Return-Path: X-Original-To: tls@mail2.ietf.org Delivered-To: tls@mail2.ietf.org Received: from localhost (localhost [127.0.0.1]) by mail2.ietf.org (Postfix) with ESMTP id 34722DBCA172; Mon, 13 Apr 2026 22:50:19 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=ietf.org; s=ietf1; t=1776145819; bh=GX1QV0BEqFXbx/6s/pSgjOCbEFygarOP+o2hzxhWQSI=; h=Date:Subject:To:References:From:In-Reply-To; b=ICOQKwM5ynmXVgrZKHdRwKrD8KR1AWdCHvNxvtDnEU4P+oln8Rm5uPnYnMjFpewev G1IFSe0TUgFlMITQ7kOUp3fM33mQZt4ZeL9u0wuq5sp4iPBx4ziKKHxpJzE+0SwFge jXHG2Prr8BXPW/Rb/9Z1A+loJiZtCq0XwuNxNJF8= X-Virus-Scanned: amavisd-new at ietf.org X-Spam-Flag: NO X-Spam-Score: -2.099 X-Spam-Level: X-Spam-Status: No, score=-2.099 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, HTML_MESSAGE=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: mail2.ietf.org (amavisd-new); dkim=pass (2048-bit key) header.d=mtg.de Received: from mail2.ietf.org ([166.84.6.31]) by localhost (mail2.ietf.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id KXLoro8WiVGs; Mon, 13 Apr 2026 22:50:18 -0700 (PDT) Received: from www.mtg.de (www.mtg.de [IPv6:2a02:b98:8:2::2]) (using TLSv1.3 with cipher TLS_CHACHA20_POLY1305_SHA256 (256/256 bits) key-exchange X25519 server-signature ECDSA (P-256) server-digest SHA256) (No client certificate requested) by mail2.ietf.org (Postfix) with ESMTPS id 19B46DBCA167; Mon, 13 Apr 2026 22:50:17 -0700 (PDT) Received: from minka.mtg.de (minka [IPv6:2a02:b98:8:1:0:0:0:9]) by www.mtg.de (8.18.2/8.18.2) with ESMTPS id 63E5o34l024246 (version=TLSv1.3 cipher=TLS_CHACHA20_POLY1305_SHA256 bits=256 verify=NOT); Tue, 14 Apr 2026 07:50:03 +0200 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=mtg.de; s=mail201801; t=1776145803; bh=GX1QV0BEqFXbx/6s/pSgjOCbEFygarOP+o2hzxhWQSI=; h=Date:Subject:To:References:From:In-Reply-To; b=lj8TsTlz7ssBmsaQR2jn4X8KKJfDhWykbCKzX/P84SI5XYzWZiStXjvdclkLj9/He vSPiw8bXyRCV/4SvoaFuO2XEeBsXOvBkZepfeaKv9MuvIxOTNZAK2LKJQF+YbNjV2G xjXqClPRiasU0bLtRY/bFtQGbH0pRCozKVq4C882DuujowsDztkEbJ+NlcptWgt4ch UJQhiONpDl7r+U+Fjw3HSMzTIBePrLZMWHnfm4xd1BaRTjrbSNGGBTrYLe6asIkQrl ZhjT4uSKZzo93L/3gTUOMHy/6/TkkPozmMXHy1GhXLurgbKrrTH8qYRoAuiXAHPMXO Sx/k/v8IRB3jg== Received: from [10.8.0.100] (vpn-10-8-0-100 [10.8.0.100]) by minka.mtg.de (8.18.2/8.18.2) with ESMTPS id 63E5o2r9010483 (version=TLSv1.3 cipher=TLS_CHACHA20_POLY1305_SHA256 bits=256 verify=NOT); Tue, 14 Apr 2026 07:50:02 +0200 Message-ID: Date: Tue, 14 Apr 2026 07:50:02 +0200 MIME-Version: 1.0 User-Agent: Mozilla Thunderbird To: Andrei Popov , "Scott Fluhrer (sfluhrer)" , Muhammad Usama Sardar , Kris Kwiatkowski , "tls@ietf.org" References: <16CF0FDA-7263-461A-9F2B-D37DBEAF5DD9@sn3rd.com> <25c8d414-e4c8-455b-bd64-28132615ba75@cs.tcd.ie> <68f49a81-dd2c-4bea-896a-87da3e6aff68@tu-dresden.de> <2971d01a-89e3-43d3-a01d-b9c17b178763@amongbytes.com> <692bb582-ab7e-4d6b-aa75-ac5d93228bb2@tu-dresden.de> Content-Language: en-GB From: Falko Strenzke Organization: MTG AG