Return-Path: X-Original-To: tls@ietfa.amsl.com Delivered-To: tls@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E765C1201DB for ; Tue, 1 Oct 2019 06:52:24 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.6 X-Spam-Level: X-Spam-Status: No, score=-2.6 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_LOW=-0.7, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id i47LhDFFuLOP for ; Tue, 1 Oct 2019 06:52:22 -0700 (PDT) Received: from smtp-p01.blackberry.com (smtp-p01.blackberry.com [208.65.78.88]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 7634B120024 for ; Tue, 1 Oct 2019 06:52:21 -0700 (PDT) Received: from xct108cnc.rim.net ([10.65.161.208]) by mhs211cnc.rim.net with ESMTP/TLS/DHE-RSA-AES256-SHA; 01 Oct 2019 09:52:21 -0400 Received: from XCT113CNC.rim.net (10.65.161.213) by XCT108CNC.rim.net (10.65.161.208) with Microsoft SMTP Server (TLS) id 14.3.408.0; Tue, 1 Oct 2019 09:52:20 -0400 Received: from XMB116CNC.rim.net ([fe80::45d:f4fe:6277:5d1b]) by XCT113CNC.rim.net ([::1]) with mapi id 14.03.0415.000; Tue, 1 Oct 2019 09:52:19 -0400 From: Dan Brown To: John Mattsson , Peter Gutmann , Hubert Kario , "TLS@ietf.org" Thread-Topic: =?utf-8?B?W1RMU10gIEVjZHNhLXNpZy12YWx1ZSBpbiBUTFMgMS4zIOKAkyBuZWVkIGZv?= =?utf-8?Q?r_erratum=3F?= Thread-Index: AdV4RZj0/krq7yA89EekKREnIpqJfwAL2k0AAAY+MAA= Date: Tue, 1 Oct 2019 13:52:19 +0000 Message-ID: <810C31990B57ED40B2062BA10D43FBF501E4532F@XMB116CNC.rim.net> References: <20191001104718.8626261.12105.36904@blackberry.com> <7F3BF5B8-8E88-4611-813D-F207CCED4CD9@ericsson.com> In-Reply-To: <7F3BF5B8-8E88-4611-813D-F207CCED4CD9@ericsson.com> Accept-Language: en-US, en-CA Content-Language: en-US X-MS-Has-Attach: yes X-MS-TNEF-Correlator: x-originating-ip: [10.2.27.110] Content-Type: multipart/signed; protocol="application/x-pkcs7-signature"; micalg=2.16.840.1.101.3.4.2.1; boundary="----=_NextPart_000_00BC_01D5783D.E9AC77B0" MIME-Version: 1.0 Archived-At: Subject: Re: [TLS] =?utf-8?q?Ecdsa-sig-value_in_TLS_1=2E3_=E2=80=93_need_for_?= =?utf-8?q?erratum=3F?