Return-Path: X-Original-To: lake@mail2.ietf.org Delivered-To: lake@mail2.ietf.org Received: from localhost (localhost [127.0.0.1]) by mail2.ietf.org (Postfix) with ESMTP id 025A6C43D2F4 for ; Wed, 4 Mar 2026 07:24:52 -0800 (PST) X-Virus-Scanned: amavisd-new at ietf.org X-Spam-Flag: NO X-Spam-Score: -4.395 X-Spam-Level: X-Spam-Status: No, score=-4.395 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_MED=-2.3, RCVD_IN_MSPIKE_H5=0.001, RCVD_IN_MSPIKE_WL=0.001, RCVD_IN_VALIDITY_CERTIFIED_BLOCKED=0.001, RCVD_IN_VALIDITY_RPBL_BLOCKED=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: mail2.ietf.org (amavisd-new); dkim=pass (2048-bit key) header.d=tu-dresden.de Received: from mail2.ietf.org ([166.84.6.31]) by localhost (mail2.ietf.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id dqwnrF83MSLP for ; Wed, 4 Mar 2026 07:24:51 -0800 (PST) Received: from mailout3.zih.tu-dresden.de (mailout3.zih.tu-dresden.de [141.30.67.74]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange ECDHE (P-256) server-signature ECDSA (P-256) server-digest SHA256) (No client certificate requested) by mail2.ietf.org (Postfix) with ESMTPS id 0A60FC43D2EA for ; Wed, 4 Mar 2026 07:24:51 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=tu-dresden.de; s=dkim2022; h=Content-Type:In-Reply-To:From:References:CC:To :Subject:MIME-Version:Date:Message-ID:Sender:Reply-To: Content-Transfer-Encoding:Content-ID:Content-Description:Resent-Date: Resent-From:Resent-Sender:Resent-To:Resent-Cc:Resent-Message-ID:List-Id: List-Help:List-Unsubscribe:List-Subscribe:List-Post:List-Owner:List-Archive; bh=1rW9suDLxr/adDVYn8aU1RHdQJZs4A+lXNgHwrtENpw=; b=LkvoctdgKbrKrzBUaYfgGEQ6e6 mNOcXbc5aW8+czE31lEhMTGM63n2J3U46iCYDN4eg2DtvmCpCOBrAAs+Bjmps1RsZsM2YeRpXT3ue FCO8/8UmuASq1eE3QHi+ag0mNm+7ovnwxXebfgp0V1OUfIGx8GnG3gTfI8hBQaA6HdRNMfkgNvx8l t8Ruwjk34JDnF2D4A1tBq79uMA87/bWTz74QJj0rVYaawYgEhz5tYe0N5Wf+4GKr5TKho60yKfdm5 pdWbknyjREeX48uW7jvX9xwL0MzM1oZ5KbdJE1c7B7SaswcAdvIHlRMh0hPLMN40fopDp356DeJ7W Hx4kOhLw==; Received: from msx-t422.msx.ad.zih.tu-dresden.de ([172.26.35.139] helo=msx.tu-dresden.de) by mailout3.zih.tu-dresden.de with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.94.2) (envelope-from ) id 1vxo5h-00Fu1N-8I; Wed, 04 Mar 2026 16:24:50 +0100 Received: from [10.12.5.228] (141.76.13.149) by msx-t422.msx.ad.zih.tu-dresden.de (172.26.35.139) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.2.2562.37; Wed, 4 Mar 2026 16:24:48 +0100 Message-ID: Date: Wed, 4 Mar 2026 16:24:47 +0100 MIME-Version: 1.0 User-Agent: Mozilla Thunderbird To: Paul Wouters References: <5521ffe4-4f9f-4470-93a2-644841713996@tu-dresden.de> <2386e955-426e-4e19-ace2-0220d6552be4@tu-dresden.de> Content-Language: en-US From: Muhammad Usama Sardar In-Reply-To: Content-Type: multipart/signed; protocol="application/pkcs7-signature"; micalg=sha-512; boundary="------------ms060805020102030208000303" X-ClientProxiedBy: MSX-L414.msx.ad.zih.tu-dresden.de (172.26.34.134) To msx-t422.msx.ad.zih.tu-dresden.de (172.26.35.139) X-TUD-Virus-Scanned: mailout3.zih.tu-dresden.de Message-ID-Hash: WIJD7A5NV6QZUZLMXKJBSNVL5UDWOJTC X-Message-ID-Hash: WIJD7A5NV6QZUZLMXKJBSNVL5UDWOJTC X-MailFrom: muhammad_usama.sardar@tu-dresden.de X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; emergency; loop; banned-address; member-moderation; nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size; news-moderation; no-subject; digests; suspicious-header CC: "lake@ietf.org" X-Mailman-Version: 3.3.9rc6 Precedence: list Subject: =?utf-8?q?=5BLake=5D_Re=3A_Fwd=3A_=5BUfmrg=5D_Relay_Attacks_in_Intra-handsha?= =?utf-8?q?ke_Attestation_for_Confidential_Agentic_AI_Systems?= List-Id: Lightweight Authenticated Key Exchange Archived-At: List-Archive: List-Help: List-Owner: List-Post: List-Subscribe: List-Unsubscribe: --------------ms060805020102030208000303 Content-Type: multipart/alternative; boundary="------------moYsCWp5ZyzWltMSUOrEoIHS" --------------moYsCWp5ZyzWltMSUOrEoIHS Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: base64 SGkgUGF1bCwNCg0KT24gMDQuMDMuMjYgMTU6MTEsIFBhdWwgV291dGVycyB3cm90ZToNCj4N Cj4gT24gVHVlLCBNYXIgMywgMjAyNiBhdCAxOjAy4oCvUE0gTXVoYW1tYWQgVXNhbWEgU2Fy ZGFyIA0KPiA8bXVoYW1tYWRfdXNhbWEuc2FyZGFyQHR1LWRyZXNkZW4uZGU+IHdyb3RlOg0K Pg0KPiAgICAgSGkgbGFrZXJzLA0KPg0KPiAgICAgRm9sbG93aW5nIHVwIHdpdGggc3VwcG9y dGluZyBwdWJsaWMgZXZpZGVuY2U6ICpDb2NvcyBBSSBoYXMNCj4gICAgIHB1YmxpY2x5IGFj a25vd2xlZGdlZCBbOV0qIHRoZSByZWxheSBhdHRhY2tzIGxhc3QgRnJpZGF5Lg0KPg0KPiAg ICAgIyAqQ29udGV4dCoNCj4NCj4gICAgIEFzIGhlbHBmdWwgY29udGV4dCwgQ29jb3MgQUkg