From nobody Fri Oct 8 11:57:35 2021 Return-Path: X-Original-To: spasm@ietfa.amsl.com Delivered-To: spasm@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 0A4D63A0DE2 for ; Fri, 8 Oct 2021 11:57:33 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.898 X-Spam-Level: X-Spam-Status: No, score=-1.898 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, SPF_HELO_NONE=0.001, SPF_NONE=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 0qcORgUF_dKv for ; Fri, 8 Oct 2021 11:57:28 -0700 (PDT) Received: from MX2.LL.MIT.EDU (mx2.ll.mit.edu [129.55.12.51]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 50ABE3A0DE0 for ; Fri, 8 Oct 2021 11:57:28 -0700 (PDT) Received: from LLEX2019-1.mitll.ad.local (llex2019-1.llan.ll.mit.edu [172.25.4.123]) by MX2.LL.MIT.EDU (8.16.1.2/8.16.1.2) with ESMTPS id 198IvPAq045019 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=FAIL); Fri, 8 Oct 2021 14:57:26 -0400 ARC-Seal: i=1; a=rsa-sha256; s=arcselector5401; d=microsoft.com; cv=none; b=d62Uc9XcpjcoJFWApVEfm2dhGggjcfbi/fbqv3w6IedumiwjpXlNFP/aa1+342wdXBzitGyXarR5214b28Asvl2AhceuVCYUZ2ao9aGVjndMCQrU1ZQfs44vfWwIJhWxYlS/WgBKbabBT5SLAsQ7LgPeX36vYi4M492IlufUETRl9h4IqzQoMF5tETtUV4JsXYchA+SjR0V/PUX/t2sgXCRc04AiPGKrlZLHCtBhUm396TqRqBGyH0dPEI3xUHEr/3CQOD5xTiyix6elrQc+0B/7gfLvZ6O9ceSgZIBi5ozqfFrSucnaiyh5TEIjNdC04iUVsa2dABjhY2R+/nbY6A== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector5401; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=bYbSu4I9n7UCAdaog+4EeXgG+5Wkf1g9zwSiPCGhH2Y=; b=qhsimaouS9cIVMrZGkHs0pGvgpGBbV5X0QOgHJzoa0HejCcuxtb/Ypn6XkuTNnLZ984BuC/1jUBW4jBWFaMy+EGGpIHJdrDZ5/pQTTgqMYI9/mHXyMA9ryWCWLNguU/SCxshTynAjel/784TH6jdgYraa4wzcsLDW4zBzApB1L1OHC1dNQrcpo7hXPjDLYbQf7zMaEvgqTAMfZrBeby4RIipcCCuk+PfnfNtYH4thWF1dZ/oJY/zdkiePE6kVuGEtZYXfLDLhKvqZADtj9CkuNNpo4QJ6KZks+SpTi9G7putwSCG6SVL3bRdHT/ktYiP6wicdtbbjtgtXhqeY5LyZw== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=ll.mit.edu; dmarc=pass action=none header.from=ll.mit.edu; dkim=pass header.d=ll.mit.edu; arc=none From: "Blumenthal, Uri - 0553 - MITLL" To: Benjamin Kaduk , Russ Housley CC: LAMPS WG Thread-Topic: =?utf-8?B?W2xhbXBzXSBPSUQgZsO8ciBLRU0/?