From nobody Wed Jan 13 07:43:14 2021 Return-Path: X-Original-To: tram@ietfa.amsl.com Delivered-To: tram@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 7C9183A1162 for ; Wed, 13 Jan 2021 07:43:12 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.351 X-Spam-Level: X-Spam-Status: No, score=-2.351 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.25, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, RCVD_IN_MSPIKE_H2=-0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=ericsson.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 9yHzQkKUJSmH for ; Wed, 13 Jan 2021 07:43:09 -0800 (PST) Received: from EUR04-VI1-obe.outbound.protection.outlook.com (mail-eopbgr80058.outbound.protection.outlook.com [40.107.8.58]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 764183A1160 for ; Wed, 13 Jan 2021 07:43:09 -0800 (PST) ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=fqzyeYSTnVCPhxeo53rzMSc2DEQi5u8vxq2/yYWi4PyJplIJ6zVmL/vfGwbwzof1oSfUmC1C/tFMI+ACGqaQl78tk3wLRvEoq9SesVB8eySMGtWBHY3TI601ij9WmfT391UJyqe8OBbvMoViYEh7fIWerW1+8Vij3U4pAilJE8C/gzXcSczOQBeN4kNfH+CBNeIOYq50DjjlOd7tPNnI0627l6BfXMcxEXQJHoNpZpmZQW1FzKxRqQpO9h3VD3pv2bVH5lriYfXiZ7Kq78RZyHqLObzraW9WseHvCCIPEvQAQQwFSlqnen93oCZJfRQlFBrckWto3ymmb9EM58JYuA== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=F5aDfsnI3Kf1sLrbH9LJQyhyuYGzGUzAp1UYOyYt3Ew=; b=LoEbYzgqF+tu4/ADq/hRNMhxPvdtBn2bdg6MSWhiphSTAispGQMAbnhj190HOaR0PExJOuXCNpxcXlJyYPXIiaxmwWXmVtjkpgYhxfgRCshG3NkJQqefh9CeWsOMXGaaCtUKh3eJBIMRBADh/FHWyJuL1zn8ui6uxO1N5ENwBc4s0W3CwGzFTB2OoVireT1AXZT02R3FJWo2DGHrINr30Hnr2/B+nJ69fRk+WfMyurXr3XgyvMFxG/emw8UCdZxbB3zQx7V1G5jtJSbugKph8+LDzeMhLXUwBndwI6QfJkavqBWwhl3tDlEI3Vy0XVHQkR64T+i4SQFYQx5SmGJ51Q== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=ericsson.com; dmarc=pass action=none header.from=ericsson.com; dkim=pass header.d=ericsson.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ericsson.com; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=F5aDfsnI3Kf1sLrbH9LJQyhyuYGzGUzAp1UYOyYt3Ew=; b=OPZcYGjlMmQAnVy9huS5i7fbgr5JXLGXJALI4y5zBh3w4s4cOtv+YDdGO+k34+Tl4ES2zelsWqyqHFi0TFVjQVU5B+EH2UW1/wBEo9CKCU3tgG0cUjojQlUmHT630h83zHpIDse5EJ1zJMmV6HJ/abvnByw8U6+QNLDQuup2L6A= Received: from HE1PR0702MB3772.eurprd07.prod.outlook.com (2603:10a6:7:8e::14) by HE1PR0702MB3706.eurprd07.prod.outlook.com (2603:10a6:7:8d::20) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3763.7; Wed, 13 Jan 2021 15:43:06 +0000 Received: from HE1PR0702MB3772.eurprd07.prod.outlook.com ([fe80::8cd:496:65de:4ace]) by HE1PR0702MB3772.eurprd07.prod.outlook.com ([fe80::8cd:496:65de:4ace%6]) with mapi id 15.20.3763.009; Wed, 13 Jan 2021 15:43:05 +0000 From: Magnus Westerlund To: "justin@uberti.name" CC: "deadbeef@google.com" , "tram@ietf.org" , "sperreault@jive.com" , "tireddy@cisco.com" , "praspati@cisco.com" , Gonzalo Camarillo , "rmohanr@cisco.com" Thread-Topic: [tram] [Technical Errata Reported] RFC7635 (5059) Thread-Index: AQHS9i9Y0HUi33cifkeKgW+G6emAKql9fXuAgAGrDICArnCqAA== Date: Wed, 13 Jan 2021 15:43:05 +0000 Message-ID: <2e7b5e427f582c2884390b84553640a27e502a58.camel@ericsson.com> References: <20170705232644.C7CE5B80D80@rfc-editor.org> <7d6bcb0becf3790f00cc478af9eeacdc07180e32.camel@ericsson.com> In-Reply-To: Accept-Language: sv-SE, en-US Content-Language: en-US X-MS-Has-Attach: yes X-MS-TNEF-Correlator: x-mailer: Evolution 3.28.5-0ubuntu0.18.04.2 authentication-results: uberti.name; dkim=none (message not signed) header.d=none;uberti.name; dmarc=none action=none header.from=ericsson.com; x-originating-ip: [192.176.1.80] x-ms-publictraffictype: Email x-ms-office365-filtering-correlation-id: 6f9d8548-2f5f-4642-66b7-08d8b7d9eb80 x-ms-traffictypediagnostic: HE1PR0702MB3706: x-ms-exchange-transport-forked: True x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:962; x-ms-exchange-senderadcheck: 1 x-microsoft-antispam: BCL:0; x-microsoft-antispam-message-info: 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 x-forefront-antispam-report: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:; IPV:NLI; SFV:NSPM; H:HE1PR0702MB3772.eurprd07.prod.outlook.com; PTR:; CAT:NONE; SFS:(4636009)(396003)(376002)(346002)(136003)(366004)(39860400002)(8676002)(66616009)(186003)(36756003)(26005)(66446008)(6486002)(66476007)(2616005)(66556008)(71200400001)(4326008)(66946007)(64756008)(8936002)(44832011)(86362001)(6916009)(6506007)(316002)(53546011)(966005)(5660300002)(2906002)(6512007)(54906003)(83380400001)(478600001)(76116006)(99936003)(99106002); DIR:OUT; SFP:1101; x-ms-exchange-antispam-messagedata: =?utf-8?B?ZmlkWllmYUZIVThhc1R2M0t6RjhFMmVWdndOOU4ycGlJRXZOcHZNM1BRYlJk?