Return-Path: X-Original-To: cfrg@mail2.ietf.org Delivered-To: cfrg@mail2.ietf.org Received: from localhost (localhost [127.0.0.1]) by mail2.ietf.org (Postfix) with ESMTP id 3A992F61DA90 for ; Wed, 27 May 2026 10:59:57 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=ietf.org; s=ietf1; t=1779904797; bh=Wej+8Cif8YAJPCxD7Hr9dwlDQ/2Tblcb+rosxMhvBvA=; h=Date:Subject:To:References:From:In-Reply-To; b=clrBIUVw9jTpXOhRCuf7a1CO388h7unU+s2mZucOdk7KQORivDJOjvGqbXC40vOku 7XKzL9S5XZCf98FFXtsHEllP8goJRYMLdVN+gYDWMvjRMZw6IObVGKgnAXk79ZHRjw Q3U4DESllsg+cP5Q3Cnrx9oXI2IF5LNKmr9me0EE= X-Virus-Scanned: amavisd-new at ietf.org X-Spam-Flag: NO X-Spam-Score: -2.084 X-Spam-Level: X-Spam-Status: No, score=-2.084 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H5=0.001, RCVD_IN_MSPIKE_WL=0.001, RCVD_IN_VALIDITY_CERTIFIED_BLOCKED=0.001, RCVD_IN_VALIDITY_RPBL_BLOCKED=0.001, SPF_HELO_NONE=0.001, T_SPF_PERMERROR=0.01] autolearn=ham autolearn_force=no Authentication-Results: mail2.ietf.org (amavisd-new); dkim=pass (1024-bit key) header.d=grotto-networking.com Received: from mail2.ietf.org ([166.84.6.31]) by localhost (mail2.ietf.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id X8dvKO8ZwC4o for ; Wed, 27 May 2026 10:59:54 -0700 (PDT) Received: from sender4-op-o12.zoho.com (sender4-op-o12.zoho.com [136.143.188.12]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature ECDSA (P-256) server-digest SHA256) (No client certificate requested) by mail2.ietf.org (Postfix) with ESMTPS id 35B21F61BC8B for ; Wed, 27 May 2026 10:53:09 -0700 (PDT) ARC-Seal: i=1; a=rsa-sha256; t=1779904379; cv=none; d=zohomail.com; s=zohoarc; b=LBiNPbtmEs/2/FMeM1v2vyTh4LMh+pzMPe13vjgHqqrshsuzuYJVu8C+0+FXhKi9xLiC4O6SFcleg4Du5amsPtzwgW3wssXrgK+h9xxHOejzq25demkFJLAyTmoPSiBBVAYvt/K3rFlZ9L/ER3RhOfEjHxjW3DBNALYheyPVytk= ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=zohomail.com; s=zohoarc; t=1779904379; h=Content-Type:Date:Date:From:From:In-Reply-To:MIME-Version:Message-ID:References:Subject:Subject:To:To:Message-Id:Reply-To:Cc; bh=QOCHCstIZqh0mMAS8ekHnnv15ijbaqbBJg+n44ftiWo=; b=EK8DITsJHf6H8SbyoRtt6hXRcvUsY6eLYSw+kpQQDd6jYxJro7VZadL+SzBOFrnWCJU8qopGZNVhE+eQbGBs6mpeNzHfDpWkKFLN4qqE/hqm8OIFRwxbVFsNf5yPI7Y8kKGHRJEDbQKB2nkl7VX8svJZfjFFnRf8i5AdtfC2PiU= ARC-Authentication-Results: i=1; mx.zohomail.com; dkim=pass header.i=grotto-networking.com; spf=pass smtp.mailfrom=gregb@grotto-networking.com; dmarc=pass header.from= DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; t=1779904379; s=mail; d=grotto-networking.com; i=gregb@grotto-networking.com; h=Message-ID:Date:Date:MIME-Version:Subject:Subject:To:To:References:From:From:In-Reply-To:Content-Type:Message-Id:Reply-To:Cc; bh=QOCHCstIZqh0mMAS8ekHnnv15ijbaqbBJg+n44ftiWo=; b=V8Hj7XkvFuCKnqGlOp3hcx8zN3xOXqgGvTzvW7KCY2hDqgEEZJKrWQmmUUQm8Zyx 9pDowaqoPLvBWTQKKu06QTIWu4y+o3l09cVX2PLpkahZHn2CQdnKtrlRvMO3QrqIhkQ 1/eBDHVeP4AJN3mBbzN9G6m13LM23xPgCMagbo6s= Received: by mx.zohomail.com with SMTPS id 1779904376893457.38910888602265; Wed, 27 May 2026 10:52:56 -0700 (PDT) Message-ID: <0b17d7d2-eda9-4a8b-b8a8-c2d1439c0df9@grotto-networking.com> Date: Wed, 27 May 2026 10:52:56 -0700 MIME-Version: 1.0 User-Agent: Mozilla Thunderbird To: cfrg@irtf.org References: From: Greg Bernstein Content-Language: en-US Autocrypt: addr=gregb@grotto-networking.com; keydata= xjMEZwLKYRYJKwYBBAHaRw8BAQdA8IOoK17s6mGoiBSzwOyaOoGOgWU8OumDTSofGGhGQUjN LEdyZWcgQmVybnN0ZWluIDxncmVnYkBncm90dG8tbmV0d29ya2luZy5jb20+wo8EExYIADcW IQRLzhHbMKsLgNK7vMOLI64ixFJm8wUCZwLKYQUJBaOagAIbAwQLCQgHBRUICQoLBRYCAwEA AAoJEIsjriLEUmbz0NIA/iMpT0PHcvdfHGorTCR8wYfmafZ5dRgOyIknaepT9SEnAQDvNzl1 YT1LvhYiB+RqlMCXxCC96vkuoxlC5fuUm6pzB844BGcCymISCisGAQQBl1UBBQEBB0BbfXd2 chNynacbUQ/8JmIBWUcYSnBcAecizPRRLJOIQwMBCAfCfgQYFggAJhYhBEvOEdswqwuA0ru8 w4sjriLEUmbzBQJnAspiBQkFo5qAAhsMAAoJEIsjriLEUmbzlYgA/05UvcaXFGdkD+dFChBP 