In-Reply-To: Content-Type: multipart/signed; protocol="application/pkcs7-signature"; micalg=sha-512; boundary="------------ms070604050409060005020100" Message-ID-Hash: GZQJBHOO4TDFSPQM6BI3W6ZDROEQM766 X-Message-ID-Hash: GZQJBHOO4TDFSPQM6BI3W6ZDROEQM766 X-MailFrom: falko.strenzke@mtg.de X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; emergency; loop; banned-address; member-moderation; header-match-tls.ietf.org-0; nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size; news-moderation; no-subject; digests; suspicious-header X-Mailman-Version: 3.3.9rc6 Precedence: list Subject: =?utf-8?q?=5BTLS=5D_Re=3A_Working_Group_Last_Call_for_Use_of_ML-DSA_in_TLS_1?= =?utf-8?q?=2E3?= List-Id: "This is the mailing list for the Transport Layer Security working group of the IETF." Archived-At: List-Archive: List-Help: List-Owner: List-Post: List-Subscribe: List-Unsubscribe: This is a cryptographically signed message in MIME format. --------------ms070604050409060005020100 Content-Type: multipart/alternative; boundary="------------2oSi93ZNepzNrPNHZ0Woc256" --------------2oSi93ZNepzNrPNHZ0Woc256 Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: base64 SSBhbHNvIHNlZSB0aGUgbmVlZCBmb3IgTUwtRFNBIGNvbXBvc2l0ZSBzaWduYXR1cmVzIGlu IFRMUyBhbmQgdGh1cyANCndvdWxkIHN1cHBvcnQgYWRvcHRpb24gb2bCoGRyYWZ0LXJlZGR5 LXRscy1jb21wb3NpdGUtbWxkc2EuIFRoZSBkZW1hbmQgDQpmb3IgY29tcG9zaXRlIGFyaXNl cyBjbGVhcmx5IGluIHRoZSBFdXJvcGVhbiBjb250ZXh0LCB3aGVyZSDigJMgYXMgc2hvdWxk IA0KYmUgd2VsbCBrbm93biDigJMgbXVsdGlwbGUgbmF0aW9uYWwgaW5mb3JtYXRpb24gc2Vj dXJpdHkgYXV0aG9yaXRpZXMgaGF2ZSANCnNldCB0aGUgdXNlIG9mIFBRL1QgaHlicmlkcyBh cyB0aGUgc3RhbmRhcmQuDQoNCkZhbGtvDQoNCkFtIDEzLjA0LjI2IHVtIDE4OjMwIHNjaHJp ZWIgQW5kcmVpIFBvcG92Og0KPg0KPiBKdXN0IHRvIHdlaWdoIGluIG9uIHRoaXM6IEkgd291 bGQgc3VwcG9ydCBhZG9wdGlvbiBvZiANCj4gZHJhZnQtcmVkZHktdGxzLWNvbXBvc2l0ZS1t bGRzYS4gVGhlcmUgaXMgY3VzdG9tZXIgZGVtYW5kIGZvciANCj4gY29tcG9zaXRlIGNlcnRz LCBhbmQgSSB3b3VsZCBsaWtlIHRvIGdldCB0aGVzZSBpbXBsZW1lbnRlZCBpbiB0aGUgDQo+ IFdpbmRvd3MgVExTIHN0YWNrLg0KPg0KPiBDaGVlcnMsDQo+DQo+IEFuZHJlaQ0KPg0KPiAq RnJvbToqU2NvdHQgRmx1aHJlciAoc2ZsdWhyZXIpIDxzZmx1aHJlcj00MGNpc2NvLmNvbUBk bWFyYy5pZXRmLm9yZz4NCj4gKlNlbnQ6KiBNb25kYXksIEFwcmlsIDEzLCAyMDI2IDEyOjMw IEFNDQo+ICpUbzoqIE11aGFtbWFkIFVzYW1hIFNhcmRhciA8bXVoYW1tYWRfdXNhbWEuc2Fy ZGFyQHR1LWRyZXNkZW4uZGU+OyANCj4gS3JpcyBLd2lhdGtvd3NraSA8a3Jpc0BhbW9uZ2J5 dGVzLmNvbT47IHRsc0BpZXRmLm9yZw0KPiAqU3ViamVjdDoqIFtFWFRFUk5BTF0gW1RMU10g UmU6IFdvcmtpbmcgR3JvdXAgTGFzdCBDYWxsIGZvciBVc2Ugb2YgDQo+IE1MLURTQSBpbiBU TFMgMS4zDQo+DQo+IElmIHlvdSB3b3VsZCBwcmVmZXIgaHlicmlkIGF1dGhlbnRpY2F0aW9u LCB0aGVuIEkgd291bGQgc3VnZ2VzdCB5b3UgDQo+IHB1YmxpY2x5IGVuZG9yc2UgZWl0aGVy IGRyYWZ0LXJlZGR5LXRscy1jb21wb3NpdGUtbWxkc2EgKGNvbXBvc2l0ZSANCj4gc2lnbmF0 dXJlczsgdGhhdCBpcywgdGhlIGNlcnQgaGFzIGJvdGggY2xhc3NpY2FsIChlLmcuIFJTQSkg YW5kIHBxIA0KPiBwdWJsaWMga2V5cyAoZS5nLiBNTC1EU0EpIGFuZCBib3RoIGFyZSB1c2Vk IHRvIHNpZ24gaW4gYSBzaW5nbGUgDQo+IGxvZ2ljYWwgc2lnbmF0dXJlIG9wZXJhdGlvbikg