From tlr@w3.org Thu Nov 5 12:06:43 2009 Return-Path: X-Original-To: saag@core3.amsl.com Delivered-To: saag@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 8212A3A67AB for ; Thu, 5 Nov 2009 12:06:43 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -10.599 X-Spam-Level: X-Spam-Status: No, score=-10.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, RCVD_IN_DNSWL_HI=-8] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id GiyiA-dWPLGZ for ; Thu, 5 Nov 2009 12:06:42 -0800 (PST) Received: from jay.w3.org (ssh.w3.org [128.30.52.60]) by core3.amsl.com (Postfix) with ESMTP id B9C573A6909 for ; Thu, 5 Nov 2009 12:06:42 -0800 (PST) Received: from localhost ([127.0.0.1] helo=iCoaster.does-not-exist.org) by jay.w3.org with esmtp (Exim 4.69) (envelope-from ) id 1N68bn-0003mH-Dc; Thu, 05 Nov 2009 15:07:03 -0500 Received: from localhost ([127.0.0.1]) by iCoaster.does-not-exist.org with esmtp (Exim 4.66) (envelope-from ) id KSNJVQ-0001E6-52; Thu, 05 Nov 2009 12:07:02 -0800 Content-Type: text/plain; charset=us-ascii; format=flowed; delsp=yes Mime-Version: 1.0 (Apple Message framework v1076) From: Thomas Roessler Date: Thu, 5 Nov 2009 12:07:01 -0800 Content-Transfer-Encoding: 7bit Message-Id: To: saag@ietf.org, Tim Polk , Pasi.Eronen@nokia.com X-Mailer: Apple Mail (2.1076) Cc: Mark Nottingham , Frederick Hirsch Subject: [saag] Heads-up: XML Signature 1.1 W3C Last Call coming up X-BeenThere: saag@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Security Area Advisory Group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 05 Nov 2009 20:06:43 -0000 As a heads-up, the W3C XML Security Working Group is planning to take its XML Signature 1.1 and XML Encryption 1.1 specifications to W3C Last Call within the next few weeks. Main changes against XML Signature 1.0 and XML Encryption 1.0 relate to including support for Suite B algorithms (including mark-up for key material). The group is wrapping up discussions about making these algorithms mandatory to implement in the Last Call Working Draft; however, that would be up for further investigation and possibly subject to change as the specs move further along the W3C recommendation track. Review of the editor's drafts would be welcome: http://www.w3.org/2008/xmlsec/Drafts/xmldsig-core-11/ http://www.w3.org/2008/xmlsec/Drafts/xmlenc-core-11/ We'll send a formal review request through the W3C/IETF liaison channel once the Last Call Working Drafts are out. On a related note, the Working Group recently published a First Public Working Draft of XML Security Generic Hybrid Ciphers. That specification, too would benefit from early review: http://www.w3.org/TR/xmlsec-generic-hybrid/ If you have any questions, please don't hesitate to contact Frederick Hirsch (WG chair; copied on this note) or myself. Unfortunately, neither of us will be able to travel to Hiroshima. Regards, -- Thomas Roessler, W3C From barryleiba@gmail.com Wed Nov 11 16:19:59 2009 Return-Path: X-Original-To: saag@core3.amsl.com Delivered-To: saag@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 108B13A68E9 for ; Wed, 11 Nov 2009 16:19:59 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.623 X-Spam-Level: X-Spam-Status: No, score=-2.623 tagged_above=-999 required=5 tests=[AWL=-0.024, BAYES_00=-2.599] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id dsoYFN3El6vb for ; Wed, 11 Nov 2009 16:19:58 -0800 (PST) Received: from mail-iw0-f186.google.com (mail-iw0-f186.google.com [209.85.223.186]) by core3.amsl.com (Postfix) with ESMTP id 48E8B3A67D1 for ; Wed, 11 Nov 2009 16:19:58 -0800 (PST) Received: by iwn16 with SMTP id 16so1413435iwn.29 for ; Wed, 11 Nov 2009 16:20:23 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:mime-version:sender:received:date :x-google-sender-auth:message-id:subject:from:to:content-type; bh=AkBTIw5PhDeBg8lIEClWVrGftamKkOgHPns3hn/SGYY=; b=IyydYPH7y9aNpQjrY6EFTAbI+0QmkAaon6nnBEXVNX7KkJX4zYqaCiTm8JKfDxtIYu HhZqoI/m1N5xFIuD59yOJoNb6O0OI//5vnWE/blpJprYNEtQ92uSw6X0mNFKYu+yV1i+ rTEsHz2kiDujviIzv9WV/ZYUsRv0VzdDR4Ao0= DomainKey-Signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=mime-version:sender:date:x-google-sender-auth:message-id:subject :from:to:content-type; b=cLnkzHmFfvqK2U0Hcb0Af58cvk3dJnOkegtgcWYuf6F5DQyeKkxsHlQ2Igd17QjoCJ xTQK5L8wDPnu4GtZhe4Vp8zwkQkbQpM3cPeuFxMs4nu3duX+pa5NDWLPtGsXF4T95eZC WhV6w1f2ou/V/BOuaPR/hSlyWDySBIMuGTYgE= MIME-Version: 1.0 Sender: barryleiba@gmail.com Received: by 10.231.170.201 with SMTP id e9mr2275077ibz.17.1257985223558; Wed, 11 Nov 2009 16:20:23 -0800 (PST) Date: Wed, 11 Nov 2009 19:20:23 -0500 X-Google-Sender-Auth: 3f66ff4542390ccb Message-ID: <9abf48a60911111620n5b1c6b01x79dc61105ffeba24@mail.gmail.com> From: Barry Leiba To: saag@ietf.org Content-Type: text/plain; charset=ISO-8859-1 Subject: [saag] DKIM report for IETF 76 X-BeenThere: saag@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Security Area Advisory Group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 12 Nov 2009 00:19:59 -0000 DKIM didn't meet this time. Discussion about re-chartering is ongoing with a number of suggestions having been made. The main item under consideration is moveing 4871 to DS, though some other topics have been suggested. The chairs will shortly be taking a poll to see which items garner rough consensus in the WG. Barry and Stephen From julienl@qualcomm.com Wed Nov 11 16:22:47 2009 Return-Path: X-Original-To: saag@core3.amsl.com Delivered-To: saag@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 1C70F3A69D9 for ; Wed, 11 Nov 2009 16:22:47 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -105.604 X-Spam-Level: X-Spam-Status: No, score=-105.604 tagged_above=-999 required=5 tests=[AWL=0.995, BAYES_00=-2.599, RCVD_IN_DNSWL_MED=-4, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id qpVMtp7GFPOC for ; Wed, 11 Nov 2009 16:22:46 -0800 (PST) Received: from wolverine01.qualcomm.com (wolverine01.qualcomm.com [199.106.114.254]) by core3.amsl.com (Postfix) with ESMTP id 2BDF93A68F4 for ; Wed, 11 Nov 2009 16:22:46 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=simple/simple; d=qualcomm.com; i=julienl@qualcomm.com; q=dns/txt; s=qcdkim; t=1257985395; x=1289521395; h=from:to:cc:date:subject:thread-topic:thread-index: message-id:accept-language:content-language: x-ms-has-attach:x-ms-tnef-correlator:acceptlanguage: content-type:content-transfer-encoding:mime-version: x-ironport-av; z=From:=20"Laganier,=20Julien"=20 |To:=20"saag@ietf.org"=20|CC:=20"lha@stack en.kth.se"=20|Date:=20Wed,=2011=20Nov =202009=2016:23:06=20-0800|Subject:=20BTNS=20report |Thread-Topic:=20BTNS=20report|Thread-Index:=20AcpjLk4z3R qFQfFZTpSwOM21P+iSrw=3D=3D|Message-ID:=20 |Accept-Language:=20en-US|Content-Language:=20en-US |X-MS-Has-Attach:|X-MS-TNEF-Correlator:|acceptlanguage: =20en-US|Content-Type:=20text/plain=3B=20charset=3D"us-as cii"|Content-Transfer-Encoding:=20quoted-printable |MIME-Version:=201.0|X-IronPort-AV:=20E=3DMcAfee=3Bi=3D"5 300,2777,5799"=3B=20a=3D"27402886"; bh=PSmUhiv9Ux4Pd7hsTRu5wDO6o51IyHNY9yzh3g4aVQI=; b=dcZhsY3ZBE+E2b3GF/xQ/HXow6kxOBNzRRWp/kUftoI17s1Fw+7OZRm6 3g6oYC1MCXA401Xdi6TYDSryxV0ALd5kdTVS5z6L90c16dtulCboLhYRn zVmOmAyFyX8UuABJzi1OjY1v8zXWDOO/TJ+xFaVcZuOTUTAki3LraAUy8 A=; X-IronPort-AV: E=McAfee;i="5300,2777,5799"; a="27402886" Received: from pdmz-ns-mip.qualcomm.com (HELO numenor.qualcomm.com) ([199.106.114.10]) by wolverine01.qualcomm.com with ESMTP/TLS/DHE-RSA-AES256-SHA; 11 Nov 2009 16:23:14 -0800 Received: from msgtransport02.qualcomm.com (msgtransport02.qualcomm.com [129.46.61.151]) by numenor.qualcomm.com (8.14.2/8.14.2/1.0) with ESMTP id nAC0NE6x010016 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=FAIL); Wed, 11 Nov 2009 16:23:14 -0800 Received: from nasanexhub06.na.qualcomm.com (nasanexhub06.na.qualcomm.com [129.46.134.254]) by msgtransport02.qualcomm.com (8.14.2/8.14.2/1.0) with ESMTP id nAC0N7Aa005834 (version=TLSv1/SSLv3 cipher=RC4-MD5 bits=128 verify=NOT); Wed, 11 Nov 2009 16:23:14 -0800 Received: from nasanex14h01.na.qualcomm.com (10.46.94.107) by nasanexhub06.na.qualcomm.com (129.46.134.254) with Microsoft SMTP Server (TLS) id 8.2.176.0; Wed, 11 Nov 2009 16:23:11 -0800 Received: from nalasexhc03.na.qualcomm.com (10.47.129.194) by nasanex14h01.na.qualcomm.com (10.46.94.107) with Microsoft SMTP Server (TLS) id 14.0.639.21; Wed, 11 Nov 2009 16:23:11 -0800 Received: from NALASEXMB04.na.qualcomm.com ([10.47.7.114]) by nalasexhc03.na.qualcomm.com ([10.47.129.194]) with mapi; Wed, 11 Nov 2009 16:23:11 -0800 From: "Laganier, Julien" To: "saag@ietf.org" Date: Wed, 11 Nov 2009 16:23:06 -0800 Thread-Topic: BTNS report Thread-Index: AcpjLk4z3RqFQfFZTpSwOM21P+iSrw== Message-ID: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: acceptlanguage: en-US Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 Cc: "lha@stacken.kth.se" Subject: [saag] BTNS report X-BeenThere: saag@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Security Area Advisory Group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 12 Nov 2009 00:22:47 -0000 RFC 5660 - IPsec Channels: Connection Latching was recently published as a = proposed standard. The last unfinished deliverable left for the working group is the API for a= pplications to use BTNS IPsec channels. It's not clear if the working group= has sufficient energy to progress that work. --julien, BTNS co-chair From ietfdbh@comcast.net Wed Nov 11 16:29:13 2009 Return-Path: X-Original-To: saag@core3.amsl.com Delivered-To: saag@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 8B5DF28C0DB for ; Wed, 11 Nov 2009 16:29:13 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.742 X-Spam-Level: X-Spam-Status: No, score=-1.742 tagged_above=-999 required=5 tests=[AWL=-1.557, BAYES_40=-0.185] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id oPO6xdu2w0O6 for ; Wed, 11 Nov 2009 16:29:12 -0800 (PST) Received: from QMTA04.emeryville.ca.mail.comcast.net (qmta04.emeryville.ca.mail.comcast.net [76.96.30.40]) by core3.amsl.com (Postfix) with ESMTP id D88EF3A6904 for ; Wed, 11 Nov 2009 16:29:12 -0800 (PST) Received: from OMTA05.emeryville.ca.mail.comcast.net ([76.96.30.43]) by QMTA04.emeryville.ca.mail.comcast.net with comcast id 3pNp1d0010vp7WLA40ViUh; Thu, 12 Nov 2009 00:29:42 +0000 Received: from Harrington73653 ([133.93.19.161]) by OMTA05.emeryville.ca.mail.comcast.net with comcast id 40VT1d00T3UX6v18R0VWvX; Thu, 12 Nov 2009 00:29:39 +0000 From: "David Harrington" To: Date: Thu, 12 Nov 2009 09:29:25 +0900 Message-ID: <05d901ca632f$37599170$a1135d85@china.huawei.com> MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit X-Mailer: Microsoft Office Outlook 11 Thread-Index: AcpjLzARegt7yDgdSQmlxZluAQemvA== X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.3198 Subject: [saag] syslog wg status X-BeenThere: saag@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Security Area Advisory Group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 12 Nov 2009 00:29:13 -0000 Syslog WG did not meet at ietf76. The WG is resolving DISCUSSes for the syslog sign document. The syslog-dtls-00 draft has been published and has received detailed reviews, including comments from Eliot Lear, Tom Petch, Rainer Gerhards, and Sam Hartman to be resolved. We are currently on target to meet our March 2010 deadlines. David Harrington co-chair, syslog WG From sethomso@cisco.com Wed Nov 11 16:38:07 2009 Return-Path: X-Original-To: saag@core3.amsl.com Delivered-To: saag@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id AA5DD3A69CC for ; Wed, 11 Nov 2009 16:38:07 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -6.599 X-Spam-Level: X-Spam-Status: No, score=-6.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, RCVD_IN_DNSWL_MED=-4] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id rvsqtydO1QGK for ; Wed, 11 Nov 2009 16:38:07 -0800 (PST) Received: from rtp-iport-1.cisco.com (rtp-iport-1.cisco.com [64.102.122.148]) by core3.amsl.com (Postfix) with ESMTP id B87F73A69CA for ; Wed, 11 Nov 2009 16:38:06 -0800 (PST) Authentication-Results: rtp-iport-1.cisco.com; dkim=neutral (message not signed) header.i=none X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: ApoEAPXn+kqtJV2b/2dsb2JhbADFKpgKhDwEgWs X-IronPort-AV: E=Sophos;i="4.44,726,1249257600"; d="scan'208";a="67533003" Received: from rcdn-core-4.cisco.com ([173.37.93.155]) by rtp-iport-1.cisco.com with ESMTP; 12 Nov 2009 00:38:34 +0000 Received: from xbh-rcd-101.cisco.com (xbh-rcd-101.cisco.com [72.163.62.138]) by rcdn-core-4.cisco.com (8.14.3/8.14.3) with ESMTP id nAC0cYhG024551 for ; Thu, 12 Nov 2009 00:38:34 GMT Received: from xmb-rcd-105.cisco.com ([72.163.62.147]) by xbh-rcd-101.cisco.com with Microsoft SMTPSVC(6.0.3790.3959); Wed, 11 Nov 2009 18:38:34 -0600 X-MimeOLE: Produced By Microsoft Exchange V6.5 Content-class: urn:content-classes:message MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable Date: Wed, 11 Nov 2009 18:38:33 -0600 Message-ID: <043901FAFD488D44ACC9CCED00470BDC19CB6A@XMB-RCD-105.cisco.com> X-MS-Has-Attach: X-MS-TNEF-Correlator: Thread-Topic: NEA WG Report for IETF76 Thread-Index: AcpjMHZ4whpSeIIkS/G54Vc/bFRbNw== From: "Susan Thomson (sethomso)" To: X-OriginalArrivalTime: 12 Nov 2009 00:38:34.0518 (UTC) FILETIME=[7755EB60:01CA6330] Subject: [saag] NEA WG Report for IETF76 X-BeenThere: saag@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Security Area Advisory Group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 12 Nov 2009 00:38:07 -0000 The NEA working group met on Monday Nov 9 at 17.40 JST. WG Status and Progress since last IETF: The IESG has completed its evaluation of PA-TNC and PB-TNC. The PA-TNC I-D has been approved by the IESG and has been sent to the RFC Editor for publication as Proposed Standard. The IESG is ready to approve PB-TNC. However, since a couple of significant changes were made in the PB-TNC I-D to respond to IESG comments, the changes were discussed during the WG meeting and are currently under review on the WG mailing list. Assuming no issues arise from this review, PB-TNC I-D will also move forward to Proposed Standard. This work completes the milestones in the original charter. Upcoming work: The NEA WG charter has recently been updated to allow work on specifying protocols for the posture transport (PT). There is a WG call for individual submissions for the PT protocol due on Jan 4, 2010. In the meantime, a conceptual overview of upcoming proposals was discussed during the WF meeting. Steve Hanna provided an overview of upcoming submissions from the TCG. Two PT protocols, one based on TLS and the other EAP, were presented to cater for different use cases.=20 Next Steps: The WG plans to hold a virtual interim meeting prior to IETF77 to discuss the PT individual submissions and help reach consensus on a WG document. From jsalowey@cisco.com Wed Nov 11 16:56:50 2009 Return-Path: X-Original-To: saag@core3.amsl.com Delivered-To: saag@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 15B0B3A683D for ; Wed, 11 Nov 2009 16:56:50 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -6.676 X-Spam-Level: X-Spam-Status: No, score=-6.676 tagged_above=-999 required=5 tests=[AWL=-0.077, BAYES_00=-2.599, RCVD_IN_DNSWL_MED=-4] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id qjsAhQZ8UfLV for ; Wed, 11 Nov 2009 16:56:49 -0800 (PST) Received: from sj-iport-6.cisco.com (sj-iport-6.cisco.com [171.71.176.117]) by core3.amsl.com (Postfix) with ESMTP id 68D8C3A6808 for ; Wed, 11 Nov 2009 16:56:49 -0800 (PST) Authentication-Results: sj-iport-6.cisco.com; dkim=neutral (message not signed) header.i=none X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: ApoEAO/r+kqrR7Hu/2dsb2JhbADFFZgMhDwE X-IronPort-AV: E=Sophos;i="4.44,726,1249257600"; d="scan'208";a="430428686" Received: from sj-core-5.cisco.com ([171.71.177.238]) by sj-iport-6.cisco.com with ESMTP; 12 Nov 2009 00:57:18 +0000 Received: from xbh-sjc-231.amer.cisco.com (xbh-sjc-231.cisco.com [128.107.191.100]) by sj-core-5.cisco.com (8.13.8/8.14.3) with ESMTP id nAC0vIRD009519 for ; Thu, 12 Nov 2009 00:57:18 GMT Received: from xmb-sjc-225.amer.cisco.com ([128.107.191.38]) by xbh-sjc-231.amer.cisco.com with Microsoft SMTPSVC(6.0.3790.3959); Wed, 11 Nov 2009 16:57:17 -0800 X-MimeOLE: Produced By Microsoft Exchange V6.5 Content-class: urn:content-classes:message MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable Date: Wed, 11 Nov 2009 16:57:15 -0800 Message-ID: X-MS-Has-Attach: X-MS-TNEF-Correlator: Thread-Topic: EMU working group status Thread-Index: AcpjMxOgy2RjC25oR7qZ6qbhZdS/gA== From: "Joseph Salowey (jsalowey)" To: X-OriginalArrivalTime: 12 Nov 2009 00:57:18.0033 (UTC) FILETIME=[1500B410:01CA6333] Subject: [saag] EMU working group status X-BeenThere: saag@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Security Area Advisory Group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 12 Nov 2009 00:56:50 -0000 EMU met Monday afternoon. We are continuing work on progressing tunnel method requirements towards the IESG. We will start working group last call on EAP Channel Bindings soon. There is a liaison from ITU to review ITU-T X.1034, Guideline on extensible authentication protocol based authentication and key management in a data communication network. There was a presentation from ECRIT on unauthenticated emergency access and EAP, there will be review and discussion of this between the two groups. There were also presentations on session policy in EAP and Biometric authentication in EAP. =20 From jsalowey@cisco.com Wed Nov 11 17:01:27 2009 Return-Path: X-Original-To: saag@core3.amsl.com Delivered-To: saag@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 78B423A68F8 for ; Wed, 11 Nov 2009 17:01:27 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -6.67 X-Spam-Level: X-Spam-Status: No, score=-6.67 tagged_above=-999 required=5 tests=[AWL=-0.071, BAYES_00=-2.599, RCVD_IN_DNSWL_MED=-4] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id TZhkTTnon0qY for ; Wed, 11 Nov 2009 17:01:26 -0800 (PST) Received: from sj-iport-6.cisco.com (sj-iport-6.cisco.com [171.71.176.117]) by core3.amsl.com (Postfix) with ESMTP id 9294B3A68CD for ; Wed, 11 Nov 2009 17:01:26 -0800 (PST) Authentication-Results: sj-iport-6.cisco.com; dkim=neutral (message not signed) header.i=none X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: ApoEABvt+kqrR7H+/2dsb2JhbADFG5gMhDwE X-IronPort-AV: E=Sophos;i="4.44,726,1249257600"; d="scan'208";a="430431886" Received: from sj-core-2.cisco.com ([171.71.177.254]) by sj-iport-6.cisco.com with ESMTP; 12 Nov 2009 01:01:55 +0000 Received: from xbh-sjc-231.amer.cisco.com (xbh-sjc-231.cisco.com [128.107.191.100]) by sj-core-2.cisco.com (8.13.8/8.14.3) with ESMTP id nAC11t4j020377 for ; Thu, 12 Nov 2009 01:01:55 GMT Received: from xmb-sjc-225.amer.cisco.com ([128.107.191.38]) by xbh-sjc-231.amer.cisco.com with Microsoft SMTPSVC(6.0.3790.3959); Wed, 11 Nov 2009 17:01:55 -0800 X-MimeOLE: Produced By Microsoft Exchange V6.5 Content-class: urn:content-classes:message MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable Date: Wed, 11 Nov 2009 17:01:53 -0800 Message-ID: X-MS-Has-Attach: X-MS-TNEF-Correlator: Thread-Topic: TLS working group preview Thread-Index: AcpjM7k2Wzp8UR3QSju6NSpONWM36w== From: "Joseph Salowey (jsalowey)" To: X-OriginalArrivalTime: 12 Nov 2009 01:01:55.0295 (UTC) FILETIME=[BA4386F0:01CA6333] Subject: [saag] TLS working group preview X-BeenThere: saag@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Security Area Advisory Group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 12 Nov 2009 01:01:27 -0000 TLS will meet the session after SAAG. The main topic will be on a renegotiation vulnerability. Background can be found http://www.educatedguesswork.org/2009/11/understanding_the_tls_renegoti. html and http://extendedsubset.com/Renegotiating_TLS.pdf. We will discuss a proposed extension to fix this problem. =20 =20 From turners@ieca.com Wed Nov 11 17:02:19 2009 Return-Path: X-Original-To: saag@core3.amsl.com Delivered-To: saag@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 1B62328C171 for ; Wed, 11 Nov 2009 17:02:19 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.419 X-Spam-Level: X-Spam-Status: No, score=-2.419 tagged_above=-999 required=5 tests=[AWL=0.179, BAYES_00=-2.599, UNPARSEABLE_RELAY=0.001] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id FSCzavN94Q3f for ; Wed, 11 Nov 2009 17:02:18 -0800 (PST) Received: from smtp106.biz.mail.mud.yahoo.com (smtp106.biz.mail.mud.yahoo.com [68.142.200.254]) by core3.amsl.com (Postfix) with SMTP id 2BD9528C162 for ; Wed, 11 Nov 2009 17:02:18 -0800 (PST) Received: (qmail 37344 invoked from network); 12 Nov 2009 01:02:46 -0000 Received: from host-24-125.meeting.ietf.org (turners@133.93.24.125 with plain) by smtp106.biz.mail.mud.yahoo.com with SMTP; 11 Nov 2009 17:02:46 -0800 PST X-Yahoo-SMTP: ZrP3VLSswBDL75pF8ymZHDSu9B.vcMfDPgLJ X-YMail-OSG: BOZDmjcVM1mtu7uif_G2bsiHbjwbFvVfIt4_3w1wWW9fPTgAUy_IZeVrWoLNX1I8nzjwkrIWckx6rQScjk4YUH3NRv5MUI0CxKapubYacXINZTumTM5kRqdKuSjKTrpWhj5trAtlKQlUMrHOQtKNWIKAgktyT1FiZ8RNIb5Q7PYZEEyknqWyn_w5Jh5Tc_u3DqUI7EycxmcfcTQ3Xdx3nMbWuyG5m3L.aro5k_0nvPkDEfbLI11JMlNzztIRKCRcXRjTcHicsLSAAv384_gWCkTkVdhUvD9aJvBzi7Jke1zrKal.Ylq8qw-- X-Yahoo-Newman-Property: ymail-3 Message-ID: <4AFB5EB1.8050102@ieca.com> Date: Thu, 12 Nov 2009 10:02:41 +0900 From: Sean Turner User-Agent: Thunderbird 2.0.0.23 (Macintosh/20090812) MIME-Version: 1.0 To: saag@ietf.org Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Subject: [saag] SMIME WG Report for IETF 76 X-BeenThere: saag@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Security Area Advisory Group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 12 Nov 2009 01:02:19 -0000 SMIME did not meet at IETF 76. Of the 7 active IDs, 6 are with the RFC editor. 