= =?utf-8?B?ZHptalpwalVUL0NqSGFUM1hzZTF6UjRxaFVGVE5wbW9iVkt0T1VKc1Nna1JG?= =?utf-8?B?YWtzVzE0cUFaWTEvTU5Rai84MzZFS2llZlAxampHS0FsSVowMkF2emxydVhq?= =?utf-8?B?N3AyV1VCK2VIKzNySjdkWngvTGRSQjljZVRXbG5ITnRUdnYvKytTQ1ZGd3Rm?= =?utf-8?B?NWp6MURiRXk1Ynp5Ti9UelRmWVdyT2hwNGdWY0RBRUJndFNtOW42c1AwcjA1?= =?utf-8?B?RnEyQkVSdFlQTWhWZi9xNFIreGRSa2thSUNRc0VZWDVPUmIwRkhQbW5PR2FS?= =?utf-8?B?aktCL2FCQmt3aHRUNTVHRHdvMDFmOXFMK1p3K2c0b245RUFTN0hvV3V1K29r?= =?utf-8?B?RmlwUDlOeWdyR2J3bDUxZ0tvUER6RjJEUmc2NmNSSVNsbk1vb1RaY3R1Mk5U?= =?utf-8?B?OTRNcnVJd1o0aVk4Nk9idmFyZWYyZ1pnOS9CS3dENXJ4aVlnQjVQSzlxczl2?= =?utf-8?B?YW9tQldaNlF1ZFVoUzJMaEdkREd6ZVRIYnlzZnVybHJPL1h5T294NUdkQUtx?= =?utf-8?B?Smg1QkxWaUFQUU1meitNRk5oWEZXWjJZQ1Z2WkRxc1Flc3RaVGdERTYvTnVV?= =?utf-8?B?UEVsakk0aTZ1WnVjbURrUDhpTWZrbTBVZjBkR2IxcURQbmF2MGpIN05UZmI2?= =?utf-8?B?LzQxVk1wbUJqNEU1aWtXN1NWYTgwc21yZmNndldHNHZwUHhRNjBLcFl5eUdw?= =?utf-8?B?RkVpaXlRYUlUQ1Q0YjduQ2wzNTRNdnVXTzNCb0kvTGE4aWlISVZkMGxyNkM5?= =?utf-8?B?cmZSTFd2UE01ZzB0MnRGZTc3RmZOWVFIbVZWdnZFQUNzN3phWExhaWtpdzIy?= =?utf-8?B?R3RxRE5WdGNHeUdCNjhoUklxRGxDL2JaNDlTZVpFN0hXUWVOaFRPMU1mWG5B?= =?utf-8?B?d1dNZENqRzJtdy8vVUpTbWYzQU0ybnRBWWY5Y2YzSFJEQ2lCb1NtUCtCOUx1?= =?utf-8?B?Nks3a3NqbldBKzkxaCtzRDRwWmZWZHdGVHB1a1FJV1VKb1phdndzS2NBUm9V?= =?utf-8?B?SUdqcVh6cFRheThVbUhuaFE5eXpoVmJoT01HNUw2T1pUWUFuQlVzM1pDMEhy?= =?utf-8?B?M2FFNG1BN0EyN2pncjU2cmJLQTc5bEdKUUhNWWVpVW94TUhDUGdBU3pDV0Nm?= =?utf-8?B?SWV6TTFpaWt6dWJ1Y0pqMFd5U3Y0K3hnOEdKeElNckJGTk1Cekh0dlU2NGdG?= =?utf-8?B?em9KZnFyZUFyT2dZdXNqVnVNa2Z2dVlRL0tRbHdMV3ZFejR3RWNPNzR4dFpF?= =?utf-8?Q?DwNE8rhahCAbfLYVelis7MKpml0iVtF4a+?= Content-Type: multipart/signed; micalg="sha-256"; protocol="application/x-pkcs7-signature"; boundary="=-ZLw2sua0TSP64/Lk82Ua" MIME-Version: 1.0 X-OriginatorOrg: ericsson.com X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-AuthSource: HE1PR0702MB3772.eurprd07.prod.outlook.com X-MS-Exchange-CrossTenant-Network-Message-Id: 6f9d8548-2f5f-4642-66b7-08d8b7d9eb80 X-MS-Exchange-CrossTenant-originalarrivaltime: 13 Jan 2021 15:43:05.8742 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 92e84ceb-fbfd-47ab-be52-080c6b87953f X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: ATxy5yANrDeLib5rnggEtNfGQM4nyp7bGhyqgpN3pS7G4SxkKr1jD0hgmBmgkUKr0vD6YGMgfPTCx6rSdcmM1vx+PU3UaPNFwNzKm3+1cBI= X-MS-Exchange-Transport-CrossTenantHeadersStamped: HE1PR0702MB3706 Archived-At: Subject: Re: [tram] [Technical Errata Reported] RFC7635 (5059) X-BeenThere: tram@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "Discussing the creation of a Turn Revised And Modernized \(TRAM\) WG, which goal is to consolidate the various initiatives to update TURN and STUN." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 13 Jan 2021 15:43:13 -0000 --=-ZLw2sua0TSP64/Lk82Ua Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable Hi, I would like to conclude on this. Can I verify it? Cheers Magnus=20 On Thu, 2020-09-24 at 08:50 -0700, Justin Uberti wrote: > This looks correct to me at first glance. Will re-read in context and giv= e a > definitive answer. >=20 > On Wed, Sep 23, 2020 at 7:22 AM Magnus Westerlund < > magnus.westerlund@ericsson.com> wrote: > > Hi, > >=20 > > I would appreciate some response regarding this Errata. Should it be > > verified, > > held for document update, or rejected?=20 > >=20 > > Cheers > >=20 > > Magnus Westerlund > >=20 > > On Wed, 2017-07-05 at 16:26 -0700, RFC Errata System wrote: > > > The following errata report has been submitted for RFC7635, > > > "Session Traversal Utilities for NAT (STUN) Extension for Third-Party > > > Authorization". > > >=20 > > > -------------------------------------- > > > You may review the report below and at: > > > http://www.rfc-editor.org/errata/eid5059 > > >=20 > > > -------------------------------------- > > > Type: Technical > > > Reported by: Taylor Brandstetter > > >=20 > > > Section: 6.2 > > >=20 > > > Original Text > > > ------------- > > > key_length: Length of the session key in octets. The key length = of > > > 160 bits MUST be supported (i.e., only the 160-bit key is used = by > > > HMAC-SHA-1 for message integrity of STUN messages). The key > > > length facilitates the hash agility plan discussed in Section 1= 6.3 > > > of [RFC5389]. > > >=20 > > >=20 > > > Corrected Text > > > -------------- > > > key_length: Length of the session key in octets. > > >=20 > > > Notes > > > ----- > > > RFC2104 section 2 states: > > >=20 > > > The authentication key K can be of any length up to B, the > > > block length of the hash function. Applications that