9+u0MbsGOkLdZTZQvEQamZWvAQDhiTGdsF40gJFVMg1H56/9r4cpjnymbociUXD2Bgg0Aw== In-Reply-To: Content-Type: multipart/signed; micalg=pgp-sha256; protocol="application/pgp-signature"; boundary="------------UtNTJXmkTgp1DdmNnSaqsN3x" X-Zoho-Virus-Status: 1 X-Zoho-AV-Stamp: zmail-av-0.2.2.1.5.2/279.897.12 X-ZohoMailClient: External Message-ID-Hash: KESAVSRMWTFP7M73LBEVIYOTFD5RCA7X X-Message-ID-Hash: KESAVSRMWTFP7M73LBEVIYOTFD5RCA7X X-MailFrom: gregb@grotto-networking.com X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; emergency; loop; banned-address; member-moderation; header-match-cfrg.irtf.org-0; header-match-cfrg.irtf.org-1; nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size; news-moderation; no-subject; digests; suspicious-header X-Mailman-Version: 3.3.9rc6 Precedence: list Subject: =?utf-8?q?=5BCFRG=5D_Re=3A_Implementation_review_of_=22Blind_BBS_Signatures?= =?utf-8?q?=22_=28draft-irtf-cfrg-bbs-blind-signatures-02=29?= List-Id: Crypto Forum Research Group Archived-At: List-Archive: List-Help: List-Owner: List-Post: List-Subscribe: List-Unsubscribe: This is an OpenPGP/MIME signed message (RFC 4880 and 3156) --------------UtNTJXmkTgp1DdmNnSaqsN3x Content-Type: multipart/mixed; boundary="------------H2gqpBpeU95bXF03N3PEEHtl"; protected-headers="v1" From: Greg Bernstein To: cfrg@irtf.org Message-ID: <0b17d7d2-eda9-4a8b-b8a8-c2d1439c0df9@grotto-networking.com> Subject: Re: [CFRG] Re: Implementation review of "Blind BBS Signatures" (draft-irtf-cfrg-bbs-blind-signatures-02) References: In-Reply-To: --------------H2gqpBpeU95bXF03N3PEEHtl Content-Type: multipart/mixed; boundary="------------yeAA0AN8dJPVHEbwBzYHjnDP" --------------yeAA0AN8dJPVHEbwBzYHjnDP Content-Type: multipart/alternative; boundary="------------akX7UiJotPY0ozi5vxvxWiCk" --------------akX7UiJotPY0ozi5vxvxWiCk Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: base64 VGhhbmtzIEVtaWwuIEFuZCB0aGFua3MgZm9yIHRoZSBQUnMgb24gdGhlIGRyYWZ0cy4gV2Ug d2lsbCB0cnkgdG8gZ2V0IGFuIA0KdXBkYXRlIG91dCBpbiBhIHdlZWsgb3IgdHdvLg0KDQpC ZXN0IFJlZ2FyZHMNCg0KR3JlZyBCLg0KT24gNS8yNy8yNiAwNToyMSwgRW1pbCBMdW5kYmVy ZyB3cm90ZToNCg0KPiBPbmUgbW9yZSB0aGluZyBJIG5vdGljZWQgbm93Og0KPg0KPiBTdWJz dGFudGl2ZSBidXQgZWRpdG9yaWFsIGlzc3VlczoNCj4gLSBJbiAiVGVzdCBWZWN0b3JzIiwg dGhlICJHZW5lcmF0b3JzIiBhbmQgIkJsaW5kIEdlbmVyYXRvcnMiIHNlY3Rpb25zIA0KPiBz cGVsbCB0aGUgYXR0cmlidXRlIGdlbmVyYXRvcnMgYEhfMCAuLi4gSF85YCBhbmQgYEpfMCAu Li4gSl85YCB3aGlsZSANCj4gYm90aCBkcmFmdC1pcnRmLWNmcmctYmJzLXNpZ25hdHVyZXMt MTAgDQo+IDxodHRwczovL3d3dy5pZXRmLm9yZy9hcmNoaXZlL2lkL2RyYWZ0LWlydGYtY2Zy Zy1iYnMtc2lnbmF0dXJlcy0xMC5odG1sI25hbWUtbWVzc2FnZS1nZW5lcmF0b3JzLTI+IA0K PiBhbmQgdGhlIHJlc3Qgb2bCoGRyYWZ0LWlydGYtY2ZyZy1iYnMtYmxpbmQtc2lnbmF0dXJl cy0wMiBzcGVsbHMgdGhlbSANCj4gYEhfMSAuLi4gSF8xMGAgYW5kIGBKXzEgLi4uIEpfMTBg Lg0KPg0KPiBFbWlsIEx1bmRiZXJnDQo+DQo+IFN0YWZmIEVuZ2luZWVyIHwgWXViaWNvIDxo dHRwOi8vd3d3Lnl1Ymljby5jb20vPg0KPg0KPg0KPg0KPg0KPiBEZW4gdGlzIDI2IG1haiAy MDI2IGtsIDIyOjI4IHNrcmV2IEVtaWwgTHVuZGJlcmcgPGVtaWxAeXViaWNvLmNvbT46DQo+ DQo+ICAgICBIaSwNCj4NCj4gICAgIEkndmUgcmVjZW50bHkgYmVlbiBpbXBsZW1lbnRpbmcg IkJsaW5kIEJCUyBTaWduYXR1cmVzIg0KPiAgICAgKGRyYWZ0LWlydGYtY2ZyZy1iYnMtYmxp bmQtc2lnbmF0dXJlcy0wMikNCj4gICAgIDxodHRwczovL3d3dy5pZXRmLm9yZy9hcmNoaXZl L2lkL2RyYWZ0LWlydGYtY2ZyZy1iYnMtYmxpbmQtc2lnbmF0dXJlcy0wMi5odG1sPg0KPiAg ICAgWzFdIGFuZCB3b3VsZCBsaWtlIHRvIHNoYXJlIHNvbWUgaXNzdWVzIEkgZm91bmQuDQo+ DQo+ICAgICBJbnRlcm9wZXJhYmlsaXR5IGlzc3VlczoNCj4NCj4gICAgIC0gSW4gYEZpbmFs aXplQmxpbmRTaWduYCwgdGhlIHN0YXRlbWVudCBgMy4gaWYgTCA8PSAwIG9yIE0gPD0wLA0K PiAgICAgcmV0dXJuIElOVkFMSURgIGZhaWxzIGZvciB0aGUgQkxTMTItMzgxLVNIQS0yNTYg c2lnbmF0dXJlIHRlc3QNCj4gICAgIHZlY3RvciAidmFsaWQgbm8gcHJvdmVyIGNvbW1pdHRl ZCBtZXNzYWdlcywgbm8gc2lnbmVyIG1lc3NhZ2VzDQo+ICAgICBzaWduYXR1cmUiDQo+ICAg ICA8aHR0cHM6Ly93d3cuaWV0Zi5vcmcvYXJjaGl2ZS9pZC9kcmFmdC1pcnRmLWNmcmctYmJz LWJsaW5kLXNpZ25hdHVyZXMtMDIuaHRtbCNuYW1lLXZhbGlkLW5vLXByb3Zlci1jb21taXR0 