwOyBCZWZvcmUgdXNp bmcgYSBTZW5kZXIgU2VxdWVuY2UgTnVtYmVyIHRoYXQgaXMgZXZlbmx5IGRpdmlzaWJsZSBieTxv OnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0OyZndDsmbmJzcDsmbmJz cDsmbmJzcDsmbmJzcDsmbmJzcDsgSywgd2hlcmUgSyBpcyBhIHBvc2l0aXZlIGludGVnZXIsIHN0 b3JlIHRoZSBTZW5kZXIgU2VxdWVuY2UgTnVtYmVyPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0i TXNvUGxhaW5UZXh0Ij4mZ3Q7Jmd0OyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyBpbiBw ZXJzaXN0ZW50IG1lbW9yeS4mbmJzcDsgQWZ0ZXIgYm9vdCwgdGhlIGVuZHBvaW50IGluaXRpYXRl cyB0aGU8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDsmZ3Q7Jm5i c3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7IFNlbmRlciBTZXF1ZW5jZSBOdW1iZXIgdG8gdGhl IHZhbHVlIHN0b3JlZCBpbiBwZXJzaXN0ZW50IG1lbW9yeSAmIzQzOzxvOnA+PC9vOnA+PC9wPg0K PHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0OyZndDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsm bmJzcDsgSy4mbmJzcDsgU3RvcmluZyB0byBwZXJzaXN0ZW50IG1lbW9yeSBjYW4gYmUgY29zdGx5 LiZuYnNwOyBUaGUgdmFsdWUgSyBnaXZlczxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1Bs YWluVGV4dCI+Jmd0OyZndDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsgYSB0cmFkZS1v ZmYgYmV0d2VlbiB0aGUgbnVtYmVyIG9mIHN0b3JhZ2Ugb3BlcmF0aW9ucyBhbmQgZWZmaWNpZW50 PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7Jmd0OyZuYnNwOyZu YnNwOyZuYnNwOyZuYnNwOyZuYnNwOyB1c2Ugb2YgU2VuZGVyIFNlcXVlbmNlIE51bWJlcnMuPG86 cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7Jmd0OzxvOnA+Jm5ic3A7 PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0OyZndDsmbHQ7bWdsdCZndDs8 bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDsmZ3Q7SSBoYXZlIGhh cmQgdGltZSByZWFkaW5nIHRoZSBzZWN0aW9uIGFib3ZlLiBJIGd1ZXNzIEsgaXMgYSBwYXJhbWV0 ZXINCjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0OyZndDtrbm93 biBieTxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0OyZndDtPU0NP UkUuIE15IHVuZGVyc3RhbmRpbmcgaXMgdGhhdCBTU049MCAuLi4gSy0xIGFyZSBzdG9yZWQgaW4g cGVyc2lzdGVudA0KPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7 Jmd0O21lbW9yeS48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDsm Z3Q7QWZ0ZXIgYm9vdCBTU04gPSBTU04gJiM0MzsgSy48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNz PSJNc29QbGFpblRleHQiPiZndDsmZ3Q7PG86cD4mbmJzcDs8L286cD48L3A+DQo8cCBjbGFzcz0i TXNvUGxhaW5UZXh0Ij4mZ3Q7Jmd0O0kgbWlnaHQgYmUgd3JvbmcgYnV0IGFzIHN0b3JhZ2UgaW4g cGVyc2lzdGVudCBtZW1vcnkgaXMgY29zdGx5LiBHaXZlbiBLIGE8bzpwPjwvbzpwPjwvcD4NCjxw IGNsYXNzPSJNc29QbGFpblRleHQiPiZndDsmZ3Q7cGFyYW1ldGVyIGRlZmluZWQgYnkgdGhlIGlt cGxlbWVudGF0aW9uLiBJIHdvdWxkIHJhdGhlciBzdG9yZSBGID0NCjxvOnA+PC9vOnA+PC9wPg0K PHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0OyZndDtmbG9vcihTU04gLyBLPG86cD48L286cD48 L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7Jmd0OykuIFNTTiA9IEYuSyAmIzQzOyBz c24gd2l0aCBzc24gPSAwLi4uIEstMSwgc28gYSBzdG9yYWdlIG9wZXJhdGlvbiBoYXBwZW5zDQo8 bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDsmZ3Q7ZXZlcnkgSy48 bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDsmZ3Q7SW4gY2FzZSBv ZiByZWJvb3QsIFNTTiA9IChGICYjNDM7IDEpLksgJiM0Mzsgc3NuLjxvOnA+PC9vOnA+PC9wPg0K PHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0OyZndDs8bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjxw IGNsYXNzPSJNc29QbGFpblRleHQiPiZndDsmZ3Q7VGhpcyBlbmRzIGluIGEganVtcCBvZiBtYXhp bXVtIEsgYW5kIGFudGkgcmVwbGF5IG11c3QgYmUgYWJsZSB0byBoYW5kbGUNCjxvOnA+PC9vOnA+ PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0OyZndDt0aGlzLjxvOnA+PC9vOnA+PC9w Pg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0OyZndDsmbHQ7L21nbHQmZ3Q7PG86cD48L286 cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7PG86cD4mbmJzcDs8L286cD48L3A+ DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7W0dTOl0gSyBpcyBhIHRoZSBwYXJhbWV0ZXIg ZGV0ZXJtaW5pbmcgaG93IG9mdGVuIHlvdSBuZWVkIHRvIHN0b3JlIHRvDQo8bzpwPjwvbzpwPjwv cD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDtwZXJzaXN0ZW50IG1lbW9yeSwgYW5kIGhv dyBtYW55IHNlcXVlbmNlIG51bWJlcnMgeW91IG1heSDigJxsb3Nl4oCdIGluIGNhc2UNCjxvOnA+ PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0O29mIDxvOnA+PC9vOnA+PC9w Pg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0O3JlYm9vdC4gT25seSBvbmUgU1NOIGlzIHN0 b3JlZCBpbiBwZXJzaXN0ZW50IG1lbW9yeSwgYW5kIHRoYXQgbnVtYmVyIGlzDQo8bzpwPjwvbzpw PjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDtiZWluZyBvdmVyd3JpdHRlbiB3aGVu IGEgbmV3IG11bHRpcGxlIG9mIEsgaXMgcmVhY2hlZC4gQWZ0ZXIgcmVib290LCB0aGUNCjxvOnA+ PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0O3NlcXVlbmNlIG51bWJlciBp cyBzZXQgdG8gU1NOICYjNDM7IEsgdG8gcHJldmVudCB1c2Ugb2YgYW55IG51bWJlciBiZXR3ZWVu DQo8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDt0aGUgPG86cD48 L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7bGFzdCBzdG9yZWQgU1NOIGFu ZCB0aGUgbmV4dCBtdWx0aXBsZSBvZiBLLiBJcyB0aGlzIG1vcmUgY2xlYXI6PG86cD48L286cD48 L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7T0xEPG86cD48L286cD48L3A+DQo8cCBj bGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7Jm5ic3A7Jm5ic3A7IG8gQmVmb3JlIHVzaW5nIGEgU2Vu ZGVyIFNlcXVlbmNlIE51bWJlciB0aGF0IGlzIGV2ZW5seSBkaXZpc2libGUgYnk8bzpwPjwvbzpw PjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJz cDsmbmJzcDsgSywgd2hlcmUgSyBpcyBhIHBvc2l0aXZlIGludGVnZXIsIHN0b3JlIHRoZSBTZW5k ZXIgU2VxdWVuY2UgTnVtYmVyPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0 Ij4mZ3Q7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7IGluIHBlcnNpc3RlbnQgbWVtb3J5 LjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0O05FVzxvOnA+PC9v OnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0OyZuYnNwOyZuYnNwOyBvJm5ic3A7 IEJlZm9yZSB1c2luZyBhIFNlbmRlciBTZXF1ZW5jZSBOdW1iZXIgdGhhdCBpcyBldmVubHkgZGl2 aXNpYmxlIGJ5PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7Jm5i c3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7IEssIHdoZXJlIEsgaXMgYSBwb3NpdGl2ZSBpbnRl Z2VyLCBzdG9yZS9vdmVyd3JpdGUgdGhlIFNlbmRlcg0KPG86cD48L286cD48L3A+DQo8cCBjbGFz cz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7U2VxdWVuY2UgTnVtYmVyPG86cD48L286cD48L3A+DQo8cCBj bGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7IGlu IHBlcnNpc3RlbnQgbWVtb3J5LjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4 dCI+Jmd0OzxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+PHNw YW4gc3R5bGU9ImNvbG9yOnJlZCI+Jmx0O21nbHQyJmd0OzxvOnA+PC9vOnA+PC9zcGFuPjwvcD4N CjxwIGNsYXNzPSJNc29QbGFpblRleHQiPjxzcGFuIHN0eWxlPSJjb2xvcjpyZWQiPk9LIEkgZ290 IGl0LiA8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij48c3Bh biBzdHlsZT0iY29sb3I6cmVkIj4mbHQ7L21nbHQyJmd0OzxvOnA+PC9vOnA+PC9zcGFuPjwvcD4N CjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDs8bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjxwIGNs YXNzPSJNc29QbGFpblRleHQiPiZndDs8bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjxwIGNsYXNzPSJN c29QbGFpblRleHQiPiZndDs8bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFp blRleHQiPiZndDsmZ3Q7PG86cD4mbmJzcDs8L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5U ZXh0Ij4mZ3Q7Jmd0OzcuNS4yLiZuYnNwOyBSZXBsYXkgV2luZG93PG86cD48L286cD48L3A+DQo8 cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7Jmd0OzcuNS4zLiZuYnNwOyBSZXBsYXkgb2YgTm90 aWZpY2F0aW9uczxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0OyZn dDs4LiZuYnNwOyBQcm9jZXNzaW5nPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5U ZXh0Ij4mZ3Q7Jmd0OzxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4 dCI+Jmd0OyZndDsmbmJzcDsmbmJzcDsgVGhpcyBzZWN0aW9uIGRlc2NyaWJlcyB0aGUgT1NDT1JF IG1lc3NhZ2UgcHJvY2Vzc2luZy4mbmJzcDsgQWRkaXRpb25hbDxvOnA+PC9vOnA+PC9wPg0KPHAg Y2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0OyZndDsmbmJzcDsmbmJzcDsgcHJvY2Vzc2luZyBmb3Ig T2JzZXJ2ZSBvciBCbG9jay13aXNlIGFyZSBkZXNjcmliZWQgaW4gc3Vic2VjdGlvbnMuPG86cD48 L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7Jmd0OzxvOnA+Jm5ic3A7PC9v OnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0OyZndDsmbmJzcDsmbmJzcDsgTm90 ZSB0aGF0LCBhbmFsb2dvdXNseSB0byBbUkZDNzI1Ml0gd2hlcmUgdGhlIFRva2VuIGFuZCBzb3Vy Y2UvPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7Jmd0OyZuYnNw OyZuYnNwOyBkZXN0aW5hdGlvbiBwYWlyIGFyZSB1c2VkIHRvIG1hdGNoIGEgcmVzcG9uc2Ugd2l0 aCBhIHJlcXVlc3QsIGJvdGg8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQi PiZndDsmZ3Q7Jm5ic3A7Jm5ic3A7IGVuZHBvaW50cyBNVVNUIGtlZXAgdGhlIGFzc29jaWF0aW9u IChUb2tlbiwge1NlY3VyaXR5IENvbnRleHQsPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNv UGxhaW5UZXh0Ij4mZ3Q7Jmd0OzxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1Bs YWluVGV4dCI+Jmd0OyZndDtTZWxhbmRlciwgZXQgYWwuJm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7 Jm5ic3A7Jm5ic3A7Jm5ic3A7IEV4cGlyZXMgSmFudWFyeSAyNywgMjAxOSZuYnNwOyZuYnNwOyZu YnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNw OyZuYnNwOyZuYnNwOyBbUGFnZSAzNV08bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFp blRleHQiPiZndDsmZ3Q7PG86cD4mbmJzcDs8L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5U ZXh0Ij4mZ3Q7Jmd0O0ludGVybmV0LURyYWZ0Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7 Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5i c3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7IE9TQ09SRSZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNw OyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZu YnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyAmbmJzcDsmbmJzcDsmbmJzcDtKdWx5 IDIwMTg8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDsmZ3Q7PG86 cD4mbmJzcDs8L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7Jmd0OyZuYnNw OyZuYnNwOyBQYXJ0aWFsIElWIG9mIHRoZSByZXF1ZXN0fSksIGluIG9yZGVyIHRvIGJlIGFibGUg dG8gZmluZCB0aGUgU2VjdXJpdHk8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRl eHQiPiZndDsmZ3Q7Jm5ic3A7Jm5ic3A7IENvbnRleHQgYW5kIGNvbXB1dGUgdGhlIEFBRCB0byBw cm90ZWN0IG9yIHZlcmlmeSB0aGUgcmVzcG9uc2UuJm5ic3A7IFRoZTxvOnA+PC9vOnA+PC9wPg0K PHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0OyZndDsmbmJzcDsmbmJzcDsgYXNzb2NpYXRpb24g TUFZIGJlIGZvcmdvdHRlbiBhZnRlciBpdCBoYXMgYmVlbiB1c2VkIHRvIHN1Y2Nlc3NmdWxseTxv OnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0OyZndDsmbmJzcDsmbmJz cDsgcHJvdGVjdCBvciB2ZXJpZnkgdGhlIHJlc3BvbnNlLCB3aXRoIHRoZSBleGNlcHRpb24gb2Yg T2JzZXJ2ZTxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0OyZndDsm bmJzcDsmbmJzcDsgcHJvY2Vzc2luZywgd2hlcmUgdGhlIGFzc29jaWF0aW9uIE1VU1QgYmUga2Vw dCBhcyBsb25nIGFzIHRoZTxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+ Jmd0OyZndDsmbmJzcDsmbmJzcDsgT2JzZXJ2YXRpb24gaXMgYWN0aXZlLjxvOnA+PC9vOnA+PC9w Pg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0OyZndDs8bzpwPiZuYnNwOzwvbzpwPjwvcD4N CjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDsmZ3Q7OC4xLiZuYnNwOyBQcm90ZWN0aW5nIHRo ZSBSZXF1ZXN0PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7Jmd0 OzxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0OyZndDsm bmJzcDsmbmJzcDsgR2l2ZW4gYSBDb0FQIHJlcXVlc3QsIHRoZSBjbGllbnQgU0hBTEwgcGVyZm9y bSB0aGUgZm9sbG93aW5nIHN0ZXBzIHRvPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxh aW5UZXh0Ij4mZ3Q7Jmd0OyZuYnNwOyZuYnNwOyBjcmVhdGUgYW4gT1NDT1JFIHJlcXVlc3Q6PG86 cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7Jmd0OzxvOnA+Jm5ic3A7 PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0OyZndDsmbmJzcDsmbmJzcDsg MS4mbmJzcDsgUmV0cmlldmUgdGhlIFNlbmRlciBDb250ZXh0IGFzc29jaWF0ZWQgd2l0aCB0aGUg dGFyZ2V0IHJlc291cmNlLjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+ Jmd0OyZndDs8bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZn dDsmZ3Q7Jm5ic3A7Jm5ic3A7IDIuJm5ic3A7IENvbXBvc2UgdGhlIEFkZGl0aW9uYWwgQXV0aGVu dGljYXRlZCBEYXRhIGFuZCB0aGUgcGxhaW50ZXh0LCBhczxvOnA+PC9vOnA+PC9wPg0KPHAgY2xh c3M9Ik1zb1BsYWluVGV4dCI+Jmd0OyZndDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsm bmJzcDsgZGVzY3JpYmVkIGluIFNlY3Rpb25zIDUuMyBhbmQgNS40LjxvOnA+PC9vOnA+PC9wPg0K PHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0OyZndDs8bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjxw IGNsYXNzPSJNc29QbGFpblRleHQiPiZndDsmZ3Q7Jm5ic3A7Jm5ic3A7IDMuJm5ic3A7IEVuY29k ZSB0aGUgUGFydGlhbCBJViAoU2VuZGVyIFNlcXVlbmNlIE51bWJlciBpbiBuZXR3b3JrIGJ5dGU8 bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDsmZ3Q7Jm5ic3A7Jm5i c3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7IG9yZGVyKSBhbmQgaW5jcmVtZW50IHRoZSBTZW5k ZXIgU2VxdWVuY2UgTnVtYmVyIGJ5IG9uZS48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Q bGFpblRleHQiPiZndDsmZ3Q7Jmx0O21nbHQmZ3Q7PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0i TXNvUGxhaW5UZXh0Ij4mZ3Q7Jmd0O0kgYmVsaWV2ZSB0aGlzIGRlcGVuZHMgb24gdGhlIEFudGkt cmVwbGF5IHR5cGUuPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7 Jmd0OyZsdDsvbWdsdCZndDs8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQi PiZndDs8bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDtb R1M6XSBBcyBtZW50aW9uZWQgYWJvdmUsIHVudGlsIGl0IGlzIGRlbW9uc3RyYXRlZCB0byBiZSBh IHRvbw0KPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7cmVzdHJp Y3RpdmUgPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7YXNzdW1w dGlvbiBJIHdvdWxkIGxpa2UgdG8gYXNzdW1lIHRoYXQgdGhlIHNlcXVlbnRpYWwgaW5jcmVtZW50 IG9mDQo8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDtQYXJ0aWFs IElWL1NTTiBpcyA8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDtz dWZmaWNpZW50IGZvciB0aGUgcmVsZXZhbnQgZW5jcnlwdGlvbiBhbGdvcml0aG0gYW5kIHJlcGxh eSBwcm90ZWN0aW9uDQo8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZn dDttZWNoYW5pc20gaW4gdXNlLjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4 dCI+PHNwYW4gc3R5bGU9ImNvbG9yOnJlZCI+Jmx0O21nbHQyJmd0OzxvOnA+PC9vOnA+PC9zcGFu PjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPjxzcGFuIHN0eWxlPSJjb2xvcjpyZWQiPkkg YmVsaWV2ZSB0aGF0IGlzIGZpbmUuIE1heWJlIHdoZW4gSSByZWFkIHRoZSBkcmFmdCBJIGhhZCB0 aGUgaW1wcmVzc2lvbiB3ZSB3ZXJlIHdpbGxpbmcgdG8gYmUgYWJsZSB0byBleHRlbmQgdGhpcy4g SSBkbyBub3QgdGhpbmsgdGhhdCBpcyBuZWNlc3NhcnkuDQo8bzpwPjwvbzpwPjwvc3Bhbj48L3A+ DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij48c3BhbiBzdHlsZT0iY29sb3I6cmVkIj4mbHQ7L21n bHQyJmd0OzxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZn dDs8bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDsmZ3Q7 Jm5ic3A7IENvbXB1dGU8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZn dDsmZ3Q7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7IHRoZSBBRUFEIG5vbmNl IGZyb20gdGhlIFNlbmRlciBJRCwgQ29tbW9uIElWLCBhbmQgUGFydGlhbCBJViBhczxvOnA+PC9v OnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0OyZndDsmbmJzcDsmbmJzcDsmbmJz cDsmbmJzcDsmbmJzcDsmbmJzcDsgZGVzY3JpYmVkIGluIFNlY3Rpb24gNS4yLjxvOnA+PC9vOnA+ PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0OyZndDs8bzpwPiZuYnNwOzwvbzpwPjwv cD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDsmZ3Q7Jm5ic3A7Jm5ic3A7IDQuJm5ic3A7 IEVuY3J5cHQgdGhlIENPU0Ugb2JqZWN0IHVzaW5nIHRoZSBTZW5kZXIgS2V5LiBDb21wcmVzcyB0 aGUgQ09TRTxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0OyZndDsm bmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsgT2JqZWN0IGFzIHNwZWNpZmllZCBp biBTZWN0aW9uIDYuPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7 Jmd0OzxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0OyZn dDsmbmJzcDsmbmJzcDsgNS4mbmJzcDsgRm9ybWF0IHRoZSBPU0NPUkUgbWVzc2FnZSBhY2NvcmRp bmcgdG8gU2VjdGlvbiA0LiZuYnNwOyBUaGUgT1NDT1JFPG86cD48L286cD48L3A+DQo8cCBjbGFz cz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7Jmd0OyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZu YnNwOyBvcHRpb24gaXMgYWRkZWQgKHNlZSBTZWN0aW9uIDQuMS4yKS48bzpwPjwvbzpwPjwvcD4N CjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDsmZ3Q7PG86cD4mbmJzcDs8L286cD48L3A+DQo8 cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7Jmd0OzguMi4mbmJzcDsgVmVyaWZ5aW5nIHRoZSBS ZXF1ZXN0PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7Jmd0Ozxv OnA+Jm5ic3A7PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0OyZndDsmbmJz cDsmbmJzcDsgQSBzZXJ2ZXIgcmVjZWl2aW5nIGEgcmVxdWVzdCBjb250YWluaW5nIHRoZSBPU0NP UkUgb3B0aW9uIFNIQUxMPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4m Z3Q7Jmd0OyZuYnNwOyZuYnNwOyBwZXJmb3JtIHRoZSBmb2xsb3dpbmcgc3RlcHM6PG86cD48L286 cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7Jmd0OzxvOnA+Jm5ic3A7PC9vOnA+ PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0OyZndDsmbmJzcDsmbmJzcDsgMS4mbmJz cDsgRGlzY2FyZCBDb2RlIGFuZCBhbGwgY2xhc3MgRSBvcHRpb25zIChtYXJrZWQgaW4gRmlndXJl IDUgd2l0aCAneCc8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDsm Z3Q7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7IGluIGNvbHVtbiBFKSBwcmVz ZW50IGluIHRoZSByZWNlaXZlZCBtZXNzYWdlLiZuYnNwOyBGb3IgZXhhbXBsZSwgYW48bzpwPjwv bzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDsmZ3Q7Jm5ic3A7Jm5ic3A7Jm5i c3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7IElmLU1hdGNoIE91dGVyIG9wdGlvbiBpcyBkaXNjYXJkZWQs IGJ1dCBhbiBVcmktSG9zdCBPdXRlciBvcHRpb248bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJN c29QbGFpblRleHQiPiZndDsmZ3Q7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7 IGlzIG5vdCBkaXNjYXJkZWQuPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0 Ij4mZ3Q7Jmd0OzxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+ Jmd0OyZndDsmbmJzcDsmbmJzcDsgMi4mbmJzcDsgRGVjb21wcmVzcyB0aGUgQ09TRSBPYmplY3Qg KFNlY3Rpb24gNikgYW5kIHJldHJpZXZlIHRoZSBSZWNpcGllbnQ8bzpwPjwvbzpwPjwvcD4NCjxw IGNsYXNzPSJNc29QbGFpblRleHQiPiZndDsmZ3Q7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5i c3A7Jm5ic3A7IENvbnRleHQgYXNzb2NpYXRlZCB3aXRoIHRoZSBSZWNpcGllbnQgSUQgaW4gdGhl ICdraWQnIHBhcmFtZXRlciw8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQi PiZndDsmZ3Q7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7IGFkZGl0aW9uYWxs eSB1c2luZyB0aGUgJ2tpZCBjb250ZXh0JywgaWYgcHJlc2VudC4mbmJzcDsgSWYgZWl0aGVyIHRo ZTxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0OyZndDsmbmJzcDsm bmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsgZGVjb21wcmVzc2lvbiBvciB0aGUgQ09TRSBt ZXNzYWdlIGZhaWxzIHRvIGRlY29kZSwgb3IgdGhlIHNlcnZlcjxvOnA+PC9vOnA+PC9wPg0KPHAg Y2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0OyZndDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJz cDsmbmJzcDsgZmFpbHMgdG8gcmV0cmlldmUgYSBSZWNpcGllbnQgQ29udGV4dCB3aXRoIFJlY2lw aWVudCBJRDxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0OyZndDsm bmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsgY29ycmVzcG9uZGluZyB0byB0aGUg J2tpZCcgcGFyYW1ldGVyIHJlY2VpdmVkLCB0aGVuIHRoZSBzZXJ2ZXI8bzpwPjwvbzpwPjwvcD4N CjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDsmZ3Q7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7 Jm5ic3A7Jm5ic3A7IFNIQUxMIHN0b3AgcHJvY2Vzc2luZyB0aGUgcmVxdWVzdC48bzpwPjwvbzpw PjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDsmZ3Q7PG86cD4mbmJzcDs8L286cD48 L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7Jmd0OyZuYnNwOyZuYnNwOyZuYnNwOyZu YnNwOyZuYnNwOyZuYnNwOyAqJm5ic3A7IElmIGVpdGhlciB0aGUgZGVjb21wcmVzc2lvbiBvciB0 aGUgQ09TRSBtZXNzYWdlIGZhaWxzIHRvPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxh aW5UZXh0Ij4mZ3Q7Jmd0OyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNw OyZuYnNwOyZuYnNwOyBkZWNvZGUsIHRoZSBzZXJ2ZXIgTUFZIHJlc3BvbmQgd2l0aCBhIDQuMDIg QmFkIE9wdGlvbiBlcnJvcjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+ Jmd0OyZndDs8bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZn dDsmZ3Q7U2VsYW5kZXIsIGV0IGFsLiZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNw OyZuYnNwOyBFeHBpcmVzIEphbnVhcnkgMjcsIDIwMTkmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsm bmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJz cDsgW1BhZ2UgMzZdPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7 Jmd0OzxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0OyZn dDtJbnRlcm5ldC1EcmFmdCZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNw OyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZu YnNwOyZuYnNwOyBPU0NPUkUmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJz cDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsm bmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsgSnVseSAyMDE4PG86cD48 L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7Jmd0OzxvOnA+Jm5ic3A7PC9v OnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0OyZndDsmbmJzcDsmbmJzcDsmbmJz cDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsgbWVzc2FnZS4mbmJzcDsgVGhl IHNlcnZlciBNQVkgc2V0IGFuIE91dGVyIE1heC1BZ2Ugb3B0aW9uIHdpdGg8bzpwPjwvbzpwPjwv cD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDsmZ3Q7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5i c3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7IHZhbHVlIHplcm8uJm5ic3A7IFRoZSBk aWFnbm9zdGljIHBheWxvYWQgU0hPVUxEIGNvbnRhaW4gdGhlIHN0cmluZzxvOnA+PC9vOnA+PC9w Pg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0OyZndDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJz cDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsgJnF1b3Q7RmFpbGVkIHRvIGRlY29kZSBD T1NFJnF1b3Q7LjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0OyZn dDs8bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDsmZ3Q7 Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7ICombmJzcDsgSWYgdGhlIHNlcnZl ciBmYWlscyB0byByZXRyaWV2ZSBhIFJlY2lwaWVudCBDb250ZXh0IHdpdGg8bzpwPjwvbzpwPjwv cD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDsmZ3Q7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5i c3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7IFJlY2lwaWVudCBJRCBjb3JyZXNwb25k aW5nIHRvIHRoZSAna2lkJyBwYXJhbWV0ZXIgcmVjZWl2ZWQsPG86cD48L286cD48L3A+DQo8cCBj bGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7Jmd0OyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNw OyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyB0aGUgc2VydmVyIE1BWSByZXNwb25kIHdpdGggYSA0 LjAxIFVuYXV0aG9yaXplZCBlcnJvciBtZXNzYWdlLjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9 Ik1zb1BsYWluVGV4dCI+Jmd0OyZndDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJz cDsmbmJzcDsmbmJzcDsmbmJzcDsgVGhlIHNlcnZlciBNQVkgc2V0IGFuIE91dGVyIE1heC1BZ2Ug b3B0aW9uIHdpdGggdmFsdWUgemVyby48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFp blRleHQiPiZndDsmZ3Q7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7 Jm5ic3A7Jm5ic3A7IFRoZSBkaWFnbm9zdGljIHBheWxvYWQgU0hPVUxEIGNvbnRhaW4gdGhlIHN0 cmluZyAmcXVvdDtTZWN1cml0eTxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4 dCI+Jmd0OyZndDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJz cDsmbmJzcDsgY29udGV4dCBub3QgZm91bmQmcXVvdDsuPG86cD48L286cD48L3A+DQo8cCBjbGFz cz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7Jmd0OzxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPHAgY2xhc3M9 Ik1zb1BsYWluVGV4dCI+Jmd0OyZndDsmbmJzcDsmbmJzcDsgMy4mbmJzcDsgVmVyaWZ5IHRoZSAn UGFydGlhbCBJVicgcGFyYW1ldGVyIHVzaW5nIHRoZSBSZXBsYXkgV2luZG93LCBhczxvOnA+PC9v OnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0OyZndDsmbmJzcDsmbmJzcDsmbmJz cDsmbmJzcDsmbmJzcDsmbmJzcDsgZGVzY3JpYmVkIGluIFNlY3Rpb24gNy40LjxvOnA+PC9vOnA+ PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0OyZndDsmbHQ7bWdsdCZndDs8bzpwPjwv bzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDsmZ3Q7TXkgdW5kZXJzdGFuZGlu ZyBpcyB0aGF0IHRoZSBQYXJ0aWFsIElWIHZhbHVlIGhhcyBub3QgYmVlbg0KPG86cD48L286cD48 L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7Jmd0O2F1dGhlbnRpY2F0ZWQuIDxvOnA+ PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0OyZndDtUaHVzPG86cD48L286 cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7Jmd0O0kgYmVsaWV2ZSB0aGlzIHN0 ZXAgbW9zdGx5IGNvbnNpc3RzIGluIGRpc2NhcmRpbmcgcGFja2V0cyB3aXRoIGlycmVsZXZhbnQ8 bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDsmZ3Q7UGFydGlhbCBJ ViB2YWx1ZXMuIEhlcmUgaXJyZWxldmFudCBhcmUgbGltaXRlZCB0byByZXBlYXRlZCBzZXF1ZW5j ZQ0KPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7Jmd0O251bWJl cnM8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDsmZ3Q7dGhhdCBp cyB0b28gc2F5IGtub3duIHJlcGxheWVkIHBhY2tldHMuICZsdDttZ2x0Jmd0OzxvOnA+PC9vOnA+ PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0OzxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0K PHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0O1tHUzpdIFRoZSB0ZXJtIOKAnHZlcmlmeeKAnSBy ZWZlcnMgdG8gdGhlIHRleHQgaW4gPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5U ZXh0Ij4mZ3Q7c2VjdGlvbiA3LjQgJnF1b3Q7dmVyaWZ5IHRoYXQgYSBQYXJ0aWFsIElWIHJlY2Vp dmVkIGluIHRoZSBDT1NFIG9iamVjdCBoYXMgbm90DQo8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNz PSJNc29QbGFpblRleHQiPiZndDtiZWVuIHJlY2VpdmVkIGJlZm9yZS7igJ0gV2UgY2FuIGNvcHkg b3ZlciB0aGF0IHRleHQgdG8gYXZvaWQNCjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1Bs YWluVGV4dCI+Jmd0O21pc3VuZGVyc3RhbmRpbmc6PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0i TXNvUGxhaW5UZXh0Ij4mZ3Q7T0xEPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5U ZXh0Ij4mZ3Q7My4gVmVyaWZ5IHRoZSAnUGFydGlhbCBJVicgcGFyYW1ldGVyIHVzaW5nIHRoZSBS ZXBsYXkgV2luZG93LCBhczxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+ Jmd0O2Rlc2NyaWJlZCBpbiBTZWN0aW9uIDcuNC48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJN c29QbGFpblRleHQiPiZndDtORVc8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRl eHQiPiZndDszLiZuYnNwOyBWZXJpZnkgdGhhdCB0aGUgJ1BhcnRpYWwgSVbigJkgaGFzIG5vdCBi ZWVuIHJlY2VpdmVkIGJlZm9yZSB1c2luZyB0aGUNCjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9 Ik1zb1BsYWluVGV4dCI+Jmd0O1JlcGxheSBXaW5kb3csIGFzIGRlc2NyaWJlZCBpbiBTZWN0aW9u IDcuNC48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDs8bzpwPiZu YnNwOzwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDs8bzpwPiZuYnNwOzwv bzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPjxzcGFuIHN0eWxlPSJjb2xvcjpyZWQi PiZsdDttZ2x0MiZndDs8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5U ZXh0Ij48c3BhbiBzdHlsZT0iY29sb3I6cmVkIj5PSyB0aGFua3MuPG86cD48L286cD48L3NwYW4+ PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+PHNwYW4gc3R5bGU9ImNvbG9yOnJlZCI+Jmx0 Oy9tZ2x0MiZndDs8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0 Ij48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDsmZ3Q7 PG86cD4mbmJzcDs8L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7Jmd0OyZu YnNwOyZuYnNwOyA0LiZuYnNwOyBDb21wb3NlIHRoZSBBZGRpdGlvbmFsIEF1dGhlbnRpY2F0ZWQg RGF0YSwgYXMgZGVzY3JpYmVkIGluPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5U ZXh0Ij4mZ3Q7Jmd0OyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyBTZWN0aW9u IDUuNC48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDsmZ3Q7PG86 cD4mbmJzcDs8L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7Jmd0OyZuYnNw OyZuYnNwOyA1LiZuYnNwOyBDb21wdXRlIHRoZSBBRUFEIG5vbmNlIGZyb20gdGhlIFJlY2lwaWVu dCBJRCwgQ29tbW9uIElWLCBhbmQgdGhlPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxh aW5UZXh0Ij4mZ3Q7Jmd0OyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyAnUGFy dGlhbCBJVicgcGFyYW1ldGVyLCByZWNlaXZlZCBpbiB0aGUgQ09TRSBPYmplY3QuPG86cD48L286 cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7Jmd0OzxvOnA+Jm5ic3A7PC9vOnA+ PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0OyZndDsmbmJzcDsmbmJzcDsgNi4mbmJz cDsgRGVjcnlwdCB0aGUgQ09TRSBvYmplY3QgdXNpbmcgdGhlIFJlY2lwaWVudCBLZXksIGFzIHBl ciBbUkZDODE1Ml08bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDsm Z3Q7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7IFNlY3Rpb24gNS4zLiZuYnNw OyAoVGhlIGRlY3J5cHQgb3BlcmF0aW9uIGluY2x1ZGVzIHRoZSB2ZXJpZmljYXRpb24gb2Y8bzpw PjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDsmZ3Q7Jm5ic3A7Jm5ic3A7 Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7IHRoZSBpbnRlZ3JpdHkuKTxvOnA+PC9vOnA+PC9wPg0K PHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0OyZndDs8bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjxw IGNsYXNzPSJNc29QbGFpblRleHQiPiZndDsmZ3Q7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5i c3A7Jm5ic3A7ICombmJzcDsgSWYgZGVjcnlwdGlvbiBmYWlscywgdGhlIHNlcnZlciBNVVNUIHN0 b3AgcHJvY2Vzc2luZyB0aGU8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQi PiZndDsmZ3Q7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7 Jm5ic3A7IHJlcXVlc3QgYW5kIE1BWSByZXNwb25kIHdpdGggYSA0LjAwIEJhZCBSZXF1ZXN0IGVy cm9yIG1lc3NhZ2UuPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7 Jmd0OyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNw OyBUaGUgc2VydmVyIE1BWSBzZXQgYW4gT3V0ZXIgTWF4LUFnZSBvcHRpb24gd2l0aCB2YWx1ZSB6 ZXJvLjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0OyZndDsmbmJz cDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsgVGhlIGRp YWdub3N0aWMgcGF5bG9hZCBNQVkgY29udGFpbiB0aGUgJnF1b3Q7RGVjcnlwdGlvbiBmYWlsZWQm cXVvdDs8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDsmZ3Q7Jm5i c3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7IHN0cmlu Zy48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDsmZ3Q7PG86cD4m bmJzcDs8L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7Jmd0OyZuYnNwOyZu YnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyAqJm5ic3A7IElmIGRlY3J5cHRpb24gc3VjY2Vl ZHMsIHVwZGF0ZSB0aGUgUmVwbGF5IFdpbmRvdywgYXMgZGVzY3JpYmVkPG86cD48L286cD48L3A+ DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7Jmd0OyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNw OyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyBpbiBTZWN0aW9uIDcuPG86cD48L286cD48 L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7Jmd0OzxvOnA+Jm5ic3A7PC9vOnA+PC9w Pg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0OyZndDsmbmJzcDsmbmJzcDsgNy4mbmJzcDsg QWRkIGRlY3J5cHRlZCBDb2RlLCBvcHRpb25zLCBhbmQgcGF5bG9hZCB0byB0aGUgZGVjcnlwdGVk PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7Jmd0OyZuYnNwOyZu YnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyByZXF1ZXN0LiZuYnNwOyBUaGUgT1NDT1JFIG9w dGlvbiBpcyByZW1vdmVkLjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+ Jmd0OyZndDs8bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZn dDsmZ3Q7Jm5ic3A7Jm5ic3A7IDguJm5ic3A7IFRoZSBkZWNyeXB0ZWQgQ29BUCByZXF1ZXN0IGlz IHByb2Nlc3NlZCBhY2NvcmRpbmcgdG8gW1JGQzcyNTJdLjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xh c3M9Ik1zb1BsYWluVGV4dCI+Jmd0OyZndDs8bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjxwIGNsYXNz PSJNc29QbGFpblRleHQiPiZndDsmZ3Q7OC4yLjEuJm5ic3A7IFN1cHBvcnRpbmcgQmxvY2std2lz ZTxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0OyZndDs4LjMuJm5i c3A7IFByb3RlY3RpbmcgdGhlIFJlc3BvbnNlPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNv UGxhaW5UZXh0Ij4mZ3Q7Jmd0OzxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1Bs YWluVGV4dCI+Jmd0OyZndDsmbmJzcDsmbmJzcDsgSWYgYSBDb0FQIHJlc3BvbnNlIGlzIGdlbmVy YXRlZCBpbiByZXNwb25zZSB0byBhbiBPU0NPUkUgcmVxdWVzdCwgdGhlPG86cD48L286cD48L3A+ DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7Jmd0OyZuYnNwOyZuYnNwOyBzZXJ2ZXIgU0hB TEwgcGVyZm9ybSB0aGUgZm9sbG93aW5nIHN0ZXBzIHRvIGNyZWF0ZSBhbiBPU0NPUkU8bzpwPjwv bzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDsmZ3Q7Jm5ic3A7Jm5ic3A7IHJl c3BvbnNlLiZuYnNwOyBOb3RlIHRoYXQgQ29BUCBlcnJvciByZXNwb25zZXMgZGVyaXZlZCBmcm9t IENvQVA8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDsmZ3Q7Jm5i c3A7Jm5ic3A7IHByb2Nlc3NpbmcgKHN0ZXAgOCBpbiBTZWN0aW9uIDguMikgYXJlIHByb3RlY3Rl ZCwgYXMgd2VsbCBhczxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0 OyZndDsmbmJzcDsmbmJzcDsgc3VjY2Vzc2Z1bCBDb0FQIHJlc3BvbnNlcywgd2hpbGUgdGhlIE9T Q09SRSBlcnJvcnMgKHN0ZXBzIDIsIDMsIGFuZCA2PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0i TXNvUGxhaW5UZXh0Ij4mZ3Q7Jmd0OyZuYnNwOyZuYnNwOyBpbiBTZWN0aW9uIDguMikgZG8gbm90 IGZvbGxvdyB0aGUgcHJvY2Vzc2luZyBiZWxvdywgYnV0IGFyZSBzZW50IGFzPG86cD48L286cD48 L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7Jmd0OyZuYnNwOyZuYnNwOyBzaW1wbGUg Q29BUCByZXNwb25zZXMsIHdpdGhvdXQgT1NDT1JFIHByb2Nlc3NpbmcuPG86cD48L286cD48L3A+ DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7Jmd0OzxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0K PHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0OyZndDsmbmJzcDsmbmJzcDsgMS4mbmJzcDsgUmV0 cmlldmUgdGhlIFNlbmRlciBDb250ZXh0IGluIHRoZSBTZWN1cml0eSBDb250ZXh0IGFzc29jaWF0 ZWQ8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDsmZ3Q7Jm5ic3A7 Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7IHdpdGggdGhlIFRva2VuLjxvOnA+PC9vOnA+ PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0OyZndDs8bzpwPiZuYnNwOzwvbzpwPjwv cD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDsmZ3Q7Jm5ic3A7ICZuYnNwOzIuJm5ic3A7 IENvbXBvc2UgdGhlIEFkZGl0aW9uYWwgQXV0aGVudGljYXRlZCBEYXRhIGFuZCB0aGUgcGxhaW50 ZXh0LCBhczxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0OyZndDsm bmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsgZGVzY3JpYmVkIGluIFNlY3Rpb25z IDUuMyBhbmQgNS40LjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0 OyZndDs8bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDsm Z3Q7Jm5ic3A7Jm5ic3A7IDMuJm5ic3A7IENvbXB1dGUgdGhlIEFFQUQgbm9uY2UgYXMgZGVzY3Jp YmVkIGluIFNlY3Rpb24gNS4yOjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4 dCI+Jmd0OyZndDs8bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQi PiZndDsmZ3Q7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7ICombmJzcDsgRWl0 aGVyIHVzZSB0aGUgbm9uY2UgZnJvbSB0aGUgcmVxdWVzdCwgb3I8bzpwPjwvbzpwPjwvcD4NCjxw IGNsYXNzPSJNc29QbGFpblRleHQiPiZndDsmZ3Q7PG86cD4mbmJzcDs8L286cD48L3A+DQo8cCBj bGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7Jmd0OyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNw OyZuYnNwOyAqJm5ic3A7IEVuY29kZSB0aGUgUGFydGlhbCBJViAoU2VuZGVyIFNlcXVlbmNlIE51 bWJlciBpbiBuZXR3b3JrIGJ5dGU8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRl eHQiPiZndDsmZ3Q7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5i c3A7Jm5ic3A7IG9yZGVyKSBhbmQgaW5jcmVtZW50IHRoZSBTZW5kZXIgU2VxdWVuY2UgTnVtYmVy IGJ5IG9uZS48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDsmZ3Q7 Jmx0O21nbHQmZ3Q7PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7 Jmd0O0FnYWluIHRoaXMgaXMgdmVyeSBzcGVjaWZpYy48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNz PSJNc29QbGFpblRleHQiPiZndDsmZ3Q7PG86cD4mbmJzcDs8L286cD48L3A+DQo8cCBjbGFzcz0i TXNvUGxhaW5UZXh0Ij4mZ3Q7Jmd0O0kgYW0gcmVhZGluZyB0aGF0IFNTTiBpcyBpbmNyZW1lbnRl ZCBhZnRlciB0aGUgUGFydGlhbCBJViBpcyBnZW5lcmF0ZWQuDQo8bzpwPjwvbzpwPjwvcD4NCjxw IGNsYXNzPSJNc29QbGFpblRleHQiPiZndDsmZ3Q7SXQ8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNz PSJNc29QbGFpblRleHQiPiZndDsmZ3Q7c2VlbXMgdG8gbWUgdGhhdCB0aGUgUGFydGlhbCBJViBz aG91bGQgcmVmbGVjdCB0aGUgU1NOLCBhbmQgYXMgc3VjaCBiZWluZzxvOnA+PC9vOnA+PC9wPg0K PHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0OyZndDtlbmNvZGVkIGFmdGVyIHRoZSBpbmNyZW1l bnRhdGlvbiBvZiB0aGUgU1NOLiAmbHQ7L21nbHQmZ3Q7PG86cD48L286cD48L3A+DQo8cCBjbGFz cz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7PG86cD4mbmJzcDs8L286cD48L3A+DQo8cCBjbGFzcz0iTXNv UGxhaW5UZXh0Ij4mZ3Q7W0dTOl0gVGhlIFBhcnRpYWwgSVYgZG9lcyByZWZsZWN0IHRoZSBTU04u IEFzIHRoZSBwcm9jZWR1cmUgaXMgY3VycmVudGx5DQo8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNz PSJNc29QbGFpblRleHQiPiZndDtkZXNjcmliZWQgKGluaXRpYWxpc2VkIHRvIHplcm8gZXRjLikg dGhlIFNTTiBuZWVkcyB0byBiZSBpbmNyZW1lbnRlZA0KPG86cD48L286cD48L3A+DQo8cCBjbGFz cz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7YWZ0ZXIgPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNv UGxhaW5UZXh0Ij4mZ3Q7dXNlLCBub3QgYmVmb3JlLiBQbGVhc2Ugc2hvdyBieSBleGFtcGxlIHdo ZXJlIHlvdSB0aGluayB0aGlzIGdvZXMgd3JvbmcuPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0i TXNvUGxhaW5UZXh0Ij4mZ3Q7PG86cD4mbmJzcDs8L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxh aW5UZXh0Ij48c3BhbiBzdHlsZT0iY29sb3I6cmVkIj4mbHQ7bWdsdDImZ3Q7PG86cD48L286cD48 L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+PHNwYW4gc3R5bGU9ImNvbG9yOnJl ZCI+SSB3YXMgcmVhZGluZyBpdCB0aGUgd3Jvbmcgd2F5LCBidXQgd2l0IHlvdXIgY29udmVudGlv biB0aGF0IGlzIGNsZWFyZXIuIEkgYWxzbyBiZWxpZXZlIHRoYXQgaW5jcmVtZW50YXRpb24gY2Fu IGJlIGRvbmUgYmVmb3JlIG9yIGFmdGVyIHNlbmRpbmcgdGhlIHBhY2tldC4NCjxvOnA+PC9vOnA+ PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPjxzcGFuIHN0eWxlPSJjb2xvcjpy ZWQiPiZsdDsvbWdsdDImZ3Q7PG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb1Bs YWluVGV4dCI+Jmd0OzxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4 dCI+Jmd0OzxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0 OyZndDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJz cDsgQ29tcHV0ZSB0aGUgQUVBRCBub25jZSBmcm9tIHRoZSBTZW5kZXIgSUQsIENvbW1vbiBJViwg YW5kPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7Jmd0OyZuYnNw OyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyBQYXJ0aWFs IElWLjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0OyZndDs8bzpw PiZuYnNwOzwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDsmZ3Q7Jm5ic3A7 Jm5ic3A7IDQuJm5ic3A7IEVuY3J5cHQgdGhlIENPU0Ugb2JqZWN0IHVzaW5nIHRoZSBTZW5kZXIg S2V5LiBDb21wcmVzcyB0aGUgQ09TRTxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWlu VGV4dCI+Jmd0OyZndDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsgT2JqZWN0 IGFzIHNwZWNpZmllZCBpbiBTZWN0aW9uIDYuJm5ic3A7IElmIHRoZSBBRUFEIG5vbmNlIHdhczxv OnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0OyZndDsmbmJzcDsmbmJz cDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsgY29uc3RydWN0ZWQgZnJvbSBhIG5ldyBQYXJ0aWFs IElWLCB0aGlzIFBhcnRpYWwgSVYgTVVTVCBiZTxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1z b1BsYWluVGV4dCI+Jmd0OyZndDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsg aW5jbHVkZWQgaW4gdGhlIG1lc3NhZ2UuJm5ic3A7IElmIHRoZSBBRUFEIG5vbmNlIGZyb20gdGhl IHJlcXVlc3Qgd2FzPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7 Jmd0OyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyB1c2VkLCB0aGUgUGFydGlh bCBJViBNVVNUIE5PVCBiZSBpbmNsdWRlZCBpbiB0aGUgbWVzc2FnZS48bzpwPjwvbzpwPjwvcD4N CjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDsmZ3Q7PG86cD4mbmJzcDs8L286cD48L3A+DQo8 cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7Jmd0OyZuYnNwOyZuYnNwOyA1LiZuYnNwOyBGb3Jt YXQgdGhlIE9TQ09SRSBtZXNzYWdlIGFjY29yZGluZyB0byBTZWN0aW9uIDQuJm5ic3A7IFRoZSBP U0NPUkU8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDsmZ3Q7Jm5i c3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7IG9wdGlvbiBpcyBhZGRlZCAoc2VlIFNl Y3Rpb24gNC4xLjIpLjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0 OyZndDs8bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDsm Z3Q7OC4zLjEuJm5ic3A7IFN1cHBvcnRpbmcgT2JzZXJ2ZTxvOnA+PC9vOnA+PC9wPg0KPHAgY2xh c3M9Ik1zb1BsYWluVGV4dCI+Jmd0OyZndDs4LjQuJm5ic3A7IFZlcmlmeWluZyB0aGUgUmVzcG9u c2U8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDsmZ3Q7OS4mbmJz cDsgV2ViIExpbmtpbmc8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZn dDsmZ3Q7MTAuJm5ic3A7IENvQVAtdG8tQ29BUCBGb3J3YXJkaW5nIFByb3h5PG86cD48L286cD48 L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7Jmd0OzExLiZuYnNwOyBIVFRQIE9wZXJh dGlvbnM8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDsmZ3Q7MTEu Mi4mbmJzcDsgQ29BUC10by1IVFRQIE1hcHBpbmc8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJN c29QbGFpblRleHQiPiZndDsmZ3Q7MTEuMy4mbmJzcDsgSFRUUC10by1Db0FQIE1hcHBpbmc8bzpw PjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDsmZ3Q7MTEuNC4mbmJzcDsg SFRUUCBFbmRwb2ludHM8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZn dDsmZ3Q7MTEuNS4mbmJzcDsgRXhhbXBsZTogSFRUUCBDbGllbnQgYW5kIENvQVAgU2VydmVyPG86 cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7Jmd0OzExLjYuJm5ic3A7 IEV4YW1wbGU6IENvQVAgQ2xpZW50IGFuZCBIVFRQIFNlcnZlcjxvOnA+PC9vOnA+PC9wPg0KPHAg Y2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0OyZndDsxMi4mbmJzcDsgU2VjdXJpdHkgQ29uc2lkZXJh dGlvbnM8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDsmZ3Q7PG86 cD4mbmJzcDs8L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7Jmd0OyZuYnNw OyZuYnNwOyBBbiBvdmVydmlldyBvZiB0aGUgc2VjdXJpdHkgcHJvcGVydGllcyBpcyBnaXZlbiBp biBBcHBlbmRpeCBELjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0 OyZndDs8bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDsm Z3Q7MTIuMS4mbmJzcDsgRW5kLXRvLWVuZCBQcm90ZWN0aW9uPG86cD48L286cD48L3A+DQo8cCBj bGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7Jmd0OzxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPHAgY2xh c3M9Ik1zb1BsYWluVGV4dCI+Jmd0OyZndDsmbmJzcDsmbmJzcDsgSW4gc2NlbmFyaW9zIHdpdGgg aW50ZXJtZWRpYXJ5IG5vZGVzIHN1Y2ggYXMgcHJveGllcyBvciBnYXRld2F5cyw8bzpwPjwvbzpw PjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDsmZ3Q7Jm5ic3A7Jm5ic3A7IHRyYW5z cG9ydCBsYXllciBzZWN1cml0eSBzdWNoIGFzIChEKVRMUyBvbmx5IHByb3RlY3RzIGRhdGEgaG9w LWJ5LTxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0OyZndDsmbmJz cDsmbmJzcDsgaG9wLiZuYnNwOyBBcyBhIGNvbnNlcXVlbmNlLCB0aGUgaW50ZXJtZWRpYXJ5IG5v ZGVzIGNhbiByZWFkIGFuZCBtb2RpZnk8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFp blRleHQiPiZndDsmZ3Q7Jm5ic3A7Jm5ic3A7IGFueSBpbmZvcm1hdGlvbi4mbmJzcDsgVGhlIHRy dXN0IG1vZGVsIHdoZXJlIGFsbCBpbnRlcm1lZGlhcnkgbm9kZXMgYXJlPG86cD48L286cD48L3A+ DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7Jmd0OyZuYnNwOyZuYnNwOyBjb25zaWRlcmVk IHRydXN0d29ydGh5IGlzIHByb2JsZW1hdGljLCBub3Qgb25seSBmcm9tIGEgcHJpdmFjeTxvOnA+ PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0OyZndDsmbmJzcDsmbmJzcDsg cGVyc3BlY3RpdmUsIGJ1dCBhbHNvIGZyb20gYSBzZWN1cml0eSBwZXJzcGVjdGl2ZSwgYXMgdGhl PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7Jmd0OyZuYnNwOyZu YnNwOyBpbnRlcm1lZGlhcmllcyBhcmUgZnJlZSB0byBkZWxldGUgcmVzb3VyY2VzIG9uIHNlbnNv cnMgYW5kIGZhbHNpZnk8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZn dDsmZ3Q7Jm5ic3A7Jm5ic3A7IGNvbW1hbmRzIHRvIGFjdHVhdG9ycyAoc3VjaCBhcyAmcXVvdDt1 bmxvY2sgZG9vciZxdW90OywgJnF1b3Q7c3RhcnQgZmlyZSBhbGFybSZxdW90Oyw8bzpwPjwvbzpw PjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDsmZ3Q7Jm5ic3A7Jm5ic3A7ICZxdW90 O3JhaXNlIGJyaWRnZSZxdW90OykuJm5ic3A7IEV2ZW4gaW4gdGhlIHJhcmUgY2FzZXMgd2hlcmUg YWxsIHRoZSBvd25lcnMgb2YgdGhlPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5U ZXh0Ij4mZ3Q7Jmd0OyZuYnNwOyZuYnNwOyBpbnRlcm1lZGlhcnkgbm9kZXMgYXJlIGZ1bGx5IHRy dXN0ZWQsIGF0dGFja3MgYW5kIGRhdGEgYnJlYWNoZXMgbWFrZTxvOnA+PC9vOnA+PC9wPg0KPHAg Y2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0OyZndDsmbmJzcDsmbmJzcDsgc3VjaCBhbiBhcmNoaXRl Y3R1cmUgYnJpdHRsZS48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZn dDsmZ3Q7PG86cD4mbmJzcDs8L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7 Jmd0OyZuYnNwOyZuYnNwOyAoRClUTFMgcHJvdGVjdHMgaG9wLWJ5LWhvcCB0aGUgZW50aXJlIG1l c3NhZ2UuJm5ic3A7IE9TQ09SRSBwcm90ZWN0cyBlbmQtPG86cD48L286cD48L3A+DQo8cCBjbGFz cz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7Jmd0OyZuYnNwOyZuYnNwOyB0by1lbmQgYWxsIGluZm9ybWF0 aW9uIHRoYXQgaXMgbm90IHJlcXVpcmVkIGZvciBwcm94eSBvcGVyYXRpb25zIChzZWU8bzpwPjwv bzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDsmZ3Q7Jm5ic3A7Jm5ic3A7IFNl Y3Rpb24gNCkuJm5ic3A7IChEKVRMUyBhbmQgT1NDT1JFIGNhbiBiZSBjb21iaW5lZCwgdGhlcmVi eSBlbmFibGluZyBlbmQtPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4m Z3Q7Jmd0OyZuYnNwOyZuYnNwOyB0by1lbmQgc2VjdXJpdHkgb2YgdGhlIG1lc3NhZ2UgcGF5bG9h ZCwgaW4gY29tYmluYXRpb24gd2l0aCBob3AtYnktPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0i TXNvUGxhaW5UZXh0Ij4mZ3Q7Jmd0OyZuYnNwOyZuYnNwOyBob3AgcHJvdGVjdGlvbiBvZiB0aGUg ZW50aXJlIG1lc3NhZ2UsIGR1cmluZyB0cmFuc3BvcnQgYmV0d2VlbiBlbmQtPG86cD48L286cD48 L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7Jmd0OyZuYnNwOyZuYnNwOyBwb2ludCBh bmQgaW50ZXJtZWRpYXJ5IG5vZGUuJm5ic3A7IEluIHBhcnRpY3VsYXIgd2hlbiBPU0NPUkUgaXMg dXNlZCB3aXRoPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7Jmd0 OzxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0OyZndDtT ZWxhbmRlciwgZXQgYWwuJm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7 IEV4cGlyZXMgSmFudWFyeSAyNywgMjAxOSZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZu YnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyBbUGFn ZSA0N108bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDsmZ3Q7PG86 cD4mbmJzcDs8L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7Jmd0O0ludGVy bmV0LURyYWZ0Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7 Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5i c3A7IE9TQ09SRSZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNw OyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZu YnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyBKdWx5IDIwMTg8bzpwPjwvbzpwPjwv cD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDsmZ3Q7PG86cD4mbmJzcDs8L286cD48L3A+ DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7Jmd0OyZuYnNwOyZuYnNwOyBIVFRQLCB0aGUg YWRkaXRpb25hbCBUTFMgcHJvdGVjdGlvbiBvZiBIVFRQIGhvcHMgaXMgcmVjb21tZW5kZWQsIGUu Zy48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDsmZ3Q7Jm5ic3A7 Jm5ic3A7IGJldHdlZW4gYW4gSFRUUCBlbmRwb2ludCBhbmQgYSBwcm94eSB0cmFuc2xhdGluZyBi ZXR3ZWVuIEhUVFAgYW5kPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4m Z3Q7Jmd0OyZuYnNwOyZuYnNwOyBDb0FQLjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1Bs YWluVGV4dCI+Jmd0OyZndDs8bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFp blRleHQiPiZndDsmZ3Q7Jmx0O21nbHQmZ3Q7PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNv UGxhaW5UZXh0Ij4mZ3Q7Jmd0O0kgc2VlIHRoYXQgKEQpVExTIHByb3ZpZGVzIHByaXZhY3kgdG8g T1NDT1JFIGNvbW11bmljYXRpb24sIHdoaWxlIE9TQ09SRTxvOnA+PC9vOnA+PC9wPg0KPHAgY2xh c3M9Ik1zb1BsYWluVGV4dCI+Jmd0OyZndDtwcm90ZWN0cyB0aGUgZGF0YS4gJmx0Oy9tZ2x0Jmd0 OzxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0OzxvOnA+Jm5ic3A7 PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0OzxvOnA+Jm5ic3A7PC9vOnA+ PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0O1tHUzpdIEkgZGlkbuKAmXQgdW5kZXJz dGFuZCB0aGlzIGNvbW1lbnQuIFRoZSBkaWZmZXJlbmNlIGluIHByb3RlY3Rpb24NCjxvOnA+PC9v OnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0O2JldHdlZW4gKEQpVExTIGFuZCBP U0NPUkUgaXMgY2VydGFpbiBDb0FQIGhlYWRlciBmaWVsZHMuIFRoaXMgaGFzDQo8bzpwPjwvbzpw PjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDtpbXBsaWNhdGlvbnMgYm90aCBvbiBw cml2YWN5IGFuZCAmcXVvdDtwcm90ZWN0aW9uIG9mIGRhdGEmcXVvdDsgYXMgaXMgZGVzY3JpYmVk IGluDQo8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDtTZWN0aW9u cyAxMi44IGFuZCBBcHBlbmRpeCBELjIuIFNpbWlsYXJseSwgaWYgcHJveHkgZnVuY3Rpb25hbGl0 