= X-BeenThere: tls@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "This is the mailing list for the Transport Layer Security working group of the IETF." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 01 Oct 2019 13:52:25 -0000 ------=_NextPart_000_00BC_01D5783D.E9AC77B0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit > -----Original Message----- > From: John Mattsson > > Dan Brown wrote: > > > ANSI X9.62-2005 was withdrawn in 2015 > > Ok, that TLS 1.3 is relying on a withdrawn publication that used to be > behind a > paywall is even worse. [DB] Have mercy on TLS: I expect they had plenty of working code, and archived ECDSA specs for documentation, so it's not at all their fault that another organization's specs expired while they were undertaking a major improvement. > > > Also, I expect FIPS 186-5 is nearly ready, and will specify much of ECDSA > > That NIST FIPS 186-5 will include all the details needed to implement ECDSA > is > great. [DB] I think I also said that I was not sure if it will have any ASN.1 (i.e. resolution of ECDSA-Sig-Value). > > >IETF has specs for sigs and their formats already, no? > > At the time when RFC 8446 was published, there was probably no quick and > easy solution to the problem. But the fact that IETF has historically been > fine > with relying on specifications behind paywalls is part of the problem. If > IETF had > implemented a strong open-access policy a long-time ago, there would > probably be an open-access version of ECDSA (NIST or IETF) a long time ago. > [DB] SECG was created, among several other reasons, to provide a kind of open-read-access ECC specifications. I think some IETF docs even refer to SECG, maybe SEC2? Doesn't IETF have RFC 5480, 6090, 6979, which cover a fair amount of ground in specifying (some variation of) ECDSA? Although, that's not a policy, and maybe was not even an easy enough solution for RFC 8446, etc. ------=_NextPart_000_00BC_01D5783D.E9AC77B0 Content-Type: application/pkcs7-signature; name="smime.p7s" Content-Transfer-Encoding: base64 Content-Disposition: attachment; filename="smime.p7s" MIAGCSqGSIb3DQEHAqCAMIACAQExDzANBglghkgBZQMEAgEFADCABgkqhkiG9w0BBwEAAKCCIdUw