Return-Path: X-Original-To: jose@ietfa.amsl.com Delivered-To: jose@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 12E121A034E; Sat, 4 Oct 2014 18:07:38 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: 0.498 X-Spam-Level: X-Spam-Status: No, score=0.498 tagged_above=-999 required=5 tests=[BAYES_05=-0.5, GB_SUMOF=1, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001] autolearn=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 98zKlZDYYKhQ; Sat, 4 Oct 2014 18:07:34 -0700 (PDT) Received: from na01-bn1-obe.outbound.protection.outlook.com (mail-bn1bon0784.outbound.protection.outlook.com [IPv6:2a01:111:f400:fc10::1:784]) (using TLSv1 with cipher ECDHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 475D01A034B; Sat, 4 Oct 2014 18:07:34 -0700 (PDT) Received: from BY1PR0301MB1208.namprd03.prod.outlook.com (25.161.203.16) by BY1PR0301MB0888.namprd03.prod.outlook.com (25.160.194.146) with Microsoft SMTP Server (TLS) id 15.0.1039.15; Sun, 5 Oct 2014 01:07:10 +0000 Received: from BN3PR0301CA0068.namprd03.prod.outlook.com (25.160.152.164) by BY1PR0301MB1208.namprd03.prod.outlook.com (25.161.203.16) with Microsoft SMTP Server (TLS) id 15.0.1044.10; Sun, 5 Oct 2014 01:07:08 +0000 Received: from BL2FFO11FD046.protection.gbl (2a01:111:f400:7c09::112) by BN3PR0301CA0068.outlook.office365.com (2a01:111:e400:401e::36) with Microsoft SMTP Server (TLS) id 15.0.1044.10 via Frontend Transport; Sun, 5 Oct 2014 01:07:07 +0000 Received: from mail.microsoft.com (131.107.125.37) by BL2FFO11FD046.mail.protection.outlook.com (10.173.161.208) with Microsoft SMTP Server (TLS) id 15.0.1039.16 via Frontend Transport; Sun, 5 Oct 2014 01:07:07 +0000 Received: from TK5EX14MBXC286.redmond.corp.microsoft.com ([169.254.1.93]) by TK5EX14HUBC101.redmond.corp.microsoft.com ([157.54.7.153]) with mapi id 14.03.0210.003; Sun, 5 Oct 2014 01:07:04 +0000 From: Mike Jones To: Pete Resnick , The IESG Thread-Topic: Pete Resnick's Discuss on draft-ietf-jose-json-web-algorithms-33: (with DISCUSS and COMMENT) Thread-Index: AQHP3e2Zk8P2825gjEmgPkuKf4EMaZwgqQsA Date: Sun, 5 Oct 2014 01:07:03 +0000 Message-ID: <4E1F6AAD24975D4BA5B16804296739439BAE9BDA@TK5EX14MBXC286.redmond.corp.microsoft.com> References: <20141002030353.19877.20944.idtracker@ietfa.amsl.com> In-Reply-To: <20141002030353.19877.20944.idtracker@ietfa.amsl.