ZWQtbT4NCj4gICAgIFszXS4gVGhpcyBzaG91bGQgcHJlc3VtYWJseSBiZSBgaWYgTCA8IDAg b3IgTSA8IDBgPw0KPg0KPiAgICAgLSBJbiBgRmluYWxpemVCbGluZFNpZ25gLCB0aGUgZGVz Y3JpcHRpb24gb2YgYGJsaW5kX2dlbmVyYXRvcnNgDQo+ICAgICBzdGF0ZXMgaXQgZGVmYXVs dHMgdG8gZW1wdHkgYXJyYXksIGJ1dCB0aGUgcHJvY2VkdXJlIHJlcXVpcmVzIHRoYXQNCj4g ICAgIGBNID4gMGAgd2hpY2ggZmFpbHMgaWYgYGJsaW5kX2dlbmVyYXRvcnNgIGlzIGVtcHR5 LiAoVGhpcyBpcw0KPiAgICAgb2J2aW91c2x5IHJlbGF0ZWQgdG8gdGhlIHByZXZpb3VzIGlz c3VlKQ0KPg0KPiAgICAgLSBJbiBgQmxpbmRQcm9vZkdlbmAsIHNvbWV0aGluZyBzZWVtcyB0 byBiZSB3cm9uZyB3aGVuDQo+ICAgICBgc2VjcmV0X3Byb3Zlcl9ibGluZGAgaXMgbnVsbC4g SSBoYXZlIG5vdCBiZWVuIGFibGUgdG8gcmVwcm9kdWNlDQo+ICAgICBub3IgdmVyaWZ5IHRo ZSBwcm9vZiB0ZXN0IHZlY3RvciAiOS4xLjUuOC4gdmFsaWQgYWxsIHByb3Zlcg0KPiAgICAg Y29tbWl0dGVkIG1lc3NhZ2VzIGFuZCBzaWduZXIgbWVzc2FnZXMgcmV2ZWFsZWQgcHJvb2Yi DQo+ICAgICA8aHR0cHM6Ly93d3cuaWV0Zi5vcmcvYXJjaGl2ZS9pZC9kcmFmdC1pcnRmLWNm cmctYmJzLWJsaW5kLXNpZ25hdHVyZXMtMDIuaHRtbCNuYW1lLXZhbGlkLWFsbC1wcm92ZXIt Y29tbWl0dGVkLW0+wqBbMl0uDQo+DQo+ICAgICDCoCDCoCBJdCBzZWVtcyB0byBtZSBsaWtl IGVpdGhlciB0aGUgYHByZXBhcmVfcGFyYW1ldGVyc2AgY2FsbCBuZWVkcw0KPiAgICAgdG8g cmV0dXJuIG9uZSBmZXdlciBnZW5lcmF0b3IgKGJlY2F1c2UgaXQgc2tpcHMgcmV0dXJuaW5n DQo+ICAgICBgc2VjcmV0X3Byb3Zlcl9ibGluZGAgYXMgYSBtZXNzYWdlIHNjYWxhciksIG9y IHRoZQ0KPiAgICAgYHNlY3JldF9wcm92ZXJfYmxpbmRgIGdlbmVyYXRvciBuZWVkcyB0byBi ZSBvbWl0dGVkIGZyb20NCj4gICAgIGBnZW5lcmF0b3JzYCBiZWZvcmUgcGFzc2luZyBpdCB0 byBgQkJTLkNvcmVQcm9vZkdlbmAsIGJ1dCBpdCBtYXkNCj4gICAgIGFsc28gYmUgc29tZXRo aW5nIGVsc2UuIEkgaGF2ZW4ndCBmb3VuZCBhIHdheSB0byBtYXRjaCB0aGUgdGVzdA0KPiAg ICAgdmVjdG9ycywgc28gSSdtIG5vdCBzdXJlIHdoYXQgY29ycmVjdGlvbiBpcyBuZWVkZWQu DQo+DQo+ICAgICAtIEluIGBwcmVwYXJlX3BhcmFtZXRlcnNgLCB0aGUgZGVzY3JpcHRpb24g b2YNCj4gICAgIGBzZWNyZXRfcHJvdmVyX2JsaW5kYCBzdGF0ZXMgaXQgZGVmYXVsdHMgdG8g emVybywgYnV0IHRoZQ0KPiAgICAgcHJvY2VkdXJlIGNoZWNrcyBgMy4gaWYgc2VjcmV0X3By b3Zlcl9ibGluZCAhPSBOT05FO2AuIEl0IGNhbid0IGJlDQo+ICAgICAiTk9ORSIgYXQgdGhp cyBwb2ludCBpZiBpdCBkZWZhdWx0cyB0byB6ZXJvLiBQZXJoYXBzIHRoaXMgc2hvdWxkDQo+ ICAgICBiZSBgaWYgc2VjcmV0X3Byb3Zlcl9ibGluZCAhPSAwO2AsIGJ1dCBJJ20gbm90IHN1 cmUgdGhhdCdzIGNvcnJlY3QNCj4gICAgIGVpdGhlci4gKFRoaXMgaXMgcmVsYXRlZCB0byB0 aGUgcHJldmlvdXMgaXNzdWUpDQo+DQo+ICAgICAtIEkgaGF2ZSBiZWVuIGFibGUgdG8gdmVy aWZ5IHRoZSBgc2lnbmF0dXJlYCBvZiBhbGwgb2YgdGhlDQo+ICAgICAiU2lnbmF0dXJlIFRl c3QgVmVjdG9ycyIsIGJ1dCBub3QgcmVwcm9kdWNlIGFueSBvZiB0aGUgYHNpZ25hdHVyZWAN Cj4gICAgIHZhbHVlcy4gTXkgYEJsaW5kU2lnbmAgb3V0cHV0cyB2ZXJpZnkgY29ycmVjdGx5 IHdpdGggbXkNCj4gICAgIGBWZXJpZnlCbGluZFNpZ25gIGltcGxlbWVudGF0aW9uLCBhbmQg bXkgYEJsaW5kU2lnbmANCj4gICAgIGltcGxlbWVudGF0aW9uIHByb2R1Y2VzIHRoZSBzYW1l IGBCYCBhbmQgYGRvbWFpbmAgdmFsdWVzIHNob3duIGFzDQo+ICAgICAiVHJhY2U6IiBpbiB0 aGUgdGVzdCB2ZWN0b3JzLCBzbyB0aGUgb25seSByZWFzb24gSSBjYW4gaW1hZ2luZSBmb3IN Cj4gICAgIGZhaWxpbmcgdG8gcmVwcm9kdWNlIHRoZSBzaWduYXR1cmVzIGlzIHRoYXQgdGhl cmUgaXMgc29tZQ0KPiAgICAgZGlmZmVyZW5jZSBiZXR3ZWVuIGhvdyBteSBgRmluYWxpemVC bGluZFNpZ25gIGltcGxlbWVudGF0aW9uDQo+ICAgICBoYXNoZXMgdG8gYGVgIGFuZCBob3cg dGhlIHRlc3QgdmVjdG9ycyBoYXNoIHRvIGBlYC4NCj4NCj4gICAgIC0gSW4gZ2VuZXJhbCBJ IHRoaW5rIHRoZXJlIGFyZSB0b28gbWFueSBvcHRpb25hbCBwYXJhbWV0ZXJzLA0KPiAgICAg ZXNwZWNpYWxseSBpbiB0aGUgaW50ZXJuYWwgcHJvY2VkdXJlcy4gSSBkb24ndCB0aGluayB0 aGUgZGVmYXVsdHMNCj4gICAgIHNlZW0gcGFydGljdWxhcmx5IHVzZWZ1bCwgd2hpY2ggd2Vp Z2hzIHBvb3JseSBhZ2FpbnN0IHRoZSB2ZXJ5DQo+ICAgICByZWFsIG9wcG9ydHVuaXR5IGZv ciBtaXNhbGlnbm1lbnRzIChzZWUgdGhlIGBzZWNyZXRfcHJvdmVyX2JsaW5kYA0KPiAgICAg aXNzdWUgYWJvdmUpIGFuZCBtaXNpbnRlcnByZXRhdGlvbnMgdGhhdCBkZWZhdWx0cyBpbnRy b2R1Y2UuIChJDQo+ICAgICBnYXZlIGEgc2ltaWxhciBjcml0aXF1ZSBvZiBvcHRpb25hbCBw YXJhbWV0ZXJzIGluDQo+ICAgICBkcmFmdC1pcnRmLWNmcmctYmJzLXNpZ25hdHVyZXMtMDgN Cj4gICAgIDxodHRwczovL21haWxhcmNoaXZlLmlldGYub3JnL2FyY2gvbXNnL2NmcmcvMlh1 SzVCb0F5LVdqS1dqeldNM08xOVZyeTZnLz4NCj4gICAgIGVhcmxpZXIpLg0KPg0KPg0KPiAg ICAgU3Vic3RhbnRpdmUgYnV0IGVkaXRvcmlhbCBpc3N1ZXM6DQo+DQo+ICAgICAtIEluIHRo ZSByZXR1cm4gc3RhdGVtZW50IG9mIHRoZSBgQ29tbWl0YCBwcm9jZWR1cmUsIHRoZQ0KPiAg