Return-Path: X-Original-To: unbearable@ietfa.amsl.com Delivered-To: unbearable@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 1D42E129519 for ; Mon, 3 Apr 2017 12:48:17 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.021 X-Spam-Level: X-Spam-Status: No, score=-2.021 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=microsoft.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id v_l0KM6dNh4z for ; Mon, 3 Apr 2017 12:48:11 -0700 (PDT) Received: from NAM01-SN1-obe.outbound.protection.outlook.com (mail-sn1nam01on0123.outbound.protection.outlook.com [104.47.32.123]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 3BCB712951E for ; Mon, 3 Apr 2017 12:48:11 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=LowR5CnfqI9hafKM/Fa8z9mFP3IQ8Al05FhjjAhv40M=; b=fzfUSMwXU3vdbFdLAYQLCtbkelrViBirEEumT4BzfxfCHQGgxk5eHA74cZUn1xrlRQUQWYR0wNkwCWa1nw7ETuv9TqUw4KTFesQiDPfubT4kZgIftGo+s5D5dZZ53MT5JjbjVefUptFS9bkdNGSCPUOpbtTqsX3uV2L+Dy0uxfo= Received: from SN1PR21MB0096.namprd21.prod.outlook.com (10.161.254.16) by SN1PR21MB0093.namprd21.prod.outlook.com (10.161.254.154) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256_P256) id 15.1.1019.0; Mon, 3 Apr 2017 19:48:09 +0000 Received: from SN1PR21MB0096.namprd21.prod.outlook.com ([10.161.254.16]) by SN1PR21MB0096.namprd21.prod.outlook.com ([10.161.254.16]) with mapi id 15.01.1019.015; Mon, 3 Apr 2017 19:48:09 +0000 From: Andrei Popov To: Bill Cox , Nick Sullivan CC: "unbearable@ietf.org" Thread-Topic: [Unbearable] Binding tokens to scope in HTTP Thread-Index: AQHSrJoOJcT6z0eA3UmiRYUmB69ibKGz5QCAgAAlP5A= Date: Mon, 3 Apr 2017 19:48:09 +0000 Message-ID: References: In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: authentication-results: google.com; dkim=none (message not signed) header.d=none;google.com; dmarc=none action=none header.from=microsoft.com; x-originating-ip: [2001:4898:80e8:1::4ca] x-microsoft-exchange-diagnostics: 1; SN1PR21MB0093; 7:h7wDRuJQkLasCN1Tz60rjR5P7oYAFZUS99fsc9NO6MoflQ+hctB/KoaYLpd9vvAuAIWIib8XXBckBntctUYXQEVo8XId5c50h1zgLpdNyuQt3/m0MT6mwkoVznQfJgS/jOfCfYBA/lfrbgULUktBwLfgSAjSG3jJaPws7lstZ7XXLhXUfCGCFevV3GEQ/m04QfQJOXEs51HMgc0EPsLNkNdpO9CfJVVCkWy8DUHYd2ViPs92Ih9GiwPDzsfmS3C9gqhYHZIg641ZXDxj+fJ+4OCFr5VKemtSbPKv3cxg3jeVtlKrgjTdFXNbRZQDgJ289bDnKIQNCzKE4eBgGyk/TnE9GUg9fTkmmPThmr+zoFs= x-ms-office365-filtering-correlation-id: cd9a3511-13cf-45cf-9901-08d47aca5b1e x-ms-office365-filtering-ht: Tenant x-microsoft-antispam: UriScan:; BCL:0; PCL:0; RULEID:(22001)(2017030254075)(48565401081)(201703131423075)(201703031133081); SRVR:SN1PR21MB0093; x-microsoft-antispam-prvs: x-exchange-antispam-report-test: UriScan:(60795455431006)(158342451672863)(192374486261705)(100405760836317)(254730959083279)(21748063052155); x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(61425038)(6040450)(601004)(2401047)(8121501046)(5005006)(93006095)(93001095)(3002001)(10201501046)(6055026)(61426038)(61427038)(6041248)(20161123555025)(20161123562025)(20161123564025)(20161123560025)(201703131423075)(201702281528075)(201703061421075)(6072148); SRVR:SN1PR21MB0093; BCL:0; PCL:0; RULEID:; SRVR:SN1PR21MB0093; x-forefront-prvs: 