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [157.54.51.35] Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-EOPAttributedMessage: 0 X-Forefront-Antispam-Report: CIP:131.107.125.37; CTRY:US; IPV:CAL; IPV:NLI; IPV:NLI; EFV:NLI; SFV:NSPM; SFS:(10019020)(6009001)(438002)(13464003)(199003)(189002)(51704005)(377454003)(52044002)(24454002)(15594002)(43784003)(86362001)(92566001)(26826002)(21056001)(107046002)(6806004)(10300001)(54356999)(551984002)(31966008)(64706001)(20776003)(2656002)(85806002)(106466001)(104016003)(97736003)(551544002)(81156004)(92726001)(76176999)(85852003)(68736004)(87936001)(33656002)(69596002)(66066001)(50986999)(84676001)(44976005)(86612001)(106116001)(19580395003)(230783001)(23676002)(77096002)(99396003)(4396001)(85306004)(15975445006)(15202345003)(47776003)(55846006)(46102003)(19580405001)(80022003)(50466002)(76482002)(120916001)(95666004); DIR:OUT; SFP:1102; SCL:1; SRVR:BY1PR0301MB1208; H:mail.microsoft.com; FPR:; MLV:ovrnspm; PTR:InfoDomainNonexistent; A:1; MX:1; LANG:en; X-Microsoft-Antispam: UriScan:;UriScan:; X-Microsoft-Antispam: BCL:0;PCL:0;RULEID:;SRVR:BY1PR0301MB1208; X-O365ENT-EOP-Header: Message processed by - O365_ENT: Allow from ranges (Engineering ONLY) X-Forefront-PRVS: 0355F3A3AE Received-SPF: Pass (protection.outlook.com: domain of microsoft.com designates 131.107.125.37 as permitted sender) receiver=protection.outlook.com; client-ip=131.107.125.37; helo=mail.microsoft.com; Authentication-Results: spf=pass (sender IP is 131.107.125.37) smtp.mailfrom=Michael.Jones@microsoft.com; X-Microsoft-Antispam: BCL:0;PCL:0;RULEID:;SRVR:BY1PR0301MB0888; X-OriginatorOrg: microsoft.onmicrosoft.com Archived-At: http://mailarchive.ietf.org/arch/msg/jose/VzkuUekG6furmbdcrN5cYgiWdhI Cc: "jose-chairs@tools.ietf.org" , "jose@ietf.org" , "draft-ietf-jose-json-web-algorithms@tools.ietf.org" Subject: Re: [jose] Pete Resnick's Discuss on draft-ietf-jose-json-web-algorithms-33: (with DISCUSS and COMMENT) X-BeenThere: jose@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: Javascript Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 05 Oct 2014 01:07:38 -0000 VGhhbmtzIGZvciB5b3VyIHJldmlldywgUGV0ZS4gIEknbSBhZGRpbmcgdGhlIHdvcmtpbmcgZ3Jv dXAgc28gdGhleeKAmXJlIGF3YXJlIG9mIHRoZXNlIGNvbW1lbnRzLiAgQXQgU3RlcGhlbiBGYXJy ZWxsJ3MgcmVxdWVzdCwgSSdtIHJlc3BvbmRpbmcgd2l0aCAiPiAiIGxpbmUgcHJlZml4ZXMgb24g