5 are in AUTH48. This WG should not be long for this world. spt From Shawn.Emery@Sun.COM Wed Nov 11 17:05:50 2009 Return-Path: X-Original-To: saag@core3.amsl.com Delivered-To: saag@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id E893C3A698A for ; Wed, 11 Nov 2009 17:05:50 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -7.184 X-Spam-Level: X-Spam-Status: No, score=-7.184 tagged_above=-999 required=5 tests=[AWL=-1.138, BAYES_00=-2.599, HELO_MISMATCH_COM=0.553, RCVD_IN_DNSWL_MED=-4] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id erKPJg+7VEIB for ; Wed, 11 Nov 2009 17:05:50 -0800 (PST) Received: from brmea-mail-2.sun.com (brmea-mail-2.Sun.COM [192.18.98.43]) by core3.amsl.com (Postfix) with ESMTP id 1E8B83A68F8 for ; Wed, 11 Nov 2009 17:05:50 -0800 (PST) Received: from fe-amer-09.sun.com ([192.18.109.79]) by brmea-mail-2.sun.com (8.13.6+Sun/8.12.9) with ESMTP id nAC16I84028681 for ; Thu, 12 Nov 2009 01:06:18 GMT MIME-version: 1.0 Content-transfer-encoding: 7BIT Content-type: text/plain; CHARSET=US-ASCII; format=flowed Received: from conversion-daemon.mail-amer.sun.com by mail-amer.sun.com (Sun Java(tm) System Messaging Server 7u2-7.04 64bit (built Jul 2 2009)) id <0KSZ00M001K38L00@mail-amer.sun.com> for saag@ietf.org; Wed, 11 Nov 2009 18:06:18 -0700 (MST) Received: from host-19-253.meeting.ietf.org ([unknown] [133.93.19.253]) by mail-amer.sun.com (Sun Java(tm) System Messaging Server 7u2-7.04 64bit (built Jul 2 2009)) with ESMTPSA id <0KSZ008UU1PM9OD0@mail-amer.sun.com> for saag@ietf.org; Wed, 11 Nov 2009 18:05:47 -0700 (MST) Date: Wed, 11 Nov 2009 18:05:45 -0700 From: "Shawn M. Emery" Sender: Shawn.Emery@Sun.COM To: saag@ietf.org Message-id: <4AFB5F69.1090106@sun.com> User-Agent: Thunderbird 2.0.0.23 (Macintosh/20090812) Subject: [saag] Kitten Working Group Summary - IETF 76 X-BeenThere: saag@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Security Area Advisory Group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 12 Nov 2009 01:05:51 -0000 The kitten-wg met Wednesday, 11/11/09, during the first morning session. Co-chairs: Tom Yu and Shawn Emery The goals of the meeting were to review the state of the active working group items, one individual submission, charter, and milestones. gssapi-extensions-iana ---------------------------- Tim Polk is working with Michelle Cotton on progressing the review this week. extended-mech-inquiry ----------------------------- Published as RFC 5587. gssapi-naming-exts ------------------------ Editor has had feed-back from multiple implementors. Will have updates and should be ready for WGLC by 3/10. rfc2853bis ------------- Published as RFC 5653. draft-lha-gssapi-delegate-policy --------------------------------------- Current state: AD evaluation. AD: To send to IETF LC. Future WG Items ----------------------- We discussed requested new work items: initialization/new credentials listing/iterating credentials exporting/importing credentials error message reporting asynchronous calls security strength reporting programmer friendliness Will prioritize which items should be handled on the list. Charter/Milestones ------------------------ Will recharter if there is enough momentum behind work items proposed. New milestone: WGLC gssapi-naming-exts 3/10 (Orig 11/07) Shawn and Tom Yu. -- From mcr@marajade.sandelman.ca Wed Nov 11 17:43:02 2009 Return-Path: X-Original-To: saag@core3.amsl.com Delivered-To: saag@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 52C8D3A69D9 for ; Wed, 11 Nov 2009 17:43:02 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.049 X-Spam-Level: X-Spam-Status: No, score=-1.049 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, HOST_MISMATCH_NET=0.311, IP_NOT_FRIENDLY=0.334, RCVD_IN_PBL=0.905] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Kb-5Qc2TlzE1 for ; Wed, 11 Nov 2009 17:43:01 -0800 (PST) Received: from relay.sandelman.ca (relay.cooperix.net [67.23.6.41]) by core3.amsl.com (Postfix) with ESMTP id 961B63A6839 for ; Wed, 11 Nov 2009 17:43:01 -0800 (PST) Received: from sandelman.ottawa.on.ca (desk.marajade.sandelman.ca [209.87.252.247]) by relay.sandelman.ca (Postfix) with ESMTPS id BE314342DE for ; Wed, 11 Nov 2009 20:34:38 -0500 (EST) Received: from marajade.sandelman.ca (localhost [127.0.0.1]) by sandelman.ottawa.on.ca (Postfix) with ESMTP id 4A5294E794 for ; Wed, 11 Nov 2009 20:43:29 -0500 (EST) From: Michael Richardson To: "saag@ietf.org" In-Reply-To: References: X-Mailer: MH-E 8.1; nmh 1.1; XEmacs 21.4 (patch 21) Date: Wed, 11 Nov 2009 20:43:29 -0500 Message-ID: <18485.1257990209@marajade.sandelman.ca> Sender: mcr@marajade.sandelman.ca Subject: Re: [saag] BTNS report X-BeenThere: saag@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Security Area Advisory Group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 12 Nov 2009 01:43:02 -0000 >>>>> "Julien" == Julien Laganier writes: Julien> The last unfinished deliverable left for the working group Julien> is the API for applications to use BTNS IPsec channels. It's Julien> not clear if the working group has sufficient energy to Julien> progress that work. As an author, let me state that we have received very little feedback. We have received some feedback, but it was not terribly useful. As an author, I do not feel the document should progress until someone who is implementing has really sat down and worked on it. Unfortunately, I am not in a position to implement. I propose to close BTNS, sadly. -- ] He who is tired of Weird Al is tired of life! | firewalls [ ] Michael Richardson, Sandelman Software Works, Ottawa, ON |net architect[ ] mcr@sandelman.ottawa.on.ca http://www.sandelman.ottawa.on.ca/ |device driver[ Kyoto Plus: watch the video then sign the petition. From bew@cisco.com Wed Nov 11 18:14:54 2009 Return-Path: X-Original-To: saag@core3.amsl.com Delivered-To: saag@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 252823A6B6A for ; Wed, 11 Nov 2009 18:14:54 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -6.599 X-Spam-Level: X-Spam-Status: No, score=-6.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, RCVD_IN_DNSWL_MED=-4] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 5mBiz5wfv5v6 for ; Wed, 11 Nov 2009 18:14:52 -0800 (PST) Received: from sj-iport-4.cisco.com (sj-iport-4.cisco.com [171.68.10.86]) by core3.amsl.com (Postfix) with ESMTP id 1B9AC3A6B3F for ; Wed, 11 Nov 2009 18:14:52 -0800 (PST) Authentication-Results: sj-iport-4.cisco.com; dkim=neutral (message not signed) header.i=none X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: ApsEAAD++kpAaHte/2dsb2JhbACBT8M9mAmCN4IFBIJm X-IronPort-AV: E=Sophos;i="4.44,726,1249257600"; d="scan'208";a="49103649" Received: from hkg-core-1.cisco.com ([64.104.123.94]) by sj-iport-4.cisco.com with ESMTP; 12 Nov 2009 02:15:20 +0000 Received: from host-18-166.meeting.ietf.org (tky-vpn-client-230-176.cisco.com [10.70.230.176]) by hkg-core-1.cisco.com (8.13.8/8.14.3) with ESMTP id nAC2FJOt024817 for ; Thu, 12 Nov 2009 02:15:19 GMT Message-Id: From: Brian Weis To: saag@ietf.org Content-Type: text/plain; charset=US-ASCII; format=flowed; delsp=yes Content-Transfer-Encoding: 7bit Mime-Version: 1.0 (Apple Message framework v936) Date: Thu, 12 Nov 2009 11:15:18 +0900 X-Mailer: Apple Mail (2.936) Subject: [saag] MSEC WG Report for IETF 76 X-BeenThere: saag@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Security Area Advisory Group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 12 Nov 2009 02:14:54 -0000 The MSEC WG met Monday morning for about 2 hours. After a brief document and WG status review we had several presentations. We started with two presentations preposing new modes of MIKEY key agreement. Rolf Blum presented MIKEY-TICKET, a Kerberos-like method where a trusted third party provides session keys and policy to devices. Violeta Cakulev presented MIKEY-IBAKE, an identity based authentication method based on RFC 5408. Both presentations had lively and interesting discussions. Following both presentations the WG engaged in a discussion as to whether the WG should continue to publish MIKEY specifications. MIKEY specifications are generally used as key agreement methods for SRTP. It was noted that some time ago that IETF WGs specifying SRTP have adopted other preferred key agreement methods. However, it was also noted that the 3GPP SDO does specify the use of some MIKEY modes, which requires IETF Consensus to add to the MIKEY IANA registries. The chair asked for a declaration from individuals who would promise to spend time reviewing the documents. There was not enough response, and so the WG will not take up the new MIKEY work. Tim Polk did agree to sponsor these I-Ds as individual submissions. The meeting concluded with an informational presentation on a link- layer group key agreement method being standardized by IEEE 802.1. It was pointed out that the techniques used in this method could be very useful in addressing link-layer routing protocol security in the future. Brian Weis From Shawn.Emery@Sun.COM Wed Nov 11 19:47:37 2009 Return-Path: X-Original-To: saag@core3.amsl.com Delivered-To: saag@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 5E2F53A6828 for ; Wed, 11 Nov 2009 19:47:37 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -6.805 X-Spam-Level: X-Spam-Status: No, score=-6.805 tagged_above=-999 required=5 tests=[AWL=-0.759, BAYES_00=-2.599, HELO_MISMATCH_COM=0.553, RCVD_IN_DNSWL_MED=-4] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id PypmqV2jtTCZ for ; Wed, 11 Nov 2009 19:47:36 -0800 (PST) Received: from brmea-mail-1.sun.com (brmea-mail-1.Sun.COM [192.18.98.31]) by core3.amsl.com (Postfix) with ESMTP id 915123A67D2 for ; Wed, 11 Nov 2009 19:47:36 -0800 (PST) Received: from fe-amer-09.sun.com ([192.18.109.79]) by brmea-mail-1.sun.com (8.13.6+Sun/8.12.9) with ESMTP id nAC3m5bM020600 for ; Thu, 12 Nov 2009 03:48:05 GMT MIME-version: 1.0 Content-transfer-encoding: 7BIT Content-type: text/plain; CHARSET=US-ASCII; format=flowed Received: from conversion-daemon.mail-amer.sun.com by mail-amer.sun.com (Sun Java(tm) System Messaging Server 7u2-7.04 64bit (built Jul 2 2009)) id <0KSZ00F0095Z2700@mail-amer.sun.com> for saag@ietf.org; Wed, 11 Nov 2009 20:48:05 -0700 (MST) Received: from host-19-253.meeting.ietf.org ([unknown] [133.93.19.253]) by mail-amer.sun.com (Sun Java(tm) System Messaging Server 7u2-7.04 64bit (built Jul 2 2009)) with ESMTPSA id <0KSZ004XB983K9C0@mail-amer.sun.com> for saag@ietf.org; Wed, 11 Nov 2009 20:48:05 -0700 (MST) Date: Wed, 11 Nov 2009 20:48:03 -0700 From: "Shawn M. Emery" Sender: Shawn.Emery@Sun.COM To: saag@ietf.org Message-id: <4AFB8573.5020808@sun.com> User-Agent: Thunderbird 2.0.0.23 (Macintosh/20090812) Subject: [saag] SASL Working Group Summary - IETF 76 X-BeenThere: saag@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Security Area Advisory Group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 12 Nov 2009 03:47:37 -0000 The sasl-wg met Wednesday, 11/11/09, during the second morning session. Co-chairs: Tom Yu and Kurt Zeilenga (acting, Alexey Melnikov and Shawn Emery) The primary goal of the meeting was to review the solution of SASLprep. This discussion branched to two aspects: Whether we should support agility or use one version. Trade-offs: Using one version may have issues as bugs may occur Using an agile solution is more complex Other issue is where should normalization take place; client or server. Aspects: Server should know the supported types, clients could have orthogonal types If client normalizes then if server normalizes, should be immutable This problem is not indigenous to SASL It was suggested to have a BoF during the next IETF to find a solution Shawn and Alexey Melnikov. -- From Shawn.Emery@Sun.COM Wed Nov 11 19:47:59 2009 Return-Path: X-Original-To: saag@core3.amsl.com Delivered-To: saag@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 21AFD28C1E4 for ; Wed, 11 Nov 2009 19:47:59 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -6.615 X-Spam-Level: X-Spam-Status: No, score=-6.615 tagged_above=-999 required=5 tests=[AWL=-0.569, BAYES_00=-2.599, HELO_MISMATCH_COM=0.553, RCVD_IN_DNSWL_MED=-4] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id SDHJsOKNfGCJ for ; Wed, 11 Nov 2009 19:47:58 -0800 (PST) Received: from brmea-mail-2.sun.com (brmea-mail-2.Sun.COM [192.18.98.43]) by core3.amsl.com (Postfix) with ESMTP id 46B3828C1E2 for ; Wed, 11 Nov 2009 19:47:57 -0800 (PST) Received: from fe-amer-10.sun.com ([192.18.109.80]) by brmea-mail-2.sun.com (8.13.6+Sun/8.12.9) with ESMTP id nAC3mP4X010704 for ; Thu, 12 Nov 2009 03:48:25 GMT MIME-version: 1.0 Content-transfer-encoding: 7BIT Content-type: text/plain; CHARSET=US-ASCII; format=flowed Received: from conversion-daemon.mail-amer.sun.com by mail-amer.sun.com (Sun Java(tm) System Messaging Server 7u2-7.04 64bit (built Jul 2 2009)) id <0KSZ00C00984GP00@mail-amer.sun.com> for saag@ietf.org; Wed, 11 Nov 2009 20:48:25 -0700 (MST) Received: from host-19-253.meeting.ietf.org ([unknown] [133.93.19.253]) by mail-amer.sun.com (Sun Java(tm) System Messaging Server 7u2-7.04 64bit (built Jul 2 2009)) with ESMTPSA id <0KSZ00D7C98FC080@mail-amer.sun.com> for saag@ietf.org; Wed, 11 Nov 2009 20:48:16 -0700 (MST) Date: Wed, 11 Nov 2009 20:48:14 -0700 From: "Shawn M. Emery" Sender: Shawn.Emery@Sun.COM To: saag@ietf.org Message-id: <4AFB857E.8090806@sun.com> User-Agent: Thunderbird 2.0.0.23 (Macintosh/20090812) Subject: [saag] Kerberos Working Group Summary - IETF 76 X-BeenThere: saag@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Security Area Advisory Group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 12 Nov 2009 03:47:59 -0000 The kerberos-wg met Wednesday, 11/11/09, during the first afternoon session. Co-chairs: Larry Zhu and Jeffrey Hutzelman (acting, Shawn Emery) The goals of the meeting were to discuss the FAST negotiation issue and resolve encryption type semantics in the KDC data model. Sam Hartman presented issues with FAST negotiation. Need a way to determine if the KDC supports FAST and a way to negotiate the armor ticket securely. Solution entails supplying integrity check in the AS-REP on the server side, providing a new PA-type by the client, and new negotiation to thwart down grade attack. WG members agreed to the solution presented. Encryption type attribute in the data model needs better semantics. Suggestions include separting attribute and policy. Some members would like to include positive/negative support for these. Document Status ---------------------- draft-ietf-krb-wg-preauth-framework 1 asn.1 issue (uint32 undefined) Tom Yu will verify type registry is accurate before sending off for IANA review no implementors draft-josefsson-kerberos5-starttls WGLC finished draft-ietf-krb-wg-cross-problem-statement IETF Last Call/IESG Review Shawn. -- From tobias.gondrom@gondrom.org Wed Nov 11 19:48:22 2009 Return-Path: X-Original-To: saag@core3.amsl.com Delivered-To: saag@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id DE41628C1E6 for ; Wed, 11 Nov 2009 19:48:22 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.229 X-Spam-Level: X-Spam-Status: No, score=-1.229 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, HELO_EQ_DE=0.35, LOCALPART_IN_SUBJECT=2.02, RCVD_IN_DNSWL_LOW=-1] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id nbJ+-ZmRwWqR for ; Wed, 11 Nov 2009 19:48:22 -0800 (PST) Received: from leela.webpack.hosteurope.de (leela.webpack.hosteurope.de [217.115.142.65]) by core3.amsl.com (Postfix) with ESMTP id 881D028C1DD for ; Wed, 11 Nov 2009 19:48:19 -0800 (PST) Received: from host-19-37.meeting.ietf.org ([133.93.19.37]); authenticated by leela.webpack.hosteurope.de running ExIM with esmtpa id 1N8Qfv-0006CC-07; Thu, 12 Nov 2009 04:48:47 +0100 Message-ID: <4AFB859B.6040709@gondrom.org> Date: Thu, 12 Nov 2009 12:48:43 +0900 From: Tobias Gondrom User-Agent: Thunderbird 2.0.0.23 (X11/20090817) MIME-Version: 1.0 To: saag@ietf.org References: <4AFB5EB1.8050102@ieca.com> In-Reply-To: <4AFB5EB1.8050102@ieca.com> Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit X-bounce-key: webpack.hosteurope.de; tobias.gondrom@gondrom.org; 1257997728; 6f7970e9; Cc: CWallace@cygnacom.com Subject: [saag] saag: LTANS WG Report for IETF 76 X-BeenThere: saag@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Security Area Advisory Group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 12 Nov 2009 03:48:23 -0000 LTANS did not meet at IETF76. 4 I-D updates: - DSSC has been published as RFC 5698 - I-D LTAP and XMLERS waiting for closure with some uncertainty whether we will finish them or abort; deadline for decision next IETF (will depend on implementations and progress of drafts until IETF77). - planned one short informational I-D as a final capstone to provide a how-to for using all existing drafts together in a system. Tobias From yaronf@checkpoint.com Wed Nov 11 19:49:18 2009 Return-Path: X-Original-To: saag@core3.amsl.com Delivered-To: saag@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id C2EDE28C1EA; Wed, 11 Nov 2009 19:49:18 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -3.681 X-Spam-Level: X-Spam-Status: No, score=-3.681 tagged_above=-999 required=5 tests=[AWL=-0.083, BAYES_00=-2.599, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-1] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id kwE+nSI1OCzX; Wed, 11 Nov 2009 19:49:16 -0800 (PST) Received: from michael.checkpoint.com (michael.checkpoint.com [194.29.32.68]) by core3.amsl.com (Postfix) with ESMTP id C332028C1EE; Wed, 11 Nov 2009 19:48:48 -0800 (PST) Received: from il-ex01.ad.checkpoint.com (localhost [127.0.0.1]) by michael.checkpoint.com (8.12.10+Sun/8.12.10) with ESMTP id nAC3nFc6018888; Thu, 12 Nov 2009 05:49:15 +0200 (IST) Received: from il-ex01.ad.checkpoint.com ([126.0.0.2]) by il-ex01.ad.checkpoint.com ([126.0.0.2]) with mapi; Thu, 12 Nov 2009 05:49:18 +0200 From: Yaron Sheffer To: "saag@ietf.org" Date: Thu, 12 Nov 2009 05:49:13 +0200 Thread-Topic: IPsecME WG report Thread-Index: AcpjSxlUYagSMqn2TV+/4QxI9+z5IQ== Message-ID: <7F9A6D26EB51614FBF9F81C0DA4CFEC801BDF872C10F@il-ex01.ad.checkpoint.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: acceptlanguage: en-US Content-Type: multipart/alternative; boundary="_000_7F9A6D26EB51614FBF9F81C0DA4CFEC801BDF872C10Filex01adche_" MIME-Version: 1.0 Cc: IPsecme WG Subject: [saag] IPsecME WG report X-BeenThere: saag@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Security Area Advisory Group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 12 Nov 2009 03:49:18 -0000 --_000_7F9A6D26EB51614FBF9F81C0DA4CFEC801BDF872C10Filex01adche_ Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable IPsecME met this morning. We have one RFC (IKEv2 Redirect) recently published, and a couple more in t= he RFC Editor queue. The other "small" drafts are coming along as well. The group is making progress on IKEv2-bis, and we had a presentation on one= thorny protocol issue that was resolved by a design team. Our goal is to m= ove it out of the WG *before* the next F2F meeting. The bulk of the meeting was presentation of 7 candidate work items. The gro= up was polled for volunteer reviewers and contributors for each of these. T= his process will continue on the mailing list, and eventually we will propo= se a new charter, retaining the number of concurrent work items. On the process side, we had one presenter on an audio bridge - which worked= fine - and another as a prerecorded "podcast", which also worked after som= e technical fumbling. --_000_7F9A6D26EB51614FBF9F81C0DA4CFEC801BDF872C10Filex01adche_ Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable

IPsecME met this morning.