ICAgYGNvbW1pdHRlZF9tZXNzYWdlX3NjYWxhcnNgIGFuZCBgYmxpbmRfZ2VuZXJhdG9yc2Ag YXJndW1lbnRzIGFyZQ0KPiAgICAgaW4gcmV2ZXJzZSBvcmRlciBjb21wYXJlZCB0byB0aGUg YENvcmVDb21taXRgIHByb2NlZHVyZSBkZWZpbml0aW9uLg0KPiAgICAgLSBJbiBgQmxpbmRQ cm9vZlZlcmlmeWAsIGRlc2NyaXB0aW9ucyBvZg0KPiAgICAgYGRpc2Nsb3NlZF9jb21taXR0 ZWRfbWVzc2FnZXNgIGFuZCBgZGlzY2xvc2VkX2NvbW1pdHRlZF9pbmRleGVzYA0KPiAgICAg YXJlIG1pc3NpbmcuDQo+ICAgICAtIEluIGBDb3JlQ29tbWl0YCwgdGhlICJPdXRwdXRzOiIg ZGVmaW5pdGlvbiBpcyBtaXNzaW5nLg0KPiAgICAgLSBJbiBgQ29yZUNvbW1pdGAsIGAxLiBN ID0gbGVuZ3RoKGNvbW1pdHRlZF9tZXNzYWdlcylgIHJlZmVyZW5jZXMNCj4gICAgIGEgdmFy aWFibGUgYGNvbW1pdHRlZF9tZXNzYWdlc2Agd2hpY2ggZG9lcyBub3QgZXhpc3QuIFNob3Vs ZA0KPiAgICAgcHJvYmFibHkgYmUgYGNvbW1pdHRlZF9zY2FsYXJzYD8NCj4gICAgIC0gSW4g YHByZXBhcmVfcGFyYW1ldGVyc2AsIGRlc2NyaXB0aW9ucyBvZiBgZ2VuZXJhdG9yc19udW1i ZXJgIGFuZA0KPiAgICAgYGJsaW5kX2dlbmVyYXRvcnNfbnVtYmVyYCBhcmUgbWlzc2luZy4N Cj4gICAgIC0gSW4gYGNhbGN1bGF0ZV9ibGluZF9jaGFsbGVuZ2VgLCB0aGUgIk91dHB1dHM6 IiBkZWZpbml0aW9uIGlzDQo+ICAgICBtaXNzaW5nLg0KPiAgICAgLSBJbiB0aGUgIkJsaW5k IEdlbmVyYXRvcnMiIHN1YnNlY3Rpb24gb2YgIlRlc3QgVmVjdG9ycyIsIGBRMWANCj4gICAg IHNob3VsZCBwcm9iYWJseSBiZSBgUTJgIChgUV8yYCk/IFFfMSBpcyBjb25zaXN0ZW50bHkg dXNlZCBpbiB0aGUNCj4gICAgIHByb2NlZHVyZXMgdG8gZGVub3RlIG5vbi1ibGluZCBnZW5l cmF0b3JzLg0KPiAgICAgLSBJbiAiU2lnbmF0dXJlIFRlc3QgVmVjdG9ycyIgZm9yIEJMUzEy LTM4MS1TSEEtMjU2LCAidmFsaWQgbm8NCj4gICAgIHByb3ZlciBjb21taXR0ZWQgbWVzc2Fn ZXMsIG11bHRpcGxlIHNpZ25lciBtZXNzYWdlcyBzaWduYXR1cmUiLA0KPiAgICAgdGhlICJU cmFjZToiIGFwcGVhcnMgdG8gaGF2ZSBtaXNsYWJlbGVkIHRoZSBgQmAgdmFsdWUgYXMgYGRv bWFpbg0KPiAgICAgPWAuIEkgZG9uJ3Qga25vdyB3aGF0IHRoZSB2YWx1ZSBsYWJlbGVkIGBC ID1gIGlzLCBlaXRoZXIuDQo+ICAgICAtIFNlY3Rpb24gIjkuMS41LjguIHZhbGlkIGFsbCBw cm92ZXIgY29tbWl0dGVkIG1lc3NhZ2VzIGFuZCBzaWduZXINCj4gICAgIG1lc3NhZ2VzIHJl dmVhbGVkIHByb29mIiBoYXMgdGhlIHNhbWUgdGl0bGUgYXMgIjkuMS41LjEuIHZhbGlkIGFs bA0KPiAgICAgcHJvdmVyIGNvbW1pdHRlZCBtZXNzYWdlcyBhbmQgc2lnbmVyIG1lc3NhZ2Vz IHJldmVhbGVkIHByb29mIg0KPiAgICAgd2hpY2ggZG9lcyBub3Qgc2VlbSB0byBhY2N1cmF0 ZWx5IGRlc2NyaWJlIHRoZSB0ZXN0IHZlY3RvciB2YWx1ZXMNCj4gICAgIGluIDkuMS41Ljgg KG5vdCBhbGwgc2lnbmVyIG1lc3NhZ2VzIGFyZSByZXZlYWxlZCkuDQo+ICAgICAtIEluIHRl c3QgdmVjdG9ycyB3aXRoIGFycmF5cyBvZiBtdWx0aXBsZSB2YWx1ZXMgKGZvciBleGFtcGxl DQo+ICAgICBgY29tbWl0dGVkTWVzc2FnZXNgKSwgdGhlIGZvcm1hdHRpbmcgaXMgdmVyeSBw b29yIGFuZCBpdCdzIGVhc3kgdG8NCj4gICAgIG1pc3MgdHJhaWxpbmcgZW1wdHkgb2N0ZXQg c3RyaW5ncy4gSWRlYWxseSwgdmFsdWVzIHRoYXQgZml0IG9uIG9uZQ0KPiAgICAgbGluZSBz aG91bGQgbm90IGJlIGxpbmUtd3JhcHBlZCBhbmQgZWFjaCB2YWx1ZSBzaG91bGQgYmUgZGVs aW1pdGVkDQo+ICAgICBjbGVhcmx5IHNvIHRoYXQgZW1wdHkgb2N0ZXQgc3RyaW5ncyBhcmUg Y2xlYXJseSB2aXNpYmxlLiBGb3INCj4gICAgIGV4YW1wbGUsIGNvbnNpZGVyIHVzaW5nIENE REwgc3ludGF4DQo+ICAgICA8aHR0cHM6Ly93d3cucmZjLWVkaXRvci5vcmcvaW5mby9yZmM4 NjEwLz4gWzVdDQo+ICAgICAoYGgnNTk4Mjk2NzgyMWRhM2M1OTgzNDk2MjE0ZGYzNmFhNWU1 OGRlNmZhMjUzMTRhZjRjZjRjMDA0MDA3NzlmMDhjMydgKQ0KPiAgICAgZm9yIHRlc3QgdmVj dG9yIHZhbHVlcyAodGhpcyBhbGxvd3MgaW50ZXJuYWwgd2hpdGVzcGFjZSwgYW5kIHdvdWxk DQo+ICAgICBhbHNvIGVuYWJsZSBkaXNhbWJpZ3VhdGluZyBvY3RldCBzdHJpbmdzIGFuZCBo ZXgtZW5jb2RlZCBsYXJnZQ0KPiAgICAgaW50ZWdlcnMsIGFtb25nIG90aGVyIHRoaW5ncyku DQo+ICAgICAtIEEgZmV3IG1vcmUgb2J2aW91cyBvciB1bmFtYmlndW91cyBlcnJvcnMsIEkg aGF2ZSBvcGVuZWQgcHVsbA0KPiAgICAgcmVxdWVzdHMgb24gR2l0SHViIHRvIGZpeCB0aGVz ZTogIzE0DQo+ICAgICA8aHR0cHM6Ly9naXRodWIuY29tL2NmcmcvZHJhZnQtaXJ0Zi1jZnJn LWJicy1ibGluZC1zaWduYXR1cmVzL3B1bGwvMTQ+LA0KPiAgICAgIzE1DQo+ICAgICA8aHR0 cHM6Ly9naXRodWIuY29tL2NmcmcvZHJhZnQtaXJ0Zi1jZnJnLWJicy1ibGluZC1zaWduYXR1 cmVzL3B1bGwvMTU+LA0KPiAgICAgIzE2DQo+ICAgICA8aHR0cHM6Ly9naXRodWIuY29tL2Nm cmcvZHJhZnQtaXJ0Zi1jZnJnLWJicy1ibGluZC1zaWduYXR1cmVzL3B1bGwvMTY+LA0KPiAg ICAgIzE3DQo+ICAgICA8aHR0cHM6Ly9naXRodWIuY29tL2NmcmcvZHJhZnQtaXJ0Zi1jZnJn LWJicy1ibGluZC1zaWduYXR1cmVzL3B1bGwvMTc+LA0KPiAgICAgIzE4DQo+ICAgICA8aHR0 cHM6Ly9naXRodWIuY29tL2NmcmcvZHJhZnQtaXJ0Zi1jZnJnLWJicy1ibGluZC1zaWduYXR1 cmVzL3B1bGwvMTg+LA0KPiAgICAgIzE5DQo+ICAgICA8aHR0cHM6Ly9naXRodWIuY29tL2Nm