Return-Path: X-Original-To: jose@ietfa.amsl.com Delivered-To: jose@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C1B821A6FB5; Fri, 24 Oct 2014 23:35:45 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.902 X-Spam-Level: X-Spam-Status: No, score=-1.902 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id qtk8Gi8PyIVV; Fri, 24 Oct 2014 23:35:42 -0700 (PDT) Received: from na01-bn1-obe.outbound.protection.outlook.com (mail-bn1bon0794.outbound.protection.outlook.com [IPv6:2a01:111:f400:fc10::1:794]) (using TLSv1 with cipher ECDHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id C368C1A8029; Fri, 24 Oct 2014 23:35:41 -0700 (PDT) Received: from BY2PR03CA008.namprd03.prod.outlook.com (10.255.93.25) by BN3PR0301MB1201.namprd03.prod.outlook.com (25.161.207.154) with Microsoft SMTP Server (TLS) id 15.1.6.9; Sat, 25 Oct 2014 06:35:18 +0000 Received: from BL2FFO11FD015.protection.gbl (10.255.93.4) by BY2PR03CA008.outlook.office365.com (10.255.93.25) with Microsoft SMTP Server (TLS) id 15.1.6.9 via Frontend Transport; Sat, 25 Oct 2014 06:35:17 +0000 Received: from mail.microsoft.com (131.107.125.37) by BL2FFO11FD015.mail.protection.outlook.com (10.173.160.223) with Microsoft SMTP Server (TLS) id 15.0.1049.20 via Frontend Transport; Sat, 25 Oct 2014 06:35:17 +0000 Received: from TK5EX14MBXC286.redmond.corp.microsoft.com ([169.254.1.93]) by TK5EX14HUBC103.redmond.corp.microsoft.com ([157.54.86.9]) with mapi id 14.03.0210.003; Sat, 25 Oct 2014 06:34:48 +0000 From: Mike Jones To: Richard Barnes Thread-Topic: [jose] Richard Barnes' Discuss on draft-ietf-jose-json-web-key-33: (with DISCUSS and COMMENT) Thread-Index: Ac/wHb1merf1mRWPSbS49MozAMuQDg== Date: Sat, 25 Oct 2014 06:34:47 +0000 Message-ID: <4E1F6AAD24975D4BA5B16804296739439BB262D8@TK5EX14MBXC286.redmond.corp.microsoft.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [157.54.51.37] Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-EOPAttributedMessage: 0 X-Forefront-Antispam-Report: CIP:131.107.125.37; CTRY:US; IPV:CAL; IPV:NLI; IPV:NLI; EFV:NLI; SFV:NSPM; SFS:(10019020)(6009001)(438002)(189002)(377454003)(24454002)(13464003)(52044002)(199003)(43784003)(51704005)(76482002)(99396003)(120916001)(104016003)(230783001)(26826002)(33656002)(85306004)(31966008)(47776003)(64706001)(20776003)(66066001)(86362001)(86612001)(92566001)(92726001)(55846006)(54356999)(50986999)(84676001)(85806002)(15975445006)(85852003)(2656002)(19580405001)(69596002)(6806004)(44976005)(68736004)(19580395003)(87936001)(15202345003)(50466002)(107046002)(95666004)(106466001)(110136001)(21056001)(81156004)(97736003)(77096002)(80022003)(46102003)(4396001)(23676002); DIR:OUT; SFP:1102; SCL:1; SRVR:BN3PR0301MB1201; H:mail.microsoft.com; FPR:; MLV:ovrnspm; PTR:InfoDomainNonexistent; MX:1; A:1; LANG:en; X-Microsoft-Antispam: UriScan:; X-Microsoft-Antispam: BCL:0;PCL:0;RULEID:;SRVR:BN3PR0301MB1201; X-O365ENT-EOP-Header: Message processed by - O365_ENT: Allow from ranges (Engineering ONLY) X-Forefront-PRVS: 0375972289 Received-SPF: Pass (protection.outlook.com: domain of microsoft.com designates 131.107.125.37 as permitted sender) receiver=protection.outlook.com; client-ip=131.107.125.37; helo=mail.microsoft.com; Authentication-Results: spf=pass (sender IP is 131.107.125.37) smtp.mailfrom=Michael.Jones@microsoft.com; X-OriginatorOrg: microsoft.onmicrosoft.com Archived-At: http://mailarchive.ietf.org/arch/msg/jose/GLw9zYYzU0H9VRUe4gvdy_v--6o Cc: "jose-chairs@tools.ietf.org" , "draft-ietf-jose-json-web-key@tools.ietf.org" , The IESG , "jose@ietf.org" Subject: Re: [jose] Richard Barnes' Discuss on draft-ietf-jose-json-web-key-33: (with DISCUSS and COMMENT) X-BeenThere: jose@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: Javascript Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 25 Oct 2014 06:35:45 -0000 SGkgUmljaGFyZCwNCg0KSW4gLTM2IEkgYWRkZWQgdGhhdCBpZiBib3RoICJ1c2UiIGFuZCAia2V5 X29wcyIgYXJlIHVzZWQsIHRoZW4gdGhlIGluZm9ybWF0aW9uIHRoZXkgY29udmV5IE1VU1QgYmUg Y29uc2lzdGVudCwgcGVyIHlvdXIgc3VnZ2VzdGlvbi4gIEkgYWxzbyByZXBsYWNlZCB0aGUgW1RC RF1AaWV0Zi5vcmcgd2l0aCB0aGUgYWN0dWFsIGxpc3QgbmFtZS4gIEhvcGVmdWxseSB0aGlzIHdp bGwgZW5hYmxlIHlvdSB0byBjbGVhciB5b3VyIERJU0NVU1NlcyBvbiB0aGlzIGRyYWZ0Lg0KDQoJ CQkJVGhhbmtzIGFnYWluLA0KCQkJCS0tIE1pa2UNCg0KLS0tLS1PcmlnaW5hbCBNZXNzYWdlLS0t LS0NCkZyb206IE1pa2UgSm9uZXMgW21haWx0bzpNaWNoYWVsLkpvbmVzQG1pY3Jvc29mdC5jb21d IA0KU2VudDogTW9uZGF5LCBPY3RvYmVyIDIwLCAyMDE0IDk6MTkgQU0NClRvOiBSaWNoYXJkIEJh cm5lcw0KQ2M6IFRoZSBJRVNHOyBqb3NlLWNoYWlyc0B0b29scy5pZXRmLm9yZzsgZHJhZnQtaWV0 