b3IgZHJhZnQteXVzZWYtdGxzLXBxdC1kdWFsLWNlcnRzICh0aGUgDQo+IHNlcnZlciBzZW5k cyBib3RoIGEgY2xhc3NpY2FsIGNlcnRpZmljYXRlwqAgYW5kIGEgcHEgY2VydGlmaWNhdGUs IGFuZCANCj4gVExTIGdlbmVyYXRlcyB0d28gc2lnbmF0dXJlcyB1c2luZyB0aGUgdHdvIHB1 YmxpYyBrZXlzKQ0KPg0KPiBCb3RoIGFyZSBjdXJyZW50bHkgaW5kaXZpZHVhbCBkcmFmdHM7 IHB1YmxpYyBzdXBwb3J0IHdvdWxkIGJlIHVzZWZ1bCANCj4gdG8gbWFrZSB0aGVtIHdvcmtp bmcgZ3JvdXAgaXRlbXMuDQo+DQo+IE15IG9waW5pb246IGNvbXBvc2l0ZSB3b3VsZCBiZSBl YXNpZXIgdG8gZm9yIHRoZSB3b3JraW5nIGdyb3VwOyANCj4gY29tcG9zaXRlIHNpZ25hdHVy ZSBhbGdvcml0aG1zIChhbmQgY29tcG9zaXRlIGNlcnRpZmljYXRlcykgYXJlIHZlcnkgDQo+ IGNsb3NlIHRvIGJlY29taW5nIGFuIFJGQyAoZHJhZnQtaWV0Zi1sYW1wcy1wcS1jb21wb3Np dGUtc2lncykuwqAgRnJvbSANCj4gdGhlIFRMUyBwZXJzcGVjdGl2ZSwgYWxsIHRoYXQgd291 bGQgYmUgbmVlZGVkIGluIGFkZGl0aW9uIGFyZSBjb2RlIA0KPiBwb2ludHMgKGJlY2F1c2Ug aXQgY291bGQganVzdCB0cmVhdCB0aGUgc2lnbmF0dXJlIGFsZ29yaXRobSBpbiB0aGUgDQo+ IGNvbXBvc2l0ZSBkcmFmdCBhcyBqdXN0IGFub3RoZXIgc2lnbmF0dXJlIGFsZ29yaXRobSku DQo+DQo+IC0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLQ0KPg0KPiAqRnJvbToqwqBNdWhhbW1hZCBVc2Ft YSBTYXJkYXIgPG11aGFtbWFkX3VzYW1hLnNhcmRhckB0dS1kcmVzZGVuLmRlPg0KPiAqU2Vu dDoqwqBTdW5kYXksIEFwcmlsIDEyLCAyMDI2IDg6NTQgUE0NCj4gKlRvOirCoEtyaXMgS3dp YXRrb3dza2kgPGtyaXNAYW1vbmdieXRlcy5jb20+OyB0bHNAaWV0Zi5vcmcgPHRsc0BpZXRm Lm9yZz4NCj4gKlN1YmplY3Q6KsKgW1RMU10gUmU6IFdvcmtpbmcgR3JvdXAgTGFzdCBDYWxs IGZvciBVc2Ugb2YgTUwtRFNBIGluIFRMUyAxLjMNCj4NCj4gVEw7RFI6IE15IGNvbmNlcm4g aGFzIGJlZW4gYWRkcmVzc2VkIGFuZCBJIGFtIGhhcHB5IHRvIHN0ZXAgYmFjayBmcm9tIA0K PiBvcHBvc2l0aW9uIHRvIG5vIG9waW5pb24gb24gdGhpcyBXR0xDLiBJIHdvdWxkIGhhdmUg cHJlZmVycmVkIA0KPiBzdGFuZGFyZGl6aW5nIGh5YnJpZHMuDQo+DQo+DQo+IF9fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fDQo+IFRMUyBtYWlsaW5n IGxpc3QgLS10bHNAaWV0Zi5vcmcNCj4gVG8gdW5zdWJzY3JpYmUgc2VuZCBhbiBlbWFpbCB0 b3Rscy1sZWF2ZUBpZXRmLm9yZw0KLS0gDQoNCipNVEcgQUcqDQpEci4gRmFsa28gU3RyZW56 a2UNCg0KUGhvbmU6ICs0OSA2MTUxIDgwMDAgMjQNCkUtTWFpbDogZmFsa28uc3RyZW56a2VA bXRnLmRlDQpXZWI6IG10Zy5kZSA8aHR0cHM6Ly93d3cubXRnLmRlPg0KDQotLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0NCg0KTVRHIEFHIC0gRG9saXZvc3RyLiAxMSAtIDY0MjkzIERhcm1zdGFkdCwg R2VybWFueQ0KQ29tbWVyY2lhbCByZWdpc3RlcjogSFJCIDg5MDENClJlZ2lzdGVyIENvdXJ0 OiBBbXRzZ2VyaWNodCBEYXJtc3RhZHQNCk1hbmFnZW1lbnQgQm9hcmQ6IErDvHJnZW4gUnVm IChDRU8pLCBUYW1lciBLZW1lcsO2eg0KQ2hhaXJtYW4gb2YgdGhlIFN1cGVydmlzb3J5IEJv YXJkOiBEci4gVGhvbWFzIE1pbGRlDQoNClRoaXMgZW1haWwgbWF5IGNvbnRhaW4gY29uZmlk ZW50aWFsIGFuZC9vciBwcml2aWxlZ2VkIGluZm9ybWF0aW9uLiBJZiANCnlvdSBhcmUgbm90 IHRoZSBjb3JyZWN0IHJlY2lwaWVudCBvciBoYXZlIHJlY2VpdmVkIHRoaXMgZW1haWwgaW4g ZXJyb3IsDQpwbGVhc2UgaW5mb3JtIHRoZSBzZW5kZXIgaW1tZWRpYXRlbHkgYW5kIGRlbGV0 ZSB0aGlzIGVtYWlsLlVuYXV0aG9yaXNlZCANCmNvcHlpbmcgb3IgZGlzdHJpYnV0aW9uIG9m IHRoaXMgZW1haWwgaXMgbm90IHBlcm1pdHRlZC4NCg0KRGF0YSBwcm90ZWN0aW9uIGluZm9y bWF0aW9uOiBQcml2YWN5IHBvbGljeSANCjxodHRwczovL3d3dy5tdGcuZGUvZW4vcHJpdmFj eS1wb2xpY3k+DQoNCg== --------------2oSi93ZNepzNrPNHZ0Woc256 Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: quoted-printable