 

We have one RFC (IKEv2 Redirect) recently published, and= a couple more in the RFC Editor queue. The other “small” drafts a= re coming along as well.

 

The group is making progress on IKEv2-bis, and we had a presentation on one thorny protocol issue that was resolved by a design tea= m. Our goal is to move it out of the WG *b= efore* the next F2F meeting.

 

The bulk of the meeting was presentation of 7 candidate = work items. The group was polled for volunteer reviewers and contributors for ea= ch of these. This process will continue on the mailing list, and eventually we will propose a new charter, retaining the number of concurrent work items.<= o:p>

 

On the process side, we had one presenter on an audio br= idge – which worked fine – and another as a prerecorded “podca= st”, which also worked after some technical fumbling.

--_000_7F9A6D26EB51614FBF9F81C0DA4CFEC801BDF872C10Filex01adche_-- From tena@huawei.com Wed Nov 11 20:18:28 2009 Return-Path: X-Original-To: saag@core3.amsl.com Delivered-To: saag@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id A3D2D3A689A for ; Wed, 11 Nov 2009 20:18:28 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -99.46 X-Spam-Level: X-Spam-Status: No, score=-99.46 tagged_above=-999 required=5 tests=[AWL=-0.229, BAYES_00=-2.599, FH_RELAY_NODNS=1.451, HELO_MISMATCH_COM=0.553, HTML_MESSAGE=0.001, HTML_TAG_BALANCE_BODY=1.263, RDNS_NONE=0.1, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id z+HSqnLxfOaQ for ; Wed, 11 Nov 2009 20:18:27 -0800 (PST) Received: from szxga04-in.huawei.com (unknown [119.145.14.67]) by core3.amsl.com (Postfix) with ESMTP id 3C45F3A63EB for ; Wed, 11 Nov 2009 20:18:27 -0800 (PST) Received: from huawei.com (szxga04-in [172.24.2.12]) by szxga04-in.huawei.com (iPlanet Messaging Server 5.2 HotFix 2.14 (built Aug 8 2006)) with ESMTP id <0KSZ0024ZAN9BC@szxga04-in.huawei.com> for saag@ietf.org; Thu, 12 Nov 2009 12:18:45 +0800 (CST) Received: from huawei.com ([172.24.1.3]) by szxga04-in.huawei.com (iPlanet Messaging Server 5.2 HotFix 2.14 (built Aug 8 2006)) with ESMTP id <0KSZ0014FAN9RZ@szxga04-in.huawei.com> for saag@ietf.org; Thu, 12 Nov 2009 12:18:45 +0800 (CST) Received: from host-19-115.meeting.ietf.org (host-19-115.meeting.ietf.org [133.93.19.115]) by szxml01-in.huawei.com (iPlanet Messaging Server 5.2 HotFix 2.14 (built Aug 8 2006)) with ESMTPA id <0KSZ0089EAN7JV@szxml01-in.huawei.com> for saag@ietf.org; Thu, 12 Nov 2009 12:18:45 +0800 (CST) Date: Thu, 12 Nov 2009 13:18:26 +0900 From: Tina TSOU To: saag@ietf.org Message-id: MIME-version: 1.0 X-Mailer: Apple Mail (2.930.3) Content-type: multipart/alternative; boundary="Boundary_(ID_cOLy+AOr00G7547nr8sbCQ)" References: <1A075241E13E684E9717ADF1F6004F650A1671@aruba-mx3.arubanetworks.com> Subject: [saag] HOKEY notes X-BeenThere: saag@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Security Area Advisory Group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 12 Nov 2009 04:18:28 -0000 --Boundary_(ID_cOLy+AOr00G7547nr8sbCQ) Content-type: text/plain; charset=WINDOWS-1252; format=flowed Content-transfer-encoding: quoted-printable > Hi all, > > The notes from hokey=92s session are attached. > > Tina http://tinatsou.weebly.com/contact.html --Boundary_(ID_cOLy+AOr00G7547nr8sbCQ) Content-type: multipart/mixed; boundary="Boundary_(ID_zOGarguyN62xplieqQbm8g)" --Boundary_(ID_zOGarguyN62xplieqQbm8g) Content-type: text/html; charset=WINDOWS-1252 Content-transfer-encoding: quoted-printable
Hi = all,
 
The notes from hokey=92s session are = attached.
 
Tinahttp://tinatsou.weebly.co= m/contact.html
= --Boundary_(ID_zOGarguyN62xplieqQbm8g) Content-type: application/msword; x-unix-mode=0666; name="HOKEY WG Notes.doc" Content-transfer-encoding: base64 Content-disposition: attachment; filename="HOKEY WG Notes.doc" 0M8R4KGxGuEAAAAAAAAAAAAAAAAAAAAAPgADAP7/CQAGAAAAAAAAAAAAAAABAAAAUgAAAAAAAAAA EAAAVAAAAAEAAAD+////AAAAAFEAAAD///////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// ///////////////////////////////////////////////////////////////////////////s pcEAJ2AJBAAA+BK/AAAAAAAAEAAAAAAABgAA2iIAAA4AYmpiauvI68gAAAAAAAAAAAAAAAAAAAAA AAAJBBYALjQAAImiAACJogAAzBoAAAAAAAANAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD//w8AAAAA AAAAAAD//w8AAAAAAAAAAAD//w8AAAAAAAAAAAAAAAAAAAAAAKQAAAAAACAFAAAAAAAAIAUAACAF AAAAAAAAIAUAAAAAAAAgBQAAAAAAACAFAAAAAAAAIAUAABQAAAAAAAAAAAAAADQFAAAAAAAAXBgA AAAAAABcGAAAAAAAAFwYAAA4AAAAlBgAABwAAACwGAAAJAAAADQFAAAAAAAAiDUAAMwBAADgGAAA FgAAAPYYAAAAAAAA9hgAAAAAAAD2GAAAAAAAAPYYAAAAAAAA0RkAAAAAAADRGQAAAAAAANEZAAAA AAAABzUAAAIAAAAJNQAAAAAAAAk1AAAAAAAACTUAAAAAAAAJNQAAAAAAAAk1AAAAAAAACTUAACQA AABUNwAAaAIAALw5AABmAAAALTUAABUAAAAAAAAAAAAAAAAAAAAAAAAAIAUAAAAAAAD6GwAAAAAA AAAAAAAAAAAAAAAAAAAAAADRGQAAAAAAANEZAAAAAAAA+hsAAAAAAAD6GwAAAAAAAC01AAAAAAAA AAAAAAAAAAAgBQAAAAAAACAFAAAAAAAA9hgAAAAAAAAAAAAAAAAAAPYYAADbAAAAQjUAABYAAACy HwAAAAAAALIfAAAAAAAAsh8AAAAAAAD6GwAAfgEAACAFAAAAAAAA9hgAAAAAAAAgBQAAAAAAAPYY AAAAAAAABzUAAAAAAAAAAAAAAAAAALIfAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAA+hsAAAAAAAAHNQAAAAAAAAAAAAAAAAAAsh8AAAAAAACyHwAA xgAAABszAACQAAAAIAUAAAAAAAAgBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAhzQAAAAAAAD2GAAAAAAAANQYAAAMAAAAEEPnqN9h ygEAAAAAAAAAAFwYAAAAAAAAeB0AAPoAAACrMwAAFAAAAAAAAAAAAAAABzUAAAAAAABYNQAAMAAA AIg1AAAAAAAAvzMAAMgAAAAiOgAAAAAAAHIeAADuAAAAIjoAACgAAACHNAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACH NAAAFAAAACI6AAAAAAAAAAAAAAAAAAAgBQAAAAAAAJs0AABsAAAA0RkAAGgAAAA5GgAASgAAALIf AAAAAAAAgxoAADwAAAC/GgAAOwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0RkA AAAAAADRGQAAAAAAANEZAAAAAAAALTUAAAAAAAAtNQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAYB8AAFIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANEZAAAA AAAA0RkAAAAAAADRGQAAAAAAAIg1AAAAAAAA+hsAAAAAAAD6GwAAAAAAAPobAAAAAAAA+hsAAAAA AAAAAAAAAAAAADQFAAAAAAAANAUAAAAAAAA0BQAA5AoAABgQAABECAAANAUAAAAAAAA0BQAAAAAA ADQFAAAAAAAAGBAAAAAAAAA0BQAAAAAAADQFAAAAAAAANAUAAAAAAAAgBQAAAAAAACAFAAAAAAAA IAUAAAAAAAAgBQAAAAAAACAFAAAAAAAAIAUAAAAAAAD/////AAAAAAIADAEAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEhPS0VZ IFdHIE5vdGVzDURvcm90aHkgU3RhbmxleSAoQXJ1YmEgTmV0d29ya3MpDQ1BZ2VuZGE6IElFVEYt NzYgSE9LRVkgYWdlbmRhDUhhbmRvdmVyIEtleWluZyAoSE9LRVkpIFdvcmtpbmcgR3JvdXANQ2hh aXJzoCA6IEdsZW4gWm9ybiAoZ3d6QG5ldC16ZW4ubmV0KQtUaW5hIFRzb3UgKFRpbmcgWk9VKSAo dGVuYUBodWF3ZWkuY29tDUphYmJlcqAgOiATIEhZUEVSTElOSyAibWFpbHRvOmhva2V5QGphYmJl ci5pZXRmLm9yZyIgARRob2tleUBqYWJiZXIuaWV0Zi5vcmcVC1VSTCCgIKAgOiBodHRwOi8vdG9v bHMuaWV0Zi5vcmcvd2cvaG9rZXkvDUFnZW5kYaAgOiBWZXJzaW9uIDEuMCAoZHJhZnQpC01lZXRp bmcgOiBJRVRGIDc2OyBIaXJvc2hpbWEsIEphcGFuCz09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PQ1EYXRloCCgIDogVHVlc2RheSAxMHRoLCBO b3ZlbWJlciAyMDA5C1RpbWWgIKAgOiAxNToyMCAtIDE3OjAwC0xvY2F0aW9uOiBDYXR0bGV5YSBX ZXN0DT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PQ1XZWxjb21lICYgQWRtaW5pc3RyaXZpYSAoMTAgbWludXRlcykLQmx1ZXNoZWV0c6ALSmFi YmVyIHNjcmliZaALTWludXRlIFRha2Vyc6ALRG9jdW1lbnQgU3RhdHVzICg1IG1pbnV0ZXMpDTEu IEhva2V5IGFyY2hpdGVjdHVyZSCgPGRyYWZ0LWhvZXBlci1ob2tleS1hcmNoLWRlc2lnbi0wMS50 eHQ+oAtTZWJhc3RpZW4gRGVjdWdpcyAoMTUgbWludXRlcykNMi4gTG9jYWwgRG9tYWluIE5hbWUg RGlzY292ZXJ5IGZvciBFUlAgPGRyYWZ0LXd1LWhva2V5LWxkbi1kaXNjb3ZlcnktMDAudHh0PgtR aW4gV3UvVEJEICgxNSBtaW51dGVzKQ0zLiBUaGUgYXJjaGl0ZWN0dXJhbCBjaG9pY2VzIGF2YWls YWJsZSBpZiBvbmUgd2FudGVkIHRvIGhhdmWgYSBsb2NhbCBFUlAgc2VydmVyIGluZGVwZW5kZW50 IG9mIHRoZSBEaWFtZXRlciBwcm94eQtUb20gVGF5bG9yICgxNSBtaW51dGVzKQ00LiBFYXJseSBB dXRoZW50aWNhdGlvbiBzb2x1dGlvbnOgC0h1aSBEZW5nICgxNSBtaW51dGVzKQ01LiBUb2tlbiBi YXNlZCBoYW5kb3ZlciBrZXkgZGVyaXZhdGlvbiBmb3IgUmUtYXV0aGVudGljYXRpb24LU2h1IExp dSAoMTUgbWludXRlcykNV3JhcC1VcCAoNSBtaW51dGVzKQ0NQ2hhaXIgcmVtaW5kZWQgcGFydGlj aXBhbnRzIHRvIHNpZ24gdGhlIGJsdWUgc2hlZXRzDUNoYWlyIGFza3MgZm9yIG5vdGUgdGFrZXJz IGFuZCBqYWJiZXIgc2NyaWJlLiBEb3JvdGh5IFN0YW5sZXkgdm9sdW50ZWVycyB0byB0YWtlIG5v dGVzLg1Eb2N1bWVudCBzdGF0dXM6IFRoZSByZW1haW5pbmcgMiBkb2NzIGhhdmUgcGFzc2VkIFdH TEMgYW5kIGFyZSBpbiB0aGUgdGVuZGVyIGNsdXRjaGVzIG9mIHRoZSBJRVNHLiANRmlyc3QgcHJl c2VudGF0aW9uOiBIT0tFWSBBcmNoaXRlY3R1cmUgZHJhZnQ6IFNlYmFzdGllbiBEZWN1Z2lzICgx NSBtaW51dGVzKQ1Nb3RpdmF0aW9uOiBDdXJyZW50bHkgdW5jbGVhciBob3cgbmVjZXNzYXJ5IGhh bmRvdmVyIGluZnJhc3RydWN0dXJlIGlzIGRlcGxveWVkIGFuZCBjYW4gYmUgaW50ZWdyYXRlZCBp bnRvIGV4aXN0aW5nIEVBUCBpbmZyYXN0cnVjdHVyZXMNR29hbHM6IExvd2VyIHNpZ25hbGluZyBv dmVyaGVhZDsgTWluaW1pemUgY29tbXVuaWNhdGlvbiBpbiBob21lIGRldmljZXMNSW50ZWdyYXRl IExvY2FsIERvbWFpbiBOYW1lIERpc2NvdmVyeS4gRGVzY3JpYmVkIHN5c3RlbSBvdmVydmlldyBh bmQgY29tcG9uZW50cywgcmVsYXRpb24gc2lwIGJldHdlZW4gSE9LRVkga2V5IG1hbmFnZW1lbnQg YW5kIEhPS0VZIGF1dGhlbnRpY2F0aW9uLCBhbmQgSE9LRVkgYXV0aG9yaXphdGlvbi4NRGVzY3Jp YmVzIGRlcGxveW1lbnQgc2NlbmFyaW9zOiBIb21lIEhPS0VZIFNlcnZpY2UsIG5vbiByb2FtaW5n IGNhc2UuLCB2aXNpdGVkIEhPS0VZIFNlcnZpY2UsIEh5YnJpZCBTZXJ2aWNlDVF1ZXN0aW9uIG9u IHRoZSBkZXBsb3ltZW50IHNjZW5hcmlvLCBoeWJyaWQgY2FzZSwgd2hlbiB5b3UgaGFuZCBvZmYg YmV0d2VlbiB0aGUgZG9tYWlucyBjYW4geW91IHVzZSBFUlA/IENhbiwgbm90IHJlY29tbWVuZGVk LCBpc3N1ZSBpcyBhdXRob3JpemF0aW9uLiBBbHNvIG9mIGRpc2NvdmVyeSBvZiBFUiBzZXJ2ZXIu IA1EaXZpZGUgdXNlIGNhc2UgaW50byB0d28sIFNhbWUgb3IgZGlmZmVyZW50IHZpc2l0ZWQgbmV0 d29yayCWIGludGVyIG9yIGludHJhIGRvbWFpbi4gQ291bGQgYmUgYm90aCB2aXNpdGVkLCBidXQg aW4gdmFyeWluZyBkb21haW5zLg1Db25jbHVzaW9uIJYgUmVxdWVzdCB0byBhY2NlcHQgdGhlIGRy YWZ0IGFzIGEgV0cgaXRlbS4gQ2hhaXIgYXNrcyBmb3IgZ3JvdXCScyBpbnB1dCBvbiBvcGVuIGlz c3VlcywgZW5jb3VyYWdlIHJldmlldyBvZiB0aGUgZHJhZnQsIGFuZCBlYXJseSBmZWVkYmFjay4N SXMgdGhlcmUgaW50ZXJlc3QgaW4gdGhlIGRyYWZ0cyCWIFdobyBoYXMgcmVhZCB0aGUgZHJhZnQg liBhIGZldyBoYW5kcyBhcmUgcmFpc2VkLg1CZWxpZXZlIHdvcmsgaXMgaW1wb3J0YW50OyBzdW1t YXJpemUgdGhlIGNvbXBvbmVudHMgZm9yIHRoZSB1c2VyIGNvbW11bml0eS4NQWRvcHQgYXMgYSBX RyBpdGVtIG5vdywgQ2hhaXIgYXNrcyBmb3IgYSBodW0gliBhZG9wdCwgbm90IGFkb3B0LiBTb21l IGJ1dCBub3QgZGVmaW5pdGl2ZSBsZXZlbC4gV2FpdCBmb3IgYWRvcHRpb24gb2YgdGhlIGNoYXJ0 ZXIgYmVmb3JlIGFkb3B0aW5nIHRoaXMgYXMgYSBXRyBpdGVtLg1TZWNvbmQgcHJlc2VudGF0aW9u IJYgVG9tIFRheWxvcjogQ2FuIGEgTG9jYWwgRVJQIFNlcnZlciBiZSBzZXBhcmF0ZWQgZnJvbSBh IERpYW1ldGVyIFByb3h5Pw1PcGVuIFF1ZXN0aW9uczogYWRkaXRpb25hbCBhcmNoaXRlY3R1cmUg Z29hbHMsIGxvY2FsIERvbWFpbiBOYW1lIERpc2NvdmVyeSwgRVJQIGNhcGFiaWxpdHkgZGlzY292 ZXJ5Lg1EaXNjdXNzaW9uIGluIERJTUUgYWJvdXQgRVJQIGFwcGxpY2F0aW9ucy4gUmFpc2VkIGEg bnVtYmVyIG9mIGFyY2hpdGVjdHVyYWwgcXVlc3Rpb25zLiANRGVzY3JpYmVzIGNvbXBvbmVudHMN SW5mb3JtYXRpb24gZmxvd3MgcmVxdWlyZWQgZHVyaW5nIGluaXRpYWwgYXV0aGVudGljYXRpb24g cGhhc2UuIEZvbGxvd3MgUkZDIDUyOTYuIEluZm9ybWF0aW9uIGZsb3dzIHJlcXVpcmVkIGR1cmlu ZyByZS1hdXRoZW50aWNhdGlvbiBwaGFzZS4gDVJldmlldyBvZiBwb3NzaWJsZSBzb2x1dGlvbnMu DVF1ZXN0aW9uIJYgR2V0dGluZyBEU1JLOyBMb2NhbCBFUiBzZXJ2ZXIgaGFzIHRvIHJldHJpZXZl IHRoZSBrZXkuIE5lZWQgYSB3YXkgdG8gZ2V0IHRoZSBrZXkuDVVzZSBOQUkgYXMgdGhlIHF1ZXJ5 IGxhdGUsIGhhZCB0aGUgaG9tZSBkb21haW4sIG5lZWQgdG8gaW5kaWNhdGUgdGhlIGxvY2FsIGRv bWFpbi4gS25vd24gYnkgdGhlIGNsaWVudC4gDUFzc3VtZSB0aGF0IGEgc2luZ2xlIEVSIHNlcnZl ciBjYW4gc2VydmUgbXVsdGlwbGUgZG9tYWlucz8gTm8uIENhbiB1c2Ugb25seSBpdHMgb3duIGRv bWFpbi4gRG9lcyBhIHN0cmluZyBtYXRjaCBvbiB0aGUgTkFJLiBwcmVzZW50IGR1cmluZyB0aGUg aW5pdGlhbCBhdXRoZW50aWNhdGlvbi4gDUVSUCwga2V5IG5hbWUsIGRvbpJ0IHVzZSB1c2VyIG5h bWUuIFJlcXVpcmVtZW50IGlzIHRoYXQgaXQgY29tZXMgYmFjayBpbiByZS1hdXRoZW50aWNhdGlv biBzaWduYWxpbmcuIA1JbnRlcmVzdGluZyBhbmFseXNpcy4gQ2FuIEhvbWUgRUFQIHNlcnZlciBi ZSBkZS1jb3JyZWxhdGVkIGZyb20gSE9LRVkgZnVuY3Rpb25zLg1PbiBwYXRoIHByb3Bvc2FsIJYg TG9jYWwgc2VydmVyIGFkdmVydGlzZXMsIHNlY29uZCBhbmQgdGhpcmQgYXJlIG5vdCBvbiBwYXRo IHByb3Bvc2Fscy4gQWxsIGFyZSBmZWFzaWJsZSwgZW5naW5lZXJpbmcgcHJvYmxlbSB0byBzZWxl Y3Qgb25lLiBFQVAgc2VydmVyIGFuZCBEaWFtZXRlciBzZXJ2ZXJzIGNvbGxvY2F0ZWQ/IFNob3Vs ZCBub3QgYmUgYXNzdW1lZC4gQ2F1c2VzIHByb2JsZW1zIHdpdGggRGlhbWV0ZXIgYW5kIHJvdXRp bmcuIFdpdGggUkFESVVTIGhhdmUgdG8gYmUgb24gcGF0aC4gV2l0aCBEaWFtZXRlciwgZG9uknQg aGF2ZSB0byBhc3N1bWUgdGhpcy4gR2FpbiBmbGV4aWJpbGl0eSBpbiBkZXBsb3ltZW50IGFuZCBp bXBsZW1lbnRhdGlvbnMsIGluY2x1ZGluZyBmYXVsdCB0b2xlcmFuY2UuIERvIG5lZWQgdG8gZGlz dGluZ3Vpc2ggYmV0d2VlbiBFUi1EaWFtZXRlciBBZ2VudCBhbmQgTkFTLUVSIFNlcnZlci4gDUxv Y2FsIERvbWFpbiBOYW1lIERpc2NvdmVyeSBmb3IgRVJQIDxkcmFmdC13dS1ob2tleS1sZG4tZGlz Y292ZXJ5LTAwLnR4dD4LUWluIFd1L1RCRCAoMTUgbWludXRlcykNRXhhbXBsZSBvZiBMb2NhbCBE b21haW4gTmFtZQ1Vc2UgREhDUCB0byByZXF1ZXN0IGxvY2FsIGRvbWFpbiBuYW1lOyBkb21haW4g bmFtZSBtdXN0IGJlIGF2YWlsYWJsZSB0byB0aGUgcGVlciBkdXJpbmcgb3IgYWZ0ZXIgdGhlIGZ1 bGwgRUFQIGF1dGhlbnRpY2F0aW9uDURlc2NyaXB0aW9uIG9mIHNjZW5hcmlvIGFzIGV4cGxhaW5l ZCBpbiBSRkM1Mjk2LiANRGVzY3JpcHRpb24gb2YgYWRkaXRpb25hbCBzY2VuYXJpbyBmb3IgcmUt YXV0aGVudGljYXRpb24NU2hvdWxkIHRoaXMgYmUgYWRvcHRlZCBhcyBhIFdHIGl0ZW0/DURpc2N1 c3Npb246IFdHIGNoYWlyIGFza3MgZm9yIGEgaHVtLiBNb2RlcmF0ZSBsZXZlbCBvZiBpbnRlcmVz dC4gVm9sdW50ZWVycyBmb3IgcmV2aWV3aW5nIHRoZSBkb2N1bWVudCCWIDIgdm9sdW50ZWVycy4N RVJQIGV4dGVuc2lvbiBmb3IgRUFQIEVhcmx5IEF1dGhlbnRpY2F0aW9uIFNvbHV0aW9ucyBIdWkg RGVuZyAoMTUgbWludXRlcykNT3ZlcnZpZXcgb2YgY3VycmVudCBkb2N1bWVudCBzb2x1dGlvbnMs IGFuZCB0ZXJtaW5vbG9neQ1PdmVydmlldyBvZiB0aGUgaW5mb3JtYXRpb24gZmxvdw1FQVAgRWFy bHkgQXV0aGVudGljYXRpb24gUHJvdG9jb2wgKEVFUCkgcmUtdXNlcyB0aGUgRVJQIHBhY2tldHMs IHN1bW1hcml6ZXMgdGhlIGV4dGVuc2lvbnMgliBuZXcgZmxhZywgTmV3IFRMVi4gDUxvd2VyIGxh