Zi1qb3NlLWpzb24td2ViLWtleUB0b29scy5pZXRmLm9yZzsgam9zZUBpZXRmLm9yZw0KU3ViamVj dDogUkU6IFtqb3NlXSBSaWNoYXJkIEJhcm5lcycgRGlzY3VzcyBvbiBkcmFmdC1pZXRmLWpvc2Ut anNvbi13ZWIta2V5LTMzOiAod2l0aCBESVNDVVNTIGFuZCBDT01NRU5UKQ0KDQpUaGFua3MgZm9y IHlvdXIgcmVzcG9uc2VzLCBSaWNoYXJkLiAgUmVwbGllcyBhcmUgaW5saW5lIGJlbG93Li4uDQoN Cj4gRnJvbTogUmljaGFyZCBCYXJuZXMgW21haWx0bzpybGJAaXB2LnN4XQ0KPiBTZW50OiBTYXR1 cmRheSwgT2N0b2JlciAxOCwgMjAxNCAxMTozOCBBTQ0KPiBUbzogTWlrZSBKb25lcw0KPiBDYzog VGhlIElFU0c7IGpvc2UtY2hhaXJzQHRvb2xzLmlldGYub3JnOyANCj4gZHJhZnQtaWV0Zi1qb3Nl LWpzb24td2ViLWtleUB0b29scy5pZXRmLm9yZzsgam9zZUBpZXRmLm9yZw0KPiBTdWJqZWN0OiBS ZTogW2pvc2VdIFJpY2hhcmQgQmFybmVzJyBEaXNjdXNzIG9uIA0KPiBkcmFmdC1pZXRmLWpvc2Ut anNvbi13ZWIta2V5LTMzOiAod2l0aCBESVNDVVNTIGFuZCBDT01NRU5UKQ0KPiANCj4gT24gVHVl LCBPY3QgMTQsIDIwMTQgYXQgNTo1MyBBTSwgTWlrZSBKb25lcyA8TWljaGFlbC5Kb25lc0BtaWNy b3NvZnQuY29tPiB3cm90ZToNCj4gVGhhbmtzIGZvciB5b3VyIHJldmlldy4gIFRoZSAtMzQgZHJh ZnQgY29udGFpbnMgdGhlIGZvbGxvd2luZyByZXNvbHV0aW9ucy4gIEkgaG9wZSB0aGF0IHlvdSBj YW4gY2xlYXIgeW91ciBESVNDVVNTZXMgb24gdGhhdCBiYXNpcy4NCj4gDQo+ICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgLS0gTWlrZQ0KPiANCj4gPiAtLS0tLU9yaWdpbmFsIE1lc3Nh Z2UtLS0tLQ0KPiA+IEZyb206IGpvc2UgW21haWx0bzpqb3NlLWJvdW5jZXNAaWV0Zi5vcmddIE9u IEJlaGFsZiBPZiBSaWNoYXJkIA0KPiA+IEJhcm5lcw0KPiA+IFNlbnQ6IFdlZG5lc2RheSwgT2N0 b2JlciAwMSwgMjAxNCA3OjM0IFBNDQo+ID4gVG86IFRoZSBJRVNHDQo+ID4gQ2M6IGpvc2UtY2hh aXJzQHRvb2xzLmlldGYub3JnOyANCj4gPiBkcmFmdC1pZXRmLWpvc2UtanNvbi13ZWIta2V5QHRv b2xzLmlldGYub3JnOw0KPiA+IGpvc2VAaWV0Zi5vcmcNCj4gPiBTdWJqZWN0OiBbam9zZV0gUmlj aGFyZCBCYXJuZXMnIERpc2N1c3Mgb24gDQo+ID4gZHJhZnQtaWV0Zi1qb3NlLWpzb24td2ViLWtl eS0zMzogKHdpdGggRElTQ1VTUyBhbmQgQ09NTUVOVCkNCj4gPg0KPiA+IFJpY2hhcmQgQmFybmVz IGhhcyBlbnRlcmVkIHRoZSBmb2xsb3dpbmcgYmFsbG90IHBvc2l0aW9uIGZvcg0KPiA+IGRyYWZ0 LWlldGYtam9zZS1qc29uLXdlYi1rZXktMzM6IERpc2N1c3MNCj4gPg0KPiA+IFdoZW4gcmVzcG9u ZGluZywgcGxlYXNlIGtlZXAgdGhlIHN1YmplY3QgbGluZSBpbnRhY3QgYW5kIHJlcGx5IHRvIA0K PiA+IGFsbCBlbWFpbCBhZGRyZXNzZXMgaW5jbHVkZWQgaW4gdGhlIFRvIGFuZCBDQyBsaW5lcy4g KEZlZWwgZnJlZSB0byANCj4gPiBjdXQgdGhpcyBpbnRyb2R1Y3RvcnkgcGFyYWdyYXBoLCBob3dl dmVyLikNCj4gPg0KPiA+DQo+ID4gUGxlYXNlIHJlZmVyIHRvIA0KPiA+IGh0dHA6Ly93d3cuaWV0 Zi5vcmcvaWVzZy9zdGF0ZW1lbnQvZGlzY3Vzcy1jcml0ZXJpYS5odG1sDQo+ID4gZm9yIG1vcmUg