I also see the need for ML-DSA composite signatures in TLS and thus would support adoption of=C2=A0draft-reddy-tls-composite-mldsa= =2E The demand for composite arises clearly in the European context, where =E2=80=93 as should be well known =E2=80=93 multiple national= information security authorities have set the use of PQ/T hybrids as the standard.

Falko

Am 13.04.26 um 18:30 schrieb Andrei Popov:

Just to weigh in on this: I would support adoption of draft-reddy-tls-composite-mldsa. There is customer demand for composite certs, and I would like to get these implemented in the Windows TLS stack.

=C2=A0

Cheers,

=C2=A0

Andrei

=C2=A0

Fro= m: Scott Fluhrer (sfluhrer) <sfluhrer=3D40cisco.com@dmarc.ietf.org= >
Sent: Monday, April 13, 2026 12:30 AM
To: Muhammad Usama Sardar <muhammad_usama.sardar@tu-dresden.de>= ; Kris Kwiatkowski <kris@amongbytes.com>; tls@ietf.org
= Subject: [EXTERNAL] [TLS] Re: Working Group Last Call for Use of ML-DSA in TLS 1.3

=C2=A0

If you would prefer hybrid authentication, then I would suggest you publicly endorse either draft-reddy-tls-composite-mldsa (composite signatures; that is, the cert has both classical (e.g. RSA) and pq public keys (e.g. ML-DSA) and both are used to sign in a single logical signature operation) or draft-yusef-tls-pqt-dual-certs (the server sends both a classical certificate=C2=A0 and a pq certificate, and TLS generates two signatures using the two public keys)

=C2=A0

Both are currently individual drafts; public support would be useful to make them working group items.