ggXJMIIDsaADAgECAgUA9lfgwDANBgkqhkiG9w0BAQ0FADB8MQswCQYDVQQGEwJDQTEbMBkGA1UE CgwSQmxhY2tCZXJyeSBMaW1pdGVkMSIwIAYDVQQLDBlCbGFja0JlcnJ5IEVudGVycHJpc2UgUEtJ MSwwKgYDVQQDDCNCbGFja0JlcnJ5IEVudGVycHJpc2UgUlNBIFJvb3QgQ0EgMTAeFw0xMzEyMTMx NzQ1NDdaFw0zODEyMTMxNzQ1NDdaMHwxCzAJBgNVBAYTAkNBMRswGQYDVQQKDBJCbGFja0JlcnJ5 IExpbWl0ZWQxIjAgBgNVBAsMGUJsYWNrQmVycnkgRW50ZXJwcmlzZSBQS0kxLDAqBgNVBAMMI0Js YWNrQmVycnkgRW50ZXJwcmlzZSBSU0EgUm9vdCBDQSAxMIICIDANBgkqhkiG9w0BAQEFAAOCAg0A MIICCAKCAgEAxkXAf/EHxa1okuoiPnKhHeaDfSRXq35g7JH34MqiM2cxMsL+WMe/8792DLEAe5Lm FLURmrkBiqwgzkrpejF1WBUaqrM0nGSkxTfO9ywXFHKZnK2wyxE+uNdIN5KzuzijEFJpnHxapdJg k8VmsgSnn+wTyRF8J/2DsaKV7UPYNkoGGZtCggI6Dh92G9AUKzZBSjfaZRfwStEv26wVgM8CiqSa O2FuwYriu+To03yDNiC0XOaGbPLyPAdyJbY71Bud3RQE1wciQV0nLwXnyCBmDK127NkjdewY4nAF TVuKaTVCqAdGKRo5idywpSHknZy01AvOJNuvL/BkN9Nv9nflelSml5TJNhfSa2hDRmHvr0+Jns+A qORC2WlvCybRGHkmTjpYLLMnIVprNBWPCCE6B/RaoLvcTvDeUwBVoqYzLSfLT6jAoXVcJM+XT948 TzAgCKcJg4oupgiMtYyL/oktajJbnpiLtRZ3jRX2hEgRW8tJZckvlxtrBGxQLYWNVe48OdBhbNnO bByGN2o0/GAttfkM8WrdjnCNv5YZ1d1eZPqCJicQ7ML4xRzUPwD1u7YvgdVRFidB3CsxM9nnlnam MYWQIV5nUuyK/1NUTiAEhGBYOsLeemgvPz41TsjERujbzHcj8MM3zMdwhWr86Dp1292C/bwyNgMm OfVgsHnZRnECAQOjVDBSMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMB0GA1UdDgQW BBT4aYn4Y57vaF6BMGJwUqMO3bKWCDAQBgkrBgEEAYI3FQEEAwIBADANBgkqhkiG9w0BAQ0FAAOC AgEArBVGo/mS9/+yWzGI03ae5osTFt3v2acQVj1OrqSABZQXTdOXjJL31Q4QJABZlwllzKeIlFne 3c9yn39i3QMhoSjqkn4NjbPjKiiyzOLoI0PGq5UTQtpGm7X/EaXkcYDFhrIHnGfC9dmB5WeuwMwX fmKwUtiLPhgtgjGBqkxSOiFFbBUBiLGs/muE4IYbKJGPKqilOBLpeK1Kyp8zXIrJLLQ0zzkK6TkQ x6RULQ+px3geS5UWkrsFXCHK/x9vBxH313O7RV7vvwt2Opc0HFw9LzF50jie/wqx9HD3tm0GgvqD Aabtlao1V1mfLpk8k+nrWd589ZZSHmQMVFvzETnrS0BS4wZssImORAbv6tVCHZSf6gu1XApnxMaM Hy8qmL9lfkoTaxF7cxzzwrj5P49Xj+n4NZT95GyYNAoU3AhAFrQV+H6BXFTOHNX/ALubYWg5x+xu JFi+7HTcaCjZzjSGLWG3kilqn6JkT229jgYClzN8EylemXv3yz1vVjXbTRZNDK9G/p1Jj2SxlBC/ mTBvedATbkIMVm5Wzl8cE3rIp+A9lZ+bS9CfVx5OthHQxXn0fuVCakWp4a+KTsTtFlqbtVMesdcU Q1uMk8Tap11X43bkAyX25l76ejxuVCZYZaOxZFt689bVqRFh4DjyfagCRu65eQgOu013aZiAc28i WCEwggdJMIIGMaADAgECAgpyAx1HAAEAAlASMA0GCSqGSIb3DQEBCwUAMFYxEzARBgoJkiaJk/Is