cmcvZHJhZnQtaXJ0Zi1jZnJnLWJicy1ibGluZC1zaWduYXR1cmVzL3B1bGwvMTk+Lg0KPg0K PiAgICAgU3ViamVjdGl2ZSBzdHlsZSBjb21tZW50czoNCj4NCj4gICAgIC0gVGhlIGBDb21t aXRgIHByb2NlZHVyZSBzZWVtcyBsaWtlIGl0J3MgcGFydCBvZiB0aGUgInB1YmxpYyINCj4g ICAgIGludGVyZmFjZSwgc28gaXQgc2VlbXMgbGlrZSBpdCBzaG91bGRuJ3QgZXhwb3NlIGBh cGlfaWRgIGFzIGEgZnJlZQ0KPiAgICAgcGFyYW1ldGVyIChpbnN0ZWFkIGxldHRpbmcgaXQg YmUgZml4ZWQgYnkgdGhlIGNpcGhlcnN1aXRlLCBsaWtlDQo+ICAgICBgQmxpbmRTaWduYCBl dGMuKT8NCj4gICAgIC0gVGhlIGBkZXNlcmlhbGl6ZV9hbmRfdmFsaWRhdGVfY29tbWl0YCBw cm9jZWR1cmUgc2VlbXMgbW9yZSBsaWtlDQo+ICAgICBhbiAiaW50ZXJuYWwiIHByb2NlZHVy ZSwgc28gaXQgc2hvdWxkIHBlcmhhcHMgYmUgdW5kZXIgIkNvcmUNCj4gICAgIE9wZXJhdGlv bnMiIG9yICJVdGlsaXRpZXMiPyBJdHMgY3VycmVudCBwb3NpdGlvbiBhbG9uZ3NpZGUNCj4g ICAgIGBDb21taXRgIG1ha2VzIGl0IHNlZW0gZXF1YWxseSAicHVibGljIi4NCj4gICAgIC0g SW4gdGhlICJUZXN0IFZlY3RvcnMiIHNlY3Rpb24sIHRoaXMgZG9jdW1lbnQgaGFzIHRoZSBz dWJzZWN0aW9ucw0KPiAgICAgaW4gdGhlIG9yZGVyIFtTSEEtMjU2LCBTSEFLRS0yNTZdIHdo aWxlDQo+ICAgICBkcmFmdC1pcnRmLWNmcmctYmJzLXNpZ25hdHVyZXMtMTAgaGFzIHRoZW0g aW4gb3Bwb3NpdGUgb3JkZXIuIFRoaXMNCj4gICAgIG1heSBiZSBhbiBvcHBvcnR1bml0eSBm b3IgY29uZnVzaW9uLg0KPiAgICAgLSBJbiB0aGUgIkdlbmVyYXRvcnMiIHN1YnNlY3Rpb24g b2YgIlRlc3QgVmVjdG9ycyIsIHBlcmhhcHMgaXQncw0KPiAgICAgd29ydGggcG9pbnRpbmcg b3V0IHRoYXQgYFAxYCBpcyB0aGUgc2FtZSBgUDFgIGFzIGluDQo+ICAgICBkcmFmdC1pcnRm LWNmcmctYmJzLXNpZ25hdHVyZXMtMTAgYnV0IGBRMWAgaXMgTk9UIHRoZSBzYW1lIChzaW5j ZQ0KPiAgICAgaXQncyBnZW5lcmF0ZWQgYnkgYSBkaWZmZXJlbnQgYGFwaV9pZGApPw0KPiAg ICAgLSBJbiB0aGUgIkJsaW5kIEdlbmVyYXRvcnMiIHN1YnNlY3Rpb24gb2YgIlRlc3QgVmVj dG9ycyIsIGRvZXMgUDENCj4gICAgIG5lZWQgdG8gYmUgcmVwZWF0ZWQgZnJvbSB0aGUgcHJl Y2VkaW5nICJHZW5lcmF0b3JzIiBzZWN0aW9uPyBBbHNvDQo+ICAgICBpdCBkb2Vzbid0IHF1 aXRlIHNlZW0gYXQgaG9tZSBpbiBlaXRoZXIgc2VjdGlvbiBzaW5jZSBpdCdzDQo+ICAgICBn ZW5lcmF0ZWQgYnkgaXRzIG93biBzZXBhcmF0ZSBEU1RzIGluIGBjcmVhdGVfZ2VuZXJhdG9y c2AuDQo+ICAgICAtIEluIHRoZSAiVGVzdCBWZWN0b3JzIiBzZWN0aW9uLCBpdCdzIG5vdCBh bHdheXMgb2J2aW91cyB3aGljaA0KPiAgICAgdmFsdWVzIGFyZSBpbnB1dHMgYW5kIHdoaWNo IGFyZSBvdXRwdXRzOg0KPiAgICAgwqAgwqAgLSBJbiAiQ29tbWl0bWVudCIsIHRoZSBwb3Np dGlvbiBvZiBgcHJvdmVyQmxpbmRgIGFsb25nc2lkZQ0KPiAgICAgYGNvbW1pdHRlZE1lc3Nh Z2VzYCBtYWtlcyBpdCBsb29rIGxpa2UgYHByb3ZlckJsaW5kYCBpcyBhbiBpbnB1dC4NCj4g ICAgIC0gSW4gdGhlICJQcm9vZiBUZXN0IFZlY3RvcnMiIHNlY3Rpb24sIHRoZSBsaXN0aW5n cyBvZg0KPiAgICAgYHJldmVhbGVkTWVzc2FnZXNgIGFuZCBgcmV2ZWFsZWRDb21taXR0ZWRN ZXNzYWdlc2AgYXJlIGEgYml0DQo+ICAgICBtaXNsZWFkaW5nLCBzaW5jZSB0aGUgdGVzdCBu ZWVkcyB0byByZXBlYXQgX2FsbF8gdGhlIGBtZXNzYWdlc2ANCj4gICAgIGFuZCBgY29tbWl0 dGVkTWVzc2FnZXNgIGZyb20gIlNpZ25hdHVyZSBUZXN0IFZlY3RvcnMiLiBDb25zaWRlcg0K PiAgICAgaW5zdGVhZCByZXBlYXRpbmcgKG9yIGV4cGxpY2l0bHkgcmVmZXJpbmcgYmFjayB0 bykgYG1lc3NhZ2VzYCBhbmQNCj4gICAgIGBjb21taXR0ZWRNZXNzYWdlc2AgYW5kIGV4cGxp Y2l0bHkgbGlzdGluZyBgZGlzY2xvc2VkX2luZGV4ZXNgIGFuZA0KPiAgICAgYGRpc2Nsb3Nl ZF9jb21taXRtZW50X2luZGV4ZXNgIGFzIHNlcGFyYXRlIHZhbHVlcy4NCj4gICAgIC0gSW4g dGhlICJQcm9vZiBUZXN0IFZlY3RvcnMiIHNlY3Rpb24sIGBjb21taXRtZW50V2l0aFByb29m YCBhbmQNCj4gICAgIGBwcm92ZXJCbGluZGAgc2VlbSBsaWtlIHVubmVjZXNzYXJ5IGlucHV0 cyAodGhleSBhcmUgYWxyZWFkeQ0KPiAgICAgY292ZXJlZCBieSB0aGUgc2lnbmF0dXJlKT8N Cj4gICAgIC0gSW4gdGhlICJUZXN0IFZlY3RvcnMiIHNlY3Rpb24sIHZhcmlhYmxlcyBhcmUg c3BlbGxlZCBkaWZmZXJlbnRseQ0KPiAgICAgdGhhbiB0aGV5IGFyZSBlbHNld2hlcmUuIFRo aXMgaXMgbm90IGEgYmlnIHByb2JsZW0sIGJ1dCBpdCBtYWtlcw0KPiAgICAgaXQgaGFyZGVy IHRvIHNlYXJjaCBmb3IgdGhlIHZhbHVlcyB0aHJvdWdob3V0IGFuZCBiZXR3ZWVuDQo+ICAg ICBkb2N1bWVudHMgaWYgdGhleSBhcmUgbm90IGNvbnNpc3RlbnRseSBzcGVsbGVkOg0KPiAg ICAgwqAgwqAgLSBgUTFgIGlzIGNvbnNpc3RlbnRseSBzcGVsbGVkIGBRXzFgIGVsc2V3aGVy ZSBpbiBib3RoIHRoaXMNCj4gICAgIGRvY3VtZW50IGFuZCBpbiBkcmFmdC1pcnRmLWNmcmct YmJzLXNpZ25hdHVyZXMtMTANCj4gICAgIMKgIMKgIC0gYGNvbW1pdHRlZE1lc3NhZ2VzYCBp cyBzcGVsbGVkIGBjb21taXR0ZWRfbWVzc2FnZXNgIGVsc2V3aGVyZQ0KPiAgICAgwqAgwqAg LSBgcHJvdmVyQmxpbmRgIGlzIHNwZWxsZWQgYHNlY3JldF9wcm92ZXJfYmxpbmRgIGVsc2V3 