WzRdIGNsYWltZWQgdGhlaXIgYXR0ZXN0ZWQgVExTIHRvIGJlDQo+ICAgICB0aGUgImJlc3Qg aW4gdGhlIHdvcmxkIiBpbiB0aGUgQ29uZmlkZW50aWFsIENvbXB1dGluZyBDb25zb3J0aXVt DQo+ICAgICBhbmQgZGVzcGl0ZSB3ZSBoYXZpbmcgaW5mb3JtZWQgdGhlbSByZXBlYXRlZGx5 IGFib3V0IHRoZSBhdHRhY2tzDQo+ICAgICBhZnRlciBvdXIgZm9ybWFsIGFuYWx5c2lzLCB0 aGV5IHdlcmUgY29udGludWluZyB0byBtaXNndWlkZSB0aGUNCj4gICAgIGNvbW11bml0eSBv biBzb2NpYWwgbWVkaWEuIEFueXdheSwgd2Ugbm93IHJlc3BlY3QgdGhlaXIgaG9uZXN0eQ0K PiAgICAgYW5kIHRyYW5zcGFyZW5jeSwgYW5kIHdlIHJlbWFpbiBmdWxseSBjb21taXR0ZWQg dG8gaGVscGluZyB0aGVtDQo+ICAgICB0b3dhcmRzIHNlY3VyZSBzb2x1dGlvbnMuDQo+DQo+ DQo+IFRoZSAid2UiIGluIHRoZSBjb250ZXh0IGFwcGVhcnMgdG8gcmVmZXIgdG8gSUVURiB1 bnRpbCB5b3UgZ2V0IHRvIHRoZSANCj4gZW5kIGFuZCBzZWUgdHdvIHBlb3BsZSBzaWduaW5n IG9mIG9uIHRoaXMgcG9zdGluZy4gSSB3b3VsZCBiZSBnb29kIHRvIA0KPiBtYWtlIHRoaXMg bW9yZSBjbGVhciBhbmQgYXZvaWQgdGFsa2luZyBhYm91dCAid2UiIG9uIG1haWxpbmcgbGlz dHMuDQoNClBsZWFzZSB0cnkgdG8gdW5kZXJzdGFuZCB0aGF0IEkgYW0gYSByZXNlYXJjaGVy IGFuZCAid2UiIGlzIHZlcnkgY29tbW9uIA0KdXNlIGZvciBtZSwgZXZlbiB3aGVuIHdyaXRp bmcgYSBzaW5nbGUtYXV0aG9yZWQgcGFwZXIuIEluIG15IA0KdW5kZXJzdGFuZGluZywgY29u c2Vuc3VzIG9mIHRoZSBJRVRGIGlzIHJlcHJlc2VudGVkIGluIFJGQ3MgYW5kIG5vdCANCmVt YWlscy4gVGhlIGVtYWlscyBzaG91bGQgYXQgYmVzdCBiZSBpbnRlcnByZXRlZCBhcyB0aGUg bGlzdCBvZiBhdXRob3JzIA0KbWVudGlvbmVkIGluIHRoZSBlbWFpbC4gSWYgSSBzb21ldGlt ZXMgZm9yZ2V0IGRlZmluaW5nIHdlLCBwbGVhc2UgDQppbnRlcnByZXQgaXQgaW4gdGhhdCBj b250ZXh0Lg0KDQpCVFcgdGhlcmUgd2VyZSBvbmx5IHR3byBwYXJhZ3JhcGhzIHVudGlsIHRo ZSByZWFkZXIgcmVhY2hlcyB0aGUgZW5kIG9mIA0KdGhlIGVtYWlsLg0KDQo+DQo+IEZ1cnRo ZXJtb3JlLCB0aGUgdG9uZSBvZiB0aGlzIHBvc3RpbmcgaXMgbm90IGNvbmR1Y2l2ZSB0byBm dXR1cmUgDQo+IGNvbGxhYm9yYXRpb24gd2l0aCBDb2NvcyBBSS7CoFRoZSBjbGFpbSBvZiB0 aGVtICJtaXNndWlkaW5nIiBpc24ndCANCj4gcmVhbGx5IHNvZnRlbmVkIGJ5IHRoZSBzdGF0 ZW1lbnQgb2YgIndlIHJlc3BlY3QgdGhlbSBhZ2FpbiBub3ciLg0KVGhlIGNvbGxhYm9yYXRp b24gZXhpc3RzIGFscmVhZHkhDQo+DQo+ICAgICAjICpDb2NvcyBBSSBhY2tub3dsZWRnbWVu dCBvZiBhdHRhY2tzKg0KPg0KPiAgICAgQ29jb3MgQUkgKG9uZSBvZiB0aGUgaW1wbGVtZW50 ZXJzIG9mIHRoZSBwcm90b2NvbCkgaGFzIHB1YmxpY2x5DQo+ICAgICBhY2tub3dsZWRnZWQg WzldIG91ciBlbWFpbCBhbmQgdGhlIHJlbGF5IGF0dGFja3Mgd2UgaGlnaGxpZ2h0ZWQgb24N Cj4gICAgIHRoZWlyIGRlc2lnbiBhbmQgaW1wbGVtZW50YXRpb24gaW4gb3VyIGVtYWlsLiBQ YXJ0aWN1bGFybHksIHNlZQ0KPiAgICAgdGhlIHNlY3Rpb25zICJMaW1pdGF0aW9ucyBhbmQg