ZAEZFgNuZXQxEzARBgoJkiaJk/IsZAEZFgNyaW0xKjAoBgNVBAMTIUJsYWNrQmVycnkgQ29ycG9y YXRlIElzc3VpbmcgQ0EgMTAeFw0xOTA0MTcyMDU4MjRaFw0yMDAyMjYyMjM2NTVaMIGpMRMwEQYK CZImiZPyLGQBGRYDbmV0MRMwEQYKCZImiZPyLGQBGRYDcmltMQ0wCwYDVQQLEwRBTUVSMQswCQYD VQQLEwJDQTEUMBIGA1UECxMLTWlzc2lzc2F1Z2ExDjAMBgNVBAsTBVVzZXJzMRIwEAYDVQQDEwlE YW4gQnJvd24xJzAlBgkqhkiG9w0BCQEWGGRhbmlicm93bkBibGFja2JlcnJ5LmNvbTCCASIwDQYJ KoZIhvcNAQEBBQADggEPADCCAQoCggEBALQHoYbI3q25dSCAl6YGPubc51/jvsRg5VZl6f8cADT/ N6anVBzRl77zYVSEmqlrHG2/x++rOxdzcAi/LP+L7IEiU/TX+EyPR4OSLf3sQTJg/CzZLhKT+ouR CH1jn0QgFviHE4Ni0no/E4x+N0zjmhWpF7WcoaNbY0ZVW5g1jy7KtEoLwDGFylPVsrwLMzud4wjJ 32R/McoCAqaWr/vgUOoHYY6K+5fGp7wNyvhhc0sG+8ku2vNWhBo7sufwdehGISQsaBXS+Wqgy7g1 qNePiR/5i8OFgEFjO//iozFIeTPoFbSd+k4y/jv7wD+yLvVy84q9LteXpv92aFR+aTJxkEkCAwEA AaOCA8MwggO/MD0GCSsGAQQBgjcVBwQwMC4GJisGAQQBgjcVCIe/l0uGuYEkhsGBMoPb8iWC3NgB gQCxwyqHn/RAAgFkAgELMB0GA1UdJQQWMBQGCCsGAQUFBwMEBggrBgEFBQcDAjALBgNVHQ8EBAMC BsAwDAYDVR0TAQH/BAIwADBPBgNVHSABAf8ERTBDMEEGCisGAQQBm0oTAQIwMzAxBggrBgEFBQcC ARYlaHR0cDovL2NwLnJpbS5uZXQvY3BzL0NQU3RhdGVtZW50Lmh0bTAnBgkrBgEEAYI3FQoEGjAY MAoGCCsGAQUFBwMEMAoGCCsGAQUFBwMCMB0GA1UdDgQWBBTb4N+ts9rY1LbQOi40ca8/M4cXVTAf BgNVHSMEGDAWgBQaL0tL2wfJSTuJ1jIIJ6KeC/MPazCCATIGA1UdHwSCASkwggElMIIBIaCCAR2g ggEZhkBodHRwOi8vY3JsLnJpbS5uZXQvQmxhY2tCZXJyeSUyMENvcnBvcmF0ZSUyMElzc3Vpbmcl MjBDQSUyMDEuY3JshoHUbGRhcDovLy9DTj1CbGFja0JlcnJ5JTIwQ29ycG9yYXRlJTIwSXNzdWlu ZyUyMENBJTIwMSxDTj1NQ0EwMTBDTkMsQ049Q0RQLENOPVB1YmxpYyUyMEtleSUyMFNlcnZpY2Vz LENOPVNlcnZpY2VzLENOPUNvbmZpZ3VyYXRpb24sREM9d2luZG93cyxEQz1sb2NhbD9jZXJ0aWZp Y2F0ZVJldm9jYXRpb25MaXN0P2Jhc2U/b2JqZWN0Q2xhc3M9Y1JMRGlzdHJpYnV0aW9uUG9pbnQw ggEDBggrBgEFBQcBAQSB9jCB8zAkBggrBgEFBQcwAYYYaHR0cDovL29jc3AucmltLm5ldC9vY3Nw MIHKBggrBgEFBQcwAoaBvWxkYXA6Ly8vQ049QmxhY2tCZXJyeSUyMENvcnBvcmF0ZSUyMElzc3Vp bmclMjBDQSUyMDEsQ049QUlBLENOPVB1YmxpYyUyMEtleSUyMFNlcnZpY2VzLENOPVNlcnZpY2Vz LENOPUNvbmZpZ3VyYXRpb24sREM9d2luZG93cyxEQz1sb2NhbD9jQUNlcnRpZmljYXRlP2Jhc2U/ b2JqZWN0Q2xhc3M9Y2VydGlmaWNhdGlvbkF1dGhvcml0eTBNBgNVHREERjBEoCgGCisGAQQBgjcU AgOgGgwYZGFuaWJyb3duQGJsYWNrYmVycnkuY29tgRhkYW5pYnJvd25AYmxhY2tiZXJyeS5jb20w