Return-Path: X-Original-To: unbearable@ietfa.amsl.com Delivered-To: unbearable@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 50D12129A8F for ; Thu, 23 Feb 2017 16:07:31 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.021 X-Spam-Level: X-Spam-Status: No, score=-2.021 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=microsoft.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 0LER6i18R5Z3 for ; Thu, 23 Feb 2017 16:07:29 -0800 (PST) Received: from NAM02-SN1-obe.outbound.protection.outlook.com (mail-sn1nam02on0106.outbound.protection.outlook.com [104.47.36.106]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 682FE1293D9 for ; Thu, 23 Feb 2017 16:07:29 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=PUZNuTl/AG2p8uNE7HQPj+RSDGloOsEkAQyJFuA/L5U=; b=J5e6kgzfEMlUu+Yrdja3UgOSyYcDCeuUP5wHr/UBg+DgL6/zGfENJoK5Vs3DiNhdqOW4jfttjxeqkS8YUBwecVCdyFryfjTsxro6KDp4i9iK4sIGyoXzscZHnwaGVr/SDzU7y5HjeSFYOTAvKya+zIgi8cClFH76oeErTBe1u0o= Received: from CY1PR0301MB0842.namprd03.prod.outlook.com (10.160.163.148) by CY1PR0301MB0841.namprd03.prod.outlook.com (10.160.163.147) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P384) id 15.1.919.13; Fri, 24 Feb 2017 00:07:28 +0000 Received: from CY1PR0301MB0842.namprd03.prod.outlook.com ([10.160.163.148]) by CY1PR0301MB0842.namprd03.prod.outlook.com ([10.160.163.148]) with mapi id 15.01.0919.018; Fri, 24 Feb 2017 00:07:28 +0000 From: Andrei Popov To: Brian Campbell Thread-Topic: [Unbearable] ramifications of longer EKMs Thread-Index: AQHSjVYgmQf/q9+NMUG8uI+0qEZ9BqF1ncIggAAZn4CAAACqsIAADg1QgADNxwCAAG9TYIAAQPSAgAAAk1A= Date: Fri, 24 Feb 2017 00:07:27 +0000 Message-ID: References: In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: authentication-results: spf=none (sender IP is ) smtp.mailfrom=Andrei.Popov@microsoft.com; x-originating-ip: [2001:4898:80e8:8::1d2] x-ms-office365-filtering-correlation-id: 8b310779-f7d1-4f02-4d4d-08d45c491e8b x-ms-office365-filtering-ht: Tenant x-microsoft-antispam: UriScan:; BCL:0; PCL:0; RULEID:(22001)(48565401081); SRVR:CY1PR0301MB0841; x-microsoft-exchange-diagnostics: 1; CY1PR0301MB0841; 