0266491E90 x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(39400400002)(39850400002)(39410400002)(39450400003)(39840400002)(39860400002)(24454002)(377454003)(102836003)(790700001)(6116002)(77096006)(8990500004)(7696004)(19609705001)(5005710100001)(54356999)(6506006)(76176999)(229853002)(5660300001)(50986999)(6246003)(10290500002)(122556002)(236005)(8936002)(2950100002)(2900100001)(189998001)(74316002)(86612001)(4326008)(33656002)(81166006)(39060400002)(53936002)(6436002)(86362001)(38730400002)(8676002)(53386004)(7736002)(25786009)(7906003)(606005)(53546009)(54896002)(9686003)(6306002)(2906002)(1680700002)(99286003)(55016002)(10090500001)(3280700002)(3660700001); DIR:OUT; SFP:1102; SCL:1; SRVR:SN1PR21MB0093; H:SN1PR21MB0096.namprd21.prod.outlook.com; FPR:; SPF:None; MLV:ovrnspm; PTR:InfoNoRecords; LANG:en; spamdiagnosticoutput: 1:99 spamdiagnosticmetadata: NSPM Content-Type: multipart/alternative; boundary="_000_SN1PR21MB0096465FDA68EB982F457CC08C080SN1PR21MB0096namp_" MIME-Version: 1.0 X-OriginatorOrg: microsoft.com X-MS-Exchange-CrossTenant-originalarrivaltime: 03 Apr 2017 19:48:09.4134 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 72f988bf-86f1-41af-91ab-2d7cd011db47 X-MS-Exchange-Transport-CrossTenantHeadersStamped: SN1PR21MB0093 Archived-At: Subject: Re: [Unbearable] Binding tokens to scope in HTTP X-BeenThere: unbearable@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: "\"This list is for discussion of proposals for doing better than bearer tokens \(e.g. HTTP cookies, OAuth tokens etc.\) for web applications. The specific goal is chartering a WG focused on preventing security token export and replay attacks.\"" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 03 Apr 2017 19:48:17 -0000 --_000_SN1PR21MB0096465FDA68EB982F457CC08C080SN1PR21MB0096namp_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 VGhlIGlkZWEgb2Ygc2lnbmluZyBUQiBleHRlbnNpb25zIGhhcyBiZWVuIGRpc2N1c3NlZCBtdWx0 aXBsZSB0aW1lcyBvdmVyIHRoZSB5ZWFycy4NCk5vdCBzaWduaW5nIGV4dGVuc2lvbnMgYWxsb3dz IGFuIGV4dGVuc2lvbiB0byBzaWduIHRoZSBUQiBtZXNzYWdlLCB3aGljaCBpcyB3aGF0IGNvdWxk IGJlIHVzZWQgZm9yIGhhbmR5IHRoaW5ncyBsaWtlIGtleSBhdHRlc3RhdGlvbi4NCkl0IGlzIGxp a2VseSBhbHNvIHBvc3NpYmxlIHRvIGRvIGtleSBhdHRlc3RhdGlvbiB3aXRob3V0IHNpZ25pbmcg dGhlIGVudGlyZSBUQiBtZXNzYWdlLCBzbyBpZiB0aGUgV0cgd2FudHMgdG8gY2hhbmdlIHRoaXMg cHJpb3IgY29uc2Vuc3VzLCB3ZSBjYW4gZG8gc28uDQoNClRoZSByZWFzb24gVEIga2V5cyBhcmUg c2NvcGVkIHRvIGVUTEQrMSAoaW4gdGhlIGNhc2Ugb2YgSFRUUFMpIGlzIHRoYXQgdGhlIGNvb2tp ZXMgdGhlc2UgVEIga2V5cyBwcm90ZWN0IGFyZSBzY29wZWQgdG8gZVRMRCsxLg0KUGVyIElFVEY5 OCBkaXNjdXNzaW9uLCB0aGUgbmV4dCByZXZpc2lvbiBvZiB0aGUgSS1EcyB3aWxsIGNsYXJpZnkg dGhhdCBicm93c2VycyBjYW5ub3QgZXhjZWVkIHRoZSBzY29wZSBvZiBlVExEKzEuIElmIGNvb2tp ZXMgYXJlIHNjb3BlZCBtb3JlIG5hcnJvd2x5LCB0aGUgc2FtZSBjYW4gYmUgZG9uZSB3aXRoIFRC IGtleXMuDQoNCkNoZWVycywNCg0KQW5kcmVpDQoNCkZyb206IFVuYmVhcmFibGUgW21haWx0bzp1 bmJlYXJhYmxlLWJvdW5jZXNAaWV0Zi5vcmddIE9uIEJlaGFsZiBPZiBCaWxsIENveA0KU2VudDog TW9uZGF5LCBBcHJpbCAzLCAyMDE3IDEwOjI0IEFNDQpUbzogTmljayBTdWxsaXZhbiA8bmljaG9s YXMuc3VsbGl2YW5AZ21haWwuY29tPg0KQ2M6IHVuYmVhcmFibGVAaWV0Zi5vcmcNClN1YmplY3Q6 