DQYJKoZIhvcNAQELBQADggEBAEoWAOg0VEQNS86VaoPS9opseSqdMyxa/SyUNcoqeTRgadtmv1FX zUPytJUDgHQrMAmpHCurdPASknaqoHOaOyTf2AfJO9a36jIq+yC+7ybZFfiXOaFKOvAcDOpS0O25 PVZdG202Nt/g5hrOyd/hUplu0xz4h8CvihzW7AuUsBOBJn7vW5dvggrRx28FSBUARj4plfhNoGoI XJfFghQ1fWmjg8o9NjhTpXKDTy7kMNkUX2g+HACq4tzf0sjthqTFpGsAq+PhqFxKQLZ8GRAq67F+ mHWEvZArnHnDAk4JpqlGMZTVXRWZzW+21feqnog1FU6kgtM5/8uvtrEMQSe8Dn8wgggFMIIF7aAD AgECAgRDFVhfMA0GCSqGSIb3DQEBDQUAMHwxCzAJBgNVBAYTAkNBMRswGQYDVQQKDBJCbGFja0Jl cnJ5IExpbWl0ZWQxIjAgBgNVBAsMGUJsYWNrQmVycnkgRW50ZXJwcmlzZSBQS0kxLDAqBgNVBAMM I0JsYWNrQmVycnkgRW50ZXJwcmlzZSBSU0EgUm9vdCBDQSAxMB4XDTE0MDIyNjE2MjM1NloXDTI0 MDIyNjE2MjM1NloweTELMAkGA1UEBhMCQ0ExGzAZBgNVBAoMEkJsYWNrQmVycnkgTGltaXRlZDEi MCAGA1UECwwZQmxhY2tCZXJyeSBFbnRlcnByaXNlIFBLSTEpMCcGA1UEAwwgQmxhY2tCZXJyeSBD b3Jwb3JhdGUgUG9saWN5IENBIDEwggIgMA0GCSqGSIb3DQEBAQUAA4ICDQAwggIIAoICAQC6JvZA kPpT2uIOJ8w4/hBW8IhdwmDtvzMEVmnYEmmr1cnQaD3NVSIxDfNFG2dVVeZJB4qmLwLkjMf0dgDo LtaPRaqZ2kW+fWuEeWqG4sRxCIWMgrdppkQoCenWGIiW7Q59bdNLk9MsiP2FPgFMVhSvXN38vl9t AEssQDmwPVnr9nBbBhW4OnaM2JDw0B5YEnMyXBJwslA+n4YDOTfzbIB5rzdzkG/Cy+Ss7NtOEIG1 Hfeur5RzruqaVRINsbk884T1TjR4q2BMhTE2uSjaANXkl+IM1YsfmIgCj/AKr4KhEAeM4to10mA8 3fUVLZzn5YPo8/jikzQ0qTge/7Yj2veffvkYkWG1pZGJvlofl/bi/62vrmrTkx9lDKLMl5zuK8qF znvSWVhntGsHWO0ZI+uSz5h7Alr0dOTdTOr1+SR2SzqL+uReyf2ViywiAEf7JtZj4QU2rlN7rxOi Suf7mz0D8RelA6TXaGlAe/q35kqAcciJZjMugO7+XG2chzjci5c/q+LJJTwz3M+QgSI21MhTcytC itBl0WFSg/vmE26nQnuryhWUoNvryGEP2xarae/oCiKZo41nc6LcVXCoJfq/pE5OKUhAi1N/RH26 OdDb3kOjdDdLIKY/yVThed1zESsuCUNkgy9APj5LgS95nSG/oQ9LlLL5g4YQd8WrwdFIZQIBA6OC ApIwggKOMBIGA1UdEwEB/wQIMAYBAf8CAQEwDgYDVR0PAQH/BAQDAgEGMB0GA1UdDgQWBBQ7uMF3 DZ6tQ1j8Ja4V0LfykTKFmzAfBgNVHSMEGDAWgBT4aYn4Y57vaF6BMGJwUqMO3bKWCDCBhgYIKwYB BQUHAQEEejB4MCQGCCsGAQUFBzABhhhodHRwOi8vb2NzcC5yaW0ubmV0L29jc3AwUAYIKwYBBQUH MAKGRGh0dHA6Ly9jcnQucmltLm5ldC9CbGFja0JlcnJ5JTIwRW50ZXJwcmlzZSUyMFJTQSUyMFJv b3QlMjBDQSUyMDEuY3J0MIIBNwYDVR0fBIIBLjCCASowggEmoIIBIqCCAR6GRGh0dHA6Ly9jcmwu cmltLm5ldC9CbGFja0JlcnJ5JTIwRW50ZXJwcmlzZSUyMFJTQSUyMFJvb3QlMjBDQSUyMDEuY3Js hoHVbGRhcDovLy9DTj1CbGFja0JlcnJ5JTIwRW50ZXJwcmlzZSUyMFJTQSUyMFJvb3QlMjBDQSUy