use keys lon= ger > > > than B bytes will first hash the key using H and then use the > > > resultant L byte string as the actual key to HMAC. > > >=20 > > > Meaning any key length is allowed. The fact that the hash output is 2= 0 > > bytes > > > doesn't mean the key needs to be 20 bytes as well. > > >=20 > > > Instructions: > > > ------------- > > > This erratum is currently posted as "Reported". If necessary, please > > > use "Reply All" to discuss whether it should be verified or > > > rejected. When a decision is reached, the verifying party =20 > > > can log in to change the status and edit the report, if necessary.= =20 > > >=20 > > > -------------------------------------- > > > RFC7635 (draft-ietf-tram-turn-third-party-authz-16) > > > -------------------------------------- > > > Title : Session Traversal Utilities for NAT (STUN) Exte= nsion > > for > > > Third-Party Authorization > > > Publication Date : August 2015 > > > Author(s) : T. Reddy, P. Patil, R. Ravindranath, J. Uberti > > > Category : PROPOSED STANDARD > > > Source : TURN Revised and Modernized > > > Area : Transport > > > Stream : IETF > > > Verifying Party : IESG > > >=20 > > > _______________________________________________ > > > tram mailing list > > > tram@ietf.org > > > https://www.ietf.org/mailman/listinfo/tram --=-ZLw2sua0TSP64/Lk82Ua Content-Type: application/x-pkcs7-signature; name="smime.p7s" Content-Disposition: attachment; filename="smime.p7s" Content-Transfer-Encoding: base64 MIAGCSqGSIb3DQEHAqCAMIACAQExDzANBglghkgBZQMEAgEFADCABgkqhkiG9w0BBwEAAKCCErYw ggX0MIID3KADAgECAg8BdlE9InYZOYLl1zGep4IwDQYJKoZIhvcNAQELBQAwRzELMAkGA1UEBhMC U0UxETAPBgNVBAoMCEVyaWNzc29uMSUwIwYDVQQDDBxFcmljc3NvbiBOTCBJbmRpdmlkdWFsIENB IHYzMB4XDTIwMTIxMTA5NTg0OVoXDTIzMTIxMjA5NTg0OVowXjERMA8GA1UECgwIRXJpY3Nzb24x GjAYBgNVBAMMEU1hZ251cyBXZXN0ZXJsdW5kMS0wKwYJKoZIhvcNAQkBFh5tYWdudXMud2VzdGVy bHVuZEBlcmljc3Nvbi5jb20wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCIT6U9ddUp UCEryIA27xtF8WsRAIfc5jBavfu0OGDmwITYYRD2PaMEdEK+I4dqz0f6xcCrDnBk2Xj+JxjhaRkq TAifJZima9WE2JoI/uq8UsS2HJWlhspAwKx1osARgtRiMjRZZyyfiRZLbgXHWYpnTt3i9QsuX/uo 9oZFWpDCbZee4Il9uldsUcuBLZx2PyZvBvC8KCUaBXsZX6bwV7hssRVn+BgFCuEievJMx0khTRVh i9goObxu5Jl44RtwbZNYB1UE1IzRWEZw+b3cEvXiQjPl2e3ytMZSmhy+IaKmjxES6ODiuh51KAcm