IFJlOiBbVW5iZWFyYWJsZV0gQmluZGluZyB0b2tlbnMgdG8gc2NvcGUgaW4gSFRUUA0KDQpUaGUg ZXh0ZW5zaW9ucyB1c2VkIHRvIGJlIGNvdmVyZWQgaW4gZWFybGllciBkcmFmdHMuICBJIGZvcmdl dCB3aHkgdGhpcyB3YXMgZHJvcHBlZCwgYnV0IElJUkMsIGl0IHdhcyBkaXNjdXNzZWQgb24gdGhp cyBsaXN0LiAgSW4gYW55IGNhc2UsIGl0IHNvdW5kcyBsaWtlIHRoZXJlIGFyZSBhIG51bWJlciBv ZiBwZW9wbGUgd2hvIHdvdWxkIHByZWZlciB0byBjaGFuZ2UgVEIgZXh0ZW5zaW9uIG51bWJlcnMg YW5kIGVmZmVjdGl2ZWx5IGJlIGEgbmV3IGV4dGVuc2lvbiByYXRoZXIgdGhhbiB1c2UgdGhlIGhl YWRlcidzIGV4dGVuc2lvbiBjYXBhYmlsaXR5Lg0KDQpZb3VyIGV4YW1wbGUgaGFzIGEgbWlub3Ig ZXJyb3I6ICBlVExEKzEgZm9yIGV4YW1wbGUuY29tPGh0dHA6Ly9leGFtcGxlLmNvbT4gaXMgZXhh bXBsZS5jb208aHR0cDovL2V4YW1wbGUuY29tPiwgc28gYS5leGFtcGxlLmNvbTxodHRwOi8vYS5l eGFtcGxlLmNvbT4gd291bGQgaGF2ZSB0aGUgc2FtZSBUQiBrZXkgYXMgYi5leGFtcGxlLmNvbTxo dHRwOi8vYi5leGFtcGxlLmNvbT4uICBIb3dldmVyLCB0aGUgaWRlYSBmb3IgdGhlIGF0dGFjayBp cyB2YWxpZC4gIGVUTEQrMSBiYXNlZCBzZWN1cml0eSBzZWVtcyB0byBiZSBhIGtsdWRnZS4gIEkg ZmVsdCB0aGF0IGJpbmRpbmcgdG8gdGhlIHNpdGVzIGNvdmVyZWQgYnkgYSBjZXJ0aWZpY2F0ZSBt aWdodCBtYWtlIHNlbnNlLCBidXQgaXQgZG9lcyBub3Qgd29yayBvdXQuICBGb3IgZXhhbXBsZSwg d2UgaGF2ZSBjZXJ0cyBmb3IgZ21haWwuY29tPGh0dHA6Ly9nbWFpbC5jb20+IGFuZCB5b3V0dWJl LmNvbTxodHRwOi8veW91dHViZS5jb20+LCBhbmQgY2VydGlmaWNhdGVzIGNvdmVyaW5nIGJvdGgs IElJUkMuICBXZSBjb3VsZCB1c2UgdGhlIHNhbWUgVEIgc2lnLCBib3VuZCB0byB0aGF0IGNlcnRp ZmljYXRlLCBmb3IgYSBsb3Qgb2Ygc2l0ZXMsIHJlZHVjaW5nIFRCIHNpZ25hdHVyZSBvdmVyaGVh ZC4gIEl0IGFsc28gbWFrZXMgc2Vuc2UgdG8gbWUgZnJvbSBhIHNlY3VyaXR5IHBlcnNwZWN0aXZl OiB0aGUgc2VydmVyIGhhcyBwcm92ZW4gb3duZXJzaGlwIG9mIGEgY29sbGVjdGlvbiBvZiBkb21h aW5zLCBzbyBqdXN0IGJpbmQgdG8gdGhhdC4gIFRoaXMgd291bGQgZWxpbWluYXRlIGFsbCB0aGUg ZVRMRCsxIHNlY3VyaXR5IGlzc3Vlcy4gIEhvd2V2ZXIsIHdlIGNhbid0IGNvdW50IG9uIHNlZWlu ZyB0aGUgc2FtZSBjZXJ0aWZpY2F0ZSBhbGwgdGhlIHRpbWUuICBTb21ldGltZXMgYSBzZXJ2ZXIg d2lsbCBwcmVzZW50IGEgbG9naW4uZXhhbXBsZS5jb208aHR0cDovL2xvZ2luLmV4YW1wbGUuY29t PiBjZXJ0aWZpY2F0ZSBvbiBvbmUgY29ubmVjdGlvbiwgYW5kICouZXhhbXBsZS5jb208aHR0cDov L2V4YW1wbGUuY29tPiBvbiBhbm90aGVyLiAgTW9zdCBsaWtlbHksIHRoZSBjb29raWUgdGhhdCBp cyB1c2VkIGZvciBhdXRoIHdvdWxkIGJlIGJvdW5kIHRvIGxvZ2luLmV4YW1wbGUuY29tPGh0dHA6 Ly9sb2dpbi5leGFtcGxlLmNvbT4sIGFuZCB3b3VsZCBiZSByZWplY3RlZCBmb3IgYWxsIG90aGVy ICouZXhhbXBsZS5jb208aHR0cDovL2V4YW1wbGUuY29tPiBkb21haW5zLg0KDQpJIGxpa2UgdGhl IGlkZWEgb2Ygc2lnbmluZyBleHRlbnNpb25zIGFuZCBhbHNvIHRoZSBob3N0IG5hbWUgZnJvbSB0 aGUgaG9zdCBoZWFkZXIuDQoNCkJpbGwNCg0KDQpPbiBNb24sIEFwciAzLCAyMDE3IGF0IDk6NDcg QU0sIE5pY2sgU3VsbGl2YW4gPG5pY2hvbGFzLnN1bGxpdmFuQGdtYWlsLmNvbTxtYWlsdG86bmlj aG9sYXMuc3VsbGl2YW5AZ21haWwuY29tPj4gd3JvdGU6DQpUaGUgdG9rZW4gYmluZGluZyBoZWFk ZXIgZG9lcyBub3QgaGF2ZSBhbnkgaWRlbnRpdHkgYm91bmQgdG8gaXQuIFRoaXMgaXMgcG90ZW50 aWFsbHkgcHJvYmxlbWF0aWMgYmVjYXVzZSBpdCBtYWtlcyBpdCBtdWNoIG1vcmUgbGlrZWx5IHRo YXQgdGhpcyBwcm90b2NvbCBpcyB2dWxuZXJhYmxlIHRvIHVua25vd24ga2V5IHNoYXJlIGlzc3Vl cy4NCg0KVW5rbm93biBrZXkgc2hhcmUgYXR0YWNrcyBoYXBwZW4gd2hlbiBhIHB1YmxpYyBrZXkg aXMgdXNlZCB3aXRob3V0IGJpbmRpbmcgaXQgdG8gYW4gaWRlbnRpdHkgYnkgYSBzaWduYXR1cmUu IEZvciBleGFtcGxlLCBSaWNoYXJkIEJhcm5lcyByZWNlbnRseSBwdWJsaXNoZWQgYSBkcmFmdCBk ZXNjcmliaW5nIGhvdyBEQU5FIHdpdGggcmF3IGtleXMgd2FzIHZ1bG5lcmFibGUgdG8gdGhpcyBz