= Thread-Index: AQHXvGRWhcj346/cM0CZhvsQ6ENjEavJUY4A///BIACAAEQIgIAAASkA///Y7YA= Date: Fri, 8 Oct 2021 18:57:20 +0000 Message-ID: <9710DAC4-ABB2-41D7-8F4B-BDC55DE96F62@ll.mit.edu> References: <5BA17D7A-F19D-474B-8DD8-8EB36A363818@ll.mit.edu> <8A3163D9-EB86-487E-B0D4-75A39AB44797@vigilsec.com> <20211008171710.GU4103@kduck.mit.edu> In-Reply-To: <20211008171710.GU4103@kduck.mit.edu> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: yes X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/16.52.21080801 authentication-results: mit.edu; dkim=none (message not signed) header.d=none;mit.edu; dmarc=none action=none header.from=ll.mit.edu; x-ms-publictraffictype: Email x-ms-office365-filtering-correlation-id: ee8746ae-a6ee-4cf5-ff83-08d98a8d749f x-ms-traffictypediagnostic: BN1P110MB0819: x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:8273; x-ms-exchange-senderadcheck: 1 x-microsoft-antispam: BCL:0; x-microsoft-antispam-message-info: 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 x-forefront-antispam-report: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:; IPV:NLI; SFV:NSPM; H:BN1P110MB0706.NAMP110.PROD.OUTLOOK.COM; PTR:; CAT:NONE; SFS:(366004)(4326008)(38100700002)(498600001)(76116006)(33656002)(8936002)(66946007)(83380400001)(66446008)(6512007)(64756008)(66556008)(66476007)(71200400001)(186003)(99936003)(6486002)(6506007)(53546011)(122000001)(5660300002)(75432002)(2616005)(224303003)(110136005)(26005)(966005)(2906002)(86362001)(38070700005)(45980500001); DIR:OUT; SFP:1102; x-ms-exchange-antispam-messagedata-chunkcount: 1 x-ms-exchange-antispam-messagedata-0: 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 x-ms-exchange-transport-forked: True Content-Type: multipart/signed; protocol="application/pkcs7-signature"; micalg=sha256; boundary="B_3716549839_1927390425" MIME-Version: 1.0 X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-AuthSource: BN1P110MB0706.NAMP110.PROD.OUTLOOK.COM X-MS-Exchange-CrossTenant-Network-Message-Id: ee8746ae-a6ee-4cf5-ff83-08d98a8d749f X-MS-Exchange-CrossTenant-originalarrivaltime: 08 Oct 2021 18:57:20.0350 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 83d1efe3-698e-4819-911b-0a8fbe79d01c X-MS-Exchange-Transport-CrossTenantHeadersStamped: BN1P110MB0819 X-Proofpoint-GUID: IuKUBehRM1CB5E9AX43U4GRdys9deG05 X-Proofpoint-ORIG-GUID: IuKUBehRM1CB5E9AX43U4GRdys9deG05 X-Proofpoint-Virus-Version: vendor=fsecure engine=2.50.10434:6.0.391, 18.0.790 