aGVyZQ0KPiAgICAgwqAgwqAgLSBgY29tbWl0bWVudFdpdGhQcm9vZmAgaXMgc3BlbGxlZCBg Y29tbWl0bWVudF93aXRoX3Byb29mYA0KPiAgICAgZWxzZXdoZXJlDQo+ICAgICDCoCDCoCAt IGBzX3RpbGRlYCBhbmQgYG1fdGlsZGVzYCBhcmUgc3BlbGxlZCBgc35gIGFuZCBgbX5gIChg bX5faWApDQo+ICAgICBlbHNld2hlcmUNCj4gICAgIMKgIMKgIC0gYHNlY3JldEtleWAgYW5k IGBwdWJsaWNLZXlgIGFyZSBzcGVsbGVkIGBTS2AgYW5kIGBQS2AgZWxzZXdoZXJlDQo+ICAg ICDCoCDCoCAtIGBzaWduZXJQdWJsaWNLZXlgIGlzIHNwZWxsZWQgYFBLYCBlbHNld2hlcmUN Cj4gICAgIMKgIMKgIC0gYHByZXNlbnRhdGlvbkhlYWRlcmAgaXMgc3BlbGxlZCBgcHJlc2Vu dGF0aW9uX2hlYWRlcmAgZWxzZXdoZXJlDQo+ICAgICDCoCDCoCAtIGByZXZlYWxlZE1lc3Nh Z2VzYCBpcyBzcGVsbGVkIGBkaXNjbG9zZWRfbWVzc2FnZXNgIGVsc2V3aGVyZQ0KPiAgICAg wqAgwqAgLSBgcmV2ZWFsZWRDb21taXR0ZWRNZXNzYWdlc2AgaXMgc3BlbGxlZA0KPiAgICAg YGRpc2Nsb3NlZF9jb21taXR0ZWRfbWVzc2FnZXNgIGVsc2V3aGVyZQ0KPiAgICAgwqAgwqAg LSBgcl8xYCwgYHJfMmAsIGBlX3RpbGRlYCwgYHIxX3RpbGRlYCBhbmQgYHIzX3RpbGRlYCBh cmUNCj4gICAgIHNwZWxsZWQgYHIxYCwgYHIyYCwgYGV+YCwgYHIxfmAgYW5kIGByM35gIGlu DQo+ICAgICBkcmFmdC1pcnRmLWNmcmctYmJzLXNpZ25hdHVyZXMtMTAgKHRob3VnaCBub3Qg aW4gaXRzIHRlc3QgdmVjdG9ycw0KPiAgICAgc2VjdGlvbiwgaG1tLi4uKQ0KPiAgICAgwqAg wqAgLSBgbV90aWxkZV9zY2FsYXJzYCBpcyBzcGVsbGVkIGBtfmAgKGBtfl9pYCkgZWxzZXdo ZXJlDQo+ICAgICDCoCDCoCAtIEluIHRoZSAiQ29tbWl0bWVudCIgc3Vic2VjdGlvbnMsIGBz ZWVkYCBhbmQgYGRzdGAgYXJlDQo+ICAgICBzcGVsbGVkIGRpZmZlcmVudGx5IGZyb20gYFNF RURgIGFuZCBgRFNUYCBpbg0KPiAgICAgZHJhZnQtaXJ0Zi1jZnJnLWJicy1zaWduYXR1cmVz LTEwDQo+ICAgICAtIEluIHRoZSAiQ29tbWl0bWVudCIgc3Vic2VjdGlvbnMgb2YgIlRlc3Qg VmVjdG9ycyIsIHBlcmhhcHMgaXQNCj4gICAgIHdvdWxkIGJlIGFwcHJvcHJpYXRlIHRvIHJl ZmVyZW5jZSBzZWN0aW9uICI4LjEuIE1vY2tlZCBSYW5kb20NCj4gICAgIFNjYWxhcnMiIG9m IGRyYWZ0LWlydGYtY2ZyZy1iYnMtc2lnbmF0dXJlcw0KPiAgICAgPGh0dHBzOi8vd3d3Lmll dGYub3JnL2FyY2hpdmUvaWQvZHJhZnQtaXJ0Zi1jZnJnLWJicy1zaWduYXR1cmVzLTEwLmh0 bWwjbmFtZS1tb2NrZWQtcmFuZG9tLXNjYWxhcnM+wqBbNF0NCj4gICAgIGZvciB3aGF0IGBz ZWVkYCBhbmQgYGRzdGAgc2hvdWxkIGJlIHVzZWQgZm9yPw0KPg0KPiAgICAgVGhhbmsgeW91 IGZvciB5b3VyIGNvbnNpZGVyYXRpb24gYW5kIGZvciB5b3VyIHdvcmsgb24gdGhlIGRyYWZ0 IQ0KPiAgICAgUGxlYXNlIGxldCBtZSBrbm93IGlmIEkgY2FuIGhlbHAgaW4gc29tZSB3YXku DQo+DQo+ICAgICBbMV06DQo+ICAgICBodHRwczovL3d3dy5pZXRmLm9yZy9hcmNoaXZlL2lk L2RyYWZ0LWlydGYtY2ZyZy1iYnMtYmxpbmQtc2lnbmF0dXJlcy0wMi5odG1sDQo+ICAgICBb Ml06DQo+ICAgICBodHRwczovL3d3dy5pZXRmLm9yZy9hcmNoaXZlL2lkL2RodHRwczovL3d3 dy5yZmMtZWRpdG9yLm9yZy9pbmZvL3JmYzg2MTAvaHR0cHM6Ly93d3cucmZjLWVkaXRvci5v cmcvaW5mby9yZmM4NjEwL3JhZnQtaXJ0Zi1jZnJnLWJicy1ibGluZC1zaWduYXR1cmVzLTAy Lmh0bWwjbmFtZS12YWxpZC1hbGwtcHJvdmVyLWNvbW1pdHRlZC1tDQo+ICAgICA8aHR0cHM6 Ly93d3cuaWV0Zi5vcmcvYXJjaGl2ZS9pZC9kcmFmdC1pcnRmLWNmcmctYmJzLWJsaW5kLXNp Z25hdHVyZXMtMDIuaHRtbCNuYW1lLXZhbGlkLWFsbC1wcm92ZXItY29tbWl0dGVkLW0+DQo+ ICAgICBbM106IGh0dHBzOi8vd3d3LmlldGYubyJ2YWxpZCBubyBwcm92ZXIgY29tbWl0dGVk IG1lc3NhZ2VzLCBubw0KPiAgICAgc2lnbmVyIG1lc3NhZ2VzDQo+ICAgICBzaWduYXR1cmUi cmcvYXJjaGl2ZS9pZC9kcmFmdC1pcnRmLWNmcmctYmJzLWJsaW5kLXNpZ25hdHVyZXMtMDIu aHRtbCNuYW1lLXZhbGlkLW5vLXByb3Zlci1jb21taXR0ZWQtbQ0KPiAgICAgPGh0dHBzOi8v d3d3LmlldGYub3JnL2FyY2hpdmUvaWQvZHJhZnQtaXJ0Zi1jZnJnLWJicy1ibGluZC1zaWdu YXR1cmVzLTAyLmh0bWwjbmFtZS12YWxpZC1uby1wcm92ZXItY29tbWl0dGVkLW0+DQo+ICAg ICBbNF06DQo+ICAgICBodHRwczovL3d3dy5pZXRmLm9yZy9hcmNoaXZlL2lkL2RyYWZ0LWly dGYtY2ZyZy1iYnMtc2lnbmF0dXJlcy0xMC5odG1sI25hbWUtbW9ja2VkLXJhbmRvbS1zY2Fs YXJzDQo+ICAgICBbNV06IGh0dHBzOi8vd3d3LnJmYy1lZGl0b3Iub3JnL2luZm8vcmZjODYx MC8NCj4NCj4gICAgIEVtaWwgTHVuZGJlcmcNCj4NCj4gICAgIFN0YWZmIEVuZ2luZWVyIHwg WXViaWNvIDxodHRwOi8vd3d3Lnl1Ymljby5jb20vPg0KPg0KPg0KPg0KPiBfX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fXw0KPiBDRlJHIG1haWxpbmcg bGlzdCAtLWNmcmdAaXJ0Zi5vcmcNCj4gVG8gdW5zdWJzY3JpYmUgc2VuZCBhbiBlbWFpbCB0 b2NmcmctbGVhdmVAaXJ0Zi5vcmcNCi0tIA0KLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tDQoNCkRyLiBH cmVnIE0uIEJlcm5zdGVpbiwgaHR0cHM6Ly93d3cuZ3JvdHRvLW5ldHdvcmtpbmcuY29tDQoN CiYjODIwMzsNCg== --------------akX7UiJotPY0ozi5vxvxWiCk Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: quoted-printable