dHlsZSBvZjogaHR0cHM6Ly90b29scy5pZXRmLm9yZy9odG1sL2RyYWZ0LWJhcm5lcy1kYW5lLXVr cy0wMC4NCg0KSW4gc2VjdGlvbiAyLjEuIG9mIGRyYWZ0LWlldGYtdG9rYmluZC1odHRwcywgdGhl IGtleSBwYWlyIHNjb3BpbmcgaXMgZGVmaW5lZCB0byBiZSBlVExEKzEuIERlcGVuZGluZyBvbiB0 aGUgdGhyZWF0IG1vZGVsLCB0aGlzIHJlcXVpcmVtZW50IGNhbiBiZSBzdWJ2ZXJ0ZWQuDQoNCkNv bnNpZGVyIGFuIGF0dGFja2VyIHdobyBoYXMgYWNjZXNzIHRvIHJlYWQgYW5kIG1vZGlmeSBoZWFk ZXJzLCBidXQgbm90IHByaXZhdGUga2V5cy4gSW1hZ2luZSBhIGJ1Z2d5L21hbGljaW91cyBzZXJ2 aWNlIHdvcmtlciBvciBzb21ldGhpbmcgZWxzZSBvZiB0aGlzIHNvcnQuIE5vdyBpbWFnaW5lIGEg c2l0ZSB3aXRoIGEuZXhhbXBsZS5jb208aHR0cDovL2EuZXhhbXBsZS5jb20+IGFuZCBiLmV4YW1w bGUuY29tPGh0dHA6Ly9iLmV4YW1wbGUuY29tPiBhbmQgYSB3aWxkY2FyZCAqLmV4YW1wbGUuY29t PGh0dHA6Ly9leGFtcGxlLmNvbT4gY2VydGlmaWNhdGUuIFRoZSBhdHRhY2tlciBjYW4gdGFrZSB0 b2tlbiBiaW5kaW5nIGhlYWRlcnMgZnJvbSBhLmV4YW1wbGUuY29tPGh0dHA6Ly9hLmV4YW1wbGUu Y29tPiBhbmQgcHV0IHRoZW0gb24gcmVxdWVzdHMgdG8gYi5leGFtcGxlLmNvbTxodHRwOi8vYi5l eGFtcGxlLmNvbT4gYW5kIHRoZSBjb29raWVzIHNldCBvbiBiLmV4YW1wbGUuY29tPGh0dHA6Ly9i LmV4YW1wbGUuY29tPiB3aWxsIGJlIGJvdW5kIHRvIGEuZXhhbXBsZS5jb208aHR0cDovL2EuZXhh bXBsZS5jb20+J3Mga2V5Lg0KDQpUaGlzIGRvZXNuJ3Qgc291bmQgbGlrZSBhIGxhcmdlIGlzc3Vl LCBidXQgaXQncyBpbmRpY2F0aXZlIG9mIHRoZSB0eXBlIG9mIHN1YnRsZSBwcm9ibGVtcyBub3Qg YmluZGluZyB0aGUga2V5IHRvIGEgY29udGV4dCBjYW4gY2F1c2UuDQpJZiB0aGUgdG9rZW4gY29u dGV4dCB3YXMgYm91bmQgdG8gdGhlIHNjb3BlIGJ5IGluY2x1ZGluZyB0aGUgZVRMRCsxIGluIHRo ZSAob3IgdGhlIG9yaWdpbiBpZiB0aGUgYnJvd3NlciBpbnRlbmRzIHRvIHVzZSBzdHJpY3RlciB0 b2tlbiBzY29waW5nKSwgKmFuZCogdGhpcyBzY29wZSB3YXMgY292ZXJlZCBieSB0aGUgc2lnbmF0 dXJlIHRoZW4gdGhpcyB3b3VsZCBub3QgYmUgcG9zc2libGUuIFRoZSBzZXJ2ZXIgY291bGQgY2hl Y2sgdGhlIGhvc3QgaGVhZGVyIGFnYWluc3QgdGhlIHRva2VuIGNvbnRleHQgYW5kIHRoZW4gcmVm dXNlIHRoZSB0b2tlbiBiaW5kaW5nIGZvciBuZXcgY29va2llcy4NCg0KQSBsb2dpY2FsIHBsYWNl IHRvIHB1dCB0aGlzIHdvdWxkIGJlIGluIHRoZSBleHRlbnNpb25zIG9mIHRoZSB0b2tlbiBiaW5k aW5nIHN0cnVjdHVyZSwgYnV0IHVuZm9ydHVuYXRlbHkgdGhlIGV4dGVuc2lvbnMgaXMgbm90IHNp Z25lZCBhbmQgc28gY2FuIGJlIG1vZGlmaWVkLiBJcyB0aGVyZSBhIHJlYXNvbiB0aGUgZXh0ZW5z aW9ucyBmaWVsZCBvZiB0aGUgVG9rZW5CaW5kaW5nIHN0cnVjdHVyZSBpcyBub3Qgc2lnbmVkIGJ5 IHRoZSBwcml2YXRlIGtleT8NCg0KTmljaw0KDQpfX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fXw0KVW5iZWFyYWJsZSBtYWlsaW5nIGxpc3QNClVuYmVhcmFibGVA aWV0Zi5vcmc8bWFpbHRvOlVuYmVhcmFibGVAaWV0Zi5vcmc+DQpodHRwczovL3d3dy5pZXRmLm9y Zy9tYWlsbWFuL2xpc3RpbmZvL3VuYmVhcmFibGUNCg0K --_000_SN1PR21MB0096465FDA68EB982F457CC08C080SN1PR21MB0096namp_ Content-Type: text/html; charset="utf-8" Content-Transfer-Encoding: base64 PGh0bWwgeG1sbnM6dj0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTp2bWwiIHhtbG5zOm89InVy bjpzY2hlbWFzLW1pY3Jvc29mdC1jb206b2ZmaWNlOm9mZmljZSIgeG1sbnM6dz0idXJuOnNjaGVt YXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6d29yZCIgeG1sbnM6bT0iaHR0cDovL3NjaGVtYXMubWlj cm9zb2Z0LmNvbS9vZmZpY2UvMjAwNC8xMi9vbW1sIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcv VFIvUkVDLWh0bWw0MCI+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIg Y29udGVudD0idGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjxtZXRhIG5hbWU9IkdlbmVyYXRv ciIgY29udGVudD0iTWljcm9zb2Z0IFdvcmQgMTUgKGZpbHRlcmVkIG1lZGl1bSkiPg0KPHN0eWxl