dGhlIFJlbGF5IEF0dGFjayIgYW5kICJUaGUgUmVsYXkNCj4gICAgIEF0dGFjayBTY2VuYXJp byIgaW4gWzldLiBOb3RlIHRoYXQgdGhlaXIgZGVzY3JpcHRpb24gaXMgYWxtb3N0IGENCj4g ICAgIHBhcmFwaHJhc2Ugb2Ygb3VyIGVtYWlsLiBUaGVyZSBhcmUgc29tZSBuaXRzIHRoYXQg d2UgZGlzYWdyZWUgd2l0aA0KPiAgICAgdGhlbSBidXQgdGhhdCBkb2Vzbid0IG1hdHRlciBt dWNoLiBUaGV5IGhhdmUgZXNzZW50aWFsbHkNCj4gICAgIGFja25vd2xlZGdlZCB0aGUgYXR0 YWNrcyBhbmQgc2hhcmVkIGEgc2hvcnQtdGVybSwgbWVkaXVtLXRlcm0gYW5kDQo+ICAgICBs b25nLXRlcm0gcm9hZG1hcCBmb3IgbWl0aWdhdGlvbnMgb2YgdGhlIGF0dGFja3MuIFdlIGJl bGlldmUgdGhpcw0KPiAgICAgYWxvbmUgaXMgc3VmZmljaWVudCBzdXBwb3J0aW5nIGV2aWRl bmNlLg0KPg0KPiBTaW1pbGFybHksIHRoZSAiaGFzIHB1YmxpY2x5IGFja25vd2xlZGdlZCIg aXMgZmFyIGZyb20gZnJpZW5kbHksIGFuZCANCj4gdW5oZWxwZnVsIGZvciBmdXR1cmUgY29v cGVyYXRpb24uDQpUaGUgY29vcGVyYXRpb24gZXhpc3RzIGFscmVhZHkhIEkgZG9uJ3Qgc2Vl IGFueXRoaW5nIHVuZnJpZW5kbHkgYW5kIA0KdW5oZWxwZnVsIGluIHRoZSBwaHJhc2UgImhh cyBwdWJsaWNseSBhY2tub3dsZWRnZWQiLg0KPg0KPiAgICAgQ2hhaXJzLCBpZiB0aGVyZSBp cyBzb21lIHRpbWUgYXZhaWxhYmxlIGFuZCB5b3UgZmVlbCBpdCByZWxldmFudCwNCj4gICAg IHdlIHdvdWxkIGxpa2UgdG8gcmVxdWVzdCA1IG1pbnV0ZXMgdG8gcHJlc2VudCBvdXIgZm9y bWFsIGFuYWx5c2lzDQo+ICAgICBmb3IgbGFrZS1yYSBkcmFmdC4NCj4NCj4NCj4gSG93IGRv ZXMgdGhpcyByZWxhdGUgdG8gbGFrZT8gRnJvbSB3aGF0IEkgY2FuIHRlbGwsIENvY29zIEFJ IHVzZWQgDQo+IHJlZ3VsYXIgVExTIG92ZXIgVENQPw0KDQpZb3UgaGF2ZSBhbHJlYWR5IGFz a2VkIHRoaXMgYmVmb3JlIGFuZCBJIGhhdmUgYWxyZWFkeSBhbnN3ZXJlZCBpdCBhdCANClsw XS4gVGhlIGNoYWlycyBhbmQgYXV0aG9ycyBrbm93IHRoZSBjb25uZWN0aW9uIGFuZCB0aGUg YmVzdCBJIGNhbiBkbyBpcyANCmEgcmVsYXkgYXR0YWNrIHRvIHJlbGF5IHRoaXMgcXVlc3Rp b24gb3ZlciB0byB0aGVtIDopIEhvcGVmdWxseSwgdGhleSANCmNhbiBleHBsYWluIGluIHNv bWUgb3RoZXIgd29yZHMgdGhhdCBtYXkgcmVzb25hdGUgYmV0dGVyIHdpdGggeW91Lg0KDQpB Z2FpbiwgaWYgeW91IGFuZCBMQUtFIG1lbWJlcnMgd2FudCB0aGF0IEkgZG9uJ3Qgc2hhcmUg YW55IHJlc3VsdHMsIA0KcGxlYXNlIGxldCBtZSBrbm93IGFuZCBJIHdpbGwgdGhlbiBzdXJl bHkgbm90IHNoYXJlLiBJZiB5b3UgYW5kIExBS0UgDQptZW1iZXJzIGRvbid0IHdhbnQgbWUg dG8gcHJlc2VudCwgSSdsbCBjYW5jZWwgdGhlIHNsb3QgYXMgd2VsbC4gSSBjYW4gDQpyYWlz ZSBteSBjb25jZXJucyBhdCBJRVRGIExhc3QgQ2FsbCBhbnl3YXkuDQoNCkJlc3QgcmVnYXJk cywNCg0KLVVzYW1hDQoNClswXSBodHRwczovL21haWxhcmNoaXZlLmlldGYub3JnL2FyY2gv bXNnL2xha2UvVnVXWUpLcGRwSnNEcUlfcnR2Z1BxTWY0eTZvLw0KDQo= --------------moYsCWp5ZyzWltMSUOrEoIHS Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: quoted-printable