7:DzMR0cT9PW2vev0b6bu7iWETuShgoEya3We5ST9HXjDOlm4rrVhJ0aR02q6kR8ZiLO4cspMBUxgJjlsTl/pCjY0eHBcaJck+h6tbwTWIqoE4D6kB4cnmVZ52XjGUZh+7+EMMbhZXhmZRfpPDqmeKUf/GQ2rgxE4s5gFY6HOFVPBipcxXhziS3YvRJAHpWO1HbsyQuLHV23VTSBJwyEZdMbYyBVVftUZLUnoMMylckIBDNYcCuoiJWWISg8VPwdHdXl00MFRxbmcfB6GGMI1Nta827D/hlJsk/ZQ342RHRqf2fB2W2gU9o0i/MWWIvuvLMxvqMccCBt31kqcCha5ZpchGtmAM+0Dlu5UAeA7P97k= x-microsoft-antispam-prvs: x-exchange-antispam-report-test: UriScan:(158342451672863)(21748063052155); x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(61425038)(6040375)(601004)(2401047)(8121501046)(5005006)(10201501046)(3002001)(6055026)(61426038)(61427038)(6041248)(20161123558025)(20161123562025)(20161123560025)(20161123564025)(20161123555025)(6072148); SRVR:CY1PR0301MB0841; BCL:0; PCL:0; RULEID:; SRVR:CY1PR0301MB0841; x-forefront-prvs: 0228DDDDD7 x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(6009001)(7916002)(39860400002)(39840400002)(39450400003)(39410400002)(39850400002)(189002)(199003)(110136004)(6246003)(189998001)(81156014)(8676002)(101416001)(8936002)(74316002)(105586002)(106356001)(81166006)(106116001)(93886004)(6436002)(38730400002)(8990500004)(7736002)(7696004)(33656002)(97736004)(2950100002)(6916009)(6116002)(10290500002)(10090500001)(5005710100001)(2900100001)(229853002)(5660300001)(77096006)(3660700001)(790700001)(122556002)(4326007)(50986999)(54356999)(92566002)(86362001)(3280700002)(102836003)(25786008)(2906002)(86612001)(9686003)(99286003)(55016002)(76176999)(6306002)(6506006)(54896002)(53936002)(68736007)(148743002); DIR:OUT; SFP:1102; SCL:1; SRVR:CY1PR0301MB0841; H:CY1PR0301MB0842.namprd03.prod.outlook.com; FPR:; SPF:None; PTR:InfoNoRecords; MX:1; A:1; LANG:en; received-spf: None (protection.outlook.com: microsoft.com does not designate permitted sender hosts) spamdiagnosticoutput: 1:99 spamdiagnosticmetadata: NSPM Content-Type: multipart/alternative; boundary="_000_CY1PR0301MB0842FF5308B0E0049C4F2A7E8C520CY1PR0301MB0842_" MIME-Version: 1.0 X-OriginatorOrg: microsoft.com X-MS-Exchange-CrossTenant-originalarrivaltime: 24 Feb 2017 00:07:27.8083 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 72f988bf-86f1-41af-91ab-2d7cd011db47 X-MS-Exchange-Transport-CrossTenantHeadersStamped: CY1PR0301MB0841 Archived-At: Cc: IETF Tokbind WG Subject: Re: [Unbearable] ramifications of longer EKMs X-BeenThere: unbearable@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: "\"This list is for discussion of proposals for doing better than bearer tokens \(e.g. HTTP cookies, OAuth tokens etc.