MDEsQ049Um9vdENBLENOPUNEUCxDTj1QdWJsaWMlMjBLZXklMjBTZXJ2aWNlcyxDTj1TZXJ2aWNl cyxDTj1Db25maWd1cmF0aW9uLERDPXdpbmRvd3MsREM9bG9jYWw/Y2VydGlmaWNhdGVSZXZvY2F0 aW9uTGlzdD9iYXNlP29iamVjdENsYXNzPWNSTERpc3RyaWJ1dGlvblBvaW50MDcGA1UdIAQwMC4w LAYEVR0gADAkMCIGCCsGAQUFBwIBFhZodHRwOi8vY3AucmltLm5ldC9jcHMvMBAGCSsGAQQBgjcV AQQDAgEAMBkGCSsGAQQBgjcUAgQMHgoAUwB1AGIAQwBBMA0GCSqGSIb3DQEBDQUAA4ICAQC38TN+ EWKxTPBOf+yu0+eJD75HI0K1/VbX+/gkxxxthB+0rhaBVrJzU3j/ifE8ST9Icc+JgORZzCjZYUz7 Lj9DbvxbtUdaJGi7CHjjxgFm7aQkPX2BvpYHjjYeQ0349boayww1AG6iX42F/Gm+P4/UT4Jv5lo5 UepzMz8mgnOnAEqpzo7NFUixXZnLTTML6g8Co+Kpwl/gDOtTcXdit2SE4qugUCI9+4UIdO5cIFUK 2vkuev3JsjuUCl0p8g/591PyDxIUoRWt9I+8nkeDmdhr/Lyuh2OY82OXqCc7TdPPRdJdo0nWCJZu OxPrK1cJPPM/FMM7EwSruS1mFbMsHyXcmUBdfm8LudkPHPpszGlQ2cAcENzgyGCd2OWlggpp+y35 JIo9eKnLC5BGio6eno6MvfNMM5DzIr5hoVfLsbJUvlIIwOaqhWWPIjiQJgS8vAAZBONh6AXXs8TA smu0yt2cSp00HvUWAyJi8eOVUOiu+f7iXXUw+xhEcOyggo4JmJ4g+qM8wzx8pc4soKVMx4SLXXlR /uO3RNZ5ZNaVc3+qIqg4EbhGNQxyCGChFYemYvRdLmjqO0sGfofYaqRdhIBpKZYk7vDOwj0ZStzg TT55OAYF0jY+A9RXSiu6xm04F3C/2G7S19sHlhK28Prjf1Ahu5NwTnpaKdM5UiX4/SrKLTCCDK4w ggqWoAMCAQICBAsRTXAwDQYJKoZIhvcNAQELBQAweTELMAkGA1UEBhMCQ0ExGzAZBgNVBAoMEkJs YWNrQmVycnkgTGltaXRlZDEiMCAGA1UECwwZQmxhY2tCZXJyeSBFbnRlcnByaXNlIFBLSTEpMCcG A1UEAwwgQmxhY2tCZXJyeSBDb3Jwb3JhdGUgUG9saWN5IENBIDEwHhcNMTkwMjI2MjIzNjU1WhcN MjAwMjI2MjIzNjU1WjBWMRMwEQYKCZImiZPyLGQBGRYDbmV0MRMwEQYKCZImiZPyLGQBGRYDcmlt MSowKAYDVQQDEyFCbGFja0JlcnJ5IENvcnBvcmF0ZSBJc3N1aW5nIENBIDEwggEiMA0GCSqGSIb3 DQEBAQUAA4IBDwAwggEKAoIBAQDVHL/KEgF8NzTToTzGn4ZzdjfvMRN9YG1zaPkekwXrknWRKOTw 30fjw6bP7CF60nnJwGSVhoQ1DkNqVz0ZPI35dJW3EBEUyNVAtOGb+fiNmDsOKk2gbe+zwLb1ttrN 7BOgIDuqJKlujUBYxBk6Cl44KOoKwSzuvxuFHP7T6oev23Jh+DZmkm7M60iVLDzHjchFru696K8b vSiczJw0AVqWymaupeFveprrdJUz1y/G0Q0GoeZ3NFH0azM8JS6MB7Sz1zO/9SdlxvrRu0mCEN8E OgUTfG1l1sDILs7IhM9gUBF+tHJpeFc+xuSHpx7spkRzhESmuFD4h+6IIJ/B7SofAgMBAAGjgghf MIIIWzASBgNVHRMBAf8ECDAGAQH/AgEAMA4GA1UdDwEB/wQEAwIBBjAdBgNVHQ4EFgQUGi9LS9sH yUk7idYyCCeingvzD2swHwYDVR0jBBgwFoAUO7jBdw2erUNY/CWuFdC38pEyhZswgYEGCCsGAQUF BwEBBHUwczAkBggrBgEFBQcwAYYYaHR0cDovL29jc3AucmltLm5ldC9vY3NwMEsGCCsGAQUFBzAC