eQ0KPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7cmVxdWlyZXMg PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7RFRMUyB0byBiZSB0 ZXJtaW5hdGVkIGluIGEgbWlkZGxlYm94IGl0IG5laXRoZXIgcHJvdmlkZXMgcHJpdmFjeSBub3Ig ZGF0YQ0KPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7cHJvdGVj dGlvbiBpbiB0aGF0IG5vZGUuPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0 Ij4mZ3Q7PG86cD4mbmJzcDs8L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7 PG86cD4mbmJzcDs8L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij48c3BhbiBzdHls ZT0iY29sb3I6cmVkIj4mbHQ7bWdsdDImZ3Q7PG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xh c3M9Ik1zb1BsYWluVGV4dCI+PHNwYW4gc3R5bGU9ImNvbG9yOnJlZCI+QWdyZWUgdGhpcyB3YXMg b25seSBhIGNvbW1lbnQuIDxvOnA+DQo8L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb1Bs YWluVGV4dCI+PHNwYW4gc3R5bGU9ImNvbG9yOnJlZCI+Jmx0Oy9tZ2x0MiZndDs8bzpwPjwvbzpw Pjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7Jmd0OzxvOnA+Jm5ic3A7 PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0OyZndDsmbmJzcDsmbmJzcDsg QXBwbGljYXRpb25zIG5lZWQgdG8gY29uc2lkZXIgdGhhdCBjZXJ0YWluIG1lc3NhZ2UgZmllbGRz IGFuZDxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0OyZndDsmbmJz cDsmbmJzcDsgbWVzc2FnZXMgdHlwZXMgYXJlIG5vdCBwcm90ZWN0ZWQgZW5kLXRvLWVuZCBhbmQg bWF5IGJlIHNwb29mZWQgb3I8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQi PiZndDsmZ3Q7Jm5ic3A7Jm5ic3A7IG1hbmlwdWxhdGVkLiZuYnNwOyBUaGUgY29uc2VxdWVuY2Vz IG9mIHVucHJvdGVjdGVkIG1lc3NhZ2UgZmllbGRzIGFyZTxvOnA+PC9vOnA+PC9wPg0KPHAgY2xh c3M9Ik1zb1BsYWluVGV4dCI+Jmd0OyZndDsmbmJzcDsmbmJzcDsgYW5hbHl6ZWQgaW4gQXBwZW5k aXggRC40LjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0OyZndDs8 bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDsmZ3Q7MTIu Mi4mbmJzcDsgU2VjdXJpdHkgQ29udGV4dCBFc3RhYmxpc2htZW50PG86cD48L286cD48L3A+DQo8 cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7Jmd0OzxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPHAg Y2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0OyZndDsmbHQ7bWdsdCZndDs8bzpwPjwvbzpwPjwvcD4N CjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDsmZ3Q7V291bGRuJ3QgYWdyZWVtZW50IHByZWZl cnJlZCB0byBlc3RhYmxpc2hlZCA/PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5U ZXh0Ij4mZ3Q7Jmd0OyZsdDsvbWdsdCZndDs8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Q bGFpblRleHQiPiZndDs8bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRl eHQiPiZndDtbR1M6XSBJIGRvbuKAmXQga25vdyBpZiB0aGVyZSBpcyBhIHJpZ2h0IHdvcmQgaGVy ZS4gSU1ITyDigJxhZ3JlZW1lbnQmcXVvdDsgc2VlbXMNCjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xh c3M9Ik1zb1BsYWluVGV4dCI+Jmd0O3RvIGluZGljYXRlIHNvbWUgc29ydCBvZiBuZWdvdGlhdGlv biwgYnV0IGluIHByYWN0aWNlIHRoaXMgY291bGQganVzdCBiZQ0KPG86cD48L286cD48L3A+DQo8 cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7YSA8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJN c29QbGFpblRleHQiPiZndDtwcm92aXNpb25pbmcgc3RlcCB3aGljaCBtYWtlcyB0aGF0IHRlcm0g bGVzcyBhcHByb3ByaWF0ZS48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQi PiZndDs8bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDs8 bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPjxzcGFuIHN0eWxl PSJjb2xvcjpyZWQiPiZsdDttZ2x0MiZndDs8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFz cz0iTXNvUGxhaW5UZXh0Ij48c3BhbiBzdHlsZT0iY29sb3I6cmVkIj5JIGFtIGZpbmUgZWl0aGVy IHdheXMgPC9zcGFuPjxzcGFuIHN0eWxlPSJmb250LWZhbWlseTomcXVvdDtTZWdvZSBVSSBFbW9q aSZxdW90OyxzYW5zLXNlcmlmO2NvbG9yOnJlZCI+JiMxMjg1MjE7PC9zcGFuPjxzcGFuIHN0eWxl PSJjb2xvcjpyZWQiPjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRl eHQiPjxzcGFuIHN0eWxlPSJjb2xvcjpyZWQiPiZsdDsvbWdsdDImZ3Q7PG86cD48L286cD48L3Nw YW4+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0OyZuYnNwOyZuYnNwOyBUaGUgdXNl IG9mIENPU0VfRW5jcnlwdDAgYW5kIEFFQUQgdG8gcHJvdGVjdCBtZXNzYWdlcyBhcyBzcGVjaWZp ZWQgaW48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDsmbmJzcDsm bmJzcDsgdGhpcyBkb2N1bWVudCByZXF1aXJlcyBhbiBlc3RhYmxpc2hlZCBzZWN1cml0eSBjb250 ZXh0LiZuYnNwOyBUaGUgbWV0aG9kPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5U ZXh0Ij4mZ3Q7Jm5ic3A7Jm5ic3A7IHRvIGVzdGFibGlzaCB0aGUgc2VjdXJpdHkgY29udGV4dCBk ZXNjcmliZWQgaW4gU2VjdGlvbiAzLjIgaXMgYmFzZWQ8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNz PSJNc29QbGFpblRleHQiPiZndDsmbmJzcDsmbmJzcDsgb24gYSBjb21tb24gTWFzdGVyIFNlY3Jl dCBhbmQgdW5pcXVlIFNlbmRlciBJRHMuJm5ic3A7IFRoZSBuZWNlc3NhcnkgaW5wdXQ8bzpwPjwv bzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDsmbmJzcDsmbmJzcDsgcGFyYW1l dGVycyBtYXkgYmUgcHJlLWVzdGFibGlzaGVkIG9yIG9idGFpbmVkIHVzaW5nIGEga2V5PG86cD48 L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7Jm5ic3A7Jm5ic3A7IGVzdGFi bGlzaG1lbnQgcHJvdG9jb2wgYXVnbWVudGVkIHdpdGggZXN0YWJsaXNobWVudCBvZiBTZW5kZXIv PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7Jm5ic3A7Jm5ic3A7 IFJlY2lwaWVudCBJRCBzdWNoIGFzIHRoZSBPU0NPUkUgcHJvZmlsZSBvZiB0aGUgQUNFIGZyYW1l d29yazxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0OyZuYnNwOyZu YnNwOyBbSS1ELmlldGYtYWNlLW9zY29yZS1wcm9maWxlXS4mbmJzcDsgU3VjaCBhIHByb2NlZHVy ZSBtdXN0IGVuc3VyZSB0aGF0IHRoZTxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWlu VGV4dCI+Jmd0OyZuYnNwOyZuYnNwOyByZXF1aXJlbWVudHMgb2YgdGhlIHNlY3VyaXR5IGNvbnRl eHQgcGFyYW1ldGVycyBmb3IgdGhlIGludGVuZGVkIHVzZTxvOnA+PC9vOnA+PC9wPg0KPHAgY2xh c3M9Ik1zb1BsYWluVGV4dCI+Jmd0OyZuYnNwOyZuYnNwOyBhcmUgY29tcGxpZWQgd2l0aCAoc2Vl IFNlY3Rpb24gMy4zKSBhbmQgYWxzbyBpbiBlcnJvciBzaXR1YXRpb25zLiZuYnNwOyBJdDxvOnA+ PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0OyZuYnNwOyZuYnNwOyBpcyBy ZWNvbW1lbmRlZCB0byB1c2UgYSBrZXkgZXN0YWJsaXNobWVudCBwcm90b2NvbCB3aGljaCBwcm92 aWRlczxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0OyZuYnNwOyZu YnNwOyBmb3J3YXJkIHNlY3JlY3kgd2hlbmV2ZXIgcG9zc2libGUuJm5ic3A7IENvbnNpZGVyYXRp b25zIGZvciBkZXBsb3lpbmc8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQi PiZndDsmbmJzcDsmbmJzcDsgT1NDT1JFIHdpdGggYSBmaXhlZCBNYXN0ZXIgU2VjcmV0IGFyZSBn aXZlbiBpbiBBcHBlbmRpeCBCLjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4 dCI+Jmd0OzxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0 OzEyLjMuJm5ic3A7IE1hc3RlciBTZWNyZXQ8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Q bGFpblRleHQiPiZndDs8bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRl eHQiPiZndDsmbmJzcDsmbmJzcDsgT1NDT1JFIHVzZXMgSEtERiBbUkZDNTg2OV0gYW5kIHRoZSBl c3RhYmxpc2hlZCBpbnB1dCBwYXJhbWV0ZXJzIHRvPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0i TXNvUGxhaW5UZXh0Ij4mZ3Q7Jm5ic3A7Jm5ic3A7IGRlcml2ZSB0aGUgc2VjdXJpdHkgY29udGV4 dC4mbmJzcDsgVGhlIHJlcXVpcmVkIHByb3BlcnRpZXMgb2YgdGhlIHNlY3VyaXR5PG86cD48L286 cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7Jm5ic3A7Jm5ic3A7IGNvbnRleHQg cGFyYW1ldGVycyBhcmUgZGlzY3Vzc2VkIGluIFNlY3Rpb24gMy4zLCBpbiB0aGlzIHNlY3Rpb24g d2U8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDsmbmJzcDsmbmJz cDsgZm9jdXMgb24gdGhlIE1hc3RlciBTZWNyZXQuJm5ic3A7IEhLREYgZGVub3RlcyBpbiB0aGlz IHNwZWNpZmljYXRpb24gdGhlPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0 Ij4mZ3Q7Jm5ic3A7Jm5ic3A7IGNvbXBvc2l0aW9uIG9mIHRoZSBleHBhbmQgYW5kIGV4dHJhY3Qg ZnVuY3Rpb25zIGFzIGRlZmluZWQgaW48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFp blRleHQiPiZndDsmbmJzcDsmbmJzcDsgW1JGQzU4NjldIGFuZCB0aGUgTWFzdGVyIFNlY3JldCBp cyB1c2VkIGFzIElucHV0IEtleSBNYXRlcmlhbCAoSUtNKS48bzpwPjwvbzpwPjwvcD4NCjxwIGNs YXNzPSJNc29QbGFpblRleHQiPiZndDs8bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjxwIGNsYXNzPSJN c29QbGFpblRleHQiPiZndDsmbmJzcDsmbmJzcDsgSW5mb3JtYWxseSwgSEtERiB0YWtlcyBhcyBz b3VyY2UgYW4gSUtNIGNvbnRhaW5pbmcgc29tZSBnb29kIGFtb3VudDxvOnA+PC9vOnA+PC9wPg0K PHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0OyZuYnNwOyZuYnNwOyBvZiByYW5kb21uZXNzIGJ1 dCBub3QgbmVjZXNzYXJpbHkgZGlzdHJpYnV0ZWQgdW5pZm9ybWx5IChvciBmb3Igd2hpY2g8bzpw PjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDsmbmJzcDsmbmJzcDsgYW4g YXR0YWNrZXIgaGFzIHNvbWUgcGFydGlhbCBrbm93bGVkZ2UpIGFuZCBkZXJpdmUgZnJvbSBpdCBv bmUgb3I8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDsmbmJzcDsm bmJzcDsgbW9yZSBjcnlwdG9ncmFwaGljYWxseSBzdHJvbmcgc2VjcmV0IGtleXMgW1JGQzU4Njld LjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0OyZsdDttZ2x0Jmd0 OzxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0O3JmYzQwODYgbWF5 IGJlIGEgdXNlZnVsbCByZWZlcmVuY2UuPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxh aW5UZXh0Ij4mZ3Q7Jmx0Oy9tZ2x0Jmd0OzxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1Bs YWluVGV4dCI+Jmd0OzxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4 dCI+Jmd0O1tHUzpdIFN1cmUsIEkgYWRkIHRoYXQgcmVmZXJlbmNlIHRvIHRoZSBlbmQgb2YgdGhl IHNlY3Rpb24uPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7PG86 cD4mbmJzcDs8L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij48c3BhbiBzdHlsZT0i Y29sb3I6cmVkIj4mbHQ7bWdsdDImZ3Q7PG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9 Ik1zb1BsYWluVGV4dCI+PHNwYW4gc3R5bGU9ImNvbG9yOnJlZCI+VGhhbmtzLiA8bzpwPjwvbzpw Pjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij48c3BhbiBzdHlsZT0iY29sb3I6 cmVkIj4mbHQ7L21nbHQyJmd0OzxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Q bGFpblRleHQiPiZndDs8bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRl eHQiPiZndDsmbmJzcDsmbmJzcDsgVGhlcmVmb3JlLCB0aGUgbWFpbiByZXF1aXJlbWVudCBmb3Ig dGhlIE9TQ09SRSBNYXN0ZXIgU2VjcmV0LCBpbjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1z b1BsYWluVGV4dCI+Jmd0OyZuYnNwOyZuYnNwOyBhZGRpdGlvbiB0byBiZWluZyBzZWNyZXQsIGlz IHRoYXQgaXQgaXMgaGFzIGEgZ29vZCBhbW91bnQgb2Y8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNz PSJNc29QbGFpblRleHQiPiZndDsmbmJzcDsmbmJzcDsgcmFuZG9tbmVzcy4mbmJzcDsgVGhlIHNl bGVjdGVkIGtleSBlc3RhYmxpc2htZW50IHNjaGVtZXMgbXVzdCBlbnN1cmUgdGhhdDxvOnA+PC9v OnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0OyZuYnNwOyZuYnNwOyB0aGUgbmVj ZXNzYXJ5IHByb3BlcnRpZXMgZm9yIHRoZSBNYXN0ZXIgU2VjcmV0IGFyZSBmdWxmaWxsZWQuJm5i c3A7IEZvcjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0OyZuYnNw OyZuYnNwOyBwcmUtc2hhcmVkIGtleSBkZXBsb3ltZW50cyBhbmQga2V5IHRyYW5zcG9ydCBzb2x1 dGlvbnMgc3VjaCBhczxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0 OyZuYnNwOyZuYnNwOyBbSS1ELmlldGYtYWNlLW9zY29yZS1wcm9maWxlXSwgdGhlIE1hc3RlciBT ZWNyZXQgY2FuIGJlIGdlbmVyYXRlZDxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWlu VGV4dCI+Jmd0OyZuYnNwOyZuYnNwOyBvZmZsaW5lIHVzaW5nIGEgZ29vZCByYW5kb20gbnVtYmVy IGdlbmVyYXRvci48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDs8 bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDtTZWxhbmRl ciwgZXQgYWwuJm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7IEV4cGly ZXMgSmFudWFyeSAyNywgMjAxOSZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZu YnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyBbUGFnZSA0OF08 bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDs8bzpwPiZuYnNwOzwv bzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDtJbnRlcm5ldC1EcmFmdCZuYnNw OyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZu YnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyBPU0NPUkUmbmJz cDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsm bmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJz cDsmbmJzcDsgJm5ic3A7Jm5ic3A7SnVseSAyMDE4PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0i TXNvUGxhaW5UZXh0Ij4mZ3Q7PG86cD4mbmJzcDs8L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxh aW5UZXh0Ij4mZ3Q7MTIuNC4mbmJzcDsgUmVwbGF5IFByb3RlY3Rpb248bzpwPjwvbzpwPjwvcD4N CjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDs8bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjxwIGNs YXNzPSJNc29QbGFpblRleHQiPiZndDsmbmJzcDsmbmJzcDsgUmVwbGF5IGF0dGFja3MgbmVlZCB0 byBiZSBjb25zaWRlcmVkIGluIGRpZmZlcmVudCBwYXJ0cyBvZiB0aGU8bzpwPjwvbzpwPjwvcD4N CjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDsmbmJzcDsmbmJzcDsgaW1wbGVtZW50YXRpb24u Jm5ic3A7IE1vc3QgQUVBRCBhbGdvcml0aG1zIHJlcXVpcmUgYSB1bmlxdWUgbm9uY2UgZm9yIGVh Y2g8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDsmbmJzcDsmbmJz cDsgbWVzc2FnZSwgZm9yIHdoaWNoIHRoZSBzZW5kZXIgc2VxdWVuY2UgbnVtYmVycyBpbiB0aGUg Q09TRSBtZXNzYWdlPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7 ICZuYnNwOyZuYnNwO2ZpZWxkICdQYXJ0aWFsIElWJyBpcyB1c2VkLiZuYnNwOyBJZiB0aGUgcmVj aXBpZW50IGFjY2VwdHMgYW55IHNlcXVlbmNlPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNv UGxhaW5UZXh0Ij4mZ3Q7Jm5ic3A7Jm5ic3A7IG51bWJlciBsYXJnZXIgdGhhbiB0aGUgb25lIHBy ZXZpb3VzbHkgcmVjZWl2ZWQsIHRoZW4gdGhlIHByb2JsZW0gb2Y8bzpwPjwvbzpwPjwvcD4NCjxw IGNsYXNzPSJNc29QbGFpblRleHQiPiZndDsmbmJzcDsmbmJzcDsgc2VxdWVuY2UgbnVtYmVyIHN5 bmNocm9uaXphdGlvbiBpcyBhdm9pZGVkLjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1Bs YWluVGV4dCI+Jmd0OyZsdDttZ2x0Jmd0OzxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1Bs YWluVGV4dCI+Jmd0O0RvIHdlIGhhdmUgY2FzZXMgd2hlcmUgdGhlIFBhcnRpYWwgSVYgcmVwcmVz ZW50cyB0aGUgTFNCIG9mIHRoZSBTU04gPyBJZg0KPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0i TXNvUGxhaW5UZXh0Ij4mZ3Q7dGhhdCA8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFp blRleHQiPiZndDtpcyB0aGUgY2FzZSwgaWYgbW9yZSB0aGVuIGxlbihQYXJ0aWFsIElWKSBwYWNr ZXQgaGF2ZSBiZWVuIGRyb3BwZWQuIFRoZQ0KPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNv UGxhaW5UZXh0Ij4mZ3Q7dHdvPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0 Ij4mZ3Q7cGVlcnMgbWF5IGhhdmUgaGFyZCB0aW1lIHRvIHJlc3luY2hyb25pemUgdGhlaXIgU1NO LiBUaGlzIG1heSBoYXBwZW4gaW4gYTxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWlu VGV4dCI+Jmd0O2NvbW11bmljYXRpb24gd2l0aCBhIGxvdCBvZiBub3RpZmljYXRpb25zLiBJbiBh IHF1ZXJ5LXJlc3BvbnNlIHBhcmFkaWdtLA0KPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNv UGxhaW5UZXh0Ij4mZ3Q7dGhlPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0 Ij4mZ3Q7c2VuZGVyIG1heSBoYXZlIHNvbWUgaGludHMgd2hlbiB0aGUgcGFja2V0IGhhcyBiZWVu IHJlY2VpZXZlZCBvciBub3QuDQo8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRl eHQiPiZndDsmbHQ7L21nbHQmZ3Q7PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5U ZXh0Ij4mZ3Q7PG86cD4mbmJzcDs8L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4m Z3Q7PG86cD4mbmJzcDs8L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7W0dT Ol0mbmJzcDsgSSBkaWRu4oCZdCByZWFsbHkgdW5kZXJzdGFuZCB0aGUgaXNzdWUuIFNlY3Rpb24g NSBzdGF0ZXMgdGhhdCB0aGUNCjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4 dCI+Jmd0O3BhcnRpYWwgSVYgJnF1b3Q7aXMgc2V0IHRvIDxvOnA+PC9vOnA+PC9wPg0KPHAgY2xh c3M9Ik1zb1BsYWluVGV4dCI+Jmd0O3RoZSBTZW5kZXIgU2VxdWVuY2UgTnVtYmVyLiBBbGwgbGVh ZGluZyBieXRlcyBvZiB2YWx1ZSB6ZXJvPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxh aW5UZXh0Ij4mZ3Q7U0hBTEwgYmUgcmVtb3ZlZCB3aGVuIGVuY29kaW5nIHRoZSBQYXJ0aWFsIElW LCBleGNlcHQgaW4gdGhlIGNhc2Ugb2YNCjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1Bs YWluVGV4dCI+Jmd0O1BhcnRpYWwgSVYgb2YgdmFsdWUgMCB3aGljaCBpcyBlbmNvZGVkIHRvIHRo ZSBieXRlIHN0cmluZyAweDAwLuKAnTxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWlu VGV4dCI+Jmd0O1NvIHRoZSBvbmx5IHRoaW5nIHRydW5jYXRlZCBpcyBwb3RlbnRpYWxseSB0aGUg bGVhZGluZyB6ZXJvcywgYnV0IG5vdCBpbg0KPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNv UGxhaW5UZXh0Ij4mZ3Q7YWxsIGNhc2VzLiBEb2VzIHRoYXQgYW5zd2VyIHRoZSBxdWVzdGlvbj8g SXMgdGhlIGlzc3VlIHN0aWxsIHJlbGV2YW50PzxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1z b1BsYWluVGV4dCI+Jmd0OzxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWlu VGV4dCI+PHNwYW4gc3R5bGU9ImNvbG9yOnJlZCI+Jmx0O21nbHQyJmd0OzxvOnA+PC9vOnA+PC9z cGFuPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPjxzcGFuIHN0eWxlPSJjb2xvcjpyZWQi PklmIFNTTiA9PSBQYXJ0aWFsIElWLCBteSBjb21tZW50IGlzIGlycmVsZXZhbnQsIHRoZW4uDQo8 bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij48c3BhbiBzdHls ZT0iY29sb3I6cmVkIj4mbHQ7L21nbHQyJmd0OzxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNs YXNzPSJNc29QbGFpblRleHQiPiZndDs8bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjxwIGNsYXNzPSJN c29QbGFpblRleHQiPiZndDs8bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFp blRleHQiPiZndDs8bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQi PiZndDtXaXRoIHJlbGlhYmxlIHRyYW5zcG9ydCw8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJN c29QbGFpblRleHQiPiZndDsmbmJzcDsmbmJzcDsgaXQgbWF5IGJlIGRlZmluZWQgdGhhdCBvbmx5 IG1lc3NhZ2VzIHdpdGggc2VxdWVuY2UgbnVtYmVyIHdoaWNoIGFyZTxvOnA+PC9vOnA+PC9wPg0K PHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0OyZuYnNwOyZuYnNwOyBlcXVhbCB0byBwcmV2aW91 cyBzZXF1ZW5jZSBudW1iZXIgJiM0MzsgMSBhcmUgYWNjZXB0ZWQuJm5ic3A7IEFuIGFkdmVyc2Fy eSBtYXk8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDsmbmJzcDsm bmJzcDsgdHJ5IHRvIGluZHVjZSBhIGRldmljZSByZWJvb3QgZm9yIHRoZSBwdXJwb3NlIG9mIHJl cGxheWluZyBhIG1lc3NhZ2U8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQi PiZndDsmbmJzcDsmbmJzcDsgKHNlZSBTZWN0aW9uIDcuNSkuPG86cD48L286cD48L3A+DQo8cCBj bGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7PG86cD4mbmJzcDs8L286cD48L3A+DQo8cCBjbGFzcz0i TXNvUGxhaW5UZXh0Ij4mZ3Q7Jm5ic3A7Jm5ic3A7IE5vdGUgdGhhdCBzaGFyaW5nIGEgc2VjdXJp dHkgY29udGV4dCBiZXR3ZWVuIHNlcnZlcnMgbWF5IG9wZW4gdXAgZm9yPG86cD48L286cD48L3A+ DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7Jm5ic3A7Jm5ic3A7IHJlcGxheSBhdHRhY2tz LCBmb3IgZXhhbXBsZSBpZiB0aGUgcmVwbGF5IHdpbmRvd3MgYXJlIG5vdDxvOnA+PC9vOnA+PC9w Pg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0OyZuYnNwOyZuYnNwOyBzeW5jaHJvbml6ZWQu PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7PG86cD4mbmJzcDs8 L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7MTIuNS4mbmJzcDsgQ2xpZW50 IEFsaXZlbmVzczxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0Ozxv OnA+Jm5ic3A7PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0OyZuYnNwOyZu YnNwOyBBIHZlcmlmaWVkIE9TQ09SRSByZXF1ZXN0IGVuYWJsZXMgdGhlIHNlcnZlciB0byB2ZXJp ZnkgdGhlIGlkZW50aXR5PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4m Z3Q7Jm5ic3A7Jm5ic3A7IG9mIHRoZSBlbnRpdHkgd2hvIGdlbmVyYXRlZCB0aGUgbWVzc2FnZS4m bmJzcDsgSG93ZXZlciwgaXQgZG9lcyBub3QgdmVyaWZ5PG86cD48L286cD48L3A+DQo8cCBjbGFz cz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7Jm5ic3A7Jm5ic3A7IHRoYXQgdGhlIGNsaWVudCBpcyBjdXJy ZW50bHkgaW52b2x2ZWQgaW4gdGhlIGNvbW11bmljYXRpb24sIHNpbmNlIHRoZTxvOnA+PC9vOnA+ PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0OyZuYnNwOyZuYnNwOyBtZXNzYWdlIG1h eSBiZSBhIGRlbGF5ZWQgZGVsaXZlcnkgb2YgYSBwcmV2aW91c2x5IGdlbmVyYXRlZCByZXF1ZXN0 PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7Jm5ic3A7Jm5ic3A7 IHdoaWNoIG5vdyByZWFjaGVzIHRoZSBzZXJ2ZXIuJm5ic3A7IFRvIHZlcmlmeSB0aGUgYWxpdmVu ZXNzIG9mIHRoZSBjbGllbnQ8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQi PiZndDsmbmJzcDsmbmJzcDsgdGhlIHNlcnZlciBtYXkgdXNlIHRoZSBFY2hvIG9wdGlvbiBpbiB0 aGUgcmVzcG9uc2UgdG8gYSByZXF1ZXN0IGZyb208bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJN c29QbGFpblRleHQiPiZndDsmbmJzcDsmbmJzcDsgdGhlIGNsaWVudCAoc2VlIFtJLUQuaWV0Zi1j b3JlLWVjaG8tcmVxdWVzdC10YWddKS48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFp blRleHQiPiZndDs8bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQi PiZndDsxMi42LiZuYnNwOyBDcnlwdG9ncmFwaGljIENvbnNpZGVyYXRpb25zPG86cD48L286cD48 L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7PG86cD4mbmJzcDs8L286cD48L3A+DQo8 cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7Jm5ic3A7Jm5ic3A7IFRoZSBtYXhpbXVtIHNlbmRl ciBzZXF1ZW5jZSBudW1iZXIgaXMgZGVwZW5kZW50IG9uIHRoZSBBRUFEPG86cD48L286cD48L3A+ DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7Jm5ic3A7Jm5ic3A7IGFsZ29yaXRobS4mbmJz cDsgVGhlIG1heGltdW0gc2VuZGVyIHNlcXVlbmNlIG51bWJlciBpcyAyXjQwIC0gMSwgb3IgYW55 PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7Jm5ic3A7Jm5ic3A7 IGFsZ29yaXRobSBzcGVjaWZpYyBsb3dlciBsaW1pdCwgYWZ0ZXIgd2hpY2ggYSBuZXcgc2VjdXJp dHkgY29udGV4dDxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0OyZu YnNwOyZuYnNwOyBtdXN0IGJlIGdlbmVyYXRlZC4mbmJzcDsgVGhlIG1lY2hhbmlzbSB0byBidWls ZCB0aGUgbm9uY2UgKFNlY3Rpb24gNS4yKTxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1Bs YWluVGV4dCI+Jmd0OyZuYnNwOyZuYnNwOyBhc3N1bWVzIHRoYXQgdGhlIG5vbmNlIGlzIGF0IGxl YXN0IDU2IGJpdHMsIGFuZCB0aGUgUGFydGlhbCBJViBpcyBhdDxvOnA+PC9vOnA+PC9wPg0KPHAg Y2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0OyZuYnNwOyZuYnNwOyBtb3N0IDQwIGJpdHMuJm5ic3A7 IFRoZSBtYW5kYXRvcnktdG8taW1wbGVtZW50IEFFQUQgYWxnb3JpdGhtIEFFUy1DQ00tPG86cD48 L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7Jm5ic3A7Jm5ic3A7IDE2LTY0 LTEyOCBpcyBzZWxlY3RlZCBmb3IgY29tcGF0aWJpbGl0eSB3aXRoIENDTSouPG86cD48L286cD48 L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7PG86cD4mbmJzcDs8L286cD48L3A+DQo8 cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7Jm5ic3A7Jm5ic3A7IEluIG9yZGVyIHRvIHByZXZl bnQgY3J5cHRhbmFseXNpcyB3aGVuIHRoZSBzYW1lIHBsYWludGV4dCBpczxvOnA+PC9vOnA+PC9w Pg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0OyZuYnNwOyZuYnNwOyByZXBlYXRlZGx5IGVu Y3J5cHRlZCBieSBtYW55IGRpZmZlcmVudCB1c2VycyB3aXRoIGRpc3RpbmN0IGtleXMsIHRoZTxv OnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0OyZuYnNwOyZuYnNwOyBu b25jZSBpcyBmb3JtZWQgYnkgbWl4aW5nIHRoZSBzZXF1ZW5jZSBudW1iZXIgd2l0aCBhIHNlY3Jl dCBwZXItPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7Jm5ic3A7 Jm5ic3A7IGNvbnRleHQgaW5pdGlhbGl6YXRpb24gdmVjdG9yIChDb21tb24gSVYpIGRlcml2ZWQg YWxvbmcgd2l0aCB0aGUga2V5czxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4 dCI+Jmd0OyZuYnNwOyZuYnNwOyAoc2VlIFNlY3Rpb24gMy4xIG9mIFtSRkM4MTUyXSksIGFuZCBi eSB1c2luZyBhIE1hc3RlciBTYWx0IGluIHRoZSBrZXk8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNz PSJNc29QbGFpblRleHQiPiZndDsmbmJzcDsmbmJzcDsgZGVyaXZhdGlvbiAoc2VlIFtNRjAwXSBm b3IgYW4gb3ZlcnZpZXcpLiZuYnNwOyBUaGUgTWFzdGVyIFNlY3JldCwgU2VuZGVyPG86cD48L286 cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7Jm5ic3A7Jm5ic3A7IEtleSwgUmVj aXBpZW50IEtleSwgYW5kIENvbW1vbiBJViBtdXN0IGJlIHNlY3JldCwgdGhlIHJlc3Qgb2YgdGhl PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7Jm5ic3A7Jm5ic3A7 IHBhcmFtZXRlcnMgbWF5IGJlIHB1YmxpYy4mbmJzcDsgVGhlIE1hc3RlciBTZWNyZXQgbXVzdCBo YXZlIGEgZ29vZCBhbW91bnQ8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQi PiZndDsmbmJzcDsmbmJzcDsgb2YgcmFuZG9tbmVzcyAoc2VlIFNlY3Rpb24gMTIuMykuPG86cD48 L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7PG86cD4mbmJzcDs8L286cD48 L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7U2VsYW5kZXIsIGV0IGFsLiZuYnNwOyZu YnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyBFeHBpcmVzIEphbnVhcnkgMjcsIDIw MTkmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsm bmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsgW1BhZ2UgNDldPG86cD48L286cD48L3A+DQo8 cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7PG86cD4mbmJzcDs8L286cD48L3A+DQo8cCBjbGFz cz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7SW50ZXJuZXQtRHJhZnQmbmJzcDsmbmJzcDsmbmJzcDsmbmJz cDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsm bmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsgT1NDT1JFJm5ic3A7Jm5ic3A7Jm5ic3A7Jm5i c3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7 Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5i