\) for web applications. The specific goal is chartering a WG focused on preventing security token export and replay attacks.\"" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 24 Feb 2017 00:07:31 -0000 --_000_CY1PR0301MB0842FF5308B0E0049C4F2A7E8C520CY1PR0301MB0842_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 w5ggIEkgd291bGRuJ3QgY2hhcmFjdGVyaXplIGl0IGFzIG1pc2NvbmZpZ3VyYXRpb24gYnV0IHJh dGhlciBqdXN0IGRpZmZlcmVudCBkb21haW5zIHN1cHBvcnRpbmcgZGlmZmVyZW50IHNldHMgb2Yg VEIga2V5IHBhcmFtcy4NCkFuIFJQIG5lZ290aWF0aW5nIFRCIGtleSBwYXJhbWV0ZXJzIHRoYXQg dGhlIGNvcnJlc3BvbmRpbmcgSURQIGRvZXMgbm90IHN1cHBvcnQgbWFrZXMgaXQgaW1wb3NzaWJs ZSBmb3IgdGhlIElEUCB0byBiaW5kIHRoZSB0b2tlbiwgdGhlcmVmb3JlIEkgdGhpbmsgb2YgaXQg YXMgYSBtaXNjb25maWd1cmF0aW9uLiBVbmZvcnR1bmF0ZWx5LCBSUHMgYXJlIGxpbWl0ZWQgaW4g dGhlaXIgVEIgb3B0aW9ucyBieSB0aGVpciBJRFDigJlzIGNhcGFiaWxpdGllc+KApg0KDQoNCsOY ICBBbmQgY291bGQgaGFwcGVuIGV2ZW4gaWYgdGhlIHNldHMgd2VyZSB0aGUgc2FtZSBidXQgcHJp b3JpdGl6ZWQgZGlmZmVyZW50bHkuDQpJZiB0aGUgVEIga2V5IHBhcmFtZXRlciBzZXRzIGFyZSB0 aGUgc2FtZSwgYnV0IHByaW9yaXRpemVkIGRpZmZlcmVudGx5LCB0aGVuIHRoZXJlIGlzIG5vIHBy b2JsZW06IHRoZSBJRFAgY2FuIGhhbmRsZSB0aGUgRUtNIGxlbmd0aCByZXF1aXJlZCBieSB0aGUg c2lnbmF0dXJlIHNjaGVtZSB1c2VkIGluIHRoZSBSZWZlcnJlZCBiaW5kaW5nLCBjb3JyZWN0PyBJ IHRoaW5rIHRoZSBpc3N1ZSBvbmx5IGV4aXN0cyB3aGVuIHRoZSBJRFAgZG9lcyBub3Qgc3VwcG9y dCB0aGUgc2lnbmF0dXJlIHNjaGVtZSB0aGF0IGFuIFJQIG5lZ290aWF0ZXMuDQoNCg0Kw5ggIEJ1 dCBJIGd1ZXNzLCBhdCB0aGlzIHBvaW50LCBJJ2QgbGVhbiB0b3dhcmRzIDMpIGFzIHdlbGwuIEl0 IHNpbXBsaWZpZXMgdGhlIFRUUlAgY2FzZSBhcyB3ZWxsIGFzIHNlcnZlciBwcm9jZXNzaW5nIGxv Z2ljIChhc3N1bWluZyB0aGUgbG9naWMgd291bGQgYmUgZ2VuZXJhbGl6ZWQgdG8gYWNjb21tb2Rh dGUgZnV0dXJlIFRCIGtleSBwYXJhbXMgd2l0aCBhIGxvbmdlciBFS00pLg0KR3JlYXQuIExldOKA mXMgc2VlIGlmIHNvbWVvbmUgZWxzZSBjYXJlcyBvbmUgd2F5IG9yIGFub3RoZXIuIFRoaXMgd291 bGQgYmUgYSB0cml2aWFsIGNoYW5nZSB0byBtYWtlLCBmb2xsb3dpbmcgV0dMQ+KApg0K --_000_CY1PR0301MB0842FF5308B0E0049C4F2A7E8C520CY1PR0301MB0842_ Content-Type: text/html; charset="utf-8" Content-Transfer-Encoding: base64 