eWVyIHNwZWNpZmljYXRpb25zIG1heSBuZWVkIHRvIGJlIHJldmlzZWQgdG8gc3VwcG9ydCBFRVAu DU5ldyBEaWFtZXRlciBFRVAgYXBwbGljYXRpb24gbWVzc2FnZSBpcyBuZWVkZWQsIHRvIHRyYW5z cG9ydCBFRSBrZXlpbmcgbWF0ZXJpYWxzLg1EaXNjdXNzaW9uIC0gU3RlcCAxIEluZm9ybWF0aW9u IEZsb3cuIFdoeSB3b3VsZCBwZWVyIGRpc2NvdmVyIHRoZSBwb3NzaWJsZSBOQVM/IFVzdWFsbHkg cGVlciBkb2VzbpJ0IGtub3cgb3IgY2FyZSB3aGVyZSBhdXRoZW50aWNhdG9yIGlzIGxvY2F0ZWQu IA1QZWVyIG9ubHkga25vd3MgdGhlIHBoeXNpY2FsIGxpbmsgb2YgdGhlIGJhc2Ugc3RhdGlvbiwg cXVlcnkgdGhlIG5ldHdvcmsgYmVmb3JlIGxpbmsgaXMgZXN0YWJsaXNoZWQuDUN1cnJlbnQgV2lN YXggYXJjaGl0ZWN0dXJlLiBBU04gZ2F0ZXdheXMgc2VydmVzIE4gYmFzZSBzdGF0aW9ucy4gQ2Fu IGhhdmUgYXV0aGVudGljYXRvciBmdW5jdGlvbi4gRmlyc3Qgb25lIGlzIG5vdCB0aGUgYW5jaG9y IGF1dGhlbnRpY2F0b3IuIERvbpJ0IHVuZGVyc3RhbmQgdGhlIENBIGRpc2NvdmVyeS4NQ29uc2lk ZXIgMiBzY2VuYXJpb3MgliBob21vZ2VuZW91cyBzY2VuYXJpbywgZnJvbSBvbmUgdGVjaG5vbG9n eSwgZS5nLiA4MDIuMjEuIA1DQSBkaXNjb3ZlcnkgaXMgcHJlLWhhbmRvdmVyLiANTW9iaWxlIGhh bmRzIG92ZXIgZnJvbSBvbmUgY292ZXJhZ2UgYXJlYSB0byBhbm90aGVyIJYgY29udHJvbCBwbGFu ZS4gT25seSBuZWVkIHRvIGNoZWNrIHdoZW4gY3Jvc3MgYSBib3VuZGFyeS4gDUZvcm1hdCBvZiB0 aGUgbWVzc2FnZSCWIGhvdyB0byBpbmRpY2F0ZSBkaWZmZXJlbnQgc2VydmVyIGRlc3RpbmF0aW9u cy4NVG9rZW4gYmFzZWQgaGFuZG92ZXIga2V5IGRlcml2YXRpb24gZm9yIFJlLWF1dGhlbnRpY2F0 aW9uC1NodSBMaXUgKDE1IG1pbnV0ZXMpDU9iamVjdGl2ZSBpcyB0byBwcm92aWRlIGZyZXNoLCB2 YWxpZCByZS1hdXRoZW50aWNhaXRvbiByb290IGtleSB0byB0aGUgYXV0aGVudGljYXRvciB3aGVu IGludGVyLWF1dGhlbnRpY2F0b3IgaGFuZG92ZXIgd2l0aGluIHRoZSBkYW1lIGxvY2FsIEVSIHNl cnZlciBoYXBwZW5zLg1EZXNjcmlwdGlvbiBvZiB0aGUgcHJvYmxlbQ1TdW1tYXJ5IG9mIHJlcXVp cmVtZW50cyBmb3IgdGhlIHNvbHV0aW9uDVJlLXVzZSBleGlzdGluZyBhdXRoZW50aWNhdGlvbiBj cmVkZW50aWFscywgY2VudHJhbGl6ZWQgbWFuYWdlbWVudCwgYWNjZXNzIGNvbnRyb2wgcHJvdGVj dGlvbi4NU3RyYXctbWFuIHByb3Bvc2FsIJYgYXV0aGVudGljYXRpb24gdG9rZW4uIA1Db21tZW50 IJYgdXNlIG9mIGFuIGluY3JlbWVudGFsIGNvdW50ZXIgd2lsbCBub3QgZXhwb3NlIGluZm9ybWF0 aW9uIHRvIGFuIGF0dGFja2VyLiBCYXNpYyBNQUMgcHJvcGVydHkuIERvbpJ0IGJlbGlldmUgdGhp cyBpcyBhIHByb2JsZW0uDUhvdyBpcyByTVNLIGNvbXByb21pc2VkPyANV2hlbiBwZWVyIG1vdmVz LCBSTVNLIGlzIHRoZSBzYW1lLCBzZXF1ZW5jZSBudW1iZXIgaXMgcmUtdXNlZD8NRG9lc26SdCBt YXR0ZXIuIElmIGhhdmUgYSBzdHJvbmcgUFJGLiANUHJvYmFibHkgbm90IGEgcmVhbCBwcm9ibGVt LiBPbnVzIG9uIHRoZSBhdXRob3JzIHRvIHByb3ZlIHRoYXQgaXQgaXMuIA1IaXN0b3J5IG9uIGtl eSBnZW5lcmF0aW9uIJYgV0lNYXgsIDNHUFAsIEVBUCBkcmFmdCwgSG9rZXkgZHJhZnQuIE9ubHkg b25lIG5vdCBhbGlnbmVkIGlzIHRoZSBIT0tFWSBkcmFmdC4NDU1lZXRpbmcgYWRqb3VybmVkIDVw bSBMb2NhbCB0aW1lLiANAw0NBA0NAw0NBA0NDQ0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgAACAgAAA4IAAAPCAAALwgA ADAIAAA5CAAAQQgAAEYIAABfCAAAZAgAAHEIAABzCAAAdAgAAHoIAAB8CAAAmQgAAJoIAAC7CAAA vwgAAMAIAADGCAAAyAgAAMoIAADLCAAA9QgAAPYIAAD3CAAADAkAAA0JAAASCQAAFgkAAD4JAABA CQAAVgkAALgJAAC8CQAA2QkAANoJAADeCQAA4gkAAPEJAADyCQAAaAoAAGkKAABzCgAAdAoAAHUK AACCCgAAgwoAAPz49Pz4/Pjw+PD4/Pjl2OXN5cW65djlruWcro+u5djl2Ij4gvjw+IL48Ph++IJ+ +IIAAAAGFmhGGosAAAoWaJxYhQAwShEAAAwVaJxYhQAWaJxYhQAAGBVoRhqLABZonFiFADBKEwBt SBMEc0gTBAAjAgiBA2oAAAAABggBFWg+d3sAFmicWIUAVQgBbUgHBHNIBwQXA2oAAAAAFmicWIUA VQgBbUgHBHNIBwQUFWicWIUAFmicWIUAbUgTBHNIEwQADhZoRhqLAG1IEwRzSBMEABQVaEYaiwAW aEYaiwBtSBMEc0gTBAAYFWhGGosAFmicWIUAMEoRAG1IEwRzSBMEABQVaEYaiwAWaJxYhQBtSBME c0gTBAAGFmgjViEAAAYWaNw8jgAABhZonFiFAAAGFmg7BUsAMQAGAAAPCAAAMAgAADEIAABOCAAA dAgAAMAIAAA4CQAAtAkAAAoKAABECgAArwoAAA4LAABzCwAA/QsAADYMAACIDAAAnAwAAJ0MAADR DAAAKQ0AAI0NAADaDQAAYg4AAP0AAAAAAAAAAAAAAAD9AAAAAAAAAAAAAAAA/QAAAAAAAAAAAAAA APgAAAAAAAAAAAAAAADzAAAAAAAAAAAAAAAA7gAAAAAAAAAAAAAAAPMAAAAAAAAAAAAAAADzAAAA AAAAAAAAAAAA7gAAAAAAAAAAAAAAAPMAAAAAAAAAAAAAAADuAAAAAAAAAAAAAAAA6QAAAAAAAAAA AAAAAOkAAAAAAAAAAAAAAADpAAAAAAAAAAAAAAAA8wAAAAAAAAAAAAAAAPMAAAAAAAAAAAAAAADz AAAAAAAAAAAAAAAA+AAAAAAAAAAAAAAAANgAAAAAAAAAAAAAAADYAAAAAAAAAAAAAAAA2AAAAAAA AAAAAAAAANgAAAAAAAAAAAAAAADTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAABQAACiYAC0YDABEAAAomAAtGAgANxgcB0AIBaAEGD4RoAV6EaAFnZEYaiwAABA8AZ2Q7BUsA AAQPAGdkRhqLAAAEDwBnZJxYhQAABAAAZ2RGGosAAAEAAAAXAAYAAMwiAADZIgAA/f0AAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEBAABAQKDCgAAhAoAAJEKAACSCgAAkwoAAK8K AACyCgAAxQoAAMYKAADtCgAA7goAAO8KAAAOCwAAEQsAADQLAAA1CwAAWgsAAFsLAABzCwAAdgsA AK8LAACwCwAA5AsAAOULAAD9CwAAAAwAAB4MAAAfDAAANQwAADYMAAA5DAAAOA0AAFoNAACMDQAA pg0AANkNAADkDQAAQg4AAGIOAABoDgAAaQ4AAM8OAADRDgAASQ8AAFYPAABXDwAAWA8AAHYPAAB4 DwAAnQ8AAKAPAAC0DwAAtg8AAMQPAADFDwAAfBAAAJUQAAAAEQAAAREAADYRAABHEQAAlxEAAJkR AADVEQAA6xEAAPsRAAAFEgAANhIAADcSAAB4EgAAlxIAAJgSAADbEgAA/BIAAP0SAAAXEwAAIBMA ADcTAAA4EwAAnRMAAJ4TAAD1EwAAkBQAAJEUAAC3FAAA2RUAAPoVAABMFgAAUxYAAHAWAAD8+PL8 +O748vjy7vju+O747vju+PL47vju+PLq+O746vj8+Pz47vjq+O746vju+O747vju+O787vzu/O78 7vzu/Or87vzu/O787vzq/O747vzu5u7i6uLq4gAAAAYWaKlZsgAABhZohhWmAAAGFmgfQzAAAAYW aDsFSwAAChZonFiFADBKEQAABhZonFiFAAAGFmhGGosAWWIOAACqDgAAWA8AAMUPAAB9EAAAAREA AJgRAADrEQAANxIAANsSAAA4EwAAnhMAAPYTAAALFAAAmRQAALcUAAAUFQAAfRUAACUWAACMFgAA 3RYAALYYAAAYGQAANRkAALIZAAD3AAAAAAAAAAAAAAAA7wAAAAAAAAAAAAAAAO8AAAAAAAAAAAAA AADvAAAAAAAAAAAAAAAA7wAAAAAAAAAAAAAAAO8AAAAAAAAAAAAAAADvAAAAAAAAAAAAAAAA7wAA AAAAAAAAAAAAAO8AAAAAAAAAAAAAAADnAAAAAAAAAAAAAAAA3wAAAAAAAAAAAAAAAN8AAAAAAAAA AAAAAADfAAAAAAAAAAAAAAAA3wAAAAAAAAAAAAAAAN8AAAAAAAAAAAAAAADfAAAAAAAAAAAAAAAA 3wAAAAAAAAAAAAAAAN8AAAAAAAAAAAAAAADfAAAAAAAAAAAAAAAA3wAAAAAAAAAAAAAAAN8AAAAA AAAAAAAAAADXAAAAAAAAAAAAAAAAzwAAAAAAAAAAAAAAAM8AAAAAAAAAAAAAAAAAAAgAAAomAQtG BwBnZIYVpgAIAAAKJgALRgcAZ2SGFaYACAAACiYBC0YHAGdkOwVLAAgAAAomAAtGBABnZDsFSwAI AAAKJgALRgEAZ2ScWIUACAAACiYAC0YDAGdknFiFAAAYcBYAAHEWAAC7FgAAvBYAALYYAAAXGQAA GBkAADQZAAA1GQAAXRsAAF4bAABhGwAAYhsAAHYbAAB3GwAAhBsAAJwbAADNGwAAzhsAAA8cAAAQ HAAAYhwAAOcdAAAJHgAACh4AAOkeAAAvHwAAMB8AAH8fAAAeIAAAHyAAAGMgAADBIAAAwiAAAPch AACnIgAAqCIAAMwiAADNIgAAzyIAANAiAADSIgAA0yIAANUiAADWIgAA2SIAANoiAAD8+Pz49Pj8 9Pzw7PDs8Ozw7PDs8Ozo5Ojk4OTg3Pzc2NzY1NzUzMjMyMzIzMjUAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYWaFUupwAADwNqAAAAABZoVS6nAFUI AQYWaFs92gAABhZoRR6xAAAGFmjgCPgAAAYWaCxw9AAABhZo7Gx2AAAGFmhhXR4AAAYWaNcl2gAA BhZoY2kRAAAGFmiGFaYAAAYWaKlZsgAABhZoRxEiAC6yGQAA5BkAAB0aAABCGgAAuRoAAAQbAAA8 GwAAXRsAAM4bAAAQHAAAYhwAAPUcAABaHQAACh4AAFoeAAB5HgAA6R4AADAfAAB/HwAAHyAAADog AABjIAAAwiAAAO4gAAB3IQAAkSEAANAhAAD3AAAAAAAAAAAAAAAA9wAAAAAAAAAAAAAAAPcAAAAA AAAAAAAAAAD3AAAAAAAAAAAAAAAA7wAAAAAAAAAAAAAAAOcAAAAAAAAAAAAAAADnAAAAAAAAAAAA AAAA5wAAAAAAAAAAAAAAAOcAAAAAAAAAAAAAAADnAAAAAAAAAAAAAAAA5wAAAAAAAAAAAAAAAOcA AAAAAAAAAAAAAADnAAAAAAAAAAAAAAAA5wAAAAAAAAAAAAAAAOcAAAAAAAAAAAAAAADnAAAAAAAA AAAAAAAA5wAAAAAAAAAAAAAAAN8AAAAAAAAAAAAAAADnAAAAAAAAAAAAAAAA5wAAAAAAAAAAAAAA AOcAAAAAAAAAAAAAAADnAAAAAAAAAAAAAAAA5wAAAAAAAAAAAAAAAOcAAAAAAAAAAAAAAADnAAAA AAAAAAAAAAAA5wAAAAAAAAAAAAAAAAgAAAomAAtGBwBnZCxw9AAIAAAKJgELRgcAZ2RHESIACAAA CiYAC0YHAGdkRxEiAAgAAAomAQtGBwBnZIYVpgAAGtAhAAD3IQAAPiIAAKgiAACpIgAAzCIAAM4i AADPIgAA0SIAANIiAADUIgAA1SIAANciAADYIgAA2SIAANoiAAD3AAAAAAAAAAAAAAAA9wAAAAAA AAAAAAAAAPcAAAAAAAAAAAAAAADyAAAAAAAAAAAAAAAA8gAAAAAAAAAAAAAAAPAAAAAAAAAAAAAA AADwAAAAAAAAAAAAAAAA8AAAAAAAAAAAAAAAAPAAAAAAAAAAAAAAAADwAAAAAAAAAAAAAAAA8AAA AAAAAAAAAAAAAPAAAAAAAAAAAAAAAADwAAAAAAAAAAAAAAAA8AAAAAAAAAAAAAAAAPIAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB AAAABAAAZ2RbPdoACAAACiYBC0YHAGdkRxEiAAAPLAAxkGgBH7DQLyCw4D0hsAgHIrAIByOQoAUk kKAFJbAAABew0AIYsNACDJDQAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADzAAAARAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQyep5+brOEYyCAKoAS6kL AgAAABcAAAAWAAAAaABvAGsAZQB5AEAAagBhAGIAYgBlAHIALgBpAGUAdABmAC4AbwByAGcAAADg yep5+brOEYyCAKoAS6kLUgAAAG0AYQBpAGwAdABvADoAaABvAGsAZQB5AEAAagBhAGIAYgBlAHIA LgBpAGUAdABmAC4AbwByAGcAAAB5WIH0Ox1/SK8sgl3EhSdjAAAAAKWrAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAhgIWABIAAQCcAA8ABAAAAAMAAAAAAAQAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAARAAAQPH/AgBEAAwEAAAA AAAAAAAGAE4AbwByAG0AYQBsAAAAAgAAABwAQ0oYAF9IAQRhShgAbUgJBG5IEQRzSAkEdEgRBAAA AAAAAAAAAAAAAAAAAAAAAEQAQUDy/6EARAAMBQAAAAAAAAAAFgBEAGUAZgBhAHUAbAB0ACAAUABh AHIAYQBnAHIAYQBwAGgAIABGAG8AbgB0AAAAAABSAGlA8/+zAFIADAUAAAAAAAAAAAwAVABhAGIA bABlACAATgBvAHIAbQBhAGwAAAAcABf2AwAANNYGAAEKA2wANNYGAAEFAwAAYfYDAAACAAsAAAAo AGtA9P/BACgAAAUAAAAAAAAAAAcATgBvACAATABpAHMAdAAAAAIAAAAAAAAALgD+bwEA8gAuAAwA AACcWIUAAAACAHAAMQAAABAADwATpGQAFKRkAFskAVwkAQAALgD+bwEAAgEuAAwAAACcWIUAAAAC AHAAMgAAABAAEAATpGQAFKRkAFskAVwkAQAAQgD+b6IAEQFCAAwAAACcWIUAAAAVAGEAcABwAGwA ZQAtAGMAbwBuAHYAZQByAHQAZQBkAC0AcwBwAGEAYwBlAAAAAAAuAP5vAQAiAS4ADAAAAJxYhQAA AAIAcAAzAAAAEAASABOkZAAUpGQAWyQBXCQBAAA2AFVAogAxATYADAQAAJxYhQAAAAkASAB5AHAA ZQByAGwAaQBuAGsAAAAMAD4qAUIqAnBoAAD/ADQAH0ABAEIBNAAMBAAAI1YhAAAABgBIAGUAYQBk AGUAcgAAAA0AFAANxggAAuAQwCEBAgAAADQAIEABAFIBNAAMBAAAI1YhAAAABgBGAG8AbwB0AGUA cgAAAA0AFQANxggAAuAQwCEBAgAAAAAAAADaGgAADwAANAAADQD/////AAAAAA8AAAAwAAAAMQAA AE4AAAB0AAAAwAAAADgBAAC0AQAACgIAAEQCAACvAgAADgMAAHMDAAD9AwAANgQAAIgEAACcBAAA nQQAANEEAAApBQAAjQUAANoFAABiBgAAqgYAAFgHAADFBwAAfQgAAAEJAACYCQAA6wkAADcKAADb CgAAOAsAAJ4LAAD2CwAACwwAAJkMAAC3DAAAFA0AAH0NAAAlDgAAjA4AAN0OAAC2EAAAGBEAADUR AACyEQAA5BEAAB0SAABCEgAAuRIAAAQTAAA8EwAAXRMAAM4TAAAQFAAAYhQAAPUUAABaFQAAChYA AFoWAAB5FgAA6RYAADAXAAB/FwAAHxgAADoYAABjGAAAwhgAAO4YAAB3GQAAkRkAANAZAAD3GQAA PhoAAKgaAACpGgAAzBoAAM4aAADPGgAA0RoAANIaAADUGgAA1RoAANcaAADYGgAA2xoAAJgAAAAA MAAAAAAAAACAAAAAgAAAAAAAAAAAAACYAAAAADAAAAAAAAAAgAAAAIAAAAAAAAAAAAAAmAAAAAAw AAAAAAAAAIAAAACAAAAAAAAAAAAAAJgAAAAAMAAAAAAAAACAAAAAgAAAAAAAAAAAAACYAAAADzAA AAAAAAAAgAAAAIAAAAAAAAAAAAAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAAAAAJgAAAAPMAAA AAAAAACAAAAAgAAAAAAAAAAAAACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAAAAAmAAAAA8wAAAA AAAAAIAAAACAAAAAAAAAAAAAAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAAACYAAAADzAAAAAA AAAAgAAAAIAAAAAAAAAAAAAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAAAAAJgAAAAPMAAAAAAA AACAAAAAgAAAAAAAAAAAAACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAAAAAmAAAAA8wAAAAAAAA AIAAAACAAAAAAAAAAAAAAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAAACYAAAADzAAAAAAAAAA gAAAAIAAAAAAAAAAAAAAmAAAAAAwAAAAAAAAAIAAAACAAAAAAAAAAAAAAJgAAiAAMAAAAAAAAACA AAAAgAAAAAAAAAAAAACYAAIgADABAAAAAAAAgAAAAIAAAAAAAAAAAAAAmAACIAAwAgAAAAAAAIAA AACAAAAAAAAAAAAAAJgAAiAAMAMAAAAAAACAAAAAgAAAAAAAAAAAAACYAAMgADAAAAAAAAAAgAAA AIAAAAAAAAAAAAAAmAADIAAwAQAAAAAAAIAAAACAAAAAAAAAAAAAAJgAASAAMAAAAAAAAACAAAAA gAAAAAAAAAAAAACYAAEgADABAAAAAAAAgAAAAIAAAAAAAAAAAAAAmAABIAAwAgAAAAAAAIAAAACA AAAAAAAAAAAAAJgAASAAMAMAAAAAAACAAAAAgAAAAAAAAAAAAACYAAEgADAEAAAAAAAAgAAAAIAA AAAAAAAAAAAAmAABIAAwBQAAAAAAAIAAAACAAAAAAAAAAAAAAJgAASAAMAYAAAAAAACAAAAAgAAA AAAAAAAAAACYAAEgADAHAAAAAAAAgAAAAIAAAAAAAAAAAAAAmAAEIAAwAAAAAAAAAIAAAACAAAAA AAAAAAAAAJgBByAAMAAAAAAAAACAAAAAgAAAAAAAAAAAAACYAQcgADABAAAAAAAAgAAAAIAAAAAA AAAAAAAAmAEHIAAwAgAAAAAAAIAAAACAAAAAAAAAAAAAAJgBByAAMAMAAAAAAACAAAAAgAAAAAAA AAAAAACYAQcgADAEAAAAAAAAgAAAAIAAAAAAAAAAAAAAmAEHIAAwBQAAAAAAAIAAAACAAAAAAAAA AAAAAJgBByAAMAYAAAAAAACAAAAAgAAAAAAAAAAAAACYAQcgADAHAAAAAAAAgAAAAIAAAAAAAAAA AAAAmAEHIAAwCAAAAAAAAIAAAACAAAAAAAAAAAAAAJgBByAAMAkAAAAAAACAAAAAgAAAAAAAAAAA AACYAQcgADAKAAAAAAAAgAAAAIAAAAAAAAAAAAAAmAAHIAAwAQAAAAAAAIAAAACAAAAAAAAAAAAA AJgBByAAMAAAAAC2EAAAAAAAgAAAAAAAAAAAAACYAQcgADABAAAAthAAAAAAAIAAAAAAAAAAAAAA mAEHIAAwAgAAALYQAAAAAACAAAAAAAAAAAAAAJgBByAAMAMAAAC2EAAAAAAAgAAAAAAAAAAAAACY AQcgADAEAAAAthAAAAAAAIAAAAAAAAAAAAAAmAEHIAAwBQAAALYQAAAAAACAAAAAAAAAAAAAAJgA ByAAMAIAAAAAAACAAAAAgAAAAAAAAAAAAACYAQcgADAAAAAAuRIAAAAAAIAAAAAAAAAAAAAAmAEH IAAwAQAAALkSAAAAAACAAAAAAAAAAAAAAJgBByAAMAIAAAC5EgAAAAAAgAAAAAAAAAAAAACYAQcg ADADAAAAuRIAAAAAAIAAAAAAAAAAAAAAmAEHIAAwBAAAALkSAAAAAACAAAAAAAAAAAAAAJgBByAA MAUAAAC5EgAAAAAAgAAAAAAAAAAAAACYAQcgADAGAAAAuRIAAAAAAIAAAAAAAAAAAAAAmAEHIAAw BwAAALkSAAAAAACAAAAAAAAAAAAAAJgBByAAMAgAAAC5EgAAAAAAgAAAAAAAAAAAAACYAQcgADAJ AAAAuRIAAAAAAIAAAAAAAAAAAAAAmAEHIAAwCgAAALkSAAAAAACAAAAAAAAAAAAAAJgBByAAMAsA AAC5EgAAAAAAgAAAAAAAAAAAAACYAAcgADADAAAAAAAAgAAAAIAAAAAAAAAAAAAAmAEHIAAwAAAA AI0XAAAAAACAAAAAAAAAAAAAAJgBByAAMAEAAACNFwAAAAAAgAAAAAAAAAAAAACYAQcgADACAAAA jRcAAAAAAIAAAAAAAAAAAAAAmAEHIAAwAAAAAAAAAIAAAACAAAAAAAAAAAAAAJgBByAAMAAAAAAA AACAAAAAgAAAAAAAAAAAAACYAQcgADAAAAAAAAAAgAAAAIAAAAAAAAAAAAAAmAEHIAAwAAAAAAAA AIAAAACAAAAAAAAAAAAAAJgBByAAMAAAAAAAAACAAAAAgAAAAAAAAAAAAACYAQcgADAAAAAAAAAA gAAAAIAAAAAAAAAAAAAAmAEHIAAwAAAAAAAAAIAAAACAAAAAAAAAAAAAAJgBByAAMAAAAAAAAACA AAAAgAAAAAAAAAAAAACYAAAAADAAAAAAAAAAgAAAAIAAAAAAAAAAAAAAmAAAAAAwAAAAAAAAAIAA AACAAAAAAAAAAAAAAIjRADAAMAAAAAAAAAIAAAABAAAAAAAAAAAASAeIkQAwADAAAAAAAAABAAAA AAAAAAAAAAAAAK4HiNEAMAEwAAAAAAAAAgAAAAEAAAAAAAAAAABIB4iRADAAMAAAAAAAAAEAAAAA AAAAAAAAAAAArgeI0QAwAjAAAAAAAAACAAAAAQAAAAAAAAAAAEgHiJEAMAAwAAAAAAAAAQAAAAAA AAAAAAAAAACuB4jRADADMAAAAAAAAAIAAAABAAAAAAAAAAAASAeIkQAwADAAAAAAAAABAAAAAAAA AAAAAAAAAK4HiJEAMAAwAAAAAAAAAQAAAAAAAAAAAAAAPBuuBwAAAAAPAAAAMAAAADEAAABOAAAA dAAAAMAAAAA4AQAAtAEAAAoCAABEAgAArwIAAA4DAABzAwAA/QMAADYEAACIBAAAnAQAAJ0EAADR BAAAKQUAAI0FAADaBQAAYgYAAKoGAABYBwAAxQcAAH0IAAABCQAAmAkAAOsJAAA3CgAA2woAADgL AACeCwAA9gsAAAsMAACZDAAAtwwAABQNAAB9DQAAJQ4AAIwOAADdDgAAthAAABgRAAA1EQAAshEA AOQRAAAdEgAAQhIAALkSAAAEEwAAPBMAAF0TAADOEwAAEBQAAGIUAAD1FAAAWhUAAAoWAABaFgAA eRYAAOkWAAAwFwAAfxcAANsaAACYAAAAADAAAAAAAAAAgAAAAIAAAAAAAAAAAIAAmAAAAAAwAAAA AAAAAIAAAACAAAAAAAAAAACAAJgAAAAAMAAAAAAAAACAAAAAgAAAAAAAAAAAgACaAAAAADAAAAAA