definitions=2021-10-08_06:2021-10-07, 2021-10-08 signatures=0 X-Proofpoint-Spam-Details: rule=notspam policy=default score=0 suspectscore=0 mlxscore=0 spamscore=0 bulkscore=0 malwarescore=0 adultscore=0 mlxlogscore=999 phishscore=0 classifier=spam adjust=0 reason=mlx scancount=1 engine=8.12.0-2109230001 definitions=main-2110080106 Archived-At: Subject: Re: [lamps] =?utf-8?q?OID_f=C3=BCr_KEM=3F?= X-BeenThere: spasm@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "This is a venue for discussion of doing Some Pkix And SMime \(spasm\) work." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 08 Oct 2021 18:57:33 -0000 --B_3716549839_1927390425 Content-type: text/plain; charset="UTF-8" Content-transfer-encoding: 7bit On 10/8/21, 13:17, "Benjamin Kaduk" wrote: On Fri, Oct 08, 2021 at 01:13:01PM -0400, Russ Housley wrote: >> . . . . . My worry is with the winning algorithms. >> I worry that implementations will have to support the >> researcher-assigned OID and the NIST-assigned OID. > > Sounds like what happened at https://github.com/openssl/openssl/pull/16594 > > OpenSSL waited for the final SHA3 to implement, but then > got asked to also expose pre-standardization Keccak. ^^^^ I acknowledge the concern that Russ expressed. But IMHO, it's inconvenient at worst. I see no reason to bend over backwards trying to avoid such a situation. Another example: NIST standardized AES, removing certain capabilities of Rijndael. In our use case (that predates SHA3 by almost a decade ;), we needed a 256-bit block cipher for crypto hash. So, in our protocol we had to use *both* AES (aka, modified/constrained Rijndael) *and* Rijndael itself. Since it was for "internal consumption", we got by with assigning no specific per-algorithm identifiers (agility was provided by another way, details would only bore the audience ;). --B_3716549839_1927390425 Content-Type: application/pkcs7-signature; name="smime.p7s" Content-Transfer-Encoding: base64 Content-Disposition: attachment; filename="smime.p7s" MIIUfQYJKoZIhvcNAQcCoIIUbjCCFGoCAQExDzANBglghkgBZQMEAgEFADALBgkqhkiG9w0B BwGgghJDMIIE8zCCA9ugAwIBAgITWQAE/KGDHCQY5NLn7AAAAAT8oTANBgkqhkiG9w0BAQsF ADBRMQswCQYDVQQGEwJVUzEfMB0GA1UECgwWTUlUIExpbmNvbG4gTGFib3JhdG9yeTEMMAoG A1UECwwDUEtJMRMwEQYDVQQDDApNSVRMTCBDQS01MB4XDTIwMTIxMTAwMDQ0OVoXDTI1MTIx