Thanks Emil. And thanks for the PRs on the drafts. We will try to get an update out in a week or two.

Best Regards

Greg B.
On 5/27/26 05:21, Emil Lundberg wrote:

One more thing I noticed now:

Substantive but editorial issues:
- In "Test Vectors", the "Generators" and "Blind Generators" sections spell the attribute generators `H_0 ... H_9` and `J_0 ... J_9` while both=C2=A0draft-irtf-cfrg-bbs-signatures-10 and the rest of=C2=A0draft-irtf-cfrg-bbs-blind-signatures-02 spells them `H_1 ... H_10` and `J_1 ... J_10`.

Emil Lundberg

Staff Engineer | Yubico=




Den tis 26 maj 2026 kl 22= :28 skrev Emil Lundberg <emil@yubico.com>:
Hi,

I've recently been implementing "Blind BBS Signatures" (draft-irtf-cfrg-bbs-blind-signatures-02) [1] and would like to share some issues I found.

Interoperability issues:

- In `FinalizeBlindSign`, the statement `3. if L <=3D = 0 or M <=3D0, return INVALID` fails for the BLS12-381-SHA-256 signature test vector "valid no prover committed messages, no signer messages signature" [3]. This should presumably be `if L < 0 or M < 0`?

- In `FinalizeBlindSign`, the description of `blind_generators` states it defaults to empty array, but the procedure requires that `M > 0` which fails if `blind_generators` is empty. (This is obviously related to the previous issue)

- In `BlindProofGen`, something seems to be wrong when `secret_prover_blind` is null. I have not been able to reproduce nor verify the proof test vector=C2=A0"9.1.5.8. valid all prover committed messages and signer messages revealed proof"=C2=A0[2].

=C2=A0 =C2=A0 It seems to me like either the `prepare_par= ameters` call needs to return one fewer generator (because it skips returning `secret_prover_blind` as a message scalar), or the `secret_prover_blind` generator needs to be omitted from `generators` before passing it to `BBS.CoreProofGen`, but it may also be something else. I haven't found a way to match the test vectors, so I'm not sure what correction is needed.

- In `prepare_parameters`, the description of `secret_prover_blind` states it defaults to zero, but the procedure checks `3. if secret_prover_blind !=3D NONE;`. It can't be "NONE" at this point if it defaults to zero. Perhaps this should be `if secret_prover_blind !=3D 0;`, but I'm not sure that's correct either. (This i= s related to the previous issue)

- I have been able to verify the `signature` of all of the "Signature Test Vectors", but not reproduce any of the `signature` values. My `BlindSign` outputs verify correctly with my `VerifyBlindSign` implementation, and my `BlindSign` implementation produces the same `B` and `domain` values shown as "Trace:" in the test vectors, so the only reason I can imagine for failing to reproduce the signatures is that there is some difference between how my `FinalizeBlindSign` implementation hashes to `e` and how the test vectors hash to `e`.

- In general I think there are too many optional parameters, especially in the internal procedures. I don't think the defaults seem particularly useful, which weighs poorly against the very real opportunity for misalignments (see the `secret_prover_blind` issue above) and misinterpretations that defaults introduce. (I gave a similar critique of optional parameters in draft-irtf-cfrg-bbs-signatures-08 earlier).


Substantive but editorial issues:

- In the return statement of the `Commit` procedure, the `committed_message_scalars` and `blind_generators` arguments are in reverse order compared to the `CoreCommit` procedure definition.
- In `BlindProofVerify`, descriptions of `disclosed_committed_messages` and `disclosed_committed_indexes` are missing.
- In `CoreCommit`, the "Outputs:" definition is missing.<= br> - In `CoreCommit`, `1. M =3D length(committed_messages)` references a variable `committed_messages` which does not exist. Should probably be `committed_scalars`?
- In `prepare_parameters`, descriptions of `generators_number` and `blind_generators_number` are missing.
- In `calculate_blind_challenge`, the "Outputs:" definition is missing.
- In the "Blind Generators" subsection of "Test Vectors", `Q1` should probably be `Q2` (`Q_2`)? Q_1 is consistently used in the procedures to denote non-blind generators.
- In "Signature Test Vectors" for BLS12-381-SHA-256, "valid no prover committed messages, multiple signer messages signature", the "Trace:" appears to have mislabeled the `B` value as `domain =3D`. I don't know what the value labeled `B =3D` is, either.
- Section "9.1.5.8. valid all prover committed messages and signer messages revealed proof" has the same title as "9.1.5.1. valid all prover committed messages and signer messages revealed proof" which does not seem to accurately describe the test vector values in 9.1.5.8 (not all signer messages are revealed).
- In test vectors with arrays of multiple values (for example `committedMessages`), the formatting is very poor and it's easy to miss trailing empty octet strings. Ideally, values that fit on one line should not be line-wrapped and each value should be delimited clearly so that empty octet strings are clearly visible. For example, consider using CDDL syntax [5] (`h'5982967821da3c5983496214df36aa5e58de6fa25314af4cf4c00= 400779f08c3'`) for test vector values (this allows internal whitespace, and would also enable disambiguating octet strings and hex-encoded large integers, among other things).
- A few more obvious or unambiguous errors, I have opened pull requests on GitHub to fix these: #14, #15, #16, #17, #18, #19.