hj9odHRwOi8vY3J0LnJpbS5uZXQvQmxhY2tCZXJyeSUyMENvcnBvcmF0ZSUyMFBvbGljeSUyMENB JTIwMS5jcnQwggEsBgNVHR8EggEjMIIBHzCCARugggEXoIIBE4Y/aHR0cDovL2NybC5yaW0ubmV0 L0JsYWNrQmVycnklMjBDb3Jwb3JhdGUlMjBQb2xpY3klMjBDQSUyMDEuY3JshoHPbGRhcDovLy9D Tj1CbGFja0JlcnJ5JTIwQ29ycG9yYXRlJTIwUG9saWN5JTIwQ0ElMjAxLENOPVN1YkNBLENOPUNE UCxDTj1QdWJsaWMlMjBLZXklMjBTZXJ2aWNlcyxDTj1TZXJ2aWNlcyxDTj1Db25maWd1cmF0aW9u LERDPXdpbmRvd3MsREM9bG9jYWw/Y2VydGlmaWNhdGVSZXZvY2F0aW9uTGlzdD9iYXNlP29iamVj dENsYXNzPWNSTERpc3RyaWJ1dGlvblBvaW50MIIGEgYDVR0gBIIGCTCCBgUwQQYKKwYBBAGbShQC ATAzMDEGCCsGAQUFBwIBFiVodHRwOi8vY3AucmltLm5ldC9jcHMvQ1BTdGF0ZW1lbnQuaHRtMEEG CisGAQQBm0oTAQMwMzAxBggrBgEFBQcCARYlaHR0cDovL2NwLnJpbS5uZXQvY3BzL0NQU3RhdGVt ZW50Lmh0bTBBBgorBgEEAZtKEwECMDMwMQYIKwYBBQUHAgEWJWh0dHA6Ly9jcC5yaW0ubmV0L2Nw cy9DUFN0YXRlbWVudC5odG0wQQYKKwYBBAGbShMBATAzMDEGCCsGAQUFBwIBFiVodHRwOi8vY3Au cmltLm5ldC9jcHMvQ1BTdGF0ZW1lbnQuaHRtMEEGCisGAQQBm0oTAgMwMzAxBggrBgEFBQcCARYl aHR0cDovL2NwLnJpbS5uZXQvY3BzL0NQU3RhdGVtZW50Lmh0bTBBBgorBgEEAZtKEwICMDMwMQYI KwYBBQUHAgEWJWh0dHA6Ly9jcC5yaW0ubmV0L2Nwcy9DUFN0YXRlbWVudC5odG0wQQYKKwYBBAGb ShMCATAzMDEGCCsGAQUFBwIBFiVodHRwOi8vY3AucmltLm5ldC9jcHMvQ1BTdGF0ZW1lbnQuaHRt MEEGCisGAQQBm0oTAwMwMzAxBggrBgEFBQcCARYlaHR0cDovL2NwLnJpbS5uZXQvY3BzL0NQU3Rh dGVtZW50Lmh0bTBBBgorBgEEAZtKEwMCMDMwMQYIKwYBBQUHAgEWJWh0dHA6Ly9jcC5yaW0ubmV0 L2Nwcy9DUFN0YXRlbWVudC5odG0wQQYKKwYBBAGbShMDATAzMDEGCCsGAQUFBwIBFiVodHRwOi8v Y3AucmltLm5ldC9jcHMvQ1BTdGF0ZW1lbnQuaHRtMEEGCisGAQQBm0oTBAAwMzAxBggrBgEFBQcC ARYlaHR0cDovL2NwLnJpbS5uZXQvY3BzL0NQU3RhdGVtZW50Lmh0bTBBBgorBgEEAZtKEwUDMDMw MQYIKwYBBQUHAgEWJWh0dHA6Ly9jcC5yaW0ubmV0L2Nwcy9DUFN0YXRlbWVudC5odG0wQQYKKwYB BAGbShMFAjAzMDEGCCsGAQUFBwIBFiVodHRwOi8vY3AucmltLm5ldC9jcHMvQ1BTdGF0ZW1lbnQu aHRtMEEGCisGAQQBm0oTBQEwMzAxBggrBgEFBQcCARYlaHR0cDovL2NwLnJpbS5uZXQvY3BzL0NQ U3RhdGVtZW50Lmh0bTBBBgorBgEEAZtKEwYDMDMwMQYIKwYBBQUHAgEWJWh0dHA6Ly9jcC5yaW0u bmV0L2Nwcy9DUFN0YXRlbWVudC5odG0wQQYKKwYBBAGbShMGAjAzMDEGCCsGAQUFBwIBFiVodHRw Oi8vY3AucmltLm5ldC9jcHMvQ1BTdGF0ZW1lbnQuaHRtMEEGCisGAQQBm0oTBgEwMzAxBggrBgEF BQcCARYlaHR0cDovL2NwLnJpbS5uZXQvY3BzL0NQU3RhdGVtZW50Lmh0bTBBBgorBgEEAZtKEwcD MDMwMQYIKwYBBQUHAgEWJWh0dHA6Ly9jcC5yaW0ubmV0L2Nwcy9DUFN0YXRlbWVudC5odG0wQQYK