aW5mb3JtYXRpb24gYWJvdXQgSUVTRyBESVNDVVNTIGFuZCBDT01NRU5UIHBvc2l0aW9ucy4NCj4g Pg0KPiA+DQo+ID4gVGhlIGRvY3VtZW50LCBhbG9uZyB3aXRoIG90aGVyIGJhbGxvdCBwb3NpdGlv bnMsIGNhbiBiZSBmb3VuZCBoZXJlOg0KPiA+IGh0dHA6Ly9kYXRhdHJhY2tlci5pZXRmLm9yZy9k b2MvZHJhZnQtaWV0Zi1qb3NlLWpzb24td2ViLWtleS8NCj4gPg0KPiA+DQo+ID4NCj4gPiAtLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLQ0KPiA+IC0tDQo+ID4gRElTQ1VTUzoNCj4gPiAtLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLQ0KPiA+IC0tDQo+ ID4NCj4gPiBTZWN0aW9uIDQuMy4NCj4gPiAiVGhlICJ1c2UiIGFuZCAia2V5X29wcyIgSldLIG1l bWJlcnMgU0hPVUxEIE5PVCBiZSB1c2VkIHRvZ2V0aGVyLiINCj4gPiBEaWQgdGhlIFdHIGRpc2N1 c3MgaG93IHRoZXNlIGNvdWxkIGNvbWJpbmU/ICBXaGF0IHdhcyB0aGUgb3V0Y29tZSBvZiANCj4g PiB0aGF0IGRpc2N1c3Npb24/ICBUaGlzIGNvdWxkIGJlIGFuIGltcG9ydGFudCBwb2ludCBmb3Ig DQo+ID4gaW50ZXJvcGVyYWJpbGl0eS4gIEZvciBleGFtcGxlLCBXZWJDcnlwdG8gZW5mb3JjZXMg dGhlbSBib3RoLCBzbyBpdCANCj4gPiB3aWxsIGJyZWFrIGlmIGl0IGdldHMgYSBrZXkgd2l0aCAi dXNlIiBhbmQgImtleV9vcHMiIHNldCB0byBpbmNvbnNpc3RlbnQgdmFsdWVzLg0KPiA+IGh0dHBz Oi8vZHZjcy53My5vcmcvaGcvd2ViY3J5cHRvLWFwaS9yYXctZmlsZS90aXAvc3BlYy9PdmVydmll dy5odG1sDQo+ID4gI3JzYS0NCj4gPiBwc3Mtb3BlcmF0aW9ucw0KPiANCj4gSSBiZWxpZXZlIHRo YXQgdGhlIHdvcmtpbmcgZ3JvdXAgZGlzY3Vzc2lvbiBpcyBhY2N1cmF0ZWx5IHJlZmxlY3RlZCBp biB0aGlzIHRleHQgZnJvbSB0aGUgc3BlYzoNCj4gICAgVGhlICJ1c2UiIGFuZCAia2V5X29wcyIg SldLIG1lbWJlcnMgU0hPVUxEIE5PVCBiZSB1c2VkIHRvZ2V0aGVyLg0KPiAgICBBcHBsaWNhdGlv bnMgc2hvdWxkIHNwZWNpZnkgd2hpY2ggb2YgdGhlc2UgbWVtYmVycyB0aGV5IHVzZSwgaWYNCj4g ICAgZWl0aGVyIGlzIHRvIGJlIHVzZWQgYnkgdGhlIGFwcGxpY2F0aW9uLg0KPiANCj4gVG8ga2Vl cCB0aGluZ3Mgc2ltcGxlLCBhcHBsaWNhdGlvbnMgc2hvdWxkIGNob29zZSBvbmUgb3IgdGhlIG90 aGVyLCBiYXNlZCBvbiB0aGVpciBuZWVkcy4gIE5vdGUgdGhhdCB0aGlzIGlzIGEgIlNIT1VMRCBO T1QiIC0gbm90IGEgIk1VU1QgTk9UIiwgc28gaWYgV2ViQ3J5cHRvIGJlbGlldmVzIHRoZXkgaGF2 ZSBhIGdvb2QgcmVhc29uIHRvIGFsbG93IGVpdGhlciBvciBib3RoLCB0aGV5J3JlIG5vdCB2aW9s YXRpbmcgdGhlIHNwZWMuICBCdXQgc3BlY2lmeWluZyB3aGljaCBjb21iaW5hdGlvbnMgYXJlIGxl Z2FsIGFuZCB3aGljaCBhcmVuJ3QgaW4gdGhlIEpXSyBzcGVjIHNlZW1zIHZlcnkgaGlnaCBvbiB0 aGUgY29tcGxleGl0eSB0byB1c2VmdWxuZXNzIHJhdGlvLiAgSSBob3BlIHRoYXQgeW91IHdpbGwg Y2hvb3NlIHRvIHdpdGhkcmF3IHRoaXMgRElTQ1VTUyBvbiB0aGF0IGJhc2lzLg0KPiANCj4gSG93 IGFib3V0IGlmIHdlIHJlcXVpcmUgdGhhdCB0aGV5IGJlIGNvbnNpc3RlbnQgaWYgdXNlZCB0b2dl