Subjective style comments:

- The `Commit` procedure seems like it's part of the "public" interface, so it seems like it shouldn't expose `api_id` as a free parameter (instead letting it be fixed by the ciphersuite, like `BlindSign` etc.)?
- The `deserialize_and_validate_commit` procedure seems more like an "internal" procedure, so it should perhaps be under "Core Operations" or "Utilities"? Its current position alongside `Commit` makes it seem equally "public".
- In the "Test Vectors" section, this document has the subsections in the order [SHA-256, SHAKE-256] while draft-irtf-cfrg-bbs-signatures-10 has them in opposite order. This may be an opportunity for confusion.
- In the "Generators" subsection of "Test Vectors", perhaps it's worth pointing out that `P1` is the same `P1` as in draft-irtf-cfrg-bbs-signatures-10 but `Q1` is NOT the same (since it's generated by a different `api_id`)?
- In the "Blind Generators" subsection of "Test Vectors", does P1 need to be repeated from the preceding "Generators" section? Also it doesn't quite seem at home in either section since it's generated by its own separate DSTs in `create_generators`.
- In the "Test Vectors" section, it's not always obvious which values are inputs and which are outputs:
=C2=A0 =C2=A0 - In "Commitment", the position of `proverB= lind` alongside `committedMessages` makes it look like `proverBlind` is an input.
- In the "Proof Test Vectors" section, the listings of `revealedMessages` and `revealedCommittedMessages` are a bit misleading, since the test needs to repeat _all_ the `messages` and `committedMessages` from "Signature Test Vectors". Consider instead repeating (or explicitly refering back to) `messages` and `committedMessages` and explicitly listing `disclosed_indexes` and `disclosed_commitment_indexes` as separate values.
- In the "Proof Test Vectors" section, `commitmentWithProof` and `proverBlind` seem like unnecessary inputs (they are already covered by the signature)?
- In the "Test Vectors" section, variables are spelled differently than they are elsewhere. This is not a big problem, but it makes it harder to search for the values throughout and between documents if they are not consistently spelled:
=C2=A0 =C2=A0 - `Q1` is consistently spelled `Q_1` elsewh= ere in both this document and in draft-irtf-cfrg-bbs-signatures-10
=C2=A0 =C2=A0 - `committedMessages` is spelled `committed_messages` elsewhere
=C2=A0 =C2=A0 - `proverBlind` is spelled `secret_prover_b= lind` elsewhere
=C2=A0 =C2=A0 - `commitmentWithProof` is spelled `commitment_with_proof` elsewhere
=C2=A0 =C2=A0 - `s_tilde` and `m_tildes` are spelled `s~`= and `m~` (`m~_i`) elsewhere
=C2=A0 =C2=A0 - `secretKey` and `publicKey` are spelled `= SK` and `PK` elsewhere
=C2=A0 =C2=A0 - `signerPublicKey` is spelled `PK` elsewhe= re
=C2=A0 =C2=A0 - `presentationHeader` is spelled `presentation_header` elsewhere
=C2=A0 =C2=A0 - `revealedMessages` is spelled `disclosed_= messages` elsewhere
=C2=A0 =C2=A0 - `revealedCommittedMessages` is spelled `disclosed_committed_messages` elsewhere
=C2=A0 =C2=A0 - `r_1`, `r_2`, `e_tilde`, `r1_tilde` and `= r3_tilde` are spelled `r1`, `r2`, `e~`, `r1~` and `r3~` in draft-irtf-cfrg-bbs-signatures-10 (though not in its test vectors section, hmm...)
=C2=A0 =C2=A0 - `m_tilde_scalars` is spelled `m~` (`m~_i`= ) elsewhere
=C2=A0 =C2=A0 - In the "Commitment" subsections, `seed` a= nd `dst` are spelled differently from `SEED` and `DST` in draft-irtf-cfrg-bbs-signatures-10
- In the "Commitment" subsections of "Test Vectors", perhaps it would be appropriate to reference section=C2=A0= "8.1. Mocked Random Scalars" of draft-irtf-cfrg-bbs-signatures=C2=A0[4] for what `s= eed` and `dst` should be used for?


Emil Lundberg

Staff Engineer | Yubico= 



__________________________=
_____________________
CFRG mailing list -- cfrg@irtf.org
To unsubscribe send an email to cfrg-leave@irtf.org
--

Dr. Greg M. Bernstein, https://www.grotto-networking= =2Ecom

&#8203;
--------------akX7UiJotPY0ozi5vxvxWiCk-- --------------yeAA0AN8dJPVHEbwBzYHjnDP Content-Type: application/pgp-keys; name="OpenPGP_0x8B23AE22C45266F3.asc" Content-Disposition: attachment; filename="OpenPGP_0x8B23AE22C45266F3.asc" Content-Description: OpenPGP public key Content-Transfer-Encoding: quoted-printable -----BEGIN PGP PUBLIC KEY BLOCK----- xjMEZwLKYRYJKwYBBAHaRw8BAQdA8IOoK17s6mGoiBSzwOyaOoGOgWU8OumDTSof GGhGQUjNLEdyZWcgQmVybnN0ZWluIDxncmVnYkBncm90dG8tbmV0d29ya2luZy5j b20+wo8EExYIADcWIQRLzhHbMKsLgNK7vMOLI64ixFJm8wUCZwLKYQUJBaOagAIb AwQLCQgHBRUICQoLBRYCAwEAAAoJEIsjriLEUmbz0NIA/iMpT0PHcvdfHGorTCR8 wYfmafZ5dRgOyIknaepT9SEnAQDvNzl1YT1LvhYiB+RqlMCXxCC96vkuoxlC5fuU m6pzB844BGcCymISCisGAQQBl1UBBQEBB0BbfXd2chNynacbUQ/8JmIBWUcYSnBc AecizPRRLJOIQwMBCAfCfgQYFggAJhYhBEvOEdswqwuA0ru8w4sjriLEUmbzBQJn AspiBQkFo5qAAhsMAAoJEIsjriLEUmbzlYgA/05UvcaXFGdkD+dFChBP9+u0MbsG OkLdZTZQvEQamZWvAQDhiTGdsF40gJFVMg1H56/9r4cpjnymbociUXD2Bgg0Aw=3D=3D =3DMK6S -----END PGP PUBLIC KEY BLOCK----- --------------yeAA0AN8dJPVHEbwBzYHjnDP-- --------------H2gqpBpeU95bXF03N3PEEHtl-- --------------UtNTJXmkTgp1DdmNnSaqsN3x Content-Type: application/pgp-signature; name="OpenPGP_signature.asc" Content-Description: OpenPGP digital signature Content-Disposition: attachment; filename="OpenPGP_signature.asc" -----BEGIN PGP SIGNATURE----- wnsEABYIACMWIQRLzhHbMKsLgNK7vMOLI64ixFJm8wUCahcveAUDAAAAAAAKCRCLI64ixFJm86Gl AP4nZB80Ps4ANDBHBatP1D8Pr9PvDX0KtvHEtFRPl0EGGwEA+Dm4aqBPikU7SmtvcRgh5V//U7nw G/xKm+FVlFr4ZgY= =Q4WV -----END PGP SIGNATURE----- --------------UtNTJXmkTgp1DdmNnSaqsN3x--