PGh0bWwgeG1sbnM6dj0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTp2bWwiIHhtbG5zOm89InVy bjpzY2hlbWFzLW1pY3Jvc29mdC1jb206b2ZmaWNlOm9mZmljZSIgeG1sbnM6dz0idXJuOnNjaGVt YXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6d29yZCIgeG1sbnM6bT0iaHR0cDovL3NjaGVtYXMubWlj cm9zb2Z0LmNvbS9vZmZpY2UvMjAwNC8xMi9vbW1sIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcv VFIvUkVDLWh0bWw0MCI+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIg Y29udGVudD0idGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjxtZXRhIG5hbWU9IkdlbmVyYXRv ciIgY29udGVudD0iTWljcm9zb2Z0IFdvcmQgMTUgKGZpbHRlcmVkIG1lZGl1bSkiPg0KPHN0eWxl PjwhLS0NCi8qIEZvbnQgRGVmaW5pdGlvbnMgKi8NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6 V2luZ2RpbmdzOw0KCXBhbm9zZS0xOjUgMCAwIDAgMCAwIDAgMCAwIDA7fQ0KQGZvbnQtZmFjZQ0K CXtmb250LWZhbWlseToiQ2FtYnJpYSBNYXRoIjsNCglwYW5vc2UtMToyIDQgNSAzIDUgNCA2IDMg MiA0O30NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6Q2FsaWJyaTsNCglwYW5vc2UtMToyIDE1 IDUgMiAyIDIgNCAzIDIgNDt9DQovKiBTdHlsZSBEZWZpbml0aW9ucyAqLw0KcC5Nc29Ob3JtYWws IGxpLk1zb05vcm1hbCwgZGl2Lk1zb05vcm1hbA0KCXttYXJnaW46MGluOw0KCW1hcmdpbi1ib3R0 b206LjAwMDFwdDsNCglmb250LXNpemU6MTIuMHB0Ow0KCWZvbnQtZmFtaWx5OiJUaW1lcyBOZXcg Um9tYW4iLHNlcmlmO30NCmE6bGluaywgc3Bhbi5Nc29IeXBlcmxpbmsNCgl7bXNvLXN0eWxlLXBy aW9yaXR5Ojk5Ow0KCWNvbG9yOmJsdWU7DQoJdGV4dC1kZWNvcmF0aW9uOnVuZGVybGluZTt9DQph OnZpc2l0ZWQsIHNwYW4uTXNvSHlwZXJsaW5rRm9sbG93ZWQNCgl7bXNvLXN0eWxlLXByaW9yaXR5 Ojk5Ow0KCWNvbG9yOnB1cnBsZTsNCgl0ZXh0LWRlY29yYXRpb246dW5kZXJsaW5lO30NCnAuTXNv TGlzdFBhcmFncmFwaCwgbGkuTXNvTGlzdFBhcmFncmFwaCwgZGl2Lk1zb0xpc3RQYXJhZ3JhcGgN Cgl7bXNvLXN0eWxlLXByaW9yaXR5OjM0Ow0KCW1hcmdpbi10b3A6MGluOw0KCW1hcmdpbi1yaWdo dDowaW47DQoJbWFyZ2luLWJvdHRvbTowaW47DQoJbWFyZ2luLWxlZnQ6LjVpbjsNCgltYXJnaW4t Ym90dG9tOi4wMDAxcHQ7DQoJZm9udC1zaXplOjEyLjBwdDsNCglmb250LWZhbWlseToiVGltZXMg TmV3IFJvbWFuIixzZXJpZjt9DQpwLm1zb25vcm1hbDAsIGxpLm1zb25vcm1hbDAsIGRpdi5tc29u b3JtYWwwDQoJe21zby1zdHlsZS1uYW1lOm1zb25vcm1hbDsNCgltc28tbWFyZ2luLXRvcC1hbHQ6 YXV0bzsNCgltYXJnaW4tcmlnaHQ6MGluOw0KCW1zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvOw0K CW1hcmdpbi1sZWZ0OjBpbjsNCglmb250LXNpemU6MTIuMHB0Ow0KCWZvbnQtZmFtaWx5OiJUaW1l cyBOZXcgUm9tYW4iLHNlcmlmO30NCnAubS0xNTA0MjY3OTk1ODAxNTgyNzAwZ21haWwtbS0yNjg0 