PjwhLS0NCi8qIEZvbnQgRGVmaW5pdGlvbnMgKi8NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6 IkNhbWJyaWEgTWF0aCI7DQoJcGFub3NlLTE6MiA0IDUgMyA1IDQgNiAzIDIgNDt9DQpAZm9udC1m YWNlDQoJe2ZvbnQtZmFtaWx5OkNhbGlicmk7DQoJcGFub3NlLTE6MiAxNSA1IDIgMiAyIDQgMyAy IDQ7fQ0KLyogU3R5bGUgRGVmaW5pdGlvbnMgKi8NCnAuTXNvTm9ybWFsLCBsaS5Nc29Ob3JtYWws IGRpdi5Nc29Ob3JtYWwNCgl7bWFyZ2luOjBpbjsNCgltYXJnaW4tYm90dG9tOi4wMDAxcHQ7DQoJ Zm9udC1zaXplOjExLjBwdDsNCglmb250LWZhbWlseToiQ2FsaWJyaSIsc2Fucy1zZXJpZjt9DQph OmxpbmssIHNwYW4uTXNvSHlwZXJsaW5rDQoJe21zby1zdHlsZS1wcmlvcml0eTo5OTsNCgljb2xv cjpibHVlOw0KCXRleHQtZGVjb3JhdGlvbjp1bmRlcmxpbmU7fQ0KYTp2aXNpdGVkLCBzcGFuLk1z b0h5cGVybGlua0ZvbGxvd2VkDQoJe21zby1zdHlsZS1wcmlvcml0eTo5OTsNCgljb2xvcjpwdXJw bGU7DQoJdGV4dC1kZWNvcmF0aW9uOnVuZGVybGluZTt9DQpwLm1zb25vcm1hbDAsIGxpLm1zb25v cm1hbDAsIGRpdi5tc29ub3JtYWwwDQoJe21zby1zdHlsZS1uYW1lOm1zb25vcm1hbDsNCgltc28t bWFyZ2luLXRvcC1hbHQ6YXV0bzsNCgltYXJnaW4tcmlnaHQ6MGluOw0KCW1zby1tYXJnaW4tYm90 dG9tLWFsdDphdXRvOw0KCW1hcmdpbi1sZWZ0OjBpbjsNCglmb250LXNpemU6MTEuMHB0Ow0KCWZv bnQtZmFtaWx5OiJDYWxpYnJpIixzYW5zLXNlcmlmO30NCnNwYW4uaG9lbnpiDQoJe21zby1zdHls ZS1uYW1lOmhvZW56Yjt9DQpzcGFuLkVtYWlsU3R5bGUxOQ0KCXttc28tc3R5bGUtdHlwZTpwZXJz b25hbDsNCglmb250LWZhbWlseToiQ2FsaWJyaSIsc2Fucy1zZXJpZjsNCgljb2xvcjp3aW5kb3d0 ZXh0O30NCnNwYW4uRW1haWxTdHlsZTIwDQoJe21zby1zdHlsZS10eXBlOnBlcnNvbmFsLWNvbXBv c2U7DQoJZm9udC1mYW1pbHk6IkNhbGlicmkiLHNhbnMtc2VyaWY7DQoJY29sb3I6d2luZG93dGV4 dDt9DQouTXNvQ2hwRGVmYXVsdA0KCXttc28tc3R5bGUtdHlwZTpleHBvcnQtb25seTsNCglmb250 LWZhbWlseToiQ2FsaWJyaSIsc2Fucy1zZXJpZjt9DQpAcGFnZSBXb3JkU2VjdGlvbjENCgl7c2l6 ZTo4LjVpbiAxMS4waW47DQoJbWFyZ2luOjEuMGluIDEuMGluIDEuMGluIDEuMGluO30NCmRpdi5X b3JkU2VjdGlvbjENCgl7cGFnZTpXb3JkU2VjdGlvbjE7fQ0KLS0+PC9zdHlsZT48IS0tW2lmIGd0 ZSBtc28gOV0+PHhtbD4NCjxvOnNoYXBlZGVmYXVsdHMgdjpleHQ9ImVkaXQiIHNwaWRtYXg9IjEw MjYiIC8+DQo8L3htbD48IVtlbmRpZl0tLT48IS0tW2lmIGd0ZSBtc28gOV0+PHhtbD4NCjxvOnNo YXBlbGF5b3V0IHY6ZXh0PSJlZGl0Ij4NCjxvOmlkbWFwIHY6ZXh0PSJlZGl0IiBkYXRhPSIxIiAv Pg0KPC9vOnNoYXBlbGF5b3V0PjwveG1sPjwhW2VuZGlmXS0tPg0KPC9oZWFkPg0KPGJvZHkgbGFu Zz0iRU4tVVMiIGxpbms9ImJsdWUiIHZsaW5rPSJwdXJwbGUiPg0KPGRpdiBjbGFzcz0iV29yZFNl Y3Rpb24xIj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPlRoZSBpZGVhIG9mIHNpZ25pbmcgVEIgZXh0 ZW5zaW9ucyBoYXMgYmVlbiBkaXNjdXNzZWQgbXVsdGlwbGUgdGltZXMgb3ZlciB0aGUgeWVhcnMu PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5Ob3Qgc2lnbmluZyBleHRlbnNp b25zIGFsbG93cyBhbiBleHRlbnNpb24gdG8gc2lnbiB0aGUgVEIgbWVzc2FnZSwgd2hpY2ggaXMg d2hhdCBjb3VsZCBiZSB1c2VkIGZvciBoYW5keSB0aGluZ3MgbGlrZSBrZXkgYXR0ZXN0YXRpb24u PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5JdCBpcyBsaWtlbHkgYWxzbyBw b3NzaWJsZSB0byBkbyBrZXkgYXR0ZXN0YXRpb24gd2l0aG91dCBzaWduaW5nIHRoZSBlbnRpcmUg VEIgbWVzc2FnZSwgc28gaWYgdGhlIFdHIHdhbnRzIHRvIGNoYW5nZSB0aGlzIHByaW9yIGNvbnNl bnN1cywgd2UgY2FuIGRvIHNvLjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+ PG86cD4mbmJzcDs8L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5UaGUgcmVhc29uIFRC IGtleXMgYXJlIHNjb3BlZCB0byBlVExEJiM0MzsxIChpbiB0aGUgY2FzZSBvZiBIVFRQUykgaXMg dGhhdCB0aGUgY29va2llcyB0aGVzZSBUQiBrZXlzIHByb3RlY3QgYXJlIHNjb3BlZCB0byBlVExE JiM0MzsxLjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+UGVyIElFVEY5OCBk