From nobody Wed Jan 4 15:00:20 2017 Return-Path: X-Original-To: msec@ietfa.amsl.com Delivered-To: msec@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id A69C6129443; Wed, 4 Jan 2017 15:00:18 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -17.622 X-Spam-Level: X-Spam-Status: No, score=-17.622 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_HI=-5, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, RP_MATCHES_RCVD=-3.1, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cisco.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Ug4XsUV2xi0W; Wed, 4 Jan 2017 15:00:17 -0800 (PST) Received: from rcdn-iport-6.cisco.com (rcdn-iport-6.cisco.com [173.37.86.77]) (using TLSv1.2 with cipher DHE-RSA-SEED-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 530C212940B; Wed, 4 Jan 2017 15:00:17 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=912; q=dns/txt; s=iport; t=1483570817; x=1484780417; h=from:to:cc:subject:date:message-id:content-id: content-transfer-encoding:mime-version; bh=owNzxeMco06cWo+3dWRY8eq+cM3GJHM0P6hWgRMcUzI=; b=S9mOZCG64G2BSVtPmJB2kEYkh4beOE9lSsKE+Tx5RQL2kvcTakdumNi4 EeSRDKgHSUM5NR2hw0P39DjNt0d5OGnC6C8/8y06nvWyfb33NkpwVPPXZ 7f468bdQleJ7AfRC3+lwZbIvF8duhLfoRJvm83QvK74gM3J4ygEWP707S E=; X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: =?us-ascii?q?A0B5AQDXfW1Y/5BdJa1dGgEBAQECAQEBA?= =?us-ascii?q?QgBAQEBgzgBAQEBAR9fgRONUKF9hFMyWYIPgggqhXgcgT4/FAECAQEBAQEBAWM?= =?us-ascii?q?dC4USEUUSASICJgIEMBUSBA6IdQ6vRIIliikBAQEBAQEBAQEBAQEBAQEBAQEBA?= =?us-ascii?q?QEYBYELhzwIiiItgjEFmwkBhlWFM4U4gV4YhQiJW4d/ikABHziBKy4OAYVUiBe?= =?us-ascii?q?BDQEBAQ?= X-IronPort-AV: E=Sophos;i="5.33,317,1477958400"; d="scan'208";a="190353503" Received: from rcdn-core-8.cisco.com ([173.37.93.144]) by rcdn-iport-6.cisco.com with ESMTP/TLS/DHE-RSA-AES256-GCM-SHA384; 04 Jan 2017 23:00:16 +0000 Received: from XCH-RTP-002.cisco.com (xch-rtp-002.cisco.com [64.101.220.142]) by rcdn-core-8.cisco.com (8.14.5/8.14.5) with ESMTP id v04N0Flk019052 (version=TLSv1/SSLv3 cipher=AES256-SHA bits=256 verify=FAIL); Wed, 4 Jan 2017 23:00:16 GMT Received: from xch-rtp-001.cisco.com (64.101.220.141) by XCH-RTP-002.cisco.com (64.101.220.142) with Microsoft SMTP Server (TLS) id 15.0.1210.3; Wed, 4 Jan 2017 18:00:14 -0500 Received: from xch-rtp-001.cisco.com ([64.101.220.141]) by XCH-RTP-001.cisco.com ([64.101.220.141]) with mapi id 15.00.1210.000; Wed, 4 Jan 2017 18:00:15 -0500 From: "Brian Weis (bew)" To: "ipsec@ietf.org" Thread-Topic: GDOI GROUPKEY-PUSH Acknowledgment Message Thread-Index: AQHSZt5P5+hsHFfKUkuw0QvvNkcdlw== Date: Wed, 4 Jan 2017 23:00:14 +0000 Message-ID: <7D8F64E3-7B45-4141-95ED-87E2F503EB71@cisco.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-ms-exchange-messagesentrepresentingtype: 1 x-ms-exchange-transport-fromentityheader: Hosted x-originating-ip: [10.32.222.253] Content-Type: text/plain; charset="utf-8" Content-ID: <3D70B71214DF9F4A8EA0DD62D63AA1DE@emea.cisco.com> Content-Transfer-Encoding: base64 MIME-Version: 1.0 Archived-At: Cc: "msec@ietf.org" Subject: [MSEC] GDOI GROUPKEY-PUSH Acknowledgment Message X-BeenThere: msec@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: Multicast Security List List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 04 Jan 2017 23:00:18 -0000 R3JlZXRpbmdzLA0KDQpJbiBTZW91bCB0aGVyZSB3YXMgYSBwcmVzZW50YXRpb24gb24gdGhlIEdE T0kgR1JPVVBLRVktUFVTSCBBY2tub3dsZWRnbWVudCBNZXNzYWdlIChodHRwczovL2RhdGF0cmFj a2VyLmlldGYub3JnL2RvYy9kcmFmdC13ZWlzLWdkb2ktcmVrZXktYWNrLyksIGFuIHVwZGF0ZSB0 byBSRkMgNjQwNyAoR0RPSSkg4oCUIGEgZ3JvdXAga2V5IG1hbmFnZW1lbnQgcHJvdG9jb2wgdXNp bmcgSUtFdjEuIEdET0kgd2FzIG9yaWdpbmFsbHkgbWFuYWdlZCBieSB0aGUgTVNFQyBXRywgd2hp Y2ggaXMgbm8gbG9uZ2VyIGFjdGl2ZS4gVGhlIHF1ZXN0aW9uIHdhcyBhc2tlZCBhcyB0byB3aGV0 aGVyIHRoZXJlIHdhcyBhbnkgaW50ZXJlc3QgaW4gdGhlIElQU0VDTUUgd29ya2luZyBncm91cCBp biB0aGlzIHdvcmssIGFuZCB0aGUgYXV0aG9ycyB3ZXJlIGFza2VkIHRvIHRha2UgdGhlIHF1ZXN0 aW9uIHRvIHRoaXMgbGlzdC4gUGxlYXNlIHJlc3BvbmQgaWYgeW91IGJlbGlldmUgdGhlIGRyYWZ0 IHNob3VsZCBiZSBtYW5hZ2VkIHdpdGhpbiBJUFNFQ01FLCByYXRoZXIgdGhhbiBhcyBhbiBBRCBz cG9uc29yZWQgZHJhZnQgKHdoaWNoIGlzIHRoZSBhbHRlcm5hdGl2ZSBwbGFuKS4NCg0KVGhhbmtz LA0KVW1lc2gsIE5pbGVzaCwgVGhvbWFzLCBhbmQgQnJpYW4sIA== From nobody Thu Jan 5 14:49:05 2017 Return-Path: X-Original-To: msec@ietfa.amsl.com Delivered-To: msec@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 5E9301296EC; Thu, 5 Jan 2017 14:49:03 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -5.1 X-Spam-Level: X-Spam-Status: No, score=-5.1 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RP_MATCHES_RCVD=-3.1] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=nohats.ca Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 7hDt7IMGCaqp; Thu, 5 Jan 2017 14:49:02 -0800 (PST) Received: from mx.nohats.ca (mx.nohats.ca [193.110.157.68]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 00EAB129460; Thu, 5 Jan 2017 14:49:01 -0800 (PST) Received: from localhost (localhost [IPv6:::1]) by mx.nohats.ca (Postfix) with ESMTP id 3tvjXV6dmqz3DG; Thu, 5 Jan 2017 23:48:58 +0100 (CET) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=nohats.ca; s=default; t=1483656538; bh=GMgsydjBh3ujhiaO2CfYvhkIMgEFaqpBbjMES/CDRsk=; h=Date:From:To:cc:Subject:In-Reply-To:References; b=AZwlD0HacvHsh/TjgCKZnXLzkxorWk4ES31kUxIML1mKWuoEgRaT5nCarDNuqubhD Pf405LMqM4oVIRdPS+WnihJpZVsBQXfFw1JKM/ZNoZGTaaXP5BENiw9Tv85BdpZlHG IpI448znMYW8qUkPzgRvDGRIMbc8u8qSbAbnyRiE= X-Virus-Scanned: amavisd-new at mx.nohats.ca Received: from mx.nohats.ca ([IPv6:::1]) by localhost (mx.nohats.ca [IPv6:::1]) (amavisd-new, port 10024) with ESMTP id gbRJoV5RYS1k; Thu, 5 Jan 2017 23:48:56 +0100 (CET) Received: from bofh.nohats.ca (206-248-139-105.dsl.teksavvy.com [206.248.139.105]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by