cHJldmlvdXMgdGhyZWFkIGNvbnRlbnQuICBJJ20gYWxzbyByZXBlYXRpbmcgKGFuZCBpbiBzb21l IGNhc2VzLCBhdWdtZW50aW5nKSBteSBwcmV2aW91cyByZXNwb25zZXMgdG8gdGhlIERJU0NVU1Mg Y29tbWVudHMgaW4gdGhpcyBjb25zb2xpZGF0ZWQgcmVzcG9uc2UuDQoNCj4gLS0tLS1PcmlnaW5h bCBNZXNzYWdlLS0tLS0NCj4gRnJvbTogUGV0ZSBSZXNuaWNrIFttYWlsdG86cHJlc25pY2tAcXRp LnF1YWxjb21tLmNvbV0NCj4gU2VudDogV2VkbmVzZGF5LCBPY3RvYmVyIDAxLCAyMDE0IDg6MDQg UE0NCj4gVG86IFRoZSBJRVNHDQo+IENjOiBqb3NlLWNoYWlyc0B0b29scy5pZXRmLm9yZzsgZHJh ZnQtaWV0Zi1qb3NlLWpzb24td2ViLQ0KPiBhbGdvcml0aG1zQHRvb2xzLmlldGYub3JnDQo+IFN1 YmplY3Q6IFBldGUgUmVzbmljaydzIERpc2N1c3Mgb24gZHJhZnQtaWV0Zi1qb3NlLWpzb24td2Vi LWFsZ29yaXRobXMtMzM6ICh3aXRoDQo+IERJU0NVU1MgYW5kIENPTU1FTlQpDQo+IA0KPiBQZXRl IFJlc25pY2sgaGFzIGVudGVyZWQgdGhlIGZvbGxvd2luZyBiYWxsb3QgcG9zaXRpb24gZm9yDQo+ IGRyYWZ0LWlldGYtam9zZS1qc29uLXdlYi1hbGdvcml0aG1zLTMzOiBEaXNjdXNzDQo+IA0KPiBX aGVuIHJlc3BvbmRpbmcsIHBsZWFzZSBrZWVwIHRoZSBzdWJqZWN0IGxpbmUgaW50YWN0IGFuZCBy ZXBseSB0byBhbGwgZW1haWwNCj4gYWRkcmVzc2VzIGluY2x1ZGVkIGluIHRoZSBUbyBhbmQgQ0Mg bGluZXMuIChGZWVsIGZyZWUgdG8gY3V0IHRoaXMgaW50cm9kdWN0b3J5DQo+IHBhcmFncmFwaCwg aG93ZXZlci4pDQo+IA0KPiANCj4gUGxlYXNlIHJlZmVyIHRvIGh0dHA6Ly93d3cuaWV0Zi5vcmcv aWVzZy9zdGF0ZW1lbnQvZGlzY3Vzcy1jcml0ZXJpYS5odG1sDQo+IGZvciBtb3JlIGluZm9ybWF0 aW9uIGFib3V0IElFU0cgRElTQ1VTUyBhbmQgQ09NTUVOVCBwb3NpdGlvbnMuDQo+IA0KPiANCj4g VGhlIGRvY3VtZW50LCBhbG9uZyB3aXRoIG90aGVyIGJhbGxvdCBwb3NpdGlvbnMsIGNhbiBiZSBm b3VuZCBoZXJlOg0KPiBodHRwOi8vZGF0YXRyYWNrZXIuaWV0Zi5vcmcvZG9jL2RyYWZ0LWlldGYt am9zZS1qc29uLXdlYi1hbGdvcml0aG1zLw0KPiANCj4gDQo+IA0KPiAtLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tDQo+ IERJU0NVU1M6DQo+IC0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0NCj4gDQo+IE1vdmluZyB0aGlzIGZpcnN0IG9uZSBm cm9tIGEgY29tbWVudCB0byBhIGRpc2N1c3MgaW4gbGlnaHQgb2YgUmljaGFyZCdzDQo+IGNvbW1l bnQ6DQo+IA0KPiAzLjEvNC4xLzUuMS82LjE6IFdoeSBhcmUgdGhlcmUgaW1wbGVtZW50YXRpb24g cmVxdWlyZW1lbnRzIGluIHRoaXMgZG9jdW1lbnQ/DQo+IEkgYW0gYWxzbyBjdXJpb3VzLCBhcyBS aWNoYXJkIGlzLCB3aGV0aGVyIHRoZXNlIGFyZSBnb2luZyB0byBiZSB1c2VkIGF0IGFsbCwgYW5k IEknZA0KPiBsaWtlIHRvIGhlYXIgdGhlIGV4cGxhbmF0aW9uIHRoYXQgdGhlIFdHIGhhZCBmb3Ig aW5jbHVkaW5nIHRoZXNlLiBBcmUNCj4gaW1wbGVtZW50YXRpb24gcmVxdWlyZW1lbnRzIGZvciBK T1NFIGRpZmZlcmVudCBmcm9tIGltcGxlbWVudGF0aW9uDQo+IHJlcXVpcmVtZW50cyBmb3IgYW55 IG90aGVyIHVzZSBvZiBzaWduaW5nIG9yIGVuY3J5cHRpb24gZm9yIGVhY2ggb2YgdGhlc2UNCj4g