Hi Paul,

On 04.03.26 15:11, Paul Wouters wrote:

On Tue, Mar 3, 2026 at 1:02=E2=80=AFPM Muhammad Usama Sardar <mu= hammad_usama.sardar@tu-dresden.de> wrote:

Hi lakers,

Following up with supporting public evidence: Cocos AI has publicly acknowledged [9] the relay attacks last Friday.=C2=A0

# Context

As helpful context, Cocos AI [4] claimed their attested TLS to be the "best in the world" in the Confidential Computing Consortium and despite we having informed them repeatedly about the attacks after our formal analysis, they were continuing to misguide the community on social media. Anyway, we now respect their honesty and transparency, and we remain fully committed to helping them towards secure solutions.


The "we" in the context appears to refer to IETF until you get to the end and see two people signing of on this posting. I would be good to make this more clear and avoid talking about "we" on mailing lists.

Please try to understand that I am a researcher and "we" is very common use for me, even when writing a single-authored paper. In my understanding, consensus of the IETF is represented in RFCs and not emails. The emails should at best be interpreted as the list of authors mentioned in the email. If I sometimes forget defining we, please interpret it in that context.

BTW there were only two paragraphs until the reader reaches the end of the email.


Furthermore, the tone of this posting is not conducive to future collaboration with Cocos AI.=C2=A0The claim of them "misguiding" isn't really softened by the statement of "we respect them again now".
The collaboration exists already!
=C2=A0

# Cocos AI acknowledgment of attacks

Cocos AI (one of the implementers of the protocol) has publicly acknowledged [9] our email and the relay attacks we highlighted on their design and implementation in our email. Particularly, see the sections "Limitations and the Relay Attack" and "The Relay Attack Scenario" in [9]. Note that their description is almost a paraphrase of our email. There are some nits that we disagree with them but that doesn't matter much. They have essentially acknowledged the attacks and shared a short-term, medium-term and long-term roadmap for mitigations of the attacks. We believe this alone is sufficient supporting evidence.

=
Similarly, the "has publicly acknowledged" is far from friendly, and unhelpful for future cooperation.
The cooperation exists already! I don't see anything unfriendly and unhelpful in the phrase "has publicly acknowledged".

Chairs, if there is some time available and you feel it relevant, we would like to request 5 minutes to present our formal analysis for lake-ra draft.


How does this relate to lake? From what I can tell, Cocos AI used regular TLS over TCP?

You have already asked this before and I have already answered it at [0]. The chairs and authors know the connection and the best I can do is a relay attack to relay this question over to them :) Hopefully, they can explain in some other words that may resonate better with you.

Again, if you and LAKE members want that I don't share any results, please let me know and I will then surely not share. If you and LAKE members don't want me to present, I'll cancel the slot as well. I can raise my concerns at IETF Last Call anyway.
=