c3A7IEp1bHkgMjAxODxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0 OzxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0OzEyLjcu Jm5ic3A7IE1lc3NhZ2UgU2VnbWVudGF0aW9uPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNv UGxhaW5UZXh0Ij4mZ3Q7PG86cD4mbmJzcDs8L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5U ZXh0Ij4mZ3Q7Jm5ic3A7Jm5ic3A7IFRoZSBJbm5lciBCbG9jayBvcHRpb25zIGVuYWJsZSB0aGUg c2VuZGVyIHRvIHNwbGl0IGxhcmdlIG1lc3NhZ2VzPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0i TXNvUGxhaW5UZXh0Ij4mZ3Q7Jm5ic3A7Jm5ic3A7IGludG8gT1NDT1JFLXByb3RlY3RlZCBibG9j a3Mgc3VjaCB0aGF0IHRoZSByZWNlaXZpbmcgZW5kcG9pbnQgY2FuPG86cD48L286cD48L3A+DQo8 cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7Jm5ic3A7Jm5ic3A7IHZlcmlmeSBibG9ja3MgYmVm b3JlIGhhdmluZyByZWNlaXZlZCB0aGUgY29tcGxldGUgbWVzc2FnZS4mbmJzcDsgVGhlIE91dGVy PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7Jm5ic3A7Jm5ic3A7 IEJsb2NrIG9wdGlvbnMgYWxsb3cgZm9yIGFyYml0cmFyeSBwcm94eSBmcmFnbWVudGF0aW9uIG9w ZXJhdGlvbnMgdGhhdDxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0 OyZuYnNwOyZuYnNwOyBjYW5ub3QgYmUgdmVyaWZpZWQgYnkgdGhlIGVuZHBvaW50cywgYnV0IGNh biBieSBwb2xpY3kgYmUgcmVzdHJpY3RlZDxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1Bs YWluVGV4dCI+Jmd0OyZuYnNwOyZuYnNwOyBpbiBzaXplIHNpbmNlIHRoZSBJbm5lciBCbG9jayBv cHRpb25zIGFsbG93IGZvciBzZWN1cmUgZnJhZ21lbnRhdGlvbjxvOnA+PC9vOnA+PC9wPg0KPHAg Y2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0OyZuYnNwOyZuYnNwOyBvZiB2ZXJ5IGxhcmdlIG1lc3Nh Z2VzLiZuYnNwOyBBIG1heGltdW0gbWVzc2FnZSBzaXplIChhYm92ZSB3aGljaCB0aGU8bzpwPjwv bzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDsmbmJzcDsmbmJzcDsgc2VuZGlu ZyBlbmRwb2ludCBmcmFnbWVudHMgdGhlIG1lc3NhZ2UgYW5kIHRoZSByZWNlaXZpbmcgZW5kcG9p bnQ8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDsmbmJzcDsmbmJz cDsgZGlzY2FyZHMgdGhlIG1lc3NhZ2UsIGlmIGNvbXBseWluZyB0byB0aGUgcG9saWN5KSBtYXkg YmUgb2J0YWluZWQgYXM8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZn dDsmbmJzcDsmbmJzcDsgcGFydCBvZiBub3JtYWwgcmVzb3VyY2UgZGlzY292ZXJ5LjxvOnA+PC9v OnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0OzxvOnA+Jm5ic3A7PC9vOnA+PC9w Pg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0OzEyLjguJm5ic3A7IFByaXZhY3kgQ29uc2lk ZXJhdGlvbnM8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDs8bzpw PiZuYnNwOzwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDsmbmJzcDsmbmJz cDsgUHJpdmFjeSB0aHJlYXRzIGV4ZWN1dGVkIHRocm91Z2ggaW50ZXJtZWRpYXJ5IG5vZGVzIGFy ZSBjb25zaWRlcmFibHk8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZn dDsmbmJzcDsmbmJzcDsgcmVkdWNlZCBieSBtZWFucyBvZiBPU0NPUkUuJm5ic3A7IEVuZC10by1l bmQgaW50ZWdyaXR5IHByb3RlY3Rpb24gYW5kPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNv UGxhaW5UZXh0Ij4mZ3Q7Jm5ic3A7Jm5ic3A7IGVuY3J5cHRpb24gb2YgdGhlIG1lc3NhZ2UgcGF5 bG9hZCBhbmQgYWxsIG9wdGlvbnMgdGhhdCBhcmUgbm90IHVzZWQ8bzpwPjwvbzpwPjwvcD4NCjxw IGNsYXNzPSJNc29QbGFpblRleHQiPiZndDsmbmJzcDsmbmJzcDsgZm9yIHByb3h5IG9wZXJhdGlv bnMsIHByb3ZpZGUgbWl0aWdhdGlvbiBhZ2FpbnN0IGF0dGFja3Mgb24gc2Vuc29yPG86cD48L286 cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7Jm5ic3A7Jm5ic3A7IGFuZCBhY3R1 YXRvciBjb21tdW5pY2F0aW9uLCB3aGljaCBtYXkgaGF2ZSBhIGRpcmVjdCBpbXBhY3Qgb24gdGhl PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7Jm5ic3A7Jm5ic3A7 IHBlcnNvbmFsIHNwaGVyZS48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQi PiZndDs8bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDsm bmJzcDsmbmJzcDsgVGhlIHVucHJvdGVjdGVkIG9wdGlvbnMgKEZpZ3VyZSA1KSBtYXkgcmV2ZWFs IHByaXZhY3kgc2Vuc2l0aXZlPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0 Ij4mZ3Q7Jm5ic3A7Jm5ic3A7IGluZm9ybWF0aW9uLCBzZWUgQXBwZW5kaXggRC40LiZuYnNwOyBD b0FQIGhlYWRlcnMgc2VudCBpbiBwbGFpbnRleHQgYWxsb3csPG86cD48L286cD48L3A+DQo8cCBj bGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7Jm5ic3A7Jm5ic3A7IGZvciBleGFtcGxlLCBtYXRjaGlu ZyBvZiBDT04gYW5kIEFDSyAoQ29BUCBNZXNzYWdlIElkZW50aWZpZXIpLDxvOnA+PC9vOnA+PC9w Pg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0OyZuYnNwOyZuYnNwOyBtYXRjaGluZyBvZiBy ZXF1ZXN0IGFuZCByZXNwb25zZXMgKFRva2VuKSBhbmQgdHJhZmZpYyBhbmFseXNpcy48bzpwPjwv bzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDsmbmJzcDsmbmJzcDsgT1NDT1JF IGRvZXMgbm90IHByb3ZpZGUgcHJvdGVjdGlvbiBmb3IgSFRUUCBoZWFkZXIgZmllbGRzIHdoaWNo IGFyZTxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0OyZuYnNwOyZu YnNwOyBub3QgYm90aCBDb0FQLW1hcHBhYmxlIGFuZCBjbGFzcyBFLiZuYnNwOyBUaGUgSFRUUCBt ZXNzYWdlIGZpZWxkcyB3aGljaDxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4 dCI+Jmd0OyZuYnNwOyZuYnNwOyBhcmUgdmlzaWJsZSB0byBvbi1wYXRoIGVudGl0eSBhcmUgb25s eSB1c2VkIGZvciB0aGUgcHVycG9zZSBvZjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1Bs YWluVGV4dCI+Jmd0OyZuYnNwOyZuYnNwOyB0cmFuc3BvcnRpbmcgdGhlIE9TQ09SRSBtZXNzYWdl LCB3aGVyZWFzIHRoZSBhcHBsaWNhdGlvbiBsYXllcjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9 Ik1zb1BsYWluVGV4dCI+Jmd0OyZuYnNwOyZuYnNwOyBtZXNzYWdlIGlzIGVuY29kZWQgaW4gQ29B UCBhbmQgZW5jcnlwdGVkLjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+ Jmd0OzxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0OyZu YnNwOyZuYnNwOyBDT1NFIG1lc3NhZ2UgZmllbGRzLCBpLmUuIHRoZSBPU0NPUkUgb3B0aW9uLCBt YXkgcmV2ZWFsIGluZm9ybWF0aW9uPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5U ZXh0Ij4mZ3Q7Jm5ic3A7Jm5ic3A7IGFib3V0IHRoZSBjb21tdW5pY2F0aW5nIGVuZHBvaW50cy4m bmJzcDsgRS5nLiAna2lkJyBhbmQgJ2tpZCBjb250ZXh0Jyw8bzpwPjwvbzpwPjwvcD4NCjxwIGNs YXNzPSJNc29QbGFpblRleHQiPiZndDsmbmJzcDsmbmJzcDsgd2hpY2ggYXJlIGludGVuZGVkIHRv IGhlbHAgdGhlIHNlcnZlciBmaW5kIHRoZSByaWdodCBjb250ZXh0LCBtYXk8bzpwPjwvbzpwPjwv cD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDsmbmJzcDsmbmJzcDsgcmV2ZWFsIGluZm9y bWF0aW9uIGFib3V0IHRoZSBjbGllbnQuJm5ic3A7IFRyYWNraW5nICdraWQnIGFuZCAna2lkPG86 cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7Jm5ic3A7Jm5ic3A7IGNv bnRleHQnIHRvIG9uZSBzZXJ2ZXIgbWF5IGJlIHVzZWQgZm9yIGNvcnJlbGF0aW5nIHJlcXVlc3Rz IGZyb20gb25lPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7Jm5i c3A7Jm5ic3A7IGNsaWVudC48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQi PiZndDs8bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDsm bmJzcDsmbmJzcDsgVW5wcm90ZWN0ZWQgZXJyb3IgbWVzc2FnZXMgcmV2ZWFsIGluZm9ybWF0aW9u IGFib3V0IHRoZSBzZWN1cml0eTxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4 dCI+Jmd0OyZuYnNwOyZuYnNwOyBzdGF0ZSBpbiB0aGUgY29tbXVuaWNhdGlvbiBiZXR3ZWVuIHRo ZSBlbmRwb2ludHMuJm5ic3A7IFVucHJvdGVjdGVkPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0i TXNvUGxhaW5UZXh0Ij4mZ3Q7Jm5ic3A7Jm5ic3A7IHNpZ25hbGluZyBtZXNzYWdlcyByZXZlYWwg aW5mb3JtYXRpb24gYWJvdXQgdGhlIHJlbGlhYmxlIHRyYW5zcG9ydDxvOnA+PC9vOnA+PC9wPg0K PHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0OyZuYnNwOyZuYnNwOyB1c2VkIG9uIGEgbGVnIG9m IHRoZSBwYXRoLiZuYnNwOyBVc2luZyB0aGUgbWVjaGFuaXNtcyBkZXNjcmliZWQgaW48bzpwPjwv bzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDsmbmJzcDsmbmJzcDsgU2VjdGlv biA3LjUgbWF5IHJldmVhbCB3aGVuIGEgZGV2aWNlIGdvZXMgdGhyb3VnaCBhIHJlYm9vdC4mbmJz cDsgVGhpcyBjYW48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDsm bmJzcDsmbmJzcDsgYmUgbWl0aWdhdGVkIGJ5IHRoZSBkZXZpY2Ugc3RvcmluZyB0aGUgcHJlY2lz ZSBzdGF0ZSBvZiBzZW5kZXI8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQi PiZndDsmbmJzcDsmbmJzcDsgc2VxdWVuY2UgbnVtYmVyIGFuZCByZXBsYXkgd2luZG93IG9uIGEg Y2xlYW4gc2h1dGRvd24uPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4m Z3Q7PG86cD4mbmJzcDs8L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7U2Vs YW5kZXIsIGV0IGFsLiZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyBF eHBpcmVzIEphbnVhcnkgMjcsIDIwMTkmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJz cDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsgW1BhZ2Ug NTBdPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7PG86cD4mbmJz cDs8L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7SW50ZXJuZXQtRHJhZnQm bmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJz cDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsgT1NDT1JF Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5i c3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7 Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7IEp1bHkgMjAxODxvOnA+PC9vOnA+PC9wPg0KPHAgY2xh c3M9Ik1zb1BsYWluVGV4dCI+Jmd0OzxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1z b1BsYWluVGV4dCI+Jmd0OyZuYnNwOyZuYnNwOyBUaGUgbGVuZ3RoIG9mIG1lc3NhZ2UgZmllbGRz IGNhbiByZXZlYWwgaW5mb3JtYXRpb24gYWJvdXQgdGhlPG86cD48L286cD48L3A+DQo8cCBjbGFz cz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7Jm5ic3A7Jm5ic3A7IG1lc3NhZ2UuJm5ic3A7IEFwcGxpY2F0 aW9ucyBtYXkgdXNlIGEgcGFkZGluZyBzY2hlbWUgdG8gcHJvdGVjdCBhZ2FpbnN0PG86cD48L286 cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7Jm5ic3A7Jm5ic3A7IHRyYWZmaWMg YW5hbHlzaXMuPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7PG86 cD4mbmJzcDs8L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7MTMuJm5ic3A7 IElBTkEgQ29uc2lkZXJhdGlvbnM8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRl eHQiPiZndDsxNC4mbmJzcDsgUmVmZXJlbmNlczxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1z b1BsYWluVGV4dCI+Jmd0O0FwcGVuZGl4IEEuJm5ic3A7IFNjZW5hcmlvIEV4YW1wbGVzPG86cD48 L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7QXBwZW5kaXggQi4mbmJzcDsg RGVwbG95bWVudCBFeGFtcGxlczxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4 dCI+Jmd0O0IuMS4mbmJzcDsgTWFzdGVyIFNlY3JldCBVc2VkIE9uY2U8bzpwPjwvbzpwPjwvcD4N CjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDs8bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjxwIGNs YXNzPSJNc29QbGFpblRleHQiPiZndDsmbmJzcDsmbmJzcDsgQW4gYXBwbGljYXRpb24gbWF5IGRl cml2ZSBhIHNlY3VyaXR5IGNvbnRleHQgb25jZSBhbmQgdXNlIGl0IGZvciB0aGU8bzpwPjwvbzpw PjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDsmbmJzcDsmbmJzcDsgbGlmZXRpbWUg b2YgYSBkZXZpY2UuJm5ic3A7IEZvciBtYW55IElvVCBkZXBsb3ltZW50cywgYSAxMjggYml0IHVu aWZvcm1seTxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0OyZuYnNw OyZuYnNwOyByYW5kb20gTWFzdGVyIEtleSBpcyBzdWZmaWNpZW50IGZvciBlbmNyeXB0aW5nIGFs bCBkYXRhIGV4Y2hhbmdlZDxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+ Jmd0OyZuYnNwOyZuYnNwOyB3aXRoIHRoZSBJb1QgZGV2aWNlLiZuYnNwOyBUaGlzIHNwZWNpZmlj YXRpb24gZGVzY3JpYmVzIHRlY2huaXF1ZXMgZm9yPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0i TXNvUGxhaW5UZXh0Ij4mZ3Q7Jm5ic3A7Jm5ic3A7IHBlcnNpc3RlbnQgc3RvcmFnZSBvZiB0aGUg c2VjdXJpdHkgY29udGV4dCBhbmQgc3luY2hyb25pemF0aW9uIG9mPG86cD48L286cD48L3A+DQo8 cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7Jm5ic3A7Jm5ic3A7IHNlcXVlbmNlIG51bWJlcnMg KHNlZSBTZWN0aW9uIDcuNSkgdG8gZW5zdXJlIHRoYXQgc2VjdXJpdHkgaXM8bzpwPjwvbzpwPjwv cD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDsmbmJzcDsmbmJzcDsgbWFpbnRhaW5lZCB3 aXRoIHRoZSBleGlzdGluZyBzZWN1cml0eSBjb250ZXh0LjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xh c3M9Ik1zb1BsYWluVGV4dCI+Jmd0OzxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1z b1BsYWluVGV4dCI+Jmd0O0IuMi4mbmJzcDsgTWFzdGVyIFNlY3JldCBVc2VkIE11bHRpcGxlIFRp bWVzPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7PG86cD4mbmJz cDs8L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7Jm5ic3A7Jm5ic3A7IFNl Y3Rpb24gMTIuMiByZWNvbW1lbmRzIHRoZSB1c2Ugb2YgYSBrZXkgZXN0YWJsaXNobWVudCBwcm90 b2NvbDxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0OyZuYnNwOyZu YnNwOyBwcm92aWRpbmcgZm9yd2FyZCBzZWNyZWN5IG9mIHRoZSBNYXN0ZXIgU2VjcmV0LjxvOnA+ PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0OyZsdDttZ2x0Jmd0OzxvOnA+ PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0O0kgYmVsaWV2ZSB0aGF0IGZv cndhcmQgc2VjcmVjeSBpcyBhIHByb3BlcnR5IGFzc29jaWF0ZWQgdG8gdGhlIGtleC4gSSBhbTxv OnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0O3JlYWRpbmcgaXQgYXMg YXNzb2NpYXRlZCB0byB0aGUgTWFzdGVyIFNlY3JldC4gVGhhdCBzYWlkLCBFbmdsaXNoIGlzIG5v dA0KPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7bXk8bzpwPjwv bzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDtuYXRpdmUgbGFuZ3VhZ2UuICZs dDsvbWdsdCZndDs8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDtb R1M6XSBDb3JyZWN0LiBOZXcgZm9ybXVsYXRpb246PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0i TXNvUGxhaW5UZXh0Ij4mZ3Q7TkVXJm5ic3A7Jm5ic3A7IDxvOnA+PC9vOnA+PC9wPg0KPHAgY2xh c3M9Ik1zb1BsYWluVGV4dCI+Jmd0O1NlY3Rpb24gMTIuMiByZWNvbW1lbmRzIHRoYXQgdGhlIE1h c3RlciBTZWNyZXQgaXMgb2J0YWluZWQgZnJvbSBhIGtleQ0KPG86cD48L286cD48L3A+DQo8cCBj bGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7ZXN0YWJsaXNobWVudCBwcm90b2NvbDxvOnA+PC9vOnA+ PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0OyZuYnNwOyZuYnNwOyBwcm92aWRpbmcg Zm9yd2FyZCBzZWNyZWN5LjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+ Jmd0OzxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0Ozxv OnA+Jm5ic3A7PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+PHNwYW4gc3R5bGU9 ImNvbG9yOnJlZCI+Jmx0O21nbHQyJmd0OzxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNz PSJNc29QbGFpblRleHQiPjxzcGFuIHN0eWxlPSJjb2xvcjpyZWQiPlRoYW5rcy48bzpwPjwvbzpw Pjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij48c3BhbiBzdHlsZT0iY29sb3I6 cmVkIj4mbHQ7L21nbHQyJmd0OzxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Q bGFpblRleHQiPiZndDs8bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRl eHQiPiZndDsmbmJzcDsmbmJzcDsgQW4gYXBwbGljYXRpb24gd2hpY2ggZG9lcyBub3QgcmVxdWly ZSBmb3J3YXJkIHNlY3JlY3kgbWF5IGFsbG93PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNv UGxhaW5UZXh0Ij4mZ3Q7Jm5ic3A7Jm5ic3A7IG11bHRpcGxlIHNlY3VyaXR5IGNvbnRleHRzIHRv IGJlIGRlcml2ZWQgZnJvbSBvbmUgTWFzdGVyIFNlY3JldC4mbmJzcDsgVGhlPG86cD48L286cD48 L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7Jm5ic3A7Jm5ic3A7IHJlcXVpcmVtZW50 cyBvbiB0aGUgc2VjdXJpdHkgY29udGV4dCBwYXJhbWV0ZXJzIG11c3QgYmUgZnVsZmlsbGVkPG86 cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7Jm5ic3A7Jm5ic3A7IChT ZWN0aW9uIDMuMykgZXZlbiBpZiB0aGUgY2xpZW50IG9yIHNlcnZlciBpcyByZWJvb3RlZCw8bzpw PjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDsmbmJzcDsmbmJzcDsgcmVj b21taXNzaW9uZWQgb3IgaW4gZXJyb3IgY2FzZXMuPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0i TXNvUGxhaW5UZXh0Ij4mZ3Q7PG86cD4mbmJzcDs8L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxh aW5UZXh0Ij4mZ3Q7Jm5ic3A7Jm5ic3A7IFRoaXMgc2VjdGlvbiBnaXZlcyBhbiBleGFtcGxlIG9m IGFuIGFwcGxpY2F0aW9uIGFsbG93aW5nIG5ldyBzZWN1cml0eTxvOnA+PC9vOnA+PC9wPg0KPHAg Y2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0OyZuYnNwOyZuYnNwOyBjb250ZXh0cyB0byBiZSBkZXJp dmVkIGZyb20gaW5wdXQgcGFyYW1ldGVycyBwcmUtZXN0YWJsaXNoZWQgYmV0d2VlbjxvOnA+PC9v OnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0OyZuYnNwOyZuYnNwOyBjbGllbnQg YW5kIHNlcnZlciBmb3IgdGhpcyBwdXJwb3NlOiBpbiBwYXJ0aWN1bGFyIE1hc3RlciBTZWNyZXQs PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7Jm5ic3A7Jm5ic3A7 IE1hc3RlciBTYWx0IGFuZCBTZW5kZXIvUmVjaXBpZW50IElEIChzZWUgU2VjdGlvbiAzLjIpOjxv OnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0OzxvOnA+Jm5ic3A7PC9v OnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0OyZuYnNwOyZuYnNwOyBvJm5ic3A7 IFRoZSBjbGllbnQgZ2VuZXJhdGVzIGFuIElEIENvbnRleHQgd2hpY2ggaGFzIHByZXZpb3VzbHkg bm90IGJlZW48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDsmbmJz cDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsgdXNlZCB3aXRoIHRoZSBwcmUtZXN0YWJsaXNoZWQg aW5wdXQgcGFyYW1ldGVycyBhbmQgZGVyaXZlcyBhIG5ldzxvOnA+PC9vOnA+PC9wPg0KPHAgY2xh c3M9Ik1zb1BsYWluVGV4dCI+Jmd0OyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyBzZWN1 cml0eSBjb250ZXh0LiZuYnNwOyBJRCBjb250ZXh0IG1heSBiZSBwc2V1ZG8tcmFuZG9tIGFuZCBs YXJnZSBmb3I8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDs8bzpw PiZuYnNwOzwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDtTZWxhbmRlciwg ZXQgYWwuJm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7IEV4cGlyZXMg SmFudWFyeSAyNywgMjAxOSZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNw OyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyBbUGFnZSA2Ml08bzpw PjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDs8bzpwPiZuYnNwOzwvbzpw PjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDtJbnRlcm5ldC1EcmFmdCZuYnNwOyZu YnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNw OyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyBPU0NPUkUmbmJzcDsm bmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJz cDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsm bmJzcDsmbmJzcDsmbmJzcDsgSnVseSAyMDE4PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNv UGxhaW5UZXh0Ij4mZ3Q7PG86cD4mbmJzcDs8L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5U ZXh0Ij4mZ3Q7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7IHN0b2NoYXN0aWMgdW5pcXVl bmVzcywgYnV0IGNhcmUgbXVzdCBiZSB0YWtlbiBlLmcuIHRvIGF2b2lkIHJlLXVzZTxvOnA+PC9v OnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0OyZuYnNwOyZuYnNwOyZuYnNwOyZu YnNwOyZuYnNwOyBvZiB0aGUgc2FtZSBzZWVkIGZvciByYW5kb20gbnVtYmVyIGdlbmVyYXRpb24u Jm5ic3A7IFVzaW5nIHRoaXMgbmV3PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5U ZXh0Ij4mZ3Q7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7IHNlY3VyaXR5IGNvbnRleHQs IHRoZSBjbGllbnQgZ2VuZXJhdGVzIGFuIE9TQ09SRSByZXF1ZXN0IHdpdGggKGtpZDxvOnA+PC9v OnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0OyZuYnNwOyZuYnNwOyZuYnNwOyZu YnNwOyZuYnNwOyBjb250ZXh0LCBraWQpID0gKElEIENvbnRleHQsIFNlbmRlciBJRCkgaW4gdGhl IE9TQ09SRSBvcHRpb24uPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4m Z3Q7PG86cD4mbmJzcDs8L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7Jm5i c3A7Jm5ic3A7IG8mbmJzcDsgVGhlIHNlcnZlciByZWNlaXZpbmcgc3VjaCBhbiBPU0NPUkUgcmVx dWVzdCB3aXRoIGtpZCBtYXRjaGluZyB0aGU8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Q bGFpblRleHQiPiZndDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsgUmVjaXBpZW50IElE IG9mIHByZS1lc3RhYmxpc2hlZCBpbnB1dCBwYXJhbWV0ZXJzLCBidXQgd2l0aCBhIG5ldzxvOnA+ PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0OyZuYnNwOyZuYnNwOyZuYnNw OyZuYnNwOyZuYnNwOyBraWQgY29udGV4dCwgZGVyaXZlcyB0aGUgc2VjdXJpdHkgY29udGV4dCB1 c2luZyBJRCBDb250ZXh0ID0ga2lkPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5U ZXh0Ij4mZ3Q7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7IGNvbnRleHQuJm5ic3A7IElm IHRoZSBtZXNzYWdlIHZlcmlmaWVzIHRoZW4gYSBuZXcgc2VjdXJpdHkgY29udGV4dCB3aXRoPG86 cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7Jm5ic3A7Jm5ic3A7Jm5i c3A7Jm5ic3A7Jm5ic3A7IHRoaXMgSUQgQ29udGV4dCBpcyBzdG9yZWQgaW4gdGhlIHNlcnZlciwg YW5kIHVzZWQgaW4gdGhlIHJlc3BvbnNlLjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1Bs YWluVGV4dCI+Jmd0OyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyBGdXJ0aGVyIHJlcXVl c3RzIHdpdGggdGhlIHNhbWUgKGtpZCBjb250ZXh0LCBraWQpIGFyZSB2ZXJpZmllZDxvOnA+PC9v OnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0OyZuYnNwOyZuYnNwOyZuYnNwOyZu YnNwOyZuYnNwOyB3aXRoIHRoaXMgc2VjdXJpdHkgY29udGV4dC48bzpwPjwvbzpwPjwvcD4NCjxw IGNsYXNzPSJNc29QbGFpblRleHQiPiZndDs8bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjxwIGNsYXNz PSJNc29QbGFpblRleHQiPiZndDsmbmJzcDsmbmJzcDsgQXMgYW4gYWx0ZXJuYXRpdmUgcHJvY2Vk dXJlIHRvIHJlZHVjZSB0aGUgc3Vic2VxdWVudCBvdmVyaGVhZCBpbjxvOnA+PC9vOnA+PC9wPg0K PHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0OyZuYnNwOyZuYnNwOyByZXF1ZXN0cyBkdWUgdG8g a2lkIGNvbnRleHQsIHRoZSB2ZXJpZmljYXRpb24gb2YgYSBtZXNzYWdlIHdpdGggYSBuZXc8bzpw PjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDsmbmJzcDsmbmJzcDsgSUQg Q29udGV4dCBtYXkgdHJpZ2dlciB0aGUgc2VydmVyIHRvIGdlbmVyYXRlIGEgbmV3IGtpZCB0byBy ZXBsYWNlPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7Jm5ic3A7 Jm5ic3A7IHRoZSBDbGllbnQgU2VuZGVyIElEIGluIGZ1dHVyZSByZXF1ZXN0cy4mbmJzcDsgQSBj bGllbnQgbWF5IGUuZy4gaW5kaWNhdGU8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFp blRleHQiPiZndDsmbmJzcDsmbmJzcDsgc3VwcG9ydCBmb3Igc3VjaCBhIHByb2NlZHVyZSBieSBy ZXF1ZXN0aW5nIGEgc3BlY2lhbCB3ZWxsLWtub3duIFVSSTxvOnA+PC9vOnA+PC9wPg0KPHAgY2xh c3M9Ik1zb1BsYWluVGV4dCI+Jmd0OyZuYnNwOyZuYnNwOyBhbmQgcmVjZWl2ZSB0aGUgbmV3IGtp ZCBpbiB0aGUgcmVzcG9uc2UsIHdoaWNoIHRvZ2V0aGVyIHdpdGggdGhlPG86cD48L286cD48L3A+ DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7Jm5ic3A7Jm5ic3A7IGlucHV0IHBhcmFtZXRl cnMgYW5kIHRoZSBJRCBjb250ZXh0IGlzIHVzZWQgdG8gZGVyaXZlIHRoZSBuZXc8bzpwPjwvbzpw PjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDsmbmJzcDsmbmJzcDsgc2VjdXJpdHkg Y29udGV4dCB3aGljaCBtYXkgYmUgaWRlbnRpZmllZCBvbmx5IGJ5IGl0cyBraWQuJm5ic3A7IFRo ZTxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0OyZuYnNwOyZuYnNw OyBkZXRhaWxzIGFyZSBvdXQgb2Ygc2NvcGUgZm9yIHRoaXMgc3BlY2lmaWNhdGlvbi48bzpwPjwv bzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDs8bzpwPiZuYnNwOzwvbzpwPjwv cD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDsmbmJzcDsmbmJzcDsgVGhlIHByb2NlZHVy ZXMgbWF5IGJlIGNvbXBsZW1lbnRlZCB3aXRoIHRoZSB1c2Ugb2YgdGhlIEVjaG8gb3B0aW9uPG86 cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7Jm5ic3A7Jm5ic3A7IGZv ciB2ZXJpZnlpbmcgdGhlIGFsaXZlbmVzcyBvZiB0aGUgY2xpZW50IHJlcXVlc3RpbmcgYSBuZXcg c2VjdXJpdHk8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDsmbmJz cDsmbmJzcDsgY29udGV4dC48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQi PiZndDs8bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDtB cHBlbmRpeCBDLiZuYnNwOyBUZXN0IFZlY3RvcnM8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJN c29QbGFpblRleHQiPiZndDtBcHBlbmRpeCBELiZuYnNwOyBPdmVydmlldyBvZiBTZWN1cml0eSBQ cm9wZXJ0aWVzPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7PG86 cD4mbmJzcDs8L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7RC4xLiZuYnNw OyBTdXBwb3J0aW5nIFByb3h5IE9wZXJhdGlvbnM8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJN c29QbGFpblRleHQiPiZndDs8bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFp blRleHQiPiZndDsmbmJzcDsmbmJzcDsgQ29BUCBpcyBkZXNpZ25lZCB0byB3b3JrIHdpdGggaW50 ZXJtZWRpYXJpZXMgcmVhZGluZyBhbmQvb3IgY2hhbmdpbmc8bzpwPjwvbzpwPjwvcD4NCjxwIGNs YXNzPSJNc29QbGFpblRleHQiPiZndDsmbmJzcDsmbmJzcDsgQ29BUCBtZXNzYWdlIGZpZWxkcyB0 byBwZXJmb3JtIHN1cHBvcnRpbmcgb3BlcmF0aW9ucyBpbiBjb25zdHJhaW5lZDxvOnA+PC9vOnA+ PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0OyZuYnNwOyZuYnNwOyBlbnZpcm9ubWVu dHMsIGUuZy4gZm9yd2FyZGluZyBhbmQgY3Jvc3MtcHJvdG9jb2wgdHJhbnNsYXRpb25zLjxvOnA+ PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0OzxvOnA+Jm5ic3A7PC9vOnA+ PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0OyZuYnNwOyZuYnNwOyBTZWN1cmluZyBD b0FQIG9uIHRyYW5zcG9ydCBsYXllciBwcm90ZWN0cyB0aGUgZW50aXJlIG1lc3NhZ2UgYmV0d2Vl bjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0OyZuYnNwOyZuYnNw OyB0aGUgZW5kcG9pbnRzIGluIHdoaWNoIGNhc2UgQ29BUCBwcm94eSBvcGVyYXRpb25zIGFyZSBu b3QgcG9zc2libGUuPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7 Jm5ic3A7Jm5ic3A7IEluIG9yZGVyIHRvIGVuYWJsZSBwcm94eSBvcGVyYXRpb25zLCBzZWN1cml0 eSBvbiB0cmFuc3BvcnQgbGF5ZXI8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRl eHQiPiZndDsmbmJzcDsmbmJzcDsgbmVlZHMgdG8gYmUgdGVybWluYXRlZCBhdCB0aGUgcHJveHkg aW4gd2hpY2ggY2FzZSB0aGUgQ29BUCBtZXNzYWdlIGluPG86cD48L286cD48L3A+DQo8cCBjbGFz