NDg1MTQxMjY3MjA2MzY5bXNvbGlzdHBhcmFncmFwaCwgbGkubS0xNTA0MjY3OTk1ODAxNTgyNzAw Z21haWwtbS0yNjg0NDg1MTQxMjY3MjA2MzY5bXNvbGlzdHBhcmFncmFwaCwgZGl2Lm0tMTUwNDI2 Nzk5NTgwMTU4MjcwMGdtYWlsLW0tMjY4NDQ4NTE0MTI2NzIwNjM2OW1zb2xpc3RwYXJhZ3JhcGgN Cgl7bXNvLXN0eWxlLW5hbWU6bV8tMTUwNDI2Nzk5NTgwMTU4MjcwMGdtYWlsLW1fLTI2ODQ0ODUx NDEyNjcyMDYzNjltc29saXN0cGFyYWdyYXBoOw0KCW1zby1tYXJnaW4tdG9wLWFsdDphdXRvOw0K CW1hcmdpbi1yaWdodDowaW47DQoJbXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG87DQoJbWFyZ2lu LWxlZnQ6MGluOw0KCWZvbnQtc2l6ZToxMi4wcHQ7DQoJZm9udC1mYW1pbHk6IlRpbWVzIE5ldyBS b21hbiIsc2VyaWY7fQ0Kc3Bhbi5tLTE1MDQyNjc5OTU4MDE1ODI3MDBnbWFpbC0NCgl7bXNvLXN0 eWxlLW5hbWU6bV8tMTUwNDI2Nzk5NTgwMTU4MjcwMGdtYWlsLTt9DQpwLm0tMTUwNDI2Nzk5NTgw MTU4MjcwMGdtYWlsLW0tMjY4NDQ4NTE0MTI2NzIwNjM2OW05NDM5NTU1OTQ5MDI0MTI3OG1zb2xp c3RwYXJhZ3JhcGgsIGxpLm0tMTUwNDI2Nzk5NTgwMTU4MjcwMGdtYWlsLW0tMjY4NDQ4NTE0MTI2 NzIwNjM2OW05NDM5NTU1OTQ5MDI0MTI3OG1zb2xpc3RwYXJhZ3JhcGgsIGRpdi5tLTE1MDQyNjc5 OTU4MDE1ODI3MDBnbWFpbC1tLTI2ODQ0ODUxNDEyNjcyMDYzNjltOTQzOTU1NTk0OTAyNDEyNzht c29saXN0cGFyYWdyYXBoDQoJe21zby1zdHlsZS1uYW1lOm1fLTE1MDQyNjc5OTU4MDE1ODI3MDBn bWFpbC1tXy0yNjg0NDg1MTQxMjY3MjA2MzY5bTk0Mzk1NTU5NDkwMjQxMjc4bXNvbGlzdHBhcmFn cmFwaDsNCgltc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzsNCgltYXJnaW4tcmlnaHQ6MGluOw0KCW1z by1tYXJnaW4tYm90dG9tLWFsdDphdXRvOw0KCW1hcmdpbi1sZWZ0OjBpbjsNCglmb250LXNpemU6 MTIuMHB0Ow0KCWZvbnQtZmFtaWx5OiJUaW1lcyBOZXcgUm9tYW4iLHNlcmlmO30NCnNwYW4uRW1h aWxTdHlsZTIxDQoJe21zby1zdHlsZS10eXBlOnBlcnNvbmFsOw0KCWZvbnQtZmFtaWx5OiJDYWxp YnJpIixzYW5zLXNlcmlmOw0KCWNvbG9yOndpbmRvd3RleHQ7fQ0Kc3Bhbi5FbWFpbFN0eWxlMjMN Cgl7bXNvLXN0eWxlLXR5cGU6cGVyc29uYWwtY29tcG9zZTsNCglmb250LWZhbWlseToiQ2FsaWJy aSIsc2Fucy1zZXJpZjsNCgljb2xvcjp3aW5kb3d0ZXh0O30NCi5Nc29DaHBEZWZhdWx0DQoJe21z by1zdHlsZS10eXBlOmV4cG9ydC1vbmx5Ow0KCWZvbnQtZmFtaWx5OiJDYWxpYnJpIixzYW5zLXNl cmlmO30NCkBwYWdlIFdvcmRTZWN0aW9uMQ0KCXtzaXplOjguNWluIDExLjBpbjsNCgltYXJnaW46 MS4waW4gMS4waW4gMS4waW4gMS4waW47fQ0KZGl2LldvcmRTZWN0aW9uMQ0KCXtwYWdlOldvcmRT ZWN0aW9uMTt9DQovKiBMaXN0IERlZmluaXRpb25zICovDQpAbGlzdCBsMA0KCXttc28tbGlzdC1p ZDo4MTk4ODE0NTg7DQoJbXNvLWxpc3QtdHlwZTpoeWJyaWQ7DQoJbXNvLWxpc3QtdGVtcGxhdGUt aWRzOi0xMDMyMjYwMDIwIC0yMTA1NzI5MjYgNjc2OTg2OTEgNjc2OTg2OTMgNjc2OTg2ODkgNjc2 