mx.nohats.ca (Postfix) with ESMTPS; Thu, 5 Jan 2017 23:48:56 +0100 (CET) Received: by bofh.nohats.ca (Postfix, from userid 1000) id E89C161A45; Thu, 5 Jan 2017 17:48:53 -0500 (EST) DKIM-Filter: OpenDKIM Filter v2.10.3 bofh.nohats.ca E89C161A45 Received: from localhost (localhost [127.0.0.1]) by bofh.nohats.ca (Postfix) with ESMTP id D107B4942C65; Thu, 5 Jan 2017 17:48:53 -0500 (EST) Date: Thu, 5 Jan 2017 17:48:53 -0500 (EST) From: Paul Wouters To: "Brian Weis (bew)" In-Reply-To: <7D8F64E3-7B45-4141-95ED-87E2F503EB71@cisco.com> Message-ID: References: <7D8F64E3-7B45-4141-95ED-87E2F503EB71@cisco.com> User-Agent: Alpine 2.20 (LRH 67 2015-01-07) MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8; format=flowed Content-Transfer-Encoding: 8BIT Archived-At: Cc: "ipsec@ietf.org" , "msec@ietf.org" Subject: Re: [MSEC] [IPsec] GDOI GROUPKEY-PUSH Acknowledgment Message X-BeenThere: msec@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: Multicast Security List List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 05 Jan 2017 22:49:03 -0000 On Wed, 4 Jan 2017, Brian Weis (bew) wrote: > > In Seoul there was a presentation on the GDOI GROUPKEY-PUSH Acknowledgment Message (https://datatracker.ietf.org/doc/draft-weis-gdoi-rekey-ack/), an update to RFC 6407 (GDOI) — a group key management protocol using IKEv1. GDOI was originally managed by the MSEC WG, which is no longer active. The question was asked as to whether there was any interest in the IPSECME working group in this work, and the authors were asked to take the question to this list. Please respond if you believe the draft should be managed within IPSECME, rather than as an AD sponsored draft (which is the alternative plan). Is 6407 actually implemented for IKEv2? It really reads as an IKEv1 plugin. Similarly, this also seems like an IKEv1 plugin for that plugin. I'm a little surprised 6407 is Standards Track. I wasn't around when 6407 happened. It seems like a very complicated keying protocol that just happens to be run inside IKE (although on a different port?). I'm not sure how many people within ipsecme are familiar with this and would want to work on this document. As it seems to not affect IKEv2 on port (4)500, I feel it is probably best done without adoption by the WG. Although it currently says Standards Track, so I'm not sure if it can be that and AD sponsored? Paul From nobody Fri Jan 6 08:43:24 2017 Return-Path: X-Original-To: msec@ietfa.amsl.com Delivered-To: msec@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id A65F3129B76; Fri, 6 Jan 2017 08:43:19 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -17.622 X-Spam-Level: X-Spam-Status: No, score=-17.622 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_HI=-5, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, RP_MATCHES_RCVD=-3.1, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cisco.