cz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7Jm5ic3A7Jm5ic3A7IGl0cyBlbnRpcmV0eSBpcyB1bnByb3Rl Y3RlZCBpbiB0aGUgcHJveHkuPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0 Ij4mZ3Q7PG86cD4mbmJzcDs8L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7 Jm5ic3A7Jm5ic3A7IFJlcXVpcmVtZW50cyBmb3IgQ29BUCBlbmQtdG8tZW5kIHNlY3VyaXR5IGFy ZSBzcGVjaWZpZWQgaW48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZn dDsmbmJzcDsmbmJzcDsgW0ktRC5oYXJ0a2UtY29yZS1lMmUtc2VjdXJpdHktcmVxc10uJm5ic3A7 IFRoZSBjbGllbnQgYW5kIHNlcnZlciBhcmU8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Q bGFpblRleHQiPiZndDsmbmJzcDsmbmJzcDsgYXNzdW1lZCB0byBiZSBob25lc3QsIGJ1dCBwcm94 aWVzIGFuZCBnYXRld2F5cyBhcmUgb25seSB0cnVzdGVkIHRvPG86cD48L286cD48L3A+DQo8cCBj bGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7Jm5ic3A7Jm5ic3A7IHBlcmZvcm0gdGhlaXIgaW50ZW5k ZWQgb3BlcmF0aW9ucy48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZn dDsmbHQ7bWdsdCZndDs8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZn dDtJIGV4cGVjdGVkIGFmdGVyICdidXQnIHNvbWV0aGluZyBzYXlpbmcgdGhlIHByb3hpZXMgYXJl IG5vdCB0cnVzdGVkLCBidXQgdDxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4 dCI+Jmd0O3NlZW1zIHRoYXQgZXZlcnlvbmUgaXMgaG9uZXN0IGhlcmUuIG1heWJlIHdlIHNob3Vs ZCByZXBsYWNlOiBPTEQgYnV0DQo8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRl eHQiPiZndDtwcm94aWVzPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4m Z3Q7YW5kIGdhdGV3YXlzIGFyZSBvbmx5IHRydXN0ZWQgdG88bzpwPjwvbzpwPjwvcD4NCjxwIGNs YXNzPSJNc29QbGFpblRleHQiPiZndDsmbmJzcDsmbmJzcDsgcGVyZm9ybSB0aGVpciBpbnRlbmRl ZCBvcGVyYXRpb25zLjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0 O05FVzo8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDthbmQgcHJv eGllcyBhbmQgZ2F0ZXdheXMgYXJlIHRydXN0ZWQgdG88bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNz PSJNc29QbGFpblRleHQiPiZndDsmbmJzcDsmbmJzcDsgcGVyZm9ybSB0aGVpciBpbnRlbmRlZCBv cGVyYXRpb25zLjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0Ozxv OnA+Jm5ic3A7PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0O1RoYXQgdGhl IHNlcnZlciBpcyBob25lc3QgZG9lcyBub3QgbWVhbnMgdGhhdCB0aGUgbm9kZSB0ZXJtaW5hdGlu ZyB0aGUNCjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0O3Nlc3Np b248bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDtpcyB0aGUgc2Vy dmVyLi4uLiAmbHQ7L21nbHQmZ3Q7PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5U ZXh0Ij4mZ3Q7PG86cD4mbmJzcDs8L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4m Z3Q7W0dTOl0gSXNu4oCZdCB0aGF0IHRvbyBtYW55IOKAnGFuZOKAnSA7LSkuIFdlIGNhbiByZXBs YWNlIOKAnGJ1dOKAnSB3aXRoIHNvbWUgb3RoZXINCjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9 Ik1zb1BsYWluVGV4dCI+Jmd0O3dvcmQsIGUuZy4g4oCcd2hpbGXigJ0gdG8gaW5kaWNhdGUgdGhh dCB0aGVyZSBpcyBhIGRpZmZlcmVuY2UuPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxh aW5UZXh0Ij4mZ3Q7TkVXOjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+ Jmd0O3doaWxlIHByb3hpZXMgYW5kIGdhdGV3YXlzIGFyZSBvbmx5IHRydXN0ZWQgdG88bzpwPjwv bzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDsmbmJzcDsmbmJzcDsgcGVyZm9y bSB0aGVpciBpbnRlbmRlZCBvcGVyYXRpb25zLjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1z b1BsYWluVGV4dCI+Jmd0OzxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWlu VGV4dCI+Jmd0OzxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+ Jmd0OzxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+PHNwYW4g c3R5bGU9ImNvbG9yOnJlZCI+Jmx0O21nbHQyJmd0OzxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxw IGNsYXNzPSJNc29QbGFpblRleHQiPjxzcGFuIHN0eWxlPSJjb2xvcjpyZWQiPk1heWJlJm5ic3A7 IDwvc3Bhbj48c3BhbiBzdHlsZT0iZm9udC1mYW1pbHk6JnF1b3Q7U2Vnb2UgVUkgRW1vamkmcXVv dDssc2Fucy1zZXJpZjtjb2xvcjpyZWQiPiYjMTI4NTIxOzwvc3Bhbj48c3BhbiBzdHlsZT0iY29s b3I6cmVkIj4gWW91IHdvcmRpbmcgaXMgYmV0dGVyLg0KPG86cD48L286cD48L3NwYW4+PC9wPg0K PHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+PHNwYW4gc3R5bGU9ImNvbG9yOnJlZCI+Jmx0Oy9tZ2x0 MiZndDs8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7 PG86cD4mbmJzcDs8L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7PG86cD4m bmJzcDs8L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7ICZuYnNwO0Zvcndh cmRpbmcgaXMgc3BlY2lmaWVkIGluPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5U ZXh0Ij4mZ3Q7Jm5ic3A7Jm5ic3A7IFNlY3Rpb24gMi4yLjEgb2YgW0ktRC5oYXJ0a2UtY29yZS1l MmUtc2VjdXJpdHktcmVxc10uJm5ic3A7IEhUVFAtQ29BUDxvOnA+PC9vOnA+PC9wPg0KPHAgY2xh c3M9Ik1zb1BsYWluVGV4dCI+Jmd0OyZuYnNwOyZuYnNwOyB0cmFuc2xhdGlvbiBpcyBzcGVjaWZp ZWQgaW4gW1JGQzgwNzVdLiZuYnNwOyBJbnRlcm1lZGlhcmllcyB0cmFuc2xhdGluZzxvOnA+PC9v OnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0OyZuYnNwOyZuYnNwOyBiZXR3ZWVu IGRpZmZlcmVudCB0cmFuc3BvcnQgbGF5ZXJzIGFyZSBpbnRlbmRlZCB0byBwZXJmb3JtIGp1c3Qg dGhhdC48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDs8bzpwPiZu YnNwOzwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDsmbmJzcDsmbmJzcDsg Qnkgd29ya2luZyBhdCB0aGUgQ29BUCBsYXllciwgT1NDT1JFIGVuYWJsZXMgZGlmZmVyZW50IENv QVAgbWVzc2FnZTxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0OyZu YnNwOyZuYnNwOyBmaWVsZHMgdG8gYmUgcHJvdGVjdGVkIGRpZmZlcmVudGx5LCB3aGljaCBhbGxv d3MgbWVzc2FnZSBmaWVsZHM8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQi PiZndDsmbmJzcDsmbmJzcDsgcmVxdWlyZWQgZm9yIHByb3h5IG9wZXJhdGlvbnMgdG8gYmUgYXZh aWxhYmxlIHRvIHRoZSBwcm94eSB3aGlsZTxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1Bs YWluVGV4dCI+Jmd0OyZuYnNwOyZuYnNwOyBtZXNzYWdlIGZpZWxkcyBpbnRlbmRlZCBmb3IgdGhl IG90aGVyIGVuZHBvaW50IHJlbWFpbiBwcm90ZWN0ZWQuJm5ic3A7IEluPG86cD48L286cD48L3A+ DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7Jm5ic3A7Jm5ic3A7IHRoZSByZW1haW5kZXIg b2YgdGhpcyBzZWN0aW9uIHdlIGFuYWx5emUgaG93IE9TQ09SRSBwcm90ZWN0cyB0aGU8bzpwPjwv bzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDsmbmJzcDsmbmJzcDsgcHJvdGVj dGVkIG1lc3NhZ2UgZmllbGRzIGFuZCB0aGUgY29uc2VxdWVuY2VzIG9mIG1lc3NhZ2UgZmllbGRz PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7Jm5ic3A7Jm5ic3A7 IGludGVuZGVkIGZvciBwcm94eSBvcGVyYXRpb24gYmVpbmcgdW5wcm90ZWN0ZWQuPG86cD48L286 cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7Jmx0O21nbHQmZ3Q7PG86cD48L286 cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7VGhpcyB0ZXh0IHNlZW1zIGNsZWFy IHRvIG1lLiBNYXliZSB0aGUgbGFzdCBwYXJhZ3JhcGggY291bGQgYmUgc3VmZmljaWVudC48bzpw PjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDsmbHQ7L21nbHQmZ3Q7PG86 cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7PG86cD4mbmJzcDs8L286 cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7W0dTOl0gSXMgdGhlIHByb3Bvc2Fs IHRvIHJlbW92ZSDigJxGb3J3YXJkaW5nIGlzIHNwZWNpZmllZCZuYnNwOyAuIC4gLiB0bw0KPG86 cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7cGVyZm9ybSA8bzpwPjwv bzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDtqdXN0IHRoYXTigJ0/IFdlIGNv dWxkIGRvIHRoYXQgYW5kIHJlcGxhY2UgdGhpcyB0ZXh0IHdpdGggc29tZSByZWZlcmVuY2VzDQo8 bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDt0byA8bzpwPjwvbzpw PjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDtvdGhlciBwYXJ0cyBvZiB0aGUgZG9j dW1lbnQgaWYgdGhhdCBpcyBkZXNpcmFibGUuPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNv UGxhaW5UZXh0Ij4mZ3Q7PG86cD4mbmJzcDs8L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5U ZXh0Ij4mZ3Q7PG86cD4mbmJzcDs8L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij48 c3BhbiBzdHlsZT0iY29sb3I6cmVkIj4mbHQ7bWdsdDImZ3Q7PG86cD48L286cD48L3NwYW4+PC9w Pg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+PHNwYW4gc3R5bGU9ImNvbG9yOnJlZCI+Tm90IHJl YWxseSBhIHByb3Bvc2FsLCBtb3JlIGEgc3VnZ2VzdGlvbg0KPC9zcGFuPjxzcGFuIHN0eWxlPSJm b250LWZhbWlseTomcXVvdDtTZWdvZSBVSSBFbW9qaSZxdW90OyxzYW5zLXNlcmlmO2NvbG9yOnJl ZCI+JiMxMjg1MjE7PC9zcGFuPjxzcGFuIHN0eWxlPSJjb2xvcjpyZWQiPiBJIGFtIGZpbmUgZWl0 aGVyIHdheXMuDQo8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0 Ij48c3BhbiBzdHlsZT0iY29sb3I6cmVkIj4mbHQ7L21nbHQyJmd0OzxvOnA+PC9vOnA+PC9zcGFu PjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPHAg Y2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0O0QuMi4mbmJzcDsgUHJvdGVjdGVkIE1lc3NhZ2UgRmll bGRzPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7PG86cD4mbmJz cDs8L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7PG86cD4mbmJzcDs8L286 cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7PG86cD4mbmJzcDs8L286cD48L3A+ DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7Jm5ic3A7Jm5ic3A7IFByb3RlY3RlZCBtZXNz YWdlIGZpZWxkcyBhcmUgaW5jbHVkZWQgaW4gdGhlIFBsYWludGV4dCAoU2VjdGlvbiA1LjMpPG86 cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7Jm5ic3A7Jm5ic3A7IGFu ZCB0aGUgQWRkaXRpb25hbCBBdXRoZW50aWNhdGVkIERhdGEgKFNlY3Rpb24gNS40KSBvZiB0aGU8 bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDsmbmJzcDsmbmJzcDsg Q09TRV9FbmNyeXB0MCBvYmplY3QgYW5kIGVuY3J5cHRlZCB1c2luZyBhbiBBRUFEIGFsZ29yaXRo bS48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDs8bzpwPiZuYnNw OzwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDsmbmJzcDsmbmJzcDsgT1ND T1JFIGRlcGVuZHMgb24gYSBwcmUtZXN0YWJsaXNoZWQgcmFuZG9tIE1hc3RlciBTZWNyZXQ8bzpw PjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDsmbmJzcDsmbmJzcDsgKFNl Y3Rpb24gMTIuMykgdXNlZCB0byBkZXJpdmUgZW5jcnlwdGlvbiBrZXlzLCBhbmQgYSBjb25zdHJ1 Y3Rpb24gZm9yPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7Jm5i c3A7Jm5ic3A7IG1ha2luZyAoa2V5LCBub25jZSkgcGFpcnMgdW5pcXVlIChBcHBlbmRpeCBELjMp LiZuYnNwOyBBc3N1bWluZyB0aGlzIGlzPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxh aW5UZXh0Ij4mZ3Q7Jm5ic3A7Jm5ic3A7IHRydWUsIGFuZCB0aGUga2V5cyBhcmUgdXNlZCBmb3Ig bm8gbW9yZSBkYXRhIHRoYW4gaW5kaWNhdGVkIGluPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0i TXNvUGxhaW5UZXh0Ij4mZ3Q7Jm5ic3A7Jm5ic3A7IFNlY3Rpb24gNy4yLjEsIE9TQ09SRSBzaG91 bGQgcHJvdmlkZSB0aGUgZm9sbG93aW5nIGd1YXJhbnRlZXM6PG86cD48L286cD48L3A+DQo8cCBj bGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7PG86cD4mbmJzcDs8L286cD48L3A+DQo8cCBjbGFzcz0i TXNvUGxhaW5UZXh0Ij4mZ3Q7Jm5ic3A7Jm5ic3A7IG8mbmJzcDsgQ29uZmlkZW50aWFsaXR5OiBB biBhdHRhY2tlciBzaG91bGQgbm90IGJlIGFibGUgdG8gZGV0ZXJtaW5lIHRoZTxvOnA+PC9vOnA+ PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0OyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNw OyZuYnNwOyBwbGFpbnRleHQgY29udGVudHMgb2YgYSBnaXZlbiBPU0NPUkUgbWVzc2FnZSBvciBk ZXRlcm1pbmUgdGhhdDxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0 OyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyBkaWZmZXJlbnQgcGxhaW50ZXh0cyBhcmUg cmVsYXRlZCAoU2VjdGlvbiA1LjMpLjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWlu VGV4dCI+Jmd0OzxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+ Jmd0O1NlbGFuZGVyLCBldCBhbC4mbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsm bmJzcDsgRXhwaXJlcyBKYW51YXJ5IDI3LCAyMDE5Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5i c3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7 IFtQYWdlIDc0XTxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0Ozxv OnA+Jm5ic3A7PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0O0ludGVybmV0 LURyYWZ0Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5i c3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7 IE9TQ09SRSZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZu YnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNw OyZuYnNwOyAmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDtKdWx5IDIwMTg8bzpwPjwvbzpwPjwvcD4N CjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDs8bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjxwIGNs YXNzPSJNc29QbGFpblRleHQiPiZndDsmbmJzcDsmbmJzcDsgbyZuYnNwOyBJbnRlZ3JpdHk6IEFu IGF0dGFja2VyIHNob3VsZCBub3QgYmUgYWJsZSB0byBjcmFmdCBhIG5ldyBPU0NPUkU8bzpwPjwv bzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDsmbmJzcDsmbmJzcDsmbmJzcDsm bmJzcDsmbmJzcDsgbWVzc2FnZSB3aXRoIHByb3RlY3RlZCBtZXNzYWdlIGZpZWxkcyBkaWZmZXJl bnQgZnJvbSBhbiBleGlzdGluZzxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4 dCI+Jmd0OyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyBPU0NPUkUgbWVzc2FnZSB3aGlj aCB3aWxsIGJlIGFjY2VwdGVkIGJ5IHRoZSByZWNlaXZlci48bzpwPjwvbzpwPjwvcD4NCjxwIGNs YXNzPSJNc29QbGFpblRleHQiPiZndDs8bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjxwIGNsYXNzPSJN c29QbGFpblRleHQiPiZndDsmbmJzcDsmbmJzcDsgbyZuYnNwOyBSZXF1ZXN0LXJlc3BvbnNlIGJp bmRpbmc6IEFuIGF0dGFja2VyIHNob3VsZCBub3QgYmUgYWJsZSB0byBtYWtlIGE8bzpwPjwvbzpw PjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJz cDsmbmJzcDsgY2xpZW50IG1hdGNoIGEgcmVzcG9uc2UgdG8gdGhlIHdyb25nIHJlcXVlc3QuPG86 cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7PG86cD4mbmJzcDs8L286 cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7Jm5ic3A7Jm5ic3A7IG8mbmJzcDsg Tm9uLXJlcGxheWFiaWxpdHk6IEFuIGF0dGFja2VyIHNob3VsZCBub3QgYmUgYWJsZSB0byBjYXVz ZSB0aGU8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDsmbmJzcDsm bmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsgcmVjZWl2ZXIgdG8gYWNjZXB0IGEgbWVzc2FnZSB3aGlj aCBpdCBoYXMgcHJldmlvdXNseSByZWNlaXZlZCBhbmQ8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNz PSJNc29QbGFpblRleHQiPiZndDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsgYWNjZXB0 ZWQuPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7PG86cD4mbmJz cDs8L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7Jm5ic3A7Jm5ic3A7IElu IHRoZSBhYm92ZSwgdGhlIGF0dGFja2VyIGlzIGFueW9uZSBleGNlcHQgdGhlIGVuZHBvaW50cywg ZS5nLiBhPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7Jm5ic3A7 Jm5ic3A7IGNvbXByb21pc2VkIGludGVybWVkaWFyeS4mbmJzcDsgSW5mb3JtYWxseSwgT1NDT1JF IHByb3ZpZGVzIHRoZXNlPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4m Z3Q7Jm5ic3A7Jm5ic3A7IHByb3BlcnRpZXMgYnkgQUVBRC1wcm90ZWN0aW5nIHRoZSBwbGFpbnRl eHQgd2l0aCBhIHN0cm9uZyBrZXkgYW5kPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxh aW5UZXh0Ij4mZ3Q7Jm5ic3A7Jm5ic3A7IHVuaXF1ZW5lc3Mgb2YgKGtleSwgbm9uY2UpIHBhaXJz LiZuYnNwOyBBRUFEIGVuY3J5cHRpb24gW1JGQzUxMTZdIHByb3ZpZGVzPG86cD48L286cD48L3A+ DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7Jm5ic3A7Jm5ic3A7IGNvbmZpZGVudGlhbGl0 eSBhbmQgaW50ZWdyaXR5IGZvciB0aGUgZGF0YS4mbmJzcDsgUmVzcG9uc2UtcmVxdWVzdCBiaW5k aW5nPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7Jm5ic3A7Jm5i c3A7IGlzIHByb3ZpZGVkIGJ5IGluY2x1ZGluZyB0aGUga2lkIGFuZCBQYXJ0aWFsIElWIG9mIHRo ZSByZXF1ZXN0IGluIHRoZTxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+ Jmd0OyZuYnNwOyZuYnNwOyBBQUQgb2YgdGhlIHJlc3BvbnNlLiZuYnNwOyBOb24tcmVwbGF5YWJp bGl0eSBvZiByZXF1ZXN0cyBhbmQgbm90aWZpY2F0aW9uczxvOnA+PC9vOnA+PC9wPg0KPHAgY2xh c3M9Ik1zb1BsYWluVGV4dCI+Jmd0OyZuYnNwOyZuYnNwOyBpcyBwcm92aWRlZCBieSB1c2luZyB1 bmlxdWUgKGtleSwgbm9uY2UpIHBhaXJzIGFuZCBhIHJlcGxheTxvOnA+PC9vOnA+PC9wPg0KPHAg Y2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0OyZuYnNwOyZuYnNwOyBwcm90ZWN0aW9uIG1lY2hhbmlz bSAoYXBwbGljYXRpb24gZGVwZW5kZW50LCBzZWUgU2VjdGlvbiA3LjQpLjxvOnA+PC9vOnA+PC9w Pg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0OzxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPHAg Y2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0OyZuYnNwOyZuYnNwOyBPU0NPUkUgaXMgc3VzY2VwdGli bGUgdG8gYSB2YXJpZXR5IG9mIHRyYWZmaWMgYW5hbHlzaXMgYXR0YWNrcyBiYXNlZDxvOnA+PC9v OnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0OyZuYnNwOyZuYnNwOyBvbiBvYnNl cnZpbmcgdGhlIGxlbmd0aCBhbmQgdGltaW5nIG9mIGVuY3J5cHRlZCBwYWNrZXRzLiZuYnNwOyBP U0NPUkUgZG9lczxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0OyZu YnNwOyZuYnNwOyBub3QgcHJvdmlkZSBhbnkgc3BlY2lmaWMgZGVmZW5zZXMgYWdhaW5zdCB0aGlz IGZvcm0gb2YgYXR0YWNrIGJ1dCB0aGU8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFp blRleHQiPiZndDsmbmJzcDsmbmJzcDsgYXBwbGljYXRpb24gbWF5IHVzZSBhIHBhZGRpbmcgbWVj aGFuaXNtIHRvIHByZXZlbnQgYW4gYXR0YWNrZXIgZnJvbTxvOnA+PC9vOnA+PC9wPg0KPHAgY2xh c3M9Ik1zb1BsYWluVGV4dCI+Jmd0OyZuYnNwOyZuYnNwOyBkaXJlY3RseSBkZXRlcm1pbmUgdGhl IGxlbmd0aCBvZiB0aGUgcGFkZGluZy4mbmJzcDsgSG93ZXZlciwgaW5mb3JtYXRpb248bzpwPjwv bzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDsmbmJzcDsmbmJzcDsgYWJvdXQg cGFkZGluZyBtYXkgc3RpbGwgYmUgcmV2ZWFsZWQgYnkgc2lkZS1jaGFubmVsIGF0dGFja3Mgb2Jz ZXJ2aW5nPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7Jm5ic3A7 Jm5ic3A7IGRpZmZlcmVuY2VzIGluIHRpbWluZy48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJN c29QbGFpblRleHQiPiZndDs8bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFp blRleHQiPiZndDtELjMuJm5ic3A7IFVuaXF1ZW5lc3Mgb2YgKGtleSwgbm9uY2UpPG86cD48L286 cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7PG86cD4mbmJzcDs8L286cD48L3A+ DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7Jm5ic3A7Jm5ic3A7IEluIHRoaXMgc2VjdGlv biB3ZSBzaG93IHRoYXQgKGtleSwgbm9uY2UpIHBhaXJzIGFyZSB1bmlxdWUgYXMgbG9uZyBhczxv OnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0OyZuYnNwOyZuYnNwOyB0 aGUgcmVxdWlyZW1lbnRzIGluIFNlY3Rpb25zIDMuMyBhbmQgNy4yLjEgYXJlIGZvbGxvd2VkLjxv OnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0OzxvOnA+Jm5ic3A7PC9v OnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0OyZuYnNwOyZuYnNwOyBGaXggYSBD b21tb24gQ29udGV4dCAoU2VjdGlvbiAzLjEpIGFuZCBhbiBlbmRwb2ludCwgY2FsbGVkIHRoZTxv OnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0OyZuYnNwOyZuYnNwOyBl bmNyeXB0aW5nIGVuZHBvaW50LiZuYnNwOyBBbiBlbmRwb2ludCBtYXkgYWx0ZXJuYXRlIGJldHdl ZW4gY2xpZW50IGFuZDxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0 OyZuYnNwOyZuYnNwOyBzZXJ2ZXIgcm9sZXMsIGJ1dCBlYWNoIGVuZHBvaW50IGFsd2F5cyBlbmNy eXB0cyB3aXRoIHRoZSBTZW5kZXIgS2V5PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxh aW5UZXh0Ij4mZ3Q7Jm5ic3A7Jm5ic3A7IG9mIGl0cyBTZW5kZXIgQ29udGV4dC4mbmJzcDsgU2Vu ZGVyIEtleXMgYXJlIChzdG9jaGFzdGljYWxseSkgdW5pcXVlIHNpbmNlPG86cD48L286cD48L3A+ DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7Jm5ic3A7Jm5ic3A7IHRoZXkgYXJlIGRlcml2 ZWQgd2l0aCBIS0RGIHVzaW5nIHVuaXF1ZSBTZW5kZXIgSURzLCBzbyBtZXNzYWdlczxvOnA+PC9v OnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0OyZuYnNwOyZuYnNwOyBlbmNyeXB0 ZWQgYnkgZGlmZmVyZW50IGVuZHBvaW50cyB1c2UgZGlmZmVyZW50IGtleXMuJm5ic3A7IEl0IHJl bWFpbnMgdG88bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDsmbmJz cDsmbmJzcDsgcHJvdmUgdGhhdCB0aGUgbm9uY2VzIHVzZWQgYnkgdGhlIGZpeGVkIGVuZHBvaW50 IGFyZSB1bmlxdWUuPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7 PG86cD4mbmJzcDs8L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7Jm5ic3A7 Jm5ic3A7IFNpbmNlIHRoZSBDb21tb24gSVYgaXMgZml4ZWQsIHRoZSBub25jZXMgYXJlIGRldGVy bWluZWQgYnkgYSBQYXJ0aWFsPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0 Ij4mZ3Q7Jm5ic3A7Jm5ic3A7IElWIChQSVYpIGFuZCB0aGUgU2VuZGVyIElEIG9mIHRoZSBlbmRw b2ludCBnZW5lcmF0aW5nIHRoYXQgUGFydGlhbCBJVjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9 Ik1zb1BsYWluVGV4dCI+Jmd0OyZuYnNwOyZuYnNwOyAoSURfUElWKS4mbmJzcDsgVGhlIG5vbmNl IGNvbnN0cnVjdGlvbiAoU2VjdGlvbiA1LjIpIHdpdGggdGhlIHNpemUgb2YgdGhlPG86cD48L286 cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7Jm5ic3A7Jm5ic3A7IElEX1BJViAo UykgY3JlYXRlcyB1bmlxdWUgbm9uY2VzIGZvciBkaWZmZXJlbnQgKElEX1BJViwgUElWKSBwYWly cy48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDsmbmJzcDsmbmJz cDsgVGhlcmUgYXJlIHR3byBjYXNlczo8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFp blRleHQiPiZndDs8bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQi PiZndDtTZWxhbmRlciwgZXQgYWwuJm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7 Jm5ic3A7IEV4cGlyZXMgSmFudWFyeSAyNywgMjAxOSZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZu YnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNw OyBbUGFnZSA3NV08bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDs8 bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDtJbnRlcm5l dC1EcmFmdCZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZu YnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNw OyBPU0NPUkUmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsm bmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJz cDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsgSnVseSAyMDE4PG86cD48L286cD48L3A+ DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7PG86cD4mbmJzcDs8L286cD48L3A+DQo8cCBj bGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7Jm5ic3A7Jm5ic3A7IEEuJm5ic3A7IEZvciByZXF1ZXN0 cywgYW5kIHJlc3BvbnNlcyB3aXRoIFBhcnRpYWwgSVYgKGUuZy4mbmJzcDsgT2JzZXJ2ZTxvOnA+ PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0OyZuYnNwOyZuYnNwOyBub3Rp ZmljYXRpb25zKTo8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDs8 bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDsmbmJzcDsm bmJzcDsgbyZuYnNwOyBJRF9QSVYgPSBTZW5kZXIgSUQgb2YgdGhlIGVuY3J5cHRpbmcgZW5kcG9p bnQ8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDs8bzpwPiZuYnNw OzwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDsmbmJzcDsmbmJzcDsgbyZu YnNwOyBQSVYgPSBjdXJyZW50IFBhcnRpYWwgSVYgb2YgdGhlIGVuY3J5cHRpbmcgZW5kcG9pbnQ8 bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDs8bzpwPiZuYnNwOzwv bzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDsmbmJzcDsmbmJzcDsgU2luY2Ug dGhlIGVuY3J5cHRpbmcgZW5kcG9pbnQgc3RlcHMgdGhlIFBhcnRpYWwgSVYgZm9yIGVhY2ggdXNl LCB0aGU8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDsmbmJzcDsm bmJzcDsgbm9uY2VzIHVzZWQgaW4gY2FzZSBBIGFyZSBhbGwgdW5pcXVlIGFzIGxvbmcgYXMgdGhl IG51bWJlciBvZjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0OyZu YnNwOyZuYnNwOyBlbmNyeXB0ZWQgbWVzc2FnZXMgaXMga2VwdCB3aXRoaW4gdGhlIHJlcXVpcmVk IHJhbmdlIChTZWN0aW9uIDcuMi4xKS48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFp blRleHQiPiZndDs8bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQi PiZndDsmbmJzcDsmbmJzcDsgQi4mbmJzcDsgRm9yIHJlc3BvbnNlcyB3aXRob3V0IFBhcnRpYWwg SVYgKGUuZy4gc2luZ2xlIHJlc3BvbnNlIHRvIGE8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJN c29QbGFpblRleHQiPiZndDsmbmJzcDsmbmJzcDsgcmVxdWVzdCk6PG86cD48L286cD48L3A+DQo8 cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7PG86cD4mbmJzcDs8L286cD48L3A+DQo8cCBjbGFz cz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7Jm5ic3A7Jm5ic3A7IG8mbmJzcDsgSURfUElWID0gU2VuZGVy IElEIG9mIHRoZSBlbmRwb2ludCBnZW5lcmF0aW5nIHRoZSByZXF1ZXN0PG86cD48L286cD48L3A+ DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7PG86cD4mbmJzcDs8L286cD48L3A+DQo8cCBj bGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7Jm5ic3A7Jm5ic3A7IG8mbmJzcDsgUElWID0gUGFydGlh bCBJViBvZiB0aGUgcmVxdWVzdDxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4 dCI+Jmd0OzxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0 OyZuYnNwOyZuYnNwOyBTaW5jZSB0aGUgU2VuZGVyIElEcyBhcmUgdW5pcXVlLCBJRF9QSVYgaXMg ZGlmZmVyZW50IGZyb20gdGhlIFNlbmRlcjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1Bs YWluVGV4dCI+Jmd0OyZuYnNwOyZuYnNwOyBJRCBvZiB0aGUgZW5jcnlwdGluZyBlbmRwb2ludC4m bmJzcDsgVGhlcmVmb3JlLCB0aGUgbm9uY2VzIGluIGNhc2UgQiBhcmU8bzpwPjwvbzpwPjwvcD4N CjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDsmbmJzcDsmbmJzcDsgZGlmZmVyZW50IGNvbXBh cmVkIHRvIG5vbmNlcyBpbiBjYXNlIEEsIHdoZXJlIHRoZSBlbmNyeXB0aW5nIGVuZHBvaW50PG86 cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7Jm5ic3A7Jm5ic3A7IGdl bmVyYXRlZCB0aGUgUGFydGlhbCBJVi4mbmJzcDsgU2luY2UgdGhlIFBhcnRpYWwgSVYgb2YgdGhl