OTg2OTEgNjc2OTg2OTMgNjc2OTg2ODkgNjc2OTg2OTEgNjc2OTg2OTM7fQ0KQGxpc3QgbDA6bGV2 ZWwxDQoJe21zby1sZXZlbC1zdGFydC1hdDoyOw0KCW1zby1sZXZlbC1udW1iZXItZm9ybWF0OmJ1 bGxldDsNCgltc28tbGV2ZWwtdGV4dDrvg5g7DQoJbXNvLWxldmVsLXRhYi1zdG9wOm5vbmU7DQoJ bXNvLWxldmVsLW51bWJlci1wb3NpdGlvbjpsZWZ0Ow0KCXRleHQtaW5kZW50Oi0uMjVpbjsNCglm b250LWZhbWlseTpXaW5nZGluZ3M7DQoJbXNvLWZhcmVhc3QtZm9udC1mYW1pbHk6Q2FsaWJyaTsN Cgltc28tYmlkaS1mb250LWZhbWlseToiVGltZXMgTmV3IFJvbWFuIjt9DQpAbGlzdCBsMDpsZXZl bDINCgl7bXNvLWxldmVsLW51bWJlci1mb3JtYXQ6YnVsbGV0Ow0KCW1zby1sZXZlbC10ZXh0Om87 DQoJbXNvLWxldmVsLXRhYi1zdG9wOm5vbmU7DQoJbXNvLWxldmVsLW51bWJlci1wb3NpdGlvbjps ZWZ0Ow0KCXRleHQtaW5kZW50Oi0uMjVpbjsNCglmb250LWZhbWlseToiQ291cmllciBOZXciO30N CkBsaXN0IGwwOmxldmVsMw0KCXttc28tbGV2ZWwtbnVtYmVyLWZvcm1hdDpidWxsZXQ7DQoJbXNv LWxldmVsLXRleHQ674KnOw0KCW1zby1sZXZlbC10YWItc3RvcDpub25lOw0KCW1zby1sZXZlbC1u dW1iZXItcG9zaXRpb246bGVmdDsNCgl0ZXh0LWluZGVudDotLjI1aW47DQoJZm9udC1mYW1pbHk6 V2luZ2RpbmdzO30NCkBsaXN0IGwwOmxldmVsNA0KCXttc28tbGV2ZWwtbnVtYmVyLWZvcm1hdDpi dWxsZXQ7DQoJbXNvLWxldmVsLXRleHQ674K3Ow0KCW1zby1sZXZlbC10YWItc3RvcDpub25lOw0K CW1zby1sZXZlbC1udW1iZXItcG9zaXRpb246bGVmdDsNCgl0ZXh0LWluZGVudDotLjI1aW47DQoJ Zm9udC1mYW1pbHk6U3ltYm9sO30NCkBsaXN0IGwwOmxldmVsNQ0KCXttc28tbGV2ZWwtbnVtYmVy LWZvcm1hdDpidWxsZXQ7DQoJbXNvLWxldmVsLXRleHQ6bzsNCgltc28tbGV2ZWwtdGFiLXN0b3A6 bm9uZTsNCgltc28tbGV2ZWwtbnVtYmVyLXBvc2l0aW9uOmxlZnQ7DQoJdGV4dC1pbmRlbnQ6LS4y NWluOw0KCWZvbnQtZmFtaWx5OiJDb3VyaWVyIE5ldyI7fQ0KQGxpc3QgbDA6bGV2ZWw2DQoJe21z by1sZXZlbC1udW1iZXItZm9ybWF0OmJ1bGxldDsNCgltc28tbGV2ZWwtdGV4dDrvgqc7DQoJbXNv LWxldmVsLXRhYi1zdG9wOm5vbmU7DQoJbXNvLWxldmVsLW51bWJlci1wb3NpdGlvbjpsZWZ0Ow0K CXRleHQtaW5kZW50Oi0uMjVpbjsNCglmb250LWZhbWlseTpXaW5nZGluZ3M7fQ0KQGxpc3QgbDA6 bGV2ZWw3DQoJe21zby1sZXZlbC1udW1iZXItZm9ybWF0OmJ1bGxldDsNCgltc28tbGV2ZWwtdGV4 dDrvgrc7DQoJbXNvLWxldmVsLXRhYi1zdG9wOm5vbmU7DQoJbXNvLWxldmVsLW51bWJlci1wb3Np dGlvbjpsZWZ0Ow0KCXRleHQtaW5kZW50Oi0uMjVpbjsNCglmb250LWZhbWlseTpTeW1ib2w7fQ0K QGxpc3QgbDA6bGV2ZWw4DQoJe21zby1sZXZlbC1udW1iZXItZm9ybWF0OmJ1bGxldDsNCgltc28t bGV2ZWwtdGV4dDpvOw0KCW1zby1sZXZlbC10YWItc3RvcDpub25lOw0KCW1zby1sZXZlbC1udW1i ZXItcG9zaXRpb246bGVmdDsNCgl0ZXh0LWluZGVudDotLjI1aW47DQoJZm9udC1mYW1pbHk6IkNv dXJpZXIgTmV3Ijt9DQpAbGlzdCBsMDpsZXZlbDkNCgl7bXNvLWxldmVsLW51bWJlci1mb3JtYXQ6 