dGhlciwgYnV0IHB1bnQgdGhlIGRlZmluaXRpb24gb2YgY29uc2lzdGVuY3kgdG8gV2ViQ3J5cHRv Pw0KPiANCj4gIiIiDQo+ICAgIFRoZSAidXNlIiBhbmQgImtleV9vcHMiIEpXSyBtZW1iZXJzIFNI T1VMRCBOT1QgYmUgdXNlZCB0b2dldGhlci4NCj4gICAgQXBwbGljYXRpb25zIHNob3VsZCBzcGVj aWZ5IHdoaWNoIG9mIHRoZXNlIG1lbWJlcnMgdGhleSB1c2UsIGlmDQo+ICAgIGVpdGhlciBpcyB0 byBiZSB1c2VkIGJ5IHRoZSBhcHBsaWNhdGlvbi4gIElmIGJvdGggInVzZSIgYW5kICJrZXlfb3Bz IiBtZW1iZXJzDQo+ICAgIGFyZSBwcmVzZW50LCB0aGVuIHRoZXkgTVVTVCBiZSBjb25zaXN0ZW50 IChzZWUgW1dlYkNyeXB0b10pLg0KPiAiIiINCg0KSSBzdXNwZWN0IHNvbWUgcmV2aWV3ZXJzIHdv dWxkbid0IGFncmVlIHdpdGggdGhlICIoc2VlIFtXZWJDcnlwdG9dKSIgcGFydCwgYnV0IEkgY2Fu IGFkZCB0aGUgcmVzdCBvZiB5b3VyIHN1Z2dlc3RlZCBzZW50ZW5jZSwgaWYgdGhhdCB3aWxsIGRv IGl0IGZvciB5b3UuDQoNCj4gPiBTZWN0aW9uIDguDQo+ID4gIltUQkRdQGlldGYub3JnIg0KPiA+ IFRoaXMgbmVlZHMgdG8gYmUgcG9wdWxhdGVkIGJlZm9yZSBhcHByb3ZhbC4gIEkgZG9uJ3Qga25v dyB3aGF0J3MgDQo+ID4gY3VzdG9tYXJ5IGhlcmUsIGJ1dCAiam9zZUBpZXRmLm9yZyIgaXMgYW4g b2J2aW91cyBjYW5kaWRhdGUuDQo+IA0KPiBQZXIgdGhlIHNwZWMsIGpvc2UtcmVnLXJldmlld0Bp ZXRmLm9yZyBpcyBhbHJlYWR5IHRoZSByZWNvbW1lbmRlZCBuYW1lLiAgWWVzLCB3ZSB3b3VsZCBj cmVhdGUgdGhpcyBsaXN0IGJlZm9yZSBmaW5hbCBhcHByb3ZhbCwganVzdCBhcyBvYXV0aC1leHQt cmV2aWV3QGlldGYub3JnIHdhcyBjcmVhdGVkIGJlZm9yZSBSRkMgNjc0OSB3YXMgYXBwcm92ZWQu ICBJIGhvcGUgdGhhdCB5b3UnbGwgY2hvb3NlIHRvIHdpdGhkcmF3IHRoaXMgRElTQ1VTUyBvbiB0 aGF0IGJhc2lzLg0KPiANCj4gVGhhdCBzb3VuZHMgZmluZSB0byBtZS4gIFdobyBoYXMgdGhlIGFj dGlvbiB0byBnZXQgdGhhdCBsaXN0IHNldCB1cD8NCg0KS2F0aGxlZW4gaXMgZG9pbmcgdGhpcywg cGVyIGVhcmxpZXIgY29tbWVudHMgb24gdGhlIHRocmVhZC4NCg0KPiA+IC0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tDQo+ ID4gLS0NCj4gPiBDT01NRU5UOg0KPiA+IC0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tDQo+ID4gLS0NCj4gPg0KPiA+IFNl Y3Rpb24gMS4xLg0KPiA+IFRoZSBwb2ludGVyIGZvciBCQVNFNjRVUkwgc2hvdWxkIGJlIHRvIEpX Uy4gIE9uZSBsZXZlbCBvZiANCj4gPiBpbmRpcmVjdGlvbiwgcGxlYXNlIDopDQo+IA0KPiBBZ3Jl ZWQNCj4gDQo+ID4gU2VjdGlvbiA0Lg0KPiA+IEl0IG1pZ2h0IGJlIHdvcnRoIGJlaW5nIGV4cGxp Y2l0IChoZXJlIG9yIGVsc2V3aGVyZSk6DQo+ID4gIkEgSldLIE1VU1QgTk9UIGNvbnRhaW4gYWxn b3JpdGhtLXNwZWNpZmljIG1lbWJlcnMgZm9yIGtleSB0eXBlIA0KPiA+IG90aGVyIHRoZSBvbmUg c3BlY2lmaWVkIGluIGl0cyAia3R5IiBhdHRyaWJ1dGUuIg0KPiANCj4gSSBhZ3JlZSB3aXRoIHRo ZSBzZW50aW1lbnQsIGJ1dCB0aGlzIGFjdHVhbGx5IGNvbnRyYWRpY3RzIHRoZSBzdGF0ZW1lbnQg