aXNjdXNzaW9uLCB0aGUgbmV4dCByZXZpc2lvbiBvZiB0aGUgSS1EcyB3aWxsIGNsYXJpZnkgdGhh dCBicm93c2VycyBjYW5ub3QgZXhjZWVkIHRoZSBzY29wZSBvZiBlVExEJiM0MzsxLiBJZiBjb29r aWVzIGFyZSBzY29wZWQgbW9yZSBuYXJyb3dseSwgdGhlIHNhbWUgY2FuIGJlIGRvbmUgd2l0aCBU QiBrZXlzLjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8 L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5DaGVlcnMsPG86cD48L286cD48L3A+DQo8 cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29O b3JtYWwiPkFuZHJlaTxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4m bmJzcDs8L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48Yj5Gcm9tOjwvYj4gVW5iZWFy YWJsZSBbbWFpbHRvOnVuYmVhcmFibGUtYm91bmNlc0BpZXRmLm9yZ10NCjxiPk9uIEJlaGFsZiBP ZiA8L2I+QmlsbCBDb3g8YnI+DQo8Yj5TZW50OjwvYj4gTW9uZGF5LCBBcHJpbCAzLCAyMDE3IDEw OjI0IEFNPGJyPg0KPGI+VG86PC9iPiBOaWNrIFN1bGxpdmFuICZsdDtuaWNob2xhcy5zdWxsaXZh bkBnbWFpbC5jb20mZ3Q7PGJyPg0KPGI+Q2M6PC9iPiB1bmJlYXJhYmxlQGlldGYub3JnPGJyPg0K PGI+U3ViamVjdDo8L2I+IFJlOiBbVW5iZWFyYWJsZV0gQmluZGluZyB0b2tlbnMgdG8gc2NvcGUg aW4gSFRUUDxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8 L286cD48L3A+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+VGhlIGV4dGVuc2lvbnMgdXNl ZCB0byBiZSBjb3ZlcmVkIGluIGVhcmxpZXIgZHJhZnRzLiZuYnNwOyBJIGZvcmdldCB3aHkgdGhp cyB3YXMgZHJvcHBlZCwgYnV0IElJUkMsIGl0IHdhcyBkaXNjdXNzZWQgb24gdGhpcyBsaXN0LiZu YnNwOyBJbiBhbnkgY2FzZSwgaXQgc291bmRzIGxpa2UgdGhlcmUgYXJlIGEgbnVtYmVyIG9mIHBl b3BsZSB3aG8gd291bGQgcHJlZmVyIHRvIGNoYW5nZSBUQiBleHRlbnNpb24gbnVtYmVycyBhbmQN CiBlZmZlY3RpdmVseSBiZSBhIG5ldyBleHRlbnNpb24gcmF0aGVyIHRoYW4gdXNlIHRoZSBoZWFk ZXIncyBleHRlbnNpb24gY2FwYWJpbGl0eS48bzpwPjwvbzpwPjwvcD4NCjxkaXY+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNs YXNzPSJNc29Ob3JtYWwiPllvdXIgZXhhbXBsZSBoYXMgYSBtaW5vciBlcnJvcjogJm5ic3A7ZVRM RCYjNDM7MSBmb3IgPGEgaHJlZj0iaHR0cDovL2V4YW1wbGUuY29tIj4NCmV4YW1wbGUuY29tPC9h PiBpcyA8YSBocmVmPSJodHRwOi8vZXhhbXBsZS5jb20iPmV4YW1wbGUuY29tPC9hPiwgc28gPGEg aHJlZj0iaHR0cDovL2EuZXhhbXBsZS5jb20iPg0KYS5leGFtcGxlLmNvbTwvYT4gd291bGQgaGF2 ZSB0aGUgc2FtZSBUQiBrZXkgYXMgPGEgaHJlZj0iaHR0cDovL2IuZXhhbXBsZS5jb20iPmIuZXhh bXBsZS5jb208L2E+LiZuYnNwOyBIb3dldmVyLCB0aGUgaWRlYSBmb3IgdGhlIGF0dGFjayBpcyB2 YWxpZC4gJm5ic3A7ZVRMRCYjNDM7MSBiYXNlZCBzZWN1cml0eSBzZWVtcyB0byBiZSBhIGtsdWRn ZS4mbmJzcDsgSSBmZWx0IHRoYXQgYmluZGluZyB0byB0aGUgc2l0ZXMgY292ZXJlZCBieSBhIGNl cnRpZmljYXRlIG1pZ2h0IG1ha2UNCiBzZW5zZSwgYnV0IGl0IGRvZXMgbm90IHdvcmsgb3V0LiZu YnNwOyBGb3IgZXhhbXBsZSwgd2UgaGF2ZSBjZXJ0cyBmb3IgPGEgaHJlZj0iaHR0cDovL2dtYWls LmNvbSI+DQpnbWFpbC5jb208L2E+IGFuZCA8YSBocmVmPSJodHRwOi8veW91dHViZS5jb20iPnlv dXR1YmUuY29tPC9hPiwgYW5kIGNlcnRpZmljYXRlcyBjb3ZlcmluZyBib3RoLCBJSVJDLiZuYnNw OyBXZSBjb3VsZCB1c2UgdGhlIHNhbWUgVEIgc2lnLCBib3VuZCB0byB0aGF0IGNlcnRpZmljYXRl LCBmb3IgYSBsb3Qgb2Ygc2l0ZXMsIHJlZHVjaW5nIFRCIHNpZ25hdHVyZSBvdmVyaGVhZC4mbmJz cDsgSXQgYWxzbyBtYWtlcyBzZW5zZSB0byBtZSBmcm9tIGEgc2VjdXJpdHkgcGVyc3BlY3RpdmU6 DQogdGhlIHNlcnZlciBoYXMgcHJvdmVuIG93bmVyc2hpcCBvZiBhIGNvbGxlY3Rpb24gb2YgZG9t YWlucywgc28ganVzdCBiaW5kIHRvIHRoYXQuJm5ic3A7IFRoaXMgd291bGQgZWxpbWluYXRlIGFs bCB0aGUgZVRMRCYjNDM7MSBzZWN1cml0eSBpc3N1ZXMuJm5ic3A7IEhvd2V2ZXIsIHdlIGNhbid0 