=C2=A0

My opinion: composit= e would be easier to for the working group; composite signature algorithms (and composite certificates) are very close to becoming an RFC (draft-ietf-lamps-pq-composite-sigs).=C2=A0 From the TLS perspective, all that would be needed in addition are code points (because it could just treat the signature algorithm in the composite draft as just another signature algorithm).

=C2= =A0

From:=C2=A0Mu= hammad Usama Sardar <= muhammad_usama.sardar@tu-dresden.de>
Sent:=C2=A0Sunday, April 12, 2026 8:54 PM
To:=C2=A0Kris Kwiatkowski <kris@amongbytes.com&g= t;; tls@ietf.org <tls@ietf.org>
Subject:=C2=A0[TLS] Re: Working Group Last Call for = Use of ML-DSA in TLS 1.3

=C2= =A0

TL;DR: My concern has been addressed and I am happy to step back from opposition to no opinion on this WGLC. I would have preferred standardizing hybrids.

=C2=A0


____________________________=
___________________
TLS mailing list -- tls@ietf.org
To unsubscribe send an email to tls-leave@ietf.org
--

MTG AG
Dr. Falko Strenzke

Phone: +49 6151 8000 24
E-Mail: <= a class=3D"moz-txt-link-abbreviated" href=3D"mailto:falko.strenzke@mtg.de= ">falko.strenzke@mtg.de
Web: mtg.de

MTG AG - Dolivostr. 11 - 64293 Darmstadt, Germany
Commercial register: HRB 8901
Register Court: Amtsgericht Darmstadt
Management Board: J=C3=BCrgen Ruf (CEO), Tamer Kemer=C3=B6z
= Chairman of the Supervisory Board: Dr. Thomas Milde

This email may contain confidential and/or privileged information. If you are not the correct recipient or have received this email in error,
please inform the sender immediately and delete this email.Unauthorised copying or distribution of this email is not permitted.