YnVsbGV0Ow0KCW1zby1sZXZlbC10ZXh0Ou+CpzsNCgltc28tbGV2ZWwtdGFiLXN0b3A6bm9uZTsN Cgltc28tbGV2ZWwtbnVtYmVyLXBvc2l0aW9uOmxlZnQ7DQoJdGV4dC1pbmRlbnQ6LS4yNWluOw0K CWZvbnQtZmFtaWx5OldpbmdkaW5nczt9DQpvbA0KCXttYXJnaW4tYm90dG9tOjBpbjt9DQp1bA0K CXttYXJnaW4tYm90dG9tOjBpbjt9DQotLT48L3N0eWxlPjwhLS1baWYgZ3RlIG1zbyA5XT48eG1s Pg0KPG86c2hhcGVkZWZhdWx0cyB2OmV4dD0iZWRpdCIgc3BpZG1heD0iMTAyNiIgLz4NCjwveG1s PjwhW2VuZGlmXS0tPjwhLS1baWYgZ3RlIG1zbyA5XT48eG1sPg0KPG86c2hhcGVsYXlvdXQgdjpl eHQ9ImVkaXQiPg0KPG86aWRtYXAgdjpleHQ9ImVkaXQiIGRhdGE9IjEiIC8+DQo8L286c2hhcGVs YXlvdXQ+PC94bWw+PCFbZW5kaWZdLS0+DQo8L2hlYWQ+DQo8Ym9keSBsYW5nPSJFTi1VUyIgbGlu az0iYmx1ZSIgdmxpbms9InB1cnBsZSI+DQo8ZGl2IGNsYXNzPSJXb3JkU2VjdGlvbjEiPg0KPHAg Y2xhc3M9Ik1zb0xpc3RQYXJhZ3JhcGgiIHN0eWxlPSJ0ZXh0LWluZGVudDotLjI1aW47bXNvLWxp c3Q6bDAgbGV2ZWwxIGxmbzEiPjwhW2lmICFzdXBwb3J0TGlzdHNdPjxzcGFuIHN0eWxlPSJmb250 LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OldpbmdkaW5ncyI+PHNwYW4gc3R5bGU9Im1zby1saXN0 Oklnbm9yZSI+w5g8c3BhbiBzdHlsZT0iZm9udDo3LjBwdCAmcXVvdDtUaW1lcyBOZXcgUm9tYW4m cXVvdDsiPiZuYnNwOw0KPC9zcGFuPjwvc3Bhbj48L3NwYW4+PCFbZW5kaWZdPkkgd291bGRuJ3Qg Y2hhcmFjdGVyaXplIGl0IGFzIG1pc2NvbmZpZ3VyYXRpb24gYnV0IHJhdGhlciBqdXN0IGRpZmZl cmVudCBkb21haW5zIHN1cHBvcnRpbmcgZGlmZmVyZW50IHNldHMgb2YgVEIga2V5IHBhcmFtcy4N CjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkm cXVvdDssc2Fucy1zZXJpZiI+PG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05v cm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2Fs aWJyaSZxdW90OyxzYW5zLXNlcmlmIj5BbiBSUCBuZWdvdGlhdGluZyBUQiBrZXkgcGFyYW1ldGVy cyB0aGF0IHRoZSBjb3JyZXNwb25kaW5nIElEUCBkb2VzIG5vdCBzdXBwb3J0IG1ha2VzIGl0IGlt cG9zc2libGUgZm9yIHRoZSBJRFAgdG8gYmluZCB0aGUgdG9rZW4sIHRoZXJlZm9yZSBJIHRoaW5r IG9mIGl0IGFzIGEgbWlzY29uZmlndXJhdGlvbi4NCiBVbmZvcnR1bmF0ZWx5LCBSUHMgYXJlIGxp bWl0ZWQgaW4gdGhlaXIgVEIgb3B0aW9ucyBieSB0aGVpciBJRFDigJlzIGNhcGFiaWxpdGllc+KA pjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxl PSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssc2Fucy1z ZXJpZiI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb0xpc3RQYXJh Z3JhcGgiIHN0eWxlPSJ0ZXh0LWluZGVudDotLjI1aW47bXNvLWxpc3Q6bDAgbGV2ZWwxIGxmbzEi PjwhW2lmICFzdXBwb3J0TGlzdHNdPjxzcGFuIHN0eWxlPSJmb250LWZhbWlseTpXaW5nZGluZ3Mi