PZfZIaX2djmD76YGi+ETmnb8Xm3dAgMBAAGjggHEMIIBwDAfBgNVHSMEGDAWgBQcexmel5x2rCA9 2NzjkWrj2y2mUzAdBgNVHQ4EFgQUICO/88T0EQvEUm5+HVt/d9Mm+Z8wDgYDVR0PAQH/BAQDAgWg MFUGA1UdIAROMEwwSgYMKwYBBAGCDwIDAQESMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vcmVwb3Np dG9yeS50cnVzdC50ZWxpYXNvbmVyYS5jb20vQ1BTMCkGA1UdEQQiMCCBHm1hZ251cy53ZXN0ZXJs dW5kQGVyaWNzc29uLmNvbTBIBgNVHR8EQTA/MD2gO6A5hjdodHRwOi8vY3JsLnRydXN0LnRlbGlh LmNvbS9lcmljc3Nvbm5saW5kaXZpZHVhbGNhdjMuY3JsMB0GA1UdJQQWMBQGCCsGAQUFBwMEBggr BgEFBQcDAjCBggYIKwYBBQUHAQEEdjB0MCgGCCsGAQUFBzABhhxodHRwOi8vb2NzcDIudHJ1c3Qu dGVsaWEuY29tMEgGCCsGAQUFBzAChjxodHRwOi8vY2EudHJ1c3QudGVsaWFzb25lcmEuY29tL2Vy aWNzc29ubmxpbmRpdmlkdWFsY2F2My5jZXIwDQYJKoZIhvcNAQELBQADggIBANRZXQy+lUW97uaL uApOixnDKLpUoz+N/5Owd/9illmbxQDEY1/pPs4KJSvw88p+F3bmOzb+fLUNa6Mi/2Tw83FzEVmO 3RqzKtca+I9GDpRQ8oWL7hrUPJoNacidSZLmAP4L4kwHIhvGNX4f1c/oB4fAkP/xZsAAxYi7nKxd XA2n/KMWNkezyB9BSsD8ZOS4pWU8UaZjd5r0fzqM5zQbU4EPqHa8jFMSMz1UrYXPKKxl6E4WA3TE w1oLjcli0NWGQHyQ+3Kh7fe6zPoXfLd/2EQjr2o76ssgoqd2V1Mx5TRHdUyxjIMPEOVYpvcerNUB hEBkaOQ9FugYcMhMc8BF7nQZq+hsL/T7idg4gE2sEfNdK9RBf/EVH10GMrmbadqTycztD1gUL3dV Qxik4TCMxIctt9XqtTGHaMewZLQAXp/sHWlU/vmz9brcuzYQ9YVd5hTendGMUyGhWPV/KvxouKPK zdrGeEqUQCeBwWgQASQNOrpTzMJwZAV/Ww3ExQCjHvflvUQzVuU0sC6AEVkgqMATIXS6h6rjLL31 pjt2JV84XRjF5afYkcRIHTsrtcoWeFtOu/GpZNhtq+tde0QvnkSsjczMWU0gKk0hXBmXwEGUimuD Vq/Wvr0mr18d9mKA6xPNQOfn/VL5CWXa11OtOjj8WsTy3XUpyJ6dc9Z72TmKMIIF9DCCA9ygAwIB AgIPAXZRPSJ2GTmC5dcxnqeCMA0GCSqGSIb3DQEBCwUAMEcxCzAJBgNVBAYTAlNFMREwDwYDVQQK DAhFcmljc3NvbjElMCMGA1UEAwwcRXJpY3Nzb24gTkwgSW5kaXZpZHVhbCBDQSB2MzAeFw0yMDEy MTEwOTU4NDlaFw0yMzEyMTIwOTU4NDlaMF4xETAPBgNVBAoMCEVyaWNzc29uMRowGAYDVQQDDBFN YWdudXMgV2VzdGVybHVuZDEtMCsGCSqGSIb3DQEJARYebWFnbnVzLndlc3Rlcmx1bmRAZXJpY3Nz b24uY29tMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiE+lPXXVKVAhK8iANu8bRfFr EQCH3OYwWr37tDhg5sCE2GEQ9j2jBHRCviOHas9H+sXAqw5wZNl4/icY4WkZKkwInyWYpmvVhNia CP7qvFLEthyVpYbKQMCsdaLAEYLUYjI0WWcsn4kWS24Fx1mKZ07d4vULLl/7qPaGRVqQwm2XnuCJ fbpXbFHLgS2cdj8mbwbwvCglGgV7GV+m8Fe4bLEVZ/gYBQrhInryTMdJIU0VYYvYKDm8buSZeOEb cG2TWAdVBNSM0VhGcPm93BL14kIz5dnt8rTGUpocviGipo8REujg4roedSgHJj2X2SGl9nY5g++m BovhE5p2/F5t3QIDAQABo4IBxDCCAcAwHwYDVR0jBBgwFoAUHHsZnpecdqwgPdjc45Fq49stplMw HQYDVR0OBBYEFCAjv/PE9BELxFJufh1bf3fTJvmfMA4GA1UdDwEB/wQEAwIFoDBVBgNVHSAETjBM