IHJlcXVlc3QgaXM8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDsm bmJzcDsmbmJzcDsgdmVyaWZpZWQgZm9yIHJlcGxheSAoU2VjdGlvbiA3LjQpIGFzc29jaWF0ZWQg dG8gdGhpcyBSZWNpcGllbnQ8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQi PiZndDsmbmJzcDsmbmJzcDsgQ29udGV4dCwgUElWIGlzIHVuaXF1ZSBmb3IgdGhpcyBJRF9QSVYs IHdoaWNoIG1ha2VzIGFsbCBub25jZXMgaW48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Q bGFpblRleHQiPiZndDsmbmJzcDsmbmJzcDsgY2FzZSBCIGRpc3RpbmN0LjxvOnA+PC9vOnA+PC9w Pg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0OzxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPHAg Y2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0O0QuNC4mbmJzcDsgVW5wcm90ZWN0ZWQgTWVzc2FnZSBG aWVsZHM8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDs8bzpwPiZu YnNwOzwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDsmbmJzcDsmbmJzcDsg VGhpcyBzZWN0aW9uIGxpc3RzIGFuZCBkaXNjdXNzZXMgaXNzdWVzIHdpdGggdW5wcm90ZWN0ZWQg bWVzc2FnZTxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0OyZuYnNw OyZuYnNwOyBmaWVsZHMuPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4m Z3Q7PG86cD4mbmJzcDs8L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7RC40 LjEuJm5ic3A7IENvQVAgSGVhZGVyIEZpZWxkczxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1z b1BsYWluVGV4dCI+Jmd0OzxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWlu VGV4dCI+Jmd0OyZuYnNwOyZuYnNwOyBvJm5ic3A7IFZlcnNpb24uJm5ic3A7IFRoZSBDb0FQIHZl cnNpb24gW1JGQzcyNTJdIGlzIG5vdCBleHBlY3RlZCB0byBiZTxvOnA+PC9vOnA+PC9wPg0KPHAg Y2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0OyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyBz ZW5zaXRpdmUgdG8gZGlzY2xvc2UuJm5ic3A7IEN1cnJlbnRseSB0aGVyZSBpcyBvbmx5IG9uZSBD b0FQIHZlcnNpb248bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDsm bmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsgZGVmaW5lZC4mbmJzcDsgQSBjaGFuZ2Ugb2Yg dGhpcyBwYXJhbWV0ZXIgaXMgcG90ZW50aWFsbHkgYSBkZW5pYWwtb2YtPG86cD48L286cD48L3A+ DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5i c3A7IHNlcnZpY2UgYXR0YWNrLiZuYnNwOyBGdXR1cmUgdmVyc2lvbnMgb2YgQ29BUCBuZWVkIHRv IGFuYWx5emUgYXR0YWNrczxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+ Jmd0OyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyB0byBPU0NPUkUgcHJvdGVjdGVkIG1l c3NhZ2VzIGR1ZSB0byBhbiBhZHZlcnNhcnkgY2hhbmdpbmcgdGhlIENvQVA8bzpwPjwvbzpwPjwv cD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsm bmJzcDsgdmVyc2lvbi48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZn dDs8bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDsmbmJz cDsmbmJzcDsgbyZuYnNwOyBUb2tlbi9Ub2tlbiBMZW5ndGguJm5ic3A7IFRoZSBUb2tlbiBmaWVs ZCBpcyBhIGNsaWVudC1sb2NhbCBpZGVudGlmaWVyPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0i TXNvUGxhaW5UZXh0Ij4mZ3Q7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7IGZvciBkaWZm ZXJlbnRpYXRpbmcgYmV0d2VlbiBjb25jdXJyZW50IHJlcXVlc3RzIFtSRkM3MjUyXS4mbmJzcDsg QW48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDsmbmJzcDsmbmJz cDsmbmJzcDsmbmJzcDsmbmJzcDsgZWF2ZXNkcm9wcGVyIHJlYWRpbmcgdGhlIHRva2VuIGNhbiBt YXRjaCByZXF1ZXN0cyB0byByZXNwb25zZXM8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Q bGFpblRleHQiPiZndDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsgd2hpY2ggY2FuIGJl IHVzZWQgaW4gdHJhZmZpYyBhbmFseXNpcy4mbmJzcDsgSW4gcGFydGljdWxhciB0aGlzIGlzIHRy dWU8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDsmbmJzcDsmbmJz cDsmbmJzcDsmbmJzcDsmbmJzcDsgZm9yIG5vdGlmaWNhdGlvbnMsIHdoZXJlIG11bHRpcGxlIHJl c3BvbnNlcyBhcmUgbWF0Y2hlZCB3aXRoIG9uZTxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1z b1BsYWluVGV4dCI+Jmd0OyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyByZXF1ZXN0LiZu YnNwOyBDb0FQIHByb3hpZXMgYXJlIGFsbG93ZWQgdG8gY2hhbmdlIFRva2VuIGFuZCBUb2tlbjxv OnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0OyZuYnNwOyZuYnNwOyZu YnNwOyZuYnNwOyZuYnNwOyBMZW5ndGggYmV0d2VlbiBVRFAgaG9wcy4mbmJzcDsgSG93ZXZlciwg bW9kaWZpY2F0aW9ucyBvZiBUb2tlbiBhbmQ8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Q bGFpblRleHQiPiZndDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsgVG9rZW4gTGVuZ3Ro IGR1cmluZyBhIFVEUCBob3AgbWF5IGJlY29tZSBhIGRlbmlhbC1vZi1zZXJ2aWNlPG86cD48L286 cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7PG86cD4mbmJzcDs8L286cD48L3A+ DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7U2VsYW5kZXIsIGV0IGFsLiZuYnNwOyZuYnNw OyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyBFeHBpcmVzIEphbnVhcnkgMjcsIDIwMTkm bmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJz cDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsgW1BhZ2UgNzZdPG86cD48L286cD48L3A+DQo8cCBj bGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7PG86cD4mbmJzcDs8L286cD48L3A+DQo8cCBjbGFzcz0i TXNvUGxhaW5UZXh0Ij4mZ3Q7SW50ZXJuZXQtRHJhZnQmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsm bmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJz cDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsgT1NDT1JFJm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7 Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5i c3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7 IEp1bHkgMjAxODxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0Ozxv OnA+Jm5ic3A7PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0OyZuYnNwOyZu YnNwOyZuYnNwOyAmbmJzcDsmbmJzcDthdHRhY2ssIHNpbmNlIGl0IG1heSBwcmV2ZW50IHRoZSBj bGllbnQgdG8gaWRlbnRpZnkgdG8gd2hpY2g8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Q bGFpblRleHQiPiZndDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsgcmVxdWVzdCB0aGUg cmVzcG9uc2UgYmVsb25ncyBvciB0byBmaW5kIHRoZSBjb3JyZWN0IGluZm9ybWF0aW9uIHRvPG86 cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7Jm5ic3A7Jm5ic3A7Jm5i c3A7Jm5ic3A7Jm5ic3A7IHZlcmlmeSBpbnRlZ3JpdHkgb2YgdGhlIHJlc3BvbnNlLjxvOnA+PC9v OnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0OyZsdDttZ2x0Jmd0OzxvOnA+PC9v OnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0O0kgYW0gcmVhZGluZyB0aGUgdGV4 dCBhcy4gV2hlbiB0aGUgYXR0YWNrZXIgaXMgb24tcGF0aCwgYSBsb25nIFRva2VuIGRvZXMNCjxv OnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0O25vdDxvOnA+PC9vOnA+ PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0O3ByZXZlbnRzIHRoZSBhdHRhY2sgYmFz ZWQgb24gYSBzcG9vZmVkIHJlc3BvbnNlLiBIb3dldmVyLCBmb3IgYW4gYXR0YWNrZXINCjxvOnA+ PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0O3RoYXQ8bzpwPjwvbzpwPjwv cD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDtpcyBub3Qgb24gcGF0aCwgdGhlIGF0dGFj a2VyIG5lZWRzIHRvIGd1ZXNzIHRoZSBUb2tlbiwgYW5kIHRoaXMgY2FuIGJlPG86cD48L286cD48 L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7bWl0aWdhdGVkIChwYXJ0aWFsbHkpIGJ5 IGluY3JlYXNpbmcgdGhlIFRva2VuIHNpemUuJm5ic3A7IE5vdGUgdGhhdCBpbiB0aGUNCjxvOnA+ PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0O2xhdGVzdDxvOnA+PC9vOnA+ PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0O2Nhc2UsIGEgbG9uZyBUb2tlbiBzaG91 bGQgbm90IGJlIHNlZW4gYXMgYSByZXBsYWNlbWVudCBmb3IgY3J5cHRvZ3JhcGhpYzxvOnA+PC9v OnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0O3Byb3RlY3Rpb24gb2YgdGhlIG1l c3NhZ2UuICZsdDsvbWdsdCZndDs8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRl eHQiPiZndDs8bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZn dDtbR1M6XSBUaGVyZSBzZWVtcyB0byBiZSBhIG1pc3VuZGVyc3RhbmRpbmcgc29tZXdoZXJlLiBU aGVyZSBpcyBubyBuZWVkDQo8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQi PiZndDtmb3IgYW55b25lIHRvIOKAnGd1ZXNzIHRoZSBUb2tlbuKAnSBzaW5jZSBpdCBpcyBub3Qg ZW5jcnlwdGVkLiBUaGVyZSBpcw0KPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5U ZXh0Ij4mZ3Q7bm90aGluZyBoaW50ZWQgYWJvdXQgVG9rZW4gYmVpbmcgYSDigJxyZXBsYWNlbWVu dCBmb3IgY3J5cHRv4oCdLCBzbyBJIGRvbuKAmXQNCjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9 Ik1zb1BsYWluVGV4dCI+Jmd0O3VuZGVyc3RhbmQgd2h5IGFueW9uZSB3b3VsZCBiZSBsZWFkIHRv IHRoaW5rIHRoYXQuIFRva2VuIGxlbmd0aCBpcw0KPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0i TXNvUGxhaW5UZXh0Ij4mZ3Q7bWVudGlvbmVkIHR3aWNlOyBpbiB0aGUgbmV4dCB0byBsYXN0IHNl bnRlbmNlIC0gbWVudGlvbmluZyB0aGF0IENvQVANCjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9 Ik1zb1BsYWluVGV4dCI+Jmd0O3Byb3hpZXMgKGxlZ2l0aW1hdGVseSkgbWF5IGNoYW5nZSBUb2tl biBsZW5ndGg7IGFuZCBpbiB0aGUgbGFzdCBzZW50ZW5jZQ0KPG86cD48L286cD48L3A+DQo8cCBj bGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7LSBkZXNjcmliaW5nIHRoYXQgYW4gb24tcGF0aCBhdHRh Y2tlciBtYXkgbW9kaWZ5IHRoZSBUb2tlbiBMZW5ndGggd2hpY2gNCjxvOnA+PC9vOnA+PC9wPg0K PHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0O2VpdGhlciBjcmVhdGVkIG1pc21hdGNoIGJldHdl ZW4gcmVxdWVzdCBhbmQgcmVzcG9uc2Ugb3Igbm8gbWF0Y2ggYXQgYWxsLA0KPG86cD48L286cD48 L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7d2hpY2ggYXJlIGJvdGggZGVuaWFsIG9m IHNlcnZpY2UuIElzIGl0IGNsZWFyZXIgaW4gdGhlIGZvbGxvd2luZyB3YXk/PG86cD48L286cD48 L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij5ORVc8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNz PSJNc29QbGFpblRleHQiPiZndDtvIFRva2VuL1Rva2VuIExlbmd0aC4gVGhlIFRva2VuIGZpZWxk IGlzIGEgY2xpZW50LWxvY2FsIGlkZW50aWZpZXI8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJN c29QbGFpblRleHQiPiZndDtmb3IgZGlmZmVyZW50aWF0aW5nIGJldHdlZW4gY29uY3VycmVudCBy ZXF1ZXN0cyBbUkZDNzI1Ml0uPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0 Ij4mZ3Q7PG86cD4mbmJzcDs8L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7 PG86cD4mbmJzcDs8L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij48c3BhbiBzdHls ZT0iY29sb3I6cmVkIj4mbHQ7bWdsdDImZ3Q7PG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xh c3M9Ik1zb1BsYWluVGV4dCI+PHNwYW4gc3R5bGU9ImNvbG9yOnJlZCI+V2hhdCBJIHdhcyB0cnlp bmcgdG8gc2F5IGlzIHRoYXQgaWYgeW91IHdhbnQgdG8gc3Bvb2YgYSByZXNwb25zZSAoIGxpa2Ug aW4gRE5TKSBhbmQgeW91IGFyZSBub3Qgb24gcGF0aCwgeW91IG5lZWQgdG8gZ3Vlc3MgdGhlIFRv a2VuLiBJbiB0aGF0IHNlbnNlLCB0aGUgbG9uZ2VyIHRoZSBzYWZlci4gSG93ZXZlciwgYXMgZm9y IEROUywgd2Ugc2hvdWxkIG5vdCByZWx5DQogb24gdGhpcy4gJm5ic3A7PG86cD48L286cD48L3Nw YW4+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+PHNwYW4gc3R5bGU9ImNvbG9yOnJlZCI+ Jmx0Oy9tZ2x0MiZndDs8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5U ZXh0Ij4mZ3Q7PG86cD4mbmJzcDs8L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij5D b0FQIHByb3hpZXMgYXJlIGFsbG93ZWQgdG8gY2hhbmdlIFRva2VuIGFuZCBUb2tlbjxvOnA+PC9v OnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0OzxvOnA+Jm5ic3A7PC9vOnA+PC9w Pg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0OzxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPHAg Y2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0O0xlbmd0aCBiZXR3ZWVuIFVEUCBob3BzLiBBbjxvOnA+ PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0OzxvOnA+Jm5ic3A7PC9vOnA+ PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0OzxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0K PHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0O2VhdmVzZHJvcHBlciByZWFkaW5nIHRoZSB0b2tl biBjYW4gbWF0Y2ggcmVxdWVzdHMgdG8gcmVzcG9uc2VzPG86cD48L286cD48L3A+DQo8cCBjbGFz cz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7PG86cD4mbmJzcDs8L286cD48L3A+DQo8cCBjbGFzcz0iTXNv UGxhaW5UZXh0Ij4mZ3Q7PG86cD4mbmJzcDs8L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5U ZXh0Ij4mZ3Q7d2hpY2ggY2FuIGJlIHVzZWQgaW4gdHJhZmZpYyBhbmFseXNpcy4gSW4gcGFydGlj dWxhciB0aGlzIGlzIHRydWU8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQi PiZndDs8bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDs8 bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDtmb3Igbm90 aWZpY2F0aW9ucywgd2hlcmUgbXVsdGlwbGUgcmVzcG9uc2VzIGFyZSBtYXRjaGVkIHdpdGggb25l PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7PG86cD4mbmJzcDs8 L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7PG86cD4mbmJzcDs8L286cD48 L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7cmVxdWVzdC4gTW9kaWZpY2F0aW9ucyBv ZiBUb2tlbiBhbmQ8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDs8 bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDs8bzpwPiZu YnNwOzwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDtUb2tlbiBMZW5ndGgg Ynkgb24tcGF0aCBhdHRhY2tlcnMgZHVyaW5nIGEgVURQIGhvcCBtYXkgYmVjb21lIGENCjxvOnA+ PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0O2RlbmlhbC1vZi1zZXJ2aWNl PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7PG86cD4mbmJzcDs8 L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7PG86cD4mbmJzcDs8L286cD48 L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7YXR0YWNrLCBzaW5jZSBpdCBtYXkgcHJl dmVudCBhIGNsaWVudCB0byBpZGVudGlmeSB0byB3aGljaDxvOnA+PC9vOnA+PC9wPg0KPHAgY2xh c3M9Ik1zb1BsYWluVGV4dCI+Jmd0OzxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1z b1BsYWluVGV4dCI+Jmd0OzxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWlu VGV4dCI+Jmd0O3JlcXVlc3QgdGhlIHJlc3BvbnNlIGJlbG9uZ3Mgb3IgdG8gZmluZCB0aGUgY29y cmVjdCBpbmZvcm1hdGlvbiB0bzxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4 dCI+Jmd0OzxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0 OzxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0O3Zlcmlm eSBpbnRlZ3JpdHkgb2YgdGhlIHJlc3BvbnNlLjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1z b1BsYWluVGV4dCI+Jmd0OzxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWlu VGV4dCI+Jmd0OzxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+ PG86cD4mbmJzcDs8L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij48bzpwPiZuYnNw OzwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPjxvOnA+Jm5ic3A7PC9vOnA+PC9w Pg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jm5ic3A7Jm5ic3A7IG8mbmJzcDsgQ29kZS4mbmJz cDsgVGhlIE91dGVyIENvQVAgQ29kZSBvZiBhbiBPU0NPUkUgbWVzc2FnZSBpcyBQT1NUIG9yIEZF VENIPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mbmJzcDsmbmJzcDsm bmJzcDsmbmJzcDsmbmJzcDsgZm9yIHJlcXVlc3RzIHdpdGggY29ycmVzcG9uZGluZyByZXNwb25z ZSBjb2Rlcy4mbmJzcDsgVGhlIHVzZSBvZiBGRVRDSDxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9 Ik1zb1BsYWluVGV4dCI+Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7IHJldmVhbHMgbm8g bW9yZSB0aGFuIHdoYXQgaXMgcmV2ZWFsZWQgYnkgdGhlIE91dGVyIE9ic2VydmUgb3B0aW9uLjxv OnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jm5ic3A7Jm5ic3A7Jm5ic3A7 Jm5ic3A7Jm5ic3A7IENoYW5naW5nIHRoZSBPdXRlciBDb2RlIG1heSBiZSBhIGRlbmlhbC1vZi1z ZXJ2aWNlIGF0dGFjayBieTxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+ Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7IGNhdXNpbmcgZXJyb3JzIGluIHRoZSBwcm94 eSBwcm9jZXNzaW5nLjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+PG86 cD4mbmJzcDs8L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mbmJzcDsmbmJzcDsg byZuYnNwOyBUeXBlL01lc3NhZ2UgSUQuJm5ic3A7IFRoZSBUeXBlL01lc3NhZ2UgSUQgZmllbGRz IFtSRkM3MjUyXSByZXZlYWw8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQi PiZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyBpbmZvcm1hdGlvbiBhYm91dCB0aGUgVURQ IHRyYW5zcG9ydCBiaW5kaW5nLCBlLmcuIGFuIGVhdmVzZHJvcHBlcjxvOnA+PC9vOnA+PC9wPg0K PHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7IHJl YWRpbmcgdGhlIFR5cGUgb3IgTWVzc2FnZSBJRCBnYWluIGluZm9ybWF0aW9uIGFib3V0IGhvdyBV RFA8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZuYnNwOyZuYnNwOyZu YnNwOyZuYnNwOyZuYnNwOyBtZXNzYWdlcyBhcmUgcmVsYXRlZCB0byBlYWNoIG90aGVyLiZuYnNw OyBDb0FQIHByb3hpZXMgYXJlIGFsbG93ZWQgdG88bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJN c29QbGFpblRleHQiPiZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyBjaGFuZ2UgVHlwZSBh bmQgTWVzc2FnZSBJRC4mbmJzcDsgVGhlc2UgbWVzc2FnZSBmaWVsZHMgYXJlIG5vdCBwcmVzZW50 PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mbmJzcDsmbmJzcDsmbmJz cDsmbmJzcDsmbmJzcDsgaW4gQ29BUCBvdmVyIFRDUCBbUkZDODMyM10sIGFuZCBkb2VzIG5vdCBp bXBhY3QgdGhlIHJlcXVlc3QvPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0 Ij4mbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsgcmVzcG9uc2UgbWVzc2FnZS4mbmJzcDsg QSBjaGFuZ2Ugb2YgdGhlc2UgZmllbGRzIGluIGEgVURQIGhvcCBpcyBhPG86cD48L286cD48L3A+ DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsg ZGVuaWFsLW9mLXNlcnZpY2UgYXR0YWNrLiZuYnNwOyBCeSBzZW5kaW5nIGFuIEFDSywgYW4gYXR0 YWNrZXIgY2FuIG1ha2U8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZu YnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyB0aGUgZW5kcG9pbnQgYmVsaWV2ZSB0aGF0IHRo ZSBvdGhlciBlbmRwb2ludCByZWNlaXZlZCB0aGUgcHJldmlvdXM8bzpwPjwvbzpwPjwvcD4NCjxw IGNsYXNzPSJNc29QbGFpblRleHQiPiZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyBtZXNz YWdlLiZuYnNwOyBCeSBzZW5kaW5nIGEgUlNULCBhbiBhdHRhY2tlciBtYXkgYmUgYWJsZSB0byBj YW5jZWwgYW48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZuYnNwOyZu YnNwOyZuYnNwOyZuYnNwOyZuYnNwOyBvYnNlcnZhdGlvbiwgbWFrZSBvbmUgZW5kcG9pbnQgYmVs aWV2ZSB0aGUgb3RoZXIgZW5kcG9pbnQgaXM8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Q bGFpblRleHQiPiZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyBhbGl2ZSwgb3IgbWFrZSBv bmUgZW5kcG9pbnQgZW5kcG9pbnQgYmVsaWV2ZSB0aGF0IHRoZSBvdGhlcjxvOnA+PC9vOnA+PC9w Pg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7 IGVuZHBvaW50IGlzIG1pc3Npbmcgc29tZSBjb250ZXh0LiZuYnNwOyBCeSBjaGFuZ2luZyBhIE5P TiB0byBhIENPTiwgdGhlPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4m bmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsgYXR0YWNrZXIgY2FuIGNhdXNlIHRoZSByZWNl aXZpbmcgZW5kcG9pbnQgdG8gcmVzcG9uZCB0byBtZXNzYWdlczxvOnA+PC9vOnA+PC9wPg0KPHAg Y2xhc3M9Ik1zb1BsYWluVGV4dCI+Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7IGZvciB3 aGljaCBubyByZXNwb25zZSB3YXMgcmVxdWVzdGVkLjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9 Ik1zb1BsYWluVGV4dCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5U ZXh0Ij4mbmJzcDsmbmJzcDsgbyZuYnNwOyBMZW5ndGguJm5ic3A7IFRoaXMgZmllbGQgY29udGFp biB0aGUgbGVuZ3RoIG9mIHRoZSBtZXNzYWdlIFtSRkM4MzIzXTxvOnA+PC9vOnA+PC9wPg0KPHAg Y2xhc3M9Ik1zb1BsYWluVGV4dCI+Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7ICZuYnNwO3doaWNo IG1heSBiZSB1c2VkIGZvciB0cmFmZmljIGFuYWx5c2lzLiZuYnNwOyBUaGVzZSBtZXNzYWdlIGZp ZWxkcyBhcmU8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZuYnNwOyZu YnNwOyZuYnNwOyZuYnNwOyZuYnNwOyBub3QgcHJlc2VudCBpbiBDb0FQIG92ZXIgVURQLCBhbmQg ZG9lcyBub3QgaW1wYWN0IHRoZSByZXF1ZXN0LzxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1z b1BsYWluVGV4dCI+Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7IHJlc3BvbnNlIG1lc3Nh Z2UuJm5ic3A7IEEgY2hhbmdlIG9mIExlbmd0aCBpcyBhIGRlbmlhbC1vZi1zZXJ2aWNlPG86cD48 L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mbmJzcDsmbmJzcDsmbmJzcDsmbmJz cDsmbmJzcDsgYXR0YWNrIHNpbWlsYXIgdG8gY2hhbmdpbmcgVENQIGhlYWRlciBmaWVsZHMuPG86 cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij48bzpwPiZuYnNwOzwvbzpwPjwv cD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPkQuNC4yLiZuYnNwOyBDb0FQIE9wdGlvbnM8bzpw PjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPjxvOnA+Jm5ic3A7PC9vOnA+PC9w Pg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jm5ic3A7Jm5ic3A7IG8mbmJzcDsgTWF4LUFnZS4g VGhlIE91dGVyIE1heC1BZ2UgaXMgc2V0IHRvIHplcm8gdG8gYXZvaWQgdW5uZWNlc3Nhcnk8bzpw PjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZuYnNwOyZuYnNwOyZuYnNwOyZu YnNwOyZuYnNwOyBjYWNoaW5nIG9mIE9TQ09SRSBlcnJvciByZXNwb25zZXMuJm5ic3A7IENoYW5n aW5nIHRoaXMgdmFsdWUgdGh1cyBtYXk8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFp blRleHQiPiZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyBjYXVzZSB1bm5lY2Vzc2FyeSBj YWNoaW5nLiZuYnNwOyBObyBhZGRpdGlvbmFsIGluZm9ybWF0aW9uIGlzIGNhcnJpZWQ8bzpwPjwv bzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZuYnNwOyZuYnNwOyZuYnNwOyZuYnNw OyZuYnNwOyB3aXRoIHRoaXMgb3B0aW9uLjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1Bs YWluVGV4dCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4m bmJzcDsmbmJzcDsgbyZuYnNwOyBQcm94eS1VcmkvUHJveHktU2NoZW1lLiZuYnNwOyBUaGVzZSBv cHRpb25zIGFyZSB1c2VkIGluIGZvcndhcmQgcHJveHk8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNz PSJNc29QbGFpblRleHQiPiZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyBkZXBsb3ltZW50 cy4mbmJzcDsgV2l0aCBPU0NPUkUsIHRoZSBQcm94eS1Vcmkgb3B0aW9uIGRvZXMgbm90IGNvbnRh aW48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZuYnNwOyZuYnNwOyZu YnNwOyZuYnNwOyZuYnNwOyB0aGUgVXJpLVBhdGgvVXJpLVF1ZXJ5IHBhcnRzIG9mIHRoZSBVUkku Jm5ic3A7IFRoZSBvdGhlciBwYXJ0cyBvZjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1Bs YWluVGV4dCI+Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7IFByb3h5LVVyaSBjYW5ub3Qg YmUgcHJvdGVjdGVkIHNpbmNlIHRoZXkgYXJlIGFsbG93ZWQgdG8gYmUgY2hhbmdlZDxvOnA+PC9v OnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7 Jm5ic3A7IGJ5IGEgZm9yd2FyZCBwcm94eS4mbmJzcDsgVGhlIHNlcnZlciBjYW4gdmVyaWZ5IHdo YXQgc2NoZW1lIGlzIHVzZWQgaW48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRl eHQiPiZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyB0aGUgbGFzdCBob3AsIGJ1dCBub3Qg d2hhdCB3YXMgcmVxdWVzdGVkIGJ5IHRoZSBjbGllbnQgb3Igd2hhdCB3YXM8bzpwPjwvbzpwPjwv cD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNw OyB1c2VkIGluIHByZXZpb3VzIGhvcHMuPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxh aW5UZXh0Ij48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPlNl bGFuZGVyLCBldCBhbC4mbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsg RXhwaXJlcyBKYW51YXJ5IDI3LCAyMDE5Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7ICZuYnNwOyZu YnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwO1tQYWdl IDc3XTxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+PG86cD4mbmJzcDs8 L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij5JbnRlcm5ldC1EcmFmdCZuYnNwOyZu YnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNw OyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyBPU0NPUkUmbmJzcDsm bmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJz cDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsm bmJzcDsmbmJzcDsmbmJzcDsgSnVseSAyMDE4PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNv UGxhaW5UZXh0Ij48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQi PiZuYnNwOyZuYnNwOyA8c3BhbiBsYW5nPSJGUiI+byZuYnNwOyBVcmktSG9zdC9VcmktUG9ydC4m bmJzcDsgPC9zcGFuPkluIGZvcndhcmQgcHJveHkgZGVwbG95bWVudHMsIHRoZSBVcmktSG9zdC88 bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZuYnNwOyZuYnNwOyZuYnNw OyZuYnNwOyZuYnNwOyBVcmktUG9ydCBtYXkgYmUgY2hhbmdlZCBieSBhbiBhZHZlcnNhcnksIGFu ZCB0aGUgYXBwbGljYXRpb24gbmVlZHM8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFp blRleHQiPiZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyB0byBoYW5kbGUgdGhlIGNvbnNl cXVlbmNlcyBvZiB0aGF0IChzZWUgU2VjdGlvbiA0LjEuMy4yKS4mbmJzcDsgVGhlPG86cD48L286 cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsm bmJzcDsgVXJpLUhvc3QgbWF5IGVpdGhlciBiZSBvbWl0dGVkLCByZXZlYWwgaW5mb3JtYXRpb24g ZXF1aXZhbGVudCB0bzxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jm5i c3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7IHRoYXQgb2YgdGhlIElQIGFkZHJlc3Mgb3IgbW9y ZSBwcml2YWN5LXNlbnNpdGl2ZSBpbmZvcm1hdGlvbiw8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNz PSJNc29QbGFpblRleHQiPiZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyB3aGljaCBpcyBk