AAAAgAAAAIAAAAAAAAAAAIAHmgAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAACAB5gAAAAPMAAAAAAA AACAAAAAgAAAAAAAAAAAgACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAAIAAmAAAAA8wAAAAAAAA AIAAAACAAAAAAAAAAACAAJoAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAgAeYAAAADzAAAAAAAAAA gAAAAIAAAAAAAAAAAIAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAACAAJgAAAAPMAAAAAAAAACA AAAAgAAAAAAAAAAAgACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAAIAAmAAAAA8wAAAAAAAAAIAA AACAAAAAAAAAAACAAJoAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAgAeYAAAADzAAAAAAAAAAgAAA AIAAAAAAAAAAAIAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAACAAJgAAAAAMAAAAAAAAACAAAAA gAAAAAAAAAAAAACYAAIgADAAAAAAAAAAgAAAAIAAAAAAAAAAAIAAmAACIAAwAQAAAAAAAIAAAACA AAAAAAAAAACAAJoAAiAAMAIAAAAAAACAAAAAgAAAAAAAAAAAgAeYAAIgADADAAAAAAAAgAAAAIAA AAAAAAAAAIAAmgADIAAwAQAAAAAAAIAAAACAAAAAAAAAAACAB5oAAyAAMAIAAAAAAACAAAAAgAAA AAAAAAAAgAeaAAEgADAAAAAAAAAAgAAAAIAAAAAAAAAAAIAHmAABIAAwAQAAAAAAAIAAAACAAAAA AAAAAACAAJoAASAAMAIAAAAAAACAAAAAgAAAAAAAAAAAgAeYAAEgADADAAAAAAAAgAAAAIAAAAAA AAAAAIAAmAABIAAwBAAAAAAAAIAAAACAAAAAAAAAAACAAJgAASAAMAUAAAAAAACAAAAAgAAAAAAA AAAAgACaAAEgADAGAAAAAAAAgAAAAIAAAAAAAAAAAIAHmAABIAAwBwAAAAAAAIAAAACAAAAAAAAA AACAAJoABCAAMAAAAAAAAACAAAAAgAAAAAAAAAAAgAeYAQcgADAAAAAAAAAAgAAAAIAAAAAAAAAA AIAAmAEHIAAwAQAAAAAAAIAAAACAAAAAAAAAAACAAJgBByAAMAIAAAAAAACAAAAAgAAAAAAAAAAA gACYAQcgADADAAAAAAAAgAAAAIAAAAAAAAAAAIAAmAEHIAAwBAAAAAAAAIAAAACAAAAAAAAAAACA AJgBByAAMAUAAAAAAACAAAAAgAAAAAAAAAAAgACYAQcgADAGAAAAAAAAgAAAAIAAAAAAAAAAAIAA mgEHIAAwBwAAAAAAAIAAAACAAAAAAAAAAACAB5oBByAAMAgAAAAAAACAAAAAgAAAAAAAAAAAgAeY AQcgADAJAAAAAAAAgAAAAIAAAAAAAAAAAIAAmAEHIAAwCgAAAAAAAIAAAACAAAAAAAAAAAAAAJgA ByAAMAEAAAAAAACAAAAAgAAAAAAAAAAAgACYAQcgADAAAAAAExEAAAAAAIAAAAAAAAAAAIAAmAEH IAAwAQAAABMRAAAAAACAAAAAAAAAAACAAJgBByAAMAIAAAATEQAAAAAAgAAAAAAAAAAAgACYAQcg ADADAAAAExEAAAAAAIAAAAAAAAAAAIAAmAEHIAAwBAAAABMRAAAAAACAAAAAAAAAAACAAJgBByAA MAUAAAATEQAAAAAAgAAAAAAAAAAAAACYAAcgADACAAAAAAAAgAAAAIAAAAAAAAAAAIAAmAEHIAAw AAAAABYTAAAAAACAAAAAAAAAAACAAJgBByAAMAEAAAAWEwAAAAAAgAAAAAAAAAAAgACYAQcgADAC AAAAFhMAAAAAAIAAAAAAAAAAAIAAmAEHIAAwAwAAABYTAAAAAACAAAAAAAAAAACAAJgBByAAMAQA AAAWEwAAAAAAgAAAAAAAAAAAgACYAQcgADAFAAAAFhMAAAAAAIAAAAAAAAAAAIAAmAEHIAAwBgAA ABYTAAAAAACAAAAAAAAAAACAAJgBByAAMAcAAAAWEwAAAAAAgAAAAAAAAAAAgACYAQcgADAIAAAA FhMAAAAAAIAAAAAAAAAAAIAAmAEHIAAwCQAAABYTAAAAAACAAAAAAAAAAACAAJgBByAAMAoAAAAW EwAAAAAAgAAAAAAAAAAAgACYAQcgADALAAAAFhMAAAAAAIAAAAAAAAAAAAAAmAAHIAAwAwAAAAAA AIAAAACAAAAAAAAAAAAAAAoAAAAAMAAAAAAAAAAAAAAAAAYwSwQAAAAAAAcAAAAAAwAAAAYAAAAG AAAACQAAAAwAAAAMAAAADAAAAAwAAAAMAAAADAAAAAwAAAAMAAAADwAAAAAGAACDCgAAcBYAANoi AAASAAAAFQAAABcAAAAABgAAYg4AALIZAADQIQAA2iIAABMAAAAWAAAAGAAAABkAAAAABgAA2SIA ABQAAADKAAAA9gAAAAwBAADaGgAAE1gU/xWADwAA8DgAAAAAAAbwGAAAAAIIAAACAAAAAQAAAAEA AAABAAAAAgAAAEAAHvEQAAAA//8AAAAA/wCAgIAA9wAAEAAPAALwkgAAABAACPAIAAAAAQAAAAEE AAAPAAPwMAAAAA8ABPAoAAAAAQAJ8BAAAAAAAAAAAAAAAAAAAAAAAAAAAgAK8AgAAAAABAAABQAA AA8ABPBCAAAAEgAK8AgAAAABBAAAAA4AAFMAC/AeAAAAvwEAABAAywEAAAAA/wEAAAgABAMJAAAA PwMBAAEAAAAR8AQAAAABAAAA//8HAAAABgChk1wAEAABAHRqDw8GAKKTXAAIAAIAtGkPDwYAo5Nc ABAAAQA0ag8PBgCkk1wAEQABADRpDw8GAKWTXAARAAEANGgPDwYAppNcABAAAQC0ag8PBgCnk1wA EQABAPRoDw8gAAAAfgAAAGkBAABpAQAAdAEAAHkWAAB5FgAA2xoAAAAAAAABAAEAAAABAAMAAAAC AAIAAAACAAQAAAACAAUAAAACAAYAAAACACUAAACHAAAAcgEAAHkBAAB5AQAAfxYAAH8WAADbGgAA AAAAAAEAAAADAAEAAgAAAAQAAAAFAAAABgAAAAQAAABCAAAAAwAAACqAdXJuOnNjaGVtYXMtbWlj cm9zb2Z0LWNvbTpvZmZpY2U6c21hcnR0YWdzDoBjb3VudHJ5LXJlZ2lvbgCAOAAAAAQAAAAqgHVy bjpzY2hlbWFzLW1pY3Jvc29mdC1jb206b2ZmaWNlOnNtYXJ0dGFncwSAQ2l0eQCAOQAAAAcAAAAq gHVybjpzY2hlbWFzLW1pY3Jvc29mdC1jb206b2ZmaWNlOnNtYXJ0dGFncwWAcGxhY2UAgD4AAAAG AAAAKoB1cm46c2NoZW1hcy1taWNyb3NvZnQtY29tOm9mZmljZTpzbWFydHRhZ3MKgFBlcnNvbk5h bWUAgAwAAAEEQxARAAAAAAcAAAAAAAYAAAAAAAcAAAAAAAQAAAAAAAMAAAAAAAcAAAAAAAQAAAAA AAAAAAB0AAAAegAAAH4AAACZAAAAmgAAALsAAAC8AAAAvwAAAMAAAADGAAAA9wAAAAwBAAAOAQAA EgEAABgBAAA3AQAAOAEAAD4BAAD8AQAABAIAAE4CAABbAgAAaQIAAHMCAADvAgAA+AIAAPkCAAAA AwAAIAQAACMEAABkBAAAcgQAAHMEAAB2BAAAuwUAAMQFAADFBQAAzAUAAO4SAADxEgAAYhUAAGcV AABqFwAAbRcAAKcXAAC1FwAAfhkAAIIZAABaGgAAXxoAAMwaAADMGgAAzhoAAM4aAADPGgAAzxoA ANEaAADSGgAA1BoAANUaAADXGgAA2BoAANsaAAAHAAUABwAFAAcABQAHAAUABwAFAAcABQAHAAUA BwAFAAcABQAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAH ABwABwAcAAcAHAAHABwABwAEAAcABAACAAQABwAEAAcABAAHAAQAAgAAAAAAdAAAAL8AAADAAAAA NwEAADgBAACzAQAAZwIAAGgCAAC4AgAAxwIAAJcIAACbCAAAyQ0AANANAAD0DQAA+A0AAPkNAAAA DgAA0g4AANwOAAAjFQAAKxUAAHYVAACJFQAApxgAAK0YAAByGgAAdxoAAMwaAADMGgAAzhoAAM4a AADPGgAAzxoAANEaAADSGgAA1BoAANUaAADXGgAA2BoAANsaAAAHAAUABwAFAAcABQAHADMABwAz AAcAMwAHADMABwAzAAcAMwAHADMABwAzAAcAMwAHADMABwAzAAcABAAHAAQAAgAEAAcABAAHAAQA BwAEAAIAAAAAAP0DAAA2BAAA9gsAAAsMAABdDAAAtgwAAPkMAAAUDQAAZw0AAH0NAAAYEQAANREA ADwTAABcEwAA5xUAAAoWAAC+FgAA6BYAAB8YAAA5GAAAQhkAAJAZAAB/GgAAqBoAAKkaAADLGgAA zBoAAMwaAADOGgAAzhoAAM8aAADPGgAA0RoAANIaAADUGgAA1RoAANcaAADYGgAA2xoAAAcABQAH AAUABwAFAAcABQAHAAUABwAFAAcABQAHAAUABwAFAAcABQAHAAUABwAFAAcABQAHAAQABwAEAAIA BAAHAAQABwAEAAcABAACAAAAAADMGgAAzBoAAM4aAADOGgAAzxoAAM8aAADRGgAA0hoAANQaAADV GgAA1xoAANgaAADbGgAABwAEAAcABAACAAQABwAEAAcABAAHAAQAAgAHAJ8ozAGMl3Zy/w//D/8P /w//D/8P/w//D/8PEABuIoYIuBSk7P8P/w//D/8P/w//D/8P/w//DwAAc20IIdbDwDD/D/8P/w// D/8P/w//D/8P/w8QAFturi8ua4zD/w//D/8P/w//D/8P/w//D/8PEAAFO68x6hs26/8P/w//D/8P /w//D/8P/w//DxAA+VBiRzyWlAP/D/8P/w//D/8P/w//D/8P/w8AAFkiimk8lpQD/w//D/8P/w// D/8P/w//D/8PEAAAAAAAFwAAAAAAAAAAAAAAAAAAAAAAAAATGAAAD4TQAhGEmP4VxgUAAdACBl6E 0AJghJj+T0oAAFBKAwBRSgAAXkoAAG8oAAEALQABAAAAF4AAAAAAAAAAAAAAAAAAAAAAAAAZGAAA D4SgBRGEmP4VxgUAAaAFBl6EoAVghJj+T0oEAFFKBABeSgQAbygAh2gAAAAAiEgAAAEAbwABAAAA F4AAAAAAAAAAAAAAAAAAAAAAAAAVGAAAD4RwCBGEmP4VxgUAAXAIBl6EcAhghJj+T0oFAFFKBQBv KACHaAAAAACISAAAAQCn8AEAAAAXgAAAAAAAAAAAAAAAAAAAAAAAABUYAAAPhEALEYSY/hXGBQAB QAsGXoRAC2CEmP5PSgEAUUoBAG8oAIdoAAAAAIhIAAABALfwAQAAABeAAAAAAAAAAAAAAAAAAAAA AAAAGRgAAA+EEA4RhJj+FcYFAAEQDgZehBAOYISY/k9KBABRSgQAXkoEAG8oAIdoAAAAAIhIAAAB AG8AAQAAABeAAAAAAAAAAAAAAAAAAAAAAAAAFRgAAA+E4BARhJj+FcYFAAHgEAZehOAQYISY/k9K BQBRSgUAbygAh2gAAAAAiEgAAAEAp/ABAAAAF4AAAAAAAAAAAAAAAAAAAAAAAAAVGAAAD4SwExGE mP4VxgUAAbATBl6EsBNghJj+T0oBAFFKAQBvKACHaAAAAACISAAAAQC38AEAAAAXgAAAAAAAAAAA AAAAAAAAAAAAABkYAAAPhIAWEYSY/hXGBQABgBYGXoSAFmCEmP5PSgQAUUoEAF5KBABvKACHaAAA AACISAAAAQBvAAEAAAAXgAAAAAAAAAAAAAAAAAAAAAAAABUYAAAPhFAZEYSY/hXGBQABUBkGXoRQ GWCEmP5PSgUAUUoFAG8oAIdoAAAAAIhIAAABAKfwAQAAAAAAAQAAAAAAAAAAAGgBAAAAAAAADRgA AA+EaAERhJj+FcYFAAFoAQZehGgBYISY/m8oAIdoAAAAAIhIAAACAAAALgABAAAAFwAAAAAAAAAA AAAAAAAAAAAAAAAZGAAAD4Q4BBGEmP4VxgUAATgEBl6EOARghJj+T0oEAFFKBABeSgQAbygAh2gA AAAAiEgAAAEAbwABAAAAFwAAAAAAAAAAAAAAAAAAAAAAAAAVGAAAD4QIBxGEmP4VxgUAAQgHBl6E CAdghJj+T0oFAFFKBQBvKACHaAAAAACISAAAAQCn8AEAAAAXAAAAAAAAAAAAAAAAAAAAAAAAABUY AAAPhNgJEYSY/hXGBQAB2AkGXoTYCWCEmP5PSgEAUUoBAG8oAIdoAAAAAIhIAAABALfwAQAAABcA AAAAAAAAAAAAAAAAAAAAAAAAGRgAAA+EqAwRhJj+FcYFAAGoDAZehKgMYISY/k9KBABRSgQAXkoE AG8oAIdoAAAAAIhIAAABAG8AAQAAABcAAAAAAAAAAAAAAAAAAAAAAAAAFRgAAA+EeA8RhJj+FcYF AAF4DwZehHgPYISY/k9KBQBRSgUAbygAh2gAAAAAiEgAAAEAp/ABAAAAFwAAAAAAAAAAAAAAAAAA AAAAAAAVGAAAD4RIEhGEmP4VxgUAAUgSBl6ESBJghJj+T0oBAFFKAQBvKACHaAAAAACISAAAAQC3 8AEAAAAXAAAAAAAAAAAAAAAAAAAAAAAAABkYAAAPhBgVEYSY/hXGBQABGBUGXoQYFWCEmP5PSgQA UUoEAF5KBABvKACHaAAAAACISAAAAQBvAAEAAAAXAAAAAAAAAAAAAAAAAAAAAAAAABUYAAAPhOgX EYSY/hXGBQAB6BcGXoToF2CEmP5PSgUAUUoFAG8oAIdoAAAAAIhIAAABAKfwAQAAAAAAAQAAAAAA AAAAAAAAAAAAAAAAAxgAAA+E0AIRhJj+FcYFAAHQAgZehNACYISY/m8oAAIAAAAuAAMAAAAXAAAA AAAAAAAAAABoAQAAAAAAAB0YAAAPhKAFEYSY/hXGBQABoAUGXoSgBWCEmP5PSgAAUEoDAFFKAABe SgAAbygAh2gAAAAAiEgAAAEALQABAAAAAoIBAAAAAAAAAAAAAAAAAAAAAAAKGAAAD4RwCBGETP8V xgUAAXAIBl6EcAhghEz/h2gAAAAAiEgAAAIAAgAuAAEAAAAAgAEAAAAAAAAAAAAAAAAAAAAAAAoY AAAPhEALEYSY/hXGBQABQAsGXoRAC2CEmP6HaAAAAACISAAAAgADAC4AAQAAAASAAQAAAAAAAAAA AAAAAAAAAAAAChgAAA+EEA4RhJj+FcYFAAEQDgZehBAOYISY/odoAAAAAIhIAAACAAQALgABAAAA AoIBAAAAAAAAAAAAAAAAAAAAAAAKGAAAD4TgEBGETP8VxgUAAeAQBl6E4BBghEz/h2gAAAAAiEgA AAIABQAuAAEAAAAAgAEAAAAAAAAAAAAAAAAAAAAAAAoYAAAPhLATEYSY/hXGBQABsBMGXoSwE2CE mP6HaAAAAACISAAAAgAGAC4AAQAAAASAAQAAAAAAAAAAAAAAAAAAAAAAChgAAA+EgBYRhJj+FcYF AAGAFgZehIAWYISY/odoAAAAAIhIAAACAAcALgABAAAAAoIBAAAAAAAAAAAAAAAAAAAAAAAKGAAA D4RQGRGETP8VxgUAAVAZBl6EUBlghEz/h2gAAAAAiEgAAAIACAAuAAUAAAAAAAEAAAAAAAAAAAAA AAAAAAAAAA0YAAAPhGgBEYSY/hXGBQABaAEGXoRoAWCEmP5vKACHaAAAAACISAAAAgAAAC4AAAAA ABcAAAAAAAAAAAAAAGgBAAAAAAAAHRgAAA+EOAQRhJj+FcYFAAE4BAZehDgEYISY/k9KAABQSgYA UUoAAF5KAABvKACHaAAAAACISAAAAQAtAAEAAAAXgAAAAAAAAAAAAAAAAAAAAAAAABUYAAAPhAgH EYSY/hXGBQABCAcGXoQIB2CEmP5PSgUAUUoFAG8oAIdoAAAAAIhIAAABAKfwAQAAABeAAAAAAAAA AAAAAAAAAAAAAAAAFRgAAA+E2AkRhJj+FcYFAAHYCQZehNgJYISY/k9KAQBRSgEAbygAh2gAAAAA iEgAAAEAt/ABAAAAF4AAAAAAAAAAAAAAAAAAAAAAAAAZGAAAD4SoDBGEmP4VxgUAAagMBl6EqAxg hJj+T0oEAFFKBABeSgQAbygAh2gAAAAAiEgAAAEAbwABAAAAF4AAAAAAAAAAAAAAAAAAAAAAAAAV GAAAD4R4DxGEmP4VxgUAAXgPBl6EeA9ghJj+T0oFAFFKBQBvKACHaAAAAACISAAAAQCn8AEAAAAX gAAAAAAAAAAAAAAAAAAAAAAAABUYAAAPhEgSEYSY/hXGBQABSBIGXoRIEmCEmP5PSgEAUUoBAG8o AIdoAAAAAIhIAAABALfwAQAAABeAAAAAAAAAAAAAAAAAAAAAAAAAGRgAAA+EGBURhJj+FcYFAAEY FQZehBgVYISY/k9KBABRSgQAXkoEAG8oAIdoAAAAAIhIAAABAG8AAQAAABeAAAAAAAAAAAAAAAAA AAAAAAAAFRgAAA+E6BcRhJj+FcYFAAHoFwZehOgXYISY/k9KBQBRSgUAbygAh2gAAAAAiEgAAAEA p/ADAAAAFwAAAAAAAAAAAAAAaAEAAAAAAAAdGAAAD4TQAhGEmP4VxgUAAdACBl6E0AJghJj+T0oA AFBKAwBRSgAAXkoAAG8oAIdoAAAAAIhIAAABAC0AAwAAABcAAAAAAAAAAAAAAGgBAAAAAAAAHRgA AA+EoAURhJj+FcYFAAGgBQZehKAFYISY/k9KAABQSgMAUUoAAF5KAABvKACHaAAAAACISAAAAQAt AAEAAAACggEAAAAAAAAAAAAAAAAAAAAAAAoYAAAPhHAIEYRM/xXGBQABcAgGXoRwCGCETP+HaAAA AACISAAAAgACAC4AAQAAAACAAQAAAAAAAAAAAAAAAAAAAAAAChgAAA+EQAsRhJj+FcYFAAFACwZe hEALYISY/odoAAAAAIhIAAACAAMALgABAAAABIABAAAAAAAAAAAAAAAAAAAAAAAKGAAAD4QQDhGE mP4VxgUAARAOBl6EEA5ghJj+h2gAAAAAiEgAAAIABAAuAAEAAAACggEAAAAAAAAAAAAAAAAAAAAA AAoYAAAPhOAQEYRM/xXGBQAB4BAGXoTgEGCETP+HaAAAAACISAAAAgAFAC4AAQAAAACAAQAAAAAA AAAAAAAAAAAAAAAAChgAAA+EsBMRhJj+FcYFAAGwEwZehLATYISY/odoAAAAAIhIAAACAAYALgAB AAAABIABAAAAAAAAAAAAAAAAAAAAAAAKGAAAD4SAFhGEmP4VxgUAAYAWBl6EgBZghJj+h2gAAAAA iEgAAAIABwAuAAEAAAACggEAAAAAAAAAAAAAAAAAAAAAAAoYAAAPhFAZEYRM/xXGBQABUBkGXoRQ GWCETP+HaAAAAACISAAAAgAIAC4ABQAAAAAAAQAAAAAAAAAAAAAAAAAAAAAADRgAAA+EaAERhJj+ FcYFAAFoAQZehGgBYISY/m8oAIdoAAAAAIhIAAACAAAALgABAAAAFwAAAAAAAAAAAAAAAAAAAAAA AAAZGAAAD4Q4BBGEmP4VxgUAATgEBl6EOARghJj+T0oEAFFKBABeSgQAbygAh2gAAAAAiEgAAAEA bwABAAAAFwAAAAAAAAAAAAAAAAAAAAAAAAAVGAAAD4QIBxGEmP4VxgUAAQgHBl6ECAdghJj+T0oF AFFKBQBvKACHaAAAAACISAAAAQCn8AEAAAAXAAAAAAAAAAAAAAAAAAAAAAAAABUYAAAPhNgJEYSY /hXGBQAB2AkGXoTYCWCEmP5PSgEAUUoBAG8oAIdoAAAAAIhIAAABALfwAQAAABcAAAAAAAAAAAAA AAAAAAAAAAAAGRgAAA+EqAwRhJj+FcYFAAGoDAZehKgMYISY/k9KBABRSgQAXkoEAG8oAIdoAAAA AIhIAAABAG8AAQAAABcAAAAAAAAAAAAAAAAAAAAAAAAAFRgAAA+EeA8RhJj+FcYFAAF4DwZehHgP YISY/k9KBQBRSgUAbygAh2gAAAAAiEgAAAEAp/ABAAAAFwAAAAAAAAAAAAAAAAAAAAAAAAAVGAAA D4RIEhGEmP4VxgUAAUgSBl6ESBJghJj+T0oBAFFKAQBvKACHaAAAAACISAAAAQC38AEAAAAXAAAA AAAAAAAAAAAAAAAAAAAAABkYAAAPhBgVEYSY/hXGBQABGBUGXoQYFWCEmP5PSgQAUUoEAF5KBABv KACHaAAAAACISAAAAQBvAAEAAAAXAAAAAAAAAAAAAAAAAAAAAAAAABUYAAAPhOgXEYSY/hXGBQAB 6BcGXoToF2CEmP5PSgUAUUoFAG8oAIdoAAAAAIhIAAABAKfwBQAAAAAAAQAAAAAAAAAAAAAAAAAA AAAADRgAAA+EaAERhJj+FcYFAAFoAQZehGgBYISY/m8oAIdoAAAAAIhIAAACAAAALgABAAAAFwAA AAAAAAAAAAAAAAAAAAAAAAAZGAAAD4Q4BBGEmP4VxgUAATgEBl6EOARghJj+T0oEAFFKBABeSgQA bygAh2gAAAAAiEgAAAEAbwABAAAAF4AAAAAAAAAAAAAAAAAAAAAAAAAVGAAAD4QIBxGEmP4VxgUA AQgHBl6ECAdghJj+T0oFAFFKBQBvKACHaAAAAACISAAAAQCn8AEAAAAXgAAAAAAAAAAAAAAAAAAA AAAAABUYAAAPhNgJEYSY/hXGBQAB2AkGXoTYCWCEmP5PSgEAUUoBAG8oAIdoAAAAAIhIAAABALfw AQAAABeAAAAAAAAAAAAAAAAAAAAAAAAAGRgAAA+EqAwRhJj+FcYFAAGoDAZehKgMYISY/k9KBABR SgQAXkoEAG8oAIdoAAAAAIhIAAABAG8AAQAAABeAAAAAAAAAAAAAAAAAAAAAAAAAFRgAAA+EeA8R hJj+FcYFAAF4DwZehHgPYISY/k9KBQBRSgUAbygAh2gAAAAAiEgAAAEAp/ABAAAAF4AAAAAAAAAA AAAAAAAAAAAAAAAVGAAAD4RIEhGEmP4VxgUAAUgSBl6ESBJghJj+T0oBAFFKAQBvKACHaAAAAACI SAAAAQC38AEAAAAXgAAAAAAAAAAAAAAAAAAAAAAAABkYAAAPhBgVEYSY/hXGBQABGBUGXoQYFWCE mP5PSgQAUUoEAF5KBABvKACHaAAAAACISAAAAQBvAAEAAAAXgAAAAAAAAAAAAAAAAAAAAAAAABUY AAAPhOgXEYSY/hXGBQAB6BcGXoToF2CEmP5PSgUAUUoFAG8oAIdoAAAAAIhIAAABAKfwBwAAAJ8o zAEAAAAAAAAAAAAAAABzbQghAAAAAAAAAAAAAAAABTuvMQAAAAAAAAAAAAD9EFkiimkAAAAAAAAA AAAA/RBuIoYIAAAAAAAAAAAAAAAA+VBiRwAAAAAAAAAAAAAAAFturi8AAAAAAAAAAAAA/RD///// //////////////////////////////////8HAAAAAAAAAAAAAAAAAAAAAAD//wcAAAASAEA/BqcD AAkEBQAJBAEACQQDAAkEBQAJBAEACQQDAAkEBQAJBAAAEgAPAAkEQD8GpxsACQQPAAkEGQAJBBsA CQQPAAkEGQAJBBsACQQSAHxb3CGG/N4fBQAJBAEACQQDAAkEBQAJBAEACQQDAAkEBQAJBBIAQD8G p0A/BqcbAAkEDwAJBBkACQQbAAkEDwAJBBkACQQbAAkEAAASAHxb3CEDAAkEBQAJBAEACQQDAAkE BQAJBAEACQQDAAkEBQAJBAEA0XlWFwAAAAAAAAAAAAECAAIAFQAAAAQAAAAIAAAA5QAAAAAAAAAU AAAAY2kRAGFdHgAjViEARxEiAB9DMAADQEYAOwVLAOxsdgCcWIUARhqLANw8jgCGFaYAVS6nAHYe qwBFHrEAqVmyAPQEugDXJdoAWz3aACxw9ADgCPgA/0ADAAEAKg8AAHkPAADII9gQAQABACoPAAAF AAAAKg8AAAAAAAACEAAAAAAAAADaGgAA8AAAEABAAAD//wEAAAAHAFUAbgBrAG4AbwB3AG4A//8B AAgAAAAAAAAAAAAAAP//AQAAAAAA//8AAAIA//8AAAAA//8AAAIA//8AAAAABwAAAEcWkAEAAAIC BgMFBAUCAwSHegAgAAAAgAgAAAAAAAAA/wEAAAAAAABUAGkAbQBlAHMAIABOAGUAdwAgAFIAbwBt AGEAbgAAADUWkAECAAUFAQIBBwYCBQcAAAAAAAAAEAAAAAAAAAAAAAAAgAAAAABTAHkAbQBiAG8A