IGNvdW50IG9uIHNlZWluZyB0aGUgc2FtZSBjZXJ0aWZpY2F0ZSBhbGwgdGhlIHRpbWUuJm5ic3A7 IFNvbWV0aW1lcyBhIHNlcnZlciB3aWxsIHByZXNlbnQgYQ0KPGEgaHJlZj0iaHR0cDovL2xvZ2lu LmV4YW1wbGUuY29tIj5sb2dpbi5leGFtcGxlLmNvbTwvYT4gY2VydGlmaWNhdGUgb24gb25lIGNv bm5lY3Rpb24sIGFuZCAqLjxhIGhyZWY9Imh0dHA6Ly9leGFtcGxlLmNvbSI+ZXhhbXBsZS5jb208 L2E+IG9uIGFub3RoZXIuJm5ic3A7IE1vc3QgbGlrZWx5LCB0aGUgY29va2llIHRoYXQgaXMgdXNl ZCBmb3IgYXV0aCB3b3VsZCBiZSBib3VuZCB0bw0KPGEgaHJlZj0iaHR0cDovL2xvZ2luLmV4YW1w bGUuY29tIj5sb2dpbi5leGFtcGxlLmNvbTwvYT4sIGFuZCB3b3VsZCBiZSByZWplY3RlZCBmb3Ig YWxsIG90aGVyICouPGEgaHJlZj0iaHR0cDovL2V4YW1wbGUuY29tIj5leGFtcGxlLmNvbTwvYT4g ZG9tYWlucy48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3Jt YWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05v cm1hbCI+SSBsaWtlIHRoZSBpZGVhIG9mIHNpZ25pbmcgZXh0ZW5zaW9ucyBhbmQgYWxzbyB0aGUg aG9zdCBuYW1lIGZyb20gdGhlIGhvc3QgaGVhZGVyLjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8 ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8L2Rpdj4N CjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5CaWxsPG86cD48L286cD48L3A+DQo8L2Rpdj4N CjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjwvZGl2 Pg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48 L3A+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+T24gTW9uLCBBcHIgMywgMjAxNyBhdCA5 OjQ3IEFNLCBOaWNrIFN1bGxpdmFuICZsdDs8YSBocmVmPSJtYWlsdG86bmljaG9sYXMuc3VsbGl2 YW5AZ21haWwuY29tIiB0YXJnZXQ9Il9ibGFuayI+bmljaG9sYXMuc3VsbGl2YW5AZ21haWwuY29t PC9hPiZndDsgd3JvdGU6PG86cD48L286cD48L3A+DQo8YmxvY2txdW90ZSBzdHlsZT0iYm9yZGVy Om5vbmU7Ym9yZGVyLWxlZnQ6c29saWQgI0NDQ0NDQyAxLjBwdDtwYWRkaW5nOjBpbiAwaW4gMGlu IDYuMHB0O21hcmdpbi1sZWZ0OjQuOHB0O21hcmdpbi1yaWdodDowaW4iPg0KPGRpdj4NCjxkaXY+ DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+VGhlIHRva2VuIGJpbmRpbmcgaGVhZGVyIGRv ZXMgbm90IGhhdmUgYW55IGlkZW50aXR5IGJvdW5kIHRvIGl0LiBUaGlzIGlzIHBvdGVudGlhbGx5 IHByb2JsZW1hdGljIGJlY2F1c2UgaXQgbWFrZXMgaXQgbXVjaCBtb3JlIGxpa2VseSB0aGF0IHRo aXMgcHJvdG9jb2wgaXMgdnVsbmVyYWJsZSB0byB1bmtub3duIGtleSBzaGFyZSBpc3N1ZXMuPG86 cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZu YnNwOzwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPlVua25v d24ga2V5IHNoYXJlIGF0dGFja3MgaGFwcGVuIHdoZW4gYSBwdWJsaWMga2V5IGlzIHVzZWQgd2l0 aG91dCBiaW5kaW5nIGl0IHRvIGFuIGlkZW50aXR5IGJ5IGEgc2lnbmF0dXJlLiBGb3IgZXhhbXBs ZSwgUmljaGFyZCBCYXJuZXMgcmVjZW50bHkgcHVibGlzaGVkIGEgZHJhZnQgZGVzY3JpYmluZyBo b3cgREFORSB3aXRoIHJhdyBrZXlzIHdhcyB2dWxuZXJhYmxlIHRvIHRoaXMgc3R5bGUgb2Y6DQo8 YSBocmVmPSJodHRwczovL3Rvb2xzLmlldGYub3JnL2h0bWwvZHJhZnQtYmFybmVzLWRhbmUtdWtz LTAwIiB0YXJnZXQ9Il9ibGFuayI+aHR0cHM6Ly90b29scy5pZXRmLm9yZy9odG1sL2RyYWZ0LWJh cm5lcy1kYW5lLXVrcy0wMDwvYT4uPG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBj bGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxw IGNsYXNzPSJNc29Ob3JtYWwiPkluIHNlY3Rpb24gMi4xLiBvZiBkcmFmdC1pZXRmLXRva2JpbmQt aHR0cHMsIHRoZSBrZXkgcGFpciBzY29waW5nIGlzIGRlZmluZWQgdG8gYmUgZVRMRCYjNDM7MS4g RGVwZW5kaW5nIG9uIHRoZSB0aHJlYXQgbW9kZWwsIHRoaXMgcmVxdWlyZW1lbnQgY2FuIGJlIHN1 YnZlcnRlZC48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3Jt YWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05v cm1hbCIgc3R5bGU9Im1hcmdpbi1ib3R0b206MTIuMHB0Ij5Db25zaWRlciBhbiBhdHRhY2tlciB3 