aXNjb3VyYWdlZC48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPjxvOnA+ Jm5ic3A7PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jm5ic3A7Jm5ic3A7IG8m bmJzcDsgT2JzZXJ2ZS4mbmJzcDsgVGhlIE91dGVyIE9ic2VydmUgb3B0aW9uIGlzIGludGVuZGVk IGZvciBhIHByb3h5IHRvPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4m bmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsgc3VwcG9ydCBmb3J3YXJkaW5nIG9mIE9ic2Vy dmUgbWVzc2FnZXMsIGJ1dCBpcyBpZ25vcmVkIGJ5IHRoZTxvOnA+PC9vOnA+PC9wPg0KPHAgY2xh c3M9Ik1zb1BsYWluVGV4dCI+Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7IGVuZHBvaW50 cyBzaW5jZSB0aGUgSW5uZXIgT2JzZXJ2ZSBkZXRlcm1pbmVzIHRoZSBwcm9jZXNzaW5nIGluIHRo ZTxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jm5ic3A7Jm5ic3A7Jm5i c3A7Jm5ic3A7Jm5ic3A7IGVuZHBvaW50cy4mbmJzcDsgU2luY2UgdGhlIFBhcnRpYWwgSVYgcHJv dmlkZXMgYWJzb2x1dGUgb3JkZXJpbmcgb2Y8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Q bGFpblRleHQiPiZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyBub3RpZmljYXRpb25zIGl0 IGlzIG5vdCBwb3NzaWJsZSBmb3IgYW4gaW50ZXJtZWRpYXJ5IHRvIHNwb29mPG86cD48L286cD48 L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJz cDsgcmVvcmRlcmluZyAoc2VlIFNlY3Rpb24gNC4xLjMuNSkuJm5ic3A7IFRoZSBhYnNlbmNlIG9m IFBhcnRpYWwgSVYsPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mbmJz cDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsgc2luY2Ugb25seSBhbGxvd2VkIGZvciB0aGUgZmly c3Qgbm90aWZpY2F0aW9uLCBkb2VzIG5vdCBwcmV2ZW50PG86cD48L286cD48L3A+DQo8cCBjbGFz cz0iTXNvUGxhaW5UZXh0Ij4mbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsgY29ycmVjdCBv cmRlcmluZyBvZiBub3RpZmljYXRpb25zLiZuYnNwOyBUaGUgc2l6ZSBhbmQgZGlzdHJpYnV0aW9u cyBvZjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jm5ic3A7Jm5ic3A7 Jm5ic3A7Jm5ic3A7Jm5ic3A7IG5vdGlmaWNhdGlvbnMgb3ZlciB0aW1lIG1heSByZXZlYWwgaW5m b3JtYXRpb24gYWJvdXQgdGhlIGNvbnRlbnQ8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Q bGFpblRleHQiPiZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyBvciBuYXR1cmUgb2YgdGhl IG5vdGlmaWNhdGlvbnMuJm5ic3A7IENhbmNlbGxhdGlvbnMgKFNlY3Rpb24gNC4xLjMuNS4xKTxv OnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jm5ic3A7Jm5ic3A7Jm5ic3A7 Jm5ic3A7Jm5ic3A7IGFyZSBub3QgYm91bmQgdG8gdGhlIGNvcnJlc3BvbmRpbmcgcmVnaXN0cmF0 aW9ucyBpbiB0aGUgc2FtZSB3YXk8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRl eHQiPiZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyByZXNwb25zZXMgYXJlIGJvdW5kIHRv IHJlcXVlc3RzIGluIE9TQ09SRSAoc2VlIEFwcGVuZGl4IEQuMiksIGJ1dDxvOnA+PC9vOnA+PC9w Pg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7 IHRoYXQgZG9lcyBub3Qgb3BlbiB1cCBmb3IgYXR0YWNrcyBiYXNlZCBvbiBtaXNtYXRjaGVkPG86 cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mbmJzcDsmbmJzcDsmbmJzcDsm bmJzcDsgY2FuY2VsbGF0aW9ucywgc2luY2UgW1JGQzc2NDFdIHNwZWNpZmllcyB0aGF0IGZvciBj YW5jZWxsYXRpb25zIHRvPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4m bmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsgYmUgYWNjZXB0ZWQsIGFsbCBvcHRpb25zIGV4Y2VwdCBm b3IgRVRhZ3MgTVVTVCBiZSB0aGUgc2FtZSAoc2VlPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0i TXNvUGxhaW5UZXh0Ij4mbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsgU2VjdGlvbiAzLjYg b2YgW1JGQzc2NDFdKS4mbmJzcDsgRm9yIGRpZmZlcmVudCB0YXJnZXQgcmVzb3VyY2VzLCB0aGU8 bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZuYnNwOyZuYnNwOyZuYnNw OyZuYnNwOyZuYnNwOyBPU0NPUkUgb3B0aW9uIGlzIGRpZmZlcmVudCwgYW5kIGV2ZW4gaWYgdGhl IFRva2VuIGlzIG1vZGlmaWVkIHRvPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5U ZXh0Ij4mbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsgbWF0Y2ggYSBkaWZmZXJlbnQgb2Jz ZXJ2YXRpb24sIHN1Y2ggYSBjYW5jZWxsYXRpb24gd291bGQgbm90IGJlPG86cD48L286cD48L3A+ DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsg YWNjZXB0ZWQuPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij48bzpwPiZu YnNwOzwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZuYnNwOyZuYnNwOyBvJm5i c3A7IEJsb2NrMS9CbG9jazIvU2l6ZTEvU2l6ZTIuJm5ic3A7IFRoZSBPdXRlciBCbG9jayBvcHRp b25zIGVuYWJsZXM8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZuYnNw OyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyBmcmFnbWVudGF0aW9uIG9mIE9TQ09SRSBtZXNzYWdl cyBpbiBhZGRpdGlvbiB0byBzZWdtZW50YXRpb248bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJN c29QbGFpblRleHQiPiZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyBwZXJmb3JtZWQgYnkg dGhlIElubmVyIEJsb2NrIG9wdGlvbnMuJm5ic3A7IFRoZSBwcmVzZW5jZSBvZiB0aGVzZTxvOnA+ PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5i c3A7Jm5ic3A7IG9wdGlvbnMgaW5kaWNhdGVzIGEgbGFyZ2UgbWVzc2FnZSBiZWluZyBzZW50IGFu ZCB0aGUgbWVzc2FnZSBzaXplPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0 Ij4mbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsgY2FuIGJlIGVzdGltYXRlZCBhbmQgdXNl ZCBmb3IgdHJhZmZpYyBhbmFseXNpcy4mbmJzcDsgTWFuaXB1bGF0aW5nPG86cD48L286cD48L3A+ DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsg dGhlc2Ugb3B0aW9ucyBpcyBhIHBvdGVudGlhbCBkZW5pYWwtb2Ytc2VydmljZSBhdHRhY2ssIGUu Zy48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZuYnNwOyZuYnNwOyZu YnNwOyZuYnNwOyZuYnNwOyBpbmplY3Rpb24gb2YgYWxsZWdlZCBCbG9jayBmcmFnbWVudHMuJm5i c3A7IFRoZSBzcGVjaWZpY2F0aW9uIG9mIGE8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Q bGFpblRleHQiPiZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyBtYXhpbXVtIHNpemUgb2Yg bWVzc2FnZSwgTUFYX1VORlJBR01FTlRFRF9TSVpFPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0i TXNvUGxhaW5UZXh0Ij4mbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsgKFNlY3Rpb24gNC4x LjMuNC4yKSwgYWJvdmUgd2hpY2ggbWVzc2FnZXMgd2lsbCBiZSBkcm9wcGVkLCBpczxvOnA+PC9v OnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7 Jm5ic3A7IGludGVuZGVkIGFzIG9uZSBtZWFzdXJlIHRvIG1pdGlnYXRlIHRoaXMga2luZCBvZiBh dHRhY2suPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij48bzpwPiZuYnNw OzwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZuYnNwOyZuYnNwOyBvJm5ic3A7 IE5vLVJlc3BvbnNlLiZuYnNwOyBUaGUgT3V0ZXIgTm8tUmVzcG9uc2Ugb3B0aW9uIGlzIHVzZWQg dG8gc3VwcG9ydDxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jm5ic3A7 Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7IHByb3h5IGZ1bmN0aW9uYWxpdHksIHNwZWNpZmljYWxs eSB0byBhdm9pZCBlcnJvciB0cmFuc21pc3Npb25zPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0i TXNvUGxhaW5UZXh0Ij4mbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsgZnJvbSBwcm94aWVz IHRvIGNsaWVudHMsIGFuZCB0byBhdm9pZCBiYW5kd2lkdGggcmVkdWN0aW9uIHRvPG86cD48L286 cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsm bmJzcDsgc2VydmVycyBieSBwcm94aWVzIGFwcGx5aW5nIGNvbmdlc3Rpb24gY29udHJvbCB3aGVu IG5vdCByZWNlaXZpbmc8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZu YnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyByZXNwb25zZXMuJm5ic3A7IE1vZGlmeWluZyBv ciBpbnRyb2R1Y2luZyB0aGlzIG9wdGlvbiBpcyBhIHBvdGVudGlhbDxvOnA+PC9vOnA+PC9wPg0K PHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7IGRl bmlhbC1vZi1zZXJ2aWNlIGF0dGFjayBhZ2FpbnN0IHRoZSBwcm94eSBvcGVyYXRpb25zLCBidXQg c2luY2U8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZuYnNwOyZuYnNw OyZuYnNwOyZuYnNwOyZuYnNwOyB0aGUgb3B0aW9uIGhhcyBhbiBJbm5lciB2YWx1ZSBpdHMgdXNl IGNhbiBiZSBzZWN1cmVseSBhZ3JlZWQ8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFp blRleHQiPiZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyBiZXR3ZWVuIHRoZSBlbmRwb2lu dHMuJm5ic3A7IFRoZSBwcmVzZW5jZSBvZiB0aGlzIG9wdGlvbiBpcyBub3Q8bzpwPjwvbzpwPjwv cD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNw OyBleHBlY3RlZCB0byByZXZlYWwgYW55IHNlbnNpdGl2ZSBpbmZvcm1hdGlvbiBhYm91dCB0aGUg bWVzc2FnZTxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jm5ic3A7Jm5i c3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7IGV4Y2hhbmdlLjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9 Ik1zb1BsYWluVGV4dCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5U ZXh0Ij5TZWxhbmRlciwgZXQgYWwuJm5ic3A7Jm5ic3A7Jm5ic3A7ICZuYnNwOyZuYnNwOyZuYnNw OyZuYnNwO0V4cGlyZXMgSmFudWFyeSAyNywgMjAxOSZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZu YnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNw OyBbUGFnZSA3OF08bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPjxvOnA+ Jm5ic3A7PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+SW50ZXJuZXQtRHJhZnQm bmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJz cDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsgT1NDT1JF Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5i c3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7 Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7IEp1bHkgMjAxODxvOnA+PC9vOnA+PC9wPg0KPHAgY2xh c3M9Ik1zb1BsYWluVGV4dCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxh aW5UZXh0Ij4mbmJzcDsmbmJzcDsgbyZuYnNwOyBPU0NPUkUuJm5ic3A7IFRoZSBPU0NPUkUgb3B0 aW9uIGNvbnRhaW5zIGluZm9ybWF0aW9uIGFib3V0IHRoZTxvOnA+PC9vOnA+PC9wPg0KPHAgY2xh c3M9Ik1zb1BsYWluVGV4dCI+Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7IGNvbXByZXNz ZWQgQ09TRSBoZWFkZXIuJm5ic3A7IENoYW5naW5nIHRoaXMgZmllbGQgbWF5IGNhdXNlIE9TQ09S RTxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jm5ic3A7Jm5ic3A7Jm5i c3A7Jm5ic3A7Jm5ic3A7IHZlcmlmaWNhdGlvbiB0byBmYWlsLjxvOnA+PC9vOnA+PC9wPg0KPHAg Y2xhc3M9Ik1zb1BsYWluVGV4dCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8cCBjbGFzcz0iTXNv UGxhaW5UZXh0Ij5ELjQuMy4mbmJzcDsgRXJyb3IgYW5kIFNpZ25hbGluZyBNZXNzYWdlczxvOnA+ PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+PG86cD4mbmJzcDs8L286cD48L3A+ DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mbmJzcDsmbmJzcDsgRXJyb3IgbWVzc2FnZXMgb2Nj dXJyaW5nIGR1cmluZyBDb0FQIHByb2Nlc3NpbmcgYXJlIHByb3RlY3RlZCBlbmQtdG8tPG86cD48 L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mbmJzcDsmbmJzcDsgZW5kLiZuYnNw OyBFcnJvciBtZXNzYWdlcyBvY2N1cnJpbmcgZHVyaW5nIE9TQ09SRSBwcm9jZXNzaW5nIGFyZSBu b3Q8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZuYnNwOyZuYnNwOyBh bHdheXMgcG9zc2libGUgdG8gcHJvdGVjdCwgZS5nLiBpZiB0aGUgcmVjZWl2aW5nIGVuZHBvaW50 IGNhbm5vdDxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jm5ic3A7Jm5i c3A7IGxvY2F0ZSB0aGUgcmlnaHQgc2VjdXJpdHkgY29udGV4dC4mbmJzcDsgRm9yIHRoaXMgc2V0 dGluZywgdW5wcm90ZWN0ZWQ8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQi PiZuYnNwOyZuYnNwOyBlcnJvciBtZXNzYWdlcyBhcmUgYWxsb3dlZCBhcyBzcGVjaWZpZWQgdG8g cHJldmVudCBleHRlbnNpdmU8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQi PiZuYnNwOyZuYnNwOyByZXRyYW5zbWlzc2lvbnMuJm5ic3A7IFRob3NlIGVycm9yIG1lc3NhZ2Vz IGNhbiBiZSBzcG9vZmVkIG9yIG1hbmlwdWxhdGVkLDxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9 Ik1zb1BsYWluVGV4dCI+Jm5ic3A7Jm5ic3A7IHdoaWNoIGlzIGEgcG90ZW50aWFsIGRlbmlhbC1v Zi1zZXJ2aWNlIGF0dGFjay48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQi PjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jm5ic3A7Jm5i c3A7IFNpZ25hbGluZyBtZXNzYWdlcyB1c2VkIGluIENvQVAgb3ZlciBUQ1AgW1JGQzgzMjNdIGFy ZSBpbnRlbmRlZCB0byBiZTxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+ Jm5ic3A7Jm5ic3A7IGhvcC1ieS1ob3A7IHNwb29maW5nIHNpZ25hbGluZyBtZXNzYWdlcyBjYW4g YmUgdXNlZCBhcyBhIGRlbmlhbC1vZi08bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFp blRleHQiPiZuYnNwOyZuYnNwOyBzZXJ2aWNlIGF0dGFjayBvZiBhIFRDUCBjb25uZWN0aW9uLjxv OnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+PG86cD4mbmJzcDs8L286cD48 L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij5ELjQuNC4mbmJzcDsgSFRUUCBNZXNzYWdlIEZp ZWxkczxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+PG86cD4mbmJzcDs8 L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mbmJzcDsmbmJzcDsgSW4gY29udHJh c3QgdG8gQ29BUCwgd2hlcmUgT1NDT1JFIGRvZXMgbm90IHByb3RlY3QgaGVhZGVyIGZpZWxkcyB0 bzxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jm5ic3A7Jm5ic3A7IGVu YWJsZSBDb0FQLUNvQVAgcHJveHkgb3BlcmF0aW9ucywgdGhlIHVzZSBvZiBPU0NPUkUgd2l0aCBI VFRQIGlzPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mbmJzcDsmbmJz cDsgcmVzdHJpY3RlZCB0byB0cmFuc3BvcnRpbmcgYSBwcm90ZWN0ZWQgQ29BUCBtZXNzYWdlIG92 ZXIgYW4gSFRUUCBob3AuPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4m bmJzcDsmbmJzcDsgQW55IHVucHJvdGVjdGVkIEhUVFAgbWVzc2FnZSBmaWVsZHMgbWF5IHJldmVh bCBpbmZvcm1hdGlvbiBhYm91dCB0aGU8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFp blRleHQiPiZuYnNwOyZuYnNwOyB0cmFuc3BvcnQgb2YgdGhlIE9TQ09SRSBtZXNzYWdlIGFuZCBl bmFibGUgdmFyaW91cyBkZW5pYWwtb2Ytc2VydmljZTxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9 Ik1zb1BsYWluVGV4dCI+Jm5ic3A7Jm5ic3A7IGF0dGFja3MuJm5ic3A7IEl0IGlzIHJlY29tbWVu ZGVkIHRvIGFkZGl0aW9uYWxseSB1c2UgVExTIFtSRkM1MjQ2XSBmb3I8bzpwPjwvbzpwPjwvcD4N CjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZuYnNwOyBIVFRQIGhvcHMsIHdoaWNoIGVuYWJsZXMg ZW5jcnlwdGlvbiBhbmQgaW50ZWdyaXR5IHByb3RlY3Rpb24gb2Y8bzpwPjwvbzpwPjwvcD4NCjxw IGNsYXNzPSJNc29QbGFpblRleHQiPiZuYnNwOyZuYnNwOyBoZWFkZXJzLCBidXQgc3RpbGwgbGVh dmVzIHNvbWUgaW5mb3JtYXRpb24gZm9yIHRyYWZmaWMgYW5hbHlzaXMuPG86cD48L286cD48L3A+ DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjxwIGNsYXNz PSJNc29QbGFpblRleHQiPkFwcGVuZGl4IEUuJm5ic3A7IENEREwgU3VtbWFyeTxvOnA+PC9vOnA+ PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8cCBj bGFzcz0iTXNvUGxhaW5UZXh0Ij48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Q bGFpblRleHQiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+ PG86cD4mbmJzcDs8L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij5fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fXzxvOnA+PC9vOnA+PC9wPg0KPHAg Y2xhc3M9Ik1zb1BsYWluVGV4dCI+c2VjZGlyIG1haWxpbmcgbGlzdDxvOnA+PC9vOnA+PC9wPg0K PHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+c2VjZGlyQGlldGYub3JnPG86cD48L286cD48L3A+DQo8 cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij5odHRwczovL3d3dy5pZXRmLm9yZy9tYWlsbWFuL2xpc3Rp bmZvL3NlY2RpcjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+d2lraTog aHR0cDovL3Rvb2xzLmlldGYub3JnL2FyZWEvc2VjL3RyYWMvd2lraS9TZWNEaXJSZXZpZXc8bzpw PjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0K PC9kaXY+DQo8L2JvZHk+DQo8L2h0bWw+DQo= --_000_318b6f541a9b4317be4bbfa4b0b1fa3eericssoncom_-- From nobody Fri Aug 31 14:12:47 2018 Return-Path: X-Original-To: secdir@ietfa.amsl.com Delivered-To: secdir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id DD3C7130E6A; Fri, 31 Aug 2018 14:12:38 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.998 X-Spam-Level: X-Spam-Status: No, score=-1.998 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, MIME_QP_LONG_LINE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id GKMR3jtNkRP2; Fri, 31 Aug 2018 14:12:35 -0700 (PDT) Received: from mail-pg1-x52d.google.com (mail-pg1-x52d.google.com [IPv6:2607:f8b0:4864:20::52d]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 30F91130E65; Fri, 31 Aug 2018 14:12:35 -0700 (PDT) Received: by mail-pg1-x52d.google.com with SMTP id s15-v6so5964927pgv.8; Fri, 31 Aug 2018 14:12:35 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=user-agent:date:subject:from:to:message-id:thread-topic:references :in-reply-to:mime-version; bh=POnIPRp1jDEjWLH5UeRejE3F776L0NDOZlHyS/V8/nY=; b=rnvRpWBM39+7oUYT47aHpVQXHOs/DKQmV/wJlLj6UP0DvYU8BLJR/kUey5gPrjll6U upPRZX1FFKvb/M7nbwlJI23Txme6MXBUdwiMDGBdvMH1fBpYs2lPZiQWto/yrytzLMzZ FGOqv1ITdpB6hDKT1P/N69u8QqSzJSdMVNaK6BiKY/yGxjHkXvFU0FOpHM5BdFEzkVoW Eb+waKXGnJc1AtvrHm79G2dpyHWAYM1KfVYPXFp0UVsVNh2LtxnlT5p+SH+Ih3/gtVI9 kPFZpU99JkbKhmVpmrs48iYm5xKToMFeNSY4ndd7SoWpKyuWjR3xxEuRrn35mIFE8PR4 mpHg== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:user-agent:date:subject:from:to:message-id :thread-topic:references:in-reply-to:mime-version; bh=POnIPRp1jDEjWLH5UeRejE3F776L0NDOZlHyS/V8/nY=; b=F3LmIwC2NBmkPBBB4PoaWVVgFkUyxAJizNg3pS2e7m9F7gE/0MwQsL6MLi9SkI9JCA W/ZE8HUIO0KwWlRpVRFGJmyBaZhylpJJBdfepyhPp0Y8i+M7PZk/Aba+EgiuZ058+VhV hMa/rEq7vl6oOxRy+ErcLZCZiGhDiHkpYxvC+zDHoZ7VhyJRazF6O5jkwhR284XgbSTx yPkaLAOxvbamKMRlI17fNxD+jH6/8G1iu2CE1MJFpPqaBpzZvC/A28O5FHDVVPSxWOW9 OfvOYBIKu2+YPtj1TQqdy232FLCjx+s2yR7oKgzx3Ds+7HlsMwIPk8oQkHSn82zr1ECH L3NA== X-Gm-Message-State: APzg51DcmVULTqxS0aVe4Jv7NuxrO+GG4oYwZjuXjAWJis26ohuhlO2v SGgasnzY58w05Rdmz+1Ojgw8k6CY X-Google-Smtp-Source: ANB0VdaGGKttWphYoZ4gqwuEb1vDQR0v78Pn1iNm9z/cOUVROL9DRo0fhB2CTOiza+r0U+VX4qZ3vA== X-Received: by 2002:a65:42c9:: with SMTP id l9-v6mr10628481pgp.200.1535749954680; Fri, 31 Aug 2018 14:12:34 -0700 (PDT) Received: from [10.11.13.25] ([66.201.62.254]) by smtp.gmail.com with ESMTPSA id j184-v6sm14968206pge.77.2018.08.31.14.12.33 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Fri, 31 Aug 2018 14:12:33 -0700 (PDT) User-Agent: Microsoft-MacOutlook/10.10.0.180812 Date: Fri, 31 Aug 2018 14:12:32 -0700 From: Jeff Tantsura To: Vincent Roca , The IESG , , Message-ID: <14E65AE5-837F-4932-908F-0CCD426AA585@gmail.com> Thread-Topic: Secdir review of draft-ietf-ospf-segment-routing-msd-18 References: In-Reply-To: Mime-version: 1.0 Content-type: multipart/alternative; boundary="B_3618569553_625811747" Archived-At: Subject: Re: [secdir] Secdir review of draft-ietf-ospf-segment-routing-msd-18 X-BeenThere: secdir@ietf.org X-Mailman-Version: 2.1.27 Precedence: list List-Id: Security Area Directorate List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 31 Aug 2018 21:12:39 -0000 > This message is in MIME format. Since your mail reader does not understand this format, some or all of this message may not be legible. --B_3618569553_625811747 Content-type: text/plain; charset="UTF-8" Content-transfer-encoding: quoted-printable Hi Vincent, =20 Many thanks for your review! Please see inline =20 For your convenience I have also published an updated document (v20), pleas= e let me know whether your concerns have been addressed and if anything else= need to be added/changed =20 Cheers, Jeff =20 From: Vincent Roca Date: Friday, August 31, 2018 at 03:09 To: The IESG , , Cc: Vincent Roca Subject: Secdir review of draft-ietf-ospf-segment-routing-msd-18 Resent-From: Resent-To: Jeff Tantsura , , , , , , , , "BRUNGA= RD, DEBORAH A" , Alvaro Retana , Ace= e Lindem Resent-Date: Fri, 31 Aug 2018 03:09:08 -0700 (PDT) =20 Hello, I have reviewed this document as part of the security directorate=E2=80=99s ongoi= ng effort to review all IETF documents being processed by the IESG. These comments were written primarily for the benefit of the security area directors. Document editors and WG chairs should treat these comments just like any other last call comments. Summary: Ready with nits =20 =20 The Security Considerations section refers to RFC7474 for "Security concern= s for OSPF". However, RFC7474 is limited to OSPFv2, not v3. This should be reflected her= e as the authors previously explained that "OSPF means both OSPFv2 and OSPFv3" (Abstract). [jeff] I will add RFC4552 and RFC7166 to address OSPFv3=20 =20 I also think that a final "." is missing at the end of: "Further security analysis for OSPF protocol is done in [RFC6863]" [jeff] fixed =20 Although a little bit old (2013), this Informational RFC6863 is a good refe= rence that highlights security issues and suggests work items to fix/mitigate them. In particular= OSPFv3 security that relies on IPsec raises deployment issues. There are other items. I don't kn= ow if the situation has significantly changed since this RFC. [jeff] No, RFC6863 is still the main reference for OSPF security analysis =20 Then the authors refer to the Security Considerations sections of [RFC7770]= , [RFC7684] and [RFC8362]. Basically, RFC 7770 says that the Security Considerations "should be descri= bed as additional capabilities are proposed for advertisement" and that's all. =20 RFC 7684 is limited to OSPFv2, and here also it is explained that: "OSPFv2 applications utilizing these OSPFv2 extensions must define = the security considerations relating to those applications..." Then there is a discussion on malformed information/TLV that should be igno= red. =20 Finally, RFC 8362, dedicated to OSPFv3, refers to old RFCs, prior to the ab= ove RFC6863 reference. =20 These three RFCs are good references but they do not provide much insight u= nlike what the authors suggest. I understand that: (1) security threats do exist, and (2) implemen= ters should take care of malformed received packets (e.g, bad TLV). This could be highlighted in thi= s document and references provided to support it. =20 [jeff] relevant text added =20 =20 Then the second paragraph quickly discusses the consequences of advertising= incorrect MSD values. The sentence is ambiguous. I understand: "[...]: either in a path computation failing and the service (becom= ing?) unavailable, or (in an) instantiation of a path that can't be supported by the h= ead-end ([...])." Am I correct? Please fix it. [jeff] would the following text work? =20 Advertisement of an incorrect MSD value may result: =C2=A0=C2=A0 If the value is lower than supported - path computation failing to com= pute a viable path. =C2=A0=C2=A0 If the value is larger than supported - instantiation of a path that c= an't be supported by the head-end (the node performing the SID imposition). =20 =20 Also I don't understand the definition of head-end (e.g., what does "imposi= tion" mean?). The authors should either be more explicit and/or refer to an architectural document. [jeff] label imposition is a commonly used term to describe PUSH function o= n a MPLS device, even though RFC3031 uses =E2=80=9CPUSH=E2=80=9D term, in general PUSH a= nd impose are used interchangeably, I don=E2=80=99t think it requires any addition= al explanation however, would be happy to include =C2=A0in the Terminology secti= on =E2=80=9Cimposition =3D=3D RFC3031 PUSH=E2=80=9D, please let me know [jeff] head-end is the node where label stack is being imposed (PUSHED), he= ad-end/tail-end are common terms to describe a devices where an LSP/tunnel s= tarts and ends =E2=80=93 do you feel it needs further explanation? =20 Then, an "incorrect MSD" may refer either to a value that is either smaller= or larger than it should. What are the consequences in each case and how does it relate to the two co= nsequences mentioned in this paragraph? [jeff] please see above =20 Is there something else? Is there a Denial of Service risk specific to this extension, or is it vuln= erable to replay attacks? I don't think so but it's worth clarifying. [jeff] no, will clarify=20 =20 =20 Other comments: =20 ** Intro: there's an mbiguous sentence "In order for BGP-LS to signal MSD for all the nodes and links in the netwo= rk MSD is relevant, [...]" Do you mean "where MSD is relevant" or something else? =20 [jeff] MSD is relevant to the nodes that impose the labels, =E2=80=9Cwhere=E2=80=9D sim= plifies the sentence, added for better readability, thanks! =20 Regards, =20 Vincent --B_3618569553_625811747 Content-type: text/html; charset="UTF-8" Content-transfer-encoding: quoted-printable