bAAAADMmkAEAAAILBgQCAgICAgSHegAgAAAAgAgAAAAAAAAA/wEAAAAAAABBAHIAaQBhAGwAAABd EZABgAoCAgYJBAIFCAMEAQAAAAAABwgQAAAAAAAAAAAAAgAAAAAATQBTACAATQBpAG4AYwBoAG8A AABBAHIAaQBhAGwAIABVAG4AaQBjAG8AZABlACAATQBTAAAAPzWQAQAAAgcDCQICBQIEBId6ACAA AACACAAAAAAAAAD/AQAAAAAAAEMAbwB1AHIAaQBlAHIAIABOAGUAdwAAADsGkAECAAUAAAAAAAAA AAAAAAAAAAAAEAAAAAAAAAAAAAAAgAAAAABXAGkAbgBnAGQAaQBuAGcAcwAAADsBkAGBBwIDBgAA AQEBAQEBAAAAAAAGCRAAAAAAAAAAAAAIAAAAAABCAGEAdABhAG4AZwAAABS81dAAACIABAAxCIgY APDQAgAAaAEAAAAAn03bJhtQ20YAAAAACQB0AAAA/wMAAM0WAAABAA0AAAAEAAMQMAAAAP8DAADN FgAAAQANAAAAMAAAAAAAAAAhAwDwEAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIB6AFtAC0 AIGBEjQAAAAAAAAAAAAAAAAAAL8aAAC/GgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgAAAAAAAAAAAAQyg1EA8BAACAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAASFgAAAAACfD/DwEAAT8AAOQEAAD///9/////f////3////9/ ////f////3////9/nFiFAAAAAAAyAAAAAAAAAAAAAAAAAAAAAAD//xIAAAAAAAAADgBIAE8ASwBF AFkAIABXAEcAIABOAG8AdABlAHMAAAAAAAAACABkAHMAdABhAG4AbABlAHkACABkAHMAdABhAG4A bABlAHkAAAAAAAAAAAAAAAAAAAAAAAAAAAAoAAAABgAAAAcAAAAAAAwAAQAMAAIADAADAAwABAAM AAUADAAGAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/v8AAAUBAgAA AAAAAAAAAAAAAAAAAAAAAQAAAOCFn/L5T2gQq5EIACsns9kwAAAAgAEAABEAAAABAAAAkAAAAAIA AACYAAAAAwAAALAAAAAEAAAAvAAAAAUAAADQAAAABgAAANwAAAAHAAAA6AAAAAgAAAD8AAAACQAA ABABAAASAAAAHAEAAAoAAAA8AQAADAAAAEgBAAANAAAAVAEAAA4AAABgAQAADwAAAGgBAAAQAAAA cAEAABMAAAB4AQAAAgAAAOQEAAAeAAAAEAAAAEhPS0VZIFdHIE5vdGVzAAAeAAAABAAAAAAAAAAe AAAADAAAAGRzdGFubGV5AAAAAB4AAAAEAAAAAAAAAB4AAAAEAAAAAAAAAB4AAAAMAAAATm9ybWFs LmRvdAAAHgAAAAwAAABkc3RhbmxleQAAAAAeAAAABAAAADkAAAAeAAAAGAAAAE1pY3Jvc29mdCBP ZmZpY2UgV29yZAAAAEAAAAAAuHs0EAAAAEAAAAAA6jJez2HKAUAAAAAAoq6S32HKAQMAAAABAAAA AwAAAP8DAAADAAAAzRYAAAMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP7/AAAFAQIAAAAAAAAAAAAA AAAAAAAAAAIAAAAC1c3VnC4bEJOXCAArLPmuRAAAAAXVzdWcLhsQk5cIACss+a5IAQAABAEAAAwA AAABAAAAaAAAAA8AAABwAAAABQAAAIgAAAAGAAAAkAAAABEAAACYAAAAFwAAAKAAAAALAAAAqAAA ABAAAACwAAAAEwAAALgAAAAWAAAAwAAAAA0AAADIAAAADAAAAOMAAAACAAAA5AQAAB4AAAAQAAAA IEFydWJhIE5ldHdvcmtzAAMAAAAwAAAAAwAAAA0AAAADAAAAvxoAAAMAAAAPJwsACwAAAAAAAAAL AAAAAAAAAAsAAAAAAAAACwAAAAAAAAAeEAAAAQAAAA8AAABIT0tFWSBXRyBOb3RlcwAMEAAAAgAA AB4AAAAGAAAAVGl0bGUAAwAAAAEAAAAAAAC8AAAAAwAAAAAAAAAgAAAAAQAAADgAAAACAAAAQAAA AAEAAAACAAAADAAAAF9QSURfSExJTktTAAIAAADkBAAAQQAAAHQAAAAGAAAAAwAAADAAUAADAAAA AAAAAAMAAAAAAAAAAwAAAAUAAAAfAAAAHQAAAG0AYQBpAGwAdABvADoAaABvAGsAZQB5AEAAagBh AGIAYgBlAHIALgBpAGUAdABmAC4AbwByAGcAAAAAAB8AAAABAAAAAADOEAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAgAAAAMAAAAEAAAABQAAAAYAAAAH AAAACAAAAAkAAAAKAAAACwAAAAwAAAANAAAADgAAAA8AAAAQAAAAEQAAABIAAAATAAAAFAAAABUA AAAWAAAAFwAAABgAAAAZAAAAGgAAAP7///8cAAAAHQAAAB4AAAAfAAAAIAAAACEAAAAiAAAA/v// /yQAAAAlAAAAJgAAACcAAAAoAAAAKQAAACoAAAArAAAALAAAAC0AAAAuAAAALwAAADAAAAAxAAAA MgAAADMAAAA0AAAANQAAADYAAAA3AAAAOAAAADkAAAA6AAAAOwAAADwAAAA9AAAAPgAAAD8AAABA AAAA/v///0IAAABDAAAARAAAAEUAAABGAAAARwAAAEgAAAD+////SgAAAEsAAABMAAAATQAAAE4A AABPAAAAUAAAAP7////9////UwAAAP7////+/////v////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// /////////////////////////////////////////1IAbwBvAHQAIABFAG4AdAByAHkAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAWAAUB//////////8DAAAABgkC AAAAAADAAAAAAAAARgAAAAAAAAAAAAAAAODk96jfYcoBVQAAAIAAAAAAAAAARABhAHQAYQAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoAAgH/ //////////////8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAbAAAAABAAAAAA AAAxAFQAYQBiAGwAZQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAADgACAQEAAAAGAAAA/////wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAACMAAABKOgAAAAAAAFcAbwByAGQARABvAGMAdQBtAGUAbgB0AAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAaAAIBAgAAAAUAAAD/////AAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAC40AAAAAAAABQBTAHUAbQBtAGEAcgB5AEkAbgBmAG8AcgBt AGEAdABpAG8AbgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgAAgH///////////////8AAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABBAAAAABAAAAAAAAAFAEQAbwBjAHUAbQBl AG4AdABTAHUAbQBtAGEAcgB5AEkAbgBmAG8AcgBtAGEAdABpAG8AbgAAAAAAAAAAAAAAOAACAQQA AAD//////////wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEkAAAAAEAAAAAAA AAEAQwBvAG0AcABPAGIAagAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAASAAIA////////////////AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAHEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD///////////////8AAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAAAA/v////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// /////////////////////////////////////wEA/v8DCgAA/////wYJAgAAAAAAwAAAAAAAAEYf AAAATWljcm9zb2Z0IE9mZmljZSBXb3JkIERvY3VtZW50AAoAAABNU1dvcmREb2MAEAAAAFdvcmQu RG9jdW1lbnQuOAD0ObJxAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA --Boundary_(ID_zOGarguyN62xplieqQbm8g) Content-type: text/html; charset=US-ASCII Content-transfer-encoding: 7BIT
X-Original-To: saag@core3.amsl.com Delivered-To: saag@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 7173C28C135 for ; Wed, 11 Nov 2009 21:26:51 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -3.781 X-Spam-Level: X-Spam-Status: No, score=-3.781 tagged_above=-999 required=5 tests=[AWL=-1.182, BAYES_00=-2.599] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Okm17tdDOMK7 for ; Wed, 11 Nov 2009 21:26:50 -0800 (PST) Received: from smtp02.srv.cs.cmu.edu (SMTP02.SRV.CS.CMU.EDU [128.2.217.197]) by core3.amsl.com (Postfix) with ESMTP id 75D4328C13B for ; Wed, 11 Nov 2009 21:26:50 -0800 (PST) Received: from atlantis-home.pc.cs.cmu.edu (SIRIUS.FAC.CS.CMU.EDU [128.2.216.216]) (authenticated bits=0) by smtp02.srv.cs.cmu.edu (8.13.6/8.13.6) with ESMTP id nAC5RENT018163 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO); Thu, 12 Nov 2009 00:27:16 -0500 (EST) Date: Thu, 12 Nov 2009 00:27:14 -0500 From: Jeffrey Hutzelman To: saag@ietf.org, ietf-krb-wg@anl.gov Message-ID: X-Mailer: Mulberry/4.0.8 (Linux/x86) MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii; format=flowed Content-Transfer-Encoding: 7bit Content-Disposition: inline X-Scanned-By: mimedefang-cmuscs on 128.2.217.197 Subject: [saag] KRB-WG session summary for IETF76 X-BeenThere: saag@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Security Area Advisory Group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 12 Nov 2009 05:26:51 -0000 DECISIONS (to be validated): ACTION ITEMS: - jhutz: send starttls to IESG - jimsch: validate ASN.1 module in preauth - tlyu: re-verify registry data in preauth - jhutz: send preauth to IESG - hartmans, lha: examine option for simpler anonymous PKINIT - leifj: revise data model SESSION SUMMARY: * Reviewed recent changes in document status: - STARTTLS is mostly ready to go to the IESG. The EKU/SAN issue is not fully resolved, but we've agreed to send the document as-is, with the issue called out in the PROTO writeup. Sam and/or Nico may re-raise the issue in IETF last call, where hopefully it will get some input from the PKIX community. - The preauth framework document is done and ready to go to the IESG. Before it can be sent, we need confirmation that the padata registry is correct (tlyu) and that the ASN.1 module compiles (jimsch). The chairs asked whether anyone was planning on implementing or had already done so, and got multiple positive responses. - Sam Hartman asked about the status of the DHCPv6 option draft. The author of that document, Shoichi Sakane indicated he hasn't had time to work on it recently due to dealing with comments on the cross-realm problem statement draft, but will get to it shortly after IETF. - Sam also asked about the status of anonymous, particularly with respect to Love's proposal for a simpler way to insure that, in an anonymous PKINIT transaction, both the client and KDC have contributed to the TGS session key. * Discussed two documents in last call: - The cross-realm problem statement document received comments during IETF last call which resulted in substantial revisions. A new WGLC has been started and will run until the end of November. Shoichi Sakane indicated he has some minor edits to -05 which he will post to the list during the last call. All participants are encouraged to review and comment on the new version before the last call ends. - The KDC data model document has recently concluded its third WGLC, and several comments were raised. Discussion is still ongoing on several of these; a new document version is expected shortly after discussion dies down. * Sam Hartman described a proposal for an extension to provide for protected negotiation of FAST by adding a typed-hole for protected data in the AS-REP. This technique was first used by Microsoft in Windows 2000 and seems to work. From mundy@tislabs.com Thu Nov 12 07:31:48 2009 Return-Path: X-Original-To: saag@core3.amsl.com Delivered-To: saag@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id C2F1C3A68CB for ; Thu, 12 Nov 2009 07:31:48 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.599 X-Spam-Level: X-Spam-Status: No, score=-2.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id vJ5sr49qZQhL for ; Thu, 12 Nov 2009 07:31:48 -0800 (PST) Received: from M4.sparta.com (M4.sparta.com [157.185.61.2]) by core3.amsl.com (Postfix) with ESMTP id D020D3A63EC for ; Thu, 12 Nov 2009 07:31:47 -0800 (PST) Received: from Beta5.sparta.com (beta5.sparta.com [157.185.63.21]) by M4.sparta.com (8.13.5/8.13.5) with ESMTP id nACFWGUC027071; Thu, 12 Nov 2009 09:32:16 -0600 Received: from worf.ads.sparta.com (worf.sparta.com [157.185.61.21]) by Beta5.sparta.com (8.13.8/8.13.8) with ESMTP id nACFWFUF013413; Thu, 12 Nov 2009 09:32:16 -0600 Received: from calvin.travel.tislabs.com ([133.93.160.63]) by worf.ads.sparta.com over TLS secured channel with Microsoft SMTPSVC(6.0.3790.3959); Thu, 12 Nov 2009 09:32:15 -0600 Received: from calvin.travel.tislabs.com (localhost [127.0.0.1]) by calvin.travel.tislabs.com (Postfix) with ESMTP id 7D9BA106F7B0; Fri, 13 Nov 2009 00:32:30 +0900 (JST) Date: Fri, 13 Nov 2009 00:32:29 +0900 From: Russ Mundy To: saag@ietf.org Message-ID: <20091113003229.1555a72c@calvin.travel.tislabs.com> X-Mailer: Claws Mail 3.7.0 (GTK+ 2.14.7; i386-apple-darwin9.6.0) Mime-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: 7bit X-OriginalArrivalTime: 12 Nov 2009 15:32:15.0630 (UTC) FILETIME=[50024AE0:01CA63AD] Cc: Russ.Mundy@sparta.com Subject: [saag] ISMS Meeting Summary for IETF 76 X-BeenThere: saag@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Security Area Advisory Group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 12 Nov 2009 15:31:48 -0000 Resending per Tim's request. Russ Summary: ISMS is working on two chartered documents. The first document on is a transport model for running SNMP over TLS and DTLS. A new revision of the document was posted and WG last call was started before the IETF meeting. All last comments received so far were discussed and resolved during the WG meeting. However, additional reviews are more than welcome. The second document describes how RADIUS can be used to provision security name to group name mappings in the VACM access control model. This document is progressing slowly and the chairs are working on finding an additional document editor so that the goal of delivering both documents in January 2010 to the IESG can be met. WG Chairs: Russ Mundy Juergen Schoenwaelder WG URL: http://tools.ietf.org/wg/isms/ From Nicolas.Williams@sun.com Thu Nov 12 09:36:26 2009 Return-Path: X-Original-To: saag@core3.amsl.com Delivered-To: saag@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 9CCC53A688B for ; Thu, 12 Nov 2009 09:36:26 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -6.027 X-Spam-Level: X-Spam-Status: No, score=-6.027 tagged_above=-999 required=5 tests=[AWL=0.019, BAYES_00=-2.599, HELO_MISMATCH_COM=0.553, RCVD_IN_DNSWL_MED=-4] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id GDOur7s6AKcx for ; Thu, 12 Nov 2009 09:36:25 -0800 (PST) Received: from sca-ea-mail-1.sun.com (sca-ea-mail-1.Sun.COM [192.18.43.24]) by core3.amsl.com (Postfix) with ESMTP id 766CB3A685D for ; Thu, 12 Nov 2009 09:36:23 -0800 (PST) Received: from dm-central-02.central.sun.com ([129.147.62.5]) by sca-ea-mail-1.sun.com (8.13.7+Sun/8.12.9) with ESMTP id nACHaodR020853 for ; Thu, 12 Nov 2009 17:36:50 GMT Received: from binky.Central.Sun.COM (binky.Central.Sun.COM [129.153.128.104]) by dm-central-02.central.sun.com (8.13.8+Sun/8.13.8/ENSMAIL, v2.2) with ESMTP id nACHanfp025957 for ; Thu, 12 Nov 2009 10:36:49 -0700 (MST) Received: from binky.Central.Sun.COM (localhost [127.0.0.1]) by binky.Central.Sun.COM (8.14.3+Sun/8.14.3) with ESMTP id nACHPGq3018314; Thu, 12 Nov 2009 11:25:16 -0600 (CST) Received: (from nw141292@localhost) by binky.Central.Sun.COM (8.14.3+Sun/8.14.3/Submit) id nACHPFCZ018313; Thu, 12 Nov 2009 11:25:15 -0600 (CST) X-Authentication-Warning: binky.Central.Sun.COM: nw141292 set sender to Nicolas.Williams@sun.com using -f Date: Thu, 12 Nov 2009 11:25:15 -0600 From: Nicolas Williams To: Michael Richardson Message-ID: <20091112172515.GD1105@Sun.COM> References: <18485.1257990209@marajade.sandelman.ca> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <18485.1257990209@marajade.sandelman.ca> User-Agent: Mutt/1.5.7i Cc: "saag@ietf.org" Subject: Re: [saag] BTNS report X-BeenThere: saag@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Security Area Advisory Group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 12 Nov 2009 17:36:26 -0000 On Wed, Nov 11, 2009 at 08:43:29PM -0500, Michael Richardson wrote: > >>>>> "Julien" == Julien Laganier writes: > Julien> The last unfinished deliverable left for the working group > Julien> is the API for applications to use BTNS IPsec channels. It's > Julien> not clear if the working group has sufficient energy to > Julien> progress that work. > > As an author, let me state that we have received very little feedback. > We have received some feedback, but it was not terribly useful. We got enough help to complete two RFCs specifying protocols (BTNS core, and connection latching). I'm very grateful for that help. It wasn't copious though, and I'm afraid that APIs will get less attention still. > As an author, I do not feel the document should progress until someone > who is implementing has really sat down and worked on it. Unfortunately, > I am not in a position to implement. The same goes for me. I think IPsec API standardization will have to wait until there are implementations. I'd rather both happen more or less concurrently, because I think implementors will need some guidance, but at least RFC5560 provides enough of an [very] abstract API that I think things will turn out OK. > I propose to close BTNS, sadly. I agree, also sadly. API documents can proceed as individual submissions if authors have the energy for it, or as work items for whatever IPsec WG successor is open that will change its charter to cover them (but more interest will have to be a prerequisite). Nico -- From touch@ISI.EDU Thu Nov 12 13:58:10 2009 Return-Path: X-Original-To: saag@core3.amsl.com Delivered-To: saag@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 3C6D03A698D for ; Thu, 12 Nov 2009 13:58:10 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.599 X-Spam-Level: X-Spam-Status: No, score=-2.599 tagged_above=-999 required=5 tests=[AWL=0.000, BAYES_00=-2.599] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id BXdtzMkVgovZ for ; Thu, 12 Nov 2009 13:58:09 -0800 (PST) Received: from nitro.isi.edu (nitro.isi.edu [128.9.208.207]) by core3.amsl.com (Postfix) with ESMTP id 8BC8F3A67E4 for ; Thu, 12 Nov 2009 13:58:09 -0800 (PST) Received: from [133.93.113.124] (host-113-124.meeting.ietf.org [133.93.113.124]) (authenticated bits=0) by nitro.isi.edu (8.13.8/8.13.8) with ESMTP id nACLvtev020841 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NOT); Thu, 12 Nov 2009 13:57:57 -0800 (PST) Message-ID: <4AFC84DF.9050002@isi.edu> Date: Thu, 12 Nov 2009 13:57:51 -0800 From: Joe Touch User-Agent: Thunderbird 2.0.0.23 (Windows/20090812) MIME-Version: 1.0 To: Nicolas Williams References: <18485.1257990209@marajade.sandelman.ca> <20091112172515.GD1105@Sun.COM> In-Reply-To: <20091112172515.GD1105@Sun.COM> X-Enigmail-Version: 0.96.0 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit X-MailScanner-ID: nACLvtev020841 X-ISI-4-69-MailScanner: Found to be clean X-MailScanner-From: touch@isi.edu Cc: "saag@ietf.org" Subject: Re: [saag] BTNS report X-BeenThere: saag@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Security Area Advisory Group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 12 Nov 2009 21:58:10 -0000 -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Nicolas Williams wrote: >... > I agree, also sadly. API documents can proceed as individual > submissions if authors have the energy for it, or as work items for > whatever IPsec WG successor is open that will change its charter to > cover them (but more interest will have to be a prerequisite). Couldn't they also be AD-sponsored in SAAG? I.e., we don't need to worry about a WG home for this work, and waiting for implementation experience seems prudent anyway. Joe -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.9 (MingW32) iEYEARECAAYFAkr8hN8ACgkQE5f5cImnZrsdYwCeIEPsclKcXQq981VUhnn4fWaq HlAAoLdYIl7Jue1jhqQxHQE7sKL7Vbxt =KYA/ -----END PGP SIGNATURE----- From Nicolas.Williams@sun.com Thu Nov 12 14:59:17 2009 Return-Path: X-Original-To: saag@core3.amsl.com Delivered-To: saag@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id DC54D3A6ABA for ; Thu, 12 Nov 2009 14:59:17 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -6.019 X-Spam-Level: X-Spam-Status: No, score=-6.019 tagged_above=-999 required=5 tests=[AWL=0.027, BAYES_00=-2.599, HELO_MISMATCH_COM=0.553, RCVD_IN_DNSWL_MED=-4] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id uIRPMdrPRJcM for ; Thu, 12 Nov 2009 14:59:17 -0800 (PST) Received: from brmea-mail-1.sun.com (brmea-mail-1.Sun.COM [192.18.98.31]) by core3.amsl.com (Postfix) with ESMTP id 125B23A690C for ; Thu, 12 Nov 2009 14:59:16 -0800 (PST) Received: from dm-central-01.central.sun.com ([129.147.62.4]) by brmea-mail-1.sun.com (8.13.6+Sun/8.12.9) with ESMTP id nACMxdpX006469 for ; Thu, 12 Nov 2009 22:59:39 GMT Received: from binky.Central.Sun.COM (binky.Central.Sun.COM [129.153.128.104]) by dm-central-01.central.sun.com (8.13.8+Sun/8.13.8/ENSMAIL, v2.2) with ESMTP id nACMxcC5059600 for ; Thu, 12 Nov 2009 15:59:39 -0700 (MST) Received: from binky.Central.Sun.COM (localhost [127.0.0.1]) by binky.Central.Sun.COM (8.14.3+Sun/8.14.3) with ESMTP id nACMm5ln018868; Thu, 12 Nov 2009 16:48:05 -0600 (CST) Received: (from nw141292@localhost) by binky.Central.Sun.COM (8.14.3+Sun/8.14.3/Submit) id nACMm0mr018867; Thu, 12 Nov 2009 16:48:00 -0600 (CST) X-Authentication-Warning: binky.Central.Sun.COM: nw141292 set sender to Nicolas.Williams@sun.com using -f Date: Thu, 12 Nov 2009 16:48:00 -0600 From: Nicolas Williams To: Joe Touch Message-ID: <20091112224800.GO1105@Sun.COM> References: <18485.1257990209@marajade.sandelman.ca> <20091112172515.GD1105@Sun.COM> <4AFC84DF.9050002@isi.edu> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <4AFC84DF.9050002@isi.edu> User-Agent: Mutt/1.5.7i Cc: "saag@ietf.org" Subject: Re: [saag] BTNS report X-BeenThere: saag@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Security Area Advisory Group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 12 Nov 2009 22:59:17 -0000 On Thu, Nov 12, 2009 at 01:57:51PM -0800, Joe Touch wrote: > > I agree, also sadly. API documents can proceed as individual > > submissions if authors have the energy for it, or as work items for > > whatever IPsec WG successor is open that will change its charter to > > cover them (but more interest will have to be a prerequisite). > > Couldn't they also be AD-sponsored in SAAG? Same thing. > I.e., we don't need to worry about a WG home for this work, and waiting > for implementation experience seems prudent anyway. No, we don't, not yet anyways. From Pasi.Eronen@nokia.com Mon Nov 23 11:57:54 2009 Return-Path: X-Original-To: saag@core3.amsl.com Delivered-To: saag@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 183433A6AC6 for ; Mon, 23 Nov 2009 11:57:54 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -6.406 X-Spam-Level: X-Spam-Status: No, score=-6.406 tagged_above=-999 required=5 tests=[AWL=0.193, BAYES_00=-2.599, RCVD_IN_DNSWL_MED=-4] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id BHxrGFKcSgmJ for ; Mon, 23 Nov 2009 11:57:53 -0800 (PST) Received: from mgw-mx09.nokia.com (smtp.nokia.com [192.100.105.134]) by core3.amsl.com (Postfix) with ESMTP id 5D7E43A6AB5 for ; Mon, 23 Nov 2009 11:57:53 -0800 (PST) Received: from esebh105.NOE.Nokia.com (esebh105.ntc.nokia.com [172.21.138.211]) by mgw-mx09.nokia.com (Switch-3.3.3/Switch-3.3.3) with ESMTP id nANJv3bu021279 for ; Mon, 23 Nov 2009 13:57:48 -0600 Received: from vaebh104.NOE.Nokia.com ([10.160.244.30]) by esebh105.NOE.Nokia.com with Microsoft SMTPSVC(6.0.3790.3959); Mon, 23 Nov 2009 21:57:22 +0200 Received: from smtp.mgd.nokia.com ([65.54.30.5]) by vaebh104.NOE.Nokia.com over TLS secured channel with Microsoft SMTPSVC(6.0.3790.3959); Mon, 23 Nov 2009 21:57:17 +0200 Received: from NOK-EUMSG-01.mgdnok.nokia.com ([65.54.30.106]) by nok-am1mhub-01.mgdnok.nokia.com ([65.54.30.5]) with mapi; Mon, 23 Nov 2009 20:57:15 +0100 From: To: Date: Mon, 23 Nov 2009 20:57:15 +0100 Thread-Topic: IETF76 SAAG draft minutes Thread-Index: AcpsdydziuZyPNf7R3K/aAT0iUoPsA== Message-ID: <808FD6E27AD4884E94820BC333B2DB774F310BB843@NOK-EUMSG-01.mgdnok.nokia.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: acceptlanguage: en-US Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 X-OriginalArrivalTime: 23 Nov 2009 19:57:17.0482 (UTC) FILETIME=[28CB98A0:01CA6C77] X-Nokia-AV: Clean Subject: [saag] IETF76 SAAG draft minutes X-BeenThere: saag@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Security Area Advisory Group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 23 Nov 2009 19:57:54 -0000 I've uploaded the draft minutes from SAAG here:=20 http://www.ietf.org/proceedings/09nov/minutes/saag.txt Please send any corrections/additions to me and Tim.=20 (And big thanks to Jim Schaad for taking notes again!) =20 Best regards, Pasi From paul.hoffman@vpnc.org Tue Nov 24 10:20:11 2009 Return-Path: X-Original-To: saag@core3.amsl.com Delivered-To: saag@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 34B213A67F7 for ; Tue, 24 Nov 2009 10:20:11 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -5.991 X-Spam-Level: X-Spam-Status: No, score=-5.991 tagged_above=-999 required=5 tests=[AWL=0.055, BAYES_00=-2.599, HELO_MISMATCH_COM=0.553, RCVD_IN_DNSWL_MED=-4] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Yv218UBVwjIA for ; Tue, 24 Nov 2009 10:20:09 -0800 (PST) Received: from balder-227.proper.com (Balder-227.Proper.COM [192.245.12.227]) by core3.amsl.com (Postfix) with ESMTP id 5A96D3A67C1 for ; Tue, 24 Nov 2009 10:20:09 -0800 (PST) Received: from [10.20.30.158] (75-101-30-90.dsl.dynamic.sonic.net [75.101.30.90]) (authenticated bits=0) by balder-227.proper.com (8.14.2/8.14.2) with ESMTP id nAOIK3ns002160 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO) for ; Tue, 24 Nov 2009 11:20:04 -0700 (MST) (envelope-from paul.hoffman@vpnc.org) Mime-Version: 1.0 Message-Id: Date: Tue, 24 Nov 2009 10:20:02 -0800 To: saag@ietf.org From: Paul Hoffman Content-Type: text/plain; charset="us-ascii" Subject: [saag] Fwd: WG Review: HTTP State Management Mechanism (httpstate) X-BeenThere: saag@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Security Area Advisory Group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 24 Nov 2009 18:20:11 -0000 People here may be interested in this, given that HTTP cookies are a primary security mechanism for the web. --Paul Hoffman >X-Original-To: ietf-announce@ietf.org >Delivered-To: ietf-announce@core3.amsl.com >From: IESG Secretary >To: ietf-announce@ietf.org >Subject: WG Review: HTTP State Management Mechanism (httpstate) >Date: Tue, 24 Nov 2009 10:00:02 -0800 (PST) >Cc: http-state@ietf.org >X-BeenThere: ietf-announce@ietf.org >X-Mailman-Version: 2.1.9 >Reply-To: iesg@ietf.org >List-Id: "IETF announcement list. No discussions." >List-Unsubscribe: , > >List-Archive: >List-Post: >List-Help: >List-Subscribe: , > >Sender: ietf-announce-bounces@ietf.org > >A new IETF working group has been proposed in the Applications Area. The >IESG has not made any determination as yet. The following draft charter >was submitted, and is provided for informational purposes only. Please >send your comments to the IESG mailing list (iesg@ietf.org) by Tuesday, >December 1, 2009. > >HTTP State Management Mechanism (httpstate) >--------------------------------------------------- >Current Status: Proposed Working Group >Last modified: 2009-11-11 > >Chair(s): > TBD > >Applications Area Director(s): > Lisa Dusseault > Alexey Melnikov > >Applications Area Advisor: > Lisa Dusseault > >Mailing Lists: > General Discussion: http-state@ietf.org > To Subscribe: https://www.ietf.org/mailman/listinfo/http-state > Archive: http://www.ietf.org/mail-archive/web/http- >state/current/maillist.html > Alternative Archive: http://groups.google.com/group/http-state > >Description of Working Group: > >The HTTP State Management Mechanism (aka Cookies) was originally >created by Netscape Communications in their informal Netscape cookie >specification ("cookie_spec.html"), from which formal specifications >RFC 2109 and RFC 2965 evolved. The formal specifications, however, >were never fully implemented in practice; RFC 2109, in addition to >cookie_spec.html, more closely resemble real-world implementations than >RFC 2965, even though RFC 2965 officially obsoletes the former. >Compounding the problem