Data protection information: Privacy policy=

--------------2oSi93ZNepzNrPNHZ0Woc256-- --------------ms070604050409060005020100 Content-Type: application/pkcs7-signature; name="smime.p7s" Content-Transfer-Encoding: base64 Content-Disposition: attachment; filename="smime.p7s" Content-Description: Kryptografische S/MIME-Signatur MIAGCSqGSIb3DQEHAqCAMIACAQExDzANBglghkgBZQMEAgMFADCABgkqhkiG9w0BBwEAAKCC Dc4wggX1MIIE3aADAgECAhAroJrQUI3BFzEId5iozbOpMA0GCSqGSIb3DQEBCwUAMIGCMQsw CQYDVQQGEwJERTErMCkGA1UECgwiVC1TeXN0ZW1zIEVudGVycHJpc2UgU2VydmljZXMgR21i SDEfMB0GA1UECwwWVC1TeXN0ZW1zIFRydXN0IENlbnRlcjElMCMGA1UEAwwcVC1UZWxlU2Vj IEdsb2JhbFJvb3QgQ2xhc3MgMjAeFw0yMzA2MjAwOTIxNDVaFw0zMzA2MTkyMzU5NTlaMGox CzAJBgNVBAYTAkRFMScwJQYDVQQKDB5EZXV0c2NoZSBUZWxla29tIFNlY3VyaXR5IEdtYkgx MjAwBgNVBAMMKVRlbGVrb20gU2VjdXJpdHkgQnVzaW5lc3NJRCBTTUlNRSBDQSAyMDIzMIIC IjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAyoz9UVaSMcy4APCm8VWUlWlt53YyshJ+ 3twBxE0HfwIFJw3dkmK5rGKyYjYvDzagv+b3t/9M0TUDEPnE86Lci+l8rNVYVS2cI4EZ/BYd 1A+DhiExZhGynR9J4PRaxFTdQGersTrmCpxP4XkQkXzO2Yoa40iLGxjvkRRtG5oFBQXErvax squqPgdPWpk5on5VfGIbgU6/WH0HzpCmWE/dK+w1CTWZHtiKcPsDq+Axd1N9v+1CbvDP4FdS A0WoCJILtaTo+WHy3UVTw/WVK/IlF/UN7DmR0xv2S+1jUJ6MgktrLNumbmGMGuE4wFbX95hv 0jmQ8FSg1RFa3JdWBJDPLzNx9Zrpuxo6jki6tTS6b/qzpgOh5Lm9JLI/C27R07Z6oCB/QIOY v0Ns9NiMd/5DcsbOMRrEU03RtDoMGlvdXqZKFwBE2dfW2D/d1ugCniegBOwVKkIWXP4wDJ9F nCgnQKSsf4iFhBTohvON4gcrkTrcFOl+2JUNZIVBPrSL7OMnn/EuAxAHl4IZDHRBd+h3gVBL cGtzcJHD2+eGeiZObyzD3oh8MosycX1rdO+2NyPDXPBWmSPZ9ai9SafT5azNxiudTgfXYurX ZJUKE4dcP8dCQoQTHSjK3RlBhL8kFMT2Lz04OZC85CH0iBYl5MG5EbiDL1NTGgcxmgWomhD2 Di0CAwEAAaOCAXwwggF4MA4GA1UdDwEB/wQEAwIBBjAdBgNVHQ4EFgQUmAjzq5VeiQ6oDicQ gW0Fh3gGx6EwHwYDVR0jBBgwFoAUv1kgNgB5oKAia4zV8mHSuCzLgkowEgYDVR0TAQH/BAgw BgEB/wIBADAdBgNVHSUEFjAUBggrBgEFBQcDAgYIKwYBBQUHAwQwUAYDVR0fBEkwRzBFoEOg QYY/aHR0cDovL2dyY2wyLmNybC50ZWxlc2VjLmRlL3JsL1QtVGVsZVNlY19HbG9iYWxSb290 X0NsYXNzXzIuY3JsMIGNBggrBgEFBQcBAQSBgDB+MC4GCCsGAQUFBzABhiJodHRwOi8vZ3Jj bDIub2NzcC50ZWxlc2VjLmRlL29jc3ByMEwGCCsGAQUFBzAChkBodHRwOi8vZ3JjbDIuY3J0 LnRlbGVzZWMuZGUvY3J0L1QtVGVsZVNlY19HbG9iYWxSb290X0NsYXNzXzIuY3J0MBEGA1Ud IAQKMAgwBgYEVR0gADANBgkqhkiG9w0BAQsFAAOCAQEAYDtthBPLCV2JFK6d//AxLidCeTVj bC4cwZQEDl7k8XfEmeGYeYXfYW/0aziMnOFYulL+MLP2ZxvPG8Dfo/LN7qnOccnfY8sU7+ek u1Ih6WIkXZCX9mxwe5BSCbE1M4kwQfGvjEbZxkMEDL0v5hYr67f5V/+AS/YnxdYW6h9+vbUP 6n1OkGXNnytZv98/MIDK/fTmPcRogsU4bOwzzKn1/h+rONAtNkYABYmfc5SZzneqyLcGlGvJ gd8piuqXj/0MaDBUZvUfQXNgwxKGEbX1p1/7WLtYVqUE+e30RQJtwfwCTS8PB78WwODBRQTR jo1LHMz6iGGW40bCpLe/BbRnnzCCB9EwggW5oAMCAQICEAN0/CXGPa9kCnhddoNFf4owDQYJ KoZIhvcNAQELBQAwajELMAkGA1UEBhMCREUxJzAlBgNVBAoMHkRldXRzY2hlIFRlbGVrb20g U2VjdXJpdHkgR21iSDEyMDAGA1UEAwwpVGVsZWtvbSBTZWN1cml0eSBCdXNpbmVzc0lEIFNN SU1FIENBIDIwMjMwHhcNMjUxMTI3MTQyNDIyWhcNMjgwMjI5MjM1OTU5WjCBmzELMAkGA1UE BhMCREUxDzANBgNVBAoTBk1URyBBRzEXMBUGA1UEAxMORmFsa28gU3RyZW56a2UxDjAMBgNV BCoTBUZhbGtvMREwDwYDVQQEEwhTdHJlbnprZTEfMB0GCSqGSIb3DQEJARYQZnN0cmVuemtl QG10Zy5kZTEeMBwGA1UEYRMVTlRSREUtREVNMTEwMy5IUkI4OTAxMIICIjANBgkqhkiG9w0B AQEFAAOCAg8AMIICCgKCAgEAtAepqpOmQpJK695PdwwD+tWDCwViGSZ1mffQtikgy3W8vqb0 cHGTX7JqbnN7LilQ6f01ilMV7qDMhaYziM7iDHXnbChGMUgmxXKREIY3/j3zzUNlixIT9FWA fxP7oDdH3LcT8GQkL09twsYK2VuPldAVT+etFqFM6GPmAugXPZ8GF4pRYbZdXHOE1N/0w1WK KLR3ABWN9MV5x2MhoBuzPrevyWHEPiNCk2S3k/n2U9yFe1k/0oeGg0801hNMdovjOmUBKv3e JFec7e1gKPvo1HPnqBu/qolghhdoEk87ZCg4s18fRUMRYGsP9eP1NpaeHdRKHQNNMTn9hES2 BJ4rc14DzJhZCUyEpCPQbzzcOkmjD8sHMBxdYTAgr2YiQ1eCHabRHUdQu3vOuQwv0hcRx2jD 1+AIW9VkZcRfWVxr+bqZklw6jowZD2z+lWINigCMx79nDBRaRL1u47vhhXGGlKinIY5lGG1l zH/76LxvXIOVBS214RAzDoQNl0IOT+YIDa0qP3+JJXz0+NQWnVbdpf5j5JICFfl7bGsYp/zK rCXqZwddz8Nm1/aUHztHhvLiwOTWFPvbYliIy++afAMS7kg/GCMYPCZ7O4GHatl/E9s7Ujzk CPYEAbTVelXQAE9lU4xEI2F5uY2WgeEnj7FAbyYiRtTgvRnrRIyUweicMV8CAwEAAaOCAj8w ggI7MB8GA1UdIwQYMBaAFJgI86uVXokOqA4nEIFtBYd4BsehMB0GA1UdDgQWBBQsFTSrP6ho DUGamae95XeOd3L1SDAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwIGCCsG AQUFBwMEMFgGA1UdIARRME8wTQYHZ4EMAQUDAjBCMEAGCCsGAQUFBwIBFjRodHRwOi8vZG9j cy5idXNpbmVzc2lkLnRlbGVzZWMuZGUvY3BzL2J1c2luZXNzaWQuaHRtMAwGA1UdEwEB/wQC MAAwYgYDVR0fBFswWTBXoFWgU4ZRaHR0cDovL2NybC5idXNpbmVzc2lkLnRlbGVzZWMuZGUv cmwvVGVsZWtvbV9TZWN1cml0eV9CdXNpbmVzc0lEX1NNSU1FX0NBXzIwMjMuY3JsMIGlBggr BgEFBQcBAQSBmDCBlTAzBggrBgEFBQcwAYYnaHR0cDovL29jc3AuYnVzaW5lc3NpZC50ZWxl c2VjLmRlL29jc3ByMF4GCCsGAQUFBzAChlJodHRwOi8vY3J0LmJ1c2luZXNzaWQudGVsZXNl Yy5kZS9jcnQvVGVsZWtvbV9TZWN1cml0eV9CdXNpbmVzc0lEX1NNSU1FX0NBXzIwMjMuY3J0 MFYGA1UdEQRPME2BEGZzdHJlbnprZUBtdGcuZGWBFWZhbGtvLnN0cmVuemtlQG10Zy5kZYER Zi5zdHJlbnprZUBtdGcuZGWBD3N0cmVuemtlQG10Zy5kZTANBgkqhkiG9w0BAQsFAAOCAgEA indObv5kqnaLMy8strwWR893ZJTUX6mNlOZnzvmE34nTVxrmO0LgC+VrmInYJEiSFTUpB82D hb4P9GJ5n0sH9Na0CW4ujfTtoFYoTM4e/CwxvEzXKO8nTZ9fFCNWf2SJ2Elcyeuv5vwDb04W ZkrxJcLKWgNnu7RSk1pm0F15aUkHre6t/Sko26fOzIztH6RVjtZAZjt4UWKXUpxdMLfqj+y7 qgyVyM/qe158xb/AfCYgzfbG2iqlN9G+OZ2EgSg4h4PERA5N4in70Ft7Wu0NVrO0mZT1tWqY