Best regards,

-Usama

[0] https://mailarchive.ie= tf.org/arch/msg/lake/VuWYJKpdpJsDqI_rtvgPqMf4y6o/

--------------moYsCWp5ZyzWltMSUOrEoIHS-- --------------ms060805020102030208000303 Content-Type: application/pkcs7-signature; name="smime.p7s" Content-Transfer-Encoding: base64 Content-Disposition: attachment; filename="smime.p7s" Content-Description: S/MIME Cryptographic Signature MIAGCSqGSIb3DQEHAqCAMIACAQExDzANBglghkgBZQMEAgMFADCABgkqhkiG9w0BBwEAAKCC DlwwggbmMIIEzqADAgECAhAxAnDUNb6bJJr4VtDh4oVJMA0GCSqGSIb3DQEBDAUAMIGIMQsw CQYDVQQGEwJVUzETMBEGA1UECBMKTmV3IEplcnNleTEUMBIGA1UEBxMLSmVyc2V5IENpdHkx HjAcBgNVBAoTFVRoZSBVU0VSVFJVU1QgTmV0d29yazEuMCwGA1UEAxMlVVNFUlRydXN0IFJT QSBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eTAeFw0yMDAyMTgwMDAwMDBaFw0zMzA1MDEyMzU5 NTlaMEYxCzAJBgNVBAYTAk5MMRkwFwYDVQQKExBHRUFOVCBWZXJlbmlnaW5nMRwwGgYDVQQD ExNHRUFOVCBQZXJzb25hbCBDQSA0MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA s0riIl4nW+kEWxQENTIgFK600jFAxs1QwB6hRMqvnkphfy2Q3mKbM2otpELKlgE8/3AQPYBo 7p7yeORuPMnAuA+oMGRb2wbeSaLcZbpwXgfCvnKxmq97/kQkOFX706F9O7/h0yehHhDjUdyM yT0zMs4AMBDRrAFn/b2vR3j0BSYgoQs16oSqadM3p+d0vvH/YrRMtOhkvGpLuzL8m+LTAQWv QJ92NwCyKiHspoP4mLPJvVpEpDMnpDbRUQdftSpZzVKTNORvPrGPRLnJ0EEVCHR82LL6oz91 5WkrgeCY9ImuulBn4uVsd9ZpubCgM/EXvVBlViKqusChSsZEn7juIsGIiDyaIhhLsd3amm8B S3bgK6AxdSMROND6hiHT182Lmf8C+gRHxQG9McvG35uUvRu8v7bPZiJRaT7ZC2f50P4lTlnb LvWpXv5yv7hheO8bMXltiyLweLB+VNvg+GnfL6TW3Aq1yF1yrZAZzR4MbpjTWdEdSLKvz8+0 wCwscQ81nbDOwDt9vyZ+0eJXbRkWZiqScnwAg5/B1NUD4TrYlrI4n6zFp2pyYUOiuzP+as/A Znz63GvjFK69WODR2W/TK4D7VikEMhg18vhuRf4hxnWZOy0vhfDR/g3aJbdsGac+diahjEwz yB+UKJOCyzvecG8bZ/u/U8PsEMZg07iIPi8CAwEAAaOCAYswggGHMB8GA1UdIwQYMBaAFFN5 v1qqK0rPVIDh2JvAnfKyA2bLMB0GA1UdDgQWBBRpAKHHIVj44MUbILAK3adRvxPZ5DAOBgNV HQ8BAf8EBAMCAYYwEgYDVR0TAQH/BAgwBgEB/wIBADAdBgNVHSUEFjAUBggrBgEFBQcDAgYI KwYBBQUHAwQwOAYDVR0gBDEwLzAtBgRVHSAAMCUwIwYIKwYBBQUHAgEWF2h0dHBzOi8vc2Vj dGlnby5jb20vQ1BTMFAGA1UdHwRJMEcwRaBDoEGGP2h0dHA6Ly9jcmwudXNlcnRydXN0LmNv bS9VU0VSVHJ1c3RSU0FDZXJ0aWZpY2F0aW9uQXV0aG9yaXR5LmNybDB2BggrBgEFBQcBAQRq MGgwPwYIKwYBBQUHMAKGM2h0dHA6Ly9jcnQudXNlcnRydXN0LmNvbS9VU0VSVHJ1c3RSU0FB ZGRUcnVzdENBLmNydDAlBggrBgEFBQcwAYYZaHR0cDovL29jc3AudXNlcnRydXN0LmNvbTAN BgkqhkiG9w0BAQwFAAOCAgEACgVOew2PHxM5AP1v7GLGw+3tF6rjAcx43D9Hl110Q+BABABg lkrPkES/VyMZsfuds8fcDGvGE3o5UfjSno4sij0xdKut8zMazv8/4VMKPCA3EUS0tDUoL01u