KwYBBAGbShMHAjAzMDEGCCsGAQUFBwIBFiVodHRwOi8vY3AucmltLm5ldC9jcHMvQ1BTdGF0ZW1l bnQuaHRtMEEGCisGAQQBm0oTBwEwMzAxBggrBgEFBQcCARYlaHR0cDovL2NwLnJpbS5uZXQvY3Bz L0NQU3RhdGVtZW50Lmh0bTBBBgorBgEEAZtKEwgDMDMwMQYIKwYBBQUHAgEWJWh0dHA6Ly9jcC5y aW0ubmV0L2Nwcy9DUFN0YXRlbWVudC5odG0wQQYKKwYBBAGbShMIAjAzMDEGCCsGAQUFBwIBFiVo dHRwOi8vY3AucmltLm5ldC9jcHMvQ1BTdGF0ZW1lbnQuaHRtMEEGCisGAQQBm0oTCAEwMzAxBggr BgEFBQcCARYlaHR0cDovL2NwLnJpbS5uZXQvY3BzL0NQU3RhdGVtZW50Lmh0bTAQBgkrBgEEAYI3 FQEEAwIBATAZBgkrBgEEAYI3FAIEDB4KAFMAdQBiAEMAQTANBgkqhkiG9w0BAQsFAAOCAgEAbML2 XftFHnmxEj1R+YXOw1IvY2cr3KtA2X5HweMk8WeDorircFlDGIP09Dgj2eEn7F8yg4vevOjtOj/O u+nMfxe2XdsxqbkOfOGncy2IQY0jp8Dznqg7iTJm2q5Rz+RhyICipwRhXVGhPz+UaBqzgPMRbOCy GVJFOfzIvI6IAARtWbFpDCIkIliQ36kd8UlXuAeCOqwLOQSenuL4kV+oaCKu1mNz3hC5jurnrTrt gPDYG0koEg40cxd4rv7Dy78U9jps82PFiMiA+yomtYZEsveyHHdsPupz8BN2Q6Oww99nR1ME+ING FK9r7dhEj6xAMVJ/eS2JHwtNSU3gxhhcQm/ZaP8Isfc7JKSI86II78DCyVVAJrMrt+pkNYWw8KDi yxuN5HxfGTBykx9H4lxdDTYT8AS1kf3GJUXo3/8+09g8ZIfbiSm5l96jvAL62ix/aSwFT01T7sTn CgPAcutQSnWoONApDZvqzDSJRwAtdkX+DMn2lDlocTpw99a8WkWJpNyyImvV5OeO/ra5RMCH9f2V /SerRLOQDBIjss7S3x48Fw0VsYxEIBxMV45X47lpwGfXK5oi9OuLGHBkLFavyFpLvbSDpFHfhUiD Ae2DviaDWkyLVZJXWdrujxEW2tchEcuytZw6i9k41/4mgOiy6HYwhRJhknXr5YQJ5wu5rwQxggI8 MIICOAIBATBkMFYxEzARBgoJkiaJk/IsZAEZFgNuZXQxEzARBgoJkiaJk/IsZAEZFgNyaW0xKjAo BgNVBAMTIUJsYWNrQmVycnkgQ29ycG9yYXRlIElzc3VpbmcgQ0EgMQIKcgMdRwABAAJQEjANBglg hkgBZQMEAgEFAKCBqjAYBgkqhkiG9w0BCQMxCwYJKoZIhvcNAQcBMBwGCSqGSIb3DQEJBTEPFw0x OTEwMDExMzUyMThaMC8GCSqGSIb3DQEJBDEiBCDQ/H8BY80r+mMnH5DnjjAuOHVIKj7w0Rzgmxxs /l6h1TA/BgkqhkiG9w0BCQ8xMjAwMAsGCWCGSAFlAwQCATALBglghkgBZQMEAgMwCwYJYIZIAWUD BAICMAcGBSsOAwIaMA0GCSqGSIb3DQEBAQUABIIBAERWT6DOTqj5iEZqJKNo1Duo8glA6KRqjQua fKJPqe12e71ztnpfwDGWCTB33VC+MGKKumK8FbAuoKStNo/13//mRz/ilhtom0Q+8WZR13tbqCIX JiF652NxNi0LC/Gk3ZIrh9jskwH3jF3E9M7zGyBKA/o2DKaBDQQXJMHIR8LWuKfOZEjlOdaehQje vNSQFMyvz8rO9dI+V9lK3dOhXornPBFFjXRnEYZDckCJ9j4QxlY9/yVkGos6heKrkCSPPXtaRbPM XMqbldRdw9YqzhOAIFhaazdm5pv9Pw2RAGKxiaQMotceu7gPi3yfyUAc86ktJTMkPTAG1mg1x4Gr kLsAAAAAAAA= ------=_NextPart_000_00BC_01D5783D.E9AC77B0--