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id B9AcdvpzhLlq; Fri, 6 Jan 2017 08:43:18 -0800 (PST) Received: from alln-iport-1.cisco.com (alln-iport-1.cisco.com [173.37.142.88]) (using TLSv1.2 with cipher DHE-RSA-SEED-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 81771129B74; Fri, 6 Jan 2017 08:43:18 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=2854; q=dns/txt; s=iport; t=1483720998; x=1484930598; h=from:to:cc:subject:date:message-id:references: in-reply-to:content-id:content-transfer-encoding: mime-version; bh=begZ85Yh3aD5cYZldfBxQpVTa4Gkr0d+0HKu/Ao7nok=; b=L0xmAIWrwhZbPUGu/fa4FzFmXreQPzYf2YBql4HSkeNmjYZJctgQb904 OmLIX70BiDeclVbUPj9g7Ls/VhzVFKu2ybKT4q8+nZ5xFLHGVjBpY64mc lbYBehHEQVdvRwRuxRX04OR3uzKv/UJXgYPvMVoFfg0L9agbBSSUS5MmC 0=; X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: =?us-ascii?q?A0AUAQDqyG9Y/5tdJa1bAxkBAQEBAQEBA?= =?us-ascii?q?QEBAQcBAQEBAYM5AQEBAQEfX4EMB41QkiGTF4IPggkqhXgCGoE7PxQBAgEBAQE?= =?us-ascii?q?BAQFjKIRoAQEBAwEjEUUFCwIBCBgCAiYCAgIwFRACBA4FiGgIDrA3giWKGAEBA?= =?us-ascii?q?QEBAQEBAQEBAQEBAQEBAQEBARgFgQuHPIJfhBgRATMKJoJBLYIxBZUahXsBhle?= =?us-ascii?q?Kb4F3hQiJXIgJikcBHzhtTxU1DwGGFHOGOIEhgQ0BAQE?= X-IronPort-AV: E=Sophos;i="5.33,325,1477958400"; d="scan'208";a="369554791" Received: from rcdn-core-4.cisco.com ([173.37.93.155]) by alln-iport-1.cisco.com with ESMTP/TLS/DHE-RSA-AES256-GCM-SHA384; 06 Jan 2017 16:43:17 +0000 Received: from XCH-RTP-001.cisco.com (xch-rtp-001.cisco.com [64.101.220.141]) by rcdn-core-4.cisco.com (8.14.5/8.14.5) with ESMTP id v06GhHjT006939 (version=TLSv1/SSLv3 cipher=AES256-SHA bits=256 verify=FAIL); Fri, 6 Jan 2017 16:43:17 GMT Received: from xch-rtp-001.cisco.com (64.101.220.141) by XCH-RTP-001.cisco.com (64.101.220.141) with Microsoft SMTP Server (TLS) id 15.0.1210.3; Fri, 6 Jan 2017 11:43:16 -0500 Received: from xch-rtp-001.cisco.com ([64.101.220.141]) by XCH-RTP-001.cisco.com ([64.101.220.141]) with mapi id 15.00.1210.000; Fri, 6 Jan 2017 11:43:16 -0500 From: "Brian Weis (bew)" To: Paul Wouters Thread-Topic: [IPsec] GDOI GROUPKEY-PUSH Acknowledgment Message Thread-Index: AQHSZt5Pm+5bN/TfMkWEbIAgfGfqGaEq0duAgAEsLYA= Date: Fri, 6 Jan 2017 16:43:16 +0000 Message-ID: <9646944C-0EFA-4F72-B2C3-B460A1E1E937@cisco.com> References: <7D8F64E3-7B45-4141-95ED-87E2F503EB71@cisco.com> In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-ms-exchange-messagesentrepresentingtype: 1 x-ms-exchange-transport-fromentityheader: Hosted x-originating-ip: [10.19.191.172] Content-Type: text/plain; charset="utf-8" Content-ID: Content-Transfer-Encoding: base64 MIME-Version: 1.0 Archived-At: Cc: "ipsec@ietf.org" , "msec@ietf.org" Subject: Re: [MSEC] [IPsec] GDOI GROUPKEY-PUSH Acknowledgment Message X-BeenThere: msec@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: Multicast Security List List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 