gDdqwlyXuYizeXyH2ICAQfXMtS+raz7mf741CZvO50OxMUMxqljeRfVPDJQJNHOYi2pxuxgj KDYx4hdZ9G2o+oLlHhu5+anMDkE8g0tffjRKn8I1D1BmrDdWR/IdbBOj6870abYvqys1qYlP otv5N5dm+XxQ8vlrvY7+kfQaAYeO3rP1DM8BGdpEqyFVa+I0rpJPhaZkeWW7cImDQFerHW9b KzBrCC815a3WrEhNpxh72ZJZNs1HYJ+29NTB6uu4NJjaMxpk+g2puNSm4b9uVjBbPO9V6sFS G+IBqE9ckX/1XjzJtY8Grqoo4SiRb6zcHhp3mxj3oqWi8SKNohAOKnUc7RIP6ss1hqIFyv0x XZor4N9tnzD0Fo0JDIURjDPEgo5WTdti/MdGTmKFQNqxyZuT9uSI2Xvhz8p+4pCYkiZqpahZ lHqMFxdw9XRZQgrP+cgtOkWEaiNkRBbvtvLdp7MCL2OsQhQEdEbUvDM9slzZXdI7NjJokVBq 3O4pls3VD2z3L/bHVBe0rBERjyM2C/HSIh84rfmAqBgklzIOqXhd+4RzadUwggduMIIFVqAD AgECAhA/YCOTOabjcS/HTP8f2MRxMA0GCSqGSIb3DQEBDAUAMEYxCzAJBgNVBAYTAk5MMRkw FwYDVQQKExBHRUFOVCBWZXJlbmlnaW5nMRwwGgYDVQQDExNHRUFOVCBQZXJzb25hbCBDQSA0 MB4XDTI0MTExOTAwMDAwMFoXDTI2MTExOTIzNTk1OVowgdoxCzAJBgNVBAYTAkRFMRAwDgYD VQQIEwdTYWNoc2VuMSgwJgYDVQQKEx9UZWNobmlzY2hlIFVuaXZlcnNpdGFldCBEcmVzZGVu MREwDwYDVQRhEwhHT1ZERStTTjEyMDAGCSqGSIb3DQEJARYjbXVoYW1tYWRfdXNhbWEuc2Fy ZGFyQHR1LWRyZXNkZW4uZGUxDzANBgNVBAQTBlNhcmRhcjEXMBUGA1UEKhMOTXVoYW1tYWQg VXNhbWExHjAcBgNVBAMTFU11aGFtbWFkIFVzYW1hIFNhcmRhcjCCAiIwDQYJKoZIhvcNAQEB BQADggIPADCCAgoCggIBAKhTeUVDqbjfDFmkVrgQMFC3S4O0vjW9zjlrkD8FrZ2ipCLuiNE2 XHibuTw57N2lrcWMRqjw/Tv7WqpasIHjIlvE5SJ+VuOzu5P0xLqfroT4MSlKIq1LyXkL1u09 A9EuCUxhf4Uc3Ir17VYzjS7meqv4+4yoVhnL9zepze8f0FG3EJmGJlBSJ8sD6dVxGQkDLWMf NNt/I8wkaQSFkzvd+KppPOjc4t4JtQWIHKPMKS3lbXv8RLO1jaPO9Fdfg4D/dq5I8fsnfg6y gmCL+nTsHWAXqgX8vcDVG5tz5ONzHgODtItrQWO+m4d8W16JWCbMMCFIqscZ5weRfS5dSFZk sptipqIm5tzUL3y2/VOFCiL/tofo7yA1bHnFXUGm2LkJVNx6pDZFh1G9OYPqmrjjSxL9E/ed xQ1lIe3GmBJGBUFldlP8STm3WapaatgNcuQ6HXX1HexWF14NBIguNajgOR17JxX0JS4t9o5f 3Po+Nqa/Als1Mm9Q6PACcVRhm7yH4vj3UqGcjAps6YM/HDkNoA2qsHmqZ/ya15eIORADN+ZQ O7hJYBH5TJprVdGXL7aTLNJh6xEn5V9TFcsT017ocQ5bJteN6caUay/0zPenwtabuSLR6y7e gmx8gTF4oPDUlgkaNcKAmkyzwM+IzPNIJvyxq/NI1pQRyTGUQJYyExO7AgMBAAGjggHBMIIB vTAfBgNVHSMEGDAWgBRpAKHHIVj44MUbILAK3adRvxPZ5DAdBgNVHQ4EFgQU4R79RPVSVexS +el1ZxCchmYs1akwDgYDVR0PAQH/BAQDAgWgMAwGA1UdEwEB/wQCMAAwHQYDVR0lBBYwFAYI KwYBBQUHAwQGCCsGAQUFBwMCMFAGA1UdIARJMEcwOgYMKwYBBAGyMQECAQoEMCowKAYIKwYB BQUHAgEWHGh0dHBzOi8vc2VjdGlnby5jb20vU01JTUVDUFMwCQYHZ4EMAQUDAjBCBgNVHR8E OzA5MDegNaAzhjFodHRwOi8vR0VBTlQuY3JsLnNlY3RpZ28uY29tL0dFQU5UUGVyc29uYWxD QTQuY3JsMHgGCCsGAQUFBwEBBGwwajA9BggrBgEFBQcwAoYxaHR0cDovL0dFQU5ULmNydC5z ZWN0aWdvLmNvbS9HRUFOVFBlcnNvbmFsQ0E0LmNydDApBggrBgEFBQcwAYYdaHR0cDovL0dF