aG8gaGFzIGFjY2VzcyB0byByZWFkIGFuZCBtb2RpZnkgaGVhZGVycywgYnV0IG5vdCBwcml2YXRl IGtleXMuIEltYWdpbmUgYSBidWdneS9tYWxpY2lvdXMgc2VydmljZSB3b3JrZXIgb3Igc29tZXRo aW5nIGVsc2Ugb2YgdGhpcyBzb3J0LiBOb3cgaW1hZ2luZSBhIHNpdGUgd2l0aA0KPGEgaHJlZj0i aHR0cDovL2EuZXhhbXBsZS5jb20iIHRhcmdldD0iX2JsYW5rIj5hLmV4YW1wbGUuY29tPC9hPiBh bmQgPGEgaHJlZj0iaHR0cDovL2IuZXhhbXBsZS5jb20iIHRhcmdldD0iX2JsYW5rIj4NCmIuZXhh bXBsZS5jb208L2E+IGFuZCBhIHdpbGRjYXJkICouPGEgaHJlZj0iaHR0cDovL2V4YW1wbGUuY29t IiB0YXJnZXQ9Il9ibGFuayI+ZXhhbXBsZS5jb208L2E+IGNlcnRpZmljYXRlLiBUaGUgYXR0YWNr ZXIgY2FuIHRha2UgdG9rZW4gYmluZGluZyBoZWFkZXJzIGZyb20NCjxhIGhyZWY9Imh0dHA6Ly9h LmV4YW1wbGUuY29tIiB0YXJnZXQ9Il9ibGFuayI+YS5leGFtcGxlLmNvbTwvYT4gYW5kIHB1dCB0 aGVtIG9uIHJlcXVlc3RzIHRvDQo8YSBocmVmPSJodHRwOi8vYi5leGFtcGxlLmNvbSIgdGFyZ2V0 PSJfYmxhbmsiPmIuZXhhbXBsZS5jb208L2E+IGFuZCB0aGUgY29va2llcyBzZXQgb24NCjxhIGhy ZWY9Imh0dHA6Ly9iLmV4YW1wbGUuY29tIiB0YXJnZXQ9Il9ibGFuayI+Yi5leGFtcGxlLmNvbTwv YT4gd2lsbCBiZSBib3VuZCB0bw0KPGEgaHJlZj0iaHR0cDovL2EuZXhhbXBsZS5jb20iIHRhcmdl dD0iX2JsYW5rIj5hLmV4YW1wbGUuY29tPC9hPidzIGtleS48YnI+DQo8YnI+DQpUaGlzIGRvZXNu J3Qgc291bmQgbGlrZSBhIGxhcmdlIGlzc3VlLCBidXQgaXQncyBpbmRpY2F0aXZlIG9mIHRoZSB0 eXBlIG9mIHN1YnRsZSBwcm9ibGVtcyBub3QgYmluZGluZyB0aGUga2V5IHRvIGEgY29udGV4dCBj YW4gY2F1c2UuPG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9y bWFsIj5JZiB0aGUgdG9rZW4gY29udGV4dCB3YXMgYm91bmQgdG8gdGhlIHNjb3BlIGJ5IGluY2x1 ZGluZyB0aGUgZVRMRCYjNDM7MSBpbiB0aGUgKG9yIHRoZSBvcmlnaW4gaWYgdGhlIGJyb3dzZXIg aW50ZW5kcyB0byB1c2Ugc3RyaWN0ZXIgdG9rZW4gc2NvcGluZyksICphbmQqIHRoaXMgc2NvcGUg d2FzIGNvdmVyZWQgYnkgdGhlIHNpZ25hdHVyZSB0aGVuIHRoaXMgd291bGQgbm90IGJlIHBvc3Np YmxlLiBUaGUgc2VydmVyIGNvdWxkDQogY2hlY2sgdGhlIGhvc3QgaGVhZGVyIGFnYWluc3QgdGhl IHRva2VuIGNvbnRleHQgYW5kIHRoZW4gcmVmdXNlIHRoZSB0b2tlbiBiaW5kaW5nIGZvciBuZXcg Y29va2llcy48YnI+DQo8YnI+DQpBIGxvZ2ljYWwgcGxhY2UgdG8gcHV0IHRoaXMgd291bGQgYmUg aW4gdGhlIGV4dGVuc2lvbnMgb2YgdGhlIHRva2VuIGJpbmRpbmcgc3RydWN0dXJlLCBidXQgdW5m b3J0dW5hdGVseSB0aGUgZXh0ZW5zaW9ucyBpcyBub3Qgc2lnbmVkIGFuZCBzbyBjYW4gYmUgbW9k aWZpZWQuIElzIHRoZXJlIGEgcmVhc29uIHRoZSBleHRlbnNpb25zIGZpZWxkIG9mIHRoZSBUb2tl bkJpbmRpbmcgc3RydWN0dXJlIGlzIG5vdCBzaWduZWQgYnkgdGhlIHByaXZhdGUga2V5PzxvOnA+ PC9vOnA+PC9wPg0KPC9kaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpw PjwvcD4NCjwvZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gY2xhc3M9ImhvZW56YiI+ PHNwYW4gc3R5bGU9ImNvbG9yOiM4ODg4ODgiPk5pY2s8L3NwYW4+PC9zcGFuPjxvOnA+PC9vOnA+ PC9wPg0KPC9kaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWJvdHRvbTox Mi4wcHQiPjxicj4NCl9fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fPGJyPg0KVW5iZWFyYWJsZSBtYWlsaW5nIGxpc3Q8YnI+DQo8YSBocmVmPSJtYWlsdG86VW5i ZWFyYWJsZUBpZXRmLm9yZyI+VW5iZWFyYWJsZUBpZXRmLm9yZzwvYT48YnI+DQo8YSBocmVmPSJo dHRwczovL3d3dy5pZXRmLm9yZy9tYWlsbWFuL2xpc3RpbmZvL3VuYmVhcmFibGUiIHRhcmdldD0i X2JsYW5rIj5odHRwczovL3d3dy5pZXRmLm9yZy9tYWlsbWFuL2xpc3RpbmZvL3VuYmVhcmFibGU8 L2E+PG86cD48L286cD48L3A+DQo8L2Jsb2NrcXVvdGU+DQo8L2Rpdj4NCjxwIGNsYXNzPSJNc29O b3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjwvYm9keT4NCjwv aHRtbD4NCg== --_000_SN1PR21MB0096465FDA68EB982F457CC08C080SN1PR21MB0096namp_--