MEoGDCsGAQQBgg8CAwEBEjA6MDgGCCsGAQUFBwIBFixodHRwczovL3JlcG9zaXRvcnkudHJ1c3Qu dGVsaWFzb25lcmEuY29tL0NQUzApBgNVHREEIjAggR5tYWdudXMud2VzdGVybHVuZEBlcmljc3Nv bi5jb20wSAYDVR0fBEEwPzA9oDugOYY3aHR0cDovL2NybC50cnVzdC50ZWxpYS5jb20vZXJpY3Nz b25ubGluZGl2aWR1YWxjYXYzLmNybDAdBgNVHSUEFjAUBggrBgEFBQcDBAYIKwYBBQUHAwIwgYIG CCsGAQUFBwEBBHYwdDAoBggrBgEFBQcwAYYcaHR0cDovL29jc3AyLnRydXN0LnRlbGlhLmNvbTBI BggrBgEFBQcwAoY8aHR0cDovL2NhLnRydXN0LnRlbGlhc29uZXJhLmNvbS9lcmljc3Nvbm5saW5k aXZpZHVhbGNhdjMuY2VyMA0GCSqGSIb3DQEBCwUAA4ICAQDUWV0MvpVFve7mi7gKTosZwyi6VKM/ jf+TsHf/YpZZm8UAxGNf6T7OCiUr8PPKfhd25js2/ny1DWujIv9k8PNxcxFZjt0asyrXGviPRg6U UPKFi+4a1DyaDWnInUmS5gD+C+JMByIbxjV+H9XP6AeHwJD/8WbAAMWIu5ysXVwNp/yjFjZHs8gf QUrA/GTkuKVlPFGmY3ea9H86jOc0G1OBD6h2vIxTEjM9VK2FzyisZehOFgN0xMNaC43JYtDVhkB8 kPtyoe33usz6F3y3f9hEI69qO+rLIKKndldTMeU0R3VMsYyDDxDlWKb3HqzVAYRAZGjkPRboGHDI THPARe50GavobC/0+4nYOIBNrBHzXSvUQX/xFR9dBjK5m2nak8nM7Q9YFC93VUMYpOEwjMSHLbfV 6rUxh2jHsGS0AF6f7B1pVP75s/W63Ls2EPWFXeYU3p3RjFMhoVj1fyr8aLijys3axnhKlEAngcFo EAEkDTq6U8zCcGQFf1sNxMUAox735b1EM1blNLAugBFZIKjAEyF0uoeq4yy99aY7diVfOF0YxeWn 2JHESB07K7XKFnhbTrvxqWTYbavrXXtEL55ErI3MzFlNICpNIVwZl8BBlIprg1av1r69Jq9fHfZi gOsTzUDn5/1S+Qll2tdTrTo4/FrE8t11KcienXPWe9k5ijCCBsIwggSqoAMCAQICEFO4foPhnJko k7CbSRzsuOswDQYJKoZIhvcNAQELBQAwNzEUMBIGA1UECgwLVGVsaWFTb25lcmExHzAdBgNVBAMM FlRlbGlhU29uZXJhIFJvb3QgQ0EgdjEwHhcNMTUxMDI3MTIxNjQ2WhcNMjUxMDI3MTIxNjQ2WjBH MQswCQYDVQQGEwJTRTERMA8GA1UECgwIRXJpY3Nzb24xJTAjBgNVBAMMHEVyaWNzc29uIE5MIElu ZGl2aWR1YWwgQ0EgdjMwggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQDs8t8AALhQ8qe7 2FS3xpP348GqO9TDRjS0s85eQ7Y0LTLZdmSz2cl+lYqs0zfSTm+7meisbhkqUXkL7fFzoe4iIZCh /VuYUaW407CZlDCXes4n4TqTSuoklN6uOPhY7EC9ZVbXILlLhRummTdDdxhVW4Leo0awEhfLf98M vWxzwCHzMj8m6YOmNjx+f9TcJE3qaA0piuvSxlfpVdiCulPTlmsmV2RSBSAwqBshZYRcQBIDfqmd vkaoP9EzNKAh7yjthC0hpgHZyZMIs0eNo4v2PUmE0rhu+Zs0nujnwhljPA2/8b8v9tGixD1zbtT7 zoM2Ot1menJpFp4zJVSfdKVgtoWqg5t2H/E0XY1LwJez89W07nscEocyBmpC+zJAmKxKhzEWqIyP 1UrZaEIFu+hO+s0Nm8sOUMa4TlG4rAUikc5U5TmUIGBRQGxulYhfAzqSYf8oLUMLky1DOa9eRu3s p0FdQDEzQlnF/h1L4AK1MOkX1vS+fLgOvBo5LRU1fLPUZQ7FKrDXC6nl2ldvEtljHWstGBmqv25a EvAA+yrrplCh/kYvSBjvZibz9Obbwx4yqS77/NHN1iyZyVP2s52B2BLdvo4yhzk6nRk8S/8zHaUU kBUrrvijPDaGK5FNVSaioGvkC7IKioITKffYLtT9XuirKrHlh3VzkazG46pAVwIDAQABo4IBuDCC AbQwgYoGCCsGAQUFBwEBBH4wfDAtBggrBgEFBQcwAYYhaHR0cDovL29jc3AudHJ1c3QudGVsaWFz