YWxnb3JpdGhtcz8gRG9uJ3Qgd2UgYWxyZWFkeSBoYXZlIGEgc2VwYXJhdGUgZ2VuZXJhbCByZWdp c3RyeSBvZiBhbGdvcml0aG1zIGFuZA0KPiB0aGVpciBpbXBsZW1lbnRhdGlvbiBzdGF0dXNlcz8g V2h5IGFyZSB0aGVzZSBuZWNlc3Nhcnk/DQoNClRoZXJlIGFyZSBpbXBsZW1lbnRhdGlvbiByZXF1 aXJlbWVudHMgc28gdGhhdCBpbXBsZW1lbnRhdGlvbnMgd2lsbCBhY3R1YWxseSBiZSBpbnRlcm9w ZXJhYmxlIGluIHByYWN0aWNlIGFuZCBub3QganVzdCBpbiB0aGVvcnkuICBUaGlzIHdhcyBkaXNj dXNzZWQgYnkgdGhlIHdvcmtpbmcgZ3JvdXAgYXMgaXNzdWUgIzEwIGh0dHA6Ly90cmFjLnRvb2xz LmlldGYub3JnL3dnL2pvc2UvdHJhYy90aWNrZXQvMTAgYW5kIHRoZSBjaGFpcnMgbWFkZSBhIGNh bGwgdG8ga2VlcCB0aGUgaW1wbGVtZW50YXRpb24gcmVxdWlyZW1lbnRzLCBiYXNlZCB1cG9uIElF U0cgZmVlZGJhY2sgdGhhdCBNVEkgZmVhdHVyZXMgYXJlIHJlcXVpcmVkIHRvIGVuYWJsaW5nIGlu dGVyb3BlcmFiaWxpdHkgZHVyaW5nIGNoYXJ0ZXJpbmcgZGlzY3Vzc2lvbnMsIGFzIHdlbGwgYXMg YmFzZWQgdXBvbiBmZWVkYmFjayBmcm9tIHNvbWUgd29ya2luZyBncm91cCBtZW1iZXJzLg0KDQo+ IDQuNi4yOiBBbGdvcml0aG1JRC4gVVRGLTggaGFzIG1lIHdvcnJpZWQgaGVyZS4gSXQgaGFzIG1l IG1vcmUgd29ycmllZCBpbiA0LjgsDQo+IGJ1dCB3ZSdsbCB0YWxrIGFib3V0IHRoYXQgbGF0ZXIu IEhlcmUsIGFyZW4ndCBhbGwgImVuYyIgYW5kICJhbGciDQo+IHZhbHVlcyBVUy1BU0NJSSBhbnl3 YXk/IFNheWluZyBVUy1BU0NJSSBoZXJlIHdvdWxkIHNvbHZlIHRoZSBwcm9ibGVtLCBzbw0KPiB1 bmxlc3MgeW91IHRoaW5rIHlvdSdyZSBnb2luZyB0byBoYXZlIHRoZSBNw7Z0bGV5Q3LDvGUgYWxn b3JpdGhtLCBwZXJoYXBzIHdlIGNhbg0KPiBhdm9pZCBhbnkgY29uY2VybnMgZm9yIHRoaXMgY2Fz ZS4gKE15IGNvbmNlcm4gaXMgdGhhdCB5b3UgY2FuIGhhdmUgImludGVyZXN0aW5nIg0KPiBVVEYt OCBzdHJpbmdzIHdpdGggWkVSTy1XSURUSCBKT0lORVJzIGFuZCBvdGhlciBub25zZW5zZSB0aGF0 IHlvdSBwcm9iYWJseQ0KPiBkb24ndCBtZWFuIHRvIGFkZHJlc3MuDQoNCkV2ZW4gaWYgcGVvcGxl IHVzZWQgcGF0aG9sb2dpY2FsIFVuaWNvZGUgY2hhcmFjdGVycywgdGhlIGV4YWN0LW1hdGNoIHN0 cmluZyBjb21wYXJpc29uIHJ1bGVzIHdvdWxkIGhhbmRsZSB0aGlzIE9LLiAgSW4gcHJhY3RpY2Us IHdoYXQgSSB0aGluayB3ZSBzaG91bGQgZG8gaXMgcHJvdmlkZSBndWlkYW5jZSBpbiB0aGUgSUFO QSByZWdpc3RyeSBpbnN0cnVjdGlvbnMgdGhhdCBvbmx5IHJlYXNvbmFibGUsIGRpc3BsYXlhYmxl IFVuaWNvZGUgY2hhcmFjdGVyIHNlcXVlbmNlcyBiZSByZWdpc3RlcmVkLiAgSeKAmW0gcmVsdWN0 YW50IHRvIHRlbGwgcGVvcGxlIHVzaW5nIG5vbi1VUyBjaGFyYWN0ZXIgc2V0cyB0aGF0IHRoZXkg Y2Fu4oCZdCB1c2UgcHJpbnRhYmxlIGdseXBocyBmcm9tIHRoZWlyIG93biBsYW5ndWFnZXMuICBE byBwZW9wbGUgaGF2ZSBhIHN1Z2dlc3Rpb24gd2hhdCBsYW5ndWFnZSB0aGlzIGd1aWRhbmNlIHNo b3VsZCBjb250YWluPw0KDQo+IDQuODoNCj4gDQo+ICAgIFRoZSBQQkVTMiBwYXNzd29yZCBpbnB1 dCBpcyBhbg0KPiAgICBvY3RldCBzZXF1ZW5jZTsgaWYgdGhlIHBhc3N3b3JkIHRvIGJlIHVzZWQg