are undocumented features (such as HTTPOnly), >and varying behaviors among real-world implementations. > >The working group will create a new RFC that obsoletes RFC 2109 and >specifies Cookies as they are actually used in existing implementations >and deployments. Where differences exist among the most commonly used >implementations, the working group will document the variations. Where >consensus exists among the most commonly used implementations, the >working group will specify the consensus behavior. > >The working group must not introduce any new syntax or new semantics >not already in common use. > >The working group's specific deliverables are: > >* A standards-track document that is suitable to supersede RFC 2109 >(likely based on draft-abarth-cookie) >* An informational document cataloguing the differences between major >implementations In doing so, the working group should consider: >* cookie_spec.html - Netscape Cookie Specification >http://web.archive.org/web/20070805052634/http://wp.netscape.com/newsre >f/std/cookie_spec.html >* RFC 2109 - HTTP State Management Mechanism (Obsoleted by RFC 2965) >http://tools.ietf.org/html/rfc2109 >* RFC 2964 - Use of HTTP State Management >http://tools.ietf.org/html/rfc2964 >* RFC 2965 - HTTP State Management Mechanism (Obsoletes RFC 2109) >http://tools.ietf.org/html/rfc2965 >* I-D - HTTP State Management Mechanism v2 >http://tools.ietf.org/html/draft-pettersen-cookie-v2 >* I-D - Cookie-based HTTP Authentication >http://tools.ietf.org/html/draft-broyer-http-cookie-auth >* Widely Implemented - HTTPOnly >http://www.owasp.org/index.php/HTTPOnly >* Browser Security Handbook - Cookies >http://code.google.com/p/browsersec/wiki/Part2#Same- >origin_policy_for_cookies >* HTTP Cookies: Standards, Privacy, and Politics by David M. Kristol >http://arxiv.org/PS_cache/cs/pdf/0105/0105018v1.pdf > >Goals and Milestones: > >Jan 2010 - Feature-complete Internet-Draft of Cookie specification >Mar 2010 - Feature-complete test suite of Cookie specification >May 2010 - First fully conforming implementation in a major browser >Jul 2010 - Last Call for Cookie specification >Sep 2010 - Second fully conforming implementation in a major browser >Nov 2010 - Submit Cookie specification to IESG for consideration as > a Draft Standard >Nov 2010 - Submit deviation description to IESG for consideration as > Informational >_______________________________________________ >IETF-Announce mailing list >IETF-Announce@ietf.org >https://www.ietf.org/mailman/listinfo/ietf-announce From housley@vigilsec.com Thu Nov 26 11:04:27 2009 Return-Path: X-Original-To: saag@core3.amsl.com Delivered-To: saag@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id EB55A3A6ACA for ; Thu, 26 Nov 2009 11:04:27 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -101.552 X-Spam-Level: X-Spam-Status: No, score=-101.552 tagged_above=-999 required=5 tests=[AWL=0.428, BAYES_00=-2.599, RCVD_IN_SORBS_WEB=0.619, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 05p8u900OrWS for ; Thu, 26 Nov 2009 11:04:27 -0800 (PST) Received: from odin.smetech.net (mail.smetech.net [208.254.26.82]) by core3.amsl.com (Postfix) with ESMTP id 3B1253A6AAF for ; Thu, 26 Nov 2009 11:04:27 -0800 (PST) Received: from localhost (unknown [208.254.26.81]) by odin.smetech.net (Postfix) with ESMTP id 3B31B9A472C for ; Thu, 26 Nov 2009 14:04:42 -0500 (EST) X-Virus-Scanned: amavisd-new at smetech.net Received: from odin.smetech.net ([208.254.26.82]) by localhost (ronin.smetech.net [208.254.26.81]) (amavisd-new, port 10024) with ESMTP id cb8GvDFO8DbF for ; Thu, 26 Nov 2009 14:04:20 -0500 (EST) Received: from THINKPADR52.vigilsec.com (unknown [12.39.206.234]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by odin.smetech.net (Postfix) with ESMTP id 2E8A39A4721 for ; Thu, 26 Nov 2009 14:04:39 -0500 (EST) X-Mailer: QUALCOMM Windows Eudora Version 7.1.0.9 Date: Thu, 26 Nov 2009 14:04:08 -0500 To: saag@ietf.org From: Russ Housley Mime-Version: 1.0 Content-Type: text/plain; charset="us-ascii"; format=flowed Message-Id: <20091126190440.2E8A39A4721@odin.smetech.net> Subject: [saag] Fwd: New Version Notification for draft-housley-saag-crypto-key-table-01 X-BeenThere: saag@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Security Area Advisory Group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 26 Nov 2009 19:04:28 -0000 The changes are primarily editorial, but all of them are based on comments from the community. Further review is welcome. Russ >From: IETF I-D Submission Tool >To: housley@vigilsec.com >Cc: tim.polk@nist.gov >Subject: New Version Notification for draft-housley-saag-crypto-key-table-01 >Date: Thu, 26 Nov 2009 11:01:29 -0800 (PST) > >A new version of I-D, draft-housley-saag-crypto-key-table-01.txt has >been successfuly submitted by Russ Housley and posted to the IETF repository. > >Filename: draft-housley-saag-crypto-key-table >Revision: 01 >Title: Database of Long-Lived Symmetric Cryptographic Keys >Creation_date: 2009-11-26 >WG ID: Independent Submission >Number_of_pages: 7 > >Abstract: >This document specifies the information contained in a database of >long-lived cryptographic keys used by many different security >protocols. The database design supports both manual and automated >key management. In many instances, the security protocols do not >directly use the long-lived key, but rather a key derivation function >is used to derive a short-lived key from a long-lived key. > > >The IETF Secretariat. From Pasi.Eronen@nokia.com Mon Nov 30 01:20:09 2009 Return-Path: X-Original-To: saag@core3.amsl.com Delivered-To: saag@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 85BC63A6A32; Mon, 30 Nov 2009 01:20:08 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -6.515 X-Spam-Level: X-Spam-Status: No, score=-6.515 tagged_above=-999 required=5 tests=[AWL=0.084, BAYES_00=-2.599, RCVD_IN_DNSWL_MED=-4] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id jbXGODdd09lS; Mon, 30 Nov 2009 01:20:05 -0800 (PST) Received: from mgw-mx03.nokia.com (smtp.nokia.com [192.100.122.230]) by core3.amsl.com (Postfix) with ESMTP id 205EA3A6A31; Mon, 30 Nov 2009 01:20:04 -0800 (PST) Received: from esebh106.NOE.Nokia.com (esebh106.ntc.nokia.com [172.21.138.213]) by mgw-mx03.nokia.com (Switch-3.3.3/Switch-3.3.3) with ESMTP id nAU9JpU1006756; Mon, 30 Nov 2009 11:19:55 +0200 Received: from vaebh104.NOE.Nokia.com ([10.160.244.30]) by esebh106.NOE.Nokia.com with Microsoft SMTPSVC(6.0.3790.3959); Mon, 30 Nov 2009 11:18:16 +0200 Received: from smtp.mgd.nokia.com ([65.54.30.7]) by vaebh104.NOE.Nokia.com over TLS secured channel with Microsoft SMTPSVC(6.0.3790.3959); Mon, 30 Nov 2009 11:18:10 +0200 Received: from NOK-EUMSG-01.mgdnok.nokia.com ([65.54.30.106]) by nok-am1mhub-03.mgdnok.nokia.com ([65.54.30.7]) with mapi; Mon, 30 Nov 2009 10:17:57 +0100 From: To: , Date: Mon, 30 Nov 2009 10:17:56 +0100 Thread-Topic: Pasi's AD Notes for November 2009 Thread-Index: AcpxngCNeakTGXMzSt2Yd1bkpYy2lA== Message-ID: <808FD6E27AD4884E94820BC333B2DB774F3118C93B@NOK-EUMSG-01.mgdnok.nokia.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: acceptlanguage: en-US Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 X-OriginalArrivalTime: 30 Nov 2009 09:18:10.0970 (UTC) FILETIME=[096277A0:01CA719E] X-Nokia-AV: Clean Subject: [saag] Pasi's AD Notes for November 2009 X-BeenThere: saag@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Security Area Advisory Group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 30 Nov 2009 09:20:09 -0000 Here's again a short status update about what things are going on from my point-of-view. If you notice anything that doesn't look right, let me know -- miscommunication and mix-ups do happen. Best regards, Pasi MISC NOTES - Edited and posted IETF76 SAAG minutes (thanks to Jim Schaad for taking notes!) - Tools work: completed Django 1.x transition; retired bunch of old code; new authentication/authorization code for datatracker. - I've been asked to sponsor draft-marin-eap-frm-fastreauth; waiting for me to take a look and reply to the authors [since 2009-10-26] - Some discussions about the new-work and secdir mailing lists =20 [waiting for Loa since 2009-11-10] - Some discussions related to IODEF/INCH and ARF. Waiting for=20 IETF Trust [since 2009-11-03]. WORKING GROUPS DKIM - draft-ietf-dkim-deployment: currently in AD Evaluation state, waiting for me to read it [since 2009-10-26] - Waiting for Stephen and Barry for new charter text (noting that=20 current work items are completed and adding 4871bis) - I still need to review what to do about errata 1385, 1532, and 1596, and 1942. EMU - EMU WG received a new liaison statement from ITU-T about X.1034;=20 the WG chairs have the token for doing something about it. IPSECME - draft-ietf-ipsecme-ikev2-redirect (not wearing AD hat): now published as RFC 5685. - draft-ietf-ipsecme-ikev2-resumption: in RFC editor queue. - draft-ietf-ipsecme-ikev2-ipv6-config (not wearing AD hat): was approved by IESG, now in RFC editor queue. - draft-ietf-ipsecme-traffic-visibility: waiting for the authors to submit a revised ID [since 2009-11-27] - draft-kanno-ipsecme-camellia-xcbc (not WG item): the authors have asked if I would sponsor this as individual submission. I've sent some questions to them, and I'm currently waiting for their reply [since 2009-10-14] - I need to look at errata 1937 (for RFC 4307) [since 2009-11-02] ISMS KEYPROV - Apparently waiting for the chairs to send some documents my way... PKIX - draft-ietf-pkix-sha2-dsa-ecdsa: in RFC editor queue. - draft-ietf-pkix-rfc4055-update: in RFC editor queue. SASL - draft-ietf-sasl-scram: in RFC editor queue, waiting for GS2. - draft-ietf-sasl-gs2: went through IETF last call; on the agenda=20 of the 2009-12-03 IESG telechat. - (not WG item) draft-melnikov-sasl-scram-ldap: was approved by IESG; now in RFC editor queue. - (not WG item) draft-altman-tls-channel-bindings: went through IETF last call; delayed due to renegotiation discussions;=20 currently waiting for me to do something. =20 SYSLOG - draft-ietf-syslog-sign: waiting for Alex to post a revised ID to address the DISCUSSes [since 2009-11-26] TLS - Did somebody mention renegotiation? (more than 1,000 emails this=20 month...) Currently waiting for the secretariat to start IETF=20 Last Call. - draft-ietf-tls-extractor: waiting for Eric to reply to email [since 2009-10-05]; also in AUTH48. - draft-ietf-tls-rfc4366-bis: it seems we need more text about server_name. Currently waiting until the renegotiation fix=20 progresses. - (not WG item) see SASL WG for draft-altman-tls-channel-bindings - (not WG item) draft-mavrogiannopoulos-rfc5081bis: this was submitted via the independent submission stream, but procedure-wise, it needs to be an IETF stream document. I've offered to sponsor this as non-WG document; waiting for the author to submit a revised ID=20 [since 2009-11-27] OTHER DOCUMENTS DISCUSSES (active -- something happened within last month) - draft-cain-post-inch-phishingextns: waiting for me to =20 take a look at version -07 [since 2009-11-24] - draft-ietf-bmwg-ipsec-meth: waiting for authors to submit a revised ID [since 2009-10-22] - draft-ietf-bmwg-ipsec-term: waiting for authors to reply to my comments or submit a revised ID [since 2009-10-22] - draft-ietf-ntp-autokey: waiting for Ralph's proposal on how to proceed [since 2009-10-19] - draft-turner-deviceowner-attribute: waiting for the author to submit a revised ID [since 2009-11-18] - draft-turner-clearancesponsor-attribute: waiting for the author to submit a revised ID [since 2009-11-18] DISCUSSES (stalled -- I haven't heard anything from the authors or document shepherd for over one month) - draft-ietf-eai-downgraded-display: discussion ongoing; currently waiting for the authors to reply [since 2009-10-26] - draft-ietf-roll-home-routing-reqs: text agreed, waiting for the authors to submit a revised ID [since 2009-10-29] - draft-ietf-sip-certs: discussion ongoing; currently waiting for the authors to reply [since 2009-10-26] - draft-solinas-rfc4753bis: waiting for authors to reply to my comments [since 2009-09-24] DISCUSSES (presumed dead -- I haven't heard anything from the authors or document shepherd for over three months) - draft-cheshire-dnsext-nbp: waiting for authors to reply to my comments [since 2008-12-03] (pinged again on 2009-04-30, 2009-06-09, 2009-10-29) - draft-ietf-bfd-base: text agreed, waiting for authors to submit=20 a revised ID [since 2009-03-19] (pinged again on 2009-04-30, 2009-06-09, 2009-10-29) - draft-ietf-dime-diameter-api: waiting for Dan to get WG's opinion=20 on whether this will be useful and if yes, why [since 2009-06-18] - draft-ietf-sipping-policy-package: waiting for draft-ietf-sipping- media-policy-dataset to progress (or more information from Robert) [since 2008-10-28] --end--