dGhhdCBtZW1iZXIgbmFtZXMgdGhhdCBhcmUgbm90IHVuZGVyc3Rvb2QgTVVTVCBiZSBpZ25vcmVk Lg0KPiANCj4gR29vZCBwb2ludC4gIFBlcmhhcHMgd2UgY291bGQgcGhyYXNlIHRoaXMgYXMgYSBy ZXF1aXJlbWVudCBvbiBjcmVhdG9ycywgbGVhdmluZyBjb25zdW1lcnMgZnJlZSB0byBiZSBtb3Jl IGxpYmVyYWw/DQo+IA0KPiAiIiINCj4gVGhlIGNyZWF0b3Igb2YgYSBKV0sgTVVTVCBOT1QgaW5j bHVkZSBhbGdvcml0aG0tc3BlY2lmaWMgbWVtYmVycyBmb3Iga2V5IHR5cGUgb3RoZXIgdGhlIG9u ZSBzcGVjaWZpZWQgaW4gaXRzICJrdHkiIGF0dHJpYnV0ZS4gIENvbnN1bWVycyBvZiBKV0tzIFNI T1VMRCBOT1QgcmVqZWN0IEpXS3Mgd2l0aCBzdWNoIG1lbWJlcnMsIGhvd2V2ZXIsIGluIHRoZSBp bnRlcmVzdCBvZiBleHRlbnNpYmlsaXR5Lg0KPiAiIiINCg0KSW4gYW5vdGhlciB0aHJlYWQsIENh cnN0ZW4gQm9ybWFubiBoYWQgZXhwbGljaXRseSBvYmplY3RlZCB0byBzaXR1YXRpb25zIGluIHdo aWNoIHRoZXJlIGFyZSBkaWZmZXJlbnQgcmVxdWlyZW1lbnRzIG9uIHByb2R1Y2VycyBhbmQgY29u c3VtZXJzLCB1bmxlc3MgYWJzb2x1dGVseSBuZWNlc3NhcnkuICBJIGRvbid0IHRoaW5rIHRoZSBz aXR1YXRpb24geW91J3JlIGRlc2NyaWJpbmcgKGZvciBpbnN0YW5jZSwgaW5jbHVkaW5nIGFuIGV4 dHJhbmVvdXMgIngiIHZhbHVlIGluIGFuIFJTQSBrZXkgdmFsdWUpIHJpc2VzIHRvIHRoZSBsZXZl bCBvZiBzZXZlcml0eSB0aGF0IGl0IHdhcnJhbnRzIHBsYWNpbmcgZGlmZmVyZW50IHJlcXVpcmVt ZW50cyBvbiBwcm9kdWNlcnMgYW5kIGNvbnN1bWVycy4gIFJhdGhlciwgbXkgaW50dWl0aW9uIGF0 IHRoaXMgcG9pbnQgKHdoaWNoIGNvdWxkLCBvZiBjb3Vyc2UsIGJlIHdyb25nKSwgaXMgdGhhdCBk b2luZyBzbyB3b3VsZCBiZSBsaWtlbHkgdG8gaXRzZWxmIGdlbmVyYXRlIERJU0NVU1MgcG9zaXRp b25zLiAgSSB0aGluayB3ZSdyZSBiZXR0ZXIgb2ZmIGxlYXZpbmcgdGhpcyBhcy1pcy4NCg0KPiA+ IFNlY3Rpb24gNC4xLg0KPiA+ICJjcnlwdG9ncmFwaGljIGFsZ29yaXRobSBmYW1pbHkgdXNlZCB3 aXRoIHRoZSBrZXkiDQo+ID4gIi4uLiBzdWNoIGFzICJSU0EiIG9yICJFQyIuIg0KPiANCj4gQWdy ZWVkDQo+IA0KPiA+IFNlY3Rpb24gNC43Lg0KPiA+ICJiYXNlNjQgZW5jb2RlZCAoW1JGQzQ2NDhd IFNlY3Rpb24gNCAtLSBub3QgYmFzZTY0dXJsIGVuY29kZWQpIERFUiINCj4gPiBJdCBzZWVtcyB1 bnBsZWFzYW50IGZvciBpbXBsZW1lbnRhdGlvbnMgdG8gaGF2ZSB0byBzdXBwb3J0IHR3byANCj4g PiBmbGF2b3JzIG9mIGJhc2U2NCwgZXNwZWNpYWxseSBzaW5jZSB0aGlzIGRvZXNuJ3QgdXNlIFBF TSBkaXJlY3RseS4gIA0KPiA+IERpZCB0aGUgV0cgZGlzY3VzcyBqdXN0IHVzaW5nIEJBU0U2NFVS TD8NCj4gDQo+IE5vdCBtdWNoLCBhbHRob3VnaCBlYWNoIGNlcnRpZmljYXRlIHZhbHVlIGlzIGFj dHVhbGx5IGEgUEVNLWVuY29kZWQgdmFsdWUsIGluY2x1ZGluZyBhbGxvd2luZyBuZXdsaW5lcywg ZXRjLiAgUGVvcGxlIGFncmVlZCB3aXRoIHRoYXQgZ29hbCB3aGVuIHdlIGRpZCBkaXNjdXNzIGl0 Lg0KPiANCj4gPiBTZWN0aW9uIDkuMS4NCj4gPiBJdCBtaWdodCBoZWxwIGhlcmUgdG8gbm90ZSB0 