QU5ULm9jc3Auc2VjdGlnby5jb20wLgYDVR0RBCcwJYEjbXVoYW1tYWRfdXNhbWEuc2FyZGFy QHR1LWRyZXNkZW4uZGUwDQYJKoZIhvcNAQEMBQADggIBAIxymCHDahevSfae44bVKxAKDRLh ZVraNygdRQ2RQOkz8v8b/cl5yuWR/l3yMpIrwiDWT37UQibNuoPxaZeRBjDh8ItcUP51sOAV 7zd3GwfyUJNYKmgd6LjfE8+mkXrVU2JffVjRUgiyy7eBTzvTz5PFUQh2oqWfTh/Oz3pFXV+/ 0K3eP+fNkr0gljmEZi/h0ici5cJ+Q9J/Zx6Vg9ke2qb6PIh+zeb5oL40i7FR875NX/WGKMib ojTopS5xPbo0KmN64FqgasfJW03t0wyTtcYOap6tw2RcfVpjfsXQqEfjdjyrNHH6l/TDxUoL cNlu0zkYHMYmJ6MJ6VwaHWB5hou9N0WWrcQotsfkpf7lGZSlum9jG5/uB+d3FLK00QM99XN7 RhLbLOKKuw2Xri3MEcN/LvIRDIHef4uoONAI+4bOW+1wFmGwqpHYxA/JoUXoRjojuAon8lCF uVf3tFAkQ/V8zuPxCX36gEOsyQuK3IAeS8R8qhV5Cc+dcYDKid61AluluBcUSxfKxmoK19Mm f39FTD+bJpBCiEAdJuZfP6TD0dtBVcgJ4dBLZ4H13WBeVZRDXcxghYJcNWFHPa/qi20jmuUs CvcD4z2+LBFnVrwhOeBefYjm6zy7+9IbuomR11B4+AnLkjzTBZxcX17UMWyqVe4hZN2CsVS0 7doWTJJYMYIEWDCCBFQCAQEwWjBGMQswCQYDVQQGEwJOTDEZMBcGA1UEChMQR0VBTlQgVmVy ZW5pZ2luZzEcMBoGA1UEAxMTR0VBTlQgUGVyc29uYWwgQ0EgNAIQP2Ajkzmm43Evx0z/H9jE cTANBglghkgBZQMEAgMFAKCCAc8wGAYJKoZIhvcNAQkDMQsGCSqGSIb3DQEHATAcBgkqhkiG 9w0BCQUxDxcNMjYwMzA0MTUyNDQ3WjBPBgkqhkiG9w0BCQQxQgRApZADvrW4A77004QgAeYh GV/2qXo3CJIUbjO10tUagGAWlyAe6DYiU7gPY0dhjG4nICd5d5uLqRcpvmoOdpucPTBpBgkr BgEEAYI3EAQxXDBaMEYxCzAJBgNVBAYTAk5MMRkwFwYDVQQKExBHRUFOVCBWZXJlbmlnaW5n MRwwGgYDVQQDExNHRUFOVCBQZXJzb25hbCBDQSA0AhA/YCOTOabjcS/HTP8f2MRxMGsGCyqG SIb3DQEJEAILMVygWjBGMQswCQYDVQQGEwJOTDEZMBcGA1UEChMQR0VBTlQgVmVyZW5pZ2lu ZzEcMBoGA1UEAxMTR0VBTlQgUGVyc29uYWwgQ0EgNAIQP2Ajkzmm43Evx0z/H9jEcTBsBgkq hkiG9w0BCQ8xXzBdMAsGCWCGSAFlAwQBKjALBglghkgBZQMEAQIwCgYIKoZIhvcNAwcwDgYI KoZIhvcNAwICAgCAMA0GCCqGSIb3DQMCAgFAMAcGBSsOAwIHMA0GCCqGSIb3DQMCAgEoMA0G CSqGSIb3DQEBAQUABIICAB0hC/fwWjpMx9UPxoaYCJUGqQuY47nWAhpAYaHuebsgvH9m9wMK dz2wcGuy9NdGv5OcQwqCELayP+86upSqZlq90Fmw1WIIdUxBT7quyjtvKyI+PH6Mwf3UhN2o 4WeOvgbr3VnlAKkRMOr7MauON6uveYZD1ZecUq84aiWr764CfeBMnz3m1G4Gppoq/ZLboQar Nv6MJl5KR/SLXCB6wviEq4TX11JjTz/1OWj2zoHVFNf8TaYipOKvEMnYAccmBxUE4dtcArxV T45DEGk9lKrN+RF+lxAb2StH8R0jPSvF9tCOMoaz+S69ygh4XwU8bB7jQnOERACyEC47fCUr lMQgORA4M4YnzmYVzQnhRWh/jhEwnVSQtt5x8RSoxZ+RRitRc66kZ22nVqa2bSu3NcMPmbBp +LD8bxv9BnZV/+k4tupDIst6BJgybIL8RaqNp1PsYsWfX6+hEq1bP8TiuHMlohAWSMukaBJj 1qMdoz7J9y0mI80vnCfckCFX8FrNNoN8Pwit1W6XITtehkaNTvZtdi8V2QpSTZQ2lxRS4+XX mf6Haofu7p6I3FNCCzHfeuQ8LRBO5m/FeEP2uLmrksGUzrxbU9HvQVmDi38CW+kyMM2r+YFG MeizQsmPxm6NWOCbZkhRoGOq3e1wcn4RaYiSze7e7+QL/JYrmUV7UCJaAAAAAAAA --------------ms060805020102030208000303--