aXMgcmVwcmVzZW50ZWQgYXMgYSB0ZXh0DQo+ICAgIHN0cmluZyByYXRoZXIgdGhhbiBhbiBvY3Rl dCBzZXF1ZW5jZSwgdGhlIFVURi04IGVuY29kaW5nIG9mIHRoZSB0ZXh0DQo+ICAgIHN0cmluZyBN VVNUIGJlIHVzZWQgYXMgdGhlIG9jdGV0IHNlcXVlbmNlLg0KPiANCj4gVGhpcyBvbmUgd29ycmll cyBtZSBhIGxvdC4gSXQncyBvbmUgdGhpbmcgdG8gc2F5IHRoYXQgdGhlIHBhc3N3b3JkIGlzIGFu IG9jdGV0DQo+IHNlcXVlbmNlIGFuZCB0aGUgYXBwbGljYXRpb24gYWJvdmUgaXMgcmVzcG9uc2li bGUgZm9yIGNvbGxlY3RpbmcgaXQgZnJvbSB0aGUgdXNlcg0KPiBhbmQgcGFzc2luZyBpdCBpbiB0 aGUgY29ycmVjdCBmb3JtLiBCdXQgdG8gc2F5IGRvd24gaGVyZSBpbiB0aGUgZ3V0cyB0aGF0IGl0 IE1VU1QNCj4gYmUgVVRGLTggYnJpbmdzIHVwIGFsbCBzb3J0cyBvZiB1Z2x5IHF1ZXN0aW9ucyBy ZWdhcmRpbmcgbm9ybWFsaXphdGlvbi4gSSBkb24ndA0KPiB0aGluayB5b3Ugd2FudCB0byB0b3Vj aCB0aGlzIHdpdGggYSAxMC1mb290LXBvbGUuIEkgY2VydGFpbmx5IHRoaW5nIHlvdSB3YW50IHRv DQo+IHN0YXkgYXdheSBmcm9tIHRoYXQgTVVTVC4NCg0KVG8gYWNoaWV2ZSBpbnRlcm9wZXJhdGlv biwgc29tZSBlbmNvZGluZyBoYXMgdG8gYmUgc3BlY2lmaWVkLCBhbmQgVVRGLTggc2VlbXMgbGlr ZSB0aGUgYmVzdCBjaG9pY2UuICBSZXN0cmljdGluZyBodW1hbi12aXNpYmxlIHBhc3N3b3JkcyB0 byBBU0NJSSBpc27igJl0IHJlYXNvbmFibGUgZm9yIG1vc3QgY3VsdHVyZXMuDQoNCj4gNC44LjEu MTogU2FtZSBhcyA0LjYuMi4NCg0KU2FtZSBhbnN3ZXIuDQoNCj4gLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLQ0KPiBD T01NRU5UOg0KPiAtLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tDQo+IA0KPiBGb3IgdGhlIGxpZmUgb2YgbWUsIEkgY2Fu J3QgZmlndXJlIG91dCB3aHkgdGhpcyBkb2N1bWVudCBzZXQgdXNlcyB0aGUgdGVybWlub2xvZ3kN Cj4gIkpTT04gV2ViIEZvbyIuIFNlZW1zIGxpa2UgYnV6endvcmQgbm9uc2Vuc2UuIEkgd291bGQg aGF2ZSBtdWNoIHByZWZlcnJlZA0KPiAiSk9TRSBGb28iIGZvciBlYWNoIG9uZS4NCg0KVGhlIGV0 eW1vbG9neSBvZiB0aGUgdGVybSAiSlNPTiBXZWIgVG9rZW4iIGlzIHRoYXQgdGhlICJKU09OIFdl YiBUb2tlbiIgd2FzIGNvbmNlaXZlZCBvZiBhcyBhIEpTT04tYmFzZWQgcmVwbGFjZW1lbnQgZm9y IHRoZSAiU2ltcGxlIFdlYiBUb2tlbiIuICBUaGUgcmVsYXRpb25zaGlwIGJldHdlZW4gSldUcyBh bmQgU1dUcyBpcyBkZXNjcmliZWQgaW4gQXBwZW5kaXggQyBvZiB0aGUgSldUIHNwZWMuICBXaGVu IHRoZSBzaWduYXR1cmUgZW5jb2RpbmcgZGVzY3JpcHRpb24gd2FzIHNwbGl0IG91dCBvZiB0aGUg SldUIHNwZWMsIHRoZSBuYXR1cmFsIG5hbWUgd2FzICJKU09OIFdlYiBTaWduYXR1cmUiLiAgVGhl IEpXRSwgSldLLCBhbmQgSldBIG5hbWVzIHNvb24gZm9sbG93ZWQuDQoNCj4gMy4yOg0KPiANCj4g ICAgQSBrZXkgb2YgdGhlIHNhbWUgc2l6ZSBhcyB0aGUgaGFzaCBvdXRwdXQgKGZvciBpbnN0YW5j ZSwgMjU2IGJpdHMgZm9yDQo+ICAgICJIUzI1NiIpIG9yIGxhcmdlciBNVVNUIGJlIHVzZWQgd2l0 aCB0aGlzIGFsZ29yaXRobS4NCj4gDQo+IElzIHRoaXMgc3BlY2lmaWMgdG8gSk9TRSwgb3IgaXMg