aGF0IHRlY2hub2xvZ2llcyBsaWtlIFBLSVggYW5kIEpXVCBjYW4gDQo+ID4gYWxsb3cgcmVseWlu ZyBwYXJ0aWVzIHRvIHZlcmlmeSB0aGUgcHJvdmVuYW5jZSBvZiBhIGtleSBhbmQgYmluZGluZyBv ZiBhdHRyaWJ1dGVzIHRvIGl0Lg0KPiANCj4gQ2FuIHlvdSBwcm9wb3NlIHNwZWNpZmljIGxhbmd1 YWdlIGZvciB0aGlzPyAgV2hhdCBJIGhhdmUgaW4gbWluZCBpcyBkZWxpdmVyaW5nIGEgSldLIG9y IEpXSyBTZXQgb24gYSBUTFMgY2hhbm5lbCB1c2luZyBhIFVSTCB0aGF0IGlzIGNyeXB0b2dyYXBo aWNhbGx5IGJvdW5kIHRvIHRoZSB1c2Ugb2YgdGhlIGtleSAtIHBvc3NpYmx5IHVzaW5nIHRoZSBV UkwgYXMgdGhlIGlzc3VlciBvZiBhIEpXVCBzaWduZWQgd2l0aCB0aGUga2V5LCBidXQgeW91IG1h eSBoYXZlIHNvbWV0aGluZyBlbHNlIGluIG1pbmQuDQo+IA0KPiBJIGhhZCBpbiBtaW5kIG1vcmUg dGhlIHRyYWRpdGlvbmFsLCAidXNlIGEgY2VydGlmaWNhdGUgdG8gYmluZCBhdHRyaWJ1dGVzIHRv IGEga2V5IiBzZW5zZS4gIEhvdyBhYm91dCB0aGlzPw0KPiANCj4gIiIiDQo+IEluIG1vc3QgYXBw bGljYXRpb25zIHRvZGF5LCB0aGVyZSBhcmUgdHJ1c3RlZCBhdXRob3JpdGllcyB0aGF0IHZvdWNo IGZvciB0aGUgcHJvdmVuYW5jZSBvZiBhIGtleSBhbmQgYmluZCBhdHRyaWJ1dGVzIHRvIGl0LiAg Rm9yIGV4YW1wbGUsIGluIFBLSVgtYmFzZWQgYXBwbGljYXRpb25zLCBwYXJ0aWNpcGFudHMgdXNl IGNlcnRpZmljYXRlcyB0byB2ZXJpZnkgdGhhdCBhIGNlcnRpZmljYXRlIGF1dGhvcml0eSBoYXMg Ym91bmQgY2VydGFpbiBhdHRyaWJ1dGVzIHRvIGEga2V5LCBzdWNoIGFzIGEgbmFtZSBvciBrZXkg dXNhZ2UuICBKV0sgc3VwcG9ydHMgdGhpcyBzdHlsZSBvZiBwcm92ZW5hbmNlIHRocm91Z2ggdGhl ICJ4NXUiLCAieDVjIiwgIng1dCIsIGFuZCAieDV0I1MyNTYiIGF0dHJpYnV0ZXMsIGFsbCBvZiB3 aGljaCByZWZlcmVuY2UgYSBjZXJ0aWZpY2F0ZSB0aGF0IGEgcmVseWluZyBwYXJ0eSBjYW4gdXNl IHRvIGFzc29jaWF0ZSBhdHRyaWJ1dGVzIHRvIHRoZSBKV0suICBPdGhlciBhc3NlcnRpb25zIHN5 c3RlbXMsIHN1Y2ggYXMgSldULCBjYW4gbGlrZXdpc2UgYmUgdXNlZCB0byBhc3NlcnQgYmluZGlu Z3Mgb2YgYXR0cmlidXRlcyB0byBrZXlzLg0KPiBJbiBzb21lIGFwcGxpY2F0aW9ucywgaXQgbWF5 IGFsc28gYmUgY29udmVuaWVudCB0byB1c2UgVExTIGFzIGFuIGVyc2F0eiBhc3NlcnRpb24gbWVj aGFuaXNtLiAgRm9yIGV4YW1wbGUsIGFuIGFwcGxpY2F0aW9uIGNvdWxkIHJlcXVpcmUgSldLcyB0 byBiZSBkb3dubG9hZGVkIHdpdGggYXNzb2NpYXRlZCBhdHRyaWJ1dGVzIG92ZXIgSFRUUFMgYXMg YSB3YXkgb2YgaGF2aW5nIHRoZSBIVFRQUyBzZXJ2ZXIgYXNzZXJ0IGEgYmluZGluZyBvZiB0aGUg SldLIHRvIGl0cyBhdHRyaWJ1dGVzLiAgVGhpcyBpcyBzaW1pbGFyIHRvIHRoZSB3YXkgdGhhdCB0 aGUgWE1QUCBQT1NIIG1lY2hhbmlzbSB1c2VzIEhUVFBTIHRvIGFzc2VydCBkZWxlZ2F0aW9ucyBm cm9tIG9uZSB3YXkgdG8gYW5vdGhlci4gIEluIHN1Y2ggYXBwbGljYXRpb25zLCBob3dldmVyLCBj YXJlIG5lZWRzIHRvIGJlIHRha2VuIHRvIGVuc3VyZSB0aGF0IHNlY3VyZSB0cmFuc3BvcnRzIGFy