b25lcmEuY29tMEsGCCsGAQUFBzAChj9odHRwOi8vcmVwb3NpdG9yeS50cnVzdC50ZWxpYXNvbmVy YS5jb20vdGVsaWFzb25lcmFyb290Y2F2MS5jZXIwEgYDVR0TAQH/BAgwBgEB/wIBADBVBgNVHSAE TjBMMEoGDCsGAQQBgg8CAwEBAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3JlcG9zaXRvcnkudHJ1 c3QudGVsaWFzb25lcmEuY29tL0NQUzBLBgNVHR8ERDBCMECgPqA8hjpodHRwOi8vY3JsLTMudHJ1 c3QudGVsaWFzb25lcmEuY29tL3RlbGlhc29uZXJhcm9vdGNhdjEuY3JsMB0GA1UdJQQWMBQGCCsG AQUFBwMCBggrBgEFBQcDBDAOBgNVHQ8BAf8EBAMCAQYwHQYDVR0OBBYEFBx7GZ6XnHasID3Y3OOR auPbLaZTMB8GA1UdIwQYMBaAFPCPWTgAs/WPmpYM1ev6e6oX6BMSMA0GCSqGSIb3DQEBCwUAA4IC AQBQWGvx1Yw7tC6rV0PIjKfDyxaanIX+NZLEGOkdQLKGW2gVLtDUJQEPRs5QtaZiObNHCZ7mmSNM Vek4lkt/0dqfVIFutVw/QkyFGwC99ZmNwXSX9z+OoMyoEBHGvw5RY6vRlZrj0uKvdASzYL4KMaB7 m3NwurNDmmNbG52suRIZ76wBOEOddRZcZiTy50ZkBqYnnl2t3D3oBX2NZCQysshUcqRdUbkS13HT CIChMuTV9W0tzPXUOJoJlJlU9nd91IikhGEOrPwfixWms+C8sF0r9qN1uJGx6ELPOiFrLfNtcMNM MbAqRHwpSLxe3wcNkJGxv9T8LswLi1UrRIQ85AKjqzBnLSsjRGgbMgJ+xKtngmvEA155JmoKfUD7 DRbP6Kp14/Y9XFbR/WuDj84bYNKXe4HdDc1P+UMYm16m2L6LkIIoRlx0A5mi+K7jewuGqzFKkaPN mJ0RLCi+4d4/47Zs3DC3PUNOxdOEEHf4kkdWOaSIuj3TQYhNv+LsgF0uijiBmaz2zUFDa2bcIkKa kDZfAFM4HoHz8K2BZRaHKWhd3dZua/tlSiqokUFX2DxmHmZ1n5HM9OiaAIXP/Zo2x10j/Yb1mM3i 0bqGahxlHYzl/QyEG/dujp3lewuVjCI0mPDkZGphvxyqp4Jo8qS94EnOqBvxOgftYug7OY9EKY+W kDGCAsowggLGAgEBMFowRzELMAkGA1UEBhMCU0UxETAPBgNVBAoMCEVyaWNzc29uMSUwIwYDVQQD DBxFcmljc3NvbiBOTCBJbmRpdmlkdWFsIENBIHYzAg8BdlE9InYZOYLl1zGep4IwDQYJYIZIAWUD BAIBBQCgggFBMBgGCSqGSIb3DQEJAzELBgkqhkiG9w0BBwEwHAYJKoZIhvcNAQkFMQ8XDTIxMDEx MzE1NDMwNFowLwYJKoZIhvcNAQkEMSIEIAzIfC5tXTIxXLBDm8BUW23nnSXXwT+TpgegJlrhO105 MGkGCSsGAQQBgjcQBDFcMFowRzELMAkGA1UEBhMCU0UxETAPBgNVBAoMCEVyaWNzc29uMSUwIwYD VQQDDBxFcmljc3NvbiBOTCBJbmRpdmlkdWFsIENBIHYzAg8BdlE9InYZOYLl1zGep4IwawYLKoZI hvcNAQkQAgsxXKBaMEcxCzAJBgNVBAYTAlNFMREwDwYDVQQKDAhFcmljc3NvbjElMCMGA1UEAwwc RXJpY3Nzb24gTkwgSW5kaXZpZHVhbCBDQSB2MwIPAXZRPSJ2GTmC5dcxnqeCMA0GCSqGSIb3DQEB AQUABIIBACJipOvl1bdSYFWRCAPfBEODiJNSFSv5W/9koPMCqRM9VJlBmY/A+n2pFUR1riINeZ+7 ovnSnh2rDlHZ697bXM8zIo+J53DwQNhX8NJ8iuJbnVSrhbFdVCP2Xg8+4e2YburyUaNAQlrLbPw+ Eq6C8lDLdoc5Jhjmx6e1ZAPD5GSwK3SLrXcitXM2Nb89NdPNKsuwYq9EMkA+GF/KK0lWtMq4vflh wyCIC0WrWAWCCyc67k6INMDLJDJ9HAq7Egkh9QMR+0ZYjTTqHnt414nvkzrjTAMoiTVgdXgsu738 DYVCFZX7/uY4Jpj878SiRIfoKbje86Ql8RgXKJL2HsGYUEkAAAAAAAA= --=-ZLw2sua0TSP64/Lk82Ua--