dGhpcyBhIGdlbmVyYWwgcmVxdWlyZW1lbnQgZm9yIHVzZSBvZiBTSEEtMj8gSWYgdGhlDQo+IGxh dHRlciwgYSByZWZlcmVuY2Ugd291bGQgYmUgYmV0dGVyIHRoYW4gYSBNVVNUIGluIGhlcmUuDQoN ClRoaXMgaXMgYW4gYWRkaXRpb25hbCByZXF1aXJlbWVudCBpbXBvc2VkIGJ5IHRoZSBKT1NFIHVz ZSBvZiB0aGlzIGFsZ29yaXRobS4gIChJIGJlbGlldmUgdGhpcyByZXF1aXJlbWVudCB3YXMgcHJv cG9zZWQgYnkgZWtyLikNCg0KPiBbVGhlcmUgYXJlIG1hbnkgdGhpbmdzIGluIHRoZSBkb2N1bWVu dCB0aGF0IGxvb2sgbGlrZSBhbGdvcml0aG0gcmVxdWlyZW1lbnRzDQo+IGFuZCBub3QgSk9TRSBy ZXF1aXJlbWVudHMuIEkndmUgbm90ZWQgYSBmZXcgbW9yZSBiZWxvdywgYnV0IHRoZXNlIHNob3Vs ZCBiZQ0KPiBsb29rZWQgZm9yIGdlbmVyYWxseS4gSWYgc29tZXRoaW5nIGlzIHBhcnQgb2YgdGhl IGRlZmluaXRpb24gb2YgdGhlIGFsZ29yaXRobSBhbmQNCj4gZG9jdW1lbnRlZCBlbHNld2hlcmUs IG5vIG5lZWQgdG8gaGF2ZSByZXF1aXJlbWVudHMgbGFuZ3VhZ2UsIGxldCBhbG9uZSBhDQo+IGRl c2NyaXB0aW9uIG9mIGhvdyB0byBydW4gdGhlIGFsZ29yaXRobSwgaW4gdGhpcyBkb2N1bWVudDsg dGhhdCBzaG91bGQgYmUgYW4NCj4gZXh0ZXJuYWwgcmVmZXJlbmNlLl0NCg0KQW5vdGhlciBleGFt cGxlIGlzIHRoYXQgd2UgcmVxdWlyZSAyMDQ4IGJpdCBrZXlzIG9yIGxhcmdlciBmb3IgUlNBIHNp Z25hdHVyZXMuICBUaGlzIGlzIGluZm9ybWVkIGJ5IHRoZSBOSVNUIGFsZ29yaXRobSB1c2FnZSBy ZXF1aXJlbWVudHMuICBQZXIgZWtyJ3MgaW5wdXQgZHVyaW5nIHRoZSBCb0YgdGhhdCBsZWQgdG8g Sk9TRSwgdGhlcmUncyBubyBwb2ludCBpbiBhbGxvd2luZyB0aGUgdXNlIG9mIGRlcHJlY2F0ZWQg YWxnb3JpdGhtcyBvciBrZXkgc2l6ZXMgaW4gYSBuZXcgY3J5cHRvZ3JhcGhpYyBmb3JtYXQuDQoN Cj4gSW4gdGhlIDV0aCBwYXJhZ3JhcGggKHRoZSBvbmUgcmlnaHQgYWZ0ZXIgdGhlIHRhYmxlKSwg c3RyaWtlIGV2ZXJ5dGhpbmcgYWZ0ZXIgdGhlDQo+IGZpcnN0IHNlbnRlbmNlLiBEZWNvZGluZyBh bmQgZW5jb2RpbmcgYXJlIHRoaW5ncyB0aGF0IGFyZSBKV1Mgc3BlY2lmaWMgYW5kDQo+IHNob3Vs ZCBub3QgYmUgaW4gdGhpcyBkb2N1bWVudC4NCg0KSW4gbnVtZXJvdXMgY2FzZXMsIHRoaXMgZG9j dW1lbnQgaXMgaW50ZW50aW9uYWxseSBhYm91dCBob3cgSk9TRSB1c2VzIHRoZXNlIGFsZ29yaXRo bXMgYW5kIG5vdCBwdXJlbHkgYWJvdXQgYWJzdHJhY3QgYWxnb3JpdGhtcy4gIFRoZSBwYXJ0aWN1 bGFyIHRleHQgeW91IGNpdGUgaXMgdGhlcmUgdG8gaGVscCBkZXZlbG9wZXJzIGdldCB0aGUgdmFs aWRhdGlvbiByaWdodCwgYW5kIGV4cGxhaW5zIHR3byB3YXlzIHRoYXQgaXQgY2FuIGJlIGNvcnJl Y3RseSBjb2RlZC4gIEFub3RoZXIgZXhhbXBsZSBvZiB3aGVyZSB0aGUgSldBIGRvY3VtZW50IGlz IGludGVudGlvbmFsbHkgSk9TRSBzcGVjaWZpYyBpcyB0aGF0IHRoZSBQQkVTMiBhbGdvcml0aG1z IGRlZmluZSBIZWFkZXIgUGFyYW1ldGVyIHZhbHVlcy4NCg0KPiAzLjMvMy41LzQvMi80LjM6DQo+ IA0KPiAgICBBIGtleSBvZiBzaXplIDIwNDggYml0cyBvciBsYXJnZXIgTVVTVCBiZSB1c2VkIHdp dGggdGhpcyBhbGdvcml0aG0uDQo+IA0KPiBJcyB0aGlzIHNwZWNpZmljIHRvIEpPU0UsIG9yIGlz