06 Jan 2017 16:43:19 -0000 SGkgUGF1bCwNCg0KVGhhbmtzIGZvciB5b3VyIGNvbW1lbnRzLg0KDQo+IE9uIEphbiA1LCAyMDE3 LCBhdCAyOjQ4IFBNLCBQYXVsIFdvdXRlcnMgPHBhdWxAbm9oYXRzLmNhPiB3cm90ZToNCj4gDQo+ IE9uIFdlZCwgNCBKYW4gMjAxNywgQnJpYW4gV2VpcyAoYmV3KSB3cm90ZToNCj4gDQo+PiANCj4+ IEluIFNlb3VsIHRoZXJlIHdhcyBhIHByZXNlbnRhdGlvbiBvbiB0aGUgR0RPSSBHUk9VUEtFWS1Q VVNIIEFja25vd2xlZGdtZW50IE1lc3NhZ2UgKGh0dHBzOi8vZGF0YXRyYWNrZXIuaWV0Zi5vcmcv ZG9jL2RyYWZ0LXdlaXMtZ2RvaS1yZWtleS1hY2svKSwgYW4gdXBkYXRlIHRvIFJGQyA2NDA3IChH RE9JKSDigJQgYSBncm91cCBrZXkgbWFuYWdlbWVudCBwcm90b2NvbCB1c2luZyBJS0V2MS4gR0RP SSB3YXMgb3JpZ2luYWxseSBtYW5hZ2VkIGJ5IHRoZSBNU0VDIFdHLCB3aGljaCBpcyBubyBsb25n ZXIgYWN0aXZlLiBUaGUgcXVlc3Rpb24gd2FzIGFza2VkIGFzIHRvIHdoZXRoZXIgdGhlcmUgd2Fz IGFueSBpbnRlcmVzdCBpbiB0aGUgSVBTRUNNRSB3b3JraW5nIGdyb3VwIGluIHRoaXMgd29yaywg YW5kIHRoZSBhdXRob3JzIHdlcmUgYXNrZWQgdG8gdGFrZSB0aGUgcXVlc3Rpb24gdG8gdGhpcyBs aXN0LiBQbGVhc2UgcmVzcG9uZCBpZiB5b3UgYmVsaWV2ZSB0aGUgZHJhZnQgc2hvdWxkIGJlIG1h bmFnZWQgd2l0aGluIElQU0VDTUUsIHJhdGhlciB0aGFuIGFzIGFuIEFEIHNwb25zb3JlZCBkcmFm dCAod2hpY2ggaXMgdGhlIGFsdGVybmF0aXZlIHBsYW4pLg0KPiANCj4gSXMgNjQwNyBhY3R1YWxs eSBpbXBsZW1lbnRlZCBmb3IgSUtFdjI/IEl0IHJlYWxseSByZWFkcyBhcyBhbiBJS0V2MQ0KPiBw bHVnaW4uIFNpbWlsYXJseSwgdGhpcyBhbHNvIHNlZW1zIGxpa2UgYW4gSUtFdjEgcGx1Z2luIGZv ciB0aGF0DQo+IHBsdWdpbi4gSSdtIGEgbGl0dGxlIHN1cnByaXNlZCA2NDA3IGlzIFN0YW5kYXJk cyBUcmFjay4NCg0KQ29ycmVjdCwgaXTigJlzIGJhc2VkIG9uIElLRXYxLiBXZSB1bmRlcnN0YW5k IHRoYXQgSVBTRUNNRSBpcyBmb2N1c2VkIG9uIElLRXYyLCBidXQgd2VyZSBhc2tlZCB0byBtYWtl IHN1cmUgdGhhdCB0aGUgd29ya2luZyBncm91cCB3YXMgbm90IGludGVyZXN0ZWQgYmVmb3JlIHRh a2luZyBhbm90aGVyIHBhdGguDQoNCj4gSSB3YXNuJ3QgYXJvdW5kIHdoZW4gNjQwNyBoYXBwZW5l ZC4gSXQgc2VlbXMgbGlrZSBhIHZlcnkgY29tcGxpY2F0ZWQNCj4ga2V5aW5nIHByb3RvY29sIHRo YXQganVzdCBoYXBwZW5zIHRvIGJlIHJ1biBpbnNpZGUgSUtFIChhbHRob3VnaCBvbg0KPiBhIGRp ZmZlcmVudCBwb3J0PykuDQoNClRoZSBnb2FsIG9mIHRoZSA2NDA3IGlzIHRvIHByb3ZpZGUga2V5 IG1hbmFnZW1lbnQgZm9yIElQIG11bHRpY2FzdCBmbG93cy4gVGhlIElLRTEgcHJvdG9jb2wgcmUt dXNlIGZvciA2NDA3IG1ha2VzIHNlbnNlIGZvciB0aGUgZGV2aWNlcyB0aGF0IHN1cHBvcnRlZCBJ UHNlYyBwcm90ZWN0aW9uIGZvciBib3RoIHVuaWNhc3QgYW5kIG11bHRpY2FzdCB0cmFmZmljLg0K DQo+IEknbSBub3Qgc3VyZSBob3cgbWFueSBwZW9wbGUgd2l0aGluIGlwc2VjbWUNCj4gYXJlIGZh bWlsaWFyIHdpdGggdGhpcyBhbmQgd291bGQgd2FudCB0byB3b3JrIG9uIHRoaXMgZG9jdW1lbnQu IEFzDQo+IGl0IHNlZW1zIHRvIG5vdCBhZmZlY3QgSUtFdjIgb24gcG9ydCAoNCk1MDAsIEkgZmVl bCBpdCBpcyBwcm9iYWJseQ0KPiBiZXN0IGRvbmUgd2l0aG91dCBhZG9wdGlvbiBieSB0aGUgV0cu DQoNClRoYW5rcy4NCg0KPiBBbHRob3VnaCBpdCBjdXJyZW50bHkgc2F5cw0KPiBTdGFuZGFyZHMg VHJhY2ssIHNvIEknbSBub3Qgc3VyZSBpZiBpdCBjYW4gYmUgdGhhdCBhbmQgQUQgc3BvbnNvcmVk Pw0KDQpLYXRobGVlbiBoYXMgYWdyZWVkIHRvIEFEIHNwb25zb3IgdGhlIGRyYWZ0IGlmIGlwc2Vj bWUgaXMgbm90IGludGVyZXN0ZWQuDQoNCkJyaWFuDQoNCj4gDQo+IFBhdWwNCg0KLS0gDQpCcmlh biBXZWlzDQpTZWN1cml0eSwgQ1NHLCBDaXNjbyBTeXN0ZW1zDQpUZWxlcGhvbmU6ICsxIDQwOCA1 MjYgNDc5Ng0KRW1haWw6IGJld0BjaXNjby5jb20NCg0K