MDAwMDQ0OVowYTELMAkGA1UEBhMCVVMxHzAdBgNVBAoTFk1JVCBMaW5jb2xuIExhYm9yYXRv cnkxDzANBgNVBAsTBlBlb3BsZTEgMB4GA1UEAxMXQmx1bWVudGhhbC5VcmkuNTAwMTA1ODQw ggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCKE/w5SMRbjqdnzi3xm35MTfqSl/hP NjMbDakZIdbjOM3UKEmPFXc6a6VU/QqOJUi6ndjw0tH7RCVP73bdRPXO/E8WiAaaSYG6Ddqr 02Pv6wThtFuh+ll9IbDRWZCrXdglHg5CdvqpmlsX5UY54/Gb5r+Je3CwHewClS9/KqklAu/M Rj7Cc7g+PM9GcvU63WDVgXiuAplgvA+W5Hvmcnseb97nBuBnZ1kgbFScRNLR8y5QxSrSpXxW YRiH8dlr/LfBSYsgClZ57NhMk6Z4YL3y1Pw6Vq8pXtM7hlSq8/6s/jhxwf6vUDDeBAkoEWxl hqJtjdD+qrucwiRcrt9SNOufAgMBAAGjggGyMIIBrjAdBgNVHQ4EFgQURapIqD1qtfvgIhzU 5deTdhe9DyMwDgYDVR0PAQH/BAQDAgbAMB8GA1UdIwQYMBaAFC/vu8YNHbvpav6sZ/MHOwh2 9ktZMDMGA1UdHwQsMCowKKAmoCSGImh0dHA6Ly9jcmwubGwubWl0LmVkdS9nZXRjcmwvbGxj YTUwZgYIKwYBBQUHAQEEWjBYMC0GCCsGAQUFBzAChiFodHRwOi8vY3JsLmxsLm1pdC5lZHUv Z2V0dG8vbGxjYTUwJwYIKwYBBQUHMAGGG2h0dHA6Ly9vY3NwLmxsLm1pdC5lZHUvb2NzcDA9 BgkrBgEEAYI3FQcEMDAuBiYrBgEEAYI3FQiDg+Udh+ynZoathxWD6vBFhbahHx2Fy94yh/+K cwIBZAIBCjAiBgNVHSUBAf8EGDAWBggrBgEFBQcDBAYKKwYBBAGCNwoDDDAZBgNVHREEEjAQ gQ51cmlAbGwubWl0LmVkdTAYBgNVHSAEETAPMA0GCyqGSIb3EgIBAwEIMCcGCSsGAQQBgjcU AgQaHhgATABMAFUAcwBlAHIAUwBpAGcALQBTAFcwDQYJKoZIhvcNAQELBQADggEBABAw2S9N p+Aii+rVwD0uTZSRjpL7QD9sWkH1WB1Yd/88m+R6xZtKiD1PJLKXzcumU1V9FAPYZufhCcPV KRgyGbizPBn+f3t13bDieGHLd0DWM4abQiEgiFDsUDzTJ78WwHt/PFMjFe/oFSgghgKcOiBO QdxA7oWgV0cvJmc0hNxV6aPACboXW4qAXKMaMXPrhAXJTkL81uoemEf54gdROFIdVLYOUdba mGmstwRcTn1RsJhIcu2EDSNpyfwfK1NUNQAe199BaNenGrKW9yTHwEY55c9xusIEEaW+FLAi jseXn2gIvlQ0W2P2NMm7YCir0F6PI3DDH8+XmfcrbSfNt9swggTAMIIDqKADAgECAgEGMA0G CSqGSIb3DQEBCwUAMFYxCzAJBgNVBAYTAlVTMR8wHQYDVQQKExZNSVQgTGluY29sbiBMYWJv cmF0b3J5MQwwCgYDVQQLEwNQS0kxGDAWBgNVBAMTD01JVExMIFJvb3QgQ0EtMjAeFw0xNzAz MDIxMjAwMDBaFw0yNjAzMDIyMzU5NTlaMFExCzAJBgNVBAYTAlVTMR8wHQYDVQQKDBZNSVQg TGluY29sbiBMYWJvcmF0b3J5MQwwCgYDVQQLDANQS0kxEzARBgNVBAMMCk1JVExMIENBLTUw ggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnmoMOvTkfw7nq19mrWazGaa+Q83Uv 0+ATXT3q6kr+WExIMIZ87C74WCcRXpvO7uvx7HvMsYWAFHW93wQwhjytxHIOZgKNJ4VnGVDU l+KI7g0n9+Zjt3hB3HhHbcvbe9+Y4jz+XzCiLl2OaYvICKbxvbBSCLtPEeZQ6x6Tb6EK0ym0 gvYeHO3kuuY+SJHJMltbrLnIVLxjZrNVS77zXKvu6Q3hSdkRIB7kJgEXfL+p/z/2p94bEEZ2 TnQz0TkOjG+Jq7UlXlFRtvsYcDPEQD3UNkZsWcXgC1hXG8TGknUcAhlGxVhlKlFLmNd7342s eGy2s9YxNDnSE+eXTtb0I5LLAgMBAAGjggGcMIIBmDASBgNVHRMBAf8ECDAGAQH/AgEAMB0G