IHRoaXMgYSBnZW5lcmFsIHJlcXVpcmVtZW50IGZvciB1c2Ugb2YgUlNBPw0KDQpUaGlzIGlzIGlu Zm9ybWVkIGJ5IE5JU1QncyBjdXJyZW50IGd1aWRhbmNlIG9uIGhvdyB0byB1c2UgUlNBLg0KDQo+ IDMuNjogVGhpcyBzZWN0aW9uIHNlZW1zIHRvIGJlIGZvciB0aGUgSldTIGRvY3VtZW50LCBub3Qg dGhpcyBvbmUuIElmIHlvdSB3YW50IHRvDQo+IGRlZmluZSB0aGUgIk5vbmUiIGFsZ29yaXRobSwg Z28gYWhlYWQgYW5kIGRvIHRoYXQsIGJ1dCBkZXNjcmliaW5nIGl0cyB1c2UgaW4gSldTDQo+IGRv ZXNuJ3QgYmVsb25nIGhlcmUuDQoNClRoaXMgc2VjdGlvbiBkZWZpbmVzIHRoZSBhbGdvcml0aG0g aWRlbnRpZmllciAibm9uZSIgYW5kIGl0cyBtZWFuaW5nLiAgQW4gZWFybHkgd29ya2luZyBncm91 cCBkZWNpc2lvbiB3YXMgdGhhdCBhbGwgYWxnb3JpdGhtIGlkZW50aWZpZXJzIHdvdWxkIHJlc2lk ZSBpbiB0aGUgSldBIGRvY3VtZW50IGFuZCBub3QgdGhlIEpXQSwgSldFLCBvciBKV0sgc3BlY2lm aWNhdGlvbnMuDQoNCj4gNC42Og0KPiANCj4gICAgQSBuZXcgZXBoZW1lcmFsIHB1YmxpYyBrZXkg dmFsdWUgTVVTVCBiZSBnZW5lcmF0ZWQgZm9yIGVhY2gga2V5DQo+ICAgIGFncmVlbWVudCBvcGVy YXRpb24uDQo+IA0KPiBBZ2Fpbiwgc3BlY2lmaWMgdG8gSk9TRSwgb3IgcmVxdWlyZW1lbnQgb2Yg RUNESC1FUz8NCg0KSSBiZWxpZXZlIHRoYXQgdGhpcyBpcyBhIEpPU0UgcmVxdWlyZW1lbnQgd2hp Y2ggbWF5IGJlIG1vcmUgY29uc2VydmF0aXZlIHRoYW4gc3RyaWN0bHkgcmVxdWlyZWQsIGJ1dCB3 YXMgaW5jbHVkZWQgdG8gZXJyIG9uIHRoZSBzaWRlIG9mIGJvdGggc2VjdXJpdHkgYW5kIHNpbXBs aWNpdHkuICBXaXRob3V0IHRoaXMgc2ltcGxlIHJlcXVpcmVtZW50LCBkZXZlbG9wZXJzIHdvdWxk IGJlIGxpa2VseSB0byB1c2UgRUNESC1FUyBpbnNlY3VyZWx5Lg0KDQo+ICAgIEluIERpcmVjdCBL ZXkgQWdyZWVtZW50IG1vZGUsIHRoZSBvdXRwdXQgb2YgdGhlIENvbmNhdCBLREYgTVVTVCBiZSBh DQo+ICAgIGtleSBvZiB0aGUgc2FtZSBsZW5ndGggYXMgdGhhdCB1c2VkIGJ5IHRoZSAiZW5jIiBh bGdvcml0aG0uDQo+IA0KPiBhbmQNCj4gDQo+ICAgIEluIEtleSBBZ3JlZW1lbnQgd2l0aCBLZXkg V3JhcHBpbmcgbW9kZSwgdGhlIG91dHB1dCBvZiB0aGUgQ29uY2F0IEtERg0KPiAgICBNVVNUIGJl IGEga2V5IG9mIHRoZSBsZW5ndGggbmVlZGVkIGZvciB0aGUgc3BlY2lmaWVkIGtleSB3cmFwcGlu Zw0KPiAgICBhbGdvcml0aG0uDQo+IA0KPiBzL01VU1Qvd2lsbD8NCg0KTVVTVC4gIFRoZSBjYWxs ZXIgb2YgQ29uY2F0IHBhc3NlcyB0aGUgZGVzaXJlZCBsZW5ndGggYXMgYW4gaW5wdXQgcGFyYW1l dGVyLg0KDQo+IDQuNi4xLjIvNC42LjEuMzogVGhlc2UgYXJlIG5vdCB2ZXJ5IHdlbGwgZGVmaW5l ZCwgYW5kIGl0J3Mgbm90IGNsZWFyIHdoeSB0aGV5IG5lZWQNCj4gdG8gYmUgYmFzZTY0ZWQuIFdo YXQgYXJlIHRoZXk/DQoNClRoZXNlIGFyZSBwYXJhbWV0ZXJzIG9mIHRoZSBDb25jYXQgS0RGLiAg VGhlaXIgcHJpbWFyeSBkZWZpbml0aW9ucyBhcmUgaW4gU2VjdGlvbiA1LjguMSBvZiBbTklTVC44 MDAtNTZBXS4gIFRoZXkgbmVlZCB0byBiZSBiYXNlNjR1cmwgZW5jb2RlZCBiZWNhdXNlIEpTT04g Y2FuJ3QgcmVwcmVzZW50IGFyYml0cmFyeSBiaW5hcnkgb2N0ZXQgc2VxdWVuY2VzLg0KDQo+IDUu