Hi Vincent,

 

Many thank= s for your review!

Please see inline

 

For your = convenience I have also published an updated document (v20), please let me k= now whether your concerns have been addressed and if anything else need to b= e added/changed

 

<= p class=3DMsoNormal>Cheers,

Jeff

 

From: Vincent Roca <vincent.roca@inria.fr>
Date: = Friday, August 31, 2018 at 03:09
To: The IESG <iesg@ietf.org>= ;, <secdir@ietf.org>, <draft-ietf-ospf-segment-routing-msd.all@ietf= .org>
Cc: Vincent Roca <vincent.roca@inria.fr>
Subj= ect: Secdir review of draft-ietf-ospf-segment-routing-msd-18
Resen= t-From: <alias-bounces@ietf.org>
Resent-To: Jeff Tantsur= a <jefftant.ietf@gmail.com>, <uma.chunduri@huawei.com>, <aldr= in.ietf@gmail.com>, <ppsenak@cisco.com>, <acee@cisco.com>, &l= t;chopps@chopps.org>, <yingzhen.qu@huawei.com>, <martin.vigoureu= x@nokia.com>, "BRUNGARD, DEBORAH A" <db3546@att.com>, Alv= aro Retana <aretana.ietf@gmail.com>, Acee Lindem <acee@cisco.com>= ;
Resent-Date: Fri, 31 Aug 2018 03:09:08 -0700 (PDT)

 

Hello,

I have reviewed this document as part of the security = directorate=E2=80=99s ongoing
effort to review all IETF documents being process= ed by the IESG. These
comments were written primarily for the benefit of = the security area
directors.  Document editors and WG chairs should = treat these comments just
like any other last call comments.

Summa= ry: Ready with nits

&= nbsp;

 

The Security Considerations section refers to RFC74= 74 for "Security concerns for OSPF".

However, RFC7474 is limited to OSPFv2, not v3. This should be= reflected here as the authors

p= reviously explained that "OSPF means both OSPFv2 and OSPFv3" (Abst= ract).

[jeff] I will add RFC4552 and RFC716= 6 to address OSPFv3

 =

I also think that a final ".&qu= ot; is missing at the end of:

&q= uot;Further security analysis for OSPF protocol is done in [RFC6863]"

[jeff] fixed

 

Although a l= ittle bit old (2013), this Informational RFC6863 is a good reference that hi= ghlights

security issues and sug= gests work items to fix/mitigate them. In particular OSPFv3 security that

relies on IPsec raises deployment = issues. There are other items. I don't know if the situation

<= /div>

has significantly changed since this RFC.<= /o:p>

[jeff] No, RFC6863 is still the main reference f= or OSPF security analysis

&= nbsp;

Then the authors refer to the S= ecurity Considerations sections of [RFC7770], [RFC7684] and [RFC8362].<= /o:p>

Basically, RFC 7770 says that the Sec= urity Considerations "should be described as additional

<= /div>

capabilities are proposed for advertisement&quo= t; and that's all.

 

RFC 7684 is limited to OSPFv2, and her= e also it is explained that:

&nb= sp;       "OSPFv2 applications utilizing these OSPFv2 ex= tensions must define the security

        considerations relating to those applications.= .."

Then there is a discuss= ion on malformed information/TLV that should be ignored.

 

= Finally, RFC 8362, dedicated to OSPFv3, refers to old RFCs, prior to the abo= ve RFC6863 reference.

 = ;

These three RFCs are good reference= s but they do not provide much insight unlike what the authors

suggest. I understand that: (1) security thre= ats do exist, and (2) implementers should take care of

<= div>

malformed received packets (e.g, bad TLV). This could= be highlighted in this document and references

provided to support it.

 

[jeff] relevant text added

 

 

Then the second pa= ragraph quickly discusses the consequences of advertising incorrect MSD valu= es.

The sentence is ambiguous. I= understand:

     = ;   "[...]: either in a path computation failing and the service (= becoming?) unavailable,

  &= nbsp;     or (in an) instantiation of a path that can't be support= ed by the head-end ([...])."

Am I correct? Please fix it.

[jeff] would= the following text work?

 =

Advertisement of an incorrect MSD value may result:

=C2=A0=C2=A0 If the value is lower than supported - = path computation failing to compute a viable path.

=C2=A0=C2=A0 If the value is larger than supported - instantiation of a path= that can't be supported by the head-end (the node performing the SID imposi= tion).

 

 

Also I don't understa= nd the definition of head-end (e.g., what does "imposition" mean?)= . The authors

should either be m= ore explicit and/or refer to an architectural document.

[jeff] label imposition is a commonly used term to describe PUS= H function on a MPLS device, even though RFC3031 uses =E2=80=9CPUSH=E2=80=9D term, in ge= neral PUSH and impose are used interchangeably, I don=E2=80=99t think it requires = any additional explanation however, would be happy to include =C2=A0in the Termi= nology section =E2=80=9Cimposition =3D=3D RFC3031 PUSH=E2=80=9D, please let me know

[jeff] head-end is the node where label stack is be= ing imposed (PUSHED), head-end/tail-end are common terms to describe a devic= es where an LSP/tunnel starts and ends =E2=80=93 do you feel it needs further expl= anation?

 

Then, an "incorrect MSD" may refer either to a va= lue that is either smaller or larger than it should.

What are the consequences in each case and how does it = relate to the two consequences mentioned in

this paragraph?

[jef= f] please see above

 

Is there something else?

Is there a Denial of Service risk specific to this exte= nsion, or is it vulnerable to replay attacks?

I don't think so but it's worth clarifying.

[jeff] no, will clarify

 

 =

Other comments:

<= p class=3DMsoNormal> 

** Intro: there's an mbiguous sentence

"In order for BGP-LS to signal MSD for all the nodes and lin= ks in the network MSD is relevant, [...]"

Do you mean "where MSD is relevant" or something el= se?

 

[jeff] MSD is relevant to the nodes that impose the labels, =E2=80=9Cwhere=E2=80=9D sim= plifies the sentence, added for better readability, thanks!

 

Regards,

 

  Vincent

--B_3618569553_625811747--