A1UdDgQWBBQv77vGDR276Wr+rGfzBzsIdvZLWTAfBgNVHSMEGDAWgBT/ycllTFOA8akMPCGu girH7vgy+zAOBgNVHQ8BAf8EBAMCAYYwZwYIKwYBBQUHAQEEWzBZMC4GCCsGAQUFBzAChiJo dHRwOi8vY3JsLmxsLm1pdC5lZHUvZ2V0dG8vTExSQ0EyMCcGCCsGAQUFBzABhhtodHRwOi8v b2NzcC5sbC5taXQuZWR1L29jc3AwNAYDVR0fBC0wKzApoCegJYYjaHR0cDovL2NybC5sbC5t aXQuZWR1L2dldGNybC9MTFJDQTIwgZIGA1UdIASBijCBhzANBgsqhkiG9xICAQMBBjANBgsq hkiG9xICAQMBCDANBgsqhkiG9xICAQMBBzANBgsqhkiG9xICAQMBCTANBgsqhkiG9xICAQMB CjANBgsqhkiG9xICAQMBCzANBgsqhkiG9xICAQMBDjANBgsqhkiG9xICAQMBDzANBgsqhkiG 9xICAQMBEDANBgkqhkiG9w0BAQsFAAOCAQEAMJYRwLPJ91K7e2mA2Nj10W0o5JMHYkaa+ctL 8/xY8QzIHFI5Ij+iydpPN9KCYn/4Sy80T3aNoYkFlS0GRQXhf0nsiY7TWJwAKw4AiO/yJ37/ oRKRgtyRicvaJ6RjlHCXBOalFLw9UtpodP4/idC51lxzsolaQZraBjVe7PL95PhS7D+22Nff InzLdIb1DBf54NwOVfPIgABtxH1fhZrja7EhR9RoUw5E1O6iWaAuP/xWhSTQFWlhyA0/kkIi 9/HXaY0hYnhcjcbPPqjpyfIhSFjjXhjqK7t2wPrSrBFLFUbnLiNlgQHrvNYF5IqgIfnSBWIr m3rfLhpZZJ/xJ7Yf6DCCA4owggJyoAMCAQICAQEwDQYJKoZIhvcNAQELBQAwVjELMAkGA1UE BhMCVVMxHzAdBgNVBAoTFk1JVCBMaW5jb2xuIExhYm9yYXRvcnkxDDAKBgNVBAsTA1BLSTEY MBYGA1UEAxMPTUlUTEwgUm9vdCBDQS0yMB4XDTE2MDQyMDEyMDAwMFoXDTM1MDQxOTIzNTk1 OVowVjELMAkGA1UEBhMCVVMxHzAdBgNVBAoTFk1JVCBMaW5jb2xuIExhYm9yYXRvcnkxDDAK BgNVBAsTA1BLSTEYMBYGA1UEAxMPTUlUTEwgUm9vdCBDQS0yMIIBIjANBgkqhkiG9w0BAQEF AAOCAQ8AMIIBCgKCAQEAv3WoBEGOOJtm4ucvaf6vKIFPs8watCd6Smwq/XeRNo7P3jPIxNPw F398RGDUmPJIXA7idzD6j0opFIW+kLqYye9e788PV0dqaJlX8818fNDbSE+8B6hieqKTR7Vf OI74UVQEUKVRFuRFw6uVYuvgew2Tj/C2dEee37eruQl5nHkbV2OsWnZ7O+yt+etd6HRcaXLl P9q8WKgA3B7vkOVIMCKoAuaWj+BFq7K+WNkiyi/KdOH9JmOpbyRK4jcA7xbLnF8JFUSNg5c4 Y1BJrFaZtkCeG6Nm9p524GllkRFzPgpj8VicV+AK+9rY07dTx02kYotTnKuy0YxBAwsUXxAQ EwIDAQABo2MwYTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBT/ycllTFOA8akMPCGugirH 7vgy+zAfBgNVHSMEGDAWgBT/ycllTFOA8akMPCGugirH7vgy+zAOBgNVHQ8BAf8EBAMCAYYw DQYJKoZIhvcNAQELBQADggEBAHqYfEf/3J5aMKhlYQ0PnUAbMB8jZSr9/HvjfOF00crFUCfS rqG8JQwo+S/iq66gcp62FEgJ0fQkDgVg6m+C2ETo1LoWiSxhYCfcSIQECljlXwR8wFSayF82 2S69IqvHhdq4d58jU6gYi6ssjU4vwsvsVLRJKk/m/Cg/w8gW6YHM5ahBD6/5Ccel2fI7oSms kO991+otrC11YfDwCFvz7Am0r+K9iVhSWta4hmIuV0YBia07eZKSO02LPgQ8YOz3ku0Yt+mh 8VWRKux2CcYjMpk+WDV0BMp75tqb6pqBFkcKvEBXqxg+8+G/umjii4H0c5kvJhaQyykbmOKm xO9IcJIwggT2MIID3qADAgECAhNZAAUW1xDL1n3IkFBHAAAABRbXMA0GCSqGSIb3DQEBCwUA MFExCzAJBgNVBAYTAlVTMR8wHQYDVQQKDBZNSVQgTGluY29sbiBMYWJvcmF0b3J5MQwwCgYD