Mi4yLjE6DQo+IA0KPiAgICAgICAgSGVyZSB3ZSBkZW5vdGUgdGhlIG51bWJlciBvZiBvY3RldHMg aW4gdGhlIE1BQ19LRVkgYXMNCj4gICAgICAgIE1BQ19LRVlfTEVOLCBhbmQgdGhlIG51bWJlciBv ZiBvY3RldHMgaW4gRU5DX0tFWSBhcyBFTkNfS0VZX0xFTjsNCj4gDQo+IE9oLCBkZWFyLiBUaGF0 J3MgYSBwcmV0dHkgY29udm9sdXRlZCB3YXkgb2Ygc2F5aW5nIChJIHRoaW5rKSAiTUFDX0tFWV9M RU4gaXMNCj4gdGhlIG51bWJlciBvZiBvY3RldHMgaW4gTUFDX0tFWSBhbmQgRU5DX0tFWV9MRU4g aXMgdGhlIG51bWJlciBvZiBvY3RldHMgaW4NCj4gRU5DX0tFWS4iIElmIHlvdSBtZWFuIHNvbWV0 aGluZyBkaWZmZXJlbnQsIHlvdSBiZXN0IGV4cGxhaW4uDQoNClllcywgdGhhdCdzIHdoYXQgaXMg bWVhbnQuICBJJ2xsIHRyeSB0byByZXdvcmQgdGhpcyB0byB1c2UgbGVzcyBjb252b2x1dGVkIGxh bmd1YWdlLg0KDQo+ICAgICAgICB0aGUgdmFsdWVzIG9mIHRoZXNlIHBhcmFtZXRlcnMgYXJlIHNw ZWNpZmllZCBieSB0aGUgQXV0aGVudGljYXRlZA0KPiAgICAgICAgRW5jcnlwdGlvbiBhbGdvcml0 aG1zIGluIFNlY3Rpb25zIDUuMi4zIHRocm91Z2ggNS4yLjUuDQo+ICAgICAgICBUaGUgbnVtYmVy IG9mIG9jdGV0cyBpbiB0aGUgaW5wdXQga2V5IEsgTVVTVCBiZSB0aGUgc3VtIG9mDQo+ICAgICAg ICBNQUNfS0VZX0xFTiBhbmQgRU5DX0tFWV9MRU4uDQo+IA0KPiAiTVVTVCI/IERvIHlvdSBtZWFu ICJpcyI/DQoNCklyb25pY2FsbHksIGluIGhpcyBzZWNkaXIgcmV2aWV3LCBDaGFybGllIEthdWZt YW4gcmVxdWVzdGVkIHRoYXQgdGhlIGxhbmd1YWdlIGJlIGNoYW5nZWQgZnJvbSAiaXMiIHRvICJN VVNUIGJlIiwgaGVuY2UgdGhlIHByZXNlbnQgd29yZGluZy4gIEhlIHdyb3RlOg0KDQpTZWN0aW9u IDUuMi4yLjEgc2F5cyAiVGhlIG51bWJlciBvZiBvY3RldHMgaW4gdGhlIGlucHV0IGtleSBLIGlz IHRoZSBzdW0gb2YgTUFDX0tFWV9MRU4gYW5kIEVOQ19LRVlfTEVOLiIgSSBiZWxpZXZlIGl0IHdv dWxkIGJlIGJldHRlciB0byBzYXkgc29tZXRoaW5nIGxpa2UgIk1VU1QgQkUgdGhlIHN1bSIuIFRo ZSB0ZXh0IGdvZXMgb24gdG8gc2F5IHRoYXQgdGhlIHR3byBrZXlzIG11c3Qgbm90IG92ZXJsYXAs IGJ1dCBpdCBpcyBhbHNvIGltcG9ydGFudCB0aGF0IGFuIGltcGxlbWVudGF0aW9uIG5vdCB0b2xl cmF0ZSBhIGdhcCBiZXR3ZWVuIHRoZSB0d28ga2V5cyBpcyBhIHRvbyBsYXJnZSBrZXkgaXMgcHJv dmlkZWQuDQoNCj4gICAgICAgIFdoZW4gZ2VuZXJhdGluZyB0aGUgc2Vjb25kYXJ5IGtleXMNCj4g ICAgICAgIGZyb20gSywgTUFDX0tFWSBhbmQgRU5DX0tFWSBNVVNUIE5PVCBvdmVybGFwLg0KPiAN Cj4gSXNuJ3QgdGhhdCBjb21wbGV0ZWx5IHJlZHVuZGFudD8gSWYgbGVuZ3RoIG9mIEsgaXMgdGhl IHN1bSBvZiBNQUNfS0VZX0xFTiBhbmQNCj4gRU5DX0tFWV9MRU4sIHRoZW4gTUFDX0tFWSBhbmQg RU5DX0tFWSAqY2FuJ3QqIG92ZXJsYXAuDQoNClRoaXMgdGV4dCB3YXMgd3JpdHRlbiBieSBEYXZp ZCBNY0dyZXcuICBJIGFncmVlIHRoYXQgaXQncyByZWR1bmRhbnQgKGFsdGhvdWdoIGNvcnJlY3Qp LCBidXQgSSByZXRhaW5lZCBpdCBvbiB0aGUgYXNzdW1wdGlvbiB0aGF0IGhlIHB1dCBpdCB0aGVy ZSBmb3IgYSByZWFzb24uDQoNCj4gNi4yOiBzL01VU1QgYmUvaXMNCg0KT0sNCg0KCQkJCVRoYW5r cyBhZ2FpbiwNCgkJCQktLSBNaWtlDQoNCg==