PjxzcGFuIHN0eWxlPSJtc28tbGlzdDpJZ25vcmUiPsOYPHNwYW4gc3R5bGU9ImZvbnQ6Ny4wcHQg JnF1b3Q7VGltZXMgTmV3IFJvbWFuJnF1b3Q7Ij4mbmJzcDsNCjwvc3Bhbj48L3NwYW4+PC9zcGFu PjwhW2VuZGlmXT5BbmQgY291bGQgaGFwcGVuIGV2ZW4gaWYgdGhlIHNldHMgd2VyZSB0aGUgc2Ft ZSBidXQgcHJpb3JpdGl6ZWQgZGlmZmVyZW50bHkuJm5ic3A7DQo8bzpwPjwvbzpwPjwvcD4NCjxw IGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFt aWx5OiZxdW90O0NhbGlicmkmcXVvdDssc2Fucy1zZXJpZiI+SWYgdGhlIFRCIGtleSBwYXJhbWV0 ZXIgc2V0cyBhcmUgdGhlIHNhbWUsIGJ1dCBwcmlvcml0aXplZCBkaWZmZXJlbnRseSwgdGhlbiB0 aGVyZSBpcyBubyBwcm9ibGVtOiB0aGUgSURQIGNhbiBoYW5kbGUgdGhlIEVLTSBsZW5ndGggcmVx dWlyZWQgYnkgdGhlIHNpZ25hdHVyZSBzY2hlbWUgdXNlZCBpbg0KIHRoZSBSZWZlcnJlZCBiaW5k aW5nLCBjb3JyZWN0PyBJIHRoaW5rIHRoZSBpc3N1ZSBvbmx5IGV4aXN0cyB3aGVuIHRoZSBJRFAg ZG9lcyBub3Qgc3VwcG9ydCB0aGUgc2lnbmF0dXJlIHNjaGVtZSB0aGF0IGFuIFJQIG5lZ290aWF0 ZXMuPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5 bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5z LXNlcmlmIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTGlzdFBh cmFncmFwaCIgc3R5bGU9InRleHQtaW5kZW50Oi0uMjVpbjttc28tbGlzdDpsMCBsZXZlbDEgbGZv MSI+PCFbaWYgIXN1cHBvcnRMaXN0c10+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9u dC1mYW1pbHk6V2luZ2RpbmdzIj48c3BhbiBzdHlsZT0ibXNvLWxpc3Q6SWdub3JlIj7DmDxzcGFu IHN0eWxlPSJmb250OjcuMHB0ICZxdW90O1RpbWVzIE5ldyBSb21hbiZxdW90OyI+Jm5ic3A7DQo8 L3NwYW4+PC9zcGFuPjwvc3Bhbj48IVtlbmRpZl0+QnV0IEkgZ3Vlc3MsIGF0IHRoaXMgcG9pbnQs IEknZCBsZWFuIHRvd2FyZHMgMykgYXMgd2VsbC4gSXQgc2ltcGxpZmllcyB0aGUgVFRSUCBjYXNl IGFzIHdlbGwgYXMgc2VydmVyIHByb2Nlc3NpbmcgbG9naWMgKGFzc3VtaW5nIHRoZSBsb2dpYyB3 b3VsZCBiZSBnZW5lcmFsaXplZCB0byBhY2NvbW1vZGF0ZSBmdXR1cmUgVEIga2V5IHBhcmFtcyB3 aXRoIGEgbG9uZ2VyIEVLTSkuPHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1p bHk6JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlmIj48bzpwPjwvbzpwPjwvc3Bhbj48L3A+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250 LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWYiPkdyZWF0LiBMZXTigJlzIHNl ZSBpZiBzb21lb25lIGVsc2UgY2FyZXMgb25lIHdheSBvciBhbm90aGVyLiBUaGlzIHdvdWxkIGJl IGEgdHJpdmlhbCBjaGFuZ2UgdG8gbWFrZSwgZm9sbG93aW5nIFdHTEPigKY8bzpwPjwvbzpwPjwv c3Bhbj48L3A+DQo8L2Rpdj4NCjwvYm9keT4NCjwvaHRtbD4NCg== --_000_CY1PR0301MB0842FF5308B0E0049C4F2A7E8C520CY1PR0301MB0842_--