VQQLDANQS0kxEzARBgNVBAMMCk1JVExMIENBLTUwHhcNMjEwNzA2MjM0ODI1WhcNMjYwMzAy MjM1OTU5WjBhMQswCQYDVQQGEwJVUzEfMB0GA1UEChMWTUlUIExpbmNvbG4gTGFib3JhdG9y eTEPMA0GA1UECxMGUGVvcGxlMSAwHgYDVQQDExdCbHVtZW50aGFsLlVyaS41MDAxMDU4NDCC ASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALMRXUPN5Fz28jb9GOca2/6HDq5EE4Hu T1enB0TiMEnOTipW88pgPmSZ/AAFyJF7AWX7PYPw94Ed/Bbs7yCCa6WZS7cQzdHOWppx9gRZ AxkR8+TgosxPcHoCMXmI/hXtVdZ7mwZlpBGJvyBe6YRmxOWLl3WiCRi/gBThwEWsiQZOfhEN 7hC2GhgCKetpNlTRPxslLmkStNlnjNAxhet8Vm/KSYJFVPOx3qytdLwnO6sz4AfIJJQkFX26 6oP0F/4bjRGlIZrZpdUPGiydpJl1r5SRcYs1ZE7JHErULWSyiAIzBDHUCTcN2GnFoR+9fz92 q2VIHvNHx7bV1hd0E0zlC9UCAwEAAaOCAbUwggGxMB0GA1UdDgQWBBSQ5IixU+wo9uUYNUB4 G/ea7vuWEjAOBgNVHQ8BAf8EBAMCBSAwHwYDVR0jBBgwFoAUL++7xg0du+lq/qxn8wc7CHb2 S1kwMwYDVR0fBCwwKjAooCagJIYiaHR0cDovL2NybC5sbC5taXQuZWR1L2dldGNybC9sbGNh NTBmBggrBgEFBQcBAQRaMFgwLQYIKwYBBQUHMAKGIWh0dHA6Ly9jcmwubGwubWl0LmVkdS9n ZXR0by9sbGNhNTAnBggrBgEFBQcwAYYbaHR0cDovL29jc3AubGwubWl0LmVkdS9vY3NwMD0G CSsGAQQBgjcVBwQwMC4GJisGAQQBgjcVCIOD5R2H7Kdmhq2HFYPq8EWFtqEfHYXr0HCD6+0g AgFkAgELMCUGA1UdJQQeMBwGBFUdJQAGCCsGAQUFBwMEBgorBgEEAYI3CgMEMBkGA1UdEQQS MBCBDnVyaUBsbC5taXQuZWR1MBgGA1UdIAQRMA8wDQYLKoZIhvcSAgEDAQgwJwYJKwYBBAGC NxQCBBoeGABMAEwAVQBzAGUAcgBFAG4AYwAtAFMAVzANBgkqhkiG9w0BAQsFAAOCAQEAICZO a7qQQMDGZzRUaX+Mm/3meVo0nTEdNby178MGq6uYGUS4keIkljEoI+KiEMbT8rtCOBZwomnO HdJmLuRUEgrVAos27V4yjvoic8QKsz+qEhxslFg/2EYMAbTsyLqg34R+wG5o6K95ohUrgLud fPxAmcLOFBtIZBr/3DUIlzw4xHKiX2ruex7YOrQccgXb2qGtNB7tG6jAaXqFb+NZTJhj+3pd OiZiZanzpZvPLIH6Xe4awqDrok7q9ImwwSSQorNrJxKKtA3vLUW3DGvom3XDiOjDqpzhmqXC u6Wf7JfrSJRaudU2WyvYfPk7NQlkLR/1G6Xz+zKqO/cBt2aNATGCAf4wggH6AgEBMGgwUTEL MAkGA1UEBhMCVVMxHzAdBgNVBAoMFk1JVCBMaW5jb2xuIExhYm9yYXRvcnkxDDAKBgNVBAsM A1BLSTETMBEGA1UEAwwKTUlUTEwgQ0EtNQITWQAE/KGDHCQY5NLn7AAAAAT8oTANBglghkgB ZQMEAgEFAKBpMC8GCSqGSIb3DQEJBDEiBCAGhBKUqvPoKvuZfRLgsIQIqk/dWu1oeG8LoqiJ byD0zTAYBgkqhkiG9w0BCQMxCwYJKoZIhvcNAQcBMBwGCSqGSIb3DQEJBTEPFw0yMTEwMDgx ODU3MTlaMA0GCSqGSIb3DQEBAQUABIIBAHC06MzEm6lHLD1yun2xEUfLC5gDmCe89Q+STU+7 8i4UQtprHaPnWU3LGPAAujEbxMmaEJXhsxLtG1+cf5n26F/H3UfMGmT839VSWpEqE7pUhmK5 hw7dYNs+WFSz7X/3exczTdPrh9qSShJAypJWFwNTmQpSnwsrHI+qBfgBS+rC3/55UZhKO5/Q RSo7DJ8XqdVDqs3xk/F2kWsVbIK1upUrqvu5Zfrs7GQlatOVJL8tV8hfydPXeKF/56VEoRqz 5Gq+JNuNHdYNSAjyrknvf0yD+BinctzP+nMA/vBS4hTxTFeuxaHXBfmYlPQ2499LMqfzjzxF sjY4CADFo3DR8wU= --B_3716549839_1927390425--