ZSBhbHdheXMgdXNlZCwgYW5kIHRvIGF2b2lkIGNvbmZ1c2lvbiB3aXRoIG90aGVyIHVzZXMgb2Yg dGhlIFRMUyBzZXJ2ZXIgaW4gcXVlc3Rpb24uICBUaGUgZm9ybWVyIHNpdHVhdGlvbiB3b3VsZCBh bGxvdyBhbiBhdHRhY2tlciB0byBjcmVhdGUgYm9ndXMgYXNzZXJ0aW9ucywgYW5kIHRoZSBsYXR0 ZXIgd291bGQgbGV0IGFuIGF0dGFja2VyIHRyaWNrIHRoZSBzZXJ2ZXIgaW50byBpc3N1aW5nIGJv Z3VzIGFzc2VydGlvbnMuDQo+ICIiIg0KDQpJdCBtYXkgYmUganVzdCBtZSwgYnV0IHRoZSB3aG9s ZSBub3Rpb24gb2YgYmluZGluZyBhdHRyaWJ1dGVzIHRvIGtleXMgc2VlbXMgdG8gYmUgYSBiaXQg b2ZmIHRvcGljIC0gYXQgbGVhc3QgaW4gYSBzZWN0aW9uIG9uICJLZXkgUHJvdmVuYW5jZSBhbmQg VHJ1c3QiLiAgVGhlIHBvaW50IG9mIHRoaXMgc2VjdGlvbiBpcyB0aGF0IGFwcGxpY2F0aW9ucyB3 aWxsIG1ha2UgdHJ1c3QgZGVjaXNpb25zIGFib3V0IGtleXMgYmFzZWQgb24gdGhlIHRydXN0d29y dGhpbmVzcyBvZiB0aGUgd2F5IHRoZXkgZ290IHRoZSBrZXkuICBXaGV0aGVyIG9yIG5vdCB0aGVy ZSBtYXkgYWxzbyBiZSBhdHRyaWJ1dGVzIGJ1bmRsZWQgd2l0aCB0aGUga2V5IGlzIGluZGVwZW5k ZW50IG9mIHRoaXMsIHNvIEknbSBub3QgcHJvbmUgdG8gdGFsayBhYm91dCBpdCBoZXJlLiAgSWYg eW91IHRoaW5rIGl0IG5lZWRzIHRvIGJlIHRhbGtlZCBhYm91dCBlbHNld2hlcmUsIGNhbiB5b3Ug bW90aXZhdGUgdGhlIHJlYXNvbiBmb3IgZG9pbmcgc28/DQoNCk90aGVyIGNvbW1lbnRzIG9uIHlv dXIgcHJvcG9zZWQgdGV4dCBhYm92ZSBmb2xsb3cuLi4NCg0KSW4gd2hhdCBzcGVjaWZpYyB3YXkg YXJlIHlvdSB0aGlua2luZyB0aGF0ICJPdGhlciBhc3NlcnRpb25zIHN5c3RlbXMsIHN1Y2ggYXMg SldULCBjYW4gbGlrZXdpc2UgYmUgdXNlZCB0byBhc3NlcnQgYmluZGluZ3Mgb2YgYXR0cmlidXRl cyB0byBrZXlzIj8gIFdoaWxlIEkgYWdyZWUgdGhhdCB0aGlzIGlzIHRydWUsIEkgc3VzcGVjdCB0 aGF0IG1vc3QgaW1wbGVtZW50ZXJzIHdvdWxkbid0IGZpbmQgdGhhdCBwYXJ0aWN1bGFyIHdvcmRp bmcgYWN0aW9uYWJsZS4NCg0KSW4geW91ciBzZWNvbmQgcHJvcG9zZWQgcGFyYWdyYXBoLCB3aGls ZSB5b3UncmUgdGFsa2luZyBhYm91dCAiYmluZGluZyBvZiB0aGUgSldLIHRvIGl0cyBhdHRyaWJ1 dGVzIiwgSSB0aGluayB0aGUgY29yZSBvZiB0aGUgbWVzc2FnZSBoZXJlIGlzIHRoYXQgVExTIFVS THMgY2FuIGJlIHVzZWQgdG8gcHJvdmlkZSBjbGVhciBwcm92ZW5hbmNlIGZvciBzZXRzIG9mIGtl eXMuICBJJ20gZmluZSB3aXRoIHNheWluZyB0aGF0IGluIHNvbWUgd2F5Lg0KDQpJIGFncmVlIHdp dGggeW91ciBjb21tZW50cyBhYm91dCBzZWN1cmUgdHJhbnNwb3J0cyBiZWluZyB1c2VkIGFuZCBl bnN1cmluZyB0aGF0IGtleXMgYXJlIG9ubHkgcmV0cmlldmVkIGZyb20gbG9jYXRpb25zIGFkdmVy dGlzZWQgYnkgdGhlIGFwcGxpY2F0aW9uIGFzIGJlaW5nIHRoZWlyIGtleSBsb2NhdGlvbnMuDQog DQo+IA0KPiAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIFRoYW5rcyBhZ2FpbiwNCj4g ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAtLSBNaWtlDQoNCgkJCQktLSBNaWtlDQoN Cg==