Em7GGM+yQ7GS2cNHCbVlvYIbLJhocQJ1wx5LHixSTRQvaVSYidmnqYvMEU0iZwIeDoHLKrIR jSdV/ssHwLzoRS1qIfP5eJPExNG141iju2Th4YaZ9UF5oZ5v27whYk9jPV4sXFE0ZADgGOHG 5pJoae8u4c2OIztm6lU+18SSYDQQHlgmjBIO/XWvya/Ps7NSl2Fd2SWV4URfMLPrdXD0QcIe g6nrTRXwKczX/pwpF0Q4Q6cRvMkToV6Suxc5tfYA3lMFv1Tfz9OEe+hGM7U4dIxPx+qOFF1H q0f+y2fUF1QSMUko0DJQD5HVoPfYtcf52MovV5Cm183u/lfgL/zmP77vjhPg7DpE9bKZ2P8r FdNBme93RVlM/WH3/mTp8nq1KzxuUnI5gyIxggW1MIIFsQIBATB+MGoxCzAJBgNVBAYTAkRF MScwJQYDVQQKDB5EZXV0c2NoZSBUZWxla29tIFNlY3VyaXR5IEdtYkgxMjAwBgNVBAMMKVRl bGVrb20gU2VjdXJpdHkgQnVzaW5lc3NJRCBTTUlNRSBDQSAyMDIzAhADdPwlxj2vZAp4XXaD RX+KMA0GCWCGSAFlAwQCAwUAoIIDCDAYBgkqhkiG9w0BCQMxCwYJKoZIhvcNAQcBMBwGCSqG SIb3DQEJBTEPFw0yNjA0MTQwNTUwMDJaME8GCSqGSIb3DQEJBDFCBEAdCOQdeITjQ6Mr95fv NbxXKXvMQ8GyBuJaJV+HzMsc2ZPADJF+bMqb9608czMToE4V7xaSzXJ++oVGKk7sJd57MIGO BgkrBgEEAYI3EAQxgYAwfjBqMQswCQYDVQQGEwJERTEnMCUGA1UECgweRGV1dHNjaGUgVGVs ZWtvbSBTZWN1cml0eSBHbWJIMTIwMAYDVQQDDClUZWxla29tIFNlY3VyaXR5IEJ1c2luZXNz SUQgU01JTUUgQ0EgMjAyMwIQA3T8JcY9r2QKeF12g0V/ijCBkAYLKoZIhvcNAQkQAgsxgYCg fjBqMQswCQYDVQQGEwJERTEnMCUGA1UECgweRGV1dHNjaGUgVGVsZWtvbSBTZWN1cml0eSBH bWJIMTIwMAYDVQQDDClUZWxla29tIFNlY3VyaXR5IEJ1c2luZXNzSUQgU01JTUUgQ0EgMjAy MwIQA3T8JcY9r2QKeF12g0V/ijCCAVcGCSqGSIb3DQEJDzGCAUgwggFEMAsGCWCGSAFlAwQB KjALBglghkgBZQMEAQIwCgYIKoZIhvcNAwcwDQYIKoZIhvcNAwICAQUwDQYIKoZIhvcNAwIC AQUwBwYFKw4DAgcwDQYIKoZIhvcNAwICAQUwBwYFKw4DAhowCwYJYIZIAWUDBAIBMAsGCWCG SAFlAwQCAjALBglghkgBZQMEAgMwCwYJYIZIAWUDBAIEMAsGCWCGSAFlAwQCBzALBglghkgB ZQMEAggwCwYJYIZIAWUDBAIJMAsGCWCGSAFlAwQCCjALBgkqhkiG9w0BAQEwCwYJK4EFEIZI PwACMAgGBiuBBAELADAIBgYrgQQBCwEwCAYGK4EEAQsCMAgGBiuBBAELAzALBgkrgQUQhkg/ AAMwCAYGK4EEAQ4AMAgGBiuBBAEOATAIBgYrgQQBDgIwCAYGK4EEAQ4DMA0GCSqGSIb3DQEB AQUABIICADF+rV2LvRcJhRxhk8wOpt/wcQkUmSLkOu9oYt3Dn5E72HpWJq3VvWj7SGiPAm3P 1YvycOmVEKNFU5m4UqCTnFJGS7Q4mstNgI23GXPAdE/5nH1End80Z/FTgaNUvWj3src1Sat8 UJK+GNbNvhsmNvxu9+fvByzIjqB54STPeTChQYbrRT8x/WyZUkBPK1lcg/NGM59lFd53zbZ7 BlWrvJQ7IYHNHviIgBu+c9OLeJKwj+JPV5QEEMVP4Ac5ovFBFaa9zyqjACkwLrJCtfnUmu1Q jvUvBjGDsASJU7F1NCdX0EkZLze7Iqc2uOykS13/MUfsM/F5RqSJ7M2peCSPgURCBzhdaBuz wLQWK4TKTzMS5TnkpYgfurpCETjyJjNDuOvJkWlHh9rHAI+s2v0t+zbZZUkRbSG1C7dBTRhJ /nySzlcivXWu50vKebcNytXBXQcQk2jMPpmSuqqWFdG96upxMgZynyP3YnxcXwgB9AqnrOIR HVwUT/P+H6mAAfLj3H1ZN+e2J8JGRtmd/wqUtZOXeyqVSaJKHMbTzioYaa8yEuLmC5UUzbWq qL996GI8QAx7EofQ5OIQHCpDrqeLGEXdygo7AnlRPmTBFxmoWj8FvF1cGu44vCnMlsSS3ROH b0acTQ4FkbWUteCWn7KrZhY9nq/ACVR4o3KjrdxIHoXtAAAAAAAA --------------ms070604050409060005020100--